diff --git a/.claude/skills/publish-registry/SKILL.md b/.claude/skills/publish-registry/SKILL.md
deleted file mode 100644
index 3a1f60e5b..000000000
--- a/.claude/skills/publish-registry/SKILL.md
+++ /dev/null
@@ -1,36 +0,0 @@
----
-name: publish-registry
-description: Publish @agentos-software/* registry packages (per-package semver; dist-tag dev by default, latest only deliberately). Use whenever the user asks to publish or release registry software/agent packages.
----
-
-# Publish registry packages
-
-Registry packages version **independently** (per-package semver in each
-`package.json`). Publishing never moves `latest` unless asked. Full lifecycle
-reference: `registry/README.md`.
-
-1. **Build** (skip what's already built):
-
-   ```bash
-   just registry-native            # native wasm binaries, once per checkout (slow)
-   just registry-build [pkg]       # stage bin/ + assemble dist/package
-   just registry-status --remote   # local state vs published dist-tags
-   ```
-
-2. **Bump the version** in `registry/software/<pkg>/package.json` (or
-   `registry/agent/<pkg>/`) and commit it.
-
-3. **Publish**:
-
-   ```bash
-   just registry-publish <pkg>            # dist-tag dev (safe default)
-   just registry-publish <pkg> latest     # DELIBERATE release — moves latest
-   just registry-publish-all [tag]        # every built software package
-   ```
-
-Notes:
-- secure-exec **previews** (publish.yaml, no version input) automatically
-  include all registry packages under the branch dist-tag — no manual step for
-  preview consumers.
-- agent-os pins per-package: `just agentos-pkgs-update [tag]` /
-  `just agentos-pkgs-set-version <pkg> <v>` over there.
diff --git a/.claude/skills/release-preview/SKILL.md b/.claude/skills/release-preview/SKILL.md
deleted file mode 100644
index 3ab55de4c..000000000
--- a/.claude/skills/release-preview/SKILL.md
+++ /dev/null
@@ -1,34 +0,0 @@
----
-name: release-preview
-description: Cut a secure-exec release-preview — npm-only branch-dist-tag publish (registry packages included), no crates.io. Use when the user asks for a preview / release-preview of secure-exec, or to hand a build to a downstream.
----
-
-# Release-preview secure-exec
-
-A preview publishes the `@secure-exec/*` packages AND the `@agentos-software/*`
-registry packages to npm under the sanitized branch dist-tag, versioned
-`0.0.0-<branch>.<sha>`, from a fast debug build. No crates.io publish (it has
-no preview track — crate changes reach downstreams via their clone-at-sha
-builds), no git tag, no release assets.
-
-1. **Push the branch** you want previewed (jj colocated; use
-   `jj --config snapshot.max-new-file-size=16777216 ...` if large assets
-   complain).
-
-2. **Dispatch + watch**:
-
-   ```bash
-   just release-preview <branch>
-   run=$(gh run list -R rivet-dev/secure-exec --workflow=publish.yaml -L1 --json databaseId --jq '.[0].databaseId')
-   gh run watch -R rivet-dev/secure-exec "$run" --exit-status
-   ```
-
-3. **Consume**: `npm install @secure-exec/core@<sanitized-branch>` (same tag for
-   the registry packages). agent-os does NOT normally consume these directly —
-   it pins a sha in `.github/refs/secure-exec` and its own release-preview
-   auto-cuts the matching secure-exec preview (branch `agentos-dep-<sha7>`).
-
-Notes:
-- Release-preview is for previews ONLY; never cut a release with it — releases
-  go through the `release` skill.
-- On failure: `gh run view <run> --log-failed`, fix, re-dispatch, re-watch.
diff --git a/.claude/skills/release/SKILL.md b/.claude/skills/release/SKILL.md
deleted file mode 100644
index 969c2ed6f..000000000
--- a/.claude/skills/release/SKILL.md
+++ /dev/null
@@ -1,40 +0,0 @@
----
-name: release
-description: Cut a stable secure-exec release — npm + crates.io in lockstep, plus the manual @secure-exec/core wasm publish. Use whenever the user asks to release secure-exec (a real version, not a preview).
----
-
-# Release secure-exec (stable)
-
-Releases publish the `@secure-exec/*` npm packages AND the `secure-exec-*`
-crates at the SAME version. Previews are a different flow (npm-only branch
-dist-tag; see CLAUDE.md "Preview-publishing").
-
-1. **Cut the release** from a clean, pushed main checkout:
-
-   ```bash
-   just release --patch -y        # or --minor / --major / --version <v>; -rc. versions get the rc tag
-   ```
-
-   This bumps versions, commits, pushes, and dispatches `publish.yaml` with the
-   version input → release build: npm `@latest`, crates.io, GitHub release assets.
-
-2. **Watch it green**:
-
-   ```bash
-   run=$(gh run list -R rivet-dev/secure-exec --workflow=publish.yaml -L1 --json databaseId --jq '.[0].databaseId')
-   gh run watch -R rivet-dev/secure-exec "$run" --exit-status
-   ```
-
-3. **Manual step — `@secure-exec/core`** (CI-excluded; its tarball vendors the
-   wasm commands and CI does not build them):
-
-   ```bash
-   make -C registry/native wasm
-   cd packages/core && npm publish     # npm, NOT pnpm; same version CI used; prepack fails loud if commands absent
-   ```
-
-4. **Registry packages are NOT part of a release** — they version per-package;
-   use the `publish-registry` skill.
-
-5. Downstream: an agent-os release passes this version via
-   `just release --secure-exec-version <v>` (agent-os `release-agentos` skill).
diff --git a/.github/workflows/bench.yml b/.github/workflows/bench.yml
deleted file mode 100644
index 1e6751b43..000000000
--- a/.github/workflows/bench.yml
+++ /dev/null
@@ -1,113 +0,0 @@
-name: Bench
-
-on:
-  pull_request:
-    paths:
-      - "crates/**"
-      - "packages/**"
-  schedule:
-    - cron: "17 9 * * *"
-  workflow_dispatch:
-
-jobs:
-  gate:
-    name: Bench gate
-    if: github.event_name == 'pull_request'
-    runs-on: [self-hosted, agentos-builder]
-    timeout-minutes: 40
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-
-      - uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: wasm32-wasip1
-
-      - name: Enable pnpm
-        run: corepack enable
-
-      - name: Install benchmark workspace dependencies
-        run: pnpm install --frozen-lockfile --filter "@secure-exec/benchmarks..." --filter "@secure-exec/build-tools..."
-
-      - name: Build @secure-exec/core (bench ops import its dist)
-        run: pnpm --dir packages/core build
-
-      - name: Build guest WASM command binaries (ls_100 vmCmd row)
-        run: |
-          make -C registry/native wasm
-          node packages/core/scripts/copy-wasm-commands.mjs
-
-      - name: Build release benchmark binaries
-        run: |
-          cargo build --release -p secure-exec-sidecar
-          cargo build --release -p native-baseline
-          cargo build --release -p native-baseline --target wasm32-wasip1
-
-      - name: Check native benchmark op wiring
-        run: pnpm --dir packages/benchmarks bench:check
-
-      - name: Run quick benchmark gate
-        env:
-          SECURE_EXEC_SIDECAR_BIN: ${{ github.workspace }}/target/release/secure-exec-sidecar
-        run: pnpm --dir packages/benchmarks bench:gate
-
-  nightly:
-    name: Nightly benchmark matrix
-    if: github.event_name == 'schedule' || github.event_name == 'workflow_dispatch'
-    runs-on: [self-hosted, agentos-builder]
-    timeout-minutes: 90
-    steps:
-      - uses: actions/checkout@v4
-
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-
-      - uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: wasm32-wasip1
-
-      - name: Enable pnpm
-        run: corepack enable
-
-      - name: Install benchmark workspace dependencies
-        run: pnpm install --frozen-lockfile --filter "@secure-exec/benchmarks..." --filter "@secure-exec/build-tools..."
-
-      - name: Build @secure-exec/core (bench ops import its dist)
-        run: pnpm --dir packages/core build
-
-      - name: Build guest WASM command binaries (VM boot + ecosystem rows)
-        run: |
-          make -C registry/native wasm
-          node packages/core/scripts/copy-wasm-commands.mjs
-
-      - name: Build release benchmark binaries
-        run: |
-          cargo build --release -p secure-exec-sidecar
-          cargo build --release -p native-baseline
-          cargo build --release -p native-baseline --target wasm32-wasip1
-
-      - name: Check native benchmark op wiring
-        run: pnpm --dir packages/benchmarks bench:check
-
-      - name: Run full benchmark matrix
-        env:
-          SECURE_EXEC_SIDECAR_BIN: ${{ github.workspace }}/target/release/secure-exec-sidecar
-        run: pnpm --dir packages/benchmarks bench:matrix
-
-      - name: Write CI candidate baseline
-        env:
-          SECURE_EXEC_SIDECAR_BIN: ${{ github.workspace }}/target/release/secure-exec-sidecar
-        run: pnpm --dir packages/benchmarks bench:baseline -- --ci --from results/latency-matrix.json
-
-      - name: Upload benchmark results
-        uses: actions/upload-artifact@v4
-        with:
-          name: nightly-benchmark-results
-          path: |
-            packages/benchmarks/results/latency-matrix.json
-            packages/benchmarks/results/findings.json
-            packages/benchmarks/results/baseline-ci.json
diff --git a/.github/workflows/ci-nightly.yml b/.github/workflows/ci-nightly.yml
deleted file mode 100644
index 61d8bd780..000000000
--- a/.github/workflows/ci-nightly.yml
+++ /dev/null
@@ -1,31 +0,0 @@
-name: CI Nightly
-
-# The PR/push CI (ci.yml) is hermetic and fast: it skips network e2e and the
-# #[ignore]d resource-saturation tests. This job runs that expensive tail once
-# a day (and on demand) so the coverage still exists without taxing every PR.
-on:
-  schedule:
-    - cron: "23 8 * * *"
-  workflow_dispatch:
-
-concurrency:
-  group: ci-nightly-${{ github.ref }}
-  cancel-in-progress: false
-
-jobs:
-  extras:
-    runs-on: [self-hosted, agentos-builder]
-    timeout-minutes: 90
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-      - uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: wasm32-wasip1
-      - uses: taiki-e/install-action@v2
-        with:
-          tool: nextest
-      - run: npx --yes zx@8 scripts/ci.mjs nightly-extras
diff --git a/.github/workflows/ci.yml b/.github/workflows/ci.yml
index d037b96ba..fc04b178e 100644
--- a/.github/workflows/ci.yml
+++ b/.github/workflows/ci.yml
@@ -1,14 +1,3 @@
-# INTENTIONAL: the cache-heavy rust/registry jobs here (wasm-commands, rust-lint,
-# rust-test, js-test) run on the agent-os self-hosted builders
-# (runs-on: [self-hosted, agentos-builder]), NOT GitHub-hosted runners. The cheap
-# job (js-checks — typecheck/boundary/publish tests) stays on GitHub Actions,
-# which spins up small/dynamically and doesn't need the warm cache.
-# agent-os compiles the secure-exec crates (via the prepare-build clone), so both
-# repos share ONE warm secure-exec build cache on those boxes — the cargo
-# registry, the rusty_v8 V8 prebuilt, and sccache'd crate objects (shared
-# CARGO_HOME + SCCACHE_DIR). secure-exec CI warms the cache agent-os reuses, and
-# vice versa. On the self-hosted jobs the persistent on-disk target/ + CARGO_HOME
-# + sccache replace the GHA cache steps, which is why they're absent there.
 name: CI
 
 on:
@@ -17,57 +6,8 @@ on:
   push:
     branches: [main]
 
-concurrency:
-  group: ci-${{ github.workflow }}-${{ github.ref }}
-  cancel-in-progress: ${{ github.event_name == 'pull_request' }}
-
 jobs:
-  # Guest WASM command binaries are needed by both the cargo service tests and
-  # the JS turbo tests. Build them once here and hand them to both via an
-  # artifact so neither pays the cold build twice.
-  wasm-commands:
-    runs-on: [self-hosted, agentos-builder]
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-      - uses: dtolnay/rust-toolchain@stable
-        with:
-          targets: wasm32-wasip1
-      - run: pnpm install --frozen-lockfile --filter "@secure-exec/core..."
-      # Cache the built guest WASM commands. `make -C registry/native wasm` is a
-      # ~4.5min `cargo build -Z build-std` against a PATCHED std + vendored crates,
-      # so it recompiles std-from-source every run and the persistent target/
-      # can't warm it — but its OUTPUT is deterministic from the registry command
-      # sources. Key on those sources: a command/patch/toolchain change rebuilds,
-      # an unchanged tree restores in seconds. This is the one spot a GHA cache
-      # beats the on-disk target (the build is uncacheable; the output isn't).
-      - uses: actions/cache@v4
-        id: wasm-cache
-        with:
-          path: |
-            packages/core/commands
-            registry/native/target/wasm32-wasip1/release/commands
-          key: wasm-commands-v1-${{ hashFiles('registry/native/crates/**', 'registry/native/patches/**', 'registry/native/scripts/**', 'registry/native/Makefile', 'registry/native/Cargo.toml', 'registry/native/Cargo.lock', 'rust-toolchain.toml') }}
-      - if: steps.wasm-cache.outputs.cache-hit != 'true'
-        run: make -C registry/native wasm
-      - if: steps.wasm-cache.outputs.cache-hit != 'true'
-        run: node packages/core/scripts/copy-wasm-commands.mjs
-      - uses: actions/upload-artifact@v4
-        with:
-          name: wasm-commands
-          path: |
-            packages/core/commands
-            registry/native/target/wasm32-wasip1/release/commands
-          retention-days: 1
-          if-no-files-found: error
-
-  # Cheap job (typecheck / boundary checks / publish tests, no heavy cargo
-  # compile) — runs on GitHub-hosted runners, not the self-hosted pool, which is
-  # reserved for the cache-heavy rust/registry jobs.
-  js-checks:
+  static:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
@@ -77,60 +17,6 @@ jobs:
           node-version: 22
           cache: pnpm
       - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2
-        with:
-          workspaces: . -> target
-          key: js-checks
-      - run: npx --yes zx@8 scripts/ci.mjs js-checks
-      - run: node --test scripts/verify-fixed-versions.test.mjs
-      - run: pnpm --filter=publish exec tsx src/ci/verify-fixed-versions.ts
-
-  rust-lint:
-    runs-on: [self-hosted, agentos-builder]
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-      - uses: dtolnay/rust-toolchain@stable
-        with:
-          components: rustfmt, clippy
-      - run: pnpm install --frozen-lockfile --filter "@secure-exec/build-tools..."
-      - run: npx --yes zx@8 scripts/ci.mjs rust-lint
-
-  rust-test:
-    runs-on: [self-hosted, agentos-builder]
-    needs: wasm-commands
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-      - uses: dtolnay/rust-toolchain@stable
-      - uses: taiki-e/install-action@v2
-        with:
-          tool: nextest
-      - run: pnpm install --frozen-lockfile --filter "@secure-exec/core..." --filter "@secure-exec/build-tools..."
-      - uses: actions/download-artifact@v4
-        with:
-          name: wasm-commands
-      - run: npx --yes zx@8 scripts/ci.mjs rust-test
-        env:
-          NEXTEST_PROFILE: ci
-
-  js-test:
-    runs-on: [self-hosted, agentos-builder]
-    needs: wasm-commands
-    steps:
-      - uses: actions/checkout@v4
-      - uses: pnpm/action-setup@v4
-      - uses: actions/setup-node@v4
-        with:
-          node-version: 22
-      - uses: dtolnay/rust-toolchain@stable
-      - uses: actions/download-artifact@v4
-        with:
-          name: wasm-commands
-      - run: npx --yes zx@8 scripts/ci.mjs js-test
+      - run: pnpm install --frozen-lockfile
+      - run: pnpm check-types
+      - run: cargo check --workspace
diff --git a/.github/workflows/publish.yaml b/.github/workflows/publish.yaml
index 86b55fbc3..bd019fd9d 100644
--- a/.github/workflows/publish.yaml
+++ b/.github/workflows/publish.yaml
@@ -4,450 +4,12 @@ on:
   workflow_dispatch:
     inputs:
       version:
-        description: "Version to release. Leave empty for preview publish on the dispatched branch."
-        required: false
-        type: string
-      latest:
-        description: "Tag as @latest for release publishes"
         required: true
-        type: boolean
-        default: true
-
-concurrency:
-  group: publish-${{ github.ref }}
-  cancel-in-progress: false
-
-env:
-  R2_BUCKET: rivet-releases
-  R2_ENDPOINT: https://2a94c6a0ced8d35ea63cddc86c2681e7.r2.cloudflarestorage.com
-  SIDECAR_PLATFORMS: "linux-x64-gnu linux-arm64-gnu darwin-x64 darwin-arm64"
+        type: string
 
 jobs:
-  context:
-    name: "Context"
-    runs-on: ubuntu-latest
-    outputs:
-      trigger: ${{ steps.ctx.outputs.trigger }}
-      version: ${{ steps.ctx.outputs.version }}
-      npm_tag: ${{ steps.ctx.outputs.npm_tag }}
-      sha: ${{ steps.ctx.outputs.sha }}
-      latest: ${{ steps.ctx.outputs.latest }}
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 1
-      - run: corepack enable
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-          cache: pnpm
-          cache-dependency-path: pnpm-lock.yaml
-      - name: Install publish scripts
-        run: pnpm install --frozen-lockfile --filter=publish
-      - id: ctx
-        name: Resolve publish context
-        run: pnpm --filter=publish exec tsx src/ci/bin.ts context-output
-
-  build-sidecar:
-    needs: [context]
-    name: "Build sidecar (${{ matrix.platform }})"
-    strategy:
-      fail-fast: false
-      # The target set is dictated by the embedded V8 (rusty_v8): the build links
-      # a prebuilt `librusty_v8` static lib, and rusty_v8 publishes prebuilts for
-      # EXACTLY these four triples (linux-gnu + darwin, x64/arm64). musl has no
-      # prebuilt (would force a 30+ min V8 source build). Keep this list in
-      # lockstep with the rusty_v8 release assets when bumping the v8 crate.
-      matrix:
-        include:
-          - platform: linux-x64-gnu
-            runner: [self-hosted, agentos-builder]
-            target: x86_64-unknown-linux-gnu
-            binary: secure-exec-sidecar
-          - platform: linux-arm64-gnu
-            runner: ubuntu-22.04-arm
-            target: aarch64-unknown-linux-gnu
-            binary: secure-exec-sidecar
-    runs-on: ${{ matrix.runner }}
-    steps:
-      - uses: actions/checkout@v4
-      - run: corepack enable
-        shell: bash
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-          cache: pnpm
-          cache-dependency-path: pnpm-lock.yaml
-      - uses: dtolnay/rust-toolchain@stable
-      - name: Add Rust target to the pinned toolchain
-        shell: bash
-        run: |
-          set -euo pipefail
-          # The repo pins a toolchain via rust-toolchain.toml; cross targets
-          # must be added to *that* toolchain (not just `stable`), or cargo
-          # fails with "can't find crate for `core`" for the cross target.
-          channel=$(awk -F'"' '/channel/ {print $2; exit}' rust-toolchain.toml)
-          echo "Pinned toolchain channel: ${channel}"
-          rustup toolchain install "${channel}" --profile minimal
-          rustup target add --toolchain "${channel}" "${{ matrix.target }}"
-      - uses: Swatinem/rust-cache@v2
-        with:
-          workspaces: . -> target
-          key: ${{ matrix.target }}-${{ needs.context.outputs.trigger }}
-      - uses: actions/cache@v4
-        with:
-          path: ~/.cargo/.rusty_v8
-          key: ${{ runner.os }}-${{ matrix.target }}-rusty-v8-${{ hashFiles('Cargo.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-${{ matrix.target }}-rusty-v8-
-      # The v8-runtime build script generates the V8 bridge assets from
-      # packages/build-tools/node_modules, so the workspace must be installed
-      # before cargo build. Exclude the `website` package: it is a leaf nothing
-      # depends on, and pnpm 10.x intermittently loses a symlink-ordering race
-      # creating website/node_modules (ENOENT before linking pixelmatch).
-      - name: Install workspace dependencies
-        shell: bash
-        run: pnpm install --frozen-lockfile --filter='!@secure-exec/website'
-      - name: Build sidecar binary
-        id: build
-        shell: bash
-        env:
-          MATRIX_TARGET: ${{ matrix.target }}
-          MATRIX_PLATFORM: ${{ matrix.platform }}
-          MATRIX_BINARY: ${{ matrix.binary }}
-          TRIGGER: ${{ needs.context.outputs.trigger }}
-        run: |
-          set -euo pipefail
-
-          out="target/sidecar-artifacts/${MATRIX_PLATFORM}"
-          mkdir -p "$out"
-          if [ "$TRIGGER" = "release" ]; then
-            cargo build --release -p secure-exec-sidecar --target "$MATRIX_TARGET"
-            profile="release"
-          else
-            cargo build -p secure-exec-sidecar --target "$MATRIX_TARGET"
-            profile="debug"
-          fi
-          cp "target/${MATRIX_TARGET}/${profile}/${MATRIX_BINARY}" "$out/${MATRIX_BINARY}"
-          echo "dir=$out" >> "$GITHUB_OUTPUT"
-      - uses: actions/upload-artifact@v4
-        with:
-          name: sidecar-${{ matrix.platform }}
-          path: ${{ steps.build.outputs.dir }}
-          if-no-files-found: error
-
-  # darwin is cross-compiled via osxcross in a Linux container (rivet's approach)
-  # rather than on macOS runners — those queue for scarce macos-13/14 capacity and
-  # stall the whole publish. The osxcross base image carries the macOS SDK + Node
-  # + pnpm; we build on plain ubuntu with `docker build`. No Depot needed.
-  build-sidecar-darwin:
-    needs: [context]
-    name: "Build sidecar (${{ matrix.platform }})"
-    strategy:
-      fail-fast: false
-      matrix:
-        include:
-          - platform: darwin-x64
-            target: x86_64-apple-darwin
-            clang: x86_64-apple-darwin20.4
-          - platform: darwin-arm64
-            target: aarch64-apple-darwin
-            clang: aarch64-apple-darwin20.4
-    runs-on: ubuntu-22.04
-    steps:
-      - uses: actions/checkout@v4
-      - name: Log in to ghcr.io (pull the osxcross base image)
-        run: echo "${{ secrets.GITHUB_TOKEN }}" | docker login ghcr.io -u ${{ github.actor }} --password-stdin
-      - name: Cross-compile via osxcross
-        run: |
-          set -euo pipefail
-          DOCKER_BUILDKIT=1 docker build \
-            -f docker/build/darwin.Dockerfile \
-            --build-arg TARGET=${{ matrix.target }} \
-            --build-arg CLANG=${{ matrix.clang }} \
-            --build-arg TRIGGER=${{ needs.context.outputs.trigger }} \
-            -t sidecar-${{ matrix.platform }} .
-          out="target/sidecar-artifacts/${{ matrix.platform }}"
-          mkdir -p "$out"
-          cid=$(docker create sidecar-${{ matrix.platform }})
-          docker cp "$cid:/artifacts/secure-exec-sidecar" "$out/secure-exec-sidecar"
-          docker rm "$cid"
-          test -f "$out/secure-exec-sidecar"
-      - uses: actions/upload-artifact@v4
-        with:
-          name: sidecar-${{ matrix.platform }}
-          path: target/sidecar-artifacts/${{ matrix.platform }}
-          if-no-files-found: error
-
-  publish-npm:
-    needs: [context, build-sidecar, build-sidecar-darwin]
-    name: "Publish npm"
-    if: ${{ !cancelled() && needs.build-sidecar.result == 'success' && needs.build-sidecar-darwin.result == 'success' }}
-    runs-on: ubuntu-latest
-    steps:
-      - uses: actions/checkout@v4
-      - run: corepack enable
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-          cache: pnpm
-          cache-dependency-path: pnpm-lock.yaml
-          registry-url: https://registry.npmjs.org
-      - uses: dtolnay/rust-toolchain@stable
-      - name: Install registry-native Rust toolchain
-        shell: bash
-        run: |
-          set -euo pipefail
-          channel=$(awk -F'"' '/channel/ {print $2; exit}' registry/native/rust-toolchain.toml)
-          echo "Registry-native toolchain channel: ${channel}"
-          rustup toolchain install "${channel}" --profile minimal --component rust-src --target wasm32-wasip1
-      - uses: Swatinem/rust-cache@v2
-        with:
-          workspaces: |
-            registry/native -> registry/native/target
-      # Install the full workspace except the `website` package. website is a
-      # leaf (nothing depends on it, and it is not published here), and pnpm 10.x
-      # intermittently loses a symlink-ordering race creating website/node_modules
-      # (ENOENT before linking pixelmatch). Excluding it deterministically avoids
-      # the flake. `--frozen-lockfile` still validates the full lockfile.
-      - name: Install workspace dependencies
-        shell: bash
-        run: pnpm install --frozen-lockfile --filter='!@secure-exec/website'
-      - uses: actions/download-artifact@v4
-        with:
-          pattern: sidecar-*
-          path: artifacts
-      - name: Place sidecar binaries into platform packages
-        run: |
-          set -euo pipefail
-          for p in $SIDECAR_PLATFORMS; do
-            binname="secure-exec-sidecar"
-            bin="artifacts/sidecar-${p}/${binname}"
-            dest="packages/sidecar/npm/${p}"
-            if [ ! -f "$bin" ]; then
-              echo "::error::missing secure-exec-sidecar binary artifact for ${p}"
-              exit 1
-            fi
-            if [ ! -d "$dest" ]; then
-              echo "::error::missing platform package dir $dest"
-              exit 1
-            fi
-            cp "$bin" "${dest}/${binname}"
-            chmod +x "${dest}/${binname}"
-            echo "Placed binary for ${p}"
-          done
-      - name: Build and vendor core WASM commands
-        run: |
-          set -euo pipefail
-          make -C registry/native wasm
-          pnpm --dir packages/core run copy-commands
-          test -f packages/core/commands/sh
-      - name: Bump package versions for build
-        env:
-          # Previews publish the registry packages under the branch dist-tag too.
-          PUBLISH_INCLUDE_REGISTRY_PACKAGES: ${{ needs.context.outputs.trigger != 'release' && '1' || '' }}
-        run: |
-          pnpm --filter=publish exec tsx src/ci/bin.ts bump-versions \
-            --version ${{ needs.context.outputs.version }} \
-            --version-only
-      - name: Build TypeScript packages
-        run: |
-          npx turbo build \
-            --filter='!./examples/*' \
-            --filter='!@secure-exec/website'
-      - name: Finalize package versions for publish
-        env:
-          PUBLISH_INCLUDE_REGISTRY_PACKAGES: ${{ needs.context.outputs.trigger != 'release' && '1' || '' }}
-        run: |
-          pnpm --filter=publish exec tsx src/ci/bin.ts bump-versions \
-            --version ${{ needs.context.outputs.version }}
-      - name: Publish npm packages
-        env:
-          NODE_AUTH_TOKEN: ${{ secrets.NPM_TOKEN }}
-          PUBLISH_INCLUDE_REGISTRY_PACKAGES: ${{ needs.context.outputs.trigger != 'release' && '1' || '' }}
-        run: |
-          pnpm --filter=publish exec tsx src/ci/bin.ts publish-npm \
-            --tag ${{ needs.context.outputs.npm_tag }} \
-            --parallel 16 \
-            --retries 3 \
-            ${{ needs.context.outputs.trigger == 'release' && '--release-mode' || '' }}
-
-  release-assets:
-    needs: [context, build-sidecar, build-sidecar-darwin]
-    name: "Release assets"
-    if: ${{ !cancelled() && needs.build-sidecar.result == 'success' && needs.build-sidecar-darwin.result == 'success' && needs.context.outputs.trigger == 'release' }}
-    runs-on: ubuntu-latest
-    permissions:
-      contents: write
-    steps:
-      - uses: actions/checkout@v4
-        with:
-          fetch-depth: 0
-      - run: corepack enable
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-          cache: pnpm
-          cache-dependency-path: pnpm-lock.yaml
-      - run: pnpm install --frozen-lockfile --filter=publish
-      - uses: actions/download-artifact@v4
-        with:
-          pattern: sidecar-*
-          path: artifacts
-      - name: Stage release assets
-        env:
-          VERSION: ${{ needs.context.outputs.version }}
-        run: |
-          set -euo pipefail
-          declare -A PLATFORM_TARGET=(
-            [linux-x64-gnu]=x86_64-unknown-linux-gnu
-            [linux-arm64-gnu]=aarch64-unknown-linux-gnu
-            [darwin-x64]=x86_64-apple-darwin
-            [darwin-arm64]=aarch64-apple-darwin
-          )
-          mkdir -p release-assets
-          for p in $SIDECAR_PLATFORMS; do
-            binname="secure-exec-sidecar"
-            suffix=""
-            bin="artifacts/sidecar-${p}/${binname}"
-            if [ -f "$bin" ]; then
-              target="${PLATFORM_TARGET[$p]}"
-              cp "$bin" "release-assets/secure-exec-sidecar-${target}${suffix}"
-            else
-              echo "::warning::missing secure-exec-sidecar binary for ${p}"
-            fi
-          done
-          for f in \
-            pyodide.asm.wasm \
-            pyodide.asm.js \
-            python_stdlib.zip \
-            numpy-2.2.5-cp313-cp313-pyodide_2025_0_wasm32.whl \
-            pandas-2.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl; do
-            cp "crates/execution/assets/pyodide/${f}" "release-assets/${f}"
-          done
-      - name: Create GitHub release and upload assets
-        env:
-          GH_TOKEN: ${{ github.token }}
-          VERSION: ${{ needs.context.outputs.version }}
-          NPM_TAG: ${{ needs.context.outputs.npm_tag }}
-        run: |
-          set -euo pipefail
-          if ! gh release view "v${VERSION}" >/dev/null 2>&1; then
-            PRERELEASE=""
-            if [ "${NPM_TAG}" = "rc" ]; then PRERELEASE="--prerelease"; fi
-            gh release create "v${VERSION}" --title "v${VERSION}" --generate-notes $PRERELEASE
-          fi
-          gh release upload "v${VERSION}" release-assets/* --clobber
-      - name: Keep Agent OS Pyodide release assets reachable
-        env:
-          GH_TOKEN: ${{ secrets.AGENTOS_RELEASES_TOKEN }}
-          VERSION: ${{ needs.context.outputs.version }}
-          NPM_TAG: ${{ needs.context.outputs.npm_tag }}
-        run: |
-          set -euo pipefail
-          if [ -z "${GH_TOKEN:-}" ]; then
-            echo "AGENTOS_RELEASES_TOKEN not configured; skipping Agent OS compatibility upload."
-            exit 0
-          fi
-          if ! gh release view "v${VERSION}" --repo rivet-dev/agentos >/dev/null 2>&1; then
-            PRERELEASE=""
-            if [ "${NPM_TAG}" = "rc" ]; then PRERELEASE="--prerelease"; fi
-            gh release create "v${VERSION}" --repo rivet-dev/agentos --title "v${VERSION}" --generate-notes $PRERELEASE
-          fi
-          gh release upload "v${VERSION}" \
-            release-assets/pyodide.asm.wasm \
-            release-assets/pyodide.asm.js \
-            release-assets/python_stdlib.zip \
-            release-assets/numpy-2.2.5-cp313-cp313-pyodide_2025_0_wasm32.whl \
-            release-assets/pandas-2.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl \
-            --repo rivet-dev/agentos \
-            --clobber
-      - name: Upload sidecar binaries to R2
-        env:
-          R2_RELEASES_ACCESS_KEY_ID: ${{ secrets.R2_RELEASES_ACCESS_KEY_ID }}
-          R2_RELEASES_SECRET_ACCESS_KEY: ${{ secrets.R2_RELEASES_SECRET_ACCESS_KEY }}
-          VERSION: ${{ needs.context.outputs.version }}
-          SHA: ${{ needs.context.outputs.sha }}
-          LATEST: ${{ needs.context.outputs.latest }}
-        run: |
-          set -uo pipefail
-          if [ -z "${R2_RELEASES_ACCESS_KEY_ID:-}" ] || [ -z "${R2_RELEASES_SECRET_ACCESS_KEY:-}" ]; then
-            echo "R2 credentials not configured; skipping R2 upload."
-            exit 0
-          fi
-          set -e
-          pnpm --filter=publish exec tsx src/ci/bin.ts upload-r2 \
-            --source "$GITHUB_WORKSPACE/release-assets" --sha "$SHA"
-          pnpm --filter=publish exec tsx src/ci/bin.ts copy-r2 \
-            --sha "$SHA" --version "$VERSION" --latest "$LATEST"
-
-  publish-crates:
-    needs: [context, build-sidecar, build-sidecar-darwin, release-assets]
-    name: "Publish crates.io"
-    # Release-only: on previews the crates publish is a dry-run that still does a
-    # full compile/package, and any error there reddened the WHOLE run even though
-    # the npm deliverable published fine (FALLING_OUT.md §4b). The 4 build-sidecar
-    # legs already compile every crate, so the preview dry-run added only noise.
-    if: ${{ !cancelled() && needs.build-sidecar.result == 'success' && needs.release-assets.result == 'success' && needs.context.outputs.trigger == 'release' }}
+  static:
     runs-on: ubuntu-latest
     steps:
       - uses: actions/checkout@v4
-      - run: corepack enable
-      - uses: actions/setup-node@v4
-        with:
-          node-version: "22"
-          cache: pnpm
-          cache-dependency-path: pnpm-lock.yaml
-      - uses: dtolnay/rust-toolchain@stable
-      - uses: Swatinem/rust-cache@v2
-        with:
-          workspaces: . -> target
-      - uses: actions/cache@v4
-        with:
-          path: ~/.cargo/.rusty_v8
-          key: ${{ runner.os }}-x86_64-unknown-linux-gnu-rusty-v8-${{ hashFiles('Cargo.lock') }}
-          restore-keys: |
-            ${{ runner.os }}-x86_64-unknown-linux-gnu-rusty-v8-
-      # Install the full workspace except the `website` package. website is a
-      # leaf (nothing depends on it, and it is not published here), and pnpm 10.x
-      # intermittently loses a symlink-ordering race creating website/node_modules
-      # (ENOENT before linking pixelmatch). Excluding it deterministically avoids
-      # the flake. `--frozen-lockfile` still validates the full lockfile.
-      - name: Install workspace dependencies
-        shell: bash
-        run: pnpm install --frozen-lockfile --filter='!@secure-exec/website'
-      - name: Bump Cargo versions
-        run: |
-          pnpm --filter=publish exec tsx src/ci/bin.ts bump-versions \
-            --version ${{ needs.context.outputs.version }} \
-            --version-only
-      - name: Stage vendored V8 bridge bundles and base filesystem
-        run: |
-          set -euo pipefail
-          for crate in execution v8-runtime; do
-            out="crates/${crate}/assets/generated"
-            mkdir -p "$out"
-            node packages/build-tools/scripts/build-v8-bridge.mjs --out-dir "$out"
-          done
-          git add -f crates/execution/assets/generated crates/v8-runtime/assets/generated
-          mkdir -p crates/kernel/assets crates/sidecar/assets
-          # The single committed base filesystem lives in the vfs crate (the vfs
-          # crate embeds it via include_str!); the old packages/core/fixtures/
-          # path no longer exists, which broke this crates.io publish job.
-          cp crates/vfs/assets/base-filesystem.json crates/kernel/assets/base-filesystem.json
-          cp crates/vfs/assets/base-filesystem.json crates/sidecar/assets/base-filesystem.json
-      - name: Dry-run crate publish
-        if: ${{ needs.context.outputs.trigger != 'release' }}
-        run: |
-          pnpm --filter=publish exec tsx src/ci/bin.ts publish-crates \
-            --version ${{ needs.context.outputs.version }} \
-            --dry-run \
-            --allow-dirty
-      - name: Publish crates
-        if: ${{ needs.context.outputs.trigger == 'release' }}
-        env:
-          CARGO_REGISTRY_TOKEN: ${{ secrets.CARGO_REGISTRY_TOKEN }}
-        run: |
-          pnpm --filter=publish exec tsx src/ci/bin.ts publish-crates \
-            --version ${{ needs.context.outputs.version }} \
-            --allow-dirty
+      - run: echo "secure-exec publishes generated compatibility shims only."
diff --git a/.github/workflows/sync-from-agentos.yml b/.github/workflows/sync-from-agentos.yml
new file mode 100644
index 000000000..be0e6adf0
--- /dev/null
+++ b/.github/workflows/sync-from-agentos.yml
@@ -0,0 +1,10 @@
+name: sync-from-agentos
+
+on:
+  workflow_dispatch:
+
+jobs:
+  static:
+    runs-on: ubuntu-latest
+    steps:
+      - run: echo "Regenerate this mirror from AgentOS with scripts/generate-secure-exec-mirror.mjs."
diff --git a/CLAUDE.md b/CLAUDE.md
index 237d5efed..4be34ceb2 100644
--- a/CLAUDE.md
+++ b/CLAUDE.md
@@ -1,185 +1,3 @@
 # secure-exec
 
-secure-exec is the fully virtualized runtime extracted from Agent OS. The kernel provides a POSIX-like VM with a virtual filesystem, process table, socket table, pipes, PTYs, permission policy, and managed language runtimes.
-
-## Trust Model
-
-secure-exec is a sandbox: it runs untrusted code safely for a trusted caller. Decide which side of this boundary something is on before judging whether it is a security bug. Three components:
-
-- **Client** (trusted, *except for anything it submits for execution*). The party that speaks the sidecar wire protocol. The client process and every value it sends are trusted: `CreateVmConfig`, mount descriptors and their plugin configs (host_dir paths, S3 endpoints/credentials, Google Drive, sandbox-agent), the permission policy, network allowlist, resource limits, env, and DNS overrides. Configuration is **not** an attack surface. The one thing from the client that is *not* trusted is the code/payload it asks to run, because that runs in the executor.
-- **Sidecar** (trusted; the TCB and the enforcement point). Brokers client requests and owns the kernel, VFS, mount/plugin registry, socket table, and permission policy. It is responsible for enforcing the boundary against the executor.
-- **Executor** — V8 isolates or WASM (untrusted; the adversary). Runs guest JS/Python/WASM plus any third-party/npm/agent-generated code. Assume everything here is actively hostile. How code reached the executor never makes it trusted.
-
-**The security boundary is sidecar ↔ executor.** The runtime must stop guest code in the executor from: escaping the kernel boundary (real host fs/network/process/memory), bypassing the *applied* permission policy/allowlist/limits, exhausting host resources beyond configured bounds, or reading another VM's state.
-
-**A defect that requires the client to supply a malicious config/endpoint/credential/policy is NOT a sandbox vulnerability** — the client is configuring its own VM and already controls the host. Treat such hardening as defense-in-depth, not as an escape, and do not add validation that only guards trusted client-provided configuration.
-
-Two corollaries that are easy to get wrong:
-
-- *Trusted policy, untrusted subject.* The permission policy and limits are trusted input, but the guest executor is the subject they bind. "Guest bypasses an applied permission / egress rule / resource cap" is in-scope and serious. Trusted = who sets the rule; untrusted = who is bound by it.
-- *Trusted mount, untrusted traffic.* A host-backed mount (host_dir, s3, …) comes from trusted config, so its existence/target/credentials are not attack surface, but the guest drives I/O through it, so confining those guest operations to the mount root (symlink / `..` / TOCTOU / path-aliasing escapes) is in-scope.
-
-**Transport scope.** The wire protocol is same-version lockstep and single-client over stdio (one trusted client per sidecar process). There is no second, mutually-distrusting client, so wire-level authn/authz-between-clients and VM-to-VM access via forged connection ids are out of scope until a multi-client transport exists.
-
-## Runtime Invariants
-
-- All guest code must execute inside the kernel isolation boundary with zero host escapes.
-- No runtime may spawn unsandboxed host processes, touch real host filesystems, open real host network sockets, or call real Node.js builtins for guest work.
-- Guest JavaScript runs in V8 isolates through `crates/v8-runtime/`; never use `Command::new("node")` for guest execution.
-- Every guest syscall goes through kernel-owned VFS, process, socket, pipe, PTY, permission, and DNS paths.
-- **Behave like native Linux (load-bearing).** The VM must look and behave like a normal Linux machine to the guest: real subprocesses, sockets, PTYs, pipes, devices (`/dev/null`, …), a normal stdin/stdout lifecycle, and a complete-enough node/libc surface. The Workers-style in-process isolation is *how* we deliver that, never an excuse for the guest to see a degraded environment. When a tool, agent CLI, registry binary, or ported program misbehaves, the default diagnosis is "the runtime is not yet emulating Linux faithfully" and the fix lives **here** — a host bridge, a libc/std patch, a crate stub, a node-API shim, a device emulation — not a workaround in the caller (env flags, binary patches, node-API fakes in adapters, `#[cfg(target_os = "wasi")]` feature gates). Guest-side workarounds are suspected runtime bugs to drive down; only genuine third-party packaging quirks and intentional isolation properties (bounded memory/CPU, default-deny egress) are legitimate exceptions, and those get documented with the reason.
-- **Build native programs with the custom libc + Rust toolchain, not bare wasi.** Programs in `registry/native` compile as normal Linux programs against the patched std sysroot + host bridges (`wasi-spawn`, `wasi-http`, `wasi-pty`), via `make -C registry/native wasm`. Never `cargo build --target wasm32-wasip1` raw and never gate out subprocess/socket/git/shell features because "wasi can't" — supply the capability through a bridge/stub/patch. The only allowed platform concession is single-threaded execution (no OS threads).
-
-## Limits, Bounds & Observability
-
-Every bound that protects a shared resource — memory/heap, CPU/wall-clock, fd/process/socket/pipe/pty counts, filesystem bytes/inodes, queue/buffer capacities, payload/frame sizes, timeouts, registration counts — MUST satisfy all of the following. A new `MAX_*`/`*_LIMIT`/`*_CAPACITY`/timeout/cap added without them is incomplete.
-
-- **Bounded by default.** Never `None`/`0`/unbounded (matches the Workers-style memory/CPU rule). Operators may raise a cap; they don't get an unbounded default. If a `0`/`None` genuinely means "engine default" (e.g. Pyodide old-space), say so in the inventory rationale.
-- **Config-wired + audited.** Operator-tunable bounds flow through `VmLimits` → `vm-config` (`limits_struct!`, Rust is the single source; TS mirrors via ts-rs). Every limit-shaped constant is classified in `crates/sidecar/tests/fixtures/limits-inventory.json` as `policy` (must name its `wired` config path) / `policy-deferred` / `invariant`, enforced by `crates/sidecar/tests/limits_audit.rs`. Never let a hardcoded operator bound accumulate uncatalogued.
-- **Registered for observability.** Register the bound with the central limit tracker (`secure_exec_bridge::queue_tracker`, generalizing to a limit registry) so usage/high-water are inspectable and it emits a **structured, edge-triggered warning as it approaches** (default ≥80% fill, re-arm <50%) naming the limit, observed/cap, fill%, and the `wired` config path. Note: the sidecar tracing level must be at least `WARN` for these to surface (`ERROR`-only swallows them).
-- **Clear, typed error on breach.** Fail with a typed error that names the limit and the observed-vs-cap value **with units**, plus how to raise it: `"<limit> exceeded: <observed><unit> > <cap><unit> (raise via limits.<wired>)"`. Map consistently — errno for kernel limits (but attach the limit name; no bare/opaque `EAGAIN`), `ExecutionAbortReason` for runtime kills, `SidecarError`/codec errors for config/protocol. No generic "invalid"/silent failure that hides which limit fired.
-- **No catastrophic reaction to transient fullness.** A full bounded queue/buffer applies **backpressure** (block the producer until the consumer drains) or returns the named error — never silently drop, silently evict, destroy the session, or crash the process. Raising a capacity is not a fix by itself; the warning + typed error must exist first. See PR #123 (event channel + stdout frame queue) for the reference pattern; audit every other channel/`VecDeque`/buffer against it.
-
-## Performance
-
-- **No expensive objects per-call.** Build once, reuse via a pool/persistent worker. Never construct per-operation: Tokio runtime, OS thread, V8 isolate/snapshot, DNS resolver, HTTP client, connection pool. Construct-then-teardown every call IS the bug.
-- **No serialize→deserialize in-process.** Pass the typed struct directly; wire encoding is for the wire only. Don't encode a frame to bytes only to re-parse it into a command.
-- **No whole-buffer copies per I/O.** Use chunked `Vec<u8>` + `extend_from_slice`, not byte-by-byte fills; move/`Arc`/slice payloads — never clone a record that carries its full buffer on each read/write.
-- **Zero host-disk writes on VM start (mount, don't extract).** Mounting read-only packaged content (the `agentos_packages` tar projection, or any archive/content mount) MUST NOT extract the archive to host disk or write physical symlinks at VM/session start. Back content by byte-range reads over the source archive (mmap/seek into the uncompressed tar, digest-keyed and shared across VMs), and serve derived symlinks (the `/opt/agentos/bin` farm, `<pkg>/current`) as **in-memory synthetic mounts**, never on-disk nodes. Extraction/staging is redundant work + state (full unpack, ~32k inodes, symlink farm, temp cleanup, double on-disk copy) for bytes the archive already holds at a known offset — reintroducing it is the bug. The only writes VM start may incur are cheap in-RAM overlay mountpoint dirs materialized by the mount table; host-disk materialization is zero. Any code that "helpfully" extracts must be reverted; the tar reader and projection carry doc comments saying why.
-- **Content ops MUST follow symlinks ACROSS mounts (the projection is composed of granular leaf mounts).** `/opt/agentos` is built from many leaf mounts — a tar mount per `pkgs/<pkg>/<version>`, and a single-symlink leaf mount per `pkgs/<pkg>/current` and per `bin/<cmd>`. So `<pkg>/current` and `<cmd>` are symlinks whose targets live in a *different* mount. `MountTable::resolve_index` is purely lexical, so every content op (`read_file`/`stat`/`pread`) and `exec` MUST resolve the path through `realpath` (cross-mount symlink walk) before routing — reading `/opt/agentos/pkgs/<pkg>/current/agentos-package.json` has to follow `current → <version>` into the tar mount. Two invariants make this work and must not regress: (a) content ops route via `resolve_content_index` (realpath-then-route), not raw `resolve_index`; (b) `MountTable::realpath`'s single-mount delegation falls back to the component walk on **ENOENT as well as ELOOP** — a single-symlink leaf mount returns ENOENT for any descendant path (its root IS the symlink), and only the walk can follow it. This is why runtime agent/package resolution can read the live FS by name (`/opt/agentos/pkgs/<name>/current/...`) even though `<name>` was installed as separate leaf mounts, and why dynamically-linked packages resolve without re-reading the client's `packages` list.
-- **No per-call allocs/locks/clones** on the sync hot path.
-- **Avoid polling**, prefer readiness/event-driven. But a read-probe can be load-bearing for protocol correctness — measure before removing one, and keep its semantic test.
-- **No baseline, no merge.** Capture native + unoptimized numbers BEFORE touching code, gate every change on a measured before/after delta, and keep it measure-gated.
-- **Revert no-wins.** A change with a flat or negative delta is a liability, not a win.
-- **Perf must not regress correctness.** Respect existing caps/bounds and land the regression test in the same change as the optimization.
-
-## Benchmarks
-
-- **Purpose:** `packages/benchmarks` owns the differential matrix for the runtime surface. It compares four lanes: native (host Rust `crates/native-baseline`), node (host Node.js), vm-js (guest V8 Node emulation), and vm-wasm (`native-baseline` compiled to `wasm32-wasip1` and run in the VM). `guest/node` is JS-emulation tax, `wasm/native` is WASM-runtime tax, and `node/native` is Node's own cost.
-- **Memory columns:** matrix rows carry `mem`/`memTax` columns, with guest-backed lanes measured above the prewarmed-sidecar baseline.
-- **Ecosystem family:** `BENCH_FAMILIES=ecosystem` is command-pair only: `hostCmd` (host binary) vs `vmCmd` (VM WASM command), with `tax.command = vmCmd/hostCmd`.
-- **Permissions family:** `BENCH_FAMILIES=permissions` is a guest policy-overhead A/B over hot fs+net ops, reporting `policyTax = policy_p50 / allow_p50`.
-- **Layout:** matrix families and the lane engine live in `packages/benchmarks/src`; Rust op implementations live in `crates/native-baseline` and build for both host and wasm. Run one family with `BENCH_FAMILIES=fs pnpm --dir packages/benchmarks bench:matrix` or through `bash packages/benchmarks/run-benchmarks.sh`; results land in `packages/benchmarks/results/`.
-- **Verify work:** every op must verify its payload or side effect, so a fast-but-broken path fails instead of passing.
-- **Clock discipline:** guest clocks are 1ms-quantized by default for security. Bench VMs opt in to `jsRuntime.highResolutionTime`, or the op must amplify by call count.
-- **Unsupported cells:** unsupported lane/op cells are explicit and never silently dropped.
-- **Baselines:** regenerate baselines only on a canonical environment, with hardware and dependency metadata recorded.
-- **Bench gate:** `packages/benchmarks/results/baseline-local.json` is the canonical-machine baseline; `baseline-ci.json` is GitHub-runner-specific and bootstrapped from the nightly artifact before PR gates enforce it.
-- **Merge rule:** a perf fix whose row does not move gets reverted, matching the Performance section.
-- **Keep them current:** the benches are a maintained surface, not a one-off audit. New runtime surface (a syscall, a polyfill module, an executor capability, a registry command tier) needs a matrix op or focused lane in the same change or a filed follow-up; perf-relevant changes to existing surface must re-run the affected rows and update coverage when the shape changes (new lanes, renamed ops). If a bench stops compiling or a lane can no longer run, fix or explicitly skip it with a reason — never delete coverage silently.
-- **Agent OS boundary:** agent-os keeps product-surface benches only (session tax, ACP) and consumes this framework.
-
-## Testing
-
-- **Tests must run in parallel. Never fall back to `--test-threads=1`.** Serializing the whole suite to dodge a race is banned — it hides real shared-state bugs and roughly triples wall-clock. If tests interfere, fix the interference (see the categories below) or isolate the offender; do not pin the runner to one thread. Per-test process isolation via `cargo nextest` is the sanctioned way to neutralize process-global state while keeping parallelism (doctests run separately via `cargo test --doc`).
-- **No process-global state coupling between tests.** A test must not depend on or mutate shared process state that a concurrent sibling sees: `std::env::set_var`/`remove_var` (an `EnvVarGuard` that mutates real env is a smell — thread config through explicit args/builders instead), `static`/`OnceLock`/`lazy_static` caches, warm-isolate/worker pools, or global counters. If a test genuinely needs a process-global (env, a shared cache's warm state), it belongs in a dedicated serial lane, not the default parallel suite.
-- **Timing-sensitive tests are disabled by default.** Any test whose pass/fail depends on wall-clock — `sleep`-then-assert-elapsed, `Duration`/`Instant` comparisons in assertions, "watchdog/timeout fired within N ms" — flakes under the CPU contention of a parallel run and MUST be gated off by default (`#[ignore]` or an env/feature gate — in this repo the env gate is `SECURE_EXEC_RUN_TIMING_TESTS`, exercised only in the quiet serial nightly lane) and run only there. A test that merely *measures* timing never stays in the default suite.
-- **A safeguard-firing test stays in the default suite ONLY IF the safeguard fires fast — the deciding factor is duration, not what the test proves.** A configured limit actually firing (CPU-time → runaway killed, fuel → exit 124, fd/socket/heap cap → denied) is a keeper **only when the test configures a SHORT bound** (a small CPU-time/fuel/timeout — sub-second where the mechanism allows) so the runaway dies almost immediately. If the test's runtime is instead dominated by *waiting out* a multi-second window it does NOT keep — most notably the **default ~30s V8 CPU-time watchdog** driving an infinite-loop guest module, but equally a network-denied op that hangs until a `from_secs(N)` collect/poll timeout, or a wasm fuel/timeout enforced only by a slow poll path. Those are timeout-dependent: gate them off by default (early-return on `SECURE_EXEC_RUN_TIMING_TESTS` at the call site, or `#[ignore]`) and run them only in the nightly lane. **Prefer** shrinking the configured window so the safeguard fires fast AND the coverage stays on every PR; gate only when a short window genuinely isn't achievable. This stacks with the resource-saturation `#[ignore]` rule below.
-- **Auto-skip expensive resource-saturation tests.** A test that proves the *absence* of a bound by actually saturating a resource — a JS/WASM infinite loop pinning a core for the watchdog window, a heap/alloc bomb, a fork bomb, anything that aborts the process — must be `#[ignore = "expensive: <resource> saturation; run with --ignored"]` (vitest: `it.skip`/env gate). These pin cores or crash the runner. Still test the *safeguards* (a configured limit/watchdog/quota actually firing) — those are bounded, fast, and are the regression guard that the protection works; keep them in the default suite.
-- **Unique ports and temp dirs per test.** Bind ephemeral ports (`:0`), never a fixed port; use a unique temp dir per test, never a fixed shared path. Fixed ports/paths collide the moment two tests run concurrently.
-- **Tests never build their dependencies — they error if a prerequisite is missing.** A test harness must not shell out to `cargo build` (or any build) on demand: that build runs inside the test's own timeout and, under parallelism, spawns N concurrent builds — a deterministic-timeout footgun. If the sidecar binary (or any built artifact) is absent or stale, the harness fails fast with a clear message ("build `X` first: `cargo build -p ...`"), it does not build it. CI builds artifacts in an explicit earlier step and pins them (e.g. `SECURE_EXEC_SIDECAR_BIN`); local dev builds first, then runs tests.
-- **Never delete coverage silently.** A skip/ignore/quarantine carries a one-line reason and, ideally, a follow-up. Rule of thumb: a test that ends only when a watchdog whose *absence* it documents fires → `#[ignore]`; a test that ends because a *safeguard* fires → keep it running.
-- **CI test-phase wall = the single slowest test, then the compile.** nextest runs every `#[test]` in its own process in parallel, so the wall ≈ the *longest individual test*, NOT the sum. Optimize the tallest pole only — split it, gate it if it's timeout/watchdog-bound, or shrink its configured limit; splitting anything *below* the current critical path is wasted churn that just lights idle cores. Once the slowest surviving test drops under the crate's compile time, the **build is the floor** and more test surgery buys nothing. (This repo: warm rust-test is ~2m build + the slowest test; measure per-test durations before optimizing.)
-- **Split a collapsed `*_suite` test for nextest ONLY when its cases are *independently* slow — the collapse guards two things, and splitting fixes one but breaks the other.** Integration suites batch sub-cases into one `#[test]` (`python_suite`, `wasm_suite`, `kill_cleanup_suite`) to dodge a shared-process V8/Pyodide teardown/init crash. nextest's process-per-test removes that crash, so cases *can* be split to parallelize — pattern: a `mod <name>_split` whose `macro_rules!` emits one gated `#[test]` per case (`if std::env::var_os("NEXTEST").is_none() { return; } super::<case>();`), plus an early `return` under `NEXTEST` in the collapsed suite so `cargo test` still owns it locally; cases with an in-process ordering/warm-state dependency stay grouped in one sequential `#[test]` named `*_suite` (to inherit the `nextest.toml` slow-timeout override). **But the collapse ALSO amortizes warm process-global state, which splitting defeats:** a case that's cheap only because prior cases warmed the shared Pyodide/V8 (cold Pyodide init, a cold `import micropip`, an infinite-loop module's prewarm running into the ~30s CPU watchdog) becomes *slower* split — each fresh process pays the cold cost — and grouping the bare offenders can reintroduce the SIGSEGV the collapse existed to prevent. So split only independently-expensive real-work cases; leave warm-amortized suites collapsed with a comment saying why, and always confirm the split binary's measured wall actually dropped before keeping the change.
-
-## Project Boundaries
-
-- Keep the secure-exec runtime Agent OS-agnostic: no ACP, sessions, `agentos-protocol`, `agentos-client`, or `agentos-sidecar` dependencies in runtime code.
-- Packaged agent definitions/adapters live in `registry/agent/*`; generic VM software lives in `registry/software/*`.
-- `crates/bridge/` is the browser/native portability seam. Shared contracts belong there.
-- `crates/vfs/` is generic filesystem infrastructure: POSIX-style in-memory/overlay/mount/root engines plus generic chunked/object engines and in-memory stores. It must stay free of secure-exec sidecar, bridge, S3, SQLite, and host-disk coupling.
-- `crates/secure-exec-vfs/` contains concrete secure-exec filesystem backends: S3 adapters, host-disk SQLite/file stores, and bridge/callback-backed metadata stores. Policy decisions, config validation, and mount descriptor parsing stay in sidecar plugins.
-- `crates/execution/` is the native execution implementation and must not become the browser portability layer.
-- `crates/sidecar/` builds the `secure-exec-sidecar` crate and binary. Extension APIs must stay transport-agnostic.
-- The protocol has no backwards compatibility. The sidecar and its clients run in same-version lockstep, so never add protocol or config versioning, runtime negotiation, fallbacks, or converters. Wire types and configs such as `CreateVmConfig` carry no `version` field beyond the single same-version handshake. Change the protocol freely and update all sides together.
-- Wire/client parity: every capability implemented in the wire protocol must be reachable from BOTH client APIs — the TypeScript client (`NodeRuntime` / `secure-exec`) and the Rust client. When you add or change a protocol capability, expose it on both; never leave wire functionality unreachable from the TS or Rust API.
-- Config travels on the **BARE wire/structured request**, not the ambient `AGENTOS_*` env channel. Classify every setting into three buckets: (1) **process-wide / host / build / test → env** (shared across all VMs, not per-VM configurable); (2) **per-VM bootstrap-before-wire → env carve-out** (must exist at `exec` time before the wire/sync-RPC bridge is up: sandbox root, inherited bridge fds, entrypoint/payload); (3) **per-VM runtime config → BARE wire** (anything per-VM the established wire/bridge could carry — limits, virtualized identity, isolation policy). New per-VM settings default to bucket 3. Migrated so far: resource limits + virtualized identity (`process.*` via the runtime shim, `os.*` via the `__agentOSVirtualOs` global). Isolation policy (guest path mappings, extra fs read/write paths, allowed Node builtins, loopback-exempt ports, WASM permission tier) is still on env — bucket 3 but not yet moved. Anti-pattern: a value carried on the wire then silently re-emitted as an env knob (and maybe never read) is the **dead-cap** failure mode — if it's on the wire, the engine must read it from the wire path, never from a duplicated env var. See `crates/sidecar/CLAUDE.md` for the rule.
-- JavaScript host-emulation config (`CreateVmConfig.jsRuntime`) mirrors esbuild's vocabulary so users carry over a known mental model. The host environment presented to guest JS is a `platform`; its values are esbuild's exactly — `node` | `browser` | `neutral` — plus the one sanctioned extension `bare` (language-only: ECMAScript spec globals + WebAssembly, nothing host-provided), for which esbuild has no equivalent. Do not invent other platform names. Wherever a JS runtime/resolution config property has an esbuild equivalent, take esbuild's name and value spelling over any other source (esbuild > tsconfig > ad-hoc); introduce a non-esbuild name only when esbuild has no equivalent concept (e.g. `moduleResolution`, `allowedBuiltins`).
-- `packages/core/` is `@secure-exec/core`, the generic TypeScript protocol, client, descriptor, and runtime asset package.
-- `packages/build-tools/` is `@secure-exec/build-tools`, the workspace-only generator package for V8 bridge and base filesystem assets. A fresh checkout must run `pnpm install` before any `cargo` build (including when a downstream like agent-os path-deps these crates): `v8-runtime/build.rs` generates the V8 bridge assets from `packages/build-tools/node_modules` and panics if they are absent.
-- Registry software and agent packages live under `registry/` with the `@agentos-software/*` npm scope (tool packages keep `@secure-exec/*`). Their build/publish lifecycle is owned by `@rivet-dev/agentos-toolchain` (`packages/agentos-toolchain`: `stage`/`build`/`pack`/`publish`) driven by the `just registry-*` recipes; the full flow is documented in `registry/README.md`. Never add package-local copy scripts or Makefile staging — declare commands/aliases/stubs in the package's `agentos-package.json` and let `stage` populate the gitignored `bin/`.
-
-## Build And Assets
-
-- The VM base filesystem artifact is derived from Alpine Linux, but runtime source should stay generic.
-- Rebuild the base filesystem (requires Docker) with `pnpm --dir packages/build-tools build:base-filesystem`. The one script snapshots Alpine, applies the secure-exec transforms, and writes the single canonical `packages/core/fixtures/base-filesystem.json`, mirroring the same bytes into the crate-vendored `crates/sidecar/assets/` and `crates/vfs/assets/` copies (those exist only as the `cargo publish` fallback; never hand-edit them).
-- The V8 bridge bundle is generated from `packages/build-tools/scripts/build-v8-bridge.mjs`; keep its generated assets aligned with bridge-contract changes.
-- `registry/native` owns the Rust-to-WASM command build (`just registry-native`, or `just registry-native-cmd <name>` for one `cmd-<name>` crate); its `target/wasm32-wasip1/release/commands/` output feeds `agentos-toolchain stage`, which populates each package's gitignored `bin/` for `agentos-toolchain build` to assemble into `dist/package/`.
-
-## npm Compatibility
-
-- npm packages must work unmodified inside the VM. Fix module resolution or polyfills instead of bundling or patching published packages.
-- Never hardcode support for specific npm packages in secure-exec. Do not special-case package names (e.g. `minimatch`, `glob`, `undici`) in module resolution, format detection, export synthesis, polyfills, or interop. When a real package exposes a general gap, fix the underlying mechanism so every package benefits; a package-name branch is a sign the real bug is elsewhere. The only allowed name-based handling is for Node.js builtins (e.g. `node:fs`), never third-party packages.
-- The VM presents mounted `node_modules` faithfully, like a real filesystem (Docker-style), symlinks included. Module resolution must match naive Node.js resolution over that filesystem — the ancestor `node_modules` walk, `exports`/`imports`/conditions, and `realpath`/symlink following — and nothing more.
-- No package-manager-specific resolution heuristics. The resolver must not understand pnpm/yarn internals — e.g. no scanning the `.pnpm` virtual store or guessing a version when no symlink points to it. pnpm/yarn layouts resolve because the VFS exposes their symlinks, not because the resolver special-cases them. If a real layout fails, fix VFS symlink fidelity (or `exports`/conditions handling), never add a layout-aware shortcut.
-- Use `node-stdlib-browser` for pure-JS builtins and bridge-backed polyfills for kernel-backed modules such as `fs`, `net`, `child_process`, `dns`, `http`, `os`, and `crypto`.
-- Guest `fetch()` must run through undici inside the V8 isolate, then through the kernel socket table.
-
-## Native Binary Distribution
-
-- Ship `secure-exec-sidecar` through `@secure-exec/sidecar` plus platform packages declared as optional dependencies.
-- Publish platform binary packages with `npm publish`, not `pnpm publish`, so executable bits are preserved.
-- Resolver packages must return an absolute binary path. Callers pass that typed path to process spawning instead of relying on global environment mutation.
-
-## Development
-
-### Release Tracks
-
-- **secure-exec runtime** — `@secure-exec/*` npm packages and `secure-exec-*` crates; releases keep npm/crates in sync, previews are npm-only. See "Release-previewing" and "Publishing" for details.
-- **GATE — secure-exec product versions are always `0.0.1` in the committed tree.** Every package returned by `scripts/publish/src/lib/packages.ts` `discoverPackages(repoRoot)` and the root `Cargo.toml [workspace.package]` version stays pinned at `0.0.1`; the real version is applied ONLY transiently in the CI publish checkout by `bump-versions`, never committed. `scripts/publish/src/ci/verify-fixed-versions.ts` enforces this in CI. `@agentos-software/*` registry packages under `registry/{software,agent}/*` are exempt and stay independently versioned.
-- **`@agentos-software/*` registry packages** — generic VM software from secure-exec `registry/software/*` plus agent adapters from secure-exec `registry/agent/*`; versioned independently of secure-exec runtime packages.
-- **agent-os product/API** — `@rivet-dev/agentos*`, AgentOs APIs, sidecar wrapper, docs, quickstarts, and examples; see agent-os `CLAUDE.md` for its pinning workflow.
-
-### Release-previewing
-
-`just release-preview <branch>` dispatches `.github/workflows/publish.yaml` (workflow_dispatch, no version input) to cut a **preview** (debug sidecar build, npm-only, dist-tag = sanitized branch name) — for handing a build to a downstream (agent-os) or external project. **Preview-publish is for previews ONLY; never cut a release with it.** Caveats: WASM-bearing packages (`@secure-exec/core`, `@agentos-software/*`) publish MANUALLY (see Publishing), and the crates.io job is skipped on preview — a *crate* change only reaches consumers locally (path dep / `[patch]`) or via a real release.
-
-### Testing a local build from an external project (same machine)
-
-- **npm:** `pnpm -r build`, then `pnpm pack` the package and `npm install ./secure-exec-core-*.tgz` in the external project (or a `link:`/`file:` override). `@secure-exec/core` needs its WASM commands vendored first (`make -C registry/native wasm`; its `prepack` fails loud if absent).
-- **cargo:** add a path dep or `[patch.crates-io]` override in the external Cargo project, e.g. `[patch.crates-io] secure-exec-sidecar = { path = "/abs/path/secure-exec/crates/sidecar" }`. A fresh checkout needs `pnpm install` first (V8 bridge assets — see Project Boundaries).
-
-## Publishing
-
-Workflow skills (follow these rather than improvising):
-- `.claude/skills/release` — stable release (npm + crates.io lockstep, incl. the manual `@secure-exec/core` wasm publish).
-- `.claude/skills/release-preview` — branch preview (`just release-preview <branch>`; npm-only, branch dist-tag, registry packages included).
-- `.claude/skills/publish-registry` — `@agentos-software/*` registry packages (per-package semver, `dev` tag default, `latest` deliberate).
-- agent-os side: its `.claude/skills/{bump-secure-exec,release-preview,release}` cover consuming/releasing against secure-exec.
-
-- **The `@secure-exec/*` npm packages and the `secure-exec-*` Cargo crates are always published at the same version** (npm and crates stay in sync), so a downstream pins both to one `<v>`. See "Release Tracks" for how this differs from `@agentos-software/*` and agent-os releases.
-- CI (`.github/workflows/publish.yaml`) DOES build and vendor the core WASM command set: the "Build and vendor core WASM commands" step runs `make -C registry/native wasm` + `packages/core run copy-commands` before the npm publish, and core's `prepack` fails loud if the commands are absent — so a published `@secure-exec/core` tarball always carries the command set. (`EXCLUDED` in `scripts/publish/src/lib/packages.ts` contains only the private `publish` package.)
-- `@agentos-software/*` registry software releases stay MANUAL and per-package (`just registry-publish <pkg> [tag]`; dist-tag `dev` unless `latest` is passed deliberately); PREVIEWS include them automatically under the branch dist-tag (`PUBLISH_INCLUDE_REGISTRY_PACKAGES`).
-- `copy-wasm-commands.mjs` (core's vendoring) is the ONE sanctioned package-local copy script: it vendors the baseline command set into the published `@secure-exec/core` tarball at build/prepack time. Every registry package instead declares commands in `agentos-package.json` and lets `agentos-toolchain stage` populate `bin/`.
-
-## Website
-
-- `website/` is `@secure-exec/website`, a unified Astro app serving the public site at **secureexec.dev**: `/` is the React/Tailwind landing page and `/docs/*` is the Starlight documentation.
-- External/consumer usage (installing `@secure-exec/core` and using it in your own project) is documented in the website, not in this file. This `CLAUDE.md` is contributor/maintainer-only.
-- **Agent OS docs are canonical for agentOS-visible behavior — check them instead of local docs.** Most secure-exec runtime behavior (process lifecycle, limits, permissions, filesystem/network semantics, ACP-adjacent surfaces) reaches users through Agent OS, whose docs live in the agent-os repo (`../agent-os` `website/src/content/docs/`, deployed to `agentos-sdk.dev/docs`), NOT here. When a secure-exec change alters behavior that agentOS consumers can observe, check the agent-os docs for affected pages and keep them up to date in the accompanying agent-os change; the local `website/` documents only the standalone Secure Exec SDK surface.
-- Docs are **user-facing, not internals.** Write for a developer *using the SDK*, not for a contributor maintaining the runtime. Every page is framed around how the SDK is used: what you call, what you pass, what you get back, and what behavior to expect. Do not document internal implementation (kernel data structures, isolate plumbing, refactor history); that belongs in code comments or `CLAUDE.md`. When a page must reference a runtime concept (filesystem model, networking, isolation), explain it through the developer-visible API and behavior, show a quick code example, then link out for the deeper reference rather than narrating internals.
-- Docs are **bullet-heavy and code-heavy, not prose-heavy.** Default to scannable bullet lists in the `- **Foo**: Bar` form (bolded term, then the one-line explanation) instead of paragraphs. Lead with a code snippet wherever a concept has an API, and link to a runnable example under `examples/docs/*` whenever one exists. Avoid long paragraphs; if you find yourself writing more than two or three sentences in a row, convert it to bullets or a code block. Prose is the exception, used only to connect ideas that genuinely cannot be a list.
-- The docs theme matches the Rivet docs (rivet.dev) 1:1: light-only "porcelain" palette, Manrope + JetBrains Mono, dark code blocks.
-- Docs prose must not use em dashes (`—`). Rephrase with commas, colons, parentheses, or separate sentences. This applies to all content under `website/src/content/docs`.
-- **Docs code blocks MUST embed real example files via `<CodeSnippet>` — never hand-write checked code inline.** All runnable code shown in docs lives as a file under `examples/docs/*` (a real example package, verified end-to-end against the sidecar) and is embedded at build time, so the rendered code is always the exact code we ship, and each block auto-links to its source on GitHub. This **replaces** the old "copy the code verbatim into the page + add a manual `*[See Full Example](…)*` link" convention — `<CodeSnippet>` embeds the source and generates the GitHub link automatically. Authoring:
-  - Embed a whole file: `<CodeSnippet file="examples/docs/feat-typescript/src/index.mts" />` (repo-relative path). `remarkCodeSnippet` (in `@rivet-dev/docs-theme`) inlines the content; the language is inferred from the extension (override with `lang=`), the tab label is the basename (override with `title=`).
-  - Embed only part of a file with `region="name"`, delimiting it in the source with `// docs:start name` … `// docs:end name` (markers are stripped, the region is dedented).
-  - `<CodeSnippet>` is the ONLY embed API. A bare ```` ```ts file="server.ts" ```` fence (no slash) is just a CodeGroup tab label, not an embed.
-  - Paths resolve from the repo root (override via `DOCS_EMBED_ROOT`). If the referenced code doesn't exist yet, add it as a proper runnable example under `examples/docs/*` rather than inlining unchecked code.
-  - Non-runnable snippets (shell commands, config fragments, illustrative pseudo-code) may stay inline — the rule is about code a reader could copy and run.
-  - This convention is owned by the shared `@rivet-dev/docs-theme` and applies to every site built on it (secure-exec AND agent-os).
-- Docs styling is owned by the shared **`@rivet-dev/docs-theme`** repo (`github.com/rivet-dev/docs-theme`), consumed via `github:rivet-dev/docs-theme#<tag>` and wired in via `...docsTheme(starlight, siteConfig)` in `astro.config.mjs`. **To change any docs styling** (header, sidebar, code blocks, fonts, palette), edit that repo and follow its CLAUDE.md release workflow — never restyle docs in `website/src`. When iterating on theme styling locally, add a `pnpm.overrides` `link:` to the local docs-theme checkout (kept through local commits while iterating), but **remove it before pushing** — a pushed consumer must pin `github:rivet-dev/docs-theme#<tag>`, never a path. To change *this site's* identity/nav/sidebar/landing, edit `website/docs.config.mjs` (sidebar icons via each item's `attrs['data-icon']`). Re-test with `pnpm --dir website build`.
-
-- The proper product title is **"Secure Exec"** (two words, capitalized); use it in docs PROSE. Use the lowercase "secure-exec" only for code identifiers, package names (`@secure-exec/*`), the repo, and URLs.
-
-## Version Control (jj)
-
-- This checkout is jj colocated (jj over git). Prefer `jj` for commits/branches; avoid `git commit`/`git checkout`, which fight jj's working-copy commit.
-- Large pyodide/sandbox assets exceed jj's default snapshot size limit. Commit them with `jj --config snapshot.max-new-file-size=16777216 ...`, or gitignore them.
-- **Commit titles and PR titles are pure conventional commits** (`feat`, `fix`, `chore`, `docs`, `refactor`, etc.) with an optional scope, e.g. `fix(sidecar): handle empty ack batch`. Never indicate that a change was written by a coding agent: no model name, no agent name, no `[SLOP(...)]` prefix, and no `Co-Authored-By:` or `Generated with` trailer. The title must read exactly as a human-authored conventional commit. jj descriptions stay single-line.
-- **PR descriptions are a simple, high-level bullet list of what changed.** One bullet per meaningful change in plain language. No per-file or line-by-line detail, no implementation narration, and no mention of an agent.
-
-## CLAUDE.md Convention
-
-- Every directory with `CLAUDE.md` must also have `AGENTS.md` as a symlink to `CLAUDE.md`.
-- Keep CLAUDE entries concise and limited to design constraints, invariants, and non-obvious rules.
+This repository is a generated compatibility mirror. Make runtime changes in the AgentOS repository and regenerate the shims.
diff --git a/Cargo.lock b/Cargo.lock
index 81bf31e35..2dab938aa 100644
--- a/Cargo.lock
+++ b/Cargo.lock
@@ -49,6 +49,210 @@ dependencies = [
  "subtle",
 ]
 
+[[package]]
+name = "agentos-bridge"
+version = "0.0.1"
+dependencies = [
+ "serde",
+ "serde_json",
+ "tracing",
+]
+
+[[package]]
+name = "agentos-build-support"
+version = "0.0.1"
+
+[[package]]
+name = "agentos-execution"
+version = "0.0.1"
+dependencies = [
+ "agentos-bridge",
+ "agentos-build-support",
+ "agentos-v8-runtime",
+ "base64 0.22.1",
+ "ciborium",
+ "getrandom 0.2.17",
+ "nix",
+ "serde",
+ "serde_json",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "agentos-kernel"
+version = "0.0.1"
+dependencies = [
+ "agentos-bridge",
+ "agentos-vfs-core",
+ "base64 0.22.1",
+ "getrandom 0.2.17",
+ "hickory-proto",
+ "hickory-resolver",
+ "serde",
+ "serde_json",
+ "tokio",
+ "web-time",
+]
+
+[[package]]
+name = "agentos-native-sidecar"
+version = "0.0.1"
+dependencies = [
+ "aes",
+ "aes-gcm",
+ "agentos-bridge",
+ "agentos-execution",
+ "agentos-kernel",
+ "agentos-native-sidecar-core",
+ "agentos-sidecar-protocol",
+ "agentos-vfs",
+ "agentos-vfs-core",
+ "agentos-vm-config",
+ "async-trait",
+ "aws-config",
+ "aws-credential-types",
+ "aws-sdk-s3",
+ "base64 0.22.1",
+ "blake3",
+ "bytes",
+ "cap-std",
+ "ctr",
+ "filetime",
+ "h2 0.4.13",
+ "hickory-resolver",
+ "hmac",
+ "http 1.4.0",
+ "jsonwebtoken",
+ "log",
+ "md-5",
+ "nix",
+ "openssl",
+ "pbkdf2",
+ "rusqlite",
+ "rustls 0.23.37",
+ "rustls-native-certs",
+ "rustls-pemfile",
+ "scrypt",
+ "serde",
+ "serde_json",
+ "sha1",
+ "sha2",
+ "socket2 0.6.3",
+ "tokio",
+ "tokio-rustls 0.26.4",
+ "tracing",
+ "tracing-subscriber",
+ "ureq",
+ "url",
+]
+
+[[package]]
+name = "agentos-native-sidecar-browser"
+version = "0.0.1"
+dependencies = [
+ "agentos-bridge",
+ "agentos-kernel",
+ "agentos-native-sidecar-core",
+ "agentos-sidecar-protocol",
+ "agentos-vm-config",
+ "base64 0.22.1",
+ "getrandom 0.2.17",
+ "js-sys",
+ "serde_json",
+ "wasm-bindgen",
+]
+
+[[package]]
+name = "agentos-native-sidecar-core"
+version = "0.0.1"
+dependencies = [
+ "agentos-bridge",
+ "agentos-kernel",
+ "agentos-sidecar-protocol",
+ "agentos-vfs-core",
+ "agentos-vm-config",
+ "base64 0.22.1",
+ "serde_json",
+]
+
+[[package]]
+name = "agentos-sidecar-client"
+version = "0.0.1"
+dependencies = [
+ "agentos-sidecar-protocol",
+ "futures",
+ "parking_lot",
+ "scc",
+ "thiserror",
+ "tokio",
+ "tracing",
+]
+
+[[package]]
+name = "agentos-sidecar-protocol"
+version = "0.0.1"
+dependencies = [
+ "agentos-vm-config",
+ "rivet-vbare-compiler",
+ "serde",
+ "serde_bare",
+ "serde_json",
+ "vbare",
+]
+
+[[package]]
+name = "agentos-v8-runtime"
+version = "0.0.1"
+dependencies = [
+ "agentos-bridge",
+ "agentos-build-support",
+ "ciborium",
+ "crossbeam-channel",
+ "libc",
+ "serde",
+ "sha2",
+ "signal-hook",
+ "v8",
+]
+
+[[package]]
+name = "agentos-vfs"
+version = "0.0.1"
+dependencies = [
+ "agentos-vfs-core",
+ "async-trait",
+ "aws-sdk-s3",
+ "rusqlite",
+ "serde",
+ "serde_json",
+]
+
+[[package]]
+name = "agentos-vfs-core"
+version = "0.0.1"
+dependencies = [
+ "async-trait",
+ "base64 0.22.1",
+ "blake3",
+ "memmap2",
+ "serde",
+ "serde_json",
+ "tar",
+ "tokio",
+ "tracing",
+ "web-time",
+]
+
+[[package]]
+name = "agentos-vm-config"
+version = "0.0.1"
+dependencies = [
+ "serde",
+ "serde_json",
+ "ts-rs",
+]
+
 [[package]]
 name = "ahash"
 version = "0.8.12"
@@ -2197,10 +2401,6 @@ dependencies = [
  "uuid",
 ]
 
-[[package]]
-name = "native-baseline"
-version = "0.0.1"
-
 [[package]]
 name = "ndk-context"
 version = "0.1.1"
@@ -2982,214 +3182,91 @@ dependencies = [
 name = "secure-exec-bridge"
 version = "0.0.1"
 dependencies = [
- "serde",
- "serde_json",
- "tracing",
+ "agentos-bridge",
 ]
 
 [[package]]
 name = "secure-exec-build-support"
 version = "0.0.1"
+dependencies = [
+ "agentos-build-support",
+]
 
 [[package]]
 name = "secure-exec-client"
 version = "0.0.1"
 dependencies = [
- "futures",
- "parking_lot",
- "scc",
- "secure-exec-sidecar-protocol",
- "thiserror",
- "tokio",
- "tracing",
+ "agentos-sidecar-client",
 ]
 
 [[package]]
 name = "secure-exec-execution"
 version = "0.0.1"
 dependencies = [
- "base64 0.22.1",
- "ciborium",
- "getrandom 0.2.17",
- "nix",
- "secure-exec-bridge",
- "secure-exec-build-support",
- "secure-exec-v8-runtime",
- "serde",
- "serde_json",
- "tempfile",
- "tokio",
- "tracing",
- "wat",
+ "agentos-execution",
 ]
 
 [[package]]
 name = "secure-exec-kernel"
 version = "0.0.1"
 dependencies = [
- "base64 0.22.1",
- "getrandom 0.2.17",
- "hickory-proto",
- "hickory-resolver",
- "secure-exec-bridge",
- "secure-exec-vfs-core",
- "serde",
- "serde_json",
- "tokio",
- "web-time",
+ "agentos-kernel",
 ]
 
 [[package]]
 name = "secure-exec-sidecar"
 version = "0.0.1"
 dependencies = [
- "aes",
- "aes-gcm",
- "async-trait",
- "aws-config",
- "aws-credential-types",
- "aws-sdk-s3",
- "base64 0.22.1",
- "blake3",
- "bytes",
- "cap-std",
- "ctr",
- "filetime",
- "h2 0.4.13",
- "hickory-resolver",
- "hmac",
- "http 1.4.0",
- "jsonwebtoken",
- "log",
- "md-5",
- "nix",
- "openssl",
- "pbkdf2",
- "rusqlite",
- "rustls 0.23.37",
- "rustls-native-certs",
- "rustls-pemfile",
- "scrypt",
- "secure-exec-bridge",
- "secure-exec-execution",
- "secure-exec-kernel",
- "secure-exec-sidecar-core",
- "secure-exec-sidecar-protocol",
- "secure-exec-vfs",
- "secure-exec-vfs-core",
- "secure-exec-vm-config",
- "serde",
- "serde_bare",
- "serde_json",
- "sha1",
- "sha2",
- "socket2 0.6.3",
- "tar",
- "tokio",
- "tokio-rustls 0.26.4",
- "tracing",
- "tracing-subscriber",
- "ureq",
- "url",
- "v8",
- "wat",
+ "agentos-native-sidecar",
 ]
 
 [[package]]
 name = "secure-exec-sidecar-browser"
 version = "0.0.1"
 dependencies = [
- "base64 0.22.1",
- "getrandom 0.2.17",
- "js-sys",
- "secure-exec-bridge",
- "secure-exec-kernel",
- "secure-exec-sidecar-core",
- "secure-exec-sidecar-protocol",
- "secure-exec-vm-config",
- "serde_json",
- "wasm-bindgen",
+ "agentos-native-sidecar-browser",
 ]
 
 [[package]]
 name = "secure-exec-sidecar-core"
 version = "0.0.1"
 dependencies = [
- "base64 0.22.1",
- "secure-exec-bridge",
- "secure-exec-kernel",
- "secure-exec-sidecar-protocol",
- "secure-exec-vfs-core",
- "secure-exec-vm-config",
- "serde_json",
+ "agentos-native-sidecar-core",
 ]
 
 [[package]]
 name = "secure-exec-sidecar-protocol"
 version = "0.0.1"
 dependencies = [
- "rivet-vbare-compiler",
- "secure-exec-vm-config",
- "serde",
- "serde_bare",
- "serde_json",
- "vbare",
+ "agentos-sidecar-protocol",
 ]
 
 [[package]]
 name = "secure-exec-v8-runtime"
 version = "0.0.1"
 dependencies = [
- "ciborium",
- "crossbeam-channel",
- "libc",
- "secure-exec-bridge",
- "secure-exec-build-support",
- "serde",
- "sha2",
- "signal-hook",
- "v8",
+ "agentos-v8-runtime",
 ]
 
 [[package]]
 name = "secure-exec-vfs"
 version = "0.0.1"
 dependencies = [
- "async-trait",
- "aws-config",
- "aws-credential-types",
- "aws-sdk-s3",
- "rusqlite",
- "secure-exec-vfs-core",
- "serde",
- "serde_json",
- "tempfile",
- "tokio",
+ "agentos-vfs",
 ]
 
 [[package]]
 name = "secure-exec-vfs-core"
 version = "0.0.1"
 dependencies = [
- "async-trait",
- "base64 0.22.1",
- "blake3",
- "memmap2",
- "serde",
- "serde_json",
- "tar",
- "tokio",
- "tracing",
- "web-time",
+ "agentos-vfs-core",
 ]
 
 [[package]]
 name = "secure-exec-vm-config"
 version = "0.0.1"
 dependencies = [
- "serde",
- "serde_json",
- "ts-rs",
+ "agentos-vm-config",
 ]
 
 [[package]]
@@ -3500,19 +3577,6 @@ dependencies = [
  "xattr",
 ]
 
-[[package]]
-name = "tempfile"
-version = "3.27.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
-dependencies = [
- "fastrand",
- "getrandom 0.4.2",
- "once_cell",
- "rustix 1.1.4",
- "windows-sys 0.61.2",
-]
-
 [[package]]
 name = "termcolor"
 version = "1.4.1"
@@ -3793,12 +3857,6 @@ version = "1.0.24"
 source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
 
-[[package]]
-name = "unicode-width"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254"
-
 [[package]]
 name = "unicode-xid"
 version = "0.2.6"
@@ -4025,17 +4083,7 @@ source = "registry+https://github.com/rust-lang/crates.io-index"
 checksum = "990065f2fe63003fe337b932cfb5e3b80e0b4d0f5ff650e6985b1048f62c8319"
 dependencies = [
  "leb128fmt",
- "wasmparser 0.244.0",
-]
-
-[[package]]
-name = "wasm-encoder"
-version = "0.246.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e1929aad146499e47362c876fcbcbb0363f730951d93438f511178626e999a8"
-dependencies = [
- "leb128fmt",
- "wasmparser 0.246.1",
+ "wasmparser",
 ]
 
 [[package]]
@@ -4046,8 +4094,8 @@ checksum = "bb0e353e6a2fbdc176932bbaab493762eb1255a7900fe0fea1a2f96c296cc909"
 dependencies = [
  "anyhow",
  "indexmap",
- "wasm-encoder 0.244.0",
- "wasmparser 0.244.0",
+ "wasm-encoder",
+ "wasmparser",
 ]
 
 [[package]]
@@ -4062,39 +4110,6 @@ dependencies = [
  "semver",
 ]
 
-[[package]]
-name = "wasmparser"
-version = "0.246.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2d991c35d79bf8336dc1cd632ed4aacf0dc5fac4bc466c670625b037b972bb9c"
-dependencies = [
- "bitflags",
- "indexmap",
- "semver",
-]
-
-[[package]]
-name = "wast"
-version = "246.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "96cf2d50bc7478dcca61d00df4dadf922ef46c5924db20a97e6daaf09fe1cb09"
-dependencies = [
- "bumpalo",
- "leb128fmt",
- "memchr",
- "unicode-width",
- "wasm-encoder 0.246.1",
-]
-
-[[package]]
-name = "wat"
-version = "1.246.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "723f2473b47f738c12fc11c8e0bb8b27ce7cf9c78cf1a29dadbc2d34a2513292"
-dependencies = [
- "wast",
-]
-
 [[package]]
 name = "web-sys"
 version = "0.3.94"
@@ -4379,9 +4394,9 @@ dependencies = [
  "serde",
  "serde_derive",
  "serde_json",
- "wasm-encoder 0.244.0",
+ "wasm-encoder",
  "wasm-metadata",
- "wasmparser 0.244.0",
+ "wasmparser",
  "wit-parser",
 ]
 
@@ -4400,7 +4415,7 @@ dependencies = [
  "serde_derive",
  "serde_json",
  "unicode-xid",
- "wasmparser 0.244.0",
+ "wasmparser",
 ]
 
 [[package]]
diff --git a/Cargo.toml b/Cargo.toml
index 919bdf45f..3eafba16e 100644
--- a/Cargo.toml
+++ b/Cargo.toml
@@ -1,20 +1,19 @@
 [workspace]
 resolver = "2"
 members = [
-    "crates/bridge",
-    "crates/kernel",
-    "crates/vfs",
-    "crates/secure-exec-vfs",
-    "crates/build-support",
-    "crates/sidecar-protocol",
+    "crates/sidecar-browser",
     "crates/sidecar-core",
-    "crates/execution",
-    "crates/secure-exec-client",
+    "crates/sidecar-protocol",
     "crates/sidecar",
-    "crates/sidecar-browser",
-    "crates/vm-config",
+    "crates/client",
+    "crates/build-support",
     "crates/v8-runtime",
-    "crates/native-baseline",
+    "crates/vm-config",
+    "crates/execution",
+    "crates/kernel",
+    "crates/bridge",
+    "crates/vfs-core",
+    "crates/vfs",
 ]
 
 [workspace.package]
@@ -22,19 +21,3 @@ version = "0.0.1"
 edition = "2021"
 license = "Apache-2.0"
 repository = "https://github.com/rivet-dev/secure-exec"
-
-[workspace.dependencies]
-secure-exec-bridge = { path = "crates/bridge", version = "0.0.1" }
-secure-exec-build-support = { path = "crates/build-support", version = "0.0.1" }
-secure-exec-kernel = { path = "crates/kernel", version = "0.0.1" }
-secure-exec-sidecar-protocol = { path = "crates/sidecar-protocol", version = "0.0.1" }
-secure-exec-sidecar-core = { path = "crates/sidecar-core", version = "0.0.1" }
-secure-exec-execution = { path = "crates/execution", version = "0.0.1" }
-secure-exec-vm-config = { path = "crates/vm-config", version = "0.0.1" }
-secure-exec-v8-runtime = { path = "crates/v8-runtime", version = "0.0.1" }
-secure-exec-client = { path = "crates/secure-exec-client", version = "0.0.1" }
-secure-exec-sidecar = { path = "crates/sidecar", version = "0.0.1" }
-secure-exec-vfs = { path = "crates/secure-exec-vfs", version = "0.0.1" }
-vfs = { package = "secure-exec-vfs-core", path = "crates/vfs", version = "0.0.1" }
-vbare = "0.0.4"
-vbare-compiler = { package = "rivet-vbare-compiler", version = "0.0.5" }
diff --git a/README.md b/README.md
index 093f629b1..c1e3112c1 100644
--- a/README.md
+++ b/README.md
@@ -1,297 +1,3 @@
-<p align="center">
-  <img src="https://secureexec.dev/secure-exec-logo.png" alt="Secure Exec" height="200" />
-</p>
+# secure-exec
 
-<h3 align="center">Secure Node.js Execution Without a Sandbox</h3>
-
-<p align="center">
-  A lightweight library for secure Node.js execution.<br />
-  No containers, no VMs — just npm-compatible sandboxing out of the box.<br />
-  Powered by the same tech as Cloudflare Workers.
-</p>
-
-<p align="center">
-  <a href="https://secureexec.dev/docs">Documentation</a> — <a href="https://secureexec.dev/docs/sdk-overview">SDK Overview</a> — <a href="https://rivet.dev/discord">Discord</a>
-</p>
-
-```
-npm install secure-exec
-```
-
-## Why Secure Exec
-
-Give your AI agent the ability to write and run code safely.
-
-- **No infrastructure required** — No Docker daemon, no hypervisor, no orchestrator. Runs anywhere Node.js, Bun, or an HTML5 browser runs. Deploy to Lambda, a VPS, or a static site — your existing deployment works.
-- **Node.js & npm compatibility** — fs, child_process, http, dns, process, os — bridged to real host capabilities, not stubbed. Run Express, Hono, Next.js, and any npm package.
-- **Built for AI agents** — Give your AI agent the ability to write and run code safely. Works with the Vercel AI SDK, LangChain, and any tool-use framework.
-- **Deny-by-default permissions** — Filesystem, network, child processes, and env vars are all blocked unless explicitly allowed. Permissions are composable functions — grant read but not write, allow fetch but block spawn.
-- **Configurable resource limits** — CPU time budgets and memory caps. Runaway code is terminated deterministically — no OOM crashes, no infinite loops, no host exhaustion.
-- **Powered by V8 isolates** — The same isolation primitive behind Cloudflare Workers for Platforms and every browser tab. Battle-tested at scale by the infrastructure you already trust.
-
-## Features
-
-- **[TypeScript](https://secureexec.dev/docs/features/typescript)** — Compile and type-check TypeScript inside the sandbox.
-- **[Permissions](https://secureexec.dev/docs/features/permissions)** — Control what sandboxed code can access on the host.
-- **[Filesystem & Mounts](https://secureexec.dev/docs/features/filesystem)** — Filesystem backends for sandboxed code.
-- **[Virtual Filesystem](https://secureexec.dev/docs/features/virtual-filesystem)** — A fully virtual filesystem inside the kernel, isolated from the host disk.
-- **[Networking](https://secureexec.dev/docs/features/networking)** — Network access for sandboxed code.
-- **[NPM & Module Loading](https://secureexec.dev/docs/features/module-loading)** — How sandboxed code resolves and loads modules.
-- **[Runtime & Platform](https://secureexec.dev/docs/features/runtime-platform)** — The host environment guest code sees, plus the platform ladder.
-- **[Output Capture](https://secureexec.dev/docs/features/output-capture)** — Capture console output from sandboxed code.
-- **[Resource Limits](https://secureexec.dev/docs/features/resource-limits)** — Bound and cancel guest execution with timeouts, memory, and CPU-time limits.
-- **[Child Processes](https://secureexec.dev/docs/features/child-processes)** — Spawn child processes from sandboxed code.
-
-## Quickstart
-
-**1. Install**
-
-```bash
-npm install secure-exec
-```
-
-**2. Create a runtime**
-
-`NodeRuntime.create()` boots a fully virtualized VM behind the native sidecar. Guest code runs inside the kernel isolation boundary with no host escapes. All options are optional: `cwd` defaults to `/workspace`, and permissions default to a secure policy that denies network access (see step 4).
-
-```ts
-import { NodeRuntime } from "secure-exec";
-
-const runtime = await NodeRuntime.create();
-```
-
-**3. Run code**
-
-Use `run()` when you want a JSON value back; the guest calls `globalThis.__return(value)` to set it. Use `exec()` when you care about side effects and want to capture `stdout`/`stderr`/`exitCode`. Guest code runs as an ES module, so `import` and top-level `await` both work.
-
-```ts
-import { NodeRuntime } from "secure-exec";
-
-// Boot a fully virtualized runtime. Guest code runs inside the kernel
-// isolation boundary - no host escapes.
-const runtime = await NodeRuntime.create();
-
-try {
-  // run() executes guest JavaScript as an ES module and returns the value the
-  // guest passes to globalThis.__return(). stdout/stderr are captured too.
-  const result = await runtime.run<{ message: string; sum: number }>(`
-    console.log("hello from secure-exec");
-    __return({ message: "hello from secure-exec", sum: 1 + 2 });
-  `);
-
-  console.log("stdout:", JSON.stringify(result.stdout.trim()));
-  console.log("value:", result.value);
-  console.log("exitCode:", result.exitCode);
-} finally {
-  // Tear down the VM and release the sidecar.
-  await runtime.dispose();
-}
-```
-
-**4. Configure permissions (optional)**
-
-Guest code is **deny-by-default**: the sandbox has no network access until you opt in (the filesystem and processes are fully virtualized and never touch the host). Pass a `permissions` policy to `NodeRuntime.create()` to open up capabilities. It merges over the secure default, so you only specify what you want to change.
-
-```ts
-const runtime = await NodeRuntime.create({
-  permissions: {
-    // Virtualized and enabled by default (these never touch the host):
-    fs: "allow",           // the in-VM filesystem
-    childProcess: "allow", // spawning processes inside the VM
-    process: "allow",      // process info (pid, cwd, ...)
-    env: "allow",          // environment variables
-    // Denied by default - opt in explicitly:
-    network: "allow",      // outbound network access
-    tool: "allow",         // host callbacks
-  },
-});
-```
-
-Set any scope to `"deny"` to lock it down. See [Permissions](https://secureexec.dev/docs/features/permissions) to learn more.
-
-*[See the full quickstart →](https://secureexec.dev/docs/quickstart)*
-
-<!--
-## Benchmarks
-
-V8 isolates vs. sandboxes.
-
-### Cold start
-
-| Percentile | Secure Exec | Fastest sandbox |
-|------------|-------------|-----------------|
-| p50        | 16.2 ms     | 440 ms          |
-| p95        | 17.9 ms     | 950 ms          |
-| p99        | 17.9 ms     | 3,150 ms        |
-
-<details>
-<summary>Methodology</summary>
-
-**What's measured:** Time from requesting an execution to first code running.
-
-**Why the gap:** Secure Exec spins up a V8 isolate inside the host process. No container, no VM, no network hop. Sandboxes must boot an entire container or microVM, allocate memory, and establish a network connection before code can run.
-
-**Sandbox baseline:** [e2b](https://www.computesdk.com/benchmarks/), the fastest provider on ComputeSDK as of March 18, 2026.
-
-**Secure Exec:** Median of 10,000 runs (100 iterations × 100 samples) on Intel i7-12700KF.
-
-[Our benchmarks →](https://secureexec.dev/docs/benchmarks)
-</details>
-
-### Memory per instance
-
-| Runtime                  | Memory    |
-|--------------------------|-----------|
-| Secure Exec              | ~3.4 MB   |
-| Sandbox provider minimum | ~256 MB   |
-
-<details>
-<summary>Methodology</summary>
-
-**What's measured:** Memory footprint added per concurrent execution.
-
-**Why the gap:** V8 isolates share the host process and its V8 engine. Each additional execution only adds its own heap and stack (~3.4 MB). Sandboxes allocate a dedicated container with a minimum memory reservation, even if the code inside uses far less.
-
-**What this means:** On a 1 GB server, you can run ~210 concurrent Secure Exec executions vs. ~4 sandboxes.
-
-**Sandbox baseline:** 256 MB, the smallest minimum among popular providers (Modal, Cloudflare Containers) as of March 18, 2026.
-
-**Secure Exec:** 3.4 MB, the converged average per execution under sustained load.
-
-[Our benchmarks →](https://secureexec.dev/docs/benchmarks)
-</details>
-
-### Cost per execution-second
-
-| Hardware     | Secure Exec      | vs. cheapest sandbox ($0.000625/s) |
-|--------------|------------------|------------------------------------|
-| AWS ARM      | $0.000011/s      | 56x cheaper                        |
-| AWS x86      | $0.000014/s      | 45x cheaper                        |
-| Hetzner ARM  | $0.0000016/s     | 380x cheaper                       |
-| Hetzner x86  | $0.0000027/s     | 232x cheaper                       |
-
-<details>
-<summary>Methodology</summary>
-
-**What's measured:** `server price per second ÷ concurrent executions per server`
-
-**Why it's cheaper:** Each execution uses ~3.4 MB instead of a 256 MB container minimum. And you run on your own hardware, which is significantly cheaper than per-second sandbox billing.
-
-**Sandbox baseline:** Cloudflare Containers, the cheapest sandbox provider benchmarked. Billed at $0.0000025/GiB·s with a 256 MB minimum (March 18, 2026).
-
-**Secure Exec:** 3.4 MB baseline per execution, assuming 70% utilization.
-
-[Our benchmarks →](https://secureexec.dev/docs/benchmarks) · [Full cost breakdown →](https://secureexec.dev/docs/cost-evaluation)
-</details>
--->
-
-## Secure Exec vs. Sandboxes
-
-Not every workload needs a full OS. Secure Exec gives you V8-level isolation for code execution — no container required.
-
-- **Secure Exec** — Run untrusted code (Node.js, Python) inside your backend process
-- **Sandboxes** — Spin up a full OS with root access, system packages, and persistent disk
-
-|                      | Secure Exec                              | Sandbox                      |
-|----------------------|------------------------------------------|------------------------------|
-| **Performance**      | ✅ Native V8                             | ✅ Native container          |
-| **Permissions**      | ✅ Granular deny-by-default              | ❌ Coarse-grained            |
-| **Setup**            | ✅ Just `npm install` — no vendor account | ❌ Vendor account required  |
-| **Infrastructure**   | ✅ Run on any cloud or hardware          | ❌ Hardware lock-in          |
-| **Egress**           | ✅ No egress fees                        | ❌ Per-GB egress fees        |
-| **API keys**         | ✅ None                                  | ❌ Required                  |
-
-[**Full comparison guide →**](https://secureexec.dev/docs/comparison/sandbox)
-
-> **Need a full sandboxed operating system? We've got that too.** <br/>
->
-> The [Sandbox Agent SDK](https://sandboxagent.dev/) lets you run coding agents in sandboxes and control them over HTTP. Supports Claude Code, Codex, OpenCode, Amp, and Pi. Works with E2B, Daytona, Vercel, Docker, and Cloudflare.
-
-## FAQ
-
-<details>
-<summary>How does it work?</summary>
-
-Secure Exec runs untrusted code inside [V8 isolates](https://v8.dev/docs/embed) — the same isolation primitive that powers every Chromium tab and Cloudflare Workers. Each execution gets its own heap, its own globals, and a deny-by-default permission boundary. There is no container, no VM, and no Docker daemon — just fast, lightweight isolation using battle-tested web technology. [Architecture →](https://secureexec.dev/docs/sdk-overview)
-</details>
-
-<details>
-<summary>Does this require Docker, nested virtualization, or a hypervisor?</summary>
-
-No. Secure Exec is a pure npm package — `npm install secure-exec` is all you need. It has zero infrastructure dependencies: no Docker daemon, no hypervisor, no orchestrator, no sidecar. It runs anywhere Node.js or Bun runs.
-</details>
-
-<details>
-<summary>Can it run in serverless environments?</summary>
-
-We are actively validating serverless platforms, but Secure Exec should work everywhere that provides a standard Node.js-like runtime. This includes Vercel Fluid Compute, AWS Lambda, and Google Cloud Run. Cloudflare Workers is not supported because it does not expose the V8 APIs that Secure Exec relies on.
-</details>
-
-<details>
-<summary>When should I use a sandbox vs. Secure Exec?</summary>
-
-Use **Secure Exec** when you need fast, lightweight code execution — AI tool calls, code evaluation, user-submitted scripts — without provisioning infrastructure. Use a **sandbox** (e2b, Modal, Daytona) when you need a full operating-system environment with persistent disk, root access, or GPU passthrough. [Full comparison →](https://secureexec.dev/docs/comparison/sandbox)
-</details>
-
-<details>
-<summary>Can I run npm install in Secure Exec to dynamically install modules?</summary>
-
-Yes. Secure Exec supports dynamic module installation via npm inside the execution environment.
-</details>
-
-<details>
-<summary>Can I use it to run dev servers like Express, Hono, or Next.js?</summary>
-
-Yes. Secure Exec bridges Node.js APIs including http, net, and child_process, so frameworks like Express, Hono, and Next.js work out of the box. For production deployments, pair Secure Exec with [Rivet Actors](https://rivet.dev/docs/actors) to get built-in routing, scaling, and lifecycle management for each server instance.
-</details>
-
-<details>
-<summary>Can it be used for long-running tasks?</summary>
-
-Yes. For orchestrating stateful, long-running tasks, we recommend pairing Secure Exec with [Rivet Actors](https://rivet.dev/docs/actors). Rivet Actors provide durable state, automatic persistence, and fault-tolerant orchestration — so each long-running task survives restarts and can be monitored, paused, or resumed without you building that infrastructure yourself.
-</details>
-
-<details>
-<summary>What are common use cases?</summary>
-
-- [AI agent code execution and tool use](https://secureexec.dev/docs/use-cases/ai-agent-code-exec)
-- [User-facing dev servers (Express, Hono, Next.js)](https://secureexec.dev/docs/use-cases/dev-servers)
-- MCP tool-code execution
-- [Sandboxed plugin / extension systems](https://secureexec.dev/docs/use-cases/plugin-systems)
-- Interactive coding playgrounds
-</details>
-
-<details>
-<summary>Does this have Node.js compatibility?</summary>
-
-Yes. Most Node.js core modules work — including fs, child_process, http, dns, process, and os. These are bridged to real host capabilities, not stubbed.
-</details>
-
-<details>
-<summary>Does this have access to a full operating system?</summary>
-
-Yes. Secure Exec includes a virtual kernel with a system bridge that supports a granular permission model. Filesystem, network, child processes, and environment variables are all available — gated behind deny-by-default permissions.
-</details>
-
-<details>
-<summary>Does Secure Exec support JIT compilation?</summary>
-
-Yes. Secure Exec runs on native V8 isolates, so your code is JIT-compiled by V8's TurboFan optimizing compiler — the same pipeline that powers Chrome and Node.js. This means full optimization tiers, inline caching, and speculative optimization out of the box.
-</details>
-
-<details>
-<summary>How does Secure Exec compare to WASM-based JavaScript runtimes like QuickJS?</summary>
-
-WASM-based runtimes like [QuickJS](https://bellard.org/quickjs/) (via quickjs-emscripten) compile a separate JS engine to WebAssembly, which means your code runs through an interpreter inside WASM — not native V8. Secure Exec uses native V8 isolates directly, so you get the same JIT-compiled performance as JavaScript running on the host. No interpretation overhead, no WASM translation layer, and full Node.js API compatibility.
-</details>
-
-## Links
-
-- [Documentation](https://secureexec.dev/docs)
-- [Changelog](https://github.com/rivet-dev/secure-exec/releases)
-- [Discord](https://rivet.dev/discord)
-- [GitHub](https://github.com/rivet-dev/secure-exec)
-
-## License
-
-Apache-2.0
+Compatibility mirror. Active runtime development moved to the AgentOS runtime packages and crates.
diff --git a/crates/bridge/Cargo.toml b/crates/bridge/Cargo.toml
index 1df86d1fe..8dbbeedb7 100644
--- a/crates/bridge/Cargo.toml
+++ b/crates/bridge/Cargo.toml
@@ -4,9 +4,10 @@ version.workspace = true
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
-description = "Shared bridge contracts between the secure-exec kernel and execution planes"
+description = "secure-exec-bridge compatibility shim for agentos-bridge"
+
+[lib]
+name = "secure_exec_bridge"
 
 [dependencies]
-serde = { version = "1.0", features = ["derive"] }
-serde_json = "1"
-tracing = "0.1"
+agentos_bridge = { package = "agentos-bridge", path = "../../../agentos/crates/bridge", version = "0.0.1" }
diff --git a/crates/bridge/bridge-contract.json b/crates/bridge/bridge-contract.json
deleted file mode 100644
index 12c3e6876..000000000
--- a/crates/bridge/bridge-contract.json
+++ /dev/null
@@ -1,1089 +0,0 @@
-{
-	"version": 1,
-	"groups": [
-		{
-			"convention": "sync",
-			"argumentTypes": [
-				"message: string"
-			],
-			"returnType": "void",
-			"names": [
-				"_log",
-				"_error"
-			]
-		},
-		{
-			"convention": "sync",
-			"argumentTypes": [
-				"...args: unknown[]"
-			],
-			"returnType": "unknown",
-			"names": [
-				"_benchNoop",
-				"_benchNetTcpMetricsResetRaw",
-				"_benchNetTcpMetricsSnapshotRaw"
-			]
-		},
-		{
-			"convention": "syncPromise",
-			"argumentTypes": [
-				"request: string"
-			],
-			"returnType": "string | null",
-			"names": [
-				"_loadPolyfill"
-			]
-		},
-		{
-			"convention": "syncPromise",
-			"argumentTypes": [
-				"specifier: string",
-				"fromDir: string",
-				"mode?: \"require\" | \"import\""
-			],
-			"returnType": "string | null",
-			"names": [
-				"_resolveModule",
-				"_resolveModuleSync"
-			]
-		},
-		{
-			"convention": "syncPromise",
-			"argumentTypes": [
-				"path: string"
-			],
-			"returnType": "string | null",
-			"names": [
-				"_loadFile",
-				"_loadFileSync"
-			]
-		},
-		{
-			"convention": "syncPromise",
-			"argumentTypes": [
-				"filename: string"
-			],
-			"returnType": "\"module\" | \"commonjs\" | \"json\" | null",
-			"names": [
-				"_moduleFormat"
-			]
-		},
-		{
-			"convention": "syncPromise",
-			"argumentTypes": [
-				"requests: Array<[string, string]>"
-			],
-			"returnType": "Array<{ resolved: string; source: string } | null>",
-			"names": [
-				"_batchResolveModules"
-			]
-		},
-		{
-			"convention": "sync",
-			"argumentTypes": [
-				"...args: unknown[]"
-			],
-			"returnType": "unknown",
-			"names": [
-				"_cryptoRandomFill",
-				"_cryptoRandomUUID",
-				"_cryptoHashDigest",
-				"_cryptoHmacDigest",
-				"_cryptoPbkdf2",
-				"_cryptoScrypt",
-				"_cryptoCipheriv",
-				"_cryptoDecipheriv",
-				"_cryptoCipherivCreate",
-				"_cryptoCipherivUpdate",
-				"_cryptoCipherivFinal",
-				"_cryptoSign",
-				"_cryptoVerify",
-				"_cryptoAsymmetricOp",
-				"_cryptoCreateKeyObject",
-				"_cryptoGenerateKeyPairSync",
-				"_cryptoGenerateKeySync",
-				"_cryptoGeneratePrimeSync",
-				"_cryptoDiffieHellman",
-				"_cryptoDiffieHellmanGroup",
-				"_cryptoDiffieHellmanSessionCreate",
-				"_cryptoDiffieHellmanSessionCall",
-				"_cryptoDiffieHellmanSessionDestroy",
-				"_cryptoSubtle"
-			]
-		},
-		{
-			"convention": "sync",
-			"argumentTypes": [
-				"...args: unknown[]"
-			],
-			"returnType": "unknown",
-			"names": [
-				"_fsReadFile",
-				"_fsWriteFile",
-				"_fsReadFileBinary",
-				"_fsWriteFileBinary",
-				"_fsWriteFileBinaryRaw",
-				"_fsReadDir",
-				"_fsMkdir",
-				"_fsRmdir",
-				"_fsExists",
-				"_fsStat",
-				"_fsUnlink",
-				"_fsRename",
-				"_fsChmod",
-				"_fsChown",
-				"_fsLink",
-				"_fsSymlink",
-				"_fsReadlink",
-				"_fsLstat",
-				"_fsTruncate",
-				"_fsUtimes",
-				"_fsLutimes",
-				"fs.openSync",
-				"fs.closeSync",
-				"fs.readSync",
-				"_fsReadRaw",
-				"fs.writeSync",
-				"_fsWriteRaw",
-				"_fsWritevRaw",
-				"fs.fstatSync",
-				"fs.futimesSync"
-			]
-		},
-		{
-			"convention": "async",
-			"argumentTypes": [
-				"...args: unknown[]"
-			],
-			"returnType": "unknown",
-			"names": [
-				"_fsReadFileAsync",
-				"_fsWriteFileAsync",
-				"_fsReadFileBinaryAsync",
-				"_fsWriteFileBinaryAsync",
-				"_fsReadDirAsync",
-				"_fsMkdirAsync",
-				"_fsRmdirAsync",
-				"_fsAccessAsync",
-				"_fsStatAsync",
-				"_fsUnlinkAsync",
-				"_fsRenameAsync",
-				"_fsChmodAsync",
-				"_fsChownAsync",
-				"_fsLinkAsync",
-				"_fsSymlinkAsync",
-				"_fsReadlinkAsync",
-				"_fsLstatAsync",
-				"_fsTruncateAsync",
-				"_fsUtimesAsync",
-				"_fsLutimesAsync"
-			]
-		},
-		{
-			"convention": "sync",
-			"argumentTypes": [
-				"...args: unknown[]"
-			],
-			"returnType": "unknown",
-			"names": [
-				"_childProcessSpawnStart",
-				"_childProcessPoll",
-				"_childProcessStdinWrite",
-				"_childProcessStdinClose",
-				"_childProcessKill",
-				"_processKill",
-				"_processSignalState"
-			]
-		},
-		{
-			"convention": "syncPromise",
-			"argumentTypes": [
-				"...args: unknown[]"
-			],
-			"returnType": "unknown",
-			"names": [
-				"_childProcessSpawnSync"
-			]
-		},
-		{
-			"convention": "sync",
-			"argumentTypes": [
-				"...args: unknown[]"
-			],
-			"returnType": "unknown",
-			"names": [
-				"process.cpuUsage",
-				"process.memoryUsage",
-				"process.resourceUsage",
-				"process.versions",
-				"_vmCreateContext",
-				"_vmRunInContext",
-				"_vmRunInThisContext",
-				"_networkHttp2ServerListenRaw",
-				"_networkHttp2SessionConnectRaw",
-				"_networkHttp2SessionRequestRaw",
-				"_networkHttp2SessionSettingsRaw",
-				"_networkHttp2SessionSetLocalWindowSizeRaw",
-				"_networkHttp2SessionGoawayRaw",
-				"_networkHttp2SessionCloseRaw",
-				"_networkHttp2SessionDestroyRaw",
-				"_networkHttp2ServerPollRaw",
-				"_networkHttp2SessionPollRaw",
-				"_networkHttp2StreamRespondRaw",
-				"_networkHttp2StreamPushStreamRaw",
-				"_networkHttp2StreamWriteRaw",
-				"_networkHttp2StreamEndRaw",
-				"_networkHttp2StreamCloseRaw",
-				"_networkHttp2StreamPauseRaw",
-				"_networkHttp2StreamResumeRaw",
-				"_networkHttp2StreamRespondWithFileRaw",
-				"_networkHttp2ServerRespondRaw",
-				"_networkHttpServerRespondRaw",
-				"_networkHttpServerRequestRaw",
-				"_upgradeSocketWriteRaw",
-				"_upgradeSocketEndRaw",
-				"_upgradeSocketDestroyRaw",
-				"_networkDnsLookupSyncRaw",
-				"_netSocketConnectRaw",
-				"_netSocketPollRaw",
-				"_netSocketReadRaw",
-				"_netSocketSetNoDelayRaw",
-				"_netSocketSetKeepAliveRaw",
-				"_netSocketWriteRaw",
-				"_netSocketEndRaw",
-				"_netSocketDestroyRaw",
-				"_netSocketUpgradeTlsRaw",
-				"_netSocketGetTlsClientHelloRaw",
-				"_netSocketTlsQueryRaw",
-				"_tlsGetCiphersRaw",
-				"_netReserveTcpPortRaw",
-				"_netReleaseTcpPortRaw",
-				"_netServerListenRaw",
-				"_netServerAcceptRaw",
-				"_dgramSocketCreateRaw",
-				"_dgramSocketBindRaw",
-				"_dgramSocketRecvRaw",
-				"_dgramSocketSendRaw",
-				"_dgramSocketCloseRaw",
-				"_dgramSocketAddressRaw",
-				"_dgramSocketSetBufferSizeRaw",
-				"_dgramSocketGetBufferSizeRaw",
-				"_sqliteConstantsRaw",
-				"_sqliteDatabaseOpenRaw",
-				"_sqliteDatabaseCloseRaw",
-				"_sqliteDatabaseExecRaw",
-				"_sqliteDatabaseQueryRaw",
-				"_sqliteDatabasePrepareRaw",
-				"_sqliteDatabaseLocationRaw",
-				"_sqliteDatabaseCheckpointRaw",
-				"_sqliteStatementRunRaw",
-				"_sqliteStatementGetRaw",
-				"_sqliteStatementAllRaw",
-				"_sqliteStatementColumnsRaw",
-				"_sqliteStatementSetReturnArraysRaw",
-				"_sqliteStatementSetReadBigIntsRaw",
-				"_sqliteStatementSetAllowBareNamedParametersRaw",
-				"_sqliteStatementSetAllowUnknownNamedParametersRaw",
-				"_sqliteStatementFinalizeRaw",
-				"_kernelStdioWriteRaw",
-				"_kernelPollRaw",
-				"_kernelIsattyRaw",
-				"_kernelTtySizeRaw",
-				"_ptySetRawMode"
-			]
-		},
-		{
-			"convention": "async",
-			"argumentTypes": [
-				"specifier: string",
-				"referrer: string"
-			],
-			"returnType": "Record<string, unknown> | null",
-			"names": [
-				"_dynamicImport"
-			]
-		},
-		{
-			"convention": "async",
-			"argumentTypes": [
-				"delayMs: number"
-			],
-			"returnType": "void",
-			"names": [
-				"_scheduleTimer"
-			]
-		},
-		{
-			"convention": "sync",
-			"argumentTypes": [
-				"request: unknown"
-			],
-			"returnType": "unknown",
-			"names": [
-				"_pythonRpc"
-			]
-		},
-		{
-			"convention": "sync",
-			"argumentTypes": [
-				"maxBytes: number",
-				"timeoutMs: number"
-			],
-			"returnType": "string | null",
-			"names": [
-				"_pythonStdinRead"
-			]
-		},
-		{
-			"convention": "sync",
-			"argumentTypes": [
-				"...args: unknown[]"
-			],
-			"returnType": "unknown",
-			"names": [
-				"_kernelStdinReadRaw"
-			]
-		},
-		{
-			"convention": "async",
-			"argumentTypes": [],
-			"returnType": "{ done: boolean; dataBase64?: string }",
-			"names": [
-				"_kernelStdinRead"
-			]
-		},
-		{
-			"convention": "async",
-			"argumentTypes": [
-				"...args: unknown[]"
-			],
-			"returnType": "unknown",
-			"names": [
-				"_networkDnsLookupRaw",
-				"_networkDnsResolveRaw",
-				"_networkHttpServerListenRaw",
-				"_networkHttpServerCloseRaw",
-				"_networkHttpServerWaitRaw",
-				"_networkHttp2ServerCloseRaw",
-				"_networkHttp2ServerWaitRaw",
-				"_networkHttp2SessionWaitRaw",
-				"_netSocketWaitConnectRaw",
-				"_netServerCloseRaw"
-			]
-		}
-	],
-	"dispatch": {
-		"_batchResolveModules": {
-			"method": "__batch_resolve_modules",
-			"translateArgs": false
-		},
-		"_benchNetTcpMetricsResetRaw": {
-			"method": "__bench.net_tcp_metrics_reset",
-			"translateArgs": false
-		},
-		"_benchNetTcpMetricsSnapshotRaw": {
-			"method": "__bench.net_tcp_metrics_snapshot",
-			"translateArgs": false
-		},
-		"_benchNoop": {
-			"method": "__bench.noop",
-			"translateArgs": false
-		},
-		"_childProcessKill": {
-			"method": "child_process.kill",
-			"translateArgs": false
-		},
-		"_childProcessPoll": {
-			"method": "child_process.poll",
-			"translateArgs": false
-		},
-		"_childProcessSpawnStart": {
-			"method": "child_process.spawn",
-			"translateArgs": false
-		},
-		"_childProcessSpawnSync": {
-			"method": "child_process.spawn_sync",
-			"translateArgs": false
-		},
-		"_childProcessStdinClose": {
-			"method": "child_process.close_stdin",
-			"translateArgs": false
-		},
-		"_childProcessStdinWrite": {
-			"method": "child_process.write_stdin",
-			"translateArgs": false
-		},
-		"_cryptoAsymmetricOp": {
-			"method": "crypto.asymmetricOp",
-			"translateArgs": false
-		},
-		"_cryptoCipheriv": {
-			"method": "crypto.cipheriv",
-			"translateArgs": false
-		},
-		"_cryptoCipherivCreate": {
-			"method": "crypto.cipherivCreate",
-			"translateArgs": false
-		},
-		"_cryptoCipherivFinal": {
-			"method": "crypto.cipherivFinal",
-			"translateArgs": false
-		},
-		"_cryptoCipherivUpdate": {
-			"method": "crypto.cipherivUpdate",
-			"translateArgs": false
-		},
-		"_cryptoCreateKeyObject": {
-			"method": "crypto.createKeyObject",
-			"translateArgs": false
-		},
-		"_cryptoDecipheriv": {
-			"method": "crypto.decipheriv",
-			"translateArgs": false
-		},
-		"_cryptoDiffieHellman": {
-			"method": "crypto.diffieHellman",
-			"translateArgs": false
-		},
-		"_cryptoDiffieHellmanGroup": {
-			"method": "crypto.diffieHellmanGroup",
-			"translateArgs": false
-		},
-		"_cryptoDiffieHellmanSessionCall": {
-			"method": "crypto.diffieHellmanSessionCall",
-			"translateArgs": false
-		},
-		"_cryptoDiffieHellmanSessionCreate": {
-			"method": "crypto.diffieHellmanSessionCreate",
-			"translateArgs": false
-		},
-		"_cryptoDiffieHellmanSessionDestroy": {
-			"method": "crypto.diffieHellmanSessionDestroy",
-			"translateArgs": false
-		},
-		"_cryptoGenerateKeyPairSync": {
-			"method": "crypto.generateKeyPairSync",
-			"translateArgs": false
-		},
-		"_cryptoGenerateKeySync": {
-			"method": "crypto.generateKeySync",
-			"translateArgs": false
-		},
-		"_cryptoGeneratePrimeSync": {
-			"method": "crypto.generatePrimeSync",
-			"translateArgs": false
-		},
-		"_cryptoHashDigest": {
-			"method": "crypto.hashDigest",
-			"translateArgs": false
-		},
-		"_cryptoHmacDigest": {
-			"method": "crypto.hmacDigest",
-			"translateArgs": false
-		},
-		"_cryptoPbkdf2": {
-			"method": "crypto.pbkdf2",
-			"translateArgs": false
-		},
-		"_cryptoRandomFill": {
-			"method": "crypto.randomFill",
-			"translateArgs": false
-		},
-		"_cryptoRandomUUID": {
-			"method": "crypto.randomUUID",
-			"translateArgs": false
-		},
-		"_cryptoScrypt": {
-			"method": "crypto.scrypt",
-			"translateArgs": false
-		},
-		"_cryptoSign": {
-			"method": "crypto.sign",
-			"translateArgs": false
-		},
-		"_cryptoSubtle": {
-			"method": "crypto.subtle",
-			"translateArgs": false
-		},
-		"_cryptoVerify": {
-			"method": "crypto.verify",
-			"translateArgs": false
-		},
-		"_dgramSocketAddressRaw": {
-			"method": "dgram.address",
-			"translateArgs": false
-		},
-		"_dgramSocketBindRaw": {
-			"method": "dgram.bind",
-			"translateArgs": false
-		},
-		"_dgramSocketCloseRaw": {
-			"method": "dgram.close",
-			"translateArgs": false
-		},
-		"_dgramSocketCreateRaw": {
-			"method": "dgram.createSocket",
-			"translateArgs": false
-		},
-		"_dgramSocketGetBufferSizeRaw": {
-			"method": "dgram.getBufferSize",
-			"translateArgs": false
-		},
-		"_dgramSocketRecvRaw": {
-			"method": "dgram.poll",
-			"translateArgs": false
-		},
-		"_dgramSocketSendRaw": {
-			"method": "dgram.send",
-			"translateArgs": false
-		},
-		"_dgramSocketSetBufferSizeRaw": {
-			"method": "dgram.setBufferSize",
-			"translateArgs": false
-		},
-		"_error": {
-			"method": "__log",
-			"translateArgs": false
-		},
-		"_fsAccessAsync": {
-			"method": "fs.promises.access",
-			"translateArgs": false
-		},
-		"_fsChmod": {
-			"method": "fs.chmodSync",
-			"translateArgs": false
-		},
-		"_fsChmodAsync": {
-			"method": "fs.promises.chmod",
-			"translateArgs": false
-		},
-		"_fsChown": {
-			"method": "fs.chownSync",
-			"translateArgs": false
-		},
-		"_fsChownAsync": {
-			"method": "fs.promises.chown",
-			"translateArgs": false
-		},
-		"_fsExists": {
-			"method": "fs.existsSync",
-			"translateArgs": false
-		},
-		"_fsLink": {
-			"method": "fs.linkSync",
-			"translateArgs": false
-		},
-		"_fsLinkAsync": {
-			"method": "fs.promises.link",
-			"translateArgs": false
-		},
-		"_fsLstat": {
-			"method": "fs.lstatSync",
-			"translateArgs": false
-		},
-		"_fsLstatAsync": {
-			"method": "fs.promises.lstat",
-			"translateArgs": false
-		},
-		"_fsLutimes": {
-			"method": "fs.lutimesSync",
-			"translateArgs": false
-		},
-		"_fsLutimesAsync": {
-			"method": "fs.promises.lutimes",
-			"translateArgs": false
-		},
-		"_fsMkdir": {
-			"method": "fs.mkdirSync",
-			"translateArgs": false
-		},
-		"_fsMkdirAsync": {
-			"method": "fs.promises.mkdir",
-			"translateArgs": false
-		},
-		"_fsReadDir": {
-			"method": "fs.readdirSync",
-			"translateArgs": false
-		},
-		"_fsReadDirAsync": {
-			"method": "fs.promises.readdir",
-			"translateArgs": false
-		},
-		"_fsReadFile": {
-			"method": "fs.readFileSync",
-			"translateArgs": false
-		},
-		"_fsReadFileAsync": {
-			"method": "fs.promises.readFile",
-			"translateArgs": false
-		},
-		"_fsReadFileBinary": {
-			"method": "fs.readFileSync",
-			"translateArgs": true
-		},
-		"_fsReadFileBinaryAsync": {
-			"method": "fs.promises.readFile",
-			"translateArgs": true
-		},
-		"_fsReadlink": {
-			"method": "fs.readlinkSync",
-			"translateArgs": false
-		},
-		"_fsReadlinkAsync": {
-			"method": "fs.promises.readlink",
-			"translateArgs": false
-		},
-		"_fsRename": {
-			"method": "fs.renameSync",
-			"translateArgs": false
-		},
-		"_fsRenameAsync": {
-			"method": "fs.promises.rename",
-			"translateArgs": false
-		},
-		"_fsRmdir": {
-			"method": "fs.rmdirSync",
-			"translateArgs": false
-		},
-		"_fsRmdirAsync": {
-			"method": "fs.promises.rmdir",
-			"translateArgs": false
-		},
-		"_fsStat": {
-			"method": "fs.statSync",
-			"translateArgs": false
-		},
-		"_fsStatAsync": {
-			"method": "fs.promises.stat",
-			"translateArgs": false
-		},
-		"_fsSymlink": {
-			"method": "fs.symlinkSync",
-			"translateArgs": false
-		},
-		"_fsSymlinkAsync": {
-			"method": "fs.promises.symlink",
-			"translateArgs": false
-		},
-		"_fsTruncate": {
-			"method": "fs.truncateSync",
-			"translateArgs": false
-		},
-		"_fsTruncateAsync": {
-			"method": "fs.promises.truncate",
-			"translateArgs": false
-		},
-		"_fsUnlink": {
-			"method": "fs.unlinkSync",
-			"translateArgs": false
-		},
-		"_fsUnlinkAsync": {
-			"method": "fs.promises.unlink",
-			"translateArgs": false
-		},
-		"_fsUtimes": {
-			"method": "fs.utimesSync",
-			"translateArgs": false
-		},
-		"_fsUtimesAsync": {
-			"method": "fs.promises.utimes",
-			"translateArgs": false
-		},
-		"_fsWriteFile": {
-			"method": "fs.writeFileSync",
-			"translateArgs": false
-		},
-		"_fsWriteFileAsync": {
-			"method": "fs.promises.writeFile",
-			"translateArgs": false
-		},
-		"_fsWriteFileBinary": {
-			"method": "fs.writeFileSync",
-			"translateArgs": true
-		},
-		"_fsWriteFileBinaryRaw": {
-			"method": "fs.writeFileSync",
-			"translateArgs": false
-		},
-		"_fsWriteFileBinaryAsync": {
-			"method": "fs.promises.writeFile",
-			"translateArgs": true
-		},
-		"_kernelIsattyRaw": {
-			"method": "__kernel_isatty",
-			"translateArgs": false
-		},
-		"_kernelPollRaw": {
-			"method": "__kernel_poll",
-			"translateArgs": false
-		},
-		"_kernelStdinRead": {
-			"method": "__kernel_stdin_read",
-			"translateArgs": false
-		},
-		"_kernelStdinReadRaw": {
-			"method": "__kernel_stdin_read",
-			"translateArgs": false
-		},
-		"_kernelStdioWriteRaw": {
-			"method": "__kernel_stdio_write",
-			"translateArgs": false
-		},
-		"_kernelTtySizeRaw": {
-			"method": "__kernel_tty_size",
-			"translateArgs": false
-		},
-		"_loadFile": {
-			"method": "__load_file",
-			"translateArgs": false
-		},
-		"_loadFileSync": {
-			"method": "__load_file",
-			"translateArgs": false
-		},
-		"_loadPolyfill": {
-			"method": "__load_polyfill",
-			"translateArgs": false
-		},
-		"_log": {
-			"method": "__log",
-			"translateArgs": false
-		},
-		"_moduleFormat": {
-			"method": "__module_format",
-			"translateArgs": false
-		},
-		"_netReleaseTcpPortRaw": {
-			"method": "net.release_tcp_port",
-			"translateArgs": false
-		},
-		"_netReserveTcpPortRaw": {
-			"method": "net.reserve_tcp_port",
-			"translateArgs": false
-		},
-		"_netServerAcceptRaw": {
-			"method": "net.server_accept",
-			"translateArgs": false
-		},
-		"_netServerCloseRaw": {
-			"method": "net.server_close",
-			"translateArgs": false
-		},
-		"_netServerListenRaw": {
-			"method": "net.listen",
-			"translateArgs": false
-		},
-		"_netSocketConnectRaw": {
-			"method": "net.connect",
-			"translateArgs": false
-		},
-		"_netSocketDestroyRaw": {
-			"method": "net.destroy",
-			"translateArgs": false
-		},
-		"_netSocketEndRaw": {
-			"method": "net.shutdown",
-			"translateArgs": false
-		},
-		"_netSocketGetTlsClientHelloRaw": {
-			"method": "net.socket_get_tls_client_hello",
-			"translateArgs": false
-		},
-		"_netSocketPollRaw": {
-			"method": "net.poll",
-			"translateArgs": false
-		},
-		"_netSocketReadRaw": {
-			"method": "net.socket_read",
-			"translateArgs": false
-		},
-		"_netSocketSetKeepAliveRaw": {
-			"method": "net.socket_set_keep_alive",
-			"translateArgs": false
-		},
-		"_netSocketSetNoDelayRaw": {
-			"method": "net.socket_set_no_delay",
-			"translateArgs": false
-		},
-		"_netSocketTlsQueryRaw": {
-			"method": "net.socket_tls_query",
-			"translateArgs": false
-		},
-		"_netSocketUpgradeTlsRaw": {
-			"method": "net.socket_upgrade_tls",
-			"translateArgs": false
-		},
-		"_netSocketWaitConnectRaw": {
-			"method": "net.socket_wait_connect",
-			"translateArgs": false
-		},
-		"_netSocketWriteRaw": {
-			"method": "net.write",
-			"translateArgs": false
-		},
-		"_networkDnsLookupRaw": {
-			"method": "dns.lookup",
-			"translateArgs": false
-		},
-		"_networkDnsLookupSyncRaw": {
-			"method": "dns.lookup",
-			"translateArgs": false
-		},
-		"_networkDnsResolveRaw": {
-			"method": "dns.resolve",
-			"translateArgs": false
-		},
-		"_networkHttp2ServerCloseRaw": {
-			"method": "net.http2_server_close",
-			"translateArgs": false
-		},
-		"_networkHttp2ServerListenRaw": {
-			"method": "net.http2_server_listen",
-			"translateArgs": false
-		},
-		"_networkHttp2ServerPollRaw": {
-			"method": "net.http2_server_poll",
-			"translateArgs": false
-		},
-		"_networkHttp2ServerRespondRaw": {
-			"method": "net.http2_server_respond",
-			"translateArgs": false
-		},
-		"_networkHttp2ServerWaitRaw": {
-			"method": "net.http2_server_wait",
-			"translateArgs": false
-		},
-		"_networkHttp2SessionCloseRaw": {
-			"method": "net.http2_session_close",
-			"translateArgs": false
-		},
-		"_networkHttp2SessionConnectRaw": {
-			"method": "net.http2_session_connect",
-			"translateArgs": false
-		},
-		"_networkHttp2SessionDestroyRaw": {
-			"method": "net.http2_session_destroy",
-			"translateArgs": false
-		},
-		"_networkHttp2SessionGoawayRaw": {
-			"method": "net.http2_session_goaway",
-			"translateArgs": false
-		},
-		"_networkHttp2SessionPollRaw": {
-			"method": "net.http2_session_poll",
-			"translateArgs": false
-		},
-		"_networkHttp2SessionRequestRaw": {
-			"method": "net.http2_session_request",
-			"translateArgs": false
-		},
-		"_networkHttp2SessionSetLocalWindowSizeRaw": {
-			"method": "net.http2_session_set_local_window_size",
-			"translateArgs": false
-		},
-		"_networkHttp2SessionSettingsRaw": {
-			"method": "net.http2_session_settings",
-			"translateArgs": false
-		},
-		"_networkHttp2SessionWaitRaw": {
-			"method": "net.http2_session_wait",
-			"translateArgs": false
-		},
-		"_networkHttp2StreamCloseRaw": {
-			"method": "net.http2_stream_close",
-			"translateArgs": false
-		},
-		"_networkHttp2StreamEndRaw": {
-			"method": "net.http2_stream_end",
-			"translateArgs": false
-		},
-		"_networkHttp2StreamPauseRaw": {
-			"method": "net.http2_stream_pause",
-			"translateArgs": false
-		},
-		"_networkHttp2StreamPushStreamRaw": {
-			"method": "net.http2_stream_push_stream",
-			"translateArgs": false
-		},
-		"_networkHttp2StreamRespondRaw": {
-			"method": "net.http2_stream_respond",
-			"translateArgs": false
-		},
-		"_networkHttp2StreamRespondWithFileRaw": {
-			"method": "net.http2_stream_respond_with_file",
-			"translateArgs": false
-		},
-		"_networkHttp2StreamResumeRaw": {
-			"method": "net.http2_stream_resume",
-			"translateArgs": false
-		},
-		"_networkHttp2StreamWriteRaw": {
-			"method": "net.http2_stream_write",
-			"translateArgs": false
-		},
-		"_networkHttpServerCloseRaw": {
-			"method": "net.http_close",
-			"translateArgs": false
-		},
-		"_networkHttpServerListenRaw": {
-			"method": "net.http_listen",
-			"translateArgs": false
-		},
-		"_networkHttpServerRequestRaw": {
-			"method": "net.http_request",
-			"translateArgs": false
-		},
-		"_networkHttpServerRespondRaw": {
-			"method": "net.http_respond",
-			"translateArgs": false
-		},
-		"_networkHttpServerWaitRaw": {
-			"method": "net.http_wait",
-			"translateArgs": false
-		},
-		"_processKill": {
-			"method": "process.kill",
-			"translateArgs": false
-		},
-		"_processSignalState": {
-			"method": "process.signal_state",
-			"translateArgs": false
-		},
-		"_ptySetRawMode": {
-			"method": "__pty_set_raw_mode",
-			"translateArgs": false
-		},
-		"_resolveModule": {
-			"method": "__resolve_module",
-			"translateArgs": false
-		},
-		"_resolveModuleSync": {
-			"method": "__resolve_module",
-			"translateArgs": false
-		},
-		"_scheduleTimer": {
-			"method": "__schedule_timer",
-			"translateArgs": false
-		},
-		"_sqliteConstantsRaw": {
-			"method": "sqlite.constants",
-			"translateArgs": false
-		},
-		"_sqliteDatabaseCheckpointRaw": {
-			"method": "sqlite.checkpoint",
-			"translateArgs": false
-		},
-		"_sqliteDatabaseCloseRaw": {
-			"method": "sqlite.close",
-			"translateArgs": false
-		},
-		"_sqliteDatabaseExecRaw": {
-			"method": "sqlite.exec",
-			"translateArgs": false
-		},
-		"_sqliteDatabaseLocationRaw": {
-			"method": "sqlite.location",
-			"translateArgs": false
-		},
-		"_sqliteDatabaseOpenRaw": {
-			"method": "sqlite.open",
-			"translateArgs": false
-		},
-		"_sqliteDatabasePrepareRaw": {
-			"method": "sqlite.prepare",
-			"translateArgs": false
-		},
-		"_sqliteDatabaseQueryRaw": {
-			"method": "sqlite.query",
-			"translateArgs": false
-		},
-		"_sqliteStatementAllRaw": {
-			"method": "sqlite.statement.all",
-			"translateArgs": false
-		},
-		"_sqliteStatementColumnsRaw": {
-			"method": "sqlite.statement.columns",
-			"translateArgs": false
-		},
-		"_sqliteStatementFinalizeRaw": {
-			"method": "sqlite.statement.finalize",
-			"translateArgs": false
-		},
-		"_sqliteStatementGetRaw": {
-			"method": "sqlite.statement.get",
-			"translateArgs": false
-		},
-		"_sqliteStatementRunRaw": {
-			"method": "sqlite.statement.run",
-			"translateArgs": false
-		},
-		"_sqliteStatementSetAllowBareNamedParametersRaw": {
-			"method": "sqlite.statement.setAllowBareNamedParameters",
-			"translateArgs": false
-		},
-		"_sqliteStatementSetAllowUnknownNamedParametersRaw": {
-			"method": "sqlite.statement.setAllowUnknownNamedParameters",
-			"translateArgs": false
-		},
-		"_sqliteStatementSetReadBigIntsRaw": {
-			"method": "sqlite.statement.setReadBigInts",
-			"translateArgs": false
-		},
-		"_sqliteStatementSetReturnArraysRaw": {
-			"method": "sqlite.statement.setReturnArrays",
-			"translateArgs": false
-		},
-		"_tlsGetCiphersRaw": {
-			"method": "tls.get_ciphers",
-			"translateArgs": false
-		},
-		"_upgradeSocketDestroyRaw": {
-			"method": "net.upgrade_socket_destroy",
-			"translateArgs": false
-		},
-		"_upgradeSocketEndRaw": {
-			"method": "net.upgrade_socket_end",
-			"translateArgs": false
-		},
-		"_upgradeSocketWriteRaw": {
-			"method": "net.upgrade_socket_write",
-			"translateArgs": false
-		},
-		"fs.closeSync": {
-			"method": "fs.closeSync",
-			"translateArgs": false
-		},
-		"fs.fstatSync": {
-			"method": "fs.fstatSync",
-			"translateArgs": false
-		},
-		"fs.futimesSync": {
-			"method": "fs.futimesSync",
-			"translateArgs": false
-		},
-		"fs.openSync": {
-			"method": "fs.openSync",
-			"translateArgs": false
-		},
-		"fs.readSync": {
-			"method": "fs.readSync",
-			"translateArgs": false
-		},
-		"_fsReadRaw": {
-			"method": "fs.readSync",
-			"translateArgs": false
-		},
-		"fs.writeSync": {
-			"method": "fs.writeSync",
-			"translateArgs": false
-		},
-		"_fsWriteRaw": {
-			"method": "fs.writeSync",
-			"translateArgs": false
-		},
-		"_fsWritevRaw": {
-			"method": "fs.writevSync",
-			"translateArgs": false
-		}
-	}
-}
diff --git a/crates/bridge/src/lib.rs b/crates/bridge/src/lib.rs
index ef3502c79..11727c2a2 100644
--- a/crates/bridge/src/lib.rs
+++ b/crates/bridge/src/lib.rs
@@ -1,705 +1,3 @@
-#![forbid(unsafe_code)]
+//! Compatibility shim for `agentos-bridge`.
 
-//! Shared bridge contracts between the secure-exec kernel and execution planes.
-
-pub mod queue_tracker;
-
-use std::collections::BTreeMap;
-use std::sync::OnceLock;
-use std::time::{Duration, SystemTime};
-
-use serde::Deserialize;
-
-/// Shared associated types for bridge implementations.
-pub trait BridgeTypes {
-    type Error;
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum FileKind {
-    File,
-    Directory,
-    SymbolicLink,
-    Other,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct FileMetadata {
-    pub mode: u32,
-    pub size: u64,
-    pub kind: FileKind,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct DirectoryEntry {
-    pub name: String,
-    pub kind: FileKind,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PathRequest {
-    pub vm_id: String,
-    pub path: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ReadFileRequest {
-    pub vm_id: String,
-    pub path: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct WriteFileRequest {
-    pub vm_id: String,
-    pub path: String,
-    pub contents: Vec<u8>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ReadDirRequest {
-    pub vm_id: String,
-    pub path: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct CreateDirRequest {
-    pub vm_id: String,
-    pub path: String,
-    pub recursive: bool,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct RenameRequest {
-    pub vm_id: String,
-    pub from_path: String,
-    pub to_path: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct SymlinkRequest {
-    pub vm_id: String,
-    pub target_path: String,
-    pub link_path: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ChmodRequest {
-    pub vm_id: String,
-    pub path: String,
-    pub mode: u32,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct TruncateRequest {
-    pub vm_id: String,
-    pub path: String,
-    pub len: u64,
-}
-
-pub trait FilesystemBridge: BridgeTypes {
-    fn read_file(&mut self, request: ReadFileRequest) -> Result<Vec<u8>, Self::Error>;
-    fn write_file(&mut self, request: WriteFileRequest) -> Result<(), Self::Error>;
-    fn stat(&mut self, request: PathRequest) -> Result<FileMetadata, Self::Error>;
-    fn lstat(&mut self, request: PathRequest) -> Result<FileMetadata, Self::Error>;
-    fn read_dir(&mut self, request: ReadDirRequest) -> Result<Vec<DirectoryEntry>, Self::Error>;
-    fn create_dir(&mut self, request: CreateDirRequest) -> Result<(), Self::Error>;
-    fn remove_file(&mut self, request: PathRequest) -> Result<(), Self::Error>;
-    fn remove_dir(&mut self, request: PathRequest) -> Result<(), Self::Error>;
-    fn rename(&mut self, request: RenameRequest) -> Result<(), Self::Error>;
-    fn symlink(&mut self, request: SymlinkRequest) -> Result<(), Self::Error>;
-    fn read_link(&mut self, request: PathRequest) -> Result<String, Self::Error>;
-    fn chmod(&mut self, request: ChmodRequest) -> Result<(), Self::Error>;
-    fn truncate(&mut self, request: TruncateRequest) -> Result<(), Self::Error>;
-    fn exists(&mut self, request: PathRequest) -> Result<bool, Self::Error>;
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum PermissionVerdict {
-    Allow,
-    Deny,
-    Prompt,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PermissionDecision {
-    pub verdict: PermissionVerdict,
-    pub reason: Option<String>,
-}
-
-impl PermissionDecision {
-    pub fn allow() -> Self {
-        Self {
-            verdict: PermissionVerdict::Allow,
-            reason: None,
-        }
-    }
-
-    pub fn deny(reason: impl Into<String>) -> Self {
-        Self {
-            verdict: PermissionVerdict::Deny,
-            reason: Some(reason.into()),
-        }
-    }
-
-    pub fn prompt(reason: impl Into<String>) -> Self {
-        Self {
-            verdict: PermissionVerdict::Prompt,
-            reason: Some(reason.into()),
-        }
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum FilesystemAccess {
-    Read,
-    Write,
-    Stat,
-    ReadDir,
-    CreateDir,
-    Remove,
-    Rename,
-    Symlink,
-    ReadLink,
-    Chmod,
-    Truncate,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct FilesystemPermissionRequest {
-    pub vm_id: String,
-    pub path: String,
-    pub access: FilesystemAccess,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum NetworkAccess {
-    Fetch,
-    Http,
-    Dns,
-    Listen,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct NetworkPermissionRequest {
-    pub vm_id: String,
-    pub access: NetworkAccess,
-    pub resource: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct CommandPermissionRequest {
-    pub vm_id: String,
-    pub command: String,
-    pub args: Vec<String>,
-    pub cwd: Option<String>,
-    pub env: BTreeMap<String, String>,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum EnvironmentAccess {
-    Read,
-    Write,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct EnvironmentPermissionRequest {
-    pub vm_id: String,
-    pub access: EnvironmentAccess,
-    pub key: String,
-    pub value: Option<String>,
-}
-
-pub trait PermissionBridge: BridgeTypes {
-    fn check_filesystem_access(
-        &mut self,
-        request: FilesystemPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error>;
-    fn check_network_access(
-        &mut self,
-        request: NetworkPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error>;
-    fn check_command_execution(
-        &mut self,
-        request: CommandPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error>;
-    fn check_environment_access(
-        &mut self,
-        request: EnvironmentPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error>;
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct FilesystemSnapshot {
-    pub format: String,
-    pub bytes: Vec<u8>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct LoadFilesystemStateRequest {
-    pub vm_id: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct FlushFilesystemStateRequest {
-    pub vm_id: String,
-    pub snapshot: FilesystemSnapshot,
-}
-
-pub trait PersistenceBridge: BridgeTypes {
-    fn load_filesystem_state(
-        &mut self,
-        request: LoadFilesystemStateRequest,
-    ) -> Result<Option<FilesystemSnapshot>, Self::Error>;
-    fn flush_filesystem_state(
-        &mut self,
-        request: FlushFilesystemStateRequest,
-    ) -> Result<(), Self::Error>;
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ClockRequest {
-    pub vm_id: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ScheduleTimerRequest {
-    pub vm_id: String,
-    pub delay: Duration,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ScheduledTimer {
-    pub timer_id: String,
-    pub delay: Duration,
-}
-
-pub trait ClockBridge: BridgeTypes {
-    fn wall_clock(&mut self, request: ClockRequest) -> Result<SystemTime, Self::Error>;
-    fn monotonic_clock(&mut self, request: ClockRequest) -> Result<Duration, Self::Error>;
-    fn schedule_timer(
-        &mut self,
-        request: ScheduleTimerRequest,
-    ) -> Result<ScheduledTimer, Self::Error>;
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct RandomBytesRequest {
-    pub vm_id: String,
-    pub len: usize,
-}
-
-pub trait RandomBridge: BridgeTypes {
-    fn fill_random_bytes(&mut self, request: RandomBytesRequest) -> Result<Vec<u8>, Self::Error>;
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum LogLevel {
-    Trace,
-    Debug,
-    Info,
-    Warn,
-    Error,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct LogRecord {
-    pub vm_id: String,
-    pub level: LogLevel,
-    pub message: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct DiagnosticRecord {
-    pub vm_id: String,
-    pub message: String,
-    pub fields: BTreeMap<String, String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct StructuredEventRecord {
-    pub vm_id: String,
-    pub name: String,
-    pub fields: BTreeMap<String, String>,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum LifecycleState {
-    Starting,
-    Ready,
-    Busy,
-    Terminated,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct LifecycleEventRecord {
-    pub vm_id: String,
-    pub state: LifecycleState,
-    pub detail: Option<String>,
-}
-
-pub trait EventBridge: BridgeTypes {
-    fn emit_structured_event(&mut self, event: StructuredEventRecord) -> Result<(), Self::Error>;
-    fn emit_diagnostic(&mut self, event: DiagnosticRecord) -> Result<(), Self::Error>;
-    fn emit_log(&mut self, event: LogRecord) -> Result<(), Self::Error>;
-    fn emit_lifecycle(&mut self, event: LifecycleEventRecord) -> Result<(), Self::Error>;
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum GuestRuntime {
-    JavaScript,
-    WebAssembly,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct CreateJavascriptContextRequest {
-    pub vm_id: String,
-    pub bootstrap_module: Option<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct CreateWasmContextRequest {
-    pub vm_id: String,
-    pub module_path: Option<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct GuestContextHandle {
-    pub context_id: String,
-    pub runtime: GuestRuntime,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct StartExecutionRequest {
-    pub vm_id: String,
-    pub context_id: String,
-    pub argv: Vec<String>,
-    pub env: BTreeMap<String, String>,
-    pub cwd: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct StartedExecution {
-    pub execution_id: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ExecutionHandleRequest {
-    pub vm_id: String,
-    pub execution_id: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct WriteExecutionStdinRequest {
-    pub vm_id: String,
-    pub execution_id: String,
-    pub chunk: Vec<u8>,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum ExecutionSignal {
-    Terminate,
-    Interrupt,
-    Kill,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct KillExecutionRequest {
-    pub vm_id: String,
-    pub execution_id: String,
-    pub signal: ExecutionSignal,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PollExecutionEventRequest {
-    pub vm_id: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct OutputChunk {
-    pub vm_id: String,
-    pub execution_id: String,
-    pub chunk: Vec<u8>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ExecutionExited {
-    pub vm_id: String,
-    pub execution_id: String,
-    pub exit_code: i32,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct GuestKernelCall {
-    pub vm_id: String,
-    pub execution_id: String,
-    pub operation: String,
-    pub payload: Vec<u8>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum SignalDispositionAction {
-    Default,
-    Ignore,
-    User,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct SignalHandlerRegistration {
-    pub action: SignalDispositionAction,
-    pub mask: Vec<u32>,
-    pub flags: u32,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ExecutionSignalState {
-    pub vm_id: String,
-    pub execution_id: String,
-    pub signal: u32,
-    pub registration: SignalHandlerRegistration,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum ExecutionEvent {
-    Stdout(OutputChunk),
-    Stderr(OutputChunk),
-    Exited(ExecutionExited),
-    GuestRequest(GuestKernelCall),
-    SignalState(ExecutionSignalState),
-}
-
-pub trait ExecutionBridge: BridgeTypes {
-    fn create_javascript_context(
-        &mut self,
-        request: CreateJavascriptContextRequest,
-    ) -> Result<GuestContextHandle, Self::Error>;
-    fn create_wasm_context(
-        &mut self,
-        request: CreateWasmContextRequest,
-    ) -> Result<GuestContextHandle, Self::Error>;
-    fn start_execution(
-        &mut self,
-        request: StartExecutionRequest,
-    ) -> Result<StartedExecution, Self::Error>;
-    fn write_stdin(&mut self, request: WriteExecutionStdinRequest) -> Result<(), Self::Error>;
-    fn close_stdin(&mut self, request: ExecutionHandleRequest) -> Result<(), Self::Error>;
-    fn kill_execution(&mut self, request: KillExecutionRequest) -> Result<(), Self::Error>;
-    fn poll_execution_event(
-        &mut self,
-        request: PollExecutionEventRequest,
-    ) -> Result<Option<ExecutionEvent>, Self::Error>;
-}
-
-pub trait HostBridge:
-    FilesystemBridge
-    + PermissionBridge
-    + PersistenceBridge
-    + ClockBridge
-    + RandomBridge
-    + EventBridge
-    + ExecutionBridge
-{
-}
-
-impl<T> HostBridge for T where
-    T: FilesystemBridge
-        + PermissionBridge
-        + PersistenceBridge
-        + ClockBridge
-        + RandomBridge
-        + EventBridge
-        + ExecutionBridge
-{
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Deserialize)]
-#[serde(rename_all = "camelCase")]
-pub enum BridgeCallConvention {
-    Sync,
-    Async,
-    SyncPromise,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Deserialize)]
-#[serde(rename_all = "camelCase")]
-pub struct BridgeContractGroup {
-    pub convention: BridgeCallConvention,
-    #[serde(default)]
-    pub argument_types: Vec<String>,
-    pub return_type: String,
-    pub names: Vec<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Deserialize)]
-#[serde(rename_all = "camelCase")]
-pub struct BridgeDispatchTarget {
-    pub method: String,
-    #[serde(default)]
-    pub translate_args: bool,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Deserialize)]
-#[serde(rename_all = "camelCase")]
-pub struct BridgeContract {
-    pub version: u32,
-    pub groups: Vec<BridgeContractGroup>,
-    #[serde(default)]
-    pub dispatch: BTreeMap<String, BridgeDispatchTarget>,
-}
-
-static BRIDGE_CONTRACT: OnceLock<BridgeContract> = OnceLock::new();
-
-pub fn bridge_contract() -> &'static BridgeContract {
-    BRIDGE_CONTRACT.get_or_init(|| {
-        serde_json::from_str(include_str!("../bridge-contract.json"))
-            .expect("bridge-contract.json must be valid")
-    })
-}
-
-#[cfg(test)]
-mod tests {
-    use super::{bridge_contract, BridgeCallConvention};
-
-    #[test]
-    fn bridge_contract_has_version_and_unique_method_names() {
-        let contract = bridge_contract();
-        assert!(
-            contract.version > 0,
-            "bridge contract version must be positive"
-        );
-
-        let mut seen = std::collections::BTreeSet::new();
-        for group in &contract.groups {
-            assert!(
-                !group.names.is_empty(),
-                "every bridge contract group must list at least one method"
-            );
-            for name in &group.names {
-                assert!(
-                    seen.insert(name.clone()),
-                    "duplicate bridge contract method: {name}"
-                );
-            }
-        }
-    }
-
-    #[test]
-    fn bridge_contract_dispatch_targets_are_declared_methods() {
-        let contract = bridge_contract();
-        let names: std::collections::BTreeSet<_> = contract
-            .groups
-            .iter()
-            .flat_map(|group| group.names.iter())
-            .collect();
-
-        for name in contract.dispatch.keys() {
-            assert!(
-                names.contains(name),
-                "bridge dispatch target {name} must be listed in bridge contract names"
-            );
-        }
-
-        for required in [
-            "_fsReadFile",
-            "_fsReadFileBinary",
-            "_fsLutimes",
-            "_fsLutimesAsync",
-            "fs.futimesSync",
-            "_cryptoHashDigest",
-            "_cryptoDiffieHellmanSessionDestroy",
-            "_netSocketConnectRaw",
-            "_kernelStdioWriteRaw",
-            "_ptySetRawMode",
-        ] {
-            assert!(
-                contract.dispatch.contains_key(required),
-                "bridge dispatch metadata missing for {required}"
-            );
-        }
-    }
-
-    #[test]
-    fn bridge_contract_lists_each_convention() {
-        let contract = bridge_contract();
-        for convention in [
-            BridgeCallConvention::Sync,
-            BridgeCallConvention::Async,
-            BridgeCallConvention::SyncPromise,
-        ] {
-            assert!(
-                contract
-                    .groups
-                    .iter()
-                    .any(|group| group.convention == convention),
-                "missing bridge contract group for {convention:?}"
-            );
-        }
-    }
-
-    #[test]
-    fn bridge_contract_module_loading_signatures_match_runtime_calls() {
-        let contract = bridge_contract();
-
-        let find_group = |method: &str| {
-            contract
-                .groups
-                .iter()
-                .find(|group| group.names.iter().any(|name| name == method))
-                .unwrap_or_else(|| panic!("missing bridge contract method {method}"))
-        };
-
-        let resolve_group = find_group("_resolveModule");
-        assert_eq!(resolve_group.convention, BridgeCallConvention::SyncPromise);
-        assert_eq!(
-            resolve_group.argument_types,
-            vec![
-                "specifier: string",
-                "fromDir: string",
-                "mode?: \"require\" | \"import\""
-            ]
-        );
-        assert_eq!(
-            resolve_group.names,
-            vec!["_resolveModule", "_resolveModuleSync"]
-        );
-
-        let load_group = find_group("_loadFile");
-        assert_eq!(load_group.convention, BridgeCallConvention::SyncPromise);
-        assert_eq!(load_group.argument_types, vec!["path: string"]);
-        assert_eq!(load_group.names, vec!["_loadFile", "_loadFileSync"]);
-
-        let format_group = find_group("_moduleFormat");
-        assert_eq!(format_group.convention, BridgeCallConvention::SyncPromise);
-        assert_eq!(format_group.argument_types, vec!["filename: string"]);
-        assert_eq!(
-            format_group.return_type,
-            "\"module\" | \"commonjs\" | \"json\" | null"
-        );
-        assert_eq!(format_group.names, vec!["_moduleFormat"]);
-    }
-
-    #[test]
-    fn bridge_contract_includes_diffie_hellman_session_lifecycle_callbacks() {
-        let contract = bridge_contract();
-        let crypto_group = contract
-            .groups
-            .iter()
-            .find(|group| {
-                group
-                    .names
-                    .iter()
-                    .any(|name| name == "_cryptoDiffieHellmanSessionCreate")
-            })
-            .expect("crypto bridge group");
-
-        for method in [
-            "_cryptoDiffieHellmanSessionCreate",
-            "_cryptoDiffieHellmanSessionCall",
-            "_cryptoDiffieHellmanSessionDestroy",
-        ] {
-            assert!(
-                crypto_group.names.iter().any(|name| name == method),
-                "missing Diffie-Hellman session bridge callback {method}"
-            );
-        }
-    }
-}
+pub use agentos_bridge::*;
diff --git a/crates/bridge/src/queue_tracker.rs b/crates/bridge/src/queue_tracker.rs
deleted file mode 100644
index f85d0dfd1..000000000
--- a/crates/bridge/src/queue_tracker.rs
+++ /dev/null
@@ -1,679 +0,0 @@
-//! Centralized bounded-queue usage tracker.
-//!
-//! secure-exec streams guest output through a *chain* of bounded queues: the
-//! V8 -> host event channel, the sidecar stdout/stdin frame queues, and so on.
-//! Each queue applies backpressure when full (it parks the producer until the
-//! consumer drains) rather than crashing, but backpressure is invisible: a slow
-//! host consumer silently stalls a session with nothing in the logs.
-//!
-//! This module gives that whole chain a single, inspectable home:
-//!
-//! * Every bounded queue registers a [`QueueGauge`] (with a stable name and its
-//!   capacity) in a process-global [`QueueRegistry`].
-//! * Producers report depth as they enqueue (either by an exact count for
-//!   manually-tracked queues via [`TrackedSyncSender`], or by sampling the live
-//!   depth of a Tokio channel via [`QueueGauge::observe_depth`]).
-//! * When a queue crosses [`WARN_FILL_PERCENT`] of capacity the gauge emits a
-//!   single `warn!`, so "the consumer is falling behind" shows up *before* the
-//!   queue saturates and backpressure stalls the session. It re-arms once the
-//!   queue drains back below [`REARM_FILL_PERCENT`].
-//! * [`queue_snapshot`] returns the live depth / high-water / capacity of every
-//!   registered queue for debugging or a status endpoint.
-
-use std::sync::atomic::{AtomicBool, AtomicUsize, Ordering};
-use std::sync::mpsc::{Receiver, RecvError, SendError, SyncSender, TrySendError};
-use std::sync::{Arc, Mutex, OnceLock, Weak};
-
-/// Fill fraction (percent of capacity) at or above which a queue is considered
-/// "near full" and emits a warning. Edge-triggered so a steadily-full queue logs
-/// once, not on every enqueue.
-pub const WARN_FILL_PERCENT: usize = 80;
-
-/// Fill fraction a near-full queue must drain back below before it will warn
-/// again. The gap to [`WARN_FILL_PERCENT`] provides hysteresis so a queue
-/// hovering at the threshold does not flap.
-pub const REARM_FILL_PERCENT: usize = 50;
-
-/// What class of bounded resource a gauge tracks. Lets a snapshot / a host hook
-/// group and reason about limits beyond just queues.
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum LimitCategory {
-    /// A bounded channel/buffer with enqueue/dequeue flow (the default).
-    Queue,
-    /// A saturating resource counter (fds, processes, sockets, bytes in use).
-    Resource,
-    /// A memory/heap envelope.
-    Memory,
-    /// A CPU or wall-clock execution budget.
-    Cpu,
-}
-
-impl LimitCategory {
-    /// Stable lowercase tag for logs and snapshots.
-    pub fn as_str(self) -> &'static str {
-        match self {
-            LimitCategory::Queue => "queue",
-            LimitCategory::Resource => "resource",
-            LimitCategory::Memory => "memory",
-            LimitCategory::Cpu => "cpu",
-        }
-    }
-}
-
-/// Stable catalog of tracked limits that may emit near-capacity or exhaustion
-/// warnings. Keep `website/src/content/docs/docs/features/resource-limits.mdx`
-/// in sync when adding, removing, or renaming variants so host-visible warning
-/// names and the documented constants do not drift.
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash)]
-pub enum TrackedLimit {
-    JavascriptEventChannel,
-    V8SessionFrames,
-    SidecarStdinFrames,
-    SidecarStdoutFrames,
-    CompletedSidecarResponses,
-    PendingProcessEvents,
-    PendingSidecarResponses,
-    OutboundSidecarRequests,
-    VmProcesses,
-    VmOpenFds,
-    VmPipes,
-    VmPtys,
-    VmSockets,
-    VmConnections,
-    VmSocketBufferedBytes,
-    VmSocketDatagramQueueLen,
-    VmFilesystemBytes,
-    VmInodes,
-    VmRecursiveFsDepth,
-    VmRecursiveFsEntries,
-    V8HeapBytes,
-    V8CpuTimeMs,
-    V8WallClockMs,
-    WasmFuelMs,
-    WasmMemoryBytes,
-}
-
-impl TrackedLimit {
-    /// Stable lowercase tag emitted in logs, snapshots, and host
-    /// `limit_warning` events.
-    pub fn as_str(self) -> &'static str {
-        match self {
-            TrackedLimit::JavascriptEventChannel => "javascript_event_channel",
-            TrackedLimit::V8SessionFrames => "v8_session_frames",
-            TrackedLimit::SidecarStdinFrames => "sidecar_stdin_frames",
-            TrackedLimit::SidecarStdoutFrames => "sidecar_stdout_frames",
-            TrackedLimit::CompletedSidecarResponses => "completed_sidecar_responses",
-            TrackedLimit::PendingProcessEvents => "pending_process_events",
-            TrackedLimit::PendingSidecarResponses => "pending_sidecar_responses",
-            TrackedLimit::OutboundSidecarRequests => "outbound_sidecar_requests",
-            TrackedLimit::VmProcesses => "vm_processes",
-            TrackedLimit::VmOpenFds => "vm_open_fds",
-            TrackedLimit::VmPipes => "vm_pipes",
-            TrackedLimit::VmPtys => "vm_ptys",
-            TrackedLimit::VmSockets => "vm_sockets",
-            TrackedLimit::VmConnections => "vm_connections",
-            TrackedLimit::VmSocketBufferedBytes => "vm_socket_buffered_bytes",
-            TrackedLimit::VmSocketDatagramQueueLen => "vm_socket_datagram_queue_len",
-            TrackedLimit::VmFilesystemBytes => "vm_filesystem_bytes",
-            TrackedLimit::VmInodes => "vm_inodes",
-            TrackedLimit::VmRecursiveFsDepth => "vm_recursive_fs_depth",
-            TrackedLimit::VmRecursiveFsEntries => "vm_recursive_fs_entries",
-            TrackedLimit::V8HeapBytes => "v8_heap_bytes",
-            TrackedLimit::V8CpuTimeMs => "v8_cpu_time_ms",
-            TrackedLimit::V8WallClockMs => "v8_wall_clock_ms",
-            TrackedLimit::WasmFuelMs => "wasm_fuel_ms",
-            TrackedLimit::WasmMemoryBytes => "wasm_memory_bytes",
-        }
-    }
-
-    pub fn category(self) -> LimitCategory {
-        match self {
-            TrackedLimit::JavascriptEventChannel
-            | TrackedLimit::V8SessionFrames
-            | TrackedLimit::SidecarStdinFrames
-            | TrackedLimit::SidecarStdoutFrames
-            | TrackedLimit::CompletedSidecarResponses
-            | TrackedLimit::PendingProcessEvents
-            | TrackedLimit::PendingSidecarResponses
-            | TrackedLimit::OutboundSidecarRequests => LimitCategory::Queue,
-            TrackedLimit::VmProcesses
-            | TrackedLimit::VmOpenFds
-            | TrackedLimit::VmPipes
-            | TrackedLimit::VmPtys
-            | TrackedLimit::VmSockets
-            | TrackedLimit::VmConnections
-            | TrackedLimit::VmSocketBufferedBytes
-            | TrackedLimit::VmSocketDatagramQueueLen
-            | TrackedLimit::VmFilesystemBytes
-            | TrackedLimit::VmInodes
-            | TrackedLimit::VmRecursiveFsDepth
-            | TrackedLimit::VmRecursiveFsEntries => LimitCategory::Resource,
-            TrackedLimit::V8HeapBytes | TrackedLimit::WasmMemoryBytes => LimitCategory::Memory,
-            TrackedLimit::V8CpuTimeMs | TrackedLimit::V8WallClockMs | TrackedLimit::WasmFuelMs => {
-                LimitCategory::Cpu
-            }
-        }
-    }
-}
-
-/// A near-capacity event for one limit, delivered to the global warning sink at
-/// the same edge as the `tracing::warn!`. This is the structured payload a host
-/// hook (e.g. agentOS `onLimitWarning`) is built from.
-#[derive(Debug, Clone)]
-pub struct LimitWarning {
-    pub name: TrackedLimit,
-    pub category: LimitCategory,
-    pub observed: usize,
-    pub capacity: usize,
-    pub fill_percent: usize,
-}
-
-type LimitWarningHandler = Arc<dyn Fn(&LimitWarning) + Send + Sync>;
-
-fn warning_handler_slot() -> &'static Mutex<Option<LimitWarningHandler>> {
-    static HANDLER: OnceLock<Mutex<Option<LimitWarningHandler>>> = OnceLock::new();
-    HANDLER.get_or_init(|| Mutex::new(None))
-}
-
-/// Install a process-global sink that is invoked on the same edge-triggered,
-/// hysteresis-gated boundary as the `tracing::warn!` whenever a tracked limit
-/// crosses [`WARN_FILL_PERCENT`]. The sidecar uses this to forward limit warnings
-/// to the host as structured events (the `onLimitWarning` hook). The handler must
-/// be cheap and non-blocking; it runs on the producer's thread.
-pub fn set_limit_warning_handler(handler: Box<dyn Fn(&LimitWarning) + Send + Sync>) {
-    if let Ok(mut slot) = warning_handler_slot().lock() {
-        *slot = Some(Arc::from(handler));
-    }
-}
-
-fn dispatch_warning(warning: &LimitWarning) {
-    // Clone the handler Arc out and DROP the registry mutex before invoking it,
-    // so the handler never runs while we hold the global lock. The sink can be
-    // reached while a kernel lock is held (e.g. fd_tables -> warning_mutex ->
-    // handler); keeping the invocation outside the mutex avoids a lock-order
-    // hazard if the handler ever does non-trivial work.
-    let handler = match warning_handler_slot().lock() {
-        Ok(slot) => slot.as_ref().cloned(),
-        Err(_) => None,
-    };
-    if let Some(handler) = handler {
-        handler(warning);
-    }
-}
-
-/// Emit a structured/logged warning for a limit that has already been exhausted.
-/// Use this for runtime caps such as CPU or heap exhaustion where there is no
-/// continuously sampled queue depth to observe before the terminal edge.
-pub fn warn_limit_exhausted(name: TrackedLimit, observed: usize, capacity: usize) {
-    let fill_percent = observed
-        .saturating_mul(100)
-        .checked_div(capacity)
-        .unwrap_or(0);
-    let category = name.category();
-    tracing::warn!(
-        limit = name.as_str(),
-        category = category.as_str(),
-        observed,
-        capacity,
-        fill_percent,
-        "bounded limit exhausted"
-    );
-    dispatch_warning(&LimitWarning {
-        name,
-        category,
-        observed,
-        capacity,
-        fill_percent,
-    });
-}
-
-/// Live usage gauge for a single bounded queue.
-///
-/// Cloneable handles share one gauge through an [`Arc`]; the registry keeps a
-/// [`Weak`] so a gauge is auto-pruned from snapshots once its queue is dropped.
-#[derive(Debug)]
-pub struct QueueGauge {
-    name: TrackedLimit,
-    category: LimitCategory,
-    capacity: usize,
-    depth: AtomicUsize,
-    high_water: AtomicUsize,
-    warned: AtomicBool,
-}
-
-impl QueueGauge {
-    fn new(name: TrackedLimit, capacity: usize, category: LimitCategory) -> Self {
-        Self {
-            name,
-            category,
-            capacity,
-            depth: AtomicUsize::new(0),
-            high_water: AtomicUsize::new(0),
-            warned: AtomicBool::new(false),
-        }
-    }
-
-    /// Stable limit name (used in logs and snapshots).
-    pub fn name(&self) -> TrackedLimit {
-        self.name
-    }
-
-    /// The class of bounded resource this gauge tracks.
-    pub fn category(&self) -> LimitCategory {
-        self.category
-    }
-
-    /// Configured queue capacity (slots). `0` means unbounded / untracked.
-    pub fn capacity(&self) -> usize {
-        self.capacity
-    }
-
-    /// Current observed depth.
-    pub fn depth(&self) -> usize {
-        self.depth.load(Ordering::Acquire)
-    }
-
-    /// Highest depth observed over the gauge's lifetime.
-    pub fn high_water(&self) -> usize {
-        self.high_water.load(Ordering::Acquire)
-    }
-
-    /// Fill fraction (0–100) at the given depth. Saturates rather than dividing
-    /// by zero for untracked (capacity 0) queues.
-    fn fill_percent(&self, depth: usize) -> usize {
-        depth
-            .saturating_mul(100)
-            .checked_div(self.capacity)
-            .unwrap_or(0)
-    }
-
-    /// Record a new depth: refresh the high-water mark and emit an edge-triggered
-    /// near-capacity warning (or recovery debug line).
-    fn evaluate(&self, depth: usize) {
-        self.high_water.fetch_max(depth, Ordering::AcqRel);
-        if self.capacity == 0 {
-            return;
-        }
-        let percent = self.fill_percent(depth);
-        if percent >= WARN_FILL_PERCENT {
-            if !self.warned.swap(true, Ordering::AcqRel) {
-                tracing::warn!(
-                    limit = self.name.as_str(),
-                    category = self.category.as_str(),
-                    observed = depth,
-                    capacity = self.capacity,
-                    fill_percent = percent,
-                    "bounded limit near capacity"
-                );
-                // Same edge as the log: notify the structured warning sink so the
-                // host can surface it (e.g. an onLimitWarning hook). Edge-triggered
-                // + hysteresis keep this from firing more than once per crossing.
-                dispatch_warning(&LimitWarning {
-                    name: self.name,
-                    category: self.category,
-                    observed: depth,
-                    capacity: self.capacity,
-                    fill_percent: percent,
-                });
-            }
-        } else if percent <= REARM_FILL_PERCENT && self.warned.swap(false, Ordering::AcqRel) {
-            tracing::debug!(
-                limit = self.name.as_str(),
-                category = self.category.as_str(),
-                depth,
-                capacity = self.capacity,
-                fill_percent = percent,
-                "bounded limit drained back below threshold"
-            );
-        }
-    }
-
-    /// Report the queue's exact current depth (for queues whose backing channel
-    /// exposes its live length, e.g. a Tokio mpsc via `max_capacity - capacity`).
-    pub fn observe_depth(&self, depth: usize) {
-        self.depth.store(depth, Ordering::Release);
-        self.evaluate(depth);
-    }
-
-    /// Account for one item entering the queue (for manually-tracked queues).
-    pub fn record_enqueue(&self) {
-        let depth = self.depth.fetch_add(1, Ordering::AcqRel) + 1;
-        self.evaluate(depth);
-    }
-
-    /// Account for one item leaving the queue. Saturates at zero so a stray
-    /// dequeue can never underflow the depth counter. Re-evaluates so a gauge
-    /// that latched "warned" while full re-arms once the queue drains back below
-    /// the re-arm threshold, even if the producer has since gone idle.
-    pub fn record_dequeue(&self) {
-        let mut current = self.depth.load(Ordering::Acquire);
-        loop {
-            if current == 0 {
-                return;
-            }
-            match self.depth.compare_exchange_weak(
-                current,
-                current - 1,
-                Ordering::AcqRel,
-                Ordering::Acquire,
-            ) {
-                Ok(_) => {
-                    self.evaluate(current - 1);
-                    break;
-                }
-                Err(actual) => current = actual,
-            }
-        }
-    }
-}
-
-/// Immutable view of a tracked limit's usage, returned by [`queue_snapshot`].
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct QueueSnapshot {
-    pub name: TrackedLimit,
-    pub category: LimitCategory,
-    pub depth: usize,
-    pub high_water: usize,
-    pub capacity: usize,
-    pub fill_percent: usize,
-}
-
-/// Process-global registry of every live [`QueueGauge`].
-#[derive(Default)]
-pub struct QueueRegistry {
-    gauges: Mutex<Vec<Weak<QueueGauge>>>,
-}
-
-impl QueueRegistry {
-    /// The shared registry. All `secure-exec` bounded queues register here so
-    /// their usage can be inspected from one place.
-    pub fn global() -> &'static QueueRegistry {
-        static REGISTRY: OnceLock<QueueRegistry> = OnceLock::new();
-        REGISTRY.get_or_init(QueueRegistry::default)
-    }
-
-    /// Register a new bounded limit and return its gauge. Dropping the returned
-    /// `Arc` (and all clones) removes the limit from future snapshots.
-    pub fn register(&self, name: TrackedLimit, capacity: usize) -> Arc<QueueGauge> {
-        let category = name.category();
-        let gauge = Arc::new(QueueGauge::new(name, capacity, category));
-        let mut gauges = self.gauges.lock().expect("queue registry mutex poisoned");
-        gauges.retain(|weak| weak.strong_count() > 0);
-        gauges.push(Arc::downgrade(&gauge));
-        gauge
-    }
-
-    /// Snapshot the live usage of every registered queue, pruning dead entries.
-    pub fn snapshot(&self) -> Vec<QueueSnapshot> {
-        let mut gauges = self.gauges.lock().expect("queue registry mutex poisoned");
-        gauges.retain(|weak| weak.strong_count() > 0);
-        gauges
-            .iter()
-            .filter_map(Weak::upgrade)
-            .map(|gauge| {
-                let depth = gauge.depth();
-                QueueSnapshot {
-                    name: gauge.name(),
-                    category: gauge.category(),
-                    depth,
-                    high_water: gauge.high_water(),
-                    capacity: gauge.capacity(),
-                    fill_percent: gauge.fill_percent(depth),
-                }
-            })
-            .collect()
-    }
-}
-
-/// Register a bounded queue (the [`LimitCategory::Queue`] case) with the global
-/// registry. Convenience over [`QueueRegistry::global`] + [`QueueRegistry::register`].
-pub fn register_queue(name: TrackedLimit, capacity: usize) -> Arc<QueueGauge> {
-    debug_assert_eq!(name.category(), LimitCategory::Queue);
-    QueueRegistry::global().register(name, capacity)
-}
-
-/// Register a non-queue bounded limit (a saturating resource or memory envelope)
-/// with the global registry, so it shares the same approach-warning + snapshot
-/// machinery as queues. Observe usage with [`QueueGauge::observe_depth`].
-pub fn register_limit(name: TrackedLimit, capacity: usize) -> Arc<QueueGauge> {
-    QueueRegistry::global().register(name, capacity)
-}
-
-/// Snapshot every registered queue from the global registry.
-pub fn queue_snapshot() -> Vec<QueueSnapshot> {
-    QueueRegistry::global().snapshot()
-}
-
-/// Emit a `debug!` line for every registered queue. Useful for an on-demand dump
-/// of the queue chain when diagnosing a stall.
-pub fn log_queue_snapshot() {
-    for stat in queue_snapshot() {
-        tracing::debug!(
-            limit = stat.name.as_str(),
-            category = stat.category.as_str(),
-            depth = stat.depth,
-            high_water = stat.high_water,
-            capacity = stat.capacity,
-            fill_percent = stat.fill_percent,
-            "limit usage"
-        );
-    }
-}
-
-/// A `std::sync::mpsc::SyncSender` that feeds a [`QueueGauge`] as items flow
-/// through it, so a queue whose backing channel cannot report its own length
-/// still participates in the centralized tracker.
-///
-/// `send` keeps the underlying blocking-backpressure semantics; it just records
-/// the enqueue first so near-capacity warnings fire as the queue fills.
-#[derive(Debug)]
-pub struct TrackedSyncSender<T> {
-    inner: SyncSender<T>,
-    gauge: Arc<QueueGauge>,
-}
-
-impl<T> Clone for TrackedSyncSender<T> {
-    fn clone(&self) -> Self {
-        Self {
-            inner: self.inner.clone(),
-            gauge: Arc::clone(&self.gauge),
-        }
-    }
-}
-
-impl<T> TrackedSyncSender<T> {
-    /// Blocking send: record the enqueue, then hand off to the bounded channel
-    /// (which parks the caller until a slot is free: clean backpressure).
-    pub fn send(&self, value: T) -> Result<(), SendError<T>> {
-        self.gauge.record_enqueue();
-        self.inner.send(value)
-    }
-
-    /// Non-blocking send: record the enqueue only on success. Lets a caller with
-    /// its own deadline poll instead of parking indefinitely on a full queue.
-    pub fn try_send(&self, value: T) -> Result<(), TrySendError<T>> {
-        match self.inner.try_send(value) {
-            Ok(()) => {
-                self.gauge.record_enqueue();
-                Ok(())
-            }
-            Err(error) => Err(error),
-        }
-    }
-
-    /// The gauge backing this sender.
-    pub fn gauge(&self) -> &Arc<QueueGauge> {
-        &self.gauge
-    }
-}
-
-/// Receiver half of a [`tracked_sync_channel`]; records a dequeue for every
-/// item it yields so the gauge depth tracks the real backlog.
-#[derive(Debug)]
-pub struct TrackedReceiver<T> {
-    inner: Receiver<T>,
-    gauge: Arc<QueueGauge>,
-}
-
-impl<T> TrackedReceiver<T> {
-    /// Blocking receive that decrements the gauge for the item it returns.
-    pub fn recv(&self) -> Result<T, RecvError> {
-        let value = self.inner.recv()?;
-        self.gauge.record_dequeue();
-        Ok(value)
-    }
-}
-
-/// Create a bounded `std::sync::mpsc` sync-channel whose depth is tracked by a
-/// registered [`QueueGauge`]. Drop-in for `std::sync::mpsc::sync_channel` plus
-/// centralized usage tracking + near-capacity warnings.
-pub fn tracked_sync_channel<T>(
-    name: TrackedLimit,
-    capacity: usize,
-) -> (TrackedSyncSender<T>, TrackedReceiver<T>) {
-    let (tx, rx) = std::sync::mpsc::sync_channel(capacity);
-    let gauge = register_queue(name, capacity);
-    (
-        TrackedSyncSender {
-            inner: tx,
-            gauge: Arc::clone(&gauge),
-        },
-        TrackedReceiver { inner: rx, gauge },
-    )
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn gauge_tracks_depth_and_high_water() {
-        let gauge = QueueGauge::new(
-            TrackedLimit::JavascriptEventChannel,
-            10,
-            LimitCategory::Queue,
-        );
-        assert_eq!(gauge.depth(), 0);
-        gauge.record_enqueue();
-        gauge.record_enqueue();
-        assert_eq!(gauge.depth(), 2);
-        assert_eq!(gauge.high_water(), 2);
-        gauge.record_dequeue();
-        assert_eq!(gauge.depth(), 1);
-        // High-water never regresses.
-        assert_eq!(gauge.high_water(), 2);
-        // Dequeue never underflows below zero.
-        gauge.record_dequeue();
-        gauge.record_dequeue();
-        assert_eq!(gauge.depth(), 0);
-    }
-
-    #[test]
-    fn gauge_warn_flag_is_edge_triggered_with_hysteresis() {
-        let gauge = QueueGauge::new(TrackedLimit::V8SessionFrames, 10, LimitCategory::Queue);
-        // Below 80%: not warned.
-        gauge.observe_depth(7);
-        assert!(!gauge.warned.load(Ordering::Acquire));
-        // Cross 80%: warned.
-        gauge.observe_depth(8);
-        assert!(gauge.warned.load(Ordering::Acquire));
-        // Still near full: stays armed (single warning, not re-fired).
-        gauge.observe_depth(9);
-        assert!(gauge.warned.load(Ordering::Acquire));
-        // Drain to <=50%: re-arms.
-        gauge.observe_depth(5);
-        assert!(!gauge.warned.load(Ordering::Acquire));
-    }
-
-    #[test]
-    fn gauge_rearms_on_dequeue_drain() {
-        // record_enqueue/record_dequeue gauges (TrackedSyncSender/Receiver) must
-        // also re-arm as they drain, not only stay latched after the producer idles.
-        let gauge = QueueGauge::new(TrackedLimit::SidecarStdoutFrames, 10, LimitCategory::Queue);
-        for _ in 0..9 {
-            gauge.record_enqueue(); // climbs to 90% -> warned
-        }
-        assert_eq!(gauge.depth(), 9);
-        assert!(gauge.warned.load(Ordering::Acquire));
-        for _ in 0..6 {
-            gauge.record_dequeue(); // drains to 30% (<=50%) -> re-arm on dequeue
-        }
-        assert_eq!(gauge.depth(), 3);
-        assert!(!gauge.warned.load(Ordering::Acquire));
-    }
-
-    #[test]
-    fn tracked_channel_reports_usage_through_registry() {
-        let (tx, rx) = tracked_sync_channel::<u32>(TrackedLimit::SidecarStdoutFrames, 4);
-        tx.send(1).unwrap();
-        tx.send(2).unwrap();
-
-        let snapshot = queue_snapshot();
-        let entry = snapshot
-            .iter()
-            .find(|stat| stat.name == TrackedLimit::SidecarStdoutFrames)
-            .expect("registered queue should appear in snapshot");
-        assert_eq!(entry.depth, 2);
-        assert_eq!(entry.capacity, 4);
-        assert_eq!(entry.high_water, 2);
-        assert_eq!(entry.fill_percent, 50);
-        assert_eq!(entry.category, LimitCategory::Queue);
-
-        assert_eq!(rx.recv().unwrap(), 1);
-        assert_eq!(tx.gauge().depth(), 1);
-
-        // Dropping the channel removes it from later snapshots.
-        drop(tx);
-        drop(rx);
-        assert!(queue_snapshot()
-            .iter()
-            .all(|stat| stat.name != TrackedLimit::SidecarStdoutFrames));
-    }
-
-    #[test]
-    fn warning_sink_fires_once_per_crossing() {
-        let captured: Arc<Mutex<Vec<LimitWarning>>> = Arc::new(Mutex::new(Vec::new()));
-        let sink = Arc::clone(&captured);
-        // The handler is global; filter by our unique name so a gauge from a
-        // concurrently-running test can never pollute this assertion.
-        set_limit_warning_handler(Box::new(move |warning| {
-            if warning.name == TrackedLimit::VmPipes {
-                sink.lock().expect("sink mutex").push(warning.clone());
-            }
-        }));
-
-        let gauge = register_limit(TrackedLimit::VmPipes, 10);
-        gauge.observe_depth(7); // below 80%: no warning
-        assert!(captured.lock().unwrap().is_empty());
-        gauge.observe_depth(9); // crosses 80%: fires once
-        gauge.observe_depth(10); // still near full: must NOT re-fire (edge-triggered)
-
-        let warnings = captured.lock().unwrap();
-        assert_eq!(
-            warnings.len(),
-            1,
-            "warning sink must fire once per crossing"
-        );
-        assert_eq!(warnings[0].category, LimitCategory::Resource);
-        assert_eq!(warnings[0].capacity, 10);
-        assert!(warnings[0].fill_percent >= WARN_FILL_PERCENT);
-    }
-
-    #[test]
-    fn exhausted_warning_sink_fires_immediately() {
-        let captured: Arc<Mutex<Vec<LimitWarning>>> = Arc::new(Mutex::new(Vec::new()));
-        let sink = Arc::clone(&captured);
-        set_limit_warning_handler(Box::new(move |warning| {
-            if warning.name == TrackedLimit::V8CpuTimeMs {
-                sink.lock().expect("sink mutex").push(warning.clone());
-            }
-        }));
-
-        warn_limit_exhausted(TrackedLimit::V8CpuTimeMs, 30_000, 30_000);
-
-        let warnings = captured.lock().unwrap();
-        assert_eq!(warnings.len(), 1);
-        assert_eq!(warnings[0].category, LimitCategory::Cpu);
-        assert_eq!(warnings[0].fill_percent, 100);
-    }
-}
diff --git a/crates/bridge/tests/bridge.rs b/crates/bridge/tests/bridge.rs
deleted file mode 100644
index 4c17d21a3..000000000
--- a/crates/bridge/tests/bridge.rs
+++ /dev/null
@@ -1,339 +0,0 @@
-mod support;
-
-use secure_exec_bridge::{
-    BridgeTypes, ClockRequest, CommandPermissionRequest, CreateDirRequest,
-    CreateJavascriptContextRequest, CreateWasmContextRequest, DiagnosticRecord, DirectoryEntry,
-    EnvironmentAccess, EnvironmentPermissionRequest, ExecutionEvent, ExecutionHandleRequest,
-    ExecutionSignal, FileKind, FilesystemAccess, FilesystemPermissionRequest, FilesystemSnapshot,
-    FlushFilesystemStateRequest, GuestKernelCall, GuestRuntime, HostBridge, LifecycleEventRecord,
-    LifecycleState, LoadFilesystemStateRequest, LogLevel, LogRecord, NetworkAccess,
-    NetworkPermissionRequest, PathRequest, PermissionDecision, PollExecutionEventRequest,
-    RandomBytesRequest, ReadDirRequest, ReadFileRequest, RenameRequest, ScheduleTimerRequest,
-    StartExecutionRequest, StructuredEventRecord, SymlinkRequest, TruncateRequest,
-    WriteExecutionStdinRequest, WriteFileRequest,
-};
-use std::collections::BTreeMap;
-use std::fmt::Debug;
-use std::time::{Duration, SystemTime};
-use support::RecordingBridge;
-
-fn assert_host_bridge<B>(bridge: &mut B)
-where
-    B: HostBridge,
-    <B as BridgeTypes>::Error: Debug,
-{
-    let contents = bridge
-        .read_file(ReadFileRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace/input.txt"),
-        })
-        .expect("read file");
-    assert_eq!(contents, b"hello".to_vec());
-
-    bridge
-        .write_file(WriteFileRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace/output.txt"),
-            contents: b"world".to_vec(),
-        })
-        .expect("write file");
-    assert!(bridge
-        .exists(PathRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace/output.txt"),
-        })
-        .expect("exists after write"));
-
-    let directory = bridge
-        .read_dir(ReadDirRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace"),
-        })
-        .expect("read dir");
-    assert_eq!(directory.len(), 1);
-
-    let metadata = bridge
-        .stat(PathRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace/input.txt"),
-        })
-        .expect("stat");
-    assert_eq!(metadata.kind, FileKind::File);
-    assert_eq!(metadata.size, 5);
-
-    bridge
-        .create_dir(CreateDirRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/tmp"),
-            recursive: true,
-        })
-        .expect("create dir");
-    bridge
-        .rename(RenameRequest {
-            vm_id: String::from("vm-1"),
-            from_path: String::from("/workspace/output.txt"),
-            to_path: String::from("/workspace/output-renamed.txt"),
-        })
-        .expect("rename");
-    bridge
-        .symlink(SymlinkRequest {
-            vm_id: String::from("vm-1"),
-            target_path: String::from("/workspace/input.txt"),
-            link_path: String::from("/workspace/input-link.txt"),
-        })
-        .expect("symlink");
-    assert_eq!(
-        bridge
-            .read_link(PathRequest {
-                vm_id: String::from("vm-1"),
-                path: String::from("/workspace/input-link.txt"),
-            })
-            .expect("readlink"),
-        "/workspace/input.txt"
-    );
-    bridge
-        .truncate(TruncateRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace/input.txt"),
-            len: 2,
-        })
-        .expect("truncate");
-    assert_eq!(
-        bridge
-            .read_file(ReadFileRequest {
-                vm_id: String::from("vm-1"),
-                path: String::from("/workspace/input.txt"),
-            })
-            .expect("read after truncate"),
-        b"he".to_vec()
-    );
-
-    assert_eq!(
-        bridge
-            .check_filesystem_access(FilesystemPermissionRequest {
-                vm_id: String::from("vm-1"),
-                path: String::from("/workspace/input.txt"),
-                access: FilesystemAccess::Read,
-            })
-            .expect("filesystem permission"),
-        PermissionDecision::allow()
-    );
-    assert_eq!(
-        bridge
-            .check_network_access(NetworkPermissionRequest {
-                vm_id: String::from("vm-1"),
-                access: NetworkAccess::Fetch,
-                resource: String::from("https://example.test"),
-            })
-            .expect("network permission"),
-        PermissionDecision::allow()
-    );
-    assert_eq!(
-        bridge
-            .check_command_execution(CommandPermissionRequest {
-                vm_id: String::from("vm-1"),
-                command: String::from("node"),
-                args: vec![String::from("--version")],
-                cwd: Some(String::from("/workspace")),
-                env: BTreeMap::new(),
-            })
-            .expect("command permission"),
-        PermissionDecision::allow()
-    );
-    assert_eq!(
-        bridge
-            .check_environment_access(EnvironmentPermissionRequest {
-                vm_id: String::from("vm-1"),
-                access: EnvironmentAccess::Read,
-                key: String::from("PATH"),
-                value: None,
-            })
-            .expect("env permission"),
-        PermissionDecision::allow()
-    );
-
-    assert_eq!(
-        bridge
-            .load_filesystem_state(LoadFilesystemStateRequest {
-                vm_id: String::from("vm-1"),
-            })
-            .expect("load snapshot")
-            .expect("snapshot present")
-            .format,
-        "tar"
-    );
-    bridge
-        .flush_filesystem_state(FlushFilesystemStateRequest {
-            vm_id: String::from("vm-2"),
-            snapshot: FilesystemSnapshot {
-                format: String::from("tar"),
-                bytes: vec![9, 9, 9],
-            },
-        })
-        .expect("flush snapshot");
-    assert_eq!(
-        bridge
-            .load_filesystem_state(LoadFilesystemStateRequest {
-                vm_id: String::from("vm-2"),
-            })
-            .expect("load flushed snapshot")
-            .expect("flushed snapshot present")
-            .bytes,
-        vec![9, 9, 9]
-    );
-
-    assert_eq!(
-        bridge
-            .wall_clock(ClockRequest {
-                vm_id: String::from("vm-1"),
-            })
-            .expect("wall clock"),
-        SystemTime::UNIX_EPOCH + Duration::from_secs(1_710_000_000)
-    );
-    assert_eq!(
-        bridge
-            .monotonic_clock(ClockRequest {
-                vm_id: String::from("vm-1"),
-            })
-            .expect("monotonic clock"),
-        Duration::from_millis(42)
-    );
-    assert_eq!(
-        bridge
-            .schedule_timer(ScheduleTimerRequest {
-                vm_id: String::from("vm-1"),
-                delay: Duration::from_millis(5),
-            })
-            .expect("schedule timer")
-            .timer_id,
-        "timer-1"
-    );
-    assert_eq!(
-        bridge
-            .fill_random_bytes(RandomBytesRequest {
-                vm_id: String::from("vm-1"),
-                len: 4,
-            })
-            .expect("random bytes"),
-        vec![0xA5; 4]
-    );
-
-    bridge
-        .emit_log(LogRecord {
-            vm_id: String::from("vm-1"),
-            level: LogLevel::Info,
-            message: String::from("started"),
-        })
-        .expect("emit log");
-    bridge
-        .emit_diagnostic(DiagnosticRecord {
-            vm_id: String::from("vm-1"),
-            message: String::from("healthy"),
-            fields: BTreeMap::from([(String::from("uptime_ms"), String::from("10"))]),
-        })
-        .expect("emit diagnostic");
-    bridge
-        .emit_structured_event(StructuredEventRecord {
-            vm_id: String::from("vm-1"),
-            name: String::from("process.stdout"),
-            fields: BTreeMap::from([(String::from("fd"), String::from("1"))]),
-        })
-        .expect("emit structured event");
-    bridge
-        .emit_lifecycle(LifecycleEventRecord {
-            vm_id: String::from("vm-1"),
-            state: LifecycleState::Ready,
-            detail: Some(String::from("booted")),
-        })
-        .expect("emit lifecycle");
-
-    let js_context = bridge
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-1"),
-            bootstrap_module: Some(String::from("@secure-exec/bootstrap")),
-        })
-        .expect("create js context");
-    assert_eq!(js_context.runtime, GuestRuntime::JavaScript);
-
-    let wasm_context = bridge
-        .create_wasm_context(CreateWasmContextRequest {
-            vm_id: String::from("vm-1"),
-            module_path: Some(String::from("/workspace/module.wasm")),
-        })
-        .expect("create wasm context");
-    assert_eq!(wasm_context.runtime, GuestRuntime::WebAssembly);
-
-    let execution = bridge
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-1"),
-            context_id: js_context.context_id,
-            argv: vec![String::from("index.js")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect("start execution");
-    assert_eq!(execution.execution_id, "exec-1");
-
-    bridge
-        .write_stdin(WriteExecutionStdinRequest {
-            vm_id: String::from("vm-1"),
-            execution_id: execution.execution_id.clone(),
-            chunk: b"input".to_vec(),
-        })
-        .expect("write stdin");
-    bridge
-        .close_stdin(ExecutionHandleRequest {
-            vm_id: String::from("vm-1"),
-            execution_id: execution.execution_id.clone(),
-        })
-        .expect("close stdin");
-    bridge
-        .kill_execution(secure_exec_bridge::KillExecutionRequest {
-            vm_id: String::from("vm-1"),
-            execution_id: execution.execution_id,
-            signal: ExecutionSignal::Terminate,
-        })
-        .expect("kill execution");
-
-    match bridge
-        .poll_execution_event(PollExecutionEventRequest {
-            vm_id: String::from("vm-1"),
-        })
-        .expect("poll execution event")
-    {
-        Some(ExecutionEvent::GuestRequest(event)) => {
-            assert_eq!(event.operation, "fs.read");
-        }
-        other => panic!("unexpected execution event: {other:?}"),
-    }
-
-    let _ = wasm_context;
-}
-
-#[test]
-fn host_bridge_traits_are_method_oriented_and_composable() {
-    let mut bridge = RecordingBridge::default();
-    bridge.seed_file("/workspace/input.txt", b"hello".to_vec());
-    bridge.seed_directory(
-        "/workspace",
-        vec![DirectoryEntry {
-            name: String::from("input.txt"),
-            kind: FileKind::File,
-        }],
-    );
-    bridge.seed_snapshot(
-        "vm-1",
-        FilesystemSnapshot {
-            format: String::from("tar"),
-            bytes: vec![1, 2, 3],
-        },
-    );
-    bridge.push_execution_event(ExecutionEvent::GuestRequest(GuestKernelCall {
-        vm_id: String::from("vm-1"),
-        execution_id: String::from("exec-seeded"),
-        operation: String::from("fs.read"),
-        payload: b"{}".to_vec(),
-    }));
-
-    assert_host_bridge(&mut bridge);
-}
diff --git a/crates/bridge/tests/support.rs b/crates/bridge/tests/support.rs
deleted file mode 100644
index 75199c8e5..000000000
--- a/crates/bridge/tests/support.rs
+++ /dev/null
@@ -1,493 +0,0 @@
-use secure_exec_bridge::{
-    BridgeTypes, ChmodRequest, ClockBridge, ClockRequest, CommandPermissionRequest,
-    CreateDirRequest, CreateJavascriptContextRequest, CreateWasmContextRequest, DiagnosticRecord,
-    DirectoryEntry, EnvironmentPermissionRequest, EventBridge, ExecutionBridge, ExecutionEvent,
-    ExecutionHandleRequest, FileKind, FileMetadata, FilesystemBridge, FilesystemPermissionRequest,
-    FilesystemSnapshot, FlushFilesystemStateRequest, GuestContextHandle, GuestRuntime,
-    KillExecutionRequest, LifecycleEventRecord, LoadFilesystemStateRequest, LogRecord,
-    NetworkPermissionRequest, PathRequest, PermissionBridge, PermissionDecision, PersistenceBridge,
-    PollExecutionEventRequest, RandomBridge, RandomBytesRequest, ReadDirRequest, ReadFileRequest,
-    RenameRequest, ScheduleTimerRequest, ScheduledTimer, StartExecutionRequest, StartedExecution,
-    StructuredEventRecord, SymlinkRequest, TruncateRequest, WriteExecutionStdinRequest,
-    WriteFileRequest,
-};
-use std::collections::{BTreeMap, BTreeSet, VecDeque};
-use std::time::{Duration, SystemTime};
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct StubError {
-    message: String,
-}
-
-impl StubError {
-    pub fn new(message: impl Into<String>) -> Self {
-        Self {
-            message: message.into(),
-        }
-    }
-
-    fn missing(kind: &'static str, key: &str) -> Self {
-        Self {
-            message: format!("missing {kind}: {key}"),
-        }
-    }
-
-    fn invalid(kind: &'static str, key: &str) -> Self {
-        Self {
-            message: format!("invalid {kind}: {key}"),
-        }
-    }
-}
-
-#[derive(Debug)]
-pub struct RecordingBridge {
-    next_context_id: usize,
-    next_execution_id: usize,
-    next_timer_id: usize,
-    files: BTreeMap<String, Vec<u8>>,
-    directories: BTreeMap<String, Vec<DirectoryEntry>>,
-    symlinks: BTreeMap<String, String>,
-    snapshots: BTreeMap<String, FilesystemSnapshot>,
-    execution_events: VecDeque<ExecutionEvent>,
-    permission_responses: VecDeque<Result<PermissionDecision, StubError>>,
-    worker_create_errors: VecDeque<StubError>,
-    execution_start_errors: VecDeque<StubError>,
-    pub filesystem_permission_requests: Vec<FilesystemPermissionRequest>,
-    pub permission_checks: Vec<String>,
-    pub log_events: Vec<LogRecord>,
-    pub diagnostic_events: Vec<DiagnosticRecord>,
-    pub structured_events: Vec<StructuredEventRecord>,
-    pub lifecycle_events: Vec<LifecycleEventRecord>,
-    pub scheduled_timers: Vec<ScheduleTimerRequest>,
-    pub stdin_writes: Vec<WriteExecutionStdinRequest>,
-    pub closed_executions: Vec<ExecutionHandleRequest>,
-    pub killed_executions: Vec<KillExecutionRequest>,
-    #[allow(dead_code)]
-    pub browser_worker_spawns: Vec<BTreeMap<String, String>>,
-    #[allow(dead_code)]
-    pub terminated_workers: Vec<(String, String, String)>,
-}
-
-impl Default for RecordingBridge {
-    fn default() -> Self {
-        let mut directories = BTreeMap::new();
-        directories.insert(String::from("/"), Vec::new());
-
-        Self {
-            next_context_id: 1,
-            next_execution_id: 1,
-            next_timer_id: 1,
-            files: BTreeMap::new(),
-            directories,
-            symlinks: BTreeMap::new(),
-            snapshots: BTreeMap::new(),
-            execution_events: VecDeque::new(),
-            permission_responses: VecDeque::new(),
-            worker_create_errors: VecDeque::new(),
-            execution_start_errors: VecDeque::new(),
-            filesystem_permission_requests: Vec::new(),
-            permission_checks: Vec::new(),
-            log_events: Vec::new(),
-            diagnostic_events: Vec::new(),
-            structured_events: Vec::new(),
-            lifecycle_events: Vec::new(),
-            scheduled_timers: Vec::new(),
-            stdin_writes: Vec::new(),
-            closed_executions: Vec::new(),
-            killed_executions: Vec::new(),
-            browser_worker_spawns: Vec::new(),
-            terminated_workers: Vec::new(),
-        }
-    }
-}
-
-#[allow(dead_code)]
-impl RecordingBridge {
-    pub fn seed_file(&mut self, path: impl Into<String>, contents: impl Into<Vec<u8>>) {
-        self.files.insert(path.into(), contents.into());
-    }
-
-    pub fn seed_directory(&mut self, path: impl Into<String>, entries: Vec<DirectoryEntry>) {
-        self.directories.insert(path.into(), entries);
-    }
-
-    pub fn seed_snapshot(&mut self, vm_id: impl Into<String>, snapshot: FilesystemSnapshot) {
-        self.snapshots.insert(vm_id.into(), snapshot);
-    }
-
-    pub fn push_execution_event(&mut self, event: ExecutionEvent) {
-        self.execution_events.push_back(event);
-    }
-
-    pub fn push_permission_decision(&mut self, decision: PermissionDecision) {
-        self.permission_responses.push_back(Ok(decision));
-    }
-
-    pub fn push_permission_error(&mut self, message: impl Into<String>) {
-        self.permission_responses
-            .push_back(Err(StubError::new(message)));
-    }
-
-    pub fn push_worker_create_error(&mut self, message: impl Into<String>) {
-        self.worker_create_errors.push_back(StubError::new(message));
-    }
-
-    pub fn push_execution_start_error(&mut self, message: impl Into<String>) {
-        self.execution_start_errors
-            .push_back(StubError::new(message));
-    }
-
-    pub fn next_worker_create_error(&mut self) -> Option<StubError> {
-        self.worker_create_errors.pop_front()
-    }
-
-    fn next_permission_response(&mut self) -> Result<PermissionDecision, StubError> {
-        self.permission_responses
-            .pop_front()
-            .unwrap_or_else(|| Ok(PermissionDecision::allow()))
-    }
-
-    fn metadata_for_path(&self, path: &str, follow_links: bool) -> Result<FileMetadata, StubError> {
-        let mut current_path = path.to_owned();
-        let mut seen_links = BTreeSet::new();
-
-        if follow_links {
-            while let Some(target) = self.symlinks.get(&current_path) {
-                if !seen_links.insert(current_path.clone()) {
-                    return Err(StubError::invalid("symlink cycle", &current_path));
-                }
-                current_path = target.clone();
-            }
-        } else if self.symlinks.contains_key(&current_path) {
-            return Ok(FileMetadata {
-                mode: 0o777,
-                size: 0,
-                kind: FileKind::SymbolicLink,
-            });
-        }
-
-        if let Some(bytes) = self.files.get(&current_path) {
-            return Ok(FileMetadata {
-                mode: 0o644,
-                size: bytes.len() as u64,
-                kind: FileKind::File,
-            });
-        }
-
-        if let Some(entries) = self.directories.get(&current_path) {
-            return Ok(FileMetadata {
-                mode: 0o755,
-                size: entries.len() as u64,
-                kind: FileKind::Directory,
-            });
-        }
-
-        Err(StubError::missing("path", &current_path))
-    }
-}
-
-impl BridgeTypes for RecordingBridge {
-    type Error = StubError;
-}
-
-impl FilesystemBridge for RecordingBridge {
-    fn read_file(&mut self, request: ReadFileRequest) -> Result<Vec<u8>, Self::Error> {
-        self.files
-            .get(&request.path)
-            .cloned()
-            .ok_or_else(|| StubError::missing("file", &request.path))
-    }
-
-    fn write_file(&mut self, request: WriteFileRequest) -> Result<(), Self::Error> {
-        self.files.insert(request.path, request.contents);
-        Ok(())
-    }
-
-    fn stat(&mut self, request: PathRequest) -> Result<FileMetadata, Self::Error> {
-        self.metadata_for_path(&request.path, true)
-    }
-
-    fn lstat(&mut self, request: PathRequest) -> Result<FileMetadata, Self::Error> {
-        self.metadata_for_path(&request.path, false)
-    }
-
-    fn read_dir(&mut self, request: ReadDirRequest) -> Result<Vec<DirectoryEntry>, Self::Error> {
-        Ok(self
-            .directories
-            .get(&request.path)
-            .cloned()
-            .unwrap_or_default())
-    }
-
-    fn create_dir(&mut self, request: CreateDirRequest) -> Result<(), Self::Error> {
-        self.directories.entry(request.path).or_default();
-        Ok(())
-    }
-
-    fn remove_file(&mut self, request: PathRequest) -> Result<(), Self::Error> {
-        self.files.remove(&request.path);
-        Ok(())
-    }
-
-    fn remove_dir(&mut self, request: PathRequest) -> Result<(), Self::Error> {
-        self.directories.remove(&request.path);
-        Ok(())
-    }
-
-    fn rename(&mut self, request: RenameRequest) -> Result<(), Self::Error> {
-        if let Some(bytes) = self.files.remove(&request.from_path) {
-            self.files.insert(request.to_path, bytes);
-            return Ok(());
-        }
-
-        if let Some(target) = self.symlinks.remove(&request.from_path) {
-            self.symlinks.insert(request.to_path, target);
-            return Ok(());
-        }
-
-        if let Some(entries) = self.directories.remove(&request.from_path) {
-            self.directories.insert(request.to_path, entries);
-            return Ok(());
-        }
-
-        Err(StubError::missing("rename source", &request.from_path))
-    }
-
-    fn symlink(&mut self, request: SymlinkRequest) -> Result<(), Self::Error> {
-        self.symlinks.insert(request.link_path, request.target_path);
-        Ok(())
-    }
-
-    fn read_link(&mut self, request: PathRequest) -> Result<String, Self::Error> {
-        self.symlinks
-            .get(&request.path)
-            .cloned()
-            .ok_or_else(|| StubError::missing("symlink", &request.path))
-    }
-
-    fn chmod(&mut self, _request: ChmodRequest) -> Result<(), Self::Error> {
-        Ok(())
-    }
-
-    fn truncate(&mut self, request: TruncateRequest) -> Result<(), Self::Error> {
-        let Some(bytes) = self.files.get_mut(&request.path) else {
-            return Err(StubError::missing("file", &request.path));
-        };
-
-        bytes.resize(request.len as usize, 0);
-        Ok(())
-    }
-
-    fn exists(&mut self, request: PathRequest) -> Result<bool, Self::Error> {
-        Ok(self.files.contains_key(&request.path)
-            || self.directories.contains_key(&request.path)
-            || self.symlinks.contains_key(&request.path))
-    }
-}
-
-impl PermissionBridge for RecordingBridge {
-    fn check_filesystem_access(
-        &mut self,
-        request: FilesystemPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        self.filesystem_permission_requests.push(request.clone());
-        self.permission_checks
-            .push(format!("fs:{}:{}", request.vm_id, request.path));
-        self.next_permission_response()
-    }
-
-    fn check_network_access(
-        &mut self,
-        request: NetworkPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        self.permission_checks
-            .push(format!("net:{}:{}", request.vm_id, request.resource));
-        self.next_permission_response()
-    }
-
-    fn check_command_execution(
-        &mut self,
-        request: CommandPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        self.permission_checks
-            .push(format!("cmd:{}:{}", request.vm_id, request.command));
-        self.next_permission_response()
-    }
-
-    fn check_environment_access(
-        &mut self,
-        request: EnvironmentPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        self.permission_checks
-            .push(format!("env:{}:{}", request.vm_id, request.key));
-        self.next_permission_response()
-    }
-}
-
-impl PersistenceBridge for RecordingBridge {
-    fn load_filesystem_state(
-        &mut self,
-        request: LoadFilesystemStateRequest,
-    ) -> Result<Option<FilesystemSnapshot>, Self::Error> {
-        Ok(self.snapshots.get(&request.vm_id).cloned())
-    }
-
-    fn flush_filesystem_state(
-        &mut self,
-        request: FlushFilesystemStateRequest,
-    ) -> Result<(), Self::Error> {
-        self.snapshots.insert(request.vm_id, request.snapshot);
-        Ok(())
-    }
-}
-
-impl ClockBridge for RecordingBridge {
-    fn wall_clock(&mut self, _request: ClockRequest) -> Result<SystemTime, Self::Error> {
-        Ok(SystemTime::UNIX_EPOCH + Duration::from_secs(1_710_000_000))
-    }
-
-    fn monotonic_clock(&mut self, _request: ClockRequest) -> Result<Duration, Self::Error> {
-        Ok(Duration::from_millis(42))
-    }
-
-    fn schedule_timer(
-        &mut self,
-        request: ScheduleTimerRequest,
-    ) -> Result<ScheduledTimer, Self::Error> {
-        self.scheduled_timers.push(request.clone());
-
-        let timer = ScheduledTimer {
-            timer_id: format!("timer-{}", self.next_timer_id),
-            delay: request.delay,
-        };
-        self.next_timer_id += 1;
-
-        Ok(timer)
-    }
-}
-
-impl RandomBridge for RecordingBridge {
-    fn fill_random_bytes(&mut self, request: RandomBytesRequest) -> Result<Vec<u8>, Self::Error> {
-        Ok(vec![0xA5; request.len])
-    }
-}
-
-impl EventBridge for RecordingBridge {
-    fn emit_structured_event(&mut self, event: StructuredEventRecord) -> Result<(), Self::Error> {
-        self.structured_events.push(event);
-        Ok(())
-    }
-
-    fn emit_diagnostic(&mut self, event: DiagnosticRecord) -> Result<(), Self::Error> {
-        self.diagnostic_events.push(event);
-        Ok(())
-    }
-
-    fn emit_log(&mut self, event: LogRecord) -> Result<(), Self::Error> {
-        self.log_events.push(event);
-        Ok(())
-    }
-
-    fn emit_lifecycle(&mut self, event: LifecycleEventRecord) -> Result<(), Self::Error> {
-        self.lifecycle_events.push(event);
-        Ok(())
-    }
-}
-
-impl ExecutionBridge for RecordingBridge {
-    fn create_javascript_context(
-        &mut self,
-        _request: CreateJavascriptContextRequest,
-    ) -> Result<GuestContextHandle, Self::Error> {
-        let handle = GuestContextHandle {
-            context_id: format!("js-context-{}", self.next_context_id),
-            runtime: GuestRuntime::JavaScript,
-        };
-        self.next_context_id += 1;
-        Ok(handle)
-    }
-
-    fn create_wasm_context(
-        &mut self,
-        _request: CreateWasmContextRequest,
-    ) -> Result<GuestContextHandle, Self::Error> {
-        let handle = GuestContextHandle {
-            context_id: format!("wasm-context-{}", self.next_context_id),
-            runtime: GuestRuntime::WebAssembly,
-        };
-        self.next_context_id += 1;
-        Ok(handle)
-    }
-
-    fn start_execution(
-        &mut self,
-        _request: StartExecutionRequest,
-    ) -> Result<StartedExecution, Self::Error> {
-        if let Some(error) = self.execution_start_errors.pop_front() {
-            return Err(error);
-        }
-
-        let execution = StartedExecution {
-            execution_id: format!("exec-{}", self.next_execution_id),
-        };
-        self.next_execution_id += 1;
-        Ok(execution)
-    }
-
-    fn write_stdin(&mut self, request: WriteExecutionStdinRequest) -> Result<(), Self::Error> {
-        self.stdin_writes.push(request);
-        Ok(())
-    }
-
-    fn close_stdin(&mut self, request: ExecutionHandleRequest) -> Result<(), Self::Error> {
-        self.closed_executions.push(request);
-        Ok(())
-    }
-
-    fn kill_execution(&mut self, request: KillExecutionRequest) -> Result<(), Self::Error> {
-        self.killed_executions.push(request);
-        Ok(())
-    }
-
-    fn poll_execution_event(
-        &mut self,
-        _request: PollExecutionEventRequest,
-    ) -> Result<Option<ExecutionEvent>, Self::Error> {
-        Ok(self.execution_events.pop_front())
-    }
-}
-
-#[test]
-fn recording_bridge_rejects_symlink_cycles_when_following_metadata() {
-    let mut bridge = RecordingBridge::default();
-    bridge
-        .symlink(SymlinkRequest {
-            vm_id: String::from("vm-1"),
-            target_path: String::from("/b"),
-            link_path: String::from("/a"),
-        })
-        .expect("create first symlink");
-    bridge
-        .symlink(SymlinkRequest {
-            vm_id: String::from("vm-1"),
-            target_path: String::from("/a"),
-            link_path: String::from("/b"),
-        })
-        .expect("create second symlink");
-
-    let error = bridge
-        .stat(PathRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/a"),
-        })
-        .expect_err("cycle should be rejected");
-    assert!(error.message.contains("symlink cycle"));
-
-    let metadata = bridge
-        .lstat(PathRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/a"),
-        })
-        .expect("lstat should not follow symlink");
-    assert_eq!(metadata.kind, FileKind::SymbolicLink);
-}
diff --git a/crates/build-support/Cargo.toml b/crates/build-support/Cargo.toml
index b06cdc94f..f97131ac9 100644
--- a/crates/build-support/Cargo.toml
+++ b/crates/build-support/Cargo.toml
@@ -4,7 +4,10 @@ version.workspace = true
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
-description = "Build script helpers for secure-exec crates"
+description = "secure-exec-build-support compatibility shim for agentos-build-support"
 
 [lib]
-path = "v8_bridge_build.rs"
+name = "secure_exec_build_support"
+
+[dependencies]
+agentos_build_support = { package = "agentos-build-support", path = "../../../agentos/crates/build-support", version = "0.0.1" }
diff --git a/crates/build-support/src/lib.rs b/crates/build-support/src/lib.rs
new file mode 100644
index 000000000..44fc0bcfe
--- /dev/null
+++ b/crates/build-support/src/lib.rs
@@ -0,0 +1,3 @@
+//! Compatibility shim for `agentos-build-support`.
+
+pub use agentos_build_support::*;
diff --git a/crates/build-support/v8_bridge_build.rs b/crates/build-support/v8_bridge_build.rs
deleted file mode 100644
index 3e3d58221..000000000
--- a/crates/build-support/v8_bridge_build.rs
+++ /dev/null
@@ -1,315 +0,0 @@
-use std::env;
-use std::fs;
-use std::io;
-use std::path::{Path, PathBuf};
-use std::process::Command;
-
-const ENV_NODE: &str = "SECURE_EXEC_NODE";
-const LEGACY_ENV_NODE: &str = "AGENTOS_NODE";
-const ENV_BUILD_SCRIPT: &str = "SECURE_EXEC_V8_BRIDGE_BUILD_SCRIPT";
-const LEGACY_ENV_BUILD_SCRIPT: &str = "AGENTOS_V8_BRIDGE_BUILD_SCRIPT";
-const ENV_DEBUG: &str = "SECURE_EXEC_GENERATED_ASSET_DEBUG";
-const LEGACY_ENV_DEBUG: &str = "AGENTOS_GENERATED_ASSET_DEBUG";
-const DEFAULT_BUILD_SCRIPTS: &[&str] = &[
-    "packages/build-tools/scripts/build-v8-bridge.mjs",
-    "packages/secure-exec-core/scripts/build-v8-bridge.mjs",
-    "packages/core/scripts/build-v8-bridge.mjs",
-];
-const BUILD_SCRIPT_CANDIDATES: &str = "packages/build-tools/scripts/build-v8-bridge.mjs, packages/secure-exec-core/scripts/build-v8-bridge.mjs, or packages/core/scripts/build-v8-bridge.mjs";
-
-pub fn build_v8_bridge(crate_manifest_dir: &Path, out_dir: &Path) {
-    let bridge_output = out_dir.join("v8-bridge.js");
-    let zlib_output = out_dir.join("v8-bridge-zlib.js");
-
-    println!("cargo:rerun-if-env-changed={ENV_NODE}");
-    println!("cargo:rerun-if-env-changed={LEGACY_ENV_NODE}");
-    println!("cargo:rerun-if-env-changed={ENV_BUILD_SCRIPT}");
-    println!("cargo:rerun-if-env-changed={LEGACY_ENV_BUILD_SCRIPT}");
-    println!("cargo:rerun-if-env-changed={ENV_DEBUG}");
-    println!("cargo:rerun-if-env-changed={LEGACY_ENV_DEBUG}");
-
-    if let Some(repo_root) = monorepo_root(crate_manifest_dir) {
-        build_from_monorepo(&repo_root, out_dir);
-    } else {
-        copy_vendored_bundle(crate_manifest_dir, &bridge_output, &zlib_output);
-    }
-
-    if !bridge_output.exists() || !zlib_output.exists() {
-        panic!(
-            "V8 bridge build completed but expected outputs are missing: {}, {}",
-            bridge_output.display(),
-            zlib_output.display()
-        );
-    }
-}
-
-/// Resolve the monorepo root when the in-tree build toolchain is available.
-/// Returns `None` when building the published crate so the caller falls back
-/// to the vendored prebuilt bundle.
-fn monorepo_root(crate_manifest_dir: &Path) -> Option<PathBuf> {
-    if env_var_os(ENV_BUILD_SCRIPT, LEGACY_ENV_BUILD_SCRIPT).is_some() {
-        // An explicit override always implies an in-tree build.
-        return crate_manifest_dir
-            .parent()
-            .and_then(Path::parent)
-            .map(Path::to_path_buf);
-    }
-
-    let repo_root = crate_manifest_dir.parent().and_then(Path::parent)?;
-    if DEFAULT_BUILD_SCRIPTS
-        .iter()
-        .any(|script| repo_root.join(script).exists())
-    {
-        Some(repo_root.to_path_buf())
-    } else {
-        None
-    }
-}
-
-fn copy_vendored_bundle(crate_manifest_dir: &Path, bridge_output: &Path, zlib_output: &Path) {
-    let vendored_dir = crate_manifest_dir.join("assets/generated");
-    let vendored_bridge = vendored_dir.join("v8-bridge.js");
-    let vendored_zlib = vendored_dir.join("v8-bridge-zlib.js");
-
-    println!("cargo:rerun-if-changed={}", vendored_bridge.display());
-    println!("cargo:rerun-if-changed={}", vendored_zlib.display());
-
-    if !vendored_bridge.exists() || !vendored_zlib.exists() {
-        panic!(
-            "the V8 bridge build toolchain ({BUILD_SCRIPT_CANDIDATES}) was not \
-             found and no vendored bundle exists at {}. Published crates must ship the prebuilt \
-             bundle; run the release tooling to stage it.",
-            vendored_dir.display()
-        );
-    }
-
-    fs::copy(&vendored_bridge, bridge_output).unwrap_or_else(|error| {
-        panic!(
-            "failed to copy vendored V8 bridge bundle from {} to {}: {}",
-            vendored_bridge.display(),
-            bridge_output.display(),
-            error
-        )
-    });
-    fs::copy(&vendored_zlib, zlib_output).unwrap_or_else(|error| {
-        panic!(
-            "failed to copy vendored V8 bridge zlib bundle from {} to {}: {}",
-            vendored_zlib.display(),
-            zlib_output.display(),
-            error
-        )
-    });
-}
-
-fn build_from_monorepo(repo_root: &Path, out_dir: &Path) {
-    let script_path = resolve_build_script(repo_root);
-    let package_root = script_path
-        .parent()
-        .and_then(Path::parent)
-        .unwrap_or_else(|| {
-            panic!(
-                "failed to resolve package root from V8 bridge build script path {}",
-                script_path.display()
-            )
-        });
-    let node_modules = package_root.join("node_modules");
-    let node = env_var_os(ENV_NODE, LEGACY_ENV_NODE).unwrap_or_else(|| "node".into());
-    let node_path = PathBuf::from(node);
-    let debug = env_var_os(ENV_DEBUG, LEGACY_ENV_DEBUG).is_some();
-
-    emit_rerun_inputs(repo_root, &script_path, package_root);
-
-    if !node_modules.exists() {
-        panic!(
-            "missing Node dependencies at {}. Run `pnpm install` from {} before building V8 bridge assets.",
-            node_modules.display(),
-            repo_root.display()
-        );
-    }
-
-    require_pnpm(repo_root, debug);
-
-    if debug {
-        println!(
-            "cargo:warning=building V8 bridge with node={} script={} out_dir={}",
-            node_path.display(),
-            script_path.display(),
-            out_dir.display()
-        );
-    }
-
-    let output = Command::new(&node_path)
-        .arg(&script_path)
-        .arg("--out-dir")
-        .arg(out_dir)
-        .current_dir(repo_root)
-        .output()
-        .unwrap_or_else(|error| match error.kind() {
-            io::ErrorKind::NotFound => panic!(
-                "failed to build V8 bridge assets because `{}` was not found. Install Node.js or set {ENV_NODE} to the Node binary.",
-                node_path.display()
-            ),
-            _ => panic!(
-                "failed to spawn V8 bridge build with `{}`: {}",
-                node_path.display(),
-                error
-            ),
-        });
-
-    if !output.status.success() {
-        let stdout = String::from_utf8_lossy(&output.stdout);
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        let dependency_hint = if stderr.contains("ERR_MODULE_NOT_FOUND")
-            || stderr.contains("Cannot find package")
-            || stderr.contains("Cannot find module")
-        {
-            "\nNode dependencies appear to be missing or incomplete. Run `pnpm install` from the repo root."
-        } else {
-            ""
-        };
-
-        panic!(
-            "failed to build V8 bridge assets with `{}` (status: {}).{}\nstdout:\n{}\nstderr:\n{}",
-            node_path.display(),
-            output.status,
-            dependency_hint,
-            stdout.trim(),
-            stderr.trim()
-        );
-    }
-}
-
-fn resolve_build_script(repo_root: &Path) -> PathBuf {
-    match env_var_os(ENV_BUILD_SCRIPT, LEGACY_ENV_BUILD_SCRIPT) {
-        Some(path) => {
-            let path = PathBuf::from(path);
-            if path.is_absolute() {
-                path
-            } else {
-                repo_root.join(path)
-            }
-        }
-        None => DEFAULT_BUILD_SCRIPTS
-            .iter()
-            .map(|script| repo_root.join(script))
-            .find(|script| script.exists())
-            .unwrap_or_else(|| repo_root.join(DEFAULT_BUILD_SCRIPTS[0])),
-    }
-}
-
-fn env_var_os(primary: &str, legacy: &str) -> Option<std::ffi::OsString> {
-    env::var_os(primary).or_else(|| env::var_os(legacy))
-}
-
-fn require_pnpm(repo_root: &Path, debug: bool) {
-    let output = Command::new("pnpm")
-        .arg("--version")
-        .current_dir(repo_root)
-        .output()
-        .unwrap_or_else(|error| match error.kind() {
-            io::ErrorKind::NotFound => {
-                panic!(
-                    "failed to build V8 bridge assets because `pnpm` was not found. Install pnpm and run `pnpm install` from {}.",
-                    repo_root.display()
-                )
-            }
-            _ => panic!("failed to check pnpm availability: {}", error),
-        });
-
-    if !output.status.success() {
-        panic!(
-            "failed to build V8 bridge assets because `pnpm --version` failed with status {}. Run `pnpm install` from {} after fixing pnpm.",
-            output.status,
-            repo_root.display()
-        );
-    }
-
-    if debug {
-        println!(
-            "cargo:warning=pnpm version {}",
-            String::from_utf8_lossy(&output.stdout).trim()
-        );
-    }
-}
-
-fn emit_rerun_inputs(repo_root: &Path, script_path: &Path, package_root: &Path) {
-    let inputs = [
-        repo_root.join("crates/build-support/v8_bridge_build.rs"),
-        script_path.to_path_buf(),
-        package_root.join("package.json"),
-        repo_root.join("pnpm-lock.yaml"),
-    ];
-
-    for input in inputs {
-        println!("cargo:rerun-if-changed={}", input.display());
-    }
-
-    let bridge_src_dir = repo_root.join("packages/build-tools/bridge-src");
-    emit_rerun_dir(&bridge_src_dir).unwrap_or_else(|error| {
-        panic!(
-            "failed to enumerate V8 bridge source inputs under {}: {}",
-            bridge_src_dir.display(),
-            error
-        )
-    });
-
-    let shim_dir = repo_root.join("crates/execution/assets/undici-shims");
-    emit_rerun_dir(&shim_dir).unwrap_or_else(|error| {
-        panic!(
-            "failed to enumerate V8 bridge shim inputs under {}: {}",
-            shim_dir.display(),
-            error
-        )
-    });
-}
-
-fn emit_rerun_dir(dir: &Path) -> io::Result<()> {
-    let mut entries = fs::read_dir(dir)?.collect::<Result<Vec<_>, _>>()?;
-    entries.sort_by_key(|entry| entry.path());
-
-    for entry in entries {
-        let path = entry.path();
-        let file_type = entry.file_type()?;
-        if file_type.is_dir() {
-            emit_rerun_dir(&path)?;
-        } else {
-            println!("cargo:rerun-if-changed={}", path.display());
-        }
-    }
-
-    Ok(())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::emit_rerun_dir;
-    use std::fs;
-    use std::io;
-    use std::path::PathBuf;
-
-    fn temp_test_dir(name: &str) -> io::Result<PathBuf> {
-        let mut path = std::env::temp_dir();
-        path.push(format!(
-            "secure-exec-v8-bridge-build-{name}-{}",
-            std::process::id()
-        ));
-        let _ = fs::remove_dir_all(&path);
-        fs::create_dir(&path)?;
-        Ok(path)
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn emit_rerun_dir_does_not_follow_directory_symlinks() -> io::Result<()> {
-        let dir = temp_test_dir("symlink-cycle")?;
-        fs::write(dir.join("shim.js"), b"export {};")?;
-        std::os::unix::fs::symlink(&dir, dir.join("self"))?;
-
-        let result = emit_rerun_dir(&dir);
-        let cleanup = fs::remove_dir_all(&dir);
-
-        result?;
-        cleanup?;
-        Ok(())
-    }
-}
diff --git a/crates/client/Cargo.toml b/crates/client/Cargo.toml
new file mode 100644
index 000000000..faa4d2722
--- /dev/null
+++ b/crates/client/Cargo.toml
@@ -0,0 +1,13 @@
+[package]
+name = "secure-exec-client"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+repository.workspace = true
+description = "secure-exec-client compatibility shim for agentos-sidecar-client"
+
+[lib]
+name = "secure_exec_client"
+
+[dependencies]
+agentos_sidecar_client = { package = "agentos-sidecar-client", path = "../../../agentos/crates/sidecar-client", version = "0.0.1" }
diff --git a/crates/client/src/lib.rs b/crates/client/src/lib.rs
new file mode 100644
index 000000000..ef2436dc3
--- /dev/null
+++ b/crates/client/src/lib.rs
@@ -0,0 +1,3 @@
+//! Compatibility shim for `agentos-sidecar-client`.
+
+pub use agentos_sidecar_client::*;
diff --git a/crates/execution/AGENTS.md b/crates/execution/AGENTS.md
deleted file mode 120000
index 681311eb9..000000000
--- a/crates/execution/AGENTS.md
+++ /dev/null
@@ -1 +0,0 @@
-CLAUDE.md
\ No newline at end of file
diff --git a/crates/execution/CLAUDE.md b/crates/execution/CLAUDE.md
deleted file mode 100644
index 473423dce..000000000
--- a/crates/execution/CLAUDE.md
+++ /dev/null
@@ -1,233 +0,0 @@
-# Execution Engines
-
-Runtime execution for Node.js (JavaScript/TypeScript) and Python (Pyodide) guest code.
-
-`crates/execution` is the native execution implementation crate. It is not the browser/native portability seam. Cross-environment contracts belong in `crates/bridge/` (`ExecutionBridge`, `HostBridge`), and browser-side execution should continue to target those shared bridge surfaces rather than depending on `crates/execution`.
-
-When simplifying native V8 embedding, prefer concrete native types over new traits unless there is a real need for multiple interchangeable native V8 backends. Do not introduce a native-internal `V8Runtime` abstraction and then treat it like a second portability layer.
-
-**⚠️ ABSOLUTE RULE — NO EXCEPTIONS, NO FALLBACKS, NO "TEMPORARY" WORKAROUNDS:**
-
-**ALL guest code MUST execute inside V8 isolates with kernel-backed polyfills. NEVER spawn real host Node.js processes for guest code. NEVER use `Command::new("node")` for guest execution. NEVER add a "legacy node mode", "host execution fallback", or "execution mode flag" that routes guest code through real host processes. There is exactly ONE execution path for guest JavaScript: V8 isolates managed by `crates/v8-runtime/` with polyfills that route through the kernel. Any code path where guest code reaches the real host — even as a "temporary" measure, even behind a flag, even for "compatibility" — is a critical security violation and MUST NOT be merged.**
-
-If tests fail because they were written for the old `Command::new("node")` path, **fix or delete the tests** — do NOT restore host execution to make them pass.
-
-## Node.js Isolation Model
-
-**Desired state:** Guest JS/TS runs inside isolated V8 contexts managed by the execution engine. All Node.js builtins (`fs`, `net`, `child_process`, `dns`, `http`, `os`, etc.) are kernel-backed polyfills that route through the kernel VFS, socket table, and process table. Module loading is fully intercepted — guest code never touches real host APIs. The execution engine previously had this working via `@secure-exec/core` + `@secure-exec/nodejs` with full kernel-backed polyfills for all builtins.
-
-**Current state (⚠️ STILL INCOMPLETE -- see `~/.agents/todo/node-isolation-gaps.md`):**
-
-Guest JavaScript entrypoints in `javascript.rs` now run only through the shared V8 runtime. The remaining gaps are polyfill completeness and builtin isolation parity: some builtins still need deeper kernel-backed implementations or broader conformance coverage, but restoring a host-Node guest execution fallback is not allowed.
-
-- Keep any real-host Node helpers isolated to clearly host-only modules used by benchmarks or import-cache tests. Guest JS/WASM/Python runtime code should depend only on neutral shared helpers (for example signal metadata or path resolution), not on files that also own host launch behavior.
-- Guest-side WebAssembly inside the V8 isolate must stay enabled on both fresh isolates and snapshot restores. Real npm packages rely on `WebAssembly.Module`, `WebAssembly.Instance`, and `WebAssembly.instantiate*`, and allowing those APIs does not violate the kernel-isolation boundary because compilation stays inside the isolate. Do not reintroduce an embedder callback that blocks WASM; rely on V8's own implementation limits instead.
-
-**Recovery reference:** The complete working polyfill + V8 isolate code from the original `@secure-exec/core` + `@secure-exec/nodejs` + `@secure-exec/v8` packages has been recovered to `~/.agents/recovery/secure-exec/`. Key files to port:
-- `nodejs/src/bridge/fs.ts` (3,974 lines) -- full kernel-backed `fs`/`fs/promises` polyfill
-- `nodejs/src/bridge/network.ts` (11,149 lines) -- full `net`/`dgram`/`dns` polyfill via kernel socket table
-- `nodejs/src/bridge/child-process.ts` (1,058 lines) -- `child_process` polyfill via kernel process table
-- `nodejs/src/bridge/process.ts` (2,251 lines) -- virtualized `process` global (env, cwd, pid, signals)
-- `nodejs/src/bridge/polyfills.ts` (914 lines) -- polyfill registration and module hijacking
-- `nodejs/src/bridge-handlers.ts` (6,405 lines) -- host-side bridge handlers for all kernel syscalls
-- `nodejs/src/execution-driver.ts` (1,693 lines) -- V8 isolate session lifecycle + bridge setup
-- `kernel/` -- the JS kernel (VFS, process table, socket table, PTY, pipes)
-- `v8/` -- V8 runtime process manager, IPC binary protocol
-
-The original source repo is at `/home/nathan/secure-exec-1/` (tagged `v0.2.1`).
-
-**Prior art -- the original JS kernel had full polyfills:**
-
-Before the Rust sidecar (commit `5a43882`), the JS kernel (`@secure-exec/core` + `@secure-exec/nodejs` + `packages/posix/`) had complete kernel-backed polyfills for all builtins. The pattern was:
-- **Kernel socket table** -- `kernel.socketTable.create/connect/send/recv` managed all TCP/UDP. Loopback stayed in-kernel; external connections went through a `HostNetworkAdapter`.
-- **Kernel VFS** -- All `fs` operations routed through the kernel VFS via syscall RPC.
-- **Kernel process table** -- `child_process.spawn` routed through `kernel.spawn()`.
-- **SharedArrayBuffer RPC** -- Synchronous syscalls from worker threads used `Atomics.wait` + shared memory buffers (same pattern the Pyodide VFS bridge uses today).
-- **Module hijacking** -- `require('net')` returned the kernel-backed socket implementation, not real `node:net`.
-
-The Rust sidecar kernel already has the VFS, process table, pipe manager, PTY manager, and permission system. What's missing is porting the **polyfill layer**. This is a port of proven patterns, not a greenfield design.
-
-### Current reality vs required state
-
-| Builtin | Required | Current | Gap |
-|---------|----------|---------|-----|
-| `fs` / `fs/promises` | Kernel VFS polyfill | Path-translating wrapper over real `node:fs` | Port: route through kernel VFS via RPC |
-| `child_process` | Kernel process table polyfill | Path-translating wrapper over real `node:child_process` | Port: route through kernel process table |
-| `net` | Kernel socket table polyfill | **No wrapper -- falls through to real `node:net`** | Port: kernel socket table polyfill |
-| `dgram` | Kernel socket table polyfill | **No wrapper -- falls through to real `node:dgram`** | Port: kernel socket table polyfill |
-| `dns` | Kernel DNS resolver polyfill | **No wrapper -- falls through to real `node:dns`** | Port: kernel DNS resolver polyfill |
-| `http` / `https` / `http2` | Built on kernel `net` polyfill | **No wrapper -- falls through to real module** | Port: builds on `net` polyfill |
-| `tls` | Kernel TLS polyfill | Guest-owned polyfill in `node_import_cache.rs` wraps the existing guest `net` transport with host TLS state | Keep client/server entrypoints on guest sockets and avoid direct host `node:tls` listeners/connections |
-| `os` | Kernel-provided values | Guest-owned polyfill in `node_import_cache.rs` virtualizes hostname, CPU, memory, loopback networking, home, and user info | Keep future `os` additions aligned with VM defaults |
-| `vm` | Guest-owned compatibility shim for package loading | Guest-owned compatibility builtin for `Script`, `createContext`, `isContext`, `runInNewContext`, `runInThisContext` | Keep it limited to the compatibility surface; do not fall through to host `node:vm` |
-| `worker_threads` | Guest-owned compatibility shim for package loading | Guest-owned compatibility builtin exposing `isMainThread` plus inert ports; `Worker` construction stays unavailable | Keep it importable for feature detection, but never spawn real threads |
-| `inspector` | Must be denied | **No wrapper -- falls through to real module** | Must stay denied |
-| `v8` | Guest-owned compatibility shim for package loading | Guest-owned compatibility builtin for safe inspection/serialization helpers | Keep it limited to the compatibility surface; do not fall through to host `node:v8` |
-
-### Loader interception (`node_import_cache.rs`)
-
-ESM loader hooks (`loader.mjs`) and CJS `Module._load` patches (`runner.mjs`) are generated from Rust string templates. Every `import`/`require` is intercepted:
-1. `resolveBuiltinAsset()` -- checks `BUILTIN_ASSETS` list. Redirects to a kernel-backed polyfill file.
-2. `resolveDeniedBuiltin()` -- checks `DENIED_BUILTINS` set. Redirects to a stub that throws `ERR_ACCESS_DENIED`. A builtin is in `DENIED_BUILTINS` only if it is NOT in `ALLOWED_BUILTINS`.
-3. **Fall through to `nextResolve()`** -- Node.js default resolution. Returns the real host module. **This must never happen for any builtin that guest code can import.**
-
-`AGENTOS_ALLOWED_NODE_BUILTINS` (JSON string array env var) controls which builtins the host-node loader removes from the deny list. The default list `DEFAULT_ALLOWED_NODE_BUILTINS` lives in `crates/sidecar/src/execution.rs`. Note the live shared-V8 path enforces builtin denial at the Rust resolver (`LocalBridgeState::resolve_module` in `crates/execution/src/javascript.rs`, gated by `AGENTOS_JS_BUILTIN_ALLOWLIST`), not via this env var — see the `jsRuntime` config.
-
-- CommonJS `require` wrappers in `packages/build-tools/bridge-src/` must expose Node-compatible metadata on every per-module require function, not just on `Module.createRequire(...)`. Real packages call `delete require.cache[__filename]`, inspect `require.extensions`, and expect `require.main` to exist while running inside nested CommonJS modules.
-- The builtin `buffer` module wrapper must re-export `Blob` and `File` alongside `Buffer` constants. Next.js bundles `undici` through `require("buffer")`, and missing `buffer.Blob` / `buffer.File` breaks `fetch` support even when global `Blob` / `File` exist.
-- Keep the custom `events.EventEmitter` implementation function-constructible rather than a strict ES class. Legacy npm packages still use `util.inherits(..., EventEmitter)` plus `EventEmitter.call(this)`, and that pattern must stay compatible.
-- Local bridge module resolution must accept `file:` specifiers by converting them back to guest paths before package/path resolution. Next.js and other ESM loaders use `import(pathToFileURL(path).href)` for config and plugin loading.
-
-### Additional hardening layers (defense-in-depth, NOT primary isolation)
-
-1. **`globalThis.fetch` hardening** -- Replaced with `restrictedFetch` (loopback-only on exempt ports). Does NOT cover `http.request()`, `net.connect()`, or `dgram.createSocket()`.
-2. **Node.js `--permission` flag** -- OS-level backstop for filesystem and child_process only. No network restrictions. This is a safety net, not the isolation boundary.
-3. **Guest env stripping** -- `NODE_OPTIONS`, `LD_PRELOAD`, `DYLD_INSERT_LIBRARIES`, `LD_LIBRARY_PATH` stripped before spawn.
-4. **Permissioned Pyodide host launches still need `--allow-worker`.** `python.rs` bootstraps through Node's internal ESM loader worker, so the host process must keep `--allow-worker` enabled even though the guest `node:worker_threads` surface is limited to a compatibility shim and does not permit real worker creation.
-
-## Guest `fs` and `fs/promises` Polyfill Rules
-
-- Guest Node `fs` and `fs/promises` polyfills share the JavaScript sync-RPC transport between `node_import_cache.rs` and `crates/sidecar/src/service.rs`.
-- Node-facing `readdir` results must filter `.`/`..`.
-- Async methods should dispatch under `fs.promises.*`.
-- `fs.promises` methods that need real concurrency must use dedicated async bridge globals in `packages/build-tools/bridge-src/`; wrapping `fs.*Sync` inside `async` functions still serializes `Promise.all(...)` behind the first sidecar response.
-- When adding WASI guest imports in `registry/native/crates/wasi-ext`, mirror the required module/object in `crates/execution/src/node_import_cache.rs`'s inline `NODE_WASM_RUNNER_SOURCE`; missing modules fail at `WebAssembly.instantiate()` before guest `main()` runs.
-- Keep the embedded WASI shim in `crates/execution/src/wasm.rs` aligned with the patched wasi-libc surface used by the C command suite; overrides like `fcntl(F_SETFL)` now depend on `fd_fdstat_set_flags`, and missing imports fail at instantiation time before the guest command can do real work.
-- The shared-V8 WASM runner now resolves its own module loads plus internal guest `fs.openSync` / `fs.readSync` / `fs.writeSync` / `fs.closeSync` traffic inside `crates/execution/src/wasm.rs`; if the embedded runner gains more internal file syscalls, extend that internal sync-RPC handling there instead of surfacing those requests to callers or reintroducing a host-Node runtime path.
-- fd-based APIs (`open`, `read`, `write`, `close`, `fstat`) plus `createReadStream`/`createWriteStream` should ride the same bridge.
-- Creation-oriented V8 `fs` helpers must preserve the guest `mode` option and resolve it against the current guest `process.umask()` before dispatching kernel-backed RPCs; dropping the `mode` field or relying on host defaults breaks Node parity for `fs.openSync`, `fs.mkdirSync`, and stream constructors that create paths.
-- Guest `fs.watch` / `fs.watchFile` currently stay guest-owned polling wrappers over `fs.statSync`; keep them in `bridge-src` unless the kernel grows a real notification API.
-- Runner-internal pipe/control writes must keep snapped host `node:fs` bindings because `syncBuiltinModuleExports(...)` mutates the builtin module for guests.
-
-## JavaScript Sync RPC
-
-- Timeouts and slow-reader backpressure should be enforced in `javascript.rs`, not in the generated runner.
-- Track the pending request ID on the host, auto-emit `ERR_AGENTOS_NODE_SYNC_RPC_TIMEOUT` after the configured wait.
-- Queue replies through a bounded async writer so slow guest reads cannot block the sidecar thread.
-- Have `crates/sidecar/src/service.rs` ignore stale `sync RPC request ... is no longer pending` races after the timeout fires.
-- Guest V8 timers have two host paths in `javascript.rs`: `_scheduleTimer` is an async bridge call that resolves its pending Promise later, while `kernelTimerCreate`/`kernelTimerArm`/`kernelTimerClear` are local `_loadPolyfill` dispatches that must emit `"timer"` stream events back into the V8 session so `setTimeout`/`setInterval` callbacks fire.
-- In `packages/build-tools/bridge-src/`, keep Node's 1ms minimum-delay clamp on `setTimeout(0)` / `setInterval(0)` separate from `setImmediate()`. If `setImmediate()` is implemented via the timeout helper, it will accidentally inherit the clamp and drift from Node ordering/parity.
-- Live guest stdin also has two delivery paths: `SECURE_EXEC_KEEP_STDIN_OPEN` uses `"stdin"` / `"stdin_end"` stream events, while TTY-style reads use `_kernelStdinRead` and must stay forwarded to the sidecar-backed kernel fd `0` pipe so timeout and EOF remain distinguishable.
-- Guest `stdin.setRawMode()` should follow the same bridge pattern as `_kernelStdinRead`: leave `_ptySetRawMode` unhandled in `LocalBridgeState`, map it to sidecar `__pty_set_raw_mode`, and have the sidecar toggle kernel PTY discipline on the guest process's fd `0` instead of keeping a local execution-only stub.
-- The current V8 sync-RPC bridge effectively supports one in-flight request at a time. Do not leave long-lived network waits such as HTTP server close listeners parked on a pending sync-RPC Promise; use stream events plus short-lived follow-up RPCs so later bridge calls cannot deadlock behind the wait.
-
-## Runner Script Assets
-
-- Execution-host runner scripts materialized by `NodeImportCache` should live as checked-in assets under `crates/execution/assets/runners/` and be loaded via `include_str!`.
-- The stdlib-backed V8 bridge bundle is generated from `packages/build-tools/bridge-src/` into Cargo `OUT_DIR`; `pnpm --dir packages/secure-exec-core build:v8-bridge` is only for manual debugging. Keep the heavier assert/util/zlib payload in `v8-bridge-zlib.js` so the main `v8-bridge.js` stays below the 500KB cap.
-- Guest `os` virtualization has two env surfaces: public `process.env` is intentionally scrubbed of `AGENTOS_*`, while the real per-execution values live in the hidden runtime env (`globalThis.__agentOSProcessConfigEnv` in `javascript.rs`, mirrored from the sidecar's `prepare_guest_runtime_env(...)`). If `bridge-src` needs VM-scoped CPU/memory/home metadata, read that hidden env path or `_processConfig.env` rather than the sanitized public env, and keep it aligned with `node_import_cache.rs`.
-- When `build:v8-bridge` pulls deeper undici API modules (for example `undici/lib/api/*`), keep `packages/build-tools/scripts/build-v8-bridge.mjs` aliasing any extra Node builtins they require to standalone shim files under `crates/execution/assets/undici-shims/`; those imports execute while the bundle is still bootstrapping, so they cannot depend on later `exposeCustomGlobal(...)` wiring like `_asyncHooksModule`.
-- Keep `http` and `https` default agents scoped to their own module instances inside `packages/build-tools/bridge-src/`; sharing a single global default agent makes `http.request()` inherit HTTPS TLS behavior. Guest-local loopback TLS upgrades must also short-circuit inside the bridge instead of calling `net.socket_upgrade_tls`, because loopback fast-path sockets never have a kernel socket id.
-- Guest HTTP client readiness in `packages/build-tools/bridge-src/` must not treat a failed kernel `net.connect()` as request-ready just because `connecting === false`; kernel-backed sockets are only ready once `_connected === true` (or they are loopback/custom preconnected sockets), otherwise denied egress can hang in `http.request()` instead of surfacing `EACCES`.
-- Keep both `ServerResponse` socket-compatibility surfaces in sync inside `packages/build-tools/bridge-src/`: the main `ServerResponseBridge.socket` stub and the exported `http.ServerResponse` constructor's fake socket. If only one forwards or throws on `socket.write()`, direct `res.socket.write(...)` calls silently drop bytes on the other path.
-- For guest listener-leak warnings in `packages/build-tools/bridge-src/`, route `EventEmitter` warnings through `process.emitWarning(...)` so `process.on("warning")` sees real warning objects, and lazily initialize `_maxListenersWarned` in helper paths because some inline bridge emitters (for example stream and child-process variants) do not always pass through the canonical constructor first.
-- If you change generated builtin asset source in `crates/execution/src/node_import_cache.rs`, bump `NODE_IMPORT_CACHE_ASSET_VERSION` in the same file or stale materialized assets under `/tmp/agentos-node-import-cache-*` will keep serving the old code.
-- The embedded WASM runner's `buildPreopens()` map must mirror `AGENTOS_GUEST_PATH_MAPPINGS`, not just `.` / `/workspace`; otherwise kernel-visible host-dir mounts like `/etc/agentos` or `/hostmnt` can succeed through `vm.readFile()` while the same path fails under `vm.exec("cat ...")`.
-- Treat `crates/bridge/bridge-contract.json` as the canonical inventory for host bridge globals and calling conventions, and treat `crates/execution/assets/polyfill-registry.json` as the canonical inventory for guest `_loadPolyfill` module names. When adding or renaming a bridge global, update those files together with `crates/v8-runtime/src/session.rs`, and when exposing a new runtime-loadable builtin, update the polyfill registry together with the `_loadPolyfill` handler in `crates/execution/src/javascript.rs`.
-- Guest builtin availability must stay aligned across `polyfill-registry.json`, `normalize_builtin_specifier()` in `crates/execution/src/javascript.rs`, `Module.builtinModules` plus `loadBuiltinModule()` in `packages/build-tools/bridge-src/`, and the host-node import-cache assets in `crates/execution/src/node_import_cache.rs`; if one surface still treats a denied builtin as unknown, guests will see `MODULE_NOT_FOUND` or host fallthrough instead of the intended `ERR_ACCESS_DENIED` or compatibility stub.
-- The `node:vm` compatibility shim in `packages/build-tools/bridge-src/` must tag sandboxes inside `vm.createContext()` and have `vm.isContext()` check only that hidden tag; treating every object-shaped value as a context breaks libraries like jsdom that probe `isContext()` before deciding whether to re-contextify.
-- `node:vm` compatibility now spans three layers: the native local bridge methods in `crates/v8-runtime/src/bridge.rs`, the stdlib-backed guest module in `packages/build-tools/bridge-src/`, and the inline shared-runtime fallback in `crates/execution/src/javascript.rs`. Keep all three aligned when changing `Script`, context isolation, or timeout semantics or sidecar builtin-conformance and execution tests will diverge.
-- In `packages/build-tools/bridge-src/`, `Readable.on("data")` may auto-switch to flowing mode only from the initial `readableFlowing === null` state; if guest code already called `pause()` and set `readableFlowing === false`, preserve that explicit pause until `resume()` so packages like `tar` and `node-stream-zip` do not drain early.
-- The shared-runtime `node:stream` compatibility surface for sidecar/builtin-conformance tests currently comes from the inline mini-stream module in `crates/execution/src/javascript.rs`, not the stdlib-backed `packages/build-tools/bridge-src/` path. Stream iterator/parity fixes for guest `require("stream")` need to land in that inline module and should be covered in `crates/sidecar/tests/builtin_conformance.rs`.
-- The shared-runtime `node:readline` compatibility surface exercised by sidecar/builtin-conformance tests also comes from the inline module in `crates/execution/src/javascript.rs`, not only from `packages/build-tools/bridge-src/`. `question()`/async-iterator fixes need to land in that inline module and should be verified in `crates/sidecar/tests/builtin_conformance.rs`.
-- Bootstrap globals injected by `packages/build-tools/scripts/build-v8-bridge.mjs` exist only to let the bundle initialize during snapshot creation. If that bootstrap layer defines `URL` or `URLSearchParams`, mark them as bootstrap stubs and have `bridge-src` ignore or replace them once the stdlib polyfills load, or the runtime can silently keep the incomplete bootstrap implementation.
-- Keep `globalThis.structuredClone` guest-owned inside `packages/build-tools/bridge-src/`; falling back to the native host `structuredClone` leaks host-realm typed arrays, `Map`s, and `Date`s that fail guest `instanceof` checks even when the cloned data looks correct.
-- If guest `fetch()` is powered by bundled undici, the aliased `node:stream` helpers in `crates/execution/assets/undici-shims/stream.js` must understand the bundled web-streams ponyfill too; undici's fetch path calls `finished()`, `isReadable()`, `isErrored()`, and `isDisturbed()` on `ReadableStream` response bodies, not just Node event-emitter streams.
-- When testing import-cache temp-root cleanup, use a dedicated `NodeImportCache::new_in(...)` base dir so the one-time sweep stays isolated to that root.
-- Active JavaScript/Python/WASM executions must hold a `NodeImportCache` cleanup guard until the child exits; otherwise dropping the engine can delete `timing-bootstrap.mjs` and related assets while the host runtime is still importing them.
-- JavaScript guest validation should live in `crates/execution/tests/javascript_v8.rs`. Do not reintroduce a feature-gated host-Node guest path or a parallel host-Node compatibility suite for guest JavaScript behavior.
-- Add new V8-backed JavaScript regressions to `crates/execution/tests/javascript_v8.rs` as helper functions invoked from the single top-level `javascript_v8_suite()` test, not as separate `#[test]` cases; the shared embedded runtime still trips teardown/init crashes when libtest runs those guest cases independently.
-- Shared-V8 JavaScript tests should assert `uses_shared_v8_runtime()` and the absence of host guest-node launches, not `child_pid() == 0`; shared isolates still report the host runtime PID so the sidecar can manage lifecycle signals.
-
-## Guest Path Scrubbing
-
-- Guest path scrubbing in `node_import_cache.rs` should treat the real `HOST_CWD` as an implicit runtime-only mapping to the virtual guest cwd (for example `/root`) so entrypoint imports and stack traces stay usable without leaking the host path.
-- Reserve `/unknown` for absolute host paths outside visible mappings or the internal cache roots.
-
-## CommonJS Module Isolation
-
-- `node_import_cache.rs` has to patch `Module._resolveFilename` and the guest-facing `Module._cache` / `require.cache` view together; wrapping only `createGuestRequire()` does not constrain local `require()` inside already-loaded `.cjs` modules.
-- The V8 bridge's guest-side CommonJS helpers in `packages/build-tools/bridge-src/` must pass an explicit `"require"` mode into `_resolveModule`; omitting it falls back to import resolution and picks the wrong conditional export branch for dual packages.
-- Keep `require.resolve()` parity between both CommonJS entrypoints in `packages/build-tools/bridge-src/`: `createRequire()` and the per-module `require` created in `_compile()`. If one gains `resolve.paths()` or builtin handling changes without the other, guest packages behave differently depending on how they obtained `require`.
-- Eval entrypoints (`node -e` / `--eval`) must build the guest `require` from a synthetic file under the guest cwd, not from the literal `-e` token. Relative CommonJS loads in eval mode are supposed to resolve from `process.cwd()`, and using `createRequire("-e")` makes positive cases like `require('./config.json')` resolve from `"."` instead.
-- Inline `node -e` / `--eval` module-mode detection in `crates/execution/src/javascript.rs` must strip comments plus string/template raw text before scanning syntax markers, and positive CommonJS signals (`module.exports`, `exports.*`, `require(...)`) should win ties over ESM markers; line-prefix heuristics misclassify bundle banners and literal text.
-- For builtins that guest CommonJS should `require("node:...")`, update `createRequire()` builtin guards plus both `Module.builtinModules` and `loadBuiltinModule()` in `packages/build-tools/bridge-src/`; changing only one surface leaves `require()` behavior out of sync with `_requireFrom()` and can degrade into `ERR_ACCESS_DENIED`, `MODULE_NOT_FOUND`, or host-fallthrough mismatches.
-- `crates/v8-runtime/src/execution.rs` should fall back to runtime CJS export enumeration (`Object.keys(module.exports)`) only when static extraction finds zero names or the source contains a dynamic re-export pattern static scanning cannot resolve (`__exportStar(require(...), exports)`, `Object.assign(exports, ...)`); eagerly requiring every CJS module during shim generation adds avoidable work and can trigger module side effects earlier than intended. The dynamic-re-export case is required because tsc-compiled barrels like `@sinclair/typebox/compiler` surface named exports (e.g. `TypeCompiler`) at runtime via `__exportStar`, which `extract_cjs_export_names()` cannot see.
-- Inline builtin wrappers in `crates/execution/src/javascript.rs` must not call `_requireFrom()` on the same builtin subpath they implement. Subpath wrappers like `node:fs/promises` should be built from the parent builtin (`node:fs`) or a direct object, not `_requireFrom("node:fs/promises")`.
-- Resolver-only coverage for `javascript.rs` should use `javascript::ModuleResolutionTestHarness` with a temp-dir fixture instead of booting a V8 isolate; mapping `/root` plus `/root/node_modules` is enough to exercise exports/imports and pnpm `.pnpm` layouts.
-- `crates/execution/tests/cjs_esm_interop.rs` is the desired-behavior matrix for CJS/ESM/runtime edge cases. If an interop gap is deferred to a follow-up story, keep the strong assertion in place and mark that test `#[ignore = "US-055: ..."]` instead of weakening it to match current behavior.
-
-## Guest `process` Hardening
-
-- Guest-visible `process` hardening in `node_import_cache.rs` should harden properties on the real host `process` before swapping in the guest proxy.
-- The proxy fallback must resolve via the proxy receiver (`Reflect.get(..., proxy)`) so accessors inherit the virtualized surface instead of the raw host object.
-- Per-process filesystem state such as `umask` belongs in `ProcessContext` / `ProcessTable`. Kernel create/write entrypoints should read it there, and any guest Node exposure must be threaded through the JavaScript sync-RPC bridge instead of inheriting host `process` behavior.
-
-## Guest `child_process` Isolation
-
-- Strip all `AGENTOS_*` keys from the RPC `options.env` payload in `node_import_cache.rs`.
-- Carry only the Node runtime bootstrap allowlist in `options.internalBootstrapEnv`.
-- Re-inject that allowlisted map only when `crates/sidecar/src/service.rs` starts a nested JavaScript runtime.
-- Treat string-valued `child_process` `options.shell` values as shell-enabled in both `packages/build-tools/bridge-src/` and `crates/execution/src/node_import_cache.rs`; packages like OpenCode and `cross-spawn` pass concrete shell paths such as `"/bin/sh"`, and collapsing those to `false` makes redirected commands execute as literal program names.
-- Keep sync child-process stdin wired through the bridge too: `packages/build-tools/bridge-src/` `spawnSync` / `execSync` must serialize `options.input`, and the sidecar sync handlers need to write that payload to child stdin and close stdin before polling or commands like `spawnSync("/bin/cat", { input })` will diverge from host Node or hang waiting for EOF.
-- Detached guest `child_process` bootstrap in `packages/build-tools/bridge-src/` must be driven by synchronous/immediate `child_process.poll` drains plus pre-`exit` completion, not a retry timer in `unref()`. Timer-based completion can race listener teardown and make long-lived detached daemons disappear when the parent exits.
-- Guest `child_process.kill(signal)` in `packages/build-tools/bridge-src/` should canonicalize numeric and alias inputs through the full 1..31 POSIX table before calling the sidecar, and it should leave `child.signalCode === null` until the exit/close path runs. Node exposes the canonical signal name only after the child actually exits.
-- JavaScript child-process launches in `crates/sidecar/src/execution.rs` must call `prepare_javascript_runtime_env(...)` and set `AGENTOS_SANDBOX_ROOT` just like top-level `execute()` does. If child V8 executions miss those runtime env entries, stack traces fall back to `/unknown/...`, bare-package ESM imports like `undici` stop resolving, and spawned JS CLIs (including `pi-acp` -> `pi --mode rpc`) silently diverge from top-level behavior.
-- The V8 `node:async_hooks` shim in `packages/build-tools/bridge-src/` must preserve `AsyncLocalStorage` state across `Promise.then`, `queueMicrotask`, `process.nextTick`, timers, and `AsyncResource.runInAsyncScope`; OpenCode's Effect instance context depends on that propagation during streamed tool execution.
-- In `crates/execution/src/node_import_cache.rs`, WASM child-process stdio can target delegate-managed guest fds rather than real host OS fds. Keep synthetic-pipe routing aligned with `delegateManagedFdWrite`/`delegateManagedFdClose`, retain those delegate fds for the child lifetime, and only release the final close after child exit; writing streamed stdout/stderr with raw host `writeSync(fd, ...)` breaks redirected shell output.
-- In that same WASM host-process bridge, `child_process.poll` returning `ECHILD` after an `exit` event's trailing-drain pass is terminal, not a new fault. The sidecar can remove the child as soon as it reports exit, so post-exit drain loops must stop on `ECHILD` instead of converting a successful pipeline into `WASI_ERRNO_FAULT`.
-- For sidecar-managed WASM guests, `fd_write` on fd 1 / fd 2 must go through the kernel stdio bridge (`__kernel_stdio_write`) rather than guest `process.stdout` / `process.stderr`. Falling back to the host stream inside the shared sidecar process breaks VM output isolation, bypasses PTYs and `/dev/stdout` redirection, and can make tests pass by snooping host stdout instead of the kernel-routed output path; keep any execution-only fallback scoped to non-sidecar harnesses that are not running inside a VM.
-- In the standalone WASI runner path, only opt into `__kernel_stdio_write` / `__kernel_stdin_read` when the process is sidecar-managed or `AGENTOS_WASI_STDIO_SYNC_RPC=1` is set. Helper-style Rust tests still expect bootstrap stdout/stderr to surface as queued `WasmExecutionEvent::{Stdout,Stderr}` events, so internal `fs.writeSync(1|2, ...)` sync RPCs must be translated inside `crates/execution/src/wasm.rs` instead of leaking out as raw sync-RPC traffic.
-- Mirror guest-stdin fixes across both WASI host shims: `crates/execution/src/wasm.rs` and `crates/execution/src/node_import_cache.rs` must special-case guest fd `0` before passthrough-handle delegation, or sidecar-managed stdin silently falls back to host `fs.readSync(...)` and pipe-heavy shell commands hang behind the wrong read path.
-- When the standalone WASI runner still uses in-band `__AGENTOS_WASM_SIGNAL_STATE__:` lines, parse stdout/stderr as line-oriented byte streams inside `crates/execution/src/wasm.rs` and treat the marker only when it occupies its own newline-terminated line; preserve every other byte verbatim and reassemble markers that arrive split across chunks.
-- In the same WASM host-process path, synthetic pipes must initialize both `producers` and `consumers`, and consumer registration must flush any chunks buffered before the child attached. Shell builtins can write into a pipe before a spawned child like `wc` registers its stdin consumer, so registration also needs to close child stdin immediately when no writers or producers remain.
-- In that synthetic-pipe path, keep pipe FD mappings alive while a registered producer or consumer is still attached, even if the guest shell closes its local duplicate of the pipe endpoint. Pipeline writers/readers outlive the shell's bookkeeping FDs, and queued bytes should treat registered consumers as active readers even after `readHandleCount` drops to zero.
-- The WASM runner's read-only `path_open` guard in `crates/execution/src/node_import_cache.rs` must allow non-mutating open flags such as `O_DIRECTORY`; only create/truncate/exclusive flags and write rights should return `EACCES`, or read-only traversal commands like `find`, `fd`, and `ls <dir>` will fail to enumerate directories.
-- Keep the WASM preopen rights metadata aligned between `buildPreopens()` in `crates/execution/src/node_import_cache.rs` and the inline WASI shim in `crates/execution/src/wasm.rs`: `fd_fdstat_get` and `path_open` must read the same per-preopen `rightsBase` / `rightsInheriting` values, or read-only tiers silently regain write access through the default "all rights" fallback.
-- WASM execution tests that poll `WasmExecution::poll_event_blocking()` need to handle `WasmExecutionEvent::SyncRpcRequest(_)` explicitly unless the test is asserting that control-plane behavior; the runtime includes sync RPC traffic in the same event stream as stdout/stderr/signal/exit events. `WasmExecution::wait()` only auto-services kernel stdio writes (`__kernel_stdio_write`) so simple callers still collect stdout/stderr, and it should fail fast on any other unexpected pending sync RPC instead of silently hanging.
-- The host WASI runner's full-permission preopens must include both `'.'` and `'/workspace'` mapped to `process.cwd()`. Child commands that receive `cwd: "/workspace"` from the sidecar still resolve relative paths through the WASI `.` preopen, so omitting it makes `cat note.txt`/redirects fail even when the guest cwd is otherwise correct.
-- In the inline WASI shim in `crates/execution/src/wasm.rs`, `path_open` must resolve the target beneath the specific descriptor's `hostPath`, not by bouncing through the global guest-path mapping table; otherwise `../` segments can escape one preopen and land in sibling mounts or host paths like `/etc/passwd`.
-- WASM child-process launches should keep the guest command name in `ResolvedChildProcessExecution.process_args[0]` / WASI `argv[0]`; `execution_args` is the suffix after that command name. PATH-resolution tests for mounted commands should assert the full argv vector, not just the trailing args.
-- Projected native binaries that hit the WASM path must fail with the explicit sidecar-facing code `ERR_NATIVE_BINARY_NOT_SUPPORTED` based on their magic bytes (`ELF`, `Mach-O`, `PE/COFF`) before any `WebAssembly.compile()` attempt; do not broaden regressions to accept fallback `CompileError: WebAssembly.Module()` output.
-
-## Guest Networking Rules
-
-- Guest Node `net` Unix-socket support follows the same split as TCP: resolve guest socket paths against `host_dir` mounts when possible, otherwise map them under the VM sandbox root on the host, keep active Unix listeners/sockets in `crates/sidecar/src/service.rs`, and mirror non-mounted listener paths into the kernel VFS so guest `fs` APIs can see the socket file.
-- When proving guest `http.request()` uses the kernel socket path instead of the legacy loopback shortcut, point it at a guest `net.createServer()` that speaks raw HTTP. `http.createServer()` can still succeed through the deprecated `net.http_request` loopback dispatch, so a plain TCP listener is the reliable regression target.
-- Guest `http.request()` / `http.get()` calls targeting a guest loopback `http.createServer()` must stay on the bridge's raw-socket HTTP path. Do not send `socket._loopbackServer` sockets through the undici dispatcher; the sidecar-managed loopback transport already speaks raw HTTP bytes and the undici path can hang waiting on semantics that never arrive.
-- When a guest Node networking port stops using real host listeners, mirror that state in `crates/sidecar/src/service.rs` `ActiveProcess` tracking and consult it from `find_listener`/socket snapshot queries before falling back to `/proc/[pid]/net/*`; procfs only sees host-owned sockets, not sidecar-managed polyfill listeners.
-- Sidecar-managed loopback `net.listen` / `dgram.bind` listeners now use guest-port to host-port translation in `crates/sidecar/src/service.rs`: preserve guest-visible loopback addresses/ports in RPC responses and socket snapshots, but use the hidden host-bound port for external host-side probes and test clients.
-- V8 `node:dgram` support in `packages/build-tools/bridge-src/` depends on both `loadBuiltinModule("dgram")` and `"dgram"` appearing in `Module.builtinModules`; keep those lists aligned, and keep the generated bridge payloads aligned with the current sidecar RPC contract (`createSocket` object payload, `send` bytes plus `{ address, port }`, `poll` object-or-null responses).
-- Sidecar JavaScript networking policy should read internal bootstrap env like `AGENTOS_LOOPBACK_EXEMPT_PORTS` from `VmState.metadata` / `env.*`, not `vm.guest_env`; `guest_env` is permission-filtered and may be empty even when sidecar-only policy still needs the value.
-- When adding a new raw V8 bridge method used by WASM host shims, keep `crates/execution/src/wasm.rs`, `crates/execution/src/v8_runtime.rs`, `crates/v8-runtime/src/session.rs`, `crates/bridge/bridge-contract.json`, and `packages/build-tools/bridge-src/` aligned, then rebuild `cargo build -p secure-exec-v8-runtime`; otherwise the method can compile cleanly while still being unavailable at runtime.
-- When the embedded V8 runtime is shared across the whole process, V8 session ids must stay globally unique and `JavascriptExecution` teardown must terminate then destroy the session; reusing ids or abruptly dropping a live session can leak state into later tests even when isolated cases pass.
-- The direct embedded-runtime path should stay at the `shared_embedded_runtime()` / `EmbeddedV8SessionHandle` boundary in `crates/execution/src/v8_host.rs`; keep `crates/execution`'s local `v8_ipc::BinaryFrame` conversions at that boundary and do not reintroduce a local `UnixStream`/reader-thread transport inside the process.
-
-## Guest `tls`
-
-- Guest Node `tls` should stay layered on the guest `net` polyfill rather than importing host `node:tls` directly.
-- Client connections must pass a preconnected guest socket into `tls.connect({ socket })`.
-- Server handshakes should wrap accepted guest sockets with `new TLSSocket(..., { isServer: true })` and emit `secureConnection` from the wrapped socket's `secure` event.
-
-## Guest `dns`
-
-- When a newly allowed Node builtin still has bypass-capable host-owned helpers or constructors (for example `dns.Resolver` / `dns.promises.Resolver`), replace those entrypoints with guest-owned shims or explicit unsupported stubs before adding the builtin to `DEFAULT_ALLOWED_NODE_BUILTINS`; inheriting the host module is only safe for exports that cannot escape the kernel-backed port.
-- When adding a Node builtin subpath such as `node:dns/promises`, keep every guest-module surface in sync: `normalize_builtin_specifier()` and `builtin_named_exports()` in `javascript.rs`, `Module.builtinModules` plus `loadBuiltinModule()` in `bridge-src`, the import-cache builtin assets and rewrite table in `node_import_cache.rs`, and the esbuild alias shims under `crates/execution/assets/undici-shims/`.
-- Socket-like compatibility shims in `bridge-src` need both `_readableState.endEmitted` and `_readableState.ended`, and they must flip those fields together on EOF and destroy paths; packages like `ssh2`, `ssh2-sftp-client`, and `ws` inspect those internals directly instead of waiting for public stream events.
-- `fs.mkdtempSync()` in `bridge-src` should keep Node's six-character alphanumeric suffix shape while sourcing entropy from six random bytes, and it must create the directory without `recursive: true` so existing-path collisions surface as `EEXIST` instead of silently reusing a directory.
-
-## Python Execution
-
-- Python execution in `python.rs` should keep `poll_event()` blocked until a real guest-visible event arrives or the caller timeout expires; filtered stderr/control messages are internal noise.
-- `wait(None)` should still enforce the per-run `AGENTOS_PYTHON_EXECUTION_TIMEOUT_MS` cap.
-- `wait()` should bound accumulated stdout/stderr via the hidden `AGENTOS_PYTHON_OUTPUT_BUFFER_MAX_BYTES` env knob rather than growing buffers without limit.
-- Node heap caps from `AGENTOS_PYTHON_MAX_OLD_SPACE_MB` need to apply to both prewarm and execution launches without leaking those control vars into guest `process.env`.
-- Warmup marker fingerprints for guest assets must include mutation data (`size` plus `mtime`/`mtime_nsec`), not just inode identity; in-place rewrites of Pyodide or WASM assets can preserve the inode and still need to invalidate prewarm stamps.
-- Pyodide bootstrap hardening in `node_import_cache.rs` must stay staged: `globalThis` guards can go in before `loadPyodide()`, but mutating `process` before `loadPyodide()` breaks the bundled Pyodide runtime under Node `--permission`.
-- Python RPC shims in `crates/execution/assets/runners/python-runner.mjs` should translate JS bridge failures into Python-native exceptions (`PermissionError`, `FileNotFoundError`, `OSError`) instead of leaking `JsException`, and Python `subprocess.run()` should inherit the VM cwd from sidecar process state rather than Pyodide's internal `/home/pyodide` working directory.
-- Treat bundled Pyodide package loading and user-configured `AGENTOS_PYODIDE_PACKAGE_BASE_URL` as separate phases in `python-runner.mjs`: keep `loadPyodide(... packageBaseUrl)` plus the initial `pyodide.loadPackage("micropip")`/bundled preload path pinned to `/__agentos_pyodide`, then switch `pyodide._api.config.packageBaseUrl` afterward for user `micropip.install(...)` URLs. When guest Python needs HTTP wheels, patch `pyodide.http.pyfetch` through the Python `httpRequestSync` bridge so `micropip` obeys sidecar network policy and loopback exemptions instead of bypassing them.
-- Guest runtime identity defaults must stay aligned across JS, WASM, and Python: keep `HOME` bound to the kernel user's homedir, keep `PWD` bound to the execution cwd, feed those values into the Pyodide bootstrap env, and make sure Python `execute()` requests still pass through `prepare_guest_runtime_env(...)` instead of bypassing the shared runtime-env assembly.
-- The shared runtime env contract also includes a stable guest `PATH` plus internal-env filtering: `prepare_guest_runtime_env(...)` should supply the canonical guest search path, `python-runner.mjs` should expose that `PATH` inside `os.environ`, and the WASM `AGENTOS_GUEST_ENV` payload must strip internal control vars like `AGENTOS_*` / `NODE_SYNC_RPC_*` before they reach guest-visible WASI env.
-- Pyodide `micropip` support must keep guest `js` / `pyodide_js` imports blocked for user Python code while exposing only a narrow internal compat surface to `micropip` and `pyodide.http`; widening that exception re-opens host escape hatches.
-- `python-runner.mjs` must suppress `loadPyodide()`/micropip progress banners such as `Loading ...` and `Loaded ...` from guest stdout; sidecar callers and tests often parse stdout as program output or JSON, so those bootstrap logs have to stay internal.
-- When `python-runner.mjs` or other bundled execution assets change, bump `NODE_IMPORT_CACHE_ASSET_VERSION` in `node_import_cache.rs` if the temp materialization needs to refresh immediately; otherwise stale `/tmp/agentos-node-import-cache-*` contents can mask the update during local test runs.
diff --git a/crates/execution/Cargo.toml b/crates/execution/Cargo.toml
index fa4c03d3e..347aa1ca2 100644
--- a/crates/execution/Cargo.toml
+++ b/crates/execution/Cargo.toml
@@ -4,38 +4,10 @@ version.workspace = true
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
-description = "Native execution plane scaffold for secure-exec"
-build = "build.rs"
-# Large Pyodide runtime assets are staged at build time (copied from the
-# in-tree assets directory during workspace builds, or downloaded from the
-# release CDN when building the published crate) so the packaged crate stays
-# under the registry size limit. See build.rs.
-exclude = [
-    "assets/pyodide/pyodide.asm.wasm",
-    "assets/pyodide/pyodide.asm.js",
-    "assets/pyodide/python_stdlib.zip",
-    "assets/pyodide/numpy-2.2.5-cp313-cp313-pyodide_2025_0_wasm32.whl",
-    "assets/pyodide/pandas-2.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl",
-]
+description = "secure-exec-execution compatibility shim for agentos-execution"
 
 [lib]
-doctest = false
+name = "secure_exec_execution"
 
 [dependencies]
-secure-exec-bridge = { workspace = true }
-secure-exec-v8-runtime = { workspace = true }
-base64 = "0.22"
-ciborium = "0.2"
-getrandom = "0.2"
-nix = { version = "0.29", features = ["fs"] }
-serde = { version = "1.0", features = ["derive"] }
-serde_json = "1"
-tokio = { version = "1", features = ["rt", "sync", "time"] }
-tracing = "0.1"
-
-[dev-dependencies]
-tempfile = "3"
-wat = "1"
-
-[build-dependencies]
-secure-exec-build-support = { workspace = true }
+agentos_execution = { package = "agentos-execution", path = "../../../agentos/crates/execution", version = "0.0.1" }
diff --git a/crates/execution/assets/generated/v8-bridge-zlib.js b/crates/execution/assets/generated/v8-bridge-zlib.js
deleted file mode 100644
index 3e6357646..000000000
--- a/crates/execution/assets/generated/v8-bridge-zlib.js
+++ /dev/null
@@ -1,91 +0,0 @@
-if(typeof globalThis.global==="undefined"){globalThis.global=globalThis;}if(typeof globalThis.process==="undefined"){globalThis.process={env:{},argv:["node"],browser:false,version:"v22.0.0",versions:{node:"22.0.0"},nextTick(callback,...args){return Promise.resolve().then(()=>callback(...args));}};}if(typeof globalThis.TextEncoder==="undefined"){globalThis.TextEncoder=class{encode(value=""){const input=String(value??"");const encoded=unescape(encodeURIComponent(input));const out=new Uint8Array(encoded.length);for(let i=0;i<encoded.length;i++){out[i]=encoded.charCodeAt(i);}return out;}};}if(typeof globalThis.TextDecoder==="undefined"){globalThis.TextDecoder=class{decode(value=new Uint8Array()){const view=value instanceof Uint8Array?value:ArrayBuffer.isView(value)?new Uint8Array(value.buffer,value.byteOffset,value.byteLength):value instanceof ArrayBuffer?new Uint8Array(value):new Uint8Array(0);let binary="";for(let i=0;i<view.length;i++){binary+=String.fromCharCode(view[i]);}return decodeURIComponent(escape(binary));}};}if(typeof globalThis.Buffer==="undefined"){const __secureExecTe=typeof TextEncoder==="function"?new TextEncoder():null;const __secureExecTd=typeof TextDecoder==="function"?new TextDecoder():null;class __SecureExecEarlyBuffer extends Uint8Array{static from(value,encoding="utf8"){if(value instanceof ArrayBuffer){return new __SecureExecEarlyBuffer(value);}if(ArrayBuffer.isView(value)){return new __SecureExecEarlyBuffer(value.buffer.slice(value.byteOffset,value.byteOffset+value.byteLength));}if(Array.isArray(value)){return new __SecureExecEarlyBuffer(value);}const stringValue=String(value??"");if(encoding==="base64"&&typeof atob==="function"){const binary=atob(stringValue);const out=new __SecureExecEarlyBuffer(binary.length);for(let i=0;i<binary.length;i++){out[i]=binary.charCodeAt(i);}return out;}if(encoding==="binary"||encoding==="latin1"){const out=new __SecureExecEarlyBuffer(stringValue.length);for(let i=0;i<stringValue.length;i++){out[i]=stringValue.charCodeAt(i)&255;}return out;}if(__secureExecTe){return new __SecureExecEarlyBuffer(__secureExecTe.encode(stringValue));}const out=new __SecureExecEarlyBuffer(stringValue.length);for(let i=0;i<stringValue.length;i++){out[i]=stringValue.charCodeAt(i)&255;}return out;}static alloc(size){return new __SecureExecEarlyBuffer(Number(size)||0);}static concat(list,totalLength){const length=totalLength??list.reduce((sum,item)=>sum+(item?.length??0),0);const out=new __SecureExecEarlyBuffer(length);let offset=0;for(const item of list){const chunk=item instanceof Uint8Array?item:__SecureExecEarlyBuffer.from(item);out.set(chunk,offset);offset+=chunk.length;}return out;}static isBuffer(value){return value instanceof Uint8Array;}static byteLength(value,encoding="utf8"){return __SecureExecEarlyBuffer.from(value,encoding).byteLength;}toString(encoding="utf8"){if(encoding==="base64"&&typeof btoa==="function"){let binary="";for(const byte of this){binary+=String.fromCharCode(byte);}return btoa(binary);}if(encoding==="binary"||encoding==="latin1"){let binary="";for(const byte of this){binary+=String.fromCharCode(byte);}return binary;}if(__secureExecTd){return __secureExecTd.decode(this);}return Array.from(this,byte=>String.fromCharCode(byte)).join("");}}globalThis.Buffer=__SecureExecEarlyBuffer;}if(typeof globalThis.performance==="undefined"){const __secureExecPerformanceStart=Date.now();globalThis.performance={now(){return Date.now()-__secureExecPerformanceStart;}};}if(typeof globalThis.performance.markResourceTiming!=="function"){globalThis.performance.markResourceTiming=()=>{};}if(typeof TextEncoder==="undefined"&&typeof globalThis.TextEncoder!=="undefined"){var TextEncoder=globalThis.TextEncoder;}if(typeof TextDecoder==="undefined"&&typeof globalThis.TextDecoder!=="undefined"){var TextDecoder=globalThis.TextDecoder;}if(typeof Buffer==="undefined"&&typeof globalThis.Buffer!=="undefined"){var Buffer=globalThis.Buffer;}
-(()=>{var Gd=Object.create;var nn=Object.defineProperty;var $d=Object.getOwnPropertyDescriptor;var Vd=Object.getOwnPropertyNames;var Yd=Object.getPrototypeOf,Kd=Object.prototype.hasOwnProperty;var Xd=(e,r)=>()=>(e&&(r=e(e=0)),r);var y=(e,r)=>()=>(r||e((r={exports:{}}).exports,r),r.exports),Jd=(e,r)=>{for(var t in r)nn(e,t,{get:r[t],enumerable:!0})},tn=(e,r,t,n)=>{if(r&&typeof r=="object"||typeof r=="function")for(let i of Vd(r))!Kd.call(e,i)&&i!==t&&nn(e,i,{get:()=>r[i],enumerable:!(n=$d(r,i))||n.enumerable});return e},re=(e,r,t)=>(tn(e,r,"default"),t&&tn(t,r,"default")),ft=(e,r,t)=>(t=e!=null?Gd(Yd(e)):{},tn(r||!e||!e.__esModule?nn(t,"default",{value:e,enumerable:!0}):t,e)),Qd=e=>tn(nn({},"__esModule",{value:!0}),e);var an=y((Um,of)=>{"use strict";of.exports=function(){if(typeof Symbol!="function"||typeof Object.getOwnPropertySymbols!="function")return!1;if(typeof Symbol.iterator=="symbol")return!0;var r={},t=Symbol("test"),n=Object(t);if(typeof t=="string"||Object.prototype.toString.call(t)!=="[object Symbol]"||Object.prototype.toString.call(n)!=="[object Symbol]")return!1;var i=42;r[t]=i;for(var a in r)return!1;if(typeof Object.keys=="function"&&Object.keys(r).length!==0||typeof Object.getOwnPropertyNames=="function"&&Object.getOwnPropertyNames(r).length!==0)return!1;var o=Object.getOwnPropertySymbols(r);if(o.length!==1||o[0]!==t||!Object.prototype.propertyIsEnumerable.call(r,t))return!1;if(typeof Object.getOwnPropertyDescriptor=="function"){var f=Object.getOwnPropertyDescriptor(r,t);if(f.value!==i||f.enumerable!==!0)return!1}return!0}});var ut=y((Cm,ff)=>{"use strict";var ey=an();ff.exports=function(){return ey()&&!!Symbol.toStringTag}});var on=y((zm,uf)=>{"use strict";uf.exports=Object});var sf=y((Zm,lf)=>{"use strict";lf.exports=Error});var hf=y((Wm,cf)=>{"use strict";cf.exports=EvalError});var df=y((Hm,pf)=>{"use strict";pf.exports=RangeError});var vf=y((Gm,yf)=>{"use strict";yf.exports=ReferenceError});var Ci=y(($m,_f)=>{"use strict";_f.exports=SyntaxError});var kr=y((Vm,gf)=>{"use strict";gf.exports=TypeError});var wf=y((Ym,bf)=>{"use strict";bf.exports=URIError});var mf=y((Km,Ef)=>{"use strict";Ef.exports=Math.abs});var xf=y((Xm,Sf)=>{"use strict";Sf.exports=Math.floor});var Rf=y((Jm,Af)=>{"use strict";Af.exports=Math.max});var Tf=y((Qm,Of)=>{"use strict";Of.exports=Math.min});var Nf=y((e1,If)=>{"use strict";If.exports=Math.pow});var Ff=y((r1,Lf)=>{"use strict";Lf.exports=Math.round});var Pf=y((t1,kf)=>{"use strict";kf.exports=Number.isNaN||function(r){return r!==r}});var Mf=y((n1,Df)=>{"use strict";var ry=Pf();Df.exports=function(r){return ry(r)||r===0?r:r<0?-1:1}});var Bf=y((i1,jf)=>{"use strict";jf.exports=Object.getOwnPropertyDescriptor});var rr=y((a1,qf)=>{"use strict";var fn=Bf();if(fn)try{fn([],"length")}catch{fn=null}qf.exports=fn});var lt=y((o1,Uf)=>{"use strict";var un=Object.defineProperty||!1;if(un)try{un({},"a",{value:1})}catch{un=!1}Uf.exports=un});var Zf=y((f1,zf)=>{"use strict";var Cf=typeof Symbol<"u"&&Symbol,ty=an();zf.exports=function(){return typeof Cf!="function"||typeof Symbol!="function"||typeof Cf("foo")!="symbol"||typeof Symbol("bar")!="symbol"?!1:ty()}});var zi=y((u1,Wf)=>{"use strict";Wf.exports=typeof Reflect<"u"&&Reflect.getPrototypeOf||null});var Zi=y((l1,Hf)=>{"use strict";var ny=on();Hf.exports=ny.getPrototypeOf||null});var Vf=y((s1,$f)=>{"use strict";var iy="Function.prototype.bind called on incompatible ",ay=Object.prototype.toString,oy=Math.max,fy="[object Function]",Gf=function(r,t){for(var n=[],i=0;i<r.length;i+=1)n[i]=r[i];for(var a=0;a<t.length;a+=1)n[a+r.length]=t[a];return n},uy=function(r,t){for(var n=[],i=t||0,a=0;i<r.length;i+=1,a+=1)n[a]=r[i];return n},ly=function(e,r){for(var t="",n=0;n<e.length;n+=1)t+=e[n],n+1<e.length&&(t+=r);return t};$f.exports=function(r){var t=this;if(typeof t!="function"||ay.apply(t)!==fy)throw new TypeError(iy+t);for(var n=uy(arguments,1),i,a=function(){if(this instanceof i){var l=t.apply(this,Gf(n,arguments));return Object(l)===l?l:this}return t.apply(r,Gf(n,arguments))},o=oy(0,t.length-n.length),f=[],s=0;s<o;s++)f[s]="$"+s;if(i=Function("binder","return function ("+ly(f,",")+"){ return binder.apply(this,arguments); }")(a),t.prototype){var u=function(){};u.prototype=t.prototype,i.prototype=new u,u.prototype=null}return i}});var Pr=y((c1,Yf)=>{"use strict";var sy=Vf();Yf.exports=Function.prototype.bind||sy});var ln=y((h1,Kf)=>{"use strict";Kf.exports=Function.prototype.call});var sn=y((p1,Xf)=>{"use strict";Xf.exports=Function.prototype.apply});var Qf=y((d1,Jf)=>{"use strict";Jf.exports=typeof Reflect<"u"&&Reflect&&Reflect.apply});var Wi=y((y1,eu)=>{"use strict";var cy=Pr(),hy=sn(),py=ln(),dy=Qf();eu.exports=dy||cy.call(py,hy)});var cn=y((v1,ru)=>{"use strict";var yy=Pr(),vy=kr(),_y=ln(),gy=Wi();ru.exports=function(r){if(r.length<1||typeof r[0]!="function")throw new vy("a function is required");return gy(yy,_y,r)}});var fu=y((_1,ou)=>{"use strict";var by=cn(),tu=rr(),iu;try{iu=[].__proto__===Array.prototype}catch(e){if(!e||typeof e!="object"||!("code"in e)||e.code!=="ERR_PROTO_ACCESS")throw e}var Hi=!!iu&&tu&&tu(Object.prototype,"__proto__"),au=Object,nu=au.getPrototypeOf;ou.exports=Hi&&typeof Hi.get=="function"?by([Hi.get]):typeof nu=="function"?function(r){return nu(r==null?r:au(r))}:!1});var hn=y((g1,cu)=>{"use strict";var uu=zi(),lu=Zi(),su=fu();cu.exports=uu?function(r){return uu(r)}:lu?function(r){if(!r||typeof r!="object"&&typeof r!="function")throw new TypeError("getProto: not an object");return lu(r)}:su?function(r){return su(r)}:null});var Gi=y((b1,hu)=>{"use strict";var wy=Function.prototype.call,Ey=Object.prototype.hasOwnProperty,my=Pr();hu.exports=my.call(wy,Ey)});var yn=y((w1,gu)=>{"use strict";var F,Sy=on(),xy=sf(),Ay=hf(),Ry=df(),Oy=vf(),Br=Ci(),jr=kr(),Ty=wf(),Iy=mf(),Ny=xf(),Ly=Rf(),Fy=Tf(),ky=Nf(),Py=Ff(),Dy=Mf(),vu=Function,$i=function(e){try{return vu('"use strict"; return ('+e+").constructor;")()}catch{}},st=rr(),My=lt(),Vi=function(){throw new jr},jy=st?(function(){try{return arguments.callee,Vi}catch{try{return st(arguments,"callee").get}catch{return Vi}}})():Vi,Dr=Zf()(),G=hn(),By=Zi(),qy=zi(),_u=sn(),ct=ln(),Mr={},Uy=typeof Uint8Array>"u"||!G?F:G(Uint8Array),tr={__proto__:null,"%AggregateError%":typeof AggregateError>"u"?F:AggregateError,"%Array%":Array,"%ArrayBuffer%":typeof ArrayBuffer>"u"?F:ArrayBuffer,"%ArrayIteratorPrototype%":Dr&&G?G([][Symbol.iterator]()):F,"%AsyncFromSyncIteratorPrototype%":F,"%AsyncFunction%":Mr,"%AsyncGenerator%":Mr,"%AsyncGeneratorFunction%":Mr,"%AsyncIteratorPrototype%":Mr,"%Atomics%":typeof Atomics>"u"?F:Atomics,"%BigInt%":typeof BigInt>"u"?F:BigInt,"%BigInt64Array%":typeof BigInt64Array>"u"?F:BigInt64Array,"%BigUint64Array%":typeof BigUint64Array>"u"?F:BigUint64Array,"%Boolean%":Boolean,"%DataView%":typeof DataView>"u"?F:DataView,"%Date%":Date,"%decodeURI%":decodeURI,"%decodeURIComponent%":decodeURIComponent,"%encodeURI%":encodeURI,"%encodeURIComponent%":encodeURIComponent,"%Error%":xy,"%eval%":eval,"%EvalError%":Ay,"%Float16Array%":typeof Float16Array>"u"?F:Float16Array,"%Float32Array%":typeof Float32Array>"u"?F:Float32Array,"%Float64Array%":typeof Float64Array>"u"?F:Float64Array,"%FinalizationRegistry%":typeof FinalizationRegistry>"u"?F:FinalizationRegistry,"%Function%":vu,"%GeneratorFunction%":Mr,"%Int8Array%":typeof Int8Array>"u"?F:Int8Array,"%Int16Array%":typeof Int16Array>"u"?F:Int16Array,"%Int32Array%":typeof Int32Array>"u"?F:Int32Array,"%isFinite%":isFinite,"%isNaN%":isNaN,"%IteratorPrototype%":Dr&&G?G(G([][Symbol.iterator]())):F,"%JSON%":typeof JSON=="object"?JSON:F,"%Map%":typeof Map>"u"?F:Map,"%MapIteratorPrototype%":typeof Map>"u"||!Dr||!G?F:G(new Map()[Symbol.iterator]()),"%Math%":Math,"%Number%":Number,"%Object%":Sy,"%Object.getOwnPropertyDescriptor%":st,"%parseFloat%":parseFloat,"%parseInt%":parseInt,"%Promise%":typeof Promise>"u"?F:Promise,"%Proxy%":typeof Proxy>"u"?F:Proxy,"%RangeError%":Ry,"%ReferenceError%":Oy,"%Reflect%":typeof Reflect>"u"?F:Reflect,"%RegExp%":RegExp,"%Set%":typeof Set>"u"?F:Set,"%SetIteratorPrototype%":typeof Set>"u"||!Dr||!G?F:G(new Set()[Symbol.iterator]()),"%SharedArrayBuffer%":typeof SharedArrayBuffer>"u"?F:SharedArrayBuffer,"%String%":String,"%StringIteratorPrototype%":Dr&&G?G(""[Symbol.iterator]()):F,"%Symbol%":Dr?Symbol:F,"%SyntaxError%":Br,"%ThrowTypeError%":jy,"%TypedArray%":Uy,"%TypeError%":jr,"%Uint8Array%":typeof Uint8Array>"u"?F:Uint8Array,"%Uint8ClampedArray%":typeof Uint8ClampedArray>"u"?F:Uint8ClampedArray,"%Uint16Array%":typeof Uint16Array>"u"?F:Uint16Array,"%Uint32Array%":typeof Uint32Array>"u"?F:Uint32Array,"%URIError%":Ty,"%WeakMap%":typeof WeakMap>"u"?F:WeakMap,"%WeakRef%":typeof WeakRef>"u"?F:WeakRef,"%WeakSet%":typeof WeakSet>"u"?F:WeakSet,"%Function.prototype.call%":ct,"%Function.prototype.apply%":_u,"%Object.defineProperty%":My,"%Object.getPrototypeOf%":By,"%Math.abs%":Iy,"%Math.floor%":Ny,"%Math.max%":Ly,"%Math.min%":Fy,"%Math.pow%":ky,"%Math.round%":Py,"%Math.sign%":Dy,"%Reflect.getPrototypeOf%":qy};if(G)try{null.error}catch(e){pu=G(G(e)),tr["%Error.prototype%"]=pu}var pu,Cy=function e(r){var t;if(r==="%AsyncFunction%")t=$i("async function () {}");else if(r==="%GeneratorFunction%")t=$i("function* () {}");else if(r==="%AsyncGeneratorFunction%")t=$i("async function* () {}");else if(r==="%AsyncGenerator%"){var n=e("%AsyncGeneratorFunction%");n&&(t=n.prototype)}else if(r==="%AsyncIteratorPrototype%"){var i=e("%AsyncGenerator%");i&&G&&(t=G(i.prototype))}return tr[r]=t,t},du={__proto__:null,"%ArrayBufferPrototype%":["ArrayBuffer","prototype"],"%ArrayPrototype%":["Array","prototype"],"%ArrayProto_entries%":["Array","prototype","entries"],"%ArrayProto_forEach%":["Array","prototype","forEach"],"%ArrayProto_keys%":["Array","prototype","keys"],"%ArrayProto_values%":["Array","prototype","values"],"%AsyncFunctionPrototype%":["AsyncFunction","prototype"],"%AsyncGenerator%":["AsyncGeneratorFunction","prototype"],"%AsyncGeneratorPrototype%":["AsyncGeneratorFunction","prototype","prototype"],"%BooleanPrototype%":["Boolean","prototype"],"%DataViewPrototype%":["DataView","prototype"],"%DatePrototype%":["Date","prototype"],"%ErrorPrototype%":["Error","prototype"],"%EvalErrorPrototype%":["EvalError","prototype"],"%Float32ArrayPrototype%":["Float32Array","prototype"],"%Float64ArrayPrototype%":["Float64Array","prototype"],"%FunctionPrototype%":["Function","prototype"],"%Generator%":["GeneratorFunction","prototype"],"%GeneratorPrototype%":["GeneratorFunction","prototype","prototype"],"%Int8ArrayPrototype%":["Int8Array","prototype"],"%Int16ArrayPrototype%":["Int16Array","prototype"],"%Int32ArrayPrototype%":["Int32Array","prototype"],"%JSONParse%":["JSON","parse"],"%JSONStringify%":["JSON","stringify"],"%MapPrototype%":["Map","prototype"],"%NumberPrototype%":["Number","prototype"],"%ObjectPrototype%":["Object","prototype"],"%ObjProto_toString%":["Object","prototype","toString"],"%ObjProto_valueOf%":["Object","prototype","valueOf"],"%PromisePrototype%":["Promise","prototype"],"%PromiseProto_then%":["Promise","prototype","then"],"%Promise_all%":["Promise","all"],"%Promise_reject%":["Promise","reject"],"%Promise_resolve%":["Promise","resolve"],"%RangeErrorPrototype%":["RangeError","prototype"],"%ReferenceErrorPrototype%":["ReferenceError","prototype"],"%RegExpPrototype%":["RegExp","prototype"],"%SetPrototype%":["Set","prototype"],"%SharedArrayBufferPrototype%":["SharedArrayBuffer","prototype"],"%StringPrototype%":["String","prototype"],"%SymbolPrototype%":["Symbol","prototype"],"%SyntaxErrorPrototype%":["SyntaxError","prototype"],"%TypedArrayPrototype%":["TypedArray","prototype"],"%TypeErrorPrototype%":["TypeError","prototype"],"%Uint8ArrayPrototype%":["Uint8Array","prototype"],"%Uint8ClampedArrayPrototype%":["Uint8ClampedArray","prototype"],"%Uint16ArrayPrototype%":["Uint16Array","prototype"],"%Uint32ArrayPrototype%":["Uint32Array","prototype"],"%URIErrorPrototype%":["URIError","prototype"],"%WeakMapPrototype%":["WeakMap","prototype"],"%WeakSetPrototype%":["WeakSet","prototype"]},ht=Pr(),pn=Gi(),zy=ht.call(ct,Array.prototype.concat),Zy=ht.call(_u,Array.prototype.splice),yu=ht.call(ct,String.prototype.replace),dn=ht.call(ct,String.prototype.slice),Wy=ht.call(ct,RegExp.prototype.exec),Hy=/[^%.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|%$))/g,Gy=/\\(\\)?/g,$y=function(r){var t=dn(r,0,1),n=dn(r,-1);if(t==="%"&&n!=="%")throw new Br("invalid intrinsic syntax, expected closing `%`");if(n==="%"&&t!=="%")throw new Br("invalid intrinsic syntax, expected opening `%`");var i=[];return yu(r,Hy,function(a,o,f,s){i[i.length]=f?yu(s,Gy,"$1"):o||a}),i},Vy=function(r,t){var n=r,i;if(pn(du,n)&&(i=du[n],n="%"+i[0]+"%"),pn(tr,n)){var a=tr[n];if(a===Mr&&(a=Cy(n)),typeof a>"u"&&!t)throw new jr("intrinsic "+r+" exists, but is not available. Please file an issue!");return{alias:i,name:n,value:a}}throw new Br("intrinsic "+r+" does not exist!")};gu.exports=function(r,t){if(typeof r!="string"||r.length===0)throw new jr("intrinsic name must be a non-empty string");if(arguments.length>1&&typeof t!="boolean")throw new jr('"allowMissing" argument must be a boolean');if(Wy(/^%?[^%]*%?$/,r)===null)throw new Br("`%` may not be present anywhere but at the beginning and end of the intrinsic name");var n=$y(r),i=n.length>0?n[0]:"",a=Vy("%"+i+"%",t),o=a.name,f=a.value,s=!1,u=a.alias;u&&(i=u[0],Zy(n,zy([0,1],u)));for(var l=1,c=!0;l<n.length;l+=1){var p=n[l],h=dn(p,0,1),v=dn(p,-1);if((h==='"'||h==="'"||h==="`"||v==='"'||v==="'"||v==="`")&&h!==v)throw new Br("property names with quotes must have matching quotes");if((p==="constructor"||!c)&&(s=!0),i+="."+p,o="%"+i+"%",pn(tr,o))f=tr[o];else if(f!=null){if(!(p in f)){if(!t)throw new jr("base intrinsic for "+r+" exists, but the property is not available.");return}if(st&&l+1>=n.length){var _=st(f,p);c=!!_,c&&"get"in _&&!("originalValue"in _.get)?f=_.get:f=f[p]}else c=pn(f,p),f=f[p];c&&!s&&(tr[o]=f)}}return f}});var nr=y((E1,Eu)=>{"use strict";var bu=yn(),wu=cn(),Yy=wu([bu("%String.prototype.indexOf%")]);Eu.exports=function(r,t){var n=bu(r,!!t);return typeof n=="function"&&Yy(r,".prototype.")>-1?wu([n]):n}});var xu=y((m1,Su)=>{"use strict";var Ky=ut()(),Xy=nr(),Yi=Xy("Object.prototype.toString"),vn=function(r){return Ky&&r&&typeof r=="object"&&Symbol.toStringTag in r?!1:Yi(r)==="[object Arguments]"},mu=function(r){return vn(r)?!0:r!==null&&typeof r=="object"&&"length"in r&&typeof r.length=="number"&&r.length>=0&&Yi(r)!=="[object Array]"&&"callee"in r&&Yi(r.callee)==="[object Function]"},Jy=(function(){return vn(arguments)})();vn.isLegacyArguments=mu;Su.exports=Jy?vn:mu});var Nu=y((S1,Iu)=>{"use strict";var Au=nr(),Qy=ut()(),e0=Gi(),r0=rr(),Ji;Qy?(Ru=Au("RegExp.prototype.exec"),Ki={},_n=function(){throw Ki},Xi={toString:_n,valueOf:_n},typeof Symbol.toPrimitive=="symbol"&&(Xi[Symbol.toPrimitive]=_n),Ji=function(r){if(!r||typeof r!="object")return!1;var t=r0(r,"lastIndex"),n=t&&e0(t,"value");if(!n)return!1;try{Ru(r,Xi)}catch(i){return i===Ki}}):(Ou=Au("Object.prototype.toString"),Tu="[object RegExp]",Ji=function(r){return!r||typeof r!="object"&&typeof r!="function"?!1:Ou(r)===Tu});var Ru,Ki,_n,Xi,Ou,Tu;Iu.exports=Ji});var Fu=y((x1,Lu)=>{"use strict";var t0=nr(),n0=Nu(),i0=t0("RegExp.prototype.exec"),a0=kr();Lu.exports=function(r){if(!n0(r))throw new a0("`regex` must be a RegExp");return function(n){return i0(r,n)!==null}}});var Pu=y((A1,ku)=>{"use strict";var o0=function*(){}.constructor;ku.exports=()=>o0});var Bu=y((R1,ju)=>{"use strict";var Mu=nr(),f0=Fu(),u0=f0(/^\s*(?:function)?\*/),l0=ut()(),Du=hn(),s0=Mu("Object.prototype.toString"),c0=Mu("Function.prototype.toString"),h0=Pu();ju.exports=function(r){if(typeof r!="function")return!1;if(u0(c0(r)))return!0;if(!l0){var t=s0(r);return t==="[object GeneratorFunction]"}if(!Du)return!1;var n=h0();return n&&Du(r)===n.prototype}});var zu=y((O1,Cu)=>{"use strict";var Uu=Function.prototype.toString,qr=typeof Reflect=="object"&&Reflect!==null&&Reflect.apply,ea,gn;if(typeof qr=="function"&&typeof Object.defineProperty=="function")try{ea=Object.defineProperty({},"length",{get:function(){throw gn}}),gn={},qr(function(){throw 42},null,ea)}catch(e){e!==gn&&(qr=null)}else qr=null;var p0=/^\s*class\b/,ra=function(r){try{var t=Uu.call(r);return p0.test(t)}catch{return!1}},Qi=function(r){try{return ra(r)?!1:(Uu.call(r),!0)}catch{return!1}},bn=Object.prototype.toString,d0="[object Object]",y0="[object Function]",v0="[object GeneratorFunction]",_0="[object HTMLAllCollection]",g0="[object HTML document.all class]",b0="[object HTMLCollection]",w0=typeof Symbol=="function"&&!!Symbol.toStringTag,E0=!(0 in[,]),ta=function(){return!1};typeof document=="object"&&(qu=document.all,bn.call(qu)===bn.call(document.all)&&(ta=function(r){if((E0||!r)&&(typeof r>"u"||typeof r=="object"))try{var t=bn.call(r);return(t===_0||t===g0||t===b0||t===d0)&&r("")==null}catch{}return!1}));var qu;Cu.exports=qr?function(r){if(ta(r))return!0;if(!r||typeof r!="function"&&typeof r!="object")return!1;try{qr(r,null,ea)}catch(t){if(t!==gn)return!1}return!ra(r)&&Qi(r)}:function(r){if(ta(r))return!0;if(!r||typeof r!="function"&&typeof r!="object")return!1;if(w0)return Qi(r);if(ra(r))return!1;var t=bn.call(r);return t!==y0&&t!==v0&&!/^\[object HTML/.test(t)?!1:Qi(r)}});var Hu=y((T1,Wu)=>{"use strict";var m0=zu(),S0=Object.prototype.toString,Zu=Object.prototype.hasOwnProperty,x0=function(r,t,n){for(var i=0,a=r.length;i<a;i++)Zu.call(r,i)&&(n==null?t(r[i],i,r):t.call(n,r[i],i,r))},A0=function(r,t,n){for(var i=0,a=r.length;i<a;i++)n==null?t(r.charAt(i),i,r):t.call(n,r.charAt(i),i,r)},R0=function(r,t,n){for(var i in r)Zu.call(r,i)&&(n==null?t(r[i],i,r):t.call(n,r[i],i,r))};function O0(e){return S0.call(e)==="[object Array]"}Wu.exports=function(r,t,n){if(!m0(t))throw new TypeError("iterator must be a function");var i;arguments.length>=3&&(i=n),O0(r)?x0(r,t,i):typeof r=="string"?A0(r,t,i):R0(r,t,i)}});var $u=y((I1,Gu)=>{"use strict";Gu.exports=["Float16Array","Float32Array","Float64Array","Int8Array","Int16Array","Int32Array","Uint8Array","Uint8ClampedArray","Uint16Array","Uint32Array","BigInt64Array","BigUint64Array"]});var Yu=y((N1,Vu)=>{"use strict";var na=$u(),T0=globalThis;Vu.exports=function(){for(var r=[],t=0;t<na.length;t++)typeof T0[na[t]]=="function"&&(r[r.length]=na[t]);return r}});var ia=y((L1,Ju)=>{"use strict";var Ku=lt(),I0=Ci(),Ur=kr(),Xu=rr();Ju.exports=function(r,t,n){if(!r||typeof r!="object"&&typeof r!="function")throw new Ur("`obj` must be an object or a function`");if(typeof t!="string"&&typeof t!="symbol")throw new Ur("`property` must be a string or a symbol`");if(arguments.length>3&&typeof arguments[3]!="boolean"&&arguments[3]!==null)throw new Ur("`nonEnumerable`, if provided, must be a boolean or null");if(arguments.length>4&&typeof arguments[4]!="boolean"&&arguments[4]!==null)throw new Ur("`nonWritable`, if provided, must be a boolean or null");if(arguments.length>5&&typeof arguments[5]!="boolean"&&arguments[5]!==null)throw new Ur("`nonConfigurable`, if provided, must be a boolean or null");if(arguments.length>6&&typeof arguments[6]!="boolean")throw new Ur("`loose`, if provided, must be a boolean");var i=arguments.length>3?arguments[3]:null,a=arguments.length>4?arguments[4]:null,o=arguments.length>5?arguments[5]:null,f=arguments.length>6?arguments[6]:!1,s=!!Xu&&Xu(r,t);if(Ku)Ku(r,t,{configurable:o===null&&s?s.configurable:!o,enumerable:i===null&&s?s.enumerable:!i,value:n,writable:a===null&&s?s.writable:!a});else if(f||!i&&!a&&!o)r[t]=n;else throw new I0("This environment does not support defining a property as non-configurable, non-writable, or non-enumerable.")}});var oa=y((F1,el)=>{"use strict";var aa=lt(),Qu=function(){return!!aa};Qu.hasArrayLengthDefineBug=function(){if(!aa)return null;try{return aa([],"length",{value:1}).length!==1}catch{return!0}};el.exports=Qu});var al=y((k1,il)=>{"use strict";var N0=yn(),rl=ia(),L0=oa()(),tl=rr(),nl=kr(),F0=N0("%Math.floor%");il.exports=function(r,t){if(typeof r!="function")throw new nl("`fn` is not a function");if(typeof t!="number"||t<0||t>4294967295||F0(t)!==t)throw new nl("`length` must be a positive 32-bit integer");var n=arguments.length>2&&!!arguments[2],i=!0,a=!0;if("length"in r&&tl){var o=tl(r,"length");o&&!o.configurable&&(i=!1),o&&!o.writable&&(a=!1)}return(i||a||!n)&&(L0?rl(r,"length",t,!0,!0):rl(r,"length",t)),r}});var fl=y((P1,ol)=>{"use strict";var k0=Pr(),P0=sn(),D0=Wi();ol.exports=function(){return D0(k0,P0,arguments)}});var pt=y((D1,wn)=>{"use strict";var M0=al(),ul=lt(),j0=cn(),ll=fl();wn.exports=function(r){var t=j0(arguments),n=r.length-(arguments.length-1);return M0(t,1+(n>0?n:0),!0)};ul?ul(wn.exports,"apply",{value:ll}):wn.exports.apply=ll});var sa=y((M1,pl)=>{"use strict";var Sn=Hu(),B0=Yu(),sl=pt(),ua=nr(),mn=rr(),En=hn(),q0=ua("Object.prototype.toString"),hl=ut()(),cl=globalThis,fa=B0(),la=ua("String.prototype.slice"),U0=ua("Array.prototype.indexOf",!0)||function(r,t){for(var n=0;n<r.length;n+=1)if(r[n]===t)return n;return-1},xn={__proto__:null};hl&&mn&&En?Sn(fa,function(e){var r=new cl[e];if(Symbol.toStringTag in r&&En){var t=En(r),n=mn(t,Symbol.toStringTag);if(!n&&t){var i=En(t);n=mn(i,Symbol.toStringTag)}if(n&&n.get){var a=sl(n.get);xn["$"+e]=a}}}):Sn(fa,function(e){var r=new cl[e],t=r.slice||r.set;if(t){var n=sl(t);xn["$"+e]=n}});var C0=function(r){var t=!1;return Sn(xn,function(n,i){if(!t)try{"$"+n(r)===i&&(t=la(i,1))}catch{}}),t},z0=function(r){var t=!1;return Sn(xn,function(n,i){if(!t)try{n(r),t=la(i,1)}catch{}}),t};pl.exports=function(r){if(!r||typeof r!="object")return!1;if(!hl){var t=la(q0(r),8,-1);return U0(fa,t)>-1?t:t!=="Object"?!1:z0(r)}return mn?C0(r):null}});var yl=y((j1,dl)=>{"use strict";var Z0=sa();dl.exports=function(r){return!!Z0(r)}});var Il=y(k=>{"use strict";var W0=xu(),H0=Bu(),_e=sa(),vl=yl();function Cr(e){return e.call.bind(e)}var _l=typeof BigInt<"u",gl=typeof Symbol<"u",fe=Cr(Object.prototype.toString),G0=Cr(Number.prototype.valueOf),$0=Cr(String.prototype.valueOf),V0=Cr(Boolean.prototype.valueOf);_l&&(bl=Cr(BigInt.prototype.valueOf));var bl;gl&&(wl=Cr(Symbol.prototype.valueOf));var wl;function yt(e,r){if(typeof e!="object")return!1;try{return r(e),!0}catch{return!1}}k.isArgumentsObject=W0;k.isGeneratorFunction=H0;k.isTypedArray=vl;function Y0(e){return typeof Promise<"u"&&e instanceof Promise||e!==null&&typeof e=="object"&&typeof e.then=="function"&&typeof e.catch=="function"}k.isPromise=Y0;function K0(e){return typeof ArrayBuffer<"u"&&ArrayBuffer.isView?ArrayBuffer.isView(e):vl(e)||ml(e)}k.isArrayBufferView=K0;function X0(e){return _e(e)==="Uint8Array"}k.isUint8Array=X0;function J0(e){return _e(e)==="Uint8ClampedArray"}k.isUint8ClampedArray=J0;function Q0(e){return _e(e)==="Uint16Array"}k.isUint16Array=Q0;function ev(e){return _e(e)==="Uint32Array"}k.isUint32Array=ev;function rv(e){return _e(e)==="Int8Array"}k.isInt8Array=rv;function tv(e){return _e(e)==="Int16Array"}k.isInt16Array=tv;function nv(e){return _e(e)==="Int32Array"}k.isInt32Array=nv;function iv(e){return _e(e)==="Float32Array"}k.isFloat32Array=iv;function av(e){return _e(e)==="Float64Array"}k.isFloat64Array=av;function ov(e){return _e(e)==="BigInt64Array"}k.isBigInt64Array=ov;function fv(e){return _e(e)==="BigUint64Array"}k.isBigUint64Array=fv;function An(e){return fe(e)==="[object Map]"}An.working=typeof Map<"u"&&An(new Map);function uv(e){return typeof Map>"u"?!1:An.working?An(e):e instanceof Map}k.isMap=uv;function Rn(e){return fe(e)==="[object Set]"}Rn.working=typeof Set<"u"&&Rn(new Set);function lv(e){return typeof Set>"u"?!1:Rn.working?Rn(e):e instanceof Set}k.isSet=lv;function On(e){return fe(e)==="[object WeakMap]"}On.working=typeof WeakMap<"u"&&On(new WeakMap);function sv(e){return typeof WeakMap>"u"?!1:On.working?On(e):e instanceof WeakMap}k.isWeakMap=sv;function ha(e){return fe(e)==="[object WeakSet]"}ha.working=typeof WeakSet<"u"&&ha(new WeakSet);function cv(e){return ha(e)}k.isWeakSet=cv;function Tn(e){return fe(e)==="[object ArrayBuffer]"}Tn.working=typeof ArrayBuffer<"u"&&Tn(new ArrayBuffer);function El(e){return typeof ArrayBuffer>"u"?!1:Tn.working?Tn(e):e instanceof ArrayBuffer}k.isArrayBuffer=El;function In(e){return fe(e)==="[object DataView]"}In.working=typeof ArrayBuffer<"u"&&typeof DataView<"u"&&In(new DataView(new ArrayBuffer(1),0,1));function ml(e){return typeof DataView>"u"?!1:In.working?In(e):e instanceof DataView}k.isDataView=ml;var ca=typeof SharedArrayBuffer<"u"?SharedArrayBuffer:void 0;function dt(e){return fe(e)==="[object SharedArrayBuffer]"}function Sl(e){return typeof ca>"u"?!1:(typeof dt.working>"u"&&(dt.working=dt(new ca)),dt.working?dt(e):e instanceof ca)}k.isSharedArrayBuffer=Sl;function hv(e){return fe(e)==="[object AsyncFunction]"}k.isAsyncFunction=hv;function pv(e){return fe(e)==="[object Map Iterator]"}k.isMapIterator=pv;function dv(e){return fe(e)==="[object Set Iterator]"}k.isSetIterator=dv;function yv(e){return fe(e)==="[object Generator]"}k.isGeneratorObject=yv;function vv(e){return fe(e)==="[object WebAssembly.Module]"}k.isWebAssemblyCompiledModule=vv;function xl(e){return yt(e,G0)}k.isNumberObject=xl;function Al(e){return yt(e,$0)}k.isStringObject=Al;function Rl(e){return yt(e,V0)}k.isBooleanObject=Rl;function Ol(e){return _l&&yt(e,bl)}k.isBigIntObject=Ol;function Tl(e){return gl&&yt(e,wl)}k.isSymbolObject=Tl;function _v(e){return xl(e)||Al(e)||Rl(e)||Ol(e)||Tl(e)}k.isBoxedPrimitive=_v;function gv(e){return typeof Uint8Array<"u"&&(El(e)||Sl(e))}k.isAnyArrayBuffer=gv;["isProxy","isExternal","isModuleNamespaceObject"].forEach(function(e){Object.defineProperty(k,e,{enumerable:!1,value:function(){return!1}})})});var Ll=y((q1,Nl)=>{Nl.exports=function(r){return r&&typeof r=="object"&&typeof r.copy=="function"&&typeof r.fill=="function"&&typeof r.readUInt8=="function"}});var Be=y((U1,pa)=>{typeof Object.create=="function"?pa.exports=function(r,t){t&&(r.super_=t,r.prototype=Object.create(t.prototype,{constructor:{value:r,enumerable:!1,writable:!0,configurable:!0}}))}:pa.exports=function(r,t){if(t){r.super_=t;var n=function(){};n.prototype=t.prototype,r.prototype=new n,r.prototype.constructor=r}}});var Se=y(P=>{var Fl=Object.getOwnPropertyDescriptors||function(r){for(var t=Object.keys(r),n={},i=0;i<t.length;i++)n[t[i]]=Object.getOwnPropertyDescriptor(r,t[i]);return n},bv=/%[sdj%]/g;P.format=function(e){if(!Mn(e)){for(var r=[],t=0;t<arguments.length;t++)r.push(qe(arguments[t]));return r.join(" ")}for(var t=1,n=arguments,i=n.length,a=String(e).replace(bv,function(f){if(f==="%%")return"%";if(t>=i)return f;switch(f){case"%s":return String(n[t++]);case"%d":return Number(n[t++]);case"%j":try{return JSON.stringify(n[t++])}catch{return"[Circular]"}default:return f}}),o=n[t];t<i;o=n[++t])Dn(o)||!zr(o)?a+=" "+o:a+=" "+qe(o);return a};P.deprecate=function(e,r){if(typeof process<"u"&&process.noDeprecation===!0)return e;if(typeof process>"u")return function(){return P.deprecate(e,r).apply(this,arguments)};var t=!1;function n(){if(!t){if(process.throwDeprecation)throw new Error(r);process.traceDeprecation?console.trace(r):console.error(r),t=!0}return e.apply(this,arguments)}return n};var Nn={},kl=/^$/;process.env.NODE_DEBUG&&(Ln=process.env.NODE_DEBUG,Ln=Ln.replace(/[|\\{}()[\]^$+?.]/g,"\\$&").replace(/\*/g,".*").replace(/,/g,"$|^").toUpperCase(),kl=new RegExp("^"+Ln+"$","i"));var Ln;P.debuglog=function(e){if(e=e.toUpperCase(),!Nn[e])if(kl.test(e)){var r=process.pid;Nn[e]=function(){var t=P.format.apply(P,arguments);console.error("%s %d: %s",e,r,t)}}else Nn[e]=function(){};return Nn[e]};function qe(e,r){var t={seen:[],stylize:Ev};return arguments.length>=3&&(t.depth=arguments[2]),arguments.length>=4&&(t.colors=arguments[3]),_a(r)?t.showHidden=r:r&&P._extend(t,r),ar(t.showHidden)&&(t.showHidden=!1),ar(t.depth)&&(t.depth=2),ar(t.colors)&&(t.colors=!1),ar(t.customInspect)&&(t.customInspect=!0),t.colors&&(t.stylize=wv),kn(t,e,t.depth)}P.inspect=qe;qe.colors={bold:[1,22],italic:[3,23],underline:[4,24],inverse:[7,27],white:[37,39],grey:[90,39],black:[30,39],blue:[34,39],cyan:[36,39],green:[32,39],magenta:[35,39],red:[31,39],yellow:[33,39]};qe.styles={special:"cyan",number:"yellow",boolean:"yellow",undefined:"grey",null:"bold",string:"green",date:"magenta",regexp:"red"};function wv(e,r){var t=qe.styles[r];return t?"\x1B["+qe.colors[t][0]+"m"+e+"\x1B["+qe.colors[t][1]+"m":e}function Ev(e,r){return e}function mv(e){var r={};return e.forEach(function(t,n){r[t]=!0}),r}function kn(e,r,t){if(e.customInspect&&r&&Fn(r.inspect)&&r.inspect!==P.inspect&&!(r.constructor&&r.constructor.prototype===r)){var n=r.inspect(t,e);return Mn(n)||(n=kn(e,n,t)),n}var i=Sv(e,r);if(i)return i;var a=Object.keys(r),o=mv(a);if(e.showHidden&&(a=Object.getOwnPropertyNames(r)),_t(r)&&(a.indexOf("message")>=0||a.indexOf("description")>=0))return da(r);if(a.length===0){if(Fn(r)){var f=r.name?": "+r.name:"";return e.stylize("[Function"+f+"]","special")}if(vt(r))return e.stylize(RegExp.prototype.toString.call(r),"regexp");if(Pn(r))return e.stylize(Date.prototype.toString.call(r),"date");if(_t(r))return da(r)}var s="",u=!1,l=["{","}"];if(Pl(r)&&(u=!0,l=["[","]"]),Fn(r)){var c=r.name?": "+r.name:"";s=" [Function"+c+"]"}if(vt(r)&&(s=" "+RegExp.prototype.toString.call(r)),Pn(r)&&(s=" "+Date.prototype.toUTCString.call(r)),_t(r)&&(s=" "+da(r)),a.length===0&&(!u||r.length==0))return l[0]+s+l[1];if(t<0)return vt(r)?e.stylize(RegExp.prototype.toString.call(r),"regexp"):e.stylize("[Object]","special");e.seen.push(r);var p;return u?p=xv(e,r,t,o,a):p=a.map(function(h){return va(e,r,t,o,h,u)}),e.seen.pop(),Av(p,s,l)}function Sv(e,r){if(ar(r))return e.stylize("undefined","undefined");if(Mn(r)){var t="'"+JSON.stringify(r).replace(/^"|"$/g,"").replace(/'/g,"\\'").replace(/\\"/g,'"')+"'";return e.stylize(t,"string")}if(Dl(r))return e.stylize(""+r,"number");if(_a(r))return e.stylize(""+r,"boolean");if(Dn(r))return e.stylize("null","null")}function da(e){return"["+Error.prototype.toString.call(e)+"]"}function xv(e,r,t,n,i){for(var a=[],o=0,f=r.length;o<f;++o)Ml(r,String(o))?a.push(va(e,r,t,n,String(o),!0)):a.push("");return i.forEach(function(s){s.match(/^\d+$/)||a.push(va(e,r,t,n,s,!0))}),a}function va(e,r,t,n,i,a){var o,f,s;if(s=Object.getOwnPropertyDescriptor(r,i)||{value:r[i]},s.get?s.set?f=e.stylize("[Getter/Setter]","special"):f=e.stylize("[Getter]","special"):s.set&&(f=e.stylize("[Setter]","special")),Ml(n,i)||(o="["+i+"]"),f||(e.seen.indexOf(s.value)<0?(Dn(t)?f=kn(e,s.value,null):f=kn(e,s.value,t-1),f.indexOf(`
-`)>-1&&(a?f=f.split(`
-`).map(function(u){return"  "+u}).join(`
-`).slice(2):f=`
-`+f.split(`
-`).map(function(u){return"   "+u}).join(`
-`))):f=e.stylize("[Circular]","special")),ar(o)){if(a&&i.match(/^\d+$/))return f;o=JSON.stringify(""+i),o.match(/^"([a-zA-Z_][a-zA-Z_0-9]*)"$/)?(o=o.slice(1,-1),o=e.stylize(o,"name")):(o=o.replace(/'/g,"\\'").replace(/\\"/g,'"').replace(/(^"|"$)/g,"'"),o=e.stylize(o,"string"))}return o+": "+f}function Av(e,r,t){var n=0,i=e.reduce(function(a,o){return n++,o.indexOf(`
-`)>=0&&n++,a+o.replace(/\u001b\[\d\d?m/g,"").length+1},0);return i>60?t[0]+(r===""?"":r+`
- `)+" "+e.join(`,
-  `)+" "+t[1]:t[0]+r+" "+e.join(", ")+" "+t[1]}P.types=Il();function Pl(e){return Array.isArray(e)}P.isArray=Pl;function _a(e){return typeof e=="boolean"}P.isBoolean=_a;function Dn(e){return e===null}P.isNull=Dn;function Rv(e){return e==null}P.isNullOrUndefined=Rv;function Dl(e){return typeof e=="number"}P.isNumber=Dl;function Mn(e){return typeof e=="string"}P.isString=Mn;function Ov(e){return typeof e=="symbol"}P.isSymbol=Ov;function ar(e){return e===void 0}P.isUndefined=ar;function vt(e){return zr(e)&&ga(e)==="[object RegExp]"}P.isRegExp=vt;P.types.isRegExp=vt;function zr(e){return typeof e=="object"&&e!==null}P.isObject=zr;function Pn(e){return zr(e)&&ga(e)==="[object Date]"}P.isDate=Pn;P.types.isDate=Pn;function _t(e){return zr(e)&&(ga(e)==="[object Error]"||e instanceof Error)}P.isError=_t;P.types.isNativeError=_t;function Fn(e){return typeof e=="function"}P.isFunction=Fn;function Tv(e){return e===null||typeof e=="boolean"||typeof e=="number"||typeof e=="string"||typeof e=="symbol"||typeof e>"u"}P.isPrimitive=Tv;P.isBuffer=Ll();function ga(e){return Object.prototype.toString.call(e)}function ya(e){return e<10?"0"+e.toString(10):e.toString(10)}var Iv=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"];function Nv(){var e=new Date,r=[ya(e.getHours()),ya(e.getMinutes()),ya(e.getSeconds())].join(":");return[e.getDate(),Iv[e.getMonth()],r].join(" ")}P.log=function(){console.log("%s - %s",Nv(),P.format.apply(P,arguments))};P.inherits=Be();P._extend=function(e,r){if(!r||!zr(r))return e;for(var t=Object.keys(r),n=t.length;n--;)e[t[n]]=r[t[n]];return e};function Ml(e,r){return Object.prototype.hasOwnProperty.call(e,r)}var ir=typeof Symbol<"u"?Symbol("util.promisify.custom"):void 0;P.promisify=function(r){if(typeof r!="function")throw new TypeError('The "original" argument must be of type Function');if(ir&&r[ir]){var t=r[ir];if(typeof t!="function")throw new TypeError('The "util.promisify.custom" argument must be of type Function');return Object.defineProperty(t,ir,{value:t,enumerable:!1,writable:!1,configurable:!0}),t}function t(){for(var n,i,a=new Promise(function(s,u){n=s,i=u}),o=[],f=0;f<arguments.length;f++)o.push(arguments[f]);o.push(function(s,u){s?i(s):n(u)});try{r.apply(this,o)}catch(s){i(s)}return a}return Object.setPrototypeOf(t,Object.getPrototypeOf(r)),ir&&Object.defineProperty(t,ir,{value:t,enumerable:!1,writable:!1,configurable:!0}),Object.defineProperties(t,Fl(r))};P.promisify.custom=ir;function Lv(e,r){if(!e){var t=new Error("Promise was rejected with a falsy value");t.reason=e,e=t}return r(e)}function Fv(e){if(typeof e!="function")throw new TypeError('The "original" argument must be of type Function');function r(){for(var t=[],n=0;n<arguments.length;n++)t.push(arguments[n]);var i=t.pop();if(typeof i!="function")throw new TypeError("The last argument must be of type Function");var a=this,o=function(){return i.apply(a,arguments)};e.apply(this,t).then(function(f){process.nextTick(o.bind(null,null,f))},function(f){process.nextTick(Lv.bind(null,f,o))})}return Object.setPrototypeOf(r,Object.getPrototypeOf(e)),Object.defineProperties(r,Fl(e)),r}P.callbackify=Fv});var Ea=y((z1,Ul)=>{"use strict";function Ue(e){"@babel/helpers - typeof";return Ue=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(r){return typeof r}:function(r){return r&&typeof Symbol=="function"&&r.constructor===Symbol&&r!==Symbol.prototype?"symbol":typeof r},Ue(e)}function jl(e,r){for(var t=0;t<r.length;t++){var n=r[t];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,Pv(n.key),n)}}function kv(e,r,t){return r&&jl(e.prototype,r),t&&jl(e,t),Object.defineProperty(e,"prototype",{writable:!1}),e}function Pv(e){var r=Dv(e,"string");return Ue(r)==="symbol"?r:String(r)}function Dv(e,r){if(Ue(e)!=="object"||e===null)return e;var t=e[Symbol.toPrimitive];if(t!==void 0){var n=t.call(e,r||"default");if(Ue(n)!=="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(r==="string"?String:Number)(e)}function Mv(e,r){if(!(e instanceof r))throw new TypeError("Cannot call a class as a function")}function jv(e,r){if(typeof r!="function"&&r!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(r&&r.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),Object.defineProperty(e,"prototype",{writable:!1}),r&&wa(e,r)}function wa(e,r){return wa=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(n,i){return n.__proto__=i,n},wa(e,r)}function Bv(e){var r=Cv();return function(){var n=jn(e),i;if(r){var a=jn(this).constructor;i=Reflect.construct(n,arguments,a)}else i=n.apply(this,arguments);return qv(this,i)}}function qv(e,r){if(r&&(Ue(r)==="object"||typeof r=="function"))return r;if(r!==void 0)throw new TypeError("Derived constructors may only return object or undefined");return Uv(e)}function Uv(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function Cv(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch{return!1}}function jn(e){return jn=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(t){return t.__proto__||Object.getPrototypeOf(t)},jn(e)}var ql={},Zr,ba;function gt(e,r,t){t||(t=Error);function n(a,o,f){return typeof r=="string"?r:r(a,o,f)}var i=(function(a){jv(f,a);var o=Bv(f);function f(s,u,l){var c;return Mv(this,f),c=o.call(this,n(s,u,l)),c.code=e,c}return kv(f)})(t);ql[e]=i}function Bl(e,r){if(Array.isArray(e)){var t=e.length;return e=e.map(function(n){return String(n)}),t>2?"one of ".concat(r," ").concat(e.slice(0,t-1).join(", "),", or ")+e[t-1]:t===2?"one of ".concat(r," ").concat(e[0]," or ").concat(e[1]):"of ".concat(r," ").concat(e[0])}else return"of ".concat(r," ").concat(String(e))}function zv(e,r,t){return e.substr(!t||t<0?0:+t,r.length)===r}function Zv(e,r,t){return(t===void 0||t>e.length)&&(t=e.length),e.substring(t-r.length,t)===r}function Wv(e,r,t){return typeof t!="number"&&(t=0),t+r.length>e.length?!1:e.indexOf(r,t)!==-1}gt("ERR_AMBIGUOUS_ARGUMENT",'The "%s" argument is ambiguous. %s',TypeError);gt("ERR_INVALID_ARG_TYPE",function(e,r,t){Zr===void 0&&(Zr=Wr()),Zr(typeof e=="string","'name' must be a string");var n;typeof r=="string"&&zv(r,"not ")?(n="must not be",r=r.replace(/^not /,"")):n="must be";var i;if(Zv(e," argument"))i="The ".concat(e," ").concat(n," ").concat(Bl(r,"type"));else{var a=Wv(e,".")?"property":"argument";i='The "'.concat(e,'" ').concat(a," ").concat(n," ").concat(Bl(r,"type"))}return i+=". Received type ".concat(Ue(t)),i},TypeError);gt("ERR_INVALID_ARG_VALUE",function(e,r){var t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:"is invalid";ba===void 0&&(ba=Se());var n=ba.inspect(r);return n.length>128&&(n="".concat(n.slice(0,128),"...")),"The argument '".concat(e,"' ").concat(t,". Received ").concat(n)},TypeError,RangeError);gt("ERR_INVALID_RETURN_VALUE",function(e,r,t){var n;return t&&t.constructor&&t.constructor.name?n="instance of ".concat(t.constructor.name):n="type ".concat(Ue(t)),"Expected ".concat(e,' to be returned from the "').concat(r,'"')+" function but got ".concat(n,".")},TypeError);gt("ERR_MISSING_ARGS",function(){for(var e=arguments.length,r=new Array(e),t=0;t<e;t++)r[t]=arguments[t];Zr===void 0&&(Zr=Wr()),Zr(r.length>0,"At least one arg needs to be specified");var n="The ",i=r.length;switch(r=r.map(function(a){return'"'.concat(a,'"')}),i){case 1:n+="".concat(r[0]," argument");break;case 2:n+="".concat(r[0]," and ").concat(r[1]," arguments");break;default:n+=r.slice(0,i-1).join(", "),n+=", and ".concat(r[i-1]," arguments");break}return"".concat(n," must be specified")},TypeError);Ul.exports.codes=ql});var Kl=y((Z1,Yl)=>{"use strict";function Cl(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter(function(i){return Object.getOwnPropertyDescriptor(e,i).enumerable})),t.push.apply(t,n)}return t}function zl(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{};r%2?Cl(Object(t),!0).forEach(function(n){Hv(e,n,t[n])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):Cl(Object(t)).forEach(function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))})}return e}function Hv(e,r,t){return r=Gl(r),r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Gv(e,r){if(!(e instanceof r))throw new TypeError("Cannot call a class as a function")}function Zl(e,r){for(var t=0;t<r.length;t++){var n=r[t];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,Gl(n.key),n)}}function $v(e,r,t){return r&&Zl(e.prototype,r),t&&Zl(e,t),Object.defineProperty(e,"prototype",{writable:!1}),e}function Gl(e){var r=Vv(e,"string");return te(r)==="symbol"?r:String(r)}function Vv(e,r){if(te(e)!=="object"||e===null)return e;var t=e[Symbol.toPrimitive];if(t!==void 0){var n=t.call(e,r||"default");if(te(n)!=="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(r==="string"?String:Number)(e)}function Yv(e,r){if(typeof r!="function"&&r!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(r&&r.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),Object.defineProperty(e,"prototype",{writable:!1}),r&&mt(e,r)}function Kv(e){var r=Vl();return function(){var n=St(e),i;if(r){var a=St(this).constructor;i=Reflect.construct(n,arguments,a)}else i=n.apply(this,arguments);return $l(this,i)}}function $l(e,r){if(r&&(te(r)==="object"||typeof r=="function"))return r;if(r!==void 0)throw new TypeError("Derived constructors may only return object or undefined");return ma(e)}function ma(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function Sa(e){var r=typeof Map=="function"?new Map:void 0;return Sa=function(n){if(n===null||!Xv(n))return n;if(typeof n!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r<"u"){if(r.has(n))return r.get(n);r.set(n,i)}function i(){return Bn(n,arguments,St(this).constructor)}return i.prototype=Object.create(n.prototype,{constructor:{value:i,enumerable:!1,writable:!0,configurable:!0}}),mt(i,n)},Sa(e)}function Bn(e,r,t){return Vl()?Bn=Reflect.construct.bind():Bn=function(i,a,o){var f=[null];f.push.apply(f,a);var s=Function.bind.apply(i,f),u=new s;return o&&mt(u,o.prototype),u},Bn.apply(null,arguments)}function Vl(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch{return!1}}function Xv(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function mt(e,r){return mt=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(n,i){return n.__proto__=i,n},mt(e,r)}function St(e){return St=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(t){return t.__proto__||Object.getPrototypeOf(t)},St(e)}function te(e){"@babel/helpers - typeof";return te=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(r){return typeof r}:function(r){return r&&typeof Symbol=="function"&&r.constructor===Symbol&&r!==Symbol.prototype?"symbol":typeof r},te(e)}var Jv=Se(),xa=Jv.inspect,Qv=Ea(),e_=Qv.codes.ERR_INVALID_ARG_TYPE;function Wl(e,r,t){return(t===void 0||t>e.length)&&(t=e.length),e.substring(t-r.length,t)===r}function r_(e,r){if(r=Math.floor(r),e.length==0||r==0)return"";var t=e.length*r;for(r=Math.floor(Math.log(r)/Math.log(2));r;)e+=e,r--;return e+=e.substring(0,t-e.length),e}var ge="",bt="",wt="",V="",or={deepStrictEqual:"Expected values to be strictly deep-equal:",strictEqual:"Expected values to be strictly equal:",strictEqualObject:'Expected "actual" to be reference-equal to "expected":',deepEqual:"Expected values to be loosely deep-equal:",equal:"Expected values to be loosely equal:",notDeepStrictEqual:'Expected "actual" not to be strictly deep-equal to:',notStrictEqual:'Expected "actual" to be strictly unequal to:',notStrictEqualObject:'Expected "actual" not to be reference-equal to "expected":',notDeepEqual:'Expected "actual" not to be loosely deep-equal to:',notEqual:'Expected "actual" to be loosely unequal to:',notIdentical:"Values identical but not reference-equal:"},t_=10;function Hl(e){var r=Object.keys(e),t=Object.create(Object.getPrototypeOf(e));return r.forEach(function(n){t[n]=e[n]}),Object.defineProperty(t,"message",{value:e.message}),t}function Et(e){return xa(e,{compact:!1,customInspect:!1,depth:1e3,maxArrayLength:1/0,showHidden:!1,breakLength:1/0,showProxy:!1,sorted:!0,getters:!0})}function n_(e,r,t){var n="",i="",a=0,o="",f=!1,s=Et(e),u=s.split(`
-`),l=Et(r).split(`
-`),c=0,p="";if(t==="strictEqual"&&te(e)==="object"&&te(r)==="object"&&e!==null&&r!==null&&(t="strictEqualObject"),u.length===1&&l.length===1&&u[0]!==l[0]){var h=u[0].length+l[0].length;if(h<=t_){if((te(e)!=="object"||e===null)&&(te(r)!=="object"||r===null)&&(e!==0||r!==0))return"".concat(or[t],`
-
-`)+"".concat(u[0]," !== ").concat(l[0],`
-`)}else if(t!=="strictEqualObject"){var v=process.stderr&&process.stderr.isTTY?process.stderr.columns:80;if(h<v){for(;u[0][c]===l[0][c];)c++;c>2&&(p=`
-  `.concat(r_(" ",c),"^"),c=0)}}}for(var _=u[u.length-1],m=l[l.length-1];_===m&&(c++<2?o=`
-  `.concat(_).concat(o):n=_,u.pop(),l.pop(),!(u.length===0||l.length===0));)_=u[u.length-1],m=l[l.length-1];var w=Math.max(u.length,l.length);if(w===0){var L=s.split(`
-`);if(L.length>30)for(L[26]="".concat(ge,"...").concat(V);L.length>27;)L.pop();return"".concat(or.notIdentical,`
-
-`).concat(L.join(`
-`),`
-`)}c>3&&(o=`
-`.concat(ge,"...").concat(V).concat(o),f=!0),n!==""&&(o=`
-  `.concat(n).concat(o),n="");var A=0,T=or[t]+`
-`.concat(bt,"+ actual").concat(V," ").concat(wt,"- expected").concat(V),b=" ".concat(ge,"...").concat(V," Lines skipped");for(c=0;c<w;c++){var R=c-a;if(u.length<c+1)R>1&&c>2&&(R>4?(i+=`
-`.concat(ge,"...").concat(V),f=!0):R>3&&(i+=`
-  `.concat(l[c-2]),A++),i+=`
-  `.concat(l[c-1]),A++),a=c,n+=`
-`.concat(wt,"-").concat(V," ").concat(l[c]),A++;else if(l.length<c+1)R>1&&c>2&&(R>4?(i+=`
-`.concat(ge,"...").concat(V),f=!0):R>3&&(i+=`
-  `.concat(u[c-2]),A++),i+=`
-  `.concat(u[c-1]),A++),a=c,i+=`
-`.concat(bt,"+").concat(V," ").concat(u[c]),A++;else{var I=l[c],S=u[c],D=S!==I&&(!Wl(S,",")||S.slice(0,-1)!==I);D&&Wl(I,",")&&I.slice(0,-1)===S&&(D=!1,S+=","),D?(R>1&&c>2&&(R>4?(i+=`
-`.concat(ge,"...").concat(V),f=!0):R>3&&(i+=`
-  `.concat(u[c-2]),A++),i+=`
-  `.concat(u[c-1]),A++),a=c,i+=`
-`.concat(bt,"+").concat(V," ").concat(S),n+=`
-`.concat(wt,"-").concat(V," ").concat(I),A+=2):(i+=n,n="",(R===1||c===0)&&(i+=`
-  `.concat(S),A++))}if(A>20&&c<w-2)return"".concat(T).concat(b,`
-`).concat(i,`
-`).concat(ge,"...").concat(V).concat(n,`
-`)+"".concat(ge,"...").concat(V)}return"".concat(T).concat(f?b:"",`
-`).concat(i).concat(n).concat(o).concat(p)}var i_=(function(e,r){Yv(n,e);var t=Kv(n);function n(i){var a;if(Gv(this,n),te(i)!=="object"||i===null)throw new e_("options","Object",i);var o=i.message,f=i.operator,s=i.stackStartFn,u=i.actual,l=i.expected,c=Error.stackTraceLimit;if(Error.stackTraceLimit=0,o!=null)a=t.call(this,String(o));else if(process.stderr&&process.stderr.isTTY&&(process.stderr&&process.stderr.getColorDepth&&process.stderr.getColorDepth()!==1?(ge="\x1B[34m",bt="\x1B[32m",V="\x1B[39m",wt="\x1B[31m"):(ge="",bt="",V="",wt="")),te(u)==="object"&&u!==null&&te(l)==="object"&&l!==null&&"stack"in u&&u instanceof Error&&"stack"in l&&l instanceof Error&&(u=Hl(u),l=Hl(l)),f==="deepStrictEqual"||f==="strictEqual")a=t.call(this,n_(u,l,f));else if(f==="notDeepStrictEqual"||f==="notStrictEqual"){var p=or[f],h=Et(u).split(`
-`);if(f==="notStrictEqual"&&te(u)==="object"&&u!==null&&(p=or.notStrictEqualObject),h.length>30)for(h[26]="".concat(ge,"...").concat(V);h.length>27;)h.pop();h.length===1?a=t.call(this,"".concat(p," ").concat(h[0])):a=t.call(this,"".concat(p,`
-
-`).concat(h.join(`
-`),`
-`))}else{var v=Et(u),_="",m=or[f];f==="notDeepEqual"||f==="notEqual"?(v="".concat(or[f],`
-
-`).concat(v),v.length>1024&&(v="".concat(v.slice(0,1021),"..."))):(_="".concat(Et(l)),v.length>512&&(v="".concat(v.slice(0,509),"...")),_.length>512&&(_="".concat(_.slice(0,509),"...")),f==="deepEqual"||f==="equal"?v="".concat(m,`
-
-`).concat(v,`
-
-should equal
-
-`):_=" ".concat(f," ").concat(_)),a=t.call(this,"".concat(v).concat(_))}return Error.stackTraceLimit=c,a.generatedMessage=!o,Object.defineProperty(ma(a),"name",{value:"AssertionError [ERR_ASSERTION]",enumerable:!1,writable:!0,configurable:!0}),a.code="ERR_ASSERTION",a.actual=u,a.expected=l,a.operator=f,Error.captureStackTrace&&Error.captureStackTrace(ma(a),s),a.stack,a.name="AssertionError",$l(a)}return $v(n,[{key:"toString",value:function(){return"".concat(this.name," [").concat(this.code,"]: ").concat(this.message)}},{key:r,value:function(a,o){return xa(this,zl(zl({},o),{},{customInspect:!1,depth:0}))}}]),n})(Sa(Error),xa.custom);Yl.exports=i_});var Aa=y((W1,Jl)=>{"use strict";var Xl=Object.prototype.toString;Jl.exports=function(r){var t=Xl.call(r),n=t==="[object Arguments]";return n||(n=t!=="[object Array]"&&r!==null&&typeof r=="object"&&typeof r.length=="number"&&r.length>=0&&Xl.call(r.callee)==="[object Function]"),n}});var fs=y((H1,os)=>{"use strict";var as;Object.keys||(xt=Object.prototype.hasOwnProperty,Ra=Object.prototype.toString,Ql=Aa(),Oa=Object.prototype.propertyIsEnumerable,es=!Oa.call({toString:null},"toString"),rs=Oa.call(function(){},"prototype"),At=["toString","toLocaleString","valueOf","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","constructor"],qn=function(e){var r=e.constructor;return r&&r.prototype===e},ts={$applicationCache:!0,$console:!0,$external:!0,$frame:!0,$frameElement:!0,$frames:!0,$innerHeight:!0,$innerWidth:!0,$onmozfullscreenchange:!0,$onmozfullscreenerror:!0,$outerHeight:!0,$outerWidth:!0,$pageXOffset:!0,$pageYOffset:!0,$parent:!0,$scrollLeft:!0,$scrollTop:!0,$scrollX:!0,$scrollY:!0,$self:!0,$webkitIndexedDB:!0,$webkitStorageInfo:!0,$window:!0},ns=(function(){if(typeof window>"u")return!1;for(var e in window)try{if(!ts["$"+e]&&xt.call(window,e)&&window[e]!==null&&typeof window[e]=="object")try{qn(window[e])}catch{return!0}}catch{return!0}return!1})(),is=function(e){if(typeof window>"u"||!ns)return qn(e);try{return qn(e)}catch{return!1}},as=function(r){var t=r!==null&&typeof r=="object",n=Ra.call(r)==="[object Function]",i=Ql(r),a=t&&Ra.call(r)==="[object String]",o=[];if(!t&&!n&&!i)throw new TypeError("Object.keys called on a non-object");var f=rs&&n;if(a&&r.length>0&&!xt.call(r,0))for(var s=0;s<r.length;++s)o.push(String(s));if(i&&r.length>0)for(var u=0;u<r.length;++u)o.push(String(u));else for(var l in r)!(f&&l==="prototype")&&xt.call(r,l)&&o.push(String(l));if(es)for(var c=is(r),p=0;p<At.length;++p)!(c&&At[p]==="constructor")&&xt.call(r,At[p])&&o.push(At[p]);return o});var xt,Ra,Ql,Oa,es,rs,At,qn,ts,ns,is;os.exports=as});var Ta=y((G1,ss)=>{"use strict";var a_=Array.prototype.slice,o_=Aa(),us=Object.keys,Un=us?function(r){return us(r)}:fs(),ls=Object.keys;Un.shim=function(){if(Object.keys){var r=(function(){var t=Object.keys(arguments);return t&&t.length===arguments.length})(1,2);r||(Object.keys=function(n){return o_(n)?ls(a_.call(n)):ls(n)})}else Object.keys=Un;return Object.keys||Un};ss.exports=Un});var ys=y(($1,ds)=>{"use strict";var f_=Ta(),hs=an()(),ps=nr(),Cn=on(),u_=ps("Array.prototype.push"),cs=ps("Object.prototype.propertyIsEnumerable"),l_=hs?Cn.getOwnPropertySymbols:null;ds.exports=function(r,t){if(r==null)throw new TypeError("target must be an object");var n=Cn(r);if(arguments.length===1)return n;for(var i=1;i<arguments.length;++i){var a=Cn(arguments[i]),o=f_(a),f=hs&&(Cn.getOwnPropertySymbols||l_);if(f)for(var s=f(a),u=0;u<s.length;++u){var l=s[u];cs(a,l)&&u_(o,l)}for(var c=0;c<o.length;++c){var p=o[c];if(cs(a,p)){var h=a[p];n[p]=h}}}return n}});var _s=y((V1,vs)=>{"use strict";var Ia=ys(),s_=function(){if(!Object.assign)return!1;for(var e="abcdefghijklmnopqrst",r=e.split(""),t={},n=0;n<r.length;++n)t[r[n]]=r[n];var i=Object.assign({},t),a="";for(var o in i)a+=o;return e!==a},c_=function(){if(!Object.assign||!Object.preventExtensions)return!1;var e=Object.preventExtensions({1:2});try{Object.assign(e,"xy")}catch{return e[1]==="y"}return!1};vs.exports=function(){return!Object.assign||s_()||c_()?Ia:Object.assign}});var Na=y((Y1,bs)=>{"use strict";var gs=function(e){return e!==e};bs.exports=function(r,t){return r===0&&t===0?1/r===1/t:!!(r===t||gs(r)&&gs(t))}});var zn=y((K1,ws)=>{"use strict";var h_=Na();ws.exports=function(){return typeof Object.is=="function"?Object.is:h_}});var xs=y((X1,Ss)=>{"use strict";var Es=yn(),ms=pt(),p_=ms(Es("String.prototype.indexOf"));Ss.exports=function(r,t){var n=Es(r,!!t);return typeof n=="function"&&p_(r,".prototype.")>-1?ms(n):n}});var Rt=y((J1,Ts)=>{"use strict";var d_=Ta(),y_=typeof Symbol=="function"&&typeof Symbol("foo")=="symbol",v_=Object.prototype.toString,__=Array.prototype.concat,As=ia(),g_=function(e){return typeof e=="function"&&v_.call(e)==="[object Function]"},Rs=oa()(),b_=function(e,r,t,n){if(r in e){if(n===!0){if(e[r]===t)return}else if(!g_(n)||!n())return}Rs?As(e,r,t,!0):As(e,r,t)},Os=function(e,r){var t=arguments.length>2?arguments[2]:{},n=d_(r);y_&&(n=__.call(n,Object.getOwnPropertySymbols(r)));for(var i=0;i<n.length;i+=1)b_(e,n[i],r[n[i]],t[n[i]])};Os.supportsDescriptors=!!Rs;Ts.exports=Os});var Ns=y((Q1,Is)=>{"use strict";var w_=zn(),E_=Rt();Is.exports=function(){var r=w_();return E_(Object,{is:r},{is:function(){return Object.is!==r}}),r}});var Ps=y((eS,ks)=>{"use strict";var m_=Rt(),S_=pt(),x_=Na(),Ls=zn(),A_=Ns(),Fs=S_(Ls(),Object);m_(Fs,{getPolyfill:Ls,implementation:x_,shim:A_});ks.exports=Fs});var La=y((rS,Ds)=>{"use strict";Ds.exports=function(r){return r!==r}});var Fa=y((tS,Ms)=>{"use strict";var R_=La();Ms.exports=function(){return Number.isNaN&&Number.isNaN(NaN)&&!Number.isNaN("a")?Number.isNaN:R_}});var Bs=y((nS,js)=>{"use strict";var O_=Rt(),T_=Fa();js.exports=function(){var r=T_();return O_(Number,{isNaN:r},{isNaN:function(){return Number.isNaN!==r}}),r}});var zs=y((iS,Cs)=>{"use strict";var I_=pt(),N_=Rt(),L_=La(),qs=Fa(),F_=Bs(),Us=I_(qs(),Number);N_(Us,{getPolyfill:qs,implementation:L_,shim:F_});Cs.exports=Us});var uc=y((aS,fc)=>{"use strict";function Zs(e,r){return M_(e)||D_(e,r)||P_(e,r)||k_()}function k_(){throw new TypeError(`Invalid attempt to destructure non-iterable instance.
-In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function P_(e,r){if(e){if(typeof e=="string")return Ws(e,r);var t=Object.prototype.toString.call(e).slice(8,-1);if(t==="Object"&&e.constructor&&(t=e.constructor.name),t==="Map"||t==="Set")return Array.from(e);if(t==="Arguments"||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t))return Ws(e,r)}}function Ws(e,r){(r==null||r>e.length)&&(r=e.length);for(var t=0,n=new Array(r);t<r;t++)n[t]=e[t];return n}function D_(e,r){var t=e==null?null:typeof Symbol<"u"&&e[Symbol.iterator]||e["@@iterator"];if(t!=null){var n,i,a,o,f=[],s=!0,u=!1;try{if(a=(t=t.call(e)).next,r===0){if(Object(t)!==t)return;s=!1}else for(;!(s=(n=a.call(t)).done)&&(f.push(n.value),f.length!==r);s=!0);}catch(l){u=!0,i=l}finally{try{if(!s&&t.return!=null&&(o=t.return(),Object(o)!==o))return}finally{if(u)throw i}}return f}}function M_(e){if(Array.isArray(e))return e}function ue(e){"@babel/helpers - typeof";return ue=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(r){return typeof r}:function(r){return r&&typeof Symbol=="function"&&r.constructor===Symbol&&r!==Symbol.prototype?"symbol":typeof r},ue(e)}var j_=/a/g.flags!==void 0,Yn=function(r){var t=[];return r.forEach(function(n){return t.push(n)}),t},Hs=function(r){var t=[];return r.forEach(function(n,i){return t.push([i,n])}),t},tc=Object.is?Object.is:Ps(),$n=Object.getOwnPropertySymbols?Object.getOwnPropertySymbols:function(){return[]},ka=Number.isNaN?Number.isNaN:zs();function Da(e){return e.call.bind(e)}var Tt=Da(Object.prototype.hasOwnProperty),Vn=Da(Object.prototype.propertyIsEnumerable),Gs=Da(Object.prototype.toString),J=Se().types,B_=J.isAnyArrayBuffer,q_=J.isArrayBufferView,$s=J.isDate,Zn=J.isMap,Vs=J.isRegExp,Wn=J.isSet,U_=J.isNativeError,C_=J.isBoxedPrimitive,Ys=J.isNumberObject,Ks=J.isStringObject,Xs=J.isBooleanObject,Js=J.isBigIntObject,z_=J.isSymbolObject,Z_=J.isFloat32Array,W_=J.isFloat64Array;function H_(e){if(e.length===0||e.length>10)return!0;for(var r=0;r<e.length;r++){var t=e.charCodeAt(r);if(t<48||t>57)return!0}return e.length===10&&e>=Math.pow(2,32)}function Hn(e){return Object.keys(e).filter(H_).concat($n(e).filter(Object.prototype.propertyIsEnumerable.bind(e)))}function nc(e,r){if(e===r)return 0;for(var t=e.length,n=r.length,i=0,a=Math.min(t,n);i<a;++i)if(e[i]!==r[i]){t=e[i],n=r[i];break}return t<n?-1:n<t?1:0}var Gn=void 0,G_=!0,$_=!1,Pa=0,Ma=1,ic=2,ac=3;function V_(e,r){return j_?e.source===r.source&&e.flags===r.flags:RegExp.prototype.toString.call(e)===RegExp.prototype.toString.call(r)}function Y_(e,r){if(e.byteLength!==r.byteLength)return!1;for(var t=0;t<e.byteLength;t++)if(e[t]!==r[t])return!1;return!0}function K_(e,r){return e.byteLength!==r.byteLength?!1:nc(new Uint8Array(e.buffer,e.byteOffset,e.byteLength),new Uint8Array(r.buffer,r.byteOffset,r.byteLength))===0}function X_(e,r){return e.byteLength===r.byteLength&&nc(new Uint8Array(e),new Uint8Array(r))===0}function J_(e,r){return Ys(e)?Ys(r)&&tc(Number.prototype.valueOf.call(e),Number.prototype.valueOf.call(r)):Ks(e)?Ks(r)&&String.prototype.valueOf.call(e)===String.prototype.valueOf.call(r):Xs(e)?Xs(r)&&Boolean.prototype.valueOf.call(e)===Boolean.prototype.valueOf.call(r):Js(e)?Js(r)&&BigInt.prototype.valueOf.call(e)===BigInt.prototype.valueOf.call(r):z_(r)&&Symbol.prototype.valueOf.call(e)===Symbol.prototype.valueOf.call(r)}function le(e,r,t,n){if(e===r)return e!==0?!0:t?tc(e,r):!0;if(t){if(ue(e)!=="object")return typeof e=="number"&&ka(e)&&ka(r);if(ue(r)!=="object"||e===null||r===null||Object.getPrototypeOf(e)!==Object.getPrototypeOf(r))return!1}else{if(e===null||ue(e)!=="object")return r===null||ue(r)!=="object"?e==r:!1;if(r===null||ue(r)!=="object")return!1}var i=Gs(e),a=Gs(r);if(i!==a)return!1;if(Array.isArray(e)){if(e.length!==r.length)return!1;var o=Hn(e,Gn),f=Hn(r,Gn);return o.length!==f.length?!1:Ot(e,r,t,n,Ma,o)}if(i==="[object Object]"&&(!Zn(e)&&Zn(r)||!Wn(e)&&Wn(r)))return!1;if($s(e)){if(!$s(r)||Date.prototype.getTime.call(e)!==Date.prototype.getTime.call(r))return!1}else if(Vs(e)){if(!Vs(r)||!V_(e,r))return!1}else if(U_(e)||e instanceof Error){if(e.message!==r.message||e.name!==r.name)return!1}else if(q_(e)){if(!t&&(Z_(e)||W_(e))){if(!Y_(e,r))return!1}else if(!K_(e,r))return!1;var s=Hn(e,Gn),u=Hn(r,Gn);return s.length!==u.length?!1:Ot(e,r,t,n,Pa,s)}else{if(Wn(e))return!Wn(r)||e.size!==r.size?!1:Ot(e,r,t,n,ic);if(Zn(e))return!Zn(r)||e.size!==r.size?!1:Ot(e,r,t,n,ac);if(B_(e)){if(!X_(e,r))return!1}else if(C_(e)&&!J_(e,r))return!1}return Ot(e,r,t,n,Pa)}function Qs(e,r){return r.filter(function(t){return Vn(e,t)})}function Ot(e,r,t,n,i,a){if(arguments.length===5){a=Object.keys(e);var o=Object.keys(r);if(a.length!==o.length)return!1}for(var f=0;f<a.length;f++)if(!Tt(r,a[f]))return!1;if(t&&arguments.length===5){var s=$n(e);if(s.length!==0){var u=0;for(f=0;f<s.length;f++){var l=s[f];if(Vn(e,l)){if(!Vn(r,l))return!1;a.push(l),u++}else if(Vn(r,l))return!1}var c=$n(r);if(s.length!==c.length&&Qs(r,c).length!==u)return!1}else{var p=$n(r);if(p.length!==0&&Qs(r,p).length!==0)return!1}}if(a.length===0&&(i===Pa||i===Ma&&e.length===0||e.size===0))return!0;if(n===void 0)n={val1:new Map,val2:new Map,position:0};else{var h=n.val1.get(e);if(h!==void 0){var v=n.val2.get(r);if(v!==void 0)return h===v}n.position++}n.val1.set(e,n.position),n.val2.set(r,n.position);var _=ng(e,r,t,a,n,i);return n.val1.delete(e),n.val2.delete(r),_}function ec(e,r,t,n){for(var i=Yn(e),a=0;a<i.length;a++){var o=i[a];if(le(r,o,t,n))return e.delete(o),!0}return!1}function oc(e){switch(ue(e)){case"undefined":return null;case"object":return;case"symbol":return!1;case"string":e=+e;case"number":if(ka(e))return!1}return!0}function Q_(e,r,t){var n=oc(t);return n??(r.has(n)&&!e.has(n))}function eg(e,r,t,n,i){var a=oc(t);if(a!=null)return a;var o=r.get(a);return o===void 0&&!r.has(a)||!le(n,o,!1,i)?!1:!e.has(a)&&le(n,o,!1,i)}function rg(e,r,t,n){for(var i=null,a=Yn(e),o=0;o<a.length;o++){var f=a[o];if(ue(f)==="object"&&f!==null)i===null&&(i=new Set),i.add(f);else if(!r.has(f)){if(t||!Q_(e,r,f))return!1;i===null&&(i=new Set),i.add(f)}}if(i!==null){for(var s=Yn(r),u=0;u<s.length;u++){var l=s[u];if(ue(l)==="object"&&l!==null){if(!ec(i,l,t,n))return!1}else if(!t&&!e.has(l)&&!ec(i,l,t,n))return!1}return i.size===0}return!0}function rc(e,r,t,n,i,a){for(var o=Yn(e),f=0;f<o.length;f++){var s=o[f];if(le(t,s,i,a)&&le(n,r.get(s),i,a))return e.delete(s),!0}return!1}function tg(e,r,t,n){for(var i=null,a=Hs(e),o=0;o<a.length;o++){var f=Zs(a[o],2),s=f[0],u=f[1];if(ue(s)==="object"&&s!==null)i===null&&(i=new Set),i.add(s);else{var l=r.get(s);if(l===void 0&&!r.has(s)||!le(u,l,t,n)){if(t||!eg(e,r,s,u,n))return!1;i===null&&(i=new Set),i.add(s)}}}if(i!==null){for(var c=Hs(r),p=0;p<c.length;p++){var h=Zs(c[p],2),v=h[0],_=h[1];if(ue(v)==="object"&&v!==null){if(!rc(i,e,v,_,t,n))return!1}else if(!t&&(!e.has(v)||!le(e.get(v),_,!1,n))&&!rc(i,e,v,_,!1,n))return!1}return i.size===0}return!0}function ng(e,r,t,n,i,a){var o=0;if(a===ic){if(!rg(e,r,t,i))return!1}else if(a===ac){if(!tg(e,r,t,i))return!1}else if(a===Ma)for(;o<e.length;o++)if(Tt(e,o)){if(!Tt(r,o)||!le(e[o],r[o],t,i))return!1}else{if(Tt(r,o))return!1;for(var f=Object.keys(e);o<f.length;o++){var s=f[o];if(!Tt(r,s)||!le(e[s],r[s],t,i))return!1}return f.length===Object.keys(r).length}for(o=0;o<n.length;o++){var u=n[o];if(!le(e[u],r[u],t,i))return!1}return!0}function ig(e,r){return le(e,r,$_)}function ag(e,r){return le(e,r,G_)}fc.exports={isDeepEqual:ig,isDeepStrictEqual:ag}});var Wr=y((oS,Rc)=>{"use strict";function be(e){"@babel/helpers - typeof";return be=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(r){return typeof r}:function(r){return r&&typeof Symbol=="function"&&r.constructor===Symbol&&r!==Symbol.prototype?"symbol":typeof r},be(e)}function lc(e,r){for(var t=0;t<r.length;t++){var n=r[t];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,fg(n.key),n)}}function og(e,r,t){return r&&lc(e.prototype,r),t&&lc(e,t),Object.defineProperty(e,"prototype",{writable:!1}),e}function fg(e){var r=ug(e,"string");return be(r)==="symbol"?r:String(r)}function ug(e,r){if(be(e)!=="object"||e===null)return e;var t=e[Symbol.toPrimitive];if(t!==void 0){var n=t.call(e,r||"default");if(be(n)!=="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(r==="string"?String:Number)(e)}function lg(e,r){if(!(e instanceof r))throw new TypeError("Cannot call a class as a function")}var sg=Ea(),It=sg.codes,sc=It.ERR_AMBIGUOUS_ARGUMENT,Hr=It.ERR_INVALID_ARG_TYPE,cg=It.ERR_INVALID_ARG_VALUE,hg=It.ERR_INVALID_RETURN_VALUE,ze=It.ERR_MISSING_ARGS,Ze=Kl(),pg=Se(),Kn=pg.inspect,dc=Se().types,dg=dc.isPromise,Xn=dc.isRegExp,yg=_s()(),yc=zn()(),Jn=xs()("RegExp.prototype.test"),Ce,Qn;function Nt(){var e=uc();Ce=e.isDeepEqual,Qn=e.isDeepStrictEqual}var cc=!1,U=Rc.exports=ja,ei={};function we(e){throw e.message instanceof Error?e.message:new Ze(e)}function vc(e,r,t,n,i){var a=arguments.length,o;if(a===0)o="Failed";else if(a===1)t=e,e=void 0;else{if(cc===!1){cc=!0;var f=process.emitWarning?process.emitWarning:console.warn.bind(console);f("assert.fail() with more than one argument is deprecated. Please use assert.strictEqual() instead or only pass a message.","DeprecationWarning","DEP0094")}a===2&&(n="!=")}if(t instanceof Error)throw t;var s={actual:e,expected:r,operator:n===void 0?"fail":n,stackStartFn:i||vc};t!==void 0&&(s.message=t);var u=new Ze(s);throw o&&(u.message=o,u.generatedMessage=!0),u}U.fail=vc;U.AssertionError=Ze;function _c(e,r,t,n){if(!t){var i=!1;if(r===0)i=!0,n="No value argument passed to `assert.ok()`";else if(n instanceof Error)throw n;var a=new Ze({actual:t,expected:!0,message:n,operator:"==",stackStartFn:e});throw a.generatedMessage=i,a}}function ja(){for(var e=arguments.length,r=new Array(e),t=0;t<e;t++)r[t]=arguments[t];_c.apply(void 0,[ja,r.length].concat(r))}U.ok=ja;U.equal=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");r!=t&&we({actual:r,expected:t,message:n,operator:"==",stackStartFn:e})};U.notEqual=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");r==t&&we({actual:r,expected:t,message:n,operator:"!=",stackStartFn:e})};U.deepEqual=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");Ce===void 0&&Nt(),Ce(r,t)||we({actual:r,expected:t,message:n,operator:"deepEqual",stackStartFn:e})};U.notDeepEqual=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");Ce===void 0&&Nt(),Ce(r,t)&&we({actual:r,expected:t,message:n,operator:"notDeepEqual",stackStartFn:e})};U.deepStrictEqual=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");Ce===void 0&&Nt(),Qn(r,t)||we({actual:r,expected:t,message:n,operator:"deepStrictEqual",stackStartFn:e})};U.notDeepStrictEqual=gc;function gc(e,r,t){if(arguments.length<2)throw new ze("actual","expected");Ce===void 0&&Nt(),Qn(e,r)&&we({actual:e,expected:r,message:t,operator:"notDeepStrictEqual",stackStartFn:gc})}U.strictEqual=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");yc(r,t)||we({actual:r,expected:t,message:n,operator:"strictEqual",stackStartFn:e})};U.notStrictEqual=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");yc(r,t)&&we({actual:r,expected:t,message:n,operator:"notStrictEqual",stackStartFn:e})};var hc=og(function e(r,t,n){var i=this;lg(this,e),t.forEach(function(a){a in r&&(n!==void 0&&typeof n[a]=="string"&&Xn(r[a])&&Jn(r[a],n[a])?i[a]=n[a]:i[a]=r[a])})});function vg(e,r,t,n,i,a){if(!(t in e)||!Qn(e[t],r[t])){if(!n){var o=new hc(e,i),f=new hc(r,i,e),s=new Ze({actual:o,expected:f,operator:"deepStrictEqual",stackStartFn:a});throw s.actual=e,s.expected=r,s.operator=a.name,s}we({actual:e,expected:r,message:n,operator:a.name,stackStartFn:a})}}function bc(e,r,t,n){if(typeof r!="function"){if(Xn(r))return Jn(r,e);if(arguments.length===2)throw new Hr("expected",["Function","RegExp"],r);if(be(e)!=="object"||e===null){var i=new Ze({actual:e,expected:r,message:t,operator:"deepStrictEqual",stackStartFn:n});throw i.operator=n.name,i}var a=Object.keys(r);if(r instanceof Error)a.push("name","message");else if(a.length===0)throw new cg("error",r,"may not be an empty object");return Ce===void 0&&Nt(),a.forEach(function(o){typeof e[o]=="string"&&Xn(r[o])&&Jn(r[o],e[o])||vg(e,r,o,t,a,n)}),!0}return r.prototype!==void 0&&e instanceof r?!0:Error.isPrototypeOf(r)?!1:r.call({},e)===!0}function wc(e){if(typeof e!="function")throw new Hr("fn","Function",e);try{e()}catch(r){return r}return ei}function pc(e){return dg(e)||e!==null&&be(e)==="object"&&typeof e.then=="function"&&typeof e.catch=="function"}function Ec(e){return Promise.resolve().then(function(){var r;if(typeof e=="function"){if(r=e(),!pc(r))throw new hg("instance of Promise","promiseFn",r)}else if(pc(e))r=e;else throw new Hr("promiseFn",["Function","Promise"],e);return Promise.resolve().then(function(){return r}).then(function(){return ei}).catch(function(t){return t})})}function mc(e,r,t,n){if(typeof t=="string"){if(arguments.length===4)throw new Hr("error",["Object","Error","Function","RegExp"],t);if(be(r)==="object"&&r!==null){if(r.message===t)throw new sc("error/message",'The error message "'.concat(r.message,'" is identical to the message.'))}else if(r===t)throw new sc("error/message",'The error "'.concat(r,'" is identical to the message.'));n=t,t=void 0}else if(t!=null&&be(t)!=="object"&&typeof t!="function")throw new Hr("error",["Object","Error","Function","RegExp"],t);if(r===ei){var i="";t&&t.name&&(i+=" (".concat(t.name,")")),i+=n?": ".concat(n):".";var a=e.name==="rejects"?"rejection":"exception";we({actual:void 0,expected:t,operator:e.name,message:"Missing expected ".concat(a).concat(i),stackStartFn:e})}if(t&&!bc(r,t,n,e))throw r}function Sc(e,r,t,n){if(r!==ei){if(typeof t=="string"&&(n=t,t=void 0),!t||bc(r,t)){var i=n?": ".concat(n):".",a=e.name==="doesNotReject"?"rejection":"exception";we({actual:r,expected:t,operator:e.name,message:"Got unwanted ".concat(a).concat(i,`
-`)+'Actual message: "'.concat(r&&r.message,'"'),stackStartFn:e})}throw r}}U.throws=function e(r){for(var t=arguments.length,n=new Array(t>1?t-1:0),i=1;i<t;i++)n[i-1]=arguments[i];mc.apply(void 0,[e,wc(r)].concat(n))};U.rejects=function e(r){for(var t=arguments.length,n=new Array(t>1?t-1:0),i=1;i<t;i++)n[i-1]=arguments[i];return Ec(r).then(function(a){return mc.apply(void 0,[e,a].concat(n))})};U.doesNotThrow=function e(r){for(var t=arguments.length,n=new Array(t>1?t-1:0),i=1;i<t;i++)n[i-1]=arguments[i];Sc.apply(void 0,[e,wc(r)].concat(n))};U.doesNotReject=function e(r){for(var t=arguments.length,n=new Array(t>1?t-1:0),i=1;i<t;i++)n[i-1]=arguments[i];return Ec(r).then(function(a){return Sc.apply(void 0,[e,a].concat(n))})};U.ifError=function e(r){if(r!=null){var t="ifError got unwanted exception: ";be(r)==="object"&&typeof r.message=="string"?r.message.length===0&&r.constructor?t+=r.constructor.name:t+=r.message:t+=Kn(r);var n=new Ze({actual:r,expected:null,operator:"ifError",message:t,stackStartFn:e}),i=r.stack;if(typeof i=="string"){var a=i.split(`
-`);a.shift();for(var o=n.stack.split(`
-`),f=0;f<a.length;f++){var s=o.indexOf(a[f]);if(s!==-1){o=o.slice(0,s);break}}n.stack="".concat(o.join(`
-`),`
-`).concat(a.join(`
-`))}throw n}};function xc(e,r,t,n,i){if(!Xn(r))throw new Hr("regexp","RegExp",r);var a=i==="match";if(typeof e!="string"||Jn(r,e)!==a){if(t instanceof Error)throw t;var o=!t;t=t||(typeof e!="string"?'The "string" argument must be of type string. Received type '+"".concat(be(e)," (").concat(Kn(e),")"):(a?"The input did not match the regular expression ":"The input was expected to not match the regular expression ")+"".concat(Kn(r),`. Input:
-
-`).concat(Kn(e),`
-`));var f=new Ze({actual:e,expected:r,message:t,operator:i,stackStartFn:n});throw f.generatedMessage=o,f}}U.match=function e(r,t,n){xc(r,t,n,e,"match")};U.doesNotMatch=function e(r,t,n){xc(r,t,n,e,"doesNotMatch")};function Ac(){for(var e=arguments.length,r=new Array(e),t=0;t<e;t++)r[t]=arguments[t];_c.apply(void 0,[Ac,r.length].concat(r))}U.strict=yg(Ac,U,{equal:U.strictEqual,deepEqual:U.deepStrictEqual,notEqual:U.notStrictEqual,notDeepEqual:U.notDeepStrictEqual});U.strict.strict=U.strict});var Ic=y(ri=>{"use strict";ri.byteLength=gg;ri.toByteArray=wg;ri.fromByteArray=Sg;var xe=[],se=[],_g=typeof Uint8Array<"u"?Uint8Array:Array,Ba="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";for(fr=0,Oc=Ba.length;fr<Oc;++fr)xe[fr]=Ba[fr],se[Ba.charCodeAt(fr)]=fr;var fr,Oc;se[45]=62;se[95]=63;function Tc(e){var r=e.length;if(r%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var t=e.indexOf("=");t===-1&&(t=r);var n=t===r?0:4-t%4;return[t,n]}function gg(e){var r=Tc(e),t=r[0],n=r[1];return(t+n)*3/4-n}function bg(e,r,t){return(r+t)*3/4-t}function wg(e){var r,t=Tc(e),n=t[0],i=t[1],a=new _g(bg(e,n,i)),o=0,f=i>0?n-4:n,s;for(s=0;s<f;s+=4)r=se[e.charCodeAt(s)]<<18|se[e.charCodeAt(s+1)]<<12|se[e.charCodeAt(s+2)]<<6|se[e.charCodeAt(s+3)],a[o++]=r>>16&255,a[o++]=r>>8&255,a[o++]=r&255;return i===2&&(r=se[e.charCodeAt(s)]<<2|se[e.charCodeAt(s+1)]>>4,a[o++]=r&255),i===1&&(r=se[e.charCodeAt(s)]<<10|se[e.charCodeAt(s+1)]<<4|se[e.charCodeAt(s+2)]>>2,a[o++]=r>>8&255,a[o++]=r&255),a}function Eg(e){return xe[e>>18&63]+xe[e>>12&63]+xe[e>>6&63]+xe[e&63]}function mg(e,r,t){for(var n,i=[],a=r;a<t;a+=3)n=(e[a]<<16&16711680)+(e[a+1]<<8&65280)+(e[a+2]&255),i.push(Eg(n));return i.join("")}function Sg(e){for(var r,t=e.length,n=t%3,i=[],a=16383,o=0,f=t-n;o<f;o+=a)i.push(mg(e,o,o+a>f?f:o+a));return n===1?(r=e[t-1],i.push(xe[r>>2]+xe[r<<4&63]+"==")):n===2&&(r=(e[t-2]<<8)+e[t-1],i.push(xe[r>>10]+xe[r>>4&63]+xe[r<<2&63]+"=")),i.join("")}});var Nc=y(qa=>{qa.read=function(e,r,t,n,i){var a,o,f=i*8-n-1,s=(1<<f)-1,u=s>>1,l=-7,c=t?i-1:0,p=t?-1:1,h=e[r+c];for(c+=p,a=h&(1<<-l)-1,h>>=-l,l+=f;l>0;a=a*256+e[r+c],c+=p,l-=8);for(o=a&(1<<-l)-1,a>>=-l,l+=n;l>0;o=o*256+e[r+c],c+=p,l-=8);if(a===0)a=1-u;else{if(a===s)return o?NaN:(h?-1:1)*(1/0);o=o+Math.pow(2,n),a=a-u}return(h?-1:1)*o*Math.pow(2,a-n)};qa.write=function(e,r,t,n,i,a){var o,f,s,u=a*8-i-1,l=(1<<u)-1,c=l>>1,p=i===23?Math.pow(2,-24)-Math.pow(2,-77):0,h=n?0:a-1,v=n?1:-1,_=r<0||r===0&&1/r<0?1:0;for(r=Math.abs(r),isNaN(r)||r===1/0?(f=isNaN(r)?1:0,o=l):(o=Math.floor(Math.log(r)/Math.LN2),r*(s=Math.pow(2,-o))<1&&(o--,s*=2),o+c>=1?r+=p/s:r+=p*Math.pow(2,1-c),r*s>=2&&(o++,s/=2),o+c>=l?(f=0,o=l):o+c>=1?(f=(r*s-1)*Math.pow(2,i),o=o+c):(f=r*Math.pow(2,c-1)*Math.pow(2,i),o=0));i>=8;e[t+h]=f&255,h+=v,f/=256,i-=8);for(o=o<<i|f,u+=i;u>0;e[t+h]=o&255,h+=v,o/=256,u-=8);e[t+h-v]|=_*128}});var lr=y($r=>{"use strict";var Ua=Ic(),Gr=Nc(),Lc=typeof Symbol=="function"&&typeof Symbol.for=="function"?Symbol.for("nodejs.util.inspect.custom"):null;$r.Buffer=d;$r.SlowBuffer=Ig;$r.INSPECT_MAX_BYTES=50;var ti=2147483647;$r.kMaxLength=ti;d.TYPED_ARRAY_SUPPORT=xg();!d.TYPED_ARRAY_SUPPORT&&typeof console<"u"&&typeof console.error=="function"&&console.error("This browser lacks typed array (Uint8Array) support which is required by `buffer` v5.x. Use `buffer` v4.x if you require old browser support.");function xg(){try{var e=new Uint8Array(1),r={foo:function(){return 42}};return Object.setPrototypeOf(r,Uint8Array.prototype),Object.setPrototypeOf(e,r),e.foo()===42}catch{return!1}}Object.defineProperty(d.prototype,"parent",{enumerable:!0,get:function(){if(d.isBuffer(this))return this.buffer}});Object.defineProperty(d.prototype,"offset",{enumerable:!0,get:function(){if(d.isBuffer(this))return this.byteOffset}});function Pe(e){if(e>ti)throw new RangeError('The value "'+e+'" is invalid for option "size"');var r=new Uint8Array(e);return Object.setPrototypeOf(r,d.prototype),r}function d(e,r,t){if(typeof e=="number"){if(typeof r=="string")throw new TypeError('The "string" argument must be of type string. Received type number');return Wa(e)}return Pc(e,r,t)}d.poolSize=8192;function Pc(e,r,t){if(typeof e=="string")return Rg(e,r);if(ArrayBuffer.isView(e))return Og(e);if(e==null)throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof e);if(Ae(e,ArrayBuffer)||e&&Ae(e.buffer,ArrayBuffer)||typeof SharedArrayBuffer<"u"&&(Ae(e,SharedArrayBuffer)||e&&Ae(e.buffer,SharedArrayBuffer)))return za(e,r,t);if(typeof e=="number")throw new TypeError('The "value" argument must not be of type number. Received type number');var n=e.valueOf&&e.valueOf();if(n!=null&&n!==e)return d.from(n,r,t);var i=Tg(e);if(i)return i;if(typeof Symbol<"u"&&Symbol.toPrimitive!=null&&typeof e[Symbol.toPrimitive]=="function")return d.from(e[Symbol.toPrimitive]("string"),r,t);throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof e)}d.from=function(e,r,t){return Pc(e,r,t)};Object.setPrototypeOf(d.prototype,Uint8Array.prototype);Object.setPrototypeOf(d,Uint8Array);function Dc(e){if(typeof e!="number")throw new TypeError('"size" argument must be of type number');if(e<0)throw new RangeError('The value "'+e+'" is invalid for option "size"')}function Ag(e,r,t){return Dc(e),e<=0?Pe(e):r!==void 0?typeof t=="string"?Pe(e).fill(r,t):Pe(e).fill(r):Pe(e)}d.alloc=function(e,r,t){return Ag(e,r,t)};function Wa(e){return Dc(e),Pe(e<0?0:Ha(e)|0)}d.allocUnsafe=function(e){return Wa(e)};d.allocUnsafeSlow=function(e){return Wa(e)};function Rg(e,r){if((typeof r!="string"||r==="")&&(r="utf8"),!d.isEncoding(r))throw new TypeError("Unknown encoding: "+r);var t=Mc(e,r)|0,n=Pe(t),i=n.write(e,r);return i!==t&&(n=n.slice(0,i)),n}function Ca(e){for(var r=e.length<0?0:Ha(e.length)|0,t=Pe(r),n=0;n<r;n+=1)t[n]=e[n]&255;return t}function Og(e){if(Ae(e,Uint8Array)){var r=new Uint8Array(e);return za(r.buffer,r.byteOffset,r.byteLength)}return Ca(e)}function za(e,r,t){if(r<0||e.byteLength<r)throw new RangeError('"offset" is outside of buffer bounds');if(e.byteLength<r+(t||0))throw new RangeError('"length" is outside of buffer bounds');var n;return r===void 0&&t===void 0?n=new Uint8Array(e):t===void 0?n=new Uint8Array(e,r):n=new Uint8Array(e,r,t),Object.setPrototypeOf(n,d.prototype),n}function Tg(e){if(d.isBuffer(e)){var r=Ha(e.length)|0,t=Pe(r);return t.length===0||e.copy(t,0,0,r),t}if(e.length!==void 0)return typeof e.length!="number"||Ga(e.length)?Pe(0):Ca(e);if(e.type==="Buffer"&&Array.isArray(e.data))return Ca(e.data)}function Ha(e){if(e>=ti)throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+ti.toString(16)+" bytes");return e|0}function Ig(e){return+e!=e&&(e=0),d.alloc(+e)}d.isBuffer=function(r){return r!=null&&r._isBuffer===!0&&r!==d.prototype};d.compare=function(r,t){if(Ae(r,Uint8Array)&&(r=d.from(r,r.offset,r.byteLength)),Ae(t,Uint8Array)&&(t=d.from(t,t.offset,t.byteLength)),!d.isBuffer(r)||!d.isBuffer(t))throw new TypeError('The "buf1", "buf2" arguments must be one of type Buffer or Uint8Array');if(r===t)return 0;for(var n=r.length,i=t.length,a=0,o=Math.min(n,i);a<o;++a)if(r[a]!==t[a]){n=r[a],i=t[a];break}return n<i?-1:i<n?1:0};d.isEncoding=function(r){switch(String(r).toLowerCase()){case"hex":case"utf8":case"utf-8":case"ascii":case"latin1":case"binary":case"base64":case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return!0;default:return!1}};d.concat=function(r,t){if(!Array.isArray(r))throw new TypeError('"list" argument must be an Array of Buffers');if(r.length===0)return d.alloc(0);var n;if(t===void 0)for(t=0,n=0;n<r.length;++n)t+=r[n].length;var i=d.allocUnsafe(t),a=0;for(n=0;n<r.length;++n){var o=r[n];if(Ae(o,Uint8Array))a+o.length>i.length?d.from(o).copy(i,a):Uint8Array.prototype.set.call(i,o,a);else if(d.isBuffer(o))o.copy(i,a);else throw new TypeError('"list" argument must be an Array of Buffers');a+=o.length}return i};function Mc(e,r){if(d.isBuffer(e))return e.length;if(ArrayBuffer.isView(e)||Ae(e,ArrayBuffer))return e.byteLength;if(typeof e!="string")throw new TypeError('The "string" argument must be one of type string, Buffer, or ArrayBuffer. Received type '+typeof e);var t=e.length,n=arguments.length>2&&arguments[2]===!0;if(!n&&t===0)return 0;for(var i=!1;;)switch(r){case"ascii":case"latin1":case"binary":return t;case"utf8":case"utf-8":return Za(e).length;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return t*2;case"hex":return t>>>1;case"base64":return zc(e).length;default:if(i)return n?-1:Za(e).length;r=(""+r).toLowerCase(),i=!0}}d.byteLength=Mc;function Ng(e,r,t){var n=!1;if((r===void 0||r<0)&&(r=0),r>this.length||((t===void 0||t>this.length)&&(t=this.length),t<=0)||(t>>>=0,r>>>=0,t<=r))return"";for(e||(e="utf8");;)switch(e){case"hex":return Ug(this,r,t);case"utf8":case"utf-8":return Bc(this,r,t);case"ascii":return Bg(this,r,t);case"latin1":case"binary":return qg(this,r,t);case"base64":return Mg(this,r,t);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return Cg(this,r,t);default:if(n)throw new TypeError("Unknown encoding: "+e);e=(e+"").toLowerCase(),n=!0}}d.prototype._isBuffer=!0;function ur(e,r,t){var n=e[r];e[r]=e[t],e[t]=n}d.prototype.swap16=function(){var r=this.length;if(r%2!==0)throw new RangeError("Buffer size must be a multiple of 16-bits");for(var t=0;t<r;t+=2)ur(this,t,t+1);return this};d.prototype.swap32=function(){var r=this.length;if(r%4!==0)throw new RangeError("Buffer size must be a multiple of 32-bits");for(var t=0;t<r;t+=4)ur(this,t,t+3),ur(this,t+1,t+2);return this};d.prototype.swap64=function(){var r=this.length;if(r%8!==0)throw new RangeError("Buffer size must be a multiple of 64-bits");for(var t=0;t<r;t+=8)ur(this,t,t+7),ur(this,t+1,t+6),ur(this,t+2,t+5),ur(this,t+3,t+4);return this};d.prototype.toString=function(){var r=this.length;return r===0?"":arguments.length===0?Bc(this,0,r):Ng.apply(this,arguments)};d.prototype.toLocaleString=d.prototype.toString;d.prototype.equals=function(r){if(!d.isBuffer(r))throw new TypeError("Argument must be a Buffer");return this===r?!0:d.compare(this,r)===0};d.prototype.inspect=function(){var r="",t=$r.INSPECT_MAX_BYTES;return r=this.toString("hex",0,t).replace(/(.{2})/g,"$1 ").trim(),this.length>t&&(r+=" ... "),"<Buffer "+r+">"};Lc&&(d.prototype[Lc]=d.prototype.inspect);d.prototype.compare=function(r,t,n,i,a){if(Ae(r,Uint8Array)&&(r=d.from(r,r.offset,r.byteLength)),!d.isBuffer(r))throw new TypeError('The "target" argument must be one of type Buffer or Uint8Array. Received type '+typeof r);if(t===void 0&&(t=0),n===void 0&&(n=r?r.length:0),i===void 0&&(i=0),a===void 0&&(a=this.length),t<0||n>r.length||i<0||a>this.length)throw new RangeError("out of range index");if(i>=a&&t>=n)return 0;if(i>=a)return-1;if(t>=n)return 1;if(t>>>=0,n>>>=0,i>>>=0,a>>>=0,this===r)return 0;for(var o=a-i,f=n-t,s=Math.min(o,f),u=this.slice(i,a),l=r.slice(t,n),c=0;c<s;++c)if(u[c]!==l[c]){o=u[c],f=l[c];break}return o<f?-1:f<o?1:0};function jc(e,r,t,n,i){if(e.length===0)return-1;if(typeof t=="string"?(n=t,t=0):t>2147483647?t=2147483647:t<-2147483648&&(t=-2147483648),t=+t,Ga(t)&&(t=i?0:e.length-1),t<0&&(t=e.length+t),t>=e.length){if(i)return-1;t=e.length-1}else if(t<0)if(i)t=0;else return-1;if(typeof r=="string"&&(r=d.from(r,n)),d.isBuffer(r))return r.length===0?-1:Fc(e,r,t,n,i);if(typeof r=="number")return r=r&255,typeof Uint8Array.prototype.indexOf=="function"?i?Uint8Array.prototype.indexOf.call(e,r,t):Uint8Array.prototype.lastIndexOf.call(e,r,t):Fc(e,[r],t,n,i);throw new TypeError("val must be string, number or Buffer")}function Fc(e,r,t,n,i){var a=1,o=e.length,f=r.length;if(n!==void 0&&(n=String(n).toLowerCase(),n==="ucs2"||n==="ucs-2"||n==="utf16le"||n==="utf-16le")){if(e.length<2||r.length<2)return-1;a=2,o/=2,f/=2,t/=2}function s(h,v){return a===1?h[v]:h.readUInt16BE(v*a)}var u;if(i){var l=-1;for(u=t;u<o;u++)if(s(e,u)===s(r,l===-1?0:u-l)){if(l===-1&&(l=u),u-l+1===f)return l*a}else l!==-1&&(u-=u-l),l=-1}else for(t+f>o&&(t=o-f),u=t;u>=0;u--){for(var c=!0,p=0;p<f;p++)if(s(e,u+p)!==s(r,p)){c=!1;break}if(c)return u}return-1}d.prototype.includes=function(r,t,n){return this.indexOf(r,t,n)!==-1};d.prototype.indexOf=function(r,t,n){return jc(this,r,t,n,!0)};d.prototype.lastIndexOf=function(r,t,n){return jc(this,r,t,n,!1)};function Lg(e,r,t,n){t=Number(t)||0;var i=e.length-t;n?(n=Number(n),n>i&&(n=i)):n=i;var a=r.length;n>a/2&&(n=a/2);for(var o=0;o<n;++o){var f=parseInt(r.substr(o*2,2),16);if(Ga(f))return o;e[t+o]=f}return o}function Fg(e,r,t,n){return ni(Za(r,e.length-t),e,t,n)}function kg(e,r,t,n){return ni(Wg(r),e,t,n)}function Pg(e,r,t,n){return ni(zc(r),e,t,n)}function Dg(e,r,t,n){return ni(Hg(r,e.length-t),e,t,n)}d.prototype.write=function(r,t,n,i){if(t===void 0)i="utf8",n=this.length,t=0;else if(n===void 0&&typeof t=="string")i=t,n=this.length,t=0;else if(isFinite(t))t=t>>>0,isFinite(n)?(n=n>>>0,i===void 0&&(i="utf8")):(i=n,n=void 0);else throw new Error("Buffer.write(string, encoding, offset[, length]) is no longer supported");var a=this.length-t;if((n===void 0||n>a)&&(n=a),r.length>0&&(n<0||t<0)||t>this.length)throw new RangeError("Attempt to write outside buffer bounds");i||(i="utf8");for(var o=!1;;)switch(i){case"hex":return Lg(this,r,t,n);case"utf8":case"utf-8":return Fg(this,r,t,n);case"ascii":case"latin1":case"binary":return kg(this,r,t,n);case"base64":return Pg(this,r,t,n);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return Dg(this,r,t,n);default:if(o)throw new TypeError("Unknown encoding: "+i);i=(""+i).toLowerCase(),o=!0}};d.prototype.toJSON=function(){return{type:"Buffer",data:Array.prototype.slice.call(this._arr||this,0)}};function Mg(e,r,t){return r===0&&t===e.length?Ua.fromByteArray(e):Ua.fromByteArray(e.slice(r,t))}function Bc(e,r,t){t=Math.min(e.length,t);for(var n=[],i=r;i<t;){var a=e[i],o=null,f=a>239?4:a>223?3:a>191?2:1;if(i+f<=t){var s,u,l,c;switch(f){case 1:a<128&&(o=a);break;case 2:s=e[i+1],(s&192)===128&&(c=(a&31)<<6|s&63,c>127&&(o=c));break;case 3:s=e[i+1],u=e[i+2],(s&192)===128&&(u&192)===128&&(c=(a&15)<<12|(s&63)<<6|u&63,c>2047&&(c<55296||c>57343)&&(o=c));break;case 4:s=e[i+1],u=e[i+2],l=e[i+3],(s&192)===128&&(u&192)===128&&(l&192)===128&&(c=(a&15)<<18|(s&63)<<12|(u&63)<<6|l&63,c>65535&&c<1114112&&(o=c))}}o===null?(o=65533,f=1):o>65535&&(o-=65536,n.push(o>>>10&1023|55296),o=56320|o&1023),n.push(o),i+=f}return jg(n)}var kc=4096;function jg(e){var r=e.length;if(r<=kc)return String.fromCharCode.apply(String,e);for(var t="",n=0;n<r;)t+=String.fromCharCode.apply(String,e.slice(n,n+=kc));return t}function Bg(e,r,t){var n="";t=Math.min(e.length,t);for(var i=r;i<t;++i)n+=String.fromCharCode(e[i]&127);return n}function qg(e,r,t){var n="";t=Math.min(e.length,t);for(var i=r;i<t;++i)n+=String.fromCharCode(e[i]);return n}function Ug(e,r,t){var n=e.length;(!r||r<0)&&(r=0),(!t||t<0||t>n)&&(t=n);for(var i="",a=r;a<t;++a)i+=Gg[e[a]];return i}function Cg(e,r,t){for(var n=e.slice(r,t),i="",a=0;a<n.length-1;a+=2)i+=String.fromCharCode(n[a]+n[a+1]*256);return i}d.prototype.slice=function(r,t){var n=this.length;r=~~r,t=t===void 0?n:~~t,r<0?(r+=n,r<0&&(r=0)):r>n&&(r=n),t<0?(t+=n,t<0&&(t=0)):t>n&&(t=n),t<r&&(t=r);var i=this.subarray(r,t);return Object.setPrototypeOf(i,d.prototype),i};function $(e,r,t){if(e%1!==0||e<0)throw new RangeError("offset is not uint");if(e+r>t)throw new RangeError("Trying to access beyond buffer length")}d.prototype.readUintLE=d.prototype.readUIntLE=function(r,t,n){r=r>>>0,t=t>>>0,n||$(r,t,this.length);for(var i=this[r],a=1,o=0;++o<t&&(a*=256);)i+=this[r+o]*a;return i};d.prototype.readUintBE=d.prototype.readUIntBE=function(r,t,n){r=r>>>0,t=t>>>0,n||$(r,t,this.length);for(var i=this[r+--t],a=1;t>0&&(a*=256);)i+=this[r+--t]*a;return i};d.prototype.readUint8=d.prototype.readUInt8=function(r,t){return r=r>>>0,t||$(r,1,this.length),this[r]};d.prototype.readUint16LE=d.prototype.readUInt16LE=function(r,t){return r=r>>>0,t||$(r,2,this.length),this[r]|this[r+1]<<8};d.prototype.readUint16BE=d.prototype.readUInt16BE=function(r,t){return r=r>>>0,t||$(r,2,this.length),this[r]<<8|this[r+1]};d.prototype.readUint32LE=d.prototype.readUInt32LE=function(r,t){return r=r>>>0,t||$(r,4,this.length),(this[r]|this[r+1]<<8|this[r+2]<<16)+this[r+3]*16777216};d.prototype.readUint32BE=d.prototype.readUInt32BE=function(r,t){return r=r>>>0,t||$(r,4,this.length),this[r]*16777216+(this[r+1]<<16|this[r+2]<<8|this[r+3])};d.prototype.readIntLE=function(r,t,n){r=r>>>0,t=t>>>0,n||$(r,t,this.length);for(var i=this[r],a=1,o=0;++o<t&&(a*=256);)i+=this[r+o]*a;return a*=128,i>=a&&(i-=Math.pow(2,8*t)),i};d.prototype.readIntBE=function(r,t,n){r=r>>>0,t=t>>>0,n||$(r,t,this.length);for(var i=t,a=1,o=this[r+--i];i>0&&(a*=256);)o+=this[r+--i]*a;return a*=128,o>=a&&(o-=Math.pow(2,8*t)),o};d.prototype.readInt8=function(r,t){return r=r>>>0,t||$(r,1,this.length),this[r]&128?(255-this[r]+1)*-1:this[r]};d.prototype.readInt16LE=function(r,t){r=r>>>0,t||$(r,2,this.length);var n=this[r]|this[r+1]<<8;return n&32768?n|4294901760:n};d.prototype.readInt16BE=function(r,t){r=r>>>0,t||$(r,2,this.length);var n=this[r+1]|this[r]<<8;return n&32768?n|4294901760:n};d.prototype.readInt32LE=function(r,t){return r=r>>>0,t||$(r,4,this.length),this[r]|this[r+1]<<8|this[r+2]<<16|this[r+3]<<24};d.prototype.readInt32BE=function(r,t){return r=r>>>0,t||$(r,4,this.length),this[r]<<24|this[r+1]<<16|this[r+2]<<8|this[r+3]};d.prototype.readFloatLE=function(r,t){return r=r>>>0,t||$(r,4,this.length),Gr.read(this,r,!0,23,4)};d.prototype.readFloatBE=function(r,t){return r=r>>>0,t||$(r,4,this.length),Gr.read(this,r,!1,23,4)};d.prototype.readDoubleLE=function(r,t){return r=r>>>0,t||$(r,8,this.length),Gr.read(this,r,!0,52,8)};d.prototype.readDoubleBE=function(r,t){return r=r>>>0,t||$(r,8,this.length),Gr.read(this,r,!1,52,8)};function ne(e,r,t,n,i,a){if(!d.isBuffer(e))throw new TypeError('"buffer" argument must be a Buffer instance');if(r>i||r<a)throw new RangeError('"value" argument is out of bounds');if(t+n>e.length)throw new RangeError("Index out of range")}d.prototype.writeUintLE=d.prototype.writeUIntLE=function(r,t,n,i){if(r=+r,t=t>>>0,n=n>>>0,!i){var a=Math.pow(2,8*n)-1;ne(this,r,t,n,a,0)}var o=1,f=0;for(this[t]=r&255;++f<n&&(o*=256);)this[t+f]=r/o&255;return t+n};d.prototype.writeUintBE=d.prototype.writeUIntBE=function(r,t,n,i){if(r=+r,t=t>>>0,n=n>>>0,!i){var a=Math.pow(2,8*n)-1;ne(this,r,t,n,a,0)}var o=n-1,f=1;for(this[t+o]=r&255;--o>=0&&(f*=256);)this[t+o]=r/f&255;return t+n};d.prototype.writeUint8=d.prototype.writeUInt8=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,1,255,0),this[t]=r&255,t+1};d.prototype.writeUint16LE=d.prototype.writeUInt16LE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,2,65535,0),this[t]=r&255,this[t+1]=r>>>8,t+2};d.prototype.writeUint16BE=d.prototype.writeUInt16BE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,2,65535,0),this[t]=r>>>8,this[t+1]=r&255,t+2};d.prototype.writeUint32LE=d.prototype.writeUInt32LE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,4,4294967295,0),this[t+3]=r>>>24,this[t+2]=r>>>16,this[t+1]=r>>>8,this[t]=r&255,t+4};d.prototype.writeUint32BE=d.prototype.writeUInt32BE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,4,4294967295,0),this[t]=r>>>24,this[t+1]=r>>>16,this[t+2]=r>>>8,this[t+3]=r&255,t+4};d.prototype.writeIntLE=function(r,t,n,i){if(r=+r,t=t>>>0,!i){var a=Math.pow(2,8*n-1);ne(this,r,t,n,a-1,-a)}var o=0,f=1,s=0;for(this[t]=r&255;++o<n&&(f*=256);)r<0&&s===0&&this[t+o-1]!==0&&(s=1),this[t+o]=(r/f>>0)-s&255;return t+n};d.prototype.writeIntBE=function(r,t,n,i){if(r=+r,t=t>>>0,!i){var a=Math.pow(2,8*n-1);ne(this,r,t,n,a-1,-a)}var o=n-1,f=1,s=0;for(this[t+o]=r&255;--o>=0&&(f*=256);)r<0&&s===0&&this[t+o+1]!==0&&(s=1),this[t+o]=(r/f>>0)-s&255;return t+n};d.prototype.writeInt8=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,1,127,-128),r<0&&(r=255+r+1),this[t]=r&255,t+1};d.prototype.writeInt16LE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,2,32767,-32768),this[t]=r&255,this[t+1]=r>>>8,t+2};d.prototype.writeInt16BE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,2,32767,-32768),this[t]=r>>>8,this[t+1]=r&255,t+2};d.prototype.writeInt32LE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,4,2147483647,-2147483648),this[t]=r&255,this[t+1]=r>>>8,this[t+2]=r>>>16,this[t+3]=r>>>24,t+4};d.prototype.writeInt32BE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,4,2147483647,-2147483648),r<0&&(r=4294967295+r+1),this[t]=r>>>24,this[t+1]=r>>>16,this[t+2]=r>>>8,this[t+3]=r&255,t+4};function qc(e,r,t,n,i,a){if(t+n>e.length)throw new RangeError("Index out of range");if(t<0)throw new RangeError("Index out of range")}function Uc(e,r,t,n,i){return r=+r,t=t>>>0,i||qc(e,r,t,4,34028234663852886e22,-34028234663852886e22),Gr.write(e,r,t,n,23,4),t+4}d.prototype.writeFloatLE=function(r,t,n){return Uc(this,r,t,!0,n)};d.prototype.writeFloatBE=function(r,t,n){return Uc(this,r,t,!1,n)};function Cc(e,r,t,n,i){return r=+r,t=t>>>0,i||qc(e,r,t,8,17976931348623157e292,-17976931348623157e292),Gr.write(e,r,t,n,52,8),t+8}d.prototype.writeDoubleLE=function(r,t,n){return Cc(this,r,t,!0,n)};d.prototype.writeDoubleBE=function(r,t,n){return Cc(this,r,t,!1,n)};d.prototype.copy=function(r,t,n,i){if(!d.isBuffer(r))throw new TypeError("argument should be a Buffer");if(n||(n=0),!i&&i!==0&&(i=this.length),t>=r.length&&(t=r.length),t||(t=0),i>0&&i<n&&(i=n),i===n||r.length===0||this.length===0)return 0;if(t<0)throw new RangeError("targetStart out of bounds");if(n<0||n>=this.length)throw new RangeError("Index out of range");if(i<0)throw new RangeError("sourceEnd out of bounds");i>this.length&&(i=this.length),r.length-t<i-n&&(i=r.length-t+n);var a=i-n;return this===r&&typeof Uint8Array.prototype.copyWithin=="function"?this.copyWithin(t,n,i):Uint8Array.prototype.set.call(r,this.subarray(n,i),t),a};d.prototype.fill=function(r,t,n,i){if(typeof r=="string"){if(typeof t=="string"?(i=t,t=0,n=this.length):typeof n=="string"&&(i=n,n=this.length),i!==void 0&&typeof i!="string")throw new TypeError("encoding must be a string");if(typeof i=="string"&&!d.isEncoding(i))throw new TypeError("Unknown encoding: "+i);if(r.length===1){var a=r.charCodeAt(0);(i==="utf8"&&a<128||i==="latin1")&&(r=a)}}else typeof r=="number"?r=r&255:typeof r=="boolean"&&(r=Number(r));if(t<0||this.length<t||this.length<n)throw new RangeError("Out of range index");if(n<=t)return this;t=t>>>0,n=n===void 0?this.length:n>>>0,r||(r=0);var o;if(typeof r=="number")for(o=t;o<n;++o)this[o]=r;else{var f=d.isBuffer(r)?r:d.from(r,i),s=f.length;if(s===0)throw new TypeError('The value "'+r+'" is invalid for argument "value"');for(o=0;o<n-t;++o)this[o+t]=f[o%s]}return this};var zg=/[^+/0-9A-Za-z-_]/g;function Zg(e){if(e=e.split("=")[0],e=e.trim().replace(zg,""),e.length<2)return"";for(;e.length%4!==0;)e=e+"=";return e}function Za(e,r){r=r||1/0;for(var t,n=e.length,i=null,a=[],o=0;o<n;++o){if(t=e.charCodeAt(o),t>55295&&t<57344){if(!i){if(t>56319){(r-=3)>-1&&a.push(239,191,189);continue}else if(o+1===n){(r-=3)>-1&&a.push(239,191,189);continue}i=t;continue}if(t<56320){(r-=3)>-1&&a.push(239,191,189),i=t;continue}t=(i-55296<<10|t-56320)+65536}else i&&(r-=3)>-1&&a.push(239,191,189);if(i=null,t<128){if((r-=1)<0)break;a.push(t)}else if(t<2048){if((r-=2)<0)break;a.push(t>>6|192,t&63|128)}else if(t<65536){if((r-=3)<0)break;a.push(t>>12|224,t>>6&63|128,t&63|128)}else if(t<1114112){if((r-=4)<0)break;a.push(t>>18|240,t>>12&63|128,t>>6&63|128,t&63|128)}else throw new Error("Invalid code point")}return a}function Wg(e){for(var r=[],t=0;t<e.length;++t)r.push(e.charCodeAt(t)&255);return r}function Hg(e,r){for(var t,n,i,a=[],o=0;o<e.length&&!((r-=2)<0);++o)t=e.charCodeAt(o),n=t>>8,i=t%256,a.push(i),a.push(n);return a}function zc(e){return Ua.toByteArray(Zg(e))}function ni(e,r,t,n){for(var i=0;i<n&&!(i+t>=r.length||i>=e.length);++i)r[i+t]=e[i];return i}function Ae(e,r){return e instanceof r||e!=null&&e.constructor!=null&&e.constructor.name!=null&&e.constructor.name===r.name}function Ga(e){return e!==e}var Gg=(function(){for(var e="0123456789abcdef",r=new Array(256),t=0;t<16;++t)for(var n=t*16,i=0;i<16;++i)r[n+i]=e[t]+e[i];return r})()});var oi=y((sS,$a)=>{"use strict";var Vr=typeof Reflect=="object"?Reflect:null,Zc=Vr&&typeof Vr.apply=="function"?Vr.apply:function(r,t,n){return Function.prototype.apply.call(r,t,n)},ii;Vr&&typeof Vr.ownKeys=="function"?ii=Vr.ownKeys:Object.getOwnPropertySymbols?ii=function(r){return Object.getOwnPropertyNames(r).concat(Object.getOwnPropertySymbols(r))}:ii=function(r){return Object.getOwnPropertyNames(r)};function $g(e){console&&console.warn&&console.warn(e)}var Hc=Number.isNaN||function(r){return r!==r};function q(){q.init.call(this)}$a.exports=q;$a.exports.once=Xg;q.EventEmitter=q;q.prototype._events=void 0;q.prototype._eventsCount=0;q.prototype._maxListeners=void 0;var Wc=10;function ai(e){if(typeof e!="function")throw new TypeError('The "listener" argument must be of type Function. Received type '+typeof e)}Object.defineProperty(q,"defaultMaxListeners",{enumerable:!0,get:function(){return Wc},set:function(e){if(typeof e!="number"||e<0||Hc(e))throw new RangeError('The value of "defaultMaxListeners" is out of range. It must be a non-negative number. Received '+e+".");Wc=e}});q.init=function(){(this._events===void 0||this._events===Object.getPrototypeOf(this)._events)&&(this._events=Object.create(null),this._eventsCount=0),this._maxListeners=this._maxListeners||void 0};q.prototype.setMaxListeners=function(r){if(typeof r!="number"||r<0||Hc(r))throw new RangeError('The value of "n" is out of range. It must be a non-negative number. Received '+r+".");return this._maxListeners=r,this};function Gc(e){return e._maxListeners===void 0?q.defaultMaxListeners:e._maxListeners}q.prototype.getMaxListeners=function(){return Gc(this)};q.prototype.emit=function(r){for(var t=[],n=1;n<arguments.length;n++)t.push(arguments[n]);var i=r==="error",a=this._events;if(a!==void 0)i=i&&a.error===void 0;else if(!i)return!1;if(i){var o;if(t.length>0&&(o=t[0]),o instanceof Error)throw o;var f=new Error("Unhandled error."+(o?" ("+o.message+")":""));throw f.context=o,f}var s=a[r];if(s===void 0)return!1;if(typeof s=="function")Zc(s,this,t);else for(var u=s.length,l=Xc(s,u),n=0;n<u;++n)Zc(l[n],this,t);return!0};function $c(e,r,t,n){var i,a,o;if(ai(t),a=e._events,a===void 0?(a=e._events=Object.create(null),e._eventsCount=0):(a.newListener!==void 0&&(e.emit("newListener",r,t.listener?t.listener:t),a=e._events),o=a[r]),o===void 0)o=a[r]=t,++e._eventsCount;else if(typeof o=="function"?o=a[r]=n?[t,o]:[o,t]:n?o.unshift(t):o.push(t),i=Gc(e),i>0&&o.length>i&&!o.warned){o.warned=!0;var f=new Error("Possible EventEmitter memory leak detected. "+o.length+" "+String(r)+" listeners added. Use emitter.setMaxListeners() to increase limit");f.name="MaxListenersExceededWarning",f.emitter=e,f.type=r,f.count=o.length,$g(f)}return e}q.prototype.addListener=function(r,t){return $c(this,r,t,!1)};q.prototype.on=q.prototype.addListener;q.prototype.prependListener=function(r,t){return $c(this,r,t,!0)};function Vg(){if(!this.fired)return this.target.removeListener(this.type,this.wrapFn),this.fired=!0,arguments.length===0?this.listener.call(this.target):this.listener.apply(this.target,arguments)}function Vc(e,r,t){var n={fired:!1,wrapFn:void 0,target:e,type:r,listener:t},i=Vg.bind(n);return i.listener=t,n.wrapFn=i,i}q.prototype.once=function(r,t){return ai(t),this.on(r,Vc(this,r,t)),this};q.prototype.prependOnceListener=function(r,t){return ai(t),this.prependListener(r,Vc(this,r,t)),this};q.prototype.removeListener=function(r,t){var n,i,a,o,f;if(ai(t),i=this._events,i===void 0)return this;if(n=i[r],n===void 0)return this;if(n===t||n.listener===t)--this._eventsCount===0?this._events=Object.create(null):(delete i[r],i.removeListener&&this.emit("removeListener",r,n.listener||t));else if(typeof n!="function"){for(a=-1,o=n.length-1;o>=0;o--)if(n[o]===t||n[o].listener===t){f=n[o].listener,a=o;break}if(a<0)return this;a===0?n.shift():Yg(n,a),n.length===1&&(i[r]=n[0]),i.removeListener!==void 0&&this.emit("removeListener",r,f||t)}return this};q.prototype.off=q.prototype.removeListener;q.prototype.removeAllListeners=function(r){var t,n,i;if(n=this._events,n===void 0)return this;if(n.removeListener===void 0)return arguments.length===0?(this._events=Object.create(null),this._eventsCount=0):n[r]!==void 0&&(--this._eventsCount===0?this._events=Object.create(null):delete n[r]),this;if(arguments.length===0){var a=Object.keys(n),o;for(i=0;i<a.length;++i)o=a[i],o!=="removeListener"&&this.removeAllListeners(o);return this.removeAllListeners("removeListener"),this._events=Object.create(null),this._eventsCount=0,this}if(t=n[r],typeof t=="function")this.removeListener(r,t);else if(t!==void 0)for(i=t.length-1;i>=0;i--)this.removeListener(r,t[i]);return this};function Yc(e,r,t){var n=e._events;if(n===void 0)return[];var i=n[r];return i===void 0?[]:typeof i=="function"?t?[i.listener||i]:[i]:t?Kg(i):Xc(i,i.length)}q.prototype.listeners=function(r){return Yc(this,r,!0)};q.prototype.rawListeners=function(r){return Yc(this,r,!1)};q.listenerCount=function(e,r){return typeof e.listenerCount=="function"?e.listenerCount(r):Kc.call(e,r)};q.prototype.listenerCount=Kc;function Kc(e){var r=this._events;if(r!==void 0){var t=r[e];if(typeof t=="function")return 1;if(t!==void 0)return t.length}return 0}q.prototype.eventNames=function(){return this._eventsCount>0?ii(this._events):[]};function Xc(e,r){for(var t=new Array(r),n=0;n<r;++n)t[n]=e[n];return t}function Yg(e,r){for(;r+1<e.length;r++)e[r]=e[r+1];e.pop()}function Kg(e){for(var r=new Array(e.length),t=0;t<r.length;++t)r[t]=e[t].listener||e[t];return r}function Xg(e,r){return new Promise(function(t,n){function i(o){e.removeListener(r,a),n(o)}function a(){typeof e.removeListener=="function"&&e.removeListener("error",i),t([].slice.call(arguments))}Jc(e,r,a,{once:!0}),r!=="error"&&Jg(e,i,{once:!0})})}function Jg(e,r,t){typeof e.on=="function"&&Jc(e,"error",r,t)}function Jc(e,r,t,n){if(typeof e.on=="function")n.once?e.once(r,t):e.on(r,t);else if(typeof e.addEventListener=="function")e.addEventListener(r,function i(a){n.once&&e.removeEventListener(r,i),t(a)});else throw new TypeError('The "emitter" argument must be of type EventEmitter. Received type '+typeof e)}});var Va=y((cS,Qc)=>{Qc.exports=oi().EventEmitter});var ah=y((hS,ih)=>{"use strict";function eh(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter(function(i){return Object.getOwnPropertyDescriptor(e,i).enumerable})),t.push.apply(t,n)}return t}function rh(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{};r%2?eh(Object(t),!0).forEach(function(n){Qg(e,n,t[n])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):eh(Object(t)).forEach(function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))})}return e}function Qg(e,r,t){return r=nh(r),r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function eb(e,r){if(!(e instanceof r))throw new TypeError("Cannot call a class as a function")}function th(e,r){for(var t=0;t<r.length;t++){var n=r[t];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,nh(n.key),n)}}function rb(e,r,t){return r&&th(e.prototype,r),t&&th(e,t),Object.defineProperty(e,"prototype",{writable:!1}),e}function nh(e){var r=tb(e,"string");return typeof r=="symbol"?r:String(r)}function tb(e,r){if(typeof e!="object"||e===null)return e;var t=e[Symbol.toPrimitive];if(t!==void 0){var n=t.call(e,r||"default");if(typeof n!="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(r==="string"?String:Number)(e)}var nb=lr(),fi=nb.Buffer,ib=Se(),Ya=ib.inspect,ab=Ya&&Ya.custom||"inspect";function ob(e,r,t){fi.prototype.copy.call(e,r,t)}ih.exports=(function(){function e(){eb(this,e),this.head=null,this.tail=null,this.length=0}return rb(e,[{key:"push",value:function(t){var n={data:t,next:null};this.length>0?this.tail.next=n:this.head=n,this.tail=n,++this.length}},{key:"unshift",value:function(t){var n={data:t,next:this.head};this.length===0&&(this.tail=n),this.head=n,++this.length}},{key:"shift",value:function(){if(this.length!==0){var t=this.head.data;return this.length===1?this.head=this.tail=null:this.head=this.head.next,--this.length,t}}},{key:"clear",value:function(){this.head=this.tail=null,this.length=0}},{key:"join",value:function(t){if(this.length===0)return"";for(var n=this.head,i=""+n.data;n=n.next;)i+=t+n.data;return i}},{key:"concat",value:function(t){if(this.length===0)return fi.alloc(0);for(var n=fi.allocUnsafe(t>>>0),i=this.head,a=0;i;)ob(i.data,n,a),a+=i.data.length,i=i.next;return n}},{key:"consume",value:function(t,n){var i;return t<this.head.data.length?(i=this.head.data.slice(0,t),this.head.data=this.head.data.slice(t)):t===this.head.data.length?i=this.shift():i=n?this._getString(t):this._getBuffer(t),i}},{key:"first",value:function(){return this.head.data}},{key:"_getString",value:function(t){var n=this.head,i=1,a=n.data;for(t-=a.length;n=n.next;){var o=n.data,f=t>o.length?o.length:t;if(f===o.length?a+=o:a+=o.slice(0,t),t-=f,t===0){f===o.length?(++i,n.next?this.head=n.next:this.head=this.tail=null):(this.head=n,n.data=o.slice(f));break}++i}return this.length-=i,a}},{key:"_getBuffer",value:function(t){var n=fi.allocUnsafe(t),i=this.head,a=1;for(i.data.copy(n),t-=i.data.length;i=i.next;){var o=i.data,f=t>o.length?o.length:t;if(o.copy(n,n.length-t,0,f),t-=f,t===0){f===o.length?(++a,i.next?this.head=i.next:this.head=this.tail=null):(this.head=i,i.data=o.slice(f));break}++a}return this.length-=a,n}},{key:ab,value:function(t,n){return Ya(this,rh(rh({},n),{},{depth:0,customInspect:!1}))}}]),e})()});var Xa=y((pS,fh)=>{"use strict";function fb(e,r){var t=this,n=this._readableState&&this._readableState.destroyed,i=this._writableState&&this._writableState.destroyed;return n||i?(r?r(e):e&&(this._writableState?this._writableState.errorEmitted||(this._writableState.errorEmitted=!0,process.nextTick(Ka,this,e)):process.nextTick(Ka,this,e)),this):(this._readableState&&(this._readableState.destroyed=!0),this._writableState&&(this._writableState.destroyed=!0),this._destroy(e||null,function(a){!r&&a?t._writableState?t._writableState.errorEmitted?process.nextTick(ui,t):(t._writableState.errorEmitted=!0,process.nextTick(oh,t,a)):process.nextTick(oh,t,a):r?(process.nextTick(ui,t),r(a)):process.nextTick(ui,t)}),this)}function oh(e,r){Ka(e,r),ui(e)}function ui(e){e._writableState&&!e._writableState.emitClose||e._readableState&&!e._readableState.emitClose||e.emit("close")}function ub(){this._readableState&&(this._readableState.destroyed=!1,this._readableState.reading=!1,this._readableState.ended=!1,this._readableState.endEmitted=!1),this._writableState&&(this._writableState.destroyed=!1,this._writableState.ended=!1,this._writableState.ending=!1,this._writableState.finalCalled=!1,this._writableState.prefinished=!1,this._writableState.finished=!1,this._writableState.errorEmitted=!1)}function Ka(e,r){e.emit("error",r)}function lb(e,r){var t=e._readableState,n=e._writableState;t&&t.autoDestroy||n&&n.autoDestroy?e.destroy(r):e.emit("error",r)}fh.exports={destroy:fb,undestroy:ub,errorOrDestroy:lb}});var sr=y((dS,sh)=>{"use strict";function sb(e,r){e.prototype=Object.create(r.prototype),e.prototype.constructor=e,e.__proto__=r}var lh={};function ce(e,r,t){t||(t=Error);function n(a,o,f){return typeof r=="string"?r:r(a,o,f)}var i=(function(a){sb(o,a);function o(f,s,u){return a.call(this,n(f,s,u))||this}return o})(t);i.prototype.name=t.name,i.prototype.code=e,lh[e]=i}function uh(e,r){if(Array.isArray(e)){var t=e.length;return e=e.map(function(n){return String(n)}),t>2?"one of ".concat(r," ").concat(e.slice(0,t-1).join(", "),", or ")+e[t-1]:t===2?"one of ".concat(r," ").concat(e[0]," or ").concat(e[1]):"of ".concat(r," ").concat(e[0])}else return"of ".concat(r," ").concat(String(e))}function cb(e,r,t){return e.substr(!t||t<0?0:+t,r.length)===r}function hb(e,r,t){return(t===void 0||t>e.length)&&(t=e.length),e.substring(t-r.length,t)===r}function pb(e,r,t){return typeof t!="number"&&(t=0),t+r.length>e.length?!1:e.indexOf(r,t)!==-1}ce("ERR_INVALID_OPT_VALUE",function(e,r){return'The value "'+r+'" is invalid for option "'+e+'"'},TypeError);ce("ERR_INVALID_ARG_TYPE",function(e,r,t){var n;typeof r=="string"&&cb(r,"not ")?(n="must not be",r=r.replace(/^not /,"")):n="must be";var i;if(hb(e," argument"))i="The ".concat(e," ").concat(n," ").concat(uh(r,"type"));else{var a=pb(e,".")?"property":"argument";i='The "'.concat(e,'" ').concat(a," ").concat(n," ").concat(uh(r,"type"))}return i+=". Received type ".concat(typeof t),i},TypeError);ce("ERR_STREAM_PUSH_AFTER_EOF","stream.push() after EOF");ce("ERR_METHOD_NOT_IMPLEMENTED",function(e){return"The "+e+" method is not implemented"});ce("ERR_STREAM_PREMATURE_CLOSE","Premature close");ce("ERR_STREAM_DESTROYED",function(e){return"Cannot call "+e+" after a stream was destroyed"});ce("ERR_MULTIPLE_CALLBACK","Callback called multiple times");ce("ERR_STREAM_CANNOT_PIPE","Cannot pipe, not readable");ce("ERR_STREAM_WRITE_AFTER_END","write after end");ce("ERR_STREAM_NULL_VALUES","May not write null values to stream",TypeError);ce("ERR_UNKNOWN_ENCODING",function(e){return"Unknown encoding: "+e},TypeError);ce("ERR_STREAM_UNSHIFT_AFTER_END_EVENT","stream.unshift() after end event");sh.exports.codes=lh});var Ja=y((yS,ch)=>{"use strict";var db=sr().codes.ERR_INVALID_OPT_VALUE;function yb(e,r,t){return e.highWaterMark!=null?e.highWaterMark:r?e[t]:null}function vb(e,r,t,n){var i=yb(r,n,t);if(i!=null){if(!(isFinite(i)&&Math.floor(i)===i)||i<0){var a=n?t:"highWaterMark";throw new db(a,i)}return Math.floor(i)}return e.objectMode?16:16*1024}ch.exports={getHighWaterMark:vb}});var ph=y((vS,hh)=>{hh.exports=_b;function _b(e,r){if(Qa("noDeprecation"))return e;var t=!1;function n(){if(!t){if(Qa("throwDeprecation"))throw new Error(r);Qa("traceDeprecation")?console.trace(r):console.warn(r),t=!0}return e.apply(this,arguments)}return n}function Qa(e){try{if(!globalThis.localStorage)return!1}catch{return!1}var r=globalThis.localStorage[e];return r==null?!1:String(r).toLowerCase()==="true"}});var to=y((_S,bh)=>{"use strict";bh.exports=z;function yh(e){var r=this;this.next=null,this.entry=null,this.finish=function(){Wb(r,e)}}var Yr;z.WritableState=Ft;var gb={deprecate:ph()},vh=Va(),si=lr().Buffer,bb=(typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof self<"u"?self:{}).Uint8Array||function(){};function wb(e){return si.from(e)}function Eb(e){return si.isBuffer(e)||e instanceof bb}var ro=Xa(),mb=Ja(),Sb=mb.getHighWaterMark,We=sr().codes,xb=We.ERR_INVALID_ARG_TYPE,Ab=We.ERR_METHOD_NOT_IMPLEMENTED,Rb=We.ERR_MULTIPLE_CALLBACK,Ob=We.ERR_STREAM_CANNOT_PIPE,Tb=We.ERR_STREAM_DESTROYED,Ib=We.ERR_STREAM_NULL_VALUES,Nb=We.ERR_STREAM_WRITE_AFTER_END,Lb=We.ERR_UNKNOWN_ENCODING,Kr=ro.errorOrDestroy;Be()(z,vh);function Fb(){}function Ft(e,r,t){Yr=Yr||cr(),e=e||{},typeof t!="boolean"&&(t=r instanceof Yr),this.objectMode=!!e.objectMode,t&&(this.objectMode=this.objectMode||!!e.writableObjectMode),this.highWaterMark=Sb(this,e,"writableHighWaterMark",t),this.finalCalled=!1,this.needDrain=!1,this.ending=!1,this.ended=!1,this.finished=!1,this.destroyed=!1;var n=e.decodeStrings===!1;this.decodeStrings=!n,this.defaultEncoding=e.defaultEncoding||"utf8",this.length=0,this.writing=!1,this.corked=0,this.sync=!0,this.bufferProcessing=!1,this.onwrite=function(i){qb(r,i)},this.writecb=null,this.writelen=0,this.bufferedRequest=null,this.lastBufferedRequest=null,this.pendingcb=0,this.prefinished=!1,this.errorEmitted=!1,this.emitClose=e.emitClose!==!1,this.autoDestroy=!!e.autoDestroy,this.bufferedRequestCount=0,this.corkedRequestsFree=new yh(this)}Ft.prototype.getBuffer=function(){for(var r=this.bufferedRequest,t=[];r;)t.push(r),r=r.next;return t};(function(){try{Object.defineProperty(Ft.prototype,"buffer",{get:gb.deprecate(function(){return this.getBuffer()},"_writableState.buffer is deprecated. Use _writableState.getBuffer instead.","DEP0003")})}catch{}})();var li;typeof Symbol=="function"&&Symbol.hasInstance&&typeof Function.prototype[Symbol.hasInstance]=="function"?(li=Function.prototype[Symbol.hasInstance],Object.defineProperty(z,Symbol.hasInstance,{value:function(r){return li.call(this,r)?!0:this!==z?!1:r&&r._writableState instanceof Ft}})):li=function(r){return r instanceof this};function z(e){Yr=Yr||cr();var r=this instanceof Yr;if(!r&&!li.call(z,this))return new z(e);this._writableState=new Ft(e,this,r),this.writable=!0,e&&(typeof e.write=="function"&&(this._write=e.write),typeof e.writev=="function"&&(this._writev=e.writev),typeof e.destroy=="function"&&(this._destroy=e.destroy),typeof e.final=="function"&&(this._final=e.final)),vh.call(this)}z.prototype.pipe=function(){Kr(this,new Ob)};function kb(e,r){var t=new Nb;Kr(e,t),process.nextTick(r,t)}function Pb(e,r,t,n){var i;return t===null?i=new Ib:typeof t!="string"&&!r.objectMode&&(i=new xb("chunk",["string","Buffer"],t)),i?(Kr(e,i),process.nextTick(n,i),!1):!0}z.prototype.write=function(e,r,t){var n=this._writableState,i=!1,a=!n.objectMode&&Eb(e);return a&&!si.isBuffer(e)&&(e=wb(e)),typeof r=="function"&&(t=r,r=null),a?r="buffer":r||(r=n.defaultEncoding),typeof t!="function"&&(t=Fb),n.ending?kb(this,t):(a||Pb(this,n,e,t))&&(n.pendingcb++,i=Mb(this,n,a,e,r,t)),i};z.prototype.cork=function(){this._writableState.corked++};z.prototype.uncork=function(){var e=this._writableState;e.corked&&(e.corked--,!e.writing&&!e.corked&&!e.bufferProcessing&&e.bufferedRequest&&_h(this,e))};z.prototype.setDefaultEncoding=function(r){if(typeof r=="string"&&(r=r.toLowerCase()),!(["hex","utf8","utf-8","ascii","binary","base64","ucs2","ucs-2","utf16le","utf-16le","raw"].indexOf((r+"").toLowerCase())>-1))throw new Lb(r);return this._writableState.defaultEncoding=r,this};Object.defineProperty(z.prototype,"writableBuffer",{enumerable:!1,get:function(){return this._writableState&&this._writableState.getBuffer()}});function Db(e,r,t){return!e.objectMode&&e.decodeStrings!==!1&&typeof r=="string"&&(r=si.from(r,t)),r}Object.defineProperty(z.prototype,"writableHighWaterMark",{enumerable:!1,get:function(){return this._writableState.highWaterMark}});function Mb(e,r,t,n,i,a){if(!t){var o=Db(r,n,i);n!==o&&(t=!0,i="buffer",n=o)}var f=r.objectMode?1:n.length;r.length+=f;var s=r.length<r.highWaterMark;if(s||(r.needDrain=!0),r.writing||r.corked){var u=r.lastBufferedRequest;r.lastBufferedRequest={chunk:n,encoding:i,isBuf:t,callback:a,next:null},u?u.next=r.lastBufferedRequest:r.bufferedRequest=r.lastBufferedRequest,r.bufferedRequestCount+=1}else eo(e,r,!1,f,n,i,a);return s}function eo(e,r,t,n,i,a,o){r.writelen=n,r.writecb=o,r.writing=!0,r.sync=!0,r.destroyed?r.onwrite(new Tb("write")):t?e._writev(i,r.onwrite):e._write(i,a,r.onwrite),r.sync=!1}function jb(e,r,t,n,i){--r.pendingcb,t?(process.nextTick(i,n),process.nextTick(Lt,e,r),e._writableState.errorEmitted=!0,Kr(e,n)):(i(n),e._writableState.errorEmitted=!0,Kr(e,n),Lt(e,r))}function Bb(e){e.writing=!1,e.writecb=null,e.length-=e.writelen,e.writelen=0}function qb(e,r){var t=e._writableState,n=t.sync,i=t.writecb;if(typeof i!="function")throw new Rb;if(Bb(t),r)jb(e,t,n,r,i);else{var a=gh(t)||e.destroyed;!a&&!t.corked&&!t.bufferProcessing&&t.bufferedRequest&&_h(e,t),n?process.nextTick(dh,e,t,a,i):dh(e,t,a,i)}}function dh(e,r,t,n){t||Ub(e,r),r.pendingcb--,n(),Lt(e,r)}function Ub(e,r){r.length===0&&r.needDrain&&(r.needDrain=!1,e.emit("drain"))}function _h(e,r){r.bufferProcessing=!0;var t=r.bufferedRequest;if(e._writev&&t&&t.next){var n=r.bufferedRequestCount,i=new Array(n),a=r.corkedRequestsFree;a.entry=t;for(var o=0,f=!0;t;)i[o]=t,t.isBuf||(f=!1),t=t.next,o+=1;i.allBuffers=f,eo(e,r,!0,r.length,i,"",a.finish),r.pendingcb++,r.lastBufferedRequest=null,a.next?(r.corkedRequestsFree=a.next,a.next=null):r.corkedRequestsFree=new yh(r),r.bufferedRequestCount=0}else{for(;t;){var s=t.chunk,u=t.encoding,l=t.callback,c=r.objectMode?1:s.length;if(eo(e,r,!1,c,s,u,l),t=t.next,r.bufferedRequestCount--,r.writing)break}t===null&&(r.lastBufferedRequest=null)}r.bufferedRequest=t,r.bufferProcessing=!1}z.prototype._write=function(e,r,t){t(new Ab("_write()"))};z.prototype._writev=null;z.prototype.end=function(e,r,t){var n=this._writableState;return typeof e=="function"?(t=e,e=null,r=null):typeof r=="function"&&(t=r,r=null),e!=null&&this.write(e,r),n.corked&&(n.corked=1,this.uncork()),n.ending||Zb(this,n,t),this};Object.defineProperty(z.prototype,"writableLength",{enumerable:!1,get:function(){return this._writableState.length}});function gh(e){return e.ending&&e.length===0&&e.bufferedRequest===null&&!e.finished&&!e.writing}function Cb(e,r){e._final(function(t){r.pendingcb--,t&&Kr(e,t),r.prefinished=!0,e.emit("prefinish"),Lt(e,r)})}function zb(e,r){!r.prefinished&&!r.finalCalled&&(typeof e._final=="function"&&!r.destroyed?(r.pendingcb++,r.finalCalled=!0,process.nextTick(Cb,e,r)):(r.prefinished=!0,e.emit("prefinish")))}function Lt(e,r){var t=gh(r);if(t&&(zb(e,r),r.pendingcb===0&&(r.finished=!0,e.emit("finish"),r.autoDestroy))){var n=e._readableState;(!n||n.autoDestroy&&n.endEmitted)&&e.destroy()}return t}function Zb(e,r,t){r.ending=!0,Lt(e,r),t&&(r.finished?process.nextTick(t):e.once("finish",t)),r.ended=!0,e.writable=!1}function Wb(e,r,t){var n=e.entry;for(e.entry=null;n;){var i=n.callback;r.pendingcb--,i(t),n=n.next}r.corkedRequestsFree.next=e}Object.defineProperty(z.prototype,"destroyed",{enumerable:!1,get:function(){return this._writableState===void 0?!1:this._writableState.destroyed},set:function(r){this._writableState&&(this._writableState.destroyed=r)}});z.prototype.destroy=ro.destroy;z.prototype._undestroy=ro.undestroy;z.prototype._destroy=function(e,r){r(e)}});var cr=y((gS,Eh)=>{"use strict";var Hb=Object.keys||function(e){var r=[];for(var t in e)r.push(t);return r};Eh.exports=Re;var wh=ao(),io=to();Be()(Re,wh);for(no=Hb(io.prototype),ci=0;ci<no.length;ci++)hi=no[ci],Re.prototype[hi]||(Re.prototype[hi]=io.prototype[hi]);var no,hi,ci;function Re(e){if(!(this instanceof Re))return new Re(e);wh.call(this,e),io.call(this,e),this.allowHalfOpen=!0,e&&(e.readable===!1&&(this.readable=!1),e.writable===!1&&(this.writable=!1),e.allowHalfOpen===!1&&(this.allowHalfOpen=!1,this.once("end",Gb)))}Object.defineProperty(Re.prototype,"writableHighWaterMark",{enumerable:!1,get:function(){return this._writableState.highWaterMark}});Object.defineProperty(Re.prototype,"writableBuffer",{enumerable:!1,get:function(){return this._writableState&&this._writableState.getBuffer()}});Object.defineProperty(Re.prototype,"writableLength",{enumerable:!1,get:function(){return this._writableState.length}});function Gb(){this._writableState.ended||process.nextTick($b,this)}function $b(e){e.end()}Object.defineProperty(Re.prototype,"destroyed",{enumerable:!1,get:function(){return this._readableState===void 0||this._writableState===void 0?!1:this._readableState.destroyed&&this._writableState.destroyed},set:function(r){this._readableState===void 0||this._writableState===void 0||(this._readableState.destroyed=r,this._writableState.destroyed=r)}})});var xh=y((oo,Sh)=>{var pi=lr(),Oe=pi.Buffer;function mh(e,r){for(var t in e)r[t]=e[t]}Oe.from&&Oe.alloc&&Oe.allocUnsafe&&Oe.allocUnsafeSlow?Sh.exports=pi:(mh(pi,oo),oo.Buffer=hr);function hr(e,r,t){return Oe(e,r,t)}hr.prototype=Object.create(Oe.prototype);mh(Oe,hr);hr.from=function(e,r,t){if(typeof e=="number")throw new TypeError("Argument must not be a number");return Oe(e,r,t)};hr.alloc=function(e,r,t){if(typeof e!="number")throw new TypeError("Argument must be a number");var n=Oe(e);return r!==void 0?typeof t=="string"?n.fill(r,t):n.fill(r):n.fill(0),n};hr.allocUnsafe=function(e){if(typeof e!="number")throw new TypeError("Argument must be a number");return Oe(e)};hr.allocUnsafeSlow=function(e){if(typeof e!="number")throw new TypeError("Argument must be a number");return pi.SlowBuffer(e)}});var lo=y(Rh=>{"use strict";var uo=xh().Buffer,Ah=uo.isEncoding||function(e){switch(e=""+e,e&&e.toLowerCase()){case"hex":case"utf8":case"utf-8":case"ascii":case"binary":case"base64":case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":case"raw":return!0;default:return!1}};function Vb(e){if(!e)return"utf8";for(var r;;)switch(e){case"utf8":case"utf-8":return"utf8";case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return"utf16le";case"latin1":case"binary":return"latin1";case"base64":case"ascii":case"hex":return e;default:if(r)return;e=(""+e).toLowerCase(),r=!0}}function Yb(e){var r=Vb(e);if(typeof r!="string"&&(uo.isEncoding===Ah||!Ah(e)))throw new Error("Unknown encoding: "+e);return r||e}Rh.StringDecoder=kt;function kt(e){this.encoding=Yb(e);var r;switch(this.encoding){case"utf16le":this.text=rw,this.end=tw,r=4;break;case"utf8":this.fillLast=Jb,r=4;break;case"base64":this.text=nw,this.end=iw,r=3;break;default:this.write=aw,this.end=ow;return}this.lastNeed=0,this.lastTotal=0,this.lastChar=uo.allocUnsafe(r)}kt.prototype.write=function(e){if(e.length===0)return"";var r,t;if(this.lastNeed){if(r=this.fillLast(e),r===void 0)return"";t=this.lastNeed,this.lastNeed=0}else t=0;return t<e.length?r?r+this.text(e,t):this.text(e,t):r||""};kt.prototype.end=ew;kt.prototype.text=Qb;kt.prototype.fillLast=function(e){if(this.lastNeed<=e.length)return e.copy(this.lastChar,this.lastTotal-this.lastNeed,0,this.lastNeed),this.lastChar.toString(this.encoding,0,this.lastTotal);e.copy(this.lastChar,this.lastTotal-this.lastNeed,0,e.length),this.lastNeed-=e.length};function fo(e){return e<=127?0:e>>5===6?2:e>>4===14?3:e>>3===30?4:e>>6===2?-1:-2}function Kb(e,r,t){var n=r.length-1;if(n<t)return 0;var i=fo(r[n]);return i>=0?(i>0&&(e.lastNeed=i-1),i):--n<t||i===-2?0:(i=fo(r[n]),i>=0?(i>0&&(e.lastNeed=i-2),i):--n<t||i===-2?0:(i=fo(r[n]),i>=0?(i>0&&(i===2?i=0:e.lastNeed=i-3),i):0))}function Xb(e,r,t){if((r[0]&192)!==128)return e.lastNeed=0,"\uFFFD";if(e.lastNeed>1&&r.length>1){if((r[1]&192)!==128)return e.lastNeed=1,"\uFFFD";if(e.lastNeed>2&&r.length>2&&(r[2]&192)!==128)return e.lastNeed=2,"\uFFFD"}}function Jb(e){var r=this.lastTotal-this.lastNeed,t=Xb(this,e,r);if(t!==void 0)return t;if(this.lastNeed<=e.length)return e.copy(this.lastChar,r,0,this.lastNeed),this.lastChar.toString(this.encoding,0,this.lastTotal);e.copy(this.lastChar,r,0,e.length),this.lastNeed-=e.length}function Qb(e,r){var t=Kb(this,e,r);if(!this.lastNeed)return e.toString("utf8",r);this.lastTotal=t;var n=e.length-(t-this.lastNeed);return e.copy(this.lastChar,0,n),e.toString("utf8",r,n)}function ew(e){var r=e&&e.length?this.write(e):"";return this.lastNeed?r+"\uFFFD":r}function rw(e,r){if((e.length-r)%2===0){var t=e.toString("utf16le",r);if(t){var n=t.charCodeAt(t.length-1);if(n>=55296&&n<=56319)return this.lastNeed=2,this.lastTotal=4,this.lastChar[0]=e[e.length-2],this.lastChar[1]=e[e.length-1],t.slice(0,-1)}return t}return this.lastNeed=1,this.lastTotal=2,this.lastChar[0]=e[e.length-1],e.toString("utf16le",r,e.length-1)}function tw(e){var r=e&&e.length?this.write(e):"";if(this.lastNeed){var t=this.lastTotal-this.lastNeed;return r+this.lastChar.toString("utf16le",0,t)}return r}function nw(e,r){var t=(e.length-r)%3;return t===0?e.toString("base64",r):(this.lastNeed=3-t,this.lastTotal=3,t===1?this.lastChar[0]=e[e.length-1]:(this.lastChar[0]=e[e.length-2],this.lastChar[1]=e[e.length-1]),e.toString("base64",r,e.length-t))}function iw(e){var r=e&&e.length?this.write(e):"";return this.lastNeed?r+this.lastChar.toString("base64",0,3-this.lastNeed):r}function aw(e){return e.toString(this.encoding)}function ow(e){return e&&e.length?this.write(e):""}});var di=y((wS,Ih)=>{"use strict";var Oh=sr().codes.ERR_STREAM_PREMATURE_CLOSE;function fw(e){var r=!1;return function(){if(!r){r=!0;for(var t=arguments.length,n=new Array(t),i=0;i<t;i++)n[i]=arguments[i];e.apply(this,n)}}}function uw(){}function lw(e){return e.setHeader&&typeof e.abort=="function"}function Th(e,r,t){if(typeof r=="function")return Th(e,null,r);r||(r={}),t=fw(t||uw);var n=r.readable||r.readable!==!1&&e.readable,i=r.writable||r.writable!==!1&&e.writable,a=function(){e.writable||f()},o=e._writableState&&e._writableState.finished,f=function(){i=!1,o=!0,n||t.call(e)},s=e._readableState&&e._readableState.endEmitted,u=function(){n=!1,s=!0,i||t.call(e)},l=function(v){t.call(e,v)},c=function(){var v;if(n&&!s)return(!e._readableState||!e._readableState.ended)&&(v=new Oh),t.call(e,v);if(i&&!o)return(!e._writableState||!e._writableState.ended)&&(v=new Oh),t.call(e,v)},p=function(){e.req.on("finish",f)};return lw(e)?(e.on("complete",f),e.on("abort",c),e.req?p():e.on("request",p)):i&&!e._writableState&&(e.on("end",a),e.on("close",a)),e.on("end",u),e.on("finish",f),r.error!==!1&&e.on("error",l),e.on("close",c),function(){e.removeListener("complete",f),e.removeListener("abort",c),e.removeListener("request",p),e.req&&e.req.removeListener("finish",f),e.removeListener("end",a),e.removeListener("close",a),e.removeListener("finish",f),e.removeListener("end",u),e.removeListener("error",l),e.removeListener("close",c)}}Ih.exports=Th});var Lh=y((ES,Nh)=>{"use strict";var yi;function He(e,r,t){return r=sw(r),r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function sw(e){var r=cw(e,"string");return typeof r=="symbol"?r:String(r)}function cw(e,r){if(typeof e!="object"||e===null)return e;var t=e[Symbol.toPrimitive];if(t!==void 0){var n=t.call(e,r||"default");if(typeof n!="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(r==="string"?String:Number)(e)}var hw=di(),Ge=Symbol("lastResolve"),pr=Symbol("lastReject"),Pt=Symbol("error"),vi=Symbol("ended"),dr=Symbol("lastPromise"),so=Symbol("handlePromise"),yr=Symbol("stream");function $e(e,r){return{value:e,done:r}}function pw(e){var r=e[Ge];if(r!==null){var t=e[yr].read();t!==null&&(e[dr]=null,e[Ge]=null,e[pr]=null,r($e(t,!1)))}}function dw(e){process.nextTick(pw,e)}function yw(e,r){return function(t,n){e.then(function(){if(r[vi]){t($e(void 0,!0));return}r[so](t,n)},n)}}var vw=Object.getPrototypeOf(function(){}),_w=Object.setPrototypeOf((yi={get stream(){return this[yr]},next:function(){var r=this,t=this[Pt];if(t!==null)return Promise.reject(t);if(this[vi])return Promise.resolve($e(void 0,!0));if(this[yr].destroyed)return new Promise(function(o,f){process.nextTick(function(){r[Pt]?f(r[Pt]):o($e(void 0,!0))})});var n=this[dr],i;if(n)i=new Promise(yw(n,this));else{var a=this[yr].read();if(a!==null)return Promise.resolve($e(a,!1));i=new Promise(this[so])}return this[dr]=i,i}},He(yi,Symbol.asyncIterator,function(){return this}),He(yi,"return",function(){var r=this;return new Promise(function(t,n){r[yr].destroy(null,function(i){if(i){n(i);return}t($e(void 0,!0))})})}),yi),vw),gw=function(r){var t,n=Object.create(_w,(t={},He(t,yr,{value:r,writable:!0}),He(t,Ge,{value:null,writable:!0}),He(t,pr,{value:null,writable:!0}),He(t,Pt,{value:null,writable:!0}),He(t,vi,{value:r._readableState.endEmitted,writable:!0}),He(t,so,{value:function(a,o){var f=n[yr].read();f?(n[dr]=null,n[Ge]=null,n[pr]=null,a($e(f,!1))):(n[Ge]=a,n[pr]=o)},writable:!0}),t));return n[dr]=null,hw(r,function(i){if(i&&i.code!=="ERR_STREAM_PREMATURE_CLOSE"){var a=n[pr];a!==null&&(n[dr]=null,n[Ge]=null,n[pr]=null,a(i)),n[Pt]=i;return}var o=n[Ge];o!==null&&(n[dr]=null,n[Ge]=null,n[pr]=null,o($e(void 0,!0))),n[vi]=!0}),r.on("readable",dw.bind(null,n)),n};Nh.exports=gw});var kh=y((mS,Fh)=>{Fh.exports=function(){throw new Error("Readable.from is not available in the browser")}});var ao=y((xS,Zh)=>{"use strict";Zh.exports=j;var Xr;j.ReadableState=jh;var SS=oi().EventEmitter,Mh=function(r,t){return r.listeners(t).length},Mt=Va(),_i=lr().Buffer,bw=(typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof self<"u"?self:{}).Uint8Array||function(){};function ww(e){return _i.from(e)}function Ew(e){return _i.isBuffer(e)||e instanceof bw}var co=Se(),N;co&&co.debuglog?N=co.debuglog("stream"):N=function(){};var mw=ah(),bo=Xa(),Sw=Ja(),xw=Sw.getHighWaterMark,gi=sr().codes,Aw=gi.ERR_INVALID_ARG_TYPE,Rw=gi.ERR_STREAM_PUSH_AFTER_EOF,Ow=gi.ERR_METHOD_NOT_IMPLEMENTED,Tw=gi.ERR_STREAM_UNSHIFT_AFTER_END_EVENT,Jr,ho,po;Be()(j,Mt);var Dt=bo.errorOrDestroy,yo=["error","close","destroy","pause","resume"];function Iw(e,r,t){if(typeof e.prependListener=="function")return e.prependListener(r,t);!e._events||!e._events[r]?e.on(r,t):Array.isArray(e._events[r])?e._events[r].unshift(t):e._events[r]=[t,e._events[r]]}function jh(e,r,t){Xr=Xr||cr(),e=e||{},typeof t!="boolean"&&(t=r instanceof Xr),this.objectMode=!!e.objectMode,t&&(this.objectMode=this.objectMode||!!e.readableObjectMode),this.highWaterMark=xw(this,e,"readableHighWaterMark",t),this.buffer=new mw,this.length=0,this.pipes=null,this.pipesCount=0,this.flowing=null,this.ended=!1,this.endEmitted=!1,this.reading=!1,this.sync=!0,this.needReadable=!1,this.emittedReadable=!1,this.readableListening=!1,this.resumeScheduled=!1,this.paused=!0,this.emitClose=e.emitClose!==!1,this.autoDestroy=!!e.autoDestroy,this.destroyed=!1,this.defaultEncoding=e.defaultEncoding||"utf8",this.awaitDrain=0,this.readingMore=!1,this.decoder=null,this.encoding=null,e.encoding&&(Jr||(Jr=lo().StringDecoder),this.decoder=new Jr(e.encoding),this.encoding=e.encoding)}function j(e){if(Xr=Xr||cr(),!(this instanceof j))return new j(e);var r=this instanceof Xr;this._readableState=new jh(e,this,r),this.readable=!0,e&&(typeof e.read=="function"&&(this._read=e.read),typeof e.destroy=="function"&&(this._destroy=e.destroy)),Mt.call(this)}Object.defineProperty(j.prototype,"destroyed",{enumerable:!1,get:function(){return this._readableState===void 0?!1:this._readableState.destroyed},set:function(r){this._readableState&&(this._readableState.destroyed=r)}});j.prototype.destroy=bo.destroy;j.prototype._undestroy=bo.undestroy;j.prototype._destroy=function(e,r){r(e)};j.prototype.push=function(e,r){var t=this._readableState,n;return t.objectMode?n=!0:typeof e=="string"&&(r=r||t.defaultEncoding,r!==t.encoding&&(e=_i.from(e,r),r=""),n=!0),Bh(this,e,r,!1,n)};j.prototype.unshift=function(e){return Bh(this,e,null,!0,!1)};function Bh(e,r,t,n,i){N("readableAddChunk",r);var a=e._readableState;if(r===null)a.reading=!1,Fw(e,a);else{var o;if(i||(o=Nw(a,r)),o)Dt(e,o);else if(a.objectMode||r&&r.length>0)if(typeof r!="string"&&!a.objectMode&&Object.getPrototypeOf(r)!==_i.prototype&&(r=ww(r)),n)a.endEmitted?Dt(e,new Tw):vo(e,a,r,!0);else if(a.ended)Dt(e,new Rw);else{if(a.destroyed)return!1;a.reading=!1,a.decoder&&!t?(r=a.decoder.write(r),a.objectMode||r.length!==0?vo(e,a,r,!1):go(e,a)):vo(e,a,r,!1)}else n||(a.reading=!1,go(e,a))}return!a.ended&&(a.length<a.highWaterMark||a.length===0)}function vo(e,r,t,n){r.flowing&&r.length===0&&!r.sync?(r.awaitDrain=0,e.emit("data",t)):(r.length+=r.objectMode?1:t.length,n?r.buffer.unshift(t):r.buffer.push(t),r.needReadable&&bi(e)),go(e,r)}function Nw(e,r){var t;return!Ew(r)&&typeof r!="string"&&r!==void 0&&!e.objectMode&&(t=new Aw("chunk",["string","Buffer","Uint8Array"],r)),t}j.prototype.isPaused=function(){return this._readableState.flowing===!1};j.prototype.setEncoding=function(e){Jr||(Jr=lo().StringDecoder);var r=new Jr(e);this._readableState.decoder=r,this._readableState.encoding=this._readableState.decoder.encoding;for(var t=this._readableState.buffer.head,n="";t!==null;)n+=r.write(t.data),t=t.next;return this._readableState.buffer.clear(),n!==""&&this._readableState.buffer.push(n),this._readableState.length=n.length,this};var Ph=1073741824;function Lw(e){return e>=Ph?e=Ph:(e--,e|=e>>>1,e|=e>>>2,e|=e>>>4,e|=e>>>8,e|=e>>>16,e++),e}function Dh(e,r){return e<=0||r.length===0&&r.ended?0:r.objectMode?1:e!==e?r.flowing&&r.length?r.buffer.head.data.length:r.length:(e>r.highWaterMark&&(r.highWaterMark=Lw(e)),e<=r.length?e:r.ended?r.length:(r.needReadable=!0,0))}j.prototype.read=function(e){N("read",e),e=parseInt(e,10);var r=this._readableState,t=e;if(e!==0&&(r.emittedReadable=!1),e===0&&r.needReadable&&((r.highWaterMark!==0?r.length>=r.highWaterMark:r.length>0)||r.ended))return N("read: emitReadable",r.length,r.ended),r.length===0&&r.ended?_o(this):bi(this),null;if(e=Dh(e,r),e===0&&r.ended)return r.length===0&&_o(this),null;var n=r.needReadable;N("need readable",n),(r.length===0||r.length-e<r.highWaterMark)&&(n=!0,N("length less than watermark",n)),r.ended||r.reading?(n=!1,N("reading or ended",n)):n&&(N("do read"),r.reading=!0,r.sync=!0,r.length===0&&(r.needReadable=!0),this._read(r.highWaterMark),r.sync=!1,r.reading||(e=Dh(t,r)));var i;return e>0?i=Ch(e,r):i=null,i===null?(r.needReadable=r.length<=r.highWaterMark,e=0):(r.length-=e,r.awaitDrain=0),r.length===0&&(r.ended||(r.needReadable=!0),t!==e&&r.ended&&_o(this)),i!==null&&this.emit("data",i),i};function Fw(e,r){if(N("onEofChunk"),!r.ended){if(r.decoder){var t=r.decoder.end();t&&t.length&&(r.buffer.push(t),r.length+=r.objectMode?1:t.length)}r.ended=!0,r.sync?bi(e):(r.needReadable=!1,r.emittedReadable||(r.emittedReadable=!0,qh(e)))}}function bi(e){var r=e._readableState;N("emitReadable",r.needReadable,r.emittedReadable),r.needReadable=!1,r.emittedReadable||(N("emitReadable",r.flowing),r.emittedReadable=!0,process.nextTick(qh,e))}function qh(e){var r=e._readableState;N("emitReadable_",r.destroyed,r.length,r.ended),!r.destroyed&&(r.length||r.ended)&&(e.emit("readable"),r.emittedReadable=!1),r.needReadable=!r.flowing&&!r.ended&&r.length<=r.highWaterMark,wo(e)}function go(e,r){r.readingMore||(r.readingMore=!0,process.nextTick(kw,e,r))}function kw(e,r){for(;!r.reading&&!r.ended&&(r.length<r.highWaterMark||r.flowing&&r.length===0);){var t=r.length;if(N("maybeReadMore read 0"),e.read(0),t===r.length)break}r.readingMore=!1}j.prototype._read=function(e){Dt(this,new Ow("_read()"))};j.prototype.pipe=function(e,r){var t=this,n=this._readableState;switch(n.pipesCount){case 0:n.pipes=e;break;case 1:n.pipes=[n.pipes,e];break;default:n.pipes.push(e);break}n.pipesCount+=1,N("pipe count=%d opts=%j",n.pipesCount,r);var i=(!r||r.end!==!1)&&e!==process.stdout&&e!==process.stderr,a=i?f:_;n.endEmitted?process.nextTick(a):t.once("end",a),e.on("unpipe",o);function o(m,w){N("onunpipe"),m===t&&w&&w.hasUnpiped===!1&&(w.hasUnpiped=!0,l())}function f(){N("onend"),e.end()}var s=Pw(t);e.on("drain",s);var u=!1;function l(){N("cleanup"),e.removeListener("close",h),e.removeListener("finish",v),e.removeListener("drain",s),e.removeListener("error",p),e.removeListener("unpipe",o),t.removeListener("end",f),t.removeListener("end",_),t.removeListener("data",c),u=!0,n.awaitDrain&&(!e._writableState||e._writableState.needDrain)&&s()}t.on("data",c);function c(m){N("ondata");var w=e.write(m);N("dest.write",w),w===!1&&((n.pipesCount===1&&n.pipes===e||n.pipesCount>1&&zh(n.pipes,e)!==-1)&&!u&&(N("false write response, pause",n.awaitDrain),n.awaitDrain++),t.pause())}function p(m){N("onerror",m),_(),e.removeListener("error",p),Mh(e,"error")===0&&Dt(e,m)}Iw(e,"error",p);function h(){e.removeListener("finish",v),_()}e.once("close",h);function v(){N("onfinish"),e.removeListener("close",h),_()}e.once("finish",v);function _(){N("unpipe"),t.unpipe(e)}return e.emit("pipe",t),n.flowing||(N("pipe resume"),t.resume()),e};function Pw(e){return function(){var t=e._readableState;N("pipeOnDrain",t.awaitDrain),t.awaitDrain&&t.awaitDrain--,t.awaitDrain===0&&Mh(e,"data")&&(t.flowing=!0,wo(e))}}j.prototype.unpipe=function(e){var r=this._readableState,t={hasUnpiped:!1};if(r.pipesCount===0)return this;if(r.pipesCount===1)return e&&e!==r.pipes?this:(e||(e=r.pipes),r.pipes=null,r.pipesCount=0,r.flowing=!1,e&&e.emit("unpipe",this,t),this);if(!e){var n=r.pipes,i=r.pipesCount;r.pipes=null,r.pipesCount=0,r.flowing=!1;for(var a=0;a<i;a++)n[a].emit("unpipe",this,{hasUnpiped:!1});return this}var o=zh(r.pipes,e);return o===-1?this:(r.pipes.splice(o,1),r.pipesCount-=1,r.pipesCount===1&&(r.pipes=r.pipes[0]),e.emit("unpipe",this,t),this)};j.prototype.on=function(e,r){var t=Mt.prototype.on.call(this,e,r),n=this._readableState;return e==="data"?(n.readableListening=this.listenerCount("readable")>0,n.flowing!==!1&&this.resume()):e==="readable"&&!n.endEmitted&&!n.readableListening&&(n.readableListening=n.needReadable=!0,n.flowing=!1,n.emittedReadable=!1,N("on readable",n.length,n.reading),n.length?bi(this):n.reading||process.nextTick(Dw,this)),t};j.prototype.addListener=j.prototype.on;j.prototype.removeListener=function(e,r){var t=Mt.prototype.removeListener.call(this,e,r);return e==="readable"&&process.nextTick(Uh,this),t};j.prototype.removeAllListeners=function(e){var r=Mt.prototype.removeAllListeners.apply(this,arguments);return(e==="readable"||e===void 0)&&process.nextTick(Uh,this),r};function Uh(e){var r=e._readableState;r.readableListening=e.listenerCount("readable")>0,r.resumeScheduled&&!r.paused?r.flowing=!0:e.listenerCount("data")>0&&e.resume()}function Dw(e){N("readable nexttick read 0"),e.read(0)}j.prototype.resume=function(){var e=this._readableState;return e.flowing||(N("resume"),e.flowing=!e.readableListening,Mw(this,e)),e.paused=!1,this};function Mw(e,r){r.resumeScheduled||(r.resumeScheduled=!0,process.nextTick(jw,e,r))}function jw(e,r){N("resume",r.reading),r.reading||e.read(0),r.resumeScheduled=!1,e.emit("resume"),wo(e),r.flowing&&!r.reading&&e.read(0)}j.prototype.pause=function(){return N("call pause flowing=%j",this._readableState.flowing),this._readableState.flowing!==!1&&(N("pause"),this._readableState.flowing=!1,this.emit("pause")),this._readableState.paused=!0,this};function wo(e){var r=e._readableState;for(N("flow",r.flowing);r.flowing&&e.read()!==null;);}j.prototype.wrap=function(e){var r=this,t=this._readableState,n=!1;e.on("end",function(){if(N("wrapped end"),t.decoder&&!t.ended){var o=t.decoder.end();o&&o.length&&r.push(o)}r.push(null)}),e.on("data",function(o){if(N("wrapped data"),t.decoder&&(o=t.decoder.write(o)),!(t.objectMode&&o==null)&&!(!t.objectMode&&(!o||!o.length))){var f=r.push(o);f||(n=!0,e.pause())}});for(var i in e)this[i]===void 0&&typeof e[i]=="function"&&(this[i]=(function(f){return function(){return e[f].apply(e,arguments)}})(i));for(var a=0;a<yo.length;a++)e.on(yo[a],this.emit.bind(this,yo[a]));return this._read=function(o){N("wrapped _read",o),n&&(n=!1,e.resume())},this};typeof Symbol=="function"&&(j.prototype[Symbol.asyncIterator]=function(){return ho===void 0&&(ho=Lh()),ho(this)});Object.defineProperty(j.prototype,"readableHighWaterMark",{enumerable:!1,get:function(){return this._readableState.highWaterMark}});Object.defineProperty(j.prototype,"readableBuffer",{enumerable:!1,get:function(){return this._readableState&&this._readableState.buffer}});Object.defineProperty(j.prototype,"readableFlowing",{enumerable:!1,get:function(){return this._readableState.flowing},set:function(r){this._readableState&&(this._readableState.flowing=r)}});j._fromList=Ch;Object.defineProperty(j.prototype,"readableLength",{enumerable:!1,get:function(){return this._readableState.length}});function Ch(e,r){if(r.length===0)return null;var t;return r.objectMode?t=r.buffer.shift():!e||e>=r.length?(r.decoder?t=r.buffer.join(""):r.buffer.length===1?t=r.buffer.first():t=r.buffer.concat(r.length),r.buffer.clear()):t=r.buffer.consume(e,r.decoder),t}function _o(e){var r=e._readableState;N("endReadable",r.endEmitted),r.endEmitted||(r.ended=!0,process.nextTick(Bw,r,e))}function Bw(e,r){if(N("endReadableNT",e.endEmitted,e.length),!e.endEmitted&&e.length===0&&(e.endEmitted=!0,r.readable=!1,r.emit("end"),e.autoDestroy)){var t=r._writableState;(!t||t.autoDestroy&&t.finished)&&r.destroy()}}typeof Symbol=="function"&&(j.from=function(e,r){return po===void 0&&(po=kh()),po(j,e,r)});function zh(e,r){for(var t=0,n=e.length;t<n;t++)if(e[t]===r)return t;return-1}});var Eo=y((AS,Hh)=>{"use strict";Hh.exports=De;var wi=sr().codes,qw=wi.ERR_METHOD_NOT_IMPLEMENTED,Uw=wi.ERR_MULTIPLE_CALLBACK,Cw=wi.ERR_TRANSFORM_ALREADY_TRANSFORMING,zw=wi.ERR_TRANSFORM_WITH_LENGTH_0,Ei=cr();Be()(De,Ei);function Zw(e,r){var t=this._transformState;t.transforming=!1;var n=t.writecb;if(n===null)return this.emit("error",new Uw);t.writechunk=null,t.writecb=null,r!=null&&this.push(r),n(e);var i=this._readableState;i.reading=!1,(i.needReadable||i.length<i.highWaterMark)&&this._read(i.highWaterMark)}function De(e){if(!(this instanceof De))return new De(e);Ei.call(this,e),this._transformState={afterTransform:Zw.bind(this),needTransform:!1,transforming:!1,writecb:null,writechunk:null,writeencoding:null},this._readableState.needReadable=!0,this._readableState.sync=!1,e&&(typeof e.transform=="function"&&(this._transform=e.transform),typeof e.flush=="function"&&(this._flush=e.flush)),this.on("prefinish",Ww)}function Ww(){var e=this;typeof this._flush=="function"&&!this._readableState.destroyed?this._flush(function(r,t){Wh(e,r,t)}):Wh(this,null,null)}De.prototype.push=function(e,r){return this._transformState.needTransform=!1,Ei.prototype.push.call(this,e,r)};De.prototype._transform=function(e,r,t){t(new qw("_transform()"))};De.prototype._write=function(e,r,t){var n=this._transformState;if(n.writecb=t,n.writechunk=e,n.writeencoding=r,!n.transforming){var i=this._readableState;(n.needTransform||i.needReadable||i.length<i.highWaterMark)&&this._read(i.highWaterMark)}};De.prototype._read=function(e){var r=this._transformState;r.writechunk!==null&&!r.transforming?(r.transforming=!0,this._transform(r.writechunk,r.writeencoding,r.afterTransform)):r.needTransform=!0};De.prototype._destroy=function(e,r){Ei.prototype._destroy.call(this,e,function(t){r(t)})};function Wh(e,r,t){if(r)return e.emit("error",r);if(t!=null&&e.push(t),e._writableState.length)throw new zw;if(e._transformState.transforming)throw new Cw;return e.push(null)}});var Vh=y((RS,$h)=>{"use strict";$h.exports=jt;var Gh=Eo();Be()(jt,Gh);function jt(e){if(!(this instanceof jt))return new jt(e);Gh.call(this,e)}jt.prototype._transform=function(e,r,t){t(null,e)}});var Qh=y((OS,Jh)=>{"use strict";var mo;function Hw(e){var r=!1;return function(){r||(r=!0,e.apply(void 0,arguments))}}var Xh=sr().codes,Gw=Xh.ERR_MISSING_ARGS,$w=Xh.ERR_STREAM_DESTROYED;function Yh(e){if(e)throw e}function Vw(e){return e.setHeader&&typeof e.abort=="function"}function Yw(e,r,t,n){n=Hw(n);var i=!1;e.on("close",function(){i=!0}),mo===void 0&&(mo=di()),mo(e,{readable:r,writable:t},function(o){if(o)return n(o);i=!0,n()});var a=!1;return function(o){if(!i&&!a){if(a=!0,Vw(e))return e.abort();if(typeof e.destroy=="function")return e.destroy();n(o||new $w("pipe"))}}}function Kh(e){e()}function Kw(e,r){return e.pipe(r)}function Xw(e){return!e.length||typeof e[e.length-1]!="function"?Yh:e.pop()}function Jw(){for(var e=arguments.length,r=new Array(e),t=0;t<e;t++)r[t]=arguments[t];var n=Xw(r);if(Array.isArray(r[0])&&(r=r[0]),r.length<2)throw new Gw("streams");var i,a=r.map(function(o,f){var s=f<r.length-1,u=f>0;return Yw(o,s,u,function(l){i||(i=l),l&&a.forEach(Kh),!s&&(a.forEach(Kh),n(i))})});return r.reduce(Kw)}Jh.exports=Jw});var xo=y((TS,ep)=>{ep.exports=he;var So=oi().EventEmitter,Qw=Be();Qw(he,So);he.Readable=ao();he.Writable=to();he.Duplex=cr();he.Transform=Eo();he.PassThrough=Vh();he.finished=di();he.pipeline=Qh();he.Stream=he;function he(){So.call(this)}he.prototype.pipe=function(e,r){var t=this;function n(l){e.writable&&e.write(l)===!1&&t.pause&&t.pause()}t.on("data",n);function i(){t.readable&&t.resume&&t.resume()}e.on("drain",i),!e._isStdio&&(!r||r.end!==!1)&&(t.on("end",o),t.on("close",f));var a=!1;function o(){a||(a=!0,e.end())}function f(){a||(a=!0,typeof e.destroy=="function"&&e.destroy())}function s(l){if(u(),So.listenerCount(this,"error")===0)throw l}t.on("error",s),e.on("error",s);function u(){t.removeListener("data",n),e.removeListener("drain",i),t.removeListener("end",o),t.removeListener("close",f),t.removeListener("error",s),e.removeListener("error",s),t.removeListener("end",u),t.removeListener("close",u),e.removeListener("close",u)}return t.on("end",u),t.on("close",u),e.on("close",u),e.emit("pipe",t),e}});var K={};Jd(K,{default:()=>rE,finished:()=>np,isDisturbed:()=>op,isErrored:()=>ap,isReadable:()=>ip});var Qr,tp,rp,mi,Ao,eE,np,ip,ap,op,rE,fp=Xd(()=>{"use strict";Qr=ft(xo());re(K,ft(xo()));tp=Qr.default??Qr.default??{},rp=Qr.finished??tp.finished,mi=e=>!!e&&typeof e.getReader=="function"&&typeof e.cancel=="function",Ao=e=>!!e&&typeof e.getWriter=="function"&&typeof e.abort=="function",eE=e=>e instanceof Error?e:e==null?new Error("stream errored"):new Error(String(e)),np=(e,r,t)=>{let n=r,i=t;if(typeof n=="function"&&(i=n,n={}),!mi(e)&&!Ao(e)&&typeof rp=="function")return rp(e,n,i);let a=typeof i=="function"?i:()=>{},o=n?.readable!==!1,f=n?.writable!==!1,s=!1,u=null,l=()=>{s=!0,u!==null&&(clearTimeout(u),u=null)},c=(h=void 0)=>{s||(l(),queueMicrotask(()=>a(h)))},p=()=>{if(s)return;let h=e?._state;if(h==="errored"){c(eE(e?._storedError));return}if(h==="closed"||mi(e)&&!o||Ao(e)&&!f){c();return}u=setTimeout(p,0)};return p(),l},ip=e=>mi(e)?e._state==="readable":!!e&&e.readable!==!1&&e.destroyed!==!0,ap=e=>mi(e)||Ao(e)?e?._state==="errored":e?.errored!=null,op=e=>!!(e?.locked||e?.disturbed===!0||e?._disturbed===!0||e?.readableDidRead===!0),rE={...tp,finished:np,isReadable:ip,isErrored:ap,isDisturbed:op}});var lp=y((NS,up)=>{"use strict";function tE(){this.input=null,this.next_in=0,this.avail_in=0,this.total_in=0,this.output=null,this.next_out=0,this.avail_out=0,this.total_out=0,this.msg="",this.state=null,this.data_type=2,this.adler=0}up.exports=tE});var Bt=y(Q=>{"use strict";var nE=typeof Uint8Array<"u"&&typeof Uint16Array<"u"&&typeof Int32Array<"u";function iE(e,r){return Object.prototype.hasOwnProperty.call(e,r)}Q.assign=function(e){for(var r=Array.prototype.slice.call(arguments,1);r.length;){var t=r.shift();if(t){if(typeof t!="object")throw new TypeError(t+"must be non-object");for(var n in t)iE(t,n)&&(e[n]=t[n])}}return e};Q.shrinkBuf=function(e,r){return e.length===r?e:e.subarray?e.subarray(0,r):(e.length=r,e)};var aE={arraySet:function(e,r,t,n,i){if(r.subarray&&e.subarray){e.set(r.subarray(t,t+n),i);return}for(var a=0;a<n;a++)e[i+a]=r[t+a]},flattenChunks:function(e){var r,t,n,i,a,o;for(n=0,r=0,t=e.length;r<t;r++)n+=e[r].length;for(o=new Uint8Array(n),i=0,r=0,t=e.length;r<t;r++)a=e[r],o.set(a,i),i+=a.length;return o}},oE={arraySet:function(e,r,t,n,i){for(var a=0;a<n;a++)e[i+a]=r[t+a]},flattenChunks:function(e){return[].concat.apply([],e)}};Q.setTyped=function(e){e?(Q.Buf8=Uint8Array,Q.Buf16=Uint16Array,Q.Buf32=Int32Array,Q.assign(Q,aE)):(Q.Buf8=Array,Q.Buf16=Array,Q.Buf32=Array,Q.assign(Q,oE))};Q.setTyped(nE)});var Fp=y(tt=>{"use strict";var fE=Bt(),uE=4,sp=0,cp=1,lE=2;function rt(e){for(var r=e.length;--r>=0;)e[r]=0}var sE=0,_p=1,cE=2,hE=3,pE=258,Fo=29,Wt=256,Ut=Wt+1+Fo,et=30,ko=19,gp=2*Ut+1,vr=15,Ro=16,dE=7,Po=256,bp=16,wp=17,Ep=18,No=[0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0],Si=[0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13],yE=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,7],mp=[16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15],vE=512,Me=new Array((Ut+2)*2);rt(Me);var qt=new Array(et*2);rt(qt);var Ct=new Array(vE);rt(Ct);var zt=new Array(pE-hE+1);rt(zt);var Do=new Array(Fo);rt(Do);var xi=new Array(et);rt(xi);function Oo(e,r,t,n,i){this.static_tree=e,this.extra_bits=r,this.extra_base=t,this.elems=n,this.max_length=i,this.has_stree=e&&e.length}var Sp,xp,Ap;function To(e,r){this.dyn_tree=e,this.max_code=0,this.stat_desc=r}function Rp(e){return e<256?Ct[e]:Ct[256+(e>>>7)]}function Zt(e,r){e.pending_buf[e.pending++]=r&255,e.pending_buf[e.pending++]=r>>>8&255}function ie(e,r,t){e.bi_valid>Ro-t?(e.bi_buf|=r<<e.bi_valid&65535,Zt(e,e.bi_buf),e.bi_buf=r>>Ro-e.bi_valid,e.bi_valid+=t-Ro):(e.bi_buf|=r<<e.bi_valid&65535,e.bi_valid+=t)}function Te(e,r,t){ie(e,t[r*2],t[r*2+1])}function Op(e,r){var t=0;do t|=e&1,e>>>=1,t<<=1;while(--r>0);return t>>>1}function _E(e){e.bi_valid===16?(Zt(e,e.bi_buf),e.bi_buf=0,e.bi_valid=0):e.bi_valid>=8&&(e.pending_buf[e.pending++]=e.bi_buf&255,e.bi_buf>>=8,e.bi_valid-=8)}function gE(e,r){var t=r.dyn_tree,n=r.max_code,i=r.stat_desc.static_tree,a=r.stat_desc.has_stree,o=r.stat_desc.extra_bits,f=r.stat_desc.extra_base,s=r.stat_desc.max_length,u,l,c,p,h,v,_=0;for(p=0;p<=vr;p++)e.bl_count[p]=0;for(t[e.heap[e.heap_max]*2+1]=0,u=e.heap_max+1;u<gp;u++)l=e.heap[u],p=t[t[l*2+1]*2+1]+1,p>s&&(p=s,_++),t[l*2+1]=p,!(l>n)&&(e.bl_count[p]++,h=0,l>=f&&(h=o[l-f]),v=t[l*2],e.opt_len+=v*(p+h),a&&(e.static_len+=v*(i[l*2+1]+h)));if(_!==0){do{for(p=s-1;e.bl_count[p]===0;)p--;e.bl_count[p]--,e.bl_count[p+1]+=2,e.bl_count[s]--,_-=2}while(_>0);for(p=s;p!==0;p--)for(l=e.bl_count[p];l!==0;)c=e.heap[--u],!(c>n)&&(t[c*2+1]!==p&&(e.opt_len+=(p-t[c*2+1])*t[c*2],t[c*2+1]=p),l--)}}function Tp(e,r,t){var n=new Array(vr+1),i=0,a,o;for(a=1;a<=vr;a++)n[a]=i=i+t[a-1]<<1;for(o=0;o<=r;o++){var f=e[o*2+1];f!==0&&(e[o*2]=Op(n[f]++,f))}}function bE(){var e,r,t,n,i,a=new Array(vr+1);for(t=0,n=0;n<Fo-1;n++)for(Do[n]=t,e=0;e<1<<No[n];e++)zt[t++]=n;for(zt[t-1]=n,i=0,n=0;n<16;n++)for(xi[n]=i,e=0;e<1<<Si[n];e++)Ct[i++]=n;for(i>>=7;n<et;n++)for(xi[n]=i<<7,e=0;e<1<<Si[n]-7;e++)Ct[256+i++]=n;for(r=0;r<=vr;r++)a[r]=0;for(e=0;e<=143;)Me[e*2+1]=8,e++,a[8]++;for(;e<=255;)Me[e*2+1]=9,e++,a[9]++;for(;e<=279;)Me[e*2+1]=7,e++,a[7]++;for(;e<=287;)Me[e*2+1]=8,e++,a[8]++;for(Tp(Me,Ut+1,a),e=0;e<et;e++)qt[e*2+1]=5,qt[e*2]=Op(e,5);Sp=new Oo(Me,No,Wt+1,Ut,vr),xp=new Oo(qt,Si,0,et,vr),Ap=new Oo(new Array(0),yE,0,ko,dE)}function Ip(e){var r;for(r=0;r<Ut;r++)e.dyn_ltree[r*2]=0;for(r=0;r<et;r++)e.dyn_dtree[r*2]=0;for(r=0;r<ko;r++)e.bl_tree[r*2]=0;e.dyn_ltree[Po*2]=1,e.opt_len=e.static_len=0,e.last_lit=e.matches=0}function Np(e){e.bi_valid>8?Zt(e,e.bi_buf):e.bi_valid>0&&(e.pending_buf[e.pending++]=e.bi_buf),e.bi_buf=0,e.bi_valid=0}function wE(e,r,t,n){Np(e),n&&(Zt(e,t),Zt(e,~t)),fE.arraySet(e.pending_buf,e.window,r,t,e.pending),e.pending+=t}function hp(e,r,t,n){var i=r*2,a=t*2;return e[i]<e[a]||e[i]===e[a]&&n[r]<=n[t]}function Io(e,r,t){for(var n=e.heap[t],i=t<<1;i<=e.heap_len&&(i<e.heap_len&&hp(r,e.heap[i+1],e.heap[i],e.depth)&&i++,!hp(r,n,e.heap[i],e.depth));)e.heap[t]=e.heap[i],t=i,i<<=1;e.heap[t]=n}function pp(e,r,t){var n,i,a=0,o,f;if(e.last_lit!==0)do n=e.pending_buf[e.d_buf+a*2]<<8|e.pending_buf[e.d_buf+a*2+1],i=e.pending_buf[e.l_buf+a],a++,n===0?Te(e,i,r):(o=zt[i],Te(e,o+Wt+1,r),f=No[o],f!==0&&(i-=Do[o],ie(e,i,f)),n--,o=Rp(n),Te(e,o,t),f=Si[o],f!==0&&(n-=xi[o],ie(e,n,f)));while(a<e.last_lit);Te(e,Po,r)}function Lo(e,r){var t=r.dyn_tree,n=r.stat_desc.static_tree,i=r.stat_desc.has_stree,a=r.stat_desc.elems,o,f,s=-1,u;for(e.heap_len=0,e.heap_max=gp,o=0;o<a;o++)t[o*2]!==0?(e.heap[++e.heap_len]=s=o,e.depth[o]=0):t[o*2+1]=0;for(;e.heap_len<2;)u=e.heap[++e.heap_len]=s<2?++s:0,t[u*2]=1,e.depth[u]=0,e.opt_len--,i&&(e.static_len-=n[u*2+1]);for(r.max_code=s,o=e.heap_len>>1;o>=1;o--)Io(e,t,o);u=a;do o=e.heap[1],e.heap[1]=e.heap[e.heap_len--],Io(e,t,1),f=e.heap[1],e.heap[--e.heap_max]=o,e.heap[--e.heap_max]=f,t[u*2]=t[o*2]+t[f*2],e.depth[u]=(e.depth[o]>=e.depth[f]?e.depth[o]:e.depth[f])+1,t[o*2+1]=t[f*2+1]=u,e.heap[1]=u++,Io(e,t,1);while(e.heap_len>=2);e.heap[--e.heap_max]=e.heap[1],gE(e,r),Tp(t,s,e.bl_count)}function dp(e,r,t){var n,i=-1,a,o=r[1],f=0,s=7,u=4;for(o===0&&(s=138,u=3),r[(t+1)*2+1]=65535,n=0;n<=t;n++)a=o,o=r[(n+1)*2+1],!(++f<s&&a===o)&&(f<u?e.bl_tree[a*2]+=f:a!==0?(a!==i&&e.bl_tree[a*2]++,e.bl_tree[bp*2]++):f<=10?e.bl_tree[wp*2]++:e.bl_tree[Ep*2]++,f=0,i=a,o===0?(s=138,u=3):a===o?(s=6,u=3):(s=7,u=4))}function yp(e,r,t){var n,i=-1,a,o=r[1],f=0,s=7,u=4;for(o===0&&(s=138,u=3),n=0;n<=t;n++)if(a=o,o=r[(n+1)*2+1],!(++f<s&&a===o)){if(f<u)do Te(e,a,e.bl_tree);while(--f!==0);else a!==0?(a!==i&&(Te(e,a,e.bl_tree),f--),Te(e,bp,e.bl_tree),ie(e,f-3,2)):f<=10?(Te(e,wp,e.bl_tree),ie(e,f-3,3)):(Te(e,Ep,e.bl_tree),ie(e,f-11,7));f=0,i=a,o===0?(s=138,u=3):a===o?(s=6,u=3):(s=7,u=4)}}function EE(e){var r;for(dp(e,e.dyn_ltree,e.l_desc.max_code),dp(e,e.dyn_dtree,e.d_desc.max_code),Lo(e,e.bl_desc),r=ko-1;r>=3&&e.bl_tree[mp[r]*2+1]===0;r--);return e.opt_len+=3*(r+1)+5+5+4,r}function mE(e,r,t,n){var i;for(ie(e,r-257,5),ie(e,t-1,5),ie(e,n-4,4),i=0;i<n;i++)ie(e,e.bl_tree[mp[i]*2+1],3);yp(e,e.dyn_ltree,r-1),yp(e,e.dyn_dtree,t-1)}function SE(e){var r=4093624447,t;for(t=0;t<=31;t++,r>>>=1)if(r&1&&e.dyn_ltree[t*2]!==0)return sp;if(e.dyn_ltree[18]!==0||e.dyn_ltree[20]!==0||e.dyn_ltree[26]!==0)return cp;for(t=32;t<Wt;t++)if(e.dyn_ltree[t*2]!==0)return cp;return sp}var vp=!1;function xE(e){vp||(bE(),vp=!0),e.l_desc=new To(e.dyn_ltree,Sp),e.d_desc=new To(e.dyn_dtree,xp),e.bl_desc=new To(e.bl_tree,Ap),e.bi_buf=0,e.bi_valid=0,Ip(e)}function Lp(e,r,t,n){ie(e,(sE<<1)+(n?1:0),3),wE(e,r,t,!0)}function AE(e){ie(e,_p<<1,3),Te(e,Po,Me),_E(e)}function RE(e,r,t,n){var i,a,o=0;e.level>0?(e.strm.data_type===lE&&(e.strm.data_type=SE(e)),Lo(e,e.l_desc),Lo(e,e.d_desc),o=EE(e),i=e.opt_len+3+7>>>3,a=e.static_len+3+7>>>3,a<=i&&(i=a)):i=a=t+5,t+4<=i&&r!==-1?Lp(e,r,t,n):e.strategy===uE||a===i?(ie(e,(_p<<1)+(n?1:0),3),pp(e,Me,qt)):(ie(e,(cE<<1)+(n?1:0),3),mE(e,e.l_desc.max_code+1,e.d_desc.max_code+1,o+1),pp(e,e.dyn_ltree,e.dyn_dtree)),Ip(e),n&&Np(e)}function OE(e,r,t){return e.pending_buf[e.d_buf+e.last_lit*2]=r>>>8&255,e.pending_buf[e.d_buf+e.last_lit*2+1]=r&255,e.pending_buf[e.l_buf+e.last_lit]=t&255,e.last_lit++,r===0?e.dyn_ltree[t*2]++:(e.matches++,r--,e.dyn_ltree[(zt[t]+Wt+1)*2]++,e.dyn_dtree[Rp(r)*2]++),e.last_lit===e.lit_bufsize-1}tt._tr_init=xE;tt._tr_stored_block=Lp;tt._tr_flush_block=RE;tt._tr_tally=OE;tt._tr_align=AE});var Mo=y((kS,kp)=>{"use strict";function TE(e,r,t,n){for(var i=e&65535|0,a=e>>>16&65535|0,o=0;t!==0;){o=t>2e3?2e3:t,t-=o;do i=i+r[n++]|0,a=a+i|0;while(--o);i%=65521,a%=65521}return i|a<<16|0}kp.exports=TE});var jo=y((PS,Pp)=>{"use strict";function IE(){for(var e,r=[],t=0;t<256;t++){e=t;for(var n=0;n<8;n++)e=e&1?3988292384^e>>>1:e>>>1;r[t]=e}return r}var NE=IE();function LE(e,r,t,n){var i=NE,a=n+t;e^=-1;for(var o=n;o<a;o++)e=e>>>8^i[(e^r[o])&255];return e^-1}Pp.exports=LE});var Mp=y((DS,Dp)=>{"use strict";Dp.exports={2:"need dictionary",1:"stream end",0:"","-1":"file error","-2":"stream error","-3":"data error","-4":"insufficient memory","-5":"buffer error","-6":"incompatible version"}});var Hp=y(Le=>{"use strict";var ee=Bt(),pe=Fp(),Up=Mo(),Ve=jo(),FE=Mp(),wr=0,kE=1,PE=3,Qe=4,jp=5,Ne=0,Bp=1,de=-2,DE=-3,Bo=-5,ME=-1,jE=1,Ai=2,BE=3,qE=4,UE=0,CE=2,Ii=8,zE=9,ZE=15,WE=8,HE=29,GE=256,Uo=GE+1+HE,$E=30,VE=19,YE=2*Uo+1,KE=15,M=3,Xe=258,Ee=Xe+M+1,XE=32,Ni=42,Co=69,Ri=73,Oi=91,Ti=103,_r=113,Gt=666,H=1,$t=2,gr=3,at=4,JE=3;function Je(e,r){return e.msg=FE[r],r}function qp(e){return(e<<1)-(e>4?9:0)}function Ke(e){for(var r=e.length;--r>=0;)e[r]=0}function Ye(e){var r=e.state,t=r.pending;t>e.avail_out&&(t=e.avail_out),t!==0&&(ee.arraySet(e.output,r.pending_buf,r.pending_out,t,e.next_out),e.next_out+=t,r.pending_out+=t,e.total_out+=t,e.avail_out-=t,r.pending-=t,r.pending===0&&(r.pending_out=0))}function Y(e,r){pe._tr_flush_block(e,e.block_start>=0?e.block_start:-1,e.strstart-e.block_start,r),e.block_start=e.strstart,Ye(e.strm)}function B(e,r){e.pending_buf[e.pending++]=r}function Ht(e,r){e.pending_buf[e.pending++]=r>>>8&255,e.pending_buf[e.pending++]=r&255}function QE(e,r,t,n){var i=e.avail_in;return i>n&&(i=n),i===0?0:(e.avail_in-=i,ee.arraySet(r,e.input,e.next_in,i,t),e.state.wrap===1?e.adler=Up(e.adler,r,i,t):e.state.wrap===2&&(e.adler=Ve(e.adler,r,i,t)),e.next_in+=i,e.total_in+=i,i)}function Cp(e,r){var t=e.max_chain_length,n=e.strstart,i,a,o=e.prev_length,f=e.nice_match,s=e.strstart>e.w_size-Ee?e.strstart-(e.w_size-Ee):0,u=e.window,l=e.w_mask,c=e.prev,p=e.strstart+Xe,h=u[n+o-1],v=u[n+o];e.prev_length>=e.good_match&&(t>>=2),f>e.lookahead&&(f=e.lookahead);do if(i=r,!(u[i+o]!==v||u[i+o-1]!==h||u[i]!==u[n]||u[++i]!==u[n+1])){n+=2,i++;do;while(u[++n]===u[++i]&&u[++n]===u[++i]&&u[++n]===u[++i]&&u[++n]===u[++i]&&u[++n]===u[++i]&&u[++n]===u[++i]&&u[++n]===u[++i]&&u[++n]===u[++i]&&n<p);if(a=Xe-(p-n),n=p-Xe,a>o){if(e.match_start=r,o=a,a>=f)break;h=u[n+o-1],v=u[n+o]}}while((r=c[r&l])>s&&--t!==0);return o<=e.lookahead?o:e.lookahead}function br(e){var r=e.w_size,t,n,i,a,o;do{if(a=e.window_size-e.lookahead-e.strstart,e.strstart>=r+(r-Ee)){ee.arraySet(e.window,e.window,r,r,0),e.match_start-=r,e.strstart-=r,e.block_start-=r,n=e.hash_size,t=n;do i=e.head[--t],e.head[t]=i>=r?i-r:0;while(--n);n=r,t=n;do i=e.prev[--t],e.prev[t]=i>=r?i-r:0;while(--n);a+=r}if(e.strm.avail_in===0)break;if(n=QE(e.strm,e.window,e.strstart+e.lookahead,a),e.lookahead+=n,e.lookahead+e.insert>=M)for(o=e.strstart-e.insert,e.ins_h=e.window[o],e.ins_h=(e.ins_h<<e.hash_shift^e.window[o+1])&e.hash_mask;e.insert&&(e.ins_h=(e.ins_h<<e.hash_shift^e.window[o+M-1])&e.hash_mask,e.prev[o&e.w_mask]=e.head[e.ins_h],e.head[e.ins_h]=o,o++,e.insert--,!(e.lookahead+e.insert<M)););}while(e.lookahead<Ee&&e.strm.avail_in!==0)}function em(e,r){var t=65535;for(t>e.pending_buf_size-5&&(t=e.pending_buf_size-5);;){if(e.lookahead<=1){if(br(e),e.lookahead===0&&r===wr)return H;if(e.lookahead===0)break}e.strstart+=e.lookahead,e.lookahead=0;var n=e.block_start+t;if((e.strstart===0||e.strstart>=n)&&(e.lookahead=e.strstart-n,e.strstart=n,Y(e,!1),e.strm.avail_out===0)||e.strstart-e.block_start>=e.w_size-Ee&&(Y(e,!1),e.strm.avail_out===0))return H}return e.insert=0,r===Qe?(Y(e,!0),e.strm.avail_out===0?gr:at):(e.strstart>e.block_start&&(Y(e,!1),e.strm.avail_out===0),H)}function qo(e,r){for(var t,n;;){if(e.lookahead<Ee){if(br(e),e.lookahead<Ee&&r===wr)return H;if(e.lookahead===0)break}if(t=0,e.lookahead>=M&&(e.ins_h=(e.ins_h<<e.hash_shift^e.window[e.strstart+M-1])&e.hash_mask,t=e.prev[e.strstart&e.w_mask]=e.head[e.ins_h],e.head[e.ins_h]=e.strstart),t!==0&&e.strstart-t<=e.w_size-Ee&&(e.match_length=Cp(e,t)),e.match_length>=M)if(n=pe._tr_tally(e,e.strstart-e.match_start,e.match_length-M),e.lookahead-=e.match_length,e.match_length<=e.max_lazy_match&&e.lookahead>=M){e.match_length--;do e.strstart++,e.ins_h=(e.ins_h<<e.hash_shift^e.window[e.strstart+M-1])&e.hash_mask,t=e.prev[e.strstart&e.w_mask]=e.head[e.ins_h],e.head[e.ins_h]=e.strstart;while(--e.match_length!==0);e.strstart++}else e.strstart+=e.match_length,e.match_length=0,e.ins_h=e.window[e.strstart],e.ins_h=(e.ins_h<<e.hash_shift^e.window[e.strstart+1])&e.hash_mask;else n=pe._tr_tally(e,0,e.window[e.strstart]),e.lookahead--,e.strstart++;if(n&&(Y(e,!1),e.strm.avail_out===0))return H}return e.insert=e.strstart<M-1?e.strstart:M-1,r===Qe?(Y(e,!0),e.strm.avail_out===0?gr:at):e.last_lit&&(Y(e,!1),e.strm.avail_out===0)?H:$t}function nt(e,r){for(var t,n,i;;){if(e.lookahead<Ee){if(br(e),e.lookahead<Ee&&r===wr)return H;if(e.lookahead===0)break}if(t=0,e.lookahead>=M&&(e.ins_h=(e.ins_h<<e.hash_shift^e.window[e.strstart+M-1])&e.hash_mask,t=e.prev[e.strstart&e.w_mask]=e.head[e.ins_h],e.head[e.ins_h]=e.strstart),e.prev_length=e.match_length,e.prev_match=e.match_start,e.match_length=M-1,t!==0&&e.prev_length<e.max_lazy_match&&e.strstart-t<=e.w_size-Ee&&(e.match_length=Cp(e,t),e.match_length<=5&&(e.strategy===jE||e.match_length===M&&e.strstart-e.match_start>4096)&&(e.match_length=M-1)),e.prev_length>=M&&e.match_length<=e.prev_length){i=e.strstart+e.lookahead-M,n=pe._tr_tally(e,e.strstart-1-e.prev_match,e.prev_length-M),e.lookahead-=e.prev_length-1,e.prev_length-=2;do++e.strstart<=i&&(e.ins_h=(e.ins_h<<e.hash_shift^e.window[e.strstart+M-1])&e.hash_mask,t=e.prev[e.strstart&e.w_mask]=e.head[e.ins_h],e.head[e.ins_h]=e.strstart);while(--e.prev_length!==0);if(e.match_available=0,e.match_length=M-1,e.strstart++,n&&(Y(e,!1),e.strm.avail_out===0))return H}else if(e.match_available){if(n=pe._tr_tally(e,0,e.window[e.strstart-1]),n&&Y(e,!1),e.strstart++,e.lookahead--,e.strm.avail_out===0)return H}else e.match_available=1,e.strstart++,e.lookahead--}return e.match_available&&(n=pe._tr_tally(e,0,e.window[e.strstart-1]),e.match_available=0),e.insert=e.strstart<M-1?e.strstart:M-1,r===Qe?(Y(e,!0),e.strm.avail_out===0?gr:at):e.last_lit&&(Y(e,!1),e.strm.avail_out===0)?H:$t}function rm(e,r){for(var t,n,i,a,o=e.window;;){if(e.lookahead<=Xe){if(br(e),e.lookahead<=Xe&&r===wr)return H;if(e.lookahead===0)break}if(e.match_length=0,e.lookahead>=M&&e.strstart>0&&(i=e.strstart-1,n=o[i],n===o[++i]&&n===o[++i]&&n===o[++i])){a=e.strstart+Xe;do;while(n===o[++i]&&n===o[++i]&&n===o[++i]&&n===o[++i]&&n===o[++i]&&n===o[++i]&&n===o[++i]&&n===o[++i]&&i<a);e.match_length=Xe-(a-i),e.match_length>e.lookahead&&(e.match_length=e.lookahead)}if(e.match_length>=M?(t=pe._tr_tally(e,1,e.match_length-M),e.lookahead-=e.match_length,e.strstart+=e.match_length,e.match_length=0):(t=pe._tr_tally(e,0,e.window[e.strstart]),e.lookahead--,e.strstart++),t&&(Y(e,!1),e.strm.avail_out===0))return H}return e.insert=0,r===Qe?(Y(e,!0),e.strm.avail_out===0?gr:at):e.last_lit&&(Y(e,!1),e.strm.avail_out===0)?H:$t}function tm(e,r){for(var t;;){if(e.lookahead===0&&(br(e),e.lookahead===0)){if(r===wr)return H;break}if(e.match_length=0,t=pe._tr_tally(e,0,e.window[e.strstart]),e.lookahead--,e.strstart++,t&&(Y(e,!1),e.strm.avail_out===0))return H}return e.insert=0,r===Qe?(Y(e,!0),e.strm.avail_out===0?gr:at):e.last_lit&&(Y(e,!1),e.strm.avail_out===0)?H:$t}function Ie(e,r,t,n,i){this.good_length=e,this.max_lazy=r,this.nice_length=t,this.max_chain=n,this.func=i}var it;it=[new Ie(0,0,0,0,em),new Ie(4,4,8,4,qo),new Ie(4,5,16,8,qo),new Ie(4,6,32,32,qo),new Ie(4,4,16,16,nt),new Ie(8,16,32,32,nt),new Ie(8,16,128,128,nt),new Ie(8,32,128,256,nt),new Ie(32,128,258,1024,nt),new Ie(32,258,258,4096,nt)];function nm(e){e.window_size=2*e.w_size,Ke(e.head),e.max_lazy_match=it[e.level].max_lazy,e.good_match=it[e.level].good_length,e.nice_match=it[e.level].nice_length,e.max_chain_length=it[e.level].max_chain,e.strstart=0,e.block_start=0,e.lookahead=0,e.insert=0,e.match_length=e.prev_length=M-1,e.match_available=0,e.ins_h=0}function im(){this.strm=null,this.status=0,this.pending_buf=null,this.pending_buf_size=0,this.pending_out=0,this.pending=0,this.wrap=0,this.gzhead=null,this.gzindex=0,this.method=Ii,this.last_flush=-1,this.w_size=0,this.w_bits=0,this.w_mask=0,this.window=null,this.window_size=0,this.prev=null,this.head=null,this.ins_h=0,this.hash_size=0,this.hash_bits=0,this.hash_mask=0,this.hash_shift=0,this.block_start=0,this.match_length=0,this.prev_match=0,this.match_available=0,this.strstart=0,this.match_start=0,this.lookahead=0,this.prev_length=0,this.max_chain_length=0,this.max_lazy_match=0,this.level=0,this.strategy=0,this.good_match=0,this.nice_match=0,this.dyn_ltree=new ee.Buf16(YE*2),this.dyn_dtree=new ee.Buf16((2*$E+1)*2),this.bl_tree=new ee.Buf16((2*VE+1)*2),Ke(this.dyn_ltree),Ke(this.dyn_dtree),Ke(this.bl_tree),this.l_desc=null,this.d_desc=null,this.bl_desc=null,this.bl_count=new ee.Buf16(KE+1),this.heap=new ee.Buf16(2*Uo+1),Ke(this.heap),this.heap_len=0,this.heap_max=0,this.depth=new ee.Buf16(2*Uo+1),Ke(this.depth),this.l_buf=0,this.lit_bufsize=0,this.last_lit=0,this.d_buf=0,this.opt_len=0,this.static_len=0,this.matches=0,this.insert=0,this.bi_buf=0,this.bi_valid=0}function zp(e){var r;return!e||!e.state?Je(e,de):(e.total_in=e.total_out=0,e.data_type=CE,r=e.state,r.pending=0,r.pending_out=0,r.wrap<0&&(r.wrap=-r.wrap),r.status=r.wrap?Ni:_r,e.adler=r.wrap===2?0:1,r.last_flush=wr,pe._tr_init(r),Ne)}function Zp(e){var r=zp(e);return r===Ne&&nm(e.state),r}function am(e,r){return!e||!e.state||e.state.wrap!==2?de:(e.state.gzhead=r,Ne)}function Wp(e,r,t,n,i,a){if(!e)return de;var o=1;if(r===ME&&(r=6),n<0?(o=0,n=-n):n>15&&(o=2,n-=16),i<1||i>zE||t!==Ii||n<8||n>15||r<0||r>9||a<0||a>qE)return Je(e,de);n===8&&(n=9);var f=new im;return e.state=f,f.strm=e,f.wrap=o,f.gzhead=null,f.w_bits=n,f.w_size=1<<f.w_bits,f.w_mask=f.w_size-1,f.hash_bits=i+7,f.hash_size=1<<f.hash_bits,f.hash_mask=f.hash_size-1,f.hash_shift=~~((f.hash_bits+M-1)/M),f.window=new ee.Buf8(f.w_size*2),f.head=new ee.Buf16(f.hash_size),f.prev=new ee.Buf16(f.w_size),f.lit_bufsize=1<<i+6,f.pending_buf_size=f.lit_bufsize*4,f.pending_buf=new ee.Buf8(f.pending_buf_size),f.d_buf=1*f.lit_bufsize,f.l_buf=3*f.lit_bufsize,f.level=r,f.strategy=a,f.method=t,Zp(e)}function om(e,r){return Wp(e,r,Ii,ZE,WE,UE)}function fm(e,r){var t,n,i,a;if(!e||!e.state||r>jp||r<0)return e?Je(e,de):de;if(n=e.state,!e.output||!e.input&&e.avail_in!==0||n.status===Gt&&r!==Qe)return Je(e,e.avail_out===0?Bo:de);if(n.strm=e,t=n.last_flush,n.last_flush=r,n.status===Ni)if(n.wrap===2)e.adler=0,B(n,31),B(n,139),B(n,8),n.gzhead?(B(n,(n.gzhead.text?1:0)+(n.gzhead.hcrc?2:0)+(n.gzhead.extra?4:0)+(n.gzhead.name?8:0)+(n.gzhead.comment?16:0)),B(n,n.gzhead.time&255),B(n,n.gzhead.time>>8&255),B(n,n.gzhead.time>>16&255),B(n,n.gzhead.time>>24&255),B(n,n.level===9?2:n.strategy>=Ai||n.level<2?4:0),B(n,n.gzhead.os&255),n.gzhead.extra&&n.gzhead.extra.length&&(B(n,n.gzhead.extra.length&255),B(n,n.gzhead.extra.length>>8&255)),n.gzhead.hcrc&&(e.adler=Ve(e.adler,n.pending_buf,n.pending,0)),n.gzindex=0,n.status=Co):(B(n,0),B(n,0),B(n,0),B(n,0),B(n,0),B(n,n.level===9?2:n.strategy>=Ai||n.level<2?4:0),B(n,JE),n.status=_r);else{var o=Ii+(n.w_bits-8<<4)<<8,f=-1;n.strategy>=Ai||n.level<2?f=0:n.level<6?f=1:n.level===6?f=2:f=3,o|=f<<6,n.strstart!==0&&(o|=XE),o+=31-o%31,n.status=_r,Ht(n,o),n.strstart!==0&&(Ht(n,e.adler>>>16),Ht(n,e.adler&65535)),e.adler=1}if(n.status===Co)if(n.gzhead.extra){for(i=n.pending;n.gzindex<(n.gzhead.extra.length&65535)&&!(n.pending===n.pending_buf_size&&(n.gzhead.hcrc&&n.pending>i&&(e.adler=Ve(e.adler,n.pending_buf,n.pending-i,i)),Ye(e),i=n.pending,n.pending===n.pending_buf_size));)B(n,n.gzhead.extra[n.gzindex]&255),n.gzindex++;n.gzhead.hcrc&&n.pending>i&&(e.adler=Ve(e.adler,n.pending_buf,n.pending-i,i)),n.gzindex===n.gzhead.extra.length&&(n.gzindex=0,n.status=Ri)}else n.status=Ri;if(n.status===Ri)if(n.gzhead.name){i=n.pending;do{if(n.pending===n.pending_buf_size&&(n.gzhead.hcrc&&n.pending>i&&(e.adler=Ve(e.adler,n.pending_buf,n.pending-i,i)),Ye(e),i=n.pending,n.pending===n.pending_buf_size)){a=1;break}n.gzindex<n.gzhead.name.length?a=n.gzhead.name.charCodeAt(n.gzindex++)&255:a=0,B(n,a)}while(a!==0);n.gzhead.hcrc&&n.pending>i&&(e.adler=Ve(e.adler,n.pending_buf,n.pending-i,i)),a===0&&(n.gzindex=0,n.status=Oi)}else n.status=Oi;if(n.status===Oi)if(n.gzhead.comment){i=n.pending;do{if(n.pending===n.pending_buf_size&&(n.gzhead.hcrc&&n.pending>i&&(e.adler=Ve(e.adler,n.pending_buf,n.pending-i,i)),Ye(e),i=n.pending,n.pending===n.pending_buf_size)){a=1;break}n.gzindex<n.gzhead.comment.length?a=n.gzhead.comment.charCodeAt(n.gzindex++)&255:a=0,B(n,a)}while(a!==0);n.gzhead.hcrc&&n.pending>i&&(e.adler=Ve(e.adler,n.pending_buf,n.pending-i,i)),a===0&&(n.status=Ti)}else n.status=Ti;if(n.status===Ti&&(n.gzhead.hcrc?(n.pending+2>n.pending_buf_size&&Ye(e),n.pending+2<=n.pending_buf_size&&(B(n,e.adler&255),B(n,e.adler>>8&255),e.adler=0,n.status=_r)):n.status=_r),n.pending!==0){if(Ye(e),e.avail_out===0)return n.last_flush=-1,Ne}else if(e.avail_in===0&&qp(r)<=qp(t)&&r!==Qe)return Je(e,Bo);if(n.status===Gt&&e.avail_in!==0)return Je(e,Bo);if(e.avail_in!==0||n.lookahead!==0||r!==wr&&n.status!==Gt){var s=n.strategy===Ai?tm(n,r):n.strategy===BE?rm(n,r):it[n.level].func(n,r);if((s===gr||s===at)&&(n.status=Gt),s===H||s===gr)return e.avail_out===0&&(n.last_flush=-1),Ne;if(s===$t&&(r===kE?pe._tr_align(n):r!==jp&&(pe._tr_stored_block(n,0,0,!1),r===PE&&(Ke(n.head),n.lookahead===0&&(n.strstart=0,n.block_start=0,n.insert=0))),Ye(e),e.avail_out===0))return n.last_flush=-1,Ne}return r!==Qe?Ne:n.wrap<=0?Bp:(n.wrap===2?(B(n,e.adler&255),B(n,e.adler>>8&255),B(n,e.adler>>16&255),B(n,e.adler>>24&255),B(n,e.total_in&255),B(n,e.total_in>>8&255),B(n,e.total_in>>16&255),B(n,e.total_in>>24&255)):(Ht(n,e.adler>>>16),Ht(n,e.adler&65535)),Ye(e),n.wrap>0&&(n.wrap=-n.wrap),n.pending!==0?Ne:Bp)}function um(e){var r;return!e||!e.state?de:(r=e.state.status,r!==Ni&&r!==Co&&r!==Ri&&r!==Oi&&r!==Ti&&r!==_r&&r!==Gt?Je(e,de):(e.state=null,r===_r?Je(e,DE):Ne))}function lm(e,r){var t=r.length,n,i,a,o,f,s,u,l;if(!e||!e.state||(n=e.state,o=n.wrap,o===2||o===1&&n.status!==Ni||n.lookahead))return de;for(o===1&&(e.adler=Up(e.adler,r,t,0)),n.wrap=0,t>=n.w_size&&(o===0&&(Ke(n.head),n.strstart=0,n.block_start=0,n.insert=0),l=new ee.Buf8(n.w_size),ee.arraySet(l,r,t-n.w_size,n.w_size,0),r=l,t=n.w_size),f=e.avail_in,s=e.next_in,u=e.input,e.avail_in=t,e.next_in=0,e.input=r,br(n);n.lookahead>=M;){i=n.strstart,a=n.lookahead-(M-1);do n.ins_h=(n.ins_h<<n.hash_shift^n.window[i+M-1])&n.hash_mask,n.prev[i&n.w_mask]=n.head[n.ins_h],n.head[n.ins_h]=i,i++;while(--a);n.strstart=i,n.lookahead=M-1,br(n)}return n.strstart+=n.lookahead,n.block_start=n.strstart,n.insert=n.lookahead,n.lookahead=0,n.match_length=n.prev_length=M-1,n.match_available=0,e.next_in=s,e.input=u,e.avail_in=f,n.wrap=o,Ne}Le.deflateInit=om;Le.deflateInit2=Wp;Le.deflateReset=Zp;Le.deflateResetKeep=zp;Le.deflateSetHeader=am;Le.deflate=fm;Le.deflateEnd=um;Le.deflateSetDictionary=lm;Le.deflateInfo="pako deflate (from Nodeca project)"});var $p=y((jS,Gp)=>{"use strict";var Li=30,sm=12;Gp.exports=function(r,t){var n,i,a,o,f,s,u,l,c,p,h,v,_,m,w,L,A,T,b,R,I,S,D,W,O;n=r.state,i=r.next_in,W=r.input,a=i+(r.avail_in-5),o=r.next_out,O=r.output,f=o-(t-r.avail_out),s=o+(r.avail_out-257),u=n.dmax,l=n.wsize,c=n.whave,p=n.wnext,h=n.window,v=n.hold,_=n.bits,m=n.lencode,w=n.distcode,L=(1<<n.lenbits)-1,A=(1<<n.distbits)-1;e:do{_<15&&(v+=W[i++]<<_,_+=8,v+=W[i++]<<_,_+=8),T=m[v&L];r:for(;;){if(b=T>>>24,v>>>=b,_-=b,b=T>>>16&255,b===0)O[o++]=T&65535;else if(b&16){R=T&65535,b&=15,b&&(_<b&&(v+=W[i++]<<_,_+=8),R+=v&(1<<b)-1,v>>>=b,_-=b),_<15&&(v+=W[i++]<<_,_+=8,v+=W[i++]<<_,_+=8),T=w[v&A];t:for(;;){if(b=T>>>24,v>>>=b,_-=b,b=T>>>16&255,b&16){if(I=T&65535,b&=15,_<b&&(v+=W[i++]<<_,_+=8,_<b&&(v+=W[i++]<<_,_+=8)),I+=v&(1<<b)-1,I>u){r.msg="invalid distance too far back",n.mode=Li;break e}if(v>>>=b,_-=b,b=o-f,I>b){if(b=I-b,b>c&&n.sane){r.msg="invalid distance too far back",n.mode=Li;break e}if(S=0,D=h,p===0){if(S+=l-b,b<R){R-=b;do O[o++]=h[S++];while(--b);S=o-I,D=O}}else if(p<b){if(S+=l+p-b,b-=p,b<R){R-=b;do O[o++]=h[S++];while(--b);if(S=0,p<R){b=p,R-=b;do O[o++]=h[S++];while(--b);S=o-I,D=O}}}else if(S+=p-b,b<R){R-=b;do O[o++]=h[S++];while(--b);S=o-I,D=O}for(;R>2;)O[o++]=D[S++],O[o++]=D[S++],O[o++]=D[S++],R-=3;R&&(O[o++]=D[S++],R>1&&(O[o++]=D[S++]))}else{S=o-I;do O[o++]=O[S++],O[o++]=O[S++],O[o++]=O[S++],R-=3;while(R>2);R&&(O[o++]=O[S++],R>1&&(O[o++]=O[S++]))}}else if((b&64)===0){T=w[(T&65535)+(v&(1<<b)-1)];continue t}else{r.msg="invalid distance code",n.mode=Li;break e}break}}else if((b&64)===0){T=m[(T&65535)+(v&(1<<b)-1)];continue r}else if(b&32){n.mode=sm;break e}else{r.msg="invalid literal/length code",n.mode=Li;break e}break}}while(i<a&&o<s);R=_>>3,i-=R,_-=R<<3,v&=(1<<_)-1,r.next_in=i,r.next_out=o,r.avail_in=i<a?5+(a-i):5-(i-a),r.avail_out=o<s?257+(s-o):257-(o-s),n.hold=v,n.bits=_}});var ed=y((BS,Qp)=>{"use strict";var Vp=Bt(),ot=15,Yp=852,Kp=592,Xp=0,zo=1,Jp=2,cm=[3,4,5,6,7,8,9,10,11,13,15,17,19,23,27,31,35,43,51,59,67,83,99,115,131,163,195,227,258,0,0],hm=[16,16,16,16,16,16,16,16,17,17,17,17,18,18,18,18,19,19,19,19,20,20,20,20,21,21,21,21,16,72,78],pm=[1,2,3,4,5,7,9,13,17,25,33,49,65,97,129,193,257,385,513,769,1025,1537,2049,3073,4097,6145,8193,12289,16385,24577,0,0],dm=[16,16,16,16,17,17,18,18,19,19,20,20,21,21,22,22,23,23,24,24,25,25,26,26,27,27,28,28,29,29,64,64];Qp.exports=function(r,t,n,i,a,o,f,s){var u=s.bits,l=0,c=0,p=0,h=0,v=0,_=0,m=0,w=0,L=0,A=0,T,b,R,I,S,D=null,W=0,O,ve=new Vp.Buf16(ot+1),Jt=new Vp.Buf16(ot+1),Qt=null,nf=0,af,en,rn;for(l=0;l<=ot;l++)ve[l]=0;for(c=0;c<i;c++)ve[t[n+c]]++;for(v=u,h=ot;h>=1&&ve[h]===0;h--);if(v>h&&(v=h),h===0)return a[o++]=1<<24|64<<16|0,a[o++]=1<<24|64<<16|0,s.bits=1,0;for(p=1;p<h&&ve[p]===0;p++);for(v<p&&(v=p),w=1,l=1;l<=ot;l++)if(w<<=1,w-=ve[l],w<0)return-1;if(w>0&&(r===Xp||h!==1))return-1;for(Jt[1]=0,l=1;l<ot;l++)Jt[l+1]=Jt[l]+ve[l];for(c=0;c<i;c++)t[n+c]!==0&&(f[Jt[t[n+c]]++]=c);if(r===Xp?(D=Qt=f,O=19):r===zo?(D=cm,W-=257,Qt=hm,nf-=257,O=256):(D=pm,Qt=dm,O=-1),A=0,c=0,l=p,S=o,_=v,m=0,R=-1,L=1<<v,I=L-1,r===zo&&L>Yp||r===Jp&&L>Kp)return 1;for(;;){af=l-m,f[c]<O?(en=0,rn=f[c]):f[c]>O?(en=Qt[nf+f[c]],rn=D[W+f[c]]):(en=96,rn=0),T=1<<l-m,b=1<<_,p=b;do b-=T,a[S+(A>>m)+b]=af<<24|en<<16|rn|0;while(b!==0);for(T=1<<l-1;A&T;)T>>=1;if(T!==0?(A&=T-1,A+=T):A=0,c++,--ve[l]===0){if(l===h)break;l=t[n+f[c]]}if(l>v&&(A&I)!==R){for(m===0&&(m=v),S+=p,_=l-m,w=1<<_;_+m<h&&(w-=ve[_+m],!(w<=0));)_++,w<<=1;if(L+=1<<_,r===zo&&L>Yp||r===Jp&&L>Kp)return 1;R=A&I,a[R]=v<<24|_<<16|S-o|0}}return A!==0&&(a[S+A]=l-m<<24|64<<16|0),s.bits=v,0}});var Dd=y(me=>{"use strict";var ae=Bt(),Vo=Mo(),Fe=jo(),ym=$p(),Vt=ed(),vm=0,Rd=1,Od=2,rd=4,_m=5,Fi=6,Er=0,gm=1,bm=2,ye=-2,Td=-3,Yo=-4,wm=-5,td=8,Id=1,nd=2,id=3,ad=4,od=5,fd=6,ud=7,ld=8,sd=9,cd=10,Di=11,je=12,Zo=13,hd=14,Wo=15,pd=16,dd=17,yd=18,vd=19,ki=20,Pi=21,_d=22,gd=23,bd=24,wd=25,Ed=26,Ho=27,md=28,Sd=29,C=30,Ko=31,Em=32,mm=852,Sm=592,xm=15,Am=xm;function xd(e){return(e>>>24&255)+(e>>>8&65280)+((e&65280)<<8)+((e&255)<<24)}function Rm(){this.mode=0,this.last=!1,this.wrap=0,this.havedict=!1,this.flags=0,this.dmax=0,this.check=0,this.total=0,this.head=null,this.wbits=0,this.wsize=0,this.whave=0,this.wnext=0,this.window=null,this.hold=0,this.bits=0,this.length=0,this.offset=0,this.extra=0,this.lencode=null,this.distcode=null,this.lenbits=0,this.distbits=0,this.ncode=0,this.nlen=0,this.ndist=0,this.have=0,this.next=null,this.lens=new ae.Buf16(320),this.work=new ae.Buf16(288),this.lendyn=null,this.distdyn=null,this.sane=0,this.back=0,this.was=0}function Nd(e){var r;return!e||!e.state?ye:(r=e.state,e.total_in=e.total_out=r.total=0,e.msg="",r.wrap&&(e.adler=r.wrap&1),r.mode=Id,r.last=0,r.havedict=0,r.dmax=32768,r.head=null,r.hold=0,r.bits=0,r.lencode=r.lendyn=new ae.Buf32(mm),r.distcode=r.distdyn=new ae.Buf32(Sm),r.sane=1,r.back=-1,Er)}function Ld(e){var r;return!e||!e.state?ye:(r=e.state,r.wsize=0,r.whave=0,r.wnext=0,Nd(e))}function Fd(e,r){var t,n;return!e||!e.state||(n=e.state,r<0?(t=0,r=-r):(t=(r>>4)+1,r<48&&(r&=15)),r&&(r<8||r>15))?ye:(n.window!==null&&n.wbits!==r&&(n.window=null),n.wrap=t,n.wbits=r,Ld(e))}function kd(e,r){var t,n;return e?(n=new Rm,e.state=n,n.window=null,t=Fd(e,r),t!==Er&&(e.state=null),t):ye}function Om(e){return kd(e,Am)}var Ad=!0,Go,$o;function Tm(e){if(Ad){var r;for(Go=new ae.Buf32(512),$o=new ae.Buf32(32),r=0;r<144;)e.lens[r++]=8;for(;r<256;)e.lens[r++]=9;for(;r<280;)e.lens[r++]=7;for(;r<288;)e.lens[r++]=8;for(Vt(Rd,e.lens,0,288,Go,0,e.work,{bits:9}),r=0;r<32;)e.lens[r++]=5;Vt(Od,e.lens,0,32,$o,0,e.work,{bits:5}),Ad=!1}e.lencode=Go,e.lenbits=9,e.distcode=$o,e.distbits=5}function Pd(e,r,t,n){var i,a=e.state;return a.window===null&&(a.wsize=1<<a.wbits,a.wnext=0,a.whave=0,a.window=new ae.Buf8(a.wsize)),n>=a.wsize?(ae.arraySet(a.window,r,t-a.wsize,a.wsize,0),a.wnext=0,a.whave=a.wsize):(i=a.wsize-a.wnext,i>n&&(i=n),ae.arraySet(a.window,r,t-n,i,a.wnext),n-=i,n?(ae.arraySet(a.window,r,t-n,n,0),a.wnext=n,a.whave=a.wsize):(a.wnext+=i,a.wnext===a.wsize&&(a.wnext=0),a.whave<a.wsize&&(a.whave+=i))),0}function Im(e,r){var t,n,i,a,o,f,s,u,l,c,p,h,v,_,m=0,w,L,A,T,b,R,I,S,D=new ae.Buf8(4),W,O,ve=[16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15];if(!e||!e.state||!e.output||!e.input&&e.avail_in!==0)return ye;t=e.state,t.mode===je&&(t.mode=Zo),o=e.next_out,i=e.output,s=e.avail_out,a=e.next_in,n=e.input,f=e.avail_in,u=t.hold,l=t.bits,c=f,p=s,S=Er;e:for(;;)switch(t.mode){case Id:if(t.wrap===0){t.mode=Zo;break}for(;l<16;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(t.wrap&2&&u===35615){t.check=0,D[0]=u&255,D[1]=u>>>8&255,t.check=Fe(t.check,D,2,0),u=0,l=0,t.mode=nd;break}if(t.flags=0,t.head&&(t.head.done=!1),!(t.wrap&1)||(((u&255)<<8)+(u>>8))%31){e.msg="incorrect header check",t.mode=C;break}if((u&15)!==td){e.msg="unknown compression method",t.mode=C;break}if(u>>>=4,l-=4,I=(u&15)+8,t.wbits===0)t.wbits=I;else if(I>t.wbits){e.msg="invalid window size",t.mode=C;break}t.dmax=1<<I,e.adler=t.check=1,t.mode=u&512?cd:je,u=0,l=0;break;case nd:for(;l<16;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(t.flags=u,(t.flags&255)!==td){e.msg="unknown compression method",t.mode=C;break}if(t.flags&57344){e.msg="unknown header flags set",t.mode=C;break}t.head&&(t.head.text=u>>8&1),t.flags&512&&(D[0]=u&255,D[1]=u>>>8&255,t.check=Fe(t.check,D,2,0)),u=0,l=0,t.mode=id;case id:for(;l<32;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}t.head&&(t.head.time=u),t.flags&512&&(D[0]=u&255,D[1]=u>>>8&255,D[2]=u>>>16&255,D[3]=u>>>24&255,t.check=Fe(t.check,D,4,0)),u=0,l=0,t.mode=ad;case ad:for(;l<16;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}t.head&&(t.head.xflags=u&255,t.head.os=u>>8),t.flags&512&&(D[0]=u&255,D[1]=u>>>8&255,t.check=Fe(t.check,D,2,0)),u=0,l=0,t.mode=od;case od:if(t.flags&1024){for(;l<16;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}t.length=u,t.head&&(t.head.extra_len=u),t.flags&512&&(D[0]=u&255,D[1]=u>>>8&255,t.check=Fe(t.check,D,2,0)),u=0,l=0}else t.head&&(t.head.extra=null);t.mode=fd;case fd:if(t.flags&1024&&(h=t.length,h>f&&(h=f),h&&(t.head&&(I=t.head.extra_len-t.length,t.head.extra||(t.head.extra=new Array(t.head.extra_len)),ae.arraySet(t.head.extra,n,a,h,I)),t.flags&512&&(t.check=Fe(t.check,n,h,a)),f-=h,a+=h,t.length-=h),t.length))break e;t.length=0,t.mode=ud;case ud:if(t.flags&2048){if(f===0)break e;h=0;do I=n[a+h++],t.head&&I&&t.length<65536&&(t.head.name+=String.fromCharCode(I));while(I&&h<f);if(t.flags&512&&(t.check=Fe(t.check,n,h,a)),f-=h,a+=h,I)break e}else t.head&&(t.head.name=null);t.length=0,t.mode=ld;case ld:if(t.flags&4096){if(f===0)break e;h=0;do I=n[a+h++],t.head&&I&&t.length<65536&&(t.head.comment+=String.fromCharCode(I));while(I&&h<f);if(t.flags&512&&(t.check=Fe(t.check,n,h,a)),f-=h,a+=h,I)break e}else t.head&&(t.head.comment=null);t.mode=sd;case sd:if(t.flags&512){for(;l<16;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(u!==(t.check&65535)){e.msg="header crc mismatch",t.mode=C;break}u=0,l=0}t.head&&(t.head.hcrc=t.flags>>9&1,t.head.done=!0),e.adler=t.check=0,t.mode=je;break;case cd:for(;l<32;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}e.adler=t.check=xd(u),u=0,l=0,t.mode=Di;case Di:if(t.havedict===0)return e.next_out=o,e.avail_out=s,e.next_in=a,e.avail_in=f,t.hold=u,t.bits=l,bm;e.adler=t.check=1,t.mode=je;case je:if(r===_m||r===Fi)break e;case Zo:if(t.last){u>>>=l&7,l-=l&7,t.mode=Ho;break}for(;l<3;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}switch(t.last=u&1,u>>>=1,l-=1,u&3){case 0:t.mode=hd;break;case 1:if(Tm(t),t.mode=ki,r===Fi){u>>>=2,l-=2;break e}break;case 2:t.mode=dd;break;case 3:e.msg="invalid block type",t.mode=C}u>>>=2,l-=2;break;case hd:for(u>>>=l&7,l-=l&7;l<32;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if((u&65535)!==(u>>>16^65535)){e.msg="invalid stored block lengths",t.mode=C;break}if(t.length=u&65535,u=0,l=0,t.mode=Wo,r===Fi)break e;case Wo:t.mode=pd;case pd:if(h=t.length,h){if(h>f&&(h=f),h>s&&(h=s),h===0)break e;ae.arraySet(i,n,a,h,o),f-=h,a+=h,s-=h,o+=h,t.length-=h;break}t.mode=je;break;case dd:for(;l<14;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(t.nlen=(u&31)+257,u>>>=5,l-=5,t.ndist=(u&31)+1,u>>>=5,l-=5,t.ncode=(u&15)+4,u>>>=4,l-=4,t.nlen>286||t.ndist>30){e.msg="too many length or distance symbols",t.mode=C;break}t.have=0,t.mode=yd;case yd:for(;t.have<t.ncode;){for(;l<3;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}t.lens[ve[t.have++]]=u&7,u>>>=3,l-=3}for(;t.have<19;)t.lens[ve[t.have++]]=0;if(t.lencode=t.lendyn,t.lenbits=7,W={bits:t.lenbits},S=Vt(vm,t.lens,0,19,t.lencode,0,t.work,W),t.lenbits=W.bits,S){e.msg="invalid code lengths set",t.mode=C;break}t.have=0,t.mode=vd;case vd:for(;t.have<t.nlen+t.ndist;){for(;m=t.lencode[u&(1<<t.lenbits)-1],w=m>>>24,L=m>>>16&255,A=m&65535,!(w<=l);){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(A<16)u>>>=w,l-=w,t.lens[t.have++]=A;else{if(A===16){for(O=w+2;l<O;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(u>>>=w,l-=w,t.have===0){e.msg="invalid bit length repeat",t.mode=C;break}I=t.lens[t.have-1],h=3+(u&3),u>>>=2,l-=2}else if(A===17){for(O=w+3;l<O;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}u>>>=w,l-=w,I=0,h=3+(u&7),u>>>=3,l-=3}else{for(O=w+7;l<O;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}u>>>=w,l-=w,I=0,h=11+(u&127),u>>>=7,l-=7}if(t.have+h>t.nlen+t.ndist){e.msg="invalid bit length repeat",t.mode=C;break}for(;h--;)t.lens[t.have++]=I}}if(t.mode===C)break;if(t.lens[256]===0){e.msg="invalid code -- missing end-of-block",t.mode=C;break}if(t.lenbits=9,W={bits:t.lenbits},S=Vt(Rd,t.lens,0,t.nlen,t.lencode,0,t.work,W),t.lenbits=W.bits,S){e.msg="invalid literal/lengths set",t.mode=C;break}if(t.distbits=6,t.distcode=t.distdyn,W={bits:t.distbits},S=Vt(Od,t.lens,t.nlen,t.ndist,t.distcode,0,t.work,W),t.distbits=W.bits,S){e.msg="invalid distances set",t.mode=C;break}if(t.mode=ki,r===Fi)break e;case ki:t.mode=Pi;case Pi:if(f>=6&&s>=258){e.next_out=o,e.avail_out=s,e.next_in=a,e.avail_in=f,t.hold=u,t.bits=l,ym(e,p),o=e.next_out,i=e.output,s=e.avail_out,a=e.next_in,n=e.input,f=e.avail_in,u=t.hold,l=t.bits,t.mode===je&&(t.back=-1);break}for(t.back=0;m=t.lencode[u&(1<<t.lenbits)-1],w=m>>>24,L=m>>>16&255,A=m&65535,!(w<=l);){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(L&&(L&240)===0){for(T=w,b=L,R=A;m=t.lencode[R+((u&(1<<T+b)-1)>>T)],w=m>>>24,L=m>>>16&255,A=m&65535,!(T+w<=l);){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}u>>>=T,l-=T,t.back+=T}if(u>>>=w,l-=w,t.back+=w,t.length=A,L===0){t.mode=Ed;break}if(L&32){t.back=-1,t.mode=je;break}if(L&64){e.msg="invalid literal/length code",t.mode=C;break}t.extra=L&15,t.mode=_d;case _d:if(t.extra){for(O=t.extra;l<O;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}t.length+=u&(1<<t.extra)-1,u>>>=t.extra,l-=t.extra,t.back+=t.extra}t.was=t.length,t.mode=gd;case gd:for(;m=t.distcode[u&(1<<t.distbits)-1],w=m>>>24,L=m>>>16&255,A=m&65535,!(w<=l);){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if((L&240)===0){for(T=w,b=L,R=A;m=t.distcode[R+((u&(1<<T+b)-1)>>T)],w=m>>>24,L=m>>>16&255,A=m&65535,!(T+w<=l);){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}u>>>=T,l-=T,t.back+=T}if(u>>>=w,l-=w,t.back+=w,L&64){e.msg="invalid distance code",t.mode=C;break}t.offset=A,t.extra=L&15,t.mode=bd;case bd:if(t.extra){for(O=t.extra;l<O;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}t.offset+=u&(1<<t.extra)-1,u>>>=t.extra,l-=t.extra,t.back+=t.extra}if(t.offset>t.dmax){e.msg="invalid distance too far back",t.mode=C;break}t.mode=wd;case wd:if(s===0)break e;if(h=p-s,t.offset>h){if(h=t.offset-h,h>t.whave&&t.sane){e.msg="invalid distance too far back",t.mode=C;break}h>t.wnext?(h-=t.wnext,v=t.wsize-h):v=t.wnext-h,h>t.length&&(h=t.length),_=t.window}else _=i,v=o-t.offset,h=t.length;h>s&&(h=s),s-=h,t.length-=h;do i[o++]=_[v++];while(--h);t.length===0&&(t.mode=Pi);break;case Ed:if(s===0)break e;i[o++]=t.length,s--,t.mode=Pi;break;case Ho:if(t.wrap){for(;l<32;){if(f===0)break e;f--,u|=n[a++]<<l,l+=8}if(p-=s,e.total_out+=p,t.total+=p,p&&(e.adler=t.check=t.flags?Fe(t.check,i,p,o-p):Vo(t.check,i,p,o-p)),p=s,(t.flags?u:xd(u))!==t.check){e.msg="incorrect data check",t.mode=C;break}u=0,l=0}t.mode=md;case md:if(t.wrap&&t.flags){for(;l<32;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(u!==(t.total&4294967295)){e.msg="incorrect length check",t.mode=C;break}u=0,l=0}t.mode=Sd;case Sd:S=gm;break e;case C:S=Td;break e;case Ko:return Yo;case Em:default:return ye}return e.next_out=o,e.avail_out=s,e.next_in=a,e.avail_in=f,t.hold=u,t.bits=l,(t.wsize||p!==e.avail_out&&t.mode<C&&(t.mode<Ho||r!==rd))&&Pd(e,e.output,e.next_out,p-e.avail_out)?(t.mode=Ko,Yo):(c-=e.avail_in,p-=e.avail_out,e.total_in+=c,e.total_out+=p,t.total+=p,t.wrap&&p&&(e.adler=t.check=t.flags?Fe(t.check,i,p,e.next_out-p):Vo(t.check,i,p,e.next_out-p)),e.data_type=t.bits+(t.last?64:0)+(t.mode===je?128:0)+(t.mode===ki||t.mode===Wo?256:0),(c===0&&p===0||r===rd)&&S===Er&&(S=wm),S)}function Nm(e){if(!e||!e.state)return ye;var r=e.state;return r.window&&(r.window=null),e.state=null,Er}function Lm(e,r){var t;return!e||!e.state||(t=e.state,(t.wrap&2)===0)?ye:(t.head=r,r.done=!1,Er)}function Fm(e,r){var t=r.length,n,i,a;return!e||!e.state||(n=e.state,n.wrap!==0&&n.mode!==Di)?ye:n.mode===Di&&(i=1,i=Vo(i,r,t,0),i!==n.check)?Td:(a=Pd(e,r,t,t),a?(n.mode=Ko,Yo):(n.havedict=1,Er))}me.inflateReset=Ld;me.inflateReset2=Fd;me.inflateResetKeep=Nd;me.inflateInit=Om;me.inflateInit2=kd;me.inflate=Im;me.inflateEnd=Nm;me.inflateGetHeader=Lm;me.inflateSetDictionary=Fm;me.inflateInfo="pako inflate (from Nodeca project)"});var jd=y((US,Md)=>{"use strict";Md.exports={Z_NO_FLUSH:0,Z_PARTIAL_FLUSH:1,Z_SYNC_FLUSH:2,Z_FULL_FLUSH:3,Z_FINISH:4,Z_BLOCK:5,Z_TREES:6,Z_OK:0,Z_STREAM_END:1,Z_NEED_DICT:2,Z_ERRNO:-1,Z_STREAM_ERROR:-2,Z_DATA_ERROR:-3,Z_BUF_ERROR:-5,Z_NO_COMPRESSION:0,Z_BEST_SPEED:1,Z_BEST_COMPRESSION:9,Z_DEFAULT_COMPRESSION:-1,Z_FILTERED:1,Z_HUFFMAN_ONLY:2,Z_RLE:3,Z_FIXED:4,Z_DEFAULT_STRATEGY:0,Z_BINARY:0,Z_TEXT:1,Z_UNKNOWN:2,Z_DEFLATED:8}});var qd=y(g=>{"use strict";var oe=Wr(),km=lp(),Yt=Hp(),mr=Dd(),Bd=jd();for(Xo in Bd)g[Xo]=Bd[Xo];var Xo;g.NONE=0;g.DEFLATE=1;g.INFLATE=2;g.GZIP=3;g.GUNZIP=4;g.DEFLATERAW=5;g.INFLATERAW=6;g.UNZIP=7;var Pm=31,Dm=139;function X(e){if(typeof e!="number"||e<g.DEFLATE||e>g.UNZIP)throw new TypeError("Bad argument");this.dictionary=null,this.err=0,this.flush=0,this.init_done=!1,this.level=0,this.memLevel=0,this.mode=e,this.strategy=0,this.windowBits=0,this.write_in_progress=!1,this.pending_close=!1,this.gzip_id_bytes_read=0}X.prototype.close=function(){if(this.write_in_progress){this.pending_close=!0;return}this.pending_close=!1,oe(this.init_done,"close before init"),oe(this.mode<=g.UNZIP),this.mode===g.DEFLATE||this.mode===g.GZIP||this.mode===g.DEFLATERAW?Yt.deflateEnd(this.strm):(this.mode===g.INFLATE||this.mode===g.GUNZIP||this.mode===g.INFLATERAW||this.mode===g.UNZIP)&&mr.inflateEnd(this.strm),this.mode=g.NONE,this.dictionary=null};X.prototype.write=function(e,r,t,n,i,a,o){return this._write(!0,e,r,t,n,i,a,o)};X.prototype.writeSync=function(e,r,t,n,i,a,o){return this._write(!1,e,r,t,n,i,a,o)};X.prototype._write=function(e,r,t,n,i,a,o,f){if(oe.equal(arguments.length,8),oe(this.init_done,"write before init"),oe(this.mode!==g.NONE,"already finalized"),oe.equal(!1,this.write_in_progress,"write already in progress"),oe.equal(!1,this.pending_close,"close is pending"),this.write_in_progress=!0,oe.equal(!1,r===void 0,"must provide flush value"),this.write_in_progress=!0,r!==g.Z_NO_FLUSH&&r!==g.Z_PARTIAL_FLUSH&&r!==g.Z_SYNC_FLUSH&&r!==g.Z_FULL_FLUSH&&r!==g.Z_FINISH&&r!==g.Z_BLOCK)throw new Error("Invalid flush value");if(t==null&&(t=Buffer.alloc(0),i=0,n=0),this.strm.avail_in=i,this.strm.input=t,this.strm.next_in=n,this.strm.avail_out=f,this.strm.output=a,this.strm.next_out=o,this.flush=r,!e)return this._process(),this._checkError()?this._afterSync():void 0;var s=this;return process.nextTick(function(){s._process(),s._after()}),this};X.prototype._afterSync=function(){var e=this.strm.avail_out,r=this.strm.avail_in;return this.write_in_progress=!1,[r,e]};X.prototype._process=function(){var e=null;switch(this.mode){case g.DEFLATE:case g.GZIP:case g.DEFLATERAW:this.err=Yt.deflate(this.strm,this.flush);break;case g.UNZIP:switch(this.strm.avail_in>0&&(e=this.strm.next_in),this.gzip_id_bytes_read){case 0:if(e===null)break;if(this.strm.input[e]===Pm){if(this.gzip_id_bytes_read=1,e++,this.strm.avail_in===1)break}else{this.mode=g.INFLATE;break}case 1:if(e===null)break;this.strm.input[e]===Dm?(this.gzip_id_bytes_read=2,this.mode=g.GUNZIP):this.mode=g.INFLATE;break;default:throw new Error("invalid number of gzip magic number bytes read")}case g.INFLATE:case g.GUNZIP:case g.INFLATERAW:for(this.err=mr.inflate(this.strm,this.flush),this.err===g.Z_NEED_DICT&&this.dictionary&&(this.err=mr.inflateSetDictionary(this.strm,this.dictionary),this.err===g.Z_OK?this.err=mr.inflate(this.strm,this.flush):this.err===g.Z_DATA_ERROR&&(this.err=g.Z_NEED_DICT));this.strm.avail_in>0&&this.mode===g.GUNZIP&&this.err===g.Z_STREAM_END&&this.strm.next_in[0]!==0;)this.reset(),this.err=mr.inflate(this.strm,this.flush);break;default:throw new Error("Unknown mode "+this.mode)}};X.prototype._checkError=function(){switch(this.err){case g.Z_OK:case g.Z_BUF_ERROR:if(this.strm.avail_out!==0&&this.flush===g.Z_FINISH)return this._error("unexpected end of file"),!1;break;case g.Z_STREAM_END:break;case g.Z_NEED_DICT:return this.dictionary==null?this._error("Missing dictionary"):this._error("Bad dictionary"),!1;default:return this._error("Zlib error"),!1}return!0};X.prototype._after=function(){if(this._checkError()){var e=this.strm.avail_out,r=this.strm.avail_in;this.write_in_progress=!1,this.callback(r,e),this.pending_close&&this.close()}};X.prototype._error=function(e){this.strm.msg&&(e=this.strm.msg),this.onerror(e,this.err),this.write_in_progress=!1,this.pending_close&&this.close()};X.prototype.init=function(e,r,t,n,i){oe(arguments.length===4||arguments.length===5,"init(windowBits, level, memLevel, strategy, [dictionary])"),oe(e>=8&&e<=15,"invalid windowBits"),oe(r>=-1&&r<=9,"invalid compression level"),oe(t>=1&&t<=9,"invalid memlevel"),oe(n===g.Z_FILTERED||n===g.Z_HUFFMAN_ONLY||n===g.Z_RLE||n===g.Z_FIXED||n===g.Z_DEFAULT_STRATEGY,"invalid strategy"),this._init(r,e,t,n,i),this._setDictionary()};X.prototype.params=function(){throw new Error("deflateParams Not supported")};X.prototype.reset=function(){this._reset(),this._setDictionary()};X.prototype._init=function(e,r,t,n,i){switch(this.level=e,this.windowBits=r,this.memLevel=t,this.strategy=n,this.flush=g.Z_NO_FLUSH,this.err=g.Z_OK,(this.mode===g.GZIP||this.mode===g.GUNZIP)&&(this.windowBits+=16),this.mode===g.UNZIP&&(this.windowBits+=32),(this.mode===g.DEFLATERAW||this.mode===g.INFLATERAW)&&(this.windowBits=-1*this.windowBits),this.strm=new km,this.mode){case g.DEFLATE:case g.GZIP:case g.DEFLATERAW:this.err=Yt.deflateInit2(this.strm,this.level,g.Z_DEFLATED,this.windowBits,this.memLevel,this.strategy);break;case g.INFLATE:case g.GUNZIP:case g.INFLATERAW:case g.UNZIP:this.err=mr.inflateInit2(this.strm,this.windowBits);break;default:throw new Error("Unknown mode "+this.mode)}this.err!==g.Z_OK&&this._error("Init error"),this.dictionary=i,this.write_in_progress=!1,this.init_done=!0};X.prototype._setDictionary=function(){if(this.dictionary!=null){switch(this.err=g.Z_OK,this.mode){case g.DEFLATE:case g.DEFLATERAW:this.err=Yt.deflateSetDictionary(this.strm,this.dictionary);break;default:break}this.err!==g.Z_OK&&this._error("Failed to set dictionary")}};X.prototype._reset=function(){switch(this.err=g.Z_OK,this.mode){case g.DEFLATE:case g.DEFLATERAW:case g.GZIP:this.err=Yt.deflateReset(this.strm);break;case g.INFLATE:case g.INFLATERAW:case g.GUNZIP:this.err=mr.inflateReset(this.strm);break;default:break}this.err!==g.Z_OK&&this._error("Failed to reset stream")};g.Zlib=X});var Hd=y(E=>{"use strict";var ke=lr().Buffer,Zd=(fp(),Qd(K)).Transform,x=qd(),er=Se(),Kt=Wr().ok,Qo=lr().kMaxLength,Wd="Cannot create final Buffer. It would be larger than 0x"+Qo.toString(16)+" bytes";x.Z_MIN_WINDOWBITS=8;x.Z_MAX_WINDOWBITS=15;x.Z_DEFAULT_WINDOWBITS=15;x.Z_MIN_CHUNK=64;x.Z_MAX_CHUNK=1/0;x.Z_DEFAULT_CHUNK=16*1024;x.Z_MIN_MEMLEVEL=1;x.Z_MAX_MEMLEVEL=9;x.Z_DEFAULT_MEMLEVEL=8;x.Z_MIN_LEVEL=-1;x.Z_MAX_LEVEL=9;x.Z_DEFAULT_LEVEL=x.Z_DEFAULT_COMPRESSION;var Ud=Object.keys(x);for(Mi=0;Mi<Ud.length;Mi++)ji=Ud[Mi],ji.match(/^Z/)&&Object.defineProperty(E,ji,{enumerable:!0,value:x[ji],writable:!1});var ji,Mi,qi={Z_OK:x.Z_OK,Z_STREAM_END:x.Z_STREAM_END,Z_NEED_DICT:x.Z_NEED_DICT,Z_ERRNO:x.Z_ERRNO,Z_STREAM_ERROR:x.Z_STREAM_ERROR,Z_DATA_ERROR:x.Z_DATA_ERROR,Z_MEM_ERROR:x.Z_MEM_ERROR,Z_BUF_ERROR:x.Z_BUF_ERROR,Z_VERSION_ERROR:x.Z_VERSION_ERROR},Cd=Object.keys(qi);for(Bi=0;Bi<Cd.length;Bi++)Jo=Cd[Bi],qi[qi[Jo]]=Jo;var Jo,Bi;Object.defineProperty(E,"codes",{enumerable:!0,value:Object.freeze(qi),writable:!1});E.Deflate=Sr;E.Inflate=xr;E.Gzip=Ar;E.Gunzip=Rr;E.DeflateRaw=Or;E.InflateRaw=Tr;E.Unzip=Ir;E.createDeflate=function(e){return new Sr(e)};E.createInflate=function(e){return new xr(e)};E.createDeflateRaw=function(e){return new Or(e)};E.createInflateRaw=function(e){return new Tr(e)};E.createGzip=function(e){return new Ar(e)};E.createGunzip=function(e){return new Rr(e)};E.createUnzip=function(e){return new Ir(e)};E.deflate=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new Sr(r),e,t)};E.deflateSync=function(e,r){return Lr(new Sr(r),e)};E.gzip=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new Ar(r),e,t)};E.gzipSync=function(e,r){return Lr(new Ar(r),e)};E.deflateRaw=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new Or(r),e,t)};E.deflateRawSync=function(e,r){return Lr(new Or(r),e)};E.unzip=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new Ir(r),e,t)};E.unzipSync=function(e,r){return Lr(new Ir(r),e)};E.inflate=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new xr(r),e,t)};E.inflateSync=function(e,r){return Lr(new xr(r),e)};E.gunzip=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new Rr(r),e,t)};E.gunzipSync=function(e,r){return Lr(new Rr(r),e)};E.inflateRaw=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new Tr(r),e,t)};E.inflateRawSync=function(e,r){return Lr(new Tr(r),e)};function Nr(e,r,t){var n=[],i=0;e.on("error",o),e.on("end",f),e.end(r),a();function a(){for(var s;(s=e.read())!==null;)n.push(s),i+=s.length;e.once("readable",a)}function o(s){e.removeListener("end",f),e.removeListener("readable",a),t(s)}function f(){var s,u=null;i>=Qo?u=new RangeError(Wd):s=ke.concat(n,i),n=[],e.close(),t(u,s)}}function Lr(e,r){if(typeof r=="string"&&(r=ke.from(r)),!ke.isBuffer(r))throw new TypeError("Not a string or buffer");var t=e._finishFlushFlag;return e._processChunk(r,t)}function Sr(e){if(!(this instanceof Sr))return new Sr(e);Z.call(this,e,x.DEFLATE)}function xr(e){if(!(this instanceof xr))return new xr(e);Z.call(this,e,x.INFLATE)}function Ar(e){if(!(this instanceof Ar))return new Ar(e);Z.call(this,e,x.GZIP)}function Rr(e){if(!(this instanceof Rr))return new Rr(e);Z.call(this,e,x.GUNZIP)}function Or(e){if(!(this instanceof Or))return new Or(e);Z.call(this,e,x.DEFLATERAW)}function Tr(e){if(!(this instanceof Tr))return new Tr(e);Z.call(this,e,x.INFLATERAW)}function Ir(e){if(!(this instanceof Ir))return new Ir(e);Z.call(this,e,x.UNZIP)}function zd(e){return e===x.Z_NO_FLUSH||e===x.Z_PARTIAL_FLUSH||e===x.Z_SYNC_FLUSH||e===x.Z_FULL_FLUSH||e===x.Z_FINISH||e===x.Z_BLOCK}function Z(e,r){var t=this;if(this._opts=e=e||{},this._chunkSize=e.chunkSize||E.Z_DEFAULT_CHUNK,Zd.call(this,e),e.flush&&!zd(e.flush))throw new Error("Invalid flush flag: "+e.flush);if(e.finishFlush&&!zd(e.finishFlush))throw new Error("Invalid flush flag: "+e.finishFlush);if(this._flushFlag=e.flush||x.Z_NO_FLUSH,this._finishFlushFlag=typeof e.finishFlush<"u"?e.finishFlush:x.Z_FINISH,e.chunkSize&&(e.chunkSize<E.Z_MIN_CHUNK||e.chunkSize>E.Z_MAX_CHUNK))throw new Error("Invalid chunk size: "+e.chunkSize);if(e.windowBits&&(e.windowBits<E.Z_MIN_WINDOWBITS||e.windowBits>E.Z_MAX_WINDOWBITS))throw new Error("Invalid windowBits: "+e.windowBits);if(e.level&&(e.level<E.Z_MIN_LEVEL||e.level>E.Z_MAX_LEVEL))throw new Error("Invalid compression level: "+e.level);if(e.memLevel&&(e.memLevel<E.Z_MIN_MEMLEVEL||e.memLevel>E.Z_MAX_MEMLEVEL))throw new Error("Invalid memLevel: "+e.memLevel);if(e.strategy&&e.strategy!=E.Z_FILTERED&&e.strategy!=E.Z_HUFFMAN_ONLY&&e.strategy!=E.Z_RLE&&e.strategy!=E.Z_FIXED&&e.strategy!=E.Z_DEFAULT_STRATEGY)throw new Error("Invalid strategy: "+e.strategy);if(e.dictionary&&!ke.isBuffer(e.dictionary))throw new Error("Invalid dictionary: it should be a Buffer instance");this._handle=new x.Zlib(r);var n=this;this._hadError=!1,this._handle.onerror=function(o,f){Ui(n),n._hadError=!0;var s=new Error(o);s.errno=f,s.code=E.codes[f],n.emit("error",s)};var i=E.Z_DEFAULT_COMPRESSION;typeof e.level=="number"&&(i=e.level);var a=E.Z_DEFAULT_STRATEGY;typeof e.strategy=="number"&&(a=e.strategy),this._handle.init(e.windowBits||E.Z_DEFAULT_WINDOWBITS,i,e.memLevel||E.Z_DEFAULT_MEMLEVEL,a,e.dictionary),this._buffer=ke.allocUnsafe(this._chunkSize),this._offset=0,this._level=i,this._strategy=a,this.once("end",this.close),Object.defineProperty(this,"_closed",{get:function(){return!t._handle},configurable:!0,enumerable:!0})}er.inherits(Z,Zd);Z.prototype.params=function(e,r,t){if(e<E.Z_MIN_LEVEL||e>E.Z_MAX_LEVEL)throw new RangeError("Invalid compression level: "+e);if(r!=E.Z_FILTERED&&r!=E.Z_HUFFMAN_ONLY&&r!=E.Z_RLE&&r!=E.Z_FIXED&&r!=E.Z_DEFAULT_STRATEGY)throw new TypeError("Invalid strategy: "+r);if(this._level!==e||this._strategy!==r){var n=this;this.flush(x.Z_SYNC_FLUSH,function(){Kt(n._handle,"zlib binding closed"),n._handle.params(e,r),n._hadError||(n._level=e,n._strategy=r,t&&t())})}else process.nextTick(t)};Z.prototype.reset=function(){return Kt(this._handle,"zlib binding closed"),this._handle.reset()};Z.prototype._flush=function(e){this._transform(ke.alloc(0),"",e)};Z.prototype.flush=function(e,r){var t=this,n=this._writableState;(typeof e=="function"||e===void 0&&!r)&&(r=e,e=x.Z_FULL_FLUSH),n.ended?r&&process.nextTick(r):n.ending?r&&this.once("end",r):n.needDrain?r&&this.once("drain",function(){return t.flush(e,r)}):(this._flushFlag=e,this.write(ke.alloc(0),"",r))};Z.prototype.close=function(e){Ui(this,e),process.nextTick(Mm,this)};function Ui(e,r){r&&process.nextTick(r),e._handle&&(e._handle.close(),e._handle=null)}function Mm(e){e.emit("close")}Z.prototype._transform=function(e,r,t){var n,i=this._writableState,a=i.ending||i.ended,o=a&&(!e||i.length===e.length);if(e!==null&&!ke.isBuffer(e))return t(new Error("invalid input"));if(!this._handle)return t(new Error("zlib binding closed"));o?n=this._finishFlushFlag:(n=this._flushFlag,e.length>=i.length&&(this._flushFlag=this._opts.flush||x.Z_NO_FLUSH)),this._processChunk(e,n,t)};Z.prototype._processChunk=function(e,r,t){var n=e&&e.length,i=this._chunkSize-this._offset,a=0,o=this,f=typeof t=="function";if(!f){var s=[],u=0,l;this.on("error",function(_){l=_}),Kt(this._handle,"zlib binding closed");do var c=this._handle.writeSync(r,e,a,n,this._buffer,this._offset,i);while(!this._hadError&&v(c[0],c[1]));if(this._hadError)throw l;if(u>=Qo)throw Ui(this),new RangeError(Wd);var p=ke.concat(s,u);return Ui(this),p}Kt(this._handle,"zlib binding closed");var h=this._handle.write(r,e,a,n,this._buffer,this._offset,i);h.buffer=e,h.callback=v;function v(_,m){if(this&&(this.buffer=null,this.callback=null),!o._hadError){var w=i-m;if(Kt(w>=0,"have should not go down"),w>0){var L=o._buffer.slice(o._offset,o._offset+w);o._offset+=w,f?o.push(L):(s.push(L),u+=L.length)}if((m===0||o._offset>=o._chunkSize)&&(i=o._chunkSize,o._offset=0,o._buffer=ke.allocUnsafe(o._chunkSize)),m===0){if(a+=n-_,n=_,!f)return!0;var A=o._handle.write(r,e,a,n,o._buffer,o._offset,o._chunkSize);A.callback=v,A.buffer=e;return}if(!f)return!1;t()}}};er.inherits(Sr,Z);er.inherits(xr,Z);er.inherits(Ar,Z);er.inherits(Rr,Z);er.inherits(Or,Z);er.inherits(Tr,Z);er.inherits(Ir,Z)});var ef=ft(Wr()),rf=ft(Se()),tf=ft(Hd()),jm=ef.default??ef,Xt=rf.default??rf,Fr=tf.default??tf,Bm=typeof Fr.constants=="object"&&Fr.constants!==null?Fr.constants:Object.fromEntries(Object.entries(Fr).filter(([e,r])=>/^[A-Z0-9_]+$/.test(e)&&typeof r=="number"));typeof Fr.constants>"u"&&(Fr.constants=Bm);typeof Xt.TextEncoder>"u"&&typeof globalThis.TextEncoder=="function"&&(Xt.TextEncoder=globalThis.TextEncoder);typeof Xt.TextDecoder>"u"&&typeof globalThis.TextDecoder=="function"&&(Xt.TextDecoder=globalThis.TextDecoder);globalThis.__secureExecBuiltinAssertModule=jm;globalThis.__secureExecBuiltinUtilModule=Xt;globalThis.__secureExecBuiltinZlibModule=Fr;})();
-/*! Bundled license information:
-
-assert/build/internal/util/comparisons.js:
-  (*!
-   * The buffer module from node.js, for the browser.
-   *
-   * @author   Feross Aboukhadijeh <feross@feross.org> <http://feross.org>
-   * @license  MIT
-   *)
-
-ieee754/index.js:
-  (*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> *)
-
-buffer/index.js:
-  (*!
-   * The buffer module from node.js, for the browser.
-   *
-   * @author   Feross Aboukhadijeh <https://feross.org>
-   * @license  MIT
-   *)
-
-safe-buffer/index.js:
-  (*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> *)
-*/
diff --git a/crates/execution/assets/generated/v8-bridge.js b/crates/execution/assets/generated/v8-bridge.js
deleted file mode 100644
index dc58f74d7..000000000
--- a/crates/execution/assets/generated/v8-bridge.js
+++ /dev/null
@@ -1,229 +0,0 @@
-if(typeof globalThis.global==="undefined"){globalThis.global=globalThis;}if(typeof globalThis.process==="undefined"){globalThis.process={env:{},argv:["node"],browser:false,version:"v22.0.0",versions:{node:"22.0.0"},nextTick(callback,...args){return Promise.resolve().then(()=>callback(...args));}};}
-(()=>{var Ca=Object.create;var lr=Object.defineProperty;var Ta=Object.getOwnPropertyDescriptor;var Pa=Object.getOwnPropertyNames;var va=Object.getPrototypeOf,Ea=Object.prototype.hasOwnProperty;var qa=(b,s,l)=>s in b?lr(b,s,{enumerable:!0,configurable:!0,writable:!0,value:l}):b[s]=l;var Wa=(b,s)=>()=>(s||b((s={exports:{}}).exports,s),s.exports);var Aa=(b,s,l,g)=>{if(s&&typeof s=="object"||typeof s=="function")for(let c of Pa(s))!Ea.call(b,c)&&c!==l&&lr(b,c,{get:()=>s[c],enumerable:!(g=Ta(s,c))||g.enumerable});return b};var ka=(b,s,l)=>(l=b!=null?Ca(va(b)):{},Aa(s||!b||!b.__esModule?lr(l,"default",{value:b,enumerable:!0}):l,b));var L=(b,s,l)=>qa(b,typeof s!="symbol"?s+"":s,l);var kn=Wa((St,An)=>{(function(b,s){typeof St=="object"&&typeof An<"u"?s(St):typeof define=="function"&&define.amd?define(["exports"],s):(b=typeof globalThis<"u"?globalThis:b||self,s(b.WebStreamsPolyfill={}))})(St,(function(b){"use strict";function s(){}function l(e){return typeof e=="object"&&e!==null||typeof e=="function"}let g=s;function c(e,t){try{Object.defineProperty(e,"name",{value:t,configurable:!0})}catch{}}let pe=Promise,ur=Promise.prototype.then,ie=Promise.reject.bind(pe);function R(e){return new pe(e)}function p(e){return R(t=>t(e))}function d(e){return ie(e)}function I(e,t,r){return ur.call(e,t,r)}function T(e,t,r){I(I(e,t,r),void 0,g)}function Be(e,t){T(e,t)}function gt(e,t){T(e,void 0,t)}function M(e,t,r){return I(e,t,r)}function ye(e){I(e,void 0,g)}let se=e=>{if(typeof queueMicrotask=="function")se=queueMicrotask;else{let t=p(void 0);se=r=>I(t,r)}return se(e)};function le(e,t,r){if(typeof e!="function")throw new TypeError("Argument is not a function");return Function.prototype.apply.call(e,t,r)}function Z(e,t,r){try{return p(le(e,t,r))}catch(n){return d(n)}}let dr=16384;class W{constructor(){this._cursor=0,this._size=0,this._front={_elements:[],_next:void 0},this._back=this._front,this._cursor=0,this._size=0}get length(){return this._size}push(t){let r=this._back,n=r;r._elements.length===dr-1&&(n={_elements:[],_next:void 0}),r._elements.push(t),n!==r&&(this._back=n,r._next=n),++this._size}shift(){let t=this._front,r=t,n=this._cursor,o=n+1,a=t._elements,i=a[n];return o===dr&&(r=t._next,o=0),--this._size,this._cursor=o,t!==r&&(this._front=r),a[n]=void 0,i}forEach(t){let r=this._cursor,n=this._front,o=n._elements;for(;(r!==o.length||n._next!==void 0)&&!(r===o.length&&(n=n._next,o=n._elements,r=0,o.length===0));)t(o[r]),++r}peek(){let t=this._front,r=this._cursor;return t._elements[r]}}let fr=Symbol("[[AbortSteps]]"),cr=Symbol("[[ErrorSteps]]"),Rt=Symbol("[[CancelSteps]]"),wt=Symbol("[[PullSteps]]"),Ct=Symbol("[[ReleaseSteps]]");function hr(e,t){e._ownerReadableStream=t,t._reader=e,t._state==="readable"?Pt(e):t._state==="closed"?Bn(e):br(e,t._storedError)}function Tt(e,t){let r=e._ownerReadableStream;return j(r,t)}function $(e){let t=e._ownerReadableStream;t._state==="readable"?vt(e,new TypeError("Reader was released and can no longer be used to monitor the stream's closedness")):In(e,new TypeError("Reader was released and can no longer be used to monitor the stream's closedness")),t._readableStreamController[Ct](),t._reader=void 0,e._ownerReadableStream=void 0}function Qe(e){return new TypeError("Cannot "+e+" a stream using a released reader")}function Pt(e){e._closedPromise=R((t,r)=>{e._closedPromise_resolve=t,e._closedPromise_reject=r})}function br(e,t){Pt(e),vt(e,t)}function Bn(e){Pt(e),mr(e)}function vt(e,t){e._closedPromise_reject!==void 0&&(ye(e._closedPromise),e._closedPromise_reject(t),e._closedPromise_resolve=void 0,e._closedPromise_reject=void 0)}function In(e,t){br(e,t)}function mr(e){e._closedPromise_resolve!==void 0&&(e._closedPromise_resolve(void 0),e._closedPromise_resolve=void 0,e._closedPromise_reject=void 0)}let _r=Number.isFinite||function(e){return typeof e=="number"&&isFinite(e)},On=Math.trunc||function(e){return e<0?Math.ceil(e):Math.floor(e)};function jn(e){return typeof e=="object"||typeof e=="function"}function F(e,t){if(e!==void 0&&!jn(e))throw new TypeError(`${t} is not an object.`)}function A(e,t){if(typeof e!="function")throw new TypeError(`${t} is not a function.`)}function zn(e){return typeof e=="object"&&e!==null||typeof e=="function"}function pr(e,t){if(!zn(e))throw new TypeError(`${t} is not an object.`)}function U(e,t,r){if(e===void 0)throw new TypeError(`Parameter ${t} is required in '${r}'.`)}function Et(e,t,r){if(e===void 0)throw new TypeError(`${t} is required in '${r}'.`)}function qt(e){return Number(e)}function yr(e){return e===0?0:e}function Fn(e){return yr(On(e))}function Wt(e,t){let n=Number.MAX_SAFE_INTEGER,o=Number(e);if(o=yr(o),!_r(o))throw new TypeError(`${t} is not a finite number`);if(o=Fn(o),o<0||o>n)throw new TypeError(`${t} is outside the accepted range of 0 to ${n}, inclusive`);return!_r(o)||o===0?0:o}function At(e,t){if(!re(e))throw new TypeError(`${t} is not a ReadableStream.`)}function Se(e){return new X(e)}function Sr(e,t){e._reader._readRequests.push(t)}function kt(e,t,r){let o=e._reader._readRequests.shift();r?o._closeSteps():o._chunkSteps(t)}function Ne(e){return e._reader._readRequests.length}function gr(e){let t=e._reader;return!(t===void 0||!J(t))}class X{constructor(t){if(U(t,1,"ReadableStreamDefaultReader"),At(t,"First parameter"),ne(t))throw new TypeError("This stream has already been locked for exclusive reading by another reader");hr(this,t),this._readRequests=new W}get closed(){return J(this)?this._closedPromise:d(Ye("closed"))}cancel(t=void 0){return J(this)?this._ownerReadableStream===void 0?d(Qe("cancel")):Tt(this,t):d(Ye("cancel"))}read(){if(!J(this))return d(Ye("read"));if(this._ownerReadableStream===void 0)return d(Qe("read from"));let t,r,n=R((a,i)=>{t=a,r=i});return Ie(this,{_chunkSteps:a=>t({value:a,done:!1}),_closeSteps:()=>t({value:void 0,done:!0}),_errorSteps:a=>r(a)}),n}releaseLock(){if(!J(this))throw Ye("releaseLock");this._ownerReadableStream!==void 0&&Dn(this)}}Object.defineProperties(X.prototype,{cancel:{enumerable:!0},read:{enumerable:!0},releaseLock:{enumerable:!0},closed:{enumerable:!0}}),c(X.prototype.cancel,"cancel"),c(X.prototype.read,"read"),c(X.prototype.releaseLock,"releaseLock"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(X.prototype,Symbol.toStringTag,{value:"ReadableStreamDefaultReader",configurable:!0});function J(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_readRequests")?!1:e instanceof X}function Ie(e,t){let r=e._ownerReadableStream;r._disturbed=!0,r._state==="closed"?t._closeSteps():r._state==="errored"?t._errorSteps(r._storedError):r._readableStreamController[wt](t)}function Dn(e){$(e);let t=new TypeError("Reader was released");Rr(e,t)}function Rr(e,t){let r=e._readRequests;e._readRequests=new W,r.forEach(n=>{n._errorSteps(t)})}function Ye(e){return new TypeError(`ReadableStreamDefaultReader.prototype.${e} can only be used on a ReadableStreamDefaultReader`)}let Ln=Object.getPrototypeOf(Object.getPrototypeOf(async function*(){}).prototype);class wr{constructor(t,r){this._ongoingPromise=void 0,this._isFinished=!1,this._reader=t,this._preventCancel=r}next(){let t=()=>this._nextSteps();return this._ongoingPromise=this._ongoingPromise?M(this._ongoingPromise,t,t):t(),this._ongoingPromise}return(t){let r=()=>this._returnSteps(t);return this._ongoingPromise?M(this._ongoingPromise,r,r):r()}_nextSteps(){if(this._isFinished)return Promise.resolve({value:void 0,done:!0});let t=this._reader,r,n,o=R((i,u)=>{r=i,n=u});return Ie(t,{_chunkSteps:i=>{this._ongoingPromise=void 0,se(()=>r({value:i,done:!1}))},_closeSteps:()=>{this._ongoingPromise=void 0,this._isFinished=!0,$(t),r({value:void 0,done:!0})},_errorSteps:i=>{this._ongoingPromise=void 0,this._isFinished=!0,$(t),n(i)}}),o}_returnSteps(t){if(this._isFinished)return Promise.resolve({value:t,done:!0});this._isFinished=!0;let r=this._reader;if(!this._preventCancel){let n=Tt(r,t);return $(r),M(n,()=>({value:t,done:!0}))}return $(r),p({value:t,done:!0})}}let Cr={next(){return Tr(this)?this._asyncIteratorImpl.next():d(Pr("next"))},return(e){return Tr(this)?this._asyncIteratorImpl.return(e):d(Pr("return"))}};Object.setPrototypeOf(Cr,Ln);function Mn(e,t){let r=Se(e),n=new wr(r,t),o=Object.create(Cr);return o._asyncIteratorImpl=n,o}function Tr(e){if(!l(e)||!Object.prototype.hasOwnProperty.call(e,"_asyncIteratorImpl"))return!1;try{return e._asyncIteratorImpl instanceof wr}catch{return!1}}function Pr(e){return new TypeError(`ReadableStreamAsyncIterator.${e} can only be used on a ReadableSteamAsyncIterator`)}let vr=Number.isNaN||function(e){return e!==e};var Bt,It,Ot;function Oe(e){return e.slice()}function Er(e,t,r,n,o){new Uint8Array(e).set(new Uint8Array(r,n,o),t)}let Q=e=>(typeof e.transfer=="function"?Q=t=>t.transfer():typeof structuredClone=="function"?Q=t=>structuredClone(t,{transfer:[t]}):Q=t=>t,Q(e)),K=e=>(typeof e.detached=="boolean"?K=t=>t.detached:K=t=>t.byteLength===0,K(e));function qr(e,t,r){if(e.slice)return e.slice(t,r);let n=r-t,o=new ArrayBuffer(n);return Er(o,0,e,t,n),o}function Ve(e,t){let r=e[t];if(r!=null){if(typeof r!="function")throw new TypeError(`${String(t)} is not a function`);return r}}function $n(e){let t={[Symbol.iterator]:()=>e.iterator},r=(async function*(){return yield*t})(),n=r.next;return{iterator:r,nextMethod:n,done:!1}}let jt=(Ot=(Bt=Symbol.asyncIterator)!==null&&Bt!==void 0?Bt:(It=Symbol.for)===null||It===void 0?void 0:It.call(Symbol,"Symbol.asyncIterator"))!==null&&Ot!==void 0?Ot:"@@asyncIterator";function Wr(e,t="sync",r){if(r===void 0)if(t==="async"){if(r=Ve(e,jt),r===void 0){let a=Ve(e,Symbol.iterator),i=Wr(e,"sync",a);return $n(i)}}else r=Ve(e,Symbol.iterator);if(r===void 0)throw new TypeError("The object is not iterable");let n=le(r,e,[]);if(!l(n))throw new TypeError("The iterator method must return an object");let o=n.next;return{iterator:n,nextMethod:o,done:!1}}function Un(e){let t=le(e.nextMethod,e.iterator,[]);if(!l(t))throw new TypeError("The iterator.next() method must return an object");return t}function Qn(e){return!!e.done}function Nn(e){return e.value}function Yn(e){return!(typeof e!="number"||vr(e)||e<0)}function Ar(e){let t=qr(e.buffer,e.byteOffset,e.byteOffset+e.byteLength);return new Uint8Array(t)}function zt(e){let t=e._queue.shift();return e._queueTotalSize-=t.size,e._queueTotalSize<0&&(e._queueTotalSize=0),t.value}function Ft(e,t,r){if(!Yn(r)||r===1/0)throw new RangeError("Size must be a finite, non-NaN, non-negative number.");e._queue.push({value:t,size:r}),e._queueTotalSize+=r}function Vn(e){return e._queue.peek().value}function x(e){e._queue=new W,e._queueTotalSize=0}function kr(e){return e===DataView}function Hn(e){return kr(e.constructor)}function Gn(e){return kr(e)?1:e.BYTES_PER_ELEMENT}class ue{constructor(){throw new TypeError("Illegal constructor")}get view(){if(!Dt(this))throw Qt("view");return this._view}respond(t){if(!Dt(this))throw Qt("respond");if(U(t,1,"respond"),t=Wt(t,"First parameter"),this._associatedReadableByteStreamController===void 0)throw new TypeError("This BYOB request has been invalidated");if(K(this._view.buffer))throw new TypeError("The BYOB request's buffer has been detached and so cannot be used as a response");Xe(this._associatedReadableByteStreamController,t)}respondWithNewView(t){if(!Dt(this))throw Qt("respondWithNewView");if(U(t,1,"respondWithNewView"),!ArrayBuffer.isView(t))throw new TypeError("You can only respond with array buffer views");if(this._associatedReadableByteStreamController===void 0)throw new TypeError("This BYOB request has been invalidated");if(K(t.buffer))throw new TypeError("The given view's buffer has been detached and so cannot be used as a response");Je(this._associatedReadableByteStreamController,t)}}Object.defineProperties(ue.prototype,{respond:{enumerable:!0},respondWithNewView:{enumerable:!0},view:{enumerable:!0}}),c(ue.prototype.respond,"respond"),c(ue.prototype.respondWithNewView,"respondWithNewView"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(ue.prototype,Symbol.toStringTag,{value:"ReadableStreamBYOBRequest",configurable:!0});class N{constructor(){throw new TypeError("Illegal constructor")}get byobRequest(){if(!de(this))throw ze("byobRequest");return Ut(this)}get desiredSize(){if(!de(this))throw ze("desiredSize");return $r(this)}close(){if(!de(this))throw ze("close");if(this._closeRequested)throw new TypeError("The stream has already been closed; do not close it again!");let t=this._controlledReadableByteStream._state;if(t!=="readable")throw new TypeError(`The stream (in ${t} state) is not in the readable state and cannot be closed`);je(this)}enqueue(t){if(!de(this))throw ze("enqueue");if(U(t,1,"enqueue"),!ArrayBuffer.isView(t))throw new TypeError("chunk must be an array buffer view");if(t.byteLength===0)throw new TypeError("chunk must have non-zero byteLength");if(t.buffer.byteLength===0)throw new TypeError("chunk's buffer must have non-zero byteLength");if(this._closeRequested)throw new TypeError("stream is closed or draining");let r=this._controlledReadableByteStream._state;if(r!=="readable")throw new TypeError(`The stream (in ${r} state) is not in the readable state and cannot be enqueued to`);Ze(this,t)}error(t=void 0){if(!de(this))throw ze("error");k(this,t)}[Rt](t){Br(this),x(this);let r=this._cancelAlgorithm(t);return Ge(this),r}[wt](t){let r=this._controlledReadableByteStream;if(this._queueTotalSize>0){Mr(this,t);return}let n=this._autoAllocateChunkSize;if(n!==void 0){let o;try{o=new ArrayBuffer(n)}catch(i){t._errorSteps(i);return}let a={buffer:o,bufferByteLength:n,byteOffset:0,byteLength:n,bytesFilled:0,minimumFill:1,elementSize:1,viewConstructor:Uint8Array,readerType:"default"};this._pendingPullIntos.push(a)}Sr(r,t),fe(this)}[Ct](){if(this._pendingPullIntos.length>0){let t=this._pendingPullIntos.peek();t.readerType="none",this._pendingPullIntos=new W,this._pendingPullIntos.push(t)}}}Object.defineProperties(N.prototype,{close:{enumerable:!0},enqueue:{enumerable:!0},error:{enumerable:!0},byobRequest:{enumerable:!0},desiredSize:{enumerable:!0}}),c(N.prototype.close,"close"),c(N.prototype.enqueue,"enqueue"),c(N.prototype.error,"error"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(N.prototype,Symbol.toStringTag,{value:"ReadableByteStreamController",configurable:!0});function de(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_controlledReadableByteStream")?!1:e instanceof N}function Dt(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_associatedReadableByteStreamController")?!1:e instanceof ue}function fe(e){if(!xn(e))return;if(e._pulling){e._pullAgain=!0;return}e._pulling=!0;let r=e._pullAlgorithm();T(r,()=>(e._pulling=!1,e._pullAgain&&(e._pullAgain=!1,fe(e)),null),n=>(k(e,n),null))}function Br(e){Mt(e),e._pendingPullIntos=new W}function Lt(e,t){let r=!1;e._state==="closed"&&(r=!0);let n=Ir(t);t.readerType==="default"?kt(e,n,r):ao(e,n,r)}function Ir(e){let t=e.bytesFilled,r=e.elementSize;return new e.viewConstructor(e.buffer,e.byteOffset,t/r)}function He(e,t,r,n){e._queue.push({buffer:t,byteOffset:r,byteLength:n}),e._queueTotalSize+=n}function Or(e,t,r,n){let o;try{o=qr(t,r,r+n)}catch(a){throw k(e,a),a}He(e,o,0,n)}function jr(e,t){t.bytesFilled>0&&Or(e,t.buffer,t.byteOffset,t.bytesFilled),ge(e)}function zr(e,t){let r=Math.min(e._queueTotalSize,t.byteLength-t.bytesFilled),n=t.bytesFilled+r,o=r,a=!1,i=n%t.elementSize,u=n-i;u>=t.minimumFill&&(o=u-t.bytesFilled,a=!0);let m=e._queue;for(;o>0;){let f=m.peek(),_=Math.min(o,f.byteLength),y=t.byteOffset+t.bytesFilled;Er(t.buffer,y,f.buffer,f.byteOffset,_),f.byteLength===_?m.shift():(f.byteOffset+=_,f.byteLength-=_),e._queueTotalSize-=_,Fr(e,_,t),o-=_}return a}function Fr(e,t,r){r.bytesFilled+=t}function Dr(e){e._queueTotalSize===0&&e._closeRequested?(Ge(e),Ue(e._controlledReadableByteStream)):fe(e)}function Mt(e){e._byobRequest!==null&&(e._byobRequest._associatedReadableByteStreamController=void 0,e._byobRequest._view=null,e._byobRequest=null)}function $t(e){for(;e._pendingPullIntos.length>0;){if(e._queueTotalSize===0)return;let t=e._pendingPullIntos.peek();zr(e,t)&&(ge(e),Lt(e._controlledReadableByteStream,t))}}function Zn(e){let t=e._controlledReadableByteStream._reader;for(;t._readRequests.length>0;){if(e._queueTotalSize===0)return;let r=t._readRequests.shift();Mr(e,r)}}function Xn(e,t,r,n){let o=e._controlledReadableByteStream,a=t.constructor,i=Gn(a),{byteOffset:u,byteLength:m}=t,f=r*i,_;try{_=Q(t.buffer)}catch(w){n._errorSteps(w);return}let y={buffer:_,bufferByteLength:_.byteLength,byteOffset:u,byteLength:m,bytesFilled:0,minimumFill:f,elementSize:i,viewConstructor:a,readerType:"byob"};if(e._pendingPullIntos.length>0){e._pendingPullIntos.push(y),Nr(o,n);return}if(o._state==="closed"){let w=new a(y.buffer,y.byteOffset,0);n._closeSteps(w);return}if(e._queueTotalSize>0){if(zr(e,y)){let w=Ir(y);Dr(e),n._chunkSteps(w);return}if(e._closeRequested){let w=new TypeError("Insufficient bytes to fill elements in the given buffer");k(e,w),n._errorSteps(w);return}}e._pendingPullIntos.push(y),Nr(o,n),fe(e)}function Jn(e,t){t.readerType==="none"&&ge(e);let r=e._controlledReadableByteStream;if(Nt(r))for(;Yr(r)>0;){let n=ge(e);Lt(r,n)}}function Kn(e,t,r){if(Fr(e,t,r),r.readerType==="none"){jr(e,r),$t(e);return}if(r.bytesFilled<r.minimumFill)return;ge(e);let n=r.bytesFilled%r.elementSize;if(n>0){let o=r.byteOffset+r.bytesFilled;Or(e,r.buffer,o-n,n)}r.bytesFilled-=n,Lt(e._controlledReadableByteStream,r),$t(e)}function Lr(e,t){let r=e._pendingPullIntos.peek();Mt(e),e._controlledReadableByteStream._state==="closed"?Jn(e,r):Kn(e,t,r),fe(e)}function ge(e){return e._pendingPullIntos.shift()}function xn(e){let t=e._controlledReadableByteStream;return t._state!=="readable"||e._closeRequested||!e._started?!1:!!(gr(t)&&Ne(t)>0||Nt(t)&&Yr(t)>0||$r(e)>0)}function Ge(e){e._pullAlgorithm=void 0,e._cancelAlgorithm=void 0}function je(e){let t=e._controlledReadableByteStream;if(!(e._closeRequested||t._state!=="readable")){if(e._queueTotalSize>0){e._closeRequested=!0;return}if(e._pendingPullIntos.length>0){let r=e._pendingPullIntos.peek();if(r.bytesFilled%r.elementSize!==0){let n=new TypeError("Insufficient bytes to fill elements in the given buffer");throw k(e,n),n}}Ge(e),Ue(t)}}function Ze(e,t){let r=e._controlledReadableByteStream;if(e._closeRequested||r._state!=="readable")return;let{buffer:n,byteOffset:o,byteLength:a}=t;if(K(n))throw new TypeError("chunk's buffer is detached and so cannot be enqueued");let i=Q(n);if(e._pendingPullIntos.length>0){let u=e._pendingPullIntos.peek();if(K(u.buffer))throw new TypeError("The BYOB request's buffer has been detached and so cannot be filled with an enqueued chunk");Mt(e),u.buffer=Q(u.buffer),u.readerType==="none"&&jr(e,u)}if(gr(r))if(Zn(e),Ne(r)===0)He(e,i,o,a);else{e._pendingPullIntos.length>0&&ge(e);let u=new Uint8Array(i,o,a);kt(r,u,!1)}else Nt(r)?(He(e,i,o,a),$t(e)):He(e,i,o,a);fe(e)}function k(e,t){let r=e._controlledReadableByteStream;r._state==="readable"&&(Br(e),x(e),Ge(e),_n(r,t))}function Mr(e,t){let r=e._queue.shift();e._queueTotalSize-=r.byteLength,Dr(e);let n=new Uint8Array(r.buffer,r.byteOffset,r.byteLength);t._chunkSteps(n)}function Ut(e){if(e._byobRequest===null&&e._pendingPullIntos.length>0){let t=e._pendingPullIntos.peek(),r=new Uint8Array(t.buffer,t.byteOffset+t.bytesFilled,t.byteLength-t.bytesFilled),n=Object.create(ue.prototype);to(n,e,r),e._byobRequest=n}return e._byobRequest}function $r(e){let t=e._controlledReadableByteStream._state;return t==="errored"?null:t==="closed"?0:e._strategyHWM-e._queueTotalSize}function Xe(e,t){let r=e._pendingPullIntos.peek();if(e._controlledReadableByteStream._state==="closed"){if(t!==0)throw new TypeError("bytesWritten must be 0 when calling respond() on a closed stream")}else{if(t===0)throw new TypeError("bytesWritten must be greater than 0 when calling respond() on a readable stream");if(r.bytesFilled+t>r.byteLength)throw new RangeError("bytesWritten out of range")}r.buffer=Q(r.buffer),Lr(e,t)}function Je(e,t){let r=e._pendingPullIntos.peek();if(e._controlledReadableByteStream._state==="closed"){if(t.byteLength!==0)throw new TypeError("The view's length must be 0 when calling respondWithNewView() on a closed stream")}else if(t.byteLength===0)throw new TypeError("The view's length must be greater than 0 when calling respondWithNewView() on a readable stream");if(r.byteOffset+r.bytesFilled!==t.byteOffset)throw new RangeError("The region specified by view does not match byobRequest");if(r.bufferByteLength!==t.buffer.byteLength)throw new RangeError("The buffer of view has different capacity than byobRequest");if(r.bytesFilled+t.byteLength>r.byteLength)throw new RangeError("The region specified by view is larger than byobRequest");let o=t.byteLength;r.buffer=Q(t.buffer),Lr(e,o)}function Ur(e,t,r,n,o,a,i){t._controlledReadableByteStream=e,t._pullAgain=!1,t._pulling=!1,t._byobRequest=null,t._queue=t._queueTotalSize=void 0,x(t),t._closeRequested=!1,t._started=!1,t._strategyHWM=a,t._pullAlgorithm=n,t._cancelAlgorithm=o,t._autoAllocateChunkSize=i,t._pendingPullIntos=new W,e._readableStreamController=t;let u=r();T(p(u),()=>(t._started=!0,fe(t),null),m=>(k(t,m),null))}function eo(e,t,r){let n=Object.create(N.prototype),o,a,i;t.start!==void 0?o=()=>t.start(n):o=()=>{},t.pull!==void 0?a=()=>t.pull(n):a=()=>p(void 0),t.cancel!==void 0?i=m=>t.cancel(m):i=()=>p(void 0);let u=t.autoAllocateChunkSize;if(u===0)throw new TypeError("autoAllocateChunkSize must be greater than 0");Ur(e,n,o,a,i,r,u)}function to(e,t,r){e._associatedReadableByteStreamController=t,e._view=r}function Qt(e){return new TypeError(`ReadableStreamBYOBRequest.prototype.${e} can only be used on a ReadableStreamBYOBRequest`)}function ze(e){return new TypeError(`ReadableByteStreamController.prototype.${e} can only be used on a ReadableByteStreamController`)}function ro(e,t){F(e,t);let r=e?.mode;return{mode:r===void 0?void 0:no(r,`${t} has member 'mode' that`)}}function no(e,t){if(e=`${e}`,e!=="byob")throw new TypeError(`${t} '${e}' is not a valid enumeration value for ReadableStreamReaderMode`);return e}function oo(e,t){var r;F(e,t);let n=(r=e?.min)!==null&&r!==void 0?r:1;return{min:Wt(n,`${t} has member 'min' that`)}}function Qr(e){return new ee(e)}function Nr(e,t){e._reader._readIntoRequests.push(t)}function ao(e,t,r){let o=e._reader._readIntoRequests.shift();r?o._closeSteps(t):o._chunkSteps(t)}function Yr(e){return e._reader._readIntoRequests.length}function Nt(e){let t=e._reader;return!(t===void 0||!ce(t))}class ee{constructor(t){if(U(t,1,"ReadableStreamBYOBReader"),At(t,"First parameter"),ne(t))throw new TypeError("This stream has already been locked for exclusive reading by another reader");if(!de(t._readableStreamController))throw new TypeError("Cannot construct a ReadableStreamBYOBReader for a stream not constructed with a byte source");hr(this,t),this._readIntoRequests=new W}get closed(){return ce(this)?this._closedPromise:d(Ke("closed"))}cancel(t=void 0){return ce(this)?this._ownerReadableStream===void 0?d(Qe("cancel")):Tt(this,t):d(Ke("cancel"))}read(t,r={}){if(!ce(this))return d(Ke("read"));if(!ArrayBuffer.isView(t))return d(new TypeError("view must be an array buffer view"));if(t.byteLength===0)return d(new TypeError("view must have non-zero byteLength"));if(t.buffer.byteLength===0)return d(new TypeError("view's buffer must have non-zero byteLength"));if(K(t.buffer))return d(new TypeError("view's buffer has been detached"));let n;try{n=oo(r,"options")}catch(f){return d(f)}let o=n.min;if(o===0)return d(new TypeError("options.min must be greater than 0"));if(Hn(t)){if(o>t.byteLength)return d(new RangeError("options.min must be less than or equal to view's byteLength"))}else if(o>t.length)return d(new RangeError("options.min must be less than or equal to view's length"));if(this._ownerReadableStream===void 0)return d(Qe("read from"));let a,i,u=R((f,_)=>{a=f,i=_});return Vr(this,t,o,{_chunkSteps:f=>a({value:f,done:!1}),_closeSteps:f=>a({value:f,done:!0}),_errorSteps:f=>i(f)}),u}releaseLock(){if(!ce(this))throw Ke("releaseLock");this._ownerReadableStream!==void 0&&io(this)}}Object.defineProperties(ee.prototype,{cancel:{enumerable:!0},read:{enumerable:!0},releaseLock:{enumerable:!0},closed:{enumerable:!0}}),c(ee.prototype.cancel,"cancel"),c(ee.prototype.read,"read"),c(ee.prototype.releaseLock,"releaseLock"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(ee.prototype,Symbol.toStringTag,{value:"ReadableStreamBYOBReader",configurable:!0});function ce(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_readIntoRequests")?!1:e instanceof ee}function Vr(e,t,r,n){let o=e._ownerReadableStream;o._disturbed=!0,o._state==="errored"?n._errorSteps(o._storedError):Xn(o._readableStreamController,t,r,n)}function io(e){$(e);let t=new TypeError("Reader was released");Hr(e,t)}function Hr(e,t){let r=e._readIntoRequests;e._readIntoRequests=new W,r.forEach(n=>{n._errorSteps(t)})}function Ke(e){return new TypeError(`ReadableStreamBYOBReader.prototype.${e} can only be used on a ReadableStreamBYOBReader`)}function Fe(e,t){let{highWaterMark:r}=e;if(r===void 0)return t;if(vr(r)||r<0)throw new RangeError("Invalid highWaterMark");return r}function xe(e){let{size:t}=e;return t||(()=>1)}function et(e,t){F(e,t);let r=e?.highWaterMark,n=e?.size;return{highWaterMark:r===void 0?void 0:qt(r),size:n===void 0?void 0:so(n,`${t} has member 'size' that`)}}function so(e,t){return A(e,t),r=>qt(e(r))}function lo(e,t){F(e,t);let r=e?.abort,n=e?.close,o=e?.start,a=e?.type,i=e?.write;return{abort:r===void 0?void 0:uo(r,e,`${t} has member 'abort' that`),close:n===void 0?void 0:fo(n,e,`${t} has member 'close' that`),start:o===void 0?void 0:co(o,e,`${t} has member 'start' that`),write:i===void 0?void 0:ho(i,e,`${t} has member 'write' that`),type:a}}function uo(e,t,r){return A(e,r),n=>Z(e,t,[n])}function fo(e,t,r){return A(e,r),()=>Z(e,t,[])}function co(e,t,r){return A(e,r),n=>le(e,t,[n])}function ho(e,t,r){return A(e,r),(n,o)=>Z(e,t,[n,o])}function Gr(e,t){if(!Re(e))throw new TypeError(`${t} is not a WritableStream.`)}function bo(e){if(typeof e!="object"||e===null)return!1;try{return typeof e.aborted=="boolean"}catch{return!1}}let mo=typeof AbortController=="function";function _o(){if(mo)return new AbortController}class te{constructor(t={},r={}){t===void 0?t=null:pr(t,"First parameter");let n=et(r,"Second parameter"),o=lo(t,"First parameter");if(Xr(this),o.type!==void 0)throw new RangeError("Invalid type is specified");let i=xe(n),u=Fe(n,1);Ao(this,o,u,i)}get locked(){if(!Re(this))throw at("locked");return we(this)}abort(t=void 0){return Re(this)?we(this)?d(new TypeError("Cannot abort a stream that already has a writer")):tt(this,t):d(at("abort"))}close(){return Re(this)?we(this)?d(new TypeError("Cannot close a stream that already has a writer")):D(this)?d(new TypeError("Cannot close an already-closing stream")):Jr(this):d(at("close"))}getWriter(){if(!Re(this))throw at("getWriter");return Zr(this)}}Object.defineProperties(te.prototype,{abort:{enumerable:!0},close:{enumerable:!0},getWriter:{enumerable:!0},locked:{enumerable:!0}}),c(te.prototype.abort,"abort"),c(te.prototype.close,"close"),c(te.prototype.getWriter,"getWriter"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(te.prototype,Symbol.toStringTag,{value:"WritableStream",configurable:!0});function Zr(e){return new Y(e)}function po(e,t,r,n,o=1,a=()=>1){let i=Object.create(te.prototype);Xr(i);let u=Object.create(Ce.prototype);return nn(i,u,e,t,r,n,o,a),i}function Xr(e){e._state="writable",e._storedError=void 0,e._writer=void 0,e._writableStreamController=void 0,e._writeRequests=new W,e._inFlightWriteRequest=void 0,e._closeRequest=void 0,e._inFlightCloseRequest=void 0,e._pendingAbortRequest=void 0,e._backpressure=!1}function Re(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_writableStreamController")?!1:e instanceof te}function we(e){return e._writer!==void 0}function tt(e,t){var r;if(e._state==="closed"||e._state==="errored")return p(void 0);e._writableStreamController._abortReason=t,(r=e._writableStreamController._abortController)===null||r===void 0||r.abort(t);let n=e._state;if(n==="closed"||n==="errored")return p(void 0);if(e._pendingAbortRequest!==void 0)return e._pendingAbortRequest._promise;let o=!1;n==="erroring"&&(o=!0,t=void 0);let a=R((i,u)=>{e._pendingAbortRequest={_promise:void 0,_resolve:i,_reject:u,_reason:t,_wasAlreadyErroring:o}});return e._pendingAbortRequest._promise=a,o||Vt(e,t),a}function Jr(e){let t=e._state;if(t==="closed"||t==="errored")return d(new TypeError(`The stream (in ${t} state) is not in the writable state and cannot be closed`));let r=R((o,a)=>{let i={_resolve:o,_reject:a};e._closeRequest=i}),n=e._writer;return n!==void 0&&e._backpressure&&t==="writable"&&er(n),ko(e._writableStreamController),r}function yo(e){return R((r,n)=>{let o={_resolve:r,_reject:n};e._writeRequests.push(o)})}function Yt(e,t){if(e._state==="writable"){Vt(e,t);return}Ht(e)}function Vt(e,t){let r=e._writableStreamController;e._state="erroring",e._storedError=t;let n=e._writer;n!==void 0&&xr(n,t),!Co(e)&&r._started&&Ht(e)}function Ht(e){e._state="errored",e._writableStreamController[cr]();let t=e._storedError;if(e._writeRequests.forEach(o=>{o._reject(t)}),e._writeRequests=new W,e._pendingAbortRequest===void 0){rt(e);return}let r=e._pendingAbortRequest;if(e._pendingAbortRequest=void 0,r._wasAlreadyErroring){r._reject(t),rt(e);return}let n=e._writableStreamController[fr](r._reason);T(n,()=>(r._resolve(),rt(e),null),o=>(r._reject(o),rt(e),null))}function So(e){e._inFlightWriteRequest._resolve(void 0),e._inFlightWriteRequest=void 0}function go(e,t){e._inFlightWriteRequest._reject(t),e._inFlightWriteRequest=void 0,Yt(e,t)}function Ro(e){e._inFlightCloseRequest._resolve(void 0),e._inFlightCloseRequest=void 0,e._state==="erroring"&&(e._storedError=void 0,e._pendingAbortRequest!==void 0&&(e._pendingAbortRequest._resolve(),e._pendingAbortRequest=void 0)),e._state="closed";let r=e._writer;r!==void 0&&ln(r)}function wo(e,t){e._inFlightCloseRequest._reject(t),e._inFlightCloseRequest=void 0,e._pendingAbortRequest!==void 0&&(e._pendingAbortRequest._reject(t),e._pendingAbortRequest=void 0),Yt(e,t)}function D(e){return!(e._closeRequest===void 0&&e._inFlightCloseRequest===void 0)}function Co(e){return!(e._inFlightWriteRequest===void 0&&e._inFlightCloseRequest===void 0)}function To(e){e._inFlightCloseRequest=e._closeRequest,e._closeRequest=void 0}function Po(e){e._inFlightWriteRequest=e._writeRequests.shift()}function rt(e){e._closeRequest!==void 0&&(e._closeRequest._reject(e._storedError),e._closeRequest=void 0);let t=e._writer;t!==void 0&&Kt(t,e._storedError)}function Gt(e,t){let r=e._writer;r!==void 0&&t!==e._backpressure&&(t?Do(r):er(r)),e._backpressure=t}class Y{constructor(t){if(U(t,1,"WritableStreamDefaultWriter"),Gr(t,"First parameter"),we(t))throw new TypeError("This stream has already been locked for exclusive writing by another writer");this._ownerWritableStream=t,t._writer=this;let r=t._state;if(r==="writable")!D(t)&&t._backpressure?st(this):un(this),it(this);else if(r==="erroring")xt(this,t._storedError),it(this);else if(r==="closed")un(this),zo(this);else{let n=t._storedError;xt(this,n),sn(this,n)}}get closed(){return he(this)?this._closedPromise:d(be("closed"))}get desiredSize(){if(!he(this))throw be("desiredSize");if(this._ownerWritableStream===void 0)throw Le("desiredSize");return Wo(this)}get ready(){return he(this)?this._readyPromise:d(be("ready"))}abort(t=void 0){return he(this)?this._ownerWritableStream===void 0?d(Le("abort")):vo(this,t):d(be("abort"))}close(){if(!he(this))return d(be("close"));let t=this._ownerWritableStream;return t===void 0?d(Le("close")):D(t)?d(new TypeError("Cannot close an already-closing stream")):Kr(this)}releaseLock(){if(!he(this))throw be("releaseLock");this._ownerWritableStream!==void 0&&en(this)}write(t=void 0){return he(this)?this._ownerWritableStream===void 0?d(Le("write to")):tn(this,t):d(be("write"))}}Object.defineProperties(Y.prototype,{abort:{enumerable:!0},close:{enumerable:!0},releaseLock:{enumerable:!0},write:{enumerable:!0},closed:{enumerable:!0},desiredSize:{enumerable:!0},ready:{enumerable:!0}}),c(Y.prototype.abort,"abort"),c(Y.prototype.close,"close"),c(Y.prototype.releaseLock,"releaseLock"),c(Y.prototype.write,"write"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Y.prototype,Symbol.toStringTag,{value:"WritableStreamDefaultWriter",configurable:!0});function he(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_ownerWritableStream")?!1:e instanceof Y}function vo(e,t){let r=e._ownerWritableStream;return tt(r,t)}function Kr(e){let t=e._ownerWritableStream;return Jr(t)}function Eo(e){let t=e._ownerWritableStream,r=t._state;return D(t)||r==="closed"?p(void 0):r==="errored"?d(t._storedError):Kr(e)}function qo(e,t){e._closedPromiseState==="pending"?Kt(e,t):Fo(e,t)}function xr(e,t){e._readyPromiseState==="pending"?dn(e,t):Lo(e,t)}function Wo(e){let t=e._ownerWritableStream,r=t._state;return r==="errored"||r==="erroring"?null:r==="closed"?0:on(t._writableStreamController)}function en(e){let t=e._ownerWritableStream,r=new TypeError("Writer was released and can no longer be used to monitor the stream's closedness");xr(e,r),qo(e,r),t._writer=void 0,e._ownerWritableStream=void 0}function tn(e,t){let r=e._ownerWritableStream,n=r._writableStreamController,o=Bo(n,t);if(r!==e._ownerWritableStream)return d(Le("write to"));let a=r._state;if(a==="errored")return d(r._storedError);if(D(r)||a==="closed")return d(new TypeError("The stream is closing or closed and cannot be written to"));if(a==="erroring")return d(r._storedError);let i=yo(r);return Io(n,t,o),i}let rn={};class Ce{constructor(){throw new TypeError("Illegal constructor")}get abortReason(){if(!Zt(this))throw Jt("abortReason");return this._abortReason}get signal(){if(!Zt(this))throw Jt("signal");if(this._abortController===void 0)throw new TypeError("WritableStreamDefaultController.prototype.signal is not supported");return this._abortController.signal}error(t=void 0){if(!Zt(this))throw Jt("error");this._controlledWritableStream._state==="writable"&&an(this,t)}[fr](t){let r=this._abortAlgorithm(t);return nt(this),r}[cr](){x(this)}}Object.defineProperties(Ce.prototype,{abortReason:{enumerable:!0},signal:{enumerable:!0},error:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Ce.prototype,Symbol.toStringTag,{value:"WritableStreamDefaultController",configurable:!0});function Zt(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_controlledWritableStream")?!1:e instanceof Ce}function nn(e,t,r,n,o,a,i,u){t._controlledWritableStream=e,e._writableStreamController=t,t._queue=void 0,t._queueTotalSize=void 0,x(t),t._abortReason=void 0,t._abortController=_o(),t._started=!1,t._strategySizeAlgorithm=u,t._strategyHWM=i,t._writeAlgorithm=n,t._closeAlgorithm=o,t._abortAlgorithm=a;let m=Xt(t);Gt(e,m);let f=r(),_=p(f);T(_,()=>(t._started=!0,ot(t),null),y=>(t._started=!0,Yt(e,y),null))}function Ao(e,t,r,n){let o=Object.create(Ce.prototype),a,i,u,m;t.start!==void 0?a=()=>t.start(o):a=()=>{},t.write!==void 0?i=f=>t.write(f,o):i=()=>p(void 0),t.close!==void 0?u=()=>t.close():u=()=>p(void 0),t.abort!==void 0?m=f=>t.abort(f):m=()=>p(void 0),nn(e,o,a,i,u,m,r,n)}function nt(e){e._writeAlgorithm=void 0,e._closeAlgorithm=void 0,e._abortAlgorithm=void 0,e._strategySizeAlgorithm=void 0}function ko(e){Ft(e,rn,0),ot(e)}function Bo(e,t){try{return e._strategySizeAlgorithm(t)}catch(r){return De(e,r),1}}function on(e){return e._strategyHWM-e._queueTotalSize}function Io(e,t,r){try{Ft(e,t,r)}catch(o){De(e,o);return}let n=e._controlledWritableStream;if(!D(n)&&n._state==="writable"){let o=Xt(e);Gt(n,o)}ot(e)}function ot(e){let t=e._controlledWritableStream;if(!e._started||t._inFlightWriteRequest!==void 0)return;if(t._state==="erroring"){Ht(t);return}if(e._queue.length===0)return;let n=Vn(e);n===rn?Oo(e):jo(e,n)}function De(e,t){e._controlledWritableStream._state==="writable"&&an(e,t)}function Oo(e){let t=e._controlledWritableStream;To(t),zt(e);let r=e._closeAlgorithm();nt(e),T(r,()=>(Ro(t),null),n=>(wo(t,n),null))}function jo(e,t){let r=e._controlledWritableStream;Po(r);let n=e._writeAlgorithm(t);T(n,()=>{So(r);let o=r._state;if(zt(e),!D(r)&&o==="writable"){let a=Xt(e);Gt(r,a)}return ot(e),null},o=>(r._state==="writable"&&nt(e),go(r,o),null))}function Xt(e){return on(e)<=0}function an(e,t){let r=e._controlledWritableStream;nt(e),Vt(r,t)}function at(e){return new TypeError(`WritableStream.prototype.${e} can only be used on a WritableStream`)}function Jt(e){return new TypeError(`WritableStreamDefaultController.prototype.${e} can only be used on a WritableStreamDefaultController`)}function be(e){return new TypeError(`WritableStreamDefaultWriter.prototype.${e} can only be used on a WritableStreamDefaultWriter`)}function Le(e){return new TypeError("Cannot "+e+" a stream using a released writer")}function it(e){e._closedPromise=R((t,r)=>{e._closedPromise_resolve=t,e._closedPromise_reject=r,e._closedPromiseState="pending"})}function sn(e,t){it(e),Kt(e,t)}function zo(e){it(e),ln(e)}function Kt(e,t){e._closedPromise_reject!==void 0&&(ye(e._closedPromise),e._closedPromise_reject(t),e._closedPromise_resolve=void 0,e._closedPromise_reject=void 0,e._closedPromiseState="rejected")}function Fo(e,t){sn(e,t)}function ln(e){e._closedPromise_resolve!==void 0&&(e._closedPromise_resolve(void 0),e._closedPromise_resolve=void 0,e._closedPromise_reject=void 0,e._closedPromiseState="resolved")}function st(e){e._readyPromise=R((t,r)=>{e._readyPromise_resolve=t,e._readyPromise_reject=r}),e._readyPromiseState="pending"}function xt(e,t){st(e),dn(e,t)}function un(e){st(e),er(e)}function dn(e,t){e._readyPromise_reject!==void 0&&(ye(e._readyPromise),e._readyPromise_reject(t),e._readyPromise_resolve=void 0,e._readyPromise_reject=void 0,e._readyPromiseState="rejected")}function Do(e){st(e)}function Lo(e,t){xt(e,t)}function er(e){e._readyPromise_resolve!==void 0&&(e._readyPromise_resolve(void 0),e._readyPromise_resolve=void 0,e._readyPromise_reject=void 0,e._readyPromiseState="fulfilled")}function Mo(){if(typeof globalThis<"u")return globalThis;if(typeof self<"u")return self;if(typeof globalThis<"u")return globalThis}let tr=Mo();function $o(e){if(!(typeof e=="function"||typeof e=="object")||e.name!=="DOMException")return!1;try{return new e,!0}catch{return!1}}function Uo(){let e=tr?.DOMException;return $o(e)?e:void 0}function Qo(){let e=function(r,n){this.message=r||"",this.name=n||"Error",Error.captureStackTrace&&Error.captureStackTrace(this,this.constructor)};return c(e,"DOMException"),e.prototype=Object.create(Error.prototype),Object.defineProperty(e.prototype,"constructor",{value:e,writable:!0,configurable:!0}),e}let No=Uo()||Qo();function fn(e,t,r,n,o,a){let i=Se(e),u=Zr(t);e._disturbed=!0;let m=!1,f=p(void 0);return R((_,y)=>{let w;if(a!==void 0){if(w=()=>{let h=a.reason!==void 0?a.reason:new No("Aborted","AbortError"),S=[];n||S.push(()=>t._state==="writable"?tt(t,h):p(void 0)),o||S.push(()=>e._state==="readable"?j(e,h):p(void 0)),E(()=>Promise.all(S.map(C=>C())),!0,h)},a.aborted){w();return}a.addEventListener("abort",w)}function z(){return R((h,S)=>{function C(q){q?h():I(Ee(),C,S)}C(!1)})}function Ee(){return m?p(!0):I(u._readyPromise,()=>R((h,S)=>{Ie(i,{_chunkSteps:C=>{f=I(tn(u,C),void 0,s),h(!1)},_closeSteps:()=>h(!0),_errorSteps:S})}))}if(H(e,i._closedPromise,h=>(n?B(!0,h):E(()=>tt(t,h),!0,h),null)),H(t,u._closedPromise,h=>(o?B(!0,h):E(()=>j(e,h),!0,h),null)),v(e,i._closedPromise,()=>(r?B():E(()=>Eo(u)),null)),D(t)||t._state==="closed"){let h=new TypeError("the destination writable stream closed before all data could be piped to it");o?B(!0,h):E(()=>j(e,h),!0,h)}ye(z());function ae(){let h=f;return I(f,()=>h!==f?ae():void 0)}function H(h,S,C){h._state==="errored"?C(h._storedError):gt(S,C)}function v(h,S,C){h._state==="closed"?C():Be(S,C)}function E(h,S,C){if(m)return;m=!0,t._state==="writable"&&!D(t)?Be(ae(),q):q();function q(){return T(h(),()=>G(S,C),qe=>G(!0,qe)),null}}function B(h,S){m||(m=!0,t._state==="writable"&&!D(t)?Be(ae(),()=>G(h,S)):G(h,S))}function G(h,S){return en(u),$(i),a!==void 0&&a.removeEventListener("abort",w),h?y(S):_(void 0),null}})}class V{constructor(){throw new TypeError("Illegal constructor")}get desiredSize(){if(!lt(this))throw dt("desiredSize");return rr(this)}close(){if(!lt(this))throw dt("close");if(!Pe(this))throw new TypeError("The stream is not in a state that permits close");me(this)}enqueue(t=void 0){if(!lt(this))throw dt("enqueue");if(!Pe(this))throw new TypeError("The stream is not in a state that permits enqueue");return Te(this,t)}error(t=void 0){if(!lt(this))throw dt("error");O(this,t)}[Rt](t){x(this);let r=this._cancelAlgorithm(t);return ut(this),r}[wt](t){let r=this._controlledReadableStream;if(this._queue.length>0){let n=zt(this);this._closeRequested&&this._queue.length===0?(ut(this),Ue(r)):Me(this),t._chunkSteps(n)}else Sr(r,t),Me(this)}[Ct](){}}Object.defineProperties(V.prototype,{close:{enumerable:!0},enqueue:{enumerable:!0},error:{enumerable:!0},desiredSize:{enumerable:!0}}),c(V.prototype.close,"close"),c(V.prototype.enqueue,"enqueue"),c(V.prototype.error,"error"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(V.prototype,Symbol.toStringTag,{value:"ReadableStreamDefaultController",configurable:!0});function lt(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_controlledReadableStream")?!1:e instanceof V}function Me(e){if(!cn(e))return;if(e._pulling){e._pullAgain=!0;return}e._pulling=!0;let r=e._pullAlgorithm();T(r,()=>(e._pulling=!1,e._pullAgain&&(e._pullAgain=!1,Me(e)),null),n=>(O(e,n),null))}function cn(e){let t=e._controlledReadableStream;return!Pe(e)||!e._started?!1:!!(ne(t)&&Ne(t)>0||rr(e)>0)}function ut(e){e._pullAlgorithm=void 0,e._cancelAlgorithm=void 0,e._strategySizeAlgorithm=void 0}function me(e){if(!Pe(e))return;let t=e._controlledReadableStream;e._closeRequested=!0,e._queue.length===0&&(ut(e),Ue(t))}function Te(e,t){if(!Pe(e))return;let r=e._controlledReadableStream;if(ne(r)&&Ne(r)>0)kt(r,t,!1);else{let n;try{n=e._strategySizeAlgorithm(t)}catch(o){throw O(e,o),o}try{Ft(e,t,n)}catch(o){throw O(e,o),o}}Me(e)}function O(e,t){let r=e._controlledReadableStream;r._state==="readable"&&(x(e),ut(e),_n(r,t))}function rr(e){let t=e._controlledReadableStream._state;return t==="errored"?null:t==="closed"?0:e._strategyHWM-e._queueTotalSize}function Yo(e){return!cn(e)}function Pe(e){let t=e._controlledReadableStream._state;return!e._closeRequested&&t==="readable"}function hn(e,t,r,n,o,a,i){t._controlledReadableStream=e,t._queue=void 0,t._queueTotalSize=void 0,x(t),t._started=!1,t._closeRequested=!1,t._pullAgain=!1,t._pulling=!1,t._strategySizeAlgorithm=i,t._strategyHWM=a,t._pullAlgorithm=n,t._cancelAlgorithm=o,e._readableStreamController=t;let u=r();T(p(u),()=>(t._started=!0,Me(t),null),m=>(O(t,m),null))}function Vo(e,t,r,n){let o=Object.create(V.prototype),a,i,u;t.start!==void 0?a=()=>t.start(o):a=()=>{},t.pull!==void 0?i=()=>t.pull(o):i=()=>p(void 0),t.cancel!==void 0?u=m=>t.cancel(m):u=()=>p(void 0),hn(e,o,a,i,u,r,n)}function dt(e){return new TypeError(`ReadableStreamDefaultController.prototype.${e} can only be used on a ReadableStreamDefaultController`)}function Ho(e,t){return de(e._readableStreamController)?Zo(e):Go(e)}function Go(e,t){let r=Se(e),n=!1,o=!1,a=!1,i=!1,u,m,f,_,y,w=R(v=>{y=v});function z(){return n?(o=!0,p(void 0)):(n=!0,Ie(r,{_chunkSteps:E=>{se(()=>{o=!1;let B=E,G=E;a||Te(f._readableStreamController,B),i||Te(_._readableStreamController,G),n=!1,o&&z()})},_closeSteps:()=>{n=!1,a||me(f._readableStreamController),i||me(_._readableStreamController),(!a||!i)&&y(void 0)},_errorSteps:()=>{n=!1}}),p(void 0))}function Ee(v){if(a=!0,u=v,i){let E=Oe([u,m]),B=j(e,E);y(B)}return w}function ae(v){if(i=!0,m=v,a){let E=Oe([u,m]),B=j(e,E);y(B)}return w}function H(){}return f=$e(H,z,Ee),_=$e(H,z,ae),gt(r._closedPromise,v=>(O(f._readableStreamController,v),O(_._readableStreamController,v),(!a||!i)&&y(void 0),null)),[f,_]}function Zo(e){let t=Se(e),r=!1,n=!1,o=!1,a=!1,i=!1,u,m,f,_,y,w=R(h=>{y=h});function z(h){gt(h._closedPromise,S=>(h!==t||(k(f._readableStreamController,S),k(_._readableStreamController,S),(!a||!i)&&y(void 0)),null))}function Ee(){ce(t)&&($(t),t=Se(e),z(t)),Ie(t,{_chunkSteps:S=>{se(()=>{n=!1,o=!1;let C=S,q=S;if(!a&&!i)try{q=Ar(S)}catch(qe){k(f._readableStreamController,qe),k(_._readableStreamController,qe),y(j(e,qe));return}a||Ze(f._readableStreamController,C),i||Ze(_._readableStreamController,q),r=!1,n?H():o&&v()})},_closeSteps:()=>{r=!1,a||je(f._readableStreamController),i||je(_._readableStreamController),f._readableStreamController._pendingPullIntos.length>0&&Xe(f._readableStreamController,0),_._readableStreamController._pendingPullIntos.length>0&&Xe(_._readableStreamController,0),(!a||!i)&&y(void 0)},_errorSteps:()=>{r=!1}})}function ae(h,S){J(t)&&($(t),t=Qr(e),z(t));let C=S?_:f,q=S?f:_;Vr(t,h,1,{_chunkSteps:We=>{se(()=>{n=!1,o=!1;let Ae=S?i:a;if(S?a:i)Ae||Je(C._readableStreamController,We);else{let Wn;try{Wn=Ar(We)}catch(sr){k(C._readableStreamController,sr),k(q._readableStreamController,sr),y(j(e,sr));return}Ae||Je(C._readableStreamController,We),Ze(q._readableStreamController,Wn)}r=!1,n?H():o&&v()})},_closeSteps:We=>{r=!1;let Ae=S?i:a,yt=S?a:i;Ae||je(C._readableStreamController),yt||je(q._readableStreamController),We!==void 0&&(Ae||Je(C._readableStreamController,We),!yt&&q._readableStreamController._pendingPullIntos.length>0&&Xe(q._readableStreamController,0)),(!Ae||!yt)&&y(void 0)},_errorSteps:()=>{r=!1}})}function H(){if(r)return n=!0,p(void 0);r=!0;let h=Ut(f._readableStreamController);return h===null?Ee():ae(h._view,!1),p(void 0)}function v(){if(r)return o=!0,p(void 0);r=!0;let h=Ut(_._readableStreamController);return h===null?Ee():ae(h._view,!0),p(void 0)}function E(h){if(a=!0,u=h,i){let S=Oe([u,m]),C=j(e,S);y(C)}return w}function B(h){if(i=!0,m=h,a){let S=Oe([u,m]),C=j(e,S);y(C)}return w}function G(){}return f=mn(G,H,E),_=mn(G,v,B),z(t),[f,_]}function Xo(e){return l(e)&&typeof e.getReader<"u"}function Jo(e){return Xo(e)?xo(e.getReader()):Ko(e)}function Ko(e){let t,r=Wr(e,"async"),n=s;function o(){let i;try{i=Un(r)}catch(m){return d(m)}let u=p(i);return M(u,m=>{if(!l(m))throw new TypeError("The promise returned by the iterator.next() method must fulfill with an object");if(Qn(m))me(t._readableStreamController);else{let _=Nn(m);Te(t._readableStreamController,_)}})}function a(i){let u=r.iterator,m;try{m=Ve(u,"return")}catch(y){return d(y)}if(m===void 0)return p(void 0);let f;try{f=le(m,u,[i])}catch(y){return d(y)}let _=p(f);return M(_,y=>{if(!l(y))throw new TypeError("The promise returned by the iterator.return() method must fulfill with an object")})}return t=$e(n,o,a,0),t}function xo(e){let t,r=s;function n(){let a;try{a=e.read()}catch(i){return d(i)}return M(a,i=>{if(!l(i))throw new TypeError("The promise returned by the reader.read() method must fulfill with an object");if(i.done)me(t._readableStreamController);else{let u=i.value;Te(t._readableStreamController,u)}})}function o(a){try{return p(e.cancel(a))}catch(i){return d(i)}}return t=$e(r,n,o,0),t}function ea(e,t){F(e,t);let r=e,n=r?.autoAllocateChunkSize,o=r?.cancel,a=r?.pull,i=r?.start,u=r?.type;return{autoAllocateChunkSize:n===void 0?void 0:Wt(n,`${t} has member 'autoAllocateChunkSize' that`),cancel:o===void 0?void 0:ta(o,r,`${t} has member 'cancel' that`),pull:a===void 0?void 0:ra(a,r,`${t} has member 'pull' that`),start:i===void 0?void 0:na(i,r,`${t} has member 'start' that`),type:u===void 0?void 0:oa(u,`${t} has member 'type' that`)}}function ta(e,t,r){return A(e,r),n=>Z(e,t,[n])}function ra(e,t,r){return A(e,r),n=>Z(e,t,[n])}function na(e,t,r){return A(e,r),n=>le(e,t,[n])}function oa(e,t){if(e=`${e}`,e!=="bytes")throw new TypeError(`${t} '${e}' is not a valid enumeration value for ReadableStreamType`);return e}function aa(e,t){return F(e,t),{preventCancel:!!e?.preventCancel}}function bn(e,t){F(e,t);let r=e?.preventAbort,n=e?.preventCancel,o=e?.preventClose,a=e?.signal;return a!==void 0&&ia(a,`${t} has member 'signal' that`),{preventAbort:!!r,preventCancel:!!n,preventClose:!!o,signal:a}}function ia(e,t){if(!bo(e))throw new TypeError(`${t} is not an AbortSignal.`)}function sa(e,t){F(e,t);let r=e?.readable;Et(r,"readable","ReadableWritablePair"),At(r,`${t} has member 'readable' that`);let n=e?.writable;return Et(n,"writable","ReadableWritablePair"),Gr(n,`${t} has member 'writable' that`),{readable:r,writable:n}}class P{constructor(t={},r={}){t===void 0?t=null:pr(t,"First parameter");let n=et(r,"Second parameter"),o=ea(t,"First parameter");if(nr(this),o.type==="bytes"){if(n.size!==void 0)throw new RangeError("The strategy for a byte stream cannot have a size function");let a=Fe(n,0);eo(this,o,a)}else{let a=xe(n),i=Fe(n,1);Vo(this,o,i,a)}}get locked(){if(!re(this))throw _e("locked");return ne(this)}cancel(t=void 0){return re(this)?ne(this)?d(new TypeError("Cannot cancel a stream that already has a reader")):j(this,t):d(_e("cancel"))}getReader(t=void 0){if(!re(this))throw _e("getReader");return ro(t,"First parameter").mode===void 0?Se(this):Qr(this)}pipeThrough(t,r={}){if(!re(this))throw _e("pipeThrough");U(t,1,"pipeThrough");let n=sa(t,"First parameter"),o=bn(r,"Second parameter");if(ne(this))throw new TypeError("ReadableStream.prototype.pipeThrough cannot be used on a locked ReadableStream");if(we(n.writable))throw new TypeError("ReadableStream.prototype.pipeThrough cannot be used on a locked WritableStream");let a=fn(this,n.writable,o.preventClose,o.preventAbort,o.preventCancel,o.signal);return ye(a),n.readable}pipeTo(t,r={}){if(!re(this))return d(_e("pipeTo"));if(t===void 0)return d("Parameter 1 is required in 'pipeTo'.");if(!Re(t))return d(new TypeError("ReadableStream.prototype.pipeTo's first argument must be a WritableStream"));let n;try{n=bn(r,"Second parameter")}catch(o){return d(o)}return ne(this)?d(new TypeError("ReadableStream.prototype.pipeTo cannot be used on a locked ReadableStream")):we(t)?d(new TypeError("ReadableStream.prototype.pipeTo cannot be used on a locked WritableStream")):fn(this,t,n.preventClose,n.preventAbort,n.preventCancel,n.signal)}tee(){if(!re(this))throw _e("tee");let t=Ho(this);return Oe(t)}values(t=void 0){if(!re(this))throw _e("values");let r=aa(t,"First parameter");return Mn(this,r.preventCancel)}[jt](t){return this.values(t)}static from(t){return Jo(t)}}Object.defineProperties(P,{from:{enumerable:!0}}),Object.defineProperties(P.prototype,{cancel:{enumerable:!0},getReader:{enumerable:!0},pipeThrough:{enumerable:!0},pipeTo:{enumerable:!0},tee:{enumerable:!0},values:{enumerable:!0},locked:{enumerable:!0}}),c(P.from,"from"),c(P.prototype.cancel,"cancel"),c(P.prototype.getReader,"getReader"),c(P.prototype.pipeThrough,"pipeThrough"),c(P.prototype.pipeTo,"pipeTo"),c(P.prototype.tee,"tee"),c(P.prototype.values,"values"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(P.prototype,Symbol.toStringTag,{value:"ReadableStream",configurable:!0}),Object.defineProperty(P.prototype,jt,{value:P.prototype.values,writable:!0,configurable:!0});function $e(e,t,r,n=1,o=()=>1){let a=Object.create(P.prototype);nr(a);let i=Object.create(V.prototype);return hn(a,i,e,t,r,n,o),a}function mn(e,t,r){let n=Object.create(P.prototype);nr(n);let o=Object.create(N.prototype);return Ur(n,o,e,t,r,0,void 0),n}function nr(e){e._state="readable",e._reader=void 0,e._storedError=void 0,e._disturbed=!1}function re(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_readableStreamController")?!1:e instanceof P}function ne(e){return e._reader!==void 0}function j(e,t){if(e._disturbed=!0,e._state==="closed")return p(void 0);if(e._state==="errored")return d(e._storedError);Ue(e);let r=e._reader;if(r!==void 0&&ce(r)){let o=r._readIntoRequests;r._readIntoRequests=new W,o.forEach(a=>{a._closeSteps(void 0)})}let n=e._readableStreamController[Rt](t);return M(n,s)}function Ue(e){e._state="closed";let t=e._reader;if(t!==void 0&&(mr(t),J(t))){let r=t._readRequests;t._readRequests=new W,r.forEach(n=>{n._closeSteps()})}}function _n(e,t){e._state="errored",e._storedError=t;let r=e._reader;r!==void 0&&(vt(r,t),J(r)?Rr(r,t):Hr(r,t))}function _e(e){return new TypeError(`ReadableStream.prototype.${e} can only be used on a ReadableStream`)}function pn(e,t){F(e,t);let r=e?.highWaterMark;return Et(r,"highWaterMark","QueuingStrategyInit"),{highWaterMark:qt(r)}}let yn=e=>e.byteLength;c(yn,"size");class ft{constructor(t){U(t,1,"ByteLengthQueuingStrategy"),t=pn(t,"First parameter"),this._byteLengthQueuingStrategyHighWaterMark=t.highWaterMark}get highWaterMark(){if(!gn(this))throw Sn("highWaterMark");return this._byteLengthQueuingStrategyHighWaterMark}get size(){if(!gn(this))throw Sn("size");return yn}}Object.defineProperties(ft.prototype,{highWaterMark:{enumerable:!0},size:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(ft.prototype,Symbol.toStringTag,{value:"ByteLengthQueuingStrategy",configurable:!0});function Sn(e){return new TypeError(`ByteLengthQueuingStrategy.prototype.${e} can only be used on a ByteLengthQueuingStrategy`)}function gn(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_byteLengthQueuingStrategyHighWaterMark")?!1:e instanceof ft}let Rn=()=>1;c(Rn,"size");class ct{constructor(t){U(t,1,"CountQueuingStrategy"),t=pn(t,"First parameter"),this._countQueuingStrategyHighWaterMark=t.highWaterMark}get highWaterMark(){if(!Cn(this))throw wn("highWaterMark");return this._countQueuingStrategyHighWaterMark}get size(){if(!Cn(this))throw wn("size");return Rn}}Object.defineProperties(ct.prototype,{highWaterMark:{enumerable:!0},size:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(ct.prototype,Symbol.toStringTag,{value:"CountQueuingStrategy",configurable:!0});function wn(e){return new TypeError(`CountQueuingStrategy.prototype.${e} can only be used on a CountQueuingStrategy`)}function Cn(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_countQueuingStrategyHighWaterMark")?!1:e instanceof ct}function la(e,t){F(e,t);let r=e?.cancel,n=e?.flush,o=e?.readableType,a=e?.start,i=e?.transform,u=e?.writableType;return{cancel:r===void 0?void 0:ca(r,e,`${t} has member 'cancel' that`),flush:n===void 0?void 0:ua(n,e,`${t} has member 'flush' that`),readableType:o,start:a===void 0?void 0:da(a,e,`${t} has member 'start' that`),transform:i===void 0?void 0:fa(i,e,`${t} has member 'transform' that`),writableType:u}}function ua(e,t,r){return A(e,r),n=>Z(e,t,[n])}function da(e,t,r){return A(e,r),n=>le(e,t,[n])}function fa(e,t,r){return A(e,r),(n,o)=>Z(e,t,[n,o])}function ca(e,t,r){return A(e,r),n=>Z(e,t,[n])}class ht{constructor(t={},r={},n={}){t===void 0&&(t=null);let o=et(r,"Second parameter"),a=et(n,"Third parameter"),i=la(t,"First parameter");if(i.readableType!==void 0)throw new RangeError("Invalid readableType specified");if(i.writableType!==void 0)throw new RangeError("Invalid writableType specified");let u=Fe(a,0),m=xe(a),f=Fe(o,1),_=xe(o),y,w=R(z=>{y=z});ha(this,w,f,_,u,m),ma(this,i),i.start!==void 0?y(i.start(this._transformStreamController)):y(void 0)}get readable(){if(!Tn(this))throw qn("readable");return this._readable}get writable(){if(!Tn(this))throw qn("writable");return this._writable}}Object.defineProperties(ht.prototype,{readable:{enumerable:!0},writable:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(ht.prototype,Symbol.toStringTag,{value:"TransformStream",configurable:!0});function ha(e,t,r,n,o,a){function i(){return t}function u(w){return ya(e,w)}function m(w){return Sa(e,w)}function f(){return ga(e)}e._writable=po(i,u,f,m,r,n);function _(){return Ra(e)}function y(w){return wa(e,w)}e._readable=$e(i,_,y,o,a),e._backpressure=void 0,e._backpressureChangePromise=void 0,e._backpressureChangePromise_resolve=void 0,bt(e,!0),e._transformStreamController=void 0}function Tn(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_transformStreamController")?!1:e instanceof ht}function Pn(e,t){O(e._readable._readableStreamController,t),or(e,t)}function or(e,t){_t(e._transformStreamController),De(e._writable._writableStreamController,t),ar(e)}function ar(e){e._backpressure&&bt(e,!1)}function bt(e,t){e._backpressureChangePromise!==void 0&&e._backpressureChangePromise_resolve(),e._backpressureChangePromise=R(r=>{e._backpressureChangePromise_resolve=r}),e._backpressure=t}class oe{constructor(){throw new TypeError("Illegal constructor")}get desiredSize(){if(!mt(this))throw pt("desiredSize");let t=this._controlledTransformStream._readable._readableStreamController;return rr(t)}enqueue(t=void 0){if(!mt(this))throw pt("enqueue");vn(this,t)}error(t=void 0){if(!mt(this))throw pt("error");_a(this,t)}terminate(){if(!mt(this))throw pt("terminate");pa(this)}}Object.defineProperties(oe.prototype,{enqueue:{enumerable:!0},error:{enumerable:!0},terminate:{enumerable:!0},desiredSize:{enumerable:!0}}),c(oe.prototype.enqueue,"enqueue"),c(oe.prototype.error,"error"),c(oe.prototype.terminate,"terminate"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(oe.prototype,Symbol.toStringTag,{value:"TransformStreamDefaultController",configurable:!0});function mt(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_controlledTransformStream")?!1:e instanceof oe}function ba(e,t,r,n,o){t._controlledTransformStream=e,e._transformStreamController=t,t._transformAlgorithm=r,t._flushAlgorithm=n,t._cancelAlgorithm=o,t._finishPromise=void 0,t._finishPromise_resolve=void 0,t._finishPromise_reject=void 0}function ma(e,t){let r=Object.create(oe.prototype),n,o,a;t.transform!==void 0?n=i=>t.transform(i,r):n=i=>{try{return vn(r,i),p(void 0)}catch(u){return d(u)}},t.flush!==void 0?o=()=>t.flush(r):o=()=>p(void 0),t.cancel!==void 0?a=i=>t.cancel(i):a=()=>p(void 0),ba(e,r,n,o,a)}function _t(e){e._transformAlgorithm=void 0,e._flushAlgorithm=void 0,e._cancelAlgorithm=void 0}function vn(e,t){let r=e._controlledTransformStream,n=r._readable._readableStreamController;if(!Pe(n))throw new TypeError("Readable side is not in a state that permits enqueue");try{Te(n,t)}catch(a){throw or(r,a),r._readable._storedError}Yo(n)!==r._backpressure&&bt(r,!0)}function _a(e,t){Pn(e._controlledTransformStream,t)}function En(e,t){let r=e._transformAlgorithm(t);return M(r,void 0,n=>{throw Pn(e._controlledTransformStream,n),n})}function pa(e){let t=e._controlledTransformStream,r=t._readable._readableStreamController;me(r);let n=new TypeError("TransformStream terminated");or(t,n)}function ya(e,t){let r=e._transformStreamController;if(e._backpressure){let n=e._backpressureChangePromise;return M(n,()=>{let o=e._writable;if(o._state==="erroring")throw o._storedError;return En(r,t)})}return En(r,t)}function Sa(e,t){let r=e._transformStreamController;if(r._finishPromise!==void 0)return r._finishPromise;let n=e._readable;r._finishPromise=R((a,i)=>{r._finishPromise_resolve=a,r._finishPromise_reject=i});let o=r._cancelAlgorithm(t);return _t(r),T(o,()=>(n._state==="errored"?ve(r,n._storedError):(O(n._readableStreamController,t),ir(r)),null),a=>(O(n._readableStreamController,a),ve(r,a),null)),r._finishPromise}function ga(e){let t=e._transformStreamController;if(t._finishPromise!==void 0)return t._finishPromise;let r=e._readable;t._finishPromise=R((o,a)=>{t._finishPromise_resolve=o,t._finishPromise_reject=a});let n=t._flushAlgorithm();return _t(t),T(n,()=>(r._state==="errored"?ve(t,r._storedError):(me(r._readableStreamController),ir(t)),null),o=>(O(r._readableStreamController,o),ve(t,o),null)),t._finishPromise}function Ra(e){return bt(e,!1),e._backpressureChangePromise}function wa(e,t){let r=e._transformStreamController;if(r._finishPromise!==void 0)return r._finishPromise;let n=e._writable;r._finishPromise=R((a,i)=>{r._finishPromise_resolve=a,r._finishPromise_reject=i});let o=r._cancelAlgorithm(t);return _t(r),T(o,()=>(n._state==="errored"?ve(r,n._storedError):(De(n._writableStreamController,t),ar(e),ir(r)),null),a=>(De(n._writableStreamController,a),ar(e),ve(r,a),null)),r._finishPromise}function pt(e){return new TypeError(`TransformStreamDefaultController.prototype.${e} can only be used on a TransformStreamDefaultController`)}function ir(e){e._finishPromise_resolve!==void 0&&(e._finishPromise_resolve(),e._finishPromise_resolve=void 0,e._finishPromise_reject=void 0)}function ve(e,t){e._finishPromise_reject!==void 0&&(ye(e._finishPromise),e._finishPromise_reject(t),e._finishPromise_resolve=void 0,e._finishPromise_reject=void 0)}function qn(e){return new TypeError(`TransformStream.prototype.${e} can only be used on a TransformStream`)}b.ByteLengthQueuingStrategy=ft,b.CountQueuingStrategy=ct,b.ReadableByteStreamController=N,b.ReadableStream=P,b.ReadableStreamBYOBReader=ee,b.ReadableStreamBYOBRequest=ue,b.ReadableStreamDefaultController=V,b.ReadableStreamDefaultReader=X,b.TransformStream=ht,b.TransformStreamDefaultController=oe,b.WritableStream=te,b.WritableStreamDefaultController=Ce,b.WritableStreamDefaultWriter=Y}))});var ke=ka(kn());typeof globalThis.ReadableStream>"u"&&(globalThis.ReadableStream=ke.ReadableStream);typeof globalThis.WritableStream>"u"&&(globalThis.WritableStream=ke.WritableStream);typeof globalThis.TransformStream>"u"&&(globalThis.TransformStream=ke.TransformStream);typeof globalThis.URLSearchParams>"u"&&(globalThis.URLSearchParams=class{constructor(s=void 0){L(this,"_entries",[]);if(typeof s=="string"){let l=s.startsWith("?")?s.slice(1):s;if(l.length>0)for(let g of l.split("&")){if(!g)continue;let[c,pe=""]=g.split("=");this.append(decodeURIComponent(c),decodeURIComponent(pe))}}else if(Array.isArray(s))for(let[l,g]of s)this.append(l,g);else if(s&&typeof s=="object")for(let[l,g]of Object.entries(s))this.append(l,g)}append(s,l){this._entries.push([String(s),String(l)])}delete(s){let l=String(s);this._entries=this._entries.filter(([g])=>g!==l)}get(s){let l=String(s),g=this._entries.find(([c])=>c===l);return g?g[1]:null}getAll(s){let l=String(s);return this._entries.filter(([g])=>g===l).map(([,g])=>g)}has(s){let l=String(s);return this._entries.some(([g])=>g===l)}set(s,l){this.delete(s),this.append(s,l)}entries(){return this._entries[Symbol.iterator]()}keys(){return this._entries.map(([s])=>s)[Symbol.iterator]()}values(){return this._entries.map(([,s])=>s)[Symbol.iterator]()}forEach(s,l=void 0){for(let[g,c]of this._entries)s.call(l,c,g,this)}toString(){return this._entries.map(([s,l])=>`${encodeURIComponent(s)}=${encodeURIComponent(l)}`).join("&")}[Symbol.iterator](){return this.entries()}},globalThis.URLSearchParams.__secureExecBootstrapStub=!0);typeof globalThis.URL>"u"&&(globalThis.URL=class{constructor(s,l=void 0){let g=String(s??""),c=/^[a-zA-Z][a-zA-Z\d+\-.]*:/.test(g),pe=c||typeof l>"u"?"":String(new globalThis.URL(l).href),ie=(c?g:pe.replace(/\/[^/]*$/,"/")+g).match(/^(\w+:)\/\/([^/:?#]+)(:\d+)?(.*)$/);if(!ie)throw new TypeError(`Invalid URL: ${g}`);this.protocol=ie[1],this.hostname=ie[2],this.port=(ie[3]||"").slice(1);let R=ie[4]||"/",p=R.indexOf("?"),d=R.indexOf("#"),I=[p,d].filter(T=>T>=0).sort((T,Be)=>T-Be)[0]??R.length;this.pathname=R.slice(0,I)||"/",this.search=p>=0?R.slice(p,d>=0&&d>p?d:R.length):"",this.hash=d>=0?R.slice(d):"",this.host=this.hostname+(this.port?`:${this.port}`:""),this.origin=`${this.protocol}//${this.host}`,this.href=`${this.origin}${this.pathname}${this.search}${this.hash}`,this.searchParams=new globalThis.URLSearchParams(this.search)}toString(){return this.href}toJSON(){return this.href}},globalThis.URL.__secureExecBootstrapStub=!0);typeof globalThis.Blob>"u"&&(globalThis.Blob=class{});typeof globalThis.AbortSignal>"u"&&(globalThis.AbortSignal=class{constructor(){L(this,"aborted",!1);L(this,"reason");L(this,"_listeners",new Set)}addEventListener(s,l){s!=="abort"||typeof l!="function"||this._listeners.add(l)}removeEventListener(s,l){s==="abort"&&this._listeners.delete(l)}dispatchEvent(s){for(let l of this._listeners)l.call(this,s);return!0}throwIfAborted(){if(this.aborted)throw this.reason instanceof Error?this.reason:new Error(String(this.reason??"AbortError"))}});typeof globalThis.AbortController>"u"&&(globalThis.AbortController=class{constructor(){this.signal=new globalThis.AbortSignal}abort(s=void 0){this.signal.aborted||(this.signal.aborted=!0,this.signal.reason=s,this.signal.dispatchEvent({type:"abort"}))}});typeof globalThis.File>"u"&&(globalThis.File=class extends Blob{constructor(l=[],g="",c={}){super(l,c);L(this,"name");L(this,"lastModified");L(this,"webkitRelativePath");this.name=String(g),this.lastModified=typeof c.lastModified=="number"?c.lastModified:Date.now(),this.webkitRelativePath=""}});typeof globalThis.FormData>"u"&&(globalThis.FormData=class{constructor(){L(this,"_entries",[])}append(s,l){this._entries.push([s,l])}get(s){let l=this._entries.find(([g])=>g===s);return l?l[1]:null}getAll(s){return this._entries.filter(([l])=>l===s).map(([,l])=>l)}has(s){return this._entries.some(([l])=>l===s)}delete(s){this._entries=this._entries.filter(([l])=>l!==s)}entries(){return this._entries[Symbol.iterator]()}[Symbol.iterator](){return this.entries()}});typeof globalThis.MessagePort>"u"&&(globalThis.MessagePort=class{constructor(){L(this,"onmessage",null)}postMessage(s){}start(){}close(){}addEventListener(){}removeEventListener(){}});typeof globalThis.MessageChannel>"u"&&(globalThis.MessageChannel=class{constructor(){this.port1=new globalThis.MessagePort,this.port2=new globalThis.MessagePort}});if(typeof globalThis.performance>"u"){let b=Date.now();globalThis.performance={now(){return Date.now()-b}}}typeof globalThis.performance.markResourceTiming!="function"&&(globalThis.performance.markResourceTiming=()=>{});})();
-/*! Bundled license information:
-
-web-streams-polyfill/dist/ponyfill.es2018.js:
-  (**
-   * @license
-   * web-streams-polyfill v3.3.3
-   * Copyright 2024 Mattias Buelens, Diwank Singh Tomer and other contributors.
-   * This code is released under the MIT license.
-   * SPDX-License-Identifier: MIT
-   *)
-*/
-
-if(typeof globalThis.global==="undefined"){globalThis.global=globalThis;}if(typeof globalThis.process==="undefined"){globalThis.process={env:{},argv:["node"],browser:false,version:"v22.0.0",versions:{node:"22.0.0"},nextTick(callback,...args){return Promise.resolve().then(()=>callback(...args));}};}if(typeof globalThis.TextEncoder==="undefined"){globalThis.TextEncoder=class{encode(value=""){const input=String(value??"");const encoded=unescape(encodeURIComponent(input));const out=new Uint8Array(encoded.length);for(let i=0;i<encoded.length;i++){out[i]=encoded.charCodeAt(i);}return out;}};}if(typeof globalThis.TextDecoder==="undefined"){globalThis.TextDecoder=class{decode(value=new Uint8Array()){const view=value instanceof Uint8Array?value:ArrayBuffer.isView(value)?new Uint8Array(value.buffer,value.byteOffset,value.byteLength):value instanceof ArrayBuffer?new Uint8Array(value):new Uint8Array(0);let binary="";for(let i=0;i<view.length;i++){binary+=String.fromCharCode(view[i]);}return decodeURIComponent(escape(binary));}};}if(typeof globalThis.Buffer==="undefined"){const __secureExecTe=typeof TextEncoder==="function"?new TextEncoder():null;const __secureExecTd=typeof TextDecoder==="function"?new TextDecoder():null;class __SecureExecEarlyBuffer extends Uint8Array{static from(value,encoding="utf8"){if(value instanceof ArrayBuffer){return new __SecureExecEarlyBuffer(value);}if(ArrayBuffer.isView(value)){return new __SecureExecEarlyBuffer(value.buffer.slice(value.byteOffset,value.byteOffset+value.byteLength));}if(Array.isArray(value)){return new __SecureExecEarlyBuffer(value);}const stringValue=String(value??"");if(encoding==="base64"&&typeof atob==="function"){const binary=atob(stringValue);const out=new __SecureExecEarlyBuffer(binary.length);for(let i=0;i<binary.length;i++){out[i]=binary.charCodeAt(i);}return out;}if(encoding==="binary"||encoding==="latin1"){const out=new __SecureExecEarlyBuffer(stringValue.length);for(let i=0;i<stringValue.length;i++){out[i]=stringValue.charCodeAt(i)&255;}return out;}if(__secureExecTe){return new __SecureExecEarlyBuffer(__secureExecTe.encode(stringValue));}const out=new __SecureExecEarlyBuffer(stringValue.length);for(let i=0;i<stringValue.length;i++){out[i]=stringValue.charCodeAt(i)&255;}return out;}static alloc(size){return new __SecureExecEarlyBuffer(Number(size)||0);}static concat(list,totalLength){const length=totalLength??list.reduce((sum,item)=>sum+(item?.length??0),0);const out=new __SecureExecEarlyBuffer(length);let offset=0;for(const item of list){const chunk=item instanceof Uint8Array?item:__SecureExecEarlyBuffer.from(item);out.set(chunk,offset);offset+=chunk.length;}return out;}static isBuffer(value){return value instanceof Uint8Array;}static byteLength(value,encoding="utf8"){return __SecureExecEarlyBuffer.from(value,encoding).byteLength;}toString(encoding="utf8"){if(encoding==="base64"&&typeof btoa==="function"){let binary="";for(const byte of this){binary+=String.fromCharCode(byte);}return btoa(binary);}if(encoding==="binary"||encoding==="latin1"){let binary="";for(const byte of this){binary+=String.fromCharCode(byte);}return binary;}if(__secureExecTd){return __secureExecTd.decode(this);}return Array.from(this,byte=>String.fromCharCode(byte)).join("");}}globalThis.Buffer=__SecureExecEarlyBuffer;}if(typeof globalThis.performance==="undefined"){const __secureExecPerformanceStart=Date.now();globalThis.performance={now(){return Date.now()-__secureExecPerformanceStart;}};}if(typeof globalThis.performance.markResourceTiming!=="function"){globalThis.performance.markResourceTiming=()=>{};}if(typeof TextEncoder==="undefined"&&typeof globalThis.TextEncoder!=="undefined"){var TextEncoder=globalThis.TextEncoder;}if(typeof TextDecoder==="undefined"&&typeof globalThis.TextDecoder!=="undefined"){var TextDecoder=globalThis.TextDecoder;}if(typeof Buffer==="undefined"&&typeof globalThis.Buffer!=="undefined"){var Buffer=globalThis.Buffer;}
-(()=>{var sj=Object.create;var eh=Object.defineProperty;var oj=Object.getOwnPropertyDescriptor;var aj=Object.getOwnPropertyNames;var Aj=Object.getPrototypeOf,fj=Object.prototype.hasOwnProperty;var pI=e=>{throw TypeError(e)};var uj=(e,t,r)=>t in e?eh(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var uD=(e,t)=>()=>(e&&(t=e(e=0)),t);var U=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports),EI=(e,t)=>{for(var r in t)eh(e,r,{get:t[r],enumerable:!0})},v0=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of aj(t))!fj.call(e,i)&&i!==r&&eh(e,i,{get:()=>t[i],enumerable:!(n=oj(t,i))||n.enumerable});return e},_n=(e,t,r)=>(v0(e,t,"default"),r&&v0(r,t,"default")),hr=(e,t,r)=>(r=e!=null?sj(Aj(e)):{},v0(t||!e||!e.__esModule?eh(r,"default",{value:e,enumerable:!0}):r,e)),Os=e=>v0(eh({},"__esModule",{value:!0}),e);var y=(e,t,r)=>uj(e,typeof t!="symbol"?t+"":t,r),yI=(e,t,r)=>t.has(e)||pI("Cannot "+r),cD=(e,t)=>Object(t)!==t?pI('Cannot use the "in" operator on this value'):e.has(t),ee=(e,t,r)=>(yI(e,t,"read from private field"),r?r.call(e):t.get(e)),wt=(e,t,r)=>t.has(e)?pI("Cannot add the same private member more than once"):t instanceof WeakSet?t.add(e):t.set(e,r),ft=(e,t,r,n)=>(yI(e,t,"write to private field"),n?n.call(e,r):t.set(e,r),r),lD=(e,t,r)=>(yI(e,t,"access private method"),r);var gD=U(R0=>{"use strict";R0.byteLength=lj;R0.toByteArray=dj;R0.fromByteArray=Ej;var Hs=[],ci=[],cj=typeof Uint8Array<"u"?Uint8Array:Array,mI="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";for(zA=0,hD=mI.length;zA<hD;++zA)Hs[zA]=mI[zA],ci[mI.charCodeAt(zA)]=zA;var zA,hD;ci[45]=62;ci[95]=63;function dD(e){var t=e.length;if(t%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var r=e.indexOf("=");r===-1&&(r=t);var n=r===t?0:4-r%4;return[r,n]}function lj(e){var t=dD(e),r=t[0],n=t[1];return(r+n)*3/4-n}function hj(e,t,r){return(t+r)*3/4-r}function dj(e){var t,r=dD(e),n=r[0],i=r[1],s=new cj(hj(e,n,i)),o=0,a=i>0?n-4:n,A;for(A=0;A<a;A+=4)t=ci[e.charCodeAt(A)]<<18|ci[e.charCodeAt(A+1)]<<12|ci[e.charCodeAt(A+2)]<<6|ci[e.charCodeAt(A+3)],s[o++]=t>>16&255,s[o++]=t>>8&255,s[o++]=t&255;return i===2&&(t=ci[e.charCodeAt(A)]<<2|ci[e.charCodeAt(A+1)]>>4,s[o++]=t&255),i===1&&(t=ci[e.charCodeAt(A)]<<10|ci[e.charCodeAt(A+1)]<<4|ci[e.charCodeAt(A+2)]>>2,s[o++]=t>>8&255,s[o++]=t&255),s}function gj(e){return Hs[e>>18&63]+Hs[e>>12&63]+Hs[e>>6&63]+Hs[e&63]}function pj(e,t,r){for(var n,i=[],s=t;s<r;s+=3)n=(e[s]<<16&16711680)+(e[s+1]<<8&65280)+(e[s+2]&255),i.push(gj(n));return i.join("")}function Ej(e){for(var t,r=e.length,n=r%3,i=[],s=16383,o=0,a=r-n;o<a;o+=s)i.push(pj(e,o,o+s>a?a:o+s));return n===1?(t=e[r-1],i.push(Hs[t>>2]+Hs[t<<4&63]+"==")):n===2&&(t=(e[r-2]<<8)+e[r-1],i.push(Hs[t>>10]+Hs[t>>4&63]+Hs[t<<2&63]+"=")),i.join("")}});var pD=U(BI=>{BI.read=function(e,t,r,n,i){var s,o,a=i*8-n-1,A=(1<<a)-1,f=A>>1,l=-7,p=r?i-1:0,I=r?-1:1,S=e[t+p];for(p+=I,s=S&(1<<-l)-1,S>>=-l,l+=a;l>0;s=s*256+e[t+p],p+=I,l-=8);for(o=s&(1<<-l)-1,s>>=-l,l+=n;l>0;o=o*256+e[t+p],p+=I,l-=8);if(s===0)s=1-f;else{if(s===A)return o?NaN:(S?-1:1)*(1/0);o=o+Math.pow(2,n),s=s-f}return(S?-1:1)*o*Math.pow(2,s-n)};BI.write=function(e,t,r,n,i,s){var o,a,A,f=s*8-i-1,l=(1<<f)-1,p=l>>1,I=i===23?Math.pow(2,-24)-Math.pow(2,-77):0,S=n?0:s-1,_=n?1:-1,N=t<0||t===0&&1/t<0?1:0;for(t=Math.abs(t),isNaN(t)||t===1/0?(a=isNaN(t)?1:0,o=l):(o=Math.floor(Math.log(t)/Math.LN2),t*(A=Math.pow(2,-o))<1&&(o--,A*=2),o+p>=1?t+=I/A:t+=I*Math.pow(2,1-p),t*A>=2&&(o++,A/=2),o+p>=l?(a=0,o=l):o+p>=1?(a=(t*A-1)*Math.pow(2,i),o=o+p):(a=t*Math.pow(2,p-1)*Math.pow(2,i),o=0));i>=8;e[r+S]=a&255,S+=_,a/=256,i-=8);for(o=o<<i|a,f+=i;f>0;e[r+S]=o&255,S+=_,o/=256,f-=8);e[r+S-_]|=N*128}});var Gr=U(qu=>{"use strict";var II=gD(),Hu=pD(),ED=typeof Symbol=="function"&&typeof Symbol.for=="function"?Symbol.for("nodejs.util.inspect.custom"):null;qu.Buffer=fe;qu.SlowBuffer=Cj;qu.INSPECT_MAX_BYTES=50;var D0=2147483647;qu.kMaxLength=D0;fe.TYPED_ARRAY_SUPPORT=yj();!fe.TYPED_ARRAY_SUPPORT&&typeof console<"u"&&typeof console.error=="function"&&console.error("This browser lacks typed array (Uint8Array) support which is required by `buffer` v5.x. Use `buffer` v4.x if you require old browser support.");function yj(){try{var e=new Uint8Array(1),t={foo:function(){return 42}};return Object.setPrototypeOf(t,Uint8Array.prototype),Object.setPrototypeOf(e,t),e.foo()===42}catch{return!1}}Object.defineProperty(fe.prototype,"parent",{enumerable:!0,get:function(){if(fe.isBuffer(this))return this.buffer}});Object.defineProperty(fe.prototype,"offset",{enumerable:!0,get:function(){if(fe.isBuffer(this))return this.byteOffset}});function Yo(e){if(e>D0)throw new RangeError('The value "'+e+'" is invalid for option "size"');var t=new Uint8Array(e);return Object.setPrototypeOf(t,fe.prototype),t}function fe(e,t,r){if(typeof e=="number"){if(typeof t=="string")throw new TypeError('The "string" argument must be of type string. Received type number');return wI(e)}return BD(e,t,r)}fe.poolSize=8192;function BD(e,t,r){if(typeof e=="string")return Bj(e,t);if(ArrayBuffer.isView(e))return Ij(e);if(e==null)throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof e);if(qs(e,ArrayBuffer)||e&&qs(e.buffer,ArrayBuffer)||typeof SharedArrayBuffer<"u"&&(qs(e,SharedArrayBuffer)||e&&qs(e.buffer,SharedArrayBuffer)))return CI(e,t,r);if(typeof e=="number")throw new TypeError('The "value" argument must not be of type number. Received type number');var n=e.valueOf&&e.valueOf();if(n!=null&&n!==e)return fe.from(n,t,r);var i=bj(e);if(i)return i;if(typeof Symbol<"u"&&Symbol.toPrimitive!=null&&typeof e[Symbol.toPrimitive]=="function")return fe.from(e[Symbol.toPrimitive]("string"),t,r);throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof e)}fe.from=function(e,t,r){return BD(e,t,r)};Object.setPrototypeOf(fe.prototype,Uint8Array.prototype);Object.setPrototypeOf(fe,Uint8Array);function ID(e){if(typeof e!="number")throw new TypeError('"size" argument must be of type number');if(e<0)throw new RangeError('The value "'+e+'" is invalid for option "size"')}function mj(e,t,r){return ID(e),e<=0?Yo(e):t!==void 0?typeof r=="string"?Yo(e).fill(t,r):Yo(e).fill(t):Yo(e)}fe.alloc=function(e,t,r){return mj(e,t,r)};function wI(e){return ID(e),Yo(e<0?0:SI(e)|0)}fe.allocUnsafe=function(e){return wI(e)};fe.allocUnsafeSlow=function(e){return wI(e)};function Bj(e,t){if((typeof t!="string"||t==="")&&(t="utf8"),!fe.isEncoding(t))throw new TypeError("Unknown encoding: "+t);var r=bD(e,t)|0,n=Yo(r),i=n.write(e,t);return i!==r&&(n=n.slice(0,i)),n}function bI(e){for(var t=e.length<0?0:SI(e.length)|0,r=Yo(t),n=0;n<t;n+=1)r[n]=e[n]&255;return r}function Ij(e){if(qs(e,Uint8Array)){var t=new Uint8Array(e);return CI(t.buffer,t.byteOffset,t.byteLength)}return bI(e)}function CI(e,t,r){if(t<0||e.byteLength<t)throw new RangeError('"offset" is outside of buffer bounds');if(e.byteLength<t+(r||0))throw new RangeError('"length" is outside of buffer bounds');var n;return t===void 0&&r===void 0?n=new Uint8Array(e):r===void 0?n=new Uint8Array(e,t):n=new Uint8Array(e,t,r),Object.setPrototypeOf(n,fe.prototype),n}function bj(e){if(fe.isBuffer(e)){var t=SI(e.length)|0,r=Yo(t);return r.length===0||e.copy(r,0,0,t),r}if(e.length!==void 0)return typeof e.length!="number"||_I(e.length)?Yo(0):bI(e);if(e.type==="Buffer"&&Array.isArray(e.data))return bI(e.data)}function SI(e){if(e>=D0)throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+D0.toString(16)+" bytes");return e|0}function Cj(e){return+e!=e&&(e=0),fe.alloc(+e)}fe.isBuffer=function(t){return t!=null&&t._isBuffer===!0&&t!==fe.prototype};fe.compare=function(t,r){if(qs(t,Uint8Array)&&(t=fe.from(t,t.offset,t.byteLength)),qs(r,Uint8Array)&&(r=fe.from(r,r.offset,r.byteLength)),!fe.isBuffer(t)||!fe.isBuffer(r))throw new TypeError('The "buf1", "buf2" arguments must be one of type Buffer or Uint8Array');if(t===r)return 0;for(var n=t.length,i=r.length,s=0,o=Math.min(n,i);s<o;++s)if(t[s]!==r[s]){n=t[s],i=r[s];break}return n<i?-1:i<n?1:0};fe.isEncoding=function(t){switch(String(t).toLowerCase()){case"hex":case"utf8":case"utf-8":case"ascii":case"latin1":case"binary":case"base64":case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return!0;default:return!1}};fe.concat=function(t,r){if(!Array.isArray(t))throw new TypeError('"list" argument must be an Array of Buffers');if(t.length===0)return fe.alloc(0);var n;if(r===void 0)for(r=0,n=0;n<t.length;++n)r+=t[n].length;var i=fe.allocUnsafe(r),s=0;for(n=0;n<t.length;++n){var o=t[n];if(qs(o,Uint8Array))s+o.length>i.length?fe.from(o).copy(i,s):Uint8Array.prototype.set.call(i,o,s);else if(fe.isBuffer(o))o.copy(i,s);else throw new TypeError('"list" argument must be an Array of Buffers');s+=o.length}return i};function bD(e,t){if(fe.isBuffer(e))return e.length;if(ArrayBuffer.isView(e)||qs(e,ArrayBuffer))return e.byteLength;if(typeof e!="string")throw new TypeError('The "string" argument must be one of type string, Buffer, or ArrayBuffer. Received type '+typeof e);var r=e.length,n=arguments.length>2&&arguments[2]===!0;if(!n&&r===0)return 0;for(var i=!1;;)switch(t){case"ascii":case"latin1":case"binary":return r;case"utf8":case"utf-8":return QI(e).length;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return r*2;case"hex":return r>>>1;case"base64":return vD(e).length;default:if(i)return n?-1:QI(e).length;t=(""+t).toLowerCase(),i=!0}}fe.byteLength=bD;function Qj(e,t,r){var n=!1;if((t===void 0||t<0)&&(t=0),t>this.length||((r===void 0||r>this.length)&&(r=this.length),r<=0)||(r>>>=0,t>>>=0,r<=t))return"";for(e||(e="utf8");;)switch(e){case"hex":return Fj(this,t,r);case"utf8":case"utf-8":return QD(this,t,r);case"ascii":return Nj(this,t,r);case"latin1":case"binary":return Mj(this,t,r);case"base64":return Dj(this,t,r);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return kj(this,t,r);default:if(n)throw new TypeError("Unknown encoding: "+e);e=(e+"").toLowerCase(),n=!0}}fe.prototype._isBuffer=!0;function KA(e,t,r){var n=e[t];e[t]=e[r],e[r]=n}fe.prototype.swap16=function(){var t=this.length;if(t%2!==0)throw new RangeError("Buffer size must be a multiple of 16-bits");for(var r=0;r<t;r+=2)KA(this,r,r+1);return this};fe.prototype.swap32=function(){var t=this.length;if(t%4!==0)throw new RangeError("Buffer size must be a multiple of 32-bits");for(var r=0;r<t;r+=4)KA(this,r,r+3),KA(this,r+1,r+2);return this};fe.prototype.swap64=function(){var t=this.length;if(t%8!==0)throw new RangeError("Buffer size must be a multiple of 64-bits");for(var r=0;r<t;r+=8)KA(this,r,r+7),KA(this,r+1,r+6),KA(this,r+2,r+5),KA(this,r+3,r+4);return this};fe.prototype.toString=function(){var t=this.length;return t===0?"":arguments.length===0?QD(this,0,t):Qj.apply(this,arguments)};fe.prototype.toLocaleString=fe.prototype.toString;fe.prototype.equals=function(t){if(!fe.isBuffer(t))throw new TypeError("Argument must be a Buffer");return this===t?!0:fe.compare(this,t)===0};fe.prototype.inspect=function(){var t="",r=qu.INSPECT_MAX_BYTES;return t=this.toString("hex",0,r).replace(/(.{2})/g,"$1 ").trim(),this.length>r&&(t+=" ... "),"<Buffer "+t+">"};ED&&(fe.prototype[ED]=fe.prototype.inspect);fe.prototype.compare=function(t,r,n,i,s){if(qs(t,Uint8Array)&&(t=fe.from(t,t.offset,t.byteLength)),!fe.isBuffer(t))throw new TypeError('The "target" argument must be one of type Buffer or Uint8Array. Received type '+typeof t);if(r===void 0&&(r=0),n===void 0&&(n=t?t.length:0),i===void 0&&(i=0),s===void 0&&(s=this.length),r<0||n>t.length||i<0||s>this.length)throw new RangeError("out of range index");if(i>=s&&r>=n)return 0;if(i>=s)return-1;if(r>=n)return 1;if(r>>>=0,n>>>=0,i>>>=0,s>>>=0,this===t)return 0;for(var o=s-i,a=n-r,A=Math.min(o,a),f=this.slice(i,s),l=t.slice(r,n),p=0;p<A;++p)if(f[p]!==l[p]){o=f[p],a=l[p];break}return o<a?-1:a<o?1:0};function CD(e,t,r,n,i){if(e.length===0)return-1;if(typeof r=="string"?(n=r,r=0):r>2147483647?r=2147483647:r<-2147483648&&(r=-2147483648),r=+r,_I(r)&&(r=i?0:e.length-1),r<0&&(r=e.length+r),r>=e.length){if(i)return-1;r=e.length-1}else if(r<0)if(i)r=0;else return-1;if(typeof t=="string"&&(t=fe.from(t,n)),fe.isBuffer(t))return t.length===0?-1:yD(e,t,r,n,i);if(typeof t=="number")return t=t&255,typeof Uint8Array.prototype.indexOf=="function"?i?Uint8Array.prototype.indexOf.call(e,t,r):Uint8Array.prototype.lastIndexOf.call(e,t,r):yD(e,[t],r,n,i);throw new TypeError("val must be string, number or Buffer")}function yD(e,t,r,n,i){var s=1,o=e.length,a=t.length;if(n!==void 0&&(n=String(n).toLowerCase(),n==="ucs2"||n==="ucs-2"||n==="utf16le"||n==="utf-16le")){if(e.length<2||t.length<2)return-1;s=2,o/=2,a/=2,r/=2}function A(S,_){return s===1?S[_]:S.readUInt16BE(_*s)}var f;if(i){var l=-1;for(f=r;f<o;f++)if(A(e,f)===A(t,l===-1?0:f-l)){if(l===-1&&(l=f),f-l+1===a)return l*s}else l!==-1&&(f-=f-l),l=-1}else for(r+a>o&&(r=o-a),f=r;f>=0;f--){for(var p=!0,I=0;I<a;I++)if(A(e,f+I)!==A(t,I)){p=!1;break}if(p)return f}return-1}fe.prototype.includes=function(t,r,n){return this.indexOf(t,r,n)!==-1};fe.prototype.indexOf=function(t,r,n){return CD(this,t,r,n,!0)};fe.prototype.lastIndexOf=function(t,r,n){return CD(this,t,r,n,!1)};function wj(e,t,r,n){r=Number(r)||0;var i=e.length-r;n?(n=Number(n),n>i&&(n=i)):n=i;var s=t.length;n>s/2&&(n=s/2);for(var o=0;o<n;++o){var a=parseInt(t.substr(o*2,2),16);if(_I(a))return o;e[r+o]=a}return o}function Sj(e,t,r,n){return T0(QI(t,e.length-r),e,r,n)}function _j(e,t,r,n){return T0(Lj(t),e,r,n)}function vj(e,t,r,n){return T0(vD(t),e,r,n)}function Rj(e,t,r,n){return T0(Pj(t,e.length-r),e,r,n)}fe.prototype.write=function(t,r,n,i){if(r===void 0)i="utf8",n=this.length,r=0;else if(n===void 0&&typeof r=="string")i=r,n=this.length,r=0;else if(isFinite(r))r=r>>>0,isFinite(n)?(n=n>>>0,i===void 0&&(i="utf8")):(i=n,n=void 0);else throw new Error("Buffer.write(string, encoding, offset[, length]) is no longer supported");var s=this.length-r;if((n===void 0||n>s)&&(n=s),t.length>0&&(n<0||r<0)||r>this.length)throw new RangeError("Attempt to write outside buffer bounds");i||(i="utf8");for(var o=!1;;)switch(i){case"hex":return wj(this,t,r,n);case"utf8":case"utf-8":return Sj(this,t,r,n);case"ascii":case"latin1":case"binary":return _j(this,t,r,n);case"base64":return vj(this,t,r,n);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return Rj(this,t,r,n);default:if(o)throw new TypeError("Unknown encoding: "+i);i=(""+i).toLowerCase(),o=!0}};fe.prototype.toJSON=function(){return{type:"Buffer",data:Array.prototype.slice.call(this._arr||this,0)}};function Dj(e,t,r){return t===0&&r===e.length?II.fromByteArray(e):II.fromByteArray(e.slice(t,r))}function QD(e,t,r){r=Math.min(e.length,r);for(var n=[],i=t;i<r;){var s=e[i],o=null,a=s>239?4:s>223?3:s>191?2:1;if(i+a<=r){var A,f,l,p;switch(a){case 1:s<128&&(o=s);break;case 2:A=e[i+1],(A&192)===128&&(p=(s&31)<<6|A&63,p>127&&(o=p));break;case 3:A=e[i+1],f=e[i+2],(A&192)===128&&(f&192)===128&&(p=(s&15)<<12|(A&63)<<6|f&63,p>2047&&(p<55296||p>57343)&&(o=p));break;case 4:A=e[i+1],f=e[i+2],l=e[i+3],(A&192)===128&&(f&192)===128&&(l&192)===128&&(p=(s&15)<<18|(A&63)<<12|(f&63)<<6|l&63,p>65535&&p<1114112&&(o=p))}}o===null?(o=65533,a=1):o>65535&&(o-=65536,n.push(o>>>10&1023|55296),o=56320|o&1023),n.push(o),i+=a}return Tj(n)}var mD=4096;function Tj(e){var t=e.length;if(t<=mD)return String.fromCharCode.apply(String,e);for(var r="",n=0;n<t;)r+=String.fromCharCode.apply(String,e.slice(n,n+=mD));return r}function Nj(e,t,r){var n="";r=Math.min(e.length,r);for(var i=t;i<r;++i)n+=String.fromCharCode(e[i]&127);return n}function Mj(e,t,r){var n="";r=Math.min(e.length,r);for(var i=t;i<r;++i)n+=String.fromCharCode(e[i]);return n}function Fj(e,t,r){var n=e.length;(!t||t<0)&&(t=0),(!r||r<0||r>n)&&(r=n);for(var i="",s=t;s<r;++s)i+=Oj[e[s]];return i}function kj(e,t,r){for(var n=e.slice(t,r),i="",s=0;s<n.length-1;s+=2)i+=String.fromCharCode(n[s]+n[s+1]*256);return i}fe.prototype.slice=function(t,r){var n=this.length;t=~~t,r=r===void 0?n:~~r,t<0?(t+=n,t<0&&(t=0)):t>n&&(t=n),r<0?(r+=n,r<0&&(r=0)):r>n&&(r=n),r<t&&(r=t);var i=this.subarray(t,r);return Object.setPrototypeOf(i,fe.prototype),i};function Dr(e,t,r){if(e%1!==0||e<0)throw new RangeError("offset is not uint");if(e+t>r)throw new RangeError("Trying to access beyond buffer length")}fe.prototype.readUintLE=fe.prototype.readUIntLE=function(t,r,n){t=t>>>0,r=r>>>0,n||Dr(t,r,this.length);for(var i=this[t],s=1,o=0;++o<r&&(s*=256);)i+=this[t+o]*s;return i};fe.prototype.readUintBE=fe.prototype.readUIntBE=function(t,r,n){t=t>>>0,r=r>>>0,n||Dr(t,r,this.length);for(var i=this[t+--r],s=1;r>0&&(s*=256);)i+=this[t+--r]*s;return i};fe.prototype.readUint8=fe.prototype.readUInt8=function(t,r){return t=t>>>0,r||Dr(t,1,this.length),this[t]};fe.prototype.readUint16LE=fe.prototype.readUInt16LE=function(t,r){return t=t>>>0,r||Dr(t,2,this.length),this[t]|this[t+1]<<8};fe.prototype.readUint16BE=fe.prototype.readUInt16BE=function(t,r){return t=t>>>0,r||Dr(t,2,this.length),this[t]<<8|this[t+1]};fe.prototype.readUint32LE=fe.prototype.readUInt32LE=function(t,r){return t=t>>>0,r||Dr(t,4,this.length),(this[t]|this[t+1]<<8|this[t+2]<<16)+this[t+3]*16777216};fe.prototype.readUint32BE=fe.prototype.readUInt32BE=function(t,r){return t=t>>>0,r||Dr(t,4,this.length),this[t]*16777216+(this[t+1]<<16|this[t+2]<<8|this[t+3])};fe.prototype.readIntLE=function(t,r,n){t=t>>>0,r=r>>>0,n||Dr(t,r,this.length);for(var i=this[t],s=1,o=0;++o<r&&(s*=256);)i+=this[t+o]*s;return s*=128,i>=s&&(i-=Math.pow(2,8*r)),i};fe.prototype.readIntBE=function(t,r,n){t=t>>>0,r=r>>>0,n||Dr(t,r,this.length);for(var i=r,s=1,o=this[t+--i];i>0&&(s*=256);)o+=this[t+--i]*s;return s*=128,o>=s&&(o-=Math.pow(2,8*r)),o};fe.prototype.readInt8=function(t,r){return t=t>>>0,r||Dr(t,1,this.length),this[t]&128?(255-this[t]+1)*-1:this[t]};fe.prototype.readInt16LE=function(t,r){t=t>>>0,r||Dr(t,2,this.length);var n=this[t]|this[t+1]<<8;return n&32768?n|4294901760:n};fe.prototype.readInt16BE=function(t,r){t=t>>>0,r||Dr(t,2,this.length);var n=this[t+1]|this[t]<<8;return n&32768?n|4294901760:n};fe.prototype.readInt32LE=function(t,r){return t=t>>>0,r||Dr(t,4,this.length),this[t]|this[t+1]<<8|this[t+2]<<16|this[t+3]<<24};fe.prototype.readInt32BE=function(t,r){return t=t>>>0,r||Dr(t,4,this.length),this[t]<<24|this[t+1]<<16|this[t+2]<<8|this[t+3]};fe.prototype.readFloatLE=function(t,r){return t=t>>>0,r||Dr(t,4,this.length),Hu.read(this,t,!0,23,4)};fe.prototype.readFloatBE=function(t,r){return t=t>>>0,r||Dr(t,4,this.length),Hu.read(this,t,!1,23,4)};fe.prototype.readDoubleLE=function(t,r){return t=t>>>0,r||Dr(t,8,this.length),Hu.read(this,t,!0,52,8)};fe.prototype.readDoubleBE=function(t,r){return t=t>>>0,r||Dr(t,8,this.length),Hu.read(this,t,!1,52,8)};function vn(e,t,r,n,i,s){if(!fe.isBuffer(e))throw new TypeError('"buffer" argument must be a Buffer instance');if(t>i||t<s)throw new RangeError('"value" argument is out of bounds');if(r+n>e.length)throw new RangeError("Index out of range")}fe.prototype.writeUintLE=fe.prototype.writeUIntLE=function(t,r,n,i){if(t=+t,r=r>>>0,n=n>>>0,!i){var s=Math.pow(2,8*n)-1;vn(this,t,r,n,s,0)}var o=1,a=0;for(this[r]=t&255;++a<n&&(o*=256);)this[r+a]=t/o&255;return r+n};fe.prototype.writeUintBE=fe.prototype.writeUIntBE=function(t,r,n,i){if(t=+t,r=r>>>0,n=n>>>0,!i){var s=Math.pow(2,8*n)-1;vn(this,t,r,n,s,0)}var o=n-1,a=1;for(this[r+o]=t&255;--o>=0&&(a*=256);)this[r+o]=t/a&255;return r+n};fe.prototype.writeUint8=fe.prototype.writeUInt8=function(t,r,n){return t=+t,r=r>>>0,n||vn(this,t,r,1,255,0),this[r]=t&255,r+1};fe.prototype.writeUint16LE=fe.prototype.writeUInt16LE=function(t,r,n){return t=+t,r=r>>>0,n||vn(this,t,r,2,65535,0),this[r]=t&255,this[r+1]=t>>>8,r+2};fe.prototype.writeUint16BE=fe.prototype.writeUInt16BE=function(t,r,n){return t=+t,r=r>>>0,n||vn(this,t,r,2,65535,0),this[r]=t>>>8,this[r+1]=t&255,r+2};fe.prototype.writeUint32LE=fe.prototype.writeUInt32LE=function(t,r,n){return t=+t,r=r>>>0,n||vn(this,t,r,4,4294967295,0),this[r+3]=t>>>24,this[r+2]=t>>>16,this[r+1]=t>>>8,this[r]=t&255,r+4};fe.prototype.writeUint32BE=fe.prototype.writeUInt32BE=function(t,r,n){return t=+t,r=r>>>0,n||vn(this,t,r,4,4294967295,0),this[r]=t>>>24,this[r+1]=t>>>16,this[r+2]=t>>>8,this[r+3]=t&255,r+4};fe.prototype.writeIntLE=function(t,r,n,i){if(t=+t,r=r>>>0,!i){var s=Math.pow(2,8*n-1);vn(this,t,r,n,s-1,-s)}var o=0,a=1,A=0;for(this[r]=t&255;++o<n&&(a*=256);)t<0&&A===0&&this[r+o-1]!==0&&(A=1),this[r+o]=(t/a>>0)-A&255;return r+n};fe.prototype.writeIntBE=function(t,r,n,i){if(t=+t,r=r>>>0,!i){var s=Math.pow(2,8*n-1);vn(this,t,r,n,s-1,-s)}var o=n-1,a=1,A=0;for(this[r+o]=t&255;--o>=0&&(a*=256);)t<0&&A===0&&this[r+o+1]!==0&&(A=1),this[r+o]=(t/a>>0)-A&255;return r+n};fe.prototype.writeInt8=function(t,r,n){return t=+t,r=r>>>0,n||vn(this,t,r,1,127,-128),t<0&&(t=255+t+1),this[r]=t&255,r+1};fe.prototype.writeInt16LE=function(t,r,n){return t=+t,r=r>>>0,n||vn(this,t,r,2,32767,-32768),this[r]=t&255,this[r+1]=t>>>8,r+2};fe.prototype.writeInt16BE=function(t,r,n){return t=+t,r=r>>>0,n||vn(this,t,r,2,32767,-32768),this[r]=t>>>8,this[r+1]=t&255,r+2};fe.prototype.writeInt32LE=function(t,r,n){return t=+t,r=r>>>0,n||vn(this,t,r,4,2147483647,-2147483648),this[r]=t&255,this[r+1]=t>>>8,this[r+2]=t>>>16,this[r+3]=t>>>24,r+4};fe.prototype.writeInt32BE=function(t,r,n){return t=+t,r=r>>>0,n||vn(this,t,r,4,2147483647,-2147483648),t<0&&(t=4294967295+t+1),this[r]=t>>>24,this[r+1]=t>>>16,this[r+2]=t>>>8,this[r+3]=t&255,r+4};function wD(e,t,r,n,i,s){if(r+n>e.length)throw new RangeError("Index out of range");if(r<0)throw new RangeError("Index out of range")}function SD(e,t,r,n,i){return t=+t,r=r>>>0,i||wD(e,t,r,4,34028234663852886e22,-34028234663852886e22),Hu.write(e,t,r,n,23,4),r+4}fe.prototype.writeFloatLE=function(t,r,n){return SD(this,t,r,!0,n)};fe.prototype.writeFloatBE=function(t,r,n){return SD(this,t,r,!1,n)};function _D(e,t,r,n,i){return t=+t,r=r>>>0,i||wD(e,t,r,8,17976931348623157e292,-17976931348623157e292),Hu.write(e,t,r,n,52,8),r+8}fe.prototype.writeDoubleLE=function(t,r,n){return _D(this,t,r,!0,n)};fe.prototype.writeDoubleBE=function(t,r,n){return _D(this,t,r,!1,n)};fe.prototype.copy=function(t,r,n,i){if(!fe.isBuffer(t))throw new TypeError("argument should be a Buffer");if(n||(n=0),!i&&i!==0&&(i=this.length),r>=t.length&&(r=t.length),r||(r=0),i>0&&i<n&&(i=n),i===n||t.length===0||this.length===0)return 0;if(r<0)throw new RangeError("targetStart out of bounds");if(n<0||n>=this.length)throw new RangeError("Index out of range");if(i<0)throw new RangeError("sourceEnd out of bounds");i>this.length&&(i=this.length),t.length-r<i-n&&(i=t.length-r+n);var s=i-n;return this===t&&typeof Uint8Array.prototype.copyWithin=="function"?this.copyWithin(r,n,i):Uint8Array.prototype.set.call(t,this.subarray(n,i),r),s};fe.prototype.fill=function(t,r,n,i){if(typeof t=="string"){if(typeof r=="string"?(i=r,r=0,n=this.length):typeof n=="string"&&(i=n,n=this.length),i!==void 0&&typeof i!="string")throw new TypeError("encoding must be a string");if(typeof i=="string"&&!fe.isEncoding(i))throw new TypeError("Unknown encoding: "+i);if(t.length===1){var s=t.charCodeAt(0);(i==="utf8"&&s<128||i==="latin1")&&(t=s)}}else typeof t=="number"?t=t&255:typeof t=="boolean"&&(t=Number(t));if(r<0||this.length<r||this.length<n)throw new RangeError("Out of range index");if(n<=r)return this;r=r>>>0,n=n===void 0?this.length:n>>>0,t||(t=0);var o;if(typeof t=="number")for(o=r;o<n;++o)this[o]=t;else{var a=fe.isBuffer(t)?t:fe.from(t,i),A=a.length;if(A===0)throw new TypeError('The value "'+t+'" is invalid for argument "value"');for(o=0;o<n-r;++o)this[o+r]=a[o%A]}return this};var Uj=/[^+/0-9A-Za-z-_]/g;function xj(e){if(e=e.split("=")[0],e=e.trim().replace(Uj,""),e.length<2)return"";for(;e.length%4!==0;)e=e+"=";return e}function QI(e,t){t=t||1/0;for(var r,n=e.length,i=null,s=[],o=0;o<n;++o){if(r=e.charCodeAt(o),r>55295&&r<57344){if(!i){if(r>56319){(t-=3)>-1&&s.push(239,191,189);continue}else if(o+1===n){(t-=3)>-1&&s.push(239,191,189);continue}i=r;continue}if(r<56320){(t-=3)>-1&&s.push(239,191,189),i=r;continue}r=(i-55296<<10|r-56320)+65536}else i&&(t-=3)>-1&&s.push(239,191,189);if(i=null,r<128){if((t-=1)<0)break;s.push(r)}else if(r<2048){if((t-=2)<0)break;s.push(r>>6|192,r&63|128)}else if(r<65536){if((t-=3)<0)break;s.push(r>>12|224,r>>6&63|128,r&63|128)}else if(r<1114112){if((t-=4)<0)break;s.push(r>>18|240,r>>12&63|128,r>>6&63|128,r&63|128)}else throw new Error("Invalid code point")}return s}function Lj(e){for(var t=[],r=0;r<e.length;++r)t.push(e.charCodeAt(r)&255);return t}function Pj(e,t){for(var r,n,i,s=[],o=0;o<e.length&&!((t-=2)<0);++o)r=e.charCodeAt(o),n=r>>8,i=r%256,s.push(i),s.push(n);return s}function vD(e){return II.toByteArray(xj(e))}function T0(e,t,r,n){for(var i=0;i<n&&!(i+r>=t.length||i>=e.length);++i)t[i+r]=e[i];return i}function qs(e,t){return e instanceof t||e!=null&&e.constructor!=null&&e.constructor.name!=null&&e.constructor.name===t.name}function _I(e){return e!==e}var Oj=(function(){for(var e="0123456789abcdef",t=new Array(256),r=0;r<16;++r)for(var n=r*16,i=0;i<16;++i)t[n+i]=e[r]+e[i];return t})()});var Zi=U((_2e,RI)=>{"use strict";var Gu=typeof Reflect=="object"?Reflect:null,RD=Gu&&typeof Gu.apply=="function"?Gu.apply:function(t,r,n){return Function.prototype.apply.call(t,r,n)},N0;Gu&&typeof Gu.ownKeys=="function"?N0=Gu.ownKeys:Object.getOwnPropertySymbols?N0=function(t){return Object.getOwnPropertyNames(t).concat(Object.getOwnPropertySymbols(t))}:N0=function(t){return Object.getOwnPropertyNames(t)};function MZ(e){console&&console.warn&&console.warn(e)}var TD=Number.isNaN||function(t){return t!==t};function kt(){kt.init.call(this)}RI.exports=kt;RI.exports.once=xZ;kt.EventEmitter=kt;kt.prototype._events=void 0;kt.prototype._eventsCount=0;kt.prototype._maxListeners=void 0;var DD=10;function M0(e){if(typeof e!="function")throw new TypeError('The "listener" argument must be of type Function. Received type '+typeof e)}Object.defineProperty(kt,"defaultMaxListeners",{enumerable:!0,get:function(){return DD},set:function(e){if(typeof e!="number"||e<0||TD(e))throw new RangeError('The value of "defaultMaxListeners" is out of range. It must be a non-negative number. Received '+e+".");DD=e}});kt.init=function(){(this._events===void 0||this._events===Object.getPrototypeOf(this)._events)&&(this._events=Object.create(null),this._eventsCount=0),this._maxListeners=this._maxListeners||void 0};kt.prototype.setMaxListeners=function(t){if(typeof t!="number"||t<0||TD(t))throw new RangeError('The value of "n" is out of range. It must be a non-negative number. Received '+t+".");return this._maxListeners=t,this};function ND(e){return e._maxListeners===void 0?kt.defaultMaxListeners:e._maxListeners}kt.prototype.getMaxListeners=function(){return ND(this)};kt.prototype.emit=function(t){for(var r=[],n=1;n<arguments.length;n++)r.push(arguments[n]);var i=t==="error",s=this._events;if(s!==void 0)i=i&&s.error===void 0;else if(!i)return!1;if(i){var o;if(r.length>0&&(o=r[0]),o instanceof Error)throw o;var a=new Error("Unhandled error."+(o?" ("+o.message+")":""));throw a.context=o,a}var A=s[t];if(A===void 0)return!1;if(typeof A=="function")RD(A,this,r);else for(var f=A.length,l=xD(A,f),n=0;n<f;++n)RD(l[n],this,r);return!0};function MD(e,t,r,n){var i,s,o;if(M0(r),s=e._events,s===void 0?(s=e._events=Object.create(null),e._eventsCount=0):(s.newListener!==void 0&&(e.emit("newListener",t,r.listener?r.listener:r),s=e._events),o=s[t]),o===void 0)o=s[t]=r,++e._eventsCount;else if(typeof o=="function"?o=s[t]=n?[r,o]:[o,r]:n?o.unshift(r):o.push(r),i=ND(e),i>0&&o.length>i&&!o.warned){o.warned=!0;var a=new Error("Possible EventEmitter memory leak detected. "+o.length+" "+String(t)+" listeners added. Use emitter.setMaxListeners() to increase limit");a.name="MaxListenersExceededWarning",a.emitter=e,a.type=t,a.count=o.length,MZ(a)}return e}kt.prototype.addListener=function(t,r){return MD(this,t,r,!1)};kt.prototype.on=kt.prototype.addListener;kt.prototype.prependListener=function(t,r){return MD(this,t,r,!0)};function FZ(){if(!this.fired)return this.target.removeListener(this.type,this.wrapFn),this.fired=!0,arguments.length===0?this.listener.call(this.target):this.listener.apply(this.target,arguments)}function FD(e,t,r){var n={fired:!1,wrapFn:void 0,target:e,type:t,listener:r},i=FZ.bind(n);return i.listener=r,n.wrapFn=i,i}kt.prototype.once=function(t,r){return M0(r),this.on(t,FD(this,t,r)),this};kt.prototype.prependOnceListener=function(t,r){return M0(r),this.prependListener(t,FD(this,t,r)),this};kt.prototype.removeListener=function(t,r){var n,i,s,o,a;if(M0(r),i=this._events,i===void 0)return this;if(n=i[t],n===void 0)return this;if(n===r||n.listener===r)--this._eventsCount===0?this._events=Object.create(null):(delete i[t],i.removeListener&&this.emit("removeListener",t,n.listener||r));else if(typeof n!="function"){for(s=-1,o=n.length-1;o>=0;o--)if(n[o]===r||n[o].listener===r){a=n[o].listener,s=o;break}if(s<0)return this;s===0?n.shift():kZ(n,s),n.length===1&&(i[t]=n[0]),i.removeListener!==void 0&&this.emit("removeListener",t,a||r)}return this};kt.prototype.off=kt.prototype.removeListener;kt.prototype.removeAllListeners=function(t){var r,n,i;if(n=this._events,n===void 0)return this;if(n.removeListener===void 0)return arguments.length===0?(this._events=Object.create(null),this._eventsCount=0):n[t]!==void 0&&(--this._eventsCount===0?this._events=Object.create(null):delete n[t]),this;if(arguments.length===0){var s=Object.keys(n),o;for(i=0;i<s.length;++i)o=s[i],o!=="removeListener"&&this.removeAllListeners(o);return this.removeAllListeners("removeListener"),this._events=Object.create(null),this._eventsCount=0,this}if(r=n[t],typeof r=="function")this.removeListener(t,r);else if(r!==void 0)for(i=r.length-1;i>=0;i--)this.removeListener(t,r[i]);return this};function kD(e,t,r){var n=e._events;if(n===void 0)return[];var i=n[t];return i===void 0?[]:typeof i=="function"?r?[i.listener||i]:[i]:r?UZ(i):xD(i,i.length)}kt.prototype.listeners=function(t){return kD(this,t,!0)};kt.prototype.rawListeners=function(t){return kD(this,t,!1)};kt.listenerCount=function(e,t){return typeof e.listenerCount=="function"?e.listenerCount(t):UD.call(e,t)};kt.prototype.listenerCount=UD;function UD(e){var t=this._events;if(t!==void 0){var r=t[e];if(typeof r=="function")return 1;if(r!==void 0)return r.length}return 0}kt.prototype.eventNames=function(){return this._eventsCount>0?N0(this._events):[]};function xD(e,t){for(var r=new Array(t),n=0;n<t;++n)r[n]=e[n];return r}function kZ(e,t){for(;t+1<e.length;t++)e[t]=e[t+1];e.pop()}function UZ(e){for(var t=new Array(e.length),r=0;r<t.length;++r)t[r]=e[r].listener||e[r];return t}function xZ(e,t){return new Promise(function(r,n){function i(o){e.removeListener(t,s),n(o)}function s(){typeof e.removeListener=="function"&&e.removeListener("error",i),r([].slice.call(arguments))}LD(e,t,s,{once:!0}),t!=="error"&&LZ(e,i,{once:!0})})}function LZ(e,t,r){typeof e.on=="function"&&LD(e,"error",t,r)}function LD(e,t,r,n){if(typeof e.on=="function")n.once?e.once(t,r):e.on(t,r);else if(typeof e.addEventListener=="function")e.addEventListener(t,function i(s){n.once&&e.removeEventListener(t,i),r(s)});else throw new TypeError('The "emitter" argument must be of type EventEmitter. Received type '+typeof e)}});var HD=U((v2e,OD)=>{"use strict";function Gs(e){if(typeof e!="string")throw new TypeError("Path must be a string. Received "+JSON.stringify(e))}function PD(e,t){for(var r="",n=0,i=-1,s=0,o,a=0;a<=e.length;++a){if(a<e.length)o=e.charCodeAt(a);else{if(o===47)break;o=47}if(o===47){if(!(i===a-1||s===1))if(i!==a-1&&s===2){if(r.length<2||n!==2||r.charCodeAt(r.length-1)!==46||r.charCodeAt(r.length-2)!==46){if(r.length>2){var A=r.lastIndexOf("/");if(A!==r.length-1){A===-1?(r="",n=0):(r=r.slice(0,A),n=r.length-1-r.lastIndexOf("/")),i=a,s=0;continue}}else if(r.length===2||r.length===1){r="",n=0,i=a,s=0;continue}}t&&(r.length>0?r+="/..":r="..",n=2)}else r.length>0?r+="/"+e.slice(i+1,a):r=e.slice(i+1,a),n=a-i-1;i=a,s=0}else o===46&&s!==-1?++s:s=-1}return r}function PZ(e,t){var r=t.dir||t.root,n=t.base||(t.name||"")+(t.ext||"");return r?r===t.root?r+n:r+e+n:n}var Yu={resolve:function(){for(var t="",r=!1,n,i=arguments.length-1;i>=-1&&!r;i--){var s;i>=0?s=arguments[i]:(n===void 0&&(n=process.cwd()),s=n),Gs(s),s.length!==0&&(t=s+"/"+t,r=s.charCodeAt(0)===47)}return t=PD(t,!r),r?t.length>0?"/"+t:"/":t.length>0?t:"."},normalize:function(t){if(Gs(t),t.length===0)return".";var r=t.charCodeAt(0)===47,n=t.charCodeAt(t.length-1)===47;return t=PD(t,!r),t.length===0&&!r&&(t="."),t.length>0&&n&&(t+="/"),r?"/"+t:t},isAbsolute:function(t){return Gs(t),t.length>0&&t.charCodeAt(0)===47},join:function(){if(arguments.length===0)return".";for(var t,r=0;r<arguments.length;++r){var n=arguments[r];Gs(n),n.length>0&&(t===void 0?t=n:t+="/"+n)}return t===void 0?".":Yu.normalize(t)},relative:function(t,r){if(Gs(t),Gs(r),t===r||(t=Yu.resolve(t),r=Yu.resolve(r),t===r))return"";for(var n=1;n<t.length&&t.charCodeAt(n)===47;++n);for(var i=t.length,s=i-n,o=1;o<r.length&&r.charCodeAt(o)===47;++o);for(var a=r.length,A=a-o,f=s<A?s:A,l=-1,p=0;p<=f;++p){if(p===f){if(A>f){if(r.charCodeAt(o+p)===47)return r.slice(o+p+1);if(p===0)return r.slice(o+p)}else s>f&&(t.charCodeAt(n+p)===47?l=p:p===0&&(l=0));break}var I=t.charCodeAt(n+p),S=r.charCodeAt(o+p);if(I!==S)break;I===47&&(l=p)}var _="";for(p=n+l+1;p<=i;++p)(p===i||t.charCodeAt(p)===47)&&(_.length===0?_+="..":_+="/..");return _.length>0?_+r.slice(o+l):(o+=l,r.charCodeAt(o)===47&&++o,r.slice(o))},_makeLong:function(t){return t},dirname:function(t){if(Gs(t),t.length===0)return".";for(var r=t.charCodeAt(0),n=r===47,i=-1,s=!0,o=t.length-1;o>=1;--o)if(r=t.charCodeAt(o),r===47){if(!s){i=o;break}}else s=!1;return i===-1?n?"/":".":n&&i===1?"//":t.slice(0,i)},basename:function(t,r){if(r!==void 0&&typeof r!="string")throw new TypeError('"ext" argument must be a string');Gs(t);var n=0,i=-1,s=!0,o;if(r!==void 0&&r.length>0&&r.length<=t.length){if(r.length===t.length&&r===t)return"";var a=r.length-1,A=-1;for(o=t.length-1;o>=0;--o){var f=t.charCodeAt(o);if(f===47){if(!s){n=o+1;break}}else A===-1&&(s=!1,A=o+1),a>=0&&(f===r.charCodeAt(a)?--a===-1&&(i=o):(a=-1,i=A))}return n===i?i=A:i===-1&&(i=t.length),t.slice(n,i)}else{for(o=t.length-1;o>=0;--o)if(t.charCodeAt(o)===47){if(!s){n=o+1;break}}else i===-1&&(s=!1,i=o+1);return i===-1?"":t.slice(n,i)}},extname:function(t){Gs(t);for(var r=-1,n=0,i=-1,s=!0,o=0,a=t.length-1;a>=0;--a){var A=t.charCodeAt(a);if(A===47){if(!s){n=a+1;break}continue}i===-1&&(s=!1,i=a+1),A===46?r===-1?r=a:o!==1&&(o=1):r!==-1&&(o=-1)}return r===-1||i===-1||o===0||o===1&&r===i-1&&r===n+1?"":t.slice(r,i)},format:function(t){if(t===null||typeof t!="object")throw new TypeError('The "pathObject" argument must be of type Object. Received type '+typeof t);return PZ("/",t)},parse:function(t){Gs(t);var r={root:"",dir:"",base:"",ext:"",name:""};if(t.length===0)return r;var n=t.charCodeAt(0),i=n===47,s;i?(r.root="/",s=1):s=0;for(var o=-1,a=0,A=-1,f=!0,l=t.length-1,p=0;l>=s;--l){if(n=t.charCodeAt(l),n===47){if(!f){a=l+1;break}continue}A===-1&&(f=!1,A=l+1),n===46?o===-1?o=l:p!==1&&(p=1):o!==-1&&(p=-1)}return o===-1||A===-1||p===0||p===1&&o===A-1&&o===a+1?A!==-1&&(a===0&&i?r.base=r.name=t.slice(1,A):r.base=r.name=t.slice(a,A)):(a===0&&i?(r.name=t.slice(1,o),r.base=t.slice(1,A)):(r.name=t.slice(a,o),r.base=t.slice(a,A)),r.ext=t.slice(o,A)),a>0?r.dir=t.slice(0,a-1):i&&(r.dir="/"),r},sep:"/",delimiter:":",win32:null,posix:null};Yu.posix=Yu;OD.exports=Yu});var DI=U((Wu,Vu)=>{(function(e){var t=typeof Wu=="object"&&Wu&&!Wu.nodeType&&Wu,r=typeof Vu=="object"&&Vu&&!Vu.nodeType&&Vu,n=typeof globalThis=="object"&&globalThis;(n.global===n||n.window===n||n.self===n)&&(e=n);var i,s=2147483647,o=36,a=1,A=26,f=38,l=700,p=72,I=128,S="-",_=/^xn--/,N=/[^\x20-\x7E]/,O=/[\x2E\u3002\uFF0E\uFF61]/g,x={overflow:"Overflow: input needs wider integers to process","not-basic":"Illegal input >= 0x80 (not a basic code point)","invalid-input":"Invalid input"},G=o-a,Y=Math.floor,X=String.fromCharCode,Z;function j(C){throw new RangeError(x[C])}function se(C,h){for(var D=C.length,M=[];D--;)M[D]=h(C[D]);return M}function ie(C,h){var D=C.split("@"),M="";D.length>1&&(M=D[0]+"@",C=D[1]),C=C.replace(O,".");var B=C.split("."),k=se(B,h).join(".");return M+k}function ce(C){for(var h=[],D=0,M=C.length,B,k;D<M;)B=C.charCodeAt(D++),B>=55296&&B<=56319&&D<M?(k=C.charCodeAt(D++),(k&64512)==56320?h.push(((B&1023)<<10)+(k&1023)+65536):(h.push(B),D--)):h.push(B);return h}function H(C){return se(C,function(h){var D="";return h>65535&&(h-=65536,D+=X(h>>>10&1023|55296),h=56320|h&1023),D+=X(h),D}).join("")}function E(C){return C-48<10?C-22:C-65<26?C-65:C-97<26?C-97:o}function v(C,h){return C+22+75*(C<26)-((h!=0)<<5)}function b(C,h,D){var M=0;for(C=D?Y(C/l):C>>1,C+=Y(C/h);C>G*A>>1;M+=o)C=Y(C/G);return Y(M+(G+1)*C/(C+f))}function c(C){var h=[],D=C.length,M,B=0,k=I,ne=p,Ae,ue,pe,he,de,Qt,Ie,be,yr;for(Ae=C.lastIndexOf(S),Ae<0&&(Ae=0),ue=0;ue<Ae;++ue)C.charCodeAt(ue)>=128&&j("not-basic"),h.push(C.charCodeAt(ue));for(pe=Ae>0?Ae+1:0;pe<D;){for(he=B,de=1,Qt=o;pe>=D&&j("invalid-input"),Ie=E(C.charCodeAt(pe++)),(Ie>=o||Ie>Y((s-B)/de))&&j("overflow"),B+=Ie*de,be=Qt<=ne?a:Qt>=ne+A?A:Qt-ne,!(Ie<be);Qt+=o)yr=o-be,de>Y(s/yr)&&j("overflow"),de*=yr;M=h.length+1,ne=b(B-he,M,he==0),Y(B/M)>s-k&&j("overflow"),k+=Y(B/M),B%=M,h.splice(B++,0,k)}return H(h)}function g(C){var h,D,M,B,k,ne,Ae,ue,pe,he,de,Qt=[],Ie,be,yr,Qe;for(C=ce(C),Ie=C.length,h=I,D=0,k=p,ne=0;ne<Ie;++ne)de=C[ne],de<128&&Qt.push(X(de));for(M=B=Qt.length,B&&Qt.push(S);M<Ie;){for(Ae=s,ne=0;ne<Ie;++ne)de=C[ne],de>=h&&de<Ae&&(Ae=de);for(be=M+1,Ae-h>Y((s-D)/be)&&j("overflow"),D+=(Ae-h)*be,h=Ae,ne=0;ne<Ie;++ne)if(de=C[ne],de<h&&++D>s&&j("overflow"),de==h){for(ue=D,pe=o;he=pe<=k?a:pe>=k+A?A:pe-k,!(ue<he);pe+=o)Qe=ue-he,yr=o-he,Qt.push(X(v(he+Qe%yr,0))),ue=Y(Qe/yr);Qt.push(X(v(ue,0))),k=b(D,be,M==B),D=0,++M}++D,++h}return Qt.join("")}function w(C){return ie(C,function(h){return _.test(h)?c(h.slice(4).toLowerCase()):h})}function R(C){return ie(C,function(h){return N.test(h)?"xn--"+g(h):h})}if(i={version:"1.4.1",ucs2:{decode:ce,encode:H},decode:c,encode:g,toASCII:R,toUnicode:w},typeof define=="function"&&typeof define.amd=="object"&&define.amd)define("punycode",function(){return i});else if(t&&r)if(Vu.exports==t)r.exports=i;else for(Z in i)i.hasOwnProperty(Z)&&(t[Z]=i[Z]);else e.punycode=i})(Wu)});var GD=U((R2e,qD)=>{"use strict";function OZ(e,t){return Object.prototype.hasOwnProperty.call(e,t)}qD.exports=function(e,t,r,n){t=t||"&",r=r||"=";var i={};if(typeof e!="string"||e.length===0)return i;var s=/\+/g;e=e.split(t);var o=1e3;n&&typeof n.maxKeys=="number"&&(o=n.maxKeys);var a=e.length;o>0&&a>o&&(a=o);for(var A=0;A<a;++A){var f=e[A].replace(s,"%20"),l=f.indexOf(r),p,I,S,_;l>=0?(p=f.substr(0,l),I=f.substr(l+1)):(p=f,I=""),S=decodeURIComponent(p),_=decodeURIComponent(I),OZ(i,S)?HZ(i[S])?i[S].push(_):i[S]=[i[S],_]:i[S]=_}return i};var HZ=Array.isArray||function(e){return Object.prototype.toString.call(e)==="[object Array]"}});var VD=U((D2e,WD)=>{"use strict";var th=function(e){switch(typeof e){case"string":return e;case"boolean":return e?"true":"false";case"number":return isFinite(e)?e:"";default:return""}};WD.exports=function(e,t,r,n){return t=t||"&",r=r||"=",e===null&&(e=void 0),typeof e=="object"?YD(GZ(e),function(i){var s=encodeURIComponent(th(i))+r;return qZ(e[i])?YD(e[i],function(o){return s+encodeURIComponent(th(o))}).join(t):s+encodeURIComponent(th(e[i]))}).join(t):n?encodeURIComponent(th(n))+r+encodeURIComponent(th(e)):""};var qZ=Array.isArray||function(e){return Object.prototype.toString.call(e)==="[object Array]"};function YD(e,t){if(e.map)return e.map(t);for(var r=[],n=0;n<e.length;n++)r.push(t(e[n],n));return r}var GZ=Object.keys||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&t.push(r);return t}});var TI=U(rh=>{"use strict";rh.decode=rh.parse=GD();rh.encode=rh.stringify=VD()});var F0={};EI(F0,{decode:()=>Va.decode,default:()=>YZ,encode:()=>Va.encode,escape:()=>JD,parse:()=>Va.parse,stringify:()=>Va.stringify,unescape:()=>jD});function JD(e){return encodeURIComponent(e)}function jD(e){return decodeURIComponent(e)}var Wa,Va,YZ,NI=uD(()=>{Wa=hr(TI(),1),Va=hr(TI(),1);YZ={decode:Wa.decode,encode:Wa.encode,parse:Wa.parse,stringify:Wa.stringify,escape:JD,unescape:jD}});var je=U((N2e,MI)=>{typeof Object.create=="function"?MI.exports=function(t,r){r&&(t.super_=r,t.prototype=Object.create(r.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}))}:MI.exports=function(t,r){if(r){t.super_=r;var n=function(){};n.prototype=r.prototype,t.prototype=new n,t.prototype.constructor=t}}});var FI=U((M2e,zD)=>{zD.exports=Zi().EventEmitter});var k0=U((F2e,KD)=>{"use strict";KD.exports=function(){if(typeof Symbol!="function"||typeof Object.getOwnPropertySymbols!="function")return!1;if(typeof Symbol.iterator=="symbol")return!0;var t={},r=Symbol("test"),n=Object(r);if(typeof r=="string"||Object.prototype.toString.call(r)!=="[object Symbol]"||Object.prototype.toString.call(n)!=="[object Symbol]")return!1;var i=42;t[r]=i;for(var s in t)return!1;if(typeof Object.keys=="function"&&Object.keys(t).length!==0||typeof Object.getOwnPropertyNames=="function"&&Object.getOwnPropertyNames(t).length!==0)return!1;var o=Object.getOwnPropertySymbols(t);if(o.length!==1||o[0]!==r||!Object.prototype.propertyIsEnumerable.call(t,r))return!1;if(typeof Object.getOwnPropertyDescriptor=="function"){var a=Object.getOwnPropertyDescriptor(t,r);if(a.value!==i||a.enumerable!==!0)return!1}return!0}});var nh=U((k2e,XD)=>{"use strict";var WZ=k0();XD.exports=function(){return WZ()&&!!Symbol.toStringTag}});var U0=U((U2e,ZD)=>{"use strict";ZD.exports=Object});var eT=U((x2e,$D)=>{"use strict";$D.exports=Error});var rT=U((L2e,tT)=>{"use strict";tT.exports=EvalError});var iT=U((P2e,nT)=>{"use strict";nT.exports=RangeError});var oT=U((O2e,sT)=>{"use strict";sT.exports=ReferenceError});var kI=U((H2e,aT)=>{"use strict";aT.exports=SyntaxError});var $i=U((q2e,AT)=>{"use strict";AT.exports=TypeError});var uT=U((G2e,fT)=>{"use strict";fT.exports=URIError});var lT=U((Y2e,cT)=>{"use strict";cT.exports=Math.abs});var dT=U((W2e,hT)=>{"use strict";hT.exports=Math.floor});var pT=U((V2e,gT)=>{"use strict";gT.exports=Math.max});var yT=U((J2e,ET)=>{"use strict";ET.exports=Math.min});var BT=U((j2e,mT)=>{"use strict";mT.exports=Math.pow});var bT=U((z2e,IT)=>{"use strict";IT.exports=Math.round});var QT=U((K2e,CT)=>{"use strict";CT.exports=Number.isNaN||function(t){return t!==t}});var ST=U((X2e,wT)=>{"use strict";var VZ=QT();wT.exports=function(t){return VZ(t)||t===0?t:t<0?-1:1}});var vT=U((Z2e,_T)=>{"use strict";_T.exports=Object.getOwnPropertyDescriptor});var XA=U(($2e,RT)=>{"use strict";var x0=vT();if(x0)try{x0([],"length")}catch{x0=null}RT.exports=x0});var ih=U((eRe,DT)=>{"use strict";var L0=Object.defineProperty||!1;if(L0)try{L0({},"a",{value:1})}catch{L0=!1}DT.exports=L0});var MT=U((tRe,NT)=>{"use strict";var TT=typeof Symbol<"u"&&Symbol,JZ=k0();NT.exports=function(){return typeof TT!="function"||typeof Symbol!="function"||typeof TT("foo")!="symbol"||typeof Symbol("bar")!="symbol"?!1:JZ()}});var UI=U((rRe,FT)=>{"use strict";FT.exports=typeof Reflect<"u"&&Reflect.getPrototypeOf||null});var xI=U((nRe,kT)=>{"use strict";var jZ=U0();kT.exports=jZ.getPrototypeOf||null});var LT=U((iRe,xT)=>{"use strict";var zZ="Function.prototype.bind called on incompatible ",KZ=Object.prototype.toString,XZ=Math.max,ZZ="[object Function]",UT=function(t,r){for(var n=[],i=0;i<t.length;i+=1)n[i]=t[i];for(var s=0;s<r.length;s+=1)n[s+t.length]=r[s];return n},$Z=function(t,r){for(var n=[],i=r||0,s=0;i<t.length;i+=1,s+=1)n[s]=t[i];return n},e$=function(e,t){for(var r="",n=0;n<e.length;n+=1)r+=e[n],n+1<e.length&&(r+=t);return r};xT.exports=function(t){var r=this;if(typeof r!="function"||KZ.apply(r)!==ZZ)throw new TypeError(zZ+r);for(var n=$Z(arguments,1),i,s=function(){if(this instanceof i){var l=r.apply(this,UT(n,arguments));return Object(l)===l?l:this}return r.apply(t,UT(n,arguments))},o=XZ(0,r.length-n.length),a=[],A=0;A<o;A++)a[A]="$"+A;if(i=Function("binder","return function ("+e$(a,",")+"){ return binder.apply(this,arguments); }")(s),r.prototype){var f=function(){};f.prototype=r.prototype,i.prototype=new f,f.prototype=null}return i}});var Ju=U((sRe,PT)=>{"use strict";var t$=LT();PT.exports=Function.prototype.bind||t$});var P0=U((oRe,OT)=>{"use strict";OT.exports=Function.prototype.call});var O0=U((aRe,HT)=>{"use strict";HT.exports=Function.prototype.apply});var GT=U((ARe,qT)=>{"use strict";qT.exports=typeof Reflect<"u"&&Reflect&&Reflect.apply});var LI=U((fRe,YT)=>{"use strict";var r$=Ju(),n$=O0(),i$=P0(),s$=GT();YT.exports=s$||r$.call(i$,n$)});var H0=U((uRe,WT)=>{"use strict";var o$=Ju(),a$=$i(),A$=P0(),f$=LI();WT.exports=function(t){if(t.length<1||typeof t[0]!="function")throw new a$("a function is required");return f$(o$,A$,t)}});var XT=U((cRe,KT)=>{"use strict";var u$=H0(),VT=XA(),jT;try{jT=[].__proto__===Array.prototype}catch(e){if(!e||typeof e!="object"||!("code"in e)||e.code!=="ERR_PROTO_ACCESS")throw e}var PI=!!jT&&VT&&VT(Object.prototype,"__proto__"),zT=Object,JT=zT.getPrototypeOf;KT.exports=PI&&typeof PI.get=="function"?u$([PI.get]):typeof JT=="function"?function(t){return JT(t==null?t:zT(t))}:!1});var q0=U((lRe,tN)=>{"use strict";var ZT=UI(),$T=xI(),eN=XT();tN.exports=ZT?function(t){return ZT(t)}:$T?function(t){if(!t||typeof t!="object"&&typeof t!="function")throw new TypeError("getProto: not an object");return $T(t)}:eN?function(t){return eN(t)}:null});var OI=U((hRe,rN)=>{"use strict";var c$=Function.prototype.call,l$=Object.prototype.hasOwnProperty,h$=Ju();rN.exports=h$.call(c$,l$)});var Zu=U((dRe,AN)=>{"use strict";var gt,d$=U0(),g$=eT(),p$=rT(),E$=iT(),y$=oT(),Xu=kI(),Ku=$i(),m$=uT(),B$=lT(),I$=dT(),b$=pT(),C$=yT(),Q$=BT(),w$=bT(),S$=ST(),oN=Function,HI=function(e){try{return oN('"use strict"; return ('+e+").constructor;")()}catch{}},sh=XA(),_$=ih(),qI=function(){throw new Ku},v$=sh?(function(){try{return arguments.callee,qI}catch{try{return sh(arguments,"callee").get}catch{return qI}}})():qI,ju=MT()(),Tr=q0(),R$=xI(),D$=UI(),aN=O0(),oh=P0(),zu={},T$=typeof Uint8Array>"u"||!Tr?gt:Tr(Uint8Array),ZA={__proto__:null,"%AggregateError%":typeof AggregateError>"u"?gt:AggregateError,"%Array%":Array,"%ArrayBuffer%":typeof ArrayBuffer>"u"?gt:ArrayBuffer,"%ArrayIteratorPrototype%":ju&&Tr?Tr([][Symbol.iterator]()):gt,"%AsyncFromSyncIteratorPrototype%":gt,"%AsyncFunction%":zu,"%AsyncGenerator%":zu,"%AsyncGeneratorFunction%":zu,"%AsyncIteratorPrototype%":zu,"%Atomics%":typeof Atomics>"u"?gt:Atomics,"%BigInt%":typeof BigInt>"u"?gt:BigInt,"%BigInt64Array%":typeof BigInt64Array>"u"?gt:BigInt64Array,"%BigUint64Array%":typeof BigUint64Array>"u"?gt:BigUint64Array,"%Boolean%":Boolean,"%DataView%":typeof DataView>"u"?gt:DataView,"%Date%":Date,"%decodeURI%":decodeURI,"%decodeURIComponent%":decodeURIComponent,"%encodeURI%":encodeURI,"%encodeURIComponent%":encodeURIComponent,"%Error%":g$,"%eval%":eval,"%EvalError%":p$,"%Float16Array%":typeof Float16Array>"u"?gt:Float16Array,"%Float32Array%":typeof Float32Array>"u"?gt:Float32Array,"%Float64Array%":typeof Float64Array>"u"?gt:Float64Array,"%FinalizationRegistry%":typeof FinalizationRegistry>"u"?gt:FinalizationRegistry,"%Function%":oN,"%GeneratorFunction%":zu,"%Int8Array%":typeof Int8Array>"u"?gt:Int8Array,"%Int16Array%":typeof Int16Array>"u"?gt:Int16Array,"%Int32Array%":typeof Int32Array>"u"?gt:Int32Array,"%isFinite%":isFinite,"%isNaN%":isNaN,"%IteratorPrototype%":ju&&Tr?Tr(Tr([][Symbol.iterator]())):gt,"%JSON%":typeof JSON=="object"?JSON:gt,"%Map%":typeof Map>"u"?gt:Map,"%MapIteratorPrototype%":typeof Map>"u"||!ju||!Tr?gt:Tr(new Map()[Symbol.iterator]()),"%Math%":Math,"%Number%":Number,"%Object%":d$,"%Object.getOwnPropertyDescriptor%":sh,"%parseFloat%":parseFloat,"%parseInt%":parseInt,"%Promise%":typeof Promise>"u"?gt:Promise,"%Proxy%":typeof Proxy>"u"?gt:Proxy,"%RangeError%":E$,"%ReferenceError%":y$,"%Reflect%":typeof Reflect>"u"?gt:Reflect,"%RegExp%":RegExp,"%Set%":typeof Set>"u"?gt:Set,"%SetIteratorPrototype%":typeof Set>"u"||!ju||!Tr?gt:Tr(new Set()[Symbol.iterator]()),"%SharedArrayBuffer%":typeof SharedArrayBuffer>"u"?gt:SharedArrayBuffer,"%String%":String,"%StringIteratorPrototype%":ju&&Tr?Tr(""[Symbol.iterator]()):gt,"%Symbol%":ju?Symbol:gt,"%SyntaxError%":Xu,"%ThrowTypeError%":v$,"%TypedArray%":T$,"%TypeError%":Ku,"%Uint8Array%":typeof Uint8Array>"u"?gt:Uint8Array,"%Uint8ClampedArray%":typeof Uint8ClampedArray>"u"?gt:Uint8ClampedArray,"%Uint16Array%":typeof Uint16Array>"u"?gt:Uint16Array,"%Uint32Array%":typeof Uint32Array>"u"?gt:Uint32Array,"%URIError%":m$,"%WeakMap%":typeof WeakMap>"u"?gt:WeakMap,"%WeakRef%":typeof WeakRef>"u"?gt:WeakRef,"%WeakSet%":typeof WeakSet>"u"?gt:WeakSet,"%Function.prototype.call%":oh,"%Function.prototype.apply%":aN,"%Object.defineProperty%":_$,"%Object.getPrototypeOf%":R$,"%Math.abs%":B$,"%Math.floor%":I$,"%Math.max%":b$,"%Math.min%":C$,"%Math.pow%":Q$,"%Math.round%":w$,"%Math.sign%":S$,"%Reflect.getPrototypeOf%":D$};if(Tr)try{null.error}catch(e){nN=Tr(Tr(e)),ZA["%Error.prototype%"]=nN}var nN,N$=function e(t){var r;if(t==="%AsyncFunction%")r=HI("async function () {}");else if(t==="%GeneratorFunction%")r=HI("function* () {}");else if(t==="%AsyncGeneratorFunction%")r=HI("async function* () {}");else if(t==="%AsyncGenerator%"){var n=e("%AsyncGeneratorFunction%");n&&(r=n.prototype)}else if(t==="%AsyncIteratorPrototype%"){var i=e("%AsyncGenerator%");i&&Tr&&(r=Tr(i.prototype))}return ZA[t]=r,r},iN={__proto__:null,"%ArrayBufferPrototype%":["ArrayBuffer","prototype"],"%ArrayPrototype%":["Array","prototype"],"%ArrayProto_entries%":["Array","prototype","entries"],"%ArrayProto_forEach%":["Array","prototype","forEach"],"%ArrayProto_keys%":["Array","prototype","keys"],"%ArrayProto_values%":["Array","prototype","values"],"%AsyncFunctionPrototype%":["AsyncFunction","prototype"],"%AsyncGenerator%":["AsyncGeneratorFunction","prototype"],"%AsyncGeneratorPrototype%":["AsyncGeneratorFunction","prototype","prototype"],"%BooleanPrototype%":["Boolean","prototype"],"%DataViewPrototype%":["DataView","prototype"],"%DatePrototype%":["Date","prototype"],"%ErrorPrototype%":["Error","prototype"],"%EvalErrorPrototype%":["EvalError","prototype"],"%Float32ArrayPrototype%":["Float32Array","prototype"],"%Float64ArrayPrototype%":["Float64Array","prototype"],"%FunctionPrototype%":["Function","prototype"],"%Generator%":["GeneratorFunction","prototype"],"%GeneratorPrototype%":["GeneratorFunction","prototype","prototype"],"%Int8ArrayPrototype%":["Int8Array","prototype"],"%Int16ArrayPrototype%":["Int16Array","prototype"],"%Int32ArrayPrototype%":["Int32Array","prototype"],"%JSONParse%":["JSON","parse"],"%JSONStringify%":["JSON","stringify"],"%MapPrototype%":["Map","prototype"],"%NumberPrototype%":["Number","prototype"],"%ObjectPrototype%":["Object","prototype"],"%ObjProto_toString%":["Object","prototype","toString"],"%ObjProto_valueOf%":["Object","prototype","valueOf"],"%PromisePrototype%":["Promise","prototype"],"%PromiseProto_then%":["Promise","prototype","then"],"%Promise_all%":["Promise","all"],"%Promise_reject%":["Promise","reject"],"%Promise_resolve%":["Promise","resolve"],"%RangeErrorPrototype%":["RangeError","prototype"],"%ReferenceErrorPrototype%":["ReferenceError","prototype"],"%RegExpPrototype%":["RegExp","prototype"],"%SetPrototype%":["Set","prototype"],"%SharedArrayBufferPrototype%":["SharedArrayBuffer","prototype"],"%StringPrototype%":["String","prototype"],"%SymbolPrototype%":["Symbol","prototype"],"%SyntaxErrorPrototype%":["SyntaxError","prototype"],"%TypedArrayPrototype%":["TypedArray","prototype"],"%TypeErrorPrototype%":["TypeError","prototype"],"%Uint8ArrayPrototype%":["Uint8Array","prototype"],"%Uint8ClampedArrayPrototype%":["Uint8ClampedArray","prototype"],"%Uint16ArrayPrototype%":["Uint16Array","prototype"],"%Uint32ArrayPrototype%":["Uint32Array","prototype"],"%URIErrorPrototype%":["URIError","prototype"],"%WeakMapPrototype%":["WeakMap","prototype"],"%WeakSetPrototype%":["WeakSet","prototype"]},ah=Ju(),G0=OI(),M$=ah.call(oh,Array.prototype.concat),F$=ah.call(aN,Array.prototype.splice),sN=ah.call(oh,String.prototype.replace),Y0=ah.call(oh,String.prototype.slice),k$=ah.call(oh,RegExp.prototype.exec),U$=/[^%.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|%$))/g,x$=/\\(\\)?/g,L$=function(t){var r=Y0(t,0,1),n=Y0(t,-1);if(r==="%"&&n!=="%")throw new Xu("invalid intrinsic syntax, expected closing `%`");if(n==="%"&&r!=="%")throw new Xu("invalid intrinsic syntax, expected opening `%`");var i=[];return sN(t,U$,function(s,o,a,A){i[i.length]=a?sN(A,x$,"$1"):o||s}),i},P$=function(t,r){var n=t,i;if(G0(iN,n)&&(i=iN[n],n="%"+i[0]+"%"),G0(ZA,n)){var s=ZA[n];if(s===zu&&(s=N$(n)),typeof s>"u"&&!r)throw new Ku("intrinsic "+t+" exists, but is not available. Please file an issue!");return{alias:i,name:n,value:s}}throw new Xu("intrinsic "+t+" does not exist!")};AN.exports=function(t,r){if(typeof t!="string"||t.length===0)throw new Ku("intrinsic name must be a non-empty string");if(arguments.length>1&&typeof r!="boolean")throw new Ku('"allowMissing" argument must be a boolean');if(k$(/^%?[^%]*%?$/,t)===null)throw new Xu("`%` may not be present anywhere but at the beginning and end of the intrinsic name");var n=L$(t),i=n.length>0?n[0]:"",s=P$("%"+i+"%",r),o=s.name,a=s.value,A=!1,f=s.alias;f&&(i=f[0],F$(n,M$([0,1],f)));for(var l=1,p=!0;l<n.length;l+=1){var I=n[l],S=Y0(I,0,1),_=Y0(I,-1);if((S==='"'||S==="'"||S==="`"||_==='"'||_==="'"||_==="`")&&S!==_)throw new Xu("property names with quotes must have matching quotes");if((I==="constructor"||!p)&&(A=!0),i+="."+I,o="%"+i+"%",G0(ZA,o))a=ZA[o];else if(a!=null){if(!(I in a)){if(!r)throw new Ku("base intrinsic for "+t+" exists, but the property is not available.");return}if(sh&&l+1>=n.length){var N=sh(a,I);p=!!N,p&&"get"in N&&!("originalValue"in N.get)?a=N.get:a=a[I]}else p=G0(a,I),a=a[I];p&&!A&&(ZA[o]=a)}}return a}});var Ys=U((gRe,cN)=>{"use strict";var fN=Zu(),uN=H0(),O$=uN([fN("%String.prototype.indexOf%")]);cN.exports=function(t,r){var n=fN(t,!!r);return typeof n=="function"&&O$(t,".prototype.")>-1?uN([n]):n}});var dN=U((pRe,hN)=>{"use strict";var H$=nh()(),q$=Ys(),GI=q$("Object.prototype.toString"),W0=function(t){return H$&&t&&typeof t=="object"&&Symbol.toStringTag in t?!1:GI(t)==="[object Arguments]"},lN=function(t){return W0(t)?!0:t!==null&&typeof t=="object"&&"length"in t&&typeof t.length=="number"&&t.length>=0&&GI(t)!=="[object Array]"&&"callee"in t&&GI(t.callee)==="[object Function]"},G$=(function(){return W0(arguments)})();W0.isLegacyArguments=lN;hN.exports=G$?W0:lN});var BN=U((ERe,mN)=>{"use strict";var gN=Ys(),Y$=nh()(),W$=OI(),V$=XA(),VI;Y$?(pN=gN("RegExp.prototype.exec"),YI={},V0=function(){throw YI},WI={toString:V0,valueOf:V0},typeof Symbol.toPrimitive=="symbol"&&(WI[Symbol.toPrimitive]=V0),VI=function(t){if(!t||typeof t!="object")return!1;var r=V$(t,"lastIndex"),n=r&&W$(r,"value");if(!n)return!1;try{pN(t,WI)}catch(i){return i===YI}}):(EN=gN("Object.prototype.toString"),yN="[object RegExp]",VI=function(t){return!t||typeof t!="object"&&typeof t!="function"?!1:EN(t)===yN});var pN,YI,V0,WI,EN,yN;mN.exports=VI});var bN=U((yRe,IN)=>{"use strict";var J$=Ys(),j$=BN(),z$=J$("RegExp.prototype.exec"),K$=$i();IN.exports=function(t){if(!j$(t))throw new K$("`regex` must be a RegExp");return function(n){return z$(t,n)!==null}}});var QN=U((mRe,CN)=>{"use strict";var X$=function*(){}.constructor;CN.exports=()=>X$});var vN=U((BRe,_N)=>{"use strict";var SN=Ys(),Z$=bN(),$$=Z$(/^\s*(?:function)?\*/),eee=nh()(),wN=q0(),tee=SN("Object.prototype.toString"),ree=SN("Function.prototype.toString"),nee=QN();_N.exports=function(t){if(typeof t!="function")return!1;if($$(ree(t)))return!0;if(!eee){var r=tee(t);return r==="[object GeneratorFunction]"}if(!wN)return!1;var n=nee();return n&&wN(t)===n.prototype}});var NN=U((IRe,TN)=>{"use strict";var DN=Function.prototype.toString,$u=typeof Reflect=="object"&&Reflect!==null&&Reflect.apply,jI,J0;if(typeof $u=="function"&&typeof Object.defineProperty=="function")try{jI=Object.defineProperty({},"length",{get:function(){throw J0}}),J0={},$u(function(){throw 42},null,jI)}catch(e){e!==J0&&($u=null)}else $u=null;var iee=/^\s*class\b/,zI=function(t){try{var r=DN.call(t);return iee.test(r)}catch{return!1}},JI=function(t){try{return zI(t)?!1:(DN.call(t),!0)}catch{return!1}},j0=Object.prototype.toString,see="[object Object]",oee="[object Function]",aee="[object GeneratorFunction]",Aee="[object HTMLAllCollection]",fee="[object HTML document.all class]",uee="[object HTMLCollection]",cee=typeof Symbol=="function"&&!!Symbol.toStringTag,lee=!(0 in[,]),KI=function(){return!1};typeof document=="object"&&(RN=document.all,j0.call(RN)===j0.call(document.all)&&(KI=function(t){if((lee||!t)&&(typeof t>"u"||typeof t=="object"))try{var r=j0.call(t);return(r===Aee||r===fee||r===uee||r===see)&&t("")==null}catch{}return!1}));var RN;TN.exports=$u?function(t){if(KI(t))return!0;if(!t||typeof t!="function"&&typeof t!="object")return!1;try{$u(t,null,jI)}catch(r){if(r!==J0)return!1}return!zI(t)&&JI(t)}:function(t){if(KI(t))return!0;if(!t||typeof t!="function"&&typeof t!="object")return!1;if(cee)return JI(t);if(zI(t))return!1;var r=j0.call(t);return r!==oee&&r!==aee&&!/^\[object HTML/.test(r)?!1:JI(t)}});var kN=U((bRe,FN)=>{"use strict";var hee=NN(),dee=Object.prototype.toString,MN=Object.prototype.hasOwnProperty,gee=function(t,r,n){for(var i=0,s=t.length;i<s;i++)MN.call(t,i)&&(n==null?r(t[i],i,t):r.call(n,t[i],i,t))},pee=function(t,r,n){for(var i=0,s=t.length;i<s;i++)n==null?r(t.charAt(i),i,t):r.call(n,t.charAt(i),i,t)},Eee=function(t,r,n){for(var i in t)MN.call(t,i)&&(n==null?r(t[i],i,t):r.call(n,t[i],i,t))};function yee(e){return dee.call(e)==="[object Array]"}FN.exports=function(t,r,n){if(!hee(r))throw new TypeError("iterator must be a function");var i;arguments.length>=3&&(i=n),yee(t)?gee(t,r,i):typeof t=="string"?pee(t,r,i):Eee(t,r,i)}});var xN=U((CRe,UN)=>{"use strict";UN.exports=["Float16Array","Float32Array","Float64Array","Int8Array","Int16Array","Int32Array","Uint8Array","Uint8ClampedArray","Uint16Array","Uint32Array","BigInt64Array","BigUint64Array"]});var PN=U((QRe,LN)=>{"use strict";var XI=xN(),mee=globalThis;LN.exports=function(){for(var t=[],r=0;r<XI.length;r++)typeof mee[XI[r]]=="function"&&(t[t.length]=XI[r]);return t}});var ZI=U((wRe,qN)=>{"use strict";var ON=ih(),Bee=kI(),ec=$i(),HN=XA();qN.exports=function(t,r,n){if(!t||typeof t!="object"&&typeof t!="function")throw new ec("`obj` must be an object or a function`");if(typeof r!="string"&&typeof r!="symbol")throw new ec("`property` must be a string or a symbol`");if(arguments.length>3&&typeof arguments[3]!="boolean"&&arguments[3]!==null)throw new ec("`nonEnumerable`, if provided, must be a boolean or null");if(arguments.length>4&&typeof arguments[4]!="boolean"&&arguments[4]!==null)throw new ec("`nonWritable`, if provided, must be a boolean or null");if(arguments.length>5&&typeof arguments[5]!="boolean"&&arguments[5]!==null)throw new ec("`nonConfigurable`, if provided, must be a boolean or null");if(arguments.length>6&&typeof arguments[6]!="boolean")throw new ec("`loose`, if provided, must be a boolean");var i=arguments.length>3?arguments[3]:null,s=arguments.length>4?arguments[4]:null,o=arguments.length>5?arguments[5]:null,a=arguments.length>6?arguments[6]:!1,A=!!HN&&HN(t,r);if(ON)ON(t,r,{configurable:o===null&&A?A.configurable:!o,enumerable:i===null&&A?A.enumerable:!i,value:n,writable:s===null&&A?A.writable:!s});else if(a||!i&&!s&&!o)t[r]=n;else throw new Bee("This environment does not support defining a property as non-configurable, non-writable, or non-enumerable.")}});var eb=U((SRe,YN)=>{"use strict";var $I=ih(),GN=function(){return!!$I};GN.hasArrayLengthDefineBug=function(){if(!$I)return null;try{return $I([],"length",{value:1}).length!==1}catch{return!0}};YN.exports=GN});var zN=U((_Re,jN)=>{"use strict";var Iee=Zu(),WN=ZI(),bee=eb()(),VN=XA(),JN=$i(),Cee=Iee("%Math.floor%");jN.exports=function(t,r){if(typeof t!="function")throw new JN("`fn` is not a function");if(typeof r!="number"||r<0||r>4294967295||Cee(r)!==r)throw new JN("`length` must be a positive 32-bit integer");var n=arguments.length>2&&!!arguments[2],i=!0,s=!0;if("length"in t&&VN){var o=VN(t,"length");o&&!o.configurable&&(i=!1),o&&!o.writable&&(s=!1)}return(i||s||!n)&&(bee?WN(t,"length",r,!0,!0):WN(t,"length",r)),t}});var XN=U((vRe,KN)=>{"use strict";var Qee=Ju(),wee=O0(),See=LI();KN.exports=function(){return See(Qee,wee,arguments)}});var Ah=U((RRe,z0)=>{"use strict";var _ee=zN(),ZN=ih(),vee=H0(),$N=XN();z0.exports=function(t){var r=vee(arguments),n=t.length-(arguments.length-1);return _ee(r,1+(n>0?n:0),!0)};ZN?ZN(z0.exports,"apply",{value:$N}):z0.exports.apply=$N});var ib=U((DRe,nM)=>{"use strict";var Z0=kN(),Ree=PN(),eM=Ah(),rb=Ys(),X0=XA(),K0=q0(),Dee=rb("Object.prototype.toString"),rM=nh()(),tM=globalThis,tb=Ree(),nb=rb("String.prototype.slice"),Tee=rb("Array.prototype.indexOf",!0)||function(t,r){for(var n=0;n<t.length;n+=1)if(t[n]===r)return n;return-1},$0={__proto__:null};rM&&X0&&K0?Z0(tb,function(e){var t=new tM[e];if(Symbol.toStringTag in t&&K0){var r=K0(t),n=X0(r,Symbol.toStringTag);if(!n&&r){var i=K0(r);n=X0(i,Symbol.toStringTag)}if(n&&n.get){var s=eM(n.get);$0["$"+e]=s}}}):Z0(tb,function(e){var t=new tM[e],r=t.slice||t.set;if(r){var n=eM(r);$0["$"+e]=n}});var Nee=function(t){var r=!1;return Z0($0,function(n,i){if(!r)try{"$"+n(t)===i&&(r=nb(i,1))}catch{}}),r},Mee=function(t){var r=!1;return Z0($0,function(n,i){if(!r)try{n(t),r=nb(i,1)}catch{}}),r};nM.exports=function(t){if(!t||typeof t!="object")return!1;if(!rM){var r=nb(Dee(t),8,-1);return Tee(tb,r)>-1?r:r!=="Object"?!1:Mee(t)}return X0?Nee(t):null}});var sb=U((TRe,iM)=>{"use strict";var Fee=ib();iM.exports=function(t){return!!Fee(t)}});var yM=U(pt=>{"use strict";var kee=dN(),Uee=vN(),es=ib(),sM=sb();function tc(e){return e.call.bind(e)}var oM=typeof BigInt<"u",aM=typeof Symbol<"u",li=tc(Object.prototype.toString),xee=tc(Number.prototype.valueOf),Lee=tc(String.prototype.valueOf),Pee=tc(Boolean.prototype.valueOf);oM&&(AM=tc(BigInt.prototype.valueOf));var AM;aM&&(fM=tc(Symbol.prototype.valueOf));var fM;function uh(e,t){if(typeof e!="object")return!1;try{return t(e),!0}catch{return!1}}pt.isArgumentsObject=kee;pt.isGeneratorFunction=Uee;pt.isTypedArray=sM;function Oee(e){return typeof Promise<"u"&&e instanceof Promise||e!==null&&typeof e=="object"&&typeof e.then=="function"&&typeof e.catch=="function"}pt.isPromise=Oee;function Hee(e){return typeof ArrayBuffer<"u"&&ArrayBuffer.isView?ArrayBuffer.isView(e):sM(e)||cM(e)}pt.isArrayBufferView=Hee;function qee(e){return es(e)==="Uint8Array"}pt.isUint8Array=qee;function Gee(e){return es(e)==="Uint8ClampedArray"}pt.isUint8ClampedArray=Gee;function Yee(e){return es(e)==="Uint16Array"}pt.isUint16Array=Yee;function Wee(e){return es(e)==="Uint32Array"}pt.isUint32Array=Wee;function Vee(e){return es(e)==="Int8Array"}pt.isInt8Array=Vee;function Jee(e){return es(e)==="Int16Array"}pt.isInt16Array=Jee;function jee(e){return es(e)==="Int32Array"}pt.isInt32Array=jee;function zee(e){return es(e)==="Float32Array"}pt.isFloat32Array=zee;function Kee(e){return es(e)==="Float64Array"}pt.isFloat64Array=Kee;function Xee(e){return es(e)==="BigInt64Array"}pt.isBigInt64Array=Xee;function Zee(e){return es(e)==="BigUint64Array"}pt.isBigUint64Array=Zee;function ep(e){return li(e)==="[object Map]"}ep.working=typeof Map<"u"&&ep(new Map);function $ee(e){return typeof Map>"u"?!1:ep.working?ep(e):e instanceof Map}pt.isMap=$ee;function tp(e){return li(e)==="[object Set]"}tp.working=typeof Set<"u"&&tp(new Set);function ete(e){return typeof Set>"u"?!1:tp.working?tp(e):e instanceof Set}pt.isSet=ete;function rp(e){return li(e)==="[object WeakMap]"}rp.working=typeof WeakMap<"u"&&rp(new WeakMap);function tte(e){return typeof WeakMap>"u"?!1:rp.working?rp(e):e instanceof WeakMap}pt.isWeakMap=tte;function ab(e){return li(e)==="[object WeakSet]"}ab.working=typeof WeakSet<"u"&&ab(new WeakSet);function rte(e){return ab(e)}pt.isWeakSet=rte;function np(e){return li(e)==="[object ArrayBuffer]"}np.working=typeof ArrayBuffer<"u"&&np(new ArrayBuffer);function uM(e){return typeof ArrayBuffer>"u"?!1:np.working?np(e):e instanceof ArrayBuffer}pt.isArrayBuffer=uM;function ip(e){return li(e)==="[object DataView]"}ip.working=typeof ArrayBuffer<"u"&&typeof DataView<"u"&&ip(new DataView(new ArrayBuffer(1),0,1));function cM(e){return typeof DataView>"u"?!1:ip.working?ip(e):e instanceof DataView}pt.isDataView=cM;var ob=typeof SharedArrayBuffer<"u"?SharedArrayBuffer:void 0;function fh(e){return li(e)==="[object SharedArrayBuffer]"}function lM(e){return typeof ob>"u"?!1:(typeof fh.working>"u"&&(fh.working=fh(new ob)),fh.working?fh(e):e instanceof ob)}pt.isSharedArrayBuffer=lM;function nte(e){return li(e)==="[object AsyncFunction]"}pt.isAsyncFunction=nte;function ite(e){return li(e)==="[object Map Iterator]"}pt.isMapIterator=ite;function ste(e){return li(e)==="[object Set Iterator]"}pt.isSetIterator=ste;function ote(e){return li(e)==="[object Generator]"}pt.isGeneratorObject=ote;function ate(e){return li(e)==="[object WebAssembly.Module]"}pt.isWebAssemblyCompiledModule=ate;function hM(e){return uh(e,xee)}pt.isNumberObject=hM;function dM(e){return uh(e,Lee)}pt.isStringObject=dM;function gM(e){return uh(e,Pee)}pt.isBooleanObject=gM;function pM(e){return oM&&uh(e,AM)}pt.isBigIntObject=pM;function EM(e){return aM&&uh(e,fM)}pt.isSymbolObject=EM;function Ate(e){return hM(e)||dM(e)||gM(e)||pM(e)||EM(e)}pt.isBoxedPrimitive=Ate;function fte(e){return typeof Uint8Array<"u"&&(uM(e)||lM(e))}pt.isAnyArrayBuffer=fte;["isProxy","isExternal","isModuleNamespaceObject"].forEach(function(e){Object.defineProperty(pt,e,{enumerable:!1,value:function(){return!1}})})});var BM=U((MRe,mM)=>{mM.exports=function(t){return t&&typeof t=="object"&&typeof t.copy=="function"&&typeof t.fill=="function"&&typeof t.readUInt8=="function"}});var Yr=U(Et=>{var IM=Object.getOwnPropertyDescriptors||function(t){for(var r=Object.keys(t),n={},i=0;i<r.length;i++)n[r[i]]=Object.getOwnPropertyDescriptor(t,r[i]);return n},ute=/%[sdj%]/g;Et.format=function(e){if(!cp(e)){for(var t=[],r=0;r<arguments.length;r++)t.push(Ja(arguments[r]));return t.join(" ")}for(var r=1,n=arguments,i=n.length,s=String(e).replace(ute,function(a){if(a==="%%")return"%";if(r>=i)return a;switch(a){case"%s":return String(n[r++]);case"%d":return Number(n[r++]);case"%j":try{return JSON.stringify(n[r++])}catch{return"[Circular]"}default:return a}}),o=n[r];r<i;o=n[++r])up(o)||!rc(o)?s+=" "+o:s+=" "+Ja(o);return s};Et.deprecate=function(e,t){if(typeof process<"u"&&process.noDeprecation===!0)return e;if(typeof process>"u")return function(){return Et.deprecate(e,t).apply(this,arguments)};var r=!1;function n(){if(!r){if(process.throwDeprecation)throw new Error(t);process.traceDeprecation?console.trace(t):console.error(t),r=!0}return e.apply(this,arguments)}return n};var sp={},bM=/^$/;process.env.NODE_DEBUG&&(op=process.env.NODE_DEBUG,op=op.replace(/[|\\{}()[\]^$+?.]/g,"\\$&").replace(/\*/g,".*").replace(/,/g,"$|^").toUpperCase(),bM=new RegExp("^"+op+"$","i"));var op;Et.debuglog=function(e){if(e=e.toUpperCase(),!sp[e])if(bM.test(e)){var t=process.pid;sp[e]=function(){var r=Et.format.apply(Et,arguments);console.error("%s %d: %s",e,t,r)}}else sp[e]=function(){};return sp[e]};function Ja(e,t){var r={seen:[],stylize:lte};return arguments.length>=3&&(r.depth=arguments[2]),arguments.length>=4&&(r.colors=arguments[3]),cb(t)?r.showHidden=t:t&&Et._extend(r,t),ef(r.showHidden)&&(r.showHidden=!1),ef(r.depth)&&(r.depth=2),ef(r.colors)&&(r.colors=!1),ef(r.customInspect)&&(r.customInspect=!0),r.colors&&(r.stylize=cte),Ap(r,e,r.depth)}Et.inspect=Ja;Ja.colors={bold:[1,22],italic:[3,23],underline:[4,24],inverse:[7,27],white:[37,39],grey:[90,39],black:[30,39],blue:[34,39],cyan:[36,39],green:[32,39],magenta:[35,39],red:[31,39],yellow:[33,39]};Ja.styles={special:"cyan",number:"yellow",boolean:"yellow",undefined:"grey",null:"bold",string:"green",date:"magenta",regexp:"red"};function cte(e,t){var r=Ja.styles[t];return r?"\x1B["+Ja.colors[r][0]+"m"+e+"\x1B["+Ja.colors[r][1]+"m":e}function lte(e,t){return e}function hte(e){var t={};return e.forEach(function(r,n){t[r]=!0}),t}function Ap(e,t,r){if(e.customInspect&&t&&ap(t.inspect)&&t.inspect!==Et.inspect&&!(t.constructor&&t.constructor.prototype===t)){var n=t.inspect(r,e);return cp(n)||(n=Ap(e,n,r)),n}var i=dte(e,t);if(i)return i;var s=Object.keys(t),o=hte(s);if(e.showHidden&&(s=Object.getOwnPropertyNames(t)),lh(t)&&(s.indexOf("message")>=0||s.indexOf("description")>=0))return Ab(t);if(s.length===0){if(ap(t)){var a=t.name?": "+t.name:"";return e.stylize("[Function"+a+"]","special")}if(ch(t))return e.stylize(RegExp.prototype.toString.call(t),"regexp");if(fp(t))return e.stylize(Date.prototype.toString.call(t),"date");if(lh(t))return Ab(t)}var A="",f=!1,l=["{","}"];if(CM(t)&&(f=!0,l=["[","]"]),ap(t)){var p=t.name?": "+t.name:"";A=" [Function"+p+"]"}if(ch(t)&&(A=" "+RegExp.prototype.toString.call(t)),fp(t)&&(A=" "+Date.prototype.toUTCString.call(t)),lh(t)&&(A=" "+Ab(t)),s.length===0&&(!f||t.length==0))return l[0]+A+l[1];if(r<0)return ch(t)?e.stylize(RegExp.prototype.toString.call(t),"regexp"):e.stylize("[Object]","special");e.seen.push(t);var I;return f?I=gte(e,t,r,o,s):I=s.map(function(S){return ub(e,t,r,o,S,f)}),e.seen.pop(),pte(I,A,l)}function dte(e,t){if(ef(t))return e.stylize("undefined","undefined");if(cp(t)){var r="'"+JSON.stringify(t).replace(/^"|"$/g,"").replace(/'/g,"\\'").replace(/\\"/g,'"')+"'";return e.stylize(r,"string")}if(QM(t))return e.stylize(""+t,"number");if(cb(t))return e.stylize(""+t,"boolean");if(up(t))return e.stylize("null","null")}function Ab(e){return"["+Error.prototype.toString.call(e)+"]"}function gte(e,t,r,n,i){for(var s=[],o=0,a=t.length;o<a;++o)wM(t,String(o))?s.push(ub(e,t,r,n,String(o),!0)):s.push("");return i.forEach(function(A){A.match(/^\d+$/)||s.push(ub(e,t,r,n,A,!0))}),s}function ub(e,t,r,n,i,s){var o,a,A;if(A=Object.getOwnPropertyDescriptor(t,i)||{value:t[i]},A.get?A.set?a=e.stylize("[Getter/Setter]","special"):a=e.stylize("[Getter]","special"):A.set&&(a=e.stylize("[Setter]","special")),wM(n,i)||(o="["+i+"]"),a||(e.seen.indexOf(A.value)<0?(up(r)?a=Ap(e,A.value,null):a=Ap(e,A.value,r-1),a.indexOf(`
-`)>-1&&(s?a=a.split(`
-`).map(function(f){return"  "+f}).join(`
-`).slice(2):a=`
-`+a.split(`
-`).map(function(f){return"   "+f}).join(`
-`))):a=e.stylize("[Circular]","special")),ef(o)){if(s&&i.match(/^\d+$/))return a;o=JSON.stringify(""+i),o.match(/^"([a-zA-Z_][a-zA-Z_0-9]*)"$/)?(o=o.slice(1,-1),o=e.stylize(o,"name")):(o=o.replace(/'/g,"\\'").replace(/\\"/g,'"').replace(/(^"|"$)/g,"'"),o=e.stylize(o,"string"))}return o+": "+a}function pte(e,t,r){var n=0,i=e.reduce(function(s,o){return n++,o.indexOf(`
-`)>=0&&n++,s+o.replace(/\u001b\[\d\d?m/g,"").length+1},0);return i>60?r[0]+(t===""?"":t+`
- `)+" "+e.join(`,
-  `)+" "+r[1]:r[0]+t+" "+e.join(", ")+" "+r[1]}Et.types=yM();function CM(e){return Array.isArray(e)}Et.isArray=CM;function cb(e){return typeof e=="boolean"}Et.isBoolean=cb;function up(e){return e===null}Et.isNull=up;function Ete(e){return e==null}Et.isNullOrUndefined=Ete;function QM(e){return typeof e=="number"}Et.isNumber=QM;function cp(e){return typeof e=="string"}Et.isString=cp;function yte(e){return typeof e=="symbol"}Et.isSymbol=yte;function ef(e){return e===void 0}Et.isUndefined=ef;function ch(e){return rc(e)&&lb(e)==="[object RegExp]"}Et.isRegExp=ch;Et.types.isRegExp=ch;function rc(e){return typeof e=="object"&&e!==null}Et.isObject=rc;function fp(e){return rc(e)&&lb(e)==="[object Date]"}Et.isDate=fp;Et.types.isDate=fp;function lh(e){return rc(e)&&(lb(e)==="[object Error]"||e instanceof Error)}Et.isError=lh;Et.types.isNativeError=lh;function ap(e){return typeof e=="function"}Et.isFunction=ap;function mte(e){return e===null||typeof e=="boolean"||typeof e=="number"||typeof e=="string"||typeof e=="symbol"||typeof e>"u"}Et.isPrimitive=mte;Et.isBuffer=BM();function lb(e){return Object.prototype.toString.call(e)}function fb(e){return e<10?"0"+e.toString(10):e.toString(10)}var Bte=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"];function Ite(){var e=new Date,t=[fb(e.getHours()),fb(e.getMinutes()),fb(e.getSeconds())].join(":");return[e.getDate(),Bte[e.getMonth()],t].join(" ")}Et.log=function(){console.log("%s - %s",Ite(),Et.format.apply(Et,arguments))};Et.inherits=je();Et._extend=function(e,t){if(!t||!rc(t))return e;for(var r=Object.keys(t),n=r.length;n--;)e[r[n]]=t[r[n]];return e};function wM(e,t){return Object.prototype.hasOwnProperty.call(e,t)}var $A=typeof Symbol<"u"?Symbol("util.promisify.custom"):void 0;Et.promisify=function(t){if(typeof t!="function")throw new TypeError('The "original" argument must be of type Function');if($A&&t[$A]){var r=t[$A];if(typeof r!="function")throw new TypeError('The "util.promisify.custom" argument must be of type Function');return Object.defineProperty(r,$A,{value:r,enumerable:!1,writable:!1,configurable:!0}),r}function r(){for(var n,i,s=new Promise(function(A,f){n=A,i=f}),o=[],a=0;a<arguments.length;a++)o.push(arguments[a]);o.push(function(A,f){A?i(A):n(f)});try{t.apply(this,o)}catch(A){i(A)}return s}return Object.setPrototypeOf(r,Object.getPrototypeOf(t)),$A&&Object.defineProperty(r,$A,{value:r,enumerable:!1,writable:!1,configurable:!0}),Object.defineProperties(r,IM(t))};Et.promisify.custom=$A;function bte(e,t){if(!e){var r=new Error("Promise was rejected with a falsy value");r.reason=e,e=r}return t(e)}function Cte(e){if(typeof e!="function")throw new TypeError('The "original" argument must be of type Function');function t(){for(var r=[],n=0;n<arguments.length;n++)r.push(arguments[n]);var i=r.pop();if(typeof i!="function")throw new TypeError("The last argument must be of type Function");var s=this,o=function(){return i.apply(s,arguments)};e.apply(this,r).then(function(a){process.nextTick(o.bind(null,null,a))},function(a){process.nextTick(bte.bind(null,a,o))})}return Object.setPrototypeOf(t,Object.getPrototypeOf(e)),Object.defineProperties(t,IM(e)),t}Et.callbackify=Cte});var TM=U((kRe,DM)=>{"use strict";function SM(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter(function(i){return Object.getOwnPropertyDescriptor(e,i).enumerable})),r.push.apply(r,n)}return r}function _M(e){for(var t=1;t<arguments.length;t++){var r=arguments[t]!=null?arguments[t]:{};t%2?SM(Object(r),!0).forEach(function(n){Qte(e,n,r[n])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):SM(Object(r)).forEach(function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(r,n))})}return e}function Qte(e,t,r){return t=RM(t),t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function wte(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function vM(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,RM(n.key),n)}}function Ste(e,t,r){return t&&vM(e.prototype,t),r&&vM(e,r),Object.defineProperty(e,"prototype",{writable:!1}),e}function RM(e){var t=_te(e,"string");return typeof t=="symbol"?t:String(t)}function _te(e,t){if(typeof e!="object"||e===null)return e;var r=e[Symbol.toPrimitive];if(r!==void 0){var n=r.call(e,t||"default");if(typeof n!="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(t==="string"?String:Number)(e)}var vte=Gr(),lp=vte.Buffer,Rte=Yr(),hb=Rte.inspect,Dte=hb&&hb.custom||"inspect";function Tte(e,t,r){lp.prototype.copy.call(e,t,r)}DM.exports=(function(){function e(){wte(this,e),this.head=null,this.tail=null,this.length=0}return Ste(e,[{key:"push",value:function(r){var n={data:r,next:null};this.length>0?this.tail.next=n:this.head=n,this.tail=n,++this.length}},{key:"unshift",value:function(r){var n={data:r,next:this.head};this.length===0&&(this.tail=n),this.head=n,++this.length}},{key:"shift",value:function(){if(this.length!==0){var r=this.head.data;return this.length===1?this.head=this.tail=null:this.head=this.head.next,--this.length,r}}},{key:"clear",value:function(){this.head=this.tail=null,this.length=0}},{key:"join",value:function(r){if(this.length===0)return"";for(var n=this.head,i=""+n.data;n=n.next;)i+=r+n.data;return i}},{key:"concat",value:function(r){if(this.length===0)return lp.alloc(0);for(var n=lp.allocUnsafe(r>>>0),i=this.head,s=0;i;)Tte(i.data,n,s),s+=i.data.length,i=i.next;return n}},{key:"consume",value:function(r,n){var i;return r<this.head.data.length?(i=this.head.data.slice(0,r),this.head.data=this.head.data.slice(r)):r===this.head.data.length?i=this.shift():i=n?this._getString(r):this._getBuffer(r),i}},{key:"first",value:function(){return this.head.data}},{key:"_getString",value:function(r){var n=this.head,i=1,s=n.data;for(r-=s.length;n=n.next;){var o=n.data,a=r>o.length?o.length:r;if(a===o.length?s+=o:s+=o.slice(0,r),r-=a,r===0){a===o.length?(++i,n.next?this.head=n.next:this.head=this.tail=null):(this.head=n,n.data=o.slice(a));break}++i}return this.length-=i,s}},{key:"_getBuffer",value:function(r){var n=lp.allocUnsafe(r),i=this.head,s=1;for(i.data.copy(n),r-=i.data.length;i=i.next;){var o=i.data,a=r>o.length?o.length:r;if(o.copy(n,n.length-r,0,a),r-=a,r===0){a===o.length?(++s,i.next?this.head=i.next:this.head=this.tail=null):(this.head=i,i.data=o.slice(a));break}++s}return this.length-=s,n}},{key:Dte,value:function(r,n){return hb(this,_M(_M({},n),{},{depth:0,customInspect:!1}))}}]),e})()});var gb=U((URe,MM)=>{"use strict";function Nte(e,t){var r=this,n=this._readableState&&this._readableState.destroyed,i=this._writableState&&this._writableState.destroyed;return n||i?(t?t(e):e&&(this._writableState?this._writableState.errorEmitted||(this._writableState.errorEmitted=!0,process.nextTick(db,this,e)):process.nextTick(db,this,e)),this):(this._readableState&&(this._readableState.destroyed=!0),this._writableState&&(this._writableState.destroyed=!0),this._destroy(e||null,function(s){!t&&s?r._writableState?r._writableState.errorEmitted?process.nextTick(hp,r):(r._writableState.errorEmitted=!0,process.nextTick(NM,r,s)):process.nextTick(NM,r,s):t?(process.nextTick(hp,r),t(s)):process.nextTick(hp,r)}),this)}function NM(e,t){db(e,t),hp(e)}function hp(e){e._writableState&&!e._writableState.emitClose||e._readableState&&!e._readableState.emitClose||e.emit("close")}function Mte(){this._readableState&&(this._readableState.destroyed=!1,this._readableState.reading=!1,this._readableState.ended=!1,this._readableState.endEmitted=!1),this._writableState&&(this._writableState.destroyed=!1,this._writableState.ended=!1,this._writableState.ending=!1,this._writableState.finalCalled=!1,this._writableState.prefinished=!1,this._writableState.finished=!1,this._writableState.errorEmitted=!1)}function db(e,t){e.emit("error",t)}function Fte(e,t){var r=e._readableState,n=e._writableState;r&&r.autoDestroy||n&&n.autoDestroy?e.destroy(t):e.emit("error",t)}MM.exports={destroy:Nte,undestroy:Mte,errorOrDestroy:Fte}});var tf=U((xRe,UM)=>{"use strict";function kte(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,e.__proto__=t}var kM={};function hi(e,t,r){r||(r=Error);function n(s,o,a){return typeof t=="string"?t:t(s,o,a)}var i=(function(s){kte(o,s);function o(a,A,f){return s.call(this,n(a,A,f))||this}return o})(r);i.prototype.name=r.name,i.prototype.code=e,kM[e]=i}function FM(e,t){if(Array.isArray(e)){var r=e.length;return e=e.map(function(n){return String(n)}),r>2?"one of ".concat(t," ").concat(e.slice(0,r-1).join(", "),", or ")+e[r-1]:r===2?"one of ".concat(t," ").concat(e[0]," or ").concat(e[1]):"of ".concat(t," ").concat(e[0])}else return"of ".concat(t," ").concat(String(e))}function Ute(e,t,r){return e.substr(!r||r<0?0:+r,t.length)===t}function xte(e,t,r){return(r===void 0||r>e.length)&&(r=e.length),e.substring(r-t.length,r)===t}function Lte(e,t,r){return typeof r!="number"&&(r=0),r+t.length>e.length?!1:e.indexOf(t,r)!==-1}hi("ERR_INVALID_OPT_VALUE",function(e,t){return'The value "'+t+'" is invalid for option "'+e+'"'},TypeError);hi("ERR_INVALID_ARG_TYPE",function(e,t,r){var n;typeof t=="string"&&Ute(t,"not ")?(n="must not be",t=t.replace(/^not /,"")):n="must be";var i;if(xte(e," argument"))i="The ".concat(e," ").concat(n," ").concat(FM(t,"type"));else{var s=Lte(e,".")?"property":"argument";i='The "'.concat(e,'" ').concat(s," ").concat(n," ").concat(FM(t,"type"))}return i+=". Received type ".concat(typeof r),i},TypeError);hi("ERR_STREAM_PUSH_AFTER_EOF","stream.push() after EOF");hi("ERR_METHOD_NOT_IMPLEMENTED",function(e){return"The "+e+" method is not implemented"});hi("ERR_STREAM_PREMATURE_CLOSE","Premature close");hi("ERR_STREAM_DESTROYED",function(e){return"Cannot call "+e+" after a stream was destroyed"});hi("ERR_MULTIPLE_CALLBACK","Callback called multiple times");hi("ERR_STREAM_CANNOT_PIPE","Cannot pipe, not readable");hi("ERR_STREAM_WRITE_AFTER_END","write after end");hi("ERR_STREAM_NULL_VALUES","May not write null values to stream",TypeError);hi("ERR_UNKNOWN_ENCODING",function(e){return"Unknown encoding: "+e},TypeError);hi("ERR_STREAM_UNSHIFT_AFTER_END_EVENT","stream.unshift() after end event");UM.exports.codes=kM});var pb=U((LRe,xM)=>{"use strict";var Pte=tf().codes.ERR_INVALID_OPT_VALUE;function Ote(e,t,r){return e.highWaterMark!=null?e.highWaterMark:t?e[r]:null}function Hte(e,t,r,n){var i=Ote(t,n,r);if(i!=null){if(!(isFinite(i)&&Math.floor(i)===i)||i<0){var s=n?r:"highWaterMark";throw new Pte(s,i)}return Math.floor(i)}return e.objectMode?16:16*1024}xM.exports={getHighWaterMark:Hte}});var yb=U((PRe,LM)=>{LM.exports=qte;function qte(e,t){if(Eb("noDeprecation"))return e;var r=!1;function n(){if(!r){if(Eb("throwDeprecation"))throw new Error(t);Eb("traceDeprecation")?console.trace(t):console.warn(t),r=!0}return e.apply(this,arguments)}return n}function Eb(e){try{if(!globalThis.localStorage)return!1}catch{return!1}var t=globalThis.localStorage[e];return t==null?!1:String(t).toLowerCase()==="true"}});var Ib=U((ORe,YM)=>{"use strict";YM.exports=Ar;function OM(e){var t=this;this.next=null,this.entry=null,this.finish=function(){gre(t,e)}}var nc;Ar.WritableState=dh;var Gte={deprecate:yb()},HM=FI(),gp=Gr().Buffer,Yte=(typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof self<"u"?self:{}).Uint8Array||function(){};function Wte(e){return gp.from(e)}function Vte(e){return gp.isBuffer(e)||e instanceof Yte}var Bb=gb(),Jte=pb(),jte=Jte.getHighWaterMark,ja=tf().codes,zte=ja.ERR_INVALID_ARG_TYPE,Kte=ja.ERR_METHOD_NOT_IMPLEMENTED,Xte=ja.ERR_MULTIPLE_CALLBACK,Zte=ja.ERR_STREAM_CANNOT_PIPE,$te=ja.ERR_STREAM_DESTROYED,ere=ja.ERR_STREAM_NULL_VALUES,tre=ja.ERR_STREAM_WRITE_AFTER_END,rre=ja.ERR_UNKNOWN_ENCODING,ic=Bb.errorOrDestroy;je()(Ar,HM);function nre(){}function dh(e,t,r){nc=nc||rf(),e=e||{},typeof r!="boolean"&&(r=t instanceof nc),this.objectMode=!!e.objectMode,r&&(this.objectMode=this.objectMode||!!e.writableObjectMode),this.highWaterMark=jte(this,e,"writableHighWaterMark",r),this.finalCalled=!1,this.needDrain=!1,this.ending=!1,this.ended=!1,this.finished=!1,this.destroyed=!1;var n=e.decodeStrings===!1;this.decodeStrings=!n,this.defaultEncoding=e.defaultEncoding||"utf8",this.length=0,this.writing=!1,this.corked=0,this.sync=!0,this.bufferProcessing=!1,this.onwrite=function(i){ure(t,i)},this.writecb=null,this.writelen=0,this.bufferedRequest=null,this.lastBufferedRequest=null,this.pendingcb=0,this.prefinished=!1,this.errorEmitted=!1,this.emitClose=e.emitClose!==!1,this.autoDestroy=!!e.autoDestroy,this.bufferedRequestCount=0,this.corkedRequestsFree=new OM(this)}dh.prototype.getBuffer=function(){for(var t=this.bufferedRequest,r=[];t;)r.push(t),t=t.next;return r};(function(){try{Object.defineProperty(dh.prototype,"buffer",{get:Gte.deprecate(function(){return this.getBuffer()},"_writableState.buffer is deprecated. Use _writableState.getBuffer instead.","DEP0003")})}catch{}})();var dp;typeof Symbol=="function"&&Symbol.hasInstance&&typeof Function.prototype[Symbol.hasInstance]=="function"?(dp=Function.prototype[Symbol.hasInstance],Object.defineProperty(Ar,Symbol.hasInstance,{value:function(t){return dp.call(this,t)?!0:this!==Ar?!1:t&&t._writableState instanceof dh}})):dp=function(t){return t instanceof this};function Ar(e){nc=nc||rf();var t=this instanceof nc;if(!t&&!dp.call(Ar,this))return new Ar(e);this._writableState=new dh(e,this,t),this.writable=!0,e&&(typeof e.write=="function"&&(this._write=e.write),typeof e.writev=="function"&&(this._writev=e.writev),typeof e.destroy=="function"&&(this._destroy=e.destroy),typeof e.final=="function"&&(this._final=e.final)),HM.call(this)}Ar.prototype.pipe=function(){ic(this,new Zte)};function ire(e,t){var r=new tre;ic(e,r),process.nextTick(t,r)}function sre(e,t,r,n){var i;return r===null?i=new ere:typeof r!="string"&&!t.objectMode&&(i=new zte("chunk",["string","Buffer"],r)),i?(ic(e,i),process.nextTick(n,i),!1):!0}Ar.prototype.write=function(e,t,r){var n=this._writableState,i=!1,s=!n.objectMode&&Vte(e);return s&&!gp.isBuffer(e)&&(e=Wte(e)),typeof t=="function"&&(r=t,t=null),s?t="buffer":t||(t=n.defaultEncoding),typeof r!="function"&&(r=nre),n.ending?ire(this,r):(s||sre(this,n,e,r))&&(n.pendingcb++,i=are(this,n,s,e,t,r)),i};Ar.prototype.cork=function(){this._writableState.corked++};Ar.prototype.uncork=function(){var e=this._writableState;e.corked&&(e.corked--,!e.writing&&!e.corked&&!e.bufferProcessing&&e.bufferedRequest&&qM(this,e))};Ar.prototype.setDefaultEncoding=function(t){if(typeof t=="string"&&(t=t.toLowerCase()),!(["hex","utf8","utf-8","ascii","binary","base64","ucs2","ucs-2","utf16le","utf-16le","raw"].indexOf((t+"").toLowerCase())>-1))throw new rre(t);return this._writableState.defaultEncoding=t,this};Object.defineProperty(Ar.prototype,"writableBuffer",{enumerable:!1,get:function(){return this._writableState&&this._writableState.getBuffer()}});function ore(e,t,r){return!e.objectMode&&e.decodeStrings!==!1&&typeof t=="string"&&(t=gp.from(t,r)),t}Object.defineProperty(Ar.prototype,"writableHighWaterMark",{enumerable:!1,get:function(){return this._writableState.highWaterMark}});function are(e,t,r,n,i,s){if(!r){var o=ore(t,n,i);n!==o&&(r=!0,i="buffer",n=o)}var a=t.objectMode?1:n.length;t.length+=a;var A=t.length<t.highWaterMark;if(A||(t.needDrain=!0),t.writing||t.corked){var f=t.lastBufferedRequest;t.lastBufferedRequest={chunk:n,encoding:i,isBuf:r,callback:s,next:null},f?f.next=t.lastBufferedRequest:t.bufferedRequest=t.lastBufferedRequest,t.bufferedRequestCount+=1}else mb(e,t,!1,a,n,i,s);return A}function mb(e,t,r,n,i,s,o){t.writelen=n,t.writecb=o,t.writing=!0,t.sync=!0,t.destroyed?t.onwrite(new $te("write")):r?e._writev(i,t.onwrite):e._write(i,s,t.onwrite),t.sync=!1}function Are(e,t,r,n,i){--t.pendingcb,r?(process.nextTick(i,n),process.nextTick(hh,e,t),e._writableState.errorEmitted=!0,ic(e,n)):(i(n),e._writableState.errorEmitted=!0,ic(e,n),hh(e,t))}function fre(e){e.writing=!1,e.writecb=null,e.length-=e.writelen,e.writelen=0}function ure(e,t){var r=e._writableState,n=r.sync,i=r.writecb;if(typeof i!="function")throw new Xte;if(fre(r),t)Are(e,r,n,t,i);else{var s=GM(r)||e.destroyed;!s&&!r.corked&&!r.bufferProcessing&&r.bufferedRequest&&qM(e,r),n?process.nextTick(PM,e,r,s,i):PM(e,r,s,i)}}function PM(e,t,r,n){r||cre(e,t),t.pendingcb--,n(),hh(e,t)}function cre(e,t){t.length===0&&t.needDrain&&(t.needDrain=!1,e.emit("drain"))}function qM(e,t){t.bufferProcessing=!0;var r=t.bufferedRequest;if(e._writev&&r&&r.next){var n=t.bufferedRequestCount,i=new Array(n),s=t.corkedRequestsFree;s.entry=r;for(var o=0,a=!0;r;)i[o]=r,r.isBuf||(a=!1),r=r.next,o+=1;i.allBuffers=a,mb(e,t,!0,t.length,i,"",s.finish),t.pendingcb++,t.lastBufferedRequest=null,s.next?(t.corkedRequestsFree=s.next,s.next=null):t.corkedRequestsFree=new OM(t),t.bufferedRequestCount=0}else{for(;r;){var A=r.chunk,f=r.encoding,l=r.callback,p=t.objectMode?1:A.length;if(mb(e,t,!1,p,A,f,l),r=r.next,t.bufferedRequestCount--,t.writing)break}r===null&&(t.lastBufferedRequest=null)}t.bufferedRequest=r,t.bufferProcessing=!1}Ar.prototype._write=function(e,t,r){r(new Kte("_write()"))};Ar.prototype._writev=null;Ar.prototype.end=function(e,t,r){var n=this._writableState;return typeof e=="function"?(r=e,e=null,t=null):typeof t=="function"&&(r=t,t=null),e!=null&&this.write(e,t),n.corked&&(n.corked=1,this.uncork()),n.ending||dre(this,n,r),this};Object.defineProperty(Ar.prototype,"writableLength",{enumerable:!1,get:function(){return this._writableState.length}});function GM(e){return e.ending&&e.length===0&&e.bufferedRequest===null&&!e.finished&&!e.writing}function lre(e,t){e._final(function(r){t.pendingcb--,r&&ic(e,r),t.prefinished=!0,e.emit("prefinish"),hh(e,t)})}function hre(e,t){!t.prefinished&&!t.finalCalled&&(typeof e._final=="function"&&!t.destroyed?(t.pendingcb++,t.finalCalled=!0,process.nextTick(lre,e,t)):(t.prefinished=!0,e.emit("prefinish")))}function hh(e,t){var r=GM(t);if(r&&(hre(e,t),t.pendingcb===0&&(t.finished=!0,e.emit("finish"),t.autoDestroy))){var n=e._readableState;(!n||n.autoDestroy&&n.endEmitted)&&e.destroy()}return r}function dre(e,t,r){t.ending=!0,hh(e,t),r&&(t.finished?process.nextTick(r):e.once("finish",r)),t.ended=!0,e.writable=!1}function gre(e,t,r){var n=e.entry;for(e.entry=null;n;){var i=n.callback;t.pendingcb--,i(r),n=n.next}t.corkedRequestsFree.next=e}Object.defineProperty(Ar.prototype,"destroyed",{enumerable:!1,get:function(){return this._writableState===void 0?!1:this._writableState.destroyed},set:function(t){this._writableState&&(this._writableState.destroyed=t)}});Ar.prototype.destroy=Bb.destroy;Ar.prototype._undestroy=Bb.undestroy;Ar.prototype._destroy=function(e,t){t(e)}});var rf=U((HRe,VM)=>{"use strict";var pre=Object.keys||function(e){var t=[];for(var r in e)t.push(r);return t};VM.exports=Ws;var WM=Qb(),Cb=Ib();je()(Ws,WM);for(bb=pre(Cb.prototype),pp=0;pp<bb.length;pp++)Ep=bb[pp],Ws.prototype[Ep]||(Ws.prototype[Ep]=Cb.prototype[Ep]);var bb,Ep,pp;function Ws(e){if(!(this instanceof Ws))return new Ws(e);WM.call(this,e),Cb.call(this,e),this.allowHalfOpen=!0,e&&(e.readable===!1&&(this.readable=!1),e.writable===!1&&(this.writable=!1),e.allowHalfOpen===!1&&(this.allowHalfOpen=!1,this.once("end",Ere)))}Object.defineProperty(Ws.prototype,"writableHighWaterMark",{enumerable:!1,get:function(){return this._writableState.highWaterMark}});Object.defineProperty(Ws.prototype,"writableBuffer",{enumerable:!1,get:function(){return this._writableState&&this._writableState.getBuffer()}});Object.defineProperty(Ws.prototype,"writableLength",{enumerable:!1,get:function(){return this._writableState.length}});function Ere(){this._writableState.ended||process.nextTick(yre,this)}function yre(e){e.end()}Object.defineProperty(Ws.prototype,"destroyed",{enumerable:!1,get:function(){return this._readableState===void 0||this._writableState===void 0?!1:this._readableState.destroyed&&this._writableState.destroyed},set:function(t){this._readableState===void 0||this._writableState===void 0||(this._readableState.destroyed=t,this._writableState.destroyed=t)}})});var at=U((wb,jM)=>{var yp=Gr(),Vs=yp.Buffer;function JM(e,t){for(var r in e)t[r]=e[r]}Vs.from&&Vs.alloc&&Vs.allocUnsafe&&Vs.allocUnsafeSlow?jM.exports=yp:(JM(yp,wb),wb.Buffer=nf);function nf(e,t,r){return Vs(e,t,r)}nf.prototype=Object.create(Vs.prototype);JM(Vs,nf);nf.from=function(e,t,r){if(typeof e=="number")throw new TypeError("Argument must not be a number");return Vs(e,t,r)};nf.alloc=function(e,t,r){if(typeof e!="number")throw new TypeError("Argument must be a number");var n=Vs(e);return t!==void 0?typeof r=="string"?n.fill(t,r):n.fill(t):n.fill(0),n};nf.allocUnsafe=function(e){if(typeof e!="number")throw new TypeError("Argument must be a number");return Vs(e)};nf.allocUnsafeSlow=function(e){if(typeof e!="number")throw new TypeError("Argument must be a number");return yp.SlowBuffer(e)}});var sf=U(KM=>{"use strict";var _b=at().Buffer,zM=_b.isEncoding||function(e){switch(e=""+e,e&&e.toLowerCase()){case"hex":case"utf8":case"utf-8":case"ascii":case"binary":case"base64":case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":case"raw":return!0;default:return!1}};function mre(e){if(!e)return"utf8";for(var t;;)switch(e){case"utf8":case"utf-8":return"utf8";case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return"utf16le";case"latin1":case"binary":return"latin1";case"base64":case"ascii":case"hex":return e;default:if(t)return;e=(""+e).toLowerCase(),t=!0}}function Bre(e){var t=mre(e);if(typeof t!="string"&&(_b.isEncoding===zM||!zM(e)))throw new Error("Unknown encoding: "+e);return t||e}KM.StringDecoder=gh;function gh(e){this.encoding=Bre(e);var t;switch(this.encoding){case"utf16le":this.text=Sre,this.end=_re,t=4;break;case"utf8":this.fillLast=Cre,t=4;break;case"base64":this.text=vre,this.end=Rre,t=3;break;default:this.write=Dre,this.end=Tre;return}this.lastNeed=0,this.lastTotal=0,this.lastChar=_b.allocUnsafe(t)}gh.prototype.write=function(e){if(e.length===0)return"";var t,r;if(this.lastNeed){if(t=this.fillLast(e),t===void 0)return"";r=this.lastNeed,this.lastNeed=0}else r=0;return r<e.length?t?t+this.text(e,r):this.text(e,r):t||""};gh.prototype.end=wre;gh.prototype.text=Qre;gh.prototype.fillLast=function(e){if(this.lastNeed<=e.length)return e.copy(this.lastChar,this.lastTotal-this.lastNeed,0,this.lastNeed),this.lastChar.toString(this.encoding,0,this.lastTotal);e.copy(this.lastChar,this.lastTotal-this.lastNeed,0,e.length),this.lastNeed-=e.length};function Sb(e){return e<=127?0:e>>5===6?2:e>>4===14?3:e>>3===30?4:e>>6===2?-1:-2}function Ire(e,t,r){var n=t.length-1;if(n<r)return 0;var i=Sb(t[n]);return i>=0?(i>0&&(e.lastNeed=i-1),i):--n<r||i===-2?0:(i=Sb(t[n]),i>=0?(i>0&&(e.lastNeed=i-2),i):--n<r||i===-2?0:(i=Sb(t[n]),i>=0?(i>0&&(i===2?i=0:e.lastNeed=i-3),i):0))}function bre(e,t,r){if((t[0]&192)!==128)return e.lastNeed=0,"\uFFFD";if(e.lastNeed>1&&t.length>1){if((t[1]&192)!==128)return e.lastNeed=1,"\uFFFD";if(e.lastNeed>2&&t.length>2&&(t[2]&192)!==128)return e.lastNeed=2,"\uFFFD"}}function Cre(e){var t=this.lastTotal-this.lastNeed,r=bre(this,e,t);if(r!==void 0)return r;if(this.lastNeed<=e.length)return e.copy(this.lastChar,t,0,this.lastNeed),this.lastChar.toString(this.encoding,0,this.lastTotal);e.copy(this.lastChar,t,0,e.length),this.lastNeed-=e.length}function Qre(e,t){var r=Ire(this,e,t);if(!this.lastNeed)return e.toString("utf8",t);this.lastTotal=r;var n=e.length-(r-this.lastNeed);return e.copy(this.lastChar,0,n),e.toString("utf8",t,n)}function wre(e){var t=e&&e.length?this.write(e):"";return this.lastNeed?t+"\uFFFD":t}function Sre(e,t){if((e.length-t)%2===0){var r=e.toString("utf16le",t);if(r){var n=r.charCodeAt(r.length-1);if(n>=55296&&n<=56319)return this.lastNeed=2,this.lastTotal=4,this.lastChar[0]=e[e.length-2],this.lastChar[1]=e[e.length-1],r.slice(0,-1)}return r}return this.lastNeed=1,this.lastTotal=2,this.lastChar[0]=e[e.length-1],e.toString("utf16le",t,e.length-1)}function _re(e){var t=e&&e.length?this.write(e):"";if(this.lastNeed){var r=this.lastTotal-this.lastNeed;return t+this.lastChar.toString("utf16le",0,r)}return t}function vre(e,t){var r=(e.length-t)%3;return r===0?e.toString("base64",t):(this.lastNeed=3-r,this.lastTotal=3,r===1?this.lastChar[0]=e[e.length-1]:(this.lastChar[0]=e[e.length-2],this.lastChar[1]=e[e.length-1]),e.toString("base64",t,e.length-r))}function Rre(e){var t=e&&e.length?this.write(e):"";return this.lastNeed?t+this.lastChar.toString("base64",0,3-this.lastNeed):t}function Dre(e){return e.toString(this.encoding)}function Tre(e){return e&&e.length?this.write(e):""}});var mp=U((GRe,$M)=>{"use strict";var XM=tf().codes.ERR_STREAM_PREMATURE_CLOSE;function Nre(e){var t=!1;return function(){if(!t){t=!0;for(var r=arguments.length,n=new Array(r),i=0;i<r;i++)n[i]=arguments[i];e.apply(this,n)}}}function Mre(){}function Fre(e){return e.setHeader&&typeof e.abort=="function"}function ZM(e,t,r){if(typeof t=="function")return ZM(e,null,t);t||(t={}),r=Nre(r||Mre);var n=t.readable||t.readable!==!1&&e.readable,i=t.writable||t.writable!==!1&&e.writable,s=function(){e.writable||a()},o=e._writableState&&e._writableState.finished,a=function(){i=!1,o=!0,n||r.call(e)},A=e._readableState&&e._readableState.endEmitted,f=function(){n=!1,A=!0,i||r.call(e)},l=function(_){r.call(e,_)},p=function(){var _;if(n&&!A)return(!e._readableState||!e._readableState.ended)&&(_=new XM),r.call(e,_);if(i&&!o)return(!e._writableState||!e._writableState.ended)&&(_=new XM),r.call(e,_)},I=function(){e.req.on("finish",a)};return Fre(e)?(e.on("complete",a),e.on("abort",p),e.req?I():e.on("request",I)):i&&!e._writableState&&(e.on("end",s),e.on("close",s)),e.on("end",f),e.on("finish",a),t.error!==!1&&e.on("error",l),e.on("close",p),function(){e.removeListener("complete",a),e.removeListener("abort",p),e.removeListener("request",I),e.req&&e.req.removeListener("finish",a),e.removeListener("end",s),e.removeListener("close",s),e.removeListener("finish",a),e.removeListener("end",f),e.removeListener("error",l),e.removeListener("close",p)}}$M.exports=ZM});var tF=U((YRe,eF)=>{"use strict";var Bp;function za(e,t,r){return t=kre(t),t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function kre(e){var t=Ure(e,"string");return typeof t=="symbol"?t:String(t)}function Ure(e,t){if(typeof e!="object"||e===null)return e;var r=e[Symbol.toPrimitive];if(r!==void 0){var n=r.call(e,t||"default");if(typeof n!="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(t==="string"?String:Number)(e)}var xre=mp(),Ka=Symbol("lastResolve"),of=Symbol("lastReject"),ph=Symbol("error"),Ip=Symbol("ended"),af=Symbol("lastPromise"),vb=Symbol("handlePromise"),Af=Symbol("stream");function Xa(e,t){return{value:e,done:t}}function Lre(e){var t=e[Ka];if(t!==null){var r=e[Af].read();r!==null&&(e[af]=null,e[Ka]=null,e[of]=null,t(Xa(r,!1)))}}function Pre(e){process.nextTick(Lre,e)}function Ore(e,t){return function(r,n){e.then(function(){if(t[Ip]){r(Xa(void 0,!0));return}t[vb](r,n)},n)}}var Hre=Object.getPrototypeOf(function(){}),qre=Object.setPrototypeOf((Bp={get stream(){return this[Af]},next:function(){var t=this,r=this[ph];if(r!==null)return Promise.reject(r);if(this[Ip])return Promise.resolve(Xa(void 0,!0));if(this[Af].destroyed)return new Promise(function(o,a){process.nextTick(function(){t[ph]?a(t[ph]):o(Xa(void 0,!0))})});var n=this[af],i;if(n)i=new Promise(Ore(n,this));else{var s=this[Af].read();if(s!==null)return Promise.resolve(Xa(s,!1));i=new Promise(this[vb])}return this[af]=i,i}},za(Bp,Symbol.asyncIterator,function(){return this}),za(Bp,"return",function(){var t=this;return new Promise(function(r,n){t[Af].destroy(null,function(i){if(i){n(i);return}r(Xa(void 0,!0))})})}),Bp),Hre),Gre=function(t){var r,n=Object.create(qre,(r={},za(r,Af,{value:t,writable:!0}),za(r,Ka,{value:null,writable:!0}),za(r,of,{value:null,writable:!0}),za(r,ph,{value:null,writable:!0}),za(r,Ip,{value:t._readableState.endEmitted,writable:!0}),za(r,vb,{value:function(s,o){var a=n[Af].read();a?(n[af]=null,n[Ka]=null,n[of]=null,s(Xa(a,!1))):(n[Ka]=s,n[of]=o)},writable:!0}),r));return n[af]=null,xre(t,function(i){if(i&&i.code!=="ERR_STREAM_PREMATURE_CLOSE"){var s=n[of];s!==null&&(n[af]=null,n[Ka]=null,n[of]=null,s(i)),n[ph]=i;return}var o=n[Ka];o!==null&&(n[af]=null,n[Ka]=null,n[of]=null,o(Xa(void 0,!0))),n[Ip]=!0}),t.on("readable",Pre.bind(null,n)),n};eF.exports=Gre});var nF=U((WRe,rF)=>{rF.exports=function(){throw new Error("Readable.from is not available in the browser")}});var Qb=U((JRe,hF)=>{"use strict";hF.exports=Ct;var sc;Ct.ReadableState=aF;var VRe=Zi().EventEmitter,oF=function(t,r){return t.listeners(r).length},yh=FI(),bp=Gr().Buffer,Yre=(typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof self<"u"?self:{}).Uint8Array||function(){};function Wre(e){return bp.from(e)}function Vre(e){return bp.isBuffer(e)||e instanceof Yre}var Rb=Yr(),dt;Rb&&Rb.debuglog?dt=Rb.debuglog("stream"):dt=function(){};var Jre=TM(),Ub=gb(),jre=pb(),zre=jre.getHighWaterMark,Cp=tf().codes,Kre=Cp.ERR_INVALID_ARG_TYPE,Xre=Cp.ERR_STREAM_PUSH_AFTER_EOF,Zre=Cp.ERR_METHOD_NOT_IMPLEMENTED,$re=Cp.ERR_STREAM_UNSHIFT_AFTER_END_EVENT,oc,Db,Tb;je()(Ct,yh);var Eh=Ub.errorOrDestroy,Nb=["error","close","destroy","pause","resume"];function ene(e,t,r){if(typeof e.prependListener=="function")return e.prependListener(t,r);!e._events||!e._events[t]?e.on(t,r):Array.isArray(e._events[t])?e._events[t].unshift(r):e._events[t]=[r,e._events[t]]}function aF(e,t,r){sc=sc||rf(),e=e||{},typeof r!="boolean"&&(r=t instanceof sc),this.objectMode=!!e.objectMode,r&&(this.objectMode=this.objectMode||!!e.readableObjectMode),this.highWaterMark=zre(this,e,"readableHighWaterMark",r),this.buffer=new Jre,this.length=0,this.pipes=null,this.pipesCount=0,this.flowing=null,this.ended=!1,this.endEmitted=!1,this.reading=!1,this.sync=!0,this.needReadable=!1,this.emittedReadable=!1,this.readableListening=!1,this.resumeScheduled=!1,this.paused=!0,this.emitClose=e.emitClose!==!1,this.autoDestroy=!!e.autoDestroy,this.destroyed=!1,this.defaultEncoding=e.defaultEncoding||"utf8",this.awaitDrain=0,this.readingMore=!1,this.decoder=null,this.encoding=null,e.encoding&&(oc||(oc=sf().StringDecoder),this.decoder=new oc(e.encoding),this.encoding=e.encoding)}function Ct(e){if(sc=sc||rf(),!(this instanceof Ct))return new Ct(e);var t=this instanceof sc;this._readableState=new aF(e,this,t),this.readable=!0,e&&(typeof e.read=="function"&&(this._read=e.read),typeof e.destroy=="function"&&(this._destroy=e.destroy)),yh.call(this)}Object.defineProperty(Ct.prototype,"destroyed",{enumerable:!1,get:function(){return this._readableState===void 0?!1:this._readableState.destroyed},set:function(t){this._readableState&&(this._readableState.destroyed=t)}});Ct.prototype.destroy=Ub.destroy;Ct.prototype._undestroy=Ub.undestroy;Ct.prototype._destroy=function(e,t){t(e)};Ct.prototype.push=function(e,t){var r=this._readableState,n;return r.objectMode?n=!0:typeof e=="string"&&(t=t||r.defaultEncoding,t!==r.encoding&&(e=bp.from(e,t),t=""),n=!0),AF(this,e,t,!1,n)};Ct.prototype.unshift=function(e){return AF(this,e,null,!0,!1)};function AF(e,t,r,n,i){dt("readableAddChunk",t);var s=e._readableState;if(t===null)s.reading=!1,nne(e,s);else{var o;if(i||(o=tne(s,t)),o)Eh(e,o);else if(s.objectMode||t&&t.length>0)if(typeof t!="string"&&!s.objectMode&&Object.getPrototypeOf(t)!==bp.prototype&&(t=Wre(t)),n)s.endEmitted?Eh(e,new $re):Mb(e,s,t,!0);else if(s.ended)Eh(e,new Xre);else{if(s.destroyed)return!1;s.reading=!1,s.decoder&&!r?(t=s.decoder.write(t),s.objectMode||t.length!==0?Mb(e,s,t,!1):kb(e,s)):Mb(e,s,t,!1)}else n||(s.reading=!1,kb(e,s))}return!s.ended&&(s.length<s.highWaterMark||s.length===0)}function Mb(e,t,r,n){t.flowing&&t.length===0&&!t.sync?(t.awaitDrain=0,e.emit("data",r)):(t.length+=t.objectMode?1:r.length,n?t.buffer.unshift(r):t.buffer.push(r),t.needReadable&&Qp(e)),kb(e,t)}function tne(e,t){var r;return!Vre(t)&&typeof t!="string"&&t!==void 0&&!e.objectMode&&(r=new Kre("chunk",["string","Buffer","Uint8Array"],t)),r}Ct.prototype.isPaused=function(){return this._readableState.flowing===!1};Ct.prototype.setEncoding=function(e){oc||(oc=sf().StringDecoder);var t=new oc(e);this._readableState.decoder=t,this._readableState.encoding=this._readableState.decoder.encoding;for(var r=this._readableState.buffer.head,n="";r!==null;)n+=t.write(r.data),r=r.next;return this._readableState.buffer.clear(),n!==""&&this._readableState.buffer.push(n),this._readableState.length=n.length,this};var iF=1073741824;function rne(e){return e>=iF?e=iF:(e--,e|=e>>>1,e|=e>>>2,e|=e>>>4,e|=e>>>8,e|=e>>>16,e++),e}function sF(e,t){return e<=0||t.length===0&&t.ended?0:t.objectMode?1:e!==e?t.flowing&&t.length?t.buffer.head.data.length:t.length:(e>t.highWaterMark&&(t.highWaterMark=rne(e)),e<=t.length?e:t.ended?t.length:(t.needReadable=!0,0))}Ct.prototype.read=function(e){dt("read",e),e=parseInt(e,10);var t=this._readableState,r=e;if(e!==0&&(t.emittedReadable=!1),e===0&&t.needReadable&&((t.highWaterMark!==0?t.length>=t.highWaterMark:t.length>0)||t.ended))return dt("read: emitReadable",t.length,t.ended),t.length===0&&t.ended?Fb(this):Qp(this),null;if(e=sF(e,t),e===0&&t.ended)return t.length===0&&Fb(this),null;var n=t.needReadable;dt("need readable",n),(t.length===0||t.length-e<t.highWaterMark)&&(n=!0,dt("length less than watermark",n)),t.ended||t.reading?(n=!1,dt("reading or ended",n)):n&&(dt("do read"),t.reading=!0,t.sync=!0,t.length===0&&(t.needReadable=!0),this._read(t.highWaterMark),t.sync=!1,t.reading||(e=sF(r,t)));var i;return e>0?i=cF(e,t):i=null,i===null?(t.needReadable=t.length<=t.highWaterMark,e=0):(t.length-=e,t.awaitDrain=0),t.length===0&&(t.ended||(t.needReadable=!0),r!==e&&t.ended&&Fb(this)),i!==null&&this.emit("data",i),i};function nne(e,t){if(dt("onEofChunk"),!t.ended){if(t.decoder){var r=t.decoder.end();r&&r.length&&(t.buffer.push(r),t.length+=t.objectMode?1:r.length)}t.ended=!0,t.sync?Qp(e):(t.needReadable=!1,t.emittedReadable||(t.emittedReadable=!0,fF(e)))}}function Qp(e){var t=e._readableState;dt("emitReadable",t.needReadable,t.emittedReadable),t.needReadable=!1,t.emittedReadable||(dt("emitReadable",t.flowing),t.emittedReadable=!0,process.nextTick(fF,e))}function fF(e){var t=e._readableState;dt("emitReadable_",t.destroyed,t.length,t.ended),!t.destroyed&&(t.length||t.ended)&&(e.emit("readable"),t.emittedReadable=!1),t.needReadable=!t.flowing&&!t.ended&&t.length<=t.highWaterMark,xb(e)}function kb(e,t){t.readingMore||(t.readingMore=!0,process.nextTick(ine,e,t))}function ine(e,t){for(;!t.reading&&!t.ended&&(t.length<t.highWaterMark||t.flowing&&t.length===0);){var r=t.length;if(dt("maybeReadMore read 0"),e.read(0),r===t.length)break}t.readingMore=!1}Ct.prototype._read=function(e){Eh(this,new Zre("_read()"))};Ct.prototype.pipe=function(e,t){var r=this,n=this._readableState;switch(n.pipesCount){case 0:n.pipes=e;break;case 1:n.pipes=[n.pipes,e];break;default:n.pipes.push(e);break}n.pipesCount+=1,dt("pipe count=%d opts=%j",n.pipesCount,t);var i=(!t||t.end!==!1)&&e!==process.stdout&&e!==process.stderr,s=i?a:N;n.endEmitted?process.nextTick(s):r.once("end",s),e.on("unpipe",o);function o(O,x){dt("onunpipe"),O===r&&x&&x.hasUnpiped===!1&&(x.hasUnpiped=!0,l())}function a(){dt("onend"),e.end()}var A=sne(r);e.on("drain",A);var f=!1;function l(){dt("cleanup"),e.removeListener("close",S),e.removeListener("finish",_),e.removeListener("drain",A),e.removeListener("error",I),e.removeListener("unpipe",o),r.removeListener("end",a),r.removeListener("end",N),r.removeListener("data",p),f=!0,n.awaitDrain&&(!e._writableState||e._writableState.needDrain)&&A()}r.on("data",p);function p(O){dt("ondata");var x=e.write(O);dt("dest.write",x),x===!1&&((n.pipesCount===1&&n.pipes===e||n.pipesCount>1&&lF(n.pipes,e)!==-1)&&!f&&(dt("false write response, pause",n.awaitDrain),n.awaitDrain++),r.pause())}function I(O){dt("onerror",O),N(),e.removeListener("error",I),oF(e,"error")===0&&Eh(e,O)}ene(e,"error",I);function S(){e.removeListener("finish",_),N()}e.once("close",S);function _(){dt("onfinish"),e.removeListener("close",S),N()}e.once("finish",_);function N(){dt("unpipe"),r.unpipe(e)}return e.emit("pipe",r),n.flowing||(dt("pipe resume"),r.resume()),e};function sne(e){return function(){var r=e._readableState;dt("pipeOnDrain",r.awaitDrain),r.awaitDrain&&r.awaitDrain--,r.awaitDrain===0&&oF(e,"data")&&(r.flowing=!0,xb(e))}}Ct.prototype.unpipe=function(e){var t=this._readableState,r={hasUnpiped:!1};if(t.pipesCount===0)return this;if(t.pipesCount===1)return e&&e!==t.pipes?this:(e||(e=t.pipes),t.pipes=null,t.pipesCount=0,t.flowing=!1,e&&e.emit("unpipe",this,r),this);if(!e){var n=t.pipes,i=t.pipesCount;t.pipes=null,t.pipesCount=0,t.flowing=!1;for(var s=0;s<i;s++)n[s].emit("unpipe",this,{hasUnpiped:!1});return this}var o=lF(t.pipes,e);return o===-1?this:(t.pipes.splice(o,1),t.pipesCount-=1,t.pipesCount===1&&(t.pipes=t.pipes[0]),e.emit("unpipe",this,r),this)};Ct.prototype.on=function(e,t){var r=yh.prototype.on.call(this,e,t),n=this._readableState;return e==="data"?(n.readableListening=this.listenerCount("readable")>0,n.flowing!==!1&&this.resume()):e==="readable"&&!n.endEmitted&&!n.readableListening&&(n.readableListening=n.needReadable=!0,n.flowing=!1,n.emittedReadable=!1,dt("on readable",n.length,n.reading),n.length?Qp(this):n.reading||process.nextTick(one,this)),r};Ct.prototype.addListener=Ct.prototype.on;Ct.prototype.removeListener=function(e,t){var r=yh.prototype.removeListener.call(this,e,t);return e==="readable"&&process.nextTick(uF,this),r};Ct.prototype.removeAllListeners=function(e){var t=yh.prototype.removeAllListeners.apply(this,arguments);return(e==="readable"||e===void 0)&&process.nextTick(uF,this),t};function uF(e){var t=e._readableState;t.readableListening=e.listenerCount("readable")>0,t.resumeScheduled&&!t.paused?t.flowing=!0:e.listenerCount("data")>0&&e.resume()}function one(e){dt("readable nexttick read 0"),e.read(0)}Ct.prototype.resume=function(){var e=this._readableState;return e.flowing||(dt("resume"),e.flowing=!e.readableListening,ane(this,e)),e.paused=!1,this};function ane(e,t){t.resumeScheduled||(t.resumeScheduled=!0,process.nextTick(Ane,e,t))}function Ane(e,t){dt("resume",t.reading),t.reading||e.read(0),t.resumeScheduled=!1,e.emit("resume"),xb(e),t.flowing&&!t.reading&&e.read(0)}Ct.prototype.pause=function(){return dt("call pause flowing=%j",this._readableState.flowing),this._readableState.flowing!==!1&&(dt("pause"),this._readableState.flowing=!1,this.emit("pause")),this._readableState.paused=!0,this};function xb(e){var t=e._readableState;for(dt("flow",t.flowing);t.flowing&&e.read()!==null;);}Ct.prototype.wrap=function(e){var t=this,r=this._readableState,n=!1;e.on("end",function(){if(dt("wrapped end"),r.decoder&&!r.ended){var o=r.decoder.end();o&&o.length&&t.push(o)}t.push(null)}),e.on("data",function(o){if(dt("wrapped data"),r.decoder&&(o=r.decoder.write(o)),!(r.objectMode&&o==null)&&!(!r.objectMode&&(!o||!o.length))){var a=t.push(o);a||(n=!0,e.pause())}});for(var i in e)this[i]===void 0&&typeof e[i]=="function"&&(this[i]=(function(a){return function(){return e[a].apply(e,arguments)}})(i));for(var s=0;s<Nb.length;s++)e.on(Nb[s],this.emit.bind(this,Nb[s]));return this._read=function(o){dt("wrapped _read",o),n&&(n=!1,e.resume())},this};typeof Symbol=="function"&&(Ct.prototype[Symbol.asyncIterator]=function(){return Db===void 0&&(Db=tF()),Db(this)});Object.defineProperty(Ct.prototype,"readableHighWaterMark",{enumerable:!1,get:function(){return this._readableState.highWaterMark}});Object.defineProperty(Ct.prototype,"readableBuffer",{enumerable:!1,get:function(){return this._readableState&&this._readableState.buffer}});Object.defineProperty(Ct.prototype,"readableFlowing",{enumerable:!1,get:function(){return this._readableState.flowing},set:function(t){this._readableState&&(this._readableState.flowing=t)}});Ct._fromList=cF;Object.defineProperty(Ct.prototype,"readableLength",{enumerable:!1,get:function(){return this._readableState.length}});function cF(e,t){if(t.length===0)return null;var r;return t.objectMode?r=t.buffer.shift():!e||e>=t.length?(t.decoder?r=t.buffer.join(""):t.buffer.length===1?r=t.buffer.first():r=t.buffer.concat(t.length),t.buffer.clear()):r=t.buffer.consume(e,t.decoder),r}function Fb(e){var t=e._readableState;dt("endReadable",t.endEmitted),t.endEmitted||(t.ended=!0,process.nextTick(fne,t,e))}function fne(e,t){if(dt("endReadableNT",e.endEmitted,e.length),!e.endEmitted&&e.length===0&&(e.endEmitted=!0,t.readable=!1,t.emit("end"),e.autoDestroy)){var r=t._writableState;(!r||r.autoDestroy&&r.finished)&&t.destroy()}}typeof Symbol=="function"&&(Ct.from=function(e,t){return Tb===void 0&&(Tb=nF()),Tb(Ct,e,t)});function lF(e,t){for(var r=0,n=e.length;r<n;r++)if(e[r]===t)return r;return-1}});var Lb=U((jRe,gF)=>{"use strict";gF.exports=Wo;var wp=tf().codes,une=wp.ERR_METHOD_NOT_IMPLEMENTED,cne=wp.ERR_MULTIPLE_CALLBACK,lne=wp.ERR_TRANSFORM_ALREADY_TRANSFORMING,hne=wp.ERR_TRANSFORM_WITH_LENGTH_0,Sp=rf();je()(Wo,Sp);function dne(e,t){var r=this._transformState;r.transforming=!1;var n=r.writecb;if(n===null)return this.emit("error",new cne);r.writechunk=null,r.writecb=null,t!=null&&this.push(t),n(e);var i=this._readableState;i.reading=!1,(i.needReadable||i.length<i.highWaterMark)&&this._read(i.highWaterMark)}function Wo(e){if(!(this instanceof Wo))return new Wo(e);Sp.call(this,e),this._transformState={afterTransform:dne.bind(this),needTransform:!1,transforming:!1,writecb:null,writechunk:null,writeencoding:null},this._readableState.needReadable=!0,this._readableState.sync=!1,e&&(typeof e.transform=="function"&&(this._transform=e.transform),typeof e.flush=="function"&&(this._flush=e.flush)),this.on("prefinish",gne)}function gne(){var e=this;typeof this._flush=="function"&&!this._readableState.destroyed?this._flush(function(t,r){dF(e,t,r)}):dF(this,null,null)}Wo.prototype.push=function(e,t){return this._transformState.needTransform=!1,Sp.prototype.push.call(this,e,t)};Wo.prototype._transform=function(e,t,r){r(new une("_transform()"))};Wo.prototype._write=function(e,t,r){var n=this._transformState;if(n.writecb=r,n.writechunk=e,n.writeencoding=t,!n.transforming){var i=this._readableState;(n.needTransform||i.needReadable||i.length<i.highWaterMark)&&this._read(i.highWaterMark)}};Wo.prototype._read=function(e){var t=this._transformState;t.writechunk!==null&&!t.transforming?(t.transforming=!0,this._transform(t.writechunk,t.writeencoding,t.afterTransform)):t.needTransform=!0};Wo.prototype._destroy=function(e,t){Sp.prototype._destroy.call(this,e,function(r){t(r)})};function dF(e,t,r){if(t)return e.emit("error",t);if(r!=null&&e.push(r),e._writableState.length)throw new hne;if(e._transformState.transforming)throw new lne;return e.push(null)}});var yF=U((zRe,EF)=>{"use strict";EF.exports=mh;var pF=Lb();je()(mh,pF);function mh(e){if(!(this instanceof mh))return new mh(e);pF.call(this,e)}mh.prototype._transform=function(e,t,r){r(null,e)}});var CF=U((KRe,bF)=>{"use strict";var Pb;function pne(e){var t=!1;return function(){t||(t=!0,e.apply(void 0,arguments))}}var IF=tf().codes,Ene=IF.ERR_MISSING_ARGS,yne=IF.ERR_STREAM_DESTROYED;function mF(e){if(e)throw e}function mne(e){return e.setHeader&&typeof e.abort=="function"}function Bne(e,t,r,n){n=pne(n);var i=!1;e.on("close",function(){i=!0}),Pb===void 0&&(Pb=mp()),Pb(e,{readable:t,writable:r},function(o){if(o)return n(o);i=!0,n()});var s=!1;return function(o){if(!i&&!s){if(s=!0,mne(e))return e.abort();if(typeof e.destroy=="function")return e.destroy();n(o||new yne("pipe"))}}}function BF(e){e()}function Ine(e,t){return e.pipe(t)}function bne(e){return!e.length||typeof e[e.length-1]!="function"?mF:e.pop()}function Cne(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];var n=bne(t);if(Array.isArray(t[0])&&(t=t[0]),t.length<2)throw new Ene("streams");var i,s=t.map(function(o,a){var A=a<t.length-1,f=a>0;return Bne(o,A,f,function(l){i||(i=l),l&&s.forEach(BF),!A&&(s.forEach(BF),n(i))})});return t.reduce(Ine)}bF.exports=Cne});var Hb=U((XRe,QF)=>{QF.exports=di;var Ob=Zi().EventEmitter,Qne=je();Qne(di,Ob);di.Readable=Qb();di.Writable=Ib();di.Duplex=rf();di.Transform=Lb();di.PassThrough=yF();di.finished=mp();di.pipeline=CF();di.Stream=di;function di(){Ob.call(this)}di.prototype.pipe=function(e,t){var r=this;function n(l){e.writable&&e.write(l)===!1&&r.pause&&r.pause()}r.on("data",n);function i(){r.readable&&r.resume&&r.resume()}e.on("drain",i),!e._isStdio&&(!t||t.end!==!1)&&(r.on("end",o),r.on("close",a));var s=!1;function o(){s||(s=!0,e.end())}function a(){s||(s=!0,typeof e.destroy=="function"&&e.destroy())}function A(l){if(f(),Ob.listenerCount(this,"error")===0)throw l}r.on("error",A),e.on("error",A);function f(){r.removeListener("data",n),e.removeListener("drain",i),r.removeListener("end",o),r.removeListener("close",a),r.removeListener("error",A),e.removeListener("error",A),r.removeListener("end",f),r.removeListener("close",f),e.removeListener("close",f)}return r.on("end",f),r.on("close",f),e.on("close",f),e.emit("pipe",r),e}});var qt={};EI(qt,{default:()=>Sne,finished:()=>_F,isDisturbed:()=>DF,isErrored:()=>RF,isReadable:()=>vF});var ac,SF,wF,_p,qb,wne,_F,vF,RF,DF,Sne,ts=uD(()=>{"use strict";ac=hr(Hb());_n(qt,hr(Hb()));SF=ac.default??ac.default??{},wF=ac.finished??SF.finished,_p=e=>!!e&&typeof e.getReader=="function"&&typeof e.cancel=="function",qb=e=>!!e&&typeof e.getWriter=="function"&&typeof e.abort=="function",wne=e=>e instanceof Error?e:e==null?new Error("stream errored"):new Error(String(e)),_F=(e,t,r)=>{let n=t,i=r;if(typeof n=="function"&&(i=n,n={}),!_p(e)&&!qb(e)&&typeof wF=="function")return wF(e,n,i);let s=typeof i=="function"?i:()=>{},o=n?.readable!==!1,a=n?.writable!==!1,A=!1,f=null,l=()=>{A=!0,f!==null&&(clearTimeout(f),f=null)},p=(S=void 0)=>{A||(l(),queueMicrotask(()=>s(S)))},I=()=>{if(A)return;let S=e?._state;if(S==="errored"){p(wne(e?._storedError));return}if(S==="closed"||_p(e)&&!o||qb(e)&&!a){p();return}f=setTimeout(I,0)};return I(),l},vF=e=>_p(e)?e._state==="readable":!!e&&e.readable!==!1&&e.destroyed!==!0,RF=e=>_p(e)||qb(e)?e?._state==="errored":e?.errored!=null,DF=e=>!!(e?.locked||e?.disturbed===!0||e?._disturbed===!0||e?.readableDidRead===!0),Sne={...SF,finished:_F,isReadable:vF,isErrored:RF,isDisturbed:DF}});var TF=U(()=>{});var Qh=U((tDe,XF)=>{var Zb=typeof Map=="function"&&Map.prototype,Gb=Object.getOwnPropertyDescriptor&&Zb?Object.getOwnPropertyDescriptor(Map.prototype,"size"):null,Rp=Zb&&Gb&&typeof Gb.get=="function"?Gb.get:null,NF=Zb&&Map.prototype.forEach,$b=typeof Set=="function"&&Set.prototype,Yb=Object.getOwnPropertyDescriptor&&$b?Object.getOwnPropertyDescriptor(Set.prototype,"size"):null,Dp=$b&&Yb&&typeof Yb.get=="function"?Yb.get:null,MF=$b&&Set.prototype.forEach,_ne=typeof WeakMap=="function"&&WeakMap.prototype,Ih=_ne?WeakMap.prototype.has:null,vne=typeof WeakSet=="function"&&WeakSet.prototype,bh=vne?WeakSet.prototype.has:null,Rne=typeof WeakRef=="function"&&WeakRef.prototype,FF=Rne?WeakRef.prototype.deref:null,Dne=Boolean.prototype.valueOf,Tne=Object.prototype.toString,Nne=Function.prototype.toString,Mne=String.prototype.match,eC=String.prototype.slice,Za=String.prototype.replace,Fne=String.prototype.toUpperCase,kF=String.prototype.toLowerCase,YF=RegExp.prototype.test,UF=Array.prototype.concat,Js=Array.prototype.join,kne=Array.prototype.slice,xF=Math.floor,Jb=typeof BigInt=="function"?BigInt.prototype.valueOf:null,Wb=Object.getOwnPropertySymbols,jb=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?Symbol.prototype.toString:null,Ac=typeof Symbol=="function"&&typeof Symbol.iterator=="object",Ch=typeof Symbol=="function"&&Symbol.toStringTag&&(typeof Symbol.toStringTag===Ac||!0)?Symbol.toStringTag:null,WF=Object.prototype.propertyIsEnumerable,LF=(typeof Reflect=="function"?Reflect.getPrototypeOf:Object.getPrototypeOf)||([].__proto__===Array.prototype?function(e){return e.__proto__}:null);function PF(e,t){if(e===1/0||e===-1/0||e!==e||e&&e>-1e3&&e<1e3||YF.call(/e/,t))return t;var r=/[0-9](?=(?:[0-9]{3})+(?![0-9]))/g;if(typeof e=="number"){var n=e<0?-xF(-e):xF(e);if(n!==e){var i=String(n),s=eC.call(t,i.length+1);return Za.call(i,r,"$&_")+"."+Za.call(Za.call(s,/([0-9]{3})/g,"$&_"),/_$/,"")}}return Za.call(t,r,"$&_")}var zb=TF(),OF=zb.custom,HF=jF(OF)?OF:null,VF={__proto__:null,double:'"',single:"'"},Une={__proto__:null,double:/(["\\])/g,single:/(['\\])/g};XF.exports=function e(t,r,n,i){var s=r||{};if(Vo(s,"quoteStyle")&&!Vo(VF,s.quoteStyle))throw new TypeError('option "quoteStyle" must be "single" or "double"');if(Vo(s,"maxStringLength")&&(typeof s.maxStringLength=="number"?s.maxStringLength<0&&s.maxStringLength!==1/0:s.maxStringLength!==null))throw new TypeError('option "maxStringLength", if provided, must be a positive integer, Infinity, or `null`');var o=Vo(s,"customInspect")?s.customInspect:!0;if(typeof o!="boolean"&&o!=="symbol")throw new TypeError("option \"customInspect\", if provided, must be `true`, `false`, or `'symbol'`");if(Vo(s,"indent")&&s.indent!==null&&s.indent!=="	"&&!(parseInt(s.indent,10)===s.indent&&s.indent>0))throw new TypeError('option "indent" must be "\\t", an integer > 0, or `null`');if(Vo(s,"numericSeparator")&&typeof s.numericSeparator!="boolean")throw new TypeError('option "numericSeparator", if provided, must be `true` or `false`');var a=s.numericSeparator;if(typeof t>"u")return"undefined";if(t===null)return"null";if(typeof t=="boolean")return t?"true":"false";if(typeof t=="string")return KF(t,s);if(typeof t=="number"){if(t===0)return 1/0/t>0?"0":"-0";var A=String(t);return a?PF(t,A):A}if(typeof t=="bigint"){var f=String(t)+"n";return a?PF(t,f):f}var l=typeof s.depth>"u"?5:s.depth;if(typeof n>"u"&&(n=0),n>=l&&l>0&&typeof t=="object")return Kb(t)?"[Array]":"[Object]";var p=eie(s,n);if(typeof i>"u")i=[];else if(zF(i,t)>=0)return"[Circular]";function I(b,c,g){if(c&&(i=kne.call(i),i.push(c)),g){var w={depth:s.depth};return Vo(s,"quoteStyle")&&(w.quoteStyle=s.quoteStyle),e(b,w,n+1,i)}return e(b,s,n+1,i)}if(typeof t=="function"&&!qF(t)){var S=Wne(t),_=vp(t,I);return"[Function"+(S?": "+S:" (anonymous)")+"]"+(_.length>0?" { "+Js.call(_,", ")+" }":"")}if(jF(t)){var N=Ac?Za.call(String(t),/^(Symbol\(.*\))_[^)]*$/,"$1"):jb.call(t);return typeof t=="object"&&!Ac?Bh(N):N}if(Xne(t)){for(var O="<"+kF.call(String(t.nodeName)),x=t.attributes||[],G=0;G<x.length;G++)O+=" "+x[G].name+"="+JF(xne(x[G].value),"double",s);return O+=">",t.childNodes&&t.childNodes.length&&(O+="..."),O+="</"+kF.call(String(t.nodeName))+">",O}if(Kb(t)){if(t.length===0)return"[]";var Y=vp(t,I);return p&&!$ne(Y)?"["+Xb(Y,p)+"]":"[ "+Js.call(Y,", ")+" ]"}if(Pne(t)){var X=vp(t,I);return!("cause"in Error.prototype)&&"cause"in t&&!WF.call(t,"cause")?"{ ["+String(t)+"] "+Js.call(UF.call("[cause]: "+I(t.cause),X),", ")+" }":X.length===0?"["+String(t)+"]":"{ ["+String(t)+"] "+Js.call(X,", ")+" }"}if(typeof t=="object"&&o){if(HF&&typeof t[HF]=="function"&&zb)return zb(t,{depth:l-n});if(o!=="symbol"&&typeof t.inspect=="function")return t.inspect()}if(Vne(t)){var Z=[];return NF&&NF.call(t,function(b,c){Z.push(I(c,t,!0)+" => "+I(b,t))}),GF("Map",Rp.call(t),Z,p)}if(zne(t)){var j=[];return MF&&MF.call(t,function(b){j.push(I(b,t))}),GF("Set",Dp.call(t),j,p)}if(Jne(t))return Vb("WeakMap");if(Kne(t))return Vb("WeakSet");if(jne(t))return Vb("WeakRef");if(Hne(t))return Bh(I(Number(t)));if(Gne(t))return Bh(I(Jb.call(t)));if(qne(t))return Bh(Dne.call(t));if(One(t))return Bh(I(String(t)));if(typeof window<"u"&&t===window)return"{ [object Window] }";if(typeof globalThis<"u"&&t===globalThis||typeof globalThis<"u"&&t===globalThis)return"{ [object globalThis] }";if(!Lne(t)&&!qF(t)){var se=vp(t,I),ie=LF?LF(t)===Object.prototype:t instanceof Object||t.constructor===Object,ce=t instanceof Object?"":"null prototype",H=!ie&&Ch&&Object(t)===t&&Ch in t?eC.call($a(t),8,-1):ce?"Object":"",E=ie||typeof t.constructor!="function"?"":t.constructor.name?t.constructor.name+" ":"",v=E+(H||ce?"["+Js.call(UF.call([],H||[],ce||[]),": ")+"] ":"");return se.length===0?v+"{}":p?v+"{"+Xb(se,p)+"}":v+"{ "+Js.call(se,", ")+" }"}return String(t)};function JF(e,t,r){var n=r.quoteStyle||t,i=VF[n];return i+e+i}function xne(e){return Za.call(String(e),/"/g,"&quot;")}function ff(e){return!Ch||!(typeof e=="object"&&(Ch in e||typeof e[Ch]<"u"))}function Kb(e){return $a(e)==="[object Array]"&&ff(e)}function Lne(e){return $a(e)==="[object Date]"&&ff(e)}function qF(e){return $a(e)==="[object RegExp]"&&ff(e)}function Pne(e){return $a(e)==="[object Error]"&&ff(e)}function One(e){return $a(e)==="[object String]"&&ff(e)}function Hne(e){return $a(e)==="[object Number]"&&ff(e)}function qne(e){return $a(e)==="[object Boolean]"&&ff(e)}function jF(e){if(Ac)return e&&typeof e=="object"&&e instanceof Symbol;if(typeof e=="symbol")return!0;if(!e||typeof e!="object"||!jb)return!1;try{return jb.call(e),!0}catch{}return!1}function Gne(e){if(!e||typeof e!="object"||!Jb)return!1;try{return Jb.call(e),!0}catch{}return!1}var Yne=Object.prototype.hasOwnProperty||function(e){return e in this};function Vo(e,t){return Yne.call(e,t)}function $a(e){return Tne.call(e)}function Wne(e){if(e.name)return e.name;var t=Mne.call(Nne.call(e),/^function\s*([\w$]+)/);return t?t[1]:null}function zF(e,t){if(e.indexOf)return e.indexOf(t);for(var r=0,n=e.length;r<n;r++)if(e[r]===t)return r;return-1}function Vne(e){if(!Rp||!e||typeof e!="object")return!1;try{Rp.call(e);try{Dp.call(e)}catch{return!0}return e instanceof Map}catch{}return!1}function Jne(e){if(!Ih||!e||typeof e!="object")return!1;try{Ih.call(e,Ih);try{bh.call(e,bh)}catch{return!0}return e instanceof WeakMap}catch{}return!1}function jne(e){if(!FF||!e||typeof e!="object")return!1;try{return FF.call(e),!0}catch{}return!1}function zne(e){if(!Dp||!e||typeof e!="object")return!1;try{Dp.call(e);try{Rp.call(e)}catch{return!0}return e instanceof Set}catch{}return!1}function Kne(e){if(!bh||!e||typeof e!="object")return!1;try{bh.call(e,bh);try{Ih.call(e,Ih)}catch{return!0}return e instanceof WeakSet}catch{}return!1}function Xne(e){return!e||typeof e!="object"?!1:typeof HTMLElement<"u"&&e instanceof HTMLElement?!0:typeof e.nodeName=="string"&&typeof e.getAttribute=="function"}function KF(e,t){if(e.length>t.maxStringLength){var r=e.length-t.maxStringLength,n="... "+r+" more character"+(r>1?"s":"");return KF(eC.call(e,0,t.maxStringLength),t)+n}var i=Une[t.quoteStyle||"single"];i.lastIndex=0;var s=Za.call(Za.call(e,i,"\\$1"),/[\x00-\x1f]/g,Zne);return JF(s,"single",t)}function Zne(e){var t=e.charCodeAt(0),r={8:"b",9:"t",10:"n",12:"f",13:"r"}[t];return r?"\\"+r:"\\x"+(t<16?"0":"")+Fne.call(t.toString(16))}function Bh(e){return"Object("+e+")"}function Vb(e){return e+" { ? }"}function GF(e,t,r,n){var i=n?Xb(r,n):Js.call(r,", ");return e+" ("+t+") {"+i+"}"}function $ne(e){for(var t=0;t<e.length;t++)if(zF(e[t],`
-`)>=0)return!1;return!0}function eie(e,t){var r;if(e.indent==="	")r="	";else if(typeof e.indent=="number"&&e.indent>0)r=Js.call(Array(e.indent+1)," ");else return null;return{base:r,prev:Js.call(Array(t+1),r)}}function Xb(e,t){if(e.length===0)return"";var r=`
-`+t.prev+t.base;return r+Js.call(e,","+r)+`
-`+t.prev}function vp(e,t){var r=Kb(e),n=[];if(r){n.length=e.length;for(var i=0;i<e.length;i++)n[i]=Vo(e,i)?t(e[i],e):""}var s=typeof Wb=="function"?Wb(e):[],o;if(Ac){o={};for(var a=0;a<s.length;a++)o["$"+s[a]]=s[a]}for(var A in e)Vo(e,A)&&(r&&String(Number(A))===A&&A<e.length||Ac&&o["$"+A]instanceof Symbol||(YF.call(/[^\w$]/,A)?n.push(t(A,e)+": "+t(e[A],e)):n.push(A+": "+t(e[A],e))));if(typeof Wb=="function")for(var f=0;f<s.length;f++)WF.call(e,s[f])&&n.push("["+t(s[f])+"]: "+t(e[s[f]],e));return n}});var $F=U((rDe,ZF)=>{"use strict";var tie=Qh(),rie=$i(),Tp=function(e,t,r){for(var n=e,i;(i=n.next)!=null;n=i)if(i.key===t)return n.next=i.next,r||(i.next=e.next,e.next=i),i},nie=function(e,t){if(e){var r=Tp(e,t);return r&&r.value}},iie=function(e,t,r){var n=Tp(e,t);n?n.value=r:e.next={key:t,next:e.next,value:r}},sie=function(e,t){return e?!!Tp(e,t):!1},oie=function(e,t){if(e)return Tp(e,t,!0)};ZF.exports=function(){var t,r={assert:function(n){if(!r.has(n))throw new rie("Side channel does not contain "+tie(n))},delete:function(n){var i=t&&t.next,s=oie(t,n);return s&&i&&i===s&&(t=void 0),!!s},get:function(n){return nie(t,n)},has:function(n){return sie(t,n)},set:function(n,i){t||(t={next:void 0}),iie(t,n,i)}};return r}});var tC=U((nDe,t4)=>{"use strict";var aie=Zu(),wh=Ys(),Aie=Qh(),fie=$i(),e4=aie("%Map%",!0),uie=wh("Map.prototype.get",!0),cie=wh("Map.prototype.set",!0),lie=wh("Map.prototype.has",!0),hie=wh("Map.prototype.delete",!0),die=wh("Map.prototype.size",!0);t4.exports=!!e4&&function(){var t,r={assert:function(n){if(!r.has(n))throw new fie("Side channel does not contain "+Aie(n))},delete:function(n){if(t){var i=hie(t,n);return die(t)===0&&(t=void 0),i}return!1},get:function(n){if(t)return uie(t,n)},has:function(n){return t?lie(t,n):!1},set:function(n,i){t||(t=new e4),cie(t,n,i)}};return r}});var n4=U((iDe,r4)=>{"use strict";var gie=Zu(),Mp=Ys(),pie=Qh(),Np=tC(),Eie=$i(),fc=gie("%WeakMap%",!0),yie=Mp("WeakMap.prototype.get",!0),mie=Mp("WeakMap.prototype.set",!0),Bie=Mp("WeakMap.prototype.has",!0),Iie=Mp("WeakMap.prototype.delete",!0);r4.exports=fc?function(){var t,r,n={assert:function(i){if(!n.has(i))throw new Eie("Side channel does not contain "+pie(i))},delete:function(i){if(fc&&i&&(typeof i=="object"||typeof i=="function")){if(t)return Iie(t,i)}else if(Np&&r)return r.delete(i);return!1},get:function(i){return fc&&i&&(typeof i=="object"||typeof i=="function")&&t?yie(t,i):r&&r.get(i)},has:function(i){return fc&&i&&(typeof i=="object"||typeof i=="function")&&t?Bie(t,i):!!r&&r.has(i)},set:function(i,s){fc&&i&&(typeof i=="object"||typeof i=="function")?(t||(t=new fc),mie(t,i,s)):Np&&(r||(r=Np()),r.set(i,s))}};return n}:Np});var rC=U((sDe,i4)=>{"use strict";var bie=$i(),Cie=Qh(),Qie=$F(),wie=tC(),Sie=n4(),_ie=Sie||wie||Qie;i4.exports=function(){var t,r={assert:function(n){if(!r.has(n))throw new bie("Side channel does not contain "+Cie(n))},delete:function(n){return!!t&&t.delete(n)},get:function(n){return t&&t.get(n)},has:function(n){return!!t&&t.has(n)},set:function(n,i){t||(t=_ie()),t.set(n,i)}};return r}});var Fp=U((oDe,s4)=>{"use strict";var vie=String.prototype.replace,Rie=/%20/g,nC={RFC1738:"RFC1738",RFC3986:"RFC3986"};s4.exports={default:nC.RFC3986,formatters:{RFC1738:function(e){return vie.call(e,Rie,"+")},RFC3986:function(e){return String(e)}},RFC1738:nC.RFC1738,RFC3986:nC.RFC3986}});var aC=U((aDe,o4)=>{"use strict";var Die=Fp(),Tie=rC(),iC=Object.prototype.hasOwnProperty,uf=Array.isArray,kp=Tie(),uc=function(t,r){return kp.set(t,r),t},cf=function(t){return kp.has(t)},Sh=function(t){return kp.get(t)},oC=function(t,r){kp.set(t,r)},js=(function(){for(var e=[],t=0;t<256;++t)e[e.length]="%"+((t<16?"0":"")+t.toString(16)).toUpperCase();return e})(),Nie=function(t){for(;t.length>1;){var r=t.pop(),n=r.obj[r.prop];if(uf(n)){for(var i=[],s=0;s<n.length;++s)typeof n[s]<"u"&&(i[i.length]=n[s]);r.obj[r.prop]=i}}},_h=function(t,r){for(var n=r&&r.plainObjects?{__proto__:null}:{},i=0;i<t.length;++i)typeof t[i]<"u"&&(n[i]=t[i]);return n},Mie=function e(t,r,n){if(!r)return t;if(typeof r!="object"&&typeof r!="function"){if(uf(t)){var i=t.length;if(n&&typeof n.arrayLimit=="number"&&i>n.arrayLimit)return uc(_h(t.concat(r),n),i);t[i]=r}else if(t&&typeof t=="object")if(cf(t)){var s=Sh(t)+1;t[s]=r,oC(t,s)}else{if(n&&n.strictMerge)return[t,r];(n&&(n.plainObjects||n.allowPrototypes)||!iC.call(Object.prototype,r))&&(t[r]=!0)}else return[t,r];return t}if(!t||typeof t!="object"){if(cf(r)){for(var o=Object.keys(r),a=n&&n.plainObjects?{__proto__:null,0:t}:{0:t},A=0;A<o.length;A++){var f=parseInt(o[A],10);a[f+1]=r[o[A]]}return uc(a,Sh(r)+1)}var l=[t].concat(r);return n&&typeof n.arrayLimit=="number"&&l.length>n.arrayLimit?uc(_h(l,n),l.length-1):l}var p=t;return uf(t)&&!uf(r)&&(p=_h(t,n)),uf(t)&&uf(r)?(r.forEach(function(I,S){if(iC.call(t,S)){var _=t[S];_&&typeof _=="object"&&I&&typeof I=="object"?t[S]=e(_,I,n):t[t.length]=I}else t[S]=I}),t):Object.keys(r).reduce(function(I,S){var _=r[S];if(iC.call(I,S)?I[S]=e(I[S],_,n):I[S]=_,cf(r)&&!cf(I)&&uc(I,Sh(r)),cf(I)){var N=parseInt(S,10);String(N)===S&&N>=0&&N>Sh(I)&&oC(I,N)}return I},p)},Fie=function(t,r){return Object.keys(r).reduce(function(n,i){return n[i]=r[i],n},t)},kie=function(e,t,r){var n=e.replace(/\+/g," ");if(r==="iso-8859-1")return n.replace(/%[0-9a-f]{2}/gi,unescape);try{return decodeURIComponent(n)}catch{return n}},sC=1024,Uie=function(t,r,n,i,s){if(t.length===0)return t;var o=t;if(typeof t=="symbol"?o=Symbol.prototype.toString.call(t):typeof t!="string"&&(o=String(t)),n==="iso-8859-1")return escape(o).replace(/%u[0-9a-f]{4}/gi,function(S){return"%26%23"+parseInt(S.slice(2),16)+"%3B"});for(var a="",A=0;A<o.length;A+=sC){for(var f=o.length>=sC?o.slice(A,A+sC):o,l=[],p=0;p<f.length;++p){var I=f.charCodeAt(p);if(I===45||I===46||I===95||I===126||I>=48&&I<=57||I>=65&&I<=90||I>=97&&I<=122||s===Die.RFC1738&&(I===40||I===41)){l[l.length]=f.charAt(p);continue}if(I<128){l[l.length]=js[I];continue}if(I<2048){l[l.length]=js[192|I>>6]+js[128|I&63];continue}if(I<55296||I>=57344){l[l.length]=js[224|I>>12]+js[128|I>>6&63]+js[128|I&63];continue}p+=1,I=65536+((I&1023)<<10|f.charCodeAt(p)&1023),l[l.length]=js[240|I>>18]+js[128|I>>12&63]+js[128|I>>6&63]+js[128|I&63]}a+=l.join("")}return a},xie=function(t){for(var r=[{obj:{o:t},prop:"o"}],n=[],i=0;i<r.length;++i)for(var s=r[i],o=s.obj[s.prop],a=Object.keys(o),A=0;A<a.length;++A){var f=a[A],l=o[f];typeof l=="object"&&l!==null&&n.indexOf(l)===-1&&(r[r.length]={obj:o,prop:f},n[n.length]=l)}return Nie(r),t},Lie=function(t){return Object.prototype.toString.call(t)==="[object RegExp]"},Pie=function(t){return!t||typeof t!="object"?!1:!!(t.constructor&&t.constructor.isBuffer&&t.constructor.isBuffer(t))},Oie=function(t,r,n,i){if(cf(t)){var s=Sh(t)+1;return t[s]=r,oC(t,s),t}var o=[].concat(t,r);return o.length>n?uc(_h(o,{plainObjects:i}),o.length-1):o},Hie=function(t,r){if(uf(t)){for(var n=[],i=0;i<t.length;i+=1)n[n.length]=r(t[i]);return n}return r(t)};o4.exports={arrayToObject:_h,assign:Fie,combine:Oie,compact:xie,decode:kie,encode:Uie,isBuffer:Pie,isOverflow:cf,isRegExp:Lie,markOverflow:uc,maybeMap:Hie,merge:Mie}});var l4=U((ADe,c4)=>{"use strict";var A4=rC(),Up=aC(),vh=Fp(),qie=Object.prototype.hasOwnProperty,f4={brackets:function(t){return t+"[]"},comma:"comma",indices:function(t,r){return t+"["+r+"]"},repeat:function(t){return t}},zs=Array.isArray,Gie=Array.prototype.push,u4=function(e,t){Gie.apply(e,zs(t)?t:[t])},Yie=Date.prototype.toISOString,a4=vh.default,Sr={addQueryPrefix:!1,allowDots:!1,allowEmptyArrays:!1,arrayFormat:"indices",charset:"utf-8",charsetSentinel:!1,commaRoundTrip:!1,delimiter:"&",encode:!0,encodeDotInKeys:!1,encoder:Up.encode,encodeValuesOnly:!1,filter:void 0,format:a4,formatter:vh.formatters[a4],indices:!1,serializeDate:function(t){return Yie.call(t)},skipNulls:!1,strictNullHandling:!1},Wie=function(t){return typeof t=="string"||typeof t=="number"||typeof t=="boolean"||typeof t=="symbol"||typeof t=="bigint"},AC={},Vie=function e(t,r,n,i,s,o,a,A,f,l,p,I,S,_,N,O,x,G){for(var Y=t,X=G,Z=0,j=!1;(X=X.get(AC))!==void 0&&!j;){var se=X.get(t);if(Z+=1,typeof se<"u"){if(se===Z)throw new RangeError("Cyclic object value");j=!0}typeof X.get(AC)>"u"&&(Z=0)}if(typeof l=="function"?Y=l(r,Y):Y instanceof Date?Y=S(Y):n==="comma"&&zs(Y)&&(Y=Up.maybeMap(Y,function(D){return D instanceof Date?S(D):D})),Y===null){if(o)return f&&!O?f(r,Sr.encoder,x,"key",_):r;Y=""}if(Wie(Y)||Up.isBuffer(Y)){if(f){var ie=O?r:f(r,Sr.encoder,x,"key",_);return[N(ie)+"="+N(f(Y,Sr.encoder,x,"value",_))]}return[N(r)+"="+N(String(Y))]}var ce=[];if(typeof Y>"u")return ce;var H;if(n==="comma"&&zs(Y))O&&f&&(Y=Up.maybeMap(Y,f)),H=[{value:Y.length>0?Y.join(",")||null:void 0}];else if(zs(l))H=l;else{var E=Object.keys(Y);H=p?E.sort(p):E}var v=A?String(r).replace(/\./g,"%2E"):String(r),b=i&&zs(Y)&&Y.length===1?v+"[]":v;if(s&&zs(Y)&&Y.length===0)return b+"[]";for(var c=0;c<H.length;++c){var g=H[c],w=typeof g=="object"&&g&&typeof g.value<"u"?g.value:Y[g];if(!(a&&w===null)){var R=I&&A?String(g).replace(/\./g,"%2E"):String(g),C=zs(Y)?typeof n=="function"?n(b,R):b:b+(I?"."+R:"["+R+"]");G.set(t,Z);var h=A4();h.set(AC,G),u4(ce,e(w,C,n,i,s,o,a,A,n==="comma"&&O&&zs(Y)?null:f,l,p,I,S,_,N,O,x,h))}}return ce},Jie=function(t){if(!t)return Sr;if(typeof t.allowEmptyArrays<"u"&&typeof t.allowEmptyArrays!="boolean")throw new TypeError("`allowEmptyArrays` option can only be `true` or `false`, when provided");if(typeof t.encodeDotInKeys<"u"&&typeof t.encodeDotInKeys!="boolean")throw new TypeError("`encodeDotInKeys` option can only be `true` or `false`, when provided");if(t.encoder!==null&&typeof t.encoder<"u"&&typeof t.encoder!="function")throw new TypeError("Encoder has to be a function.");var r=t.charset||Sr.charset;if(typeof t.charset<"u"&&t.charset!=="utf-8"&&t.charset!=="iso-8859-1")throw new TypeError("The charset option must be either utf-8, iso-8859-1, or undefined");var n=vh.default;if(typeof t.format<"u"){if(!qie.call(vh.formatters,t.format))throw new TypeError("Unknown format option provided.");n=t.format}var i=vh.formatters[n],s=Sr.filter;(typeof t.filter=="function"||zs(t.filter))&&(s=t.filter);var o;if(t.arrayFormat in f4?o=t.arrayFormat:"indices"in t?o=t.indices?"indices":"repeat":o=Sr.arrayFormat,"commaRoundTrip"in t&&typeof t.commaRoundTrip!="boolean")throw new TypeError("`commaRoundTrip` must be a boolean, or absent");var a=typeof t.allowDots>"u"?t.encodeDotInKeys===!0?!0:Sr.allowDots:!!t.allowDots;return{addQueryPrefix:typeof t.addQueryPrefix=="boolean"?t.addQueryPrefix:Sr.addQueryPrefix,allowDots:a,allowEmptyArrays:typeof t.allowEmptyArrays=="boolean"?!!t.allowEmptyArrays:Sr.allowEmptyArrays,arrayFormat:o,charset:r,charsetSentinel:typeof t.charsetSentinel=="boolean"?t.charsetSentinel:Sr.charsetSentinel,commaRoundTrip:!!t.commaRoundTrip,delimiter:typeof t.delimiter>"u"?Sr.delimiter:t.delimiter,encode:typeof t.encode=="boolean"?t.encode:Sr.encode,encodeDotInKeys:typeof t.encodeDotInKeys=="boolean"?t.encodeDotInKeys:Sr.encodeDotInKeys,encoder:typeof t.encoder=="function"?t.encoder:Sr.encoder,encodeValuesOnly:typeof t.encodeValuesOnly=="boolean"?t.encodeValuesOnly:Sr.encodeValuesOnly,filter:s,format:n,formatter:i,serializeDate:typeof t.serializeDate=="function"?t.serializeDate:Sr.serializeDate,skipNulls:typeof t.skipNulls=="boolean"?t.skipNulls:Sr.skipNulls,sort:typeof t.sort=="function"?t.sort:null,strictNullHandling:typeof t.strictNullHandling=="boolean"?t.strictNullHandling:Sr.strictNullHandling}};c4.exports=function(e,t){var r=e,n=Jie(t),i,s;typeof n.filter=="function"?(s=n.filter,r=s("",r)):zs(n.filter)&&(s=n.filter,i=s);var o=[];if(typeof r!="object"||r===null)return"";var a=f4[n.arrayFormat],A=a==="comma"&&n.commaRoundTrip;i||(i=Object.keys(r)),n.sort&&i.sort(n.sort);for(var f=A4(),l=0;l<i.length;++l){var p=i[l],I=r[p];n.skipNulls&&I===null||u4(o,Vie(I,p,a,A,n.allowEmptyArrays,n.strictNullHandling,n.skipNulls,n.encodeDotInKeys,n.encode?n.encoder:null,n.filter,n.sort,n.allowDots,n.serializeDate,n.format,n.formatter,n.encodeValuesOnly,n.charset,f))}var S=o.join(n.delimiter),_=n.addQueryPrefix===!0?"?":"";return n.charsetSentinel&&(n.charset==="iso-8859-1"?_+="utf8=%26%2310003%3B&":_+="utf8=%E2%9C%93&"),S.length>0?_+S:""}});var g4=U((fDe,d4)=>{"use strict";var Ks=aC(),xp=Object.prototype.hasOwnProperty,fC=Array.isArray,sr={allowDots:!1,allowEmptyArrays:!1,allowPrototypes:!1,allowSparse:!1,arrayLimit:20,charset:"utf-8",charsetSentinel:!1,comma:!1,decodeDotInKeys:!1,decoder:Ks.decode,delimiter:"&",depth:5,duplicates:"combine",ignoreQueryPrefix:!1,interpretNumericEntities:!1,parameterLimit:1e3,parseArrays:!0,plainObjects:!1,strictDepth:!1,strictMerge:!0,strictNullHandling:!1,throwOnLimitExceeded:!1},jie=function(e){return e.replace(/&#(\d+);/g,function(t,r){return String.fromCharCode(parseInt(r,10))})},h4=function(e,t,r){if(e&&typeof e=="string"&&t.comma&&e.indexOf(",")>-1)return e.split(",");if(t.throwOnLimitExceeded&&r>=t.arrayLimit)throw new RangeError("Array limit exceeded. Only "+t.arrayLimit+" element"+(t.arrayLimit===1?"":"s")+" allowed in an array.");return e},zie="utf8=%26%2310003%3B",Kie="utf8=%E2%9C%93",Xie=function(t,r){var n={__proto__:null},i=r.ignoreQueryPrefix?t.replace(/^\?/,""):t;i=i.replace(/%5B/gi,"[").replace(/%5D/gi,"]");var s=r.parameterLimit===1/0?void 0:r.parameterLimit,o=i.split(r.delimiter,r.throwOnLimitExceeded?s+1:s);if(r.throwOnLimitExceeded&&o.length>s)throw new RangeError("Parameter limit exceeded. Only "+s+" parameter"+(s===1?"":"s")+" allowed.");var a=-1,A,f=r.charset;if(r.charsetSentinel)for(A=0;A<o.length;++A)o[A].indexOf("utf8=")===0&&(o[A]===Kie?f="utf-8":o[A]===zie&&(f="iso-8859-1"),a=A,A=o.length);for(A=0;A<o.length;++A)if(A!==a){var l=o[A],p=l.indexOf("]="),I=p===-1?l.indexOf("="):p+1,S,_;if(I===-1?(S=r.decoder(l,sr.decoder,f,"key"),_=r.strictNullHandling?null:""):(S=r.decoder(l.slice(0,I),sr.decoder,f,"key"),S!==null&&(_=Ks.maybeMap(h4(l.slice(I+1),r,fC(n[S])?n[S].length:0),function(O){return r.decoder(O,sr.decoder,f,"value")}))),_&&r.interpretNumericEntities&&f==="iso-8859-1"&&(_=jie(String(_))),l.indexOf("[]=")>-1&&(_=fC(_)?[_]:_),r.comma&&fC(_)&&_.length>r.arrayLimit){if(r.throwOnLimitExceeded)throw new RangeError("Array limit exceeded. Only "+r.arrayLimit+" element"+(r.arrayLimit===1?"":"s")+" allowed in an array.");_=Ks.combine([],_,r.arrayLimit,r.plainObjects)}if(S!==null){var N=xp.call(n,S);N&&(r.duplicates==="combine"||l.indexOf("[]=")>-1)?n[S]=Ks.combine(n[S],_,r.arrayLimit,r.plainObjects):(!N||r.duplicates==="last")&&(n[S]=_)}}return n},Zie=function(e,t,r,n){var i=0;if(e.length>0&&e[e.length-1]==="[]"){var s=e.slice(0,-1).join("");i=Array.isArray(t)&&t[s]?t[s].length:0}for(var o=n?t:h4(t,r,i),a=e.length-1;a>=0;--a){var A,f=e[a];if(f==="[]"&&r.parseArrays)Ks.isOverflow(o)?A=o:A=r.allowEmptyArrays&&(o===""||r.strictNullHandling&&o===null)?[]:Ks.combine([],o,r.arrayLimit,r.plainObjects);else{A=r.plainObjects?{__proto__:null}:{};var l=f.charAt(0)==="["&&f.charAt(f.length-1)==="]"?f.slice(1,-1):f,p=r.decodeDotInKeys?l.replace(/%2E/g,"."):l,I=parseInt(p,10),S=!isNaN(I)&&f!==p&&String(I)===p&&I>=0&&r.parseArrays;if(!r.parseArrays&&p==="")A={0:o};else if(S&&I<r.arrayLimit)A=[],A[I]=o;else{if(S&&r.throwOnLimitExceeded)throw new RangeError("Array limit exceeded. Only "+r.arrayLimit+" element"+(r.arrayLimit===1?"":"s")+" allowed in an array.");S?(A[I]=o,Ks.markOverflow(A,I)):p!=="__proto__"&&(A[p]=o)}}o=A}return o},$ie=function(t,r){var n=r.allowDots?t.replace(/\.([^.[]+)/g,"[$1]"):t;if(r.depth<=0)return!r.plainObjects&&xp.call(Object.prototype,n)&&!r.allowPrototypes?void 0:[n];var i=/(\[[^[\]]*])/,s=/(\[[^[\]]*])/g,o=i.exec(n),a=o?n.slice(0,o.index):n,A=[];if(a){if(!r.plainObjects&&xp.call(Object.prototype,a)&&!r.allowPrototypes)return;A[A.length]=a}for(var f=0;(o=s.exec(n))!==null&&f<r.depth;){f+=1;var l=o[1].slice(1,-1);if(!r.plainObjects&&xp.call(Object.prototype,l)&&!r.allowPrototypes)return;A[A.length]=o[1]}if(o){if(r.strictDepth===!0)throw new RangeError("Input depth exceeded depth option of "+r.depth+" and strictDepth is true");A[A.length]="["+n.slice(o.index)+"]"}return A},ese=function(t,r,n,i){if(t){var s=$ie(t,n);if(s)return Zie(s,r,n,i)}},tse=function(t){if(!t)return sr;if(typeof t.allowEmptyArrays<"u"&&typeof t.allowEmptyArrays!="boolean")throw new TypeError("`allowEmptyArrays` option can only be `true` or `false`, when provided");if(typeof t.decodeDotInKeys<"u"&&typeof t.decodeDotInKeys!="boolean")throw new TypeError("`decodeDotInKeys` option can only be `true` or `false`, when provided");if(t.decoder!==null&&typeof t.decoder<"u"&&typeof t.decoder!="function")throw new TypeError("Decoder has to be a function.");if(typeof t.charset<"u"&&t.charset!=="utf-8"&&t.charset!=="iso-8859-1")throw new TypeError("The charset option must be either utf-8, iso-8859-1, or undefined");if(typeof t.throwOnLimitExceeded<"u"&&typeof t.throwOnLimitExceeded!="boolean")throw new TypeError("`throwOnLimitExceeded` option must be a boolean");var r=typeof t.charset>"u"?sr.charset:t.charset,n=typeof t.duplicates>"u"?sr.duplicates:t.duplicates;if(n!=="combine"&&n!=="first"&&n!=="last")throw new TypeError("The duplicates option must be either combine, first, or last");var i=typeof t.allowDots>"u"?t.decodeDotInKeys===!0?!0:sr.allowDots:!!t.allowDots;return{allowDots:i,allowEmptyArrays:typeof t.allowEmptyArrays=="boolean"?!!t.allowEmptyArrays:sr.allowEmptyArrays,allowPrototypes:typeof t.allowPrototypes=="boolean"?t.allowPrototypes:sr.allowPrototypes,allowSparse:typeof t.allowSparse=="boolean"?t.allowSparse:sr.allowSparse,arrayLimit:typeof t.arrayLimit=="number"?t.arrayLimit:sr.arrayLimit,charset:r,charsetSentinel:typeof t.charsetSentinel=="boolean"?t.charsetSentinel:sr.charsetSentinel,comma:typeof t.comma=="boolean"?t.comma:sr.comma,decodeDotInKeys:typeof t.decodeDotInKeys=="boolean"?t.decodeDotInKeys:sr.decodeDotInKeys,decoder:typeof t.decoder=="function"?t.decoder:sr.decoder,delimiter:typeof t.delimiter=="string"||Ks.isRegExp(t.delimiter)?t.delimiter:sr.delimiter,depth:typeof t.depth=="number"||t.depth===!1?+t.depth:sr.depth,duplicates:n,ignoreQueryPrefix:t.ignoreQueryPrefix===!0,interpretNumericEntities:typeof t.interpretNumericEntities=="boolean"?t.interpretNumericEntities:sr.interpretNumericEntities,parameterLimit:typeof t.parameterLimit=="number"?t.parameterLimit:sr.parameterLimit,parseArrays:t.parseArrays!==!1,plainObjects:typeof t.plainObjects=="boolean"?t.plainObjects:sr.plainObjects,strictDepth:typeof t.strictDepth=="boolean"?!!t.strictDepth:sr.strictDepth,strictMerge:typeof t.strictMerge=="boolean"?!!t.strictMerge:sr.strictMerge,strictNullHandling:typeof t.strictNullHandling=="boolean"?t.strictNullHandling:sr.strictNullHandling,throwOnLimitExceeded:typeof t.throwOnLimitExceeded=="boolean"?t.throwOnLimitExceeded:!1}};d4.exports=function(e,t){var r=tse(t);if(e===""||e===null||typeof e>"u")return r.plainObjects?{__proto__:null}:{};for(var n=typeof e=="string"?Xie(e,r):e,i=r.plainObjects?{__proto__:null}:{},s=Object.keys(n),o=0;o<s.length;++o){var a=s[o],A=ese(a,n[a],r,typeof e=="string");i=Ks.merge(i,A,r)}return r.allowSparse===!0?i:Ks.compact(i)}});var E4=U((uDe,p4)=>{"use strict";var rse=l4(),nse=g4(),ise=Fp();p4.exports={formats:ise,parse:nse,stringify:rse}});var I4=U(lc=>{"use strict";var sse=DI();function gi(){this.protocol=null,this.slashes=null,this.auth=null,this.host=null,this.port=null,this.hostname=null,this.hash=null,this.search=null,this.query=null,this.pathname=null,this.path=null,this.href=null}var ose=/^([a-z0-9.+-]+:)/i,ase=/:[0-9]*$/,Ase=/^(\/\/?(?!\/)[^?\s]*)(\?[^\s]*)?$/,fse=["<",">",'"',"`"," ","\r",`
-`,"	"],use=["{","}","|","\\","^","`"].concat(fse),uC=["'"].concat(use),y4=["%","/","?",";","#"].concat(uC),m4=["/","?","#"],cse=255,B4=/^[+a-z0-9A-Z_-]{0,63}$/,lse=/^([+a-z0-9A-Z_-]{0,63})(.*)$/,hse={javascript:!0,"javascript:":!0},cC={javascript:!0,"javascript:":!0},cc={http:!0,https:!0,ftp:!0,gopher:!0,file:!0,"http:":!0,"https:":!0,"ftp:":!0,"gopher:":!0,"file:":!0},lC=E4();function Rh(e,t,r){if(e&&typeof e=="object"&&e instanceof gi)return e;var n=new gi;return n.parse(e,t,r),n}gi.prototype.parse=function(e,t,r){if(typeof e!="string")throw new TypeError("Parameter 'url' must be a string, not "+typeof e);var n=e.indexOf("?"),i=n!==-1&&n<e.indexOf("#")?"?":"#",s=e.split(i),o=/\\/g;s[0]=s[0].replace(o,"/"),e=s.join(i);var a=e;if(a=a.trim(),!r&&e.split("#").length===1){var A=Ase.exec(a);if(A)return this.path=a,this.href=a,this.pathname=A[1],A[2]?(this.search=A[2],t?this.query=lC.parse(this.search.substr(1)):this.query=this.search.substr(1)):t&&(this.search="",this.query={}),this}var f=ose.exec(a);if(f){f=f[0];var l=f.toLowerCase();this.protocol=l,a=a.substr(f.length)}if(r||f||a.match(/^\/\/[^@/]+@[^@/]+/)){var p=a.substr(0,2)==="//";p&&!(f&&cC[f])&&(a=a.substr(2),this.slashes=!0)}if(!cC[f]&&(p||f&&!cc[f])){for(var I=-1,S=0;S<m4.length;S++){var _=a.indexOf(m4[S]);_!==-1&&(I===-1||_<I)&&(I=_)}var N,O;I===-1?O=a.lastIndexOf("@"):O=a.lastIndexOf("@",I),O!==-1&&(N=a.slice(0,O),a=a.slice(O+1),this.auth=decodeURIComponent(N)),I=-1;for(var S=0;S<y4.length;S++){var _=a.indexOf(y4[S]);_!==-1&&(I===-1||_<I)&&(I=_)}I===-1&&(I=a.length),this.host=a.slice(0,I),a=a.slice(I),this.parseHost(),this.hostname=this.hostname||"";var x=this.hostname[0]==="["&&this.hostname[this.hostname.length-1]==="]";if(!x)for(var G=this.hostname.split(/\./),S=0,Y=G.length;S<Y;S++){var X=G[S];if(X&&!X.match(B4)){for(var Z="",j=0,se=X.length;j<se;j++)X.charCodeAt(j)>127?Z+="x":Z+=X[j];if(!Z.match(B4)){var ie=G.slice(0,S),ce=G.slice(S+1),H=X.match(lse);H&&(ie.push(H[1]),ce.unshift(H[2])),ce.length&&(a="/"+ce.join(".")+a),this.hostname=ie.join(".");break}}}this.hostname.length>cse?this.hostname="":this.hostname=this.hostname.toLowerCase(),x||(this.hostname=sse.toASCII(this.hostname));var E=this.port?":"+this.port:"",v=this.hostname||"";this.host=v+E,this.href+=this.host,x&&(this.hostname=this.hostname.substr(1,this.hostname.length-2),a[0]!=="/"&&(a="/"+a))}if(!hse[l])for(var S=0,Y=uC.length;S<Y;S++){var b=uC[S];if(a.indexOf(b)!==-1){var c=encodeURIComponent(b);c===b&&(c=escape(b)),a=a.split(b).join(c)}}var g=a.indexOf("#");g!==-1&&(this.hash=a.substr(g),a=a.slice(0,g));var w=a.indexOf("?");if(w!==-1?(this.search=a.substr(w),this.query=a.substr(w+1),t&&(this.query=lC.parse(this.query)),a=a.slice(0,w)):t&&(this.search="",this.query={}),a&&(this.pathname=a),cc[l]&&this.hostname&&!this.pathname&&(this.pathname="/"),this.pathname||this.search){var E=this.pathname||"",R=this.search||"";this.path=E+R}return this.href=this.format(),this};function dse(e){return typeof e=="string"&&(e=Rh(e)),e instanceof gi?e.format():gi.prototype.format.call(e)}gi.prototype.format=function(){var e=this.auth||"";e&&(e=encodeURIComponent(e),e=e.replace(/%3A/i,":"),e+="@");var t=this.protocol||"",r=this.pathname||"",n=this.hash||"",i=!1,s="";this.host?i=e+this.host:this.hostname&&(i=e+(this.hostname.indexOf(":")===-1?this.hostname:"["+this.hostname+"]"),this.port&&(i+=":"+this.port)),this.query&&typeof this.query=="object"&&Object.keys(this.query).length&&(s=lC.stringify(this.query,{arrayFormat:"repeat",addQueryPrefix:!1}));var o=this.search||s&&"?"+s||"";return t&&t.substr(-1)!==":"&&(t+=":"),this.slashes||(!t||cc[t])&&i!==!1?(i="//"+(i||""),r&&r.charAt(0)!=="/"&&(r="/"+r)):i||(i=""),n&&n.charAt(0)!=="#"&&(n="#"+n),o&&o.charAt(0)!=="?"&&(o="?"+o),r=r.replace(/[?#]/g,function(a){return encodeURIComponent(a)}),o=o.replace("#","%23"),t+i+r+o+n};function gse(e,t){return Rh(e,!1,!0).resolve(t)}gi.prototype.resolve=function(e){return this.resolveObject(Rh(e,!1,!0)).format()};function pse(e,t){return e?Rh(e,!1,!0).resolveObject(t):t}gi.prototype.resolveObject=function(e){if(typeof e=="string"){var t=new gi;t.parse(e,!1,!0),e=t}for(var r=new gi,n=Object.keys(this),i=0;i<n.length;i++){var s=n[i];r[s]=this[s]}if(r.hash=e.hash,e.href==="")return r.href=r.format(),r;if(e.slashes&&!e.protocol){for(var o=Object.keys(e),a=0;a<o.length;a++){var A=o[a];A!=="protocol"&&(r[A]=e[A])}return cc[r.protocol]&&r.hostname&&!r.pathname&&(r.pathname="/",r.path=r.pathname),r.href=r.format(),r}if(e.protocol&&e.protocol!==r.protocol){if(!cc[e.protocol]){for(var f=Object.keys(e),l=0;l<f.length;l++){var p=f[l];r[p]=e[p]}return r.href=r.format(),r}if(r.protocol=e.protocol,!e.host&&!cC[e.protocol]){for(var Y=(e.pathname||"").split("/");Y.length&&!(e.host=Y.shift()););e.host||(e.host=""),e.hostname||(e.hostname=""),Y[0]!==""&&Y.unshift(""),Y.length<2&&Y.unshift(""),r.pathname=Y.join("/")}else r.pathname=e.pathname;if(r.search=e.search,r.query=e.query,r.host=e.host||"",r.auth=e.auth,r.hostname=e.hostname||e.host,r.port=e.port,r.pathname||r.search){var I=r.pathname||"",S=r.search||"";r.path=I+S}return r.slashes=r.slashes||e.slashes,r.href=r.format(),r}var _=r.pathname&&r.pathname.charAt(0)==="/",N=e.host||e.pathname&&e.pathname.charAt(0)==="/",O=N||_||r.host&&e.pathname,x=O,G=r.pathname&&r.pathname.split("/")||[],Y=e.pathname&&e.pathname.split("/")||[],X=r.protocol&&!cc[r.protocol];if(X&&(r.hostname="",r.port=null,r.host&&(G[0]===""?G[0]=r.host:G.unshift(r.host)),r.host="",e.protocol&&(e.hostname=null,e.port=null,e.host&&(Y[0]===""?Y[0]=e.host:Y.unshift(e.host)),e.host=null),O=O&&(Y[0]===""||G[0]==="")),N)r.host=e.host||e.host===""?e.host:r.host,r.hostname=e.hostname||e.hostname===""?e.hostname:r.hostname,r.search=e.search,r.query=e.query,G=Y;else if(Y.length)G||(G=[]),G.pop(),G=G.concat(Y),r.search=e.search,r.query=e.query;else if(e.search!=null){if(X){r.host=G.shift(),r.hostname=r.host;var Z=r.host&&r.host.indexOf("@")>0?r.host.split("@"):!1;Z&&(r.auth=Z.shift(),r.hostname=Z.shift(),r.host=r.hostname)}return r.search=e.search,r.query=e.query,(r.pathname!==null||r.search!==null)&&(r.path=(r.pathname?r.pathname:"")+(r.search?r.search:"")),r.href=r.format(),r}if(!G.length)return r.pathname=null,r.search?r.path="/"+r.search:r.path=null,r.href=r.format(),r;for(var j=G.slice(-1)[0],se=(r.host||e.host||G.length>1)&&(j==="."||j==="..")||j==="",ie=0,ce=G.length;ce>=0;ce--)j=G[ce],j==="."?G.splice(ce,1):j===".."?(G.splice(ce,1),ie++):ie&&(G.splice(ce,1),ie--);if(!O&&!x)for(;ie--;ie)G.unshift("..");O&&G[0]!==""&&(!G[0]||G[0].charAt(0)!=="/")&&G.unshift(""),se&&G.join("/").substr(-1)!=="/"&&G.push("");var H=G[0]===""||G[0]&&G[0].charAt(0)==="/";if(X){r.hostname=H?"":G.length?G.shift():"",r.host=r.hostname;var Z=r.host&&r.host.indexOf("@")>0?r.host.split("@"):!1;Z&&(r.auth=Z.shift(),r.hostname=Z.shift(),r.host=r.hostname)}return O=O||r.host&&G.length,O&&!H&&G.unshift(""),G.length>0?r.pathname=G.join("/"):(r.pathname=null,r.path=null),(r.pathname!==null||r.search!==null)&&(r.path=(r.pathname?r.pathname:"")+(r.search?r.search:"")),r.auth=e.auth||r.auth,r.slashes=r.slashes||e.slashes,r.href=r.format(),r};gi.prototype.parseHost=function(){var e=this.host,t=ase.exec(e);t&&(t=t[0],t!==":"&&(this.port=t.substr(1)),e=e.substr(0,e.length-t.length)),e&&(this.hostname=e)};lc.parse=Rh;lc.resolve=gse;lc.resolveObject=pse;lc.format=dse;lc.Url=gi});var C4=U((Lp,b4)=>{(function(e,t){typeof Lp=="object"&&typeof b4<"u"?t(Lp):typeof define=="function"&&define.amd?define(["exports"],t):(e=typeof globalThis<"u"?globalThis:e||self,t(e.WebStreamsPolyfill={}))})(Lp,(function(e){"use strict";function t(){}function r(u){return typeof u=="object"&&u!==null||typeof u=="function"}let n=t;function i(u,d){try{Object.defineProperty(u,"name",{value:d,configurable:!0})}catch{}}let s=Promise,o=Promise.prototype.then,a=Promise.reject.bind(s);function A(u){return new s(u)}function f(u){return A(d=>d(u))}function l(u){return a(u)}function p(u,d,T){return o.call(u,d,T)}function I(u,d,T){p(p(u,d,T),void 0,n)}function S(u,d){I(u,d)}function _(u,d){I(u,void 0,d)}function N(u,d,T){return p(u,d,T)}function O(u){p(u,void 0,n)}let x=u=>{if(typeof queueMicrotask=="function")x=queueMicrotask;else{let d=f(void 0);x=T=>p(d,T)}return x(u)};function G(u,d,T){if(typeof u!="function")throw new TypeError("Argument is not a function");return Function.prototype.apply.call(u,d,T)}function Y(u,d,T){try{return f(G(u,d,T))}catch(P){return l(P)}}let X=16384;class Z{constructor(){this._cursor=0,this._size=0,this._front={_elements:[],_next:void 0},this._back=this._front,this._cursor=0,this._size=0}get length(){return this._size}push(d){let T=this._back,P=T;T._elements.length===X-1&&(P={_elements:[],_next:void 0}),T._elements.push(d),P!==T&&(this._back=P,T._next=P),++this._size}shift(){let d=this._front,T=d,P=this._cursor,J=P+1,te=d._elements,oe=te[P];return J===X&&(T=d._next,J=0),--this._size,this._cursor=J,d!==T&&(this._front=T),te[P]=void 0,oe}forEach(d){let T=this._cursor,P=this._front,J=P._elements;for(;(T!==J.length||P._next!==void 0)&&!(T===J.length&&(P=P._next,J=P._elements,T=0,J.length===0));)d(J[T]),++T}peek(){let d=this._front,T=this._cursor;return d._elements[T]}}let j=Symbol("[[AbortSteps]]"),se=Symbol("[[ErrorSteps]]"),ie=Symbol("[[CancelSteps]]"),ce=Symbol("[[PullSteps]]"),H=Symbol("[[ReleaseSteps]]");function E(u,d){u._ownerReadableStream=d,d._reader=u,d._state==="readable"?g(u):d._state==="closed"?R(u):w(u,d._storedError)}function v(u,d){let T=u._ownerReadableStream;return Ki(T,d)}function b(u){let d=u._ownerReadableStream;d._state==="readable"?C(u,new TypeError("Reader was released and can no longer be used to monitor the stream's closedness")):h(u,new TypeError("Reader was released and can no longer be used to monitor the stream's closedness")),d._readableStreamController[H](),d._reader=void 0,u._ownerReadableStream=void 0}function c(u){return new TypeError("Cannot "+u+" a stream using a released reader")}function g(u){u._closedPromise=A((d,T)=>{u._closedPromise_resolve=d,u._closedPromise_reject=T})}function w(u,d){g(u),C(u,d)}function R(u){g(u),D(u)}function C(u,d){u._closedPromise_reject!==void 0&&(O(u._closedPromise),u._closedPromise_reject(d),u._closedPromise_resolve=void 0,u._closedPromise_reject=void 0)}function h(u,d){w(u,d)}function D(u){u._closedPromise_resolve!==void 0&&(u._closedPromise_resolve(void 0),u._closedPromise_resolve=void 0,u._closedPromise_reject=void 0)}let M=Number.isFinite||function(u){return typeof u=="number"&&isFinite(u)},B=Math.trunc||function(u){return u<0?Math.ceil(u):Math.floor(u)};function k(u){return typeof u=="object"||typeof u=="function"}function ne(u,d){if(u!==void 0&&!k(u))throw new TypeError(`${d} is not an object.`)}function Ae(u,d){if(typeof u!="function")throw new TypeError(`${d} is not a function.`)}function ue(u){return typeof u=="object"&&u!==null||typeof u=="function"}function pe(u,d){if(!ue(u))throw new TypeError(`${d} is not an object.`)}function he(u,d,T){if(u===void 0)throw new TypeError(`Parameter ${d} is required in '${T}'.`)}function de(u,d,T){if(u===void 0)throw new TypeError(`${d} is required in '${T}'.`)}function Qt(u){return Number(u)}function Ie(u){return u===0?0:u}function be(u){return Ie(B(u))}function yr(u,d){let P=Number.MAX_SAFE_INTEGER,J=Number(u);if(J=Ie(J),!M(J))throw new TypeError(`${d} is not a finite number`);if(J=be(J),J<0||J>P)throw new TypeError(`${d} is outside the accepted range of 0 to ${P}, inclusive`);return!M(J)||J===0?0:J}function Qe(u,d){if(!Ha(u))throw new TypeError(`${d} is not a ReadableStream.`)}function _e(u){return new Te(u)}function Ds(u,d){u._reader._readRequests.push(d)}function Ge(u,d,T){let J=u._reader._readRequests.shift();T?J._closeSteps():J._chunkSteps(d)}function Ue(u){return u._reader._readRequests.length}function Ts(u){let d=u._reader;return!(d===void 0||!De(d))}class Te{constructor(d){if(he(d,1,"ReadableStreamDefaultReader"),Qe(d,"First parameter"),qa(d))throw new TypeError("This stream has already been locked for exclusive reading by another reader");E(this,d),this._readRequests=new Z}get closed(){return De(this)?this._closedPromise:l(ai("closed"))}cancel(d=void 0){return De(this)?this._ownerReadableStream===void 0?l(c("cancel")):v(this,d):l(ai("cancel"))}read(){if(!De(this))return l(ai("read"));if(this._ownerReadableStream===void 0)return l(c("read from"));let d,T,P=A((te,oe)=>{d=te,T=oe});return en(this,{_chunkSteps:te=>d({value:te,done:!1}),_closeSteps:()=>d({value:void 0,done:!0}),_errorSteps:te=>T(te)}),P}releaseLock(){if(!De(this))throw ai("releaseLock");this._ownerReadableStream!==void 0&&ve(this)}}Object.defineProperties(Te.prototype,{cancel:{enumerable:!0},read:{enumerable:!0},releaseLock:{enumerable:!0},closed:{enumerable:!0}}),i(Te.prototype.cancel,"cancel"),i(Te.prototype.read,"read"),i(Te.prototype.releaseLock,"releaseLock"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Te.prototype,Symbol.toStringTag,{value:"ReadableStreamDefaultReader",configurable:!0});function De(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_readRequests")?!1:u instanceof Te}function en(u,d){let T=u._ownerReadableStream;T._disturbed=!0,T._state==="closed"?d._closeSteps():T._state==="errored"?d._errorSteps(T._storedError):T._readableStreamController[ce](d)}function ve(u){b(u);let d=new TypeError("Reader was released");He(u,d)}function He(u,d){let T=u._readRequests;u._readRequests=new Z,T.forEach(P=>{P._errorSteps(d)})}function ai(u){return new TypeError(`ReadableStreamDefaultReader.prototype.${u} can only be used on a ReadableStreamDefaultReader`)}let Ne=Object.getPrototypeOf(Object.getPrototypeOf(async function*(){}).prototype);class Ve{constructor(d,T){this._ongoingPromise=void 0,this._isFinished=!1,this._reader=d,this._preventCancel=T}next(){let d=()=>this._nextSteps();return this._ongoingPromise=this._ongoingPromise?N(this._ongoingPromise,d,d):d(),this._ongoingPromise}return(d){let T=()=>this._returnSteps(d);return this._ongoingPromise?N(this._ongoingPromise,T,T):T()}_nextSteps(){if(this._isFinished)return Promise.resolve({value:void 0,done:!0});let d=this._reader,T,P,J=A((oe,me)=>{T=oe,P=me});return en(d,{_chunkSteps:oe=>{this._ongoingPromise=void 0,x(()=>T({value:oe,done:!1}))},_closeSteps:()=>{this._ongoingPromise=void 0,this._isFinished=!0,b(d),T({value:void 0,done:!0})},_errorSteps:oe=>{this._ongoingPromise=void 0,this._isFinished=!0,b(d),P(oe)}}),J}_returnSteps(d){if(this._isFinished)return Promise.resolve({value:d,done:!0});this._isFinished=!0;let T=this._reader;if(!this._preventCancel){let P=v(T,d);return b(T),N(P,()=>({value:d,done:!0}))}return b(T),f({value:d,done:!0})}}let F={next(){return Q(this)?this._asyncIteratorImpl.next():l(L("next"))},return(u){return Q(this)?this._asyncIteratorImpl.return(u):l(L("return"))}};Object.setPrototypeOf(F,Ne);function m(u,d){let T=_e(u),P=new Ve(T,d),J=Object.create(F);return J._asyncIteratorImpl=P,J}function Q(u){if(!r(u)||!Object.prototype.hasOwnProperty.call(u,"_asyncIteratorImpl"))return!1;try{return u._asyncIteratorImpl instanceof Ve}catch{return!1}}function L(u){return new TypeError(`ReadableStreamAsyncIterator.${u} can only be used on a ReadableSteamAsyncIterator`)}let W=Number.isNaN||function(u){return u!==u};var z,ae,le;function ye(u){return u.slice()}function bt(u,d,T,P,J){new Uint8Array(u).set(new Uint8Array(T,P,J),d)}let Ee=u=>(typeof u.transfer=="function"?Ee=d=>d.transfer():typeof structuredClone=="function"?Ee=d=>structuredClone(d,{transfer:[d]}):Ee=d=>d,Ee(u)),ge=u=>(typeof u.detached=="boolean"?ge=d=>d.detached:ge=d=>d.byteLength===0,ge(u));function ka(u,d,T){if(u.slice)return u.slice(d,T);let P=T-d,J=new ArrayBuffer(P);return bt(J,0,u,d,P),J}function Je(u,d){let T=u[d];if(T!=null){if(typeof T!="function")throw new TypeError(`${String(d)} is not a function`);return T}}function tt(u){let d={[Symbol.iterator]:()=>u.iterator},T=(async function*(){return yield*d})(),P=T.next;return{iterator:T,nextMethod:P,done:!1}}let Mo=(le=(z=Symbol.asyncIterator)!==null&&z!==void 0?z:(ae=Symbol.for)===null||ae===void 0?void 0:ae.call(Symbol,"Symbol.asyncIterator"))!==null&&le!==void 0?le:"@@asyncIterator";function Ze(u,d="sync",T){if(T===void 0)if(d==="async"){if(T=Je(u,Mo),T===void 0){let te=Je(u,Symbol.iterator),oe=Ze(u,"sync",te);return tt(oe)}}else T=Je(u,Symbol.iterator);if(T===void 0)throw new TypeError("The object is not iterable");let P=G(T,u,[]);if(!r(P))throw new TypeError("The iterator method must return an object");let J=P.next;return{iterator:P,nextMethod:J,done:!1}}function rt(u){let d=G(u.nextMethod,u.iterator,[]);if(!r(d))throw new TypeError("The iterator.next() method must return an object");return d}function HA(u){return!!u.done}function nt(u){return u.value}function it(u){return!(typeof u!="number"||W(u)||u<0)}function Ua(u){let d=ka(u.buffer,u.byteOffset,u.byteOffset+u.byteLength);return new Uint8Array(d)}function ze(u){let d=u._queue.shift();return u._queueTotalSize-=d.size,u._queueTotalSize<0&&(u._queueTotalSize=0),d.value}function Ke(u,d,T){if(!it(T)||T===1/0)throw new RangeError("Size must be a finite, non-NaN, non-negative number.");u._queue.push({value:d,size:T}),u._queueTotalSize+=T}function qA(u){return u._queue.peek().value}function xe(u){u._queue=new Z,u._queueTotalSize=0}function $e(u){return u===DataView}function GA(u){return $e(u.constructor)}function st(u){return $e(u)?1:u.BYTES_PER_ELEMENT}class Le{constructor(){throw new TypeError("Illegal constructor")}get view(){if(!Xe(this))throw XB("view");return this._view}respond(d){if(!Xe(this))throw XB("respond");if(he(d,1,"respond"),d=yr(d,"First parameter"),this._associatedReadableByteStreamController===void 0)throw new TypeError("This BYOB request has been invalidated");if(ge(this._view.buffer))throw new TypeError("The BYOB request's buffer has been detached and so cannot be used as a response");s0(this._associatedReadableByteStreamController,d)}respondWithNewView(d){if(!Xe(this))throw XB("respondWithNewView");if(he(d,1,"respondWithNewView"),!ArrayBuffer.isView(d))throw new TypeError("You can only respond with array buffer views");if(this._associatedReadableByteStreamController===void 0)throw new TypeError("This BYOB request has been invalidated");if(ge(d.buffer))throw new TypeError("The given view's buffer has been detached and so cannot be used as a response");o0(this._associatedReadableByteStreamController,d)}}Object.defineProperties(Le.prototype,{respond:{enumerable:!0},respondWithNewView:{enumerable:!0},view:{enumerable:!0}}),i(Le.prototype.respond,"respond"),i(Le.prototype.respondWithNewView,"respondWithNewView"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Le.prototype,Symbol.toStringTag,{value:"ReadableStreamBYOBRequest",configurable:!0});class hn{constructor(){throw new TypeError("Illegal constructor")}get byobRequest(){if(!Pe(this))throw Jl("byobRequest");return KB(this)}get desiredSize(){if(!Pe(this))throw Jl("desiredSize");return bR(this)}close(){if(!Pe(this))throw Jl("close");if(this._closeRequested)throw new TypeError("The stream has already been closed; do not close it again!");let d=this._controlledReadableByteStream._state;if(d!=="readable")throw new TypeError(`The stream (in ${d} state) is not in the readable state and cannot be closed`);Po(this)}enqueue(d){if(!Pe(this))throw Jl("enqueue");if(he(d,1,"enqueue"),!ArrayBuffer.isView(d))throw new TypeError("chunk must be an array buffer view");if(d.byteLength===0)throw new TypeError("chunk must have non-zero byteLength");if(d.buffer.byteLength===0)throw new TypeError("chunk's buffer must have non-zero byteLength");if(this._closeRequested)throw new TypeError("stream is closed or draining");let T=this._controlledReadableByteStream._state;if(T!=="readable")throw new TypeError(`The stream (in ${T} state) is not in the readable state and cannot be enqueued to`);La(this,d)}error(d=void 0){if(!Pe(this))throw Jl("error");fi(this,d)}[ie](d){xt(this),xe(this);let T=this._cancelAlgorithm(d);return xa(this),T}[ce](d){let T=this._controlledReadableByteStream;if(this._queueTotalSize>0){IR(this,d);return}let P=this._autoAllocateChunkSize;if(P!==void 0){let J;try{J=new ArrayBuffer(P)}catch(oe){d._errorSteps(oe);return}let te={buffer:J,bufferByteLength:P,byteOffset:0,byteLength:P,bytesFilled:0,minimumFill:1,elementSize:1,viewConstructor:Uint8Array,readerType:"default"};this._pendingPullIntos.push(te)}Ds(T,d),Qn(this)}[H](){if(this._pendingPullIntos.length>0){let d=this._pendingPullIntos.peek();d.readerType="none",this._pendingPullIntos=new Z,this._pendingPullIntos.push(d)}}}Object.defineProperties(hn.prototype,{close:{enumerable:!0},enqueue:{enumerable:!0},error:{enumerable:!0},byobRequest:{enumerable:!0},desiredSize:{enumerable:!0}}),i(hn.prototype.close,"close"),i(hn.prototype.enqueue,"enqueue"),i(hn.prototype.error,"error"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(hn.prototype,Symbol.toStringTag,{value:"ReadableByteStreamController",configurable:!0});function Pe(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_controlledReadableByteStream")?!1:u instanceof hn}function Xe(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_associatedReadableByteStreamController")?!1:u instanceof Le}function Qn(u){if(!Lo(u))return;if(u._pulling){u._pullAgain=!0;return}u._pulling=!0;let T=u._pullAlgorithm();I(T,()=>(u._pulling=!1,u._pullAgain&&(u._pullAgain=!1,Qn(u)),null),P=>(fi(u,P),null))}function xt(u){Ji(u),u._pendingPullIntos=new Z}function Ft(u,d){let T=!1;u._state==="closed"&&(T=!0);let P=Ns(d);d.readerType==="default"?Ge(u,P,T):qV(u,P,T)}function Ns(u){let d=u.bytesFilled,T=u.elementSize;return new u.viewConstructor(u.buffer,u.byteOffset,d/T)}function Ai(u,d,T,P){u._queue.push({buffer:d,byteOffset:T,byteLength:P}),u._queueTotalSize+=P}function Ms(u,d,T,P){let J;try{J=ka(d,T,T+P)}catch(te){throw fi(u,te),te}Ai(u,J,0,P)}function Fs(u,d){d.bytesFilled>0&&Ms(u,d.buffer,d.byteOffset,d.bytesFilled),wn(u)}function ks(u,d){let T=Math.min(u._queueTotalSize,d.byteLength-d.bytesFilled),P=d.bytesFilled+T,J=T,te=!1,oe=P%d.elementSize,me=P-oe;me>=d.minimumFill&&(J=me-d.bytesFilled,te=!0);let Ye=u._queue;for(;J>0;){let we=Ye.peek(),ot=Math.min(J,we.byteLength),lt=d.byteOffset+d.bytesFilled;bt(d.buffer,lt,we.buffer,we.byteOffset,ot),we.byteLength===ot?Ye.shift():(we.byteOffset+=ot,we.byteLength-=ot),u._queueTotalSize-=ot,Us(u,ot,d),J-=ot}return te}function Us(u,d,T){T.bytesFilled+=d}function xs(u){u._queueTotalSize===0&&u._closeRequested?(xa(u),$l(u._controlledReadableByteStream)):Qn(u)}function Ji(u){u._byobRequest!==null&&(u._byobRequest._associatedReadableByteStreamController=void 0,u._byobRequest._view=null,u._byobRequest=null)}function ji(u){for(;u._pendingPullIntos.length>0;){if(u._queueTotalSize===0)return;let d=u._pendingPullIntos.peek();ks(u,d)&&(wn(u),Ft(u._controlledReadableByteStream,d))}}function Fo(u){let d=u._controlledReadableByteStream._reader;for(;d._readRequests.length>0;){if(u._queueTotalSize===0)return;let T=d._readRequests.shift();IR(u,T)}}function ko(u,d,T,P){let J=u._controlledReadableByteStream,te=d.constructor,oe=st(te),{byteOffset:me,byteLength:Ye}=d,we=T*oe,ot;try{ot=Ee(d.buffer)}catch(Lt){P._errorSteps(Lt);return}let lt={buffer:ot,bufferByteLength:ot.byteLength,byteOffset:me,byteLength:Ye,bytesFilled:0,minimumFill:we,elementSize:oe,viewConstructor:te,readerType:"byob"};if(u._pendingPullIntos.length>0){u._pendingPullIntos.push(lt),wR(J,P);return}if(J._state==="closed"){let Lt=new te(lt.buffer,lt.byteOffset,0);P._closeSteps(Lt);return}if(u._queueTotalSize>0){if(ks(u,lt)){let Lt=Ns(lt);xs(u),P._chunkSteps(Lt);return}if(u._closeRequested){let Lt=new TypeError("Insufficient bytes to fill elements in the given buffer");fi(u,Lt),P._errorSteps(Lt);return}}u._pendingPullIntos.push(lt),wR(J,P),Qn(u)}function Uo(u,d){d.readerType==="none"&&wn(u);let T=u._controlledReadableByteStream;if(ZB(T))for(;SR(T)>0;){let P=wn(u);Ft(T,P)}}function xo(u,d,T){if(Us(u,d,T),T.readerType==="none"){Fs(u,T),ji(u);return}if(T.bytesFilled<T.minimumFill)return;wn(u);let P=T.bytesFilled%T.elementSize;if(P>0){let J=T.byteOffset+T.bytesFilled;Ms(u,T.buffer,J-P,P)}T.bytesFilled-=P,Ft(u._controlledReadableByteStream,T),ji(u)}function Ls(u,d){let T=u._pendingPullIntos.peek();Ji(u),u._controlledReadableByteStream._state==="closed"?Uo(u,T):xo(u,d,T),Qn(u)}function wn(u){return u._pendingPullIntos.shift()}function Lo(u){let d=u._controlledReadableByteStream;return d._state!=="readable"||u._closeRequested||!u._started?!1:!!(Ts(d)&&Ue(d)>0||ZB(d)&&SR(d)>0||bR(u)>0)}function xa(u){u._pullAlgorithm=void 0,u._cancelAlgorithm=void 0}function Po(u){let d=u._controlledReadableByteStream;if(!(u._closeRequested||d._state!=="readable")){if(u._queueTotalSize>0){u._closeRequested=!0;return}if(u._pendingPullIntos.length>0){let T=u._pendingPullIntos.peek();if(T.bytesFilled%T.elementSize!==0){let P=new TypeError("Insufficient bytes to fill elements in the given buffer");throw fi(u,P),P}}xa(u),$l(d)}}function La(u,d){let T=u._controlledReadableByteStream;if(u._closeRequested||T._state!=="readable")return;let{buffer:P,byteOffset:J,byteLength:te}=d;if(ge(P))throw new TypeError("chunk's buffer is detached and so cannot be enqueued");let oe=Ee(P);if(u._pendingPullIntos.length>0){let me=u._pendingPullIntos.peek();if(ge(me.buffer))throw new TypeError("The BYOB request's buffer has been detached and so cannot be filled with an enqueued chunk");Ji(u),me.buffer=Ee(me.buffer),me.readerType==="none"&&Fs(u,me)}if(Ts(T))if(Fo(u),Ue(T)===0)Ai(u,oe,J,te);else{u._pendingPullIntos.length>0&&wn(u);let me=new Uint8Array(oe,J,te);Ge(T,me,!1)}else ZB(T)?(Ai(u,oe,J,te),ji(u)):Ai(u,oe,J,te);Qn(u)}function fi(u,d){let T=u._controlledReadableByteStream;T._state==="readable"&&(xt(u),xe(u),xa(u),KR(T,d))}function IR(u,d){let T=u._queue.shift();u._queueTotalSize-=T.byteLength,xs(u);let P=new Uint8Array(T.buffer,T.byteOffset,T.byteLength);d._chunkSteps(P)}function KB(u){if(u._byobRequest===null&&u._pendingPullIntos.length>0){let d=u._pendingPullIntos.peek(),T=new Uint8Array(d.buffer,d.byteOffset+d.bytesFilled,d.byteLength-d.bytesFilled),P=Object.create(Le.prototype);LV(P,u,T),u._byobRequest=P}return u._byobRequest}function bR(u){let d=u._controlledReadableByteStream._state;return d==="errored"?null:d==="closed"?0:u._strategyHWM-u._queueTotalSize}function s0(u,d){let T=u._pendingPullIntos.peek();if(u._controlledReadableByteStream._state==="closed"){if(d!==0)throw new TypeError("bytesWritten must be 0 when calling respond() on a closed stream")}else{if(d===0)throw new TypeError("bytesWritten must be greater than 0 when calling respond() on a readable stream");if(T.bytesFilled+d>T.byteLength)throw new RangeError("bytesWritten out of range")}T.buffer=Ee(T.buffer),Ls(u,d)}function o0(u,d){let T=u._pendingPullIntos.peek();if(u._controlledReadableByteStream._state==="closed"){if(d.byteLength!==0)throw new TypeError("The view's length must be 0 when calling respondWithNewView() on a closed stream")}else if(d.byteLength===0)throw new TypeError("The view's length must be greater than 0 when calling respondWithNewView() on a readable stream");if(T.byteOffset+T.bytesFilled!==d.byteOffset)throw new RangeError("The region specified by view does not match byobRequest");if(T.bufferByteLength!==d.buffer.byteLength)throw new RangeError("The buffer of view has different capacity than byobRequest");if(T.bytesFilled+d.byteLength>T.byteLength)throw new RangeError("The region specified by view is larger than byobRequest");let J=d.byteLength;T.buffer=Ee(d.buffer),Ls(u,J)}function CR(u,d,T,P,J,te,oe){d._controlledReadableByteStream=u,d._pullAgain=!1,d._pulling=!1,d._byobRequest=null,d._queue=d._queueTotalSize=void 0,xe(d),d._closeRequested=!1,d._started=!1,d._strategyHWM=te,d._pullAlgorithm=P,d._cancelAlgorithm=J,d._autoAllocateChunkSize=oe,d._pendingPullIntos=new Z,u._readableStreamController=d;let me=T();I(f(me),()=>(d._started=!0,Qn(d),null),Ye=>(fi(d,Ye),null))}function xV(u,d,T){let P=Object.create(hn.prototype),J,te,oe;d.start!==void 0?J=()=>d.start(P):J=()=>{},d.pull!==void 0?te=()=>d.pull(P):te=()=>f(void 0),d.cancel!==void 0?oe=Ye=>d.cancel(Ye):oe=()=>f(void 0);let me=d.autoAllocateChunkSize;if(me===0)throw new TypeError("autoAllocateChunkSize must be greater than 0");CR(u,P,J,te,oe,T,me)}function LV(u,d,T){u._associatedReadableByteStreamController=d,u._view=T}function XB(u){return new TypeError(`ReadableStreamBYOBRequest.prototype.${u} can only be used on a ReadableStreamBYOBRequest`)}function Jl(u){return new TypeError(`ReadableByteStreamController.prototype.${u} can only be used on a ReadableByteStreamController`)}function PV(u,d){ne(u,d);let T=u?.mode;return{mode:T===void 0?void 0:OV(T,`${d} has member 'mode' that`)}}function OV(u,d){if(u=`${u}`,u!=="byob")throw new TypeError(`${d} '${u}' is not a valid enumeration value for ReadableStreamReaderMode`);return u}function HV(u,d){var T;ne(u,d);let P=(T=u?.min)!==null&&T!==void 0?T:1;return{min:yr(P,`${d} has member 'min' that`)}}function QR(u){return new Pa(u)}function wR(u,d){u._reader._readIntoRequests.push(d)}function qV(u,d,T){let J=u._reader._readIntoRequests.shift();T?J._closeSteps(d):J._chunkSteps(d)}function SR(u){return u._reader._readIntoRequests.length}function ZB(u){let d=u._reader;return!(d===void 0||!YA(d))}class Pa{constructor(d){if(he(d,1,"ReadableStreamBYOBReader"),Qe(d,"First parameter"),qa(d))throw new TypeError("This stream has already been locked for exclusive reading by another reader");if(!Pe(d._readableStreamController))throw new TypeError("Cannot construct a ReadableStreamBYOBReader for a stream not constructed with a byte source");E(this,d),this._readIntoRequests=new Z}get closed(){return YA(this)?this._closedPromise:l(a0("closed"))}cancel(d=void 0){return YA(this)?this._ownerReadableStream===void 0?l(c("cancel")):v(this,d):l(a0("cancel"))}read(d,T={}){if(!YA(this))return l(a0("read"));if(!ArrayBuffer.isView(d))return l(new TypeError("view must be an array buffer view"));if(d.byteLength===0)return l(new TypeError("view must have non-zero byteLength"));if(d.buffer.byteLength===0)return l(new TypeError("view's buffer must have non-zero byteLength"));if(ge(d.buffer))return l(new TypeError("view's buffer has been detached"));let P;try{P=HV(T,"options")}catch(we){return l(we)}let J=P.min;if(J===0)return l(new TypeError("options.min must be greater than 0"));if(GA(d)){if(J>d.byteLength)return l(new RangeError("options.min must be less than or equal to view's byteLength"))}else if(J>d.length)return l(new RangeError("options.min must be less than or equal to view's length"));if(this._ownerReadableStream===void 0)return l(c("read from"));let te,oe,me=A((we,ot)=>{te=we,oe=ot});return _R(this,d,J,{_chunkSteps:we=>te({value:we,done:!1}),_closeSteps:we=>te({value:we,done:!0}),_errorSteps:we=>oe(we)}),me}releaseLock(){if(!YA(this))throw a0("releaseLock");this._ownerReadableStream!==void 0&&GV(this)}}Object.defineProperties(Pa.prototype,{cancel:{enumerable:!0},read:{enumerable:!0},releaseLock:{enumerable:!0},closed:{enumerable:!0}}),i(Pa.prototype.cancel,"cancel"),i(Pa.prototype.read,"read"),i(Pa.prototype.releaseLock,"releaseLock"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Pa.prototype,Symbol.toStringTag,{value:"ReadableStreamBYOBReader",configurable:!0});function YA(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_readIntoRequests")?!1:u instanceof Pa}function _R(u,d,T,P){let J=u._ownerReadableStream;J._disturbed=!0,J._state==="errored"?P._errorSteps(J._storedError):ko(J._readableStreamController,d,T,P)}function GV(u){b(u);let d=new TypeError("Reader was released");vR(u,d)}function vR(u,d){let T=u._readIntoRequests;u._readIntoRequests=new Z,T.forEach(P=>{P._errorSteps(d)})}function a0(u){return new TypeError(`ReadableStreamBYOBReader.prototype.${u} can only be used on a ReadableStreamBYOBReader`)}function jl(u,d){let{highWaterMark:T}=u;if(T===void 0)return d;if(W(T)||T<0)throw new RangeError("Invalid highWaterMark");return T}function A0(u){let{size:d}=u;return d||(()=>1)}function f0(u,d){ne(u,d);let T=u?.highWaterMark,P=u?.size;return{highWaterMark:T===void 0?void 0:Qt(T),size:P===void 0?void 0:YV(P,`${d} has member 'size' that`)}}function YV(u,d){return Ae(u,d),T=>Qt(u(T))}function WV(u,d){ne(u,d);let T=u?.abort,P=u?.close,J=u?.start,te=u?.type,oe=u?.write;return{abort:T===void 0?void 0:VV(T,u,`${d} has member 'abort' that`),close:P===void 0?void 0:JV(P,u,`${d} has member 'close' that`),start:J===void 0?void 0:jV(J,u,`${d} has member 'start' that`),write:oe===void 0?void 0:zV(oe,u,`${d} has member 'write' that`),type:te}}function VV(u,d,T){return Ae(u,T),P=>Y(u,d,[P])}function JV(u,d,T){return Ae(u,T),()=>Y(u,d,[])}function jV(u,d,T){return Ae(u,T),P=>G(u,d,[P])}function zV(u,d,T){return Ae(u,T),(P,J)=>Y(u,d,[P,J])}function RR(u,d){if(!Tu(u))throw new TypeError(`${d} is not a WritableStream.`)}function KV(u){if(typeof u!="object"||u===null)return!1;try{return typeof u.aborted=="boolean"}catch{return!1}}let XV=typeof AbortController=="function";function ZV(){if(XV)return new AbortController}class Oa{constructor(d={},T={}){d===void 0?d=null:pe(d,"First parameter");let P=f0(T,"Second parameter"),J=WV(d,"First parameter");if(TR(this),J.type!==void 0)throw new RangeError("Invalid type is specified");let oe=A0(P),me=jl(P,1);lJ(this,J,me,oe)}get locked(){if(!Tu(this))throw d0("locked");return Nu(this)}abort(d=void 0){return Tu(this)?Nu(this)?l(new TypeError("Cannot abort a stream that already has a writer")):u0(this,d):l(d0("abort"))}close(){return Tu(this)?Nu(this)?l(new TypeError("Cannot close a stream that already has a writer")):Ps(this)?l(new TypeError("Cannot close an already-closing stream")):NR(this):l(d0("close"))}getWriter(){if(!Tu(this))throw d0("getWriter");return DR(this)}}Object.defineProperties(Oa.prototype,{abort:{enumerable:!0},close:{enumerable:!0},getWriter:{enumerable:!0},locked:{enumerable:!0}}),i(Oa.prototype.abort,"abort"),i(Oa.prototype.close,"close"),i(Oa.prototype.getWriter,"getWriter"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Oa.prototype,Symbol.toStringTag,{value:"WritableStream",configurable:!0});function DR(u){return new Oo(u)}function $V(u,d,T,P,J=1,te=()=>1){let oe=Object.create(Oa.prototype);TR(oe);let me=Object.create(Mu.prototype);return LR(oe,me,u,d,T,P,J,te),oe}function TR(u){u._state="writable",u._storedError=void 0,u._writer=void 0,u._writableStreamController=void 0,u._writeRequests=new Z,u._inFlightWriteRequest=void 0,u._closeRequest=void 0,u._inFlightCloseRequest=void 0,u._pendingAbortRequest=void 0,u._backpressure=!1}function Tu(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_writableStreamController")?!1:u instanceof Oa}function Nu(u){return u._writer!==void 0}function u0(u,d){var T;if(u._state==="closed"||u._state==="errored")return f(void 0);u._writableStreamController._abortReason=d,(T=u._writableStreamController._abortController)===null||T===void 0||T.abort(d);let P=u._state;if(P==="closed"||P==="errored")return f(void 0);if(u._pendingAbortRequest!==void 0)return u._pendingAbortRequest._promise;let J=!1;P==="erroring"&&(J=!0,d=void 0);let te=A((oe,me)=>{u._pendingAbortRequest={_promise:void 0,_resolve:oe,_reject:me,_reason:d,_wasAlreadyErroring:J}});return u._pendingAbortRequest._promise=te,J||eI(u,d),te}function NR(u){let d=u._state;if(d==="closed"||d==="errored")return l(new TypeError(`The stream (in ${d} state) is not in the writable state and cannot be closed`));let T=A((J,te)=>{let oe={_resolve:J,_reject:te};u._closeRequest=oe}),P=u._writer;return P!==void 0&&u._backpressure&&d==="writable"&&AI(P),hJ(u._writableStreamController),T}function eJ(u){return A((T,P)=>{let J={_resolve:T,_reject:P};u._writeRequests.push(J)})}function $B(u,d){if(u._state==="writable"){eI(u,d);return}tI(u)}function eI(u,d){let T=u._writableStreamController;u._state="erroring",u._storedError=d;let P=u._writer;P!==void 0&&FR(P,d),!sJ(u)&&T._started&&tI(u)}function tI(u){u._state="errored",u._writableStreamController[se]();let d=u._storedError;if(u._writeRequests.forEach(J=>{J._reject(d)}),u._writeRequests=new Z,u._pendingAbortRequest===void 0){c0(u);return}let T=u._pendingAbortRequest;if(u._pendingAbortRequest=void 0,T._wasAlreadyErroring){T._reject(d),c0(u);return}let P=u._writableStreamController[j](T._reason);I(P,()=>(T._resolve(),c0(u),null),J=>(T._reject(J),c0(u),null))}function tJ(u){u._inFlightWriteRequest._resolve(void 0),u._inFlightWriteRequest=void 0}function rJ(u,d){u._inFlightWriteRequest._reject(d),u._inFlightWriteRequest=void 0,$B(u,d)}function nJ(u){u._inFlightCloseRequest._resolve(void 0),u._inFlightCloseRequest=void 0,u._state==="erroring"&&(u._storedError=void 0,u._pendingAbortRequest!==void 0&&(u._pendingAbortRequest._resolve(),u._pendingAbortRequest=void 0)),u._state="closed";let T=u._writer;T!==void 0&&qR(T)}function iJ(u,d){u._inFlightCloseRequest._reject(d),u._inFlightCloseRequest=void 0,u._pendingAbortRequest!==void 0&&(u._pendingAbortRequest._reject(d),u._pendingAbortRequest=void 0),$B(u,d)}function Ps(u){return!(u._closeRequest===void 0&&u._inFlightCloseRequest===void 0)}function sJ(u){return!(u._inFlightWriteRequest===void 0&&u._inFlightCloseRequest===void 0)}function oJ(u){u._inFlightCloseRequest=u._closeRequest,u._closeRequest=void 0}function aJ(u){u._inFlightWriteRequest=u._writeRequests.shift()}function c0(u){u._closeRequest!==void 0&&(u._closeRequest._reject(u._storedError),u._closeRequest=void 0);let d=u._writer;d!==void 0&&oI(d,u._storedError)}function rI(u,d){let T=u._writer;T!==void 0&&d!==u._backpressure&&(d?BJ(T):AI(T)),u._backpressure=d}class Oo{constructor(d){if(he(d,1,"WritableStreamDefaultWriter"),RR(d,"First parameter"),Nu(d))throw new TypeError("This stream has already been locked for exclusive writing by another writer");this._ownerWritableStream=d,d._writer=this;let T=d._state;if(T==="writable")!Ps(d)&&d._backpressure?p0(this):GR(this),g0(this);else if(T==="erroring")aI(this,d._storedError),g0(this);else if(T==="closed")GR(this),yJ(this);else{let P=d._storedError;aI(this,P),HR(this,P)}}get closed(){return WA(this)?this._closedPromise:l(VA("closed"))}get desiredSize(){if(!WA(this))throw VA("desiredSize");if(this._ownerWritableStream===void 0)throw Kl("desiredSize");return cJ(this)}get ready(){return WA(this)?this._readyPromise:l(VA("ready"))}abort(d=void 0){return WA(this)?this._ownerWritableStream===void 0?l(Kl("abort")):AJ(this,d):l(VA("abort"))}close(){if(!WA(this))return l(VA("close"));let d=this._ownerWritableStream;return d===void 0?l(Kl("close")):Ps(d)?l(new TypeError("Cannot close an already-closing stream")):MR(this)}releaseLock(){if(!WA(this))throw VA("releaseLock");this._ownerWritableStream!==void 0&&kR(this)}write(d=void 0){return WA(this)?this._ownerWritableStream===void 0?l(Kl("write to")):UR(this,d):l(VA("write"))}}Object.defineProperties(Oo.prototype,{abort:{enumerable:!0},close:{enumerable:!0},releaseLock:{enumerable:!0},write:{enumerable:!0},closed:{enumerable:!0},desiredSize:{enumerable:!0},ready:{enumerable:!0}}),i(Oo.prototype.abort,"abort"),i(Oo.prototype.close,"close"),i(Oo.prototype.releaseLock,"releaseLock"),i(Oo.prototype.write,"write"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Oo.prototype,Symbol.toStringTag,{value:"WritableStreamDefaultWriter",configurable:!0});function WA(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_ownerWritableStream")?!1:u instanceof Oo}function AJ(u,d){let T=u._ownerWritableStream;return u0(T,d)}function MR(u){let d=u._ownerWritableStream;return NR(d)}function fJ(u){let d=u._ownerWritableStream,T=d._state;return Ps(d)||T==="closed"?f(void 0):T==="errored"?l(d._storedError):MR(u)}function uJ(u,d){u._closedPromiseState==="pending"?oI(u,d):mJ(u,d)}function FR(u,d){u._readyPromiseState==="pending"?YR(u,d):IJ(u,d)}function cJ(u){let d=u._ownerWritableStream,T=d._state;return T==="errored"||T==="erroring"?null:T==="closed"?0:PR(d._writableStreamController)}function kR(u){let d=u._ownerWritableStream,T=new TypeError("Writer was released and can no longer be used to monitor the stream's closedness");FR(u,T),uJ(u,T),d._writer=void 0,u._ownerWritableStream=void 0}function UR(u,d){let T=u._ownerWritableStream,P=T._writableStreamController,J=dJ(P,d);if(T!==u._ownerWritableStream)return l(Kl("write to"));let te=T._state;if(te==="errored")return l(T._storedError);if(Ps(T)||te==="closed")return l(new TypeError("The stream is closing or closed and cannot be written to"));if(te==="erroring")return l(T._storedError);let oe=eJ(T);return gJ(P,d,J),oe}let xR={};class Mu{constructor(){throw new TypeError("Illegal constructor")}get abortReason(){if(!nI(this))throw sI("abortReason");return this._abortReason}get signal(){if(!nI(this))throw sI("signal");if(this._abortController===void 0)throw new TypeError("WritableStreamDefaultController.prototype.signal is not supported");return this._abortController.signal}error(d=void 0){if(!nI(this))throw sI("error");this._controlledWritableStream._state==="writable"&&OR(this,d)}[j](d){let T=this._abortAlgorithm(d);return l0(this),T}[se](){xe(this)}}Object.defineProperties(Mu.prototype,{abortReason:{enumerable:!0},signal:{enumerable:!0},error:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Mu.prototype,Symbol.toStringTag,{value:"WritableStreamDefaultController",configurable:!0});function nI(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_controlledWritableStream")?!1:u instanceof Mu}function LR(u,d,T,P,J,te,oe,me){d._controlledWritableStream=u,u._writableStreamController=d,d._queue=void 0,d._queueTotalSize=void 0,xe(d),d._abortReason=void 0,d._abortController=ZV(),d._started=!1,d._strategySizeAlgorithm=me,d._strategyHWM=oe,d._writeAlgorithm=P,d._closeAlgorithm=J,d._abortAlgorithm=te;let Ye=iI(d);rI(u,Ye);let we=T(),ot=f(we);I(ot,()=>(d._started=!0,h0(d),null),lt=>(d._started=!0,$B(u,lt),null))}function lJ(u,d,T,P){let J=Object.create(Mu.prototype),te,oe,me,Ye;d.start!==void 0?te=()=>d.start(J):te=()=>{},d.write!==void 0?oe=we=>d.write(we,J):oe=()=>f(void 0),d.close!==void 0?me=()=>d.close():me=()=>f(void 0),d.abort!==void 0?Ye=we=>d.abort(we):Ye=()=>f(void 0),LR(u,J,te,oe,me,Ye,T,P)}function l0(u){u._writeAlgorithm=void 0,u._closeAlgorithm=void 0,u._abortAlgorithm=void 0,u._strategySizeAlgorithm=void 0}function hJ(u){Ke(u,xR,0),h0(u)}function dJ(u,d){try{return u._strategySizeAlgorithm(d)}catch(T){return zl(u,T),1}}function PR(u){return u._strategyHWM-u._queueTotalSize}function gJ(u,d,T){try{Ke(u,d,T)}catch(J){zl(u,J);return}let P=u._controlledWritableStream;if(!Ps(P)&&P._state==="writable"){let J=iI(u);rI(P,J)}h0(u)}function h0(u){let d=u._controlledWritableStream;if(!u._started||d._inFlightWriteRequest!==void 0)return;if(d._state==="erroring"){tI(d);return}if(u._queue.length===0)return;let P=qA(u);P===xR?pJ(u):EJ(u,P)}function zl(u,d){u._controlledWritableStream._state==="writable"&&OR(u,d)}function pJ(u){let d=u._controlledWritableStream;oJ(d),ze(u);let T=u._closeAlgorithm();l0(u),I(T,()=>(nJ(d),null),P=>(iJ(d,P),null))}function EJ(u,d){let T=u._controlledWritableStream;aJ(T);let P=u._writeAlgorithm(d);I(P,()=>{tJ(T);let J=T._state;if(ze(u),!Ps(T)&&J==="writable"){let te=iI(u);rI(T,te)}return h0(u),null},J=>(T._state==="writable"&&l0(u),rJ(T,J),null))}function iI(u){return PR(u)<=0}function OR(u,d){let T=u._controlledWritableStream;l0(u),eI(T,d)}function d0(u){return new TypeError(`WritableStream.prototype.${u} can only be used on a WritableStream`)}function sI(u){return new TypeError(`WritableStreamDefaultController.prototype.${u} can only be used on a WritableStreamDefaultController`)}function VA(u){return new TypeError(`WritableStreamDefaultWriter.prototype.${u} can only be used on a WritableStreamDefaultWriter`)}function Kl(u){return new TypeError("Cannot "+u+" a stream using a released writer")}function g0(u){u._closedPromise=A((d,T)=>{u._closedPromise_resolve=d,u._closedPromise_reject=T,u._closedPromiseState="pending"})}function HR(u,d){g0(u),oI(u,d)}function yJ(u){g0(u),qR(u)}function oI(u,d){u._closedPromise_reject!==void 0&&(O(u._closedPromise),u._closedPromise_reject(d),u._closedPromise_resolve=void 0,u._closedPromise_reject=void 0,u._closedPromiseState="rejected")}function mJ(u,d){HR(u,d)}function qR(u){u._closedPromise_resolve!==void 0&&(u._closedPromise_resolve(void 0),u._closedPromise_resolve=void 0,u._closedPromise_reject=void 0,u._closedPromiseState="resolved")}function p0(u){u._readyPromise=A((d,T)=>{u._readyPromise_resolve=d,u._readyPromise_reject=T}),u._readyPromiseState="pending"}function aI(u,d){p0(u),YR(u,d)}function GR(u){p0(u),AI(u)}function YR(u,d){u._readyPromise_reject!==void 0&&(O(u._readyPromise),u._readyPromise_reject(d),u._readyPromise_resolve=void 0,u._readyPromise_reject=void 0,u._readyPromiseState="rejected")}function BJ(u){p0(u)}function IJ(u,d){aI(u,d)}function AI(u){u._readyPromise_resolve!==void 0&&(u._readyPromise_resolve(void 0),u._readyPromise_resolve=void 0,u._readyPromise_reject=void 0,u._readyPromiseState="fulfilled")}function bJ(){if(typeof globalThis<"u")return globalThis;if(typeof self<"u")return self;if(typeof globalThis<"u")return globalThis}let fI=bJ();function CJ(u){if(!(typeof u=="function"||typeof u=="object")||u.name!=="DOMException")return!1;try{return new u,!0}catch{return!1}}function QJ(){let u=fI?.DOMException;return CJ(u)?u:void 0}function wJ(){let u=function(T,P){this.message=T||"",this.name=P||"Error",Error.captureStackTrace&&Error.captureStackTrace(this,this.constructor)};return i(u,"DOMException"),u.prototype=Object.create(Error.prototype),Object.defineProperty(u.prototype,"constructor",{value:u,writable:!0,configurable:!0}),u}let SJ=QJ()||wJ();function WR(u,d,T,P,J,te){let oe=_e(u),me=DR(d);u._disturbed=!0;let Ye=!1,we=f(void 0);return A((ot,lt)=>{let Lt;if(te!==void 0){if(Lt=()=>{let Me=te.reason!==void 0?te.reason:new SJ("Aborted","AbortError"),mt=[];P||mt.push(()=>d._state==="writable"?u0(d,Me):f(void 0)),J||mt.push(()=>u._state==="readable"?Ki(u,Me):f(void 0)),Sn(()=>Promise.all(mt.map(Ht=>Ht())),!0,Me)},te.aborted){Lt();return}te.addEventListener("abort",Lt)}function Xi(){return A((Me,mt)=>{function Ht(Wn){Wn?Me():p(xu(),Ht,mt)}Ht(!1)})}function xu(){return Ye?f(!0):p(me._readyPromise,()=>A((Me,mt)=>{en(oe,{_chunkSteps:Ht=>{we=p(UR(me,Ht),void 0,t),Me(!1)},_closeSteps:()=>Me(!0),_errorSteps:mt})}))}if(qo(u,oe._closedPromise,Me=>(P?ui(!0,Me):Sn(()=>u0(d,Me),!0,Me),null)),qo(d,me._closedPromise,Me=>(J?ui(!0,Me):Sn(()=>Ki(u,Me),!0,Me),null)),dn(u,oe._closedPromise,()=>(T?ui():Sn(()=>fJ(me)),null)),Ps(d)||d._state==="closed"){let Me=new TypeError("the destination writable stream closed before all data could be piped to it");J?ui(!0,Me):Sn(()=>Ki(u,Me),!0,Me)}O(Xi());function Ya(){let Me=we;return p(we,()=>Me!==we?Ya():void 0)}function qo(Me,mt,Ht){Me._state==="errored"?Ht(Me._storedError):_(mt,Ht)}function dn(Me,mt,Ht){Me._state==="closed"?Ht():S(mt,Ht)}function Sn(Me,mt,Ht){if(Ye)return;Ye=!0,d._state==="writable"&&!Ps(d)?S(Ya(),Wn):Wn();function Wn(){return I(Me(),()=>Go(mt,Ht),Lu=>Go(!0,Lu)),null}}function ui(Me,mt){Ye||(Ye=!0,d._state==="writable"&&!Ps(d)?S(Ya(),()=>Go(Me,mt)):Go(Me,mt))}function Go(Me,mt){return kR(me),b(oe),te!==void 0&&te.removeEventListener("abort",Lt),Me?lt(mt):ot(void 0),null}})}class Ho{constructor(){throw new TypeError("Illegal constructor")}get desiredSize(){if(!E0(this))throw m0("desiredSize");return uI(this)}close(){if(!E0(this))throw m0("close");if(!ku(this))throw new TypeError("The stream is not in a state that permits close");JA(this)}enqueue(d=void 0){if(!E0(this))throw m0("enqueue");if(!ku(this))throw new TypeError("The stream is not in a state that permits enqueue");return Fu(this,d)}error(d=void 0){if(!E0(this))throw m0("error");zi(this,d)}[ie](d){xe(this);let T=this._cancelAlgorithm(d);return y0(this),T}[ce](d){let T=this._controlledReadableStream;if(this._queue.length>0){let P=ze(this);this._closeRequested&&this._queue.length===0?(y0(this),$l(T)):Xl(this),d._chunkSteps(P)}else Ds(T,d),Xl(this)}[H](){}}Object.defineProperties(Ho.prototype,{close:{enumerable:!0},enqueue:{enumerable:!0},error:{enumerable:!0},desiredSize:{enumerable:!0}}),i(Ho.prototype.close,"close"),i(Ho.prototype.enqueue,"enqueue"),i(Ho.prototype.error,"error"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Ho.prototype,Symbol.toStringTag,{value:"ReadableStreamDefaultController",configurable:!0});function E0(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_controlledReadableStream")?!1:u instanceof Ho}function Xl(u){if(!VR(u))return;if(u._pulling){u._pullAgain=!0;return}u._pulling=!0;let T=u._pullAlgorithm();I(T,()=>(u._pulling=!1,u._pullAgain&&(u._pullAgain=!1,Xl(u)),null),P=>(zi(u,P),null))}function VR(u){let d=u._controlledReadableStream;return!ku(u)||!u._started?!1:!!(qa(d)&&Ue(d)>0||uI(u)>0)}function y0(u){u._pullAlgorithm=void 0,u._cancelAlgorithm=void 0,u._strategySizeAlgorithm=void 0}function JA(u){if(!ku(u))return;let d=u._controlledReadableStream;u._closeRequested=!0,u._queue.length===0&&(y0(u),$l(d))}function Fu(u,d){if(!ku(u))return;let T=u._controlledReadableStream;if(qa(T)&&Ue(T)>0)Ge(T,d,!1);else{let P;try{P=u._strategySizeAlgorithm(d)}catch(J){throw zi(u,J),J}try{Ke(u,d,P)}catch(J){throw zi(u,J),J}}Xl(u)}function zi(u,d){let T=u._controlledReadableStream;T._state==="readable"&&(xe(u),y0(u),KR(T,d))}function uI(u){let d=u._controlledReadableStream._state;return d==="errored"?null:d==="closed"?0:u._strategyHWM-u._queueTotalSize}function _J(u){return!VR(u)}function ku(u){let d=u._controlledReadableStream._state;return!u._closeRequested&&d==="readable"}function JR(u,d,T,P,J,te,oe){d._controlledReadableStream=u,d._queue=void 0,d._queueTotalSize=void 0,xe(d),d._started=!1,d._closeRequested=!1,d._pullAgain=!1,d._pulling=!1,d._strategySizeAlgorithm=oe,d._strategyHWM=te,d._pullAlgorithm=P,d._cancelAlgorithm=J,u._readableStreamController=d;let me=T();I(f(me),()=>(d._started=!0,Xl(d),null),Ye=>(zi(d,Ye),null))}function vJ(u,d,T,P){let J=Object.create(Ho.prototype),te,oe,me;d.start!==void 0?te=()=>d.start(J):te=()=>{},d.pull!==void 0?oe=()=>d.pull(J):oe=()=>f(void 0),d.cancel!==void 0?me=Ye=>d.cancel(Ye):me=()=>f(void 0),JR(u,J,te,oe,me,T,P)}function m0(u){return new TypeError(`ReadableStreamDefaultController.prototype.${u} can only be used on a ReadableStreamDefaultController`)}function RJ(u,d){return Pe(u._readableStreamController)?TJ(u):DJ(u)}function DJ(u,d){let T=_e(u),P=!1,J=!1,te=!1,oe=!1,me,Ye,we,ot,lt,Lt=A(dn=>{lt=dn});function Xi(){return P?(J=!0,f(void 0)):(P=!0,en(T,{_chunkSteps:Sn=>{x(()=>{J=!1;let ui=Sn,Go=Sn;te||Fu(we._readableStreamController,ui),oe||Fu(ot._readableStreamController,Go),P=!1,J&&Xi()})},_closeSteps:()=>{P=!1,te||JA(we._readableStreamController),oe||JA(ot._readableStreamController),(!te||!oe)&&lt(void 0)},_errorSteps:()=>{P=!1}}),f(void 0))}function xu(dn){if(te=!0,me=dn,oe){let Sn=ye([me,Ye]),ui=Ki(u,Sn);lt(ui)}return Lt}function Ya(dn){if(oe=!0,Ye=dn,te){let Sn=ye([me,Ye]),ui=Ki(u,Sn);lt(ui)}return Lt}function qo(){}return we=Zl(qo,Xi,xu),ot=Zl(qo,Xi,Ya),_(T._closedPromise,dn=>(zi(we._readableStreamController,dn),zi(ot._readableStreamController,dn),(!te||!oe)&&lt(void 0),null)),[we,ot]}function TJ(u){let d=_e(u),T=!1,P=!1,J=!1,te=!1,oe=!1,me,Ye,we,ot,lt,Lt=A(Me=>{lt=Me});function Xi(Me){_(Me._closedPromise,mt=>(Me!==d||(fi(we._readableStreamController,mt),fi(ot._readableStreamController,mt),(!te||!oe)&&lt(void 0)),null))}function xu(){YA(d)&&(b(d),d=_e(u),Xi(d)),en(d,{_chunkSteps:mt=>{x(()=>{P=!1,J=!1;let Ht=mt,Wn=mt;if(!te&&!oe)try{Wn=Ua(mt)}catch(Lu){fi(we._readableStreamController,Lu),fi(ot._readableStreamController,Lu),lt(Ki(u,Lu));return}te||La(we._readableStreamController,Ht),oe||La(ot._readableStreamController,Wn),T=!1,P?qo():J&&dn()})},_closeSteps:()=>{T=!1,te||Po(we._readableStreamController),oe||Po(ot._readableStreamController),we._readableStreamController._pendingPullIntos.length>0&&s0(we._readableStreamController,0),ot._readableStreamController._pendingPullIntos.length>0&&s0(ot._readableStreamController,0),(!te||!oe)&&lt(void 0)},_errorSteps:()=>{T=!1}})}function Ya(Me,mt){De(d)&&(b(d),d=QR(u),Xi(d));let Ht=mt?ot:we,Wn=mt?we:ot;_R(d,Me,1,{_chunkSteps:Pu=>{x(()=>{P=!1,J=!1;let Ou=mt?oe:te;if(mt?te:oe)Ou||o0(Ht._readableStreamController,Pu);else{let fD;try{fD=Ua(Pu)}catch(gI){fi(Ht._readableStreamController,gI),fi(Wn._readableStreamController,gI),lt(Ki(u,gI));return}Ou||o0(Ht._readableStreamController,Pu),La(Wn._readableStreamController,fD)}T=!1,P?qo():J&&dn()})},_closeSteps:Pu=>{T=!1;let Ou=mt?oe:te,_0=mt?te:oe;Ou||Po(Ht._readableStreamController),_0||Po(Wn._readableStreamController),Pu!==void 0&&(Ou||o0(Ht._readableStreamController,Pu),!_0&&Wn._readableStreamController._pendingPullIntos.length>0&&s0(Wn._readableStreamController,0)),(!Ou||!_0)&&lt(void 0)},_errorSteps:()=>{T=!1}})}function qo(){if(T)return P=!0,f(void 0);T=!0;let Me=KB(we._readableStreamController);return Me===null?xu():Ya(Me._view,!1),f(void 0)}function dn(){if(T)return J=!0,f(void 0);T=!0;let Me=KB(ot._readableStreamController);return Me===null?xu():Ya(Me._view,!0),f(void 0)}function Sn(Me){if(te=!0,me=Me,oe){let mt=ye([me,Ye]),Ht=Ki(u,mt);lt(Ht)}return Lt}function ui(Me){if(oe=!0,Ye=Me,te){let mt=ye([me,Ye]),Ht=Ki(u,mt);lt(Ht)}return Lt}function Go(){}return we=zR(Go,qo,Sn),ot=zR(Go,dn,ui),Xi(d),[we,ot]}function NJ(u){return r(u)&&typeof u.getReader<"u"}function MJ(u){return NJ(u)?kJ(u.getReader()):FJ(u)}function FJ(u){let d,T=Ze(u,"async"),P=t;function J(){let oe;try{oe=rt(T)}catch(Ye){return l(Ye)}let me=f(oe);return N(me,Ye=>{if(!r(Ye))throw new TypeError("The promise returned by the iterator.next() method must fulfill with an object");if(HA(Ye))JA(d._readableStreamController);else{let ot=nt(Ye);Fu(d._readableStreamController,ot)}})}function te(oe){let me=T.iterator,Ye;try{Ye=Je(me,"return")}catch(lt){return l(lt)}if(Ye===void 0)return f(void 0);let we;try{we=G(Ye,me,[oe])}catch(lt){return l(lt)}let ot=f(we);return N(ot,lt=>{if(!r(lt))throw new TypeError("The promise returned by the iterator.return() method must fulfill with an object")})}return d=Zl(P,J,te,0),d}function kJ(u){let d,T=t;function P(){let te;try{te=u.read()}catch(oe){return l(oe)}return N(te,oe=>{if(!r(oe))throw new TypeError("The promise returned by the reader.read() method must fulfill with an object");if(oe.done)JA(d._readableStreamController);else{let me=oe.value;Fu(d._readableStreamController,me)}})}function J(te){try{return f(u.cancel(te))}catch(oe){return l(oe)}}return d=Zl(T,P,J,0),d}function UJ(u,d){ne(u,d);let T=u,P=T?.autoAllocateChunkSize,J=T?.cancel,te=T?.pull,oe=T?.start,me=T?.type;return{autoAllocateChunkSize:P===void 0?void 0:yr(P,`${d} has member 'autoAllocateChunkSize' that`),cancel:J===void 0?void 0:xJ(J,T,`${d} has member 'cancel' that`),pull:te===void 0?void 0:LJ(te,T,`${d} has member 'pull' that`),start:oe===void 0?void 0:PJ(oe,T,`${d} has member 'start' that`),type:me===void 0?void 0:OJ(me,`${d} has member 'type' that`)}}function xJ(u,d,T){return Ae(u,T),P=>Y(u,d,[P])}function LJ(u,d,T){return Ae(u,T),P=>Y(u,d,[P])}function PJ(u,d,T){return Ae(u,T),P=>G(u,d,[P])}function OJ(u,d){if(u=`${u}`,u!=="bytes")throw new TypeError(`${d} '${u}' is not a valid enumeration value for ReadableStreamType`);return u}function HJ(u,d){return ne(u,d),{preventCancel:!!u?.preventCancel}}function jR(u,d){ne(u,d);let T=u?.preventAbort,P=u?.preventCancel,J=u?.preventClose,te=u?.signal;return te!==void 0&&qJ(te,`${d} has member 'signal' that`),{preventAbort:!!T,preventCancel:!!P,preventClose:!!J,signal:te}}function qJ(u,d){if(!KV(u))throw new TypeError(`${d} is not an AbortSignal.`)}function GJ(u,d){ne(u,d);let T=u?.readable;de(T,"readable","ReadableWritablePair"),Qe(T,`${d} has member 'readable' that`);let P=u?.writable;return de(P,"writable","ReadableWritablePair"),RR(P,`${d} has member 'writable' that`),{readable:T,writable:P}}class tn{constructor(d={},T={}){d===void 0?d=null:pe(d,"First parameter");let P=f0(T,"Second parameter"),J=UJ(d,"First parameter");if(cI(this),J.type==="bytes"){if(P.size!==void 0)throw new RangeError("The strategy for a byte stream cannot have a size function");let te=jl(P,0);xV(this,J,te)}else{let te=A0(P),oe=jl(P,1);vJ(this,J,oe,te)}}get locked(){if(!Ha(this))throw jA("locked");return qa(this)}cancel(d=void 0){return Ha(this)?qa(this)?l(new TypeError("Cannot cancel a stream that already has a reader")):Ki(this,d):l(jA("cancel"))}getReader(d=void 0){if(!Ha(this))throw jA("getReader");return PV(d,"First parameter").mode===void 0?_e(this):QR(this)}pipeThrough(d,T={}){if(!Ha(this))throw jA("pipeThrough");he(d,1,"pipeThrough");let P=GJ(d,"First parameter"),J=jR(T,"Second parameter");if(qa(this))throw new TypeError("ReadableStream.prototype.pipeThrough cannot be used on a locked ReadableStream");if(Nu(P.writable))throw new TypeError("ReadableStream.prototype.pipeThrough cannot be used on a locked WritableStream");let te=WR(this,P.writable,J.preventClose,J.preventAbort,J.preventCancel,J.signal);return O(te),P.readable}pipeTo(d,T={}){if(!Ha(this))return l(jA("pipeTo"));if(d===void 0)return l("Parameter 1 is required in 'pipeTo'.");if(!Tu(d))return l(new TypeError("ReadableStream.prototype.pipeTo's first argument must be a WritableStream"));let P;try{P=jR(T,"Second parameter")}catch(J){return l(J)}return qa(this)?l(new TypeError("ReadableStream.prototype.pipeTo cannot be used on a locked ReadableStream")):Nu(d)?l(new TypeError("ReadableStream.prototype.pipeTo cannot be used on a locked WritableStream")):WR(this,d,P.preventClose,P.preventAbort,P.preventCancel,P.signal)}tee(){if(!Ha(this))throw jA("tee");let d=RJ(this);return ye(d)}values(d=void 0){if(!Ha(this))throw jA("values");let T=HJ(d,"First parameter");return m(this,T.preventCancel)}[Mo](d){return this.values(d)}static from(d){return MJ(d)}}Object.defineProperties(tn,{from:{enumerable:!0}}),Object.defineProperties(tn.prototype,{cancel:{enumerable:!0},getReader:{enumerable:!0},pipeThrough:{enumerable:!0},pipeTo:{enumerable:!0},tee:{enumerable:!0},values:{enumerable:!0},locked:{enumerable:!0}}),i(tn.from,"from"),i(tn.prototype.cancel,"cancel"),i(tn.prototype.getReader,"getReader"),i(tn.prototype.pipeThrough,"pipeThrough"),i(tn.prototype.pipeTo,"pipeTo"),i(tn.prototype.tee,"tee"),i(tn.prototype.values,"values"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(tn.prototype,Symbol.toStringTag,{value:"ReadableStream",configurable:!0}),Object.defineProperty(tn.prototype,Mo,{value:tn.prototype.values,writable:!0,configurable:!0});function Zl(u,d,T,P=1,J=()=>1){let te=Object.create(tn.prototype);cI(te);let oe=Object.create(Ho.prototype);return JR(te,oe,u,d,T,P,J),te}function zR(u,d,T){let P=Object.create(tn.prototype);cI(P);let J=Object.create(hn.prototype);return CR(P,J,u,d,T,0,void 0),P}function cI(u){u._state="readable",u._reader=void 0,u._storedError=void 0,u._disturbed=!1}function Ha(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_readableStreamController")?!1:u instanceof tn}function qa(u){return u._reader!==void 0}function Ki(u,d){if(u._disturbed=!0,u._state==="closed")return f(void 0);if(u._state==="errored")return l(u._storedError);$l(u);let T=u._reader;if(T!==void 0&&YA(T)){let J=T._readIntoRequests;T._readIntoRequests=new Z,J.forEach(te=>{te._closeSteps(void 0)})}let P=u._readableStreamController[ie](d);return N(P,t)}function $l(u){u._state="closed";let d=u._reader;if(d!==void 0&&(D(d),De(d))){let T=d._readRequests;d._readRequests=new Z,T.forEach(P=>{P._closeSteps()})}}function KR(u,d){u._state="errored",u._storedError=d;let T=u._reader;T!==void 0&&(C(T,d),De(T)?He(T,d):vR(T,d))}function jA(u){return new TypeError(`ReadableStream.prototype.${u} can only be used on a ReadableStream`)}function XR(u,d){ne(u,d);let T=u?.highWaterMark;return de(T,"highWaterMark","QueuingStrategyInit"),{highWaterMark:Qt(T)}}let ZR=u=>u.byteLength;i(ZR,"size");class B0{constructor(d){he(d,1,"ByteLengthQueuingStrategy"),d=XR(d,"First parameter"),this._byteLengthQueuingStrategyHighWaterMark=d.highWaterMark}get highWaterMark(){if(!eD(this))throw $R("highWaterMark");return this._byteLengthQueuingStrategyHighWaterMark}get size(){if(!eD(this))throw $R("size");return ZR}}Object.defineProperties(B0.prototype,{highWaterMark:{enumerable:!0},size:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(B0.prototype,Symbol.toStringTag,{value:"ByteLengthQueuingStrategy",configurable:!0});function $R(u){return new TypeError(`ByteLengthQueuingStrategy.prototype.${u} can only be used on a ByteLengthQueuingStrategy`)}function eD(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_byteLengthQueuingStrategyHighWaterMark")?!1:u instanceof B0}let tD=()=>1;i(tD,"size");class I0{constructor(d){he(d,1,"CountQueuingStrategy"),d=XR(d,"First parameter"),this._countQueuingStrategyHighWaterMark=d.highWaterMark}get highWaterMark(){if(!nD(this))throw rD("highWaterMark");return this._countQueuingStrategyHighWaterMark}get size(){if(!nD(this))throw rD("size");return tD}}Object.defineProperties(I0.prototype,{highWaterMark:{enumerable:!0},size:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(I0.prototype,Symbol.toStringTag,{value:"CountQueuingStrategy",configurable:!0});function rD(u){return new TypeError(`CountQueuingStrategy.prototype.${u} can only be used on a CountQueuingStrategy`)}function nD(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_countQueuingStrategyHighWaterMark")?!1:u instanceof I0}function YJ(u,d){ne(u,d);let T=u?.cancel,P=u?.flush,J=u?.readableType,te=u?.start,oe=u?.transform,me=u?.writableType;return{cancel:T===void 0?void 0:jJ(T,u,`${d} has member 'cancel' that`),flush:P===void 0?void 0:WJ(P,u,`${d} has member 'flush' that`),readableType:J,start:te===void 0?void 0:VJ(te,u,`${d} has member 'start' that`),transform:oe===void 0?void 0:JJ(oe,u,`${d} has member 'transform' that`),writableType:me}}function WJ(u,d,T){return Ae(u,T),P=>Y(u,d,[P])}function VJ(u,d,T){return Ae(u,T),P=>G(u,d,[P])}function JJ(u,d,T){return Ae(u,T),(P,J)=>Y(u,d,[P,J])}function jJ(u,d,T){return Ae(u,T),P=>Y(u,d,[P])}class b0{constructor(d={},T={},P={}){d===void 0&&(d=null);let J=f0(T,"Second parameter"),te=f0(P,"Third parameter"),oe=YJ(d,"First parameter");if(oe.readableType!==void 0)throw new RangeError("Invalid readableType specified");if(oe.writableType!==void 0)throw new RangeError("Invalid writableType specified");let me=jl(te,0),Ye=A0(te),we=jl(J,1),ot=A0(J),lt,Lt=A(Xi=>{lt=Xi});zJ(this,Lt,we,ot,me,Ye),XJ(this,oe),oe.start!==void 0?lt(oe.start(this._transformStreamController)):lt(void 0)}get readable(){if(!iD(this))throw AD("readable");return this._readable}get writable(){if(!iD(this))throw AD("writable");return this._writable}}Object.defineProperties(b0.prototype,{readable:{enumerable:!0},writable:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(b0.prototype,Symbol.toStringTag,{value:"TransformStream",configurable:!0});function zJ(u,d,T,P,J,te){function oe(){return d}function me(Lt){return ej(u,Lt)}function Ye(Lt){return tj(u,Lt)}function we(){return rj(u)}u._writable=$V(oe,me,we,Ye,T,P);function ot(){return nj(u)}function lt(Lt){return ij(u,Lt)}u._readable=Zl(oe,ot,lt,J,te),u._backpressure=void 0,u._backpressureChangePromise=void 0,u._backpressureChangePromise_resolve=void 0,C0(u,!0),u._transformStreamController=void 0}function iD(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_transformStreamController")?!1:u instanceof b0}function sD(u,d){zi(u._readable._readableStreamController,d),lI(u,d)}function lI(u,d){w0(u._transformStreamController),zl(u._writable._writableStreamController,d),hI(u)}function hI(u){u._backpressure&&C0(u,!1)}function C0(u,d){u._backpressureChangePromise!==void 0&&u._backpressureChangePromise_resolve(),u._backpressureChangePromise=A(T=>{u._backpressureChangePromise_resolve=T}),u._backpressure=d}class Ga{constructor(){throw new TypeError("Illegal constructor")}get desiredSize(){if(!Q0(this))throw S0("desiredSize");let d=this._controlledTransformStream._readable._readableStreamController;return uI(d)}enqueue(d=void 0){if(!Q0(this))throw S0("enqueue");oD(this,d)}error(d=void 0){if(!Q0(this))throw S0("error");ZJ(this,d)}terminate(){if(!Q0(this))throw S0("terminate");$J(this)}}Object.defineProperties(Ga.prototype,{enqueue:{enumerable:!0},error:{enumerable:!0},terminate:{enumerable:!0},desiredSize:{enumerable:!0}}),i(Ga.prototype.enqueue,"enqueue"),i(Ga.prototype.error,"error"),i(Ga.prototype.terminate,"terminate"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Ga.prototype,Symbol.toStringTag,{value:"TransformStreamDefaultController",configurable:!0});function Q0(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_controlledTransformStream")?!1:u instanceof Ga}function KJ(u,d,T,P,J){d._controlledTransformStream=u,u._transformStreamController=d,d._transformAlgorithm=T,d._flushAlgorithm=P,d._cancelAlgorithm=J,d._finishPromise=void 0,d._finishPromise_resolve=void 0,d._finishPromise_reject=void 0}function XJ(u,d){let T=Object.create(Ga.prototype),P,J,te;d.transform!==void 0?P=oe=>d.transform(oe,T):P=oe=>{try{return oD(T,oe),f(void 0)}catch(me){return l(me)}},d.flush!==void 0?J=()=>d.flush(T):J=()=>f(void 0),d.cancel!==void 0?te=oe=>d.cancel(oe):te=()=>f(void 0),KJ(u,T,P,J,te)}function w0(u){u._transformAlgorithm=void 0,u._flushAlgorithm=void 0,u._cancelAlgorithm=void 0}function oD(u,d){let T=u._controlledTransformStream,P=T._readable._readableStreamController;if(!ku(P))throw new TypeError("Readable side is not in a state that permits enqueue");try{Fu(P,d)}catch(te){throw lI(T,te),T._readable._storedError}_J(P)!==T._backpressure&&C0(T,!0)}function ZJ(u,d){sD(u._controlledTransformStream,d)}function aD(u,d){let T=u._transformAlgorithm(d);return N(T,void 0,P=>{throw sD(u._controlledTransformStream,P),P})}function $J(u){let d=u._controlledTransformStream,T=d._readable._readableStreamController;JA(T);let P=new TypeError("TransformStream terminated");lI(d,P)}function ej(u,d){let T=u._transformStreamController;if(u._backpressure){let P=u._backpressureChangePromise;return N(P,()=>{let J=u._writable;if(J._state==="erroring")throw J._storedError;return aD(T,d)})}return aD(T,d)}function tj(u,d){let T=u._transformStreamController;if(T._finishPromise!==void 0)return T._finishPromise;let P=u._readable;T._finishPromise=A((te,oe)=>{T._finishPromise_resolve=te,T._finishPromise_reject=oe});let J=T._cancelAlgorithm(d);return w0(T),I(J,()=>(P._state==="errored"?Uu(T,P._storedError):(zi(P._readableStreamController,d),dI(T)),null),te=>(zi(P._readableStreamController,te),Uu(T,te),null)),T._finishPromise}function rj(u){let d=u._transformStreamController;if(d._finishPromise!==void 0)return d._finishPromise;let T=u._readable;d._finishPromise=A((J,te)=>{d._finishPromise_resolve=J,d._finishPromise_reject=te});let P=d._flushAlgorithm();return w0(d),I(P,()=>(T._state==="errored"?Uu(d,T._storedError):(JA(T._readableStreamController),dI(d)),null),J=>(zi(T._readableStreamController,J),Uu(d,J),null)),d._finishPromise}function nj(u){return C0(u,!1),u._backpressureChangePromise}function ij(u,d){let T=u._transformStreamController;if(T._finishPromise!==void 0)return T._finishPromise;let P=u._writable;T._finishPromise=A((te,oe)=>{T._finishPromise_resolve=te,T._finishPromise_reject=oe});let J=T._cancelAlgorithm(d);return w0(T),I(J,()=>(P._state==="errored"?Uu(T,P._storedError):(zl(P._writableStreamController,d),hI(u),dI(T)),null),te=>(zl(P._writableStreamController,te),hI(u),Uu(T,te),null)),T._finishPromise}function S0(u){return new TypeError(`TransformStreamDefaultController.prototype.${u} can only be used on a TransformStreamDefaultController`)}function dI(u){u._finishPromise_resolve!==void 0&&(u._finishPromise_resolve(),u._finishPromise_resolve=void 0,u._finishPromise_reject=void 0)}function Uu(u,d){u._finishPromise_reject!==void 0&&(O(u._finishPromise),u._finishPromise_reject(d),u._finishPromise_resolve=void 0,u._finishPromise_reject=void 0)}function AD(u){return new TypeError(`TransformStream.prototype.${u} can only be used on a TransformStream`)}e.ByteLengthQueuingStrategy=B0,e.CountQueuingStrategy=I0,e.ReadableByteStreamController=hn,e.ReadableStream=tn,e.ReadableStreamBYOBReader=Pa,e.ReadableStreamBYOBRequest=Le,e.ReadableStreamDefaultController=Ho,e.ReadableStreamDefaultReader=Te,e.TransformStream=b0,e.TransformStreamDefaultController=Ga,e.WritableStream=Oa,e.WritableStreamDefaultController=Mu,e.WritableStreamDefaultWriter=Oo}))});var EC=U((hDe,_4)=>{"use strict";function eA(e){"@babel/helpers - typeof";return eA=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(t){return typeof t}:function(t){return t&&typeof Symbol=="function"&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},eA(e)}function Q4(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,yse(n.key),n)}}function Ese(e,t,r){return t&&Q4(e.prototype,t),r&&Q4(e,r),Object.defineProperty(e,"prototype",{writable:!1}),e}function yse(e){var t=mse(e,"string");return eA(t)==="symbol"?t:String(t)}function mse(e,t){if(eA(e)!=="object"||e===null)return e;var r=e[Symbol.toPrimitive];if(r!==void 0){var n=r.call(e,t||"default");if(eA(n)!=="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(t==="string"?String:Number)(e)}function Bse(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function Ise(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),Object.defineProperty(e,"prototype",{writable:!1}),t&&pC(e,t)}function pC(e,t){return pC=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(n,i){return n.__proto__=i,n},pC(e,t)}function bse(e){var t=wse();return function(){var n=Hp(e),i;if(t){var s=Hp(this).constructor;i=Reflect.construct(n,arguments,s)}else i=n.apply(this,arguments);return Cse(this,i)}}function Cse(e,t){if(t&&(eA(t)==="object"||typeof t=="function"))return t;if(t!==void 0)throw new TypeError("Derived constructors may only return object or undefined");return Qse(e)}function Qse(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function wse(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch{return!1}}function Hp(e){return Hp=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(r){return r.__proto__||Object.getPrototypeOf(r)},Hp(e)}var S4={},hc,gC;function Dh(e,t,r){r||(r=Error);function n(s,o,a){return typeof t=="string"?t:t(s,o,a)}var i=(function(s){Ise(a,s);var o=bse(a);function a(A,f,l){var p;return Bse(this,a),p=o.call(this,n(A,f,l)),p.code=e,p}return Ese(a)})(r);S4[e]=i}function w4(e,t){if(Array.isArray(e)){var r=e.length;return e=e.map(function(n){return String(n)}),r>2?"one of ".concat(t," ").concat(e.slice(0,r-1).join(", "),", or ")+e[r-1]:r===2?"one of ".concat(t," ").concat(e[0]," or ").concat(e[1]):"of ".concat(t," ").concat(e[0])}else return"of ".concat(t," ").concat(String(e))}function Sse(e,t,r){return e.substr(!r||r<0?0:+r,t.length)===t}function _se(e,t,r){return(r===void 0||r>e.length)&&(r=e.length),e.substring(r-t.length,r)===t}function vse(e,t,r){return typeof r!="number"&&(r=0),r+t.length>e.length?!1:e.indexOf(t,r)!==-1}Dh("ERR_AMBIGUOUS_ARGUMENT",'The "%s" argument is ambiguous. %s',TypeError);Dh("ERR_INVALID_ARG_TYPE",function(e,t,r){hc===void 0&&(hc=Gt()),hc(typeof e=="string","'name' must be a string");var n;typeof t=="string"&&Sse(t,"not ")?(n="must not be",t=t.replace(/^not /,"")):n="must be";var i;if(_se(e," argument"))i="The ".concat(e," ").concat(n," ").concat(w4(t,"type"));else{var s=vse(e,".")?"property":"argument";i='The "'.concat(e,'" ').concat(s," ").concat(n," ").concat(w4(t,"type"))}return i+=". Received type ".concat(eA(r)),i},TypeError);Dh("ERR_INVALID_ARG_VALUE",function(e,t){var r=arguments.length>2&&arguments[2]!==void 0?arguments[2]:"is invalid";gC===void 0&&(gC=Yr());var n=gC.inspect(t);return n.length>128&&(n="".concat(n.slice(0,128),"...")),"The argument '".concat(e,"' ").concat(r,". Received ").concat(n)},TypeError,RangeError);Dh("ERR_INVALID_RETURN_VALUE",function(e,t,r){var n;return r&&r.constructor&&r.constructor.name?n="instance of ".concat(r.constructor.name):n="type ".concat(eA(r)),"Expected ".concat(e,' to be returned from the "').concat(t,'"')+" function but got ".concat(n,".")},TypeError);Dh("ERR_MISSING_ARGS",function(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];hc===void 0&&(hc=Gt()),hc(t.length>0,"At least one arg needs to be specified");var n="The ",i=t.length;switch(t=t.map(function(s){return'"'.concat(s,'"')}),i){case 1:n+="".concat(t[0]," argument");break;case 2:n+="".concat(t[0]," and ").concat(t[1]," arguments");break;default:n+=t.slice(0,i-1).join(", "),n+=", and ".concat(t[i-1]," arguments");break}return"".concat(n," must be specified")},TypeError);_4.exports.codes=S4});var x4=U((dDe,U4)=>{"use strict";function v4(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter(function(i){return Object.getOwnPropertyDescriptor(e,i).enumerable})),r.push.apply(r,n)}return r}function R4(e){for(var t=1;t<arguments.length;t++){var r=arguments[t]!=null?arguments[t]:{};t%2?v4(Object(r),!0).forEach(function(n){Rse(e,n,r[n])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):v4(Object(r)).forEach(function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(r,n))})}return e}function Rse(e,t,r){return t=M4(t),t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function Dse(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function D4(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,M4(n.key),n)}}function Tse(e,t,r){return t&&D4(e.prototype,t),r&&D4(e,r),Object.defineProperty(e,"prototype",{writable:!1}),e}function M4(e){var t=Nse(e,"string");return Rn(t)==="symbol"?t:String(t)}function Nse(e,t){if(Rn(e)!=="object"||e===null)return e;var r=e[Symbol.toPrimitive];if(r!==void 0){var n=r.call(e,t||"default");if(Rn(n)!=="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(t==="string"?String:Number)(e)}function Mse(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),Object.defineProperty(e,"prototype",{writable:!1}),t&&Fh(e,t)}function Fse(e){var t=k4();return function(){var n=kh(e),i;if(t){var s=kh(this).constructor;i=Reflect.construct(n,arguments,s)}else i=n.apply(this,arguments);return F4(this,i)}}function F4(e,t){if(t&&(Rn(t)==="object"||typeof t=="function"))return t;if(t!==void 0)throw new TypeError("Derived constructors may only return object or undefined");return yC(e)}function yC(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function mC(e){var t=typeof Map=="function"?new Map:void 0;return mC=function(n){if(n===null||!kse(n))return n;if(typeof n!="function")throw new TypeError("Super expression must either be null or a function");if(typeof t<"u"){if(t.has(n))return t.get(n);t.set(n,i)}function i(){return qp(n,arguments,kh(this).constructor)}return i.prototype=Object.create(n.prototype,{constructor:{value:i,enumerable:!1,writable:!0,configurable:!0}}),Fh(i,n)},mC(e)}function qp(e,t,r){return k4()?qp=Reflect.construct.bind():qp=function(i,s,o){var a=[null];a.push.apply(a,s);var A=Function.bind.apply(i,a),f=new A;return o&&Fh(f,o.prototype),f},qp.apply(null,arguments)}function k4(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch{return!1}}function kse(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Fh(e,t){return Fh=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(n,i){return n.__proto__=i,n},Fh(e,t)}function kh(e){return kh=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(r){return r.__proto__||Object.getPrototypeOf(r)},kh(e)}function Rn(e){"@babel/helpers - typeof";return Rn=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(t){return typeof t}:function(t){return t&&typeof Symbol=="function"&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},Rn(e)}var Use=Yr(),BC=Use.inspect,xse=EC(),Lse=xse.codes.ERR_INVALID_ARG_TYPE;function T4(e,t,r){return(r===void 0||r>e.length)&&(r=e.length),e.substring(r-t.length,r)===t}function Pse(e,t){if(t=Math.floor(t),e.length==0||t==0)return"";var r=e.length*t;for(t=Math.floor(Math.log(t)/Math.log(2));t;)e+=e,t--;return e+=e.substring(0,r-e.length),e}var rs="",Th="",Nh="",Vr="",lf={deepStrictEqual:"Expected values to be strictly deep-equal:",strictEqual:"Expected values to be strictly equal:",strictEqualObject:'Expected "actual" to be reference-equal to "expected":',deepEqual:"Expected values to be loosely deep-equal:",equal:"Expected values to be loosely equal:",notDeepStrictEqual:'Expected "actual" not to be strictly deep-equal to:',notStrictEqual:'Expected "actual" to be strictly unequal to:',notStrictEqualObject:'Expected "actual" not to be reference-equal to "expected":',notDeepEqual:'Expected "actual" not to be loosely deep-equal to:',notEqual:'Expected "actual" to be loosely unequal to:',notIdentical:"Values identical but not reference-equal:"},Ose=10;function N4(e){var t=Object.keys(e),r=Object.create(Object.getPrototypeOf(e));return t.forEach(function(n){r[n]=e[n]}),Object.defineProperty(r,"message",{value:e.message}),r}function Mh(e){return BC(e,{compact:!1,customInspect:!1,depth:1e3,maxArrayLength:1/0,showHidden:!1,breakLength:1/0,showProxy:!1,sorted:!0,getters:!0})}function Hse(e,t,r){var n="",i="",s=0,o="",a=!1,A=Mh(e),f=A.split(`
-`),l=Mh(t).split(`
-`),p=0,I="";if(r==="strictEqual"&&Rn(e)==="object"&&Rn(t)==="object"&&e!==null&&t!==null&&(r="strictEqualObject"),f.length===1&&l.length===1&&f[0]!==l[0]){var S=f[0].length+l[0].length;if(S<=Ose){if((Rn(e)!=="object"||e===null)&&(Rn(t)!=="object"||t===null)&&(e!==0||t!==0))return"".concat(lf[r],`
-
-`)+"".concat(f[0]," !== ").concat(l[0],`
-`)}else if(r!=="strictEqualObject"){var _=process.stderr&&process.stderr.isTTY?process.stderr.columns:80;if(S<_){for(;f[0][p]===l[0][p];)p++;p>2&&(I=`
-  `.concat(Pse(" ",p),"^"),p=0)}}}for(var N=f[f.length-1],O=l[l.length-1];N===O&&(p++<2?o=`
-  `.concat(N).concat(o):n=N,f.pop(),l.pop(),!(f.length===0||l.length===0));)N=f[f.length-1],O=l[l.length-1];var x=Math.max(f.length,l.length);if(x===0){var G=A.split(`
-`);if(G.length>30)for(G[26]="".concat(rs,"...").concat(Vr);G.length>27;)G.pop();return"".concat(lf.notIdentical,`
-
-`).concat(G.join(`
-`),`
-`)}p>3&&(o=`
-`.concat(rs,"...").concat(Vr).concat(o),a=!0),n!==""&&(o=`
-  `.concat(n).concat(o),n="");var Y=0,X=lf[r]+`
-`.concat(Th,"+ actual").concat(Vr," ").concat(Nh,"- expected").concat(Vr),Z=" ".concat(rs,"...").concat(Vr," Lines skipped");for(p=0;p<x;p++){var j=p-s;if(f.length<p+1)j>1&&p>2&&(j>4?(i+=`
-`.concat(rs,"...").concat(Vr),a=!0):j>3&&(i+=`
-  `.concat(l[p-2]),Y++),i+=`
-  `.concat(l[p-1]),Y++),s=p,n+=`
-`.concat(Nh,"-").concat(Vr," ").concat(l[p]),Y++;else if(l.length<p+1)j>1&&p>2&&(j>4?(i+=`
-`.concat(rs,"...").concat(Vr),a=!0):j>3&&(i+=`
-  `.concat(f[p-2]),Y++),i+=`
-  `.concat(f[p-1]),Y++),s=p,i+=`
-`.concat(Th,"+").concat(Vr," ").concat(f[p]),Y++;else{var se=l[p],ie=f[p],ce=ie!==se&&(!T4(ie,",")||ie.slice(0,-1)!==se);ce&&T4(se,",")&&se.slice(0,-1)===ie&&(ce=!1,ie+=","),ce?(j>1&&p>2&&(j>4?(i+=`
-`.concat(rs,"...").concat(Vr),a=!0):j>3&&(i+=`
-  `.concat(f[p-2]),Y++),i+=`
-  `.concat(f[p-1]),Y++),s=p,i+=`
-`.concat(Th,"+").concat(Vr," ").concat(ie),n+=`
-`.concat(Nh,"-").concat(Vr," ").concat(se),Y+=2):(i+=n,n="",(j===1||p===0)&&(i+=`
-  `.concat(ie),Y++))}if(Y>20&&p<x-2)return"".concat(X).concat(Z,`
-`).concat(i,`
-`).concat(rs,"...").concat(Vr).concat(n,`
-`)+"".concat(rs,"...").concat(Vr)}return"".concat(X).concat(a?Z:"",`
-`).concat(i).concat(n).concat(o).concat(I)}var qse=(function(e,t){Mse(n,e);var r=Fse(n);function n(i){var s;if(Dse(this,n),Rn(i)!=="object"||i===null)throw new Lse("options","Object",i);var o=i.message,a=i.operator,A=i.stackStartFn,f=i.actual,l=i.expected,p=Error.stackTraceLimit;if(Error.stackTraceLimit=0,o!=null)s=r.call(this,String(o));else if(process.stderr&&process.stderr.isTTY&&(process.stderr&&process.stderr.getColorDepth&&process.stderr.getColorDepth()!==1?(rs="\x1B[34m",Th="\x1B[32m",Vr="\x1B[39m",Nh="\x1B[31m"):(rs="",Th="",Vr="",Nh="")),Rn(f)==="object"&&f!==null&&Rn(l)==="object"&&l!==null&&"stack"in f&&f instanceof Error&&"stack"in l&&l instanceof Error&&(f=N4(f),l=N4(l)),a==="deepStrictEqual"||a==="strictEqual")s=r.call(this,Hse(f,l,a));else if(a==="notDeepStrictEqual"||a==="notStrictEqual"){var I=lf[a],S=Mh(f).split(`
-`);if(a==="notStrictEqual"&&Rn(f)==="object"&&f!==null&&(I=lf.notStrictEqualObject),S.length>30)for(S[26]="".concat(rs,"...").concat(Vr);S.length>27;)S.pop();S.length===1?s=r.call(this,"".concat(I," ").concat(S[0])):s=r.call(this,"".concat(I,`
-
-`).concat(S.join(`
-`),`
-`))}else{var _=Mh(f),N="",O=lf[a];a==="notDeepEqual"||a==="notEqual"?(_="".concat(lf[a],`
-
-`).concat(_),_.length>1024&&(_="".concat(_.slice(0,1021),"..."))):(N="".concat(Mh(l)),_.length>512&&(_="".concat(_.slice(0,509),"...")),N.length>512&&(N="".concat(N.slice(0,509),"...")),a==="deepEqual"||a==="equal"?_="".concat(O,`
-
-`).concat(_,`
-
-should equal
-
-`):N=" ".concat(a," ").concat(N)),s=r.call(this,"".concat(_).concat(N))}return Error.stackTraceLimit=p,s.generatedMessage=!o,Object.defineProperty(yC(s),"name",{value:"AssertionError [ERR_ASSERTION]",enumerable:!1,writable:!0,configurable:!0}),s.code="ERR_ASSERTION",s.actual=f,s.expected=l,s.operator=a,Error.captureStackTrace&&Error.captureStackTrace(yC(s),A),s.stack,s.name="AssertionError",F4(s)}return Tse(n,[{key:"toString",value:function(){return"".concat(this.name," [").concat(this.code,"]: ").concat(this.message)}},{key:t,value:function(s,o){return BC(this,R4(R4({},o),{},{customInspect:!1,depth:0}))}}]),n})(mC(Error),BC.custom);U4.exports=qse});var IC=U((gDe,P4)=>{"use strict";var L4=Object.prototype.toString;P4.exports=function(t){var r=L4.call(t),n=r==="[object Arguments]";return n||(n=r!=="[object Array]"&&t!==null&&typeof t=="object"&&typeof t.length=="number"&&t.length>=0&&L4.call(t.callee)==="[object Function]"),n}});var j4=U((pDe,J4)=>{"use strict";var V4;Object.keys||(Uh=Object.prototype.hasOwnProperty,bC=Object.prototype.toString,O4=IC(),CC=Object.prototype.propertyIsEnumerable,H4=!CC.call({toString:null},"toString"),q4=CC.call(function(){},"prototype"),xh=["toString","toLocaleString","valueOf","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","constructor"],Gp=function(e){var t=e.constructor;return t&&t.prototype===e},G4={$applicationCache:!0,$console:!0,$external:!0,$frame:!0,$frameElement:!0,$frames:!0,$innerHeight:!0,$innerWidth:!0,$onmozfullscreenchange:!0,$onmozfullscreenerror:!0,$outerHeight:!0,$outerWidth:!0,$pageXOffset:!0,$pageYOffset:!0,$parent:!0,$scrollLeft:!0,$scrollTop:!0,$scrollX:!0,$scrollY:!0,$self:!0,$webkitIndexedDB:!0,$webkitStorageInfo:!0,$window:!0},Y4=(function(){if(typeof window>"u")return!1;for(var e in window)try{if(!G4["$"+e]&&Uh.call(window,e)&&window[e]!==null&&typeof window[e]=="object")try{Gp(window[e])}catch{return!0}}catch{return!0}return!1})(),W4=function(e){if(typeof window>"u"||!Y4)return Gp(e);try{return Gp(e)}catch{return!1}},V4=function(t){var r=t!==null&&typeof t=="object",n=bC.call(t)==="[object Function]",i=O4(t),s=r&&bC.call(t)==="[object String]",o=[];if(!r&&!n&&!i)throw new TypeError("Object.keys called on a non-object");var a=q4&&n;if(s&&t.length>0&&!Uh.call(t,0))for(var A=0;A<t.length;++A)o.push(String(A));if(i&&t.length>0)for(var f=0;f<t.length;++f)o.push(String(f));else for(var l in t)!(a&&l==="prototype")&&Uh.call(t,l)&&o.push(String(l));if(H4)for(var p=W4(t),I=0;I<xh.length;++I)!(p&&xh[I]==="constructor")&&Uh.call(t,xh[I])&&o.push(xh[I]);return o});var Uh,bC,O4,CC,H4,q4,xh,Gp,G4,Y4,W4;J4.exports=V4});var QC=U((EDe,X4)=>{"use strict";var Gse=Array.prototype.slice,Yse=IC(),z4=Object.keys,Yp=z4?function(t){return z4(t)}:j4(),K4=Object.keys;Yp.shim=function(){if(Object.keys){var t=(function(){var r=Object.keys(arguments);return r&&r.length===arguments.length})(1,2);t||(Object.keys=function(n){return Yse(n)?K4(Gse.call(n)):K4(n)})}else Object.keys=Yp;return Object.keys||Yp};X4.exports=Yp});var rk=U((yDe,tk)=>{"use strict";var Wse=QC(),$4=k0()(),ek=Ys(),Wp=U0(),Vse=ek("Array.prototype.push"),Z4=ek("Object.prototype.propertyIsEnumerable"),Jse=$4?Wp.getOwnPropertySymbols:null;tk.exports=function(t,r){if(t==null)throw new TypeError("target must be an object");var n=Wp(t);if(arguments.length===1)return n;for(var i=1;i<arguments.length;++i){var s=Wp(arguments[i]),o=Wse(s),a=$4&&(Wp.getOwnPropertySymbols||Jse);if(a)for(var A=a(s),f=0;f<A.length;++f){var l=A[f];Z4(s,l)&&Vse(o,l)}for(var p=0;p<o.length;++p){var I=o[p];if(Z4(s,I)){var S=s[I];n[I]=S}}}return n}});var ik=U((mDe,nk)=>{"use strict";var wC=rk(),jse=function(){if(!Object.assign)return!1;for(var e="abcdefghijklmnopqrst",t=e.split(""),r={},n=0;n<t.length;++n)r[t[n]]=t[n];var i=Object.assign({},r),s="";for(var o in i)s+=o;return e!==s},zse=function(){if(!Object.assign||!Object.preventExtensions)return!1;var e=Object.preventExtensions({1:2});try{Object.assign(e,"xy")}catch{return e[1]==="y"}return!1};nk.exports=function(){return!Object.assign||jse()||zse()?wC:Object.assign}});var SC=U((BDe,ok)=>{"use strict";var sk=function(e){return e!==e};ok.exports=function(t,r){return t===0&&r===0?1/t===1/r:!!(t===r||sk(t)&&sk(r))}});var Vp=U((IDe,ak)=>{"use strict";var Kse=SC();ak.exports=function(){return typeof Object.is=="function"?Object.is:Kse}});var ck=U((bDe,uk)=>{"use strict";var Ak=Zu(),fk=Ah(),Xse=fk(Ak("String.prototype.indexOf"));uk.exports=function(t,r){var n=Ak(t,!!r);return typeof n=="function"&&Xse(t,".prototype.")>-1?fk(n):n}});var Lh=U((CDe,gk)=>{"use strict";var Zse=QC(),$se=typeof Symbol=="function"&&typeof Symbol("foo")=="symbol",eoe=Object.prototype.toString,toe=Array.prototype.concat,lk=ZI(),roe=function(e){return typeof e=="function"&&eoe.call(e)==="[object Function]"},hk=eb()(),noe=function(e,t,r,n){if(t in e){if(n===!0){if(e[t]===r)return}else if(!roe(n)||!n())return}hk?lk(e,t,r,!0):lk(e,t,r)},dk=function(e,t){var r=arguments.length>2?arguments[2]:{},n=Zse(t);$se&&(n=toe.call(n,Object.getOwnPropertySymbols(t)));for(var i=0;i<n.length;i+=1)noe(e,n[i],t[n[i]],r[n[i]])};dk.supportsDescriptors=!!hk;gk.exports=dk});var Ek=U((QDe,pk)=>{"use strict";var ioe=Vp(),soe=Lh();pk.exports=function(){var t=ioe();return soe(Object,{is:t},{is:function(){return Object.is!==t}}),t}});var Ik=U((wDe,Bk)=>{"use strict";var ooe=Lh(),aoe=Ah(),Aoe=SC(),yk=Vp(),foe=Ek(),mk=aoe(yk(),Object);ooe(mk,{getPolyfill:yk,implementation:Aoe,shim:foe});Bk.exports=mk});var _C=U((SDe,bk)=>{"use strict";bk.exports=function(t){return t!==t}});var vC=U((_De,Ck)=>{"use strict";var uoe=_C();Ck.exports=function(){return Number.isNaN&&Number.isNaN(NaN)&&!Number.isNaN("a")?Number.isNaN:uoe}});var wk=U((vDe,Qk)=>{"use strict";var coe=Lh(),loe=vC();Qk.exports=function(){var t=loe();return coe(Number,{isNaN:t},{isNaN:function(){return Number.isNaN!==t}}),t}});var Rk=U((RDe,vk)=>{"use strict";var hoe=Ah(),doe=Lh(),goe=_C(),Sk=vC(),poe=wk(),_k=hoe(Sk(),Number);doe(_k,{getPolyfill:Sk,implementation:goe,shim:poe});vk.exports=_k});var zk=U((DDe,jk)=>{"use strict";function Dk(e,t){return Boe(e)||moe(e,t)||yoe(e,t)||Eoe()}function Eoe(){throw new TypeError(`Invalid attempt to destructure non-iterable instance.
-In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function yoe(e,t){if(e){if(typeof e=="string")return Tk(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);if(r==="Object"&&e.constructor&&(r=e.constructor.name),r==="Map"||r==="Set")return Array.from(e);if(r==="Arguments"||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return Tk(e,t)}}function Tk(e,t){(t==null||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function moe(e,t){var r=e==null?null:typeof Symbol<"u"&&e[Symbol.iterator]||e["@@iterator"];if(r!=null){var n,i,s,o,a=[],A=!0,f=!1;try{if(s=(r=r.call(e)).next,t===0){if(Object(r)!==r)return;A=!1}else for(;!(A=(n=s.call(r)).done)&&(a.push(n.value),a.length!==t);A=!0);}catch(l){f=!0,i=l}finally{try{if(!A&&r.return!=null&&(o=r.return(),Object(o)!==o))return}finally{if(f)throw i}}return a}}function Boe(e){if(Array.isArray(e))return e}function pi(e){"@babel/helpers - typeof";return pi=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(t){return typeof t}:function(t){return t&&typeof Symbol=="function"&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},pi(e)}var Ioe=/a/g.flags!==void 0,$p=function(t){var r=[];return t.forEach(function(n){return r.push(n)}),r},Nk=function(t){var r=[];return t.forEach(function(n,i){return r.push([i,n])}),r},Gk=Object.is?Object.is:Ik(),Xp=Object.getOwnPropertySymbols?Object.getOwnPropertySymbols:function(){return[]},RC=Number.isNaN?Number.isNaN:Rk();function TC(e){return e.call.bind(e)}var Oh=TC(Object.prototype.hasOwnProperty),Zp=TC(Object.prototype.propertyIsEnumerable),Mk=TC(Object.prototype.toString),gn=Yr().types,boe=gn.isAnyArrayBuffer,Coe=gn.isArrayBufferView,Fk=gn.isDate,Jp=gn.isMap,kk=gn.isRegExp,jp=gn.isSet,Qoe=gn.isNativeError,woe=gn.isBoxedPrimitive,Uk=gn.isNumberObject,xk=gn.isStringObject,Lk=gn.isBooleanObject,Pk=gn.isBigIntObject,Soe=gn.isSymbolObject,_oe=gn.isFloat32Array,voe=gn.isFloat64Array;function Roe(e){if(e.length===0||e.length>10)return!0;for(var t=0;t<e.length;t++){var r=e.charCodeAt(t);if(r<48||r>57)return!0}return e.length===10&&e>=Math.pow(2,32)}function zp(e){return Object.keys(e).filter(Roe).concat(Xp(e).filter(Object.prototype.propertyIsEnumerable.bind(e)))}function Yk(e,t){if(e===t)return 0;for(var r=e.length,n=t.length,i=0,s=Math.min(r,n);i<s;++i)if(e[i]!==t[i]){r=e[i],n=t[i];break}return r<n?-1:n<r?1:0}var Kp=void 0,Doe=!0,Toe=!1,DC=0,NC=1,Wk=2,Vk=3;function Noe(e,t){return Ioe?e.source===t.source&&e.flags===t.flags:RegExp.prototype.toString.call(e)===RegExp.prototype.toString.call(t)}function Moe(e,t){if(e.byteLength!==t.byteLength)return!1;for(var r=0;r<e.byteLength;r++)if(e[r]!==t[r])return!1;return!0}function Foe(e,t){return e.byteLength!==t.byteLength?!1:Yk(new Uint8Array(e.buffer,e.byteOffset,e.byteLength),new Uint8Array(t.buffer,t.byteOffset,t.byteLength))===0}function koe(e,t){return e.byteLength===t.byteLength&&Yk(new Uint8Array(e),new Uint8Array(t))===0}function Uoe(e,t){return Uk(e)?Uk(t)&&Gk(Number.prototype.valueOf.call(e),Number.prototype.valueOf.call(t)):xk(e)?xk(t)&&String.prototype.valueOf.call(e)===String.prototype.valueOf.call(t):Lk(e)?Lk(t)&&Boolean.prototype.valueOf.call(e)===Boolean.prototype.valueOf.call(t):Pk(e)?Pk(t)&&BigInt.prototype.valueOf.call(e)===BigInt.prototype.valueOf.call(t):Soe(t)&&Symbol.prototype.valueOf.call(e)===Symbol.prototype.valueOf.call(t)}function Ei(e,t,r,n){if(e===t)return e!==0?!0:r?Gk(e,t):!0;if(r){if(pi(e)!=="object")return typeof e=="number"&&RC(e)&&RC(t);if(pi(t)!=="object"||e===null||t===null||Object.getPrototypeOf(e)!==Object.getPrototypeOf(t))return!1}else{if(e===null||pi(e)!=="object")return t===null||pi(t)!=="object"?e==t:!1;if(t===null||pi(t)!=="object")return!1}var i=Mk(e),s=Mk(t);if(i!==s)return!1;if(Array.isArray(e)){if(e.length!==t.length)return!1;var o=zp(e,Kp),a=zp(t,Kp);return o.length!==a.length?!1:Ph(e,t,r,n,NC,o)}if(i==="[object Object]"&&(!Jp(e)&&Jp(t)||!jp(e)&&jp(t)))return!1;if(Fk(e)){if(!Fk(t)||Date.prototype.getTime.call(e)!==Date.prototype.getTime.call(t))return!1}else if(kk(e)){if(!kk(t)||!Noe(e,t))return!1}else if(Qoe(e)||e instanceof Error){if(e.message!==t.message||e.name!==t.name)return!1}else if(Coe(e)){if(!r&&(_oe(e)||voe(e))){if(!Moe(e,t))return!1}else if(!Foe(e,t))return!1;var A=zp(e,Kp),f=zp(t,Kp);return A.length!==f.length?!1:Ph(e,t,r,n,DC,A)}else{if(jp(e))return!jp(t)||e.size!==t.size?!1:Ph(e,t,r,n,Wk);if(Jp(e))return!Jp(t)||e.size!==t.size?!1:Ph(e,t,r,n,Vk);if(boe(e)){if(!koe(e,t))return!1}else if(woe(e)&&!Uoe(e,t))return!1}return Ph(e,t,r,n,DC)}function Ok(e,t){return t.filter(function(r){return Zp(e,r)})}function Ph(e,t,r,n,i,s){if(arguments.length===5){s=Object.keys(e);var o=Object.keys(t);if(s.length!==o.length)return!1}for(var a=0;a<s.length;a++)if(!Oh(t,s[a]))return!1;if(r&&arguments.length===5){var A=Xp(e);if(A.length!==0){var f=0;for(a=0;a<A.length;a++){var l=A[a];if(Zp(e,l)){if(!Zp(t,l))return!1;s.push(l),f++}else if(Zp(t,l))return!1}var p=Xp(t);if(A.length!==p.length&&Ok(t,p).length!==f)return!1}else{var I=Xp(t);if(I.length!==0&&Ok(t,I).length!==0)return!1}}if(s.length===0&&(i===DC||i===NC&&e.length===0||e.size===0))return!0;if(n===void 0)n={val1:new Map,val2:new Map,position:0};else{var S=n.val1.get(e);if(S!==void 0){var _=n.val2.get(t);if(_!==void 0)return S===_}n.position++}n.val1.set(e,n.position),n.val2.set(t,n.position);var N=Hoe(e,t,r,s,n,i);return n.val1.delete(e),n.val2.delete(t),N}function Hk(e,t,r,n){for(var i=$p(e),s=0;s<i.length;s++){var o=i[s];if(Ei(t,o,r,n))return e.delete(o),!0}return!1}function Jk(e){switch(pi(e)){case"undefined":return null;case"object":return;case"symbol":return!1;case"string":e=+e;case"number":if(RC(e))return!1}return!0}function xoe(e,t,r){var n=Jk(r);return n??(t.has(n)&&!e.has(n))}function Loe(e,t,r,n,i){var s=Jk(r);if(s!=null)return s;var o=t.get(s);return o===void 0&&!t.has(s)||!Ei(n,o,!1,i)?!1:!e.has(s)&&Ei(n,o,!1,i)}function Poe(e,t,r,n){for(var i=null,s=$p(e),o=0;o<s.length;o++){var a=s[o];if(pi(a)==="object"&&a!==null)i===null&&(i=new Set),i.add(a);else if(!t.has(a)){if(r||!xoe(e,t,a))return!1;i===null&&(i=new Set),i.add(a)}}if(i!==null){for(var A=$p(t),f=0;f<A.length;f++){var l=A[f];if(pi(l)==="object"&&l!==null){if(!Hk(i,l,r,n))return!1}else if(!r&&!e.has(l)&&!Hk(i,l,r,n))return!1}return i.size===0}return!0}function qk(e,t,r,n,i,s){for(var o=$p(e),a=0;a<o.length;a++){var A=o[a];if(Ei(r,A,i,s)&&Ei(n,t.get(A),i,s))return e.delete(A),!0}return!1}function Ooe(e,t,r,n){for(var i=null,s=Nk(e),o=0;o<s.length;o++){var a=Dk(s[o],2),A=a[0],f=a[1];if(pi(A)==="object"&&A!==null)i===null&&(i=new Set),i.add(A);else{var l=t.get(A);if(l===void 0&&!t.has(A)||!Ei(f,l,r,n)){if(r||!Loe(e,t,A,f,n))return!1;i===null&&(i=new Set),i.add(A)}}}if(i!==null){for(var p=Nk(t),I=0;I<p.length;I++){var S=Dk(p[I],2),_=S[0],N=S[1];if(pi(_)==="object"&&_!==null){if(!qk(i,e,_,N,r,n))return!1}else if(!r&&(!e.has(_)||!Ei(e.get(_),N,!1,n))&&!qk(i,e,_,N,!1,n))return!1}return i.size===0}return!0}function Hoe(e,t,r,n,i,s){var o=0;if(s===Wk){if(!Poe(e,t,r,i))return!1}else if(s===Vk){if(!Ooe(e,t,r,i))return!1}else if(s===NC)for(;o<e.length;o++)if(Oh(e,o)){if(!Oh(t,o)||!Ei(e[o],t[o],r,i))return!1}else{if(Oh(t,o))return!1;for(var a=Object.keys(e);o<a.length;o++){var A=a[o];if(!Oh(t,A)||!Ei(e[A],t[A],r,i))return!1}return a.length===Object.keys(t).length}for(o=0;o<n.length;o++){var f=n[o];if(!Ei(e[f],t[f],r,i))return!1}return!0}function qoe(e,t){return Ei(e,t,Toe)}function Goe(e,t){return Ei(e,t,Doe)}jk.exports={isDeepEqual:qoe,isDeepStrictEqual:Goe}});var Gt=U((TDe,hU)=>{"use strict";function ns(e){"@babel/helpers - typeof";return ns=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(t){return typeof t}:function(t){return t&&typeof Symbol=="function"&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},ns(e)}function Kk(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,Woe(n.key),n)}}function Yoe(e,t,r){return t&&Kk(e.prototype,t),r&&Kk(e,r),Object.defineProperty(e,"prototype",{writable:!1}),e}function Woe(e){var t=Voe(e,"string");return ns(t)==="symbol"?t:String(t)}function Voe(e,t){if(ns(e)!=="object"||e===null)return e;var r=e[Symbol.toPrimitive];if(r!==void 0){var n=r.call(e,t||"default");if(ns(n)!=="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(t==="string"?String:Number)(e)}function Joe(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}var joe=EC(),Hh=joe.codes,Xk=Hh.ERR_AMBIGUOUS_ARGUMENT,dc=Hh.ERR_INVALID_ARG_TYPE,zoe=Hh.ERR_INVALID_ARG_VALUE,Koe=Hh.ERR_INVALID_RETURN_VALUE,rA=Hh.ERR_MISSING_ARGS,nA=x4(),Xoe=Yr(),eE=Xoe.inspect,tU=Yr().types,Zoe=tU.isPromise,tE=tU.isRegExp,$oe=ik()(),rU=Vp()(),rE=ck()("RegExp.prototype.test"),tA,nE;function qh(){var e=zk();tA=e.isDeepEqual,nE=e.isDeepStrictEqual}var Zk=!1,Yt=hU.exports=MC,iE={};function is(e){throw e.message instanceof Error?e.message:new nA(e)}function nU(e,t,r,n,i){var s=arguments.length,o;if(s===0)o="Failed";else if(s===1)r=e,e=void 0;else{if(Zk===!1){Zk=!0;var a=process.emitWarning?process.emitWarning:console.warn.bind(console);a("assert.fail() with more than one argument is deprecated. Please use assert.strictEqual() instead or only pass a message.","DeprecationWarning","DEP0094")}s===2&&(n="!=")}if(r instanceof Error)throw r;var A={actual:e,expected:t,operator:n===void 0?"fail":n,stackStartFn:i||nU};r!==void 0&&(A.message=r);var f=new nA(A);throw o&&(f.message=o,f.generatedMessage=!0),f}Yt.fail=nU;Yt.AssertionError=nA;function iU(e,t,r,n){if(!r){var i=!1;if(t===0)i=!0,n="No value argument passed to `assert.ok()`";else if(n instanceof Error)throw n;var s=new nA({actual:r,expected:!0,message:n,operator:"==",stackStartFn:e});throw s.generatedMessage=i,s}}function MC(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];iU.apply(void 0,[MC,t.length].concat(t))}Yt.ok=MC;Yt.equal=function e(t,r,n){if(arguments.length<2)throw new rA("actual","expected");t!=r&&is({actual:t,expected:r,message:n,operator:"==",stackStartFn:e})};Yt.notEqual=function e(t,r,n){if(arguments.length<2)throw new rA("actual","expected");t==r&&is({actual:t,expected:r,message:n,operator:"!=",stackStartFn:e})};Yt.deepEqual=function e(t,r,n){if(arguments.length<2)throw new rA("actual","expected");tA===void 0&&qh(),tA(t,r)||is({actual:t,expected:r,message:n,operator:"deepEqual",stackStartFn:e})};Yt.notDeepEqual=function e(t,r,n){if(arguments.length<2)throw new rA("actual","expected");tA===void 0&&qh(),tA(t,r)&&is({actual:t,expected:r,message:n,operator:"notDeepEqual",stackStartFn:e})};Yt.deepStrictEqual=function e(t,r,n){if(arguments.length<2)throw new rA("actual","expected");tA===void 0&&qh(),nE(t,r)||is({actual:t,expected:r,message:n,operator:"deepStrictEqual",stackStartFn:e})};Yt.notDeepStrictEqual=sU;function sU(e,t,r){if(arguments.length<2)throw new rA("actual","expected");tA===void 0&&qh(),nE(e,t)&&is({actual:e,expected:t,message:r,operator:"notDeepStrictEqual",stackStartFn:sU})}Yt.strictEqual=function e(t,r,n){if(arguments.length<2)throw new rA("actual","expected");rU(t,r)||is({actual:t,expected:r,message:n,operator:"strictEqual",stackStartFn:e})};Yt.notStrictEqual=function e(t,r,n){if(arguments.length<2)throw new rA("actual","expected");rU(t,r)&&is({actual:t,expected:r,message:n,operator:"notStrictEqual",stackStartFn:e})};var $k=Yoe(function e(t,r,n){var i=this;Joe(this,e),r.forEach(function(s){s in t&&(n!==void 0&&typeof n[s]=="string"&&tE(t[s])&&rE(t[s],n[s])?i[s]=n[s]:i[s]=t[s])})});function eae(e,t,r,n,i,s){if(!(r in e)||!nE(e[r],t[r])){if(!n){var o=new $k(e,i),a=new $k(t,i,e),A=new nA({actual:o,expected:a,operator:"deepStrictEqual",stackStartFn:s});throw A.actual=e,A.expected=t,A.operator=s.name,A}is({actual:e,expected:t,message:n,operator:s.name,stackStartFn:s})}}function oU(e,t,r,n){if(typeof t!="function"){if(tE(t))return rE(t,e);if(arguments.length===2)throw new dc("expected",["Function","RegExp"],t);if(ns(e)!=="object"||e===null){var i=new nA({actual:e,expected:t,message:r,operator:"deepStrictEqual",stackStartFn:n});throw i.operator=n.name,i}var s=Object.keys(t);if(t instanceof Error)s.push("name","message");else if(s.length===0)throw new zoe("error",t,"may not be an empty object");return tA===void 0&&qh(),s.forEach(function(o){typeof e[o]=="string"&&tE(t[o])&&rE(t[o],e[o])||eae(e,t,o,r,s,n)}),!0}return t.prototype!==void 0&&e instanceof t?!0:Error.isPrototypeOf(t)?!1:t.call({},e)===!0}function aU(e){if(typeof e!="function")throw new dc("fn","Function",e);try{e()}catch(t){return t}return iE}function eU(e){return Zoe(e)||e!==null&&ns(e)==="object"&&typeof e.then=="function"&&typeof e.catch=="function"}function AU(e){return Promise.resolve().then(function(){var t;if(typeof e=="function"){if(t=e(),!eU(t))throw new Koe("instance of Promise","promiseFn",t)}else if(eU(e))t=e;else throw new dc("promiseFn",["Function","Promise"],e);return Promise.resolve().then(function(){return t}).then(function(){return iE}).catch(function(r){return r})})}function fU(e,t,r,n){if(typeof r=="string"){if(arguments.length===4)throw new dc("error",["Object","Error","Function","RegExp"],r);if(ns(t)==="object"&&t!==null){if(t.message===r)throw new Xk("error/message",'The error message "'.concat(t.message,'" is identical to the message.'))}else if(t===r)throw new Xk("error/message",'The error "'.concat(t,'" is identical to the message.'));n=r,r=void 0}else if(r!=null&&ns(r)!=="object"&&typeof r!="function")throw new dc("error",["Object","Error","Function","RegExp"],r);if(t===iE){var i="";r&&r.name&&(i+=" (".concat(r.name,")")),i+=n?": ".concat(n):".";var s=e.name==="rejects"?"rejection":"exception";is({actual:void 0,expected:r,operator:e.name,message:"Missing expected ".concat(s).concat(i),stackStartFn:e})}if(r&&!oU(t,r,n,e))throw t}function uU(e,t,r,n){if(t!==iE){if(typeof r=="string"&&(n=r,r=void 0),!r||oU(t,r)){var i=n?": ".concat(n):".",s=e.name==="doesNotReject"?"rejection":"exception";is({actual:t,expected:r,operator:e.name,message:"Got unwanted ".concat(s).concat(i,`
-`)+'Actual message: "'.concat(t&&t.message,'"'),stackStartFn:e})}throw t}}Yt.throws=function e(t){for(var r=arguments.length,n=new Array(r>1?r-1:0),i=1;i<r;i++)n[i-1]=arguments[i];fU.apply(void 0,[e,aU(t)].concat(n))};Yt.rejects=function e(t){for(var r=arguments.length,n=new Array(r>1?r-1:0),i=1;i<r;i++)n[i-1]=arguments[i];return AU(t).then(function(s){return fU.apply(void 0,[e,s].concat(n))})};Yt.doesNotThrow=function e(t){for(var r=arguments.length,n=new Array(r>1?r-1:0),i=1;i<r;i++)n[i-1]=arguments[i];uU.apply(void 0,[e,aU(t)].concat(n))};Yt.doesNotReject=function e(t){for(var r=arguments.length,n=new Array(r>1?r-1:0),i=1;i<r;i++)n[i-1]=arguments[i];return AU(t).then(function(s){return uU.apply(void 0,[e,s].concat(n))})};Yt.ifError=function e(t){if(t!=null){var r="ifError got unwanted exception: ";ns(t)==="object"&&typeof t.message=="string"?t.message.length===0&&t.constructor?r+=t.constructor.name:r+=t.message:r+=eE(t);var n=new nA({actual:t,expected:null,operator:"ifError",message:r,stackStartFn:e}),i=t.stack;if(typeof i=="string"){var s=i.split(`
-`);s.shift();for(var o=n.stack.split(`
-`),a=0;a<s.length;a++){var A=o.indexOf(s[a]);if(A!==-1){o=o.slice(0,A);break}}n.stack="".concat(o.join(`
-`),`
-`).concat(s.join(`
-`))}throw n}};function cU(e,t,r,n,i){if(!tE(t))throw new dc("regexp","RegExp",t);var s=i==="match";if(typeof e!="string"||rE(t,e)!==s){if(r instanceof Error)throw r;var o=!r;r=r||(typeof e!="string"?'The "string" argument must be of type string. Received type '+"".concat(ns(e)," (").concat(eE(e),")"):(s?"The input did not match the regular expression ":"The input was expected to not match the regular expression ")+"".concat(eE(t),`. Input:
-
-`).concat(eE(e),`
-`));var a=new nA({actual:e,expected:t,message:r,operator:i,stackStartFn:n});throw a.generatedMessage=o,a}}Yt.match=function e(t,r,n){cU(t,r,n,e,"match")};Yt.doesNotMatch=function e(t,r,n){cU(t,r,n,e,"doesNotMatch")};function lU(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];iU.apply(void 0,[lU,t.length].concat(t))}Yt.strict=$oe(lU,Yt,{equal:Yt.strictEqual,deepEqual:Yt.deepStrictEqual,notEqual:Yt.notStrictEqual,notDeepEqual:Yt.notDeepStrictEqual});Yt.strict.strict=Yt.strict});var gc=U((NDe,dU)=>{"use strict";var FC=class{constructor(){this._enabled=!1,this._store=void 0}disable(){this._enabled=!1,this._store=void 0}enterWith(t){this._enabled=!0,this._store=t}exit(t,...r){let n=this._enabled,i=this._store;this._enabled=!1,this._store=void 0;try{return t(...r)}finally{this._enabled=n,this._store=i}}getStore(){return this._enabled?this._store:void 0}run(t,r,...n){let i=this._enabled,s=this._store;this._enabled=!0,this._store=t;try{return r(...n)}finally{this._enabled=i,this._store=s}}},kC=class{constructor(t="SecureExecAsyncResource"){this.type=t}bind(t,r=void 0){return typeof t!="function"?t:(...n)=>this.runInAsyncScope(t,r??this,...n)}emitDestroy(){}runInAsyncScope(t,r,...n){return t.apply(r,n)}};function tae(){return{enable(){return this},disable(){return this}}}function rae(){return 0}function nae(){return 0}dU.exports={AsyncLocalStorage:FC,AsyncResource:kC,createHook:tae,executionAsyncId:rae,triggerAsyncId:nae}});var mr=U((MDe,PU)=>{"use strict";var gU=Symbol.for("undici.error.UND_ERR"),Xt=class extends Error{constructor(t,r){super(t,r),this.name="UndiciError",this.code="UND_ERR"}static[Symbol.hasInstance](t){return t&&t[gU]===!0}get[gU](){return!0}},pU=Symbol.for("undici.error.UND_ERR_CONNECT_TIMEOUT"),UC=class extends Xt{constructor(t){super(t),this.name="ConnectTimeoutError",this.message=t||"Connect Timeout Error",this.code="UND_ERR_CONNECT_TIMEOUT"}static[Symbol.hasInstance](t){return t&&t[pU]===!0}get[pU](){return!0}},EU=Symbol.for("undici.error.UND_ERR_HEADERS_TIMEOUT"),xC=class extends Xt{constructor(t){super(t),this.name="HeadersTimeoutError",this.message=t||"Headers Timeout Error",this.code="UND_ERR_HEADERS_TIMEOUT"}static[Symbol.hasInstance](t){return t&&t[EU]===!0}get[EU](){return!0}},yU=Symbol.for("undici.error.UND_ERR_HEADERS_OVERFLOW"),LC=class extends Xt{constructor(t){super(t),this.name="HeadersOverflowError",this.message=t||"Headers Overflow Error",this.code="UND_ERR_HEADERS_OVERFLOW"}static[Symbol.hasInstance](t){return t&&t[yU]===!0}get[yU](){return!0}},mU=Symbol.for("undici.error.UND_ERR_BODY_TIMEOUT"),PC=class extends Xt{constructor(t){super(t),this.name="BodyTimeoutError",this.message=t||"Body Timeout Error",this.code="UND_ERR_BODY_TIMEOUT"}static[Symbol.hasInstance](t){return t&&t[mU]===!0}get[mU](){return!0}},BU=Symbol.for("undici.error.UND_ERR_INVALID_ARG"),OC=class extends Xt{constructor(t){super(t),this.name="InvalidArgumentError",this.message=t||"Invalid Argument Error",this.code="UND_ERR_INVALID_ARG"}static[Symbol.hasInstance](t){return t&&t[BU]===!0}get[BU](){return!0}},IU=Symbol.for("undici.error.UND_ERR_INVALID_RETURN_VALUE"),HC=class extends Xt{constructor(t){super(t),this.name="InvalidReturnValueError",this.message=t||"Invalid Return Value Error",this.code="UND_ERR_INVALID_RETURN_VALUE"}static[Symbol.hasInstance](t){return t&&t[IU]===!0}get[IU](){return!0}},bU=Symbol.for("undici.error.UND_ERR_ABORT"),sE=class extends Xt{constructor(t){super(t),this.name="AbortError",this.message=t||"The operation was aborted",this.code="UND_ERR_ABORT"}static[Symbol.hasInstance](t){return t&&t[bU]===!0}get[bU](){return!0}},CU=Symbol.for("undici.error.UND_ERR_ABORTED"),qC=class extends sE{constructor(t){super(t),this.name="AbortError",this.message=t||"Request aborted",this.code="UND_ERR_ABORTED"}static[Symbol.hasInstance](t){return t&&t[CU]===!0}get[CU](){return!0}},QU=Symbol.for("undici.error.UND_ERR_INFO"),GC=class extends Xt{constructor(t){super(t),this.name="InformationalError",this.message=t||"Request information",this.code="UND_ERR_INFO"}static[Symbol.hasInstance](t){return t&&t[QU]===!0}get[QU](){return!0}},wU=Symbol.for("undici.error.UND_ERR_REQ_CONTENT_LENGTH_MISMATCH"),YC=class extends Xt{constructor(t){super(t),this.name="RequestContentLengthMismatchError",this.message=t||"Request body length does not match content-length header",this.code="UND_ERR_REQ_CONTENT_LENGTH_MISMATCH"}static[Symbol.hasInstance](t){return t&&t[wU]===!0}get[wU](){return!0}},SU=Symbol.for("undici.error.UND_ERR_RES_CONTENT_LENGTH_MISMATCH"),WC=class extends Xt{constructor(t){super(t),this.name="ResponseContentLengthMismatchError",this.message=t||"Response body length does not match content-length header",this.code="UND_ERR_RES_CONTENT_LENGTH_MISMATCH"}static[Symbol.hasInstance](t){return t&&t[SU]===!0}get[SU](){return!0}},_U=Symbol.for("undici.error.UND_ERR_DESTROYED"),VC=class extends Xt{constructor(t){super(t),this.name="ClientDestroyedError",this.message=t||"The client is destroyed",this.code="UND_ERR_DESTROYED"}static[Symbol.hasInstance](t){return t&&t[_U]===!0}get[_U](){return!0}},vU=Symbol.for("undici.error.UND_ERR_CLOSED"),JC=class extends Xt{constructor(t){super(t),this.name="ClientClosedError",this.message=t||"The client is closed",this.code="UND_ERR_CLOSED"}static[Symbol.hasInstance](t){return t&&t[vU]===!0}get[vU](){return!0}},RU=Symbol.for("undici.error.UND_ERR_SOCKET"),jC=class extends Xt{constructor(t,r){super(t),this.name="SocketError",this.message=t||"Socket error",this.code="UND_ERR_SOCKET",this.socket=r}static[Symbol.hasInstance](t){return t&&t[RU]===!0}get[RU](){return!0}},DU=Symbol.for("undici.error.UND_ERR_NOT_SUPPORTED"),zC=class extends Xt{constructor(t){super(t),this.name="NotSupportedError",this.message=t||"Not supported error",this.code="UND_ERR_NOT_SUPPORTED"}static[Symbol.hasInstance](t){return t&&t[DU]===!0}get[DU](){return!0}},TU=Symbol.for("undici.error.UND_ERR_BPL_MISSING_UPSTREAM"),KC=class extends Xt{constructor(t){super(t),this.name="MissingUpstreamError",this.message=t||"No upstream has been added to the BalancedPool",this.code="UND_ERR_BPL_MISSING_UPSTREAM"}static[Symbol.hasInstance](t){return t&&t[TU]===!0}get[TU](){return!0}},NU=Symbol.for("undici.error.UND_ERR_HTTP_PARSER"),XC=class extends Error{constructor(t,r,n){super(t),this.name="HTTPParserError",this.code=r?`HPE_${r}`:void 0,this.data=n?n.toString():void 0}static[Symbol.hasInstance](t){return t&&t[NU]===!0}get[NU](){return!0}},MU=Symbol.for("undici.error.UND_ERR_RES_EXCEEDED_MAX_SIZE"),ZC=class extends Xt{constructor(t){super(t),this.name="ResponseExceededMaxSizeError",this.message=t||"Response content exceeded max size",this.code="UND_ERR_RES_EXCEEDED_MAX_SIZE"}static[Symbol.hasInstance](t){return t&&t[MU]===!0}get[MU](){return!0}},FU=Symbol.for("undici.error.UND_ERR_REQ_RETRY"),$C=class extends Xt{constructor(t,r,{headers:n,data:i}){super(t),this.name="RequestRetryError",this.message=t||"Request retry error",this.code="UND_ERR_REQ_RETRY",this.statusCode=r,this.data=i,this.headers=n}static[Symbol.hasInstance](t){return t&&t[FU]===!0}get[FU](){return!0}},kU=Symbol.for("undici.error.UND_ERR_RESPONSE"),eQ=class extends Xt{constructor(t,r,{headers:n,body:i}){super(t),this.name="ResponseError",this.message=t||"Response error",this.code="UND_ERR_RESPONSE",this.statusCode=r,this.body=i,this.headers=n}static[Symbol.hasInstance](t){return t&&t[kU]===!0}get[kU](){return!0}},UU=Symbol.for("undici.error.UND_ERR_PRX_TLS"),tQ=class extends Xt{constructor(t,r,n={}){super(r,{cause:t,...n}),this.name="SecureProxyConnectionError",this.message=r||"Secure Proxy Connection failed",this.code="UND_ERR_PRX_TLS",this.cause=t}static[Symbol.hasInstance](t){return t&&t[UU]===!0}get[UU](){return!0}},xU=Symbol.for("undici.error.UND_ERR_MAX_ORIGINS_REACHED"),rQ=class extends Xt{constructor(t){super(t),this.name="MaxOriginsReachedError",this.message=t||"Maximum allowed origins reached",this.code="UND_ERR_MAX_ORIGINS_REACHED"}static[Symbol.hasInstance](t){return t&&t[xU]===!0}get[xU](){return!0}},nQ=class extends Xt{constructor(t,r){super(t),this.name="Socks5ProxyError",this.message=t||"SOCKS5 proxy error",this.code=r||"UND_ERR_SOCKS5"}},LU=Symbol.for("undici.error.UND_ERR_WS_MESSAGE_SIZE_EXCEEDED"),iQ=class extends Xt{constructor(t){super(t),this.name="MessageSizeExceededError",this.message=t||"Max decompressed message size exceeded",this.code="UND_ERR_WS_MESSAGE_SIZE_EXCEEDED"}static[Symbol.hasInstance](t){return t&&t[LU]===!0}get[LU](){return!0}};PU.exports={AbortError:sE,HTTPParserError:XC,UndiciError:Xt,HeadersTimeoutError:xC,HeadersOverflowError:LC,BodyTimeoutError:PC,RequestContentLengthMismatchError:YC,ConnectTimeoutError:UC,InvalidArgumentError:OC,InvalidReturnValueError:HC,RequestAbortedError:qC,ClientDestroyedError:VC,ClientClosedError:JC,InformationalError:GC,SocketError:jC,NotSupportedError:zC,ResponseContentLengthMismatchError:WC,BalancedPoolMissingUpstreamError:KC,ResponseExceededMaxSizeError:ZC,RequestRetryError:$C,ResponseError:eQ,SecureProxyConnectionError:tQ,MaxOriginsReachedError:rQ,Socks5ProxyError:nQ,MessageSizeExceededError:iQ}});var Dn=U((FDe,OU)=>{"use strict";OU.exports={kClose:Symbol("close"),kDestroy:Symbol("destroy"),kDispatch:Symbol("dispatch"),kUrl:Symbol("url"),kWriting:Symbol("writing"),kResuming:Symbol("resuming"),kQueue:Symbol("queue"),kConnect:Symbol("connect"),kConnecting:Symbol("connecting"),kKeepAliveDefaultTimeout:Symbol("default keep alive timeout"),kKeepAliveMaxTimeout:Symbol("max keep alive timeout"),kKeepAliveTimeoutThreshold:Symbol("keep alive timeout threshold"),kKeepAliveTimeoutValue:Symbol("keep alive timeout"),kKeepAlive:Symbol("keep alive"),kHeadersTimeout:Symbol("headers timeout"),kBodyTimeout:Symbol("body timeout"),kServerName:Symbol("server name"),kLocalAddress:Symbol("local address"),kHost:Symbol("host"),kNoRef:Symbol("no ref"),kBodyUsed:Symbol("used"),kBody:Symbol("abstracted request body"),kRunning:Symbol("running"),kBlocking:Symbol("blocking"),kPending:Symbol("pending"),kSize:Symbol("size"),kBusy:Symbol("busy"),kQueued:Symbol("queued"),kFree:Symbol("free"),kConnected:Symbol("connected"),kClosed:Symbol("closed"),kNeedDrain:Symbol("need drain"),kReset:Symbol("reset"),kDestroyed:Symbol.for("nodejs.stream.destroyed"),kResume:Symbol("resume"),kOnError:Symbol("on error"),kMaxHeadersSize:Symbol("max headers size"),kRunningIdx:Symbol("running index"),kPendingIdx:Symbol("pending index"),kError:Symbol("error"),kClients:Symbol("clients"),kClient:Symbol("client"),kParser:Symbol("parser"),kOnDestroyed:Symbol("destroy callbacks"),kPipelining:Symbol("pipelining"),kSocket:Symbol("socket"),kHostHeader:Symbol("host header"),kConnector:Symbol("connector"),kStrictContentLength:Symbol("strict content length"),kMaxRedirections:Symbol("maxRedirections"),kMaxRequests:Symbol("maxRequestsPerClient"),kProxy:Symbol("proxy agent options"),kCounter:Symbol("socket request counter"),kMaxResponseSize:Symbol("max response size"),kHTTP2Session:Symbol("http2Session"),kHTTP2SessionState:Symbol("http2Session state"),kRetryHandlerDefaultRetry:Symbol("retry agent default retry"),kConstruct:Symbol("constructable"),kListeners:Symbol("listeners"),kHTTPContext:Symbol("http context"),kMaxConcurrentStreams:Symbol("max concurrent streams"),kHTTP2InitialWindowSize:Symbol("http2 initial window size"),kHTTP2ConnectionWindowSize:Symbol("http2 connection window size"),kEnableConnectProtocol:Symbol("http2session connect protocol"),kRemoteSettings:Symbol("http2session remote settings"),kHTTP2Stream:Symbol("http2session client stream"),kPingInterval:Symbol("ping interval"),kNoProxyAgent:Symbol("no proxy agent"),kHttpProxyAgent:Symbol("http proxy agent"),kHttpsProxyAgent:Symbol("https proxy agent"),kSocks5ProxyAgent:Symbol("socks5 proxy agent")}});var aE=U((kDe,HU)=>{"use strict";function hf(){if(!globalThis._httpModule)throw new Error("node:http bridge module is not available");return globalThis._httpModule}var oE=class{},sQ=class{},oQ=class{},aQ=class{},AQ=class{},iae=["CHECKOUT","CONNECT","COPY","DELETE","GET","HEAD","LOCK","M-SEARCH","MERGE","MKACTIVITY","MKCOL","MOVE","NOTIFY","OPTIONS","PATCH","POST","PROPFIND","PROPPATCH","PURGE","PUT","REPORT","SEARCH","SUBSCRIBE","TRACE","UNLOCK","UNSUBSCRIBE"];HU.exports={Agent:oE,ClientRequest:sQ,IncomingMessage:oQ,METHODS:iae,STATUS_CODES:{},Server:aQ,ServerResponse:AQ,_checkInvalidHeaderChar(e){return hf()._checkInvalidHeaderChar(e)},_checkIsHttpToken(e){return hf()._checkIsHttpToken(e)},createServer(...e){return hf().createServer(...e)},get(...e){return hf().get(...e)},globalAgent:new oE,maxHeaderSize:65535,request(...e){return hf().request(...e)},validateHeaderName(e,t){return hf().validateHeaderName(e,t)},validateHeaderValue(e,t){return hf().validateHeaderValue(e,t)}}});var AE=U((UDe,GU)=>{"use strict";function sae(){let e=globalThis._netModule;if(!e)throw new Error("node:net bridge module is not available");return e}var qU={};for(let e of["BlockList","Socket","SocketAddress","Server","Stream","connect","createConnection","createServer","getDefaultAutoSelectFamily","getDefaultAutoSelectFamilyAttemptTimeout","isIP","isIPv4","isIPv6","setDefaultAutoSelectFamily","setDefaultAutoSelectFamilyAttemptTimeout"])Object.defineProperty(qU,e,{enumerable:!0,get(){return sae()[e]}});GU.exports=qU});var gQ=U((xDe,jU)=>{"use strict";var pc=0,fQ=1e3,uQ=(fQ>>1)-1,iA,cQ=Symbol("kFastTimer"),Jo=[],lQ=-2,hQ=-1,VU=0,YU=1;function dQ(){pc+=uQ;let e=0,t=Jo.length;for(;e<t;){let r=Jo[e];r._state===VU?(r._idleStart=pc-uQ,r._state=YU):r._state===YU&&pc>=r._idleStart+r._idleTimeout&&(r._state=hQ,r._idleStart=-1,r._onTimeout(r._timerArg)),r._state===hQ?(r._state=lQ,--t!==0&&(Jo[e]=Jo[t])):++e}Jo.length=t,Jo.length!==0&&JU()}function JU(){iA?.refresh?iA.refresh():(clearTimeout(iA),iA=setTimeout(dQ,uQ),iA?.unref())}var WU;WU=cQ;var fE=class{constructor(t,r,n){y(this,WU,!0);y(this,"_state",lQ);y(this,"_idleTimeout",-1);y(this,"_idleStart",-1);y(this,"_onTimeout");y(this,"_timerArg");this._onTimeout=t,this._idleTimeout=r,this._timerArg=n,this.refresh()}refresh(){this._state===lQ&&Jo.push(this),(!iA||Jo.length===1)&&JU(),this._state=VU}clear(){this._state=hQ,this._idleStart=-1}};jU.exports={setTimeout(e,t,r){return t<=fQ?setTimeout(e,t,r):new fE(e,t,r)},clearTimeout(e){e[cQ]?e.clear():clearTimeout(e)},setFastTimeout(e,t,r){return new fE(e,t,r)},clearFastTimeout(e){e.clear()},now(){return pc},tick(e=0){pc+=e-fQ+1,dQ(),dQ()},reset(){pc=0,Jo.length=0,clearTimeout(iA),iA=null},kFastTimer:cQ}});var cE=U((PDe,KU)=>{"use strict";var pQ=["Accept","Accept-Encoding","Accept-Language","Accept-Ranges","Access-Control-Allow-Credentials","Access-Control-Allow-Headers","Access-Control-Allow-Methods","Access-Control-Allow-Origin","Access-Control-Expose-Headers","Access-Control-Max-Age","Access-Control-Request-Headers","Access-Control-Request-Method","Age","Allow","Alt-Svc","Alt-Used","Authorization","Cache-Control","Clear-Site-Data","Connection","Content-Disposition","Content-Encoding","Content-Language","Content-Length","Content-Location","Content-Range","Content-Security-Policy","Content-Security-Policy-Report-Only","Content-Type","Cookie","Cross-Origin-Embedder-Policy","Cross-Origin-Opener-Policy","Cross-Origin-Resource-Policy","Date","Device-Memory","Downlink","ECT","ETag","Expect","Expect-CT","Expires","Forwarded","From","Host","If-Match","If-Modified-Since","If-None-Match","If-Range","If-Unmodified-Since","Keep-Alive","Last-Modified","Link","Location","Max-Forwards","Origin","Permissions-Policy","Pragma","Proxy-Authenticate","Proxy-Authorization","RTT","Range","Referer","Referrer-Policy","Refresh","Retry-After","Sec-WebSocket-Accept","Sec-WebSocket-Extensions","Sec-WebSocket-Key","Sec-WebSocket-Protocol","Sec-WebSocket-Version","Server","Server-Timing","Service-Worker-Allowed","Service-Worker-Navigation-Preload","Set-Cookie","SourceMap","Strict-Transport-Security","Supports-Loading-Mode","TE","Timing-Allow-Origin","Trailer","Transfer-Encoding","Upgrade","Upgrade-Insecure-Requests","User-Agent","Vary","Via","WWW-Authenticate","X-Content-Type-Options","X-DNS-Prefetch-Control","X-Frame-Options","X-Permitted-Cross-Domain-Policies","X-Powered-By","X-Requested-With","X-XSS-Protection"],uE={};Object.setPrototypeOf(uE,null);var zU={};Object.setPrototypeOf(zU,null);function oae(e){let t=zU[e];return t===void 0&&(t=Buffer.from(e)),t}for(let e=0;e<pQ.length;++e){let t=pQ[e],r=t.toLowerCase();uE[t]=uE[r]=r}KU.exports={wellknownHeaderNames:pQ,headerNameLowerCasedRecord:uE,getHeaderNameAsBuffer:oae}});var ex=U((ODe,$U)=>{"use strict";var{wellknownHeaderNames:XU,headerNameLowerCasedRecord:aae}=cE(),EQ=class e{constructor(t,r,n){y(this,"value",null);y(this,"left",null);y(this,"middle",null);y(this,"right",null);y(this,"code");if(n===void 0||n>=t.length)throw new TypeError("Unreachable");if((this.code=t.charCodeAt(n))>127)throw new TypeError("key must be ascii string");t.length!==++n?this.middle=new e(t,r,n):this.value=r}add(t,r){let n=t.length;if(n===0)throw new TypeError("Unreachable");let i=0,s=this;for(;;){let o=t.charCodeAt(i);if(o>127)throw new TypeError("key must be ascii string");if(s.code===o)if(n===++i){s.value=r;break}else if(s.middle!==null)s=s.middle;else{s.middle=new e(t,r,i);break}else if(s.code<o)if(s.left!==null)s=s.left;else{s.left=new e(t,r,i);break}else if(s.right!==null)s=s.right;else{s.right=new e(t,r,i);break}}}search(t){let r=t.length,n=0,i=this;for(;i!==null&&n<r;){let s=t[n];for(s<=90&&s>=65&&(s|=32);i!==null;){if(s===i.code){if(r===++n)return i;i=i.middle;break}i=i.code<s?i.left:i.right}}return null}},lE=class{constructor(){y(this,"node",null)}insert(t,r){this.node===null?this.node=new EQ(t,r,0):this.node.add(t,r)}lookup(t){return this.node?.search(t)?.value??null}},ZU=new lE;for(let e=0;e<XU.length;++e){let t=aae[XU[e]];ZU.insert(t,t)}$U.exports={TernarySearchTree:lE,tree:ZU}});var Zt=U((qDe,Ix)=>{"use strict";var Gh=Gt(),{kDestroyed:ix,kBodyUsed:Ec,kListeners:yc,kBody:tx}=Dn(),{IncomingMessage:Aae}=aE(),sx=(ts(),Os(qt)),fae=AE(),{stringify:uae}=(NI(),Os(F0)),{EventEmitter:cae}=Zi(),hE=gQ(),{InvalidArgumentError:Nr,ConnectTimeoutError:lae}=mr(),{headerNameLowerCasedRecord:hae}=cE(),{tree:ox}=ex(),[dae,gae]=process.versions.node.split(".",2).map(e=>Number(e)),gE=class{constructor(t){this[tx]=t,this[Ec]=!1}async*[Symbol.asyncIterator](){Gh(!this[Ec],"disturbed"),this[Ec]=!0,yield*this[tx]}};function rx(){}function pae(e){return pE(e)?(lx(e)===0&&e.on("data",function(){Gh(!1)}),typeof e.readableDidRead!="boolean"&&(e[Ec]=!1,cae.prototype.on.call(e,"data",function(){this[Ec]=!0})),e):e&&typeof e.pipeTo=="function"?new gE(e):e&&Ex(e)?e:e&&typeof e!="string"&&!ArrayBuffer.isView(e)&&cx(e)?new gE(e):e}function pE(e){return e&&typeof e=="object"&&typeof e.pipe=="function"&&typeof e.on=="function"}function ax(e){if(e===null)return!1;if(e instanceof Blob)return!0;if(typeof e!="object")return!1;{let t=e[Symbol.toStringTag];return(t==="Blob"||t==="File")&&("stream"in e&&typeof e.stream=="function"||"arrayBuffer"in e&&typeof e.arrayBuffer=="function")}}function Ax(e){return e.includes("?")||e.includes("#")}function Eae(e,t){if(Ax(e))throw new Error('Query params cannot be passed when url already contains "?" or "#".');let r=uae(t);return r&&(e+="?"+r),e}function fx(e){let t=parseInt(e,10);return t===Number(e)&&t>=0&&t<=65535}function dE(e){return e!=null&&e[0]==="h"&&e[1]==="t"&&e[2]==="t"&&e[3]==="p"&&(e[4]===":"||e[4]==="s"&&e[5]===":")}function ux(e){if(typeof e=="string"){if(e=new URL(e),!dE(e.origin||e.protocol))throw new Nr("Invalid URL protocol: the URL must start with `http:` or `https:`.");return e}if(!e||typeof e!="object")throw new Nr("Invalid URL: The URL argument must be a non-null object.");if(!(e instanceof URL)){if(e.port!=null&&e.port!==""&&fx(e.port)===!1)throw new Nr("Invalid URL: port must be a valid integer or a string representation of an integer.");if(e.path!=null&&typeof e.path!="string")throw new Nr("Invalid URL path: the path must be a string or null/undefined.");if(e.pathname!=null&&typeof e.pathname!="string")throw new Nr("Invalid URL pathname: the pathname must be a string or null/undefined.");if(e.hostname!=null&&typeof e.hostname!="string")throw new Nr("Invalid URL hostname: the hostname must be a string or null/undefined.");if(e.origin!=null&&typeof e.origin!="string")throw new Nr("Invalid URL origin: the origin must be a string or null/undefined.");if(!dE(e.origin||e.protocol))throw new Nr("Invalid URL protocol: the URL must start with `http:` or `https:`.");let t=e.port!=null?e.port:e.protocol==="https:"?443:80,r=e.origin!=null?e.origin:`${e.protocol||""}//${e.hostname||""}:${t}`,n=e.path!=null?e.path:`${e.pathname||""}${e.search||""}`;return r[r.length-1]==="/"&&(r=r.slice(0,r.length-1)),n&&n[0]!=="/"&&(n=`/${n}`),new URL(`${r}${n}`)}if(!dE(e.origin||e.protocol))throw new Nr("Invalid URL protocol: the URL must start with `http:` or `https:`.");return e}function yae(e){if(e=ux(e),e.pathname!=="/"||e.search||e.hash)throw new Nr("invalid url");return e}function mae(e){if(e[0]==="["){let r=e.indexOf("]");return Gh(r!==-1),e.substring(1,r)}let t=e.indexOf(":");return t===-1?e:e.substring(0,t)}function Bae(e){if(!e)return null;Gh(typeof e=="string");let t=mae(e);return fae.isIP(t)?"":t}function Iae(e){return JSON.parse(JSON.stringify(e))}function bae(e){return e!=null&&typeof e[Symbol.asyncIterator]=="function"}function cx(e){return e!=null&&(typeof e[Symbol.iterator]=="function"||typeof e[Symbol.asyncIterator]=="function")}function Cae(e){let t=Object.getPrototypeOf(e);return Object.prototype.hasOwnProperty.call(e,Symbol.iterator)||t!=null&&t!==Object.prototype&&typeof e[Symbol.iterator]=="function"}function lx(e){if(e==null)return 0;if(pE(e)){let t=e._readableState;return t&&t.objectMode===!1&&t.ended===!0&&Number.isFinite(t.length)?t.length:null}else{if(ax(e))return e.size!=null?e.size:null;if(px(e))return e.byteLength}return null}function hx(e){return e&&!!(e.destroyed||e[ix]||sx.isDestroyed?.(e))}function dx(e,t){e==null||!pE(e)||hx(e)||(typeof e.destroy=="function"?(Object.getPrototypeOf(e).constructor===Aae&&(e.socket=null),e.destroy(t)):t&&queueMicrotask(()=>{e.emit("error",t)}),e.destroyed!==!0&&(e[ix]=!0))}var Qae=/timeout=(\d+)/;function wae(e){let t=e.match(Qae);return t?parseInt(t[1],10)*1e3:null}function gx(e){return typeof e=="string"?hae[e]??e.toLowerCase():ox.lookup(e)??e.toString("latin1").toLowerCase()}function Sae(e){return ox.lookup(e)??e.toString("latin1").toLowerCase()}function _ae(e,t){t===void 0&&(t={});for(let r=0;r<e.length;r+=2){let n=gx(e[r]),i=t[n];if(i!==void 0)if(Object.hasOwn(t,n))typeof i=="string"&&(i=[i],t[n]=i),i.push(e[r+1].toString("latin1"));else{let s=typeof e[r+1]=="string"?e[r+1]:Array.isArray(e[r+1])?e[r+1].map(o=>o.toString("latin1")):e[r+1].toString("latin1");n==="__proto__"?Object.defineProperty(t,n,{value:s,enumerable:!0,configurable:!0,writable:!0}):t[n]=s}else{let s=typeof e[r+1]=="string"?e[r+1]:Array.isArray(e[r+1])?e[r+1].map(o=>o.toString("latin1")):e[r+1].toString("latin1");t[n]=s}}return t}function vae(e){let t=e.length,r=new Array(t),n,i;for(let s=0;s<t;s+=2)n=e[s],i=e[s+1],typeof n!="string"&&(n=n.toString()),typeof i!="string"&&(i=i.toString("latin1")),r[s]=n,r[s+1]=i;return r}function Rae(e){if(!Array.isArray(e))throw new TypeError("expected headers to be an array");return e.map(t=>Buffer.from(t))}function px(e){return e instanceof Uint8Array||Buffer.isBuffer(e)}function Dae(e,t,r){if(!e||typeof e!="object")throw new Nr("handler must be an object");if(typeof e.onRequestStart!="function"){if(typeof e.onConnect!="function")throw new Nr("invalid onConnect method");if(typeof e.onError!="function")throw new Nr("invalid onError method");if(typeof e.onBodySent!="function"&&e.onBodySent!==void 0)throw new Nr("invalid onBodySent method");if(r||t==="CONNECT"){if(typeof e.onUpgrade!="function")throw new Nr("invalid onUpgrade method")}else{if(typeof e.onHeaders!="function")throw new Nr("invalid onHeaders method");if(typeof e.onData!="function")throw new Nr("invalid onData method");if(typeof e.onComplete!="function")throw new Nr("invalid onComplete method")}}}function Tae(e){return!!(e&&(sx.isDisturbed(e)||e[Ec]))}function Nae(e){return{localAddress:e.localAddress,localPort:e.localPort,remoteAddress:e.remoteAddress,remotePort:e.remotePort,remoteFamily:e.remoteFamily,timeout:e.timeout,bytesWritten:e.bytesWritten,bytesRead:e.bytesRead}}function Mae(e){let t;return new ReadableStream({start(){t=e[Symbol.asyncIterator]()},pull(r){return t.next().then(({done:n,value:i})=>{if(n)return queueMicrotask(()=>{r.close(),r.byobRequest?.respond(0)});{let s=Buffer.isBuffer(i)?i:Buffer.from(i);return s.byteLength?r.enqueue(new Uint8Array(s)):this.pull(r)}})},cancel(){return t.return()},type:"bytes"})}function Ex(e){return e&&typeof e=="object"&&typeof e.append=="function"&&typeof e.delete=="function"&&typeof e.get=="function"&&typeof e.getAll=="function"&&typeof e.has=="function"&&typeof e.set=="function"&&e[Symbol.toStringTag]==="FormData"}function Fae(e,t){return"addEventListener"in e?(e.addEventListener("abort",t,{once:!0}),()=>e.removeEventListener("abort",t)):(e.once("abort",t),()=>e.removeListener("abort",t))}var yx=new Uint8Array([0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,1,1,1,1,0,0,1,1,0,1,1,0,1,1,1,1,1,1,1,1,1,1,0,0,0,0,0,0,0,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,0,0,0,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]);function kae(e){return yx[e]===1}var Uae=/^[\^_`a-zA-Z\-0-9!#$%&'*+.|~]+$/;function xae(e){if(e.length>=12)return Uae.test(e);if(e.length===0)return!1;for(let t=0;t<e.length;t++)if(yx[e.charCodeAt(t)]!==1)return!1;return!0}var Lae=/[^\t\x20-\x7e\x80-\xff]/;function Pae(e){return!Lae.test(e)}var Oae=/^bytes (\d+)-(\d+)\/(\d+)?$/;function Hae(e){if(e==null||e==="")return{start:0,end:null,size:null};let t=e?e.match(Oae):null;return t?{start:parseInt(t[1]),end:t[2]?parseInt(t[2]):null,size:t[3]?parseInt(t[3]):null}:null}function qae(e,t,r){return(e[yc]??(e[yc]=[])).push([t,r]),e.on(t,r),e}function Gae(e){if(e[yc]!=null){for(let[t,r]of e[yc])e.removeListener(t,r);e[yc]=null}return e}function Yae(e,t,r){try{t.onError(r),Gh(t.aborted)}catch(n){e.emit("error",n)}}var Wae=process.platform==="win32"?(e,t)=>{if(!t.timeout)return rx;let r=null,n=null,i=hE.setFastTimeout(()=>{r=setImmediate(()=>{n=setImmediate(()=>nx(e.deref(),t))})},t.timeout);return()=>{hE.clearFastTimeout(i),clearImmediate(r),clearImmediate(n)}}:(e,t)=>{if(!t.timeout)return rx;let r=null,n=hE.setFastTimeout(()=>{r=setImmediate(()=>{nx(e.deref(),t)})},t.timeout);return()=>{hE.clearFastTimeout(n),clearImmediate(r)}};function nx(e,t){if(e==null)return;let r="Connect Timeout Error";Array.isArray(e.autoSelectFamilyAttemptedAddresses)?r+=` (attempted addresses: ${e.autoSelectFamilyAttemptedAddresses.join(", ")},`:r+=` (attempted address: ${t.hostname}:${t.port},`,r+=` timeout: ${t.timeout}ms)`,dx(e,new lae(r))}function Vae(e){if(e[0]==="h"&&e[1]==="t"&&e[2]==="t"&&e[3]==="p")switch(e[4]){case":":return"http:";case"s":if(e[5]===":")return"https:"}return e.slice(0,e.indexOf(":")+1)}var mx=Object.create(null);mx.enumerable=!0;var yQ={delete:"DELETE",DELETE:"DELETE",get:"GET",GET:"GET",head:"HEAD",HEAD:"HEAD",options:"OPTIONS",OPTIONS:"OPTIONS",post:"POST",POST:"POST",put:"PUT",PUT:"PUT"},Bx={...yQ,patch:"patch",PATCH:"PATCH"};Object.setPrototypeOf(yQ,null);Object.setPrototypeOf(Bx,null);Ix.exports={kEnumerableProperty:mx,isDisturbed:Tae,isBlobLike:ax,parseOrigin:yae,parseURL:ux,getServerName:Bae,isStream:pE,isIterable:cx,hasSafeIterator:Cae,isAsyncIterable:bae,isDestroyed:hx,headerNameToString:gx,bufferToLowerCasedHeaderName:Sae,addListener:qae,removeAllListeners:Gae,errorRequest:Yae,parseRawHeaders:vae,encodeRawHeaders:Rae,parseHeaders:_ae,parseKeepAliveTimeout:wae,destroy:dx,bodyLength:lx,deepClone:Iae,ReadableStreamFrom:Mae,isBuffer:px,assertRequestHandler:Dae,getSocketInfo:Nae,isFormDataLike:Ex,pathHasQueryOrFragment:Ax,serializePathWithQuery:Eae,addAbortListener:Fae,isValidHTTPToken:xae,isValidHeaderValue:Pae,isTokenCharCode:kae,parseRangeHeader:Hae,normalizedMethodRecordsBase:yQ,normalizedMethodRecords:Bx,isValidPort:fx,isHttpOrHttpsPrefixed:dE,nodeMajor:dae,nodeMinor:gae,safeHTTPMethods:Object.freeze(["GET","HEAD","OPTIONS","TRACE"]),wrapRequestBody:pae,setupConnectTimeout:Wae,getProtocolFromUrlString:Vae}});var Dx=U((GDe,Rx)=>{"use strict";var wx=Gt(),{Readable:Jae}=(ts(),Os(qt)),{RequestAbortedError:Sx,NotSupportedError:jae,InvalidArgumentError:zae,AbortError:EE}=mr(),_x=Zt(),{ReadableStreamFrom:Kae}=Zt(),Vn=Symbol("kConsume"),yE=Symbol("kReading"),df=Symbol("kBody"),bx=Symbol("kAbort"),vx=Symbol("kContentType"),mQ=Symbol("kContentLength"),BQ=Symbol("kUsed"),mE=Symbol("kBytesRead"),Xae=()=>{},IQ=class extends Jae{constructor({resume:t,abort:r,contentType:n="",contentLength:i,highWaterMark:s=64*1024}){super({autoDestroy:!0,read:t,highWaterMark:s}),this._readableState.dataEmitted=!1,this[bx]=r,this[Vn]=null,this[mE]=0,this[df]=null,this[BQ]=!1,this[vx]=n,this[mQ]=Number.isFinite(i)?i:null,this[yE]=!1}_destroy(t,r){!t&&!this._readableState.endEmitted&&(t=new Sx),t&&this[bx](),this[BQ]?r(t):setImmediate(r,t)}on(t,r){return(t==="data"||t==="readable")&&(this[yE]=!0,this[BQ]=!0),super.on(t,r)}addListener(t,r){return this.on(t,r)}off(t,r){let n=super.off(t,r);return(t==="data"||t==="readable")&&(this[yE]=this.listenerCount("data")>0||this.listenerCount("readable")>0),n}removeListener(t,r){return this.off(t,r)}push(t){return t&&(this[mE]+=t.length,this[Vn])?(CQ(this[Vn],t),this[yE]?super.push(t):!0):super.push(t)}text(){return Yh(this,"text")}json(){return Yh(this,"json")}blob(){return Yh(this,"blob")}bytes(){return Yh(this,"bytes")}arrayBuffer(){return Yh(this,"arrayBuffer")}async formData(){throw new jae}get bodyUsed(){return _x.isDisturbed(this)}get body(){return this[df]||(this[df]=Kae(this),this[Vn]&&(this[df].getReader(),wx(this[df].locked))),this[df]}dump(t){let r=t?.signal;if(r!=null&&(typeof r!="object"||!("aborted"in r)))return Promise.reject(new zae("signal must be an AbortSignal"));let n=t?.limit&&Number.isFinite(t.limit)?t.limit:128*1024;return r?.aborted?Promise.reject(r.reason??new EE):this._readableState.closeEmitted?Promise.resolve(null):new Promise((i,s)=>{if((this[mQ]&&this[mQ]>n||this[mE]>n)&&this.destroy(new EE),r){let o=()=>{this.destroy(r.reason??new EE)};r.addEventListener("abort",o),this.on("close",function(){r.removeEventListener("abort",o),r.aborted?s(r.reason??new EE):i(null)})}else this.on("close",i);this.on("error",Xae).on("data",()=>{this[mE]>n&&this.destroy()}).resume()})}setEncoding(t){return Buffer.isEncoding(t)&&(this._readableState.encoding=t),this}};function Zae(e){return e[df]?.locked===!0||e[Vn]!==null}function $ae(e){return _x.isDisturbed(e)||Zae(e)}function Yh(e,t){return wx(!e[Vn]),new Promise((r,n)=>{if($ae(e)){let i=e._readableState;i.destroyed&&i.closeEmitted===!1?e.on("error",n).on("close",()=>{n(new TypeError("unusable"))}):n(i.errored??new TypeError("unusable"))}else queueMicrotask(()=>{e[Vn]={type:t,stream:e,resolve:r,reject:n,length:0,body:[]},e.on("error",function(i){QQ(this[Vn],i)}).on("close",function(){this[Vn].body!==null&&QQ(this[Vn],new Sx)}),eAe(e[Vn])})})}function eAe(e){if(e.body===null)return;let{_readableState:t}=e.stream;if(t.bufferIndex){let r=t.bufferIndex,n=t.buffer.length;for(let i=r;i<n;i++)CQ(e,t.buffer[i])}else for(let r of t.buffer)CQ(e,r);for(t.endEmitted?Qx(this[Vn],this._readableState.encoding):e.stream.on("end",function(){Qx(this[Vn],this._readableState.encoding)}),e.stream.resume();e.stream.read()!=null;);}function bQ(e,t,r){if(e.length===0||t===0)return"";let n=e.length===1?e[0]:Buffer.concat(e,t),i=n.length,s=i>2&&n[0]===239&&n[1]===187&&n[2]===191?3:0;return!r||r==="utf8"||r==="utf-8"?n.utf8Slice(s,i):n.subarray(s,i).toString(r)}function Cx(e,t){if(e.length===0||t===0)return new Uint8Array(0);if(e.length===1)return new Uint8Array(e[0]);let r=new Uint8Array(Buffer.allocUnsafeSlow(t).buffer),n=0;for(let i=0;i<e.length;++i){let s=e[i];r.set(s,n),n+=s.length}return r}function Qx(e,t){let{type:r,body:n,resolve:i,stream:s,length:o}=e;try{r==="text"?i(bQ(n,o,t)):r==="json"?i(JSON.parse(bQ(n,o,t))):r==="arrayBuffer"?i(Cx(n,o).buffer):r==="blob"?i(new Blob(n,{type:s[vx]})):r==="bytes"&&i(Cx(n,o)),QQ(e)}catch(a){s.destroy(a)}}function CQ(e,t){e.length+=t.length,e.body.push(t)}function QQ(e,t){e.body!==null&&(t?e.reject(t):e.resolve(),e.type=null,e.stream=null,e.resolve=null,e.reject=null,e.length=0,e.body=null)}Rx.exports={Readable:IQ,chunksDecode:bQ}});var Mx=U((YDe,wQ)=>{"use strict";var tAe=Gt(),{AsyncResource:rAe}=gc(),{Readable:nAe}=Dx(),{InvalidArgumentError:mc,RequestAbortedError:Tx}=mr(),yi=Zt();function Wh(){}var BE=class extends rAe{constructor(t,r){if(!t||typeof t!="object")throw new mc("invalid opts");let{signal:n,method:i,opaque:s,body:o,onInfo:a,responseHeaders:A,highWaterMark:f}=t;try{if(typeof r!="function")throw new mc("invalid callback");if(f&&(typeof f!="number"||f<0))throw new mc("invalid highWaterMark");if(n&&typeof n.on!="function"&&typeof n.addEventListener!="function")throw new mc("signal must be an EventEmitter or EventTarget");if(i==="CONNECT")throw new mc("invalid method");if(a&&typeof a!="function")throw new mc("invalid onInfo callback");super("UNDICI_REQUEST")}catch(l){throw yi.isStream(o)&&yi.destroy(o.on("error",Wh),l),l}this.method=i,this.responseHeaders=A||null,this.opaque=s||null,this.callback=r,this.res=null,this.abort=null,this.body=o,this.trailers={},this.context=null,this.onInfo=a||null,this.highWaterMark=f,this.reason=null,this.removeAbortListener=null,n?.aborted?this.reason=n.reason??new Tx:n&&(this.removeAbortListener=yi.addAbortListener(n,()=>{this.reason=n.reason??new Tx,this.res?yi.destroy(this.res.on("error",Wh),this.reason):this.abort&&this.abort(this.reason)}))}onConnect(t,r){if(this.reason){t(this.reason);return}tAe(this.callback),this.abort=t,this.context=r}onHeaders(t,r,n,i){let{callback:s,opaque:o,abort:a,context:A,responseHeaders:f,highWaterMark:l}=this,p=f==="raw"?yi.parseRawHeaders(r):yi.parseHeaders(r);if(t<200){this.onInfo&&this.onInfo({statusCode:t,headers:p});return}let I=f==="raw"?yi.parseHeaders(r):p,S=I["content-type"],_=I["content-length"],N=new nAe({resume:n,abort:a,contentType:S,contentLength:this.method!=="HEAD"&&_?Number(_):null,highWaterMark:l});if(this.removeAbortListener&&(N.on("close",this.removeAbortListener),this.removeAbortListener=null),this.callback=null,this.res=N,s!==null)try{this.runInAsyncScope(s,null,null,{statusCode:t,statusText:i,headers:p,trailers:this.trailers,opaque:o,body:N,context:A})}catch(O){this.res=null,yi.destroy(N.on("error",Wh),O),queueMicrotask(()=>{throw O})}}onData(t){return this.res.push(t)}onComplete(t){yi.parseHeaders(t,this.trailers),this.res.push(null)}onError(t){let{res:r,callback:n,body:i,opaque:s}=this;n&&(this.callback=null,queueMicrotask(()=>{this.runInAsyncScope(n,null,t,{opaque:s})})),r&&(this.res=null,queueMicrotask(()=>{yi.destroy(r.on("error",Wh),t)})),i&&(this.body=null,yi.isStream(i)&&(i.on("error",Wh),yi.destroy(i,t))),this.removeAbortListener&&(this.removeAbortListener(),this.removeAbortListener=null)}};function Nx(e,t){if(t===void 0)return new Promise((r,n)=>{Nx.call(this,e,(i,s)=>i?n(i):r(s))});try{let r=new BE(e,t);this.dispatch(e,r)}catch(r){if(typeof t!="function")throw r;let n=e?.opaque;queueMicrotask(()=>t(r,{opaque:n}))}}wQ.exports=Nx;wQ.exports.RequestHandler=BE});var Vh=U((WDe,Ux)=>{"use strict";var{addAbortListener:iAe}=Zt(),{RequestAbortedError:sAe}=mr(),Bc=Symbol("kListener"),Xs=Symbol("kSignal");function Fx(e){e.abort?e.abort(e[Xs]?.reason):e.reason=e[Xs]?.reason??new sAe,kx(e)}function oAe(e,t){if(e.reason=null,e[Xs]=null,e[Bc]=null,!!t){if(t.aborted){Fx(e);return}e[Xs]=t,e[Bc]=()=>{Fx(e)},iAe(e[Xs],e[Bc])}}function kx(e){e[Xs]&&("removeEventListener"in e[Xs]?e[Xs].removeEventListener("abort",e[Bc]):e[Xs].removeListener("abort",e[Bc]),e[Xs]=null,e[Bc]=null)}Ux.exports={addSignal:oAe,removeSignal:kx}});var Ox=U((VDe,Px)=>{"use strict";var aAe=Gt(),{finished:AAe}=(ts(),Os(qt)),{AsyncResource:fAe}=gc(),{InvalidArgumentError:Ic,InvalidReturnValueError:uAe}=mr(),jo=Zt(),{addSignal:cAe,removeSignal:xx}=Vh();function lAe(){}var SQ=class extends fAe{constructor(t,r,n){if(!t||typeof t!="object")throw new Ic("invalid opts");let{signal:i,method:s,opaque:o,body:a,onInfo:A,responseHeaders:f}=t;try{if(typeof n!="function")throw new Ic("invalid callback");if(typeof r!="function")throw new Ic("invalid factory");if(i&&typeof i.on!="function"&&typeof i.addEventListener!="function")throw new Ic("signal must be an EventEmitter or EventTarget");if(s==="CONNECT")throw new Ic("invalid method");if(A&&typeof A!="function")throw new Ic("invalid onInfo callback");super("UNDICI_STREAM")}catch(l){throw jo.isStream(a)&&jo.destroy(a.on("error",lAe),l),l}this.responseHeaders=f||null,this.opaque=o||null,this.factory=r,this.callback=n,this.res=null,this.abort=null,this.context=null,this.trailers=null,this.body=a,this.onInfo=A||null,jo.isStream(a)&&a.on("error",l=>{this.onError(l)}),cAe(this,i)}onConnect(t,r){if(this.reason){t(this.reason);return}aAe(this.callback),this.abort=t,this.context=r}onHeaders(t,r,n,i){let{factory:s,opaque:o,context:a,responseHeaders:A}=this,f=A==="raw"?jo.parseRawHeaders(r):jo.parseHeaders(r);if(t<200){this.onInfo&&this.onInfo({statusCode:t,headers:f});return}if(this.factory=null,s===null)return;let l=this.runInAsyncScope(s,null,{statusCode:t,headers:f,opaque:o,context:a});if(!l||typeof l.write!="function"||typeof l.end!="function"||typeof l.on!="function")throw new uAe("expected Writable");return AAe(l,{readable:!1},I=>{let{callback:S,res:_,opaque:N,trailers:O,abort:x}=this;this.res=null,(I||!_?.readable)&&jo.destroy(_,I),this.callback=null,this.runInAsyncScope(S,null,I||null,{opaque:N,trailers:O}),I&&x()}),l.on("drain",n),this.res=l,(l.writableNeedDrain!==void 0?l.writableNeedDrain:l._writableState?.needDrain)!==!0}onData(t){let{res:r}=this;return r?r.write(t):!0}onComplete(t){let{res:r}=this;xx(this),r&&(this.trailers=jo.parseHeaders(t),r.end())}onError(t){let{res:r,callback:n,opaque:i,body:s}=this;xx(this),this.factory=null,r?(this.res=null,jo.destroy(r,t)):n&&(this.callback=null,queueMicrotask(()=>{this.runInAsyncScope(n,null,t,{opaque:i})})),s&&(this.body=null,jo.destroy(s,t))}};function Lx(e,t,r){if(r===void 0)return new Promise((n,i)=>{Lx.call(this,e,t,(s,o)=>s?i(s):n(o))});try{let n=new SQ(e,t,r);this.dispatch(e,n)}catch(n){if(typeof r!="function")throw n;let i=e?.opaque;queueMicrotask(()=>r(n,{opaque:i}))}}Px.exports=Lx});var Yx=U((JDe,Gx)=>{"use strict";var{Readable:qx,Duplex:hAe,PassThrough:dAe}=(ts(),Os(qt)),gAe=Gt(),{AsyncResource:pAe}=gc(),{InvalidArgumentError:Jh,InvalidReturnValueError:EAe,RequestAbortedError:_Q}=mr(),Zs=Zt(),{addSignal:yAe,removeSignal:mAe}=Vh();function Hx(){}var bc=Symbol("resume"),vQ=class extends qx{constructor(){super({autoDestroy:!0}),this[bc]=null}_read(){let{[bc]:t}=this;t&&(this[bc]=null,t())}_destroy(t,r){this._read(),r(t)}},RQ=class extends qx{constructor(t){super({autoDestroy:!0}),this[bc]=t}_read(){this[bc]()}_destroy(t,r){!t&&!this._readableState.endEmitted&&(t=new _Q),r(t)}},DQ=class extends pAe{constructor(t,r){if(!t||typeof t!="object")throw new Jh("invalid opts");if(typeof r!="function")throw new Jh("invalid handler");let{signal:n,method:i,opaque:s,onInfo:o,responseHeaders:a}=t;if(n&&typeof n.on!="function"&&typeof n.addEventListener!="function")throw new Jh("signal must be an EventEmitter or EventTarget");if(i==="CONNECT")throw new Jh("invalid method");if(o&&typeof o!="function")throw new Jh("invalid onInfo callback");super("UNDICI_PIPELINE"),this.opaque=s||null,this.responseHeaders=a||null,this.handler=r,this.abort=null,this.context=null,this.onInfo=o||null,this.req=new vQ().on("error",Hx),this.ret=new hAe({readableObjectMode:t.objectMode,autoDestroy:!0,read:()=>{let{body:A}=this;A?.resume&&A.resume()},write:(A,f,l)=>{let{req:p}=this;p.push(A,f)||p._readableState.destroyed?l():p[bc]=l},destroy:(A,f)=>{let{body:l,req:p,res:I,ret:S,abort:_}=this;!A&&!S._readableState.endEmitted&&(A=new _Q),_&&A&&_(),Zs.destroy(l,A),Zs.destroy(p,A),Zs.destroy(I,A),mAe(this),f(A)}}).on("prefinish",()=>{let{req:A}=this;A.push(null)}),this.res=null,yAe(this,n)}onConnect(t,r){let{res:n}=this;if(this.reason){t(this.reason);return}gAe(!n,"pipeline cannot be retried"),this.abort=t,this.context=r}onHeaders(t,r,n){let{opaque:i,handler:s,context:o}=this;if(t<200){if(this.onInfo){let A=this.responseHeaders==="raw"?Zs.parseRawHeaders(r):Zs.parseHeaders(r);this.onInfo({statusCode:t,headers:A})}return}this.res=new RQ(n);let a;try{this.handler=null;let A=this.responseHeaders==="raw"?Zs.parseRawHeaders(r):Zs.parseHeaders(r);a=this.runInAsyncScope(s,null,{statusCode:t,headers:A,opaque:i,body:this.res,context:o})}catch(A){throw this.res.on("error",Hx),A}if(!a||typeof a.on!="function")throw new EAe("expected Readable");a.on("data",A=>{let{ret:f,body:l}=this;!f.push(A)&&l.pause&&l.pause()}).on("error",A=>{let{ret:f}=this;Zs.destroy(f,A)}).on("end",()=>{let{ret:A}=this;A.push(null)}).on("close",()=>{let{ret:A}=this;A._readableState.ended||Zs.destroy(A,new _Q)}),this.body=a}onData(t){let{res:r}=this;return r.push(t)}onComplete(t){let{res:r}=this;r.push(null)}onError(t){let{ret:r}=this;this.handler=null,Zs.destroy(r,t)}};function BAe(e,t){try{let r=new DQ(e,t);return this.dispatch({...e,body:r.req},r),r.ret}catch(r){return new dAe().destroy(r)}}Gx.exports=BAe});var Kx=U((jDe,zx)=>{"use strict";var{InvalidArgumentError:TQ,SocketError:IAe}=mr(),{AsyncResource:bAe}=gc(),Wx=Gt(),Vx=Zt(),{kHTTP2Stream:CAe}=Dn(),{addSignal:QAe,removeSignal:Jx}=Vh(),NQ=class extends bAe{constructor(t,r){if(!t||typeof t!="object")throw new TQ("invalid opts");if(typeof r!="function")throw new TQ("invalid callback");let{signal:n,opaque:i,responseHeaders:s}=t;if(n&&typeof n.on!="function"&&typeof n.addEventListener!="function")throw new TQ("signal must be an EventEmitter or EventTarget");super("UNDICI_UPGRADE"),this.responseHeaders=s||null,this.opaque=i||null,this.callback=r,this.abort=null,this.context=null,QAe(this,n)}onConnect(t,r){if(this.reason){t(this.reason);return}Wx(this.callback),this.abort=t,this.context=null}onHeaders(){throw new IAe("bad upgrade",null)}onUpgrade(t,r,n){Wx(n[CAe]===!0?t===200:t===101);let{callback:i,opaque:s,context:o}=this;Jx(this),this.callback=null;let a=this.responseHeaders==="raw"?Vx.parseRawHeaders(r):Vx.parseHeaders(r);this.runInAsyncScope(i,null,null,{headers:a,socket:n,opaque:s,context:o})}onError(t){let{callback:r,opaque:n}=this;Jx(this),r&&(this.callback=null,queueMicrotask(()=>{this.runInAsyncScope(r,null,t,{opaque:n})}))}};function jx(e,t){if(t===void 0)return new Promise((r,n)=>{jx.call(this,e,(i,s)=>i?n(i):r(s))});try{let r=new NQ(e,t),n={...e,method:e.method||"GET",upgrade:e.protocol||"Websocket"};this.dispatch(n,r)}catch(r){if(typeof t!="function")throw r;let n=e?.opaque;queueMicrotask(()=>t(r,{opaque:n}))}}zx.exports=jx});var t6=U((zDe,e6)=>{"use strict";var wAe=Gt(),{AsyncResource:SAe}=gc(),{InvalidArgumentError:MQ,SocketError:_Ae}=mr(),Xx=Zt(),{addSignal:vAe,removeSignal:Zx}=Vh(),FQ=class extends SAe{constructor(t,r){if(!t||typeof t!="object")throw new MQ("invalid opts");if(typeof r!="function")throw new MQ("invalid callback");let{signal:n,opaque:i,responseHeaders:s}=t;if(n&&typeof n.on!="function"&&typeof n.addEventListener!="function")throw new MQ("signal must be an EventEmitter or EventTarget");super("UNDICI_CONNECT"),this.opaque=i||null,this.responseHeaders=s||null,this.callback=r,this.abort=null,vAe(this,n)}onConnect(t,r){if(this.reason){t(this.reason);return}wAe(this.callback),this.abort=t,this.context=r}onHeaders(){throw new _Ae("bad connect",null)}onUpgrade(t,r,n){let{callback:i,opaque:s,context:o}=this;Zx(this),this.callback=null;let a=r;a!=null&&(a=this.responseHeaders==="raw"?Xx.parseRawHeaders(r):Xx.parseHeaders(r)),this.runInAsyncScope(i,null,null,{statusCode:t,headers:a,socket:n,opaque:s,context:o})}onError(t){let{callback:r,opaque:n}=this;Zx(this),r&&(this.callback=null,queueMicrotask(()=>{this.runInAsyncScope(r,null,t,{opaque:n})}))}};function $x(e,t){if(t===void 0)return new Promise((r,n)=>{$x.call(this,e,(i,s)=>i?n(i):r(s))});try{let r=new FQ(e,t),n={...e,method:"CONNECT"};this.dispatch(n,r)}catch(r){if(typeof t!="function")throw r;let n=e?.opaque;queueMicrotask(()=>t(r,{opaque:n}))}}e6.exports=$x});var r6=U((KDe,Cc)=>{"use strict";Cc.exports.request=Mx();Cc.exports.stream=Ox();Cc.exports.pipeline=Yx();Cc.exports.upgrade=Kx();Cc.exports.connect=t6()});var i6=U((XDe,n6)=>{"use strict";var{InvalidArgumentError:RAe}=mr(),_r,Qc;n6.exports=(Qc=class{constructor(t){wt(this,_r);ft(this,_r,t)}static wrap(t){return t.onRequestStart?t:new Qc(t)}onConnect(t,r){return ee(this,_r).onConnect?.(t,r)}onResponseStarted(){return ee(this,_r).onResponseStarted?.()}onHeaders(t,r,n,i){return ee(this,_r).onHeaders?.(t,r,n,i)}onUpgrade(t,r,n){return ee(this,_r).onUpgrade?.(t,r,n)}onData(t){return ee(this,_r).onData?.(t)}onComplete(t){return ee(this,_r).onComplete?.(t)}onError(t){if(!ee(this,_r).onError)throw t;return ee(this,_r).onError?.(t)}onRequestStart(t,r){ee(this,_r).onConnect?.(n=>t.abort(n),r)}onRequestUpgrade(t,r,n,i){let s=[];for(let[o,a]of Object.entries(n))s.push(Buffer.from(o,"latin1"),kQ(a));ee(this,_r).onUpgrade?.(r,s,i)}onResponseStart(t,r,n,i){let s=[];for(let[o,a]of Object.entries(n))s.push(Buffer.from(o,"latin1"),kQ(a));ee(this,_r).onHeaders?.(r,s,()=>t.resume(),i)===!1&&t.pause()}onResponseData(t,r){ee(this,_r).onData?.(r)===!1&&t.pause()}onResponseEnd(t,r){let n=[];for(let[i,s]of Object.entries(r))n.push(Buffer.from(i,"latin1"),kQ(s));ee(this,_r).onComplete?.(n)}onResponseError(t,r){if(!ee(this,_r).onError)throw new RAe("invalid onError method");ee(this,_r).onError?.(r)}},_r=new WeakMap,Qc);function kQ(e){return Array.isArray(e)?e.map(t=>Buffer.from(t,"latin1")):Buffer.from(e,"latin1")}});var o6=U(($De,s6)=>{"use strict";var DAe=Zi(),TAe=i6(),NAe=e=>(t,r)=>e(t,TAe.wrap(r)),UQ=class extends DAe{dispatch(){throw new Error("not implemented")}close(){throw new Error("not implemented")}destroy(){throw new Error("not implemented")}compose(...t){let r=Array.isArray(t[0])?t[0]:t,n=this.dispatch.bind(this);for(let i of r)if(i!=null){if(typeof i!="function")throw new TypeError(`invalid interceptor, expected function received ${typeof i}`);if(n=i(n),n=NAe(n),n==null||typeof n!="function"||n.length!==2)throw new TypeError("invalid interceptor")}return new Proxy(this,{get:(i,s)=>s==="dispatch"?n:i[s]})}};s6.exports=UQ});var f6=U((eTe,A6)=>{"use strict";var{parseHeaders:xQ}=Zt(),{InvalidArgumentError:MAe}=mr(),LQ=Symbol("resume"),a6,gf,jh,wc,zh;a6=LQ;var PQ=class{constructor(t){wt(this,gf,!1);wt(this,jh,null);wt(this,wc,!1);wt(this,zh);y(this,a6,null);ft(this,zh,t)}pause(){ft(this,gf,!0)}resume(){ee(this,gf)&&(ft(this,gf,!1),this[LQ]?.())}abort(t){ee(this,wc)||(ft(this,wc,!0),ft(this,jh,t),ee(this,zh).call(this,t))}get aborted(){return ee(this,wc)}get reason(){return ee(this,jh)}get paused(){return ee(this,gf)}};gf=new WeakMap,jh=new WeakMap,wc=new WeakMap,zh=new WeakMap;var mi,Jn,Sc;A6.exports=(Sc=class{constructor(t){wt(this,mi);wt(this,Jn);ft(this,mi,t)}static unwrap(t){return t.onRequestStart?new Sc(t):t}onConnect(t,r){ft(this,Jn,new PQ(t)),ee(this,mi).onRequestStart?.(ee(this,Jn),r)}onResponseStarted(){return ee(this,mi).onResponseStarted?.()}onUpgrade(t,r,n){ee(this,mi).onRequestUpgrade?.(ee(this,Jn),t,xQ(r),n)}onHeaders(t,r,n,i){return ee(this,Jn)[LQ]=n,ee(this,mi).onResponseStart?.(ee(this,Jn),t,xQ(r),i),!ee(this,Jn).paused}onData(t){return ee(this,mi).onResponseData?.(ee(this,Jn),t),!ee(this,Jn).paused}onComplete(t){ee(this,mi).onResponseEnd?.(ee(this,Jn),xQ(t))}onError(t){if(!ee(this,mi).onResponseError)throw new MAe("invalid onError method");ee(this,mi).onResponseError?.(ee(this,Jn),t)}},mi=new WeakMap,Jn=new WeakMap,Sc)});var bE=U((rTe,g6)=>{"use strict";var FAe=o6(),kAe=f6(),{ClientDestroyedError:OQ,ClientClosedError:UAe,InvalidArgumentError:IE}=mr(),{kDestroy:xAe,kClose:LAe,kClosed:Kh,kDestroyed:_c,kDispatch:PAe}=Dn(),$s=Symbol("onDestroyed"),zo=Symbol("onClosed"),u6,c6,l6,h6,d6,HQ=class extends(d6=FAe,h6=_c,l6=$s,c6=Kh,u6=zo,d6){constructor(){super(...arguments);y(this,h6,!1);y(this,l6,null);y(this,c6,!1);y(this,u6,null)}get destroyed(){return this[_c]}get closed(){return this[Kh]}close(r){if(r===void 0)return new Promise((i,s)=>{this.close((o,a)=>o?s(o):i(a))});if(typeof r!="function")throw new IE("invalid callback");if(this[_c]){let i=new OQ;queueMicrotask(()=>r(i,null));return}if(this[Kh]){this[zo]?this[zo].push(r):queueMicrotask(()=>r(null,null));return}this[Kh]=!0,this[zo]??(this[zo]=[]),this[zo].push(r);let n=()=>{let i=this[zo];this[zo]=null;for(let s=0;s<i.length;s++)i[s](null,null)};this[LAe]().then(()=>this.destroy()).then(()=>queueMicrotask(n))}destroy(r,n){if(typeof r=="function"&&(n=r,r=null),n===void 0)return new Promise((s,o)=>{this.destroy(r,(a,A)=>a?o(a):s(A))});if(typeof n!="function")throw new IE("invalid callback");if(this[_c]){this[$s]?this[$s].push(n):queueMicrotask(()=>n(null,null));return}r||(r=new OQ),this[_c]=!0,this[$s]??(this[$s]=[]),this[$s].push(n);let i=()=>{let s=this[$s];this[$s]=null;for(let o=0;o<s.length;o++)s[o](null,null)};this[xAe](r).then(()=>queueMicrotask(i))}dispatch(r,n){if(!n||typeof n!="object")throw new IE("handler must be an object");n=kAe.unwrap(n);try{if(!r||typeof r!="object")throw new IE("opts must be an object.");if(this[_c]||this[$s])throw new OQ;if(this[Kh])throw new UAe;return this[PAe](r,n)}catch(i){if(typeof n.onError!="function")throw i;return n.onError(i),!1}}};g6.exports=HQ});var YQ=U((iTe,B6)=>{"use strict";var{kConnected:p6,kPending:E6,kRunning:y6,kSize:m6,kFree:OAe,kQueued:HAe}=Dn(),qQ=class{constructor(t){this.connected=t[p6],this.pending=t[E6],this.running=t[y6],this.size=t[m6]}},GQ=class{constructor(t){this.connected=t[p6],this.free=t[OAe],this.pending=t[E6],this.queued=t[HAe],this.running=t[y6],this.size=t[m6]}};B6.exports={ClientStats:qQ,PoolStats:GQ}});var b6=U((oTe,I6)=>{"use strict";var CE=class{constructor(){y(this,"bottom",0);y(this,"top",0);y(this,"list",new Array(2048).fill(void 0));y(this,"next",null)}isEmpty(){return this.top===this.bottom}isFull(){return(this.top+1&2047)===this.bottom}push(t){this.list[this.top]=t,this.top=this.top+1&2047}shift(){let t=this.list[this.bottom];return t===void 0?null:(this.list[this.bottom]=void 0,this.bottom=this.bottom+1&2047,t)}};I6.exports=class{constructor(){this.head=this.tail=new CE}isEmpty(){return this.head.isEmpty()}push(t){this.head.isFull()&&(this.head=this.head.next=new CE),this.head.push(t)}shift(){let t=this.tail,r=t.shift();return t.isEmpty()&&t.next!==null&&(this.tail=t.next,t.next=null),r}}});var P6=U((ATe,L6)=>{"use strict";var{PoolStats:qAe}=YQ(),GAe=bE(),YAe=b6(),{kConnected:WQ,kSize:C6,kRunning:Q6,kPending:w6,kQueued:Xh,kBusy:WAe,kFree:VAe,kUrl:JAe,kClose:jAe,kDestroy:zAe,kDispatch:KAe}=Dn(),Mr=Symbol("clients"),pn=Symbol("needDrain"),Zh=Symbol("queue"),VQ=Symbol("closed resolve"),JQ=Symbol("onDrain"),S6=Symbol("onConnect"),_6=Symbol("onDisconnect"),v6=Symbol("onConnectionError"),jQ=Symbol("get dispatcher"),U6=Symbol("add client"),x6=Symbol("remove client"),R6,D6,T6,N6,M6,F6,k6,zQ=class extends GAe{constructor(){super(...arguments);y(this,k6,new YAe);y(this,F6,0);y(this,M6,[]);y(this,N6,!1);y(this,T6,(r,n)=>{this.emit("connect",r,[this,...n])});y(this,D6,(r,n,i)=>{this.emit("disconnect",r,[this,...n],i)});y(this,R6,(r,n,i)=>{this.emit("connectionError",r,[this,...n],i)})}[(k6=Zh,F6=Xh,M6=Mr,N6=pn,JQ)](r,n,i){let s=this[Zh],o=!1;for(;!o;){let a=s.shift();if(!a)break;this[Xh]--,o=!r.dispatch(a.opts,a.handler)}if(r[pn]=o,!o&&this[pn]&&(this[pn]=!1,this.emit("drain",n,[this,...i])),this[VQ]&&s.isEmpty()){let a=[];for(let A=0;A<this[Mr].length;A++){let f=this[Mr][A];f.destroyed||a.push(f.close())}return Promise.all(a).then(this[VQ])}}get[(T6=S6,D6=_6,R6=v6,WAe)](){return this[pn]}get[WQ](){let r=0;for(let{[WQ]:n}of this[Mr])r+=n;return r}get[VAe](){let r=0;for(let{[WQ]:n,[pn]:i}of this[Mr])r+=n&&!i;return r}get[w6](){let r=this[Xh];for(let{[w6]:n}of this[Mr])r+=n;return r}get[Q6](){let r=0;for(let{[Q6]:n}of this[Mr])r+=n;return r}get[C6](){let r=this[Xh];for(let{[C6]:n}of this[Mr])r+=n;return r}get stats(){return new qAe(this)}[jAe](){if(this[Zh].isEmpty()){let r=[];for(let n=0;n<this[Mr].length;n++){let i=this[Mr][n];i.destroyed||r.push(i.close())}return Promise.all(r)}else return new Promise(r=>{this[VQ]=r})}[zAe](r){for(;;){let i=this[Zh].shift();if(!i)break;i.handler.onError(r)}let n=new Array(this[Mr].length);for(let i=0;i<this[Mr].length;i++)n[i]=this[Mr][i].destroy(r);return Promise.all(n)}[KAe](r,n){let i=this[jQ]();return i?i.dispatch(r,n)||(i[pn]=!0,this[pn]=!this[jQ]()):(this[pn]=!0,this[Zh].push({opts:r,handler:n}),this[Xh]++),!this[pn]}[U6](r){return r.on("drain",this[JQ].bind(this,r)).on("connect",this[S6]).on("disconnect",this[_6]).on("connectionError",this[v6]),this[Mr].push(r),this[pn]&&queueMicrotask(()=>{this[pn]&&this[JQ](r,r[JAe],[r,this])}),this}[x6](r){r.close(()=>{let n=this[Mr].indexOf(r);n!==-1&&this[Mr].splice(n,1)}),this[pn]=this[Mr].some(n=>!n[pn]&&n.closed!==!0&&n.destroyed!==!0)}};L6.exports={PoolBase:zQ,kClients:Mr,kNeedDrain:pn,kAddClient:U6,kRemoveClient:x6,kGetDispatcher:jQ}});var q6=U((uTe,H6)=>{"use strict";var O6=new Map,KQ=new Map;function QE(e){let t=O6.get(e);return t||(t=new Set,O6.set(e,t)),t}function XAe(e){return{name:e,get hasSubscribers(){return QE(e).size>0},publish(t){for(let r of QE(e))r(t,e)},subscribe(t){return QE(e).add(t),this},unsubscribe(t){return QE(e).delete(t),this}}}function wE(e){return KQ.has(e)||KQ.set(e,XAe(e)),KQ.get(e)}function ZAe(e,t){wE(e).subscribe(t)}function $Ae(e,t){wE(e).unsubscribe(t)}H6.exports={channel:wE,hasSubscribers(e){return wE(e).hasSubscribers},subscribe:ZAe,unsubscribe:$Ae}});var ed=U((cTe,Y6)=>{"use strict";var Mt=q6(),ew=Yr(),pf=ew.debuglog("undici"),$h=ew.debuglog("fetch"),SE=ew.debuglog("websocket"),jn={beforeConnect:Mt.channel("undici:client:beforeConnect"),connected:Mt.channel("undici:client:connected"),connectError:Mt.channel("undici:client:connectError"),sendHeaders:Mt.channel("undici:client:sendHeaders"),create:Mt.channel("undici:request:create"),bodySent:Mt.channel("undici:request:bodySent"),bodyChunkSent:Mt.channel("undici:request:bodyChunkSent"),bodyChunkReceived:Mt.channel("undici:request:bodyChunkReceived"),headers:Mt.channel("undici:request:headers"),trailers:Mt.channel("undici:request:trailers"),error:Mt.channel("undici:request:error"),open:Mt.channel("undici:websocket:open"),close:Mt.channel("undici:websocket:close"),socketError:Mt.channel("undici:websocket:socket_error"),ping:Mt.channel("undici:websocket:ping"),pong:Mt.channel("undici:websocket:pong"),proxyConnected:Mt.channel("undici:proxy:connected")},XQ=!1;function G6(e=pf){if(!XQ){if(jn.beforeConnect.hasSubscribers||jn.connected.hasSubscribers||jn.connectError.hasSubscribers||jn.sendHeaders.hasSubscribers){XQ=!0;return}XQ=!0,Mt.subscribe("undici:client:beforeConnect",t=>{let{connectParams:{version:r,protocol:n,port:i,host:s}}=t;e("connecting to %s%s using %s%s",s,i?`:${i}`:"",n,r)}),Mt.subscribe("undici:client:connected",t=>{let{connectParams:{version:r,protocol:n,port:i,host:s}}=t;e("connected to %s%s using %s%s",s,i?`:${i}`:"",n,r)}),Mt.subscribe("undici:client:connectError",t=>{let{connectParams:{version:r,protocol:n,port:i,host:s},error:o}=t;e("connection to %s%s using %s%s errored - %s",s,i?`:${i}`:"",n,r,o.message)}),Mt.subscribe("undici:client:sendHeaders",t=>{let{request:{method:r,path:n,origin:i}}=t;e("sending request to %s %s%s",r,i,n)})}}var ZQ=!1;function efe(e=pf){if(!ZQ){if(jn.headers.hasSubscribers||jn.trailers.hasSubscribers||jn.error.hasSubscribers){ZQ=!0;return}ZQ=!0,Mt.subscribe("undici:request:headers",t=>{let{request:{method:r,path:n,origin:i},response:{statusCode:s}}=t;e("received response to %s %s%s - HTTP %d",r,i,n,s)}),Mt.subscribe("undici:request:trailers",t=>{let{request:{method:r,path:n,origin:i}}=t;e("trailers received from %s %s%s",r,i,n)}),Mt.subscribe("undici:request:error",t=>{let{request:{method:r,path:n,origin:i},error:s}=t;e("request to %s %s%s errored - %s",r,i,n,s.message)})}}var $Q=!1;function tfe(e=SE){if(!$Q){if(jn.open.hasSubscribers||jn.close.hasSubscribers||jn.socketError.hasSubscribers||jn.ping.hasSubscribers||jn.pong.hasSubscribers){$Q=!0;return}$Q=!0,Mt.subscribe("undici:websocket:open",t=>{if(t.address!=null){let{address:r,port:n}=t.address;e("connection opened %s%s",r,n?`:${n}`:"")}else e("connection opened")}),Mt.subscribe("undici:websocket:close",t=>{let{websocket:r,code:n,reason:i}=t;e("closed connection to %s - %s %s",r.url,n,i)}),Mt.subscribe("undici:websocket:socket_error",t=>{e("connection errored - %s",t.message)}),Mt.subscribe("undici:websocket:ping",t=>{e("ping received")}),Mt.subscribe("undici:websocket:pong",t=>{e("pong received")})}}(pf.enabled||$h.enabled)&&(G6($h.enabled?$h:pf),efe($h.enabled?$h:pf));SE.enabled&&(G6(pf.enabled?pf:SE),tfe(SE));Y6.exports={channels:jn}});var J6=U((lTe,V6)=>{"use strict";var{InvalidArgumentError:Tt,NotSupportedError:rfe}=mr(),eo=Gt(),{isValidHTTPToken:tw,isValidHeaderValue:rw,isStream:nfe,destroy:ife,isBuffer:sfe,isFormDataLike:ofe,isIterable:afe,hasSafeIterator:Afe,isBlobLike:ffe,serializePathWithQuery:ufe,assertRequestHandler:cfe,getServerName:lfe,normalizedMethodRecords:hfe,getProtocolFromUrlString:dfe}=Zt(),{channels:Tn}=ed(),{headerNameLowerCasedRecord:W6}=cE(),gfe=/[^\u0021-\u00ff]/,Bi=Symbol("handler"),nw=class{constructor(t,{path:r,method:n,body:i,headers:s,query:o,idempotent:a,blocking:A,upgrade:f,headersTimeout:l,bodyTimeout:p,reset:I,expectContinue:S,servername:_,throwOnError:N,maxRedirections:O,typeOfService:x},G){if(typeof r!="string")throw new Tt("path must be a string");if(r[0]!=="/"&&!(r.startsWith("http://")||r.startsWith("https://"))&&n!=="CONNECT")throw new Tt("path must be an absolute URL or start with a slash");if(gfe.test(r))throw new Tt("invalid request path");if(typeof n!="string")throw new Tt("method must be a string");if(hfe[n]===void 0&&!tw(n))throw new Tt("invalid request method");if(f&&typeof f!="string")throw new Tt("upgrade must be a string");if(f&&!rw(f))throw new Tt("invalid upgrade header");if(l!=null&&(!Number.isFinite(l)||l<0))throw new Tt("invalid headersTimeout");if(p!=null&&(!Number.isFinite(p)||p<0))throw new Tt("invalid bodyTimeout");if(I!=null&&typeof I!="boolean")throw new Tt("invalid reset");if(S!=null&&typeof S!="boolean")throw new Tt("invalid expectContinue");if(N!=null)throw new Tt("invalid throwOnError");if(O!=null&&O!==0)throw new Tt("maxRedirections is not supported, use the redirect interceptor");if(x!=null&&(!Number.isInteger(x)||x<0||x>255))throw new Tt("typeOfService must be an integer between 0 and 255");if(this.headersTimeout=l,this.bodyTimeout=p,this.method=n,this.typeOfService=x??0,this.abort=null,i==null)this.body=null;else if(nfe(i)){this.body=i;let Y=this.body._readableState;(!Y||!Y.autoDestroy)&&(this.endHandler=function(){ife(this)},this.body.on("end",this.endHandler)),this.errorHandler=X=>{this.abort?this.abort(X):this.error=X},this.body.on("error",this.errorHandler)}else if(sfe(i))this.body=i.byteLength?i:null;else if(ArrayBuffer.isView(i))this.body=i.buffer.byteLength?Buffer.from(i.buffer,i.byteOffset,i.byteLength):null;else if(i instanceof ArrayBuffer)this.body=i.byteLength?Buffer.from(i):null;else if(typeof i=="string")this.body=i.length?Buffer.from(i):null;else if(ofe(i)||afe(i)||ffe(i))this.body=i;else throw new Tt("body must be a string, a Buffer, a Readable stream, an iterable, or an async iterable");if(this.completed=!1,this.aborted=!1,this.upgrade=f||null,this.path=o?ufe(r,o):r,this.origin=t,this.protocol=dfe(t),this.idempotent=a??(n==="HEAD"||n==="GET"),this.blocking=A??this.method!=="HEAD",this.reset=I??null,this.host=null,this.contentLength=null,this.contentType=null,this.headers=[],this.expectContinue=S??!1,Array.isArray(s)){if(s.length%2!==0)throw new Tt("headers array must be even");for(let Y=0;Y<s.length;Y+=2)_E(this,s[Y],s[Y+1])}else if(s&&typeof s=="object")if(Afe(s))for(let Y of s){if(!Array.isArray(Y)||Y.length!==2)throw new Tt("headers must be in key-value pair format");_E(this,Y[0],Y[1])}else{let Y=Object.keys(s);for(let X=0;X<Y.length;++X)_E(this,Y[X],s[Y[X]])}else if(s!=null)throw new Tt("headers must be an object or an array");cfe(G,n,f),this.servername=_||lfe(this.host)||null,this[Bi]=G,Tn.create.hasSubscribers&&Tn.create.publish({request:this})}onBodySent(t){if(Tn.bodyChunkSent.hasSubscribers&&Tn.bodyChunkSent.publish({request:this,chunk:t}),this[Bi].onBodySent)try{return this[Bi].onBodySent(t)}catch(r){this.abort(r)}}onRequestSent(){if(Tn.bodySent.hasSubscribers&&Tn.bodySent.publish({request:this}),this[Bi].onRequestSent)try{return this[Bi].onRequestSent()}catch(t){this.abort(t)}}onConnect(t){if(eo(!this.aborted),eo(!this.completed),this.error)t(this.error);else return this.abort=t,this[Bi].onConnect(t)}onResponseStarted(){return this[Bi].onResponseStarted?.()}onHeaders(t,r,n,i){eo(!this.aborted),eo(!this.completed),Tn.headers.hasSubscribers&&Tn.headers.publish({request:this,response:{statusCode:t,headers:r,statusText:i}});try{return this[Bi].onHeaders(t,r,n,i)}catch(s){this.abort(s)}}onData(t){eo(!this.aborted),eo(!this.completed),Tn.bodyChunkReceived.hasSubscribers&&Tn.bodyChunkReceived.publish({request:this,chunk:t});try{return this[Bi].onData(t)}catch(r){return this.abort(r),!1}}onUpgrade(t,r,n){return eo(!this.aborted),eo(!this.completed),this[Bi].onUpgrade(t,r,n)}onComplete(t){this.onFinally(),eo(!this.aborted),eo(!this.completed),this.completed=!0,Tn.trailers.hasSubscribers&&Tn.trailers.publish({request:this,trailers:t});try{return this[Bi].onComplete(t)}catch(r){this.onError(r)}}onError(t){if(this.onFinally(),Tn.error.hasSubscribers&&Tn.error.publish({request:this,error:t}),!this.aborted)return this.aborted=!0,this[Bi].onError(t)}onFinally(){this.errorHandler&&(this.body.off("error",this.errorHandler),this.errorHandler=null),this.endHandler&&(this.body.off("end",this.endHandler),this.endHandler=null)}addHeader(t,r){return _E(this,t,r),this}};function _E(e,t,r){if(r&&typeof r=="object"&&!Array.isArray(r))throw new Tt(`invalid ${t} header`);if(r===void 0)return;let n=W6[t];if(n===void 0&&(n=t.toLowerCase(),W6[n]===void 0&&!tw(n)))throw new Tt("invalid header key");if(Array.isArray(r)){let i=[];for(let s=0;s<r.length;s++)if(typeof r[s]=="string"){if(!rw(r[s]))throw new Tt(`invalid ${t} header`);i.push(r[s])}else if(r[s]===null)i.push("");else{if(typeof r[s]=="object")throw new Tt(`invalid ${t} header`);i.push(`${r[s]}`)}r=i}else if(typeof r=="string"){if(!rw(r))throw new Tt(`invalid ${t} header`)}else r===null?r="":r=`${r}`;if(n==="host"){if(e.host!==null)throw new Tt("duplicate host header");if(typeof r!="string")throw new Tt("invalid host header");e.host=r}else if(n==="content-length"){if(e.contentLength!==null)throw new Tt("duplicate content-length header");if(e.contentLength=parseInt(r,10),!Number.isFinite(e.contentLength))throw new Tt("invalid content-length header")}else if(e.contentType===null&&n==="content-type")e.contentType=r,e.headers.push(t,r);else{if(n==="transfer-encoding"||n==="keep-alive"||n==="upgrade")throw new Tt(`invalid ${n} header`);if(n==="connection"){let i=typeof r=="string"?r:null;if(i===null)throw new Tt("invalid connection header");for(let s of i.toLowerCase().split(",")){let o=s.trim();if(!tw(o))throw new Tt("invalid connection header");o==="close"&&(e.reset=!0)}}else{if(n==="expect")throw new rfe("expect header not supported");e.headers.push(t,r)}}}V6.exports=nw});var K6=U((hTe,z6)=>{"use strict";function pfe(){let e=globalThis._tlsModule;if(!e)throw new Error("node:tls bridge module is not available");return e}var j6={};for(let e of["connect","createServer","createSecureContext","TLSSocket","Server","checkServerIdentity","getCiphers","rootCertificates"])Object.defineProperty(j6,e,{enumerable:!0,get(){return pfe()[e]}});z6.exports=j6});var sw=U((gTe,$6)=>{"use strict";var Efe=AE(),X6=Gt(),Z6=Zt(),{InvalidArgumentError:yfe}=mr(),iw,mfe=class{constructor(t){this._maxCachedSessions=t,this._sessionCache=new Map,this._sessionRegistry=new FinalizationRegistry(r=>{if(this._sessionCache.size<this._maxCachedSessions)return;let n=this._sessionCache.get(r);n!==void 0&&n.deref()===void 0&&this._sessionCache.delete(r)})}get(t){let r=this._sessionCache.get(t);return r?r.deref():null}set(t,r){this._maxCachedSessions!==0&&(this._sessionCache.set(t,new WeakRef(r)),this._sessionRegistry.register(r,t))}};function Bfe({allowH2:e,useH2c:t,maxCachedSessions:r,socketPath:n,timeout:i,session:s,...o}){if(r!=null&&(!Number.isInteger(r)||r<0))throw new yfe("maxCachedSessions must be a positive integer or zero");let a={path:n,...o},A=new mfe(r??100);return i=i??1e4,e=e??!1,function({hostname:l,host:p,protocol:I,port:S,servername:_,localAddress:N,httpSocket:O},x){let G;if(I==="https:"){iw||(iw=K6()),_=_||a.servername||Z6.getServerName(p)||null;let X=_||l;X6(X);let Z=s||A.get(X)||null;S=S||443,G=iw.connect({highWaterMark:16384,...a,servername:_,session:Z,localAddress:N,ALPNProtocols:e?["http/1.1","h2"]:["http/1.1"],socket:O,port:S,host:l}),G.on("session",function(j){A.set(X,j)})}else X6(!O,"httpSocket can only be sent on TLS update"),S=S||80,G=Efe.connect({highWaterMark:64*1024,...a,localAddress:N,port:S,host:l}),t===!0&&(G.alpnProtocol="h2");if(a.keepAlive==null||a.keepAlive){let X=a.keepAliveInitialDelay===void 0?6e4:a.keepAliveInitialDelay;G.setKeepAlive(!0,X)}let Y=Z6.setupConnectTimeout(new WeakRef(G),{timeout:i,hostname:l,port:S});return G.setNoDelay(!0).once(I==="https:"?"secureConnect":"connect",function(){if(queueMicrotask(Y),x){let X=x;x=null,X(null,this)}}).on("error",function(X){if(queueMicrotask(Y),x){let Z=x;x=null,Z(X)}}),G}}$6.exports=Bfe});var e3=U(ow=>{"use strict";Object.defineProperty(ow,"__esModule",{value:!0});ow.enumToMap=Ife;function Ife(e,t=[],r=[]){let n=(t?.length??0)===0,i=(r?.length??0)===0;return Object.fromEntries(Object.entries(e).filter(([,s])=>typeof s=="number"&&(n||t.includes(s))&&(i||!r.includes(s))))}});var t3=U(q=>{"use strict";Object.defineProperty(q,"__esModule",{value:!0});q.SPECIAL_HEADERS=q.MINOR=q.MAJOR=q.HTAB_SP_VCHAR_OBS_TEXT=q.QUOTED_STRING=q.CONNECTION_TOKEN_CHARS=q.HEADER_CHARS=q.TOKEN=q.HEX=q.URL_CHAR=q.USERINFO_CHARS=q.MARK=q.ALPHANUM=q.NUM=q.HEX_MAP=q.NUM_MAP=q.ALPHA=q.STATUSES_HTTP=q.H_METHOD_MAP=q.METHOD_MAP=q.METHODS_RTSP=q.METHODS_ICE=q.METHODS_HTTP=q.HEADER_STATE=q.FINISH=q.STATUSES=q.METHODS=q.LENIENT_FLAGS=q.FLAGS=q.TYPE=q.ERROR=void 0;var bfe=e3();q.ERROR={OK:0,INTERNAL:1,STRICT:2,CR_EXPECTED:25,LF_EXPECTED:3,UNEXPECTED_CONTENT_LENGTH:4,UNEXPECTED_SPACE:30,CLOSED_CONNECTION:5,INVALID_METHOD:6,INVALID_URL:7,INVALID_CONSTANT:8,INVALID_VERSION:9,INVALID_HEADER_TOKEN:10,INVALID_CONTENT_LENGTH:11,INVALID_CHUNK_SIZE:12,INVALID_STATUS:13,INVALID_EOF_STATE:14,INVALID_TRANSFER_ENCODING:15,CB_MESSAGE_BEGIN:16,CB_HEADERS_COMPLETE:17,CB_MESSAGE_COMPLETE:18,CB_CHUNK_HEADER:19,CB_CHUNK_COMPLETE:20,PAUSED:21,PAUSED_UPGRADE:22,PAUSED_H2_UPGRADE:23,USER:24,CB_URL_COMPLETE:26,CB_STATUS_COMPLETE:27,CB_METHOD_COMPLETE:32,CB_VERSION_COMPLETE:33,CB_HEADER_FIELD_COMPLETE:28,CB_HEADER_VALUE_COMPLETE:29,CB_CHUNK_EXTENSION_NAME_COMPLETE:34,CB_CHUNK_EXTENSION_VALUE_COMPLETE:35,CB_RESET:31,CB_PROTOCOL_COMPLETE:38};q.TYPE={BOTH:0,REQUEST:1,RESPONSE:2};q.FLAGS={CONNECTION_KEEP_ALIVE:1,CONNECTION_CLOSE:2,CONNECTION_UPGRADE:4,CHUNKED:8,UPGRADE:16,CONTENT_LENGTH:32,SKIPBODY:64,TRAILING:128,TRANSFER_ENCODING:512};q.LENIENT_FLAGS={HEADERS:1,CHUNKED_LENGTH:2,KEEP_ALIVE:4,TRANSFER_ENCODING:8,VERSION:16,DATA_AFTER_CLOSE:32,OPTIONAL_LF_AFTER_CR:64,OPTIONAL_CRLF_AFTER_CHUNK:128,OPTIONAL_CR_BEFORE_LF:256,SPACES_AFTER_CHUNK_SIZE:512};q.METHODS={DELETE:0,GET:1,HEAD:2,POST:3,PUT:4,CONNECT:5,OPTIONS:6,TRACE:7,COPY:8,LOCK:9,MKCOL:10,MOVE:11,PROPFIND:12,PROPPATCH:13,SEARCH:14,UNLOCK:15,BIND:16,REBIND:17,UNBIND:18,ACL:19,REPORT:20,MKACTIVITY:21,CHECKOUT:22,MERGE:23,"M-SEARCH":24,NOTIFY:25,SUBSCRIBE:26,UNSUBSCRIBE:27,PATCH:28,PURGE:29,MKCALENDAR:30,LINK:31,UNLINK:32,SOURCE:33,PRI:34,DESCRIBE:35,ANNOUNCE:36,SETUP:37,PLAY:38,PAUSE:39,TEARDOWN:40,GET_PARAMETER:41,SET_PARAMETER:42,REDIRECT:43,RECORD:44,FLUSH:45,QUERY:46};q.STATUSES={CONTINUE:100,SWITCHING_PROTOCOLS:101,PROCESSING:102,EARLY_HINTS:103,RESPONSE_IS_STALE:110,REVALIDATION_FAILED:111,DISCONNECTED_OPERATION:112,HEURISTIC_EXPIRATION:113,MISCELLANEOUS_WARNING:199,OK:200,CREATED:201,ACCEPTED:202,NON_AUTHORITATIVE_INFORMATION:203,NO_CONTENT:204,RESET_CONTENT:205,PARTIAL_CONTENT:206,MULTI_STATUS:207,ALREADY_REPORTED:208,TRANSFORMATION_APPLIED:214,IM_USED:226,MISCELLANEOUS_PERSISTENT_WARNING:299,MULTIPLE_CHOICES:300,MOVED_PERMANENTLY:301,FOUND:302,SEE_OTHER:303,NOT_MODIFIED:304,USE_PROXY:305,SWITCH_PROXY:306,TEMPORARY_REDIRECT:307,PERMANENT_REDIRECT:308,BAD_REQUEST:400,UNAUTHORIZED:401,PAYMENT_REQUIRED:402,FORBIDDEN:403,NOT_FOUND:404,METHOD_NOT_ALLOWED:405,NOT_ACCEPTABLE:406,PROXY_AUTHENTICATION_REQUIRED:407,REQUEST_TIMEOUT:408,CONFLICT:409,GONE:410,LENGTH_REQUIRED:411,PRECONDITION_FAILED:412,PAYLOAD_TOO_LARGE:413,URI_TOO_LONG:414,UNSUPPORTED_MEDIA_TYPE:415,RANGE_NOT_SATISFIABLE:416,EXPECTATION_FAILED:417,IM_A_TEAPOT:418,PAGE_EXPIRED:419,ENHANCE_YOUR_CALM:420,MISDIRECTED_REQUEST:421,UNPROCESSABLE_ENTITY:422,LOCKED:423,FAILED_DEPENDENCY:424,TOO_EARLY:425,UPGRADE_REQUIRED:426,PRECONDITION_REQUIRED:428,TOO_MANY_REQUESTS:429,REQUEST_HEADER_FIELDS_TOO_LARGE_UNOFFICIAL:430,REQUEST_HEADER_FIELDS_TOO_LARGE:431,LOGIN_TIMEOUT:440,NO_RESPONSE:444,RETRY_WITH:449,BLOCKED_BY_PARENTAL_CONTROL:450,UNAVAILABLE_FOR_LEGAL_REASONS:451,CLIENT_CLOSED_LOAD_BALANCED_REQUEST:460,INVALID_X_FORWARDED_FOR:463,REQUEST_HEADER_TOO_LARGE:494,SSL_CERTIFICATE_ERROR:495,SSL_CERTIFICATE_REQUIRED:496,HTTP_REQUEST_SENT_TO_HTTPS_PORT:497,INVALID_TOKEN:498,CLIENT_CLOSED_REQUEST:499,INTERNAL_SERVER_ERROR:500,NOT_IMPLEMENTED:501,BAD_GATEWAY:502,SERVICE_UNAVAILABLE:503,GATEWAY_TIMEOUT:504,HTTP_VERSION_NOT_SUPPORTED:505,VARIANT_ALSO_NEGOTIATES:506,INSUFFICIENT_STORAGE:507,LOOP_DETECTED:508,BANDWIDTH_LIMIT_EXCEEDED:509,NOT_EXTENDED:510,NETWORK_AUTHENTICATION_REQUIRED:511,WEB_SERVER_UNKNOWN_ERROR:520,WEB_SERVER_IS_DOWN:521,CONNECTION_TIMEOUT:522,ORIGIN_IS_UNREACHABLE:523,TIMEOUT_OCCURED:524,SSL_HANDSHAKE_FAILED:525,INVALID_SSL_CERTIFICATE:526,RAILGUN_ERROR:527,SITE_IS_OVERLOADED:529,SITE_IS_FROZEN:530,IDENTITY_PROVIDER_AUTHENTICATION_ERROR:561,NETWORK_READ_TIMEOUT:598,NETWORK_CONNECT_TIMEOUT:599};q.FINISH={SAFE:0,SAFE_WITH_CB:1,UNSAFE:2};q.HEADER_STATE={GENERAL:0,CONNECTION:1,CONTENT_LENGTH:2,TRANSFER_ENCODING:3,UPGRADE:4,CONNECTION_KEEP_ALIVE:5,CONNECTION_CLOSE:6,CONNECTION_UPGRADE:7,TRANSFER_ENCODING_CHUNKED:8};q.METHODS_HTTP=[q.METHODS.DELETE,q.METHODS.GET,q.METHODS.HEAD,q.METHODS.POST,q.METHODS.PUT,q.METHODS.CONNECT,q.METHODS.OPTIONS,q.METHODS.TRACE,q.METHODS.COPY,q.METHODS.LOCK,q.METHODS.MKCOL,q.METHODS.MOVE,q.METHODS.PROPFIND,q.METHODS.PROPPATCH,q.METHODS.SEARCH,q.METHODS.UNLOCK,q.METHODS.BIND,q.METHODS.REBIND,q.METHODS.UNBIND,q.METHODS.ACL,q.METHODS.REPORT,q.METHODS.MKACTIVITY,q.METHODS.CHECKOUT,q.METHODS.MERGE,q.METHODS["M-SEARCH"],q.METHODS.NOTIFY,q.METHODS.SUBSCRIBE,q.METHODS.UNSUBSCRIBE,q.METHODS.PATCH,q.METHODS.PURGE,q.METHODS.MKCALENDAR,q.METHODS.LINK,q.METHODS.UNLINK,q.METHODS.PRI,q.METHODS.SOURCE,q.METHODS.QUERY];q.METHODS_ICE=[q.METHODS.SOURCE];q.METHODS_RTSP=[q.METHODS.OPTIONS,q.METHODS.DESCRIBE,q.METHODS.ANNOUNCE,q.METHODS.SETUP,q.METHODS.PLAY,q.METHODS.PAUSE,q.METHODS.TEARDOWN,q.METHODS.GET_PARAMETER,q.METHODS.SET_PARAMETER,q.METHODS.REDIRECT,q.METHODS.RECORD,q.METHODS.FLUSH,q.METHODS.GET,q.METHODS.POST];q.METHOD_MAP=(0,bfe.enumToMap)(q.METHODS);q.H_METHOD_MAP=Object.fromEntries(Object.entries(q.METHODS).filter(([e])=>e.startsWith("H")));q.STATUSES_HTTP=[q.STATUSES.CONTINUE,q.STATUSES.SWITCHING_PROTOCOLS,q.STATUSES.PROCESSING,q.STATUSES.EARLY_HINTS,q.STATUSES.RESPONSE_IS_STALE,q.STATUSES.REVALIDATION_FAILED,q.STATUSES.DISCONNECTED_OPERATION,q.STATUSES.HEURISTIC_EXPIRATION,q.STATUSES.MISCELLANEOUS_WARNING,q.STATUSES.OK,q.STATUSES.CREATED,q.STATUSES.ACCEPTED,q.STATUSES.NON_AUTHORITATIVE_INFORMATION,q.STATUSES.NO_CONTENT,q.STATUSES.RESET_CONTENT,q.STATUSES.PARTIAL_CONTENT,q.STATUSES.MULTI_STATUS,q.STATUSES.ALREADY_REPORTED,q.STATUSES.TRANSFORMATION_APPLIED,q.STATUSES.IM_USED,q.STATUSES.MISCELLANEOUS_PERSISTENT_WARNING,q.STATUSES.MULTIPLE_CHOICES,q.STATUSES.MOVED_PERMANENTLY,q.STATUSES.FOUND,q.STATUSES.SEE_OTHER,q.STATUSES.NOT_MODIFIED,q.STATUSES.USE_PROXY,q.STATUSES.SWITCH_PROXY,q.STATUSES.TEMPORARY_REDIRECT,q.STATUSES.PERMANENT_REDIRECT,q.STATUSES.BAD_REQUEST,q.STATUSES.UNAUTHORIZED,q.STATUSES.PAYMENT_REQUIRED,q.STATUSES.FORBIDDEN,q.STATUSES.NOT_FOUND,q.STATUSES.METHOD_NOT_ALLOWED,q.STATUSES.NOT_ACCEPTABLE,q.STATUSES.PROXY_AUTHENTICATION_REQUIRED,q.STATUSES.REQUEST_TIMEOUT,q.STATUSES.CONFLICT,q.STATUSES.GONE,q.STATUSES.LENGTH_REQUIRED,q.STATUSES.PRECONDITION_FAILED,q.STATUSES.PAYLOAD_TOO_LARGE,q.STATUSES.URI_TOO_LONG,q.STATUSES.UNSUPPORTED_MEDIA_TYPE,q.STATUSES.RANGE_NOT_SATISFIABLE,q.STATUSES.EXPECTATION_FAILED,q.STATUSES.IM_A_TEAPOT,q.STATUSES.PAGE_EXPIRED,q.STATUSES.ENHANCE_YOUR_CALM,q.STATUSES.MISDIRECTED_REQUEST,q.STATUSES.UNPROCESSABLE_ENTITY,q.STATUSES.LOCKED,q.STATUSES.FAILED_DEPENDENCY,q.STATUSES.TOO_EARLY,q.STATUSES.UPGRADE_REQUIRED,q.STATUSES.PRECONDITION_REQUIRED,q.STATUSES.TOO_MANY_REQUESTS,q.STATUSES.REQUEST_HEADER_FIELDS_TOO_LARGE_UNOFFICIAL,q.STATUSES.REQUEST_HEADER_FIELDS_TOO_LARGE,q.STATUSES.LOGIN_TIMEOUT,q.STATUSES.NO_RESPONSE,q.STATUSES.RETRY_WITH,q.STATUSES.BLOCKED_BY_PARENTAL_CONTROL,q.STATUSES.UNAVAILABLE_FOR_LEGAL_REASONS,q.STATUSES.CLIENT_CLOSED_LOAD_BALANCED_REQUEST,q.STATUSES.INVALID_X_FORWARDED_FOR,q.STATUSES.REQUEST_HEADER_TOO_LARGE,q.STATUSES.SSL_CERTIFICATE_ERROR,q.STATUSES.SSL_CERTIFICATE_REQUIRED,q.STATUSES.HTTP_REQUEST_SENT_TO_HTTPS_PORT,q.STATUSES.INVALID_TOKEN,q.STATUSES.CLIENT_CLOSED_REQUEST,q.STATUSES.INTERNAL_SERVER_ERROR,q.STATUSES.NOT_IMPLEMENTED,q.STATUSES.BAD_GATEWAY,q.STATUSES.SERVICE_UNAVAILABLE,q.STATUSES.GATEWAY_TIMEOUT,q.STATUSES.HTTP_VERSION_NOT_SUPPORTED,q.STATUSES.VARIANT_ALSO_NEGOTIATES,q.STATUSES.INSUFFICIENT_STORAGE,q.STATUSES.LOOP_DETECTED,q.STATUSES.BANDWIDTH_LIMIT_EXCEEDED,q.STATUSES.NOT_EXTENDED,q.STATUSES.NETWORK_AUTHENTICATION_REQUIRED,q.STATUSES.WEB_SERVER_UNKNOWN_ERROR,q.STATUSES.WEB_SERVER_IS_DOWN,q.STATUSES.CONNECTION_TIMEOUT,q.STATUSES.ORIGIN_IS_UNREACHABLE,q.STATUSES.TIMEOUT_OCCURED,q.STATUSES.SSL_HANDSHAKE_FAILED,q.STATUSES.INVALID_SSL_CERTIFICATE,q.STATUSES.RAILGUN_ERROR,q.STATUSES.SITE_IS_OVERLOADED,q.STATUSES.SITE_IS_FROZEN,q.STATUSES.IDENTITY_PROVIDER_AUTHENTICATION_ERROR,q.STATUSES.NETWORK_READ_TIMEOUT,q.STATUSES.NETWORK_CONNECT_TIMEOUT];q.ALPHA=[];for(let e=65;e<=90;e++)q.ALPHA.push(String.fromCharCode(e)),q.ALPHA.push(String.fromCharCode(e+32));q.NUM_MAP={0:0,1:1,2:2,3:3,4:4,5:5,6:6,7:7,8:8,9:9};q.HEX_MAP={0:0,1:1,2:2,3:3,4:4,5:5,6:6,7:7,8:8,9:9,A:10,B:11,C:12,D:13,E:14,F:15,a:10,b:11,c:12,d:13,e:14,f:15};q.NUM=["0","1","2","3","4","5","6","7","8","9"];q.ALPHANUM=q.ALPHA.concat(q.NUM);q.MARK=["-","_",".","!","~","*","'","(",")"];q.USERINFO_CHARS=q.ALPHANUM.concat(q.MARK).concat(["%",";",":","&","=","+","$",","]);q.URL_CHAR=["!",'"',"$","%","&","'","(",")","*","+",",","-",".","/",":",";","<","=",">","@","[","\\","]","^","_","`","{","|","}","~"].concat(q.ALPHANUM);q.HEX=q.NUM.concat(["a","b","c","d","e","f","A","B","C","D","E","F"]);q.TOKEN=["!","#","$","%","&","'","*","+","-",".","^","_","`","|","~"].concat(q.ALPHANUM);q.HEADER_CHARS=["	"];for(let e=32;e<=255;e++)e!==127&&q.HEADER_CHARS.push(e);q.CONNECTION_TOKEN_CHARS=q.HEADER_CHARS.filter(e=>e!==44);q.QUOTED_STRING=["	"," "];for(let e=33;e<=255;e++)e!==34&&e!==92&&q.QUOTED_STRING.push(e);q.HTAB_SP_VCHAR_OBS_TEXT=["	"," "];for(let e=33;e<=126;e++)q.HTAB_SP_VCHAR_OBS_TEXT.push(e);for(let e=128;e<=255;e++)q.HTAB_SP_VCHAR_OBS_TEXT.push(e);q.MAJOR=q.NUM_MAP;q.MINOR=q.MAJOR;q.SPECIAL_HEADERS={connection:q.HEADER_STATE.CONNECTION,"content-length":q.HEADER_STATE.CONTENT_LENGTH,"proxy-connection":q.HEADER_STATE.CONNECTION,"transfer-encoding":q.HEADER_STATE.TRANSFER_ENCODING,upgrade:q.HEADER_STATE.UPGRADE};q.default={ERROR:q.ERROR,TYPE:q.TYPE,FLAGS:q.FLAGS,LENIENT_FLAGS:q.LENIENT_FLAGS,METHODS:q.METHODS,STATUSES:q.STATUSES,FINISH:q.FINISH,HEADER_STATE:q.HEADER_STATE,ALPHA:q.ALPHA,NUM_MAP:q.NUM_MAP,HEX_MAP:q.HEX_MAP,NUM:q.NUM,ALPHANUM:q.ALPHANUM,MARK:q.MARK,USERINFO_CHARS:q.USERINFO_CHARS,URL_CHAR:q.URL_CHAR,HEX:q.HEX,TOKEN:q.TOKEN,HEADER_CHARS:q.HEADER_CHARS,CONNECTION_TOKEN_CHARS:q.CONNECTION_TOKEN_CHARS,QUOTED_STRING:q.QUOTED_STRING,HTAB_SP_VCHAR_OBS_TEXT:q.HTAB_SP_VCHAR_OBS_TEXT,MAJOR:q.MAJOR,MINOR:q.MINOR,SPECIAL_HEADERS:q.SPECIAL_HEADERS,METHODS_HTTP:q.METHODS_HTTP,METHODS_ICE:q.METHODS_ICE,METHODS_RTSP:q.METHODS_RTSP,METHOD_MAP:q.METHOD_MAP,H_METHOD_MAP:q.H_METHOD_MAP,STATUSES_HTTP:q.STATUSES_HTTP}});var Aw=U((yTe,r3)=>{"use strict";var{Buffer:Cfe}=Gr(),Qfe="AGFzbQEAAAABJwdgAX8Bf2ADf39/AX9gAn9/AGABfwBgBH9/f38Bf2AAAGADf39/AALLAQgDZW52GHdhc21fb25faGVhZGVyc19jb21wbGV0ZQAEA2VudhV3YXNtX29uX21lc3NhZ2VfYmVnaW4AAANlbnYLd2FzbV9vbl91cmwAAQNlbnYOd2FzbV9vbl9zdGF0dXMAAQNlbnYUd2FzbV9vbl9oZWFkZXJfZmllbGQAAQNlbnYUd2FzbV9vbl9oZWFkZXJfdmFsdWUAAQNlbnYMd2FzbV9vbl9ib2R5AAEDZW52GHdhc21fb25fbWVzc2FnZV9jb21wbGV0ZQAAAzU0BQYAAAMAAAAAAAADAQMAAwMDAAACAAAAAAICAgICAgICAgIBAQEBAQEBAQEBAwAAAwAAAAQFAXABExMFAwEAAgYIAX8BQcDZBAsHxQcoBm1lbW9yeQIAC19pbml0aWFsaXplAAgZX19pbmRpcmVjdF9mdW5jdGlvbl90YWJsZQEAC2xsaHR0cF9pbml0AAkYbGxodHRwX3Nob3VsZF9rZWVwX2FsaXZlADcMbGxodHRwX2FsbG9jAAsGbWFsbG9jADkLbGxodHRwX2ZyZWUADARmcmVlAAwPbGxodHRwX2dldF90eXBlAA0VbGxodHRwX2dldF9odHRwX21ham9yAA4VbGxodHRwX2dldF9odHRwX21pbm9yAA8RbGxodHRwX2dldF9tZXRob2QAEBZsbGh0dHBfZ2V0X3N0YXR1c19jb2RlABESbGxodHRwX2dldF91cGdyYWRlABIMbGxodHRwX3Jlc2V0ABMObGxodHRwX2V4ZWN1dGUAFBRsbGh0dHBfc2V0dGluZ3NfaW5pdAAVDWxsaHR0cF9maW5pc2gAFgxsbGh0dHBfcGF1c2UAFw1sbGh0dHBfcmVzdW1lABgbbGxodHRwX3Jlc3VtZV9hZnRlcl91cGdyYWRlABkQbGxodHRwX2dldF9lcnJubwAaF2xsaHR0cF9nZXRfZXJyb3JfcmVhc29uABsXbGxodHRwX3NldF9lcnJvcl9yZWFzb24AHBRsbGh0dHBfZ2V0X2Vycm9yX3BvcwAdEWxsaHR0cF9lcnJub19uYW1lAB4SbGxodHRwX21ldGhvZF9uYW1lAB8SbGxodHRwX3N0YXR1c19uYW1lACAabGxodHRwX3NldF9sZW5pZW50X2hlYWRlcnMAISFsbGh0dHBfc2V0X2xlbmllbnRfY2h1bmtlZF9sZW5ndGgAIh1sbGh0dHBfc2V0X2xlbmllbnRfa2VlcF9hbGl2ZQAjJGxsaHR0cF9zZXRfbGVuaWVudF90cmFuc2Zlcl9lbmNvZGluZwAkGmxsaHR0cF9zZXRfbGVuaWVudF92ZXJzaW9uACUjbGxodHRwX3NldF9sZW5pZW50X2RhdGFfYWZ0ZXJfY2xvc2UAJidsbGh0dHBfc2V0X2xlbmllbnRfb3B0aW9uYWxfbGZfYWZ0ZXJfY3IAJyxsbGh0dHBfc2V0X2xlbmllbnRfb3B0aW9uYWxfY3JsZl9hZnRlcl9jaHVuawAoKGxsaHR0cF9zZXRfbGVuaWVudF9vcHRpb25hbF9jcl9iZWZvcmVfbGYAKSpsbGh0dHBfc2V0X2xlbmllbnRfc3BhY2VzX2FmdGVyX2NodW5rX3NpemUAKhhsbGh0dHBfbWVzc2FnZV9uZWVkc19lb2YANgkYAQBBAQsSAQIDBAUKBgcyNDMuKy8tLDAxCq/ZAjQWAEHA1QAoAgAEQAALQcDVAEEBNgIACxQAIAAQOCAAIAI2AjggACABOgAoCxQAIAAgAC8BNCAALQAwIAAQNxAACx4BAX9BwAAQOiIBEDggAUGACDYCOCABIAA6ACggAQuPDAEHfwJAIABFDQAgAEEIayIBIABBBGsoAgAiAEF4cSIEaiEFAkAgAEEBcQ0AIABBA3FFDQEgASABKAIAIgBrIgFB1NUAKAIASQ0BIAAgBGohBAJAAkBB2NUAKAIAIAFHBEAgAEH/AU0EQCAAQQN2IQMgASgCCCIAIAEoAgwiAkYEQEHE1QBBxNUAKAIAQX4gA3dxNgIADAULIAIgADYCCCAAIAI2AgwMBAsgASgCGCEGIAEgASgCDCIARwRAIAAgASgCCCICNgIIIAIgADYCDAwDCyABQRRqIgMoAgAiAkUEQCABKAIQIgJFDQIgAUEQaiEDCwNAIAMhByACIgBBFGoiAygCACICDQAgAEEQaiEDIAAoAhAiAg0ACyAHQQA2AgAMAgsgBSgCBCIAQQNxQQNHDQIgBSAAQX5xNgIEQczVACAENgIAIAUgBDYCACABIARBAXI2AgQMAwtBACEACyAGRQ0AAkAgASgCHCICQQJ0QfTXAGoiAygCACABRgRAIAMgADYCACAADQFByNUAQcjVACgCAEF+IAJ3cTYCAAwCCyAGQRBBFCAGKAIQIAFGG2ogADYCACAARQ0BCyAAIAY2AhggASgCECICBEAgACACNgIQIAIgADYCGAsgAUEUaigCACICRQ0AIABBFGogAjYCACACIAA2AhgLIAEgBU8NACAFKAIEIgBBAXFFDQACQAJAAkACQCAAQQJxRQRAQdzVACgCACAFRgRAQdzVACABNgIAQdDVAEHQ1QAoAgAgBGoiADYCACABIABBAXI2AgQgAUHY1QAoAgBHDQZBzNUAQQA2AgBB2NUAQQA2AgAMBgtB2NUAKAIAIAVGBEBB2NUAIAE2AgBBzNUAQczVACgCACAEaiIANgIAIAEgAEEBcjYCBCAAIAFqIAA2AgAMBgsgAEF4cSAEaiEEIABB/wFNBEAgAEEDdiEDIAUoAggiACAFKAIMIgJGBEBBxNUAQcTVACgCAEF+IAN3cTYCAAwFCyACIAA2AgggACACNgIMDAQLIAUoAhghBiAFIAUoAgwiAEcEQEHU1QAoAgAaIAAgBSgCCCICNgIIIAIgADYCDAwDCyAFQRRqIgMoAgAiAkUEQCAFKAIQIgJFDQIgBUEQaiEDCwNAIAMhByACIgBBFGoiAygCACICDQAgAEEQaiEDIAAoAhAiAg0ACyAHQQA2AgAMAgsgBSAAQX5xNgIEIAEgBGogBDYCACABIARBAXI2AgQMAwtBACEACyAGRQ0AAkAgBSgCHCICQQJ0QfTXAGoiAygCACAFRgRAIAMgADYCACAADQFByNUAQcjVACgCAEF+IAJ3cTYCAAwCCyAGQRBBFCAGKAIQIAVGG2ogADYCACAARQ0BCyAAIAY2AhggBSgCECICBEAgACACNgIQIAIgADYCGAsgBUEUaigCACICRQ0AIABBFGogAjYCACACIAA2AhgLIAEgBGogBDYCACABIARBAXI2AgQgAUHY1QAoAgBHDQBBzNUAIAQ2AgAMAQsgBEH/AU0EQCAEQXhxQezVAGohAAJ/QcTVACgCACICQQEgBEEDdnQiA3FFBEBBxNUAIAIgA3I2AgAgAAwBCyAAKAIICyICIAE2AgwgACABNgIIIAEgADYCDCABIAI2AggMAQtBHyECIARB////B00EQCAEQSYgBEEIdmciAGt2QQFxIABBAXRrQT5qIQILIAEgAjYCHCABQgA3AhAgAkECdEH01wBqIQACQEHI1QAoAgAiA0EBIAJ0IgdxRQRAIAAgATYCAEHI1QAgAyAHcjYCACABIAA2AhggASABNgIIIAEgATYCDAwBCyAEQRkgAkEBdmtBACACQR9HG3QhAiAAKAIAIQACQANAIAAiAygCBEF4cSAERg0BIAJBHXYhACACQQF0IQIgAyAAQQRxakEQaiIHKAIAIgANAAsgByABNgIAIAEgAzYCGCABIAE2AgwgASABNgIIDAELIAMoAggiACABNgIMIAMgATYCCCABQQA2AhggASADNgIMIAEgADYCCAtB5NUAQeTVACgCAEEBayIAQX8gABs2AgALCwcAIAAtACgLBwAgAC0AKgsHACAALQArCwcAIAAtACkLBwAgAC8BNAsHACAALQAwC0ABBH8gACgCGCEBIAAvAS4hAiAALQAoIQMgACgCOCEEIAAQOCAAIAQ2AjggACADOgAoIAAgAjsBLiAAIAE2AhgL5YUCAgd/A34gASACaiEEAkAgACIDKAIMIgANACADKAIEBEAgAyABNgIECyMAQRBrIgkkAAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAn8CQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkAgAygCHCICQQJrDvwBAfkBAgMEBQYHCAkKCwwNDg8QERL4ARP3ARQV9gEWF/UBGBkaGxwdHh8g/QH7ASH0ASIjJCUmJygpKivzASwtLi8wMTLyAfEBMzTwAe8BNTY3ODk6Ozw9Pj9AQUJDREVGR0hJSktMTU5P+gFQUVJT7gHtAVTsAVXrAVZXWFla6gFbXF1eX2BhYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5ent8fX5/gAGBAYIBgwGEAYUBhgGHAYgBiQGKAYsBjAGNAY4BjwGQAZEBkgGTAZQBlQGWAZcBmAGZAZoBmwGcAZ0BngGfAaABoQGiAaMBpAGlAaYBpwGoAakBqgGrAawBrQGuAa8BsAGxAbIBswG0AbUBtgG3AbgBuQG6AbsBvAG9Ab4BvwHAAcEBwgHDAcQBxQHGAccByAHJAcoBywHMAc0BzgHpAegBzwHnAdAB5gHRAdIB0wHUAeUB1QHWAdcB2AHZAdoB2wHcAd0B3gHfAeAB4QHiAeMBAPwBC0EADOMBC0EODOIBC0ENDOEBC0EPDOABC0EQDN8BC0ETDN4BC0EUDN0BC0EVDNwBC0EWDNsBC0EXDNoBC0EYDNkBC0EZDNgBC0EaDNcBC0EbDNYBC0EcDNUBC0EdDNQBC0EeDNMBC0EfDNIBC0EgDNEBC0EhDNABC0EIDM8BC0EiDM4BC0EkDM0BC0EjDMwBC0EHDMsBC0ElDMoBC0EmDMkBC0EnDMgBC0EoDMcBC0ESDMYBC0ERDMUBC0EpDMQBC0EqDMMBC0ErDMIBC0EsDMEBC0HeAQzAAQtBLgy/AQtBLwy+AQtBMAy9AQtBMQy8AQtBMgy7AQtBMwy6AQtBNAy5AQtB3wEMuAELQTUMtwELQTkMtgELQQwMtQELQTYMtAELQTcMswELQTgMsgELQT4MsQELQToMsAELQeABDK8BC0ELDK4BC0E/DK0BC0E7DKwBC0EKDKsBC0E8DKoBC0E9DKkBC0HhAQyoAQtBwQAMpwELQcAADKYBC0HCAAylAQtBCQykAQtBLQyjAQtBwwAMogELQcQADKEBC0HFAAygAQtBxgAMnwELQccADJ4BC0HIAAydAQtByQAMnAELQcoADJsBC0HLAAyaAQtBzAAMmQELQc0ADJgBC0HOAAyXAQtBzwAMlgELQdAADJUBC0HRAAyUAQtB0gAMkwELQdMADJIBC0HVAAyRAQtB1AAMkAELQdYADI8BC0HXAAyOAQtB2AAMjQELQdkADIwBC0HaAAyLAQtB2wAMigELQdwADIkBC0HdAAyIAQtB3gAMhwELQd8ADIYBC0HgAAyFAQtB4QAMhAELQeIADIMBC0HjAAyCAQtB5AAMgQELQeUADIABC0HiAQx/C0HmAAx+C0HnAAx9C0EGDHwLQegADHsLQQUMegtB6QAMeQtBBAx4C0HqAAx3C0HrAAx2C0HsAAx1C0HtAAx0C0EDDHMLQe4ADHILQe8ADHELQfAADHALQfIADG8LQfEADG4LQfMADG0LQfQADGwLQfUADGsLQfYADGoLQQIMaQtB9wAMaAtB+AAMZwtB+QAMZgtB+gAMZQtB+wAMZAtB/AAMYwtB/QAMYgtB/gAMYQtB/wAMYAtBgAEMXwtBgQEMXgtBggEMXQtBgwEMXAtBhAEMWwtBhQEMWgtBhgEMWQtBhwEMWAtBiAEMVwtBiQEMVgtBigEMVQtBiwEMVAtBjAEMUwtBjQEMUgtBjgEMUQtBjwEMUAtBkAEMTwtBkQEMTgtBkgEMTQtBkwEMTAtBlAEMSwtBlQEMSgtBlgEMSQtBlwEMSAtBmAEMRwtBmQEMRgtBmgEMRQtBmwEMRAtBnAEMQwtBnQEMQgtBngEMQQtBnwEMQAtBoAEMPwtBoQEMPgtBogEMPQtBowEMPAtBpAEMOwtBpQEMOgtBpgEMOQtBpwEMOAtBqAEMNwtBqQEMNgtBqgEMNQtBqwEMNAtBrAEMMwtBrQEMMgtBrgEMMQtBrwEMMAtBsAEMLwtBsQEMLgtBsgEMLQtBswEMLAtBtAEMKwtBtQEMKgtBtgEMKQtBtwEMKAtBuAEMJwtBuQEMJgtBugEMJQtBuwEMJAtBvAEMIwtBvQEMIgtBvgEMIQtBvwEMIAtBwAEMHwtBwQEMHgtBwgEMHQtBAQwcC0HDAQwbC0HEAQwaC0HFAQwZC0HGAQwYC0HHAQwXC0HIAQwWC0HJAQwVC0HKAQwUC0HLAQwTC0HMAQwSC0HNAQwRC0HOAQwQC0HPAQwPC0HQAQwOC0HRAQwNC0HSAQwMC0HTAQwLC0HUAQwKC0HVAQwJC0HWAQwIC0HjAQwHC0HXAQwGC0HYAQwFC0HZAQwEC0HaAQwDC0HbAQwCC0HdAQwBC0HcAQshAgNAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQCADAn8CQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAn8CQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAn8CQAJAAkACQAJAAkACQAJ/AkACQAJAAn8CQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAIAMCfwJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACfwJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkAgAg7jAQABAgMEBQYHCAkKCwwNDg8QERITFBUWFxgZGhscHR4fICEjJCUnKCmeA5sDmgORA4oDgwOAA/0C+wL4AvIC8QLvAu0C6ALnAuYC5QLkAtwC2wLaAtkC2ALXAtYC1QLPAs4CzALLAsoCyQLIAscCxgLEAsMCvgK8AroCuQK4ArcCtgK1ArQCswKyArECsAKuAq0CqQKoAqcCpgKlAqQCowKiAqECoAKfApgCkAKMAosCigKBAv4B/QH8AfsB+gH5AfgB9wH1AfMB8AHrAekB6AHnAeYB5QHkAeMB4gHhAeAB3wHeAd0B3AHaAdkB2AHXAdYB1QHUAdMB0gHRAdABzwHOAc0BzAHLAcoByQHIAccBxgHFAcQBwwHCAcEBwAG/Ab4BvQG8AbsBugG5AbgBtwG2AbUBtAGzAbIBsQGwAa8BrgGtAawBqwGqAakBqAGnAaYBpQGkAaMBogGfAZ4BmQGYAZcBlgGVAZQBkwGSAZEBkAGPAY0BjAGHAYYBhQGEAYMBggF9fHt6eXZ1dFBRUlNUVQsgASAERw1yQf0BIQIMvgMLIAEgBEcNmAFB2wEhAgy9AwsgASAERw3xAUGOASECDLwDCyABIARHDfwBQYQBIQIMuwMLIAEgBEcNigJB/wAhAgy6AwsgASAERw2RAkH9ACECDLkDCyABIARHDZQCQfsAIQIMuAMLIAEgBEcNHkEeIQIMtwMLIAEgBEcNGUEYIQIMtgMLIAEgBEcNygJBzQAhAgy1AwsgASAERw3VAkHGACECDLQDCyABIARHDdYCQcMAIQIMswMLIAEgBEcN3AJBOCECDLIDCyADLQAwQQFGDa0DDIkDC0EAIQACQAJAAkAgAy0AKkUNACADLQArRQ0AIAMvATIiAkECcUUNAQwCCyADLwEyIgJBAXFFDQELQQEhACADLQAoQQFGDQAgAy8BNCIGQeQAa0HkAEkNACAGQcwBRg0AIAZBsAJGDQAgAkHAAHENAEEAIQAgAkGIBHFBgARGDQAgAkEocUEARyEACyADQQA7ATIgA0EAOgAxAkAgAEUEQCADQQA6ADEgAy0ALkEEcQ0BDLEDCyADQgA3AyALIANBADoAMSADQQE6ADYMSAtBACEAAkAgAygCOCICRQ0AIAIoAjAiAkUNACADIAIRAAAhAAsgAEUNSCAAQRVHDWIgA0EENgIcIAMgATYCFCADQdIbNgIQIANBFTYCDEEAIQIMrwMLIAEgBEYEQEEGIQIMrwMLIAEtAABBCkcNGSABQQFqIQEMGgsgA0IANwMgQRIhAgyUAwsgASAERw2KA0EjIQIMrAMLIAEgBEYEQEEHIQIMrAMLAkACQCABLQAAQQprDgQBGBgAGAsgAUEBaiEBQRAhAgyTAwsgAUEBaiEBIANBL2otAABBAXENF0EAIQIgA0EANgIcIAMgATYCFCADQZkgNgIQIANBGTYCDAyrAwsgAyADKQMgIgwgBCABa60iCn0iC0IAIAsgDFgbNwMgIAogDFoNGEEIIQIMqgMLIAEgBEcEQCADQQk2AgggAyABNgIEQRQhAgyRAwtBCSECDKkDCyADKQMgUA2uAgxDCyABIARGBEBBCyECDKgDCyABLQAAQQpHDRYgAUEBaiEBDBcLIANBL2otAABBAXFFDRkMJgtBACEAAkAgAygCOCICRQ0AIAIoAlAiAkUNACADIAIRAAAhAAsgAA0ZDEILQQAhAAJAIAMoAjgiAkUNACACKAJQIgJFDQAgAyACEQAAIQALIAANGgwkC0EAIQACQCADKAI4IgJFDQAgAigCUCICRQ0AIAMgAhEAACEACyAADRsMMgsgA0Evai0AAEEBcUUNHAwiC0EAIQACQCADKAI4IgJFDQAgAigCVCICRQ0AIAMgAhEAACEACyAADRwMQgtBACEAAkAgAygCOCICRQ0AIAIoAlQiAkUNACADIAIRAAAhAAsgAA0dDCALIAEgBEYEQEETIQIMoAMLAkAgAS0AACIAQQprDgQfIyMAIgsgAUEBaiEBDB8LQQAhAAJAIAMoAjgiAkUNACACKAJUIgJFDQAgAyACEQAAIQALIAANIgxCCyABIARGBEBBFiECDJ4DCyABLQAAQcDBAGotAABBAUcNIwyDAwsCQANAIAEtAABBsDtqLQAAIgBBAUcEQAJAIABBAmsOAgMAJwsgAUEBaiEBQSEhAgyGAwsgBCABQQFqIgFHDQALQRghAgydAwsgAygCBCEAQQAhAiADQQA2AgQgAyAAIAFBAWoiARA0IgANIQxBC0EAIQACQCADKAI4IgJFDQAgAigCVCICRQ0AIAMgAhEAACEACyAADSMMKgsgASAERgRAQRwhAgybAwsgA0EKNgIIIAMgATYCBEEAIQACQCADKAI4IgJFDQAgAigCUCICRQ0AIAMgAhEAACEACyAADSVBJCECDIEDCyABIARHBEADQCABLQAAQbA9ai0AACIAQQNHBEAgAEEBaw4FGBomggMlJgsgBCABQQFqIgFHDQALQRshAgyaAwtBGyECDJkDCwNAIAEtAABBsD9qLQAAIgBBA0cEQCAAQQFrDgUPEScTJicLIAQgAUEBaiIBRw0AC0EeIQIMmAMLIAEgBEcEQCADQQs2AgggAyABNgIEQQchAgz/AgtBHyECDJcDCyABIARGBEBBICECDJcDCwJAIAEtAABBDWsOFC4/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8APwtBACECIANBADYCHCADQb8LNgIQIANBAjYCDCADIAFBAWo2AhQMlgMLIANBL2ohAgNAIAEgBEYEQEEhIQIMlwMLAkACQAJAIAEtAAAiAEEJaw4YAgApKQEpKSkpKSkpKSkpKSkpKSkpKSkCJwsgAUEBaiEBIANBL2otAABBAXFFDQoMGAsgAUEBaiEBDBcLIAFBAWohASACLQAAQQJxDQALQQAhAiADQQA2AhwgAyABNgIUIANBnxU2AhAgA0EMNgIMDJUDCyADLQAuQYABcUUNAQtBACEAAkAgAygCOCICRQ0AIAIoAlwiAkUNACADIAIRAAAhAAsgAEUN5gIgAEEVRgRAIANBJDYCHCADIAE2AhQgA0GbGzYCECADQRU2AgxBACECDJQDC0EAIQIgA0EANgIcIAMgATYCFCADQZAONgIQIANBFDYCDAyTAwtBACECIANBADYCHCADIAE2AhQgA0G+IDYCECADQQI2AgwMkgMLIAMoAgQhAEEAIQIgA0EANgIEIAMgACABIAynaiIBEDIiAEUNKyADQQc2AhwgAyABNgIUIAMgADYCDAyRAwsgAy0ALkHAAHFFDQELQQAhAAJAIAMoAjgiAkUNACACKAJYIgJFDQAgAyACEQAAIQALIABFDSsgAEEVRgRAIANBCjYCHCADIAE2AhQgA0HrGTYCECADQRU2AgxBACECDJADC0EAIQIgA0EANgIcIAMgATYCFCADQZMMNgIQIANBEzYCDAyPAwtBACECIANBADYCHCADIAE2AhQgA0GCFTYCECADQQI2AgwMjgMLQQAhAiADQQA2AhwgAyABNgIUIANB3RQ2AhAgA0EZNgIMDI0DC0EAIQIgA0EANgIcIAMgATYCFCADQeYdNgIQIANBGTYCDAyMAwsgAEEVRg09QQAhAiADQQA2AhwgAyABNgIUIANB0A82AhAgA0EiNgIMDIsDCyADKAIEIQBBACECIANBADYCBCADIAAgARAzIgBFDSggA0ENNgIcIAMgATYCFCADIAA2AgwMigMLIABBFUYNOkEAIQIgA0EANgIcIAMgATYCFCADQdAPNgIQIANBIjYCDAyJAwsgAygCBCEAQQAhAiADQQA2AgQgAyAAIAEQMyIARQRAIAFBAWohAQwoCyADQQ42AhwgAyAANgIMIAMgAUEBajYCFAyIAwsgAEEVRg03QQAhAiADQQA2AhwgAyABNgIUIANB0A82AhAgA0EiNgIMDIcDCyADKAIEIQBBACECIANBADYCBCADIAAgARAzIgBFBEAgAUEBaiEBDCcLIANBDzYCHCADIAA2AgwgAyABQQFqNgIUDIYDC0EAIQIgA0EANgIcIAMgATYCFCADQeIXNgIQIANBGTYCDAyFAwsgAEEVRg0zQQAhAiADQQA2AhwgAyABNgIUIANB1gw2AhAgA0EjNgIMDIQDCyADKAIEIQBBACECIANBADYCBCADIAAgARA0IgBFDSUgA0ERNgIcIAMgATYCFCADIAA2AgwMgwMLIABBFUYNMEEAIQIgA0EANgIcIAMgATYCFCADQdYMNgIQIANBIzYCDAyCAwsgAygCBCEAQQAhAiADQQA2AgQgAyAAIAEQNCIARQRAIAFBAWohAQwlCyADQRI2AhwgAyAANgIMIAMgAUEBajYCFAyBAwsgA0Evai0AAEEBcUUNAQtBFyECDOYCC0EAIQIgA0EANgIcIAMgATYCFCADQeIXNgIQIANBGTYCDAz+AgsgAEE7Rw0AIAFBAWohAQwMC0EAIQIgA0EANgIcIAMgATYCFCADQZIYNgIQIANBAjYCDAz8AgsgAEEVRg0oQQAhAiADQQA2AhwgAyABNgIUIANB1gw2AhAgA0EjNgIMDPsCCyADQRQ2AhwgAyABNgIUIAMgADYCDAz6AgsgAygCBCEAQQAhAiADQQA2AgQgAyAAIAEQNCIARQRAIAFBAWohAQz1AgsgA0EVNgIcIAMgADYCDCADIAFBAWo2AhQM+QILIAMoAgQhAEEAIQIgA0EANgIEIAMgACABEDQiAEUEQCABQQFqIQEM8wILIANBFzYCHCADIAA2AgwgAyABQQFqNgIUDPgCCyAAQRVGDSNBACECIANBADYCHCADIAE2AhQgA0HWDDYCECADQSM2AgwM9wILIAMoAgQhAEEAIQIgA0EANgIEIAMgACABEDQiAEUEQCABQQFqIQEMHQsgA0EZNgIcIAMgADYCDCADIAFBAWo2AhQM9gILIAMoAgQhAEEAIQIgA0EANgIEIAMgACABEDQiAEUEQCABQQFqIQEM7wILIANBGjYCHCADIAA2AgwgAyABQQFqNgIUDPUCCyAAQRVGDR9BACECIANBADYCHCADIAE2AhQgA0HQDzYCECADQSI2AgwM9AILIAMoAgQhACADQQA2AgQgAyAAIAEQMyIARQRAIAFBAWohAQwbCyADQRw2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIM8wILIAMoAgQhACADQQA2AgQgAyAAIAEQMyIARQRAIAFBAWohAQzrAgsgA0EdNgIcIAMgADYCDCADIAFBAWo2AhRBACECDPICCyAAQTtHDQEgAUEBaiEBC0EmIQIM1wILQQAhAiADQQA2AhwgAyABNgIUIANBnxU2AhAgA0EMNgIMDO8CCyABIARHBEADQCABLQAAQSBHDYQCIAQgAUEBaiIBRw0AC0EsIQIM7wILQSwhAgzuAgsgASAERgRAQTQhAgzuAgsCQAJAA0ACQCABLQAAQQprDgQCAAADAAsgBCABQQFqIgFHDQALQTQhAgzvAgsgAygCBCEAIANBADYCBCADIAAgARAxIgBFDZ8CIANBMjYCHCADIAE2AhQgAyAANgIMQQAhAgzuAgsgAygCBCEAIANBADYCBCADIAAgARAxIgBFBEAgAUEBaiEBDJ8CCyADQTI2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIM7QILIAEgBEcEQAJAA0AgAS0AAEEwayIAQf8BcUEKTwRAQTohAgzXAgsgAykDICILQpmz5syZs+bMGVYNASADIAtCCn4iCjcDICAKIACtQv8BgyILQn+FVg0BIAMgCiALfDcDICAEIAFBAWoiAUcNAAtBwAAhAgzuAgsgAygCBCEAIANBADYCBCADIAAgAUEBaiIBEDEiAA0XDOICC0HAACECDOwCCyABIARGBEBByQAhAgzsAgsCQANAAkAgAS0AAEEJaw4YAAKiAqICqQKiAqICogKiAqICogKiAqICogKiAqICogKiAqICogKiAqICogIAogILIAQgAUEBaiIBRw0AC0HJACECDOwCCyABQQFqIQEgA0Evai0AAEEBcQ2lAiADQQA2AhwgAyABNgIUIANBlxA2AhAgA0EKNgIMQQAhAgzrAgsgASAERwRAA0AgAS0AAEEgRw0VIAQgAUEBaiIBRw0AC0H4ACECDOsCC0H4ACECDOoCCyADQQI6ACgMOAtBACECIANBADYCHCADQb8LNgIQIANBAjYCDCADIAFBAWo2AhQM6AILQQAhAgzOAgtBDSECDM0CC0ETIQIMzAILQRUhAgzLAgtBFiECDMoCC0EYIQIMyQILQRkhAgzIAgtBGiECDMcCC0EbIQIMxgILQRwhAgzFAgtBHSECDMQCC0EeIQIMwwILQR8hAgzCAgtBICECDMECC0EiIQIMwAILQSMhAgy/AgtBJSECDL4CC0HlACECDL0CCyADQT02AhwgAyABNgIUIAMgADYCDEEAIQIM1QILIANBGzYCHCADIAE2AhQgA0GkHDYCECADQRU2AgxBACECDNQCCyADQSA2AhwgAyABNgIUIANBmBo2AhAgA0EVNgIMQQAhAgzTAgsgA0ETNgIcIAMgATYCFCADQZgaNgIQIANBFTYCDEEAIQIM0gILIANBCzYCHCADIAE2AhQgA0GYGjYCECADQRU2AgxBACECDNECCyADQRA2AhwgAyABNgIUIANBmBo2AhAgA0EVNgIMQQAhAgzQAgsgA0EgNgIcIAMgATYCFCADQaQcNgIQIANBFTYCDEEAIQIMzwILIANBCzYCHCADIAE2AhQgA0GkHDYCECADQRU2AgxBACECDM4CCyADQQw2AhwgAyABNgIUIANBpBw2AhAgA0EVNgIMQQAhAgzNAgtBACECIANBADYCHCADIAE2AhQgA0HdDjYCECADQRI2AgwMzAILAkADQAJAIAEtAABBCmsOBAACAgACCyAEIAFBAWoiAUcNAAtB/QEhAgzMAgsCQAJAIAMtADZBAUcNAEEAIQACQCADKAI4IgJFDQAgAigCYCICRQ0AIAMgAhEAACEACyAARQ0AIABBFUcNASADQfwBNgIcIAMgATYCFCADQdwZNgIQIANBFTYCDEEAIQIMzQILQdwBIQIMswILIANBADYCHCADIAE2AhQgA0H5CzYCECADQR82AgxBACECDMsCCwJAAkAgAy0AKEEBaw4CBAEAC0HbASECDLICC0HUASECDLECCyADQQI6ADFBACEAAkAgAygCOCICRQ0AIAIoAgAiAkUNACADIAIRAAAhAAsgAEUEQEHdASECDLECCyAAQRVHBEAgA0EANgIcIAMgATYCFCADQbQMNgIQIANBEDYCDEEAIQIMygILIANB+wE2AhwgAyABNgIUIANBgRo2AhAgA0EVNgIMQQAhAgzJAgsgASAERgRAQfoBIQIMyQILIAEtAABByABGDQEgA0EBOgAoC0HAASECDK4CC0HaASECDK0CCyABIARHBEAgA0EMNgIIIAMgATYCBEHZASECDK0CC0H5ASECDMUCCyABIARGBEBB+AEhAgzFAgsgAS0AAEHIAEcNBCABQQFqIQFB2AEhAgyrAgsgASAERgRAQfcBIQIMxAILAkACQCABLQAAQcUAaw4QAAUFBQUFBQUFBQUFBQUFAQULIAFBAWohAUHWASECDKsCCyABQQFqIQFB1wEhAgyqAgtB9gEhAiABIARGDcICIAMoAgAiACAEIAFraiEFIAEgAGtBAmohBgJAA0AgAS0AACAAQbrVAGotAABHDQMgAEECRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADMMCCyADKAIEIQAgA0IANwMAIAMgACAGQQFqIgEQLiIARQRAQeMBIQIMqgILIANB9QE2AhwgAyABNgIUIAMgADYCDEEAIQIMwgILQfQBIQIgASAERg3BAiADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEG41QBqLQAARw0CIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzCAgsgA0GBBDsBKCADKAIEIQAgA0IANwMAIAMgACAGQQFqIgEQLiIADQMMAgsgA0EANgIAC0EAIQIgA0EANgIcIAMgATYCFCADQeUfNgIQIANBCDYCDAy/AgtB1QEhAgylAgsgA0HzATYCHCADIAE2AhQgAyAANgIMQQAhAgy9AgtBACEAAkAgAygCOCICRQ0AIAIoAkAiAkUNACADIAIRAAAhAAsgAEUNbiAAQRVHBEAgA0EANgIcIAMgATYCFCADQYIPNgIQIANBIDYCDEEAIQIMvQILIANBjwE2AhwgAyABNgIUIANB7Bs2AhAgA0EVNgIMQQAhAgy8AgsgASAERwRAIANBDTYCCCADIAE2AgRB0wEhAgyjAgtB8gEhAgy7AgsgASAERgRAQfEBIQIMuwILAkACQAJAIAEtAABByABrDgsAAQgICAgICAgIAggLIAFBAWohAUHQASECDKMCCyABQQFqIQFB0QEhAgyiAgsgAUEBaiEBQdIBIQIMoQILQfABIQIgASAERg25AiADKAIAIgAgBCABa2ohBiABIABrQQJqIQUDQCABLQAAIABBtdUAai0AAEcNBCAAQQJGDQMgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAY2AgAMuQILQe8BIQIgASAERg24AiADKAIAIgAgBCABa2ohBiABIABrQQFqIQUDQCABLQAAIABBs9UAai0AAEcNAyAAQQFGDQIgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAY2AgAMuAILQe4BIQIgASAERg23AiADKAIAIgAgBCABa2ohBiABIABrQQJqIQUDQCABLQAAIABBsNUAai0AAEcNAiAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAY2AgAMtwILIAMoAgQhACADQgA3AwAgAyAAIAVBAWoiARArIgBFDQIgA0HsATYCHCADIAE2AhQgAyAANgIMQQAhAgy2AgsgA0EANgIACyADKAIEIQAgA0EANgIEIAMgACABECsiAEUNnAIgA0HtATYCHCADIAE2AhQgAyAANgIMQQAhAgy0AgtBzwEhAgyaAgtBACEAAkAgAygCOCICRQ0AIAIoAjQiAkUNACADIAIRAAAhAAsCQCAABEAgAEEVRg0BIANBADYCHCADIAE2AhQgA0HqDTYCECADQSY2AgxBACECDLQCC0HOASECDJoCCyADQesBNgIcIAMgATYCFCADQYAbNgIQIANBFTYCDEEAIQIMsgILIAEgBEYEQEHrASECDLICCyABLQAAQS9GBEAgAUEBaiEBDAELIANBADYCHCADIAE2AhQgA0GyODYCECADQQg2AgxBACECDLECC0HNASECDJcCCyABIARHBEAgA0EONgIIIAMgATYCBEHMASECDJcCC0HqASECDK8CCyABIARGBEBB6QEhAgyvAgsgAS0AAEEwayIAQf8BcUEKSQRAIAMgADoAKiABQQFqIQFBywEhAgyWAgsgAygCBCEAIANBADYCBCADIAAgARAvIgBFDZcCIANB6AE2AhwgAyABNgIUIAMgADYCDEEAIQIMrgILIAEgBEYEQEHnASECDK4CCwJAIAEtAABBLkYEQCABQQFqIQEMAQsgAygCBCEAIANBADYCBCADIAAgARAvIgBFDZgCIANB5gE2AhwgAyABNgIUIAMgADYCDEEAIQIMrgILQcoBIQIMlAILIAEgBEYEQEHlASECDK0CC0EAIQBBASEFQQEhB0EAIQICQAJAAkACQAJAAn8CQAJAAkACQAJAAkACQCABLQAAQTBrDgoKCQABAgMEBQYICwtBAgwGC0EDDAULQQQMBAtBBQwDC0EGDAILQQcMAQtBCAshAkEAIQVBACEHDAILQQkhAkEBIQBBACEFQQAhBwwBC0EAIQVBASECCyADIAI6ACsgAUEBaiEBAkACQCADLQAuQRBxDQACQAJAAkAgAy0AKg4DAQACBAsgB0UNAwwCCyAADQEMAgsgBUUNAQsgAygCBCEAIANBADYCBCADIAAgARAvIgBFDQIgA0HiATYCHCADIAE2AhQgAyAANgIMQQAhAgyvAgsgAygCBCEAIANBADYCBCADIAAgARAvIgBFDZoCIANB4wE2AhwgAyABNgIUIAMgADYCDEEAIQIMrgILIAMoAgQhACADQQA2AgQgAyAAIAEQLyIARQ2YAiADQeQBNgIcIAMgATYCFCADIAA2AgwMrQILQckBIQIMkwILQQAhAAJAIAMoAjgiAkUNACACKAJEIgJFDQAgAyACEQAAIQALAkAgAARAIABBFUYNASADQQA2AhwgAyABNgIUIANBpA02AhAgA0EhNgIMQQAhAgytAgtByAEhAgyTAgsgA0HhATYCHCADIAE2AhQgA0HQGjYCECADQRU2AgxBACECDKsCCyABIARGBEBB4QEhAgyrAgsCQCABLQAAQSBGBEAgA0EAOwE0IAFBAWohAQwBCyADQQA2AhwgAyABNgIUIANBmRE2AhAgA0EJNgIMQQAhAgyrAgtBxwEhAgyRAgsgASAERgRAQeABIQIMqgILAkAgAS0AAEEwa0H/AXEiAkEKSQRAIAFBAWohAQJAIAMvATQiAEGZM0sNACADIABBCmwiADsBNCAAQf7/A3EgAkH//wNzSw0AIAMgACACajsBNAwCC0EAIQIgA0EANgIcIAMgATYCFCADQZUeNgIQIANBDTYCDAyrAgsgA0EANgIcIAMgATYCFCADQZUeNgIQIANBDTYCDEEAIQIMqgILQcYBIQIMkAILIAEgBEYEQEHfASECDKkCCwJAIAEtAABBMGtB/wFxIgJBCkkEQCABQQFqIQECQCADLwE0IgBBmTNLDQAgAyAAQQpsIgA7ATQgAEH+/wNxIAJB//8Dc0sNACADIAAgAmo7ATQMAgtBACECIANBADYCHCADIAE2AhQgA0GVHjYCECADQQ02AgwMqgILIANBADYCHCADIAE2AhQgA0GVHjYCECADQQ02AgxBACECDKkCC0HFASECDI8CCyABIARGBEBB3gEhAgyoAgsCQCABLQAAQTBrQf8BcSICQQpJBEAgAUEBaiEBAkAgAy8BNCIAQZkzSw0AIAMgAEEKbCIAOwE0IABB/v8DcSACQf//A3NLDQAgAyAAIAJqOwE0DAILQQAhAiADQQA2AhwgAyABNgIUIANBlR42AhAgA0ENNgIMDKkCCyADQQA2AhwgAyABNgIUIANBlR42AhAgA0ENNgIMQQAhAgyoAgtBxAEhAgyOAgsgASAERgRAQd0BIQIMpwILAkACQAJAAkAgAS0AAEEKaw4XAgMDAAMDAwMDAwMDAwMDAwMDAwMDAwEDCyABQQFqDAULIAFBAWohAUHDASECDI8CCyABQQFqIQEgA0Evai0AAEEBcQ0IIANBADYCHCADIAE2AhQgA0GNCzYCECADQQ02AgxBACECDKcCCyADQQA2AhwgAyABNgIUIANBjQs2AhAgA0ENNgIMQQAhAgymAgsgASAERwRAIANBDzYCCCADIAE2AgRBASECDI0CC0HcASECDKUCCwJAAkADQAJAIAEtAABBCmsOBAIAAAMACyAEIAFBAWoiAUcNAAtB2wEhAgymAgsgAygCBCEAIANBADYCBCADIAAgARAtIgBFBEAgAUEBaiEBDAQLIANB2gE2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIMpQILIAMoAgQhACADQQA2AgQgAyAAIAEQLSIADQEgAUEBagshAUHBASECDIoCCyADQdkBNgIcIAMgADYCDCADIAFBAWo2AhRBACECDKICC0HCASECDIgCCyADQS9qLQAAQQFxDQEgA0EANgIcIAMgATYCFCADQeQcNgIQIANBGTYCDEEAIQIMoAILIAEgBEYEQEHZASECDKACCwJAAkACQCABLQAAQQprDgQBAgIAAgsgAUEBaiEBDAILIAFBAWohAQwBCyADLQAuQcAAcUUNAQtBACEAAkAgAygCOCICRQ0AIAIoAjwiAkUNACADIAIRAAAhAAsgAEUNoAEgAEEVRgRAIANB2QA2AhwgAyABNgIUIANBtxo2AhAgA0EVNgIMQQAhAgyfAgsgA0EANgIcIAMgATYCFCADQYANNgIQIANBGzYCDEEAIQIMngILIANBADYCHCADIAE2AhQgA0HcKDYCECADQQI2AgxBACECDJ0CCyABIARHBEAgA0EMNgIIIAMgATYCBEG/ASECDIQCC0HYASECDJwCCyABIARGBEBB1wEhAgycAgsCQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAIAEtAABBwQBrDhUAAQIDWgQFBlpaWgcICQoLDA0ODxBaCyABQQFqIQFB+wAhAgySAgsgAUEBaiEBQfwAIQIMkQILIAFBAWohAUGBASECDJACCyABQQFqIQFBhQEhAgyPAgsgAUEBaiEBQYYBIQIMjgILIAFBAWohAUGJASECDI0CCyABQQFqIQFBigEhAgyMAgsgAUEBaiEBQY0BIQIMiwILIAFBAWohAUGWASECDIoCCyABQQFqIQFBlwEhAgyJAgsgAUEBaiEBQZgBIQIMiAILIAFBAWohAUGlASECDIcCCyABQQFqIQFBpgEhAgyGAgsgAUEBaiEBQawBIQIMhQILIAFBAWohAUG0ASECDIQCCyABQQFqIQFBtwEhAgyDAgsgAUEBaiEBQb4BIQIMggILIAEgBEYEQEHWASECDJsCCyABLQAAQc4ARw1IIAFBAWohAUG9ASECDIECCyABIARGBEBB1QEhAgyaAgsCQAJAAkAgAS0AAEHCAGsOEgBKSkpKSkpKSkoBSkpKSkpKAkoLIAFBAWohAUG4ASECDIICCyABQQFqIQFBuwEhAgyBAgsgAUEBaiEBQbwBIQIMgAILQdQBIQIgASAERg2YAiADKAIAIgAgBCABa2ohBSABIABrQQdqIQYCQANAIAEtAAAgAEGo1QBqLQAARw1FIABBB0YNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyZAgsgA0EANgIAIAZBAWohAUEbDEULIAEgBEYEQEHTASECDJgCCwJAAkAgAS0AAEHJAGsOBwBHR0dHRwFHCyABQQFqIQFBuQEhAgz/AQsgAUEBaiEBQboBIQIM/gELQdIBIQIgASAERg2WAiADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEGm1QBqLQAARw1DIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyXAgsgA0EANgIAIAZBAWohAUEPDEMLQdEBIQIgASAERg2VAiADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEGk1QBqLQAARw1CIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyWAgsgA0EANgIAIAZBAWohAUEgDEILQdABIQIgASAERg2UAiADKAIAIgAgBCABa2ohBSABIABrQQJqIQYCQANAIAEtAAAgAEGh1QBqLQAARw1BIABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyVAgsgA0EANgIAIAZBAWohAUESDEELIAEgBEYEQEHPASECDJQCCwJAAkAgAS0AAEHFAGsODgBDQ0NDQ0NDQ0NDQ0MBQwsgAUEBaiEBQbUBIQIM+wELIAFBAWohAUG2ASECDPoBC0HOASECIAEgBEYNkgIgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABBntUAai0AAEcNPyAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMkwILIANBADYCACAGQQFqIQFBBww/C0HNASECIAEgBEYNkQIgAygCACIAIAQgAWtqIQUgASAAa0EFaiEGAkADQCABLQAAIABBmNUAai0AAEcNPiAAQQVGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMkgILIANBADYCACAGQQFqIQFBKAw+CyABIARGBEBBzAEhAgyRAgsCQAJAAkAgAS0AAEHFAGsOEQBBQUFBQUFBQUEBQUFBQUECQQsgAUEBaiEBQbEBIQIM+QELIAFBAWohAUGyASECDPgBCyABQQFqIQFBswEhAgz3AQtBywEhAiABIARGDY8CIAMoAgAiACAEIAFraiEFIAEgAGtBBmohBgJAA0AgAS0AACAAQZHVAGotAABHDTwgAEEGRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADJACCyADQQA2AgAgBkEBaiEBQRoMPAtBygEhAiABIARGDY4CIAMoAgAiACAEIAFraiEFIAEgAGtBA2ohBgJAA0AgAS0AACAAQY3VAGotAABHDTsgAEEDRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADI8CCyADQQA2AgAgBkEBaiEBQSEMOwsgASAERgRAQckBIQIMjgILAkACQCABLQAAQcEAaw4UAD09PT09PT09PT09PT09PT09PQE9CyABQQFqIQFBrQEhAgz1AQsgAUEBaiEBQbABIQIM9AELIAEgBEYEQEHIASECDI0CCwJAAkAgAS0AAEHVAGsOCwA8PDw8PDw8PDwBPAsgAUEBaiEBQa4BIQIM9AELIAFBAWohAUGvASECDPMBC0HHASECIAEgBEYNiwIgAygCACIAIAQgAWtqIQUgASAAa0EIaiEGAkADQCABLQAAIABBhNUAai0AAEcNOCAAQQhGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMjAILIANBADYCACAGQQFqIQFBKgw4CyABIARGBEBBxgEhAgyLAgsgAS0AAEHQAEcNOCABQQFqIQFBJQw3C0HFASECIAEgBEYNiQIgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABBgdUAai0AAEcNNiAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMigILIANBADYCACAGQQFqIQFBDgw2CyABIARGBEBBxAEhAgyJAgsgAS0AAEHFAEcNNiABQQFqIQFBqwEhAgzvAQsgASAERgRAQcMBIQIMiAILAkACQAJAAkAgAS0AAEHCAGsODwABAjk5OTk5OTk5OTk5AzkLIAFBAWohAUGnASECDPEBCyABQQFqIQFBqAEhAgzwAQsgAUEBaiEBQakBIQIM7wELIAFBAWohAUGqASECDO4BC0HCASECIAEgBEYNhgIgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABB/tQAai0AAEcNMyAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMhwILIANBADYCACAGQQFqIQFBFAwzC0HBASECIAEgBEYNhQIgAygCACIAIAQgAWtqIQUgASAAa0EEaiEGAkADQCABLQAAIABB+dQAai0AAEcNMiAAQQRGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMhgILIANBADYCACAGQQFqIQFBKwwyC0HAASECIAEgBEYNhAIgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABB9tQAai0AAEcNMSAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMhQILIANBADYCACAGQQFqIQFBLAwxC0G/ASECIAEgBEYNgwIgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABBodUAai0AAEcNMCAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMhAILIANBADYCACAGQQFqIQFBEQwwC0G+ASECIAEgBEYNggIgAygCACIAIAQgAWtqIQUgASAAa0EDaiEGAkADQCABLQAAIABB8tQAai0AAEcNLyAAQQNGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMgwILIANBADYCACAGQQFqIQFBLgwvCyABIARGBEBBvQEhAgyCAgsCQAJAAkACQAJAIAEtAABBwQBrDhUANDQ0NDQ0NDQ0NAE0NAI0NAM0NAQ0CyABQQFqIQFBmwEhAgzsAQsgAUEBaiEBQZwBIQIM6wELIAFBAWohAUGdASECDOoBCyABQQFqIQFBogEhAgzpAQsgAUEBaiEBQaQBIQIM6AELIAEgBEYEQEG8ASECDIECCwJAAkAgAS0AAEHSAGsOAwAwATALIAFBAWohAUGjASECDOgBCyABQQFqIQFBBAwtC0G7ASECIAEgBEYN/wEgAygCACIAIAQgAWtqIQUgASAAa0EBaiEGAkADQCABLQAAIABB8NQAai0AAEcNLCAAQQFGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMgAILIANBADYCACAGQQFqIQFBHQwsCyABIARGBEBBugEhAgz/AQsCQAJAIAEtAABByQBrDgcBLi4uLi4ALgsgAUEBaiEBQaEBIQIM5gELIAFBAWohAUEiDCsLIAEgBEYEQEG5ASECDP4BCyABLQAAQdAARw0rIAFBAWohAUGgASECDOQBCyABIARGBEBBuAEhAgz9AQsCQAJAIAEtAABBxgBrDgsALCwsLCwsLCwsASwLIAFBAWohAUGeASECDOQBCyABQQFqIQFBnwEhAgzjAQtBtwEhAiABIARGDfsBIAMoAgAiACAEIAFraiEFIAEgAGtBA2ohBgJAA0AgAS0AACAAQezUAGotAABHDSggAEEDRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADPwBCyADQQA2AgAgBkEBaiEBQQ0MKAtBtgEhAiABIARGDfoBIAMoAgAiACAEIAFraiEFIAEgAGtBAmohBgJAA0AgAS0AACAAQaHVAGotAABHDScgAEECRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADPsBCyADQQA2AgAgBkEBaiEBQQwMJwtBtQEhAiABIARGDfkBIAMoAgAiACAEIAFraiEFIAEgAGtBAWohBgJAA0AgAS0AACAAQerUAGotAABHDSYgAEEBRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADPoBCyADQQA2AgAgBkEBaiEBQQMMJgtBtAEhAiABIARGDfgBIAMoAgAiACAEIAFraiEFIAEgAGtBAWohBgJAA0AgAS0AACAAQejUAGotAABHDSUgAEEBRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADPkBCyADQQA2AgAgBkEBaiEBQSYMJQsgASAERgRAQbMBIQIM+AELAkACQCABLQAAQdQAaw4CAAEnCyABQQFqIQFBmQEhAgzfAQsgAUEBaiEBQZoBIQIM3gELQbIBIQIgASAERg32ASADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEHm1ABqLQAARw0jIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAz3AQsgA0EANgIAIAZBAWohAUEnDCMLQbEBIQIgASAERg31ASADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEHk1ABqLQAARw0iIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAz2AQsgA0EANgIAIAZBAWohAUEcDCILQbABIQIgASAERg30ASADKAIAIgAgBCABa2ohBSABIABrQQVqIQYCQANAIAEtAAAgAEHe1ABqLQAARw0hIABBBUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAz1AQsgA0EANgIAIAZBAWohAUEGDCELQa8BIQIgASAERg3zASADKAIAIgAgBCABa2ohBSABIABrQQRqIQYCQANAIAEtAAAgAEHZ1ABqLQAARw0gIABBBEYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAz0AQsgA0EANgIAIAZBAWohAUEZDCALIAEgBEYEQEGuASECDPMBCwJAAkACQAJAIAEtAABBLWsOIwAkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJAEkJCQkJAIkJCQDJAsgAUEBaiEBQY4BIQIM3AELIAFBAWohAUGPASECDNsBCyABQQFqIQFBlAEhAgzaAQsgAUEBaiEBQZUBIQIM2QELQa0BIQIgASAERg3xASADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEHX1ABqLQAARw0eIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzyAQsgA0EANgIAIAZBAWohAUELDB4LIAEgBEYEQEGsASECDPEBCwJAAkAgAS0AAEHBAGsOAwAgASALIAFBAWohAUGQASECDNgBCyABQQFqIQFBkwEhAgzXAQsgASAERgRAQasBIQIM8AELAkACQCABLQAAQcEAaw4PAB8fHx8fHx8fHx8fHx8BHwsgAUEBaiEBQZEBIQIM1wELIAFBAWohAUGSASECDNYBCyABIARGBEBBqgEhAgzvAQsgAS0AAEHMAEcNHCABQQFqIQFBCgwbC0GpASECIAEgBEYN7QEgAygCACIAIAQgAWtqIQUgASAAa0EFaiEGAkADQCABLQAAIABB0dQAai0AAEcNGiAAQQVGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM7gELIANBADYCACAGQQFqIQFBHgwaC0GoASECIAEgBEYN7AEgAygCACIAIAQgAWtqIQUgASAAa0EGaiEGAkADQCABLQAAIABBytQAai0AAEcNGSAAQQZGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM7QELIANBADYCACAGQQFqIQFBFQwZC0GnASECIAEgBEYN6wEgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABBx9QAai0AAEcNGCAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM7AELIANBADYCACAGQQFqIQFBFwwYC0GmASECIAEgBEYN6gEgAygCACIAIAQgAWtqIQUgASAAa0EFaiEGAkADQCABLQAAIABBwdQAai0AAEcNFyAAQQVGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM6wELIANBADYCACAGQQFqIQFBGAwXCyABIARGBEBBpQEhAgzqAQsCQAJAIAEtAABByQBrDgcAGRkZGRkBGQsgAUEBaiEBQYsBIQIM0QELIAFBAWohAUGMASECDNABC0GkASECIAEgBEYN6AEgAygCACIAIAQgAWtqIQUgASAAa0EBaiEGAkADQCABLQAAIABBptUAai0AAEcNFSAAQQFGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM6QELIANBADYCACAGQQFqIQFBCQwVC0GjASECIAEgBEYN5wEgAygCACIAIAQgAWtqIQUgASAAa0EBaiEGAkADQCABLQAAIABBpNUAai0AAEcNFCAAQQFGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM6AELIANBADYCACAGQQFqIQFBHwwUC0GiASECIAEgBEYN5gEgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABBvtQAai0AAEcNEyAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM5wELIANBADYCACAGQQFqIQFBAgwTC0GhASECIAEgBEYN5QEgAygCACIAIAQgAWtqIQUgASAAa0EBaiEGA0AgAS0AACAAQbzUAGotAABHDREgAEEBRg0CIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADOUBCyABIARGBEBBoAEhAgzlAQtBASABLQAAQd8ARw0RGiABQQFqIQFBhwEhAgzLAQsgA0EANgIAIAZBAWohAUGIASECDMoBC0GfASECIAEgBEYN4gEgAygCACIAIAQgAWtqIQUgASAAa0EIaiEGAkADQCABLQAAIABBhNUAai0AAEcNDyAAQQhGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM4wELIANBADYCACAGQQFqIQFBKQwPC0GeASECIAEgBEYN4QEgAygCACIAIAQgAWtqIQUgASAAa0EDaiEGAkADQCABLQAAIABBuNQAai0AAEcNDiAAQQNGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM4gELIANBADYCACAGQQFqIQFBLQwOCyABIARGBEBBnQEhAgzhAQsgAS0AAEHFAEcNDiABQQFqIQFBhAEhAgzHAQsgASAERgRAQZwBIQIM4AELAkACQCABLQAAQcwAaw4IAA8PDw8PDwEPCyABQQFqIQFBggEhAgzHAQsgAUEBaiEBQYMBIQIMxgELQZsBIQIgASAERg3eASADKAIAIgAgBCABa2ohBSABIABrQQRqIQYCQANAIAEtAAAgAEGz1ABqLQAARw0LIABBBEYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzfAQsgA0EANgIAIAZBAWohAUEjDAsLQZoBIQIgASAERg3dASADKAIAIgAgBCABa2ohBSABIABrQQJqIQYCQANAIAEtAAAgAEGw1ABqLQAARw0KIABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzeAQsgA0EANgIAIAZBAWohAUEADAoLIAEgBEYEQEGZASECDN0BCwJAAkAgAS0AAEHIAGsOCAAMDAwMDAwBDAsgAUEBaiEBQf0AIQIMxAELIAFBAWohAUGAASECDMMBCyABIARGBEBBmAEhAgzcAQsCQAJAIAEtAABBzgBrDgMACwELCyABQQFqIQFB/gAhAgzDAQsgAUEBaiEBQf8AIQIMwgELIAEgBEYEQEGXASECDNsBCyABLQAAQdkARw0IIAFBAWohAUEIDAcLQZYBIQIgASAERg3ZASADKAIAIgAgBCABa2ohBSABIABrQQNqIQYCQANAIAEtAAAgAEGs1ABqLQAARw0GIABBA0YNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzaAQsgA0EANgIAIAZBAWohAUEFDAYLQZUBIQIgASAERg3YASADKAIAIgAgBCABa2ohBSABIABrQQVqIQYCQANAIAEtAAAgAEGm1ABqLQAARw0FIABBBUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzZAQsgA0EANgIAIAZBAWohAUEWDAULQZQBIQIgASAERg3XASADKAIAIgAgBCABa2ohBSABIABrQQJqIQYCQANAIAEtAAAgAEGh1QBqLQAARw0EIABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzYAQsgA0EANgIAIAZBAWohAUEQDAQLIAEgBEYEQEGTASECDNcBCwJAAkAgAS0AAEHDAGsODAAGBgYGBgYGBgYGAQYLIAFBAWohAUH5ACECDL4BCyABQQFqIQFB+gAhAgy9AQtBkgEhAiABIARGDdUBIAMoAgAiACAEIAFraiEFIAEgAGtBBWohBgJAA0AgAS0AACAAQaDUAGotAABHDQIgAEEFRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADNYBCyADQQA2AgAgBkEBaiEBQSQMAgsgA0EANgIADAILIAEgBEYEQEGRASECDNQBCyABLQAAQcwARw0BIAFBAWohAUETCzoAKSADKAIEIQAgA0EANgIEIAMgACABEC4iAA0CDAELQQAhAiADQQA2AhwgAyABNgIUIANB/h82AhAgA0EGNgIMDNEBC0H4ACECDLcBCyADQZABNgIcIAMgATYCFCADIAA2AgxBACECDM8BC0EAIQACQCADKAI4IgJFDQAgAigCQCICRQ0AIAMgAhEAACEACyAARQ0AIABBFUYNASADQQA2AhwgAyABNgIUIANBgg82AhAgA0EgNgIMQQAhAgzOAQtB9wAhAgy0AQsgA0GPATYCHCADIAE2AhQgA0HsGzYCECADQRU2AgxBACECDMwBCyABIARGBEBBjwEhAgzMAQsCQCABLQAAQSBGBEAgAUEBaiEBDAELIANBADYCHCADIAE2AhQgA0GbHzYCECADQQY2AgxBACECDMwBC0ECIQIMsgELA0AgAS0AAEEgRw0CIAQgAUEBaiIBRw0AC0GOASECDMoBCyABIARGBEBBjQEhAgzKAQsCQCABLQAAQQlrDgRKAABKAAtB9QAhAgywAQsgAy0AKUEFRgRAQfYAIQIMsAELQfQAIQIMrwELIAEgBEYEQEGMASECDMgBCyADQRA2AgggAyABNgIEDAoLIAEgBEYEQEGLASECDMcBCwJAIAEtAABBCWsOBEcAAEcAC0HzACECDK0BCyABIARHBEAgA0EQNgIIIAMgATYCBEHxACECDK0BC0GKASECDMUBCwJAIAEgBEcEQANAIAEtAABBoNAAai0AACIAQQNHBEACQCAAQQFrDgJJAAQLQfAAIQIMrwELIAQgAUEBaiIBRw0AC0GIASECDMYBC0GIASECDMUBCyADQQA2AhwgAyABNgIUIANB2yA2AhAgA0EHNgIMQQAhAgzEAQsgASAERgRAQYkBIQIMxAELAkACQAJAIAEtAABBoNIAai0AAEEBaw4DRgIAAQtB8gAhAgysAQsgA0EANgIcIAMgATYCFCADQbQSNgIQIANBBzYCDEEAIQIMxAELQeoAIQIMqgELIAEgBEcEQCABQQFqIQFB7wAhAgyqAQtBhwEhAgzCAQsgBCABIgBGBEBBhgEhAgzCAQsgAC0AACIBQS9GBEAgAEEBaiEBQe4AIQIMqQELIAFBCWsiAkEXSw0BIAAhAUEBIAJ0QZuAgARxDUEMAQsgBCABIgBGBEBBhQEhAgzBAQsgAC0AAEEvRw0AIABBAWohAQwDC0EAIQIgA0EANgIcIAMgADYCFCADQdsgNgIQIANBBzYCDAy/AQsCQAJAAkACQAJAA0AgAS0AAEGgzgBqLQAAIgBBBUcEQAJAAkAgAEEBaw4IRwUGBwgABAEIC0HrACECDK0BCyABQQFqIQFB7QAhAgysAQsgBCABQQFqIgFHDQALQYQBIQIMwwELIAFBAWoMFAsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDR4gA0HbADYCHCADIAE2AhQgAyAANgIMQQAhAgzBAQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDR4gA0HdADYCHCADIAE2AhQgAyAANgIMQQAhAgzAAQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDR4gA0H6ADYCHCADIAE2AhQgAyAANgIMQQAhAgy/AQsgA0EANgIcIAMgATYCFCADQfkPNgIQIANBBzYCDEEAIQIMvgELIAEgBEYEQEGDASECDL4BCwJAIAEtAABBoM4Aai0AAEEBaw4IPgQFBgAIAgMHCyABQQFqIQELQQMhAgyjAQsgAUEBagwNC0EAIQIgA0EANgIcIANB0RI2AhAgA0EHNgIMIAMgAUEBajYCFAy6AQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDRYgA0HbADYCHCADIAE2AhQgAyAANgIMQQAhAgy5AQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDRYgA0HdADYCHCADIAE2AhQgAyAANgIMQQAhAgy4AQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDRYgA0H6ADYCHCADIAE2AhQgAyAANgIMQQAhAgy3AQsgA0EANgIcIAMgATYCFCADQfkPNgIQIANBBzYCDEEAIQIMtgELQewAIQIMnAELIAEgBEYEQEGCASECDLUBCyABQQFqDAILIAEgBEYEQEGBASECDLQBCyABQQFqDAELIAEgBEYNASABQQFqCyEBQQQhAgyYAQtBgAEhAgywAQsDQCABLQAAQaDMAGotAAAiAEECRwRAIABBAUcEQEHpACECDJkBCwwxCyAEIAFBAWoiAUcNAAtB/wAhAgyvAQsgASAERgRAQf4AIQIMrwELAkAgAS0AAEEJaw43LwMGLwQGBgYGBgYGBgYGBgYGBgYGBgYFBgYCBgYGBgYGBgYGBgYGBgYGBgYGBgYGBgYGBgYGAAYLIAFBAWoLIQFBBSECDJQBCyABQQFqDAYLIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0IIANB2wA2AhwgAyABNgIUIAMgADYCDEEAIQIMqwELIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0IIANB3QA2AhwgAyABNgIUIAMgADYCDEEAIQIMqgELIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0IIANB+gA2AhwgAyABNgIUIAMgADYCDEEAIQIMqQELIANBADYCHCADIAE2AhQgA0GNFDYCECADQQc2AgxBACECDKgBCwJAAkACQAJAA0AgAS0AAEGgygBqLQAAIgBBBUcEQAJAIABBAWsOBi4DBAUGAAYLQegAIQIMlAELIAQgAUEBaiIBRw0AC0H9ACECDKsBCyADKAIEIQAgA0EANgIEIAMgACABECwiAEUNByADQdsANgIcIAMgATYCFCADIAA2AgxBACECDKoBCyADKAIEIQAgA0EANgIEIAMgACABECwiAEUNByADQd0ANgIcIAMgATYCFCADIAA2AgxBACECDKkBCyADKAIEIQAgA0EANgIEIAMgACABECwiAEUNByADQfoANgIcIAMgATYCFCADIAA2AgxBACECDKgBCyADQQA2AhwgAyABNgIUIANB5Ag2AhAgA0EHNgIMQQAhAgynAQsgASAERg0BIAFBAWoLIQFBBiECDIwBC0H8ACECDKQBCwJAAkACQAJAA0AgAS0AAEGgyABqLQAAIgBBBUcEQCAAQQFrDgQpAgMEBQsgBCABQQFqIgFHDQALQfsAIQIMpwELIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0DIANB2wA2AhwgAyABNgIUIAMgADYCDEEAIQIMpgELIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0DIANB3QA2AhwgAyABNgIUIAMgADYCDEEAIQIMpQELIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0DIANB+gA2AhwgAyABNgIUIAMgADYCDEEAIQIMpAELIANBADYCHCADIAE2AhQgA0G8CjYCECADQQc2AgxBACECDKMBC0HPACECDIkBC0HRACECDIgBC0HnACECDIcBCyABIARGBEBB+gAhAgygAQsCQCABLQAAQQlrDgQgAAAgAAsgAUEBaiEBQeYAIQIMhgELIAEgBEYEQEH5ACECDJ8BCwJAIAEtAABBCWsOBB8AAB8AC0EAIQACQCADKAI4IgJFDQAgAigCOCICRQ0AIAMgAhEAACEACyAARQRAQeIBIQIMhgELIABBFUcEQCADQQA2AhwgAyABNgIUIANByQ02AhAgA0EaNgIMQQAhAgyfAQsgA0H4ADYCHCADIAE2AhQgA0HqGjYCECADQRU2AgxBACECDJ4BCyABIARHBEAgA0ENNgIIIAMgATYCBEHkACECDIUBC0H3ACECDJ0BCyABIARGBEBB9gAhAgydAQsCQAJAAkAgAS0AAEHIAGsOCwABCwsLCwsLCwsCCwsgAUEBaiEBQd0AIQIMhQELIAFBAWohAUHgACECDIQBCyABQQFqIQFB4wAhAgyDAQtB9QAhAiABIARGDZsBIAMoAgAiACAEIAFraiEFIAEgAGtBAmohBgJAA0AgAS0AACAAQbXVAGotAABHDQggAEECRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADJwBCyADKAIEIQAgA0IANwMAIAMgACAGQQFqIgEQKyIABEAgA0H0ADYCHCADIAE2AhQgAyAANgIMQQAhAgycAQtB4gAhAgyCAQtBACEAAkAgAygCOCICRQ0AIAIoAjQiAkUNACADIAIRAAAhAAsCQCAABEAgAEEVRg0BIANBADYCHCADIAE2AhQgA0HqDTYCECADQSY2AgxBACECDJwBC0HhACECDIIBCyADQfMANgIcIAMgATYCFCADQYAbNgIQIANBFTYCDEEAIQIMmgELIAMtACkiAEEja0ELSQ0JAkAgAEEGSw0AQQEgAHRBygBxRQ0ADAoLQQAhAiADQQA2AhwgAyABNgIUIANB7Qk2AhAgA0EINgIMDJkBC0HyACECIAEgBEYNmAEgAygCACIAIAQgAWtqIQUgASAAa0EBaiEGAkADQCABLQAAIABBs9UAai0AAEcNBSAAQQFGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMmQELIAMoAgQhACADQgA3AwAgAyAAIAZBAWoiARArIgAEQCADQfEANgIcIAMgATYCFCADIAA2AgxBACECDJkBC0HfACECDH8LQQAhAAJAIAMoAjgiAkUNACACKAI0IgJFDQAgAyACEQAAIQALAkAgAARAIABBFUYNASADQQA2AhwgAyABNgIUIANB6g02AhAgA0EmNgIMQQAhAgyZAQtB3gAhAgx/CyADQfAANgIcIAMgATYCFCADQYAbNgIQIANBFTYCDEEAIQIMlwELIAMtAClBIUYNBiADQQA2AhwgAyABNgIUIANBkQo2AhAgA0EINgIMQQAhAgyWAQtB7wAhAiABIARGDZUBIAMoAgAiACAEIAFraiEFIAEgAGtBAmohBgJAA0AgAS0AACAAQbDVAGotAABHDQIgAEECRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADJYBCyADKAIEIQAgA0IANwMAIAMgACAGQQFqIgEQKyIARQ0CIANB7QA2AhwgAyABNgIUIAMgADYCDEEAIQIMlQELIANBADYCAAsgAygCBCEAIANBADYCBCADIAAgARArIgBFDYABIANB7gA2AhwgAyABNgIUIAMgADYCDEEAIQIMkwELQdwAIQIMeQtBACEAAkAgAygCOCICRQ0AIAIoAjQiAkUNACADIAIRAAAhAAsCQCAABEAgAEEVRg0BIANBADYCHCADIAE2AhQgA0HqDTYCECADQSY2AgxBACECDJMBC0HbACECDHkLIANB7AA2AhwgAyABNgIUIANBgBs2AhAgA0EVNgIMQQAhAgyRAQsgAy0AKSIAQSNJDQAgAEEuRg0AIANBADYCHCADIAE2AhQgA0HJCTYCECADQQg2AgxBACECDJABC0HaACECDHYLIAEgBEYEQEHrACECDI8BCwJAIAEtAABBL0YEQCABQQFqIQEMAQsgA0EANgIcIAMgATYCFCADQbI4NgIQIANBCDYCDEEAIQIMjwELQdkAIQIMdQsgASAERwRAIANBDjYCCCADIAE2AgRB2AAhAgx1C0HqACECDI0BCyABIARGBEBB6QAhAgyNAQsgAS0AAEEwayIAQf8BcUEKSQRAIAMgADoAKiABQQFqIQFB1wAhAgx0CyADKAIEIQAgA0EANgIEIAMgACABEC8iAEUNeiADQegANgIcIAMgATYCFCADIAA2AgxBACECDIwBCyABIARGBEBB5wAhAgyMAQsCQCABLQAAQS5GBEAgAUEBaiEBDAELIAMoAgQhACADQQA2AgQgAyAAIAEQLyIARQ17IANB5gA2AhwgAyABNgIUIAMgADYCDEEAIQIMjAELQdYAIQIMcgsgASAERgRAQeUAIQIMiwELQQAhAEEBIQVBASEHQQAhAgJAAkACQAJAAkACfwJAAkACQAJAAkACQAJAIAEtAABBMGsOCgoJAAECAwQFBggLC0ECDAYLQQMMBQtBBAwEC0EFDAMLQQYMAgtBBwwBC0EICyECQQAhBUEAIQcMAgtBCSECQQEhAEEAIQVBACEHDAELQQAhBUEBIQILIAMgAjoAKyABQQFqIQECQAJAIAMtAC5BEHENAAJAAkACQCADLQAqDgMBAAIECyAHRQ0DDAILIAANAQwCCyAFRQ0BCyADKAIEIQAgA0EANgIEIAMgACABEC8iAEUNAiADQeIANgIcIAMgATYCFCADIAA2AgxBACECDI0BCyADKAIEIQAgA0EANgIEIAMgACABEC8iAEUNfSADQeMANgIcIAMgATYCFCADIAA2AgxBACECDIwBCyADKAIEIQAgA0EANgIEIAMgACABEC8iAEUNeyADQeQANgIcIAMgATYCFCADIAA2AgwMiwELQdQAIQIMcQsgAy0AKUEiRg2GAUHTACECDHALQQAhAAJAIAMoAjgiAkUNACACKAJEIgJFDQAgAyACEQAAIQALIABFBEBB1QAhAgxwCyAAQRVHBEAgA0EANgIcIAMgATYCFCADQaQNNgIQIANBITYCDEEAIQIMiQELIANB4QA2AhwgAyABNgIUIANB0Bo2AhAgA0EVNgIMQQAhAgyIAQsgASAERgRAQeAAIQIMiAELAkACQAJAAkACQCABLQAAQQprDgQBBAQABAsgAUEBaiEBDAELIAFBAWohASADQS9qLQAAQQFxRQ0BC0HSACECDHALIANBADYCHCADIAE2AhQgA0G2ETYCECADQQk2AgxBACECDIgBCyADQQA2AhwgAyABNgIUIANBthE2AhAgA0EJNgIMQQAhAgyHAQsgASAERgRAQd8AIQIMhwELIAEtAABBCkYEQCABQQFqIQEMCQsgAy0ALkHAAHENCCADQQA2AhwgAyABNgIUIANBthE2AhAgA0ECNgIMQQAhAgyGAQsgASAERgRAQd0AIQIMhgELIAEtAAAiAkENRgRAIAFBAWohAUHQACECDG0LIAEhACACQQlrDgQFAQEFAQsgBCABIgBGBEBB3AAhAgyFAQsgAC0AAEEKRw0AIABBAWoMAgtBACECIANBADYCHCADIAA2AhQgA0HKLTYCECADQQc2AgwMgwELIAEgBEYEQEHbACECDIMBCwJAIAEtAABBCWsOBAMAAAMACyABQQFqCyEBQc4AIQIMaAsgASAERgRAQdoAIQIMgQELIAEtAABBCWsOBAABAQABC0EAIQIgA0EANgIcIANBmhI2AhAgA0EHNgIMIAMgAUEBajYCFAx/CyADQYASOwEqQQAhAAJAIAMoAjgiAkUNACACKAI4IgJFDQAgAyACEQAAIQALIABFDQAgAEEVRw0BIANB2QA2AhwgAyABNgIUIANB6ho2AhAgA0EVNgIMQQAhAgx+C0HNACECDGQLIANBADYCHCADIAE2AhQgA0HJDTYCECADQRo2AgxBACECDHwLIAEgBEYEQEHZACECDHwLIAEtAABBIEcNPSABQQFqIQEgAy0ALkEBcQ09IANBADYCHCADIAE2AhQgA0HCHDYCECADQR42AgxBACECDHsLIAEgBEYEQEHYACECDHsLAkACQAJAAkACQCABLQAAIgBBCmsOBAIDAwABCyABQQFqIQFBLCECDGULIABBOkcNASADQQA2AhwgAyABNgIUIANB5xE2AhAgA0EKNgIMQQAhAgx9CyABQQFqIQEgA0Evai0AAEEBcUUNcyADLQAyQYABcUUEQCADQTJqIQIgAxA1QQAhAAJAIAMoAjgiBkUNACAGKAIoIgZFDQAgAyAGEQAAIQALAkACQCAADhZNTEsBAQEBAQEBAQEBAQEBAQEBAQEAAQsgA0EpNgIcIAMgATYCFCADQawZNgIQIANBFTYCDEEAIQIMfgsgA0EANgIcIAMgATYCFCADQeULNgIQIANBETYCDEEAIQIMfQtBACEAAkAgAygCOCICRQ0AIAIoAlwiAkUNACADIAIRAAAhAAsgAEUNWSAAQRVHDQEgA0EFNgIcIAMgATYCFCADQZsbNgIQIANBFTYCDEEAIQIMfAtBywAhAgxiC0EAIQIgA0EANgIcIAMgATYCFCADQZAONgIQIANBFDYCDAx6CyADIAMvATJBgAFyOwEyDDsLIAEgBEcEQCADQRE2AgggAyABNgIEQcoAIQIMYAtB1wAhAgx4CyABIARGBEBB1gAhAgx4CwJAAkACQAJAIAEtAAAiAEEgciAAIABBwQBrQf8BcUEaSRtB/wFxQeMAaw4TAEBAQEBAQEBAQEBAQAFAQEACA0ALIAFBAWohAUHGACECDGELIAFBAWohAUHHACECDGALIAFBAWohAUHIACECDF8LIAFBAWohAUHJACECDF4LQdUAIQIgBCABIgBGDXYgBCABayADKAIAIgFqIQYgACABa0EFaiEHA0AgAUGQyABqLQAAIAAtAAAiBUEgciAFIAVBwQBrQf8BcUEaSRtB/wFxRw0IQQQgAUEFRg0KGiABQQFqIQEgBCAAQQFqIgBHDQALIAMgBjYCAAx2C0HUACECIAQgASIARg11IAQgAWsgAygCACIBaiEGIAAgAWtBD2ohBwNAIAFBgMgAai0AACAALQAAIgVBIHIgBSAFQcEAa0H/AXFBGkkbQf8BcUcNB0EDIAFBD0YNCRogAUEBaiEBIAQgAEEBaiIARw0ACyADIAY2AgAMdQtB0wAhAiAEIAEiAEYNdCAEIAFrIAMoAgAiAWohBiAAIAFrQQ5qIQcDQCABQeLHAGotAAAgAC0AACIFQSByIAUgBUHBAGtB/wFxQRpJG0H/AXFHDQYgAUEORg0HIAFBAWohASAEIABBAWoiAEcNAAsgAyAGNgIADHQLQdIAIQIgBCABIgBGDXMgBCABayADKAIAIgFqIQUgACABa0EBaiEGA0AgAUHgxwBqLQAAIAAtAAAiB0EgciAHIAdBwQBrQf8BcUEaSRtB/wFxRw0FIAFBAUYNAiABQQFqIQEgBCAAQQFqIgBHDQALIAMgBTYCAAxzCyABIARGBEBB0QAhAgxzCwJAAkAgAS0AACIAQSByIAAgAEHBAGtB/wFxQRpJG0H/AXFB7gBrDgcAOTk5OTkBOQsgAUEBaiEBQcMAIQIMWgsgAUEBaiEBQcQAIQIMWQsgA0EANgIAIAZBAWohAUHFACECDFgLQdAAIQIgBCABIgBGDXAgBCABayADKAIAIgFqIQYgACABa0EJaiEHA0AgAUHWxwBqLQAAIAAtAAAiBUEgciAFIAVBwQBrQf8BcUEaSRtB/wFxRw0CQQIgAUEJRg0EGiABQQFqIQEgBCAAQQFqIgBHDQALIAMgBjYCAAxwC0HPACECIAQgASIARg1vIAQgAWsgAygCACIBaiEGIAAgAWtBBWohBwNAIAFB0McAai0AACAALQAAIgVBIHIgBSAFQcEAa0H/AXFBGkkbQf8BcUcNASABQQVGDQIgAUEBaiEBIAQgAEEBaiIARw0ACyADIAY2AgAMbwsgACEBIANBADYCAAwzC0EBCzoALCADQQA2AgAgB0EBaiEBC0EtIQIMUgsCQANAIAEtAABB0MUAai0AAEEBRw0BIAQgAUEBaiIBRw0AC0HNACECDGsLQcIAIQIMUQsgASAERgRAQcwAIQIMagsgAS0AAEE6RgRAIAMoAgQhACADQQA2AgQgAyAAIAEQMCIARQ0zIANBywA2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIMagsgA0EANgIcIAMgATYCFCADQecRNgIQIANBCjYCDEEAIQIMaQsCQAJAIAMtACxBAmsOAgABJwsgA0Ezai0AAEECcUUNJiADLQAuQQJxDSYgA0EANgIcIAMgATYCFCADQaYUNgIQIANBCzYCDEEAIQIMaQsgAy0AMkEgcUUNJSADLQAuQQJxDSUgA0EANgIcIAMgATYCFCADQb0TNgIQIANBDzYCDEEAIQIMaAtBACEAAkAgAygCOCICRQ0AIAIoAkgiAkUNACADIAIRAAAhAAsgAEUEQEHBACECDE8LIABBFUcEQCADQQA2AhwgAyABNgIUIANBpg82AhAgA0EcNgIMQQAhAgxoCyADQcoANgIcIAMgATYCFCADQYUcNgIQIANBFTYCDEEAIQIMZwsgASAERwRAA0AgAS0AAEHAwQBqLQAAQQFHDRcgBCABQQFqIgFHDQALQcQAIQIMZwtBxAAhAgxmCyABIARHBEADQAJAIAEtAAAiAEEgciAAIABBwQBrQf8BcUEaSRtB/wFxIgBBCUYNACAAQSBGDQACQAJAAkACQCAAQeMAaw4TAAMDAwMDAwMBAwMDAwMDAwMDAgMLIAFBAWohAUE2IQIMUgsgAUEBaiEBQTchAgxRCyABQQFqIQFBOCECDFALDBULIAQgAUEBaiIBRw0AC0E8IQIMZgtBPCECDGULIAEgBEYEQEHIACECDGULIANBEjYCCCADIAE2AgQCQAJAAkACQAJAIAMtACxBAWsOBBQAAQIJCyADLQAyQSBxDQNB4AEhAgxPCwJAIAMvATIiAEEIcUUNACADLQAoQQFHDQAgAy0ALkEIcUUNAgsgAyAAQff7A3FBgARyOwEyDAsLIAMgAy8BMkEQcjsBMgwECyADQQA2AgQgAyABIAEQMSIABEAgA0HBADYCHCADIAA2AgwgAyABQQFqNgIUQQAhAgxmCyABQQFqIQEMWAsgA0EANgIcIAMgATYCFCADQfQTNgIQIANBBDYCDEEAIQIMZAtBxwAhAiABIARGDWMgAygCACIAIAQgAWtqIQUgASAAa0EGaiEGAkADQCAAQcDFAGotAAAgAS0AAEEgckcNASAAQQZGDUogAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMZAsgA0EANgIADAULAkAgASAERwRAA0AgAS0AAEHAwwBqLQAAIgBBAUcEQCAAQQJHDQMgAUEBaiEBDAULIAQgAUEBaiIBRw0AC0HFACECDGQLQcUAIQIMYwsLIANBADoALAwBC0ELIQIMRwtBPyECDEYLAkACQANAIAEtAAAiAEEgRwRAAkAgAEEKaw4EAwUFAwALIABBLEYNAwwECyAEIAFBAWoiAUcNAAtBxgAhAgxgCyADQQg6ACwMDgsgAy0AKEEBRw0CIAMtAC5BCHENAiADKAIEIQAgA0EANgIEIAMgACABEDEiAARAIANBwgA2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIMXwsgAUEBaiEBDFALQTshAgxECwJAA0AgAS0AACIAQSBHIABBCUdxDQEgBCABQQFqIgFHDQALQcMAIQIMXQsLQTwhAgxCCwJAAkAgASAERwRAA0AgAS0AACIAQSBHBEAgAEEKaw4EAwQEAwQLIAQgAUEBaiIBRw0AC0E/IQIMXQtBPyECDFwLIAMgAy8BMkEgcjsBMgwKCyADKAIEIQAgA0EANgIEIAMgACABEDEiAEUNTiADQT42AhwgAyABNgIUIAMgADYCDEEAIQIMWgsCQCABIARHBEADQCABLQAAQcDDAGotAAAiAEEBRwRAIABBAkYNAwwMCyAEIAFBAWoiAUcNAAtBNyECDFsLQTchAgxaCyABQQFqIQEMBAtBOyECIAQgASIARg1YIAQgAWsgAygCACIBaiEGIAAgAWtBBWohBwJAA0AgAUGQyABqLQAAIAAtAAAiBUEgciAFIAVBwQBrQf8BcUEaSRtB/wFxRw0BIAFBBUYEQEEHIQEMPwsgAUEBaiEBIAQgAEEBaiIARw0ACyADIAY2AgAMWQsgA0EANgIAIAAhAQwFC0E6IQIgBCABIgBGDVcgBCABayADKAIAIgFqIQYgACABa0EIaiEHAkADQCABQbTBAGotAAAgAC0AACIFQSByIAUgBUHBAGtB/wFxQRpJG0H/AXFHDQEgAUEIRgRAQQUhAQw+CyABQQFqIQEgBCAAQQFqIgBHDQALIAMgBjYCAAxYCyADQQA2AgAgACEBDAQLQTkhAiAEIAEiAEYNViAEIAFrIAMoAgAiAWohBiAAIAFrQQNqIQcCQANAIAFBsMEAai0AACAALQAAIgVBIHIgBSAFQcEAa0H/AXFBGkkbQf8BcUcNASABQQNGBEBBBiEBDD0LIAFBAWohASAEIABBAWoiAEcNAAsgAyAGNgIADFcLIANBADYCACAAIQEMAwsCQANAIAEtAAAiAEEgRwRAIABBCmsOBAcEBAcCCyAEIAFBAWoiAUcNAAtBOCECDFYLIABBLEcNASABQQFqIQBBASEBAkACQAJAAkACQCADLQAsQQVrDgQDAQIEAAsgACEBDAQLQQIhAQwBC0EEIQELIANBAToALCADIAMvATIgAXI7ATIgACEBDAELIAMgAy8BMkEIcjsBMiAAIQELQT4hAgw7CyADQQA6ACwLQTkhAgw5CyABIARGBEBBNiECDFILAkACQAJAAkACQCABLQAAQQprDgQAAgIBAgsgAygCBCEAIANBADYCBCADIAAgARAxIgBFDQIgA0EzNgIcIAMgATYCFCADIAA2AgxBACECDFULIAMoAgQhACADQQA2AgQgAyAAIAEQMSIARQRAIAFBAWohAQwGCyADQTI2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIMVAsgAy0ALkEBcQRAQd8BIQIMOwsgAygCBCEAIANBADYCBCADIAAgARAxIgANAQxJC0E0IQIMOQsgA0E1NgIcIAMgATYCFCADIAA2AgxBACECDFELQTUhAgw3CyADQS9qLQAAQQFxDQAgA0EANgIcIAMgATYCFCADQesWNgIQIANBGTYCDEEAIQIMTwtBMyECDDULIAEgBEYEQEEyIQIMTgsCQCABLQAAQQpGBEAgAUEBaiEBDAELIANBADYCHCADIAE2AhQgA0GSFzYCECADQQM2AgxBACECDE4LQTIhAgw0CyABIARGBEBBMSECDE0LAkAgAS0AACIAQQlGDQAgAEEgRg0AQQEhAgJAIAMtACxBBWsOBAYEBQANCyADIAMvATJBCHI7ATIMDAsgAy0ALkEBcUUNASADLQAsQQhHDQAgA0EAOgAsC0E9IQIMMgsgA0EANgIcIAMgATYCFCADQcIWNgIQIANBCjYCDEEAIQIMSgtBAiECDAELQQQhAgsgA0EBOgAsIAMgAy8BMiACcjsBMgwGCyABIARGBEBBMCECDEcLIAEtAABBCkYEQCABQQFqIQEMAQsgAy0ALkEBcQ0AIANBADYCHCADIAE2AhQgA0HcKDYCECADQQI2AgxBACECDEYLQTAhAgwsCyABQQFqIQFBMSECDCsLIAEgBEYEQEEvIQIMRAsgAS0AACIAQQlHIABBIEdxRQRAIAFBAWohASADLQAuQQFxDQEgA0EANgIcIAMgATYCFCADQZcQNgIQIANBCjYCDEEAIQIMRAtBASECAkACQAJAAkACQAJAIAMtACxBAmsOBwUEBAMBAgAECyADIAMvATJBCHI7ATIMAwtBAiECDAELQQQhAgsgA0EBOgAsIAMgAy8BMiACcjsBMgtBLyECDCsLIANBADYCHCADIAE2AhQgA0GEEzYCECADQQs2AgxBACECDEMLQeEBIQIMKQsgASAERgRAQS4hAgxCCyADQQA2AgQgA0ESNgIIIAMgASABEDEiAA0BC0EuIQIMJwsgA0EtNgIcIAMgATYCFCADIAA2AgxBACECDD8LQQAhAAJAIAMoAjgiAkUNACACKAJMIgJFDQAgAyACEQAAIQALIABFDQAgAEEVRw0BIANB2AA2AhwgAyABNgIUIANBsxs2AhAgA0EVNgIMQQAhAgw+C0HMACECDCQLIANBADYCHCADIAE2AhQgA0GzDjYCECADQR02AgxBACECDDwLIAEgBEYEQEHOACECDDwLIAEtAAAiAEEgRg0CIABBOkYNAQsgA0EAOgAsQQkhAgwhCyADKAIEIQAgA0EANgIEIAMgACABEDAiAA0BDAILIAMtAC5BAXEEQEHeASECDCALIAMoAgQhACADQQA2AgQgAyAAIAEQMCIARQ0CIANBKjYCHCADIAA2AgwgAyABQQFqNgIUQQAhAgw4CyADQcsANgIcIAMgADYCDCADIAFBAWo2AhRBACECDDcLIAFBAWohAUHAACECDB0LIAFBAWohAQwsCyABIARGBEBBKyECDDULAkAgAS0AAEEKRgRAIAFBAWohAQwBCyADLQAuQcAAcUUNBgsgAy0AMkGAAXEEQEEAIQACQCADKAI4IgJFDQAgAigCXCICRQ0AIAMgAhEAACEACyAARQ0SIABBFUYEQCADQQU2AhwgAyABNgIUIANBmxs2AhAgA0EVNgIMQQAhAgw2CyADQQA2AhwgAyABNgIUIANBkA42AhAgA0EUNgIMQQAhAgw1CyADQTJqIQIgAxA1QQAhAAJAIAMoAjgiBkUNACAGKAIoIgZFDQAgAyAGEQAAIQALIAAOFgIBAAQEBAQEBAQEBAQEBAQEBAQEBAMECyADQQE6ADALIAIgAi8BAEHAAHI7AQALQSshAgwYCyADQSk2AhwgAyABNgIUIANBrBk2AhAgA0EVNgIMQQAhAgwwCyADQQA2AhwgAyABNgIUIANB5Qs2AhAgA0ERNgIMQQAhAgwvCyADQQA2AhwgAyABNgIUIANBpQs2AhAgA0ECNgIMQQAhAgwuC0EBIQcgAy8BMiIFQQhxRQRAIAMpAyBCAFIhBwsCQCADLQAwBEBBASEAIAMtAClBBUYNASAFQcAAcUUgB3FFDQELAkAgAy0AKCICQQJGBEBBASEAIAMvATQiBkHlAEYNAkEAIQAgBUHAAHENAiAGQeQARg0CIAZB5gBrQQJJDQIgBkHMAUYNAiAGQbACRg0CDAELQQAhACAFQcAAcQ0BC0ECIQAgBUEIcQ0AIAVBgARxBEACQCACQQFHDQAgAy0ALkEKcQ0AQQUhAAwCC0EEIQAMAQsgBUEgcUUEQCADEDZBAEdBAnQhAAwBC0EAQQMgAykDIFAbIQALIABBAWsOBQIABwEDBAtBESECDBMLIANBAToAMQwpC0EAIQICQCADKAI4IgBFDQAgACgCMCIARQ0AIAMgABEAACECCyACRQ0mIAJBFUYEQCADQQM2AhwgAyABNgIUIANB0hs2AhAgA0EVNgIMQQAhAgwrC0EAIQIgA0EANgIcIAMgATYCFCADQd0ONgIQIANBEjYCDAwqCyADQQA2AhwgAyABNgIUIANB+SA2AhAgA0EPNgIMQQAhAgwpC0EAIQACQCADKAI4IgJFDQAgAigCMCICRQ0AIAMgAhEAACEACyAADQELQQ4hAgwOCyAAQRVGBEAgA0ECNgIcIAMgATYCFCADQdIbNgIQIANBFTYCDEEAIQIMJwsgA0EANgIcIAMgATYCFCADQd0ONgIQIANBEjYCDEEAIQIMJgtBKiECDAwLIAEgBEcEQCADQQk2AgggAyABNgIEQSkhAgwMC0EmIQIMJAsgAyADKQMgIgwgBCABa60iCn0iC0IAIAsgDFgbNwMgIAogDFQEQEElIQIMJAsgAygCBCEAIANBADYCBCADIAAgASAMp2oiARAyIgBFDQAgA0EFNgIcIAMgATYCFCADIAA2AgxBACECDCMLQQ8hAgwJC0IAIQoCQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkAgAS0AAEEwaw43FxYAAQIDBAUGBxQUFBQUFBQICQoLDA0UFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFA4PEBESExQLQgIhCgwWC0IDIQoMFQtCBCEKDBQLQgUhCgwTC0IGIQoMEgtCByEKDBELQgghCgwQC0IJIQoMDwtCCiEKDA4LQgshCgwNC0IMIQoMDAtCDSEKDAsLQg4hCgwKC0IPIQoMCQtCCiEKDAgLQgshCgwHC0IMIQoMBgtCDSEKDAULQg4hCgwEC0IPIQoMAwsgA0EANgIcIAMgATYCFCADQZ8VNgIQIANBDDYCDEEAIQIMIQsgASAERgRAQSIhAgwhC0IAIQoCQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAIAEtAABBMGsONxUUAAECAwQFBgcWFhYWFhYWCAkKCwwNFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYODxAREhMWC0ICIQoMFAtCAyEKDBMLQgQhCgwSC0IFIQoMEQtCBiEKDBALQgchCgwPC0IIIQoMDgtCCSEKDA0LQgohCgwMC0ILIQoMCwtCDCEKDAoLQg0hCgwJC0IOIQoMCAtCDyEKDAcLQgohCgwGC0ILIQoMBQtCDCEKDAQLQg0hCgwDC0IOIQoMAgtCDyEKDAELQgEhCgsgAUEBaiEBIAMpAyAiC0L//////////w9YBEAgAyALQgSGIAqENwMgDAILIANBADYCHCADIAE2AhQgA0G1CTYCECADQQw2AgxBACECDB4LQSchAgwEC0EoIQIMAwsgAyABOgAsIANBADYCACAHQQFqIQFBDCECDAILIANBADYCACAGQQFqIQFBCiECDAELIAFBAWohAUEIIQIMAAsAC0EAIQIgA0EANgIcIAMgATYCFCADQbI4NgIQIANBCDYCDAwXC0EAIQIgA0EANgIcIAMgATYCFCADQYMRNgIQIANBCTYCDAwWC0EAIQIgA0EANgIcIAMgATYCFCADQd8KNgIQIANBCTYCDAwVC0EAIQIgA0EANgIcIAMgATYCFCADQe0QNgIQIANBCTYCDAwUC0EAIQIgA0EANgIcIAMgATYCFCADQdIRNgIQIANBCTYCDAwTC0EAIQIgA0EANgIcIAMgATYCFCADQbI4NgIQIANBCDYCDAwSC0EAIQIgA0EANgIcIAMgATYCFCADQYMRNgIQIANBCTYCDAwRC0EAIQIgA0EANgIcIAMgATYCFCADQd8KNgIQIANBCTYCDAwQC0EAIQIgA0EANgIcIAMgATYCFCADQe0QNgIQIANBCTYCDAwPC0EAIQIgA0EANgIcIAMgATYCFCADQdIRNgIQIANBCTYCDAwOC0EAIQIgA0EANgIcIAMgATYCFCADQbkXNgIQIANBDzYCDAwNC0EAIQIgA0EANgIcIAMgATYCFCADQbkXNgIQIANBDzYCDAwMC0EAIQIgA0EANgIcIAMgATYCFCADQZkTNgIQIANBCzYCDAwLC0EAIQIgA0EANgIcIAMgATYCFCADQZ0JNgIQIANBCzYCDAwKC0EAIQIgA0EANgIcIAMgATYCFCADQZcQNgIQIANBCjYCDAwJC0EAIQIgA0EANgIcIAMgATYCFCADQbEQNgIQIANBCjYCDAwIC0EAIQIgA0EANgIcIAMgATYCFCADQbsdNgIQIANBAjYCDAwHC0EAIQIgA0EANgIcIAMgATYCFCADQZYWNgIQIANBAjYCDAwGC0EAIQIgA0EANgIcIAMgATYCFCADQfkYNgIQIANBAjYCDAwFC0EAIQIgA0EANgIcIAMgATYCFCADQcQYNgIQIANBAjYCDAwECyADQQI2AhwgAyABNgIUIANBqR42AhAgA0EWNgIMQQAhAgwDC0HeACECIAEgBEYNAiAJQQhqIQcgAygCACEFAkACQCABIARHBEAgBUGWyABqIQggBCAFaiABayEGIAVBf3NBCmoiBSABaiEAA0AgAS0AACAILQAARwRAQQIhCAwDCyAFRQRAQQAhCCAAIQEMAwsgBUEBayEFIAhBAWohCCAEIAFBAWoiAUcNAAsgBiEFIAQhAQsgB0EBNgIAIAMgBTYCAAwBCyADQQA2AgAgByAINgIACyAHIAE2AgQgCSgCDCEAAkACQCAJKAIIQQFrDgIEAQALIANBADYCHCADQcIeNgIQIANBFzYCDCADIABBAWo2AhRBACECDAMLIANBADYCHCADIAA2AhQgA0HXHjYCECADQQk2AgxBACECDAILIAEgBEYEQEEoIQIMAgsgA0EJNgIIIAMgATYCBEEnIQIMAQsgASAERgRAQQEhAgwBCwNAAkACQAJAIAEtAABBCmsOBAABAQABCyABQQFqIQEMAQsgAUEBaiEBIAMtAC5BIHENAEEAIQIgA0EANgIcIAMgATYCFCADQaEhNgIQIANBBTYCDAwCC0EBIQIgASAERw0ACwsgCUEQaiQAIAJFBEAgAygCDCEADAELIAMgAjYCHEEAIQAgAygCBCIBRQ0AIAMgASAEIAMoAggRAQAiAUUNACADIAQ2AhQgAyABNgIMIAEhAAsgAAu+AgECfyAAQQA6AAAgAEHkAGoiAUEBa0EAOgAAIABBADoAAiAAQQA6AAEgAUEDa0EAOgAAIAFBAmtBADoAACAAQQA6AAMgAUEEa0EAOgAAQQAgAGtBA3EiASAAaiIAQQA2AgBB5AAgAWtBfHEiAiAAaiIBQQRrQQA2AgACQCACQQlJDQAgAEEANgIIIABBADYCBCABQQhrQQA2AgAgAUEMa0EANgIAIAJBGUkNACAAQQA2AhggAEEANgIUIABBADYCECAAQQA2AgwgAUEQa0EANgIAIAFBFGtBADYCACABQRhrQQA2AgAgAUEca0EANgIAIAIgAEEEcUEYciICayIBQSBJDQAgACACaiEAA0AgAEIANwMYIABCADcDECAAQgA3AwggAEIANwMAIABBIGohACABQSBrIgFBH0sNAAsLC1YBAX8CQCAAKAIMDQACQAJAAkACQCAALQAxDgMBAAMCCyAAKAI4IgFFDQAgASgCMCIBRQ0AIAAgAREAACIBDQMLQQAPCwALIABByhk2AhBBDiEBCyABCxoAIAAoAgxFBEAgAEHeHzYCECAAQRU2AgwLCxQAIAAoAgxBFUYEQCAAQQA2AgwLCxQAIAAoAgxBFkYEQCAAQQA2AgwLCwcAIAAoAgwLBwAgACgCEAsJACAAIAE2AhALBwAgACgCFAsrAAJAIABBJ08NAEL//////wkgAK2IQgGDUA0AIABBAnRB0DhqKAIADwsACxcAIABBL08EQAALIABBAnRB7DlqKAIAC78JAQF/QfQtIQECQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQCAAQeQAaw70A2NiAAFhYWFhYWECAwQFYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYQYHCAkKCwwNDg9hYWFhYRBhYWFhYWFhYWFhYRFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWESExQVFhcYGRobYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYRwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1NmE3ODk6YWFhYWFhYWE7YWFhPGFhYWE9Pj9hYWFhYWFhYUBhYUFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFCQ0RFRkdISUpLTE1OT1BRUlNhYWFhYWFhYVRVVldYWVpbYVxdYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhXmFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYV9gYQtB6iwPC0GYJg8LQe0xDwtBoDcPC0HJKQ8LQbQpDwtBli0PC0HrKw8LQaI1DwtB2zQPC0HgKQ8LQeMkDwtB1SQPC0HuJA8LQeYlDwtByjQPC0HQNw8LQao1DwtB9SwPC0H2Jg8LQYIiDwtB8jMPC0G+KA8LQec3DwtBzSEPC0HAIQ8LQbglDwtByyUPC0GWJA8LQY80DwtBzTUPC0HdKg8LQe4zDwtBnDQPC0GeMQ8LQfQ1DwtB5SIPC0GvJQ8LQZkxDwtBsjYPC0H5Ng8LQcQyDwtB3SwPC0GCMQ8LQcExDwtBjTcPC0HJJA8LQew2DwtB5yoPC0HIIw8LQeIhDwtByTcPC0GlIg8LQZQiDwtB2zYPC0HeNQ8LQYYmDwtBvCsPC0GLMg8LQaAjDwtB9jAPC0GALA8LQYkrDwtBpCYPC0HyIw8LQYEoDwtBqzIPC0HrJw8LQcI2DwtBoiQPC0HPKg8LQdwjDwtBhycPC0HkNA8LQbciDwtBrTEPC0HVIg8LQa80DwtB3iYPC0HWMg8LQfQ0DwtBgTgPC0H0Nw8LQZI2DwtBnScPC0GCKQ8LQY0jDwtB1zEPC0G9NQ8LQbQ3DwtB2DAPC0G2Jw8LQZo4DwtBpyoPC0HEJw8LQa4jDwtB9SIPCwALQcomIQELIAELFwAgACAALwEuQf7/A3EgAUEAR3I7AS4LGgAgACAALwEuQf3/A3EgAUEAR0EBdHI7AS4LGgAgACAALwEuQfv/A3EgAUEAR0ECdHI7AS4LGgAgACAALwEuQff/A3EgAUEAR0EDdHI7AS4LGgAgACAALwEuQe//A3EgAUEAR0EEdHI7AS4LGgAgACAALwEuQd//A3EgAUEAR0EFdHI7AS4LGgAgACAALwEuQb//A3EgAUEAR0EGdHI7AS4LGgAgACAALwEuQf/+A3EgAUEAR0EHdHI7AS4LGgAgACAALwEuQf/9A3EgAUEAR0EIdHI7AS4LGgAgACAALwEuQf/7A3EgAUEAR0EJdHI7AS4LPgECfwJAIAAoAjgiA0UNACADKAIEIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEHhEjYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIIIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEH8ETYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIMIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEHsCjYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIQIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEH6HjYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIUIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEHLEDYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIYIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEG3HzYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIcIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEG/FTYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIsIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEH+CDYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIgIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEGMHTYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIkIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEHmFTYCEEEYIQQLIAQLOAAgAAJ/IAAvATJBFHFBFEYEQEEBIAAtAChBAUYNARogAC8BNEHlAEYMAQsgAC0AKUEFRgs6ADALWQECfwJAIAAtAChBAUYNACAALwE0IgFB5ABrQeQASQ0AIAFBzAFGDQAgAUGwAkYNACAALwEyIgBBwABxDQBBASECIABBiARxQYAERg0AIABBKHFFIQILIAILjAEBAn8CQAJAAkAgAC0AKkUNACAALQArRQ0AIAAvATIiAUECcUUNAQwCCyAALwEyIgFBAXFFDQELQQEhAiAALQAoQQFGDQAgAC8BNCIAQeQAa0HkAEkNACAAQcwBRg0AIABBsAJGDQAgAUHAAHENAEEAIQIgAUGIBHFBgARGDQAgAUEocUEARyECCyACC1cAIABBGGpCADcDACAAQgA3AwAgAEE4akIANwMAIABBMGpCADcDACAAQShqQgA3AwAgAEEgakIANwMAIABBEGpCADcDACAAQQhqQgA3AwAgAEH9ATYCHAsGACAAEDoLmi0BC38jAEEQayIKJABB3NUAKAIAIglFBEBBnNkAKAIAIgVFBEBBqNkAQn83AgBBoNkAQoCAhICAgMAANwIAQZzZACAKQQhqQXBxQdiq1aoFcyIFNgIAQbDZAEEANgIAQYDZAEEANgIAC0GE2QBBwNkENgIAQdTVAEHA2QQ2AgBB6NUAIAU2AgBB5NUAQX82AgBBiNkAQcCmAzYCAANAIAFBgNYAaiABQfTVAGoiAjYCACACIAFB7NUAaiIDNgIAIAFB+NUAaiADNgIAIAFBiNYAaiABQfzVAGoiAzYCACADIAI2AgAgAUGQ1gBqIAFBhNYAaiICNgIAIAIgAzYCACABQYzWAGogAjYCACABQSBqIgFBgAJHDQALQczZBEGBpgM2AgBB4NUAQazZACgCADYCAEHQ1QBBgKYDNgIAQdzVAEHI2QQ2AgBBzP8HQTg2AgBByNkEIQkLAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkAgAEHsAU0EQEHE1QAoAgAiBkEQIABBE2pBcHEgAEELSRsiBEEDdiIAdiIBQQNxBEACQCABQQFxIAByQQFzIgJBA3QiAEHs1QBqIgEgAEH01QBqKAIAIgAoAggiA0YEQEHE1QAgBkF+IAJ3cTYCAAwBCyABIAM2AgggAyABNgIMCyAAQQhqIQEgACACQQN0IgJBA3I2AgQgACACaiIAIAAoAgRBAXI2AgQMEQtBzNUAKAIAIgggBE8NASABBEACQEECIAB0IgJBACACa3IgASAAdHFoIgBBA3QiAkHs1QBqIgEgAkH01QBqKAIAIgIoAggiA0YEQEHE1QAgBkF+IAB3cSIGNgIADAELIAEgAzYCCCADIAE2AgwLIAIgBEEDcjYCBCAAQQN0IgAgBGshBSAAIAJqIAU2AgAgAiAEaiIEIAVBAXI2AgQgCARAIAhBeHFB7NUAaiEAQdjVACgCACEDAn9BASAIQQN2dCIBIAZxRQRAQcTVACABIAZyNgIAIAAMAQsgACgCCAsiASADNgIMIAAgAzYCCCADIAA2AgwgAyABNgIICyACQQhqIQFB2NUAIAQ2AgBBzNUAIAU2AgAMEQtByNUAKAIAIgtFDQEgC2hBAnRB9NcAaigCACIAKAIEQXhxIARrIQUgACECA0ACQCACKAIQIgFFBEAgAkEUaigCACIBRQ0BCyABKAIEQXhxIARrIgMgBUkhAiADIAUgAhshBSABIAAgAhshACABIQIMAQsLIAAoAhghCSAAKAIMIgMgAEcEQEHU1QAoAgAaIAMgACgCCCIBNgIIIAEgAzYCDAwQCyAAQRRqIgIoAgAiAUUEQCAAKAIQIgFFDQMgAEEQaiECCwNAIAIhByABIgNBFGoiAigCACIBDQAgA0EQaiECIAMoAhAiAQ0ACyAHQQA2AgAMDwtBfyEEIABBv39LDQAgAEETaiIBQXBxIQRByNUAKAIAIghFDQBBACAEayEFAkACQAJAAn9BACAEQYACSQ0AGkEfIARB////B0sNABogBEEmIAFBCHZnIgBrdkEBcSAAQQF0a0E+agsiBkECdEH01wBqKAIAIgJFBEBBACEBQQAhAwwBC0EAIQEgBEEZIAZBAXZrQQAgBkEfRxt0IQBBACEDA0ACQCACKAIEQXhxIARrIgcgBU8NACACIQMgByIFDQBBACEFIAIhAQwDCyABIAJBFGooAgAiByAHIAIgAEEddkEEcWpBEGooAgAiAkYbIAEgBxshASAAQQF0IQAgAg0ACwsgASADckUEQEEAIQNBAiAGdCIAQQAgAGtyIAhxIgBFDQMgAGhBAnRB9NcAaigCACEBCyABRQ0BCwNAIAEoAgRBeHEgBGsiAiAFSSEAIAIgBSAAGyEFIAEgAyAAGyEDIAEoAhAiAAR/IAAFIAFBFGooAgALIgENAAsLIANFDQAgBUHM1QAoAgAgBGtPDQAgAygCGCEHIAMgAygCDCIARwRAQdTVACgCABogACADKAIIIgE2AgggASAANgIMDA4LIANBFGoiAigCACIBRQRAIAMoAhAiAUUNAyADQRBqIQILA0AgAiEGIAEiAEEUaiICKAIAIgENACAAQRBqIQIgACgCECIBDQALIAZBADYCAAwNC0HM1QAoAgAiAyAETwRAQdjVACgCACEBAkAgAyAEayICQRBPBEAgASAEaiIAIAJBAXI2AgQgASADaiACNgIAIAEgBEEDcjYCBAwBCyABIANBA3I2AgQgASADaiIAIAAoAgRBAXI2AgRBACEAQQAhAgtBzNUAIAI2AgBB2NUAIAA2AgAgAUEIaiEBDA8LQdDVACgCACIDIARLBEAgBCAJaiIAIAMgBGsiAUEBcjYCBEHc1QAgADYCAEHQ1QAgATYCACAJIARBA3I2AgQgCUEIaiEBDA8LQQAhASAEAn9BnNkAKAIABEBBpNkAKAIADAELQajZAEJ/NwIAQaDZAEKAgISAgIDAADcCAEGc2QAgCkEMakFwcUHYqtWqBXM2AgBBsNkAQQA2AgBBgNkAQQA2AgBBgIAECyIAIARBxwBqIgVqIgZBACAAayIHcSICTwRAQbTZAEEwNgIADA8LAkBB/NgAKAIAIgFFDQBB9NgAKAIAIgggAmohACAAIAFNIAAgCEtxDQBBACEBQbTZAEEwNgIADA8LQYDZAC0AAEEEcQ0EAkACQCAJBEBBhNkAIQEDQCABKAIAIgAgCU0EQCAAIAEoAgRqIAlLDQMLIAEoAggiAQ0ACwtBABA7IgBBf0YNBSACIQZBoNkAKAIAIgFBAWsiAyAAcQRAIAIgAGsgACADakEAIAFrcWohBgsgBCAGTw0FIAZB/v///wdLDQVB/NgAKAIAIgMEQEH02AAoAgAiByAGaiEBIAEgB00NBiABIANLDQYLIAYQOyIBIABHDQEMBwsgBiADayAHcSIGQf7///8HSw0EIAYQOyEAIAAgASgCACABKAIEakYNAyAAIQELAkAgBiAEQcgAak8NACABQX9GDQBBpNkAKAIAIgAgBSAGa2pBACAAa3EiAEH+////B0sEQCABIQAMBwsgABA7QX9HBEAgACAGaiEGIAEhAAwHC0EAIAZrEDsaDAQLIAEiAEF/Rw0FDAMLQQAhAwwMC0EAIQAMCgsgAEF/Rw0CC0GA2QBBgNkAKAIAQQRyNgIACyACQf7///8HSw0BIAIQOyEAQQAQOyEBIABBf0YNASABQX9GDQEgACABTw0BIAEgAGsiBiAEQThqTQ0BC0H02ABB9NgAKAIAIAZqIgE2AgBB+NgAKAIAIAFJBEBB+NgAIAE2AgALAkACQAJAQdzVACgCACICBEBBhNkAIQEDQCAAIAEoAgAiAyABKAIEIgVqRg0CIAEoAggiAQ0ACwwCC0HU1QAoAgAiAUEARyAAIAFPcUUEQEHU1QAgADYCAAtBACEBQYjZACAGNgIAQYTZACAANgIAQeTVAEF/NgIAQejVAEGc2QAoAgA2AgBBkNkAQQA2AgADQCABQYDWAGogAUH01QBqIgI2AgAgAiABQezVAGoiAzYCACABQfjVAGogAzYCACABQYjWAGogAUH81QBqIgM2AgAgAyACNgIAIAFBkNYAaiABQYTWAGoiAjYCACACIAM2AgAgAUGM1gBqIAI2AgAgAUEgaiIBQYACRw0AC0F4IABrQQ9xIgEgAGoiAiAGQThrIgMgAWsiAUEBcjYCBEHg1QBBrNkAKAIANgIAQdDVACABNgIAQdzVACACNgIAIAAgA2pBODYCBAwCCyAAIAJNDQAgAiADSQ0AIAEoAgxBCHENAEF4IAJrQQ9xIgAgAmoiA0HQ1QAoAgAgBmoiByAAayIAQQFyNgIEIAEgBSAGajYCBEHg1QBBrNkAKAIANgIAQdDVACAANgIAQdzVACADNgIAIAIgB2pBODYCBAwBCyAAQdTVACgCAEkEQEHU1QAgADYCAAsgACAGaiEDQYTZACEBAkACQAJAA0AgAyABKAIARwRAIAEoAggiAQ0BDAILCyABLQAMQQhxRQ0BC0GE2QAhAQNAIAEoAgAiAyACTQRAIAMgASgCBGoiBSACSw0DCyABKAIIIQEMAAsACyABIAA2AgAgASABKAIEIAZqNgIEIABBeCAAa0EPcWoiCSAEQQNyNgIEIANBeCADa0EPcWoiBiAEIAlqIgRrIQEgAiAGRgRAQdzVACAENgIAQdDVAEHQ1QAoAgAgAWoiADYCACAEIABBAXI2AgQMCAtB2NUAKAIAIAZGBEBB2NUAIAQ2AgBBzNUAQczVACgCACABaiIANgIAIAQgAEEBcjYCBCAAIARqIAA2AgAMCAsgBigCBCIFQQNxQQFHDQYgBUF4cSEIIAVB/wFNBEAgBUEDdiEDIAYoAggiACAGKAIMIgJGBEBBxNUAQcTVACgCAEF+IAN3cTYCAAwHCyACIAA2AgggACACNgIMDAYLIAYoAhghByAGIAYoAgwiAEcEQCAAIAYoAggiAjYCCCACIAA2AgwMBQsgBkEUaiICKAIAIgVFBEAgBigCECIFRQ0EIAZBEGohAgsDQCACIQMgBSIAQRRqIgIoAgAiBQ0AIABBEGohAiAAKAIQIgUNAAsgA0EANgIADAQLQXggAGtBD3EiASAAaiIHIAZBOGsiAyABayIBQQFyNgIEIAAgA2pBODYCBCACIAVBNyAFa0EPcWpBP2siAyADIAJBEGpJGyIDQSM2AgRB4NUAQazZACgCADYCAEHQ1QAgATYCAEHc1QAgBzYCACADQRBqQYzZACkCADcCACADQYTZACkCADcCCEGM2QAgA0EIajYCAEGI2QAgBjYCAEGE2QAgADYCAEGQ2QBBADYCACADQSRqIQEDQCABQQc2AgAgBSABQQRqIgFLDQALIAIgA0YNACADIAMoAgRBfnE2AgQgAyADIAJrIgU2AgAgAiAFQQFyNgIEIAVB/wFNBEAgBUF4cUHs1QBqIQACf0HE1QAoAgAiAUEBIAVBA3Z0IgNxRQRAQcTVACABIANyNgIAIAAMAQsgACgCCAsiASACNgIMIAAgAjYCCCACIAA2AgwgAiABNgIIDAELQR8hASAFQf///wdNBEAgBUEmIAVBCHZnIgBrdkEBcSAAQQF0a0E+aiEBCyACIAE2AhwgAkIANwIQIAFBAnRB9NcAaiEAQcjVACgCACIDQQEgAXQiBnFFBEAgACACNgIAQcjVACADIAZyNgIAIAIgADYCGCACIAI2AgggAiACNgIMDAELIAVBGSABQQF2a0EAIAFBH0cbdCEBIAAoAgAhAwJAA0AgAyIAKAIEQXhxIAVGDQEgAUEddiEDIAFBAXQhASAAIANBBHFqQRBqIgYoAgAiAw0ACyAGIAI2AgAgAiAANgIYIAIgAjYCDCACIAI2AggMAQsgACgCCCIBIAI2AgwgACACNgIIIAJBADYCGCACIAA2AgwgAiABNgIIC0HQ1QAoAgAiASAETQ0AQdzVACgCACIAIARqIgIgASAEayIBQQFyNgIEQdDVACABNgIAQdzVACACNgIAIAAgBEEDcjYCBCAAQQhqIQEMCAtBACEBQbTZAEEwNgIADAcLQQAhAAsgB0UNAAJAIAYoAhwiAkECdEH01wBqIgMoAgAgBkYEQCADIAA2AgAgAA0BQcjVAEHI1QAoAgBBfiACd3E2AgAMAgsgB0EQQRQgBygCECAGRhtqIAA2AgAgAEUNAQsgACAHNgIYIAYoAhAiAgRAIAAgAjYCECACIAA2AhgLIAZBFGooAgAiAkUNACAAQRRqIAI2AgAgAiAANgIYCyABIAhqIQEgBiAIaiIGKAIEIQULIAYgBUF+cTYCBCABIARqIAE2AgAgBCABQQFyNgIEIAFB/wFNBEAgAUF4cUHs1QBqIQACf0HE1QAoAgAiAkEBIAFBA3Z0IgFxRQRAQcTVACABIAJyNgIAIAAMAQsgACgCCAsiASAENgIMIAAgBDYCCCAEIAA2AgwgBCABNgIIDAELQR8hBSABQf///wdNBEAgAUEmIAFBCHZnIgBrdkEBcSAAQQF0a0E+aiEFCyAEIAU2AhwgBEIANwIQIAVBAnRB9NcAaiEAQcjVACgCACICQQEgBXQiA3FFBEAgACAENgIAQcjVACACIANyNgIAIAQgADYCGCAEIAQ2AgggBCAENgIMDAELIAFBGSAFQQF2a0EAIAVBH0cbdCEFIAAoAgAhAAJAA0AgACICKAIEQXhxIAFGDQEgBUEddiEAIAVBAXQhBSACIABBBHFqQRBqIgMoAgAiAA0ACyADIAQ2AgAgBCACNgIYIAQgBDYCDCAEIAQ2AggMAQsgAigCCCIAIAQ2AgwgAiAENgIIIARBADYCGCAEIAI2AgwgBCAANgIICyAJQQhqIQEMAgsCQCAHRQ0AAkAgAygCHCIBQQJ0QfTXAGoiAigCACADRgRAIAIgADYCACAADQFByNUAIAhBfiABd3EiCDYCAAwCCyAHQRBBFCAHKAIQIANGG2ogADYCACAARQ0BCyAAIAc2AhggAygCECIBBEAgACABNgIQIAEgADYCGAsgA0EUaigCACIBRQ0AIABBFGogATYCACABIAA2AhgLAkAgBUEPTQRAIAMgBCAFaiIAQQNyNgIEIAAgA2oiACAAKAIEQQFyNgIEDAELIAMgBGoiAiAFQQFyNgIEIAMgBEEDcjYCBCACIAVqIAU2AgAgBUH/AU0EQCAFQXhxQezVAGohAAJ/QcTVACgCACIBQQEgBUEDdnQiBXFFBEBBxNUAIAEgBXI2AgAgAAwBCyAAKAIICyIBIAI2AgwgACACNgIIIAIgADYCDCACIAE2AggMAQtBHyEBIAVB////B00EQCAFQSYgBUEIdmciAGt2QQFxIABBAXRrQT5qIQELIAIgATYCHCACQgA3AhAgAUECdEH01wBqIQBBASABdCIEIAhxRQRAIAAgAjYCAEHI1QAgBCAIcjYCACACIAA2AhggAiACNgIIIAIgAjYCDAwBCyAFQRkgAUEBdmtBACABQR9HG3QhASAAKAIAIQQCQANAIAQiACgCBEF4cSAFRg0BIAFBHXYhBCABQQF0IQEgACAEQQRxakEQaiIGKAIAIgQNAAsgBiACNgIAIAIgADYCGCACIAI2AgwgAiACNgIIDAELIAAoAggiASACNgIMIAAgAjYCCCACQQA2AhggAiAANgIMIAIgATYCCAsgA0EIaiEBDAELAkAgCUUNAAJAIAAoAhwiAUECdEH01wBqIgIoAgAgAEYEQCACIAM2AgAgAw0BQcjVACALQX4gAXdxNgIADAILIAlBEEEUIAkoAhAgAEYbaiADNgIAIANFDQELIAMgCTYCGCAAKAIQIgEEQCADIAE2AhAgASADNgIYCyAAQRRqKAIAIgFFDQAgA0EUaiABNgIAIAEgAzYCGAsCQCAFQQ9NBEAgACAEIAVqIgFBA3I2AgQgACABaiIBIAEoAgRBAXI2AgQMAQsgACAEaiIHIAVBAXI2AgQgACAEQQNyNgIEIAUgB2ogBTYCACAIBEAgCEF4cUHs1QBqIQFB2NUAKAIAIQMCf0EBIAhBA3Z0IgIgBnFFBEBBxNUAIAIgBnI2AgAgAQwBCyABKAIICyICIAM2AgwgASADNgIIIAMgATYCDCADIAI2AggLQdjVACAHNgIAQczVACAFNgIACyAAQQhqIQELIApBEGokACABC0MAIABFBEA/AEEQdA8LAkAgAEH//wNxDQAgAEEASA0AIABBEHZAACIAQX9GBEBBtNkAQTA2AgBBfw8LIABBEHQPCwALC5lCIgBBgAgLDQEAAAAAAAAAAgAAAAMAQZgICwUEAAAABQBBqAgLCQYAAAAHAAAACABB5AgLwjJJbnZhbGlkIGNoYXIgaW4gdXJsIHF1ZXJ5AFNwYW4gY2FsbGJhY2sgZXJyb3IgaW4gb25fYm9keQBDb250ZW50LUxlbmd0aCBvdmVyZmxvdwBDaHVuayBzaXplIG92ZXJmbG93AEludmFsaWQgbWV0aG9kIGZvciBIVFRQL3gueCByZXF1ZXN0AEludmFsaWQgbWV0aG9kIGZvciBSVFNQL3gueCByZXF1ZXN0AEV4cGVjdGVkIFNPVVJDRSBtZXRob2QgZm9yIElDRS94LnggcmVxdWVzdABJbnZhbGlkIGNoYXIgaW4gdXJsIGZyYWdtZW50IHN0YXJ0AEV4cGVjdGVkIGRvdABTcGFuIGNhbGxiYWNrIGVycm9yIGluIG9uX3N0YXR1cwBJbnZhbGlkIHJlc3BvbnNlIHN0YXR1cwBFeHBlY3RlZCBMRiBhZnRlciBoZWFkZXJzAEludmFsaWQgY2hhcmFjdGVyIGluIGNodW5rIGV4dGVuc2lvbnMAVXNlciBjYWxsYmFjayBlcnJvcgBgb25fcmVzZXRgIGNhbGxiYWNrIGVycm9yAGBvbl9jaHVua19oZWFkZXJgIGNhbGxiYWNrIGVycm9yAGBvbl9tZXNzYWdlX2JlZ2luYCBjYWxsYmFjayBlcnJvcgBgb25fY2h1bmtfZXh0ZW5zaW9uX3ZhbHVlYCBjYWxsYmFjayBlcnJvcgBgb25fc3RhdHVzX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25fdmVyc2lvbl9jb21wbGV0ZWAgY2FsbGJhY2sgZXJyb3IAYG9uX3VybF9jb21wbGV0ZWAgY2FsbGJhY2sgZXJyb3IAYG9uX3Byb3RvY29sX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25fY2h1bmtfY29tcGxldGVgIGNhbGxiYWNrIGVycm9yAGBvbl9oZWFkZXJfdmFsdWVfY29tcGxldGVgIGNhbGxiYWNrIGVycm9yAGBvbl9tZXNzYWdlX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25fbWV0aG9kX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25faGVhZGVyX2ZpZWxkX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25fY2h1bmtfZXh0ZW5zaW9uX25hbWVgIGNhbGxiYWNrIGVycm9yAFVuZXhwZWN0ZWQgY2hhciBpbiB1cmwgc2VydmVyAEludmFsaWQgaGVhZGVyIHZhbHVlIGNoYXIASW52YWxpZCBoZWFkZXIgZmllbGQgY2hhcgBTcGFuIGNhbGxiYWNrIGVycm9yIGluIG9uX3ZlcnNpb24ASW52YWxpZCBtaW5vciB2ZXJzaW9uAEludmFsaWQgbWFqb3IgdmVyc2lvbgBFeHBlY3RlZCBzcGFjZSBhZnRlciB2ZXJzaW9uAEV4cGVjdGVkIENSTEYgYWZ0ZXIgdmVyc2lvbgBJbnZhbGlkIEhUVFAgdmVyc2lvbgBJbnZhbGlkIGhlYWRlciB0b2tlbgBTcGFuIGNhbGxiYWNrIGVycm9yIGluIG9uX3VybABJbnZhbGlkIGNoYXJhY3RlcnMgaW4gdXJsAFVuZXhwZWN0ZWQgc3RhcnQgY2hhciBpbiB1cmwARG91YmxlIEAgaW4gdXJsAFNwYW4gY2FsbGJhY2sgZXJyb3IgaW4gb25fcHJvdG9jb2wARW1wdHkgQ29udGVudC1MZW5ndGgASW52YWxpZCBjaGFyYWN0ZXIgaW4gQ29udGVudC1MZW5ndGgAVHJhbnNmZXItRW5jb2RpbmcgY2FuJ3QgYmUgcHJlc2VudCB3aXRoIENvbnRlbnQtTGVuZ3RoAER1cGxpY2F0ZSBDb250ZW50LUxlbmd0aABJbnZhbGlkIGNoYXIgaW4gdXJsIHBhdGgAQ29udGVudC1MZW5ndGggY2FuJ3QgYmUgcHJlc2VudCB3aXRoIFRyYW5zZmVyLUVuY29kaW5nAE1pc3NpbmcgZXhwZWN0ZWQgQ1IgYWZ0ZXIgY2h1bmsgc2l6ZQBFeHBlY3RlZCBMRiBhZnRlciBjaHVuayBzaXplAEludmFsaWQgY2hhcmFjdGVyIGluIGNodW5rIHNpemUAU3BhbiBjYWxsYmFjayBlcnJvciBpbiBvbl9oZWFkZXJfdmFsdWUAU3BhbiBjYWxsYmFjayBlcnJvciBpbiBvbl9jaHVua19leHRlbnNpb25fdmFsdWUASW52YWxpZCBjaGFyYWN0ZXIgaW4gY2h1bmsgZXh0ZW5zaW9ucyB2YWx1ZQBVbmV4cGVjdGVkIHdoaXRlc3BhY2UgYWZ0ZXIgaGVhZGVyIHZhbHVlAE1pc3NpbmcgZXhwZWN0ZWQgQ1IgYWZ0ZXIgaGVhZGVyIHZhbHVlAE1pc3NpbmcgZXhwZWN0ZWQgTEYgYWZ0ZXIgaGVhZGVyIHZhbHVlAEludmFsaWQgYFRyYW5zZmVyLUVuY29kaW5nYCBoZWFkZXIgdmFsdWUATWlzc2luZyBleHBlY3RlZCBDUiBhZnRlciBjaHVuayBleHRlbnNpb24gdmFsdWUASW52YWxpZCBjaGFyYWN0ZXIgaW4gY2h1bmsgZXh0ZW5zaW9ucyBxdW90ZSB2YWx1ZQBJbnZhbGlkIHF1b3RlZC1wYWlyIGluIGNodW5rIGV4dGVuc2lvbnMgcXVvdGVkIHZhbHVlAEludmFsaWQgY2hhcmFjdGVyIGluIGNodW5rIGV4dGVuc2lvbnMgcXVvdGVkIHZhbHVlAFBhdXNlZCBieSBvbl9oZWFkZXJzX2NvbXBsZXRlAEludmFsaWQgRU9GIHN0YXRlAG9uX3Jlc2V0IHBhdXNlAG9uX2NodW5rX2hlYWRlciBwYXVzZQBvbl9tZXNzYWdlX2JlZ2luIHBhdXNlAG9uX2NodW5rX2V4dGVuc2lvbl92YWx1ZSBwYXVzZQBvbl9zdGF0dXNfY29tcGxldGUgcGF1c2UAb25fdmVyc2lvbl9jb21wbGV0ZSBwYXVzZQBvbl91cmxfY29tcGxldGUgcGF1c2UAb25fcHJvdG9jb2xfY29tcGxldGUgcGF1c2UAb25fY2h1bmtfY29tcGxldGUgcGF1c2UAb25faGVhZGVyX3ZhbHVlX2NvbXBsZXRlIHBhdXNlAG9uX21lc3NhZ2VfY29tcGxldGUgcGF1c2UAb25fbWV0aG9kX2NvbXBsZXRlIHBhdXNlAG9uX2hlYWRlcl9maWVsZF9jb21wbGV0ZSBwYXVzZQBvbl9jaHVua19leHRlbnNpb25fbmFtZSBwYXVzZQBVbmV4cGVjdGVkIHNwYWNlIGFmdGVyIHN0YXJ0IGxpbmUATWlzc2luZyBleHBlY3RlZCBDUiBhZnRlciByZXNwb25zZSBsaW5lAFNwYW4gY2FsbGJhY2sgZXJyb3IgaW4gb25fY2h1bmtfZXh0ZW5zaW9uX25hbWUASW52YWxpZCBjaGFyYWN0ZXIgaW4gY2h1bmsgZXh0ZW5zaW9ucyBuYW1lAE1pc3NpbmcgZXhwZWN0ZWQgQ1IgYWZ0ZXIgY2h1bmsgZXh0ZW5zaW9uIG5hbWUASW52YWxpZCBzdGF0dXMgY29kZQBQYXVzZSBvbiBDT05ORUNUL1VwZ3JhZGUAUGF1c2Ugb24gUFJJL1VwZ3JhZGUARXhwZWN0ZWQgSFRUUC8yIENvbm5lY3Rpb24gUHJlZmFjZQBTcGFuIGNhbGxiYWNrIGVycm9yIGluIG9uX21ldGhvZABFeHBlY3RlZCBzcGFjZSBhZnRlciBtZXRob2QAU3BhbiBjYWxsYmFjayBlcnJvciBpbiBvbl9oZWFkZXJfZmllbGQAUGF1c2VkAEludmFsaWQgd29yZCBlbmNvdW50ZXJlZABJbnZhbGlkIG1ldGhvZCBlbmNvdW50ZXJlZABNaXNzaW5nIGV4cGVjdGVkIENSIGFmdGVyIGNodW5rIGRhdGEARXhwZWN0ZWQgTEYgYWZ0ZXIgY2h1bmsgZGF0YQBVbmV4cGVjdGVkIGNoYXIgaW4gdXJsIHNjaGVtYQBSZXF1ZXN0IGhhcyBpbnZhbGlkIGBUcmFuc2Zlci1FbmNvZGluZ2AARGF0YSBhZnRlciBgQ29ubmVjdGlvbjogY2xvc2VgAFNXSVRDSF9QUk9YWQBVU0VfUFJPWFkATUtBQ1RJVklUWQBVTlBST0NFU1NBQkxFX0VOVElUWQBRVUVSWQBDT1BZAE1PVkVEX1BFUk1BTkVOVExZAFRPT19FQVJMWQBOT1RJRlkARkFJTEVEX0RFUEVOREVOQ1kAQkFEX0dBVEVXQVkAUExBWQBQVVQAQ0hFQ0tPVVQAR0FURVdBWV9USU1FT1VUAFJFUVVFU1RfVElNRU9VVABORVRXT1JLX0NPTk5FQ1RfVElNRU9VVABDT05ORUNUSU9OX1RJTUVPVVQATE9HSU5fVElNRU9VVABORVRXT1JLX1JFQURfVElNRU9VVABQT1NUAE1JU0RJUkVDVEVEX1JFUVVFU1QAQ0xJRU5UX0NMT1NFRF9SRVFVRVNUAENMSUVOVF9DTE9TRURfTE9BRF9CQUxBTkNFRF9SRVFVRVNUAEJBRF9SRVFVRVNUAEhUVFBfUkVRVUVTVF9TRU5UX1RPX0hUVFBTX1BPUlQAUkVQT1JUAElNX0FfVEVBUE9UAFJFU0VUX0NPTlRFTlQATk9fQ09OVEVOVABQQVJUSUFMX0NPTlRFTlQASFBFX0lOVkFMSURfQ09OU1RBTlQASFBFX0NCX1JFU0VUAEdFVABIUEVfU1RSSUNUAENPTkZMSUNUAFRFTVBPUkFSWV9SRURJUkVDVABQRVJNQU5FTlRfUkVESVJFQ1QAQ09OTkVDVABNVUxUSV9TVEFUVVMASFBFX0lOVkFMSURfU1RBVFVTAFRPT19NQU5ZX1JFUVVFU1RTAEVBUkxZX0hJTlRTAFVOQVZBSUxBQkxFX0ZPUl9MRUdBTF9SRUFTT05TAE9QVElPTlMAU1dJVENISU5HX1BST1RPQ09MUwBWQVJJQU5UX0FMU09fTkVHT1RJQVRFUwBNVUxUSVBMRV9DSE9JQ0VTAElOVEVSTkFMX1NFUlZFUl9FUlJPUgBXRUJfU0VSVkVSX1VOS05PV05fRVJST1IAUkFJTEdVTl9FUlJPUgBJREVOVElUWV9QUk9WSURFUl9BVVRIRU5USUNBVElPTl9FUlJPUgBTU0xfQ0VSVElGSUNBVEVfRVJST1IASU5WQUxJRF9YX0ZPUldBUkRFRF9GT1IAU0VUX1BBUkFNRVRFUgBHRVRfUEFSQU1FVEVSAEhQRV9VU0VSAFNFRV9PVEhFUgBIUEVfQ0JfQ0hVTktfSEVBREVSAEV4cGVjdGVkIExGIGFmdGVyIENSAE1LQ0FMRU5EQVIAU0VUVVAAV0VCX1NFUlZFUl9JU19ET1dOAFRFQVJET1dOAEhQRV9DTE9TRURfQ09OTkVDVElPTgBIRVVSSVNUSUNfRVhQSVJBVElPTgBESVNDT05ORUNURURfT1BFUkFUSU9OAE5PTl9BVVRIT1JJVEFUSVZFX0lORk9STUFUSU9OAEhQRV9JTlZBTElEX1ZFUlNJT04ASFBFX0NCX01FU1NBR0VfQkVHSU4AU0lURV9JU19GUk9aRU4ASFBFX0lOVkFMSURfSEVBREVSX1RPS0VOAElOVkFMSURfVE9LRU4ARk9SQklEREVOAEVOSEFOQ0VfWU9VUl9DQUxNAEhQRV9JTlZBTElEX1VSTABCTE9DS0VEX0JZX1BBUkVOVEFMX0NPTlRST0wATUtDT0wAQUNMAEhQRV9JTlRFUk5BTABSRVFVRVNUX0hFQURFUl9GSUVMRFNfVE9PX0xBUkdFX1VOT0ZGSUNJQUwASFBFX09LAFVOTElOSwBVTkxPQ0sAUFJJAFJFVFJZX1dJVEgASFBFX0lOVkFMSURfQ09OVEVOVF9MRU5HVEgASFBFX1VORVhQRUNURURfQ09OVEVOVF9MRU5HVEgARkxVU0gAUFJPUFBBVENIAE0tU0VBUkNIAFVSSV9UT09fTE9ORwBQUk9DRVNTSU5HAE1JU0NFTExBTkVPVVNfUEVSU0lTVEVOVF9XQVJOSU5HAE1JU0NFTExBTkVPVVNfV0FSTklORwBIUEVfSU5WQUxJRF9UUkFOU0ZFUl9FTkNPRElORwBFeHBlY3RlZCBDUkxGAEhQRV9JTlZBTElEX0NIVU5LX1NJWkUATU9WRQBDT05USU5VRQBIUEVfQ0JfU1RBVFVTX0NPTVBMRVRFAEhQRV9DQl9IRUFERVJTX0NPTVBMRVRFAEhQRV9DQl9WRVJTSU9OX0NPTVBMRVRFAEhQRV9DQl9VUkxfQ09NUExFVEUASFBFX0NCX1BST1RPQ09MX0NPTVBMRVRFAEhQRV9DQl9DSFVOS19DT01QTEVURQBIUEVfQ0JfSEVBREVSX1ZBTFVFX0NPTVBMRVRFAEhQRV9DQl9DSFVOS19FWFRFTlNJT05fVkFMVUVfQ09NUExFVEUASFBFX0NCX0NIVU5LX0VYVEVOU0lPTl9OQU1FX0NPTVBMRVRFAEhQRV9DQl9NRVNTQUdFX0NPTVBMRVRFAEhQRV9DQl9NRVRIT0RfQ09NUExFVEUASFBFX0NCX0hFQURFUl9GSUVMRF9DT01QTEVURQBERUxFVEUASFBFX0lOVkFMSURfRU9GX1NUQVRFAElOVkFMSURfU1NMX0NFUlRJRklDQVRFAFBBVVNFAE5PX1JFU1BPTlNFAFVOU1VQUE9SVEVEX01FRElBX1RZUEUAR09ORQBOT1RfQUNDRVBUQUJMRQBTRVJWSUNFX1VOQVZBSUxBQkxFAFJBTkdFX05PVF9TQVRJU0ZJQUJMRQBPUklHSU5fSVNfVU5SRUFDSEFCTEUAUkVTUE9OU0VfSVNfU1RBTEUAUFVSR0UATUVSR0UAUkVRVUVTVF9IRUFERVJfRklFTERTX1RPT19MQVJHRQBSRVFVRVNUX0hFQURFUl9UT09fTEFSR0UAUEFZTE9BRF9UT09fTEFSR0UASU5TVUZGSUNJRU5UX1NUT1JBR0UASFBFX1BBVVNFRF9VUEdSQURFAEhQRV9QQVVTRURfSDJfVVBHUkFERQBTT1VSQ0UAQU5OT1VOQ0UAVFJBQ0UASFBFX1VORVhQRUNURURfU1BBQ0UAREVTQ1JJQkUAVU5TVUJTQ1JJQkUAUkVDT1JEAEhQRV9JTlZBTElEX01FVEhPRABOT1RfRk9VTkQAUFJPUEZJTkQAVU5CSU5EAFJFQklORABVTkFVVEhPUklaRUQATUVUSE9EX05PVF9BTExPV0VEAEhUVFBfVkVSU0lPTl9OT1RfU1VQUE9SVEVEAEFMUkVBRFlfUkVQT1JURUQAQUNDRVBURUQATk9UX0lNUExFTUVOVEVEAExPT1BfREVURUNURUQASFBFX0NSX0VYUEVDVEVEAEhQRV9MRl9FWFBFQ1RFRABDUkVBVEVEAElNX1VTRUQASFBFX1BBVVNFRABUSU1FT1VUX09DQ1VSRUQAUEFZTUVOVF9SRVFVSVJFRABQUkVDT05ESVRJT05fUkVRVUlSRUQAUFJPWFlfQVVUSEVOVElDQVRJT05fUkVRVUlSRUQATkVUV09SS19BVVRIRU5USUNBVElPTl9SRVFVSVJFRABMRU5HVEhfUkVRVUlSRUQAU1NMX0NFUlRJRklDQVRFX1JFUVVJUkVEAFVQR1JBREVfUkVRVUlSRUQAUEFHRV9FWFBJUkVEAFBSRUNPTkRJVElPTl9GQUlMRUQARVhQRUNUQVRJT05fRkFJTEVEAFJFVkFMSURBVElPTl9GQUlMRUQAU1NMX0hBTkRTSEFLRV9GQUlMRUQATE9DS0VEAFRSQU5TRk9STUFUSU9OX0FQUExJRUQATk9UX01PRElGSUVEAE5PVF9FWFRFTkRFRABCQU5EV0lEVEhfTElNSVRfRVhDRUVERUQAU0lURV9JU19PVkVSTE9BREVEAEhFQUQARXhwZWN0ZWQgSFRUUC8sIFJUU1AvIG9yIElDRS8A5xUAAK8VAACkEgAAkhoAACYWAACeFAAA2xkAAHkVAAB+EgAA/hQAADYVAAALFgAA2BYAAPMSAABCGAAArBYAABIVAAAUFwAA7xcAAEgUAABxFwAAshoAAGsZAAB+GQAANRQAAIIaAABEFwAA/RYAAB4YAACHFwAAqhkAAJMSAAAHGAAALBcAAMoXAACkFwAA5xUAAOcVAABYFwAAOxgAAKASAAAtHAAAwxEAAEgRAADeEgAAQhMAAKQZAAD9EAAA9xUAAKUVAADvFgAA+BkAAEoWAABWFgAA9RUAAAoaAAAIGgAAARoAAKsVAABCEgAA1xAAAEwRAAAFGQAAVBYAAB4RAADKGQAAyBkAAE4WAAD/GAAAcRQAAPAVAADuFQAAlBkAAPwVAAC/GQAAmxkAAHwUAABDEQAAcBgAAJUUAAAnFAAAGRQAANUSAADUGQAARBYAAPcQAEG5OwsBAQBB0DsL4AEBAQIBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEDAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQBBuj0LBAEAAAIAQdE9C14DBAMDAwMDAAADAwADAwADAwMDAwMDAwMDAAUAAAAAAAMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAAAAAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMAAwADAEG6PwsEAQAAAgBB0T8LXgMAAwMDAwMAAAMDAAMDAAMDAwMDAwMDAwMABAAFAAAAAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMAAAADAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwADAAMAQbDBAAsNbG9zZWVlcC1hbGl2ZQBBycEACwEBAEHgwQAL4AEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQBBycMACwEBAEHgwwAL5wEBAQEBAQEBAQEBAQECAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAWNodW5rZWQAQfHFAAteAQABAQEBAQAAAQEAAQEAAQEBAQEBAQEBAQAAAAAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQAAAAEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAAEAAQBB0McACyFlY3Rpb25lbnQtbGVuZ3Rob25yb3h5LWNvbm5lY3Rpb24AQYDIAAsgcmFuc2Zlci1lbmNvZGluZ3BncmFkZQ0KDQpTTQ0KDQoAQanIAAsFAQIAAQMAQcDIAAtfBAUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUAQanKAAsFAQIAAQMAQcDKAAtfBAUFBgUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUAQanMAAsEAQAAAQBBwcwAC14CAgACAgICAgICAgICAgICAgICAgICAgICAgICAgIAAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAEGpzgALBQECAAEDAEHAzgALXwQFAAAFBQUFBQUFBQUFBQYFBQUFBQUFBQUFBQUABQAHCAUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQAFAAUABQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUAAAAFAEGp0AALBQEBAAEBAEHA0AALAQEAQdrQAAtBAgAAAAAAAAMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAAAAAAAAAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMAQanSAAsFAQEAAQEAQcDSAAsBAQBBytIACwYCAAAAAAIAQeHSAAs6AwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMAAAAAAAADAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwBBoNQAC50BTk9VTkNFRUNLT1VUTkVDVEVURUNSSUJFTFVTSEVURUFEU0VBUkNIUkdFQ1RJVklUWUxFTkRBUlZFT1RJRllQVElPTlNDSFNFQVlTVEFUQ0hHRVVFUllPUkRJUkVDVE9SVFJDSFBBUkFNRVRFUlVSQ0VCU0NSSUJFQVJET1dOQUNFSU5ETktDS1VCU0NSSUJFVFRQQ0VUU1BBRFRQLw==",aw;Object.defineProperty(r3,"exports",{get:()=>aw||(aw=Cfe.from(Qfe,"base64"))})});var i3=U((mTe,n3)=>{"use strict";var{Buffer:wfe}=Gr(),Sfe="AGFzbQEAAAABJwdgAX8Bf2ADf39/AX9gAn9/AGABfwBgBH9/f38Bf2AAAGADf39/AALLAQgDZW52GHdhc21fb25faGVhZGVyc19jb21wbGV0ZQAEA2VudhV3YXNtX29uX21lc3NhZ2VfYmVnaW4AAANlbnYLd2FzbV9vbl91cmwAAQNlbnYOd2FzbV9vbl9zdGF0dXMAAQNlbnYUd2FzbV9vbl9oZWFkZXJfZmllbGQAAQNlbnYUd2FzbV9vbl9oZWFkZXJfdmFsdWUAAQNlbnYMd2FzbV9vbl9ib2R5AAEDZW52GHdhc21fb25fbWVzc2FnZV9jb21wbGV0ZQAAAzU0BQYAAAMAAAAAAAADAQMAAwMDAAACAAAAAAICAgICAgICAgIBAQEBAQEBAQEBAwAAAwAAAAQFAXABExMFAwEAAgYIAX8BQcDZBAsHxQcoBm1lbW9yeQIAC19pbml0aWFsaXplAAgZX19pbmRpcmVjdF9mdW5jdGlvbl90YWJsZQEAC2xsaHR0cF9pbml0AAkYbGxodHRwX3Nob3VsZF9rZWVwX2FsaXZlADcMbGxodHRwX2FsbG9jAAsGbWFsbG9jADkLbGxodHRwX2ZyZWUADARmcmVlAAwPbGxodHRwX2dldF90eXBlAA0VbGxodHRwX2dldF9odHRwX21ham9yAA4VbGxodHRwX2dldF9odHRwX21pbm9yAA8RbGxodHRwX2dldF9tZXRob2QAEBZsbGh0dHBfZ2V0X3N0YXR1c19jb2RlABESbGxodHRwX2dldF91cGdyYWRlABIMbGxodHRwX3Jlc2V0ABMObGxodHRwX2V4ZWN1dGUAFBRsbGh0dHBfc2V0dGluZ3NfaW5pdAAVDWxsaHR0cF9maW5pc2gAFgxsbGh0dHBfcGF1c2UAFw1sbGh0dHBfcmVzdW1lABgbbGxodHRwX3Jlc3VtZV9hZnRlcl91cGdyYWRlABkQbGxodHRwX2dldF9lcnJubwAaF2xsaHR0cF9nZXRfZXJyb3JfcmVhc29uABsXbGxodHRwX3NldF9lcnJvcl9yZWFzb24AHBRsbGh0dHBfZ2V0X2Vycm9yX3BvcwAdEWxsaHR0cF9lcnJub19uYW1lAB4SbGxodHRwX21ldGhvZF9uYW1lAB8SbGxodHRwX3N0YXR1c19uYW1lACAabGxodHRwX3NldF9sZW5pZW50X2hlYWRlcnMAISFsbGh0dHBfc2V0X2xlbmllbnRfY2h1bmtlZF9sZW5ndGgAIh1sbGh0dHBfc2V0X2xlbmllbnRfa2VlcF9hbGl2ZQAjJGxsaHR0cF9zZXRfbGVuaWVudF90cmFuc2Zlcl9lbmNvZGluZwAkGmxsaHR0cF9zZXRfbGVuaWVudF92ZXJzaW9uACUjbGxodHRwX3NldF9sZW5pZW50X2RhdGFfYWZ0ZXJfY2xvc2UAJidsbGh0dHBfc2V0X2xlbmllbnRfb3B0aW9uYWxfbGZfYWZ0ZXJfY3IAJyxsbGh0dHBfc2V0X2xlbmllbnRfb3B0aW9uYWxfY3JsZl9hZnRlcl9jaHVuawAoKGxsaHR0cF9zZXRfbGVuaWVudF9vcHRpb25hbF9jcl9iZWZvcmVfbGYAKSpsbGh0dHBfc2V0X2xlbmllbnRfc3BhY2VzX2FmdGVyX2NodW5rX3NpemUAKhhsbGh0dHBfbWVzc2FnZV9uZWVkc19lb2YANgkYAQBBAQsSAQIDBAUKBgcyNDMuKy8tLDAxCuzaAjQWAEHA1QAoAgAEQAALQcDVAEEBNgIACxQAIAAQOCAAIAI2AjggACABOgAoCxQAIAAgAC8BNCAALQAwIAAQNxAACx4BAX9BwAAQOiIBEDggAUGACDYCOCABIAA6ACggAQuPDAEHfwJAIABFDQAgAEEIayIBIABBBGsoAgAiAEF4cSIEaiEFAkAgAEEBcQ0AIABBA3FFDQEgASABKAIAIgBrIgFB1NUAKAIASQ0BIAAgBGohBAJAAkBB2NUAKAIAIAFHBEAgAEH/AU0EQCAAQQN2IQMgASgCCCIAIAEoAgwiAkYEQEHE1QBBxNUAKAIAQX4gA3dxNgIADAULIAIgADYCCCAAIAI2AgwMBAsgASgCGCEGIAEgASgCDCIARwRAIAAgASgCCCICNgIIIAIgADYCDAwDCyABQRRqIgMoAgAiAkUEQCABKAIQIgJFDQIgAUEQaiEDCwNAIAMhByACIgBBFGoiAygCACICDQAgAEEQaiEDIAAoAhAiAg0ACyAHQQA2AgAMAgsgBSgCBCIAQQNxQQNHDQIgBSAAQX5xNgIEQczVACAENgIAIAUgBDYCACABIARBAXI2AgQMAwtBACEACyAGRQ0AAkAgASgCHCICQQJ0QfTXAGoiAygCACABRgRAIAMgADYCACAADQFByNUAQcjVACgCAEF+IAJ3cTYCAAwCCyAGQRBBFCAGKAIQIAFGG2ogADYCACAARQ0BCyAAIAY2AhggASgCECICBEAgACACNgIQIAIgADYCGAsgAUEUaigCACICRQ0AIABBFGogAjYCACACIAA2AhgLIAEgBU8NACAFKAIEIgBBAXFFDQACQAJAAkACQCAAQQJxRQRAQdzVACgCACAFRgRAQdzVACABNgIAQdDVAEHQ1QAoAgAgBGoiADYCACABIABBAXI2AgQgAUHY1QAoAgBHDQZBzNUAQQA2AgBB2NUAQQA2AgAMBgtB2NUAKAIAIAVGBEBB2NUAIAE2AgBBzNUAQczVACgCACAEaiIANgIAIAEgAEEBcjYCBCAAIAFqIAA2AgAMBgsgAEF4cSAEaiEEIABB/wFNBEAgAEEDdiEDIAUoAggiACAFKAIMIgJGBEBBxNUAQcTVACgCAEF+IAN3cTYCAAwFCyACIAA2AgggACACNgIMDAQLIAUoAhghBiAFIAUoAgwiAEcEQEHU1QAoAgAaIAAgBSgCCCICNgIIIAIgADYCDAwDCyAFQRRqIgMoAgAiAkUEQCAFKAIQIgJFDQIgBUEQaiEDCwNAIAMhByACIgBBFGoiAygCACICDQAgAEEQaiEDIAAoAhAiAg0ACyAHQQA2AgAMAgsgBSAAQX5xNgIEIAEgBGogBDYCACABIARBAXI2AgQMAwtBACEACyAGRQ0AAkAgBSgCHCICQQJ0QfTXAGoiAygCACAFRgRAIAMgADYCACAADQFByNUAQcjVACgCAEF+IAJ3cTYCAAwCCyAGQRBBFCAGKAIQIAVGG2ogADYCACAARQ0BCyAAIAY2AhggBSgCECICBEAgACACNgIQIAIgADYCGAsgBUEUaigCACICRQ0AIABBFGogAjYCACACIAA2AhgLIAEgBGogBDYCACABIARBAXI2AgQgAUHY1QAoAgBHDQBBzNUAIAQ2AgAMAQsgBEH/AU0EQCAEQXhxQezVAGohAAJ/QcTVACgCACICQQEgBEEDdnQiA3FFBEBBxNUAIAIgA3I2AgAgAAwBCyAAKAIICyICIAE2AgwgACABNgIIIAEgADYCDCABIAI2AggMAQtBHyECIARB////B00EQCAEQSYgBEEIdmciAGt2QQFxIABBAXRrQT5qIQILIAEgAjYCHCABQgA3AhAgAkECdEH01wBqIQACQEHI1QAoAgAiA0EBIAJ0IgdxRQRAIAAgATYCAEHI1QAgAyAHcjYCACABIAA2AhggASABNgIIIAEgATYCDAwBCyAEQRkgAkEBdmtBACACQR9HG3QhAiAAKAIAIQACQANAIAAiAygCBEF4cSAERg0BIAJBHXYhACACQQF0IQIgAyAAQQRxakEQaiIHKAIAIgANAAsgByABNgIAIAEgAzYCGCABIAE2AgwgASABNgIIDAELIAMoAggiACABNgIMIAMgATYCCCABQQA2AhggASADNgIMIAEgADYCCAtB5NUAQeTVACgCAEEBayIAQX8gABs2AgALCwcAIAAtACgLBwAgAC0AKgsHACAALQArCwcAIAAtACkLBwAgAC8BNAsHACAALQAwC0ABBH8gACgCGCEBIAAvAS4hAiAALQAoIQMgACgCOCEEIAAQOCAAIAQ2AjggACADOgAoIAAgAjsBLiAAIAE2AhgLhocCAwd/A34BeyABIAJqIQQCQCAAIgMoAgwiAA0AIAMoAgQEQCADIAE2AgQLIwBBEGsiCSQAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACfwJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQCADKAIcIgJBAmsO/AEB+QECAwQFBgcICQoLDA0ODxAREvgBE/cBFBX2ARYX9QEYGRobHB0eHyD9AfsBIfQBIiMkJSYnKCkqK/MBLC0uLzAxMvIB8QEzNPAB7wE1Njc4OTo7PD0+P0BBQkNERUZHSElKS0xNTk/6AVBRUlPuAe0BVOwBVesBVldYWVrqAVtcXV5fYGFiY2RlZmdoaWprbG1ub3BxcnN0dXZ3eHl6e3x9fn+AAYEBggGDAYQBhQGGAYcBiAGJAYoBiwGMAY0BjgGPAZABkQGSAZMBlAGVAZYBlwGYAZkBmgGbAZwBnQGeAZ8BoAGhAaIBowGkAaUBpgGnAagBqQGqAasBrAGtAa4BrwGwAbEBsgGzAbQBtQG2AbcBuAG5AboBuwG8Ab0BvgG/AcABwQHCAcMBxAHFAcYBxwHIAckBygHLAcwBzQHOAekB6AHPAecB0AHmAdEB0gHTAdQB5QHVAdYB1wHYAdkB2gHbAdwB3QHeAd8B4AHhAeIB4wEA/AELQQAM4wELQQ4M4gELQQ0M4QELQQ8M4AELQRAM3wELQRMM3gELQRQM3QELQRUM3AELQRYM2wELQRcM2gELQRgM2QELQRkM2AELQRoM1wELQRsM1gELQRwM1QELQR0M1AELQR4M0wELQR8M0gELQSAM0QELQSEM0AELQQgMzwELQSIMzgELQSQMzQELQSMMzAELQQcMywELQSUMygELQSYMyQELQScMyAELQSgMxwELQRIMxgELQREMxQELQSkMxAELQSoMwwELQSsMwgELQSwMwQELQd4BDMABC0EuDL8BC0EvDL4BC0EwDL0BC0ExDLwBC0EyDLsBC0EzDLoBC0E0DLkBC0HfAQy4AQtBNQy3AQtBOQy2AQtBDAy1AQtBNgy0AQtBNwyzAQtBOAyyAQtBPgyxAQtBOgywAQtB4AEMrwELQQsMrgELQT8MrQELQTsMrAELQQoMqwELQTwMqgELQT0MqQELQeEBDKgBC0HBAAynAQtBwAAMpgELQcIADKUBC0EJDKQBC0EtDKMBC0HDAAyiAQtBxAAMoQELQcUADKABC0HGAAyfAQtBxwAMngELQcgADJ0BC0HJAAycAQtBygAMmwELQcsADJoBC0HMAAyZAQtBzQAMmAELQc4ADJcBC0HPAAyWAQtB0AAMlQELQdEADJQBC0HSAAyTAQtB0wAMkgELQdUADJEBC0HUAAyQAQtB1gAMjwELQdcADI4BC0HYAAyNAQtB2QAMjAELQdoADIsBC0HbAAyKAQtB3AAMiQELQd0ADIgBC0HeAAyHAQtB3wAMhgELQeAADIUBC0HhAAyEAQtB4gAMgwELQeMADIIBC0HkAAyBAQtB5QAMgAELQeIBDH8LQeYADH4LQecADH0LQQYMfAtB6AAMewtBBQx6C0HpAAx5C0EEDHgLQeoADHcLQesADHYLQewADHULQe0ADHQLQQMMcwtB7gAMcgtB7wAMcQtB8AAMcAtB8gAMbwtB8QAMbgtB8wAMbQtB9AAMbAtB9QAMawtB9gAMagtBAgxpC0H3AAxoC0H4AAxnC0H5AAxmC0H6AAxlC0H7AAxkC0H8AAxjC0H9AAxiC0H+AAxhC0H/AAxgC0GAAQxfC0GBAQxeC0GCAQxdC0GDAQxcC0GEAQxbC0GFAQxaC0GGAQxZC0GHAQxYC0GIAQxXC0GJAQxWC0GKAQxVC0GLAQxUC0GMAQxTC0GNAQxSC0GOAQxRC0GPAQxQC0GQAQxPC0GRAQxOC0GSAQxNC0GTAQxMC0GUAQxLC0GVAQxKC0GWAQxJC0GXAQxIC0GYAQxHC0GZAQxGC0GaAQxFC0GbAQxEC0GcAQxDC0GdAQxCC0GeAQxBC0GfAQxAC0GgAQw/C0GhAQw+C0GiAQw9C0GjAQw8C0GkAQw7C0GlAQw6C0GmAQw5C0GnAQw4C0GoAQw3C0GpAQw2C0GqAQw1C0GrAQw0C0GsAQwzC0GtAQwyC0GuAQwxC0GvAQwwC0GwAQwvC0GxAQwuC0GyAQwtC0GzAQwsC0G0AQwrC0G1AQwqC0G2AQwpC0G3AQwoC0G4AQwnC0G5AQwmC0G6AQwlC0G7AQwkC0G8AQwjC0G9AQwiC0G+AQwhC0G/AQwgC0HAAQwfC0HBAQweC0HCAQwdC0EBDBwLQcMBDBsLQcQBDBoLQcUBDBkLQcYBDBgLQccBDBcLQcgBDBYLQckBDBULQcoBDBQLQcsBDBMLQcwBDBILQc0BDBELQc4BDBALQc8BDA8LQdABDA4LQdEBDA0LQdIBDAwLQdMBDAsLQdQBDAoLQdUBDAkLQdYBDAgLQeMBDAcLQdcBDAYLQdgBDAULQdkBDAQLQdoBDAMLQdsBDAILQd0BDAELQdwBCyECA0ACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAIAMCfwJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACfwJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACfwJAAkACQAJAAkACQAJAAn8CQAJAAkACfwJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkAgAwJ/AkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJ/AkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQCACDuMBAAECAwQFBgcICQoLDA0ODxAREhMUFRYXGBkaGxwdHh8gISMkJScoKZ4DmwOaA5EDigODA4AD/QL7AvgC8gLxAu8C7QLoAucC5gLlAuQC3ALbAtoC2QLYAtcC1gLVAs8CzgLMAssCygLJAsgCxwLGAsQCwwK+ArwCugK5ArgCtwK2ArUCtAKzArICsQKwAq4CrQKpAqgCpwKmAqUCpAKjAqICoQKgAp8CmAKQAowCiwKKAoEC/gH9AfwB+wH6AfkB+AH3AfUB8wHwAesB6QHoAecB5gHlAeQB4wHiAeEB4AHfAd4B3QHcAdoB2QHYAdcB1gHVAdQB0wHSAdEB0AHPAc4BzQHMAcsBygHJAcgBxwHGAcUBxAHDAcIBwQHAAb8BvgG9AbwBuwG6AbkBuAG3AbYBtQG0AbMBsgGxAbABrwGuAa0BrAGrAaoBqQGoAacBpgGlAaQBowGiAZ8BngGZAZgBlwGWAZUBlAGTAZIBkQGQAY8BjQGMAYcBhgGFAYQBgwGCAX18e3p5dnV0UFFSU1RVCyABIARHDXJB/QEhAgy+AwsgASAERw2YAUHbASECDL0DCyABIARHDfEBQY4BIQIMvAMLIAEgBEcN/AFBhAEhAgy7AwsgASAERw2KAkH/ACECDLoDCyABIARHDZECQf0AIQIMuQMLIAEgBEcNlAJB+wAhAgy4AwsgASAERw0eQR4hAgy3AwsgASAERw0ZQRghAgy2AwsgASAERw3KAkHNACECDLUDCyABIARHDdUCQcYAIQIMtAMLIAEgBEcN1gJBwwAhAgyzAwsgASAERw3cAkE4IQIMsgMLIAMtADBBAUYNrQMMiQMLQQAhAAJAAkACQCADLQAqRQ0AIAMtACtFDQAgAy8BMiICQQJxRQ0BDAILIAMvATIiAkEBcUUNAQtBASEAIAMtAChBAUYNACADLwE0IgZB5ABrQeQASQ0AIAZBzAFGDQAgBkGwAkYNACACQcAAcQ0AQQAhACACQYgEcUGABEYNACACQShxQQBHIQALIANBADsBMiADQQA6ADECQCAARQRAIANBADoAMSADLQAuQQRxDQEMsQMLIANCADcDIAsgA0EAOgAxIANBAToANgxIC0EAIQACQCADKAI4IgJFDQAgAigCMCICRQ0AIAMgAhEAACEACyAARQ1IIABBFUcNYiADQQQ2AhwgAyABNgIUIANB0hs2AhAgA0EVNgIMQQAhAgyvAwsgASAERgRAQQYhAgyvAwsgAS0AAEEKRw0ZIAFBAWohAQwaCyADQgA3AyBBEiECDJQDCyABIARHDYoDQSMhAgysAwsgASAERgRAQQchAgysAwsCQAJAIAEtAABBCmsOBAEYGAAYCyABQQFqIQFBECECDJMDCyABQQFqIQEgA0Evai0AAEEBcQ0XQQAhAiADQQA2AhwgAyABNgIUIANBmSA2AhAgA0EZNgIMDKsDCyADIAMpAyAiDCAEIAFrrSIKfSILQgAgCyAMWBs3AyAgCiAMWg0YQQghAgyqAwsgASAERwRAIANBCTYCCCADIAE2AgRBFCECDJEDC0EJIQIMqQMLIAMpAyBQDa4CDEMLIAEgBEYEQEELIQIMqAMLIAEtAABBCkcNFiABQQFqIQEMFwsgA0Evai0AAEEBcUUNGQwmC0EAIQACQCADKAI4IgJFDQAgAigCUCICRQ0AIAMgAhEAACEACyAADRkMQgtBACEAAkAgAygCOCICRQ0AIAIoAlAiAkUNACADIAIRAAAhAAsgAA0aDCQLQQAhAAJAIAMoAjgiAkUNACACKAJQIgJFDQAgAyACEQAAIQALIAANGwwyCyADQS9qLQAAQQFxRQ0cDCILQQAhAAJAIAMoAjgiAkUNACACKAJUIgJFDQAgAyACEQAAIQALIAANHAxCC0EAIQACQCADKAI4IgJFDQAgAigCVCICRQ0AIAMgAhEAACEACyAADR0MIAsgASAERgRAQRMhAgygAwsCQCABLQAAIgBBCmsOBB8jIwAiCyABQQFqIQEMHwtBACEAAkAgAygCOCICRQ0AIAIoAlQiAkUNACADIAIRAAAhAAsgAA0iDEILIAEgBEYEQEEWIQIMngMLIAEtAABBwMEAai0AAEEBRw0jDIMDCwJAA0AgAS0AAEGwO2otAAAiAEEBRwRAAkAgAEECaw4CAwAnCyABQQFqIQFBISECDIYDCyAEIAFBAWoiAUcNAAtBGCECDJ0DCyADKAIEIQBBACECIANBADYCBCADIAAgAUEBaiIBEDQiAA0hDEELQQAhAAJAIAMoAjgiAkUNACACKAJUIgJFDQAgAyACEQAAIQALIAANIwwqCyABIARGBEBBHCECDJsDCyADQQo2AgggAyABNgIEQQAhAAJAIAMoAjgiAkUNACACKAJQIgJFDQAgAyACEQAAIQALIAANJUEkIQIMgQMLIAEgBEcEQANAIAEtAABBsD1qLQAAIgBBA0cEQCAAQQFrDgUYGiaCAyUmCyAEIAFBAWoiAUcNAAtBGyECDJoDC0EbIQIMmQMLA0AgAS0AAEGwP2otAAAiAEEDRwRAIABBAWsOBQ8RJxMmJwsgBCABQQFqIgFHDQALQR4hAgyYAwsgASAERwRAIANBCzYCCCADIAE2AgRBByECDP8CC0EfIQIMlwMLIAEgBEYEQEEgIQIMlwMLAkAgAS0AAEENaw4ULj8/Pz8/Pz8/Pz8/Pz8/Pz8/PwA/C0EAIQIgA0EANgIcIANBvws2AhAgA0ECNgIMIAMgAUEBajYCFAyWAwsgA0EvaiECA0AgASAERgRAQSEhAgyXAwsCQAJAAkAgAS0AACIAQQlrDhgCACkpASkpKSkpKSkpKSkpKSkpKSkpKQInCyABQQFqIQEgA0Evai0AAEEBcUUNCgwYCyABQQFqIQEMFwsgAUEBaiEBIAItAABBAnENAAtBACECIANBADYCHCADIAE2AhQgA0GfFTYCECADQQw2AgwMlQMLIAMtAC5BgAFxRQ0BC0EAIQACQCADKAI4IgJFDQAgAigCXCICRQ0AIAMgAhEAACEACyAARQ3mAiAAQRVGBEAgA0EkNgIcIAMgATYCFCADQZsbNgIQIANBFTYCDEEAIQIMlAMLQQAhAiADQQA2AhwgAyABNgIUIANBkA42AhAgA0EUNgIMDJMDC0EAIQIgA0EANgIcIAMgATYCFCADQb4gNgIQIANBAjYCDAySAwsgAygCBCEAQQAhAiADQQA2AgQgAyAAIAEgDKdqIgEQMiIARQ0rIANBBzYCHCADIAE2AhQgAyAANgIMDJEDCyADLQAuQcAAcUUNAQtBACEAAkAgAygCOCICRQ0AIAIoAlgiAkUNACADIAIRAAAhAAsgAEUNKyAAQRVGBEAgA0EKNgIcIAMgATYCFCADQesZNgIQIANBFTYCDEEAIQIMkAMLQQAhAiADQQA2AhwgAyABNgIUIANBkww2AhAgA0ETNgIMDI8DC0EAIQIgA0EANgIcIAMgATYCFCADQYIVNgIQIANBAjYCDAyOAwtBACECIANBADYCHCADIAE2AhQgA0HdFDYCECADQRk2AgwMjQMLQQAhAiADQQA2AhwgAyABNgIUIANB5h02AhAgA0EZNgIMDIwDCyAAQRVGDT1BACECIANBADYCHCADIAE2AhQgA0HQDzYCECADQSI2AgwMiwMLIAMoAgQhAEEAIQIgA0EANgIEIAMgACABEDMiAEUNKCADQQ02AhwgAyABNgIUIAMgADYCDAyKAwsgAEEVRg06QQAhAiADQQA2AhwgAyABNgIUIANB0A82AhAgA0EiNgIMDIkDCyADKAIEIQBBACECIANBADYCBCADIAAgARAzIgBFBEAgAUEBaiEBDCgLIANBDjYCHCADIAA2AgwgAyABQQFqNgIUDIgDCyAAQRVGDTdBACECIANBADYCHCADIAE2AhQgA0HQDzYCECADQSI2AgwMhwMLIAMoAgQhAEEAIQIgA0EANgIEIAMgACABEDMiAEUEQCABQQFqIQEMJwsgA0EPNgIcIAMgADYCDCADIAFBAWo2AhQMhgMLQQAhAiADQQA2AhwgAyABNgIUIANB4hc2AhAgA0EZNgIMDIUDCyAAQRVGDTNBACECIANBADYCHCADIAE2AhQgA0HWDDYCECADQSM2AgwMhAMLIAMoAgQhAEEAIQIgA0EANgIEIAMgACABEDQiAEUNJSADQRE2AhwgAyABNgIUIAMgADYCDAyDAwsgAEEVRg0wQQAhAiADQQA2AhwgAyABNgIUIANB1gw2AhAgA0EjNgIMDIIDCyADKAIEIQBBACECIANBADYCBCADIAAgARA0IgBFBEAgAUEBaiEBDCULIANBEjYCHCADIAA2AgwgAyABQQFqNgIUDIEDCyADQS9qLQAAQQFxRQ0BC0EXIQIM5gILQQAhAiADQQA2AhwgAyABNgIUIANB4hc2AhAgA0EZNgIMDP4CCyAAQTtHDQAgAUEBaiEBDAwLQQAhAiADQQA2AhwgAyABNgIUIANBkhg2AhAgA0ECNgIMDPwCCyAAQRVGDShBACECIANBADYCHCADIAE2AhQgA0HWDDYCECADQSM2AgwM+wILIANBFDYCHCADIAE2AhQgAyAANgIMDPoCCyADKAIEIQBBACECIANBADYCBCADIAAgARA0IgBFBEAgAUEBaiEBDPUCCyADQRU2AhwgAyAANgIMIAMgAUEBajYCFAz5AgsgAygCBCEAQQAhAiADQQA2AgQgAyAAIAEQNCIARQRAIAFBAWohAQzzAgsgA0EXNgIcIAMgADYCDCADIAFBAWo2AhQM+AILIABBFUYNI0EAIQIgA0EANgIcIAMgATYCFCADQdYMNgIQIANBIzYCDAz3AgsgAygCBCEAQQAhAiADQQA2AgQgAyAAIAEQNCIARQRAIAFBAWohAQwdCyADQRk2AhwgAyAANgIMIAMgAUEBajYCFAz2AgsgAygCBCEAQQAhAiADQQA2AgQgAyAAIAEQNCIARQRAIAFBAWohAQzvAgsgA0EaNgIcIAMgADYCDCADIAFBAWo2AhQM9QILIABBFUYNH0EAIQIgA0EANgIcIAMgATYCFCADQdAPNgIQIANBIjYCDAz0AgsgAygCBCEAIANBADYCBCADIAAgARAzIgBFBEAgAUEBaiEBDBsLIANBHDYCHCADIAA2AgwgAyABQQFqNgIUQQAhAgzzAgsgAygCBCEAIANBADYCBCADIAAgARAzIgBFBEAgAUEBaiEBDOsCCyADQR02AhwgAyAANgIMIAMgAUEBajYCFEEAIQIM8gILIABBO0cNASABQQFqIQELQSYhAgzXAgtBACECIANBADYCHCADIAE2AhQgA0GfFTYCECADQQw2AgwM7wILIAEgBEcEQANAIAEtAABBIEcNhAIgBCABQQFqIgFHDQALQSwhAgzvAgtBLCECDO4CCyABIARGBEBBNCECDO4CCwJAAkADQAJAIAEtAABBCmsOBAIAAAMACyAEIAFBAWoiAUcNAAtBNCECDO8CCyADKAIEIQAgA0EANgIEIAMgACABEDEiAEUNnwIgA0EyNgIcIAMgATYCFCADIAA2AgxBACECDO4CCyADKAIEIQAgA0EANgIEIAMgACABEDEiAEUEQCABQQFqIQEMnwILIANBMjYCHCADIAA2AgwgAyABQQFqNgIUQQAhAgztAgsgASAERwRAAkADQCABLQAAQTBrIgBB/wFxQQpPBEBBOiECDNcCCyADKQMgIgtCmbPmzJmz5swZVg0BIAMgC0IKfiIKNwMgIAogAK1C/wGDIgtCf4VWDQEgAyAKIAt8NwMgIAQgAUEBaiIBRw0AC0HAACECDO4CCyADKAIEIQAgA0EANgIEIAMgACABQQFqIgEQMSIADRcM4gILQcAAIQIM7AILIAEgBEYEQEHJACECDOwCCwJAA0ACQCABLQAAQQlrDhgAAqICogKpAqICogKiAqICogKiAqICogKiAqICogKiAqICogKiAqICogKiAgCiAgsgBCABQQFqIgFHDQALQckAIQIM7AILIAFBAWohASADQS9qLQAAQQFxDaUCIANBADYCHCADIAE2AhQgA0GXEDYCECADQQo2AgxBACECDOsCCyABIARHBEADQCABLQAAQSBHDRUgBCABQQFqIgFHDQALQfgAIQIM6wILQfgAIQIM6gILIANBAjoAKAw4C0EAIQIgA0EANgIcIANBvws2AhAgA0ECNgIMIAMgAUEBajYCFAzoAgtBACECDM4CC0ENIQIMzQILQRMhAgzMAgtBFSECDMsCC0EWIQIMygILQRghAgzJAgtBGSECDMgCC0EaIQIMxwILQRshAgzGAgtBHCECDMUCC0EdIQIMxAILQR4hAgzDAgtBHyECDMICC0EgIQIMwQILQSIhAgzAAgtBIyECDL8CC0ElIQIMvgILQeUAIQIMvQILIANBPTYCHCADIAE2AhQgAyAANgIMQQAhAgzVAgsgA0EbNgIcIAMgATYCFCADQaQcNgIQIANBFTYCDEEAIQIM1AILIANBIDYCHCADIAE2AhQgA0GYGjYCECADQRU2AgxBACECDNMCCyADQRM2AhwgAyABNgIUIANBmBo2AhAgA0EVNgIMQQAhAgzSAgsgA0ELNgIcIAMgATYCFCADQZgaNgIQIANBFTYCDEEAIQIM0QILIANBEDYCHCADIAE2AhQgA0GYGjYCECADQRU2AgxBACECDNACCyADQSA2AhwgAyABNgIUIANBpBw2AhAgA0EVNgIMQQAhAgzPAgsgA0ELNgIcIAMgATYCFCADQaQcNgIQIANBFTYCDEEAIQIMzgILIANBDDYCHCADIAE2AhQgA0GkHDYCECADQRU2AgxBACECDM0CC0EAIQIgA0EANgIcIAMgATYCFCADQd0ONgIQIANBEjYCDAzMAgsCQANAAkAgAS0AAEEKaw4EAAICAAILIAQgAUEBaiIBRw0AC0H9ASECDMwCCwJAAkAgAy0ANkEBRw0AQQAhAAJAIAMoAjgiAkUNACACKAJgIgJFDQAgAyACEQAAIQALIABFDQAgAEEVRw0BIANB/AE2AhwgAyABNgIUIANB3Bk2AhAgA0EVNgIMQQAhAgzNAgtB3AEhAgyzAgsgA0EANgIcIAMgATYCFCADQfkLNgIQIANBHzYCDEEAIQIMywILAkACQCADLQAoQQFrDgIEAQALQdsBIQIMsgILQdQBIQIMsQILIANBAjoAMUEAIQACQCADKAI4IgJFDQAgAigCACICRQ0AIAMgAhEAACEACyAARQRAQd0BIQIMsQILIABBFUcEQCADQQA2AhwgAyABNgIUIANBtAw2AhAgA0EQNgIMQQAhAgzKAgsgA0H7ATYCHCADIAE2AhQgA0GBGjYCECADQRU2AgxBACECDMkCCyABIARGBEBB+gEhAgzJAgsgAS0AAEHIAEYNASADQQE6ACgLQcABIQIMrgILQdoBIQIMrQILIAEgBEcEQCADQQw2AgggAyABNgIEQdkBIQIMrQILQfkBIQIMxQILIAEgBEYEQEH4ASECDMUCCyABLQAAQcgARw0EIAFBAWohAUHYASECDKsCCyABIARGBEBB9wEhAgzEAgsCQAJAIAEtAABBxQBrDhAABQUFBQUFBQUFBQUFBQUBBQsgAUEBaiEBQdYBIQIMqwILIAFBAWohAUHXASECDKoCC0H2ASECIAEgBEYNwgIgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABButUAai0AAEcNAyAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMwwILIAMoAgQhACADQgA3AwAgAyAAIAZBAWoiARAuIgBFBEBB4wEhAgyqAgsgA0H1ATYCHCADIAE2AhQgAyAANgIMQQAhAgzCAgtB9AEhAiABIARGDcECIAMoAgAiACAEIAFraiEFIAEgAGtBAWohBgJAA0AgAS0AACAAQbjVAGotAABHDQIgAEEBRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADMICCyADQYEEOwEoIAMoAgQhACADQgA3AwAgAyAAIAZBAWoiARAuIgANAwwCCyADQQA2AgALQQAhAiADQQA2AhwgAyABNgIUIANB5R82AhAgA0EINgIMDL8CC0HVASECDKUCCyADQfMBNgIcIAMgATYCFCADIAA2AgxBACECDL0CC0EAIQACQCADKAI4IgJFDQAgAigCQCICRQ0AIAMgAhEAACEACyAARQ1uIABBFUcEQCADQQA2AhwgAyABNgIUIANBgg82AhAgA0EgNgIMQQAhAgy9AgsgA0GPATYCHCADIAE2AhQgA0HsGzYCECADQRU2AgxBACECDLwCCyABIARHBEAgA0ENNgIIIAMgATYCBEHTASECDKMCC0HyASECDLsCCyABIARGBEBB8QEhAgy7AgsCQAJAAkAgAS0AAEHIAGsOCwABCAgICAgICAgCCAsgAUEBaiEBQdABIQIMowILIAFBAWohAUHRASECDKICCyABQQFqIQFB0gEhAgyhAgtB8AEhAiABIARGDbkCIAMoAgAiACAEIAFraiEGIAEgAGtBAmohBQNAIAEtAAAgAEG11QBqLQAARw0EIABBAkYNAyAAQQFqIQAgBCABQQFqIgFHDQALIAMgBjYCAAy5AgtB7wEhAiABIARGDbgCIAMoAgAiACAEIAFraiEGIAEgAGtBAWohBQNAIAEtAAAgAEGz1QBqLQAARw0DIABBAUYNAiAAQQFqIQAgBCABQQFqIgFHDQALIAMgBjYCAAy4AgtB7gEhAiABIARGDbcCIAMoAgAiACAEIAFraiEGIAEgAGtBAmohBQNAIAEtAAAgAEGw1QBqLQAARw0CIABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBjYCAAy3AgsgAygCBCEAIANCADcDACADIAAgBUEBaiIBECsiAEUNAiADQewBNgIcIAMgATYCFCADIAA2AgxBACECDLYCCyADQQA2AgALIAMoAgQhACADQQA2AgQgAyAAIAEQKyIARQ2cAiADQe0BNgIcIAMgATYCFCADIAA2AgxBACECDLQCC0HPASECDJoCC0EAIQACQCADKAI4IgJFDQAgAigCNCICRQ0AIAMgAhEAACEACwJAIAAEQCAAQRVGDQEgA0EANgIcIAMgATYCFCADQeoNNgIQIANBJjYCDEEAIQIMtAILQc4BIQIMmgILIANB6wE2AhwgAyABNgIUIANBgBs2AhAgA0EVNgIMQQAhAgyyAgsgASAERgRAQesBIQIMsgILIAEtAABBL0YEQCABQQFqIQEMAQsgA0EANgIcIAMgATYCFCADQbI4NgIQIANBCDYCDEEAIQIMsQILQc0BIQIMlwILIAEgBEcEQCADQQ42AgggAyABNgIEQcwBIQIMlwILQeoBIQIMrwILIAEgBEYEQEHpASECDK8CCyABLQAAQTBrIgBB/wFxQQpJBEAgAyAAOgAqIAFBAWohAUHLASECDJYCCyADKAIEIQAgA0EANgIEIAMgACABEC8iAEUNlwIgA0HoATYCHCADIAE2AhQgAyAANgIMQQAhAgyuAgsgASAERgRAQecBIQIMrgILAkAgAS0AAEEuRgRAIAFBAWohAQwBCyADKAIEIQAgA0EANgIEIAMgACABEC8iAEUNmAIgA0HmATYCHCADIAE2AhQgAyAANgIMQQAhAgyuAgtBygEhAgyUAgsgASAERgRAQeUBIQIMrQILQQAhAEEBIQVBASEHQQAhAgJAAkACQAJAAkACfwJAAkACQAJAAkACQAJAIAEtAABBMGsOCgoJAAECAwQFBggLC0ECDAYLQQMMBQtBBAwEC0EFDAMLQQYMAgtBBwwBC0EICyECQQAhBUEAIQcMAgtBCSECQQEhAEEAIQVBACEHDAELQQAhBUEBIQILIAMgAjoAKyABQQFqIQECQAJAIAMtAC5BEHENAAJAAkACQCADLQAqDgMBAAIECyAHRQ0DDAILIAANAQwCCyAFRQ0BCyADKAIEIQAgA0EANgIEIAMgACABEC8iAEUNAiADQeIBNgIcIAMgATYCFCADIAA2AgxBACECDK8CCyADKAIEIQAgA0EANgIEIAMgACABEC8iAEUNmgIgA0HjATYCHCADIAE2AhQgAyAANgIMQQAhAgyuAgsgAygCBCEAIANBADYCBCADIAAgARAvIgBFDZgCIANB5AE2AhwgAyABNgIUIAMgADYCDAytAgtByQEhAgyTAgtBACEAAkAgAygCOCICRQ0AIAIoAkQiAkUNACADIAIRAAAhAAsCQCAABEAgAEEVRg0BIANBADYCHCADIAE2AhQgA0GkDTYCECADQSE2AgxBACECDK0CC0HIASECDJMCCyADQeEBNgIcIAMgATYCFCADQdAaNgIQIANBFTYCDEEAIQIMqwILIAEgBEYEQEHhASECDKsCCwJAIAEtAABBIEYEQCADQQA7ATQgAUEBaiEBDAELIANBADYCHCADIAE2AhQgA0GZETYCECADQQk2AgxBACECDKsCC0HHASECDJECCyABIARGBEBB4AEhAgyqAgsCQCABLQAAQTBrQf8BcSICQQpJBEAgAUEBaiEBAkAgAy8BNCIAQZkzSw0AIAMgAEEKbCIAOwE0IABB/v8DcSACQf//A3NLDQAgAyAAIAJqOwE0DAILQQAhAiADQQA2AhwgAyABNgIUIANBlR42AhAgA0ENNgIMDKsCCyADQQA2AhwgAyABNgIUIANBlR42AhAgA0ENNgIMQQAhAgyqAgtBxgEhAgyQAgsgASAERgRAQd8BIQIMqQILAkAgAS0AAEEwa0H/AXEiAkEKSQRAIAFBAWohAQJAIAMvATQiAEGZM0sNACADIABBCmwiADsBNCAAQf7/A3EgAkH//wNzSw0AIAMgACACajsBNAwCC0EAIQIgA0EANgIcIAMgATYCFCADQZUeNgIQIANBDTYCDAyqAgsgA0EANgIcIAMgATYCFCADQZUeNgIQIANBDTYCDEEAIQIMqQILQcUBIQIMjwILIAEgBEYEQEHeASECDKgCCwJAIAEtAABBMGtB/wFxIgJBCkkEQCABQQFqIQECQCADLwE0IgBBmTNLDQAgAyAAQQpsIgA7ATQgAEH+/wNxIAJB//8Dc0sNACADIAAgAmo7ATQMAgtBACECIANBADYCHCADIAE2AhQgA0GVHjYCECADQQ02AgwMqQILIANBADYCHCADIAE2AhQgA0GVHjYCECADQQ02AgxBACECDKgCC0HEASECDI4CCyABIARGBEBB3QEhAgynAgsCQAJAAkACQCABLQAAQQprDhcCAwMAAwMDAwMDAwMDAwMDAwMDAwMDAQMLIAFBAWoMBQsgAUEBaiEBQcMBIQIMjwILIAFBAWohASADQS9qLQAAQQFxDQggA0EANgIcIAMgATYCFCADQY0LNgIQIANBDTYCDEEAIQIMpwILIANBADYCHCADIAE2AhQgA0GNCzYCECADQQ02AgxBACECDKYCCyABIARHBEAgA0EPNgIIIAMgATYCBEEBIQIMjQILQdwBIQIMpQILAkACQANAAkAgAS0AAEEKaw4EAgAAAwALIAQgAUEBaiIBRw0AC0HbASECDKYCCyADKAIEIQAgA0EANgIEIAMgACABEC0iAEUEQCABQQFqIQEMBAsgA0HaATYCHCADIAA2AgwgAyABQQFqNgIUQQAhAgylAgsgAygCBCEAIANBADYCBCADIAAgARAtIgANASABQQFqCyEBQcEBIQIMigILIANB2QE2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIMogILQcIBIQIMiAILIANBL2otAABBAXENASADQQA2AhwgAyABNgIUIANB5Bw2AhAgA0EZNgIMQQAhAgygAgsgASAERgRAQdkBIQIMoAILAkACQAJAIAEtAABBCmsOBAECAgACCyABQQFqIQEMAgsgAUEBaiEBDAELIAMtAC5BwABxRQ0BC0EAIQACQCADKAI4IgJFDQAgAigCPCICRQ0AIAMgAhEAACEACyAARQ2gASAAQRVGBEAgA0HZADYCHCADIAE2AhQgA0G3GjYCECADQRU2AgxBACECDJ8CCyADQQA2AhwgAyABNgIUIANBgA02AhAgA0EbNgIMQQAhAgyeAgsgA0EANgIcIAMgATYCFCADQdwoNgIQIANBAjYCDEEAIQIMnQILIAEgBEcEQCADQQw2AgggAyABNgIEQb8BIQIMhAILQdgBIQIMnAILIAEgBEYEQEHXASECDJwCCwJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkAgAS0AAEHBAGsOFQABAgNaBAUGWlpaBwgJCgsMDQ4PEFoLIAFBAWohAUH7ACECDJICCyABQQFqIQFB/AAhAgyRAgsgAUEBaiEBQYEBIQIMkAILIAFBAWohAUGFASECDI8CCyABQQFqIQFBhgEhAgyOAgsgAUEBaiEBQYkBIQIMjQILIAFBAWohAUGKASECDIwCCyABQQFqIQFBjQEhAgyLAgsgAUEBaiEBQZYBIQIMigILIAFBAWohAUGXASECDIkCCyABQQFqIQFBmAEhAgyIAgsgAUEBaiEBQaUBIQIMhwILIAFBAWohAUGmASECDIYCCyABQQFqIQFBrAEhAgyFAgsgAUEBaiEBQbQBIQIMhAILIAFBAWohAUG3ASECDIMCCyABQQFqIQFBvgEhAgyCAgsgASAERgRAQdYBIQIMmwILIAEtAABBzgBHDUggAUEBaiEBQb0BIQIMgQILIAEgBEYEQEHVASECDJoCCwJAAkACQCABLQAAQcIAaw4SAEpKSkpKSkpKSgFKSkpKSkoCSgsgAUEBaiEBQbgBIQIMggILIAFBAWohAUG7ASECDIECCyABQQFqIQFBvAEhAgyAAgtB1AEhAiABIARGDZgCIAMoAgAiACAEIAFraiEFIAEgAGtBB2ohBgJAA0AgAS0AACAAQajVAGotAABHDUUgAEEHRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADJkCCyADQQA2AgAgBkEBaiEBQRsMRQsgASAERgRAQdMBIQIMmAILAkACQCABLQAAQckAaw4HAEdHR0dHAUcLIAFBAWohAUG5ASECDP8BCyABQQFqIQFBugEhAgz+AQtB0gEhAiABIARGDZYCIAMoAgAiACAEIAFraiEFIAEgAGtBAWohBgJAA0AgAS0AACAAQabVAGotAABHDUMgAEEBRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADJcCCyADQQA2AgAgBkEBaiEBQQ8MQwtB0QEhAiABIARGDZUCIAMoAgAiACAEIAFraiEFIAEgAGtBAWohBgJAA0AgAS0AACAAQaTVAGotAABHDUIgAEEBRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADJYCCyADQQA2AgAgBkEBaiEBQSAMQgtB0AEhAiABIARGDZQCIAMoAgAiACAEIAFraiEFIAEgAGtBAmohBgJAA0AgAS0AACAAQaHVAGotAABHDUEgAEECRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADJUCCyADQQA2AgAgBkEBaiEBQRIMQQsgASAERgRAQc8BIQIMlAILAkACQCABLQAAQcUAaw4OAENDQ0NDQ0NDQ0NDQwFDCyABQQFqIQFBtQEhAgz7AQsgAUEBaiEBQbYBIQIM+gELQc4BIQIgASAERg2SAiADKAIAIgAgBCABa2ohBSABIABrQQJqIQYCQANAIAEtAAAgAEGe1QBqLQAARw0/IABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyTAgsgA0EANgIAIAZBAWohAUEHDD8LQc0BIQIgASAERg2RAiADKAIAIgAgBCABa2ohBSABIABrQQVqIQYCQANAIAEtAAAgAEGY1QBqLQAARw0+IABBBUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAySAgsgA0EANgIAIAZBAWohAUEoDD4LIAEgBEYEQEHMASECDJECCwJAAkACQCABLQAAQcUAaw4RAEFBQUFBQUFBQQFBQUFBQQJBCyABQQFqIQFBsQEhAgz5AQsgAUEBaiEBQbIBIQIM+AELIAFBAWohAUGzASECDPcBC0HLASECIAEgBEYNjwIgAygCACIAIAQgAWtqIQUgASAAa0EGaiEGAkADQCABLQAAIABBkdUAai0AAEcNPCAAQQZGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMkAILIANBADYCACAGQQFqIQFBGgw8C0HKASECIAEgBEYNjgIgAygCACIAIAQgAWtqIQUgASAAa0EDaiEGAkADQCABLQAAIABBjdUAai0AAEcNOyAAQQNGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMjwILIANBADYCACAGQQFqIQFBIQw7CyABIARGBEBByQEhAgyOAgsCQAJAIAEtAABBwQBrDhQAPT09PT09PT09PT09PT09PT09AT0LIAFBAWohAUGtASECDPUBCyABQQFqIQFBsAEhAgz0AQsgASAERgRAQcgBIQIMjQILAkACQCABLQAAQdUAaw4LADw8PDw8PDw8PAE8CyABQQFqIQFBrgEhAgz0AQsgAUEBaiEBQa8BIQIM8wELQccBIQIgASAERg2LAiADKAIAIgAgBCABa2ohBSABIABrQQhqIQYCQANAIAEtAAAgAEGE1QBqLQAARw04IABBCEYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyMAgsgA0EANgIAIAZBAWohAUEqDDgLIAEgBEYEQEHGASECDIsCCyABLQAAQdAARw04IAFBAWohAUElDDcLQcUBIQIgASAERg2JAiADKAIAIgAgBCABa2ohBSABIABrQQJqIQYCQANAIAEtAAAgAEGB1QBqLQAARw02IABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyKAgsgA0EANgIAIAZBAWohAUEODDYLIAEgBEYEQEHEASECDIkCCyABLQAAQcUARw02IAFBAWohAUGrASECDO8BCyABIARGBEBBwwEhAgyIAgsCQAJAAkACQCABLQAAQcIAaw4PAAECOTk5OTk5OTk5OTkDOQsgAUEBaiEBQacBIQIM8QELIAFBAWohAUGoASECDPABCyABQQFqIQFBqQEhAgzvAQsgAUEBaiEBQaoBIQIM7gELQcIBIQIgASAERg2GAiADKAIAIgAgBCABa2ohBSABIABrQQJqIQYCQANAIAEtAAAgAEH+1ABqLQAARw0zIABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyHAgsgA0EANgIAIAZBAWohAUEUDDMLQcEBIQIgASAERg2FAiADKAIAIgAgBCABa2ohBSABIABrQQRqIQYCQANAIAEtAAAgAEH51ABqLQAARw0yIABBBEYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyGAgsgA0EANgIAIAZBAWohAUErDDILQcABIQIgASAERg2EAiADKAIAIgAgBCABa2ohBSABIABrQQJqIQYCQANAIAEtAAAgAEH21ABqLQAARw0xIABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyFAgsgA0EANgIAIAZBAWohAUEsDDELQb8BIQIgASAERg2DAiADKAIAIgAgBCABa2ohBSABIABrQQJqIQYCQANAIAEtAAAgAEGh1QBqLQAARw0wIABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyEAgsgA0EANgIAIAZBAWohAUERDDALQb4BIQIgASAERg2CAiADKAIAIgAgBCABa2ohBSABIABrQQNqIQYCQANAIAEtAAAgAEHy1ABqLQAARw0vIABBA0YNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyDAgsgA0EANgIAIAZBAWohAUEuDC8LIAEgBEYEQEG9ASECDIICCwJAAkACQAJAAkAgAS0AAEHBAGsOFQA0NDQ0NDQ0NDQ0ATQ0AjQ0AzQ0BDQLIAFBAWohAUGbASECDOwBCyABQQFqIQFBnAEhAgzrAQsgAUEBaiEBQZ0BIQIM6gELIAFBAWohAUGiASECDOkBCyABQQFqIQFBpAEhAgzoAQsgASAERgRAQbwBIQIMgQILAkACQCABLQAAQdIAaw4DADABMAsgAUEBaiEBQaMBIQIM6AELIAFBAWohAUEEDC0LQbsBIQIgASAERg3/ASADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEHw1ABqLQAARw0sIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyAAgsgA0EANgIAIAZBAWohAUEdDCwLIAEgBEYEQEG6ASECDP8BCwJAAkAgAS0AAEHJAGsOBwEuLi4uLgAuCyABQQFqIQFBoQEhAgzmAQsgAUEBaiEBQSIMKwsgASAERgRAQbkBIQIM/gELIAEtAABB0ABHDSsgAUEBaiEBQaABIQIM5AELIAEgBEYEQEG4ASECDP0BCwJAAkAgAS0AAEHGAGsOCwAsLCwsLCwsLCwBLAsgAUEBaiEBQZ4BIQIM5AELIAFBAWohAUGfASECDOMBC0G3ASECIAEgBEYN+wEgAygCACIAIAQgAWtqIQUgASAAa0EDaiEGAkADQCABLQAAIABB7NQAai0AAEcNKCAAQQNGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM/AELIANBADYCACAGQQFqIQFBDQwoC0G2ASECIAEgBEYN+gEgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABBodUAai0AAEcNJyAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM+wELIANBADYCACAGQQFqIQFBDAwnC0G1ASECIAEgBEYN+QEgAygCACIAIAQgAWtqIQUgASAAa0EBaiEGAkADQCABLQAAIABB6tQAai0AAEcNJiAAQQFGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM+gELIANBADYCACAGQQFqIQFBAwwmC0G0ASECIAEgBEYN+AEgAygCACIAIAQgAWtqIQUgASAAa0EBaiEGAkADQCABLQAAIABB6NQAai0AAEcNJSAAQQFGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM+QELIANBADYCACAGQQFqIQFBJgwlCyABIARGBEBBswEhAgz4AQsCQAJAIAEtAABB1ABrDgIAAScLIAFBAWohAUGZASECDN8BCyABQQFqIQFBmgEhAgzeAQtBsgEhAiABIARGDfYBIAMoAgAiACAEIAFraiEFIAEgAGtBAWohBgJAA0AgAS0AACAAQebUAGotAABHDSMgAEEBRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADPcBCyADQQA2AgAgBkEBaiEBQScMIwtBsQEhAiABIARGDfUBIAMoAgAiACAEIAFraiEFIAEgAGtBAWohBgJAA0AgAS0AACAAQeTUAGotAABHDSIgAEEBRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADPYBCyADQQA2AgAgBkEBaiEBQRwMIgtBsAEhAiABIARGDfQBIAMoAgAiACAEIAFraiEFIAEgAGtBBWohBgJAA0AgAS0AACAAQd7UAGotAABHDSEgAEEFRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADPUBCyADQQA2AgAgBkEBaiEBQQYMIQtBrwEhAiABIARGDfMBIAMoAgAiACAEIAFraiEFIAEgAGtBBGohBgJAA0AgAS0AACAAQdnUAGotAABHDSAgAEEERg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADPQBCyADQQA2AgAgBkEBaiEBQRkMIAsgASAERgRAQa4BIQIM8wELAkACQAJAAkAgAS0AAEEtaw4jACQkJCQkJCQkJCQkJCQkJCQkJCQkJCQkASQkJCQkAiQkJAMkCyABQQFqIQFBjgEhAgzcAQsgAUEBaiEBQY8BIQIM2wELIAFBAWohAUGUASECDNoBCyABQQFqIQFBlQEhAgzZAQtBrQEhAiABIARGDfEBIAMoAgAiACAEIAFraiEFIAEgAGtBAWohBgJAA0AgAS0AACAAQdfUAGotAABHDR4gAEEBRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADPIBCyADQQA2AgAgBkEBaiEBQQsMHgsgASAERgRAQawBIQIM8QELAkACQCABLQAAQcEAaw4DACABIAsgAUEBaiEBQZABIQIM2AELIAFBAWohAUGTASECDNcBCyABIARGBEBBqwEhAgzwAQsCQAJAIAEtAABBwQBrDg8AHx8fHx8fHx8fHx8fHwEfCyABQQFqIQFBkQEhAgzXAQsgAUEBaiEBQZIBIQIM1gELIAEgBEYEQEGqASECDO8BCyABLQAAQcwARw0cIAFBAWohAUEKDBsLQakBIQIgASAERg3tASADKAIAIgAgBCABa2ohBSABIABrQQVqIQYCQANAIAEtAAAgAEHR1ABqLQAARw0aIABBBUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzuAQsgA0EANgIAIAZBAWohAUEeDBoLQagBIQIgASAERg3sASADKAIAIgAgBCABa2ohBSABIABrQQZqIQYCQANAIAEtAAAgAEHK1ABqLQAARw0ZIABBBkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAztAQsgA0EANgIAIAZBAWohAUEVDBkLQacBIQIgASAERg3rASADKAIAIgAgBCABa2ohBSABIABrQQJqIQYCQANAIAEtAAAgAEHH1ABqLQAARw0YIABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzsAQsgA0EANgIAIAZBAWohAUEXDBgLQaYBIQIgASAERg3qASADKAIAIgAgBCABa2ohBSABIABrQQVqIQYCQANAIAEtAAAgAEHB1ABqLQAARw0XIABBBUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzrAQsgA0EANgIAIAZBAWohAUEYDBcLIAEgBEYEQEGlASECDOoBCwJAAkAgAS0AAEHJAGsOBwAZGRkZGQEZCyABQQFqIQFBiwEhAgzRAQsgAUEBaiEBQYwBIQIM0AELQaQBIQIgASAERg3oASADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEGm1QBqLQAARw0VIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzpAQsgA0EANgIAIAZBAWohAUEJDBULQaMBIQIgASAERg3nASADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEGk1QBqLQAARw0UIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzoAQsgA0EANgIAIAZBAWohAUEfDBQLQaIBIQIgASAERg3mASADKAIAIgAgBCABa2ohBSABIABrQQJqIQYCQANAIAEtAAAgAEG+1ABqLQAARw0TIABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAznAQsgA0EANgIAIAZBAWohAUECDBMLQaEBIQIgASAERg3lASADKAIAIgAgBCABa2ohBSABIABrQQFqIQYDQCABLQAAIABBvNQAai0AAEcNESAAQQFGDQIgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM5QELIAEgBEYEQEGgASECDOUBC0EBIAEtAABB3wBHDREaIAFBAWohAUGHASECDMsBCyADQQA2AgAgBkEBaiEBQYgBIQIMygELQZ8BIQIgASAERg3iASADKAIAIgAgBCABa2ohBSABIABrQQhqIQYCQANAIAEtAAAgAEGE1QBqLQAARw0PIABBCEYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzjAQsgA0EANgIAIAZBAWohAUEpDA8LQZ4BIQIgASAERg3hASADKAIAIgAgBCABa2ohBSABIABrQQNqIQYCQANAIAEtAAAgAEG41ABqLQAARw0OIABBA0YNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAziAQsgA0EANgIAIAZBAWohAUEtDA4LIAEgBEYEQEGdASECDOEBCyABLQAAQcUARw0OIAFBAWohAUGEASECDMcBCyABIARGBEBBnAEhAgzgAQsCQAJAIAEtAABBzABrDggADw8PDw8PAQ8LIAFBAWohAUGCASECDMcBCyABQQFqIQFBgwEhAgzGAQtBmwEhAiABIARGDd4BIAMoAgAiACAEIAFraiEFIAEgAGtBBGohBgJAA0AgAS0AACAAQbPUAGotAABHDQsgAEEERg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADN8BCyADQQA2AgAgBkEBaiEBQSMMCwtBmgEhAiABIARGDd0BIAMoAgAiACAEIAFraiEFIAEgAGtBAmohBgJAA0AgAS0AACAAQbDUAGotAABHDQogAEECRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADN4BCyADQQA2AgAgBkEBaiEBQQAMCgsgASAERgRAQZkBIQIM3QELAkACQCABLQAAQcgAaw4IAAwMDAwMDAEMCyABQQFqIQFB/QAhAgzEAQsgAUEBaiEBQYABIQIMwwELIAEgBEYEQEGYASECDNwBCwJAAkAgAS0AAEHOAGsOAwALAQsLIAFBAWohAUH+ACECDMMBCyABQQFqIQFB/wAhAgzCAQsgASAERgRAQZcBIQIM2wELIAEtAABB2QBHDQggAUEBaiEBQQgMBwtBlgEhAiABIARGDdkBIAMoAgAiACAEIAFraiEFIAEgAGtBA2ohBgJAA0AgAS0AACAAQazUAGotAABHDQYgAEEDRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADNoBCyADQQA2AgAgBkEBaiEBQQUMBgtBlQEhAiABIARGDdgBIAMoAgAiACAEIAFraiEFIAEgAGtBBWohBgJAA0AgAS0AACAAQabUAGotAABHDQUgAEEFRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADNkBCyADQQA2AgAgBkEBaiEBQRYMBQtBlAEhAiABIARGDdcBIAMoAgAiACAEIAFraiEFIAEgAGtBAmohBgJAA0AgAS0AACAAQaHVAGotAABHDQQgAEECRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADNgBCyADQQA2AgAgBkEBaiEBQRAMBAsgASAERgRAQZMBIQIM1wELAkACQCABLQAAQcMAaw4MAAYGBgYGBgYGBgYBBgsgAUEBaiEBQfkAIQIMvgELIAFBAWohAUH6ACECDL0BC0GSASECIAEgBEYN1QEgAygCACIAIAQgAWtqIQUgASAAa0EFaiEGAkADQCABLQAAIABBoNQAai0AAEcNAiAAQQVGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM1gELIANBADYCACAGQQFqIQFBJAwCCyADQQA2AgAMAgsgASAERgRAQZEBIQIM1AELIAEtAABBzABHDQEgAUEBaiEBQRMLOgApIAMoAgQhACADQQA2AgQgAyAAIAEQLiIADQIMAQtBACECIANBADYCHCADIAE2AhQgA0H+HzYCECADQQY2AgwM0QELQfgAIQIMtwELIANBkAE2AhwgAyABNgIUIAMgADYCDEEAIQIMzwELQQAhAAJAIAMoAjgiAkUNACACKAJAIgJFDQAgAyACEQAAIQALIABFDQAgAEEVRg0BIANBADYCHCADIAE2AhQgA0GCDzYCECADQSA2AgxBACECDM4BC0H3ACECDLQBCyADQY8BNgIcIAMgATYCFCADQewbNgIQIANBFTYCDEEAIQIMzAELIAEgBEYEQEGPASECDMwBCwJAIAEtAABBIEYEQCABQQFqIQEMAQsgA0EANgIcIAMgATYCFCADQZsfNgIQIANBBjYCDEEAIQIMzAELQQIhAgyyAQsDQCABLQAAQSBHDQIgBCABQQFqIgFHDQALQY4BIQIMygELIAEgBEYEQEGNASECDMoBCwJAIAEtAABBCWsOBEoAAEoAC0H1ACECDLABCyADLQApQQVGBEBB9gAhAgywAQtB9AAhAgyvAQsgASAERgRAQYwBIQIMyAELIANBEDYCCCADIAE2AgQMCgsgASAERgRAQYsBIQIMxwELAkAgAS0AAEEJaw4ERwAARwALQfMAIQIMrQELIAEgBEcEQCADQRA2AgggAyABNgIEQfEAIQIMrQELQYoBIQIMxQELAkAgASAERwRAA0AgAS0AAEGg0ABqLQAAIgBBA0cEQAJAIABBAWsOAkkABAtB8AAhAgyvAQsgBCABQQFqIgFHDQALQYgBIQIMxgELQYgBIQIMxQELIANBADYCHCADIAE2AhQgA0HbIDYCECADQQc2AgxBACECDMQBCyABIARGBEBBiQEhAgzEAQsCQAJAAkAgAS0AAEGg0gBqLQAAQQFrDgNGAgABC0HyACECDKwBCyADQQA2AhwgAyABNgIUIANBtBI2AhAgA0EHNgIMQQAhAgzEAQtB6gAhAgyqAQsgASAERwRAIAFBAWohAUHvACECDKoBC0GHASECDMIBCyAEIAEiAEYEQEGGASECDMIBCyAALQAAIgFBL0YEQCAAQQFqIQFB7gAhAgypAQsgAUEJayICQRdLDQEgACEBQQEgAnRBm4CABHENQQwBCyAEIAEiAEYEQEGFASECDMEBCyAALQAAQS9HDQAgAEEBaiEBDAMLQQAhAiADQQA2AhwgAyAANgIUIANB2yA2AhAgA0EHNgIMDL8BCwJAAkACQAJAAkADQCABLQAAQaDOAGotAAAiAEEFRwRAAkACQCAAQQFrDghHBQYHCAAEAQgLQesAIQIMrQELIAFBAWohAUHtACECDKwBCyAEIAFBAWoiAUcNAAtBhAEhAgzDAQsgAUEBagwUCyADKAIEIQAgA0EANgIEIAMgACABECwiAEUNHiADQdsANgIcIAMgATYCFCADIAA2AgxBACECDMEBCyADKAIEIQAgA0EANgIEIAMgACABECwiAEUNHiADQd0ANgIcIAMgATYCFCADIAA2AgxBACECDMABCyADKAIEIQAgA0EANgIEIAMgACABECwiAEUNHiADQfoANgIcIAMgATYCFCADIAA2AgxBACECDL8BCyADQQA2AhwgAyABNgIUIANB+Q82AhAgA0EHNgIMQQAhAgy+AQsgASAERgRAQYMBIQIMvgELAkAgAS0AAEGgzgBqLQAAQQFrDgg+BAUGAAgCAwcLIAFBAWohAQtBAyECDKMBCyABQQFqDA0LQQAhAiADQQA2AhwgA0HREjYCECADQQc2AgwgAyABQQFqNgIUDLoBCyADKAIEIQAgA0EANgIEIAMgACABECwiAEUNFiADQdsANgIcIAMgATYCFCADIAA2AgxBACECDLkBCyADKAIEIQAgA0EANgIEIAMgACABECwiAEUNFiADQd0ANgIcIAMgATYCFCADIAA2AgxBACECDLgBCyADKAIEIQAgA0EANgIEIAMgACABECwiAEUNFiADQfoANgIcIAMgATYCFCADIAA2AgxBACECDLcBCyADQQA2AhwgAyABNgIUIANB+Q82AhAgA0EHNgIMQQAhAgy2AQtB7AAhAgycAQsgASAERgRAQYIBIQIMtQELIAFBAWoMAgsgASAERgRAQYEBIQIMtAELIAFBAWoMAQsgASAERg0BIAFBAWoLIQFBBCECDJgBC0GAASECDLABCwNAIAEtAABBoMwAai0AACIAQQJHBEAgAEEBRwRAQekAIQIMmQELDDELIAQgAUEBaiIBRw0AC0H/ACECDK8BCyABIARGBEBB/gAhAgyvAQsCQCABLQAAQQlrDjcvAwYvBAYGBgYGBgYGBgYGBgYGBgYGBgUGBgIGBgYGBgYGBgYGBgYGBgYGBgYGBgYGBgYGBgYABgsgAUEBagshAUEFIQIMlAELIAFBAWoMBgsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDQggA0HbADYCHCADIAE2AhQgAyAANgIMQQAhAgyrAQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDQggA0HdADYCHCADIAE2AhQgAyAANgIMQQAhAgyqAQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDQggA0H6ADYCHCADIAE2AhQgAyAANgIMQQAhAgypAQsgA0EANgIcIAMgATYCFCADQY0UNgIQIANBBzYCDEEAIQIMqAELAkACQAJAAkADQCABLQAAQaDKAGotAAAiAEEFRwRAAkAgAEEBaw4GLgMEBQYABgtB6AAhAgyUAQsgBCABQQFqIgFHDQALQf0AIQIMqwELIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0HIANB2wA2AhwgAyABNgIUIAMgADYCDEEAIQIMqgELIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0HIANB3QA2AhwgAyABNgIUIAMgADYCDEEAIQIMqQELIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0HIANB+gA2AhwgAyABNgIUIAMgADYCDEEAIQIMqAELIANBADYCHCADIAE2AhQgA0HkCDYCECADQQc2AgxBACECDKcBCyABIARGDQEgAUEBagshAUEGIQIMjAELQfwAIQIMpAELAkACQAJAAkADQCABLQAAQaDIAGotAAAiAEEFRwRAIABBAWsOBCkCAwQFCyAEIAFBAWoiAUcNAAtB+wAhAgynAQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDQMgA0HbADYCHCADIAE2AhQgAyAANgIMQQAhAgymAQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDQMgA0HdADYCHCADIAE2AhQgAyAANgIMQQAhAgylAQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDQMgA0H6ADYCHCADIAE2AhQgAyAANgIMQQAhAgykAQsgA0EANgIcIAMgATYCFCADQbwKNgIQIANBBzYCDEEAIQIMowELQc8AIQIMiQELQdEAIQIMiAELQecAIQIMhwELIAEgBEYEQEH6ACECDKABCwJAIAEtAABBCWsOBCAAACAACyABQQFqIQFB5gAhAgyGAQsgASAERgRAQfkAIQIMnwELAkAgAS0AAEEJaw4EHwAAHwALQQAhAAJAIAMoAjgiAkUNACACKAI4IgJFDQAgAyACEQAAIQALIABFBEBB4gEhAgyGAQsgAEEVRwRAIANBADYCHCADIAE2AhQgA0HJDTYCECADQRo2AgxBACECDJ8BCyADQfgANgIcIAMgATYCFCADQeoaNgIQIANBFTYCDEEAIQIMngELIAEgBEcEQCADQQ02AgggAyABNgIEQeQAIQIMhQELQfcAIQIMnQELIAEgBEYEQEH2ACECDJ0BCwJAAkACQCABLQAAQcgAaw4LAAELCwsLCwsLCwILCyABQQFqIQFB3QAhAgyFAQsgAUEBaiEBQeAAIQIMhAELIAFBAWohAUHjACECDIMBC0H1ACECIAEgBEYNmwEgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABBtdUAai0AAEcNCCAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMnAELIAMoAgQhACADQgA3AwAgAyAAIAZBAWoiARArIgAEQCADQfQANgIcIAMgATYCFCADIAA2AgxBACECDJwBC0HiACECDIIBC0EAIQACQCADKAI4IgJFDQAgAigCNCICRQ0AIAMgAhEAACEACwJAIAAEQCAAQRVGDQEgA0EANgIcIAMgATYCFCADQeoNNgIQIANBJjYCDEEAIQIMnAELQeEAIQIMggELIANB8wA2AhwgAyABNgIUIANBgBs2AhAgA0EVNgIMQQAhAgyaAQsgAy0AKSIAQSNrQQtJDQkCQCAAQQZLDQBBASAAdEHKAHFFDQAMCgtBACECIANBADYCHCADIAE2AhQgA0HtCTYCECADQQg2AgwMmQELQfIAIQIgASAERg2YASADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEGz1QBqLQAARw0FIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyZAQsgAygCBCEAIANCADcDACADIAAgBkEBaiIBECsiAARAIANB8QA2AhwgAyABNgIUIAMgADYCDEEAIQIMmQELQd8AIQIMfwtBACEAAkAgAygCOCICRQ0AIAIoAjQiAkUNACADIAIRAAAhAAsCQCAABEAgAEEVRg0BIANBADYCHCADIAE2AhQgA0HqDTYCECADQSY2AgxBACECDJkBC0HeACECDH8LIANB8AA2AhwgAyABNgIUIANBgBs2AhAgA0EVNgIMQQAhAgyXAQsgAy0AKUEhRg0GIANBADYCHCADIAE2AhQgA0GRCjYCECADQQg2AgxBACECDJYBC0HvACECIAEgBEYNlQEgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABBsNUAai0AAEcNAiAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMlgELIAMoAgQhACADQgA3AwAgAyAAIAZBAWoiARArIgBFDQIgA0HtADYCHCADIAE2AhQgAyAANgIMQQAhAgyVAQsgA0EANgIACyADKAIEIQAgA0EANgIEIAMgACABECsiAEUNgAEgA0HuADYCHCADIAE2AhQgAyAANgIMQQAhAgyTAQtB3AAhAgx5C0EAIQACQCADKAI4IgJFDQAgAigCNCICRQ0AIAMgAhEAACEACwJAIAAEQCAAQRVGDQEgA0EANgIcIAMgATYCFCADQeoNNgIQIANBJjYCDEEAIQIMkwELQdsAIQIMeQsgA0HsADYCHCADIAE2AhQgA0GAGzYCECADQRU2AgxBACECDJEBCyADLQApIgBBI0kNACAAQS5GDQAgA0EANgIcIAMgATYCFCADQckJNgIQIANBCDYCDEEAIQIMkAELQdoAIQIMdgsgASAERgRAQesAIQIMjwELAkAgAS0AAEEvRgRAIAFBAWohAQwBCyADQQA2AhwgAyABNgIUIANBsjg2AhAgA0EINgIMQQAhAgyPAQtB2QAhAgx1CyABIARHBEAgA0EONgIIIAMgATYCBEHYACECDHULQeoAIQIMjQELIAEgBEYEQEHpACECDI0BCyABLQAAQTBrIgBB/wFxQQpJBEAgAyAAOgAqIAFBAWohAUHXACECDHQLIAMoAgQhACADQQA2AgQgAyAAIAEQLyIARQ16IANB6AA2AhwgAyABNgIUIAMgADYCDEEAIQIMjAELIAEgBEYEQEHnACECDIwBCwJAIAEtAABBLkYEQCABQQFqIQEMAQsgAygCBCEAIANBADYCBCADIAAgARAvIgBFDXsgA0HmADYCHCADIAE2AhQgAyAANgIMQQAhAgyMAQtB1gAhAgxyCyABIARGBEBB5QAhAgyLAQtBACEAQQEhBUEBIQdBACECAkACQAJAAkACQAJ/AkACQAJAAkACQAJAAkAgAS0AAEEwaw4KCgkAAQIDBAUGCAsLQQIMBgtBAwwFC0EEDAQLQQUMAwtBBgwCC0EHDAELQQgLIQJBACEFQQAhBwwCC0EJIQJBASEAQQAhBUEAIQcMAQtBACEFQQEhAgsgAyACOgArIAFBAWohAQJAAkAgAy0ALkEQcQ0AAkACQAJAIAMtACoOAwEAAgQLIAdFDQMMAgsgAA0BDAILIAVFDQELIAMoAgQhACADQQA2AgQgAyAAIAEQLyIARQ0CIANB4gA2AhwgAyABNgIUIAMgADYCDEEAIQIMjQELIAMoAgQhACADQQA2AgQgAyAAIAEQLyIARQ19IANB4wA2AhwgAyABNgIUIAMgADYCDEEAIQIMjAELIAMoAgQhACADQQA2AgQgAyAAIAEQLyIARQ17IANB5AA2AhwgAyABNgIUIAMgADYCDAyLAQtB1AAhAgxxCyADLQApQSJGDYYBQdMAIQIMcAtBACEAAkAgAygCOCICRQ0AIAIoAkQiAkUNACADIAIRAAAhAAsgAEUEQEHVACECDHALIABBFUcEQCADQQA2AhwgAyABNgIUIANBpA02AhAgA0EhNgIMQQAhAgyJAQsgA0HhADYCHCADIAE2AhQgA0HQGjYCECADQRU2AgxBACECDIgBCyABIARGBEBB4AAhAgyIAQsCQAJAAkACQAJAIAEtAABBCmsOBAEEBAAECyABQQFqIQEMAQsgAUEBaiEBIANBL2otAABBAXFFDQELQdIAIQIMcAsgA0EANgIcIAMgATYCFCADQbYRNgIQIANBCTYCDEEAIQIMiAELIANBADYCHCADIAE2AhQgA0G2ETYCECADQQk2AgxBACECDIcBCyABIARGBEBB3wAhAgyHAQsgAS0AAEEKRgRAIAFBAWohAQwJCyADLQAuQcAAcQ0IIANBADYCHCADIAE2AhQgA0G2ETYCECADQQI2AgxBACECDIYBCyABIARGBEBB3QAhAgyGAQsgAS0AACICQQ1GBEAgAUEBaiEBQdAAIQIMbQsgASEAIAJBCWsOBAUBAQUBCyAEIAEiAEYEQEHcACECDIUBCyAALQAAQQpHDQAgAEEBagwCC0EAIQIgA0EANgIcIAMgADYCFCADQcotNgIQIANBBzYCDAyDAQsgASAERgRAQdsAIQIMgwELAkAgAS0AAEEJaw4EAwAAAwALIAFBAWoLIQFBzgAhAgxoCyABIARGBEBB2gAhAgyBAQsgAS0AAEEJaw4EAAEBAAELQQAhAiADQQA2AhwgA0GaEjYCECADQQc2AgwgAyABQQFqNgIUDH8LIANBgBI7ASpBACEAAkAgAygCOCICRQ0AIAIoAjgiAkUNACADIAIRAAAhAAsgAEUNACAAQRVHDQEgA0HZADYCHCADIAE2AhQgA0HqGjYCECADQRU2AgxBACECDH4LQc0AIQIMZAsgA0EANgIcIAMgATYCFCADQckNNgIQIANBGjYCDEEAIQIMfAsgASAERgRAQdkAIQIMfAsgAS0AAEEgRw09IAFBAWohASADLQAuQQFxDT0gA0EANgIcIAMgATYCFCADQcIcNgIQIANBHjYCDEEAIQIMewsgASAERgRAQdgAIQIMewsCQAJAAkACQAJAIAEtAAAiAEEKaw4EAgMDAAELIAFBAWohAUEsIQIMZQsgAEE6Rw0BIANBADYCHCADIAE2AhQgA0HnETYCECADQQo2AgxBACECDH0LIAFBAWohASADQS9qLQAAQQFxRQ1zIAMtADJBgAFxRQRAIANBMmohAiADEDVBACEAAkAgAygCOCIGRQ0AIAYoAigiBkUNACADIAYRAAAhAAsCQAJAIAAOFk1MSwEBAQEBAQEBAQEBAQEBAQEBAQABCyADQSk2AhwgAyABNgIUIANBrBk2AhAgA0EVNgIMQQAhAgx+CyADQQA2AhwgAyABNgIUIANB5Qs2AhAgA0ERNgIMQQAhAgx9C0EAIQACQCADKAI4IgJFDQAgAigCXCICRQ0AIAMgAhEAACEACyAARQ1ZIABBFUcNASADQQU2AhwgAyABNgIUIANBmxs2AhAgA0EVNgIMQQAhAgx8C0HLACECDGILQQAhAiADQQA2AhwgAyABNgIUIANBkA42AhAgA0EUNgIMDHoLIAMgAy8BMkGAAXI7ATIMOwsgASAERwRAIANBETYCCCADIAE2AgRBygAhAgxgC0HXACECDHgLIAEgBEYEQEHWACECDHgLAkACQAJAAkAgAS0AACIAQSByIAAgAEHBAGtB/wFxQRpJG0H/AXFB4wBrDhMAQEBAQEBAQEBAQEBAAUBAQAIDQAsgAUEBaiEBQcYAIQIMYQsgAUEBaiEBQccAIQIMYAsgAUEBaiEBQcgAIQIMXwsgAUEBaiEBQckAIQIMXgtB1QAhAiAEIAEiAEYNdiAEIAFrIAMoAgAiAWohBiAAIAFrQQVqIQcDQCABQZDIAGotAAAgAC0AACIFQSByIAUgBUHBAGtB/wFxQRpJG0H/AXFHDQhBBCABQQVGDQoaIAFBAWohASAEIABBAWoiAEcNAAsgAyAGNgIADHYLQdQAIQIgBCABIgBGDXUgBCABayADKAIAIgFqIQYgACABa0EPaiEHA0AgAUGAyABqLQAAIAAtAAAiBUEgciAFIAVBwQBrQf8BcUEaSRtB/wFxRw0HQQMgAUEPRg0JGiABQQFqIQEgBCAAQQFqIgBHDQALIAMgBjYCAAx1C0HTACECIAQgASIARg10IAQgAWsgAygCACIBaiEGIAAgAWtBDmohBwNAIAFB4scAai0AACAALQAAIgVBIHIgBSAFQcEAa0H/AXFBGkkbQf8BcUcNBiABQQ5GDQcgAUEBaiEBIAQgAEEBaiIARw0ACyADIAY2AgAMdAtB0gAhAiAEIAEiAEYNcyAEIAFrIAMoAgAiAWohBSAAIAFrQQFqIQYDQCABQeDHAGotAAAgAC0AACIHQSByIAcgB0HBAGtB/wFxQRpJG0H/AXFHDQUgAUEBRg0CIAFBAWohASAEIABBAWoiAEcNAAsgAyAFNgIADHMLIAEgBEYEQEHRACECDHMLAkACQCABLQAAIgBBIHIgACAAQcEAa0H/AXFBGkkbQf8BcUHuAGsOBwA5OTk5OQE5CyABQQFqIQFBwwAhAgxaCyABQQFqIQFBxAAhAgxZCyADQQA2AgAgBkEBaiEBQcUAIQIMWAtB0AAhAiAEIAEiAEYNcCAEIAFrIAMoAgAiAWohBiAAIAFrQQlqIQcDQCABQdbHAGotAAAgAC0AACIFQSByIAUgBUHBAGtB/wFxQRpJG0H/AXFHDQJBAiABQQlGDQQaIAFBAWohASAEIABBAWoiAEcNAAsgAyAGNgIADHALQc8AIQIgBCABIgBGDW8gBCABayADKAIAIgFqIQYgACABa0EFaiEHA0AgAUHQxwBqLQAAIAAtAAAiBUEgciAFIAVBwQBrQf8BcUEaSRtB/wFxRw0BIAFBBUYNAiABQQFqIQEgBCAAQQFqIgBHDQALIAMgBjYCAAxvCyAAIQEgA0EANgIADDMLQQELOgAsIANBADYCACAHQQFqIQELQS0hAgxSCwJAA0AgAS0AAEHQxQBqLQAAQQFHDQEgBCABQQFqIgFHDQALQc0AIQIMawtBwgAhAgxRCyABIARGBEBBzAAhAgxqCyABLQAAQTpGBEAgAygCBCEAIANBADYCBCADIAAgARAwIgBFDTMgA0HLADYCHCADIAA2AgwgAyABQQFqNgIUQQAhAgxqCyADQQA2AhwgAyABNgIUIANB5xE2AhAgA0EKNgIMQQAhAgxpCwJAAkAgAy0ALEECaw4CAAEnCyADQTNqLQAAQQJxRQ0mIAMtAC5BAnENJiADQQA2AhwgAyABNgIUIANBphQ2AhAgA0ELNgIMQQAhAgxpCyADLQAyQSBxRQ0lIAMtAC5BAnENJSADQQA2AhwgAyABNgIUIANBvRM2AhAgA0EPNgIMQQAhAgxoC0EAIQACQCADKAI4IgJFDQAgAigCSCICRQ0AIAMgAhEAACEACyAARQRAQcEAIQIMTwsgAEEVRwRAIANBADYCHCADIAE2AhQgA0GmDzYCECADQRw2AgxBACECDGgLIANBygA2AhwgAyABNgIUIANBhRw2AhAgA0EVNgIMQQAhAgxnCyABIARHBEAgASECA0AgBCACIgFrQRBOBEAgAUEQaiEC/Qz/////////////////////IAH9AAAAIg1BB/1sIA39DODg4ODg4ODg4ODg4ODg4OD9bv0MX19fX19fX19fX19fX19fX/0mIA39DAkJCQkJCQkJCQkJCQkJCQn9I/1Q/VL9ZEF/c2giAEEQRg0BIAAgAWohAQwYCyABIARGBEBBxAAhAgxpCyABLQAAQcDBAGotAABBAUcNFyAEIAFBAWoiAkcNAAtBxAAhAgxnC0HEACECDGYLIAEgBEcEQANAAkAgAS0AACIAQSByIAAgAEHBAGtB/wFxQRpJG0H/AXEiAEEJRg0AIABBIEYNAAJAAkACQAJAIABB4wBrDhMAAwMDAwMDAwEDAwMDAwMDAwMCAwsgAUEBaiEBQTYhAgxSCyABQQFqIQFBNyECDFELIAFBAWohAUE4IQIMUAsMFQsgBCABQQFqIgFHDQALQTwhAgxmC0E8IQIMZQsgASAERgRAQcgAIQIMZQsgA0ESNgIIIAMgATYCBAJAAkACQAJAAkAgAy0ALEEBaw4EFAABAgkLIAMtADJBIHENA0HgASECDE8LAkAgAy8BMiIAQQhxRQ0AIAMtAChBAUcNACADLQAuQQhxRQ0CCyADIABB9/sDcUGABHI7ATIMCwsgAyADLwEyQRByOwEyDAQLIANBADYCBCADIAEgARAxIgAEQCADQcEANgIcIAMgADYCDCADIAFBAWo2AhRBACECDGYLIAFBAWohAQxYCyADQQA2AhwgAyABNgIUIANB9BM2AhAgA0EENgIMQQAhAgxkC0HHACECIAEgBEYNYyADKAIAIgAgBCABa2ohBSABIABrQQZqIQYCQANAIABBwMUAai0AACABLQAAQSByRw0BIABBBkYNSiAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAxkCyADQQA2AgAMBQsCQCABIARHBEADQCABLQAAQcDDAGotAAAiAEEBRwRAIABBAkcNAyABQQFqIQEMBQsgBCABQQFqIgFHDQALQcUAIQIMZAtBxQAhAgxjCwsgA0EAOgAsDAELQQshAgxHC0E/IQIMRgsCQAJAA0AgAS0AACIAQSBHBEACQCAAQQprDgQDBQUDAAsgAEEsRg0DDAQLIAQgAUEBaiIBRw0AC0HGACECDGALIANBCDoALAwOCyADLQAoQQFHDQIgAy0ALkEIcQ0CIAMoAgQhACADQQA2AgQgAyAAIAEQMSIABEAgA0HCADYCHCADIAA2AgwgAyABQQFqNgIUQQAhAgxfCyABQQFqIQEMUAtBOyECDEQLAkADQCABLQAAIgBBIEcgAEEJR3ENASAEIAFBAWoiAUcNAAtBwwAhAgxdCwtBPCECDEILAkACQCABIARHBEADQCABLQAAIgBBIEcEQCAAQQprDgQDBAQDBAsgBCABQQFqIgFHDQALQT8hAgxdC0E/IQIMXAsgAyADLwEyQSByOwEyDAoLIAMoAgQhACADQQA2AgQgAyAAIAEQMSIARQ1OIANBPjYCHCADIAE2AhQgAyAANgIMQQAhAgxaCwJAIAEgBEcEQANAIAEtAABBwMMAai0AACIAQQFHBEAgAEECRg0DDAwLIAQgAUEBaiIBRw0AC0E3IQIMWwtBNyECDFoLIAFBAWohAQwEC0E7IQIgBCABIgBGDVggBCABayADKAIAIgFqIQYgACABa0EFaiEHAkADQCABQZDIAGotAAAgAC0AACIFQSByIAUgBUHBAGtB/wFxQRpJG0H/AXFHDQEgAUEFRgRAQQchAQw/CyABQQFqIQEgBCAAQQFqIgBHDQALIAMgBjYCAAxZCyADQQA2AgAgACEBDAULQTohAiAEIAEiAEYNVyAEIAFrIAMoAgAiAWohBiAAIAFrQQhqIQcCQANAIAFBtMEAai0AACAALQAAIgVBIHIgBSAFQcEAa0H/AXFBGkkbQf8BcUcNASABQQhGBEBBBSEBDD4LIAFBAWohASAEIABBAWoiAEcNAAsgAyAGNgIADFgLIANBADYCACAAIQEMBAtBOSECIAQgASIARg1WIAQgAWsgAygCACIBaiEGIAAgAWtBA2ohBwJAA0AgAUGwwQBqLQAAIAAtAAAiBUEgciAFIAVBwQBrQf8BcUEaSRtB/wFxRw0BIAFBA0YEQEEGIQEMPQsgAUEBaiEBIAQgAEEBaiIARw0ACyADIAY2AgAMVwsgA0EANgIAIAAhAQwDCwJAA0AgAS0AACIAQSBHBEAgAEEKaw4EBwQEBwILIAQgAUEBaiIBRw0AC0E4IQIMVgsgAEEsRw0BIAFBAWohAEEBIQECQAJAAkACQAJAIAMtACxBBWsOBAMBAgQACyAAIQEMBAtBAiEBDAELQQQhAQsgA0EBOgAsIAMgAy8BMiABcjsBMiAAIQEMAQsgAyADLwEyQQhyOwEyIAAhAQtBPiECDDsLIANBADoALAtBOSECDDkLIAEgBEYEQEE2IQIMUgsCQAJAAkACQAJAIAEtAABBCmsOBAACAgECCyADKAIEIQAgA0EANgIEIAMgACABEDEiAEUNAiADQTM2AhwgAyABNgIUIAMgADYCDEEAIQIMVQsgAygCBCEAIANBADYCBCADIAAgARAxIgBFBEAgAUEBaiEBDAYLIANBMjYCHCADIAA2AgwgAyABQQFqNgIUQQAhAgxUCyADLQAuQQFxBEBB3wEhAgw7CyADKAIEIQAgA0EANgIEIAMgACABEDEiAA0BDEkLQTQhAgw5CyADQTU2AhwgAyABNgIUIAMgADYCDEEAIQIMUQtBNSECDDcLIANBL2otAABBAXENACADQQA2AhwgAyABNgIUIANB6xY2AhAgA0EZNgIMQQAhAgxPC0EzIQIMNQsgASAERgRAQTIhAgxOCwJAIAEtAABBCkYEQCABQQFqIQEMAQsgA0EANgIcIAMgATYCFCADQZIXNgIQIANBAzYCDEEAIQIMTgtBMiECDDQLIAEgBEYEQEExIQIMTQsCQCABLQAAIgBBCUYNACAAQSBGDQBBASECAkAgAy0ALEEFaw4EBgQFAA0LIAMgAy8BMkEIcjsBMgwMCyADLQAuQQFxRQ0BIAMtACxBCEcNACADQQA6ACwLQT0hAgwyCyADQQA2AhwgAyABNgIUIANBwhY2AhAgA0EKNgIMQQAhAgxKC0ECIQIMAQtBBCECCyADQQE6ACwgAyADLwEyIAJyOwEyDAYLIAEgBEYEQEEwIQIMRwsgAS0AAEEKRgRAIAFBAWohAQwBCyADLQAuQQFxDQAgA0EANgIcIAMgATYCFCADQdwoNgIQIANBAjYCDEEAIQIMRgtBMCECDCwLIAFBAWohAUExIQIMKwsgASAERgRAQS8hAgxECyABLQAAIgBBCUcgAEEgR3FFBEAgAUEBaiEBIAMtAC5BAXENASADQQA2AhwgAyABNgIUIANBlxA2AhAgA0EKNgIMQQAhAgxEC0EBIQICQAJAAkACQAJAAkAgAy0ALEECaw4HBQQEAwECAAQLIAMgAy8BMkEIcjsBMgwDC0ECIQIMAQtBBCECCyADQQE6ACwgAyADLwEyIAJyOwEyC0EvIQIMKwsgA0EANgIcIAMgATYCFCADQYQTNgIQIANBCzYCDEEAIQIMQwtB4QEhAgwpCyABIARGBEBBLiECDEILIANBADYCBCADQRI2AgggAyABIAEQMSIADQELQS4hAgwnCyADQS02AhwgAyABNgIUIAMgADYCDEEAIQIMPwtBACEAAkAgAygCOCICRQ0AIAIoAkwiAkUNACADIAIRAAAhAAsgAEUNACAAQRVHDQEgA0HYADYCHCADIAE2AhQgA0GzGzYCECADQRU2AgxBACECDD4LQcwAIQIMJAsgA0EANgIcIAMgATYCFCADQbMONgIQIANBHTYCDEEAIQIMPAsgASAERgRAQc4AIQIMPAsgAS0AACIAQSBGDQIgAEE6Rg0BCyADQQA6ACxBCSECDCELIAMoAgQhACADQQA2AgQgAyAAIAEQMCIADQEMAgsgAy0ALkEBcQRAQd4BIQIMIAsgAygCBCEAIANBADYCBCADIAAgARAwIgBFDQIgA0EqNgIcIAMgADYCDCADIAFBAWo2AhRBACECDDgLIANBywA2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIMNwsgAUEBaiEBQcAAIQIMHQsgAUEBaiEBDCwLIAEgBEYEQEErIQIMNQsCQCABLQAAQQpGBEAgAUEBaiEBDAELIAMtAC5BwABxRQ0GCyADLQAyQYABcQRAQQAhAAJAIAMoAjgiAkUNACACKAJcIgJFDQAgAyACEQAAIQALIABFDRIgAEEVRgRAIANBBTYCHCADIAE2AhQgA0GbGzYCECADQRU2AgxBACECDDYLIANBADYCHCADIAE2AhQgA0GQDjYCECADQRQ2AgxBACECDDULIANBMmohAiADEDVBACEAAkAgAygCOCIGRQ0AIAYoAigiBkUNACADIAYRAAAhAAsgAA4WAgEABAQEBAQEBAQEBAQEBAQEBAQEAwQLIANBAToAMAsgAiACLwEAQcAAcjsBAAtBKyECDBgLIANBKTYCHCADIAE2AhQgA0GsGTYCECADQRU2AgxBACECDDALIANBADYCHCADIAE2AhQgA0HlCzYCECADQRE2AgxBACECDC8LIANBADYCHCADIAE2AhQgA0GlCzYCECADQQI2AgxBACECDC4LQQEhByADLwEyIgVBCHFFBEAgAykDIEIAUiEHCwJAIAMtADAEQEEBIQAgAy0AKUEFRg0BIAVBwABxRSAHcUUNAQsCQCADLQAoIgJBAkYEQEEBIQAgAy8BNCIGQeUARg0CQQAhACAFQcAAcQ0CIAZB5ABGDQIgBkHmAGtBAkkNAiAGQcwBRg0CIAZBsAJGDQIMAQtBACEAIAVBwABxDQELQQIhACAFQQhxDQAgBUGABHEEQAJAIAJBAUcNACADLQAuQQpxDQBBBSEADAILQQQhAAwBCyAFQSBxRQRAIAMQNkEAR0ECdCEADAELQQBBAyADKQMgUBshAAsgAEEBaw4FAgAHAQMEC0ERIQIMEwsgA0EBOgAxDCkLQQAhAgJAIAMoAjgiAEUNACAAKAIwIgBFDQAgAyAAEQAAIQILIAJFDSYgAkEVRgRAIANBAzYCHCADIAE2AhQgA0HSGzYCECADQRU2AgxBACECDCsLQQAhAiADQQA2AhwgAyABNgIUIANB3Q42AhAgA0ESNgIMDCoLIANBADYCHCADIAE2AhQgA0H5IDYCECADQQ82AgxBACECDCkLQQAhAAJAIAMoAjgiAkUNACACKAIwIgJFDQAgAyACEQAAIQALIAANAQtBDiECDA4LIABBFUYEQCADQQI2AhwgAyABNgIUIANB0hs2AhAgA0EVNgIMQQAhAgwnCyADQQA2AhwgAyABNgIUIANB3Q42AhAgA0ESNgIMQQAhAgwmC0EqIQIMDAsgASAERwRAIANBCTYCCCADIAE2AgRBKSECDAwLQSYhAgwkCyADIAMpAyAiDCAEIAFrrSIKfSILQgAgCyAMWBs3AyAgCiAMVARAQSUhAgwkCyADKAIEIQAgA0EANgIEIAMgACABIAynaiIBEDIiAEUNACADQQU2AhwgAyABNgIUIAMgADYCDEEAIQIMIwtBDyECDAkLQgAhCgJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQCABLQAAQTBrDjcXFgABAgMEBQYHFBQUFBQUFAgJCgsMDRQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUDg8QERITFAtCAiEKDBYLQgMhCgwVC0IEIQoMFAtCBSEKDBMLQgYhCgwSC0IHIQoMEQtCCCEKDBALQgkhCgwPC0IKIQoMDgtCCyEKDA0LQgwhCgwMC0INIQoMCwtCDiEKDAoLQg8hCgwJC0IKIQoMCAtCCyEKDAcLQgwhCgwGC0INIQoMBQtCDiEKDAQLQg8hCgwDCyADQQA2AhwgAyABNgIUIANBnxU2AhAgA0EMNgIMQQAhAgwhCyABIARGBEBBIiECDCELQgAhCgJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkAgAS0AAEEwaw43FRQAAQIDBAUGBxYWFhYWFhYICQoLDA0WFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFg4PEBESExYLQgIhCgwUC0IDIQoMEwtCBCEKDBILQgUhCgwRC0IGIQoMEAtCByEKDA8LQgghCgwOC0IJIQoMDQtCCiEKDAwLQgshCgwLC0IMIQoMCgtCDSEKDAkLQg4hCgwIC0IPIQoMBwtCCiEKDAYLQgshCgwFC0IMIQoMBAtCDSEKDAMLQg4hCgwCC0IPIQoMAQtCASEKCyABQQFqIQEgAykDICILQv//////////D1gEQCADIAtCBIYgCoQ3AyAMAgsgA0EANgIcIAMgATYCFCADQbUJNgIQIANBDDYCDEEAIQIMHgtBJyECDAQLQSghAgwDCyADIAE6ACwgA0EANgIAIAdBAWohAUEMIQIMAgsgA0EANgIAIAZBAWohAUEKIQIMAQsgAUEBaiEBQQghAgwACwALQQAhAiADQQA2AhwgAyABNgIUIANBsjg2AhAgA0EINgIMDBcLQQAhAiADQQA2AhwgAyABNgIUIANBgxE2AhAgA0EJNgIMDBYLQQAhAiADQQA2AhwgAyABNgIUIANB3wo2AhAgA0EJNgIMDBULQQAhAiADQQA2AhwgAyABNgIUIANB7RA2AhAgA0EJNgIMDBQLQQAhAiADQQA2AhwgAyABNgIUIANB0hE2AhAgA0EJNgIMDBMLQQAhAiADQQA2AhwgAyABNgIUIANBsjg2AhAgA0EINgIMDBILQQAhAiADQQA2AhwgAyABNgIUIANBgxE2AhAgA0EJNgIMDBELQQAhAiADQQA2AhwgAyABNgIUIANB3wo2AhAgA0EJNgIMDBALQQAhAiADQQA2AhwgAyABNgIUIANB7RA2AhAgA0EJNgIMDA8LQQAhAiADQQA2AhwgAyABNgIUIANB0hE2AhAgA0EJNgIMDA4LQQAhAiADQQA2AhwgAyABNgIUIANBuRc2AhAgA0EPNgIMDA0LQQAhAiADQQA2AhwgAyABNgIUIANBuRc2AhAgA0EPNgIMDAwLQQAhAiADQQA2AhwgAyABNgIUIANBmRM2AhAgA0ELNgIMDAsLQQAhAiADQQA2AhwgAyABNgIUIANBnQk2AhAgA0ELNgIMDAoLQQAhAiADQQA2AhwgAyABNgIUIANBlxA2AhAgA0EKNgIMDAkLQQAhAiADQQA2AhwgAyABNgIUIANBsRA2AhAgA0EKNgIMDAgLQQAhAiADQQA2AhwgAyABNgIUIANBux02AhAgA0ECNgIMDAcLQQAhAiADQQA2AhwgAyABNgIUIANBlhY2AhAgA0ECNgIMDAYLQQAhAiADQQA2AhwgAyABNgIUIANB+Rg2AhAgA0ECNgIMDAULQQAhAiADQQA2AhwgAyABNgIUIANBxBg2AhAgA0ECNgIMDAQLIANBAjYCHCADIAE2AhQgA0GpHjYCECADQRY2AgxBACECDAMLQd4AIQIgASAERg0CIAlBCGohByADKAIAIQUCQAJAIAEgBEcEQCAFQZbIAGohCCAEIAVqIAFrIQYgBUF/c0EKaiIFIAFqIQADQCABLQAAIAgtAABHBEBBAiEIDAMLIAVFBEBBACEIIAAhAQwDCyAFQQFrIQUgCEEBaiEIIAQgAUEBaiIBRw0ACyAGIQUgBCEBCyAHQQE2AgAgAyAFNgIADAELIANBADYCACAHIAg2AgALIAcgATYCBCAJKAIMIQACQAJAIAkoAghBAWsOAgQBAAsgA0EANgIcIANBwh42AhAgA0EXNgIMIAMgAEEBajYCFEEAIQIMAwsgA0EANgIcIAMgADYCFCADQdceNgIQIANBCTYCDEEAIQIMAgsgASAERgRAQSghAgwCCyADQQk2AgggAyABNgIEQSchAgwBCyABIARGBEBBASECDAELA0ACQAJAAkAgAS0AAEEKaw4EAAEBAAELIAFBAWohAQwBCyABQQFqIQEgAy0ALkEgcQ0AQQAhAiADQQA2AhwgAyABNgIUIANBoSE2AhAgA0EFNgIMDAILQQEhAiABIARHDQALCyAJQRBqJAAgAkUEQCADKAIMIQAMAQsgAyACNgIcQQAhACADKAIEIgFFDQAgAyABIAQgAygCCBEBACIBRQ0AIAMgBDYCFCADIAE2AgwgASEACyAAC74CAQJ/IABBADoAACAAQeQAaiIBQQFrQQA6AAAgAEEAOgACIABBADoAASABQQNrQQA6AAAgAUECa0EAOgAAIABBADoAAyABQQRrQQA6AABBACAAa0EDcSIBIABqIgBBADYCAEHkACABa0F8cSICIABqIgFBBGtBADYCAAJAIAJBCUkNACAAQQA2AgggAEEANgIEIAFBCGtBADYCACABQQxrQQA2AgAgAkEZSQ0AIABBADYCGCAAQQA2AhQgAEEANgIQIABBADYCDCABQRBrQQA2AgAgAUEUa0EANgIAIAFBGGtBADYCACABQRxrQQA2AgAgAiAAQQRxQRhyIgJrIgFBIEkNACAAIAJqIQADQCAAQgA3AxggAEIANwMQIABCADcDCCAAQgA3AwAgAEEgaiEAIAFBIGsiAUEfSw0ACwsLVgEBfwJAIAAoAgwNAAJAAkACQAJAIAAtADEOAwEAAwILIAAoAjgiAUUNACABKAIwIgFFDQAgACABEQAAIgENAwtBAA8LAAsgAEHKGTYCEEEOIQELIAELGgAgACgCDEUEQCAAQd4fNgIQIABBFTYCDAsLFAAgACgCDEEVRgRAIABBADYCDAsLFAAgACgCDEEWRgRAIABBADYCDAsLBwAgACgCDAsHACAAKAIQCwkAIAAgATYCEAsHACAAKAIUCysAAkAgAEEnTw0AQv//////CSAArYhCAYNQDQAgAEECdEHQOGooAgAPCwALFwAgAEEvTwRAAAsgAEECdEHsOWooAgALvwkBAX9B9C0hAQJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAIABB5ABrDvQDY2IAAWFhYWFhYQIDBAVhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhBgcICQoLDA0OD2FhYWFhEGFhYWFhYWFhYWFhEWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYRITFBUWFxgZGhthYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhHB0eHyAhIiMkJSYnKCkqKywtLi8wMTIzNDU2YTc4OTphYWFhYWFhYTthYWE8YWFhYT0+P2FhYWFhYWFhQGFhQWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYUJDREVGR0hJSktMTU5PUFFSU2FhYWFhYWFhVFVWV1hZWlthXF1hYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFeYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhX2BhC0HqLA8LQZgmDwtB7TEPC0GgNw8LQckpDwtBtCkPC0GWLQ8LQesrDwtBojUPC0HbNA8LQeApDwtB4yQPC0HVJA8LQe4kDwtB5iUPC0HKNA8LQdA3DwtBqjUPC0H1LA8LQfYmDwtBgiIPC0HyMw8LQb4oDwtB5zcPC0HNIQ8LQcAhDwtBuCUPC0HLJQ8LQZYkDwtBjzQPC0HNNQ8LQd0qDwtB7jMPC0GcNA8LQZ4xDwtB9DUPC0HlIg8LQa8lDwtBmTEPC0GyNg8LQfk2DwtBxDIPC0HdLA8LQYIxDwtBwTEPC0GNNw8LQckkDwtB7DYPC0HnKg8LQcgjDwtB4iEPC0HJNw8LQaUiDwtBlCIPC0HbNg8LQd41DwtBhiYPC0G8Kw8LQYsyDwtBoCMPC0H2MA8LQYAsDwtBiSsPC0GkJg8LQfIjDwtBgSgPC0GrMg8LQesnDwtBwjYPC0GiJA8LQc8qDwtB3CMPC0GHJw8LQeQ0DwtBtyIPC0GtMQ8LQdUiDwtBrzQPC0HeJg8LQdYyDwtB9DQPC0GBOA8LQfQ3DwtBkjYPC0GdJw8LQYIpDwtBjSMPC0HXMQ8LQb01DwtBtDcPC0HYMA8LQbYnDwtBmjgPC0GnKg8LQcQnDwtBriMPC0H1Ig8LAAtByiYhAQsgAQsXACAAIAAvAS5B/v8DcSABQQBHcjsBLgsaACAAIAAvAS5B/f8DcSABQQBHQQF0cjsBLgsaACAAIAAvAS5B+/8DcSABQQBHQQJ0cjsBLgsaACAAIAAvAS5B9/8DcSABQQBHQQN0cjsBLgsaACAAIAAvAS5B7/8DcSABQQBHQQR0cjsBLgsaACAAIAAvAS5B3/8DcSABQQBHQQV0cjsBLgsaACAAIAAvAS5Bv/8DcSABQQBHQQZ0cjsBLgsaACAAIAAvAS5B//4DcSABQQBHQQd0cjsBLgsaACAAIAAvAS5B//0DcSABQQBHQQh0cjsBLgsaACAAIAAvAS5B//sDcSABQQBHQQl0cjsBLgs+AQJ/AkAgACgCOCIDRQ0AIAMoAgQiA0UNACAAIAEgAiABayADEQEAIgRBf0cNACAAQeESNgIQQRghBAsgBAs+AQJ/AkAgACgCOCIDRQ0AIAMoAggiA0UNACAAIAEgAiABayADEQEAIgRBf0cNACAAQfwRNgIQQRghBAsgBAs+AQJ/AkAgACgCOCIDRQ0AIAMoAgwiA0UNACAAIAEgAiABayADEQEAIgRBf0cNACAAQewKNgIQQRghBAsgBAs+AQJ/AkAgACgCOCIDRQ0AIAMoAhAiA0UNACAAIAEgAiABayADEQEAIgRBf0cNACAAQfoeNgIQQRghBAsgBAs+AQJ/AkAgACgCOCIDRQ0AIAMoAhQiA0UNACAAIAEgAiABayADEQEAIgRBf0cNACAAQcsQNgIQQRghBAsgBAs+AQJ/AkAgACgCOCIDRQ0AIAMoAhgiA0UNACAAIAEgAiABayADEQEAIgRBf0cNACAAQbcfNgIQQRghBAsgBAs+AQJ/AkAgACgCOCIDRQ0AIAMoAhwiA0UNACAAIAEgAiABayADEQEAIgRBf0cNACAAQb8VNgIQQRghBAsgBAs+AQJ/AkAgACgCOCIDRQ0AIAMoAiwiA0UNACAAIAEgAiABayADEQEAIgRBf0cNACAAQf4INgIQQRghBAsgBAs+AQJ/AkAgACgCOCIDRQ0AIAMoAiAiA0UNACAAIAEgAiABayADEQEAIgRBf0cNACAAQYwdNgIQQRghBAsgBAs+AQJ/AkAgACgCOCIDRQ0AIAMoAiQiA0UNACAAIAEgAiABayADEQEAIgRBf0cNACAAQeYVNgIQQRghBAsgBAs4ACAAAn8gAC8BMkEUcUEURgRAQQEgAC0AKEEBRg0BGiAALwE0QeUARgwBCyAALQApQQVGCzoAMAtZAQJ/AkAgAC0AKEEBRg0AIAAvATQiAUHkAGtB5ABJDQAgAUHMAUYNACABQbACRg0AIAAvATIiAEHAAHENAEEBIQIgAEGIBHFBgARGDQAgAEEocUUhAgsgAguMAQECfwJAAkACQCAALQAqRQ0AIAAtACtFDQAgAC8BMiIBQQJxRQ0BDAILIAAvATIiAUEBcUUNAQtBASECIAAtAChBAUYNACAALwE0IgBB5ABrQeQASQ0AIABBzAFGDQAgAEGwAkYNACABQcAAcQ0AQQAhAiABQYgEcUGABEYNACABQShxQQBHIQILIAILcwAgAEEQav0MAAAAAAAAAAAAAAAAAAAAAP0LAwAgAP0MAAAAAAAAAAAAAAAAAAAAAP0LAwAgAEEwav0MAAAAAAAAAAAAAAAAAAAAAP0LAwAgAEEgav0MAAAAAAAAAAAAAAAAAAAAAP0LAwAgAEH9ATYCHAsGACAAEDoLmi0BC38jAEEQayIKJABB3NUAKAIAIglFBEBBnNkAKAIAIgVFBEBBqNkAQn83AgBBoNkAQoCAhICAgMAANwIAQZzZACAKQQhqQXBxQdiq1aoFcyIFNgIAQbDZAEEANgIAQYDZAEEANgIAC0GE2QBBwNkENgIAQdTVAEHA2QQ2AgBB6NUAIAU2AgBB5NUAQX82AgBBiNkAQcCmAzYCAANAIAFBgNYAaiABQfTVAGoiAjYCACACIAFB7NUAaiIDNgIAIAFB+NUAaiADNgIAIAFBiNYAaiABQfzVAGoiAzYCACADIAI2AgAgAUGQ1gBqIAFBhNYAaiICNgIAIAIgAzYCACABQYzWAGogAjYCACABQSBqIgFBgAJHDQALQczZBEGBpgM2AgBB4NUAQazZACgCADYCAEHQ1QBBgKYDNgIAQdzVAEHI2QQ2AgBBzP8HQTg2AgBByNkEIQkLAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkAgAEHsAU0EQEHE1QAoAgAiBkEQIABBE2pBcHEgAEELSRsiBEEDdiIAdiIBQQNxBEACQCABQQFxIAByQQFzIgJBA3QiAEHs1QBqIgEgAEH01QBqKAIAIgAoAggiA0YEQEHE1QAgBkF+IAJ3cTYCAAwBCyABIAM2AgggAyABNgIMCyAAQQhqIQEgACACQQN0IgJBA3I2AgQgACACaiIAIAAoAgRBAXI2AgQMEQtBzNUAKAIAIgggBE8NASABBEACQEECIAB0IgJBACACa3IgASAAdHFoIgBBA3QiAkHs1QBqIgEgAkH01QBqKAIAIgIoAggiA0YEQEHE1QAgBkF+IAB3cSIGNgIADAELIAEgAzYCCCADIAE2AgwLIAIgBEEDcjYCBCAAQQN0IgAgBGshBSAAIAJqIAU2AgAgAiAEaiIEIAVBAXI2AgQgCARAIAhBeHFB7NUAaiEAQdjVACgCACEDAn9BASAIQQN2dCIBIAZxRQRAQcTVACABIAZyNgIAIAAMAQsgACgCCAsiASADNgIMIAAgAzYCCCADIAA2AgwgAyABNgIICyACQQhqIQFB2NUAIAQ2AgBBzNUAIAU2AgAMEQtByNUAKAIAIgtFDQEgC2hBAnRB9NcAaigCACIAKAIEQXhxIARrIQUgACECA0ACQCACKAIQIgFFBEAgAkEUaigCACIBRQ0BCyABKAIEQXhxIARrIgMgBUkhAiADIAUgAhshBSABIAAgAhshACABIQIMAQsLIAAoAhghCSAAKAIMIgMgAEcEQEHU1QAoAgAaIAMgACgCCCIBNgIIIAEgAzYCDAwQCyAAQRRqIgIoAgAiAUUEQCAAKAIQIgFFDQMgAEEQaiECCwNAIAIhByABIgNBFGoiAigCACIBDQAgA0EQaiECIAMoAhAiAQ0ACyAHQQA2AgAMDwtBfyEEIABBv39LDQAgAEETaiIBQXBxIQRByNUAKAIAIghFDQBBACAEayEFAkACQAJAAn9BACAEQYACSQ0AGkEfIARB////B0sNABogBEEmIAFBCHZnIgBrdkEBcSAAQQF0a0E+agsiBkECdEH01wBqKAIAIgJFBEBBACEBQQAhAwwBC0EAIQEgBEEZIAZBAXZrQQAgBkEfRxt0IQBBACEDA0ACQCACKAIEQXhxIARrIgcgBU8NACACIQMgByIFDQBBACEFIAIhAQwDCyABIAJBFGooAgAiByAHIAIgAEEddkEEcWpBEGooAgAiAkYbIAEgBxshASAAQQF0IQAgAg0ACwsgASADckUEQEEAIQNBAiAGdCIAQQAgAGtyIAhxIgBFDQMgAGhBAnRB9NcAaigCACEBCyABRQ0BCwNAIAEoAgRBeHEgBGsiAiAFSSEAIAIgBSAAGyEFIAEgAyAAGyEDIAEoAhAiAAR/IAAFIAFBFGooAgALIgENAAsLIANFDQAgBUHM1QAoAgAgBGtPDQAgAygCGCEHIAMgAygCDCIARwRAQdTVACgCABogACADKAIIIgE2AgggASAANgIMDA4LIANBFGoiAigCACIBRQRAIAMoAhAiAUUNAyADQRBqIQILA0AgAiEGIAEiAEEUaiICKAIAIgENACAAQRBqIQIgACgCECIBDQALIAZBADYCAAwNC0HM1QAoAgAiAyAETwRAQdjVACgCACEBAkAgAyAEayICQRBPBEAgASAEaiIAIAJBAXI2AgQgASADaiACNgIAIAEgBEEDcjYCBAwBCyABIANBA3I2AgQgASADaiIAIAAoAgRBAXI2AgRBACEAQQAhAgtBzNUAIAI2AgBB2NUAIAA2AgAgAUEIaiEBDA8LQdDVACgCACIDIARLBEAgBCAJaiIAIAMgBGsiAUEBcjYCBEHc1QAgADYCAEHQ1QAgATYCACAJIARBA3I2AgQgCUEIaiEBDA8LQQAhASAEAn9BnNkAKAIABEBBpNkAKAIADAELQajZAEJ/NwIAQaDZAEKAgISAgIDAADcCAEGc2QAgCkEMakFwcUHYqtWqBXM2AgBBsNkAQQA2AgBBgNkAQQA2AgBBgIAECyIAIARBxwBqIgVqIgZBACAAayIHcSICTwRAQbTZAEEwNgIADA8LAkBB/NgAKAIAIgFFDQBB9NgAKAIAIgggAmohACAAIAFNIAAgCEtxDQBBACEBQbTZAEEwNgIADA8LQYDZAC0AAEEEcQ0EAkACQCAJBEBBhNkAIQEDQCABKAIAIgAgCU0EQCAAIAEoAgRqIAlLDQMLIAEoAggiAQ0ACwtBABA7IgBBf0YNBSACIQZBoNkAKAIAIgFBAWsiAyAAcQRAIAIgAGsgACADakEAIAFrcWohBgsgBCAGTw0FIAZB/v///wdLDQVB/NgAKAIAIgMEQEH02AAoAgAiByAGaiEBIAEgB00NBiABIANLDQYLIAYQOyIBIABHDQEMBwsgBiADayAHcSIGQf7///8HSw0EIAYQOyEAIAAgASgCACABKAIEakYNAyAAIQELAkAgBiAEQcgAak8NACABQX9GDQBBpNkAKAIAIgAgBSAGa2pBACAAa3EiAEH+////B0sEQCABIQAMBwsgABA7QX9HBEAgACAGaiEGIAEhAAwHC0EAIAZrEDsaDAQLIAEiAEF/Rw0FDAMLQQAhAwwMC0EAIQAMCgsgAEF/Rw0CC0GA2QBBgNkAKAIAQQRyNgIACyACQf7///8HSw0BIAIQOyEAQQAQOyEBIABBf0YNASABQX9GDQEgACABTw0BIAEgAGsiBiAEQThqTQ0BC0H02ABB9NgAKAIAIAZqIgE2AgBB+NgAKAIAIAFJBEBB+NgAIAE2AgALAkACQAJAQdzVACgCACICBEBBhNkAIQEDQCAAIAEoAgAiAyABKAIEIgVqRg0CIAEoAggiAQ0ACwwCC0HU1QAoAgAiAUEARyAAIAFPcUUEQEHU1QAgADYCAAtBACEBQYjZACAGNgIAQYTZACAANgIAQeTVAEF/NgIAQejVAEGc2QAoAgA2AgBBkNkAQQA2AgADQCABQYDWAGogAUH01QBqIgI2AgAgAiABQezVAGoiAzYCACABQfjVAGogAzYCACABQYjWAGogAUH81QBqIgM2AgAgAyACNgIAIAFBkNYAaiABQYTWAGoiAjYCACACIAM2AgAgAUGM1gBqIAI2AgAgAUEgaiIBQYACRw0AC0F4IABrQQ9xIgEgAGoiAiAGQThrIgMgAWsiAUEBcjYCBEHg1QBBrNkAKAIANgIAQdDVACABNgIAQdzVACACNgIAIAAgA2pBODYCBAwCCyAAIAJNDQAgAiADSQ0AIAEoAgxBCHENAEF4IAJrQQ9xIgAgAmoiA0HQ1QAoAgAgBmoiByAAayIAQQFyNgIEIAEgBSAGajYCBEHg1QBBrNkAKAIANgIAQdDVACAANgIAQdzVACADNgIAIAIgB2pBODYCBAwBCyAAQdTVACgCAEkEQEHU1QAgADYCAAsgACAGaiEDQYTZACEBAkACQAJAA0AgAyABKAIARwRAIAEoAggiAQ0BDAILCyABLQAMQQhxRQ0BC0GE2QAhAQNAIAEoAgAiAyACTQRAIAMgASgCBGoiBSACSw0DCyABKAIIIQEMAAsACyABIAA2AgAgASABKAIEIAZqNgIEIABBeCAAa0EPcWoiCSAEQQNyNgIEIANBeCADa0EPcWoiBiAEIAlqIgRrIQEgAiAGRgRAQdzVACAENgIAQdDVAEHQ1QAoAgAgAWoiADYCACAEIABBAXI2AgQMCAtB2NUAKAIAIAZGBEBB2NUAIAQ2AgBBzNUAQczVACgCACABaiIANgIAIAQgAEEBcjYCBCAAIARqIAA2AgAMCAsgBigCBCIFQQNxQQFHDQYgBUF4cSEIIAVB/wFNBEAgBUEDdiEDIAYoAggiACAGKAIMIgJGBEBBxNUAQcTVACgCAEF+IAN3cTYCAAwHCyACIAA2AgggACACNgIMDAYLIAYoAhghByAGIAYoAgwiAEcEQCAAIAYoAggiAjYCCCACIAA2AgwMBQsgBkEUaiICKAIAIgVFBEAgBigCECIFRQ0EIAZBEGohAgsDQCACIQMgBSIAQRRqIgIoAgAiBQ0AIABBEGohAiAAKAIQIgUNAAsgA0EANgIADAQLQXggAGtBD3EiASAAaiIHIAZBOGsiAyABayIBQQFyNgIEIAAgA2pBODYCBCACIAVBNyAFa0EPcWpBP2siAyADIAJBEGpJGyIDQSM2AgRB4NUAQazZACgCADYCAEHQ1QAgATYCAEHc1QAgBzYCACADQRBqQYzZACkCADcCACADQYTZACkCADcCCEGM2QAgA0EIajYCAEGI2QAgBjYCAEGE2QAgADYCAEGQ2QBBADYCACADQSRqIQEDQCABQQc2AgAgBSABQQRqIgFLDQALIAIgA0YNACADIAMoAgRBfnE2AgQgAyADIAJrIgU2AgAgAiAFQQFyNgIEIAVB/wFNBEAgBUF4cUHs1QBqIQACf0HE1QAoAgAiAUEBIAVBA3Z0IgNxRQRAQcTVACABIANyNgIAIAAMAQsgACgCCAsiASACNgIMIAAgAjYCCCACIAA2AgwgAiABNgIIDAELQR8hASAFQf///wdNBEAgBUEmIAVBCHZnIgBrdkEBcSAAQQF0a0E+aiEBCyACIAE2AhwgAkIANwIQIAFBAnRB9NcAaiEAQcjVACgCACIDQQEgAXQiBnFFBEAgACACNgIAQcjVACADIAZyNgIAIAIgADYCGCACIAI2AgggAiACNgIMDAELIAVBGSABQQF2a0EAIAFBH0cbdCEBIAAoAgAhAwJAA0AgAyIAKAIEQXhxIAVGDQEgAUEddiEDIAFBAXQhASAAIANBBHFqQRBqIgYoAgAiAw0ACyAGIAI2AgAgAiAANgIYIAIgAjYCDCACIAI2AggMAQsgACgCCCIBIAI2AgwgACACNgIIIAJBADYCGCACIAA2AgwgAiABNgIIC0HQ1QAoAgAiASAETQ0AQdzVACgCACIAIARqIgIgASAEayIBQQFyNgIEQdDVACABNgIAQdzVACACNgIAIAAgBEEDcjYCBCAAQQhqIQEMCAtBACEBQbTZAEEwNgIADAcLQQAhAAsgB0UNAAJAIAYoAhwiAkECdEH01wBqIgMoAgAgBkYEQCADIAA2AgAgAA0BQcjVAEHI1QAoAgBBfiACd3E2AgAMAgsgB0EQQRQgBygCECAGRhtqIAA2AgAgAEUNAQsgACAHNgIYIAYoAhAiAgRAIAAgAjYCECACIAA2AhgLIAZBFGooAgAiAkUNACAAQRRqIAI2AgAgAiAANgIYCyABIAhqIQEgBiAIaiIGKAIEIQULIAYgBUF+cTYCBCABIARqIAE2AgAgBCABQQFyNgIEIAFB/wFNBEAgAUF4cUHs1QBqIQACf0HE1QAoAgAiAkEBIAFBA3Z0IgFxRQRAQcTVACABIAJyNgIAIAAMAQsgACgCCAsiASAENgIMIAAgBDYCCCAEIAA2AgwgBCABNgIIDAELQR8hBSABQf///wdNBEAgAUEmIAFBCHZnIgBrdkEBcSAAQQF0a0E+aiEFCyAEIAU2AhwgBEIANwIQIAVBAnRB9NcAaiEAQcjVACgCACICQQEgBXQiA3FFBEAgACAENgIAQcjVACACIANyNgIAIAQgADYCGCAEIAQ2AgggBCAENgIMDAELIAFBGSAFQQF2a0EAIAVBH0cbdCEFIAAoAgAhAAJAA0AgACICKAIEQXhxIAFGDQEgBUEddiEAIAVBAXQhBSACIABBBHFqQRBqIgMoAgAiAA0ACyADIAQ2AgAgBCACNgIYIAQgBDYCDCAEIAQ2AggMAQsgAigCCCIAIAQ2AgwgAiAENgIIIARBADYCGCAEIAI2AgwgBCAANgIICyAJQQhqIQEMAgsCQCAHRQ0AAkAgAygCHCIBQQJ0QfTXAGoiAigCACADRgRAIAIgADYCACAADQFByNUAIAhBfiABd3EiCDYCAAwCCyAHQRBBFCAHKAIQIANGG2ogADYCACAARQ0BCyAAIAc2AhggAygCECIBBEAgACABNgIQIAEgADYCGAsgA0EUaigCACIBRQ0AIABBFGogATYCACABIAA2AhgLAkAgBUEPTQRAIAMgBCAFaiIAQQNyNgIEIAAgA2oiACAAKAIEQQFyNgIEDAELIAMgBGoiAiAFQQFyNgIEIAMgBEEDcjYCBCACIAVqIAU2AgAgBUH/AU0EQCAFQXhxQezVAGohAAJ/QcTVACgCACIBQQEgBUEDdnQiBXFFBEBBxNUAIAEgBXI2AgAgAAwBCyAAKAIICyIBIAI2AgwgACACNgIIIAIgADYCDCACIAE2AggMAQtBHyEBIAVB////B00EQCAFQSYgBUEIdmciAGt2QQFxIABBAXRrQT5qIQELIAIgATYCHCACQgA3AhAgAUECdEH01wBqIQBBASABdCIEIAhxRQRAIAAgAjYCAEHI1QAgBCAIcjYCACACIAA2AhggAiACNgIIIAIgAjYCDAwBCyAFQRkgAUEBdmtBACABQR9HG3QhASAAKAIAIQQCQANAIAQiACgCBEF4cSAFRg0BIAFBHXYhBCABQQF0IQEgACAEQQRxakEQaiIGKAIAIgQNAAsgBiACNgIAIAIgADYCGCACIAI2AgwgAiACNgIIDAELIAAoAggiASACNgIMIAAgAjYCCCACQQA2AhggAiAANgIMIAIgATYCCAsgA0EIaiEBDAELAkAgCUUNAAJAIAAoAhwiAUECdEH01wBqIgIoAgAgAEYEQCACIAM2AgAgAw0BQcjVACALQX4gAXdxNgIADAILIAlBEEEUIAkoAhAgAEYbaiADNgIAIANFDQELIAMgCTYCGCAAKAIQIgEEQCADIAE2AhAgASADNgIYCyAAQRRqKAIAIgFFDQAgA0EUaiABNgIAIAEgAzYCGAsCQCAFQQ9NBEAgACAEIAVqIgFBA3I2AgQgACABaiIBIAEoAgRBAXI2AgQMAQsgACAEaiIHIAVBAXI2AgQgACAEQQNyNgIEIAUgB2ogBTYCACAIBEAgCEF4cUHs1QBqIQFB2NUAKAIAIQMCf0EBIAhBA3Z0IgIgBnFFBEBBxNUAIAIgBnI2AgAgAQwBCyABKAIICyICIAM2AgwgASADNgIIIAMgATYCDCADIAI2AggLQdjVACAHNgIAQczVACAFNgIACyAAQQhqIQELIApBEGokACABC0MAIABFBEA/AEEQdA8LAkAgAEH//wNxDQAgAEEASA0AIABBEHZAACIAQX9GBEBBtNkAQTA2AgBBfw8LIABBEHQPCwALC5lCIgBBgAgLDQEAAAAAAAAAAgAAAAMAQZgICwUEAAAABQBBqAgLCQYAAAAHAAAACABB5AgLwjJJbnZhbGlkIGNoYXIgaW4gdXJsIHF1ZXJ5AFNwYW4gY2FsbGJhY2sgZXJyb3IgaW4gb25fYm9keQBDb250ZW50LUxlbmd0aCBvdmVyZmxvdwBDaHVuayBzaXplIG92ZXJmbG93AEludmFsaWQgbWV0aG9kIGZvciBIVFRQL3gueCByZXF1ZXN0AEludmFsaWQgbWV0aG9kIGZvciBSVFNQL3gueCByZXF1ZXN0AEV4cGVjdGVkIFNPVVJDRSBtZXRob2QgZm9yIElDRS94LnggcmVxdWVzdABJbnZhbGlkIGNoYXIgaW4gdXJsIGZyYWdtZW50IHN0YXJ0AEV4cGVjdGVkIGRvdABTcGFuIGNhbGxiYWNrIGVycm9yIGluIG9uX3N0YXR1cwBJbnZhbGlkIHJlc3BvbnNlIHN0YXR1cwBFeHBlY3RlZCBMRiBhZnRlciBoZWFkZXJzAEludmFsaWQgY2hhcmFjdGVyIGluIGNodW5rIGV4dGVuc2lvbnMAVXNlciBjYWxsYmFjayBlcnJvcgBgb25fcmVzZXRgIGNhbGxiYWNrIGVycm9yAGBvbl9jaHVua19oZWFkZXJgIGNhbGxiYWNrIGVycm9yAGBvbl9tZXNzYWdlX2JlZ2luYCBjYWxsYmFjayBlcnJvcgBgb25fY2h1bmtfZXh0ZW5zaW9uX3ZhbHVlYCBjYWxsYmFjayBlcnJvcgBgb25fc3RhdHVzX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25fdmVyc2lvbl9jb21wbGV0ZWAgY2FsbGJhY2sgZXJyb3IAYG9uX3VybF9jb21wbGV0ZWAgY2FsbGJhY2sgZXJyb3IAYG9uX3Byb3RvY29sX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25fY2h1bmtfY29tcGxldGVgIGNhbGxiYWNrIGVycm9yAGBvbl9oZWFkZXJfdmFsdWVfY29tcGxldGVgIGNhbGxiYWNrIGVycm9yAGBvbl9tZXNzYWdlX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25fbWV0aG9kX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25faGVhZGVyX2ZpZWxkX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25fY2h1bmtfZXh0ZW5zaW9uX25hbWVgIGNhbGxiYWNrIGVycm9yAFVuZXhwZWN0ZWQgY2hhciBpbiB1cmwgc2VydmVyAEludmFsaWQgaGVhZGVyIHZhbHVlIGNoYXIASW52YWxpZCBoZWFkZXIgZmllbGQgY2hhcgBTcGFuIGNhbGxiYWNrIGVycm9yIGluIG9uX3ZlcnNpb24ASW52YWxpZCBtaW5vciB2ZXJzaW9uAEludmFsaWQgbWFqb3IgdmVyc2lvbgBFeHBlY3RlZCBzcGFjZSBhZnRlciB2ZXJzaW9uAEV4cGVjdGVkIENSTEYgYWZ0ZXIgdmVyc2lvbgBJbnZhbGlkIEhUVFAgdmVyc2lvbgBJbnZhbGlkIGhlYWRlciB0b2tlbgBTcGFuIGNhbGxiYWNrIGVycm9yIGluIG9uX3VybABJbnZhbGlkIGNoYXJhY3RlcnMgaW4gdXJsAFVuZXhwZWN0ZWQgc3RhcnQgY2hhciBpbiB1cmwARG91YmxlIEAgaW4gdXJsAFNwYW4gY2FsbGJhY2sgZXJyb3IgaW4gb25fcHJvdG9jb2wARW1wdHkgQ29udGVudC1MZW5ndGgASW52YWxpZCBjaGFyYWN0ZXIgaW4gQ29udGVudC1MZW5ndGgAVHJhbnNmZXItRW5jb2RpbmcgY2FuJ3QgYmUgcHJlc2VudCB3aXRoIENvbnRlbnQtTGVuZ3RoAER1cGxpY2F0ZSBDb250ZW50LUxlbmd0aABJbnZhbGlkIGNoYXIgaW4gdXJsIHBhdGgAQ29udGVudC1MZW5ndGggY2FuJ3QgYmUgcHJlc2VudCB3aXRoIFRyYW5zZmVyLUVuY29kaW5nAE1pc3NpbmcgZXhwZWN0ZWQgQ1IgYWZ0ZXIgY2h1bmsgc2l6ZQBFeHBlY3RlZCBMRiBhZnRlciBjaHVuayBzaXplAEludmFsaWQgY2hhcmFjdGVyIGluIGNodW5rIHNpemUAU3BhbiBjYWxsYmFjayBlcnJvciBpbiBvbl9oZWFkZXJfdmFsdWUAU3BhbiBjYWxsYmFjayBlcnJvciBpbiBvbl9jaHVua19leHRlbnNpb25fdmFsdWUASW52YWxpZCBjaGFyYWN0ZXIgaW4gY2h1bmsgZXh0ZW5zaW9ucyB2YWx1ZQBVbmV4cGVjdGVkIHdoaXRlc3BhY2UgYWZ0ZXIgaGVhZGVyIHZhbHVlAE1pc3NpbmcgZXhwZWN0ZWQgQ1IgYWZ0ZXIgaGVhZGVyIHZhbHVlAE1pc3NpbmcgZXhwZWN0ZWQgTEYgYWZ0ZXIgaGVhZGVyIHZhbHVlAEludmFsaWQgYFRyYW5zZmVyLUVuY29kaW5nYCBoZWFkZXIgdmFsdWUATWlzc2luZyBleHBlY3RlZCBDUiBhZnRlciBjaHVuayBleHRlbnNpb24gdmFsdWUASW52YWxpZCBjaGFyYWN0ZXIgaW4gY2h1bmsgZXh0ZW5zaW9ucyBxdW90ZSB2YWx1ZQBJbnZhbGlkIHF1b3RlZC1wYWlyIGluIGNodW5rIGV4dGVuc2lvbnMgcXVvdGVkIHZhbHVlAEludmFsaWQgY2hhcmFjdGVyIGluIGNodW5rIGV4dGVuc2lvbnMgcXVvdGVkIHZhbHVlAFBhdXNlZCBieSBvbl9oZWFkZXJzX2NvbXBsZXRlAEludmFsaWQgRU9GIHN0YXRlAG9uX3Jlc2V0IHBhdXNlAG9uX2NodW5rX2hlYWRlciBwYXVzZQBvbl9tZXNzYWdlX2JlZ2luIHBhdXNlAG9uX2NodW5rX2V4dGVuc2lvbl92YWx1ZSBwYXVzZQBvbl9zdGF0dXNfY29tcGxldGUgcGF1c2UAb25fdmVyc2lvbl9jb21wbGV0ZSBwYXVzZQBvbl91cmxfY29tcGxldGUgcGF1c2UAb25fcHJvdG9jb2xfY29tcGxldGUgcGF1c2UAb25fY2h1bmtfY29tcGxldGUgcGF1c2UAb25faGVhZGVyX3ZhbHVlX2NvbXBsZXRlIHBhdXNlAG9uX21lc3NhZ2VfY29tcGxldGUgcGF1c2UAb25fbWV0aG9kX2NvbXBsZXRlIHBhdXNlAG9uX2hlYWRlcl9maWVsZF9jb21wbGV0ZSBwYXVzZQBvbl9jaHVua19leHRlbnNpb25fbmFtZSBwYXVzZQBVbmV4cGVjdGVkIHNwYWNlIGFmdGVyIHN0YXJ0IGxpbmUATWlzc2luZyBleHBlY3RlZCBDUiBhZnRlciByZXNwb25zZSBsaW5lAFNwYW4gY2FsbGJhY2sgZXJyb3IgaW4gb25fY2h1bmtfZXh0ZW5zaW9uX25hbWUASW52YWxpZCBjaGFyYWN0ZXIgaW4gY2h1bmsgZXh0ZW5zaW9ucyBuYW1lAE1pc3NpbmcgZXhwZWN0ZWQgQ1IgYWZ0ZXIgY2h1bmsgZXh0ZW5zaW9uIG5hbWUASW52YWxpZCBzdGF0dXMgY29kZQBQYXVzZSBvbiBDT05ORUNUL1VwZ3JhZGUAUGF1c2Ugb24gUFJJL1VwZ3JhZGUARXhwZWN0ZWQgSFRUUC8yIENvbm5lY3Rpb24gUHJlZmFjZQBTcGFuIGNhbGxiYWNrIGVycm9yIGluIG9uX21ldGhvZABFeHBlY3RlZCBzcGFjZSBhZnRlciBtZXRob2QAU3BhbiBjYWxsYmFjayBlcnJvciBpbiBvbl9oZWFkZXJfZmllbGQAUGF1c2VkAEludmFsaWQgd29yZCBlbmNvdW50ZXJlZABJbnZhbGlkIG1ldGhvZCBlbmNvdW50ZXJlZABNaXNzaW5nIGV4cGVjdGVkIENSIGFmdGVyIGNodW5rIGRhdGEARXhwZWN0ZWQgTEYgYWZ0ZXIgY2h1bmsgZGF0YQBVbmV4cGVjdGVkIGNoYXIgaW4gdXJsIHNjaGVtYQBSZXF1ZXN0IGhhcyBpbnZhbGlkIGBUcmFuc2Zlci1FbmNvZGluZ2AARGF0YSBhZnRlciBgQ29ubmVjdGlvbjogY2xvc2VgAFNXSVRDSF9QUk9YWQBVU0VfUFJPWFkATUtBQ1RJVklUWQBVTlBST0NFU1NBQkxFX0VOVElUWQBRVUVSWQBDT1BZAE1PVkVEX1BFUk1BTkVOVExZAFRPT19FQVJMWQBOT1RJRlkARkFJTEVEX0RFUEVOREVOQ1kAQkFEX0dBVEVXQVkAUExBWQBQVVQAQ0hFQ0tPVVQAR0FURVdBWV9USU1FT1VUAFJFUVVFU1RfVElNRU9VVABORVRXT1JLX0NPTk5FQ1RfVElNRU9VVABDT05ORUNUSU9OX1RJTUVPVVQATE9HSU5fVElNRU9VVABORVRXT1JLX1JFQURfVElNRU9VVABQT1NUAE1JU0RJUkVDVEVEX1JFUVVFU1QAQ0xJRU5UX0NMT1NFRF9SRVFVRVNUAENMSUVOVF9DTE9TRURfTE9BRF9CQUxBTkNFRF9SRVFVRVNUAEJBRF9SRVFVRVNUAEhUVFBfUkVRVUVTVF9TRU5UX1RPX0hUVFBTX1BPUlQAUkVQT1JUAElNX0FfVEVBUE9UAFJFU0VUX0NPTlRFTlQATk9fQ09OVEVOVABQQVJUSUFMX0NPTlRFTlQASFBFX0lOVkFMSURfQ09OU1RBTlQASFBFX0NCX1JFU0VUAEdFVABIUEVfU1RSSUNUAENPTkZMSUNUAFRFTVBPUkFSWV9SRURJUkVDVABQRVJNQU5FTlRfUkVESVJFQ1QAQ09OTkVDVABNVUxUSV9TVEFUVVMASFBFX0lOVkFMSURfU1RBVFVTAFRPT19NQU5ZX1JFUVVFU1RTAEVBUkxZX0hJTlRTAFVOQVZBSUxBQkxFX0ZPUl9MRUdBTF9SRUFTT05TAE9QVElPTlMAU1dJVENISU5HX1BST1RPQ09MUwBWQVJJQU5UX0FMU09fTkVHT1RJQVRFUwBNVUxUSVBMRV9DSE9JQ0VTAElOVEVSTkFMX1NFUlZFUl9FUlJPUgBXRUJfU0VSVkVSX1VOS05PV05fRVJST1IAUkFJTEdVTl9FUlJPUgBJREVOVElUWV9QUk9WSURFUl9BVVRIRU5USUNBVElPTl9FUlJPUgBTU0xfQ0VSVElGSUNBVEVfRVJST1IASU5WQUxJRF9YX0ZPUldBUkRFRF9GT1IAU0VUX1BBUkFNRVRFUgBHRVRfUEFSQU1FVEVSAEhQRV9VU0VSAFNFRV9PVEhFUgBIUEVfQ0JfQ0hVTktfSEVBREVSAEV4cGVjdGVkIExGIGFmdGVyIENSAE1LQ0FMRU5EQVIAU0VUVVAAV0VCX1NFUlZFUl9JU19ET1dOAFRFQVJET1dOAEhQRV9DTE9TRURfQ09OTkVDVElPTgBIRVVSSVNUSUNfRVhQSVJBVElPTgBESVNDT05ORUNURURfT1BFUkFUSU9OAE5PTl9BVVRIT1JJVEFUSVZFX0lORk9STUFUSU9OAEhQRV9JTlZBTElEX1ZFUlNJT04ASFBFX0NCX01FU1NBR0VfQkVHSU4AU0lURV9JU19GUk9aRU4ASFBFX0lOVkFMSURfSEVBREVSX1RPS0VOAElOVkFMSURfVE9LRU4ARk9SQklEREVOAEVOSEFOQ0VfWU9VUl9DQUxNAEhQRV9JTlZBTElEX1VSTABCTE9DS0VEX0JZX1BBUkVOVEFMX0NPTlRST0wATUtDT0wAQUNMAEhQRV9JTlRFUk5BTABSRVFVRVNUX0hFQURFUl9GSUVMRFNfVE9PX0xBUkdFX1VOT0ZGSUNJQUwASFBFX09LAFVOTElOSwBVTkxPQ0sAUFJJAFJFVFJZX1dJVEgASFBFX0lOVkFMSURfQ09OVEVOVF9MRU5HVEgASFBFX1VORVhQRUNURURfQ09OVEVOVF9MRU5HVEgARkxVU0gAUFJPUFBBVENIAE0tU0VBUkNIAFVSSV9UT09fTE9ORwBQUk9DRVNTSU5HAE1JU0NFTExBTkVPVVNfUEVSU0lTVEVOVF9XQVJOSU5HAE1JU0NFTExBTkVPVVNfV0FSTklORwBIUEVfSU5WQUxJRF9UUkFOU0ZFUl9FTkNPRElORwBFeHBlY3RlZCBDUkxGAEhQRV9JTlZBTElEX0NIVU5LX1NJWkUATU9WRQBDT05USU5VRQBIUEVfQ0JfU1RBVFVTX0NPTVBMRVRFAEhQRV9DQl9IRUFERVJTX0NPTVBMRVRFAEhQRV9DQl9WRVJTSU9OX0NPTVBMRVRFAEhQRV9DQl9VUkxfQ09NUExFVEUASFBFX0NCX1BST1RPQ09MX0NPTVBMRVRFAEhQRV9DQl9DSFVOS19DT01QTEVURQBIUEVfQ0JfSEVBREVSX1ZBTFVFX0NPTVBMRVRFAEhQRV9DQl9DSFVOS19FWFRFTlNJT05fVkFMVUVfQ09NUExFVEUASFBFX0NCX0NIVU5LX0VYVEVOU0lPTl9OQU1FX0NPTVBMRVRFAEhQRV9DQl9NRVNTQUdFX0NPTVBMRVRFAEhQRV9DQl9NRVRIT0RfQ09NUExFVEUASFBFX0NCX0hFQURFUl9GSUVMRF9DT01QTEVURQBERUxFVEUASFBFX0lOVkFMSURfRU9GX1NUQVRFAElOVkFMSURfU1NMX0NFUlRJRklDQVRFAFBBVVNFAE5PX1JFU1BPTlNFAFVOU1VQUE9SVEVEX01FRElBX1RZUEUAR09ORQBOT1RfQUNDRVBUQUJMRQBTRVJWSUNFX1VOQVZBSUxBQkxFAFJBTkdFX05PVF9TQVRJU0ZJQUJMRQBPUklHSU5fSVNfVU5SRUFDSEFCTEUAUkVTUE9OU0VfSVNfU1RBTEUAUFVSR0UATUVSR0UAUkVRVUVTVF9IRUFERVJfRklFTERTX1RPT19MQVJHRQBSRVFVRVNUX0hFQURFUl9UT09fTEFSR0UAUEFZTE9BRF9UT09fTEFSR0UASU5TVUZGSUNJRU5UX1NUT1JBR0UASFBFX1BBVVNFRF9VUEdSQURFAEhQRV9QQVVTRURfSDJfVVBHUkFERQBTT1VSQ0UAQU5OT1VOQ0UAVFJBQ0UASFBFX1VORVhQRUNURURfU1BBQ0UAREVTQ1JJQkUAVU5TVUJTQ1JJQkUAUkVDT1JEAEhQRV9JTlZBTElEX01FVEhPRABOT1RfRk9VTkQAUFJPUEZJTkQAVU5CSU5EAFJFQklORABVTkFVVEhPUklaRUQATUVUSE9EX05PVF9BTExPV0VEAEhUVFBfVkVSU0lPTl9OT1RfU1VQUE9SVEVEAEFMUkVBRFlfUkVQT1JURUQAQUNDRVBURUQATk9UX0lNUExFTUVOVEVEAExPT1BfREVURUNURUQASFBFX0NSX0VYUEVDVEVEAEhQRV9MRl9FWFBFQ1RFRABDUkVBVEVEAElNX1VTRUQASFBFX1BBVVNFRABUSU1FT1VUX09DQ1VSRUQAUEFZTUVOVF9SRVFVSVJFRABQUkVDT05ESVRJT05fUkVRVUlSRUQAUFJPWFlfQVVUSEVOVElDQVRJT05fUkVRVUlSRUQATkVUV09SS19BVVRIRU5USUNBVElPTl9SRVFVSVJFRABMRU5HVEhfUkVRVUlSRUQAU1NMX0NFUlRJRklDQVRFX1JFUVVJUkVEAFVQR1JBREVfUkVRVUlSRUQAUEFHRV9FWFBJUkVEAFBSRUNPTkRJVElPTl9GQUlMRUQARVhQRUNUQVRJT05fRkFJTEVEAFJFVkFMSURBVElPTl9GQUlMRUQAU1NMX0hBTkRTSEFLRV9GQUlMRUQATE9DS0VEAFRSQU5TRk9STUFUSU9OX0FQUExJRUQATk9UX01PRElGSUVEAE5PVF9FWFRFTkRFRABCQU5EV0lEVEhfTElNSVRfRVhDRUVERUQAU0lURV9JU19PVkVSTE9BREVEAEhFQUQARXhwZWN0ZWQgSFRUUC8sIFJUU1AvIG9yIElDRS8A5xUAAK8VAACkEgAAkhoAACYWAACeFAAA2xkAAHkVAAB+EgAA/hQAADYVAAALFgAA2BYAAPMSAABCGAAArBYAABIVAAAUFwAA7xcAAEgUAABxFwAAshoAAGsZAAB+GQAANRQAAIIaAABEFwAA/RYAAB4YAACHFwAAqhkAAJMSAAAHGAAALBcAAMoXAACkFwAA5xUAAOcVAABYFwAAOxgAAKASAAAtHAAAwxEAAEgRAADeEgAAQhMAAKQZAAD9EAAA9xUAAKUVAADvFgAA+BkAAEoWAABWFgAA9RUAAAoaAAAIGgAAARoAAKsVAABCEgAA1xAAAEwRAAAFGQAAVBYAAB4RAADKGQAAyBkAAE4WAAD/GAAAcRQAAPAVAADuFQAAlBkAAPwVAAC/GQAAmxkAAHwUAABDEQAAcBgAAJUUAAAnFAAAGRQAANUSAADUGQAARBYAAPcQAEG5OwsBAQBB0DsL4AEBAQIBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEDAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQBBuj0LBAEAAAIAQdE9C14DBAMDAwMDAAADAwADAwADAwMDAwMDAwMDAAUAAAAAAAMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAAAAAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMAAwADAEG6PwsEAQAAAgBB0T8LXgMAAwMDAwMAAAMDAAMDAAMDAwMDAwMDAwMABAAFAAAAAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMAAAADAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwADAAMAQbDBAAsNbG9zZWVlcC1hbGl2ZQBBycEACwEBAEHgwQAL4AEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQBBycMACwEBAEHgwwAL5wEBAQEBAQEBAQEBAQECAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAWNodW5rZWQAQfHFAAteAQABAQEBAQAAAQEAAQEAAQEBAQEBAQEBAQAAAAAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQAAAAEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAAEAAQBB0McACyFlY3Rpb25lbnQtbGVuZ3Rob25yb3h5LWNvbm5lY3Rpb24AQYDIAAsgcmFuc2Zlci1lbmNvZGluZ3BncmFkZQ0KDQpTTQ0KDQoAQanIAAsFAQIAAQMAQcDIAAtfBAUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUAQanKAAsFAQIAAQMAQcDKAAtfBAUFBgUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUAQanMAAsEAQAAAQBBwcwAC14CAgACAgICAgICAgICAgICAgICAgICAgICAgICAgIAAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAEGpzgALBQECAAEDAEHAzgALXwQFAAAFBQUFBQUFBQUFBQYFBQUFBQUFBQUFBQUABQAHCAUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQAFAAUABQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUAAAAFAEGp0AALBQEBAAEBAEHA0AALAQEAQdrQAAtBAgAAAAAAAAMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAAAAAAAAAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMAQanSAAsFAQEAAQEAQcDSAAsBAQBBytIACwYCAAAAAAIAQeHSAAs6AwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMAAAAAAAADAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwBBoNQAC50BTk9VTkNFRUNLT1VUTkVDVEVURUNSSUJFTFVTSEVURUFEU0VBUkNIUkdFQ1RJVklUWUxFTkRBUlZFT1RJRllQVElPTlNDSFNFQVlTVEFUQ0hHRVVFUllPUkRJUkVDVE9SVFJDSFBBUkFNRVRFUlVSQ0VCU0NSSUJFQVJET1dOQUNFSU5ETktDS1VCU0NSSUJFVFRQQ0VUU1BBRFRQLw==",fw;Object.defineProperty(n3,"exports",{get:()=>fw||(fw=wfe.from(Sfe,"base64"))})});var RE=U((BTe,s3)=>{"use strict";function vE(){let e=globalThis.__secureExecBuiltinZlibModule;if(!e)throw new Error("node:zlib bridge module is not available");return e}s3.exports=new Proxy({},{get(e,t){return vE()[t]},has(e,t){return t in vE()},ownKeys(){return Reflect.ownKeys(vE())},getOwnPropertyDescriptor(e,t){let r=Object.getOwnPropertyDescriptor(vE(),t);return r||{configurable:!0,enumerable:!0,value:void 0,writable:!1}}})});var td=U((ITe,h3)=>{"use strict";var o3=["GET","HEAD","POST"],_fe=new Set(o3),vfe=[101,204,205,304],a3=[301,302,303,307,308],Rfe=new Set(a3),A3=["1","7","9","11","13","15","17","19","20","21","22","23","25","37","42","43","53","69","77","79","87","95","101","102","103","104","109","110","111","113","115","117","119","123","135","137","139","143","161","179","389","427","465","512","513","514","515","526","530","531","532","540","548","554","556","563","587","601","636","989","990","993","995","1719","1720","1723","2049","3659","4045","4190","5060","5061","6000","6566","6665","6666","6667","6668","6669","6679","6697","10080"],Dfe=new Set(A3),f3=["no-referrer","no-referrer-when-downgrade","same-origin","origin","strict-origin","origin-when-cross-origin","strict-origin-when-cross-origin","unsafe-url"],Tfe=["",...f3],Nfe=new Set(f3),Mfe=["follow","manual","error"],u3=["GET","HEAD","OPTIONS","TRACE"],Ffe=new Set(u3),kfe=["navigate","same-origin","no-cors","cors"],Ufe=["omit","same-origin","include"],xfe=["default","no-store","reload","no-cache","force-cache","only-if-cached"],Lfe=["content-encoding","content-language","content-location","content-type","content-length"],Pfe=["half"],c3=["CONNECT","TRACE","TRACK"],Ofe=new Set(c3),l3=["audio","audioworklet","font","image","manifest","paintworklet","script","style","track","video","xslt",""],Hfe=new Set(l3);h3.exports={subresource:l3,forbiddenMethods:c3,requestBodyHeader:Lfe,referrerPolicy:Tfe,requestRedirect:Mfe,requestMode:kfe,requestCredentials:Ufe,requestCache:xfe,redirectStatus:a3,corsSafeListedMethods:o3,nullBodyStatus:vfe,safeMethods:u3,badPorts:A3,requestDuplex:Pfe,subresourceSet:Hfe,badPortsSet:Dfe,redirectStatusSet:Rfe,corsSafeListedMethodsSet:_fe,safeMethodsSet:Ffe,forbiddenMethodsSet:Ofe,referrerPolicyTokens:Nfe}});var g3=U((bTe,d3)=>{"use strict";var uw=Symbol.for("undici.globalOrigin.1");function qfe(){return globalThis[uw]}function Gfe(e){if(e===void 0){Object.defineProperty(globalThis,uw,{value:void 0,writable:!0,enumerable:!1,configurable:!1});return}let t=new URL(e);if(t.protocol!=="http:"&&t.protocol!=="https:")throw new TypeError(`Only http & https urls are allowed, received ${t.protocol}`);Object.defineProperty(globalThis,uw,{value:t,writable:!0,enumerable:!1,configurable:!1})}d3.exports={getGlobalOrigin:qfe,setGlobalOrigin:Gfe}});var cw=U((CTe,p3)=>{"use strict";var Yfe=new TextDecoder;function Wfe(e){return e.length===0?"":(e[0]===239&&e[1]===187&&e[2]===191&&(e=e.subarray(3)),Yfe.decode(e))}p3.exports={utf8DecodeBytes:Wfe}});var Ef=U((QTe,B3)=>{"use strict";var E3=Gt(),{utf8DecodeBytes:Vfe}=cw();function Jfe(e,t,r){let n="";for(;r.position<t.length&&e(t[r.position]);)n+=t[r.position],r.position++;return n}function jfe(e,t,r){let n=t.indexOf(e,r.position),i=r.position;return n===-1?(r.position=t.length,t.slice(i)):(r.position=n,t.slice(i,r.position))}var zfe=/[\u0009\u000A\u000C\u000D\u0020]/g;function Kfe(e){e=e.replace(zfe,"");let t=e.length;if(t%4===0&&e.charCodeAt(t-1)===61&&(--t,e.charCodeAt(t-1)===61&&--t),t%4===1||/[^+/0-9A-Za-z]/.test(e.length===t?e:e.substring(0,t)))return"failure";let r=Buffer.from(e,"base64");return new Uint8Array(r.buffer,r.byteOffset,r.byteLength)}function y3(e){return e===9||e===10||e===12||e===13||e===32}function Xfe(e){let t=e.length;if(65535>t)return String.fromCharCode.apply(null,e);let r="",n=0,i=65535;for(;n<t;)n+i>t&&(i=t-n),r+=String.fromCharCode.apply(null,e.subarray(n,n+=i));return r}var Zfe=/[^\x00-\xFF]/;function $fe(e){return E3(!Zfe.test(e)),e}function eue(e){return JSON.parse(Vfe(e))}function tue(e,t=!0,r=!0){return m3(e,t,r,y3)}function m3(e,t,r,n){let i=0,s=e.length-1;if(t)for(;i<e.length&&n(e.charCodeAt(i));)i++;if(r)for(;s>0&&n(e.charCodeAt(s));)s--;return i===0&&s===e.length-1?e:e.slice(i,s+1)}function rue(e){let t=JSON.stringify(e);if(t===void 0)throw new TypeError("Value is not JSON serializable");return E3(typeof t=="string"),t}B3.exports={collectASequenceOfCodePoints:Jfe,collectASequenceOfCodePointsFast:jfe,forgivingBase64:Kfe,isASCIIWhitespace:y3,isomorphicDecode:Xfe,isomorphicEncode:$fe,parseJSONFromBytes:eue,removeASCIIWhitespace:tue,removeChars:m3,serializeJavascriptValueToJSONString:rue}});var yf=U((wTe,S3)=>{"use strict";var TE=Gt(),{forgivingBase64:nue,collectASequenceOfCodePoints:lw,collectASequenceOfCodePointsFast:rd,isomorphicDecode:iue,removeASCIIWhitespace:sue,removeChars:oue}=Ef(),aue=new TextEncoder,nd=/^[-!#$%&'*+.^_|~A-Za-z0-9]+$/u,Aue=/[\u000A\u000D\u0009\u0020]/u,fue=/^[\u0009\u0020-\u007E\u0080-\u00FF]+$/u;function uue(e){TE(e.protocol==="data:");let t=C3(e,!0);t=t.slice(5);let r={position:0},n=rd(",",t,r),i=n.length;if(n=sue(n,!0,!0),r.position>=t.length)return"failure";r.position++;let s=t.slice(i+1),o=Q3(s);if(/;(?:\u0020*)base64$/ui.test(n)){let A=iue(o);if(o=nue(A),o==="failure")return"failure";n=n.slice(0,-6),n=n.replace(/(\u0020+)$/u,""),n=n.slice(0,-1)}n.startsWith(";")&&(n="text/plain"+n);let a=hw(n);return a==="failure"&&(a=hw("text/plain;charset=US-ASCII")),{mimeType:a,body:o}}function C3(e,t=!1){if(!t)return e.href;let r=e.href,n=e.hash.length,i=n===0?r:r.substring(0,r.length-n);return!n&&r.endsWith("#")?i.slice(0,-1):i}function Q3(e){let t=aue.encode(e);return cue(t)}function I3(e){return e>=48&&e<=57||e>=65&&e<=70||e>=97&&e<=102}function b3(e){return e>=48&&e<=57?e-48:(e&223)-55}function cue(e){let t=e.length,r=new Uint8Array(t),n=0,i=0;for(;i<t;){let s=e[i];s!==37?r[n++]=s:s===37&&!(I3(e[i+1])&&I3(e[i+2]))?r[n++]=37:(r[n++]=b3(e[i+1])<<4|b3(e[i+2]),i+=2),++i}return t===n?r:r.subarray(0,n)}function hw(e){e=DE(e,!0,!0);let t={position:0},r=rd("/",e,t);if(r.length===0||!nd.test(r)||t.position>=e.length)return"failure";t.position++;let n=rd(";",e,t);if(n=DE(n,!1,!0),n.length===0||!nd.test(n))return"failure";let i=r.toLowerCase(),s=n.toLowerCase(),o={type:i,subtype:s,parameters:new Map,essence:`${i}/${s}`};for(;t.position<e.length;){t.position++,lw(f=>Aue.test(f),e,t);let a=lw(f=>f!==";"&&f!=="=",e,t);if(a=a.toLowerCase(),t.position<e.length){if(e[t.position]===";")continue;t.position++}if(t.position>=e.length)break;let A=null;if(e[t.position]==='"')A=w3(e,t,!0),rd(";",e,t);else if(A=rd(";",e,t),A=DE(A,!1,!0),A.length===0)continue;a.length!==0&&nd.test(a)&&(A.length===0||fue.test(A))&&!o.parameters.has(a)&&o.parameters.set(a,A)}return o}function w3(e,t,r=!1){let n=t.position,i="";for(TE(e[t.position]==='"'),t.position++;i+=lw(o=>o!=='"'&&o!=="\\",e,t),!(t.position>=e.length);){let s=e[t.position];if(t.position++,s==="\\"){if(t.position>=e.length){i+="\\";break}i+=e[t.position],t.position++}else{TE(s==='"');break}}return r?i:e.slice(n,t.position)}function lue(e){TE(e!=="failure");let{parameters:t,essence:r}=e,n=r;for(let[i,s]of t.entries())n+=";",n+=i,n+="=",nd.test(s)||(s=s.replace(/[\\"]/ug,"\\$&"),s='"'+s,s+='"'),n+=s;return n}function hue(e){return e===13||e===10||e===9||e===32}function DE(e,t=!0,r=!0){return oue(e,t,r,hue)}function due(e){switch(e.essence){case"application/ecmascript":case"application/javascript":case"application/x-ecmascript":case"application/x-javascript":case"text/ecmascript":case"text/javascript":case"text/javascript1.0":case"text/javascript1.1":case"text/javascript1.2":case"text/javascript1.3":case"text/javascript1.4":case"text/javascript1.5":case"text/jscript":case"text/livescript":case"text/x-ecmascript":case"text/x-javascript":return"text/javascript";case"application/json":case"text/json":return"application/json";case"image/svg+xml":return"image/svg+xml";case"text/xml":case"application/xml":return"application/xml"}return e.subtype.endsWith("+json")?"application/json":e.subtype.endsWith("+xml")?"application/xml":""}S3.exports={dataURLProcessor:uue,URLSerializer:C3,stringPercentDecode:Q3,parseMIMEType:hw,collectAnHTTPQuotedString:w3,serializeAMimeType:lue,removeHTTPWhitespace:DE,minimizeSupportedMimeType:due,HTTP_TOKEN_CODEPOINTS:nd}});var v3=U((STe,_3)=>{"use strict";var gue=globalThis.performance??{now(){return Date.now()},timeOrigin:Date.now()};_3.exports={performance:gue}});var dw=U((_Te,R3)=>{"use strict";function pue(e){return e instanceof ArrayBuffer}function Eue(e){return ArrayBuffer.isView(e)}function yue(e){return e instanceof Uint8Array}function mue(e){return!1}R3.exports={isArrayBuffer:pue,isArrayBufferView:Eue,isProxy:mue,isUint8Array:yue}});var mf=U((vTe,pw)=>{"use strict";var gw=65536,Bue=4294967295;function Iue(){throw new Error(`Secure random number generation is not supported by this browser.
-Use Chrome, Firefox or Internet Explorer 11`)}var bue=at().Buffer,NE=globalThis.crypto||globalThis.msCrypto;NE&&NE.getRandomValues?pw.exports=Cue:pw.exports=Iue;function Cue(e,t){if(e>Bue)throw new RangeError("requested too many random bytes");var r=bue.allocUnsafe(e);if(e>0)if(e>gw)for(var n=0;n<e;n+=gw)NE.getRandomValues(r.slice(n,n+gw));else NE.getRandomValues(r);return typeof t=="function"?process.nextTick(function(){t(null,r)}):r}});var T3=U((RTe,D3)=>{var Que={}.toString;D3.exports=Array.isArray||function(e){return Que.call(e)=="[object Array]"}});var M3=U((DTe,N3)=>{"use strict";var wue=$i(),Sue=Ys(),_ue=Sue("TypedArray.prototype.buffer",!0),vue=sb();N3.exports=_ue||function(t){if(!vue(t))throw new wue("Not a Typed Array");return t.buffer}});var id=U((TTe,k3)=>{"use strict";var ss=at().Buffer,Rue=T3(),Due=M3(),Tue=ArrayBuffer.isView||function(t){try{return Due(t),!0}catch{return!1}},Nue=typeof Uint8Array<"u",F3=typeof ArrayBuffer<"u"&&typeof Uint8Array<"u",Mue=F3&&(ss.prototype instanceof Uint8Array||ss.TYPED_ARRAY_SUPPORT);k3.exports=function(t,r){if(ss.isBuffer(t))return t.constructor&&!("isBuffer"in t)?ss.from(t):t;if(typeof t=="string")return ss.from(t,r);if(F3&&Tue(t)){if(t.byteLength===0)return ss.alloc(0);if(Mue){var n=ss.from(t.buffer,t.byteOffset,t.byteLength);if(n.byteLength===t.byteLength)return n}var i=t instanceof Uint8Array?t:new Uint8Array(t.buffer,t.byteOffset,t.byteLength),s=ss.from(i);if(s.length===t.byteLength)return s}if(Nue&&t instanceof Uint8Array)return ss.from(t);var o=Rue(t);if(o)for(var a=0;a<t.length;a+=1){var A=t[a];if(typeof A!="number"||A<0||A>255||~~A!==A)throw new RangeError("Array items must be numbers in the range 0-255.")}if(o||ss.isBuffer(t)&&t.constructor&&typeof t.constructor.isBuffer=="function"&&t.constructor.isBuffer(t))return ss.from(t);throw new TypeError('The "data" argument must be a string, an Array, a Buffer, a Uint8Array, or a DataView.')}});var P3=U((NTe,L3)=>{"use strict";var Fue=at().Buffer,kue=id(),x3=typeof Uint8Array<"u",Uue=x3&&typeof ArrayBuffer<"u",U3=Uue&&ArrayBuffer.isView;L3.exports=function(e,t){if(typeof e=="string"||Fue.isBuffer(e)||x3&&e instanceof Uint8Array||U3&&U3(e))return kue(e,t);throw new TypeError('The "data" argument must be a string, a Buffer, a Uint8Array, or a DataView')}});var sd=U((MTe,Ew)=>{"use strict";typeof process>"u"||!process.version||process.version.indexOf("v0.")===0||process.version.indexOf("v1.")===0&&process.version.indexOf("v1.8.")!==0?Ew.exports={nextTick:xue}:Ew.exports=process;function xue(e,t,r,n){if(typeof e!="function")throw new TypeError('"callback" argument must be a function');var i=arguments.length,s,o;switch(i){case 0:case 1:return process.nextTick(e);case 2:return process.nextTick(function(){e.call(null,t)});case 3:return process.nextTick(function(){e.call(null,t,r)});case 4:return process.nextTick(function(){e.call(null,t,r,n)});default:for(s=new Array(i-1),o=0;o<s.length;)s[o++]=arguments[o];return process.nextTick(function(){e.apply(null,s)})}}});var H3=U((FTe,O3)=>{var Lue={}.toString;O3.exports=Array.isArray||function(e){return Lue.call(e)=="[object Array]"}});var yw=U((kTe,q3)=>{q3.exports=Zi().EventEmitter});var FE=U((mw,Y3)=>{var ME=Gr(),Ko=ME.Buffer;function G3(e,t){for(var r in e)t[r]=e[r]}Ko.from&&Ko.alloc&&Ko.allocUnsafe&&Ko.allocUnsafeSlow?Y3.exports=ME:(G3(ME,mw),mw.Buffer=vc);function vc(e,t,r){return Ko(e,t,r)}G3(Ko,vc);vc.from=function(e,t,r){if(typeof e=="number")throw new TypeError("Argument must not be a number");return Ko(e,t,r)};vc.alloc=function(e,t,r){if(typeof e!="number")throw new TypeError("Argument must be a number");var n=Ko(e);return t!==void 0?typeof r=="string"?n.fill(t,r):n.fill(t):n.fill(0),n};vc.allocUnsafe=function(e){if(typeof e!="number")throw new TypeError("Argument must be a number");return Ko(e)};vc.allocUnsafeSlow=function(e){if(typeof e!="number")throw new TypeError("Argument must be a number");return ME.SlowBuffer(e)}});var Rc=U(rn=>{function Pue(e){return Array.isArray?Array.isArray(e):kE(e)==="[object Array]"}rn.isArray=Pue;function Oue(e){return typeof e=="boolean"}rn.isBoolean=Oue;function Hue(e){return e===null}rn.isNull=Hue;function que(e){return e==null}rn.isNullOrUndefined=que;function Gue(e){return typeof e=="number"}rn.isNumber=Gue;function Yue(e){return typeof e=="string"}rn.isString=Yue;function Wue(e){return typeof e=="symbol"}rn.isSymbol=Wue;function Vue(e){return e===void 0}rn.isUndefined=Vue;function Jue(e){return kE(e)==="[object RegExp]"}rn.isRegExp=Jue;function jue(e){return typeof e=="object"&&e!==null}rn.isObject=jue;function zue(e){return kE(e)==="[object Date]"}rn.isDate=zue;function Kue(e){return kE(e)==="[object Error]"||e instanceof Error}rn.isError=Kue;function Xue(e){return typeof e=="function"}rn.isFunction=Xue;function Zue(e){return e===null||typeof e=="boolean"||typeof e=="number"||typeof e=="string"||typeof e=="symbol"||typeof e>"u"}rn.isPrimitive=Zue;rn.isBuffer=Gr().Buffer.isBuffer;function kE(e){return Object.prototype.toString.call(e)}});var V3=U((xTe,Bw)=>{"use strict";function $ue(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}var W3=FE().Buffer,od=Yr();function ece(e,t,r){e.copy(t,r)}Bw.exports=(function(){function e(){$ue(this,e),this.head=null,this.tail=null,this.length=0}return e.prototype.push=function(r){var n={data:r,next:null};this.length>0?this.tail.next=n:this.head=n,this.tail=n,++this.length},e.prototype.unshift=function(r){var n={data:r,next:this.head};this.length===0&&(this.tail=n),this.head=n,++this.length},e.prototype.shift=function(){if(this.length!==0){var r=this.head.data;return this.length===1?this.head=this.tail=null:this.head=this.head.next,--this.length,r}},e.prototype.clear=function(){this.head=this.tail=null,this.length=0},e.prototype.join=function(r){if(this.length===0)return"";for(var n=this.head,i=""+n.data;n=n.next;)i+=r+n.data;return i},e.prototype.concat=function(r){if(this.length===0)return W3.alloc(0);for(var n=W3.allocUnsafe(r>>>0),i=this.head,s=0;i;)ece(i.data,n,s),s+=i.data.length,i=i.next;return n},e})();od&&od.inspect&&od.inspect.custom&&(Bw.exports.prototype[od.inspect.custom]=function(){var e=od.inspect({length:this.length});return this.constructor.name+" "+e})});var Iw=U((LTe,J3)=>{"use strict";var UE=sd();function tce(e,t){var r=this,n=this._readableState&&this._readableState.destroyed,i=this._writableState&&this._writableState.destroyed;return n||i?(t?t(e):e&&(this._writableState?this._writableState.errorEmitted||(this._writableState.errorEmitted=!0,UE.nextTick(xE,this,e)):UE.nextTick(xE,this,e)),this):(this._readableState&&(this._readableState.destroyed=!0),this._writableState&&(this._writableState.destroyed=!0),this._destroy(e||null,function(s){!t&&s?r._writableState?r._writableState.errorEmitted||(r._writableState.errorEmitted=!0,UE.nextTick(xE,r,s)):UE.nextTick(xE,r,s):t&&t(s)}),this)}function rce(){this._readableState&&(this._readableState.destroyed=!1,this._readableState.reading=!1,this._readableState.ended=!1,this._readableState.endEmitted=!1),this._writableState&&(this._writableState.destroyed=!1,this._writableState.ended=!1,this._writableState.ending=!1,this._writableState.finalCalled=!1,this._writableState.prefinished=!1,this._writableState.finished=!1,this._writableState.errorEmitted=!1)}function xE(e,t){e.emit("error",t)}J3.exports={destroy:tce,undestroy:rce}});var Cw=U((PTe,tL)=>{"use strict";var Bf=sd();tL.exports=Br;function z3(e){var t=this;this.next=null,this.entry=null,this.finish=function(){Bce(t,e)}}var nce=!process.browser&&["v0.10","v0.9."].indexOf(process.version.slice(0,5))>-1?setImmediate:Bf.nextTick,Dc;Br.WritableState=Ad;var K3=Object.create(Rc());K3.inherits=je();var ice={deprecate:yb()},X3=yw(),PE=FE().Buffer,sce=(typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof self<"u"?self:{}).Uint8Array||function(){};function oce(e){return PE.from(e)}function ace(e){return PE.isBuffer(e)||e instanceof sce}var Z3=Iw();K3.inherits(Br,X3);function Ace(){}function Ad(e,t){Dc=Dc||If(),e=e||{};var r=t instanceof Dc;this.objectMode=!!e.objectMode,r&&(this.objectMode=this.objectMode||!!e.writableObjectMode);var n=e.highWaterMark,i=e.writableHighWaterMark,s=this.objectMode?16:16*1024;n||n===0?this.highWaterMark=n:r&&(i||i===0)?this.highWaterMark=i:this.highWaterMark=s,this.highWaterMark=Math.floor(this.highWaterMark),this.finalCalled=!1,this.needDrain=!1,this.ending=!1,this.ended=!1,this.finished=!1,this.destroyed=!1;var o=e.decodeStrings===!1;this.decodeStrings=!o,this.defaultEncoding=e.defaultEncoding||"utf8",this.length=0,this.writing=!1,this.corked=0,this.sync=!0,this.bufferProcessing=!1,this.onwrite=function(a){gce(t,a)},this.writecb=null,this.writelen=0,this.bufferedRequest=null,this.lastBufferedRequest=null,this.pendingcb=0,this.prefinished=!1,this.errorEmitted=!1,this.bufferedRequestCount=0,this.corkedRequestsFree=new z3(this)}Ad.prototype.getBuffer=function(){for(var t=this.bufferedRequest,r=[];t;)r.push(t),t=t.next;return r};(function(){try{Object.defineProperty(Ad.prototype,"buffer",{get:ice.deprecate(function(){return this.getBuffer()},"_writableState.buffer is deprecated. Use _writableState.getBuffer instead.","DEP0003")})}catch{}})();var LE;typeof Symbol=="function"&&Symbol.hasInstance&&typeof Function.prototype[Symbol.hasInstance]=="function"?(LE=Function.prototype[Symbol.hasInstance],Object.defineProperty(Br,Symbol.hasInstance,{value:function(e){return LE.call(this,e)?!0:this!==Br?!1:e&&e._writableState instanceof Ad}})):LE=function(e){return e instanceof this};function Br(e){if(Dc=Dc||If(),!LE.call(Br,this)&&!(this instanceof Dc))return new Br(e);this._writableState=new Ad(e,this),this.writable=!0,e&&(typeof e.write=="function"&&(this._write=e.write),typeof e.writev=="function"&&(this._writev=e.writev),typeof e.destroy=="function"&&(this._destroy=e.destroy),typeof e.final=="function"&&(this._final=e.final)),X3.call(this)}Br.prototype.pipe=function(){this.emit("error",new Error("Cannot pipe, not readable"))};function fce(e,t){var r=new Error("write after end");e.emit("error",r),Bf.nextTick(t,r)}function uce(e,t,r,n){var i=!0,s=!1;return r===null?s=new TypeError("May not write null values to stream"):typeof r!="string"&&r!==void 0&&!t.objectMode&&(s=new TypeError("Invalid non-string/buffer chunk")),s&&(e.emit("error",s),Bf.nextTick(n,s),i=!1),i}Br.prototype.write=function(e,t,r){var n=this._writableState,i=!1,s=!n.objectMode&&ace(e);return s&&!PE.isBuffer(e)&&(e=oce(e)),typeof t=="function"&&(r=t,t=null),s?t="buffer":t||(t=n.defaultEncoding),typeof r!="function"&&(r=Ace),n.ended?fce(this,r):(s||uce(this,n,e,r))&&(n.pendingcb++,i=lce(this,n,s,e,t,r)),i};Br.prototype.cork=function(){var e=this._writableState;e.corked++};Br.prototype.uncork=function(){var e=this._writableState;e.corked&&(e.corked--,!e.writing&&!e.corked&&!e.bufferProcessing&&e.bufferedRequest&&$3(this,e))};Br.prototype.setDefaultEncoding=function(t){if(typeof t=="string"&&(t=t.toLowerCase()),!(["hex","utf8","utf-8","ascii","binary","base64","ucs2","ucs-2","utf16le","utf-16le","raw"].indexOf((t+"").toLowerCase())>-1))throw new TypeError("Unknown encoding: "+t);return this._writableState.defaultEncoding=t,this};function cce(e,t,r){return!e.objectMode&&e.decodeStrings!==!1&&typeof t=="string"&&(t=PE.from(t,r)),t}Object.defineProperty(Br.prototype,"writableHighWaterMark",{enumerable:!1,get:function(){return this._writableState.highWaterMark}});function lce(e,t,r,n,i,s){if(!r){var o=cce(t,n,i);n!==o&&(r=!0,i="buffer",n=o)}var a=t.objectMode?1:n.length;t.length+=a;var A=t.length<t.highWaterMark;if(A||(t.needDrain=!0),t.writing||t.corked){var f=t.lastBufferedRequest;t.lastBufferedRequest={chunk:n,encoding:i,isBuf:r,callback:s,next:null},f?f.next=t.lastBufferedRequest:t.bufferedRequest=t.lastBufferedRequest,t.bufferedRequestCount+=1}else bw(e,t,!1,a,n,i,s);return A}function bw(e,t,r,n,i,s,o){t.writelen=n,t.writecb=o,t.writing=!0,t.sync=!0,r?e._writev(i,t.onwrite):e._write(i,s,t.onwrite),t.sync=!1}function hce(e,t,r,n,i){--t.pendingcb,r?(Bf.nextTick(i,n),Bf.nextTick(ad,e,t),e._writableState.errorEmitted=!0,e.emit("error",n)):(i(n),e._writableState.errorEmitted=!0,e.emit("error",n),ad(e,t))}function dce(e){e.writing=!1,e.writecb=null,e.length-=e.writelen,e.writelen=0}function gce(e,t){var r=e._writableState,n=r.sync,i=r.writecb;if(dce(r),t)hce(e,r,n,t,i);else{var s=eL(r);!s&&!r.corked&&!r.bufferProcessing&&r.bufferedRequest&&$3(e,r),n?nce(j3,e,r,s,i):j3(e,r,s,i)}}function j3(e,t,r,n){r||pce(e,t),t.pendingcb--,n(),ad(e,t)}function pce(e,t){t.length===0&&t.needDrain&&(t.needDrain=!1,e.emit("drain"))}function $3(e,t){t.bufferProcessing=!0;var r=t.bufferedRequest;if(e._writev&&r&&r.next){var n=t.bufferedRequestCount,i=new Array(n),s=t.corkedRequestsFree;s.entry=r;for(var o=0,a=!0;r;)i[o]=r,r.isBuf||(a=!1),r=r.next,o+=1;i.allBuffers=a,bw(e,t,!0,t.length,i,"",s.finish),t.pendingcb++,t.lastBufferedRequest=null,s.next?(t.corkedRequestsFree=s.next,s.next=null):t.corkedRequestsFree=new z3(t),t.bufferedRequestCount=0}else{for(;r;){var A=r.chunk,f=r.encoding,l=r.callback,p=t.objectMode?1:A.length;if(bw(e,t,!1,p,A,f,l),r=r.next,t.bufferedRequestCount--,t.writing)break}r===null&&(t.lastBufferedRequest=null)}t.bufferedRequest=r,t.bufferProcessing=!1}Br.prototype._write=function(e,t,r){r(new Error("_write() is not implemented"))};Br.prototype._writev=null;Br.prototype.end=function(e,t,r){var n=this._writableState;typeof e=="function"?(r=e,e=null,t=null):typeof t=="function"&&(r=t,t=null),e!=null&&this.write(e,t),n.corked&&(n.corked=1,this.uncork()),n.ending||mce(this,n,r)};function eL(e){return e.ending&&e.length===0&&e.bufferedRequest===null&&!e.finished&&!e.writing}function Ece(e,t){e._final(function(r){t.pendingcb--,r&&e.emit("error",r),t.prefinished=!0,e.emit("prefinish"),ad(e,t)})}function yce(e,t){!t.prefinished&&!t.finalCalled&&(typeof e._final=="function"?(t.pendingcb++,t.finalCalled=!0,Bf.nextTick(Ece,e,t)):(t.prefinished=!0,e.emit("prefinish")))}function ad(e,t){var r=eL(t);return r&&(yce(e,t),t.pendingcb===0&&(t.finished=!0,e.emit("finish"))),r}function mce(e,t,r){t.ending=!0,ad(e,t),r&&(t.finished?Bf.nextTick(r):e.once("finish",r)),t.ended=!0,e.writable=!1}function Bce(e,t,r){var n=e.entry;for(e.entry=null;n;){var i=n.callback;t.pendingcb--,i(r),n=n.next}t.corkedRequestsFree.next=e}Object.defineProperty(Br.prototype,"destroyed",{get:function(){return this._writableState===void 0?!1:this._writableState.destroyed},set:function(e){this._writableState&&(this._writableState.destroyed=e)}});Br.prototype.destroy=Z3.destroy;Br.prototype._undestroy=Z3.undestroy;Br.prototype._destroy=function(e,t){this.end(),t(e)}});var If=U((OTe,sL)=>{"use strict";var rL=sd(),Ice=Object.keys||function(e){var t=[];for(var r in e)t.push(r);return t};sL.exports=Xo;var nL=Object.create(Rc());nL.inherits=je();var iL=Sw(),ww=Cw();nL.inherits(Xo,iL);for(Qw=Ice(ww.prototype),OE=0;OE<Qw.length;OE++)HE=Qw[OE],Xo.prototype[HE]||(Xo.prototype[HE]=ww.prototype[HE]);var Qw,HE,OE;function Xo(e){if(!(this instanceof Xo))return new Xo(e);iL.call(this,e),ww.call(this,e),e&&e.readable===!1&&(this.readable=!1),e&&e.writable===!1&&(this.writable=!1),this.allowHalfOpen=!0,e&&e.allowHalfOpen===!1&&(this.allowHalfOpen=!1),this.once("end",bce)}Object.defineProperty(Xo.prototype,"writableHighWaterMark",{enumerable:!1,get:function(){return this._writableState.highWaterMark}});function bce(){this.allowHalfOpen||this._writableState.ended||rL.nextTick(Cce,this)}function Cce(e){e.end()}Object.defineProperty(Xo.prototype,"destroyed",{get:function(){return this._readableState===void 0||this._writableState===void 0?!1:this._readableState.destroyed&&this._writableState.destroyed},set:function(e){this._readableState===void 0||this._writableState===void 0||(this._readableState.destroyed=e,this._writableState.destroyed=e)}});Xo.prototype._destroy=function(e,t){this.push(null),this.end(),rL.nextTick(t,e)}});var Sw=U((qTe,EL)=>{"use strict";var Nc=sd();EL.exports=$t;var Qce=H3(),fd;$t.ReadableState=lL;var HTe=Zi().EventEmitter,fL=function(e,t){return e.listeners(t).length},Tw=yw(),ud=FE().Buffer,wce=(typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof self<"u"?self:{}).Uint8Array||function(){};function Sce(e){return ud.from(e)}function _ce(e){return ud.isBuffer(e)||e instanceof wce}var uL=Object.create(Rc());uL.inherits=je();var _w=Yr(),St=void 0;_w&&_w.debuglog?St=_w.debuglog("stream"):St=function(){};var vce=V3(),cL=Iw(),Tc;uL.inherits($t,Tw);var vw=["error","close","destroy","pause","resume"];function Rce(e,t,r){if(typeof e.prependListener=="function")return e.prependListener(t,r);!e._events||!e._events[t]?e.on(t,r):Qce(e._events[t])?e._events[t].unshift(r):e._events[t]=[r,e._events[t]]}function lL(e,t){fd=fd||If(),e=e||{};var r=t instanceof fd;this.objectMode=!!e.objectMode,r&&(this.objectMode=this.objectMode||!!e.readableObjectMode);var n=e.highWaterMark,i=e.readableHighWaterMark,s=this.objectMode?16:16*1024;n||n===0?this.highWaterMark=n:r&&(i||i===0)?this.highWaterMark=i:this.highWaterMark=s,this.highWaterMark=Math.floor(this.highWaterMark),this.buffer=new vce,this.length=0,this.pipes=null,this.pipesCount=0,this.flowing=null,this.ended=!1,this.endEmitted=!1,this.reading=!1,this.sync=!0,this.needReadable=!1,this.emittedReadable=!1,this.readableListening=!1,this.resumeScheduled=!1,this.destroyed=!1,this.defaultEncoding=e.defaultEncoding||"utf8",this.awaitDrain=0,this.readingMore=!1,this.decoder=null,this.encoding=null,e.encoding&&(Tc||(Tc=sf().StringDecoder),this.decoder=new Tc(e.encoding),this.encoding=e.encoding)}function $t(e){if(fd=fd||If(),!(this instanceof $t))return new $t(e);this._readableState=new lL(e,this),this.readable=!0,e&&(typeof e.read=="function"&&(this._read=e.read),typeof e.destroy=="function"&&(this._destroy=e.destroy)),Tw.call(this)}Object.defineProperty($t.prototype,"destroyed",{get:function(){return this._readableState===void 0?!1:this._readableState.destroyed},set:function(e){this._readableState&&(this._readableState.destroyed=e)}});$t.prototype.destroy=cL.destroy;$t.prototype._undestroy=cL.undestroy;$t.prototype._destroy=function(e,t){this.push(null),t(e)};$t.prototype.push=function(e,t){var r=this._readableState,n;return r.objectMode?n=!0:typeof e=="string"&&(t=t||r.defaultEncoding,t!==r.encoding&&(e=ud.from(e,t),t=""),n=!0),hL(this,e,t,!1,n)};$t.prototype.unshift=function(e){return hL(this,e,null,!0,!1)};function hL(e,t,r,n,i){var s=e._readableState;if(t===null)s.reading=!1,Mce(e,s);else{var o;i||(o=Dce(s,t)),o?e.emit("error",o):s.objectMode||t&&t.length>0?(typeof t!="string"&&!s.objectMode&&Object.getPrototypeOf(t)!==ud.prototype&&(t=Sce(t)),n?s.endEmitted?e.emit("error",new Error("stream.unshift() after end event")):Rw(e,s,t,!0):s.ended?e.emit("error",new Error("stream.push() after EOF")):(s.reading=!1,s.decoder&&!r?(t=s.decoder.write(t),s.objectMode||t.length!==0?Rw(e,s,t,!1):dL(e,s)):Rw(e,s,t,!1))):n||(s.reading=!1)}return Tce(s)}function Rw(e,t,r,n){t.flowing&&t.length===0&&!t.sync?(e.emit("data",r),e.read(0)):(t.length+=t.objectMode?1:r.length,n?t.buffer.unshift(r):t.buffer.push(r),t.needReadable&&qE(e)),dL(e,t)}function Dce(e,t){var r;return!_ce(t)&&typeof t!="string"&&t!==void 0&&!e.objectMode&&(r=new TypeError("Invalid non-string/buffer chunk")),r}function Tce(e){return!e.ended&&(e.needReadable||e.length<e.highWaterMark||e.length===0)}$t.prototype.isPaused=function(){return this._readableState.flowing===!1};$t.prototype.setEncoding=function(e){return Tc||(Tc=sf().StringDecoder),this._readableState.decoder=new Tc(e),this._readableState.encoding=e,this};var oL=8388608;function Nce(e){return e>=oL?e=oL:(e--,e|=e>>>1,e|=e>>>2,e|=e>>>4,e|=e>>>8,e|=e>>>16,e++),e}function aL(e,t){return e<=0||t.length===0&&t.ended?0:t.objectMode?1:e!==e?t.flowing&&t.length?t.buffer.head.data.length:t.length:(e>t.highWaterMark&&(t.highWaterMark=Nce(e)),e<=t.length?e:t.ended?t.length:(t.needReadable=!0,0))}$t.prototype.read=function(e){St("read",e),e=parseInt(e,10);var t=this._readableState,r=e;if(e!==0&&(t.emittedReadable=!1),e===0&&t.needReadable&&(t.length>=t.highWaterMark||t.ended))return St("read: emitReadable",t.length,t.ended),t.length===0&&t.ended?Dw(this):qE(this),null;if(e=aL(e,t),e===0&&t.ended)return t.length===0&&Dw(this),null;var n=t.needReadable;St("need readable",n),(t.length===0||t.length-e<t.highWaterMark)&&(n=!0,St("length less than watermark",n)),t.ended||t.reading?(n=!1,St("reading or ended",n)):n&&(St("do read"),t.reading=!0,t.sync=!0,t.length===0&&(t.needReadable=!0),this._read(t.highWaterMark),t.sync=!1,t.reading||(e=aL(r,t)));var i;return e>0?i=gL(e,t):i=null,i===null?(t.needReadable=!0,e=0):t.length-=e,t.length===0&&(t.ended||(t.needReadable=!0),r!==e&&t.ended&&Dw(this)),i!==null&&this.emit("data",i),i};function Mce(e,t){if(!t.ended){if(t.decoder){var r=t.decoder.end();r&&r.length&&(t.buffer.push(r),t.length+=t.objectMode?1:r.length)}t.ended=!0,qE(e)}}function qE(e){var t=e._readableState;t.needReadable=!1,t.emittedReadable||(St("emitReadable",t.flowing),t.emittedReadable=!0,t.sync?Nc.nextTick(AL,e):AL(e))}function AL(e){St("emit readable"),e.emit("readable"),Nw(e)}function dL(e,t){t.readingMore||(t.readingMore=!0,Nc.nextTick(Fce,e,t))}function Fce(e,t){for(var r=t.length;!t.reading&&!t.flowing&&!t.ended&&t.length<t.highWaterMark&&(St("maybeReadMore read 0"),e.read(0),r!==t.length);)r=t.length;t.readingMore=!1}$t.prototype._read=function(e){this.emit("error",new Error("_read() is not implemented"))};$t.prototype.pipe=function(e,t){var r=this,n=this._readableState;switch(n.pipesCount){case 0:n.pipes=e;break;case 1:n.pipes=[n.pipes,e];break;default:n.pipes.push(e);break}n.pipesCount+=1,St("pipe count=%d opts=%j",n.pipesCount,t);var i=(!t||t.end!==!1)&&e!==process.stdout&&e!==process.stderr,s=i?a:O;n.endEmitted?Nc.nextTick(s):r.once("end",s),e.on("unpipe",o);function o(x,G){St("onunpipe"),x===r&&G&&G.hasUnpiped===!1&&(G.hasUnpiped=!0,l())}function a(){St("onend"),e.end()}var A=kce(r);e.on("drain",A);var f=!1;function l(){St("cleanup"),e.removeListener("close",_),e.removeListener("finish",N),e.removeListener("drain",A),e.removeListener("error",S),e.removeListener("unpipe",o),r.removeListener("end",a),r.removeListener("end",O),r.removeListener("data",I),f=!0,n.awaitDrain&&(!e._writableState||e._writableState.needDrain)&&A()}var p=!1;r.on("data",I);function I(x){St("ondata"),p=!1;var G=e.write(x);G===!1&&!p&&((n.pipesCount===1&&n.pipes===e||n.pipesCount>1&&pL(n.pipes,e)!==-1)&&!f&&(St("false write response, pause",n.awaitDrain),n.awaitDrain++,p=!0),r.pause())}function S(x){St("onerror",x),O(),e.removeListener("error",S),fL(e,"error")===0&&e.emit("error",x)}Rce(e,"error",S);function _(){e.removeListener("finish",N),O()}e.once("close",_);function N(){St("onfinish"),e.removeListener("close",_),O()}e.once("finish",N);function O(){St("unpipe"),r.unpipe(e)}return e.emit("pipe",r),n.flowing||(St("pipe resume"),r.resume()),e};function kce(e){return function(){var t=e._readableState;St("pipeOnDrain",t.awaitDrain),t.awaitDrain&&t.awaitDrain--,t.awaitDrain===0&&fL(e,"data")&&(t.flowing=!0,Nw(e))}}$t.prototype.unpipe=function(e){var t=this._readableState,r={hasUnpiped:!1};if(t.pipesCount===0)return this;if(t.pipesCount===1)return e&&e!==t.pipes?this:(e||(e=t.pipes),t.pipes=null,t.pipesCount=0,t.flowing=!1,e&&e.emit("unpipe",this,r),this);if(!e){var n=t.pipes,i=t.pipesCount;t.pipes=null,t.pipesCount=0,t.flowing=!1;for(var s=0;s<i;s++)n[s].emit("unpipe",this,{hasUnpiped:!1});return this}var o=pL(t.pipes,e);return o===-1?this:(t.pipes.splice(o,1),t.pipesCount-=1,t.pipesCount===1&&(t.pipes=t.pipes[0]),e.emit("unpipe",this,r),this)};$t.prototype.on=function(e,t){var r=Tw.prototype.on.call(this,e,t);if(e==="data")this._readableState.flowing!==!1&&this.resume();else if(e==="readable"){var n=this._readableState;!n.endEmitted&&!n.readableListening&&(n.readableListening=n.needReadable=!0,n.emittedReadable=!1,n.reading?n.length&&qE(this):Nc.nextTick(Uce,this))}return r};$t.prototype.addListener=$t.prototype.on;function Uce(e){St("readable nexttick read 0"),e.read(0)}$t.prototype.resume=function(){var e=this._readableState;return e.flowing||(St("resume"),e.flowing=!0,xce(this,e)),this};function xce(e,t){t.resumeScheduled||(t.resumeScheduled=!0,Nc.nextTick(Lce,e,t))}function Lce(e,t){t.reading||(St("resume read 0"),e.read(0)),t.resumeScheduled=!1,t.awaitDrain=0,e.emit("resume"),Nw(e),t.flowing&&!t.reading&&e.read(0)}$t.prototype.pause=function(){return St("call pause flowing=%j",this._readableState.flowing),this._readableState.flowing!==!1&&(St("pause"),this._readableState.flowing=!1,this.emit("pause")),this};function Nw(e){var t=e._readableState;for(St("flow",t.flowing);t.flowing&&e.read()!==null;);}$t.prototype.wrap=function(e){var t=this,r=this._readableState,n=!1;e.on("end",function(){if(St("wrapped end"),r.decoder&&!r.ended){var o=r.decoder.end();o&&o.length&&t.push(o)}t.push(null)}),e.on("data",function(o){if(St("wrapped data"),r.decoder&&(o=r.decoder.write(o)),!(r.objectMode&&o==null)&&!(!r.objectMode&&(!o||!o.length))){var a=t.push(o);a||(n=!0,e.pause())}});for(var i in e)this[i]===void 0&&typeof e[i]=="function"&&(this[i]=(function(o){return function(){return e[o].apply(e,arguments)}})(i));for(var s=0;s<vw.length;s++)e.on(vw[s],this.emit.bind(this,vw[s]));return this._read=function(o){St("wrapped _read",o),n&&(n=!1,e.resume())},this};Object.defineProperty($t.prototype,"readableHighWaterMark",{enumerable:!1,get:function(){return this._readableState.highWaterMark}});$t._fromList=gL;function gL(e,t){if(t.length===0)return null;var r;return t.objectMode?r=t.buffer.shift():!e||e>=t.length?(t.decoder?r=t.buffer.join(""):t.buffer.length===1?r=t.buffer.head.data:r=t.buffer.concat(t.length),t.buffer.clear()):r=Pce(e,t.buffer,t.decoder),r}function Pce(e,t,r){var n;return e<t.head.data.length?(n=t.head.data.slice(0,e),t.head.data=t.head.data.slice(e)):e===t.head.data.length?n=t.shift():n=r?Oce(e,t):Hce(e,t),n}function Oce(e,t){var r=t.head,n=1,i=r.data;for(e-=i.length;r=r.next;){var s=r.data,o=e>s.length?s.length:e;if(o===s.length?i+=s:i+=s.slice(0,e),e-=o,e===0){o===s.length?(++n,r.next?t.head=r.next:t.head=t.tail=null):(t.head=r,r.data=s.slice(o));break}++n}return t.length-=n,i}function Hce(e,t){var r=ud.allocUnsafe(e),n=t.head,i=1;for(n.data.copy(r),e-=n.data.length;n=n.next;){var s=n.data,o=e>s.length?s.length:e;if(s.copy(r,r.length-e,0,o),e-=o,e===0){o===s.length?(++i,n.next?t.head=n.next:t.head=t.tail=null):(t.head=n,n.data=s.slice(o));break}++i}return t.length-=i,r}function Dw(e){var t=e._readableState;if(t.length>0)throw new Error('"endReadable()" called on non-empty stream');t.endEmitted||(t.ended=!0,Nc.nextTick(qce,t,e))}function qce(e,t){!e.endEmitted&&e.length===0&&(e.endEmitted=!0,t.readable=!1,t.emit("end"))}function pL(e,t){for(var r=0,n=e.length;r<n;r++)if(e[r]===t)return r;return-1}});var Mw=U((GTe,BL)=>{"use strict";BL.exports=Zo;var GE=If(),mL=Object.create(Rc());mL.inherits=je();mL.inherits(Zo,GE);function Gce(e,t){var r=this._transformState;r.transforming=!1;var n=r.writecb;if(!n)return this.emit("error",new Error("write callback called multiple times"));r.writechunk=null,r.writecb=null,t!=null&&this.push(t),n(e);var i=this._readableState;i.reading=!1,(i.needReadable||i.length<i.highWaterMark)&&this._read(i.highWaterMark)}function Zo(e){if(!(this instanceof Zo))return new Zo(e);GE.call(this,e),this._transformState={afterTransform:Gce.bind(this),needTransform:!1,transforming:!1,writecb:null,writechunk:null,writeencoding:null},this._readableState.needReadable=!0,this._readableState.sync=!1,e&&(typeof e.transform=="function"&&(this._transform=e.transform),typeof e.flush=="function"&&(this._flush=e.flush)),this.on("prefinish",Yce)}function Yce(){var e=this;typeof this._flush=="function"?this._flush(function(t,r){yL(e,t,r)}):yL(this,null,null)}Zo.prototype.push=function(e,t){return this._transformState.needTransform=!1,GE.prototype.push.call(this,e,t)};Zo.prototype._transform=function(e,t,r){throw new Error("_transform() is not implemented")};Zo.prototype._write=function(e,t,r){var n=this._transformState;if(n.writecb=r,n.writechunk=e,n.writeencoding=t,!n.transforming){var i=this._readableState;(n.needTransform||i.needReadable||i.length<i.highWaterMark)&&this._read(i.highWaterMark)}};Zo.prototype._read=function(e){var t=this._transformState;t.writechunk!==null&&t.writecb&&!t.transforming?(t.transforming=!0,this._transform(t.writechunk,t.writeencoding,t.afterTransform)):t.needTransform=!0};Zo.prototype._destroy=function(e,t){var r=this;GE.prototype._destroy.call(this,e,function(n){t(n),r.emit("close")})};function yL(e,t,r){if(t)return e.emit("error",t);if(r!=null&&e.push(r),e._writableState.length)throw new Error("Calling transform done when ws.length != 0");if(e._transformState.transforming)throw new Error("Calling transform done when still transforming");return e.push(null)}});var QL=U((YTe,CL)=>{"use strict";CL.exports=cd;var IL=Mw(),bL=Object.create(Rc());bL.inherits=je();bL.inherits(cd,IL);function cd(e){if(!(this instanceof cd))return new cd(e);IL.call(this,e)}cd.prototype._transform=function(e,t,r){r(null,e)}});var Fw=U((to,wL)=>{to=wL.exports=Sw();to.Stream=to;to.Readable=to;to.Writable=Cw();to.Duplex=If();to.Transform=Mw();to.PassThrough=QL()});var kw=U((WTe,_L)=>{"use strict";var Wce=at().Buffer,Vce=P3(),SL=Fw().Transform,Jce=je();function sA(e){SL.call(this),this._block=Wce.allocUnsafe(e),this._blockSize=e,this._blockOffset=0,this._length=[0,0,0,0],this._finalized=!1}Jce(sA,SL);sA.prototype._transform=function(e,t,r){var n=null;try{this.update(e,t)}catch(i){n=i}r(n)};sA.prototype._flush=function(e){var t=null;try{this.push(this.digest())}catch(r){t=r}e(t)};sA.prototype.update=function(e,t){if(this._finalized)throw new Error("Digest already called");for(var r=Vce(e,t),n=this._block,i=0;this._blockOffset+r.length-i>=this._blockSize;){for(var s=this._blockOffset;s<this._blockSize;)n[s]=r[i],s+=1,i+=1;this._update(),this._blockOffset=0}for(;i<r.length;)n[this._blockOffset]=r[i],this._blockOffset+=1,i+=1;for(var o=0,a=r.length*8;a>0;++o)this._length[o]+=a,a=this._length[o]/4294967296|0,a>0&&(this._length[o]-=4294967296*a);return this};sA.prototype._update=function(){throw new Error("_update is not implemented")};sA.prototype.digest=function(e){if(this._finalized)throw new Error("Digest already called");this._finalized=!0;var t=this._digest();e!==void 0&&(t=t.toString(e)),this._block.fill(0),this._blockOffset=0;for(var r=0;r<4;++r)this._length[r]=0;return t};sA.prototype._digest=function(){throw new Error("_digest is not implemented")};_L.exports=sA});var VE=U((VTe,RL)=>{"use strict";var jce=je(),vL=kw(),zce=at().Buffer,Kce=new Array(16);function YE(){vL.call(this,64),this._a=1732584193,this._b=4023233417,this._c=2562383102,this._d=271733878}jce(YE,vL);YE.prototype._update=function(){for(var e=Kce,t=0;t<16;++t)e[t]=this._block.readInt32LE(t*4);var r=this._a,n=this._b,i=this._c,s=this._d;r=nn(r,n,i,s,e[0],3614090360,7),s=nn(s,r,n,i,e[1],3905402710,12),i=nn(i,s,r,n,e[2],606105819,17),n=nn(n,i,s,r,e[3],3250441966,22),r=nn(r,n,i,s,e[4],4118548399,7),s=nn(s,r,n,i,e[5],1200080426,12),i=nn(i,s,r,n,e[6],2821735955,17),n=nn(n,i,s,r,e[7],4249261313,22),r=nn(r,n,i,s,e[8],1770035416,7),s=nn(s,r,n,i,e[9],2336552879,12),i=nn(i,s,r,n,e[10],4294925233,17),n=nn(n,i,s,r,e[11],2304563134,22),r=nn(r,n,i,s,e[12],1804603682,7),s=nn(s,r,n,i,e[13],4254626195,12),i=nn(i,s,r,n,e[14],2792965006,17),n=nn(n,i,s,r,e[15],1236535329,22),r=sn(r,n,i,s,e[1],4129170786,5),s=sn(s,r,n,i,e[6],3225465664,9),i=sn(i,s,r,n,e[11],643717713,14),n=sn(n,i,s,r,e[0],3921069994,20),r=sn(r,n,i,s,e[5],3593408605,5),s=sn(s,r,n,i,e[10],38016083,9),i=sn(i,s,r,n,e[15],3634488961,14),n=sn(n,i,s,r,e[4],3889429448,20),r=sn(r,n,i,s,e[9],568446438,5),s=sn(s,r,n,i,e[14],3275163606,9),i=sn(i,s,r,n,e[3],4107603335,14),n=sn(n,i,s,r,e[8],1163531501,20),r=sn(r,n,i,s,e[13],2850285829,5),s=sn(s,r,n,i,e[2],4243563512,9),i=sn(i,s,r,n,e[7],1735328473,14),n=sn(n,i,s,r,e[12],2368359562,20),r=on(r,n,i,s,e[5],4294588738,4),s=on(s,r,n,i,e[8],2272392833,11),i=on(i,s,r,n,e[11],1839030562,16),n=on(n,i,s,r,e[14],4259657740,23),r=on(r,n,i,s,e[1],2763975236,4),s=on(s,r,n,i,e[4],1272893353,11),i=on(i,s,r,n,e[7],4139469664,16),n=on(n,i,s,r,e[10],3200236656,23),r=on(r,n,i,s,e[13],681279174,4),s=on(s,r,n,i,e[0],3936430074,11),i=on(i,s,r,n,e[3],3572445317,16),n=on(n,i,s,r,e[6],76029189,23),r=on(r,n,i,s,e[9],3654602809,4),s=on(s,r,n,i,e[12],3873151461,11),i=on(i,s,r,n,e[15],530742520,16),n=on(n,i,s,r,e[2],3299628645,23),r=an(r,n,i,s,e[0],4096336452,6),s=an(s,r,n,i,e[7],1126891415,10),i=an(i,s,r,n,e[14],2878612391,15),n=an(n,i,s,r,e[5],4237533241,21),r=an(r,n,i,s,e[12],1700485571,6),s=an(s,r,n,i,e[3],2399980690,10),i=an(i,s,r,n,e[10],4293915773,15),n=an(n,i,s,r,e[1],2240044497,21),r=an(r,n,i,s,e[8],1873313359,6),s=an(s,r,n,i,e[15],4264355552,10),i=an(i,s,r,n,e[6],2734768916,15),n=an(n,i,s,r,e[13],1309151649,21),r=an(r,n,i,s,e[4],4149444226,6),s=an(s,r,n,i,e[11],3174756917,10),i=an(i,s,r,n,e[2],718787259,15),n=an(n,i,s,r,e[9],3951481745,21),this._a=this._a+r|0,this._b=this._b+n|0,this._c=this._c+i|0,this._d=this._d+s|0};YE.prototype._digest=function(){this._block[this._blockOffset++]=128,this._blockOffset>56&&(this._block.fill(0,this._blockOffset,64),this._update(),this._blockOffset=0),this._block.fill(0,this._blockOffset,56),this._block.writeUInt32LE(this._length[0],56),this._block.writeUInt32LE(this._length[1],60),this._update();var e=zce.allocUnsafe(16);return e.writeInt32LE(this._a,0),e.writeInt32LE(this._b,4),e.writeInt32LE(this._c,8),e.writeInt32LE(this._d,12),e};function WE(e,t){return e<<t|e>>>32-t}function nn(e,t,r,n,i,s,o){return WE(e+(t&r|~t&n)+i+s|0,o)+t|0}function sn(e,t,r,n,i,s,o){return WE(e+(t&n|r&~n)+i+s|0,o)+t|0}function on(e,t,r,n,i,s,o){return WE(e+(t^r^n)+i+s|0,o)+t|0}function an(e,t,r,n,i,s,o){return WE(e+(r^(t|~n))+i+s|0,o)+t|0}RL.exports=YE});var jE=U((JTe,UL)=>{"use strict";var Uw=Gr().Buffer,Xce=je(),kL=kw(),Zce=new Array(16),ld=[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8,3,10,14,4,9,15,8,1,2,7,0,6,13,11,5,12,1,9,11,10,0,8,12,4,13,3,7,15,14,5,6,2,4,0,5,9,7,12,2,10,14,1,3,8,11,6,15,13],hd=[5,14,7,0,9,2,11,4,13,6,15,8,1,10,3,12,6,11,3,7,0,13,5,10,14,15,8,12,4,9,1,2,15,5,1,3,7,14,6,9,11,8,12,2,10,0,4,13,8,6,4,1,3,11,15,0,5,12,2,13,9,7,10,14,12,15,10,4,1,5,8,7,6,2,13,14,0,3,9,11],dd=[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8,7,6,8,13,11,9,7,15,7,12,15,9,11,7,13,12,11,13,6,7,14,9,13,15,14,8,13,6,5,12,7,5,11,12,14,15,14,15,9,8,9,14,5,6,8,6,5,12,9,15,5,11,6,8,13,12,5,12,13,14,11,8,5,6],gd=[8,9,9,11,13,15,15,5,7,7,8,11,14,14,12,6,9,13,15,7,12,8,9,11,7,7,12,7,6,15,13,11,9,7,15,11,8,6,6,14,12,13,5,14,13,13,7,5,15,5,8,11,14,14,6,14,6,9,12,9,12,5,15,8,8,5,12,9,12,5,14,6,8,13,6,5,15,13,11,11],pd=[0,1518500249,1859775393,2400959708,2840853838],Ed=[1352829926,1548603684,1836072691,2053994217,0];function bf(e,t){return e<<t|e>>>32-t}function DL(e,t,r,n,i,s,o,a){return bf(e+(t^r^n)+s+o|0,a)+i|0}function TL(e,t,r,n,i,s,o,a){return bf(e+(t&r|~t&n)+s+o|0,a)+i|0}function NL(e,t,r,n,i,s,o,a){return bf(e+((t|~r)^n)+s+o|0,a)+i|0}function ML(e,t,r,n,i,s,o,a){return bf(e+(t&n|r&~n)+s+o|0,a)+i|0}function FL(e,t,r,n,i,s,o,a){return bf(e+(t^(r|~n))+s+o|0,a)+i|0}function JE(){kL.call(this,64),this._a=1732584193,this._b=4023233417,this._c=2562383102,this._d=271733878,this._e=3285377520}Xce(JE,kL);JE.prototype._update=function(){for(var e=Zce,t=0;t<16;++t)e[t]=this._block.readInt32LE(t*4);for(var r=this._a|0,n=this._b|0,i=this._c|0,s=this._d|0,o=this._e|0,a=this._a|0,A=this._b|0,f=this._c|0,l=this._d|0,p=this._e|0,I=0;I<80;I+=1){var S,_;I<16?(S=DL(r,n,i,s,o,e[ld[I]],pd[0],dd[I]),_=FL(a,A,f,l,p,e[hd[I]],Ed[0],gd[I])):I<32?(S=TL(r,n,i,s,o,e[ld[I]],pd[1],dd[I]),_=ML(a,A,f,l,p,e[hd[I]],Ed[1],gd[I])):I<48?(S=NL(r,n,i,s,o,e[ld[I]],pd[2],dd[I]),_=NL(a,A,f,l,p,e[hd[I]],Ed[2],gd[I])):I<64?(S=ML(r,n,i,s,o,e[ld[I]],pd[3],dd[I]),_=TL(a,A,f,l,p,e[hd[I]],Ed[3],gd[I])):(S=FL(r,n,i,s,o,e[ld[I]],pd[4],dd[I]),_=DL(a,A,f,l,p,e[hd[I]],Ed[4],gd[I])),r=o,o=s,s=bf(i,10),i=n,n=S,a=p,p=l,l=bf(f,10),f=A,A=_}var N=this._b+i+l|0;this._b=this._c+s+p|0,this._c=this._d+o+a|0,this._d=this._e+r+A|0,this._e=this._a+n+f|0,this._a=N};JE.prototype._digest=function(){this._block[this._blockOffset]=128,this._blockOffset+=1,this._blockOffset>56&&(this._block.fill(0,this._blockOffset,64),this._update(),this._blockOffset=0),this._block.fill(0,this._blockOffset,56),this._block.writeUInt32LE(this._length[0],56),this._block.writeUInt32LE(this._length[1],60),this._update();var e=Uw.alloc?Uw.alloc(20):new Uw(20);return e.writeInt32LE(this._a,0),e.writeInt32LE(this._b,4),e.writeInt32LE(this._c,8),e.writeInt32LE(this._d,12),e.writeInt32LE(this._e,16),e};UL.exports=JE});var Cf=U((jTe,xL)=>{"use strict";var $ce=at().Buffer,ele=id();function zE(e,t){this._block=$ce.alloc(e),this._finalSize=t,this._blockSize=e,this._len=0}zE.prototype.update=function(e,t){e=ele(e,t||"utf8");for(var r=this._block,n=this._blockSize,i=e.length,s=this._len,o=0;o<i;){for(var a=s%n,A=Math.min(i-o,n-a),f=0;f<A;f++)r[a+f]=e[o+f];s+=A,o+=A,s%n===0&&this._update(r)}return this._len+=i,this};zE.prototype.digest=function(e){var t=this._len%this._blockSize;this._block[t]=128,this._block.fill(0,t+1),t>=this._finalSize&&(this._update(this._block),this._block.fill(0));var r=this._len*8;if(r<=4294967295)this._block.writeUInt32BE(r,this._blockSize-4);else{var n=(r&4294967295)>>>0,i=(r-n)/4294967296;this._block.writeUInt32BE(i,this._blockSize-8),this._block.writeUInt32BE(n,this._blockSize-4)}this._update(this._block);var s=this._hash();return e?s.toString(e):s};zE.prototype._update=function(){throw new Error("_update must be implemented by subclass")};xL.exports=zE});var OL=U((zTe,PL)=>{"use strict";var tle=je(),LL=Cf(),rle=at().Buffer,nle=[1518500249,1859775393,-1894007588,-899497514],ile=new Array(80);function yd(){this.init(),this._w=ile,LL.call(this,64,56)}tle(yd,LL);yd.prototype.init=function(){return this._a=1732584193,this._b=4023233417,this._c=2562383102,this._d=271733878,this._e=3285377520,this};function sle(e){return e<<5|e>>>27}function ole(e){return e<<30|e>>>2}function ale(e,t,r,n){return e===0?t&r|~t&n:e===2?t&r|t&n|r&n:t^r^n}yd.prototype._update=function(e){for(var t=this._w,r=this._a|0,n=this._b|0,i=this._c|0,s=this._d|0,o=this._e|0,a=0;a<16;++a)t[a]=e.readInt32BE(a*4);for(;a<80;++a)t[a]=t[a-3]^t[a-8]^t[a-14]^t[a-16];for(var A=0;A<80;++A){var f=~~(A/20),l=sle(r)+ale(f,n,i,s)+o+t[A]+nle[f]|0;o=s,s=i,i=ole(n),n=r,r=l}this._a=r+this._a|0,this._b=n+this._b|0,this._c=i+this._c|0,this._d=s+this._d|0,this._e=o+this._e|0};yd.prototype._hash=function(){var e=rle.allocUnsafe(20);return e.writeInt32BE(this._a|0,0),e.writeInt32BE(this._b|0,4),e.writeInt32BE(this._c|0,8),e.writeInt32BE(this._d|0,12),e.writeInt32BE(this._e|0,16),e};PL.exports=yd});var GL=U((KTe,qL)=>{"use strict";var Ale=je(),HL=Cf(),fle=at().Buffer,ule=[1518500249,1859775393,-1894007588,-899497514],cle=new Array(80);function md(){this.init(),this._w=cle,HL.call(this,64,56)}Ale(md,HL);md.prototype.init=function(){return this._a=1732584193,this._b=4023233417,this._c=2562383102,this._d=271733878,this._e=3285377520,this};function lle(e){return e<<1|e>>>31}function hle(e){return e<<5|e>>>27}function dle(e){return e<<30|e>>>2}function gle(e,t,r,n){return e===0?t&r|~t&n:e===2?t&r|t&n|r&n:t^r^n}md.prototype._update=function(e){for(var t=this._w,r=this._a|0,n=this._b|0,i=this._c|0,s=this._d|0,o=this._e|0,a=0;a<16;++a)t[a]=e.readInt32BE(a*4);for(;a<80;++a)t[a]=lle(t[a-3]^t[a-8]^t[a-14]^t[a-16]);for(var A=0;A<80;++A){var f=~~(A/20),l=hle(r)+gle(f,n,i,s)+o+t[A]+ule[f]|0;o=s,s=i,i=dle(n),n=r,r=l}this._a=r+this._a|0,this._b=n+this._b|0,this._c=i+this._c|0,this._d=s+this._d|0,this._e=o+this._e|0};md.prototype._hash=function(){var e=fle.allocUnsafe(20);return e.writeInt32BE(this._a|0,0),e.writeInt32BE(this._b|0,4),e.writeInt32BE(this._c|0,8),e.writeInt32BE(this._d|0,12),e.writeInt32BE(this._e|0,16),e};qL.exports=md});var xw=U((XTe,WL)=>{"use strict";var ple=je(),YL=Cf(),Ele=at().Buffer,yle=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298],mle=new Array(64);function Bd(){this.init(),this._w=mle,YL.call(this,64,56)}ple(Bd,YL);Bd.prototype.init=function(){return this._a=1779033703,this._b=3144134277,this._c=1013904242,this._d=2773480762,this._e=1359893119,this._f=2600822924,this._g=528734635,this._h=1541459225,this};function Ble(e,t,r){return r^e&(t^r)}function Ile(e,t,r){return e&t|r&(e|t)}function ble(e){return(e>>>2|e<<30)^(e>>>13|e<<19)^(e>>>22|e<<10)}function Cle(e){return(e>>>6|e<<26)^(e>>>11|e<<21)^(e>>>25|e<<7)}function Qle(e){return(e>>>7|e<<25)^(e>>>18|e<<14)^e>>>3}function wle(e){return(e>>>17|e<<15)^(e>>>19|e<<13)^e>>>10}Bd.prototype._update=function(e){for(var t=this._w,r=this._a|0,n=this._b|0,i=this._c|0,s=this._d|0,o=this._e|0,a=this._f|0,A=this._g|0,f=this._h|0,l=0;l<16;++l)t[l]=e.readInt32BE(l*4);for(;l<64;++l)t[l]=wle(t[l-2])+t[l-7]+Qle(t[l-15])+t[l-16]|0;for(var p=0;p<64;++p){var I=f+Cle(o)+Ble(o,a,A)+yle[p]+t[p]|0,S=ble(r)+Ile(r,n,i)|0;f=A,A=a,a=o,o=s+I|0,s=i,i=n,n=r,r=I+S|0}this._a=r+this._a|0,this._b=n+this._b|0,this._c=i+this._c|0,this._d=s+this._d|0,this._e=o+this._e|0,this._f=a+this._f|0,this._g=A+this._g|0,this._h=f+this._h|0};Bd.prototype._hash=function(){var e=Ele.allocUnsafe(32);return e.writeInt32BE(this._a,0),e.writeInt32BE(this._b,4),e.writeInt32BE(this._c,8),e.writeInt32BE(this._d,12),e.writeInt32BE(this._e,16),e.writeInt32BE(this._f,20),e.writeInt32BE(this._g,24),e.writeInt32BE(this._h,28),e};WL.exports=Bd});var JL=U((ZTe,VL)=>{"use strict";var Sle=je(),_le=xw(),vle=Cf(),Rle=at().Buffer,Dle=new Array(64);function KE(){this.init(),this._w=Dle,vle.call(this,64,56)}Sle(KE,_le);KE.prototype.init=function(){return this._a=3238371032,this._b=914150663,this._c=812702999,this._d=4144912697,this._e=4290775857,this._f=1750603025,this._g=1694076839,this._h=3204075428,this};KE.prototype._hash=function(){var e=Rle.allocUnsafe(28);return e.writeInt32BE(this._a,0),e.writeInt32BE(this._b,4),e.writeInt32BE(this._c,8),e.writeInt32BE(this._d,12),e.writeInt32BE(this._e,16),e.writeInt32BE(this._f,20),e.writeInt32BE(this._g,24),e};VL.exports=KE});var Lw=U(($Te,e8)=>{"use strict";var Tle=je(),$L=Cf(),Nle=at().Buffer,jL=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591],Mle=new Array(160);function Id(){this.init(),this._w=Mle,$L.call(this,128,112)}Tle(Id,$L);Id.prototype.init=function(){return this._ah=1779033703,this._bh=3144134277,this._ch=1013904242,this._dh=2773480762,this._eh=1359893119,this._fh=2600822924,this._gh=528734635,this._hh=1541459225,this._al=4089235720,this._bl=2227873595,this._cl=4271175723,this._dl=1595750129,this._el=2917565137,this._fl=725511199,this._gl=4215389547,this._hl=327033209,this};function zL(e,t,r){return r^e&(t^r)}function KL(e,t,r){return e&t|r&(e|t)}function XL(e,t){return(e>>>28|t<<4)^(t>>>2|e<<30)^(t>>>7|e<<25)}function ZL(e,t){return(e>>>14|t<<18)^(e>>>18|t<<14)^(t>>>9|e<<23)}function Fle(e,t){return(e>>>1|t<<31)^(e>>>8|t<<24)^e>>>7}function kle(e,t){return(e>>>1|t<<31)^(e>>>8|t<<24)^(e>>>7|t<<25)}function Ule(e,t){return(e>>>19|t<<13)^(t>>>29|e<<3)^e>>>6}function xle(e,t){return(e>>>19|t<<13)^(t>>>29|e<<3)^(e>>>6|t<<26)}function Fr(e,t){return e>>>0<t>>>0?1:0}Id.prototype._update=function(e){for(var t=this._w,r=this._ah|0,n=this._bh|0,i=this._ch|0,s=this._dh|0,o=this._eh|0,a=this._fh|0,A=this._gh|0,f=this._hh|0,l=this._al|0,p=this._bl|0,I=this._cl|0,S=this._dl|0,_=this._el|0,N=this._fl|0,O=this._gl|0,x=this._hl|0,G=0;G<32;G+=2)t[G]=e.readInt32BE(G*4),t[G+1]=e.readInt32BE(G*4+4);for(;G<160;G+=2){var Y=t[G-30],X=t[G-30+1],Z=Fle(Y,X),j=kle(X,Y);Y=t[G-4],X=t[G-4+1];var se=Ule(Y,X),ie=xle(X,Y),ce=t[G-14],H=t[G-14+1],E=t[G-32],v=t[G-32+1],b=j+H|0,c=Z+ce+Fr(b,j)|0;b=b+ie|0,c=c+se+Fr(b,ie)|0,b=b+v|0,c=c+E+Fr(b,v)|0,t[G]=c,t[G+1]=b}for(var g=0;g<160;g+=2){c=t[g],b=t[g+1];var w=KL(r,n,i),R=KL(l,p,I),C=XL(r,l),h=XL(l,r),D=ZL(o,_),M=ZL(_,o),B=jL[g],k=jL[g+1],ne=zL(o,a,A),Ae=zL(_,N,O),ue=x+M|0,pe=f+D+Fr(ue,x)|0;ue=ue+Ae|0,pe=pe+ne+Fr(ue,Ae)|0,ue=ue+k|0,pe=pe+B+Fr(ue,k)|0,ue=ue+b|0,pe=pe+c+Fr(ue,b)|0;var he=h+R|0,de=C+w+Fr(he,h)|0;f=A,x=O,A=a,O=N,a=o,N=_,_=S+ue|0,o=s+pe+Fr(_,S)|0,s=i,S=I,i=n,I=p,n=r,p=l,l=ue+he|0,r=pe+de+Fr(l,ue)|0}this._al=this._al+l|0,this._bl=this._bl+p|0,this._cl=this._cl+I|0,this._dl=this._dl+S|0,this._el=this._el+_|0,this._fl=this._fl+N|0,this._gl=this._gl+O|0,this._hl=this._hl+x|0,this._ah=this._ah+r+Fr(this._al,l)|0,this._bh=this._bh+n+Fr(this._bl,p)|0,this._ch=this._ch+i+Fr(this._cl,I)|0,this._dh=this._dh+s+Fr(this._dl,S)|0,this._eh=this._eh+o+Fr(this._el,_)|0,this._fh=this._fh+a+Fr(this._fl,N)|0,this._gh=this._gh+A+Fr(this._gl,O)|0,this._hh=this._hh+f+Fr(this._hl,x)|0};Id.prototype._hash=function(){var e=Nle.allocUnsafe(64);function t(r,n,i){e.writeInt32BE(r,i),e.writeInt32BE(n,i+4)}return t(this._ah,this._al,0),t(this._bh,this._bl,8),t(this._ch,this._cl,16),t(this._dh,this._dl,24),t(this._eh,this._el,32),t(this._fh,this._fl,40),t(this._gh,this._gl,48),t(this._hh,this._hl,56),e};e8.exports=Id});var r8=U((eNe,t8)=>{"use strict";var Lle=je(),Ple=Lw(),Ole=Cf(),Hle=at().Buffer,qle=new Array(160);function XE(){this.init(),this._w=qle,Ole.call(this,128,112)}Lle(XE,Ple);XE.prototype.init=function(){return this._ah=3418070365,this._bh=1654270250,this._ch=2438529370,this._dh=355462360,this._eh=1731405415,this._fh=2394180231,this._gh=3675008525,this._hh=1203062813,this._al=3238371032,this._bl=914150663,this._cl=812702999,this._dl=4144912697,this._el=4290775857,this._fl=1750603025,this._gl=1694076839,this._hl=3204075428,this};XE.prototype._hash=function(){var e=Hle.allocUnsafe(48);function t(r,n,i){e.writeInt32BE(r,i),e.writeInt32BE(n,i+4)}return t(this._ah,this._al,0),t(this._bh,this._bl,8),t(this._ch,this._cl,16),t(this._dh,this._dl,24),t(this._eh,this._el,32),t(this._fh,this._fl,40),e};t8.exports=XE});var ZE=U((tNe,$o)=>{"use strict";$o.exports=function(t){var r=t.toLowerCase(),n=$o.exports[r];if(!n)throw new Error(r+" is not supported (we accept pull requests)");return new n};$o.exports.sha=OL();$o.exports.sha1=GL();$o.exports.sha224=JL();$o.exports.sha256=xw();$o.exports.sha384=r8();$o.exports.sha512=Lw()});var ea=U((rNe,i8)=>{"use strict";var Gle=at().Buffer,n8=(ts(),Os(qt)).Transform,Yle=sf().StringDecoder,Wle=je(),Vle=id();function os(e){n8.call(this),this.hashMode=typeof e=="string",this.hashMode?this[e]=this._finalOrDigest:this.final=this._finalOrDigest,this._final&&(this.__final=this._final,this._final=null),this._decoder=null,this._encoding=null}Wle(os,n8);os.prototype.update=function(e,t,r){var n=Vle(e,t),i=this._update(n);return this.hashMode?this:(r&&(i=this._toString(i,r)),i)};os.prototype.setAutoPadding=function(){};os.prototype.getAuthTag=function(){throw new Error("trying to get auth tag in unsupported state")};os.prototype.setAuthTag=function(){throw new Error("trying to set auth tag in unsupported state")};os.prototype.setAAD=function(){throw new Error("trying to set aad in unsupported state")};os.prototype._transform=function(e,t,r){var n;try{this.hashMode?this._update(e):this.push(this._update(e))}catch(i){n=i}finally{r(n)}};os.prototype._flush=function(e){var t;try{this.push(this.__final())}catch(r){t=r}e(t)};os.prototype._finalOrDigest=function(e){var t=this.__final()||Gle.alloc(0);return e&&(t=this._toString(t,e,!0)),t};os.prototype._toString=function(e,t,r){if(this._decoder||(this._decoder=new Yle(t),this._encoding=t),this._encoding!==t)throw new Error("can\u2019t switch encodings");var n=this._decoder.write(e);return r&&(n+=this._decoder.end()),n};i8.exports=os});var Mc=U((nNe,o8)=>{"use strict";var Jle=je(),jle=VE(),zle=jE(),Kle=ZE(),s8=ea();function $E(e){s8.call(this,"digest"),this._hash=e}Jle($E,s8);$E.prototype._update=function(e){this._hash.update(e)};$E.prototype._final=function(){return this._hash.digest()};o8.exports=function(t){return t=t.toLowerCase(),t==="md5"?new jle:t==="rmd160"||t==="ripemd160"?new zle:new $E(Kle(t))}});var f8=U((iNe,A8)=>{"use strict";var Xle=je(),Qf=at().Buffer,a8=ea(),Zle=Qf.alloc(128),Fc=64;function ey(e,t){a8.call(this,"digest"),typeof t=="string"&&(t=Qf.from(t)),this._alg=e,this._key=t,t.length>Fc?t=e(t):t.length<Fc&&(t=Qf.concat([t,Zle],Fc));for(var r=this._ipad=Qf.allocUnsafe(Fc),n=this._opad=Qf.allocUnsafe(Fc),i=0;i<Fc;i++)r[i]=t[i]^54,n[i]=t[i]^92;this._hash=[r]}Xle(ey,a8);ey.prototype._update=function(e){this._hash.push(e)};ey.prototype._final=function(){var e=this._alg(Qf.concat(this._hash));return this._alg(Qf.concat([this._opad,e]))};A8.exports=ey});var Pw=U((sNe,u8)=>{var $le=VE();u8.exports=function(e){return new $le().update(e).digest()}});var qw=U((oNe,l8)=>{"use strict";var ehe=je(),the=f8(),c8=ea(),bd=at().Buffer,rhe=Pw(),Ow=jE(),Hw=ZE(),nhe=bd.alloc(128);function Cd(e,t){c8.call(this,"digest"),typeof t=="string"&&(t=bd.from(t));var r=e==="sha512"||e==="sha384"?128:64;if(this._alg=e,this._key=t,t.length>r){var n=e==="rmd160"?new Ow:Hw(e);t=n.update(t).digest()}else t.length<r&&(t=bd.concat([t,nhe],r));for(var i=this._ipad=bd.allocUnsafe(r),s=this._opad=bd.allocUnsafe(r),o=0;o<r;o++)i[o]=t[o]^54,s[o]=t[o]^92;this._hash=e==="rmd160"?new Ow:Hw(e),this._hash.update(i)}ehe(Cd,c8);Cd.prototype._update=function(e){this._hash.update(e)};Cd.prototype._final=function(){var e=this._hash.digest(),t=this._alg==="rmd160"?new Ow:Hw(this._alg);return t.update(this._opad).update(e).digest()};l8.exports=function(t,r){return t=t.toLowerCase(),t==="rmd160"||t==="ripemd160"?new Cd("rmd160",r):t==="md5"?new the(rhe,r):new Cd(t,r)}});var Gw=U((aNe,ihe)=>{ihe.exports={sha224WithRSAEncryption:{sign:"rsa",hash:"sha224",id:"302d300d06096086480165030402040500041c"},"RSA-SHA224":{sign:"ecdsa/rsa",hash:"sha224",id:"302d300d06096086480165030402040500041c"},sha256WithRSAEncryption:{sign:"rsa",hash:"sha256",id:"3031300d060960864801650304020105000420"},"RSA-SHA256":{sign:"ecdsa/rsa",hash:"sha256",id:"3031300d060960864801650304020105000420"},sha384WithRSAEncryption:{sign:"rsa",hash:"sha384",id:"3041300d060960864801650304020205000430"},"RSA-SHA384":{sign:"ecdsa/rsa",hash:"sha384",id:"3041300d060960864801650304020205000430"},sha512WithRSAEncryption:{sign:"rsa",hash:"sha512",id:"3051300d060960864801650304020305000440"},"RSA-SHA512":{sign:"ecdsa/rsa",hash:"sha512",id:"3051300d060960864801650304020305000440"},"RSA-SHA1":{sign:"rsa",hash:"sha1",id:"3021300906052b0e03021a05000414"},"ecdsa-with-SHA1":{sign:"ecdsa",hash:"sha1",id:""},sha256:{sign:"ecdsa",hash:"sha256",id:""},sha224:{sign:"ecdsa",hash:"sha224",id:""},sha384:{sign:"ecdsa",hash:"sha384",id:""},sha512:{sign:"ecdsa",hash:"sha512",id:""},"DSA-SHA":{sign:"dsa",hash:"sha1",id:""},"DSA-SHA1":{sign:"dsa",hash:"sha1",id:""},DSA:{sign:"dsa",hash:"sha1",id:""},"DSA-WITH-SHA224":{sign:"dsa",hash:"sha224",id:""},"DSA-SHA224":{sign:"dsa",hash:"sha224",id:""},"DSA-WITH-SHA256":{sign:"dsa",hash:"sha256",id:""},"DSA-SHA256":{sign:"dsa",hash:"sha256",id:""},"DSA-WITH-SHA384":{sign:"dsa",hash:"sha384",id:""},"DSA-SHA384":{sign:"dsa",hash:"sha384",id:""},"DSA-WITH-SHA512":{sign:"dsa",hash:"sha512",id:""},"DSA-SHA512":{sign:"dsa",hash:"sha512",id:""},"DSA-RIPEMD160":{sign:"dsa",hash:"rmd160",id:""},ripemd160WithRSA:{sign:"rsa",hash:"rmd160",id:"3021300906052b2403020105000414"},"RSA-RIPEMD160":{sign:"rsa",hash:"rmd160",id:"3021300906052b2403020105000414"},md5WithRSAEncryption:{sign:"rsa",hash:"md5",id:"3020300c06082a864886f70d020505000410"},"RSA-MD5":{sign:"rsa",hash:"md5",id:"3020300c06082a864886f70d020505000410"}}});var d8=U((ANe,h8)=>{"use strict";h8.exports=Gw()});var Yw=U((fNe,g8)=>{"use strict";var she=isFinite,ohe=Math.pow(2,30)-1;g8.exports=function(e,t){if(typeof e!="number")throw new TypeError("Iterations not a number");if(e<0||!she(e))throw new TypeError("Bad iterations");if(typeof t!="number")throw new TypeError("Key length not a number");if(t<0||t>ohe||t!==t)throw new TypeError("Bad key length")}});var Ww=U((uNe,E8)=>{"use strict";var ty;globalThis.process&&globalThis.process.browser?ty="utf-8":globalThis.process&&globalThis.process.version?(p8=parseInt(process.version.split(".")[0].slice(1),10),ty=p8>=6?"utf-8":"binary"):ty="utf-8";var p8;E8.exports=ty});var Vw=U((cNe,B8)=>{"use strict";var ahe=at().Buffer,Ahe=id(),m8=typeof Uint8Array<"u",fhe=m8&&typeof ArrayBuffer<"u",y8=fhe&&ArrayBuffer.isView;B8.exports=function(e,t,r){if(typeof e=="string"||ahe.isBuffer(e)||m8&&e instanceof Uint8Array||y8&&y8(e))return Ahe(e,t);throw new TypeError(r+" must be a string, a Buffer, a Uint8Array, or a DataView")}});var Jw=U((lNe,Q8)=>{"use strict";var uhe=Pw(),che=jE(),lhe=ZE(),wf=at().Buffer,hhe=Yw(),I8=Ww(),b8=Vw(),dhe=wf.alloc(128),ry={__proto__:null,md5:16,sha1:20,sha224:28,sha256:32,sha384:48,sha512:64,"sha512-256":32,ripemd160:20,rmd160:20},ghe={__proto__:null,"sha-1":"sha1","sha-224":"sha224","sha-256":"sha256","sha-384":"sha384","sha-512":"sha512","ripemd-160":"ripemd160"};function phe(e){return new che().update(e).digest()}function Ehe(e){function t(r){return lhe(e).update(r).digest()}return e==="rmd160"||e==="ripemd160"?phe:e==="md5"?uhe:t}function C8(e,t,r){var n=Ehe(e),i=e==="sha512"||e==="sha384"?128:64;t.length>i?t=n(t):t.length<i&&(t=wf.concat([t,dhe],i));for(var s=wf.allocUnsafe(i+ry[e]),o=wf.allocUnsafe(i+ry[e]),a=0;a<i;a++)s[a]=t[a]^54,o[a]=t[a]^92;var A=wf.allocUnsafe(i+r+4);s.copy(A,0,0,i),this.ipad1=A,this.ipad2=s,this.opad=o,this.alg=e,this.blocksize=i,this.hash=n,this.size=ry[e]}C8.prototype.run=function(e,t){e.copy(t,this.blocksize);var r=this.hash(t);return r.copy(this.opad,this.blocksize),this.hash(this.opad)};function yhe(e,t,r,n,i){hhe(r,n),e=b8(e,I8,"Password"),t=b8(t,I8,"Salt");var s=(i||"sha1").toLowerCase(),o=ghe[s]||s,a=ry[o];if(typeof a!="number"||!a)throw new TypeError("Digest algorithm not supported: "+i);var A=new C8(o,e,t.length),f=wf.allocUnsafe(n),l=wf.allocUnsafe(t.length+4);t.copy(l,0,0,t.length);for(var p=0,I=a,S=Math.ceil(n/I),_=1;_<=S;_++){l.writeUInt32BE(_,t.length);for(var N=A.run(l,A.ipad1),O=N,x=1;x<r;x++){O=A.run(O,A.ipad2);for(var G=0;G<I;G++)N[G]^=O[G]}N.copy(f,p),p+=I}return f}Q8.exports=yhe});var T8=U((hNe,D8)=>{"use strict";var v8=at().Buffer,mhe=Yw(),w8=Ww(),S8=Jw(),_8=Vw(),ny,Qd=globalThis.crypto&&globalThis.crypto.subtle,Bhe={sha:"SHA-1","sha-1":"SHA-1",sha1:"SHA-1",sha256:"SHA-256","sha-256":"SHA-256",sha384:"SHA-384","sha-384":"SHA-384","sha-512":"SHA-512",sha512:"SHA-512"},jw=[],Sf;function zw(){return Sf||(globalThis.process&&globalThis.process.nextTick?Sf=globalThis.process.nextTick:globalThis.queueMicrotask?Sf=globalThis.queueMicrotask:globalThis.setImmediate?Sf=globalThis.setImmediate:Sf=globalThis.setTimeout,Sf)}function R8(e,t,r,n,i){return Qd.importKey("raw",e,{name:"PBKDF2"},!1,["deriveBits"]).then(function(s){return Qd.deriveBits({name:"PBKDF2",salt:t,iterations:r,hash:{name:i}},s,n<<3)}).then(function(s){return v8.from(s)})}function Ihe(e){if(globalThis.process&&!globalThis.process.browser||!Qd||!Qd.importKey||!Qd.deriveBits)return Promise.resolve(!1);if(jw[e]!==void 0)return jw[e];ny=ny||v8.alloc(8);var t=R8(ny,ny,10,128,e).then(function(){return!0},function(){return!1});return jw[e]=t,t}function bhe(e,t){e.then(function(r){zw()(function(){t(null,r)})},function(r){zw()(function(){t(r)})})}D8.exports=function(e,t,r,n,i,s){if(typeof i=="function"&&(s=i,i=void 0),mhe(r,n),e=_8(e,w8,"Password"),t=_8(t,w8,"Salt"),typeof s!="function")throw new Error("No callback provided to pbkdf2");i=i||"sha1";var o=Bhe[i.toLowerCase()];if(!o||typeof globalThis.Promise!="function"){zw()(function(){var a;try{a=S8(e,t,r,n,i)}catch(A){s(A);return}s(null,a)});return}bhe(Ihe(o).then(function(a){return a?R8(e,t,r,n,o):S8(e,t,r,n,i)}),s)}});var Xw=U(Kw=>{"use strict";Kw.pbkdf2=T8();Kw.pbkdf2Sync=Jw()});var Zw=U(Ii=>{"use strict";Ii.readUInt32BE=function(t,r){var n=t[0+r]<<24|t[1+r]<<16|t[2+r]<<8|t[3+r];return n>>>0};Ii.writeUInt32BE=function(t,r,n){t[0+n]=r>>>24,t[1+n]=r>>>16&255,t[2+n]=r>>>8&255,t[3+n]=r&255};Ii.ip=function(t,r,n,i){for(var s=0,o=0,a=6;a>=0;a-=2){for(var A=0;A<=24;A+=8)s<<=1,s|=r>>>A+a&1;for(var A=0;A<=24;A+=8)s<<=1,s|=t>>>A+a&1}for(var a=6;a>=0;a-=2){for(var A=1;A<=25;A+=8)o<<=1,o|=r>>>A+a&1;for(var A=1;A<=25;A+=8)o<<=1,o|=t>>>A+a&1}n[i+0]=s>>>0,n[i+1]=o>>>0};Ii.rip=function(t,r,n,i){for(var s=0,o=0,a=0;a<4;a++)for(var A=24;A>=0;A-=8)s<<=1,s|=r>>>A+a&1,s<<=1,s|=t>>>A+a&1;for(var a=4;a<8;a++)for(var A=24;A>=0;A-=8)o<<=1,o|=r>>>A+a&1,o<<=1,o|=t>>>A+a&1;n[i+0]=s>>>0,n[i+1]=o>>>0};Ii.pc1=function(t,r,n,i){for(var s=0,o=0,a=7;a>=5;a--){for(var A=0;A<=24;A+=8)s<<=1,s|=r>>A+a&1;for(var A=0;A<=24;A+=8)s<<=1,s|=t>>A+a&1}for(var A=0;A<=24;A+=8)s<<=1,s|=r>>A+a&1;for(var a=1;a<=3;a++){for(var A=0;A<=24;A+=8)o<<=1,o|=r>>A+a&1;for(var A=0;A<=24;A+=8)o<<=1,o|=t>>A+a&1}for(var A=0;A<=24;A+=8)o<<=1,o|=t>>A+a&1;n[i+0]=s>>>0,n[i+1]=o>>>0};Ii.r28shl=function(t,r){return t<<r&268435455|t>>>28-r};var iy=[14,11,17,4,27,23,25,0,13,22,7,18,5,9,16,24,2,20,12,21,1,8,15,26,15,4,25,19,9,1,26,16,5,11,23,8,12,7,17,0,22,3,10,14,6,20,27,24];Ii.pc2=function(t,r,n,i){for(var s=0,o=0,a=iy.length>>>1,A=0;A<a;A++)s<<=1,s|=t>>>iy[A]&1;for(var A=a;A<iy.length;A++)o<<=1,o|=r>>>iy[A]&1;n[i+0]=s>>>0,n[i+1]=o>>>0};Ii.expand=function(t,r,n){var i=0,s=0;i=(t&1)<<5|t>>>27;for(var o=23;o>=15;o-=4)i<<=6,i|=t>>>o&63;for(var o=11;o>=3;o-=4)s|=t>>>o&63,s<<=6;s|=(t&31)<<1|t>>>31,r[n+0]=i>>>0,r[n+1]=s>>>0};var N8=[14,0,4,15,13,7,1,4,2,14,15,2,11,13,8,1,3,10,10,6,6,12,12,11,5,9,9,5,0,3,7,8,4,15,1,12,14,8,8,2,13,4,6,9,2,1,11,7,15,5,12,11,9,3,7,14,3,10,10,0,5,6,0,13,15,3,1,13,8,4,14,7,6,15,11,2,3,8,4,14,9,12,7,0,2,1,13,10,12,6,0,9,5,11,10,5,0,13,14,8,7,10,11,1,10,3,4,15,13,4,1,2,5,11,8,6,12,7,6,12,9,0,3,5,2,14,15,9,10,13,0,7,9,0,14,9,6,3,3,4,15,6,5,10,1,2,13,8,12,5,7,14,11,12,4,11,2,15,8,1,13,1,6,10,4,13,9,0,8,6,15,9,3,8,0,7,11,4,1,15,2,14,12,3,5,11,10,5,14,2,7,12,7,13,13,8,14,11,3,5,0,6,6,15,9,0,10,3,1,4,2,7,8,2,5,12,11,1,12,10,4,14,15,9,10,3,6,15,9,0,0,6,12,10,11,1,7,13,13,8,15,9,1,4,3,5,14,11,5,12,2,7,8,2,4,14,2,14,12,11,4,2,1,12,7,4,10,7,11,13,6,1,8,5,5,0,3,15,15,10,13,3,0,9,14,8,9,6,4,11,2,8,1,12,11,7,10,1,13,14,7,2,8,13,15,6,9,15,12,0,5,9,6,10,3,4,0,5,14,3,12,10,1,15,10,4,15,2,9,7,2,12,6,9,8,5,0,6,13,1,3,13,4,14,14,0,7,11,5,3,11,8,9,4,14,3,15,2,5,12,2,9,8,5,12,15,3,10,7,11,0,14,4,1,10,7,1,6,13,0,11,8,6,13,4,13,11,0,2,11,14,7,15,4,0,9,8,1,13,10,3,14,12,3,9,5,7,12,5,2,10,15,6,8,1,6,1,6,4,11,11,13,13,8,12,1,3,4,7,10,14,7,10,9,15,5,6,0,8,15,0,14,5,2,9,3,2,12,13,1,2,15,8,13,4,8,6,10,15,3,11,7,1,4,10,12,9,5,3,6,14,11,5,0,0,14,12,9,7,2,7,2,11,1,4,14,1,7,9,4,12,10,14,8,2,13,0,15,6,12,10,9,13,0,15,3,3,5,5,6,8,11];Ii.substitute=function(t,r){for(var n=0,i=0;i<4;i++){var s=t>>>18-i*6&63,o=N8[i*64+s];n<<=4,n|=o}for(var i=0;i<4;i++){var s=r>>>18-i*6&63,o=N8[256+i*64+s];n<<=4,n|=o}return n>>>0};var M8=[16,25,12,11,3,20,4,15,31,17,9,6,27,14,1,22,30,24,8,18,0,5,29,23,13,19,2,26,10,21,28,7];Ii.permute=function(t){for(var r=0,n=0;n<M8.length;n++)r<<=1,r|=t>>>M8[n]&1;return r>>>0};Ii.padSplit=function(t,r,n){for(var i=t.toString(2);i.length<r;)i="0"+i;for(var s=[],o=0;o<r;o+=n)s.push(i.slice(o,o+n));return s.join(" ")}});var zn=U((pNe,k8)=>{k8.exports=F8;function F8(e,t){if(!e)throw new Error(t||"Assertion failed")}F8.equal=function(t,r,n){if(t!=r)throw new Error(n||"Assertion failed: "+t+" != "+r)}});var sy=U((ENe,U8)=>{"use strict";var Che=zn();function bi(e){this.options=e,this.type=this.options.type,this.blockSize=8,this._init(),this.buffer=new Array(this.blockSize),this.bufferOff=0,this.padding=e.padding!==!1}U8.exports=bi;bi.prototype._init=function(){};bi.prototype.update=function(t){return t.length===0?[]:this.type==="decrypt"?this._updateDecrypt(t):this._updateEncrypt(t)};bi.prototype._buffer=function(t,r){for(var n=Math.min(this.buffer.length-this.bufferOff,t.length-r),i=0;i<n;i++)this.buffer[this.bufferOff+i]=t[r+i];return this.bufferOff+=n,n};bi.prototype._flushBuffer=function(t,r){return this._update(this.buffer,0,t,r),this.bufferOff=0,this.blockSize};bi.prototype._updateEncrypt=function(t){var r=0,n=0,i=(this.bufferOff+t.length)/this.blockSize|0,s=new Array(i*this.blockSize);this.bufferOff!==0&&(r+=this._buffer(t,r),this.bufferOff===this.buffer.length&&(n+=this._flushBuffer(s,n)));for(var o=t.length-(t.length-r)%this.blockSize;r<o;r+=this.blockSize)this._update(t,r,s,n),n+=this.blockSize;for(;r<t.length;r++,this.bufferOff++)this.buffer[this.bufferOff]=t[r];return s};bi.prototype._updateDecrypt=function(t){for(var r=0,n=0,i=Math.ceil((this.bufferOff+t.length)/this.blockSize)-1,s=new Array(i*this.blockSize);i>0;i--)r+=this._buffer(t,r),n+=this._flushBuffer(s,n);return r+=this._buffer(t,r),s};bi.prototype.final=function(t){var r;t&&(r=this.update(t));var n;return this.type==="encrypt"?n=this._finalEncrypt():n=this._finalDecrypt(),r?r.concat(n):n};bi.prototype._pad=function(t,r){if(r===0)return!1;for(;r<t.length;)t[r++]=0;return!0};bi.prototype._finalEncrypt=function(){if(!this._pad(this.buffer,this.bufferOff))return[];var t=new Array(this.blockSize);return this._update(this.buffer,0,t,0),t};bi.prototype._unpad=function(t){return t};bi.prototype._finalDecrypt=function(){Che.equal(this.bufferOff,this.blockSize,"Not enough data to decrypt");var t=new Array(this.blockSize);return this._flushBuffer(t,0),this._unpad(t)}});var $w=U((yNe,P8)=>{"use strict";var x8=zn(),Qhe=je(),vr=Zw(),L8=sy();function whe(){this.tmp=new Array(2),this.keys=null}function ro(e){L8.call(this,e);var t=new whe;this._desState=t,this.deriveKeys(t,e.key)}Qhe(ro,L8);P8.exports=ro;ro.create=function(t){return new ro(t)};var She=[1,1,2,2,2,2,2,2,1,2,2,2,2,2,2,1];ro.prototype.deriveKeys=function(t,r){t.keys=new Array(32),x8.equal(r.length,this.blockSize,"Invalid key length");var n=vr.readUInt32BE(r,0),i=vr.readUInt32BE(r,4);vr.pc1(n,i,t.tmp,0),n=t.tmp[0],i=t.tmp[1];for(var s=0;s<t.keys.length;s+=2){var o=She[s>>>1];n=vr.r28shl(n,o),i=vr.r28shl(i,o),vr.pc2(n,i,t.keys,s)}};ro.prototype._update=function(t,r,n,i){var s=this._desState,o=vr.readUInt32BE(t,r),a=vr.readUInt32BE(t,r+4);vr.ip(o,a,s.tmp,0),o=s.tmp[0],a=s.tmp[1],this.type==="encrypt"?this._encrypt(s,o,a,s.tmp,0):this._decrypt(s,o,a,s.tmp,0),o=s.tmp[0],a=s.tmp[1],vr.writeUInt32BE(n,o,i),vr.writeUInt32BE(n,a,i+4)};ro.prototype._pad=function(t,r){if(this.padding===!1)return!1;for(var n=t.length-r,i=r;i<t.length;i++)t[i]=n;return!0};ro.prototype._unpad=function(t){if(this.padding===!1)return t;for(var r=t[t.length-1],n=t.length-r;n<t.length;n++)x8.equal(t[n],r);return t.slice(0,t.length-r)};ro.prototype._encrypt=function(t,r,n,i,s){for(var o=r,a=n,A=0;A<t.keys.length;A+=2){var f=t.keys[A],l=t.keys[A+1];vr.expand(a,t.tmp,0),f^=t.tmp[0],l^=t.tmp[1];var p=vr.substitute(f,l),I=vr.permute(p),S=a;a=(o^I)>>>0,o=S}vr.rip(a,o,i,s)};ro.prototype._decrypt=function(t,r,n,i,s){for(var o=n,a=r,A=t.keys.length-2;A>=0;A-=2){var f=t.keys[A],l=t.keys[A+1];vr.expand(o,t.tmp,0),f^=t.tmp[0],l^=t.tmp[1];var p=vr.substitute(f,l),I=vr.permute(p),S=o;o=(a^I)>>>0,a=S}vr.rip(o,a,i,s)}});var H8=U(O8=>{"use strict";var _he=zn(),vhe=je(),oy={};function Rhe(e){_he.equal(e.length,8,"Invalid IV length"),this.iv=new Array(8);for(var t=0;t<this.iv.length;t++)this.iv[t]=e[t]}function Dhe(e){function t(s){e.call(this,s),this._cbcInit()}vhe(t,e);for(var r=Object.keys(oy),n=0;n<r.length;n++){var i=r[n];t.prototype[i]=oy[i]}return t.create=function(o){return new t(o)},t}O8.instantiate=Dhe;oy._cbcInit=function(){var t=new Rhe(this.options.iv);this._cbcState=t};oy._update=function(t,r,n,i){var s=this._cbcState,o=this.constructor.super_.prototype,a=s.iv;if(this.type==="encrypt"){for(var A=0;A<this.blockSize;A++)a[A]^=t[r+A];o._update.call(this,a,0,n,i);for(var A=0;A<this.blockSize;A++)a[A]=n[i+A]}else{o._update.call(this,t,r,n,i);for(var A=0;A<this.blockSize;A++)n[i+A]^=a[A];for(var A=0;A<this.blockSize;A++)a[A]=t[r+A]}}});var Y8=U((BNe,G8)=>{"use strict";var The=zn(),Nhe=je(),q8=sy(),oA=$w();function Mhe(e,t){The.equal(t.length,24,"Invalid key length");var r=t.slice(0,8),n=t.slice(8,16),i=t.slice(16,24);e==="encrypt"?this.ciphers=[oA.create({type:"encrypt",key:r}),oA.create({type:"decrypt",key:n}),oA.create({type:"encrypt",key:i})]:this.ciphers=[oA.create({type:"decrypt",key:i}),oA.create({type:"encrypt",key:n}),oA.create({type:"decrypt",key:r})]}function _f(e){q8.call(this,e);var t=new Mhe(this.type,this.options.key);this._edeState=t}Nhe(_f,q8);G8.exports=_f;_f.create=function(t){return new _f(t)};_f.prototype._update=function(t,r,n,i){var s=this._edeState;s.ciphers[0]._update(t,r,n,i),s.ciphers[1]._update(n,i,n,i),s.ciphers[2]._update(n,i,n,i)};_f.prototype._pad=oA.prototype._pad;_f.prototype._unpad=oA.prototype._unpad});var W8=U(kc=>{"use strict";kc.utils=Zw();kc.Cipher=sy();kc.DES=$w();kc.CBC=H8();kc.EDE=Y8()});var j8=U((bNe,J8)=>{var V8=ea(),ta=W8(),Fhe=je(),vf=at().Buffer,wd={"des-ede3-cbc":ta.CBC.instantiate(ta.EDE),"des-ede3":ta.EDE,"des-ede-cbc":ta.CBC.instantiate(ta.EDE),"des-ede":ta.EDE,"des-cbc":ta.CBC.instantiate(ta.DES),"des-ecb":ta.DES};wd.des=wd["des-cbc"];wd.des3=wd["des-ede3-cbc"];J8.exports=ay;Fhe(ay,V8);function ay(e){V8.call(this);var t=e.mode.toLowerCase(),r=wd[t],n;e.decrypt?n="decrypt":n="encrypt";var i=e.key;vf.isBuffer(i)||(i=vf.from(i)),(t==="des-ede"||t==="des-ede-cbc")&&(i=vf.concat([i,i.slice(0,8)]));var s=e.iv;vf.isBuffer(s)||(s=vf.from(s)),this._des=r.create({key:i,iv:s,type:n})}ay.prototype._update=function(e){return vf.from(this._des.update(e))};ay.prototype._final=function(){return vf.from(this._des.final())}});var z8=U(eS=>{eS.encrypt=function(e,t){return e._cipher.encryptBlock(t)};eS.decrypt=function(e,t){return e._cipher.decryptBlock(t)}});var Uc=U((QNe,K8)=>{K8.exports=function(t,r){for(var n=Math.min(t.length,r.length),i=new Buffer(n),s=0;s<n;++s)i[s]=t[s]^r[s];return i}});var Z8=U(tS=>{var X8=Uc();tS.encrypt=function(e,t){var r=X8(t,e._prev);return e._prev=e._cipher.encryptBlock(r),e._prev};tS.decrypt=function(e,t){var r=e._prev;e._prev=t;var n=e._cipher.decryptBlock(t);return X8(n,r)}});var t5=U(e5=>{var Sd=at().Buffer,khe=Uc();function $8(e,t,r){var n=t.length,i=khe(t,e._cache);return e._cache=e._cache.slice(n),e._prev=Sd.concat([e._prev,r?t:i]),i}e5.encrypt=function(e,t,r){for(var n=Sd.allocUnsafe(0),i;t.length;)if(e._cache.length===0&&(e._cache=e._cipher.encryptBlock(e._prev),e._prev=Sd.allocUnsafe(0)),e._cache.length<=t.length)i=e._cache.length,n=Sd.concat([n,$8(e,t.slice(0,i),r)]),t=t.slice(i);else{n=Sd.concat([n,$8(e,t,r)]);break}return n}});var n5=U(r5=>{var rS=at().Buffer;function Uhe(e,t,r){var n=e._cipher.encryptBlock(e._prev),i=n[0]^t;return e._prev=rS.concat([e._prev.slice(1),rS.from([r?t:i])]),i}r5.encrypt=function(e,t,r){for(var n=t.length,i=rS.allocUnsafe(n),s=-1;++s<n;)i[s]=Uhe(e,t[s],r);return i}});var s5=U(i5=>{var Ay=at().Buffer;function xhe(e,t,r){for(var n,i=-1,s=8,o=0,a,A;++i<s;)n=e._cipher.encryptBlock(e._prev),a=t&1<<7-i?128:0,A=n[0]^a,o+=(A&128)>>i%8,e._prev=Lhe(e._prev,r?a:A);return o}function Lhe(e,t){var r=e.length,n=-1,i=Ay.allocUnsafe(e.length);for(e=Ay.concat([e,Ay.from([t])]);++n<r;)i[n]=e[n]<<1|e[n+1]>>7;return i}i5.encrypt=function(e,t,r){for(var n=t.length,i=Ay.allocUnsafe(n),s=-1;++s<n;)i[s]=xhe(e,t[s],r);return i}});var a5=U(o5=>{var Phe=Uc();function Ohe(e){return e._prev=e._cipher.encryptBlock(e._prev),e._prev}o5.encrypt=function(e,t){for(;e._cache.length<t.length;)e._cache=Buffer.concat([e._cache,Ohe(e)]);var r=e._cache.slice(0,t.length);return e._cache=e._cache.slice(t.length),Phe(t,r)}});var nS=U((DNe,A5)=>{function Hhe(e){for(var t=e.length,r;t--;)if(r=e.readUInt8(t),r===255)e.writeUInt8(0,t);else{r++,e.writeUInt8(r,t);break}}A5.exports=Hhe});var sS=U(u5=>{var qhe=Uc(),f5=at().Buffer,Ghe=nS();function Yhe(e){var t=e._cipher.encryptBlockRaw(e._prev);return Ghe(e._prev),t}var iS=16;u5.encrypt=function(e,t){var r=Math.ceil(t.length/iS),n=e._cache.length;e._cache=f5.concat([e._cache,f5.allocUnsafe(r*iS)]);for(var i=0;i<r;i++){var s=Yhe(e),o=n+i*iS;e._cache.writeUInt32BE(s[0],o+0),e._cache.writeUInt32BE(s[1],o+4),e._cache.writeUInt32BE(s[2],o+8),e._cache.writeUInt32BE(s[3],o+12)}var a=e._cache.slice(0,t.length);return e._cache=e._cache.slice(t.length),qhe(t,a)}});var oS=U((NNe,Whe)=>{Whe.exports={"aes-128-ecb":{cipher:"AES",key:128,iv:0,mode:"ECB",type:"block"},"aes-192-ecb":{cipher:"AES",key:192,iv:0,mode:"ECB",type:"block"},"aes-256-ecb":{cipher:"AES",key:256,iv:0,mode:"ECB",type:"block"},"aes-128-cbc":{cipher:"AES",key:128,iv:16,mode:"CBC",type:"block"},"aes-192-cbc":{cipher:"AES",key:192,iv:16,mode:"CBC",type:"block"},"aes-256-cbc":{cipher:"AES",key:256,iv:16,mode:"CBC",type:"block"},aes128:{cipher:"AES",key:128,iv:16,mode:"CBC",type:"block"},aes192:{cipher:"AES",key:192,iv:16,mode:"CBC",type:"block"},aes256:{cipher:"AES",key:256,iv:16,mode:"CBC",type:"block"},"aes-128-cfb":{cipher:"AES",key:128,iv:16,mode:"CFB",type:"stream"},"aes-192-cfb":{cipher:"AES",key:192,iv:16,mode:"CFB",type:"stream"},"aes-256-cfb":{cipher:"AES",key:256,iv:16,mode:"CFB",type:"stream"},"aes-128-cfb8":{cipher:"AES",key:128,iv:16,mode:"CFB8",type:"stream"},"aes-192-cfb8":{cipher:"AES",key:192,iv:16,mode:"CFB8",type:"stream"},"aes-256-cfb8":{cipher:"AES",key:256,iv:16,mode:"CFB8",type:"stream"},"aes-128-cfb1":{cipher:"AES",key:128,iv:16,mode:"CFB1",type:"stream"},"aes-192-cfb1":{cipher:"AES",key:192,iv:16,mode:"CFB1",type:"stream"},"aes-256-cfb1":{cipher:"AES",key:256,iv:16,mode:"CFB1",type:"stream"},"aes-128-ofb":{cipher:"AES",key:128,iv:16,mode:"OFB",type:"stream"},"aes-192-ofb":{cipher:"AES",key:192,iv:16,mode:"OFB",type:"stream"},"aes-256-ofb":{cipher:"AES",key:256,iv:16,mode:"OFB",type:"stream"},"aes-128-ctr":{cipher:"AES",key:128,iv:16,mode:"CTR",type:"stream"},"aes-192-ctr":{cipher:"AES",key:192,iv:16,mode:"CTR",type:"stream"},"aes-256-ctr":{cipher:"AES",key:256,iv:16,mode:"CTR",type:"stream"},"aes-128-gcm":{cipher:"AES",key:128,iv:12,mode:"GCM",type:"auth"},"aes-192-gcm":{cipher:"AES",key:192,iv:12,mode:"GCM",type:"auth"},"aes-256-gcm":{cipher:"AES",key:256,iv:12,mode:"GCM",type:"auth"}}});var uy=U((MNe,c5)=>{var Vhe={ECB:z8(),CBC:Z8(),CFB:t5(),CFB8:n5(),CFB1:s5(),OFB:a5(),CTR:sS(),GCM:sS()},fy=oS();for(aS in fy)fy[aS].module=Vhe[fy[aS].mode];var aS;c5.exports=fy});var _d=U((FNe,h5)=>{var cy=at().Buffer;function fS(e){cy.isBuffer(e)||(e=cy.from(e));for(var t=e.length/4|0,r=new Array(t),n=0;n<t;n++)r[n]=e.readUInt32BE(n*4);return r}function AS(e){for(var t=0;t<e.length;e++)e[t]=0}function l5(e,t,r,n,i){for(var s=r[0],o=r[1],a=r[2],A=r[3],f=e[0]^t[0],l=e[1]^t[1],p=e[2]^t[2],I=e[3]^t[3],S,_,N,O,x=4,G=1;G<i;G++)S=s[f>>>24]^o[l>>>16&255]^a[p>>>8&255]^A[I&255]^t[x++],_=s[l>>>24]^o[p>>>16&255]^a[I>>>8&255]^A[f&255]^t[x++],N=s[p>>>24]^o[I>>>16&255]^a[f>>>8&255]^A[l&255]^t[x++],O=s[I>>>24]^o[f>>>16&255]^a[l>>>8&255]^A[p&255]^t[x++],f=S,l=_,p=N,I=O;return S=(n[f>>>24]<<24|n[l>>>16&255]<<16|n[p>>>8&255]<<8|n[I&255])^t[x++],_=(n[l>>>24]<<24|n[p>>>16&255]<<16|n[I>>>8&255]<<8|n[f&255])^t[x++],N=(n[p>>>24]<<24|n[I>>>16&255]<<16|n[f>>>8&255]<<8|n[l&255])^t[x++],O=(n[I>>>24]<<24|n[f>>>16&255]<<16|n[l>>>8&255]<<8|n[p&255])^t[x++],S=S>>>0,_=_>>>0,N=N>>>0,O=O>>>0,[S,_,N,O]}var Jhe=[0,1,2,4,8,16,32,64,128,27,54],Ir=(function(){for(var e=new Array(256),t=0;t<256;t++)t<128?e[t]=t<<1:e[t]=t<<1^283;for(var r=[],n=[],i=[[],[],[],[]],s=[[],[],[],[]],o=0,a=0,A=0;A<256;++A){var f=a^a<<1^a<<2^a<<3^a<<4;f=f>>>8^f&255^99,r[o]=f,n[f]=o;var l=e[o],p=e[l],I=e[p],S=e[f]*257^f*16843008;i[0][o]=S<<24|S>>>8,i[1][o]=S<<16|S>>>16,i[2][o]=S<<8|S>>>24,i[3][o]=S,S=I*16843009^p*65537^l*257^o*16843008,s[0][f]=S<<24|S>>>8,s[1][f]=S<<16|S>>>16,s[2][f]=S<<8|S>>>24,s[3][f]=S,o===0?o=a=1:(o=l^e[e[e[I^l]]],a^=e[e[a]])}return{SBOX:r,INV_SBOX:n,SUB_MIX:i,INV_SUB_MIX:s}})();function Ci(e){this._key=fS(e),this._reset()}Ci.blockSize=16;Ci.keySize=256/8;Ci.prototype.blockSize=Ci.blockSize;Ci.prototype.keySize=Ci.keySize;Ci.prototype._reset=function(){for(var e=this._key,t=e.length,r=t+6,n=(r+1)*4,i=[],s=0;s<t;s++)i[s]=e[s];for(s=t;s<n;s++){var o=i[s-1];s%t===0?(o=o<<8|o>>>24,o=Ir.SBOX[o>>>24]<<24|Ir.SBOX[o>>>16&255]<<16|Ir.SBOX[o>>>8&255]<<8|Ir.SBOX[o&255],o^=Jhe[s/t|0]<<24):t>6&&s%t===4&&(o=Ir.SBOX[o>>>24]<<24|Ir.SBOX[o>>>16&255]<<16|Ir.SBOX[o>>>8&255]<<8|Ir.SBOX[o&255]),i[s]=i[s-t]^o}for(var a=[],A=0;A<n;A++){var f=n-A,l=i[f-(A%4?0:4)];A<4||f<=4?a[A]=l:a[A]=Ir.INV_SUB_MIX[0][Ir.SBOX[l>>>24]]^Ir.INV_SUB_MIX[1][Ir.SBOX[l>>>16&255]]^Ir.INV_SUB_MIX[2][Ir.SBOX[l>>>8&255]]^Ir.INV_SUB_MIX[3][Ir.SBOX[l&255]]}this._nRounds=r,this._keySchedule=i,this._invKeySchedule=a};Ci.prototype.encryptBlockRaw=function(e){return e=fS(e),l5(e,this._keySchedule,Ir.SUB_MIX,Ir.SBOX,this._nRounds)};Ci.prototype.encryptBlock=function(e){var t=this.encryptBlockRaw(e),r=cy.allocUnsafe(16);return r.writeUInt32BE(t[0],0),r.writeUInt32BE(t[1],4),r.writeUInt32BE(t[2],8),r.writeUInt32BE(t[3],12),r};Ci.prototype.decryptBlock=function(e){e=fS(e);var t=e[1];e[1]=e[3],e[3]=t;var r=l5(e,this._invKeySchedule,Ir.INV_SUB_MIX,Ir.INV_SBOX,this._nRounds),n=cy.allocUnsafe(16);return n.writeUInt32BE(r[0],0),n.writeUInt32BE(r[3],4),n.writeUInt32BE(r[2],8),n.writeUInt32BE(r[1],12),n};Ci.prototype.scrub=function(){AS(this._keySchedule),AS(this._invKeySchedule),AS(this._key)};h5.exports.AES=Ci});var p5=U((kNe,g5)=>{var xc=at().Buffer,jhe=xc.alloc(16,0);function zhe(e){return[e.readUInt32BE(0),e.readUInt32BE(4),e.readUInt32BE(8),e.readUInt32BE(12)]}function d5(e){var t=xc.allocUnsafe(16);return t.writeUInt32BE(e[0]>>>0,0),t.writeUInt32BE(e[1]>>>0,4),t.writeUInt32BE(e[2]>>>0,8),t.writeUInt32BE(e[3]>>>0,12),t}function vd(e){this.h=e,this.state=xc.alloc(16,0),this.cache=xc.allocUnsafe(0)}vd.prototype.ghash=function(e){for(var t=-1;++t<e.length;)this.state[t]^=e[t];this._multiply()};vd.prototype._multiply=function(){for(var e=zhe(this.h),t=[0,0,0,0],r,n,i,s=-1;++s<128;){for(n=(this.state[~~(s/8)]&1<<7-s%8)!==0,n&&(t[0]^=e[0],t[1]^=e[1],t[2]^=e[2],t[3]^=e[3]),i=(e[3]&1)!==0,r=3;r>0;r--)e[r]=e[r]>>>1|(e[r-1]&1)<<31;e[0]=e[0]>>>1,i&&(e[0]=e[0]^225<<24)}this.state=d5(t)};vd.prototype.update=function(e){this.cache=xc.concat([this.cache,e]);for(var t;this.cache.length>=16;)t=this.cache.slice(0,16),this.cache=this.cache.slice(16),this.ghash(t)};vd.prototype.final=function(e,t){return this.cache.length&&this.ghash(xc.concat([this.cache,jhe],16)),this.ghash(d5([0,e,0,t])),this.state};g5.exports=vd});var uS=U((UNe,m5)=>{var Khe=_d(),Nn=at().Buffer,E5=ea(),Xhe=je(),y5=p5(),Zhe=Uc(),$he=nS();function ede(e,t){var r=0;e.length!==t.length&&r++;for(var n=Math.min(e.length,t.length),i=0;i<n;++i)r+=e[i]^t[i];return r}function tde(e,t,r){if(t.length===12)return e._finID=Nn.concat([t,Nn.from([0,0,0,1])]),Nn.concat([t,Nn.from([0,0,0,2])]);var n=new y5(r),i=t.length,s=i%16;n.update(t),s&&(s=16-s,n.update(Nn.alloc(s,0))),n.update(Nn.alloc(8,0));var o=i*8,a=Nn.alloc(8);a.writeUIntBE(o,0,8),n.update(a),e._finID=n.state;var A=Nn.from(e._finID);return $he(A),A}function Rf(e,t,r,n){E5.call(this);var i=Nn.alloc(4,0);this._cipher=new Khe.AES(t);var s=this._cipher.encryptBlock(i);this._ghash=new y5(s),r=tde(this,r,s),this._prev=Nn.from(r),this._cache=Nn.allocUnsafe(0),this._secCache=Nn.allocUnsafe(0),this._decrypt=n,this._alen=0,this._len=0,this._mode=e,this._authTag=null,this._called=!1}Xhe(Rf,E5);Rf.prototype._update=function(e){if(!this._called&&this._alen){var t=16-this._alen%16;t<16&&(t=Nn.alloc(t,0),this._ghash.update(t))}this._called=!0;var r=this._mode.encrypt(this,e);return this._decrypt?this._ghash.update(e):this._ghash.update(r),this._len+=e.length,r};Rf.prototype._final=function(){if(this._decrypt&&!this._authTag)throw new Error("Unsupported state or unable to authenticate data");var e=Zhe(this._ghash.final(this._alen*8,this._len*8),this._cipher.encryptBlock(this._finID));if(this._decrypt&&ede(e,this._authTag))throw new Error("Unsupported state or unable to authenticate data");this._authTag=e,this._cipher.scrub()};Rf.prototype.getAuthTag=function(){if(this._decrypt||!Nn.isBuffer(this._authTag))throw new Error("Attempting to get auth tag in unsupported state");return this._authTag};Rf.prototype.setAuthTag=function(t){if(!this._decrypt)throw new Error("Attempting to set auth tag in unsupported state");this._authTag=t};Rf.prototype.setAAD=function(t){if(this._called)throw new Error("Attempting to set AAD in unsupported state");this._ghash.update(t),this._alen+=t.length};m5.exports=Rf});var lS=U((xNe,I5)=>{var rde=_d(),cS=at().Buffer,B5=ea(),nde=je();function ly(e,t,r,n){B5.call(this),this._cipher=new rde.AES(t),this._prev=cS.from(r),this._cache=cS.allocUnsafe(0),this._secCache=cS.allocUnsafe(0),this._decrypt=n,this._mode=e}nde(ly,B5);ly.prototype._update=function(e){return this._mode.encrypt(this,e,this._decrypt)};ly.prototype._final=function(){this._cipher.scrub()};I5.exports=ly});var Rd=U((LNe,b5)=>{var Df=at().Buffer,ide=VE();function sde(e,t,r,n){if(Df.isBuffer(e)||(e=Df.from(e,"binary")),t&&(Df.isBuffer(t)||(t=Df.from(t,"binary")),t.length!==8))throw new RangeError("salt should be Buffer with 8 byte length");for(var i=r/8,s=Df.alloc(i),o=Df.alloc(n||0),a=Df.alloc(0);i>0||n>0;){var A=new ide;A.update(a),A.update(e),t&&A.update(t),a=A.digest();var f=0;if(i>0){var l=s.length-i;f=Math.min(i,a.length),a.copy(s,l,0,f),i-=f}if(f<a.length&&n>0){var p=o.length-n,I=Math.min(n,a.length-f);a.copy(o,p,f,f+I),n-=I}}return a.fill(0),{key:s,iv:o}}b5.exports=sde});var S5=U(hS=>{var C5=uy(),ode=uS(),ra=at().Buffer,ade=lS(),Q5=ea(),Ade=_d(),fde=Rd(),ude=je();function Dd(e,t,r){Q5.call(this),this._cache=new hy,this._cipher=new Ade.AES(t),this._prev=ra.from(r),this._mode=e,this._autopadding=!0}ude(Dd,Q5);Dd.prototype._update=function(e){this._cache.add(e);for(var t,r,n=[];t=this._cache.get();)r=this._mode.encrypt(this,t),n.push(r);return ra.concat(n)};var cde=ra.alloc(16,16);Dd.prototype._final=function(){var e=this._cache.flush();if(this._autopadding)return e=this._mode.encrypt(this,e),this._cipher.scrub(),e;if(!e.equals(cde))throw this._cipher.scrub(),new Error("data not multiple of block length")};Dd.prototype.setAutoPadding=function(e){return this._autopadding=!!e,this};function hy(){this.cache=ra.allocUnsafe(0)}hy.prototype.add=function(e){this.cache=ra.concat([this.cache,e])};hy.prototype.get=function(){if(this.cache.length>15){var e=this.cache.slice(0,16);return this.cache=this.cache.slice(16),e}return null};hy.prototype.flush=function(){for(var e=16-this.cache.length,t=ra.allocUnsafe(e),r=-1;++r<e;)t.writeUInt8(e,r);return ra.concat([this.cache,t])};function w5(e,t,r){var n=C5[e.toLowerCase()];if(!n)throw new TypeError("invalid suite type");if(typeof t=="string"&&(t=ra.from(t)),t.length!==n.key/8)throw new TypeError("invalid key length "+t.length);if(typeof r=="string"&&(r=ra.from(r)),n.mode!=="GCM"&&r.length!==n.iv)throw new TypeError("invalid iv length "+r.length);return n.type==="stream"?new ade(n.module,t,r):n.type==="auth"?new ode(n.module,t,r):new Dd(n.module,t,r)}function lde(e,t){var r=C5[e.toLowerCase()];if(!r)throw new TypeError("invalid suite type");var n=fde(t,!1,r.key,r.iv);return w5(e,n.key,n.iv)}hS.createCipheriv=w5;hS.createCipher=lde});var D5=U(dS=>{var hde=uS(),Lc=at().Buffer,_5=uy(),dde=lS(),v5=ea(),gde=_d(),pde=Rd(),Ede=je();function Td(e,t,r){v5.call(this),this._cache=new dy,this._last=void 0,this._cipher=new gde.AES(t),this._prev=Lc.from(r),this._mode=e,this._autopadding=!0}Ede(Td,v5);Td.prototype._update=function(e){this._cache.add(e);for(var t,r,n=[];t=this._cache.get(this._autopadding);)r=this._mode.decrypt(this,t),n.push(r);return Lc.concat(n)};Td.prototype._final=function(){var e=this._cache.flush();if(this._autopadding)return yde(this._mode.decrypt(this,e));if(e)throw new Error("data not multiple of block length")};Td.prototype.setAutoPadding=function(e){return this._autopadding=!!e,this};function dy(){this.cache=Lc.allocUnsafe(0)}dy.prototype.add=function(e){this.cache=Lc.concat([this.cache,e])};dy.prototype.get=function(e){var t;if(e){if(this.cache.length>16)return t=this.cache.slice(0,16),this.cache=this.cache.slice(16),t}else if(this.cache.length>=16)return t=this.cache.slice(0,16),this.cache=this.cache.slice(16),t;return null};dy.prototype.flush=function(){if(this.cache.length)return this.cache};function yde(e){var t=e[15];if(t<1||t>16)throw new Error("unable to decrypt data");for(var r=-1;++r<t;)if(e[r+(16-t)]!==t)throw new Error("unable to decrypt data");if(t!==16)return e.slice(0,16-t)}function R5(e,t,r){var n=_5[e.toLowerCase()];if(!n)throw new TypeError("invalid suite type");if(typeof r=="string"&&(r=Lc.from(r)),n.mode!=="GCM"&&r.length!==n.iv)throw new TypeError("invalid iv length "+r.length);if(typeof t=="string"&&(t=Lc.from(t)),t.length!==n.key/8)throw new TypeError("invalid key length "+t.length);return n.type==="stream"?new dde(n.module,t,r,!0):n.type==="auth"?new hde(n.module,t,r,!0):new Td(n.module,t,r)}function mde(e,t){var r=_5[e.toLowerCase()];if(!r)throw new TypeError("invalid suite type");var n=pde(t,!1,r.key,r.iv);return R5(e,n.key,n.iv)}dS.createDecipher=mde;dS.createDecipheriv=R5});var gy=U(as=>{var T5=S5(),N5=D5(),Bde=oS();function Ide(){return Object.keys(Bde)}as.createCipher=as.Cipher=T5.createCipher;as.createCipheriv=as.Cipheriv=T5.createCipheriv;as.createDecipher=as.Decipher=N5.createDecipher;as.createDecipheriv=as.Decipheriv=N5.createDecipheriv;as.listCiphers=as.getCiphers=Ide});var M5=U(na=>{na["des-ecb"]={key:8,iv:0};na["des-cbc"]=na.des={key:8,iv:8};na["des-ede3-cbc"]=na.des3={key:24,iv:8};na["des-ede3"]={key:24,iv:0};na["des-ede-cbc"]={key:16,iv:8};na["des-ede"]={key:16,iv:0}});var L5=U(As=>{var F5=j8(),gS=gy(),aA=uy(),ia=M5(),k5=Rd();function bde(e,t){e=e.toLowerCase();var r,n;if(aA[e])r=aA[e].key,n=aA[e].iv;else if(ia[e])r=ia[e].key*8,n=ia[e].iv;else throw new TypeError("invalid suite type");var i=k5(t,!1,r,n);return U5(e,i.key,i.iv)}function Cde(e,t){e=e.toLowerCase();var r,n;if(aA[e])r=aA[e].key,n=aA[e].iv;else if(ia[e])r=ia[e].key*8,n=ia[e].iv;else throw new TypeError("invalid suite type");var i=k5(t,!1,r,n);return x5(e,i.key,i.iv)}function U5(e,t,r){if(e=e.toLowerCase(),aA[e])return gS.createCipheriv(e,t,r);if(ia[e])return new F5({key:t,iv:r,mode:e});throw new TypeError("invalid suite type")}function x5(e,t,r){if(e=e.toLowerCase(),aA[e])return gS.createDecipheriv(e,t,r);if(ia[e])return new F5({key:t,iv:r,mode:e,decrypt:!0});throw new TypeError("invalid suite type")}function Qde(){return Object.keys(ia).concat(gS.getCiphers())}As.createCipher=As.Cipher=bde;As.createCipheriv=As.Cipheriv=U5;As.createDecipher=As.Decipher=Cde;As.createDecipheriv=As.Decipheriv=x5;As.listCiphers=As.getCiphers=Qde});var kr=U((P5,pS)=>{(function(e,t){"use strict";function r(H,E){if(!H)throw new Error(E||"Assertion failed")}function n(H,E){H.super_=E;var v=function(){};v.prototype=E.prototype,H.prototype=new v,H.prototype.constructor=H}function i(H,E,v){if(i.isBN(H))return H;this.negative=0,this.words=null,this.length=0,this.red=null,H!==null&&((E==="le"||E==="be")&&(v=E,E=10),this._init(H||0,E||10,v||"be"))}typeof e=="object"?e.exports=i:t.BN=i,i.BN=i,i.wordSize=26;var s;try{typeof window<"u"&&typeof window.Buffer<"u"?s=window.Buffer:s=Gr().Buffer}catch{}i.isBN=function(E){return E instanceof i?!0:E!==null&&typeof E=="object"&&E.constructor.wordSize===i.wordSize&&Array.isArray(E.words)},i.max=function(E,v){return E.cmp(v)>0?E:v},i.min=function(E,v){return E.cmp(v)<0?E:v},i.prototype._init=function(E,v,b){if(typeof E=="number")return this._initNumber(E,v,b);if(typeof E=="object")return this._initArray(E,v,b);v==="hex"&&(v=16),r(v===(v|0)&&v>=2&&v<=36),E=E.toString().replace(/\s+/g,"");var c=0;E[0]==="-"&&(c++,this.negative=1),c<E.length&&(v===16?this._parseHex(E,c,b):(this._parseBase(E,v,c),b==="le"&&this._initArray(this.toArray(),v,b)))},i.prototype._initNumber=function(E,v,b){E<0&&(this.negative=1,E=-E),E<67108864?(this.words=[E&67108863],this.length=1):E<4503599627370496?(this.words=[E&67108863,E/67108864&67108863],this.length=2):(r(E<9007199254740992),this.words=[E&67108863,E/67108864&67108863,1],this.length=3),b==="le"&&this._initArray(this.toArray(),v,b)},i.prototype._initArray=function(E,v,b){if(r(typeof E.length=="number"),E.length<=0)return this.words=[0],this.length=1,this;this.length=Math.ceil(E.length/3),this.words=new Array(this.length);for(var c=0;c<this.length;c++)this.words[c]=0;var g,w,R=0;if(b==="be")for(c=E.length-1,g=0;c>=0;c-=3)w=E[c]|E[c-1]<<8|E[c-2]<<16,this.words[g]|=w<<R&67108863,this.words[g+1]=w>>>26-R&67108863,R+=24,R>=26&&(R-=26,g++);else if(b==="le")for(c=0,g=0;c<E.length;c+=3)w=E[c]|E[c+1]<<8|E[c+2]<<16,this.words[g]|=w<<R&67108863,this.words[g+1]=w>>>26-R&67108863,R+=24,R>=26&&(R-=26,g++);return this.strip()};function o(H,E){var v=H.charCodeAt(E);return v>=65&&v<=70?v-55:v>=97&&v<=102?v-87:v-48&15}function a(H,E,v){var b=o(H,v);return v-1>=E&&(b|=o(H,v-1)<<4),b}i.prototype._parseHex=function(E,v,b){this.length=Math.ceil((E.length-v)/6),this.words=new Array(this.length);for(var c=0;c<this.length;c++)this.words[c]=0;var g=0,w=0,R;if(b==="be")for(c=E.length-1;c>=v;c-=2)R=a(E,v,c)<<g,this.words[w]|=R&67108863,g>=18?(g-=18,w+=1,this.words[w]|=R>>>26):g+=8;else{var C=E.length-v;for(c=C%2===0?v+1:v;c<E.length;c+=2)R=a(E,v,c)<<g,this.words[w]|=R&67108863,g>=18?(g-=18,w+=1,this.words[w]|=R>>>26):g+=8}this.strip()};function A(H,E,v,b){for(var c=0,g=Math.min(H.length,v),w=E;w<g;w++){var R=H.charCodeAt(w)-48;c*=b,R>=49?c+=R-49+10:R>=17?c+=R-17+10:c+=R}return c}i.prototype._parseBase=function(E,v,b){this.words=[0],this.length=1;for(var c=0,g=1;g<=67108863;g*=v)c++;c--,g=g/v|0;for(var w=E.length-b,R=w%c,C=Math.min(w,w-R)+b,h=0,D=b;D<C;D+=c)h=A(E,D,D+c,v),this.imuln(g),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h);if(R!==0){var M=1;for(h=A(E,D,E.length,v),D=0;D<R;D++)M*=v;this.imuln(M),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h)}this.strip()},i.prototype.copy=function(E){E.words=new Array(this.length);for(var v=0;v<this.length;v++)E.words[v]=this.words[v];E.length=this.length,E.negative=this.negative,E.red=this.red},i.prototype.clone=function(){var E=new i(null);return this.copy(E),E},i.prototype._expand=function(E){for(;this.length<E;)this.words[this.length++]=0;return this},i.prototype.strip=function(){for(;this.length>1&&this.words[this.length-1]===0;)this.length--;return this._normSign()},i.prototype._normSign=function(){return this.length===1&&this.words[0]===0&&(this.negative=0),this},i.prototype.inspect=function(){return(this.red?"<BN-R: ":"<BN: ")+this.toString(16)+">"};var f=["","0","00","000","0000","00000","000000","0000000","00000000","000000000","0000000000","00000000000","000000000000","0000000000000","00000000000000","000000000000000","0000000000000000","00000000000000000","000000000000000000","0000000000000000000","00000000000000000000","000000000000000000000","0000000000000000000000","00000000000000000000000","000000000000000000000000","0000000000000000000000000"],l=[0,0,25,16,12,11,10,9,8,8,7,7,7,7,6,6,6,6,6,6,6,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5],p=[0,0,33554432,43046721,16777216,48828125,60466176,40353607,16777216,43046721,1e7,19487171,35831808,62748517,7529536,11390625,16777216,24137569,34012224,47045881,64e6,4084101,5153632,6436343,7962624,9765625,11881376,14348907,17210368,20511149,243e5,28629151,33554432,39135393,45435424,52521875,60466176];i.prototype.toString=function(E,v){E=E||10,v=v|0||1;var b;if(E===16||E==="hex"){b="";for(var c=0,g=0,w=0;w<this.length;w++){var R=this.words[w],C=((R<<c|g)&16777215).toString(16);g=R>>>24-c&16777215,c+=2,c>=26&&(c-=26,w--),g!==0||w!==this.length-1?b=f[6-C.length]+C+b:b=C+b}for(g!==0&&(b=g.toString(16)+b);b.length%v!==0;)b="0"+b;return this.negative!==0&&(b="-"+b),b}if(E===(E|0)&&E>=2&&E<=36){var h=l[E],D=p[E];b="";var M=this.clone();for(M.negative=0;!M.isZero();){var B=M.modn(D).toString(E);M=M.idivn(D),M.isZero()?b=B+b:b=f[h-B.length]+B+b}for(this.isZero()&&(b="0"+b);b.length%v!==0;)b="0"+b;return this.negative!==0&&(b="-"+b),b}r(!1,"Base should be between 2 and 36")},i.prototype.toNumber=function(){var E=this.words[0];return this.length===2?E+=this.words[1]*67108864:this.length===3&&this.words[2]===1?E+=4503599627370496+this.words[1]*67108864:this.length>2&&r(!1,"Number can only safely store up to 53 bits"),this.negative!==0?-E:E},i.prototype.toJSON=function(){return this.toString(16)},i.prototype.toBuffer=function(E,v){return r(typeof s<"u"),this.toArrayLike(s,E,v)},i.prototype.toArray=function(E,v){return this.toArrayLike(Array,E,v)},i.prototype.toArrayLike=function(E,v,b){var c=this.byteLength(),g=b||Math.max(1,c);r(c<=g,"byte array longer than desired length"),r(g>0,"Requested array length <= 0"),this.strip();var w=v==="le",R=new E(g),C,h,D=this.clone();if(w){for(h=0;!D.isZero();h++)C=D.andln(255),D.iushrn(8),R[h]=C;for(;h<g;h++)R[h]=0}else{for(h=0;h<g-c;h++)R[h]=0;for(h=0;!D.isZero();h++)C=D.andln(255),D.iushrn(8),R[g-h-1]=C}return R},Math.clz32?i.prototype._countBits=function(E){return 32-Math.clz32(E)}:i.prototype._countBits=function(E){var v=E,b=0;return v>=4096&&(b+=13,v>>>=13),v>=64&&(b+=7,v>>>=7),v>=8&&(b+=4,v>>>=4),v>=2&&(b+=2,v>>>=2),b+v},i.prototype._zeroBits=function(E){if(E===0)return 26;var v=E,b=0;return(v&8191)===0&&(b+=13,v>>>=13),(v&127)===0&&(b+=7,v>>>=7),(v&15)===0&&(b+=4,v>>>=4),(v&3)===0&&(b+=2,v>>>=2),(v&1)===0&&b++,b},i.prototype.bitLength=function(){var E=this.words[this.length-1],v=this._countBits(E);return(this.length-1)*26+v};function I(H){for(var E=new Array(H.bitLength()),v=0;v<E.length;v++){var b=v/26|0,c=v%26;E[v]=(H.words[b]&1<<c)>>>c}return E}i.prototype.zeroBits=function(){if(this.isZero())return 0;for(var E=0,v=0;v<this.length;v++){var b=this._zeroBits(this.words[v]);if(E+=b,b!==26)break}return E},i.prototype.byteLength=function(){return Math.ceil(this.bitLength()/8)},i.prototype.toTwos=function(E){return this.negative!==0?this.abs().inotn(E).iaddn(1):this.clone()},i.prototype.fromTwos=function(E){return this.testn(E-1)?this.notn(E).iaddn(1).ineg():this.clone()},i.prototype.isNeg=function(){return this.negative!==0},i.prototype.neg=function(){return this.clone().ineg()},i.prototype.ineg=function(){return this.isZero()||(this.negative^=1),this},i.prototype.iuor=function(E){for(;this.length<E.length;)this.words[this.length++]=0;for(var v=0;v<E.length;v++)this.words[v]=this.words[v]|E.words[v];return this.strip()},i.prototype.ior=function(E){return r((this.negative|E.negative)===0),this.iuor(E)},i.prototype.or=function(E){return this.length>E.length?this.clone().ior(E):E.clone().ior(this)},i.prototype.uor=function(E){return this.length>E.length?this.clone().iuor(E):E.clone().iuor(this)},i.prototype.iuand=function(E){var v;this.length>E.length?v=E:v=this;for(var b=0;b<v.length;b++)this.words[b]=this.words[b]&E.words[b];return this.length=v.length,this.strip()},i.prototype.iand=function(E){return r((this.negative|E.negative)===0),this.iuand(E)},i.prototype.and=function(E){return this.length>E.length?this.clone().iand(E):E.clone().iand(this)},i.prototype.uand=function(E){return this.length>E.length?this.clone().iuand(E):E.clone().iuand(this)},i.prototype.iuxor=function(E){var v,b;this.length>E.length?(v=this,b=E):(v=E,b=this);for(var c=0;c<b.length;c++)this.words[c]=v.words[c]^b.words[c];if(this!==v)for(;c<v.length;c++)this.words[c]=v.words[c];return this.length=v.length,this.strip()},i.prototype.ixor=function(E){return r((this.negative|E.negative)===0),this.iuxor(E)},i.prototype.xor=function(E){return this.length>E.length?this.clone().ixor(E):E.clone().ixor(this)},i.prototype.uxor=function(E){return this.length>E.length?this.clone().iuxor(E):E.clone().iuxor(this)},i.prototype.inotn=function(E){r(typeof E=="number"&&E>=0);var v=Math.ceil(E/26)|0,b=E%26;this._expand(v),b>0&&v--;for(var c=0;c<v;c++)this.words[c]=~this.words[c]&67108863;return b>0&&(this.words[c]=~this.words[c]&67108863>>26-b),this.strip()},i.prototype.notn=function(E){return this.clone().inotn(E)},i.prototype.setn=function(E,v){r(typeof E=="number"&&E>=0);var b=E/26|0,c=E%26;return this._expand(b+1),v?this.words[b]=this.words[b]|1<<c:this.words[b]=this.words[b]&~(1<<c),this.strip()},i.prototype.iadd=function(E){var v;if(this.negative!==0&&E.negative===0)return this.negative=0,v=this.isub(E),this.negative^=1,this._normSign();if(this.negative===0&&E.negative!==0)return E.negative=0,v=this.isub(E),E.negative=1,v._normSign();var b,c;this.length>E.length?(b=this,c=E):(b=E,c=this);for(var g=0,w=0;w<c.length;w++)v=(b.words[w]|0)+(c.words[w]|0)+g,this.words[w]=v&67108863,g=v>>>26;for(;g!==0&&w<b.length;w++)v=(b.words[w]|0)+g,this.words[w]=v&67108863,g=v>>>26;if(this.length=b.length,g!==0)this.words[this.length]=g,this.length++;else if(b!==this)for(;w<b.length;w++)this.words[w]=b.words[w];return this},i.prototype.add=function(E){var v;return E.negative!==0&&this.negative===0?(E.negative=0,v=this.sub(E),E.negative^=1,v):E.negative===0&&this.negative!==0?(this.negative=0,v=E.sub(this),this.negative=1,v):this.length>E.length?this.clone().iadd(E):E.clone().iadd(this)},i.prototype.isub=function(E){if(E.negative!==0){E.negative=0;var v=this.iadd(E);return E.negative=1,v._normSign()}else if(this.negative!==0)return this.negative=0,this.iadd(E),this.negative=1,this._normSign();var b=this.cmp(E);if(b===0)return this.negative=0,this.length=1,this.words[0]=0,this;var c,g;b>0?(c=this,g=E):(c=E,g=this);for(var w=0,R=0;R<g.length;R++)v=(c.words[R]|0)-(g.words[R]|0)+w,w=v>>26,this.words[R]=v&67108863;for(;w!==0&&R<c.length;R++)v=(c.words[R]|0)+w,w=v>>26,this.words[R]=v&67108863;if(w===0&&R<c.length&&c!==this)for(;R<c.length;R++)this.words[R]=c.words[R];return this.length=Math.max(this.length,R),c!==this&&(this.negative=1),this.strip()},i.prototype.sub=function(E){return this.clone().isub(E)};function S(H,E,v){v.negative=E.negative^H.negative;var b=H.length+E.length|0;v.length=b,b=b-1|0;var c=H.words[0]|0,g=E.words[0]|0,w=c*g,R=w&67108863,C=w/67108864|0;v.words[0]=R;for(var h=1;h<b;h++){for(var D=C>>>26,M=C&67108863,B=Math.min(h,E.length-1),k=Math.max(0,h-H.length+1);k<=B;k++){var ne=h-k|0;c=H.words[ne]|0,g=E.words[k]|0,w=c*g+M,D+=w/67108864|0,M=w&67108863}v.words[h]=M|0,C=D|0}return C!==0?v.words[h]=C|0:v.length--,v.strip()}var _=function(E,v,b){var c=E.words,g=v.words,w=b.words,R=0,C,h,D,M=c[0]|0,B=M&8191,k=M>>>13,ne=c[1]|0,Ae=ne&8191,ue=ne>>>13,pe=c[2]|0,he=pe&8191,de=pe>>>13,Qt=c[3]|0,Ie=Qt&8191,be=Qt>>>13,yr=c[4]|0,Qe=yr&8191,_e=yr>>>13,Ds=c[5]|0,Ge=Ds&8191,Ue=Ds>>>13,Ts=c[6]|0,Te=Ts&8191,De=Ts>>>13,en=c[7]|0,ve=en&8191,He=en>>>13,ai=c[8]|0,Ne=ai&8191,Ve=ai>>>13,F=c[9]|0,m=F&8191,Q=F>>>13,L=g[0]|0,W=L&8191,z=L>>>13,ae=g[1]|0,le=ae&8191,ye=ae>>>13,bt=g[2]|0,Ee=bt&8191,ge=bt>>>13,ka=g[3]|0,Je=ka&8191,tt=ka>>>13,Mo=g[4]|0,Ze=Mo&8191,rt=Mo>>>13,HA=g[5]|0,nt=HA&8191,it=HA>>>13,Ua=g[6]|0,ze=Ua&8191,Ke=Ua>>>13,qA=g[7]|0,xe=qA&8191,$e=qA>>>13,GA=g[8]|0,st=GA&8191,Le=GA>>>13,hn=g[9]|0,Pe=hn&8191,Xe=hn>>>13;b.negative=E.negative^v.negative,b.length=19,C=Math.imul(B,W),h=Math.imul(B,z),h=h+Math.imul(k,W)|0,D=Math.imul(k,z);var Qn=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Qn>>>26)|0,Qn&=67108863,C=Math.imul(Ae,W),h=Math.imul(Ae,z),h=h+Math.imul(ue,W)|0,D=Math.imul(ue,z),C=C+Math.imul(B,le)|0,h=h+Math.imul(B,ye)|0,h=h+Math.imul(k,le)|0,D=D+Math.imul(k,ye)|0;var xt=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(xt>>>26)|0,xt&=67108863,C=Math.imul(he,W),h=Math.imul(he,z),h=h+Math.imul(de,W)|0,D=Math.imul(de,z),C=C+Math.imul(Ae,le)|0,h=h+Math.imul(Ae,ye)|0,h=h+Math.imul(ue,le)|0,D=D+Math.imul(ue,ye)|0,C=C+Math.imul(B,Ee)|0,h=h+Math.imul(B,ge)|0,h=h+Math.imul(k,Ee)|0,D=D+Math.imul(k,ge)|0;var Ft=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Ft>>>26)|0,Ft&=67108863,C=Math.imul(Ie,W),h=Math.imul(Ie,z),h=h+Math.imul(be,W)|0,D=Math.imul(be,z),C=C+Math.imul(he,le)|0,h=h+Math.imul(he,ye)|0,h=h+Math.imul(de,le)|0,D=D+Math.imul(de,ye)|0,C=C+Math.imul(Ae,Ee)|0,h=h+Math.imul(Ae,ge)|0,h=h+Math.imul(ue,Ee)|0,D=D+Math.imul(ue,ge)|0,C=C+Math.imul(B,Je)|0,h=h+Math.imul(B,tt)|0,h=h+Math.imul(k,Je)|0,D=D+Math.imul(k,tt)|0;var Ns=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Ns>>>26)|0,Ns&=67108863,C=Math.imul(Qe,W),h=Math.imul(Qe,z),h=h+Math.imul(_e,W)|0,D=Math.imul(_e,z),C=C+Math.imul(Ie,le)|0,h=h+Math.imul(Ie,ye)|0,h=h+Math.imul(be,le)|0,D=D+Math.imul(be,ye)|0,C=C+Math.imul(he,Ee)|0,h=h+Math.imul(he,ge)|0,h=h+Math.imul(de,Ee)|0,D=D+Math.imul(de,ge)|0,C=C+Math.imul(Ae,Je)|0,h=h+Math.imul(Ae,tt)|0,h=h+Math.imul(ue,Je)|0,D=D+Math.imul(ue,tt)|0,C=C+Math.imul(B,Ze)|0,h=h+Math.imul(B,rt)|0,h=h+Math.imul(k,Ze)|0,D=D+Math.imul(k,rt)|0;var Ai=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Ai>>>26)|0,Ai&=67108863,C=Math.imul(Ge,W),h=Math.imul(Ge,z),h=h+Math.imul(Ue,W)|0,D=Math.imul(Ue,z),C=C+Math.imul(Qe,le)|0,h=h+Math.imul(Qe,ye)|0,h=h+Math.imul(_e,le)|0,D=D+Math.imul(_e,ye)|0,C=C+Math.imul(Ie,Ee)|0,h=h+Math.imul(Ie,ge)|0,h=h+Math.imul(be,Ee)|0,D=D+Math.imul(be,ge)|0,C=C+Math.imul(he,Je)|0,h=h+Math.imul(he,tt)|0,h=h+Math.imul(de,Je)|0,D=D+Math.imul(de,tt)|0,C=C+Math.imul(Ae,Ze)|0,h=h+Math.imul(Ae,rt)|0,h=h+Math.imul(ue,Ze)|0,D=D+Math.imul(ue,rt)|0,C=C+Math.imul(B,nt)|0,h=h+Math.imul(B,it)|0,h=h+Math.imul(k,nt)|0,D=D+Math.imul(k,it)|0;var Ms=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Ms>>>26)|0,Ms&=67108863,C=Math.imul(Te,W),h=Math.imul(Te,z),h=h+Math.imul(De,W)|0,D=Math.imul(De,z),C=C+Math.imul(Ge,le)|0,h=h+Math.imul(Ge,ye)|0,h=h+Math.imul(Ue,le)|0,D=D+Math.imul(Ue,ye)|0,C=C+Math.imul(Qe,Ee)|0,h=h+Math.imul(Qe,ge)|0,h=h+Math.imul(_e,Ee)|0,D=D+Math.imul(_e,ge)|0,C=C+Math.imul(Ie,Je)|0,h=h+Math.imul(Ie,tt)|0,h=h+Math.imul(be,Je)|0,D=D+Math.imul(be,tt)|0,C=C+Math.imul(he,Ze)|0,h=h+Math.imul(he,rt)|0,h=h+Math.imul(de,Ze)|0,D=D+Math.imul(de,rt)|0,C=C+Math.imul(Ae,nt)|0,h=h+Math.imul(Ae,it)|0,h=h+Math.imul(ue,nt)|0,D=D+Math.imul(ue,it)|0,C=C+Math.imul(B,ze)|0,h=h+Math.imul(B,Ke)|0,h=h+Math.imul(k,ze)|0,D=D+Math.imul(k,Ke)|0;var Fs=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Fs>>>26)|0,Fs&=67108863,C=Math.imul(ve,W),h=Math.imul(ve,z),h=h+Math.imul(He,W)|0,D=Math.imul(He,z),C=C+Math.imul(Te,le)|0,h=h+Math.imul(Te,ye)|0,h=h+Math.imul(De,le)|0,D=D+Math.imul(De,ye)|0,C=C+Math.imul(Ge,Ee)|0,h=h+Math.imul(Ge,ge)|0,h=h+Math.imul(Ue,Ee)|0,D=D+Math.imul(Ue,ge)|0,C=C+Math.imul(Qe,Je)|0,h=h+Math.imul(Qe,tt)|0,h=h+Math.imul(_e,Je)|0,D=D+Math.imul(_e,tt)|0,C=C+Math.imul(Ie,Ze)|0,h=h+Math.imul(Ie,rt)|0,h=h+Math.imul(be,Ze)|0,D=D+Math.imul(be,rt)|0,C=C+Math.imul(he,nt)|0,h=h+Math.imul(he,it)|0,h=h+Math.imul(de,nt)|0,D=D+Math.imul(de,it)|0,C=C+Math.imul(Ae,ze)|0,h=h+Math.imul(Ae,Ke)|0,h=h+Math.imul(ue,ze)|0,D=D+Math.imul(ue,Ke)|0,C=C+Math.imul(B,xe)|0,h=h+Math.imul(B,$e)|0,h=h+Math.imul(k,xe)|0,D=D+Math.imul(k,$e)|0;var ks=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(ks>>>26)|0,ks&=67108863,C=Math.imul(Ne,W),h=Math.imul(Ne,z),h=h+Math.imul(Ve,W)|0,D=Math.imul(Ve,z),C=C+Math.imul(ve,le)|0,h=h+Math.imul(ve,ye)|0,h=h+Math.imul(He,le)|0,D=D+Math.imul(He,ye)|0,C=C+Math.imul(Te,Ee)|0,h=h+Math.imul(Te,ge)|0,h=h+Math.imul(De,Ee)|0,D=D+Math.imul(De,ge)|0,C=C+Math.imul(Ge,Je)|0,h=h+Math.imul(Ge,tt)|0,h=h+Math.imul(Ue,Je)|0,D=D+Math.imul(Ue,tt)|0,C=C+Math.imul(Qe,Ze)|0,h=h+Math.imul(Qe,rt)|0,h=h+Math.imul(_e,Ze)|0,D=D+Math.imul(_e,rt)|0,C=C+Math.imul(Ie,nt)|0,h=h+Math.imul(Ie,it)|0,h=h+Math.imul(be,nt)|0,D=D+Math.imul(be,it)|0,C=C+Math.imul(he,ze)|0,h=h+Math.imul(he,Ke)|0,h=h+Math.imul(de,ze)|0,D=D+Math.imul(de,Ke)|0,C=C+Math.imul(Ae,xe)|0,h=h+Math.imul(Ae,$e)|0,h=h+Math.imul(ue,xe)|0,D=D+Math.imul(ue,$e)|0,C=C+Math.imul(B,st)|0,h=h+Math.imul(B,Le)|0,h=h+Math.imul(k,st)|0,D=D+Math.imul(k,Le)|0;var Us=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Us>>>26)|0,Us&=67108863,C=Math.imul(m,W),h=Math.imul(m,z),h=h+Math.imul(Q,W)|0,D=Math.imul(Q,z),C=C+Math.imul(Ne,le)|0,h=h+Math.imul(Ne,ye)|0,h=h+Math.imul(Ve,le)|0,D=D+Math.imul(Ve,ye)|0,C=C+Math.imul(ve,Ee)|0,h=h+Math.imul(ve,ge)|0,h=h+Math.imul(He,Ee)|0,D=D+Math.imul(He,ge)|0,C=C+Math.imul(Te,Je)|0,h=h+Math.imul(Te,tt)|0,h=h+Math.imul(De,Je)|0,D=D+Math.imul(De,tt)|0,C=C+Math.imul(Ge,Ze)|0,h=h+Math.imul(Ge,rt)|0,h=h+Math.imul(Ue,Ze)|0,D=D+Math.imul(Ue,rt)|0,C=C+Math.imul(Qe,nt)|0,h=h+Math.imul(Qe,it)|0,h=h+Math.imul(_e,nt)|0,D=D+Math.imul(_e,it)|0,C=C+Math.imul(Ie,ze)|0,h=h+Math.imul(Ie,Ke)|0,h=h+Math.imul(be,ze)|0,D=D+Math.imul(be,Ke)|0,C=C+Math.imul(he,xe)|0,h=h+Math.imul(he,$e)|0,h=h+Math.imul(de,xe)|0,D=D+Math.imul(de,$e)|0,C=C+Math.imul(Ae,st)|0,h=h+Math.imul(Ae,Le)|0,h=h+Math.imul(ue,st)|0,D=D+Math.imul(ue,Le)|0,C=C+Math.imul(B,Pe)|0,h=h+Math.imul(B,Xe)|0,h=h+Math.imul(k,Pe)|0,D=D+Math.imul(k,Xe)|0;var xs=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(xs>>>26)|0,xs&=67108863,C=Math.imul(m,le),h=Math.imul(m,ye),h=h+Math.imul(Q,le)|0,D=Math.imul(Q,ye),C=C+Math.imul(Ne,Ee)|0,h=h+Math.imul(Ne,ge)|0,h=h+Math.imul(Ve,Ee)|0,D=D+Math.imul(Ve,ge)|0,C=C+Math.imul(ve,Je)|0,h=h+Math.imul(ve,tt)|0,h=h+Math.imul(He,Je)|0,D=D+Math.imul(He,tt)|0,C=C+Math.imul(Te,Ze)|0,h=h+Math.imul(Te,rt)|0,h=h+Math.imul(De,Ze)|0,D=D+Math.imul(De,rt)|0,C=C+Math.imul(Ge,nt)|0,h=h+Math.imul(Ge,it)|0,h=h+Math.imul(Ue,nt)|0,D=D+Math.imul(Ue,it)|0,C=C+Math.imul(Qe,ze)|0,h=h+Math.imul(Qe,Ke)|0,h=h+Math.imul(_e,ze)|0,D=D+Math.imul(_e,Ke)|0,C=C+Math.imul(Ie,xe)|0,h=h+Math.imul(Ie,$e)|0,h=h+Math.imul(be,xe)|0,D=D+Math.imul(be,$e)|0,C=C+Math.imul(he,st)|0,h=h+Math.imul(he,Le)|0,h=h+Math.imul(de,st)|0,D=D+Math.imul(de,Le)|0,C=C+Math.imul(Ae,Pe)|0,h=h+Math.imul(Ae,Xe)|0,h=h+Math.imul(ue,Pe)|0,D=D+Math.imul(ue,Xe)|0;var Ji=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Ji>>>26)|0,Ji&=67108863,C=Math.imul(m,Ee),h=Math.imul(m,ge),h=h+Math.imul(Q,Ee)|0,D=Math.imul(Q,ge),C=C+Math.imul(Ne,Je)|0,h=h+Math.imul(Ne,tt)|0,h=h+Math.imul(Ve,Je)|0,D=D+Math.imul(Ve,tt)|0,C=C+Math.imul(ve,Ze)|0,h=h+Math.imul(ve,rt)|0,h=h+Math.imul(He,Ze)|0,D=D+Math.imul(He,rt)|0,C=C+Math.imul(Te,nt)|0,h=h+Math.imul(Te,it)|0,h=h+Math.imul(De,nt)|0,D=D+Math.imul(De,it)|0,C=C+Math.imul(Ge,ze)|0,h=h+Math.imul(Ge,Ke)|0,h=h+Math.imul(Ue,ze)|0,D=D+Math.imul(Ue,Ke)|0,C=C+Math.imul(Qe,xe)|0,h=h+Math.imul(Qe,$e)|0,h=h+Math.imul(_e,xe)|0,D=D+Math.imul(_e,$e)|0,C=C+Math.imul(Ie,st)|0,h=h+Math.imul(Ie,Le)|0,h=h+Math.imul(be,st)|0,D=D+Math.imul(be,Le)|0,C=C+Math.imul(he,Pe)|0,h=h+Math.imul(he,Xe)|0,h=h+Math.imul(de,Pe)|0,D=D+Math.imul(de,Xe)|0;var ji=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(ji>>>26)|0,ji&=67108863,C=Math.imul(m,Je),h=Math.imul(m,tt),h=h+Math.imul(Q,Je)|0,D=Math.imul(Q,tt),C=C+Math.imul(Ne,Ze)|0,h=h+Math.imul(Ne,rt)|0,h=h+Math.imul(Ve,Ze)|0,D=D+Math.imul(Ve,rt)|0,C=C+Math.imul(ve,nt)|0,h=h+Math.imul(ve,it)|0,h=h+Math.imul(He,nt)|0,D=D+Math.imul(He,it)|0,C=C+Math.imul(Te,ze)|0,h=h+Math.imul(Te,Ke)|0,h=h+Math.imul(De,ze)|0,D=D+Math.imul(De,Ke)|0,C=C+Math.imul(Ge,xe)|0,h=h+Math.imul(Ge,$e)|0,h=h+Math.imul(Ue,xe)|0,D=D+Math.imul(Ue,$e)|0,C=C+Math.imul(Qe,st)|0,h=h+Math.imul(Qe,Le)|0,h=h+Math.imul(_e,st)|0,D=D+Math.imul(_e,Le)|0,C=C+Math.imul(Ie,Pe)|0,h=h+Math.imul(Ie,Xe)|0,h=h+Math.imul(be,Pe)|0,D=D+Math.imul(be,Xe)|0;var Fo=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Fo>>>26)|0,Fo&=67108863,C=Math.imul(m,Ze),h=Math.imul(m,rt),h=h+Math.imul(Q,Ze)|0,D=Math.imul(Q,rt),C=C+Math.imul(Ne,nt)|0,h=h+Math.imul(Ne,it)|0,h=h+Math.imul(Ve,nt)|0,D=D+Math.imul(Ve,it)|0,C=C+Math.imul(ve,ze)|0,h=h+Math.imul(ve,Ke)|0,h=h+Math.imul(He,ze)|0,D=D+Math.imul(He,Ke)|0,C=C+Math.imul(Te,xe)|0,h=h+Math.imul(Te,$e)|0,h=h+Math.imul(De,xe)|0,D=D+Math.imul(De,$e)|0,C=C+Math.imul(Ge,st)|0,h=h+Math.imul(Ge,Le)|0,h=h+Math.imul(Ue,st)|0,D=D+Math.imul(Ue,Le)|0,C=C+Math.imul(Qe,Pe)|0,h=h+Math.imul(Qe,Xe)|0,h=h+Math.imul(_e,Pe)|0,D=D+Math.imul(_e,Xe)|0;var ko=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(ko>>>26)|0,ko&=67108863,C=Math.imul(m,nt),h=Math.imul(m,it),h=h+Math.imul(Q,nt)|0,D=Math.imul(Q,it),C=C+Math.imul(Ne,ze)|0,h=h+Math.imul(Ne,Ke)|0,h=h+Math.imul(Ve,ze)|0,D=D+Math.imul(Ve,Ke)|0,C=C+Math.imul(ve,xe)|0,h=h+Math.imul(ve,$e)|0,h=h+Math.imul(He,xe)|0,D=D+Math.imul(He,$e)|0,C=C+Math.imul(Te,st)|0,h=h+Math.imul(Te,Le)|0,h=h+Math.imul(De,st)|0,D=D+Math.imul(De,Le)|0,C=C+Math.imul(Ge,Pe)|0,h=h+Math.imul(Ge,Xe)|0,h=h+Math.imul(Ue,Pe)|0,D=D+Math.imul(Ue,Xe)|0;var Uo=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Uo>>>26)|0,Uo&=67108863,C=Math.imul(m,ze),h=Math.imul(m,Ke),h=h+Math.imul(Q,ze)|0,D=Math.imul(Q,Ke),C=C+Math.imul(Ne,xe)|0,h=h+Math.imul(Ne,$e)|0,h=h+Math.imul(Ve,xe)|0,D=D+Math.imul(Ve,$e)|0,C=C+Math.imul(ve,st)|0,h=h+Math.imul(ve,Le)|0,h=h+Math.imul(He,st)|0,D=D+Math.imul(He,Le)|0,C=C+Math.imul(Te,Pe)|0,h=h+Math.imul(Te,Xe)|0,h=h+Math.imul(De,Pe)|0,D=D+Math.imul(De,Xe)|0;var xo=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(xo>>>26)|0,xo&=67108863,C=Math.imul(m,xe),h=Math.imul(m,$e),h=h+Math.imul(Q,xe)|0,D=Math.imul(Q,$e),C=C+Math.imul(Ne,st)|0,h=h+Math.imul(Ne,Le)|0,h=h+Math.imul(Ve,st)|0,D=D+Math.imul(Ve,Le)|0,C=C+Math.imul(ve,Pe)|0,h=h+Math.imul(ve,Xe)|0,h=h+Math.imul(He,Pe)|0,D=D+Math.imul(He,Xe)|0;var Ls=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Ls>>>26)|0,Ls&=67108863,C=Math.imul(m,st),h=Math.imul(m,Le),h=h+Math.imul(Q,st)|0,D=Math.imul(Q,Le),C=C+Math.imul(Ne,Pe)|0,h=h+Math.imul(Ne,Xe)|0,h=h+Math.imul(Ve,Pe)|0,D=D+Math.imul(Ve,Xe)|0;var wn=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(wn>>>26)|0,wn&=67108863,C=Math.imul(m,Pe),h=Math.imul(m,Xe),h=h+Math.imul(Q,Pe)|0,D=Math.imul(Q,Xe);var Lo=(R+C|0)+((h&8191)<<13)|0;return R=(D+(h>>>13)|0)+(Lo>>>26)|0,Lo&=67108863,w[0]=Qn,w[1]=xt,w[2]=Ft,w[3]=Ns,w[4]=Ai,w[5]=Ms,w[6]=Fs,w[7]=ks,w[8]=Us,w[9]=xs,w[10]=Ji,w[11]=ji,w[12]=Fo,w[13]=ko,w[14]=Uo,w[15]=xo,w[16]=Ls,w[17]=wn,w[18]=Lo,R!==0&&(w[19]=R,b.length++),b};Math.imul||(_=S);function N(H,E,v){v.negative=E.negative^H.negative,v.length=H.length+E.length;for(var b=0,c=0,g=0;g<v.length-1;g++){var w=c;c=0;for(var R=b&67108863,C=Math.min(g,E.length-1),h=Math.max(0,g-H.length+1);h<=C;h++){var D=g-h,M=H.words[D]|0,B=E.words[h]|0,k=M*B,ne=k&67108863;w=w+(k/67108864|0)|0,ne=ne+R|0,R=ne&67108863,w=w+(ne>>>26)|0,c+=w>>>26,w&=67108863}v.words[g]=R,b=w,w=c}return b!==0?v.words[g]=b:v.length--,v.strip()}function O(H,E,v){var b=new x;return b.mulp(H,E,v)}i.prototype.mulTo=function(E,v){var b,c=this.length+E.length;return this.length===10&&E.length===10?b=_(this,E,v):c<63?b=S(this,E,v):c<1024?b=N(this,E,v):b=O(this,E,v),b};function x(H,E){this.x=H,this.y=E}x.prototype.makeRBT=function(E){for(var v=new Array(E),b=i.prototype._countBits(E)-1,c=0;c<E;c++)v[c]=this.revBin(c,b,E);return v},x.prototype.revBin=function(E,v,b){if(E===0||E===b-1)return E;for(var c=0,g=0;g<v;g++)c|=(E&1)<<v-g-1,E>>=1;return c},x.prototype.permute=function(E,v,b,c,g,w){for(var R=0;R<w;R++)c[R]=v[E[R]],g[R]=b[E[R]]},x.prototype.transform=function(E,v,b,c,g,w){this.permute(w,E,v,b,c,g);for(var R=1;R<g;R<<=1)for(var C=R<<1,h=Math.cos(2*Math.PI/C),D=Math.sin(2*Math.PI/C),M=0;M<g;M+=C)for(var B=h,k=D,ne=0;ne<R;ne++){var Ae=b[M+ne],ue=c[M+ne],pe=b[M+ne+R],he=c[M+ne+R],de=B*pe-k*he;he=B*he+k*pe,pe=de,b[M+ne]=Ae+pe,c[M+ne]=ue+he,b[M+ne+R]=Ae-pe,c[M+ne+R]=ue-he,ne!==C&&(de=h*B-D*k,k=h*k+D*B,B=de)}},x.prototype.guessLen13b=function(E,v){var b=Math.max(v,E)|1,c=b&1,g=0;for(b=b/2|0;b;b=b>>>1)g++;return 1<<g+1+c},x.prototype.conjugate=function(E,v,b){if(!(b<=1))for(var c=0;c<b/2;c++){var g=E[c];E[c]=E[b-c-1],E[b-c-1]=g,g=v[c],v[c]=-v[b-c-1],v[b-c-1]=-g}},x.prototype.normalize13b=function(E,v){for(var b=0,c=0;c<v/2;c++){var g=Math.round(E[2*c+1]/v)*8192+Math.round(E[2*c]/v)+b;E[c]=g&67108863,g<67108864?b=0:b=g/67108864|0}return E},x.prototype.convert13b=function(E,v,b,c){for(var g=0,w=0;w<v;w++)g=g+(E[w]|0),b[2*w]=g&8191,g=g>>>13,b[2*w+1]=g&8191,g=g>>>13;for(w=2*v;w<c;++w)b[w]=0;r(g===0),r((g&-8192)===0)},x.prototype.stub=function(E){for(var v=new Array(E),b=0;b<E;b++)v[b]=0;return v},x.prototype.mulp=function(E,v,b){var c=2*this.guessLen13b(E.length,v.length),g=this.makeRBT(c),w=this.stub(c),R=new Array(c),C=new Array(c),h=new Array(c),D=new Array(c),M=new Array(c),B=new Array(c),k=b.words;k.length=c,this.convert13b(E.words,E.length,R,c),this.convert13b(v.words,v.length,D,c),this.transform(R,w,C,h,c,g),this.transform(D,w,M,B,c,g);for(var ne=0;ne<c;ne++){var Ae=C[ne]*M[ne]-h[ne]*B[ne];h[ne]=C[ne]*B[ne]+h[ne]*M[ne],C[ne]=Ae}return this.conjugate(C,h,c),this.transform(C,h,k,w,c,g),this.conjugate(k,w,c),this.normalize13b(k,c),b.negative=E.negative^v.negative,b.length=E.length+v.length,b.strip()},i.prototype.mul=function(E){var v=new i(null);return v.words=new Array(this.length+E.length),this.mulTo(E,v)},i.prototype.mulf=function(E){var v=new i(null);return v.words=new Array(this.length+E.length),O(this,E,v)},i.prototype.imul=function(E){return this.clone().mulTo(E,this)},i.prototype.imuln=function(E){r(typeof E=="number"),r(E<67108864);for(var v=0,b=0;b<this.length;b++){var c=(this.words[b]|0)*E,g=(c&67108863)+(v&67108863);v>>=26,v+=c/67108864|0,v+=g>>>26,this.words[b]=g&67108863}return v!==0&&(this.words[b]=v,this.length++),this.length=E===0?1:this.length,this},i.prototype.muln=function(E){return this.clone().imuln(E)},i.prototype.sqr=function(){return this.mul(this)},i.prototype.isqr=function(){return this.imul(this.clone())},i.prototype.pow=function(E){var v=I(E);if(v.length===0)return new i(1);for(var b=this,c=0;c<v.length&&v[c]===0;c++,b=b.sqr());if(++c<v.length)for(var g=b.sqr();c<v.length;c++,g=g.sqr())v[c]!==0&&(b=b.mul(g));return b},i.prototype.iushln=function(E){r(typeof E=="number"&&E>=0);var v=E%26,b=(E-v)/26,c=67108863>>>26-v<<26-v,g;if(v!==0){var w=0;for(g=0;g<this.length;g++){var R=this.words[g]&c,C=(this.words[g]|0)-R<<v;this.words[g]=C|w,w=R>>>26-v}w&&(this.words[g]=w,this.length++)}if(b!==0){for(g=this.length-1;g>=0;g--)this.words[g+b]=this.words[g];for(g=0;g<b;g++)this.words[g]=0;this.length+=b}return this.strip()},i.prototype.ishln=function(E){return r(this.negative===0),this.iushln(E)},i.prototype.iushrn=function(E,v,b){r(typeof E=="number"&&E>=0);var c;v?c=(v-v%26)/26:c=0;var g=E%26,w=Math.min((E-g)/26,this.length),R=67108863^67108863>>>g<<g,C=b;if(c-=w,c=Math.max(0,c),C){for(var h=0;h<w;h++)C.words[h]=this.words[h];C.length=w}if(w!==0)if(this.length>w)for(this.length-=w,h=0;h<this.length;h++)this.words[h]=this.words[h+w];else this.words[0]=0,this.length=1;var D=0;for(h=this.length-1;h>=0&&(D!==0||h>=c);h--){var M=this.words[h]|0;this.words[h]=D<<26-g|M>>>g,D=M&R}return C&&D!==0&&(C.words[C.length++]=D),this.length===0&&(this.words[0]=0,this.length=1),this.strip()},i.prototype.ishrn=function(E,v,b){return r(this.negative===0),this.iushrn(E,v,b)},i.prototype.shln=function(E){return this.clone().ishln(E)},i.prototype.ushln=function(E){return this.clone().iushln(E)},i.prototype.shrn=function(E){return this.clone().ishrn(E)},i.prototype.ushrn=function(E){return this.clone().iushrn(E)},i.prototype.testn=function(E){r(typeof E=="number"&&E>=0);var v=E%26,b=(E-v)/26,c=1<<v;if(this.length<=b)return!1;var g=this.words[b];return!!(g&c)},i.prototype.imaskn=function(E){r(typeof E=="number"&&E>=0);var v=E%26,b=(E-v)/26;if(r(this.negative===0,"imaskn works only with positive numbers"),this.length<=b)return this;if(v!==0&&b++,this.length=Math.min(b,this.length),v!==0){var c=67108863^67108863>>>v<<v;this.words[this.length-1]&=c}return this.length===0&&(this.words[0]=0,this.length=1),this.strip()},i.prototype.maskn=function(E){return this.clone().imaskn(E)},i.prototype.iaddn=function(E){return r(typeof E=="number"),r(E<67108864),E<0?this.isubn(-E):this.negative!==0?this.length===1&&(this.words[0]|0)<E?(this.words[0]=E-(this.words[0]|0),this.negative=0,this):(this.negative=0,this.isubn(E),this.negative=1,this):this._iaddn(E)},i.prototype._iaddn=function(E){this.words[0]+=E;for(var v=0;v<this.length&&this.words[v]>=67108864;v++)this.words[v]-=67108864,v===this.length-1?this.words[v+1]=1:this.words[v+1]++;return this.length=Math.max(this.length,v+1),this},i.prototype.isubn=function(E){if(r(typeof E=="number"),r(E<67108864),E<0)return this.iaddn(-E);if(this.negative!==0)return this.negative=0,this.iaddn(E),this.negative=1,this;if(this.words[0]-=E,this.length===1&&this.words[0]<0)this.words[0]=-this.words[0],this.negative=1;else for(var v=0;v<this.length&&this.words[v]<0;v++)this.words[v]+=67108864,this.words[v+1]-=1;return this.strip()},i.prototype.addn=function(E){return this.clone().iaddn(E)},i.prototype.subn=function(E){return this.clone().isubn(E)},i.prototype.iabs=function(){return this.negative=0,this},i.prototype.abs=function(){return this.clone().iabs()},i.prototype._ishlnsubmul=function(E,v,b){var c=E.length+b,g;this._expand(c);var w,R=0;for(g=0;g<E.length;g++){w=(this.words[g+b]|0)+R;var C=(E.words[g]|0)*v;w-=C&67108863,R=(w>>26)-(C/67108864|0),this.words[g+b]=w&67108863}for(;g<this.length-b;g++)w=(this.words[g+b]|0)+R,R=w>>26,this.words[g+b]=w&67108863;if(R===0)return this.strip();for(r(R===-1),R=0,g=0;g<this.length;g++)w=-(this.words[g]|0)+R,R=w>>26,this.words[g]=w&67108863;return this.negative=1,this.strip()},i.prototype._wordDiv=function(E,v){var b=this.length-E.length,c=this.clone(),g=E,w=g.words[g.length-1]|0,R=this._countBits(w);b=26-R,b!==0&&(g=g.ushln(b),c.iushln(b),w=g.words[g.length-1]|0);var C=c.length-g.length,h;if(v!=="mod"){h=new i(null),h.length=C+1,h.words=new Array(h.length);for(var D=0;D<h.length;D++)h.words[D]=0}var M=c.clone()._ishlnsubmul(g,1,C);M.negative===0&&(c=M,h&&(h.words[C]=1));for(var B=C-1;B>=0;B--){var k=(c.words[g.length+B]|0)*67108864+(c.words[g.length+B-1]|0);for(k=Math.min(k/w|0,67108863),c._ishlnsubmul(g,k,B);c.negative!==0;)k--,c.negative=0,c._ishlnsubmul(g,1,B),c.isZero()||(c.negative^=1);h&&(h.words[B]=k)}return h&&h.strip(),c.strip(),v!=="div"&&b!==0&&c.iushrn(b),{div:h||null,mod:c}},i.prototype.divmod=function(E,v,b){if(r(!E.isZero()),this.isZero())return{div:new i(0),mod:new i(0)};var c,g,w;return this.negative!==0&&E.negative===0?(w=this.neg().divmod(E,v),v!=="mod"&&(c=w.div.neg()),v!=="div"&&(g=w.mod.neg(),b&&g.negative!==0&&g.iadd(E)),{div:c,mod:g}):this.negative===0&&E.negative!==0?(w=this.divmod(E.neg(),v),v!=="mod"&&(c=w.div.neg()),{div:c,mod:w.mod}):(this.negative&E.negative)!==0?(w=this.neg().divmod(E.neg(),v),v!=="div"&&(g=w.mod.neg(),b&&g.negative!==0&&g.isub(E)),{div:w.div,mod:g}):E.length>this.length||this.cmp(E)<0?{div:new i(0),mod:this}:E.length===1?v==="div"?{div:this.divn(E.words[0]),mod:null}:v==="mod"?{div:null,mod:new i(this.modn(E.words[0]))}:{div:this.divn(E.words[0]),mod:new i(this.modn(E.words[0]))}:this._wordDiv(E,v)},i.prototype.div=function(E){return this.divmod(E,"div",!1).div},i.prototype.mod=function(E){return this.divmod(E,"mod",!1).mod},i.prototype.umod=function(E){return this.divmod(E,"mod",!0).mod},i.prototype.divRound=function(E){var v=this.divmod(E);if(v.mod.isZero())return v.div;var b=v.div.negative!==0?v.mod.isub(E):v.mod,c=E.ushrn(1),g=E.andln(1),w=b.cmp(c);return w<0||g===1&&w===0?v.div:v.div.negative!==0?v.div.isubn(1):v.div.iaddn(1)},i.prototype.modn=function(E){r(E<=67108863);for(var v=(1<<26)%E,b=0,c=this.length-1;c>=0;c--)b=(v*b+(this.words[c]|0))%E;return b},i.prototype.idivn=function(E){r(E<=67108863);for(var v=0,b=this.length-1;b>=0;b--){var c=(this.words[b]|0)+v*67108864;this.words[b]=c/E|0,v=c%E}return this.strip()},i.prototype.divn=function(E){return this.clone().idivn(E)},i.prototype.egcd=function(E){r(E.negative===0),r(!E.isZero());var v=this,b=E.clone();v.negative!==0?v=v.umod(E):v=v.clone();for(var c=new i(1),g=new i(0),w=new i(0),R=new i(1),C=0;v.isEven()&&b.isEven();)v.iushrn(1),b.iushrn(1),++C;for(var h=b.clone(),D=v.clone();!v.isZero();){for(var M=0,B=1;(v.words[0]&B)===0&&M<26;++M,B<<=1);if(M>0)for(v.iushrn(M);M-- >0;)(c.isOdd()||g.isOdd())&&(c.iadd(h),g.isub(D)),c.iushrn(1),g.iushrn(1);for(var k=0,ne=1;(b.words[0]&ne)===0&&k<26;++k,ne<<=1);if(k>0)for(b.iushrn(k);k-- >0;)(w.isOdd()||R.isOdd())&&(w.iadd(h),R.isub(D)),w.iushrn(1),R.iushrn(1);v.cmp(b)>=0?(v.isub(b),c.isub(w),g.isub(R)):(b.isub(v),w.isub(c),R.isub(g))}return{a:w,b:R,gcd:b.iushln(C)}},i.prototype._invmp=function(E){r(E.negative===0),r(!E.isZero());var v=this,b=E.clone();v.negative!==0?v=v.umod(E):v=v.clone();for(var c=new i(1),g=new i(0),w=b.clone();v.cmpn(1)>0&&b.cmpn(1)>0;){for(var R=0,C=1;(v.words[0]&C)===0&&R<26;++R,C<<=1);if(R>0)for(v.iushrn(R);R-- >0;)c.isOdd()&&c.iadd(w),c.iushrn(1);for(var h=0,D=1;(b.words[0]&D)===0&&h<26;++h,D<<=1);if(h>0)for(b.iushrn(h);h-- >0;)g.isOdd()&&g.iadd(w),g.iushrn(1);v.cmp(b)>=0?(v.isub(b),c.isub(g)):(b.isub(v),g.isub(c))}var M;return v.cmpn(1)===0?M=c:M=g,M.cmpn(0)<0&&M.iadd(E),M},i.prototype.gcd=function(E){if(this.isZero())return E.abs();if(E.isZero())return this.abs();var v=this.clone(),b=E.clone();v.negative=0,b.negative=0;for(var c=0;v.isEven()&&b.isEven();c++)v.iushrn(1),b.iushrn(1);do{for(;v.isEven();)v.iushrn(1);for(;b.isEven();)b.iushrn(1);var g=v.cmp(b);if(g<0){var w=v;v=b,b=w}else if(g===0||b.cmpn(1)===0)break;v.isub(b)}while(!0);return b.iushln(c)},i.prototype.invm=function(E){return this.egcd(E).a.umod(E)},i.prototype.isEven=function(){return(this.words[0]&1)===0},i.prototype.isOdd=function(){return(this.words[0]&1)===1},i.prototype.andln=function(E){return this.words[0]&E},i.prototype.bincn=function(E){r(typeof E=="number");var v=E%26,b=(E-v)/26,c=1<<v;if(this.length<=b)return this._expand(b+1),this.words[b]|=c,this;for(var g=c,w=b;g!==0&&w<this.length;w++){var R=this.words[w]|0;R+=g,g=R>>>26,R&=67108863,this.words[w]=R}return g!==0&&(this.words[w]=g,this.length++),this},i.prototype.isZero=function(){return this.length===1&&this.words[0]===0},i.prototype.cmpn=function(E){var v=E<0;if(this.negative!==0&&!v)return-1;if(this.negative===0&&v)return 1;this.strip();var b;if(this.length>1)b=1;else{v&&(E=-E),r(E<=67108863,"Number is too big");var c=this.words[0]|0;b=c===E?0:c<E?-1:1}return this.negative!==0?-b|0:b},i.prototype.cmp=function(E){if(this.negative!==0&&E.negative===0)return-1;if(this.negative===0&&E.negative!==0)return 1;var v=this.ucmp(E);return this.negative!==0?-v|0:v},i.prototype.ucmp=function(E){if(this.length>E.length)return 1;if(this.length<E.length)return-1;for(var v=0,b=this.length-1;b>=0;b--){var c=this.words[b]|0,g=E.words[b]|0;if(c!==g){c<g?v=-1:c>g&&(v=1);break}}return v},i.prototype.gtn=function(E){return this.cmpn(E)===1},i.prototype.gt=function(E){return this.cmp(E)===1},i.prototype.gten=function(E){return this.cmpn(E)>=0},i.prototype.gte=function(E){return this.cmp(E)>=0},i.prototype.ltn=function(E){return this.cmpn(E)===-1},i.prototype.lt=function(E){return this.cmp(E)===-1},i.prototype.lten=function(E){return this.cmpn(E)<=0},i.prototype.lte=function(E){return this.cmp(E)<=0},i.prototype.eqn=function(E){return this.cmpn(E)===0},i.prototype.eq=function(E){return this.cmp(E)===0},i.red=function(E){return new ie(E)},i.prototype.toRed=function(E){return r(!this.red,"Already a number in reduction context"),r(this.negative===0,"red works only with positives"),E.convertTo(this)._forceRed(E)},i.prototype.fromRed=function(){return r(this.red,"fromRed works only with numbers in reduction context"),this.red.convertFrom(this)},i.prototype._forceRed=function(E){return this.red=E,this},i.prototype.forceRed=function(E){return r(!this.red,"Already a number in reduction context"),this._forceRed(E)},i.prototype.redAdd=function(E){return r(this.red,"redAdd works only with red numbers"),this.red.add(this,E)},i.prototype.redIAdd=function(E){return r(this.red,"redIAdd works only with red numbers"),this.red.iadd(this,E)},i.prototype.redSub=function(E){return r(this.red,"redSub works only with red numbers"),this.red.sub(this,E)},i.prototype.redISub=function(E){return r(this.red,"redISub works only with red numbers"),this.red.isub(this,E)},i.prototype.redShl=function(E){return r(this.red,"redShl works only with red numbers"),this.red.shl(this,E)},i.prototype.redMul=function(E){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,E),this.red.mul(this,E)},i.prototype.redIMul=function(E){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,E),this.red.imul(this,E)},i.prototype.redSqr=function(){return r(this.red,"redSqr works only with red numbers"),this.red._verify1(this),this.red.sqr(this)},i.prototype.redISqr=function(){return r(this.red,"redISqr works only with red numbers"),this.red._verify1(this),this.red.isqr(this)},i.prototype.redSqrt=function(){return r(this.red,"redSqrt works only with red numbers"),this.red._verify1(this),this.red.sqrt(this)},i.prototype.redInvm=function(){return r(this.red,"redInvm works only with red numbers"),this.red._verify1(this),this.red.invm(this)},i.prototype.redNeg=function(){return r(this.red,"redNeg works only with red numbers"),this.red._verify1(this),this.red.neg(this)},i.prototype.redPow=function(E){return r(this.red&&!E.red,"redPow(normalNum)"),this.red._verify1(this),this.red.pow(this,E)};var G={k256:null,p224:null,p192:null,p25519:null};function Y(H,E){this.name=H,this.p=new i(E,16),this.n=this.p.bitLength(),this.k=new i(1).iushln(this.n).isub(this.p),this.tmp=this._tmp()}Y.prototype._tmp=function(){var E=new i(null);return E.words=new Array(Math.ceil(this.n/13)),E},Y.prototype.ireduce=function(E){var v=E,b;do this.split(v,this.tmp),v=this.imulK(v),v=v.iadd(this.tmp),b=v.bitLength();while(b>this.n);var c=b<this.n?-1:v.ucmp(this.p);return c===0?(v.words[0]=0,v.length=1):c>0?v.isub(this.p):v.strip!==void 0?v.strip():v._strip(),v},Y.prototype.split=function(E,v){E.iushrn(this.n,0,v)},Y.prototype.imulK=function(E){return E.imul(this.k)};function X(){Y.call(this,"k256","ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe fffffc2f")}n(X,Y),X.prototype.split=function(E,v){for(var b=4194303,c=Math.min(E.length,9),g=0;g<c;g++)v.words[g]=E.words[g];if(v.length=c,E.length<=9){E.words[0]=0,E.length=1;return}var w=E.words[9];for(v.words[v.length++]=w&b,g=10;g<E.length;g++){var R=E.words[g]|0;E.words[g-10]=(R&b)<<4|w>>>22,w=R}w>>>=22,E.words[g-10]=w,w===0&&E.length>10?E.length-=10:E.length-=9},X.prototype.imulK=function(E){E.words[E.length]=0,E.words[E.length+1]=0,E.length+=2;for(var v=0,b=0;b<E.length;b++){var c=E.words[b]|0;v+=c*977,E.words[b]=v&67108863,v=c*64+(v/67108864|0)}return E.words[E.length-1]===0&&(E.length--,E.words[E.length-1]===0&&E.length--),E};function Z(){Y.call(this,"p224","ffffffff ffffffff ffffffff ffffffff 00000000 00000000 00000001")}n(Z,Y);function j(){Y.call(this,"p192","ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff")}n(j,Y);function se(){Y.call(this,"25519","7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed")}n(se,Y),se.prototype.imulK=function(E){for(var v=0,b=0;b<E.length;b++){var c=(E.words[b]|0)*19+v,g=c&67108863;c>>>=26,E.words[b]=g,v=c}return v!==0&&(E.words[E.length++]=v),E},i._prime=function(E){if(G[E])return G[E];var v;if(E==="k256")v=new X;else if(E==="p224")v=new Z;else if(E==="p192")v=new j;else if(E==="p25519")v=new se;else throw new Error("Unknown prime "+E);return G[E]=v,v};function ie(H){if(typeof H=="string"){var E=i._prime(H);this.m=E.p,this.prime=E}else r(H.gtn(1),"modulus must be greater than 1"),this.m=H,this.prime=null}ie.prototype._verify1=function(E){r(E.negative===0,"red works only with positives"),r(E.red,"red works only with red numbers")},ie.prototype._verify2=function(E,v){r((E.negative|v.negative)===0,"red works only with positives"),r(E.red&&E.red===v.red,"red works only with red numbers")},ie.prototype.imod=function(E){return this.prime?this.prime.ireduce(E)._forceRed(this):E.umod(this.m)._forceRed(this)},ie.prototype.neg=function(E){return E.isZero()?E.clone():this.m.sub(E)._forceRed(this)},ie.prototype.add=function(E,v){this._verify2(E,v);var b=E.add(v);return b.cmp(this.m)>=0&&b.isub(this.m),b._forceRed(this)},ie.prototype.iadd=function(E,v){this._verify2(E,v);var b=E.iadd(v);return b.cmp(this.m)>=0&&b.isub(this.m),b},ie.prototype.sub=function(E,v){this._verify2(E,v);var b=E.sub(v);return b.cmpn(0)<0&&b.iadd(this.m),b._forceRed(this)},ie.prototype.isub=function(E,v){this._verify2(E,v);var b=E.isub(v);return b.cmpn(0)<0&&b.iadd(this.m),b},ie.prototype.shl=function(E,v){return this._verify1(E),this.imod(E.ushln(v))},ie.prototype.imul=function(E,v){return this._verify2(E,v),this.imod(E.imul(v))},ie.prototype.mul=function(E,v){return this._verify2(E,v),this.imod(E.mul(v))},ie.prototype.isqr=function(E){return this.imul(E,E.clone())},ie.prototype.sqr=function(E){return this.mul(E,E)},ie.prototype.sqrt=function(E){if(E.isZero())return E.clone();var v=this.m.andln(3);if(r(v%2===1),v===3){var b=this.m.add(new i(1)).iushrn(2);return this.pow(E,b)}for(var c=this.m.subn(1),g=0;!c.isZero()&&c.andln(1)===0;)g++,c.iushrn(1);r(!c.isZero());var w=new i(1).toRed(this),R=w.redNeg(),C=this.m.subn(1).iushrn(1),h=this.m.bitLength();for(h=new i(2*h*h).toRed(this);this.pow(h,C).cmp(R)!==0;)h.redIAdd(R);for(var D=this.pow(h,c),M=this.pow(E,c.addn(1).iushrn(1)),B=this.pow(E,c),k=g;B.cmp(w)!==0;){for(var ne=B,Ae=0;ne.cmp(w)!==0;Ae++)ne=ne.redSqr();r(Ae<k);var ue=this.pow(D,new i(1).iushln(k-Ae-1));M=M.redMul(ue),D=ue.redSqr(),B=B.redMul(D),k=Ae}return M},ie.prototype.invm=function(E){var v=E._invmp(this.m);return v.negative!==0?(v.negative=0,this.imod(v).redNeg()):this.imod(v)},ie.prototype.pow=function(E,v){if(v.isZero())return new i(1).toRed(this);if(v.cmpn(1)===0)return E.clone();var b=4,c=new Array(1<<b);c[0]=new i(1).toRed(this),c[1]=E;for(var g=2;g<c.length;g++)c[g]=this.mul(c[g-1],E);var w=c[0],R=0,C=0,h=v.bitLength()%26;for(h===0&&(h=26),g=v.length-1;g>=0;g--){for(var D=v.words[g],M=h-1;M>=0;M--){var B=D>>M&1;if(w!==c[0]&&(w=this.sqr(w)),B===0&&R===0){C=0;continue}R<<=1,R|=B,C++,!(C!==b&&(g!==0||M!==0))&&(w=this.mul(w,c[R]),C=0,R=0)}h=26}return w},ie.prototype.convertTo=function(E){var v=E.umod(this.m);return v===E?v.clone():v},ie.prototype.convertFrom=function(E){var v=E.clone();return v.red=null,v},i.mont=function(E){return new ce(E)};function ce(H){ie.call(this,H),this.shift=this.m.bitLength(),this.shift%26!==0&&(this.shift+=26-this.shift%26),this.r=new i(1).iushln(this.shift),this.r2=this.imod(this.r.sqr()),this.rinv=this.r._invmp(this.m),this.minv=this.rinv.mul(this.r).isubn(1).div(this.m),this.minv=this.minv.umod(this.r),this.minv=this.r.sub(this.minv)}n(ce,ie),ce.prototype.convertTo=function(E){return this.imod(E.ushln(this.shift))},ce.prototype.convertFrom=function(E){var v=this.imod(E.mul(this.rinv));return v.red=null,v},ce.prototype.imul=function(E,v){if(E.isZero()||v.isZero())return E.words[0]=0,E.length=1,E;var b=E.imul(v),c=b.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),g=b.isub(c).iushrn(this.shift),w=g;return g.cmp(this.m)>=0?w=g.isub(this.m):g.cmpn(0)<0&&(w=g.iadd(this.m)),w._forceRed(this)},ce.prototype.mul=function(E,v){if(E.isZero()||v.isZero())return new i(0)._forceRed(this);var b=E.mul(v),c=b.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),g=b.isub(c).iushrn(this.shift),w=g;return g.cmp(this.m)>=0?w=g.isub(this.m):g.cmpn(0)<0&&(w=g.iadd(this.m)),w._forceRed(this)},ce.prototype.invm=function(E){var v=this.imod(E._invmp(this.m).mul(this.r2));return v._forceRed(this)}})(typeof pS>"u"||pS,P5)});var py=U((YNe,mS)=>{var ES;mS.exports=function(t){return ES||(ES=new AA(null)),ES.generate(t)};function AA(e){this.rand=e}mS.exports.Rand=AA;AA.prototype.generate=function(t){return this._rand(t)};AA.prototype._rand=function(t){if(this.rand.getBytes)return this.rand.getBytes(t);for(var r=new Uint8Array(t),n=0;n<r.length;n++)r[n]=this.rand.getByte();return r};if(typeof self=="object")self.crypto&&self.crypto.getRandomValues?AA.prototype._rand=function(t){var r=new Uint8Array(t);return self.crypto.getRandomValues(r),r}:self.msCrypto&&self.msCrypto.getRandomValues?AA.prototype._rand=function(t){var r=new Uint8Array(t);return self.msCrypto.getRandomValues(r),r}:typeof window=="object"&&(AA.prototype._rand=function(){throw new Error("Not implemented yet")});else try{if(yS=Nd(),typeof yS.randomBytes!="function")throw new Error("Not supported");AA.prototype._rand=function(t){return yS.randomBytes(t)}}catch{}var yS});var BS=U((WNe,O5)=>{var Tf=kr(),wde=py();function Nf(e){this.rand=e||new wde.Rand}O5.exports=Nf;Nf.create=function(t){return new Nf(t)};Nf.prototype._randbelow=function(t){var r=t.bitLength(),n=Math.ceil(r/8);do var i=new Tf(this.rand.generate(n));while(i.cmp(t)>=0);return i};Nf.prototype._randrange=function(t,r){var n=r.sub(t);return t.add(this._randbelow(n))};Nf.prototype.test=function(t,r,n){var i=t.bitLength(),s=Tf.mont(t),o=new Tf(1).toRed(s);r||(r=Math.max(1,i/48|0));for(var a=t.subn(1),A=0;!a.testn(A);A++);for(var f=t.shrn(A),l=a.toRed(s),p=!0;r>0;r--){var I=this._randrange(new Tf(2),a);n&&n(I);var S=I.toRed(s).redPow(f);if(!(S.cmp(o)===0||S.cmp(l)===0)){for(var _=1;_<A;_++){if(S=S.redSqr(),S.cmp(o)===0)return!1;if(S.cmp(l)===0)break}if(_===A)return!1}}return p};Nf.prototype.getDivisor=function(t,r){var n=t.bitLength(),i=Tf.mont(t),s=new Tf(1).toRed(i);r||(r=Math.max(1,n/48|0));for(var o=t.subn(1),a=0;!o.testn(a);a++);for(var A=t.shrn(a),f=o.toRed(i);r>0;r--){var l=this._randrange(new Tf(2),o),p=t.gcd(l);if(p.cmpn(1)!==0)return p;var I=l.toRed(i).redPow(A);if(!(I.cmp(s)===0||I.cmp(f)===0)){for(var S=1;S<a;S++){if(I=I.redSqr(),I.cmp(s)===0)return I.fromRed().subn(1).gcd(t);if(I.cmp(f)===0)break}if(S===a)return I=I.redSqr(),I.fromRed().subn(1).gcd(t)}}return!1}});var SS=U((KNe,G5)=>{var Sde=mf();G5.exports=wS;wS.simpleSieve=CS;wS.fermatTest=QS;var Jr=kr(),_de=new Jr(24),vde=BS(),H5=new vde,Rde=new Jr(1),bS=new Jr(2),Dde=new Jr(5),VNe=new Jr(16),JNe=new Jr(8),Tde=new Jr(10),Nde=new Jr(3),jNe=new Jr(7),Mde=new Jr(11),q5=new Jr(4),zNe=new Jr(12),IS=null;function Fde(){if(IS!==null)return IS;var e=1048576,t=[];t[0]=2;for(var r=1,n=3;n<e;n+=2){for(var i=Math.ceil(Math.sqrt(n)),s=0;s<r&&t[s]<=i&&n%t[s]!==0;s++);r!==s&&t[s]<=i||(t[r++]=n)}return IS=t,t}function CS(e){for(var t=Fde(),r=0;r<t.length;r++)if(e.modn(t[r])===0)return e.cmpn(t[r])===0;return!0}function QS(e){var t=Jr.mont(e);return bS.toRed(t).redPow(e.subn(1)).fromRed().cmpn(1)===0}function wS(e,t){if(e<16)return t===2||t===5?new Jr([140,123]):new Jr([140,39]);t=new Jr(t);for(var r,n;;){for(r=new Jr(Sde(Math.ceil(e/8)));r.bitLength()>e;)r.ishrn(1);if(r.isEven()&&r.iadd(Rde),r.testn(1)||r.iadd(bS),t.cmp(bS)){if(!t.cmp(Dde))for(;r.mod(Tde).cmp(Nde);)r.iadd(q5)}else for(;r.mod(_de).cmp(Mde);)r.iadd(q5);if(n=r.shrn(1),CS(n)&&CS(r)&&QS(n)&&QS(r)&&H5.test(n)&&H5.test(r))return r}}});var Y5=U((XNe,kde)=>{kde.exports={modp1:{gen:"02",prime:"ffffffffffffffffc90fdaa22168c234c4c6628b80dc1cd129024e088a67cc74020bbea63b139b22514a08798e3404ddef9519b3cd3a431b302b0a6df25f14374fe1356d6d51c245e485b576625e7ec6f44c42e9a63a3620ffffffffffffffff"},modp2:{gen:"02",prime:"ffffffffffffffffc90fdaa22168c234c4c6628b80dc1cd129024e088a67cc74020bbea63b139b22514a08798e3404ddef9519b3cd3a431b302b0a6df25f14374fe1356d6d51c245e485b576625e7ec6f44c42e9a637ed6b0bff5cb6f406b7edee386bfb5a899fa5ae9f24117c4b1fe649286651ece65381ffffffffffffffff"},modp5:{gen:"02",prime:"ffffffffffffffffc90fdaa22168c234c4c6628b80dc1cd129024e088a67cc74020bbea63b139b22514a08798e3404ddef9519b3cd3a431b302b0a6df25f14374fe1356d6d51c245e485b576625e7ec6f44c42e9a637ed6b0bff5cb6f406b7edee386bfb5a899fa5ae9f24117c4b1fe649286651ece45b3dc2007cb8a163bf0598da48361c55d39a69163fa8fd24cf5f83655d23dca3ad961c62f356208552bb9ed529077096966d670c354e4abc9804f1746c08ca237327ffffffffffffffff"},modp14:{gen:"02",prime:"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"},modp15:{gen:"02",prime:"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"},modp16:{gen:"02",prime:"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"},modp17:{gen:"02",prime:"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"},modp18:{gen:"02",prime:"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"}}});var j5=U((ZNe,J5)=>{var Qi=kr(),Ude=BS(),W5=new Ude,xde=new Qi(24),Lde=new Qi(11),Pde=new Qi(10),Ode=new Qi(3),Hde=new Qi(7),V5=SS(),qde=mf();J5.exports=sa;function Gde(e,t){return t=t||"utf8",Buffer.isBuffer(e)||(e=new Buffer(e,t)),this._pub=new Qi(e),this}function Yde(e,t){return t=t||"utf8",Buffer.isBuffer(e)||(e=new Buffer(e,t)),this._priv=new Qi(e),this}var Ey={};function Wde(e,t){var r=t.toString("hex"),n=[r,e.toString(16)].join("_");if(n in Ey)return Ey[n];var i=0;if(e.isEven()||!V5.simpleSieve||!V5.fermatTest(e)||!W5.test(e))return i+=1,r==="02"||r==="05"?i+=8:i+=4,Ey[n]=i,i;W5.test(e.shrn(1))||(i+=2);var s;switch(r){case"02":e.mod(xde).cmp(Lde)&&(i+=8);break;case"05":s=e.mod(Pde),s.cmp(Ode)&&s.cmp(Hde)&&(i+=8);break;default:i+=4}return Ey[n]=i,i}function sa(e,t,r){this.setGenerator(t),this.__prime=new Qi(e),this._prime=Qi.mont(this.__prime),this._primeLen=e.length,this._pub=void 0,this._priv=void 0,this._primeCode=void 0,r?(this.setPublicKey=Gde,this.setPrivateKey=Yde):this._primeCode=8}Object.defineProperty(sa.prototype,"verifyError",{enumerable:!0,get:function(){return typeof this._primeCode!="number"&&(this._primeCode=Wde(this.__prime,this.__gen)),this._primeCode}});sa.prototype.generateKeys=function(){return this._priv||(this._priv=new Qi(qde(this._primeLen))),this._pub=this._gen.toRed(this._prime).redPow(this._priv).fromRed(),this.getPublicKey()};sa.prototype.computeSecret=function(e){e=new Qi(e),e=e.toRed(this._prime);var t=e.redPow(this._priv).fromRed(),r=new Buffer(t.toArray()),n=this.getPrime();if(r.length<n.length){var i=new Buffer(n.length-r.length);i.fill(0),r=Buffer.concat([i,r])}return r};sa.prototype.getPublicKey=function(t){return yy(this._pub,t)};sa.prototype.getPrivateKey=function(t){return yy(this._priv,t)};sa.prototype.getPrime=function(e){return yy(this.__prime,e)};sa.prototype.getGenerator=function(e){return yy(this._gen,e)};sa.prototype.setGenerator=function(e,t){return t=t||"utf8",Buffer.isBuffer(e)||(e=new Buffer(e,t)),this.__gen=e,this._gen=new Qi(e),this};function yy(e,t){var r=new Buffer(e.toArray());return t?r.toString(t):r}});var X5=U(Pc=>{var Vde=SS(),z5=Y5(),_S=j5();function Jde(e){var t=new Buffer(z5[e].prime,"hex"),r=new Buffer(z5[e].gen,"hex");return new _S(t,r)}var jde={binary:!0,hex:!0,base64:!0};function K5(e,t,r,n){return Buffer.isBuffer(t)||jde[t]===void 0?K5(e,"binary",t,r):(t=t||"binary",n=n||"binary",r=r||new Buffer([2]),Buffer.isBuffer(r)||(r=new Buffer(r,n)),typeof e=="number"?new _S(Vde(e,r),r,!0):(Buffer.isBuffer(e)||(e=new Buffer(e,t)),new _S(e,r,!0)))}Pc.DiffieHellmanGroup=Pc.createDiffieHellmanGroup=Pc.getDiffieHellman=Jde;Pc.createDiffieHellman=Pc.DiffieHellman=K5});var my=U((Z5,vS)=>{(function(e,t){"use strict";function r(b,c){if(!b)throw new Error(c||"Assertion failed")}function n(b,c){b.super_=c;var g=function(){};g.prototype=c.prototype,b.prototype=new g,b.prototype.constructor=b}function i(b,c,g){if(i.isBN(b))return b;this.negative=0,this.words=null,this.length=0,this.red=null,b!==null&&((c==="le"||c==="be")&&(g=c,c=10),this._init(b||0,c||10,g||"be"))}typeof e=="object"?e.exports=i:t.BN=i,i.BN=i,i.wordSize=26;var s;try{typeof window<"u"&&typeof window.Buffer<"u"?s=window.Buffer:s=Gr().Buffer}catch{}i.isBN=function(c){return c instanceof i?!0:c!==null&&typeof c=="object"&&c.constructor.wordSize===i.wordSize&&Array.isArray(c.words)},i.max=function(c,g){return c.cmp(g)>0?c:g},i.min=function(c,g){return c.cmp(g)<0?c:g},i.prototype._init=function(c,g,w){if(typeof c=="number")return this._initNumber(c,g,w);if(typeof c=="object")return this._initArray(c,g,w);g==="hex"&&(g=16),r(g===(g|0)&&g>=2&&g<=36),c=c.toString().replace(/\s+/g,"");var R=0;c[0]==="-"&&(R++,this.negative=1),R<c.length&&(g===16?this._parseHex(c,R,w):(this._parseBase(c,g,R),w==="le"&&this._initArray(this.toArray(),g,w)))},i.prototype._initNumber=function(c,g,w){c<0&&(this.negative=1,c=-c),c<67108864?(this.words=[c&67108863],this.length=1):c<4503599627370496?(this.words=[c&67108863,c/67108864&67108863],this.length=2):(r(c<9007199254740992),this.words=[c&67108863,c/67108864&67108863,1],this.length=3),w==="le"&&this._initArray(this.toArray(),g,w)},i.prototype._initArray=function(c,g,w){if(r(typeof c.length=="number"),c.length<=0)return this.words=[0],this.length=1,this;this.length=Math.ceil(c.length/3),this.words=new Array(this.length);for(var R=0;R<this.length;R++)this.words[R]=0;var C,h,D=0;if(w==="be")for(R=c.length-1,C=0;R>=0;R-=3)h=c[R]|c[R-1]<<8|c[R-2]<<16,this.words[C]|=h<<D&67108863,this.words[C+1]=h>>>26-D&67108863,D+=24,D>=26&&(D-=26,C++);else if(w==="le")for(R=0,C=0;R<c.length;R+=3)h=c[R]|c[R+1]<<8|c[R+2]<<16,this.words[C]|=h<<D&67108863,this.words[C+1]=h>>>26-D&67108863,D+=24,D>=26&&(D-=26,C++);return this._strip()};function o(b,c){var g=b.charCodeAt(c);if(g>=48&&g<=57)return g-48;if(g>=65&&g<=70)return g-55;if(g>=97&&g<=102)return g-87;r(!1,"Invalid character in "+b)}function a(b,c,g){var w=o(b,g);return g-1>=c&&(w|=o(b,g-1)<<4),w}i.prototype._parseHex=function(c,g,w){this.length=Math.ceil((c.length-g)/6),this.words=new Array(this.length);for(var R=0;R<this.length;R++)this.words[R]=0;var C=0,h=0,D;if(w==="be")for(R=c.length-1;R>=g;R-=2)D=a(c,g,R)<<C,this.words[h]|=D&67108863,C>=18?(C-=18,h+=1,this.words[h]|=D>>>26):C+=8;else{var M=c.length-g;for(R=M%2===0?g+1:g;R<c.length;R+=2)D=a(c,g,R)<<C,this.words[h]|=D&67108863,C>=18?(C-=18,h+=1,this.words[h]|=D>>>26):C+=8}this._strip()};function A(b,c,g,w){for(var R=0,C=0,h=Math.min(b.length,g),D=c;D<h;D++){var M=b.charCodeAt(D)-48;R*=w,M>=49?C=M-49+10:M>=17?C=M-17+10:C=M,r(M>=0&&C<w,"Invalid character"),R+=C}return R}i.prototype._parseBase=function(c,g,w){this.words=[0],this.length=1;for(var R=0,C=1;C<=67108863;C*=g)R++;R--,C=C/g|0;for(var h=c.length-w,D=h%R,M=Math.min(h,h-D)+w,B=0,k=w;k<M;k+=R)B=A(c,k,k+R,g),this.imuln(C),this.words[0]+B<67108864?this.words[0]+=B:this._iaddn(B);if(D!==0){var ne=1;for(B=A(c,k,c.length,g),k=0;k<D;k++)ne*=g;this.imuln(ne),this.words[0]+B<67108864?this.words[0]+=B:this._iaddn(B)}this._strip()},i.prototype.copy=function(c){c.words=new Array(this.length);for(var g=0;g<this.length;g++)c.words[g]=this.words[g];c.length=this.length,c.negative=this.negative,c.red=this.red};function f(b,c){b.words=c.words,b.length=c.length,b.negative=c.negative,b.red=c.red}if(i.prototype._move=function(c){f(c,this)},i.prototype.clone=function(){var c=new i(null);return this.copy(c),c},i.prototype._expand=function(c){for(;this.length<c;)this.words[this.length++]=0;return this},i.prototype._strip=function(){for(;this.length>1&&this.words[this.length-1]===0;)this.length--;return this._normSign()},i.prototype._normSign=function(){return this.length===1&&this.words[0]===0&&(this.negative=0),this},typeof Symbol<"u"&&typeof Symbol.for=="function")try{i.prototype[Symbol.for("nodejs.util.inspect.custom")]=l}catch{i.prototype.inspect=l}else i.prototype.inspect=l;function l(){return(this.red?"<BN-R: ":"<BN: ")+this.toString(16)+">"}var p=["","0","00","000","0000","00000","000000","0000000","00000000","000000000","0000000000","00000000000","000000000000","0000000000000","00000000000000","000000000000000","0000000000000000","00000000000000000","000000000000000000","0000000000000000000","00000000000000000000","000000000000000000000","0000000000000000000000","00000000000000000000000","000000000000000000000000","0000000000000000000000000"],I=[0,0,25,16,12,11,10,9,8,8,7,7,7,7,6,6,6,6,6,6,6,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5],S=[0,0,33554432,43046721,16777216,48828125,60466176,40353607,16777216,43046721,1e7,19487171,35831808,62748517,7529536,11390625,16777216,24137569,34012224,47045881,64e6,4084101,5153632,6436343,7962624,9765625,11881376,14348907,17210368,20511149,243e5,28629151,33554432,39135393,45435424,52521875,60466176];i.prototype.toString=function(c,g){c=c||10,g=g|0||1;var w;if(c===16||c==="hex"){w="";for(var R=0,C=0,h=0;h<this.length;h++){var D=this.words[h],M=((D<<R|C)&16777215).toString(16);C=D>>>24-R&16777215,R+=2,R>=26&&(R-=26,h--),C!==0||h!==this.length-1?w=p[6-M.length]+M+w:w=M+w}for(C!==0&&(w=C.toString(16)+w);w.length%g!==0;)w="0"+w;return this.negative!==0&&(w="-"+w),w}if(c===(c|0)&&c>=2&&c<=36){var B=I[c],k=S[c];w="";var ne=this.clone();for(ne.negative=0;!ne.isZero();){var Ae=ne.modrn(k).toString(c);ne=ne.idivn(k),ne.isZero()?w=Ae+w:w=p[B-Ae.length]+Ae+w}for(this.isZero()&&(w="0"+w);w.length%g!==0;)w="0"+w;return this.negative!==0&&(w="-"+w),w}r(!1,"Base should be between 2 and 36")},i.prototype.toNumber=function(){var c=this.words[0];return this.length===2?c+=this.words[1]*67108864:this.length===3&&this.words[2]===1?c+=4503599627370496+this.words[1]*67108864:this.length>2&&r(!1,"Number can only safely store up to 53 bits"),this.negative!==0?-c:c},i.prototype.toJSON=function(){return this.toString(16,2)},s&&(i.prototype.toBuffer=function(c,g){return this.toArrayLike(s,c,g)}),i.prototype.toArray=function(c,g){return this.toArrayLike(Array,c,g)};var _=function(c,g){return c.allocUnsafe?c.allocUnsafe(g):new c(g)};i.prototype.toArrayLike=function(c,g,w){this._strip();var R=this.byteLength(),C=w||Math.max(1,R);r(R<=C,"byte array longer than desired length"),r(C>0,"Requested array length <= 0");var h=_(c,C),D=g==="le"?"LE":"BE";return this["_toArrayLike"+D](h,R),h},i.prototype._toArrayLikeLE=function(c,g){for(var w=0,R=0,C=0,h=0;C<this.length;C++){var D=this.words[C]<<h|R;c[w++]=D&255,w<c.length&&(c[w++]=D>>8&255),w<c.length&&(c[w++]=D>>16&255),h===6?(w<c.length&&(c[w++]=D>>24&255),R=0,h=0):(R=D>>>24,h+=2)}if(w<c.length)for(c[w++]=R;w<c.length;)c[w++]=0},i.prototype._toArrayLikeBE=function(c,g){for(var w=c.length-1,R=0,C=0,h=0;C<this.length;C++){var D=this.words[C]<<h|R;c[w--]=D&255,w>=0&&(c[w--]=D>>8&255),w>=0&&(c[w--]=D>>16&255),h===6?(w>=0&&(c[w--]=D>>24&255),R=0,h=0):(R=D>>>24,h+=2)}if(w>=0)for(c[w--]=R;w>=0;)c[w--]=0},Math.clz32?i.prototype._countBits=function(c){return 32-Math.clz32(c)}:i.prototype._countBits=function(c){var g=c,w=0;return g>=4096&&(w+=13,g>>>=13),g>=64&&(w+=7,g>>>=7),g>=8&&(w+=4,g>>>=4),g>=2&&(w+=2,g>>>=2),w+g},i.prototype._zeroBits=function(c){if(c===0)return 26;var g=c,w=0;return(g&8191)===0&&(w+=13,g>>>=13),(g&127)===0&&(w+=7,g>>>=7),(g&15)===0&&(w+=4,g>>>=4),(g&3)===0&&(w+=2,g>>>=2),(g&1)===0&&w++,w},i.prototype.bitLength=function(){var c=this.words[this.length-1],g=this._countBits(c);return(this.length-1)*26+g};function N(b){for(var c=new Array(b.bitLength()),g=0;g<c.length;g++){var w=g/26|0,R=g%26;c[g]=b.words[w]>>>R&1}return c}i.prototype.zeroBits=function(){if(this.isZero())return 0;for(var c=0,g=0;g<this.length;g++){var w=this._zeroBits(this.words[g]);if(c+=w,w!==26)break}return c},i.prototype.byteLength=function(){return Math.ceil(this.bitLength()/8)},i.prototype.toTwos=function(c){return this.negative!==0?this.abs().inotn(c).iaddn(1):this.clone()},i.prototype.fromTwos=function(c){return this.testn(c-1)?this.notn(c).iaddn(1).ineg():this.clone()},i.prototype.isNeg=function(){return this.negative!==0},i.prototype.neg=function(){return this.clone().ineg()},i.prototype.ineg=function(){return this.isZero()||(this.negative^=1),this},i.prototype.iuor=function(c){for(;this.length<c.length;)this.words[this.length++]=0;for(var g=0;g<c.length;g++)this.words[g]=this.words[g]|c.words[g];return this._strip()},i.prototype.ior=function(c){return r((this.negative|c.negative)===0),this.iuor(c)},i.prototype.or=function(c){return this.length>c.length?this.clone().ior(c):c.clone().ior(this)},i.prototype.uor=function(c){return this.length>c.length?this.clone().iuor(c):c.clone().iuor(this)},i.prototype.iuand=function(c){var g;this.length>c.length?g=c:g=this;for(var w=0;w<g.length;w++)this.words[w]=this.words[w]&c.words[w];return this.length=g.length,this._strip()},i.prototype.iand=function(c){return r((this.negative|c.negative)===0),this.iuand(c)},i.prototype.and=function(c){return this.length>c.length?this.clone().iand(c):c.clone().iand(this)},i.prototype.uand=function(c){return this.length>c.length?this.clone().iuand(c):c.clone().iuand(this)},i.prototype.iuxor=function(c){var g,w;this.length>c.length?(g=this,w=c):(g=c,w=this);for(var R=0;R<w.length;R++)this.words[R]=g.words[R]^w.words[R];if(this!==g)for(;R<g.length;R++)this.words[R]=g.words[R];return this.length=g.length,this._strip()},i.prototype.ixor=function(c){return r((this.negative|c.negative)===0),this.iuxor(c)},i.prototype.xor=function(c){return this.length>c.length?this.clone().ixor(c):c.clone().ixor(this)},i.prototype.uxor=function(c){return this.length>c.length?this.clone().iuxor(c):c.clone().iuxor(this)},i.prototype.inotn=function(c){r(typeof c=="number"&&c>=0);var g=Math.ceil(c/26)|0,w=c%26;this._expand(g),w>0&&g--;for(var R=0;R<g;R++)this.words[R]=~this.words[R]&67108863;return w>0&&(this.words[R]=~this.words[R]&67108863>>26-w),this._strip()},i.prototype.notn=function(c){return this.clone().inotn(c)},i.prototype.setn=function(c,g){r(typeof c=="number"&&c>=0);var w=c/26|0,R=c%26;return this._expand(w+1),g?this.words[w]=this.words[w]|1<<R:this.words[w]=this.words[w]&~(1<<R),this._strip()},i.prototype.iadd=function(c){var g;if(this.negative!==0&&c.negative===0)return this.negative=0,g=this.isub(c),this.negative^=1,this._normSign();if(this.negative===0&&c.negative!==0)return c.negative=0,g=this.isub(c),c.negative=1,g._normSign();var w,R;this.length>c.length?(w=this,R=c):(w=c,R=this);for(var C=0,h=0;h<R.length;h++)g=(w.words[h]|0)+(R.words[h]|0)+C,this.words[h]=g&67108863,C=g>>>26;for(;C!==0&&h<w.length;h++)g=(w.words[h]|0)+C,this.words[h]=g&67108863,C=g>>>26;if(this.length=w.length,C!==0)this.words[this.length]=C,this.length++;else if(w!==this)for(;h<w.length;h++)this.words[h]=w.words[h];return this},i.prototype.add=function(c){var g;return c.negative!==0&&this.negative===0?(c.negative=0,g=this.sub(c),c.negative^=1,g):c.negative===0&&this.negative!==0?(this.negative=0,g=c.sub(this),this.negative=1,g):this.length>c.length?this.clone().iadd(c):c.clone().iadd(this)},i.prototype.isub=function(c){if(c.negative!==0){c.negative=0;var g=this.iadd(c);return c.negative=1,g._normSign()}else if(this.negative!==0)return this.negative=0,this.iadd(c),this.negative=1,this._normSign();var w=this.cmp(c);if(w===0)return this.negative=0,this.length=1,this.words[0]=0,this;var R,C;w>0?(R=this,C=c):(R=c,C=this);for(var h=0,D=0;D<C.length;D++)g=(R.words[D]|0)-(C.words[D]|0)+h,h=g>>26,this.words[D]=g&67108863;for(;h!==0&&D<R.length;D++)g=(R.words[D]|0)+h,h=g>>26,this.words[D]=g&67108863;if(h===0&&D<R.length&&R!==this)for(;D<R.length;D++)this.words[D]=R.words[D];return this.length=Math.max(this.length,D),R!==this&&(this.negative=1),this._strip()},i.prototype.sub=function(c){return this.clone().isub(c)};function O(b,c,g){g.negative=c.negative^b.negative;var w=b.length+c.length|0;g.length=w,w=w-1|0;var R=b.words[0]|0,C=c.words[0]|0,h=R*C,D=h&67108863,M=h/67108864|0;g.words[0]=D;for(var B=1;B<w;B++){for(var k=M>>>26,ne=M&67108863,Ae=Math.min(B,c.length-1),ue=Math.max(0,B-b.length+1);ue<=Ae;ue++){var pe=B-ue|0;R=b.words[pe]|0,C=c.words[ue]|0,h=R*C+ne,k+=h/67108864|0,ne=h&67108863}g.words[B]=ne|0,M=k|0}return M!==0?g.words[B]=M|0:g.length--,g._strip()}var x=function(c,g,w){var R=c.words,C=g.words,h=w.words,D=0,M,B,k,ne=R[0]|0,Ae=ne&8191,ue=ne>>>13,pe=R[1]|0,he=pe&8191,de=pe>>>13,Qt=R[2]|0,Ie=Qt&8191,be=Qt>>>13,yr=R[3]|0,Qe=yr&8191,_e=yr>>>13,Ds=R[4]|0,Ge=Ds&8191,Ue=Ds>>>13,Ts=R[5]|0,Te=Ts&8191,De=Ts>>>13,en=R[6]|0,ve=en&8191,He=en>>>13,ai=R[7]|0,Ne=ai&8191,Ve=ai>>>13,F=R[8]|0,m=F&8191,Q=F>>>13,L=R[9]|0,W=L&8191,z=L>>>13,ae=C[0]|0,le=ae&8191,ye=ae>>>13,bt=C[1]|0,Ee=bt&8191,ge=bt>>>13,ka=C[2]|0,Je=ka&8191,tt=ka>>>13,Mo=C[3]|0,Ze=Mo&8191,rt=Mo>>>13,HA=C[4]|0,nt=HA&8191,it=HA>>>13,Ua=C[5]|0,ze=Ua&8191,Ke=Ua>>>13,qA=C[6]|0,xe=qA&8191,$e=qA>>>13,GA=C[7]|0,st=GA&8191,Le=GA>>>13,hn=C[8]|0,Pe=hn&8191,Xe=hn>>>13,Qn=C[9]|0,xt=Qn&8191,Ft=Qn>>>13;w.negative=c.negative^g.negative,w.length=19,M=Math.imul(Ae,le),B=Math.imul(Ae,ye),B=B+Math.imul(ue,le)|0,k=Math.imul(ue,ye);var Ns=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(Ns>>>26)|0,Ns&=67108863,M=Math.imul(he,le),B=Math.imul(he,ye),B=B+Math.imul(de,le)|0,k=Math.imul(de,ye),M=M+Math.imul(Ae,Ee)|0,B=B+Math.imul(Ae,ge)|0,B=B+Math.imul(ue,Ee)|0,k=k+Math.imul(ue,ge)|0;var Ai=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(Ai>>>26)|0,Ai&=67108863,M=Math.imul(Ie,le),B=Math.imul(Ie,ye),B=B+Math.imul(be,le)|0,k=Math.imul(be,ye),M=M+Math.imul(he,Ee)|0,B=B+Math.imul(he,ge)|0,B=B+Math.imul(de,Ee)|0,k=k+Math.imul(de,ge)|0,M=M+Math.imul(Ae,Je)|0,B=B+Math.imul(Ae,tt)|0,B=B+Math.imul(ue,Je)|0,k=k+Math.imul(ue,tt)|0;var Ms=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(Ms>>>26)|0,Ms&=67108863,M=Math.imul(Qe,le),B=Math.imul(Qe,ye),B=B+Math.imul(_e,le)|0,k=Math.imul(_e,ye),M=M+Math.imul(Ie,Ee)|0,B=B+Math.imul(Ie,ge)|0,B=B+Math.imul(be,Ee)|0,k=k+Math.imul(be,ge)|0,M=M+Math.imul(he,Je)|0,B=B+Math.imul(he,tt)|0,B=B+Math.imul(de,Je)|0,k=k+Math.imul(de,tt)|0,M=M+Math.imul(Ae,Ze)|0,B=B+Math.imul(Ae,rt)|0,B=B+Math.imul(ue,Ze)|0,k=k+Math.imul(ue,rt)|0;var Fs=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(Fs>>>26)|0,Fs&=67108863,M=Math.imul(Ge,le),B=Math.imul(Ge,ye),B=B+Math.imul(Ue,le)|0,k=Math.imul(Ue,ye),M=M+Math.imul(Qe,Ee)|0,B=B+Math.imul(Qe,ge)|0,B=B+Math.imul(_e,Ee)|0,k=k+Math.imul(_e,ge)|0,M=M+Math.imul(Ie,Je)|0,B=B+Math.imul(Ie,tt)|0,B=B+Math.imul(be,Je)|0,k=k+Math.imul(be,tt)|0,M=M+Math.imul(he,Ze)|0,B=B+Math.imul(he,rt)|0,B=B+Math.imul(de,Ze)|0,k=k+Math.imul(de,rt)|0,M=M+Math.imul(Ae,nt)|0,B=B+Math.imul(Ae,it)|0,B=B+Math.imul(ue,nt)|0,k=k+Math.imul(ue,it)|0;var ks=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(ks>>>26)|0,ks&=67108863,M=Math.imul(Te,le),B=Math.imul(Te,ye),B=B+Math.imul(De,le)|0,k=Math.imul(De,ye),M=M+Math.imul(Ge,Ee)|0,B=B+Math.imul(Ge,ge)|0,B=B+Math.imul(Ue,Ee)|0,k=k+Math.imul(Ue,ge)|0,M=M+Math.imul(Qe,Je)|0,B=B+Math.imul(Qe,tt)|0,B=B+Math.imul(_e,Je)|0,k=k+Math.imul(_e,tt)|0,M=M+Math.imul(Ie,Ze)|0,B=B+Math.imul(Ie,rt)|0,B=B+Math.imul(be,Ze)|0,k=k+Math.imul(be,rt)|0,M=M+Math.imul(he,nt)|0,B=B+Math.imul(he,it)|0,B=B+Math.imul(de,nt)|0,k=k+Math.imul(de,it)|0,M=M+Math.imul(Ae,ze)|0,B=B+Math.imul(Ae,Ke)|0,B=B+Math.imul(ue,ze)|0,k=k+Math.imul(ue,Ke)|0;var Us=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(Us>>>26)|0,Us&=67108863,M=Math.imul(ve,le),B=Math.imul(ve,ye),B=B+Math.imul(He,le)|0,k=Math.imul(He,ye),M=M+Math.imul(Te,Ee)|0,B=B+Math.imul(Te,ge)|0,B=B+Math.imul(De,Ee)|0,k=k+Math.imul(De,ge)|0,M=M+Math.imul(Ge,Je)|0,B=B+Math.imul(Ge,tt)|0,B=B+Math.imul(Ue,Je)|0,k=k+Math.imul(Ue,tt)|0,M=M+Math.imul(Qe,Ze)|0,B=B+Math.imul(Qe,rt)|0,B=B+Math.imul(_e,Ze)|0,k=k+Math.imul(_e,rt)|0,M=M+Math.imul(Ie,nt)|0,B=B+Math.imul(Ie,it)|0,B=B+Math.imul(be,nt)|0,k=k+Math.imul(be,it)|0,M=M+Math.imul(he,ze)|0,B=B+Math.imul(he,Ke)|0,B=B+Math.imul(de,ze)|0,k=k+Math.imul(de,Ke)|0,M=M+Math.imul(Ae,xe)|0,B=B+Math.imul(Ae,$e)|0,B=B+Math.imul(ue,xe)|0,k=k+Math.imul(ue,$e)|0;var xs=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(xs>>>26)|0,xs&=67108863,M=Math.imul(Ne,le),B=Math.imul(Ne,ye),B=B+Math.imul(Ve,le)|0,k=Math.imul(Ve,ye),M=M+Math.imul(ve,Ee)|0,B=B+Math.imul(ve,ge)|0,B=B+Math.imul(He,Ee)|0,k=k+Math.imul(He,ge)|0,M=M+Math.imul(Te,Je)|0,B=B+Math.imul(Te,tt)|0,B=B+Math.imul(De,Je)|0,k=k+Math.imul(De,tt)|0,M=M+Math.imul(Ge,Ze)|0,B=B+Math.imul(Ge,rt)|0,B=B+Math.imul(Ue,Ze)|0,k=k+Math.imul(Ue,rt)|0,M=M+Math.imul(Qe,nt)|0,B=B+Math.imul(Qe,it)|0,B=B+Math.imul(_e,nt)|0,k=k+Math.imul(_e,it)|0,M=M+Math.imul(Ie,ze)|0,B=B+Math.imul(Ie,Ke)|0,B=B+Math.imul(be,ze)|0,k=k+Math.imul(be,Ke)|0,M=M+Math.imul(he,xe)|0,B=B+Math.imul(he,$e)|0,B=B+Math.imul(de,xe)|0,k=k+Math.imul(de,$e)|0,M=M+Math.imul(Ae,st)|0,B=B+Math.imul(Ae,Le)|0,B=B+Math.imul(ue,st)|0,k=k+Math.imul(ue,Le)|0;var Ji=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(Ji>>>26)|0,Ji&=67108863,M=Math.imul(m,le),B=Math.imul(m,ye),B=B+Math.imul(Q,le)|0,k=Math.imul(Q,ye),M=M+Math.imul(Ne,Ee)|0,B=B+Math.imul(Ne,ge)|0,B=B+Math.imul(Ve,Ee)|0,k=k+Math.imul(Ve,ge)|0,M=M+Math.imul(ve,Je)|0,B=B+Math.imul(ve,tt)|0,B=B+Math.imul(He,Je)|0,k=k+Math.imul(He,tt)|0,M=M+Math.imul(Te,Ze)|0,B=B+Math.imul(Te,rt)|0,B=B+Math.imul(De,Ze)|0,k=k+Math.imul(De,rt)|0,M=M+Math.imul(Ge,nt)|0,B=B+Math.imul(Ge,it)|0,B=B+Math.imul(Ue,nt)|0,k=k+Math.imul(Ue,it)|0,M=M+Math.imul(Qe,ze)|0,B=B+Math.imul(Qe,Ke)|0,B=B+Math.imul(_e,ze)|0,k=k+Math.imul(_e,Ke)|0,M=M+Math.imul(Ie,xe)|0,B=B+Math.imul(Ie,$e)|0,B=B+Math.imul(be,xe)|0,k=k+Math.imul(be,$e)|0,M=M+Math.imul(he,st)|0,B=B+Math.imul(he,Le)|0,B=B+Math.imul(de,st)|0,k=k+Math.imul(de,Le)|0,M=M+Math.imul(Ae,Pe)|0,B=B+Math.imul(Ae,Xe)|0,B=B+Math.imul(ue,Pe)|0,k=k+Math.imul(ue,Xe)|0;var ji=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(ji>>>26)|0,ji&=67108863,M=Math.imul(W,le),B=Math.imul(W,ye),B=B+Math.imul(z,le)|0,k=Math.imul(z,ye),M=M+Math.imul(m,Ee)|0,B=B+Math.imul(m,ge)|0,B=B+Math.imul(Q,Ee)|0,k=k+Math.imul(Q,ge)|0,M=M+Math.imul(Ne,Je)|0,B=B+Math.imul(Ne,tt)|0,B=B+Math.imul(Ve,Je)|0,k=k+Math.imul(Ve,tt)|0,M=M+Math.imul(ve,Ze)|0,B=B+Math.imul(ve,rt)|0,B=B+Math.imul(He,Ze)|0,k=k+Math.imul(He,rt)|0,M=M+Math.imul(Te,nt)|0,B=B+Math.imul(Te,it)|0,B=B+Math.imul(De,nt)|0,k=k+Math.imul(De,it)|0,M=M+Math.imul(Ge,ze)|0,B=B+Math.imul(Ge,Ke)|0,B=B+Math.imul(Ue,ze)|0,k=k+Math.imul(Ue,Ke)|0,M=M+Math.imul(Qe,xe)|0,B=B+Math.imul(Qe,$e)|0,B=B+Math.imul(_e,xe)|0,k=k+Math.imul(_e,$e)|0,M=M+Math.imul(Ie,st)|0,B=B+Math.imul(Ie,Le)|0,B=B+Math.imul(be,st)|0,k=k+Math.imul(be,Le)|0,M=M+Math.imul(he,Pe)|0,B=B+Math.imul(he,Xe)|0,B=B+Math.imul(de,Pe)|0,k=k+Math.imul(de,Xe)|0,M=M+Math.imul(Ae,xt)|0,B=B+Math.imul(Ae,Ft)|0,B=B+Math.imul(ue,xt)|0,k=k+Math.imul(ue,Ft)|0;var Fo=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(Fo>>>26)|0,Fo&=67108863,M=Math.imul(W,Ee),B=Math.imul(W,ge),B=B+Math.imul(z,Ee)|0,k=Math.imul(z,ge),M=M+Math.imul(m,Je)|0,B=B+Math.imul(m,tt)|0,B=B+Math.imul(Q,Je)|0,k=k+Math.imul(Q,tt)|0,M=M+Math.imul(Ne,Ze)|0,B=B+Math.imul(Ne,rt)|0,B=B+Math.imul(Ve,Ze)|0,k=k+Math.imul(Ve,rt)|0,M=M+Math.imul(ve,nt)|0,B=B+Math.imul(ve,it)|0,B=B+Math.imul(He,nt)|0,k=k+Math.imul(He,it)|0,M=M+Math.imul(Te,ze)|0,B=B+Math.imul(Te,Ke)|0,B=B+Math.imul(De,ze)|0,k=k+Math.imul(De,Ke)|0,M=M+Math.imul(Ge,xe)|0,B=B+Math.imul(Ge,$e)|0,B=B+Math.imul(Ue,xe)|0,k=k+Math.imul(Ue,$e)|0,M=M+Math.imul(Qe,st)|0,B=B+Math.imul(Qe,Le)|0,B=B+Math.imul(_e,st)|0,k=k+Math.imul(_e,Le)|0,M=M+Math.imul(Ie,Pe)|0,B=B+Math.imul(Ie,Xe)|0,B=B+Math.imul(be,Pe)|0,k=k+Math.imul(be,Xe)|0,M=M+Math.imul(he,xt)|0,B=B+Math.imul(he,Ft)|0,B=B+Math.imul(de,xt)|0,k=k+Math.imul(de,Ft)|0;var ko=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(ko>>>26)|0,ko&=67108863,M=Math.imul(W,Je),B=Math.imul(W,tt),B=B+Math.imul(z,Je)|0,k=Math.imul(z,tt),M=M+Math.imul(m,Ze)|0,B=B+Math.imul(m,rt)|0,B=B+Math.imul(Q,Ze)|0,k=k+Math.imul(Q,rt)|0,M=M+Math.imul(Ne,nt)|0,B=B+Math.imul(Ne,it)|0,B=B+Math.imul(Ve,nt)|0,k=k+Math.imul(Ve,it)|0,M=M+Math.imul(ve,ze)|0,B=B+Math.imul(ve,Ke)|0,B=B+Math.imul(He,ze)|0,k=k+Math.imul(He,Ke)|0,M=M+Math.imul(Te,xe)|0,B=B+Math.imul(Te,$e)|0,B=B+Math.imul(De,xe)|0,k=k+Math.imul(De,$e)|0,M=M+Math.imul(Ge,st)|0,B=B+Math.imul(Ge,Le)|0,B=B+Math.imul(Ue,st)|0,k=k+Math.imul(Ue,Le)|0,M=M+Math.imul(Qe,Pe)|0,B=B+Math.imul(Qe,Xe)|0,B=B+Math.imul(_e,Pe)|0,k=k+Math.imul(_e,Xe)|0,M=M+Math.imul(Ie,xt)|0,B=B+Math.imul(Ie,Ft)|0,B=B+Math.imul(be,xt)|0,k=k+Math.imul(be,Ft)|0;var Uo=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(Uo>>>26)|0,Uo&=67108863,M=Math.imul(W,Ze),B=Math.imul(W,rt),B=B+Math.imul(z,Ze)|0,k=Math.imul(z,rt),M=M+Math.imul(m,nt)|0,B=B+Math.imul(m,it)|0,B=B+Math.imul(Q,nt)|0,k=k+Math.imul(Q,it)|0,M=M+Math.imul(Ne,ze)|0,B=B+Math.imul(Ne,Ke)|0,B=B+Math.imul(Ve,ze)|0,k=k+Math.imul(Ve,Ke)|0,M=M+Math.imul(ve,xe)|0,B=B+Math.imul(ve,$e)|0,B=B+Math.imul(He,xe)|0,k=k+Math.imul(He,$e)|0,M=M+Math.imul(Te,st)|0,B=B+Math.imul(Te,Le)|0,B=B+Math.imul(De,st)|0,k=k+Math.imul(De,Le)|0,M=M+Math.imul(Ge,Pe)|0,B=B+Math.imul(Ge,Xe)|0,B=B+Math.imul(Ue,Pe)|0,k=k+Math.imul(Ue,Xe)|0,M=M+Math.imul(Qe,xt)|0,B=B+Math.imul(Qe,Ft)|0,B=B+Math.imul(_e,xt)|0,k=k+Math.imul(_e,Ft)|0;var xo=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(xo>>>26)|0,xo&=67108863,M=Math.imul(W,nt),B=Math.imul(W,it),B=B+Math.imul(z,nt)|0,k=Math.imul(z,it),M=M+Math.imul(m,ze)|0,B=B+Math.imul(m,Ke)|0,B=B+Math.imul(Q,ze)|0,k=k+Math.imul(Q,Ke)|0,M=M+Math.imul(Ne,xe)|0,B=B+Math.imul(Ne,$e)|0,B=B+Math.imul(Ve,xe)|0,k=k+Math.imul(Ve,$e)|0,M=M+Math.imul(ve,st)|0,B=B+Math.imul(ve,Le)|0,B=B+Math.imul(He,st)|0,k=k+Math.imul(He,Le)|0,M=M+Math.imul(Te,Pe)|0,B=B+Math.imul(Te,Xe)|0,B=B+Math.imul(De,Pe)|0,k=k+Math.imul(De,Xe)|0,M=M+Math.imul(Ge,xt)|0,B=B+Math.imul(Ge,Ft)|0,B=B+Math.imul(Ue,xt)|0,k=k+Math.imul(Ue,Ft)|0;var Ls=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(Ls>>>26)|0,Ls&=67108863,M=Math.imul(W,ze),B=Math.imul(W,Ke),B=B+Math.imul(z,ze)|0,k=Math.imul(z,Ke),M=M+Math.imul(m,xe)|0,B=B+Math.imul(m,$e)|0,B=B+Math.imul(Q,xe)|0,k=k+Math.imul(Q,$e)|0,M=M+Math.imul(Ne,st)|0,B=B+Math.imul(Ne,Le)|0,B=B+Math.imul(Ve,st)|0,k=k+Math.imul(Ve,Le)|0,M=M+Math.imul(ve,Pe)|0,B=B+Math.imul(ve,Xe)|0,B=B+Math.imul(He,Pe)|0,k=k+Math.imul(He,Xe)|0,M=M+Math.imul(Te,xt)|0,B=B+Math.imul(Te,Ft)|0,B=B+Math.imul(De,xt)|0,k=k+Math.imul(De,Ft)|0;var wn=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(wn>>>26)|0,wn&=67108863,M=Math.imul(W,xe),B=Math.imul(W,$e),B=B+Math.imul(z,xe)|0,k=Math.imul(z,$e),M=M+Math.imul(m,st)|0,B=B+Math.imul(m,Le)|0,B=B+Math.imul(Q,st)|0,k=k+Math.imul(Q,Le)|0,M=M+Math.imul(Ne,Pe)|0,B=B+Math.imul(Ne,Xe)|0,B=B+Math.imul(Ve,Pe)|0,k=k+Math.imul(Ve,Xe)|0,M=M+Math.imul(ve,xt)|0,B=B+Math.imul(ve,Ft)|0,B=B+Math.imul(He,xt)|0,k=k+Math.imul(He,Ft)|0;var Lo=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(Lo>>>26)|0,Lo&=67108863,M=Math.imul(W,st),B=Math.imul(W,Le),B=B+Math.imul(z,st)|0,k=Math.imul(z,Le),M=M+Math.imul(m,Pe)|0,B=B+Math.imul(m,Xe)|0,B=B+Math.imul(Q,Pe)|0,k=k+Math.imul(Q,Xe)|0,M=M+Math.imul(Ne,xt)|0,B=B+Math.imul(Ne,Ft)|0,B=B+Math.imul(Ve,xt)|0,k=k+Math.imul(Ve,Ft)|0;var xa=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(xa>>>26)|0,xa&=67108863,M=Math.imul(W,Pe),B=Math.imul(W,Xe),B=B+Math.imul(z,Pe)|0,k=Math.imul(z,Xe),M=M+Math.imul(m,xt)|0,B=B+Math.imul(m,Ft)|0,B=B+Math.imul(Q,xt)|0,k=k+Math.imul(Q,Ft)|0;var Po=(D+M|0)+((B&8191)<<13)|0;D=(k+(B>>>13)|0)+(Po>>>26)|0,Po&=67108863,M=Math.imul(W,xt),B=Math.imul(W,Ft),B=B+Math.imul(z,xt)|0,k=Math.imul(z,Ft);var La=(D+M|0)+((B&8191)<<13)|0;return D=(k+(B>>>13)|0)+(La>>>26)|0,La&=67108863,h[0]=Ns,h[1]=Ai,h[2]=Ms,h[3]=Fs,h[4]=ks,h[5]=Us,h[6]=xs,h[7]=Ji,h[8]=ji,h[9]=Fo,h[10]=ko,h[11]=Uo,h[12]=xo,h[13]=Ls,h[14]=wn,h[15]=Lo,h[16]=xa,h[17]=Po,h[18]=La,D!==0&&(h[19]=D,w.length++),w};Math.imul||(x=O);function G(b,c,g){g.negative=c.negative^b.negative,g.length=b.length+c.length;for(var w=0,R=0,C=0;C<g.length-1;C++){var h=R;R=0;for(var D=w&67108863,M=Math.min(C,c.length-1),B=Math.max(0,C-b.length+1);B<=M;B++){var k=C-B,ne=b.words[k]|0,Ae=c.words[B]|0,ue=ne*Ae,pe=ue&67108863;h=h+(ue/67108864|0)|0,pe=pe+D|0,D=pe&67108863,h=h+(pe>>>26)|0,R+=h>>>26,h&=67108863}g.words[C]=D,w=h,h=R}return w!==0?g.words[C]=w:g.length--,g._strip()}function Y(b,c,g){return G(b,c,g)}i.prototype.mulTo=function(c,g){var w,R=this.length+c.length;return this.length===10&&c.length===10?w=x(this,c,g):R<63?w=O(this,c,g):R<1024?w=G(this,c,g):w=Y(this,c,g),w};function X(b,c){this.x=b,this.y=c}X.prototype.makeRBT=function(c){for(var g=new Array(c),w=i.prototype._countBits(c)-1,R=0;R<c;R++)g[R]=this.revBin(R,w,c);return g},X.prototype.revBin=function(c,g,w){if(c===0||c===w-1)return c;for(var R=0,C=0;C<g;C++)R|=(c&1)<<g-C-1,c>>=1;return R},X.prototype.permute=function(c,g,w,R,C,h){for(var D=0;D<h;D++)R[D]=g[c[D]],C[D]=w[c[D]]},X.prototype.transform=function(c,g,w,R,C,h){this.permute(h,c,g,w,R,C);for(var D=1;D<C;D<<=1)for(var M=D<<1,B=Math.cos(2*Math.PI/M),k=Math.sin(2*Math.PI/M),ne=0;ne<C;ne+=M)for(var Ae=B,ue=k,pe=0;pe<D;pe++){var he=w[ne+pe],de=R[ne+pe],Qt=w[ne+pe+D],Ie=R[ne+pe+D],be=Ae*Qt-ue*Ie;Ie=Ae*Ie+ue*Qt,Qt=be,w[ne+pe]=he+Qt,R[ne+pe]=de+Ie,w[ne+pe+D]=he-Qt,R[ne+pe+D]=de-Ie,pe!==M&&(be=B*Ae-k*ue,ue=B*ue+k*Ae,Ae=be)}},X.prototype.guessLen13b=function(c,g){var w=Math.max(g,c)|1,R=w&1,C=0;for(w=w/2|0;w;w=w>>>1)C++;return 1<<C+1+R},X.prototype.conjugate=function(c,g,w){if(!(w<=1))for(var R=0;R<w/2;R++){var C=c[R];c[R]=c[w-R-1],c[w-R-1]=C,C=g[R],g[R]=-g[w-R-1],g[w-R-1]=-C}},X.prototype.normalize13b=function(c,g){for(var w=0,R=0;R<g/2;R++){var C=Math.round(c[2*R+1]/g)*8192+Math.round(c[2*R]/g)+w;c[R]=C&67108863,C<67108864?w=0:w=C/67108864|0}return c},X.prototype.convert13b=function(c,g,w,R){for(var C=0,h=0;h<g;h++)C=C+(c[h]|0),w[2*h]=C&8191,C=C>>>13,w[2*h+1]=C&8191,C=C>>>13;for(h=2*g;h<R;++h)w[h]=0;r(C===0),r((C&-8192)===0)},X.prototype.stub=function(c){for(var g=new Array(c),w=0;w<c;w++)g[w]=0;return g},X.prototype.mulp=function(c,g,w){var R=2*this.guessLen13b(c.length,g.length),C=this.makeRBT(R),h=this.stub(R),D=new Array(R),M=new Array(R),B=new Array(R),k=new Array(R),ne=new Array(R),Ae=new Array(R),ue=w.words;ue.length=R,this.convert13b(c.words,c.length,D,R),this.convert13b(g.words,g.length,k,R),this.transform(D,h,M,B,R,C),this.transform(k,h,ne,Ae,R,C);for(var pe=0;pe<R;pe++){var he=M[pe]*ne[pe]-B[pe]*Ae[pe];B[pe]=M[pe]*Ae[pe]+B[pe]*ne[pe],M[pe]=he}return this.conjugate(M,B,R),this.transform(M,B,ue,h,R,C),this.conjugate(ue,h,R),this.normalize13b(ue,R),w.negative=c.negative^g.negative,w.length=c.length+g.length,w._strip()},i.prototype.mul=function(c){var g=new i(null);return g.words=new Array(this.length+c.length),this.mulTo(c,g)},i.prototype.mulf=function(c){var g=new i(null);return g.words=new Array(this.length+c.length),Y(this,c,g)},i.prototype.imul=function(c){return this.clone().mulTo(c,this)},i.prototype.imuln=function(c){var g=c<0;g&&(c=-c),r(typeof c=="number"),r(c<67108864);for(var w=0,R=0;R<this.length;R++){var C=(this.words[R]|0)*c,h=(C&67108863)+(w&67108863);w>>=26,w+=C/67108864|0,w+=h>>>26,this.words[R]=h&67108863}return w!==0&&(this.words[R]=w,this.length++),this.length=c===0?1:this.length,g?this.ineg():this},i.prototype.muln=function(c){return this.clone().imuln(c)},i.prototype.sqr=function(){return this.mul(this)},i.prototype.isqr=function(){return this.imul(this.clone())},i.prototype.pow=function(c){var g=N(c);if(g.length===0)return new i(1);for(var w=this,R=0;R<g.length&&g[R]===0;R++,w=w.sqr());if(++R<g.length)for(var C=w.sqr();R<g.length;R++,C=C.sqr())g[R]!==0&&(w=w.mul(C));return w},i.prototype.iushln=function(c){r(typeof c=="number"&&c>=0);var g=c%26,w=(c-g)/26,R=67108863>>>26-g<<26-g,C;if(g!==0){var h=0;for(C=0;C<this.length;C++){var D=this.words[C]&R,M=(this.words[C]|0)-D<<g;this.words[C]=M|h,h=D>>>26-g}h&&(this.words[C]=h,this.length++)}if(w!==0){for(C=this.length-1;C>=0;C--)this.words[C+w]=this.words[C];for(C=0;C<w;C++)this.words[C]=0;this.length+=w}return this._strip()},i.prototype.ishln=function(c){return r(this.negative===0),this.iushln(c)},i.prototype.iushrn=function(c,g,w){r(typeof c=="number"&&c>=0);var R;g?R=(g-g%26)/26:R=0;var C=c%26,h=Math.min((c-C)/26,this.length),D=67108863^67108863>>>C<<C,M=w;if(R-=h,R=Math.max(0,R),M){for(var B=0;B<h;B++)M.words[B]=this.words[B];M.length=h}if(h!==0)if(this.length>h)for(this.length-=h,B=0;B<this.length;B++)this.words[B]=this.words[B+h];else this.words[0]=0,this.length=1;var k=0;for(B=this.length-1;B>=0&&(k!==0||B>=R);B--){var ne=this.words[B]|0;this.words[B]=k<<26-C|ne>>>C,k=ne&D}return M&&k!==0&&(M.words[M.length++]=k),this.length===0&&(this.words[0]=0,this.length=1),this._strip()},i.prototype.ishrn=function(c,g,w){return r(this.negative===0),this.iushrn(c,g,w)},i.prototype.shln=function(c){return this.clone().ishln(c)},i.prototype.ushln=function(c){return this.clone().iushln(c)},i.prototype.shrn=function(c){return this.clone().ishrn(c)},i.prototype.ushrn=function(c){return this.clone().iushrn(c)},i.prototype.testn=function(c){r(typeof c=="number"&&c>=0);var g=c%26,w=(c-g)/26,R=1<<g;if(this.length<=w)return!1;var C=this.words[w];return!!(C&R)},i.prototype.imaskn=function(c){r(typeof c=="number"&&c>=0);var g=c%26,w=(c-g)/26;if(r(this.negative===0,"imaskn works only with positive numbers"),this.length<=w)return this;if(g!==0&&w++,this.length=Math.min(w,this.length),g!==0){var R=67108863^67108863>>>g<<g;this.words[this.length-1]&=R}return this.length===0&&(this.words[0]=0,this.length=1),this._strip()},i.prototype.maskn=function(c){return this.clone().imaskn(c)},i.prototype.iaddn=function(c){return r(typeof c=="number"),r(c<67108864),c<0?this.isubn(-c):this.negative!==0?this.length===1&&(this.words[0]|0)<=c?(this.words[0]=c-(this.words[0]|0),this.negative=0,this):(this.negative=0,this.isubn(c),this.negative=1,this):this._iaddn(c)},i.prototype._iaddn=function(c){this.words[0]+=c;for(var g=0;g<this.length&&this.words[g]>=67108864;g++)this.words[g]-=67108864,g===this.length-1?this.words[g+1]=1:this.words[g+1]++;return this.length=Math.max(this.length,g+1),this},i.prototype.isubn=function(c){if(r(typeof c=="number"),r(c<67108864),c<0)return this.iaddn(-c);if(this.negative!==0)return this.negative=0,this.iaddn(c),this.negative=1,this;if(this.words[0]-=c,this.length===1&&this.words[0]<0)this.words[0]=-this.words[0],this.negative=1;else for(var g=0;g<this.length&&this.words[g]<0;g++)this.words[g]+=67108864,this.words[g+1]-=1;return this._strip()},i.prototype.addn=function(c){return this.clone().iaddn(c)},i.prototype.subn=function(c){return this.clone().isubn(c)},i.prototype.iabs=function(){return this.negative=0,this},i.prototype.abs=function(){return this.clone().iabs()},i.prototype._ishlnsubmul=function(c,g,w){var R=c.length+w,C;this._expand(R);var h,D=0;for(C=0;C<c.length;C++){h=(this.words[C+w]|0)+D;var M=(c.words[C]|0)*g;h-=M&67108863,D=(h>>26)-(M/67108864|0),this.words[C+w]=h&67108863}for(;C<this.length-w;C++)h=(this.words[C+w]|0)+D,D=h>>26,this.words[C+w]=h&67108863;if(D===0)return this._strip();for(r(D===-1),D=0,C=0;C<this.length;C++)h=-(this.words[C]|0)+D,D=h>>26,this.words[C]=h&67108863;return this.negative=1,this._strip()},i.prototype._wordDiv=function(c,g){var w=this.length-c.length,R=this.clone(),C=c,h=C.words[C.length-1]|0,D=this._countBits(h);w=26-D,w!==0&&(C=C.ushln(w),R.iushln(w),h=C.words[C.length-1]|0);var M=R.length-C.length,B;if(g!=="mod"){B=new i(null),B.length=M+1,B.words=new Array(B.length);for(var k=0;k<B.length;k++)B.words[k]=0}var ne=R.clone()._ishlnsubmul(C,1,M);ne.negative===0&&(R=ne,B&&(B.words[M]=1));for(var Ae=M-1;Ae>=0;Ae--){var ue=(R.words[C.length+Ae]|0)*67108864+(R.words[C.length+Ae-1]|0);for(ue=Math.min(ue/h|0,67108863),R._ishlnsubmul(C,ue,Ae);R.negative!==0;)ue--,R.negative=0,R._ishlnsubmul(C,1,Ae),R.isZero()||(R.negative^=1);B&&(B.words[Ae]=ue)}return B&&B._strip(),R._strip(),g!=="div"&&w!==0&&R.iushrn(w),{div:B||null,mod:R}},i.prototype.divmod=function(c,g,w){if(r(!c.isZero()),this.isZero())return{div:new i(0),mod:new i(0)};var R,C,h;return this.negative!==0&&c.negative===0?(h=this.neg().divmod(c,g),g!=="mod"&&(R=h.div.neg()),g!=="div"&&(C=h.mod.neg(),w&&C.negative!==0&&C.iadd(c)),{div:R,mod:C}):this.negative===0&&c.negative!==0?(h=this.divmod(c.neg(),g),g!=="mod"&&(R=h.div.neg()),{div:R,mod:h.mod}):(this.negative&c.negative)!==0?(h=this.neg().divmod(c.neg(),g),g!=="div"&&(C=h.mod.neg(),w&&C.negative!==0&&C.isub(c)),{div:h.div,mod:C}):c.length>this.length||this.cmp(c)<0?{div:new i(0),mod:this}:c.length===1?g==="div"?{div:this.divn(c.words[0]),mod:null}:g==="mod"?{div:null,mod:new i(this.modrn(c.words[0]))}:{div:this.divn(c.words[0]),mod:new i(this.modrn(c.words[0]))}:this._wordDiv(c,g)},i.prototype.div=function(c){return this.divmod(c,"div",!1).div},i.prototype.mod=function(c){return this.divmod(c,"mod",!1).mod},i.prototype.umod=function(c){return this.divmod(c,"mod",!0).mod},i.prototype.divRound=function(c){var g=this.divmod(c);if(g.mod.isZero())return g.div;var w=g.div.negative!==0?g.mod.isub(c):g.mod,R=c.ushrn(1),C=c.andln(1),h=w.cmp(R);return h<0||C===1&&h===0?g.div:g.div.negative!==0?g.div.isubn(1):g.div.iaddn(1)},i.prototype.modrn=function(c){var g=c<0;g&&(c=-c),r(c<=67108863);for(var w=(1<<26)%c,R=0,C=this.length-1;C>=0;C--)R=(w*R+(this.words[C]|0))%c;return g?-R:R},i.prototype.modn=function(c){return this.modrn(c)},i.prototype.idivn=function(c){var g=c<0;g&&(c=-c),r(c<=67108863);for(var w=0,R=this.length-1;R>=0;R--){var C=(this.words[R]|0)+w*67108864;this.words[R]=C/c|0,w=C%c}return this._strip(),g?this.ineg():this},i.prototype.divn=function(c){return this.clone().idivn(c)},i.prototype.egcd=function(c){r(c.negative===0),r(!c.isZero());var g=this,w=c.clone();g.negative!==0?g=g.umod(c):g=g.clone();for(var R=new i(1),C=new i(0),h=new i(0),D=new i(1),M=0;g.isEven()&&w.isEven();)g.iushrn(1),w.iushrn(1),++M;for(var B=w.clone(),k=g.clone();!g.isZero();){for(var ne=0,Ae=1;(g.words[0]&Ae)===0&&ne<26;++ne,Ae<<=1);if(ne>0)for(g.iushrn(ne);ne-- >0;)(R.isOdd()||C.isOdd())&&(R.iadd(B),C.isub(k)),R.iushrn(1),C.iushrn(1);for(var ue=0,pe=1;(w.words[0]&pe)===0&&ue<26;++ue,pe<<=1);if(ue>0)for(w.iushrn(ue);ue-- >0;)(h.isOdd()||D.isOdd())&&(h.iadd(B),D.isub(k)),h.iushrn(1),D.iushrn(1);g.cmp(w)>=0?(g.isub(w),R.isub(h),C.isub(D)):(w.isub(g),h.isub(R),D.isub(C))}return{a:h,b:D,gcd:w.iushln(M)}},i.prototype._invmp=function(c){r(c.negative===0),r(!c.isZero());var g=this,w=c.clone();g.negative!==0?g=g.umod(c):g=g.clone();for(var R=new i(1),C=new i(0),h=w.clone();g.cmpn(1)>0&&w.cmpn(1)>0;){for(var D=0,M=1;(g.words[0]&M)===0&&D<26;++D,M<<=1);if(D>0)for(g.iushrn(D);D-- >0;)R.isOdd()&&R.iadd(h),R.iushrn(1);for(var B=0,k=1;(w.words[0]&k)===0&&B<26;++B,k<<=1);if(B>0)for(w.iushrn(B);B-- >0;)C.isOdd()&&C.iadd(h),C.iushrn(1);g.cmp(w)>=0?(g.isub(w),R.isub(C)):(w.isub(g),C.isub(R))}var ne;return g.cmpn(1)===0?ne=R:ne=C,ne.cmpn(0)<0&&ne.iadd(c),ne},i.prototype.gcd=function(c){if(this.isZero())return c.abs();if(c.isZero())return this.abs();var g=this.clone(),w=c.clone();g.negative=0,w.negative=0;for(var R=0;g.isEven()&&w.isEven();R++)g.iushrn(1),w.iushrn(1);do{for(;g.isEven();)g.iushrn(1);for(;w.isEven();)w.iushrn(1);var C=g.cmp(w);if(C<0){var h=g;g=w,w=h}else if(C===0||w.cmpn(1)===0)break;g.isub(w)}while(!0);return w.iushln(R)},i.prototype.invm=function(c){return this.egcd(c).a.umod(c)},i.prototype.isEven=function(){return(this.words[0]&1)===0},i.prototype.isOdd=function(){return(this.words[0]&1)===1},i.prototype.andln=function(c){return this.words[0]&c},i.prototype.bincn=function(c){r(typeof c=="number");var g=c%26,w=(c-g)/26,R=1<<g;if(this.length<=w)return this._expand(w+1),this.words[w]|=R,this;for(var C=R,h=w;C!==0&&h<this.length;h++){var D=this.words[h]|0;D+=C,C=D>>>26,D&=67108863,this.words[h]=D}return C!==0&&(this.words[h]=C,this.length++),this},i.prototype.isZero=function(){return this.length===1&&this.words[0]===0},i.prototype.cmpn=function(c){var g=c<0;if(this.negative!==0&&!g)return-1;if(this.negative===0&&g)return 1;this._strip();var w;if(this.length>1)w=1;else{g&&(c=-c),r(c<=67108863,"Number is too big");var R=this.words[0]|0;w=R===c?0:R<c?-1:1}return this.negative!==0?-w|0:w},i.prototype.cmp=function(c){if(this.negative!==0&&c.negative===0)return-1;if(this.negative===0&&c.negative!==0)return 1;var g=this.ucmp(c);return this.negative!==0?-g|0:g},i.prototype.ucmp=function(c){if(this.length>c.length)return 1;if(this.length<c.length)return-1;for(var g=0,w=this.length-1;w>=0;w--){var R=this.words[w]|0,C=c.words[w]|0;if(R!==C){R<C?g=-1:R>C&&(g=1);break}}return g},i.prototype.gtn=function(c){return this.cmpn(c)===1},i.prototype.gt=function(c){return this.cmp(c)===1},i.prototype.gten=function(c){return this.cmpn(c)>=0},i.prototype.gte=function(c){return this.cmp(c)>=0},i.prototype.ltn=function(c){return this.cmpn(c)===-1},i.prototype.lt=function(c){return this.cmp(c)===-1},i.prototype.lten=function(c){return this.cmpn(c)<=0},i.prototype.lte=function(c){return this.cmp(c)<=0},i.prototype.eqn=function(c){return this.cmpn(c)===0},i.prototype.eq=function(c){return this.cmp(c)===0},i.red=function(c){return new E(c)},i.prototype.toRed=function(c){return r(!this.red,"Already a number in reduction context"),r(this.negative===0,"red works only with positives"),c.convertTo(this)._forceRed(c)},i.prototype.fromRed=function(){return r(this.red,"fromRed works only with numbers in reduction context"),this.red.convertFrom(this)},i.prototype._forceRed=function(c){return this.red=c,this},i.prototype.forceRed=function(c){return r(!this.red,"Already a number in reduction context"),this._forceRed(c)},i.prototype.redAdd=function(c){return r(this.red,"redAdd works only with red numbers"),this.red.add(this,c)},i.prototype.redIAdd=function(c){return r(this.red,"redIAdd works only with red numbers"),this.red.iadd(this,c)},i.prototype.redSub=function(c){return r(this.red,"redSub works only with red numbers"),this.red.sub(this,c)},i.prototype.redISub=function(c){return r(this.red,"redISub works only with red numbers"),this.red.isub(this,c)},i.prototype.redShl=function(c){return r(this.red,"redShl works only with red numbers"),this.red.shl(this,c)},i.prototype.redMul=function(c){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,c),this.red.mul(this,c)},i.prototype.redIMul=function(c){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,c),this.red.imul(this,c)},i.prototype.redSqr=function(){return r(this.red,"redSqr works only with red numbers"),this.red._verify1(this),this.red.sqr(this)},i.prototype.redISqr=function(){return r(this.red,"redISqr works only with red numbers"),this.red._verify1(this),this.red.isqr(this)},i.prototype.redSqrt=function(){return r(this.red,"redSqrt works only with red numbers"),this.red._verify1(this),this.red.sqrt(this)},i.prototype.redInvm=function(){return r(this.red,"redInvm works only with red numbers"),this.red._verify1(this),this.red.invm(this)},i.prototype.redNeg=function(){return r(this.red,"redNeg works only with red numbers"),this.red._verify1(this),this.red.neg(this)},i.prototype.redPow=function(c){return r(this.red&&!c.red,"redPow(normalNum)"),this.red._verify1(this),this.red.pow(this,c)};var Z={k256:null,p224:null,p192:null,p25519:null};function j(b,c){this.name=b,this.p=new i(c,16),this.n=this.p.bitLength(),this.k=new i(1).iushln(this.n).isub(this.p),this.tmp=this._tmp()}j.prototype._tmp=function(){var c=new i(null);return c.words=new Array(Math.ceil(this.n/13)),c},j.prototype.ireduce=function(c){var g=c,w;do this.split(g,this.tmp),g=this.imulK(g),g=g.iadd(this.tmp),w=g.bitLength();while(w>this.n);var R=w<this.n?-1:g.ucmp(this.p);return R===0?(g.words[0]=0,g.length=1):R>0?g.isub(this.p):g.strip!==void 0?g.strip():g._strip(),g},j.prototype.split=function(c,g){c.iushrn(this.n,0,g)},j.prototype.imulK=function(c){return c.imul(this.k)};function se(){j.call(this,"k256","ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe fffffc2f")}n(se,j),se.prototype.split=function(c,g){for(var w=4194303,R=Math.min(c.length,9),C=0;C<R;C++)g.words[C]=c.words[C];if(g.length=R,c.length<=9){c.words[0]=0,c.length=1;return}var h=c.words[9];for(g.words[g.length++]=h&w,C=10;C<c.length;C++){var D=c.words[C]|0;c.words[C-10]=(D&w)<<4|h>>>22,h=D}h>>>=22,c.words[C-10]=h,h===0&&c.length>10?c.length-=10:c.length-=9},se.prototype.imulK=function(c){c.words[c.length]=0,c.words[c.length+1]=0,c.length+=2;for(var g=0,w=0;w<c.length;w++){var R=c.words[w]|0;g+=R*977,c.words[w]=g&67108863,g=R*64+(g/67108864|0)}return c.words[c.length-1]===0&&(c.length--,c.words[c.length-1]===0&&c.length--),c};function ie(){j.call(this,"p224","ffffffff ffffffff ffffffff ffffffff 00000000 00000000 00000001")}n(ie,j);function ce(){j.call(this,"p192","ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff")}n(ce,j);function H(){j.call(this,"25519","7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed")}n(H,j),H.prototype.imulK=function(c){for(var g=0,w=0;w<c.length;w++){var R=(c.words[w]|0)*19+g,C=R&67108863;R>>>=26,c.words[w]=C,g=R}return g!==0&&(c.words[c.length++]=g),c},i._prime=function(c){if(Z[c])return Z[c];var g;if(c==="k256")g=new se;else if(c==="p224")g=new ie;else if(c==="p192")g=new ce;else if(c==="p25519")g=new H;else throw new Error("Unknown prime "+c);return Z[c]=g,g};function E(b){if(typeof b=="string"){var c=i._prime(b);this.m=c.p,this.prime=c}else r(b.gtn(1),"modulus must be greater than 1"),this.m=b,this.prime=null}E.prototype._verify1=function(c){r(c.negative===0,"red works only with positives"),r(c.red,"red works only with red numbers")},E.prototype._verify2=function(c,g){r((c.negative|g.negative)===0,"red works only with positives"),r(c.red&&c.red===g.red,"red works only with red numbers")},E.prototype.imod=function(c){return this.prime?this.prime.ireduce(c)._forceRed(this):(f(c,c.umod(this.m)._forceRed(this)),c)},E.prototype.neg=function(c){return c.isZero()?c.clone():this.m.sub(c)._forceRed(this)},E.prototype.add=function(c,g){this._verify2(c,g);var w=c.add(g);return w.cmp(this.m)>=0&&w.isub(this.m),w._forceRed(this)},E.prototype.iadd=function(c,g){this._verify2(c,g);var w=c.iadd(g);return w.cmp(this.m)>=0&&w.isub(this.m),w},E.prototype.sub=function(c,g){this._verify2(c,g);var w=c.sub(g);return w.cmpn(0)<0&&w.iadd(this.m),w._forceRed(this)},E.prototype.isub=function(c,g){this._verify2(c,g);var w=c.isub(g);return w.cmpn(0)<0&&w.iadd(this.m),w},E.prototype.shl=function(c,g){return this._verify1(c),this.imod(c.ushln(g))},E.prototype.imul=function(c,g){return this._verify2(c,g),this.imod(c.imul(g))},E.prototype.mul=function(c,g){return this._verify2(c,g),this.imod(c.mul(g))},E.prototype.isqr=function(c){return this.imul(c,c.clone())},E.prototype.sqr=function(c){return this.mul(c,c)},E.prototype.sqrt=function(c){if(c.isZero())return c.clone();var g=this.m.andln(3);if(r(g%2===1),g===3){var w=this.m.add(new i(1)).iushrn(2);return this.pow(c,w)}for(var R=this.m.subn(1),C=0;!R.isZero()&&R.andln(1)===0;)C++,R.iushrn(1);r(!R.isZero());var h=new i(1).toRed(this),D=h.redNeg(),M=this.m.subn(1).iushrn(1),B=this.m.bitLength();for(B=new i(2*B*B).toRed(this);this.pow(B,M).cmp(D)!==0;)B.redIAdd(D);for(var k=this.pow(B,R),ne=this.pow(c,R.addn(1).iushrn(1)),Ae=this.pow(c,R),ue=C;Ae.cmp(h)!==0;){for(var pe=Ae,he=0;pe.cmp(h)!==0;he++)pe=pe.redSqr();r(he<ue);var de=this.pow(k,new i(1).iushln(ue-he-1));ne=ne.redMul(de),k=de.redSqr(),Ae=Ae.redMul(k),ue=he}return ne},E.prototype.invm=function(c){var g=c._invmp(this.m);return g.negative!==0?(g.negative=0,this.imod(g).redNeg()):this.imod(g)},E.prototype.pow=function(c,g){if(g.isZero())return new i(1).toRed(this);if(g.cmpn(1)===0)return c.clone();var w=4,R=new Array(1<<w);R[0]=new i(1).toRed(this),R[1]=c;for(var C=2;C<R.length;C++)R[C]=this.mul(R[C-1],c);var h=R[0],D=0,M=0,B=g.bitLength()%26;for(B===0&&(B=26),C=g.length-1;C>=0;C--){for(var k=g.words[C],ne=B-1;ne>=0;ne--){var Ae=k>>ne&1;if(h!==R[0]&&(h=this.sqr(h)),Ae===0&&D===0){M=0;continue}D<<=1,D|=Ae,M++,!(M!==w&&(C!==0||ne!==0))&&(h=this.mul(h,R[D]),M=0,D=0)}B=26}return h},E.prototype.convertTo=function(c){var g=c.umod(this.m);return g===c?g.clone():g},E.prototype.convertFrom=function(c){var g=c.clone();return g.red=null,g},i.mont=function(c){return new v(c)};function v(b){E.call(this,b),this.shift=this.m.bitLength(),this.shift%26!==0&&(this.shift+=26-this.shift%26),this.r=new i(1).iushln(this.shift),this.r2=this.imod(this.r.sqr()),this.rinv=this.r._invmp(this.m),this.minv=this.rinv.mul(this.r).isubn(1).div(this.m),this.minv=this.minv.umod(this.r),this.minv=this.r.sub(this.minv)}n(v,E),v.prototype.convertTo=function(c){return this.imod(c.ushln(this.shift))},v.prototype.convertFrom=function(c){var g=this.imod(c.mul(this.rinv));return g.red=null,g},v.prototype.imul=function(c,g){if(c.isZero()||g.isZero())return c.words[0]=0,c.length=1,c;var w=c.imul(g),R=w.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),C=w.isub(R).iushrn(this.shift),h=C;return C.cmp(this.m)>=0?h=C.isub(this.m):C.cmpn(0)<0&&(h=C.iadd(this.m)),h._forceRed(this)},v.prototype.mul=function(c,g){if(c.isZero()||g.isZero())return new i(0)._forceRed(this);var w=c.mul(g),R=w.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),C=w.isub(R).iushrn(this.shift),h=C;return C.cmp(this.m)>=0?h=C.isub(this.m):C.cmpn(0)<0&&(h=C.iadd(this.m)),h._forceRed(this)},v.prototype.invm=function(c){var g=this.imod(c._invmp(this.m).mul(this.r2));return g._forceRed(this)}})(typeof vS>"u"||vS,Z5)});var By=U((eMe,t9)=>{"use strict";var Oc=my(),zde=mf(),Kde=at().Buffer;function $5(e){var t=e.modulus.byteLength(),r;do r=new Oc(zde(t));while(r.cmp(e.modulus)>=0||!r.umod(e.prime1)||!r.umod(e.prime2));return r}function Xde(e){var t=$5(e),r=t.toRed(Oc.mont(e.modulus)).redPow(new Oc(e.publicExponent)).fromRed();return{blinder:r,unblinder:t.invm(e.modulus)}}function e9(e,t){var r=Xde(t),n=t.modulus.byteLength(),i=new Oc(e).mul(r.blinder).umod(t.modulus),s=i.toRed(Oc.mont(t.prime1)),o=i.toRed(Oc.mont(t.prime2)),a=t.coefficient,A=t.prime1,f=t.prime2,l=s.redPow(t.exponent1).fromRed(),p=o.redPow(t.exponent2).fromRed(),I=l.isub(p).imul(a).umod(A).imul(f);return p.iadd(I).imul(r.unblinder).umod(t.modulus).toArrayLike(Kde,"be",n)}e9.getr=$5;t9.exports=e9});var r9=U((tMe,Zde)=>{Zde.exports={name:"elliptic",version:"6.6.1",description:"EC cryptography",main:"lib/elliptic.js",files:["lib"],scripts:{lint:"eslint lib test","lint:fix":"npm run lint -- --fix",unit:"istanbul test _mocha --reporter=spec test/index.js",test:"npm run lint && npm run unit",version:"grunt dist && git add dist/"},repository:{type:"git",url:"git@github.com:indutny/elliptic"},keywords:["EC","Elliptic","curve","Cryptography"],author:"Fedor Indutny <fedor@indutny.com>",license:"MIT",bugs:{url:"https://github.com/indutny/elliptic/issues"},homepage:"https://github.com/indutny/elliptic",devDependencies:{brfs:"^2.0.2",coveralls:"^3.1.0",eslint:"^7.6.0",grunt:"^1.2.1","grunt-browserify":"^5.3.0","grunt-cli":"^1.3.2","grunt-contrib-connect":"^3.0.0","grunt-contrib-copy":"^1.0.0","grunt-contrib-uglify":"^5.0.0","grunt-mocha-istanbul":"^5.0.2","grunt-saucelabs":"^9.0.1",istanbul:"^0.4.5",mocha:"^8.0.1"},dependencies:{"bn.js":"^4.11.9",brorand:"^1.1.0","hash.js":"^1.0.0","hmac-drbg":"^1.0.1",inherits:"^2.0.4","minimalistic-assert":"^1.0.1","minimalistic-crypto-utils":"^1.0.1"}}});var RS=U(s9=>{"use strict";var Iy=s9;function $de(e,t){if(Array.isArray(e))return e.slice();if(!e)return[];var r=[];if(typeof e!="string"){for(var n=0;n<e.length;n++)r[n]=e[n]|0;return r}if(t==="hex"){e=e.replace(/[^a-z0-9]+/ig,""),e.length%2!==0&&(e="0"+e);for(var n=0;n<e.length;n+=2)r.push(parseInt(e[n]+e[n+1],16))}else for(var n=0;n<e.length;n++){var i=e.charCodeAt(n),s=i>>8,o=i&255;s?r.push(s,o):r.push(o)}return r}Iy.toArray=$de;function n9(e){return e.length===1?"0"+e:e}Iy.zero2=n9;function i9(e){for(var t="",r=0;r<e.length;r++)t+=n9(e[r].toString(16));return t}Iy.toHex=i9;Iy.encode=function(t,r){return r==="hex"?i9(t):t}});var Kn=U(o9=>{"use strict";var fs=o9,ege=kr(),tge=zn(),by=RS();fs.assert=tge;fs.toArray=by.toArray;fs.zero2=by.zero2;fs.toHex=by.toHex;fs.encode=by.encode;function rge(e,t,r){var n=new Array(Math.max(e.bitLength(),r)+1),i;for(i=0;i<n.length;i+=1)n[i]=0;var s=1<<t+1,o=e.clone();for(i=0;i<n.length;i++){var a,A=o.andln(s-1);o.isOdd()?(A>(s>>1)-1?a=(s>>1)-A:a=A,o.isubn(a)):a=0,n[i]=a,o.iushrn(1)}return n}fs.getNAF=rge;function nge(e,t){var r=[[],[]];e=e.clone(),t=t.clone();for(var n=0,i=0,s;e.cmpn(-n)>0||t.cmpn(-i)>0;){var o=e.andln(3)+n&3,a=t.andln(3)+i&3;o===3&&(o=-1),a===3&&(a=-1);var A;(o&1)===0?A=0:(s=e.andln(7)+n&7,(s===3||s===5)&&a===2?A=-o:A=o),r[0].push(A);var f;(a&1)===0?f=0:(s=t.andln(7)+i&7,(s===3||s===5)&&o===2?f=-a:f=a),r[1].push(f),2*n===A+1&&(n=1-n),2*i===f+1&&(i=1-i),e.iushrn(1),t.iushrn(1)}return r}fs.getJSF=nge;function ige(e,t,r){var n="_"+t;e.prototype[t]=function(){return this[n]!==void 0?this[n]:this[n]=r.call(this)}}fs.cachedProperty=ige;function sge(e){return typeof e=="string"?fs.toArray(e,"hex"):e}fs.parseBytes=sge;function oge(e){return new ege(e,"hex","le")}fs.intFromLE=oge});var Fd=U((iMe,a9)=>{"use strict";var Mf=kr(),Md=Kn(),Cy=Md.getNAF,age=Md.getJSF,Qy=Md.assert;function fA(e,t){this.type=e,this.p=new Mf(t.p,16),this.red=t.prime?Mf.red(t.prime):Mf.mont(this.p),this.zero=new Mf(0).toRed(this.red),this.one=new Mf(1).toRed(this.red),this.two=new Mf(2).toRed(this.red),this.n=t.n&&new Mf(t.n,16),this.g=t.g&&this.pointFromJSON(t.g,t.gRed),this._wnafT1=new Array(4),this._wnafT2=new Array(4),this._wnafT3=new Array(4),this._wnafT4=new Array(4),this._bitLength=this.n?this.n.bitLength():0;var r=this.n&&this.p.div(this.n);!r||r.cmpn(100)>0?this.redN=null:(this._maxwellTrick=!0,this.redN=this.n.toRed(this.red))}a9.exports=fA;fA.prototype.point=function(){throw new Error("Not implemented")};fA.prototype.validate=function(){throw new Error("Not implemented")};fA.prototype._fixedNafMul=function(t,r){Qy(t.precomputed);var n=t._getDoubles(),i=Cy(r,1,this._bitLength),s=(1<<n.step+1)-(n.step%2===0?2:1);s/=3;var o=[],a,A;for(a=0;a<i.length;a+=n.step){A=0;for(var f=a+n.step-1;f>=a;f--)A=(A<<1)+i[f];o.push(A)}for(var l=this.jpoint(null,null,null),p=this.jpoint(null,null,null),I=s;I>0;I--){for(a=0;a<o.length;a++)A=o[a],A===I?p=p.mixedAdd(n.points[a]):A===-I&&(p=p.mixedAdd(n.points[a].neg()));l=l.add(p)}return l.toP()};fA.prototype._wnafMul=function(t,r){var n=4,i=t._getNAFPoints(n);n=i.wnd;for(var s=i.points,o=Cy(r,n,this._bitLength),a=this.jpoint(null,null,null),A=o.length-1;A>=0;A--){for(var f=0;A>=0&&o[A]===0;A--)f++;if(A>=0&&f++,a=a.dblp(f),A<0)break;var l=o[A];Qy(l!==0),t.type==="affine"?l>0?a=a.mixedAdd(s[l-1>>1]):a=a.mixedAdd(s[-l-1>>1].neg()):l>0?a=a.add(s[l-1>>1]):a=a.add(s[-l-1>>1].neg())}return t.type==="affine"?a.toP():a};fA.prototype._wnafMulAdd=function(t,r,n,i,s){var o=this._wnafT1,a=this._wnafT2,A=this._wnafT3,f=0,l,p,I;for(l=0;l<i;l++){I=r[l];var S=I._getNAFPoints(t);o[l]=S.wnd,a[l]=S.points}for(l=i-1;l>=1;l-=2){var _=l-1,N=l;if(o[_]!==1||o[N]!==1){A[_]=Cy(n[_],o[_],this._bitLength),A[N]=Cy(n[N],o[N],this._bitLength),f=Math.max(A[_].length,f),f=Math.max(A[N].length,f);continue}var O=[r[_],null,null,r[N]];r[_].y.cmp(r[N].y)===0?(O[1]=r[_].add(r[N]),O[2]=r[_].toJ().mixedAdd(r[N].neg())):r[_].y.cmp(r[N].y.redNeg())===0?(O[1]=r[_].toJ().mixedAdd(r[N]),O[2]=r[_].add(r[N].neg())):(O[1]=r[_].toJ().mixedAdd(r[N]),O[2]=r[_].toJ().mixedAdd(r[N].neg()));var x=[-3,-1,-5,-7,0,7,5,1,3],G=age(n[_],n[N]);for(f=Math.max(G[0].length,f),A[_]=new Array(f),A[N]=new Array(f),p=0;p<f;p++){var Y=G[0][p]|0,X=G[1][p]|0;A[_][p]=x[(Y+1)*3+(X+1)],A[N][p]=0,a[_]=O}}var Z=this.jpoint(null,null,null),j=this._wnafT4;for(l=f;l>=0;l--){for(var se=0;l>=0;){var ie=!0;for(p=0;p<i;p++)j[p]=A[p][l]|0,j[p]!==0&&(ie=!1);if(!ie)break;se++,l--}if(l>=0&&se++,Z=Z.dblp(se),l<0)break;for(p=0;p<i;p++){var ce=j[p];ce!==0&&(ce>0?I=a[p][ce-1>>1]:ce<0&&(I=a[p][-ce-1>>1].neg()),I.type==="affine"?Z=Z.mixedAdd(I):Z=Z.add(I))}}for(l=0;l<i;l++)a[l]=null;return s?Z:Z.toP()};function wi(e,t){this.curve=e,this.type=t,this.precomputed=null}fA.BasePoint=wi;wi.prototype.eq=function(){throw new Error("Not implemented")};wi.prototype.validate=function(){return this.curve.validate(this)};fA.prototype.decodePoint=function(t,r){t=Md.toArray(t,r);var n=this.p.byteLength();if((t[0]===4||t[0]===6||t[0]===7)&&t.length-1===2*n){t[0]===6?Qy(t[t.length-1]%2===0):t[0]===7&&Qy(t[t.length-1]%2===1);var i=this.point(t.slice(1,1+n),t.slice(1+n,1+2*n));return i}else if((t[0]===2||t[0]===3)&&t.length-1===n)return this.pointFromX(t.slice(1,1+n),t[0]===3);throw new Error("Unknown point format")};wi.prototype.encodeCompressed=function(t){return this.encode(t,!0)};wi.prototype._encode=function(t){var r=this.curve.p.byteLength(),n=this.getX().toArray("be",r);return t?[this.getY().isEven()?2:3].concat(n):[4].concat(n,this.getY().toArray("be",r))};wi.prototype.encode=function(t,r){return Md.encode(this._encode(r),t)};wi.prototype.precompute=function(t){if(this.precomputed)return this;var r={doubles:null,naf:null,beta:null};return r.naf=this._getNAFPoints(8),r.doubles=this._getDoubles(4,t),r.beta=this._getBeta(),this.precomputed=r,this};wi.prototype._hasDoubles=function(t){if(!this.precomputed)return!1;var r=this.precomputed.doubles;return r?r.points.length>=Math.ceil((t.bitLength()+1)/r.step):!1};wi.prototype._getDoubles=function(t,r){if(this.precomputed&&this.precomputed.doubles)return this.precomputed.doubles;for(var n=[this],i=this,s=0;s<r;s+=t){for(var o=0;o<t;o++)i=i.dbl();n.push(i)}return{step:t,points:n}};wi.prototype._getNAFPoints=function(t){if(this.precomputed&&this.precomputed.naf)return this.precomputed.naf;for(var r=[this],n=(1<<t)-1,i=n===1?null:this.dbl(),s=1;s<n;s++)r[s]=r[s-1].add(i);return{wnd:t,points:r}};wi.prototype._getBeta=function(){return null};wi.prototype.dblp=function(t){for(var r=this,n=0;n<t;n++)r=r.dbl();return r}});var f9=U((sMe,A9)=>{"use strict";var Age=Kn(),fr=kr(),DS=je(),Hc=Fd(),fge=Age.assert;function Si(e){Hc.call(this,"short",e),this.a=new fr(e.a,16).toRed(this.red),this.b=new fr(e.b,16).toRed(this.red),this.tinv=this.two.redInvm(),this.zeroA=this.a.fromRed().cmpn(0)===0,this.threeA=this.a.fromRed().sub(this.p).cmpn(-3)===0,this.endo=this._getEndomorphism(e),this._endoWnafT1=new Array(4),this._endoWnafT2=new Array(4)}DS(Si,Hc);A9.exports=Si;Si.prototype._getEndomorphism=function(t){if(!(!this.zeroA||!this.g||!this.n||this.p.modn(3)!==1)){var r,n;if(t.beta)r=new fr(t.beta,16).toRed(this.red);else{var i=this._getEndoRoots(this.p);r=i[0].cmp(i[1])<0?i[0]:i[1],r=r.toRed(this.red)}if(t.lambda)n=new fr(t.lambda,16);else{var s=this._getEndoRoots(this.n);this.g.mul(s[0]).x.cmp(this.g.x.redMul(r))===0?n=s[0]:(n=s[1],fge(this.g.mul(n).x.cmp(this.g.x.redMul(r))===0))}var o;return t.basis?o=t.basis.map(function(a){return{a:new fr(a.a,16),b:new fr(a.b,16)}}):o=this._getEndoBasis(n),{beta:r,lambda:n,basis:o}}};Si.prototype._getEndoRoots=function(t){var r=t===this.p?this.red:fr.mont(t),n=new fr(2).toRed(r).redInvm(),i=n.redNeg(),s=new fr(3).toRed(r).redNeg().redSqrt().redMul(n),o=i.redAdd(s).fromRed(),a=i.redSub(s).fromRed();return[o,a]};Si.prototype._getEndoBasis=function(t){for(var r=this.n.ushrn(Math.floor(this.n.bitLength()/2)),n=t,i=this.n.clone(),s=new fr(1),o=new fr(0),a=new fr(0),A=new fr(1),f,l,p,I,S,_,N,O=0,x,G;n.cmpn(0)!==0;){var Y=i.div(n);x=i.sub(Y.mul(n)),G=a.sub(Y.mul(s));var X=A.sub(Y.mul(o));if(!p&&x.cmp(r)<0)f=N.neg(),l=s,p=x.neg(),I=G;else if(p&&++O===2)break;N=x,i=n,n=x,a=s,s=G,A=o,o=X}S=x.neg(),_=G;var Z=p.sqr().add(I.sqr()),j=S.sqr().add(_.sqr());return j.cmp(Z)>=0&&(S=f,_=l),p.negative&&(p=p.neg(),I=I.neg()),S.negative&&(S=S.neg(),_=_.neg()),[{a:p,b:I},{a:S,b:_}]};Si.prototype._endoSplit=function(t){var r=this.endo.basis,n=r[0],i=r[1],s=i.b.mul(t).divRound(this.n),o=n.b.neg().mul(t).divRound(this.n),a=s.mul(n.a),A=o.mul(i.a),f=s.mul(n.b),l=o.mul(i.b),p=t.sub(a).sub(A),I=f.add(l).neg();return{k1:p,k2:I}};Si.prototype.pointFromX=function(t,r){t=new fr(t,16),t.red||(t=t.toRed(this.red));var n=t.redSqr().redMul(t).redIAdd(t.redMul(this.a)).redIAdd(this.b),i=n.redSqrt();if(i.redSqr().redSub(n).cmp(this.zero)!==0)throw new Error("invalid point");var s=i.fromRed().isOdd();return(r&&!s||!r&&s)&&(i=i.redNeg()),this.point(t,i)};Si.prototype.validate=function(t){if(t.inf)return!0;var r=t.x,n=t.y,i=this.a.redMul(r),s=r.redSqr().redMul(r).redIAdd(i).redIAdd(this.b);return n.redSqr().redISub(s).cmpn(0)===0};Si.prototype._endoWnafMulAdd=function(t,r,n){for(var i=this._endoWnafT1,s=this._endoWnafT2,o=0;o<t.length;o++){var a=this._endoSplit(r[o]),A=t[o],f=A._getBeta();a.k1.negative&&(a.k1.ineg(),A=A.neg(!0)),a.k2.negative&&(a.k2.ineg(),f=f.neg(!0)),i[o*2]=A,i[o*2+1]=f,s[o*2]=a.k1,s[o*2+1]=a.k2}for(var l=this._wnafMulAdd(1,i,s,o*2,n),p=0;p<o*2;p++)i[p]=null,s[p]=null;return l};function Ur(e,t,r,n){Hc.BasePoint.call(this,e,"affine"),t===null&&r===null?(this.x=null,this.y=null,this.inf=!0):(this.x=new fr(t,16),this.y=new fr(r,16),n&&(this.x.forceRed(this.curve.red),this.y.forceRed(this.curve.red)),this.x.red||(this.x=this.x.toRed(this.curve.red)),this.y.red||(this.y=this.y.toRed(this.curve.red)),this.inf=!1)}DS(Ur,Hc.BasePoint);Si.prototype.point=function(t,r,n){return new Ur(this,t,r,n)};Si.prototype.pointFromJSON=function(t,r){return Ur.fromJSON(this,t,r)};Ur.prototype._getBeta=function(){if(this.curve.endo){var t=this.precomputed;if(t&&t.beta)return t.beta;var r=this.curve.point(this.x.redMul(this.curve.endo.beta),this.y);if(t){var n=this.curve,i=function(s){return n.point(s.x.redMul(n.endo.beta),s.y)};t.beta=r,r.precomputed={beta:null,naf:t.naf&&{wnd:t.naf.wnd,points:t.naf.points.map(i)},doubles:t.doubles&&{step:t.doubles.step,points:t.doubles.points.map(i)}}}return r}};Ur.prototype.toJSON=function(){return this.precomputed?[this.x,this.y,this.precomputed&&{doubles:this.precomputed.doubles&&{step:this.precomputed.doubles.step,points:this.precomputed.doubles.points.slice(1)},naf:this.precomputed.naf&&{wnd:this.precomputed.naf.wnd,points:this.precomputed.naf.points.slice(1)}}]:[this.x,this.y]};Ur.fromJSON=function(t,r,n){typeof r=="string"&&(r=JSON.parse(r));var i=t.point(r[0],r[1],n);if(!r[2])return i;function s(a){return t.point(a[0],a[1],n)}var o=r[2];return i.precomputed={beta:null,doubles:o.doubles&&{step:o.doubles.step,points:[i].concat(o.doubles.points.map(s))},naf:o.naf&&{wnd:o.naf.wnd,points:[i].concat(o.naf.points.map(s))}},i};Ur.prototype.inspect=function(){return this.isInfinity()?"<EC Point Infinity>":"<EC Point x: "+this.x.fromRed().toString(16,2)+" y: "+this.y.fromRed().toString(16,2)+">"};Ur.prototype.isInfinity=function(){return this.inf};Ur.prototype.add=function(t){if(this.inf)return t;if(t.inf)return this;if(this.eq(t))return this.dbl();if(this.neg().eq(t))return this.curve.point(null,null);if(this.x.cmp(t.x)===0)return this.curve.point(null,null);var r=this.y.redSub(t.y);r.cmpn(0)!==0&&(r=r.redMul(this.x.redSub(t.x).redInvm()));var n=r.redSqr().redISub(this.x).redISub(t.x),i=r.redMul(this.x.redSub(n)).redISub(this.y);return this.curve.point(n,i)};Ur.prototype.dbl=function(){if(this.inf)return this;var t=this.y.redAdd(this.y);if(t.cmpn(0)===0)return this.curve.point(null,null);var r=this.curve.a,n=this.x.redSqr(),i=t.redInvm(),s=n.redAdd(n).redIAdd(n).redIAdd(r).redMul(i),o=s.redSqr().redISub(this.x.redAdd(this.x)),a=s.redMul(this.x.redSub(o)).redISub(this.y);return this.curve.point(o,a)};Ur.prototype.getX=function(){return this.x.fromRed()};Ur.prototype.getY=function(){return this.y.fromRed()};Ur.prototype.mul=function(t){return t=new fr(t,16),this.isInfinity()?this:this._hasDoubles(t)?this.curve._fixedNafMul(this,t):this.curve.endo?this.curve._endoWnafMulAdd([this],[t]):this.curve._wnafMul(this,t)};Ur.prototype.mulAdd=function(t,r,n){var i=[this,r],s=[t,n];return this.curve.endo?this.curve._endoWnafMulAdd(i,s):this.curve._wnafMulAdd(1,i,s,2)};Ur.prototype.jmulAdd=function(t,r,n){var i=[this,r],s=[t,n];return this.curve.endo?this.curve._endoWnafMulAdd(i,s,!0):this.curve._wnafMulAdd(1,i,s,2,!0)};Ur.prototype.eq=function(t){return this===t||this.inf===t.inf&&(this.inf||this.x.cmp(t.x)===0&&this.y.cmp(t.y)===0)};Ur.prototype.neg=function(t){if(this.inf)return this;var r=this.curve.point(this.x,this.y.redNeg());if(t&&this.precomputed){var n=this.precomputed,i=function(s){return s.neg()};r.precomputed={naf:n.naf&&{wnd:n.naf.wnd,points:n.naf.points.map(i)},doubles:n.doubles&&{step:n.doubles.step,points:n.doubles.points.map(i)}}}return r};Ur.prototype.toJ=function(){if(this.inf)return this.curve.jpoint(null,null,null);var t=this.curve.jpoint(this.x,this.y,this.curve.one);return t};function jr(e,t,r,n){Hc.BasePoint.call(this,e,"jacobian"),t===null&&r===null&&n===null?(this.x=this.curve.one,this.y=this.curve.one,this.z=new fr(0)):(this.x=new fr(t,16),this.y=new fr(r,16),this.z=new fr(n,16)),this.x.red||(this.x=this.x.toRed(this.curve.red)),this.y.red||(this.y=this.y.toRed(this.curve.red)),this.z.red||(this.z=this.z.toRed(this.curve.red)),this.zOne=this.z===this.curve.one}DS(jr,Hc.BasePoint);Si.prototype.jpoint=function(t,r,n){return new jr(this,t,r,n)};jr.prototype.toP=function(){if(this.isInfinity())return this.curve.point(null,null);var t=this.z.redInvm(),r=t.redSqr(),n=this.x.redMul(r),i=this.y.redMul(r).redMul(t);return this.curve.point(n,i)};jr.prototype.neg=function(){return this.curve.jpoint(this.x,this.y.redNeg(),this.z)};jr.prototype.add=function(t){if(this.isInfinity())return t;if(t.isInfinity())return this;var r=t.z.redSqr(),n=this.z.redSqr(),i=this.x.redMul(r),s=t.x.redMul(n),o=this.y.redMul(r.redMul(t.z)),a=t.y.redMul(n.redMul(this.z)),A=i.redSub(s),f=o.redSub(a);if(A.cmpn(0)===0)return f.cmpn(0)!==0?this.curve.jpoint(null,null,null):this.dbl();var l=A.redSqr(),p=l.redMul(A),I=i.redMul(l),S=f.redSqr().redIAdd(p).redISub(I).redISub(I),_=f.redMul(I.redISub(S)).redISub(o.redMul(p)),N=this.z.redMul(t.z).redMul(A);return this.curve.jpoint(S,_,N)};jr.prototype.mixedAdd=function(t){if(this.isInfinity())return t.toJ();if(t.isInfinity())return this;var r=this.z.redSqr(),n=this.x,i=t.x.redMul(r),s=this.y,o=t.y.redMul(r).redMul(this.z),a=n.redSub(i),A=s.redSub(o);if(a.cmpn(0)===0)return A.cmpn(0)!==0?this.curve.jpoint(null,null,null):this.dbl();var f=a.redSqr(),l=f.redMul(a),p=n.redMul(f),I=A.redSqr().redIAdd(l).redISub(p).redISub(p),S=A.redMul(p.redISub(I)).redISub(s.redMul(l)),_=this.z.redMul(a);return this.curve.jpoint(I,S,_)};jr.prototype.dblp=function(t){if(t===0)return this;if(this.isInfinity())return this;if(!t)return this.dbl();var r;if(this.curve.zeroA||this.curve.threeA){var n=this;for(r=0;r<t;r++)n=n.dbl();return n}var i=this.curve.a,s=this.curve.tinv,o=this.x,a=this.y,A=this.z,f=A.redSqr().redSqr(),l=a.redAdd(a);for(r=0;r<t;r++){var p=o.redSqr(),I=l.redSqr(),S=I.redSqr(),_=p.redAdd(p).redIAdd(p).redIAdd(i.redMul(f)),N=o.redMul(I),O=_.redSqr().redISub(N.redAdd(N)),x=N.redISub(O),G=_.redMul(x);G=G.redIAdd(G).redISub(S);var Y=l.redMul(A);r+1<t&&(f=f.redMul(S)),o=O,A=Y,l=G}return this.curve.jpoint(o,l.redMul(s),A)};jr.prototype.dbl=function(){return this.isInfinity()?this:this.curve.zeroA?this._zeroDbl():this.curve.threeA?this._threeDbl():this._dbl()};jr.prototype._zeroDbl=function(){var t,r,n;if(this.zOne){var i=this.x.redSqr(),s=this.y.redSqr(),o=s.redSqr(),a=this.x.redAdd(s).redSqr().redISub(i).redISub(o);a=a.redIAdd(a);var A=i.redAdd(i).redIAdd(i),f=A.redSqr().redISub(a).redISub(a),l=o.redIAdd(o);l=l.redIAdd(l),l=l.redIAdd(l),t=f,r=A.redMul(a.redISub(f)).redISub(l),n=this.y.redAdd(this.y)}else{var p=this.x.redSqr(),I=this.y.redSqr(),S=I.redSqr(),_=this.x.redAdd(I).redSqr().redISub(p).redISub(S);_=_.redIAdd(_);var N=p.redAdd(p).redIAdd(p),O=N.redSqr(),x=S.redIAdd(S);x=x.redIAdd(x),x=x.redIAdd(x),t=O.redISub(_).redISub(_),r=N.redMul(_.redISub(t)).redISub(x),n=this.y.redMul(this.z),n=n.redIAdd(n)}return this.curve.jpoint(t,r,n)};jr.prototype._threeDbl=function(){var t,r,n;if(this.zOne){var i=this.x.redSqr(),s=this.y.redSqr(),o=s.redSqr(),a=this.x.redAdd(s).redSqr().redISub(i).redISub(o);a=a.redIAdd(a);var A=i.redAdd(i).redIAdd(i).redIAdd(this.curve.a),f=A.redSqr().redISub(a).redISub(a);t=f;var l=o.redIAdd(o);l=l.redIAdd(l),l=l.redIAdd(l),r=A.redMul(a.redISub(f)).redISub(l),n=this.y.redAdd(this.y)}else{var p=this.z.redSqr(),I=this.y.redSqr(),S=this.x.redMul(I),_=this.x.redSub(p).redMul(this.x.redAdd(p));_=_.redAdd(_).redIAdd(_);var N=S.redIAdd(S);N=N.redIAdd(N);var O=N.redAdd(N);t=_.redSqr().redISub(O),n=this.y.redAdd(this.z).redSqr().redISub(I).redISub(p);var x=I.redSqr();x=x.redIAdd(x),x=x.redIAdd(x),x=x.redIAdd(x),r=_.redMul(N.redISub(t)).redISub(x)}return this.curve.jpoint(t,r,n)};jr.prototype._dbl=function(){var t=this.curve.a,r=this.x,n=this.y,i=this.z,s=i.redSqr().redSqr(),o=r.redSqr(),a=n.redSqr(),A=o.redAdd(o).redIAdd(o).redIAdd(t.redMul(s)),f=r.redAdd(r);f=f.redIAdd(f);var l=f.redMul(a),p=A.redSqr().redISub(l.redAdd(l)),I=l.redISub(p),S=a.redSqr();S=S.redIAdd(S),S=S.redIAdd(S),S=S.redIAdd(S);var _=A.redMul(I).redISub(S),N=n.redAdd(n).redMul(i);return this.curve.jpoint(p,_,N)};jr.prototype.trpl=function(){if(!this.curve.zeroA)return this.dbl().add(this);var t=this.x.redSqr(),r=this.y.redSqr(),n=this.z.redSqr(),i=r.redSqr(),s=t.redAdd(t).redIAdd(t),o=s.redSqr(),a=this.x.redAdd(r).redSqr().redISub(t).redISub(i);a=a.redIAdd(a),a=a.redAdd(a).redIAdd(a),a=a.redISub(o);var A=a.redSqr(),f=i.redIAdd(i);f=f.redIAdd(f),f=f.redIAdd(f),f=f.redIAdd(f);var l=s.redIAdd(a).redSqr().redISub(o).redISub(A).redISub(f),p=r.redMul(l);p=p.redIAdd(p),p=p.redIAdd(p);var I=this.x.redMul(A).redISub(p);I=I.redIAdd(I),I=I.redIAdd(I);var S=this.y.redMul(l.redMul(f.redISub(l)).redISub(a.redMul(A)));S=S.redIAdd(S),S=S.redIAdd(S),S=S.redIAdd(S);var _=this.z.redAdd(a).redSqr().redISub(n).redISub(A);return this.curve.jpoint(I,S,_)};jr.prototype.mul=function(t,r){return t=new fr(t,r),this.curve._wnafMul(this,t)};jr.prototype.eq=function(t){if(t.type==="affine")return this.eq(t.toJ());if(this===t)return!0;var r=this.z.redSqr(),n=t.z.redSqr();if(this.x.redMul(n).redISub(t.x.redMul(r)).cmpn(0)!==0)return!1;var i=r.redMul(this.z),s=n.redMul(t.z);return this.y.redMul(s).redISub(t.y.redMul(i)).cmpn(0)===0};jr.prototype.eqXToP=function(t){var r=this.z.redSqr(),n=t.toRed(this.curve.red).redMul(r);if(this.x.cmp(n)===0)return!0;for(var i=t.clone(),s=this.curve.redN.redMul(r);;){if(i.iadd(this.curve.n),i.cmp(this.curve.p)>=0)return!1;if(n.redIAdd(s),this.x.cmp(n)===0)return!0}};jr.prototype.inspect=function(){return this.isInfinity()?"<EC JPoint Infinity>":"<EC JPoint x: "+this.x.toString(16,2)+" y: "+this.y.toString(16,2)+" z: "+this.z.toString(16,2)+">"};jr.prototype.isInfinity=function(){return this.z.cmpn(0)===0}});var l9=U((oMe,c9)=>{"use strict";var qc=kr(),u9=je(),wy=Fd(),uge=Kn();function Gc(e){wy.call(this,"mont",e),this.a=new qc(e.a,16).toRed(this.red),this.b=new qc(e.b,16).toRed(this.red),this.i4=new qc(4).toRed(this.red).redInvm(),this.two=new qc(2).toRed(this.red),this.a24=this.i4.redMul(this.a.redAdd(this.two))}u9(Gc,wy);c9.exports=Gc;Gc.prototype.validate=function(t){var r=t.normalize().x,n=r.redSqr(),i=n.redMul(r).redAdd(n.redMul(this.a)).redAdd(r),s=i.redSqrt();return s.redSqr().cmp(i)===0};function xr(e,t,r){wy.BasePoint.call(this,e,"projective"),t===null&&r===null?(this.x=this.curve.one,this.z=this.curve.zero):(this.x=new qc(t,16),this.z=new qc(r,16),this.x.red||(this.x=this.x.toRed(this.curve.red)),this.z.red||(this.z=this.z.toRed(this.curve.red)))}u9(xr,wy.BasePoint);Gc.prototype.decodePoint=function(t,r){return this.point(uge.toArray(t,r),1)};Gc.prototype.point=function(t,r){return new xr(this,t,r)};Gc.prototype.pointFromJSON=function(t){return xr.fromJSON(this,t)};xr.prototype.precompute=function(){};xr.prototype._encode=function(){return this.getX().toArray("be",this.curve.p.byteLength())};xr.fromJSON=function(t,r){return new xr(t,r[0],r[1]||t.one)};xr.prototype.inspect=function(){return this.isInfinity()?"<EC Point Infinity>":"<EC Point x: "+this.x.fromRed().toString(16,2)+" z: "+this.z.fromRed().toString(16,2)+">"};xr.prototype.isInfinity=function(){return this.z.cmpn(0)===0};xr.prototype.dbl=function(){var t=this.x.redAdd(this.z),r=t.redSqr(),n=this.x.redSub(this.z),i=n.redSqr(),s=r.redSub(i),o=r.redMul(i),a=s.redMul(i.redAdd(this.curve.a24.redMul(s)));return this.curve.point(o,a)};xr.prototype.add=function(){throw new Error("Not supported on Montgomery curve")};xr.prototype.diffAdd=function(t,r){var n=this.x.redAdd(this.z),i=this.x.redSub(this.z),s=t.x.redAdd(t.z),o=t.x.redSub(t.z),a=o.redMul(n),A=s.redMul(i),f=r.z.redMul(a.redAdd(A).redSqr()),l=r.x.redMul(a.redISub(A).redSqr());return this.curve.point(f,l)};xr.prototype.mul=function(t){for(var r=t.clone(),n=this,i=this.curve.point(null,null),s=this,o=[];r.cmpn(0)!==0;r.iushrn(1))o.push(r.andln(1));for(var a=o.length-1;a>=0;a--)o[a]===0?(n=n.diffAdd(i,s),i=i.dbl()):(i=n.diffAdd(i,s),n=n.dbl());return i};xr.prototype.mulAdd=function(){throw new Error("Not supported on Montgomery curve")};xr.prototype.jumlAdd=function(){throw new Error("Not supported on Montgomery curve")};xr.prototype.eq=function(t){return this.getX().cmp(t.getX())===0};xr.prototype.normalize=function(){return this.x=this.x.redMul(this.z.redInvm()),this.z=this.curve.one,this};xr.prototype.getX=function(){return this.normalize(),this.x.fromRed()}});var g9=U((aMe,d9)=>{"use strict";var cge=Kn(),oa=kr(),h9=je(),Sy=Fd(),lge=cge.assert;function no(e){this.twisted=(e.a|0)!==1,this.mOneA=this.twisted&&(e.a|0)===-1,this.extended=this.mOneA,Sy.call(this,"edwards",e),this.a=new oa(e.a,16).umod(this.red.m),this.a=this.a.toRed(this.red),this.c=new oa(e.c,16).toRed(this.red),this.c2=this.c.redSqr(),this.d=new oa(e.d,16).toRed(this.red),this.dd=this.d.redAdd(this.d),lge(!this.twisted||this.c.fromRed().cmpn(1)===0),this.oneC=(e.c|0)===1}h9(no,Sy);d9.exports=no;no.prototype._mulA=function(t){return this.mOneA?t.redNeg():this.a.redMul(t)};no.prototype._mulC=function(t){return this.oneC?t:this.c.redMul(t)};no.prototype.jpoint=function(t,r,n,i){return this.point(t,r,n,i)};no.prototype.pointFromX=function(t,r){t=new oa(t,16),t.red||(t=t.toRed(this.red));var n=t.redSqr(),i=this.c2.redSub(this.a.redMul(n)),s=this.one.redSub(this.c2.redMul(this.d).redMul(n)),o=i.redMul(s.redInvm()),a=o.redSqrt();if(a.redSqr().redSub(o).cmp(this.zero)!==0)throw new Error("invalid point");var A=a.fromRed().isOdd();return(r&&!A||!r&&A)&&(a=a.redNeg()),this.point(t,a)};no.prototype.pointFromY=function(t,r){t=new oa(t,16),t.red||(t=t.toRed(this.red));var n=t.redSqr(),i=n.redSub(this.c2),s=n.redMul(this.d).redMul(this.c2).redSub(this.a),o=i.redMul(s.redInvm());if(o.cmp(this.zero)===0){if(r)throw new Error("invalid point");return this.point(this.zero,t)}var a=o.redSqrt();if(a.redSqr().redSub(o).cmp(this.zero)!==0)throw new Error("invalid point");return a.fromRed().isOdd()!==r&&(a=a.redNeg()),this.point(a,t)};no.prototype.validate=function(t){if(t.isInfinity())return!0;t.normalize();var r=t.x.redSqr(),n=t.y.redSqr(),i=r.redMul(this.a).redAdd(n),s=this.c2.redMul(this.one.redAdd(this.d.redMul(r).redMul(n)));return i.cmp(s)===0};function Wt(e,t,r,n,i){Sy.BasePoint.call(this,e,"projective"),t===null&&r===null&&n===null?(this.x=this.curve.zero,this.y=this.curve.one,this.z=this.curve.one,this.t=this.curve.zero,this.zOne=!0):(this.x=new oa(t,16),this.y=new oa(r,16),this.z=n?new oa(n,16):this.curve.one,this.t=i&&new oa(i,16),this.x.red||(this.x=this.x.toRed(this.curve.red)),this.y.red||(this.y=this.y.toRed(this.curve.red)),this.z.red||(this.z=this.z.toRed(this.curve.red)),this.t&&!this.t.red&&(this.t=this.t.toRed(this.curve.red)),this.zOne=this.z===this.curve.one,this.curve.extended&&!this.t&&(this.t=this.x.redMul(this.y),this.zOne||(this.t=this.t.redMul(this.z.redInvm()))))}h9(Wt,Sy.BasePoint);no.prototype.pointFromJSON=function(t){return Wt.fromJSON(this,t)};no.prototype.point=function(t,r,n,i){return new Wt(this,t,r,n,i)};Wt.fromJSON=function(t,r){return new Wt(t,r[0],r[1],r[2])};Wt.prototype.inspect=function(){return this.isInfinity()?"<EC Point Infinity>":"<EC Point x: "+this.x.fromRed().toString(16,2)+" y: "+this.y.fromRed().toString(16,2)+" z: "+this.z.fromRed().toString(16,2)+">"};Wt.prototype.isInfinity=function(){return this.x.cmpn(0)===0&&(this.y.cmp(this.z)===0||this.zOne&&this.y.cmp(this.curve.c)===0)};Wt.prototype._extDbl=function(){var t=this.x.redSqr(),r=this.y.redSqr(),n=this.z.redSqr();n=n.redIAdd(n);var i=this.curve._mulA(t),s=this.x.redAdd(this.y).redSqr().redISub(t).redISub(r),o=i.redAdd(r),a=o.redSub(n),A=i.redSub(r),f=s.redMul(a),l=o.redMul(A),p=s.redMul(A),I=a.redMul(o);return this.curve.point(f,l,I,p)};Wt.prototype._projDbl=function(){var t=this.x.redAdd(this.y).redSqr(),r=this.x.redSqr(),n=this.y.redSqr(),i,s,o,a,A,f;if(this.curve.twisted){a=this.curve._mulA(r);var l=a.redAdd(n);this.zOne?(i=t.redSub(r).redSub(n).redMul(l.redSub(this.curve.two)),s=l.redMul(a.redSub(n)),o=l.redSqr().redSub(l).redSub(l)):(A=this.z.redSqr(),f=l.redSub(A).redISub(A),i=t.redSub(r).redISub(n).redMul(f),s=l.redMul(a.redSub(n)),o=l.redMul(f))}else a=r.redAdd(n),A=this.curve._mulC(this.z).redSqr(),f=a.redSub(A).redSub(A),i=this.curve._mulC(t.redISub(a)).redMul(f),s=this.curve._mulC(a).redMul(r.redISub(n)),o=a.redMul(f);return this.curve.point(i,s,o)};Wt.prototype.dbl=function(){return this.isInfinity()?this:this.curve.extended?this._extDbl():this._projDbl()};Wt.prototype._extAdd=function(t){var r=this.y.redSub(this.x).redMul(t.y.redSub(t.x)),n=this.y.redAdd(this.x).redMul(t.y.redAdd(t.x)),i=this.t.redMul(this.curve.dd).redMul(t.t),s=this.z.redMul(t.z.redAdd(t.z)),o=n.redSub(r),a=s.redSub(i),A=s.redAdd(i),f=n.redAdd(r),l=o.redMul(a),p=A.redMul(f),I=o.redMul(f),S=a.redMul(A);return this.curve.point(l,p,S,I)};Wt.prototype._projAdd=function(t){var r=this.z.redMul(t.z),n=r.redSqr(),i=this.x.redMul(t.x),s=this.y.redMul(t.y),o=this.curve.d.redMul(i).redMul(s),a=n.redSub(o),A=n.redAdd(o),f=this.x.redAdd(this.y).redMul(t.x.redAdd(t.y)).redISub(i).redISub(s),l=r.redMul(a).redMul(f),p,I;return this.curve.twisted?(p=r.redMul(A).redMul(s.redSub(this.curve._mulA(i))),I=a.redMul(A)):(p=r.redMul(A).redMul(s.redSub(i)),I=this.curve._mulC(a).redMul(A)),this.curve.point(l,p,I)};Wt.prototype.add=function(t){return this.isInfinity()?t:t.isInfinity()?this:this.curve.extended?this._extAdd(t):this._projAdd(t)};Wt.prototype.mul=function(t){return this._hasDoubles(t)?this.curve._fixedNafMul(this,t):this.curve._wnafMul(this,t)};Wt.prototype.mulAdd=function(t,r,n){return this.curve._wnafMulAdd(1,[this,r],[t,n],2,!1)};Wt.prototype.jmulAdd=function(t,r,n){return this.curve._wnafMulAdd(1,[this,r],[t,n],2,!0)};Wt.prototype.normalize=function(){if(this.zOne)return this;var t=this.z.redInvm();return this.x=this.x.redMul(t),this.y=this.y.redMul(t),this.t&&(this.t=this.t.redMul(t)),this.z=this.curve.one,this.zOne=!0,this};Wt.prototype.neg=function(){return this.curve.point(this.x.redNeg(),this.y,this.z,this.t&&this.t.redNeg())};Wt.prototype.getX=function(){return this.normalize(),this.x.fromRed()};Wt.prototype.getY=function(){return this.normalize(),this.y.fromRed()};Wt.prototype.eq=function(t){return this===t||this.getX().cmp(t.getX())===0&&this.getY().cmp(t.getY())===0};Wt.prototype.eqXToP=function(t){var r=t.toRed(this.curve.red).redMul(this.z);if(this.x.cmp(r)===0)return!0;for(var n=t.clone(),i=this.curve.redN.redMul(this.z);;){if(n.iadd(this.curve.n),n.cmp(this.curve.p)>=0)return!1;if(r.redIAdd(i),this.x.cmp(r)===0)return!0}};Wt.prototype.toP=Wt.prototype.normalize;Wt.prototype.mixedAdd=Wt.prototype.add});var TS=U(p9=>{"use strict";var _y=p9;_y.base=Fd();_y.short=f9();_y.mont=l9();_y.edwards=g9()});var us=U(Pt=>{"use strict";var hge=zn(),dge=je();Pt.inherits=dge;function gge(e,t){return(e.charCodeAt(t)&64512)!==55296||t<0||t+1>=e.length?!1:(e.charCodeAt(t+1)&64512)===56320}function pge(e,t){if(Array.isArray(e))return e.slice();if(!e)return[];var r=[];if(typeof e=="string")if(t){if(t==="hex")for(e=e.replace(/[^a-z0-9]+/ig,""),e.length%2!==0&&(e="0"+e),i=0;i<e.length;i+=2)r.push(parseInt(e[i]+e[i+1],16))}else for(var n=0,i=0;i<e.length;i++){var s=e.charCodeAt(i);s<128?r[n++]=s:s<2048?(r[n++]=s>>6|192,r[n++]=s&63|128):gge(e,i)?(s=65536+((s&1023)<<10)+(e.charCodeAt(++i)&1023),r[n++]=s>>18|240,r[n++]=s>>12&63|128,r[n++]=s>>6&63|128,r[n++]=s&63|128):(r[n++]=s>>12|224,r[n++]=s>>6&63|128,r[n++]=s&63|128)}else for(i=0;i<e.length;i++)r[i]=e[i]|0;return r}Pt.toArray=pge;function Ege(e){for(var t="",r=0;r<e.length;r++)t+=y9(e[r].toString(16));return t}Pt.toHex=Ege;function E9(e){var t=e>>>24|e>>>8&65280|e<<8&16711680|(e&255)<<24;return t>>>0}Pt.htonl=E9;function yge(e,t){for(var r="",n=0;n<e.length;n++){var i=e[n];t==="little"&&(i=E9(i)),r+=m9(i.toString(16))}return r}Pt.toHex32=yge;function y9(e){return e.length===1?"0"+e:e}Pt.zero2=y9;function m9(e){return e.length===7?"0"+e:e.length===6?"00"+e:e.length===5?"000"+e:e.length===4?"0000"+e:e.length===3?"00000"+e:e.length===2?"000000"+e:e.length===1?"0000000"+e:e}Pt.zero8=m9;function mge(e,t,r,n){var i=r-t;hge(i%4===0);for(var s=new Array(i/4),o=0,a=t;o<s.length;o++,a+=4){var A;n==="big"?A=e[a]<<24|e[a+1]<<16|e[a+2]<<8|e[a+3]:A=e[a+3]<<24|e[a+2]<<16|e[a+1]<<8|e[a],s[o]=A>>>0}return s}Pt.join32=mge;function Bge(e,t){for(var r=new Array(e.length*4),n=0,i=0;n<e.length;n++,i+=4){var s=e[n];t==="big"?(r[i]=s>>>24,r[i+1]=s>>>16&255,r[i+2]=s>>>8&255,r[i+3]=s&255):(r[i+3]=s>>>24,r[i+2]=s>>>16&255,r[i+1]=s>>>8&255,r[i]=s&255)}return r}Pt.split32=Bge;function Ige(e,t){return e>>>t|e<<32-t}Pt.rotr32=Ige;function bge(e,t){return e<<t|e>>>32-t}Pt.rotl32=bge;function Cge(e,t){return e+t>>>0}Pt.sum32=Cge;function Qge(e,t,r){return e+t+r>>>0}Pt.sum32_3=Qge;function wge(e,t,r,n){return e+t+r+n>>>0}Pt.sum32_4=wge;function Sge(e,t,r,n,i){return e+t+r+n+i>>>0}Pt.sum32_5=Sge;function _ge(e,t,r,n){var i=e[t],s=e[t+1],o=n+s>>>0,a=(o<n?1:0)+r+i;e[t]=a>>>0,e[t+1]=o}Pt.sum64=_ge;function vge(e,t,r,n){var i=t+n>>>0,s=(i<t?1:0)+e+r;return s>>>0}Pt.sum64_hi=vge;function Rge(e,t,r,n){var i=t+n;return i>>>0}Pt.sum64_lo=Rge;function Dge(e,t,r,n,i,s,o,a){var A=0,f=t;f=f+n>>>0,A+=f<t?1:0,f=f+s>>>0,A+=f<s?1:0,f=f+a>>>0,A+=f<a?1:0;var l=e+r+i+o+A;return l>>>0}Pt.sum64_4_hi=Dge;function Tge(e,t,r,n,i,s,o,a){var A=t+n+s+a;return A>>>0}Pt.sum64_4_lo=Tge;function Nge(e,t,r,n,i,s,o,a,A,f){var l=0,p=t;p=p+n>>>0,l+=p<t?1:0,p=p+s>>>0,l+=p<s?1:0,p=p+a>>>0,l+=p<a?1:0,p=p+f>>>0,l+=p<f?1:0;var I=e+r+i+o+A+l;return I>>>0}Pt.sum64_5_hi=Nge;function Mge(e,t,r,n,i,s,o,a,A,f){var l=t+n+s+a+f;return l>>>0}Pt.sum64_5_lo=Mge;function Fge(e,t,r){var n=t<<32-r|e>>>r;return n>>>0}Pt.rotr64_hi=Fge;function kge(e,t,r){var n=e<<32-r|t>>>r;return n>>>0}Pt.rotr64_lo=kge;function Uge(e,t,r){return e>>>r}Pt.shr64_hi=Uge;function xge(e,t,r){var n=e<<32-r|t>>>r;return n>>>0}Pt.shr64_lo=xge});var Yc=U(I9=>{"use strict";var B9=us(),Lge=zn();function vy(){this.pending=null,this.pendingTotal=0,this.blockSize=this.constructor.blockSize,this.outSize=this.constructor.outSize,this.hmacStrength=this.constructor.hmacStrength,this.padLength=this.constructor.padLength/8,this.endian="big",this._delta8=this.blockSize/8,this._delta32=this.blockSize/32}I9.BlockHash=vy;vy.prototype.update=function(t,r){if(t=B9.toArray(t,r),this.pending?this.pending=this.pending.concat(t):this.pending=t,this.pendingTotal+=t.length,this.pending.length>=this._delta8){t=this.pending;var n=t.length%this._delta8;this.pending=t.slice(t.length-n,t.length),this.pending.length===0&&(this.pending=null),t=B9.join32(t,0,t.length-n,this.endian);for(var i=0;i<t.length;i+=this._delta32)this._update(t,i,i+this._delta32)}return this};vy.prototype.digest=function(t){return this.update(this._pad()),Lge(this.pending===null),this._digest(t)};vy.prototype._pad=function(){var t=this.pendingTotal,r=this._delta8,n=r-(t+this.padLength)%r,i=new Array(n+this.padLength);i[0]=128;for(var s=1;s<n;s++)i[s]=0;if(t<<=3,this.endian==="big"){for(var o=8;o<this.padLength;o++)i[s++]=0;i[s++]=0,i[s++]=0,i[s++]=0,i[s++]=0,i[s++]=t>>>24&255,i[s++]=t>>>16&255,i[s++]=t>>>8&255,i[s++]=t&255}else for(i[s++]=t&255,i[s++]=t>>>8&255,i[s++]=t>>>16&255,i[s++]=t>>>24&255,i[s++]=0,i[s++]=0,i[s++]=0,i[s++]=0,o=8;o<this.padLength;o++)i[s++]=0;return i}});var NS=U(aa=>{"use strict";var Pge=us(),io=Pge.rotr32;function Oge(e,t,r,n){if(e===0)return b9(t,r,n);if(e===1||e===3)return Q9(t,r,n);if(e===2)return C9(t,r,n)}aa.ft_1=Oge;function b9(e,t,r){return e&t^~e&r}aa.ch32=b9;function C9(e,t,r){return e&t^e&r^t&r}aa.maj32=C9;function Q9(e,t,r){return e^t^r}aa.p32=Q9;function Hge(e){return io(e,2)^io(e,13)^io(e,22)}aa.s0_256=Hge;function qge(e){return io(e,6)^io(e,11)^io(e,25)}aa.s1_256=qge;function Gge(e){return io(e,7)^io(e,18)^e>>>3}aa.g0_256=Gge;function Yge(e){return io(e,17)^io(e,19)^e>>>10}aa.g1_256=Yge});var _9=U((lMe,S9)=>{"use strict";var Wc=us(),Wge=Yc(),Vge=NS(),MS=Wc.rotl32,kd=Wc.sum32,Jge=Wc.sum32_5,jge=Vge.ft_1,w9=Wge.BlockHash,zge=[1518500249,1859775393,2400959708,3395469782];function so(){if(!(this instanceof so))return new so;w9.call(this),this.h=[1732584193,4023233417,2562383102,271733878,3285377520],this.W=new Array(80)}Wc.inherits(so,w9);S9.exports=so;so.blockSize=512;so.outSize=160;so.hmacStrength=80;so.padLength=64;so.prototype._update=function(t,r){for(var n=this.W,i=0;i<16;i++)n[i]=t[r+i];for(;i<n.length;i++)n[i]=MS(n[i-3]^n[i-8]^n[i-14]^n[i-16],1);var s=this.h[0],o=this.h[1],a=this.h[2],A=this.h[3],f=this.h[4];for(i=0;i<n.length;i++){var l=~~(i/20),p=Jge(MS(s,5),jge(l,o,a,A),f,n[i],zge[l]);f=A,A=a,a=MS(o,30),o=s,s=p}this.h[0]=kd(this.h[0],s),this.h[1]=kd(this.h[1],o),this.h[2]=kd(this.h[2],a),this.h[3]=kd(this.h[3],A),this.h[4]=kd(this.h[4],f)};so.prototype._digest=function(t){return t==="hex"?Wc.toHex32(this.h,"big"):Wc.split32(this.h,"big")}});var FS=U((hMe,R9)=>{"use strict";var Vc=us(),Kge=Yc(),Jc=NS(),Xge=zn(),cs=Vc.sum32,Zge=Vc.sum32_4,$ge=Vc.sum32_5,e0e=Jc.ch32,t0e=Jc.maj32,r0e=Jc.s0_256,n0e=Jc.s1_256,i0e=Jc.g0_256,s0e=Jc.g1_256,v9=Kge.BlockHash,o0e=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298];function oo(){if(!(this instanceof oo))return new oo;v9.call(this),this.h=[1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225],this.k=o0e,this.W=new Array(64)}Vc.inherits(oo,v9);R9.exports=oo;oo.blockSize=512;oo.outSize=256;oo.hmacStrength=192;oo.padLength=64;oo.prototype._update=function(t,r){for(var n=this.W,i=0;i<16;i++)n[i]=t[r+i];for(;i<n.length;i++)n[i]=Zge(s0e(n[i-2]),n[i-7],i0e(n[i-15]),n[i-16]);var s=this.h[0],o=this.h[1],a=this.h[2],A=this.h[3],f=this.h[4],l=this.h[5],p=this.h[6],I=this.h[7];for(Xge(this.k.length===n.length),i=0;i<n.length;i++){var S=$ge(I,n0e(f),e0e(f,l,p),this.k[i],n[i]),_=cs(r0e(s),t0e(s,o,a));I=p,p=l,l=f,f=cs(A,S),A=a,a=o,o=s,s=cs(S,_)}this.h[0]=cs(this.h[0],s),this.h[1]=cs(this.h[1],o),this.h[2]=cs(this.h[2],a),this.h[3]=cs(this.h[3],A),this.h[4]=cs(this.h[4],f),this.h[5]=cs(this.h[5],l),this.h[6]=cs(this.h[6],p),this.h[7]=cs(this.h[7],I)};oo.prototype._digest=function(t){return t==="hex"?Vc.toHex32(this.h,"big"):Vc.split32(this.h,"big")}});var N9=U((dMe,T9)=>{"use strict";var kS=us(),D9=FS();function Aa(){if(!(this instanceof Aa))return new Aa;D9.call(this),this.h=[3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]}kS.inherits(Aa,D9);T9.exports=Aa;Aa.blockSize=512;Aa.outSize=224;Aa.hmacStrength=192;Aa.padLength=64;Aa.prototype._digest=function(t){return t==="hex"?kS.toHex32(this.h.slice(0,7),"big"):kS.split32(this.h.slice(0,7),"big")}});var LS=U((gMe,U9)=>{"use strict";var Mn=us(),a0e=Yc(),A0e=zn(),ao=Mn.rotr64_hi,Ao=Mn.rotr64_lo,M9=Mn.shr64_hi,F9=Mn.shr64_lo,uA=Mn.sum64,US=Mn.sum64_hi,xS=Mn.sum64_lo,f0e=Mn.sum64_4_hi,u0e=Mn.sum64_4_lo,c0e=Mn.sum64_5_hi,l0e=Mn.sum64_5_lo,k9=a0e.BlockHash,h0e=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function ls(){if(!(this instanceof ls))return new ls;k9.call(this),this.h=[1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209],this.k=h0e,this.W=new Array(160)}Mn.inherits(ls,k9);U9.exports=ls;ls.blockSize=1024;ls.outSize=512;ls.hmacStrength=192;ls.padLength=128;ls.prototype._prepareBlock=function(t,r){for(var n=this.W,i=0;i<32;i++)n[i]=t[r+i];for(;i<n.length;i+=2){var s=Q0e(n[i-4],n[i-3]),o=w0e(n[i-4],n[i-3]),a=n[i-14],A=n[i-13],f=b0e(n[i-30],n[i-29]),l=C0e(n[i-30],n[i-29]),p=n[i-32],I=n[i-31];n[i]=f0e(s,o,a,A,f,l,p,I),n[i+1]=u0e(s,o,a,A,f,l,p,I)}};ls.prototype._update=function(t,r){this._prepareBlock(t,r);var n=this.W,i=this.h[0],s=this.h[1],o=this.h[2],a=this.h[3],A=this.h[4],f=this.h[5],l=this.h[6],p=this.h[7],I=this.h[8],S=this.h[9],_=this.h[10],N=this.h[11],O=this.h[12],x=this.h[13],G=this.h[14],Y=this.h[15];A0e(this.k.length===n.length);for(var X=0;X<n.length;X+=2){var Z=G,j=Y,se=B0e(I,S),ie=I0e(I,S),ce=d0e(I,S,_,N,O,x),H=g0e(I,S,_,N,O,x),E=this.k[X],v=this.k[X+1],b=n[X],c=n[X+1],g=c0e(Z,j,se,ie,ce,H,E,v,b,c),w=l0e(Z,j,se,ie,ce,H,E,v,b,c);Z=y0e(i,s),j=m0e(i,s),se=p0e(i,s,o,a,A,f),ie=E0e(i,s,o,a,A,f);var R=US(Z,j,se,ie),C=xS(Z,j,se,ie);G=O,Y=x,O=_,x=N,_=I,N=S,I=US(l,p,g,w),S=xS(p,p,g,w),l=A,p=f,A=o,f=a,o=i,a=s,i=US(g,w,R,C),s=xS(g,w,R,C)}uA(this.h,0,i,s),uA(this.h,2,o,a),uA(this.h,4,A,f),uA(this.h,6,l,p),uA(this.h,8,I,S),uA(this.h,10,_,N),uA(this.h,12,O,x),uA(this.h,14,G,Y)};ls.prototype._digest=function(t){return t==="hex"?Mn.toHex32(this.h,"big"):Mn.split32(this.h,"big")};function d0e(e,t,r,n,i){var s=e&r^~e&i;return s<0&&(s+=4294967296),s}function g0e(e,t,r,n,i,s){var o=t&n^~t&s;return o<0&&(o+=4294967296),o}function p0e(e,t,r,n,i){var s=e&r^e&i^r&i;return s<0&&(s+=4294967296),s}function E0e(e,t,r,n,i,s){var o=t&n^t&s^n&s;return o<0&&(o+=4294967296),o}function y0e(e,t){var r=ao(e,t,28),n=ao(t,e,2),i=ao(t,e,7),s=r^n^i;return s<0&&(s+=4294967296),s}function m0e(e,t){var r=Ao(e,t,28),n=Ao(t,e,2),i=Ao(t,e,7),s=r^n^i;return s<0&&(s+=4294967296),s}function B0e(e,t){var r=ao(e,t,14),n=ao(e,t,18),i=ao(t,e,9),s=r^n^i;return s<0&&(s+=4294967296),s}function I0e(e,t){var r=Ao(e,t,14),n=Ao(e,t,18),i=Ao(t,e,9),s=r^n^i;return s<0&&(s+=4294967296),s}function b0e(e,t){var r=ao(e,t,1),n=ao(e,t,8),i=M9(e,t,7),s=r^n^i;return s<0&&(s+=4294967296),s}function C0e(e,t){var r=Ao(e,t,1),n=Ao(e,t,8),i=F9(e,t,7),s=r^n^i;return s<0&&(s+=4294967296),s}function Q0e(e,t){var r=ao(e,t,19),n=ao(t,e,29),i=M9(e,t,6),s=r^n^i;return s<0&&(s+=4294967296),s}function w0e(e,t){var r=Ao(e,t,19),n=Ao(t,e,29),i=F9(e,t,6),s=r^n^i;return s<0&&(s+=4294967296),s}});var P9=U((pMe,L9)=>{"use strict";var PS=us(),x9=LS();function fa(){if(!(this instanceof fa))return new fa;x9.call(this),this.h=[3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]}PS.inherits(fa,x9);L9.exports=fa;fa.blockSize=1024;fa.outSize=384;fa.hmacStrength=192;fa.padLength=128;fa.prototype._digest=function(t){return t==="hex"?PS.toHex32(this.h.slice(0,12),"big"):PS.split32(this.h.slice(0,12),"big")}});var O9=U(jc=>{"use strict";jc.sha1=_9();jc.sha224=N9();jc.sha256=FS();jc.sha384=P9();jc.sha512=LS()});var V9=U(W9=>{"use strict";var Ff=us(),S0e=Yc(),Ry=Ff.rotl32,H9=Ff.sum32,Ud=Ff.sum32_3,q9=Ff.sum32_4,Y9=S0e.BlockHash;function fo(){if(!(this instanceof fo))return new fo;Y9.call(this),this.h=[1732584193,4023233417,2562383102,271733878,3285377520],this.endian="little"}Ff.inherits(fo,Y9);W9.ripemd160=fo;fo.blockSize=512;fo.outSize=160;fo.hmacStrength=192;fo.padLength=64;fo.prototype._update=function(t,r){for(var n=this.h[0],i=this.h[1],s=this.h[2],o=this.h[3],a=this.h[4],A=n,f=i,l=s,p=o,I=a,S=0;S<80;S++){var _=H9(Ry(q9(n,G9(S,i,s,o),t[R0e[S]+r],_0e(S)),T0e[S]),a);n=a,a=o,o=Ry(s,10),s=i,i=_,_=H9(Ry(q9(A,G9(79-S,f,l,p),t[D0e[S]+r],v0e(S)),N0e[S]),I),A=I,I=p,p=Ry(l,10),l=f,f=_}_=Ud(this.h[1],s,p),this.h[1]=Ud(this.h[2],o,I),this.h[2]=Ud(this.h[3],a,A),this.h[3]=Ud(this.h[4],n,f),this.h[4]=Ud(this.h[0],i,l),this.h[0]=_};fo.prototype._digest=function(t){return t==="hex"?Ff.toHex32(this.h,"little"):Ff.split32(this.h,"little")};function G9(e,t,r,n){return e<=15?t^r^n:e<=31?t&r|~t&n:e<=47?(t|~r)^n:e<=63?t&n|r&~n:t^(r|~n)}function _0e(e){return e<=15?0:e<=31?1518500249:e<=47?1859775393:e<=63?2400959708:2840853838}function v0e(e){return e<=15?1352829926:e<=31?1548603684:e<=47?1836072691:e<=63?2053994217:0}var R0e=[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8,3,10,14,4,9,15,8,1,2,7,0,6,13,11,5,12,1,9,11,10,0,8,12,4,13,3,7,15,14,5,6,2,4,0,5,9,7,12,2,10,14,1,3,8,11,6,15,13],D0e=[5,14,7,0,9,2,11,4,13,6,15,8,1,10,3,12,6,11,3,7,0,13,5,10,14,15,8,12,4,9,1,2,15,5,1,3,7,14,6,9,11,8,12,2,10,0,4,13,8,6,4,1,3,11,15,0,5,12,2,13,9,7,10,14,12,15,10,4,1,5,8,7,6,2,13,14,0,3,9,11],T0e=[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8,7,6,8,13,11,9,7,15,7,12,15,9,11,7,13,12,11,13,6,7,14,9,13,15,14,8,13,6,5,12,7,5,11,12,14,15,14,15,9,8,9,14,5,6,8,6,5,12,9,15,5,11,6,8,13,12,5,12,13,14,11,8,5,6],N0e=[8,9,9,11,13,15,15,5,7,7,8,11,14,14,12,6,9,13,15,7,12,8,9,11,7,7,12,7,6,15,13,11,9,7,15,11,8,6,6,14,12,13,5,14,13,13,7,5,15,5,8,11,14,14,6,14,6,9,12,9,12,5,15,8,8,5,12,9,12,5,14,6,8,13,6,5,15,13,11,11]});var j9=U((mMe,J9)=>{"use strict";var M0e=us(),F0e=zn();function zc(e,t,r){if(!(this instanceof zc))return new zc(e,t,r);this.Hash=e,this.blockSize=e.blockSize/8,this.outSize=e.outSize/8,this.inner=null,this.outer=null,this._init(M0e.toArray(t,r))}J9.exports=zc;zc.prototype._init=function(t){t.length>this.blockSize&&(t=new this.Hash().update(t).digest()),F0e(t.length<=this.blockSize);for(var r=t.length;r<this.blockSize;r++)t.push(0);for(r=0;r<t.length;r++)t[r]^=54;for(this.inner=new this.Hash().update(t),r=0;r<t.length;r++)t[r]^=106;this.outer=new this.Hash().update(t)};zc.prototype.update=function(t,r){return this.inner.update(t,r),this};zc.prototype.digest=function(t){return this.outer.update(this.inner.digest()),this.outer.digest(t)}});var Dy=U(z9=>{var zr=z9;zr.utils=us();zr.common=Yc();zr.sha=O9();zr.ripemd=V9();zr.hmac=j9();zr.sha1=zr.sha.sha1;zr.sha256=zr.sha.sha256;zr.sha224=zr.sha.sha224;zr.sha384=zr.sha.sha384;zr.sha512=zr.sha.sha512;zr.ripemd160=zr.ripemd.ripemd160});var X9=U((IMe,K9)=>{K9.exports={doubles:{step:4,points:[["e60fce93b59e9ec53011aabc21c23e97b2a31369b87a5ae9c44ee89e2a6dec0a","f7e3507399e595929db99f34f57937101296891e44d23f0be1f32cce69616821"],["8282263212c609d9ea2a6e3e172de238d8c39cabd5ac1ca10646e23fd5f51508","11f8a8098557dfe45e8256e830b60ace62d613ac2f7b17bed31b6eaff6e26caf"],["175e159f728b865a72f99cc6c6fc846de0b93833fd2222ed73fce5b551e5b739","d3506e0d9e3c79eba4ef97a51ff71f5eacb5955add24345c6efa6ffee9fed695"],["363d90d447b00c9c99ceac05b6262ee053441c7e55552ffe526bad8f83ff4640","4e273adfc732221953b445397f3363145b9a89008199ecb62003c7f3bee9de9"],["8b4b5f165df3c2be8c6244b5b745638843e4a781a15bcd1b69f79a55dffdf80c","4aad0a6f68d308b4b3fbd7813ab0da04f9e336546162ee56b3eff0c65fd4fd36"],["723cbaa6e5db996d6bf771c00bd548c7b700dbffa6c0e77bcb6115925232fcda","96e867b5595cc498a921137488824d6e2660a0653779494801dc069d9eb39f5f"],["eebfa4d493bebf98ba5feec812c2d3b50947961237a919839a533eca0e7dd7fa","5d9a8ca3970ef0f269ee7edaf178089d9ae4cdc3a711f712ddfd4fdae1de8999"],["100f44da696e71672791d0a09b7bde459f1215a29b3c03bfefd7835b39a48db0","cdd9e13192a00b772ec8f3300c090666b7ff4a18ff5195ac0fbd5cd62bc65a09"],["e1031be262c7ed1b1dc9227a4a04c017a77f8d4464f3b3852c8acde6e534fd2d","9d7061928940405e6bb6a4176597535af292dd419e1ced79a44f18f29456a00d"],["feea6cae46d55b530ac2839f143bd7ec5cf8b266a41d6af52d5e688d9094696d","e57c6b6c97dce1bab06e4e12bf3ecd5c981c8957cc41442d3155debf18090088"],["da67a91d91049cdcb367be4be6ffca3cfeed657d808583de33fa978bc1ec6cb1","9bacaa35481642bc41f463f7ec9780e5dec7adc508f740a17e9ea8e27a68be1d"],["53904faa0b334cdda6e000935ef22151ec08d0f7bb11069f57545ccc1a37b7c0","5bc087d0bc80106d88c9eccac20d3c1c13999981e14434699dcb096b022771c8"],["8e7bcd0bd35983a7719cca7764ca906779b53a043a9b8bcaeff959f43ad86047","10b7770b2a3da4b3940310420ca9514579e88e2e47fd68b3ea10047e8460372a"],["385eed34c1cdff21e6d0818689b81bde71a7f4f18397e6690a841e1599c43862","283bebc3e8ea23f56701de19e9ebf4576b304eec2086dc8cc0458fe5542e5453"],["6f9d9b803ecf191637c73a4413dfa180fddf84a5947fbc9c606ed86c3fac3a7","7c80c68e603059ba69b8e2a30e45c4d47ea4dd2f5c281002d86890603a842160"],["3322d401243c4e2582a2147c104d6ecbf774d163db0f5e5313b7e0e742d0e6bd","56e70797e9664ef5bfb019bc4ddaf9b72805f63ea2873af624f3a2e96c28b2a0"],["85672c7d2de0b7da2bd1770d89665868741b3f9af7643397721d74d28134ab83","7c481b9b5b43b2eb6374049bfa62c2e5e77f17fcc5298f44c8e3094f790313a6"],["948bf809b1988a46b06c9f1919413b10f9226c60f668832ffd959af60c82a0a","53a562856dcb6646dc6b74c5d1c3418c6d4dff08c97cd2bed4cb7f88d8c8e589"],["6260ce7f461801c34f067ce0f02873a8f1b0e44dfc69752accecd819f38fd8e8","bc2da82b6fa5b571a7f09049776a1ef7ecd292238051c198c1a84e95b2b4ae17"],["e5037de0afc1d8d43d8348414bbf4103043ec8f575bfdc432953cc8d2037fa2d","4571534baa94d3b5f9f98d09fb990bddbd5f5b03ec481f10e0e5dc841d755bda"],["e06372b0f4a207adf5ea905e8f1771b4e7e8dbd1c6a6c5b725866a0ae4fce725","7a908974bce18cfe12a27bb2ad5a488cd7484a7787104870b27034f94eee31dd"],["213c7a715cd5d45358d0bbf9dc0ce02204b10bdde2a3f58540ad6908d0559754","4b6dad0b5ae462507013ad06245ba190bb4850f5f36a7eeddff2c27534b458f2"],["4e7c272a7af4b34e8dbb9352a5419a87e2838c70adc62cddf0cc3a3b08fbd53c","17749c766c9d0b18e16fd09f6def681b530b9614bff7dd33e0b3941817dcaae6"],["fea74e3dbe778b1b10f238ad61686aa5c76e3db2be43057632427e2840fb27b6","6e0568db9b0b13297cf674deccb6af93126b596b973f7b77701d3db7f23cb96f"],["76e64113f677cf0e10a2570d599968d31544e179b760432952c02a4417bdde39","c90ddf8dee4e95cf577066d70681f0d35e2a33d2b56d2032b4b1752d1901ac01"],["c738c56b03b2abe1e8281baa743f8f9a8f7cc643df26cbee3ab150242bcbb891","893fb578951ad2537f718f2eacbfbbbb82314eef7880cfe917e735d9699a84c3"],["d895626548b65b81e264c7637c972877d1d72e5f3a925014372e9f6588f6c14b","febfaa38f2bc7eae728ec60818c340eb03428d632bb067e179363ed75d7d991f"],["b8da94032a957518eb0f6433571e8761ceffc73693e84edd49150a564f676e03","2804dfa44805a1e4d7c99cc9762808b092cc584d95ff3b511488e4e74efdf6e7"],["e80fea14441fb33a7d8adab9475d7fab2019effb5156a792f1a11778e3c0df5d","eed1de7f638e00771e89768ca3ca94472d155e80af322ea9fcb4291b6ac9ec78"],["a301697bdfcd704313ba48e51d567543f2a182031efd6915ddc07bbcc4e16070","7370f91cfb67e4f5081809fa25d40f9b1735dbf7c0a11a130c0d1a041e177ea1"],["90ad85b389d6b936463f9d0512678de208cc330b11307fffab7ac63e3fb04ed4","e507a3620a38261affdcbd9427222b839aefabe1582894d991d4d48cb6ef150"],["8f68b9d2f63b5f339239c1ad981f162ee88c5678723ea3351b7b444c9ec4c0da","662a9f2dba063986de1d90c2b6be215dbbea2cfe95510bfdf23cbf79501fff82"],["e4f3fb0176af85d65ff99ff9198c36091f48e86503681e3e6686fd5053231e11","1e63633ad0ef4f1c1661a6d0ea02b7286cc7e74ec951d1c9822c38576feb73bc"],["8c00fa9b18ebf331eb961537a45a4266c7034f2f0d4e1d0716fb6eae20eae29e","efa47267fea521a1a9dc343a3736c974c2fadafa81e36c54e7d2a4c66702414b"],["e7a26ce69dd4829f3e10cec0a9e98ed3143d084f308b92c0997fddfc60cb3e41","2a758e300fa7984b471b006a1aafbb18d0a6b2c0420e83e20e8a9421cf2cfd51"],["b6459e0ee3662ec8d23540c223bcbdc571cbcb967d79424f3cf29eb3de6b80ef","67c876d06f3e06de1dadf16e5661db3c4b3ae6d48e35b2ff30bf0b61a71ba45"],["d68a80c8280bb840793234aa118f06231d6f1fc67e73c5a5deda0f5b496943e8","db8ba9fff4b586d00c4b1f9177b0e28b5b0e7b8f7845295a294c84266b133120"],["324aed7df65c804252dc0270907a30b09612aeb973449cea4095980fc28d3d5d","648a365774b61f2ff130c0c35aec1f4f19213b0c7e332843967224af96ab7c84"],["4df9c14919cde61f6d51dfdbe5fee5dceec4143ba8d1ca888e8bd373fd054c96","35ec51092d8728050974c23a1d85d4b5d506cdc288490192ebac06cad10d5d"],["9c3919a84a474870faed8a9c1cc66021523489054d7f0308cbfc99c8ac1f98cd","ddb84f0f4a4ddd57584f044bf260e641905326f76c64c8e6be7e5e03d4fc599d"],["6057170b1dd12fdf8de05f281d8e06bb91e1493a8b91d4cc5a21382120a959e5","9a1af0b26a6a4807add9a2daf71df262465152bc3ee24c65e899be932385a2a8"],["a576df8e23a08411421439a4518da31880cef0fba7d4df12b1a6973eecb94266","40a6bf20e76640b2c92b97afe58cd82c432e10a7f514d9f3ee8be11ae1b28ec8"],["7778a78c28dec3e30a05fe9629de8c38bb30d1f5cf9a3a208f763889be58ad71","34626d9ab5a5b22ff7098e12f2ff580087b38411ff24ac563b513fc1fd9f43ac"],["928955ee637a84463729fd30e7afd2ed5f96274e5ad7e5cb09eda9c06d903ac","c25621003d3f42a827b78a13093a95eeac3d26efa8a8d83fc5180e935bcd091f"],["85d0fef3ec6db109399064f3a0e3b2855645b4a907ad354527aae75163d82751","1f03648413a38c0be29d496e582cf5663e8751e96877331582c237a24eb1f962"],["ff2b0dce97eece97c1c9b6041798b85dfdfb6d8882da20308f5404824526087e","493d13fef524ba188af4c4dc54d07936c7b7ed6fb90e2ceb2c951e01f0c29907"],["827fbbe4b1e880ea9ed2b2e6301b212b57f1ee148cd6dd28780e5e2cf856e241","c60f9c923c727b0b71bef2c67d1d12687ff7a63186903166d605b68baec293ec"],["eaa649f21f51bdbae7be4ae34ce6e5217a58fdce7f47f9aa7f3b58fa2120e2b3","be3279ed5bbbb03ac69a80f89879aa5a01a6b965f13f7e59d47a5305ba5ad93d"],["e4a42d43c5cf169d9391df6decf42ee541b6d8f0c9a137401e23632dda34d24f","4d9f92e716d1c73526fc99ccfb8ad34ce886eedfa8d8e4f13a7f7131deba9414"],["1ec80fef360cbdd954160fadab352b6b92b53576a88fea4947173b9d4300bf19","aeefe93756b5340d2f3a4958a7abbf5e0146e77f6295a07b671cdc1cc107cefd"],["146a778c04670c2f91b00af4680dfa8bce3490717d58ba889ddb5928366642be","b318e0ec3354028add669827f9d4b2870aaa971d2f7e5ed1d0b297483d83efd0"],["fa50c0f61d22e5f07e3acebb1aa07b128d0012209a28b9776d76a8793180eef9","6b84c6922397eba9b72cd2872281a68a5e683293a57a213b38cd8d7d3f4f2811"],["da1d61d0ca721a11b1a5bf6b7d88e8421a288ab5d5bba5220e53d32b5f067ec2","8157f55a7c99306c79c0766161c91e2966a73899d279b48a655fba0f1ad836f1"],["a8e282ff0c9706907215ff98e8fd416615311de0446f1e062a73b0610d064e13","7f97355b8db81c09abfb7f3c5b2515888b679a3e50dd6bd6cef7c73111f4cc0c"],["174a53b9c9a285872d39e56e6913cab15d59b1fa512508c022f382de8319497c","ccc9dc37abfc9c1657b4155f2c47f9e6646b3a1d8cb9854383da13ac079afa73"],["959396981943785c3d3e57edf5018cdbe039e730e4918b3d884fdff09475b7ba","2e7e552888c331dd8ba0386a4b9cd6849c653f64c8709385e9b8abf87524f2fd"],["d2a63a50ae401e56d645a1153b109a8fcca0a43d561fba2dbb51340c9d82b151","e82d86fb6443fcb7565aee58b2948220a70f750af484ca52d4142174dcf89405"],["64587e2335471eb890ee7896d7cfdc866bacbdbd3839317b3436f9b45617e073","d99fcdd5bf6902e2ae96dd6447c299a185b90a39133aeab358299e5e9faf6589"],["8481bde0e4e4d885b3a546d3e549de042f0aa6cea250e7fd358d6c86dd45e458","38ee7b8cba5404dd84a25bf39cecb2ca900a79c42b262e556d64b1b59779057e"],["13464a57a78102aa62b6979ae817f4637ffcfed3c4b1ce30bcd6303f6caf666b","69be159004614580ef7e433453ccb0ca48f300a81d0942e13f495a907f6ecc27"],["bc4a9df5b713fe2e9aef430bcc1dc97a0cd9ccede2f28588cada3a0d2d83f366","d3a81ca6e785c06383937adf4b798caa6e8a9fbfa547b16d758d666581f33c1"],["8c28a97bf8298bc0d23d8c749452a32e694b65e30a9472a3954ab30fe5324caa","40a30463a3305193378fedf31f7cc0eb7ae784f0451cb9459e71dc73cbef9482"],["8ea9666139527a8c1dd94ce4f071fd23c8b350c5a4bb33748c4ba111faccae0","620efabbc8ee2782e24e7c0cfb95c5d735b783be9cf0f8e955af34a30e62b945"],["dd3625faef5ba06074669716bbd3788d89bdde815959968092f76cc4eb9a9787","7a188fa3520e30d461da2501045731ca941461982883395937f68d00c644a573"],["f710d79d9eb962297e4f6232b40e8f7feb2bc63814614d692c12de752408221e","ea98e67232d3b3295d3b535532115ccac8612c721851617526ae47a9c77bfc82"]]},naf:{wnd:7,points:[["f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9","388f7b0f632de8140fe337e62a37f3566500a99934c2231b6cb9fd7584b8e672"],["2f8bde4d1a07209355b4a7250a5c5128e88b84bddc619ab7cba8d569b240efe4","d8ac222636e5e3d6d4dba9dda6c9c426f788271bab0d6840dca87d3aa6ac62d6"],["5cbdf0646e5db4eaa398f365f2ea7a0e3d419b7e0330e39ce92bddedcac4f9bc","6aebca40ba255960a3178d6d861a54dba813d0b813fde7b5a5082628087264da"],["acd484e2f0c7f65309ad178a9f559abde09796974c57e714c35f110dfc27ccbe","cc338921b0a7d9fd64380971763b61e9add888a4375f8e0f05cc262ac64f9c37"],["774ae7f858a9411e5ef4246b70c65aac5649980be5c17891bbec17895da008cb","d984a032eb6b5e190243dd56d7b7b365372db1e2dff9d6a8301d74c9c953c61b"],["f28773c2d975288bc7d1d205c3748651b075fbc6610e58cddeeddf8f19405aa8","ab0902e8d880a89758212eb65cdaf473a1a06da521fa91f29b5cb52db03ed81"],["d7924d4f7d43ea965a465ae3095ff41131e5946f3c85f79e44adbcf8e27e080e","581e2872a86c72a683842ec228cc6defea40af2bd896d3a5c504dc9ff6a26b58"],["defdea4cdb677750a420fee807eacf21eb9898ae79b9768766e4faa04a2d4a34","4211ab0694635168e997b0ead2a93daeced1f4a04a95c0f6cfb199f69e56eb77"],["2b4ea0a797a443d293ef5cff444f4979f06acfebd7e86d277475656138385b6c","85e89bc037945d93b343083b5a1c86131a01f60c50269763b570c854e5c09b7a"],["352bbf4a4cdd12564f93fa332ce333301d9ad40271f8107181340aef25be59d5","321eb4075348f534d59c18259dda3e1f4a1b3b2e71b1039c67bd3d8bcf81998c"],["2fa2104d6b38d11b0230010559879124e42ab8dfeff5ff29dc9cdadd4ecacc3f","2de1068295dd865b64569335bd5dd80181d70ecfc882648423ba76b532b7d67"],["9248279b09b4d68dab21a9b066edda83263c3d84e09572e269ca0cd7f5453714","73016f7bf234aade5d1aa71bdea2b1ff3fc0de2a887912ffe54a32ce97cb3402"],["daed4f2be3a8bf278e70132fb0beb7522f570e144bf615c07e996d443dee8729","a69dce4a7d6c98e8d4a1aca87ef8d7003f83c230f3afa726ab40e52290be1c55"],["c44d12c7065d812e8acf28d7cbb19f9011ecd9e9fdf281b0e6a3b5e87d22e7db","2119a460ce326cdc76c45926c982fdac0e106e861edf61c5a039063f0e0e6482"],["6a245bf6dc698504c89a20cfded60853152b695336c28063b61c65cbd269e6b4","e022cf42c2bd4a708b3f5126f16a24ad8b33ba48d0423b6efd5e6348100d8a82"],["1697ffa6fd9de627c077e3d2fe541084ce13300b0bec1146f95ae57f0d0bd6a5","b9c398f186806f5d27561506e4557433a2cf15009e498ae7adee9d63d01b2396"],["605bdb019981718b986d0f07e834cb0d9deb8360ffb7f61df982345ef27a7479","2972d2de4f8d20681a78d93ec96fe23c26bfae84fb14db43b01e1e9056b8c49"],["62d14dab4150bf497402fdc45a215e10dcb01c354959b10cfe31c7e9d87ff33d","80fc06bd8cc5b01098088a1950eed0db01aa132967ab472235f5642483b25eaf"],["80c60ad0040f27dade5b4b06c408e56b2c50e9f56b9b8b425e555c2f86308b6f","1c38303f1cc5c30f26e66bad7fe72f70a65eed4cbe7024eb1aa01f56430bd57a"],["7a9375ad6167ad54aa74c6348cc54d344cc5dc9487d847049d5eabb0fa03c8fb","d0e3fa9eca8726909559e0d79269046bdc59ea10c70ce2b02d499ec224dc7f7"],["d528ecd9b696b54c907a9ed045447a79bb408ec39b68df504bb51f459bc3ffc9","eecf41253136e5f99966f21881fd656ebc4345405c520dbc063465b521409933"],["49370a4b5f43412ea25f514e8ecdad05266115e4a7ecb1387231808f8b45963","758f3f41afd6ed428b3081b0512fd62a54c3f3afbb5b6764b653052a12949c9a"],["77f230936ee88cbbd73df930d64702ef881d811e0e1498e2f1c13eb1fc345d74","958ef42a7886b6400a08266e9ba1b37896c95330d97077cbbe8eb3c7671c60d6"],["f2dac991cc4ce4b9ea44887e5c7c0bce58c80074ab9d4dbaeb28531b7739f530","e0dedc9b3b2f8dad4da1f32dec2531df9eb5fbeb0598e4fd1a117dba703a3c37"],["463b3d9f662621fb1b4be8fbbe2520125a216cdfc9dae3debcba4850c690d45b","5ed430d78c296c3543114306dd8622d7c622e27c970a1de31cb377b01af7307e"],["f16f804244e46e2a09232d4aff3b59976b98fac14328a2d1a32496b49998f247","cedabd9b82203f7e13d206fcdf4e33d92a6c53c26e5cce26d6579962c4e31df6"],["caf754272dc84563b0352b7a14311af55d245315ace27c65369e15f7151d41d1","cb474660ef35f5f2a41b643fa5e460575f4fa9b7962232a5c32f908318a04476"],["2600ca4b282cb986f85d0f1709979d8b44a09c07cb86d7c124497bc86f082120","4119b88753c15bd6a693b03fcddbb45d5ac6be74ab5f0ef44b0be9475a7e4b40"],["7635ca72d7e8432c338ec53cd12220bc01c48685e24f7dc8c602a7746998e435","91b649609489d613d1d5e590f78e6d74ecfc061d57048bad9e76f302c5b9c61"],["754e3239f325570cdbbf4a87deee8a66b7f2b33479d468fbc1a50743bf56cc18","673fb86e5bda30fb3cd0ed304ea49a023ee33d0197a695d0c5d98093c536683"],["e3e6bd1071a1e96aff57859c82d570f0330800661d1c952f9fe2694691d9b9e8","59c9e0bba394e76f40c0aa58379a3cb6a5a2283993e90c4167002af4920e37f5"],["186b483d056a033826ae73d88f732985c4ccb1f32ba35f4b4cc47fdcf04aa6eb","3b952d32c67cf77e2e17446e204180ab21fb8090895138b4a4a797f86e80888b"],["df9d70a6b9876ce544c98561f4be4f725442e6d2b737d9c91a8321724ce0963f","55eb2dafd84d6ccd5f862b785dc39d4ab157222720ef9da217b8c45cf2ba2417"],["5edd5cc23c51e87a497ca815d5dce0f8ab52554f849ed8995de64c5f34ce7143","efae9c8dbc14130661e8cec030c89ad0c13c66c0d17a2905cdc706ab7399a868"],["290798c2b6476830da12fe02287e9e777aa3fba1c355b17a722d362f84614fba","e38da76dcd440621988d00bcf79af25d5b29c094db2a23146d003afd41943e7a"],["af3c423a95d9f5b3054754efa150ac39cd29552fe360257362dfdecef4053b45","f98a3fd831eb2b749a93b0e6f35cfb40c8cd5aa667a15581bc2feded498fd9c6"],["766dbb24d134e745cccaa28c99bf274906bb66b26dcf98df8d2fed50d884249a","744b1152eacbe5e38dcc887980da38b897584a65fa06cedd2c924f97cbac5996"],["59dbf46f8c94759ba21277c33784f41645f7b44f6c596a58ce92e666191abe3e","c534ad44175fbc300f4ea6ce648309a042ce739a7919798cd85e216c4a307f6e"],["f13ada95103c4537305e691e74e9a4a8dd647e711a95e73cb62dc6018cfd87b8","e13817b44ee14de663bf4bc808341f326949e21a6a75c2570778419bdaf5733d"],["7754b4fa0e8aced06d4167a2c59cca4cda1869c06ebadfb6488550015a88522c","30e93e864e669d82224b967c3020b8fa8d1e4e350b6cbcc537a48b57841163a2"],["948dcadf5990e048aa3874d46abef9d701858f95de8041d2a6828c99e2262519","e491a42537f6e597d5d28a3224b1bc25df9154efbd2ef1d2cbba2cae5347d57e"],["7962414450c76c1689c7b48f8202ec37fb224cf5ac0bfa1570328a8a3d7c77ab","100b610ec4ffb4760d5c1fc133ef6f6b12507a051f04ac5760afa5b29db83437"],["3514087834964b54b15b160644d915485a16977225b8847bb0dd085137ec47ca","ef0afbb2056205448e1652c48e8127fc6039e77c15c2378b7e7d15a0de293311"],["d3cc30ad6b483e4bc79ce2c9dd8bc54993e947eb8df787b442943d3f7b527eaf","8b378a22d827278d89c5e9be8f9508ae3c2ad46290358630afb34db04eede0a4"],["1624d84780732860ce1c78fcbfefe08b2b29823db913f6493975ba0ff4847610","68651cf9b6da903e0914448c6cd9d4ca896878f5282be4c8cc06e2a404078575"],["733ce80da955a8a26902c95633e62a985192474b5af207da6df7b4fd5fc61cd4","f5435a2bd2badf7d485a4d8b8db9fcce3e1ef8e0201e4578c54673bc1dc5ea1d"],["15d9441254945064cf1a1c33bbd3b49f8966c5092171e699ef258dfab81c045c","d56eb30b69463e7234f5137b73b84177434800bacebfc685fc37bbe9efe4070d"],["a1d0fcf2ec9de675b612136e5ce70d271c21417c9d2b8aaaac138599d0717940","edd77f50bcb5a3cab2e90737309667f2641462a54070f3d519212d39c197a629"],["e22fbe15c0af8ccc5780c0735f84dbe9a790badee8245c06c7ca37331cb36980","a855babad5cd60c88b430a69f53a1a7a38289154964799be43d06d77d31da06"],["311091dd9860e8e20ee13473c1155f5f69635e394704eaa74009452246cfa9b3","66db656f87d1f04fffd1f04788c06830871ec5a64feee685bd80f0b1286d8374"],["34c1fd04d301be89b31c0442d3e6ac24883928b45a9340781867d4232ec2dbdf","9414685e97b1b5954bd46f730174136d57f1ceeb487443dc5321857ba73abee"],["f219ea5d6b54701c1c14de5b557eb42a8d13f3abbcd08affcc2a5e6b049b8d63","4cb95957e83d40b0f73af4544cccf6b1f4b08d3c07b27fb8d8c2962a400766d1"],["d7b8740f74a8fbaab1f683db8f45de26543a5490bca627087236912469a0b448","fa77968128d9c92ee1010f337ad4717eff15db5ed3c049b3411e0315eaa4593b"],["32d31c222f8f6f0ef86f7c98d3a3335ead5bcd32abdd94289fe4d3091aa824bf","5f3032f5892156e39ccd3d7915b9e1da2e6dac9e6f26e961118d14b8462e1661"],["7461f371914ab32671045a155d9831ea8793d77cd59592c4340f86cbc18347b5","8ec0ba238b96bec0cbdddcae0aa442542eee1ff50c986ea6b39847b3cc092ff6"],["ee079adb1df1860074356a25aa38206a6d716b2c3e67453d287698bad7b2b2d6","8dc2412aafe3be5c4c5f37e0ecc5f9f6a446989af04c4e25ebaac479ec1c8c1e"],["16ec93e447ec83f0467b18302ee620f7e65de331874c9dc72bfd8616ba9da6b5","5e4631150e62fb40d0e8c2a7ca5804a39d58186a50e497139626778e25b0674d"],["eaa5f980c245f6f038978290afa70b6bd8855897f98b6aa485b96065d537bd99","f65f5d3e292c2e0819a528391c994624d784869d7e6ea67fb18041024edc07dc"],["78c9407544ac132692ee1910a02439958ae04877151342ea96c4b6b35a49f51","f3e0319169eb9b85d5404795539a5e68fa1fbd583c064d2462b675f194a3ddb4"],["494f4be219a1a77016dcd838431aea0001cdc8ae7a6fc688726578d9702857a5","42242a969283a5f339ba7f075e36ba2af925ce30d767ed6e55f4b031880d562c"],["a598a8030da6d86c6bc7f2f5144ea549d28211ea58faa70ebf4c1e665c1fe9b5","204b5d6f84822c307e4b4a7140737aec23fc63b65b35f86a10026dbd2d864e6b"],["c41916365abb2b5d09192f5f2dbeafec208f020f12570a184dbadc3e58595997","4f14351d0087efa49d245b328984989d5caf9450f34bfc0ed16e96b58fa9913"],["841d6063a586fa475a724604da03bc5b92a2e0d2e0a36acfe4c73a5514742881","73867f59c0659e81904f9a1c7543698e62562d6744c169ce7a36de01a8d6154"],["5e95bb399a6971d376026947f89bde2f282b33810928be4ded112ac4d70e20d5","39f23f366809085beebfc71181313775a99c9aed7d8ba38b161384c746012865"],["36e4641a53948fd476c39f8a99fd974e5ec07564b5315d8bf99471bca0ef2f66","d2424b1b1abe4eb8164227b085c9aa9456ea13493fd563e06fd51cf5694c78fc"],["336581ea7bfbbb290c191a2f507a41cf5643842170e914faeab27c2c579f726","ead12168595fe1be99252129b6e56b3391f7ab1410cd1e0ef3dcdcabd2fda224"],["8ab89816dadfd6b6a1f2634fcf00ec8403781025ed6890c4849742706bd43ede","6fdcef09f2f6d0a044e654aef624136f503d459c3e89845858a47a9129cdd24e"],["1e33f1a746c9c5778133344d9299fcaa20b0938e8acff2544bb40284b8c5fb94","60660257dd11b3aa9c8ed618d24edff2306d320f1d03010e33a7d2057f3b3b6"],["85b7c1dcb3cec1b7ee7f30ded79dd20a0ed1f4cc18cbcfcfa410361fd8f08f31","3d98a9cdd026dd43f39048f25a8847f4fcafad1895d7a633c6fed3c35e999511"],["29df9fbd8d9e46509275f4b125d6d45d7fbe9a3b878a7af872a2800661ac5f51","b4c4fe99c775a606e2d8862179139ffda61dc861c019e55cd2876eb2a27d84b"],["a0b1cae06b0a847a3fea6e671aaf8adfdfe58ca2f768105c8082b2e449fce252","ae434102edde0958ec4b19d917a6a28e6b72da1834aff0e650f049503a296cf2"],["4e8ceafb9b3e9a136dc7ff67e840295b499dfb3b2133e4ba113f2e4c0e121e5","cf2174118c8b6d7a4b48f6d534ce5c79422c086a63460502b827ce62a326683c"],["d24a44e047e19b6f5afb81c7ca2f69080a5076689a010919f42725c2b789a33b","6fb8d5591b466f8fc63db50f1c0f1c69013f996887b8244d2cdec417afea8fa3"],["ea01606a7a6c9cdd249fdfcfacb99584001edd28abbab77b5104e98e8e3b35d4","322af4908c7312b0cfbfe369f7a7b3cdb7d4494bc2823700cfd652188a3ea98d"],["af8addbf2b661c8a6c6328655eb96651252007d8c5ea31be4ad196de8ce2131f","6749e67c029b85f52a034eafd096836b2520818680e26ac8f3dfbcdb71749700"],["e3ae1974566ca06cc516d47e0fb165a674a3dabcfca15e722f0e3450f45889","2aeabe7e4531510116217f07bf4d07300de97e4874f81f533420a72eeb0bd6a4"],["591ee355313d99721cf6993ffed1e3e301993ff3ed258802075ea8ced397e246","b0ea558a113c30bea60fc4775460c7901ff0b053d25ca2bdeee98f1a4be5d196"],["11396d55fda54c49f19aa97318d8da61fa8584e47b084945077cf03255b52984","998c74a8cd45ac01289d5833a7beb4744ff536b01b257be4c5767bea93ea57a4"],["3c5d2a1ba39c5a1790000738c9e0c40b8dcdfd5468754b6405540157e017aa7a","b2284279995a34e2f9d4de7396fc18b80f9b8b9fdd270f6661f79ca4c81bd257"],["cc8704b8a60a0defa3a99a7299f2e9c3fbc395afb04ac078425ef8a1793cc030","bdd46039feed17881d1e0862db347f8cf395b74fc4bcdc4e940b74e3ac1f1b13"],["c533e4f7ea8555aacd9777ac5cad29b97dd4defccc53ee7ea204119b2889b197","6f0a256bc5efdf429a2fb6242f1a43a2d9b925bb4a4b3a26bb8e0f45eb596096"],["c14f8f2ccb27d6f109f6d08d03cc96a69ba8c34eec07bbcf566d48e33da6593","c359d6923bb398f7fd4473e16fe1c28475b740dd098075e6c0e8649113dc3a38"],["a6cbc3046bc6a450bac24789fa17115a4c9739ed75f8f21ce441f72e0b90e6ef","21ae7f4680e889bb130619e2c0f95a360ceb573c70603139862afd617fa9b9f"],["347d6d9a02c48927ebfb86c1359b1caf130a3c0267d11ce6344b39f99d43cc38","60ea7f61a353524d1c987f6ecec92f086d565ab687870cb12689ff1e31c74448"],["da6545d2181db8d983f7dcb375ef5866d47c67b1bf31c8cf855ef7437b72656a","49b96715ab6878a79e78f07ce5680c5d6673051b4935bd897fea824b77dc208a"],["c40747cc9d012cb1a13b8148309c6de7ec25d6945d657146b9d5994b8feb1111","5ca560753be2a12fc6de6caf2cb489565db936156b9514e1bb5e83037e0fa2d4"],["4e42c8ec82c99798ccf3a610be870e78338c7f713348bd34c8203ef4037f3502","7571d74ee5e0fb92a7a8b33a07783341a5492144cc54bcc40a94473693606437"],["3775ab7089bc6af823aba2e1af70b236d251cadb0c86743287522a1b3b0dedea","be52d107bcfa09d8bcb9736a828cfa7fac8db17bf7a76a2c42ad961409018cf7"],["cee31cbf7e34ec379d94fb814d3d775ad954595d1314ba8846959e3e82f74e26","8fd64a14c06b589c26b947ae2bcf6bfa0149ef0be14ed4d80f448a01c43b1c6d"],["b4f9eaea09b6917619f6ea6a4eb5464efddb58fd45b1ebefcdc1a01d08b47986","39e5c9925b5a54b07433a4f18c61726f8bb131c012ca542eb24a8ac07200682a"],["d4263dfc3d2df923a0179a48966d30ce84e2515afc3dccc1b77907792ebcc60e","62dfaf07a0f78feb30e30d6295853ce189e127760ad6cf7fae164e122a208d54"],["48457524820fa65a4f8d35eb6930857c0032acc0a4a2de422233eeda897612c4","25a748ab367979d98733c38a1fa1c2e7dc6cc07db2d60a9ae7a76aaa49bd0f77"],["dfeeef1881101f2cb11644f3a2afdfc2045e19919152923f367a1767c11cceda","ecfb7056cf1de042f9420bab396793c0c390bde74b4bbdff16a83ae09a9a7517"],["6d7ef6b17543f8373c573f44e1f389835d89bcbc6062ced36c82df83b8fae859","cd450ec335438986dfefa10c57fea9bcc521a0959b2d80bbf74b190dca712d10"],["e75605d59102a5a2684500d3b991f2e3f3c88b93225547035af25af66e04541f","f5c54754a8f71ee540b9b48728473e314f729ac5308b06938360990e2bfad125"],["eb98660f4c4dfaa06a2be453d5020bc99a0c2e60abe388457dd43fefb1ed620c","6cb9a8876d9cb8520609af3add26cd20a0a7cd8a9411131ce85f44100099223e"],["13e87b027d8514d35939f2e6892b19922154596941888336dc3563e3b8dba942","fef5a3c68059a6dec5d624114bf1e91aac2b9da568d6abeb2570d55646b8adf1"],["ee163026e9fd6fe017c38f06a5be6fc125424b371ce2708e7bf4491691e5764a","1acb250f255dd61c43d94ccc670d0f58f49ae3fa15b96623e5430da0ad6c62b2"],["b268f5ef9ad51e4d78de3a750c2dc89b1e626d43505867999932e5db33af3d80","5f310d4b3c99b9ebb19f77d41c1dee018cf0d34fd4191614003e945a1216e423"],["ff07f3118a9df035e9fad85eb6c7bfe42b02f01ca99ceea3bf7ffdba93c4750d","438136d603e858a3a5c440c38eccbaddc1d2942114e2eddd4740d098ced1f0d8"],["8d8b9855c7c052a34146fd20ffb658bea4b9f69e0d825ebec16e8c3ce2b526a1","cdb559eedc2d79f926baf44fb84ea4d44bcf50fee51d7ceb30e2e7f463036758"],["52db0b5384dfbf05bfa9d472d7ae26dfe4b851ceca91b1eba54263180da32b63","c3b997d050ee5d423ebaf66a6db9f57b3180c902875679de924b69d84a7b375"],["e62f9490d3d51da6395efd24e80919cc7d0f29c3f3fa48c6fff543becbd43352","6d89ad7ba4876b0b22c2ca280c682862f342c8591f1daf5170e07bfd9ccafa7d"],["7f30ea2476b399b4957509c88f77d0191afa2ff5cb7b14fd6d8e7d65aaab1193","ca5ef7d4b231c94c3b15389a5f6311e9daff7bb67b103e9880ef4bff637acaec"],["5098ff1e1d9f14fb46a210fada6c903fef0fb7b4a1dd1d9ac60a0361800b7a00","9731141d81fc8f8084d37c6e7542006b3ee1b40d60dfe5362a5b132fd17ddc0"],["32b78c7de9ee512a72895be6b9cbefa6e2f3c4ccce445c96b9f2c81e2778ad58","ee1849f513df71e32efc3896ee28260c73bb80547ae2275ba497237794c8753c"],["e2cb74fddc8e9fbcd076eef2a7c72b0ce37d50f08269dfc074b581550547a4f7","d3aa2ed71c9dd2247a62df062736eb0baddea9e36122d2be8641abcb005cc4a4"],["8438447566d4d7bedadc299496ab357426009a35f235cb141be0d99cd10ae3a8","c4e1020916980a4da5d01ac5e6ad330734ef0d7906631c4f2390426b2edd791f"],["4162d488b89402039b584c6fc6c308870587d9c46f660b878ab65c82c711d67e","67163e903236289f776f22c25fb8a3afc1732f2b84b4e95dbda47ae5a0852649"],["3fad3fa84caf0f34f0f89bfd2dcf54fc175d767aec3e50684f3ba4a4bf5f683d","cd1bc7cb6cc407bb2f0ca647c718a730cf71872e7d0d2a53fa20efcdfe61826"],["674f2600a3007a00568c1a7ce05d0816c1fb84bf1370798f1c69532faeb1a86b","299d21f9413f33b3edf43b257004580b70db57da0b182259e09eecc69e0d38a5"],["d32f4da54ade74abb81b815ad1fb3b263d82d6c692714bcff87d29bd5ee9f08f","f9429e738b8e53b968e99016c059707782e14f4535359d582fc416910b3eea87"],["30e4e670435385556e593657135845d36fbb6931f72b08cb1ed954f1e3ce3ff6","462f9bce619898638499350113bbc9b10a878d35da70740dc695a559eb88db7b"],["be2062003c51cc3004682904330e4dee7f3dcd10b01e580bf1971b04d4cad297","62188bc49d61e5428573d48a74e1c655b1c61090905682a0d5558ed72dccb9bc"],["93144423ace3451ed29e0fb9ac2af211cb6e84a601df5993c419859fff5df04a","7c10dfb164c3425f5c71a3f9d7992038f1065224f72bb9d1d902a6d13037b47c"],["b015f8044f5fcbdcf21ca26d6c34fb8197829205c7b7d2a7cb66418c157b112c","ab8c1e086d04e813744a655b2df8d5f83b3cdc6faa3088c1d3aea1454e3a1d5f"],["d5e9e1da649d97d89e4868117a465a3a4f8a18de57a140d36b3f2af341a21b52","4cb04437f391ed73111a13cc1d4dd0db1693465c2240480d8955e8592f27447a"],["d3ae41047dd7ca065dbf8ed77b992439983005cd72e16d6f996a5316d36966bb","bd1aeb21ad22ebb22a10f0303417c6d964f8cdd7df0aca614b10dc14d125ac46"],["463e2763d885f958fc66cdd22800f0a487197d0a82e377b49f80af87c897b065","bfefacdb0e5d0fd7df3a311a94de062b26b80c61fbc97508b79992671ef7ca7f"],["7985fdfd127c0567c6f53ec1bb63ec3158e597c40bfe747c83cddfc910641917","603c12daf3d9862ef2b25fe1de289aed24ed291e0ec6708703a5bd567f32ed03"],["74a1ad6b5f76e39db2dd249410eac7f99e74c59cb83d2d0ed5ff1543da7703e9","cc6157ef18c9c63cd6193d83631bbea0093e0968942e8c33d5737fd790e0db08"],["30682a50703375f602d416664ba19b7fc9bab42c72747463a71d0896b22f6da3","553e04f6b018b4fa6c8f39e7f311d3176290d0e0f19ca73f17714d9977a22ff8"],["9e2158f0d7c0d5f26c3791efefa79597654e7a2b2464f52b1ee6c1347769ef57","712fcdd1b9053f09003a3481fa7762e9ffd7c8ef35a38509e2fbf2629008373"],["176e26989a43c9cfeba4029c202538c28172e566e3c4fce7322857f3be327d66","ed8cc9d04b29eb877d270b4878dc43c19aefd31f4eee09ee7b47834c1fa4b1c3"],["75d46efea3771e6e68abb89a13ad747ecf1892393dfc4f1b7004788c50374da8","9852390a99507679fd0b86fd2b39a868d7efc22151346e1a3ca4726586a6bed8"],["809a20c67d64900ffb698c4c825f6d5f2310fb0451c869345b7319f645605721","9e994980d9917e22b76b061927fa04143d096ccc54963e6a5ebfa5f3f8e286c1"],["1b38903a43f7f114ed4500b4eac7083fdefece1cf29c63528d563446f972c180","4036edc931a60ae889353f77fd53de4a2708b26b6f5da72ad3394119daf408f9"]]}}});var Ty=U(eP=>{"use strict";var HS=eP,cA=Dy(),OS=TS(),k0e=Kn(),Z9=k0e.assert;function $9(e){e.type==="short"?this.curve=new OS.short(e):e.type==="edwards"?this.curve=new OS.edwards(e):this.curve=new OS.mont(e),this.g=this.curve.g,this.n=this.curve.n,this.hash=e.hash,Z9(this.g.validate(),"Invalid curve"),Z9(this.g.mul(this.n).isInfinity(),"Invalid curve, G*N != O")}HS.PresetCurve=$9;function lA(e,t){Object.defineProperty(HS,e,{configurable:!0,enumerable:!0,get:function(){var r=new $9(t);return Object.defineProperty(HS,e,{configurable:!0,enumerable:!0,value:r}),r}})}lA("p192",{type:"short",prime:"p192",p:"ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff",a:"ffffffff ffffffff ffffffff fffffffe ffffffff fffffffc",b:"64210519 e59c80e7 0fa7e9ab 72243049 feb8deec c146b9b1",n:"ffffffff ffffffff ffffffff 99def836 146bc9b1 b4d22831",hash:cA.sha256,gRed:!1,g:["188da80e b03090f6 7cbf20eb 43a18800 f4ff0afd 82ff1012","07192b95 ffc8da78 631011ed 6b24cdd5 73f977a1 1e794811"]});lA("p224",{type:"short",prime:"p224",p:"ffffffff ffffffff ffffffff ffffffff 00000000 00000000 00000001",a:"ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff fffffffe",b:"b4050a85 0c04b3ab f5413256 5044b0b7 d7bfd8ba 270b3943 2355ffb4",n:"ffffffff ffffffff ffffffff ffff16a2 e0b8f03e 13dd2945 5c5c2a3d",hash:cA.sha256,gRed:!1,g:["b70e0cbd 6bb4bf7f 321390b9 4a03c1d3 56c21122 343280d6 115c1d21","bd376388 b5f723fb 4c22dfe6 cd4375a0 5a074764 44d58199 85007e34"]});lA("p256",{type:"short",prime:null,p:"ffffffff 00000001 00000000 00000000 00000000 ffffffff ffffffff ffffffff",a:"ffffffff 00000001 00000000 00000000 00000000 ffffffff ffffffff fffffffc",b:"5ac635d8 aa3a93e7 b3ebbd55 769886bc 651d06b0 cc53b0f6 3bce3c3e 27d2604b",n:"ffffffff 00000000 ffffffff ffffffff bce6faad a7179e84 f3b9cac2 fc632551",hash:cA.sha256,gRed:!1,g:["6b17d1f2 e12c4247 f8bce6e5 63a440f2 77037d81 2deb33a0 f4a13945 d898c296","4fe342e2 fe1a7f9b 8ee7eb4a 7c0f9e16 2bce3357 6b315ece cbb64068 37bf51f5"]});lA("p384",{type:"short",prime:null,p:"ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe ffffffff 00000000 00000000 ffffffff",a:"ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe ffffffff 00000000 00000000 fffffffc",b:"b3312fa7 e23ee7e4 988e056b e3f82d19 181d9c6e fe814112 0314088f 5013875a c656398d 8a2ed19d 2a85c8ed d3ec2aef",n:"ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff c7634d81 f4372ddf 581a0db2 48b0a77a ecec196a ccc52973",hash:cA.sha384,gRed:!1,g:["aa87ca22 be8b0537 8eb1c71e f320ad74 6e1d3b62 8ba79b98 59f741e0 82542a38 5502f25d bf55296c 3a545e38 72760ab7","3617de4a 96262c6f 5d9e98bf 9292dc29 f8f41dbd 289a147c e9da3113 b5f0b8c0 0a60b1ce 1d7e819d 7a431d7c 90ea0e5f"]});lA("p521",{type:"short",prime:null,p:"000001ff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff",a:"000001ff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffc",b:"00000051 953eb961 8e1c9a1f 929a21a0 b68540ee a2da725b 99b315f3 b8b48991 8ef109e1 56193951 ec7e937b 1652c0bd 3bb1bf07 3573df88 3d2c34f1 ef451fd4 6b503f00",n:"000001ff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffa 51868783 bf2f966b 7fcc0148 f709a5d0 3bb5c9b8 899c47ae bb6fb71e 91386409",hash:cA.sha512,gRed:!1,g:["000000c6 858e06b7 0404e9cd 9e3ecb66 2395b442 9c648139 053fb521 f828af60 6b4d3dba a14b5e77 efe75928 fe1dc127 a2ffa8de 3348b3c1 856a429b f97e7e31 c2e5bd66","00000118 39296a78 9a3bc004 5c8a5fb4 2c7d1bd9 98f54449 579b4468 17afbd17 273e662c 97ee7299 5ef42640 c550b901 3fad0761 353c7086 a272c240 88be9476 9fd16650"]});lA("curve25519",{type:"mont",prime:"p25519",p:"7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed",a:"76d06",b:"1",n:"1000000000000000 0000000000000000 14def9dea2f79cd6 5812631a5cf5d3ed",hash:cA.sha256,gRed:!1,g:["9"]});lA("ed25519",{type:"edwards",prime:"p25519",p:"7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed",a:"-1",c:"1",d:"52036cee2b6ffe73 8cc740797779e898 00700a4d4141d8ab 75eb4dca135978a3",n:"1000000000000000 0000000000000000 14def9dea2f79cd6 5812631a5cf5d3ed",hash:cA.sha256,gRed:!1,g:["216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a","6666666666666666666666666666666666666666666666666666666666666658"]});var qS;try{qS=X9()}catch{qS=void 0}lA("secp256k1",{type:"short",prime:"k256",p:"ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe fffffc2f",a:"0",b:"7",n:"ffffffff ffffffff ffffffff fffffffe baaedce6 af48a03b bfd25e8c d0364141",h:"1",hash:cA.sha256,beta:"7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee",lambda:"5363ad4cc05c30e0a5261c028812645a122e22ea20816678df02967c1b23bd72",basis:[{a:"3086d221a7d46bcde86c90e49284eb15",b:"-e4437ed6010e88286f547fa90abfe4c3"},{a:"114ca50f7a8e2f3f657c1108d9d44cfd8",b:"3086d221a7d46bcde86c90e49284eb15"}],gRed:!1,g:["79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798","483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8",qS]})});var nP=U((CMe,rP)=>{"use strict";var U0e=Dy(),kf=RS(),tP=zn();function hA(e){if(!(this instanceof hA))return new hA(e);this.hash=e.hash,this.predResist=!!e.predResist,this.outLen=this.hash.outSize,this.minEntropy=e.minEntropy||this.hash.hmacStrength,this._reseed=null,this.reseedInterval=null,this.K=null,this.V=null;var t=kf.toArray(e.entropy,e.entropyEnc||"hex"),r=kf.toArray(e.nonce,e.nonceEnc||"hex"),n=kf.toArray(e.pers,e.persEnc||"hex");tP(t.length>=this.minEntropy/8,"Not enough entropy. Minimum is: "+this.minEntropy+" bits"),this._init(t,r,n)}rP.exports=hA;hA.prototype._init=function(t,r,n){var i=t.concat(r).concat(n);this.K=new Array(this.outLen/8),this.V=new Array(this.outLen/8);for(var s=0;s<this.V.length;s++)this.K[s]=0,this.V[s]=1;this._update(i),this._reseed=1,this.reseedInterval=281474976710656};hA.prototype._hmac=function(){return new U0e.hmac(this.hash,this.K)};hA.prototype._update=function(t){var r=this._hmac().update(this.V).update([0]);t&&(r=r.update(t)),this.K=r.digest(),this.V=this._hmac().update(this.V).digest(),t&&(this.K=this._hmac().update(this.V).update([1]).update(t).digest(),this.V=this._hmac().update(this.V).digest())};hA.prototype.reseed=function(t,r,n,i){typeof r!="string"&&(i=n,n=r,r=null),t=kf.toArray(t,r),n=kf.toArray(n,i),tP(t.length>=this.minEntropy/8,"Not enough entropy. Minimum is: "+this.minEntropy+" bits"),this._update(t.concat(n||[])),this._reseed=1};hA.prototype.generate=function(t,r,n,i){if(this._reseed>this.reseedInterval)throw new Error("Reseed is required");typeof r!="string"&&(i=n,n=r,r=null),n&&(n=kf.toArray(n,i||"hex"),this._update(n));for(var s=[];s.length<t;)this.V=this._hmac().update(this.V).digest(),s=s.concat(this.V);var o=s.slice(0,t);return this._update(n),this._reseed++,kf.encode(o,r)}});var sP=U((QMe,iP)=>{"use strict";var x0e=kr(),L0e=Kn(),GS=L0e.assert;function An(e,t){this.ec=e,this.priv=null,this.pub=null,t.priv&&this._importPrivate(t.priv,t.privEnc),t.pub&&this._importPublic(t.pub,t.pubEnc)}iP.exports=An;An.fromPublic=function(t,r,n){return r instanceof An?r:new An(t,{pub:r,pubEnc:n})};An.fromPrivate=function(t,r,n){return r instanceof An?r:new An(t,{priv:r,privEnc:n})};An.prototype.validate=function(){var t=this.getPublic();return t.isInfinity()?{result:!1,reason:"Invalid public key"}:t.validate()?t.mul(this.ec.curve.n).isInfinity()?{result:!0,reason:null}:{result:!1,reason:"Public key * N != O"}:{result:!1,reason:"Public key is not a point"}};An.prototype.getPublic=function(t,r){return typeof t=="string"&&(r=t,t=null),this.pub||(this.pub=this.ec.g.mul(this.priv)),r?this.pub.encode(r,t):this.pub};An.prototype.getPrivate=function(t){return t==="hex"?this.priv.toString(16,2):this.priv};An.prototype._importPrivate=function(t,r){this.priv=new x0e(t,r||16),this.priv=this.priv.umod(this.ec.curve.n)};An.prototype._importPublic=function(t,r){if(t.x||t.y){this.ec.curve.type==="mont"?GS(t.x,"Need x coordinate"):(this.ec.curve.type==="short"||this.ec.curve.type==="edwards")&&GS(t.x&&t.y,"Need both x and y coordinate"),this.pub=this.ec.curve.point(t.x,t.y);return}this.pub=this.ec.curve.decodePoint(t,r)};An.prototype.derive=function(t){return t.validate()||GS(t.validate(),"public point not validated"),t.mul(this.priv).getX()};An.prototype.sign=function(t,r,n){return this.ec.sign(t,this,r,n)};An.prototype.verify=function(t,r,n){return this.ec.verify(t,r,this,void 0,n)};An.prototype.inspect=function(){return"<Key priv: "+(this.priv&&this.priv.toString(16,2))+" pub: "+(this.pub&&this.pub.inspect())+" >"}});var AP=U((wMe,aP)=>{"use strict";var Ny=kr(),VS=Kn(),P0e=VS.assert;function My(e,t){if(e instanceof My)return e;this._importDER(e,t)||(P0e(e.r&&e.s,"Signature without r or s"),this.r=new Ny(e.r,16),this.s=new Ny(e.s,16),e.recoveryParam===void 0?this.recoveryParam=null:this.recoveryParam=e.recoveryParam)}aP.exports=My;function O0e(){this.place=0}function YS(e,t){var r=e[t.place++];if(!(r&128))return r;var n=r&15;if(n===0||n>4||e[t.place]===0)return!1;for(var i=0,s=0,o=t.place;s<n;s++,o++)i<<=8,i|=e[o],i>>>=0;return i<=127?!1:(t.place=o,i)}function oP(e){for(var t=0,r=e.length-1;!e[t]&&!(e[t+1]&128)&&t<r;)t++;return t===0?e:e.slice(t)}My.prototype._importDER=function(t,r){t=VS.toArray(t,r);var n=new O0e;if(t[n.place++]!==48)return!1;var i=YS(t,n);if(i===!1||i+n.place!==t.length||t[n.place++]!==2)return!1;var s=YS(t,n);if(s===!1||(t[n.place]&128)!==0)return!1;var o=t.slice(n.place,s+n.place);if(n.place+=s,t[n.place++]!==2)return!1;var a=YS(t,n);if(a===!1||t.length!==a+n.place||(t[n.place]&128)!==0)return!1;var A=t.slice(n.place,a+n.place);if(o[0]===0)if(o[1]&128)o=o.slice(1);else return!1;if(A[0]===0)if(A[1]&128)A=A.slice(1);else return!1;return this.r=new Ny(o),this.s=new Ny(A),this.recoveryParam=null,!0};function WS(e,t){if(t<128){e.push(t);return}var r=1+(Math.log(t)/Math.LN2>>>3);for(e.push(r|128);--r;)e.push(t>>>(r<<3)&255);e.push(t)}My.prototype.toDER=function(t){var r=this.r.toArray(),n=this.s.toArray();for(r[0]&128&&(r=[0].concat(r)),n[0]&128&&(n=[0].concat(n)),r=oP(r),n=oP(n);!n[0]&&!(n[1]&128);)n=n.slice(1);var i=[2];WS(i,r.length),i=i.concat(r),i.push(2),WS(i,n.length);var s=i.concat(n),o=[48];return WS(o,s.length),o=o.concat(s),VS.encode(o,t)}});var cP=U((SMe,uP)=>{"use strict";var hs=kr(),fP=nP(),H0e=Kn(),JS=Ty(),q0e=py(),Uf=H0e.assert,jS=sP(),Fy=AP();function _i(e){if(!(this instanceof _i))return new _i(e);typeof e=="string"&&(Uf(Object.prototype.hasOwnProperty.call(JS,e),"Unknown curve "+e),e=JS[e]),e instanceof JS.PresetCurve&&(e={curve:e}),this.curve=e.curve.curve,this.n=this.curve.n,this.nh=this.n.ushrn(1),this.g=this.curve.g,this.g=e.curve.g,this.g.precompute(e.curve.n.bitLength()+1),this.hash=e.hash||e.curve.hash}uP.exports=_i;_i.prototype.keyPair=function(t){return new jS(this,t)};_i.prototype.keyFromPrivate=function(t,r){return jS.fromPrivate(this,t,r)};_i.prototype.keyFromPublic=function(t,r){return jS.fromPublic(this,t,r)};_i.prototype.genKeyPair=function(t){t||(t={});for(var r=new fP({hash:this.hash,pers:t.pers,persEnc:t.persEnc||"utf8",entropy:t.entropy||q0e(this.hash.hmacStrength),entropyEnc:t.entropy&&t.entropyEnc||"utf8",nonce:this.n.toArray()}),n=this.n.byteLength(),i=this.n.sub(new hs(2));;){var s=new hs(r.generate(n));if(!(s.cmp(i)>0))return s.iaddn(1),this.keyFromPrivate(s)}};_i.prototype._truncateToN=function(t,r,n){var i;if(hs.isBN(t)||typeof t=="number")t=new hs(t,16),i=t.byteLength();else if(typeof t=="object")i=t.length,t=new hs(t,16);else{var s=t.toString();i=s.length+1>>>1,t=new hs(s,16)}typeof n!="number"&&(n=i*8);var o=n-this.n.bitLength();return o>0&&(t=t.ushrn(o)),!r&&t.cmp(this.n)>=0?t.sub(this.n):t};_i.prototype.sign=function(t,r,n,i){if(typeof n=="object"&&(i=n,n=null),i||(i={}),typeof t!="string"&&typeof t!="number"&&!hs.isBN(t)){Uf(typeof t=="object"&&t&&typeof t.length=="number","Expected message to be an array-like, a hex string, or a BN instance"),Uf(t.length>>>0===t.length);for(var s=0;s<t.length;s++)Uf((t[s]&255)===t[s])}r=this.keyFromPrivate(r,n),t=this._truncateToN(t,!1,i.msgBitLength),Uf(!t.isNeg(),"Can not sign a negative message");var o=this.n.byteLength(),a=r.getPrivate().toArray("be",o),A=t.toArray("be",o);Uf(new hs(A).eq(t),"Can not sign message");for(var f=new fP({hash:this.hash,entropy:a,nonce:A,pers:i.pers,persEnc:i.persEnc||"utf8"}),l=this.n.sub(new hs(1)),p=0;;p++){var I=i.k?i.k(p):new hs(f.generate(this.n.byteLength()));if(I=this._truncateToN(I,!0),!(I.cmpn(1)<=0||I.cmp(l)>=0)){var S=this.g.mul(I);if(!S.isInfinity()){var _=S.getX(),N=_.umod(this.n);if(N.cmpn(0)!==0){var O=I.invm(this.n).mul(N.mul(r.getPrivate()).iadd(t));if(O=O.umod(this.n),O.cmpn(0)!==0){var x=(S.getY().isOdd()?1:0)|(_.cmp(N)!==0?2:0);return i.canonical&&O.cmp(this.nh)>0&&(O=this.n.sub(O),x^=1),new Fy({r:N,s:O,recoveryParam:x})}}}}}};_i.prototype.verify=function(t,r,n,i,s){s||(s={}),t=this._truncateToN(t,!1,s.msgBitLength),n=this.keyFromPublic(n,i),r=new Fy(r,"hex");var o=r.r,a=r.s;if(o.cmpn(1)<0||o.cmp(this.n)>=0||a.cmpn(1)<0||a.cmp(this.n)>=0)return!1;var A=a.invm(this.n),f=A.mul(t).umod(this.n),l=A.mul(o).umod(this.n),p;return this.curve._maxwellTrick?(p=this.g.jmulAdd(f,n.getPublic(),l),p.isInfinity()?!1:p.eqXToP(o)):(p=this.g.mulAdd(f,n.getPublic(),l),p.isInfinity()?!1:p.getX().umod(this.n).cmp(o)===0)};_i.prototype.recoverPubKey=function(e,t,r,n){Uf((3&r)===r,"The recovery param is more than two bits"),t=new Fy(t,n);var i=this.n,s=new hs(e),o=t.r,a=t.s,A=r&1,f=r>>1;if(o.cmp(this.curve.p.umod(this.curve.n))>=0&&f)throw new Error("Unable to find sencond key candinate");f?o=this.curve.pointFromX(o.add(this.curve.n),A):o=this.curve.pointFromX(o,A);var l=t.r.invm(i),p=i.sub(s).mul(l).umod(i),I=a.mul(l).umod(i);return this.g.mulAdd(p,o,I)};_i.prototype.getKeyRecoveryParam=function(e,t,r,n){if(t=new Fy(t,n),t.recoveryParam!==null)return t.recoveryParam;for(var i=0;i<4;i++){var s;try{s=this.recoverPubKey(e,t,i)}catch{continue}if(s.eq(r))return i}throw new Error("Unable to find valid recovery factor")}});var gP=U((_Me,dP)=>{"use strict";var xd=Kn(),hP=xd.assert,lP=xd.parseBytes,Kc=xd.cachedProperty;function Lr(e,t){this.eddsa=e,this._secret=lP(t.secret),e.isPoint(t.pub)?this._pub=t.pub:this._pubBytes=lP(t.pub)}Lr.fromPublic=function(t,r){return r instanceof Lr?r:new Lr(t,{pub:r})};Lr.fromSecret=function(t,r){return r instanceof Lr?r:new Lr(t,{secret:r})};Lr.prototype.secret=function(){return this._secret};Kc(Lr,"pubBytes",function(){return this.eddsa.encodePoint(this.pub())});Kc(Lr,"pub",function(){return this._pubBytes?this.eddsa.decodePoint(this._pubBytes):this.eddsa.g.mul(this.priv())});Kc(Lr,"privBytes",function(){var t=this.eddsa,r=this.hash(),n=t.encodingLength-1,i=r.slice(0,t.encodingLength);return i[0]&=248,i[n]&=127,i[n]|=64,i});Kc(Lr,"priv",function(){return this.eddsa.decodeInt(this.privBytes())});Kc(Lr,"hash",function(){return this.eddsa.hash().update(this.secret()).digest()});Kc(Lr,"messagePrefix",function(){return this.hash().slice(this.eddsa.encodingLength)});Lr.prototype.sign=function(t){return hP(this._secret,"KeyPair can only verify"),this.eddsa.sign(t,this)};Lr.prototype.verify=function(t,r){return this.eddsa.verify(t,r,this)};Lr.prototype.getSecret=function(t){return hP(this._secret,"KeyPair is public only"),xd.encode(this.secret(),t)};Lr.prototype.getPublic=function(t){return xd.encode(this.pubBytes(),t)};dP.exports=Lr});var yP=U((vMe,EP)=>{"use strict";var G0e=kr(),ky=Kn(),pP=ky.assert,Uy=ky.cachedProperty,Y0e=ky.parseBytes;function xf(e,t){this.eddsa=e,typeof t!="object"&&(t=Y0e(t)),Array.isArray(t)&&(pP(t.length===e.encodingLength*2,"Signature has invalid size"),t={R:t.slice(0,e.encodingLength),S:t.slice(e.encodingLength)}),pP(t.R&&t.S,"Signature without R or S"),e.isPoint(t.R)&&(this._R=t.R),t.S instanceof G0e&&(this._S=t.S),this._Rencoded=Array.isArray(t.R)?t.R:t.Rencoded,this._Sencoded=Array.isArray(t.S)?t.S:t.Sencoded}Uy(xf,"S",function(){return this.eddsa.decodeInt(this.Sencoded())});Uy(xf,"R",function(){return this.eddsa.decodePoint(this.Rencoded())});Uy(xf,"Rencoded",function(){return this.eddsa.encodePoint(this.R())});Uy(xf,"Sencoded",function(){return this.eddsa.encodeInt(this.S())});xf.prototype.toBytes=function(){return this.Rencoded().concat(this.Sencoded())};xf.prototype.toHex=function(){return ky.encode(this.toBytes(),"hex").toUpperCase()};EP.exports=xf});var CP=U((RMe,bP)=>{"use strict";var W0e=Dy(),V0e=Ty(),Xc=Kn(),J0e=Xc.assert,BP=Xc.parseBytes,IP=gP(),mP=yP();function Fn(e){if(J0e(e==="ed25519","only tested with ed25519 so far"),!(this instanceof Fn))return new Fn(e);e=V0e[e].curve,this.curve=e,this.g=e.g,this.g.precompute(e.n.bitLength()+1),this.pointClass=e.point().constructor,this.encodingLength=Math.ceil(e.n.bitLength()/8),this.hash=W0e.sha512}bP.exports=Fn;Fn.prototype.sign=function(t,r){t=BP(t);var n=this.keyFromSecret(r),i=this.hashInt(n.messagePrefix(),t),s=this.g.mul(i),o=this.encodePoint(s),a=this.hashInt(o,n.pubBytes(),t).mul(n.priv()),A=i.add(a).umod(this.curve.n);return this.makeSignature({R:s,S:A,Rencoded:o})};Fn.prototype.verify=function(t,r,n){if(t=BP(t),r=this.makeSignature(r),r.S().gte(r.eddsa.curve.n)||r.S().isNeg())return!1;var i=this.keyFromPublic(n),s=this.hashInt(r.Rencoded(),i.pubBytes(),t),o=this.g.mul(r.S()),a=r.R().add(i.pub().mul(s));return a.eq(o)};Fn.prototype.hashInt=function(){for(var t=this.hash(),r=0;r<arguments.length;r++)t.update(arguments[r]);return Xc.intFromLE(t.digest()).umod(this.curve.n)};Fn.prototype.keyFromPublic=function(t){return IP.fromPublic(this,t)};Fn.prototype.keyFromSecret=function(t){return IP.fromSecret(this,t)};Fn.prototype.makeSignature=function(t){return t instanceof mP?t:new mP(this,t)};Fn.prototype.encodePoint=function(t){var r=t.getY().toArray("le",this.encodingLength);return r[this.encodingLength-1]|=t.getX().isOdd()?128:0,r};Fn.prototype.decodePoint=function(t){t=Xc.parseBytes(t);var r=t.length-1,n=t.slice(0,r).concat(t[r]&-129),i=(t[r]&128)!==0,s=Xc.intFromLE(n);return this.curve.pointFromY(s,i)};Fn.prototype.encodeInt=function(t){return t.toArray("le",this.encodingLength)};Fn.prototype.decodeInt=function(t){return Xc.intFromLE(t)};Fn.prototype.isPoint=function(t){return t instanceof this.pointClass}});var xy=U(QP=>{"use strict";var Lf=QP;Lf.version=r9().version;Lf.utils=Kn();Lf.rand=py();Lf.curve=TS();Lf.curves=Ty();Lf.ec=cP();Lf.eddsa=CP()});var wP=U((exports,module)=>{var indexOf=function(e,t){if(e.indexOf)return e.indexOf(t);for(var r=0;r<e.length;r++)if(e[r]===t)return r;return-1},Object_keys=function(e){if(Object.keys)return Object.keys(e);var t=[];for(var r in e)t.push(r);return t},forEach=function(e,t){if(e.forEach)return e.forEach(t);for(var r=0;r<e.length;r++)t(e[r],r,e)},defineProp=(function(){try{return Object.defineProperty({},"_",{}),function(e,t,r){Object.defineProperty(e,t,{writable:!0,enumerable:!1,configurable:!0,value:r})}}catch{return function(t,r,n){t[r]=n}}})(),globals=["Array","Boolean","Date","Error","EvalError","Function","Infinity","JSON","Math","NaN","Number","Object","RangeError","ReferenceError","RegExp","String","SyntaxError","TypeError","URIError","decodeURI","decodeURIComponent","encodeURI","encodeURIComponent","escape","eval","isFinite","isNaN","parseFloat","parseInt","undefined","unescape"];function Context(){}Context.prototype={};var Script=exports.Script=function(t){if(!(this instanceof Script))return new Script(t);this.code=t};Script.prototype.runInContext=function(e){if(!(e instanceof Context))throw new TypeError("needs a 'context' argument.");var t=document.createElement("iframe");t.style||(t.style={}),t.style.display="none",document.body.appendChild(t);var r=t.contentWindow,n=r.eval,i=r.execScript;!n&&i&&(i.call(r,"null"),n=r.eval),forEach(Object_keys(e),function(a){r[a]=e[a]}),forEach(globals,function(a){e[a]&&(r[a]=e[a])});var s=Object_keys(r),o=n.call(r,this.code);return forEach(Object_keys(r),function(a){(a in e||indexOf(s,a)===-1)&&(e[a]=r[a])}),forEach(globals,function(a){a in e||defineProp(e,a,r[a])}),document.body.removeChild(t),o};Script.prototype.runInThisContext=function(){return eval(this.code)};Script.prototype.runInNewContext=function(e){var t=Script.createContext(e),r=this.runInContext(t);return e&&forEach(Object_keys(t),function(n){e[n]=t[n]}),r};forEach(Object_keys(Script.prototype),function(e){exports[e]=Script[e]=function(t){var r=Script(t);return r[e].apply(r,[].slice.call(arguments,1))}});exports.isContext=function(e){return e instanceof Context};exports.createScript=function(e){return exports.Script(e)};exports.createContext=Script.createContext=function(e){var t=new Context;return typeof e=="object"&&forEach(Object_keys(e),function(r){t[r]=e[r]}),t}});var vP=U(_P=>{var SP=$c(),j0e=je(),z0e=_P;z0e.define=function(t,r){return new Zc(t,r)};function Zc(e,t){this.name=e,this.body=t,this.decoders={},this.encoders={}}Zc.prototype._createNamed=function(t){var r;try{r=wP().runInThisContext("(function "+this.name+`(entity) {
-  this._initNamed(entity);
-})`)}catch{r=function(i){this._initNamed(i)}}return j0e(r,t),r.prototype._initNamed=function(i){t.call(this,i)},new r(this)};Zc.prototype._getDecoder=function(t){return t=t||"der",this.decoders.hasOwnProperty(t)||(this.decoders[t]=this._createNamed(SP.decoders[t])),this.decoders[t]};Zc.prototype.decode=function(t,r,n){return this._getDecoder(r).decode(t,n)};Zc.prototype._getEncoder=function(t){return t=t||"der",this.encoders.hasOwnProperty(t)||(this.encoders[t]=this._createNamed(SP.encoders[t])),this.encoders[t]};Zc.prototype.encode=function(t,r,n){return this._getEncoder(r).encode(t,n)}});var DP=U(RP=>{var K0e=je();function vi(e){this._reporterState={obj:null,path:[],options:e||{},errors:[]}}RP.Reporter=vi;vi.prototype.isError=function(t){return t instanceof el};vi.prototype.save=function(){var t=this._reporterState;return{obj:t.obj,pathLen:t.path.length}};vi.prototype.restore=function(t){var r=this._reporterState;r.obj=t.obj,r.path=r.path.slice(0,t.pathLen)};vi.prototype.enterKey=function(t){return this._reporterState.path.push(t)};vi.prototype.exitKey=function(t){var r=this._reporterState;r.path=r.path.slice(0,t-1)};vi.prototype.leaveKey=function(t,r,n){var i=this._reporterState;this.exitKey(t),i.obj!==null&&(i.obj[r]=n)};vi.prototype.path=function(){return this._reporterState.path.join("/")};vi.prototype.enterObject=function(){var t=this._reporterState,r=t.obj;return t.obj={},r};vi.prototype.leaveObject=function(t){var r=this._reporterState,n=r.obj;return r.obj=t,n};vi.prototype.error=function(t){var r,n=this._reporterState,i=t instanceof el;if(i?r=t:r=new el(n.path.map(function(s){return"["+JSON.stringify(s)+"]"}).join(""),t.message||t,t.stack),!n.options.partial)throw r;return i||n.errors.push(r),r};vi.prototype.wrapResult=function(t){var r=this._reporterState;return r.options.partial?{result:this.isError(t)?null:t,errors:r.errors}:t};function el(e,t){this.path=e,this.rethrow(t)}K0e(el,Error);el.prototype.rethrow=function(t){if(this.message=t+" at: "+(this.path||"(shallow)"),Error.captureStackTrace&&Error.captureStackTrace(this,el),!this.stack)try{throw new Error(this.message)}catch(r){this.stack=r.stack}return this}});var KS=U(zS=>{var X0e=je(),Py=tl().Reporter,Ld=Gr().Buffer;function uo(e,t){if(Py.call(this,t),!Ld.isBuffer(e)){this.error("Input not Buffer");return}this.base=e,this.offset=0,this.length=e.length}X0e(uo,Py);zS.DecoderBuffer=uo;uo.prototype.save=function(){return{offset:this.offset,reporter:Py.prototype.save.call(this)}};uo.prototype.restore=function(t){var r=new uo(this.base);return r.offset=t.offset,r.length=this.offset,this.offset=t.offset,Py.prototype.restore.call(this,t.reporter),r};uo.prototype.isEmpty=function(){return this.offset===this.length};uo.prototype.readUInt8=function(t){return this.offset+1<=this.length?this.base.readUInt8(this.offset++,!0):this.error(t||"DecoderBuffer overrun")};uo.prototype.skip=function(t,r){if(!(this.offset+t<=this.length))return this.error(r||"DecoderBuffer overrun");var n=new uo(this.base);return n._reporterState=this._reporterState,n.offset=this.offset,n.length=this.offset+t,this.offset+=t,n};uo.prototype.raw=function(t){return this.base.slice(t?t.offset:this.offset,this.length)};function Ly(e,t){if(Array.isArray(e))this.length=0,this.value=e.map(function(r){return r instanceof Ly||(r=new Ly(r,t)),this.length+=r.length,r},this);else if(typeof e=="number"){if(!(0<=e&&e<=255))return t.error("non-byte EncoderBuffer value");this.value=e,this.length=1}else if(typeof e=="string")this.value=e,this.length=Ld.byteLength(e);else if(Ld.isBuffer(e))this.value=e,this.length=e.length;else return t.error("Unsupported type: "+typeof e)}zS.EncoderBuffer=Ly;Ly.prototype.join=function(t,r){return t||(t=new Ld(this.length)),r||(r=0),this.length===0||(Array.isArray(this.value)?this.value.forEach(function(n){n.join(t,r),r+=n.length}):(typeof this.value=="number"?t[r]=this.value:typeof this.value=="string"?t.write(this.value,r):Ld.isBuffer(this.value)&&this.value.copy(t,r),r+=this.length)),t}});var MP=U((FMe,NP)=>{var Z0e=tl().Reporter,$0e=tl().EncoderBuffer,epe=tl().DecoderBuffer,En=zn(),TP=["seq","seqof","set","setof","objid","bool","gentime","utctime","null_","enum","int","objDesc","bitstr","bmpstr","charstr","genstr","graphstr","ia5str","iso646str","numstr","octstr","printstr","t61str","unistr","utf8str","videostr"],tpe=["key","obj","use","optional","explicit","implicit","def","choice","any","contains"].concat(TP),rpe=["_peekTag","_decodeTag","_use","_decodeStr","_decodeObjid","_decodeTime","_decodeNull","_decodeInt","_decodeBool","_decodeList","_encodeComposite","_encodeStr","_encodeObjid","_encodeTime","_encodeNull","_encodeInt","_encodeBool"];function Ut(e,t){var r={};this._baseState=r,r.enc=e,r.parent=t||null,r.children=null,r.tag=null,r.args=null,r.reverseArgs=null,r.choice=null,r.optional=!1,r.any=!1,r.obj=!1,r.use=null,r.useDecoder=null,r.key=null,r.default=null,r.explicit=null,r.implicit=null,r.contains=null,r.parent||(r.children=[],this._wrap())}NP.exports=Ut;var npe=["enc","parent","children","tag","args","reverseArgs","choice","optional","any","obj","use","alteredUse","key","default","explicit","implicit","contains"];Ut.prototype.clone=function(){var t=this._baseState,r={};npe.forEach(function(i){r[i]=t[i]});var n=new this.constructor(r.parent);return n._baseState=r,n};Ut.prototype._wrap=function(){var t=this._baseState;tpe.forEach(function(r){this[r]=function(){var i=new this.constructor(this);return t.children.push(i),i[r].apply(i,arguments)}},this)};Ut.prototype._init=function(t){var r=this._baseState;En(r.parent===null),t.call(this),r.children=r.children.filter(function(n){return n._baseState.parent===this},this),En.equal(r.children.length,1,"Root node can have only one child")};Ut.prototype._useArgs=function(t){var r=this._baseState,n=t.filter(function(i){return i instanceof this.constructor},this);t=t.filter(function(i){return!(i instanceof this.constructor)},this),n.length!==0&&(En(r.children===null),r.children=n,n.forEach(function(i){i._baseState.parent=this},this)),t.length!==0&&(En(r.args===null),r.args=t,r.reverseArgs=t.map(function(i){if(typeof i!="object"||i.constructor!==Object)return i;var s={};return Object.keys(i).forEach(function(o){o==(o|0)&&(o|=0);var a=i[o];s[a]=o}),s}))};rpe.forEach(function(e){Ut.prototype[e]=function(){var r=this._baseState;throw new Error(e+" not implemented for encoding: "+r.enc)}});TP.forEach(function(e){Ut.prototype[e]=function(){var r=this._baseState,n=Array.prototype.slice.call(arguments);return En(r.tag===null),r.tag=e,this._useArgs(n),this}});Ut.prototype.use=function(t){En(t);var r=this._baseState;return En(r.use===null),r.use=t,this};Ut.prototype.optional=function(){var t=this._baseState;return t.optional=!0,this};Ut.prototype.def=function(t){var r=this._baseState;return En(r.default===null),r.default=t,r.optional=!0,this};Ut.prototype.explicit=function(t){var r=this._baseState;return En(r.explicit===null&&r.implicit===null),r.explicit=t,this};Ut.prototype.implicit=function(t){var r=this._baseState;return En(r.explicit===null&&r.implicit===null),r.implicit=t,this};Ut.prototype.obj=function(){var t=this._baseState,r=Array.prototype.slice.call(arguments);return t.obj=!0,r.length!==0&&this._useArgs(r),this};Ut.prototype.key=function(t){var r=this._baseState;return En(r.key===null),r.key=t,this};Ut.prototype.any=function(){var t=this._baseState;return t.any=!0,this};Ut.prototype.choice=function(t){var r=this._baseState;return En(r.choice===null),r.choice=t,this._useArgs(Object.keys(t).map(function(n){return t[n]})),this};Ut.prototype.contains=function(t){var r=this._baseState;return En(r.use===null),r.contains=t,this};Ut.prototype._decode=function(t,r){var n=this._baseState;if(n.parent===null)return t.wrapResult(n.children[0]._decode(t,r));var i=n.default,s=!0,o=null;if(n.key!==null&&(o=t.enterKey(n.key)),n.optional){var a=null;if(n.explicit!==null?a=n.explicit:n.implicit!==null?a=n.implicit:n.tag!==null&&(a=n.tag),a===null&&!n.any){var A=t.save();try{n.choice===null?this._decodeGeneric(n.tag,t,r):this._decodeChoice(t,r),s=!0}catch{s=!1}t.restore(A)}else if(s=this._peekTag(t,a,n.any),t.isError(s))return s}var f;if(n.obj&&s&&(f=t.enterObject()),s){if(n.explicit!==null){var l=this._decodeTag(t,n.explicit);if(t.isError(l))return l;t=l}var p=t.offset;if(n.use===null&&n.choice===null){if(n.any)var A=t.save();var I=this._decodeTag(t,n.implicit!==null?n.implicit:n.tag,n.any);if(t.isError(I))return I;n.any?i=t.raw(A):t=I}if(r&&r.track&&n.tag!==null&&r.track(t.path(),p,t.length,"tagged"),r&&r.track&&n.tag!==null&&r.track(t.path(),t.offset,t.length,"content"),n.any?i=i:n.choice===null?i=this._decodeGeneric(n.tag,t,r):i=this._decodeChoice(t,r),t.isError(i))return i;if(!n.any&&n.choice===null&&n.children!==null&&n.children.forEach(function(N){N._decode(t,r)}),n.contains&&(n.tag==="octstr"||n.tag==="bitstr")){var S=new epe(i);i=this._getUse(n.contains,t._reporterState.obj)._decode(S,r)}}return n.obj&&s&&(i=t.leaveObject(f)),n.key!==null&&(i!==null||s===!0)?t.leaveKey(o,n.key,i):o!==null&&t.exitKey(o),i};Ut.prototype._decodeGeneric=function(t,r,n){var i=this._baseState;return t==="seq"||t==="set"?null:t==="seqof"||t==="setof"?this._decodeList(r,t,i.args[0],n):/str$/.test(t)?this._decodeStr(r,t,n):t==="objid"&&i.args?this._decodeObjid(r,i.args[0],i.args[1],n):t==="objid"?this._decodeObjid(r,null,null,n):t==="gentime"||t==="utctime"?this._decodeTime(r,t,n):t==="null_"?this._decodeNull(r,n):t==="bool"?this._decodeBool(r,n):t==="objDesc"?this._decodeStr(r,t,n):t==="int"||t==="enum"?this._decodeInt(r,i.args&&i.args[0],n):i.use!==null?this._getUse(i.use,r._reporterState.obj)._decode(r,n):r.error("unknown tag: "+t)};Ut.prototype._getUse=function(t,r){var n=this._baseState;return n.useDecoder=this._use(t,r),En(n.useDecoder._baseState.parent===null),n.useDecoder=n.useDecoder._baseState.children[0],n.implicit!==n.useDecoder._baseState.implicit&&(n.useDecoder=n.useDecoder.clone(),n.useDecoder._baseState.implicit=n.implicit),n.useDecoder};Ut.prototype._decodeChoice=function(t,r){var n=this._baseState,i=null,s=!1;return Object.keys(n.choice).some(function(o){var a=t.save(),A=n.choice[o];try{var f=A._decode(t,r);if(t.isError(f))return!1;i={type:o,value:f},s=!0}catch{return t.restore(a),!1}return!0},this),s?i:t.error("Choice not matched")};Ut.prototype._createEncoderBuffer=function(t){return new $0e(t,this.reporter)};Ut.prototype._encode=function(t,r,n){var i=this._baseState;if(!(i.default!==null&&i.default===t)){var s=this._encodeValue(t,r,n);if(s!==void 0&&!this._skipDefault(s,r,n))return s}};Ut.prototype._encodeValue=function(t,r,n){var i=this._baseState;if(i.parent===null)return i.children[0]._encode(t,r||new Z0e);var A=null;if(this.reporter=r,i.optional&&t===void 0)if(i.default!==null)t=i.default;else return;var s=null,o=!1;if(i.any)A=this._createEncoderBuffer(t);else if(i.choice)A=this._encodeChoice(t,r);else if(i.contains)s=this._getUse(i.contains,n)._encode(t,r),o=!0;else if(i.children)s=i.children.map(function(p){if(p._baseState.tag==="null_")return p._encode(null,r,t);if(p._baseState.key===null)return r.error("Child should have a key");var I=r.enterKey(p._baseState.key);if(typeof t!="object")return r.error("Child expected, but input is not object");var S=p._encode(t[p._baseState.key],r,t);return r.leaveKey(I),S},this).filter(function(p){return p}),s=this._createEncoderBuffer(s);else if(i.tag==="seqof"||i.tag==="setof"){if(!(i.args&&i.args.length===1))return r.error("Too many args for : "+i.tag);if(!Array.isArray(t))return r.error("seqof/setof, but data is not Array");var a=this.clone();a._baseState.implicit=null,s=this._createEncoderBuffer(t.map(function(p){var I=this._baseState;return this._getUse(I.args[0],t)._encode(p,r)},a))}else i.use!==null?A=this._getUse(i.use,n)._encode(t,r):(s=this._encodePrimitive(i.tag,t),o=!0);var A;if(!i.any&&i.choice===null){var f=i.implicit!==null?i.implicit:i.tag,l=i.implicit===null?"universal":"context";f===null?i.use===null&&r.error("Tag could be omitted only for .use()"):i.use===null&&(A=this._encodeComposite(f,o,l,s))}return i.explicit!==null&&(A=this._encodeComposite(i.explicit,!1,"context",A)),A};Ut.prototype._encodeChoice=function(t,r){var n=this._baseState,i=n.choice[t.type];return i||En(!1,t.type+" not found in "+JSON.stringify(Object.keys(n.choice))),i._encode(t.value,r)};Ut.prototype._encodePrimitive=function(t,r){var n=this._baseState;if(/str$/.test(t))return this._encodeStr(r,t);if(t==="objid"&&n.args)return this._encodeObjid(r,n.reverseArgs[0],n.args[1]);if(t==="objid")return this._encodeObjid(r,null,null);if(t==="gentime"||t==="utctime")return this._encodeTime(r,t);if(t==="null_")return this._encodeNull();if(t==="int"||t==="enum")return this._encodeInt(r,n.args&&n.reverseArgs[0]);if(t==="bool")return this._encodeBool(r);if(t==="objDesc")return this._encodeStr(r,t);throw new Error("Unsupported tag: "+t)};Ut.prototype._isNumstr=function(t){return/^[0-9 ]*$/.test(t)};Ut.prototype._isPrintstr=function(t){return/^[A-Za-z0-9 '\(\)\+,\-\.\/:=\?]*$/.test(t)}});var tl=U(FP=>{var Oy=FP;Oy.Reporter=DP().Reporter;Oy.DecoderBuffer=KS().DecoderBuffer;Oy.EncoderBuffer=KS().EncoderBuffer;Oy.Node=MP()});var UP=U(Pf=>{var kP=XS();Pf.tagClass={0:"universal",1:"application",2:"context",3:"private"};Pf.tagClassByName=kP._reverse(Pf.tagClass);Pf.tag={0:"end",1:"bool",2:"int",3:"bitstr",4:"octstr",5:"null_",6:"objid",7:"objDesc",8:"external",9:"real",10:"enum",11:"embed",12:"utf8str",13:"relativeOid",16:"seq",17:"set",18:"numstr",19:"printstr",20:"t61str",21:"videostr",22:"ia5str",23:"utctime",24:"gentime",25:"graphstr",26:"iso646str",27:"genstr",28:"unistr",29:"charstr",30:"bmpstr"};Pf.tagByName=kP._reverse(Pf.tag)});var XS=U(LP=>{var xP=LP;xP._reverse=function(t){var r={};return Object.keys(t).forEach(function(n){(n|0)==n&&(n=n|0);var i=t[n];r[i]=n}),r};xP.der=UP()});var e_=U((LMe,qP)=>{var ipe=je(),ZS=$c(),Hy=ZS.base,spe=ZS.bignum,PP=ZS.constants.der;function OP(e){this.enc="der",this.name=e.name,this.entity=e,this.tree=new Xn,this.tree._init(e.body)}qP.exports=OP;OP.prototype.decode=function(t,r){return t instanceof Hy.DecoderBuffer||(t=new Hy.DecoderBuffer(t,r)),this.tree._decode(t,r)};function Xn(e){Hy.Node.call(this,"der",e)}ipe(Xn,Hy.Node);Xn.prototype._peekTag=function(t,r,n){if(t.isEmpty())return!1;var i=t.save(),s=$S(t,'Failed to peek tag: "'+r+'"');return t.isError(s)?s:(t.restore(i),s.tag===r||s.tagStr===r||s.tagStr+"of"===r||n)};Xn.prototype._decodeTag=function(t,r,n){var i=$S(t,'Failed to decode tag of "'+r+'"');if(t.isError(i))return i;var s=HP(t,i.primitive,'Failed to get length of "'+r+'"');if(t.isError(s))return s;if(!n&&i.tag!==r&&i.tagStr!==r&&i.tagStr+"of"!==r)return t.error('Failed to match tag: "'+r+'"');if(i.primitive||s!==null)return t.skip(s,'Failed to match body of: "'+r+'"');var o=t.save(),a=this._skipUntilEnd(t,'Failed to skip indefinite length body: "'+this.tag+'"');return t.isError(a)?a:(s=t.offset-o.offset,t.restore(o),t.skip(s,'Failed to match body of: "'+r+'"'))};Xn.prototype._skipUntilEnd=function(t,r){for(;;){var n=$S(t,r);if(t.isError(n))return n;var i=HP(t,n.primitive,r);if(t.isError(i))return i;var s;if(n.primitive||i!==null?s=t.skip(i):s=this._skipUntilEnd(t,r),t.isError(s))return s;if(n.tagStr==="end")break}};Xn.prototype._decodeList=function(t,r,n,i){for(var s=[];!t.isEmpty();){var o=this._peekTag(t,"end");if(t.isError(o))return o;var a=n.decode(t,"der",i);if(t.isError(a)&&o)break;s.push(a)}return s};Xn.prototype._decodeStr=function(t,r){if(r==="bitstr"){var n=t.readUInt8();return t.isError(n)?n:{unused:n,data:t.raw()}}else if(r==="bmpstr"){var i=t.raw();if(i.length%2===1)return t.error("Decoding of string type: bmpstr length mismatch");for(var s="",o=0;o<i.length/2;o++)s+=String.fromCharCode(i.readUInt16BE(o*2));return s}else if(r==="numstr"){var a=t.raw().toString("ascii");return this._isNumstr(a)?a:t.error("Decoding of string type: numstr unsupported characters")}else{if(r==="octstr")return t.raw();if(r==="objDesc")return t.raw();if(r==="printstr"){var A=t.raw().toString("ascii");return this._isPrintstr(A)?A:t.error("Decoding of string type: printstr unsupported characters")}else return/str$/.test(r)?t.raw().toString():t.error("Decoding of string type: "+r+" unsupported")}};Xn.prototype._decodeObjid=function(t,r,n){for(var i,s=[],o=0;!t.isEmpty();){var a=t.readUInt8();o<<=7,o|=a&127,(a&128)===0&&(s.push(o),o=0)}a&128&&s.push(o);var A=s[0]/40|0,f=s[0]%40;if(n?i=s:i=[A,f].concat(s.slice(1)),r){var l=r[i.join(" ")];l===void 0&&(l=r[i.join(".")]),l!==void 0&&(i=l)}return i};Xn.prototype._decodeTime=function(t,r){var n=t.raw().toString();if(r==="gentime")var i=n.slice(0,4)|0,s=n.slice(4,6)|0,o=n.slice(6,8)|0,a=n.slice(8,10)|0,A=n.slice(10,12)|0,f=n.slice(12,14)|0;else if(r==="utctime"){var i=n.slice(0,2)|0,s=n.slice(2,4)|0,o=n.slice(4,6)|0,a=n.slice(6,8)|0,A=n.slice(8,10)|0,f=n.slice(10,12)|0;i<70?i=2e3+i:i=1900+i}else return t.error("Decoding "+r+" time is not supported yet");return Date.UTC(i,s-1,o,a,A,f,0)};Xn.prototype._decodeNull=function(t){return null};Xn.prototype._decodeBool=function(t){var r=t.readUInt8();return t.isError(r)?r:r!==0};Xn.prototype._decodeInt=function(t,r){var n=t.raw(),i=new spe(n);return r&&(i=r[i.toString(10)]||i),i};Xn.prototype._use=function(t,r){return typeof t=="function"&&(t=t(r)),t._getDecoder("der").tree};function $S(e,t){var r=e.readUInt8(t);if(e.isError(r))return r;var n=PP.tagClass[r>>6],i=(r&32)===0;if((r&31)===31){var s=r;for(r=0;(s&128)===128;){if(s=e.readUInt8(t),e.isError(s))return s;r<<=7,r|=s&127}}else r&=31;var o=PP.tag[r];return{cls:n,primitive:i,tag:r,tagStr:o}}function HP(e,t,r){var n=e.readUInt8(r);if(e.isError(n))return n;if(!t&&n===128)return null;if((n&128)===0)return n;var i=n&127;if(i>4)return e.error("length octect is too long");n=0;for(var s=0;s<i;s++){n<<=8;var o=e.readUInt8(r);if(e.isError(o))return o;n|=o}return n}});var YP=U((PMe,GP)=>{var ope=je(),ape=Gr().Buffer,t_=e_();function r_(e){t_.call(this,e),this.enc="pem"}ope(r_,t_);GP.exports=r_;r_.prototype.decode=function(t,r){for(var n=t.toString().split(/[\r\n]+/g),i=r.label.toUpperCase(),s=/^-----(BEGIN|END) ([^-]+)-----$/,o=-1,a=-1,A=0;A<n.length;A++){var f=n[A].match(s);if(f!==null&&f[2]===i)if(o===-1){if(f[1]!=="BEGIN")break;o=A}else{if(f[1]!=="END")break;a=A;break}}if(o===-1||a===-1)throw new Error("PEM section not found for: "+i);var l=n.slice(o+1,a).join("");l.replace(/[^a-z0-9\+\/=]+/gi,"");var p=new ape(l,"base64");return t_.prototype.decode.call(this,p,r)}});var JP=U(VP=>{var WP=VP;WP.der=e_();WP.pem=YP()});var i_=U((HMe,XP)=>{var Ape=je(),ua=Gr().Buffer,jP=$c(),zP=jP.base,n_=jP.constants.der;function KP(e){this.enc="der",this.name=e.name,this.entity=e,this.tree=new ds,this.tree._init(e.body)}XP.exports=KP;KP.prototype.encode=function(t,r){return this.tree._encode(t,r).join()};function ds(e){zP.Node.call(this,"der",e)}Ape(ds,zP.Node);ds.prototype._encodeComposite=function(t,r,n,i){var s=fpe(t,r,n,this.reporter);if(i.length<128){var A=new ua(2);return A[0]=s,A[1]=i.length,this._createEncoderBuffer([A,i])}for(var o=1,a=i.length;a>=256;a>>=8)o++;var A=new ua(2+o);A[0]=s,A[1]=128|o;for(var a=1+o,f=i.length;f>0;a--,f>>=8)A[a]=f&255;return this._createEncoderBuffer([A,i])};ds.prototype._encodeStr=function(t,r){if(r==="bitstr")return this._createEncoderBuffer([t.unused|0,t.data]);if(r==="bmpstr"){for(var n=new ua(t.length*2),i=0;i<t.length;i++)n.writeUInt16BE(t.charCodeAt(i),i*2);return this._createEncoderBuffer(n)}else return r==="numstr"?this._isNumstr(t)?this._createEncoderBuffer(t):this.reporter.error("Encoding of string type: numstr supports only digits and space"):r==="printstr"?this._isPrintstr(t)?this._createEncoderBuffer(t):this.reporter.error("Encoding of string type: printstr supports only latin upper and lower case letters, digits, space, apostrophe, left and rigth parenthesis, plus sign, comma, hyphen, dot, slash, colon, equal sign, question mark"):/str$/.test(r)?this._createEncoderBuffer(t):r==="objDesc"?this._createEncoderBuffer(t):this.reporter.error("Encoding of string type: "+r+" unsupported")};ds.prototype._encodeObjid=function(t,r,n){if(typeof t=="string"){if(!r)return this.reporter.error("string objid given, but no values map found");if(!r.hasOwnProperty(t))return this.reporter.error("objid not found in values map");t=r[t].split(/[\s\.]+/g);for(var i=0;i<t.length;i++)t[i]|=0}else if(Array.isArray(t)){t=t.slice();for(var i=0;i<t.length;i++)t[i]|=0}if(!Array.isArray(t))return this.reporter.error("objid() should be either array or string, got: "+JSON.stringify(t));if(!n){if(t[1]>=40)return this.reporter.error("Second objid identifier OOB");t.splice(0,2,t[0]*40+t[1])}for(var s=0,i=0;i<t.length;i++){var o=t[i];for(s++;o>=128;o>>=7)s++}for(var a=new ua(s),A=a.length-1,i=t.length-1;i>=0;i--){var o=t[i];for(a[A--]=o&127;(o>>=7)>0;)a[A--]=128|o&127}return this._createEncoderBuffer(a)};function Ri(e){return e<10?"0"+e:e}ds.prototype._encodeTime=function(t,r){var n,i=new Date(t);return r==="gentime"?n=[Ri(i.getFullYear()),Ri(i.getUTCMonth()+1),Ri(i.getUTCDate()),Ri(i.getUTCHours()),Ri(i.getUTCMinutes()),Ri(i.getUTCSeconds()),"Z"].join(""):r==="utctime"?n=[Ri(i.getFullYear()%100),Ri(i.getUTCMonth()+1),Ri(i.getUTCDate()),Ri(i.getUTCHours()),Ri(i.getUTCMinutes()),Ri(i.getUTCSeconds()),"Z"].join(""):this.reporter.error("Encoding "+r+" time is not supported yet"),this._encodeStr(n,"octstr")};ds.prototype._encodeNull=function(){return this._createEncoderBuffer("")};ds.prototype._encodeInt=function(t,r){if(typeof t=="string"){if(!r)return this.reporter.error("String int or enum given, but no values map");if(!r.hasOwnProperty(t))return this.reporter.error("Values map doesn't contain: "+JSON.stringify(t));t=r[t]}if(typeof t!="number"&&!ua.isBuffer(t)){var n=t.toArray();!t.sign&&n[0]&128&&n.unshift(0),t=new ua(n)}if(ua.isBuffer(t)){var i=t.length;t.length===0&&i++;var o=new ua(i);return t.copy(o),t.length===0&&(o[0]=0),this._createEncoderBuffer(o)}if(t<128)return this._createEncoderBuffer(t);if(t<256)return this._createEncoderBuffer([0,t]);for(var i=1,s=t;s>=256;s>>=8)i++;for(var o=new Array(i),s=o.length-1;s>=0;s--)o[s]=t&255,t>>=8;return o[0]&128&&o.unshift(0),this._createEncoderBuffer(new ua(o))};ds.prototype._encodeBool=function(t){return this._createEncoderBuffer(t?255:0)};ds.prototype._use=function(t,r){return typeof t=="function"&&(t=t(r)),t._getEncoder("der").tree};ds.prototype._skipDefault=function(t,r,n){var i=this._baseState,s;if(i.default===null)return!1;var o=t.join();if(i.defaultBuffer===void 0&&(i.defaultBuffer=this._encodeValue(i.default,r,n).join()),o.length!==i.defaultBuffer.length)return!1;for(s=0;s<o.length;s++)if(o[s]!==i.defaultBuffer[s])return!1;return!0};function fpe(e,t,r,n){var i;if(e==="seqof"?e="seq":e==="setof"&&(e="set"),n_.tagByName.hasOwnProperty(e))i=n_.tagByName[e];else if(typeof e=="number"&&(e|0)===e)i=e;else return n.error("Unknown tag: "+e);return i>=31?n.error("Multi-octet tag encoding unsupported"):(t||(i|=32),i|=n_.tagClassByName[r||"universal"]<<6,i)}});var $P=U((qMe,ZP)=>{var upe=je(),s_=i_();function o_(e){s_.call(this,e),this.enc="pem"}upe(o_,s_);ZP.exports=o_;o_.prototype.encode=function(t,r){for(var n=s_.prototype.encode.call(this,t),i=n.toString("base64"),s=["-----BEGIN "+r.label+"-----"],o=0;o<i.length;o+=64)s.push(i.slice(o,o+64));return s.push("-----END "+r.label+"-----"),s.join(`
-`)}});var rO=U(tO=>{var eO=tO;eO.der=i_();eO.pem=$P()});var $c=U(nO=>{var rl=nO;rl.bignum=kr();rl.define=vP().define;rl.base=tl();rl.constants=XS();rl.decoders=JP();rl.encoders=rO()});var aO=U((WMe,oO)=>{"use strict";var gs=$c(),iO=gs.define("Time",function(){this.choice({utcTime:this.utctime(),generalTime:this.gentime()})}),cpe=gs.define("AttributeTypeValue",function(){this.seq().obj(this.key("type").objid(),this.key("value").any())}),a_=gs.define("AlgorithmIdentifier",function(){this.seq().obj(this.key("algorithm").objid(),this.key("parameters").optional(),this.key("curve").objid().optional())}),lpe=gs.define("SubjectPublicKeyInfo",function(){this.seq().obj(this.key("algorithm").use(a_),this.key("subjectPublicKey").bitstr())}),hpe=gs.define("RelativeDistinguishedName",function(){this.setof(cpe)}),dpe=gs.define("RDNSequence",function(){this.seqof(hpe)}),sO=gs.define("Name",function(){this.choice({rdnSequence:this.use(dpe)})}),gpe=gs.define("Validity",function(){this.seq().obj(this.key("notBefore").use(iO),this.key("notAfter").use(iO))}),ppe=gs.define("Extension",function(){this.seq().obj(this.key("extnID").objid(),this.key("critical").bool().def(!1),this.key("extnValue").octstr())}),Epe=gs.define("TBSCertificate",function(){this.seq().obj(this.key("version").explicit(0).int().optional(),this.key("serialNumber").int(),this.key("signature").use(a_),this.key("issuer").use(sO),this.key("validity").use(gpe),this.key("subject").use(sO),this.key("subjectPublicKeyInfo").use(lpe),this.key("issuerUniqueID").implicit(1).bitstr().optional(),this.key("subjectUniqueID").implicit(2).bitstr().optional(),this.key("extensions").explicit(3).seqof(ppe).optional())}),ype=gs.define("X509Certificate",function(){this.seq().obj(this.key("tbsCertificate").use(Epe),this.key("signatureAlgorithm").use(a_),this.key("signatureValue").bitstr())});oO.exports=ype});var fO=U(Es=>{"use strict";var ps=$c();Es.certificate=aO();var mpe=ps.define("RSAPrivateKey",function(){this.seq().obj(this.key("version").int(),this.key("modulus").int(),this.key("publicExponent").int(),this.key("privateExponent").int(),this.key("prime1").int(),this.key("prime2").int(),this.key("exponent1").int(),this.key("exponent2").int(),this.key("coefficient").int())});Es.RSAPrivateKey=mpe;var Bpe=ps.define("RSAPublicKey",function(){this.seq().obj(this.key("modulus").int(),this.key("publicExponent").int())});Es.RSAPublicKey=Bpe;var AO=ps.define("AlgorithmIdentifier",function(){this.seq().obj(this.key("algorithm").objid(),this.key("none").null_().optional(),this.key("curve").objid().optional(),this.key("params").seq().obj(this.key("p").int(),this.key("q").int(),this.key("g").int()).optional())}),Ipe=ps.define("SubjectPublicKeyInfo",function(){this.seq().obj(this.key("algorithm").use(AO),this.key("subjectPublicKey").bitstr())});Es.PublicKey=Ipe;var bpe=ps.define("PrivateKeyInfo",function(){this.seq().obj(this.key("version").int(),this.key("algorithm").use(AO),this.key("subjectPrivateKey").octstr())});Es.PrivateKey=bpe;var Cpe=ps.define("EncryptedPrivateKeyInfo",function(){this.seq().obj(this.key("algorithm").seq().obj(this.key("id").objid(),this.key("decrypt").seq().obj(this.key("kde").seq().obj(this.key("id").objid(),this.key("kdeparams").seq().obj(this.key("salt").octstr(),this.key("iters").int())),this.key("cipher").seq().obj(this.key("algo").objid(),this.key("iv").octstr()))),this.key("subjectPrivateKey").octstr())});Es.EncryptedPrivateKey=Cpe;var Qpe=ps.define("DSAPrivateKey",function(){this.seq().obj(this.key("version").int(),this.key("p").int(),this.key("q").int(),this.key("g").int(),this.key("pub_key").int(),this.key("priv_key").int())});Es.DSAPrivateKey=Qpe;Es.DSAparam=ps.define("DSAparam",function(){this.int()});var wpe=ps.define("ECParameters",function(){this.choice({namedCurve:this.objid()})}),Spe=ps.define("ECPrivateKey",function(){this.seq().obj(this.key("version").int(),this.key("privateKey").octstr(),this.key("parameters").optional().explicit(0).use(wpe),this.key("publicKey").optional().explicit(1).bitstr())});Es.ECPrivateKey=Spe;Es.signature=ps.define("signature",function(){this.seq().obj(this.key("r").int(),this.key("s").int())})});var uO=U((JMe,_pe)=>{_pe.exports={"2.16.840.1.101.3.4.1.1":"aes-128-ecb","2.16.840.1.101.3.4.1.2":"aes-128-cbc","2.16.840.1.101.3.4.1.3":"aes-128-ofb","2.16.840.1.101.3.4.1.4":"aes-128-cfb","2.16.840.1.101.3.4.1.21":"aes-192-ecb","2.16.840.1.101.3.4.1.22":"aes-192-cbc","2.16.840.1.101.3.4.1.23":"aes-192-ofb","2.16.840.1.101.3.4.1.24":"aes-192-cfb","2.16.840.1.101.3.4.1.41":"aes-256-ecb","2.16.840.1.101.3.4.1.42":"aes-256-cbc","2.16.840.1.101.3.4.1.43":"aes-256-ofb","2.16.840.1.101.3.4.1.44":"aes-256-cfb"}});var lO=U((jMe,cO)=>{"use strict";var vpe=/Proc-Type: 4,ENCRYPTED[\n\r]+DEK-Info: AES-((?:128)|(?:192)|(?:256))-CBC,([0-9A-H]+)[\n\r]+([0-9A-z\n\r+/=]+)[\n\r]+/m,Rpe=/^-----BEGIN ((?:.*? KEY)|CERTIFICATE)-----/m,Dpe=/^-----BEGIN ((?:.*? KEY)|CERTIFICATE)-----([0-9A-z\n\r+/=]+)-----END \1-----$/m,Tpe=Rd(),Npe=gy(),qy=at().Buffer;cO.exports=function(e,t){var r=e.toString(),n=r.match(vpe),i;if(n){var o="aes"+n[1],a=qy.from(n[2],"hex"),A=qy.from(n[3].replace(/[\r\n]/g,""),"base64"),f=Tpe(t,a.slice(0,8),parseInt(n[1],10)).key,l=[],p=Npe.createDecipheriv(o,f,a);l.push(p.update(A)),l.push(p.final()),i=qy.concat(l)}else{var s=r.match(Dpe);i=qy.from(s[2].replace(/[\r\n]/g,""),"base64")}var I=r.match(Rpe)[1];return{tag:I,data:i}}});var Pd=U((zMe,dO)=>{"use strict";var kn=fO(),Mpe=uO(),Fpe=lO(),kpe=gy(),Upe=Xw().pbkdf2Sync,A_=at().Buffer;function xpe(e,t){var r=e.algorithm.decrypt.kde.kdeparams.salt,n=parseInt(e.algorithm.decrypt.kde.kdeparams.iters.toString(),10),i=Mpe[e.algorithm.decrypt.cipher.algo.join(".")],s=e.algorithm.decrypt.cipher.iv,o=e.subjectPrivateKey,a=parseInt(i.split("-")[1],10)/8,A=Upe(t,r,n,a,"sha1"),f=kpe.createDecipheriv(i,A,s),l=[];return l.push(f.update(o)),l.push(f.final()),A_.concat(l)}function hO(e){var t;typeof e=="object"&&!A_.isBuffer(e)&&(t=e.passphrase,e=e.key),typeof e=="string"&&(e=A_.from(e));var r=Fpe(e,t),n=r.tag,i=r.data,s,o;switch(n){case"CERTIFICATE":o=kn.certificate.decode(i,"der").tbsCertificate.subjectPublicKeyInfo;case"PUBLIC KEY":switch(o||(o=kn.PublicKey.decode(i,"der")),s=o.algorithm.algorithm.join("."),s){case"1.2.840.113549.1.1.1":return kn.RSAPublicKey.decode(o.subjectPublicKey.data,"der");case"1.2.840.10045.2.1":return o.subjectPrivateKey=o.subjectPublicKey,{type:"ec",data:o};case"1.2.840.10040.4.1":return o.algorithm.params.pub_key=kn.DSAparam.decode(o.subjectPublicKey.data,"der"),{type:"dsa",data:o.algorithm.params};default:throw new Error("unknown key id "+s)}case"ENCRYPTED PRIVATE KEY":i=kn.EncryptedPrivateKey.decode(i,"der"),i=xpe(i,t);case"PRIVATE KEY":switch(o=kn.PrivateKey.decode(i,"der"),s=o.algorithm.algorithm.join("."),s){case"1.2.840.113549.1.1.1":return kn.RSAPrivateKey.decode(o.subjectPrivateKey,"der");case"1.2.840.10045.2.1":return{curve:o.algorithm.curve,privateKey:kn.ECPrivateKey.decode(o.subjectPrivateKey,"der").privateKey};case"1.2.840.10040.4.1":return o.algorithm.params.priv_key=kn.DSAparam.decode(o.subjectPrivateKey,"der"),{type:"dsa",params:o.algorithm.params};default:throw new Error("unknown key id "+s)}case"RSA PUBLIC KEY":return kn.RSAPublicKey.decode(i,"der");case"RSA PRIVATE KEY":return kn.RSAPrivateKey.decode(i,"der");case"DSA PRIVATE KEY":return{type:"dsa",params:kn.DSAPrivateKey.decode(i,"der")};case"EC PRIVATE KEY":return i=kn.ECPrivateKey.decode(i,"der"),{curve:i.parameters.value,privateKey:i.privateKey};default:throw new Error("unknown key type "+n)}}hO.signature=kn.signature;dO.exports=hO});var f_=U((KMe,Lpe)=>{Lpe.exports={"1.3.132.0.10":"secp256k1","1.3.132.0.33":"p224","1.2.840.10045.3.1.1":"p192","1.2.840.10045.3.1.7":"p256","1.3.132.0.34":"p384","1.3.132.0.35":"p521"}});var EO=U((XMe,Yy)=>{"use strict";var fn=at().Buffer,Of=qw(),Ppe=By(),Ope=xy().ec,Gy=my(),Hpe=Pd(),qpe=f_(),Gpe=1;function Ype(e,t,r,n,i){var s=Hpe(t);if(s.curve){if(n!=="ecdsa"&&n!=="ecdsa/rsa")throw new Error("wrong private key type");return Wpe(e,s)}else if(s.type==="dsa"){if(n!=="dsa")throw new Error("wrong private key type");return Vpe(e,s,r)}if(n!=="rsa"&&n!=="ecdsa/rsa")throw new Error("wrong private key type");if(t.padding!==void 0&&t.padding!==Gpe)throw new Error("illegal or unsupported padding mode");e=fn.concat([i,e]);for(var o=s.modulus.byteLength(),a=[0,1];e.length+a.length+1<o;)a.push(255);a.push(0);for(var A=-1;++A<e.length;)a.push(e[A]);var f=Ppe(a,s);return f}function Wpe(e,t){var r=qpe[t.curve.join(".")];if(!r)throw new Error("unknown curve "+t.curve.join("."));var n=new Ope(r),i=n.keyFromPrivate(t.privateKey),s=i.sign(e);return fn.from(s.toDER())}function Vpe(e,t,r){for(var n=t.params.priv_key,i=t.params.p,s=t.params.q,o=t.params.g,a=new Gy(0),A,f=u_(e,s).mod(s),l=!1,p=gO(n,s,e,r);l===!1;)A=pO(s,p,r),a=zpe(o,A,i,s),l=A.invm(s).imul(f.add(n.mul(a))).mod(s),l.cmpn(0)===0&&(l=!1,a=new Gy(0));return Jpe(a,l)}function Jpe(e,t){e=e.toArray(),t=t.toArray(),e[0]&128&&(e=[0].concat(e)),t[0]&128&&(t=[0].concat(t));var r=e.length+t.length+4,n=[48,r,2,e.length];return n=n.concat(e,[2,t.length],t),fn.from(n)}function gO(e,t,r,n){if(e=fn.from(e.toArray()),e.length<t.byteLength()){var i=fn.alloc(t.byteLength()-e.length);e=fn.concat([i,e])}var s=r.length,o=jpe(r,t),a=fn.alloc(s);a.fill(1);var A=fn.alloc(s);return A=Of(n,A).update(a).update(fn.from([0])).update(e).update(o).digest(),a=Of(n,A).update(a).digest(),A=Of(n,A).update(a).update(fn.from([1])).update(e).update(o).digest(),a=Of(n,A).update(a).digest(),{k:A,v:a}}function u_(e,t){var r=new Gy(e),n=(e.length<<3)-t.bitLength();return n>0&&r.ishrn(n),r}function jpe(e,t){e=u_(e,t),e=e.mod(t);var r=fn.from(e.toArray());if(r.length<t.byteLength()){var n=fn.alloc(t.byteLength()-r.length);r=fn.concat([n,r])}return r}function pO(e,t,r){var n,i;do{for(n=fn.alloc(0);n.length*8<e.bitLength();)t.v=Of(r,t.k).update(t.v).digest(),n=fn.concat([n,t.v]);i=u_(n,e),t.k=Of(r,t.k).update(t.v).update(fn.from([0])).digest(),t.v=Of(r,t.k).update(t.v).digest()}while(i.cmp(e)!==-1);return i}function zpe(e,t,r,n){return e.toRed(Gy.mont(r)).redPow(t).fromRed().mod(n)}Yy.exports=Ype;Yy.exports.getKey=gO;Yy.exports.makeKey=pO});var IO=U((ZMe,BO)=>{"use strict";var c_=at().Buffer,Od=my(),Kpe=xy().ec,mO=Pd(),Xpe=f_();function Zpe(e,t,r,n,i){var s=mO(r);if(s.type==="ec"){if(n!=="ecdsa"&&n!=="ecdsa/rsa")throw new Error("wrong public key type");return $pe(e,t,s)}else if(s.type==="dsa"){if(n!=="dsa")throw new Error("wrong public key type");return eEe(e,t,s)}if(n!=="rsa"&&n!=="ecdsa/rsa")throw new Error("wrong public key type");t=c_.concat([i,t]);for(var o=s.modulus.byteLength(),a=[1],A=0;t.length+a.length+2<o;)a.push(255),A+=1;a.push(0);for(var f=-1;++f<t.length;)a.push(t[f]);a=c_.from(a);var l=Od.mont(s.modulus);e=new Od(e).toRed(l),e=e.redPow(new Od(s.publicExponent)),e=c_.from(e.fromRed().toArray());var p=A<8?1:0;for(o=Math.min(e.length,a.length),e.length!==a.length&&(p=1),f=-1;++f<o;)p|=e[f]^a[f];return p===0}function $pe(e,t,r){var n=Xpe[r.data.algorithm.curve.join(".")];if(!n)throw new Error("unknown curve "+r.data.algorithm.curve.join("."));var i=new Kpe(n),s=r.data.subjectPrivateKey.data;return i.verify(t,e,s)}function eEe(e,t,r){var n=r.data.p,i=r.data.q,s=r.data.g,o=r.data.pub_key,a=mO.signature.decode(e,"der"),A=a.s,f=a.r;yO(A,i),yO(f,i);var l=Od.mont(n),p=A.invm(i),I=s.toRed(l).redPow(new Od(t).mul(p).mod(i)).fromRed().mul(o.toRed(l).redPow(f.mul(p).mod(i)).fromRed()).mod(n).mod(i);return I.cmp(f)===0}function yO(e,t){if(e.cmpn(0)<=0)throw new Error("invalid sig");if(e.cmp(t)>=0)throw new Error("invalid sig")}BO.exports=Zpe});var _O=U(($Me,SO)=>{"use strict";var Wy=at().Buffer,QO=Mc(),Vy=Fw(),wO=je(),tEe=EO(),rEe=IO(),Hf=Gw();Object.keys(Hf).forEach(function(e){Hf[e].id=Wy.from(Hf[e].id,"hex"),Hf[e.toLowerCase()]=Hf[e]});function Hd(e){Vy.Writable.call(this);var t=Hf[e];if(!t)throw new Error("Unknown message digest");this._hashType=t.hash,this._hash=QO(t.hash),this._tag=t.id,this._signType=t.sign}wO(Hd,Vy.Writable);Hd.prototype._write=function(t,r,n){this._hash.update(t),n()};Hd.prototype.update=function(t,r){return this._hash.update(typeof t=="string"?Wy.from(t,r):t),this};Hd.prototype.sign=function(t,r){this.end();var n=this._hash.digest(),i=tEe(n,t,this._hashType,this._signType,this._tag);return r?i.toString(r):i};function qd(e){Vy.Writable.call(this);var t=Hf[e];if(!t)throw new Error("Unknown message digest");this._hash=QO(t.hash),this._tag=t.id,this._signType=t.sign}wO(qd,Vy.Writable);qd.prototype._write=function(t,r,n){this._hash.update(t),n()};qd.prototype.update=function(t,r){return this._hash.update(typeof t=="string"?Wy.from(t,r):t),this};qd.prototype.verify=function(t,r,n){var i=typeof r=="string"?Wy.from(r,n):r;this.end();var s=this._hash.digest();return rEe(i,s,t,this._signType,this._tag)};function bO(e){return new Hd(e)}function CO(e){return new qd(e)}SO.exports={Sign:bO,Verify:CO,createSign:bO,createVerify:CO}});var RO=U((eFe,vO)=>{var nEe=xy(),iEe=kr();vO.exports=function(t){return new qf(t)};var Zn={secp256k1:{name:"secp256k1",byteLength:32},secp224r1:{name:"p224",byteLength:28},prime256v1:{name:"p256",byteLength:32},prime192v1:{name:"p192",byteLength:24},ed25519:{name:"ed25519",byteLength:32},secp384r1:{name:"p384",byteLength:48},secp521r1:{name:"p521",byteLength:66}};Zn.p224=Zn.secp224r1;Zn.p256=Zn.secp256r1=Zn.prime256v1;Zn.p192=Zn.secp192r1=Zn.prime192v1;Zn.p384=Zn.secp384r1;Zn.p521=Zn.secp521r1;function qf(e){this.curveType=Zn[e],this.curveType||(this.curveType={name:e}),this.curve=new nEe.ec(this.curveType.name),this.keys=void 0}qf.prototype.generateKeys=function(e,t){return this.keys=this.curve.genKeyPair(),this.getPublicKey(e,t)};qf.prototype.computeSecret=function(e,t,r){t=t||"utf8",Buffer.isBuffer(e)||(e=new Buffer(e,t));var n=this.curve.keyFromPublic(e).getPublic(),i=n.mul(this.keys.getPrivate()).getX();return l_(i,r,this.curveType.byteLength)};qf.prototype.getPublicKey=function(e,t){var r=this.keys.getPublic(t==="compressed",!0);return t==="hybrid"&&(r[r.length-1]%2?r[0]=7:r[0]=6),l_(r,e)};qf.prototype.getPrivateKey=function(e){return l_(this.keys.getPrivate(),e)};qf.prototype.setPublicKey=function(e,t){return t=t||"utf8",Buffer.isBuffer(e)||(e=new Buffer(e,t)),this.keys._importPublic(e),this};qf.prototype.setPrivateKey=function(e,t){t=t||"utf8",Buffer.isBuffer(e)||(e=new Buffer(e,t));var r=new iEe(e);return r=r.toString(16),this.keys=this.curve.genKeyPair(),this.keys._importPrivate(r),this};function l_(e,t,r){Array.isArray(e)||(e=e.toArray());var n=new Buffer(e);if(r&&n.length<r){var i=new Buffer(r-n.length);i.fill(0),n=Buffer.concat([i,n])}return t?n.toString(t):n}});var d_=U((tFe,DO)=>{var sEe=Mc(),h_=at().Buffer;DO.exports=function(e,t){for(var r=h_.alloc(0),n=0,i;r.length<t;)i=oEe(n++),r=h_.concat([r,sEe("sha1").update(e).update(i).digest()]);return r.slice(0,t)};function oEe(e){var t=h_.allocUnsafe(4);return t.writeUInt32BE(e,0),t}});var g_=U((rFe,TO)=>{TO.exports=function(t,r){for(var n=t.length,i=-1;++i<n;)t[i]^=r[i];return t}});var p_=U((nFe,MO)=>{var NO=kr(),aEe=at().Buffer;function AEe(e,t){return aEe.from(e.toRed(NO.mont(t.modulus)).redPow(new NO(t.publicExponent)).fromRed().toArray())}MO.exports=AEe});var xO=U((iFe,UO)=>{var fEe=Pd(),E_=mf(),uEe=Mc(),FO=d_(),kO=g_(),y_=kr(),cEe=p_(),lEe=By(),ys=at().Buffer;UO.exports=function(t,r,n){var i;t.padding?i=t.padding:n?i=1:i=4;var s=fEe(t),o;if(i===4)o=hEe(s,r);else if(i===1)o=dEe(s,r,n);else if(i===3){if(o=new y_(r),o.cmp(s.modulus)>=0)throw new Error("data too long for modulus")}else throw new Error("unknown padding");return n?lEe(o,s):cEe(o,s)};function hEe(e,t){var r=e.modulus.byteLength(),n=t.length,i=uEe("sha1").update(ys.alloc(0)).digest(),s=i.length,o=2*s;if(n>r-o-2)throw new Error("message too long");var a=ys.alloc(r-n-o-2),A=r-s-1,f=E_(s),l=kO(ys.concat([i,a,ys.alloc(1,1),t],A),FO(f,A)),p=kO(f,FO(l,s));return new y_(ys.concat([ys.alloc(1),p,l],r))}function dEe(e,t,r){var n=t.length,i=e.modulus.byteLength();if(n>i-11)throw new Error("message too long");var s;return r?s=ys.alloc(i-n-3,255):s=gEe(i-n-3),new y_(ys.concat([ys.from([0,r?1:2]),s,ys.alloc(1),t],i))}function gEe(e){for(var t=ys.allocUnsafe(e),r=0,n=E_(e*2),i=0,s;r<e;)i===n.length&&(n=E_(e*2),i=0),s=n[i++],s&&(t[r++]=s);return t}});var qO=U((sFe,HO)=>{var pEe=Pd(),LO=d_(),PO=g_(),OO=kr(),EEe=By(),yEe=Mc(),mEe=p_(),Gd=at().Buffer;HO.exports=function(t,r,n){var i;t.padding?i=t.padding:n?i=1:i=4;var s=pEe(t),o=s.modulus.byteLength();if(r.length>o||new OO(r).cmp(s.modulus)>=0)throw new Error("decryption error");var a;n?a=mEe(new OO(r),s):a=EEe(r,s);var A=Gd.alloc(o-a.length);if(a=Gd.concat([A,a],o),i===4)return BEe(s,a);if(i===1)return IEe(s,a,n);if(i===3)return a;throw new Error("unknown padding")};function BEe(e,t){var r=e.modulus.byteLength(),n=yEe("sha1").update(Gd.alloc(0)).digest(),i=n.length;if(t[0]!==0)throw new Error("decryption error");var s=t.slice(1,i+1),o=t.slice(i+1),a=PO(s,LO(o,i)),A=PO(o,LO(a,r-i-1));if(bEe(n,A.slice(0,i)))throw new Error("decryption error");for(var f=i;A[f]===0;)f++;if(A[f++]!==1)throw new Error("decryption error");return A.slice(f)}function IEe(e,t,r){for(var n=t.slice(0,2),i=2,s=0;t[i++]!==0;)if(i>=t.length){s++;break}var o=t.slice(2,i-1);if((n.toString("hex")!=="0002"&&!r||n.toString("hex")!=="0001"&&r)&&s++,o.length<8&&s++,s)throw new Error("decryption error");return t.slice(i)}function bEe(e,t){e=Gd.from(e),t=Gd.from(t);var r=0,n=e.length;e.length!==t.length&&(r++,n=Math.min(e.length,t.length));for(var i=-1;++i<n;)r+=e[i]^t[i];return r}});var GO=U(Gf=>{Gf.publicEncrypt=xO();Gf.privateDecrypt=qO();Gf.privateEncrypt=function(t,r){return Gf.publicEncrypt(t,r,!0)};Gf.publicDecrypt=function(t,r){return Gf.privateDecrypt(t,r,!0)}});var $O=U(Yd=>{"use strict";function YO(){throw new Error(`secure random number generation not supported by this browser
-use chrome, FireFox or Internet Explorer 11`)}var VO=at(),WO=mf(),JO=VO.Buffer,jO=VO.kMaxLength,m_=globalThis.crypto||globalThis.msCrypto,zO=Math.pow(2,32)-1;function KO(e,t){if(typeof e!="number"||e!==e)throw new TypeError("offset must be a number");if(e>zO||e<0)throw new TypeError("offset must be a uint32");if(e>jO||e>t)throw new RangeError("offset out of range")}function XO(e,t,r){if(typeof e!="number"||e!==e)throw new TypeError("size must be a number");if(e>zO||e<0)throw new TypeError("size must be a uint32");if(e+t>r||e>jO)throw new RangeError("buffer too small")}m_&&m_.getRandomValues||!process.browser?(Yd.randomFill=CEe,Yd.randomFillSync=QEe):(Yd.randomFill=YO,Yd.randomFillSync=YO);function CEe(e,t,r,n){if(!JO.isBuffer(e)&&!(e instanceof globalThis.Uint8Array))throw new TypeError('"buf" argument must be a Buffer or Uint8Array');if(typeof t=="function")n=t,t=0,r=e.length;else if(typeof r=="function")n=r,r=e.length-t;else if(typeof n!="function")throw new TypeError('"cb" argument must be a function');return KO(t,e.length),XO(r,t,e.length),ZO(e,t,r,n)}function ZO(e,t,r,n){if(process.browser){var i=e.buffer,s=new Uint8Array(i,t,r);if(m_.getRandomValues(s),n){process.nextTick(function(){n(null,e)});return}return e}if(n){WO(r,function(a,A){if(a)return n(a);A.copy(e,t),n(null,e)});return}var o=WO(r);return o.copy(e,t),e}function QEe(e,t,r){if(typeof t>"u"&&(t=0),!JO.isBuffer(e)&&!(e instanceof globalThis.Uint8Array))throw new TypeError('"buf" argument must be a Buffer or Uint8Array');return KO(t,e.length),r===void 0&&(r=e.length-t),XO(r,t,e.length),ZO(e,t,r)}});var Nd=U(ut=>{"use strict";ut.randomBytes=ut.rng=ut.pseudoRandomBytes=ut.prng=mf();ut.createHash=ut.Hash=Mc();ut.createHmac=ut.Hmac=qw();var wEe=d8(),SEe=Object.keys(wEe),_Ee=["sha1","sha224","sha256","sha384","sha512","md5","rmd160"].concat(SEe);ut.getHashes=function(){return _Ee};var eH=Xw();ut.pbkdf2=eH.pbkdf2;ut.pbkdf2Sync=eH.pbkdf2Sync;var co=L5();ut.Cipher=co.Cipher;ut.createCipher=co.createCipher;ut.Cipheriv=co.Cipheriv;ut.createCipheriv=co.createCipheriv;ut.Decipher=co.Decipher;ut.createDecipher=co.createDecipher;ut.Decipheriv=co.Decipheriv;ut.createDecipheriv=co.createDecipheriv;ut.getCiphers=co.getCiphers;ut.listCiphers=co.listCiphers;var Wd=X5();ut.DiffieHellmanGroup=Wd.DiffieHellmanGroup;ut.createDiffieHellmanGroup=Wd.createDiffieHellmanGroup;ut.getDiffieHellman=Wd.getDiffieHellman;ut.createDiffieHellman=Wd.createDiffieHellman;ut.DiffieHellman=Wd.DiffieHellman;var Jy=_O();ut.createSign=Jy.createSign;ut.Sign=Jy.Sign;ut.createVerify=Jy.createVerify;ut.Verify=Jy.Verify;ut.createECDH=RO();var jy=GO();ut.publicEncrypt=jy.publicEncrypt;ut.privateEncrypt=jy.privateEncrypt;ut.publicDecrypt=jy.publicDecrypt;ut.privateDecrypt=jy.privateDecrypt;var tH=$O();ut.randomFill=tH.randomFill;ut.randomFillSync=tH.randomFillSync;ut.createCredentials=function(){throw new Error(`sorry, createCredentials is not implemented yet
-we accept pull requests
-https://github.com/browserify/crypto-browserify`)};ut.constants={DH_CHECK_P_NOT_SAFE_PRIME:2,DH_CHECK_P_NOT_PRIME:1,DH_UNABLE_TO_CHECK_GENERATOR:4,DH_NOT_SUITABLE_GENERATOR:8,NPN_ENABLED:1,ALPN_ENABLED:1,RSA_PKCS1_PADDING:1,RSA_SSLV23_PADDING:2,RSA_NO_PADDING:3,RSA_PKCS1_OAEP_PADDING:4,RSA_X931_PADDING:5,RSA_PKCS1_PSS_PADDING:6,POINT_CONVERSION_COMPRESSED:2,POINT_CONVERSION_UNCOMPRESSED:4,POINT_CONVERSION_HYBRID:6}});var nH=U(()=>{"use strict";var rH=new Error("No such built-in module: node:sqlite");rH.code="ERR_UNKNOWN_BUILTIN_MODULE";throw rH});var B_=U((cFe,iH)=>{"use strict";iH.exports={isMainThread:!0,parentPort:null,workerData:null}});var C_=U((_,b_)=>{"use strict";var e=new Set(["crypto","sqlite","markAsUncloneable","zstd"]),t=new Map([["crypto",!0],["sqlite",!1],["markAsUncloneable",!1],["zstd",!1]]),r={clear(){t.clear()},has(n){if(!e.has(n))throw new TypeError(`unknown feature: ${n}`);return t.get(n)??!1},set(n,i){if(!e.has(n))throw new TypeError(`unknown feature: ${n}`);t.set(n,!!i)}};b_.exports.runtimeFeatures=r;b_.exports.default=r});var lo=U((dFe,cH)=>{"use strict";var MEe=Gt(),{types:ur,inspect:FEe}=Yr(),{runtimeFeatures:kEe}=C_(),Q_=1,w_=2,Ky=3,Xy=4,S_=5,Zy=6,__=7,$n=8,uH=Function.call.bind(Function.prototype[Symbol.hasInstance]),K={converters:{},util:{},errors:{},is:{}};K.errors.exception=function(e){return new TypeError(`${e.header}: ${e.message}`)};K.errors.conversionFailed=function(e){let t=e.types.length===1?"":" one of",r=`${e.argument} could not be converted to${t}: ${e.types.join(", ")}.`;return K.errors.exception({header:e.prefix,message:r})};K.errors.invalidArgument=function(e){return K.errors.exception({header:e.prefix,message:`"${e.value}" is an invalid ${e.type}.`})};K.brandCheck=function(e,t){if(!uH(t,e)){let r=new TypeError("Illegal invocation");throw r.code="ERR_INVALID_THIS",r}};K.brandCheckMultiple=function(e){let t=e.map(r=>K.util.MakeTypeAssertion(r));return r=>{if(t.every(n=>!n(r))){let n=new TypeError("Illegal invocation");throw n.code="ERR_INVALID_THIS",n}}};K.argumentLengthCheck=function({length:e},t,r){if(e<t)throw K.errors.exception({message:`${t} argument${t!==1?"s":""} required, but${e?" only":""} ${e} found.`,header:r})};K.illegalConstructor=function(){throw K.errors.exception({header:"TypeError",message:"Illegal constructor"})};K.util.MakeTypeAssertion=function(e){return t=>uH(e,t)};K.util.Type=function(e){switch(typeof e){case"undefined":return Q_;case"boolean":return w_;case"string":return Ky;case"symbol":return Xy;case"number":return S_;case"bigint":return Zy;case"function":case"object":return e===null?__:$n}};K.util.Types={UNDEFINED:Q_,BOOLEAN:w_,STRING:Ky,SYMBOL:Xy,NUMBER:S_,BIGINT:Zy,NULL:__,OBJECT:$n};K.util.TypeValueToString=function(e){switch(K.util.Type(e)){case Q_:return"Undefined";case w_:return"Boolean";case Ky:return"String";case Xy:return"Symbol";case S_:return"Number";case Zy:return"BigInt";case __:return"Null";case $n:return"Object"}};K.util.markAsUncloneable=kEe.has("markAsUncloneable")?B_().markAsUncloneable:()=>{};K.util.ConvertToInt=function(e,t,r,n){let i,s;t===64?(i=Math.pow(2,53)-1,r==="unsigned"?s=0:s=Math.pow(-2,53)+1):r==="unsigned"?(s=0,i=Math.pow(2,t)-1):(s=Math.pow(-2,t)-1,i=Math.pow(2,t-1)-1);let o=Number(e);if(o===0&&(o=0),K.util.HasFlag(n,K.attributes.EnforceRange)){if(Number.isNaN(o)||o===Number.POSITIVE_INFINITY||o===Number.NEGATIVE_INFINITY)throw K.errors.exception({header:"Integer conversion",message:`Could not convert ${K.util.Stringify(e)} to an integer.`});if(o=K.util.IntegerPart(o),o<s||o>i)throw K.errors.exception({header:"Integer conversion",message:`Value must be between ${s}-${i}, got ${o}.`});return o}return!Number.isNaN(o)&&K.util.HasFlag(n,K.attributes.Clamp)?(o=Math.min(Math.max(o,s),i),Math.floor(o)%2===0?o=Math.floor(o):o=Math.ceil(o),o):Number.isNaN(o)||o===0&&Object.is(0,o)||o===Number.POSITIVE_INFINITY||o===Number.NEGATIVE_INFINITY?0:(o=K.util.IntegerPart(o),o=o%Math.pow(2,t),r==="signed"&&o>=Math.pow(2,t)-1?o-Math.pow(2,t):o)};K.util.IntegerPart=function(e){let t=Math.floor(Math.abs(e));return e<0?-1*t:t};K.util.Stringify=function(e){switch(K.util.Type(e)){case Xy:return`Symbol(${e.description})`;case $n:return FEe(e);case Ky:return`"${e}"`;case Zy:return`${e}n`;default:return`${e}`}};K.util.IsResizableArrayBuffer=function(e){if(ur.isArrayBuffer(e))return e.resizable;if(ur.isSharedArrayBuffer(e))return e.growable;throw K.errors.exception({header:"IsResizableArrayBuffer",message:`"${K.util.Stringify(e)}" is not an array buffer.`})};K.util.HasFlag=function(e,t){return typeof e=="number"&&(e&t)===t};K.sequenceConverter=function(e){return(t,r,n,i)=>{if(K.util.Type(t)!==$n)throw K.errors.exception({header:r,message:`${n} (${K.util.Stringify(t)}) is not iterable.`});let s=typeof i=="function"?i():t?.[Symbol.iterator]?.(),o=[],a=0;if(s===void 0||typeof s.next!="function")throw K.errors.exception({header:r,message:`${n} is not iterable.`});for(;;){let{done:A,value:f}=s.next();if(A)break;o.push(e(f,r,`${n}[${a++}]`))}return o}};K.recordConverter=function(e,t){return(r,n,i)=>{if(K.util.Type(r)!==$n)throw K.errors.exception({header:n,message:`${i} ("${K.util.TypeValueToString(r)}") is not an Object.`});let s={};if(!ur.isProxy(r)){let a=[...Object.getOwnPropertyNames(r),...Object.getOwnPropertySymbols(r)];for(let A of a){let f=K.util.Stringify(A),l=e(A,n,`Key ${f} in ${i}`),p=t(r[A],n,`${i}[${f}]`);s[l]=p}return s}let o=Reflect.ownKeys(r);for(let a of o)if(Reflect.getOwnPropertyDescriptor(r,a)?.enumerable){let f=e(a,n,i),l=t(r[a],n,i);s[f]=l}return s}};K.interfaceConverter=function(e,t){return(r,n,i)=>{if(!e(r))throw K.errors.exception({header:n,message:`Expected ${i} ("${K.util.Stringify(r)}") to be an instance of ${t}.`});return r}};K.dictionaryConverter=function(e){return e.sort((t,r)=>(t.key>r.key)-(t.key<r.key)),(t,r,n)=>{let i={};if(t!=null&&K.util.Type(t)!==$n)throw K.errors.exception({header:r,message:`Expected ${t} to be one of: Null, Undefined, Object.`});for(let s of e){let{key:o,defaultValue:a,required:A,converter:f}=s;if(A===!0&&(t==null||!Object.hasOwn(t,o)))throw K.errors.exception({header:r,message:`Missing required key "${o}".`});let l=t?.[o],p=a!==void 0;if(p&&l===void 0&&(l=a()),A||p||l!==void 0){if(l=f(l,r,`${n}.${o}`),s.allowedValues&&!s.allowedValues.includes(l))throw K.errors.exception({header:r,message:`${l} is not an accepted type. Expected one of ${s.allowedValues.join(", ")}.`});i[o]=l}}return i}};K.nullableConverter=function(e){return(t,r,n)=>t===null?t:e(t,r,n)};K.is.USVString=function(e){return typeof e=="string"&&e.isWellFormed()};K.is.ReadableStream=K.util.MakeTypeAssertion(ReadableStream);K.is.Blob=K.util.MakeTypeAssertion(Blob);K.is.URLSearchParams=K.util.MakeTypeAssertion(URLSearchParams);K.is.File=K.util.MakeTypeAssertion(File);K.is.URL=K.util.MakeTypeAssertion(URL);K.is.AbortSignal=K.util.MakeTypeAssertion(AbortSignal);K.is.MessagePort=K.util.MakeTypeAssertion(MessagePort);K.is.BufferSource=function(e){return ur.isArrayBuffer(e)||ArrayBuffer.isView(e)&&ur.isArrayBuffer(e.buffer)};K.util.getCopyOfBytesHeldByBufferSource=function(e){let t=e,r=t,n=0,i=0;if(ur.isTypedArray(t)||ur.isDataView(t)?(r=t.buffer,n=t.byteOffset,i=t.byteLength):(MEe(ur.isAnyArrayBuffer(t)),i=t.byteLength),r.detached)return new Uint8Array(0);let s=new Uint8Array(i),o=new Uint8Array(r,n,i);return s.set(o),s};K.converters.DOMString=function(e,t,r,n){if(e===null&&K.util.HasFlag(n,K.attributes.LegacyNullToEmptyString))return"";if(typeof e=="symbol")throw K.errors.exception({header:t,message:`${r} is a symbol, which cannot be converted to a DOMString.`});return String(e)};K.converters.ByteString=function(e,t,r){if(typeof e=="symbol")throw K.errors.exception({header:t,message:`${r} is a symbol, which cannot be converted to a ByteString.`});let n=String(e);for(let i=0;i<n.length;i++)if(n.charCodeAt(i)>255)throw new TypeError(`Cannot convert argument to a ByteString because the character at index ${i} has a value of ${n.charCodeAt(i)} which is greater than 255.`);return n};K.converters.USVString=function(e){return typeof e=="string"?e.toWellFormed():`${e}`.toWellFormed()};K.converters.boolean=function(e){return!!e};K.converters.any=function(e){return e};K.converters["long long"]=function(e,t,r){return K.util.ConvertToInt(e,64,"signed",0,t,r)};K.converters["unsigned long long"]=function(e,t,r){return K.util.ConvertToInt(e,64,"unsigned",0,t,r)};K.converters["unsigned long"]=function(e,t,r){return K.util.ConvertToInt(e,32,"unsigned",0,t,r)};K.converters["unsigned short"]=function(e,t,r,n){return K.util.ConvertToInt(e,16,"unsigned",n,t,r)};K.converters.ArrayBuffer=function(e,t,r,n){if(K.util.Type(e)!==$n||!ur.isArrayBuffer(e))throw K.errors.conversionFailed({prefix:t,argument:`${r} ("${K.util.Stringify(e)}")`,types:["ArrayBuffer"]});if(!K.util.HasFlag(n,K.attributes.AllowResizable)&&K.util.IsResizableArrayBuffer(e))throw K.errors.exception({header:t,message:`${r} cannot be a resizable ArrayBuffer.`});return e};K.converters.SharedArrayBuffer=function(e,t,r,n){if(K.util.Type(e)!==$n||!ur.isSharedArrayBuffer(e))throw K.errors.conversionFailed({prefix:t,argument:`${r} ("${K.util.Stringify(e)}")`,types:["SharedArrayBuffer"]});if(!K.util.HasFlag(n,K.attributes.AllowResizable)&&K.util.IsResizableArrayBuffer(e))throw K.errors.exception({header:t,message:`${r} cannot be a resizable SharedArrayBuffer.`});return e};K.converters.TypedArray=function(e,t,r,n,i){if(K.util.Type(e)!==$n||!ur.isTypedArray(e)||e.constructor.name!==t.name)throw K.errors.conversionFailed({prefix:r,argument:`${n} ("${K.util.Stringify(e)}")`,types:[t.name]});if(!K.util.HasFlag(i,K.attributes.AllowShared)&&ur.isSharedArrayBuffer(e.buffer))throw K.errors.exception({header:r,message:`${n} cannot be a view on a shared array buffer.`});if(!K.util.HasFlag(i,K.attributes.AllowResizable)&&K.util.IsResizableArrayBuffer(e.buffer))throw K.errors.exception({header:r,message:`${n} cannot be a view on a resizable array buffer.`});return e};K.converters.DataView=function(e,t,r,n){if(K.util.Type(e)!==$n||!ur.isDataView(e))throw K.errors.conversionFailed({prefix:t,argument:`${r} ("${K.util.Stringify(e)}")`,types:["DataView"]});if(!K.util.HasFlag(n,K.attributes.AllowShared)&&ur.isSharedArrayBuffer(e.buffer))throw K.errors.exception({header:t,message:`${r} cannot be a view on a shared array buffer.`});if(!K.util.HasFlag(n,K.attributes.AllowResizable)&&K.util.IsResizableArrayBuffer(e.buffer))throw K.errors.exception({header:t,message:`${r} cannot be a view on a resizable array buffer.`});return e};K.converters.ArrayBufferView=function(e,t,r,n){if(K.util.Type(e)!==$n||!ur.isArrayBufferView(e))throw K.errors.conversionFailed({prefix:t,argument:`${r} ("${K.util.Stringify(e)}")`,types:["ArrayBufferView"]});if(!K.util.HasFlag(n,K.attributes.AllowShared)&&ur.isSharedArrayBuffer(e.buffer))throw K.errors.exception({header:t,message:`${r} cannot be a view on a shared array buffer.`});if(!K.util.HasFlag(n,K.attributes.AllowResizable)&&K.util.IsResizableArrayBuffer(e.buffer))throw K.errors.exception({header:t,message:`${r} cannot be a view on a resizable array buffer.`});return e};K.converters.BufferSource=function(e,t,r,n){if(ur.isArrayBuffer(e))return K.converters.ArrayBuffer(e,t,r,n);if(ur.isArrayBufferView(e))return n&=~K.attributes.AllowShared,K.converters.ArrayBufferView(e,t,r,n);throw ur.isSharedArrayBuffer(e)?K.errors.exception({header:t,message:`${r} cannot be a SharedArrayBuffer.`}):K.errors.conversionFailed({prefix:t,argument:`${r} ("${K.util.Stringify(e)}")`,types:["ArrayBuffer","ArrayBufferView"]})};K.converters.AllowSharedBufferSource=function(e,t,r,n){if(ur.isArrayBuffer(e))return K.converters.ArrayBuffer(e,t,r,n);if(ur.isSharedArrayBuffer(e))return K.converters.SharedArrayBuffer(e,t,r,n);if(ur.isArrayBufferView(e))return n|=K.attributes.AllowShared,K.converters.ArrayBufferView(e,t,r,n);throw K.errors.conversionFailed({prefix:t,argument:`${r} ("${K.util.Stringify(e)}")`,types:["ArrayBuffer","SharedArrayBuffer","ArrayBufferView"]})};K.converters["sequence<ByteString>"]=K.sequenceConverter(K.converters.ByteString);K.converters["sequence<sequence<ByteString>>"]=K.sequenceConverter(K.converters["sequence<ByteString>"]);K.converters["record<ByteString, ByteString>"]=K.recordConverter(K.converters.ByteString,K.converters.ByteString);K.converters.Blob=K.interfaceConverter(K.is.Blob,"Blob");K.converters.AbortSignal=K.interfaceConverter(K.is.AbortSignal,"AbortSignal");K.converters.EventHandlerNonNull=function(e){return K.util.Type(e)!==$n?null:typeof e=="function"?e:()=>{}};K.attributes={Clamp:1,EnforceRange:2,AllowShared:4,AllowResizable:8,LegacyNullToEmptyString:16};cH.exports={webidl:K}});var jf=U((gFe,wH)=>{"use strict";var{Transform:UEe}=(ts(),Os(qt)),lH=RE(),{redirectStatusSet:xEe,referrerPolicyTokens:LEe,badPortsSet:PEe}=td(),{getGlobalOrigin:hH}=g3(),{collectAnHTTPQuotedString:OEe,parseMIMEType:HEe}=yf(),{performance:qEe}=v3(),{ReadableStreamFrom:GEe,isValidHTTPToken:dH,normalizedMethodRecordsBase:YEe}=Zt(),Jd=Gt(),{isUint8Array:WEe}=dw(),{webidl:dA}=lo(),{isomorphicEncode:v_,collectASequenceOfCodePoints:Wf,removeChars:VEe}=Ef();function gH(e){let t=e.urlList,r=t.length;return r===0?null:t[r-1].toString()}function JEe(e,t){if(!xEe.has(e.status))return null;let r=e.headersList.get("location",!0);return r!==null&&EH(r)&&(pH(r)||(r=jEe(r)),r=new URL(r,gH(e))),r&&!r.hash&&(r.hash=t),r}function pH(e){for(let t=0;t<e.length;++t){let r=e.charCodeAt(t);if(r>126||r<32)return!1}return!0}function jEe(e){return Buffer.from(e,"binary").toString("utf8")}function Jf(e){return e.urlList[e.urlList.length-1]}function zEe(e){let t=Jf(e);return CH(t)&&PEe.has(t.port)?"blocked":"allowed"}function KEe(e){return e instanceof Error||e?.constructor?.name==="Error"||e?.constructor?.name==="DOMException"}function XEe(e){for(let t=0;t<e.length;++t){let r=e.charCodeAt(t);if(!(r===9||r>=32&&r<=126||r>=128&&r<=255))return!1}return!0}var ZEe=dH;function EH(e){return(e[0]==="	"||e[0]===" "||e[e.length-1]==="	"||e[e.length-1]===" "||e.includes(`
-`)||e.includes("\r")||e.includes("\0"))===!1}function $Ee(e){let t=(e.headersList.get("referrer-policy",!0)??"").split(","),r="";if(t.length)for(let n=t.length;n!==0;n--){let i=t[n-1].trim();if(LEe.has(i)){r=i;break}}return r}function eye(e,t){let r=$Ee(t);r!==""&&(e.referrerPolicy=r)}function tye(){return"allowed"}function rye(){return"success"}function nye(){return"success"}function iye(e){let t=null;t=e.mode,e.headersList.set("sec-fetch-mode",t,!0)}function sye(e){let t=e.origin;if(!(t==="client"||t===void 0)){if(e.responseTainting==="cors"||e.mode==="websocket")e.headersList.append("origin",t,!0);else if(e.method!=="GET"&&e.method!=="HEAD"){switch(e.referrerPolicy){case"no-referrer":t=null;break;case"no-referrer-when-downgrade":case"strict-origin":case"strict-origin-when-cross-origin":e.origin&&D_(e.origin)&&!D_(Jf(e))&&(t=null);break;case"same-origin":Vd(e,Jf(e))||(t=null);break;default:}e.headersList.append("origin",t,!0)}}}function nl(e,t){return e}function oye(e,t,r){return!e?.startTime||e.startTime<t?{domainLookupStartTime:t,domainLookupEndTime:t,connectionStartTime:t,connectionEndTime:t,secureConnectionStartTime:t,ALPNNegotiatedProtocol:e?.ALPNNegotiatedProtocol}:{domainLookupStartTime:nl(e.domainLookupStartTime,r),domainLookupEndTime:nl(e.domainLookupEndTime,r),connectionStartTime:nl(e.connectionStartTime,r),connectionEndTime:nl(e.connectionEndTime,r),secureConnectionStartTime:nl(e.secureConnectionStartTime,r),ALPNNegotiatedProtocol:e.ALPNNegotiatedProtocol}}function aye(e){return nl(qEe.now(),e)}function Aye(e){return{startTime:e.startTime??0,redirectStartTime:0,redirectEndTime:0,postRedirectStartTime:e.startTime??0,finalServiceWorkerStartTime:0,finalNetworkResponseStartTime:0,finalNetworkRequestStartTime:0,endTime:0,encodedBodySize:0,decodedBodySize:0,finalConnectionTimingInfo:null}}function yH(){return{referrerPolicy:"strict-origin-when-cross-origin"}}function fye(e){return{referrerPolicy:e.referrerPolicy}}function uye(e){let t=e.referrerPolicy;Jd(t);let r=null;if(e.referrer==="client"){let s=hH();if(!s||s.origin==="null")return"no-referrer";r=new URL(s)}else dA.is.URL(e.referrer)&&(r=e.referrer);let n=R_(r),i=R_(r,!0);switch(n.toString().length>4096&&(n=i),t){case"no-referrer":return"no-referrer";case"origin":return i??R_(r,!0);case"unsafe-url":return n;case"strict-origin":{let s=Jf(e);return Vf(n)&&!Vf(s)?"no-referrer":i}case"strict-origin-when-cross-origin":{let s=Jf(e);return Vd(n,s)?n:Vf(n)&&!Vf(s)?"no-referrer":i}case"same-origin":return Vd(e,n)?n:"no-referrer";case"origin-when-cross-origin":return Vd(e,n)?n:i;case"no-referrer-when-downgrade":{let s=Jf(e);return Vf(n)&&!Vf(s)?"no-referrer":n}}}function R_(e,t=!1){return Jd(dA.is.URL(e)),e=new URL(e),bH(e)?"no-referrer":(e.username="",e.password="",e.hash="",t===!0&&(e.pathname="",e.search=""),e)}var cye=RegExp.prototype.test.bind(/^127\.(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]\d|\d)\.){2}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]\d|\d)$/),lye=RegExp.prototype.test.bind(/^(?:(?:0{1,4}:){7}|(?:0{1,4}:){1,6}:|::)0{0,3}1$/);function mH(e){return e.includes(":")?(e[0]==="["&&e[e.length-1]==="]"&&(e=e.slice(1,-1)),lye(e)):cye(e)}function hye(e){return e==null||e==="null"?!1:(e=new URL(e),!!(e.protocol==="https:"||e.protocol==="wss:"||mH(e.hostname)||e.hostname==="localhost"||e.hostname==="localhost."||e.hostname.endsWith(".localhost")||e.hostname.endsWith(".localhost.")||e.protocol==="file:"))}function Vf(e){return dA.is.URL(e)?e.href==="about:blank"||e.href==="about:srcdoc"||e.protocol==="data:"||e.protocol==="blob:"?!0:hye(e.origin):!1}function dye(e){}function Vd(e,t){return e.origin===t.origin&&e.origin==="null"||e.protocol===t.protocol&&e.hostname===t.hostname&&e.port===t.port}function gye(e){return e.controller.state==="aborted"}function pye(e){return e.controller.state==="aborted"||e.controller.state==="terminated"}function Eye(e){return YEe[e.toLowerCase()]??e}var yye=Object.getPrototypeOf(Object.getPrototypeOf([][Symbol.iterator]()));function BH(e,t,r=0,n=1){var s,o,a;class i{constructor(f,l){wt(this,s);wt(this,o);wt(this,a);ft(this,s,f),ft(this,o,l),ft(this,a,0)}next(){if(typeof this!="object"||this===null||!cD(s,this))throw new TypeError(`'next' called on an object that does not implement interface ${e} Iterator.`);let f=ee(this,a),l=t(ee(this,s)),p=l.length;if(f>=p)return{value:void 0,done:!0};let{[r]:I,[n]:S}=l[f];ft(this,a,f+1);let _;switch(ee(this,o)){case"key":_=I;break;case"value":_=S;break;case"key+value":_=[I,S];break}return{value:_,done:!1}}}return s=new WeakMap,o=new WeakMap,a=new WeakMap,delete i.prototype.constructor,Object.setPrototypeOf(i.prototype,yye),Object.defineProperties(i.prototype,{[Symbol.toStringTag]:{writable:!1,enumerable:!1,configurable:!0,value:`${e} Iterator`},next:{writable:!0,enumerable:!0,configurable:!0}}),function(A,f){return new i(A,f)}}function mye(e,t,r,n=0,i=1){let s=BH(e,r,n,i),o={keys:{writable:!0,enumerable:!0,configurable:!0,value:function(){return dA.brandCheck(this,t),s(this,"key")}},values:{writable:!0,enumerable:!0,configurable:!0,value:function(){return dA.brandCheck(this,t),s(this,"value")}},entries:{writable:!0,enumerable:!0,configurable:!0,value:function(){return dA.brandCheck(this,t),s(this,"key+value")}},forEach:{writable:!0,enumerable:!0,configurable:!0,value:function(A,f=globalThis){if(dA.brandCheck(this,t),dA.argumentLengthCheck(arguments,1,`${e}.forEach`),typeof A!="function")throw new TypeError(`Failed to execute 'forEach' on '${e}': parameter 1 is not of type 'Function'.`);for(let{0:l,1:p}of s(this,"key+value"))A.call(f,p,l,this)}}};return Object.defineProperties(t.prototype,{...o,[Symbol.iterator]:{writable:!0,enumerable:!1,configurable:!0,value:o.entries.value}})}function Bye(e,t,r){let n=t,i=r;try{let s=e.stream.getReader();IH(s,n,i)}catch(s){i(s)}}function Iye(e){try{e.close(),e.byobRequest?.respond(0)}catch(t){if(!t.message.includes("Controller is already closed")&&!t.message.includes("ReadableStream is already closed"))throw t}}async function IH(e,t,r){try{let n=[],i=0;do{let{done:s,value:o}=await e.read();if(s){t(Buffer.concat(n,i));return}if(!WEe(o)){r(new TypeError("Received non-Uint8Array chunk"));return}n.push(o),i+=o.length}while(!0)}catch(n){r(n)}}function bH(e){Jd("protocol"in e);let t=e.protocol;return t==="about:"||t==="blob:"||t==="data:"}function D_(e){return typeof e=="string"&&e[5]===":"&&e[0]==="h"&&e[1]==="t"&&e[2]==="t"&&e[3]==="p"&&e[4]==="s"||e.protocol==="https:"}function CH(e){Jd("protocol"in e);let t=e.protocol;return t==="http:"||t==="https:"}function bye(e,t){let r=e;if(!r.startsWith("bytes"))return"failure";let n={position:5};if(t&&Wf(A=>A==="	"||A===" ",r,n),r.charCodeAt(n.position)!==61)return"failure";n.position++,t&&Wf(A=>A==="	"||A===" ",r,n);let i=Wf(A=>{let f=A.charCodeAt(0);return f>=48&&f<=57},r,n),s=i.length?Number(i):null;if(t&&Wf(A=>A==="	"||A===" ",r,n),r.charCodeAt(n.position)!==45)return"failure";n.position++,t&&Wf(A=>A==="	"||A===" ",r,n);let o=Wf(A=>{let f=A.charCodeAt(0);return f>=48&&f<=57},r,n),a=o.length?Number(o):null;return n.position<r.length||a===null&&s===null||s>a?"failure":{rangeStartValue:s,rangeEndValue:a}}function Cye(e,t,r){let n="bytes ";return n+=v_(`${e}`),n+="-",n+=v_(`${t}`),n+="/",n+=v_(`${r}`),n}var il,T_=class extends UEe{constructor(r){super();wt(this,il);ft(this,il,r)}_transform(r,n,i){if(!this._inflateStream){if(r.length===0){i();return}this._inflateStream=(r[0]&15)===8?lH.createInflate(ee(this,il)):lH.createInflateRaw(ee(this,il)),this._inflateStream.on("data",this.push.bind(this)),this._inflateStream.on("end",()=>this.push(null)),this._inflateStream.on("error",s=>this.destroy(s))}this._inflateStream.write(r,n,i)}_final(r){this._inflateStream&&(this._inflateStream.end(),this._inflateStream=null),r()}};il=new WeakMap;function Qye(e){return new T_(e)}function wye(e){let t=null,r=null,n=null,i=QH("content-type",e);if(i===null)return"failure";for(let s of i){let o=HEe(s);o==="failure"||o.essence==="*/*"||(n=o,n.essence!==r?(t=null,n.parameters.has("charset")&&(t=n.parameters.get("charset")),r=n.essence):!n.parameters.has("charset")&&t!==null&&n.parameters.set("charset",t))}return n??"failure"}function Sye(e){let t=e,r={position:0},n=[],i="";for(;r.position<t.length;){if(i+=Wf(s=>s!=='"'&&s!==",",t,r),r.position<t.length)if(t.charCodeAt(r.position)===34){if(i+=OEe(t,r),r.position<t.length)continue}else Jd(t.charCodeAt(r.position)===44),r.position++;i=VEe(i,!0,!0,s=>s===9||s===32),n.push(i),i=""}return n}function QH(e,t){let r=t.get(e,!0);return r===null?null:Sye(r)}function _ye(e){return!1}function vye(e){return!!(e.username||e.password)}function Rye(e){return!0}var N_=class{constructor(){y(this,"policyContainer",yH())}get baseUrl(){return hH()}get origin(){return this.baseUrl?.origin}},M_=class{constructor(){y(this,"settingsObject",new N_)}},Dye=new M_;wH.exports={isAborted:gye,isCancelled:pye,isValidEncodedURL:pH,ReadableStreamFrom:GEe,tryUpgradeRequestToAPotentiallyTrustworthyURL:dye,clampAndCoarsenConnectionTimingInfo:oye,coarsenedSharedCurrentTime:aye,determineRequestsReferrer:uye,makePolicyContainer:yH,clonePolicyContainer:fye,appendFetchMetadata:iye,appendRequestOriginHeader:sye,TAOCheck:nye,corsCheck:rye,crossOriginResourcePolicyCheck:tye,createOpaqueTimingInfo:Aye,setRequestReferrerPolicyOnRedirect:eye,isValidHTTPToken:dH,requestBadPort:zEe,requestCurrentURL:Jf,responseURL:gH,responseLocationURL:JEe,isURLPotentiallyTrustworthy:Vf,isValidReasonPhrase:XEe,sameOrigin:Vd,normalizeMethod:Eye,iteratorMixin:mye,createIterator:BH,isValidHeaderName:ZEe,isValidHeaderValue:EH,isErrorLike:KEe,fullyReadBody:Bye,readableStreamClose:Iye,urlIsLocal:bH,urlHasHttpsScheme:D_,urlIsHttpHttpsScheme:CH,readAllBytes:IH,simpleRangeHeaderValue:bye,buildContentRange:Cye,createInflate:Qye,extractMimeType:wye,getDecodeSplit:QH,environmentSettingsObject:Dye,isOriginIPPotentiallyTrustworthy:mH,hasAuthenticationEntry:_ye,includesCredentials:vye,isTraversableNavigable:Rye}});var k_=U((EFe,_H)=>{"use strict";var{iteratorMixin:Tye}=jf(),{kEnumerableProperty:sl}=Zt(),{webidl:_t}=lo(),SH=Yr(),Pr,gA=class gA{constructor(t=void 0){wt(this,Pr,[]);if(_t.util.markAsUncloneable(this),t!==void 0)throw _t.errors.conversionFailed({prefix:"FormData constructor",argument:"Argument 1",types:["undefined"]})}append(t,r,n=void 0){_t.brandCheck(this,gA);let i="FormData.append";_t.argumentLengthCheck(arguments,2,i),t=_t.converters.USVString(t),arguments.length===3||_t.is.Blob(r)?(r=_t.converters.Blob(r,i,"value"),n!==void 0&&(n=_t.converters.USVString(n))):r=_t.converters.USVString(r);let s=F_(t,r,n);ee(this,Pr).push(s)}delete(t){_t.brandCheck(this,gA),_t.argumentLengthCheck(arguments,1,"FormData.delete"),t=_t.converters.USVString(t),ft(this,Pr,ee(this,Pr).filter(n=>n.name!==t))}get(t){_t.brandCheck(this,gA),_t.argumentLengthCheck(arguments,1,"FormData.get"),t=_t.converters.USVString(t);let n=ee(this,Pr).findIndex(i=>i.name===t);return n===-1?null:ee(this,Pr)[n].value}getAll(t){return _t.brandCheck(this,gA),_t.argumentLengthCheck(arguments,1,"FormData.getAll"),t=_t.converters.USVString(t),ee(this,Pr).filter(n=>n.name===t).map(n=>n.value)}has(t){return _t.brandCheck(this,gA),_t.argumentLengthCheck(arguments,1,"FormData.has"),t=_t.converters.USVString(t),ee(this,Pr).findIndex(n=>n.name===t)!==-1}set(t,r,n=void 0){_t.brandCheck(this,gA);let i="FormData.set";_t.argumentLengthCheck(arguments,2,i),t=_t.converters.USVString(t),arguments.length===3||_t.is.Blob(r)?(r=_t.converters.Blob(r,i,"value"),n!==void 0&&(n=_t.converters.USVString(n))):r=_t.converters.USVString(r);let s=F_(t,r,n),o=ee(this,Pr).findIndex(a=>a.name===t);o!==-1?ft(this,Pr,[...ee(this,Pr).slice(0,o),s,...ee(this,Pr).slice(o+1).filter(a=>a.name!==t)]):ee(this,Pr).push(s)}[SH.inspect.custom](t,r){let n=ee(this,Pr).reduce((s,o)=>(s[o.name]?Array.isArray(s[o.name])?s[o.name].push(o.value):s[o.name]=[s[o.name],o.value]:s[o.name]=o.value,s),{__proto__:null});r.depth??(r.depth=t),r.colors??(r.colors=!0);let i=SH.formatWithOptions(r,n);return`FormData ${i.slice(i.indexOf("]")+2)}`}static getFormDataState(t){return ee(t,Pr)}static setFormDataState(t,r){ft(t,Pr,r)}};Pr=new WeakMap;var ca=gA,{getFormDataState:Nye,setFormDataState:Mye}=ca;Reflect.deleteProperty(ca,"getFormDataState");Reflect.deleteProperty(ca,"setFormDataState");Tye("FormData",ca,Nye,"name","value");Object.defineProperties(ca.prototype,{append:sl,delete:sl,get:sl,getAll:sl,has:sl,set:sl,[Symbol.toStringTag]:{value:"FormData",configurable:!0}});function F_(e,t,r){if(typeof t!="string"){if(_t.is.File(t)||(t=new File([t],"blob",{type:t.type})),r!==void 0){let n={type:t.type,lastModified:t.lastModified};t=new File([t],r,n)}}return{name:e,value:t}}_t.is.FormData=_t.util.MakeTypeAssertion(ca);_H.exports={FormData:ca,makeEntry:F_,setFormDataState:Mye}});var DH=U((mFe,RH)=>{"use strict";var{bufferToLowerCasedHeaderName:Fye}=Zt(),{HTTP_TOKEN_CODEPOINTS:kye}=yf(),{makeEntry:Uye}=k_(),{webidl:U_}=lo(),x_=Gt(),{isomorphicDecode:vH}=Ef(),xye=Buffer.from("--"),L_=new TextDecoder,Lye=new TextDecoder("utf-8",{ignoreBOM:!0});function Pye(e){for(let t=0;t<e.length;++t)if((e.charCodeAt(t)&-128)!==0)return!1;return!0}function Oye(e){let t=e.length;if(t<27||t>70)return!1;for(let r=0;r<t;++r){let n=e.charCodeAt(r);if(!(n>=48&&n<=57||n>=65&&n<=90||n>=97&&n<=122||n===39||n===45||n===95))return!1}return!0}function Hye(e,t){x_(t!=="failure"&&t.essence==="multipart/form-data");let r=t.parameters.get("boundary");if(r===void 0)throw Un("missing boundary in content-type header");let n=Buffer.from(`--${r}`,"utf8"),i=[],s={position:0},o=e.indexOf(n);if(o===-1)throw Un("no boundary found in multipart body");for(s.position=o;;){if(e.subarray(s.position,s.position+n.length).equals(n))s.position+=n.length;else throw Un("expected a value starting with -- and the boundary");if(Yye(e,xye,s))return i;if(e[s.position]!==13||e[s.position+1]!==10)throw Un("expected CRLF");s.position+=2;let a=Gye(e,s),{name:A,filename:f,contentType:l,encoding:p}=a;s.position+=2;let I;{let _=e.indexOf(n.subarray(2),s.position);if(_===-1)throw Un("expected boundary after body");I=e.subarray(s.position,_-4),s.position+=I.length,p==="base64"&&(I=Buffer.from(I.toString(),"base64"))}if(e[s.position]!==13||e[s.position+1]!==10)throw Un("expected CRLF");s.position+=2;let S;f!==null?(l??(l="text/plain"),Pye(l)||(l=""),S=new File([I],f,{type:l})):S=Lye.decode(Buffer.from(I)),x_(U_.is.USVString(A)),x_(typeof S=="string"&&U_.is.USVString(S)||U_.is.File(S)),i.push(Uye(A,S,f))}}function qye(e,t){e[t.position]===59&&t.position++,Di(o=>o===32||o===9,e,t);let r=Di(o=>O_(o)&&o!==61&&o!==42,e,t);if(r.length===0)return null;let n=r.toString("ascii").toLowerCase(),i=e[t.position]===42;if(i&&t.position++,e[t.position]!==61)return null;t.position++,Di(o=>o===32||o===9,e,t);let s;if(i){let o=Di(a=>a!==32&&a!==13&&a!==10&&a!==59,e,t);if(o[0]!==117&&o[0]!==85||o[1]!==116&&o[1]!==84||o[2]!==102&&o[2]!==70||o[3]!==45||o[4]!==56)throw Un("unknown encoding, expected utf-8''");s=decodeURIComponent(L_.decode(o.subarray(7)))}else if(e[t.position]===34){t.position++;let o=Di(a=>a!==10&&a!==13&&a!==34,e,t);if(e[t.position]!==34)throw Un("Closing quote not found");t.position++,s=L_.decode(o).replace(/%0A/ig,`
-`).replace(/%0D/ig,"\r").replace(/%22/g,'"')}else{let o=Di(a=>O_(a)&&a!==59,e,t);s=L_.decode(o)}return{name:n,value:s}}function Gye(e,t){let r=null,n=null,i=null,s=null;for(;;){if(e[t.position]===13&&e[t.position+1]===10){if(r===null)throw Un("header name is null");return{name:r,filename:n,contentType:i,encoding:s}}let o=Di(a=>a!==10&&a!==13&&a!==58,e,t);if(o=P_(o,!0,!0,a=>a===9||a===32),!kye.test(o.toString()))throw Un("header name does not match the field-name token production");if(e[t.position]!==58)throw Un("expected :");switch(t.position++,Di(a=>a===32||a===9,e,t),Fye(o)){case"content-disposition":{if(r=n=null,Di(A=>O_(A),e,t).toString("ascii").toLowerCase()!=="form-data")throw Un("expected form-data for content-disposition header");for(;t.position<e.length&&e[t.position]!==13&&e[t.position+1]!==10;){let A=qye(e,t);if(!A)break;A.name==="name"?r=A.value:A.name==="filename"&&(n=A.value)}if(r===null)throw Un("name attribute is required in content-disposition header");break}case"content-type":{let a=Di(A=>A!==10&&A!==13,e,t);a=P_(a,!1,!0,A=>A===9||A===32),i=vH(a);break}case"content-transfer-encoding":{let a=Di(A=>A!==10&&A!==13,e,t);a=P_(a,!1,!0,A=>A===9||A===32),s=vH(a);break}default:Di(a=>a!==10&&a!==13,e,t)}if(e[t.position]!==13&&e[t.position+1]!==10)throw Un("expected CRLF");t.position+=2}}function Di(e,t,r){let n=r.position;for(;n<t.length&&e(t[n]);)++n;return t.subarray(r.position,r.position=n)}function P_(e,t,r,n){let i=0,s=e.length-1;if(t)for(;i<e.length&&n(e[i]);)i++;if(r)for(;s>0&&n(e[s]);)s--;return i===0&&s===e.length-1?e:e.subarray(i,s+1)}function Yye(e,t,r){if(e.length<t.length)return!1;for(let n=0;n<t.length;n++)if(t[n]!==e[r.position+n])return!1;return!0}function Un(e){return new TypeError("Failed to parse body as FormData.",{cause:new TypeError(e)})}function Wye(e){return e<=31||e===127}function Vye(e){return e===40||e===41||e===60||e===62||e===64||e===44||e===59||e===58||e===92||e===34||e===47||e===91||e===93||e===63||e===61}function O_(e){return e<=127&&e!==32&&e!==9&&!Wye(e)&&!Vye(e)}RH.exports={multipartFormDataParser:Hye,validateBoundary:Oye}});var H_=U((BFe,TH)=>{"use strict";function Jye(){let e,t;return{promise:new Promise((n,i)=>{e=n,t=i}),resolve:e,reject:t}}TH.exports={createDeferredPromise:Jye}});var G_=U((IFe,FH)=>{"use strict";var NH=new Set(["crypto","sqlite","markAsUncloneable","zstd"]),ol,q_=class{constructor(){wt(this,ol,new Map([["crypto",!0],["sqlite",!1],["markAsUncloneable",!1],["zstd",!1]]))}clear(){ee(this,ol).clear()}has(t){if(!NH.has(t))throw new TypeError(`unknown feature: ${t}`);return ee(this,ol).get(t)??!1}set(t,r){if(!NH.has(t))throw new TypeError(`unknown feature: ${t}`);ee(this,ol).set(t,!!r)}};ol=new WeakMap;var MH=new q_;FH.exports={runtimeFeatures:MH,default:MH}});var Al=U((CFe,PH)=>{"use strict";var V_=Zt(),{ReadableStreamFrom:jye,readableStreamClose:zye,fullyReadBody:Kye,extractMimeType:Xye}=jf(),{FormData:kH,setFormDataState:Zye}=k_(),{webidl:ms}=lo(),Y_=Gt(),{isErrored:W_,isDisturbed:$ye}=(ts(),Os(qt)),{isUint8Array:eme}=dw(),{serializeAMimeType:tme}=yf(),{multipartFormDataParser:rme}=DH(),{createDeferredPromise:nme}=H_(),{parseJSONFromBytes:ime}=Ef(),{utf8DecodeBytes:sme}=cw(),{runtimeFeatures:ome}=G_(),ame=ome.has("crypto")?Nd().randomInt:e=>Math.floor(Math.random()*e),$y=new TextEncoder;function Ame(){}var fme=new FinalizationRegistry(e=>{let t=e.deref();t&&!t.locked&&!$ye(t)&&!W_(t)&&t.cancel("Response object has been garbage collected").catch(Ame)});function xH(e,t=!1){let r=null,n=null;ms.is.ReadableStream(e)?r=e:ms.is.Blob(e)?r=e.stream():r=new ReadableStream({pull(){},start(f){n=f},cancel(){},type:"bytes"}),Y_(ms.is.ReadableStream(r));let i=null,s=null,o=null,a=null;if(typeof e=="string")s=e,a="text/plain;charset=UTF-8";else if(ms.is.URLSearchParams(e))s=e.toString(),a="application/x-www-form-urlencoded;charset=UTF-8";else if(ms.is.BufferSource(e))s=ms.util.getCopyOfBytesHeldByBufferSource(e);else if(ms.is.FormData(e)){let f=`----formdata-undici-0${`${ame(1e11)}`.padStart(11,"0")}`,l=`--${f}\r
-Content-Disposition: form-data`;let p=x=>x.replace(/\n/g,"%0A").replace(/\r/g,"%0D").replace(/"/g,"%22"),I=x=>x.replace(/\r?\n|\r/g,`\r
-`),S=[],_=new Uint8Array([13,10]);o=0;let N=!1;for(let[x,G]of e)if(typeof G=="string"){let Y=$y.encode(l+`; name="${p(I(x))}"\r
-\r
-${I(G)}\r
-`);S.push(Y),o+=Y.byteLength}else{let Y=$y.encode(`${l}; name="${p(I(x))}"`+(G.name?`; filename="${p(G.name)}"`:"")+`\r
-Content-Type: ${G.type||"application/octet-stream"}\r
-\r
-`);S.push(Y,G,_),typeof G.size=="number"?o+=Y.byteLength+G.size+_.byteLength:N=!0}let O=$y.encode(`--${f}--\r
-`);S.push(O),o+=O.byteLength,N&&(o=null),s=e,i=async function*(){for(let x of S)x.stream?yield*x.stream():yield x},a=`multipart/form-data; boundary=${f}`}else if(ms.is.Blob(e))s=e,o=e.size,e.type&&(a=e.type);else if(typeof e[Symbol.asyncIterator]=="function"){if(t)throw new TypeError("keepalive");if(V_.isDisturbed(e)||e.locked)throw new TypeError("Response body object should not be disturbed or locked");r=ms.is.ReadableStream(e)?e:jye(e)}return(typeof s=="string"||eme(s))&&(i=()=>(o=typeof s=="string"?Buffer.byteLength(s):s.length,s)),i!=null&&(async()=>{let f=i(),l=f?.[Symbol.asyncIterator]?.();if(l)for await(let p of l){if(W_(r))break;p.length&&n.enqueue(new Uint8Array(p))}else f?.length&&!W_(r)&&n.enqueue(typeof f=="string"?$y.encode(f):new Uint8Array(f));queueMicrotask(()=>zye(n))})(),[{stream:r,source:s,length:o},a]}function ume(e,t=!1){return ms.is.ReadableStream(e)&&(Y_(!V_.isDisturbed(e),"The body has already been consumed."),Y_(!e.locked,"The stream is locked.")),xH(e,t)}function cme(e){let{0:t,1:r}=e.stream.tee();return e.stream=t,{stream:r,length:e.length,source:e.source}}function lme(e,t){return{blob(){return al(this,n=>{let i=UH(t(this));return i===null?i="":i&&(i=tme(i)),new Blob([n],{type:i})},e,t)},arrayBuffer(){return al(this,n=>new Uint8Array(n).buffer,e,t)},text(){return al(this,sme,e,t)},json(){return al(this,ime,e,t)},formData(){return al(this,n=>{let i=UH(t(this));if(i!==null)switch(i.essence){case"multipart/form-data":{let s=rme(n,i),o=new kH;return Zye(o,s),o}case"application/x-www-form-urlencoded":{let s=new URLSearchParams(n.toString()),o=new kH;for(let[a,A]of s)o.append(a,A);return o}}throw new TypeError('Content-Type was not one of "multipart/form-data" or "application/x-www-form-urlencoded".')},e,t)},bytes(){return al(this,n=>new Uint8Array(n),e,t)}}}function hme(e,t){Object.assign(e.prototype,lme(e,t))}function al(e,t,r,n){try{ms.brandCheck(e,r)}catch(a){return Promise.reject(a)}if(e=n(e),LH(e))return Promise.reject(new TypeError("Body is unusable: Body has already been read"));let i=nme(),s=i.reject,o=a=>{try{i.resolve(t(a))}catch(A){s(A)}};return e.body==null?(o(Buffer.allocUnsafe(0)),i.promise):(Kye(e.body,o,s),i.promise)}function LH(e){let t=e.body;return t!=null&&(t.stream.locked||V_.isDisturbed(t.stream))}function UH(e){let t=e.headersList,r=Xye(t);return r==="failure"?null:r}PH.exports={extractBody:xH,safelyExtractBody:ume,cloneBody:cme,mixinBody:hme,streamRegistry:fme,bodyUnusable:LH}});var KH=U((QFe,zH)=>{"use strict";var Oe=Gt(),qe=Zt(),{channels:OH}=ed(),J_=gQ(),{RequestContentLengthMismatchError:zf,ResponseContentLengthMismatchError:dme,RequestAbortedError:VH,HeadersTimeoutError:gme,HeadersOverflowError:pme,SocketError:Kd,InformationalError:fl,BodyTimeoutError:Eme,HTTPParserError:yme,ResponseExceededMaxSizeError:mme}=mr(),{kUrl:JH,kReset:xn,kClient:ev,kParser:cr,kBlocking:Xd,kRunning:un,kPending:Bme,kSize:HH,kWriting:EA,kQueue:Bs,kNoRef:jd,kKeepAliveDefaultTimeout:Ime,kHostHeader:bme,kPendingIdx:Cme,kRunningIdx:Ti,kError:Ni,kPipelining:rm,kSocket:ul,kKeepAliveTimeoutValue:im,kMaxHeadersSize:Qme,kKeepAliveMaxTimeout:wme,kKeepAliveTimeoutThreshold:Sme,kHeadersTimeout:_me,kBodyTimeout:vme,kStrictContentLength:K_,kMaxRequests:qH,kCounter:Rme,kMaxResponseSize:Dme,kOnError:Tme,kResume:pA,kHTTPContext:jH,kClosed:X_}=Dn(),ho=t3(),Nme=Buffer.alloc(0),em=Buffer[Symbol.species],Mme=qe.removeAllListeners,j_;function Fme(){let e=process.env.JEST_WORKER_ID?Aw():void 0,t,r=process.arch!=="ppc64";if(process.env.UNDICI_NO_WASM_SIMD==="1"?r=!0:process.env.UNDICI_NO_WASM_SIMD==="0"&&(r=!1),r)try{t=new WebAssembly.Module(i3())}catch{}return t||(t=new WebAssembly.Module(e||Aw())),new WebAssembly.Instance(t,{env:{wasm_on_url:(n,i,s)=>0,wasm_on_status:(n,i,s)=>{Oe(Rr.ptr===n);let o=i-po+go.byteOffset;return Rr.onStatus(new em(go.buffer,o,s))},wasm_on_message_begin:n=>(Oe(Rr.ptr===n),Rr.onMessageBegin()),wasm_on_header_field:(n,i,s)=>{Oe(Rr.ptr===n);let o=i-po+go.byteOffset;return Rr.onHeaderField(new em(go.buffer,o,s))},wasm_on_header_value:(n,i,s)=>{Oe(Rr.ptr===n);let o=i-po+go.byteOffset;return Rr.onHeaderValue(new em(go.buffer,o,s))},wasm_on_headers_complete:(n,i,s,o)=>(Oe(Rr.ptr===n),Rr.onHeadersComplete(i,s===1,o===1)),wasm_on_body:(n,i,s)=>{Oe(Rr.ptr===n);let o=i-po+go.byteOffset;return Rr.onBody(new em(go.buffer,o,s))},wasm_on_message_complete:n=>(Oe(Rr.ptr===n),Rr.onMessageComplete())}})}var z_=null,Rr=null,go=null,tm=0,po=null,kme=0,zd=1,cl=2|zd,nm=4|zd,Z_=8|kme,$_=class{constructor(t,r,{exports:n}){this.llhttp=n,this.ptr=this.llhttp.llhttp_alloc(ho.TYPE.RESPONSE),this.client=t,this.socket=r,this.timeout=null,this.timeoutValue=null,this.timeoutType=null,this.statusCode=0,this.statusText="",this.upgrade=!1,this.headers=[],this.headersSize=0,this.headersMaxSize=t[Qme],this.shouldKeepAlive=!1,this.paused=!1,this.resume=this.resume.bind(this),this.bytesRead=0,this.keepAlive="",this.contentLength="",this.connection="",this.maxResponseSize=t[Dme]}setTimeout(t,r){t!==this.timeoutValue||r&zd^this.timeoutType&zd?(this.timeout&&(J_.clearTimeout(this.timeout),this.timeout=null),t&&(r&zd?this.timeout=J_.setFastTimeout(GH,t,new WeakRef(this)):(this.timeout=setTimeout(GH,t,new WeakRef(this)),this.timeout?.unref())),this.timeoutValue=t):this.timeout&&this.timeout.refresh&&this.timeout.refresh(),this.timeoutType=r}resume(){this.socket.destroyed||!this.paused||(Oe(this.ptr!=null),Oe(Rr===null),this.llhttp.llhttp_resume(this.ptr),Oe(this.timeoutType===nm),this.timeout&&this.timeout.refresh&&this.timeout.refresh(),this.paused=!1,this.execute(this.socket.read()||Nme),this.readMore())}readMore(){for(;!this.paused&&this.ptr;){let t=this.socket.read();if(t===null)break;this.execute(t)}}execute(t){Oe(Rr===null),Oe(this.ptr!=null),Oe(!this.paused);let{socket:r,llhttp:n}=this;t.length>tm&&(po&&n.free(po),tm=Math.ceil(t.length/4096)*4096,po=n.malloc(tm)),new Uint8Array(n.memory.buffer,po,tm).set(t);try{let i;try{go=t,Rr=this,i=n.llhttp_execute(this.ptr,po,t.length)}finally{Rr=null,go=null}if(i!==ho.ERROR.OK){let s=t.subarray(n.llhttp_get_error_pos(this.ptr)-po);if(i===ho.ERROR.PAUSED_UPGRADE)this.onUpgrade(s);else if(i===ho.ERROR.PAUSED)this.paused=!0,r.unshift(s);else{let o=n.llhttp_get_error_reason(this.ptr),a="";if(o){let A=new Uint8Array(n.memory.buffer,o).indexOf(0);a="Response does not match the HTTP/1.1 protocol ("+Buffer.from(n.memory.buffer,o,A).toString()+")"}throw new yme(a,ho.ERROR[i],s)}}}catch(i){qe.destroy(r,i)}}destroy(){Oe(Rr===null),Oe(this.ptr!=null),this.llhttp.llhttp_free(this.ptr),this.ptr=null,this.timeout&&J_.clearTimeout(this.timeout),this.timeout=null,this.timeoutValue=null,this.timeoutType=null,this.paused=!1}onStatus(t){return this.statusText=t.toString(),0}onMessageBegin(){let{socket:t,client:r}=this;if(t.destroyed)return-1;let n=r[Bs][r[Ti]];return n?(n.onResponseStarted(),0):-1}onHeaderField(t){let r=this.headers.length;return(r&1)===0?this.headers.push(t):this.headers[r-1]=Buffer.concat([this.headers[r-1],t]),this.trackHeader(t.length),0}onHeaderValue(t){let r=this.headers.length;(r&1)===1?(this.headers.push(t),r+=1):this.headers[r-1]=Buffer.concat([this.headers[r-1],t]);let n=this.headers[r-2];if(n.length===10){let i=qe.bufferToLowerCasedHeaderName(n);i==="keep-alive"?this.keepAlive+=t.toString():i==="connection"&&(this.connection+=t.toString())}else n.length===14&&qe.bufferToLowerCasedHeaderName(n)==="content-length"&&(this.contentLength+=t.toString());return this.trackHeader(t.length),0}trackHeader(t){this.headersSize+=t,this.headersSize>=this.headersMaxSize&&qe.destroy(this.socket,new pme)}onUpgrade(t){let{upgrade:r,client:n,socket:i,headers:s,statusCode:o}=this;Oe(r),Oe(n[ul]===i),Oe(!i.destroyed),Oe(!this.paused),Oe((s.length&1)===0);let a=n[Bs][n[Ti]];Oe(a),Oe(a.upgrade||a.method==="CONNECT"),this.statusCode=0,this.statusText="",this.shouldKeepAlive=!1,this.headers=[],this.headersSize=0,i.unshift(t),i[cr].destroy(),i[cr]=null,i[ev]=null,i[Ni]=null,Mme(i),n[ul]=null,n[jH]=null,n[Bs][n[Ti]++]=null,n.emit("disconnect",n[JH],[n],new fl("upgrade"));try{a.onUpgrade(o,s,i)}catch(A){qe.destroy(i,A)}n[pA]()}onHeadersComplete(t,r,n){let{client:i,socket:s,headers:o,statusText:a}=this;if(s.destroyed)return-1;let A=i[Bs][i[Ti]];if(!A)return-1;if(Oe(!this.upgrade),Oe(this.statusCode<200),t===100)return qe.destroy(s,new Kd("bad response",qe.getSocketInfo(s))),-1;if(r&&!A.upgrade)return qe.destroy(s,new Kd("bad upgrade",qe.getSocketInfo(s))),-1;if(Oe(this.timeoutType===cl),this.statusCode=t,this.shouldKeepAlive=n||A.method==="HEAD"&&!s[xn]&&this.connection.toLowerCase()==="keep-alive",this.statusCode>=200){let l=A.bodyTimeout!=null?A.bodyTimeout:i[vme];this.setTimeout(l,nm)}else this.timeout&&this.timeout.refresh&&this.timeout.refresh();if(A.method==="CONNECT")return Oe(i[un]===1),this.upgrade=!0,2;if(r)return Oe(i[un]===1),this.upgrade=!0,2;if(Oe((this.headers.length&1)===0),this.headers=[],this.headersSize=0,this.shouldKeepAlive&&i[rm]){let l=this.keepAlive?qe.parseKeepAliveTimeout(this.keepAlive):null;if(l!=null){let p=Math.min(l-i[Sme],i[wme]);p<=0?s[xn]=!0:i[im]=p}else i[im]=i[Ime]}else s[xn]=!0;let f=A.onHeaders(t,o,this.resume,a)===!1;return A.aborted?-1:A.method==="HEAD"||t<200?1:(s[Xd]&&(s[Xd]=!1,i[pA]()),f?ho.ERROR.PAUSED:0)}onBody(t){let{client:r,socket:n,statusCode:i,maxResponseSize:s}=this;if(n.destroyed)return-1;let o=r[Bs][r[Ti]];return Oe(o),Oe(this.timeoutType===nm),this.timeout&&this.timeout.refresh&&this.timeout.refresh(),Oe(i>=200),s>-1&&this.bytesRead+t.length>s?(qe.destroy(n,new mme),-1):(this.bytesRead+=t.length,o.onData(t)===!1?ho.ERROR.PAUSED:0)}onMessageComplete(){let{client:t,socket:r,statusCode:n,upgrade:i,headers:s,contentLength:o,bytesRead:a,shouldKeepAlive:A}=this;if(r.destroyed&&(!n||A))return-1;if(i)return 0;Oe(n>=100),Oe((this.headers.length&1)===0);let f=t[Bs][t[Ti]];if(Oe(f),this.statusCode=0,this.statusText="",this.bytesRead=0,this.contentLength="",this.keepAlive="",this.connection="",this.headers=[],this.headersSize=0,n<200)return 0;if(f.method!=="HEAD"&&o&&a!==parseInt(o,10))return qe.destroy(r,new dme),-1;if(f.onComplete(s),t[Bs][t[Ti]++]=null,r[EA])return Oe(t[un]===0),qe.destroy(r,new fl("reset")),ho.ERROR.PAUSED;if(A){if(r[xn]&&t[un]===0)return qe.destroy(r,new fl("reset")),ho.ERROR.PAUSED;t[rm]==null||t[rm]===1?setImmediate(t[pA]):t[pA]()}else return qe.destroy(r,new fl("reset")),ho.ERROR.PAUSED;return 0}};function GH(e){let t=e.deref();if(!t)return;let{socket:r,timeoutType:n,client:i,paused:s}=t;n===cl?(!r[EA]||r.writableNeedDrain||i[un]>1)&&(Oe(!s,"cannot be paused while waiting for headers"),qe.destroy(r,new gme)):n===nm?s||qe.destroy(r,new Eme):n===Z_&&(Oe(i[un]===0&&i[im]),qe.destroy(r,new fl("socket idle timeout")))}function Ume(e,t){if(e[ul]=t,z_||(z_=Fme()),t.errored)throw t.errored;if(t.destroyed)throw new Kd("destroyed");return t[jd]=!1,t[EA]=!1,t[xn]=!1,t[Xd]=!1,t[cr]=new $_(e,t,z_),qe.addListener(t,"error",xme),qe.addListener(t,"readable",Lme),qe.addListener(t,"end",Pme),qe.addListener(t,"close",Ome),t[X_]=!1,t.on("close",Hme),{version:"h1",defaultPipelining:1,write(r){return Yme(e,r)},resume(){qme(e)},destroy(r,n){t[X_]?queueMicrotask(n):(t.on("close",n),t.destroy(r))},get destroyed(){return t.destroyed},busy(r){return!!(t[EA]||t[xn]||t[Xd]||r&&(e[un]>0&&!r.idempotent||e[un]>0&&(r.upgrade||r.method==="CONNECT")||e[un]>0&&qe.bodyLength(r.body)!==0&&(qe.isStream(r.body)||qe.isAsyncIterable(r.body)||qe.isFormDataLike(r.body))))}}}function xme(e){Oe(e.code!=="ERR_TLS_CERT_ALTNAME_INVALID");let t=this[cr];if(e.code==="ECONNRESET"&&t.statusCode&&!t.shouldKeepAlive){t.onMessageComplete();return}this[Ni]=e,this[ev][Tme](e)}function Lme(){this[cr]?.readMore()}function Pme(){let e=this[cr];if(e.statusCode&&!e.shouldKeepAlive){e.onMessageComplete();return}qe.destroy(this,new Kd("other side closed",qe.getSocketInfo(this)))}function Ome(){let e=this[cr];e&&(!this[Ni]&&e.statusCode&&!e.shouldKeepAlive&&e.onMessageComplete(),this[cr].destroy(),this[cr]=null);let t=this[Ni]||new Kd("closed",qe.getSocketInfo(this)),r=this[ev];if(r[ul]=null,r[jH]=null,r.destroyed){Oe(r[Bme]===0);let n=r[Bs].splice(r[Ti]);for(let i=0;i<n.length;i++){let s=n[i];qe.errorRequest(r,s,t)}}else if(r[un]>0&&t.code!=="UND_ERR_INFO"){let n=r[Bs][r[Ti]];r[Bs][r[Ti]++]=null,qe.errorRequest(r,n,t)}r[Cme]=r[Ti],Oe(r[un]===0),r.emit("disconnect",r[JH],[r],t),r[pA]()}function Hme(){this[X_]=!0}function qme(e){let t=e[ul];if(t&&!t.destroyed){if(e[HH]===0?!t[jd]&&t.unref&&(t.unref(),t[jd]=!0):t[jd]&&t.ref&&(t.ref(),t[jd]=!1),e[HH]===0)t[cr].timeoutType!==Z_&&t[cr].setTimeout(e[im],Z_);else if(e[un]>0&&t[cr].statusCode<200&&t[cr].timeoutType!==cl){let r=e[Bs][e[Ti]],n=r.headersTimeout!=null?r.headersTimeout:e[_me];t[cr].setTimeout(n,cl)}}}function Gme(e){return e!=="GET"&&e!=="HEAD"&&e!=="OPTIONS"&&e!=="TRACE"&&e!=="CONNECT"}function Yme(e,t){let{method:r,path:n,host:i,upgrade:s,blocking:o,reset:a}=t,{body:A,headers:f,contentLength:l}=t,p=r==="PUT"||r==="POST"||r==="PATCH"||r==="QUERY"||r==="PROPFIND"||r==="PROPPATCH";if(qe.isFormDataLike(A)){j_||(j_=Al().extractBody);let[O,x]=j_(A);t.contentType==null&&f.push("content-type",x),A=O.stream,l=O.length}else qe.isBlobLike(A)&&t.contentType==null&&A.type&&f.push("content-type",A.type);A&&typeof A.read=="function"&&A.read(0);let I=qe.bodyLength(A);if(l=I??l,l===null&&(l=t.contentLength),l===0&&!p&&(l=null),Gme(r)&&l>0&&t.contentLength!==null&&t.contentLength!==l){if(e[K_])return qe.errorRequest(e,t,new zf),!1;process.emitWarning(new zf)}let S=e[ul],_=O=>{t.aborted||t.completed||(qe.errorRequest(e,t,O||new VH),qe.destroy(A),qe.destroy(S,new fl("aborted")))};try{t.onConnect(_)}catch(O){qe.errorRequest(e,t,O)}if(t.aborted)return!1;r==="HEAD"&&(S[xn]=!0),(s||r==="CONNECT")&&(S[xn]=!0),a!=null&&(S[xn]=a),e[qH]&&S[Rme]++>=e[qH]&&(S[xn]=!0),o&&(S[Xd]=!0),S.setTypeOfService&&S.setTypeOfService(t.typeOfService);let N=`${r} ${n} HTTP/1.1\r
-`;if(typeof i=="string"?N+=`host: ${i}\r
-`:N+=e[bme],s?N+=`connection: upgrade\r
-upgrade: ${s}\r
-`:e[rm]&&!S[xn]?N+=`connection: keep-alive\r
-`:N+=`connection: close\r
-`,Array.isArray(f))for(let O=0;O<f.length;O+=2){let x=f[O+0],G=f[O+1];if(Array.isArray(G))for(let Y=0;Y<G.length;Y++)N+=`${x}: ${G[Y]}\r
-`;else N+=`${x}: ${G}\r
-`}return OH.sendHeaders.hasSubscribers&&OH.sendHeaders.publish({request:t,headers:N,socket:S}),!A||I===0?YH(_,null,e,t,S,l,N,p):qe.isBuffer(A)?YH(_,A,e,t,S,l,N,p):qe.isBlobLike(A)?typeof A.stream=="function"?WH(_,A.stream(),e,t,S,l,N,p):Vme(_,A,e,t,S,l,N,p):qe.isStream(A)?Wme(_,A,e,t,S,l,N,p):qe.isIterable(A)?WH(_,A,e,t,S,l,N,p):Oe(!1),!0}function Wme(e,t,r,n,i,s,o,a){Oe(s!==0||r[un]===0,"stream body cannot be pipelined");let A=!1,f=new sm({abort:e,socket:i,request:n,contentLength:s,client:r,expectsPayload:a,header:o}),l=function(_){if(!A)try{!f.write(_)&&this.pause&&this.pause()}catch(N){qe.destroy(this,N)}},p=function(){A||t.resume&&t.resume()},I=function(){if(queueMicrotask(()=>{t.removeListener("error",S)}),!A){let _=new VH;queueMicrotask(()=>S(_))}},S=function(_){if(!A){if(A=!0,Oe(i.destroyed||i[EA]&&r[un]<=1),i.off("drain",p).off("error",S),t.removeListener("data",l).removeListener("end",S).removeListener("close",I),!_)try{f.end()}catch(N){_=N}f.destroy(_),_&&(_.code!=="UND_ERR_INFO"||_.message!=="reset")?qe.destroy(t,_):qe.destroy(t)}};t.on("data",l).on("end",S).on("error",S).on("close",I),t.resume&&t.resume(),i.on("drain",p).on("error",S),t.errorEmitted??t.errored?setImmediate(S,t.errored):(t.endEmitted??t.readableEnded)&&setImmediate(S,null),(t.closeEmitted??t.closed)&&setImmediate(I)}function YH(e,t,r,n,i,s,o,a){try{t?qe.isBuffer(t)&&(Oe(s===t.byteLength,"buffer body must have content length"),i.cork(),i.write(`${o}content-length: ${s}\r
-\r
-`,"latin1"),i.write(t),i.uncork(),n.onBodySent(t),!a&&n.reset!==!1&&(i[xn]=!0)):s===0?i.write(`${o}content-length: 0\r
-\r
-`,"latin1"):(Oe(s===null,"no body must not have content length"),i.write(`${o}\r
-`,"latin1")),n.onRequestSent(),r[pA]()}catch(A){e(A)}}async function Vme(e,t,r,n,i,s,o,a){Oe(s===t.size,"blob body must have content length");try{if(s!=null&&s!==t.size)throw new zf;let A=Buffer.from(await t.arrayBuffer());i.cork(),i.write(`${o}content-length: ${s}\r
-\r
-`,"latin1"),i.write(A),i.uncork(),n.onBodySent(A),n.onRequestSent(),!a&&n.reset!==!1&&(i[xn]=!0),r[pA]()}catch(A){e(A)}}async function WH(e,t,r,n,i,s,o,a){Oe(s!==0||r[un]===0,"iterator body cannot be pipelined");let A=null;function f(){if(A){let I=A;A=null,I()}}let l=()=>new Promise((I,S)=>{Oe(A===null),i[Ni]?S(i[Ni]):A=I});i.on("close",f).on("drain",f);let p=new sm({abort:e,socket:i,request:n,contentLength:s,client:r,expectsPayload:a,header:o});try{for await(let I of t){if(i[Ni])throw i[Ni];p.write(I)||await l()}p.end()}catch(I){p.destroy(I)}finally{i.off("close",f).off("drain",f)}}var sm=class{constructor({abort:t,socket:r,request:n,contentLength:i,client:s,expectsPayload:o,header:a}){this.socket=r,this.request=n,this.contentLength=i,this.client=s,this.bytesWritten=0,this.expectsPayload=o,this.header=a,this.abort=t,r[EA]=!0}write(t){let{socket:r,request:n,contentLength:i,client:s,bytesWritten:o,expectsPayload:a,header:A}=this;if(r[Ni])throw r[Ni];if(r.destroyed)return!1;let f=Buffer.byteLength(t);if(!f)return!0;if(i!==null&&o+f>i){if(s[K_])throw new zf;process.emitWarning(new zf)}r.cork(),o===0&&(!a&&n.reset!==!1&&(r[xn]=!0),i===null?r.write(`${A}transfer-encoding: chunked\r
-`,"latin1"):r.write(`${A}content-length: ${i}\r
-\r
-`,"latin1")),i===null&&r.write(`\r
-${f.toString(16)}\r
-`,"latin1"),this.bytesWritten+=f;let l=r.write(t);return r.uncork(),n.onBodySent(t),l||r[cr].timeout&&r[cr].timeoutType===cl&&r[cr].timeout.refresh&&r[cr].timeout.refresh(),l}end(){let{socket:t,contentLength:r,client:n,bytesWritten:i,expectsPayload:s,header:o,request:a}=this;if(a.onRequestSent(),t[EA]=!1,t[Ni])throw t[Ni];if(!t.destroyed){if(i===0?s?t.write(`${o}content-length: 0\r
-\r
-`,"latin1"):t.write(`${o}\r
-`,"latin1"):r===null&&t.write(`\r
-0\r
-\r
-`,"latin1"),r!==null&&i!==r){if(n[K_])throw new zf;process.emitWarning(new zf)}t[cr].timeout&&t[cr].timeoutType===cl&&t[cr].timeout.refresh&&t[cr].timeout.refresh(),n[pA]()}}destroy(t){let{socket:r,client:n,abort:i}=this;r[EA]=!1,t&&(Oe(n[un]<=1,"pipeline should only contain this request"),i(t))}};zH.exports=Ume});var $H=U((wFe,ZH)=>{"use strict";var XH={HTTP2_HEADER_METHOD:":method",HTTP2_HEADER_PATH:":path",HTTP2_HEADER_SCHEME:":scheme",HTTP2_HEADER_AUTHORITY:":authority",HTTP2_HEADER_STATUS:":status",HTTP2_HEADER_CONTENT_TYPE:"content-type",HTTP2_HEADER_CONTENT_LENGTH:"content-length",HTTP2_HEADER_LAST_MODIFIED:"last-modified",HTTP2_HEADER_ACCEPT:"accept",HTTP2_HEADER_ACCEPT_ENCODING:"accept-encoding",HTTP2_METHOD_GET:"GET",HTTP2_METHOD_POST:"POST",HTTP2_METHOD_PUT:"PUT",HTTP2_METHOD_DELETE:"DELETE",DEFAULT_SETTINGS_MAX_HEADER_LIST_SIZE:65535};function tv(e){let t=new Error(`node:http2 ${e} is not available in the secure-exec bridge bootstrap`);throw t.code="ERR_NOT_IMPLEMENTED",t}function Jme(){tv("connect")}function jme(){tv("createServer")}function zme(){tv("createSecureServer")}function Kme(){return{maxHeaderListSize:XH.DEFAULT_SETTINGS_MAX_HEADER_LIST_SIZE}}ZH.exports={constants:XH,connect:Jme,createServer:jme,createSecureServer:zme,getDefaultSettings:Kme}});var A7=U((SFe,a7)=>{"use strict";var Fi=Gt(),{pipeline:Xme}=(ts(),Os(qt)),ct=Zt(),{RequestContentLengthMismatchError:sv,RequestAbortedError:Zme,SocketError:tg,InformationalError:yA,InvalidArgumentError:$me}=mr(),{kUrl:eg,kReset:fm,kClient:ei,kRunning:rg,kPending:eBe,kQueue:mA,kPendingIdx:av,kRunningIdx:Is,kError:ti,kSocket:or,kStrictContentLength:tBe,kOnError:ll,kMaxConcurrentStreams:am,kPingInterval:e7,kHTTP2Session:la,kHTTP2InitialWindowSize:rBe,kHTTP2ConnectionWindowSize:nBe,kResume:Eo,kSize:iBe,kHTTPContext:Av,kClosed:ov,kBodyTimeout:sBe,kEnableConnectProtocol:Zd,kRemoteSettings:$d,kHTTP2Stream:om,kHTTP2SessionState:fv}=Dn(),{channels:t7}=ed(),Mi=Symbol("open streams"),r7,Am;try{Am=$H()}catch{Am={constants:{}}}var{constants:{HTTP2_HEADER_AUTHORITY:oBe,HTTP2_HEADER_METHOD:n7,HTTP2_HEADER_PATH:i7,HTTP2_HEADER_SCHEME:rv,HTTP2_HEADER_CONTENT_LENGTH:aBe,HTTP2_HEADER_EXPECT:ABe,HTTP2_HEADER_STATUS:nv,HTTP2_HEADER_PROTOCOL:fBe,NGHTTP2_REFUSED_STREAM:uBe,NGHTTP2_CANCEL:cBe}}=Am;function iv(e){let t=[];for(let[r,n]of Object.entries(e))if(Array.isArray(n))for(let i of n)t.push(Buffer.from(r),Buffer.from(i));else t.push(Buffer.from(r),Buffer.from(n));return t}function lBe(e,t){e[or]=t;let r=e[rBe],n=e[nBe],i=Am.connect(e[eg],{createConnection:()=>t,peerMaxConcurrentStreams:e[am],settings:{enablePush:!1,...r!=null?{initialWindowSize:r}:null}});return e[or]=t,i[Mi]=0,i[ei]=e,i[or]=t,i[fv]={ping:{interval:e[e7]===0?null:setInterval(pBe,e[e7],i).unref()}},i[Zd]=!1,i[$d]=!1,n&&ct.addListener(i,"connect",dBe.bind(i,n)),ct.addListener(i,"error",EBe),ct.addListener(i,"frameError",yBe),ct.addListener(i,"end",mBe),ct.addListener(i,"goaway",BBe),ct.addListener(i,"close",IBe),ct.addListener(i,"remoteSettings",gBe),i.unref(),e[la]=i,t[la]=i,ct.addListener(t,"error",CBe),ct.addListener(t,"end",QBe),ct.addListener(t,"close",bBe),t[ov]=!1,t.on("close",wBe),{version:"h2",defaultPipelining:1/0,write(s){return _Be(e,s)},resume(){hBe(e)},destroy(s,o){t[ov]?queueMicrotask(o):t.destroy(s).on("close",o)},get destroyed(){return t.destroyed},busy(s){if(s!=null)if(e[rg]>0){if(s.idempotent===!1||(s.upgrade==="websocket"||s.method==="CONNECT")&&i[$d]===!1||ct.bodyLength(s.body)!==0&&(ct.isStream(s.body)||ct.isAsyncIterable(s.body)||ct.isFormDataLike(s.body)))return!0}else return(s.upgrade==="websocket"||s.method==="CONNECT")&&i[$d]===!1;return!1}}}function hBe(e){let t=e[or];t?.destroyed===!1&&(e[iBe]===0||e[am]===0?(t.unref(),e[la].unref()):(t.ref(),e[la].ref()))}function dBe(e){try{typeof this.setLocalWindowSize=="function"&&this.setLocalWindowSize(e)}catch{}}function gBe(e){if(this[ei][am]=e.maxConcurrentStreams??this[ei][am],this[$d]===!0&&this[Zd]===!0&&e.enableConnectProtocol===!1){let t=new yA("HTTP/2: Server disabled extended CONNECT protocol against RFC-8441");this[or][ti]=t,this[ei][ll](t);return}this[Zd]=e.enableConnectProtocol??this[Zd],this[$d]=!0,this[ei][Eo]()}function pBe(e){let t=e[fv];if((e.closed||e.destroyed)&&t.ping.interval!=null){clearInterval(t.ping.interval),t.ping.interval=null;return}e.ping(r.bind(e));function r(n,i){let s=this[ei],o=this[ei];if(n!=null){let a=new yA(`HTTP/2: "PING" errored - type ${n.message}`);o[ti]=a,s[ll](a)}else s.emit("ping",i)}}function EBe(e){Fi(e.code!=="ERR_TLS_CERT_ALTNAME_INVALID"),this[or][ti]=e,this[ei][ll](e)}function yBe(e,t,r){if(r===0){let n=new yA(`HTTP/2: "frameError" received - type ${e}, code ${t}`);this[or][ti]=n,this[ei][ll](n)}}function mBe(){let e=new tg("other side closed",ct.getSocketInfo(this[or]));this.destroy(e),ct.destroy(this[or],e)}function BBe(e){let t=this[ti]||new tg(`HTTP/2: "GOAWAY" frame received with code ${e}`,ct.getSocketInfo(this[or])),r=this[ei];if(r[or]=null,r[Av]=null,this.close(),this[la]=null,ct.destroy(this[or],t),r[Is]<r[mA].length){let n=r[mA][r[Is]];r[mA][r[Is]++]=null,ct.errorRequest(r,n,t),r[av]=r[Is]}Fi(r[rg]===0),r.emit("disconnect",r[eg],[r],t),r.emit("connectionError",r[eg],[r],t),r[Eo]()}function IBe(){let{[ei]:e,[fv]:t}=this,{[or]:r}=e,n=this[or][ti]||this[ti]||new tg("closed",ct.getSocketInfo(r));if(e[or]=null,e[Av]=null,t.ping.interval!=null&&(clearInterval(t.ping.interval),t.ping.interval=null),e.destroyed){Fi(e[eBe]===0);let i=e[mA].splice(e[Is]);for(let s=0;s<i.length;s++){let o=i[s];ct.errorRequest(e,o,n)}}}function bBe(){let e=this[ti]||new tg("closed",ct.getSocketInfo(this)),t=this[la][ei];t[or]=null,t[Av]=null,this[la]!==null&&this[la].destroy(e),t[av]=t[Is],Fi(t[rg]===0),t.emit("disconnect",t[eg],[t],e),t[Eo]()}function CBe(e){Fi(e.code!=="ERR_TLS_CERT_ALTNAME_INVALID"),this[ti]=e,this[ei][ll](e)}function QBe(){ct.destroy(this,new tg("other side closed",ct.getSocketInfo(this)))}function wBe(){this[ov]=!0}function SBe(e){return e!=="GET"&&e!=="HEAD"&&e!=="OPTIONS"&&e!=="TRACE"&&e!=="CONNECT"}function _Be(e,t){let r=t.bodyTimeout??e[sBe],n=e[la],{method:i,path:s,host:o,upgrade:a,expectContinue:A,signal:f,protocol:l,headers:p}=t,{body:I}=t;if(a!=null&&a!=="websocket")return ct.errorRequest(e,t,new $me(`Custom upgrade "${a}" not supported over HTTP/2`)),!1;let S={};for(let se=0;se<p.length;se+=2){let ie=p[se+0],ce=p[se+1];if(ie==="cookie"){S[ie]!=null?S[ie]=Array.isArray(S[ie])?(S[ie].push(ce),S[ie]):[S[ie],ce]:S[ie]=ce;continue}if(Array.isArray(ce))for(let H=0;H<ce.length;H++)S[ie]?S[ie]+=`, ${ce[H]}`:S[ie]=ce[H];else S[ie]?S[ie]+=`, ${ce}`:S[ie]=ce}let _=null,{hostname:N,port:O}=e[eg];S[oBe]=o||`${N}${O?`:${O}`:""}`,S[n7]=i;let x=se=>{t.aborted||t.completed||(se=se||new Zme,ct.errorRequest(e,t,se),_!=null&&(_.removeAllListeners("data"),_.close(),e[ll](se),e[Eo]()),ct.destroy(I,se))};try{t.onConnect(x)}catch(se){ct.errorRequest(e,t,se)}if(t.aborted)return!1;if(a||i==="CONNECT")return n.ref(),a==="websocket"?n[Zd]===!1?(ct.errorRequest(e,t,new yA("HTTP/2: Extended CONNECT protocol not supported by server")),n.unref(),!1):(S[n7]="CONNECT",S[fBe]="websocket",S[i7]=s,l==="ws:"||l==="wss:"?S[rv]=l==="ws:"?"http":"https":S[rv]=l==="http:"?"http":"https",_=n.request(S,{endStream:!1,signal:f}),_[om]=!0,_.once("response",(se,ie)=>{let{[nv]:ce,...H}=se;t.onUpgrade(ce,iv(H),_),++n[Mi],e[mA][e[Is]++]=null}),_.on("error",()=>{(_.rstCode===uBe||_.rstCode===cBe)&&x(new yA(`HTTP/2: "stream error" received - code ${_.rstCode}`))}),_.once("close",()=>{n[Mi]-=1,n[Mi]===0&&n.unref()}),_.setTimeout(r),!0):(_=n.request(S,{endStream:!1,signal:f}),_[om]=!0,_.on("response",se=>{let{[nv]:ie,...ce}=se;t.onUpgrade(ie,iv(ce),_),++n[Mi],e[mA][e[Is]++]=null}),_.once("close",()=>{n[Mi]-=1,n[Mi]===0&&n.unref()}),_.setTimeout(r),!0);S[i7]=s,S[rv]=l==="http:"?"http":"https";let G=i==="PUT"||i==="POST"||i==="PATCH";I&&typeof I.read=="function"&&I.read(0);let Y=ct.bodyLength(I);if(ct.isFormDataLike(I)){r7??(r7=Al().extractBody);let[se,ie]=r7(I);S["content-type"]=ie,I=se.stream,Y=se.length}if(Y==null&&(Y=t.contentLength),G||(Y=null),SBe(i)&&Y>0&&t.contentLength!=null&&t.contentLength!==Y){if(e[tBe])return ct.errorRequest(e,t,new sv),!1;process.emitWarning(new sv)}if(Y!=null&&(Fi(I||Y===0,"no body must not have content length"),S[aBe]=`${Y}`),n.ref(),t7.sendHeaders.hasSubscribers){let se="";for(let ie in S)se+=`${ie}: ${S[ie]}\r
-`;t7.sendHeaders.publish({request:t,headers:se,socket:n[or]})}let X=i==="GET"||i==="HEAD"||I===null;A?(S[ABe]="100-continue",_=n.request(S,{endStream:X,signal:f}),_[om]=!0,_.once("continue",j)):(_=n.request(S,{endStream:X,signal:f}),_[om]=!0,j()),++n[Mi],_.setTimeout(r);let Z=!1;return _.once("response",se=>{let{[nv]:ie,...ce}=se;if(t.onResponseStarted(),Z=!0,t.aborted){_.removeAllListeners("data");return}t.onHeaders(Number(ie),iv(ce),_.resume.bind(_),"")===!1&&_.pause(),_.on("data",H=>{t.aborted||t.completed||t.onData(H)===!1&&_.pause()})}),_.once("end",()=>{_.removeAllListeners("data"),Z?(!t.aborted&&!t.completed&&t.onComplete({}),e[mA][e[Is]++]=null,e[Eo]()):(x(new yA("HTTP/2: stream half-closed (remote)")),e[mA][e[Is]++]=null,e[av]=e[Is],e[Eo]())}),_.once("close",()=>{_.removeAllListeners("data"),n[Mi]-=1,n[Mi]===0&&n.unref()}),_.once("error",function(se){_.removeAllListeners("data"),x(se)}),_.once("frameError",(se,ie)=>{_.removeAllListeners("data"),x(new yA(`HTTP/2: "frameError" received - type ${se}, code ${ie}`))}),_.on("aborted",()=>{_.removeAllListeners("data")}),_.on("timeout",()=>{let se=new yA(`HTTP/2: "stream timeout after ${r}"`);_.removeAllListeners("data"),n[Mi]-=1,n[Mi]===0&&n.unref(),x(se)}),_.once("trailers",se=>{t.aborted||t.completed||(_.removeAllListeners("data"),t.onComplete(se))}),!0;function j(){!I||Y===0?s7(x,_,null,e,t,e[or],Y,G):ct.isBuffer(I)?s7(x,_,I,e,t,e[or],Y,G):ct.isBlobLike(I)?typeof I.stream=="function"?o7(x,_,I.stream(),e,t,e[or],Y,G):RBe(x,_,I,e,t,e[or],Y,G):ct.isStream(I)?vBe(x,e[or],G,_,I,e,t,Y):ct.isIterable(I)?o7(x,_,I,e,t,e[or],Y,G):Fi(!1)}}function s7(e,t,r,n,i,s,o,a){try{r!=null&&ct.isBuffer(r)&&(Fi(o===r.byteLength,"buffer body must have content length"),t.cork(),t.write(r),t.uncork(),t.end(),i.onBodySent(r)),a||(s[fm]=!0),i.onRequestSent(),n[Eo]()}catch(A){e(A)}}function vBe(e,t,r,n,i,s,o,a){Fi(a!==0||s[rg]===0,"stream body cannot be pipelined");let A=Xme(i,n,l=>{l?(ct.destroy(A,l),e(l)):(ct.removeAllListeners(A),o.onRequestSent(),r||(t[fm]=!0),s[Eo]())});ct.addListener(A,"data",f);function f(l){o.onBodySent(l)}}async function RBe(e,t,r,n,i,s,o,a){Fi(o===r.size,"blob body must have content length");try{if(o!=null&&o!==r.size)throw new sv;let A=Buffer.from(await r.arrayBuffer());t.cork(),t.write(A),t.uncork(),t.end(),i.onBodySent(A),i.onRequestSent(),a||(s[fm]=!0),n[Eo]()}catch(A){e(A)}}async function o7(e,t,r,n,i,s,o,a){Fi(o!==0||n[rg]===0,"iterator body cannot be pipelined");let A=null;function f(){if(A){let p=A;A=null,p()}}let l=()=>new Promise((p,I)=>{Fi(A===null),s[ti]?I(s[ti]):A=p});t.on("close",f).on("drain",f);try{for await(let p of r){if(s[ti])throw s[ti];let I=t.write(p);i.onBodySent(p),I||await l()}t.end(),i.onRequestSent(),a||(s[fm]=!0),n[Eo]()}catch(p){e(p)}finally{t.off("close",f).off("drain",f)}}a7.exports=lBe});var cm=U((_Fe,p7)=>{"use strict";var ha=Gt(),l7=AE(),ng=aE(),Kf=Zt(),{ClientStats:DBe}=YQ(),{channels:hl}=ed(),TBe=J6(),NBe=bE(),{InvalidArgumentError:er,InformationalError:MBe,ClientDestroyedError:FBe}=mr(),kBe=sw(),{kUrl:yo,kServerName:bA,kClient:UBe,kBusy:cv,kConnect:xBe,kResuming:Xf,kRunning:ag,kPending:Ag,kSize:ig,kQueue:bs,kConnected:LBe,kConnecting:dl,kNeedDrain:IA,kKeepAliveDefaultTimeout:f7,kHostHeader:PBe,kPendingIdx:Cs,kRunningIdx:ga,kError:OBe,kPipelining:um,kKeepAliveTimeoutValue:HBe,kMaxHeadersSize:qBe,kKeepAliveMaxTimeout:GBe,kKeepAliveTimeoutThreshold:YBe,kHeadersTimeout:WBe,kBodyTimeout:VBe,kStrictContentLength:JBe,kConnector:sg,kMaxRequests:lv,kCounter:jBe,kClose:zBe,kDestroy:KBe,kDispatch:XBe,kLocalAddress:og,kMaxResponseSize:ZBe,kOnError:$Be,kHTTPContext:dr,kMaxConcurrentStreams:eIe,kHTTP2InitialWindowSize:tIe,kHTTP2ConnectionWindowSize:rIe,kResume:da,kPingInterval:nIe}=Dn(),iIe=KH(),sIe=A7(),BA=Symbol("kClosedResolve"),oIe=ng&&ng.maxHeaderSize&&Number.isInteger(ng.maxHeaderSize)&&ng.maxHeaderSize>0?()=>ng.maxHeaderSize:()=>{throw new er("http module not available or http.maxHeaderSize invalid")},u7=()=>{};function h7(e){return e[um]??e[dr]?.defaultPipelining??1}var hv=class extends NBe{constructor(t,{maxHeaderSize:r,headersTimeout:n,socketTimeout:i,requestTimeout:s,connectTimeout:o,bodyTimeout:a,idleTimeout:A,keepAlive:f,keepAliveTimeout:l,maxKeepAliveTimeout:p,keepAliveMaxTimeout:I,keepAliveTimeoutThreshold:S,socketPath:_,pipelining:N,tls:O,strictContentLength:x,maxCachedSessions:G,connect:Y,maxRequestsPerClient:X,localAddress:Z,maxResponseSize:j,autoSelectFamily:se,autoSelectFamilyAttemptTimeout:ie,maxConcurrentStreams:ce,allowH2:H,useH2c:E,initialWindowSize:v,connectionWindowSize:b,pingInterval:c}={}){if(f!==void 0)throw new er("unsupported keepAlive, use pipelining=0 instead");if(i!==void 0)throw new er("unsupported socketTimeout, use headersTimeout & bodyTimeout instead");if(s!==void 0)throw new er("unsupported requestTimeout, use headersTimeout & bodyTimeout instead");if(A!==void 0)throw new er("unsupported idleTimeout, use keepAliveTimeout instead");if(p!==void 0)throw new er("unsupported maxKeepAliveTimeout, use keepAliveMaxTimeout instead");if(r!=null){if(!Number.isInteger(r)||r<1)throw new er("invalid maxHeaderSize")}else r=oIe();if(_!=null&&typeof _!="string")throw new er("invalid socketPath");if(o!=null&&(!Number.isFinite(o)||o<0))throw new er("invalid connectTimeout");if(l!=null&&(!Number.isFinite(l)||l<=0))throw new er("invalid keepAliveTimeout");if(I!=null&&(!Number.isFinite(I)||I<=0))throw new er("invalid keepAliveMaxTimeout");if(S!=null&&!Number.isFinite(S))throw new er("invalid keepAliveTimeoutThreshold");if(n!=null&&(!Number.isInteger(n)||n<0))throw new er("headersTimeout must be a positive integer or zero");if(a!=null&&(!Number.isInteger(a)||a<0))throw new er("bodyTimeout must be a positive integer or zero");if(Y!=null&&typeof Y!="function"&&typeof Y!="object")throw new er("connect must be a function or an object");if(X!=null&&(!Number.isInteger(X)||X<0))throw new er("maxRequestsPerClient must be a positive number");if(Z!=null&&(typeof Z!="string"||l7.isIP(Z)===0))throw new er("localAddress must be valid string IP address");if(j!=null&&(!Number.isInteger(j)||j<-1))throw new er("maxResponseSize must be a positive number");if(ie!=null&&(!Number.isInteger(ie)||ie<-1))throw new er("autoSelectFamilyAttemptTimeout must be a positive number");if(H!=null&&typeof H!="boolean")throw new er("allowH2 must be a valid boolean value");if(ce!=null&&(typeof ce!="number"||ce<1))throw new er("maxConcurrentStreams must be a positive integer, greater than 0");if(E!=null&&typeof E!="boolean")throw new er("useH2c must be a valid boolean value");if(v!=null&&(!Number.isInteger(v)||v<1))throw new er("initialWindowSize must be a positive integer, greater than 0");if(b!=null&&(!Number.isInteger(b)||b<1))throw new er("connectionWindowSize must be a positive integer, greater than 0");if(c!=null&&(typeof c!="number"||!Number.isInteger(c)||c<0))throw new er("pingInterval must be a positive integer, greater or equal to 0");if(super(),typeof Y!="function")Y=kBe({...O,maxCachedSessions:G,allowH2:H,useH2c:E,socketPath:_,timeout:o,...typeof se=="boolean"?{autoSelectFamily:se,autoSelectFamilyAttemptTimeout:ie}:void 0,...Y});else if(_!=null){let g=Y;Y=(w,R)=>g({...w,socketPath:_},R)}this[yo]=Kf.parseOrigin(t),this[sg]=Y,this[um]=N??1,this[qBe]=r,this[f7]=l??4e3,this[GBe]=I??6e5,this[YBe]=S??2e3,this[HBe]=this[f7],this[bA]=null,this[og]=Z??null,this[Xf]=0,this[IA]=0,this[PBe]=`host: ${this[yo].hostname}${this[yo].port?`:${this[yo].port}`:""}\r
-`,this[VBe]=a??3e5,this[WBe]=n??3e5,this[JBe]=x??!0,this[lv]=X,this[BA]=null,this[ZBe]=j>-1?j:-1,this[dr]=null,this[eIe]=ce??100,this[tIe]=v??262144,this[rIe]=b??524288,this[nIe]=c??6e4,this[bs]=[],this[ga]=0,this[Cs]=0,this[da]=g=>dv(this,g),this[$Be]=g=>d7(this,g)}get pipelining(){return this[um]}set pipelining(t){this[um]=t,this[da](!0)}get stats(){return new DBe(this)}get[Ag](){return this[bs].length-this[Cs]}get[ag](){return this[Cs]-this[ga]}get[ig](){return this[bs].length-this[ga]}get[LBe](){return!!this[dr]&&!this[dl]&&!this[dr].destroyed}get[cv](){return!!(this[dr]?.busy(null)||this[ig]>=(h7(this)||1)||this[Ag]>0)}[xBe](t){g7(this),this.once("connect",t)}[XBe](t,r){let n=new TBe(this[yo].origin,t,r);return this[bs].push(n),this[Xf]||(Kf.bodyLength(n.body)==null&&Kf.isIterable(n.body)?(this[Xf]=1,queueMicrotask(()=>dv(this))):this[da](!0)),this[Xf]&&this[IA]!==2&&this[cv]&&(this[IA]=2),this[IA]<2}[zBe](){return new Promise(t=>{this[ig]?this[BA]=t:t(null)})}[KBe](t){return new Promise(r=>{let n=this[bs].splice(this[Cs]);for(let s=0;s<n.length;s++){let o=n[s];Kf.errorRequest(this,o,t)}let i=()=>{this[BA]&&(this[BA](),this[BA]=null),r(null)};this[dr]?(this[dr].destroy(t,i),this[dr]=null):queueMicrotask(i),this[da]()})}};function d7(e,t){if(e[ag]===0&&t.code!=="UND_ERR_INFO"&&t.code!=="UND_ERR_SOCKET"){ha(e[Cs]===e[ga]);let r=e[bs].splice(e[ga]);for(let n=0;n<r.length;n++){let i=r[n];Kf.errorRequest(e,i,t)}ha(e[ig]===0)}}function g7(e){ha(!e[dl]),ha(!e[dr]);let{host:t,hostname:r,protocol:n,port:i}=e[yo];if(r[0]==="["){let s=r.indexOf("]");ha(s!==-1);let o=r.substring(1,s);ha(l7.isIPv6(o)),r=o}e[dl]=!0,hl.beforeConnect.hasSubscribers&&hl.beforeConnect.publish({connectParams:{host:t,hostname:r,protocol:n,port:i,version:e[dr]?.version,servername:e[bA],localAddress:e[og]},connector:e[sg]});try{e[sg]({host:t,hostname:r,protocol:n,port:i,servername:e[bA],localAddress:e[og]},(s,o)=>{if(s){uv(e,s,{host:t,hostname:r,protocol:n,port:i}),e[da]();return}if(e.destroyed){Kf.destroy(o.on("error",u7),new FBe),e[da]();return}ha(o);try{e[dr]=o.alpnProtocol==="h2"?sIe(e,o):iIe(e,o)}catch(a){o.destroy().on("error",u7),uv(e,a,{host:t,hostname:r,protocol:n,port:i}),e[da]();return}e[dl]=!1,o[jBe]=0,o[lv]=e[lv],o[UBe]=e,o[OBe]=null,hl.connected.hasSubscribers&&hl.connected.publish({connectParams:{host:t,hostname:r,protocol:n,port:i,version:e[dr]?.version,servername:e[bA],localAddress:e[og]},connector:e[sg],socket:o}),e.emit("connect",e[yo],[e]),e[da]()})}catch(s){uv(e,s,{host:t,hostname:r,protocol:n,port:i}),e[da]()}}function uv(e,t,{host:r,hostname:n,protocol:i,port:s}){if(!e.destroyed){if(e[dl]=!1,hl.connectError.hasSubscribers&&hl.connectError.publish({connectParams:{host:r,hostname:n,protocol:i,port:s,version:e[dr]?.version,servername:e[bA],localAddress:e[og]},connector:e[sg],error:t}),t.code==="ERR_TLS_CERT_ALTNAME_INVALID")for(ha(e[ag]===0);e[Ag]>0&&e[bs][e[Cs]].servername===e[bA];){let o=e[bs][e[Cs]++];Kf.errorRequest(e,o,t)}else d7(e,t);e.emit("connectionError",e[yo],[e],t)}}function c7(e){e[IA]=0,e.emit("drain",e[yo],[e])}function dv(e,t){e[Xf]!==2&&(e[Xf]=2,aIe(e,t),e[Xf]=0,e[ga]>256&&(e[bs].splice(0,e[ga]),e[Cs]-=e[ga],e[ga]=0))}function aIe(e,t){for(;;){if(e.destroyed){ha(e[Ag]===0);return}if(e[BA]&&!e[ig]){e[BA](),e[BA]=null;return}if(e[dr]&&e[dr].resume(),e[cv])e[IA]=2;else if(e[IA]===2){t?(e[IA]=1,queueMicrotask(()=>c7(e))):c7(e);continue}if(e[Ag]===0||e[ag]>=(h7(e)||1))return;let r=e[bs][e[Cs]];if(r===null)return;if(e[yo].protocol==="https:"&&e[bA]!==r.servername){if(e[ag]>0)return;e[bA]=r.servername,e[dr]?.destroy(new MBe("servername changed"),()=>{e[dr]=null,dv(e)})}if(e[dl])return;if(!e[dr]){g7(e);return}if(e[dr].destroyed||e[dr].busy(r))return;!r.aborted&&e[dr].write(r)?e[Cs]++:e[bs].splice(e[Cs],1)}}p7.exports=hv});var I7=U((vFe,B7)=>{"use strict";var{PoolBase:AIe,kClients:lm,kNeedDrain:fIe,kAddClient:uIe,kGetDispatcher:cIe,kRemoveClient:lIe}=P6(),hIe=cm(),{InvalidArgumentError:gv}=mr(),E7=Zt(),{kUrl:y7}=Dn(),dIe=sw(),hm=Symbol("options"),pv=Symbol("connections"),m7=Symbol("factory");function gIe(e,t){return new hIe(e,t)}var Ev=class extends AIe{constructor(t,{connections:r,factory:n=gIe,connect:i,connectTimeout:s,tls:o,maxCachedSessions:a,socketPath:A,autoSelectFamily:f,autoSelectFamilyAttemptTimeout:l,allowH2:p,clientTtl:I,...S}={}){if(r!=null&&(!Number.isFinite(r)||r<0))throw new gv("invalid connections");if(typeof n!="function")throw new gv("factory must be a function.");if(i!=null&&typeof i!="function"&&typeof i!="object")throw new gv("connect must be a function or an object");typeof i!="function"&&(i=dIe({...o,maxCachedSessions:a,allowH2:p,socketPath:A,timeout:s,...typeof f=="boolean"?{autoSelectFamily:f,autoSelectFamilyAttemptTimeout:l}:void 0,...i})),super(),this[pv]=r||null,this[y7]=E7.parseOrigin(t),this[hm]={...E7.deepClone(S),connect:i,allowH2:p,clientTtl:I,socketPath:A},this[hm].interceptors=S.interceptors?{...S.interceptors}:void 0,this[m7]=n,this.on("connect",(_,N)=>{if(I!=null&&I>0)for(let O of N)Object.assign(O,{ttl:Date.now()})}),this.on("connectionError",(_,N,O)=>{for(let x of N){let G=this[lm].indexOf(x);G!==-1&&this[lm].splice(G,1)}})}[cIe](){let t=this[hm].clientTtl;for(let r of this[lm])if(t!=null&&t>0&&r.ttl&&Date.now()-r.ttl>t)this[lIe](r);else if(!r[fIe])return r;if(!this[pv]||this[lm].length<this[pv]){let r=this[m7](this[y7],this[hm]);return this[uIe](r),r}}};B7.exports=Ev});var Bv=U((RFe,v7)=>{"use strict";var{InvalidArgumentError:dm,MaxOriginsReachedError:pIe}=mr(),{kClients:ki,kRunning:b7,kClose:EIe,kDestroy:yIe,kDispatch:mIe,kUrl:BIe}=Dn(),IIe=bE(),bIe=I7(),CIe=cm(),QIe=Zt(),C7=Symbol("onConnect"),Q7=Symbol("onDisconnect"),w7=Symbol("onConnectionError"),S7=Symbol("onDrain"),_7=Symbol("factory"),yv=Symbol("options"),fg=Symbol("origins");function wIe(e,t){return t&&t.connections===1?new CIe(e,t):new bIe(e,t)}var mv=class extends IIe{constructor({factory:t=wIe,maxOrigins:r=1/0,connect:n,...i}={}){if(typeof t!="function")throw new dm("factory must be a function.");if(n!=null&&typeof n!="function"&&typeof n!="object")throw new dm("connect must be a function or an object");if(typeof r!="number"||Number.isNaN(r)||r<=0)throw new dm("maxOrigins must be a number greater than 0");super(),n&&typeof n!="function"&&(n={...n}),this[yv]={...QIe.deepClone(i),maxOrigins:r,connect:n},this[_7]=t,this[ki]=new Map,this[fg]=new Set,this[S7]=(s,o)=>{this.emit("drain",s,[this,...o])},this[C7]=(s,o)=>{this.emit("connect",s,[this,...o])},this[Q7]=(s,o,a)=>{this.emit("disconnect",s,[this,...o],a)},this[w7]=(s,o,a)=>{this.emit("connectionError",s,[this,...o],a)}}get[b7](){let t=0;for(let{dispatcher:r}of this[ki].values())t+=r[b7];return t}[mIe](t,r){let n;if(t.origin&&(typeof t.origin=="string"||t.origin instanceof URL))n=String(t.origin);else throw new dm("opts.origin must be a non-empty string or URL.");if(this[fg].size>=this[yv].maxOrigins&&!this[fg].has(n))throw new pIe;let i=this[ki].get(n),s=i&&i.dispatcher;if(!s){let o=a=>{let A=this[ki].get(n);A&&(a&&(A.count-=1),A.count<=0&&(this[ki].delete(n),A.dispatcher.destroyed||A.dispatcher.close()),this[fg].delete(n))};s=this[_7](t.origin,this[yv]).on("drain",this[S7]).on("connect",(a,A)=>{let f=this[ki].get(n);f&&(f.count+=1),this[C7](a,A)}).on("disconnect",(a,A,f)=>{o(!0),this[Q7](a,A,f)}).on("connectionError",(a,A,f)=>{o(!1),this[w7](a,A,f)}),this[ki].set(n,{count:0,dispatcher:s}),this[fg].add(n)}return s.dispatch(t,r)}[EIe](){let t=[];for(let{dispatcher:r}of this[ki].values())t.push(r.close());return this[ki].clear(),Promise.all(t)}[yIe](t){let r=[];for(let{dispatcher:n}of this[ki].values())r.push(n.destroy(t));return this[ki].clear(),Promise.all(r)}get stats(){let t={};for(let{dispatcher:r}of this[ki].values())r.stats&&(t[r[BIe].origin]=r.stats);return t}};v7.exports=mv});var cg=U((DFe,k7)=>{"use strict";var{kConstruct:SIe}=Dn(),{kEnumerableProperty:gl}=Zt(),{iteratorMixin:_Ie,isValidHeaderName:ug,isValidHeaderValue:D7}=jf(),{webidl:Bt}=lo(),Iv=Gt(),gm=Yr();function R7(e){return e===10||e===13||e===9||e===32}function T7(e){let t=0,r=e.length;for(;r>t&&R7(e.charCodeAt(r-1));)--r;for(;r>t&&R7(e.charCodeAt(t));)++t;return t===0&&r===e.length?e:e.substring(t,r)}function N7(e,t){if(Array.isArray(t))for(let r=0;r<t.length;++r){let n=t[r];if(n.length!==2)throw Bt.errors.exception({header:"Headers constructor",message:`expected name/value pair to be length 2, found ${n.length}.`});bv(e,n[0],n[1])}else if(typeof t=="object"&&t!==null){let r=Object.keys(t);for(let n=0;n<r.length;++n)bv(e,r[n],t[r[n]])}else throw Bt.errors.conversionFailed({prefix:"Headers constructor",argument:"Argument 1",types:["sequence<sequence<ByteString>>","record<ByteString, ByteString>"]})}function bv(e,t,r){if(r=T7(r),ug(t)){if(!D7(r))throw Bt.errors.invalidArgument({prefix:"Headers.append",value:r,type:"header value"})}else throw Bt.errors.invalidArgument({prefix:"Headers.append",value:t,type:"header name"});if(F7(e)==="immutable")throw new TypeError("immutable");return Em(e).append(t,r,!1)}function vIe(e){let t=Em(e);if(!t)return[];if(t.sortedMap)return t.sortedMap;let r=[],n=t.toSortedArray(),i=t.cookies;if(i===null||i.length===1)return t.sortedMap=n;for(let s=0;s<n.length;++s){let{0:o,1:a}=n[s];if(o==="set-cookie")for(let A=0;A<i.length;++A)r.push([o,i[A]]);else r.push([o,a])}return t.sortedMap=r}function M7(e,t){return e[0]<t[0]?-1:1}var pm=class e{constructor(t){y(this,"cookies",null);y(this,"sortedMap");y(this,"headersMap");t instanceof e?(this.headersMap=new Map(t.headersMap),this.sortedMap=t.sortedMap,this.cookies=t.cookies===null?null:[...t.cookies]):(this.headersMap=new Map(t),this.sortedMap=null)}contains(t,r){return this.headersMap.has(r?t:t.toLowerCase())}clear(){this.headersMap.clear(),this.sortedMap=null,this.cookies=null}append(t,r,n){this.sortedMap=null;let i=n?t:t.toLowerCase(),s=this.headersMap.get(i);if(s){let o=i==="cookie"?"; ":", ";this.headersMap.set(i,{name:s.name,value:`${s.value}${o}${r}`})}else this.headersMap.set(i,{name:t,value:r});i==="set-cookie"&&(this.cookies??(this.cookies=[])).push(r)}set(t,r,n){this.sortedMap=null;let i=n?t:t.toLowerCase();i==="set-cookie"&&(this.cookies=[r]),this.headersMap.set(i,{name:t,value:r})}delete(t,r){this.sortedMap=null,r||(t=t.toLowerCase()),t==="set-cookie"&&(this.cookies=null),this.headersMap.delete(t)}get(t,r){return this.headersMap.get(r?t:t.toLowerCase())?.value??null}*[Symbol.iterator](){for(let{0:t,1:{value:r}}of this.headersMap)yield[t,r]}get entries(){let t={};if(this.headersMap.size!==0)for(let{name:r,value:n}of this.headersMap.values())t[r]=n;return t}rawValues(){return this.headersMap.values()}get entriesList(){let t=[];if(this.headersMap.size!==0)for(let{0:r,1:{name:n,value:i}}of this.headersMap)if(r==="set-cookie")for(let s of this.cookies)t.push([n,s]);else t.push([n,i]);return t}toSortedArray(){let t=this.headersMap.size,r=new Array(t);if(t<=32){if(t===0)return r;let n=this.headersMap[Symbol.iterator](),i=n.next().value;r[0]=[i[0],i[1].value],Iv(i[1].value!==null);for(let s=1,o=0,a=0,A=0,f=0,l,p;s<t;++s){for(p=n.next().value,l=r[s]=[p[0],p[1].value],Iv(l[1]!==null),A=0,a=s;A<a;)f=A+(a-A>>1),r[f][0]<=l[0]?A=f+1:a=f;if(s!==f){for(o=s;o>A;)r[o]=r[--o];r[A]=l}}if(!n.next().done)throw new TypeError("Unreachable");return r}else{let n=0;for(let{0:i,1:{value:s}}of this.headersMap)r[n++]=[i,s],Iv(s!==null);return r.sort(M7)}}},QA,ri,CA=class CA{constructor(t=void 0){wt(this,QA);wt(this,ri);Bt.util.markAsUncloneable(this),t!==SIe&&(ft(this,ri,new pm),ft(this,QA,"none"),t!==void 0&&(t=Bt.converters.HeadersInit(t,"Headers constructor","init"),N7(this,t)))}append(t,r){Bt.brandCheck(this,CA),Bt.argumentLengthCheck(arguments,2,"Headers.append");let n="Headers.append";return t=Bt.converters.ByteString(t,n,"name"),r=Bt.converters.ByteString(r,n,"value"),bv(this,t,r)}delete(t){if(Bt.brandCheck(this,CA),Bt.argumentLengthCheck(arguments,1,"Headers.delete"),t=Bt.converters.ByteString(t,"Headers.delete","name"),!ug(t))throw Bt.errors.invalidArgument({prefix:"Headers.delete",value:t,type:"header name"});if(ee(this,QA)==="immutable")throw new TypeError("immutable");ee(this,ri).contains(t,!1)&&ee(this,ri).delete(t,!1)}get(t){Bt.brandCheck(this,CA),Bt.argumentLengthCheck(arguments,1,"Headers.get");let r="Headers.get";if(t=Bt.converters.ByteString(t,r,"name"),!ug(t))throw Bt.errors.invalidArgument({prefix:r,value:t,type:"header name"});return ee(this,ri).get(t,!1)}has(t){Bt.brandCheck(this,CA),Bt.argumentLengthCheck(arguments,1,"Headers.has");let r="Headers.has";if(t=Bt.converters.ByteString(t,r,"name"),!ug(t))throw Bt.errors.invalidArgument({prefix:r,value:t,type:"header name"});return ee(this,ri).contains(t,!1)}set(t,r){Bt.brandCheck(this,CA),Bt.argumentLengthCheck(arguments,2,"Headers.set");let n="Headers.set";if(t=Bt.converters.ByteString(t,n,"name"),r=Bt.converters.ByteString(r,n,"value"),r=T7(r),ug(t)){if(!D7(r))throw Bt.errors.invalidArgument({prefix:n,value:r,type:"header value"})}else throw Bt.errors.invalidArgument({prefix:n,value:t,type:"header name"});if(ee(this,QA)==="immutable")throw new TypeError("immutable");ee(this,ri).set(t,r,!1)}getSetCookie(){Bt.brandCheck(this,CA);let t=ee(this,ri).cookies;return t?[...t]:[]}[gm.inspect.custom](t,r){return r.depth??(r.depth=t),`Headers ${gm.formatWithOptions(r,ee(this,ri).entries)}`}static getHeadersGuard(t){return ee(t,QA)}static setHeadersGuard(t,r){ft(t,QA,r)}static getHeadersList(t){return ee(t,ri)}static setHeadersList(t,r){ft(t,ri,r)}};QA=new WeakMap,ri=new WeakMap;var Qs=CA,{getHeadersGuard:F7,setHeadersGuard:RIe,getHeadersList:Em,setHeadersList:DIe}=Qs;Reflect.deleteProperty(Qs,"getHeadersGuard");Reflect.deleteProperty(Qs,"setHeadersGuard");Reflect.deleteProperty(Qs,"getHeadersList");Reflect.deleteProperty(Qs,"setHeadersList");_Ie("Headers",Qs,vIe,0,1);Object.defineProperties(Qs.prototype,{append:gl,delete:gl,get:gl,has:gl,set:gl,getSetCookie:gl,[Symbol.toStringTag]:{value:"Headers",configurable:!0},[gm.inspect.custom]:{enumerable:!1}});Bt.converters.HeadersInit=function(e,t,r){if(Bt.util.Type(e)===Bt.util.Types.OBJECT){let n=Reflect.get(e,Symbol.iterator);if(!gm.types.isProxy(e)&&n===Qs.prototype.entries)try{return Em(e).entriesList}catch{}return typeof n=="function"?Bt.converters["sequence<sequence<ByteString>>"](e,t,r,n.bind(e)):Bt.converters["record<ByteString, ByteString>"](e,t,r)}throw Bt.errors.conversionFailed({prefix:"Headers constructor",argument:"Argument 1",types:["sequence<sequence<ByteString>>","record<ByteString, ByteString>"]})};k7.exports={fill:N7,compareHeaderName:M7,Headers:Qs,HeadersList:pm,getHeadersGuard:F7,setHeadersGuard:RIe,setHeadersList:DIe,getHeadersList:Em}});var wv=U((NFe,J7)=>{"use strict";var{Headers:H7,HeadersList:U7,fill:TIe,getHeadersGuard:NIe,setHeadersGuard:q7,setHeadersList:G7}=cg(),{extractBody:x7,cloneBody:MIe,mixinBody:FIe,streamRegistry:Y7,bodyUnusable:kIe}=Al(),W7=Zt(),L7=Yr(),{kEnumerableProperty:ni}=W7,{isValidReasonPhrase:UIe,isCancelled:xIe,isAborted:LIe,isErrorLike:PIe,environmentSettingsObject:OIe}=jf(),{redirectStatusSet:HIe,nullBodyStatus:qIe}=td(),{webidl:yt}=lo(),{URLSerializer:P7}=yf(),{kConstruct:mm}=Dn(),Cv=Gt(),{isomorphicEncode:GIe,serializeJavascriptValueToJSONString:YIe}=Ef(),WIe=new TextEncoder("utf-8"),mo,tr,Ui=class Ui{constructor(t=null,r=void 0){wt(this,mo);wt(this,tr);if(yt.util.markAsUncloneable(this),t===mm)return;t!==null&&(t=yt.converters.BodyInit(t,"Response","body")),r=yt.converters.ResponseInit(r),ft(this,tr,pl({})),ft(this,mo,new H7(mm)),q7(ee(this,mo),"response"),G7(ee(this,mo),ee(this,tr).headersList);let n=null;if(t!=null){let[i,s]=x7(t);n={body:i,type:s}}O7(this,r,n)}static error(){return lg(Bm(),"immutable")}static json(t,r=void 0){yt.argumentLengthCheck(arguments,1,"Response.json"),r!==null&&(r=yt.converters.ResponseInit(r));let n=WIe.encode(YIe(t)),i=x7(n),s=lg(pl({}),"response");return O7(s,r,{body:i[0],type:"application/json"}),s}static redirect(t,r=302){yt.argumentLengthCheck(arguments,1,"Response.redirect"),t=yt.converters.USVString(t),r=yt.converters["unsigned short"](r);let n;try{n=new URL(t,OIe.settingsObject.baseUrl)}catch(o){throw new TypeError(`Failed to parse URL from ${t}`,{cause:o})}if(!HIe.has(r))throw new RangeError(`Invalid status code ${r}`);let i=lg(pl({}),"immutable");ee(i,tr).status=r;let s=GIe(P7(n));return ee(i,tr).headersList.append("location",s,!0),i}get type(){return yt.brandCheck(this,Ui),ee(this,tr).type}get url(){yt.brandCheck(this,Ui);let t=ee(this,tr).urlList,r=t[t.length-1]??null;return r===null?"":P7(r,!0)}get redirected(){return yt.brandCheck(this,Ui),ee(this,tr).urlList.length>1}get status(){return yt.brandCheck(this,Ui),ee(this,tr).status}get ok(){return yt.brandCheck(this,Ui),ee(this,tr).status>=200&&ee(this,tr).status<=299}get statusText(){return yt.brandCheck(this,Ui),ee(this,tr).statusText}get headers(){return yt.brandCheck(this,Ui),ee(this,mo)}get body(){return yt.brandCheck(this,Ui),ee(this,tr).body?ee(this,tr).body.stream:null}get bodyUsed(){return yt.brandCheck(this,Ui),!!ee(this,tr).body&&W7.isDisturbed(ee(this,tr).body.stream)}clone(){if(yt.brandCheck(this,Ui),kIe(ee(this,tr)))throw yt.errors.exception({header:"Response.clone",message:"Body has already been consumed."});let t=Qv(ee(this,tr));return ee(this,tr).urlList.length!==0&&ee(this,tr).body?.stream&&Y7.register(this,new WeakRef(ee(this,tr).body.stream)),lg(t,NIe(ee(this,mo)))}[L7.inspect.custom](t,r){r.depth===null&&(r.depth=2),r.colors??(r.colors=!0);let n={status:this.status,statusText:this.statusText,headers:this.headers,body:this.body,bodyUsed:this.bodyUsed,ok:this.ok,redirected:this.redirected,type:this.type,url:this.url};return`Response ${L7.formatWithOptions(r,n)}`}static getResponseHeaders(t){return ee(t,mo)}static setResponseHeaders(t,r){ft(t,mo,r)}static getResponseState(t){return ee(t,tr)}static setResponseState(t,r){ft(t,tr,r)}};mo=new WeakMap,tr=new WeakMap;var ii=Ui,{getResponseHeaders:VIe,setResponseHeaders:JIe,getResponseState:Zf,setResponseState:jIe}=ii;Reflect.deleteProperty(ii,"getResponseHeaders");Reflect.deleteProperty(ii,"setResponseHeaders");Reflect.deleteProperty(ii,"getResponseState");Reflect.deleteProperty(ii,"setResponseState");FIe(ii,Zf);Object.defineProperties(ii.prototype,{type:ni,url:ni,status:ni,ok:ni,redirected:ni,statusText:ni,headers:ni,clone:ni,body:ni,bodyUsed:ni,[Symbol.toStringTag]:{value:"Response",configurable:!0}});Object.defineProperties(ii,{json:ni,redirect:ni,error:ni});function Qv(e){if(e.internalResponse)return V7(Qv(e.internalResponse),e.type);let t=pl({...e,body:null});return e.body!=null&&(t.body=MIe(e.body)),t}function pl(e){return{aborted:!1,rangeRequested:!1,timingAllowPassed:!1,requestIncludesCredentials:!1,type:"default",status:200,timingInfo:null,cacheState:"",statusText:"",...e,headersList:e?.headersList?new U7(e?.headersList):new U7,urlList:e?.urlList?[...e.urlList]:[]}}function Bm(e){let t=PIe(e);return pl({type:"error",status:0,error:t?e:new Error(e&&String(e)),aborted:e&&e.name==="AbortError"})}function zIe(e){return e.type==="error"&&e.status===0}function ym(e,t){return t={internalResponse:e,...t},new Proxy(e,{get(r,n){return n in t?t[n]:r[n]},set(r,n,i){return Cv(!(n in t)),r[n]=i,!0}})}function V7(e,t){if(t==="basic")return ym(e,{type:"basic",headersList:e.headersList});if(t==="cors")return ym(e,{type:"cors",headersList:e.headersList});if(t==="opaque")return ym(e,{type:"opaque",urlList:[],status:0,statusText:"",body:null});if(t==="opaqueredirect")return ym(e,{type:"opaqueredirect",status:0,statusText:"",headersList:[],body:null});Cv(!1)}function KIe(e,t=null){return Cv(xIe(e)),LIe(e)?Bm(Object.assign(new DOMException("The operation was aborted.","AbortError"),{cause:t})):Bm(Object.assign(new DOMException("Request was cancelled."),{cause:t}))}function O7(e,t,r){if(t.status!==null&&(t.status<200||t.status>599))throw new RangeError('init["status"] must be in the range of 200 to 599, inclusive.');if("statusText"in t&&t.statusText!=null&&!UIe(String(t.statusText)))throw new TypeError("Invalid statusText");if("status"in t&&t.status!=null&&(Zf(e).status=t.status),"statusText"in t&&t.statusText!=null&&(Zf(e).statusText=t.statusText),"headers"in t&&t.headers!=null&&TIe(VIe(e),t.headers),r){if(qIe.includes(e.status))throw yt.errors.exception({header:"Response constructor",message:`Invalid response status code ${e.status}`});Zf(e).body=r.body,r.type!=null&&!Zf(e).headersList.contains("content-type",!0)&&Zf(e).headersList.append("content-type",r.type,!0)}}function lg(e,t){let r=new ii(mm);jIe(r,e);let n=new H7(mm);return JIe(r,n),G7(n,e.headersList),q7(n,t),e.urlList.length!==0&&e.body?.stream&&Y7.register(r,new WeakRef(e.body.stream)),r}yt.converters.XMLHttpRequestBodyInit=function(e,t,r){return typeof e=="string"?yt.converters.USVString(e,t,r):yt.is.Blob(e)||yt.is.BufferSource(e)||yt.is.FormData(e)||yt.is.URLSearchParams(e)?e:yt.converters.DOMString(e,t,r)};yt.converters.BodyInit=function(e,t,r){return yt.is.ReadableStream(e)||e?.[Symbol.asyncIterator]?e:yt.converters.XMLHttpRequestBodyInit(e,t,r)};yt.converters.ResponseInit=yt.dictionaryConverter([{key:"status",converter:yt.converters["unsigned short"],defaultValue:()=>200},{key:"statusText",converter:yt.converters.ByteString,defaultValue:()=>""},{key:"headers",converter:yt.converters.HeadersInit}]);yt.is.Response=yt.util.MakeTypeAssertion(ii);J7.exports={isNetworkError:zIe,makeNetworkError:Bm,makeResponse:pl,makeAppropriateNetworkError:KIe,filterResponse:V7,Response:ii,cloneResponse:Qv,fromInnerResponse:lg,getResponseState:Zf}});var vv=U((FFe,aq)=>{"use strict";var{extractBody:XIe,mixinBody:ZIe,cloneBody:$Ie,bodyUnusable:j7}=Al(),{Headers:eq,fill:ebe,HeadersList:Cm,setHeadersGuard:Sv,getHeadersGuard:tbe,setHeadersList:tq,getHeadersList:z7}=cg(),bm=Zt(),K7=Yr(),{isValidHTTPToken:rbe,sameOrigin:X7,environmentSettingsObject:Im}=jf(),{forbiddenMethodsSet:nbe,corsSafeListedMethodsSet:ibe,referrerPolicy:sbe,requestRedirect:obe,requestMode:abe,requestCredentials:Abe,requestCache:fbe,requestDuplex:ube}=td(),{kEnumerableProperty:br,normalizedMethodRecordsBase:cbe,normalizedMethodRecords:lbe}=bm,{webidl:Fe}=lo(),{URLSerializer:hbe}=yf(),{kConstruct:Qm}=Dn(),dbe=Gt(),{getMaxListeners:rq,setMaxListeners:gbe,defaultMaxListeners:pbe}=Zi(),Ebe=Symbol("abortController"),nq=new FinalizationRegistry(({signal:e,abort:t})=>{e.removeEventListener("abort",t)}),wm=new WeakMap,_v;try{_v=rq(new AbortController().signal)>0}catch{_v=!1}function Z7(e){return t;function t(){let r=e.deref();if(r!==void 0){nq.unregister(t),this.removeEventListener("abort",t),r.abort(this.reason);let n=wm.get(r.signal);if(n!==void 0){if(n.size!==0){for(let i of n){let s=i.deref();s!==void 0&&s.abort(this.reason)}n.clear()}wm.delete(r.signal)}}}}var $7=!1,$f,pa,Ln,vt,gr=class gr{constructor(t,r=void 0){wt(this,$f);wt(this,pa);wt(this,Ln);wt(this,vt);if(Fe.util.markAsUncloneable(this),t===Qm)return;Fe.argumentLengthCheck(arguments,1,"Request constructor"),t=Fe.converters.RequestInfo(t),r=Fe.converters.RequestInit(r);let i=null,s=null,o=Im.settingsObject.baseUrl,a=null;if(typeof t=="string"){ft(this,pa,r.dispatcher);let x;try{x=new URL(t,o)}catch(G){throw new TypeError("Failed to parse URL from "+t,{cause:G})}if(x.username||x.password)throw new TypeError("Request cannot be constructed from a URL that includes credentials: "+t);i=Sm({urlList:[x]}),s="cors"}else dbe(Fe.is.Request(t)),i=ee(t,vt),a=ee(t,$f),ft(this,pa,r.dispatcher||ee(t,pa));let A=Im.settingsObject.origin,f="client";if(i.window?.constructor?.name==="EnvironmentSettingsObject"&&X7(i.window,A)&&(f=i.window),r.window!=null)throw new TypeError(`'window' option '${f}' must be null`);"window"in r&&(f="no-window"),i=Sm({method:i.method,headersList:i.headersList,unsafeRequest:i.unsafeRequest,client:Im.settingsObject,window:f,priority:i.priority,origin:i.origin,referrer:i.referrer,referrerPolicy:i.referrerPolicy,mode:i.mode,credentials:i.credentials,cache:i.cache,redirect:i.redirect,integrity:i.integrity,keepalive:i.keepalive,reloadNavigation:i.reloadNavigation,historyNavigation:i.historyNavigation,urlList:[...i.urlList]});let l=Object.keys(r).length!==0;if(l&&(i.mode==="navigate"&&(i.mode="same-origin"),i.reloadNavigation=!1,i.historyNavigation=!1,i.origin="client",i.referrer="client",i.referrerPolicy="",i.url=i.urlList[i.urlList.length-1],i.urlList=[i.url]),r.referrer!==void 0){let x=r.referrer;if(x==="")i.referrer="no-referrer";else{let G;try{G=new URL(x,o)}catch(Y){throw new TypeError(`Referrer "${x}" is not a valid URL.`,{cause:Y})}G.protocol==="about:"&&G.hostname==="client"||A&&!X7(G,Im.settingsObject.baseUrl)?i.referrer="client":i.referrer=G}}r.referrerPolicy!==void 0&&(i.referrerPolicy=r.referrerPolicy);let p;if(r.mode!==void 0?p=r.mode:p=s,p==="navigate")throw Fe.errors.exception({header:"Request constructor",message:"invalid request mode navigate."});if(p!=null&&(i.mode=p),r.credentials!==void 0&&(i.credentials=r.credentials),r.cache!==void 0&&(i.cache=r.cache),i.cache==="only-if-cached"&&i.mode!=="same-origin")throw new TypeError("'only-if-cached' can be set only with 'same-origin' mode");if(r.redirect!==void 0&&(i.redirect=r.redirect),r.integrity!=null&&(i.integrity=String(r.integrity)),r.keepalive!==void 0&&(i.keepalive=!!r.keepalive),r.method!==void 0){let x=r.method,G=lbe[x];if(G!==void 0)i.method=G;else{if(!rbe(x))throw new TypeError(`'${x}' is not a valid HTTP method.`);let Y=x.toUpperCase();if(nbe.has(Y))throw new TypeError(`'${x}' HTTP method is unsupported.`);x=cbe[Y]??x,i.method=x}!$7&&i.method==="patch"&&(process.emitWarning("Using `patch` is highly likely to result in a `405 Method Not Allowed`. `PATCH` is much more likely to succeed.",{code:"UNDICI-FETCH-patch"}),$7=!0)}r.signal!==void 0&&(a=r.signal),ft(this,vt,i);let I=new AbortController;if(ft(this,$f,I.signal),a!=null)if(a.aborted)I.abort(a.reason);else{this[Ebe]=I;let x=new WeakRef(I),G=Z7(x);_v&&rq(a)===pbe&&gbe(1500,a),bm.addAbortListener(a,G),nq.register(I,{signal:a,abort:G},G)}if(ft(this,Ln,new eq(Qm)),tq(ee(this,Ln),i.headersList),Sv(ee(this,Ln),"request"),p==="no-cors"){if(!ibe.has(i.method))throw new TypeError(`'${i.method} is unsupported in no-cors mode.`);Sv(ee(this,Ln),"request-no-cors")}if(l){let x=z7(ee(this,Ln)),G=r.headers!==void 0?r.headers:new Cm(x);if(x.clear(),G instanceof Cm){for(let{name:Y,value:X}of G.rawValues())x.append(Y,X,!1);x.cookies=G.cookies}else ebe(ee(this,Ln),G)}let S=Fe.is.Request(t)?ee(t,vt).body:null;if((r.body!=null||S!=null)&&(i.method==="GET"||i.method==="HEAD"))throw new TypeError("Request with GET/HEAD method cannot have body.");let _=null;if(r.body!=null){let[x,G]=XIe(r.body,i.keepalive);_=x,G&&!z7(ee(this,Ln)).contains("content-type",!0)&&ee(this,Ln).append("content-type",G,!0)}let N=_??S;if(N!=null&&N.source==null){if(_!=null&&r.duplex==null)throw new TypeError("RequestInit: duplex option is required when sending a body.");if(i.mode!=="same-origin"&&i.mode!=="cors")throw new TypeError('If request is made from ReadableStream, mode should be "same-origin" or "cors"');i.useCORSPreflightFlag=!0}let O=N;if(_==null&&S!=null){if(j7(ee(t,vt)))throw new TypeError("Cannot construct a Request with a Request object that has already been used.");let x=new TransformStream;S.stream.pipeThrough(x),O={source:S.source,length:S.length,stream:x.readable}}ee(this,vt).body=O}get method(){return Fe.brandCheck(this,gr),ee(this,vt).method}get url(){return Fe.brandCheck(this,gr),hbe(ee(this,vt).url)}get headers(){return Fe.brandCheck(this,gr),ee(this,Ln)}get destination(){return Fe.brandCheck(this,gr),ee(this,vt).destination}get referrer(){return Fe.brandCheck(this,gr),ee(this,vt).referrer==="no-referrer"?"":ee(this,vt).referrer==="client"?"about:client":ee(this,vt).referrer.toString()}get referrerPolicy(){return Fe.brandCheck(this,gr),ee(this,vt).referrerPolicy}get mode(){return Fe.brandCheck(this,gr),ee(this,vt).mode}get credentials(){return Fe.brandCheck(this,gr),ee(this,vt).credentials}get cache(){return Fe.brandCheck(this,gr),ee(this,vt).cache}get redirect(){return Fe.brandCheck(this,gr),ee(this,vt).redirect}get integrity(){return Fe.brandCheck(this,gr),ee(this,vt).integrity}get keepalive(){return Fe.brandCheck(this,gr),ee(this,vt).keepalive}get isReloadNavigation(){return Fe.brandCheck(this,gr),ee(this,vt).reloadNavigation}get isHistoryNavigation(){return Fe.brandCheck(this,gr),ee(this,vt).historyNavigation}get signal(){return Fe.brandCheck(this,gr),ee(this,$f)}get body(){return Fe.brandCheck(this,gr),ee(this,vt).body?ee(this,vt).body.stream:null}get bodyUsed(){return Fe.brandCheck(this,gr),!!ee(this,vt).body&&bm.isDisturbed(ee(this,vt).body.stream)}get duplex(){return Fe.brandCheck(this,gr),"half"}clone(){if(Fe.brandCheck(this,gr),j7(ee(this,vt)))throw new TypeError("unusable");let t=sq(ee(this,vt)),r=new AbortController;if(this.signal.aborted)r.abort(this.signal.reason);else{let n=wm.get(this.signal);n===void 0&&(n=new Set,wm.set(this.signal,n));let i=new WeakRef(r);n.add(i),bm.addAbortListener(r.signal,Z7(i))}return oq(t,ee(this,pa),r.signal,tbe(ee(this,Ln)))}[K7.inspect.custom](t,r){r.depth===null&&(r.depth=2),r.colors??(r.colors=!0);let n={method:this.method,url:this.url,headers:this.headers,destination:this.destination,referrer:this.referrer,referrerPolicy:this.referrerPolicy,mode:this.mode,credentials:this.credentials,cache:this.cache,redirect:this.redirect,integrity:this.integrity,keepalive:this.keepalive,isReloadNavigation:this.isReloadNavigation,isHistoryNavigation:this.isHistoryNavigation,signal:this.signal};return`Request ${K7.formatWithOptions(r,n)}`}static setRequestSignal(t,r){return ft(t,$f,r),t}static getRequestDispatcher(t){return ee(t,pa)}static setRequestDispatcher(t,r){ft(t,pa,r)}static setRequestHeaders(t,r){ft(t,Ln,r)}static getRequestState(t){return ee(t,vt)}static setRequestState(t,r){ft(t,vt,r)}};$f=new WeakMap,pa=new WeakMap,Ln=new WeakMap,vt=new WeakMap;var Pn=gr,{setRequestSignal:ybe,getRequestDispatcher:mbe,setRequestDispatcher:Bbe,setRequestHeaders:Ibe,getRequestState:iq,setRequestState:bbe}=Pn;Reflect.deleteProperty(Pn,"setRequestSignal");Reflect.deleteProperty(Pn,"getRequestDispatcher");Reflect.deleteProperty(Pn,"setRequestDispatcher");Reflect.deleteProperty(Pn,"setRequestHeaders");Reflect.deleteProperty(Pn,"getRequestState");Reflect.deleteProperty(Pn,"setRequestState");ZIe(Pn,iq);function Sm(e){return{method:e.method??"GET",localURLsOnly:e.localURLsOnly??!1,unsafeRequest:e.unsafeRequest??!1,body:e.body??null,client:e.client??null,reservedClient:e.reservedClient??null,replacesClientId:e.replacesClientId??"",window:e.window??"client",keepalive:e.keepalive??!1,serviceWorkers:e.serviceWorkers??"all",initiator:e.initiator??"",destination:e.destination??"",priority:e.priority??null,origin:e.origin??"client",policyContainer:e.policyContainer??"client",referrer:e.referrer??"client",referrerPolicy:e.referrerPolicy??"",mode:e.mode??"no-cors",useCORSPreflightFlag:e.useCORSPreflightFlag??!1,credentials:e.credentials??"same-origin",useCredentials:e.useCredentials??!1,cache:e.cache??"default",redirect:e.redirect??"follow",integrity:e.integrity??"",cryptoGraphicsNonceMetadata:e.cryptoGraphicsNonceMetadata??"",parserMetadata:e.parserMetadata??"",reloadNavigation:e.reloadNavigation??!1,historyNavigation:e.historyNavigation??!1,userActivation:e.userActivation??!1,taintedOrigin:e.taintedOrigin??!1,redirectCount:e.redirectCount??0,responseTainting:e.responseTainting??"basic",preventNoCacheCacheControlHeaderModification:e.preventNoCacheCacheControlHeaderModification??!1,done:e.done??!1,timingAllowFailed:e.timingAllowFailed??!1,useURLCredentials:e.useURLCredentials??void 0,traversableForUserPrompts:e.traversableForUserPrompts??"client",urlList:e.urlList,url:e.urlList[0],headersList:e.headersList?new Cm(e.headersList):new Cm}}function sq(e){let t=Sm({...e,body:null});return e.body!=null&&(t.body=$Ie(e.body)),t}function oq(e,t,r,n){let i=new Pn(Qm);bbe(i,e),Bbe(i,t),ybe(i,r);let s=new eq(Qm);return Ibe(i,s),tq(s,e.headersList),Sv(s,n),i}Object.defineProperties(Pn.prototype,{method:br,url:br,headers:br,redirect:br,clone:br,signal:br,duplex:br,destination:br,body:br,bodyUsed:br,isHistoryNavigation:br,isReloadNavigation:br,keepalive:br,integrity:br,cache:br,credentials:br,attribute:br,referrerPolicy:br,referrer:br,mode:br,[Symbol.toStringTag]:{value:"Request",configurable:!0}});Fe.is.Request=Fe.util.MakeTypeAssertion(Pn);Fe.converters.RequestInfo=function(e){return typeof e=="string"?Fe.converters.USVString(e):Fe.is.Request(e)?e:Fe.converters.USVString(e)};Fe.converters.RequestInit=Fe.dictionaryConverter([{key:"method",converter:Fe.converters.ByteString},{key:"headers",converter:Fe.converters.HeadersInit},{key:"body",converter:Fe.nullableConverter(Fe.converters.BodyInit)},{key:"referrer",converter:Fe.converters.USVString},{key:"referrerPolicy",converter:Fe.converters.DOMString,allowedValues:sbe},{key:"mode",converter:Fe.converters.DOMString,allowedValues:abe},{key:"credentials",converter:Fe.converters.DOMString,allowedValues:Abe},{key:"cache",converter:Fe.converters.DOMString,allowedValues:fbe},{key:"redirect",converter:Fe.converters.DOMString,allowedValues:obe},{key:"integrity",converter:Fe.converters.DOMString},{key:"keepalive",converter:Fe.converters.boolean},{key:"signal",converter:Fe.nullableConverter(e=>Fe.converters.AbortSignal(e,"RequestInit","signal"))},{key:"window",converter:Fe.converters.any},{key:"duplex",converter:Fe.converters.DOMString,allowedValues:ube},{key:"dispatcher",converter:Fe.converters.any},{key:"priority",converter:Fe.converters.DOMString,allowedValues:["high","low","auto"],defaultValue:()=>"auto"}]);aq.exports={Request:Pn,makeRequest:Sm,fromInnerRequest:oq,cloneRequest:sq,getRequestDispatcher:mbe,getRequestState:iq}});var Rv=U((UFe,cq)=>{"use strict";var Aq=Symbol.for("undici.globalDispatcher.1"),{InvalidArgumentError:Cbe}=mr(),Qbe=Bv();uq()===void 0&&fq(new Qbe);function fq(e){if(!e||typeof e.dispatch!="function")throw new Cbe("Argument agent must implement Agent");Object.defineProperty(globalThis,Aq,{value:e,writable:!0,enumerable:!1,configurable:!1})}function uq(){return globalThis[Aq]}var wbe=["fetch","Headers","Response","Request","FormData","WebSocket","CloseEvent","ErrorEvent","MessageEvent","EventSource"];cq.exports={setGlobalDispatcher:fq,getGlobalDispatcher:uq,installedExports:wbe}});var mq=U((xFe,yq)=>{"use strict";var Sbe=Gt(),{runtimeFeatures:hq}=G_(),eu=new Map([["sha256",0],["sha384",1],["sha512",2]]),Dv;if(hq.has("crypto")){Dv=Nd();let e=Dv.getHashes();e.length===0&&eu.clear();for(let t of eu.keys())e.includes(t)===!1&&eu.delete(t)}else eu.clear();var lq=Map.prototype.get.bind(eu),Tv=Map.prototype.has.bind(eu),_be=hq.has("crypto")===!1||eu.size===0?()=>!0:(e,t)=>{let r=gq(t);if(r.length===0)return!0;let n=dq(r);for(let i of n){let s=i.alg,o=i.val,a=pq(s,e);if(Eq(a,o))return!0}return!1};function dq(e){let t=[],r=null;for(let n of e){if(Sbe(Tv(n.alg),"Invalid SRI hash algorithm token"),t.length===0){t.push(n),r=n;continue}let i=r.alg,s=lq(i),o=n.alg,a=lq(o);a<s||(a>s?(r=n,t[0]=n,t.length=1):t.push(n))}return t}function gq(e){let t=[];for(let r of e.split(" ")){let i=r.split("?",1)[0],s="",o=[i.slice(0,6),i.slice(7)],a=o[0];if(!Tv(a))continue;o[1]&&(s=o[1]);let A={alg:a,val:s};t.push(A)}return t}var pq=(e,t)=>Dv.hash(e,t,"base64");function Eq(e,t){let r=e.length;r!==0&&e[r-1]==="="&&(r-=1),r!==0&&e[r-1]==="="&&(r-=1);let n=t.length;if(n!==0&&t[n-1]==="="&&(n-=1),n!==0&&t[n-1]==="="&&(n-=1),r!==n)return!1;for(let i=0;i<r;++i)if(!(e[i]===t[i]||e[i]==="+"&&t[i]==="-"||e[i]==="/"&&t[i]==="_"))return!1;return!0}yq.exports={applyAlgorithmToBytes:pq,bytesMatch:_be,caseSensitiveMatch:Eq,isValidSRIHashAlgorithm:Tv,getStrongestMetadata:dq,parseMetadata:gq}});var Fq=U((LFe,Mq)=>{"use strict";var{makeNetworkError:Nt,makeAppropriateNetworkError:hg,filterResponse:Nv,makeResponse:_m,fromInnerResponse:vbe,getResponseState:Rbe}=wv(),{HeadersList:Mv}=cg(),{Request:Dbe,cloneRequest:Tbe,getRequestDispatcher:Nbe,getRequestState:Mbe}=vv(),ws=RE(),{makePolicyContainer:Fbe,clonePolicyContainer:kbe,requestBadPort:Ube,TAOCheck:xbe,appendRequestOriginHeader:Lbe,responseLocationURL:Pbe,requestCurrentURL:si,setRequestReferrerPolicyOnRedirect:Obe,tryUpgradeRequestToAPotentiallyTrustworthyURL:Hbe,createOpaqueTimingInfo:Pv,appendFetchMetadata:qbe,corsCheck:Gbe,crossOriginResourcePolicyCheck:Ybe,determineRequestsReferrer:Wbe,coarsenedSharedCurrentTime:dg,sameOrigin:xv,isCancelled:wA,isAborted:Bq,isErrorLike:Vbe,fullyReadBody:Jbe,readableStreamClose:jbe,urlIsLocal:zbe,urlIsHttpHttpsScheme:Tm,urlHasHttpsScheme:Kbe,clampAndCoarsenConnectionTimingInfo:Xbe,simpleRangeHeaderValue:Zbe,buildContentRange:$be,createInflate:eCe,extractMimeType:tCe,hasAuthenticationEntry:rCe,includesCredentials:Iq,isTraversableNavigable:nCe}=jf(),tu=Gt(),{safelyExtractBody:Nm,extractBody:bq}=Al(),{redirectStatusSet:Sq,nullBodyStatus:_q,safeMethodsSet:iCe,requestBodyHeader:sCe,subresourceSet:oCe}=td(),aCe=Zi(),{Readable:ACe,pipeline:fCe,finished:uCe,isErrored:cCe,isReadable:vm}=(ts(),Os(qt)),{addAbortListener:lCe,bufferToLowerCasedHeaderName:Cq}=Zt(),{dataURLProcessor:hCe,serializeAMimeType:dCe,minimizeSupportedMimeType:gCe}=yf(),{getGlobalDispatcher:pCe}=Rv(),{webidl:Ov}=lo(),{STATUS_CODES:Qq}=aE(),{bytesMatch:ECe}=mq(),{createDeferredPromise:yCe}=H_(),{isomorphicEncode:Rm}=Ef(),{runtimeFeatures:mCe}=C_(),BCe=mCe.has("zstd"),ICe=["GET","HEAD"],bCe=typeof __UNDICI_IS_NODE__<"u"||typeof esbuildDetection<"u"?"node":"undici",Fv,Dm=class extends aCe{constructor(t){super(),this.dispatcher=t,this.connection=null,this.dump=!1,this.state="ongoing"}terminate(t){this.state==="ongoing"&&(this.state="terminated",this.connection?.destroy(t),this.emit("terminated",t))}abort(t){this.state==="ongoing"&&(this.state="aborted",t||(t=new DOMException("The operation was aborted.","AbortError")),this.serializedAbortReason=t,this.connection?.destroy(t),this.emit("terminated",t))}};function CCe(e){vq(e,"fetch")}function QCe(e,t=void 0){Ov.argumentLengthCheck(arguments,1,"globalThis.fetch");let r=yCe(),n;try{n=new Dbe(e,t)}catch(l){return r.reject(l),r.promise}let i=Mbe(n);if(n.signal.aborted)return kv(r,i,null,n.signal.reason,null),r.promise;i.client.globalObject?.constructor?.name==="ServiceWorkerGlobalScope"&&(i.serviceWorkers="none");let o=null,a=!1,A=null;return lCe(n.signal,()=>{a=!0,tu(A!=null),A.abort(n.signal.reason);let l=o?.deref();kv(r,i,l,n.signal.reason,A.controller)}),A=Dq({request:i,processResponseEndOfBody:CCe,processResponse:l=>{if(!a){if(l.aborted){kv(r,i,o,A.serializedAbortReason,A.controller);return}if(l.type==="error"){r.reject(new TypeError("fetch failed",{cause:l.error}));return}o=new WeakRef(vbe(l,"immutable")),r.resolve(o.deref()),r=null}},dispatcher:Nbe(n),requestObject:n}),r.promise}function vq(e,t="other"){if(e.type==="error"&&e.aborted||!e.urlList?.length)return;let r=e.urlList[0],n=e.timingInfo,i=e.cacheState;Tm(r)&&n!==null&&(e.timingAllowPassed||(n=Pv({startTime:n.startTime}),i=""),n.endTime=dg(),e.timingInfo=n,Rq(n,r.href,t,globalThis,i,"",e.status))}var Rq=performance.markResourceTiming;function kv(e,t,r,n,i){if(e&&e.reject(n),t.body?.stream!=null&&vm(t.body.stream)&&t.body.stream.cancel(n).catch(o=>{if(o.code!=="ERR_INVALID_STATE")throw o}),r==null)return;let s=Rbe(r);s.body?.stream!=null&&vm(s.body.stream)&&i.error(n)}function Dq({request:e,processRequestBodyChunkLength:t,processRequestEndOfBody:r,processResponse:n,processResponseEndOfBody:i,processResponseConsumeBody:s,useParallelQueue:o=!1,dispatcher:a=pCe(),requestObject:A=null}){tu(a);let f=null,l=!1;e.client!=null&&(f=e.client.globalObject,l=e.client.crossOriginIsolatedCapability);let p=dg(l),I=Pv({startTime:p}),S={controller:new Dm(a),request:e,timingInfo:I,processRequestBodyChunkLength:t,processRequestEndOfBody:r,processResponse:n,processResponseConsumeBody:s,processResponseEndOfBody:i,taskDestination:f,crossOriginIsolatedCapability:l,requestObject:A};return tu(!e.body||e.body.stream),e.window==="client"&&(e.window=e.client?.globalObject?.constructor?.name==="Window"?e.client:"no-window"),e.origin==="client"&&(e.origin=e.client.origin),e.policyContainer==="client"&&(e.client!=null?e.policyContainer=kbe(e.client.policyContainer):e.policyContainer=Fbe()),e.headersList.contains("accept",!0)||e.headersList.append("accept","*/*",!0),e.headersList.contains("accept-language",!0)||e.headersList.append("accept-language","*",!0),e.priority,oCe.has(e.destination),Tq(S,!1),S.controller}async function Tq(e,t){try{let r=e.request,n=null;if(r.localURLsOnly&&!zbe(si(r))&&(n=Nt("local URLs only")),Hbe(r),Ube(r)==="blocked"&&(n=Nt("bad port")),r.referrerPolicy===""&&(r.referrerPolicy=r.policyContainer.referrerPolicy),r.referrer!=="no-referrer"&&(r.referrer=Wbe(r)),n===null){let s=si(r);xv(s,r.url)&&r.responseTainting==="basic"||s.protocol==="data:"||r.mode==="navigate"||r.mode==="websocket"?(r.responseTainting="basic",n=await wq(e)):r.mode==="same-origin"?n=Nt('request mode cannot be "same-origin"'):r.mode==="no-cors"?r.redirect!=="follow"?n=Nt('redirect mode cannot be "follow" for "no-cors" request'):(r.responseTainting="opaque",n=await wq(e)):Tm(si(r))?(r.responseTainting="cors",n=await Nq(e)):n=Nt("URL scheme must be a HTTP(S) scheme")}if(t)return n;n.status!==0&&!n.internalResponse&&(r.responseTainting,r.responseTainting==="basic"?n=Nv(n,"basic"):r.responseTainting==="cors"?n=Nv(n,"cors"):r.responseTainting==="opaque"?n=Nv(n,"opaque"):tu(!1));let i=n.status===0?n:n.internalResponse;if(i.urlList.length===0&&i.urlList.push(...r.urlList),r.timingAllowFailed||(n.timingAllowPassed=!0),n.type==="opaque"&&i.status===206&&i.rangeRequested&&!r.headers.contains("range",!0)&&(n=i=Nt()),n.status!==0&&(r.method==="HEAD"||r.method==="CONNECT"||_q.includes(i.status))&&(i.body=null,e.controller.dump=!0),r.integrity){let s=a=>Uv(e,Nt(a));if(r.responseTainting==="opaque"||n.body==null){s(n.error);return}let o=a=>{if(!ECe(a,r.integrity)){s("integrity mismatch");return}n.body=Nm(a)[0],Uv(e,n)};Jbe(n.body,o,s)}else Uv(e,n)}catch(r){e.controller.terminate(r)}}function wq(e){if(wA(e)&&e.request.redirectCount===0)return Promise.resolve(hg(e));let{request:t}=e,{protocol:r}=si(t);switch(r){case"about:":return Promise.resolve(Nt("about scheme is not supported"));case"blob:":{Fv||(Fv=Gr().resolveObjectURL);let n=si(t);if(n.search.length!==0)return Promise.resolve(Nt("NetworkError when attempting to fetch resource."));let i=Fv(n.toString());if(t.method!=="GET"||!Ov.is.Blob(i))return Promise.resolve(Nt("invalid method"));let s=_m(),o=i.size,a=Rm(`${o}`),A=i.type;if(t.headersList.contains("range",!0)){s.rangeRequested=!0;let f=t.headersList.get("range",!0),l=Zbe(f,!0);if(l==="failure")return Promise.resolve(Nt("failed to fetch the data URL"));let{rangeStartValue:p,rangeEndValue:I}=l;if(p===null)p=o-I,I=p+I-1;else{if(p>=o)return Promise.resolve(Nt("Range start is greater than the blob's size."));(I===null||I>=o)&&(I=o-1)}let S=i.slice(p,I+1,A),_=bq(S);s.body=_[0];let N=Rm(`${S.size}`),O=$be(p,I,o);s.status=206,s.statusText="Partial Content",s.headersList.set("content-length",N,!0),s.headersList.set("content-type",A,!0),s.headersList.set("content-range",O,!0)}else{let f=bq(i);s.statusText="OK",s.body=f[0],s.headersList.set("content-length",a,!0),s.headersList.set("content-type",A,!0)}return Promise.resolve(s)}case"data:":{let n=si(t),i=hCe(n);if(i==="failure")return Promise.resolve(Nt("failed to fetch the data URL"));let s=dCe(i.mimeType);return Promise.resolve(_m({statusText:"OK",headersList:[["content-type",{name:"Content-Type",value:s}]],body:Nm(i.body)[0]}))}case"file:":return Promise.resolve(Nt("not implemented... yet..."));case"http:":case"https:":return Nq(e).catch(n=>Nt(n));default:return Promise.resolve(Nt("unknown scheme"))}}function wCe(e,t){e.request.done=!0,e.processResponseDone!=null&&queueMicrotask(()=>e.processResponseDone(t))}function Uv(e,t){let r=e.timingInfo,n=()=>{let s=Date.now();e.request.destination==="document"&&(e.controller.fullTimingInfo=r),e.controller.reportTimingSteps=()=>{if(!Tm(e.request.url))return;r.endTime=s;let a=t.cacheState,A=t.bodyInfo;t.timingAllowPassed||(r=Pv(r),a="");let f=0;if(e.request.mode!=="navigator"||!t.hasCrossOriginRedirects){f=t.status;let l=tCe(t.headersList);l!=="failure"&&(A.contentType=gCe(l))}e.request.initiatorType!=null&&Rq(r,e.request.url.href,e.request.initiatorType,globalThis,a,A,f)};let o=()=>{e.request.done=!0,e.processResponseEndOfBody!=null&&queueMicrotask(()=>e.processResponseEndOfBody(t)),e.request.initiatorType!=null&&e.controller.reportTimingSteps()};queueMicrotask(()=>o())};e.processResponse!=null&&queueMicrotask(()=>{e.processResponse(t),e.processResponse=null});let i=t.type==="error"?t:t.internalResponse??t;i.body==null?n():uCe(i.body.stream,()=>{n()})}async function Nq(e){let t=e.request,r=null,n=null,i=e.timingInfo;if(t.serviceWorkers,r===null){if(t.redirect==="follow"&&(t.serviceWorkers="none"),n=r=await Lv(e),t.responseTainting==="cors"&&Gbe(t,r)==="failure")return Nt("cors failure");xbe(t,r)==="failure"&&(t.timingAllowFailed=!0)}return(t.responseTainting==="opaque"||r.type==="opaque")&&Ybe(t.origin,t.client,t.destination,n)==="blocked"?Nt("blocked"):(Sq.has(n.status)&&(t.redirect!=="manual"&&e.controller.connection.destroy(void 0,!1),t.redirect==="error"?r=Nt("unexpected redirect"):t.redirect==="manual"?r=n:t.redirect==="follow"?r=await SCe(e,r):tu(!1)),r.timingInfo=i,r)}function SCe(e,t){let r=e.request,n=t.internalResponse?t.internalResponse:t,i;try{if(i=Pbe(n,si(r).hash),i==null)return t}catch(o){return Promise.resolve(Nt(o))}if(!Tm(i))return Promise.resolve(Nt("URL scheme must be a HTTP(S) scheme"));if(r.redirectCount===20)return Promise.resolve(Nt("redirect count exceeded"));if(r.redirectCount+=1,r.mode==="cors"&&(i.username||i.password)&&!xv(r,i))return Promise.resolve(Nt('cross origin not allowed for request mode "cors"'));if(r.responseTainting==="cors"&&(i.username||i.password))return Promise.resolve(Nt('URL cannot contain credentials for request mode "cors"'));if(n.status!==303&&r.body!=null&&r.body.source==null)return Promise.resolve(Nt());if([301,302].includes(n.status)&&r.method==="POST"||n.status===303&&!ICe.includes(r.method)){r.method="GET",r.body=null;for(let o of sCe)r.headersList.delete(o)}xv(si(r),i)||(r.headersList.delete("authorization",!0),r.headersList.delete("proxy-authorization",!0),r.headersList.delete("cookie",!0),r.headersList.delete("host",!0)),r.body!=null&&(tu(r.body.source!=null),r.body=Nm(r.body.source)[0]);let s=e.timingInfo;return s.redirectEndTime=s.postRedirectStartTime=dg(e.crossOriginIsolatedCapability),s.redirectStartTime===0&&(s.redirectStartTime=s.startTime),r.urlList.push(i),Obe(r,n),Tq(e,!0)}async function Lv(e,t=!1,r=!1){let n=e.request,i=null,s=null,o=null,a=null,A=!1;n.window==="no-window"&&n.redirect==="error"?(i=e,s=n):(s=Tbe(n),i={...e},i.request=s);let f=n.credentials==="include"||n.credentials==="same-origin"&&n.responseTainting==="basic",l=s.body?s.body.length:null,p=null;if(s.body==null&&["POST","PUT"].includes(s.method)&&(p="0"),l!=null&&(p=Rm(`${l}`)),p!=null&&s.headersList.append("content-length",p,!0),l!=null&&s.keepalive,Ov.is.URL(s.referrer)&&s.headersList.append("referer",Rm(s.referrer.href),!0),Lbe(s),qbe(s),s.headersList.contains("user-agent",!0)||s.headersList.append("user-agent",bCe,!0),s.cache==="default"&&(s.headersList.contains("if-modified-since",!0)||s.headersList.contains("if-none-match",!0)||s.headersList.contains("if-unmodified-since",!0)||s.headersList.contains("if-match",!0)||s.headersList.contains("if-range",!0))&&(s.cache="no-store"),s.cache==="no-cache"&&!s.preventNoCacheCacheControlHeaderModification&&!s.headersList.contains("cache-control",!0)&&s.headersList.append("cache-control","max-age=0",!0),(s.cache==="no-store"||s.cache==="reload")&&(s.headersList.contains("pragma",!0)||s.headersList.append("pragma","no-cache",!0),s.headersList.contains("cache-control",!0)||s.headersList.append("cache-control","no-cache",!0)),s.headersList.contains("range",!0)&&s.headersList.append("accept-encoding","identity",!0),s.headersList.contains("accept-encoding",!0)||(Kbe(si(s))?s.headersList.append("accept-encoding","br, gzip, deflate",!0):s.headersList.append("accept-encoding","gzip, deflate",!0)),s.headersList.delete("host",!0),f&&!s.headersList.contains("authorization",!0)){let I=null;if(!(rCe(s)&&(s.useURLCredentials===void 0||!Iq(si(s))))){if(Iq(si(s))&&t){let{username:S,password:_}=si(s);I=`Basic ${Buffer.from(`${S}:${_}`).toString("base64")}`}}I!==null&&s.headersList.append("Authorization",I,!1)}if(a==null&&(s.cache="no-store"),s.cache!=="no-store"&&s.cache,o==null){if(s.cache==="only-if-cached")return Nt("only if cached");let I=await _Ce(i,f,r);!iCe.has(s.method)&&I.status>=200&&I.status<=399,A&&I.status,o==null&&(o=I)}if(o.urlList=[...s.urlList],s.headersList.contains("range",!0)&&(o.rangeRequested=!0),o.requestIncludesCredentials=f,o.status===401&&s.responseTainting!=="cors"&&f&&nCe(n.traversableForUserPrompts)){if(n.body!=null){if(n.body.source==null)return Nt("expected non-null body source");n.body=Nm(n.body.source)[0]}if(n.useURLCredentials===void 0||t)return wA(e)?hg(e):o;e.controller.connection.destroy(),o=await Lv(e,!0)}if(o.status===407)return n.window==="no-window"?Nt():wA(e)?hg(e):Nt("proxy authentication required");if(o.status===421&&!r&&(n.body==null||n.body.source!=null)){if(wA(e))return hg(e);e.controller.connection.destroy(),o=await Lv(e,t,!0)}return o}async function _Ce(e,t=!1,r=!1){tu(!e.controller.connection||e.controller.connection.destroyed),e.controller.connection={abort:null,destroyed:!1,destroy(_,N=!0){this.destroyed||(this.destroyed=!0,N&&this.abort?.(_??new DOMException("The operation was aborted.","AbortError")))}};let n=e.request,i=null,s=e.timingInfo;null==null&&(n.cache="no-store");let a=r?"yes":"no";n.mode;let A=null;if(n.body==null&&e.processRequestEndOfBody)queueMicrotask(()=>e.processRequestEndOfBody());else if(n.body!=null){let _=async function*(x){wA(e)||(yield x,e.processRequestBodyChunkLength?.(x.byteLength))},N=()=>{wA(e)||e.processRequestEndOfBody&&e.processRequestEndOfBody()},O=x=>{wA(e)||(x.name==="AbortError"?e.controller.abort():e.controller.terminate(x))};A=(async function*(){try{for await(let x of n.body.stream)yield*_(x);N()}catch(x){O(x)}})()}try{let{body:_,status:N,statusText:O,headersList:x,socket:G}=await S({body:A});if(G)i=_m({status:N,statusText:O,headersList:x,socket:G});else{let Y=_[Symbol.asyncIterator]();e.controller.next=()=>Y.next(),i=_m({status:N,statusText:O,headersList:x})}}catch(_){return _.name==="AbortError"?(e.controller.connection.destroy(),hg(e,_)):Nt(_)}let f=()=>e.controller.resume(),l=_=>{wA(e)||e.controller.abort(_)},p=new ReadableStream({start(_){e.controller.controller=_},pull:f,cancel:l,type:"bytes"});i.body={stream:p,source:null,length:null},e.controller.resume||e.controller.on("terminated",I),e.controller.resume=async()=>{for(;;){let _,N;try{let{done:x,value:G}=await e.controller.next();if(Bq(e))break;_=x?void 0:G}catch(x){e.controller.ended&&!s.encodedBodySize?_=void 0:(_=x,N=!0)}if(_===void 0){jbe(e.controller.controller),wCe(e,i);return}if(s.decodedBodySize+=_?.byteLength??0,N){e.controller.terminate(_);return}let O=new Uint8Array(_);if(O.byteLength&&e.controller.controller.enqueue(O),cCe(p)){e.controller.terminate();return}if(e.controller.controller.desiredSize<=0)return}};function I(_){Bq(e)?(i.aborted=!0,vm(p)&&e.controller.controller.error(e.controller.serializedAbortReason)):vm(p)&&e.controller.controller.error(new TypeError("terminated",{cause:Vbe(_)?_:void 0})),e.controller.connection.destroy()}return i;function S({body:_}){let N=si(n),O=e.controller.dispatcher,x=N.pathname+N.search,G=N.search.length===0&&N.href[N.href.length-N.hash.length-1]==="?";return new Promise((Y,X)=>O.dispatch({path:G?`${x}?`:x,origin:N.origin,method:n.method,body:O.isMockActive?n.body&&(n.body.source||n.body.stream):_,headers:n.headersList.entries,maxRedirections:0,upgrade:n.mode==="websocket"?"websocket":void 0},{body:null,abort:null,onConnect(Z){let{connection:j}=e.controller;s.finalConnectionTimingInfo=Xbe(void 0,s.postRedirectStartTime,e.crossOriginIsolatedCapability),j.destroyed?Z(new DOMException("The operation was aborted.","AbortError")):(e.controller.on("terminated",Z),this.abort=j.abort=Z),s.finalNetworkRequestStartTime=dg(e.crossOriginIsolatedCapability)},onResponseStarted(){s.finalNetworkResponseStartTime=dg(e.crossOriginIsolatedCapability)},onHeaders(Z,j,se,ie){if(Z<200)return!1;let ce=new Mv;for(let c=0;c<j.length;c+=2)ce.append(Cq(j[c]),j[c+1].toString("latin1"),!0);let H=ce.get("location",!0);this.body=new ACe({read:se});let E=H&&n.redirect==="follow"&&Sq.has(Z),v=[];if(n.method!=="HEAD"&&n.method!=="CONNECT"&&!_q.includes(Z)&&!E){let c=ce.get("content-encoding",!0),g=c?c.toLowerCase().split(","):[],w=5;if(g.length>w)return X(new Error(`too many content-encodings in response: ${g.length}, maximum allowed is ${w}`)),!0;for(let R=g.length-1;R>=0;--R){let C=g[R].trim();if(C==="x-gzip"||C==="gzip")v.push(ws.createGunzip({flush:ws.constants.Z_SYNC_FLUSH,finishFlush:ws.constants.Z_SYNC_FLUSH}));else if(C==="deflate")v.push(eCe({flush:ws.constants.Z_SYNC_FLUSH,finishFlush:ws.constants.Z_SYNC_FLUSH}));else if(C==="br")v.push(ws.createBrotliDecompress({flush:ws.constants.BROTLI_OPERATION_FLUSH,finishFlush:ws.constants.BROTLI_OPERATION_FLUSH}));else if(C==="zstd"&&BCe)v.push(ws.createZstdDecompress({flush:ws.constants.ZSTD_e_continue,finishFlush:ws.constants.ZSTD_e_end}));else{v.length=0;break}}}let b=this.onError.bind(this);return Y({status:Z,statusText:ie,headersList:ce,body:v.length?fCe(this.body,...v,c=>{c&&this.onError(c)}).on("error",b):this.body.on("error",b)}),!0},onData(Z){if(e.controller.dump)return;let j=Z;return s.encodedBodySize+=j.byteLength,this.body.push(j)},onComplete(){this.abort&&e.controller.off("terminated",this.abort),e.controller.ended=!0,this.body.push(null)},onError(Z){this.abort&&e.controller.off("terminated",this.abort),this.body?.destroy(Z),e.controller.terminate(Z),X(Z)},onRequestUpgrade(Z,j,se,ie){if(ie.session!=null&&j!==200||ie.session==null&&j!==101)return!1;let ce=new Mv;for(let[H,E]of Object.entries(se)){if(E==null)continue;let v=H.toLowerCase();if(Array.isArray(E))for(let b of E)ce.append(v,String(b),!0);else ce.append(v,String(E),!0)}return Y({status:j,statusText:Qq[j],headersList:ce,socket:ie}),!0},onUpgrade(Z,j,se){if(se.session!=null&&Z!==200||se.session==null&&Z!==101)return!1;let ie=new Mv;for(let ce=0;ce<j.length;ce+=2)ie.append(Cq(j[ce]),j[ce+1].toString("latin1"),!0);return Y({status:Z,statusText:Qq[Z],headersList:ie,socket:se}),!0}}))}}Mq.exports={fetch:QCe,Fetch:Dm,fetching:Dq,finalizeAndReportTiming:vq}});var Fl=hr(Gr());var vI={};EI(vI,{DH_CHECK_P_NOT_PRIME:()=>dZ,DH_CHECK_P_NOT_SAFE_PRIME:()=>hZ,DH_NOT_SUITABLE_GENERATOR:()=>pZ,DH_UNABLE_TO_CHECK_GENERATOR:()=>gZ,E2BIG:()=>Bz,EACCES:()=>Iz,EADDRINUSE:()=>bz,EADDRNOTAVAIL:()=>Cz,EAFNOSUPPORT:()=>Qz,EAGAIN:()=>wz,EALREADY:()=>Sz,EBADF:()=>_z,EBADMSG:()=>vz,EBUSY:()=>Rz,ECANCELED:()=>Dz,ECHILD:()=>Tz,ECONNABORTED:()=>Nz,ECONNREFUSED:()=>Mz,ECONNRESET:()=>Fz,EDEADLK:()=>kz,EDESTADDRREQ:()=>Uz,EDOM:()=>xz,EDQUOT:()=>Lz,EEXIST:()=>Pz,EFAULT:()=>Oz,EFBIG:()=>Hz,EHOSTUNREACH:()=>qz,EIDRM:()=>Gz,EILSEQ:()=>Yz,EINPROGRESS:()=>Wz,EINTR:()=>Vz,EINVAL:()=>Jz,EIO:()=>jz,EISCONN:()=>zz,EISDIR:()=>Kz,ELOOP:()=>Xz,EMFILE:()=>Zz,EMLINK:()=>$z,EMSGSIZE:()=>eK,EMULTIHOP:()=>tK,ENAMETOOLONG:()=>rK,ENETDOWN:()=>nK,ENETRESET:()=>iK,ENETUNREACH:()=>sK,ENFILE:()=>oK,ENGINE_METHOD_ALL:()=>cZ,ENGINE_METHOD_CIPHERS:()=>oZ,ENGINE_METHOD_DH:()=>rZ,ENGINE_METHOD_DIGESTS:()=>aZ,ENGINE_METHOD_DSA:()=>tZ,ENGINE_METHOD_ECDH:()=>iZ,ENGINE_METHOD_ECDSA:()=>sZ,ENGINE_METHOD_NONE:()=>lZ,ENGINE_METHOD_PKEY_ASN1_METHS:()=>uZ,ENGINE_METHOD_PKEY_METHS:()=>fZ,ENGINE_METHOD_RAND:()=>nZ,ENGINE_METHOD_STORE:()=>AZ,ENOBUFS:()=>aK,ENODATA:()=>AK,ENODEV:()=>fK,ENOENT:()=>uK,ENOEXEC:()=>cK,ENOLCK:()=>lK,ENOLINK:()=>hK,ENOMEM:()=>dK,ENOMSG:()=>gK,ENOPROTOOPT:()=>pK,ENOSPC:()=>EK,ENOSR:()=>yK,ENOSTR:()=>mK,ENOSYS:()=>BK,ENOTCONN:()=>IK,ENOTDIR:()=>bK,ENOTEMPTY:()=>CK,ENOTSOCK:()=>QK,ENOTSUP:()=>wK,ENOTTY:()=>SK,ENXIO:()=>_K,EOPNOTSUPP:()=>vK,EOVERFLOW:()=>RK,EPERM:()=>DK,EPIPE:()=>TK,EPROTO:()=>NK,EPROTONOSUPPORT:()=>MK,EPROTOTYPE:()=>FK,ERANGE:()=>kK,EROFS:()=>UK,ESPIPE:()=>xK,ESRCH:()=>LK,ESTALE:()=>PK,ETIME:()=>OK,ETIMEDOUT:()=>HK,ETXTBSY:()=>qK,EWOULDBLOCK:()=>GK,EXDEV:()=>YK,F_OK:()=>_Z,NPN_ENABLED:()=>EZ,O_APPEND:()=>rz,O_CREAT:()=>Zj,O_DIRECTORY:()=>nz,O_EXCL:()=>$j,O_NOCTTY:()=>ez,O_NOFOLLOW:()=>iz,O_NONBLOCK:()=>az,O_RDONLY:()=>Hj,O_RDWR:()=>Gj,O_SYMLINK:()=>oz,O_SYNC:()=>sz,O_TRUNC:()=>tz,O_WRONLY:()=>qj,POINT_CONVERSION_COMPRESSED:()=>QZ,POINT_CONVERSION_HYBRID:()=>SZ,POINT_CONVERSION_UNCOMPRESSED:()=>wZ,RSA_NO_PADDING:()=>BZ,RSA_PKCS1_OAEP_PADDING:()=>IZ,RSA_PKCS1_PADDING:()=>yZ,RSA_PKCS1_PSS_PADDING:()=>CZ,RSA_SSLV23_PADDING:()=>mZ,RSA_X931_PADDING:()=>bZ,R_OK:()=>vZ,SIGABRT:()=>KK,SIGALRM:()=>sX,SIGBUS:()=>ZK,SIGCHLD:()=>aX,SIGCONT:()=>AX,SIGFPE:()=>$K,SIGHUP:()=>WK,SIGILL:()=>jK,SIGINT:()=>VK,SIGIO:()=>mX,SIGIOT:()=>XK,SIGKILL:()=>eX,SIGPIPE:()=>iX,SIGPROF:()=>EX,SIGQUIT:()=>JK,SIGSEGV:()=>rX,SIGSTOP:()=>fX,SIGSYS:()=>BX,SIGTERM:()=>oX,SIGTRAP:()=>zK,SIGTSTP:()=>uX,SIGTTIN:()=>cX,SIGTTOU:()=>lX,SIGURG:()=>hX,SIGUSR1:()=>tX,SIGUSR2:()=>nX,SIGVTALRM:()=>pX,SIGWINCH:()=>yX,SIGXCPU:()=>dX,SIGXFSZ:()=>gX,SSL_OP_ALL:()=>IX,SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION:()=>bX,SSL_OP_CIPHER_SERVER_PREFERENCE:()=>CX,SSL_OP_CISCO_ANYCONNECT:()=>QX,SSL_OP_COOKIE_EXCHANGE:()=>wX,SSL_OP_CRYPTOPRO_TLSEXT_BUG:()=>SX,SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS:()=>_X,SSL_OP_EPHEMERAL_RSA:()=>vX,SSL_OP_LEGACY_SERVER_CONNECT:()=>RX,SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER:()=>DX,SSL_OP_MICROSOFT_SESS_ID_BUG:()=>TX,SSL_OP_MSIE_SSLV2_RSA_PADDING:()=>NX,SSL_OP_NETSCAPE_CA_DN_BUG:()=>MX,SSL_OP_NETSCAPE_CHALLENGE_BUG:()=>FX,SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG:()=>kX,SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG:()=>UX,SSL_OP_NO_COMPRESSION:()=>xX,SSL_OP_NO_QUERY_MTU:()=>LX,SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION:()=>PX,SSL_OP_NO_SSLv2:()=>OX,SSL_OP_NO_SSLv3:()=>HX,SSL_OP_NO_TICKET:()=>qX,SSL_OP_NO_TLSv1:()=>GX,SSL_OP_NO_TLSv1_1:()=>YX,SSL_OP_NO_TLSv1_2:()=>WX,SSL_OP_PKCS1_CHECK_1:()=>VX,SSL_OP_PKCS1_CHECK_2:()=>JX,SSL_OP_SINGLE_DH_USE:()=>jX,SSL_OP_SINGLE_ECDH_USE:()=>zX,SSL_OP_SSLEAY_080_CLIENT_DH_BUG:()=>KX,SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG:()=>XX,SSL_OP_TLS_BLOCK_PADDING_BUG:()=>ZX,SSL_OP_TLS_D5_BUG:()=>$X,SSL_OP_TLS_ROLLBACK_BUG:()=>eZ,S_IFBLK:()=>jj,S_IFCHR:()=>Jj,S_IFDIR:()=>Vj,S_IFIFO:()=>zj,S_IFLNK:()=>Kj,S_IFMT:()=>Yj,S_IFREG:()=>Wj,S_IFSOCK:()=>Xj,S_IRGRP:()=>hz,S_IROTH:()=>Ez,S_IRUSR:()=>fz,S_IRWXG:()=>lz,S_IRWXO:()=>pz,S_IRWXU:()=>Az,S_IWGRP:()=>dz,S_IWOTH:()=>yz,S_IWUSR:()=>uz,S_IXGRP:()=>gz,S_IXOTH:()=>mz,S_IXUSR:()=>cz,UV_UDP_REUSEADDR:()=>TZ,W_OK:()=>RZ,X_OK:()=>DZ,default:()=>NZ});var Hj=0,qj=1,Gj=2,Yj=61440,Wj=32768,Vj=16384,Jj=8192,jj=24576,zj=4096,Kj=40960,Xj=49152,Zj=512,$j=2048,ez=131072,tz=1024,rz=8,nz=1048576,iz=256,sz=128,oz=2097152,az=4,Az=448,fz=256,uz=128,cz=64,lz=56,hz=32,dz=16,gz=8,pz=7,Ez=4,yz=2,mz=1,Bz=7,Iz=13,bz=48,Cz=49,Qz=47,wz=35,Sz=37,_z=9,vz=94,Rz=16,Dz=89,Tz=10,Nz=53,Mz=61,Fz=54,kz=11,Uz=39,xz=33,Lz=69,Pz=17,Oz=14,Hz=27,qz=65,Gz=90,Yz=92,Wz=36,Vz=4,Jz=22,jz=5,zz=56,Kz=21,Xz=62,Zz=24,$z=31,eK=40,tK=95,rK=63,nK=50,iK=52,sK=51,oK=23,aK=55,AK=96,fK=19,uK=2,cK=8,lK=77,hK=97,dK=12,gK=91,pK=42,EK=28,yK=98,mK=99,BK=78,IK=57,bK=20,CK=66,QK=38,wK=45,SK=25,_K=6,vK=102,RK=84,DK=1,TK=32,NK=100,MK=43,FK=41,kK=34,UK=30,xK=29,LK=3,PK=70,OK=101,HK=60,qK=26,GK=35,YK=18,WK=1,VK=2,JK=3,jK=4,zK=5,KK=6,XK=6,ZK=10,$K=8,eX=9,tX=30,rX=11,nX=31,iX=13,sX=14,oX=15,aX=20,AX=19,fX=17,uX=18,cX=21,lX=22,hX=16,dX=24,gX=25,pX=26,EX=27,yX=28,mX=23,BX=12,IX=2147486719,bX=262144,CX=4194304,QX=32768,wX=8192,SX=2147483648,_X=2048,vX=0,RX=4,DX=32,TX=1,NX=0,MX=536870912,FX=2,kX=1073741824,UX=8,xX=131072,LX=4096,PX=65536,OX=16777216,HX=33554432,qX=16384,GX=67108864,YX=268435456,WX=134217728,VX=0,JX=0,jX=1048576,zX=524288,KX=128,XX=0,ZX=512,$X=256,eZ=8388608,tZ=2,rZ=4,nZ=8,iZ=16,sZ=32,oZ=64,aZ=128,AZ=256,fZ=512,uZ=1024,cZ=65535,lZ=0,hZ=2,dZ=1,gZ=4,pZ=8,EZ=1,yZ=1,mZ=2,BZ=3,IZ=4,bZ=5,CZ=6,QZ=2,wZ=4,SZ=6,_Z=0,vZ=4,RZ=2,DZ=1,TZ=4,NZ={O_RDONLY:Hj,O_WRONLY:qj,O_RDWR:Gj,S_IFMT:Yj,S_IFREG:Wj,S_IFDIR:Vj,S_IFCHR:Jj,S_IFBLK:jj,S_IFIFO:zj,S_IFLNK:Kj,S_IFSOCK:Xj,O_CREAT:Zj,O_EXCL:$j,O_NOCTTY:ez,O_TRUNC:tz,O_APPEND:rz,O_DIRECTORY:nz,O_NOFOLLOW:iz,O_SYNC:sz,O_SYMLINK:oz,O_NONBLOCK:az,S_IRWXU:Az,S_IRUSR:fz,S_IWUSR:uz,S_IXUSR:cz,S_IRWXG:lz,S_IRGRP:hz,S_IWGRP:dz,S_IXGRP:gz,S_IRWXO:pz,S_IROTH:Ez,S_IWOTH:yz,S_IXOTH:mz,E2BIG:Bz,EACCES:Iz,EADDRINUSE:bz,EADDRNOTAVAIL:Cz,EAFNOSUPPORT:Qz,EAGAIN:wz,EALREADY:Sz,EBADF:_z,EBADMSG:vz,EBUSY:Rz,ECANCELED:Dz,ECHILD:Tz,ECONNABORTED:Nz,ECONNREFUSED:Mz,ECONNRESET:Fz,EDEADLK:kz,EDESTADDRREQ:Uz,EDOM:xz,EDQUOT:Lz,EEXIST:Pz,EFAULT:Oz,EFBIG:Hz,EHOSTUNREACH:qz,EIDRM:Gz,EILSEQ:Yz,EINPROGRESS:Wz,EINTR:Vz,EINVAL:Jz,EIO:jz,EISCONN:zz,EISDIR:Kz,ELOOP:Xz,EMFILE:Zz,EMLINK:$z,EMSGSIZE:eK,EMULTIHOP:tK,ENAMETOOLONG:rK,ENETDOWN:nK,ENETRESET:iK,ENETUNREACH:sK,ENFILE:oK,ENOBUFS:aK,ENODATA:AK,ENODEV:fK,ENOENT:uK,ENOEXEC:cK,ENOLCK:lK,ENOLINK:hK,ENOMEM:dK,ENOMSG:gK,ENOPROTOOPT:pK,ENOSPC:EK,ENOSR:yK,ENOSTR:mK,ENOSYS:BK,ENOTCONN:IK,ENOTDIR:bK,ENOTEMPTY:CK,ENOTSOCK:QK,ENOTSUP:wK,ENOTTY:SK,ENXIO:_K,EOPNOTSUPP:vK,EOVERFLOW:RK,EPERM:DK,EPIPE:TK,EPROTO:NK,EPROTONOSUPPORT:MK,EPROTOTYPE:FK,ERANGE:kK,EROFS:UK,ESPIPE:xK,ESRCH:LK,ESTALE:PK,ETIME:OK,ETIMEDOUT:HK,ETXTBSY:qK,EWOULDBLOCK:GK,EXDEV:YK,SIGHUP:WK,SIGINT:VK,SIGQUIT:JK,SIGILL:jK,SIGTRAP:zK,SIGABRT:KK,SIGIOT:XK,SIGBUS:ZK,SIGFPE:$K,SIGKILL:eX,SIGUSR1:tX,SIGSEGV:rX,SIGUSR2:nX,SIGPIPE:iX,SIGALRM:sX,SIGTERM:oX,SIGCHLD:aX,SIGCONT:AX,SIGSTOP:fX,SIGTSTP:uX,SIGTTIN:cX,SIGTTOU:lX,SIGURG:hX,SIGXCPU:dX,SIGXFSZ:gX,SIGVTALRM:pX,SIGPROF:EX,SIGWINCH:yX,SIGIO:mX,SIGSYS:BX,SSL_OP_ALL:IX,SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION:bX,SSL_OP_CIPHER_SERVER_PREFERENCE:CX,SSL_OP_CISCO_ANYCONNECT:QX,SSL_OP_COOKIE_EXCHANGE:wX,SSL_OP_CRYPTOPRO_TLSEXT_BUG:SX,SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS:_X,SSL_OP_EPHEMERAL_RSA:vX,SSL_OP_LEGACY_SERVER_CONNECT:RX,SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER:DX,SSL_OP_MICROSOFT_SESS_ID_BUG:TX,SSL_OP_MSIE_SSLV2_RSA_PADDING:NX,SSL_OP_NETSCAPE_CA_DN_BUG:MX,SSL_OP_NETSCAPE_CHALLENGE_BUG:FX,SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG:kX,SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG:UX,SSL_OP_NO_COMPRESSION:xX,SSL_OP_NO_QUERY_MTU:LX,SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION:PX,SSL_OP_NO_SSLv2:OX,SSL_OP_NO_SSLv3:HX,SSL_OP_NO_TICKET:qX,SSL_OP_NO_TLSv1:GX,SSL_OP_NO_TLSv1_1:YX,SSL_OP_NO_TLSv1_2:WX,SSL_OP_PKCS1_CHECK_1:VX,SSL_OP_PKCS1_CHECK_2:JX,SSL_OP_SINGLE_DH_USE:jX,SSL_OP_SINGLE_ECDH_USE:zX,SSL_OP_SSLEAY_080_CLIENT_DH_BUG:KX,SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG:XX,SSL_OP_TLS_BLOCK_PADDING_BUG:ZX,SSL_OP_TLS_D5_BUG:$X,SSL_OP_TLS_ROLLBACK_BUG:eZ,ENGINE_METHOD_DSA:tZ,ENGINE_METHOD_DH:rZ,ENGINE_METHOD_RAND:nZ,ENGINE_METHOD_ECDH:iZ,ENGINE_METHOD_ECDSA:sZ,ENGINE_METHOD_CIPHERS:oZ,ENGINE_METHOD_DIGESTS:aZ,ENGINE_METHOD_STORE:AZ,ENGINE_METHOD_PKEY_METHS:fZ,ENGINE_METHOD_PKEY_ASN1_METHS:uZ,ENGINE_METHOD_ALL:cZ,ENGINE_METHOD_NONE:lZ,DH_CHECK_P_NOT_SAFE_PRIME:hZ,DH_CHECK_P_NOT_PRIME:dZ,DH_UNABLE_TO_CHECK_GENERATOR:gZ,DH_NOT_SUITABLE_GENERATOR:pZ,NPN_ENABLED:EZ,RSA_PKCS1_PADDING:yZ,RSA_SSLV23_PADDING:mZ,RSA_NO_PADDING:BZ,RSA_PKCS1_OAEP_PADDING:IZ,RSA_X931_PADDING:bZ,RSA_PKCS1_PSS_PADDING:CZ,POINT_CONVERSION_COMPRESSED:QZ,POINT_CONVERSION_UNCOMPRESSED:wZ,POINT_CONVERSION_HYBRID:SZ,F_OK:_Z,R_OK:vZ,W_OK:RZ,X_OK:DZ,UV_UDP_REUSEADDR:TZ};var vCe=hr(Zi()),Ug=hr(HD()),RCe=hr(DI());NI();ts();var DCe=hr(sf()),Cu=hr(I4()),NB=hr(Yr());var Wr=hr(C4()),hC=class{constructor(){let t=new globalThis.TextEncoder,r=new Wr.TransformStream({transform(n,i){i.enqueue(t.encode(n))}});this.encoding="utf-8",this.readable=r.readable,this.writable=r.writable}},dC=class{constructor(t="utf-8",r=void 0){let n=new globalThis.TextDecoder(t,r),i=new Wr.TransformStream({transform(s,o){let a=n.decode(s,{stream:!0});a.length>0&&o.enqueue(a)},flush(s){let o=n.decode();o.length>0&&s.enqueue(o)}});this.encoding=n.encoding,this.fatal=n.fatal,this.ignoreBOM=n.ignoreBOM,this.readable=i.readable,this.writable=i.writable}},Pp=typeof globalThis.TextEncoderStream=="function"?globalThis.TextEncoderStream:hC,Op=typeof globalThis.TextDecoderStream=="function"?globalThis.TextDecoderStream:dC;typeof globalThis.ReadableStream>"u"&&(globalThis.ReadableStream=Wr.ReadableStream);typeof globalThis.WritableStream>"u"&&(globalThis.WritableStream=Wr.WritableStream);typeof globalThis.TransformStream>"u"&&(globalThis.TransformStream=Wr.TransformStream);typeof globalThis.TextEncoderStream>"u"&&(globalThis.TextEncoderStream=Pp);typeof globalThis.TextDecoderStream>"u"&&(globalThis.TextDecoderStream=Op);var Cg=hr(r6()),m1=hr(Bv()),B1=hr(cm()),Vm=hr(Fq()),B2=hr(Rv()),Eu=hr(cg()),yu=hr(vv()),mu=hr(wv()),I1=hr(lo());var sY=e=>{throw TypeError(e)},oY=(e,t,r)=>t.has(e)||sY("Cannot "+r),Vt=(e,t,r)=>(oY(e,t,"read from private field"),r?r.call(e):t.get(e)),kq=(e,t,r)=>t.has(e)?sY("Cannot add the same private member more than once"):t instanceof WeakSet?t.add(e):t.set(e,r),Uq=(e,t,r,n)=>(oY(e,t,"write to private field"),n?n.call(e,r):t.set(e,r),r),xq=globalThis.AbortController,Lq=globalThis.AbortSignal,b1=Fl.Buffer??Fl.default?.Buffer??Fl.default;function Mm(e){return typeof e=="string"&&e.toLowerCase()==="base64url"?"base64":e}function TCe(e){return String(e).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/g,"")}function NCe(e){if(typeof e!="function"||e.__agentOSBase64UrlPatched)return;let t=typeof e.isEncoding=="function"?e.isEncoding.bind(e):null,r=typeof e.byteLength=="function"?e.byteLength.bind(e):null,n=typeof e.prototype?.toString=="function"?e.prototype.toString:null,i=typeof e.prototype?.write=="function"?e.prototype.write:null;e.isEncoding=function(o){return typeof o=="string"&&o.toLowerCase()==="base64url"||t?.(o)===!0},r&&(e.byteLength=function(o,a,...A){return r(o,Mm(a),...A)}),n&&(e.prototype.toString=function(o,...a){return typeof o=="string"&&o.toLowerCase()==="base64url"?TCe(n.call(this,"base64",...a)):n.call(this,o,...a)}),i&&(e.prototype.write=function(o,a,A,f){return typeof a=="string"?a=Mm(a):typeof A=="string"?A=Mm(A):typeof f=="string"&&(f=Mm(f)),i.call(this,o,a,A,f)}),e.__agentOSBase64UrlPatched=!0}NCe(b1);typeof b1=="function"&&(globalThis.Buffer=b1);var El=NB.types??NB.default?.types,MCe=new Map([["[object Int8Array]",Int8Array],["[object Uint8Array]",Uint8Array],["[object Uint8ClampedArray]",Uint8ClampedArray],["[object Int16Array]",Int16Array],["[object Uint16Array]",Uint16Array],["[object Int32Array]",Int32Array],["[object Uint32Array]",Uint32Array],["[object Float32Array]",Float32Array],["[object Float64Array]",Float64Array],["[object BigInt64Array]",BigInt64Array],["[object BigUint64Array]",BigUint64Array]]);function Pq(e="The object could not be cloned."){if(typeof globalThis.DOMException=="function")return new globalThis.DOMException(e,"DataCloneError");let t=new Error(e);return t.name="DataCloneError",t.code=25,t}function FCe(e){let t=new ArrayBuffer(e.byteLength);return new Uint8Array(t).set(new Uint8Array(e)),t}function _A(e,t){if(e===null)return e;let r=typeof e;if(r==="function"||r==="symbol")throw Pq();if(r!=="object")return e;let n=t.get(e);if(n!==void 0)return n;let i=Object.prototype.toString.call(e),s=MCe.get(i);if(s){let o=_A(e.buffer,t),a=new s(o,e.byteOffset,e.length);return t.set(e,a),a}if(i==="[object ArrayBuffer]"){let o=FCe(e);return t.set(e,o),o}if(i==="[object DataView]"){let o=_A(e.buffer,t),a=new DataView(o,e.byteOffset,e.byteLength);return t.set(e,a),a}if(i==="[object Date]"){let o=new Date(e.getTime());return t.set(e,o),o}if(i==="[object RegExp]"){let o=new RegExp(e.source,e.flags);return o.lastIndex=e.lastIndex,t.set(e,o),o}if(i==="[object Map]"){let o=new Map;t.set(e,o);for(let[a,A]of e.entries())o.set(_A(a,t),_A(A,t));return o}if(i==="[object Set]"){let o=new Set;t.set(e,o);for(let a of e.values())o.add(_A(a,t));return o}if(i==="[object Array]"){let o=new Array(e.length);t.set(e,o);for(let a of Object.keys(e))o[a]=_A(e[a],t);return o}if(i==="[object Object]"){let o=Object.getPrototypeOf(e)===null?Object.create(null):{};t.set(e,o);for(let a of Object.keys(e))o[a]=_A(e[a],t);return o}throw Pq()}function kCe(e,t=void 0){return t!=null&&typeof t=="object"&&"transfer"in t&&t.transfer,_A(e,new Map)}if(El&&typeof El.isProxy!="function")El.isProxy=()=>!1;else if(El)try{El.isProxy({})}catch{El.isProxy=()=>!1}function UCe(e){if(typeof e=="boolean")return{capture:e,once:!1,passive:!1};if(e==null)return{capture:!1,once:!1,passive:!1};let t=Object(e);return{capture:!!t.capture,once:!!t.once,passive:!!t.passive,signal:t.signal}}function xCe(e){return typeof e=="boolean"?e:e==null?!1:!!Object(e).capture}function LCe(e){return typeof e=="object"&&e!==null&&"aborted"in e&&typeof e.addEventListener=="function"&&typeof e.removeEventListener=="function"}var Cl,aY=(Cl=class{constructor(e,t){y(this,"type");y(this,"bubbles");y(this,"cancelable");y(this,"composed");y(this,"detail",null);y(this,"defaultPrevented",!1);y(this,"target",null);y(this,"currentTarget",null);y(this,"eventPhase",0);y(this,"returnValue",!0);y(this,"cancelBubble",!1);y(this,"timeStamp",Date.now());y(this,"isTrusted",!1);y(this,"srcElement",null);y(this,"inPassiveListener",!1);y(this,"propagationStopped",!1);y(this,"immediatePropagationStopped",!1);if(arguments.length===0)throw new TypeError("The event type must be provided");let r=t==null?{}:Object(t);this.type=String(e),this.bubbles=!!r.bubbles,this.cancelable=!!r.cancelable,this.composed=!!r.composed}get[Symbol.toStringTag](){return"Event"}preventDefault(){this.cancelable&&!this.inPassiveListener&&(this.defaultPrevented=!0,this.returnValue=!1)}stopPropagation(){this.propagationStopped=!0,this.cancelBubble=!0}stopImmediatePropagation(){this.propagationStopped=!0,this.immediatePropagationStopped=!0,this.cancelBubble=!0}composedPath(){return this.target?[this.target]:[]}_setPassive(e){this.inPassiveListener=e}_isPropagationStopped(){return this.propagationStopped}_isImmediatePropagationStopped(){return this.immediatePropagationStopped}},y(Cl,"NONE",0),y(Cl,"CAPTURING_PHASE",1),y(Cl,"AT_TARGET",2),y(Cl,"BUBBLING_PHASE",3),Cl),PCe=class extends aY{constructor(e,t){super(e,t);let r=t==null?null:Object(t);this.detail=r&&"detail"in r?r.detail:null}get[Symbol.toStringTag](){return"CustomEvent"}},OCe=class{constructor(){y(this,"listeners",new Map)}addEventListener(e,t,r){let n=UCe(r);if(n.signal!==void 0&&!LCe(n.signal))throw new TypeError('The "signal" option must be an instance of AbortSignal.');if(t==null||typeof t!="function"&&(typeof t!="object"||t===null)||n.signal?.aborted)return;let i=this.listeners.get(e)??[];if(i.find(a=>a.listener===t&&a.capture===n.capture))return;let o={listener:t,capture:n.capture,once:n.once,passive:n.passive,kind:typeof t=="function"?"function":"object",signal:n.signal};n.signal&&(o.abortListener=()=>{this.removeEventListener(e,t,n.capture)},n.signal.addEventListener("abort",o.abortListener,{once:!0})),i.push(o),this.listeners.set(e,i)}removeEventListener(e,t,r){if(t==null)return;let n=xCe(r),i=this.listeners.get(e);if(!i)return;let s=i.filter(o=>{let a=o.listener===t&&o.capture===n;return a&&o.signal&&o.abortListener&&o.signal.removeEventListener("abort",o.abortListener),!a});if(s.length===0){this.listeners.delete(e);return}this.listeners.set(e,s)}dispatchEvent(e){if(typeof e!="object"||e===null||typeof e.type!="string")throw new TypeError("Argument 1 must be an Event");let t=e,r=(this.listeners.get(t.type)??[]).slice();t.target=this,t.currentTarget=this,t.eventPhase=2;for(let n of r)if(this.listeners.get(t.type)?.includes(n)){if(n.once&&this.removeEventListener(t.type,n.listener,n.capture),t._setPassive(n.passive),n.kind==="function")n.listener.call(this,t);else{let s=n.listener.handleEvent;typeof s=="function"&&s.call(n.listener,t)}if(t._setPassive(!1),t._isImmediatePropagationStopped()||t._isPropagationStopped())break}return t.currentTarget=null,t.eventPhase=0,!t.defaultPrevented}},kl=aY,I2=PCe,MB=OCe,Ro=typeof Lq=="function"?Lq:class extends MB{constructor(){super(),this.aborted=!1,this.reason=void 0}throwIfAborted(){if(this.aborted)throw this.reason instanceof Error?this.reason:new Error(String(this.reason??"AbortError"))}},Su=typeof xq=="function"?xq:class{constructor(){this.signal=new Ro}abort(e){this.signal.aborted||(this.signal.aborted=!0,this.signal.reason=e,this.signal.dispatchEvent(new kl("abort")))}};function b2(e,t){if(typeof e=="function")try{e.name!==t&&Object.defineProperty(e,"name",{configurable:!0,value:t})}catch{}}b2(Ro,"AbortSignal");b2(Su,"AbortController");try{let e=Object.getPrototypeOf(new Su().signal)?.constructor;b2(e,"AbortSignal")}catch{}try{globalThis.AbortSignal=Ro}catch{}try{globalThis.AbortController=Su}catch{}function AY(e){if(e!==void 0)return e;if(typeof globalThis.DOMException=="function")return new globalThis.DOMException("This operation was aborted","AbortError");let t=new Error("This operation was aborted");return t.name="AbortError",t}function HCe(e){let t=new Su;return t.abort(AY(e)),t.signal}function qCe(e){if(typeof e!="number")throw new TypeError(`The "delay" argument must be of type number. Received ${typeof e}`);if(!Number.isFinite(e)||e<0)throw new RangeError(`The value of "delay" is out of range. It must be >= 0. Received ${String(e)}`);return Math.trunc(e)}typeof Ro.abort!="function"&&Object.defineProperty(Ro,"abort",{configurable:!0,writable:!0,value(e=void 0){return HCe(e)}});typeof Ro.timeout!="function"&&Object.defineProperty(Ro,"timeout",{configurable:!0,writable:!0,value(e){let t=qCe(e),r=new Su,n=setTimeout(()=>{r.abort(AY())},t);return typeof n?.unref=="function"&&n.unref(),r.signal.addEventListener("abort",()=>{clearTimeout(n)},{once:!0}),r.signal}});typeof Ro.any!="function"&&Object.defineProperty(Ro,"any",{configurable:!0,writable:!0,value(e){if(!e||typeof e[Symbol.iterator]!="function")throw new TypeError('The "signals" argument must be an iterable');let t=Array.from(e),r=new Su;if(t.length===0)return r.signal;let n=[],i=s=>{for(;n.length>0;){let[o,a]=n.pop();o.removeEventListener?.("abort",a)}r.abort(s.reason)};for(let s of t){if(!s||typeof s.aborted!="boolean"||typeof s.addEventListener!="function")throw new TypeError('The "signals" argument must contain AbortSignal instances');if(s.aborted)return i(s),r.signal;let o=()=>i(s);n.push([s,o]),s.addEventListener("abort",o,{once:!0})}return r.signal}});var GCe=class{constructor(e={}){this._sink=e}getWriter(){let e=this._sink;return{write(t){return Promise.resolve(typeof e.write=="function"?e.write(t):void 0)},close(){return Promise.resolve(typeof e.close=="function"?e.close():void 0)},releaseLock(){}}}},YCe=class{constructor(e={}){this._queue=[],this._pending=[],this._closed=!1,this._error=null;let t=()=>{for(;this._pending.length>0;){let n=this._pending.shift();if(this._error){n.reject(this._error);continue}if(this._queue.length>0){n.resolve({value:this._queue.shift(),done:!1});continue}if(this._closed){n.resolve({value:void 0,done:!0});continue}this._pending.unshift(n);break}},r={enqueue:n=>{this._closed||this._error||(this._queue.push(n),t())},close:()=>{this._closed||this._error||(this._closed=!0,t())},error:n=>{this._closed||this._error||(this._error=n instanceof Error?n:new Error(String(n)),t())}};typeof e.start=="function"&&Promise.resolve().then(()=>e.start(r)).catch(n=>r.error(n))}getReader(){return{read:()=>this._error?Promise.reject(this._error):this._queue.length>0?Promise.resolve({value:this._queue.shift(),done:!1}):this._closed?Promise.resolve({value:void 0,done:!0}):new Promise((e,t)=>{this._pending.push({resolve:e,reject:t})}),releaseLock(){}}}};function C2(e,t){return e.code=t,e}function WCe(e){return C2(new RangeError(`The "${e}" encoding is not supported`),"ERR_ENCODING_NOT_SUPPORTED")}function qi(e){return C2(new TypeError(`The encoded data was not valid for encoding ${e}`),"ERR_ENCODING_INVALID_ENCODED_DATA")}function VCe(){return C2(new TypeError('The "input" argument must be an instance of ArrayBuffer, SharedArrayBuffer, or ArrayBufferView.'),"ERR_INVALID_ARG_TYPE")}function JCe(e){return e.replace(/^[\t\n\f\r ]+|[\t\n\f\r ]+$/g,"")}function jCe(e){let t=JCe(e===void 0?"utf-8":String(e)).toLowerCase();switch(t){case"utf-8":case"utf8":case"unicode-1-1-utf-8":case"unicode11utf8":case"unicode20utf8":case"x-unicode20utf8":return"utf-8";case"utf-16":case"utf-16le":case"ucs-2":case"ucs2":case"csunicode":case"iso-10646-ucs-2":case"unicode":case"unicodefeff":return"utf-16le";case"utf-16be":case"unicodefffe":return"utf-16be";default:throw WCe(t)}}function zCe(e){if(e===void 0)return new Uint8Array(0);if(ArrayBuffer.isView(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);if(e instanceof ArrayBuffer)return new Uint8Array(e);if(typeof SharedArrayBuffer<"u"&&e instanceof SharedArrayBuffer)return new Uint8Array(e);throw VCe()}function Fm(e,t){if(e<=127){t.push(e);return}if(e<=2047){t.push(192|e>>6,128|e&63);return}if(e<=65535){t.push(224|e>>12,128|e>>6&63,128|e&63);return}t.push(240|e>>18,128|e>>12&63,128|e>>6&63,128|e&63)}function Oq(e=""){let t=String(e),r=[];for(let n=0;n<t.length;n+=1){let i=t.charCodeAt(n);if(i>=55296&&i<=56319){let s=n+1;if(s<t.length){let o=t.charCodeAt(s);if(o>=56320&&o<=57343){let a=65536+(i-55296<<10)+(o-56320);Fm(a,r),n=s;continue}}Fm(65533,r);continue}if(i>=56320&&i<=57343){Fm(65533,r);continue}Fm(i,r)}return new Uint8Array(r)}function fY(e,t){if(t<=65535){e.push(String.fromCharCode(t));return}let r=t-65536;e.push(String.fromCharCode(55296+(r>>10)),String.fromCharCode(56320+(r&1023)))}function Hv(e){return e>=128&&e<=191}function KCe(e,t,r,n){let i=[];for(let s=0;s<e.length;){let o=e[s];if(o<=127){i.push(String.fromCharCode(o)),s+=1;continue}let a=0,A=0;if(o>=194&&o<=223)a=1,A=o&31;else if(o>=224&&o<=239)a=2,A=o&15;else if(o>=240&&o<=244)a=3,A=o&7;else{if(t)throw qi(n);i.push("\uFFFD"),s+=1;continue}if(s+a>=e.length){if(r)return{text:i.join(""),pending:Array.from(e.slice(s))};if(t)throw qi(n);i.push("\uFFFD");break}let f=e[s+1];if(!Hv(f)){if(t)throw qi(n);i.push("\uFFFD"),s+=1;continue}if(o===224&&f<160||o===237&&f>159||o===240&&f<144||o===244&&f>143){if(t)throw qi(n);i.push("\uFFFD"),s+=1;continue}if(A=A<<6|f&63,a>=2){let l=e[s+2];if(!Hv(l)){if(t)throw qi(n);i.push("\uFFFD"),s+=1;continue}A=A<<6|l&63}if(a===3){let l=e[s+3];if(!Hv(l)){if(t)throw qi(n);i.push("\uFFFD"),s+=1;continue}A=A<<6|l&63}if(A>=55296&&A<=57343){if(t)throw qi(n);i.push("\uFFFD"),s+=a+1;continue}fY(i,A),s+=a+1}return{text:i.join(""),pending:[]}}function XCe(e,t,r,n,i){let s=[],o=t==="utf-16be"?"be":"le";!i&&t==="utf-16le"&&e.length>=2&&e[0]===254&&e[1]===255&&(o="be");for(let a=0;a<e.length;){if(a+1>=e.length){if(n)return{text:s.join(""),pending:Array.from(e.slice(a))};if(r)throw qi(t);s.push("\uFFFD");break}let A=e[a],f=e[a+1],l=o==="le"?A|f<<8:A<<8|f;if(a+=2,l>=55296&&l<=56319){if(a+1>=e.length){if(n)return{text:s.join(""),pending:Array.from(e.slice(a-2))};if(r)throw qi(t);s.push("\uFFFD");continue}let p=e[a],I=e[a+1],S=o==="le"?p|I<<8:p<<8|I;if(S>=56320&&S<=57343){let _=65536+(l-55296<<10)+(S-56320);fY(s,_),a+=2;continue}if(r)throw qi(t);s.push("\uFFFD");continue}if(l>=56320&&l<=57343){if(r)throw qi(t);s.push("\uFFFD");continue}s.push(String.fromCharCode(l))}return{text:s.join(""),pending:[]}}var ZCe=class{encode(e=""){return Oq(e)}encodeInto(e,t){let r=String(e),n=0,i=0;for(let s=0;s<r.length;s+=1){let o=r.charCodeAt(s),a="";if(o>=55296&&o<=56319&&s+1<r.length){let f=r.charCodeAt(s+1);f>=56320&&f<=57343&&(a=r.slice(s,s+2))}a===""&&(a=r[s]??"");let A=Oq(a);if(i+A.length>t.length)break;t.set(A,i),i+=A.length,n+=a.length,a.length===2&&(s+=1)}return{read:n,written:i}}get encoding(){return"utf-8"}get[Symbol.toStringTag](){return"TextEncoder"}},$Ce=class{constructor(e,t){y(this,"normalizedEncoding");y(this,"fatalFlag");y(this,"ignoreBOMFlag");y(this,"pendingBytes",[]);y(this,"bomSeen",!1);let r=t==null?{}:Object(t);this.normalizedEncoding=jCe(e),this.fatalFlag=!!r.fatal,this.ignoreBOMFlag=!!r.ignoreBOM}get encoding(){return this.normalizedEncoding}get fatal(){return this.fatalFlag}get ignoreBOM(){return this.ignoreBOMFlag}get[Symbol.toStringTag](){return"TextDecoder"}decode(e,t){let n=!!(t==null?{}:Object(t)).stream,i=zCe(e),s=new Uint8Array(this.pendingBytes.length+i.length);s.set(this.pendingBytes,0),s.set(i,this.pendingBytes.length);let o=this.normalizedEncoding==="utf-8"?KCe(s,this.fatalFlag,n,this.normalizedEncoding):XCe(s,this.normalizedEncoding,this.fatalFlag,n,this.bomSeen);this.pendingBytes=o.pending;let a=o.text;if(!this.bomSeen&&a.length>0&&(!this.ignoreBOMFlag&&a.charCodeAt(0)===65279&&(a=a.slice(1)),this.bomSeen=!0),!n&&this.pendingBytes.length>0){let A=this.pendingBytes;if(this.pendingBytes=[],this.fatalFlag)throw qi(this.normalizedEncoding);return a+"\uFFFD".repeat(Math.ceil(A.length/2))}return a}},Q2=ZCe,_u=$Ce;function ln(e,t){globalThis[e]=t}typeof globalThis.global>"u"&&ln("global",globalThis);if(typeof globalThis.RegExp=="function"&&!("__secureExecRgiEmojiCompat"in globalThis.RegExp)){let e=globalThis.RegExp,t="^\\p{RGI_Emoji}$",r="[\\u{00A9}\\u{00AE}\\u{203C}\\u{2049}\\u{2122}\\u{2139}\\u{2194}-\\u{21AA}\\u{231A}-\\u{23FF}\\u{24C2}\\u{25AA}-\\u{27BF}\\u{2934}-\\u{2935}\\u{2B05}-\\u{2B55}\\u{3030}\\u{303D}\\u{3297}\\u{3299}\\u{1F000}-\\u{1FAFF}]",n="[#*0-9]\\uFE0F?\\u20E3",i="^(?:"+n+"|\\p{Regional_Indicator}{2}|"+r+"(?:\\uFE0F|\\u200D(?:"+n+"|"+r+")|[\\u{1F3FB}-\\u{1F3FF}])*)$";try{new e(t,"v")}catch(s){if(String(s?.message??s).includes("RGI_Emoji")){let o=function(A,f){let l=A instanceof e&&f===void 0?A.source:String(A),p=f===void 0?A instanceof e?A.flags:"":String(f);try{return new e(A,f)}catch(I){if(l===t&&p==="v")return new e(i,"u");throw I}};Object.setPrototypeOf(o,e),o.prototype=e.prototype,Object.defineProperty(o.prototype,"constructor",{value:o,writable:!0,configurable:!0}),ln("RegExp",Object.assign(o,{__secureExecRgiEmojiCompat:!0}))}}}ln("TextEncoder",Q2);ln("TextDecoder",_u);ln("Event",kl);ln("CustomEvent",I2);ln("EventTarget",MB);ln("AbortSignal",Ro);ln("AbortController",Su);ln("structuredClone",kCe);globalThis.WebAssembly&&typeof globalThis.WebAssembly.instantiateStreaming!="function"&&(globalThis.WebAssembly.instantiateStreaming=async function(t,r){let n=await t;if(n==null||typeof n.arrayBuffer!="function")throw new TypeError("WebAssembly.instantiateStreaming requires a Response or promise for one");let i=new Uint8Array(await n.arrayBuffer());return globalThis.WebAssembly.instantiate(i,r)});ln("ReadableStream",typeof Wr.ReadableStream=="function"?Wr.ReadableStream:YCe);ln("WritableStream",typeof Wr.WritableStream=="function"?Wr.WritableStream:GCe);typeof Wr.TransformStream=="function"&&ln("TransformStream",Wr.TransformStream);typeof Pp=="function"&&ln("TextEncoderStream",Pp);typeof Op=="function"&&ln("TextDecoderStream",Op);var uu=I1.default?.webidl??I1.default;uu?.is&&(uu.is.ReadableStream=e=>e!=null&&(e instanceof globalThis.ReadableStream||typeof e.getReader=="function"),uu.is.AbortSignal=e=>e!=null&&(e instanceof globalThis.AbortSignal||typeof e.aborted=="boolean"&&typeof e.addEventListener=="function"));uu?.converters?.AbortSignal&&(uu.converters.AbortSignal=(e,...t)=>e!=null&&(e instanceof globalThis.AbortSignal||typeof e.aborted=="boolean"&&typeof e.addEventListener=="function")?e:uu.interfaceConverter(uu.is.AbortSignal,"AbortSignal")(e,...t));var uY=[{name:"_processConfig",c:"h"},{name:"process.cpuUsage",c:"h"},{name:"process.memoryUsage",c:"h"},{name:"process.resourceUsage",c:"h"},{name:"process.versions",c:"h"},{name:"_processKill",c:"h"},{name:"_processSignalState",c:"h"},{name:"_osConfig",c:"h"},{name:"bridge",c:"h"},{name:"_registerHandle",c:"h"},{name:"_unregisterHandle",c:"h"},{name:"_waitForActiveHandles",c:"h"},{name:"_getActiveHandles",c:"h"},{name:"_childProcessDispatch",c:"h"},{name:"_childProcessModule",c:"h"},{name:"_osModule",c:"h"},{name:"_moduleModule",c:"h"},{name:"_httpModule",c:"h"},{name:"_httpsModule",c:"h"},{name:"_http2Module",c:"h"},{name:"_dnsModule",c:"h"},{name:"_dgramModule",c:"h"},{name:"_netModule",c:"h"},{name:"_tlsModule",c:"h"},{name:"_vmCreateContext",c:"h"},{name:"_vmRunInContext",c:"h"},{name:"_vmRunInThisContext",c:"h"},{name:"_netSocketDispatch",c:"h"},{name:"_httpServerDispatch",c:"h"},{name:"_httpServerUpgradeDispatch",c:"h"},{name:"_httpServerConnectDispatch",c:"h"},{name:"_http2Dispatch",c:"h"},{name:"_timerDispatch",c:"h"},{name:"_upgradeSocketData",c:"h"},{name:"_upgradeSocketEnd",c:"h"},{name:"ProcessExitError",c:"h"},{name:"_log",c:"h"},{name:"_error",c:"h"},{name:"_pythonRpc",c:"h"},{name:"_pythonStdinRead",c:"h"},{name:"_loadPolyfill",c:"h"},{name:"_resolveModule",c:"h"},{name:"_loadFile",c:"h"},{name:"_resolveModuleSync",c:"h"},{name:"_loadFileSync",c:"h"},{name:"_moduleFormat",c:"h"},{name:"_scheduleTimer",c:"h"},{name:"_cryptoRandomFill",c:"h"},{name:"_cryptoRandomUUID",c:"h"},{name:"_cryptoHashDigest",c:"h"},{name:"_cryptoHmacDigest",c:"h"},{name:"_cryptoPbkdf2",c:"h"},{name:"_cryptoScrypt",c:"h"},{name:"_cryptoCipheriv",c:"h"},{name:"_cryptoDecipheriv",c:"h"},{name:"_cryptoCipherivCreate",c:"h"},{name:"_cryptoCipherivUpdate",c:"h"},{name:"_cryptoCipherivFinal",c:"h"},{name:"_cryptoSign",c:"h"},{name:"_cryptoVerify",c:"h"},{name:"_cryptoAsymmetricOp",c:"h"},{name:"_cryptoCreateKeyObject",c:"h"},{name:"_cryptoGenerateKeyPairSync",c:"h"},{name:"_cryptoGenerateKeySync",c:"h"},{name:"_cryptoGeneratePrimeSync",c:"h"},{name:"_cryptoDiffieHellman",c:"h"},{name:"_cryptoDiffieHellmanGroup",c:"h"},{name:"_cryptoDiffieHellmanSessionCreate",c:"h"},{name:"_cryptoDiffieHellmanSessionCall",c:"h"},{name:"_cryptoDiffieHellmanSessionDestroy",c:"h"},{name:"_cryptoSubtle",c:"h"},{name:"_benchNoop",c:"h"},{name:"_fsReadFile",c:"h"},{name:"_fsReadFileAsync",c:"h"},{name:"_fsWriteFile",c:"h"},{name:"_fsWriteFileAsync",c:"h"},{name:"_fsReadFileBinary",c:"h"},{name:"_fsReadFileBinaryAsync",c:"h"},{name:"_fsWriteFileBinary",c:"h"},{name:"_fsWriteFileBinaryAsync",c:"h"},{name:"_fsReadDir",c:"h"},{name:"_fsReadDirAsync",c:"h"},{name:"_fsMkdir",c:"h"},{name:"_fsMkdirAsync",c:"h"},{name:"_fsRmdir",c:"h"},{name:"_fsRmdirAsync",c:"h"},{name:"_fsExists",c:"h"},{name:"_fsAccessAsync",c:"h"},{name:"_fsStat",c:"h"},{name:"_fsStatAsync",c:"h"},{name:"_fsUnlink",c:"h"},{name:"_fsUnlinkAsync",c:"h"},{name:"_fsRename",c:"h"},{name:"_fsRenameAsync",c:"h"},{name:"_fsChmod",c:"h"},{name:"_fsChmodAsync",c:"h"},{name:"_fsChown",c:"h"},{name:"_fsChownAsync",c:"h"},{name:"_fsLink",c:"h"},{name:"_fsLinkAsync",c:"h"},{name:"_fsSymlink",c:"h"},{name:"_fsSymlinkAsync",c:"h"},{name:"_fsReadlink",c:"h"},{name:"_fsReadlinkAsync",c:"h"},{name:"_fsLstat",c:"h"},{name:"_fsLstatAsync",c:"h"},{name:"_fsTruncate",c:"h"},{name:"_fsTruncateAsync",c:"h"},{name:"_fsUtimes",c:"h"},{name:"_fsLutimes",c:"h"},{name:"_fsUtimesAsync",c:"h"},{name:"_fsLutimesAsync",c:"h"},{name:"fs.futimesSync",c:"h"},{name:"fs.openSync",c:"h"},{name:"fs.closeSync",c:"h"},{name:"fs.readSync",c:"h"},{name:"fs.writeSync",c:"h"},{name:"fs.fstatSync",c:"h"},{name:"_fs",c:"h"},{name:"_childProcessSpawnStart",c:"h"},{name:"_childProcessPoll",c:"h"},{name:"_childProcessStdinWrite",c:"h"},{name:"_childProcessStdinClose",c:"h"},{name:"_childProcessKill",c:"h"},{name:"_childProcessSpawnSync",c:"h"},{name:"_benchNetTcpMetricsResetRaw",c:"h"},{name:"_benchNetTcpMetricsSnapshotRaw",c:"h"},{name:"_networkDnsLookupRaw",c:"h"},{name:"_networkDnsLookupSyncRaw",c:"h"},{name:"_networkDnsResolveRaw",c:"h"},{name:"_networkHttpServerListenRaw",c:"h"},{name:"_networkHttpServerCloseRaw",c:"h"},{name:"_networkHttpServerRespondRaw",c:"h"},{name:"_networkHttpServerRequestRaw",c:"h"},{name:"_networkHttpServerWaitRaw",c:"h"},{name:"_networkHttp2ServerListenRaw",c:"h"},{name:"_networkHttp2ServerCloseRaw",c:"h"},{name:"_networkHttp2ServerWaitRaw",c:"h"},{name:"_networkHttp2SessionConnectRaw",c:"h"},{name:"_networkHttp2SessionRequestRaw",c:"h"},{name:"_networkHttp2SessionSettingsRaw",c:"h"},{name:"_networkHttp2SessionSetLocalWindowSizeRaw",c:"h"},{name:"_networkHttp2SessionGoawayRaw",c:"h"},{name:"_networkHttp2SessionCloseRaw",c:"h"},{name:"_networkHttp2SessionDestroyRaw",c:"h"},{name:"_networkHttp2SessionWaitRaw",c:"h"},{name:"_networkHttp2ServerPollRaw",c:"h"},{name:"_networkHttp2SessionPollRaw",c:"h"},{name:"_networkHttp2StreamRespondRaw",c:"h"},{name:"_networkHttp2StreamPushStreamRaw",c:"h"},{name:"_networkHttp2StreamWriteRaw",c:"h"},{name:"_networkHttp2StreamEndRaw",c:"h"},{name:"_networkHttp2StreamCloseRaw",c:"h"},{name:"_networkHttp2StreamPauseRaw",c:"h"},{name:"_networkHttp2StreamResumeRaw",c:"h"},{name:"_networkHttp2StreamRespondWithFileRaw",c:"h"},{name:"_networkHttp2ServerRespondRaw",c:"h"},{name:"_upgradeSocketWriteRaw",c:"h"},{name:"_upgradeSocketEndRaw",c:"h"},{name:"_upgradeSocketDestroyRaw",c:"h"},{name:"_netSocketConnectRaw",c:"h"},{name:"_netSocketPollRaw",c:"h"},{name:"_netSocketWaitConnectRaw",c:"h"},{name:"_netSocketReadRaw",c:"h"},{name:"_netSocketSetNoDelayRaw",c:"h"},{name:"_netSocketSetKeepAliveRaw",c:"h"},{name:"_netSocketWriteRaw",c:"h"},{name:"_netSocketEndRaw",c:"h"},{name:"_netSocketDestroyRaw",c:"h"},{name:"_netSocketUpgradeTlsRaw",c:"h"},{name:"_netSocketGetTlsClientHelloRaw",c:"h"},{name:"_netSocketTlsQueryRaw",c:"h"},{name:"_tlsGetCiphersRaw",c:"h"},{name:"_netReserveTcpPortRaw",c:"h"},{name:"_netReleaseTcpPortRaw",c:"h"},{name:"_netServerListenRaw",c:"h"},{name:"_netServerAcceptRaw",c:"h"},{name:"_netServerCloseRaw",c:"h"},{name:"_dgramSocketCreateRaw",c:"h"},{name:"_dgramSocketBindRaw",c:"h"},{name:"_dgramSocketRecvRaw",c:"h"},{name:"_dgramSocketSendRaw",c:"h"},{name:"_dgramSocketCloseRaw",c:"h"},{name:"_dgramSocketAddressRaw",c:"h"},{name:"_dgramSocketSetBufferSizeRaw",c:"h"},{name:"_dgramSocketGetBufferSizeRaw",c:"h"},{name:"_sqliteConstantsRaw",c:"h"},{name:"_sqliteDatabaseOpenRaw",c:"h"},{name:"_sqliteDatabaseCloseRaw",c:"h"},{name:"_sqliteDatabaseExecRaw",c:"h"},{name:"_sqliteDatabaseQueryRaw",c:"h"},{name:"_sqliteDatabasePrepareRaw",c:"h"},{name:"_sqliteDatabaseLocationRaw",c:"h"},{name:"_sqliteDatabaseCheckpointRaw",c:"h"},{name:"_sqliteStatementRunRaw",c:"h"},{name:"_sqliteStatementGetRaw",c:"h"},{name:"_sqliteStatementAllRaw",c:"h"},{name:"_sqliteStatementColumnsRaw",c:"h"},{name:"_sqliteStatementSetReturnArraysRaw",c:"h"},{name:"_sqliteStatementSetReadBigIntsRaw",c:"h"},{name:"_sqliteStatementSetAllowBareNamedParametersRaw",c:"h"},{name:"_sqliteStatementSetAllowUnknownNamedParametersRaw",c:"h"},{name:"_sqliteStatementFinalizeRaw",c:"h"},{name:"_batchResolveModules",c:"h"},{name:"_kernelPollRaw",c:"h"},{name:"_kernelIsattyRaw",c:"h"},{name:"_kernelTtySizeRaw",c:"h"},{name:"_kernelStdioWriteRaw",c:"h"},{name:"_kernelStdinReadRaw",c:"h"},{name:"_kernelStdinRead",c:"h"},{name:"_ptySetRawMode",c:"h"},{name:"require",c:"h"},{name:"_requireFrom",c:"h"},{name:"_dynamicImport",c:"h"},{name:"__dynamicImport",c:"h"},{name:"_moduleCache",c:"h"},{name:"_pendingModules",c:"m"},{name:"_currentModule",c:"m"},{name:"_stdinData",c:"m"},{name:"_stdinPosition",c:"m"},{name:"_stdinEnded",c:"m"},{name:"_stdinFlowMode",c:"m"},{name:"module",c:"m"},{name:"exports",c:"m"},{name:"__filename",c:"m"},{name:"__dirname",c:"m"},{name:"fetch",c:"h"},{name:"Headers",c:"h"},{name:"Request",c:"h"},{name:"Response",c:"h"},{name:"DOMException",c:"h"},{name:"__importMetaResolve",c:"h"},{name:"Blob",c:"h"},{name:"File",c:"h"},{name:"FormData",c:"h"}],OFe=uY.filter(e=>e.c==="h").map(e=>e.name),HFe=uY.filter(e=>e.c==="m").map(e=>e.name);function cY(e,t,r,n={}){let i=n.mutable===!0,s=n.enumerable!==!1;Object.defineProperty(e,t,{value:r,writable:i,configurable:!0,enumerable:s})}function et(e,t){cY(globalThis,e,t)}function vu(e,t){cY(globalThis,e,t,{mutable:!0})}function eQe(e){return JSON.stringify(e,(t,r)=>r===void 0?{__secureExecDispatchType:"undefined"}:r)}function tQe(e,t){return`__bd:${e}:${eQe(t)}`}function rQe(e){if(e===null)return;let t=JSON.parse(e);if(t.__bd_error){let r=new Error(t.__bd_error.message);throw r.name=t.__bd_error.name??"Error",t.__bd_error.code!==void 0&&(r.code=t.__bd_error.code),t.__bd_error.stack&&(r.stack=t.__bd_error.stack),r}return t.__bd_result}function nQe(){if(!_loadPolyfill)throw new Error("_loadPolyfill is not available in sandbox");return _loadPolyfill}function zg(e,...t){let r=nQe();return rQe(r.applySyncPromise(void 0,[tQe(e,t)]))}var iQe=Object.create,w2=Object.defineProperty,sQe=Object.getOwnPropertyDescriptor,lY=Object.getOwnPropertyNames,oQe=Object.getPrototypeOf,aQe=Object.prototype.hasOwnProperty,S2=(e,t)=>function(){return t||(0,e[lY(e)[0]])((t={exports:{}}).exports,t),t.exports},_2=(e,t)=>{for(var r in t)w2(e,r,{get:t[r],enumerable:!0})},AQe=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of lY(t))!aQe.call(e,i)&&i!==r&&w2(e,i,{get:()=>t[i],enumerable:!(n=sQe(t,i))||n.enumerable});return e},v2=(e,t,r)=>(r=e!=null?iQe(oQe(e)):{},AQe(t||!e||!e.__esModule?w2(r,"default",{value:e,enumerable:!0}):r,e));var hY=S2({"../../../tmp/buffer-build/node_modules/base64-js/index.js"(e){"use strict";e.byteLength=A,e.toByteArray=l,e.fromByteArray=S;var t=[],r=[],n=typeof Uint8Array<"u"?Uint8Array:Array,i="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";for(s=0,o=i.length;s<o;++s)t[s]=i[s],r[i.charCodeAt(s)]=s;var s,o;r[45]=62,r[95]=63;function a(_){var N=_.length;if(N%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var O=_.indexOf("=");O===-1&&(O=N);var x=O===N?0:4-O%4;return[O,x]}function A(_){var N=a(_),O=N[0],x=N[1];return(O+x)*3/4-x}function f(_,N,O){return(N+O)*3/4-O}function l(_){var N,O=a(_),x=O[0],G=O[1],Y=new n(f(_,x,G)),X=0,Z=G>0?x-4:x,j;for(j=0;j<Z;j+=4)N=r[_.charCodeAt(j)]<<18|r[_.charCodeAt(j+1)]<<12|r[_.charCodeAt(j+2)]<<6|r[_.charCodeAt(j+3)],Y[X++]=N>>16&255,Y[X++]=N>>8&255,Y[X++]=N&255;return G===2&&(N=r[_.charCodeAt(j)]<<2|r[_.charCodeAt(j+1)]>>4,Y[X++]=N&255),G===1&&(N=r[_.charCodeAt(j)]<<10|r[_.charCodeAt(j+1)]<<4|r[_.charCodeAt(j+2)]>>2,Y[X++]=N>>8&255,Y[X++]=N&255),Y}function p(_){return t[_>>18&63]+t[_>>12&63]+t[_>>6&63]+t[_&63]}function I(_,N,O){for(var x,G=[],Y=N;Y<O;Y+=3)x=(_[Y]<<16&16711680)+(_[Y+1]<<8&65280)+(_[Y+2]&255),G.push(p(x));return G.join("")}function S(_){for(var N,O=_.length,x=O%3,G=[],Y=16383,X=0,Z=O-x;X<Z;X+=Y)G.push(I(_,X,X+Y>Z?Z:X+Y));return x===1?(N=_[O-1],G.push(t[N>>2]+t[N<<4&63]+"==")):x===2&&(N=(_[O-2]<<8)+_[O-1],G.push(t[N>>10]+t[N>>4&63]+t[N<<2&63]+"=")),G.join("")}}}),fQe=S2({"../../../tmp/buffer-build/node_modules/ieee754/index.js"(e){e.read=function(t,r,n,i,s){var o,a,A=s*8-i-1,f=(1<<A)-1,l=f>>1,p=-7,I=n?s-1:0,S=n?-1:1,_=t[r+I];for(I+=S,o=_&(1<<-p)-1,_>>=-p,p+=A;p>0;o=o*256+t[r+I],I+=S,p-=8);for(a=o&(1<<-p)-1,o>>=-p,p+=i;p>0;a=a*256+t[r+I],I+=S,p-=8);if(o===0)o=1-l;else{if(o===f)return a?NaN:(_?-1:1)*(1/0);a=a+Math.pow(2,i),o=o-l}return(_?-1:1)*a*Math.pow(2,o-i)},e.write=function(t,r,n,i,s,o){var a,A,f,l=o*8-s-1,p=(1<<l)-1,I=p>>1,S=s===23?Math.pow(2,-24)-Math.pow(2,-77):0,_=i?0:o-1,N=i?1:-1,O=r<0||r===0&&1/r<0?1:0;for(r=Math.abs(r),isNaN(r)||r===1/0?(A=isNaN(r)?1:0,a=p):(a=Math.floor(Math.log(r)/Math.LN2),r*(f=Math.pow(2,-a))<1&&(a--,f*=2),a+I>=1?r+=S/f:r+=S*Math.pow(2,1-I),r*f>=2&&(a++,f/=2),a+I>=p?(A=0,a=p):a+I>=1?(A=(r*f-1)*Math.pow(2,s),a=a+I):(A=r*Math.pow(2,I-1)*Math.pow(2,s),a=0));s>=8;t[n+_]=A&255,_+=N,A/=256,s-=8);for(a=a<<s|A,l+=s;l>0;t[n+_]=a&255,_+=N,a/=256,l-=8);t[n+_-N]|=O*128}}}),R2=S2({"../../../tmp/buffer-build/node_modules/buffer/index.js"(e){"use strict";var t=hY(),r=fQe(),n=typeof Symbol=="function"&&typeof Symbol.for=="function"?Symbol.for("nodejs.util.inspect.custom"):null;e.Buffer=a,e.SlowBuffer=G,e.INSPECT_MAX_BYTES=50;var i=2147483647;e.kMaxLength=i,a.TYPED_ARRAY_SUPPORT=s(),!a.TYPED_ARRAY_SUPPORT&&typeof console<"u"&&typeof console.error=="function"&&console.error("This browser lacks typed array (Uint8Array) support which is required by `buffer` v5.x. Use `buffer` v4.x if you require old browser support.");function s(){try{let F=new Uint8Array(1),m={foo:function(){return 42}};return Object.setPrototypeOf(m,Uint8Array.prototype),Object.setPrototypeOf(F,m),F.foo()===42}catch{return!1}}Object.defineProperty(a.prototype,"parent",{enumerable:!0,get:function(){if(a.isBuffer(this))return this.buffer}}),Object.defineProperty(a.prototype,"offset",{enumerable:!0,get:function(){if(a.isBuffer(this))return this.byteOffset}});function o(F){if(F>i)throw new RangeError('The value "'+F+'" is invalid for option "size"');let m=new Uint8Array(F);return Object.setPrototypeOf(m,a.prototype),m}function a(F,m,Q){if(typeof F=="number"){if(typeof m=="string")throw new TypeError('The "string" argument must be of type string. Received type number');return p(F)}return A(F,m,Q)}a.poolSize=8192;function A(F,m,Q){if(typeof F=="string")return I(F,m);if(ArrayBuffer.isView(F))return _(F);if(F==null)throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof F);if(ve(F,ArrayBuffer)||F&&ve(F.buffer,ArrayBuffer)||typeof SharedArrayBuffer<"u"&&(ve(F,SharedArrayBuffer)||F&&ve(F.buffer,SharedArrayBuffer)))return N(F,m,Q);if(typeof F=="number")throw new TypeError('The "value" argument must not be of type number. Received type number');let L=F.valueOf&&F.valueOf();if(L!=null&&L!==F)return a.from(L,m,Q);let W=O(F);if(W)return W;if(typeof Symbol<"u"&&Symbol.toPrimitive!=null&&typeof F[Symbol.toPrimitive]=="function")return a.from(F[Symbol.toPrimitive]("string"),m,Q);throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof F)}a.from=function(F,m,Q){return A(F,m,Q)},Object.setPrototypeOf(a.prototype,Uint8Array.prototype),Object.setPrototypeOf(a,Uint8Array);function f(F){if(typeof F!="number")throw new TypeError('"size" argument must be of type number');if(F<0)throw new RangeError('The value "'+F+'" is invalid for option "size"')}function l(F,m,Q){return f(F),F<=0?o(F):m!==void 0?typeof Q=="string"?o(F).fill(m,Q):o(F).fill(m):o(F)}a.alloc=function(F,m,Q){return l(F,m,Q)};function p(F){return f(F),o(F<0?0:x(F)|0)}a.allocUnsafe=function(F){return p(F)},a.allocUnsafeSlow=function(F){return p(F)};function I(F,m){if((typeof m!="string"||m==="")&&(m="utf8"),!a.isEncoding(m))throw new TypeError("Unknown encoding: "+m);let Q=Y(F,m)|0,L=o(Q),W=L.write(F,m);return W!==Q&&(L=L.slice(0,W)),L}function S(F){let m=F.length<0?0:x(F.length)|0,Q=o(m);for(let L=0;L<m;L+=1)Q[L]=F[L]&255;return Q}function _(F){if(ve(F,Uint8Array)){let m=new Uint8Array(F);return N(m.buffer,m.byteOffset,m.byteLength)}return S(F)}function N(F,m,Q){if(m<0||F.byteLength<m)throw new RangeError('"offset" is outside of buffer bounds');if(F.byteLength<m+(Q||0))throw new RangeError('"length" is outside of buffer bounds');let L;return m===void 0&&Q===void 0?L=new Uint8Array(F):Q===void 0?L=new Uint8Array(F,m):L=new Uint8Array(F,m,Q),Object.setPrototypeOf(L,a.prototype),L}function O(F){if(a.isBuffer(F)){let m=x(F.length)|0,Q=o(m);return Q.length===0||F.copy(Q,0,0,m),Q}if(F.length!==void 0)return typeof F.length!="number"||He(F.length)?o(0):S(F);if(F.type==="Buffer"&&Array.isArray(F.data))return S(F.data)}function x(F){if(F>=i)throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+i.toString(16)+" bytes");return F|0}function G(F){return+F!=F&&(F=0),a.alloc(+F)}a.isBuffer=function(m){return m!=null&&m._isBuffer===!0&&m!==a.prototype},a.compare=function(m,Q){if(ve(m,Uint8Array)&&(m=a.from(m,m.offset,m.byteLength)),ve(Q,Uint8Array)&&(Q=a.from(Q,Q.offset,Q.byteLength)),!a.isBuffer(m)||!a.isBuffer(Q))throw new TypeError('The "buf1", "buf2" arguments must be one of type Buffer or Uint8Array');if(m===Q)return 0;let L=m.length,W=Q.length;for(let z=0,ae=Math.min(L,W);z<ae;++z)if(m[z]!==Q[z]){L=m[z],W=Q[z];break}return L<W?-1:W<L?1:0},a.isEncoding=function(m){switch(String(m).toLowerCase()){case"hex":case"utf8":case"utf-8":case"ascii":case"latin1":case"binary":case"base64":case"base64url":case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return!0;default:return!1}},a.concat=function(m,Q){if(!Array.isArray(m))throw new TypeError('"list" argument must be an Array of Buffers');if(m.length===0)return a.alloc(0);let L;if(Q===void 0)for(Q=0,L=0;L<m.length;++L)Q+=m[L].length;let W=a.alloc(Q),z=0;for(L=0;L<m.length;++L){let ae=m[L];if(!ve(ae,Uint8Array))throw new TypeError('"list" argument must be an Array of Buffers');if(a.isBuffer(ae)||(ae=a.from(ae)),z>=W.length)break;let le=W.length-z,ye=ae.length>le?le:ae.length;Uint8Array.prototype.set.call(W,ae.subarray(0,ye),z),z+=ye}return W};function Y(F,m){if(a.isBuffer(F))return F.length;if(ArrayBuffer.isView(F)||ve(F,ArrayBuffer))return F.byteLength;if(typeof F!="string")throw new TypeError('The "string" argument must be one of type string, Buffer, or ArrayBuffer. Received type '+typeof F);let Q=F.length,L=arguments.length>2&&arguments[2]===!0;if(!L&&Q===0)return 0;let W=!1;for(;;)switch(m){case"ascii":case"latin1":case"binary":return Q;case"utf8":case"utf-8":return Ue(F).length;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return Q*2;case"hex":return Q>>>1;case"base64":case"base64url":return De(F).length;default:if(W)return L?-1:Ue(F).length;m=(""+m).toLowerCase(),W=!0}}a.byteLength=Y;function X(F,m,Q){let L=!1;if((m===void 0||m<0)&&(m=0),m>this.length||((Q===void 0||Q>this.length)&&(Q=this.length),Q<=0)||(Q>>>=0,m>>>=0,Q<=m))return"";for(F||(F="utf8");;)switch(F){case"hex":return D(this,m,Q);case"utf8":case"utf-8":return g(this,m,Q);case"ascii":return C(this,m,Q);case"latin1":case"binary":return h(this,m,Q);case"base64":return b(this,m,Q);case"base64url":return c(this,m,Q);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return M(this,m,Q);default:if(L)throw new TypeError("Unknown encoding: "+F);F=(F+"").toLowerCase(),L=!0}}a.prototype._isBuffer=!0;function Z(F,m,Q){let L=F[m];F[m]=F[Q],F[Q]=L}a.prototype.swap16=function(){let m=this.length;if(m%2!==0)throw new RangeError("Buffer size must be a multiple of 16-bits");for(let Q=0;Q<m;Q+=2)Z(this,Q,Q+1);return this},a.prototype.swap32=function(){let m=this.length;if(m%4!==0)throw new RangeError("Buffer size must be a multiple of 32-bits");for(let Q=0;Q<m;Q+=4)Z(this,Q,Q+3),Z(this,Q+1,Q+2);return this},a.prototype.swap64=function(){let m=this.length;if(m%8!==0)throw new RangeError("Buffer size must be a multiple of 64-bits");for(let Q=0;Q<m;Q+=8)Z(this,Q,Q+7),Z(this,Q+1,Q+6),Z(this,Q+2,Q+5),Z(this,Q+3,Q+4);return this},a.prototype.toString=function(){let m=this.length;return m===0?"":arguments.length===0?g(this,0,m):X.apply(this,arguments)},a.prototype.toLocaleString=a.prototype.toString,a.prototype.equals=function(m){if(!a.isBuffer(m))throw new TypeError("Argument must be a Buffer");return this===m?!0:a.compare(this,m)===0},a.prototype.inspect=function(){let m="",Q=e.INSPECT_MAX_BYTES;return m=this.toString("hex",0,Q).replace(/(.{2})/g,"$1 ").trim(),this.length>Q&&(m+=" ... "),"<Buffer "+m+">"},n&&(a.prototype[n]=a.prototype.inspect),a.prototype.compare=function(m,Q,L,W,z){if(ve(m,Uint8Array)&&(m=a.from(m,m.offset,m.byteLength)),!a.isBuffer(m))throw new TypeError('The "target" argument must be one of type Buffer or Uint8Array. Received type '+typeof m);if(Q===void 0&&(Q=0),L===void 0&&(L=m?m.length:0),W===void 0&&(W=0),z===void 0&&(z=this.length),Q<0||L>m.length||W<0||z>this.length)throw new RangeError("out of range index");if(W>=z&&Q>=L)return 0;if(W>=z)return-1;if(Q>=L)return 1;if(Q>>>=0,L>>>=0,W>>>=0,z>>>=0,this===m)return 0;let ae=z-W,le=L-Q,ye=Math.min(ae,le),bt=this.slice(W,z),Ee=m.slice(Q,L);for(let ge=0;ge<ye;++ge)if(bt[ge]!==Ee[ge]){ae=bt[ge],le=Ee[ge];break}return ae<le?-1:le<ae?1:0};function j(F,m,Q,L,W){if(F.length===0)return-1;if(typeof Q=="string"?(L=Q,Q=0):Q>2147483647?Q=2147483647:Q<-2147483648&&(Q=-2147483648),Q=+Q,He(Q)&&(Q=W?0:F.length-1),Q<0&&(Q=F.length+Q),Q>=F.length){if(W)return-1;Q=F.length-1}else if(Q<0)if(W)Q=0;else return-1;if(typeof m=="string"&&(m=a.from(m,L)),a.isBuffer(m))return m.length===0?-1:se(F,m,Q,L,W);if(typeof m=="number")return m=m&255,typeof Uint8Array.prototype.indexOf=="function"?W?Uint8Array.prototype.indexOf.call(F,m,Q):Uint8Array.prototype.lastIndexOf.call(F,m,Q):se(F,[m],Q,L,W);throw new TypeError("val must be string, number or Buffer")}function se(F,m,Q,L,W){let z=1,ae=F.length,le=m.length;if(L!==void 0&&(L=String(L).toLowerCase(),L==="ucs2"||L==="ucs-2"||L==="utf16le"||L==="utf-16le")){if(F.length<2||m.length<2)return-1;z=2,ae/=2,le/=2,Q/=2}function ye(Ee,ge){return z===1?Ee[ge]:Ee.readUInt16BE(ge*z)}let bt;if(W){let Ee=-1;for(bt=Q;bt<ae;bt++)if(ye(F,bt)===ye(m,Ee===-1?0:bt-Ee)){if(Ee===-1&&(Ee=bt),bt-Ee+1===le)return Ee*z}else Ee!==-1&&(bt-=bt-Ee),Ee=-1}else for(Q+le>ae&&(Q=ae-le),bt=Q;bt>=0;bt--){let Ee=!0;for(let ge=0;ge<le;ge++)if(ye(F,bt+ge)!==ye(m,ge)){Ee=!1;break}if(Ee)return bt}return-1}a.prototype.includes=function(m,Q,L){return this.indexOf(m,Q,L)!==-1},a.prototype.indexOf=function(m,Q,L){return j(this,m,Q,L,!0)},a.prototype.lastIndexOf=function(m,Q,L){return j(this,m,Q,L,!1)};function ie(F,m,Q,L){Q=Number(Q)||0;let W=F.length-Q;L?(L=Number(L),L>W&&(L=W)):L=W;let z=m.length;L>z/2&&(L=z/2);let ae;for(ae=0;ae<L;++ae){let le=parseInt(m.substr(ae*2,2),16);if(He(le))return ae;F[Q+ae]=le}return ae}function ce(F,m,Q,L){return en(Ue(m,F.length-Q),F,Q,L)}function H(F,m,Q,L){return en(Ts(m),F,Q,L)}function E(F,m,Q,L){return en(De(m),F,Q,L)}function v(F,m,Q,L){return en(Te(m,F.length-Q),F,Q,L)}a.prototype.write=function(m,Q,L,W){if(Q===void 0)W="utf8",L=this.length,Q=0;else if(L===void 0&&typeof Q=="string")W=Q,L=this.length,Q=0;else if(isFinite(Q))Q=Q>>>0,isFinite(L)?(L=L>>>0,W===void 0&&(W="utf8")):(W=L,L=void 0);else throw new Error("Buffer.write(string, encoding, offset[, length]) is no longer supported");let z=this.length-Q;if((L===void 0||L>z)&&(L=z),m.length>0&&(L<0||Q<0)||Q>this.length)throw new RangeError("Attempt to write outside buffer bounds");W||(W="utf8");let ae=!1;for(;;)switch(W){case"hex":return ie(this,m,Q,L);case"utf8":case"utf-8":return ce(this,m,Q,L);case"ascii":case"latin1":case"binary":return H(this,m,Q,L);case"base64":case"base64url":return E(this,m,Q,L);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return v(this,m,Q,L);default:if(ae)throw new TypeError("Unknown encoding: "+W);W=(""+W).toLowerCase(),ae=!0}},a.prototype.toJSON=function(){return{type:"Buffer",data:Array.prototype.slice.call(this._arr||this,0)}};function b(F,m,Q){return m===0&&Q===F.length?t.fromByteArray(F):t.fromByteArray(F.slice(m,Q))}function c(F,m,Q){return b(F,m,Q).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/g,"")}function g(F,m,Q){Q=Math.min(F.length,Q);let L=[],W=m;for(;W<Q;){let z=F[W],ae=null,le=z>239?4:z>223?3:z>191?2:1;if(W+le<=Q){let ye,bt,Ee,ge;switch(le){case 1:z<128&&(ae=z);break;case 2:ye=F[W+1],(ye&192)===128&&(ge=(z&31)<<6|ye&63,ge>127&&(ae=ge));break;case 3:ye=F[W+1],bt=F[W+2],(ye&192)===128&&(bt&192)===128&&(ge=(z&15)<<12|(ye&63)<<6|bt&63,ge>2047&&(ge<55296||ge>57343)&&(ae=ge));break;case 4:ye=F[W+1],bt=F[W+2],Ee=F[W+3],(ye&192)===128&&(bt&192)===128&&(Ee&192)===128&&(ge=(z&15)<<18|(ye&63)<<12|(bt&63)<<6|Ee&63,ge>65535&&ge<1114112&&(ae=ge))}}ae===null?(ae=65533,le=1):ae>65535&&(ae-=65536,L.push(ae>>>10&1023|55296),ae=56320|ae&1023),L.push(ae),W+=le}return R(L)}var w=4096;function R(F){let m=F.length;if(m<=w)return String.fromCharCode.apply(String,F);let Q="",L=0;for(;L<m;)Q+=String.fromCharCode.apply(String,F.slice(L,L+=w));return Q}function C(F,m,Q){let L="";Q=Math.min(F.length,Q);for(let W=m;W<Q;++W)L+=String.fromCharCode(F[W]&127);return L}function h(F,m,Q){let L="";Q=Math.min(F.length,Q);for(let W=m;W<Q;++W)L+=String.fromCharCode(F[W]);return L}function D(F,m,Q){let L=F.length;(!m||m<0)&&(m=0),(!Q||Q<0||Q>L)&&(Q=L);let W="";for(let z=m;z<Q;++z)W+=ai[F[z]];return W}function M(F,m,Q){let L=F.slice(m,Q),W="";for(let z=0;z<L.length-1;z+=2)W+=String.fromCharCode(L[z]+L[z+1]*256);return W}a.prototype.slice=function(m,Q){let L=this.length;m=~~m,Q=Q===void 0?L:~~Q,m<0?(m+=L,m<0&&(m=0)):m>L&&(m=L),Q<0?(Q+=L,Q<0&&(Q=0)):Q>L&&(Q=L),Q<m&&(Q=m);let W=this.subarray(m,Q);return Object.setPrototypeOf(W,a.prototype),W};function B(F,m,Q){if(F%1!==0||F<0)throw new RangeError("offset is not uint");if(F+m>Q)throw new RangeError("Trying to access beyond buffer length")}a.prototype.readUintLE=a.prototype.readUIntLE=function(m,Q,L){m=m>>>0,Q=Q>>>0,L||B(m,Q,this.length);let W=this[m],z=1,ae=0;for(;++ae<Q&&(z*=256);)W+=this[m+ae]*z;return W},a.prototype.readUintBE=a.prototype.readUIntBE=function(m,Q,L){m=m>>>0,Q=Q>>>0,L||B(m,Q,this.length);let W=this[m+--Q],z=1;for(;Q>0&&(z*=256);)W+=this[m+--Q]*z;return W},a.prototype.readUint8=a.prototype.readUInt8=function(m,Q){return m=m>>>0,Q||B(m,1,this.length),this[m]},a.prototype.readUint16LE=a.prototype.readUInt16LE=function(m,Q){return m=m>>>0,Q||B(m,2,this.length),this[m]|this[m+1]<<8},a.prototype.readUint16BE=a.prototype.readUInt16BE=function(m,Q){return m=m>>>0,Q||B(m,2,this.length),this[m]<<8|this[m+1]},a.prototype.readUint32LE=a.prototype.readUInt32LE=function(m,Q){return m=m>>>0,Q||B(m,4,this.length),(this[m]|this[m+1]<<8|this[m+2]<<16)+this[m+3]*16777216},a.prototype.readUint32BE=a.prototype.readUInt32BE=function(m,Q){return m=m>>>0,Q||B(m,4,this.length),this[m]*16777216+(this[m+1]<<16|this[m+2]<<8|this[m+3])},a.prototype.readBigUInt64LE=Ne(function(m){m=m>>>0,Qe(m,"offset");let Q=this[m],L=this[m+7];(Q===void 0||L===void 0)&&_e(m,this.length-8);let W=Q+this[++m]*2**8+this[++m]*2**16+this[++m]*2**24,z=this[++m]+this[++m]*2**8+this[++m]*2**16+L*2**24;return BigInt(W)+(BigInt(z)<<BigInt(32))}),a.prototype.readBigUInt64BE=Ne(function(m){m=m>>>0,Qe(m,"offset");let Q=this[m],L=this[m+7];(Q===void 0||L===void 0)&&_e(m,this.length-8);let W=Q*2**24+this[++m]*2**16+this[++m]*2**8+this[++m],z=this[++m]*2**24+this[++m]*2**16+this[++m]*2**8+L;return(BigInt(W)<<BigInt(32))+BigInt(z)}),a.prototype.readIntLE=function(m,Q,L){m=m>>>0,Q=Q>>>0,L||B(m,Q,this.length);let W=this[m],z=1,ae=0;for(;++ae<Q&&(z*=256);)W+=this[m+ae]*z;return z*=128,W>=z&&(W-=Math.pow(2,8*Q)),W},a.prototype.readIntBE=function(m,Q,L){m=m>>>0,Q=Q>>>0,L||B(m,Q,this.length);let W=Q,z=1,ae=this[m+--W];for(;W>0&&(z*=256);)ae+=this[m+--W]*z;return z*=128,ae>=z&&(ae-=Math.pow(2,8*Q)),ae},a.prototype.readInt8=function(m,Q){return m=m>>>0,Q||B(m,1,this.length),this[m]&128?(255-this[m]+1)*-1:this[m]},a.prototype.readInt16LE=function(m,Q){m=m>>>0,Q||B(m,2,this.length);let L=this[m]|this[m+1]<<8;return L&32768?L|4294901760:L},a.prototype.readInt16BE=function(m,Q){m=m>>>0,Q||B(m,2,this.length);let L=this[m+1]|this[m]<<8;return L&32768?L|4294901760:L},a.prototype.readInt32LE=function(m,Q){return m=m>>>0,Q||B(m,4,this.length),this[m]|this[m+1]<<8|this[m+2]<<16|this[m+3]<<24},a.prototype.readInt32BE=function(m,Q){return m=m>>>0,Q||B(m,4,this.length),this[m]<<24|this[m+1]<<16|this[m+2]<<8|this[m+3]},a.prototype.readBigInt64LE=Ne(function(m){m=m>>>0,Qe(m,"offset");let Q=this[m],L=this[m+7];(Q===void 0||L===void 0)&&_e(m,this.length-8);let W=this[m+4]+this[m+5]*2**8+this[m+6]*2**16+(L<<24);return(BigInt(W)<<BigInt(32))+BigInt(Q+this[++m]*2**8+this[++m]*2**16+this[++m]*2**24)}),a.prototype.readBigInt64BE=Ne(function(m){m=m>>>0,Qe(m,"offset");let Q=this[m],L=this[m+7];(Q===void 0||L===void 0)&&_e(m,this.length-8);let W=(Q<<24)+this[++m]*2**16+this[++m]*2**8+this[++m];return(BigInt(W)<<BigInt(32))+BigInt(this[++m]*2**24+this[++m]*2**16+this[++m]*2**8+L)}),a.prototype.readFloatLE=function(m,Q){return m=m>>>0,Q||B(m,4,this.length),r.read(this,m,!0,23,4)},a.prototype.readFloatBE=function(m,Q){return m=m>>>0,Q||B(m,4,this.length),r.read(this,m,!1,23,4)},a.prototype.readDoubleLE=function(m,Q){return m=m>>>0,Q||B(m,8,this.length),r.read(this,m,!0,52,8)},a.prototype.readDoubleBE=function(m,Q){return m=m>>>0,Q||B(m,8,this.length),r.read(this,m,!1,52,8)};function k(F,m,Q,L,W,z){if(!a.isBuffer(F))throw new TypeError('"buffer" argument must be a Buffer instance');if(m>W||m<z)throw new RangeError('"value" argument is out of bounds');if(Q+L>F.length)throw new RangeError("Index out of range")}a.prototype.writeUintLE=a.prototype.writeUIntLE=function(m,Q,L,W){if(m=+m,Q=Q>>>0,L=L>>>0,!W){let le=Math.pow(2,8*L)-1;k(this,m,Q,L,le,0)}let z=1,ae=0;for(this[Q]=m&255;++ae<L&&(z*=256);)this[Q+ae]=m/z&255;return Q+L},a.prototype.writeUintBE=a.prototype.writeUIntBE=function(m,Q,L,W){if(m=+m,Q=Q>>>0,L=L>>>0,!W){let le=Math.pow(2,8*L)-1;k(this,m,Q,L,le,0)}let z=L-1,ae=1;for(this[Q+z]=m&255;--z>=0&&(ae*=256);)this[Q+z]=m/ae&255;return Q+L},a.prototype.writeUint8=a.prototype.writeUInt8=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,1,255,0),this[Q]=m&255,Q+1},a.prototype.writeUint16LE=a.prototype.writeUInt16LE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,2,65535,0),this[Q]=m&255,this[Q+1]=m>>>8,Q+2},a.prototype.writeUint16BE=a.prototype.writeUInt16BE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,2,65535,0),this[Q]=m>>>8,this[Q+1]=m&255,Q+2},a.prototype.writeUint32LE=a.prototype.writeUInt32LE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,4,4294967295,0),this[Q+3]=m>>>24,this[Q+2]=m>>>16,this[Q+1]=m>>>8,this[Q]=m&255,Q+4},a.prototype.writeUint32BE=a.prototype.writeUInt32BE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,4,4294967295,0),this[Q]=m>>>24,this[Q+1]=m>>>16,this[Q+2]=m>>>8,this[Q+3]=m&255,Q+4};function ne(F,m,Q,L,W){yr(m,L,W,F,Q,7);let z=Number(m&BigInt(4294967295));F[Q++]=z,z=z>>8,F[Q++]=z,z=z>>8,F[Q++]=z,z=z>>8,F[Q++]=z;let ae=Number(m>>BigInt(32)&BigInt(4294967295));return F[Q++]=ae,ae=ae>>8,F[Q++]=ae,ae=ae>>8,F[Q++]=ae,ae=ae>>8,F[Q++]=ae,Q}function Ae(F,m,Q,L,W){yr(m,L,W,F,Q,7);let z=Number(m&BigInt(4294967295));F[Q+7]=z,z=z>>8,F[Q+6]=z,z=z>>8,F[Q+5]=z,z=z>>8,F[Q+4]=z;let ae=Number(m>>BigInt(32)&BigInt(4294967295));return F[Q+3]=ae,ae=ae>>8,F[Q+2]=ae,ae=ae>>8,F[Q+1]=ae,ae=ae>>8,F[Q]=ae,Q+8}a.prototype.writeBigUInt64LE=Ne(function(m,Q=0){return ne(this,m,Q,BigInt(0),BigInt("0xffffffffffffffff"))}),a.prototype.writeBigUInt64BE=Ne(function(m,Q=0){return Ae(this,m,Q,BigInt(0),BigInt("0xffffffffffffffff"))}),a.prototype.writeIntLE=function(m,Q,L,W){if(m=+m,Q=Q>>>0,!W){let ye=Math.pow(2,8*L-1);k(this,m,Q,L,ye-1,-ye)}let z=0,ae=1,le=0;for(this[Q]=m&255;++z<L&&(ae*=256);)m<0&&le===0&&this[Q+z-1]!==0&&(le=1),this[Q+z]=(m/ae>>0)-le&255;return Q+L},a.prototype.writeIntBE=function(m,Q,L,W){if(m=+m,Q=Q>>>0,!W){let ye=Math.pow(2,8*L-1);k(this,m,Q,L,ye-1,-ye)}let z=L-1,ae=1,le=0;for(this[Q+z]=m&255;--z>=0&&(ae*=256);)m<0&&le===0&&this[Q+z+1]!==0&&(le=1),this[Q+z]=(m/ae>>0)-le&255;return Q+L},a.prototype.writeInt8=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,1,127,-128),m<0&&(m=255+m+1),this[Q]=m&255,Q+1},a.prototype.writeInt16LE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,2,32767,-32768),this[Q]=m&255,this[Q+1]=m>>>8,Q+2},a.prototype.writeInt16BE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,2,32767,-32768),this[Q]=m>>>8,this[Q+1]=m&255,Q+2},a.prototype.writeInt32LE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,4,2147483647,-2147483648),this[Q]=m&255,this[Q+1]=m>>>8,this[Q+2]=m>>>16,this[Q+3]=m>>>24,Q+4},a.prototype.writeInt32BE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,4,2147483647,-2147483648),m<0&&(m=4294967295+m+1),this[Q]=m>>>24,this[Q+1]=m>>>16,this[Q+2]=m>>>8,this[Q+3]=m&255,Q+4},a.prototype.writeBigInt64LE=Ne(function(m,Q=0){return ne(this,m,Q,-BigInt("0x8000000000000000"),BigInt("0x7fffffffffffffff"))}),a.prototype.writeBigInt64BE=Ne(function(m,Q=0){return Ae(this,m,Q,-BigInt("0x8000000000000000"),BigInt("0x7fffffffffffffff"))});function ue(F,m,Q,L,W,z){if(Q+L>F.length)throw new RangeError("Index out of range");if(Q<0)throw new RangeError("Index out of range")}function pe(F,m,Q,L,W){return m=+m,Q=Q>>>0,W||ue(F,m,Q,4,34028234663852886e22,-34028234663852886e22),r.write(F,m,Q,L,23,4),Q+4}a.prototype.writeFloatLE=function(m,Q,L){return pe(this,m,Q,!0,L)},a.prototype.writeFloatBE=function(m,Q,L){return pe(this,m,Q,!1,L)};function he(F,m,Q,L,W){return m=+m,Q=Q>>>0,W||ue(F,m,Q,8,17976931348623157e292,-17976931348623157e292),r.write(F,m,Q,L,52,8),Q+8}a.prototype.writeDoubleLE=function(m,Q,L){return he(this,m,Q,!0,L)},a.prototype.writeDoubleBE=function(m,Q,L){return he(this,m,Q,!1,L)},a.prototype.copy=function(m,Q,L,W){if(!a.isBuffer(m))throw new TypeError("argument should be a Buffer");if(L||(L=0),!W&&W!==0&&(W=this.length),Q>=m.length&&(Q=m.length),Q||(Q=0),W>0&&W<L&&(W=L),W===L||m.length===0||this.length===0)return 0;if(Q<0)throw new RangeError("targetStart out of bounds");if(L<0||L>=this.length)throw new RangeError("Index out of range");if(W<0)throw new RangeError("sourceEnd out of bounds");W>this.length&&(W=this.length),m.length-Q<W-L&&(W=m.length-Q+L);let z=W-L;return this===m&&typeof Uint8Array.prototype.copyWithin=="function"?this.copyWithin(Q,L,W):Uint8Array.prototype.set.call(m,this.subarray(L,W),Q),z},a.prototype.fill=function(m,Q,L,W){if(typeof m=="string"){if(typeof Q=="string"?(W=Q,Q=0,L=this.length):typeof L=="string"&&(W=L,L=this.length),W!==void 0&&typeof W!="string")throw new TypeError("encoding must be a string");if(typeof W=="string"&&!a.isEncoding(W))throw new TypeError("Unknown encoding: "+W);if(m.length===1){let ae=m.charCodeAt(0);(W==="utf8"&&ae<128||W==="latin1")&&(m=ae)}}else typeof m=="number"?m=m&255:typeof m=="boolean"&&(m=Number(m));if(Q<0||this.length<Q||this.length<L)throw new RangeError("Out of range index");if(L<=Q)return this;Q=Q>>>0,L=L===void 0?this.length:L>>>0,m||(m=0);let z;if(typeof m=="number")for(z=Q;z<L;++z)this[z]=m;else{let ae=a.isBuffer(m)?m:a.from(m,W),le=ae.length;if(le===0)throw new TypeError('The value "'+m+'" is invalid for argument "value"');for(z=0;z<L-Q;++z)this[z+Q]=ae[z%le]}return this};var de={};function Qt(F,m,Q){de[F]=class extends Q{constructor(){super(),Object.defineProperty(this,"message",{value:m.apply(this,arguments),writable:!0,configurable:!0}),this.name=`${this.name} [${F}]`,this.stack,delete this.name}get code(){return F}set code(W){Object.defineProperty(this,"code",{configurable:!0,enumerable:!0,value:W,writable:!0})}toString(){return`${this.name} [${F}]: ${this.message}`}}}Qt("ERR_BUFFER_OUT_OF_BOUNDS",function(F){return F?`${F} is outside of buffer bounds`:"Attempt to access memory outside buffer bounds"},RangeError),Qt("ERR_INVALID_ARG_TYPE",function(F,m){return`The "${F}" argument must be of type number. Received type ${typeof m}`},TypeError),Qt("ERR_OUT_OF_RANGE",function(F,m,Q){let L=`The value of "${F}" is out of range.`,W=Q;return Number.isInteger(Q)&&Math.abs(Q)>2**32?W=Ie(String(Q)):typeof Q=="bigint"&&(W=String(Q),(Q>BigInt(2)**BigInt(32)||Q<-(BigInt(2)**BigInt(32)))&&(W=Ie(W)),W+="n"),L+=` It must be ${m}. Received ${W}`,L},RangeError);function Ie(F){let m="",Q=F.length,L=F[0]==="-"?1:0;for(;Q>=L+4;Q-=3)m=`_${F.slice(Q-3,Q)}${m}`;return`${F.slice(0,Q)}${m}`}function be(F,m,Q){Qe(m,"offset"),(F[m]===void 0||F[m+Q]===void 0)&&_e(m,F.length-(Q+1))}function yr(F,m,Q,L,W,z){if(F>Q||F<m){let ae=typeof m=="bigint"?"n":"",le;throw z>3?m===0||m===BigInt(0)?le=`>= 0${ae} and < 2${ae} ** ${(z+1)*8}${ae}`:le=`>= -(2${ae} ** ${(z+1)*8-1}${ae}) and < 2 ** ${(z+1)*8-1}${ae}`:le=`>= ${m}${ae} and <= ${Q}${ae}`,new de.ERR_OUT_OF_RANGE("value",le,F)}be(L,W,z)}function Qe(F,m){if(typeof F!="number")throw new de.ERR_INVALID_ARG_TYPE(m,"number",F)}function _e(F,m,Q){throw Math.floor(F)!==F?(Qe(F,Q),new de.ERR_OUT_OF_RANGE(Q||"offset","an integer",F)):m<0?new de.ERR_BUFFER_OUT_OF_BOUNDS:new de.ERR_OUT_OF_RANGE(Q||"offset",`>= ${Q?1:0} and <= ${m}`,F)}var Ds=/[^+/0-9A-Za-z-_]/g;function Ge(F){if(F=F.split("=")[0],F=F.trim().replace(Ds,""),F.length<2)return"";for(;F.length%4!==0;)F=F+"=";return F}function Ue(F,m){m=m||1/0;let Q,L=F.length,W=null,z=[];for(let ae=0;ae<L;++ae){if(Q=F.charCodeAt(ae),Q>55295&&Q<57344){if(!W){if(Q>56319){(m-=3)>-1&&z.push(239,191,189);continue}else if(ae+1===L){(m-=3)>-1&&z.push(239,191,189);continue}W=Q;continue}if(Q<56320){(m-=3)>-1&&z.push(239,191,189),W=Q;continue}Q=(W-55296<<10|Q-56320)+65536}else W&&(m-=3)>-1&&z.push(239,191,189);if(W=null,Q<128){if((m-=1)<0)break;z.push(Q)}else if(Q<2048){if((m-=2)<0)break;z.push(Q>>6|192,Q&63|128)}else if(Q<65536){if((m-=3)<0)break;z.push(Q>>12|224,Q>>6&63|128,Q&63|128)}else if(Q<1114112){if((m-=4)<0)break;z.push(Q>>18|240,Q>>12&63|128,Q>>6&63|128,Q&63|128)}else throw new Error("Invalid code point")}return z}function Ts(F){let m=[];for(let Q=0;Q<F.length;++Q)m.push(F.charCodeAt(Q)&255);return m}function Te(F,m){let Q,L,W,z=[];for(let ae=0;ae<F.length&&!((m-=2)<0);++ae)Q=F.charCodeAt(ae),L=Q>>8,W=Q%256,z.push(W),z.push(L);return z}function De(F){return t.toByteArray(Ge(F))}function en(F,m,Q,L){let W;for(W=0;W<L&&!(W+Q>=m.length||W>=F.length);++W)m[W+Q]=F[W];return W}function ve(F,m){return F instanceof m||F!=null&&F.constructor!=null&&F.constructor.name!=null&&F.constructor.name===m.name}function He(F){return F!==F}var ai=(function(){let F="0123456789abcdef",m=new Array(256);for(let Q=0;Q<16;++Q){let L=Q*16;for(let W=0;W<16;++W)m[L+W]=F[Q]+F[W]}return m})();function Ne(F){return typeof BigInt>"u"?Ve:F}function Ve(){throw new Error("BigInt not supported")}}}),uB=v2(R2(),1),ql=typeof uB.Buffer.kMaxLength=="number"?uB.Buffer.kMaxLength:2147483647,Kg=typeof uB.Buffer.kStringMaxLength=="number"?uB.Buffer.kStringMaxLength:536870888,dY=Object.freeze({MAX_LENGTH:ql,MAX_STRING_LENGTH:Kg}),gY=Symbol("events.errorMonitor"),UA=10;function Xg(e,t,r){return t==="newListener"&&r[0]==="newListener"||t==="removeListener"&&r[0]==="removeListener"?!1:C1(e,t,r)}function Zg(e,t){PA(e);let r=e._events[t];return Array.isArray(r)?r.slice():[]}function $g(e,t,r,n=!1){PA(e);let i=e._events[t];if(!Array.isArray(i)||i.length===0)return e;let s=null,o=i.slice();for(let a=o.length-1;a>=0;a-=1){let A=o[a];if(!(A.listener!==r&&A.rawListener!==r)&&!(n&&!A.once)){s=A,o.splice(a,1);break}}return s===null||(o.length===0?delete e._events[t]:e._events[t]=o,Xg(e,"removeListener",[t,s.listener])),e}function Hq(e,t){let r=String(t),n=Zg(e,r);for(let i=n.length-1;i>=0;i-=1)$g(e,r,n[i].listener);return e}function C1(e,t,r){let n=Zg(e,t);if(n.length===0)return!1;for(let i of n){i.once&&$g(e,t,i.listener,!0);try{i.listener.apply(e,r)}catch(s){let o=i0(s);if(!o.handled&&o.rethrow!==null)throw o.rethrow;return!0}}return!0}function D2(e,t){return Zg(e,t).length}function T2(e,t){return Zg(e,t).map(r=>r.listener)}function uQe(e,t){return Zg(e,t).map(r=>r.rawListener??r.listener)}function pY(e,t,r){function n(...i){return $g(e,t,n,!0),r.apply(e,i)}return Object.defineProperty(n,"listener",{value:r,configurable:!0,enumerable:!1,writable:!1}),n}function EY(e){return e&&typeof e.getMaxListeners=="function"?e.getMaxListeners():UA}function yY(e,...t){for(let r of t)r&&typeof r.setMaxListeners=="function"&&r.setMaxListeners(e)}function cQe(e,t){if(!e||typeof e.addEventListener!="function")throw new TypeError("AbortSignal is required");let r=()=>t();return e.aborted?(queueMicrotask(r),{dispose(){}}):(e.addEventListener("abort",r,{once:!0}),{dispose(){e.removeEventListener("abort",r)}})}function mY(e,t){return new Promise((r,n)=>{let i=(...o)=>{typeof e.removeListener=="function"&&e.removeListener("error",s),r(o)},s=o=>{typeof e.removeListener=="function"&&e.removeListener(t,i),n(o)};e.once(t,i),t!=="error"&&typeof e.once=="function"&&e.once("error",s)})}function BY(e){e._events=Object.create(null),e._maxListeners=UA,e._maxListenersWarned=new Set}function PA(e){if(!(!e||typeof e!="object"&&typeof e!="function")){if(typeof e._events>"u"){BY(e);return}e._maxListenersWarned instanceof Set||(e._maxListenersWarned=new Set),typeof e._maxListeners!="number"&&(e._maxListeners=UA)}}function lQe(e,t,r){let n=Number.isFinite(e._maxListeners)?e._maxListeners:UA,i=new Error(`Possible EventEmitter memory leak detected. ${r} ${t} listeners added to [EventEmitter]. MaxListeners is ${n}. Use emitter.setMaxListeners() to increase limit`);return i.name="MaxListenersExceededWarning",i.emitter=e,i.type=t,i.count=r,i}function hQe(e,t,r){if(PA(e),e._maxListenersWarned instanceof Set||(e._maxListenersWarned=new Set),e._maxListeners<=0||e._maxListenersWarned.has(t)||r<=e._maxListeners)return;e._maxListenersWarned.add(t);let n=lQe(e,t,r);if(Ce&&typeof Ce.emitWarning=="function"){Ce.emitWarning(n);return}typeof _error<"u"&&_error.applySync(void 0,[`${n.name}: ${n.message}`])}function FB(e,t,r,n=!1){PA(e);let i=e._events[t]??[];n?i.unshift(r):i.push(r),e._events[t]=i,hQe(e,t,i.length)}function Kt(){if(!this||typeof this!="object"&&typeof this!="function")return new Kt;BY(this)}Kt.prototype.addListener=function(e,t){return this.on(e,t)};Kt.prototype.on=function(e,t){if(typeof t!="function")throw new TypeError("listener must be a function");let r=String(e);return Xg(this,"newListener",[r,t]),FB(this,r,{listener:t,once:!1}),this};Kt.prototype.once=function(e,t){if(typeof t!="function")throw new TypeError("listener must be a function");let r=String(e);return Xg(this,"newListener",[r,t]),FB(this,r,{listener:t,rawListener:pY(this,r,t),once:!0}),this};Kt.prototype.prependListener=function(e,t){if(typeof t!="function")throw new TypeError("listener must be a function");let r=String(e);return Xg(this,"newListener",[r,t]),FB(this,r,{listener:t,once:!1},!0),this};Kt.prototype.prependOnceListener=function(e,t){if(typeof t!="function")throw new TypeError("listener must be a function");let r=String(e);return Xg(this,"newListener",[r,t]),FB(this,r,{listener:t,rawListener:pY(this,r,t),once:!0},!0),this};Kt.prototype.removeListener=function(e,t){return $g(this,String(e),t)};Kt.prototype.off=function(e,t){return $g(this,String(e),t)};Kt.prototype.removeAllListeners=function(e){if(PA(this),typeof e>"u"){for(let t of Object.keys(this._events))t!=="removeListener"&&Hq(this,t);delete this._events.removeListener}else Hq(this,String(e));return this};Kt.prototype.emit=function(e,...t){let r=String(e);if(r==="error"&&D2(this,r)===0)throw t[0]instanceof Error?t[0]:new Error(String(t[0]??"Unhandled error event"));let n=C1(this,r,t);return r==="error"&&(n=C1(this,String(gY),t)||n),n};Kt.prototype.listeners=function(e){return T2(this,String(e))};Kt.prototype.rawListeners=function(e){return uQe(this,String(e))};Kt.prototype.listenerCount=function(e){return D2(this,String(e))};Kt.prototype.eventNames=function(){return PA(this),Object.keys(this._events)};Kt.prototype.setMaxListeners=function(e){return PA(this),this._maxListeners=Number(e),this};Kt.prototype.getMaxListeners=function(){return PA(this),Number.isFinite(this._maxListeners)?this._maxListeners:UA};Kt.once=mY;Kt.on=function(t,r,n){let i=n&&n.signal;if(i&&i.aborted)throw i.reason??new Error("The operation was aborted");let s=(N,O)=>(t.off??t.removeListener).call(t,N,O),o=[],a=[],A=null,f=!1,l=()=>{s(r,I),s("error",S),i&&i.removeEventListener&&i.removeEventListener("abort",_)},p={next(){let N=o.shift();if(N!==void 0)return Promise.resolve({value:N,done:!1});if(A){let O=A;return A=null,l(),Promise.reject(O)}return f?Promise.resolve({value:void 0,done:!0}):new Promise((O,x)=>a.push({resolve:O,reject:x}))},return(){f=!0,l();for(let N of a)N.resolve({value:void 0,done:!0});return a.length=0,Promise.resolve({value:void 0,done:!0})},throw(N){return A=N,l(),Promise.reject(N)},[Symbol.asyncIterator](){return this}};function I(...N){let O=a.shift();O?O.resolve({value:N,done:!1}):o.push(N)}function S(N){let O=a.shift();O?(l(),O.reject(N)):A=N}function _(){p.return()}return t.on(r,I),t.on("error",S),i&&i.addEventListener&&i.addEventListener("abort",_,{once:!0}),p};Kt.addAbortListener=function(t,r){return t&&t.aborted?queueMicrotask(()=>r(typeof kl=="function"?new kl("abort"):{type:"abort"})):t&&t.addEventListener&&t.addEventListener("abort",r,{once:!0}),{[Symbol.dispose](){t&&t.removeEventListener&&t.removeEventListener("abort",r)}}};Kt.getEventListeners=T2;Kt.getMaxListeners=EY;Kt.setMaxListeners=yY;Object.defineProperty(Kt,"defaultMaxListeners",{get(){return UA},set(e){UA=Number(e)}});var Ql={addAbortListener:cQe,defaultMaxListeners:UA,errorMonitor:gY,EventEmitter:Kt,getEventListeners:T2,getMaxListeners:EY,listenerCount:D2,once:mY,setMaxListeners:yY};et("_eventsModule",Ql);var Se=v2(R2(),1),Bu=Se.Buffer;typeof Bu.kMaxLength!="number"&&(Bu.kMaxLength=ql);typeof Bu.kStringMaxLength!="number"&&(Bu.kStringMaxLength=Kg);(typeof Bu.constants!="object"||Bu.constants===null)&&(Bu.constants={MAX_LENGTH:ql,MAX_STRING_LENGTH:Kg});var gg=Se.Buffer.prototype;if(typeof gg.utf8Slice!="function"){let e=["utf8","latin1","ascii","hex","base64","ucs2","utf16le"];for(let t of e)typeof gg[t+"Slice"]!="function"&&(gg[t+"Slice"]=function(r,n){return this.toString(t,r,n)}),typeof gg[t+"Write"]!="function"&&(gg[t+"Write"]=function(r,n,i){return this.write(r,n??0,i??this.length-(n??0),t)})}var pg=Se.Buffer;if(typeof pg.allocUnsafe=="function"&&!pg.allocUnsafe._secureExecPatched){let e=pg.allocUnsafe;pg.allocUnsafe=function(r){try{return e.call(this,r)}catch(n){throw n instanceof RangeError&&typeof r=="number"&&r>ql?new Error("Array buffer allocation failed"):n}},pg.allocUnsafe._secureExecPatched=!0}var IY=Se.Buffer,Jm={scheduler:{wait(e=0,t=void 0){return Jm.setTimeout(e,void 0,t)},yield(){return Jm.setImmediate()}},setImmediate(e=void 0,t=void 0){return t?.signal?.aborted?Promise.reject(t.signal.reason??new Error("The operation was aborted")):new Promise((r,n)=>{let i=()=>n(t.signal.reason??new Error("The operation was aborted"));t?.signal?.addEventListener?.("abort",i,{once:!0}),globalThis.setImmediate?.(()=>{t?.signal?.removeEventListener?.("abort",i),r(e)})??globalThis.setTimeout?.(()=>{t?.signal?.removeEventListener?.("abort",i),r(e)},0)})},setInterval(e=1,t=void 0,r=void 0){let n=!0,i=r?.signal;return i?.aborted&&(n=!1),{[Symbol.asyncIterator](){return this},async next(){if(!n)return{done:!0,value:void 0};try{let s=await Jm.setTimeout(e,t,{signal:i});return n?{done:!1,value:s}:{done:!0,value:void 0}}catch(s){throw n=!1,s}},async return(){return n=!1,{done:!0,value:void 0}}}},setTimeout(e=1,t=void 0,r=void 0){return r?.signal?.aborted?Promise.reject(r.signal.reason??new Error("The operation was aborted")):new Promise((n,i)=>{let s=globalThis.setTimeout?.(()=>{r?.signal?.removeEventListener?.("abort",o),n(t)},e??0),o=()=>{typeof globalThis.clearTimeout=="function"&&globalThis.clearTimeout(s),i(r.signal.reason??new Error("The operation was aborted"))};r?.signal?.addEventListener?.("abort",o,{once:!0})})}},bY=new Set;function Fa(){return Array.from(bY,e=>({storage:e,hasStore:e._hasStore===!0,store:e._store}))}function qq(e){for(let t of e)t.storage._hasStore=t.hasStore,t.storage._store=t.store}function kB(e,t,r,n){if(typeof t!="function")return t;let i=Fa();qq(e);try{return t.apply(r,n)}finally{qq(i)}}function Ul(e,t){return typeof e!="function"?e:function(...r){try{return kB(t,e,this,r)}catch(n){throw jB(n),n}}}var CY={AsyncLocalStorage:class{constructor(){this._hasStore=!1,this._store=void 0,bY.add(this)}disable(){this._hasStore=!1,this._store=void 0}enterWith(e){this._hasStore=!0,this._store=e}exit(e,...t){let r={hasStore:this._hasStore,store:this._store};this._hasStore=!1,this._store=void 0;let n=!0;try{let i=e(...t);return i&&typeof i.then=="function"?(n=!1,Promise.resolve(i).finally(()=>{this._hasStore=r.hasStore,this._store=r.store})):i}finally{n&&(this._hasStore=r.hasStore,this._store=r.store)}}getStore(){return this._hasStore?this._store:void 0}run(e,t,...r){let n={hasStore:this._hasStore,store:this._store};this._hasStore=!0,this._store=e;let i=!0;try{let s=t(...r);return s&&typeof s.then=="function"?(i=!1,Promise.resolve(s).finally(()=>{this._hasStore=n.hasStore,this._store=n.store})):s}finally{i&&(this._hasStore=n.hasStore,this._store=n.store)}}},AsyncResource:class{constructor(e="SecureExecAsyncResource"){this.type=e,this._asyncLocalStorageSnapshot=Fa()}emitBefore(){}emitAfter(){}emitDestroy(){}asyncId(){return 0}triggerAsyncId(){return 0}runInAsyncScope(e,t,...r){return kB(this._asyncLocalStorageSnapshot,e,t,r)}},createHook(){return{enable(){return this},disable(){return this}}},executionAsyncId(){return 0},triggerAsyncId(){return 0}};if(!Promise.prototype.__agentOSAsyncLocalStoragePatched){let e=Promise.prototype.then;Promise.prototype.then=function(t,r){let n=Fa(),i=typeof r=="function"?s=>{if(jB(s))throw s;return r(s)}:r;return e.call(this,Ul(t,n),Ul(i,n))},Object.defineProperty(Promise.prototype,"__agentOSAsyncLocalStoragePatched",{value:!0,configurable:!0})}var N2={create:"kernelTimerCreate",arm:"kernelTimerArm",clear:"kernelTimerClear"};et("_asyncHooksModule",CY);var Sa=typeof queueMicrotask=="function"?queueMicrotask:function(e){Promise.resolve().then(e)};function QY(e){let t=Number(e??0);return!Number.isFinite(t)||t<=0?0:Math.floor(t)}function dQe(e){if(e&&typeof e=="object"&&e._id!==void 0)return e._id;if(typeof e=="number")return e}function M2(e,t){try{return zg(N2.create,e,t)}catch(r){throw r instanceof Error&&r.message.includes("EAGAIN")?new Error("ERR_RESOURCE_BUDGET_EXCEEDED: maximum number of timers exceeded"):r}}function e0(e){zg(N2.arm,e)}var F2=class{constructor(e){y(this,"_id");y(this,"_destroyed");y(this,"_refed");this._id=e,this._destroyed=!1,this._refed=!0}ref(){return this._refed=!0,this}unref(){return this._refed=!1,this}hasRef(){return this._refed}refresh(){return!this._destroyed&&_o.has(this._id)&&e0(this._id),this}[Symbol.toPrimitive](){return this._id}},_o=new Map,jm=[];function k2(){if(typeof wu<"u"&&wu)return 0;let e=0;for(let t of _o.values())t.handle?.hasRef?.()!==!1&&(e+=1);return e}function cB(){if(k2()===0&&jm.length>0){let e=jm;jm=[],e.forEach(t=>t())}}function gQe(){return k2()}function pQe(){return k2()===0?Promise.resolve():new Promise(e=>{jm.push(e),cB()})}var zm=[],Q1=!1;function EQe(){for(Q1=!1;zm.length>0;){let e=zm.shift();if(!e)break;try{e.callback(...e.args)}catch(t){let r=i0(t);!r.handled&&r.rethrow!==null&&(zm.length=0,IV(r.rethrow));return}}}function yQe(){if(Q1)return;Q1=!0;let e=Fa();Sa(()=>kB(e,EQe,globalThis,[]))}function mQe(e,t){let r=typeof t=="number"?t:Number(t?.timerId);if(!Number.isFinite(r))return;let n=_o.get(r);if(n){n.repeat||(n.handle._destroyed=!0,_o.delete(r));try{n.callback(...n.args)}catch(i){let s=i0(i);if(!s.handled&&s.rethrow!==null)throw s.rethrow;return}if(typeof wu<"u"&&wu){cB();return}n.repeat&&_o.has(r)&&e0(r),cB()}}function U2(e,t,...r){let n=Math.max(1,QY(t)),i=M2(n,!1),s=new F2(i),o=Fa();return _o.set(i,{handle:s,callback:Ul(e,o),args:r,repeat:!1}),e0(i),s}function UB(e){let t=dQe(e);if(t===void 0)return;let r=_o.get(t);r&&(r.handle._destroyed=!0,_o.delete(t)),zg(N2.clear,t),cB()}function x2(e,t,...r){let n=Math.max(1,QY(t)),i=M2(n,!0),s=new F2(i),o=Fa();return _o.set(i,{handle:s,callback:Ul(e,o),args:r,repeat:!0}),e0(i),s}function L2(e){UB(e)}et("_timerDispatch",mQe);et("_getPendingTimerCount",gQe);et("_waitForTimerDrain",pQe);function lB(e,...t){let r=M2(0,!1),n=new F2(r),i=Fa();return _o.set(r,{handle:n,callback:Ul(e,i),args:t,repeat:!1}),e0(r),n}function wY(e){UB(e)}var BQe={stdinIsTTY:!1,stdoutIsTTY:!1,stderrIsTTY:!1,cols:80,rows:24},Bo;function qv(e){if(typeof _kernelIsattyRaw>"u")throw new Error("_kernelIsattyRaw is unavailable");return _kernelIsattyRaw.applySync(void 0,[e])===!0}function IQe(e){if(typeof _kernelTtySizeRaw>"u")throw new Error("_kernelTtySizeRaw is unavailable");let t=_kernelTtySizeRaw.applySync(void 0,[e]);if(!t||typeof t.cols!="number"||typeof t.rows!="number")throw new Error("_kernelTtySizeRaw returned an invalid size");return t}function xg(){if(Bo)return Bo;if(typeof __runtimeTtyConfig<"u")return Bo=__runtimeTtyConfig,Bo;try{Bo={stdinIsTTY:qv(0),stdoutIsTTY:qv(1),stderrIsTTY:qv(2),cols:80,rows:24}}catch{return Bo=BQe,Bo}for(let e of[1,0])try{let t=IQe(e);Bo.cols=t.cols,Bo.rows=t.rows;break}catch{}return Bo}function bQe(){return xg().stdoutIsTTY}function CQe(){return xg().stderrIsTTY}function QQe(e,t){if(typeof e=="function")return e;if(typeof t=="function")return t}function km(e,t,r,n){let i=e[r]?e[r].slice():[],s=t[r]?t[r].slice():[];s.length>0&&(t[r]=[]);for(let o of i)o(...n);for(let o of s)o(...n);return i.length+s.length>0}function SY(e){let t={},r={},n=(s,o)=>{if(t[s]){let a=t[s].indexOf(o);a!==-1&&t[s].splice(a,1)}if(r[s]){let a=r[s].indexOf(o);a!==-1&&r[s].splice(a,1)}},i={write(s,o,a){s instanceof Uint8Array||typeof Se.Buffer<"u"&&Se.Buffer.isBuffer(s)?e.write(s):e.write(String(s));let A=QQe(o,a);return A&&Sa(()=>A(null)),!0},end(s,o,a){return typeof s=="function"?(a=s,s=void 0):typeof o=="function"&&(a=o),s!=null&&i.write(s),i.writableEnded=!0,typeof a=="function"&&Sa(()=>a()),Sa(()=>km(t,r,"finish",[])),i},destroyed:!1,destroy(s){return i.destroyed||(i.destroyed=!0,s&&Sa(()=>km(t,r,"error",[s])),Sa(()=>km(t,r,"close",[]))),i},cork(){},uncork(){},setDefaultEncoding(){return i},on(s,o){return t[s]||(t[s]=[]),t[s].push(o),i},once(s,o){return r[s]||(r[s]=[]),r[s].push(o),i},off(s,o){return n(s,o),i},removeListener(s,o){return n(s,o),i},addListener(s,o){return i.on(s,o)},emit(s,...o){return km(t,r,s,o)},writable:!0,get isTTY(){return e.isTTY()},get columns(){return xg().cols},get rows(){return xg().rows}};return i}var P2=SY({write(e){typeof _log<"u"&&_log.applySync(void 0,[e])},isTTY:bQe}),O2=SY({write(e){typeof _error<"u"&&_error.applySync(void 0,[e])},isTTY:CQe});function wQe(e){if(typeof e=="string")return e;if(typeof e=="bigint")return`${e}n`;if(e instanceof Error)return e.stack||e.message||String(e);if(typeof e=="object"&&e!==null)try{return JSON.stringify(e)}catch{}return String(e)}function w1(e){return typeof builtinUtilModule<"u"&&typeof builtinUtilModule?.formatWithOptions=="function"?builtinUtilModule.formatWithOptions({colors:!1},...e):e.map(t=>wQe(t)).join(" ")}function yl(e){return`${w1(e)}
-`}var H2=class{constructor(e=P2,t=O2){this._stdout=e,this._stderr=t,this._counts=new Map,this._times=new Map;for(let r of["assert","clear","count","countReset","debug","dir","dirxml","error","group","groupCollapsed","groupEnd","info","log","table","time","timeEnd","timeLog","trace","warn"])this[r]=this[r].bind(this)}log(...e){this._stdout.write(yl(e))}info(...e){this._stdout.write(yl(e))}debug(...e){this._stdout.write(yl(e))}warn(...e){this._stderr.write(yl(e))}error(...e){this._stderr.write(yl(e))}dir(e){this._stdout.write(yl([e]))}dirxml(...e){this.log(...e)}trace(...e){let t=w1(e),r=new Error(t);this._stderr.write(`${r.stack||t}
-`)}assert(e,...t){if(!e){let r=t.length>0?w1(t):"Assertion failed";this._stderr.write(`${r}
-`)}}clear(){}count(e="default"){let t=(this._counts.get(e)??0)+1;this._counts.set(e,t),this.log(`${e}: ${t}`)}countReset(e="default"){this._counts.delete(e)}group(...e){e.length>0&&this.log(...e)}groupCollapsed(...e){e.length>0&&this.log(...e)}groupEnd(){}table(e){this.log(e)}time(e="default"){this._times.set(e,Date.now())}timeEnd(e="default"){if(!this._times.has(e))return;let t=this._times.get(e);this._times.delete(e),this.log(`${e}: ${Date.now()-t}ms`)}timeLog(e="default",...t){if(!this._times.has(e))return;let r=this._times.get(e);this.log(`${e}: ${Date.now()-r}ms`,...t)}},ht=new H2;globalThis.console=ht;function SQe(){return{run(e,...t){return typeof e=="function"?e(...t):void 0}}}function _Qe(e=P2,t=O2){return new H2(e,t)}var vQe={Console:H2,assert:ht.assert.bind(ht),clear:ht.clear.bind(ht),context:_Qe,count:ht.count.bind(ht),countReset:ht.countReset.bind(ht),createTask:SQe,debug:ht.debug.bind(ht),dir:ht.dir.bind(ht),dirxml:ht.dirxml.bind(ht),error:ht.error.bind(ht),group:ht.group.bind(ht),groupCollapsed:ht.groupCollapsed.bind(ht),groupEnd:ht.groupEnd.bind(ht),info:ht.info.bind(ht),log:ht.log.bind(ht),profile:void 0,profileEnd:void 0,table:ht.table.bind(ht),time:ht.time.bind(ht),timeEnd:ht.timeEnd.bind(ht),timeLog:ht.timeLog.bind(ht),timeStamp:void 0,trace:ht.trace.bind(ht),warn:ht.warn.bind(ht)};function Km(e){return!e||typeof e.formatWithOptions=="function"||(e.formatWithOptions=function(r,n,...i){let s=f=>{if(typeof e.inspect=="function")return e.inspect(f,r);try{return JSON.stringify(f)}catch{return String(f)}},o=f=>typeof f=="string"?f:s(f);if(typeof n!="string")return[n,...i].map(o).join(" ");let a=0,A=n.replace(/%[sdifjoO%]/g,f=>{if(f==="%%")return"%";if(a>=i.length)return f;let l=i[a++];switch(f){case"%s":return String(l);case"%d":return Number(l).toString();case"%i":return Number.parseInt(l,10).toString();case"%f":return Number.parseFloat(l).toString();case"%j":try{return JSON.stringify(l)}catch{return"[Circular]"}case"%o":case"%O":return s(l);default:return f}});return a>=i.length?A:[A,...i.slice(a).map(o)].join(" ")}),e}function S1(e){let t=new Error(`node:worker_threads ${e} is not available in the secure-exec guest runtime`);return t.code="ERR_NOT_IMPLEMENTED",t}var _1=class extends Kt{postMessage(){}start(){}close(){this.emit("close")}unref(){return this}ref(){return this}},RQe=class{constructor(){this.port1=new _1,this.port2=new _1}},DQe=class extends Kt{constructor(){throw super(),S1("Worker")}},TQe={BroadcastChannel:globalThis.BroadcastChannel,MessageChannel:globalThis.MessageChannel??RQe,MessagePort:globalThis.MessagePort??_1,SHARE_ENV:Symbol.for("secure-exec.worker_threads.SHARE_ENV"),Worker:DQe,getEnvironmentData(){},isMainThread:!0,markAsUncloneable(){},markAsUntransferable(){},moveMessagePortToContext(){throw S1("moveMessagePortToContext")},parentPort:null,postMessageToThread(){throw S1("postMessageToThread")},receiveMessageOnPort(){},resourceLimits:{},setEnvironmentData(){},threadId:0,workerData:null};function NQe(e){return e===0?!!Ce.stdin?.isTTY:e===1?!!Ce.stdout?.isTTY:e===2?!!Ce.stderr?.isTTY:!1}function MQe(e){return e===0?Ce.stdin:void 0}function FQe(e){if(e===1)return Ce.stdout;if(e===2)return Ce.stderr}var kQe={ReadStream:class{constructor(t){return MQe(t)}},WriteStream:class{constructor(t){return FQe(t)}},isatty:NQe};async function Gq(e){let t=_Y(e);if(t){let r=[];for await(let n of t)r.push(Buffer.isBuffer(n)?n:Buffer.from(n??[]));return r}if(e&&typeof e[Symbol.asyncIterator]=="function"){let r=[];for await(let n of e)r.push(Buffer.isBuffer(n)?n:Buffer.from(n??[]));return r}if(e&&typeof e.getReader=="function"){let r=e.getReader(),n=[];try{for(;;){let{value:i,done:s}=await r.read();if(s)break;n.push(Buffer.from(i??[]))}}finally{r.releaseLock?.()}return n}throw new TypeError("expected an async iterable or WHATWG ReadableStream")}function UQe(e,t=""){return{size:e.byteLength,type:t,async arrayBuffer(){return e.buffer.slice(e.byteOffset,e.byteOffset+e.byteLength)},stream(){return new ReadableStream({start(r){r.enqueue(e),r.close()}})},async text(){return e.toString("utf8")}}}var Xm={async arrayBuffer(e){let t=await Gq(e),r=Buffer.concat(t);return r.buffer.slice(r.byteOffset,r.byteOffset+r.byteLength)},async blob(e){return UQe(await Xm.buffer(e))},async buffer(e){return Buffer.concat(await Gq(e))},async json(e){return JSON.parse(await Xm.text(e))},async text(e){return(await Xm.buffer(e)).toString("utf8")}};function _Y(e){return!e||typeof e.on!="function"||typeof e.read!="function"&&typeof e.pipe!="function"&&typeof e.resume!="function"?null:{async*[Symbol.asyncIterator](){let t=[],r=[],n=!1,i=null,s=[],o=typeof e.off=="function"?e.off.bind(e):typeof e.removeListener=="function"?e.removeListener.bind(e):null,a=()=>{for(;r.length>0;){if(i){r.shift()?.(Promise.reject(i));continue}if(t.length>0){r.shift()?.(Promise.resolve({done:!1,value:t.shift()}));continue}if(n){r.shift()?.(Promise.resolve({done:!0,value:void 0}));continue}break}},A=(I,S)=>{e.on(I,S),s.push(()=>o?.(I,S))},f=I=>{t.push(I),a()},l=()=>{n=!0,a()},p=I=>{i=I,n=!0,a()};A("data",f),A("end",l),A("close",l),A("error",p),e.resume?.();try{for(;;){if(i)throw i;if(t.length>0){yield t.shift();continue}if(n)return;let I=await new Promise(S=>{r.push(S)});if(I.done)return;yield I.value}}finally{for(;s.length>0;)s.pop()?.()}}}}var vY={finished(e){return new Promise((t,r)=>{if(!e||typeof e!="object"){r(new TypeError("finished() expects a stream"));return}let n=[],i=(o,a)=>{e?.once?.(o,a),n.push(()=>e?.off?.(o,a))},s=o=>a=>{for(;n.length>0;)n.pop()?.();o(a)};i("finish",s(t)),i("end",s(t)),i("close",s(t)),i("error",s(r))})},async pipeline(e,t){let r=_Y(e)??(e&&typeof e[Symbol.asyncIterator]=="function"?e:e&&typeof e.getReader=="function"?{async*[Symbol.asyncIterator](){let i=e.getReader();try{for(;;){let{value:s,done:o}=await i.read();if(o)break;yield Buffer.from(s??[])}}finally{i.releaseLock?.()}}}:null);if(r==null)throw new TypeError("pipeline source must be async iterable or a WHATWG ReadableStream");if(!t||typeof t.write!="function")throw new TypeError("pipeline destination must provide write()");for await(let i of r)await new Promise((s,o)=>{try{t.write(i,a=>a?o(a):s())}catch(a){o(a)}});let n=vY.finished(t);return typeof t.end=="function"&&await new Promise((i,s)=>{try{t.end(o=>o?s(o):i())}catch(o){s(o)}}),await n,t}};function iu(e){let t=String(e).replace(/^node:/,""),r=new Error(`node:${t} is not available in the secure-exec guest runtime`);return r.code="ERR_ACCESS_DENIED",r}var RY=class{constructor(e=""){this.name=String(e),this._subscribers=new Set}get hasSubscribers(){return this._subscribers.size>0}publish(e){for(let t of Array.from(this._subscribers))t(e,this.name)}subscribe(e){typeof e=="function"&&this._subscribers.add(e)}unsubscribe(e){return this._subscribers.delete(e)}runStores(e,t,r,...n){return typeof t!="function"?t:t.apply(r,n)}},Yq=new Map;function _a(e=""){let t=String(e),r=Yq.get(t);return r||(r=new RY(t),Yq.set(t,r)),r}function xQe(e=""){let t=String(e),r={start:_a(`tracing:${t}:start`),end:_a(`tracing:${t}:end`),asyncStart:_a(`tracing:${t}:asyncStart`),asyncEnd:_a(`tracing:${t}:asyncEnd`),error:_a(`tracing:${t}:error`),subscribe(){},unsubscribe(){return!0},traceSync(n,i,s,...o){return typeof n!="function"?n:n.apply(s,o)},tracePromise(n,i,s,...o){return typeof n!="function"?Promise.resolve(n):Promise.resolve(n.apply(s,o))},traceCallback(n,i,s,o,...a){return typeof n!="function"?n:n.apply(o,a)}};return Object.defineProperty(r,"hasSubscribers",{get(){return r.start.hasSubscribers||r.end.hasSubscribers||r.asyncStart.hasSubscribers||r.asyncEnd.hasSubscribers||r.error.hasSubscribers},enumerable:!1,configurable:!0}),r}var LQe={Channel:RY,channel:_a,hasSubscribers(e=""){return _a(e).hasSubscribers},subscribe(e="",t){return _a(e).subscribe(t)},tracingChannel:xQe,unsubscribe(e="",t){return _a(e).unsubscribe(t)}};function ml(e,t=2){return String(Math.trunc(e)).padStart(t,"0")}function PQe(e){let t=e instanceof Date?e:new Date(e??Date.now());if(Number.isNaN(t.getTime()))throw new RangeError("Invalid time value");return t}function OQe(e,t={}){let r=PQe(e),n=t&&typeof t=="object"?t:{},i=ml(r.getUTCFullYear(),4),s=ml(r.getUTCMonth()+1),o=ml(r.getUTCDate()),a=ml(r.getUTCHours()),A=ml(r.getUTCMinutes()),f=ml(r.getUTCSeconds()),l=`${i}-${s}-${o}`,p=`${a}:${A}:${f}`,I=n.dateStyle||n.year||n.month||n.day||!n.timeStyle&&!n.hour&&!n.minute&&!n.second,S=n.timeStyle||n.hour||n.minute||n.second;return I&&S?`${l}, ${p}`:S?p:l}var HQe=class{constructor(e="en-US",t={}){this.locales=e,this.options=t&&typeof t=="object"?{...t}:{},this.format=this.format.bind(this)}format(e=Date.now()){return OQe(e,this.options)}formatToParts(e=Date.now()){return[{type:"literal",value:this.format(e)}]}formatRange(e,t){return`${this.format(e)} \u2013 ${this.format(t)}`}formatRangeToParts(e,t){return[{type:"literal",value:this.formatRange(e,t),source:"shared"}]}resolvedOptions(){return{locale:Array.isArray(this.locales)?this.locales.find(t=>typeof t=="string")||"en-US":typeof this.locales=="string"?this.locales:"en-US",calendar:"gregory",numberingSystem:"latn",timeZone:"UTC",...this.options}}static supportedLocalesOf(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"):typeof e=="string"?[e]:[]}};function Um(e,t){let r=Number(e);return Number.isFinite(r)?Math.min(20,Math.max(0,Math.trunc(r))):t}function qQe(e){let[t,r]=e.split("."),n=t.startsWith("-")?"-":"",s=(n?t.slice(1):t).replace(/\B(?=(\d{3})+(?!\d))/g,",");return r===void 0?`${n}${s}`:`${n}${s}.${r}`}var GQe=class{constructor(e="en-US",t={}){this.locales=e,this.options=t&&typeof t=="object"?{...t}:{},this.format=this.format.bind(this)}format(e){let t=Number(e);if(Number.isNaN(t))return"NaN";if(t===1/0)return"\u221E";if(t===-1/0)return"-\u221E";let r=Um(this.options.minimumFractionDigits,0),n=Math.max(r,Um(this.options.maximumFractionDigits,Math.max(r,3))),i=t.toFixed(n);if(n>r){i=i.replace(/(\.\d*?)0+$/,"$1").replace(/\.$/,"");let s=i.includes(".")?i.length-i.indexOf(".")-1:0;s<r&&(i+=`${s===0?".":""}${"0".repeat(r-s)}`)}return this.options.useGrouping===!1?i:qQe(i)}formatToParts(e){return[{type:"literal",value:this.format(e)}]}resolvedOptions(){return{locale:Array.isArray(this.locales)?this.locales.find(t=>typeof t=="string")||"en-US":typeof this.locales=="string"?this.locales:"en-US",numberingSystem:"latn",style:"decimal",minimumFractionDigits:Um(this.options.minimumFractionDigits,0),maximumFractionDigits:Um(this.options.maximumFractionDigits,3),useGrouping:this.options.useGrouping!==!1,...this.options}}static supportedLocalesOf(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"):typeof e=="string"?[e]:[]}};function YQe(e){let t=e.Intl&&typeof e.Intl=="object"?e.Intl:{};t.DateTimeFormat=HQe,t.NumberFormat=GQe,e.Intl=t,Date.prototype.toLocaleString=function(r,n){return new e.Intl.DateTimeFormat(r,n).format(this)},Date.prototype.toLocaleDateString=function(r,n){return new e.Intl.DateTimeFormat(r,{...n||{},hour:void 0,minute:void 0,second:void 0}).format(this)},Date.prototype.toLocaleTimeString=function(r,n){return new e.Intl.DateTimeFormat(r,{hour:"2-digit",minute:"2-digit",second:"2-digit",...n||{}}).format(this)},Number.prototype.toLocaleString=function(r,n){return new e.Intl.NumberFormat(r,n).format(this.valueOf())}}function Gv(e,t,r){let n=new RangeError(`The value of "${e}" is out of range. It must be ${t}. Received ${String(r)}`);return n.code="ERR_OUT_OF_RANGE",n}function DY(e){return{name:String(e?.name??""),entryType:String(e?.entryType??""),startTime:Number(e?.startTime??0),duration:Number(e?.duration??0)}}function TY(e){return{getEntries(){return e.slice()},getEntriesByName(t,r=void 0){let n=String(t??""),i=e.filter(s=>s.name===n);return typeof r=="string"?i.filter(s=>s.entryType===r):i},getEntriesByType(t){let r=String(t??"");return e.filter(n=>n.entryType===r)}}}function WQe(){let e=[];return{percentile(t){let r=Number(t);if(!Number.isFinite(r)||r<=0||r>100)throw Gv("percentile","> 0 && <= 100",t);if(e.length===0)return 0;let n=e.slice().sort((s,o)=>s-o),i=Math.min(n.length-1,Math.max(0,Math.ceil(r/100*n.length)-1));return n[i]},record(t){let r=Number(t);if(!Number.isInteger(r))throw Gv("val","an integer",t);if(r<1||r>Number.MAX_SAFE_INTEGER)throw Gv("val",`>= 1 && <= ${Number.MAX_SAFE_INTEGER}`,t);e.push(r)}}}var xm=(()=>{let e=new Map,t=[],r=new Set,n=typeof performance<"u"&&performance&&typeof performance.now=="function"?performance:{now(){return Hl()},timeOrigin:Date.now()-Hl()};typeof n.mark!="function"&&(n.mark=function(A){let f={name:String(A??""),entryType:"mark",startTime:n.now(),duration:0},l=e.get(f.name)??[];return l.push(f),e.set(f.name,l),f}),typeof n.measure!="function"&&(n.measure=function(A,f,l){let p=String(A??""),I=0,S=n.now();if(typeof f=="string"){let N=e.get(f);if(N?.length&&(I=N[N.length-1].startTime),typeof l=="string"){let O=e.get(l);O?.length&&(S=O[O.length-1].startTime)}}else if(f&&typeof f=="object"){if(typeof f.start=="number")I=f.start;else if(typeof f.startMark=="string"){let N=e.get(f.startMark);N?.length&&(I=N[N.length-1].startTime)}if(typeof f.end=="number")S=f.end;else if(typeof f.endMark=="string"){let N=e.get(f.endMark);N?.length&&(S=N[N.length-1].startTime)}}let _={name:p,entryType:"measure",startTime:I,duration:Math.max(0,S-I)};return t.push(_),_}),typeof n.getEntriesByName!="function"&&(n.getEntriesByName=function(A,f=void 0){let l=String(A??""),I=[...e.get(l)??[],...t.filter(S=>S.name===l)];return typeof f=="string"?I.filter(S=>S.entryType===f):I}),typeof n.getEntries!="function"&&(n.getEntries=function(){return[...e.values()].flatMap(A=>[...A]).concat(t)}),typeof n.getEntriesByType!="function"&&(n.getEntriesByType=function(A){let f=String(A??"");return n.getEntries().filter(l=>l.entryType===f)}),typeof n.clearMarks!="function"&&(n.clearMarks=function(A=void 0){if(typeof A>"u"){e.clear();return}e.delete(String(A))}),typeof n.clearMeasures!="function"&&(n.clearMeasures=function(A=void 0){if(typeof A>"u"){t.length=0;return}let f=String(A);for(let l=t.length-1;l>=0;l-=1)t[l]?.name===f&&t.splice(l,1)});let i=A=>{A._deliveryQueued||(A._deliveryQueued=!0,Sa(()=>{if(A._deliveryQueued=!1,!A._connected)return;let f=A.takeRecords();A._callback(TY(f),A)}))},s=A=>{let f=DY(A);for(let l of r)l._entryTypes.has(f.entryType)&&(l._records.push(f),i(l))},o=n.mark.bind(n);n.mark=function(...A){let f=o(...A);return s(f),f};let a=n.measure.bind(n);return n.measure=function(...A){let f=a(...A);return s(f),f},n.__agentOSObservers=r,n})(),VQe={PerformanceObserver:class{constructor(e){if(typeof e!="function")throw new TypeError("PerformanceObserver callback must be a function");this._callback=e,this._connected=!1,this._deliveryQueued=!1,this._entryTypes=new Set,this._records=[]}static get supportedEntryTypes(){return["mark","measure"]}observe(e={}){let t=Array.isArray(e?.entryTypes)?e.entryTypes.map(r=>String(r)):typeof e?.type=="string"?[String(e.type)]:[];if(t.length===0)throw new TypeError("PerformanceObserver.observe() requires an entryTypes array or type string");if(this.disconnect(),this._entryTypes=new Set(t),this._connected=!0,xm.__agentOSObservers.add(this),e?.buffered){for(let r of this._entryTypes)for(let n of xm.getEntriesByType(r))this._records.push(DY(n));this._records.length>0&&(this._deliveryQueued=!0,Sa(()=>{if(this._deliveryQueued=!1,!this._connected)return;let r=this.takeRecords();this._callback(TY(r),this)}))}}disconnect(){this._connected=!1,xm.__agentOSObservers.delete(this)}takeRecords(){let e=this._records.slice();return this._records.length=0,e}},constants:{},createHistogram(){return WQe()},performance:xm};function NY(e){let t=JSON.stringify(e??null);return Buffer.from(t,"utf8")}function MY(e){let t=Buffer.isBuffer(e)?e:Buffer.from(e??[]);return JSON.parse(t.toString("utf8"))}var Wq=class{constructor(){this._value=null}writeHeader(){}writeValue(e){this._value=e}releaseBuffer(){return NY(this._value)}transferArrayBuffer(){}},Vq=class{constructor(e){this._buffer=e}readHeader(){}readValue(){return MY(this._buffer)}transferArrayBuffer(){}};function JQe(){let e=Number(globalThis.__agentOSV8HeapLimitBytes);return Number.isFinite(e)&&e>0?e:128*1024*1024}function jQe(){let e=JQe();return{total_heap_size:Math.max(64*1024*1024,Math.floor(e/2)),total_heap_size_executable:1024*1024,total_physical_size:Math.max(64*1024*1024,Math.floor(e/2)),total_available_size:Math.max(0,e-64*1024*1024),used_heap_size:Math.max(0,Math.min(e,Math.floor(e*.4))),heap_size_limit:e,malloced_memory:8192,peak_malloced_memory:16384,does_zap_garbage:0,number_of_native_contexts:1,number_of_detached_contexts:0,total_global_handles_size:16384,used_global_handles_size:8192,external_memory:0}}function zQe(){return[]}function KQe(){return{code_and_metadata_size:0,bytecode_and_metadata_size:0,external_script_source_size:0,cpu_profiler_metadata_size:0}}function XQe(){return{committed_size_bytes:0,resident_size_bytes:0,used_size_bytes:0,space_statistics:[]}}function ZQe(){return Readable.fromWeb(new ReadableStream({start(e){e.enqueue(Buffer.from("{}")),e.close()}}))}var $Qe={cachedDataVersionTag(){return 0},DefaultDeserializer:Vq,DefaultSerializer:Wq,Deserializer:Vq,GCProfiler:class{start(){}stop(){return[]}},Serializer:Wq,deserialize:MY,getCppHeapStatistics:XQe,getHeapCodeStatistics:KQe,getHeapSnapshot:ZQe,getHeapSpaceStatistics:zQe,getHeapStatistics:jQe,isStringOneByteRepresentation(e){return typeof e=="string"&&!/[^\x00-\xff]/.test(e)},promiseHooks:{},queryObjects(){return[]},serialize:NY,setFlagsFromString(){},setHeapSnapshotNearHeapLimit(){return[]},startCpuProfile(){return{stop(){return{}}}},startupSnapshot:{},stopCoverage(){return[]},takeCoverage(){return[]},writeHeapSnapshot(){return""}},v1=typeof Symbol=="function"?Symbol.for("secure-exec.vm.context"):"__secure_exec_vm_context__",hB=typeof Symbol=="function"?Symbol.for("secure-exec.vm.context.id"):"__secure_exec_vm_context_id__";function Jq(e){let t=new Error(`node:vm ${e} is not implemented in the secure-exec guest runtime`);return t.code="ERR_NOT_IMPLEMENTED",t}function q2(e){return e!==null&&(typeof e=="object"||typeof e=="function")}function Lg(e=void 0){if(typeof e=="string")return{filename:e};if(!e||typeof e!="object")return{};let t={};return typeof e.filename=="string"&&(t.filename=e.filename),Number.isInteger(e.lineOffset)&&(t.lineOffset=e.lineOffset),Number.isInteger(e.columnOffset)&&(t.columnOffset=e.columnOffset),Number.isInteger(e.timeout)&&e.timeout>0&&(t.timeout=e.timeout),e.cachedData!==void 0&&(t.cachedData=e.cachedData),e.produceCachedData===!0&&(t.produceCachedData=!0),t}function Yv(e,t){let r=Lg(e),n=Lg(t);return{...r,...n}}function FY(e={}){if(!q2(e))throw new TypeError('The "object" argument must be of type object.');if(e[v1]===!0&&Number.isInteger(e[hB]))return e;let t=_vmCreateContext(e);return Object.defineProperty(e,v1,{value:!0,configurable:!0,enumerable:!1,writable:!1}),Object.defineProperty(e,hB,{value:t,configurable:!1,enumerable:!1,writable:!1}),e}function kY(e){return q2(e)&&e[v1]===!0&&Number.isInteger(e[hB])}function ewe(e){if(!kY(e))throw new TypeError('The "contextifiedObject" argument must be a vm context.');return e}function UY(e,t=void 0){return _vmRunInThisContext(String(e),Lg(t))}function G2(e,t,r=void 0){let n=ewe(t);return _vmRunInContext(n[hB],String(e),Lg(r),n)}function xY(e,t={},r=void 0){let n=q2(t),i=n?t:{},s=n?r:t;return G2(e,FY(i),s)}var twe=class{constructor(e,t=void 0){this.code=String(e),this.options=Lg(t),this.filename=this.options.filename??"evalmachine.<anonymous>",this.lineOffset=this.options.lineOffset??0,this.columnOffset=this.options.columnOffset??0,this.cachedData=this.options.cachedData,this.cachedDataProduced=!1,this.cachedDataRejected=!1}createCachedData(){return typeof Buffer=="function"?Buffer.alloc(0):new Uint8Array(0)}runInThisContext(e=void 0){return UY(this.code,Yv(this.options,e))}runInContext(e,t=void 0){return G2(this.code,e,Yv(this.options,t))}runInNewContext(e={},t=void 0){return xY(this.code,e,Yv(this.options,t))}},rwe={Script:twe,compileFunction(){throw Jq("compileFunction")},createContext:FY,isContext:kY,measureMemory(){throw Jq("measureMemory")},runInContext:G2,runInNewContext:xY,runInThisContext:UY},LY=m1.default?.default??m1.default,jq=B1.default?.default??B1.default,PY=Cg.default?.request??Cg.default?.default?.request??Cg.default?.default??Cg.default,zq=Vm.default?.fetch??Vm.default?.default??Vm.default,nwe=Eu.default?.Headers??Eu.default?.default??Eu.default,iwe=yu.default?.Request??yu.default?.default??yu.default,swe=mu.default?.Response??mu.default?.default??mu.default,Kq=B2.default?.setGlobalDispatcher,Xq=B2.default?.getGlobalDispatcher,Wv=null;function owe(){return new LY({connections:6,connect(e,t){try{let r=e?.protocol==="https:"||e?.protocol==="https"?"https:":"http:",n=e?.hostname||e?.host||e?.servername||"localhost",i=e?.port;if(e?.origin){let p=new URL(String(e.origin));r=p.protocol==="https:"?"https:":"http:",n=p.hostname||n,i=p.port||i}typeof n=="string"&&n.startsWith("[")&&n.endsWith("]")&&(n=n.slice(1,-1));let s=LB({protocol:r,hostname:n,host:n,port:i?Number(i):r==="https:"?443:80,servername:e?.servername||n,rejectUnauthorized:e?.rejectUnauthorized}),o=Z2(r),a=!1,A=()=>{s.off?.(o,f),s.removeListener?.(o,f),s.off?.("error",l),s.removeListener?.("error",l)},f=()=>{a||(a=!0,A(),t(null,s))},l=p=>{a||(a=!0,A(),t(p instanceof Error?p:new Error(String(p))))};return s.once(o,f),s.once("error",l),s}catch(r){return t(r instanceof Error?r:new Error(String(r))),null}}})}function R1(){return Wv||(Wv=owe()),Wv}typeof Kq=="function"&&typeof LY=="function"&&(typeof Xq=="function"?Xq():null)==null&&Kq(R1());var Y2="__secureExecNetSocket:",awe="net-server:",W2=new Map,dB=new Map;function Awe(e){return globalThis[`${Y2}${e}`]}function Zq(e,t){globalThis[`${Y2}${e}`]=t,W2.set(e,t)}function fwe(e){delete globalThis[`${Y2}${e}`],W2.delete(e)}function uwe(e){let t=e?._address?.port;typeof t=="number"&&dB.set(t,e)}function cwe(e){let t=e?._address?.port;typeof t=="number"&&dB.get(t)===e&&dB.delete(t)}function lwe(e){if(re("readWakeAttempts"),!e||e.destroyed||e._socketId===0||e._loopbackServer||e._loopbackHttpTarget){re("readWakeInvalidTargets");return}if(e._bridgeReadLoopRunning&&re("readWakeAlreadyRunning"),!e._bridgeReadPollTimer){re("readWakeNoTimer"),re(e._bridgeReadPumpStarted?"readWakeNoTimerAfterFirstPump":"readWakeNoTimerBeforeFirstPump"),e._connected&&re("readWakeNoTimerConnected"),e.connecting&&re("readWakeNoTimerConnecting"),re(e._refed?"readWakeNoTimerRefed":"readWakeNoTimerUnrefed");let t=(e._listeners?.data?.length??0)>0,r=(e._listeners?.readable?.length??0)>0;if(t&&re("readWakeNoTimerHasDataListener"),r&&re("readWakeNoTimerHasReadableListener"),e._bridgeWriteFlushScheduled&&(re("readWakeNoTimerPendingWriteFlush"),re("readWakeNoTimerPendingWriteBytes",e._pendingBridgeWriteBytes)),!e._bridgeReadPumpStarted&&e._firstReadNoTimerWakeAtUs===0&&ir()&&(e._firstReadNoTimerWakeAtUs=At()),ir()&&!e._bridgeReadPumpStarted&&e._connected&&e._refed&&(t||r))if(re("readFirstPumpScheduleCandidates"),e._bridgeReadFirstPumpBenchmarkScheduled)re("readFirstPumpScheduleAlreadyScheduled");else{re("readFirstPumpScheduleQueued"),e._bridgeReadFirstPumpBenchmarkScheduled=!0;let n=At();queueMicrotask(()=>{re("readFirstPumpScheduleRuns");let i=At(),s=Math.max(0,i-n);if(re("readFirstPumpScheduleQueuedToRunUs",s),Qr("readFirstPumpScheduleQueuedToRunMaxUs",s),e._bridgeReadFirstPumpBenchmarkScheduled=!1,e.destroyed){re("readFirstPumpScheduleSkipDestroyed");return}if(e._tlsUpgrading){re("readFirstPumpScheduleSkipTlsUpgrading");return}if(e._bridgeReadPumpStarted){re("readFirstPumpScheduleSkipPumpStarted");return}if(e._bridgeReadLoopRunning){re("readFirstPumpScheduleSkipLoopRunning");return}if(e._socketId===0){re("readFirstPumpScheduleSkipSocketClosed");return}re("readFirstPumpSchedulePumpCalls"),e._nextReadPumpOrigin="eventWake",e._readFirstPumpScheduleActive=!0,e._readFirstPumpScheduleQueuedAtUs=n,e._pumpBridgeReads()})}return}clearTimeout(e._bridgeReadPollTimer),e._bridgeReadPollTimer=null,re("readEventWakeups"),ir()&&(e._readWakeQueuedAtUs=At()),queueMicrotask(()=>{e.destroyed||(e._nextReadPumpOrigin="eventWake",e._pumpBridgeReads())})}function hwe(e){if(re("peerWakeScans"),!e||e._socketId===0||e.remotePort===void 0||e.localPort===void 0){re("peerWakeInvalidTargets");return}for(let t of W2.values())if(!(t===e||t.destroyed)&&t.localPort===e.remotePort&&t.remotePort===e.localPort){re("peerWakeFound"),lwe(t);return}re("peerWakeMiss")}function dwe(e){if(re("acceptWakeAttempts"),!e||!e.listening||e._serverId===0||!e._acceptPollTimer){if(!e||!e.listening||e._serverId===0)re("acceptWakeInvalidTargets");else{re("acceptWakeNoTimer"),re(e._acceptPumpStarted?"acceptWakeNoTimerAfterFirstPump":"acceptWakeNoTimerBeforeFirstPump"),e._acceptLoopRunning&&re("acceptWakeNoTimerLoopRunning"),e._acceptLoopActive&&re("acceptWakeNoTimerLoopActive"),re(e._refed?"acceptWakeNoTimerRefed":"acceptWakeNoTimerUnrefed");let t=e._connections?.size??0;re("acceptWakeNoTimerConnections",t),Qr("acceptWakeNoTimerConnectionsMax",t),!e._acceptPumpStarted&&e._firstAcceptNoTimerWakeAtUs===0&&ir()&&(e._firstAcceptNoTimerWakeAtUs=At())}return}e._acceptLoopRunning&&re("acceptWakeAlreadyRunning"),clearTimeout(e._acceptPollTimer),e._acceptPollTimer=null,re("acceptEventWakeups"),ir()&&(e._acceptWakeQueuedAtUs=At()),queueMicrotask(()=>{e.listening&&e._serverId!==0&&(e._nextAcceptPumpOrigin="eventWake",e._pumpAccepts())})}function gwe(e){re("acceptWakeSocketScans");let t=e?.remotePort;if(typeof t!="number"){re("acceptWakeSocketInvalidTargets");return}let r=dB.get(t);re(r?"acceptWakeSocketFound":"acceptWakeSocketMiss"),dwe(r)}function $q(e){return e===void 0?!0:!!e}function gB(e){return typeof e!="number"||!Number.isFinite(e)?0:Math.max(0,Math.floor(e/1e3))}function pwe(e,t){return lr(`The "${e}" argument must be of type number. Received ${Yn(t)}`,"ERR_INVALID_ARG_TYPE")}function xl(e,t){return lr(`The "${e}" argument must be of type function. Received ${Yn(t)}`,"ERR_INVALID_ARG_TYPE")}function Ewe(e){let t=new RangeError(`The value of "timeout" is out of range. It must be a non-negative finite number. Received ${String(e)}`);return t.code="ERR_OUT_OF_RANGE",t}function wl(e){return lr(e,"ERR_INVALID_ARG_VALUE")}function D1(e){let t=new RangeError(`options.port should be >= 0 and < 65536. Received ${Yn(e)}.`);return t.code="ERR_SOCKET_BAD_PORT",t}function T1(e){return Number.isInteger(e)&&e>=0&&e<65536}function OY(e){return/^[0-9]+$/.test(e)}function eG(e){if(e==null)return 0;if(typeof e=="string"&&e.length>0){let t=Number(e);if(T1(t))return t;throw D1(e)}if(typeof e=="number"){if(T1(e))return e;throw D1(e)}throw wl(`The argument 'options' is invalid. Received ${String(e)}`)}function HY(e,t,r,n){let i={port:0,host:"127.0.0.1",backlog:511,readableAll:!1,writableAll:!1};if(typeof e=="function")return{...i,callback:e};if(e!==null&&typeof e=="object"){let s=e,o=Object.prototype.hasOwnProperty.call(s,"port"),a=Object.prototype.hasOwnProperty.call(s,"path");if(!o&&!a)throw wl(`The argument 'options' must have the property "port" or "path". Received ${String(e)}`);if(o&&a)throw wl(`The argument 'options' is invalid. Received ${String(e)}`);if(o&&s.port!==void 0&&s.port!==null&&typeof s.port!="number"&&typeof s.port!="string")throw wl(`The argument 'options' is invalid. Received ${String(e)}`);if(a){if(typeof s.path!="string"||s.path.length===0)throw wl(`The argument 'options' is invalid. Received ${String(e)}`);return{path:s.path,backlog:typeof s.backlog=="number"&&Number.isFinite(s.backlog)?s.backlog:i.backlog,readableAll:s.readableAll===!0,writableAll:s.writableAll===!0,callback:typeof t=="function"?t:typeof r=="function"?r:n}}return{port:eG(s.port),host:typeof s.host=="string"&&s.host.length>0?s.host:i.host,backlog:typeof s.backlog=="number"&&Number.isFinite(s.backlog)?s.backlog:i.backlog,readableAll:!1,writableAll:!1,callback:typeof t=="function"?t:typeof r=="function"?r:n}}if(e!=null&&typeof e!="number"&&typeof e!="string")throw wl(`The argument 'options' is invalid. Received ${String(e)}`);return typeof e=="string"&&e.length>0&&!OY(e)?{path:e,backlog:i.backlog,readableAll:!1,writableAll:!1,callback:typeof t=="function"?t:typeof r=="function"?r:n}:{port:eG(e),host:typeof t=="string"?t:i.host,backlog:typeof r=="number"?r:i.backlog,readableAll:!1,writableAll:!1,callback:typeof t=="function"?t:typeof r=="function"?r:n}}function ywe(e,t,r){if(e!==null&&typeof e=="object"){let n=typeof e.port=="string"?Number(e.port):e.port;return{host:typeof e.host=="string"&&e.host.length>0?e.host:void 0,port:n,path:typeof e.path=="string"&&e.path.length>0?e.path:void 0,keepAlive:e.keepAlive,keepAliveInitialDelay:e.keepAliveInitialDelay,callback:typeof t=="function"?t:r}}return typeof e=="string"&&!OY(e)?{path:e,callback:typeof t=="function"?t:r}:{port:typeof e=="number"?e:Number(e),host:typeof t=="string"?t:"127.0.0.1",callback:typeof t=="function"?t:r}}function mwe(e){if(!/^[0-9]{1,3}$/.test(e)||e.length>1&&e.startsWith("0"))return!1;let t=Number(e);return Number.isInteger(t)&&t>=0&&t<=255}function t0(e){let t=e.split(".");return t.length===4&&t.every(r=>mwe(r))}function Bwe(e){return e.length>0&&/^[0-9A-Za-z_.-]+$/.test(e)}function Vv(e){if(e.length===0)return 0;let t=e.split(":"),r=0;for(let n of t){if(n.length===0)return null;if(n.includes(".")){if(n!==t[t.length-1]||!t0(n))return null;r+=2;continue}if(!/^[0-9A-Fa-f]{1,4}$/.test(n))return null;r+=1}return r}function xB(e){if(e.length===0)return!1;let t=e,r=t.indexOf("%");if(r!==-1){if(t.indexOf("%",r+1)!==-1)return!1;let s=t.slice(r+1);if(!Bwe(s))return!1;t=t.slice(0,r)}let n=t.indexOf("::");if(n!==-1){if(t.indexOf("::",n+2)!==-1)return!1;let[s,o]=t.split("::");if(s.includes("."))return!1;let a=Vv(s),A=Vv(o);return a===null||A===null?!1:a+A<8}return Vv(t)===8}function Iwe(e){return e==null?"":String(e)}function Tl(e){let t=Iwe(e);return t0(t)?4:xB(t)?6:0}function Sl(e,t){if(t==="ipv4"||t===4)return"ipv4";if(t==="ipv6"||t===6)return"ipv6";let r=Tl(e);if(r===4)return"ipv4";if(r===6)return"ipv6";throw new TypeError(`Invalid IP address: ${e}`)}function qY(e){return e.split(".").reduce((t,r)=>(t<<8n)+BigInt(Number(r)),0n)}function bwe(e){let t=String(e),r=t.indexOf("%");if(r!==-1&&(t=t.slice(0,r)),t.includes(".")){let l=t.lastIndexOf(":"),p=t.slice(l+1),I=qY(p),S=Number(I>>16n&65535n).toString(16),_=Number(I&65535n).toString(16);t=`${t.slice(0,l)}:${S}:${_}`}let n=t.includes("::"),[i,s]=n?t.split("::"):[t,""],o=i.length>0?i.split(":"):[],a=s.length>0?s.split(":"):[],A=n?Math.max(0,8-(o.length+a.length)):0,f=[...o,...new Array(A).fill("0"),...a];if(f.length!==8)throw new TypeError(`Invalid IPv6 address: ${e}`);return f.map(l=>l.length===0?"0":l)}function Cwe(e){return bwe(e).reduce((t,r)=>(t<<16n)+BigInt(parseInt(r,16)),0n)}function Eg(e,t){return t==="ipv4"?qY(e):Cwe(e)}function Qwe(e){return e.type==="address"?`Address: ${e.family==="ipv4"?"IPv4":"IPv6"} ${e.address}`:e.type==="range"?`Range: ${e.family==="ipv4"?"IPv4":"IPv6"} ${e.start}-${e.end}`:`Subnet: ${e.family==="ipv4"?"IPv4":"IPv6"} ${e.network}/${e.prefix}`}var wwe=class{constructor(){y(this,"_rules",[])}addAddress(e,t){let r=Sl(e,t);return this._rules.push({type:"address",family:r,address:String(e)}),this}addRange(e,t,r){let n=Sl(e,r);if(Sl(t,n)!==n)throw new TypeError("BlockList range family mismatch");return this._rules.push({type:"range",family:n,start:String(e),end:String(t)}),this}addSubnet(e,t,r){let n=Sl(e,r),i=Number(t),s=n==="ipv4"?32:128;if(!Number.isInteger(i)||i<0||i>s)throw new RangeError(`Invalid subnet prefix: ${t}`);return this._rules.push({type:"subnet",family:n,network:String(e),prefix:i}),this}check(e,t){let r=Sl(e,t),n=Eg(String(e),r);for(let i of this._rules)if(i.family===r){if(i.type==="address"&&n===Eg(i.address,r))return!0;if(i.type==="range"){let s=Eg(i.start,r),o=Eg(i.end,r);if(n>=s&&n<=o)return!0}if(i.type==="subnet"){let s=r==="ipv4"?32n:128n,o=BigInt(i.prefix),a=s-o,A=o===0n?0n:(1n<<s)-1n^(1n<<a)-1n,f=Eg(i.network,r);if((n&A)===(f&A))return!0}}return!1}toJSON(){return this._rules.map(e=>({...e}))}fromJSON(e){if(!Array.isArray(e))throw new TypeError("BlockList JSON must be an array");return this._rules=e.map(t=>({...t})),this}get rules(){return this._rules.map(e=>Qwe(e))}},tG=!0,rG=250,Swe=class Qg{constructor(t={}){let r=String(t.address??""),n=Sl(r,t.family),i=Number(t.port??0),s=Number(t.flowlabel??0);if(!Number.isInteger(i)||i<0||i>65535)throw new RangeError(`Invalid port: ${t.port}`);if(!Number.isInteger(s)||s<0)throw new RangeError(`Invalid flowlabel: ${t.flowlabel}`);this.address=r,this.port=i,this.family=n,this.flowlabel=s}toJSON(){return{address:this.address,port:this.port,family:this.family,flowlabel:this.flowlabel}}static isSocketAddress(t){return t instanceof Qg}static parse(t){let r=String(t);if(r.startsWith("[")){let i=r.indexOf("]");if(i===-1)return;let s=r.slice(1,i),o=r[i+1]===":"?Number(r.slice(i+2)):0;return new Qg({address:s,family:"ipv6",port:o})}let n=r.lastIndexOf(":");if(n!==-1&&r.indexOf(":")===n){let i=r.slice(0,n),s=Number(r.slice(n+1));if(Tl(i)!==0&&Number.isInteger(s))return new Qg({address:i,port:s})}if(Tl(r)!==0)return new Qg({address:r})}};function GY(e){if(typeof e!="number")throw pwe("timeout",e);if(!Number.isFinite(e)||e<0)throw Ewe(e);return e}function YY(e){if(!e)return null;try{let t=JSON.parse(e);return t&&typeof t=="object"?t:null}catch{return null}}function _we(e){if(!e)throw new Error("net.connect bridge returned an empty socket handle");if(typeof e=="string")return{socketId:e};if(typeof e=="object"&&(typeof e.socketId=="string"||typeof e.socketId=="number")||typeof e=="object"&&e.loopbackHttpTarget)return e;throw new Error("net.connect bridge returned an invalid socket handle")}function Zm(e){if(e!=null){if(Array.isArray(e)){let t=e.map(r=>Zm(r)).flatMap(r=>Array.isArray(r)?r:r?[r]:[]);return t.length>0?t:void 0}if(typeof e=="string")return{kind:"string",data:e};if(Buffer.isBuffer(e)||e instanceof Uint8Array)return{kind:"buffer",data:Buffer.from(e).toString("base64")}}}function N1(e){return!!e&&typeof e=="object"&&"__secureExecTlsContext"in e}function Gl(e,t){let n={...(N1(e?.secureContext)?e.secureContext.__secureExecTlsContext:void 0)??{},...t},i=Zm(e?.key),s=Zm(e?.cert),o=Zm(e?.ca);if(i!==void 0&&(n.key=i),s!==void 0&&(n.cert=s),o!==void 0&&(n.ca=o),typeof e?.passphrase=="string"&&(n.passphrase=e.passphrase),typeof e?.ciphers=="string"&&(n.ciphers=e.ciphers),(Buffer.isBuffer(e?.session)||e?.session instanceof Uint8Array)&&(n.session=Buffer.from(e.session).toString("base64")),Array.isArray(e?.ALPNProtocols)){let a=e.ALPNProtocols.filter(A=>typeof A=="string");a.length>0&&(n.ALPNProtocols=a)}return typeof e?.minVersion=="string"&&(n.minVersion=e.minVersion),typeof e?.maxVersion=="string"&&(n.maxVersion=e.maxVersion),typeof e?.servername=="string"&&(n.servername=e.servername),typeof e?.rejectUnauthorized=="boolean"&&(n.rejectUnauthorized=e.rejectUnauthorized),typeof e?.requestCert=="boolean"&&(n.requestCert=e.requestCert),n}function vwe(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}function Rwe(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}function Dwe(e){if(!e)return new Error("socket error");try{let t=JSON.parse(e),r=new Error(t.message);return t.name&&(r.name=t.name),t.code&&(r.code=t.code),t.stack&&(r.stack=t.stack),r}catch{return new Error(e)}}function M1(e,t=new Map){if(e===null||typeof e=="boolean"||typeof e=="number"||typeof e=="string")return e;if(e.type==="undefined")return;if(e.type==="buffer")return Buffer.from(e.data,"base64");if(e.type==="array")return e.value.map(n=>M1(n,t));if(e.type==="ref")return t.get(e.id);let r={};t.set(e.id,r);for(let[n,i]of Object.entries(e.value))r[n]=M1(i,t);return r}function Ia(e,t,r){if(typeof _netSocketTlsQueryRaw>"u")return;let n=_netSocketTlsQueryRaw.applySync(void 0,r===void 0?[e,t]:[e,t,r]);return M1(JSON.parse(n))}function F1(e,t="secureConnect"){if(e._tlsUpgrading=!1,e.encrypted=!0,e.authorized=e.authorizationError==null,typeof e._socketId=="string"&&e._socketId.length>0){let r=Ia(e._socketId,"getProtocol");(typeof r=="string"||r===null)&&(e._tlsProtocol=r);let n=Ia(e._socketId,"getCipher");n!==void 0&&(e._tlsCipher=n);let i=Ia(e._socketId,"isSessionReused");typeof i=="boolean"&&(e._tlsSessionReused=i)}e._touchTimeout(),e._emitNet(t),t!=="secure"&&e._emitNet("secure"),!e.destroyed&&!e._bridgeReadLoopRunning&&(e._nextReadPumpOrigin="tls",e._pumpBridgeReads())}function nG(e){return{socketId:e,setNoDelay(t){return _netSocketSetNoDelayRaw?.applySync(void 0,[e,t!==!1]),this},setKeepAlive(t,r){return _netSocketSetKeepAliveRaw?.applySync(void 0,[e,t!==!1,gB(r)]),this},ref(){return this},unref(){return this}}}function Twe(e,t){return{socketId:e,info:t,setNoDelay(r){return _netSocketSetNoDelayRaw?.applySync(void 0,[e,r!==!1]),this},setKeepAlive(r,n){return _netSocketSetKeepAliveRaw?.applySync(void 0,[e,r!==!1,gB(n)]),this},ref(){return this},unref(){return this}}}var V2="__secure_exec_net_timeout__",pB=10,k1=null;function Nwe(){return(typeof process<"u"?process.env:globalThis.__agentOSProcessConfigEnv)?.AGENTOS_NET_BRIDGE_TRACE==="1"}function Mwe(e){let t=Number(e);return!Number.isFinite(t)||t<0?pB:Math.trunc(t)}function J2(){return k1??pB}function Fwe(){let e=typeof process<"u"?process.env:void 0,t=globalThis.__agentOSProcessConfigEnv;return e?.AGENTOS_NET_RETAIN_OWNED_WRITE_BUFFER!=="0"&&t?.AGENTOS_NET_RETAIN_OWNED_WRITE_BUFFER!=="0"}function WY(){return{userWriteCalls:0,userWriteBytes:0,queuedWriteChunks:0,queuedWriteBytes:0,queuedWriteCopiedChunks:0,queuedWriteCopiedBytes:0,queuedWriteRetainedChunks:0,queuedWriteRetainedBytes:0,flushCalls:0,flushChunks:0,flushBytes:0,writeBufferedBytesMax:0,writeBufferedChunksMax:0,writeBase64EncodeCalls:0,writeBase64EncodeBytes:0,writeBase64EncodeUs:0,writeRawCalls:0,writeRawBytes:0,writeRawElapsedUs:0,readRawCalls:0,readRawElapsedUs:0,readPumpRuns:0,readTimeoutSentinels:0,readPollTimersScheduled:0,readPollTimerFires:0,readPollTimerFireLagUs:0,readPollTimerFireLagMaxUs:0,readDataEvents:0,readBytes:0,readBase64DecodeCalls:0,readBase64DecodeBytes:0,readBase64DecodeChars:0,readBase64DecodeUs:0,readPayloadMaterializeCalls:0,readPayloadMaterializeBytes:0,readPayloadMaterializeUs:0,readEndEvents:0,readMacrotaskYields:0,readMacrotaskYieldElapsedUs:0,readMacrotaskYieldMaxUs:0,queueReadablePayloads:0,queueReadablePayloadElapsedUs:0,queueReadablePayloadMaxUs:0,queueReadableBytes:0,queueReadableBytesMax:0,queueReadableImmediateReadCalls:0,queueReadableImmediateReadUs:0,queueReadableImmediateReadMaxUs:0,socketReadableEmits:0,socketReadableEmitUs:0,socketReadableEmitMaxUs:0,socketDataEmits:0,socketDataEmitUs:0,socketDataEmitMaxUs:0,readPostDeliveryProbeCalls:0,readPostDeliveryProbeTimeoutSentinels:0,readPostDeliveryProbeDataEvents:0,readPostDeliveryNextRawCalls:0,readPostDeliveryNextRawTimeoutSentinels:0,readPostDeliveryNextRawDataEvents:0,readPostDeliveryToProbeStartUs:0,readPostDeliveryProbeElapsedUs:0,readPostDeliveryProbeMaxUs:0,readPostDeliveryPendingWriteFlushes:0,readPostDeliveryPendingWriteBytes:0,userWriteDuringDataEmitCalls:0,dataEmitStartToUserWriteUs:0,dataEmitEndToUserWriteUs:0,writeQueuedToFlushStartUs:0,writeQueuedToFlushStartMaxUs:0,writeFlushQueuedToRawUs:0,writeFlushQueuedToRawMaxUs:0,readWakeQueuedToPumpStartUs:0,readWakeQueuedToPumpStartMaxUs:0,acceptWakeQueuedToPumpStartUs:0,acceptWakeQueuedToPumpStartMaxUs:0,socketEndEmits:0,socketCloseEmits:0,socketConnectEmits:0,acceptRawCalls:0,acceptRawElapsedUs:0,acceptPumpRuns:0,acceptLoopAlreadyRunning:0,acceptTimeoutSentinels:0,acceptPollTimersScheduled:0,acceptPollTimerFires:0,acceptPollTimerFireLagUs:0,acceptPollTimerFireLagMaxUs:0,acceptConnections:0,acceptJsonParseUs:0,acceptOnConnectionUs:0,connectionEmits:0,readEventWakeups:0,readWakeAttempts:0,readWakeInvalidTargets:0,readWakeAlreadyRunning:0,readWakeNoTimer:0,readWakeNoTimerBeforeFirstPump:0,readWakeNoTimerAfterFirstPump:0,readWakeNoTimerConnected:0,readWakeNoTimerConnecting:0,readWakeNoTimerRefed:0,readWakeNoTimerUnrefed:0,readWakeNoTimerHasDataListener:0,readWakeNoTimerHasReadableListener:0,readWakeNoTimerPendingWriteFlush:0,readWakeNoTimerPendingWriteBytes:0,readFirstPumpAfterNoTimerWakeCalls:0,readFirstPumpAfterNoTimerWakeUs:0,readFirstPumpAfterNoTimerWakeMaxUs:0,readFirstPumpOriginConnectWait:0,readFirstPumpOriginAcceptedHandle:0,readFirstPumpOriginEventWake:0,readFirstPumpOriginTimer:0,readFirstPumpOriginRef:0,readFirstPumpOriginTls:0,readFirstPumpOriginUnknown:0,readFirstPumpResultData:0,readFirstPumpResultEnd:0,readFirstPumpResultTimeout:0,readFirstPumpScheduleCandidates:0,readFirstPumpScheduleQueued:0,readFirstPumpScheduleAlreadyScheduled:0,readFirstPumpScheduleRuns:0,readFirstPumpSchedulePumpCalls:0,readFirstPumpScheduleSkipDestroyed:0,readFirstPumpScheduleSkipTlsUpgrading:0,readFirstPumpScheduleSkipPumpStarted:0,readFirstPumpScheduleSkipLoopRunning:0,readFirstPumpScheduleSkipSocketClosed:0,readFirstPumpScheduleQueuedToRunUs:0,readFirstPumpScheduleQueuedToRunMaxUs:0,readFirstPumpScheduleQueuedToPumpStartUs:0,readFirstPumpScheduleQueuedToPumpStartMaxUs:0,readFirstPumpScheduleResultData:0,readFirstPumpScheduleResultTimeout:0,readFirstPumpScheduleResultEnd:0,peerWakeScans:0,peerWakeInvalidTargets:0,peerWakeFound:0,peerWakeMiss:0,acceptEventWakeups:0,acceptWakeAttempts:0,acceptWakeInvalidTargets:0,acceptWakeNoTimer:0,acceptWakeNoTimerBeforeFirstPump:0,acceptWakeNoTimerAfterFirstPump:0,acceptWakeNoTimerLoopRunning:0,acceptWakeNoTimerLoopActive:0,acceptWakeNoTimerRefed:0,acceptWakeNoTimerUnrefed:0,acceptWakeNoTimerConnections:0,acceptWakeNoTimerConnectionsMax:0,acceptFirstPumpAfterNoTimerWakeCalls:0,acceptFirstPumpAfterNoTimerWakeUs:0,acceptFirstPumpAfterNoTimerWakeMaxUs:0,acceptFirstPumpOriginListen:0,acceptFirstPumpOriginEventWake:0,acceptFirstPumpOriginTimer:0,acceptFirstPumpOriginRef:0,acceptFirstPumpOriginUnknown:0,acceptFirstPumpResultConnection:0,acceptFirstPumpResultTimeout:0,acceptFirstPumpResultEmpty:0,acceptWakeAlreadyRunning:0,acceptWakeSocketScans:0,acceptWakeSocketInvalidTargets:0,acceptWakeSocketFound:0,acceptWakeSocketMiss:0}}var U1=!1,Ll=WY();function ir(){return U1||Nwe()}function At(){return typeof performance<"u"&&typeof performance.now=="function"?Math.round(performance.now()*1e3):Date.now()*1e3}function re(e,t=1){ir()&&(Ll[e]=(Ll[e]??0)+t)}function Qr(e,t){if(!ir())return;let r=Number(t);Number.isFinite(r)&&(Ll[e]=Math.max(Ll[e]??0,r))}function kwe(e){switch(e){case"connectWait":re("readFirstPumpOriginConnectWait");break;case"acceptedHandle":re("readFirstPumpOriginAcceptedHandle");break;case"eventWake":re("readFirstPumpOriginEventWake");break;case"timer":re("readFirstPumpOriginTimer");break;case"ref":re("readFirstPumpOriginRef");break;case"tls":re("readFirstPumpOriginTls");break;default:re("readFirstPumpOriginUnknown");break}}function Uwe(e){switch(e){case"listen":re("acceptFirstPumpOriginListen");break;case"eventWake":re("acceptFirstPumpOriginEventWake");break;case"timer":re("acceptFirstPumpOriginTimer");break;case"ref":re("acceptFirstPumpOriginRef");break;default:re("acceptFirstPumpOriginUnknown");break}}et("__agentOSNetBridgeMetrics",{get enabled(){return ir()},enable(){U1=!0},disable(){U1=!1},setPollDelayMs(e){k1=Mwe(e)},resetPollDelayMs(){k1=null},pollDelayMs(){return J2()},reset(){Ll=WY(),typeof _benchNetTcpMetricsResetRaw<"u"&&_benchNetTcpMetricsResetRaw.applySync(void 0,[])},snapshot(){let e;return typeof _benchNetTcpMetricsSnapshotRaw<"u"&&(e=_benchNetTcpMetricsSnapshotRaw.applySync(void 0,[])),{...Ll,...e?{sidecarNetTrace:e}:{}}}});function xwe(){return new Promise(e=>{typeof lB=="function"?lB(e):setTimeout(e,0)})}function Lwe(e,t,r){if(e===0&&t.startsWith("http2:")){rr("http2 dispatch via netSocket",t);try{let i=r?JSON.parse(r):{};sW(t.slice(6),Number(i.id??0),i.data,i.extra,i.extraNumber,i.extraHeaders,i.flags)}catch{}return}let n=Awe(e);if(n)switch(t){case"connect":{n._applySocketInfo(YY(r)),n._connected=!0,n.connecting=!1,n._touchTimeout(),n._emitNet("connect"),n._emitNet("ready");break}case"secureConnect":case"secure":{let i=vwe(r);i&&(n.authorized=i.authorized===!0,n.authorizationError=i.authorizationError,n.alpnProtocol=i.alpnProtocol??!1,n.servername=i.servername??n.servername,n._tlsProtocol=i.protocol??null,n._tlsSessionReused=i.sessionReused===!0,n._tlsCipher=i.cipher??null),F1(n,t);break}case"data":{let i=typeof Buffer<"u"?Buffer.from(r,"base64"):new Uint8Array(0);n._touchTimeout(),n._emitNet("data",i);break}case"end":n._handleRemoteReadableEnd();break;case"session":{let i=typeof Buffer<"u"?Buffer.from(r??"","base64"):new Uint8Array(0);n._tlsSession=Buffer.from(i),n._emitNet("session",i);break}case"error":if(r)try{let i=JSON.parse(r);n.authorized=i.authorized===!0,n.authorizationError=i.authorizationError}catch{}n._emitNet("error",Dwe(r));break;case"close":n._emitSocketClose(!1);break}}et("_netSocketDispatch",Lwe);var Lm=256*1024,Do=class VY{constructor(t){y(this,"_listeners",{});y(this,"_onceListeners",{});y(this,"_socketId",0);y(this,"_loopbackServer",null);y(this,"_loopbackBuffer",Buffer.alloc(0));y(this,"_loopbackDispatchRunning",!1);y(this,"_loopbackDispatchPending",!1);y(this,"_loopbackReadableEnded",!1);y(this,"_loopbackUpgradeSocket",null);y(this,"_loopbackEventQueue",Promise.resolve());y(this,"_encoding");y(this,"_noDelayState",!1);y(this,"_keepAliveState",!1);y(this,"_keepAliveDelaySeconds",0);y(this,"_refed",!0);y(this,"_bridgeReadLoopRunning",!1);y(this,"_bridgeReadPollTimer",null);y(this,"_bridgeReadPumpStarted",!1);y(this,"_bridgeReadFirstPumpBenchmarkScheduled",!1);y(this,"_readFirstPumpScheduleActive",!1);y(this,"_readFirstPumpScheduleQueuedAtUs",0);y(this,"_nextReadPumpOrigin",null);y(this,"_firstReadNoTimerWakeAtUs",0);y(this,"_timeoutMs",0);y(this,"_timeoutTimer",null);y(this,"_pendingBridgeWriteChunks",null);y(this,"_pendingBridgeWriteCallbacks",null);y(this,"_pendingBridgeWriteBytes",0);y(this,"_bridgeWriteFlushScheduled",!1);y(this,"_bridgeWriteFlushQueuedAtUs",0);y(this,"_lastReadDeliveryEndUs",0);y(this,"_currentDataEmitStartUs",0);y(this,"_lastDataEmitEndUs",0);y(this,"_readWakeQueuedAtUs",0);y(this,"_tlsUpgrading",!1);y(this,"_remoteEnded",!1);y(this,"_writableEnded",!1);y(this,"_closeEmitted",!1);y(this,"_connected",!1);y(this,"connecting",!1);y(this,"destroyed",!1);y(this,"writable",!0);y(this,"readable",!0);y(this,"readyState","open");y(this,"readableLength",0);y(this,"writableLength",0);y(this,"remoteAddress");y(this,"remotePort");y(this,"remoteFamily");y(this,"localAddress","0.0.0.0");y(this,"localPort",0);y(this,"localFamily","IPv4");y(this,"localPath");y(this,"remotePath");y(this,"bytesRead",0);y(this,"bytesWritten",0);y(this,"bufferSize",0);y(this,"pending",!0);y(this,"allowHalfOpen",!1);y(this,"encrypted",!1);y(this,"authorized",!1);y(this,"authorizationError");y(this,"servername");y(this,"alpnProtocol",!1);y(this,"writableHighWaterMark",16*1024);y(this,"server");y(this,"_tlsCipher",null);y(this,"_tlsProtocol",null);y(this,"_tlsSession",null);y(this,"_tlsSessionReused",!1);y(this,"_readableState",{endEmitted:!1,ended:!1});y(this,"_readQueue",[]);y(this,"_handle",null);t?.allowHalfOpen&&(this.allowHalfOpen=!0),t?.handle&&(this._handle=t.handle)}connect(t,r,n){if(typeof _netSocketConnectRaw>"u")throw new Error("net.Socket is not supported in sandbox (bridge not available)");let{host:i="127.0.0.1",port:s=0,path:o,keepAlive:a,keepAliveInitialDelay:A,callback:f}=ywe(t,r,n);f&&this.once("connect",f),this.connecting=!0,this.remoteAddress=o??i,this.remotePort=o?void 0:s,this.remotePath=o,this.pending=!1;let l;try{l=_we(_netSocketConnectRaw.applySync(void 0,[o?{path:o}:{host:i,port:s}]))}catch(p){return this.connecting=!1,this.pending=!1,queueMicrotask(()=>{this.destroyed||this.destroy(p)}),this}return l.loopbackHttpTarget?(this._loopbackHttpTarget=l.loopbackHttpTarget,this._applySocketInfo(l),this._connected=!0,this.connecting=!1,queueMicrotask(()=>{this._touchTimeout(),this._emitNet("connect"),this._emitNet("ready")}),this):(rr("socket connect",l.socketId,i,s,o??null),this._socketId=l.socketId,this._handle=nG(this._socketId),this._applySocketInfo(l),Zq(this._socketId,this),gwe(this),this._waitForConnect(),a&&this.once("connect",()=>{this.setKeepAlive(!0,A)}),this)}write(t,r,n){let i,s=!1;if(Buffer.isBuffer(t))i=t;else if(typeof t=="string"){let a=typeof r=="string"?r:"utf-8";i=Buffer.from(t,a),s=Fwe()}else i=Buffer.from(t);if(this._loopbackServer||this._loopbackHttpTarget){if(rr("socket write loopback",this._socketId,i.length),this.bytesWritten+=i.length,this._loopbackUpgradeSocket){this._touchTimeout(),this._loopbackUpgradeSocket._pushData(i);let A=typeof r=="function"?r:n;return A&&A(),!0}this._loopbackBuffer=Buffer.concat([this._loopbackBuffer,i]),this._touchTimeout(),this._dispatchLoopbackHttpRequest();let a=typeof r=="function"?r:n;return a&&a(),!0}if(typeof _netSocketWriteRaw>"u"||this.destroyed||!this._socketId)return!1;if(re("userWriteCalls"),re("userWriteBytes",i.length),ir()){let a=At();this._currentDataEmitStartUs>0?(re("userWriteDuringDataEmitCalls"),re("dataEmitStartToUserWriteUs",a-this._currentDataEmitStartUs)):this._lastDataEmitEndUs>0&&re("dataEmitEndToUserWriteUs",a-this._lastDataEmitEndUs)}this.bytesWritten+=i.length;let o=typeof r=="function"?r:n;return this._queueBridgeWrite(i,o,s),!0}end(t,r,n){return typeof t=="function"?this.once("finish",t):t!=null&&this.write(t,r,n),this._writableEnded||this.destroyed?this:(this._writableEnded=!0,this.writable=!1,queueMicrotask(()=>{this.destroyed||(this._emitNet("finish"),this._remoteEnded&&this._emitSocketClose(!1))}),this._loopbackServer||this._loopbackHttpTarget?(this._loopbackUpgradeSocket?queueMicrotask(()=>{this._loopbackUpgradeSocket?._pushEnd()}):this._loopbackReadableEnded||queueMicrotask(()=>{this._closeLoopbackReadable()}),this):(typeof _netSocketEndRaw<"u"&&this._socketId&&!this.destroyed&&(this._flushBridgeWrites(),rr("socket end",this._socketId),_netSocketEndRaw.applySync(void 0,[this._socketId]),this._touchTimeout()),this))}destroy(t){return this.destroyed?this:(rr("socket destroy",this._socketId,t?.message??null),this.destroyed=!0,this._writableEnded=!0,this.writable=!1,this.readable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,this._clearTimeoutTimer(),this._bridgeReadPollTimer&&(clearTimeout(this._bridgeReadPollTimer),this._bridgeReadPollTimer=null),this._loopbackServer||this._loopbackHttpTarget?(this._loopbackUpgradeSocket?.destroy(t),this._loopbackUpgradeSocket=null,this._loopbackServer=null,this._loopbackHttpTarget=null,t&&this._emitNet("error",t),this._emitSocketClose(!!t),this):(typeof _netSocketDestroyRaw<"u"&&this._socketId&&_netSocketDestroyRaw.applySync(void 0,[this._socketId]),t&&this._emitNet("error",t),this._emitSocketClose(!!t),this))}_queueBridgeWrite(t,r,n=!1){this._pendingBridgeWriteChunks||(this._pendingBridgeWriteChunks=[],this._pendingBridgeWriteCallbacks=[]);let i=n?t:Buffer.from(t);this._pendingBridgeWriteChunks.push(i),this._pendingBridgeWriteBytes+=i.length,re("queuedWriteChunks"),re("queuedWriteBytes",i.length),n?(re("queuedWriteRetainedChunks"),re("queuedWriteRetainedBytes",i.length)):(re("queuedWriteCopiedChunks"),re("queuedWriteCopiedBytes",i.length)),Qr("writeBufferedBytesMax",this._pendingBridgeWriteBytes),Qr("writeBufferedChunksMax",this._pendingBridgeWriteChunks.length),r&&this._pendingBridgeWriteCallbacks.push(r),this._bridgeWriteFlushScheduled||(this._bridgeWriteFlushScheduled=!0,ir()&&(this._bridgeWriteFlushQueuedAtUs=At()),queueMicrotask(()=>{this._flushBridgeWrites()}))}_flushBridgeWrites(){let t=this._pendingBridgeWriteChunks;if(!t||t.length===0){this._bridgeWriteFlushScheduled=!1,this._bridgeWriteFlushQueuedAtUs=0;return}let r=this._pendingBridgeWriteCallbacks??[],n=this._pendingBridgeWriteBytes;if(this._pendingBridgeWriteChunks=null,this._pendingBridgeWriteCallbacks=null,this._pendingBridgeWriteBytes=0,this._bridgeWriteFlushScheduled=!1,this.destroyed||!this._socketId||typeof _netSocketWriteRaw>"u")return;let i=ir();if(i&&this._bridgeWriteFlushQueuedAtUs>0){let f=Math.max(0,At()-this._bridgeWriteFlushQueuedAtUs);re("writeQueuedToFlushStartUs",f),Qr("writeQueuedToFlushStartMaxUs",f),re("writeFlushQueuedToRawUs",f),Qr("writeFlushQueuedToRawMaxUs",f),this._bridgeWriteFlushQueuedAtUs=0}rr("socket write",this._socketId,n,t.length),re("flushCalls"),re("flushChunks",t.length),re("flushBytes",n);let s=i?At():0,o=[],a=0,A=()=>{if(a===0)return;let f=o.length===1?o[0]:Buffer.concat(o,a);re("writeRawCalls"),re("writeRawBytes",f.length),_netSocketWriteRaw.applySync(void 0,[this._socketId,f]),o=[],a=0};for(let f of t)for(let l=0;l<f.length;l+=Lm){let p=f.subarray(l,l+Lm);a>0&&a+p.length>Lm&&A(),o.push(p),a+=p.length,a>=Lm&&A()}A(),i&&re("writeRawElapsedUs",At()-s),hwe(this),this._touchTimeout();for(let f of r)f()}_emitSocketClose(t=!1){this._closeEmitted||(this._closeEmitted=!0,this._connected=!1,this.connecting=!1,this.pending=!1,this.readable=!1,this.writable=!1,this._clearTimeoutTimer(),this._socketId&&fwe(this._socketId),this._emitNet("close",t))}_handleRemoteReadableEnd(){this.destroyed||this._remoteEnded||(rr("socket remote end",this._socketId),this._remoteEnded=!0,this.readable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,queueMicrotask(()=>{if(!this.destroyed&&(this._emitNet("end"),!this.destroyed)){if(!this.allowHalfOpen&&!this._writableEnded){this.end();return}this._writableEnded&&this._emitSocketClose(!1)}}))}_applySocketInfo(t){t&&(this.localAddress=t.localAddress,this.localPort=t.localPort,this.localFamily=t.localFamily,this.localPath=t.localPath,this.remoteAddress=t.remoteAddress??this.remoteAddress,this.remotePort=t.remotePort??this.remotePort,this.remoteFamily=t.remoteFamily??this.remoteFamily,this.remotePath=t.remotePath??this.remotePath)}_applyAcceptedKeepAlive(t){this._keepAliveState=!0,this._keepAliveDelaySeconds=gB(t)}static fromAcceptedHandle(t,r){let n=new VY({allowHalfOpen:r?.allowHalfOpen});return n._socketId=t.socketId,n._handle=nG(t.socketId),n._applySocketInfo(t.info),n._connected=!0,n.connecting=!1,n.pending=!1,Zq(t.socketId,n),queueMicrotask(()=>{!n.destroyed&&!n._tlsUpgrading&&(n._nextReadPumpOrigin="acceptedHandle",n._pumpBridgeReads())}),n}setKeepAlive(t,r){let n=$q(t),i=gB(r);return n===this._keepAliveState&&(!n||i===this._keepAliveDelaySeconds)?this:(this._keepAliveState=n,this._keepAliveDelaySeconds=n?i:0,rr("socket setKeepAlive",this._socketId,n,i),this._handle?.setKeepAlive?.(n,i),this)}setNoDelay(t){let r=$q(t);return r===this._noDelayState?this:(this._noDelayState=r,rr("socket setNoDelay",this._socketId,r),this._handle?.setNoDelay?.(r),this)}setTimeout(t,r){let n=GY(t);if(r!==void 0&&typeof r!="function")throw xl("callback",r);return r&&this.once("timeout",r),this._timeoutMs=n,n===0?(this._clearTimeoutTimer(),this):(this._touchTimeout(),this)}ref(){return this._refed=!0,this._handle?.ref?.(),this._timeoutTimer&&typeof this._timeoutTimer.ref=="function"&&this._timeoutTimer.ref(),!this.destroyed&&this._connected&&!this._loopbackServer&&!this._loopbackHttpTarget&&!this._bridgeReadLoopRunning&&(this._nextReadPumpOrigin="ref",this._pumpBridgeReads()),this}unref(){return this._refed=!1,this._handle?.unref?.(),this._timeoutTimer&&typeof this._timeoutTimer.unref=="function"&&this._timeoutTimer.unref(),this._bridgeReadPollTimer&&(clearTimeout(this._bridgeReadPollTimer),this._bridgeReadPollTimer=null),this}pause(){return this}resume(){return this}read(t){if(this._readQueue.length===0)return null;if(t==null||t<=0){let i=this._readQueue.shift()??null;return i&&(this.readableLength=Math.max(0,this.readableLength-i.length)),i}let r=this._readQueue[0];if(!r)return null;if(r.length<=t)return this._readQueue.shift(),this.readableLength=Math.max(0,this.readableLength-r.length),r;let n=r.subarray(0,t);return this._readQueue[0]=r.subarray(t),this.readableLength=Math.max(0,this.readableLength-n.length),n}unshift(t){let r=Buffer.isBuffer(t)?t:Buffer.from(t);return r.length===0?this:(this._readQueue.unshift(r),this.readableLength+=r.length,this)}cork(){}uncork(){}address(){return{port:this.localPort,family:this.localFamily,address:this.localAddress}}getCipher(){return Ia(this._socketId,"getCipher")??this._tlsCipher}getSession(){let t=Ia(this._socketId,"getSession");return Buffer.isBuffer(t)?(this._tlsSession=Buffer.from(t),Buffer.from(t)):this._tlsSession?Buffer.from(this._tlsSession):null}isSessionReused(){let t=Ia(this._socketId,"isSessionReused");return typeof t=="boolean"?t:this._tlsSessionReused}getPeerCertificate(t){let r=Ia(this._socketId,"getPeerCertificate",t===!0);return r&&typeof r=="object"?r:{}}getCertificate(){let t=Ia(this._socketId,"getCertificate");return t&&typeof t=="object"?t:{}}getProtocol(){let t=Ia(this._socketId,"getProtocol");return typeof t=="string"?t:this._tlsProtocol}setEncoding(t){return this._encoding=t,this}pipe(t){return t}on(t,r){return this._listeners[t]||(this._listeners[t]=[]),this._listeners[t].push(r),this}addListener(t,r){return this.on(t,r)}once(t,r){return this._onceListeners[t]||(this._onceListeners[t]=[]),this._onceListeners[t].push(r),this}removeListener(t,r){let n=this._listeners[t];if(n){let s=n.indexOf(r);s>=0&&n.splice(s,1)}let i=this._onceListeners[t];if(i){let s=i.indexOf(r);s>=0&&i.splice(s,1)}return this}off(t,r){return this.removeListener(t,r)}removeAllListeners(t){return t?(delete this._listeners[t],delete this._onceListeners[t]):(this._listeners={},this._onceListeners={}),this}listeners(t){return[...this._listeners[t]??[],...this._onceListeners[t]??[]]}listenerCount(t){return(this._listeners[t]?.length??0)+(this._onceListeners[t]?.length??0)}setMaxListeners(t){return this}getMaxListeners(){return 10}prependListener(t,r){return this._listeners[t]||(this._listeners[t]=[]),this._listeners[t].unshift(r),this}prependOnceListener(t,r){return this._onceListeners[t]||(this._onceListeners[t]=[]),this._onceListeners[t].unshift(r),this}eventNames(){return[...new Set([...Object.keys(this._listeners),...Object.keys(this._onceListeners)])]}rawListeners(t){return this.listeners(t)}emit(t,...r){return this._emitNet(t,...r)}_emitNet(t,...r){let n=ir()&&(t==="readable"||t==="data"),i=n?At():0;n&&t==="data"&&(this._currentDataEmitStartUs=i),t==="readable"?re("socketReadableEmits"):t==="data"?re("socketDataEmits"):t==="end"?re("socketEndEmits"):t==="close"?re("socketCloseEmits"):t==="connect"&&re("socketConnectEmits"),t==="data"&&this._encoding&&r[0]&&Buffer.isBuffer(r[0])&&(r[0]=r[0].toString(this._encoding));let s=!1;try{let o=this._listeners[t];if(o)for(let A of[...o])A.call(this,...r),s=!0;let a=this._onceListeners[t];if(a){let A=[...a];this._onceListeners[t]=[];for(let f of A)f.call(this,...r),s=!0}}finally{if(n){let o=At()-i;t==="readable"?(re("socketReadableEmitUs",o),Qr("socketReadableEmitMaxUs",o)):t==="data"&&(re("socketDataEmitUs",o),Qr("socketDataEmitMaxUs",o),this._lastDataEmitEndUs=At(),this._currentDataEmitStartUs=0)}}return s}_queueReadablePayload(t){if(!t||t.length===0)return;let r=ir(),n=r?At():0;try{if(this._readQueue.push(t),this.readableLength+=t.length,re("queueReadablePayloads"),re("queueReadableBytes",t.length),Qr("queueReadableBytesMax",this.readableLength),this._emitNet("readable"),this.listenerCount("data")>0){let i=r?At():0,s=this.read();if(r){let o=At()-i;re("queueReadableImmediateReadCalls"),re("queueReadableImmediateReadUs",o),Qr("queueReadableImmediateReadMaxUs",o)}s!==null&&this._emitNet("data",s)}}finally{if(r){let i=At()-n;re("queueReadablePayloadElapsedUs",i),Qr("queueReadablePayloadMaxUs",i)}}}async _waitForConnect(){if(!(typeof _netSocketWaitConnectRaw>"u"||this._socketId===0))try{let t=await _netSocketWaitConnectRaw.apply(void 0,[this._socketId],{result:{promise:!0}});if(this.destroyed)return;this._applySocketInfo(YY(t)),this._connected=!0,this.connecting=!1,rr("socket connected",this._socketId,this.localAddress,this.localPort,this.remoteAddress,this.remotePort),this._touchTimeout(),rr("socket emit connect",this._socketId,this.listenerCount("connect")),this._emitNet("connect"),rr("socket emit ready",this._socketId,this.listenerCount("ready")),this._emitNet("ready"),this._tlsUpgrading||(this._nextReadPumpOrigin="connectWait",await this._pumpBridgeReads())}catch(t){if(this.destroyed)return;let r=t instanceof Error?t:new Error(String(t));rr("socket connect error",this._socketId,r.message,r.stack??null),this._emitNet("error",r),this.destroy()}}async _pumpBridgeReads(){if(this._bridgeReadLoopRunning||typeof _netSocketReadRaw>"u"||this._socketId===0)return;re("readPumpRuns");let t=!this._bridgeReadPumpStarted,r=this._readFirstPumpScheduleActive===!0;if(t){if(kwe(this._nextReadPumpOrigin),this._firstReadNoTimerWakeAtUs>0&&ir()){let s=Math.max(0,At()-this._firstReadNoTimerWakeAtUs);re("readFirstPumpAfterNoTimerWakeCalls"),re("readFirstPumpAfterNoTimerWakeUs",s),Qr("readFirstPumpAfterNoTimerWakeMaxUs",s)}if(r&&this._readFirstPumpScheduleQueuedAtUs>0&&ir()){let s=Math.max(0,At()-this._readFirstPumpScheduleQueuedAtUs);re("readFirstPumpScheduleQueuedToPumpStartUs",s),Qr("readFirstPumpScheduleQueuedToPumpStartMaxUs",s)}}this._readFirstPumpScheduleActive=!1,this._readFirstPumpScheduleQueuedAtUs=0,this._nextReadPumpOrigin=null,this._bridgeReadPumpStarted=!0;let n=!1,i=!1;if(ir()&&this._readWakeQueuedAtUs>0){let s=Math.max(0,At()-this._readWakeQueuedAtUs);re("readWakeQueuedToPumpStartUs",s),Qr("readWakeQueuedToPumpStartMaxUs",s),this._readWakeQueuedAtUs=0}this._bridgeReadLoopRunning=!0;try{for(;!this.destroyed;){re("readRawCalls");let s=ir(),o=s&&this._lastReadDeliveryEndUs>0?At():0;o>0&&(re("readPostDeliveryProbeCalls"),re("readPostDeliveryNextRawCalls"),re("readPostDeliveryToProbeStartUs",o-this._lastReadDeliveryEndUs),this._bridgeWriteFlushScheduled&&(re("readPostDeliveryPendingWriteFlushes"),re("readPostDeliveryPendingWriteBytes",this._pendingBridgeWriteBytes)),this._lastReadDeliveryEndUs=0);let a=s?At():0,A=_netSocketReadRaw.applySync(void 0,[this._socketId]);if(s){let p=At()-a;re("readRawElapsedUs",p),o>0&&(re("readPostDeliveryProbeElapsedUs",p),Qr("readPostDeliveryProbeMaxUs",p))}if(this.destroyed)return;if(A===V2){if(t&&!n&&(n=!0,re("readFirstPumpResultTimeout")),r&&!i&&(i=!0,re("readFirstPumpScheduleResultTimeout")),re("readTimeoutSentinels"),o>0&&(re("readPostDeliveryProbeTimeoutSentinels"),re("readPostDeliveryNextRawTimeoutSentinels")),!this._refed)return;re("readPollTimersScheduled");let p=J2(),I=ir()?At():0;this._bridgeReadPollTimer=setTimeout(()=>{if(ir()){let S=Math.max(0,At()-I-p*1e3);re("readPollTimerFires"),re("readPollTimerFireLagUs",S),Qr("readPollTimerFireLagMaxUs",S)}this._bridgeReadPollTimer=null,this._nextReadPumpOrigin="timer",this._pumpBridgeReads()},p);return}if(A===null){t&&!n&&(n=!0,re("readFirstPumpResultEnd")),r&&!i&&(i=!0,re("readFirstPumpScheduleResultEnd")),re("readEndEvents"),this._handleRemoteReadableEnd();return}o>0&&(re("readPostDeliveryProbeDataEvents"),re("readPostDeliveryNextRawDataEvents")),t&&!n&&(n=!0,re("readFirstPumpResultData")),r&&!i&&(i=!0,re("readFirstPumpScheduleResultData"));let f;if(typeof A=="string"){let p=s?At():0;f=Buffer.from(A,"base64"),s&&(re("readBase64DecodeCalls"),re("readBase64DecodeBytes",f.length),re("readBase64DecodeChars",A.length),re("readBase64DecodeUs",At()-p))}else{let p=s?At():0;f=Buffer.from(A),s&&(re("readPayloadMaterializeCalls"),re("readPayloadMaterializeBytes",f.length),re("readPayloadMaterializeUs",At()-p))}rr("socket data",this._socketId,f.length),re("readDataEvents"),re("readBytes",f.length),this.bytesRead+=f.length,this._touchTimeout(),re("readMacrotaskYields");let l=s?At():0;if(await xwe(),s){let p=At()-l;re("readMacrotaskYieldElapsedUs",p),Qr("readMacrotaskYieldMaxUs",p)}if(this.destroyed)return;this._queueReadablePayload(f),s&&(this._lastReadDeliveryEndUs=At())}}finally{this._bridgeReadLoopRunning=!1}}_dispatchLoopbackHttpRequest(){if(!(!this._loopbackServer&&!this._loopbackHttpTarget||this.destroyed)){if(this._loopbackDispatchRunning){this._loopbackDispatchPending=!0;return}this._loopbackDispatchRunning=!0,this._processLoopbackHttpRequests().finally(()=>{this._loopbackDispatchRunning=!1,this._loopbackDispatchPending&&this._loopbackBuffer.length>0?(this._loopbackDispatchPending=!1,this._dispatchLoopbackHttpRequest()):this._loopbackDispatchPending=!1})}}async _processLoopbackHttpRequests(){let t=!1;for(;(this._loopbackServer||this._loopbackHttpTarget)&&!this.destroyed;){let r=this._loopbackServer??{listenerCount:()=>0},n=pW(this._loopbackBuffer,r);if(n.kind==="incomplete"){t&&this._closeLoopbackReadable();return}if(n.kind==="bad-request"){this._pushLoopbackData(V1()),n.closeConnection&&this._closeLoopbackReadable(),this._loopbackBuffer=Buffer.alloc(0);return}if(this._loopbackBuffer=this._loopbackBuffer.subarray(n.bytesConsumed),n.upgradeHead){this._dispatchLoopbackUpgrade(n.request,n.upgradeHead);return}let i;if(this._loopbackHttpTarget){if(typeof _networkHttpServerRequestRaw>"u")throw new Error("HTTP loopback bridge is not available");i=_networkHttpServerRequestRaw.applySync(void 0,[{...this._loopbackHttpTarget,request:JSON.stringify(n.request)}])}else({responseJson:i}=await YSe(this._loopbackServer,n.request));let s=JSON.parse(i),o=eR(s,n.request,n.closeConnection);if(!t&&o.payload.length>0&&this._pushLoopbackData(o.payload),o.closeConnection&&(t=!0,this._loopbackBuffer.length===0)){this._closeLoopbackReadable();return}}}_pushLoopbackData(t){if(t.length===0||this._loopbackReadableEnded)return;let r=Buffer.from(t);this._queueLoopbackEvent(()=>{this.destroyed||(this.bytesRead+=r.length,this._touchTimeout(),this._queueReadablePayload(r))})}_closeLoopbackReadable(){this._loopbackReadableEnded||(this._loopbackReadableEnded=!0,this.readable=!1,this.writable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,this._clearTimeoutTimer(),this._queueLoopbackEvent(()=>{this._emitNet("end"),this._emitNet("close")}))}_queueLoopbackEvent(t){this._loopbackEventQueue=this._loopbackEventQueue.then(()=>new Promise(r=>{queueMicrotask(()=>{try{t()}finally{r()}})}))}_dispatchLoopbackUpgrade(t,r){if(this._loopbackServer)try{let n=new CSe({host:this.remoteAddress,port:this.remotePort});n._attachPeer({_pushData:i=>this._pushLoopbackData(i),_pushEnd:()=>this._closeLoopbackReadable()}),this._loopbackUpgradeSocket=n,this._loopbackServer._emit("upgrade",new Du(t),n,r)}catch(n){let i=n instanceof Error?n:new Error(String(n)),s=!1,o=null;if(typeof process<"u"&&typeof process.emit=="function"){let a=process;try{s=a.emit("uncaughtException",i,"uncaughtException")}catch(A){if(A&&typeof A=="object"&&A.name==="ProcessExitError"){s=!0;let f=Number(A.code);o=Number.isFinite(f)?f:0}else throw A}}if(s){o!==null&&(process.exitCode=o),this._loopbackServer?.close(),this.destroy();return}throw i}}_upgradeTls(t){if(typeof _netSocketUpgradeTlsRaw>"u")throw new Error("tls.connect is not supported in sandbox (bridge not available)");if(this._tlsUpgrading=!0,this._loopbackServer&&(typeof this._socketId!="string"||this._socketId.length===0)){queueMicrotask(()=>{this.destroyed||F1(this)});return}_netSocketUpgradeTlsRaw.applySync(void 0,[this._socketId,JSON.stringify(t??{})]),queueMicrotask(()=>{this.destroyed||F1(this)})}_touchTimeout(){this._timeoutMs===0||this.destroyed||(this._clearTimeoutTimer(),this._timeoutTimer=setTimeout(()=>{this._timeoutTimer=null,!this.destroyed&&this._emitNet("timeout")},this._timeoutMs),!this._refed&&typeof this._timeoutTimer.unref=="function"&&this._timeoutTimer.unref())}_clearTimeoutTimer(){this._timeoutTimer&&(clearTimeout(this._timeoutTimer),this._timeoutTimer=null)}};function x1(e,t,r){let n=new Do;return n.connect(e,t,r),n}var Pg=class{constructor(e,t){y(this,"_listeners",{});y(this,"_onceListeners",{});y(this,"_serverId",0);y(this,"_address",null);y(this,"_acceptLoopActive",!1);y(this,"_acceptLoopRunning",!1);y(this,"_acceptPollTimer",null);y(this,"_acceptPumpStarted",!1);y(this,"_nextAcceptPumpOrigin",null);y(this,"_firstAcceptNoTimerWakeAtUs",0);y(this,"_acceptWakeQueuedAtUs",0);y(this,"_handleRefId",null);y(this,"_connections",new Set);y(this,"_refed",!0);y(this,"listening",!1);y(this,"keepAlive",!1);y(this,"keepAliveInitialDelay",0);y(this,"allowHalfOpen",!1);y(this,"maxConnections");y(this,"_handle");typeof e=="function"?this.on("connection",e):(this.allowHalfOpen=e?.allowHalfOpen===!0,this.keepAlive=e?.keepAlive===!0,this.keepAliveInitialDelay=e?.keepAliveInitialDelay??0,t&&this.on("connection",t)),this._handle={onconnection:(r,n)=>{if(r){this._emit("error",r);return}if(!n)return;if(typeof this.maxConnections=="number"&&this.maxConnections>=0&&this._connections.size>=this.maxConnections){this._emit("drop",{localAddress:n.info.localAddress,localPort:n.info.localPort,localFamily:n.info.localFamily,remoteAddress:n.info.remoteAddress,remotePort:n.info.remotePort,remoteFamily:n.info.remoteFamily}),_netSocketDestroyRaw?.applySync(void 0,[n.socketId]);return}this.keepAlive&&n.setKeepAlive?.(!0,this.keepAliveInitialDelay);let i=Do.fromAcceptedHandle(n,{allowHalfOpen:this.allowHalfOpen});i.server=this,this._connections.add(i),i.once("close",()=>{this._connections.delete(i)}),this.keepAlive&&i._applyAcceptedKeepAlive(this.keepAliveInitialDelay),re("connectionEmits"),this._emit("connection",i)}}}listen(e,t,r,n){if(typeof _netServerListenRaw>"u"||typeof _netServerAcceptRaw>"u")throw new Error("net.createServer is not supported in sandbox");let{port:i,host:s,path:o,backlog:a,readableAll:A,writableAll:f,callback:l}=HY(e,t,r,n);l&&this.once("listening",l);try{let p=_netServerListenRaw.applySyncPromise(void 0,[{port:i,host:s,path:o,backlog:a,readableAll:A,writableAll:f}]),I=typeof p=="string"?JSON.parse(p):p,S=I.address??I;this._serverId=I.serverId,this._address=S.localPath?S.localPath:{address:S.localAddress,family:S.localFamily??S.family,port:S.localPort},this.listening=!0,uwe(this),this._syncHandleRef(),this._acceptLoopActive=!0,queueMicrotask(()=>{!this.listening||this._serverId===0||(this._emit("listening"),this._nextAcceptPumpOrigin="listen",this._pumpAccepts())})}catch(p){queueMicrotask(()=>{this._emit("error",p)})}return this}close(e){if(e&&this.once("close",e),!this.listening||typeof _netServerCloseRaw>"u")return queueMicrotask(()=>{this._emit("close")}),this;this.listening=!1,this._acceptLoopActive=!1,cwe(this),this._acceptPollTimer&&(clearTimeout(this._acceptPollTimer),this._acceptPollTimer=null),this._syncHandleRef();let t=this._serverId;return this._serverId=0,(async()=>{try{await _netServerCloseRaw.apply(void 0,[t],{result:{promise:!0}})}finally{this._address=null,this._emit("close")}})(),this}address(){return this._address}getConnections(e){if(typeof e!="function")throw xl("callback",e);return queueMicrotask(()=>{e(null,this._connections.size)}),this}ref(){return this._refed=!0,this._syncHandleRef(),this.listening&&this._acceptLoopActive&&!this._acceptLoopRunning&&(this._nextAcceptPumpOrigin="ref",this._pumpAccepts()),this}unref(){return this._refed=!1,this._acceptPollTimer&&(clearTimeout(this._acceptPollTimer),this._acceptPollTimer=null),this._syncHandleRef(),this}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),this}emit(e,...t){return this._emit(e,...t)}_emit(e,...t){let r=!1,n=this._listeners[e];if(n)for(let s of[...n])s.call(this,...t),r=!0;let i=this._onceListeners[e];if(i){this._onceListeners[e]=[];for(let s of[...i])s.call(this,...t),r=!0}return r}_syncHandleRef(){if(!this.listening||this._serverId===0||!this._refed){this._handleRefId&&typeof _unregisterHandle=="function"&&_unregisterHandle(this._handleRefId),this._handleRefId=null;return}let e=`${awe}${this._serverId}`;this._handleRefId!==e&&(this._handleRefId&&typeof _unregisterHandle=="function"&&_unregisterHandle(this._handleRefId),this._handleRefId=e,typeof _registerHandle=="function"&&_registerHandle(this._handleRefId,"net server"))}async _pumpAccepts(){if(typeof _netServerAcceptRaw>"u"||this._acceptLoopRunning){this._acceptLoopRunning&&re("acceptLoopAlreadyRunning");return}re("acceptPumpRuns");let e=!this._acceptPumpStarted;if(e&&(Uwe(this._nextAcceptPumpOrigin),this._firstAcceptNoTimerWakeAtUs>0&&ir())){let r=Math.max(0,At()-this._firstAcceptNoTimerWakeAtUs);re("acceptFirstPumpAfterNoTimerWakeCalls"),re("acceptFirstPumpAfterNoTimerWakeUs",r),Qr("acceptFirstPumpAfterNoTimerWakeMaxUs",r)}this._nextAcceptPumpOrigin=null,this._acceptPumpStarted=!0;let t=!1;if(ir()&&this._acceptWakeQueuedAtUs>0){let r=Math.max(0,At()-this._acceptWakeQueuedAtUs);re("acceptWakeQueuedToPumpStartUs",r),Qr("acceptWakeQueuedToPumpStartMaxUs",r),this._acceptWakeQueuedAtUs=0}this._acceptLoopRunning=!0;try{for(;this._acceptLoopActive&&this._serverId!==0;){re("acceptRawCalls");let r=ir(),n=r?At():0,i=_netServerAcceptRaw.applySync(void 0,[this._serverId]);if(r&&re("acceptRawElapsedUs",At()-n),i===V2){if(e&&!t&&(t=!0,re("acceptFirstPumpResultTimeout")),re("acceptTimeoutSentinels"),!this._refed)return;re("acceptPollTimersScheduled");let s=J2(),o=ir()?At():0;this._acceptPollTimer=setTimeout(()=>{if(ir()){let a=Math.max(0,At()-o-s*1e3);re("acceptPollTimerFires"),re("acceptPollTimerFireLagUs",a),Qr("acceptPollTimerFireLagMaxUs",a)}this._acceptPollTimer=null,this._nextAcceptPumpOrigin="timer",this._pumpAccepts()},s);return}if(!i){e&&!t&&(t=!0,re("acceptFirstPumpResultEmpty"));return}try{let s=r?At():0,o=JSON.parse(i);r&&re("acceptJsonParseUs",At()-s),re("acceptConnections"),e&&!t&&(t=!0,re("acceptFirstPumpResultConnection"));let a=Twe(o.socketId,o.info),A=r?At():0;this._handle.onconnection(null,a),r&&re("acceptOnConnectionUs",At()-A)}catch(s){this._emit("error",s)}}}finally{this._acceptLoopRunning=!1}}};function Pwe(e,t){return new Pg(e,t)}var JY={BlockList:wwe,Socket:Do,SocketAddress:Swe,Server:Pwe,Stream:Do,connect:x1,createConnection:x1,createServer(e,t){return new Pg(e,t)},getDefaultAutoSelectFamily(){return tG},getDefaultAutoSelectFamilyAttemptTimeout(){return rG},isIP(e){return Tl(e)},isIPv4(e){return Tl(e)===4},isIPv6(e){return Tl(e)===6},setDefaultAutoSelectFamily(e){tG=e!==!1},setDefaultAutoSelectFamilyAttemptTimeout(e){let t=Number(e);if(!Number.isFinite(t)||t<0)throw new RangeError(`Invalid auto-select family attempt timeout: ${e}`);rG=Math.trunc(t)}},Owe=Symbol.for("secure-exec.http2.kSocket"),iG=Symbol("options"),Io=new Map,qn=new Map,In=new Map,EB=new Map,Jv=new Set,L1=[],P1=new Map,jv=!1,Hwe=1,Ru=class{constructor(){y(this,"_listeners",{});y(this,"_onceListeners",{})}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}addListener(e,t){return this.on(e,t)}once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),this}removeListener(e,t){let r=n=>{if(!n)return;let i=n.indexOf(t);i!==-1&&n.splice(i,1)};return r(this._listeners[e]),r(this._onceListeners[e]),this}off(e,t){return this.removeListener(e,t)}listenerCount(e){return(this._listeners[e]?.length??0)+(this._onceListeners[e]?.length??0)}setMaxListeners(e){return this}emit(e,...t){let r=!1,n=this._listeners[e];if(n)for(let s of[...n])s.call(this,...t),r=!0;let i=this._onceListeners[e];if(i){this._onceListeners[e]=[];for(let s of[...i])s.call(this,...t),r=!0}return r}},O1=class extends Ru{constructor(t,r){super();y(this,"allowHalfOpen",!1);y(this,"encrypted",!1);y(this,"localAddress","127.0.0.1");y(this,"localPort",0);y(this,"localFamily","IPv4");y(this,"remoteAddress","127.0.0.1");y(this,"remotePort",0);y(this,"remoteFamily","IPv4");y(this,"servername");y(this,"alpnProtocol",!1);y(this,"readable",!0);y(this,"writable",!0);y(this,"destroyed",!1);y(this,"_bridgeReadPollTimer",null);y(this,"_loopbackServer",null);y(this,"_onDestroy");y(this,"_destroyCallbackInvoked",!1);this._onDestroy=r,this._applyState(t)}_applyState(t){t&&(this.allowHalfOpen=t.allowHalfOpen===!0,this.encrypted=t.encrypted===!0,this.localAddress=t.localAddress??this.localAddress,this.localPort=t.localPort??this.localPort,this.localFamily=t.localFamily??this.localFamily,this.remoteAddress=t.remoteAddress??this.remoteAddress,this.remotePort=t.remotePort??this.remotePort,this.remoteFamily=t.remoteFamily??this.remoteFamily,this.servername=t.servername,this.alpnProtocol=t.alpnProtocol??this.alpnProtocol)}_clearTimeoutTimer(){}_emitNet(t,r){if(t==="error"&&r){this.emit("error",r);return}t==="close"&&(this._destroyCallbackInvoked||(this._destroyCallbackInvoked=!0,queueMicrotask(()=>{this._onDestroy?.()})),this.emit("close"))}end(){return this.destroyed=!0,this.readable=!1,this.writable=!1,this.emit("close"),this}destroy(){return this.destroyed?this:(this.destroyed=!0,this.readable=!1,this.writable=!1,this._emitNet("close"),this)}};function Pl(e,t,r){return lr(`The "${e}" argument must be of type ${t}. Received ${Yn(r)}`,"ERR_INVALID_ARG_TYPE")}function bo(e,t){return IB(t,e)}function wg(e,t){let r=new RangeError(`Invalid value for setting "${e}": ${String(t)}`);return r.code="ERR_HTTP2_INVALID_SETTING_VALUE",r}function qwe(e,t){let r=new TypeError(`Invalid value for setting "${e}": ${String(t)}`);return r.code="ERR_HTTP2_INVALID_SETTING_VALUE",r}var Qo={NGHTTP2_NO_ERROR:0,NGHTTP2_PROTOCOL_ERROR:1,NGHTTP2_INTERNAL_ERROR:2,NGHTTP2_FLOW_CONTROL_ERROR:3,NGHTTP2_SETTINGS_TIMEOUT:4,NGHTTP2_STREAM_CLOSED:5,NGHTTP2_FRAME_SIZE_ERROR:6,NGHTTP2_REFUSED_STREAM:7,NGHTTP2_CANCEL:8,NGHTTP2_COMPRESSION_ERROR:9,NGHTTP2_CONNECT_ERROR:10,NGHTTP2_ENHANCE_YOUR_CALM:11,NGHTTP2_INADEQUATE_SECURITY:12,NGHTTP2_HTTP_1_1_REQUIRED:13,NGHTTP2_NV_FLAG_NONE:0,NGHTTP2_NV_FLAG_NO_INDEX:1,NGHTTP2_ERR_DEFERRED:-508,NGHTTP2_ERR_STREAM_ID_NOT_AVAILABLE:-509,NGHTTP2_ERR_STREAM_CLOSED:-510,NGHTTP2_ERR_INVALID_ARGUMENT:-501,NGHTTP2_ERR_FRAME_SIZE_ERROR:-522,NGHTTP2_ERR_NOMEM:-901,NGHTTP2_FLAG_NONE:0,NGHTTP2_FLAG_END_STREAM:1,NGHTTP2_FLAG_END_HEADERS:4,NGHTTP2_FLAG_ACK:1,NGHTTP2_FLAG_PADDED:8,NGHTTP2_FLAG_PRIORITY:32,NGHTTP2_DEFAULT_WEIGHT:16,NGHTTP2_SETTINGS_HEADER_TABLE_SIZE:1,NGHTTP2_SETTINGS_ENABLE_PUSH:2,NGHTTP2_SETTINGS_MAX_CONCURRENT_STREAMS:3,NGHTTP2_SETTINGS_INITIAL_WINDOW_SIZE:4,NGHTTP2_SETTINGS_MAX_FRAME_SIZE:5,NGHTTP2_SETTINGS_MAX_HEADER_LIST_SIZE:6,NGHTTP2_SETTINGS_ENABLE_CONNECT_PROTOCOL:8},Gwe={[Qo.NGHTTP2_ERR_DEFERRED]:"Data deferred",[Qo.NGHTTP2_ERR_STREAM_ID_NOT_AVAILABLE]:"Stream ID is not available",[Qo.NGHTTP2_ERR_STREAM_CLOSED]:"Stream was already closed or invalid",[Qo.NGHTTP2_ERR_INVALID_ARGUMENT]:"Invalid argument",[Qo.NGHTTP2_ERR_FRAME_SIZE_ERROR]:"Frame size error",[Qo.NGHTTP2_ERR_NOMEM]:"Out of memory"},jY=class extends Error{constructor(t){super(t);y(this,"code","ERR_HTTP2_ERROR");this.name="Error"}};function zY(e){return Gwe[e]??`HTTP/2 error (${String(e)})`}function zv(e,t){return lr(`The property 'options.${e}' is invalid. Received ${Ywe(t)}`,"ERR_INVALID_ARG_VALUE")}function Ywe(e){return typeof e=="function"?`[Function${e.name?`: ${e.name}`:": function"}]`:typeof e=="symbol"?e.toString():Array.isArray(e)?"[]":e===null?"null":typeof e=="object"?"{}":String(e)}function Wwe(e){return bo("ERR_HTTP2_PAYLOAD_FORBIDDEN",`Responses with ${String(e)} status must not have a payload`)}var Vwe=61440,Jwe=16384,jwe=32768,zwe=4096,Kwe=49152,Xwe=40960;function Zwe(e){let t=e.atimeMs??0,r=e.mtimeMs??t,n=e.ctimeMs??r,i=e.birthtimeMs??n,s=e.mode&Vwe;return{size:e.size,mode:e.mode,atimeMs:t,mtimeMs:r,ctimeMs:n,birthtimeMs:i,atime:new Date(t),mtime:new Date(r),ctime:new Date(n),birthtime:new Date(i),isFile:()=>s===jwe,isDirectory:()=>s===Jwe,isFIFO:()=>s===zwe,isSocket:()=>s===Kwe,isSymbolicLink:()=>s===Xwe}}function $we(e){let t=e??{},r=t.offset;if(r!==void 0&&(typeof r!="number"||!Number.isFinite(r)))throw zv("offset",r);let n=t.length;if(n!==void 0&&(typeof n!="number"||!Number.isFinite(n)))throw zv("length",n);let i=t.statCheck;if(i!==void 0&&typeof i!="function")throw zv("statCheck",i);let s=t.onError;return{offset:r===void 0?0:Math.max(0,Math.trunc(r)),length:typeof n=="number"?Math.trunc(n):void 0,statCheck:typeof i=="function"?i:void 0,onError:typeof s=="function"?s:void 0}}function eSe(e,t,r){let n=Math.max(0,Math.min(t,e.length));return r===void 0||r<0?e.subarray(n):e.subarray(n,Math.min(e.length,n+r))}var KY=class{constructor(e){y(this,"_streamId");this._streamId=e}respond(e){if(typeof _networkHttp2StreamRespondRaw>"u")throw new Error("http2 server stream respond bridge is not available");return _networkHttp2StreamRespondRaw.applySync(void 0,[this._streamId,j2(e)]),0}},H1={headerTableSize:4096,enablePush:!0,initialWindowSize:65535,maxFrameSize:16384,maxConcurrentStreams:4294967295,maxHeaderListSize:65535,maxHeaderSize:65535,enableConnectProtocol:!1},XY={effectiveLocalWindowSize:65535,localWindowSize:65535,remoteWindowSize:65535,nextStreamID:1,outboundQueueSize:1,deflateDynamicTableSize:0,inflateDynamicTableSize:0};function Wi(e){let t={};for(let[r,n]of Object.entries(e??{})){if(r==="customSettings"&&n&&typeof n=="object"){let i={};for(let[s,o]of Object.entries(n))i[Number(s)]=Number(o);t.customSettings=i;continue}t[r]=n}return t}function sG(e){return{...XY,...e??{}}}function tSe(e){if(!e||typeof e!="object")return;let t=e,r={},n=["effectiveLocalWindowSize","localWindowSize","remoteWindowSize","nextStreamID","outboundQueueSize","deflateDynamicTableSize","inflateDynamicTableSize"];for(let i of n)typeof t[i]=="number"&&(r[i]=t[i]);return r}function ZY(e,t="settings"){if(!e||typeof e!="object"||Array.isArray(e))throw Pl(t,"object",e);let r=e,n={},i={headerTableSize:[0,4294967295],initialWindowSize:[0,4294967295],maxFrameSize:[16384,16777215],maxConcurrentStreams:[0,4294967295],maxHeaderListSize:[0,4294967295],maxHeaderSize:[0,4294967295]};for(let[s,o]of Object.entries(r))if(o!==void 0){if(s==="enablePush"||s==="enableConnectProtocol"){if(typeof o!="boolean")throw qwe(s,o);n[s]=o;continue}if(s==="customSettings"){if(!o||typeof o!="object"||Array.isArray(o))throw wg(s,o);let a={};for(let[A,f]of Object.entries(o)){let l=Number(A);if(!Number.isInteger(l)||l<0||l>65535||typeof f!="number"||!Number.isInteger(f)||f<0||f>4294967295)throw wg(s,o);a[l]=f}n.customSettings=a;continue}if(s in i){let[a,A]=i[s];if(typeof o!="number"||!Number.isInteger(o)||o<a||o>A)throw wg(s,o);n[s]=o;continue}n[s]=o}return n}function j2(e){return JSON.stringify(e??{})}function NA(e){if(!e)return{};try{let t=JSON.parse(e);return t&&typeof t=="object"?t:{}}catch{return{}}}function Dg(e){if(!e)return null;try{let t=JSON.parse(e);return t&&typeof t=="object"?t:null}catch{return null}}function oG(e){if(!e)return null;try{let t=JSON.parse(e);return t&&typeof t=="object"?t:null}catch{return null}}function yB(e){if(!e)return new Error("Unknown HTTP/2 bridge error");try{let t=JSON.parse(e),r=new Error(t.message??"Unknown HTTP/2 bridge error");return t.name&&(r.name=t.name),t.code&&(r.code=t.code),r}catch{return new Error(e)}}function $Y(e){let t={};if(!e||typeof e!="object")return t;for(let[r,n]of Object.entries(e))t[String(r)]=n;return t}function rSe(e){if(!e)return;let t={endStream:"boolean",weight:"number",parent:"number",exclusive:"boolean",silent:"boolean"};for(let[r,n]of Object.entries(t)){if(!(r in e)||e[r]===void 0)continue;let i=e[r];if(n==="boolean"&&typeof i!="boolean")throw Pl(r,"boolean",i);if(n==="number"&&typeof i!="number")throw Pl(r,"number",i)}}function nSe(e){if(!e||!e.settings||typeof e.settings!="object")return;let t=e.settings;if("maxFrameSize"in t){let r=t.maxFrameSize;if(typeof r!="number"||!Number.isInteger(r)||r<16384||r>16777215)throw wg("maxFrameSize",r)}}function z2(e,t){t&&(e.encrypted=t.encrypted===!0,e.alpnProtocol=t.alpnProtocol??(e.encrypted?"h2":"h2c"),e.originSet=Array.isArray(t.originSet)&&t.originSet.length>0?[...t.originSet]:e.encrypted?[]:void 0,t.localSettings&&typeof t.localSettings=="object"&&(e.localSettings=Wi(t.localSettings)),t.remoteSettings&&typeof t.remoteSettings=="object"&&(e.remoteSettings=Wi(t.remoteSettings)),t.state&&typeof t.state=="object"&&e._applyRuntimeState(tSe(t.state)),e.socket._applyState(t.socket))}function iSe(e,t){if(e instanceof URL)return e;if(typeof e=="string")return new URL(e);if(e&&typeof e=="object"){let r=e,n=typeof(t?.protocol??r.protocol)=="string"?String(t?.protocol??r.protocol):"http:",i=typeof(t?.host??r.host??t?.hostname??r.hostname)=="string"?String(t?.host??r.host??t?.hostname??r.hostname):"localhost",s=t?.port??r.port,o=s===void 0?"":String(s);return new URL(`${n}//${i}${o?`:${o}`:""}`)}return new URL("http://localhost")}function sSe(e,t,r){let n=typeof t=="function"?t:typeof r=="function"?r:void 0,i=typeof t=="function"?{}:t??{};return{authority:iSe(e,i),options:i,listener:n}}function oSe(e){if(!e||typeof e!="object")return;let t=e._socketId;return typeof t=="number"&&Number.isFinite(t)?t:void 0}var eW=class extends Ru{constructor(t,r,n=!1){super();y(this,"_streamId");y(this,"_encoding");y(this,"_utf8Remainder");y(this,"_isPushStream");y(this,"_session");y(this,"_receivedResponse",!1);y(this,"_needsDrain",!1);y(this,"_pendingWritableBytes",0);y(this,"_drainScheduled",!1);y(this,"_writableHighWaterMark",16*1024);y(this,"rstCode",0);y(this,"readable",!0);y(this,"writable",!0);y(this,"writableEnded",!1);y(this,"writableFinished",!1);y(this,"destroyed",!1);y(this,"_writableState",{ended:!1,finished:!1,objectMode:!1,corked:0,length:0});this._streamId=t,this._session=r,this._isPushStream=n,n||queueMicrotask(()=>{this.emit("ready")})}setEncoding(t){return this._encoding=t,this._utf8Remainder=this._encoding==="utf8"||this._encoding==="utf-8"?Buffer.alloc(0):void 0,this}close(){return this.end(),this}destroy(t){return this.destroyed?this:(this.destroyed=!0,t&&this.emit("error",t),this.end(),this)}_scheduleDrain(){!this._needsDrain||this._drainScheduled||(this._drainScheduled=!0,queueMicrotask(()=>{this._drainScheduled=!1,this._needsDrain&&(this._needsDrain=!1,this._pendingWritableBytes=0,this.emit("drain"))}))}write(t,r,n){if(typeof _networkHttp2StreamWriteRaw>"u")throw new Error("http2 session stream write bridge is not available");let i=Buffer.isBuffer(t)?t:typeof t=="string"?Buffer.from(t,typeof r=="string"?r:"utf8"):Buffer.from(t),s=_networkHttp2StreamWriteRaw.applySync(void 0,[this._streamId,i.toString("base64")]);this._pendingWritableBytes+=i.byteLength;let o=s===!1||this._pendingWritableBytes>=this._writableHighWaterMark;return o&&(this._needsDrain=!0),(typeof r=="function"?r:n)?.(),!o}end(t){if(typeof _networkHttp2StreamEndRaw>"u")throw new Error("http2 session stream end bridge is not available");let r=null;return t!==void 0&&(r=(Buffer.isBuffer(t)?t:Buffer.from(t)).toString("base64")),_networkHttp2StreamEndRaw.applySync(void 0,[this._streamId,r]),this.writableEnded=!0,this._writableState.ended=!0,queueMicrotask(()=>{this.writable=!1,this.writableFinished=!0,this._writableState.finished=!0,this.emit("finish")}),this}resume(){return this}_emitPush(t,r){process.env.SECURE_EXEC_DEBUG_HTTP2_BRIDGE==="1"&&console.error("[secure-exec http2 isolate] push",this._streamId),this.emit("push",t,r??0)}_hasReceivedResponse(){return this._receivedResponse}_belongsTo(t){return this._session===t}_emitResponseHeaders(t){this._receivedResponse=!0,process.env.SECURE_EXEC_DEBUG_HTTP2_BRIDGE==="1"&&console.error("[secure-exec http2 isolate] response headers",this._streamId,this._isPushStream),this._isPushStream||this.emit("response",t)}_emitDataChunk(t){if(!t)return;let r=Buffer.from(t,"base64");if(this._utf8Remainder!==void 0){let n=this._utf8Remainder.length>0?Buffer.concat([this._utf8Remainder,r]):r,i=aSe(n),s=n.subarray(0,i).toString("utf8");this._utf8Remainder=i<n.length?n.subarray(i):Buffer.alloc(0),s.length>0&&this.emit("data",s)}else this._encoding?this.emit("data",r.toString(this._encoding)):this.emit("data",r);this._scheduleDrain()}_emitEnd(){if(this._utf8Remainder&&this._utf8Remainder.length>0){let t=this._utf8Remainder.toString("utf8");this._utf8Remainder=Buffer.alloc(0),t.length>0&&this.emit("data",t)}this.readable=!1,this.emit("end"),this._scheduleDrain()}_emitClose(t){typeof t=="number"&&(this.rstCode=t),this.destroyed=!0,this.readable=!1,this.writable=!1,this._scheduleDrain(),this.emit("close")}};function aSe(e){if(e.length===0)return 0;let t=0;for(let r=e.length-1;r>=0&&t<3;r-=1){if((e[r]&192)!==128){let n=e.length-r,i=e[r],s=(i&128)===0?1:(i&224)===192?2:(i&240)===224?3:(i&248)===240?4:1;return n<s?r:e.length}t+=1}return t>0?e.length-t:e.length}var ASe=class tW extends Ru{constructor(r,n,i,s=!1){super();y(this,"_streamId");y(this,"_binding");y(this,"_responded",!1);y(this,"_endQueued",!1);y(this,"_pendingSyntheticErrorSuppressions",0);y(this,"_requestHeaders");y(this,"_isPushStream");y(this,"session");y(this,"rstCode",0);y(this,"readable",!0);y(this,"writable",!0);y(this,"destroyed",!1);y(this,"_readableState");y(this,"_writableState");this._streamId=r,this._binding=new KY(r),this.session=n,this._requestHeaders=i,this._isPushStream=s,this._readableState={flowing:null,ended:!1,highWaterMark:16*1024},this._writableState={ended:i?.[":method"]==="HEAD"}}_closeWithCode(r){this.rstCode=r,_networkHttp2StreamCloseRaw?.applySync(void 0,[this._streamId,r])}_markSyntheticClose(){this.destroyed=!0,this.readable=!1,this.writable=!1}_shouldSuppressHostError(){return this._pendingSyntheticErrorSuppressions<=0?!1:(this._pendingSyntheticErrorSuppressions-=1,!0)}_emitNghttp2Error(r){let n=new jY(zY(r));this._pendingSyntheticErrorSuppressions+=1,this._markSyntheticClose(),this.emit("error",n),this._closeWithCode(Qo.NGHTTP2_INTERNAL_ERROR)}_emitInternalStreamError(){let r=bo("ERR_HTTP2_STREAM_ERROR","Stream closed with error code NGHTTP2_INTERNAL_ERROR");this._pendingSyntheticErrorSuppressions+=1,this._markSyntheticClose(),this.emit("error",r),this._closeWithCode(Qo.NGHTTP2_INTERNAL_ERROR)}_submitResponse(r){this._responded=!0;let n=this._binding.respond(r);return typeof n=="number"&&n!==0?(this._emitNghttp2Error(n),!1):!0}respond(r){if(this.destroyed)throw bo("ERR_HTTP2_INVALID_STREAM","The stream has been destroyed");if(this._responded)throw bo("ERR_HTTP2_HEADERS_SENT","Response has already been initiated.");this._submitResponse(r)}pushStream(r,n,i){if(this._isPushStream)throw bo("ERR_HTTP2_NESTED_PUSH","A push stream cannot initiate another push stream.");let s=typeof n=="function"?n:i;if(typeof s!="function")throw Pl("callback","function",s);if(typeof _networkHttp2StreamPushStreamRaw>"u")throw new Error("http2 server stream push bridge is not available");let o=n&&typeof n=="object"&&!Array.isArray(n)?n:{},a=_networkHttp2StreamPushStreamRaw.applySync(void 0,[this._streamId,j2($Y(r)),JSON.stringify(o??{})]),A=JSON.parse(a);if(A.error){s(yB(A.error));return}let f=new tW(Number(A.streamId),this.session,NA(A.headers),!0);In.set(Number(A.streamId),f),s(null,f,NA(A.headers))}write(r){if(this._writableState.ended)return queueMicrotask(()=>{this.emit("error",bo("ERR_STREAM_WRITE_AFTER_END","write after end"))}),!1;if(typeof _networkHttp2StreamWriteRaw>"u")throw new Error("http2 server stream write bridge is not available");let n=Buffer.isBuffer(r)?r:Buffer.from(r);return _networkHttp2StreamWriteRaw.applySync(void 0,[this._streamId,n.toString("base64")])}end(r){if(!this._responded&&!this._submitResponse({":status":200})||this._endQueued)return;if(typeof _networkHttp2StreamEndRaw>"u")throw new Error("http2 server stream end bridge is not available");this._writableState.ended=!0;let n=null;r!==void 0&&(n=(Buffer.isBuffer(r)?r:Buffer.from(r)).toString("base64")),this._endQueued=!0,queueMicrotask(()=>{!this._endQueued||this.destroyed||(this._endQueued=!1,_networkHttp2StreamEndRaw.applySync(void 0,[this._streamId,n]))})}pause(){return this._readableState.flowing=!1,_networkHttp2StreamPauseRaw?.applySync(void 0,[this._streamId]),this}resume(){return this._readableState.flowing=!0,_networkHttp2StreamResumeRaw?.applySync(void 0,[this._streamId]),this}respondWithFile(r,n,i){if(this.destroyed)throw bo("ERR_HTTP2_INVALID_STREAM","The stream has been destroyed");if(this._responded)throw bo("ERR_HTTP2_HEADERS_SENT","Response has already been initiated.");let s=$we(i),o={...n??{}},a=o[":status"];if(a===204||a===205||a===304)throw Wwe(Number(a));try{let A=Jt.stat.applySyncPromise(void 0,[r]),f=Jt.readFileBinary.applySyncPromise(void 0,[r]),l=Zwe(Ta(A)),p={offset:s.offset,length:s.length??Math.max(0,l.size-s.offset)};s.statCheck?.(l,o,p);let I=Buffer.from(f,"base64"),S=eSe(I,s.offset,s.length);if(o["content-length"]===void 0&&(o["content-length"]=S.byteLength),!this._submitResponse({":status":200,...o}))return;this.end(S);return}catch{}if(typeof _networkHttp2StreamRespondWithFileRaw>"u")throw new Error("http2 server stream respondWithFile bridge is not available");this._responded=!0,_networkHttp2StreamRespondWithFileRaw.applySync(void 0,[this._streamId,r,JSON.stringify(n??{}),JSON.stringify(i??{})])}respondWithFD(r,n,i){let s=typeof r=="number"?r:typeof r?.fd=="number"?r.fd:NaN,o=Number.isFinite(s)?FA.applySync(void 0,[s]):null;if(!o){this._emitInternalStreamError();return}this.respondWithFile(o,n,i)}destroy(r){return this.destroyed?this:(this.destroyed=!0,r&&this.emit("error",r),this._closeWithCode(Qo.NGHTTP2_CANCEL),this)}_emitData(r){r&&this.emit("data",Buffer.from(r,"base64"))}_emitEnd(){this._readableState.ended=!0,this.emit("end")}_emitDrain(){this.emit("drain")}_emitClose(r){typeof r=="number"&&(this.rstCode=r),this.destroyed=!0,this.emit("close")}},rW=class extends Ru{constructor(t,r,n){super();y(this,"headers");y(this,"method");y(this,"url");y(this,"connection");y(this,"socket");y(this,"stream");y(this,"destroyed",!1);y(this,"readable",!0);y(this,"_readableState",{flowing:null,length:0,ended:!1,objectMode:!1});this.headers=t,this.method=typeof t[":method"]=="string"?String(t[":method"]):"GET",this.url=typeof t[":path"]=="string"?String(t[":path"]):"/",this.connection=r,this.socket=r,this.stream=n}on(t,r){return super.on(t,r),t==="data"&&this._readableState.flowing!==!1&&this.resume(),this}once(t,r){return super.once(t,r),t==="data"&&this._readableState.flowing!==!1&&this.resume(),this}resume(){return this._readableState.flowing=!0,this.stream.resume(),this}pause(){return this._readableState.flowing=!1,this.stream.pause(),this}pipe(t){return this.on("data",r=>{t.write(r)===!1&&typeof t.once=="function"&&(this.pause(),t.once("drain",()=>this.resume()))}),this.on("end",()=>t.end()),this.resume(),t}unpipe(){return this}read(){return null}isPaused(){return this._readableState.flowing===!1}setEncoding(){return this}_emitData(t){this._readableState.length+=t.byteLength,this.emit("data",t)}_emitEnd(){this._readableState.ended=!0,this.emit("end"),this.emit("close")}_emitError(t){this.emit("error",t)}destroy(t){return this.destroyed=!0,t&&this.emit("error",t),this.emit("close"),this}},nW=class extends Ru{constructor(t){super();y(this,"_stream");y(this,"_headers",{});y(this,"_statusCode",200);y(this,"headersSent",!1);y(this,"writable",!0);y(this,"writableEnded",!1);y(this,"writableFinished",!1);y(this,"socket");y(this,"connection");y(this,"stream");y(this,"_writableState",{ended:!1,finished:!1,objectMode:!1,corked:0,length:0});this._stream=t,this.stream=t,this.socket=t.session.socket,this.connection=this.socket}writeHead(t,r){return this._statusCode=t,this._headers={...this._headers,...r??{},":status":t},this._stream.respond(this._headers),this.headersSent=!0,this}setHeader(t,r){return this._headers[t]=r,this}getHeader(t){return this._headers[t]}hasHeader(t){return Object.prototype.hasOwnProperty.call(this._headers,t)}removeHeader(t){delete this._headers[t]}write(t,r,n){":status"in this._headers||(this._headers[":status"]=this._statusCode,this._stream.respond(this._headers),this.headersSent=!0);let i=this._stream.write(typeof t=="string"&&typeof r=="string"?Buffer.from(t,r):t);return(typeof r=="function"?r:n)?.(),i}end(t){return":status"in this._headers||(this._headers[":status"]=this._statusCode,this._stream.respond(this._headers),this.headersSent=!0),this.writableEnded=!0,this._writableState.ended=!0,this._stream.end(t),queueMicrotask(()=>{this.writable=!1,this.writableFinished=!0,this._writableState.finished=!0,this.emit("finish"),this.emit("close")}),this}destroy(t){return t&&this.emit("error",t),this.writable=!1,this.writableEnded=!0,this.writableFinished=!0,this.emit("close"),this}},iW=class extends Ru{constructor(t,r){super();y(this,"encrypted",!1);y(this,"alpnProtocol",!1);y(this,"originSet");y(this,"localSettings",Wi(H1));y(this,"remoteSettings",Wi(H1));y(this,"pendingSettingsAck",!1);y(this,"socket");y(this,"state",sG(XY));y(this,"_sessionId");y(this,"_waitStarted",!1);y(this,"_pendingSettingsAckCount",0);y(this,"_awaitingInitialSettingsAck",!1);y(this,"_settingsCallbacks",[]);this._sessionId=t,this.socket=new O1(r,()=>{setTimeout(()=>{this.destroy()},0)}),this[Owe]=this.socket}_retain(){this._waitStarted||typeof _networkHttp2SessionWaitRaw>"u"||(this._waitStarted=!0,_networkHttp2SessionWaitRaw.apply(void 0,[this._sessionId],{result:{promise:!0}}).catch(t=>{this.emit("error",t instanceof Error?t:new Error(String(t)))}))}_release(){this._waitStarted=!1}_beginInitialSettingsAck(){this._awaitingInitialSettingsAck=!0,this._pendingSettingsAckCount+=1,this.pendingSettingsAck=!0}_applyLocalSettings(t){this.localSettings=Wi(t),this._awaitingInitialSettingsAck&&(this._awaitingInitialSettingsAck=!1,this._pendingSettingsAckCount=Math.max(0,this._pendingSettingsAckCount-1),this.pendingSettingsAck=this._pendingSettingsAckCount>0),this.emit("localSettings",this.localSettings)}_applyRemoteSettings(t){this.remoteSettings=Wi(t),this.emit("remoteSettings",this.remoteSettings)}_applyRuntimeState(t){this.state=sG(t)}_ackSettings(){this._pendingSettingsAckCount=Math.max(0,this._pendingSettingsAckCount-1),this.pendingSettingsAck=this._pendingSettingsAckCount>0,this._settingsCallbacks.shift()?.()}request(t,r){if(typeof _networkHttp2SessionRequestRaw>"u")throw new Error("http2 session request bridge is not available");rSe(r);let n=_networkHttp2SessionRequestRaw.applySync(void 0,[this._sessionId,j2($Y(t)),JSON.stringify(r??{})]),i=new eW(n,this);return In.set(n,i),i}settings(t,r){if(r!==void 0&&typeof r!="function")throw Pl("callback","function",r);if(typeof _networkHttp2SessionSettingsRaw>"u")throw new Error("http2 session settings bridge is not available");let n=ZY(t);_networkHttp2SessionSettingsRaw.applySync(void 0,[this._sessionId,JSON.stringify(n)]),this._pendingSettingsAckCount+=1,this.pendingSettingsAck=!0,r&&this._settingsCallbacks.push(r)}setLocalWindowSize(t){if(typeof t!="number"||Number.isNaN(t))throw Pl("windowSize","number",t);if(!Number.isInteger(t)||t<0||t>2147483647){let n=new RangeError(`The value of "windowSize" is out of range. It must be >= 0 && <= 2147483647. Received ${t}`);throw n.code="ERR_OUT_OF_RANGE",n}if(typeof _networkHttp2SessionSetLocalWindowSizeRaw>"u")throw new Error("http2 session setLocalWindowSize bridge is not available");let r=_networkHttp2SessionSetLocalWindowSizeRaw.applySync(void 0,[this._sessionId,t]);this._applyRuntimeState(Dg(r)?.state)}goaway(t=0,r=0,n){let i=n===void 0?null:Buffer.isBuffer(n)?n.toString("base64"):Buffer.from(n).toString("base64");_networkHttp2SessionGoawayRaw?.applySync(void 0,[this._sessionId,t,r,i])}close(){let t=Array.from(In.entries()).filter(([,r])=>typeof r._belongsTo=="function"&&r._belongsTo(this)&&!r._hasReceivedResponse());if(t.length>0){let r=bo("ERR_HTTP2_GOAWAY_SESSION","The HTTP/2 session is closing before the stream could be established.");if(queueMicrotask(()=>{for(let[n,i]of t)In.get(n)===i&&(i.emit("error",r),i.emit("close"),In.delete(n))}),typeof _networkHttp2SessionDestroyRaw<"u"){_networkHttp2SessionDestroyRaw.applySync(void 0,[this._sessionId]);return}}_networkHttp2SessionCloseRaw?.applySync(void 0,[this._sessionId]),setTimeout(()=>{qn.has(this._sessionId)&&(this._release(),this.emit("close"),qn.delete(this._sessionId),_unregisterHandle?.(`http2:session:${this._sessionId}`))},50)}destroy(){if(typeof _networkHttp2SessionDestroyRaw<"u"){_networkHttp2SessionDestroyRaw.applySync(void 0,[this._sessionId]);return}this.close()}},fSe=class extends Ru{constructor(t,r,n){super();y(this,"allowHalfOpen");y(this,"allowHTTP1");y(this,"encrypted");y(this,"_serverId");y(this,"listening",!1);y(this,"_address",null);y(this,"_options");y(this,"_timeoutMs",0);y(this,"_waitStarted",!1);this.allowHalfOpen=t?.allowHalfOpen===!0,this.allowHTTP1=t?.allowHTTP1===!0,this.encrypted=n;let i=t?.settings&&typeof t.settings=="object"&&!Array.isArray(t.settings)?Wi(t.settings):{};this._options={...t??{},settings:i},this._serverId=Hwe++,this[iG]={settings:Wi(i),unknownProtocolTimeout:1e4,...n?{ALPNProtocols:["h2"]}:{}},r&&this.on("request",r),Io.set(this._serverId,this)}address(){return this._address}_retain(){this._waitStarted||typeof _networkHttp2ServerWaitRaw>"u"||(this._waitStarted=!0,_networkHttp2ServerWaitRaw.apply(void 0,[this._serverId],{result:{promise:!0}}).catch(t=>{this.emit("error",t instanceof Error?t:new Error(String(t)))}))}_release(){this._waitStarted=!1}setTimeout(t,r){return this._timeoutMs=GY(t),r&&this.on("timeout",r),this}updateSettings(t){let r=ZY(t),n={...Wi(this._options.settings),...Wi(r)};this._options={...this._options,settings:n};let i=this[iG];return i.settings=Wi(n),this}listen(t,r,n,i){if(typeof _networkHttp2ServerListenRaw>"u")throw new Error(`http2.${this.encrypted?"createSecureServer":"createServer"} is not supported in sandbox`);let s=HY(t,r,n,i);s.callback&&this.once("listening",s.callback);let o={serverId:this._serverId,secure:this.encrypted,port:s.port,host:s.host,backlog:s.backlog,allowHalfOpen:this.allowHalfOpen,allowHTTP1:this._options.allowHTTP1===!0,timeout:this._timeoutMs,settings:this._options.settings,remoteCustomSettings:this._options.remoteCustomSettings,tls:this.encrypted?Gl({...this._options,...t&&typeof t=="object"?t:{}},{isServer:!0}):void 0},a=JSON.parse(_networkHttp2ServerListenRaw.applySyncPromise(void 0,[JSON.stringify(o)]));return this._address=a.address??null,this.listening=!0,this._retain(),_registerHandle?.(`http2:server:${this._serverId}`,"http2 server"),this.emit("listening"),this}close(t){return t&&this.once("close",t),this.listening?(_networkHttp2ServerCloseRaw?.apply(void 0,[this._serverId],{result:{promise:!0}}),setTimeout(()=>{this.listening&&(this.listening=!1,this._release(),this.emit("close"),Io.delete(this._serverId),_unregisterHandle?.(`http2:server:${this._serverId}`))},50),this):(this._release(),queueMicrotask(()=>this.emit("close")),this)}};function aG(e,t,r){let n=typeof t=="function"?t:r,i=t&&typeof t=="object"&&!Array.isArray(t)?t:void 0;return new fSe(i,n,e)}function uSe(e,t,r){if(typeof _networkHttp2SessionConnectRaw>"u")throw new Error("http2.connect is not supported in sandbox");let{authority:n,options:i,listener:s}=sSe(e,t,r);if(n.protocol!=="http:"&&n.protocol!=="https:")throw bo("ERR_HTTP2_UNSUPPORTED_PROTOCOL",`protocol "${n.protocol}" is unsupported.`);nSe(i);let o=i.createConnection?oSe(i.createConnection()):void 0,a=i.port??n.port,A=a===""||a===void 0||a===null?void 0:Number(a),f=JSON.parse(_networkHttp2SessionConnectRaw.applySyncPromise(void 0,[JSON.stringify({authority:n.toString(),protocol:n.protocol,host:i.host??i.hostname??n.hostname,port:A,localAddress:i.localAddress,family:i.family,socketId:o,settings:i.settings,remoteCustomSettings:i.remoteCustomSettings,tls:n.protocol==="https:"?Gl(i,{servername:typeof i.servername=="string"?i.servername:n.hostname}):void 0})])),l=Dg(f.state),p=new iW(f.sessionId,l?.socket??void 0);return z2(p,l),p._beginInitialSettingsAck(),p._retain(),s&&p.once("connect",()=>s(p)),qn.set(f.sessionId,p),_registerHandle?.(`http2:session:${f.sessionId}`,"http2 session"),n.protocol==="https:"&&p.socket.once("secureConnect",()=>{}),p}function AG(e,t){let r=qn.get(e);return r||(r=new iW(e,t?.socket??void 0),qn.set(e,r)),z2(r,t),r}function Bl(e,t){let r=EB.get(e)??[];r.push(t),EB.set(e,r)}function ru(e){if(Jv.has(e))return;Jv.add(e);let t=()=>{Jv.delete(e),cSe(e)},r=globalThis.setImmediate;if(typeof r=="function"){r(t);return}setTimeout(t,0)}function cSe(e){let t=In.get(e);if(!t||typeof t._emitResponseHeaders!="function")return;let r=EB.get(e);if(!(!r||r.length===0)){EB.delete(e);for(let n of r){if(n.kind==="push"){t._emitPush(NA(n.data),n.extraNumber);continue}if(n.kind==="responseHeaders"){t._emitResponseHeaders(NA(n.data));continue}if(n.kind==="data"){t._emitDataChunk(n.data);continue}if(n.kind==="end"){t._emitEnd();continue}if(n.kind==="error"){t.emit("error",yB(n.data));continue}typeof t._emitClose=="function"?t._emitClose(n.extraNumber):t.emit("close"),In.delete(e)}}}function sW(e,t,r,n,i,s,o){if(e==="sessionConnect"){let a=qn.get(t);if(!a)return;let A=Dg(r);z2(a,A),a.encrypted&&a.socket.emit("secureConnect"),a.emit("connect");return}if(e==="sessionClose"){let a=qn.get(t);if(!a)return;a._release(),a.emit("close"),qn.delete(t),_unregisterHandle?.(`http2:session:${t}`);return}if(e==="sessionError"){let a=qn.get(t);if(!a)return;a.emit("error",yB(r));return}if(e==="sessionLocalSettings"){let a=qn.get(t);if(!a)return;a._applyLocalSettings(NA(r));return}if(e==="sessionRemoteSettings"){let a=qn.get(t);if(!a)return;a._applyRemoteSettings(NA(r));return}if(e==="sessionSettingsAck"){let a=qn.get(t);if(!a)return;a._ackSettings();return}if(e==="sessionGoaway"){let a=qn.get(t);if(!a)return;a.emit("goaway",Number(i??0),Number(o??0),r?Buffer.from(r,"base64"):Buffer.alloc(0));return}if(e==="clientPushStream"){let a=qn.get(t);if(!a)return;let A=Number(r),f=new eW(A,a,!0);In.set(A,f),a.emit("stream",f,NA(s),Number(o??0)),ru(A);return}if(e==="clientPushHeaders"){Bl(t,{kind:"push",data:r,extraNumber:Number(i??0)}),ru(t);return}if(e==="clientResponseHeaders"){Bl(t,{kind:"responseHeaders",data:r}),ru(t);return}if(e==="clientData"){Bl(t,{kind:"data",data:r}),ru(t);return}if(e==="clientEnd"){Bl(t,{kind:"end"}),ru(t);return}if(e==="clientClose"){Bl(t,{kind:"close",extraNumber:Number(i??0)}),ru(t);return}if(e==="clientError"){Bl(t,{kind:"error",data:r}),ru(t);return}if(e==="serverStream"){let a=Io.get(t);if(!a)return;let A=Dg(n),f=Number(i),l=AG(f,A),p=Number(r),I=NA(s),S=Number(o??0),_=new ASe(p,l,I);if(In.set(p,_),a.emit("stream",_,I,S),a.listenerCount("request")>0){let N=new rW(I,l.socket,_),O=new nW(_);_.on("data",x=>{N._emitData(x)}),_.on("end",()=>{N._emitEnd()}),_.on("error",x=>{N._emitError(x)}),_.on("drain",()=>{O.emit("drain")}),a.emit("request",N,O)}return}if(e==="serverStreamData"){let a=In.get(t);if(!a||typeof a._emitData!="function")return;a._emitData(r);return}if(e==="serverStreamEnd"){let a=In.get(t);if(!a||typeof a._emitEnd!="function")return;a._emitEnd();return}if(e==="serverStreamDrain"){let a=In.get(t);if(!a||typeof a._emitDrain!="function")return;a._emitDrain();return}if(e==="serverStreamError"){let a=In.get(t);if(!a||typeof a._shouldSuppressHostError=="function"&&a._shouldSuppressHostError())return;a.emit("error",yB(r));return}if(e==="serverStreamClose"){let a=In.get(t);if(!a||typeof a._emitClose!="function")return;a._emitClose(Number(i??0)),In.delete(t);return}if(e==="serverSession"){let a=Io.get(t);if(!a)return;let A=Number(i),f=AG(A,Dg(r));a.emit("session",f);return}if(e==="serverTimeout"){Io.get(t)?.emit("timeout");return}if(e==="serverConnection"){Io.get(t)?.emit("connection",new O1(oG(r)??void 0));return}if(e==="serverSecureConnection"){Io.get(t)?.emit("secureConnection",new O1(oG(r)??void 0));return}if(e==="serverClose"){let a=Io.get(t);if(!a)return;a.listening=!1,a._release(),a.emit("close"),Io.delete(t),_unregisterHandle?.(`http2:server:${t}`);return}e==="serverCompatRequest"&&(P1.set(Number(i),{serverId:t,requestJson:r??"{}"}),GSe(t,Number(i)))}function lSe(){if(jv)return;jv=!0,queueMicrotask(()=>{for(jv=!1;L1.length>0;){let t=L1.shift();t&&sW(t.kind,t.id,t.data,t.extra,t.extraNumber,t.extraHeaders,t.flags)}})}function hSe(e,t){if(!t||typeof t!="object")return;let r=t;if(typeof r.kind!="string"||typeof r.id!="number")return;process.env.SECURE_EXEC_DEBUG_HTTP2_BRIDGE==="1"&&console.error("[secure-exec http2 isolate dispatch]",r.kind,r.id);let n=r.kind,i=r.id,s=typeof r.data=="string"?r.data:void 0,o=typeof r.extra=="string"?r.extra:void 0,a=typeof r.extraNumber=="string"||typeof r.extraNumber=="number"?r.extraNumber:void 0,A=typeof r.extraHeaders=="string"?r.extraHeaders:void 0,f=typeof r.flags=="string"||typeof r.flags=="number"?r.flags:void 0;L1.push({kind:n,id:i,data:s,extra:o,extraNumber:a,extraHeaders:A,flags:f}),lSe()}var K2={Http2ServerRequest:rW,Http2ServerResponse:nW,Http2Stream:KY,NghttpError:jY,nghttp2ErrorString:zY,constants:{HTTP2_HEADER_METHOD:":method",HTTP2_HEADER_PATH:":path",HTTP2_HEADER_SCHEME:":scheme",HTTP2_HEADER_AUTHORITY:":authority",HTTP2_HEADER_STATUS:":status",HTTP2_HEADER_CONTENT_TYPE:"content-type",HTTP2_HEADER_CONTENT_LENGTH:"content-length",HTTP2_HEADER_LAST_MODIFIED:"last-modified",HTTP2_HEADER_ACCEPT:"accept",HTTP2_HEADER_ACCEPT_ENCODING:"accept-encoding",HTTP2_METHOD_GET:"GET",HTTP2_METHOD_POST:"POST",HTTP2_METHOD_PUT:"PUT",HTTP2_METHOD_DELETE:"DELETE",...Qo,DEFAULT_SETTINGS_MAX_HEADER_LIST_SIZE:65535},getDefaultSettings(){return Wi(H1)},connect:uSe,createServer:aG.bind(void 0,!1),createSecureServer:aG.bind(void 0,!0)};function dSe(e,t,r){let n={},i=r;if(typeof t=="function")i=t;else if(typeof t=="number")n={family:t};else if(t==null)n={};else if(typeof t=="object")n={...t};else throw new TypeError("dns.lookup options must be a number, object, or callback");let s=n.family===4||n.family===6?n.family:void 0;return{callback:i,options:{hostname:String(e),family:s,all:n.all===!0}}}function $m(e){let t=new Error(`${e} is not supported by the secure-exec dns polyfill`);return t.code="ERR_NOT_IMPLEMENTED",t}function gSe(e,t,r,n){let i=r,s=n;typeof r=="function"&&(s=r,i=void 0);let o=String(i??"A").toUpperCase();if(!["A","AAAA","MX","TXT","SRV","CNAME","PTR","NS","SOA","NAPTR","CAA","ANY"].includes(o))throw $m(`${e}(${o})`);return{callback:s,options:{hostname:String(t),rrtype:o}}}function pSe(e){let t=e;return typeof t=="string"&&(t=JSON.parse(t)),t&&typeof t=="object"&&Array.isArray(t.records)?t=t.records:t&&typeof t=="object"&&typeof t.address=="string"&&(t=[t]),Array.isArray(t)?t.filter(r=>r&&typeof r.address=="string").map(r=>({address:r.address,family:r.family===6?6:4})):[]}function ESe(e){let t=e;return typeof t=="string"&&(t=JSON.parse(t)),t}function fG(e){let t=new TypeError(`${e} expects an array of non-empty server strings`);return t.code="ERR_INVALID_ARG_TYPE",t}function oW(e,t){if(!Array.isArray(t))throw fG(e);return t.map(r=>{if(typeof r!="string"||r.length===0)throw fG(e);return r})}function mB(e,t,r){let n=dSe(e,t,r);return _networkDnsLookupRaw.apply(void 0,[n.options],{result:{promise:!0}}).then(i=>{let s=pSe(i);if(typeof n.callback=="function")if(n.options.all)n.callback(null,s);else{let o=s[0]??{address:null,family:n.options.family??0};n.callback(null,o.address,o.family)}return n.options.all?s:s[0]??{address:"",family:n.options.family??0}})}function ke(e,t,r,n){let i=gSe(e,t,r,n);return _networkDnsResolveRaw.apply(void 0,[i.options],{result:{promise:!0}}).then(s=>{let o=ESe(s);return typeof i.callback=="function"&&queueMicrotask(()=>i.callback(null,o)),o}).catch(s=>{throw typeof i.callback=="function"&&queueMicrotask(()=>i.callback(s)),s})}var ySe=class{constructor(){this._servers=[]}cancel(){}getServers(){return this._servers.slice()}lookup(e,t,r){return mB(e,t,r)}resolve(e,t,r){return ke("dns.resolve",e,t,r)}resolve4(e,t){return ke("dns.resolve4",e,"A",t)}resolve6(e,t){return ke("dns.resolve6",e,"AAAA",t)}resolveAny(e,t){return ke("dns.resolveAny",e,"ANY",t)}resolveMx(e,t){return ke("dns.resolveMx",e,"MX",t)}resolveTxt(e,t){return ke("dns.resolveTxt",e,"TXT",t)}resolveSrv(e,t){return ke("dns.resolveSrv",e,"SRV",t)}resolveCname(e,t){return ke("dns.resolveCname",e,"CNAME",t)}resolvePtr(e,t){return ke("dns.resolvePtr",e,"PTR",t)}resolveNs(e,t){return ke("dns.resolveNs",e,"NS",t)}resolveSoa(e,t){return ke("dns.resolveSoa",e,"SOA",t)}resolveNaptr(e,t){return ke("dns.resolveNaptr",e,"NAPTR",t)}resolveCaa(e,t){return ke("dns.resolveCaa",e,"CAA",t)}setServers(e){this._servers=oW("dns.Resolver.setServers",e)}},mSe=class{constructor(){this._servers=[]}cancel(){}getServers(){return this._servers.slice()}lookup(e,t){return mB(e,t)}resolve(e,t){return ke("dns.resolve",e,t)}resolve4(e){return ke("dns.resolve4",e,"A")}resolve6(e){return ke("dns.resolve6",e,"AAAA")}resolveAny(e){return ke("dns.resolveAny",e,"ANY")}resolveMx(e){return ke("dns.resolveMx",e,"MX")}resolveTxt(e){return ke("dns.resolveTxt",e,"TXT")}resolveSrv(e){return ke("dns.resolveSrv",e,"SRV")}resolveCname(e){return ke("dns.resolveCname",e,"CNAME")}resolvePtr(e){return ke("dns.resolvePtr",e,"PTR")}resolveNs(e){return ke("dns.resolveNs",e,"NS")}resolveSoa(e){return ke("dns.resolveSoa",e,"SOA")}resolveNaptr(e){return ke("dns.resolveNaptr",e,"NAPTR")}resolveCaa(e){return ke("dns.resolveCaa",e,"CAA")}setServers(e){this._servers=oW("dns.promises.Resolver.setServers",e)}},X2={lookup(e,t,r){mB(e,t,r).catch(n=>{(typeof t=="function"?t:r)?.(n)})},resolve(e,t,r){ke("dns.resolve",e,t,r).catch(()=>{})},resolve4(e,t){ke("dns.resolve4",e,"A",t).catch(()=>{})},resolve6(e,t){ke("dns.resolve6",e,"AAAA",t).catch(()=>{})},resolveAny(e,t){ke("dns.resolveAny",e,"ANY",t).catch(()=>{})},resolveMx(e,t){ke("dns.resolveMx",e,"MX",t).catch(()=>{})},resolveTxt(e,t){ke("dns.resolveTxt",e,"TXT",t).catch(()=>{})},resolveSrv(e,t){ke("dns.resolveSrv",e,"SRV",t).catch(()=>{})},resolveCname(e,t){ke("dns.resolveCname",e,"CNAME",t).catch(()=>{})},resolvePtr(e,t){ke("dns.resolvePtr",e,"PTR",t).catch(()=>{})},resolveNs(e,t){ke("dns.resolveNs",e,"NS",t).catch(()=>{})},resolveSoa(e,t){ke("dns.resolveSoa",e,"SOA",t).catch(()=>{})},resolveNaptr(e,t){ke("dns.resolveNaptr",e,"NAPTR",t).catch(()=>{})},resolveCaa(e,t){ke("dns.resolveCaa",e,"CAA",t).catch(()=>{})},promises:{Resolver:mSe,lookup(e,t){return mB(e,t)},resolve(e,t){return ke("dns.resolve",e,t||"A")},resolve4(e){return ke("dns.resolve4",e,"A")},resolve6(e){return ke("dns.resolve6",e,"AAAA")},resolveAny(e){return ke("dns.resolveAny",e,"ANY")},resolveMx(e){return ke("dns.resolveMx",e,"MX")},resolveTxt(e){return ke("dns.resolveTxt",e,"TXT")},resolveSrv(e){return ke("dns.resolveSrv",e,"SRV")},resolveCname(e){return ke("dns.resolveCname",e,"CNAME")},resolvePtr(e){return ke("dns.resolvePtr",e,"PTR")},resolveNs(e){return ke("dns.resolveNs",e,"NS")},resolveSoa(e){return ke("dns.resolveSoa",e,"SOA")},resolveNaptr(e){return ke("dns.resolveNaptr",e,"NAPTR")},resolveCaa(e){return ke("dns.resolveCaa",e,"CAA")}},Resolver:ySe,getServers(){return[]},lookupService(){throw $m("dns.lookupService")},reverse(){throw $m("dns.reverse")},setServers(){throw $m("dns.setServers")}};et("_http2Module",K2);function q1(e){return{__secureExecTlsContext:Gl(e),context:{}}}function BSe(e,t){if(!(e instanceof Do))throw new TypeError("tls.TLSSocket requires a net.Socket instance");let r=t&&typeof t=="object"?{...t}:{};Object.setPrototypeOf(e,aW.prototype);let n=Gl(r,{isServer:r.isServer===!0,servername:r.servername??e.servername??e.remoteAddress??"127.0.0.1"});return n.isServer||(e.servername=n.servername),e._connected?e._upgradeTls(n):e.once("connect",()=>{e._upgradeTls(n)}),e}var aW=class extends Do{constructor(e,t){if(e instanceof Do)return super({allowHalfOpen:e.allowHalfOpen===!0}),BSe(e,t);super(e&&typeof e=="object"?e:t)}};function AW(...e){let t,r,n=[...e],i=typeof n[n.length-1]=="function"?n.pop():void 0;if(n[0]!=null&&typeof n[0]=="object")r={...n[0]},r.socket?t=r.socket:(t=new Do,t.connect({host:r.host??"127.0.0.1",port:r.port}));else{let o={};n.length>0&&(o.port=n.shift()),typeof n[0]=="string"&&(o.host=n.shift()),r={...n[0]!=null&&typeof n[0]=="object"?{...n[0]}:{},...o},t=new Do,t.connect({host:r.host??"127.0.0.1",port:r.port})}i&&t.once("secureConnect",i);let s=Gl(r,{isServer:!1,servername:r.servername??r.host??"127.0.0.1"});return t.servername=s.servername,t._connected?t._upgradeTls(s):t.once("connect",()=>{t._upgradeTls(s)}),t}function ISe(e,t){if(!e.startsWith("*."))return e===t;let r=e.slice(1);if(!t.endsWith(r))return!1;let n=t.slice(0,-r.length);return n.length>0&&!n.includes(".")}var fW=class{constructor(e,t){y(this,"_listeners",{});y(this,"_onceListeners",{});y(this,"_server");y(this,"_tlsOptions");y(this,"_sniCallback");y(this,"_alpnCallback");y(this,"_contexts",[]);let r=typeof e=="function"||e===void 0?void 0:e,n=typeof e=="function"?e:t;if(r?.ALPNCallback&&r?.ALPNProtocols){let i=new Error("The ALPNCallback and ALPNProtocols TLS options are mutually exclusive");throw i.code="ERR_TLS_ALPN_CALLBACK_WITH_PROTOCOLS",i}this._tlsOptions=Gl(r,{isServer:!0}),this._sniCallback=r?.SNICallback,this._alpnCallback=r?.ALPNCallback,this._server=new Pg(r?{allowHalfOpen:r.allowHalfOpen,keepAlive:r.keepAlive,keepAliveInitialDelay:r.keepAliveInitialDelay}:void 0,(i=>{let s=i;s.server=this,this._handleSecureSocket(s)})),n&&this.on("secureConnection",n),this._server.on("listening",(...i)=>this._emit("listening",...i)),this._server.on("close",(...i)=>this._emit("close",...i)),this._server.on("error",(...i)=>this._emit("error",...i)),this._server.on("drop",(...i)=>this._emit("drop",...i))}listen(e,t,r,n){return this._server.listen(e,t,r,n),this}close(e){return e&&this.once("close",e),this._server.close(),this}address(){return this._server.address()}getConnections(e){return this._server.getConnections(e),this}ref(){return this._server.ref(),this}unref(){return this._server.unref(),this}addContext(e,t){let r=N1(t)?t:q1(t&&typeof t=="object"?t:void 0);return this._contexts.push({servername:e,context:r}),this}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),this}emit(e,...t){return this._emit(e,...t)}_emit(e,...t){let r=!1,n=this._listeners[e];if(n)for(let s of[...n])s.call(this,...t),r=!0;let i=this._onceListeners[e];if(i){this._onceListeners[e]=[];for(let s of[...i])s.call(this,...t),r=!0}return r}async _handleSecureSocket(e){let t=this._getClientHello(e),r=t?.servername;r&&(e.servername=r);try{let n=await this._resolveTlsOptions(r,t?.ALPNProtocols??[]);if(!n){this._emitTlsClientError(e,"Invalid SNI context");return}e._upgradeTls(n),e.once("secure",()=>{this._emit("secureConnection",e),this._emit("connection",e)}),e.on("error",i=>{this._emit("tlsClientError",i,e)})}catch(n){let i=n instanceof Error?n:new Error(String(n));this._emitTlsClientError(e,i.message,i),i.uncaught&&process.emit?.("uncaughtException",i,"uncaughtException")}}_getClientHello(e){if(typeof _netSocketGetTlsClientHelloRaw>"u")return null;let t=e._socketId;return typeof t!="number"||t===0?null:Rwe(_netSocketGetTlsClientHelloRaw.applySync(void 0,[t]))}async _resolveTlsOptions(e,t){let r=null,n=!1;if(e&&this._sniCallback){if(r=await new Promise((s,o)=>{this._sniCallback?.(e,(a,A)=>{if(a){o(a);return}if(A==null){s(null);return}if(N1(A)){s(A);return}if(A&&typeof A=="object"&&Object.keys(A).length>0){s(q1(A));return}n=!0,s(null)})}),n)return null}else e&&(r=this._findContext(e));let i={...this._tlsOptions,...r?.__secureExecTlsContext??{},isServer:!0};if(this._alpnCallback){let s=this._alpnCallback({servername:e,protocols:t});if(s===void 0){let o=new Error("ALPN callback rejected the client protocol list");throw o.code="ERR_SSL_TLSV1_ALERT_NO_APPLICATION_PROTOCOL",o}if(!t.includes(s)){let o=new Error("The ALPNCallback callback returned an invalid protocol");throw o.code="ERR_TLS_ALPN_CALLBACK_INVALID_RESULT",o.uncaught=!0,o}i.ALPNProtocols=[s]}return i}_findContext(e){for(let t=this._contexts.length-1;t>=0;t-=1){let r=this._contexts[t];if(ISe(r.servername,e))return r.context}return null}_emitTlsClientError(e,t,r){let n=r??new Error(t);e.servername??(e.servername=this._getClientHello(e)?.servername),this._emit("tlsClientError",n,e),e.destroy()}};function bSe(e,t){return new fW(e,t)}var uW={connect:AW,TLSSocket:aW,Server:bSe,createServer(e,t){return new fW(e,t)},createSecureContext(e){return q1(e)},getCiphers(){if(typeof _tlsGetCiphersRaw>"u")throw new Error("tls.getCiphers is not supported in sandbox");try{return JSON.parse(_tlsGetCiphersRaw.applySync(void 0,[]))}catch{return[]}},DEFAULT_MIN_VERSION:"TLSv1.2",DEFAULT_MAX_VERSION:"TLSv1.3"};et("_netModule",JY);function Da(e="socket hang up"){let t=new Error(e);return t.code="ECONNRESET",t}function uG(){let e=new Error("The operation was aborted");return e.name="AbortError",e.code="ABORT_ERR",e}var cu=class{constructor(e){y(this,"headers");y(this,"rawHeaders");y(this,"trailers");y(this,"rawTrailers");y(this,"httpVersion");y(this,"httpVersionMajor");y(this,"httpVersionMinor");y(this,"method");y(this,"url");y(this,"statusCode");y(this,"statusMessage");y(this,"_body");y(this,"_isBinary");y(this,"_listeners");y(this,"complete");y(this,"aborted");y(this,"socket");y(this,"_bodyConsumed");y(this,"_ended");y(this,"_flowing");y(this,"readable");y(this,"readableEnded");y(this,"readableFlowing");y(this,"destroyed");y(this,"_encoding");y(this,"_closeEmitted");let t={};if(Array.isArray(e?.headers)?e.headers.forEach(([i,s])=>{vo(t,i.toLowerCase(),s)}):e?.headers&&Object.entries(e.headers).forEach(([i,s])=>{t[i]=Array.isArray(s)?[...s]:s}),this.rawHeaders=Array.isArray(e?.rawHeaders)?[...e.rawHeaders]:[],this.rawHeaders.length>0){this.headers={};for(let i=0;i<this.rawHeaders.length;i+=2){let s=this.rawHeaders[i],o=this.rawHeaders[i+1];s!==void 0&&o!==void 0&&vo(this.headers,s.toLowerCase(),o)}}else this.headers=t;this.rawHeaders.length===0&&this.headers&&typeof this.headers=="object"&&Object.entries(this.headers).forEach(([i,s])=>{if(Array.isArray(s)){s.forEach(o=>{this.rawHeaders.push(i,o)});return}this.rawHeaders.push(i,s)}),e?.trailers&&typeof e.trailers=="object"?(this.trailers=e.trailers,this.rawTrailers=[],Object.entries(e.trailers).forEach(([i,s])=>{this.rawTrailers.push(i,s)})):(this.trailers={},this.rawTrailers=[]),this.httpVersion="1.1",this.httpVersionMajor=1,this.httpVersionMinor=1,this.method=null,this.url=e?.url||"",this.statusCode=e?.status,this.statusMessage=e?.statusText;let r=this.headers["x-body-encoding"];(e?.bodyEncoding||(Array.isArray(r)?r[0]:r))==="base64"&&e?.body&&typeof Buffer<"u"?(this._body=Buffer.from(e.body,"base64").toString("binary"),this._isBinary=!0):(this._body=e?.body||"",this._isBinary=!1),this._listeners={},this.complete=!1,this.aborted=!1,this.socket=null,this._bodyConsumed=!1,this._ended=!1,this._flowing=!1,this.readable=!0,this.readableEnded=!1,this.readableFlowing=null,this.destroyed=!1,this._closeEmitted=!1}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),e==="data"&&!this._bodyConsumed&&(this._flowing=!0,this.readableFlowing=!0,Promise.resolve().then(()=>{if(!this._bodyConsumed){if(this._bodyConsumed=!0,this._body&&this._body.length>0){let r;typeof Buffer<"u"?r=this._isBinary?Buffer.from(this._body,"binary"):Buffer.from(this._body):r=this._body,this.emit("data",r)}Promise.resolve().then(()=>{this._ended||(this._ended=!0,this.complete=!0,this.readable=!1,this.readableEnded=!0,this.emit("end"))})}})),e==="end"&&this._bodyConsumed&&!this._ended&&Promise.resolve().then(()=>{this._ended||(this._ended=!0,this.complete=!0,this.readable=!1,this.readableEnded=!0,t())}),this}once(e,t){let r=(...n)=>{this.off(e,r),t(...n)};return r._originalListener=t,this.on(e,r)}off(e,t){if(this._listeners[e]){let r=this._listeners[e].findIndex(n=>n===t||n._originalListener===t);r!==-1&&this._listeners[e].splice(r,1)}return this}removeListener(e,t){return this.off(e,t)}removeAllListeners(e){return e?delete this._listeners[e]:this._listeners={},this}emit(e,...t){return Vl(this,this._listeners[e],t)}setEncoding(e){return this._encoding=e,this}read(e){if(this._bodyConsumed)return null;this._bodyConsumed=!0;let t;return typeof Buffer<"u"?t=this._isBinary?Buffer.from(this._body,"binary"):Buffer.from(this._body):t=this._body,Promise.resolve().then(()=>{this._ended||(this._ended=!0,this.complete=!0,this.readable=!1,this.readableEnded=!0,this.emit("end"))}),t}pipe(e){let t;return typeof Buffer<"u"?t=this._isBinary?Buffer.from(this._body||"","binary"):Buffer.from(this._body||""):t=this._body||"",typeof e.write=="function"&&t.length>0&&e.write(t),typeof e.end=="function"&&Promise.resolve().then(()=>e.end()),this._bodyConsumed=!0,this._ended=!0,this.complete=!0,this.readable=!1,this.readableEnded=!0,e}pause(){return this._flowing=!1,this.readableFlowing=!1,this}resume(){return this._flowing=!0,this.readableFlowing=!0,this._bodyConsumed||Promise.resolve().then(()=>{if(!this._bodyConsumed){if(this._bodyConsumed=!0,this._body){let e;typeof Buffer<"u"?e=this._isBinary?Buffer.from(this._body,"binary"):Buffer.from(this._body):e=this._body,this.emit("data",e)}Promise.resolve().then(()=>{this._ended||(this._ended=!0,this.complete=!0,this.readable=!1,this.readableEnded=!0,this.emit("end"))})}}),this}unpipe(e){return this}destroy(e){return this.destroyed=!0,this.readable=!1,e&&this.emit("error",e),this._emitClose(),this}_abort(e=Da("aborted")){this.aborted||(this.aborted=!0,this.complete=!1,this.destroyed=!0,this.readable=!1,this.readableEnded=!0,this.emit("aborted"),e&&this.emit("error",e),this._emitClose())}_emitClose(){this._closeEmitted||(this._closeEmitted=!0,this.emit("close"))}[Symbol.asyncIterator](){let e=this,t=!1,r=!1;return{async next(){if(r||e._ended)return{done:!0,value:void 0};if(!t&&!e._bodyConsumed){t=!0,e._bodyConsumed=!0;let n;return typeof Buffer<"u"?n=e._isBinary?Buffer.from(e._body||"","binary"):Buffer.from(e._body||""):n=e._body||"",{done:!1,value:n}}return r=!0,e._ended=!0,e.complete=!0,e.readable=!1,e.readableEnded=!0,{done:!0,value:void 0}},return(){return r=!0,Promise.resolve({done:!0,value:void 0})},throw(n){return r=!0,e.emit("error",n),Promise.resolve({done:!0,value:void 0})}}}},Tg=class{constructor(e,t){y(this,"_options");y(this,"_callback");y(this,"_listeners",{});y(this,"_headers",{});y(this,"_rawHeaderNames",new Map);y(this,"_body","");y(this,"_bodyBytes",0);y(this,"_ended",!1);y(this,"_agent");y(this,"_hostKey");y(this,"_socketEndListener",null);y(this,"_socketCloseListener",null);y(this,"_loopbackAbort");y(this,"_response",null);y(this,"_closeEmitted",!1);y(this,"_abortEmitted",!1);y(this,"_signalAbortHandler");y(this,"_signalPollTimer",null);y(this,"_skipExecute",!1);y(this,"_destroyError");y(this,"_errorEmitted",!1);y(this,"socket");y(this,"finished",!1);y(this,"aborted",!1);y(this,"destroyed",!1);y(this,"path");y(this,"method");y(this,"reusedSocket",!1);y(this,"timeoutCb");let r=RSe(e.method);this._options={...e,method:r,path:DSe(e.path)},this._callback=t,this._validateTimeoutOption(),this._setOutgoingHeaders(e.headers),this._headers.host||this._setHeaderValue("Host",TSe(this._options)),this.path=String(this._options.path||"/"),this.method=String(this._options.method||"GET").toUpperCase();let n=this._options.agent;n===!1?this._agent=null:n instanceof BB?this._agent=n:this._options._agentOSDefaultAgent instanceof BB?this._agent=this._options._agentOSDefaultAgent:this._agent=null,this._hostKey=this._agent?this._agent._getHostKey(this._options):"",this._bindAbortSignal(),typeof this._options.timeout=="number"&&this.setTimeout(this._options.timeout),Promise.resolve().then(()=>this._execute())}_assignSocket(e,t){this.socket=e,this.reusedSocket=t;let r=e;if(r._agentPermanentListenersInstalled||(r._agentPermanentListenersInstalled=!0,e.on("error",()=>{}),e.on("end",()=>{})),this._socketEndListener=()=>{},e.on("end",this._socketEndListener),this._socketCloseListener=()=>{this.destroyed=!0,this._clearTimeout(),this._emitClose()},e.on("close",this._socketCloseListener),this._applyTimeoutToSocket(e),this._emit("socket",e),this.destroyed){this._destroyError&&!this._errorEmitted&&(this._errorEmitted=!0,queueMicrotask(()=>{this._emit("error",this._destroyError)})),e.destroy();return}this._dispatchWithSocket(e)}_handleSocketError(e){this._emit("error",e)}_finalizeSocket(e,t){this._socketEndListener&&(e.off?.("end",this._socketEndListener),e.removeListener?.("end",this._socketEndListener),this._socketEndListener=null),this._socketCloseListener&&(e.off?.("close",this._socketCloseListener),e.removeListener?.("close",this._socketCloseListener),this._socketCloseListener=null),this._agent?this._agent._releaseSocket(this._hostKey,e,this._options,t):e.destroyed||e.destroy()}async _dispatchWithSocket(e){try{let t=NSe(this._options.headers),r=String(this._options.method||"GET").toUpperCase();e instanceof Do||typeof e?._socketId=="string"&&e._socketId.length>0||typeof e?._socketId=="number"&&e._socketId>0||e?._loopbackServer||MSe(r,t)||this._options.socketPath||this._agent?.keepAlive===!0?await this._dispatchRawSocketRequest(e,r,t):await this._dispatchUndiciRequest(e,r)}catch(t){this._clearTimeout(),this._emit("error",t),this._finalizeSocket(e,!1)}}async _dispatchUndiciRequest(e,t){await lG(e,this._options.protocol||"http:");let r=USe(e,this._options),n=this._body?Buffer.from(this._body):Buffer.alloc(0),i=hG(this._headers,this._rawHeaderNames);n.length>0&&!this._headers["content-length"]&&!this._headers["transfer-encoding"]&&i.push(["Content-Length",String(n.length)]);let s=await new Promise((A,f)=>{try{PY.call(r,{path:this._options.path||"/",method:t,headers:xSe(i),body:n.length>0?n:null,signal:this._options.signal,responseHeaders:"raw"},(l,p)=>{if(l){f(l);return}A(p)})}catch(l){f(l)}}),o=await PSe(s?.body);await new Promise(A=>{queueMicrotask(A)}),this.finished=!0,this._clearTimeout();let a=new cu({status:s?.statusCode,statusText:s?.statusText,headers:Array.isArray(s?.headers)?s.headers:[],rawHeaders:Array.isArray(s?.headers)?s.headers:[],trailers:s?.trailers&&typeof s.trailers=="object"?s.trailers:{},body:o.length>0?o.toString("base64"):"",bodyEncoding:"base64",url:this._buildUrl()});this._response=a,a.socket=e,a.once("end",()=>{process.nextTick(()=>{this._finalizeSocket(e,this._agent?.keepAlive===!0&&!this.aborted)})}),this._callback&&this._callback(a),this._emit("response",a),!this._callback&&this._listenerCount("response")===0&&queueMicrotask(()=>{a.resume()})}async _dispatchRawSocketRequest(e,t,r){let n=this._options.protocol||"http:";await lG(e,n);let i=this._body?Buffer.from(this._body):Buffer.alloc(0),s=hG(this._headers,this._rawHeaderNames);i.length>0&&!r["content-length"]&&!r["transfer-encoding"]&&s.push(["Content-Length",String(i.length)]);let o=LSe(t,this._options.path||"/",s,i),a=typeof this._options.timeout=="number"&&this._options.timeout>0?this._options.timeout:3e4,A=HSe(e,t,a);e.write(o);let f=await A;if(this.finished=!0,this._clearTimeout(),f.status===101){let p=new cu({status:f.status,statusText:f.statusText,headers:f.headers,rawHeaders:f.rawHeaders,body:"",bodyEncoding:"base64",url:this._buildUrl()});this._response=p,p.socket=e;let I=f.head??Buffer.alloc(0);if(this._listenerCount("upgrade")===0){e.destroy();return}this._emit("upgrade",p,e,I);return}if(t==="CONNECT"){let p=new cu({status:f.status,statusText:f.statusText,headers:f.headers,rawHeaders:f.rawHeaders,body:"",bodyEncoding:"base64",url:this._buildUrl()});this._response=p,p.socket=e;let I=f.head??Buffer.alloc(0);this._emit("connect",p,e,I);return}let l=new cu({status:f.status,statusText:f.statusText,headers:f.headers,rawHeaders:f.rawHeaders,body:f.body&&f.body.length>0?f.body.toString("base64"):"",bodyEncoding:"base64",url:this._buildUrl()});this._response=l,l.socket=e,l.once("end",()=>{process.nextTick(()=>{this._finalizeSocket(e,this._agent?.keepAlive===!0&&!this.aborted)})}),this._callback&&this._callback(l),this._emit("response",l),!this._callback&&this._listenerCount("response")===0&&queueMicrotask(()=>{l.resume()})}_execute(){if(this._skipExecute)return;if(this._agent){this._agent.addRequest(this,this._options);return}let e=r=>{if(!r){this._handleSocketError(new Error("Failed to create socket")),this._emitClose();return}this._assignSocket(r,!1)},t=this._options.createConnection;if(typeof t=="function"){let r=t(this._options,(n,i)=>{e(i)});e(r);return}e(LB(this._options))}_buildUrl(){let e=this._options,t=e.protocol||(e.port===443?"https:":"http:"),r=e.hostname||e.host||"localhost",n=e.port?":"+e.port:"",i=e.path||"/";return t+"//"+r+n+i}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}addListener(e,t){return this.on(e,t)}once(e,t){let r=(...n)=>{this.off(e,r),t(...n)};return r.listener=t,this.on(e,r)}off(e,t){if(this._listeners[e]){let r=this._listeners[e].findIndex(n=>n===t||n.listener===t);r!==-1&&this._listeners[e].splice(r,1)}return this}removeListener(e,t){return this.off(e,t)}getHeader(e){if(typeof e!="string")throw lr(`The "name" argument must be of type string. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");return this._headers[e.toLowerCase()]}getHeaders(){let e=Object.create(null);for(let[t,r]of Object.entries(this._headers))e[t]=Array.isArray(r)?[...r]:r;return e}getHeaderNames(){return Object.keys(this._headers)}getRawHeaderNames(){return Object.keys(this._headers).map(e=>this._rawHeaderNames.get(e)||e)}hasHeader(e){if(typeof e!="string")throw lr(`The "name" argument must be of type string. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");return Object.prototype.hasOwnProperty.call(this._headers,e.toLowerCase())}removeHeader(e){if(typeof e!="string")throw lr(`The "name" argument must be of type string. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");let t=e.toLowerCase();delete this._headers[t],this._rawHeaderNames.delete(t),this._options.headers={...this._headers}}_emit(e,...t){Vl(this,this._listeners[e],t)}_listenerCount(e){return this._listeners[e]?.length||0}_setOutgoingHeaders(e){if(this._headers={},this._rawHeaderNames=new Map,!e){this._options.headers={};return}if(Array.isArray(e)){for(let t=0;t<e.length;t+=2){let r=e[t],n=e[t+1];r!==void 0&&n!==void 0&&this._setHeaderValue(String(r),n)}return}Object.entries(e).forEach(([t,r])=>{r!==void 0&&this._setHeaderValue(t,r)})}_setHeaderValue(e,t){let r=Gi(e).toLowerCase();Yi(r,t),this._headers[r]=Array.isArray(t)?t.map(n=>String(n)):String(t),this._rawHeaderNames.has(r)||this._rawHeaderNames.set(r,e),this._options.headers={...this._headers}}write(e){let t=typeof Buffer<"u"?Buffer.byteLength(e):e.length;if(this._bodyBytes+t>Ol)throw new Error("ERR_HTTP_BODY_TOO_LARGE: request body exceeds "+Ol+" byte limit");return this._body+=e,this._bodyBytes+=t,!0}end(e){return e&&this.write(e),this._ended=!0,this}abort(){this.aborted||(this.aborted=!0,this._abortEmitted||(this._abortEmitted=!0,queueMicrotask(()=>{this._emit("abort")})),this._loopbackAbort?.(),this.destroy())}destroy(e){if(this.destroyed)return this;this.destroyed=!0,this._clearTimeout(),this._unbindAbortSignal(),this._loopbackAbort?.(),this._loopbackAbort=void 0,!this.socket&&e&&e.code==="ABORT_ERR"&&(this._skipExecute=!0);let t=this._response!=null,r=e??(!this.aborted&&!t?Da():void 0);return this._destroyError=r,this._response&&!this._response.complete&&!this._response.aborted&&this._response._abort(r??Da("aborted")),this.socket&&!this.socket.destroyed?(r&&!this._errorEmitted&&(this._errorEmitted=!0,queueMicrotask(()=>{this._emit("error",r)})),this.socket.destroy(r)):(r&&(this._errorEmitted=!0,queueMicrotask(()=>{this._emit("error",r)})),queueMicrotask(()=>{this._emitClose()})),this}setTimeout(e,t){if(t&&this.once("timeout",t),this.timeoutCb=()=>{this._emit("timeout")},this._clearTimeout(),e===0)return this;if(!Number.isFinite(e)||e<0)throw new TypeError(`The "timeout" argument must be of type number. Received ${String(e)}`);return this._options.timeout=e,this.socket&&this._applyTimeoutToSocket(this.socket),this}setNoDelay(){return this}setSocketKeepAlive(){return this}flushHeaders(){}_emitClose(){this._closeEmitted||(this._closeEmitted=!0,this._emit("close"))}_applyTimeoutToSocket(e){let t=this._options.timeout;typeof t!="number"||t===0||(this.timeoutCb||(this.timeoutCb=()=>{this._emit("timeout")}),e.off?.("timeout",this.timeoutCb),e.removeListener?.("timeout",this.timeoutCb),e.setTimeout?.(t,this.timeoutCb))}_validateTimeoutOption(){let e=this._options.timeout;if(e!==void 0&&typeof e!="number"){let t=e===null?"null":typeof e=="string"?`type string ('${e}')`:`type ${typeof e} (${JSON.stringify(e)})`,r=new TypeError(`The "timeout" argument must be of type number. Received ${t}`);throw r.code="ERR_INVALID_ARG_TYPE",r}}_bindAbortSignal(){let e=this._options.signal;if(!e)return;if(this._signalAbortHandler=()=>{this.destroy(uG())},e.aborted){this.destroyed=!0,this._skipExecute=!0,queueMicrotask(()=>{this._emit("error",uG()),this._emitClose()});return}if(typeof e.addEventListener=="function"){e.addEventListener("abort",this._signalAbortHandler,{once:!0});return}let t=e;t.__secureExecPrevOnAbort__=t.onabort??null,t.onabort=(r=>{t.__secureExecPrevOnAbort__?.call(e,r),this._signalAbortHandler?.()}),this._startAbortSignalPoll(e)}_unbindAbortSignal(){let e=this._options.signal;if(!e||!this._signalAbortHandler)return;if(this._signalPollTimer&&(clearTimeout(this._signalPollTimer),this._signalPollTimer=null),typeof e.removeEventListener=="function"){e.removeEventListener("abort",this._signalAbortHandler),this._signalAbortHandler=void 0;return}let t=e;(t.onabort===this._signalAbortHandler||t.__secureExecPrevOnAbort__!==void 0)&&(t.onabort=t.__secureExecPrevOnAbort__??null),delete t.__secureExecPrevOnAbort__,this._signalAbortHandler=void 0}_startAbortSignalPoll(e){let t=()=>{if(this.destroyed){this._signalPollTimer=null;return}if(e.aborted){this._signalPollTimer=null,this._signalAbortHandler?.();return}this._signalPollTimer=setTimeout(t,5)};this._signalPollTimer||(this._signalPollTimer=setTimeout(t,5))}_clearTimeout(){this.socket&&this.timeoutCb&&(this.socket.off?.("timeout",this.timeoutCb),this.socket.removeListener?.("timeout",this.timeoutCb)),this.socket?.setTimeout&&this.socket.setTimeout(0)}};var CSe=class{constructor(e){y(this,"remoteAddress");y(this,"remotePort");y(this,"localAddress","127.0.0.1");y(this,"localPort",0);y(this,"connecting",!1);y(this,"destroyed",!1);y(this,"writable",!0);y(this,"readable",!0);y(this,"readyState","open");y(this,"bytesWritten",0);y(this,"_listeners",{});y(this,"_encoding");y(this,"_peer",null);y(this,"_readableState",{endEmitted:!1,ended:!1});y(this,"_writableState",{finished:!1,errorEmitted:!1});this.remoteAddress=e?.host||"127.0.0.1",this.remotePort=e?.port||80}_attachPeer(e){this._peer=e}setTimeout(e,t){return this}setNoDelay(e){return this}setKeepAlive(e,t){return this}setEncoding(e){return this._encoding=e,this}ref(){return this}unref(){return this}cork(){}uncork(){}pause(){return this}resume(){return this}address(){return{address:this.localAddress,family:"IPv4",port:this.localPort}}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}once(e,t){let r=(...n)=>{this.off(e,r),t.call(this,...n)};return this.on(e,r)}off(e,t){let r=this._listeners[e];if(!r)return this;let n=r.indexOf(t);return n!==-1&&r.splice(n,1),this}removeListener(e,t){return this.off(e,t)}removeAllListeners(e){return e?delete this._listeners[e]:this._listeners={},this}emit(e,...t){let r=this._listeners[e];return Vl(this,r,t)}listenerCount(e){return this._listeners[e]?.length||0}write(e,t,r){if(this.destroyed||!this._peer)return!1;let n=typeof t=="function"?t:r,i=QSe(e);return this.bytesWritten+=i.length,queueMicrotask(()=>{this._peer?._pushData(i)}),n?.(),!0}end(e){return e!==void 0&&this.write(e),this.writable=!1,this._writableState.finished=!0,queueMicrotask(()=>{this._peer?._pushEnd()}),this.emit("finish"),this}destroy(e){return this.destroyed?this:(this.destroyed=!0,this.readable=!1,this.writable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,this._writableState.finished=!0,e&&this.emit("error",e),queueMicrotask(()=>{this._peer?._pushEnd()}),this.emit("close",!1),this)}_pushData(e){!this.readable||this.destroyed||this.emit("data",this._encoding?e.toString(this._encoding):e)}_pushEnd(){this.destroyed||(this.readable=!1,this.writable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,this._writableState.finished=!0,this.emit("end"),this.emit("close",!1))}};function QSe(e){return typeof Buffer<"u"&&Buffer.isBuffer(e)?e:e instanceof Uint8Array?Buffer.from(e):Buffer.from(String(e))}var pu,BB=(pu=class{constructor(t){y(this,"options");y(this,"maxSockets");y(this,"maxTotalSockets");y(this,"maxFreeSockets");y(this,"keepAlive");y(this,"keepAliveMsecs");y(this,"timeout");y(this,"requests");y(this,"sockets");y(this,"freeSockets");y(this,"totalSocketCount");y(this,"_listeners",{});this.options={...t},this._validateSocketCountOption("maxSockets",t?.maxSockets),this._validateSocketCountOption("maxFreeSockets",t?.maxFreeSockets),this._validateSocketCountOption("maxTotalSockets",t?.maxTotalSockets),this.keepAlive=t?.keepAlive??!1,this.keepAliveMsecs=t?.keepAliveMsecs??1e3,this.maxSockets=t?.maxSockets??pu.defaultMaxSockets,this.maxTotalSockets=t?.maxTotalSockets??1/0,this.maxFreeSockets=t?.maxFreeSockets??256,this.timeout=t?.timeout??-1,this.requests={},this.sockets={},this.freeSockets={},this.totalSocketCount=0}_validateSocketCountOption(t,r){if(r!==void 0){if(typeof r!="number"){let n=typeof r=="string"?`type string ('${r}')`:`type ${typeof r} (${JSON.stringify(r)})`,i=new TypeError(`The "${t}" argument must be of type number. Received ${n}`);throw i.code="ERR_INVALID_ARG_TYPE",i}if(Number.isNaN(r)||r<=0){let n=new RangeError(`The value of "${t}" is out of range. It must be > 0. Received ${String(r)}`);throw n.code="ERR_OUT_OF_RANGE",n}}}getName(t){let r=t?.hostname||t?.host||"localhost",n=t?.port??"",i=t?.localAddress??"",s="";return t?.socketPath?s=`:${t.socketPath}`:(t?.family===4||t?.family===6)&&(s=`:${t.family}`),`${r}:${n}:${i}${s}`}_getHostKey(t){return this.getName(t)}on(t,r){return this._listeners[t]||(this._listeners[t]=[]),this._listeners[t].push(r),this}once(t,r){let n=(...i)=>{this.off(t,n),r(...i)};return this.on(t,n)}off(t,r){let n=this._listeners[t];if(!n)return this;let i=n.indexOf(r);return i!==-1&&n.splice(i,1),this}removeListener(t,r){return this.off(t,r)}emit(t,...r){let n=this._listeners[t];return Vl(this,n,r)}createConnection(t,r){let n=typeof t.createConnection=="function"?t.createConnection:typeof this.options.createConnection=="function"?this.options.createConnection:null;return n?n(t,r??(()=>{})):LB(t,r)}addRequest(t,r){let n=this.getName(r),i=this._takeFreeSocket(n);if(i){this._activateSocket(n,i),t._assignSocket(i,!0);return}if(this._canCreateSocket(n)){this._createSocketForRequest(n,t,r);return}this.requests[n]||(this.requests[n]=[]),this.requests[n].push({request:t,options:r})}_releaseSocket(t,r,n,i){let s=this._removeSocket(this.sockets,t,r);if(i&&!r.destroyed){let o=this.freeSockets[t]??(this.freeSockets[t]=[]);o.length<this.maxFreeSockets?(r._freeTimer&&(clearTimeout(r._freeTimer),r._freeTimer=null),o.push(r),this.timeout>0&&(r._freeTimer=setTimeout(()=>{r._freeTimer=null,r.destroy()},this.timeout)),r.emit("free"),this.emit("free",r,n)):(s&&(this.totalSocketCount=Math.max(0,this.totalSocketCount-1)),r.destroy())}else r.destroyed||(s&&(this.totalSocketCount=Math.max(0,this.totalSocketCount-1)),r.destroy());Promise.resolve().then(()=>this._processPendingRequests())}_removeSocketCompletely(t,r){r._freeTimer&&(clearTimeout(r._freeTimer),r._freeTimer=null),(this._removeSocket(this.sockets,t,r)||this._removeSocket(this.freeSockets,t,r))&&(this.totalSocketCount=Math.max(0,this.totalSocketCount-1),Promise.resolve().then(()=>this._processPendingRequests()))}_canCreateSocket(t){return(this.sockets[t]?.length??0)>=this.maxSockets?!1:this.totalSocketCount<this.maxTotalSockets?!0:(this._evictFreeSocket(t),this.totalSocketCount<this.maxTotalSockets)}_takeFreeSocket(t){let r=this.freeSockets[t];for(;r&&r.length>0;){let n=r.shift();if(!n.destroyed)return n._freeTimer&&(clearTimeout(n._freeTimer),n._freeTimer=null),r.length===0&&delete this.freeSockets[t],n;this.totalSocketCount=Math.max(0,this.totalSocketCount-1)}return r&&r.length===0&&delete this.freeSockets[t],null}_activateSocket(t,r){(this.sockets[t]??(this.sockets[t]=[])).push(r)}_createSocketForRequest(t,r,n){let i=!1,s=(a,A)=>{if(!i){if(i=!0,a||!A){r._handleSocketError(a??new Error("Failed to create socket")),this._processPendingRequests();return}if(r.destroyed){this.totalSocketCount+=1,this._activateSocket(t,A),A.once("close",()=>{this._removeSocketCompletely(t,A)}),r._assignSocket(A,!1);return}this.totalSocketCount+=1,this._activateSocket(t,A),A.once("close",()=>{this._removeSocketCompletely(t,A)}),r._assignSocket(A,!1)}},o={...n,keepAlive:this.keepAlive,keepAliveInitialDelay:this.keepAliveMsecs};try{let a=this.createConnection(o,(A,f)=>{s(A,f)});a&&s(null,a)}catch(a){s(a instanceof Error?a:new Error(String(a)))}}_processPendingRequests(){for(let t of Object.keys(this.requests)){let r=this.requests[t];for(;r&&r.length>0;){let n=this._takeFreeSocket(t);if(n){let s=r.shift();if(s.request.destroyed){this._activateSocket(t,n),this._releaseSocket(t,n,s.options,!0);continue}this._activateSocket(t,n),s.request._assignSocket(n,!0);continue}if(!this._canCreateSocket(t))break;let i=r.shift();i.request.destroyed||this._createSocketForRequest(t,i.request,i.options)}(!r||r.length===0)&&delete this.requests[t]}}_removeSocket(t,r,n){let i=t[r];if(!i)return!1;let s=i.indexOf(n);return s===-1?!1:(i.splice(s,1),i.length===0&&delete t[r],!0)}_evictFreeSocket(t){let r=Object.keys(this.freeSockets),n=r.includes(t)?[...r.filter(i=>i!==t),t]:r;for(let i of n){let s=this.freeSockets[i]?.[0];if(s){s.destroy();return}}}destroy(){for(let t of Object.values(this.sockets).flat())t.destroy();for(let t of Object.values(this.freeSockets).flat())t.destroy();this.requests={},this.sockets={},this.freeSockets={},this.totalSocketCount=0}},y(pu,"defaultMaxSockets",1/0),pu);function rr(...e){process.env.SECURE_EXEC_DEBUG_HTTP_BRIDGE==="1"&&console.error("[secure-exec bridge network]",...e)}var wSe=1,Og=new Map,SSe=["ACL","BIND","CHECKOUT","CONNECT","COPY","DELETE","GET","HEAD","LINK","LOCK","M-SEARCH","MERGE","MKACTIVITY","MKCALENDAR","MKCOL","MOVE","NOTIFY","OPTIONS","PATCH","POST","PROPFIND","PROPPATCH","PURGE","PUT","QUERY","REBIND","REPORT","SEARCH","SOURCE","SUBSCRIBE","TRACE","UNBIND","UNLINK","UNLOCK","UNSUBSCRIBE"],_Se=/[^\u0021-\u00ff]/,vSe=new Set(["!","#","$","%","&","'","*","+","-",".","^","_","`","|","~"]);function lr(e,t){let r=new TypeError(e);return r.code=t,r}function IB(e,t){let r=new Error(e);return r.code=t,r}function Yn(e){if(e===null)return"null";if(Array.isArray(e))return"an instance of Array";let t=typeof e;return t==="function"?`function ${typeof e.name=="string"&&e.name.length>0?e.name:"anonymous"}`:t==="object"?`an instance of ${e&&typeof e=="object"&&typeof e.constructor?.name=="string"?e.constructor.name:"Object"}`:t==="string"?`type string ('${String(e)}')`:t==="symbol"?`type symbol (${String(e)})`:`type ${t} (${String(e)})`}function G1(e,t,r){return lr(`The "${e}" property must be of type ${t}. Received ${Yn(r)}`,"ERR_INVALID_ARG_TYPE")}function cW(e){if(e.length===0)return!1;for(let t=0;t<e.length;t+=1){let r=e[t],n=e.charCodeAt(t);if(!(n>=48&&n<=57||n>=65&&n<=90||n>=97&&n<=122)&&!vSe.has(r))return!1}return!0}function lW(e){for(let t=0;t<e.length;t+=1){let r=e.charCodeAt(t);if(r!==9&&(r<32||r===127||r>255))return!0}return!1}function Gi(e,t="Header name"){let r=String(e);if(!cW(r))throw lr(`${t} must be a valid HTTP token [${JSON.stringify(r)}]`,"ERR_INVALID_HTTP_TOKEN");return r}function Yi(e,t){if(t===void 0)throw lr(`Invalid value "undefined" for header "${e}"`,"ERR_HTTP_INVALID_HEADER_VALUE");if(Array.isArray(t)){for(let r of t)Yi(e,r);return}if(lW(String(t)))throw lr(`Invalid character in header content [${JSON.stringify(e)}]`,"ERR_INVALID_CHAR")}function Il(e){return Array.isArray(e)?e.map(t=>String(t)):String(e)}function Qu(e){return Array.isArray(e)?e.join(", "):e}function cG(e){return Array.isArray(e)?[...e]:e}function vo(e,t,r){if(t==="set-cookie"){let i=e[t];i===void 0?e[t]=[r]:Array.isArray(i)?i.push(r):e[t]=[i,r];return}let n=e[t];e[t]=n===void 0?r:`${Qu(n)}, ${r}`}function RSe(e){if(!(e==null||e==="")){if(typeof e!="string")throw G1("options.method","string",e);return Gi(e,"Method")}}function DSe(e){let t=e==null||e===""?"/":String(e);if(_Se.test(t))throw lr("Request path contains unescaped characters","ERR_UNESCAPED_CHARACTERS");return t}function TSe(e){let t=String(e.hostname||e.host||"localhost"),r=e.protocol==="https:"||Number(e.port)===443?443:80,n=e.port!=null?Number(e.port):r;return n===r?t:`${t}:${n}`}function Y1(e){return Array.isArray(e)&&(e.length===0||typeof e[0]=="string")}function NSe(e){if(!e)return{};if(Array.isArray(e)){let r={};for(let n=0;n<e.length;n+=2){let i=e[n],s=e[n+1];if(i!==void 0&&s!==void 0){let o=Gi(i).toLowerCase();Yi(o,s),vo(r,o,String(s))}}return r}let t={};return Object.entries(e).forEach(([r,n])=>{if(n===void 0)return;let i=Gi(r).toLowerCase();if(Yi(i,n),Array.isArray(n)){n.forEach(s=>vo(t,i,String(s)));return}vo(t,i,String(n))}),t}function hW(e){return Qu(e.connection||"").toLowerCase().includes("upgrade")&&!!e.upgrade}function MSe(e,t){return String(e||"GET").toUpperCase()==="CONNECT"?!0:hW(t)}function Z2(e){return e==="https:"?"secureConnect":"connect"}function FSe(e,t){return!e||e.destroyed===!0?!1:t==="https:"?e.encrypted===!0&&e._tlsUpgrading!==!0:e._connected===!0||e._loopbackServer?!0:typeof e._socketId=="number"?!1:e.connecting===!1}function lG(e,t){return FSe(e,t)?Promise.resolve():new Promise((r,n)=>{let i=Z2(t),s=()=>{A(),r()},o=f=>{A(),n(f instanceof Error?f:new Error(String(f)))},a=()=>{A(),n(Da("socket closed before request was ready"))},A=()=>{e.off?.(i,s),e.removeListener?.(i,s),e.off?.("error",o),e.removeListener?.("error",o),e.off?.("close",a),e.removeListener?.("close",a)};e.once(i,s),e.once("error",o),e.once("close",a)})}function kSe(e){let t=e?.protocol==="https:"?"https:":"http:",r=String(e?.hostname||e?.host||"localhost"),n=t==="https:"?443:80,i=Number(e?.port)||n,s=new URL(`${t}//${r}`);return i!==n&&(s.port=String(i)),s.origin}function USe(e,t){if(typeof jq!="function"||typeof PY!="function")throw new Error("Undici request transport is not available");let r=kSe(t);if(e._agentOSUndiciClient&&e._agentOSUndiciOrigin===r&&e._agentOSUndiciClient.destroyed!==!0)return e._agentOSUndiciClient;let n=new jq(r,{pipelining:1,connect(s,o){return o(null,e),e}}),i=()=>{e._agentOSUndiciClient===n&&(e._agentOSUndiciClient=null,e._agentOSUndiciOrigin=null)};return e.once?.("close",i),e._agentOSUndiciClient=n,e._agentOSUndiciOrigin=r,n}function LB(e,t){let r=e?.protocol==="https:"?"https:":"http:",n=String(e?.hostname||e?.host||"localhost"),i=Number(e?.port)||(r==="https:"?443:80),s=r==="https:"?AW({host:n,port:i,servername:e?.servername||n,rejectUnauthorized:e?.rejectUnauthorized,socket:e?.socket}):x1({host:n,port:i,path:e?.socketPath,keepAlive:e?.keepAlive,keepAliveInitialDelay:e?.keepAliveInitialDelay});if(t){let o=Z2(r),a=()=>{f(),t(null,s)},A=l=>{f(),t(l instanceof Error?l:new Error(String(l)))},f=()=>{s.off?.(o,a),s.removeListener?.(o,a),s.off?.("error",A),s.removeListener?.("error",A)};s.once(o,a),s.once("error",A)}return s}function xSe(e){let t=[];for(let[r,n]of e)t.push(r,n);return t}function hG(e,t){let r=[];return Object.entries(e).forEach(([n,i])=>{let s=t.get(n)||n;if(Array.isArray(i)){i.forEach(o=>{r.push([s,String(o)])});return}r.push([s,String(i)])}),r}function LSe(e,t,r,n){let i=[`${e} ${t} HTTP/1.1`];r.forEach(([o,a])=>{i.push(`${o}: ${a}`)}),i.push("","");let s=Buffer.from(i.join(`\r
-`),"latin1");return!n||n.length===0?s:Buffer.concat([s,n])}async function PSe(e){if(!e)return Buffer.alloc(0);let t=[];for await(let r of e)typeof Buffer<"u"&&Buffer.isBuffer(r)?t.push(r):r instanceof Uint8Array?t.push(Buffer.from(r)):t.push(Buffer.from(String(r)));return t.length===0?Buffer.alloc(0):t.length===1?t[0]:Buffer.concat(t)}function OSe(e){let t=e.indexOf(`\r
-\r
-`);if(t===-1)return null;let n=e.subarray(0,t).toString("latin1").split(`\r
-`),i=n.shift()||"",s=/^HTTP\/(\d)\.(\d)\s+(\d{3})(?:\s+(.*))?$/.exec(i);if(!s)throw new Error(`Invalid HTTP response status line: ${i}`);let o={},a=[],A=null;for(let f of n){if(!f)continue;if((f.startsWith(" ")||f.startsWith("	"))&&a.length>=2&&A){let S=f.trim();a[a.length-1]+=` ${S}`,o[A]=Qu(o[A])+` ${S}`;continue}let l=f.indexOf(":");if(l===-1)throw new Error(`Invalid HTTP response header line: ${f}`);let p=f.slice(0,l),I=f.slice(l+1).trim();A=p.toLowerCase(),a.push(p,I),vo(o,A,I)}return{status:Number(s[3]),statusText:s[4]||"",headers:o,rawHeaders:a,head:e.subarray(t+4)}}function HSe(e,t,r){return new Promise((n,i)=>{let s=null,o=Buffer.alloc(0),a=null,A=!1,f=!1,l=!1,p=(X,Z)=>{if(!l){if(l=!0,I(),X){i(X);return}n(Z)}},I=()=>{clearTimeout(Y),e.off?.("data",N),e.removeListener?.("data",N),e.off?.("error",O),e.removeListener?.("error",O),e.off?.("end",x),e.removeListener?.("end",x),e.off?.("close",G),e.removeListener?.("close",G)},S=()=>{if(!s)return!1;if(!W1(s.status,t))return p(null,{...s,body:Buffer.alloc(0)}),!0;if(A){let X=gW(o);return X===null?(p(new Error("Invalid chunked HTTP response body")),!0):X.complete?(p(null,{...s,body:X.body}),!0):!1}return a!==null?o.length<a?!1:(p(null,{...s,body:o.subarray(0,a)}),!0):!1},_=()=>{if(!s||!W1(s.status,t))return;let X=s.headers["transfer-encoding"],Z=s.headers["content-length"];if(X!==void 0){let j=$2(Qu(X)),se=j.filter(H=>H==="chunked").length,ie=se>0,ce=ie&&j[j.length-1]==="chunked";if(!ie||se!==1||!ce||Z!==void 0)throw new Error("Unsupported transfer-encoding in HTTP response");A=!0;return}if(Z!==void 0){let j=dW(Z);if(j===null)throw new Error("Invalid content-length in HTTP response");a=j;return}f=!0},N=X=>{let Z=Buffer.isBuffer(X)?X:Buffer.from(X);if(!s){o=Buffer.concat([o,Z]);try{let j=OSe(o);if(!j)return;s=j,o=Buffer.from(j.head),_(),S()}catch(j){p(j instanceof Error?j:new Error(String(j)))}return}o=Buffer.concat([o,Z]);try{S()}catch(j){p(j instanceof Error?j:new Error(String(j)))}},O=X=>{p(X instanceof Error?X:new Error(String(X)))},x=()=>{if(!s){p(Da("socket ended before receiving HTTP response head"));return}if(f){p(null,{...s,body:o});return}S()||p(Da("socket ended before receiving complete HTTP response body"))},G=()=>{if(!s){p(Da("socket closed before receiving HTTP response head"));return}if(f){p(null,{...s,body:o});return}S()||p(Da("socket closed before receiving complete HTTP response body"))},Y=setTimeout(()=>{p(new Error(`Timed out waiting for HTTP response after ${r}ms`))},r);e.on("data",N),e.once("error",O),e.once("end",x),e.once("close",G)})}function W1(e,t){return!(t==="HEAD"||e>=100&&e<200||e===204||e===304)}function $2(e){return e.split(",").map(t=>t.trim().toLowerCase()).filter(t=>t.length>0)}function dW(e){if(e===void 0)return 0;let t=Array.isArray(e)?e:[e],r=null;for(let n of t){if(!/^\d+$/.test(n))return null;let i=Number(n);if(!Number.isSafeInteger(i)||i<0||r!==null&&r!==i)return null;r=i}return r??0}function gW(e,t=Ol){let r=0,n=0,i=[];for(;;){let s=e.indexOf(`\r
-`,r);if(s===-1)return{complete:!1};let o=e.subarray(r,s).toString("latin1");if(o.length===0||/[\r\n]/.test(o))return null;let[a,A]=o.split(";",2);if(!/^[0-9A-Fa-f]+$/.test(a)||A!==void 0&&/[\r\n]/.test(A))return null;let f=Number.parseInt(a,16);if(!Number.isSafeInteger(f)||f<0||n+f>t)return null;let l=s+2,p=l+f,I=p+2;if(I>e.length)return{complete:!1};if(e[p]!==13||e[p+1]!==10)return null;if(f>0){n+=f,i.push(e.subarray(l,p)),r=I;continue}let S=e.indexOf(`\r
-\r
-`,l);if(S===-1)return{complete:!1};let _=e.subarray(l,S).toString("latin1");if(_.length>0){for(let N of _.split(`\r
-`))if(N.length!==0&&(N.startsWith(" ")||N.startsWith("	")||N.indexOf(":")===-1))return null}return{complete:!0,bytesConsumed:S+4,body:i.length>0?Buffer.concat(i):Buffer.alloc(0)}}}function pW(e,t){let r=0;for(;r+1<e.length&&e[r]===13&&e[r+1]===10;)r+=2;let n=e.indexOf(`\r
-\r
-`,r);if(n===-1)return e.length-r>dG?{kind:"bad-request",closeConnection:!0}:{kind:"incomplete"};if(n-r>dG)return{kind:"bad-request",closeConnection:!0};let i=e.subarray(r,n).toString("latin1"),[s,...o]=i.split(`\r
-`);if(o.length>$Se)return{kind:"bad-request",closeConnection:!0};let a=/^([A-Z]+)\s+(\S+)\s+HTTP\/(1)\.(0|1)$/.exec(s);if(!a)return{kind:"bad-request",closeConnection:!0};let A={},f=[],l=null;try{for(let X of o){if(X.length===0)continue;if(X.startsWith(" ")||X.startsWith("	"))return{kind:"bad-request",closeConnection:!0};let Z=X.indexOf(":");if(Z===-1)return{kind:"bad-request",closeConnection:!0};let j=X.slice(0,Z).trim(),se=X.slice(Z+1).trim(),ie=Gi(j).toLowerCase();Yi(ie,se),vo(A,ie,se),f.push(j,se),l=ie}}catch{return{kind:"bad-request",closeConnection:!0}}let p=a[1],I=a[2],S=Number(a[4]),_=Qu(A.connection||"").toLowerCase(),N=S===0?!_.includes("keep-alive"):_.includes("close");if(hW(A)&&t.listenerCount("upgrade")>0)return{kind:"request",bytesConsumed:e.length,closeConnection:!1,request:{method:p,url:I,headers:A,rawHeaders:f,bodyBase64:n+4<e.length?e.subarray(n+4).toString("base64"):void 0},upgradeHead:n+4<e.length?e.subarray(n+4):Buffer.alloc(0)};let O=A["transfer-encoding"],x=A["content-length"],G=Buffer.alloc(0),Y=n+4;if(O!==void 0){let X=$2(Qu(O)),Z=X.filter(ce=>ce==="chunked").length,j=Z>0,se=j&&X[X.length-1]==="chunked";if(!j||Z!==1||!se||x!==void 0)return{kind:"bad-request",closeConnection:!0};let ie=gW(e.subarray(n+4));if(ie===null)return{kind:"bad-request",closeConnection:!0};if(!ie.complete)return{kind:"incomplete"};G=ie.body,Y=n+4+ie.bytesConsumed}else if(x!==void 0){let X=dW(x);if(X===null||X>Ol)return{kind:"bad-request",closeConnection:!0};let Z=n+4+X;if(Z>e.length)return{kind:"incomplete"};G=e.subarray(n+4,Z),Y=Z}return{kind:"request",bytesConsumed:Y,closeConnection:N,request:{method:p,url:I,headers:A,rawHeaders:f,bodyBase64:G.length>0?G.toString("base64"):void 0}}}function yg(e,t){let r={},n=new Map,i=[];if(Array.isArray(e)&&e.length>0){for(let s=0;s<e.length;s+=2){let o=e[s],a=e[s+1];if(o===void 0||a===void 0)continue;let A=o.toLowerCase();vo(r,A,a),n.has(A)||(n.set(A,o),i.push(A))}return{headers:r,rawNameMap:n,order:i}}if(Array.isArray(t))for(let[s,o]of t){let a=s.toLowerCase();vo(r,a,o),n.has(a)||(n.set(a,s),i.push(a))}return{headers:r,rawNameMap:n,order:i}}function Kv(e,t,r){let n=[],i=new Set;for(let s of r){let o=e[s];if(o===void 0)continue;let a=t.get(s)||s,A=Array.isArray(o)?s==="set-cookie"?o:[o.join(", ")]:[o];for(let f of A)n.push([a,f]);i.add(s)}for(let[s,o]of Object.entries(e)){if(i.has(s))continue;let a=t.get(s)||s,A=Array.isArray(o)?s==="set-cookie"?o:[o.join(", ")]:[o];for(let f of A)n.push([a,f])}return n}function V1(){return Buffer.from(`HTTP/1.1 400 Bad Request\r
-Connection: close\r
-\r
-`,"latin1")}function eR(e,t,r){let n=e.status||200,i=Hg[n]||"OK",{headers:s,rawNameMap:o,order:a}=yg(e.rawHeaders,e.headers),A=yg(e.rawTrailers,e.trailers),f=e.body==null?Buffer.alloc(0):e.bodyEncoding==="base64"?Buffer.from(e.body,"base64"):Buffer.from(e.body,"utf8"),l=W1(n,t.method),I=(s["transfer-encoding"]?$2(Qu(s["transfer-encoding"])):[]).includes("chunked"),S=s["content-length"]!==void 0,_=r||e.connectionEnded===!0||e.connectionReset===!0;l?!I&&!S&&(e.streamed===!0?(s["transfer-encoding"]="chunked",o.set("transfer-encoding","Transfer-Encoding"),a.push("transfer-encoding"),I=!0):(s["content-length"]=String(f.length),o.set("content-length","Content-Length"),a.push("content-length"))):(I&&(_=!0),delete s["content-length"]),_?(s.connection="close",o.has("connection")||(o.set("connection","Connection"),a.push("connection"))):s.connection===void 0&&t.headers.connection!==void 0&&(s.connection="keep-alive",o.set("connection","Connection"),a.push("connection"));let N=[];for(let G of e.informational??[]){let X=Kv(yg(G.rawHeaders,G.headers).headers,yg(G.rawHeaders,G.headers).rawNameMap,yg(G.rawHeaders,G.headers).order).map(([Z,j])=>`${Z}: ${j}\r
-`).join("");N.push(Buffer.from(`HTTP/1.1 ${G.status} ${G.statusText||Hg[G.status]||""}\r
-${X}\r
-`,"latin1"))}let x=Kv(s,o,a).map(([G,Y])=>`${G}: ${Y}\r
-`).join("");if(N.push(Buffer.from(`HTTP/1.1 ${n} ${i}\r
-${x}\r
-`,"latin1")),l)if(I){if(f.length>0&&(N.push(Buffer.from(f.length.toString(16)+`\r
-`,"latin1")),N.push(f),N.push(Buffer.from(`\r
-`,"latin1"))),N.push(Buffer.from(`0\r
-`,"latin1")),Object.keys(A.headers).length>0){let G=Kv(A.headers,A.rawNameMap,A.order);for(let[Y,X]of G)N.push(Buffer.from(`${Y}: ${X}\r
-`,"latin1"))}N.push(Buffer.from(`\r
-`,"latin1"))}else f.length>0&&N.push(f);return{payload:N.length===1?N[0]:Buffer.concat(N),closeConnection:_}}var Hg={100:"Continue",101:"Switching Protocols",102:"Processing",103:"Early Hints",200:"OK",201:"Created",204:"No Content",301:"Moved Permanently",302:"Found",304:"Not Modified",400:"Bad Request",401:"Unauthorized",403:"Forbidden",404:"Not Found",500:"Internal Server Error"};var Du=class{constructor(e){y(this,"headers");y(this,"rawHeaders");y(this,"method");y(this,"url");y(this,"socket");y(this,"connection");y(this,"rawBody");y(this,"destroyed",!1);y(this,"errored");y(this,"readable",!0);y(this,"httpVersion","1.1");y(this,"httpVersionMajor",1);y(this,"httpVersionMinor",1);y(this,"complete",!0);y(this,"aborted",!1);y(this,"_readableState",{flowing:null,length:0,ended:!1,objectMode:!1});y(this,"_listeners",{});this.headers=e.headers||{},this.rawHeaders=e.rawHeaders||[],(!Array.isArray(this.rawHeaders)||this.rawHeaders.length%2!==0)&&(this.rawHeaders=[]),this.method=e.method||"GET",this.url=e.url||"/";let t={encrypted:!1,remoteAddress:"127.0.0.1",remotePort:0,writable:!0,on(){return t},once(){return t},removeListener(){return t},destroy(){},end(){}};this.socket=t,this.connection=t;let r=this.headers.host;typeof r=="string"&&r.includes(",")&&(this.headers.host=r.split(",")[0].trim()),this.headers.host||(this.headers.host="127.0.0.1"),this.rawHeaders.length===0&&Object.entries(this.headers).forEach(([n,i])=>{if(Array.isArray(i)){i.forEach(s=>{this.rawHeaders.push(n,s)});return}this.rawHeaders.push(n,i)}),e.bodyBase64&&typeof Buffer<"u"&&(this.rawBody=Buffer.from(e.bodyBase64,"base64"))}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}once(e,t){let r=(...n)=>{this.off(e,r),t.call(this,...n)};return this.on(e,r)}off(e,t){let r=this._listeners[e];if(!r)return this;let n=r.indexOf(t);return n!==-1&&r.splice(n,1),this}removeListener(e,t){return this.off(e,t)}emit(e,...t){let r=this._listeners[e];return Vl(this,r,t)}unpipe(){return this}pause(){return this}resume(){return this}read(){return null}pipe(e){return e}isPaused(){return!1}setEncoding(){return this}destroy(e){return this.destroyed=!0,this.errored=e,e&&this.emit("error",e),this.emit("close"),this}_abort(){if(this.aborted)return;this.aborted=!0;let e=Da("aborted");this.emit("aborted"),this.emit("error",e),this.emit("close")}},r0=class{constructor(){y(this,"statusCode",200);y(this,"statusMessage","OK");y(this,"headersSent",!1);y(this,"writable",!0);y(this,"writableFinished",!1);y(this,"outputSize",0);y(this,"_headers",new Map);y(this,"_trailers",new Map);y(this,"_chunks",[]);y(this,"_chunksBytes",0);y(this,"_streamed",!1);y(this,"_listeners",{});y(this,"_closedPromise");y(this,"_resolveClosed",null);y(this,"_connectionEnded",!1);y(this,"_connectionReset",!1);y(this,"_rawHeaderNames",new Map);y(this,"_rawTrailerNames",new Map);y(this,"_informational",[]);y(this,"_pendingRawInfoBuffer","");y(this,"_streamSocket",null);y(this,"_streamRequest",null);y(this,"_streamedDirectly",!1);y(this,"_streamCloseConnection",!1);y(this,"_writableState",{length:0,ended:!1,finished:!1,objectMode:!1,corked:0});y(this,"socket",{writable:!0,writableCorked:0,writableHighWaterMark:16*1024,on:()=>this.socket,once:()=>this.socket,removeListener:()=>this.socket,destroy:()=>{this._connectionReset=!0,this._finalize()},end:()=>{this._connectionEnded=!0},cork:()=>{this._writableState.corked+=1,this.socket.writableCorked=this._writableState.corked},uncork:()=>{this._writableState.corked=Math.max(0,this._writableState.corked-1),this.socket.writableCorked=this._writableState.corked},write:(e,t,r)=>this.write(e,t,r)});y(this,"connection",this.socket);this._closedPromise=new Promise(e=>{this._resolveClosed=e})}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}once(e,t){let r=(...n)=>{this.off(e,r),t.call(this,...n)};return this.on(e,r)}off(e,t){let r=this._listeners[e];if(!r)return this;let n=r.indexOf(t);return n!==-1&&r.splice(n,1),this}removeListener(e,t){return this.off(e,t)}emit(e,...t){let r=this._listeners[e];return!r||r.length===0?!1:(r.slice().forEach(n=>n.call(this,...t)),!0)}_emit(e,...t){this.emit(e,...t)}writeHead(e,t){if(e>=100&&e<200&&e!==101){let r=new Map,n=new Map;if(t)if(Y1(t))for(let o=0;o<t.length;o+=2){let a=t[o],A=t[o+1];if(a===void 0||A===void 0)continue;let f=Gi(a).toLowerCase();Yi(f,A),r.set(f,String(A)),n.has(f)||n.set(f,a)}else Array.isArray(t)?t.forEach(([o,a])=>{let A=Gi(o).toLowerCase();Yi(A,a),r.set(A,String(a)),n.has(A)||n.set(A,o)}):Object.entries(t).forEach(([o,a])=>{let A=Gi(o).toLowerCase();Yi(A,a),r.set(A,String(a)),n.has(A)||n.set(A,o)});let i=Array.from(r.entries()).flatMap(([o,a])=>{let A=Il(a);return Array.isArray(A)?A.map(f=>[o,f]):[[o,A]]}),s=Array.from(r.entries()).flatMap(([o,a])=>{let A=n.get(o)||o,f=Il(a);return Array.isArray(f)?f.flatMap(l=>[A,l]):[A,f]});return this._informational.push({status:e,statusText:Hg[e],headers:i,rawHeaders:s}),this}if(this.statusCode=e,t)if(Y1(t))for(let r=0;r<t.length;r+=2){let n=t[r],i=t[r+1];n!==void 0&&i!==void 0&&this.setHeader(n,i)}else Array.isArray(t)?t.forEach(([r,n])=>this.setHeader(r,n)):Object.entries(t).forEach(([r,n])=>this.setHeader(r,n));return this.headersSent=!0,this.outputSize+=64,this}setHeader(e,t){if(this.headersSent)throw IB("Cannot set headers after they are sent to the client","ERR_HTTP_HEADERS_SENT");let r=Gi(e).toLowerCase();Yi(r,t);let n=Array.isArray(t)?Array.from(t):t;return this._headers.set(r,n),this._rawHeaderNames.has(r)||this._rawHeaderNames.set(r,e),this}setHeaders(e){if(this.headersSent)throw IB("Cannot set headers after they are sent to the client","ERR_HTTP_HEADERS_SENT");if(!(e instanceof xA)&&!(e instanceof Map))throw lr(`The "headers" argument must be an instance of Headers or Map. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");if(e instanceof xA){let t=Object.create(null);return e.forEach((r,n)=>{vo(t,n.toLowerCase(),r)}),Object.entries(t).forEach(([r,n])=>{this.setHeader(r,n)}),this}return e.forEach((t,r)=>{this.setHeader(r,t)}),this}getHeader(e){if(typeof e!="string")throw lr(`The "name" argument must be of type string. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");let t=this._headers.get(e.toLowerCase());return t===void 0?void 0:cG(t)}hasHeader(e){if(typeof e!="string")throw lr(`The "name" argument must be of type string. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");return this._headers.has(e.toLowerCase())}removeHeader(e){if(typeof e!="string")throw lr(`The "name" argument must be of type string. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");let t=e.toLowerCase();this._headers.delete(t),this._rawHeaderNames.delete(t)}_appendChunk(e,t,r){if(e==null)return!0;let n=typeof e=="string"?Buffer.from(e,typeof t=="string"?t:void 0):e;if(this._chunksBytes+n.byteLength>Ol)throw new Error("ERR_HTTP_BODY_TOO_LARGE: response body exceeds "+Ol+" byte limit");return this._chunks.push(n),this._chunksBytes+=n.byteLength,this._streamed||(this._streamed=r),this.headersSent=!0,this.outputSize+=n.byteLength,!0}write(e,t,r){this._appendChunk(e,typeof t=="string"?t:void 0,!0);let n=typeof t=="function"?t:r;return typeof n=="function"&&queueMicrotask(n),!0}end(e,t,r){let n,i;if(typeof e=="function"?i=e:(n=e,i=typeof t=="function"?t:r),this._streamSocket&&this._chunks.length===0&&!this.writableFinished&&!this._streamedDirectly){let s=typeof t=="string"?t:void 0;return this._streamEndBody(n,s),typeof i=="function"&&queueMicrotask(i),this}return n!=null&&(typeof n=="string"&&typeof t=="string"?this._appendChunk(n,t,!1):this._appendChunk(n,void 0,!1)),this._finalize(),typeof i=="function"&&queueMicrotask(i),this}_streamEndBody(e,t){let r=typeof e=="string",n=256*1024,i=0;if(e!=null)if(r)for(let a=0;a<e.length;a+=n)i+=Buffer.byteLength(e.slice(a,a+n),t);else i=e.length;!this._headers.has("content-length")&&!this._headers.has("transfer-encoding")&&(this._headers.set("content-length",String(i)),this._rawHeaderNames.set("content-length","Content-Length")),this.headersSent=!0;let s=this.serialize(),o=eR(s,this._streamRequest,!0);if(this._streamCloseConnection=o.closeConnection,this._streamedDirectly=!0,this.outputSize+=i,!this._streamSocket.destroyed&&o.payload.length>0&&this._streamSocket.write(o.payload),e!=null&&i>0)if(r)for(let a=0;a<e.length&&!this._streamSocket.destroyed;a+=n)this._streamSocket.write(Buffer.from(e.slice(a,a+n),t));else for(let a=0;a<e.length&&!this._streamSocket.destroyed;a+=n)this._streamSocket.write(e.subarray(a,a+n));this._finalize()}getHeaderNames(){return Array.from(this._headers.keys())}getRawHeaderNames(){return Array.from(this._headers.keys()).map(e=>this._rawHeaderNames.get(e)||e)}getHeaders(){let e=Object.create(null);for(let[t,r]of this._headers)e[t]=cG(r);return e}assignSocket(){}detachSocket(){}writeContinue(){this.writeHead(100)}writeProcessing(){this.writeHead(102)}addTrailers(e){if(Array.isArray(e)){for(let t=0;t<e.length;t+=2){let r=e[t],n=e[t+1];if(r===void 0||n===void 0)continue;let i=Gi(r).toLowerCase();Yi(i,n),this._trailers.set(i,String(n)),this._rawTrailerNames.has(i)||this._rawTrailerNames.set(i,r)}return}Object.entries(e).forEach(([t,r])=>{let n=Gi(t).toLowerCase();Yi(n,r),this._trailers.set(n,String(r)),this._rawTrailerNames.has(n)||this._rawTrailerNames.set(n,t)})}cork(){this.socket.cork()}uncork(){this.socket.uncork()}setTimeout(e){return this}get writableCorked(){return Number(this.socket.writableCorked||0)}flushHeaders(){this.headersSent=!0}destroy(e){this._connectionReset=!0,e&&this._emit("error",e),this._finalize()}async waitForClose(){await this._closedPromise}serialize(){let e=this._chunks.length>0?Buffer.concat(this._chunks):Buffer.alloc(0),t=Array.from(this._headers.entries()).flatMap(([s,o])=>{let a=Il(o);return Array.isArray(a)?s==="set-cookie"?a.map(A=>[s,A]):[[s,a.join(", ")]]:[[s,a]]}),r=Array.from(this._headers.entries()).flatMap(([s,o])=>{let a=this._rawHeaderNames.get(s)||s,A=Il(o);return Array.isArray(A)?s==="set-cookie"?A.flatMap(f=>[a,f]):[a,A.join(", ")]:[a,A]}),n=Array.from(this._trailers.entries()).flatMap(([s,o])=>{let a=Il(o);return Array.isArray(a)?a.map(A=>[s,A]):[[s,a]]}),i=Array.from(this._trailers.entries()).flatMap(([s,o])=>{let a=this._rawTrailerNames.get(s)||s,A=Il(o);return Array.isArray(A)?A.flatMap(f=>[a,f]):[a,A]});return{status:this.statusCode,headers:t,rawHeaders:r,informational:this._informational.length>0?[...this._informational]:void 0,body:e.toString("base64"),bodyEncoding:"base64",trailers:n.length>0?n:void 0,rawTrailers:i.length>0?i:void 0,connectionEnded:this._connectionEnded,connectionReset:this._connectionReset,streamed:this._streamed}}_writeRaw(e,t){return this._pendingRawInfoBuffer+=String(e),this._flushPendingRawInformational(),typeof t=="function"&&queueMicrotask(t),!0}_finalize(){this.writableFinished||(this.writableFinished=!0,this.writable=!1,this._writableState.ended=!0,this._writableState.finished=!0,this._emit("finish"),this._emit("close"),this._resolveClosed?.(),this._resolveClosed=null)}_flushPendingRawInformational(){let e=this._pendingRawInfoBuffer.indexOf(`\r
-\r
-`);for(;e!==-1;){let t=this._pendingRawInfoBuffer.slice(0,e);this._pendingRawInfoBuffer=this._pendingRawInfoBuffer.slice(e+4);let[r,...n]=t.split(`\r
-`),i=/^HTTP\/1\.[01]\s+(\d{3})(?:\s+(.*))?$/.exec(r);if(!i){e=this._pendingRawInfoBuffer.indexOf(`\r
-\r
-`);continue}let s=Number(i[1]);if(s>=100&&s<200&&s!==101){let o=[],a=[];for(let A of n){let f=A.indexOf(":");if(f===-1)continue;let l=A.slice(0,f).trim(),p=A.slice(f+1).trim();o.push([l.toLowerCase(),p]),a.push(l,p)}this._informational.push({status:s,statusText:i[2]||Hg[s]||void 0,headers:o,rawHeaders:a})}e=this._pendingRawInfoBuffer.indexOf(`\r
-\r
-`)}}},tR=class{constructor(e){y(this,"listening",!1);y(this,"_listeners",{});y(this,"_serverId");y(this,"_netServer",null);y(this,"_listenPromise",null);y(this,"_address",null);y(this,"_handleId",null);y(this,"_hostCloseWaitStarted",!1);y(this,"_activeRequestDispatches",0);y(this,"_closePending",!1);y(this,"_closeRunning",!1);y(this,"_closeCallbacks",[]);y(this,"_requestListener");y(this,"keepAliveTimeout",5e3);y(this,"requestTimeout",3e5);y(this,"headersTimeout",6e4);y(this,"timeout",0);y(this,"maxRequestsPerSocket",0);this._serverId=wSe++,this._requestListener=e??(()=>{}),Og.set(this._serverId,this)}get _bridgeServerId(){return this._serverId}_emit(e,...t){let r=this._listeners[e];!r||r.length===0||r.slice().forEach(n=>n.call(this,...t))}_finishStart(e){let t=JSON.parse(e);this._address=t.address,this.listening=!0,this._handleId=`http-server:${this._serverId}`,rr("server listening",this._serverId,this._address),typeof _registerHandle=="function"&&_registerHandle(this._handleId,"http server"),this._startHostCloseWait()}_completeClose(){this.listening=!1,this._address=null,Og.delete(this._serverId),this._handleId&&typeof _unregisterHandle=="function"&&_unregisterHandle(this._handleId),this._handleId=null}_beginRequestDispatch(){this._activeRequestDispatches+=1}_endRequestDispatch(){this._activeRequestDispatches=Math.max(0,this._activeRequestDispatches-1),this._closePending&&this._activeRequestDispatches===0&&(this._closePending=!1,queueMicrotask(()=>{this._startClose()}))}_startHostCloseWait(){this._hostCloseWaitStarted=!0}async _start(e,t){if(typeof Pg>"u")throw new Error("http.createServer requires kernel-backed network bridge support");rr("server listen start",this._serverId,e,t);let r=new Pg({allowHalfOpen:!0});this._netServer=r,r.on("connection",n=>{this._emit("connection",n),VSe(this,n)}),r.on("error",n=>{this._emit("error",n)}),await new Promise((n,i)=>{let s=!1,o=()=>{r.removeListener?.("listening",a),r.removeListener?.("error",A)},a=()=>{s||(s=!0,o(),n())},A=f=>{s||(s=!0,o(),i(f instanceof Error?f:new Error(String(f))))};r.once("listening",a),r.once("error",A),r.listen(e??0,t)}),this._address=r.address(),this.listening=!0,this._startHostCloseWait(),rr("server listening",this._serverId,this._address)}listen(e,t,r){let n=typeof e=="number"?e:void 0,i=typeof t=="string"?t:void 0,s=typeof r=="function"?r:typeof t=="function"?t:typeof e=="function"?e:void 0;return this._listenPromise||(this._listenPromise=this._start(n,i).then(()=>{this._emit("listening"),s?.call(this)}).catch(o=>{this._emit("error",o)})),this}close(e){return rr("server close requested",this._serverId,this.listening),e&&this._closeCallbacks.push(e),this._activeRequestDispatches>0?(this._closePending=!0,this):(queueMicrotask(()=>{this._startClose()}),this)}_startClose(){if(this._closeRunning)return;this._closeRunning=!0,(async()=>{try{this._listenPromise&&await this._listenPromise;let t=this._netServer;this.listening&&t&&(rr("server close net server",this._serverId),await new Promise((n,i)=>{t.close(s=>{s?i(s):n()})})),this._netServer=null,this._completeClose(),rr("server close complete",this._serverId),this._closeCallbacks.splice(0).forEach(n=>n()),this._emit("close")}catch(t){let r=t instanceof Error?t:new Error(String(t));rr("server close error",this._serverId,r.message),this._closeCallbacks.splice(0).forEach(i=>i(r)),this._emit("error",r)}finally{this._closeRunning=!1}})()}address(){return this._address}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}once(e,t){let r=(...n)=>{this.off(e,r),t.call(this,...n)};return this.on(e,r)}off(e,t){let r=this._listeners[e];if(!r)return this;let n=r.indexOf(t);return n!==-1&&r.splice(n,1),this}removeListener(e,t){return this.off(e,t)}removeAllListeners(e){return e?delete this._listeners[e]:this._listeners={},this}listenerCount(e){return this._listeners[e]?.length||0}setTimeout(e,t){return typeof e=="number"&&(this.timeout=e),this}ref(){return this}unref(){return this}};function EW(e){return new tR(e)}EW.prototype=tR.prototype;async function qSe(e,t){let r=Og.get(e);if(!r)throw new Error(`Unknown HTTP server: ${e}`);let n=r._requestListener;r._beginRequestDispatch();let i=JSON.parse(t),s=new Du(i),o=new r0;s.socket=o.socket,s.connection=o.socket;let a=[],A=[],f=new Map,l=0,p=0;try{try{let I=globalThis.setImmediate,S=globalThis.setTimeout,_=globalThis.clearTimeout;typeof I=="function"&&(globalThis.setImmediate=((N,...O)=>{let x=new Promise(G=>{queueMicrotask(()=>{try{N(...O)}finally{G()}})});return a.push(x),0})),typeof S=="function"&&(globalThis.setTimeout=((N,O,...x)=>{if(typeof N!="function")return S(N,O,...x);let G=typeof O=="number"&&Number.isFinite(O)?Math.max(0,O):0;if(G>1e3)return S(N,G,...x);let Y,X=new Promise(j=>{Y=j}),Z;return Z=S(()=>{f.delete(Z);try{N(...x)}finally{Y()}},G),f.set(Z,Y),A.push(X),Z})),typeof _=="function"&&(globalThis.clearTimeout=(N=>{if(N!=null){let O=f.get(N);O&&(f.delete(N),O())}return _(N)}));try{let N=n(s,o);for(s.rawBody&&s.rawBody.length>0&&s.emit("data",s.rawBody),s.emit("end"),await Promise.resolve(N);l<A.length||p<a.length;){let O=[...A.slice(l),...a.slice(p)];l=A.length,p=a.length,await Promise.allSettled(O)}}finally{typeof I=="function"&&(globalThis.setImmediate=I),typeof S=="function"&&(globalThis.setTimeout=S),typeof _=="function"&&(globalThis.clearTimeout=_)}}catch(I){o.statusCode=500;try{o.end(I instanceof Error?`Error: ${I.message}`:"Error")}catch{o.writableFinished||o.end()}}return o.writableFinished||o.end(),await o.waitForClose(),await Promise.allSettled([...A,...a]),JSON.stringify(o.serialize())}finally{r._endRequestDispatch()}}async function GSe(e,t){let r=P1.get(t);if(!r||r.serverId!==e||typeof _networkHttp2ServerRespondRaw>"u")return;P1.delete(t);let n=Io.get(e);if(!n){_networkHttp2ServerRespondRaw.applySync(void 0,[e,t,JSON.stringify({status:500,headers:[["content-type","text/plain"]],body:"Unknown HTTP/2 server",bodyEncoding:"utf8"})]);return}let i=JSON.parse(r.requestJson),s=new Du(i),o=new r0;s.socket=o.socket,s.connection=o.socket;try{n.emit("request",s,o),s.rawBody&&s.rawBody.length>0&&s.emit("data",s.rawBody),s.emit("end"),o.writableFinished||o.end(),await o.waitForClose(),_networkHttp2ServerRespondRaw.applySync(void 0,[e,t,JSON.stringify(o.serialize())])}catch(a){let A=a instanceof Error?a.message:String(a);_networkHttp2ServerRespondRaw.applySync(void 0,[e,t,JSON.stringify({status:500,headers:[["content-type","text/plain"]],body:`Error: ${A}`,bodyEncoding:"utf8"})])}}async function YSe(e,t){let r=typeof e=="number"?Og.get(e):e;if(!r)throw new Error(`Unknown HTTP server: ${typeof e=="number"?e:"<detached>"}`);let n=typeof t=="string"?JSON.parse(t):t,i=new Du(n),s=new r0;i.socket=s.socket,i.connection=s.socket;let o=[],a=[],A=new Map,f=0,l=0;r._beginRequestDispatch();try{try{let I=globalThis.setImmediate,S=globalThis.setTimeout,_=globalThis.clearTimeout;typeof I=="function"&&(globalThis.setImmediate=((N,...O)=>{let x=new Promise(G=>{queueMicrotask(()=>{try{N(...O)}finally{G()}})});return o.push(x),0})),typeof S=="function"&&(globalThis.setTimeout=((N,O,...x)=>{if(typeof N!="function")return S(N,O,...x);let G=typeof O=="number"&&Number.isFinite(O)?Math.max(0,O):0;if(G>1e3)return S(N,G,...x);let Y,X=new Promise(j=>{Y=j}),Z;return Z=S(()=>{A.delete(Z);try{N(...x)}finally{Y()}},G),A.set(Z,Y),a.push(X),Z})),typeof _=="function"&&(globalThis.clearTimeout=(N=>{if(N!=null){let O=A.get(N);O&&(A.delete(N),O())}return _(N)}));try{let N=r._requestListener(i,s);for(i.rawBody&&i.rawBody.length>0&&i.emit("data",i.rawBody),i.emit("end"),await Promise.resolve(N);f<a.length||l<o.length;){let O=[...a.slice(f),...o.slice(l)];f=a.length,l=o.length,await Promise.allSettled(O)}}finally{typeof I=="function"&&(globalThis.setImmediate=I),typeof S=="function"&&(globalThis.setTimeout=S),typeof _=="function"&&(globalThis.clearTimeout=_)}}catch(I){s.statusCode=500;try{s.end(I instanceof Error?`Error: ${I.message}`:"Error")}catch{s.writableFinished||s.end()}}s.writableFinished||s.end(),await s.waitForClose(),await Promise.allSettled([...a,...o]);let p=!1;return{responseJson:JSON.stringify(s.serialize()),abortRequest:()=>{p||(p=!0,i._abort())}}}finally{r._endRequestDispatch()}}async function WSe(e,t,r){let n=typeof t=="string"?JSON.parse(t):t,i=new Du(n),s=new r0;i.socket=s.socket,i.connection=s.socket,r&&(s._streamSocket=r,s._streamRequest=n),e._beginRequestDispatch();try{try{let A=e._requestListener(i,s);i.rawBody&&i.rawBody.length>0&&i.emit("data",i.rawBody),i.emit("end"),await Promise.resolve(A)}catch(A){s.statusCode=500;try{s.end(A instanceof Error?`Error: ${A.message}`:"Error")}catch{s.writableFinished||s.end()}}s.writableFinished||s.end(),await s.waitForClose();let o=!1,a=()=>{o||(o=!0,i._abort())};return s._streamedDirectly?{streamedDirectly:!0,closeConnection:s._streamCloseConnection,abortRequest:a}:{responseJson:JSON.stringify(s.serialize()),abortRequest:a}}finally{e._endRequestDispatch()}}function VSe(e,t){let r=Buffer.alloc(0),n=!1,i=!1,s=!1,o=!1,a=()=>{o||(o=!0,t.off?.("data",l),t.removeListener?.("data",l),t.off?.("end",p),t.removeListener?.("end",p),t.off?.("close",I),t.removeListener?.("close",I),t.off?.("error",S),t.removeListener?.("error",S))},A=()=>{if(n){i=!0;return}n=!0,_().finally(()=>{n=!1,i&&!o?(i=!1,A()):i=!1})},f=()=>{a(),!t.destroyed&&!t._writableEnded&&t.end()},l=N=>{let O=Buffer.isBuffer(N)?N:Buffer.from(N);r=r.length===0?O:Buffer.concat([r,O]),A()},p=()=>{if(s=!0,r.length===0){a();return}A()},I=()=>{a()},S=()=>{a()};async function _(){let N=!1;for(;!o&&!t.destroyed;){let O=pW(r,e);if(O.kind==="incomplete"){s&&r.length>0&&(t.write(V1()),f());return}if(O.kind==="bad-request"){t.write(V1()),f(),r=Buffer.alloc(0);return}if(r=r.subarray(O.bytesConsumed),O.upgradeHead){a();let Y=new Du(O.request);Y.socket=t,Y.connection=t,e._emit("upgrade",Y,t,O.upgradeHead);return}let x=await WSe(e,O.request,t);if(o||t.destroyed)return;let G;if(x.streamedDirectly)G=x.closeConnection;else{let Y=JSON.parse(x.responseJson),X=eR(Y,O.request,!0);!N&&X.payload.length>0&&t.write(X.payload),G=X.closeConnection}if(G&&(N=!0,r.length===0)){f();return}}}t.on("data",l),t.once("end",p),t.once("close",I),t.once("error",S)}function yW(e,t,r,n,i){let s=Og.get(t);if(!s)throw new Error(`Unknown HTTP server for ${e}: ${t}`);let o=JSON.parse(r),a=new Du(o),A=typeof Buffer<"u"?Buffer.from(n,"base64"):new Uint8Array(0),f=a.headers.host,l=new JSe(i,{host:(Array.isArray(f)?f[0]:f)?.split(":")[0]||"127.0.0.1"});qg.set(i,l),s._emit(e,a,l,A)}var qg=new Map,JSe=class{constructor(e,t){y(this,"remoteAddress");y(this,"remotePort");y(this,"localAddress","127.0.0.1");y(this,"localPort",0);y(this,"connecting",!1);y(this,"destroyed",!1);y(this,"writable",!0);y(this,"readable",!0);y(this,"readyState","open");y(this,"bytesWritten",0);y(this,"_listeners",{});y(this,"_socketId");y(this,"_readableState",{endEmitted:!1,ended:!1});y(this,"_writableState",{finished:!1,errorEmitted:!1});this._socketId=e,this.remoteAddress=t?.host||"127.0.0.1",this.remotePort=t?.port||80}setTimeout(e,t){return this}setNoDelay(e){return this}setKeepAlive(e,t){return this}ref(){return this}unref(){return this}cork(){}uncork(){}pause(){return this}resume(){return this}address(){return{address:this.localAddress,family:"IPv4",port:this.localPort}}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}addListener(e,t){return this.on(e,t)}once(e,t){let r=(...n)=>{this.off(e,r),t(...n)};return this.on(e,r)}off(e,t){if(this._listeners[e]){let r=this._listeners[e].indexOf(t);r!==-1&&this._listeners[e].splice(r,1)}return this}removeListener(e,t){return this.off(e,t)}removeAllListeners(e){return e?delete this._listeners[e]:this._listeners={},this}emit(e,...t){let r=this._listeners[e];return Vl(this,r,t)}listenerCount(e){return this._listeners[e]?.length||0}write(e,t,r){if(this.destroyed)return!1;let n=typeof t=="function"?t:r;if(typeof _upgradeSocketWriteRaw<"u"){let i;typeof Buffer<"u"&&Buffer.isBuffer(e)?i=e.toString("base64"):typeof e=="string"?i=typeof Buffer<"u"?Buffer.from(e).toString("base64"):btoa(e):e instanceof Uint8Array?i=typeof Buffer<"u"?Buffer.from(e).toString("base64"):btoa(String.fromCharCode(...e)):i=typeof Buffer<"u"?Buffer.from(String(e)).toString("base64"):btoa(String(e)),this.bytesWritten+=i.length,_upgradeSocketWriteRaw.applySync(void 0,[this._socketId,i])}return n&&n(),!0}end(e){return e&&this.write(e),typeof _upgradeSocketEndRaw<"u"&&!this.destroyed&&_upgradeSocketEndRaw.applySync(void 0,[this._socketId]),this.writable=!1,this.emit("finish"),this}destroy(e){return this.destroyed?this:(this.destroyed=!0,this.writable=!1,this.readable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,this._writableState.finished=!0,typeof _upgradeSocketDestroyRaw<"u"&&_upgradeSocketDestroyRaw.applySync(void 0,[this._socketId]),qg.delete(this._socketId),e&&this.emit("error",e),this.emit("close",!1),this)}_pushData(e){this.emit("data",e)}_pushEnd(){this.readable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,this._writableState.finished=!0,this.emit("end"),this.emit("close",!1),qg.delete(this._socketId)}};function jSe(e,t,r,n){yW("upgrade",e,t,r,n)}function zSe(e,t,r,n){yW("connect",e,t,r,n)}function KSe(e,t){let r=qg.get(e);if(r){let n=typeof Buffer<"u"?Buffer.from(t,"base64"):new Uint8Array(0);r._pushData(n)}}function XSe(e){let t=qg.get(e);t&&t._pushEnd()}function J1(){this.statusCode=200,this.statusMessage="OK",this.headersSent=!1,this.writable=!0,this.writableFinished=!1,this.outputSize=0,this._headers=new Map,this._trailers=new Map,this._rawHeaderNames=new Map,this._rawTrailerNames=new Map,this._informational=[],this._pendingRawInfoBuffer="",this._chunks=[],this._chunksBytes=0,this._listeners={},this._closedPromise=new Promise(t=>{this._resolveClosed=t}),this._connectionEnded=!1,this._connectionReset=!1,this._writableState={length:0,ended:!1,finished:!1,objectMode:!1,corked:0};let e={writable:!0,writableCorked:0,writableHighWaterMark:16*1024,on(){return e},once(){return e},removeListener(){return e},destroy(){},end(){},cork(){},uncork(){},write:(t,r,n)=>this.write(t,r,n)};this.socket=e,this.connection=e}J1.prototype=Object.create(r0.prototype,{constructor:{value:J1,writable:!0,configurable:!0}});function mW(e){let t=e==="https"?"https:":"http:",r=new BB({keepAlive:!1,createConnection(s,o){return LB({...s,protocol:t},o)}});function n(s){return s.protocol?s:{...s,protocol:t}}function i(s){return s.agent!==void 0?s:{...s,_agentOSDefaultAgent:r}}return{request(s,o,a){let A,f=typeof o=="function"?o:a;if(typeof s=="string"){let l=new URL(s);A={protocol:l.protocol,hostname:l.hostname,port:l.port,path:l.pathname+l.search,...typeof o=="object"&&o?o:{}}}else s instanceof URL?A={protocol:s.protocol,hostname:s.hostname,port:s.port,path:s.pathname+s.search,...typeof o=="object"&&o?o:{}}:A={...s,...typeof o=="object"&&o?o:{}};return new Tg(i(n(A)),f)},get(s,o,a){let A,f=typeof o=="function"?o:a;if(typeof s=="string"){let p=new URL(s);A={protocol:p.protocol,hostname:p.hostname,port:p.port,path:p.pathname+p.search,method:"GET",...typeof o=="object"&&o?o:{}}}else s instanceof URL?A={protocol:s.protocol,hostname:s.hostname,port:s.port,path:s.pathname+s.search,method:"GET",...typeof o=="object"&&o?o:{}}:A={...s,...typeof o=="object"&&o?o:{},method:"GET"};let l=new Tg(i(n(A)),f);return l.end(),l},createServer(s,o){let a=typeof s=="function"?s:o;return new tR(a)},Agent:BB,globalAgent:r,Server:EW,ServerResponse:J1,IncomingMessage:cu,ClientRequest:Tg,validateHeaderName:Gi,validateHeaderValue:Yi,_checkIsHttpToken:cW,_checkInvalidHeaderChar:lW,maxHeaderSize:65535,METHODS:[...SSe],STATUS_CODES:Hg}}var rR=mW("http");et("_httpModule",rR);et("_dnsModule",X2);function ZSe(e,t){if(rr("http stream event",e,t),e==="http_request"&&!(!t||t.serverId===void 0||t.requestId===void 0||typeof t.request!="string")){if(typeof _networkHttpServerRespondRaw>"u"){rr("http stream missing respond bridge");return}qSe(t.serverId,t.request).then(r=>{rr("http stream response",t.serverId,t.requestId),_networkHttpServerRespondRaw.applySync(void 0,[t.serverId,t.requestId,r])}).catch(r=>{let n=r instanceof Error?r.message:String(r);rr("http stream error",t.serverId,t.requestId,n),_networkHttpServerRespondRaw.applySync(void 0,[t.serverId,t.requestId,JSON.stringify({status:500,headers:[["content-type","text/plain"]],body:`Error: ${n}`,bodyEncoding:"utf8"})])})}}et("_httpServerDispatch",ZSe);et("_httpServerUpgradeDispatch",jSe);et("_httpServerConnectDispatch",zSe);et("_http2Dispatch",hSe);et("_upgradeSocketData",KSe);var nR=mW("https");et("_httpsModule",nR);var Ol=50*1024*1024,dG=64*1024,$Se=2e3,e_e=0,j1=Eu.default?.Headers??Eu.default?.default??Eu.default,t_e=yu.default?.Request??yu.default?.default??yu.default,r_e=mu.default?.Response??mu.default?.default??mu.default;function PB(e){if(!e)return{};if(e instanceof xA||typeof j1=="function"&&e instanceof j1)return Object.fromEntries(e.entries());if(Y1(e)){let t={};for(let r=0;r<e.length;r+=2){let n=e[r],i=e[r+1];n!==void 0&&i!==void 0&&(t[n]=i)}return t}return typeof e.entries=="function"?Object.fromEntries(e.entries()):typeof e[Symbol.iterator]=="function"?Object.fromEntries(e):Object.fromEntries(new xA(e).entries())}function n_e(e){return new xA(PB(e))}function i_e(e={}){let t={...e};return Object.prototype.hasOwnProperty.call(t,"agent")&&delete t.agent,Object.prototype.hasOwnProperty.call(t,"headers")&&(t.headers=PB(t.headers)),t.body!=null&&t.duplex==null&&String(t.method??"GET").toUpperCase()!=="GET"&&String(t.method??"GET").toUpperCase()!=="HEAD"&&(t.duplex="half"),t}function s_e(e){let t=PB(e?.headers);return Object.keys(t).some(n=>n.toLowerCase()==="accept-encoding")||(t["accept-encoding"]="gzip, deflate"),{...e||{},headers:t}}async function OB(e,t={}){if(typeof zq!="function")throw new Error("fetch requires undici to be configured");let r=e,n=t;e instanceof iR&&(r=e.url,n={method:e.method,headers:PB(e.headers),body:e.body,...t}),n=i_e(n),n=s_e(n);let i=typeof r=="string"?r:r?.url?String(r.url):String(r),s=typeof _registerHandle=="function"?`fetch:${++e_e}`:null;s&&_registerHandle?.(s,`fetch ${i}`);let o=n.dispatcher==null&&typeof R1=="function"?R1():null;try{return await zq(r,o?{...n,dispatcher:o}:n)}finally{s&&_unregisterHandle?.(s)}}var xA=class BW{constructor(t){y(this,"_headers",{});t&&t!==null&&(t instanceof BW?this._headers={...t._headers}:Array.isArray(t)?t.forEach(([r,n])=>{this._headers[r.toLowerCase()]=n}):typeof t=="object"&&Object.entries(t).forEach(([r,n])=>{this._headers[r.toLowerCase()]=n}))}get(t){return this._headers[t.toLowerCase()]||null}set(t,r){this._headers[t.toLowerCase()]=r}has(t){return t.toLowerCase()in this._headers}delete(t){delete this._headers[t.toLowerCase()]}entries(){return Object.entries(this._headers)[Symbol.iterator]()}[Symbol.iterator](){return this.entries()}keys(){return Object.keys(this._headers)[Symbol.iterator]()}values(){return Object.values(this._headers)[Symbol.iterator]()}append(t,r){let n=t.toLowerCase();n in this._headers?this._headers[n]=this._headers[n]+", "+r:this._headers[n]=r}forEach(t){Object.entries(this._headers).forEach(([r,n])=>t(n,r,this))}},iR=class IW{constructor(t,r={}){y(this,"url");y(this,"method");y(this,"headers");y(this,"body");y(this,"mode");y(this,"credentials");y(this,"cache");y(this,"redirect");y(this,"referrer");y(this,"integrity");this.url=typeof t=="string"?t:t.url,this.method=r.method||(typeof t!="string"?t.method:void 0)||"GET",this.headers=n_e(r.headers||(typeof t!="string"?t.headers:void 0)),this.body=r.body||null,this.mode=r.mode||"cors",this.credentials=r.credentials||"same-origin",this.cache=r.cache||"default",this.redirect=r.redirect||"follow",this.referrer=r.referrer||"about:client",this.integrity=r.integrity||""}clone(){return new IW(this.url,this)}},bW=class eB{constructor(t,r={}){y(this,"_body");y(this,"status");y(this,"statusText");y(this,"headers");y(this,"ok");y(this,"type");y(this,"url");y(this,"redirected");this._body=t||null,this.status=r.status||200,this.statusText=r.statusText||"OK",this.headers=new xA(r.headers),this.ok=this.status>=200&&this.status<300,this.type="default",this.url="",this.redirected=!1}async text(){return String(this._body||"")}async json(){return JSON.parse(this._body||"{}")}get body(){let t=this._body;return t===null?null:{getReader(){let r=!1;return{async read(){return r?{done:!0}:(r=!0,{done:!1,value:new TextEncoder().encode(t)})}}}}}clone(){return new eB(this._body,{status:this.status,statusText:this.statusText})}static error(){return new eB(null,{status:0,statusText:""})}static redirect(t,r=302){return new eB(null,{status:r,headers:{Location:t}})}};et("_upgradeSocketEnd",XSe);et("fetch",OB);et("Headers",j1);et("Request",t_e);et("Response",r_e);var Nl=globalThis.Blob;typeof Nl>"u"&&(Nl=class{},et("Blob",Nl));var Xv=globalThis.File;typeof Xv>"u"&&(Xv=class extends Nl{constructor(r=[],n="",i={}){super(r,i);y(this,"name");y(this,"lastModified");y(this,"webkitRelativePath");this.name=String(n),this.lastModified=typeof i.lastModified=="number"?i.lastModified:Date.now(),this.webkitRelativePath=""}},et("File",Xv));if(typeof globalThis.FormData>"u"){class e{constructor(){y(this,"_entries",[])}append(r,n){this._entries.push([r,n])}get(r){let n=this._entries.find(([i])=>i===r);return n?n[1]:null}getAll(r){return this._entries.filter(([n])=>n===r).map(([,n])=>n)}has(r){return this._entries.some(([n])=>n===r)}delete(r){this._entries=this._entries.filter(([n])=>n!==r)}entries(){return this._entries[Symbol.iterator]()}[Symbol.iterator](){return this.entries()}}et("FormData",e)}var o_e="dgram-socket:";function CW(){return lr("Bad socket type specified. Valid types are: udp4, udp6","ERR_SOCKET_BAD_TYPE")}function a_e(){let e=new Error("Socket is already bound");return e.code="ERR_SOCKET_ALREADY_BOUND",e}function gG(){return new Error("getsockname EBADF")}function Bn(e,t,r){return lr(`The "${e}" argument must be of type ${t}. Received ${Yn(r)}`,"ERR_INVALID_ARG_TYPE")}function pG(e){return lr(`The "${e}" argument must be specified`,"ERR_MISSING_ARGS")}function mg(){return IB("Not running","ERR_SOCKET_DGRAM_NOT_RUNNING")}function A_e(e){switch(e){case"EBADF":return-9;case"EINVAL":return-22;case"EADDRNOTAVAIL":return-99;case"ENOPROTOOPT":return-92}}function ba(e,t){let r=new Error(`${e} ${t}`);return r.code=t,r.errno=A_e(t),r.syscall=e,r}function f_e(e){return lr(`The "ttl" argument must be of type number. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE")}function u_e(){return lr("Buffer size must be a positive integer","ERR_SOCKET_BAD_BUFFER_SIZE")}function Zv(e,t){let r=`uv_${e}_buffer_size`,n={errno:t==="EBADF"?-9:-22,code:t,message:t==="EBADF"?"bad file descriptor":"invalid argument",syscall:r},i=new Error(`Could not get or set buffer size: ${r} returned ${t} (${n.message})`);i.name="SystemError [ERR_SOCKET_BUFFER_SIZE]",i.code="ERR_SOCKET_BUFFER_SIZE",i.info=n;let s=n.errno,o=r;return Object.defineProperty(i,"errno",{enumerable:!0,configurable:!0,get(){return s},set(a){s=a}}),Object.defineProperty(i,"syscall",{enumerable:!0,configurable:!0,get(){return o},set(a){o=a}}),i}function EG(e){return e<=0?e:process.platform==="linux"?e*2:e}function yG(e,t){if(typeof e!="number")throw f_e(e);if(!Number.isInteger(e)||e<=0||e>=256)throw ba(t,"EINVAL");return e}function QW(e){if(!t0(e))return!1;let t=Number(e.split(".")[0]);return t>=224&&t<=239}function wW(e){return t0(e)&&!QW(e)&&e!=="255.255.255.255"}function SW(e){let t=e.indexOf("%"),r=t===-1?e:e.slice(0,t);return xB(e)&&r.toLowerCase().startsWith("ff")}function Pm(e,t,r){if(typeof r!="string")throw Bn(t==="addSourceSpecificMembership"||t==="dropSourceSpecificMembership"?"groupAddress":"multicastAddress","string",r);if(!(e==="udp6"?SW(r):QW(r)))throw ba(t,"EINVAL");return r}function mG(e,t,r){if(typeof r!="string")throw Bn("sourceAddress","string",r);if(!(e==="udp6"?xB(r)&&!SW(r):wW(r)))throw ba(t,"EINVAL");return r}function BG(e){if(e==="udp4"||e==="udp6")return e;throw CW()}function c_e(e){if(typeof e=="string")return{type:BG(e)};if(!e||typeof e!="object"||Array.isArray(e))throw CW();let t=e,r={type:BG(t.type)};if(t.recvBufferSize!==void 0){if(typeof t.recvBufferSize!="number")throw G1("options.recvBufferSize","number",t.recvBufferSize);r.recvBufferSize=t.recvBufferSize}if(t.sendBufferSize!==void 0){if(typeof t.sendBufferSize!="number")throw G1("options.sendBufferSize","number",t.sendBufferSize);r.sendBufferSize=t.sendBufferSize}return r}function z1(e,t,r){if(e==null||e==="")return r;if(typeof e!="string")throw Bn("address","string",e);return e==="localhost"?t==="udp6"?"::1":"127.0.0.1":e}function K1(e){if(typeof e!="number")throw Bn("port","number",e);if(!T1(e))throw D1(e);return e}function X1(e){if(typeof e=="string"||Buffer.isBuffer(e))return Buffer.from(e);if(ArrayBuffer.isView(e))return Buffer.from(e.buffer,e.byteOffset,e.byteLength);throw Bn("msg","string or Buffer or Uint8Array or DataView",e)}function l_e(e){return Array.isArray(e)?Buffer.concat(e.map(t=>X1(t))):X1(e)}function Bg(e){if(typeof e!="string")return e;try{return JSON.parse(e)}catch{return e}}function h_e(e){if(Buffer.isBuffer(e)||e instanceof Uint8Array)return Buffer.from(e);if(typeof e=="string")return Buffer.from(e,"base64");if(e&&typeof e=="object"){if(e.__type==="Buffer"&&typeof e.data=="string")return Buffer.from(e.data,"base64");if(e.__agentOSType==="bytes"&&typeof e.base64=="string")return Buffer.from(e.base64,"base64")}return Buffer.alloc(0)}function d_e(e,t){let r,n,i;if(typeof e[0]=="function")i=e[0];else if(e[0]&&typeof e[0]=="object"&&!Array.isArray(e[0])){let s=e[0];r=s.port,n=s.address,i=e[1]}else r=e[0],typeof e[1]=="function"?i=e[1]:(n=e[1],i=e[2]);if(i!==void 0&&typeof i!="function")throw xl("callback",i);return{port:r===void 0?0:K1(r),address:z1(n,t,t==="udp6"?"::":"0.0.0.0"),callback:i}}function g_e(e,t){if(e.length===0)throw Bn("msg","string or Buffer or Uint8Array or DataView",void 0);let r=e[0];if(typeof e[1]=="number"&&typeof e[2]=="number"&&e.length>=4){let s=X1(r),o=e[1],a=e[2],A=typeof e[4]=="function"?e[4]:e[5];if(A!==void 0&&typeof A!="function")throw xl("callback",A);return{data:Buffer.from(s.subarray(o,o+a)),port:K1(e[3]),address:z1(typeof e[4]=="function"?void 0:e[4],t,t==="udp6"?"::1":"127.0.0.1"),callback:A}}let i=typeof e[2]=="function"?e[2]:e[3];if(i!==void 0&&typeof i!="function")throw xl("callback",i);return{data:l_e(r),port:K1(e[1]),address:z1(typeof e[2]=="function"?void 0:e[2],t,t==="udp6"?"::1":"127.0.0.1"),callback:i}}var IG=class{constructor(e,t){y(this,"_type");y(this,"_socketId");y(this,"_listeners",{});y(this,"_onceListeners",{});y(this,"_bindPromise",null);y(this,"_receiveLoopRunning",!1);y(this,"_receivePollTimer",null);y(this,"_refed",!0);y(this,"_closed",!1);y(this,"_bound",!1);y(this,"_handleRefId",null);y(this,"_recvBufferSize");y(this,"_sendBufferSize");y(this,"_memberships",new Set);y(this,"_multicastInterface");y(this,"_broadcast",!1);y(this,"_multicastLoopback",1);y(this,"_multicastTtl",1);y(this,"_ttl",64);if(typeof _dgramSocketCreateRaw>"u")throw new Error("dgram.createSocket is not supported in sandbox");let r=c_e(e);this._type=r.type;let n=Bg(_dgramSocketCreateRaw.applySync(void 0,[{type:this._type}]));this._socketId=String(n?.socketId??n),t&&this.on("message",t),r.recvBufferSize!==void 0&&this._setBufferSize("recv",r.recvBufferSize,!1),r.sendBufferSize!==void 0&&this._setBufferSize("send",r.sendBufferSize,!1)}bind(...e){let{port:t,address:r,callback:n}=d_e(e,this._type);return this._bindInternal(t,r,n),this}send(...e){let{data:t,port:r,address:n,callback:i}=g_e(e,this._type);this._sendInternal(t,r,n,i)}sendto(...e){this.send(...e)}address(){if(typeof _dgramSocketAddressRaw>"u")throw gG();try{return Bg(_dgramSocketAddressRaw.applySync(void 0,[this._socketId]))}catch{throw gG()}}close(e){if(e!==void 0&&typeof e!="function")throw xl("callback",e);if(e&&this.once("close",e),this._closed)return this;if(this._closed=!0,this._bound=!1,this._clearReceivePollTimer(),this._syncHandleRef(),typeof _dgramSocketCloseRaw>"u")return queueMicrotask(()=>{this._emit("close")}),this;try{_dgramSocketCloseRaw.applySyncPromise(void 0,[this._socketId])}finally{queueMicrotask(()=>{this._emit("close")})}return this}ref(){return this._refed=!0,this._syncHandleRef(),this._receivePollTimer&&typeof this._receivePollTimer.ref=="function"&&this._receivePollTimer.ref(),this._bound&&!this._closed&&!this._receiveLoopRunning&&this._pumpMessages(),this}unref(){return this._refed=!1,this._syncHandleRef(),this._receivePollTimer&&typeof this._receivePollTimer.unref=="function"&&this._receivePollTimer.unref(),this}setRecvBufferSize(e){this._setBufferSize("recv",e)}setSendBufferSize(e){this._setBufferSize("send",e)}getRecvBufferSize(){return this._getBufferSize("recv")}getSendBufferSize(){return this._getBufferSize("send")}setBroadcast(e){this._ensureBoundForSocketOption("setBroadcast"),this._broadcast=!!e}setTTL(e){return this._ensureBoundForSocketOption("setTTL"),this._ttl=yG(e,"setTTL"),this._ttl}setMulticastTTL(e){return this._ensureBoundForSocketOption("setMulticastTTL"),this._multicastTtl=yG(e,"setMulticastTTL"),this._multicastTtl}setMulticastLoopback(e){return this._ensureBoundForSocketOption("setMulticastLoopback"),this._multicastLoopback=Number(e),this._multicastLoopback}addMembership(e,t){if(e===void 0)throw pG("multicastAddress");if(this._closed)throw mg();let r=Pm(this._type,"addMembership",e);if(t!==void 0&&typeof t!="string")throw Bn("multicastInterface","string",t);this._memberships.add(`${r}|${t??""}`)}dropMembership(e,t){if(e===void 0)throw pG("multicastAddress");if(this._closed)throw mg();let r=Pm(this._type,"dropMembership",e);if(t!==void 0&&typeof t!="string")throw Bn("multicastInterface","string",t);let n=`${r}|${t??""}`;if(!this._memberships.has(n))throw ba("dropMembership","EADDRNOTAVAIL");this._memberships.delete(n)}addSourceSpecificMembership(e,t,r){if(this._closed)throw mg();if(typeof e!="string")throw Bn("sourceAddress","string",e);if(typeof t!="string")throw Bn("groupAddress","string",t);let n=mG(this._type,"addSourceSpecificMembership",e),i=Pm(this._type,"addSourceSpecificMembership",t);if(r!==void 0&&typeof r!="string")throw Bn("multicastInterface","string",r);this._memberships.add(`${n}>${i}|${r??""}`)}dropSourceSpecificMembership(e,t,r){if(this._closed)throw mg();if(typeof e!="string")throw Bn("sourceAddress","string",e);if(typeof t!="string")throw Bn("groupAddress","string",t);let n=mG(this._type,"dropSourceSpecificMembership",e),i=Pm(this._type,"dropSourceSpecificMembership",t);if(r!==void 0&&typeof r!="string")throw Bn("multicastInterface","string",r);let s=`${n}>${i}|${r??""}`;if(!this._memberships.has(s))throw ba("dropSourceSpecificMembership","EADDRNOTAVAIL");this._memberships.delete(s)}setMulticastInterface(e){if(typeof e!="string")throw Bn("interfaceAddress","string",e);if(this._closed)throw mg();if(this._ensureBoundForSocketOption("setMulticastInterface"),this._type==="udp4"){if(e==="0.0.0.0"){this._multicastInterface=e;return}if(!t0(e))throw ba("setMulticastInterface","ENOPROTOOPT");if(!wW(e))throw ba("setMulticastInterface","EADDRNOTAVAIL");this._multicastInterface=e;return}if(e===""||e==="undefined"||!xB(e))throw ba("setMulticastInterface","EINVAL");this._multicastInterface=e}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}addListener(e,t){return this.on(e,t)}once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),this}removeListener(e,t){let r=this._listeners[e];if(r){let i=r.indexOf(t);i>=0&&r.splice(i,1)}let n=this._onceListeners[e];if(n){let i=n.indexOf(t);i>=0&&n.splice(i,1)}return this}off(e,t){return this.removeListener(e,t)}emit(e,...t){return this._emit(e,...t)}async _bindInternal(e,t,r){if(!this._closed){if(this._bound||this._bindPromise)throw a_e();if(typeof _dgramSocketBindRaw>"u")throw new Error("dgram.bind is not supported in sandbox");return this._bindPromise=(async()=>{try{Bg(_dgramSocketBindRaw.applySyncPromise(void 0,[this._socketId,{port:e,address:t}])),this._bound=!0,this._applyInitialBufferSizes(),this._syncHandleRef(),queueMicrotask(()=>{this._closed||(this._emit("listening"),r?.call(this),this._pumpMessages())})}catch(n){throw queueMicrotask(()=>{this._emit("error",n)}),n}finally{this._bindPromise=null}})(),this._bindPromise}}async _ensureBound(){if(!this._bound){if(this._bindPromise){await this._bindPromise;return}await this._bindInternal(0,this._type==="udp6"?"::":"0.0.0.0")}}async _sendInternal(e,t,r,n){try{if(await this._ensureBound(),this._closed||typeof _dgramSocketSendRaw>"u")return;let i=Bg(_dgramSocketSendRaw.applySyncPromise(void 0,[this._socketId,e,{port:t,address:r}]));n&&queueMicrotask(()=>{n(null,typeof i?.bytes=="number"?i.bytes:e.length)})}catch(i){if(n){queueMicrotask(()=>{n(i)});return}queueMicrotask(()=>{this._emit("error",i)})}}async _pumpMessages(){if(!(this._receiveLoopRunning||this._closed||!this._bound)&&!(typeof _dgramSocketRecvRaw>"u")){this._receiveLoopRunning=!0;try{for(;!this._closed&&this._bound;){let e=Bg(_dgramSocketRecvRaw.applySync(void 0,[this._socketId,pB]));if(e===V2||!e){this._receivePollTimer=setTimeout(()=>{this._receivePollTimer=null,this._pumpMessages()},pB),!this._refed&&typeof this._receivePollTimer.unref=="function"&&this._receivePollTimer.unref();return}if(e.type==="message"){let t=h_e(e.data);this._emit("message",t,{address:e.remoteAddress,family:e.remoteFamily??socketFamilyForAddress(e.remoteAddress),port:e.remotePort,size:t.length});continue}if(e.type==="error"){let t=new Error(typeof e.message=="string"?e.message:"secure-exec dgram socket error");typeof e.code=="string"&&e.code.length>0&&(t.code=e.code),this._emit("error",t)}}}catch(e){this._emit("error",e)}finally{this._receiveLoopRunning=!1}}}_clearReceivePollTimer(){this._receivePollTimer&&(clearTimeout(this._receivePollTimer),this._receivePollTimer=null)}_ensureBoundForSocketOption(e){if(!this._bound||this._closed)throw ba(e,"EBADF")}_setBufferSize(e,t,r=!0){if(!Number.isInteger(t)||t<=0||!Number.isFinite(t))throw u_e();if(t>2147483647)throw Zv(e,"EINVAL");if(r&&(!this._bound||this._closed))throw Zv(e,"EBADF");if(typeof _dgramSocketSetBufferSizeRaw<"u"&&this._bound&&!this._closed&&_dgramSocketSetBufferSizeRaw.applySync(void 0,[this._socketId,e,t]),e==="recv"){this._recvBufferSize=t;return}this._sendBufferSize=t}_getBufferSize(e){if(!this._bound||this._closed)throw Zv(e,"EBADF");let t=e==="recv"?this._recvBufferSize??0:this._sendBufferSize??0;if(typeof _dgramSocketGetBufferSizeRaw>"u")return EG(t);let r=_dgramSocketGetBufferSizeRaw.applySync(void 0,[this._socketId,e]);return EG(r>0?r:t)}_applyInitialBufferSizes(){this._recvBufferSize!==void 0&&this._setBufferSize("recv",this._recvBufferSize),this._sendBufferSize!==void 0&&this._setBufferSize("send",this._sendBufferSize)}_syncHandleRef(){if(!this._bound||this._closed||!this._refed){this._handleRefId&&typeof _unregisterHandle=="function"&&_unregisterHandle(this._handleRefId),this._handleRefId=null;return}let e=`${o_e}${this._socketId}`;this._handleRefId!==e&&(this._handleRefId&&typeof _unregisterHandle=="function"&&_unregisterHandle(this._handleRefId),this._handleRefId=e,typeof _registerHandle=="function"&&_registerHandle(this._handleRefId,"dgram socket"))}_emit(e,...t){let r=!1,n=this._listeners[e];if(n)for(let s of[...n])s(...t),r=!0;let i=this._onceListeners[e];if(i){this._onceListeners[e]=[];for(let s of[...i])s(...t),r=!0}return r}},_W={Socket:IG,createSocket(e,t){return new IG(e,t)}};et("_tlsModule",uW);function p_e(e){if(!e||typeof e!="object"||Array.isArray(e)||Buffer.isBuffer(e)||e instanceof Uint8Array)return!1;let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}function bB(e){return e==null||typeof e=="boolean"||typeof e=="number"||typeof e=="string"?e??null:typeof e=="bigint"?{__agentosSqliteType:"bigint",value:e.toString()}:Buffer.isBuffer(e)||e instanceof Uint8Array?{__agentosSqliteType:"uint8array",value:Buffer.from(e).toString("base64")}:Array.isArray(e)?e.map(t=>bB(t)):e&&typeof e=="object"?Object.fromEntries(Object.entries(e).map(([t,r])=>[t,bB(r)])):null}function Ng(e){return e==null||typeof e=="boolean"||typeof e=="number"||typeof e=="string"?e??null:Array.isArray(e)?e.map(t=>Ng(t)):e&&typeof e=="object"?e.__agentosSqliteType==="bigint"&&typeof e.value=="string"?BigInt(e.value):e.__agentosSqliteType==="uint8array"&&typeof e.value=="string"?Buffer.from(e.value,"base64"):Object.fromEntries(Object.entries(e).map(([t,r])=>[t,Ng(r)])):e}function tB(e){return!Array.isArray(e)||e.length===0?null:e.length===1&&p_e(e[0])?bB(e[0]):e.map(t=>bB(t))}function Zr(e,t,r){if(typeof e=="function")return Ng(e(...t));if(!e)throw new Error(`sqlite bridge is not available for ${r}`);if(typeof e.applySync=="function")return Ng(e.applySync(void 0,t));if(typeof e.applySyncPromise=="function")return Ng(e.applySyncPromise(void 0,t));throw new Error(`sqlite bridge is not available for ${r}`)}var E_e=Re("_sqliteConstantsRaw"),y_e=Re("_sqliteDatabaseOpenRaw"),m_e=Re("_sqliteDatabaseCloseRaw"),B_e=Re("_sqliteDatabaseExecRaw"),I_e=Re("_sqliteDatabaseQueryRaw"),b_e=Re("_sqliteDatabasePrepareRaw"),C_e=Re("_sqliteDatabaseLocationRaw"),Q_e=Re("_sqliteDatabaseCheckpointRaw"),w_e=Re("_sqliteStatementRunRaw"),S_e=Re("_sqliteStatementGetRaw"),__e=Re("_sqliteStatementAllRaw"),v_e=Re("_sqliteStatementColumnsRaw"),R_e=Re("_sqliteStatementSetReturnArraysRaw"),D_e=Re("_sqliteStatementSetReadBigIntsRaw"),T_e=Re("_sqliteStatementSetAllowBareNamedParametersRaw"),N_e=Re("_sqliteStatementSetAllowUnknownNamedParametersRaw"),M_e=Re("_sqliteStatementFinalizeRaw"),CB=class{constructor(e,t){this._database=e,this._statementId=t,this._finalized=!1}_assertOpen(){if(this._database._assertOpen(),this._finalized)throw new Error("SQLite statement is already finalized")}run(...e){return this._assertOpen(),Zr(w_e,[this._statementId,tB(e)],"statement.run")}get(...e){return this._assertOpen(),Zr(S_e,[this._statementId,tB(e)],"statement.get")}all(...e){return this._assertOpen(),Zr(__e,[this._statementId,tB(e)],"statement.all")}iterate(...e){return this.all(...e)[Symbol.iterator]()}columns(){return this._assertOpen(),Zr(v_e,[this._statementId],"statement.columns")}setReturnArrays(e){this._assertOpen(),Zr(R_e,[this._statementId,!!e],"statement.setReturnArrays")}setReadBigInts(e){this._assertOpen(),Zr(D_e,[this._statementId,!!e],"statement.setReadBigInts")}setAllowBareNamedParameters(e){this._assertOpen(),Zr(T_e,[this._statementId,!!e],"statement.setAllowBareNamedParameters")}setAllowUnknownNamedParameters(e){this._assertOpen(),Zr(N_e,[this._statementId,!!e],"statement.setAllowUnknownNamedParameters")}finalize(){return this._finalized||(this._database._assertOpen(),Zr(M_e,[this._statementId],"statement.finalize"),this._finalized=!0),null}},Z1=class{constructor(e=":memory:",t=void 0){this._closed=!1,this._databaseId=Zr(y_e,[typeof e=="string"?e:":memory:",t??null],"database.open")}_assertOpen(){if(this._closed)throw new Error("SQLite database is already closed")}close(){return this._closed||(Zr(m_e,[this._databaseId],"database.close"),this._closed=!0),null}exec(e){return this._assertOpen(),Zr(B_e,[this._databaseId,String(e??"")],"database.exec")}query(e,t=null,r=null){this._assertOpen();let n=t===null?null:tB(Array.isArray(t)?t:[t]);return Zr(I_e,[this._databaseId,String(e??""),n,r??null],"database.query")}prepare(e){this._assertOpen();let t=Zr(b_e,[this._databaseId,String(e??"")],"database.prepare");return new CB(this,t)}location(){return this._assertOpen(),Zr(C_e,[this._databaseId],"database.location")}checkpoint(){return this._assertOpen(),Zr(Q_e,[this._databaseId],"database.checkpoint")}};Z1.prototype[Symbol.dispose]=Z1.prototype.close;CB.prototype[Symbol.dispose]=CB.prototype.finalize;var $v;function F_e(){return $v===void 0&&($v=Object.freeze(Zr(E_e,[],"constants")??{})),$v}var k_e={DatabaseSync:Z1,StatementSync:CB,get constants(){return F_e()}};et("_dgramModule",_W);et("_sqliteModule",k_e);var vW={};_2(vW,{ClientRequest:()=>Tg,Headers:()=>xA,IncomingMessage:()=>cu,Request:()=>iR,Response:()=>bW,default:()=>U_e,dns:()=>X2,fetch:()=>OB,http:()=>rR,http2:()=>K2,https:()=>nR});var U_e={fetch:OB,Headers:xA,Request:iR,Response:bW,dns:X2,http:rR,https:nR,http2:K2,IncomingMessage:cu,ClientRequest:Tg,net:JY,tls:uW,dgram:_W},Ot,Ig,Ea,To=Symbol.for("nodejs.util.inspect.custom"),Ma=Symbol.toStringTag,sR="ERR_INVALID_THIS",x_e="ERR_MISSING_ARGS",L_e="ERR_INVALID_URL",P_e="ERR_ARG_NOT_ITERABLE",O_e="ERR_INVALID_TUPLE",H_e="URLSearchParams",QB=Symbol("secureExecLinkedURLSearchParams"),bG=Symbol.for("secureExec.blobUrlStore"),e1=Symbol.for("secureExec.blobUrlCounter"),q_e=["append","delete","get","getAll","has"],G_e=["append","set"],Y_e={"http:":0,"https:":2,"ws:":4,"wss:":5,"file:":6,"ftp:":8},RW=new WeakSet,$1=new WeakMap,DW=new WeakSet,t1=new WeakMap;function OA(e,t){let r=new TypeError(e);return r.code=t,r}function W_e(){let e=new TypeError("Invalid URL");return e.code=L_e,e}function Om(){return new TypeError("Receiver must be an instance of class URL")}function Ca(e){return OA(e,x_e)}function V_e(){return OA("Query pairs must be iterable",P_e)}function r1(){return OA("Each query pair must be an iterable [name, value] tuple",O_e)}function J_e(){return new TypeError("Cannot convert a Symbol value to a string")}function j_e(e){if(typeof e=="symbol")throw J_e();return String(e)}function z_e(e){let t="";for(let r=0;r<e.length;r+=1){let n=e.charCodeAt(r);if(n>=55296&&n<=56319){let i=r+1;if(i<e.length){let s=e.charCodeAt(i);if(s>=56320&&s<=57343){t+=e[r]+e[i],r=i;continue}}t+="\uFFFD";continue}if(n>=56320&&n<=57343){t+="\uFFFD";continue}t+=e[r]}return t}function zt(e){return z_e(j_e(e))}function yn(e){if(!RW.has(e))throw OA('Value of "this" must be of type URLSearchParams',sR)}function rB(e){if(!DW.has(e))throw OA('Value of "this" must be of type URLSearchParamsIterator',sR)}function On(e){let t=$1.get(e);if(!t)throw OA('Value of "this" must be of type URLSearchParams',sR);return t.getImpl()}function K_e(e){let t=0;for(let r of e)t++;return t}function CG(e){return e>=48&&e<=57||e>=65&&e<=70||e>=97&&e<=102}function QG(e){return e>=48&&e<=57?e-48:e>=65&&e<=70?e-55:e-87}function X_e(e,t){if(t<=127){e.push(t);return}if(t<=2047){e.push(192|t>>6,128|t&63);return}if(t<=65535){e.push(224|t>>12,128|t>>6&63,128|t&63);return}e.push(240|t>>18,128|t>>12&63,128|t>>6&63,128|t&63)}function wG(e){let t=String(e).replace(/\+/g," "),r="";for(let n=0;n<t.length;n+=1){if(t.charCodeAt(n)===37&&n+2<t.length){let s=[],o=n;for(;o+2<t.length&&t.charCodeAt(o)===37;){let a=t.charCodeAt(o+1),A=t.charCodeAt(o+2);if(!CG(a)||!CG(A))break;s.push((QG(a)<<4)+QG(A)),o+=3}if(s.length>0){r+=new _u().decode(Uint8Array.from(s)),n=o-1;continue}}let i=t.codePointAt(n);r+=String.fromCodePoint(i),i>65535&&(n+=1)}return r}function SG(e){let t=String(e),r=[];for(let i=0;i<t.length;i+=1){let s=t.codePointAt(i);X_e(r,s),s>65535&&(i+=1)}let n="";for(let i of r){if(i===32){n+="+";continue}if(i>=48&&i<=57||i>=65&&i<=90||i>=97&&i<=122||i===42||i===45||i===46||i===95){n+=String.fromCharCode(i);continue}n+=`%${i.toString(16).toUpperCase().padStart(2,"0")}`}return n}function Z_e(e,t){let r=Math.min(e.length,t.length);for(let n=0;n<r;n+=1){let i=e.charCodeAt(n)-t.charCodeAt(n);if(i!==0)return i}return e.length-t.length}function $_e(e){if(e&&typeof e=="object"&&QB in e)return e;if(e!=null){if(typeof e=="string")return zt(e);if(typeof e=="object"||typeof e=="function"){let t=e[Symbol.iterator];if(t!==void 0){if(typeof t!="function")throw V_e();let n=[];for(let i of e){if(i==null||typeof i[Symbol.iterator]!="function")throw r1();let o=Array.from(i);if(o.length!==2)throw r1();n.push([zt(o[0]),zt(o[1])])}return n}let r=[];for(let n of Reflect.ownKeys(e))Object.prototype.propertyIsEnumerable.call(e,n)&&r.push([zt(n),zt(e[n])]);return r}return zt(e)}}var n1=typeof globalThis.URLSearchParams=="function"&&globalThis.URLSearchParams.__secureExecBootstrapStub!==!0?globalThis.URLSearchParams:class{constructor(t=""){if(this._pairs=[],typeof t=="string"){let r=t.replace(/^\?/,"");if(!r)return;for(let n of r.split("&")){if(!n)continue;let[i,...s]=n.split("=");this._pairs.push([wG(i),wG(s.join("="))])}return}if(Array.isArray(t)){for(let r of t)r==null||r.length!==2||this._pairs.push([String(r[0]),String(r[1])]);return}if(t&&typeof t=="object")for(let[r,n]of Object.entries(t))this._pairs.push([String(r),String(n)])}append(t,r){this._pairs.push([String(t),String(r)])}delete(t){let r=String(t);this._pairs=this._pairs.filter(([n])=>n!==r)}get(t){let r=String(t),n=this._pairs.find(([i])=>i===r);return n?n[1]:null}getAll(t){let r=String(t);return this._pairs.filter(([n])=>n===r).map(([,n])=>n)}has(t){let r=String(t);return this._pairs.some(([n])=>n===r)}set(t,r){let n=String(t),i=String(r),s=[],o=!1;for(let[a,A]of this._pairs){if(a!==n){s.push([a,A]);continue}o||(o=!0,s.push([n,i]))}o||s.push([n,i]),this._pairs=s}sort(){this._pairs=this._pairs.map((t,r)=>({pair:t,index:r})).sort((t,r)=>{let n=Z_e(t.pair[0],r.pair[0]);return n!==0?n:t.index-r.index}).map(({pair:t})=>t)}entries(){return this._pairs[Symbol.iterator]()}keys(){return this._pairs.map(([t])=>t)[Symbol.iterator]()}values(){return this._pairs.map(([,t])=>t)[Symbol.iterator]()}[Symbol.iterator](){return this.entries()}toString(){return this._pairs.map(([t,r])=>`${SG(t)}=${SG(r)}`).join("&")}};function eve(e){return typeof e=="string"?new n1(e):e===void 0?new n1:new n1(e)}function TW(e,t,r){if(e.length===0)return r;let n=`{ ${e.join(", ")} }`,i=t?.breakLength??1/0;return n.length<=i?n:`{
-${e.join(`,
-  `)} }`}function tve(e){let t=e.href,r=t.indexOf(":")+1,n=t.indexOf("@"),i=t.indexOf("/",r+2),s=t.indexOf("?"),o=t.indexOf("#"),a=e.username.length>0?t.indexOf(":",r+2):r+2,A=n===-1?r+2:n,f=i===-1?t.length:i-(e.port.length>0?e.port.length+1:0),l=e.port.length>0?Number(e.port):null;return{href:t,protocol_end:r,username_end:a,host_start:A,host_end:f,pathname_start:i===-1?t.length:i,search_start:s===-1?t.length:s,hash_start:o===-1?t.length:o,port:l,scheme_type:Y_e[e.protocol]??1,hasPort:e.port.length>0,hasSearch:e.search.length>0,hasHash:e.hash.length>0}}function rve(e,t,r){let n=tve(e),i=typeof t=="function"?o=>t(o,r):o=>JSON.stringify(o),s=n.port===null?"null":String(n.port);return["URLContext {",`    href: ${i(n.href)},`,`    protocol_end: ${n.protocol_end},`,`    username_end: ${n.username_end},`,`    host_start: ${n.host_start},`,`    host_end: ${n.host_end},`,`    pathname_start: ${n.pathname_start},`,`    search_start: ${n.search_start},`,`    hash_start: ${n.hash_start},`,`    port: ${s},`,`    scheme_type: ${n.scheme_type},`,"    [hasPort]: [Getter],","    [hasSearch]: [Getter],","    [hasHash]: [Getter]","  }"].join(`
-`)}function _G(){let e=globalThis,t=e[bG];if(t instanceof Map)return t;let r=new Map;return e[bG]=r,r}function nve(){let e=globalThis,t=typeof e[e1]=="number"?e[e1]:1;return e[e1]=t+1,t}var MA=class NW{constructor(t){DW.add(this),t1.set(this,{values:t,index:0})}next(){rB(this);let t=t1.get(this);if(t.index>=t.values.length)return{value:void 0,done:!0};let r=t.values[t.index];return t.index+=1,{value:r,done:!1}}[To](t,r,n){if(rB(this),t<0)return"[Object]";let i=t1.get(this),s=typeof n=="function"?a=>n(a,r):a=>JSON.stringify(a),o=i.values.slice(i.index).map(a=>s(a));return`URLSearchParams Iterator ${TW(o,r,"{  }")}`}get[Ma](){return this!==NW.prototype&&rB(this),"URLSearchParams Iterator"}};Object.defineProperties(MA.prototype,{next:{value:MA.prototype.next,writable:!0,configurable:!0,enumerable:!0},[Symbol.iterator]:{value:function(){return rB(this),this},writable:!0,configurable:!0,enumerable:!1},[To]:{value:MA.prototype[To],writable:!0,configurable:!0,enumerable:!1},[Ma]:{get:Object.getOwnPropertyDescriptor(MA.prototype,Ma)?.get,configurable:!0,enumerable:!1}});Object.defineProperty(Object.getOwnPropertyDescriptor(MA.prototype,Symbol.iterator)?.value,"name",{value:"entries",configurable:!0});var Hr=class MW{constructor(t){RW.add(this);let r=$_e(t);if(r&&typeof r=="object"&&QB in r){$1.set(this,{getImpl:r[QB]});return}let n=eve(r);$1.set(this,{getImpl:()=>n})}append(t,r){if(yn(this),arguments.length<2)throw Ca('The "name" and "value" arguments must be specified');On(this).append(zt(t),zt(r))}delete(t){if(yn(this),arguments.length<1)throw Ca('The "name" argument must be specified');On(this).delete(zt(t))}get(t){if(yn(this),arguments.length<1)throw Ca('The "name" argument must be specified');return On(this).get(zt(t))}getAll(t){if(yn(this),arguments.length<1)throw Ca('The "name" argument must be specified');return On(this).getAll(zt(t))}has(t){if(yn(this),arguments.length<1)throw Ca('The "name" argument must be specified');return On(this).has(zt(t))}set(t,r){if(yn(this),arguments.length<2)throw Ca('The "name" and "value" arguments must be specified');On(this).set(zt(t),zt(r))}sort(){yn(this),On(this).sort()}entries(){return yn(this),new MA(Array.from(On(this)))}keys(){return yn(this),new MA(Array.from(On(this).keys()))}values(){return yn(this),new MA(Array.from(On(this).values()))}forEach(t,r){if(yn(this),typeof t!="function")throw OA('The "callback" argument must be of type function. Received '+(t===void 0?"undefined":typeof t),"ERR_INVALID_ARG_TYPE");for(let[n,i]of On(this))t.call(r,i,n,this)}toString(){return yn(this),On(this).toString()}get size(){return yn(this),K_e(On(this))}[To](t,r,n){if(yn(this),t<0)return"[Object]";let i=typeof n=="function"?o=>n(o,r):o=>JSON.stringify(o),s=Array.from(On(this)).map(([o,a])=>`${i(o)} => ${i(a)}`);return`URLSearchParams ${TW(s,r,"{}")}`}get[Ma](){return this!==MW.prototype&&yn(this),H_e}};for(let e of q_e)Object.defineProperty(Hr.prototype,e,{value:Hr.prototype[e],writable:!0,configurable:!0,enumerable:!0});for(let e of G_e)Object.defineProperty(Hr.prototype,e,{value:Hr.prototype[e],writable:!0,configurable:!0,enumerable:!0});for(let e of["sort","entries","forEach","keys","values","toString"])Object.defineProperty(Hr.prototype,e,{value:Hr.prototype[e],writable:!0,configurable:!0,enumerable:!0});Object.defineProperties(Hr.prototype,{size:{get:Object.getOwnPropertyDescriptor(Hr.prototype,"size")?.get,configurable:!0,enumerable:!0},[Symbol.iterator]:{value:Hr.prototype.entries,writable:!0,configurable:!0,enumerable:!1},[To]:{value:Hr.prototype[To],writable:!0,configurable:!0,enumerable:!1},[Ma]:{get:Object.getOwnPropertyDescriptor(Hr.prototype,Ma)?.get,configurable:!0,enumerable:!1}});function ive(e){if(typeof e!="function"||e.__secureExecBootstrapStub===!0)return!1;try{return String(new e("./child.mjs","file:///root/base/entry.mjs").href)==="file:///root/base/child.mjs"}catch{return!1}}function sve(e){return e.endsWith("/")?e:`${e}/`}function ove(e,t){let r=String(e??"");if(!r.startsWith("file:"))return{input:r,base:t};let n=/^file:(\.\.?(?:\/[^?#]*)?)([?#].*)?$/.exec(r);if(!n)return{input:r,base:t};let i=n[1],s=n[2]??"",o=typeof t>"u"?"file:///":String(t);try{let a=new globalThis.URL(o);if(a.protocol!=="file:")return{input:r,base:t};let A=a.pathname||"/";A.startsWith("/")||(A=`/${A}`);let f=A.endsWith("/")?A:qr.posix.dirname(A),l=qr.posix.resolve(f,i);return{input:`file://${i==="."||i===".."||i.endsWith("/")?sve(l):l}${s}`,base:void 0}}catch{return{input:r,base:t}}}var vG=typeof Cu?.URL=="function"?Cu.URL:typeof Cu?.default?.URL=="function"?Cu.default.URL:globalThis.URL,RG=ive(vG)?vG:class FW{constructor(t,r){let n=String(t??""),i=/^[a-zA-Z][a-zA-Z\d+\-.]*:/.test(n);if(!i&&typeof r>"u")throw new TypeError(`Invalid URL: ${n}`);let s=n;if(!i){let N=new FW(r);if(N.protocol==="file:"){let O=n.indexOf("?"),x=n.indexOf("#"),G=O===-1?n.length:O,Y=x===-1?n.length:x,X=Math.min(G,Y),Z=n.slice(0,X),j=n.slice(X),se=N.pathname||"/";se.startsWith("/")||(se=`/${se}`);let ie=se.endsWith("/")?se:qr.posix.dirname(se),ce=qr.posix.resolve(ie,Z);(Z.endsWith("/")||/(^|\/)\.\.?$/.test(Z))&&!ce.endsWith("/")&&(ce+="/"),s=`file://${ce}${j}`}else s=String(N.href).replace(/\/[^/]*$/,"/")+n}let o=s.indexOf("?"),a=s.indexOf("#"),A=o===-1?s.length:o,f=a===-1?s.length:a,l=Math.min(A,f),p=o===-1?"":s.slice(o,f),I=a===-1?"":s.slice(a);if(s.startsWith("file:")){let N=s.slice(5,l);N.startsWith("//")&&(N=/^\/\/[^/]*(.*)$/.exec(N)?.[1]||"/"),N.startsWith("/")||(N=`/${N}`),this.protocol="file:",this.hostname="",this.port="",this.pathname=N||"/",this.search=p,this.hash=I,this.host="",this.href=`file://${this.pathname}${this.search}${this.hash}`,this.origin="null",this.searchParams=new Hr(this.search);let O=()=>{let x=this.searchParams.toString();this.search=x?`?${x}`:"",this.href=`file://${this.pathname}${this.search}${this.hash}`};for(let x of["append","delete","set","sort"]){let G=this.searchParams[x]?.bind(this.searchParams);G&&(this.searchParams[x]=(...Y)=>{let X=G(...Y);return O(),X})}return}let S=s.match(/^(\w+:)\/\/([^/:?#]+)(:\d+)?(.*)$/);this.protocol=S?.[1]||"",this.hostname=S?.[2]||"",this.port=(S?.[3]||"").slice(1),this.pathname=(S?.[4]||"/").split("?")[0].split("#")[0]||"/",this.search=s.includes("?")?"?"+s.split("?")[1].split("#")[0]:"",this.hash=s.includes("#")?"#"+s.split("#")[1]:"",this.host=this.hostname+(this.port?":"+this.port:""),this.href=this.protocol+"//"+this.host+this.pathname+this.search+this.hash,this.origin=this.protocol+"//"+this.host,this.searchParams=new Hr(this.search);let _=()=>{let N=this.searchParams.toString();this.search=N?`?${N}`:"",this.href=this.protocol+"//"+this.host+this.pathname+this.search+this.hash};for(let N of["append","delete","set","sort"]){let O=this.searchParams[N]?.bind(this.searchParams);O&&(this.searchParams[N]=(...x)=>{let G=O(...x);return _(),G})}}toString(){return this.href}},Cn=(Ea=class{constructor(e,t){if(kq(this,Ot),kq(this,Ig),arguments.length<1)throw Ca('The "url" argument must be specified');let r=ove(zt(e),arguments.length>=2?zt(t):void 0);try{Uq(this,Ot,r.base!==void 0?new RG(r.input,r.base):new RG(r.input))}catch{throw W_e()}}static canParse(e,t){if(arguments.length<1)throw Ca('The "url" argument must be specified');try{return arguments.length>=2?new Ea(e,t):new Ea(e),!0}catch{return!1}}static createObjectURL(e){if(typeof Nl>"u"||!(e instanceof Nl))throw OA('The "obj" argument must be an instance of Blob. Received '+(e===null?"null":typeof e),"ERR_INVALID_ARG_TYPE");let t=`blob:nodedata:${nve()}`;return _G().set(t,e),t}static revokeObjectURL(e){if(arguments.length<1)throw Ca('The "url" argument must be specified');typeof e=="string"&&_G().delete(e)}get href(){if(!(this instanceof Ea))throw Om();return Vt(this,Ot).href}set href(e){Vt(this,Ot).href=zt(e)}get origin(){return Vt(this,Ot).origin}get protocol(){return Vt(this,Ot).protocol}set protocol(e){Vt(this,Ot).protocol=zt(e)}get username(){return Vt(this,Ot).username}set username(e){Vt(this,Ot).username=zt(e)}get password(){return Vt(this,Ot).password}set password(e){Vt(this,Ot).password=zt(e)}get host(){return Vt(this,Ot).host}set host(e){Vt(this,Ot).host=zt(e)}get hostname(){return Vt(this,Ot).hostname}set hostname(e){Vt(this,Ot).hostname=zt(e)}get port(){return Vt(this,Ot).port}set port(e){Vt(this,Ot).port=zt(e)}get pathname(){return Vt(this,Ot).pathname}set pathname(e){Vt(this,Ot).pathname=zt(e)}get search(){if(!(this instanceof Ea))throw Om();return Vt(this,Ot).search}set search(e){Vt(this,Ot).search=zt(e)}get searchParams(){return Vt(this,Ig)||Uq(this,Ig,new Hr({[QB]:()=>Vt(this,Ot).searchParams})),Vt(this,Ig)}get hash(){return Vt(this,Ot).hash}set hash(e){Vt(this,Ot).hash=zt(e)}toString(){if(!(this instanceof Ea))throw Om();return Vt(this,Ot).href}toJSON(){if(!(this instanceof Ea))throw Om();return Vt(this,Ot).href}[To](e,t,r){let n=this.constructor===Ea?"URL":this.constructor.name;if(e<0)return`${n} {}`;let i=typeof r=="function"?o=>r(o,t):o=>JSON.stringify(o),s=[`${n} {`,`  href: ${i(this.href)},`,`  origin: ${i(this.origin)},`,`  protocol: ${i(this.protocol)},`,`  username: ${i(this.username)},`,`  password: ${i(this.password)},`,`  host: ${i(this.host)},`,`  hostname: ${i(this.hostname)},`,`  port: ${i(this.port)},`,`  pathname: ${i(this.pathname)},`,`  search: ${i(this.search)},`,`  searchParams: ${this.searchParams[To](e-1,void 0,r)},`,`  hash: ${i(this.hash)}`];return t?.showHidden&&(s[s.length-1]+=",",s.push(`  [Symbol(context)]: ${rve(this,r,t)}`)),s.push("}"),s.join(`
-`)}get[Ma](){return"URL"}},Ot=new WeakMap,Ig=new WeakMap,Ea);for(let e of["toString","toJSON"])Object.defineProperty(Cn.prototype,e,{value:Cn.prototype[e],writable:!0,configurable:!0,enumerable:!0});for(let e of["href","protocol","username","password","host","hostname","port","pathname","search","hash","origin","searchParams"]){let t=Object.getOwnPropertyDescriptor(Cn.prototype,e);t&&(t.enumerable=!0,Object.defineProperty(Cn.prototype,e,t))}Object.defineProperties(Cn.prototype,{[To]:{value:Cn.prototype[To],writable:!0,configurable:!0,enumerable:!1},[Ma]:{get:Object.getOwnPropertyDescriptor(Cn.prototype,Ma)?.get,configurable:!0,enumerable:!1}});for(let e of["canParse","createObjectURL","revokeObjectURL"])Object.defineProperty(Cn,e,{value:Cn[e],writable:!0,configurable:!0,enumerable:!0});function ave(e=globalThis){Object.defineProperty(e,"URL",{value:Cn,writable:!0,configurable:!0,enumerable:!1}),Object.defineProperty(e,"URLSearchParams",{value:Hr,writable:!0,configurable:!0,enumerable:!1})}var y1,Ave=(y1=class{},y(y1,"builtinModules",["assert","async_hooks","buffer","child_process","console","cluster","constants","crypto","dgram","diagnostics_channel","domain","dns","dns/promises","events","fs","fs/promises","http","http2","https","inspector","module","net","os","path","path/posix","path/win32","perf_hooks","process","punycode","querystring","readline","repl","sqlite","stream","stream/consumers","stream/promises","stream/web","string_decoder","sys","timers","timers/promises","trace_events","tls","tty","url","util","util/types","v8","wasi","worker_threads","zlib","vm"]),y1),fve=Ave.builtinModules,uve={clearImmediate:globalThis.clearImmediate??function(){},clearInterval:globalThis.clearInterval??function(){},clearTimeout:globalThis.clearTimeout??function(){},setImmediate:globalThis.setImmediate??function(e,...t){return globalThis.setTimeout?.(()=>e(...t),0)},setInterval:globalThis.setInterval??function(e,t,...r){return globalThis.setTimeout?.(()=>e(...r),t??0)},setTimeout:globalThis.setTimeout??function(){}};function cve(e){return e&&typeof e=="object"&&e.default!=null?e.default:e}function Rs(e){let t=cve(e);return t==null||typeof t=="function"?t:typeof t=="object"?{...t}:t}function No(e,t,r){e!=null&&typeof e[t]>"u"&&(e[t]=r)}function lve(e){return typeof e=="string"&&e.length>1&&e.endsWith("/")?e.slice(0,-1):e}var kA=Rs(Fl);No(kA,"constants",dY);No(kA,"kMaxLength",ql);No(kA,"kStringMaxLength",Kg);No(kA,"Blob",globalThis.Blob);No(kA,"File",globalThis.File);var kW=Rs(vI),Ss=Rs(vCe),i1=null,DG=!1;function hve(){return DG||(DG=!0,i1=typeof Ss=="function"?Ss:Ss?.EventEmitter,typeof i1=="function"?(Object.assign(i1.prototype,Ql.EventEmitter.prototype),Object.assign(Ql.EventEmitter,Ss,Ql),Ss=Ql.EventEmitter,Ss.EventEmitter=Ss):Ss={...Ss,...Ql}),Ss}var qr=Rs(Ug);qr?.posix||(qr.posix=Rs(Ug?.posix??Ug?.default?.posix)??qr);qr?.win32||(qr.win32=Rs(Ug?.win32??Ug?.default?.win32)??qr);if(qr?.normalize){let e=qr.normalize.bind(qr);qr.normalize=function(t){return lve(e(t))}}var dve=Rs(RCe),gve=Rs(F0),jt=Rs(qt);typeof jt?.Stream=="function"&&(Object.assign(jt.Stream,jt),jt=jt.Stream,jt.Stream=jt,Object.defineProperty(jt,Symbol.hasInstance,{configurable:!0,value:t=>!t||typeof t!="object"&&typeof t!="function"?!1:typeof jt.Readable=="function"&&t instanceof jt.Readable||typeof jt.Writable=="function"&&t instanceof jt.Writable||typeof jt.Duplex=="function"&&t instanceof jt.Duplex||typeof jt.Transform=="function"&&t instanceof jt.Transform||typeof jt.PassThrough=="function"&&t instanceof jt.PassThrough}));function HB(e){!e||typeof e[Symbol.asyncIterator]=="function"||Object.defineProperty(e,Symbol.asyncIterator,{configurable:!0,value:function(){let t=this,r=[],n=[],i=!1,s=null,o=()=>{for(;n.length>0;){if(s){n.shift()(Promise.reject(s));continue}if(r.length>0){n.shift()(Promise.resolve({done:!1,value:r.shift()}));continue}if(i){n.shift()(Promise.resolve({done:!0,value:void 0}));continue}break}},a=l=>{r.push(l),o()},A=()=>{i=!0,o()},f=l=>{s=l,i=!0,o()};return t.on?.("data",a),t.on?.("end",A),t.on?.("close",A),t.on?.("error",f),t.resume?.(),{next(){return s?Promise.reject(s):r.length>0?Promise.resolve({done:!1,value:r.shift()}):i?Promise.resolve({done:!0,value:void 0}):new Promise(l=>{n.push(l)})},return(){return i=!0,t.off?.("data",a),t.off?.("end",A),t.off?.("close",A),t.off?.("error",f),o(),Promise.resolve({done:!0,value:void 0})},[Symbol.asyncIterator](){return this}}}})}HB(jt?.Readable?.prototype);HB(jt?.PassThrough?.prototype);HB(jt?.Transform?.prototype);HB(jt?.Duplex?.prototype);No(jt,"isReadable",e=>!!e&&e.readable!==!1&&e.destroyed!==!0);No(jt,"isErrored",e=>e?.errored!=null);No(jt,"isDisturbed",e=>!!(e?.locked||e?.disturbed===!0||e?.readableDidRead===!0));var pve=Rs(DCe),xi=Rs(Cu),TG=!1;function Eve(){return TG||(TG=!0,xi.URL=Cn,xi.URLSearchParams=Hr,xi.fileURLToPath=rY,xi.pathToFileURL=tY,xi?.default&&typeof xi.default=="object"&&(xi.default.URL=Cn,xi.default.URLSearchParams=Hr,xi.default.fileURLToPath=rY,xi.default.pathToFileURL=tY)),xi}function yve(e){return String(e).replace(/^node:/,"")}var UW=null;function xW(e){let t=yve(e),r=UW;if(Array.isArray(r)){let n=String(t??e).replace(/^node:/,"").split("/")[0];if(!r.includes(n))throw iu(e)}return t}et("__agentOSInitJsRuntime",function(e){UW=Array.isArray(e)?e.map(t=>String(t).replace(/^node:/,"").split("/")[0]):null});function mve(e){switch(xW(e)){case"assert":return globalThis.__secureExecBuiltinAssertModule;case"async_hooks":return CY;case"buffer":return No(kA,"Blob",globalThis.Blob),No(kA,"File",globalThis.File),kA;case"cluster":throw iu(e);case"crypto":return va;case"diagnostics_channel":return LQe;case"domain":throw iu(e);case"http":return _httpModule;case"http2":return _http2Module;case"events":return hve();case"fs":return _fsModule;case"fs/promises":return _fsModule.promises;case"os":return _osModule;case"path":return qr;case"path/posix":return qr.posix;case"path/win32":return qr.win32;case"perf_hooks":return VQe;case"process":return wV;case"punycode":return dve;case"querystring":return gve;case"readline":return{createInterface(r={}){let n=r.input??null,i=r.output??null,s=new Map,o=!1,a=!1,A="",f=[],l=null,p=[],I=new _u,S=(j,...se)=>{let ie=s.get(j)??[];for(let ce of[...ie])ce(...se)},_=j=>{if(p.length>0){p.shift()(j);return}if(l){let se=l;l=null,se({done:!1,value:j});return}f.push(j)},N=j=>{S("line",j),_(j)},O=()=>{let j=A.indexOf(`
-`);for(;j!==-1;){let se=A.slice(0,j);se.endsWith("\r")&&(se=se.slice(0,-1)),A=A.slice(j+1),N(se),j=A.indexOf(`
-`)}},x=()=>{!n||typeof n.off!="function"||(n.off("data",G),n.off("end",Y))},G=j=>{o||(typeof j=="string"?A+=j:j instanceof Uint8Array?A+=I.decode(j,{stream:!0}):j!=null&&(A+=String(j)),O())},Y=()=>{if(a)return;a=!0;let j=I.decode();j&&(A+=j),O(),A.length>0&&(N(A),A=""),Z.close()};n&&typeof n.on=="function"&&(n.on("data",G),n.on("end",Y),typeof n.resume=="function"&&n.resume());let X={next(){return f.length>0?Promise.resolve({done:!1,value:f.shift()}):o||a?Promise.resolve({done:!0,value:void 0}):new Promise(j=>{l=j})},return(){return Z.close(),Promise.resolve({done:!0,value:void 0})},[Symbol.asyncIterator](){return this}},Z={addListener(j,se){return this.on(j,se)},on(j,se){let ie=s.get(j)??[];return ie.push(se),s.set(j,ie),this},once(j,se){let ie=(...ce)=>{this.off(j,ie),se(...ce)};return this.on(j,ie)},off(j,se){let ie=s.get(j)??[];return s.set(j,ie.filter(ce=>ce!==se)),this},removeListener(j,se){return this.off(j,se)},close(){if(!o){for(o=!0,x();p.length>0;)p.shift()("");if(l){let j=l;l=null,j({done:!0,value:void 0})}S("close")}},question(j,se){i&&typeof i.write=="function"&&j&&i.write(String(j));let ie=()=>f.length>0?Promise.resolve(f.shift()):o||a?Promise.resolve(""):new Promise(ce=>{p.push(ce)});if(typeof se=="function"){ie().then(ce=>{se(ce)});return}return ie()},[Symbol.asyncIterator](){return X}};return Z}};case"repl":throw iu(e);case"stream":return jt;case"stream/consumers":return Xm;case"stream/promises":return vY;case"string_decoder":return pve;case"stream/web":return{ReadableStream:globalThis.ReadableStream,WritableStream:globalThis.WritableStream,TransformStream:globalThis.TransformStream,TextEncoderStream:globalThis.TextEncoderStream,TextDecoderStream:globalThis.TextDecoderStream,CompressionStream:globalThis.CompressionStream,DecompressionStream:globalThis.DecompressionStream};case"timers":return uve;case"timers/promises":return Jm;case"trace_events":throw iu(e);case"url":return Eve();case"sys":return Km(globalThis.__secureExecBuiltinUtilModule);case"util":return Km(globalThis.__secureExecBuiltinUtilModule);case"util/types":return Km(globalThis.__secureExecBuiltinUtilModule).types;case"child_process":return _childProcessModule;case"console":return vQe;case"constants":return kW;case"dns":return _dnsModule;case"dns/promises":return _dnsModule.promises;case"net":return _netModule;case"tls":return _tlsModule;case"tty":return kQe;case"dgram":return _dgramModule;case"sqlite":return _sqliteModule;case"https":return _httpsModule;case"inspector":throw iu(e);case"module":return _moduleModule;case"wasi":throw iu(e);case"zlib":return globalThis.__secureExecBuiltinZlibModule;case"v8":return $Qe;case"vm":return rwe;case"worker_threads":return TQe;default:{let r=new Error(`Cannot find module '${e}'`);throw r.code="MODULE_NOT_FOUND",r}}}function oR(e){let t=new Error(`${e} is not supported in sandbox`);return t.code="ERR_NOT_IMPLEMENTED",t}function lu(e){throw oR(`crypto.${e}`)}var Mg=Symbol("secureExecCryptoKey"),aR=Symbol("secureExecCrypto"),AR=Symbol("secureExecSubtle"),LW="ERR_INVALID_THIS",qB="ERR_ILLEGAL_CONSTRUCTOR";function Yl(e,t){let r=new TypeError(e);return r.code=t,r}var Bve=class extends Error{constructor(e="",t="Error"){super(e),this.name=String(t),this.code=0}};function NG(e,t,r){let n=new Error(r);return n.name=e,n.code=t,n}function s1(e){if(!(e instanceof uR)||e._token!==aR)throw Yl('Value of "this" must be of type Crypto',LW)}function Li(e){if(!(e instanceof fR)||e._token!==AR)throw Yl('Value of "this" must be of type SubtleCrypto',LW)}function Ive(e){return!ArrayBuffer.isView(e)||e instanceof DataView?!1:e instanceof Int8Array||e instanceof Int16Array||e instanceof Int32Array||e instanceof Uint8Array||e instanceof Uint16Array||e instanceof Uint32Array||e instanceof Uint8ClampedArray||e instanceof BigInt64Array||e instanceof BigUint64Array||Se.Buffer.isBuffer(e)}function Gn(e){return typeof e=="string"?Se.Buffer.from(e).toString("base64"):e instanceof ArrayBuffer?Se.Buffer.from(new Uint8Array(e)).toString("base64"):ArrayBuffer.isView(e)?Se.Buffer.from(new Uint8Array(e.buffer,e.byteOffset,e.byteLength)).toString("base64"):Se.Buffer.from(e).toString("base64")}function nu(e){let t=Se.Buffer.from(e,"base64");return t.buffer.slice(t.byteOffset,t.byteOffset+t.byteLength)}function e2(e){return typeof e=="string"?{name:e}:e??{}}function Pi(e){let t={...e2(e)},r=t.hash,n=t.publicExponent,i=t.iv,s=t.additionalData,o=t.salt,a=t.info,A=t.context,f=t.label,l=t.public;return r&&(t.hash=e2(r)),n&&ArrayBuffer.isView(n)&&(t.publicExponent=Se.Buffer.from(new Uint8Array(n.buffer,n.byteOffset,n.byteLength)).toString("base64")),i&&(t.iv=Gn(i)),s&&(t.additionalData=Gn(s)),o&&(t.salt=Gn(o)),a&&(t.info=Gn(a)),A&&(t.context=Gn(A)),f&&(t.label=Gn(f)),l&&typeof l=="object"&&"_keyData"in l&&(t.public=l._keyData),t}var nY,Gg=(nY=Mg,class{constructor(e,t){y(this,"type");y(this,"extractable");y(this,"algorithm");y(this,"usages");y(this,"_keyData");y(this,"_pem");y(this,"_jwk");y(this,"_raw");y(this,"_sourceKeyObjectData");y(this,nY);if(t!==Mg||!e)throw Yl("Illegal constructor",qB);this.type=e.type,this.extractable=e.extractable,this.algorithm=e.algorithm,this.usages=e.usages,this._keyData=e,this._pem=e._pem,this._jwk=e._jwk,this._raw=e._raw,this._sourceKeyObjectData=e._sourceKeyObjectData,this[Mg]=!0}});Object.defineProperty(Gg.prototype,Symbol.toStringTag,{value:"CryptoKey",configurable:!0});Object.defineProperty(Gg,Symbol.hasInstance,{value(e){return!!(e&&typeof e=="object"&&(e[Mg]===!0||"_keyData"in e&&e[Symbol.toStringTag]==="CryptoKey"))},configurable:!0});function bl(e){let t=globalThis.CryptoKey;if(typeof t=="function"&&t.prototype&&t.prototype!==Gg.prototype){let r=Object.create(t.prototype);return r.type=e.type,r.extractable=e.extractable,r.algorithm=e.algorithm,r.usages=e.usages,r._keyData=e,r._pem=e._pem,r._jwk=e._jwk,r._raw=e._raw,r._sourceKeyObjectData=e._sourceKeyObjectData,r}return new Gg(e,Mg)}function Oi(e){if(typeof _cryptoSubtle>"u")throw new Error("crypto.subtle is not supported in sandbox");return _cryptoSubtle.applySync(void 0,[JSON.stringify(e)])}var fR=class{constructor(e){y(this,"_token");if(e!==AR)throw Yl("Illegal constructor",qB);this._token=e}digest(e,t){return Li(this),Promise.resolve().then(()=>{let r=JSON.parse(Oi({op:"digest",algorithm:e2(e).name,data:Gn(t)}));return nu(r.data)})}generateKey(e,t,r){return Li(this),Promise.resolve().then(()=>{let n=JSON.parse(Oi({op:"generateKey",algorithm:Pi(e),extractable:t,usages:Array.from(r)}));return"publicKey"in n&&"privateKey"in n?{publicKey:bl(n.publicKey),privateKey:bl(n.privateKey)}:bl(n.key)})}importKey(e,t,r,n,i){return Li(this),Promise.resolve().then(()=>{let s=JSON.parse(Oi({op:"importKey",format:e,keyData:e==="jwk"?t:Gn(t),algorithm:Pi(r),extractable:n,usages:Array.from(i)}));return bl(s.key)})}exportKey(e,t){return Li(this),Promise.resolve().then(()=>{let r=JSON.parse(Oi({op:"exportKey",format:e,key:t._keyData}));return e==="jwk"?r.jwk:nu(r.data??"")})}encrypt(e,t,r){return Li(this),Promise.resolve().then(()=>{let n=JSON.parse(Oi({op:"encrypt",algorithm:Pi(e),key:t._keyData,data:Gn(r)}));return nu(n.data)})}decrypt(e,t,r){return Li(this),Promise.resolve().then(()=>{let n=JSON.parse(Oi({op:"decrypt",algorithm:Pi(e),key:t._keyData,data:Gn(r)}));return nu(n.data)})}sign(e,t,r){return Li(this),Promise.resolve().then(()=>{let n=JSON.parse(Oi({op:"sign",algorithm:Pi(e),key:t._keyData,data:Gn(r)}));return nu(n.data)})}verify(e,t,r,n){return Li(this),Promise.resolve().then(()=>JSON.parse(Oi({op:"verify",algorithm:Pi(e),key:t._keyData,signature:Gn(r),data:Gn(n)})).result)}deriveBits(e,t,r){return Li(this),Promise.resolve().then(()=>{let n=JSON.parse(Oi({op:"deriveBits",algorithm:Pi(e),baseKey:t._keyData,length:r}));return nu(n.data)})}deriveKey(e,t,r,n,i){return Li(this),Promise.resolve().then(()=>{let s=JSON.parse(Oi({op:"deriveKey",algorithm:Pi(e),baseKey:t._keyData,derivedKeyAlgorithm:Pi(r),extractable:n,usages:Array.from(i)}));return bl(s.key)})}wrapKey(e,t,r,n){return Li(this),Promise.resolve().then(()=>{let i=JSON.parse(Oi({op:"wrapKey",format:e,key:t._keyData,wrappingKey:r._keyData,wrapAlgorithm:Pi(n)}));return nu(i.data)})}unwrapKey(e,t,r,n,i,s,o){return Li(this),Promise.resolve().then(()=>{let a=JSON.parse(Oi({op:"unwrapKey",format:e,wrappedKey:Gn(t),unwrappingKey:r._keyData,unwrapAlgorithm:Pi(n),unwrappedKeyAlgorithm:Pi(i),extractable:s,usages:Array.from(o)}));return bl(a.key)})}},PW=new fR(AR),uR=class{constructor(e){y(this,"_token");if(e!==aR)throw Yl("Illegal constructor",qB);this._token=e}get subtle(){return s1(this),PW}getRandomValues(e){if(s1(this),!Ive(e))throw NG("TypeMismatchError",17,"The data argument must be an integer-type TypedArray");if(typeof _cryptoRandomFill>"u"&&lu("getRandomValues"),e.byteLength>65536)throw NG("QuotaExceededError",22,`The ArrayBufferView's byte length (${e.byteLength}) exceeds the number of bytes of entropy available via this API (65536)`);let t=new Uint8Array(e.buffer,e.byteOffset,e.byteLength);try{let r=_cryptoRandomFill.applySync(void 0,[t.byteLength]),n=Se.Buffer.from(r,"base64");if(n.byteLength!==t.byteLength)throw new Error("invalid host entropy size");return t.set(n),e}catch{lu("getRandomValues")}}randomUUID(){s1(this),typeof _cryptoRandomUUID>"u"&&lu("randomUUID");try{let e=_cryptoRandomUUID.applySync(void 0,[]);if(typeof e!="string")throw new Error("invalid host uuid");return e}catch{lu("randomUUID")}}},bve=new uR(aR),_l=bve;function Cve(e){let t=[];return{update(r,n){let i=typeof r=="string"?Se.Buffer.from(r,n||"utf8"):Se.Buffer.from(r);return t.push(i),this},digest(r){typeof _cryptoHashDigest>"u"&&lu("createHash");let n=t.length===1?t[0]:Se.Buffer.concat(t),i=_cryptoHashDigest.applySync(void 0,[String(e),n.toString("base64")]),s=Se.Buffer.from(String(i||""),"base64");return r?s.toString(r):s}}}function OW(e){if(Wl(e)){if(e.type!=="secret")throw new TypeError("Symmetric crypto operations require a secret KeyObject");return Se.Buffer.from(String(e._serialized.raw||""),"base64")}return e&&typeof e=="object"&&e[Symbol.toStringTag]==="CryptoKey"&&typeof e._raw=="string"?Se.Buffer.from(String(e._raw||""),"base64"):typeof e=="string"?Se.Buffer.from(e):Rt(e)}function Qve(e,t){let r=[],n=OW(t);return{update(i,s){let o=typeof i=="string"?Se.Buffer.from(i,s||"utf8"):Se.Buffer.from(i);return r.push(o),this},digest(i){typeof _cryptoHmacDigest>"u"&&lu("createHmac");let s=r.length===1?r[0]:Se.Buffer.concat(r),o=_cryptoHmacDigest.applySync(void 0,[String(e),n.toString("base64"),s.toString("base64")]),a=Se.Buffer.from(String(o||""),"base64");return i?a.toString(i):a}}}var Fg=Symbol("secureExecBuiltinKeyObject");function t2(e){return Se.Buffer.isBuffer(e)||e instanceof ArrayBuffer||ArrayBuffer.isView(e)}function Rt(e,t=void 0){return Se.Buffer.isBuffer(e)?Se.Buffer.from(e):typeof e=="string"?Se.Buffer.from(e,t||"utf8"):e instanceof ArrayBuffer?Se.Buffer.from(new Uint8Array(e)):ArrayBuffer.isView(e)?Se.Buffer.from(new Uint8Array(e.buffer,e.byteOffset,e.byteLength)):Se.Buffer.from(e??[])}function Qa(e,t=void 0){return t?e.toString(t):e}function Wl(e){return!!(e&&typeof e=="object"&&(e[Fg]===!0||e[Symbol.toStringTag]==="KeyObject"&&"_serialized"in e))}function vs(e){if(Wl(e))return e._serialized;if(e&&typeof e=="object"&&e[Symbol.toStringTag]==="CryptoKey"&&"_keyData"in e)return e._keyData;if(typeof e=="bigint")return{__type:"bigint",value:e.toString()};if(t2(e))return{__type:"buffer",value:Rt(e).toString("base64")};if(Array.isArray(e))return e.map(t=>vs(t));if(e&&typeof e=="object"){let t={};for(let[r,n]of Object.entries(e))n!==void 0&&(t[r]=vs(n));return t}return e}function Yg(e){if(Array.isArray(e))return e.map(r=>Yg(r));if(!e||typeof e!="object")return e;if(e.__type==="buffer")return Se.Buffer.from(String(e.value||""),"base64");if(e.__type==="bigint")return BigInt(String(e.value||"0"));if(e.__type==="keyObject")return Rl(e.value);let t={};for(let[r,n]of Object.entries(e))t[r]=Yg(n);return t}function HW(e){if(Wl(e))return e._serialized;if(e&&typeof e=="object"&&e[Symbol.toStringTag]==="CryptoKey"&&"_keyData"in e)return e._keyData;if(e&&typeof e=="object"&&!Array.isArray(e)&&"key"in e){let{key:t,...r}=e,n=HW(t);return n&&typeof n=="object"&&!Array.isArray(n)&&"type"in n&&("pem"in n||"raw"in n)?{...n,...Object.fromEntries(Object.entries(r).map(([i,s])=>[i,vs(s)]))}:{...Object.fromEntries(Object.entries(r).map(([i,s])=>[i,vs(s)])),key:vs(t)}}return vs(e)}function RA(e){return JSON.stringify(HW(e))}function o1(e){return JSON.stringify({hasOptions:e!==void 0,options:e===void 0?null:vs(e)})}function qW(e){return e==null?null:typeof e=="string"?e:typeof e=="object"&&e&&typeof e.name=="string"?e.name:String(e)}function pr(e,t,r){return typeof e>"u"&&lu(t),e.applySync(void 0,r)}function MG(e){return e&&typeof e=="object"&&e.kind==="buffer"?Se.Buffer.from(String(e.value||""),"base64"):e&&typeof e=="object"&&e.kind==="string"?String(e.value||""):Rl(e)}var iY,GB=(iY=Fg,class{constructor(e,t){y(this,"type");y(this,"asymmetricKeyType");y(this,"asymmetricKeyDetails");y(this,"symmetricKeySize");y(this,"_serialized");y(this,iY);if(t!==Fg||!e||typeof e!="object")throw Yl("Illegal constructor",qB);this.type=e.type,this.asymmetricKeyType=e.asymmetricKeyType,this.asymmetricKeyDetails=e.asymmetricKeyDetails,this.symmetricKeySize=e.raw?Se.Buffer.from(String(e.raw),"base64").length:void 0,this._serialized=e,this[Fg]=!0}export(e=void 0){if(this.type==="secret")return e&&e.format==="jwk"&&this._serialized.jwk?{...this._serialized.jwk}:Se.Buffer.from(String(this._serialized.raw||""),"base64");if(e==null||typeof e!="object"){let t=new TypeError('The "options" argument must be of type object. Received undefined');throw t.code="ERR_INVALID_ARG_TYPE",t}if(e.format==="jwk"&&this._serialized.jwk)return{...this._serialized.jwk};if(e.format&&e.format!=="pem")throw oR(`crypto.KeyObject.export(${e.format})`);return String(this._serialized.pem||"")}equals(e){return Wl(e)&&JSON.stringify(this._serialized)===JSON.stringify(e._serialized)}});Object.defineProperty(GB.prototype,Symbol.toStringTag,{value:"KeyObject",configurable:!0});Object.defineProperty(GB,Symbol.hasInstance,{value(e){return Wl(e)},configurable:!0});function Rl(e){return Wl(e)?e:new GB(e,Fg)}function wve(e){if(!e||typeof e!="object")return{};let t={};return"aad"in e&&e.aad!=null&&(t.aad=Rt(e.aad).toString("base64")),"authTag"in e&&e.authTag!=null&&(t.authTag=Rt(e.authTag).toString("base64")),"authTagLength"in e&&e.authTagLength!=null&&(t.authTagLength=Number(e.authTagLength)),"autoPadding"in e&&(t.autoPadding=!!e.autoPadding),t}var FG=class{constructor(e,t,r,n,i=void 0){y(this,"_mode");y(this,"_algorithm");y(this,"_key");y(this,"_iv");y(this,"_options");y(this,"_sessionId");y(this,"_authTag");this._mode=e,this._algorithm=String(t),this._key=OW(r),this._iv=n==null?null:Rt(n),this._options=wve(i),this._sessionId=null,this._authTag=null}_ensureSession(){return this._sessionId!=null?this._sessionId:(this._sessionId=Number(pr(_cryptoCipherivCreate,this._mode==="cipher"?"createCipheriv":"createDecipheriv",[this._mode,this._algorithm,this._key.toString("base64"),this._iv?this._iv.toString("base64"):null,Object.keys(this._options).length>0?JSON.stringify(this._options):null])),this._sessionId)}_assertMutable(e){if(this._sessionId!=null)throw oR(`crypto.${e} after update()`)}update(e,t=void 0,r=void 0){let n=Rt(e,t),i=pr(_cryptoCipherivUpdate,this._mode==="cipher"?"createCipheriv":"createDecipheriv",[this._ensureSession(),n.toString("base64")]);return Qa(Se.Buffer.from(String(i||""),"base64"),r)}final(e=void 0){let t=JSON.parse(String(pr(_cryptoCipherivFinal,this._mode==="cipher"?"createCipheriv":"createDecipheriv",[this._ensureSession()])||"{}"));return t.authTag&&(this._authTag=Se.Buffer.from(String(t.authTag),"base64")),Qa(Se.Buffer.from(String(t.data||""),"base64"),e)}setAAD(e,t=void 0){return this._assertMutable(this._mode==="cipher"?"createCipheriv":"createDecipheriv"),this._options.aad=Rt(e).toString("base64"),t&&typeof t=="object"&&t.authTagLength!=null&&(this._options.authTagLength=Number(t.authTagLength)),this}setAuthTag(e){return this._assertMutable("createDecipheriv"),this._authTag=Rt(e),this._options.authTag=this._authTag.toString("base64"),this}getAuthTag(){if(!this._authTag)throw new Error("Invalid state for operation getAuthTag");return Se.Buffer.from(this._authTag)}setAutoPadding(e=!0){return this._assertMutable(this._mode==="cipher"?"createCipheriv":"createDecipheriv"),this._options.autoPadding=!!e,this}},r2=class{constructor(e){y(this,"_algorithm");y(this,"_chunks");this._algorithm=e,this._chunks=[]}update(e,t=void 0){return this._chunks.push(Rt(e,t)),this}write(e,t=void 0){return this.update(e,t),!0}end(e=void 0,t=void 0){return e!==void 0&&this.update(e,t),this}_inputBuffer(){return this._chunks.length===0?Se.Buffer.alloc(0):this._chunks.length===1?this._chunks[0]:Se.Buffer.concat(this._chunks)}sign(e,t=void 0){let r=pr(_cryptoSign,"sign",[qW(this._algorithm),this._inputBuffer().toString("base64"),RA(e)]);return Qa(Se.Buffer.from(String(r||""),"base64"),t)}},kG=class extends r2{verify(e,t,r=void 0){let n=Rt(t,r);return!!pr(_cryptoVerify,"verify",[qW(this._algorithm),this._inputBuffer().toString("base64"),RA(e),n.toString("base64")])}};function Sve(e,t=void 0,r=void 0,n=void 0){let i=[];return typeof e=="string"?(i.push(Rt(e,typeof t=="string"?t:void 0)),r!==void 0?i.push(typeof r=="string"?Rt(r,typeof n=="string"?n:void 0):r):(typeof t=="number"||t2(t))&&i.push(t),i):(i.push(e),r!==void 0?i.push(r):(typeof t=="number"||t2(t))&&i.push(t),i)}var UG=typeof FinalizationRegistry=="function"?new FinalizationRegistry(e=>{try{pr(_cryptoDiffieHellmanSessionDestroy,"createDiffieHellman",[e])}catch{}}):null,bg=class{constructor(e){y(this,"_sessionId");this._sessionId=Number(pr(_cryptoDiffieHellmanSessionCreate,"createDiffieHellman",[JSON.stringify({type:e.type,name:e.name,args:(e.args||[]).map(t=>vs(t))})])),UG?.register(this,this._sessionId,this)}_destroySession(){if(this._sessionId==null)return;let e=this._sessionId;this._sessionId=null,UG?.unregister(this),pr(_cryptoDiffieHellmanSessionDestroy,"createDiffieHellman",[e])}dispose(){this._destroySession()}[Symbol.dispose||Symbol.for("Symbol.dispose")](){this._destroySession()}_call(e,t=[]){if(this._sessionId==null)throw new Error("Diffie-Hellman session has been destroyed");let r=JSON.parse(String(pr(_cryptoDiffieHellmanSessionCall,"createDiffieHellman",[this._sessionId,JSON.stringify({method:e,args:t.map(n=>vs(n))})])||"{}"));return r.hasResult?Yg(r.result):void 0}get verifyError(){let e=this._call("verifyError");return e==null?0:Number(e)}generateKeys(e=void 0){return Qa(Rt(this._call("generateKeys")),e)}computeSecret(e,t=void 0,r=void 0){let n=this._call("computeSecret",[Rt(e,t)]);return Qa(Rt(n),r)}getPrime(e=void 0){return Qa(Rt(this._call("getPrime")),e)}getGenerator(e=void 0){return Qa(Rt(this._call("getGenerator")),e)}getPublicKey(e=void 0){return Qa(Rt(this._call("getPublicKey")),e)}getPrivateKey(e=void 0){return Qa(Rt(this._call("getPrivateKey")),e)}setPrivateKey(e,t=void 0){this._call("setPrivateKey",[Rt(e,t)])}setPublicKey(e,t=void 0){this._call("setPublicKey",[Rt(e,t)])}},va={KeyObject:GB,DiffieHellman:bg,ECDH:bg,randomFillSync(e,t=0,r=void 0){let n=e instanceof ArrayBuffer?new Uint8Array(e):e;if(!ArrayBuffer.isView(n))throw new TypeError('The "buffer" argument must be an instance of ArrayBuffer, Buffer, TypedArray, or DataView');let i=Number(t)||0;if(!Number.isInteger(i)||i<0||i>n.byteLength)throw new RangeError('The value of "offset" is out of range');let s=r===void 0?n.byteLength-i:Number(r);if(!Number.isInteger(s)||s<0||i+s>n.byteLength)throw new RangeError('The value of "size" is out of range');let o=new Uint8Array(n.buffer,n.byteOffset+i,s);return _l.getRandomValues(o),e},randomFill(e,t,r,n){let i=t,s=r,o=n;if(typeof i=="function"?(o=i,i=0,s=void 0):typeof s=="function"&&(o=s,s=void 0),typeof o!="function")throw new TypeError('The "callback" argument must be of type function');try{let a=va.randomFillSync(e,i,s);queueMicrotask(()=>o(null,a))}catch(a){queueMicrotask(()=>o(a))}},createHash(e){return Cve(e)},createHmac(e,t){return Qve(e,t)},createCipheriv(e,t,r,n=void 0){return new FG("cipher",e,t,r,n)},createDecipheriv(e,t,r,n=void 0){return new FG("decipher",e,t,r,n)},createSign(e){return new r2(e)},createVerify(e){return new kG(e)},sign(e,t,r){let n=new r2(e);return n.update(t),n.sign(r)},verify(e,t,r,n){let i=new kG(e);return i.update(t),i.verify(r,n)},createPrivateKey(e){let t=pr(_cryptoCreateKeyObject,"createPrivateKey",["createPrivateKey",RA(e)]);return Rl(JSON.parse(String(t||"{}")))},createPublicKey(e){let t=pr(_cryptoCreateKeyObject,"createPublicKey",["createPublicKey",RA(e)]);return Rl(JSON.parse(String(t||"{}")))},createSecretKey(e){return Rl({type:"secret",raw:Rt(e).toString("base64")})},publicEncrypt(e,t){let r=pr(_cryptoAsymmetricOp,"publicEncrypt",["publicEncrypt",RA(e),Rt(t).toString("base64")]);return Se.Buffer.from(String(r||""),"base64")},publicDecrypt(e,t){let r=pr(_cryptoAsymmetricOp,"publicDecrypt",["publicDecrypt",RA(e),Rt(t).toString("base64")]);return Se.Buffer.from(String(r||""),"base64")},privateEncrypt(e,t){let r=pr(_cryptoAsymmetricOp,"privateEncrypt",["privateEncrypt",RA(e),Rt(t).toString("base64")]);return Se.Buffer.from(String(r||""),"base64")},privateDecrypt(e,t){let r=pr(_cryptoAsymmetricOp,"privateDecrypt",["privateDecrypt",RA(e),Rt(t).toString("base64")]);return Se.Buffer.from(String(r||""),"base64")},pbkdf2Sync(e,t,r,n,i){let s=pr(_cryptoPbkdf2,"pbkdf2Sync",[Rt(e).toString("base64"),Rt(t).toString("base64"),Number(r),Number(n),String(i)]);return Se.Buffer.from(String(s||""),"base64")},pbkdf2(e,t,r,n,i,s){let o=i,a=s;if(typeof o=="function"&&(a=o,o="sha1"),typeof a!="function")throw new TypeError('The "callback" argument must be of type function');queueMicrotask(()=>{try{a(null,va.pbkdf2Sync(e,t,r,n,o))}catch(A){a(A)}})},scryptSync(e,t,r,n=void 0){let i=pr(_cryptoScrypt,"scryptSync",[Rt(e).toString("base64"),Rt(t).toString("base64"),Number(r),JSON.stringify(vs(n||{}))]);return Se.Buffer.from(String(i||""),"base64")},scrypt(e,t,r,n,i){let s=n,o=i;if(typeof s=="function"&&(o=s,s=void 0),typeof o!="function")throw new TypeError('The "callback" argument must be of type function');queueMicrotask(()=>{try{o(null,va.scryptSync(e,t,r,s))}catch(a){o(a)}})},generateKeyPairSync(e,t=void 0){let r=JSON.parse(String(pr(_cryptoGenerateKeyPairSync,"generateKeyPairSync",[String(e),o1(t)])||"{}"));return{publicKey:MG(r.publicKey),privateKey:MG(r.privateKey)}},generateKeyPair(e,t,r){let n=t,i=r;if(typeof n=="function"&&(i=n,n=void 0),typeof i!="function")throw new TypeError('The "callback" argument must be of type function');queueMicrotask(()=>{try{let s=va.generateKeyPairSync(e,n);i(null,s.publicKey,s.privateKey)}catch(s){i(s)}})},generateKeySync(e,t=void 0){let r=JSON.parse(String(pr(_cryptoGenerateKeySync,"generateKeySync",[String(e),o1(t)])||"{}"));return Rl(r)},generatePrimeSync(e,t=void 0){let r=JSON.parse(String(pr(_cryptoGeneratePrimeSync,"generatePrimeSync",[Number(e),o1(t)])||"null"));return Yg(r)},generatePrime(e,t,r){let n=t,i=r;if(typeof n=="function"&&(i=n,n=void 0),typeof i!="function")throw new TypeError('The "callback" argument must be of type function');queueMicrotask(()=>{try{i(null,va.generatePrimeSync(e,n))}catch(s){i(s)}})},diffieHellman(e){let t=JSON.parse(String(pr(_cryptoDiffieHellman,"diffieHellman",[JSON.stringify(vs(e))])||"null"));return Rt(Yg(t))},getDiffieHellman(e){return new bg({type:"group",name:String(e)})},createDiffieHellman(e,t=void 0,r=void 0,n=void 0){return new bg({type:"dh",args:Sve(e,t,r,n)})},createECDH(e){return new bg({type:"ecdh",name:String(e)})},getFips(){return 0},getHashes(){return["md5","sha1","sha224","sha256","sha384","sha512"]},getCiphers(){return["aes-128-cbc","aes-128-ctr","aes-128-gcm","aes-192-cbc","aes-192-ctr","aes-192-gcm","aes-256-cbc","aes-256-ctr","aes-256-gcm","aes128","aes192","aes256"]},getCurves(){return["prime256v1","secp256k1","secp384r1","secp521r1"]},getRandomValues(e){return _l.getRandomValues(e)},randomBytes(e){let t=Math.max(0,Number(e)||0),r=new Uint8Array(t);return _l.getRandomValues(r),Se.Buffer.from(r)},randomUUID(){return _l.randomUUID()},get constants(){return kW},subtle:PW,webcrypto:_l},Dt=v2(R2(),1),n2=0,su=1,ya=2,Hn=64,ma=128,ou=512,au=1024,hu=class{constructor(e){y(this,"dev");y(this,"ino");y(this,"mode");y(this,"nlink");y(this,"uid");y(this,"gid");y(this,"rdev");y(this,"size");y(this,"blksize");y(this,"blocks");y(this,"atimeMs");y(this,"mtimeMs");y(this,"ctimeMs");y(this,"birthtimeMs");y(this,"atime");y(this,"mtime");y(this,"ctime");y(this,"birthtime");this.dev=e.dev??0,this.ino=e.ino??0,this.mode=e.mode,this.nlink=e.nlink??1,this.uid=e.uid??0,this.gid=e.gid??0,this.rdev=e.rdev??0,this.size=e.size,this.blksize=e.blksize??4096,this.blocks=e.blocks??Math.ceil(e.size/512);let t=e.atimeMs??Date.now(),r=e.mtimeMs??Date.now(),n=e.ctimeMs??Date.now();this.atimeMs=t+(e.atimeNsec??0)%1e6/1e6,this.mtimeMs=r+(e.mtimeNsec??0)%1e6/1e6,this.ctimeMs=n+(e.ctimeNsec??0)%1e6/1e6,this.birthtimeMs=e.birthtimeMs??Date.now(),this.atime=new Date(this.atimeMs),this.mtime=new Date(this.mtimeMs),this.ctime=new Date(this.ctimeMs),this.birthtime=new Date(this.birthtimeMs)}isFile(){return(this.mode&61440)===32768}isDirectory(){return(this.mode&61440)===16384}isSymbolicLink(){return(this.mode&61440)===40960}isBlockDevice(){return!1}isCharacterDevice(){return!1}isFIFO(){return!1}isSocket(){return!1}},i2=class{constructor(e,t,r=""){y(this,"name");y(this,"parentPath");y(this,"path");y(this,"_isDir");this.name=e,this._isDir=t,this.parentPath=r,this.path=r}isFile(){return!this._isDir}isDirectory(){return this._isDir}isSymbolicLink(){return!1}isBlockDevice(){return!1}isCharacterDevice(){return!1}isFIFO(){return!1}isSocket(){return!1}},xG=class{constructor(e){y(this,"path");y(this,"_entries",null);y(this,"_index",0);y(this,"_closed",!1);this.path=e}_load(){return this._entries===null&&(this._entries=$.readdirSync(this.path,{withFileTypes:!0})),this._entries}readSync(){if(this._closed)throw new Error("Directory handle was closed");let e=this._load();return this._index>=e.length?null:e[this._index++]}async read(){return this.readSync()}closeSync(){this._closed=!0}async close(){this.closeSync()}async*[Symbol.asyncIterator](){let e=this._load();for(let t of e){if(this._closed)return;yield t}this._closed=!0}},s2=64*1024,_ve=16*1024,LG=2**31-1;function GW(e){let t=new Error("The operation was aborted");return t.name="AbortError",t.code="ABORT_ERR",e!==void 0&&(t.cause=e),t}function o2(e){if(e!==void 0){if(e===null||typeof e!="object"||typeof e.aborted!="boolean"||typeof e.addEventListener!="function"||typeof e.removeEventListener!="function"){let t=new TypeError('The "signal" argument must be an instance of AbortSignal');throw t.code="ERR_INVALID_ARG_TYPE",t}return e}}function Sg(e){if(e?.aborted)throw GW(e.reason)}function Hm(){return new Promise(e=>process.nextTick(e))}function vve(e){let t=new Error(e);return t.code="ERR_INTERNAL_ASSERTION",t}function Na(e,t,r){let n=new RangeError(`The value of "${e}" is out of range. It must be ${t}. Received ${String(r)}`);return n.code="ERR_OUT_OF_RANGE",n}function YW(e){if(e===null)return"Received null";if(e===void 0)return"Received undefined";if(typeof e=="string")return`Received type string ('${e}')`;if(typeof e=="number")return`Received type number (${String(e)})`;if(typeof e=="boolean")return`Received type boolean (${String(e)})`;if(typeof e=="bigint")return`Received type bigint (${e.toString()}n)`;if(typeof e=="symbol")return`Received type symbol (${String(e)})`;if(typeof e=="function")return e.name?`Received function ${e.name}`:"Received function";if(Array.isArray(e))return"Received an instance of Array";if(e&&typeof e=="object"){let t=e.constructor?.name;if(t)return`Received an instance of ${t}`}return`Received type ${typeof e} (${String(e)})`}function It(e,t,r){let n=new TypeError(`The "${e}" argument must be ${t}. ${YW(r)}`);return n.code="ERR_INVALID_ARG_TYPE",n}function WW(e,t){let r=new TypeError(`The argument '${e}' ${t}`);return r.code="ERR_INVALID_ARG_VALUE",r}function Rve(e){let t=typeof e=="string"?`'${e}'`:e===void 0?"undefined":e===null?"null":String(e),r=new TypeError(`The argument 'encoding' is invalid encoding. Received ${t}`);return r.code="ERR_INVALID_ARG_VALUE",r}function a1(e,t){if(typeof e=="string")return Dt.Buffer.from(e,t??"utf8");if(Dt.Buffer.isBuffer(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);if(e instanceof Uint8Array)return e;if(ArrayBuffer.isView(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);throw It("data","a string, Buffer, TypedArray, or DataView",e)}async function*Dve(e,t){if(typeof e=="string"||ArrayBuffer.isView(e)){yield a1(e,t);return}if(e&&typeof e[Symbol.asyncIterator]=="function"){for await(let r of e)yield a1(r,t);return}if(e&&typeof e[Symbol.iterator]=="function"){for(let r of e)yield a1(r,t);return}throw It("data","a string, Buffer, TypedArray, DataView, or Iterable",e)}var du=class mn{constructor(t){y(this,"_fd");y(this,"_closing",!1);y(this,"_closed",!1);y(this,"_listeners",new Map);this._fd=t}static _assertHandle(t){if(!(t instanceof mn))throw vve("handle must be an instance of FileHandle");return t}_emitCloseOnce(){if(this._closed){this._fd=-1,this.emit("close");return}this._closed=!0,this._fd=-1,this.emit("close")}_resolvePath(){return this._fd<0?null:FA.applySync(void 0,[this._fd])}get fd(){return this._fd}get closed(){return this._closed}on(t,r){let n=this._listeners.get(t)??[];return n.push(r),this._listeners.set(t,n),this}once(t,r){let n=(...i)=>{this.off(t,n),r(...i)};return n._originalListener=r,this.on(t,n)}off(t,r){let n=this._listeners.get(t);if(!n)return this;let i=n.findIndex(s=>s===r||s._originalListener===r);return i!==-1&&n.splice(i,1),this}removeListener(t,r){return this.off(t,r)}emit(t,...r){let n=this._listeners.get(t);if(!n||n.length===0)return!1;for(let i of n.slice())i(...r);return!0}async close(){let t=mn._assertHandle(this);if((t._closing||t._closed)&&t._fd<0)throw We("EBADF","EBADF: bad file descriptor, close","close");t._closing=!0;try{$.closeSync(t._fd),t._emitCloseOnce()}finally{t._closing=!1}}async stat(){let t=mn._assertHandle(this);return $.fstatSync(t.fd)}async sync(){let t=mn._assertHandle(this);$.fsyncSync(t.fd)}async datasync(){return this.sync()}async truncate(t){let r=mn._assertHandle(this);$.ftruncateSync(r.fd,t)}async chmod(t){let n=mn._assertHandle(this)._resolvePath();if(!n)throw We("EBADF","EBADF: bad file descriptor","chmod");$.chmodSync(n,t)}async chown(t,r){let i=mn._assertHandle(this)._resolvePath();if(!i)throw We("EBADF","EBADF: bad file descriptor","chown");$.chownSync(i,t,r)}async utimes(t,r){let n=mn._assertHandle(this);$.futimesSync(n.fd,t,r)}async read(t,r,n,i){let s=mn._assertHandle(this),o=t,a=r,A=n,f=i;if(o!==null&&typeof o=="object"&&!ArrayBuffer.isView(o)&&(a=o.offset,A=o.length,f=o.position,o=o.buffer??null),o===null&&(o=Dt.Buffer.alloc(_ve)),!ArrayBuffer.isView(o))throw It("buffer","an instance of ArrayBufferView",o);let l=a??0,p=A??o.byteLength-l;return{bytesRead:$.readSync(s.fd,o,l,p,f??null),buffer:o}}async write(t,r,n,i){let s=mn._assertHandle(this);if(typeof t=="string"){let f=typeof n=="string"?n:"utf8";if(f==="hex"&&t.length%2!==0)throw WW("encoding",`is invalid for data of length ${t.length}`);return{bytesWritten:$.writeSync(s.fd,Dt.Buffer.from(t,f),0,void 0,r??null),buffer:t}}if(!ArrayBuffer.isView(t))throw It("buffer","a string, Buffer, TypedArray, or DataView",t);let o=r??0,a=typeof n=="number"?n:void 0;return{bytesWritten:$.writeSync(s.fd,t,o,a,i??null),buffer:t}}async readFile(t){let r=mn._assertHandle(this),n=typeof t=="string"?{encoding:t}:t??void 0,i=o2(n?.signal),s=n?.encoding??void 0;if((await r.stat()).size>LG){let l=new RangeError("File size is greater than 2 GiB");throw l.code="ERR_FS_FILE_TOO_LARGE",l}await Hm(),Sg(i);let a=[],A=0;for(;;){Sg(i);let l=Dt.Buffer.alloc(s2),{bytesRead:p}=await r.read(l,0,l.byteLength,null);if(p===0)break;if(a.push(l.subarray(0,p)),A+=p,A>LG){let I=new RangeError("File size is greater than 2 GiB");throw I.code="ERR_FS_FILE_TOO_LARGE",I}await Hm()}let f=Dt.Buffer.concat(a,A);return s?f.toString(s):f}async writeFile(t,r){let n=mn._assertHandle(this),i=typeof r=="string"?{encoding:r}:r??void 0,s=o2(i?.signal),o=i?.encoding??void 0;await Hm(),Sg(s);for await(let a of Dve(t,o))Sg(s),await n.write(a,0,a.byteLength,void 0),await Hm()}async appendFile(t,r){return this.writeFile(t,r)}createReadStream(t){return mn._assertHandle(this),new WB(null,{...t??{},fd:this})}createWriteStream(t){return mn._assertHandle(this),new VB(null,{...t??{},fd:this})}};function YB(e){return ArrayBuffer.isView(e)}function Tve(e,t){let r;t===null?r="Received null":typeof t=="string"?r=`Received type string ('${t}')`:r=`Received type ${typeof t} (${String(t)})`;let n=new TypeError(`The "${e}" property must be of type function. ${r}`);return n.code="ERR_INVALID_ARG_TYPE",n}function SA(e,t="cb"){if(typeof e!="function")throw It(t,"of type function",e)}function a2(e){if(e!=null&&(typeof e!="string"||!Dt.Buffer.isEncoding(e)))throw Rve(e)}function nr(e){if(typeof e=="string"){a2(e);return}e&&typeof e=="object"&&"encoding"in e&&a2(e.encoding)}function Be(e,t="path"){if(typeof e=="string")return e;if(Dt.Buffer.isBuffer(e))return e.toString("utf8");if(e instanceof URL){if(e.protocol==="file:")return e.pathname;throw It(t,"of type string or an instance of Buffer or URL",e)}throw It(t,"of type string or an instance of Buffer or URL",e)}function PG(e){try{return Be(e)}catch{return null}}function Kr(e,t,r={}){let{min:n=0,max:i=2147483647,allowNegativeOne:s=!1}=r;if(typeof t!="number")throw It(e,"of type number",t);if(!Number.isFinite(t)||!Number.isInteger(t))throw Na(e,"an integer",t);if(s&&t===-1||t>=n&&t<=i)return t;throw Na(e,`>= ${n} && <= ${i}`,t)}function wa(e,t="mode"){if(typeof e=="string"){if(!/^[0-7]+$/.test(e))throw WW(t,"must be a 32-bit unsigned integer or an octal string. Received '"+e+"'");return parseInt(e,8)}return Kr(t,e,{min:0,max:4294967295})}function OG(e){if(e!=null)return wa(e)}function A1(e){return e&-512|e&511&~(aB&511)}function VW(e){if(e?.start!==void 0){if(typeof e.start!="number")throw It("start","of type number",e.start);if(!Number.isFinite(e.start)||!Number.isInteger(e.start)||e.start<0)throw Na("start",">= 0",e.start)}}function wB(e,t){if(t!==void 0){if(typeof t!="boolean")throw It(e,"of type boolean",t);return t}}function Nve(e,t){if(t!==void 0){if(t===null||typeof t!="object"||typeof t.aborted!="boolean"||typeof t.addEventListener!="function"||typeof t.removeEventListener!="function"){let r=new TypeError(`The "${e}" property must be an instance of AbortSignal. ${YW(t)}`);throw r.code="ERR_INVALID_ARG_TYPE",r}return t}}function Mve(e,t){let r;if(e==null)r={};else if(typeof e=="string"){if(!t)throw It("options","of type object",e);a2(e),r={encoding:e}}else if(typeof e=="object")r=e;else throw It("options",t?"one of type string or object":"of type object",e);wB("options.persistent",r.persistent),wB("options.recursive",r.recursive),nr(r);let n=Nve("options.signal",r.signal);return{persistent:r.persistent,recursive:r.recursive,encoding:r.encoding,signal:n}}function Fve(e,t,r){let n=Be(e),i=t,s=r;if(typeof t=="function"&&(i=void 0,s=t),s!==void 0&&typeof s!="function")throw It("listener","of type function",s);return{path:n,listener:s,options:Mve(i,!0)}}function kve(e,t,r){let n=Be(e),i={},s=r;if(typeof t=="function")s=t;else if(t==null)i={};else if(typeof t=="object")i=t;else throw It("listener","of type function",t);if(typeof s!="function")throw It("listener","of type function",s);if(wB("persistent",i.persistent),wB("bigint",i.bigint),i.interval!==void 0&&typeof i.interval!="number")throw It("interval","of type number",i.interval);return{path:n,listener:s,options:{persistent:i.persistent,bigint:i.bigint,interval:i.interval}}}function Uve(){return new hu({mode:0,size:0,dev:0,ino:0,nlink:0,uid:0,gid:0,rdev:0,blksize:0,blocks:0,atimeMs:0,mtimeMs:0,ctimeMs:0,birthtimeMs:0})}function HG(e){try{let t=$.statSync(e);return{exists:!0,stats:t,signature:JSON.stringify({dev:t.dev,ino:t.ino,mode:t.mode,nlink:t.nlink,uid:t.uid,gid:t.gid,rdev:t.rdev,size:t.size,atimeMs:t.atimeMs,mtimeMs:t.mtimeMs,ctimeMs:t.ctimeMs,birthtimeMs:t.birthtimeMs})}}catch(t){if(t?.code==="ENOENT"||t?.code==="ENOTDIR")return{exists:!1,stats:Uve(),signature:"missing"};throw t}}function xve(e,t){let r=e==="/"?"":e.split("/").filter(Boolean).pop()??"";return t==="buffer"?Dt.Buffer.from(r):r}function Lve(e,t){return e.exists!==t.exists?"rename":"change"}var Pve=50,Ove=5007,Wg=new Map,JW=class{constructor(e,t){y(this,"_path");y(this,"_intervalMs");y(this,"_onChange");y(this,"_onClose");y(this,"_listeners");y(this,"_timer");y(this,"_closed");y(this,"_signal");y(this,"_handleAbort");y(this,"_snapshot");y(this,"_poll");this._path=e,this._intervalMs=t.interval,this._onChange=t.onChange,this._onClose=t.onClose,this._listeners=new Map,this._closed=!1,this._signal=t.signal,this._snapshot=HG(e),this._poll=()=>{if(this._closed)return;let r;try{r=HG(this._path)}catch(i){this.emit("error",i);return}if(r.signature===this._snapshot.signature)return;let n=this._snapshot;this._snapshot=r,this._onChange(r,n)},this._handleAbort=()=>{this.close()},this._timer=x2(this._poll,this._intervalMs),t.persistent===!1&&this._timer?.unref?.(),this._signal&&(this._signal.aborted?queueMicrotask(()=>this.close()):this._signal.addEventListener("abort",this._handleAbort,{once:!0}))}on(e,t){let r=this._listeners.get(e)??[];return r.push(t),this._listeners.set(e,r),this}addListener(e,t){return this.on(e,t)}once(e,t){let r=(...n)=>{this.removeListener(e,r),t(...n)};return r._originalListener=t,this.on(e,r)}off(e,t){return this.removeListener(e,t)}removeListener(e,t){let r=this._listeners.get(e);if(!r)return this;let n=r.findIndex(i=>i===t||i._originalListener===t);return n>=0&&r.splice(n,1),r.length===0&&this._listeners.delete(e),this}removeAllListeners(e){return e===void 0?this._listeners.clear():this._listeners.delete(e),this}emit(e,...t){let r=this._listeners.get(e);return r?.length?(r.slice().forEach(n=>n(...t)),!0):!1}ref(){return this._timer?.ref?.(),this}unref(){return this._timer?.unref?.(),this}close(){this._closed||(this._closed=!0,this._timer!==void 0&&(L2(this._timer),this._timer=void 0),this._signal&&this._signal.removeEventListener("abort",this._handleAbort),this._onClose?.(),this.emit("close"))}};function Hve(e,t){let r=Wg.get(e)??new Set;r.add(t),Wg.set(e,r)}function qve(e,t){let r=Wg.get(e);r&&(r.delete(t),r.size===0&&Wg.delete(e))}function Gve(e,t){let r=xve(e,t.encoding),n=new JW(e,{interval:Pve,persistent:t.persistent,signal:t.signal,onChange(i,s){n.emit("change",Lve(s,i),r)}});return n}function Yve(e,t,r){let n=new JW(e,{interval:t.interval??Ove,persistent:t.persistent,onChange(i,s){n.emit("change",i.stats,s.stats)},onClose(){qve(e,n)}});return n.on("change",r),Hve(e,n),n}async function*Wve(e,t){let r=[],n=null,i=!1,s=null,o=$.watch(e,t,(a,A)=>{r.push({eventType:a,filename:A}),n?.(),n=null});o.on("close",()=>{i=!0,n?.(),n=null}),o.on("error",a=>{s=a,n?.(),n=null});try{for(;;){if(r.length>0){yield r.shift();continue}if(s)throw s;if(i)return;await new Promise(a=>{n=a})}}finally{o.close()}}function A2(e){return e==null||typeof e=="object"&&!Array.isArray(e)}function So(e){if(e==null||e===-1)return null;if(typeof e=="bigint")return Number(e);if(typeof e!="number"||!Number.isInteger(e))throw It("position","an integer",e);return e}function SB(e,t,r){let n=t??0;if(typeof n!="number"||!Number.isInteger(n))throw It("offset","an integer",n);if(n<0||n>e)throw Na("offset",`>= 0 && <= ${e}`,n);let i=e-n,s=r??i;if(typeof s!="number"||!Number.isInteger(s))throw It("length","an integer",s);if(s<0||s>2147483647)throw Na("length",">= 0 && <= 2147483647",s);if(n+s>e)throw Na("length",`>= 0 && <= ${e-n}`,s);return{offset:n,length:s}}function Vve(e,t,r,n){if(!YB(e))throw It("buffer","an instance of Buffer, TypedArray, or DataView",e);if(r===void 0&&n===void 0&&A2(t)){let o=t??{},{offset:a,length:A}=SB(e.byteLength,o.offset,o.length);return{buffer:e,offset:a,length:A,position:So(o.position)}}let{offset:i,length:s}=SB(e.byteLength,t,r);return{buffer:e,offset:i,length:s,position:So(n)}}function qG(e,t,r,n){if(typeof e=="string"){if(r===void 0&&n===void 0&&A2(t)){let o=t??{},a=typeof o.encoding=="string"?o.encoding:void 0;return{buffer:e,offset:0,length:Dt.Buffer.byteLength(e,a),position:So(o.position),encoding:a}}if(t!=null&&typeof t!="number")throw It("position","an integer",t);return{buffer:e,offset:0,length:Dt.Buffer.byteLength(e,typeof r=="string"?r:void 0),position:So(t),encoding:typeof r=="string"?r:void 0}}if(!YB(e))throw It("buffer","a string, Buffer, TypedArray, or DataView",e);if(r===void 0&&n===void 0&&A2(t)){let o=t??{},{offset:a,length:A}=SB(e.byteLength,o.offset,o.length);return{buffer:e,offset:a,length:A,position:So(o.position)}}let{offset:i,length:s}=SB(e.byteLength,t,typeof r=="number"?r:void 0);return{buffer:e,offset:i,length:s,position:So(n)}}function ar(e){return Kr("fd",e)}function qm(e){if(!Array.isArray(e))throw It("buffers","an ArrayBufferView[]",e);for(let t of e)if(!YB(t))throw It("buffers","an ArrayBufferView[]",e);return e}function f2(e,t){if(e===void 0)return;if(e===null||typeof e!="object")throw It("options.fs","an object",e);let r=e;for(let n of t)if(typeof r[n]!="function")throw Tve(`options.fs.${String(n)}`,r[n]);return r}function _B(e){if(e!==void 0)return e instanceof du?e:Kr("fd",e)}function GG(e,t){if(e===null){if(t===void 0)throw It("path","of type string or an instance of Buffer or URL",e);return null}if(typeof e=="string"||Dt.Buffer.isBuffer(e))return e;if(e instanceof URL){if(e.protocol==="file:")return e.pathname;throw It("path","of type string or an instance of Buffer or URL",e)}throw It("path","of type string or an instance of Buffer or URL",e)}function Jve(e){let t=e?.start,r=e?.end;if(t!==void 0&&typeof t!="number")throw It("start","of type number",t);if(r!==void 0&&typeof r!="number")throw It("end","of type number",r);let n=t,i=r;if(n!==void 0&&(!Number.isFinite(n)||n<0))throw Na("start",">= 0",t);if(i!==void 0&&(!Number.isFinite(i)||i<0))throw Na("end",">= 0",r);if(n!==void 0&&i!==void 0&&n>i)throw Na("start",`<= "end" (here: ${i})`,n);let s=e?.highWaterMark??e?.bufferSize,o=typeof s=="number"&&Number.isFinite(s)&&s>0?Math.floor(s):65536;return{start:n,end:i,highWaterMark:o,autoClose:e?.autoClose!==!1}}var WB=class{constructor(e,t){y(this,"_options");y(this,"bytesRead",0);y(this,"path");y(this,"pending",!0);y(this,"readable",!0);y(this,"readableAborted",!1);y(this,"readableDidRead",!1);y(this,"readableEncoding",null);y(this,"readableEnded",!1);y(this,"readableFlowing",null);y(this,"readableHighWaterMark",65536);y(this,"readableLength",0);y(this,"readableObjectMode",!1);y(this,"destroyed",!1);y(this,"closed",!1);y(this,"errored",null);y(this,"fd",null);y(this,"autoClose",!0);y(this,"start");y(this,"end");y(this,"_listeners",new Map);y(this,"_started",!1);y(this,"_reading",!1);y(this,"_readScheduled",!1);y(this,"_opening",!1);y(this,"_remaining",null);y(this,"_position",null);y(this,"_fileHandle",null);y(this,"_streamFs");y(this,"_signal");y(this,"_handleCloseListener");this._options=t;let r=_B(t?.fd),i=Jve(t??{});if(this.path=e,this.start=i.start,this.end=i.end,this.autoClose=i.autoClose,this.readableHighWaterMark=i.highWaterMark,this.readableEncoding=t?.encoding??null,this._position=this.start??null,this._remaining=this.end!==void 0?this.end-(this.start??0)+1:null,this._signal=o2(t?.signal),r instanceof du){if(t?.fs!==void 0){let s=new Error("The FileHandle with fs method is not implemented");throw s.code="ERR_METHOD_NOT_IMPLEMENTED",s}this._fileHandle=r,this.fd=r.fd,this.pending=!1,this._handleCloseListener=()=>{this.closed||(this.closed=!0,this.destroyed=!0,this.readable=!1,this.emit("close"))},this._fileHandle.on("close",this._handleCloseListener)}else this._streamFs=f2(t?.fs,["open","read","close"]),typeof r=="number"&&(this.fd=r,this.pending=!1);this._signal&&(this._signal.aborted?queueMicrotask(()=>{this._abort(this._signal?.reason)}):this._signal.addEventListener("abort",()=>{this._abort(this._signal?.reason)})),this.fd===null&&queueMicrotask(()=>{this._openIfNeeded()})}_emitOpen(e){this.fd=e,this.pending=!1,this.emit("open",e),(this._started||this.readableFlowing)&&this._scheduleRead()}async _openIfNeeded(){if(this.fd!==null||this._opening||this.destroyed||this.closed)return;let e=typeof this.path=="string"?this.path:this.path instanceof Dt.Buffer?this.path.toString():null;if(!e){this._handleStreamError(We("EBADF","EBADF: bad file descriptor","read"));return}this._opening=!0,(this._streamFs?.open??$.open).bind(this._streamFs??$)(e,"r",438,(r,n)=>{if(this._opening=!1,r||typeof n!="number"){this._handleStreamError(r??We("EBADF","EBADF: bad file descriptor","open"));return}this._emitOpen(n)})}async _closeUnderlying(){if(this._fileHandle){this._fileHandle.closed||await this._fileHandle.close();return}if(this.fd!==null&&this.fd>=0){let e=this.fd,t=(this._streamFs?.close??$.close).bind(this._streamFs??$);await new Promise(r=>{t(e,()=>r())}),this.fd=-1}}_scheduleRead(){this._readScheduled||this._reading||this.readableFlowing===!1||this.destroyed||this.closed||(this._readScheduled=!0,queueMicrotask(()=>{this._readScheduled=!1,this._readNextChunk()}))}async _readNextChunk(){if(this._reading||this.destroyed||this.closed||this.readableFlowing===!1)return;if(Sg(this._signal),this.fd===null){await this._openIfNeeded();return}if(this._remaining===0){await this._finishReadable();return}let e=this._remaining===null?this.readableHighWaterMark:Math.min(this.readableHighWaterMark,this._remaining),t=Dt.Buffer.alloc(e);this._reading=!0;let r=async(i,s=0)=>{if(this._reading=!1,i){this._handleStreamError(i);return}if(s===0){await this._finishReadable();return}this.bytesRead+=s,this.readableDidRead=!0,typeof this._position=="number"&&(this._position+=s),this._remaining!==null&&(this._remaining-=s);let o=t.subarray(0,s);if(this.emit("data",this.readableEncoding?o.toString(this.readableEncoding):Dt.Buffer.from(o)),this._remaining===0){await this._finishReadable();return}this._scheduleRead()};if(this._fileHandle){try{let i=await this._fileHandle.read(t,0,e,this._position);await r(null,i.bytesRead)}catch(i){await r(i)}return}(this._streamFs?.read??$.read).bind(this._streamFs??$)(this.fd,t,0,e,this._position,(i,s)=>{r(i,s??0)})}async _finishReadable(){this.readableEnded||(this.readable=!1,this.readableEnded=!0,this.emit("end"),this.autoClose&&this.destroy())}_handleStreamError(e){this.closed||(this.errored=e,this.emit("error",e),this.autoClose?this.destroy():this.readable=!1)}async _abort(e){if(!(this.closed||this.destroyed)){if(this.readableAborted=!0,this.errored=GW(e),this.emit("error",this.errored),this._fileHandle){this.destroyed=!0,this.readable=!1,this.closed=!0,this.emit("close");return}if(this.autoClose){this.destroy();return}this.closed=!0,this.emit("close")}}async _readAllContent(){let e=[],t=0,r=this.readableFlowing;for(this.readableFlowing=!1;this._remaining!==0&&(this.fd===null&&await this._openIfNeeded(),this.fd!==null);){let n=this._remaining===null?s2:Math.min(s2,this._remaining),i=Dt.Buffer.alloc(n),s=0;if(this._fileHandle?s=(await this._fileHandle.read(i,0,n,this._position)).bytesRead:s=$.readSync(this.fd,i,0,n,this._position),s===0)break;let o=i.subarray(0,s);e.push(o),t+=s,typeof this._position=="number"&&(this._position+=s),this._remaining!==null&&(this._remaining-=s)}return this.readableFlowing=r,Dt.Buffer.concat(e,t)}on(e,t){let r=this._listeners.get(e)??[];return r.push(t),this._listeners.set(e,r),e==="data"&&(this._started=!0,this.readableFlowing!==!1&&(this.readableFlowing=!0,this._scheduleRead())),this}once(e,t){let r=(...n)=>{this.off(e,r),t(...n)};return r._originalListener=t,this.on(e,r)}off(e,t){let r=this._listeners.get(e);if(!r)return this;let n=r.findIndex(i=>i===t||i._originalListener===t);return n>=0&&r.splice(n,1),this}removeListener(e,t){return this.off(e,t)}removeAllListeners(e){return e===void 0?this._listeners.clear():this._listeners.delete(e),this}emit(e,...t){let r=this._listeners.get(e);return r?.length?(r.slice().forEach(n=>n(...t)),!0):!1}read(){return null}pipe(e,t){return this.on("data",r=>{e.write(r)}),this.on("end",()=>{e.end?.()}),this.resume(),e}unpipe(e){return this}pause(){return this.readableFlowing=!1,this}resume(){return this._started=!0,this.readableFlowing=!0,this._scheduleRead(),this}setEncoding(e){return this.readableEncoding=e,this}destroy(e){return this.destroyed?this:(this.destroyed=!0,this.readable=!1,e&&(this.errored=e,this.emit("error",e)),queueMicrotask(()=>{this._closeUnderlying().then(()=>{this.closed||(this.closed=!0,this.emit("close"))})}),this)}close(e){this.destroy(),e&&queueMicrotask(()=>e(null))}async*[Symbol.asyncIterator](){let e=await this._readAllContent();yield this.readableEncoding?e.toString(this.readableEncoding):e}},YG=16*1024*1024,VB=class{constructor(e,t){y(this,"_options");y(this,"bytesWritten",0);y(this,"path");y(this,"pending",!1);y(this,"writable",!0);y(this,"writableAborted",!1);y(this,"writableEnded",!1);y(this,"writableFinished",!1);y(this,"writableHighWaterMark",16384);y(this,"writableLength",0);y(this,"writableObjectMode",!1);y(this,"writableCorked",0);y(this,"destroyed",!1);y(this,"closed",!1);y(this,"errored",null);y(this,"writableNeedDrain",!1);y(this,"fd",null);y(this,"autoClose",!0);y(this,"_chunks",[]);y(this,"_listeners",new Map);y(this,"_fileHandle",null);y(this,"_streamFs");y(this,"_position",null);this._options=t;let r=_B(t?.fd),n=t?.start,i=t?.highWaterMark??t?.bufferSize,s=t?.flags??"w";if(this.path=e,this.autoClose=t?.autoClose!==!1,this.writableHighWaterMark=typeof i=="number"&&Number.isFinite(i)&&i>0?Math.floor(i):16384,this._position=typeof n=="number"?n:null,this._streamFs=f2(t?.fs,["open","close","write"]),t?.fs!==void 0&&f2(t?.fs,["writev"]),r instanceof du){this._fileHandle=r,this.fd=r.fd;return}if(typeof r=="number"){this.fd=r;return}let o=typeof this.path=="string"?this.path:this.path instanceof Dt.Buffer?this.path.toString():null;if(!o)throw We("EBADF","EBADF: bad file descriptor","write");this.fd=$.openSync(o,s,t?.mode),queueMicrotask(()=>{this.fd!==null&&this.fd>=0&&this.emit("open",this.fd)})}async _closeUnderlying(){if(this._fileHandle){this._fileHandle.closed||await this._fileHandle.close();return}if(this.fd!==null&&this.fd>=0){let e=this.fd,t=(this._streamFs?.close??$.close).bind(this._streamFs??$);await new Promise(r=>{t(e,()=>r())}),this.fd=-1}}close(e){queueMicrotask(()=>{this._closeUnderlying().then(()=>{this.closed||(this.closed=!0,this.writable=!1,this.emit("close")),e?.(null)})})}write(e,t,r){if(this.writableEnded||this.destroyed){let s=new Error("write after end"),o=typeof t=="function"?t:r;return queueMicrotask(()=>o?.(s)),!1}let n;if(typeof e=="string")n=Dt.Buffer.from(e,typeof t=="string"?t:"utf8");else if(YB(e))n=new Uint8Array(e.buffer,e.byteOffset,e.byteLength);else throw It("chunk","a string, Buffer, TypedArray, or DataView",e);if(this.writableLength+n.length>YG){let s=new Error(`WriteStream buffer exceeded ${YG} bytes`);this.errored=s,this.destroyed=!0,this.writable=!1;let o=typeof t=="function"?t:r;return queueMicrotask(()=>{o?.(s),this.emit("error",s)}),!1}this._chunks.push(n),this.bytesWritten+=n.length,this.writableLength+=n.length;let i=typeof t=="function"?t:r;return queueMicrotask(()=>i?.(null)),!0}end(e,t,r){if(this.writableEnded)return this;let n;return typeof e=="function"?n=e:typeof t=="function"?(n=t,e!=null&&this.write(e)):(n=r,e!=null&&this.write(e,t)),this.writableEnded=!0,this.writable=!1,this.writableFinished=!0,this.writableLength=0,queueMicrotask(()=>{(async()=>{try{if(this._fileHandle){for(let i of this._chunks){let s=await this._fileHandle.write(i,0,i.byteLength,this._position);typeof this._position=="number"&&(this._position+=s?.bytesWritten??i.byteLength)}this.autoClose&&!this._fileHandle.closed&&await this._fileHandle.close()}else{let i=typeof this.path=="string"?this.path:this.path instanceof Dt.Buffer?this.path.toString():null;if(i){let s=this._chunks.map(o=>Dt.Buffer.from(o));if(typeof this._position=="number"){let o=$.readFileSync(i),a=Math.max(o.length,this._position+s.reduce((l,p)=>l+p.length,0)),A=Dt.Buffer.alloc(a);o.copy(A);let f=this._position;for(let l of s)l.copy(A,f),f+=l.length;$.writeFileSync(i,A.toString(this._options?.encoding??"utf8"))}else $.writeFileSync(i,Dt.Buffer.concat(s).toString(this._options?.encoding??"utf8"));this.autoClose&&this.fd!==null&&this.fd>=0&&await this._closeUnderlying()}else if(this.fd!==null&&this.fd>=0){for(let s of this._chunks){let o=$.writeSync(this.fd,s,0,s.byteLength,this._position);typeof this._position=="number"&&(this._position+=o)}this.autoClose&&await this._closeUnderlying()}else throw We("EBADF","EBADF: bad file descriptor","write")}this.emit("finish"),this.autoClose&&!this.closed&&(this.closed=!0,this.emit("close")),n?.()}catch(i){this.errored=i,this.emit("error",i)}})()}),this}setDefaultEncoding(e){return this}cork(){this.writableCorked++}uncork(){this.writableCorked>0&&this.writableCorked--}destroy(e){return this.destroyed?this:(this.destroyed=!0,this.writable=!1,e&&(this.errored=e,this.emit("error",e)),queueMicrotask(()=>{this._closeUnderlying().then(()=>{this.closed||(this.closed=!0,this.emit("close"))})}),this)}addListener(e,t){return this.on(e,t)}on(e,t){let r=this._listeners.get(e)??[];return r.push(t),this._listeners.set(e,r),this}once(e,t){let r=(...n)=>{this.removeListener(e,r),t(...n)};return this.on(e,r)}removeListener(e,t){let r=this._listeners.get(e);if(!r)return this;let n=r.indexOf(t);return n>=0&&r.splice(n,1),this}off(e,t){return this.removeListener(e,t)}removeAllListeners(e){return e===void 0?this._listeners.clear():this._listeners.delete(e),this}emit(e,...t){let r=this._listeners.get(e);return r?.length?(r.slice().forEach(n=>n(...t)),!0):!1}pipe(e,t){return e}unpipe(e){return this}[Symbol.asyncDispose](){return Promise.resolve()}},jve=WB,zve=VB,jW=function(t,r){return nr(r),new jve(t,r)};jW.prototype=WB.prototype;var zW=function(t,r){return nr(r),VW(r??{}),new zve(t,r)};zW.prototype=VB.prototype;function Kve(e){if(typeof e=="number")return e;let t={r:n2,"r+":ya,rs:n2,"rs+":ya,w:su|Hn|ou,"w+":ya|Hn|ou,a:su|au|Hn,"a+":ya|au|Hn,wx:su|Hn|ou|ma,xw:su|Hn|ou|ma,"wx+":ya|Hn|ou|ma,"xw+":ya|Hn|ou|ma,ax:su|au|Hn|ma,xa:su|au|Hn|ma,"ax+":ya|au|Hn|ma,"xa+":ya|au|Hn|ma};if(e in t)return t[e];throw new Error("Unknown file flag: "+e)}var WG={EPERM:1,ENOENT:2,ESRCH:3,EINTR:4,EIO:5,ENXIO:6,E2BIG:7,ENOEXEC:8,EBADF:9,ECHILD:10,EAGAIN:11,EWOULDBLOCK:11,ENOMEM:12,EACCES:13,EFAULT:14,ENOTBLK:15,EBUSY:16,EEXIST:17,EXDEV:18,ENODEV:19,ENOTDIR:20,EISDIR:21,EINVAL:22,ENFILE:23,EMFILE:24,ENOTTY:25,ETXTBSY:26,EFBIG:27,ENOSPC:28,ESPIPE:29,EROFS:30,EMLINK:31,EPIPE:32,EDOM:33,ERANGE:34,ENAMETOOLONG:36,ENOSYS:38,ENOTEMPTY:39,ELOOP:40,EOVERFLOW:75,ENOTSOCK:88,EDESTADDRREQ:89,EMSGSIZE:90,EPROTOTYPE:91,ENOPROTOOPT:92,EPROTONOSUPPORT:93,ENOTSUP:95,EOPNOTSUPP:95,EAFNOSUPPORT:97,EADDRINUSE:98,EADDRNOTAVAIL:99,ENETDOWN:100,ENETUNREACH:101,ECONNABORTED:103,ECONNRESET:104,ENOBUFS:105,EISCONN:106,ENOTCONN:107,ETIMEDOUT:110,ECONNREFUSED:111,EHOSTUNREACH:113,EALREADY:114,EINPROGRESS:115};function Xve(e){return Object.prototype.hasOwnProperty.call(WG,e)?-WG[e]:-1}function We(e,t,r,n){let i=new Error(t);return i.code=e,i.errno=Xve(e),i.syscall=r,n&&(i.path=n),i}function Zve(e){return String(e?.message??e??"")}function Vi(e){let t=Zve(e);return t.includes("ENOENT")||t.includes("entry not found")||t.includes("no such file or directory")||t.includes("not found")?"ENOENT":t.includes("EROFS")||t.includes("read-only file system")?"EROFS":t.includes("ERR_ACCESS_DENIED")?"ERR_ACCESS_DENIED":t.includes("EACCES")||t.includes("permission denied")?"EACCES":t.includes("EEXIST")||t.includes("file already exists")?"EEXIST":t.includes("EINVAL")||t.includes("invalid argument")?"EINVAL":t.includes("EXDEV")||t.includes("cross-device link")?"EXDEV":typeof e?.code=="string"&&e.code.length>0?e.code:null}function Hi(e,t,r){try{return e()}catch(n){let i=Vi(n);throw i==="ENOENT"?We("ENOENT",`ENOENT: no such file or directory, ${t} '${r}'`,t,r):i==="EACCES"?We("EACCES",`EACCES: permission denied, ${t} '${r}'`,t,r):i==="EEXIST"?We("EEXIST",`EEXIST: file already exists, ${t} '${r}'`,t,r):i==="EINVAL"?We("EINVAL",`EINVAL: invalid argument, ${t} '${r}'`,t,r):i==="EXDEV"?We("EXDEV",`EXDEV: cross-device link not permitted, ${t} '${r}'`,t,r):n}}function $ve(e){let t="",r=0;for(;r<e.length;){let n=e[r];if(n==="*"&&e[r+1]==="*")e[r+2]==="/"?(t+="(?:.+/)?",r+=3):(t+=".*",r+=2);else if(n==="*")t+="[^/]*",r++;else if(n==="?")t+="[^/]",r++;else if(n==="{"){let i=e.indexOf("}",r);if(i!==-1){let s=e.slice(r+1,i).split(",");t+="(?:"+s.map(o=>o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&").replace(/\\\*/g,"[^/]*")).join("|")+")",r=i+1}else t+="\\{",r++}else if(n==="["){let i=e.indexOf("]",r);i!==-1?(t+=e.slice(r,i+1),r=i+1):(t+="\\[",r++)}else".+^${}()|[]\\".includes(n)?(t+="\\"+n,r++):(t+=n,r++)}return new RegExp("^"+t+"$")}function e1e(e){let t=e.split("/"),r=[];for(let n of t){if(/[*?{}\[\]]/.test(n))break;r.push(n)}return r.join("/")||"/"}var t1e=100;function r1e(e,t){let r=$ve(e),n=e1e(e),i=(s,o)=>{if(o>t1e)return;let a;try{a=KW(s)}catch{return}for(let A of a){let f=s==="/"?"/"+A:s+"/"+A;r.test(f)&&t.push(f);try{u2(f).isDirectory()&&i(f,o+1)}catch{}}};try{if(r.test(n)&&!u2(n).isDirectory()){t.push(n);return}i(n,0)}catch{}}var KW,u2;function f1(e){return Be(e)}function c2(e){return typeof globalThis<"u"?globalThis[e]:void 0}function Re(e){return{applySync(t,r){let n=c2(e);if(typeof n=="function")return n(...r||[]);if(n&&typeof n.applySync=="function")return n.applySync(t,r)},applySyncPromise(t,r){let n=c2(e);if(typeof n=="function")return n(...r||[]);if(n&&typeof n.applySync=="function")return n.applySync(t,r);if(n&&typeof n.applySyncPromise=="function")return n.applySyncPromise(t,r)}}}function Cr(e){return{apply(t,r){let n=c2(e);return typeof n=="function"?n(...r||[]):n&&typeof n.apply=="function"?n.apply(t,r):Promise.resolve(void 0)}}}var Jt={readFile:Re("_fsReadFile"),writeFile:Re("_fsWriteFile"),readFileBinary:Re("_fsReadFileBinary"),writeFileBinary:Re("_fsWriteFileBinary"),readDir:Re("_fsReadDir"),mkdir:Re("_fsMkdir"),rmdir:Re("_fsRmdir"),exists:Re("_fsExists"),stat:Re("_fsStat"),unlink:Re("_fsUnlink"),rename:Re("_fsRename"),chmod:Re("_fsChmod"),chown:Re("_fsChown"),link:Re("_fsLink"),symlink:Re("_fsSymlink"),readlink:Re("_fsReadlink"),lstat:Re("_fsLstat"),truncate:Re("_fsTruncate"),utimes:Re("_fsUtimes"),lutimes:Re("_fsLutimes")},Er={readFile:Cr("_fsReadFileAsync"),writeFile:Cr("_fsWriteFileAsync"),readFileBinary:Cr("_fsReadFileBinaryAsync"),writeFileBinary:Cr("_fsWriteFileBinaryAsync"),readDir:Cr("_fsReadDirAsync"),mkdir:Cr("_fsMkdirAsync"),rmdir:Cr("_fsRmdirAsync"),stat:Cr("_fsStatAsync"),unlink:Cr("_fsUnlinkAsync"),rename:Cr("_fsRenameAsync"),chmod:Cr("_fsChmodAsync"),chown:Cr("_fsChownAsync"),link:Cr("_fsLinkAsync"),symlink:Cr("_fsSymlinkAsync"),readlink:Cr("_fsReadlinkAsync"),lstat:Cr("_fsLstatAsync"),truncate:Cr("_fsTruncateAsync"),utimes:Cr("_fsUtimesAsync"),lutimes:Cr("_fsLutimesAsync"),access:Cr("_fsAccessAsync")},n1e=Re("fs.openSync"),XW=Re("fs.closeSync"),i1e=Re("fs.readSync"),u1=Re("fs.writeSync"),s1e=Re("fs.fstatSync"),o1e=Re("fs.ftruncateSync"),VG=Re("fs.fsyncSync"),a1e=Re("fs.futimesSync"),FA=Re("fs._getPathSync"),A1e=Re("process.umask"),f1e=Re("process.memoryUsage"),u1e=Re("process.cpuUsage"),c1e=Re("process.resourceUsage"),l1e=Re("process.versions"),zFe=Re("_kernelPollRaw"),KFe=Re("_kernelIsattyRaw"),XFe=Re("_kernelTtySizeRaw");function Ta(e){return typeof e=="string"?JSON.parse(e):e}function gu(e){return{__agentOSType:"bytes",base64:Dt.Buffer.from(e).toString("base64")}}function nB(e,t,r){let n=Vi(e);if(n==="ENOENT")throw We("ENOENT",`ENOENT: no such file or directory, ${t} '${r}'`,t,r);if(n==="EROFS")throw We("EROFS",`EROFS: read-only file system, ${t} '${r}'`,t,r);if(n==="ERR_ACCESS_DENIED"){let i=We("ERR_ACCESS_DENIED",`ERR_ACCESS_DENIED: permission denied, ${t} '${r}'`,t,r);throw i.code="ERR_ACCESS_DENIED",i}throw n==="EACCES"?We("EACCES",`EACCES: permission denied, ${t} '${r}'`,t,r):e}function h1e(e,t){return e==="/"?`/${t}`:e.endsWith("/")?`${e}${t}`:`${e}/${t}`}function ZW(e,t,r){return Array.isArray(e)?r?e.map(n=>{if(typeof n=="string"){let i=$.statSync(h1e(t,n));return new i2(n,i.isDirectory(),t)}return new i2(n.name,n.isDirectory,t)}):e.map(n=>typeof n=="string"?n:n?.name):[]}async function c1(e,t){nr(t);let r=typeof e=="number"?FA.applySync(void 0,[ar(e)]):Be(e);if(!r)throw We("EBADF","EBADF: bad file descriptor","read");let n=r,i=typeof t=="string"?t:t?.encoding;try{if(i)return await Er.readFile.apply(void 0,[n,i]);let s=await Er.readFileBinary.apply(void 0,[n]);return Dt.Buffer.from(s,"base64")}catch(s){throw Vi(s)==="ENOENT"?We("ENOENT",`ENOENT: no such file or directory, open '${r}'`,"open",r):Vi(s)==="EACCES"?We("EACCES",`EACCES: permission denied, open '${r}'`,"open",r):s}}async function l1(e,t,r){nr(r);let n=typeof e=="number"?FA.applySync(void 0,[ar(e)]):Be(e);if(!n)throw We("EBADF","EBADF: bad file descriptor","write");let i=n;try{if(typeof t=="string")return await Er.writeFile.apply(void 0,[i,t]);if(ArrayBuffer.isView(t)){let s=new Uint8Array(t.buffer,t.byteOffset,t.byteLength);return await Er.writeFileBinary.apply(void 0,[i,gu(s)])}return await Er.writeFile.apply(void 0,[i,String(t)])}catch(s){nB(s,"write",n)}}async function d1e(e,t){nr(t);let r=Be(e);try{let n=await Er.readDir.apply(void 0,[r]);return ZW(Ta(n),r,t?.withFileTypes)}catch(n){throw Vi(n)==="ENOENT"?We("ENOENT",`ENOENT: no such file or directory, scandir '${r}'`,"scandir",r):n}}async function g1e(e,t){let r=Be(e),n=typeof t=="object"?t?.recursive??!1:!1;return await Er.mkdir.apply(void 0,[r,n]),n?r:void 0}async function p1e(e){let t=Be(e);await Er.rmdir.apply(void 0,[t])}async function E1e(e){let t=Be(e);try{let r=await Er.stat.apply(void 0,[t]);return new hu(Ta(r))}catch(r){throw Vi(r)==="ENOENT"?We("ENOENT",`ENOENT: no such file or directory, stat '${t}'`,"stat",t):r}}async function y1e(e){let t=Be(e),r=await Er.lstat.apply(void 0,[t]);return new hu(Ta(r))}async function m1e(e){let t=Be(e);await Er.unlink.apply(void 0,[t])}async function B1e(e,t){let r=Be(e,"oldPath"),n=Be(t,"newPath");await Er.rename.apply(void 0,[r,n])}async function I1e(e){let t=Be(e);try{await Er.access.apply(void 0,[t])}catch(r){throw Vi(r)==="ENOENT"?We("ENOENT",`ENOENT: no such file or directory, access '${t}'`,"access",t):r}}async function b1e(e,t){let r=Be(e),n=wa(t,"mode");await Er.chmod.apply(void 0,[r,n])}async function C1e(e,t,r){let n=Be(e),i=Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),s=Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0});await Er.chown.apply(void 0,[n,i,s])}async function Q1e(e,t){let r=Be(e,"existingPath"),n=Be(t,"newPath");await Er.link.apply(void 0,[r,n])}async function w1e(e,t){let r=Be(e,"target"),n=Be(t);await Er.symlink.apply(void 0,[r,n])}async function S1e(e){let t=Be(e);return await Er.readlink.apply(void 0,[t])}async function _1e(e,t){let r=Be(e);await Er.truncate.apply(void 0,[r,t??0])}function wo(e,t){if(e&&typeof e=="object"&&!(e instanceof Date)){let o=typeof e.kind=="string"?e.kind:null;if(o==="now"||o==="UTIME_NOW")return{kind:"now"};if(o==="omit"||o==="UTIME_OMIT")return{kind:"omit"};if("nsec"in e){if(e.nsec===$.constants.UTIME_NOW||e.nsec==="UTIME_NOW")return{kind:"now"};if(e.nsec===$.constants.UTIME_OMIT||e.nsec==="UTIME_OMIT")return{kind:"omit"}}let a=Number(e.sec),A=Number(e.nsec??0);if(!Number.isInteger(a))throw It(t,"an integer sec field",e);if(!Number.isInteger(A)||A<0||A>=1e9)throw createRangeError(`${t}.nsec must be an integer between 0 and 999999999`);return{sec:a,nsec:A}}let r=typeof e=="number"?e:new Date(e).getTime()/1e3;if(!Number.isFinite(r))throw createRangeError(`${t} must be a finite timestamp`);let n=Math.floor(r),i=n,s=Math.round((r-n)*1e9);return s>=1e9&&(i+=1,s-=1e9),{sec:i,nsec:s}}async function v1e(e,t,r){let n=Be(e);await Er.utimes.apply(void 0,[n,wo(t,"atime"),wo(r,"mtime")])}async function R1e(e,t,r){let n=Be(e);await Er.lutimes.apply(void 0,[n,wo(t,"atime"),wo(r,"mtime")])}var $={constants:{F_OK:0,R_OK:4,W_OK:2,X_OK:1,COPYFILE_EXCL:1,COPYFILE_FICLONE:2,COPYFILE_FICLONE_FORCE:4,O_RDONLY:n2,O_WRONLY:su,O_RDWR:ya,O_CREAT:Hn,O_EXCL:ma,O_NOCTTY:256,O_TRUNC:ou,O_APPEND:au,O_DIRECTORY:65536,O_NOATIME:262144,O_NOFOLLOW:131072,O_SYNC:1052672,O_DSYNC:4096,O_SYMLINK:2097152,O_DIRECT:16384,O_NONBLOCK:2048,UTIME_NOW:1073741823,UTIME_OMIT:1073741822,S_IFMT:61440,S_IFREG:32768,S_IFDIR:16384,S_IFCHR:8192,S_IFBLK:24576,S_IFIFO:4096,S_IFLNK:40960,S_IFSOCK:49152,S_IRWXU:448,S_IRUSR:256,S_IWUSR:128,S_IXUSR:64,S_IRWXG:56,S_IRGRP:32,S_IWGRP:16,S_IXGRP:8,S_IRWXO:7,S_IROTH:4,S_IWOTH:2,S_IXOTH:1,UV_FS_O_FILEMAP:536870912},Stats:hu,Dirent:i2,Dir:xG,readFileSync(e,t){nr(t);let r=typeof e=="number"?FA.applySync(void 0,[ar(e)]):Be(e);if(!r)throw We("EBADF","EBADF: bad file descriptor","read");let n=r,i=typeof t=="string"?t:t?.encoding;try{if(i)return Jt.readFile.applySyncPromise(void 0,[n,i]);{let s=Jt.readFileBinary.applySyncPromise(void 0,[n]);return Dt.Buffer.from(s,"base64")}}catch(s){throw Vi(s)==="ENOENT"?We("ENOENT",`ENOENT: no such file or directory, open '${r}'`,"open",r):Vi(s)==="EACCES"?We("EACCES",`EACCES: permission denied, open '${r}'`,"open",r):s}},writeFileSync(e,t,r){nr(r);let n=typeof e=="number"?FA.applySync(void 0,[ar(e)]):Be(e);if(!n)throw We("EBADF","EBADF: bad file descriptor","write");let i=n;try{if(typeof t=="string")return Jt.writeFile.applySyncPromise(void 0,[i,t]);if(ArrayBuffer.isView(t)){let s=new Uint8Array(t.buffer,t.byteOffset,t.byteLength);return Jt.writeFileBinary.applySyncPromise(void 0,[i,gu(s)])}else return Jt.writeFile.applySyncPromise(void 0,[i,String(t)])}catch(s){nB(s,"write",n)}},appendFileSync(e,t,r){nr(r);let n=Be(e),i="";try{i=$.existsSync(e)?$.readFileSync(e,"utf8"):""}catch(o){nB(o,"open",n)}let s=typeof t=="string"?t:String(t);try{$.writeFileSync(e,i+s,r)}catch(o){if(!o?.code)throw We("EACCES",`EACCES: permission denied, write '${n}'`,"write",n);nB(o,"write",n)}},readdirSync(e,t){nr(t);let r=Be(e),n=r,i;try{i=Jt.readDir.applySyncPromise(void 0,[n])}catch(o){throw Vi(o)==="ENOENT"?We("ENOENT",`ENOENT: no such file or directory, scandir '${r}'`,"scandir",r):o}let s=Ta(i);return ZW(s,r,t?.withFileTypes)},mkdirSync(e,t){let r=Be(e),n=r,i=typeof t=="object"?t?.recursive??!1:!1,s=typeof t=="object"?t?.mode:t,o=s===void 0?void 0:wa(s);return Jt.mkdir.applySyncPromise(void 0,[n,{recursive:i,mode:A1(o??511)}]),i?r:void 0},rmdirSync(e,t){let r=Be(e);Jt.rmdir.applySyncPromise(void 0,[r])},rmSync(e,t){let r=f1(e),n=t||{};try{if($.statSync(r).isDirectory())if(n.recursive){let s=$.readdirSync(r);for(let o of s){let a=r.endsWith("/")?r+o:r+"/"+o;$.statSync(a).isDirectory()?$.rmSync(a,{recursive:!0}):$.unlinkSync(a)}$.rmdirSync(r)}else $.rmdirSync(r);else $.unlinkSync(r)}catch(i){if(n.force&&i.code==="ENOENT")return;throw i}},existsSync(e){let t=PG(e);return t?t==="/dev/null"||t==="/dev/zero"||t==="/dev/urandom"||t==="/dev/stdin"||t==="/dev/stdout"||t==="/dev/stderr"?!0:Jt.exists.applySyncPromise(void 0,[t]):!1},statSync(e,t){let r=Be(e),n=r,i;try{i=Jt.stat.applySyncPromise(void 0,[n])}catch(o){throw Vi(o)==="ENOENT"?We("ENOENT",`ENOENT: no such file or directory, stat '${r}'`,"stat",r):o}let s=Ta(i);return new hu(s)},lstatSync(e,t){let r=Be(e),n=Hi(()=>Jt.lstat.applySyncPromise(void 0,[r]),"lstat",r),i=Ta(n);return new hu(i)},unlinkSync(e){let t=Be(e);Jt.unlink.applySyncPromise(void 0,[t])},renameSync(e,t){let r=Be(e,"oldPath"),n=Be(t,"newPath");Jt.rename.applySyncPromise(void 0,[r,n])},copyFileSync(e,t,r){let n=$.readFileSync(e);$.writeFileSync(t,n)},cpSync(e,t,r){let n=f1(e),i=f1(t),s=r||{};if($.statSync(n).isDirectory()){if(!s.recursive)throw We("ERR_FS_EISDIR",`Path is a directory: cp '${n}'`,"cp",n);try{$.mkdirSync(i,{recursive:!0})}catch{}let a=$.readdirSync(n);for(let A of a){let f=n.endsWith("/")?n+A:n+"/"+A,l=i.endsWith("/")?i+A:i+"/"+A;$.cpSync(f,l,s)}}else{if(s.errorOnExist&&$.existsSync(i))throw We("EEXIST",`EEXIST: file already exists, cp '${n}' -> '${i}'`,"cp",i);if(!s.force&&s.force!==void 0&&$.existsSync(i))return;$.copyFileSync(n,i)}},mkdtempSync(e,t){nr(t);let r=Be(e,"prefix"),n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";for(let i=0;i<10;i+=1){let s=va.randomBytes(6),o="";for(let A of s)o+=n[A%n.length];let a=r+o;try{return Hi(()=>Jt.mkdir.applySyncPromise(void 0,[a,{recursive:!1,mode:A1(511)}]),"mkdir",a),a}catch(A){if(i<9&&(A?.code==="EEXIST"||Vi(A)==="EEXIST"))continue;throw A}}throw We("EEXIST",`EEXIST: file already exists, mkdtemp '${r}'`,"mkdtemp",r)},opendirSync(e,t){let r=Be(e);if(!$.statSync(r).isDirectory())throw We("ENOTDIR",`ENOTDIR: not a directory, opendir '${r}'`,"opendir",r);return new xG(r)},openSync(e,t,r){let n=Be(e),i=Kve(t??"r"),s=OG(r),o=i&Hn?A1(s??438):s;try{return n1e.applySyncPromise(void 0,[n,i,o])}catch(a){let A=a?.message??String(a);throw A.includes("ENOENT")?We("ENOENT",A,"open",n):A.includes("EMFILE")?We("EMFILE",A,"open",n):a}},closeSync(e){if(ar(e),!L1e(e))try{XW.applySyncPromise(void 0,[e])}catch(t){throw(t?.message??String(t)).includes("EBADF")?We("EBADF","EBADF: bad file descriptor, close","close"):t}},readSync(e,t,r,n,i){let s=Vve(t,r,n,i),o;try{o=i1e.applySyncPromise(void 0,[e,s.length,s.position??null])}catch(f){let l=f?.message??String(f);throw l.includes("EBADF")?We("EBADF",l,"read"):f}let a=Dt.Buffer.from(o,"base64"),A=new Uint8Array(s.buffer.buffer,s.buffer.byteOffset,s.buffer.byteLength);for(let f=0;f<a.length&&f<s.length;f++)A[s.offset+f]=a[f];return a.length},writeSync(e,t,r,n,i){let s=qG(t,r,n,i),o;typeof s.buffer=="string"?o=Dt.Buffer.from(s.buffer,s.encoding):o=new Uint8Array(s.buffer.buffer,s.buffer.byteOffset+s.offset,s.length);let a=s.position??null;try{return u1.applySyncPromise(void 0,[e,gu(o),a])}catch(A){let f=A?.message??String(A);throw f.includes("EBADF")?We("EBADF",f,"write"):A}},fstatSync(e){ar(e);let t;try{t=s1e.applySyncPromise(void 0,[e])}catch(r){throw(r?.message??String(r)).includes("EBADF")?We("EBADF","EBADF: bad file descriptor, fstat","fstat"):r}return new hu(Ta(t))},ftruncateSync(e,t){ar(e);try{o1e.applySyncPromise(void 0,[e,t])}catch(r){throw(r?.message??String(r)).includes("EBADF")?We("EBADF","EBADF: bad file descriptor, ftruncate","ftruncate"):r}},fsyncSync(e){ar(e);try{VG.applySyncPromise(void 0,[e])}catch(t){throw(t?.message??String(t)).includes("EBADF")?We("EBADF","EBADF: bad file descriptor, fsync","fsync"):t}},fdatasyncSync(e){ar(e);try{VG.applySyncPromise(void 0,[e])}catch(t){throw(t?.message??String(t)).includes("EBADF")?We("EBADF","EBADF: bad file descriptor, fdatasync","fdatasync"):t}},readvSync(e,t,r){let n=ar(e),i=qm(t),s=0,a=So(r);for(let A of i){let f=A instanceof Uint8Array?A:new Uint8Array(A.buffer,A.byteOffset,A.byteLength),l=$.readSync(n,f,0,f.byteLength,a);if(s+=l,a!==null&&(a+=l),l<f.byteLength)break}return s},statfsSync(e,t){let r=Be(e);if(!$.existsSync(r))throw We("ENOENT",`ENOENT: no such file or directory, statfs '${r}'`,"statfs",r);return{type:16914839,bsize:4096,blocks:262144,bfree:262144,bavail:262144,files:1e6,ffree:999999}},globSync(e,t){let r=Array.isArray(e)?e:[e],n=[];for(let i of r)r1e(i,n);return[...new Set(n)].sort()},chmodSync(e,t){let r=Be(e),n=wa(t);Hi(()=>Jt.chmod.applySyncPromise(void 0,[r,n]),"chmod",r)},chownSync(e,t,r){let n=Be(e),i=Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),s=Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0});Hi(()=>Jt.chown.applySyncPromise(void 0,[n,i,s]),"chown",n)},fchmodSync(e,t){let r=ar(e),n=FA.applySync(void 0,[r]);if(!n)throw We("EBADF","EBADF: bad file descriptor","chmod");$.chmodSync(n,wa(t))},fchownSync(e,t,r){let n=ar(e),i=FA.applySync(void 0,[n]);if(!i)throw We("EBADF","EBADF: bad file descriptor","chown");$.chownSync(i,t,r)},lchownSync(e,t,r){let n=Be(e),i=Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),s=Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0});Hi(()=>Jt.chown.applySyncPromise(void 0,[n,i,s]),"chown",n)},linkSync(e,t){let r=Be(e,"existingPath"),n=Be(t,"newPath");Hi(()=>Jt.link.applySyncPromise(void 0,[r,n]),"link",n)},symlinkSync(e,t,r){let n=Be(e,"target"),i=Be(t);Hi(()=>Jt.symlink.applySyncPromise(void 0,[n,i]),"symlink",i)},readlinkSync(e,t){nr(t);let r=Be(e);return Hi(()=>Jt.readlink.applySyncPromise(void 0,[r]),"readlink",r)},truncateSync(e,t){let r=Be(e);Hi(()=>Jt.truncate.applySyncPromise(void 0,[r,t??0]),"truncate",r)},utimesSync(e,t,r){let n=Be(e);Hi(()=>Jt.utimes.applySyncPromise(void 0,[n,wo(t,"atime"),wo(r,"mtime")]),"utimes",n)},lutimesSync(e,t,r){let n=Be(e);Hi(()=>Jt.lutimes.applySyncPromise(void 0,[n,wo(t,"atime"),wo(r,"mtime")]),"lutimes",n)},futimesSync(e,t,r){let n=ar(e);Hi(()=>a1e.applySyncPromise(void 0,[n,wo(t,"atime"),wo(r,"mtime")]),"futimes")},readFile(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r){Be(e),nr(t);try{r(null,$.readFileSync(e,t))}catch(n){r(n)}}else return Promise.resolve($.readFileSync(e,t))},writeFile(e,t,r,n){if(typeof r=="function"&&(n=r,r=void 0),n){Be(e),nr(r);try{$.writeFileSync(e,t,r),n(null)}catch(i){n(i)}}else return Promise.resolve($.writeFileSync(e,t,r))},appendFile(e,t,r,n){if(typeof r=="function"&&(n=r,r=void 0),n){Be(e),nr(r);try{$.appendFileSync(e,t,r),n(null)}catch(i){n(i)}}else return Promise.resolve($.appendFileSync(e,t,r))},readdir(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r){Be(e),nr(t);try{r(null,$.readdirSync(e,t))}catch(n){r(n)}}else return Promise.resolve($.readdirSync(e,t))},mkdir(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r){Be(e);try{$.mkdirSync(e,t),r(null)}catch(n){r(n)}}else return $.mkdirSync(e,t),Promise.resolve()},rmdir(e,t){if(t){Be(e);let r=t;try{$.rmdirSync(e),queueMicrotask(()=>r(null))}catch(n){queueMicrotask(()=>r(n))}}else return Promise.resolve($.rmdirSync(e))},rm(e,t,r){let n={},i;typeof t=="function"?i=t:(t&&(n=t),i=r);let s=()=>{try{if($.statSync(e).isDirectory())if(n.recursive){let a=$.readdirSync(e);for(let A of a){let f=e.endsWith("/")?e+A:e+"/"+A;$.statSync(f).isDirectory()?$.rmSync(f,{recursive:!0}):$.unlinkSync(f)}$.rmdirSync(e)}else $.rmdirSync(e);else $.unlinkSync(e)}catch(o){if(n.force&&o.code==="ENOENT")return;throw o}};if(i)try{s(),queueMicrotask(()=>i(null))}catch(o){queueMicrotask(()=>i(o))}else return s(),Promise.resolve()},exists(e,t){if(SA(t,"cb"),e===void 0)throw It("path","of type string or an instance of Buffer or URL",e);queueMicrotask(()=>t(!!(PG(e)&&$.existsSync(e))))},stat(e,t){SA(t,"cb"),Be(e);let r=t;try{let n=$.statSync(e);queueMicrotask(()=>r(null,n))}catch(n){queueMicrotask(()=>r(n))}},lstat(e,t){if(t){let r=t;try{let n=$.lstatSync(e);queueMicrotask(()=>r(null,n))}catch(n){queueMicrotask(()=>r(n))}}else return Promise.resolve($.lstatSync(e))},unlink(e,t){if(t){Be(e);let r=t;try{$.unlinkSync(e),queueMicrotask(()=>r(null))}catch(n){queueMicrotask(()=>r(n))}}else return Promise.resolve($.unlinkSync(e))},rename(e,t,r){if(r){Be(e,"oldPath"),Be(t,"newPath");let n=r;try{$.renameSync(e,t),queueMicrotask(()=>n(null))}catch(i){queueMicrotask(()=>n(i))}}else return Promise.resolve($.renameSync(e,t))},copyFile(e,t,r){if(r)try{$.copyFileSync(e,t),r(null)}catch(n){r(n)}else return Promise.resolve($.copyFileSync(e,t))},cp(e,t,r,n){if(typeof r=="function"&&(n=r,r=void 0),n)try{$.cpSync(e,t,r),n(null)}catch(i){n(i)}else return Promise.resolve($.cpSync(e,t,r))},mkdtemp(e,t,r){typeof t=="function"&&(r=t,t=void 0),SA(r,"cb"),nr(t);try{r(null,$.mkdtempSync(e,t))}catch(n){r(n)}},opendir(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r)try{r(null,$.opendirSync(e,t))}catch(n){r(n)}else return Promise.resolve($.opendirSync(e,t))},open(e,t,r,n){let i="r",s=r;typeof t=="function"?(n=t,s=void 0):i=t??"r",typeof r=="function"&&(n=r,s=void 0),SA(n,"cb"),Be(e),OG(s);let o=n;try{let a=$.openSync(e,i,s);queueMicrotask(()=>o(null,a))}catch(a){queueMicrotask(()=>o(a))}},close(e,t){ar(e),SA(t,"cb");let r=t;try{$.closeSync(e),queueMicrotask(()=>r(null))}catch(n){queueMicrotask(()=>r(n))}},read(e,t,r,n,i,s){if(s){let o=s;if(e===0&&i==null&&typeof _kernelStdinRead<"u"){let A=new Uint8Array(t.buffer,t.byteOffset+r,n),f=()=>{_kernelStdinRead.apply(void 0,[n,100],{result:{promise:!0}}).then(l=>{if(l==null){setTimeout(f,1);return}if(l?.done){queueMicrotask(()=>o(null,0,t));return}let p=String(l?.dataBase64??"");if(!p){setTimeout(f,1);return}let I=Dt.Buffer.from(p,"base64"),S=Math.min(n,I.length);A.set(I.subarray(0,S),0),queueMicrotask(()=>o(null,S,t))},l=>{queueMicrotask(()=>o(l))})};f();return}let a=()=>{try{let A=$.readSync(e,t,r,n,i);queueMicrotask(()=>o(null,A,t))}catch(A){if((A?.message??String(A)).includes("EAGAIN")){setTimeout(a,1);return}queueMicrotask(()=>o(A))}};a()}else return Promise.resolve($.readSync(e,t,r,n,i))},write(e,t,r,n,i,s){if(typeof r=="function"?(s=r,r=void 0,n=void 0,i=void 0):typeof n=="function"?(s=n,n=void 0,i=void 0):typeof i=="function"&&(s=i,i=void 0),s){let o=qG(t,r,n,i),a=s;try{let A=typeof o.buffer=="string"?u1.applySyncPromise(void 0,[e,gu(Dt.Buffer.from(o.buffer,o.encoding)),o.position??null]):u1.applySyncPromise(void 0,[e,gu(Dt.Buffer.from(new Uint8Array(o.buffer.buffer,o.buffer.byteOffset+o.offset,o.length))),o.position??null]);queueMicrotask(()=>a(null,A))}catch(A){queueMicrotask(()=>a(A))}}else return Promise.resolve($.writeSync(e,t,r,n,i))},writev(e,t,r,n){typeof r=="function"&&(n=r,r=null);let i=ar(e),s=qm(t),o=So(r);if(n)try{let a=$.writevSync(i,s,o);queueMicrotask(()=>n(null,a,s))}catch(a){queueMicrotask(()=>n(a))}},writevSync(e,t,r){let n=ar(e),i=qm(t),s=So(r),o=0;for(let a of i){let A=a instanceof Uint8Array?a:new Uint8Array(a.buffer,a.byteOffset,a.byteLength);o+=$.writeSync(n,A,0,A.length,s),s!==null&&(s+=A.length)}return o},fstat(e,t){if(t)try{t(null,$.fstatSync(e))}catch(r){t(r)}else return Promise.resolve($.fstatSync(e))},fsync(e,t){ar(e),SA(t,"cb");try{$.fsyncSync(e),t(null)}catch(r){t(r)}},fdatasync(e,t){ar(e),SA(t,"cb");try{$.fdatasyncSync(e),t(null)}catch(r){t(r)}},readv(e,t,r,n){typeof r=="function"&&(n=r,r=null);let i=ar(e),s=qm(t),o=So(r);if(n)try{let a=$.readvSync(i,s,o);queueMicrotask(()=>n(null,a,s))}catch(a){queueMicrotask(()=>n(a))}},statfs(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r)try{r(null,$.statfsSync(e,t))}catch(n){r(n)}else return Promise.resolve($.statfsSync(e,t))},glob(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r)try{r(null,$.globSync(e,t))}catch(n){r(n)}},promises:{async readFile(e,t){return e instanceof du?e.readFile(t):c1(e,t)},async writeFile(e,t,r){return e instanceof du?e.writeFile(t,r):l1(e,t,r)},async appendFile(e,t,r){if(e instanceof du)return e.appendFile(t,r);let n=await c1(e,"utf8").catch(s=>s?.code==="ENOENT"?"":Promise.reject(s)),i=typeof t=="string"?t:String(t);await l1(e,n+i,r)},async readdir(e,t){return d1e(e,t)},async mkdir(e,t){return g1e(e,t)},async rmdir(e){return p1e(e)},async stat(e){return E1e(e)},async lstat(e){return y1e(e)},async unlink(e){return m1e(e)},async rename(e,t){return B1e(e,t)},async copyFile(e,t){let r=await c1(e);await l1(t,r)},async cp(e,t,r){return $.cpSync(e,t,r)},async mkdtemp(e,t){return $.mkdtempSync(e,t)},async opendir(e,t){return $.opendirSync(e,t)},async open(e,t,r){return new du($.openSync(e,t??"r",r))},async statfs(e,t){return $.statfsSync(e,t)},async glob(e,t){return $.globSync(e,t)},async access(e){return I1e(e)},async rm(e,t){return $.rmSync(e,t)},async chmod(e,t){return b1e(e,t)},async chown(e,t,r){return C1e(e,t,r)},async lchown(e,t,r){return $.lchownSync(e,t,r)},async lutimes(e,t,r){return R1e(e,t,r)},async link(e,t){return Q1e(e,t)},async symlink(e,t){return w1e(e,t)},async readlink(e){return S1e(e)},async realpath(e,t){return $.realpathSync(e,t)},async truncate(e,t){return _1e(e,t)},async utimes(e,t,r){return v1e(e,t,r)},watch(e,t){return Wve(e,t)}},accessSync(e){if(!$.existsSync(e))throw We("ENOENT",`ENOENT: no such file or directory, access '${e}'`,"access",e)},access(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r)try{$.accessSync(e),r(null)}catch(n){r(n)}else return $.promises.access(e)},realpathSync:Object.assign(function(t,r){nr(r);let n=40,i=0,s=Be(t),o=[];for(let A of s.split("/"))!A||A==="."||(A===".."?o.length>0&&o.pop():o.push(A));let a=[];for(;o.length>0;){let A=o.shift();if(A===".")continue;if(A===".."){a.length>0&&a.pop();continue}a.push(A);let f="/"+a.join("/");try{if($.lstatSync(f).isSymbolicLink()){if(++i>n){let S=new Error(`ELOOP: too many levels of symbolic links, realpath '${s}'`);throw S.code="ELOOP",S.syscall="realpath",S.path=s,S}let p=$.readlinkSync(f),I=p.split("/").filter(Boolean);p.startsWith("/")?a.length=0:a.pop(),o.unshift(...I)}}catch(l){let p=l;if(p.code==="ELOOP")throw l;if(p.code==="ENOENT"||p.code==="ENOTDIR"){let I=new Error(`ENOENT: no such file or directory, realpath '${s}'`);throw I.code="ENOENT",I.syscall="realpath",I.path=s,I}break}}return"/"+a.join("/")||"/"},{native(e,t){return nr(t),$.realpathSync(e)}}),realpath:Object.assign(function(t,r,n){let i;if(typeof r=="function"?n=r:i=r,n)nr(i),n(null,$.realpathSync(t,i));else return Promise.resolve($.realpathSync(t,i))},{native(e,t,r){let n;if(typeof t=="function"?r=t:n=t,r)nr(n),r(null,$.realpathSync.native(e,n));else return Promise.resolve($.realpathSync.native(e,n))}}),ReadStream:jW,WriteStream:zW,createReadStream:function(t,r){let n=typeof r=="string"?{encoding:r}:r;nr(n);let i=_B(n?.fd),s=GG(t,i);return new WB(s,n)},createWriteStream:function(t,r){let n=typeof r=="string"?{encoding:r}:r;nr(n),VW(n??{});let i=_B(n?.fd),s=GG(t,i);return new VB(s,n)},watch(...e){let{path:t,listener:r,options:n}=Fve(e[0],e[1],e[2]),i=Gve(t,n);return r&&i.on("change",r),i},watchFile(...e){let{path:t,listener:r,options:n}=kve(e[0],e[1],e[2]);return Yve(t,n,r)},unwatchFile(...e){let t=Be(e[0]),r=e[1];if(r!==void 0&&typeof r!="function")throw It("listener","of type function",r);let n=Wg.get(t);if(n)for(let i of[...n]){let s=i._listeners.get("change")??[];(r===void 0||s.some(o=>o===r||o._originalListener===r))&&i.close()}},chmod(e,t,r){if(r){Be(e),wa(t);try{$.chmodSync(e,t),r(null)}catch(n){r(n)}}else return Promise.resolve($.chmodSync(e,t))},chown(e,t,r,n){if(n){Be(e),Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0});try{$.chownSync(e,t,r),n(null)}catch(i){n(i)}}else return Promise.resolve($.chownSync(e,t,r))},fchmod(e,t,r){if(r){ar(e),wa(t);try{$.fchmodSync(e,t),r(null)}catch(n){r(n)}}else return ar(e),wa(t),Promise.resolve($.fchmodSync(e,t))},fchown(e,t,r,n){if(n){ar(e),Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0});try{$.fchownSync(e,t,r),n(null)}catch(i){n(i)}}else return ar(e),Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0}),Promise.resolve($.fchownSync(e,t,r))},lchown(e,t,r,n){if(arguments.length>=4){SA(n,"cb"),Be(e),Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0});try{$.lchownSync(e,t,r),n(null)}catch(i){n(i)}}else return Promise.resolve($.lchownSync(e,t,r))},link(e,t,r){if(r){Be(e,"existingPath"),Be(t,"newPath");try{$.linkSync(e,t),r(null)}catch(n){r(n)}}else return Promise.resolve($.linkSync(e,t))},symlink(e,t,r,n){if(typeof r=="function"&&(n=r),n)try{$.symlinkSync(e,t),n(null)}catch(i){n(i)}else return Promise.resolve($.symlinkSync(e,t))},readlink(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r){Be(e),nr(t);try{r(null,$.readlinkSync(e,t))}catch(n){r(n)}}else return Promise.resolve($.readlinkSync(e,t))},truncate(e,t,r){if(typeof t=="function"&&(r=t,t=0),r)try{$.truncateSync(e,t),r(null)}catch(n){r(n)}else return Promise.resolve($.truncateSync(e,t))},utimes(e,t,r,n){if(n)try{$.utimesSync(e,t,r),n(null)}catch(i){n(i)}else return Promise.resolve($.utimesSync(e,t,r))},lutimes(e,t,r,n){if(n)try{$.lutimesSync(e,t,r),n(null)}catch(i){n(i)}else return Promise.resolve($.lutimesSync(e,t,r))},futimes(e,t,r,n){if(n)try{$.futimesSync(e,t,r),n(null)}catch(i){n(i)}else return Promise.resolve($.futimesSync(e,t,r))}};KW=e=>$.readdirSync(e);u2=e=>$.statSync(e);var cR=$;et("_fsModule",cR);var Ba={platform:typeof _osConfig<"u"&&_osConfig.platform||"linux",arch:typeof _osConfig<"u"&&_osConfig.arch||"x64",type:typeof _osConfig<"u"&&_osConfig.type||"Linux",release:typeof _osConfig<"u"&&_osConfig.release||"6.8.0-secure-exec",version:typeof _osConfig<"u"&&_osConfig.version||"#1 SMP PREEMPT_DYNAMIC secure-exec",homedir:typeof _osConfig<"u"&&_osConfig.homedir||"/home/user",tmpdir:typeof _osConfig<"u"&&_osConfig.tmpdir||"/tmp",hostname:typeof _osConfig<"u"&&_osConfig.hostname||"secure-exec",machine:typeof _osConfig<"u"&&_osConfig.machine||"x86_64"};function JG(){return _s("homedir",globalThis.process?.env?.HOME||Ba.homedir)}function D1e(){return _s("tmpdir",globalThis.process?.env?.TMPDIR||Ba.tmpdir)}function T1e(){return _s("user",globalThis.process?.env?.USER||globalThis.process?.env?.LOGNAME||"user")}function N1e(){return _s("shell",globalThis.process?.env?.SHELL||"/bin/sh")}function l2(){let e=globalThis.process?.uid;return Number.isFinite(e)?e:0}function iB(){let e=globalThis.process?.gid;return Number.isFinite(e)?e:0}function $W(){return globalThis.__agentOSVirtualOs||{}}function _s(e,t){let r=$W()[e];return typeof r=="string"&&r.length>0?r:t}function lR(e,t){let r=Number($W()[e]);return Number.isSafeInteger(r)&&r>0?r:t}function jG(){return lR("cpuCount",1)}function eV(){return lR("totalmem",1073741824)}function M1e(){return Math.min(lR("freemem",536870912),eV())}var tV={SIGHUP:1,SIGINT:2,SIGQUIT:3,SIGILL:4,SIGTRAP:5,SIGABRT:6,SIGIOT:6,SIGBUS:7,SIGFPE:8,SIGKILL:9,SIGUSR1:10,SIGSEGV:11,SIGUSR2:12,SIGPIPE:13,SIGALRM:14,SIGTERM:15,SIGSTKFLT:16,SIGCHLD:17,SIGCONT:18,SIGSTOP:19,SIGTSTP:20,SIGTTIN:21,SIGTTOU:22,SIGURG:23,SIGXCPU:24,SIGXFSZ:25,SIGVTALRM:26,SIGPROF:27,SIGWINCH:28,SIGIO:29,SIGPOLL:29,SIGPWR:30,SIGSYS:31},zG={1:"SIGHUP",2:"SIGINT",3:"SIGQUIT",4:"SIGILL",5:"SIGTRAP",6:"SIGABRT",7:"SIGBUS",8:"SIGFPE",9:"SIGKILL",10:"SIGUSR1",11:"SIGSEGV",12:"SIGUSR2",13:"SIGPIPE",14:"SIGALRM",15:"SIGTERM",16:"SIGSTKFLT",17:"SIGCHLD",18:"SIGCONT",19:"SIGSTOP",20:"SIGTSTP",21:"SIGTTIN",22:"SIGTTOU",23:"SIGURG",24:"SIGXCPU",25:"SIGXFSZ",26:"SIGVTALRM",27:"SIGPROF",28:"SIGWINCH",29:"SIGIO",30:"SIGPWR",31:"SIGSYS"};function hR(e){if(e==null)return{bridgeSignal:"SIGTERM",signalCode:"SIGTERM"};if(e===0||e==="0")return{bridgeSignal:"0",signalCode:null};if(typeof e=="number"){let t=zG[e];if(t)return{bridgeSignal:t,signalCode:t};throw new Error("Unknown signal: "+e)}if(typeof e=="string"){let t=tV[e];if(t!==void 0){let r=zG[t]??e;return{bridgeSignal:r,signalCode:r}}}throw new Error("Unknown signal: "+e)}var F1e={E2BIG:7,EACCES:13,EADDRINUSE:98,EADDRNOTAVAIL:99,EAFNOSUPPORT:97,EAGAIN:11,EALREADY:114,EBADF:9,EBADMSG:74,EBUSY:16,ECANCELED:125,ECHILD:10,ECONNABORTED:103,ECONNREFUSED:111,ECONNRESET:104,EDEADLK:35,EDESTADDRREQ:89,EDOM:33,EDQUOT:122,EEXIST:17,EFAULT:14,EFBIG:27,EHOSTUNREACH:113,EIDRM:43,EILSEQ:84,EINPROGRESS:115,EINTR:4,EINVAL:22,EIO:5,EISCONN:106,EISDIR:21,ELOOP:40,EMFILE:24,EMLINK:31,EMSGSIZE:90,EMULTIHOP:72,ENAMETOOLONG:36,ENETDOWN:100,ENETRESET:102,ENETUNREACH:101,ENFILE:23,ENOBUFS:105,ENODATA:61,ENODEV:19,ENOENT:2,ENOEXEC:8,ENOLCK:37,ENOLINK:67,ENOMEM:12,ENOMSG:42,ENOPROTOOPT:92,ENOSPC:28,ENOSR:63,ENOSTR:60,ENOSYS:38,ENOTCONN:107,ENOTDIR:20,ENOTEMPTY:39,ENOTSOCK:88,ENOTSUP:95,ENOTTY:25,ENXIO:6,EOPNOTSUPP:95,EOVERFLOW:75,EPERM:1,EPIPE:32,EPROTO:71,EPROTONOSUPPORT:93,EPROTOTYPE:91,ERANGE:34,EROFS:30,ESPIPE:29,ESRCH:3,ESTALE:116,ETIME:62,ETIMEDOUT:110,ETXTBSY:26,EWOULDBLOCK:11,EXDEV:18},k1e={PRIORITY_LOW:19,PRIORITY_BELOW_NORMAL:10,PRIORITY_NORMAL:0,PRIORITY_ABOVE_NORMAL:-7,PRIORITY_HIGH:-14,PRIORITY_HIGHEST:-20},rV={platform(){return _s("platform",Ba.platform)},arch(){return _s("arch",Ba.arch)},type(){return _s("type",Ba.type)},release(){return _s("release",Ba.release)},version(){return _s("version",Ba.version)},homedir(){return JG()},tmpdir(){return D1e()},hostname(){return _s("hostname",Ba.hostname)},userInfo(e){return{username:T1e(),uid:l2(),gid:iB(),shell:N1e(),homedir:JG()}},cpus(){return Array.from({length:jG()},()=>({model:"Virtual CPU",speed:2e3,times:{user:1e5,nice:0,sys:5e4,idle:8e5,irq:0}}))},totalmem(){return eV()},freemem(){return M1e()},loadavg(){return[.1,.1,.1]},uptime(){return 3600},networkInterfaces(){return{}},endianness(){return"LE"},EOL:`
-`,devNull:"/dev/null",machine(){return _s("machine",Ba.machine)},constants:{signals:tV,errno:F1e,priority:k1e,dlopen:{RTLD_LAZY:1,RTLD_NOW:2,RTLD_GLOBAL:256,RTLD_LOCAL:0},UV_UDP_REUSEADDR:4},getPriority(e){return 0},setPriority(e,t){},availableParallelism(){return jG()}};et("_osModule",rV);var U1e=rV,nV={};_2(nV,{ChildProcess:()=>gR,default:()=>V1e,exec:()=>fV,execFile:()=>cV,execFileSync:()=>lV,execSync:()=>uV,fork:()=>hV,spawn:()=>n0,spawnSync:()=>pR});var Iu=new Map,Vg=new Map;function x1e(e){if(typeof e!="number")return;let t=Vg.get(e);t?t.holders+=1:Vg.set(e,{holders:1,closePending:!1})}function L1e(e){let t=Vg.get(e);return t?(t.closePending=!0,!0):!1}function P1e(e){let t=Vg.get(e);if(t&&(t.holders-=1,!(t.holders>0)&&(Vg.delete(e),t.closePending)))try{XW.applySyncPromise(void 0,[e])}catch{}}var O1e=200,H1e=25;function q1e(e){return!e||typeof e!="object"?null:typeof e.sessionId=="string"&&e.sessionId.length>0||typeof e.sessionId=="number"&&Number.isFinite(e.sessionId)?e.sessionId:null}function dR(e){if(e&&typeof e=="object")return e;if(typeof e=="string")try{let t=JSON.parse(e);return t&&typeof t=="object"?t:e}catch{}return e}var h2="AGENTOS_IPC:";function iV(e){let t=JSON.stringify(e),r=typeof Buffer<"u"?Buffer.from(t,"utf8").toString("base64"):btoa(t);return`${h2}${r}
-`}function G1e(e){let t=typeof Buffer<"u"?Buffer.from(e,"base64").toString("utf8"):atob(e);return JSON.parse(t)}function sV(e,t){let r=`${e}${typeof Buffer<"u"?Buffer.from(t).toString("utf8"):String(t)}`,n=[],i=[],s=0;for(;;){let o=r.indexOf(h2,s);if(o===-1)return i.push(r.slice(s)),{buffer:"",messages:n,output:i.join("")};i.push(r.slice(s,o));let a=o+h2.length,A=r.indexOf(`
-`,a);if(A===-1)return{buffer:r.slice(o),messages:n,output:i.join("")};try{n.push(G1e(r.slice(a,A)))}catch{i.push(r.slice(o,A+1))}s=A+1}}function oV(e,t){if(!t||typeof t!="object")return!1;if(t.type==="stdout"||t.type==="stderr"){let r={sessionId:e};return typeof t.data=="string"?r.data=t.data:typeof Buffer<"u"&&Buffer.isBuffer(t.data)?r.dataBase64=t.data.toString("base64"):t.data instanceof Uint8Array||ArrayBuffer.isView(t.data)?r.dataBase64=Buffer.from(t.data.buffer,t.data.byteOffset,t.data.byteLength).toString("base64"):t.data?.__agentOSType==="bytes"&&typeof t.data.base64=="string"&&(r.dataBase64=t.data.base64),d2(`child_${t.type}`,r),!0}return t.type==="exit"?(d2("child_exit",{sessionId:e,code:t.exitCode,signal:t.signal??null}),!0):!1}function aV(e){e?._detachedBootstrapPending&&(e._detachedBootstrapPending=!1,e._detachedBootstrapPollsRemaining=0,e._detachedBootstrapTimer!=null&&(clearTimeout(e._detachedBootstrapTimer),e._detachedBootstrapTimer=null),e._pollRefed||(e._pollTimer?.unref?.(),e._handleRefed&&e._handleId&&typeof _unregisterHandle=="function"&&(_unregisterHandle(e._handleId),e._handleRefed=!1)))}function AV(e){e?._detachedBootstrapPending&&(e._detachedBootstrapPollsRemaining>0&&(e._detachedBootstrapPollsRemaining-=1),e._detachedBootstrapPollsRemaining===0&&aV(e))}function Y1e(e,t=H1e){if(!e?.detached||e._sessionId==null||typeof _childProcessPoll>"u")return!1;if(!e._detachedBootstrapPending)return!0;for(let r=0;r<t;r+=1){if(!Iu.has(e._sessionId))return!0;let n=dR(_childProcessPoll.applySync(void 0,[e._sessionId,10]));if(AV(e),!n||typeof n!="object"){if(!e._detachedBootstrapPending)return!0;continue}if(oV(e._sessionId,n)&&n?.type==="exit"||!e._detachedBootstrapPending)return!0}return!e._detachedBootstrapPending}function h1(e,t){if(typeof e!="number")return!1;try{let r=typeof Buffer<"u"&&Buffer.isBuffer(t)?t:typeof Buffer<"u"?Buffer.from(t):t;$.writeSync(e,r,0,r.length,null)}catch{}return!0}function vB(e,t){if(typeof e!="number"||t==null)return!1;try{let r=typeof t=="string"?typeof Buffer<"u"?Buffer.from(t):t:typeof Buffer<"u"&&Buffer.isBuffer(t)?t:typeof Buffer<"u"?Buffer.from(t):t;$.writeSync(e,r,0,r.length,null)}catch{}return!0}function d1(e,t,r){let n=Iu.get(e);if(n){if(t==="stdout"){let i=typeof Buffer<"u"?Buffer.from(r):r;if(n._ipcEnabled){let s=sV(n._ipcStdoutBuffer,i);n._ipcStdoutBuffer=s.buffer;for(let a of s.messages)n._emitOrQueueIpcMessage(a);if(s.output.length===0)return;let o=typeof Buffer<"u"?Buffer.from(s.output,"utf8"):s.output;if(h1(n._stdoutFd,o))return;n.stdout.emit("data",o);return}if(h1(n._stdoutFd,i))return;n.stdout.emit("data",i)}else if(t==="stderr"){let i=typeof Buffer<"u"?Buffer.from(r):r;if(h1(n._stderrFd,i))return;n.stderr.emit("data",i)}else if(t==="exit"){aV(n);let i=n.connected;n.connected=!1;let s=n._pendingSignalCode??(r&&typeof r=="object"?r.signal??null:null),o=r&&typeof r=="object"?r.code:r;if(n._pendingSignalCode=null,n.signalCode=s,n.exitCode=s==null?o:null,n.stdout.emit("end"),n.stderr.emit("end"),i&&n.emit("disconnect"),n.emit("close",n.exitCode,n.signalCode),n.emit("exit",n.exitCode,n.signalCode),Array.isArray(n._inheritedFds)){for(let a of n._inheritedFds)P1e(a);n._inheritedFds=[]}Iu.delete(e),typeof _unregisterHandle=="function"&&_unregisterHandle(`child:${e}`)}}}var d2=(e,t,r)=>{if(typeof e=="number"){d1(e,t,r);return}let n=(()=>{if(t&&typeof t=="object")return t;if(typeof t=="string")try{return JSON.parse(t)}catch{return null}return null})(),i=q1e(n);if(i!=null){if(e==="child_stdout"||e==="child_stderr"){let s=n?.data,o;if(typeof Buffer<"u"&&Buffer.isBuffer(s))o=Buffer.from(s);else if(s instanceof Uint8Array)o=typeof Buffer<"u"?Buffer.from(s.buffer,s.byteOffset,s.byteLength):s;else if(ArrayBuffer.isView(s))o=typeof Buffer<"u"?Buffer.from(s.buffer,s.byteOffset,s.byteLength):new Uint8Array(s.buffer,s.byteOffset,s.byteLength);else{let a=typeof n?.dataBase64=="string"?n.dataBase64:typeof s=="string"?s:s?.__agentOSType==="bytes"&&typeof s?.base64=="string"?s.base64:"";o=typeof Buffer<"u"?Buffer.from(a,"base64"):new Uint8Array(atob(a).split("").map(A=>A.charCodeAt(0)))}d1(i,e==="child_stdout"?"stdout":"stderr",o);return}if(e==="child_exit"){let s=typeof n?.code=="number"?n.code:Number(n?.code??1),o=typeof n?.signal=="string"?n.signal:null;d1(i,"exit",{code:s,signal:o})}}};et("_childProcessDispatch",d2);var W1e=64;function g2(e,t=0){let r=Iu.get(e);if(!r||typeof _childProcessPoll>"u"||r._pollScheduled)return;r._pollScheduled=!0;let n=setTimeout(()=>{if(r._pollTimer=null,r._pollScheduled=!1,!Iu.has(e))return;let i=0;for(;i<W1e&&Iu.has(e);){AV(r);let s=dR(_childProcessPoll.applySync(void 0,[e,i===0?10:0]));if(!s||typeof s!="object"){g2(e,i===0?5:0);return}if(i+=1,oV(e,s)&&s.type==="exit")return}g2(e,0)},t);r._pollTimer=n,!r._pollRefed&&!r._detachedBootstrapPending&&typeof n?.unref=="function"&&n.unref()}function Dl(e,t){return(e._listeners[t]?.length??0)>0||(e._onceListeners[t]?.length??0)>0}function KG(e,t){let r=e._readableEncoding;return!r||typeof t=="string"?t:typeof Buffer<"u"&&Buffer.isBuffer(t)?t.toString(r):t instanceof Uint8Array?typeof Buffer<"u"?Buffer.from(t).toString(r):String(t):t}function _g(e){e._flushScheduled||(e._flushScheduled=!0,queueMicrotask(()=>{if(e._flushScheduled=!1,e._bufferedChunks.length>0&&Dl(e,"data")){let t=e._bufferedChunks.splice(0,e._bufferedChunks.length);for(let r of t)e.emit("data",r)}e._ended&&e._bufferedChunks.length===0&&Dl(e,"end")&&e.emit("end")}))}function Gm(e,t){if(e._maxListenersWarned instanceof Set||(e._maxListenersWarned=new Set),e._maxListeners>0&&!e._maxListenersWarned.has(t)){let r=(e._listeners[t]?.length??0)+(e._onceListeners[t]?.length??0);if(r>e._maxListeners){e._maxListenersWarned.add(t);let n=`MaxListenersExceededWarning: Possible EventEmitter memory leak detected. ${r} ${t} listeners added. MaxListeners is ${e._maxListeners}. Use emitter.setMaxListeners() to increase limit`;typeof console<"u"&&console.error&&console.error(n)}}}function XG(e){let t=[],r=[],n=[],i=!1,s=()=>{for(;n.length>0;){let f=n.shift();if(r.length>0){f(Promise.reject(r.shift()));continue}if(t.length>0){f(Promise.resolve({done:!1,value:t.shift()}));continue}if(i){f(Promise.resolve({done:!0,value:void 0}));continue}n.unshift(f);break}},o=f=>{t.push(f),s()},a=()=>{i=!0,s()},A=f=>{r.push(f),i=!0,s()};return e.on("data",o),e.on("end",a),e.on("close",a),e.on("error",A),_g(e),{next(){return r.length>0?Promise.reject(r.shift()):t.length>0?Promise.resolve({done:!1,value:t.shift()}):i?Promise.resolve({done:!0,value:void 0}):new Promise(f=>{n.push(f)})},return(){return e.off("data",o),e.off("end",a),e.off("close",a),e.off("error",A),i=!0,s(),Promise.resolve({done:!0,value:void 0})},[Symbol.asyncIterator](){return this}}}var vl=1e3,gR=class{constructor(){y(this,"_listeners",{});y(this,"_onceListeners",{});y(this,"_maxListeners",10);y(this,"_maxListenersWarned",new Set);y(this,"pid",vl++);y(this,"killed",!1);y(this,"exitCode",null);y(this,"signalCode",null);y(this,"_pendingSignalCode",null);y(this,"connected",!1);y(this,"_pollScheduled",!1);y(this,"_pollRefed",!0);y(this,"_pollTimer",null);y(this,"_detachedBootstrapPending",!1);y(this,"_detachedBootstrapPollsRemaining",0);y(this,"_detachedBootstrapTimer",null);y(this,"_sessionId",null);y(this,"_handleId",null);y(this,"_handleDescription","");y(this,"_handleRefed",!1);y(this,"_ipcEnabled",!1);y(this,"_ipcStdoutBuffer","");y(this,"_ipcQueuedMessages",[]);y(this,"spawnfile","");y(this,"spawnargs",[]);y(this,"stdin");y(this,"stdout");y(this,"stderr");y(this,"stdio");this.stdin={writable:!0,destroyed:!1,_listeners:{},_onceListeners:{},write(e,t,r){let n=typeof t=="function"?t:r;return n&&queueMicrotask(()=>n(null)),!0},end(e,t,r){let n=typeof e=="function"?e:typeof t=="function"?t:r;this.writable=!1,n&&queueMicrotask(()=>n())},destroy(){return this.writable=!1,this.destroyed=!0,this.emit("close"),this},on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this},once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),this},off(e,t){if(this._listeners[e]){let r=this._listeners[e].indexOf(t);r!==-1&&this._listeners[e].splice(r,1)}if(this._onceListeners[e]){let r=this._onceListeners[e].indexOf(t);r!==-1&&this._onceListeners[e].splice(r,1)}return this},removeListener(e,t){return this.off(e,t)},emit(e,...t){let r=!1;return this._listeners[e]&&this._listeners[e].forEach(n=>{n(...t),r=!0}),this._onceListeners[e]&&(this._onceListeners[e].forEach(n=>{n(...t),r=!0}),this._onceListeners[e]=[]),r}},this.stdout={readable:!0,isTTY:!1,destroyed:!1,_listeners:{},_onceListeners:{},_bufferedChunks:[],_ended:!1,_flushScheduled:!1,_maxListeners:10,_maxListenersWarned:new Set,on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),Gm(this,e),(e==="data"||e==="end")&&_g(this),this},once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),Gm(this,e),(e==="data"||e==="end")&&_g(this),this},off(e,t){if(this._listeners[e]){let r=this._listeners[e].indexOf(t);r!==-1&&this._listeners[e].splice(r,1)}if(this._onceListeners[e]){let r=this._onceListeners[e].indexOf(t);r!==-1&&this._onceListeners[e].splice(r,1)}return this},removeListener(e,t){return this.off(e,t)},emit(e,...t){return e==="data"&&(t[0]=KG(this,t[0]),!Dl(this,"data"))?(this._bufferedChunks.push(t[0]),!1):e==="end"&&(this._ended=!0,!Dl(this,"end"))?!1:(this._listeners[e]&&this._listeners[e].forEach(r=>r(...t)),this._onceListeners[e]&&(this._onceListeners[e].forEach(r=>r(...t)),this._onceListeners[e]=[]),!0)},read(){return null},setEncoding(e){return this._readableEncoding=e==null||e==="buffer"?null:String(e),this},setMaxListeners(e){return this._maxListeners=e,this},getMaxListeners(){return this._maxListeners},pipe(e){return e},pause(){return this},resume(){return this},destroy(){return this.readable=!1,this._ended=!0,this.destroyed=!0,this.emit("close"),this},[Symbol.asyncIterator](){return XG(this)}},this.stderr={readable:!0,isTTY:!1,destroyed:!1,_listeners:{},_onceListeners:{},_bufferedChunks:[],_ended:!1,_flushScheduled:!1,_maxListeners:10,_maxListenersWarned:new Set,on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),Gm(this,e),(e==="data"||e==="end")&&_g(this),this},once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),Gm(this,e),(e==="data"||e==="end")&&_g(this),this},off(e,t){if(this._listeners[e]){let r=this._listeners[e].indexOf(t);r!==-1&&this._listeners[e].splice(r,1)}if(this._onceListeners[e]){let r=this._onceListeners[e].indexOf(t);r!==-1&&this._onceListeners[e].splice(r,1)}return this},removeListener(e,t){return this.off(e,t)},emit(e,...t){return e==="data"&&(t[0]=KG(this,t[0]),!Dl(this,"data"))?(this._bufferedChunks.push(t[0]),!1):e==="end"&&(this._ended=!0,!Dl(this,"end"))?!1:(this._listeners[e]&&this._listeners[e].forEach(r=>r(...t)),this._onceListeners[e]&&(this._onceListeners[e].forEach(r=>r(...t)),this._onceListeners[e]=[]),!0)},read(){return null},setEncoding(e){return this._readableEncoding=e==null||e==="buffer"?null:String(e),this},setMaxListeners(e){return this._maxListeners=e,this},getMaxListeners(){return this._maxListeners},pipe(e){return e},pause(){return this},resume(){return this},destroy(){return this.readable=!1,this._ended=!0,this.destroyed=!0,this.emit("close"),this},[Symbol.asyncIterator](){return XG(this)}},this.stdio=[this.stdin,this.stdout,this.stderr]}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this._checkMaxListeners(e),e==="message"&&this._flushQueuedIpcMessages(),this}once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),this._checkMaxListeners(e),e==="message"&&this._flushQueuedIpcMessages(),this}off(e,t){if(this._listeners[e]){let r=this._listeners[e].indexOf(t);r!==-1&&this._listeners[e].splice(r,1)}return this}removeListener(e,t){return this.off(e,t)}setMaxListeners(e){return this._maxListeners=e,this}getMaxListeners(){return this._maxListeners}_checkMaxListeners(e){if(this._maxListenersWarned instanceof Set||(this._maxListenersWarned=new Set),this._maxListeners>0&&!this._maxListenersWarned.has(e)){let t=(this._listeners[e]?.length??0)+(this._onceListeners[e]?.length??0);if(t>this._maxListeners){this._maxListenersWarned.add(e);let r=`MaxListenersExceededWarning: Possible EventEmitter memory leak detected. ${t} ${e} listeners added to [ChildProcess]. MaxListeners is ${this._maxListeners}. Use emitter.setMaxListeners() to increase limit`;typeof console<"u"&&console.error&&console.error(r)}}}_hasIpcMessageListeners(){return(this._listeners.message?.length??0)>0||(this._onceListeners.message?.length??0)>0}_emitOrQueueIpcMessage(e){return this._hasIpcMessageListeners()?this.emit("message",e,void 0):(this._ipcQueuedMessages.push(e),!1)}_flushQueuedIpcMessages(){this._ipcQueuedMessages.length!==0&&queueMicrotask(()=>{for(;this._ipcQueuedMessages.length>0&&this._hasIpcMessageListeners();)this.emit("message",this._ipcQueuedMessages.shift(),void 0)})}emit(e,...t){let r=!1;return this._listeners[e]&&this._listeners[e].forEach(n=>{n(...t),r=!0}),this._onceListeners[e]&&(this._onceListeners[e].forEach(n=>{n(...t),r=!0}),this._onceListeners[e]=[]),r}kill(e){let t=hR(e);return this.killed=!0,this._pendingSignalCode=t.signalCode,!0}ref(){return this._pollRefed=!0,this._pollTimer?.ref?.(),!this._handleRefed&&this._handleId&&typeof _registerHandle=="function"&&(_registerHandle(this._handleId,this._handleDescription),this._handleRefed=!0),this}unref(){return this._pollRefed=!1,this._detachedBootstrapPending&&Y1e(this),this._detachedBootstrapPending||this._pollTimer?.unref?.(),!this._detachedBootstrapPending&&this._handleRefed&&this._handleId&&typeof _unregisterHandle=="function"&&(_unregisterHandle(this._handleId),this._handleRefed=!1),this}disconnect(){this.connected=!1,this.emit("disconnect")}send(e,t,r,n){if(!this.connected||!this._ipcEnabled||this._sessionId==null)return!1;let i=typeof t=="function"?t:typeof r=="function"?r:n;try{let s=iV(e);return this.stdin.write(s,"utf8",i),!0}catch(s){return i?(queueMicrotask(()=>i(s)),!1):(this.emit("error",s),!1)}}_complete(e,t,r){let n=this._pendingSignalCode??this.signalCode;if(this._pendingSignalCode=null,this.signalCode=n??null,this.exitCode=n==null?r:null,e){let i=typeof Buffer<"u"?Buffer.from(e):e;this.stdout.emit("data",i)}if(t){let i=typeof Buffer<"u"?Buffer.from(t):t;this.stderr.emit("data",i)}this.stdout.emit("end"),this.stderr.emit("end"),this.emit("close",this.exitCode,this.signalCode),this.emit("exit",this.exitCode,this.signalCode)}};function fV(e,t,r){typeof t=="function"&&(r=t,t={});let n=n0(e,[],{...t,shell:!0});n.spawnargs=[e],n.spawnfile=e;let i=t?.maxBuffer??1024*1024,s="",o="",a=0,A=0,f=!1,l=!1,p=null,I=S=>{!r||l||(l=!0,r(S,s,o))};return n.stdout.on("data",S=>{if(f)return;let _=String(S);s+=_,a+=_.length,a>i&&(f=!0,n.kill("SIGTERM"))}),n.stderr.on("data",S=>{if(f)return;let _=String(S);o+=_,A+=_.length,A>i&&(f=!0,n.kill("SIGTERM"))}),n.on("close",(...S)=>{let _=S[0];if(r)if(f){let N=new Error("stdout maxBuffer length exceeded");N.code="ERR_CHILD_PROCESS_STDIO_MAXBUFFER",N.killed=!0,N.cmd=e,N.stdout=s,N.stderr=o,I(N)}else if(_!==0&&p==null){let N=new Error("Command failed: "+e);N.code=_,N.killed=!1,N.signal=null,N.cmd=e,N.stdout=s,N.stderr=o,I(N)}else I(null)}),n.on("error",S=>{if(r){let _=S instanceof Error?S:new Error(String(S));p=_,_.cmd=e,_.stdout=s,_.stderr=o,I(_)}}),n}function uV(e,t){let r=t||{};if(typeof _childProcessSpawnSync>"u")throw new Error("child_process.execSync requires CommandExecutor to be configured");let n=r.cwd??(typeof process<"u"?process.cwd():"/"),i=r.maxBuffer??1024*1024,s=_childProcessSpawnSync.applySyncPromise(void 0,[e,JSON.stringify([]),JSON.stringify({cwd:n,env:r.env,input:r.input==null?null:gu(r.input),maxBuffer:i,shell:!0})]),o=typeof s=="string"?JSON.parse(s):s,a=Array.isArray(r.stdio)?r.stdio:r.stdio==="inherit"?["inherit","inherit","inherit"]:[];if(vB(a[1],o.stdout)&&(o.stdout=typeof o.stdout=="string"?"":Buffer.from("")),vB(a[2],o.stderr),o.maxBufferExceeded){let A=new Error("stdout maxBuffer length exceeded");throw A.code="ERR_CHILD_PROCESS_STDIO_MAXBUFFER",A.stdout=o.stdout,A.stderr=o.stderr,A}if(o.code!==0){let A=new Error("Command failed: "+e);throw A.status=o.code,A.stdout=o.stdout,A.stderr=o.stderr,A.output=[null,o.stdout,o.stderr],A}return(r.encoding==="buffer"||!r.encoding)&&typeof Buffer<"u"?Buffer.from(o.stdout):o.stdout}function n0(e,t,r){let n=[],i={};Array.isArray(t)?(n=t,i=r||{}):i=t||{};let s=new gR;s.spawnfile=e,s.spawnargs=[e,...n],s.detached=i.detached===!0,s._detachedBootstrapPending=s.detached,s._detachedBootstrapPollsRemaining=s.detached?O1e:0;let o=Array.isArray(i.stdio)?i.stdio:i.stdio==="inherit"?["inherit","inherit","inherit"]:[];s._stdoutFd=typeof o[1]=="number"?o[1]:null,s._stderrFd=typeof o[2]=="number"?o[2]:null,s._inheritedFds=[];for(let A of[s._stdoutFd,s._stderrFd])typeof A=="number"&&(x1e(A),s._inheritedFds.push(A));if(typeof _childProcessSpawnStart<"u"){let A;try{let l=i.cwd??(typeof process<"u"?process.cwd():"/");A=dR(_childProcessSpawnStart.applySync(void 0,[e,JSON.stringify(n),JSON.stringify({cwd:l,env:i.env,shell:i.shell===!0||typeof i.shell=="string",detached:i.detached===!0})]))}catch(l){let p=l instanceof Error?l:new Error(String(l));return p.code==null&&/command not found:/i.test(String(p.message||""))?p.code="ENOENT":p.code==null&&/ERR_NATIVE_BINARY_NOT_SUPPORTED\b/i.test(String(p.message||""))&&(p.code="ERR_NATIVE_BINARY_NOT_SUPPORTED"),queueMicrotask(()=>{s.emit("error",p)}),s}let f=typeof A=="object"&&A!==null?A.childId:A;return Iu.set(f,s),s._sessionId=f,typeof _registerHandle=="function"&&(s._handleId=`child:${f}`,s._handleDescription=`child_process: ${e} ${n.join(" ")}`,_registerHandle(s._handleId,s._handleDescription),s._handleRefed=!0),s.stdin.write=(l,p,I)=>{let S=typeof p=="function"?p:I;if(typeof _childProcessStdinWrite>"u")return!1;let _=typeof l=="string"?new TextEncoder().encode(l):l;try{_childProcessStdinWrite.applySync(void 0,[f,_])}catch(N){return S?(queueMicrotask(()=>S(N)),!1):(s.stdin.emit("error",N),!1)}return S&&queueMicrotask(()=>S(null)),!0},s.stdin.end=(l,p,I)=>{let S=typeof l=="function"?l:typeof p=="function"?p:I;if(l!=null&&typeof l!="function"&&s.stdin.write(l,typeof p=="string"?p:void 0),typeof _childProcessStdinClose<"u")try{_childProcessStdinClose.applySync(void 0,[f])}catch(_){if(S){queueMicrotask(()=>S(_));return}s.stdin.emit("error",_);return}s.stdin.writable=!1,S&&queueMicrotask(()=>S())},s.stdin.destroy=()=>(s.stdin.end(),s.stdin.destroyed=!0,s.stdin.emit("close"),s.stdin),s.kill=l=>{if(typeof _childProcessKill>"u")return!1;let p=hR(l);return _childProcessKill.applySync(void 0,[f,p.bridgeSignal]),s.killed=!0,s._pendingSignalCode=p.signalCode,!0},s.pid=typeof A=="object"&&A!==null?Number(A.pid)||-1:Number(f)||-1,(o[1]==="inherit"||o[1]===1)&&s.stdout.on("data",l=>process.stdout.write(l)),(o[2]==="inherit"||o[2]===2)&&s.stderr.on("data",l=>process.stderr.write(l)),setTimeout(()=>s.emit("spawn"),0),g2(f,0),s}let a=new Error("child_process.spawn requires CommandExecutor to be configured");return setTimeout(()=>{s.emit("error",a),s._complete("",a.message,1)},0),s}function pR(e,t,r){let n=[],i={};if(Array.isArray(t)?(n=t,i=r||{}):i=t||{},typeof _childProcessSpawnSync>"u")return{pid:vl++,output:[null,"","child_process.spawnSync requires CommandExecutor to be configured"],stdout:"",stderr:"child_process.spawnSync requires CommandExecutor to be configured",status:1,signal:null,error:new Error("child_process.spawnSync requires CommandExecutor to be configured")};try{let s=i.cwd??(typeof process<"u"?process.cwd():"/"),o=i.maxBuffer,a=i.encoding==null||i.encoding==="buffer",A=Number.isInteger(i.timeout)&&i.timeout>0?i.timeout:null,f=hR(i.killSignal).signalCode??"SIGTERM",l=_childProcessSpawnSync.applySyncPromise(void 0,[e,JSON.stringify(n),JSON.stringify({cwd:s,env:i.env,input:i.input==null?null:gu(i.input),maxBuffer:o,shell:i.shell===!0||typeof i.shell=="string",timeout:A,killSignal:f})]),p=typeof l=="string"?JSON.parse(l):l,I=Array.isArray(i.stdio)?i.stdio:i.stdio==="inherit"?["inherit","inherit","inherit"]:[],S=a&&typeof Buffer<"u"?Buffer.from(p.stdout):p.stdout,_=a&&typeof Buffer<"u"?Buffer.from(p.stderr):p.stderr;if(vB(I[1],S)&&(S=a&&typeof Buffer<"u"?Buffer.from(""):""),vB(I[2],_)&&(_=a&&typeof Buffer<"u"?Buffer.from(""):""),p.timedOut){let N=new Error(`spawnSync ${e} ETIMEDOUT`);return N.code="ETIMEDOUT",{pid:vl++,output:[null,S,_],stdout:S,stderr:_,status:null,signal:p.signal??f,error:N}}if(p.maxBufferExceeded){let N=new Error("stdout maxBuffer length exceeded");return N.code="ERR_CHILD_PROCESS_STDIO_MAXBUFFER",{pid:vl++,output:[null,S,_],stdout:S,stderr:_,status:p.code,signal:null,error:N}}return{pid:vl++,output:[null,S,_],stdout:S,stderr:_,status:p.code,signal:null,error:void 0}}catch(s){s&&typeof s=="object"&&s.code==null&&/ERR_NATIVE_BINARY_NOT_SUPPORTED\b/i.test(String(s.message||s))&&(s.code="ERR_NATIVE_BINARY_NOT_SUPPORTED");let o=s instanceof Error?s.message:String(s),a=i.encoding==null||i.encoding==="buffer",A=a&&typeof Buffer<"u"?Buffer.from(""):"",f=a&&typeof Buffer<"u"?Buffer.from(o):o;return{pid:vl++,output:[null,A,f],stdout:A,stderr:f,status:1,signal:null,error:s instanceof Error?s:new Error(String(s))}}}function cV(e,t,r,n){let i=[],s={},o;typeof t=="function"?o=t:typeof r=="function"?(i=t.slice(),o=r):(i=Array.isArray(t)?t:[],s=r||{},o=n);let a=s.maxBuffer??1024*1024,A=n0(e,i,s),f="",l="",p=0,I=0,S=!1;return A.stdout.on("data",_=>{let N=String(_);f+=N,p+=N.length,p>a&&!S&&(S=!0,A.kill("SIGTERM"))}),A.stderr.on("data",_=>{let N=String(_);l+=N,I+=N.length,I>a&&!S&&(S=!0,A.kill("SIGTERM"))}),A.on("close",(..._)=>{let N=_[0];if(o)if(S){let O=new Error("stdout maxBuffer length exceeded");O.code="ERR_CHILD_PROCESS_STDIO_MAXBUFFER",O.killed=!0,O.stdout=f,O.stderr=l,o(O,f,l)}else if(N!==0){let O=new Error("Command failed: "+e);O.code=N,O.stdout=f,O.stderr=l,o(O,f,l)}else o(null,f,l)}),A.on("error",_=>{o&&o(_,f,l)}),A}function lV(e,t,r){let n=[],i={};Array.isArray(t)?(n=t,i=r||{}):i=t||{};let s=i.maxBuffer??1024*1024,o=pR(e,n,{...i,maxBuffer:s});if(o.error&&String(o.error.code)==="ERR_CHILD_PROCESS_STDIO_MAXBUFFER")throw o.error;if(o.status!==0){let a=new Error("Command failed: "+e);throw a.status=o.status??void 0,a.stdout=String(o.stdout),a.stderr=String(o.stderr),a}return i.encoding==="buffer"||!i.encoding||typeof o.stdout=="string"?o.stdout:o.stdout.toString(i.encoding)}function hV(e,t,r){if(typeof e!="string"||e.length===0)throw new TypeError('The "modulePath" argument must be of type string');let n=[],i={};Array.isArray(t)?(n=t.slice(),i=r||{}):i=t||{};let s=i.cwd??(typeof process<"u"?process.cwd():"/"),o=Array.isArray(i.execArgv)?i.execArgv:typeof process<"u"&&Array.isArray(process.execArgv)?process.execArgv:[],a={...typeof process<"u"?process.env:{},...i.env||{},AGENTOS_NODE_IPC:"1"},A=n0(i.execPath||(typeof process<"u"?process.execPath:"node"),[...o,e,...n],{...i,cwd:s,env:a,shell:!1});return A._ipcEnabled=!0,A.connected=!0,A}var dV={ChildProcess:gR,exec:fV,execSync:uV,spawn:n0,spawnSync:pR,execFile:cV,execFileSync:lV,fork:hV};et("_childProcessModule",dV);var V1e=dV,oi={},bn={},p2=new _u,ZG="process.stdin",Or="",E2=!1,Ym=!1,sB=!1,oB=!1;vu("_stdinData",typeof _processConfig<"u"&&_processConfig.stdin||"");vu("_stdinPosition",0);vu("_stdinEnded",!1);vu("_stdinFlowMode",!1);function Ra(){return globalThis._stdinData}function J1e(e){globalThis._stdinData=e}function Au(){return globalThis._stdinPosition}function ER(e){globalThis._stdinPosition=e}function LA(){return globalThis._stdinEnded}function yR(e){globalThis._stdinEnded=e}function RB(){return globalThis._stdinFlowMode}function vg(e){globalThis._stdinFlowMode=e}function j1e(e){Or="",E2=!1,p2=e,sB=!1,oB=!1}function g1(){if(!(LA()||!Ra())&&RB()&&Au()<Ra().length){let e=Ra().slice(Au());ER(Ra().length);let t=[...oi.data||[],...bn.data||[]];bn.data=[];for(let i of t)i(e);yR(!0);let r=[...oi.end||[],...bn.end||[]];bn.end=[];for(let i of r)i();let n=[...oi.close||[],...bn.close||[]];bn.close=[];for(let i of n)i()}}function Jg(e,t){let r=[...oi[e]||[],...bn[e]||[]];bn[e]=[];for(let n of r)try{n(t)}catch(i){let s=i0(i);if(!s.handled&&s.rethrow!==null){if(jB(s.rethrow))return IV(s.rethrow),!0;throw s.rethrow}return!0}return r.length>0}function jg(e){if(e){if(!Ym&&typeof _registerHandle=="function")try{_registerHandle(ZG,"process.stdin"),Ym=!0}catch{}return}if(Ym&&typeof _unregisterHandle=="function"){try{_unregisterHandle(ZG)}catch{}Ym=!1}}function JB(){if(!RB()||Or.length===0)return;let e=Or;Or="";let t=DA.encoding?e:Se.Buffer.from(e);Jg("data",t),bu()}function bu(){!LA()||oB||Or.length>0||sB||(sB=!0,queueMicrotask(()=>{sB=!1,!(!LA()||oB||Or.length>0)&&(oB=!0,Jg("end"),Jg("close"),jg(!1))}))}function gV(){LA()||(yR(!0),JB(),bu())}function fu(){return typeof __runtimeStreamStdin<"u"&&!!__runtimeStreamStdin}function p1(){E2||!vA()&&!fu()||(E2=!0,jg(!DA.paused),!fu()&&(typeof _kernelStdinRead>"u"||(async()=>{try{for(;!LA()&&!(typeof _kernelStdinRead>"u");){let e=await _kernelStdinRead.apply(void 0,[65536,100],{result:{promise:!0}});if(e?.done)break;let t=String(e?.dataBase64??"");t&&(Or+=p2.decode(Se.Buffer.from(t,"base64"),{stream:!0}),JB())}}catch{}Or+=p2.decode(),gV()})()))}function z1e(e,t){if(e==="stdin_end"){gV();return}if(e!=="stdin"||LA())return;let r,n=!1;if(t&&typeof t=="object"&&typeof t.dataBase64=="string"){let i=Se.Buffer.from(t.dataBase64,"base64");if(i.length===0)return;if(!DA.encoding&&RB()){Jg("data",i),bu();return}r=DA.encoding?i.toString(DA.encoding):i.toString("latin1"),n=!DA.encoding}else r=typeof t=="string"?t:t==null?"":Se.Buffer.from(t).toString("utf8");if(r){if(Or+=r,n&&!DA.encoding&&RB()){let i=Or;Or="",Jg("data",Se.Buffer.from(i,"latin1")),bu();return}JB()}}var DA={readable:!0,paused:!0,encoding:null,isRaw:!1,read(e){if(Or.length>0){if(!e||e>=Or.length){let n=Or;return Or="",n}let r=Or.slice(0,e);return Or=Or.slice(e),r}if(Au()>=Ra().length)return null;let t=e?Ra().slice(Au(),Au()+e):Ra().slice(Au());return ER(Au()+t.length),t},on(e,t){return oi[e]||(oi[e]=[]),oi[e].push(t),(vA()||fu())&&(e==="data"||e==="end"||e==="close")&&p1(),e==="data"&&this.paused&&this.resume(),(e==="end"||e==="close")&&(vA()||fu())&&bu(),e==="end"&&Ra()&&!LA()&&(vg(!0),g1()),this},once(e,t){return bn[e]||(bn[e]=[]),bn[e].push(t),(vA()||fu())&&(e==="data"||e==="end"||e==="close")&&p1(),e==="data"&&this.paused&&this.resume(),(e==="end"||e==="close")&&(vA()||fu())&&bu(),e==="end"&&Ra()&&!LA()&&(vg(!0),g1()),this},off(e,t){if(oi[e]){let r=oi[e].indexOf(t);r!==-1&&oi[e].splice(r,1)}return this},removeListener(e,t){return this.off(e,t)},emit(e,...t){let r=[...oi[e]||[],...bn[e]||[]];bn[e]=[];for(let n of r)n(t[0]);return r.length>0},pause(){return this.paused=!0,vg(!1),jg(!1),this},resume(){return(vA()||fu())&&(p1(),jg(!0)),this.paused=!1,vg(!0),JB(),g1(),bu(),this},setEncoding(e){return this.encoding=e,this},setRawMode(e){if(!vA())throw new Error("setRawMode is not supported when stdin is not a TTY");return typeof _ptySetRawMode<"u"&&_ptySetRawMode.applySync(void 0,[e]),this.isRaw=e,this},get isTTY(){return vA()},[Symbol.asyncIterator]:function(){let e=this,t=[],r=[],n=!1,i=null,s=()=>{for(;r.length>0;){if(i){r.shift()(Promise.reject(i));continue}if(t.length>0){r.shift()(Promise.resolve({done:!1,value:t.shift()}));continue}if(n){r.shift()(Promise.resolve({done:!0,value:void 0}));continue}break}},o=f=>{t.push(f),s()},a=()=>{n=!0,s()},A=f=>{i=f,n=!0,s()};return e.on("end",a),e.on("close",a),e.on("error",A),e.on("data",o),e.resume(),{next(){return i?Promise.reject(i):t.length>0?Promise.resolve({done:!1,value:t.shift()}):n?Promise.resolve({done:!0,value:void 0}):new Promise(f=>{r.push(f)})},return(){return n=!0,e.off?.("data",o),e.off?.("end",a),e.off?.("close",a),e.off?.("error",A),s(),Promise.resolve({done:!0,value:void 0})},[Symbol.asyncIterator](){return this}}}};function pV(){return{platform:typeof _processConfig<"u"&&_processConfig.platform||"linux",arch:typeof _processConfig<"u"&&_processConfig.arch||"x64",version:typeof _processConfig<"u"&&_processConfig.version||"v22.0.0",cwd:typeof _processConfig<"u"&&_processConfig.cwd||"/root",env:typeof _processConfig<"u"&&_processConfig.env||{},argv:typeof _processConfig<"u"&&_processConfig.argv||["node","script.js"],execPath:typeof _processConfig<"u"&&_processConfig.execPath||"/usr/bin/node",pid:typeof _processConfig<"u"&&_processConfig.pid||1,ppid:typeof _processConfig<"u"&&_processConfig.ppid||0,uid:typeof _processConfig<"u"&&_processConfig.uid||0,gid:typeof _processConfig<"u"&&_processConfig.gid||0,stdin:typeof _processConfig<"u"?_processConfig.stdin:void 0,timingMitigation:typeof _processConfig<"u"&&_processConfig.timingMitigation||"off",frozenTimeMs:typeof _processConfig<"u"?_processConfig.frozenTimeMs:void 0}}var wr=pV(),K1e=typeof performance<"u"&&performance&&typeof performance.now=="function"?performance.now.bind(performance):Date.now;function Hl(){return wr.timingMitigation==="freeze"&&typeof wr.frozenTimeMs=="number"?wr.frozenTimeMs:K1e()}var X1e=Hl(),Wm=void 0,wu=!1,mR=class extends Error{constructor(t){super("process.exit("+t+")");y(this,"code");y(this,"_isProcessExit");this.name="ProcessExitError",this.code=t,this._isProcessExit=!0}};et("ProcessExitError",mR);var BR={SIGHUP:1,SIGINT:2,SIGQUIT:3,SIGILL:4,SIGTRAP:5,SIGABRT:6,SIGBUS:7,SIGFPE:8,SIGKILL:9,SIGUSR1:10,SIGSEGV:11,SIGUSR2:12,SIGPIPE:13,SIGALRM:14,SIGTERM:15,SIGCHLD:17,SIGCONT:18,SIGSTOP:19,SIGTSTP:20,SIGTTIN:21,SIGTTOU:22,SIGURG:23,SIGXCPU:24,SIGXFSZ:25,SIGVTALRM:26,SIGPROF:27,SIGWINCH:28,SIGIO:29,SIGPWR:30,SIGSYS:31},EV=Object.fromEntries(Object.entries(BR).map(([e,t])=>[t,e])),Z1e=new Set(["SIGWINCH","SIGCHLD","SIGCONT","SIGURG"]),yV=new Set(["SIGHUP","SIGINT","SIGTERM","SIGWINCH","SIGCHLD"]);function mV(e){if(e==null)return 15;if(typeof e=="number")return e;let t=BR[e];if(t!==void 0)return t;throw new Error("Unknown signal: "+e)}function $1e(e){return typeof e=="string"&&yV.has(e)}var $G={ESRCH:3,EPERM:1,EINVAL:22};function e2e(e){let t=String(e&&e.message||e||""),r=null;if(e&&typeof e.code=="string"&&Object.prototype.hasOwnProperty.call($G,e.code)?r=e.code:/\bESRCH\b/.test(t)?r="ESRCH":/\bEINVAL\b/.test(t)?r="EINVAL":(/\bEPERM\b/.test(t)||/permission denied/i.test(t))&&(r="EPERM"),r===null)return e instanceof Error?e:new Error(t);let n=new Error(`kill ${r}`);return n.code=r,n.errno=-$G[r],n.syscall="kill",n}var cn={},$r={},kg=10,eY=new Set;function BV(e){return(cn[e]||[]).length+($r[e]||[]).length}function Ml(e){if(!$1e(e)||typeof _processSignalState>"u")return;let t=BR[e];if(typeof t!="number")return;let r=BV(e)>0?"user":"default";try{_processSignalState.applySyncPromise(void 0,[t,r,JSON.stringify([]),0])}catch{}}function t2e(){for(let e of yV)Ml(e)}function y2(e,t="default"){let r=mV(e);if(r===0)return!0;let n=EV[r]??`SIG${r}`;return t==="ignore"||TA(n,n)||Z1e.has(n)?!0:Ce.exit(128+r)}function r2e(e,t){if(e!=="signal"||t===null||typeof t!="object")return;let r=t.signal??t.number,n=typeof t.action=="string"?t.action:"default";y2(r,n)}function E1(e,t,r=!1){let n=r?$r:cn;if(n[e]||(n[e]=[]),n[e].push(t),kg>0&&!eY.has(e)){let i=(cn[e]?.length??0)+($r[e]?.length??0);if(i>kg){eY.add(e);let s=`MaxListenersExceededWarning: Possible EventEmitter memory leak detected. ${i} ${e} listeners added to [process]. MaxListeners is ${kg}. Use emitter.setMaxListeners() to increase limit`;typeof _error<"u"&&_error.applySync(void 0,[s])}}return Ml(e),Ce}function n2e(e,t){if(cn[e]){let r=cn[e].indexOf(t);r!==-1&&cn[e].splice(r,1)}if($r[e]){let r=$r[e].indexOf(t);r!==-1&&$r[e].splice(r,1)}return Ml(e),Ce}function TA(e,...t){let r=!1;if(cn[e])for(let n of cn[e])n.call(Ce,...t),r=!0;if($r[e]){let n=$r[e].slice();$r[e]=[];for(let i of n)i.call(Ce,...t),r=!0}return r}function jB(e){return!!(e&&typeof e=="object"&&(e._isProcessExit===!0||e.name==="ProcessExitError"))}function i2e(e){return e instanceof Error?e:new Error(String(e))}function i0(e){if(jB(e))return{handled:!1,rethrow:e};let t=i2e(e);try{if(TA("uncaughtException",t,"uncaughtException"))return{handled:!0,rethrow:null}}catch(r){return{handled:!1,rethrow:r}}return{handled:!1,rethrow:t}}function IV(e){U2(()=>{throw e},0)}function Vl(e,t,r){if(!t||t.length===0)return!1;for(let n of t.slice())try{n.call(e,...r)}catch(i){let s=i0(i);if(!s.handled&&s.rethrow!==null)throw s.rethrow;return!0}return!0}function vA(){return xg().stdinIsTTY}et("_stdinDispatch",z1e);et("_signalDispatch",r2e);function bV(e){let t=Hl(),r=Math.floor(t/1e3),n=Math.floor(t%1e3*1e6);if(e){let i=r-e[0],s=n-e[1];return s<0&&(i-=1,s+=1e9),[i,s]}return[r,n]}bV.bigint=function(){let e=Hl();return BigInt(Math.floor(e*1e6))};var m2=wr.cwd,aB=18,Rg={node:wr.version.replace(/^v/,""),v8:"11.3.244.8",uv:"1.44.2",zlib:"1.2.13",brotli:"1.0.9",ares:"1.19.0",modules:"108",nghttp2:"1.52.0",napi:"8",llhttp:"8.1.0",openssl:"3.0.8",cldr:"42.0",icu:"72.1",tz:"2022g",unicode:"15.0"};function s2e(){return{rss:50*1024*1024,heapTotal:20*1024*1024,heapUsed:10*1024*1024,external:1*1024*1024,arrayBuffers:500*1024}}function CV(){let e=s2e(),t=f1e.applySyncPromise(void 0,[]);return!t||typeof t!="object"?e:{rss:Number.isFinite(t.rss)?Number(t.rss):e.rss,heapTotal:Number.isFinite(t.heapTotal)?Number(t.heapTotal):e.heapTotal,heapUsed:Number.isFinite(t.heapUsed)?Number(t.heapUsed):e.heapUsed,external:Number.isFinite(t.external)?Number(t.external):e.external,arrayBuffers:Number.isFinite(t.arrayBuffers)?Number(t.arrayBuffers):e.arrayBuffers}}function o2e(e){let t=u1e.applySyncPromise(void 0,[e??null]);if(t&&typeof t=="object")return{user:Number.isFinite(t.user)?Number(t.user):1e6,system:Number.isFinite(t.system)?Number(t.system):5e5};let r={user:1e6,system:5e5};return e&&typeof e=="object"?{user:r.user-Number(e.user||0),system:r.system-Number(e.system||0)}:r}function a2e(){return{userCPUTime:1e6,systemCPUTime:5e5,maxRSS:50*1024,sharedMemorySize:0,unsharedDataSize:0,unsharedStackSize:0,minorPageFault:0,majorPageFault:0,swappedOut:0,fsRead:0,fsWrite:0,ipcSent:0,ipcReceived:0,signalsCount:0,voluntaryContextSwitches:0,involuntaryContextSwitches:0}}function A2e(){let e=a2e(),t=c1e.applySyncPromise(void 0,[]);return!t||typeof t!="object"?e:{userCPUTime:Number.isFinite(t.userCPUTime)?Number(t.userCPUTime):e.userCPUTime,systemCPUTime:Number.isFinite(t.systemCPUTime)?Number(t.systemCPUTime):e.systemCPUTime,maxRSS:Number.isFinite(t.maxRSS)?Number(t.maxRSS):e.maxRSS,sharedMemorySize:Number.isFinite(t.sharedMemorySize)?Number(t.sharedMemorySize):e.sharedMemorySize,unsharedDataSize:Number.isFinite(t.unsharedDataSize)?Number(t.unsharedDataSize):e.unsharedDataSize,unsharedStackSize:Number.isFinite(t.unsharedStackSize)?Number(t.unsharedStackSize):e.unsharedStackSize,minorPageFault:Number.isFinite(t.minorPageFault)?Number(t.minorPageFault):e.minorPageFault,majorPageFault:Number.isFinite(t.majorPageFault)?Number(t.majorPageFault):e.majorPageFault,swappedOut:Number.isFinite(t.swappedOut)?Number(t.swappedOut):e.swappedOut,fsRead:Number.isFinite(t.fsRead)?Number(t.fsRead):e.fsRead,fsWrite:Number.isFinite(t.fsWrite)?Number(t.fsWrite):e.fsWrite,ipcSent:Number.isFinite(t.ipcSent)?Number(t.ipcSent):e.ipcSent,ipcReceived:Number.isFinite(t.ipcReceived)?Number(t.ipcReceived):e.ipcReceived,signalsCount:Number.isFinite(t.signalsCount)?Number(t.signalsCount):e.signalsCount,voluntaryContextSwitches:Number.isFinite(t.voluntaryContextSwitches)?Number(t.voluntaryContextSwitches):e.voluntaryContextSwitches,involuntaryContextSwitches:Number.isFinite(t.involuntaryContextSwitches)?Number(t.involuntaryContextSwitches):e.involuntaryContextSwitches}}function f2e(){Rg.node=wr.version.replace(/^v/,"");let e=l1e.applySyncPromise(void 0,[]);return e&&typeof e=="object"&&(Object.assign(Rg,e),Rg.node=wr.version.replace(/^v/,"")),Rg}var Ce={platform:wr.platform,arch:wr.arch,version:wr.version,get versions(){return f2e()},pid:wr.pid,ppid:wr.ppid,execPath:wr.execPath,execArgv:[],argv:wr.argv,argv0:wr.argv[0]||"node",title:"node",env:wr.env,config:{target_defaults:{cflags:[],default_configuration:"Release",defines:[],include_dirs:[],libraries:[]},variables:{node_prefix:"/usr",node_shared_libuv:!1}},release:{name:"node",sourceUrl:"https://nodejs.org/download/release/v20.0.0/node-v20.0.0.tar.gz",headersUrl:"https://nodejs.org/download/release/v20.0.0/node-v20.0.0-headers.tar.gz"},features:{inspector:!1,debug:!1,uv:!0,ipv6:!0,tls_alpn:!0,tls_sni:!0,tls_ocsp:!0,tls:!0},cwd(){return m2},chdir(e){let t;try{t=Jt.stat.applySyncPromise(void 0,[e])}catch{let n=new Error(`ENOENT: no such file or directory, chdir '${e}'`);throw n.code="ENOENT",n.errno=-2,n.syscall="chdir",n.path=e,n}if(!Ta(t).isDirectory){let n=new Error(`ENOTDIR: not a directory, chdir '${e}'`);throw n.code="ENOTDIR",n.errno=-20,n.syscall="chdir",n.path=e,n}m2=e},get exitCode(){return Wm},set exitCode(e){Wm=e??void 0},exit(e){let t=e!==void 0?e:Wm??0;Wm=t,wu=!0;try{TA("exit",t)}catch{}throw new mR(t)},abort(){return Ce.kill(Ce.pid,"SIGABRT")},nextTick(e,...t){let r=Fa();zm.push({callback:Ul(e,r),args:t}),yQe()},hrtime:bV,getuid(){return l2()},getgid(){return iB()},geteuid(){let e=globalThis.process?.euid;return Number.isFinite(e)?e:l2()},getegid(){let e=globalThis.process?.egid;return Number.isFinite(e)?e:iB()},getgroups(){return Array.isArray(globalThis.process?.groups)&&globalThis.process.groups.length>0?[...globalThis.process.groups]:[iB()]},setuid(){},setgid(){},seteuid(){},setegid(){},setgroups(){},umask(e){let t=e===void 0?void 0:wa(e,"mask"),r=Number(A1e.applySyncPromise(void 0,[t??null]));if(Number.isFinite(r))return aB=t??r,r;let n=aB;return t!==void 0&&(aB=t),n},uptime(){return(Hl()-X1e)/1e3},memoryUsage(){return CV()},cpuUsage(e){return o2e(e)},resourceUsage(){return A2e()},kill(e,t){if(typeof e!="number"||!Number.isFinite(e)||!Number.isInteger(e))throw new TypeError(`The "pid" argument must be an integer. Received ${String(e)}`);let r=mV(t),n=EV[r]??`SIG${r}`;if(typeof _processKill<"u"){let i;try{i=_processKill.applySyncPromise(void 0,[e,n])}catch(o){throw e2e(o)}let s=i;if(typeof s=="string")try{s=JSON.parse(s)}catch{s=null}if(s&&typeof s=="object"&&s.self===!0){let o=typeof s.action=="string"?s.action:"default";return y2(r,o)}return!0}if(e!==Ce.pid){let i=new Error("Operation not permitted");throw i.code="EPERM",i.errno=-1,i.syscall="kill",i}return y2(r,"default")},on(e,t){return E1(e,t)},once(e,t){return E1(e,t,!0)},removeListener(e,t){return n2e(e,t)},off:null,removeAllListeners(e){return e?(delete cn[e],delete $r[e],Ml(e)):(Object.keys(cn).forEach(t=>delete cn[t]),Object.keys($r).forEach(t=>delete $r[t]),t2e()),Ce},addListener(e,t){return E1(e,t)},emit(e,...t){return TA(e,...t)},listeners(e){return[...cn[e]||[],...$r[e]||[]]},listenerCount(e){return BV(e)},prependListener(e,t){return cn[e]||(cn[e]=[]),cn[e].unshift(t),Ml(e),Ce},prependOnceListener(e,t){return $r[e]||($r[e]=[]),$r[e].unshift(t),Ml(e),Ce},eventNames(){return[...new Set([...Object.keys(cn),...Object.keys($r)])]},setMaxListeners(e){return kg=e,Ce},getMaxListeners(){return kg},rawListeners(e){return Ce.listeners(e)},stdout:P2,stderr:O2,stdin:DA,connected:wr.env?.AGENTOS_NODE_IPC==="1",mainModule:void 0,emitWarning(e){if(e&&typeof e=="object"){typeof e.message!="string"&&(e.message=String(e.message??"")),(typeof e.name!="string"||e.name.length===0)&&(e.name="Warning"),TA("warning",e);return}TA("warning",{message:String(e??""),name:"Warning"})},binding(e){let t=new Error("process.binding is not supported in sandbox");throw t.code="ERR_ACCESS_DENIED",t},_linkedBinding(e){let t=new Error("process._linkedBinding is not supported in sandbox");throw t.code="ERR_ACCESS_DENIED",t},dlopen(){throw new Error("process.dlopen is not supported")},hasUncaughtExceptionCaptureCallback(){return!1},setUncaughtExceptionCaptureCallback(){},send(e,t,r,n){let i=typeof t=="function"?t:typeof r=="function"?r:n;if(!Ce.connected)return!1;try{return Ce.stdout.write(iV(e)),i&&queueMicrotask(()=>i(null)),!0}catch(s){if(i)return queueMicrotask(()=>i(s)),!1;throw s}},disconnect(){Ce.connected&&(Ce.connected=!1,Ce._agentOSIpcHandleId&&typeof _unregisterHandle=="function"&&(_unregisterHandle(Ce._agentOSIpcHandleId),Ce._agentOSIpcHandleId=null),TA("disconnect"))},report:{directory:"",filename:"",compact:!1,signal:"SIGUSR2",reportOnFatalError:!1,reportOnSignal:!1,reportOnUncaughtException:!1,getReport(){return{}},writeReport(){return""}},debugPort:9229,_cwd:wr.cwd,_umask:18};function QV(){if(!(wr.env?.AGENTOS_NODE_IPC==="1"||globalThis.__agentOSProcessConfigEnv?.AGENTOS_NODE_IPC==="1")||Ce._agentOSIpcInstalled)return;Ce._agentOSIpcInstalled=!0,Ce.connected=!0,!Ce._agentOSIpcHandleId&&typeof _registerHandle=="function"&&(Ce._agentOSIpcHandleId=`process-ipc:${Ce.pid}`,_registerHandle(Ce._agentOSIpcHandleId,"child_process IPC channel"));let t="";Ce.stdin.on("data",r=>{let n=sV(t,r);t=n.buffer;for(let i of n.messages)TA("message",i,void 0)})}function u2e(e){jg(!1),j1e(new _u);for(let t of Object.keys(oi))oi[t]=[];for(let t of Object.keys(bn))bn[t]=[];J1e(e.stdin??""),ER(0),yR(!1),vg(!1),wr=e,m2=e.cwd,Ce.platform=e.platform,Ce.arch=e.arch,Ce.version=e.version,Ce.pid=e.pid,Ce.ppid=e.ppid,Ce.execPath=e.execPath,Ce.argv=e.argv,Ce.argv0=e.argv[0]||"node",Ce.env=e.env,Ce.connected=e.env?.AGENTOS_NODE_IPC==="1",Ce._cwd=e.cwd,Ce.stdin.paused=!0,Ce.stdin.encoding=null,Ce.stdin.isRaw=!1,Rg.node=e.version.replace(/^v/,"")}et("__runtimeRefreshProcessConfig",()=>{u2e(pV())});Ce.off=Ce.removeListener;et("__runtimeInstallProcessIpcBridge",QV);QV();Ce.memoryUsage.rss=function(){return CV().rss};Object.defineProperty(Ce,Symbol.toStringTag,{value:"process",writable:!1,configurable:!0,enumerable:!1});var wV=Ce;function c2e(e){return encodeURIComponent(String(e)).replace(/%2F/g,"/")}function tY(e){let t=qr.posix.resolve(String(e||"/")),r=c2e(t);return new Cn(`file://${r.startsWith("/")?r:`/${r}`}`)}function rY(e){let t=e instanceof Cn?e.href:String(e??"");if(!t.startsWith("file:"))throw new TypeError("The URL must be of scheme file");let r=t.slice(5);return r.startsWith("//")&&(r=/^\/\/[^/]*(.*)$/.exec(r)?.[1]||"/"),r=r.split(/[?#]/,1)[0]||"/",r=decodeURIComponent(r),r.startsWith("/")||(r=`/${r}`),r}function SV(){let e=globalThis;e.process=Ce,e.setTimeout=U2,e.clearTimeout=UB,e.setInterval=x2,e.clearInterval=L2,e.setImmediate=lB,e.clearImmediate=wY;let t=typeof e.queueMicrotask=="function"?e.queueMicrotask.bind(e):Sa;e.queueMicrotask=i=>{let s=Fa();return t(()=>kB(s,i,e,[]))},ave(e),e.TextEncoder=Q2,e.TextDecoder=_u,e.Event=kl,e.CustomEvent=I2,e.EventTarget=MB,typeof e.Buffer>"u"&&(e.Buffer=IY);let r=e.Buffer;typeof r.kMaxLength!="number"&&(r.kMaxLength=ql),typeof r.kStringMaxLength!="number"&&(r.kStringMaxLength=Kg),(typeof r.constants!="object"||r.constants===null)&&(r.constants=dY);let n=globalThis.__secureExecBuiltinUtilModule;if(n?.types&&(n.types.isProxy=()=>!1),Km(n),typeof e.atob>"u"||typeof e.btoa>"u"){let i=hY();typeof e.atob>"u"&&(e.atob=s=>{let o=i.toByteArray(String(s)),a="";for(let A of o)a+=String.fromCharCode(A);return a}),typeof e.btoa>"u"&&(e.btoa=s=>{let o=String(s),a=new Uint8Array(o.length);for(let A=0;A<o.length;A+=1){let f=o.charCodeAt(A);if(f>255)throw new TypeError("Invalid character");a[A]=f}return i.fromByteArray(a)})}if(typeof e.Crypto>"u"&&(e.Crypto=uR),typeof e.SubtleCrypto>"u"&&(e.SubtleCrypto=fR),typeof e.CryptoKey>"u"&&(e.CryptoKey=Gg),typeof e.DOMException>"u"&&(e.DOMException=Bve),typeof e.crypto>"u")e.crypto=va;else{let i=e.crypto;for(let[s,o]of Object.entries(va))typeof i[s]>"u"&&(i[s]=o)}e.fetch=OB,e.Headers=nwe,e.Request=iwe,e.Response=swe,YQe(e)}var _V={register:"kernelHandleRegister",unregister:"kernelHandleUnregister",list:"kernelHandleList"},DB=new Map,AB=[];function vV(e,t){try{zg(_V.register,e,t)}catch(r){throw r instanceof Error&&r.message.includes("EAGAIN")?new Error("ERR_RESOURCE_BUDGET_EXCEEDED: maximum active handles exceeded"):r}DB.set(e,t)}function RV(e){DB.delete(e);let t=DB.size;try{zg(_V.unregister,e)}catch{}if(t===0&&AB.length>0){let r=AB;AB=[],r.forEach(n=>n())}}function DV(){if(typeof wu<"u"&&wu)return Promise.resolve();let e=globalThis._getPendingTimerCount,t=globalThis._waitForTimerDrain,r=TB().length>0,n=typeof e=="function"&&e()>0;if(!r&&!n)return Promise.resolve();let i=[];return r&&i.push(new Promise(s=>{let o=!1,a=()=>{o||(o=!0,s())};AB.push(a),TB().length===0&&a()})),n&&typeof t=="function"&&i.push(t()),Promise.all(i).then(()=>{})}function TB(){return Array.from(DB.values())}et("_registerHandle",vV);et("_unregisterHandle",RV);et("_waitForActiveHandles",DV);et("_getActiveHandles",TB);var l2e={},h2e={},d2e={id:"/<entry>.js",filename:"/<entry>.js",dirname:"/",exports:{},loaded:!1};vu("_moduleCache",l2e);vu("_pendingModules",h2e);vu("_currentModule",d2e);function fB(e){let t=e.lastIndexOf("/");return t===-1?".":t===0?"/":e.slice(0,t)}function g2e(e){if(e.startsWith("file://")){let t=e.slice(7);return t.startsWith("/")?t:"/"+t}return e}function p2e(e,t){return Xr.isBuiltin(t)?null:t.startsWith("./")||t.startsWith("../")||t.startsWith("/")?[e]:Xr._nodeModulePaths(e)}function TV(e){let t=function(r,n){let i=_resolveModule.applySyncPromise(void 0,[r,e,"require"]);if(i===null){let s=new Error("Cannot find module '"+r+"'");throw s.code="MODULE_NOT_FOUND",s}return i};return t.paths=function(r){return p2e(e,r)},t}var NV={".js":function(e,t){},".json":function(e,t){},".node":function(e,t){throw new Error(".node extensions are not supported in sandbox")}};function MV(e){return e.cache=_moduleCache,e.main=globalThis.process?.mainModule,e.extensions=NV,e}function E2e(e){let t=new Error(`require() of ES Module ${e} is not supported.`);return t.code="ERR_REQUIRE_ESM",t}function y2e(e){let t=new Error(`secure-exec module format bridge is not registered; cannot require ${e}.`);return t.code="ERR_AGENTOS_MODULE_FORMAT_BRIDGE_MISSING",t}function FV(e){if(typeof _moduleFormat>"u"||typeof _moduleFormat.applySyncPromise!="function")throw y2e(e);if(_moduleFormat.applySyncPromise(void 0,[e])==="module")throw E2e(e)}function zB(e){if(typeof e!="string"&&!(e instanceof URL))throw new TypeError("filename must be a string or URL");let t=g2e(String(e)),r=fB(t),n=TV(r),i=function(o){},s=function(o){return i(o),_requireFrom(o,r)};return s.resolve=n,MV(s)}ln("__secureExecGuestCreateRequire",zB);var Co,Xr=(Co=class{constructor(t,r){y(this,"id");y(this,"path");y(this,"exports");y(this,"filename");y(this,"loaded");y(this,"children");y(this,"paths");y(this,"parent");y(this,"isPreloading");this.id=t,this.path=fB(t),this.exports={},this.filename=t,this.loaded=!1,this.children=[],this.paths=[],this.parent=r,this.isPreloading=!1;let n=this.path;for(;n!=="/";)this.paths.push(n+"/node_modules"),n=fB(n);this.paths.push("/node_modules")}require(t){return _requireFrom(t,this.path)}_compile(t,r){let n=String(t)+`
-//# sourceURL=`+String(r),i=new Function("exports","require","module","__filename","__dirname",n),s=a=>(xW(a),_requireFrom(a,this.path));s.resolve=TV(this.path),MV(s);let o=globalThis._currentModule;globalThis._currentModule=this;try{return i(this.exports,s,this,r,this.path),this.loaded=!0,this.exports}finally{globalThis._currentModule=o}}static _resolveFilename(t,r,n,i){let s=r&&r.path?r.path:"/",o=_resolveModule.applySyncPromise(void 0,[t,s,"require"]);if(o===null){let a=new Error("Cannot find module '"+t+"'");throw a.code="MODULE_NOT_FOUND",a}return o}static wrap(t){return"(function (exports, require, module, __filename, __dirname) { "+t+`
-});`}static isBuiltin(t){let r=t.replace(/^node:/,"");return Co.builtinModules.includes(r)}static syncBuiltinESMExports(){}static findSourceMap(t){}static _nodeModulePaths(t){let r=[],n=t;for(;n!=="/"&&(r.push(n+"/node_modules"),n=fB(n),n!=="."););return r.push("/node_modules"),r}static _load(t,r,n){let i=r&&r.path?r.path:"/";return _requireFrom(t,i)}static runMain(){}},y(Co,"_extensions",{...NV,".js":function(t,r){FV(r);let n=typeof _loadFile<"u"?_loadFile.applySyncPromise(void 0,[r]):_requireFrom("fs","/").readFileSync(r,"utf8");t._compile(n,r)},".json":function(t,r){let n=typeof _loadFile<"u"?_loadFile.applySyncPromise(void 0,[r]):_requireFrom("fs","/").readFileSync(r,"utf8");t.exports=JSON.parse(n)}}),y(Co,"_cache",typeof _moduleCache<"u"?_moduleCache:{}),y(Co,"builtinModules",fve),y(Co,"createRequire",zB),Co),kV=class{constructor(e){throw new Error("SourceMap is not implemented in sandbox")}get payload(){throw new Error("SourceMap is not implemented in sandbox")}set payload(e){throw new Error("SourceMap is not implemented in sandbox")}findEntry(e,t){throw new Error("SourceMap is not implemented in sandbox")}},UV=Object.assign(Xr,{Module:Xr,createRequire:zB,_extensions:Xr._extensions,_cache:Xr._cache,builtinModules:Xr.builtinModules,isBuiltin:Xr.isBuiltin,_resolveFilename:Xr._resolveFilename,wrap:Xr.wrap,syncBuiltinESMExports:Xr.syncBuiltinESMExports,findSourceMap:Xr.findSourceMap,SourceMap:kV});et("_moduleModule",UV);function m2e(e,t){let r=typeof t=="string"?t:"/";if(Xr.isBuiltin(e))try{return mve(e)}catch(s){if(s?.code!=="MODULE_NOT_FOUND")throw s}let n=_resolveModule.applySyncPromise(void 0,[e,r,"require"]);if(n===null){let s=new Error(`Cannot find module '${e}'`);throw s.code="MODULE_NOT_FOUND",s}if(Object.prototype.hasOwnProperty.call(_moduleCache,n))return _moduleCache[n].exports;FV(n);let i=new Xr(n,{path:r});_moduleCache[n]=i;try{let s=n.endsWith(".json")?".json":n.endsWith(".node")?".node":".js";return(Xr._extensions[s]??Xr._extensions[".js"])(i,n),i.loaded=!0,i.exports}catch(s){throw delete _moduleCache[n],s}}et("_requireFrom",m2e);var B2e=UV,I2e={};_2(I2e,{Buffer:()=>IY,CustomEvent:()=>I2,Event:()=>kl,EventTarget:()=>MB,Module:()=>Xr,ProcessExitError:()=>mR,SourceMap:()=>kV,TextDecoder:()=>_u,TextEncoder:()=>Q2,URL:()=>Cn,URLSearchParams:()=>Hr,_getActiveHandles:()=>TB,_registerHandle:()=>vV,_unregisterHandle:()=>RV,_waitForActiveHandles:()=>DV,childProcess:()=>nV,clearImmediate:()=>wY,clearInterval:()=>L2,clearTimeout:()=>UB,createRequire:()=>zB,cryptoPolyfill:()=>_l,default:()=>b2e,fs:()=>cR,module:()=>B2e,network:()=>vW,os:()=>U1e,process:()=>wV,setImmediate:()=>lB,setInterval:()=>x2,setTimeout:()=>U2,setupGlobals:()=>SV});var b2e=cR;SV();})();
-/*! Bundled license information:
-
-ieee754/index.js:
-(*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> *)
-
-buffer/index.js:
-(*!
- * The buffer module from node.js, for the browser.
- *
- * @author   Feross Aboukhadijeh <https://feross.org>
- * @license  MIT
- *)
-*/
-/*! Bundled license information:
-
-ieee754/index.js:
-  (*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> *)
-
-buffer/index.js:
-  (*!
-   * The buffer module from node.js, for the browser.
-   *
-   * @author   Feross Aboukhadijeh <https://feross.org>
-   * @license  MIT
-   *)
-
-punycode/punycode.js:
-  (*! https://mths.be/punycode v1.4.1 by @mathias *)
-
-safe-buffer/index.js:
-  (*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> *)
-
-web-streams-polyfill/dist/ponyfill.es2018.js:
-  (**
-   * @license
-   * web-streams-polyfill v3.3.3
-   * Copyright 2024 Mattias Buelens, Diwank Singh Tomer and other contributors.
-   * This code is released under the MIT license.
-   * SPDX-License-Identifier: MIT
-   *)
-
-assert/build/internal/util/comparisons.js:
-  (*!
-   * The buffer module from node.js, for the browser.
-   *
-   * @author   Feross Aboukhadijeh <feross@feross.org> <http://feross.org>
-   * @license  MIT
-   *)
-
-undici/lib/web/fetch/body.js:
-  (*! formdata-polyfill. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> *)
-*/
diff --git a/crates/execution/assets/polyfill-registry.json b/crates/execution/assets/polyfill-registry.json
deleted file mode 100644
index 3286cc434..000000000
--- a/crates/execution/assets/polyfill-registry.json
+++ /dev/null
@@ -1,73 +0,0 @@
-{
-  "version": 1,
-  "groups": [
-    {
-      "source": "node-stdlib-browser",
-      "names": [
-        "assert",
-        "buffer",
-        "constants",
-        "console",
-        "events",
-        "path",
-        "path/posix",
-        "path/win32",
-        "punycode",
-        "querystring",
-        "sys",
-        "stream",
-        "string_decoder",
-        "timers",
-        "url",
-        "util",
-        "util/types",
-        "zlib"
-      ]
-    },
-    {
-      "source": "custom-bridge",
-      "names": [
-        "async_hooks",
-        "child_process",
-        "crypto",
-        "dgram",
-        "diagnostics_channel",
-        "dns",
-        "dns/promises",
-        "fs",
-        "fs/promises",
-        "http",
-        "http2",
-        "https",
-        "module",
-        "net",
-        "os",
-        "perf_hooks",
-        "process",
-        "readline",
-        "sqlite",
-        "stream/consumers",
-        "stream/promises",
-        "stream/web",
-        "timers/promises",
-        "tls",
-        "tty",
-        "v8",
-        "vm",
-        "worker_threads"
-      ]
-    },
-    {
-      "source": "denied",
-      "errorCode": "ERR_ACCESS_DENIED",
-      "names": [
-        "cluster",
-        "domain",
-        "inspector",
-        "repl",
-        "trace_events",
-        "wasi"
-      ]
-    }
-  ]
-}
diff --git a/crates/execution/assets/pyodide/README.md b/crates/execution/assets/pyodide/README.md
deleted file mode 100644
index 5a5990046..000000000
--- a/crates/execution/assets/pyodide/README.md
+++ /dev/null
@@ -1,38 +0,0 @@
-Pyodide runtime bundle for the secure-exec Python sidecar.
-
-Bundled runtime files:
-- `pyodide.mjs`
-- `pyodide.asm.js`
-- `pyodide.asm.wasm`
-- `pyodide-lock.json`
-- `python_stdlib.zip`
-
-Bundled offline package wheels:
-- `click-8.3.1-py3-none-any.whl`
-- `micropip-0.11.0-py3-none-any.whl`
-- `numpy-2.2.5-cp313-cp313-pyodide_2025_0_wasm32.whl`
-- `pandas-2.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl`
-- `python_dateutil-2.9.0.post0-py2.py3-none-any.whl`
-- `pytz-2025.2-py2.py3-none-any.whl`
-- `six-1.17.0-py2.py3-none-any.whl`
-
-Bundle size as vendored in this directory:
-- Core Pyodide runtime: 12,283,621 bytes
-- Offline package wheels: 8,347,517 bytes
-- Total: 20,631,138 bytes (19.68 MiB)
-
-`python-runner.mjs` points `indexURL` at this local directory and defaults `packageBaseUrl` to the same bundled asset root so `pyodide.loadPackage()` and the built-in `micropip` bootstrap stay offline.
-
-Dynamic package installs:
-- `AGENTOS_PYODIDE_PACKAGE_BASE_URL` can override the package base used by Pyodide package resolution when a Python execution needs to install additional wheels from a network-visible host.
-- The bundled `micropip` wheel is still loaded from the local asset directory first so package-manager bootstrap does not depend on external network access.
-- `await micropip.install("https://.../package.whl")` goes through the Python runner's bridge-backed fetch path, which means network permissions are enforced by the secure-exec kernel rather than bypassing it.
-
-Debug timing output:
-- Set `AGENTOS_PYTHON_WARMUP_DEBUG=1` on a Python execution request to emit `__AGENTOS_PYTHON_WARMUP_METRICS__:` JSON lines on stderr.
-- The Rust execution engine emits a `phase:"prewarm"` line that reports whether warmup executed or reused the cached compile-cache path, plus the measured warmup duration in milliseconds.
-- `python-runner.mjs` emits a `phase:"startup"` line just before guest code runs, including total startup time, `loadPyodide()` time, package-load time, package count, and whether the source was inline code, a file, or prewarm-only.
-
-Startup targets:
-- Cold start target: first request in a fresh cache should keep the combined prewarm plus startup path under `3000ms` on commodity hardware.
-- Warm start target: cached follow-up requests should keep the `phase:"startup"` time under `500ms`.
diff --git a/crates/execution/assets/pyodide/click-8.3.1-py3-none-any.whl b/crates/execution/assets/pyodide/click-8.3.1-py3-none-any.whl
deleted file mode 100644
index f2513adc0..000000000
Binary files a/crates/execution/assets/pyodide/click-8.3.1-py3-none-any.whl and /dev/null differ
diff --git a/crates/execution/assets/pyodide/micropip-0.11.0-py3-none-any.whl b/crates/execution/assets/pyodide/micropip-0.11.0-py3-none-any.whl
deleted file mode 100644
index c9953bfed..000000000
Binary files a/crates/execution/assets/pyodide/micropip-0.11.0-py3-none-any.whl and /dev/null differ
diff --git a/crates/execution/assets/pyodide/numpy-2.2.5-cp313-cp313-pyodide_2025_0_wasm32.whl b/crates/execution/assets/pyodide/numpy-2.2.5-cp313-cp313-pyodide_2025_0_wasm32.whl
deleted file mode 100644
index 516bd5103..000000000
Binary files a/crates/execution/assets/pyodide/numpy-2.2.5-cp313-cp313-pyodide_2025_0_wasm32.whl and /dev/null differ
diff --git a/crates/execution/assets/pyodide/pandas-2.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl b/crates/execution/assets/pyodide/pandas-2.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl
deleted file mode 100644
index 9e01899dd..000000000
Binary files a/crates/execution/assets/pyodide/pandas-2.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl and /dev/null differ
diff --git a/crates/execution/assets/pyodide/pyodide-lock.json b/crates/execution/assets/pyodide/pyodide-lock.json
deleted file mode 100644
index e71db1eea..000000000
--- a/crates/execution/assets/pyodide/pyodide-lock.json
+++ /dev/null
@@ -1 +0,0 @@
-{"info": {"abi_version": "2025_0", "arch": "wasm32", "platform": "emscripten_4_0_9", "python": "3.13.2", "version": "0.28.0.dev0"}, "packages": {"affine": {"depends": [], "file_name": "affine-2.4.0-py3-none-any.whl", "imports": ["affine"], "install_dir": "site", "name": "affine", "package_type": "package", "sha256": "131be00552026a0f9fa9ccf741bdeee5fcbd1b7532761bc0816b39735140e2b0", "unvendored_tests": true, "version": "2.4.0"}, "affine-tests": {"depends": ["affine"], "file_name": "affine-tests.tar", "imports": [], "install_dir": "site", "name": "affine-tests", "package_type": "package", "sha256": "550c271105cc6b33a8b9d29bd95bb13c2667b4286463d124eff1c8f77ecddf0e", "unvendored_tests": false, "version": "2.4.0"}, "aiohappyeyeballs": {"depends": [], "file_name": "aiohappyeyeballs-2.6.1-py3-none-any.whl", "imports": ["aiohappyeyeballs"], "install_dir": "site", "name": "aiohappyeyeballs", "package_type": "package", "sha256": "b8c78c6d23dea9d258b995363f70eaa03840def2c027ca42bda4875e8de657ef", "unvendored_tests": false, "version": "2.6.1"}, "aiohttp": {"depends": ["aiohappyeyeballs", "aiosignal", "async-timeout", "attrs", "charset-normalizer", "frozenlist", "multidict", "yarl"], "file_name": "aiohttp-3.11.13-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["aiohttp"], "install_dir": "site", "name": "aiohttp", "package_type": "package", "sha256": "1c62fa8fe9763120a2423b5c077327b999513ce5b80e1cbb0728d466bb18de08", "unvendored_tests": true, "version": "3.11.13"}, "aiohttp-tests": {"depends": ["aiohttp"], "file_name": "aiohttp-tests.tar", "imports": [], "install_dir": "site", "name": "aiohttp-tests", "package_type": "package", "sha256": "1ea4437cf425330444632b0612072c5edcd959984c5aaa7ceb982075124feb5a", "unvendored_tests": false, "version": "3.11.13"}, "aiosignal": {"depends": ["frozenlist"], "file_name": "aiosignal-1.3.2-py2.py3-none-any.whl", "imports": ["aiosignal"], "install_dir": "site", "name": "aiosignal", "package_type": "package", "sha256": "f6cf8e632efd670870c2ba7e477d7fc09c4e0890d5f62cae2168b67b1a6e9d8a", "unvendored_tests": false, "version": "1.3.2"}, "altair": {"depends": ["typing-extensions", "jinja2", "jsonschema", "packaging", "narwhals"], "file_name": "altair-6.0.0-py3-none-any.whl", "imports": ["altair"], "install_dir": "site", "name": "altair", "package_type": "package", "sha256": "352b116baddc402f86f71b823cf3dd0a7289d7ac381238dd75982d0fc1cacd78", "unvendored_tests": false, "version": "6.0.0"}, "annotated-types": {"depends": [], "file_name": "annotated_types-0.7.0-py3-none-any.whl", "imports": ["annotated_types"], "install_dir": "site", "name": "annotated-types", "package_type": "package", "sha256": "107c6d0a31af3ce347cad1990976cca76373de2ef51dfbffff84fe10cb7b2c19", "unvendored_tests": true, "version": "0.7.0"}, "annotated-types-tests": {"depends": ["annotated-types"], "file_name": "annotated-types-tests.tar", "imports": [], "install_dir": "site", "name": "annotated-types-tests", "package_type": "package", "sha256": "cae22ded0e13e7ad4207c2e30218a5cf58f9e9af5b02e90f711ecb62c9059892", "unvendored_tests": false, "version": "0.7.0"}, "anyio": {"depends": ["ssl", "sniffio", "typing-extensions"], "file_name": "anyio-4.9.0-py3-none-any.whl", "imports": ["anyio"], "install_dir": "site", "name": "anyio", "package_type": "package", "sha256": "9dee49af7541d8bf0b334adcf910aaeb878132648633fc3b91d1604ecb6b1c34", "unvendored_tests": false, "version": "4.9.0"}, "apsw": {"depends": [], "file_name": "apsw-3.50.4.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["apsw"], "install_dir": "site", "name": "apsw", "package_type": "package", "sha256": "7ac926974bcc51dbc93ff5e3ca0034ba109b6a652c9e54a1bd72f2eb05b3f130", "unvendored_tests": true, "version": "3.50.4.0"}, "apsw-tests": {"depends": ["apsw"], "file_name": "apsw-tests.tar", "imports": [], "install_dir": "site", "name": "apsw-tests", "package_type": "package", "sha256": "ebbc200492e1342d346aeba256550a38b1c8d489621f3811a528f46242e10c0e", "unvendored_tests": false, "version": "3.50.4.0"}, "argon2-cffi": {"depends": ["argon2-cffi-bindings"], "file_name": "argon2_cffi-23.1.0-py3-none-any.whl", "imports": ["argon2"], "install_dir": "site", "name": "argon2-cffi", "package_type": "package", "sha256": "09d9151a362d4766bc102fe9b4c1f130544ac55c3f7f7053252a493c602f4330", "unvendored_tests": false, "version": "23.1.0"}, "argon2-cffi-bindings": {"depends": ["cffi"], "file_name": "argon2_cffi_bindings-21.2.0-cp313-abi3-pyodide_2025_0_wasm32.whl", "imports": ["_argon2_cffi_bindings"], "install_dir": "site", "name": "argon2-cffi-bindings", "package_type": "package", "sha256": "5e0122b770d6105cf0f4faabdb6c44b33eb7a7a76583af8fbb94d68de48cfdfa", "unvendored_tests": false, "version": "21.2.0"}, "asciitree": {"depends": [], "file_name": "asciitree-0.3.3-py3-none-any.whl", "imports": ["asciitree"], "install_dir": "site", "name": "asciitree", "package_type": "package", "sha256": "d0f15820c8f1a4470cd7c9932ea9e8989bfe93cc837aa65ac5aa278d4c34b45e", "unvendored_tests": false, "version": "0.3.3"}, "astropy": {"depends": ["packaging", "numpy", "pyerfa", "pyyaml", "astropy_iers_data"], "file_name": "astropy-7.0.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["astropy"], "install_dir": "site", "name": "astropy", "package_type": "package", "sha256": "998c0e4d15f7baa007f1358b1806f46c37a23967387e3e8b426048819994fbca", "unvendored_tests": false, "version": "7.0.1"}, "astropy-iers-data": {"depends": [], "file_name": "astropy_iers_data-0.2025.3.10.0.29.26-py3-none-any.whl", "imports": ["astropy_iers_data"], "install_dir": "site", "name": "astropy_iers_data", "package_type": "package", "sha256": "cfa8d1ce15ccc2ba30c8c373c61a4ffcf1ca2116990150a735c4b1a55a4ccdb0", "unvendored_tests": true, "version": "0.2025.3.10.0.29.26"}, "astropy-iers-data-tests": {"depends": ["astropy_iers_data"], "file_name": "astropy-iers-data-tests.tar", "imports": [], "install_dir": "site", "name": "astropy_iers_data-tests", "package_type": "package", "sha256": "d996c6e07035b5909e04c2b9ccf8dc542b5db5176ddd109b8a51b3ae21291f41", "unvendored_tests": false, "version": "0.2025.3.10.0.29.26"}, "asttokens": {"depends": ["six"], "file_name": "asttokens-3.0.0-py3-none-any.whl", "imports": ["asttokens"], "install_dir": "site", "name": "asttokens", "package_type": "package", "sha256": "c43876aec4679221a3d063796a858278d88a4e3a036c192f0fd3e473a25a9410", "unvendored_tests": false, "version": "3.0.0"}, "async-timeout": {"depends": [], "file_name": "async_timeout-5.0.1-py3-none-any.whl", "imports": ["async_timeout"], "install_dir": "site", "name": "async-timeout", "package_type": "package", "sha256": "48f4163ed3a8b6ff000d3e334e8b4899ac9962e96236fa3156fc3a52dec4bf7a", "unvendored_tests": false, "version": "5.0.1"}, "atomicwrites": {"depends": [], "file_name": "atomicwrites-1.4.1-py2.py3-none-any.whl", "imports": ["atomicwrites"], "install_dir": "site", "name": "atomicwrites", "package_type": "package", "sha256": "3ff3c35fe0cb90741632773d53200125b666fb2c875ac67c016479bb8a52ca0d", "unvendored_tests": false, "version": "1.4.1"}, "attrs": {"depends": ["six"], "file_name": "attrs-25.2.0-py3-none-any.whl", "imports": ["attr", "attrs"], "install_dir": "site", "name": "attrs", "package_type": "package", "sha256": "0ca0ca2b0dbc02f198a7134fb09c26598dc50390439b318d6dfb63adaee97b25", "unvendored_tests": false, "version": "25.2.0"}, "audioop-lts": {"depends": [], "file_name": "audioop_lts-0.2.1-cp313-abi3-pyodide_2025_0_wasm32.whl", "imports": ["audioop"], "install_dir": "site", "name": "audioop-lts", "package_type": "package", "sha256": "9e6bfa4751f5fff5db006c808eb13acbd723f6776e1e7a83cacf3d4779a43975", "unvendored_tests": false, "version": "0.2.1"}, "autograd": {"depends": ["numpy", "future"], "file_name": "autograd-1.7.0-py3-none-any.whl", "imports": ["autograd"], "install_dir": "site", "name": "autograd", "package_type": "package", "sha256": "70300de9264d5c6e89164cab4de39749406a38dde1db1b70f25dda5c901b0990", "unvendored_tests": true, "version": "1.7.0"}, "autograd-tests": {"depends": ["autograd"], "file_name": "autograd-tests.tar", "imports": [], "install_dir": "site", "name": "autograd-tests", "package_type": "package", "sha256": "2e8b8c0119d4ea2d1d93ce4f04d5fe6413021a627df0bd2768943f994d35e1cf", "unvendored_tests": false, "version": "1.7.0"}, "awkward-cpp": {"depends": ["numpy"], "file_name": "awkward_cpp-47-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["awkward_cpp"], "install_dir": "site", "name": "awkward-cpp", "package_type": "package", "sha256": "25794edf577714c842893efdb3e23d0518c53ebbebe3f9da444b0813a7ab6063", "unvendored_tests": false, "version": "47"}, "b2d": {"depends": ["numpy", "pydantic", "setuptools", "annotated-types"], "file_name": "b2d-0.7.4-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["b2d"], "install_dir": "site", "name": "b2d", "package_type": "package", "sha256": "47709ef215b1ae596bbda3e2905a4182ddc95469daa78bfe1d362c8f3adef894", "unvendored_tests": false, "version": "0.7.4"}, "bcrypt": {"depends": [], "file_name": "bcrypt-4.3.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["bcrypt"], "install_dir": "site", "name": "bcrypt", "package_type": "package", "sha256": "dc7912bcfa6e66a1ecf93a51180cbff8ccce095ac742e2abad0684eb5b84b6a1", "unvendored_tests": false, "version": "4.3.0"}, "beautifulsoup4": {"depends": ["soupsieve", "typing-extensions"], "file_name": "beautifulsoup4-4.13.3-py3-none-any.whl", "imports": ["bs4"], "install_dir": "site", "name": "beautifulsoup4", "package_type": "package", "sha256": "3b401669e1cf50a15a6fc5de272009f581f8a16180a7e5596dbdafec97472b88", "unvendored_tests": true, "version": "4.13.3"}, "beautifulsoup4-tests": {"depends": ["beautifulsoup4"], "file_name": "beautifulsoup4-tests.tar", "imports": [], "install_dir": "site", "name": "beautifulsoup4-tests", "package_type": "package", "sha256": "d285c75aefab4bb8472c8baf3b66b6e06c185a3f25790b565fcd25b55e697e9d", "unvendored_tests": false, "version": "4.13.3"}, "bilby-cython": {"depends": ["numpy"], "file_name": "bilby_cython-0.5.3-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["bilby_cython"], "install_dir": "site", "name": "bilby.cython", "package_type": "package", "sha256": "1eeeec68f4fc30c67088496c0caac658145ba3a239f497b9affe21a6d5fb769f", "unvendored_tests": true, "version": "0.5.3"}, "bilby-cython-tests": {"depends": ["bilby.cython"], "file_name": "bilby-cython-tests.tar", "imports": [], "install_dir": "site", "name": "bilby.cython-tests", "package_type": "package", "sha256": "acbc16454028227bc9092a58920b863a92c72063d4f6b4d8429fbfdae4cb7f91", "unvendored_tests": false, "version": "0.5.3"}, "biopython": {"depends": ["numpy"], "file_name": "biopython-1.85-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["Bio", "BioSQL"], "install_dir": "site", "name": "biopython", "package_type": "package", "sha256": "a3826362af0a9382e3adb450ff633b3c0807bc77ddbe4bf55b1477d19bf46499", "unvendored_tests": false, "version": "1.85"}, "bitarray": {"depends": [], "file_name": "bitarray-3.8.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["bitarray"], "install_dir": "site", "name": "bitarray", "package_type": "package", "sha256": "8a8ae1f58878fc1ac0704e1688b1d24580eb3f7dfd6e442b29c3d10d9511c971", "unvendored_tests": true, "version": "3.8.0"}, "bitarray-tests": {"depends": ["bitarray"], "file_name": "bitarray-tests.tar", "imports": [], "install_dir": "site", "name": "bitarray-tests", "package_type": "package", "sha256": "a18fea12f1a946e0912c8fa3dd792f9e1f4ac36fb7826694db84791eb2875fd5", "unvendored_tests": false, "version": "3.8.0"}, "bitstring": {"depends": ["bitarray"], "file_name": "bitstring-4.3.1-py3-none-any.whl", "imports": ["bitstring"], "install_dir": "site", "name": "bitstring", "package_type": "package", "sha256": "428f9b321ba97820700d45548046ae922b110eede5cd7ae045863b9ded64d364", "unvendored_tests": false, "version": "4.3.1"}, "bleach": {"depends": ["webencodings", "packaging", "six"], "file_name": "bleach-6.2.0-py3-none-any.whl", "imports": ["bleach"], "install_dir": "site", "name": "bleach", "package_type": "package", "sha256": "f9fdb8ec80fb553ecd97f95bd86d7109694a06ac0182cfc0fd70707de2de7326", "unvendored_tests": false, "version": "6.2.0"}, "blosc2": {"depends": ["numpy", "msgpack", "requests", "ndindex", "platformdirs"], "file_name": "blosc2-3.5.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["blosc2"], "install_dir": "site", "name": "blosc2", "package_type": "package", "sha256": "c59b3a727ee6aadafc6c76b973e0e66a85a3403f1067de7b2082dc8c68a7b170", "unvendored_tests": false, "version": "3.5.1"}, "bokeh": {"depends": ["contourpy", "numpy", "jinja2", "pandas", "pillow", "python-dateutil", "six", "typing-extensions", "pyyaml", "xyzservices"], "file_name": "bokeh-3.6.3-py3-none-any.whl", "imports": ["bokeh"], "install_dir": "site", "name": "bokeh", "package_type": "package", "sha256": "bf281877079625b7fac7b9bb5113bcc8728dc78da2201b9e4c1da9adbdd9dbde", "unvendored_tests": false, "version": "3.6.3"}, "boost-histogram": {"depends": ["numpy"], "file_name": "boost_histogram-1.6.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["boost_histogram"], "install_dir": "site", "name": "boost-histogram", "package_type": "package", "sha256": "5baed26887645ad8f23fd92a698fdf6e821250c57bbb87343340a9a2e8fa804b", "unvendored_tests": false, "version": "1.6.1"}, "bottleneck": {"depends": ["numpy"], "file_name": "bottleneck-1.6.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["bottleneck"], "install_dir": "site", "name": "Bottleneck", "package_type": "package", "sha256": "4387e8bb7cf8f26b2c5c41bb0635fb05c87c65770d99f9a6ab1cb56cf4498fcb", "unvendored_tests": false, "version": "1.6.0"}, "brotli": {"depends": [], "file_name": "brotli-1.2.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["brotli"], "install_dir": "site", "name": "brotli", "package_type": "package", "sha256": "5ab0f27efecb1504448bed4e78bc617fe61bdb8d7eac33dcf611e3712324161c", "unvendored_tests": false, "version": "1.2.0"}, "cachetools": {"depends": [], "file_name": "cachetools-5.5.2-py3-none-any.whl", "imports": ["cachetools"], "install_dir": "site", "name": "cachetools", "package_type": "package", "sha256": "3bcb173d17fd7a7fb18ed5ad495f15aa9c29a44a4ccab69e1a6fb816991bb9ae", "unvendored_tests": false, "version": "5.5.2"}, "cartopy": {"depends": ["shapely", "pyshp", "pyproj", "libgeos", "matplotlib", "scipy"], "file_name": "cartopy-0.25.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["cartopy"], "install_dir": "site", "name": "Cartopy", "package_type": "package", "sha256": "ce3942e2ca66a40afcea2631d4da0f5c3a56ef02bbad4c02bf5873689b041a01", "unvendored_tests": true, "version": "0.25.0"}, "cartopy-tests": {"depends": ["Cartopy"], "file_name": "cartopy-tests.tar", "imports": [], "install_dir": "site", "name": "Cartopy-tests", "package_type": "package", "sha256": "bcea2c24e4f38555f8eddfcab8589249fc34c6660cbc56cb7bca065b8e269f20", "unvendored_tests": false, "version": "0.25.0"}, "casadi": {"depends": ["numpy"], "file_name": "casadi-3.7.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["casadi"], "install_dir": "site", "name": "casadi", "package_type": "package", "sha256": "d3df1dc9a41eb7b6854e9901fba2dee9f03ff38c3d820ad174c0410c780f5ad5", "unvendored_tests": false, "version": "3.7.0"}, "cbor-diag": {"depends": [], "file_name": "cbor_diag-1.0.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["cbor_diag"], "install_dir": "site", "name": "cbor-diag", "package_type": "package", "sha256": "bd3425bfa559ba2d37df1be401782f227fc2d5f66021eb0e7ecfbaa6bf55a405", "unvendored_tests": false, "version": "1.0.1"}, "certifi": {"depends": [], "file_name": "certifi-2026.1.4-py3-none-any.whl", "imports": ["certifi"], "install_dir": "site", "name": "certifi", "package_type": "package", "sha256": "f4a28d9afc3e7f15bed4437710794d5c439d7f3aab1310767eea26eae3be534d", "unvendored_tests": false, "version": "2026.1.4"}, "cffi": {"depends": ["pycparser"], "file_name": "cffi-1.17.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["cffi"], "install_dir": "site", "name": "cffi", "package_type": "package", "sha256": "a91747e5e4d982e7e7b2f158f2d06302c4205198ccec688e34b9c310e4417da7", "unvendored_tests": false, "version": "1.17.1"}, "cffi-example": {"depends": ["cffi"], "file_name": "cffi_example-0.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["cffi_example"], "install_dir": "site", "name": "cffi_example", "package_type": "package", "sha256": "41af9bb3bd71bfb466e1955a5d61ab20613b8940da70a84acb7069b20bd259c6", "unvendored_tests": false, "version": "0.1"}, "cftime": {"depends": ["numpy"], "file_name": "cftime-1.6.4.post1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["cftime"], "install_dir": "site", "name": "cftime", "package_type": "package", "sha256": "7f829cd958bb0451722e8ac1ec20cfe4094727dac1aa663dc906fb21d1f08fbe", "unvendored_tests": false, "version": "1.6.4.post1"}, "charset-normalizer": {"depends": [], "file_name": "charset_normalizer-3.4.4-py3-none-any.whl", "imports": ["charset_normalizer"], "install_dir": "site", "name": "charset-normalizer", "package_type": "package", "sha256": "3ad3f0d6ba052549bf375d0137b3a218bcf2914e8f08db7fa5436561404f3a36", "unvendored_tests": false, "version": "3.4.4"}, "clarabel": {"depends": ["numpy", "scipy"], "file_name": "clarabel-0.11.0-cp39-abi3-pyodide_2025_0_wasm32.whl", "imports": ["clarabel"], "install_dir": "site", "name": "clarabel", "package_type": "package", "sha256": "556e80e526244d1259c2fb7d7302bc758836a31f6b85d7c6960bb052d2b77489", "unvendored_tests": false, "version": "0.11.0"}, "click": {"depends": [], "file_name": "click-8.3.1-py3-none-any.whl", "imports": ["click"], "install_dir": "site", "name": "click", "package_type": "package", "sha256": "d3a6a60612e8940fc1396f5095d823520f14d65621adb5d8739b9b3f300276ae", "unvendored_tests": false, "version": "8.3.1"}, "cligj": {"depends": ["click"], "file_name": "cligj-0.7.2-py3-none-any.whl", "imports": ["cligj"], "install_dir": "site", "name": "cligj", "package_type": "package", "sha256": "8ee9b744c58c6c7d3fb57b645ad383ca991fdfa035d6b5367764835b4718f4cb", "unvendored_tests": false, "version": "0.7.2"}, "clingo": {"depends": ["cffi"], "file_name": "clingo-5.8.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["clingo"], "install_dir": "site", "name": "clingo", "package_type": "package", "sha256": "bebb57cec75510c9f0574e7a4c30d1211ac1504dd3fe88eb898b49f11c1e7764", "unvendored_tests": false, "version": "5.8.0"}, "cloudpickle": {"depends": [], "file_name": "cloudpickle-3.1.1-py3-none-any.whl", "imports": ["cloudpickle"], "install_dir": "site", "name": "cloudpickle", "package_type": "package", "sha256": "1713954092c0c77c38518705b822ac2a48055749b1131a8bc0c6bb8daddd5f83", "unvendored_tests": false, "version": "3.1.1"}, "cmyt": {"depends": ["colorspacious", "matplotlib", "more-itertools", "numpy"], "file_name": "cmyt-2.0.2-py3-none-any.whl", "imports": ["cmyt"], "install_dir": "site", "name": "cmyt", "package_type": "package", "sha256": "4e34b39e175f32ed104f7c31076a43bbc1f755da601be61c548d9bf9ccb162ff", "unvendored_tests": false, "version": "2.0.2"}, "cobs": {"depends": [], "file_name": "cobs-1.2.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["cobs"], "install_dir": "site", "name": "cobs", "package_type": "package", "sha256": "3fc5bb2065f467bf6ebe8781ba2d65e255157efd57ca17e2231a6bc78e62e3f5", "unvendored_tests": false, "version": "1.2.1"}, "colorspacious": {"depends": ["numpy"], "file_name": "colorspacious-1.1.2-py2.py3-none-any.whl", "imports": ["colorspacious"], "install_dir": "site", "name": "colorspacious", "package_type": "package", "sha256": "a4ffb391e744d4ee5a278da853f659462f5b7af554e1d3668cddcde5fbd178d2", "unvendored_tests": false, "version": "1.1.2"}, "contourpy": {"depends": ["numpy"], "file_name": "contourpy-1.3.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["contourpy"], "install_dir": "site", "name": "contourpy", "package_type": "package", "sha256": "bfb8aebbd6fe129eb04b9339eacc593f3ff31c9f3fe6067d48c59bf579269a94", "unvendored_tests": false, "version": "1.3.1"}, "coolprop": {"depends": ["numpy", "matplotlib"], "file_name": "coolprop-7.2.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["CoolProp"], "install_dir": "site", "name": "coolprop", "package_type": "package", "sha256": "5db234d62efeff77429f0341b380be7781a984ca791b92f0aa6c821a4721ea1f", "unvendored_tests": true, "version": "7.2.0"}, "coolprop-tests": {"depends": ["coolprop"], "file_name": "coolprop-tests.tar", "imports": [], "install_dir": "site", "name": "coolprop-tests", "package_type": "package", "sha256": "fd85ea7b15f11987b66296922060c1a58a49b4fd9772c5d8394a95e2ebd44c95", "unvendored_tests": false, "version": "7.2.0"}, "coverage": {"depends": ["sqlite3"], "file_name": "coverage-7.6.12-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["coverage"], "install_dir": "site", "name": "coverage", "package_type": "package", "sha256": "f7177cc62824e11cb856dcb8b24d18f34fef616601bdb3c260cfb61e38625ebd", "unvendored_tests": false, "version": "7.6.12"}, "cramjam": {"depends": [], "file_name": "cramjam-2.10.0rc1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["cramjam"], "install_dir": "site", "name": "cramjam", "package_type": "package", "sha256": "6a771bba3165b2233a2b7e3b597513e6bf54053f57bc1df54d8bc565910e0797", "unvendored_tests": false, "version": "2.10.0rc1"}, "crc32c": {"depends": [], "file_name": "crc32c-2.7.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["crc32c"], "install_dir": "site", "name": "crc32c", "package_type": "package", "sha256": "2b2d2aa5c35772fc993405aec61cbea8cfd08f734358ee4bbd13c4ed30589c5f", "unvendored_tests": false, "version": "2.7.1"}, "cryptography": {"depends": ["libopenssl", "six", "cffi"], "file_name": "cryptography-46.0.3-cp313-abi3-pyodide_2025_0_wasm32.whl", "imports": ["cryptography"], "install_dir": "site", "name": "cryptography", "package_type": "package", "sha256": "8dcec3549f85ea9df0941f75339fa5539d3b4a87ea0a47ab1957fd30c3878419", "unvendored_tests": false, "version": "46.0.3"}, "css-inline": {"depends": [], "file_name": "css_inline-0.16.0-cp39-abi3-pyodide_2025_0_wasm32.whl", "imports": ["css_inline"], "install_dir": "site", "name": "css-inline", "package_type": "package", "sha256": "3dbb7ce8fcb79c0e2efbb8cd2f46513e0cf55715896d0cc781783f44262f101a", "unvendored_tests": false, "version": "0.16.0"}, "cssselect": {"depends": [], "file_name": "cssselect-1.3.0-py3-none-any.whl", "imports": ["cssselect"], "install_dir": "site", "name": "cssselect", "package_type": "package", "sha256": "964d7b801271db5a87ff4e4d15a759907d21c2171512a0c465fa479c9304f29b", "unvendored_tests": false, "version": "1.3.0"}, "cvxpy-base": {"depends": ["numpy", "scipy", "clarabel"], "file_name": "cvxpy_base-1.6.3-py3-none-any.whl", "imports": ["cvxpy"], "install_dir": "site", "name": "cvxpy-base", "package_type": "package", "sha256": "1af1f7116765a3f58b07435051f7b22472629f7ce0914bed40290e04dad13c48", "unvendored_tests": true, "version": "1.6.3"}, "cvxpy-base-tests": {"depends": ["cvxpy-base"], "file_name": "cvxpy-base-tests.tar", "imports": [], "install_dir": "site", "name": "cvxpy-base-tests", "package_type": "package", "sha256": "d8ee8b62799cc27f03f1db48667850094adad7ab73f2e7170018efdf2d5803ee", "unvendored_tests": false, "version": "1.6.3"}, "cycler": {"depends": ["six"], "file_name": "cycler-0.12.1-py3-none-any.whl", "imports": ["cycler"], "install_dir": "site", "name": "cycler", "package_type": "package", "sha256": "a140384709bfc674001fbd3b1e32a3bf8b531c0413d02f98badbd2d8ecc924c1", "unvendored_tests": false, "version": "0.12.1"}, "cysignals": {"depends": [], "file_name": "cysignals-1.12.3-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["cysignals"], "install_dir": "site", "name": "cysignals", "package_type": "package", "sha256": "d23517d622583a2229ab97eb6cdfb8da76a07aa015da194794623a3d080467b3", "unvendored_tests": false, "version": "1.12.3"}, "cytoolz": {"depends": ["toolz"], "file_name": "cytoolz-1.0.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["cytoolz"], "install_dir": "site", "name": "cytoolz", "package_type": "package", "sha256": "dd3fa44718db38cdc637763c68f07e7e49953b6a85d8452afdd5f0b78be643f1", "unvendored_tests": true, "version": "1.0.1"}, "cytoolz-tests": {"depends": ["cytoolz"], "file_name": "cytoolz-tests.tar", "imports": [], "install_dir": "site", "name": "cytoolz-tests", "package_type": "package", "sha256": "7ad1424b1544a1f5a6fe188fae7f30022552f76ae1e8665d17d1fe9fd5d81dac", "unvendored_tests": false, "version": "1.0.1"}, "decorator": {"depends": [], "file_name": "decorator-5.2.1-py3-none-any.whl", "imports": ["decorator"], "install_dir": "site", "name": "decorator", "package_type": "package", "sha256": "875c482c775a71a793ed4392891abba2b762c0dfe951dccc6d2165bb5b422658", "unvendored_tests": false, "version": "5.2.1"}, "demes": {"depends": ["attrs", "ruamel.yaml"], "file_name": "demes-0.2.3-py3-none-any.whl", "imports": ["demes"], "install_dir": "site", "name": "demes", "package_type": "package", "sha256": "01d91bf39f3ead93e0131886865caf669dae1c14b0723ce55932982b528cbfba", "unvendored_tests": false, "version": "0.2.3"}, "deprecation": {"depends": ["packaging"], "file_name": "deprecation-2.1.0-py2.py3-none-any.whl", "imports": ["deprecation"], "install_dir": "site", "name": "deprecation", "package_type": "package", "sha256": "9352a446bcf40cb483d89dbee7f85dc67bb7707653706f8bd180366fe024f862", "unvendored_tests": false, "version": "2.1.0"}, "diskcache": {"depends": ["sqlite3"], "file_name": "diskcache-5.6.3-py3-none-any.whl", "imports": ["diskcache"], "install_dir": "site", "name": "diskcache", "package_type": "package", "sha256": "d4bcdb7580a6dc5370eb5f810c89232972f2a79ad8557ec15b12d2148078a401", "unvendored_tests": false, "version": "5.6.3"}, "distlib": {"depends": [], "file_name": "distlib-0.3.9-py2.py3-none-any.whl", "imports": ["distlib"], "install_dir": "site", "name": "distlib", "package_type": "package", "sha256": "8599aff281d7dd46ac4eb31a98107318281cacabcd83303b51c19ca4a2da3eb5", "unvendored_tests": false, "version": "0.3.9"}, "distro": {"depends": [], "file_name": "distro-1.9.0-py3-none-any.whl", "imports": ["distro"], "install_dir": "site", "name": "distro", "package_type": "package", "sha256": "997da1bf8f9ce720daa3c06cea7e1439a8a0407379293e01144e5a2da01bc3c6", "unvendored_tests": false, "version": "1.9.0"}, "docutils": {"depends": [], "file_name": "docutils-0.21.2-py3-none-any.whl", "imports": ["docutils"], "install_dir": "site", "name": "docutils", "package_type": "package", "sha256": "55e71ee1f74328917ab97904fd879960197db736e2e1ac44686cf1df781b13bd", "unvendored_tests": false, "version": "0.21.2"}, "donfig": {"depends": ["pyyaml"], "file_name": "donfig-0.8.1.post1-py3-none-any.whl", "imports": ["donfig"], "install_dir": "site", "name": "donfig", "package_type": "package", "sha256": "36064dc40199a88bfa3ea79f279cc4f66b850f6a5c2f1e6ebbf9569648e15884", "unvendored_tests": true, "version": "0.8.1.post1"}, "donfig-tests": {"depends": ["donfig"], "file_name": "donfig-tests.tar", "imports": [], "install_dir": "site", "name": "donfig-tests", "package_type": "package", "sha256": "27980fd72de84aaf45682097106445fe801a69180c5c7d1066f7b8dfb1742940", "unvendored_tests": false, "version": "0.8.1.post1"}, "ewah-bool-utils": {"depends": ["numpy"], "file_name": "ewah_bool_utils-1.2.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["ewah_bool_utils"], "install_dir": "site", "name": "ewah_bool_utils", "package_type": "package", "sha256": "baa25345e54e978361653ced58224ec5e66533df54fa25e765523892afc804f9", "unvendored_tests": true, "version": "1.2.2"}, "ewah-bool-utils-tests": {"depends": ["ewah_bool_utils"], "file_name": "ewah-bool-utils-tests.tar", "imports": [], "install_dir": "site", "name": "ewah_bool_utils-tests", "package_type": "package", "sha256": "c5723fbb16afbb37fd805ebff71173c0200e3ae300afc725e54a88f8a6371ac7", "unvendored_tests": false, "version": "1.2.2"}, "exceptiongroup": {"depends": [], "file_name": "exceptiongroup-1.2.2-py3-none-any.whl", "imports": ["exceptiongroup"], "install_dir": "site", "name": "exceptiongroup", "package_type": "package", "sha256": "1e53eb509a0ec39aec35fd93ee2190899745967d7758de005318f3145e8b5b0d", "unvendored_tests": false, "version": "1.2.2"}, "executing": {"depends": [], "file_name": "executing-2.2.0-py2.py3-none-any.whl", "imports": ["executing"], "install_dir": "site", "name": "executing", "package_type": "package", "sha256": "c8e573008eea36616bd1821285b8f13b44ec77c35aa732bbe6d689a1b3932458", "unvendored_tests": false, "version": "2.2.0"}, "fastapi": {"depends": ["httpx", "jinja2", "pydantic", "starlette", "anyio"], "file_name": "fastapi-0.116.1-py3-none-any.whl", "imports": ["fastapi"], "install_dir": "site", "name": "fastapi", "package_type": "package", "sha256": "57b58f74bc39b4b10828cffe45d59eebfa18f30d5656f35c002f2f5f651c305f", "unvendored_tests": false, "version": "0.116.1"}, "fastcan": {"depends": ["scikit-learn"], "file_name": "fastcan-0.5.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["fastcan"], "install_dir": "site", "name": "fastcan", "package_type": "package", "sha256": "42911731bed3165fcb977bfa88c06db94eb0c5e6d0bcfb28504342476b4bd3f4", "unvendored_tests": true, "version": "0.5.0"}, "fastcan-tests": {"depends": ["fastcan"], "file_name": "fastcan-tests.tar", "imports": [], "install_dir": "site", "name": "fastcan-tests", "package_type": "package", "sha256": "c9dabf71fb41f66f38cdabd850adf8a1ed2c2ac880be96e0650de85e3208e7ee", "unvendored_tests": false, "version": "0.5.0"}, "fastparquet": {"depends": ["numpy", "cramjam", "pandas", "fsspec", "packaging"], "file_name": "fastparquet-2024.11.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["fastparquet"], "install_dir": "site", "name": "fastparquet", "package_type": "package", "sha256": "97e54ff7436c2b661f92fb2c648d5346cb94c6a14a90d96c08151b185a82e1b1", "unvendored_tests": false, "version": "2024.11.0"}, "fiona": {"depends": ["attrs", "certifi", "setuptools", "six", "click", "cligj"], "file_name": "fiona-1.9.5-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["fiona"], "install_dir": "site", "name": "fiona", "package_type": "package", "sha256": "e3c4b0f342b9d14f8f49474e18b2faeda31d2515eaff0f2a122afb9cef562876", "unvendored_tests": false, "version": "1.9.5"}, "fonttools": {"depends": [], "file_name": "fonttools-4.56.0-py3-none-any.whl", "imports": ["fontTools"], "install_dir": "site", "name": "fonttools", "package_type": "package", "sha256": "9d6518c8ad4d88019bc72045108eca154301014215222408aa047cf4955c726d", "unvendored_tests": false, "version": "4.56.0"}, "freesasa": {"depends": [], "file_name": "freesasa-2.2.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["freesasa"], "install_dir": "site", "name": "freesasa", "package_type": "package", "sha256": "2d4158326beecd9958af7bc6a121cc7cae0d4a577a942a1f2d58f6d9931cb942", "unvendored_tests": false, "version": "2.2.1"}, "frozenlist": {"depends": [], "file_name": "frozenlist-1.6.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["frozenlist"], "install_dir": "site", "name": "frozenlist", "package_type": "package", "sha256": "8586c579bec9bea1be39e9814ffa65280b1f6aaf1bde4332eeedc5ba6fb6c59d", "unvendored_tests": false, "version": "1.6.0"}, "fsspec": {"depends": [], "file_name": "fsspec-2025.3.2-py3-none-any.whl", "imports": ["fsspec"], "install_dir": "site", "name": "fsspec", "package_type": "package", "sha256": "33f1825db178ed9df3bbf056f431ce0dc29f57489b8e265133d704d44f8d7deb", "unvendored_tests": true, "version": "2025.3.2"}, "fsspec-tests": {"depends": ["fsspec"], "file_name": "fsspec-tests.tar", "imports": [], "install_dir": "site", "name": "fsspec-tests", "package_type": "package", "sha256": "d8bca1f84b04961ddecd8410705e71c4475febf4f7c894acb2d0b34442a61821", "unvendored_tests": false, "version": "2025.3.2"}, "future": {"depends": [], "file_name": "future-1.0.0-py3-none-any.whl", "imports": ["future"], "install_dir": "site", "name": "future", "package_type": "package", "sha256": "00fb5bff96057f6cc8bf891d68b45c5c4a1e8f4ab6ed366651cfa7d8292d651a", "unvendored_tests": true, "version": "1.0.0"}, "future-tests": {"depends": ["future"], "file_name": "future-tests.tar", "imports": [], "install_dir": "site", "name": "future-tests", "package_type": "package", "sha256": "be42b72dd88321133f53666012cfee4fb22acc66a0e93d52f3bbaabc21edecca", "unvendored_tests": false, "version": "1.0.0"}, "galpy": {"depends": ["numpy", "scipy", "matplotlib", "astropy", "future", "setuptools"], "file_name": "galpy-1.10.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["galpy"], "install_dir": "site", "name": "galpy", "package_type": "package", "sha256": "ab453044b69f8161b518fd86c76f494e4d5876b936668e464db63cf2922ba6fc", "unvendored_tests": false, "version": "1.10.2"}, "geopandas": {"depends": ["shapely", "fiona", "pyproj", "packaging", "pandas"], "file_name": "geopandas-1.1.1-py3-none-any.whl", "imports": ["geopandas"], "install_dir": "site", "name": "geopandas", "package_type": "package", "sha256": "37a35570d7fa540595c490bb84b89ad83848b67d9c55eeb0442c7578197db6fc", "unvendored_tests": true, "version": "1.1.1"}, "geopandas-tests": {"depends": ["geopandas"], "file_name": "geopandas-tests.tar", "imports": [], "install_dir": "site", "name": "geopandas-tests", "package_type": "package", "sha256": "a4233e1555cd0a84d6712fc6934e8ec35c0c8740b9770f44ca927001e9ee4aeb", "unvendored_tests": false, "version": "1.1.1"}, "gmpy2": {"depends": [], "file_name": "gmpy2-2.1.5-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["gmpy2"], "install_dir": "site", "name": "gmpy2", "package_type": "package", "sha256": "0f4168b108079567f211ac6b3d3a22e500c29a2c620fbb7a3035d6a193f002da", "unvendored_tests": false, "version": "2.1.5"}, "google-crc32c": {"depends": [], "file_name": "google_crc32c-1.8.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["google_crc32c"], "install_dir": "site", "name": "google-crc32c", "package_type": "package", "sha256": "c469bebdea71acf327c5e35177dde836186649e50f08489898d167ffb3de3090", "unvendored_tests": false, "version": "1.8.0"}, "gsw": {"depends": ["numpy"], "file_name": "gsw-3.6.19-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["gsw"], "install_dir": "site", "name": "gsw", "package_type": "package", "sha256": "d57a2ba51ad05510862d315343eb9049143005e475f3b5093765d5e9dba7e7a2", "unvendored_tests": true, "version": "3.6.19"}, "gsw-tests": {"depends": ["gsw"], "file_name": "gsw-tests.tar", "imports": [], "install_dir": "site", "name": "gsw-tests", "package_type": "package", "sha256": "ebbecf095de3e2a21b221b1b858390de986587a1f1959be3702f25f0bbc36d32", "unvendored_tests": false, "version": "3.6.19"}, "h11": {"depends": [], "file_name": "h11-0.14.0-py3-none-any.whl", "imports": ["h11"], "install_dir": "site", "name": "h11", "package_type": "package", "sha256": "c1163b48048f27994e804188a4f2c9726d4e945eb181c2637d9ee78c379a226b", "unvendored_tests": true, "version": "0.14.0"}, "h11-tests": {"depends": ["h11"], "file_name": "h11-tests.tar", "imports": [], "install_dir": "site", "name": "h11-tests", "package_type": "package", "sha256": "2eb365f7d4bb226b3a2ac452047cafbb7682651c4f8d6ad583f840d21aacdf98", "unvendored_tests": false, "version": "0.14.0"}, "h3": {"depends": [], "file_name": "h3-4.2.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["h3"], "install_dir": "site", "name": "h3", "package_type": "package", "sha256": "1c0209c3e265140dd9716d58b242c606530a960538aefa02b00487269e82295e", "unvendored_tests": false, "version": "4.2.2"}, "h5py": {"depends": ["numpy", "pkgconfig", "libhdf5"], "file_name": "h5py-3.13.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["h5py"], "install_dir": "site", "name": "h5py", "package_type": "package", "sha256": "b8b01774b2a5bfa4fee0313a0fe51b689af065ccdb53feac87e0112c0b555a81", "unvendored_tests": true, "version": "3.13.0"}, "h5py-tests": {"depends": ["h5py"], "file_name": "h5py-tests.tar", "imports": [], "install_dir": "site", "name": "h5py-tests", "package_type": "package", "sha256": "6b4143ff0eb8ea781bed7cd73b969ff4f6cdee8e77b7b5117b9b9620cf4a1ab9", "unvendored_tests": false, "version": "3.13.0"}, "hashlib": {"depends": ["libopenssl"], "file_name": "hashlib-1.0.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["_hashlib"], "install_dir": "site", "name": "hashlib", "package_type": "cpython_module", "sha256": "206442f20d96c131210dfdbad25d5da877b795c873d6b6689a58a46031ed9aab", "unvendored_tests": false, "version": "1.0.0"}, "healpy": {"depends": ["numpy", "astropy"], "file_name": "healpy-1.19.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["healpy"], "install_dir": "site", "name": "healpy", "package_type": "package", "sha256": "f2f16fe5aa15d70c88b3bcddcddb40bb450a85f7f51c7fdc6a7aea281b63d413", "unvendored_tests": true, "version": "1.19.0"}, "healpy-tests": {"depends": ["healpy"], "file_name": "healpy-tests.tar", "imports": [], "install_dir": "site", "name": "healpy-tests", "package_type": "package", "sha256": "41852502e5cf88f1e25d885d3fcf48d4d623b31aa92f939c7b5fa25ff863fa95", "unvendored_tests": false, "version": "1.19.0"}, "highspy": {"depends": ["numpy"], "file_name": "highspy-1.11.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["highspy"], "install_dir": "site", "name": "highspy", "package_type": "package", "sha256": "9e0c64abc044e6cdf4d07d68b982f6e7e4b3bb1aec3596ce5e81f3798f207664", "unvendored_tests": false, "version": "1.11.0"}, "html5lib": {"depends": ["webencodings", "six"], "file_name": "html5lib-1.1-py2.py3-none-any.whl", "imports": ["html5lib"], "install_dir": "site", "name": "html5lib", "package_type": "package", "sha256": "0140d9b5d8c2cdec07bb3a513f99ea1082d169803a61dc388f7ab2de4104d948", "unvendored_tests": false, "version": "1.1"}, "httpcore": {"depends": ["certifi", "h11", "ssl"], "file_name": "httpcore-1.0.7-py3-none-any.whl", "imports": ["httpcore"], "install_dir": "site", "name": "httpcore", "package_type": "package", "sha256": "59660a6db0443006290fe5bf1eaae7c047ed2c7c13520ba0b3329fbbf8a6aa45", "unvendored_tests": false, "version": "1.0.7"}, "httpx": {"depends": [], "file_name": "httpx-0.28.1-py3-none-any.whl", "imports": ["httpx"], "install_dir": "site", "name": "httpx", "package_type": "package", "sha256": "3123bf6c7e7623667b39d31f8b2bf4eac925b49ea79dfdf520560db2e1cf87a9", "unvendored_tests": false, "version": "0.28.1"}, "idna": {"depends": [], "file_name": "idna-3.10-py3-none-any.whl", "imports": ["idna"], "install_dir": "site", "name": "idna", "package_type": "package", "sha256": "72da788d7a6d3e363535aba1be2658fd21bda5038f2eb0976ce6cb5186942bd6", "unvendored_tests": false, "version": "3.10"}, "igraph": {"depends": ["texttable"], "file_name": "igraph-0.11.8-cp39-abi3-pyodide_2025_0_wasm32.whl", "imports": ["igraph"], "install_dir": "site", "name": "igraph", "package_type": "package", "sha256": "06fcc32420c64dfd3349c172b6b1460f36487e3b47e937ee5e8da0cc1ffa7c86", "unvendored_tests": false, "version": "0.11.8"}, "imageio": {"depends": ["numpy", "pillow"], "file_name": "imageio-2.37.0-py3-none-any.whl", "imports": ["imageio"], "install_dir": "site", "name": "imageio", "package_type": "package", "sha256": "f9af831a6e7d9b55adbd9f1c2aa40667550ed09265ca1dc2636236ee53f945e0", "unvendored_tests": false, "version": "2.37.0"}, "imgui-bundle": {"depends": ["pydantic", "munch", "numpy"], "file_name": "imgui_bundle-1.92.4-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["imgui_bundle"], "install_dir": "site", "name": "imgui-bundle", "package_type": "package", "sha256": "2ac186d7a0f22b093c766bc5fba6e9e299d99fab8c290c4963181bea1a03ffe5", "unvendored_tests": true, "version": "1.92.4"}, "imgui-bundle-tests": {"depends": ["imgui-bundle"], "file_name": "imgui-bundle-tests.tar", "imports": [], "install_dir": "site", "name": "imgui-bundle-tests", "package_type": "package", "sha256": "18654d836f70b906a516f7e116f6c4789adf1e61a9d763ca8a59bafe149a544a", "unvendored_tests": false, "version": "1.92.4"}, "iminuit": {"depends": ["numpy"], "file_name": "iminuit-2.30.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["iminuit"], "install_dir": "site", "name": "iminuit", "package_type": "package", "sha256": "62b3b007d1cf6dbbecd5c054f8bef8562c224a4f127733d6fa571fa27957a243", "unvendored_tests": false, "version": "2.30.1"}, "iniconfig": {"depends": [], "file_name": "iniconfig-2.1.0-py3-none-any.whl", "imports": ["iniconfig"], "install_dir": "site", "name": "iniconfig", "package_type": "package", "sha256": "141afb191b247fa924232a589108b3391113d80e8b53902730e6d3efedac30cf", "unvendored_tests": false, "version": "2.1.0"}, "inspice": {"depends": ["numpy", "matplotlib", "pyyaml", "cffi", "diskcache", "h5py", "ply", "libngspice"], "file_name": "inspice-1.6.4.1-py3-none-any.whl", "imports": ["InSpice"], "install_dir": "site", "name": "inspice", "package_type": "package", "sha256": "c7cd694127cfe87b20cff5d29449745fd242fe7388f3ad6aa2705f3075349d9a", "unvendored_tests": false, "version": "1.6.4.1"}, "ipython": {"depends": ["asttokens", "decorator", "executing", "matplotlib-inline", "prompt_toolkit", "pure-eval", "pygments", "six", "stack-data", "traitlets", "sqlite3", "wcwidth"], "file_name": "ipython-9.0.2-py3-none-any.whl", "imports": ["IPython"], "install_dir": "site", "name": "ipython", "package_type": "package", "sha256": "1cd4500bf130562204ea0a029e2f98fc386ab79629c42f608429590d886c83d5", "unvendored_tests": true, "version": "9.0.2"}, "ipython-tests": {"depends": ["ipython"], "file_name": "ipython-tests.tar", "imports": [], "install_dir": "site", "name": "ipython-tests", "package_type": "package", "sha256": "27d4cd74a4711e6a84368b4e829714679a8884f3790f6b54bfe0446b5ae378fe", "unvendored_tests": false, "version": "9.0.2"}, "jedi": {"depends": ["parso"], "file_name": "jedi-0.19.2-py2.py3-none-any.whl", "imports": ["jedi"], "install_dir": "site", "name": "jedi", "package_type": "package", "sha256": "63f137a6c965e08cc4221acdf5170ef24d34e7572d8a1109846da93b3ab33d65", "unvendored_tests": true, "version": "0.19.2"}, "jedi-tests": {"depends": ["jedi"], "file_name": "jedi-tests.tar", "imports": [], "install_dir": "site", "name": "jedi-tests", "package_type": "package", "sha256": "83220d4411c3f9353d9c01f4bddff48acb2daf1f9a5cbe86e9bc005932aed841", "unvendored_tests": false, "version": "0.19.2"}, "jinja2": {"depends": ["markupsafe"], "file_name": "jinja2-3.1.6-py3-none-any.whl", "imports": ["jinja2"], "install_dir": "site", "name": "Jinja2", "package_type": "package", "sha256": "56b8a136e2140cb9ce2e2e7c8ed138a795ec1f6ea97fdd4319d46ed9193ab9d2", "unvendored_tests": false, "version": "3.1.6"}, "jiter": {"depends": [], "file_name": "jiter-0.9.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["jiter"], "install_dir": "site", "name": "jiter", "package_type": "package", "sha256": "69fc995fab57b81727062c7cfdd6922658ae8c320e29af3d3a4b8f227b984b4d", "unvendored_tests": false, "version": "0.9.0"}, "joblib": {"depends": [], "file_name": "joblib-1.4.2-py3-none-any.whl", "imports": ["joblib"], "install_dir": "site", "name": "joblib", "package_type": "package", "sha256": "f6cd3ff44cc58faa3216f8778048b37792822183fd5ece300bd9a5d7f1be72ba", "unvendored_tests": true, "version": "1.4.2"}, "joblib-tests": {"depends": ["joblib"], "file_name": "joblib-tests.tar", "imports": [], "install_dir": "site", "name": "joblib-tests", "package_type": "package", "sha256": "f99c9730662d553fb7c71d9905796b9a36bc18b753008f885bf614fd23a8a343", "unvendored_tests": false, "version": "1.4.2"}, "jsonpatch": {"depends": ["jsonpointer"], "file_name": "jsonpatch-1.33-py2.py3-none-any.whl", "imports": ["jsonpatch"], "install_dir": "site", "name": "jsonpatch", "package_type": "package", "sha256": "932997e42e9468342b8c8d359c8da92ee71eb82d3612c46a4793c67758ba1c31", "unvendored_tests": false, "version": "1.33"}, "jsonpointer": {"depends": [], "file_name": "jsonpointer-3.0.0-py2.py3-none-any.whl", "imports": ["jsonpointer"], "install_dir": "site", "name": "jsonpointer", "package_type": "package", "sha256": "0697364e01aac2f708c64f29c214105e21ea239c9a7e32ea71e4b37d192cee90", "unvendored_tests": false, "version": "3.0.0"}, "jsonschema": {"depends": ["attrs", "pyrsistent", "referencing", "jsonschema_specifications"], "file_name": "jsonschema-4.23.0-py3-none-any.whl", "imports": ["jsonschema"], "install_dir": "site", "name": "jsonschema", "package_type": "package", "sha256": "5178a630760e05b5ce4392fb885e0bdd24a9bc5939006b5a88a0a63d402f0b60", "unvendored_tests": true, "version": "4.23.0"}, "jsonschema-specifications": {"depends": ["referencing"], "file_name": "jsonschema_specifications-2024.10.1-py3-none-any.whl", "imports": ["jsonschema_specifications"], "install_dir": "site", "name": "jsonschema_specifications", "package_type": "package", "sha256": "40a4885255fc56c2fb671eb656a3be0501b1185a59aad6e67dde3cee0d2d916d", "unvendored_tests": true, "version": "2024.10.1"}, "jsonschema-specifications-tests": {"depends": ["jsonschema_specifications"], "file_name": "jsonschema-specifications-tests.tar", "imports": [], "install_dir": "site", "name": "jsonschema_specifications-tests", "package_type": "package", "sha256": "c46b7d5a07f445aed287f5a806bdf3cc030ed94c149581a353aacc213b1809bb", "unvendored_tests": false, "version": "2024.10.1"}, "jsonschema-tests": {"depends": ["jsonschema"], "file_name": "jsonschema-tests.tar", "imports": [], "install_dir": "site", "name": "jsonschema-tests", "package_type": "package", "sha256": "5558631e5cd8c27c5997349ed0ad5df44bd6d30b33b15397cef8a2a243cddb2d", "unvendored_tests": false, "version": "4.23.0"}, "kiwisolver": {"depends": [], "file_name": "kiwisolver-1.4.8-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["kiwisolver"], "install_dir": "site", "name": "kiwisolver", "package_type": "package", "sha256": "74fef16f229c3280f386ace367f36ac5ad8597ebabef45c6cf8bc2fa8aa3be70", "unvendored_tests": false, "version": "1.4.8"}, "lakers-python": {"depends": [], "file_name": "lakers_python-0.6.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["lakers"], "install_dir": "site", "name": "lakers-python", "package_type": "package", "sha256": "60239e9e85ee953e9a9edb13a8810e89659c9d532444e4d55d32ed047170792e", "unvendored_tests": false, "version": "0.6.0"}, "lazy-loader": {"depends": [], "file_name": "lazy_loader-0.4-py3-none-any.whl", "imports": ["lazy_loader"], "install_dir": "site", "name": "lazy_loader", "package_type": "package", "sha256": "b46b6d7f9124873396e5e8ca0656adb11c8edf59934e93be8699d293a5ba9e7b", "unvendored_tests": true, "version": "0.4"}, "lazy-loader-tests": {"depends": ["lazy_loader"], "file_name": "lazy-loader-tests.tar", "imports": [], "install_dir": "site", "name": "lazy_loader-tests", "package_type": "package", "sha256": "4de49164cb79121e4c0701cf72ca50dfa70a1c25c226647be5d934acc6396653", "unvendored_tests": false, "version": "0.4"}, "lazy-object-proxy": {"depends": [], "file_name": "lazy_object_proxy-1.10.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["lazy_object_proxy"], "install_dir": "site", "name": "lazy-object-proxy", "package_type": "package", "sha256": "f78136e4bf7e17b01537752b392597bebf2b01807f79696421173e7f609225df", "unvendored_tests": false, "version": "1.10.0"}, "libcrc32c": {"depends": [], "file_name": "libcrc32c-1.1.0.zip", "imports": [], "install_dir": "dynlib", "name": "libcrc32c", "package_type": "shared_library", "sha256": "dd59006ba799fff18f02829338fedfe5d8eeba51bbd9ad9e712551ec93d5cc50", "unvendored_tests": false, "version": "1.1.0"}, "libcst": {"depends": ["pyyaml"], "file_name": "libcst-1.6.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["libcst"], "install_dir": "site", "name": "libcst", "package_type": "package", "sha256": "8ed555b5850c35e6c072f0965c5615df06e13a23a0dd60f192406080704ffe55", "unvendored_tests": true, "version": "1.6.0"}, "libcst-tests": {"depends": ["libcst"], "file_name": "libcst-tests.tar", "imports": [], "install_dir": "site", "name": "libcst-tests", "package_type": "package", "sha256": "bae8e946ce84316132a3e997c11d11336552371e897e885a683e06ec25ee8c11", "unvendored_tests": false, "version": "1.6.0"}, "libgdal": {"depends": ["libgeos"], "file_name": "libgdal-3.8.3.zip", "imports": [], "install_dir": "dynlib", "name": "libgdal", "package_type": "shared_library", "sha256": "c2e47d21f9ae47a12177c9f7d4aeaa8b7528fbf87a88d77778a159f910af459c", "unvendored_tests": false, "version": "3.8.3"}, "libgeos": {"depends": [], "file_name": "libgeos-3.12.1.zip", "imports": [], "install_dir": "dynlib", "name": "libgeos", "package_type": "shared_library", "sha256": "92899a5b7734ecef7dcf0f3f84cf73dbd48847f67c29d59555b6dc609940816b", "unvendored_tests": false, "version": "3.12.1"}, "libhdf5": {"depends": [], "file_name": "libhdf5-1.12.1.zip", "imports": [], "install_dir": "dynlib", "name": "libhdf5", "package_type": "shared_library", "sha256": "ea36748b4e800267ee2f237ebb1db8880a3a15344ee18333487befc936935fc5", "unvendored_tests": false, "version": "1.12.1"}, "libheif": {"depends": [], "file_name": "libheif-1.12.0.zip", "imports": [], "install_dir": "dynlib", "name": "libheif", "package_type": "shared_library", "sha256": "3bd6978820e070d61f5acc48cdc9fcf8e601477597117e7946d46de390bd283d", "unvendored_tests": false, "version": "1.12.0"}, "libmagic": {"depends": [], "file_name": "libmagic-5.42.zip", "imports": [], "install_dir": "dynlib", "name": "libmagic", "package_type": "shared_library", "sha256": "cae7434e74f870e730cd3584f94352adb2a61d6a0c6cfa2b97365a51b3978021", "unvendored_tests": false, "version": "5.42"}, "libngspice": {"depends": [], "file_name": "libngspice-44.2.zip", "imports": [], "install_dir": "dynlib", "name": "libngspice", "package_type": "shared_library", "sha256": "d6a0fe29032d30653f44b24553b4efdff65efee13cfd732ea47fb09525768d3f", "unvendored_tests": false, "version": "44.2"}, "libopenblas": {"depends": [], "file_name": "libopenblas-0.3.26.zip", "imports": [], "install_dir": "dynlib", "name": "libopenblas", "package_type": "shared_library", "sha256": "f8f5db65c9367ed7f057d0ee853d94ddb3c007968aa8138253461dad42537fa2", "unvendored_tests": false, "version": "0.3.26"}, "libopenssl": {"depends": [], "file_name": "libopenssl-1.1.1w.zip", "imports": [], "install_dir": "dynlib", "name": "libopenssl", "package_type": "shared_library", "sha256": "eaec7126f466a33ea4121fd230211bb01e9ad1c5748f3cd0b4b1c8677b4ac90a", "unvendored_tests": false, "version": "1.1.1w"}, "libproj": {"depends": [], "file_name": "libproj-9.6.2.zip", "imports": [], "install_dir": "dynlib", "name": "libproj", "package_type": "shared_library", "sha256": "8739c76e681f900923b900c9df0ef75cf421d39cabb54650c4b9ad19b6a76d85", "unvendored_tests": false, "version": "9.6.2"}, "libsuitesparse": {"depends": ["libopenblas"], "file_name": "libsuitesparse-5.11.0.zip", "imports": [], "install_dir": "dynlib", "name": "libsuitesparse", "package_type": "shared_library", "sha256": "8883746009a4fc5aa2b83cf109c37e5fb0c6e9db270b0ca4b4f87c762d831db9", "unvendored_tests": false, "version": "5.11.0"}, "libtaglib": {"depends": [], "file_name": "libtaglib-2.1.1.zip", "imports": [], "install_dir": "dynlib", "name": "libtaglib", "package_type": "shared_library", "sha256": "9783f638d2f124f9546a902b85186fc92b1b99b05e5e1853d938975df95bd075", "unvendored_tests": false, "version": "2.1.1"}, "lightgbm": {"depends": ["numpy", "scipy", "scikit-learn"], "file_name": "lightgbm-4.6.0-py3-none-pyodide_2025_0_wasm32.whl", "imports": ["lightgbm"], "install_dir": "site", "name": "lightgbm", "package_type": "package", "sha256": "75bb0670f69b252c19b3a546433c1fdd6ddb0a6234e2575b35bc655dec0f620b", "unvendored_tests": false, "version": "4.6.0"}, "logbook": {"depends": ["ssl"], "file_name": "logbook-1.8.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["logbook"], "install_dir": "site", "name": "logbook", "package_type": "package", "sha256": "2cb7f2954a26095d7217079692a39ec2754565945ab75e1ce0adfd5dbc1c37d2", "unvendored_tests": false, "version": "1.8.0"}, "lxml": {"depends": [], "file_name": "lxml-6.0.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["lxml"], "install_dir": "site", "name": "lxml", "package_type": "package", "sha256": "99b959a55eaeb41a2997fa022859892880c2b708af01ff336c34c7b125c80916", "unvendored_tests": false, "version": "6.0.2"}, "lz4": {"depends": [], "file_name": "lz4-4.4.5-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["lz4"], "install_dir": "site", "name": "lz4", "package_type": "package", "sha256": "2f3d8c272bc379a0722201073ba9912770d504bc6a2a576047b0b2d57bf69574", "unvendored_tests": false, "version": "4.4.5"}, "lzma": {"depends": [], "file_name": "lzma-1.0.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["lzma", "_lzma"], "install_dir": "site", "name": "lzma", "package_type": "cpython_module", "sha256": "2489604bcd9446eb1a40be1fcd8a989d0985499a0cb350fc6593aa626b27a05e", "unvendored_tests": false, "version": "1.0.0"}, "markupsafe": {"depends": [], "file_name": "markupsafe-3.0.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["markupsafe"], "install_dir": "site", "name": "MarkupSafe", "package_type": "package", "sha256": "2b480f742c99c45c9e0f7402ae6d0fa531284a3aa34da4b8982c37809c9b4d07", "unvendored_tests": false, "version": "3.0.2"}, "matplotlib": {"depends": ["contourpy", "cycler", "fonttools", "kiwisolver", "numpy", "packaging", "pillow", "pyparsing", "python-dateutil", "pytz"], "file_name": "matplotlib-3.8.4-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pylab", "mpl_toolkits", "matplotlib"], "install_dir": "site", "name": "matplotlib", "package_type": "package", "sha256": "65f657efbb717a6aa7ccd10c0729a0e6993c1da757bd68601d97a2905362e8d4", "unvendored_tests": true, "version": "3.8.4"}, "matplotlib-inline": {"depends": ["traitlets"], "file_name": "matplotlib_inline-0.2.1-py3-none-any.whl", "imports": ["matplotlib-inline"], "install_dir": "site", "name": "matplotlib-inline", "package_type": "package", "sha256": "aaeaba20ce1cb410ea322be58363ea043ce72e303bbb21126e0ca2de26f4d22d", "unvendored_tests": false, "version": "0.2.1"}, "matplotlib-tests": {"depends": ["matplotlib"], "file_name": "matplotlib-tests.tar", "imports": [], "install_dir": "site", "name": "matplotlib-tests", "package_type": "package", "sha256": "e369fa872c6634fb47cdd8c7529eaea15525d1b23e3fcfd5b94feec42184f10b", "unvendored_tests": false, "version": "3.8.4"}, "memory-allocator": {"depends": [], "file_name": "memory_allocator-0.1.4-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["memory_allocator"], "install_dir": "site", "name": "memory-allocator", "package_type": "package", "sha256": "04a7a7cec09e3410f9934f37de2e944adfc2af0a0d96ce4c87bcae42dcc225e8", "unvendored_tests": false, "version": "0.1.4"}, "micropip": {"depends": [], "file_name": "micropip-0.11.0-py3-none-any.whl", "imports": ["micropip"], "install_dir": "site", "name": "micropip", "package_type": "package", "sha256": "0ae422514e45d068b8159eb8ec3b2c3f4cbce2e664e26cb81735dbe4af2377a1", "unvendored_tests": false, "version": "0.11.0"}, "ml-dtypes": {"depends": ["numpy"], "file_name": "ml_dtypes-0.5.4-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["ml_dtypes"], "install_dir": "site", "name": "ml_dtypes", "package_type": "package", "sha256": "6f700837e66c1ba13199ebab7d8096472db10571e5b34a11343a2d636bcb696d", "unvendored_tests": false, "version": "0.5.4"}, "mmh3": {"depends": [], "file_name": "mmh3-5.1.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["mmh3"], "install_dir": "site", "name": "mmh3", "package_type": "package", "sha256": "9a2a114fee30ef9a762648472b81a3a982e491c1836b616c9bfbaeb5f47ec638", "unvendored_tests": false, "version": "5.1.0"}, "more-itertools": {"depends": [], "file_name": "more_itertools-10.6.0-py3-none-any.whl", "imports": ["more_itertools"], "install_dir": "site", "name": "more-itertools", "package_type": "package", "sha256": "14de567c4b1ec60c7a0a066ddfd72088f0b0da1f828f6d1f6d79015f3b9ad87a", "unvendored_tests": false, "version": "10.6.0"}, "mpmath": {"depends": [], "file_name": "mpmath-1.3.0-py3-none-any.whl", "imports": ["mpmath"], "install_dir": "site", "name": "mpmath", "package_type": "package", "sha256": "75c33edefd4b92311926ddbfa7aac6731a61b3b5ac0562bc8f8d420e23328d46", "unvendored_tests": true, "version": "1.3.0"}, "mpmath-tests": {"depends": ["mpmath"], "file_name": "mpmath-tests.tar", "imports": [], "install_dir": "site", "name": "mpmath-tests", "package_type": "package", "sha256": "d8e5d23684f5f4b95da9804737329f431550a8f9c4da4691b25b5846b57726f9", "unvendored_tests": false, "version": "1.3.0"}, "msgpack": {"depends": [], "file_name": "msgpack-1.1.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["msgpack"], "install_dir": "site", "name": "msgpack", "package_type": "package", "sha256": "802f05c8e529672806576596d6c37f49a58656d316c32ca1c1f96f6bb70b00a3", "unvendored_tests": false, "version": "1.1.2"}, "msgspec": {"depends": [], "file_name": "msgspec-0.19.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["msgspec"], "install_dir": "site", "name": "msgspec", "package_type": "package", "sha256": "d7fffe4d004646d47c875dd3b5489d25c14591ee02594bf9e69a5186499e421a", "unvendored_tests": false, "version": "0.19.0"}, "msprime": {"depends": ["numpy", "newick", "tskit", "demes", "rpds-py"], "file_name": "msprime-1.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["msprime"], "install_dir": "site", "name": "msprime", "package_type": "package", "sha256": "6cc9d1702506a0ec23c0edf602c3f516c9f7c5c2056859cef8423d65024363e9", "unvendored_tests": false, "version": "1.3.3"}, "multidict": {"depends": [], "file_name": "multidict-6.7.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["multidict"], "install_dir": "site", "name": "multidict", "package_type": "package", "sha256": "c7db3ee26fddee527406fef580d21aadb79adde44b61bc14ddac4977d31ea393", "unvendored_tests": false, "version": "6.7.0"}, "munch": {"depends": ["setuptools", "six"], "file_name": "munch-4.0.0-py2.py3-none-any.whl", "imports": ["munch"], "install_dir": "site", "name": "munch", "package_type": "package", "sha256": "a52d9ba576b9e0ce29b711c4451bfd7040a8e5d33f41819c98b03ae555e5839f", "unvendored_tests": false, "version": "4.0.0"}, "mypy": {"depends": [], "file_name": "mypy-1.15.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["mypyc", "mypy"], "install_dir": "site", "name": "mypy", "package_type": "package", "sha256": "4fd93f836f74be201f5c783d4d54b8957cfe6ac422cbcdb8b35cdb6d60f096a4", "unvendored_tests": true, "version": "1.15.0"}, "mypy-tests": {"depends": ["mypy"], "file_name": "mypy-tests.tar", "imports": [], "install_dir": "site", "name": "mypy-tests", "package_type": "package", "sha256": "5de2ddc2a3b5b64aaf92d76c0222121793cf886526a23c881561d9dbc5ff18b1", "unvendored_tests": false, "version": "1.15.0"}, "narwhals": {"depends": [], "file_name": "narwhals-2.15.0-py3-none-any.whl", "imports": ["narwhals"], "install_dir": "site", "name": "narwhals", "package_type": "package", "sha256": "bef7de68cf772cbac41808a772e12e68468e4736d7d03ca6103d5833361fac8d", "unvendored_tests": false, "version": "2.15.0"}, "ndindex": {"depends": [], "file_name": "ndindex-1.9.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["ndindex"], "install_dir": "site", "name": "ndindex", "package_type": "package", "sha256": "35d5fd03c16827a337006eb391cae62250360e60f815d104ce6f44392d3bb508", "unvendored_tests": true, "version": "1.9.2"}, "ndindex-tests": {"depends": ["ndindex"], "file_name": "ndindex-tests.tar", "imports": [], "install_dir": "site", "name": "ndindex-tests", "package_type": "package", "sha256": "d549d918c71f2491dae952f15f26c5770dbe6e35598a31effc8c7faa2f67e6c7", "unvendored_tests": false, "version": "1.9.2"}, "netcdf4": {"depends": ["numpy", "packaging", "h5py", "cftime", "certifi", "libhdf5"], "file_name": "netcdf4-1.7.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["netCDF4"], "install_dir": "site", "name": "netcdf4", "package_type": "package", "sha256": "dc1a17b676477265f95bf219a056dd44faddce49efa23c53e631d33e1db684a7", "unvendored_tests": false, "version": "1.7.2"}, "networkx": {"depends": ["decorator", "setuptools", "matplotlib", "numpy"], "file_name": "networkx-3.4.2-py3-none-any.whl", "imports": ["networkx"], "install_dir": "site", "name": "networkx", "package_type": "package", "sha256": "a29f3036b00fa0fe1562a31feac086848f55f3c0a36e9bf76e89201be939e3ac", "unvendored_tests": true, "version": "3.4.2"}, "networkx-tests": {"depends": ["networkx"], "file_name": "networkx-tests.tar", "imports": [], "install_dir": "site", "name": "networkx-tests", "package_type": "package", "sha256": "fb9faecf96ece9717bb9292edfd3b574c71a22c7426dc0754118ba669db0a3e2", "unvendored_tests": false, "version": "3.4.2"}, "newick": {"depends": [], "file_name": "newick-1.9.0-py2.py3-none-any.whl", "imports": ["newick"], "install_dir": "site", "name": "newick", "package_type": "package", "sha256": "ab63c8d58dfb570b30db2f89eeffb08078472be0cf879ff204ba3bdd33842c46", "unvendored_tests": false, "version": "1.9.0"}, "nh3": {"depends": [], "file_name": "nh3-0.2.21-cp38-abi3-pyodide_2025_0_wasm32.whl", "imports": ["nh3"], "install_dir": "site", "name": "nh3", "package_type": "package", "sha256": "db3a9a2828e109400ce361c8e9f2deeb8f49b41d870cae19377a9c5ed1a19d88", "unvendored_tests": false, "version": "0.2.21"}, "nlopt": {"depends": ["numpy"], "file_name": "nlopt-2.9.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["nlopt"], "install_dir": "site", "name": "nlopt", "package_type": "package", "sha256": "f8bf68dc26a2a97975e2d93fde03f97e808d7c90f131e0b1bfd0d8ffec2fa4e7", "unvendored_tests": false, "version": "2.9.1"}, "nltk": {"depends": ["regex", "sqlite3"], "file_name": "nltk-3.9.1-py3-none-any.whl", "imports": ["nltk"], "install_dir": "site", "name": "nltk", "package_type": "package", "sha256": "17ed6948bd75a0cba27a7a99f08c9f348dbb376ae069022e8c3cec622904102a", "unvendored_tests": true, "version": "3.9.1"}, "nltk-tests": {"depends": ["nltk"], "file_name": "nltk-tests.tar", "imports": [], "install_dir": "site", "name": "nltk-tests", "package_type": "package", "sha256": "2e22290acde6cbceef7a0a6ed3728b627559ee768799fbb334b5831d8489cfc6", "unvendored_tests": false, "version": "3.9.1"}, "numcodecs": {"depends": ["numpy", "msgpack"], "file_name": "numcodecs-0.13.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["numcodecs"], "install_dir": "site", "name": "numcodecs", "package_type": "package", "sha256": "da29b4c22dad035a96f0edb9a4f49d92eb3d760112865947ac791e98bc7ddb82", "unvendored_tests": true, "version": "0.13.1"}, "numcodecs-tests": {"depends": ["numcodecs"], "file_name": "numcodecs-tests.tar", "imports": [], "install_dir": "site", "name": "numcodecs-tests", "package_type": "package", "sha256": "dedcd6ca0cd61b5bb0df95673ddbc91710623f83be7c918c7910b7c9959d01cd", "unvendored_tests": false, "version": "0.13.1"}, "numpy": {"depends": [], "file_name": "numpy-2.2.5-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["numpy"], "install_dir": "site", "name": "numpy", "package_type": "package", "sha256": "6eaab6a7bb658d71ebe702911a3deab715323642462eb41b65565ca6a7cc23f1", "unvendored_tests": false, "version": "2.2.5"}, "numpy-tests": {"depends": [], "file_name": "numpy_tests-2.2.5-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["numpy-tests"], "install_dir": "site", "name": "numpy-tests", "package_type": "package", "sha256": "9162518247787fb647890f2a4bc4af7b6b5c720aab43c9f8c20c5fad3b9fcc36", "unvendored_tests": false, "version": "2.2.5"}, "openai": {"depends": ["httpx", "pydantic", "typing-extensions", "distro", "anyio", "jiter"], "file_name": "openai-1.68.2-py3-none-any.whl", "imports": ["openai"], "install_dir": "site", "name": "openai", "package_type": "package", "sha256": "55485cde95b81742b2e3ae57f6a2f02dc51696e6fba0989299a6eabc7003c8da", "unvendored_tests": false, "version": "1.68.2"}, "opencv-python": {"depends": ["numpy"], "file_name": "opencv_python-4.11.0.86-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["cv2"], "install_dir": "site", "name": "opencv-python", "package_type": "package", "sha256": "a8b116def8c74b3ccf389b856b3ccb5cec5a2efc295ec17a15ea9cda1f88aa1e", "unvendored_tests": false, "version": "4.11.0.86"}, "optlang": {"depends": ["sympy", "six", "swiglpk"], "file_name": "optlang-1.8.3-py2.py3-none-any.whl", "imports": ["optlang"], "install_dir": "site", "name": "optlang", "package_type": "package", "sha256": "0efd4f2474919e5834f707540db8e0ba4cae9d7aa9a3bd6bb778092c1ad423f2", "unvendored_tests": true, "version": "1.8.3"}, "optlang-tests": {"depends": ["optlang"], "file_name": "optlang-tests.tar", "imports": [], "install_dir": "site", "name": "optlang-tests", "package_type": "package", "sha256": "0dae9b248d5c81bd590ee3ffad6d8b6d021b39cbbac7b5cb74541e1bebda4391", "unvendored_tests": false, "version": "1.8.3"}, "orjson": {"depends": [], "file_name": "orjson-3.10.16-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["orjson"], "install_dir": "site", "name": "orjson", "package_type": "package", "sha256": "4b815ae28eef5332e898e220ec3f7de4d0cb5067aa895db589bb05989bb2608b", "unvendored_tests": false, "version": "3.10.16"}, "packaging": {"depends": [], "file_name": "packaging-24.2-py3-none-any.whl", "imports": ["packaging"], "install_dir": "site", "name": "packaging", "package_type": "package", "sha256": "c18cde5592cc3d1823e9cc3a9a4fb436b02c15e3f8d7f5f69962f77b1b109da1", "unvendored_tests": false, "version": "24.2"}, "pandas": {"depends": ["numpy", "python-dateutil", "pytz"], "file_name": "pandas-2.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pandas"], "install_dir": "site", "name": "pandas", "package_type": "package", "sha256": "5b1c0acfc8555be16057e8609e9eb7f279037c2469032bcc23e2a691380a50ae", "unvendored_tests": true, "version": "2.3.3"}, "pandas-tests": {"depends": ["pandas"], "file_name": "pandas-tests.tar", "imports": [], "install_dir": "site", "name": "pandas-tests", "package_type": "package", "sha256": "d5f994d07ff84875b87f135ff944fc0e970dd7e599b315c48642afeeba7e6731", "unvendored_tests": false, "version": "2.3.3"}, "parso": {"depends": [], "file_name": "parso-0.8.4-py2.py3-none-any.whl", "imports": ["parso"], "install_dir": "site", "name": "parso", "package_type": "package", "sha256": "3a5faf5729dd290ffc178674515912f0b79fec5ac02d261699daddfbeb847d3a", "unvendored_tests": false, "version": "0.8.4"}, "patsy": {"depends": ["numpy", "six"], "file_name": "patsy-1.0.1-py2.py3-none-any.whl", "imports": ["patsy"], "install_dir": "site", "name": "patsy", "package_type": "package", "sha256": "34d2156b3db04a1c565dad7072d3cff22e02c22b72a531e1d3ee3a9442e7f4e7", "unvendored_tests": true, "version": "1.0.1"}, "patsy-tests": {"depends": ["patsy"], "file_name": "patsy-tests.tar", "imports": [], "install_dir": "site", "name": "patsy-tests", "package_type": "package", "sha256": "b31f9b8a7d2212239c2a6b52547bc57af570586e785399e7de048c7f754a9a23", "unvendored_tests": false, "version": "1.0.1"}, "pcodec": {"depends": ["numpy"], "file_name": "pcodec-0.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pcodec"], "install_dir": "site", "name": "pcodec", "package_type": "package", "sha256": "a0e34ad928aacb5eec9204573725835efa1191c9995bb1b690e6d15b0100edf4", "unvendored_tests": false, "version": "0.3.3"}, "peewee": {"depends": ["sqlite3", "cffi"], "file_name": "peewee-3.17.9-py3-none-any.whl", "imports": ["peewee"], "install_dir": "site", "name": "peewee", "package_type": "package", "sha256": "540439a57875866a9880818f2ed5982d67220c11b94e154b18da736262ad49a9", "unvendored_tests": true, "version": "3.17.9"}, "peewee-tests": {"depends": ["peewee"], "file_name": "peewee-tests.tar", "imports": [], "install_dir": "site", "name": "peewee-tests", "package_type": "package", "sha256": "eded3f39bec30ef6a171068b23429c7967fdeacf36fcf758aaed8030068ed920", "unvendored_tests": false, "version": "3.17.9"}, "pi-heif": {"depends": ["cffi", "pillow", "libheif"], "file_name": "pi_heif-0.21.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pi_heif"], "install_dir": "site", "name": "pi-heif", "package_type": "package", "sha256": "6929ba48c15bbb914c2b52c76d7d8e6d909114dbef49fad7dc3fffa8def2549a", "unvendored_tests": false, "version": "0.21.0"}, "pillow": {"depends": [], "file_name": "pillow-11.3.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["PIL"], "install_dir": "site", "name": "Pillow", "package_type": "package", "sha256": "7e1168616481f685f277d7fad1d197f3a625540542a2cd292cdc8958ab083d6e", "unvendored_tests": false, "version": "11.3.0"}, "pillow-heif": {"depends": ["cffi", "pillow", "libheif"], "file_name": "pillow_heif-1.1.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pillow_heif"], "install_dir": "site", "name": "pillow-heif", "package_type": "package", "sha256": "3304a87c7ca9371c43725f67e070a7a143493d9cbdbb4c5203b6641a2c223ad6", "unvendored_tests": false, "version": "1.1.1"}, "pkgconfig": {"depends": [], "file_name": "pkgconfig-1.5.5-py3-none-any.whl", "imports": ["pkgconfig"], "install_dir": "site", "name": "pkgconfig", "package_type": "package", "sha256": "48f41d6739ec0941055e25efea42881b6970416fca506caf4b047eecde189e91", "unvendored_tests": false, "version": "1.5.5"}, "platformdirs": {"depends": [], "file_name": "platformdirs-4.3.6-py3-none-any.whl", "imports": ["platformdirs"], "install_dir": "site", "name": "platformdirs", "package_type": "package", "sha256": "909ec75bf144b5641ece53173061f820f8df7daf754cd4016d2c17c93018c118", "unvendored_tests": false, "version": "4.3.6"}, "pluggy": {"depends": [], "file_name": "pluggy-1.5.0-py3-none-any.whl", "imports": ["pluggy"], "install_dir": "site", "name": "pluggy", "package_type": "package", "sha256": "a5526e777aac76c926e884d8c5f8104a909e1243a2f3ecc6b9bb1b52fa46f7bd", "unvendored_tests": false, "version": "1.5.0"}, "ply": {"depends": [], "file_name": "ply-3.11-py2.py3-none-any.whl", "imports": ["ply"], "install_dir": "site", "name": "ply", "package_type": "package", "sha256": "00278ab037f4e6068af477e5fc3553f78e2c824aad9595160061058aa77a954f", "unvendored_tests": false, "version": "3.11"}, "pplpy": {"depends": ["gmpy2", "cysignals"], "file_name": "pplpy-0.8.10-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["ppl"], "install_dir": "site", "name": "pplpy", "package_type": "package", "sha256": "a400cd911dcaf95161588d31ff2eba7b7e73de92f9842b27b290918280a68216", "unvendored_tests": false, "version": "0.8.10"}, "primecountpy": {"depends": ["cysignals"], "file_name": "primecountpy-0.1.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["primecountpy"], "install_dir": "site", "name": "primecountpy", "package_type": "package", "sha256": "b1a52c5537f1e8162bf2cd2b8974aea86f2420890c2bd5b8fef2bfc3fc468f54", "unvendored_tests": false, "version": "0.1.1"}, "prompt-toolkit": {"depends": ["wcwidth"], "file_name": "prompt_toolkit-3.0.50-py3-none-any.whl", "imports": ["prompt_toolkit"], "install_dir": "site", "name": "prompt_toolkit", "package_type": "package", "sha256": "c850b8c5f71eeda05fc0237ec2ca75ce74d96baf398ec0f3af7b7b582b5eb4eb", "unvendored_tests": false, "version": "3.0.50"}, "propcache": {"depends": [], "file_name": "propcache-0.3.0-py3-none-any.whl", "imports": ["propcache"], "install_dir": "site", "name": "propcache", "package_type": "package", "sha256": "b6676a4e95b3e2e43515b4606c48c1f6f907c7e552caaea17140948c94817f1c", "unvendored_tests": false, "version": "0.3.0"}, "protobuf": {"depends": [], "file_name": "protobuf-6.31.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["google"], "install_dir": "site", "name": "protobuf", "package_type": "package", "sha256": "c37921bc1631dfac55b654563a45df630eb963c720e1092ffe6cd8a388f9ae5b", "unvendored_tests": false, "version": "6.31.1"}, "pure-eval": {"depends": [], "file_name": "pure_eval-0.2.3-py3-none-any.whl", "imports": ["pure_eval"], "install_dir": "site", "name": "pure-eval", "package_type": "package", "sha256": "4e68524914448c8b2d74da68820e3270789745dab658c25cf1e011203e51ee58", "unvendored_tests": false, "version": "0.2.3"}, "py": {"depends": [], "file_name": "py-1.11.0-py2.py3-none-any.whl", "imports": ["py"], "install_dir": "site", "name": "py", "package_type": "package", "sha256": "425c7054bd6b8ee8efb556b04c88889bf64e0e4a5a7c210b14adbffc26fc0783", "unvendored_tests": false, "version": "1.11.0"}, "pyarrow": {"depends": ["numpy", "pandas", "pyodide-unix-timezones"], "file_name": "pyarrow-22.0.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pyarrow"], "install_dir": "site", "name": "pyarrow", "package_type": "package", "sha256": "b5c6b7b7aa72627071f414bc19ff762012e1052ee0634a30cd7f2c57dd6d84ba", "unvendored_tests": false, "version": "22.0.0"}, "pycdfpp": {"depends": ["numpy", "pyyaml"], "file_name": "pycdfpp-0.8.5-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pycdfpp"], "install_dir": "site", "name": "pycdfpp", "package_type": "package", "sha256": "07ab0a2dd561fd99edf24b8a131fbac590ca7ba978345d33921917fcb341cfca", "unvendored_tests": false, "version": "0.8.5"}, "pyclipper": {"depends": [], "file_name": "pyclipper-1.3.0.post6-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pyclipper"], "install_dir": "site", "name": "pyclipper", "package_type": "package", "sha256": "7d7af1b80ac33383a87e21df5839bd9caf33500ea69cdaab50fa462e208b831b", "unvendored_tests": false, "version": "1.3.0.post6"}, "pycparser": {"depends": [], "file_name": "pycparser-2.22-py3-none-any.whl", "imports": ["pycparser"], "install_dir": "site", "name": "pycparser", "package_type": "package", "sha256": "778a41679914eee8499ce3d37a8d15d808d8972e70aa02eef13ac59649559aaa", "unvendored_tests": false, "version": "2.22"}, "pycryptodome": {"depends": [], "file_name": "pycryptodome-3.21.0-cp36-abi3-pyodide_2025_0_wasm32.whl", "imports": ["Crypto"], "install_dir": "site", "name": "pycryptodome", "package_type": "package", "sha256": "2d3bdd009cf49ec43e09ac3217b9fffd128a7d32dd3d2d112602b2d34e40174a", "unvendored_tests": true, "version": "3.21.0"}, "pycryptodome-tests": {"depends": ["pycryptodome"], "file_name": "pycryptodome-tests.tar", "imports": [], "install_dir": "site", "name": "pycryptodome-tests", "package_type": "package", "sha256": "61f21439f6956bbe2e339e6d4b437021b9250da64e04ba7ebaee0372fd534f94", "unvendored_tests": false, "version": "3.21.0"}, "pydantic": {"depends": ["typing-extensions", "pydantic_core", "annotated-types", "typing-inspection"], "file_name": "pydantic-2.12.5-py3-none-any.whl", "imports": ["pydantic"], "install_dir": "site", "name": "pydantic", "package_type": "package", "sha256": "a56b56d0a0942fbd5cf24a9c9195eb5bdfeceea17ddb3e1cd174db43be4e88dc", "unvendored_tests": false, "version": "2.12.5"}, "pydantic-core": {"depends": ["typing-extensions"], "file_name": "pydantic_core-2.41.5-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pydantic_core"], "install_dir": "site", "name": "pydantic_core", "package_type": "package", "sha256": "dd259177c9159a866334e2ac040aca973b8205cc884b3297cb5b2dc6bef8d629", "unvendored_tests": false, "version": "2.41.5"}, "pydecimal": {"depends": [], "file_name": "pydecimal-1.0.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["_pydecimal"], "install_dir": "site", "name": "pydecimal", "package_type": "cpython_module", "sha256": "de2ad05e281819096c73008eb8816b1ad5e7bc64a5539eabf2b131927a0e483a", "unvendored_tests": false, "version": "1.0.0"}, "pydoc-data": {"depends": [], "file_name": "pydoc_data-1.0.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pydoc_data"], "install_dir": "site", "name": "pydoc_data", "package_type": "cpython_module", "sha256": "d288a116e5592b16788b20dde1d75351129bbeeace4cf4c50b798df7fe535ef8", "unvendored_tests": false, "version": "1.0.0"}, "pyerfa": {"depends": ["numpy"], "file_name": "pyerfa-2.0.1.5-cp39-abi3-pyodide_2025_0_wasm32.whl", "imports": ["erfa"], "install_dir": "site", "name": "pyerfa", "package_type": "package", "sha256": "063e4a534e3ef00014683e8e5d896a3ebeb273d3a5cdd9f7a8c2ea6c30fca7c3", "unvendored_tests": true, "version": "2.0.1.5"}, "pyerfa-tests": {"depends": ["pyerfa"], "file_name": "pyerfa-tests.tar", "imports": [], "install_dir": "site", "name": "pyerfa-tests", "package_type": "package", "sha256": "8e9388e6240dadbb3493c9e238ae856413a4d0f79bb0747a4e2007ec0e805992", "unvendored_tests": false, "version": "2.0.1.5"}, "pygame-ce": {"depends": [], "file_name": "pygame_ce-2.5.6.dev2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pygame"], "install_dir": "site", "name": "pygame-ce", "package_type": "package", "sha256": "d7c52caf092288b6f813d8cf4c07edd98b47cc67385bc377147a8e5e12310872", "unvendored_tests": false, "version": "2.5.6.dev2"}, "pygments": {"depends": [], "file_name": "pygments-2.19.1-py3-none-any.whl", "imports": ["pygments"], "install_dir": "site", "name": "Pygments", "package_type": "package", "sha256": "1557c19a71c6c60b814ba3a921583ab97a15722fb21ba3ab73f2d6f477b49213", "unvendored_tests": false, "version": "2.19.1"}, "pyheif": {"depends": ["cffi"], "file_name": "pyheif-0.8.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pyheif"], "install_dir": "site", "name": "pyheif", "package_type": "package", "sha256": "a90413a3bcebf7c73a4a5a1317c6d8ca1b5e553936d2a15e04280f4303ea4d2c", "unvendored_tests": false, "version": "0.8.0"}, "pyiceberg": {"depends": ["click", "cachetools", "fsspec", "mmh3", "pydantic", "pyparsing", "requests", "rich", "sortedcontainers", "sqlalchemy", "strictyaml"], "file_name": "pyiceberg-0.10.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pyiceberg"], "install_dir": "site", "name": "pyiceberg", "package_type": "package", "sha256": "5f14f73c3cb98e1883931eea53e5de57609ed668f85382eb0b50b4a26aadbfdf", "unvendored_tests": false, "version": "0.10.0"}, "pyinstrument": {"depends": [], "file_name": "pyinstrument-5.0.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pyinstrument"], "install_dir": "site", "name": "pyinstrument", "package_type": "package", "sha256": "266504251136dd4c960e66c61f071d56abdbb363e3d91e68be26044356fd5185", "unvendored_tests": false, "version": "5.0.1"}, "pylimer-tools": {"depends": ["numpy"], "file_name": "pylimer_tools-0.3.13-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pylimer_tools"], "install_dir": "site", "name": "pylimer-tools", "package_type": "package", "sha256": "bf2eedb0103e6f958d7da4e666e25c396fc0ef588e3623d3a7c9fe07b5296216", "unvendored_tests": false, "version": "0.3.13"}, "pymupdf": {"depends": [], "file_name": "pymupdf-1.26.3-cp313-none-pyodide_2025_0_wasm32.whl", "imports": ["pymupdf", "fitz"], "install_dir": "site", "name": "PyMuPDF", "package_type": "package", "sha256": "271f7fb3c20b0ddd6f6618b01460ce207ce5370d5549c407837954f24a0ef8ec", "unvendored_tests": false, "version": "1.26.3"}, "pynacl": {"depends": ["cffi"], "file_name": "pynacl-1.5.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["nacl"], "install_dir": "site", "name": "pynacl", "package_type": "package", "sha256": "fb2518a6fee4b24c86b71f110387d3be534cdfce1682a8c3f2e91aa5f03ae7b7", "unvendored_tests": false, "version": "1.5.0"}, "pyodide-http": {"depends": [], "file_name": "pyodide_http-0.2.2-py3-none-any.whl", "imports": ["pyodide_http"], "install_dir": "site", "name": "pyodide-http", "package_type": "package", "sha256": "0cc0d07f3151e5deac22bbdbbf114642da983739ee394a3d31db5c7762c4c146", "unvendored_tests": false, "version": "0.2.2"}, "pyodide-unix-timezones": {"depends": [], "file_name": "pyodide_unix_timezones-1.0.0-py3-none-any.whl", "imports": ["unix_timezones"], "install_dir": "site", "name": "pyodide-unix-timezones", "package_type": "package", "sha256": "49469bacdf058914c325d8e49d1020c2803dd921d6c2d7a71a29ceea952fd438", "unvendored_tests": false, "version": "1.0.0"}, "pyparsing": {"depends": [], "file_name": "pyparsing-3.2.1-py3-none-any.whl", "imports": ["pyparsing"], "install_dir": "site", "name": "pyparsing", "package_type": "package", "sha256": "8f314b856e7e87cb3a426ce4db341308199157f6a757256e215e4d418e216d86", "unvendored_tests": false, "version": "3.2.1"}, "pyproj": {"depends": ["certifi"], "file_name": "pyproj-3.7.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pyproj"], "install_dir": "site", "name": "pyproj", "package_type": "package", "sha256": "fd7af196bfb8d88c095293fa241498982cb39d7af15a3fc133ae533185d6d710", "unvendored_tests": false, "version": "3.7.2"}, "pyrodigal": {"depends": [], "file_name": "pyrodigal-3.7.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pyrodigal"], "install_dir": "site", "name": "pyrodigal", "package_type": "package", "sha256": "4c8351cc959cb64962bcbdd0de60de928ea8ff9c973f969e461e908d43784467", "unvendored_tests": true, "version": "3.7.0"}, "pyrodigal-tests": {"depends": ["pyrodigal"], "file_name": "pyrodigal-tests.tar", "imports": [], "install_dir": "site", "name": "pyrodigal-tests", "package_type": "package", "sha256": "38d1bac466a4a9a63a98d19470abe83c8c403285e2b5fa7d04f491d2746f3846", "unvendored_tests": false, "version": "3.7.0"}, "pyrsistent": {"depends": [], "file_name": "pyrsistent-0.20.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["_pyrsistent_version", "pyrsistent"], "install_dir": "site", "name": "pyrsistent", "package_type": "package", "sha256": "ea59641657ac5f69b04484e646eecdf3d09e4759163e2cdee876e18ae711ed4c", "unvendored_tests": false, "version": "0.20.0"}, "pysam": {"depends": [], "file_name": "pysam-0.23.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pysam"], "install_dir": "site", "name": "pysam", "package_type": "package", "sha256": "792be11ba2580824612c766f5ff973f21e1cd99a483d1d9fb749521cd2ceb214", "unvendored_tests": false, "version": "0.23.0"}, "pyshp": {"depends": [], "file_name": "pyshp-2.3.1-py2.py3-none-any.whl", "imports": ["shapefile"], "install_dir": "site", "name": "pyshp", "package_type": "package", "sha256": "36946c1f1fc24ddf6774182619192a3da96ec3bcb1245b62c7270b9c45099d31", "unvendored_tests": false, "version": "2.3.1"}, "pytaglib": {"depends": ["libtaglib"], "file_name": "pytaglib-3.0.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["taglib"], "install_dir": "site", "name": "pytaglib", "package_type": "package", "sha256": "cd1d71c16bf40edd342e7917060559451b57ddfd76317dadf3dc31e4e4c25098", "unvendored_tests": false, "version": "3.0.1"}, "pytest": {"depends": ["atomicwrites", "attrs", "more-itertools", "pluggy", "py", "setuptools", "six", "iniconfig", "exceptiongroup"], "file_name": "pytest-8.3.5-py3-none-any.whl", "imports": ["_pytest", "pytest"], "install_dir": "site", "name": "pytest", "package_type": "package", "sha256": "f648e340ac21fd1a19361d4083690f759533e3579a7d02645f31ca91c1b45d9b", "unvendored_tests": false, "version": "8.3.5"}, "pytest-asyncio": {"depends": ["pytest"], "file_name": "pytest_asyncio-0.25.3-py3-none-any.whl", "imports": ["pytest_asyncio"], "install_dir": "site", "name": "pytest-asyncio", "package_type": "package", "sha256": "12bb1ef200b7a8f6296f1c137a7639c588060c0afbeea4e236c827b75fd4b271", "unvendored_tests": false, "version": "0.25.3"}, "pytest-benchmark": {"depends": [], "file_name": "pytest_benchmark-4.0.0-py3-none-any.whl", "imports": ["pytest_benchmark"], "install_dir": "site", "name": "pytest-benchmark", "package_type": "package", "sha256": "6ddd836283cc63bb56de20e93e3f7326288cc9bc677f8f3f4b02fcad6216994f", "unvendored_tests": false, "version": "4.0.0"}, "pytest-httpx": {"depends": ["httpx", "pytest", "httpcore"], "file_name": "pytest_httpx-0.30.0-py3-none-any.whl", "imports": ["pytest_httpx"], "install_dir": "site", "name": "pytest_httpx", "package_type": "package", "sha256": "e4e50630f19692cb862c8e0a44fa4f806cb7cca86a57e65a1a4d05e4c0e9395f", "unvendored_tests": false, "version": "0.30.0"}, "python-calamine": {"depends": ["packaging"], "file_name": "python_calamine-0.5.3-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["python_calamine"], "install_dir": "site", "name": "python-calamine", "package_type": "package", "sha256": "5a1722bbac59c7a62250511267ac0709160145cb6b37af7352d6b1148d291b64", "unvendored_tests": false, "version": "0.5.3"}, "python-dateutil": {"depends": ["six"], "file_name": "python_dateutil-2.9.0.post0-py2.py3-none-any.whl", "imports": ["dateutil"], "install_dir": "site", "name": "python-dateutil", "package_type": "package", "sha256": "ddca13fc1046572701872b9517622b57f847c77eea4bf9fdc995256e6c82beaf", "unvendored_tests": false, "version": "2.9.0.post0"}, "python-flint": {"depends": [], "file_name": "python_flint-0.8.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["flint"], "install_dir": "site", "name": "python-flint", "package_type": "package", "sha256": "2615968edf0985813ff377a368d7f58a1be7d8ade2327c8914f4c1a193ce7bcf", "unvendored_tests": false, "version": "0.8.0"}, "python-magic": {"depends": ["libmagic"], "file_name": "python_magic-0.4.27-py2.py3-none-any.whl", "imports": ["magic"], "install_dir": "site", "name": "python-magic", "package_type": "package", "sha256": "40caa90926fe5249bc6d6ccf1c8d026d2366d384395650756eeb3223cffbcf82", "unvendored_tests": false, "version": "0.4.27"}, "python-sat": {"depends": ["six"], "file_name": "python_sat-1.8.dev26-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pysat"], "install_dir": "site", "name": "python-sat", "package_type": "package", "sha256": "6ba3b64402341ec89825f760f9f462c21bd1a69b38b052b6a1c0262f924df122", "unvendored_tests": false, "version": "1.8.dev26"}, "python-solvespace": {"depends": [], "file_name": "python_solvespace-3.0.8-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["python_solvespace"], "install_dir": "site", "name": "python-solvespace", "package_type": "package", "sha256": "a6d0c80bdc9aff71ef7a36fb88a15a72fc04ab589ff12eb997b2ad56738da21c", "unvendored_tests": false, "version": "3.0.8"}, "pytz": {"depends": [], "file_name": "pytz-2025.2-py2.py3-none-any.whl", "imports": ["pytz"], "install_dir": "site", "name": "pytz", "package_type": "package", "sha256": "5a9c9286f6c03a4d16ee4ced15d511097568e1e41329d3499b597ecd7f1d317e", "unvendored_tests": false, "version": "2025.2"}, "pywavelets": {"depends": ["numpy"], "file_name": "pywavelets-1.8.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pywt"], "install_dir": "site", "name": "pywavelets", "package_type": "package", "sha256": "4e3df040f2927cd2ead32678cf40f323424519f084b9d5c4cf3ea1851e7bd2ba", "unvendored_tests": true, "version": "1.8.0"}, "pywavelets-tests": {"depends": ["pywavelets"], "file_name": "pywavelets-tests.tar", "imports": [], "install_dir": "site", "name": "pywavelets-tests", "package_type": "package", "sha256": "ac735e687c282003e049a48ba16b6ffb48a23ac3c45f04860f8d4eeecd7ecaa9", "unvendored_tests": false, "version": "1.8.0"}, "pyxel": {"depends": [], "file_name": "pyxel-1.9.10-cp37-abi3-pyodide_2025_0_wasm32.whl", "imports": ["pyxel"], "install_dir": "site", "name": "pyxel", "package_type": "package", "sha256": "a10c723c40f0f893f3da75fb230134af15150b818097e11d438d548d5ea2fd44", "unvendored_tests": false, "version": "1.9.10"}, "pyxirr": {"depends": [], "file_name": "pyxirr-0.10.6-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["pyxirr"], "install_dir": "site", "name": "pyxirr", "package_type": "package", "sha256": "0948e9ce6b751811d4b410f29ace3292bdf0db066acd9277645e9752ebca7935", "unvendored_tests": false, "version": "0.10.6"}, "pyyaml": {"depends": [], "file_name": "pyyaml-6.0.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["_yaml", "yaml"], "install_dir": "site", "name": "pyyaml", "package_type": "package", "sha256": "d0b3d100f3ebe90c0ea62f04d9ac2d3c38ca0023be5d240ef92c77b94c9495f8", "unvendored_tests": false, "version": "6.0.2"}, "rasterio": {"depends": ["numpy", "affine", "attrs", "certifi", "click", "cligj"], "file_name": "rasterio-1.4.3-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["rasterio"], "install_dir": "site", "name": "rasterio", "package_type": "package", "sha256": "3fa33927cc7a1ea9187aecebace9a82d0e91641e80886687d610fcdef563e310", "unvendored_tests": false, "version": "1.4.3"}, "rateslib": {"depends": ["numpy", "pandas", "matplotlib"], "file_name": "rateslib-2.5.1-cp310-abi3-pyodide_2025_0_wasm32.whl", "imports": ["rateslib"], "install_dir": "site", "name": "rateslib", "package_type": "package", "sha256": "bddc87fee2fecfcf1719d2183110d72c7523c1bd021780a82a54c44e6a1bfe87", "unvendored_tests": false, "version": "2.5.1"}, "rebound": {"depends": ["numpy"], "file_name": "rebound-4.4.7-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["rebound"], "install_dir": "site", "name": "rebound", "package_type": "package", "sha256": "6baac26fcc18f1f9fc3efc10282196e2413135392902e48d1edbaff0c464559c", "unvendored_tests": false, "version": "4.4.7"}, "reboundx": {"depends": ["rebound", "numpy"], "file_name": "reboundx-4.4.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["reboundx"], "install_dir": "site", "name": "reboundx", "package_type": "package", "sha256": "8e8542dbc7bc630a469d890601af41f923e8b4ab8b804368ee20eef32cad9b8c", "unvendored_tests": false, "version": "4.4.1"}, "referencing": {"depends": ["attrs", "rpds-py", "typing-extensions"], "file_name": "referencing-0.36.2-py3-none-any.whl", "imports": ["referencing"], "install_dir": "site", "name": "referencing", "package_type": "package", "sha256": "9fd72557776e4d4e1eb6f0d906c41c0dd71a8e6bce8d791e93a1ea6aba0602fc", "unvendored_tests": true, "version": "0.36.2"}, "referencing-tests": {"depends": ["referencing"], "file_name": "referencing-tests.tar", "imports": [], "install_dir": "site", "name": "referencing-tests", "package_type": "package", "sha256": "f34c6e81fb7dea8f9f731c965c6d2888aeb39c0c4a4ad59817966aba389b0887", "unvendored_tests": false, "version": "0.36.2"}, "regex": {"depends": [], "file_name": "regex-2024.11.6-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["regex"], "install_dir": "site", "name": "regex", "package_type": "package", "sha256": "0400d660e4f9f6359b7a98077bdc46b34b705b38f0f6c96a3053c8b5703caeed", "unvendored_tests": true, "version": "2024.11.6"}, "regex-tests": {"depends": ["regex"], "file_name": "regex-tests.tar", "imports": [], "install_dir": "site", "name": "regex-tests", "package_type": "package", "sha256": "1974108c86e92577fceac91ed1ef782a070d9b8243012446e97b193f79df1166", "unvendored_tests": false, "version": "2024.11.6"}, "requests": {"depends": ["charset-normalizer", "idna", "urllib3", "certifi"], "file_name": "requests-2.32.4-py3-none-any.whl", "imports": ["requests"], "install_dir": "site", "name": "requests", "package_type": "package", "sha256": "1e5c14010785e00a8d8bbb1874fd9382b2de21d6b81cbe07588c49f7a39393ef", "unvendored_tests": false, "version": "2.32.4"}, "retrying": {"depends": ["six"], "file_name": "retrying-1.3.4-py3-none-any.whl", "imports": ["retrying"], "install_dir": "site", "name": "retrying", "package_type": "package", "sha256": "6dcfceefc2f1f66713031db3c49737e742e9f3fe2becbb9de2d67c94d6c0dbc8", "unvendored_tests": false, "version": "1.3.4"}, "rich": {"depends": [], "file_name": "rich-13.9.4-py3-none-any.whl", "imports": ["rich"], "install_dir": "site", "name": "rich", "package_type": "package", "sha256": "d996f3db62e16f85134b3c3f433ca1c9d30b16d9ae67ec5b4e190c21ed45becd", "unvendored_tests": false, "version": "13.9.4"}, "river": {"depends": ["numpy", "pandas", "scipy"], "file_name": "river-0.22.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["river"], "install_dir": "site", "name": "river", "package_type": "package", "sha256": "5cc5e34dbfe552936d05ce6b2c2895548d3e0a0ddc4f81c3411d565ee814ba1d", "unvendored_tests": true, "version": "0.22.0"}, "river-tests": {"depends": ["river"], "file_name": "river-tests.tar", "imports": [], "install_dir": "site", "name": "river-tests", "package_type": "package", "sha256": "5a8ed77f166bf3cc734357e7a46d62734b4a4f32ba1fff3b5bcd8b3b3be3d40e", "unvendored_tests": false, "version": "0.22.0"}, "robotraconteur": {"depends": ["numpy"], "file_name": "robotraconteur-1.2.7-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["RobotRaconteur"], "install_dir": "site", "name": "RobotRaconteur", "package_type": "package", "sha256": "c5db05398decbe001a3925aece63caebcc52f98ab9e01cc5da6dbe3c102f64a7", "unvendored_tests": false, "version": "1.2.7"}, "rpds-py": {"depends": [], "file_name": "rpds_py-0.30.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["rpds"], "install_dir": "site", "name": "rpds-py", "package_type": "package", "sha256": "8e7918c617cc077fcb0d110f9d9d6511466958f9c095810be1f72760a63bfc2f", "unvendored_tests": false, "version": "0.30.0"}, "ruamel-yaml": {"depends": [], "file_name": "ruamel.yaml-0.18.10-py3-none-any.whl", "imports": ["ruamel"], "install_dir": "site", "name": "ruamel.yaml", "package_type": "package", "sha256": "d998c5c7ebae7eec165a0611f587e4789a7d8b00e1440b569c0abf7613208bda", "unvendored_tests": false, "version": "0.18.10"}, "rustworkx": {"depends": [], "file_name": "rustworkx-0.17.1-cp39-abi3-pyodide_2025_0_wasm32.whl", "imports": ["rustworkx"], "install_dir": "site", "name": "rustworkx", "package_type": "package", "sha256": "78b2e4036cc324f834b556d1e68091dda66e7304adc924b484be76778cac71ac", "unvendored_tests": false, "version": "0.17.1"}, "scikit-image": {"depends": ["packaging", "numpy", "scipy", "networkx", "pillow", "imageio", "pywavelets", "lazy_loader"], "file_name": "scikit_image-0.25.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["skimage"], "install_dir": "site", "name": "scikit-image", "package_type": "package", "sha256": "351b08daac16153c6c9a4ae5c03ee57e622e426685f3aad27b7e3bd8731e5795", "unvendored_tests": true, "version": "0.25.2"}, "scikit-image-tests": {"depends": ["scikit-image"], "file_name": "scikit-image-tests.tar", "imports": [], "install_dir": "site", "name": "scikit-image-tests", "package_type": "package", "sha256": "faf95457c2f1eb47a7ff4027f0ba9fe0c93a4fa386797c956d9f432d6ad69aad", "unvendored_tests": false, "version": "0.25.2"}, "scikit-learn": {"depends": ["scipy", "joblib", "threadpoolctl"], "file_name": "scikit_learn-1.7.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["sklearn"], "install_dir": "site", "name": "scikit-learn", "package_type": "package", "sha256": "267a184f7d3c2cd236a17d729b0f62993c581337b40ee7f99f00e0598dfdb5c2", "unvendored_tests": true, "version": "1.7.0"}, "scikit-learn-tests": {"depends": ["scikit-learn"], "file_name": "scikit-learn-tests.tar", "imports": [], "install_dir": "site", "name": "scikit-learn-tests", "package_type": "package", "sha256": "fdc657b4da1d4d1001a1f4fe6bdcf89552fa3c13a29d66dc766e208cdec3f89f", "unvendored_tests": false, "version": "1.7.0"}, "scipy": {"depends": ["numpy", "libopenblas"], "file_name": "scipy-1.14.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["scipy"], "install_dir": "site", "name": "scipy", "package_type": "package", "sha256": "96fbc718e81cf54ac7df7d8a2c24e370fa3c45086e917c3d58752207d85d21af", "unvendored_tests": true, "version": "1.14.1"}, "scipy-tests": {"depends": ["scipy"], "file_name": "scipy-tests.tar", "imports": [], "install_dir": "site", "name": "scipy-tests", "package_type": "package", "sha256": "0a079ec3481ab936db3e1e243ed4c68e08b797e31e46b76e112f72ef9ae2966a", "unvendored_tests": false, "version": "1.14.1"}, "screed": {"depends": [], "file_name": "screed-1.1.3-py2.py3-none-any.whl", "imports": ["bigtests", "screed"], "install_dir": "site", "name": "screed", "package_type": "package", "sha256": "3d1988cc70a893999774f244a17bfebca33ea7ec5fc4b7297147d36d4b9accca", "unvendored_tests": true, "version": "1.1.3"}, "screed-tests": {"depends": ["screed"], "file_name": "screed-tests.tar", "imports": [], "install_dir": "site", "name": "screed-tests", "package_type": "package", "sha256": "328b604d4feb15aa7470eaa32743cdc83f4f9b7f290fff9e1a8d54535e650685", "unvendored_tests": false, "version": "1.1.3"}, "setuptools": {"depends": ["pyparsing"], "file_name": "setuptools-76.0.0-py3-none-any.whl", "imports": ["_distutils_hack", "pkg_resources", "setuptools"], "install_dir": "site", "name": "setuptools", "package_type": "package", "sha256": "0ffe3d7fd6b219b68fd0c67a450a44e3a19e2d2d9e751e4333430af27c6d89e5", "unvendored_tests": true, "version": "76.0.0"}, "setuptools-tests": {"depends": ["setuptools"], "file_name": "setuptools-tests.tar", "imports": [], "install_dir": "site", "name": "setuptools-tests", "package_type": "package", "sha256": "7ab7cdf90ac2479ccbb79c44ec7fd7d5bd3957fa3ba23835db8ee36236937d15", "unvendored_tests": false, "version": "76.0.0"}, "shapely": {"depends": ["numpy"], "file_name": "shapely-2.0.7-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["shapely"], "install_dir": "site", "name": "shapely", "package_type": "package", "sha256": "3c14600713a254d407c92bccd2d8c679b23296ac1aacb69556cf1d5352d71f6c", "unvendored_tests": true, "version": "2.0.7"}, "shapely-tests": {"depends": ["shapely"], "file_name": "shapely-tests.tar", "imports": [], "install_dir": "site", "name": "shapely-tests", "package_type": "package", "sha256": "afab739c87044873a38c6f97b82389c21f8f12e2f02689dab750e107aaf9a441", "unvendored_tests": false, "version": "2.0.7"}, "simplejson": {"depends": [], "file_name": "simplejson-3.20.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["simplejson"], "install_dir": "site", "name": "simplejson", "package_type": "package", "sha256": "8e3741f95687da2574ca9c48e088035b1d52ff00cfb2956e30672993ecb8aeb6", "unvendored_tests": true, "version": "3.20.1"}, "simplejson-tests": {"depends": ["simplejson"], "file_name": "simplejson-tests.tar", "imports": [], "install_dir": "site", "name": "simplejson-tests", "package_type": "package", "sha256": "ecc18b83ce5779a6f33699ecd1fa3b1c7f336a5aab7d4bb6983cfc945c442f57", "unvendored_tests": false, "version": "3.20.1"}, "sisl": {"depends": ["pyparsing", "numpy", "scipy", "tqdm", "xarray", "pandas", "matplotlib"], "file_name": "sisl-0.16.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["sisl_toolbox", "sisl"], "install_dir": "site", "name": "sisl", "package_type": "package", "sha256": "b284861007e8912e67ed650789e50bb9585a335b0cbe183ee26dfb9c80a3b2fa", "unvendored_tests": true, "version": "0.16.2"}, "sisl-tests": {"depends": ["sisl"], "file_name": "sisl-tests.tar", "imports": [], "install_dir": "site", "name": "sisl-tests", "package_type": "package", "sha256": "4d31452b286130d79c0a81848136ed10f503497275f9b6822d711fb0f04ced5e", "unvendored_tests": false, "version": "0.16.2"}, "six": {"depends": [], "file_name": "six-1.17.0-py2.py3-none-any.whl", "imports": ["six"], "install_dir": "site", "name": "six", "package_type": "package", "sha256": "1f715fc699e802b31e53290ead6c16a4d6a8da462a225d2e06097fce45ab70b9", "unvendored_tests": false, "version": "1.17.0"}, "smart-open": {"depends": ["wrapt"], "file_name": "smart_open-7.1.0-py3-none-any.whl", "imports": ["smart_open"], "install_dir": "site", "name": "smart-open", "package_type": "package", "sha256": "dc5beecb15b4857d05e4fab6382349e0545ed156df6cc255c3b785459ca77af3", "unvendored_tests": false, "version": "7.1.0"}, "sniffio": {"depends": [], "file_name": "sniffio-1.3.1-py3-none-any.whl", "imports": ["sniffio"], "install_dir": "site", "name": "sniffio", "package_type": "package", "sha256": "0077e1685d430cd50f6413af1ed209bb03c95da589ef4f1b8426d67c6b02cb4a", "unvendored_tests": true, "version": "1.3.1"}, "sniffio-tests": {"depends": ["sniffio"], "file_name": "sniffio-tests.tar", "imports": [], "install_dir": "site", "name": "sniffio-tests", "package_type": "package", "sha256": "240d53b95a77a72c309d4279c31f93a5be3ce0a15cb7c92a8f2ac1b9df346bfb", "unvendored_tests": false, "version": "1.3.1"}, "sortedcontainers": {"depends": [], "file_name": "sortedcontainers-2.4.0-py2.py3-none-any.whl", "imports": ["sortedcontainers"], "install_dir": "site", "name": "sortedcontainers", "package_type": "package", "sha256": "8f9018394f1e1c1c98c8744b94d224c990f5090747e2a4c42ac2ca13ae9435ac", "unvendored_tests": false, "version": "2.4.0"}, "soundfile": {"depends": ["cffi", "numpy"], "file_name": "soundfile-0.12.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["soundfile"], "install_dir": "site", "name": "soundfile", "package_type": "package", "sha256": "abe68fea5610c352dc5fb635f5f1af379f9a6c15bb7c0ede5dfe9c1313c65764", "unvendored_tests": false, "version": "0.12.1"}, "soupsieve": {"depends": [], "file_name": "soupsieve-2.6-py3-none-any.whl", "imports": ["soupsieve"], "install_dir": "site", "name": "soupsieve", "package_type": "package", "sha256": "7e7e36183777bcbc525ee458fa8c39853615b7a94d80c38b944e5824bdaf5a78", "unvendored_tests": false, "version": "2.6"}, "sourmash": {"depends": ["screed", "cffi", "deprecation", "cachetools", "numpy", "matplotlib", "scipy", "sqlite3", "bitstring"], "file_name": "sourmash-4.8.14-py3-none-pyodide_2025_0_wasm32.whl", "imports": ["sourmash"], "install_dir": "site", "name": "sourmash", "package_type": "package", "sha256": "72dab96fd65d0afa9137be9255f00804def5cdf2ce89fd0d04a01cc157cb91dc", "unvendored_tests": false, "version": "4.8.14"}, "soxr": {"depends": ["numpy"], "file_name": "soxr-0.5.0.post1-cp312-abi3-pyodide_2025_0_wasm32.whl", "imports": ["soxr"], "install_dir": "site", "name": "soxr", "package_type": "package", "sha256": "54ecac0c40457de53cf5683d47cddaa8aab607f14c5df7b64b8399d20a4b6470", "unvendored_tests": false, "version": "0.5.0.post1"}, "sparseqr": {"depends": ["pycparser", "cffi", "numpy", "scipy", "libsuitesparse"], "file_name": "sparseqr-1.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["sparseqr"], "install_dir": "site", "name": "sparseqr", "package_type": "package", "sha256": "6f89e5c0d9593244e7a08573f19173f370687135f983e2d7abc9ee7d52e1142e", "unvendored_tests": false, "version": "1.2"}, "sqlalchemy": {"depends": ["sqlite3", "typing-extensions"], "file_name": "sqlalchemy-2.0.39-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["sqlalchemy"], "install_dir": "site", "name": "sqlalchemy", "package_type": "package", "sha256": "165fe298a753acdaa860c8167ef39bf31ab590423d91f634d58181b2abcd85af", "unvendored_tests": true, "version": "2.0.39"}, "sqlalchemy-tests": {"depends": ["sqlalchemy"], "file_name": "sqlalchemy-tests.tar", "imports": [], "install_dir": "site", "name": "sqlalchemy-tests", "package_type": "package", "sha256": "31df12d9cc2a92e803a92320e1b27aa65cc56c8d4a59f66cf0fd70fe5a2be6c1", "unvendored_tests": false, "version": "2.0.39"}, "sqlite3": {"depends": [], "file_name": "sqlite3-1.0.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["sqlite3", "_sqlite3"], "install_dir": "site", "name": "sqlite3", "package_type": "cpython_module", "sha256": "aab7214b987a3803fca283a8221e4b9d3274abc05d0cf506ea1a2ae7e09e3bf0", "unvendored_tests": false, "version": "1.0.0"}, "ssl": {"depends": ["libopenssl"], "file_name": "ssl-1.0.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["ssl", "_ssl"], "install_dir": "site", "name": "ssl", "package_type": "cpython_module", "sha256": "23a3fe862983d6798a51a0a63ac55356891751084927a7bde979dc4d6d52e0b5", "unvendored_tests": false, "version": "1.0.0"}, "stack-data": {"depends": ["executing", "asttokens", "pure-eval"], "file_name": "stack_data-0.6.3-py3-none-any.whl", "imports": ["stack_data"], "install_dir": "site", "name": "stack-data", "package_type": "package", "sha256": "b31a4062c2fed35479587fad00b74a23e105acc51a42d68e76a9ab6ed134ac25", "unvendored_tests": false, "version": "0.6.3"}, "starlette": {"depends": [], "file_name": "starlette-0.47.2-py3-none-any.whl", "imports": ["starlette"], "install_dir": "site", "name": "starlette", "package_type": "package", "sha256": "8ae10ca3b4f3e2f58593bd18a8f58df0193aac10f1922dd6c8a0d4b7a95db470", "unvendored_tests": false, "version": "0.47.2"}, "statsmodels": {"depends": ["numpy", "scipy", "pandas", "patsy", "packaging"], "file_name": "statsmodels-0.14.4-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["statsmodels"], "install_dir": "site", "name": "statsmodels", "package_type": "package", "sha256": "0a6387e6e2b0774dc76abd05c3f9a17e0f45233574a9c9e5f0dbeaca3e5a1df6", "unvendored_tests": false, "version": "0.14.4"}, "strictyaml": {"depends": ["python-dateutil"], "file_name": "strictyaml-1.7.3-py3-none-any.whl", "imports": ["strictyaml"], "install_dir": "site", "name": "strictyaml", "package_type": "package", "sha256": "567ddc1f5cecbec407bd01e97e4fbc3a973e1fbf32fb80f83f25741184cbaa6a", "unvendored_tests": false, "version": "1.7.3"}, "svgwrite": {"depends": [], "file_name": "svgwrite-1.4.3-py3-none-any.whl", "imports": ["svgwrite"], "install_dir": "site", "name": "svgwrite", "package_type": "package", "sha256": "92cd1c63bb36ced6abb09edadcde53276cce95b9a8c65b2d7e5e45fb7a4cf79c", "unvendored_tests": false, "version": "1.4.3"}, "swiglpk": {"depends": [], "file_name": "swiglpk-5.0.12-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["swiglpk"], "install_dir": "site", "name": "swiglpk", "package_type": "package", "sha256": "3e4fef0f9ba61ecdea0f46ab70d191fc12537303a5526fbb1717c368d1bcca24", "unvendored_tests": false, "version": "5.0.12"}, "sympy": {"depends": ["mpmath"], "file_name": "sympy-1.13.3-py3-none-any.whl", "imports": ["isympy", "sympy"], "install_dir": "site", "name": "sympy", "package_type": "package", "sha256": "56d438f823c08b2a08231400dcf1f640374192d7b1df0f55c4171bd708227b5f", "unvendored_tests": true, "version": "1.13.3"}, "sympy-tests": {"depends": ["sympy"], "file_name": "sympy-tests.tar", "imports": [], "install_dir": "site", "name": "sympy-tests", "package_type": "package", "sha256": "4d596bf4fdfe9badeea05c0a6f2baa6d5a5f903b32988834d7654e4e88f9bc68", "unvendored_tests": false, "version": "1.13.3"}, "tblib": {"depends": [], "file_name": "tblib-3.0.0-py3-none-any.whl", "imports": ["tblib"], "install_dir": "site", "name": "tblib", "package_type": "package", "sha256": "1d575165bedd73188f1ba98acaadff02cc3b1631406373130596b00ba00013dd", "unvendored_tests": false, "version": "3.0.0"}, "termcolor": {"depends": [], "file_name": "termcolor-2.5.0-py3-none-any.whl", "imports": ["termcolor"], "install_dir": "site", "name": "termcolor", "package_type": "package", "sha256": "fd0dbfea276e782e04fcc39c1a2352ab49d59a0533edd4b9ef248d68d4b6a0c6", "unvendored_tests": false, "version": "2.5.0"}, "test": {"depends": [], "file_name": "test-1.0.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["test"], "install_dir": "site", "name": "test", "package_type": "cpython_module", "sha256": "a12dc1785efa8f2ec03fbc0388f76e066f2dfa78f1ffcce1d31167619a1c94c5", "unvendored_tests": false, "version": "1.0.0"}, "texttable": {"depends": [], "file_name": "texttable-1.7.0-py2.py3-none-any.whl", "imports": ["texttable"], "install_dir": "site", "name": "texttable", "package_type": "package", "sha256": "044ee958dd8ba0c7863f17af1d888f6296d69dc1248230becf8b016ca208fa31", "unvendored_tests": false, "version": "1.7.0"}, "texture2ddecoder": {"depends": [], "file_name": "texture2ddecoder-1.0.5-cp37-abi3-pyodide_2025_0_wasm32.whl", "imports": ["texture2ddecoder"], "install_dir": "site", "name": "texture2ddecoder", "package_type": "package", "sha256": "faf296ba14ffc078255809ecbc67592f40f8fff8d2a9bc0209e72da138d6ad88", "unvendored_tests": false, "version": "1.0.5"}, "threadpoolctl": {"depends": [], "file_name": "threadpoolctl-3.5.0-py3-none-any.whl", "imports": ["threadpoolctl"], "install_dir": "site", "name": "threadpoolctl", "package_type": "package", "sha256": "a6c097ecbc46c97610e6fdf44e270d6cdc07fa5291b24db0e3d2427ee15c3478", "unvendored_tests": false, "version": "3.5.0"}, "tiktoken": {"depends": ["regex", "requests"], "file_name": "tiktoken-0.9.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["tiktoken", "tiktoken_ext"], "install_dir": "site", "name": "tiktoken", "package_type": "package", "sha256": "5d634abc439080560224fdf27d5fd94a5c4c0b8b7c9084fa1fb4305bc68aed4d", "unvendored_tests": false, "version": "0.9.0"}, "tomli": {"depends": [], "file_name": "tomli-2.2.1-py3-none-any.whl", "imports": ["tomli"], "install_dir": "site", "name": "tomli", "package_type": "package", "sha256": "6c3495c050cb288e13416c75511cb81aed241f5ebd40e637bd7ab02ede8069d4", "unvendored_tests": false, "version": "2.2.1"}, "tomli-w": {"depends": [], "file_name": "tomli_w-1.2.0-py3-none-any.whl", "imports": ["tomli_w"], "install_dir": "site", "name": "tomli-w", "package_type": "package", "sha256": "c68058a9596e616e6bbc2b8e6540b66973975b224f8d741d0b9ab170ce2ed23b", "unvendored_tests": false, "version": "1.2.0"}, "toolz": {"depends": [], "file_name": "toolz-1.0.0-py3-none-any.whl", "imports": ["tlz", "toolz"], "install_dir": "site", "name": "toolz", "package_type": "package", "sha256": "967d0d799a872dd03bc3247fa2e2da1e6451a5237f0d68963cc03e644c348e3e", "unvendored_tests": true, "version": "1.0.0"}, "toolz-tests": {"depends": ["toolz"], "file_name": "toolz-tests.tar", "imports": [], "install_dir": "site", "name": "toolz-tests", "package_type": "package", "sha256": "ed4e7ee95cda60c212d3db55dc531a0ec46aa6786fca9f56b777551666f053f6", "unvendored_tests": false, "version": "1.0.0"}, "tqdm": {"depends": [], "file_name": "tqdm-4.67.1-py3-none-any.whl", "imports": ["tqdm"], "install_dir": "site", "name": "tqdm", "package_type": "package", "sha256": "006b436ee31e705b222d855b36a78b3760adfb31d0be1fc75da70c8f4f0834e7", "unvendored_tests": false, "version": "4.67.1"}, "traitlets": {"depends": [], "file_name": "traitlets-5.14.3-py3-none-any.whl", "imports": ["traitlets"], "install_dir": "site", "name": "traitlets", "package_type": "package", "sha256": "81d9fb14245aedf572b78b15c33480c67e7c4070f9cfd7732bb85d702a875629", "unvendored_tests": true, "version": "5.14.3"}, "traitlets-tests": {"depends": ["traitlets"], "file_name": "traitlets-tests.tar", "imports": [], "install_dir": "site", "name": "traitlets-tests", "package_type": "package", "sha256": "a3197b5e3dfc8db00b0529032cdbf4e627a43a8f93560366062b11e0d8117f0c", "unvendored_tests": false, "version": "5.14.3"}, "traits": {"depends": [], "file_name": "traits-7.0.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["traits"], "install_dir": "site", "name": "traits", "package_type": "package", "sha256": "018e5d5a728367b6b00d3b8ec75721de8dde7ff34cc6c1ba004e5b55bce26315", "unvendored_tests": true, "version": "7.0.2"}, "traits-tests": {"depends": ["traits"], "file_name": "traits-tests.tar", "imports": [], "install_dir": "site", "name": "traits-tests", "package_type": "package", "sha256": "c6df8d68fb079caa60b654338fdf43e2f5aadcd351e811a1c81616e7ac26c4e8", "unvendored_tests": false, "version": "7.0.2"}, "tree-sitter": {"depends": [], "file_name": "tree_sitter-0.23.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["tree_sitter"], "install_dir": "site", "name": "tree-sitter", "package_type": "package", "sha256": "bfc7f18af606c82dbc48ad4e027df691c0093cb147c6147535a6c2c625cb1f65", "unvendored_tests": false, "version": "0.23.2"}, "tree-sitter-go": {"depends": ["tree-sitter"], "file_name": "tree_sitter_go-0.23.3-cp39-abi3-pyodide_2025_0_wasm32.whl", "imports": ["tree_sitter_go"], "install_dir": "site", "name": "tree-sitter-go", "package_type": "package", "sha256": "efd2b3c3e2e91520d7f901c5848ec3be9c31f2ed30aa0ec93a6434e906b6ce6f", "unvendored_tests": false, "version": "0.23.3"}, "tree-sitter-java": {"depends": ["tree-sitter"], "file_name": "tree_sitter_java-0.23.4-cp39-abi3-pyodide_2025_0_wasm32.whl", "imports": ["tree_sitter_java"], "install_dir": "site", "name": "tree-sitter-java", "package_type": "package", "sha256": "3cb99f96ef340f9b62d84f54dd087a47df357528bf18c99f58f6cc25ba3c5342", "unvendored_tests": false, "version": "0.23.4"}, "tree-sitter-python": {"depends": ["tree-sitter"], "file_name": "tree_sitter_python-0.23.4-cp39-abi3-pyodide_2025_0_wasm32.whl", "imports": ["tree_sitter_python"], "install_dir": "site", "name": "tree-sitter-python", "package_type": "package", "sha256": "4a92f239f1e83121f18908ec5f8d4047cfec71a6d828813fe6a9b7c1bcd735b0", "unvendored_tests": false, "version": "0.23.4"}, "tskit": {"depends": ["numpy", "jsonschema", "rpds-py"], "file_name": "tskit-1.0.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["tskit"], "install_dir": "site", "name": "tskit", "package_type": "package", "sha256": "f7e8a5c0b5171018bc7172e6b53f4184139afde97fa12350e580a42f7a544e3d", "unvendored_tests": false, "version": "1.0.0"}, "typing-extensions": {"depends": [], "file_name": "typing_extensions-4.15.0-py3-none-any.whl", "imports": ["typing_extensions"], "install_dir": "site", "name": "typing-extensions", "package_type": "package", "sha256": "b57583f623dd3df72e6ace8a4061c3e4f0683755165ef73b4cd44ac3df92ddb9", "unvendored_tests": false, "version": "4.15.0"}, "typing-inspection": {"depends": [], "file_name": "typing_inspection-0.4.2-py3-none-any.whl", "imports": ["typing_inspection"], "install_dir": "site", "name": "typing-inspection", "package_type": "package", "sha256": "5c4d0bade04cec6ac0d03c227c8bdb7c59218e4c6d759b5ac0cea5c34f6a72aa", "unvendored_tests": false, "version": "0.4.2"}, "tzdata": {"depends": [], "file_name": "tzdata-2025.3-py2.py3-none-any.whl", "imports": ["tzdata"], "install_dir": "site", "name": "tzdata", "package_type": "package", "sha256": "39db9ad12044be29b71e3ab24b905956fca75ae6fb25f9bc2062043c293d0f50", "unvendored_tests": false, "version": "2025.3"}, "ujson": {"depends": [], "file_name": "ujson-5.11.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["ujson"], "install_dir": "site", "name": "ujson", "package_type": "package", "sha256": "e9e8e11ebb2f314db428661fe635fe44af8bb9740f44847f3c60510e21b7b0c0", "unvendored_tests": false, "version": "5.11.0"}, "uncertainties": {"depends": ["future"], "file_name": "uncertainties-3.2.2-py3-none-any.whl", "imports": ["uncertainties"], "install_dir": "site", "name": "uncertainties", "package_type": "package", "sha256": "0abeeb1832fb157815a5c11b6b1fc83ed29304044df77959873fe621d3ffd6ed", "unvendored_tests": false, "version": "3.2.2"}, "unyt": {"depends": ["numpy", "packaging", "sympy"], "file_name": "unyt-3.0.3-py3-none-any.whl", "imports": ["unyt"], "install_dir": "site", "name": "unyt", "package_type": "package", "sha256": "ecf3b23f3cec33e7edd09477b267862274b06c7044341b2ae62c83422dad49e7", "unvendored_tests": true, "version": "3.0.3"}, "unyt-tests": {"depends": ["unyt"], "file_name": "unyt-tests.tar", "imports": [], "install_dir": "site", "name": "unyt-tests", "package_type": "package", "sha256": "8ab10030c32bd8f159dd871d290d0e41203197392cf25f5e98ba0e2b0e5d9d64", "unvendored_tests": false, "version": "3.0.3"}, "urllib3": {"depends": [], "file_name": "urllib3-2.5.0-py3-none-any.whl", "imports": ["urllib3"], "install_dir": "site", "name": "urllib3", "package_type": "package", "sha256": "ae930887b25087f9ba80e06d57b22c7c047c0d5db3fca3df6e932cdebbb77ad6", "unvendored_tests": false, "version": "2.5.0"}, "vega-datasets": {"depends": ["pandas"], "file_name": "vega_datasets-0.9.0-py3-none-any.whl", "imports": ["vega_datasets"], "install_dir": "site", "name": "vega-datasets", "package_type": "package", "sha256": "f6c66410b3fe2b8b65ad62c99ea7251eba29b352fd84c1aceec86c511a325f3c", "unvendored_tests": true, "version": "0.9.0"}, "vega-datasets-tests": {"depends": ["vega-datasets"], "file_name": "vega-datasets-tests.tar", "imports": [], "install_dir": "site", "name": "vega-datasets-tests", "package_type": "package", "sha256": "2d4c7ecccbb7bbb037a02da795d5c9a6ad9f0e655f2fce63d34b2c928c72b63d", "unvendored_tests": false, "version": "0.9.0"}, "vrplib": {"depends": ["numpy"], "file_name": "vrplib-2.0.1-py3-none-any.whl", "imports": ["vrplib"], "install_dir": "site", "name": "vrplib", "package_type": "package", "sha256": "1cbe88b6ffc6d7f25b4a7b1ed3bc363126cef615498dd4a1e689e89ebacd16b0", "unvendored_tests": false, "version": "2.0.1"}, "wcwidth": {"depends": [], "file_name": "wcwidth-0.2.13-py2.py3-none-any.whl", "imports": ["wcwidth"], "install_dir": "site", "name": "wcwidth", "package_type": "package", "sha256": "5aea2ced9398448b2807b68a484586aeb5c91cac95a634acf39e2300ad9847c8", "unvendored_tests": false, "version": "0.2.13"}, "webencodings": {"depends": [], "file_name": "webencodings-0.5.1-py2.py3-none-any.whl", "imports": ["webencodings"], "install_dir": "site", "name": "webencodings", "package_type": "package", "sha256": "a0a893e9e174cf99d91b2750287735a5273678c0bdb9acf9708b567207a5c14a", "unvendored_tests": false, "version": "0.5.1"}, "wordcloud": {"depends": ["matplotlib"], "file_name": "wordcloud-1.9.4-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["wordcloud"], "install_dir": "site", "name": "wordcloud", "package_type": "package", "sha256": "35b1a40bf00e29e8b14fa9a43047f4fbea82dabeddfa3cb0b517c1833b4f0836", "unvendored_tests": false, "version": "1.9.4"}, "wrapt": {"depends": [], "file_name": "wrapt-1.17.2-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["wrapt"], "install_dir": "site", "name": "wrapt", "package_type": "package", "sha256": "00dc226b5b1af067344049c90e4ac1805dc7dd8fb4bea71940a8e801b7f18706", "unvendored_tests": false, "version": "1.17.2"}, "xarray": {"depends": ["numpy", "packaging", "pandas"], "file_name": "xarray-2025.12.0-py3-none-any.whl", "imports": ["xarray"], "install_dir": "site", "name": "xarray", "package_type": "package", "sha256": "c2cfc5a4c2f4761799048730b953b12417c4ed5d112c71c0e8918636713c4b5b", "unvendored_tests": true, "version": "2025.12.0"}, "xarray-tests": {"depends": ["xarray"], "file_name": "xarray-tests.tar", "imports": [], "install_dir": "site", "name": "xarray-tests", "package_type": "package", "sha256": "d88594de4f27ca72812cdb4f237ff769b091d40481ef45d2f044050d04972bc3", "unvendored_tests": false, "version": "2025.12.0"}, "xgboost": {"depends": ["numpy", "scipy", "setuptools"], "file_name": "xgboost-2.1.4-py3-none-pyodide_2025_0_wasm32.whl", "imports": ["xgboost"], "install_dir": "site", "name": "xgboost", "package_type": "package", "sha256": "35e2a5898b84ee763b93144fc7906c7fe72c2a45b28833f57d0ae5a27742c93f", "unvendored_tests": false, "version": "2.1.4"}, "xlrd": {"depends": [], "file_name": "xlrd-2.0.1-py2.py3-none-any.whl", "imports": ["xlrd"], "install_dir": "site", "name": "xlrd", "package_type": "package", "sha256": "2872cbcef5a5df3a5cc547aaebdd0ffe5256c3e79d817f3be69574350faf1090", "unvendored_tests": false, "version": "2.0.1"}, "xxhash": {"depends": [], "file_name": "xxhash-3.5.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["xxhash"], "install_dir": "site", "name": "xxhash", "package_type": "package", "sha256": "2ce8ffb702fb7d67520de4c81c111a3475b2615cab0614969f44dd6aade3878a", "unvendored_tests": false, "version": "3.5.0"}, "xyzservices": {"depends": [], "file_name": "xyzservices-2025.1.0-py3-none-any.whl", "imports": ["xyzservices"], "install_dir": "site", "name": "xyzservices", "package_type": "package", "sha256": "26daed3f653ba211516d70b3634e74be7a86e801bee481840ebc6d4fa841cd0d", "unvendored_tests": true, "version": "2025.1.0"}, "xyzservices-tests": {"depends": ["xyzservices"], "file_name": "xyzservices-tests.tar", "imports": [], "install_dir": "site", "name": "xyzservices-tests", "package_type": "package", "sha256": "660c4cc829acd35aecab7aaa293e76fa0d8cb8ac9fdcb7c548a5ae44a1a26fd1", "unvendored_tests": false, "version": "2025.1.0"}, "yarl": {"depends": ["multidict", "idna", "propcache"], "file_name": "yarl-1.18.3-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["yarl"], "install_dir": "site", "name": "yarl", "package_type": "package", "sha256": "0ede8d5eb487bae5b75729d78829bd3d86ff08efa30c020fe71a3213e9df25ec", "unvendored_tests": false, "version": "1.18.3"}, "yt": {"depends": ["ewah_bool_utils", "numpy", "matplotlib", "sympy", "setuptools", "packaging", "unyt", "cmyt", "colorspacious", "tqdm", "tomli", "tomli-w"], "file_name": "yt-4.4.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["yt"], "install_dir": "site", "name": "yt", "package_type": "package", "sha256": "f9537bb9b17b74eb53bf97f4e9e7fa7a808d71ec3d45403e96c447eb623b6eef", "unvendored_tests": false, "version": "4.4.0"}, "zengl": {"depends": [], "file_name": "zengl-2.7.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["zengl", "_zengl"], "install_dir": "site", "name": "zengl", "package_type": "package", "sha256": "1ea96005955b706cc28057be6df05e3ef00e78e4a2683595cdfac56a68ebbe5e", "unvendored_tests": false, "version": "2.7.1"}, "zfpy": {"depends": ["numpy"], "file_name": "zfpy-1.0.1-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["zfpy"], "install_dir": "site", "name": "zfpy", "package_type": "package", "sha256": "a402cd384e7c32bb78c486fb7201a990a3b550b5fe57ab440b3fd8fc721249f1", "unvendored_tests": false, "version": "1.0.1"}, "zstandard": {"depends": ["cffi"], "file_name": "zstandard-0.23.0-cp313-cp313-pyodide_2025_0_wasm32.whl", "imports": ["zstandard"], "install_dir": "site", "name": "zstandard", "package_type": "package", "sha256": "c365a307b01175281bd2d0d56d0092c4f0c97cdc8273e029d01dc4cabbc77fa1", "unvendored_tests": false, "version": "0.23.0"}}}
\ No newline at end of file
diff --git a/crates/execution/assets/pyodide/pyodide.asm.js b/crates/execution/assets/pyodide/pyodide.asm.js
deleted file mode 100644
index 1ff17f7ba..000000000
--- a/crates/execution/assets/pyodide/pyodide.asm.js
+++ /dev/null
@@ -1,15 +0,0 @@
-"use strict";
-var _createPyodideModule = (() => {
-  var _scriptName = typeof document != 'undefined' ? document.currentScript?.src : undefined;
-  return (
-async function(moduleArg = {}) {
-  var moduleRtn;
-
-var Module=moduleArg;var readyPromiseResolve,readyPromiseReject;var readyPromise=new Promise((resolve,reject)=>{readyPromiseResolve=resolve;readyPromiseReject=reject});var ENVIRONMENT_IS_WEB=typeof window=="object";var ENVIRONMENT_IS_WORKER=typeof WorkerGlobalScope!="undefined";var ENVIRONMENT_IS_NODE=typeof process=="object"&&process.versions?.node&&process.type!="renderer";var ENVIRONMENT_IS_SHELL=!ENVIRONMENT_IS_WEB&&!ENVIRONMENT_IS_NODE&&!ENVIRONMENT_IS_WORKER;if(ENVIRONMENT_IS_NODE){}var arguments_=[];var thisProgram="./this.program";var quit_=(status,toThrow)=>{throw toThrow};if(typeof __filename!="undefined"){_scriptName=__filename}else if(ENVIRONMENT_IS_WORKER){_scriptName=self.location.href}var scriptDirectory="";function locateFile(path){if(Module["locateFile"]){return Module["locateFile"](path,scriptDirectory)}return scriptDirectory+path}var readAsync,readBinary;if(ENVIRONMENT_IS_NODE){var fs=require("fs");var nodePath=require("path");scriptDirectory=__dirname+"/";readBinary=filename=>{filename=isFileURI(filename)?new URL(filename):filename;var ret=fs.readFileSync(filename);return ret};readAsync=async(filename,binary=true)=>{filename=isFileURI(filename)?new URL(filename):filename;var ret=fs.readFileSync(filename,binary?undefined:"utf8");return ret};if(process.argv.length>1){thisProgram=process.argv[1].replace(/\\/g,"/")}arguments_=process.argv.slice(2);quit_=(status,toThrow)=>{process.exitCode=status;throw toThrow}}else if(ENVIRONMENT_IS_SHELL){readBinary=f=>{if(typeof readbuffer=="function"){return new Uint8Array(readbuffer(f))}let data=read(f,"binary");assert(typeof data=="object");return data};readAsync=async f=>readBinary(f);globalThis.clearTimeout??=id=>{};globalThis.setTimeout??=f=>f();arguments_=globalThis.arguments||globalThis.scriptArgs;if(typeof quit=="function"){quit_=(status,toThrow)=>{setTimeout(()=>{if(!(toThrow instanceof ExitStatus)){let toLog=toThrow;if(toThrow&&typeof toThrow=="object"&&toThrow.stack){toLog=[toThrow,toThrow.stack]}err(`exiting due to exception: ${toLog}`)}quit(status)});throw toThrow}}if(typeof print!="undefined"){globalThis.console??={};console.log=print;console.warn=console.error=globalThis.printErr??print}}else if(ENVIRONMENT_IS_WEB||ENVIRONMENT_IS_WORKER){try{scriptDirectory=new URL(".",_scriptName).href}catch{}{if(ENVIRONMENT_IS_WORKER){readBinary=url=>{var xhr=new XMLHttpRequest;xhr.open("GET",url,false);xhr.responseType="arraybuffer";xhr.send(null);return new Uint8Array(xhr.response)}}readAsync=async url=>{if(isFileURI(url)){return new Promise((resolve,reject)=>{var xhr=new XMLHttpRequest;xhr.open("GET",url,true);xhr.responseType="arraybuffer";xhr.onload=()=>{if(xhr.status==200||xhr.status==0&&xhr.response){resolve(xhr.response);return}reject(xhr.status)};xhr.onerror=reject;xhr.send(null)})}var response=await fetch(url,{credentials:"same-origin"});if(response.ok){return response.arrayBuffer()}throw new Error(response.status+" : "+response.url)}}}else{}var out=console.log.bind(console);var err=console.error.bind(console);var dynamicLibraries=[];var wasmBinary;var wasmMemory;var ABORT=false;var EXITSTATUS;function assert(condition,text){if(!condition){abort(text)}}var HEAP,HEAP8,HEAPU8,HEAP16,HEAPU16,HEAP32,HEAPU32,HEAPF32,HEAP64,HEAPU64,HEAPF64;var runtimeInitialized=false;var runtimeExited=false;var isFileURI=filename=>filename.startsWith("file://");function updateMemoryViews(){var b=wasmMemory.buffer;Module["HEAP8"]=HEAP8=new Int8Array(b);Module["HEAP16"]=HEAP16=new Int16Array(b);Module["HEAPU8"]=HEAPU8=new Uint8Array(b);Module["HEAPU16"]=HEAPU16=new Uint16Array(b);Module["HEAP32"]=HEAP32=new Int32Array(b);Module["HEAPU32"]=HEAPU32=new Uint32Array(b);Module["HEAPF32"]=HEAPF32=new Float32Array(b);Module["HEAPF64"]=HEAPF64=new Float64Array(b);Module["HEAP64"]=HEAP64=new BigInt64Array(b);Module["HEAPU64"]=HEAPU64=new BigUint64Array(b)}function initMemory(){if(Module["wasmMemory"]){wasmMemory=Module["wasmMemory"]}else{var INITIAL_MEMORY=Module["INITIAL_MEMORY"]||20971520;wasmMemory=new WebAssembly.Memory({initial:INITIAL_MEMORY/65536,maximum:65536})}updateMemoryViews()}var __RELOC_FUNCS__=[];function preRun(){if(Module["preRun"]){if(typeof Module["preRun"]=="function")Module["preRun"]=[Module["preRun"]];while(Module["preRun"].length){addOnPreRun(Module["preRun"].shift())}}callRuntimeCallbacks(onPreRuns)}function initRuntime(){runtimeInitialized=true;callRuntimeCallbacks(__RELOC_FUNCS__);callRuntimeCallbacks(onInits);if(!Module["noFSInit"]&&!FS.initialized)FS.init();TTY.init();SOCKFS.root=FS.mount(SOCKFS,{},null);PIPEFS.root=FS.mount(PIPEFS,{},null);wasmExports["__wasm_call_ctors"]();callRuntimeCallbacks(onPostCtors);FS.ignorePermissions=false}function preMain(){callRuntimeCallbacks(onMains)}function exitRuntime(){___funcs_on_exit();callRuntimeCallbacks(onExits);FS.quit();TTY.shutdown();IDBFS.quit();runtimeExited=true}function postRun(){if(Module["postRun"]){if(typeof Module["postRun"]=="function")Module["postRun"]=[Module["postRun"]];while(Module["postRun"].length){addOnPostRun(Module["postRun"].shift())}}callRuntimeCallbacks(onPostRuns)}var runDependencies=0;var dependenciesFulfilled=null;function getUniqueRunDependency(id){return id}function addRunDependency(id){runDependencies++;Module["monitorRunDependencies"]?.(runDependencies)}function removeRunDependency(id){runDependencies--;Module["monitorRunDependencies"]?.(runDependencies);if(runDependencies==0){if(dependenciesFulfilled){var callback=dependenciesFulfilled;dependenciesFulfilled=null;callback()}}}function abort(what){Module["onAbort"]?.(what);what="Aborted("+what+")";err(what);ABORT=true;what+=". Build with -sASSERTIONS for more info.";if(runtimeInitialized){___trap()}var e=new WebAssembly.RuntimeError(what);readyPromiseReject(e);throw e}var wasmBinaryFile;function findWasmBinary(){return locateFile("pyodide.asm.wasm")}function getBinarySync(file){if(file==wasmBinaryFile&&wasmBinary){return new Uint8Array(wasmBinary)}if(readBinary){return readBinary(file)}throw"both async and sync fetching of the wasm failed"}async function getWasmBinary(binaryFile){if(!wasmBinary){try{var response=await readAsync(binaryFile);return new Uint8Array(response)}catch{}}return getBinarySync(binaryFile)}async function instantiateArrayBuffer(binaryFile,imports){try{var binary=await getWasmBinary(binaryFile);var instance=await WebAssembly.instantiate(binary,imports);return instance}catch(reason){err(`failed to asynchronously prepare wasm: ${reason}`);abort(reason)}}async function instantiateAsync(binary,binaryFile,imports){if(!binary&&typeof WebAssembly.instantiateStreaming=="function"&&!isFileURI(binaryFile)&&!ENVIRONMENT_IS_NODE&&!ENVIRONMENT_IS_SHELL){try{var response=fetch(binaryFile,{credentials:"same-origin"});var instantiationResult=await WebAssembly.instantiateStreaming(response,imports);return instantiationResult}catch(reason){err(`wasm streaming compile failed: ${reason}`);err("falling back to ArrayBuffer instantiation")}}return instantiateArrayBuffer(binaryFile,imports)}function getWasmImports(){return{env:wasmImports,wasi_snapshot_preview1:wasmImports,"GOT.mem":new Proxy(wasmImports,GOTHandler),"GOT.func":new Proxy(wasmImports,GOTHandler)}}async function createWasm(){function receiveInstance(instance,module){wasmExports=instance.exports;wasmExports=relocateExports(wasmExports,1024);var metadata=getDylinkMetadata(module);if(metadata.neededDynlibs){dynamicLibraries=metadata.neededDynlibs.concat(dynamicLibraries)}mergeLibSymbols(wasmExports,"main");LDSO.init();loadDylibs();wasmExports=applySignatureConversions(wasmExports);__RELOC_FUNCS__.push(wasmExports["__wasm_apply_data_relocs"]);removeRunDependency("wasm-instantiate");return wasmExports}addRunDependency("wasm-instantiate");function receiveInstantiationResult(result){return receiveInstance(result["instance"],result["module"])}var info=getWasmImports();if(Module["instantiateWasm"]){return new Promise((resolve,reject)=>{Module["instantiateWasm"](info,(mod,inst)=>{resolve(receiveInstance(mod,inst))})})}wasmBinaryFile??=findWasmBinary();try{var result=await instantiateAsync(wasmBinary,wasmBinaryFile,info);var exports=receiveInstantiationResult(result);return exports}catch(e){readyPromiseReject(e);return Promise.reject(e)}}class ExitStatus{name="ExitStatus";constructor(status){this.message=`Program terminated with exit(${status})`;this.status=status}}var GOT={};var currentModuleWeakSymbols=new Set([]);var GOTHandler={get(obj,symName){var rtn=GOT[symName];if(!rtn){rtn=GOT[symName]=new WebAssembly.Global({value:"i32",mutable:true})}if(!currentModuleWeakSymbols.has(symName)){rtn.required=true}return rtn}};var callRuntimeCallbacks=callbacks=>{while(callbacks.length>0){callbacks.shift()(Module)}};var onPostRuns=[];var addOnPostRun=cb=>onPostRuns.push(cb);var onPreRuns=[];var addOnPreRun=cb=>onPreRuns.push(cb);var UTF8Decoder=typeof TextDecoder!="undefined"?new TextDecoder:undefined;var UTF8ArrayToString=(heapOrArray,idx=0,maxBytesToRead=NaN)=>{idx>>>=0;var endIdx=idx+maxBytesToRead;var endPtr=idx;while(heapOrArray[endPtr]&&!(endPtr>=endIdx))++endPtr;if(endPtr-idx>16&&heapOrArray.buffer&&UTF8Decoder){return UTF8Decoder.decode(heapOrArray.subarray(idx,endPtr))}var str="";while(idx<endPtr){var u0=heapOrArray[idx++];if(!(u0&128)){str+=String.fromCharCode(u0);continue}var u1=heapOrArray[idx++]&63;if((u0&224)==192){str+=String.fromCharCode((u0&31)<<6|u1);continue}var u2=heapOrArray[idx++]&63;if((u0&240)==224){u0=(u0&15)<<12|u1<<6|u2}else{u0=(u0&7)<<18|u1<<12|u2<<6|heapOrArray[idx++]&63}if(u0<65536){str+=String.fromCharCode(u0)}else{var ch=u0-65536;str+=String.fromCharCode(55296|ch>>10,56320|ch&1023)}}return str};var getDylinkMetadata=binary=>{var offset=0;var end=0;function getU8(){return binary[offset++]}function getLEB(){var ret=0;var mul=1;while(1){var byte=binary[offset++];ret+=(byte&127)*mul;mul*=128;if(!(byte&128))break}return ret}function getString(){var len=getLEB();offset+=len;return UTF8ArrayToString(binary,offset-len,len)}function getStringList(){var count=getLEB();var rtn=[];while(count--)rtn.push(getString());return rtn}function failIf(condition,message){if(condition)throw new Error(message)}if(binary instanceof WebAssembly.Module){var dylinkSection=WebAssembly.Module.customSections(binary,"dylink.0");failIf(dylinkSection.length===0,"need dylink section");binary=new Uint8Array(dylinkSection[0]);end=binary.length}else{var int32View=new Uint32Array(new Uint8Array(binary.subarray(0,24)).buffer);var magicNumberFound=int32View[0]==1836278016;failIf(!magicNumberFound,"need to see wasm magic number");failIf(binary[8]!==0,"need the dylink section to be first");offset=9;var section_size=getLEB();end=offset+section_size;var name=getString();failIf(name!=="dylink.0")}var customSection={neededDynlibs:[],tlsExports:new Set,weakImports:new Set,runtimePaths:[]};var WASM_DYLINK_MEM_INFO=1;var WASM_DYLINK_NEEDED=2;var WASM_DYLINK_EXPORT_INFO=3;var WASM_DYLINK_IMPORT_INFO=4;var WASM_DYLINK_RUNTIME_PATH=5;var WASM_SYMBOL_TLS=256;var WASM_SYMBOL_BINDING_MASK=3;var WASM_SYMBOL_BINDING_WEAK=1;while(offset<end){var subsectionType=getU8();var subsectionSize=getLEB();if(subsectionType===WASM_DYLINK_MEM_INFO){customSection.memorySize=getLEB();customSection.memoryAlign=getLEB();customSection.tableSize=getLEB();customSection.tableAlign=getLEB()}else if(subsectionType===WASM_DYLINK_NEEDED){customSection.neededDynlibs=getStringList()}else if(subsectionType===WASM_DYLINK_EXPORT_INFO){var count=getLEB();while(count--){var symname=getString();var flags=getLEB();if(flags&WASM_SYMBOL_TLS){customSection.tlsExports.add(symname)}}}else if(subsectionType===WASM_DYLINK_IMPORT_INFO){var count=getLEB();while(count--){var modname=getString();var symname=getString();var flags=getLEB();if((flags&WASM_SYMBOL_BINDING_MASK)==WASM_SYMBOL_BINDING_WEAK){customSection.weakImports.add(symname)}}}else if(subsectionType===WASM_DYLINK_RUNTIME_PATH){customSection.runtimePaths=getStringList()}else{offset+=subsectionSize}}return customSection};function getValue(ptr,type="i8"){if(type.endsWith("*"))type="*";switch(type){case"i1":return HEAP8[ptr>>>0];case"i8":return HEAP8[ptr>>>0];case"i16":return HEAP16[ptr>>>1>>>0];case"i32":return HEAP32[ptr>>>2>>>0];case"i64":return HEAP64[ptr>>>3>>>0];case"float":return HEAPF32[ptr>>>2>>>0];case"double":return HEAPF64[ptr>>>3>>>0];case"*":return HEAPU32[ptr>>>2>>>0];default:abort(`invalid type for getValue: ${type}`)}}var newDSO=(name,handle,syms)=>{var dso={refcount:Infinity,name,exports:syms,global:true};LDSO.loadedLibsByName[name]=dso;if(handle!=undefined){LDSO.loadedLibsByHandle[handle]=dso}return dso};var LDSO={loadedLibsByName:{},loadedLibsByHandle:{},init(){newDSO("__main__",0,wasmImports)}};var ___heap_base=8810528;var alignMemory=(size,alignment)=>Math.ceil(size/alignment)*alignment;var getMemory=size=>{if(runtimeInitialized){return _calloc(size,1)}var ret=___heap_base;var end=ret+alignMemory(size,16);___heap_base=end;GOT["__heap_base"].value=end;return ret};var isInternalSym=symName=>["__cpp_exception","__c_longjmp","__wasm_apply_data_relocs","__dso_handle","__tls_size","__tls_align","__set_stack_limits","_emscripten_tls_init","__wasm_init_tls","__wasm_call_ctors","__start_em_asm","__stop_em_asm","__start_em_js","__stop_em_js"].includes(symName)||symName.startsWith("__em_js__");var uleb128Encode=(n,target)=>{if(n<128){target.push(n)}else{target.push(n%128|128,n>>7)}};var sigToWasmTypes=sig=>{var typeNames={i:"i32",j:"i64",f:"f32",d:"f64",e:"externref",p:"i32"};var type={parameters:[],results:sig[0]=="v"?[]:[typeNames[sig[0]]]};for(var i=1;i<sig.length;++i){type.parameters.push(typeNames[sig[i]])}return type};var generateFuncType=(sig,target)=>{var sigRet=sig.slice(0,1);var sigParam=sig.slice(1);var typeCodes={i:127,p:127,j:126,f:125,d:124,e:111};target.push(96);uleb128Encode(sigParam.length,target);for(var paramType of sigParam){target.push(typeCodes[paramType])}if(sigRet=="v"){target.push(0)}else{target.push(1,typeCodes[sigRet])}};var convertJsFunctionToWasm=(func,sig)=>{if(typeof WebAssembly.Function=="function"){return new WebAssembly.Function(sigToWasmTypes(sig),func)}var typeSectionBody=[1];generateFuncType(sig,typeSectionBody);var bytes=[0,97,115,109,1,0,0,0,1];uleb128Encode(typeSectionBody.length,bytes);bytes.push(...typeSectionBody);bytes.push(2,7,1,1,101,1,102,0,0,7,5,1,1,102,0,0);var module=new WebAssembly.Module(new Uint8Array(bytes));var instance=new WebAssembly.Instance(module,{e:{f:func}});var wrappedFunc=instance.exports["f"];return wrappedFunc};var wasmTableMirror=[];var wasmTable=new WebAssembly.Table({initial:6076,element:"anyfunc"});var getWasmTableEntry=funcPtr=>{var func=wasmTableMirror[funcPtr];if(!func){wasmTableMirror[funcPtr]=func=wasmTable.get(funcPtr)}return func};var updateTableMap=(offset,count)=>{if(functionsInTableMap){for(var i=offset;i<offset+count;i++){var item=getWasmTableEntry(i);if(item){functionsInTableMap.set(item,i)}}}};var functionsInTableMap;var getFunctionAddress=func=>{if(!functionsInTableMap){functionsInTableMap=new WeakMap;updateTableMap(0,wasmTable.length)}return functionsInTableMap.get(func)||0};var freeTableIndexes=[];var getEmptyTableSlot=()=>{if(freeTableIndexes.length){return freeTableIndexes.pop()}try{wasmTable.grow(1)}catch(err){if(!(err instanceof RangeError)){throw err}throw"Unable to grow wasm table. Set ALLOW_TABLE_GROWTH."}return wasmTable.length-1};var setWasmTableEntry=(idx,func)=>{wasmTable.set(idx,func);wasmTableMirror[idx]=wasmTable.get(idx)};var addFunction=(func,sig)=>{var rtn=getFunctionAddress(func);if(rtn){return rtn}var ret=getEmptyTableSlot();try{setWasmTableEntry(ret,func)}catch(err){if(!(err instanceof TypeError)){throw err}var wrapped=convertJsFunctionToWasm(func,sig);setWasmTableEntry(ret,wrapped)}functionsInTableMap.set(func,ret);return ret};var updateGOT=(exports,replace)=>{for(var symName in exports){if(isInternalSym(symName)){continue}var value=exports[symName];GOT[symName]||=new WebAssembly.Global({value:"i32",mutable:true});if(replace||GOT[symName].value==0){if(typeof value=="function"){GOT[symName].value=addFunction(value)}else if(typeof value=="number"){GOT[symName].value=value}else{err(`unhandled export type for '${symName}': ${typeof value}`)}}}};var relocateExports=(exports,memoryBase,replace)=>{var relocated={};for(var e in exports){var value=exports[e];if(typeof value=="object"){value=value.value}if(typeof value=="number"){value+=memoryBase}relocated[e]=value}updateGOT(relocated,replace);return relocated};var isSymbolDefined=symName=>{var existing=wasmImports[symName];if(!existing||existing.stub){return false}return true};var resolveGlobalSymbol=(symName,direct=false)=>{var sym;if(isSymbolDefined(symName)){sym=wasmImports[symName]}return{sym,name:symName}};var onPostCtors=[];var addOnPostCtor=cb=>onPostCtors.push(cb);var UTF8ToString=(ptr,maxBytesToRead)=>{ptr>>>=0;return ptr?UTF8ArrayToString(HEAPU8,ptr,maxBytesToRead):""};var loadWebAssemblyModule=(binary,flags,libName,localScope,handle)=>{var metadata=getDylinkMetadata(binary);currentModuleWeakSymbols=metadata.weakImports;function loadModule(){var memAlign=Math.pow(2,metadata.memoryAlign);var memoryBase=metadata.memorySize?alignMemory(getMemory(metadata.memorySize+memAlign),memAlign):0;var tableBase=metadata.tableSize?wasmTable.length:0;if(handle){HEAP8[handle+8>>>0]=1;HEAPU32[handle+12>>>2>>>0]=memoryBase;HEAP32[handle+16>>>2>>>0]=metadata.memorySize;HEAPU32[handle+20>>>2>>>0]=tableBase;HEAP32[handle+24>>>2>>>0]=metadata.tableSize}if(metadata.tableSize){wasmTable.grow(metadata.tableSize)}var moduleExports;function resolveSymbol(sym){var resolved=resolveGlobalSymbol(sym).sym;if(!resolved&&localScope){resolved=localScope[sym]}if(!resolved){resolved=moduleExports[sym]}return resolved}var proxyHandler={get(stubs,prop){switch(prop){case"__memory_base":return memoryBase;case"__table_base":return tableBase}if(prop in wasmImports&&!wasmImports[prop].stub){var res=wasmImports[prop];return res}if(!(prop in stubs)){var resolved;stubs[prop]=(...args)=>{resolved||=resolveSymbol(prop);if(!resolved){throw new Error(`Dynamic linking error: cannot resolve symbol ${prop}`)}return resolved(...args)}}return stubs[prop]}};var proxy=new Proxy({},proxyHandler);var info={"GOT.mem":new Proxy({},GOTHandler),"GOT.func":new Proxy({},GOTHandler),env:proxy,wasi_snapshot_preview1:proxy};function postInstantiation(module,instance){updateTableMap(tableBase,metadata.tableSize);moduleExports=relocateExports(instance.exports,memoryBase);if(!flags.allowUndefined){reportUndefinedSymbols()}function addEmAsm(addr,body){var args=[];var arity=0;for(;arity<16;arity++){if(body.indexOf("$"+arity)!=-1){args.push("$"+arity)}else{break}}args=args.join(",");var func=`(${args}) => { ${body} };`;ASM_CONSTS[start]=eval(func)}if("__start_em_asm"in moduleExports){var start=moduleExports["__start_em_asm"];var stop=moduleExports["__stop_em_asm"];while(start<stop){var jsString=UTF8ToString(start);addEmAsm(start,jsString);start=HEAPU8.indexOf(0,start)+1}}function addEmJs(name,cSig,body){var jsArgs=[];cSig=cSig.slice(1,-1);if(cSig!="void"){cSig=cSig.split(",");for(var i in cSig){var jsArg=cSig[i].split(" ").pop();jsArgs.push(jsArg.replace("*",""))}}var func=`(${jsArgs}) => ${body};`;moduleExports[name]=eval(func)}for(var name in moduleExports){if(name.startsWith("__em_js__")){var start=moduleExports[name];var jsString=UTF8ToString(start);var parts=jsString.split("<::>");addEmJs(name.replace("__em_js__",""),parts[0],parts[1]);delete moduleExports[name]}}var applyRelocs=moduleExports["__wasm_apply_data_relocs"];if(applyRelocs){if(runtimeInitialized){applyRelocs()}else{__RELOC_FUNCS__.push(applyRelocs)}}var init=moduleExports["__wasm_call_ctors"];if(init){if(runtimeInitialized){init()}else{addOnPostCtor(init)}}return moduleExports}if(flags.loadAsync){return(async()=>{var instance;if(binary instanceof WebAssembly.Module){instance=new WebAssembly.Instance(binary,info)}else{({module:binary,instance}=await WebAssembly.instantiate(binary,info))}return postInstantiation(binary,instance)})()}var module=binary instanceof WebAssembly.Module?binary:new WebAssembly.Module(binary);var instance=new WebAssembly.Instance(module,info);return postInstantiation(module,instance)}flags={...flags,rpath:{parentLibPath:libName,paths:metadata.runtimePaths}};if(flags.loadAsync){return metadata.neededDynlibs.reduce((chain,needed)=>chain.then(()=>{needed=findLibraryFS(needed,flags.rpath)??needed;return loadDynamicLibrary(needed,flags,localScope)}),Promise.resolve()).then(loadModule)}metadata.neededDynlibs.forEach(needed=>{needed=findLibraryFS(needed,flags.rpath)??needed;return loadDynamicLibrary(needed,flags,localScope)});return loadModule()};var mergeLibSymbols=(exports,libName)=>{for(var[sym,exp]of Object.entries(exports)){const setImport=target=>{if(!isSymbolDefined(target)){wasmImports[target]=exp}};setImport(sym);const main_alias="__main_argc_argv";if(sym=="main"){setImport(main_alias)}if(sym==main_alias){setImport("main")}}};var asyncLoad=async url=>{var arrayBuffer=await readAsync(url);return new Uint8Array(arrayBuffer)};var preloadPlugins=[];var registerWasmPlugin=()=>{var wasmPlugin={promiseChainEnd:Promise.resolve(),canHandle:name=>!Module["noWasmDecoding"]&&name.endsWith(".so"),handle:(byteArray,name,onload,onerror)=>{wasmPlugin["promiseChainEnd"]=wasmPlugin["promiseChainEnd"].then(()=>loadWebAssemblyModule(byteArray,{loadAsync:true,nodelete:true},name,{})).then(exports=>{preloadedWasm[name]=exports;onload(byteArray)},error=>{err(`failed to instantiate wasm: ${name}: ${error}`);onerror()})}};preloadPlugins.push(wasmPlugin)};var preloadedWasm={};var PATH={isAbs:path=>path.charAt(0)==="/",splitPath:filename=>{var splitPathRe=/^(\/?|)([\s\S]*?)((?:\.{1,2}|[^\/]+?|)(\.[^.\/]*|))(?:[\/]*)$/;return splitPathRe.exec(filename).slice(1)},normalizeArray:(parts,allowAboveRoot)=>{var up=0;for(var i=parts.length-1;i>=0;i--){var last=parts[i];if(last==="."){parts.splice(i,1)}else if(last===".."){parts.splice(i,1);up++}else if(up){parts.splice(i,1);up--}}if(allowAboveRoot){for(;up;up--){parts.unshift("..")}}return parts},normalize:path=>{var isAbsolute=PATH.isAbs(path),trailingSlash=path.slice(-1)==="/";path=PATH.normalizeArray(path.split("/").filter(p=>!!p),!isAbsolute).join("/");if(!path&&!isAbsolute){path="."}if(path&&trailingSlash){path+="/"}return(isAbsolute?"/":"")+path},dirname:path=>{var result=PATH.splitPath(path),root=result[0],dir=result[1];if(!root&&!dir){return"."}if(dir){dir=dir.slice(0,-1)}return root+dir},basename:path=>path&&path.match(/([^\/]+|\/)\/*$/)[1],join:(...paths)=>PATH.normalize(paths.join("/")),join2:(l,r)=>PATH.normalize(l+"/"+r)};var replaceORIGIN=(parentLibName,rpath)=>{if(rpath.startsWith("$ORIGIN")){var origin=PATH.dirname(parentLibName);return rpath.replace("$ORIGIN",origin)}return rpath};var stackSave=()=>_emscripten_stack_get_current();var stackRestore=val=>__emscripten_stack_restore(val);var withStackSave=f=>{var stack=stackSave();var ret=f();stackRestore(stack);return ret};var stackAlloc=sz=>__emscripten_stack_alloc(sz);var lengthBytesUTF8=str=>{var len=0;for(var i=0;i<str.length;++i){var c=str.charCodeAt(i);if(c<=127){len++}else if(c<=2047){len+=2}else if(c>=55296&&c<=57343){len+=4;++i}else{len+=3}}return len};var stringToUTF8Array=(str,heap,outIdx,maxBytesToWrite)=>{outIdx>>>=0;if(!(maxBytesToWrite>0))return 0;var startIdx=outIdx;var endIdx=outIdx+maxBytesToWrite-1;for(var i=0;i<str.length;++i){var u=str.charCodeAt(i);if(u>=55296&&u<=57343){var u1=str.charCodeAt(++i);u=65536+((u&1023)<<10)|u1&1023}if(u<=127){if(outIdx>=endIdx)break;heap[outIdx++>>>0]=u}else if(u<=2047){if(outIdx+1>=endIdx)break;heap[outIdx++>>>0]=192|u>>6;heap[outIdx++>>>0]=128|u&63}else if(u<=65535){if(outIdx+2>=endIdx)break;heap[outIdx++>>>0]=224|u>>12;heap[outIdx++>>>0]=128|u>>6&63;heap[outIdx++>>>0]=128|u&63}else{if(outIdx+3>=endIdx)break;heap[outIdx++>>>0]=240|u>>18;heap[outIdx++>>>0]=128|u>>12&63;heap[outIdx++>>>0]=128|u>>6&63;heap[outIdx++>>>0]=128|u&63}}heap[outIdx>>>0]=0;return outIdx-startIdx};var stringToUTF8=(str,outPtr,maxBytesToWrite)=>stringToUTF8Array(str,HEAPU8,outPtr,maxBytesToWrite);var stringToUTF8OnStack=str=>{var size=lengthBytesUTF8(str)+1;var ret=stackAlloc(size);stringToUTF8(str,ret,size);return ret};var base64Decode=b64=>{if(ENVIRONMENT_IS_NODE){var buf=Buffer.from(b64,"base64");return new Uint8Array(buf.buffer,buf.byteOffset,buf.length)}var b1,b2,i=0,j=0,bLength=b64.length;var output=new Uint8Array((bLength*3>>2)-(b64[bLength-2]=="=")-(b64[bLength-1]=="="));for(;i<bLength;i+=4,j+=3){b1=base64ReverseLookup[b64.charCodeAt(i+1)];b2=base64ReverseLookup[b64.charCodeAt(i+2)];output[j]=base64ReverseLookup[b64.charCodeAt(i)]<<2|b1>>4;output[j+1]=b1<<4|b2>>2;output[j+2]=b2<<6|base64ReverseLookup[b64.charCodeAt(i+3)]}return output};var initRandomFill=()=>{if(ENVIRONMENT_IS_NODE){var nodeCrypto=require("crypto");return view=>nodeCrypto.randomFillSync(view)}if(ENVIRONMENT_IS_SHELL){return view=>{if(!os.system){throw new Error("randomFill not supported on d8 unless --enable-os-system is passed")}const b64=os.system("sh",["-c",`head -c${view.byteLength} /dev/urandom | base64 --wrap=0`]);view.set(base64Decode(b64))}}return view=>crypto.getRandomValues(view)};var randomFill=view=>{(randomFill=initRandomFill())(view)};var PATH_FS={resolve:(...args)=>{var resolvedPath="",resolvedAbsolute=false;for(var i=args.length-1;i>=-1&&!resolvedAbsolute;i--){var path=i>=0?args[i]:FS.cwd();if(typeof path!="string"){throw new TypeError("Arguments to path.resolve must be strings")}else if(!path){return""}resolvedPath=path+"/"+resolvedPath;resolvedAbsolute=PATH.isAbs(path)}resolvedPath=PATH.normalizeArray(resolvedPath.split("/").filter(p=>!!p),!resolvedAbsolute).join("/");return(resolvedAbsolute?"/":"")+resolvedPath||"."},relative:(from,to)=>{from=PATH_FS.resolve(from).slice(1);to=PATH_FS.resolve(to).slice(1);function trim(arr){var start=0;for(;start<arr.length;start++){if(arr[start]!=="")break}var end=arr.length-1;for(;end>=0;end--){if(arr[end]!=="")break}if(start>end)return[];return arr.slice(start,end-start+1)}var fromParts=trim(from.split("/"));var toParts=trim(to.split("/"));var length=Math.min(fromParts.length,toParts.length);var samePartsLength=length;for(var i=0;i<length;i++){if(fromParts[i]!==toParts[i]){samePartsLength=i;break}}var outputParts=[];for(var i=samePartsLength;i<fromParts.length;i++){outputParts.push("..")}outputParts=outputParts.concat(toParts.slice(samePartsLength));return outputParts.join("/")}};var FS_stdin_getChar_buffer=[];var intArrayFromString=(stringy,dontAddNull,length)=>{var len=length>0?length:lengthBytesUTF8(stringy)+1;var u8array=new Array(len);var numBytesWritten=stringToUTF8Array(stringy,u8array,0,u8array.length);if(dontAddNull)u8array.length=numBytesWritten;return u8array};var FS_stdin_getChar=()=>{if(!FS_stdin_getChar_buffer.length){var result=null;if(ENVIRONMENT_IS_NODE){var BUFSIZE=256;var buf=Buffer.alloc(BUFSIZE);var bytesRead=0;var fd=process.stdin.fd;try{bytesRead=fs.readSync(fd,buf,0,BUFSIZE)}catch(e){if(e.toString().includes("EOF"))bytesRead=0;else throw e}if(bytesRead>0){result=buf.slice(0,bytesRead).toString("utf-8")}}else if(typeof window!="undefined"&&typeof window.prompt=="function"){result=window.prompt("Input: ");if(result!==null){result+="\n"}}else if(typeof readline=="function"){result=readline();if(result){result+="\n"}}else{}if(!result){return null}FS_stdin_getChar_buffer=intArrayFromString(result,true)}return FS_stdin_getChar_buffer.shift()};var TTY={ttys:[],init(){},shutdown(){},register(dev,ops){TTY.ttys[dev]={input:[],output:[],ops};FS.registerDevice(dev,TTY.stream_ops)},stream_ops:{open(stream){var tty=TTY.ttys[stream.node.rdev];if(!tty){throw new FS.ErrnoError(43)}stream.tty=tty;stream.seekable=false},close(stream){stream.tty.ops.fsync(stream.tty)},fsync(stream){stream.tty.ops.fsync(stream.tty)},read(stream,buffer,offset,length,pos){if(!stream.tty||!stream.tty.ops.get_char){throw new FS.ErrnoError(60)}var bytesRead=0;for(var i=0;i<length;i++){var result;try{result=stream.tty.ops.get_char(stream.tty)}catch(e){throw new FS.ErrnoError(29)}if(result===undefined&&bytesRead===0){throw new FS.ErrnoError(6)}if(result===null||result===undefined)break;bytesRead++;buffer[offset+i]=result}if(bytesRead){stream.node.atime=Date.now()}return bytesRead},write(stream,buffer,offset,length,pos){if(!stream.tty||!stream.tty.ops.put_char){throw new FS.ErrnoError(60)}try{for(var i=0;i<length;i++){stream.tty.ops.put_char(stream.tty,buffer[offset+i])}}catch(e){throw new FS.ErrnoError(29)}if(length){stream.node.mtime=stream.node.ctime=Date.now()}return i}},default_tty_ops:{get_char(tty){return FS_stdin_getChar()},put_char(tty,val){if(val===null||val===10){out(UTF8ArrayToString(tty.output));tty.output=[]}else{if(val!=0)tty.output.push(val)}},fsync(tty){if(tty.output?.length>0){out(UTF8ArrayToString(tty.output));tty.output=[]}},ioctl_tcgets(tty){return{c_iflag:25856,c_oflag:5,c_cflag:191,c_lflag:35387,c_cc:[3,28,127,21,4,0,1,0,17,19,26,0,18,15,23,22,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]}},ioctl_tcsets(tty,optional_actions,data){return 0},ioctl_tiocgwinsz(tty){return[24,80]}},default_tty1_ops:{put_char(tty,val){if(val===null||val===10){err(UTF8ArrayToString(tty.output));tty.output=[]}else{if(val!=0)tty.output.push(val)}},fsync(tty){if(tty.output?.length>0){err(UTF8ArrayToString(tty.output));tty.output=[]}}}};var zeroMemory=(ptr,size)=>HEAPU8.fill(0,ptr,ptr+size);var mmapAlloc=size=>{size=alignMemory(size,65536);var ptr=_emscripten_builtin_memalign(65536,size);if(ptr)zeroMemory(ptr,size);return ptr};var MEMFS={ops_table:null,mount(mount){return MEMFS.createNode(null,"/",16895,0)},createNode(parent,name,mode,dev){if(FS.isBlkdev(mode)||FS.isFIFO(mode)){throw new FS.ErrnoError(63)}MEMFS.ops_table||={dir:{node:{getattr:MEMFS.node_ops.getattr,setattr:MEMFS.node_ops.setattr,lookup:MEMFS.node_ops.lookup,mknod:MEMFS.node_ops.mknod,rename:MEMFS.node_ops.rename,unlink:MEMFS.node_ops.unlink,rmdir:MEMFS.node_ops.rmdir,readdir:MEMFS.node_ops.readdir,symlink:MEMFS.node_ops.symlink},stream:{llseek:MEMFS.stream_ops.llseek}},file:{node:{getattr:MEMFS.node_ops.getattr,setattr:MEMFS.node_ops.setattr},stream:{llseek:MEMFS.stream_ops.llseek,read:MEMFS.stream_ops.read,write:MEMFS.stream_ops.write,mmap:MEMFS.stream_ops.mmap,msync:MEMFS.stream_ops.msync}},link:{node:{getattr:MEMFS.node_ops.getattr,setattr:MEMFS.node_ops.setattr,readlink:MEMFS.node_ops.readlink},stream:{}},chrdev:{node:{getattr:MEMFS.node_ops.getattr,setattr:MEMFS.node_ops.setattr},stream:FS.chrdev_stream_ops}};var node=FS.createNode(parent,name,mode,dev);if(FS.isDir(node.mode)){node.node_ops=MEMFS.ops_table.dir.node;node.stream_ops=MEMFS.ops_table.dir.stream;node.contents={}}else if(FS.isFile(node.mode)){node.node_ops=MEMFS.ops_table.file.node;node.stream_ops=MEMFS.ops_table.file.stream;node.usedBytes=0;node.contents=null}else if(FS.isLink(node.mode)){node.node_ops=MEMFS.ops_table.link.node;node.stream_ops=MEMFS.ops_table.link.stream}else if(FS.isChrdev(node.mode)){node.node_ops=MEMFS.ops_table.chrdev.node;node.stream_ops=MEMFS.ops_table.chrdev.stream}node.atime=node.mtime=node.ctime=Date.now();if(parent){parent.contents[name]=node;parent.atime=parent.mtime=parent.ctime=node.atime}return node},getFileDataAsTypedArray(node){if(!node.contents)return new Uint8Array(0);if(node.contents.subarray)return node.contents.subarray(0,node.usedBytes);return new Uint8Array(node.contents)},expandFileStorage(node,newCapacity){var prevCapacity=node.contents?node.contents.length:0;if(prevCapacity>=newCapacity)return;var CAPACITY_DOUBLING_MAX=1024*1024;newCapacity=Math.max(newCapacity,prevCapacity*(prevCapacity<CAPACITY_DOUBLING_MAX?2:1.125)>>>0);if(prevCapacity!=0)newCapacity=Math.max(newCapacity,256);var oldContents=node.contents;node.contents=new Uint8Array(newCapacity);if(node.usedBytes>0)node.contents.set(oldContents.subarray(0,node.usedBytes),0)},resizeFileStorage(node,newSize){if(node.usedBytes==newSize)return;if(newSize==0){node.contents=null;node.usedBytes=0}else{var oldContents=node.contents;node.contents=new Uint8Array(newSize);if(oldContents){node.contents.set(oldContents.subarray(0,Math.min(newSize,node.usedBytes)))}node.usedBytes=newSize}},node_ops:{getattr(node){var attr={};attr.dev=FS.isChrdev(node.mode)?node.id:1;attr.ino=node.id;attr.mode=node.mode;attr.nlink=1;attr.uid=0;attr.gid=0;attr.rdev=node.rdev;if(FS.isDir(node.mode)){attr.size=4096}else if(FS.isFile(node.mode)){attr.size=node.usedBytes}else if(FS.isLink(node.mode)){attr.size=node.link.length}else{attr.size=0}attr.atime=new Date(node.atime);attr.mtime=new Date(node.mtime);attr.ctime=new Date(node.ctime);attr.blksize=4096;attr.blocks=Math.ceil(attr.size/attr.blksize);return attr},setattr(node,attr){for(const key of["mode","atime","mtime","ctime"]){if(attr[key]!=null){node[key]=attr[key]}}if(attr.size!==undefined){MEMFS.resizeFileStorage(node,attr.size)}},lookup(parent,name){throw MEMFS.doesNotExistError},mknod(parent,name,mode,dev){return MEMFS.createNode(parent,name,mode,dev)},rename(old_node,new_dir,new_name){var new_node;try{new_node=FS.lookupNode(new_dir,new_name)}catch(e){}if(new_node){if(FS.isDir(old_node.mode)){for(var i in new_node.contents){throw new FS.ErrnoError(55)}}FS.hashRemoveNode(new_node)}delete old_node.parent.contents[old_node.name];new_dir.contents[new_name]=old_node;old_node.name=new_name;new_dir.ctime=new_dir.mtime=old_node.parent.ctime=old_node.parent.mtime=Date.now()},unlink(parent,name){delete parent.contents[name];parent.ctime=parent.mtime=Date.now()},rmdir(parent,name){var node=FS.lookupNode(parent,name);for(var i in node.contents){throw new FS.ErrnoError(55)}delete parent.contents[name];parent.ctime=parent.mtime=Date.now()},readdir(node){return[".","..",...Object.keys(node.contents)]},symlink(parent,newname,oldpath){var node=MEMFS.createNode(parent,newname,511|40960,0);node.link=oldpath;return node},readlink(node){if(!FS.isLink(node.mode)){throw new FS.ErrnoError(28)}return node.link}},stream_ops:{read(stream,buffer,offset,length,position){var contents=stream.node.contents;if(position>=stream.node.usedBytes)return 0;var size=Math.min(stream.node.usedBytes-position,length);if(size>8&&contents.subarray){buffer.set(contents.subarray(position,position+size),offset)}else{for(var i=0;i<size;i++)buffer[offset+i]=contents[position+i]}return size},write(stream,buffer,offset,length,position,canOwn){if(buffer.buffer===HEAP8.buffer){canOwn=false}if(!length)return 0;var node=stream.node;node.mtime=node.ctime=Date.now();if(buffer.subarray&&(!node.contents||node.contents.subarray)){if(canOwn){node.contents=buffer.subarray(offset,offset+length);node.usedBytes=length;return length}else if(node.usedBytes===0&&position===0){node.contents=buffer.slice(offset,offset+length);node.usedBytes=length;return length}else if(position+length<=node.usedBytes){node.contents.set(buffer.subarray(offset,offset+length),position);return length}}MEMFS.expandFileStorage(node,position+length);if(node.contents.subarray&&buffer.subarray){node.contents.set(buffer.subarray(offset,offset+length),position)}else{for(var i=0;i<length;i++){node.contents[position+i]=buffer[offset+i]}}node.usedBytes=Math.max(node.usedBytes,position+length);return length},llseek(stream,offset,whence){var position=offset;if(whence===1){position+=stream.position}else if(whence===2){if(FS.isFile(stream.node.mode)){position+=stream.node.usedBytes}}if(position<0){throw new FS.ErrnoError(28)}return position},mmap(stream,length,position,prot,flags){if(!FS.isFile(stream.node.mode)){throw new FS.ErrnoError(43)}var ptr;var allocated;var contents=stream.node.contents;if(!(flags&2)&&contents&&contents.buffer===HEAP8.buffer){allocated=false;ptr=contents.byteOffset}else{allocated=true;ptr=mmapAlloc(length);if(!ptr){throw new FS.ErrnoError(48)}if(contents){if(position>0||position+length<contents.length){if(contents.subarray){contents=contents.subarray(position,position+length)}else{contents=Array.prototype.slice.call(contents,position,position+length)}}HEAP8.set(contents,ptr>>>0)}}return{ptr,allocated}},msync(stream,buffer,offset,length,mmapFlags){MEMFS.stream_ops.write(stream,buffer,0,length,offset,false);return 0}}};var FS_createDataFile=(...args)=>FS.createDataFile(...args);var FS_handledByPreloadPlugin=(byteArray,fullname,finish,onerror)=>{if(typeof Browser!="undefined")Browser.init();var handled=false;preloadPlugins.forEach(plugin=>{if(handled)return;if(plugin["canHandle"](fullname)){plugin["handle"](byteArray,fullname,finish,onerror);handled=true}});return handled};var FS_createPreloadedFile=(parent,name,url,canRead,canWrite,onload,onerror,dontCreateFile,canOwn,preFinish)=>{var fullname=name?PATH_FS.resolve(PATH.join2(parent,name)):parent;var dep=getUniqueRunDependency(`cp ${fullname}`);function processData(byteArray){function finish(byteArray){preFinish?.();if(!dontCreateFile){FS_createDataFile(parent,name,byteArray,canRead,canWrite,canOwn)}onload?.();removeRunDependency(dep)}if(FS_handledByPreloadPlugin(byteArray,fullname,finish,()=>{onerror?.();removeRunDependency(dep)})){return}finish(byteArray)}addRunDependency(dep);if(typeof url=="string"){asyncLoad(url).then(processData,onerror)}else{processData(url)}};var FS_modeStringToFlags=str=>{var flagModes={r:0,"r+":2,w:512|64|1,"w+":512|64|2,a:1024|64|1,"a+":1024|64|2};var flags=flagModes[str];if(typeof flags=="undefined"){throw new Error(`Unknown file open mode: ${str}`)}return flags};var FS_getMode=(canRead,canWrite)=>{var mode=0;if(canRead)mode|=292|73;if(canWrite)mode|=146;return mode};var IDBFS={dbs:{},indexedDB:()=>{if(typeof indexedDB!="undefined")return indexedDB;var ret=null;if(typeof window=="object")ret=window.indexedDB||window.mozIndexedDB||window.webkitIndexedDB||window.msIndexedDB;return ret},DB_VERSION:21,DB_STORE_NAME:"FILE_DATA",queuePersist:mount=>{function onPersistComplete(){if(mount.idbPersistState==="again")startPersist();else mount.idbPersistState=0}function startPersist(){mount.idbPersistState="idb";IDBFS.syncfs(mount,false,onPersistComplete)}if(!mount.idbPersistState){mount.idbPersistState=setTimeout(startPersist,0)}else if(mount.idbPersistState==="idb"){mount.idbPersistState="again"}},mount:mount=>{var mnt=MEMFS.mount(mount);if(mount?.opts?.autoPersist){mnt.idbPersistState=0;var memfs_node_ops=mnt.node_ops;mnt.node_ops={...mnt.node_ops};mnt.node_ops.mknod=(parent,name,mode,dev)=>{var node=memfs_node_ops.mknod(parent,name,mode,dev);node.node_ops=mnt.node_ops;node.idbfs_mount=mnt.mount;node.memfs_stream_ops=node.stream_ops;node.stream_ops={...node.stream_ops};node.stream_ops.write=(stream,buffer,offset,length,position,canOwn)=>{stream.node.isModified=true;return node.memfs_stream_ops.write(stream,buffer,offset,length,position,canOwn)};node.stream_ops.close=stream=>{var n=stream.node;if(n.isModified){IDBFS.queuePersist(n.idbfs_mount);n.isModified=false}if(n.memfs_stream_ops.close)return n.memfs_stream_ops.close(stream)};return node};mnt.node_ops.mkdir=(...args)=>(IDBFS.queuePersist(mnt.mount),memfs_node_ops.mkdir(...args));mnt.node_ops.rmdir=(...args)=>(IDBFS.queuePersist(mnt.mount),memfs_node_ops.rmdir(...args));mnt.node_ops.symlink=(...args)=>(IDBFS.queuePersist(mnt.mount),memfs_node_ops.symlink(...args));mnt.node_ops.unlink=(...args)=>(IDBFS.queuePersist(mnt.mount),memfs_node_ops.unlink(...args));mnt.node_ops.rename=(...args)=>(IDBFS.queuePersist(mnt.mount),memfs_node_ops.rename(...args))}return mnt},syncfs:(mount,populate,callback)=>{IDBFS.getLocalSet(mount,(err,local)=>{if(err)return callback(err);IDBFS.getRemoteSet(mount,(err,remote)=>{if(err)return callback(err);var src=populate?remote:local;var dst=populate?local:remote;IDBFS.reconcile(src,dst,callback)})})},quit:()=>{Object.values(IDBFS.dbs).forEach(value=>value.close());IDBFS.dbs={}},getDB:(name,callback)=>{var db=IDBFS.dbs[name];if(db){return callback(null,db)}var req;try{req=IDBFS.indexedDB().open(name,IDBFS.DB_VERSION)}catch(e){return callback(e)}if(!req){return callback("Unable to connect to IndexedDB")}req.onupgradeneeded=e=>{var db=e.target.result;var transaction=e.target.transaction;var fileStore;if(db.objectStoreNames.contains(IDBFS.DB_STORE_NAME)){fileStore=transaction.objectStore(IDBFS.DB_STORE_NAME)}else{fileStore=db.createObjectStore(IDBFS.DB_STORE_NAME)}if(!fileStore.indexNames.contains("timestamp")){fileStore.createIndex("timestamp","timestamp",{unique:false})}};req.onsuccess=()=>{db=req.result;IDBFS.dbs[name]=db;callback(null,db)};req.onerror=e=>{callback(e.target.error);e.preventDefault()}},getLocalSet:(mount,callback)=>{var entries={};function isRealDir(p){return p!=="."&&p!==".."}function toAbsolute(root){return p=>PATH.join2(root,p)}var check=FS.readdir(mount.mountpoint).filter(isRealDir).map(toAbsolute(mount.mountpoint));while(check.length){var path=check.pop();var stat;try{stat=FS.stat(path)}catch(e){return callback(e)}if(FS.isDir(stat.mode)){check.push(...FS.readdir(path).filter(isRealDir).map(toAbsolute(path)))}entries[path]={timestamp:stat.mtime}}return callback(null,{type:"local",entries})},getRemoteSet:(mount,callback)=>{var entries={};IDBFS.getDB(mount.mountpoint,(err,db)=>{if(err)return callback(err);try{var transaction=db.transaction([IDBFS.DB_STORE_NAME],"readonly");transaction.onerror=e=>{callback(e.target.error);e.preventDefault()};var store=transaction.objectStore(IDBFS.DB_STORE_NAME);var index=store.index("timestamp");index.openKeyCursor().onsuccess=event=>{var cursor=event.target.result;if(!cursor){return callback(null,{type:"remote",db,entries})}entries[cursor.primaryKey]={timestamp:cursor.key};cursor.continue()}}catch(e){return callback(e)}})},loadLocalEntry:(path,callback)=>{var stat,node;try{var lookup=FS.lookupPath(path);node=lookup.node;stat=FS.stat(path)}catch(e){return callback(e)}if(FS.isDir(stat.mode)){return callback(null,{timestamp:stat.mtime,mode:stat.mode})}else if(FS.isFile(stat.mode)){node.contents=MEMFS.getFileDataAsTypedArray(node);return callback(null,{timestamp:stat.mtime,mode:stat.mode,contents:node.contents})}else{return callback(new Error("node type not supported"))}},storeLocalEntry:(path,entry,callback)=>{try{if(FS.isDir(entry["mode"])){FS.mkdirTree(path,entry["mode"])}else if(FS.isFile(entry["mode"])){FS.writeFile(path,entry["contents"],{canOwn:true})}else{return callback(new Error("node type not supported"))}FS.chmod(path,entry["mode"]);FS.utime(path,entry["timestamp"],entry["timestamp"])}catch(e){return callback(e)}callback(null)},removeLocalEntry:(path,callback)=>{try{var stat=FS.stat(path);if(FS.isDir(stat.mode)){FS.rmdir(path)}else if(FS.isFile(stat.mode)){FS.unlink(path)}}catch(e){return callback(e)}callback(null)},loadRemoteEntry:(store,path,callback)=>{var req=store.get(path);req.onsuccess=event=>callback(null,event.target.result);req.onerror=e=>{callback(e.target.error);e.preventDefault()}},storeRemoteEntry:(store,path,entry,callback)=>{try{var req=store.put(entry,path)}catch(e){callback(e);return}req.onsuccess=event=>callback();req.onerror=e=>{callback(e.target.error);e.preventDefault()}},removeRemoteEntry:(store,path,callback)=>{var req=store.delete(path);req.onsuccess=event=>callback();req.onerror=e=>{callback(e.target.error);e.preventDefault()}},reconcile:(src,dst,callback)=>{var total=0;var create=[];Object.keys(src.entries).forEach(key=>{var e=src.entries[key];var e2=dst.entries[key];if(!e2||e["timestamp"].getTime()!=e2["timestamp"].getTime()){create.push(key);total++}});var remove=[];Object.keys(dst.entries).forEach(key=>{if(!src.entries[key]){remove.push(key);total++}});if(!total){return callback(null)}var errored=false;var db=src.type==="remote"?src.db:dst.db;var transaction=db.transaction([IDBFS.DB_STORE_NAME],"readwrite");var store=transaction.objectStore(IDBFS.DB_STORE_NAME);function done(err){if(err&&!errored){errored=true;return callback(err)}}transaction.onerror=transaction.onabort=e=>{done(e.target.error);e.preventDefault()};transaction.oncomplete=e=>{if(!errored){callback(null)}};create.sort().forEach(path=>{if(dst.type==="local"){IDBFS.loadRemoteEntry(store,path,(err,entry)=>{if(err)return done(err);IDBFS.storeLocalEntry(path,entry,done)})}else{IDBFS.loadLocalEntry(path,(err,entry)=>{if(err)return done(err);IDBFS.storeRemoteEntry(store,path,entry,done)})}});remove.sort().reverse().forEach(path=>{if(dst.type==="local"){IDBFS.removeLocalEntry(path,done)}else{IDBFS.removeRemoteEntry(store,path,done)}})}};var ERRNO_CODES={EPERM:63,ENOENT:44,ESRCH:71,EINTR:27,EIO:29,ENXIO:60,E2BIG:1,ENOEXEC:45,EBADF:8,ECHILD:12,EAGAIN:6,EWOULDBLOCK:6,ENOMEM:48,EACCES:2,EFAULT:21,ENOTBLK:105,EBUSY:10,EEXIST:20,EXDEV:75,ENODEV:43,ENOTDIR:54,EISDIR:31,EINVAL:28,ENFILE:41,EMFILE:33,ENOTTY:59,ETXTBSY:74,EFBIG:22,ENOSPC:51,ESPIPE:70,EROFS:69,EMLINK:34,EPIPE:64,EDOM:18,ERANGE:68,ENOMSG:49,EIDRM:24,ECHRNG:106,EL2NSYNC:156,EL3HLT:107,EL3RST:108,ELNRNG:109,EUNATCH:110,ENOCSI:111,EL2HLT:112,EDEADLK:16,ENOLCK:46,EBADE:113,EBADR:114,EXFULL:115,ENOANO:104,EBADRQC:103,EBADSLT:102,EDEADLOCK:16,EBFONT:101,ENOSTR:100,ENODATA:116,ETIME:117,ENOSR:118,ENONET:119,ENOPKG:120,EREMOTE:121,ENOLINK:47,EADV:122,ESRMNT:123,ECOMM:124,EPROTO:65,EMULTIHOP:36,EDOTDOT:125,EBADMSG:9,ENOTUNIQ:126,EBADFD:127,EREMCHG:128,ELIBACC:129,ELIBBAD:130,ELIBSCN:131,ELIBMAX:132,ELIBEXEC:133,ENOSYS:52,ENOTEMPTY:55,ENAMETOOLONG:37,ELOOP:32,EOPNOTSUPP:138,EPFNOSUPPORT:139,ECONNRESET:15,ENOBUFS:42,EAFNOSUPPORT:5,EPROTOTYPE:67,ENOTSOCK:57,ENOPROTOOPT:50,ESHUTDOWN:140,ECONNREFUSED:14,EADDRINUSE:3,ECONNABORTED:13,ENETUNREACH:40,ENETDOWN:38,ETIMEDOUT:73,EHOSTDOWN:142,EHOSTUNREACH:23,EINPROGRESS:26,EALREADY:7,EDESTADDRREQ:17,EMSGSIZE:35,EPROTONOSUPPORT:66,ESOCKTNOSUPPORT:137,EADDRNOTAVAIL:4,ENETRESET:39,EISCONN:30,ENOTCONN:53,ETOOMANYREFS:141,EUSERS:136,EDQUOT:19,ESTALE:72,ENOTSUP:138,ENOMEDIUM:148,EILSEQ:25,EOVERFLOW:61,ECANCELED:11,ENOTRECOVERABLE:56,EOWNERDEAD:62,ESTRPIPE:135};var NODEFS={isWindows:false,staticInit(){NODEFS.isWindows=!!process.platform.match(/^win/);var flags=process.binding("constants")["fs"];NODEFS.flagsForNodeMap={1024:flags["O_APPEND"],64:flags["O_CREAT"],128:flags["O_EXCL"],256:flags["O_NOCTTY"],0:flags["O_RDONLY"],2:flags["O_RDWR"],4096:flags["O_SYNC"],512:flags["O_TRUNC"],1:flags["O_WRONLY"],131072:flags["O_NOFOLLOW"]}},convertNodeCode(e){var code=e.code;return ERRNO_CODES[code]},tryFSOperation(f){try{return f()}catch(e){if(!e.code)throw e;if(e.code==="UNKNOWN")throw new FS.ErrnoError(28);throw new FS.ErrnoError(NODEFS.convertNodeCode(e))}},mount(mount){return NODEFS.createNode(null,"/",NODEFS.getMode(mount.opts.root),0)},createNode(parent,name,mode,dev){if(!FS.isDir(mode)&&!FS.isFile(mode)&&!FS.isLink(mode)){throw new FS.ErrnoError(28)}var node=FS.createNode(parent,name,mode);node.node_ops=NODEFS.node_ops;node.stream_ops=NODEFS.stream_ops;return node},getMode(path){return NODEFS.tryFSOperation(()=>{var mode=fs.lstatSync(path).mode;if(NODEFS.isWindows){mode|=(mode&292)>>2}return mode})},realPath(node){var parts=[];while(node.parent!==node){parts.push(node.name);node=node.parent}parts.push(node.mount.opts.root);parts.reverse();return PATH.join(...parts)},flagsForNode(flags){flags&=~2097152;flags&=~2048;flags&=~32768;flags&=~524288;flags&=~65536;var newFlags=0;for(var k in NODEFS.flagsForNodeMap){if(flags&k){newFlags|=NODEFS.flagsForNodeMap[k];flags^=k}}if(flags){throw new FS.ErrnoError(28)}return newFlags},getattr(func,node){var stat=NODEFS.tryFSOperation(func);if(NODEFS.isWindows){if(!stat.blksize){stat.blksize=4096}if(!stat.blocks){stat.blocks=(stat.size+stat.blksize-1)/stat.blksize|0}stat.mode|=(stat.mode&292)>>2}return{dev:stat.dev,ino:node.id,mode:stat.mode,nlink:stat.nlink,uid:stat.uid,gid:stat.gid,rdev:stat.rdev,size:stat.size,atime:stat.atime,mtime:stat.mtime,ctime:stat.ctime,blksize:stat.blksize,blocks:stat.blocks}},setattr(arg,node,attr,chmod,utimes,truncate,stat){NODEFS.tryFSOperation(()=>{if(attr.mode!==undefined){var mode=attr.mode;if(NODEFS.isWindows){mode&=384}chmod(arg,mode);node.mode=attr.mode}if(typeof(attr.atime??attr.mtime)==="number"){var atime=new Date(attr.atime??stat(arg).atime);var mtime=new Date(attr.mtime??stat(arg).mtime);utimes(arg,atime,mtime)}if(attr.size!==undefined){truncate(arg,attr.size)}})},node_ops:{getattr(node){var path=NODEFS.realPath(node);return NODEFS.getattr(()=>fs.lstatSync(path),node)},setattr(node,attr){var path=NODEFS.realPath(node);if(attr.mode!=null&&attr.dontFollow){throw new FS.ErrnoError(52)}NODEFS.setattr(path,node,attr,fs.chmodSync,fs.utimesSync,fs.truncateSync,fs.lstatSync)},lookup(parent,name){var path=PATH.join2(NODEFS.realPath(parent),name);var mode=NODEFS.getMode(path);return NODEFS.createNode(parent,name,mode)},mknod(parent,name,mode,dev){var node=NODEFS.createNode(parent,name,mode,dev);var path=NODEFS.realPath(node);NODEFS.tryFSOperation(()=>{if(FS.isDir(node.mode)){fs.mkdirSync(path,node.mode)}else{fs.writeFileSync(path,"",{mode:node.mode})}});return node},rename(oldNode,newDir,newName){var oldPath=NODEFS.realPath(oldNode);var newPath=PATH.join2(NODEFS.realPath(newDir),newName);try{FS.unlink(newPath)}catch(e){}NODEFS.tryFSOperation(()=>fs.renameSync(oldPath,newPath));oldNode.name=newName},unlink(parent,name){var path=PATH.join2(NODEFS.realPath(parent),name);NODEFS.tryFSOperation(()=>fs.unlinkSync(path))},rmdir(parent,name){var path=PATH.join2(NODEFS.realPath(parent),name);NODEFS.tryFSOperation(()=>fs.rmdirSync(path))},readdir(node){var path=NODEFS.realPath(node);return NODEFS.tryFSOperation(()=>fs.readdirSync(path))},symlink(parent,newName,oldPath){var newPath=PATH.join2(NODEFS.realPath(parent),newName);NODEFS.tryFSOperation(()=>fs.symlinkSync(oldPath,newPath))},readlink(node){var path=NODEFS.realPath(node);return NODEFS.tryFSOperation(()=>fs.readlinkSync(path))},statfs(path){var stats=NODEFS.tryFSOperation(()=>fs.statfsSync(path));stats.frsize=stats.bsize;return stats}},stream_ops:{getattr(stream){return NODEFS.getattr(()=>fs.fstatSync(stream.nfd),stream.node)},setattr(stream,attr){NODEFS.setattr(stream.nfd,stream.node,attr,fs.fchmodSync,fs.futimesSync,fs.ftruncateSync,fs.fstatSync)},open(stream){var path=NODEFS.realPath(stream.node);NODEFS.tryFSOperation(()=>{stream.shared.refcount=1;stream.nfd=fs.openSync(path,NODEFS.flagsForNode(stream.flags))})},close(stream){NODEFS.tryFSOperation(()=>{if(stream.nfd&&--stream.shared.refcount===0){fs.closeSync(stream.nfd)}})},dup(stream){stream.shared.refcount++},read(stream,buffer,offset,length,position){return NODEFS.tryFSOperation(()=>fs.readSync(stream.nfd,new Int8Array(buffer.buffer,offset,length),0,length,position))},write(stream,buffer,offset,length,position){return NODEFS.tryFSOperation(()=>fs.writeSync(stream.nfd,new Int8Array(buffer.buffer,offset,length),0,length,position))},llseek(stream,offset,whence){var position=offset;if(whence===1){position+=stream.position}else if(whence===2){if(FS.isFile(stream.node.mode)){NODEFS.tryFSOperation(()=>{var stat=fs.fstatSync(stream.nfd);position+=stat.size})}}if(position<0){throw new FS.ErrnoError(28)}return position},mmap(stream,length,position,prot,flags){if(!FS.isFile(stream.node.mode)){throw new FS.ErrnoError(43)}var ptr=mmapAlloc(length);NODEFS.stream_ops.read(stream,HEAP8,ptr,length,position);return{ptr,allocated:true}},msync(stream,buffer,offset,length,mmapFlags){NODEFS.stream_ops.write(stream,buffer,0,length,offset,false);return 0}}};var WORKERFS={DIR_MODE:16895,FILE_MODE:33279,reader:null,mount(mount){assert(ENVIRONMENT_IS_WORKER);WORKERFS.reader??=new FileReaderSync;var root=WORKERFS.createNode(null,"/",WORKERFS.DIR_MODE,0);var createdParents={};function ensureParent(path){var parts=path.split("/");var parent=root;for(var i=0;i<parts.length-1;i++){var curr=parts.slice(0,i+1).join("/");createdParents[curr]||=WORKERFS.createNode(parent,parts[i],WORKERFS.DIR_MODE,0);parent=createdParents[curr]}return parent}function base(path){var parts=path.split("/");return parts[parts.length-1]}Array.prototype.forEach.call(mount.opts["files"]||[],function(file){WORKERFS.createNode(ensureParent(file.name),base(file.name),WORKERFS.FILE_MODE,0,file,file.lastModifiedDate)});(mount.opts["blobs"]||[]).forEach(obj=>{WORKERFS.createNode(ensureParent(obj["name"]),base(obj["name"]),WORKERFS.FILE_MODE,0,obj["data"])});(mount.opts["packages"]||[]).forEach(pack=>{pack["metadata"].files.forEach(file=>{var name=file.filename.slice(1);WORKERFS.createNode(ensureParent(name),base(name),WORKERFS.FILE_MODE,0,pack["blob"].slice(file.start,file.end))})});return root},createNode(parent,name,mode,dev,contents,mtime){var node=FS.createNode(parent,name,mode);node.mode=mode;node.node_ops=WORKERFS.node_ops;node.stream_ops=WORKERFS.stream_ops;node.atime=node.mtime=node.ctime=(mtime||new Date).getTime();assert(WORKERFS.FILE_MODE!==WORKERFS.DIR_MODE);if(mode===WORKERFS.FILE_MODE){node.size=contents.size;node.contents=contents}else{node.size=4096;node.contents={}}if(parent){parent.contents[name]=node}return node},node_ops:{getattr(node){return{dev:1,ino:node.id,mode:node.mode,nlink:1,uid:0,gid:0,rdev:0,size:node.size,atime:new Date(node.atime),mtime:new Date(node.mtime),ctime:new Date(node.ctime),blksize:4096,blocks:Math.ceil(node.size/4096)}},setattr(node,attr){for(const key of["mode","atime","mtime","ctime"]){if(attr[key]!=null){node[key]=attr[key]}}},lookup(parent,name){throw new FS.ErrnoError(44)},mknod(parent,name,mode,dev){throw new FS.ErrnoError(63)},rename(oldNode,newDir,newName){throw new FS.ErrnoError(63)},unlink(parent,name){throw new FS.ErrnoError(63)},rmdir(parent,name){throw new FS.ErrnoError(63)},readdir(node){var entries=[".",".."];for(var key of Object.keys(node.contents)){entries.push(key)}return entries},symlink(parent,newName,oldPath){throw new FS.ErrnoError(63)}},stream_ops:{read(stream,buffer,offset,length,position){if(position>=stream.node.size)return 0;var chunk=stream.node.contents.slice(position,position+length);var ab=WORKERFS.reader.readAsArrayBuffer(chunk);buffer.set(new Uint8Array(ab),offset);return chunk.size},write(stream,buffer,offset,length,position){throw new FS.ErrnoError(29)},llseek(stream,offset,whence){var position=offset;if(whence===1){position+=stream.position}else if(whence===2){if(FS.isFile(stream.node.mode)){position+=stream.node.size}}if(position<0){throw new FS.ErrnoError(28)}return position}}};var PROXYFS={mount(mount){return PROXYFS.createNode(null,"/",mount.opts.fs.lstat(mount.opts.root).mode,0)},createNode(parent,name,mode,dev){if(!FS.isDir(mode)&&!FS.isFile(mode)&&!FS.isLink(mode)){throw new FS.ErrnoError(ERRNO_CODES.EINVAL)}var node=FS.createNode(parent,name,mode);node.node_ops=PROXYFS.node_ops;node.stream_ops=PROXYFS.stream_ops;return node},realPath(node){var parts=[];while(node.parent!==node){parts.push(node.name);node=node.parent}parts.push(node.mount.opts.root);parts.reverse();return PATH.join(...parts)},node_ops:{getattr(node){var path=PROXYFS.realPath(node);var stat;try{stat=node.mount.opts.fs.lstat(path)}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}return{dev:stat.dev,ino:stat.ino,mode:stat.mode,nlink:stat.nlink,uid:stat.uid,gid:stat.gid,rdev:stat.rdev,size:stat.size,atime:stat.atime,mtime:stat.mtime,ctime:stat.ctime,blksize:stat.blksize,blocks:stat.blocks}},setattr(node,attr){var path=PROXYFS.realPath(node);try{if(attr.mode!==undefined){node.mount.opts.fs.chmod(path,attr.mode);node.mode=attr.mode}if(attr.atime||attr.mtime){var atime=new Date(attr.atime||attr.mtime);var mtime=new Date(attr.mtime||attr.atime);node.mount.opts.fs.utime(path,atime,mtime)}if(attr.size!==undefined){node.mount.opts.fs.truncate(path,attr.size)}}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}},lookup(parent,name){try{var path=PATH.join2(PROXYFS.realPath(parent),name);var mode=parent.mount.opts.fs.lstat(path).mode;var node=PROXYFS.createNode(parent,name,mode);return node}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}},mknod(parent,name,mode,dev){var node=PROXYFS.createNode(parent,name,mode,dev);var path=PROXYFS.realPath(node);try{if(FS.isDir(node.mode)){node.mount.opts.fs.mkdir(path,node.mode)}else{node.mount.opts.fs.writeFile(path,"",{mode:node.mode})}}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}return node},rename(oldNode,newDir,newName){var oldPath=PROXYFS.realPath(oldNode);var newPath=PATH.join2(PROXYFS.realPath(newDir),newName);try{oldNode.mount.opts.fs.rename(oldPath,newPath);oldNode.name=newName}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}},unlink(parent,name){var path=PATH.join2(PROXYFS.realPath(parent),name);try{parent.mount.opts.fs.unlink(path)}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}},rmdir(parent,name){var path=PATH.join2(PROXYFS.realPath(parent),name);try{parent.mount.opts.fs.rmdir(path)}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}},readdir(node){var path=PROXYFS.realPath(node);try{return node.mount.opts.fs.readdir(path)}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}},symlink(parent,newName,oldPath){var newPath=PATH.join2(PROXYFS.realPath(parent),newName);try{parent.mount.opts.fs.symlink(oldPath,newPath)}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}},readlink(node){var path=PROXYFS.realPath(node);try{return node.mount.opts.fs.readlink(path)}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}}},stream_ops:{open(stream){var path=PROXYFS.realPath(stream.node);try{stream.nfd=stream.node.mount.opts.fs.open(path,stream.flags)}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}},close(stream){try{stream.node.mount.opts.fs.close(stream.nfd)}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}},read(stream,buffer,offset,length,position){try{return stream.node.mount.opts.fs.read(stream.nfd,buffer,offset,length,position)}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}},write(stream,buffer,offset,length,position){try{return stream.node.mount.opts.fs.write(stream.nfd,buffer,offset,length,position)}catch(e){if(!e.code)throw e;throw new FS.ErrnoError(ERRNO_CODES[e.code])}},llseek(stream,offset,whence){var position=offset;if(whence===1){position+=stream.position}else if(whence===2){if(FS.isFile(stream.node.mode)){try{var stat=stream.node.node_ops.getattr(stream.node);position+=stat.size}catch(e){throw new FS.ErrnoError(ERRNO_CODES[e.code])}}}if(position<0){throw new FS.ErrnoError(ERRNO_CODES.EINVAL)}return position}}};var LZ4={DIR_MODE:16895,FILE_MODE:33279,CHUNK_SIZE:-1,codec:null,init(){if(LZ4.codec)return;LZ4.codec=(()=>{var MiniLZ4=function(){var exports={};exports.uncompress=function(input,output,sIdx,eIdx){sIdx=sIdx||0;eIdx=eIdx||input.length-sIdx;for(var i=sIdx,n=eIdx,j=0;i<n;){var token=input[i++];var literals_length=token>>4;if(literals_length>0){var l=literals_length+240;while(l===255){l=input[i++];literals_length+=l}var end=i+literals_length;while(i<end)output[j++]=input[i++];if(i===n)return j}var offset=input[i++]|input[i++]<<8;if(offset===0)return j;if(offset>j)return-(i-2);var match_length=token&15;var l=match_length+240;while(l===255){l=input[i++];match_length+=l}var pos=j-offset;var end=j+match_length+4;while(j<end)output[j++]=output[pos++]}return j};var maxInputSize=2113929216,minMatch=4,hashLog=16,hashShift=minMatch*8-hashLog,hashSize=1<<hashLog,copyLength=8,lastLiterals=5,mfLimit=copyLength+minMatch,skipStrength=6,mlBits=4,mlMask=(1<<mlBits)-1,runBits=8-mlBits,runMask=(1<<runBits)-1,hasher=2654435761;assert(hashShift===16);var hashTable=new Int16Array(1<<16);var empty=new Int16Array(hashTable.length);exports.compressBound=function(isize){return isize>maxInputSize?0:isize+isize/255+16|0};exports.compress=function(src,dst,sIdx,eIdx){hashTable.set(empty);return compressBlock(src,dst,0,sIdx||0,eIdx||dst.length)};function compressBlock(src,dst,pos,sIdx,eIdx){var dpos=sIdx;var dlen=eIdx-sIdx;var anchor=0;if(src.length>=maxInputSize)throw new Error("input too large");if(src.length>mfLimit){var n=exports.compressBound(src.length);if(dlen<n)throw Error("output too small: "+dlen+" < "+n);var step=1,findMatchAttempts=(1<<skipStrength)+3,srcLength=src.length-mfLimit;while(pos+minMatch<srcLength){var sequenceLowBits=src[pos+1]<<8|src[pos];var sequenceHighBits=src[pos+3]<<8|src[pos+2];var hash=Math.imul(sequenceLowBits|sequenceHighBits<<16,hasher)>>>hashShift;var ref=hashTable[hash]-1;hashTable[hash]=pos+1;if(ref<0||pos-ref>>>16>0||((src[ref+3]<<8|src[ref+2])!=sequenceHighBits||(src[ref+1]<<8|src[ref])!=sequenceLowBits)){step=findMatchAttempts++>>skipStrength;pos+=step;continue}findMatchAttempts=(1<<skipStrength)+3;var literals_length=pos-anchor;var offset=pos-ref;pos+=minMatch;ref+=minMatch;var match_length=pos;while(pos<srcLength&&src[pos]==src[ref]){pos++;ref++}match_length=pos-match_length;var token=match_length<mlMask?match_length:mlMask;if(literals_length>=runMask){dst[dpos++]=(runMask<<mlBits)+token;for(var len=literals_length-runMask;len>254;len-=255){dst[dpos++]=255}dst[dpos++]=len}else{dst[dpos++]=(literals_length<<mlBits)+token}for(var i=0;i<literals_length;i++){dst[dpos++]=src[anchor+i]}dst[dpos++]=offset;dst[dpos++]=offset>>8;if(match_length>=mlMask){match_length-=mlMask;while(match_length>=255){match_length-=255;dst[dpos++]=255}dst[dpos++]=match_length}anchor=pos}}if(anchor==0)return 0;literals_length=src.length-anchor;if(literals_length>=runMask){dst[dpos++]=runMask<<mlBits;for(var ln=literals_length-runMask;ln>254;ln-=255){dst[dpos++]=255}dst[dpos++]=ln}else{dst[dpos++]=literals_length<<mlBits}pos=anchor;while(pos<src.length){dst[dpos++]=src[pos++]}return dpos}exports.CHUNK_SIZE=2048;exports.compressPackage=function(data,verify){if(verify){var temp=new Uint8Array(exports.CHUNK_SIZE)}assert(data instanceof ArrayBuffer);data=new Uint8Array(data);console.log("compressing package of size "+data.length);var compressedChunks=[];var successes=[];var offset=0;var total=0;while(offset<data.length){var chunk=data.subarray(offset,offset+exports.CHUNK_SIZE);offset+=exports.CHUNK_SIZE;var bound=exports.compressBound(chunk.length);var compressed=new Uint8Array(bound);var compressedSize=exports.compress(chunk,compressed);if(compressedSize>0){assert(compressedSize<=bound);compressed=compressed.subarray(0,compressedSize);compressedChunks.push(compressed);total+=compressedSize;successes.push(1);if(verify){var back=exports.uncompress(compressed,temp);assert(back===chunk.length,[back,chunk.length]);for(var i=0;i<chunk.length;i++){assert(chunk[i]===temp[i])}}}else{assert(compressedSize===0);compressedChunks.push(chunk);total+=chunk.length;successes.push(0)}}data=null;var compressedData={data:new Uint8Array(total+exports.CHUNK_SIZE*2),cachedOffset:total,cachedIndexes:[-1,-1],cachedChunks:[null,null],offsets:[],sizes:[],successes};offset=0;for(var i=0;i<compressedChunks.length;i++){compressedData["data"].set(compressedChunks[i],offset);compressedData["offsets"][i]=offset;compressedData["sizes"][i]=compressedChunks[i].length;offset+=compressedChunks[i].length}console.log("compressed package into "+[compressedData["data"].length]);assert(offset===total);return compressedData};assert(exports.CHUNK_SIZE<1<<15);return exports}();if(typeof module!="undefined"){module.exports=MiniLZ4}return MiniLZ4})();LZ4.CHUNK_SIZE=LZ4.codec.CHUNK_SIZE},loadPackage(pack,preloadPlugin){LZ4.init();var compressedData=pack["compressedData"]||LZ4.codec.compressPackage(pack["data"]);assert(compressedData["cachedIndexes"].length===compressedData["cachedChunks"].length);for(var i=0;i<compressedData["cachedIndexes"].length;i++){compressedData["cachedIndexes"][i]=-1;compressedData["cachedChunks"][i]=compressedData["data"].subarray(compressedData["cachedOffset"]+i*LZ4.CHUNK_SIZE,compressedData["cachedOffset"]+(i+1)*LZ4.CHUNK_SIZE);assert(compressedData["cachedChunks"][i].length===LZ4.CHUNK_SIZE)}pack["metadata"].files.forEach(file=>{var dir=PATH.dirname(file.filename);var name=PATH.basename(file.filename);FS.createPath("",dir,true,true);var parent=FS.analyzePath(dir).object;LZ4.createNode(parent,name,LZ4.FILE_MODE,0,{compressedData,start:file.start,end:file.end})});if(preloadPlugin){Browser.init();pack["metadata"].files.forEach(file=>{var handled=false;var fullname=file.filename;preloadPlugins.forEach(plugin=>{if(handled)return;if(plugin["canHandle"](fullname)){var dep=getUniqueRunDependency("fp "+fullname);addRunDependency(dep);var finish=()=>removeRunDependency(dep);var byteArray=FS.readFile(fullname);plugin["handle"](byteArray,fullname,finish,finish);handled=true}})})}},createNode(parent,name,mode,dev,contents,mtime){var node=FS.createNode(parent,name,mode);node.mode=mode;node.node_ops=LZ4.node_ops;node.stream_ops=LZ4.stream_ops;this.atime=this.mtime=this.ctime=(mtime||new Date).getTime();assert(LZ4.FILE_MODE!==LZ4.DIR_MODE);if(mode===LZ4.FILE_MODE){node.size=contents.end-contents.start;node.contents=contents}else{node.size=4096;node.contents={}}if(parent){parent.contents[name]=node}return node},node_ops:{getattr(node){return{dev:1,ino:node.id,mode:node.mode,nlink:1,uid:0,gid:0,rdev:0,size:node.size,atime:new Date(node.atime),mtime:new Date(node.mtime),ctime:new Date(node.ctime),blksize:4096,blocks:Math.ceil(node.size/4096)}},setattr(node,attr){for(const key of["mode","atime","mtime","ctime"]){if(attr[key]){node[key]=attr[key]}}},lookup(parent,name){throw new FS.ErrnoError(44)},mknod(parent,name,mode,dev){throw new FS.ErrnoError(63)},rename(oldNode,newDir,newName){throw new FS.ErrnoError(63)},unlink(parent,name){throw new FS.ErrnoError(63)},rmdir(parent,name){throw new FS.ErrnoError(63)},readdir(node){throw new FS.ErrnoError(63)},symlink(parent,newName,oldPath){throw new FS.ErrnoError(63)}},stream_ops:{read(stream,buffer,offset,length,position){length=Math.min(length,stream.node.size-position);if(length<=0)return 0;var contents=stream.node.contents;var compressedData=contents.compressedData;var written=0;while(written<length){var start=contents.start+position+written;var desired=length-written;var chunkIndex=Math.floor(start/LZ4.CHUNK_SIZE);var compressedStart=compressedData["offsets"][chunkIndex];var compressedSize=compressedData["sizes"][chunkIndex];var currChunk;if(compressedData["successes"][chunkIndex]){var found=compressedData["cachedIndexes"].indexOf(chunkIndex);if(found>=0){currChunk=compressedData["cachedChunks"][found]}else{compressedData["cachedIndexes"].pop();compressedData["cachedIndexes"].unshift(chunkIndex);currChunk=compressedData["cachedChunks"].pop();compressedData["cachedChunks"].unshift(currChunk);if(compressedData["debug"]){out("decompressing chunk "+chunkIndex);Module["decompressedChunks"]=(Module["decompressedChunks"]||0)+1}var compressed=compressedData["data"].subarray(compressedStart,compressedStart+compressedSize);var originalSize=LZ4.codec.uncompress(compressed,currChunk);if(chunkIndex<compressedData["successes"].length-1)assert(originalSize===LZ4.CHUNK_SIZE)}}else{currChunk=compressedData["data"].subarray(compressedStart,compressedStart+LZ4.CHUNK_SIZE)}var startInChunk=start%LZ4.CHUNK_SIZE;var endInChunk=Math.min(startInChunk+desired,LZ4.CHUNK_SIZE);buffer.set(currChunk.subarray(startInChunk,endInChunk),offset+written);var currWritten=endInChunk-startInChunk;written+=currWritten}return written},write(stream,buffer,offset,length,position){throw new FS.ErrnoError(29)},llseek(stream,offset,whence){var position=offset;if(whence===1){position+=stream.position}else if(whence===2){if(FS.isFile(stream.node.mode)){position+=stream.node.size}}if(position<0){throw new FS.ErrnoError(28)}return position}}};var FS={root:null,mounts:[],devices:{},streams:[],nextInode:1,nameTable:null,currentPath:"/",initialized:false,ignorePermissions:true,trackingDelegate:{},filesystems:null,syncFSRequests:0,readFiles:{},ErrnoError:class{name="ErrnoError";constructor(errno){this.errno=errno}},FSStream:class{shared={};get object(){return this.node}set object(val){this.node=val}get isRead(){return(this.flags&2097155)!==1}get isWrite(){return(this.flags&2097155)!==0}get isAppend(){return this.flags&1024}get flags(){return this.shared.flags}set flags(val){this.shared.flags=val}get position(){return this.shared.position}set position(val){this.shared.position=val}},FSNode:class{node_ops={};stream_ops={};readMode=292|73;writeMode=146;mounted=null;constructor(parent,name,mode,rdev){if(!parent){parent=this}this.parent=parent;this.mount=parent.mount;this.id=FS.nextInode++;this.name=name;this.mode=mode;this.rdev=rdev;this.atime=this.mtime=this.ctime=Date.now()}get read(){return(this.mode&this.readMode)===this.readMode}set read(val){val?this.mode|=this.readMode:this.mode&=~this.readMode}get write(){return(this.mode&this.writeMode)===this.writeMode}set write(val){val?this.mode|=this.writeMode:this.mode&=~this.writeMode}get isFolder(){return FS.isDir(this.mode)}get isDevice(){return FS.isChrdev(this.mode)}},lookupPath(path,opts={}){if(!path){throw new FS.ErrnoError(44)}opts.follow_mount??=true;if(!PATH.isAbs(path)){path=FS.cwd()+"/"+path}linkloop:for(var nlinks=0;nlinks<40;nlinks++){var parts=path.split("/").filter(p=>!!p);var current=FS.root;var current_path="/";for(var i=0;i<parts.length;i++){var islast=i===parts.length-1;if(islast&&opts.parent){break}if(parts[i]==="."){continue}if(parts[i]===".."){current_path=PATH.dirname(current_path);if(FS.isRoot(current)){path=current_path+"/"+parts.slice(i+1).join("/");continue linkloop}else{current=current.parent}continue}current_path=PATH.join2(current_path,parts[i]);try{current=FS.lookupNode(current,parts[i])}catch(e){if(e?.errno===44&&islast&&opts.noent_okay){return{path:current_path}}throw e}if(FS.isMountpoint(current)&&(!islast||opts.follow_mount)){current=current.mounted.root}if(FS.isLink(current.mode)&&(!islast||opts.follow)){if(!current.node_ops.readlink){throw new FS.ErrnoError(52)}var link=current.node_ops.readlink(current);if(!PATH.isAbs(link)){link=PATH.dirname(current_path)+"/"+link}path=link+"/"+parts.slice(i+1).join("/");continue linkloop}}return{path:current_path,node:current}}throw new FS.ErrnoError(32)},getPath(node){var path;while(true){if(FS.isRoot(node)){var mount=node.mount.mountpoint;if(!path)return mount;return mount[mount.length-1]!=="/"?`${mount}/${path}`:mount+path}path=path?`${node.name}/${path}`:node.name;node=node.parent}},hashName(parentid,name){var hash=0;for(var i=0;i<name.length;i++){hash=(hash<<5)-hash+name.charCodeAt(i)|0}return(parentid+hash>>>0)%FS.nameTable.length},hashAddNode(node){var hash=FS.hashName(node.parent.id,node.name);node.name_next=FS.nameTable[hash];FS.nameTable[hash]=node},hashRemoveNode(node){var hash=FS.hashName(node.parent.id,node.name);if(FS.nameTable[hash]===node){FS.nameTable[hash]=node.name_next}else{var current=FS.nameTable[hash];while(current){if(current.name_next===node){current.name_next=node.name_next;break}current=current.name_next}}},lookupNode(parent,name){var errCode=FS.mayLookup(parent);if(errCode){throw new FS.ErrnoError(errCode)}var hash=FS.hashName(parent.id,name);for(var node=FS.nameTable[hash];node;node=node.name_next){var nodeName=node.name;if(node.parent.id===parent.id&&nodeName===name){return node}}return FS.lookup(parent,name)},createNode(parent,name,mode,rdev){var node=new FS.FSNode(parent,name,mode,rdev);FS.hashAddNode(node);return node},destroyNode(node){FS.hashRemoveNode(node)},isRoot(node){return node===node.parent},isMountpoint(node){return!!node.mounted},isFile(mode){return(mode&61440)===32768},isDir(mode){return(mode&61440)===16384},isLink(mode){return(mode&61440)===40960},isChrdev(mode){return(mode&61440)===8192},isBlkdev(mode){return(mode&61440)===24576},isFIFO(mode){return(mode&61440)===4096},isSocket(mode){return(mode&49152)===49152},flagsToPermissionString(flag){var perms=["r","w","rw"][flag&3];if(flag&512){perms+="w"}return perms},nodePermissions(node,perms){if(FS.ignorePermissions){return 0}if(perms.includes("r")&&!(node.mode&292)){return 2}else if(perms.includes("w")&&!(node.mode&146)){return 2}else if(perms.includes("x")&&!(node.mode&73)){return 2}return 0},mayLookup(dir){if(!FS.isDir(dir.mode))return 54;var errCode=FS.nodePermissions(dir,"x");if(errCode)return errCode;if(!dir.node_ops.lookup)return 2;return 0},mayCreate(dir,name){if(!FS.isDir(dir.mode)){return 54}try{var node=FS.lookupNode(dir,name);return 20}catch(e){}return FS.nodePermissions(dir,"wx")},mayDelete(dir,name,isdir){var node;try{node=FS.lookupNode(dir,name)}catch(e){return e.errno}var errCode=FS.nodePermissions(dir,"wx");if(errCode){return errCode}if(isdir){if(!FS.isDir(node.mode)){return 54}if(FS.isRoot(node)||FS.getPath(node)===FS.cwd()){return 10}}else{if(FS.isDir(node.mode)){return 31}}return 0},mayOpen(node,flags){if(!node){return 44}if(FS.isLink(node.mode)){return 32}else if(FS.isDir(node.mode)){if(FS.flagsToPermissionString(flags)!=="r"||flags&(512|64)){return 31}}return FS.nodePermissions(node,FS.flagsToPermissionString(flags))},checkOpExists(op,err){if(!op){throw new FS.ErrnoError(err)}return op},MAX_OPEN_FDS:4096,nextfd(){for(var fd=0;fd<=FS.MAX_OPEN_FDS;fd++){if(!FS.streams[fd]){return fd}}throw new FS.ErrnoError(33)},getStreamChecked(fd){var stream=FS.getStream(fd);if(!stream){throw new FS.ErrnoError(8)}return stream},getStream:fd=>FS.streams[fd],createStream(stream,fd=-1){stream=Object.assign(new FS.FSStream,stream);if(fd==-1){fd=FS.nextfd()}stream.fd=fd;FS.streams[fd]=stream;return stream},closeStream(fd){FS.streams[fd]=null},dupStream(origStream,fd=-1){var stream=FS.createStream(origStream,fd);stream.stream_ops?.dup?.(stream);return stream},doSetAttr(stream,node,attr){var setattr=stream?.stream_ops.setattr;var arg=setattr?stream:node;setattr??=node.node_ops.setattr;FS.checkOpExists(setattr,63);setattr(arg,attr)},chrdev_stream_ops:{open(stream){var device=FS.getDevice(stream.node.rdev);stream.stream_ops=device.stream_ops;stream.stream_ops.open?.(stream)},llseek(){throw new FS.ErrnoError(70)}},major:dev=>dev>>8,minor:dev=>dev&255,makedev:(ma,mi)=>ma<<8|mi,registerDevice(dev,ops){FS.devices[dev]={stream_ops:ops}},getDevice:dev=>FS.devices[dev],getMounts(mount){var mounts=[];var check=[mount];while(check.length){var m=check.pop();mounts.push(m);check.push(...m.mounts)}return mounts},syncfs(populate,callback){if(typeof populate=="function"){callback=populate;populate=false}FS.syncFSRequests++;if(FS.syncFSRequests>1){err(`warning: ${FS.syncFSRequests} FS.syncfs operations in flight at once, probably just doing extra work`)}var mounts=FS.getMounts(FS.root.mount);var completed=0;function doCallback(errCode){FS.syncFSRequests--;return callback(errCode)}function done(errCode){if(errCode){if(!done.errored){done.errored=true;return doCallback(errCode)}return}if(++completed>=mounts.length){doCallback(null)}}mounts.forEach(mount=>{if(!mount.type.syncfs){return done(null)}mount.type.syncfs(mount,populate,done)})},mount(type,opts,mountpoint){var root=mountpoint==="/";var pseudo=!mountpoint;var node;if(root&&FS.root){throw new FS.ErrnoError(10)}else if(!root&&!pseudo){var lookup=FS.lookupPath(mountpoint,{follow_mount:false});mountpoint=lookup.path;node=lookup.node;if(FS.isMountpoint(node)){throw new FS.ErrnoError(10)}if(!FS.isDir(node.mode)){throw new FS.ErrnoError(54)}}var mount={type,opts,mountpoint,mounts:[]};var mountRoot=type.mount(mount);mountRoot.mount=mount;mount.root=mountRoot;if(root){FS.root=mountRoot}else if(node){node.mounted=mount;if(node.mount){node.mount.mounts.push(mount)}}return mountRoot},unmount(mountpoint){var lookup=FS.lookupPath(mountpoint,{follow_mount:false});if(!FS.isMountpoint(lookup.node)){throw new FS.ErrnoError(28)}var node=lookup.node;var mount=node.mounted;var mounts=FS.getMounts(mount);Object.keys(FS.nameTable).forEach(hash=>{var current=FS.nameTable[hash];while(current){var next=current.name_next;if(mounts.includes(current.mount)){FS.destroyNode(current)}current=next}});node.mounted=null;var idx=node.mount.mounts.indexOf(mount);node.mount.mounts.splice(idx,1)},lookup(parent,name){return parent.node_ops.lookup(parent,name)},mknod(path,mode,dev){var lookup=FS.lookupPath(path,{parent:true});var parent=lookup.node;var name=PATH.basename(path);if(!name){throw new FS.ErrnoError(28)}if(name==="."||name===".."){throw new FS.ErrnoError(20)}var errCode=FS.mayCreate(parent,name);if(errCode){throw new FS.ErrnoError(errCode)}if(!parent.node_ops.mknod){throw new FS.ErrnoError(63)}return parent.node_ops.mknod(parent,name,mode,dev)},statfs(path){return FS.statfsNode(FS.lookupPath(path,{follow:true}).node)},statfsStream(stream){return FS.statfsNode(stream.node)},statfsNode(node){var rtn={bsize:4096,frsize:4096,blocks:1e6,bfree:5e5,bavail:5e5,files:FS.nextInode,ffree:FS.nextInode-1,fsid:42,flags:2,namelen:255};if(node.node_ops.statfs){Object.assign(rtn,node.node_ops.statfs(node.mount.opts.root))}return rtn},create(path,mode=438){mode&=4095;mode|=32768;return FS.mknod(path,mode,0)},mkdir(path,mode=511){mode&=511|512;mode|=16384;if(FS.trackingDelegate["onMakeDirectory"]){FS.trackingDelegate["onMakeDirectory"](path,mode)}return FS.mknod(path,mode,0)},mkdirTree(path,mode){var dirs=path.split("/");var d="";for(var dir of dirs){if(!dir)continue;if(d||PATH.isAbs(path))d+="/";d+=dir;try{FS.mkdir(d,mode)}catch(e){if(e.errno!=20)throw e}}},mkdev(path,mode,dev){if(typeof dev=="undefined"){dev=mode;mode=438}mode|=8192;return FS.mknod(path,mode,dev)},symlink(oldpath,newpath){if(!PATH_FS.resolve(oldpath)){throw new FS.ErrnoError(44)}var lookup=FS.lookupPath(newpath,{parent:true});var parent=lookup.node;if(!parent){throw new FS.ErrnoError(44)}var newname=PATH.basename(newpath);var errCode=FS.mayCreate(parent,newname);if(errCode){throw new FS.ErrnoError(errCode)}if(!parent.node_ops.symlink){throw new FS.ErrnoError(63)}if(FS.trackingDelegate["onMakeSymlink"]){FS.trackingDelegate["onMakeSymlink"](oldpath,newpath)}return parent.node_ops.symlink(parent,newname,oldpath)},rename(old_path,new_path){var old_dirname=PATH.dirname(old_path);var new_dirname=PATH.dirname(new_path);var old_name=PATH.basename(old_path);var new_name=PATH.basename(new_path);var lookup,old_dir,new_dir;lookup=FS.lookupPath(old_path,{parent:true});old_dir=lookup.node;lookup=FS.lookupPath(new_path,{parent:true});new_dir=lookup.node;if(!old_dir||!new_dir)throw new FS.ErrnoError(44);if(old_dir.mount!==new_dir.mount){throw new FS.ErrnoError(75)}var old_node=FS.lookupNode(old_dir,old_name);var relative=PATH_FS.relative(old_path,new_dirname);if(relative.charAt(0)!=="."){throw new FS.ErrnoError(28)}relative=PATH_FS.relative(new_path,old_dirname);if(relative.charAt(0)!=="."){throw new FS.ErrnoError(55)}var new_node;try{new_node=FS.lookupNode(new_dir,new_name)}catch(e){}if(old_node===new_node){return}var isdir=FS.isDir(old_node.mode);var errCode=FS.mayDelete(old_dir,old_name,isdir);if(errCode){throw new FS.ErrnoError(errCode)}errCode=new_node?FS.mayDelete(new_dir,new_name,isdir):FS.mayCreate(new_dir,new_name);if(errCode){throw new FS.ErrnoError(errCode)}if(!old_dir.node_ops.rename){throw new FS.ErrnoError(63)}if(FS.isMountpoint(old_node)||new_node&&FS.isMountpoint(new_node)){throw new FS.ErrnoError(10)}if(new_dir!==old_dir){errCode=FS.nodePermissions(old_dir,"w");if(errCode){throw new FS.ErrnoError(errCode)}}if(FS.trackingDelegate["willMovePath"]){FS.trackingDelegate["willMovePath"](old_path,new_path)}FS.hashRemoveNode(old_node);try{old_dir.node_ops.rename(old_node,new_dir,new_name);old_node.parent=new_dir}catch(e){throw e}finally{FS.hashAddNode(old_node)}if(FS.trackingDelegate["onMovePath"]){FS.trackingDelegate["onMovePath"](old_path,new_path)}},rmdir(path){var lookup=FS.lookupPath(path,{parent:true});var parent=lookup.node;var name=PATH.basename(path);var node=FS.lookupNode(parent,name);var errCode=FS.mayDelete(parent,name,true);if(errCode){throw new FS.ErrnoError(errCode)}if(!parent.node_ops.rmdir){throw new FS.ErrnoError(63)}if(FS.isMountpoint(node)){throw new FS.ErrnoError(10)}if(FS.trackingDelegate["willDeletePath"]){FS.trackingDelegate["willDeletePath"](path)}parent.node_ops.rmdir(parent,name);FS.destroyNode(node);if(FS.trackingDelegate["onDeletePath"]){FS.trackingDelegate["onDeletePath"](path)}},readdir(path){var lookup=FS.lookupPath(path,{follow:true});var node=lookup.node;var readdir=FS.checkOpExists(node.node_ops.readdir,54);return readdir(node)},unlink(path){var lookup=FS.lookupPath(path,{parent:true});var parent=lookup.node;if(!parent){throw new FS.ErrnoError(44)}var name=PATH.basename(path);var node=FS.lookupNode(parent,name);var errCode=FS.mayDelete(parent,name,false);if(errCode){throw new FS.ErrnoError(errCode)}if(!parent.node_ops.unlink){throw new FS.ErrnoError(63)}if(FS.isMountpoint(node)){throw new FS.ErrnoError(10)}if(FS.trackingDelegate["willDeletePath"]){FS.trackingDelegate["willDeletePath"](path)}parent.node_ops.unlink(parent,name);FS.destroyNode(node);if(FS.trackingDelegate["onDeletePath"]){FS.trackingDelegate["onDeletePath"](path)}},readlink(path){var lookup=FS.lookupPath(path);var link=lookup.node;if(!link){throw new FS.ErrnoError(44)}if(!link.node_ops.readlink){throw new FS.ErrnoError(28)}return link.node_ops.readlink(link)},stat(path,dontFollow){var lookup=FS.lookupPath(path,{follow:!dontFollow});var node=lookup.node;var getattr=FS.checkOpExists(node.node_ops.getattr,63);return getattr(node)},fstat(fd){var stream=FS.getStreamChecked(fd);var node=stream.node;var getattr=stream.stream_ops.getattr;var arg=getattr?stream:node;getattr??=node.node_ops.getattr;FS.checkOpExists(getattr,63);return getattr(arg)},lstat(path){return FS.stat(path,true)},doChmod(stream,node,mode,dontFollow){FS.doSetAttr(stream,node,{mode:mode&4095|node.mode&~4095,ctime:Date.now(),dontFollow})},chmod(path,mode,dontFollow){var node;if(typeof path=="string"){var lookup=FS.lookupPath(path,{follow:!dontFollow});node=lookup.node}else{node=path}FS.doChmod(null,node,mode,dontFollow)},lchmod(path,mode){FS.chmod(path,mode,true)},fchmod(fd,mode){var stream=FS.getStreamChecked(fd);FS.doChmod(stream,stream.node,mode,false)},doChown(stream,node,dontFollow){FS.doSetAttr(stream,node,{timestamp:Date.now(),dontFollow})},chown(path,uid,gid,dontFollow){var node;if(typeof path=="string"){var lookup=FS.lookupPath(path,{follow:!dontFollow});node=lookup.node}else{node=path}FS.doChown(null,node,dontFollow)},lchown(path,uid,gid){FS.chown(path,uid,gid,true)},fchown(fd,uid,gid){var stream=FS.getStreamChecked(fd);FS.doChown(stream,stream.node,false)},doTruncate(stream,node,len){if(FS.isDir(node.mode)){throw new FS.ErrnoError(31)}if(!FS.isFile(node.mode)){throw new FS.ErrnoError(28)}var errCode=FS.nodePermissions(node,"w");if(errCode){throw new FS.ErrnoError(errCode)}FS.doSetAttr(stream,node,{size:len,timestamp:Date.now()})},truncate(path,len){if(len<0){throw new FS.ErrnoError(28)}var node;if(typeof path=="string"){var lookup=FS.lookupPath(path,{follow:true});node=lookup.node}else{node=path}FS.doTruncate(null,node,len)},ftruncate(fd,len){var stream=FS.getStreamChecked(fd);if(len<0||(stream.flags&2097155)===0){throw new FS.ErrnoError(28)}FS.doTruncate(stream,stream.node,len)},utime(path,atime,mtime){var lookup=FS.lookupPath(path,{follow:true});var node=lookup.node;var setattr=FS.checkOpExists(node.node_ops.setattr,63);setattr(node,{atime,mtime})},open(path,flags,mode=438){if(path===""){throw new FS.ErrnoError(44)}flags=typeof flags=="string"?FS_modeStringToFlags(flags):flags;if(flags&64){mode=mode&4095|32768}else{mode=0}var node;var isDirPath;if(typeof path=="object"){node=path}else{isDirPath=path.endsWith("/");var lookup=FS.lookupPath(path,{follow:!(flags&131072),noent_okay:true});node=lookup.node;path=lookup.path}var created=false;if(flags&64){if(node){if(flags&128){throw new FS.ErrnoError(20)}}else if(isDirPath){throw new FS.ErrnoError(31)}else{node=FS.mknod(path,mode|511,0);created=true}}if(!node){throw new FS.ErrnoError(44)}if(FS.isChrdev(node.mode)){flags&=~512}if(flags&65536&&!FS.isDir(node.mode)){throw new FS.ErrnoError(54)}if(!created){var errCode=FS.mayOpen(node,flags);if(errCode){throw new FS.ErrnoError(errCode)}}if(flags&512&&!created){FS.truncate(node,0)}var trackingFlags=flags;flags&=~(128|512|131072);var stream=FS.createStream({node,path:FS.getPath(node),flags,seekable:true,position:0,stream_ops:node.stream_ops,ungotten:[],error:false});if(stream.stream_ops.open){stream.stream_ops.open(stream)}if(created){FS.chmod(node,mode&511)}if(Module["logReadFiles"]&&!(flags&1)){if(!(path in FS.readFiles)){FS.readFiles[path]=1;dbg(`FS.trackingDelegate error on read file: ${path}`)}}if(FS.trackingDelegate["onOpenFile"]){FS.trackingDelegate["onOpenFile"](path,trackingFlags)}return stream},close(stream){if(FS.isClosed(stream)){throw new FS.ErrnoError(8)}if(stream.getdents)stream.getdents=null;try{if(stream.stream_ops.close){stream.stream_ops.close(stream)}}catch(e){throw e}finally{FS.closeStream(stream.fd)}stream.fd=null;if(stream.path&&FS.trackingDelegate["onCloseFile"]){FS.trackingDelegate["onCloseFile"](stream.path)}},isClosed(stream){return stream.fd===null},llseek(stream,offset,whence){if(FS.isClosed(stream)){throw new FS.ErrnoError(8)}if(!stream.seekable||!stream.stream_ops.llseek){throw new FS.ErrnoError(70)}if(whence!=0&&whence!=1&&whence!=2){throw new FS.ErrnoError(28)}stream.position=stream.stream_ops.llseek(stream,offset,whence);stream.ungotten=[];if(stream.path&&FS.trackingDelegate["onSeekFile"]){FS.trackingDelegate["onSeekFile"](stream.path,stream.position,whence)}return stream.position},read(stream,buffer,offset,length,position){if(length<0||position<0){throw new FS.ErrnoError(28)}if(FS.isClosed(stream)){throw new FS.ErrnoError(8)}if((stream.flags&2097155)===1){throw new FS.ErrnoError(8)}if(FS.isDir(stream.node.mode)){throw new FS.ErrnoError(31)}if(!stream.stream_ops.read){throw new FS.ErrnoError(28)}var seeking=typeof position!="undefined";if(!seeking){position=stream.position}else if(!stream.seekable){throw new FS.ErrnoError(70)}var bytesRead=stream.stream_ops.read(stream,buffer,offset,length,position);if(!seeking)stream.position+=bytesRead;if(stream.path&&FS.trackingDelegate["onReadFile"]){FS.trackingDelegate["onReadFile"](stream.path,bytesRead)}return bytesRead},write(stream,buffer,offset,length,position,canOwn){if(length<0||position<0){throw new FS.ErrnoError(28)}if(FS.isClosed(stream)){throw new FS.ErrnoError(8)}if((stream.flags&2097155)===0){throw new FS.ErrnoError(8)}if(FS.isDir(stream.node.mode)){throw new FS.ErrnoError(31)}if(!stream.stream_ops.write){throw new FS.ErrnoError(28)}if(stream.seekable&&stream.flags&1024){FS.llseek(stream,0,2)}var seeking=typeof position!="undefined";if(!seeking){position=stream.position}else if(!stream.seekable){throw new FS.ErrnoError(70)}var bytesWritten=stream.stream_ops.write(stream,buffer,offset,length,position,canOwn);if(!seeking)stream.position+=bytesWritten;if(stream.path&&FS.trackingDelegate["onWriteToFile"]){FS.trackingDelegate["onWriteToFile"](stream.path,bytesWritten)}return bytesWritten},mmap(stream,length,position,prot,flags){if((prot&2)!==0&&(flags&2)===0&&(stream.flags&2097155)!==2){throw new FS.ErrnoError(2)}if((stream.flags&2097155)===1){throw new FS.ErrnoError(2)}if(!stream.stream_ops.mmap){throw new FS.ErrnoError(43)}if(!length){throw new FS.ErrnoError(28)}return stream.stream_ops.mmap(stream,length,position,prot,flags)},msync(stream,buffer,offset,length,mmapFlags){if(!stream.stream_ops.msync){return 0}return stream.stream_ops.msync(stream,buffer,offset,length,mmapFlags)},ioctl(stream,cmd,arg){if(!stream.stream_ops.ioctl){throw new FS.ErrnoError(59)}return stream.stream_ops.ioctl(stream,cmd,arg)},readFile(path,opts={}){opts.flags=opts.flags||0;opts.encoding=opts.encoding||"binary";if(opts.encoding!=="utf8"&&opts.encoding!=="binary"){throw new Error(`Invalid encoding type "${opts.encoding}"`)}var ret;var stream=FS.open(path,opts.flags);var stat=FS.stat(path);var length=stat.size;var buf=new Uint8Array(length);FS.read(stream,buf,0,length,0);if(opts.encoding==="utf8"){ret=UTF8ArrayToString(buf)}else if(opts.encoding==="binary"){ret=buf}FS.close(stream);return ret},writeFile(path,data,opts={}){opts.flags=opts.flags||577;var stream=FS.open(path,opts.flags,opts.mode);if(typeof data=="string"){var buf=new Uint8Array(lengthBytesUTF8(data)+1);var actualNumBytes=stringToUTF8Array(data,buf,0,buf.length);FS.write(stream,buf,0,actualNumBytes,undefined,opts.canOwn)}else if(ArrayBuffer.isView(data)){FS.write(stream,data,0,data.byteLength,undefined,opts.canOwn)}else{throw new Error("Unsupported data type")}FS.close(stream)},cwd:()=>FS.currentPath,chdir(path){var lookup=FS.lookupPath(path,{follow:true});if(lookup.node===null){throw new FS.ErrnoError(44)}if(!FS.isDir(lookup.node.mode)){throw new FS.ErrnoError(54)}var errCode=FS.nodePermissions(lookup.node,"x");if(errCode){throw new FS.ErrnoError(errCode)}FS.currentPath=lookup.path},createDefaultDirectories(){FS.mkdir("/tmp");FS.mkdir("/home");FS.mkdir("/home/web_user")},createDefaultDevices(){FS.mkdir("/dev");FS.registerDevice(FS.makedev(1,3),{read:()=>0,write:(stream,buffer,offset,length,pos)=>length,llseek:()=>0});FS.mkdev("/dev/null",FS.makedev(1,3));TTY.register(FS.makedev(5,0),TTY.default_tty_ops);TTY.register(FS.makedev(6,0),TTY.default_tty1_ops);FS.mkdev("/dev/tty",FS.makedev(5,0));FS.mkdev("/dev/tty1",FS.makedev(6,0));var randomBuffer=new Uint8Array(1024),randomLeft=0;var randomByte=()=>{if(randomLeft===0){randomFill(randomBuffer);randomLeft=randomBuffer.byteLength}return randomBuffer[--randomLeft]};FS.createDevice("/dev","random",randomByte);FS.createDevice("/dev","urandom",randomByte);FS.mkdir("/dev/shm");FS.mkdir("/dev/shm/tmp")},createSpecialDirectories(){FS.mkdir("/proc");var proc_self=FS.mkdir("/proc/self");FS.mkdir("/proc/self/fd");FS.mount({mount(){var node=FS.createNode(proc_self,"fd",16895,73);node.stream_ops={llseek:MEMFS.stream_ops.llseek};node.node_ops={lookup(parent,name){var fd=+name;var stream=FS.getStreamChecked(fd);var ret={parent:null,mount:{mountpoint:"fake"},node_ops:{readlink:()=>stream.path},id:fd+1};ret.parent=ret;return ret},readdir(){return Array.from(FS.streams.entries()).filter(([k,v])=>v).map(([k,v])=>k.toString())}};return node}},{},"/proc/self/fd")},createStandardStreams(input,output,error){if(input){FS.createDevice("/dev","stdin",input)}else{FS.symlink("/dev/tty","/dev/stdin")}if(output){FS.createDevice("/dev","stdout",null,output)}else{FS.symlink("/dev/tty","/dev/stdout")}if(error){FS.createDevice("/dev","stderr",null,error)}else{FS.symlink("/dev/tty1","/dev/stderr")}var stdin=FS.open("/dev/stdin",0);var stdout=FS.open("/dev/stdout",1);var stderr=FS.open("/dev/stderr",1)},staticInit(){FS.nameTable=new Array(4096);FS.mount(MEMFS,{},"/");FS.createDefaultDirectories();FS.createDefaultDevices();FS.createSpecialDirectories();FS.filesystems={MEMFS,IDBFS,NODEFS,WORKERFS,PROXYFS}},init(input,output,error){FS.initialized=true;input??=Module["stdin"];output??=Module["stdout"];error??=Module["stderr"];FS.createStandardStreams(input,output,error)},quit(){FS.initialized=false;_fflush(0);for(var stream of FS.streams){if(stream){FS.close(stream)}}},findObject(path,dontResolveLastLink){var ret=FS.analyzePath(path,dontResolveLastLink);if(!ret.exists){return null}return ret.object},analyzePath(path,dontResolveLastLink){try{var lookup=FS.lookupPath(path,{follow:!dontResolveLastLink});path=lookup.path}catch(e){}var ret={isRoot:false,exists:false,error:0,name:null,path:null,object:null,parentExists:false,parentPath:null,parentObject:null};try{var lookup=FS.lookupPath(path,{parent:true});ret.parentExists=true;ret.parentPath=lookup.path;ret.parentObject=lookup.node;ret.name=PATH.basename(path);lookup=FS.lookupPath(path,{follow:!dontResolveLastLink});ret.exists=true;ret.path=lookup.path;ret.object=lookup.node;ret.name=lookup.node.name;ret.isRoot=lookup.path==="/"}catch(e){ret.error=e.errno}return ret},createPath(parent,path,canRead,canWrite){parent=typeof parent=="string"?parent:FS.getPath(parent);var parts=path.split("/").reverse();while(parts.length){var part=parts.pop();if(!part)continue;var current=PATH.join2(parent,part);try{FS.mkdir(current)}catch(e){if(e.errno!=20)throw e}parent=current}return current},createFile(parent,name,properties,canRead,canWrite){var path=PATH.join2(typeof parent=="string"?parent:FS.getPath(parent),name);var mode=FS_getMode(canRead,canWrite);return FS.create(path,mode)},createDataFile(parent,name,data,canRead,canWrite,canOwn){var path=name;if(parent){parent=typeof parent=="string"?parent:FS.getPath(parent);path=name?PATH.join2(parent,name):parent}var mode=FS_getMode(canRead,canWrite);var node=FS.create(path,mode);if(data){if(typeof data=="string"){var arr=new Array(data.length);for(var i=0,len=data.length;i<len;++i)arr[i]=data.charCodeAt(i);data=arr}FS.chmod(node,mode|146);var stream=FS.open(node,577);FS.write(stream,data,0,data.length,0,canOwn);FS.close(stream);FS.chmod(node,mode)}},createDevice(parent,name,input,output){var path=PATH.join2(typeof parent=="string"?parent:FS.getPath(parent),name);var mode=FS_getMode(!!input,!!output);FS.createDevice.major??=64;var dev=FS.makedev(FS.createDevice.major++,0);FS.registerDevice(dev,{open(stream){stream.seekable=false},close(stream){if(output?.buffer?.length){output(10)}},read(stream,buffer,offset,length,pos){var bytesRead=0;for(var i=0;i<length;i++){var result;try{result=input()}catch(e){throw new FS.ErrnoError(29)}if(result===undefined&&bytesRead===0){throw new FS.ErrnoError(6)}if(result===null||result===undefined)break;bytesRead++;buffer[offset+i]=result}if(bytesRead){stream.node.atime=Date.now()}return bytesRead},write(stream,buffer,offset,length,pos){for(var i=0;i<length;i++){try{output(buffer[offset+i])}catch(e){throw new FS.ErrnoError(29)}}if(length){stream.node.mtime=stream.node.ctime=Date.now()}return i}});return FS.mkdev(path,mode,dev)},forceLoadFile(obj){if(obj.isDevice||obj.isFolder||obj.link||obj.contents)return true;dbg(`forceLoadFile: ${obj.url}`);if(typeof XMLHttpRequest!="undefined"){throw new Error("Lazy loading should have been performed (contents set) in createLazyFile, but it was not. Lazy loading only works in web workers. Use --embed-file or --preload-file in emcc on the main thread.")}else{try{obj.contents=readBinary(obj.url);obj.usedBytes=obj.contents.length}catch(e){throw new FS.ErrnoError(29)}}},createLazyFile(parent,name,url,canRead,canWrite){class LazyUint8Array{lengthKnown=false;chunks=[];get(idx){if(idx>this.length-1||idx<0){return undefined}var chunkOffset=idx%this.chunkSize;var chunkNum=idx/this.chunkSize|0;return this.getter(chunkNum)[chunkOffset]}setDataGetter(getter){this.getter=getter}cacheLength(){var xhr=new XMLHttpRequest;xhr.open("HEAD",url,false);xhr.send(null);if(!(xhr.status>=200&&xhr.status<300||xhr.status===304))throw new Error("Couldn't load "+url+". Status: "+xhr.status);var datalength=Number(xhr.getResponseHeader("Content-length"));var header;var hasByteServing=(header=xhr.getResponseHeader("Accept-Ranges"))&&header==="bytes";var usesGzip=(header=xhr.getResponseHeader("Content-Encoding"))&&header==="gzip";var chunkSize=1024*1024;if(!hasByteServing)chunkSize=datalength;var doXHR=(from,to)=>{if(from>to)throw new Error("invalid range ("+from+", "+to+") or no bytes requested!");if(to>datalength-1)throw new Error("only "+datalength+" bytes available! programmer error!");var xhr=new XMLHttpRequest;xhr.open("GET",url,false);if(datalength!==chunkSize)xhr.setRequestHeader("Range","bytes="+from+"-"+to);xhr.responseType="arraybuffer";if(xhr.overrideMimeType){xhr.overrideMimeType("text/plain; charset=x-user-defined")}xhr.send(null);if(!(xhr.status>=200&&xhr.status<300||xhr.status===304))throw new Error("Couldn't load "+url+". Status: "+xhr.status);if(xhr.response!==undefined){return new Uint8Array(xhr.response||[])}return intArrayFromString(xhr.responseText||"",true)};var lazyArray=this;lazyArray.setDataGetter(chunkNum=>{var start=chunkNum*chunkSize;var end=(chunkNum+1)*chunkSize-1;end=Math.min(end,datalength-1);if(typeof lazyArray.chunks[chunkNum]=="undefined"){lazyArray.chunks[chunkNum]=doXHR(start,end)}if(typeof lazyArray.chunks[chunkNum]=="undefined")throw new Error("doXHR failed!");return lazyArray.chunks[chunkNum]});if(usesGzip||!datalength){chunkSize=datalength=1;datalength=this.getter(0).length;chunkSize=datalength;out("LazyFiles on gzip forces download of the whole file when length is accessed")}this._length=datalength;this._chunkSize=chunkSize;this.lengthKnown=true}get length(){if(!this.lengthKnown){this.cacheLength()}return this._length}get chunkSize(){if(!this.lengthKnown){this.cacheLength()}return this._chunkSize}}if(typeof XMLHttpRequest!="undefined"){if(!ENVIRONMENT_IS_WORKER)throw"Cannot do synchronous binary XHRs outside webworkers in modern browsers. Use --embed-file or --preload-file in emcc";var lazyArray=new LazyUint8Array;var properties={isDevice:false,contents:lazyArray}}else{var properties={isDevice:false,url}}var node=FS.createFile(parent,name,properties,canRead,canWrite);if(properties.contents){node.contents=properties.contents}else if(properties.url){node.contents=null;node.url=properties.url}Object.defineProperties(node,{usedBytes:{get:function(){return this.contents.length}}});var stream_ops={};var keys=Object.keys(node.stream_ops);keys.forEach(key=>{var fn=node.stream_ops[key];stream_ops[key]=(...args)=>{FS.forceLoadFile(node);return fn(...args)}});function writeChunks(stream,buffer,offset,length,position){var contents=stream.node.contents;if(position>=contents.length)return 0;var size=Math.min(contents.length-position,length);if(contents.slice){for(var i=0;i<size;i++){buffer[offset+i]=contents[position+i]}}else{for(var i=0;i<size;i++){buffer[offset+i]=contents.get(position+i)}}return size}stream_ops.read=(stream,buffer,offset,length,position)=>{FS.forceLoadFile(node);return writeChunks(stream,buffer,offset,length,position)};stream_ops.mmap=(stream,length,position,prot,flags)=>{FS.forceLoadFile(node);var ptr=mmapAlloc(length);if(!ptr){throw new FS.ErrnoError(48)}writeChunks(stream,HEAP8,ptr,length,position);return{ptr,allocated:true}};node.stream_ops=stream_ops;return node}};var findLibraryFS=(libName,rpath)=>{if(!runtimeInitialized){return undefined}if(PATH.isAbs(libName)){try{FS.lookupPath(libName);return libName}catch(e){return undefined}}var rpathResolved=(rpath?.paths||[]).map(p=>replaceORIGIN(rpath?.parentLibPath,p));return withStackSave(()=>{var bufSize=2*255+2;var buf=stackAlloc(bufSize);var rpathC=stringToUTF8OnStack(rpathResolved.join(":"));var libNameC=stringToUTF8OnStack(libName);var resLibNameC=__emscripten_find_dylib(buf,rpathC,libNameC,bufSize);return resLibNameC?UTF8ToString(resLibNameC):undefined})};function loadDynamicLibrary(libName,flags={global:true,nodelete:true},localScope,handle){var dso=LDSO.loadedLibsByName[libName];if(dso){if(!flags.global){if(localScope){Object.assign(localScope,dso.exports)}}else if(!dso.global){dso.global=true;mergeLibSymbols(dso.exports,libName)}if(flags.nodelete&&dso.refcount!==Infinity){dso.refcount=Infinity}dso.refcount++;if(handle){LDSO.loadedLibsByHandle[handle]=dso}return flags.loadAsync?Promise.resolve(true):true}dso=newDSO(libName,handle,"loading");dso.refcount=flags.nodelete?Infinity:1;dso.global=flags.global;function loadLibData(){if(handle){var data=HEAPU32[handle+28>>>2>>>0];var dataSize=HEAPU32[handle+32>>>2>>>0];if(data&&dataSize){var libData=HEAP8.slice(data,data+dataSize);return flags.loadAsync?Promise.resolve(libData):libData}}var f=findLibraryFS(libName,flags.rpath);if(f){var libData=FS.readFile(f,{encoding:"binary"});return flags.loadAsync?Promise.resolve(libData):libData}var libFile=locateFile(libName);if(flags.loadAsync){return asyncLoad(libFile)}if(!readBinary){throw new Error(`${libFile}: file not found, and synchronous loading of external files is not available`)}return readBinary(libFile)}function getExports(){var preloaded=preloadedWasm[libName];if(preloaded){return flags.loadAsync?Promise.resolve(preloaded):preloaded}if(flags.loadAsync){return loadLibData().then(libData=>loadWebAssemblyModule(libData,flags,libName,localScope,handle))}return loadWebAssemblyModule(loadLibData(),flags,libName,localScope,handle)}function moduleLoaded(exports){if(dso.global){mergeLibSymbols(exports,libName)}else if(localScope){Object.assign(localScope,exports)}dso.exports=exports}if(flags.loadAsync){return getExports().then(exports=>{moduleLoaded(exports);return true})}moduleLoaded(getExports());return true}var reportUndefinedSymbols=()=>{for(var[symName,entry]of Object.entries(GOT)){if(entry.value==0){var value=resolveGlobalSymbol(symName,true).sym;if(!value&&!entry.required){continue}if(typeof value=="function"){entry.value=addFunction(value,value.sig)}else if(typeof value=="number"){entry.value=value}else{throw new Error(`bad export type for '${symName}': ${typeof value}`)}}}};var loadDylibs=()=>{if(!dynamicLibraries.length){reportUndefinedSymbols();return}addRunDependency("loadDylibs");dynamicLibraries.reduce((chain,lib)=>chain.then(()=>loadDynamicLibrary(lib,{loadAsync:true,global:true,nodelete:true,allowUndefined:true})),Promise.resolve()).then(()=>{reportUndefinedSymbols();removeRunDependency("loadDylibs")})};var noExitRuntime=false;function setValue(ptr,value,type="i8"){if(type.endsWith("*"))type="*";switch(type){case"i1":HEAP8[ptr>>>0]=value;break;case"i8":HEAP8[ptr>>>0]=value;break;case"i16":HEAP16[ptr>>>1>>>0]=value;break;case"i32":HEAP32[ptr>>>2>>>0]=value;break;case"i64":HEAP64[ptr>>>3>>>0]=BigInt(value);break;case"float":HEAPF32[ptr>>>2>>>0]=value;break;case"double":HEAPF64[ptr>>>3>>>0]=value;break;case"*":HEAPU32[ptr>>>2>>>0]=value;break;default:abort(`invalid type for setValue: ${type}`)}}var INT53_MAX=9007199254740992;var INT53_MIN=-9007199254740992;var bigintToI53Checked=num=>num<INT53_MIN||num>INT53_MAX?NaN:Number(num);function ___assert_fail(condition,filename,line,func){condition>>>=0;filename>>>=0;func>>>=0;return abort(`Assertion failed: ${UTF8ToString(condition)}, at: `+[filename?UTF8ToString(filename):"unknown filename",line,func?UTF8ToString(func):"unknown function"])}___assert_fail.sig="vppip";var ___c_longjmp=new WebAssembly.Tag({parameters:["i32"]});function ___call_sighandler(fp,sig){fp>>>=0;return getWasmTableEntry(fp)(sig)}___call_sighandler.sig="vpi";var ___cpp_exception=new WebAssembly.Tag({parameters:["i32"]});var ___memory_base=new WebAssembly.Global({value:"i32",mutable:false},1024);var ___stack_high=8810528;var ___stack_low=3567648;var ___stack_pointer=new WebAssembly.Global({value:"i32",mutable:true},8810528);var SYSCALLS={DEFAULT_POLLMASK:5,calculateAt(dirfd,path,allowEmpty){if(PATH.isAbs(path)){return path}var dir;if(dirfd===-100){dir=FS.cwd()}else{var dirstream=SYSCALLS.getStreamFromFD(dirfd);dir=dirstream.path}if(path.length==0){if(!allowEmpty){throw new FS.ErrnoError(44)}return dir}return dir+"/"+path},writeStat(buf,stat){HEAP32[buf>>>2>>>0]=stat.dev;HEAP32[buf+4>>>2>>>0]=stat.mode;HEAPU32[buf+8>>>2>>>0]=stat.nlink;HEAP32[buf+12>>>2>>>0]=stat.uid;HEAP32[buf+16>>>2>>>0]=stat.gid;HEAP32[buf+20>>>2>>>0]=stat.rdev;HEAP64[buf+24>>>3>>>0]=BigInt(stat.size);HEAP32[buf+32>>>2>>>0]=4096;HEAP32[buf+36>>>2>>>0]=stat.blocks;var atime=stat.atime.getTime();var mtime=stat.mtime.getTime();var ctime=stat.ctime.getTime();HEAP64[buf+40>>>3>>>0]=BigInt(Math.floor(atime/1e3));HEAPU32[buf+48>>>2>>>0]=atime%1e3*1e3*1e3;HEAP64[buf+56>>>3>>>0]=BigInt(Math.floor(mtime/1e3));HEAPU32[buf+64>>>2>>>0]=mtime%1e3*1e3*1e3;HEAP64[buf+72>>>3>>>0]=BigInt(Math.floor(ctime/1e3));HEAPU32[buf+80>>>2>>>0]=ctime%1e3*1e3*1e3;HEAP64[buf+88>>>3>>>0]=BigInt(stat.ino);return 0},writeStatFs(buf,stats){HEAP32[buf+4>>>2>>>0]=stats.bsize;HEAP32[buf+40>>>2>>>0]=stats.bsize;HEAP32[buf+8>>>2>>>0]=stats.blocks;HEAP32[buf+12>>>2>>>0]=stats.bfree;HEAP32[buf+16>>>2>>>0]=stats.bavail;HEAP32[buf+20>>>2>>>0]=stats.files;HEAP32[buf+24>>>2>>>0]=stats.ffree;HEAP32[buf+28>>>2>>>0]=stats.fsid;HEAP32[buf+44>>>2>>>0]=stats.flags;HEAP32[buf+36>>>2>>>0]=stats.namelen},doMsync(addr,stream,len,flags,offset){if(!FS.isFile(stream.node.mode)){throw new FS.ErrnoError(43)}if(flags&2){return 0}var buffer=HEAPU8.slice(addr,addr+len);FS.msync(stream,buffer,offset,len,flags)},getStreamFromFD(fd){var stream=FS.getStreamChecked(fd);return stream},varargs:undefined,getStr(ptr){var ret=UTF8ToString(ptr);return ret}};var ___syscall__newselect=function(nfds,readfds,writefds,exceptfds,timeout){readfds>>>=0;writefds>>>=0;exceptfds>>>=0;timeout>>>=0;try{var total=0;var srcReadLow=readfds?HEAP32[readfds>>>2>>>0]:0,srcReadHigh=readfds?HEAP32[readfds+4>>>2>>>0]:0;var srcWriteLow=writefds?HEAP32[writefds>>>2>>>0]:0,srcWriteHigh=writefds?HEAP32[writefds+4>>>2>>>0]:0;var srcExceptLow=exceptfds?HEAP32[exceptfds>>>2>>>0]:0,srcExceptHigh=exceptfds?HEAP32[exceptfds+4>>>2>>>0]:0;var dstReadLow=0,dstReadHigh=0;var dstWriteLow=0,dstWriteHigh=0;var dstExceptLow=0,dstExceptHigh=0;var allLow=(readfds?HEAP32[readfds>>>2>>>0]:0)|(writefds?HEAP32[writefds>>>2>>>0]:0)|(exceptfds?HEAP32[exceptfds>>>2>>>0]:0);var allHigh=(readfds?HEAP32[readfds+4>>>2>>>0]:0)|(writefds?HEAP32[writefds+4>>>2>>>0]:0)|(exceptfds?HEAP32[exceptfds+4>>>2>>>0]:0);var check=(fd,low,high,val)=>fd<32?low&val:high&val;for(var fd=0;fd<nfds;fd++){var mask=1<<fd%32;if(!check(fd,allLow,allHigh,mask)){continue}var stream=SYSCALLS.getStreamFromFD(fd);var flags=SYSCALLS.DEFAULT_POLLMASK;if(stream.stream_ops.poll){var timeoutInMillis=-1;if(timeout){var tv_sec=readfds?HEAP32[timeout>>>2>>>0]:0,tv_usec=readfds?HEAP32[timeout+4>>>2>>>0]:0;timeoutInMillis=(tv_sec+tv_usec/1e6)*1e3}flags=stream.stream_ops.poll(stream,timeoutInMillis)}if(flags&1&&check(fd,srcReadLow,srcReadHigh,mask)){fd<32?dstReadLow=dstReadLow|mask:dstReadHigh=dstReadHigh|mask;total++}if(flags&4&&check(fd,srcWriteLow,srcWriteHigh,mask)){fd<32?dstWriteLow=dstWriteLow|mask:dstWriteHigh=dstWriteHigh|mask;total++}if(flags&2&&check(fd,srcExceptLow,srcExceptHigh,mask)){fd<32?dstExceptLow=dstExceptLow|mask:dstExceptHigh=dstExceptHigh|mask;total++}}if(readfds){HEAP32[readfds>>>2>>>0]=dstReadLow;HEAP32[readfds+4>>>2>>>0]=dstReadHigh}if(writefds){HEAP32[writefds>>>2>>>0]=dstWriteLow;HEAP32[writefds+4>>>2>>>0]=dstWriteHigh}if(exceptfds){HEAP32[exceptfds>>>2>>>0]=dstExceptLow;HEAP32[exceptfds+4>>>2>>>0]=dstExceptHigh}return total}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}};___syscall__newselect.sig="iipppp";var SOCKFS={websocketArgs:{},callbacks:{},on(event,callback){SOCKFS.callbacks[event]=callback},emit(event,param){SOCKFS.callbacks[event]?.(param)},mount(mount){SOCKFS.websocketArgs=Module["websocket"]||{};(Module["websocket"]??={})["on"]=SOCKFS.on;return FS.createNode(null,"/",16895,0)},createSocket(family,type,protocol){type&=~526336;var streaming=type==1;if(streaming&&protocol&&protocol!=6){throw new FS.ErrnoError(66)}var sock={family,type,protocol,server:null,error:null,peers:{},pending:[],recv_queue:[],sock_ops:SOCKFS.websocket_sock_ops};var name=SOCKFS.nextname();var node=FS.createNode(SOCKFS.root,name,49152,0);node.sock=sock;var stream=FS.createStream({path:name,node,flags:2,seekable:false,stream_ops:SOCKFS.stream_ops});sock.stream=stream;return sock},getSocket(fd){var stream=FS.getStream(fd);if(!stream||!FS.isSocket(stream.node.mode)){return null}return stream.node.sock},stream_ops:{poll(stream){var sock=stream.node.sock;return sock.sock_ops.poll(sock)},ioctl(stream,request,varargs){var sock=stream.node.sock;return sock.sock_ops.ioctl(sock,request,varargs)},read(stream,buffer,offset,length,position){var sock=stream.node.sock;var msg=sock.sock_ops.recvmsg(sock,length);if(!msg){return 0}buffer.set(msg.buffer,offset);return msg.buffer.length},write(stream,buffer,offset,length,position){var sock=stream.node.sock;return sock.sock_ops.sendmsg(sock,buffer,offset,length)},close(stream){var sock=stream.node.sock;sock.sock_ops.close(sock)}},nextname(){if(!SOCKFS.nextname.current){SOCKFS.nextname.current=0}return`socket[${SOCKFS.nextname.current++}]`},websocket_sock_ops:{createPeer(sock,addr,port){var ws;if(typeof addr=="object"){ws=addr;addr=null;port=null}if(ws){if(ws._socket){addr=ws._socket.remoteAddress;port=ws._socket.remotePort}else{var result=/ws[s]?:\/\/([^:]+):(\d+)/.exec(ws.url);if(!result){throw new Error("WebSocket URL must be in the format ws(s)://address:port")}addr=result[1];port=parseInt(result[2],10)}}else{try{var url="ws://".replace("#","//");var subProtocols="binary";var opts=undefined;if(SOCKFS.websocketArgs["url"]){url=SOCKFS.websocketArgs["url"]}if(SOCKFS.websocketArgs["subprotocol"]){subProtocols=SOCKFS.websocketArgs["subprotocol"]}else if(SOCKFS.websocketArgs["subprotocol"]===null){subProtocols="null"}if(url==="ws://"||url==="wss://"){var parts=addr.split("/");url=url+parts[0]+":"+port+"/"+parts.slice(1).join("/")}if(subProtocols!=="null"){subProtocols=subProtocols.replace(/^ +| +$/g,"").split(/ *, */);opts=subProtocols}var WebSocketConstructor;if(ENVIRONMENT_IS_NODE){WebSocketConstructor=require("ws")}else{WebSocketConstructor=WebSocket}ws=new WebSocketConstructor(url,opts);ws.binaryType="arraybuffer"}catch(e){throw new FS.ErrnoError(23)}}var peer={addr,port,socket:ws,msg_send_queue:[]};SOCKFS.websocket_sock_ops.addPeer(sock,peer);SOCKFS.websocket_sock_ops.handlePeerEvents(sock,peer);if(sock.type===2&&typeof sock.sport!="undefined"){peer.msg_send_queue.push(new Uint8Array([255,255,255,255,"p".charCodeAt(0),"o".charCodeAt(0),"r".charCodeAt(0),"t".charCodeAt(0),(sock.sport&65280)>>8,sock.sport&255]))}return peer},getPeer(sock,addr,port){return sock.peers[addr+":"+port]},addPeer(sock,peer){sock.peers[peer.addr+":"+peer.port]=peer},removePeer(sock,peer){delete sock.peers[peer.addr+":"+peer.port]},handlePeerEvents(sock,peer){var first=true;var handleOpen=function(){sock.connecting=false;SOCKFS.emit("open",sock.stream.fd);try{var queued=peer.msg_send_queue.shift();while(queued){peer.socket.send(queued);queued=peer.msg_send_queue.shift()}}catch(e){peer.socket.close()}};function handleMessage(data){if(typeof data=="string"){var encoder=new TextEncoder;data=encoder.encode(data)}else{assert(data.byteLength!==undefined);if(data.byteLength==0){return}data=new Uint8Array(data)}var wasfirst=first;first=false;if(wasfirst&&data.length===10&&data[0]===255&&data[1]===255&&data[2]===255&&data[3]===255&&data[4]==="p".charCodeAt(0)&&data[5]==="o".charCodeAt(0)&&data[6]==="r".charCodeAt(0)&&data[7]==="t".charCodeAt(0)){var newport=data[8]<<8|data[9];SOCKFS.websocket_sock_ops.removePeer(sock,peer);peer.port=newport;SOCKFS.websocket_sock_ops.addPeer(sock,peer);return}sock.recv_queue.push({addr:peer.addr,port:peer.port,data});SOCKFS.emit("message",sock.stream.fd)}if(ENVIRONMENT_IS_NODE){peer.socket.on("open",handleOpen);peer.socket.on("message",function(data,isBinary){if(!isBinary){return}handleMessage(new Uint8Array(data).buffer)});peer.socket.on("close",function(){SOCKFS.emit("close",sock.stream.fd)});peer.socket.on("error",function(error){sock.error=14;SOCKFS.emit("error",[sock.stream.fd,sock.error,"ECONNREFUSED: Connection refused"])})}else{peer.socket.onopen=handleOpen;peer.socket.onclose=function(){SOCKFS.emit("close",sock.stream.fd)};peer.socket.onmessage=function peer_socket_onmessage(event){handleMessage(event.data)};peer.socket.onerror=function(error){sock.error=14;SOCKFS.emit("error",[sock.stream.fd,sock.error,"ECONNREFUSED: Connection refused"])}}},poll(sock){if(sock.type===1&&sock.server){return sock.pending.length?64|1:0}var mask=0;var dest=sock.type===1?SOCKFS.websocket_sock_ops.getPeer(sock,sock.daddr,sock.dport):null;if(sock.recv_queue.length||!dest||dest&&dest.socket.readyState===dest.socket.CLOSING||dest&&dest.socket.readyState===dest.socket.CLOSED){mask|=64|1}if(!dest||dest&&dest.socket.readyState===dest.socket.OPEN){mask|=4}if(dest&&dest.socket.readyState===dest.socket.CLOSING||dest&&dest.socket.readyState===dest.socket.CLOSED){if(sock.connecting){mask|=4}else{mask|=16}}return mask},ioctl(sock,request,arg){switch(request){case 21531:var bytes=0;if(sock.recv_queue.length){bytes=sock.recv_queue[0].data.length}HEAP32[arg>>>2>>>0]=bytes;return 0;default:return 28}},close(sock){if(sock.server){try{sock.server.close()}catch(e){}sock.server=null}for(var peer of Object.values(sock.peers)){try{peer.socket.close()}catch(e){}SOCKFS.websocket_sock_ops.removePeer(sock,peer)}return 0},bind(sock,addr,port){if(typeof sock.saddr!="undefined"||typeof sock.sport!="undefined"){throw new FS.ErrnoError(28)}sock.saddr=addr;sock.sport=port;if(sock.type===2){if(sock.server){sock.server.close();sock.server=null}try{sock.sock_ops.listen(sock,0)}catch(e){if(!(e.name==="ErrnoError"))throw e;if(e.errno!==138)throw e}}},connect(sock,addr,port){if(sock.server){throw new FS.ErrnoError(138)}if(typeof sock.daddr!="undefined"&&typeof sock.dport!="undefined"){var dest=SOCKFS.websocket_sock_ops.getPeer(sock,sock.daddr,sock.dport);if(dest){if(dest.socket.readyState===dest.socket.CONNECTING){throw new FS.ErrnoError(7)}else{throw new FS.ErrnoError(30)}}}var peer=SOCKFS.websocket_sock_ops.createPeer(sock,addr,port);sock.daddr=peer.addr;sock.dport=peer.port;sock.connecting=true},listen(sock,backlog){if(!ENVIRONMENT_IS_NODE){throw new FS.ErrnoError(138)}if(sock.server){throw new FS.ErrnoError(28)}var WebSocketServer=require("ws").Server;var host=sock.saddr;sock.server=new WebSocketServer({host,port:sock.sport});SOCKFS.emit("listen",sock.stream.fd);sock.server.on("connection",function(ws){if(sock.type===1){var newsock=SOCKFS.createSocket(sock.family,sock.type,sock.protocol);var peer=SOCKFS.websocket_sock_ops.createPeer(newsock,ws);newsock.daddr=peer.addr;newsock.dport=peer.port;sock.pending.push(newsock);SOCKFS.emit("connection",newsock.stream.fd)}else{SOCKFS.websocket_sock_ops.createPeer(sock,ws);SOCKFS.emit("connection",sock.stream.fd)}});sock.server.on("close",function(){SOCKFS.emit("close",sock.stream.fd);sock.server=null});sock.server.on("error",function(error){sock.error=23;SOCKFS.emit("error",[sock.stream.fd,sock.error,"EHOSTUNREACH: Host is unreachable"])})},accept(listensock){if(!listensock.server||!listensock.pending.length){throw new FS.ErrnoError(28)}var newsock=listensock.pending.shift();newsock.stream.flags=listensock.stream.flags;return newsock},getname(sock,peer){var addr,port;if(peer){if(sock.daddr===undefined||sock.dport===undefined){throw new FS.ErrnoError(53)}addr=sock.daddr;port=sock.dport}else{addr=sock.saddr||0;port=sock.sport||0}return{addr,port}},sendmsg(sock,buffer,offset,length,addr,port){if(sock.type===2){if(addr===undefined||port===undefined){addr=sock.daddr;port=sock.dport}if(addr===undefined||port===undefined){throw new FS.ErrnoError(17)}}else{addr=sock.daddr;port=sock.dport}var dest=SOCKFS.websocket_sock_ops.getPeer(sock,addr,port);if(sock.type===1){if(!dest||dest.socket.readyState===dest.socket.CLOSING||dest.socket.readyState===dest.socket.CLOSED){throw new FS.ErrnoError(53)}}if(ArrayBuffer.isView(buffer)){offset+=buffer.byteOffset;buffer=buffer.buffer}var data=buffer.slice(offset,offset+length);if(!dest||dest.socket.readyState!==dest.socket.OPEN){if(sock.type===2){if(!dest||dest.socket.readyState===dest.socket.CLOSING||dest.socket.readyState===dest.socket.CLOSED){dest=SOCKFS.websocket_sock_ops.createPeer(sock,addr,port)}}dest.msg_send_queue.push(data);return length}try{dest.socket.send(data);return length}catch(e){throw new FS.ErrnoError(28)}},recvmsg(sock,length){if(sock.type===1&&sock.server){throw new FS.ErrnoError(53)}var queued=sock.recv_queue.shift();if(!queued){if(sock.type===1){var dest=SOCKFS.websocket_sock_ops.getPeer(sock,sock.daddr,sock.dport);if(!dest){throw new FS.ErrnoError(53)}if(dest.socket.readyState===dest.socket.CLOSING||dest.socket.readyState===dest.socket.CLOSED){return null}throw new FS.ErrnoError(6)}throw new FS.ErrnoError(6)}var queuedLength=queued.data.byteLength||queued.data.length;var queuedOffset=queued.data.byteOffset||0;var queuedBuffer=queued.data.buffer||queued.data;var bytesRead=Math.min(length,queuedLength);var res={buffer:new Uint8Array(queuedBuffer,queuedOffset,bytesRead),addr:queued.addr,port:queued.port};if(sock.type===1&&bytesRead<queuedLength){var bytesRemaining=queuedLength-bytesRead;queued.data=new Uint8Array(queuedBuffer,queuedOffset+bytesRead,bytesRemaining);sock.recv_queue.unshift(queued)}return res}}};var getSocketFromFD=fd=>{var socket=SOCKFS.getSocket(fd);if(!socket)throw new FS.ErrnoError(8);return socket};var inetPton4=str=>{var b=str.split(".");for(var i=0;i<4;i++){var tmp=Number(b[i]);if(isNaN(tmp))return null;b[i]=tmp}return(b[0]|b[1]<<8|b[2]<<16|b[3]<<24)>>>0};var inetPton6=str=>{var words;var w,offset,z,i;var valid6regx=/^((?=.*::)(?!.*::.+::)(::)?([\dA-F]{1,4}:(:|\b)|){5}|([\dA-F]{1,4}:){6})((([\dA-F]{1,4}((?!\3)::|:\b|$))|(?!\2\3)){2}|(((2[0-4]|1\d|[1-9])?\d|25[0-5])\.?\b){4})$/i;var parts=[];if(!valid6regx.test(str)){return null}if(str==="::"){return[0,0,0,0,0,0,0,0]}if(str.startsWith("::")){str=str.replace("::","Z:")}else{str=str.replace("::",":Z:")}if(str.indexOf(".")>0){str=str.replace(new RegExp("[.]","g"),":");words=str.split(":");words[words.length-4]=Number(words[words.length-4])+Number(words[words.length-3])*256;words[words.length-3]=Number(words[words.length-2])+Number(words[words.length-1])*256;words=words.slice(0,words.length-2)}else{words=str.split(":")}offset=0;z=0;for(w=0;w<words.length;w++){if(typeof words[w]=="string"){if(words[w]==="Z"){for(z=0;z<8-words.length+1;z++){parts[w+z]=0}offset=z-1}else{parts[w+offset]=_htons(parseInt(words[w],16))}}else{parts[w+offset]=words[w]}}return[parts[1]<<16|parts[0],parts[3]<<16|parts[2],parts[5]<<16|parts[4],parts[7]<<16|parts[6]]};var writeSockaddr=(sa,family,addr,port,addrlen)=>{switch(family){case 2:addr=inetPton4(addr);zeroMemory(sa,16);if(addrlen){HEAP32[addrlen>>>2>>>0]=16}HEAP16[sa>>>1>>>0]=family;HEAP32[sa+4>>>2>>>0]=addr;HEAP16[sa+2>>>1>>>0]=_htons(port);break;case 10:addr=inetPton6(addr);zeroMemory(sa,28);if(addrlen){HEAP32[addrlen>>>2>>>0]=28}HEAP32[sa>>>2>>>0]=family;HEAP32[sa+8>>>2>>>0]=addr[0];HEAP32[sa+12>>>2>>>0]=addr[1];HEAP32[sa+16>>>2>>>0]=addr[2];HEAP32[sa+20>>>2>>>0]=addr[3];HEAP16[sa+2>>>1>>>0]=_htons(port);break;default:return 5}return 0};var DNS={address_map:{id:1,addrs:{},names:{}},lookup_name(name){var res=inetPton4(name);if(res!==null){return name}res=inetPton6(name);if(res!==null){return name}var addr;if(DNS.address_map.addrs[name]){addr=DNS.address_map.addrs[name]}else{var id=DNS.address_map.id++;assert(id<65535,"exceeded max address mappings of 65535");addr="172.29."+(id&255)+"."+(id&65280);DNS.address_map.names[addr]=name;DNS.address_map.addrs[name]=addr}return addr},lookup_addr(addr){if(DNS.address_map.names[addr]){return DNS.address_map.names[addr]}return null}};function ___syscall_accept4(fd,addr,addrlen,flags,d1,d2){addr>>>=0;addrlen>>>=0;try{var sock=getSocketFromFD(fd);var newsock=sock.sock_ops.accept(sock);if(addr){var errno=writeSockaddr(addr,newsock.family,DNS.lookup_name(newsock.daddr),newsock.dport,addrlen)}return newsock.stream.fd}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_accept4.sig="iippiii";var inetNtop4=addr=>(addr&255)+"."+(addr>>8&255)+"."+(addr>>16&255)+"."+(addr>>24&255);var inetNtop6=ints=>{var str="";var word=0;var longest=0;var lastzero=0;var zstart=0;var len=0;var i=0;var parts=[ints[0]&65535,ints[0]>>16,ints[1]&65535,ints[1]>>16,ints[2]&65535,ints[2]>>16,ints[3]&65535,ints[3]>>16];var hasipv4=true;var v4part="";for(i=0;i<5;i++){if(parts[i]!==0){hasipv4=false;break}}if(hasipv4){v4part=inetNtop4(parts[6]|parts[7]<<16);if(parts[5]===-1){str="::ffff:";str+=v4part;return str}if(parts[5]===0){str="::";if(v4part==="0.0.0.0")v4part="";if(v4part==="0.0.0.1")v4part="1";str+=v4part;return str}}for(word=0;word<8;word++){if(parts[word]===0){if(word-lastzero>1){len=0}lastzero=word;len++}if(len>longest){longest=len;zstart=word-longest+1}}for(word=0;word<8;word++){if(longest>1){if(parts[word]===0&&word>=zstart&&word<zstart+longest){if(word===zstart){str+=":";if(zstart===0)str+=":"}continue}}str+=Number(_ntohs(parts[word]&65535)).toString(16);str+=word<7?":":""}return str};var readSockaddr=(sa,salen)=>{var family=HEAP16[sa>>>1>>>0];var port=_ntohs(HEAPU16[sa+2>>>1>>>0]);var addr;switch(family){case 2:if(salen!==16){return{errno:28}}addr=HEAP32[sa+4>>>2>>>0];addr=inetNtop4(addr);break;case 10:if(salen!==28){return{errno:28}}addr=[HEAP32[sa+8>>>2>>>0],HEAP32[sa+12>>>2>>>0],HEAP32[sa+16>>>2>>>0],HEAP32[sa+20>>>2>>>0]];addr=inetNtop6(addr);break;default:return{errno:5}}return{family,addr,port}};var getSocketAddress=(addrp,addrlen)=>{var info=readSockaddr(addrp,addrlen);if(info.errno)throw new FS.ErrnoError(info.errno);info.addr=DNS.lookup_addr(info.addr)||info.addr;return info};function ___syscall_bind(fd,addr,addrlen,d1,d2,d3){addr>>>=0;addrlen>>>=0;try{var sock=getSocketFromFD(fd);var info=getSocketAddress(addr,addrlen);sock.sock_ops.bind(sock,info.addr,info.port);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_bind.sig="iippiii";function ___syscall_chdir(path){path>>>=0;try{path=SYSCALLS.getStr(path);FS.chdir(path);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_chdir.sig="ip";function ___syscall_chmod(path,mode){path>>>=0;try{path=SYSCALLS.getStr(path);FS.chmod(path,mode);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_chmod.sig="ipi";function ___syscall_connect(fd,addr,addrlen,d1,d2,d3){addr>>>=0;addrlen>>>=0;try{var sock=getSocketFromFD(fd);var info=getSocketAddress(addr,addrlen);sock.sock_ops.connect(sock,info.addr,info.port);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_connect.sig="iippiii";function ___syscall_dup(fd){try{var old=SYSCALLS.getStreamFromFD(fd);return FS.dupStream(old).fd}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_dup.sig="ii";function ___syscall_dup3(fd,newfd,flags){try{var old=SYSCALLS.getStreamFromFD(fd);if(old.fd===newfd)return-28;if(newfd<0||newfd>=FS.MAX_OPEN_FDS)return-8;var existing=FS.getStream(newfd);if(existing)FS.close(existing);return FS.dupStream(old,newfd).fd}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_dup3.sig="iiii";function ___syscall_faccessat(dirfd,path,amode,flags){path>>>=0;try{path=SYSCALLS.getStr(path);path=SYSCALLS.calculateAt(dirfd,path);if(amode&~7){return-28}var lookup=FS.lookupPath(path,{follow:true});var node=lookup.node;if(!node){return-44}var perms="";if(amode&4)perms+="r";if(amode&2)perms+="w";if(amode&1)perms+="x";if(perms&&FS.nodePermissions(node,perms)){return-2}return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_faccessat.sig="iipii";var ___syscall_fadvise64=(fd,offset,len,advice)=>0;___syscall_fadvise64.sig="iijji";function ___syscall_fallocate(fd,mode,offset,len){offset=bigintToI53Checked(offset);len=bigintToI53Checked(len);try{if(isNaN(offset)||isNaN(len))return-61;if(mode!=0){return-138}if(offset<0||len<0){return-28}var oldSize=FS.fstat(fd).size;var newSize=offset+len;if(newSize>oldSize){FS.ftruncate(fd,newSize)}return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_fallocate.sig="iiijj";function ___syscall_fchdir(fd){try{var stream=SYSCALLS.getStreamFromFD(fd);FS.chdir(stream.path);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_fchdir.sig="ii";function ___syscall_fchmod(fd,mode){try{FS.fchmod(fd,mode);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_fchmod.sig="iii";function ___syscall_fchmodat2(dirfd,path,mode,flags){path>>>=0;try{var nofollow=flags&256;path=SYSCALLS.getStr(path);path=SYSCALLS.calculateAt(dirfd,path);FS.chmod(path,mode,nofollow);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_fchmodat2.sig="iipii";function ___syscall_fchown32(fd,owner,group){try{FS.fchown(fd,owner,group);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_fchown32.sig="iiii";function ___syscall_fchownat(dirfd,path,owner,group,flags){path>>>=0;try{path=SYSCALLS.getStr(path);var nofollow=flags&256;flags=flags&~256;path=SYSCALLS.calculateAt(dirfd,path);(nofollow?FS.lchown:FS.chown)(path,owner,group);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_fchownat.sig="iipiii";var syscallGetVarargI=()=>{var ret=HEAP32[+SYSCALLS.varargs>>>2>>>0];SYSCALLS.varargs+=4;return ret};var syscallGetVarargP=syscallGetVarargI;function ___syscall_fcntl64(fd,cmd,varargs){varargs>>>=0;SYSCALLS.varargs=varargs;try{var stream=SYSCALLS.getStreamFromFD(fd);switch(cmd){case 0:{var arg=syscallGetVarargI();if(arg<0){return-28}while(FS.streams[arg]){arg++}var newStream;newStream=FS.dupStream(stream,arg);return newStream.fd}case 1:case 2:return 0;case 3:return stream.flags;case 4:{var arg=syscallGetVarargI();stream.flags|=arg;return 0}case 12:{var arg=syscallGetVarargP();var offset=0;HEAP16[arg+offset>>>1>>>0]=2;return 0}case 13:case 14:return 0}return-28}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_fcntl64.sig="iiip";function ___syscall_fdatasync(fd){try{var stream=SYSCALLS.getStreamFromFD(fd);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_fdatasync.sig="ii";function ___syscall_fstat64(fd,buf){buf>>>=0;try{return SYSCALLS.writeStat(buf,FS.fstat(fd))}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_fstat64.sig="iip";function ___syscall_fstatfs64(fd,size,buf){size>>>=0;buf>>>=0;try{var stream=SYSCALLS.getStreamFromFD(fd);SYSCALLS.writeStatFs(buf,FS.statfsStream(stream));return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_fstatfs64.sig="iipp";function ___syscall_ftruncate64(fd,length){length=bigintToI53Checked(length);try{if(isNaN(length))return-61;FS.ftruncate(fd,length);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_ftruncate64.sig="iij";function ___syscall_getcwd(buf,size){buf>>>=0;size>>>=0;try{if(size===0)return-28;var cwd=FS.cwd();var cwdLengthInBytes=lengthBytesUTF8(cwd)+1;if(size<cwdLengthInBytes)return-68;stringToUTF8(cwd,buf,size);return cwdLengthInBytes}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_getcwd.sig="ipp";function ___syscall_getdents64(fd,dirp,count){dirp>>>=0;count>>>=0;try{var stream=SYSCALLS.getStreamFromFD(fd);stream.getdents||=FS.readdir(stream.path);var struct_size=280;var pos=0;var off=FS.llseek(stream,0,1);var startIdx=Math.floor(off/struct_size);var endIdx=Math.min(stream.getdents.length,startIdx+Math.floor(count/struct_size));for(var idx=startIdx;idx<endIdx;idx++){var id;var type;var name=stream.getdents[idx];if(name==="."){id=stream.node.id;type=4}else if(name===".."){var lookup=FS.lookupPath(stream.path,{parent:true});id=lookup.node.id;type=4}else{var child;try{child=FS.lookupNode(stream.node,name)}catch(e){if(e?.errno===28){continue}throw e}id=child.id;type=FS.isChrdev(child.mode)?2:FS.isDir(child.mode)?4:FS.isLink(child.mode)?10:8}HEAP64[dirp+pos>>>3>>>0]=BigInt(id);HEAP64[dirp+pos+8>>>3>>>0]=BigInt((idx+1)*struct_size);HEAP16[dirp+pos+16>>>1>>>0]=280;HEAP8[dirp+pos+18>>>0]=type;stringToUTF8(name,dirp+pos+19,256);pos+=struct_size}FS.llseek(stream,idx*struct_size,0);return pos}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_getdents64.sig="iipp";function ___syscall_getpeername(fd,addr,addrlen,d1,d2,d3){addr>>>=0;addrlen>>>=0;try{var sock=getSocketFromFD(fd);if(!sock.daddr){return-53}var errno=writeSockaddr(addr,sock.family,DNS.lookup_name(sock.daddr),sock.dport,addrlen);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_getpeername.sig="iippiii";function ___syscall_getsockname(fd,addr,addrlen,d1,d2,d3){addr>>>=0;addrlen>>>=0;try{var sock=getSocketFromFD(fd);var errno=writeSockaddr(addr,sock.family,DNS.lookup_name(sock.saddr||"0.0.0.0"),sock.sport,addrlen);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_getsockname.sig="iippiii";function ___syscall_getsockopt(fd,level,optname,optval,optlen,d1){optval>>>=0;optlen>>>=0;try{var sock=getSocketFromFD(fd);if(level===1){if(optname===4){HEAP32[optval>>>2>>>0]=sock.error;HEAP32[optlen>>>2>>>0]=4;sock.error=null;return 0}}return-50}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_getsockopt.sig="iiiippi";function ___syscall_ioctl(fd,op,varargs){varargs>>>=0;SYSCALLS.varargs=varargs;try{var stream=SYSCALLS.getStreamFromFD(fd);switch(op){case 21509:{if(!stream.tty)return-59;return 0}case 21505:{if(!stream.tty)return-59;if(stream.tty.ops.ioctl_tcgets){var termios=stream.tty.ops.ioctl_tcgets(stream);var argp=syscallGetVarargP();HEAP32[argp>>>2>>>0]=termios.c_iflag||0;HEAP32[argp+4>>>2>>>0]=termios.c_oflag||0;HEAP32[argp+8>>>2>>>0]=termios.c_cflag||0;HEAP32[argp+12>>>2>>>0]=termios.c_lflag||0;for(var i=0;i<32;i++){HEAP8[argp+i+17>>>0]=termios.c_cc[i]||0}return 0}return 0}case 21510:case 21511:case 21512:{if(!stream.tty)return-59;return 0}case 21506:case 21507:case 21508:{if(!stream.tty)return-59;if(stream.tty.ops.ioctl_tcsets){var argp=syscallGetVarargP();var c_iflag=HEAP32[argp>>>2>>>0];var c_oflag=HEAP32[argp+4>>>2>>>0];var c_cflag=HEAP32[argp+8>>>2>>>0];var c_lflag=HEAP32[argp+12>>>2>>>0];var c_cc=[];for(var i=0;i<32;i++){c_cc.push(HEAP8[argp+i+17>>>0])}return stream.tty.ops.ioctl_tcsets(stream.tty,op,{c_iflag,c_oflag,c_cflag,c_lflag,c_cc})}return 0}case 21519:{if(!stream.tty)return-59;var argp=syscallGetVarargP();HEAP32[argp>>>2>>>0]=0;return 0}case 21520:{if(!stream.tty)return-59;return-28}case 21531:{var argp=syscallGetVarargP();return FS.ioctl(stream,op,argp)}case 21523:{if(!stream.tty)return-59;if(stream.tty.ops.ioctl_tiocgwinsz){var winsize=stream.tty.ops.ioctl_tiocgwinsz(stream.tty);var argp=syscallGetVarargP();HEAP16[argp>>>1>>>0]=winsize[0];HEAP16[argp+2>>>1>>>0]=winsize[1]}return 0}case 21524:{if(!stream.tty)return-59;return 0}case 21515:{if(!stream.tty)return-59;return 0}default:return-28}}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_ioctl.sig="iiip";function ___syscall_listen(fd,backlog){try{var sock=getSocketFromFD(fd);sock.sock_ops.listen(sock,backlog);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_listen.sig="iiiiiii";function ___syscall_lstat64(path,buf){path>>>=0;buf>>>=0;try{path=SYSCALLS.getStr(path);return SYSCALLS.writeStat(buf,FS.lstat(path))}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_lstat64.sig="ipp";function ___syscall_mkdirat(dirfd,path,mode){path>>>=0;try{path=SYSCALLS.getStr(path);path=SYSCALLS.calculateAt(dirfd,path);FS.mkdir(path,mode,0);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_mkdirat.sig="iipi";function ___syscall_mknodat(dirfd,path,mode,dev){path>>>=0;try{path=SYSCALLS.getStr(path);path=SYSCALLS.calculateAt(dirfd,path);switch(mode&61440){case 32768:case 8192:case 24576:case 4096:case 49152:break;default:return-28}FS.mknod(path,mode,dev);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_mknodat.sig="iipii";function ___syscall_newfstatat(dirfd,path,buf,flags){path>>>=0;buf>>>=0;try{path=SYSCALLS.getStr(path);var nofollow=flags&256;var allowEmpty=flags&4096;flags=flags&~6400;path=SYSCALLS.calculateAt(dirfd,path,allowEmpty);return SYSCALLS.writeStat(buf,nofollow?FS.lstat(path):FS.stat(path))}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_newfstatat.sig="iippi";function ___syscall_openat(dirfd,path,flags,varargs){path>>>=0;varargs>>>=0;SYSCALLS.varargs=varargs;try{path=SYSCALLS.getStr(path);path=SYSCALLS.calculateAt(dirfd,path);var mode=varargs?syscallGetVarargI():0;return FS.open(path,flags,mode).fd}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_openat.sig="iipip";var PIPEFS={BUCKET_BUFFER_SIZE:8192,mount(mount){return FS.createNode(null,"/",16384|511,0)},createPipe(){var pipe={buckets:[],refcnt:2,timestamp:new Date};pipe.buckets.push({buffer:new Uint8Array(PIPEFS.BUCKET_BUFFER_SIZE),offset:0,roffset:0});var rName=PIPEFS.nextname();var wName=PIPEFS.nextname();var rNode=FS.createNode(PIPEFS.root,rName,4096,0);var wNode=FS.createNode(PIPEFS.root,wName,4096,0);rNode.pipe=pipe;wNode.pipe=pipe;var readableStream=FS.createStream({path:rName,node:rNode,flags:0,seekable:false,stream_ops:PIPEFS.stream_ops});rNode.stream=readableStream;var writableStream=FS.createStream({path:wName,node:wNode,flags:1,seekable:false,stream_ops:PIPEFS.stream_ops});wNode.stream=writableStream;return{readable_fd:readableStream.fd,writable_fd:writableStream.fd}},stream_ops:{getattr(stream){var node=stream.node;var timestamp=node.pipe.timestamp;return{dev:14,ino:node.id,mode:4480,nlink:1,uid:0,gid:0,rdev:0,size:0,atime:timestamp,mtime:timestamp,ctime:timestamp,blksize:4096,blocks:0}},poll(stream){var pipe=stream.node.pipe;if((stream.flags&2097155)===1){return 256|4}for(var bucket of pipe.buckets){if(bucket.offset-bucket.roffset>0){return 64|1}}return 0},dup(stream){stream.node.pipe.refcnt++},ioctl(stream,request,varargs){return 28},fsync(stream){return 28},read(stream,buffer,offset,length,position){var pipe=stream.node.pipe;var currentLength=0;for(var bucket of pipe.buckets){currentLength+=bucket.offset-bucket.roffset}var data=buffer.subarray(offset,offset+length);if(length<=0){return 0}if(currentLength==0){throw new FS.ErrnoError(6)}var toRead=Math.min(currentLength,length);var totalRead=toRead;var toRemove=0;for(var bucket of pipe.buckets){var bucketSize=bucket.offset-bucket.roffset;if(toRead<=bucketSize){var tmpSlice=bucket.buffer.subarray(bucket.roffset,bucket.offset);if(toRead<bucketSize){tmpSlice=tmpSlice.subarray(0,toRead);bucket.roffset+=toRead}else{toRemove++}data.set(tmpSlice);break}else{var tmpSlice=bucket.buffer.subarray(bucket.roffset,bucket.offset);data.set(tmpSlice);data=data.subarray(tmpSlice.byteLength);toRead-=tmpSlice.byteLength;toRemove++}}if(toRemove&&toRemove==pipe.buckets.length){toRemove--;pipe.buckets[toRemove].offset=0;pipe.buckets[toRemove].roffset=0}pipe.buckets.splice(0,toRemove);return totalRead},write(stream,buffer,offset,length,position){var pipe=stream.node.pipe;var data=buffer.subarray(offset,offset+length);var dataLen=data.byteLength;if(dataLen<=0){return 0}var currBucket=null;if(pipe.buckets.length==0){currBucket={buffer:new Uint8Array(PIPEFS.BUCKET_BUFFER_SIZE),offset:0,roffset:0};pipe.buckets.push(currBucket)}else{currBucket=pipe.buckets[pipe.buckets.length-1]}assert(currBucket.offset<=PIPEFS.BUCKET_BUFFER_SIZE);var freeBytesInCurrBuffer=PIPEFS.BUCKET_BUFFER_SIZE-currBucket.offset;if(freeBytesInCurrBuffer>=dataLen){currBucket.buffer.set(data,currBucket.offset);currBucket.offset+=dataLen;return dataLen}else if(freeBytesInCurrBuffer>0){currBucket.buffer.set(data.subarray(0,freeBytesInCurrBuffer),currBucket.offset);currBucket.offset+=freeBytesInCurrBuffer;data=data.subarray(freeBytesInCurrBuffer,data.byteLength)}var numBuckets=data.byteLength/PIPEFS.BUCKET_BUFFER_SIZE|0;var remElements=data.byteLength%PIPEFS.BUCKET_BUFFER_SIZE;for(var i=0;i<numBuckets;i++){var newBucket={buffer:new Uint8Array(PIPEFS.BUCKET_BUFFER_SIZE),offset:PIPEFS.BUCKET_BUFFER_SIZE,roffset:0};pipe.buckets.push(newBucket);newBucket.buffer.set(data.subarray(0,PIPEFS.BUCKET_BUFFER_SIZE));data=data.subarray(PIPEFS.BUCKET_BUFFER_SIZE,data.byteLength)}if(remElements>0){var newBucket={buffer:new Uint8Array(PIPEFS.BUCKET_BUFFER_SIZE),offset:data.byteLength,roffset:0};pipe.buckets.push(newBucket);newBucket.buffer.set(data)}return dataLen},close(stream){var pipe=stream.node.pipe;pipe.refcnt--;if(pipe.refcnt===0){pipe.buckets=null}}},nextname(){if(!PIPEFS.nextname.current){PIPEFS.nextname.current=0}return"pipe["+PIPEFS.nextname.current+++"]"}};function ___syscall_pipe(fdPtr){fdPtr>>>=0;try{if(fdPtr==0){throw new FS.ErrnoError(21)}var res=PIPEFS.createPipe();HEAP32[fdPtr>>>2>>>0]=res.readable_fd;HEAP32[fdPtr+4>>>2>>>0]=res.writable_fd;return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_pipe.sig="ip";function ___syscall_poll(fds,nfds,timeout){fds>>>=0;try{var nonzero=0;for(var i=0;i<nfds;i++){var pollfd=fds+8*i;var fd=HEAP32[pollfd>>>2>>>0];var events=HEAP16[pollfd+4>>>1>>>0];var mask=32;var stream=FS.getStream(fd);if(stream){mask=SYSCALLS.DEFAULT_POLLMASK;if(stream.stream_ops.poll){mask=stream.stream_ops.poll(stream,-1)}}mask&=events|8|16;if(mask)nonzero++;HEAP16[pollfd+6>>>1>>>0]=mask}return nonzero}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_poll.sig="ipii";function ___syscall_readlinkat(dirfd,path,buf,bufsize){path>>>=0;buf>>>=0;bufsize>>>=0;try{path=SYSCALLS.getStr(path);path=SYSCALLS.calculateAt(dirfd,path);if(bufsize<=0)return-28;var ret=FS.readlink(path);var len=Math.min(bufsize,lengthBytesUTF8(ret));var endChar=HEAP8[buf+len>>>0];stringToUTF8(ret,buf,bufsize+1);HEAP8[buf+len>>>0]=endChar;return len}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_readlinkat.sig="iippp";function ___syscall_recvfrom(fd,buf,len,flags,addr,addrlen){buf>>>=0;len>>>=0;addr>>>=0;addrlen>>>=0;try{var sock=getSocketFromFD(fd);var msg=sock.sock_ops.recvmsg(sock,len);if(!msg)return 0;if(addr){var errno=writeSockaddr(addr,sock.family,DNS.lookup_name(msg.addr),msg.port,addrlen)}HEAPU8.set(msg.buffer,buf>>>0);return msg.buffer.byteLength}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_recvfrom.sig="iippipp";function ___syscall_recvmsg(fd,message,flags,d1,d2,d3){message>>>=0;try{var sock=getSocketFromFD(fd);var iov=HEAPU32[message+8>>>2>>>0];var num=HEAP32[message+12>>>2>>>0];var total=0;for(var i=0;i<num;i++){total+=HEAP32[iov+(8*i+4)>>>2>>>0]}var msg=sock.sock_ops.recvmsg(sock,total);if(!msg)return 0;var name=HEAPU32[message>>>2>>>0];if(name){var errno=writeSockaddr(name,sock.family,DNS.lookup_name(msg.addr),msg.port)}var bytesRead=0;var bytesRemaining=msg.buffer.byteLength;for(var i=0;bytesRemaining>0&&i<num;i++){var iovbase=HEAPU32[iov+(8*i+0)>>>2>>>0];var iovlen=HEAP32[iov+(8*i+4)>>>2>>>0];if(!iovlen){continue}var length=Math.min(iovlen,bytesRemaining);var buf=msg.buffer.subarray(bytesRead,bytesRead+length);HEAPU8.set(buf,iovbase+bytesRead>>>0);bytesRead+=length;bytesRemaining-=length}return bytesRead}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_recvmsg.sig="iipiiii";function ___syscall_renameat(olddirfd,oldpath,newdirfd,newpath){oldpath>>>=0;newpath>>>=0;try{oldpath=SYSCALLS.getStr(oldpath);newpath=SYSCALLS.getStr(newpath);oldpath=SYSCALLS.calculateAt(olddirfd,oldpath);newpath=SYSCALLS.calculateAt(newdirfd,newpath);FS.rename(oldpath,newpath);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_renameat.sig="iipip";function ___syscall_rmdir(path){path>>>=0;try{path=SYSCALLS.getStr(path);FS.rmdir(path);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_rmdir.sig="ip";function ___syscall_sendmsg(fd,message,flags,d1,d2,d3){message>>>=0;d1>>>=0;d2>>>=0;try{var sock=getSocketFromFD(fd);var iov=HEAPU32[message+8>>>2>>>0];var num=HEAP32[message+12>>>2>>>0];var addr,port;var name=HEAPU32[message>>>2>>>0];var namelen=HEAP32[message+4>>>2>>>0];if(name){var info=getSocketAddress(name,namelen);port=info.port;addr=info.addr}var total=0;for(var i=0;i<num;i++){total+=HEAP32[iov+(8*i+4)>>>2>>>0]}var view=new Uint8Array(total);var offset=0;for(var i=0;i<num;i++){var iovbase=HEAPU32[iov+(8*i+0)>>>2>>>0];var iovlen=HEAP32[iov+(8*i+4)>>>2>>>0];for(var j=0;j<iovlen;j++){view[offset++]=HEAP8[iovbase+j>>>0]}}return sock.sock_ops.sendmsg(sock,view,0,total,addr,port)}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_sendmsg.sig="iipippi";function ___syscall_sendto(fd,message,length,flags,addr,addr_len){message>>>=0;length>>>=0;addr>>>=0;addr_len>>>=0;try{var sock=getSocketFromFD(fd);if(!addr){return FS.write(sock.stream,HEAP8,message,length)}var dest=getSocketAddress(addr,addr_len);return sock.sock_ops.sendmsg(sock,HEAP8,message,length,dest.addr,dest.port)}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_sendto.sig="iippipp";function ___syscall_socket(domain,type,protocol){try{var sock=SOCKFS.createSocket(domain,type,protocol);return sock.stream.fd}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_socket.sig="iiiiiii";function ___syscall_stat64(path,buf){path>>>=0;buf>>>=0;try{path=SYSCALLS.getStr(path);return SYSCALLS.writeStat(buf,FS.stat(path))}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_stat64.sig="ipp";function ___syscall_statfs64(path,size,buf){path>>>=0;size>>>=0;buf>>>=0;try{SYSCALLS.writeStatFs(buf,FS.statfs(SYSCALLS.getStr(path)));return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_statfs64.sig="ippp";function ___syscall_symlinkat(target,dirfd,linkpath){target>>>=0;linkpath>>>=0;try{target=SYSCALLS.getStr(target);linkpath=SYSCALLS.getStr(linkpath);linkpath=SYSCALLS.calculateAt(dirfd,linkpath);FS.symlink(target,linkpath);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_symlinkat.sig="ipip";function ___syscall_truncate64(path,length){path>>>=0;length=bigintToI53Checked(length);try{if(isNaN(length))return-61;path=SYSCALLS.getStr(path);FS.truncate(path,length);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_truncate64.sig="ipj";function ___syscall_unlinkat(dirfd,path,flags){path>>>=0;try{path=SYSCALLS.getStr(path);path=SYSCALLS.calculateAt(dirfd,path);if(!flags){FS.unlink(path)}else if(flags===512){FS.rmdir(path)}else{return-28}return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_unlinkat.sig="iipi";var readI53FromI64=ptr=>HEAPU32[ptr>>>2>>>0]+HEAP32[ptr+4>>>2>>>0]*4294967296;function ___syscall_utimensat(dirfd,path,times,flags){path>>>=0;times>>>=0;try{path=SYSCALLS.getStr(path);path=SYSCALLS.calculateAt(dirfd,path,true);var now=Date.now(),atime,mtime;if(!times){atime=now;mtime=now}else{var seconds=readI53FromI64(times);var nanoseconds=HEAP32[times+8>>>2>>>0];if(nanoseconds==1073741823){atime=now}else if(nanoseconds==1073741822){atime=null}else{atime=seconds*1e3+nanoseconds/(1e3*1e3)}times+=16;seconds=readI53FromI64(times);nanoseconds=HEAP32[times+8>>>2>>>0];if(nanoseconds==1073741823){mtime=now}else if(nanoseconds==1073741822){mtime=null}else{mtime=seconds*1e3+nanoseconds/(1e3*1e3)}}if((mtime??atime)!==null){FS.utime(path,atime,mtime)}return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}___syscall_utimensat.sig="iippi";var ___table_base=new WebAssembly.Global({value:"i32",mutable:false},1);var __abort_js=()=>abort("");__abort_js.sig="v";var dlSetError=msg=>{var sp=stackSave();var cmsg=stringToUTF8OnStack(msg);___dl_seterr(cmsg,0);stackRestore(sp)};var dlopenInternal=(handle,jsflags)=>{var filename=UTF8ToString(handle+36);var flags=HEAP32[handle+4>>>2>>>0];filename=PATH.normalize(filename);var searchpaths=[];var global=Boolean(flags&256);var localScope=global?null:{};var combinedFlags={global,nodelete:Boolean(flags&4096),loadAsync:jsflags.loadAsync};if(jsflags.loadAsync){return loadDynamicLibrary(filename,combinedFlags,localScope,handle)}try{return loadDynamicLibrary(filename,combinedFlags,localScope,handle)}catch(e){dlSetError(`Could not load dynamic lib: ${filename}\n${e}`);return 0}};function __dlopen_js(handle){handle>>>=0;return dlopenInternal(handle,{loadAsync:false})}__dlopen_js.sig="pp";function __dlsym_js(handle,symbol,symbolIndex){handle>>>=0;symbol>>>=0;symbolIndex>>>=0;symbol=UTF8ToString(symbol);var result;var newSymIndex;var lib=LDSO.loadedLibsByHandle[handle];if(!lib.exports.hasOwnProperty(symbol)||lib.exports[symbol].stub){dlSetError(`Tried to lookup unknown symbol "${symbol}" in dynamic lib: ${lib.name}`);return 0}newSymIndex=Object.keys(lib.exports).indexOf(symbol);result=lib.exports[symbol];if(typeof result=="function"){var addr=getFunctionAddress(result);if(addr){result=addr}else{result=addFunction(result,result.sig);HEAPU32[symbolIndex>>>2>>>0]=newSymIndex}}return result}__dlsym_js.sig="pppp";var handleException=e=>{if(e instanceof ExitStatus||e=="unwind"){return EXITSTATUS}quit_(1,e)};var runtimeKeepaliveCounter=0;var keepRuntimeAlive=()=>noExitRuntime||runtimeKeepaliveCounter>0;var _proc_exit=code=>{EXITSTATUS=code;if(!keepRuntimeAlive()){Module["onExit"]?.(code);ABORT=true}quit_(code,new ExitStatus(code))};_proc_exit.sig="vi";var exitJS=(status,implicit)=>{EXITSTATUS=status;if(!keepRuntimeAlive()){exitRuntime()}_proc_exit(status)};var _exit=exitJS;_exit.sig="vi";var maybeExit=()=>{if(runtimeExited){return}if(!keepRuntimeAlive()){try{_exit(EXITSTATUS)}catch(e){handleException(e)}}};var callUserCallback=func=>{if(runtimeExited||ABORT){return}try{func();maybeExit()}catch(e){handleException(e)}};var runtimeKeepalivePush=()=>{runtimeKeepaliveCounter+=1};runtimeKeepalivePush.sig="v";var runtimeKeepalivePop=()=>{runtimeKeepaliveCounter-=1};runtimeKeepalivePop.sig="v";function __emscripten_dlopen_js(handle,onsuccess,onerror,user_data){handle>>>=0;onsuccess>>>=0;onerror>>>=0;user_data>>>=0;function errorCallback(e){var filename=UTF8ToString(handle+36);dlSetError(`'Could not load dynamic lib: ${filename}\n${e}`);runtimeKeepalivePop();callUserCallback(()=>getWasmTableEntry(onerror)(handle,user_data))}function successCallback(){runtimeKeepalivePop();callUserCallback(()=>getWasmTableEntry(onsuccess)(handle,user_data))}runtimeKeepalivePush();var promise=dlopenInternal(handle,{loadAsync:true});if(promise){promise.then(successCallback,errorCallback)}else{errorCallback()}}__emscripten_dlopen_js.sig="vpppp";var getExecutableName=()=>thisProgram||"./this.program";function __emscripten_get_progname(str,len){str>>>=0;return stringToUTF8(getExecutableName(),str,len)}__emscripten_get_progname.sig="vpi";function __emscripten_lookup_name(name){name>>>=0;var nameString=UTF8ToString(name);return inetPton4(DNS.lookup_name(nameString))}__emscripten_lookup_name.sig="ip";var __emscripten_runtime_keepalive_clear=()=>{noExitRuntime=false;runtimeKeepaliveCounter=0};__emscripten_runtime_keepalive_clear.sig="v";function __emscripten_system(command){command>>>=0;if(ENVIRONMENT_IS_NODE){if(!command)return 1;var cmdstr=UTF8ToString(command);if(!cmdstr.length)return 0;var cp=require("child_process");var ret=cp.spawnSync(cmdstr,[],{shell:true,stdio:"inherit"});var _W_EXITCODE=(ret,sig)=>ret<<8|sig;if(ret.status===null){var signalToNumber=sig=>{switch(sig){case"SIGHUP":return 1;case"SIGQUIT":return 3;case"SIGFPE":return 8;case"SIGKILL":return 9;case"SIGALRM":return 14;case"SIGTERM":return 15;default:return 2}};return _W_EXITCODE(0,signalToNumber(ret.signal))}return _W_EXITCODE(ret.status,0)}if(!command)return 0;return-52}__emscripten_system.sig="ip";function __gmtime_js(time,tmPtr){time=bigintToI53Checked(time);tmPtr>>>=0;var date=new Date(time*1e3);HEAP32[tmPtr>>>2>>>0]=date.getUTCSeconds();HEAP32[tmPtr+4>>>2>>>0]=date.getUTCMinutes();HEAP32[tmPtr+8>>>2>>>0]=date.getUTCHours();HEAP32[tmPtr+12>>>2>>>0]=date.getUTCDate();HEAP32[tmPtr+16>>>2>>>0]=date.getUTCMonth();HEAP32[tmPtr+20>>>2>>>0]=date.getUTCFullYear()-1900;HEAP32[tmPtr+24>>>2>>>0]=date.getUTCDay();var start=Date.UTC(date.getUTCFullYear(),0,1,0,0,0,0);var yday=(date.getTime()-start)/(1e3*60*60*24)|0;HEAP32[tmPtr+28>>>2>>>0]=yday}__gmtime_js.sig="vjp";var isLeapYear=year=>year%4===0&&(year%100!==0||year%400===0);var MONTH_DAYS_LEAP_CUMULATIVE=[0,31,60,91,121,152,182,213,244,274,305,335];var MONTH_DAYS_REGULAR_CUMULATIVE=[0,31,59,90,120,151,181,212,243,273,304,334];var ydayFromDate=date=>{var leap=isLeapYear(date.getFullYear());var monthDaysCumulative=leap?MONTH_DAYS_LEAP_CUMULATIVE:MONTH_DAYS_REGULAR_CUMULATIVE;var yday=monthDaysCumulative[date.getMonth()]+date.getDate()-1;return yday};function __localtime_js(time,tmPtr){time=bigintToI53Checked(time);tmPtr>>>=0;var date=new Date(time*1e3);HEAP32[tmPtr>>>2>>>0]=date.getSeconds();HEAP32[tmPtr+4>>>2>>>0]=date.getMinutes();HEAP32[tmPtr+8>>>2>>>0]=date.getHours();HEAP32[tmPtr+12>>>2>>>0]=date.getDate();HEAP32[tmPtr+16>>>2>>>0]=date.getMonth();HEAP32[tmPtr+20>>>2>>>0]=date.getFullYear()-1900;HEAP32[tmPtr+24>>>2>>>0]=date.getDay();var yday=ydayFromDate(date)|0;HEAP32[tmPtr+28>>>2>>>0]=yday;HEAP32[tmPtr+36>>>2>>>0]=-(date.getTimezoneOffset()*60);var start=new Date(date.getFullYear(),0,1);var summerOffset=new Date(date.getFullYear(),6,1).getTimezoneOffset();var winterOffset=start.getTimezoneOffset();var dst=(summerOffset!=winterOffset&&date.getTimezoneOffset()==Math.min(winterOffset,summerOffset))|0;HEAP32[tmPtr+32>>>2>>>0]=dst}__localtime_js.sig="vjp";var __mktime_js=function(tmPtr){tmPtr>>>=0;var ret=(()=>{var date=new Date(HEAP32[tmPtr+20>>>2>>>0]+1900,HEAP32[tmPtr+16>>>2>>>0],HEAP32[tmPtr+12>>>2>>>0],HEAP32[tmPtr+8>>>2>>>0],HEAP32[tmPtr+4>>>2>>>0],HEAP32[tmPtr>>>2>>>0],0);var dst=HEAP32[tmPtr+32>>>2>>>0];var guessedOffset=date.getTimezoneOffset();var start=new Date(date.getFullYear(),0,1);var summerOffset=new Date(date.getFullYear(),6,1).getTimezoneOffset();var winterOffset=start.getTimezoneOffset();var dstOffset=Math.min(winterOffset,summerOffset);if(dst<0){HEAP32[tmPtr+32>>>2>>>0]=Number(summerOffset!=winterOffset&&dstOffset==guessedOffset)}else if(dst>0!=(dstOffset==guessedOffset)){var nonDstOffset=Math.max(winterOffset,summerOffset);var trueOffset=dst>0?dstOffset:nonDstOffset;date.setTime(date.getTime()+(trueOffset-guessedOffset)*6e4)}HEAP32[tmPtr+24>>>2>>>0]=date.getDay();var yday=ydayFromDate(date)|0;HEAP32[tmPtr+28>>>2>>>0]=yday;HEAP32[tmPtr>>>2>>>0]=date.getSeconds();HEAP32[tmPtr+4>>>2>>>0]=date.getMinutes();HEAP32[tmPtr+8>>>2>>>0]=date.getHours();HEAP32[tmPtr+12>>>2>>>0]=date.getDate();HEAP32[tmPtr+16>>>2>>>0]=date.getMonth();HEAP32[tmPtr+20>>>2>>>0]=date.getYear();var timeMs=date.getTime();if(isNaN(timeMs)){return-1}return timeMs/1e3})();return BigInt(ret)};__mktime_js.sig="jp";function __mmap_js(len,prot,flags,fd,offset,allocated,addr){len>>>=0;offset=bigintToI53Checked(offset);allocated>>>=0;addr>>>=0;try{var stream=SYSCALLS.getStreamFromFD(fd);var res=FS.mmap(stream,len,offset,prot,flags);var ptr=res.ptr;HEAP32[allocated>>>2>>>0]=res.allocated;HEAPU32[addr>>>2>>>0]=ptr;return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}__mmap_js.sig="ipiiijpp";function __msync_js(addr,len,prot,flags,fd,offset){addr>>>=0;len>>>=0;offset=bigintToI53Checked(offset);try{if(isNaN(offset))return-61;SYSCALLS.doMsync(addr,SYSCALLS.getStreamFromFD(fd),len,flags,offset);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}__msync_js.sig="ippiiij";function __munmap_js(addr,len,prot,flags,fd,offset){addr>>>=0;len>>>=0;offset=bigintToI53Checked(offset);try{var stream=SYSCALLS.getStreamFromFD(fd);if(prot&2){SYSCALLS.doMsync(addr,stream,len,flags,offset)}}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return-e.errno}}__munmap_js.sig="ippiiij";var timers={};var _emscripten_get_now=()=>performance.now();_emscripten_get_now.sig="d";var __setitimer_js=(which,timeout_ms)=>{if(timers[which]){clearTimeout(timers[which].id);delete timers[which]}if(!timeout_ms)return 0;var id=setTimeout(()=>{delete timers[which];callUserCallback(()=>__emscripten_timeout(which,_emscripten_get_now()))},timeout_ms);timers[which]={id,timeout_ms};return 0};__setitimer_js.sig="iid";var __timegm_js=function(tmPtr){tmPtr>>>=0;var ret=(()=>{var time=Date.UTC(HEAP32[tmPtr+20>>>2>>>0]+1900,HEAP32[tmPtr+16>>>2>>>0],HEAP32[tmPtr+12>>>2>>>0],HEAP32[tmPtr+8>>>2>>>0],HEAP32[tmPtr+4>>>2>>>0],HEAP32[tmPtr>>>2>>>0],0);var date=new Date(time);HEAP32[tmPtr+24>>>2>>>0]=date.getUTCDay();var start=Date.UTC(date.getUTCFullYear(),0,1,0,0,0,0);var yday=(date.getTime()-start)/(1e3*60*60*24)|0;HEAP32[tmPtr+28>>>2>>>0]=yday;return date.getTime()/1e3})();return BigInt(ret)};__timegm_js.sig="jp";var __tzset_js=function(timezone,daylight,std_name,dst_name){timezone>>>=0;daylight>>>=0;std_name>>>=0;dst_name>>>=0;var currentYear=(new Date).getFullYear();var winter=new Date(currentYear,0,1);var summer=new Date(currentYear,6,1);var winterOffset=winter.getTimezoneOffset();var summerOffset=summer.getTimezoneOffset();var stdTimezoneOffset=Math.max(winterOffset,summerOffset);HEAPU32[timezone>>>2>>>0]=stdTimezoneOffset*60;HEAP32[daylight>>>2>>>0]=Number(winterOffset!=summerOffset);var extractZone=timezoneOffset=>{var sign=timezoneOffset>=0?"-":"+";var absOffset=Math.abs(timezoneOffset);var hours=String(Math.floor(absOffset/60)).padStart(2,"0");var minutes=String(absOffset%60).padStart(2,"0");return`UTC${sign}${hours}${minutes}`};var winterName=extractZone(winterOffset);var summerName=extractZone(summerOffset);if(summerOffset<winterOffset){stringToUTF8(winterName,std_name,17);stringToUTF8(summerName,dst_name,17)}else{stringToUTF8(winterName,dst_name,17);stringToUTF8(summerName,std_name,17)}};__tzset_js.sig="vpppp";var _emscripten_get_now_res=()=>{if(ENVIRONMENT_IS_NODE){return 1}return 1e3};_emscripten_get_now_res.sig="d";var nowIsMonotonic=1;var checkWasiClock=clock_id=>clock_id>=0&&clock_id<=3;function _clock_res_get(clk_id,pres){pres>>>=0;if(!checkWasiClock(clk_id)){return 28}var nsec;if(clk_id===0){nsec=1e3*1e3}else if(nowIsMonotonic){nsec=_emscripten_get_now_res()}else{return 52}HEAP64[pres>>>3>>>0]=BigInt(nsec);return 0}_clock_res_get.sig="iip";var _emscripten_date_now=()=>Date.now();_emscripten_date_now.sig="d";function _clock_time_get(clk_id,ignored_precision,ptime){ignored_precision=bigintToI53Checked(ignored_precision);ptime>>>=0;if(!checkWasiClock(clk_id)){return 28}var now;if(clk_id===0){now=_emscripten_date_now()}else if(nowIsMonotonic){now=_emscripten_get_now()}else{return 52}var nsec=Math.round(now*1e3*1e3);HEAP64[ptime>>>3>>>0]=BigInt(nsec);return 0}_clock_time_get.sig="iijp";function _create_sentinel(...args){return wasmImports["create_sentinel"](...args)}_create_sentinel.stub=true;var readEmAsmArgsArray=[];var readEmAsmArgs=(sigPtr,buf)=>{readEmAsmArgsArray.length=0;var ch;while(ch=HEAPU8[sigPtr++>>>0]){var wide=ch!=105;wide&=ch!=112;buf+=wide&&buf%8?4:0;readEmAsmArgsArray.push(ch==112?HEAPU32[buf>>>2>>>0]:ch==106?HEAP64[buf>>>3>>>0]:ch==105?HEAP32[buf>>>2>>>0]:HEAPF64[buf>>>3>>>0]);buf+=wide?8:4}return readEmAsmArgsArray};var runEmAsmFunction=(code,sigPtr,argbuf)=>{var args=readEmAsmArgs(sigPtr,argbuf);return ASM_CONSTS[code](...args)};function _emscripten_asm_const_int(code,sigPtr,argbuf){code>>>=0;sigPtr>>>=0;argbuf>>>=0;return runEmAsmFunction(code,sigPtr,argbuf)}_emscripten_asm_const_int.sig="ippp";function _emscripten_console_error(str){str>>>=0;console.error(UTF8ToString(str))}_emscripten_console_error.sig="vp";function _emscripten_console_log(str){str>>>=0;console.log(UTF8ToString(str))}_emscripten_console_log.sig="vp";function _emscripten_console_trace(str){str>>>=0;console.trace(UTF8ToString(str))}_emscripten_console_trace.sig="vp";function _emscripten_console_warn(str){str>>>=0;console.warn(UTF8ToString(str))}_emscripten_console_warn.sig="vp";function _emscripten_err(str){str>>>=0;return err(UTF8ToString(str))}_emscripten_err.sig="vp";var getHeapMax=()=>4294901760;function _emscripten_get_heap_max(){return getHeapMax()}_emscripten_get_heap_max.sig="p";var GLctx;var webgl_enable_ANGLE_instanced_arrays=ctx=>{var ext=ctx.getExtension("ANGLE_instanced_arrays");if(ext){ctx["vertexAttribDivisor"]=(index,divisor)=>ext["vertexAttribDivisorANGLE"](index,divisor);ctx["drawArraysInstanced"]=(mode,first,count,primcount)=>ext["drawArraysInstancedANGLE"](mode,first,count,primcount);ctx["drawElementsInstanced"]=(mode,count,type,indices,primcount)=>ext["drawElementsInstancedANGLE"](mode,count,type,indices,primcount);return 1}};var webgl_enable_OES_vertex_array_object=ctx=>{var ext=ctx.getExtension("OES_vertex_array_object");if(ext){ctx["createVertexArray"]=()=>ext["createVertexArrayOES"]();ctx["deleteVertexArray"]=vao=>ext["deleteVertexArrayOES"](vao);ctx["bindVertexArray"]=vao=>ext["bindVertexArrayOES"](vao);ctx["isVertexArray"]=vao=>ext["isVertexArrayOES"](vao);return 1}};var webgl_enable_WEBGL_draw_buffers=ctx=>{var ext=ctx.getExtension("WEBGL_draw_buffers");if(ext){ctx["drawBuffers"]=(n,bufs)=>ext["drawBuffersWEBGL"](n,bufs);return 1}};var webgl_enable_WEBGL_draw_instanced_base_vertex_base_instance=ctx=>!!(ctx.dibvbi=ctx.getExtension("WEBGL_draw_instanced_base_vertex_base_instance"));var webgl_enable_WEBGL_multi_draw_instanced_base_vertex_base_instance=ctx=>!!(ctx.mdibvbi=ctx.getExtension("WEBGL_multi_draw_instanced_base_vertex_base_instance"));var webgl_enable_EXT_polygon_offset_clamp=ctx=>!!(ctx.extPolygonOffsetClamp=ctx.getExtension("EXT_polygon_offset_clamp"));var webgl_enable_EXT_clip_control=ctx=>!!(ctx.extClipControl=ctx.getExtension("EXT_clip_control"));var webgl_enable_WEBGL_polygon_mode=ctx=>!!(ctx.webglPolygonMode=ctx.getExtension("WEBGL_polygon_mode"));var webgl_enable_WEBGL_multi_draw=ctx=>!!(ctx.multiDrawWebgl=ctx.getExtension("WEBGL_multi_draw"));var getEmscriptenSupportedExtensions=ctx=>{var supportedExtensions=["ANGLE_instanced_arrays","EXT_blend_minmax","EXT_disjoint_timer_query","EXT_frag_depth","EXT_shader_texture_lod","EXT_sRGB","OES_element_index_uint","OES_fbo_render_mipmap","OES_standard_derivatives","OES_texture_float","OES_texture_half_float","OES_texture_half_float_linear","OES_vertex_array_object","WEBGL_color_buffer_float","WEBGL_depth_texture","WEBGL_draw_buffers","EXT_color_buffer_float","EXT_conservative_depth","EXT_disjoint_timer_query_webgl2","EXT_texture_norm16","NV_shader_noperspective_interpolation","WEBGL_clip_cull_distance","EXT_clip_control","EXT_color_buffer_half_float","EXT_depth_clamp","EXT_float_blend","EXT_polygon_offset_clamp","EXT_texture_compression_bptc","EXT_texture_compression_rgtc","EXT_texture_filter_anisotropic","KHR_parallel_shader_compile","OES_texture_float_linear","WEBGL_blend_func_extended","WEBGL_compressed_texture_astc","WEBGL_compressed_texture_etc","WEBGL_compressed_texture_etc1","WEBGL_compressed_texture_s3tc","WEBGL_compressed_texture_s3tc_srgb","WEBGL_debug_renderer_info","WEBGL_debug_shaders","WEBGL_lose_context","WEBGL_multi_draw","WEBGL_polygon_mode"];return(ctx.getSupportedExtensions()||[]).filter(ext=>supportedExtensions.includes(ext))};var GL={counter:1,buffers:[],programs:[],framebuffers:[],renderbuffers:[],textures:[],shaders:[],vaos:[],contexts:[],offscreenCanvases:{},queries:[],samplers:[],transformFeedbacks:[],syncs:[],stringCache:{},stringiCache:{},unpackAlignment:4,unpackRowLength:0,recordError:errorCode=>{if(!GL.lastError){GL.lastError=errorCode}},getNewId:table=>{var ret=GL.counter++;for(var i=table.length;i<ret;i++){table[i]=null}return ret},genObject:(n,buffers,createFunction,objectTable)=>{for(var i=0;i<n;i++){var buffer=GLctx[createFunction]();var id=buffer&&GL.getNewId(objectTable);if(buffer){buffer.name=id;objectTable[id]=buffer}else{GL.recordError(1282)}HEAP32[buffers+i*4>>>2>>>0]=id}},getSource:(shader,count,string,length)=>{var source="";for(var i=0;i<count;++i){var len=length?HEAPU32[length+i*4>>>2>>>0]:undefined;source+=UTF8ToString(HEAPU32[string+i*4>>>2>>>0],len)}return source},createContext:(canvas,webGLContextAttributes)=>{var ctx=webGLContextAttributes.majorVersion>1?canvas.getContext("webgl2",webGLContextAttributes):canvas.getContext("webgl",webGLContextAttributes);if(!ctx)return 0;var handle=GL.registerContext(ctx,webGLContextAttributes);return handle},registerContext:(ctx,webGLContextAttributes)=>{var handle=GL.getNewId(GL.contexts);var context={handle,attributes:webGLContextAttributes,version:webGLContextAttributes.majorVersion,GLctx:ctx};if(ctx.canvas)ctx.canvas.GLctxObject=context;GL.contexts[handle]=context;if(typeof webGLContextAttributes.enableExtensionsByDefault=="undefined"||webGLContextAttributes.enableExtensionsByDefault){GL.initExtensions(context)}return handle},makeContextCurrent:contextHandle=>{GL.currentContext=GL.contexts[contextHandle];Module["ctx"]=GLctx=GL.currentContext?.GLctx;return!(contextHandle&&!GLctx)},getContext:contextHandle=>GL.contexts[contextHandle],deleteContext:contextHandle=>{if(GL.currentContext===GL.contexts[contextHandle]){GL.currentContext=null}if(typeof JSEvents=="object"){JSEvents.removeAllHandlersOnTarget(GL.contexts[contextHandle].GLctx.canvas)}if(GL.contexts[contextHandle]?.GLctx.canvas){GL.contexts[contextHandle].GLctx.canvas.GLctxObject=undefined}GL.contexts[contextHandle]=null},initExtensions:context=>{context||=GL.currentContext;if(context.initExtensionsDone)return;context.initExtensionsDone=true;var GLctx=context.GLctx;webgl_enable_WEBGL_multi_draw(GLctx);webgl_enable_EXT_polygon_offset_clamp(GLctx);webgl_enable_EXT_clip_control(GLctx);webgl_enable_WEBGL_polygon_mode(GLctx);webgl_enable_ANGLE_instanced_arrays(GLctx);webgl_enable_OES_vertex_array_object(GLctx);webgl_enable_WEBGL_draw_buffers(GLctx);webgl_enable_WEBGL_draw_instanced_base_vertex_base_instance(GLctx);webgl_enable_WEBGL_multi_draw_instanced_base_vertex_base_instance(GLctx);if(context.version>=2){GLctx.disjointTimerQueryExt=GLctx.getExtension("EXT_disjoint_timer_query_webgl2")}if(context.version<2||!GLctx.disjointTimerQueryExt){GLctx.disjointTimerQueryExt=GLctx.getExtension("EXT_disjoint_timer_query")}getEmscriptenSupportedExtensions(GLctx).forEach(ext=>{if(!ext.includes("lose_context")&&!ext.includes("debug")){GLctx.getExtension(ext)}})}};var _glActiveTexture=x0=>GLctx.activeTexture(x0);_glActiveTexture.sig="vi";var _emscripten_glActiveTexture=_glActiveTexture;_emscripten_glActiveTexture.sig="vi";var _glAttachShader=(program,shader)=>{GLctx.attachShader(GL.programs[program],GL.shaders[shader])};_glAttachShader.sig="vii";var _emscripten_glAttachShader=_glAttachShader;_emscripten_glAttachShader.sig="vii";var _glBeginQuery=(target,id)=>{GLctx.beginQuery(target,GL.queries[id])};_glBeginQuery.sig="vii";var _emscripten_glBeginQuery=_glBeginQuery;_emscripten_glBeginQuery.sig="vii";var _glBeginQueryEXT=(target,id)=>{GLctx.disjointTimerQueryExt["beginQueryEXT"](target,GL.queries[id])};_glBeginQueryEXT.sig="vii";var _emscripten_glBeginQueryEXT=_glBeginQueryEXT;var _glBeginTransformFeedback=x0=>GLctx.beginTransformFeedback(x0);_glBeginTransformFeedback.sig="vi";var _emscripten_glBeginTransformFeedback=_glBeginTransformFeedback;_emscripten_glBeginTransformFeedback.sig="vi";function _glBindAttribLocation(program,index,name){name>>>=0;GLctx.bindAttribLocation(GL.programs[program],index,UTF8ToString(name))}_glBindAttribLocation.sig="viip";var _emscripten_glBindAttribLocation=_glBindAttribLocation;_emscripten_glBindAttribLocation.sig="viip";var _glBindBuffer=(target,buffer)=>{if(target==35051){GLctx.currentPixelPackBufferBinding=buffer}else if(target==35052){GLctx.currentPixelUnpackBufferBinding=buffer}GLctx.bindBuffer(target,GL.buffers[buffer])};_glBindBuffer.sig="vii";var _emscripten_glBindBuffer=_glBindBuffer;_emscripten_glBindBuffer.sig="vii";var _glBindBufferBase=(target,index,buffer)=>{GLctx.bindBufferBase(target,index,GL.buffers[buffer])};_glBindBufferBase.sig="viii";var _emscripten_glBindBufferBase=_glBindBufferBase;_emscripten_glBindBufferBase.sig="viii";function _glBindBufferRange(target,index,buffer,offset,ptrsize){offset>>>=0;ptrsize>>>=0;GLctx.bindBufferRange(target,index,GL.buffers[buffer],offset,ptrsize)}_glBindBufferRange.sig="viiipp";var _emscripten_glBindBufferRange=_glBindBufferRange;_emscripten_glBindBufferRange.sig="viiipp";var _glBindFramebuffer=(target,framebuffer)=>{GLctx.bindFramebuffer(target,GL.framebuffers[framebuffer])};_glBindFramebuffer.sig="vii";var _emscripten_glBindFramebuffer=_glBindFramebuffer;_emscripten_glBindFramebuffer.sig="vii";var _glBindRenderbuffer=(target,renderbuffer)=>{GLctx.bindRenderbuffer(target,GL.renderbuffers[renderbuffer])};_glBindRenderbuffer.sig="vii";var _emscripten_glBindRenderbuffer=_glBindRenderbuffer;_emscripten_glBindRenderbuffer.sig="vii";var _glBindSampler=(unit,sampler)=>{GLctx.bindSampler(unit,GL.samplers[sampler])};_glBindSampler.sig="vii";var _emscripten_glBindSampler=_glBindSampler;_emscripten_glBindSampler.sig="vii";var _glBindTexture=(target,texture)=>{GLctx.bindTexture(target,GL.textures[texture])};_glBindTexture.sig="vii";var _emscripten_glBindTexture=_glBindTexture;_emscripten_glBindTexture.sig="vii";var _glBindTransformFeedback=(target,id)=>{GLctx.bindTransformFeedback(target,GL.transformFeedbacks[id])};_glBindTransformFeedback.sig="vii";var _emscripten_glBindTransformFeedback=_glBindTransformFeedback;_emscripten_glBindTransformFeedback.sig="vii";var _glBindVertexArray=vao=>{GLctx.bindVertexArray(GL.vaos[vao])};_glBindVertexArray.sig="vi";var _emscripten_glBindVertexArray=_glBindVertexArray;_emscripten_glBindVertexArray.sig="vi";var _glBindVertexArrayOES=_glBindVertexArray;_glBindVertexArrayOES.sig="vi";var _emscripten_glBindVertexArrayOES=_glBindVertexArrayOES;_emscripten_glBindVertexArrayOES.sig="vi";var _glBlendColor=(x0,x1,x2,x3)=>GLctx.blendColor(x0,x1,x2,x3);_glBlendColor.sig="vffff";var _emscripten_glBlendColor=_glBlendColor;_emscripten_glBlendColor.sig="vffff";var _glBlendEquation=x0=>GLctx.blendEquation(x0);_glBlendEquation.sig="vi";var _emscripten_glBlendEquation=_glBlendEquation;_emscripten_glBlendEquation.sig="vi";var _glBlendEquationSeparate=(x0,x1)=>GLctx.blendEquationSeparate(x0,x1);_glBlendEquationSeparate.sig="vii";var _emscripten_glBlendEquationSeparate=_glBlendEquationSeparate;_emscripten_glBlendEquationSeparate.sig="vii";var _glBlendFunc=(x0,x1)=>GLctx.blendFunc(x0,x1);_glBlendFunc.sig="vii";var _emscripten_glBlendFunc=_glBlendFunc;_emscripten_glBlendFunc.sig="vii";var _glBlendFuncSeparate=(x0,x1,x2,x3)=>GLctx.blendFuncSeparate(x0,x1,x2,x3);_glBlendFuncSeparate.sig="viiii";var _emscripten_glBlendFuncSeparate=_glBlendFuncSeparate;_emscripten_glBlendFuncSeparate.sig="viiii";var _glBlitFramebuffer=(x0,x1,x2,x3,x4,x5,x6,x7,x8,x9)=>GLctx.blitFramebuffer(x0,x1,x2,x3,x4,x5,x6,x7,x8,x9);_glBlitFramebuffer.sig="viiiiiiiiii";var _emscripten_glBlitFramebuffer=_glBlitFramebuffer;_emscripten_glBlitFramebuffer.sig="viiiiiiiiii";function _glBufferData(target,size,data,usage){size>>>=0;data>>>=0;GLctx.bufferData(target,data?HEAPU8.subarray(data>>>0,data+size>>>0):size,usage)}_glBufferData.sig="vippi";var _emscripten_glBufferData=_glBufferData;_emscripten_glBufferData.sig="vippi";function _glBufferSubData(target,offset,size,data){offset>>>=0;size>>>=0;data>>>=0;GLctx.bufferSubData(target,offset,HEAPU8.subarray(data>>>0,data+size>>>0))}_glBufferSubData.sig="vippp";var _emscripten_glBufferSubData=_glBufferSubData;_emscripten_glBufferSubData.sig="vippp";var _glCheckFramebufferStatus=x0=>GLctx.checkFramebufferStatus(x0);_glCheckFramebufferStatus.sig="ii";var _emscripten_glCheckFramebufferStatus=_glCheckFramebufferStatus;_emscripten_glCheckFramebufferStatus.sig="ii";var _glClear=x0=>GLctx.clear(x0);_glClear.sig="vi";var _emscripten_glClear=_glClear;_emscripten_glClear.sig="vi";var _glClearBufferfi=(x0,x1,x2,x3)=>GLctx.clearBufferfi(x0,x1,x2,x3);_glClearBufferfi.sig="viifi";var _emscripten_glClearBufferfi=_glClearBufferfi;_emscripten_glClearBufferfi.sig="viifi";function _glClearBufferfv(buffer,drawbuffer,value){value>>>=0;GLctx.clearBufferfv(buffer,drawbuffer,HEAPF32,value>>>2)}_glClearBufferfv.sig="viip";var _emscripten_glClearBufferfv=_glClearBufferfv;_emscripten_glClearBufferfv.sig="viip";function _glClearBufferiv(buffer,drawbuffer,value){value>>>=0;GLctx.clearBufferiv(buffer,drawbuffer,HEAP32,value>>>2)}_glClearBufferiv.sig="viip";var _emscripten_glClearBufferiv=_glClearBufferiv;_emscripten_glClearBufferiv.sig="viip";function _glClearBufferuiv(buffer,drawbuffer,value){value>>>=0;GLctx.clearBufferuiv(buffer,drawbuffer,HEAPU32,value>>>2)}_glClearBufferuiv.sig="viip";var _emscripten_glClearBufferuiv=_glClearBufferuiv;_emscripten_glClearBufferuiv.sig="viip";var _glClearColor=(x0,x1,x2,x3)=>GLctx.clearColor(x0,x1,x2,x3);_glClearColor.sig="vffff";var _emscripten_glClearColor=_glClearColor;_emscripten_glClearColor.sig="vffff";var _glClearDepthf=x0=>GLctx.clearDepth(x0);_glClearDepthf.sig="vf";var _emscripten_glClearDepthf=_glClearDepthf;_emscripten_glClearDepthf.sig="vf";var _glClearStencil=x0=>GLctx.clearStencil(x0);_glClearStencil.sig="vi";var _emscripten_glClearStencil=_glClearStencil;_emscripten_glClearStencil.sig="vi";function _glClientWaitSync(sync,flags,timeout){sync>>>=0;timeout=Number(timeout);return GLctx.clientWaitSync(GL.syncs[sync],flags,timeout)}_glClientWaitSync.sig="ipij";var _emscripten_glClientWaitSync=_glClientWaitSync;_emscripten_glClientWaitSync.sig="ipij";var _glClipControlEXT=(origin,depth)=>{GLctx.extClipControl["clipControlEXT"](origin,depth)};_glClipControlEXT.sig="vii";var _emscripten_glClipControlEXT=_glClipControlEXT;var _glColorMask=(red,green,blue,alpha)=>{GLctx.colorMask(!!red,!!green,!!blue,!!alpha)};_glColorMask.sig="viiii";var _emscripten_glColorMask=_glColorMask;_emscripten_glColorMask.sig="viiii";var _glCompileShader=shader=>{GLctx.compileShader(GL.shaders[shader])};_glCompileShader.sig="vi";var _emscripten_glCompileShader=_glCompileShader;_emscripten_glCompileShader.sig="vi";function _glCompressedTexImage2D(target,level,internalFormat,width,height,border,imageSize,data){data>>>=0;if(GL.currentContext.version>=2){if(GLctx.currentPixelUnpackBufferBinding||!imageSize){GLctx.compressedTexImage2D(target,level,internalFormat,width,height,border,imageSize,data);return}}GLctx.compressedTexImage2D(target,level,internalFormat,width,height,border,HEAPU8.subarray(data>>>0,data+imageSize>>>0))}_glCompressedTexImage2D.sig="viiiiiiip";var _emscripten_glCompressedTexImage2D=_glCompressedTexImage2D;_emscripten_glCompressedTexImage2D.sig="viiiiiiip";function _glCompressedTexImage3D(target,level,internalFormat,width,height,depth,border,imageSize,data){data>>>=0;if(GLctx.currentPixelUnpackBufferBinding){GLctx.compressedTexImage3D(target,level,internalFormat,width,height,depth,border,imageSize,data)}else{GLctx.compressedTexImage3D(target,level,internalFormat,width,height,depth,border,HEAPU8,data,imageSize)}}_glCompressedTexImage3D.sig="viiiiiiiip";var _emscripten_glCompressedTexImage3D=_glCompressedTexImage3D;_emscripten_glCompressedTexImage3D.sig="viiiiiiiip";function _glCompressedTexSubImage2D(target,level,xoffset,yoffset,width,height,format,imageSize,data){data>>>=0;if(GL.currentContext.version>=2){if(GLctx.currentPixelUnpackBufferBinding||!imageSize){GLctx.compressedTexSubImage2D(target,level,xoffset,yoffset,width,height,format,imageSize,data);return}}GLctx.compressedTexSubImage2D(target,level,xoffset,yoffset,width,height,format,HEAPU8.subarray(data>>>0,data+imageSize>>>0))}_glCompressedTexSubImage2D.sig="viiiiiiiip";var _emscripten_glCompressedTexSubImage2D=_glCompressedTexSubImage2D;_emscripten_glCompressedTexSubImage2D.sig="viiiiiiiip";function _glCompressedTexSubImage3D(target,level,xoffset,yoffset,zoffset,width,height,depth,format,imageSize,data){data>>>=0;if(GLctx.currentPixelUnpackBufferBinding){GLctx.compressedTexSubImage3D(target,level,xoffset,yoffset,zoffset,width,height,depth,format,imageSize,data)}else{GLctx.compressedTexSubImage3D(target,level,xoffset,yoffset,zoffset,width,height,depth,format,HEAPU8,data,imageSize)}}_glCompressedTexSubImage3D.sig="viiiiiiiiiip";var _emscripten_glCompressedTexSubImage3D=_glCompressedTexSubImage3D;_emscripten_glCompressedTexSubImage3D.sig="viiiiiiiiiip";function _glCopyBufferSubData(x0,x1,x2,x3,x4){x2>>>=0;x3>>>=0;x4>>>=0;return GLctx.copyBufferSubData(x0,x1,x2,x3,x4)}_glCopyBufferSubData.sig="viippp";var _emscripten_glCopyBufferSubData=_glCopyBufferSubData;_emscripten_glCopyBufferSubData.sig="viippp";var _glCopyTexImage2D=(x0,x1,x2,x3,x4,x5,x6,x7)=>GLctx.copyTexImage2D(x0,x1,x2,x3,x4,x5,x6,x7);_glCopyTexImage2D.sig="viiiiiiii";var _emscripten_glCopyTexImage2D=_glCopyTexImage2D;_emscripten_glCopyTexImage2D.sig="viiiiiiii";var _glCopyTexSubImage2D=(x0,x1,x2,x3,x4,x5,x6,x7)=>GLctx.copyTexSubImage2D(x0,x1,x2,x3,x4,x5,x6,x7);_glCopyTexSubImage2D.sig="viiiiiiii";var _emscripten_glCopyTexSubImage2D=_glCopyTexSubImage2D;_emscripten_glCopyTexSubImage2D.sig="viiiiiiii";var _glCopyTexSubImage3D=(x0,x1,x2,x3,x4,x5,x6,x7,x8)=>GLctx.copyTexSubImage3D(x0,x1,x2,x3,x4,x5,x6,x7,x8);_glCopyTexSubImage3D.sig="viiiiiiiii";var _emscripten_glCopyTexSubImage3D=_glCopyTexSubImage3D;_emscripten_glCopyTexSubImage3D.sig="viiiiiiiii";var _glCreateProgram=()=>{var id=GL.getNewId(GL.programs);var program=GLctx.createProgram();program.name=id;program.maxUniformLength=program.maxAttributeLength=program.maxUniformBlockNameLength=0;program.uniformIdCounter=1;GL.programs[id]=program;return id};_glCreateProgram.sig="i";var _emscripten_glCreateProgram=_glCreateProgram;_emscripten_glCreateProgram.sig="i";var _glCreateShader=shaderType=>{var id=GL.getNewId(GL.shaders);GL.shaders[id]=GLctx.createShader(shaderType);return id};_glCreateShader.sig="ii";var _emscripten_glCreateShader=_glCreateShader;_emscripten_glCreateShader.sig="ii";var _glCullFace=x0=>GLctx.cullFace(x0);_glCullFace.sig="vi";var _emscripten_glCullFace=_glCullFace;_emscripten_glCullFace.sig="vi";function _glDeleteBuffers(n,buffers){buffers>>>=0;for(var i=0;i<n;i++){var id=HEAP32[buffers+i*4>>>2>>>0];var buffer=GL.buffers[id];if(!buffer)continue;GLctx.deleteBuffer(buffer);buffer.name=0;GL.buffers[id]=null;if(id==GLctx.currentPixelPackBufferBinding)GLctx.currentPixelPackBufferBinding=0;if(id==GLctx.currentPixelUnpackBufferBinding)GLctx.currentPixelUnpackBufferBinding=0}}_glDeleteBuffers.sig="vip";var _emscripten_glDeleteBuffers=_glDeleteBuffers;_emscripten_glDeleteBuffers.sig="vip";function _glDeleteFramebuffers(n,framebuffers){framebuffers>>>=0;for(var i=0;i<n;++i){var id=HEAP32[framebuffers+i*4>>>2>>>0];var framebuffer=GL.framebuffers[id];if(!framebuffer)continue;GLctx.deleteFramebuffer(framebuffer);framebuffer.name=0;GL.framebuffers[id]=null}}_glDeleteFramebuffers.sig="vip";var _emscripten_glDeleteFramebuffers=_glDeleteFramebuffers;_emscripten_glDeleteFramebuffers.sig="vip";var _glDeleteProgram=id=>{if(!id)return;var program=GL.programs[id];if(!program){GL.recordError(1281);return}GLctx.deleteProgram(program);program.name=0;GL.programs[id]=null};_glDeleteProgram.sig="vi";var _emscripten_glDeleteProgram=_glDeleteProgram;_emscripten_glDeleteProgram.sig="vi";function _glDeleteQueries(n,ids){ids>>>=0;for(var i=0;i<n;i++){var id=HEAP32[ids+i*4>>>2>>>0];var query=GL.queries[id];if(!query)continue;GLctx.deleteQuery(query);GL.queries[id]=null}}_glDeleteQueries.sig="vip";var _emscripten_glDeleteQueries=_glDeleteQueries;_emscripten_glDeleteQueries.sig="vip";function _glDeleteQueriesEXT(n,ids){ids>>>=0;for(var i=0;i<n;i++){var id=HEAP32[ids+i*4>>>2>>>0];var query=GL.queries[id];if(!query)continue;GLctx.disjointTimerQueryExt["deleteQueryEXT"](query);GL.queries[id]=null}}_glDeleteQueriesEXT.sig="vip";var _emscripten_glDeleteQueriesEXT=_glDeleteQueriesEXT;function _glDeleteRenderbuffers(n,renderbuffers){renderbuffers>>>=0;for(var i=0;i<n;i++){var id=HEAP32[renderbuffers+i*4>>>2>>>0];var renderbuffer=GL.renderbuffers[id];if(!renderbuffer)continue;GLctx.deleteRenderbuffer(renderbuffer);renderbuffer.name=0;GL.renderbuffers[id]=null}}_glDeleteRenderbuffers.sig="vip";var _emscripten_glDeleteRenderbuffers=_glDeleteRenderbuffers;_emscripten_glDeleteRenderbuffers.sig="vip";function _glDeleteSamplers(n,samplers){samplers>>>=0;for(var i=0;i<n;i++){var id=HEAP32[samplers+i*4>>>2>>>0];var sampler=GL.samplers[id];if(!sampler)continue;GLctx.deleteSampler(sampler);sampler.name=0;GL.samplers[id]=null}}_glDeleteSamplers.sig="vip";var _emscripten_glDeleteSamplers=_glDeleteSamplers;_emscripten_glDeleteSamplers.sig="vip";var _glDeleteShader=id=>{if(!id)return;var shader=GL.shaders[id];if(!shader){GL.recordError(1281);return}GLctx.deleteShader(shader);GL.shaders[id]=null};_glDeleteShader.sig="vi";var _emscripten_glDeleteShader=_glDeleteShader;_emscripten_glDeleteShader.sig="vi";function _glDeleteSync(id){id>>>=0;if(!id)return;var sync=GL.syncs[id];if(!sync){GL.recordError(1281);return}GLctx.deleteSync(sync);sync.name=0;GL.syncs[id]=null}_glDeleteSync.sig="vp";var _emscripten_glDeleteSync=_glDeleteSync;_emscripten_glDeleteSync.sig="vp";function _glDeleteTextures(n,textures){textures>>>=0;for(var i=0;i<n;i++){var id=HEAP32[textures+i*4>>>2>>>0];var texture=GL.textures[id];if(!texture)continue;GLctx.deleteTexture(texture);texture.name=0;GL.textures[id]=null}}_glDeleteTextures.sig="vip";var _emscripten_glDeleteTextures=_glDeleteTextures;_emscripten_glDeleteTextures.sig="vip";function _glDeleteTransformFeedbacks(n,ids){ids>>>=0;for(var i=0;i<n;i++){var id=HEAP32[ids+i*4>>>2>>>0];var transformFeedback=GL.transformFeedbacks[id];if(!transformFeedback)continue;GLctx.deleteTransformFeedback(transformFeedback);transformFeedback.name=0;GL.transformFeedbacks[id]=null}}_glDeleteTransformFeedbacks.sig="vip";var _emscripten_glDeleteTransformFeedbacks=_glDeleteTransformFeedbacks;_emscripten_glDeleteTransformFeedbacks.sig="vip";function _glDeleteVertexArrays(n,vaos){vaos>>>=0;for(var i=0;i<n;i++){var id=HEAP32[vaos+i*4>>>2>>>0];GLctx.deleteVertexArray(GL.vaos[id]);GL.vaos[id]=null}}_glDeleteVertexArrays.sig="vip";var _emscripten_glDeleteVertexArrays=_glDeleteVertexArrays;_emscripten_glDeleteVertexArrays.sig="vip";var _glDeleteVertexArraysOES=_glDeleteVertexArrays;_glDeleteVertexArraysOES.sig="vip";var _emscripten_glDeleteVertexArraysOES=_glDeleteVertexArraysOES;_emscripten_glDeleteVertexArraysOES.sig="vip";var _glDepthFunc=x0=>GLctx.depthFunc(x0);_glDepthFunc.sig="vi";var _emscripten_glDepthFunc=_glDepthFunc;_emscripten_glDepthFunc.sig="vi";var _glDepthMask=flag=>{GLctx.depthMask(!!flag)};_glDepthMask.sig="vi";var _emscripten_glDepthMask=_glDepthMask;_emscripten_glDepthMask.sig="vi";var _glDepthRangef=(x0,x1)=>GLctx.depthRange(x0,x1);_glDepthRangef.sig="vff";var _emscripten_glDepthRangef=_glDepthRangef;_emscripten_glDepthRangef.sig="vff";var _glDetachShader=(program,shader)=>{GLctx.detachShader(GL.programs[program],GL.shaders[shader])};_glDetachShader.sig="vii";var _emscripten_glDetachShader=_glDetachShader;_emscripten_glDetachShader.sig="vii";var _glDisable=x0=>GLctx.disable(x0);_glDisable.sig="vi";var _emscripten_glDisable=_glDisable;_emscripten_glDisable.sig="vi";var _glDisableVertexAttribArray=index=>{GLctx.disableVertexAttribArray(index)};_glDisableVertexAttribArray.sig="vi";var _emscripten_glDisableVertexAttribArray=_glDisableVertexAttribArray;_emscripten_glDisableVertexAttribArray.sig="vi";var _glDrawArrays=(mode,first,count)=>{GLctx.drawArrays(mode,first,count)};_glDrawArrays.sig="viii";var _emscripten_glDrawArrays=_glDrawArrays;_emscripten_glDrawArrays.sig="viii";var _glDrawArraysInstanced=(mode,first,count,primcount)=>{GLctx.drawArraysInstanced(mode,first,count,primcount)};_glDrawArraysInstanced.sig="viiii";var _emscripten_glDrawArraysInstanced=_glDrawArraysInstanced;_emscripten_glDrawArraysInstanced.sig="viiii";var _glDrawArraysInstancedANGLE=_glDrawArraysInstanced;var _emscripten_glDrawArraysInstancedANGLE=_glDrawArraysInstancedANGLE;var _glDrawArraysInstancedARB=_glDrawArraysInstanced;var _emscripten_glDrawArraysInstancedARB=_glDrawArraysInstancedARB;var _glDrawArraysInstancedEXT=_glDrawArraysInstanced;var _emscripten_glDrawArraysInstancedEXT=_glDrawArraysInstancedEXT;var _glDrawArraysInstancedNV=_glDrawArraysInstanced;var _emscripten_glDrawArraysInstancedNV=_glDrawArraysInstancedNV;var tempFixedLengthArray=[];function _glDrawBuffers(n,bufs){bufs>>>=0;var bufArray=tempFixedLengthArray[n];for(var i=0;i<n;i++){bufArray[i]=HEAP32[bufs+i*4>>>2>>>0]}GLctx.drawBuffers(bufArray)}_glDrawBuffers.sig="vip";var _emscripten_glDrawBuffers=_glDrawBuffers;_emscripten_glDrawBuffers.sig="vip";var _glDrawBuffersEXT=_glDrawBuffers;var _emscripten_glDrawBuffersEXT=_glDrawBuffersEXT;var _glDrawBuffersWEBGL=_glDrawBuffers;var _emscripten_glDrawBuffersWEBGL=_glDrawBuffersWEBGL;function _glDrawElements(mode,count,type,indices){indices>>>=0;GLctx.drawElements(mode,count,type,indices)}_glDrawElements.sig="viiip";var _emscripten_glDrawElements=_glDrawElements;_emscripten_glDrawElements.sig="viiip";function _glDrawElementsInstanced(mode,count,type,indices,primcount){indices>>>=0;GLctx.drawElementsInstanced(mode,count,type,indices,primcount)}_glDrawElementsInstanced.sig="viiipi";var _emscripten_glDrawElementsInstanced=_glDrawElementsInstanced;_emscripten_glDrawElementsInstanced.sig="viiipi";var _glDrawElementsInstancedANGLE=_glDrawElementsInstanced;var _emscripten_glDrawElementsInstancedANGLE=_glDrawElementsInstancedANGLE;var _glDrawElementsInstancedARB=_glDrawElementsInstanced;var _emscripten_glDrawElementsInstancedARB=_glDrawElementsInstancedARB;var _glDrawElementsInstancedEXT=_glDrawElementsInstanced;var _emscripten_glDrawElementsInstancedEXT=_glDrawElementsInstancedEXT;var _glDrawElementsInstancedNV=_glDrawElementsInstanced;var _emscripten_glDrawElementsInstancedNV=_glDrawElementsInstancedNV;function _glDrawRangeElements(mode,start,end,count,type,indices){indices>>>=0;_glDrawElements(mode,count,type,indices)}_glDrawRangeElements.sig="viiiiip";var _emscripten_glDrawRangeElements=_glDrawRangeElements;_emscripten_glDrawRangeElements.sig="viiiiip";var _glEnable=x0=>GLctx.enable(x0);_glEnable.sig="vi";var _emscripten_glEnable=_glEnable;_emscripten_glEnable.sig="vi";var _glEnableVertexAttribArray=index=>{GLctx.enableVertexAttribArray(index)};_glEnableVertexAttribArray.sig="vi";var _emscripten_glEnableVertexAttribArray=_glEnableVertexAttribArray;_emscripten_glEnableVertexAttribArray.sig="vi";var _glEndQuery=x0=>GLctx.endQuery(x0);_glEndQuery.sig="vi";var _emscripten_glEndQuery=_glEndQuery;_emscripten_glEndQuery.sig="vi";var _glEndQueryEXT=target=>{GLctx.disjointTimerQueryExt["endQueryEXT"](target)};_glEndQueryEXT.sig="vi";var _emscripten_glEndQueryEXT=_glEndQueryEXT;var _glEndTransformFeedback=()=>GLctx.endTransformFeedback();_glEndTransformFeedback.sig="v";var _emscripten_glEndTransformFeedback=_glEndTransformFeedback;_emscripten_glEndTransformFeedback.sig="v";function _glFenceSync(condition,flags){var sync=GLctx.fenceSync(condition,flags);if(sync){var id=GL.getNewId(GL.syncs);sync.name=id;GL.syncs[id]=sync;return id}return 0}_glFenceSync.sig="pii";var _emscripten_glFenceSync=_glFenceSync;_emscripten_glFenceSync.sig="pii";var _glFinish=()=>GLctx.finish();_glFinish.sig="v";var _emscripten_glFinish=_glFinish;_emscripten_glFinish.sig="v";var _glFlush=()=>GLctx.flush();_glFlush.sig="v";var _emscripten_glFlush=_glFlush;_emscripten_glFlush.sig="v";var _glFramebufferRenderbuffer=(target,attachment,renderbuffertarget,renderbuffer)=>{GLctx.framebufferRenderbuffer(target,attachment,renderbuffertarget,GL.renderbuffers[renderbuffer])};_glFramebufferRenderbuffer.sig="viiii";var _emscripten_glFramebufferRenderbuffer=_glFramebufferRenderbuffer;_emscripten_glFramebufferRenderbuffer.sig="viiii";var _glFramebufferTexture2D=(target,attachment,textarget,texture,level)=>{GLctx.framebufferTexture2D(target,attachment,textarget,GL.textures[texture],level)};_glFramebufferTexture2D.sig="viiiii";var _emscripten_glFramebufferTexture2D=_glFramebufferTexture2D;_emscripten_glFramebufferTexture2D.sig="viiiii";var _glFramebufferTextureLayer=(target,attachment,texture,level,layer)=>{GLctx.framebufferTextureLayer(target,attachment,GL.textures[texture],level,layer)};_glFramebufferTextureLayer.sig="viiiii";var _emscripten_glFramebufferTextureLayer=_glFramebufferTextureLayer;_emscripten_glFramebufferTextureLayer.sig="viiiii";var _glFrontFace=x0=>GLctx.frontFace(x0);_glFrontFace.sig="vi";var _emscripten_glFrontFace=_glFrontFace;_emscripten_glFrontFace.sig="vi";function _glGenBuffers(n,buffers){buffers>>>=0;GL.genObject(n,buffers,"createBuffer",GL.buffers)}_glGenBuffers.sig="vip";var _emscripten_glGenBuffers=_glGenBuffers;_emscripten_glGenBuffers.sig="vip";function _glGenFramebuffers(n,ids){ids>>>=0;GL.genObject(n,ids,"createFramebuffer",GL.framebuffers)}_glGenFramebuffers.sig="vip";var _emscripten_glGenFramebuffers=_glGenFramebuffers;_emscripten_glGenFramebuffers.sig="vip";function _glGenQueries(n,ids){ids>>>=0;GL.genObject(n,ids,"createQuery",GL.queries)}_glGenQueries.sig="vip";var _emscripten_glGenQueries=_glGenQueries;_emscripten_glGenQueries.sig="vip";function _glGenQueriesEXT(n,ids){ids>>>=0;for(var i=0;i<n;i++){var query=GLctx.disjointTimerQueryExt["createQueryEXT"]();if(!query){GL.recordError(1282);while(i<n)HEAP32[ids+i++*4>>>2>>>0]=0;return}var id=GL.getNewId(GL.queries);query.name=id;GL.queries[id]=query;HEAP32[ids+i*4>>>2>>>0]=id}}_glGenQueriesEXT.sig="vip";var _emscripten_glGenQueriesEXT=_glGenQueriesEXT;function _glGenRenderbuffers(n,renderbuffers){renderbuffers>>>=0;GL.genObject(n,renderbuffers,"createRenderbuffer",GL.renderbuffers)}_glGenRenderbuffers.sig="vip";var _emscripten_glGenRenderbuffers=_glGenRenderbuffers;_emscripten_glGenRenderbuffers.sig="vip";function _glGenSamplers(n,samplers){samplers>>>=0;GL.genObject(n,samplers,"createSampler",GL.samplers)}_glGenSamplers.sig="vip";var _emscripten_glGenSamplers=_glGenSamplers;_emscripten_glGenSamplers.sig="vip";function _glGenTextures(n,textures){textures>>>=0;GL.genObject(n,textures,"createTexture",GL.textures)}_glGenTextures.sig="vip";var _emscripten_glGenTextures=_glGenTextures;_emscripten_glGenTextures.sig="vip";function _glGenTransformFeedbacks(n,ids){ids>>>=0;GL.genObject(n,ids,"createTransformFeedback",GL.transformFeedbacks)}_glGenTransformFeedbacks.sig="vip";var _emscripten_glGenTransformFeedbacks=_glGenTransformFeedbacks;_emscripten_glGenTransformFeedbacks.sig="vip";function _glGenVertexArrays(n,arrays){arrays>>>=0;GL.genObject(n,arrays,"createVertexArray",GL.vaos)}_glGenVertexArrays.sig="vip";var _emscripten_glGenVertexArrays=_glGenVertexArrays;_emscripten_glGenVertexArrays.sig="vip";var _glGenVertexArraysOES=_glGenVertexArrays;_glGenVertexArraysOES.sig="vip";var _emscripten_glGenVertexArraysOES=_glGenVertexArraysOES;_emscripten_glGenVertexArraysOES.sig="vip";var _glGenerateMipmap=x0=>GLctx.generateMipmap(x0);_glGenerateMipmap.sig="vi";var _emscripten_glGenerateMipmap=_glGenerateMipmap;_emscripten_glGenerateMipmap.sig="vi";var __glGetActiveAttribOrUniform=(funcName,program,index,bufSize,length,size,type,name)=>{program=GL.programs[program];var info=GLctx[funcName](program,index);if(info){var numBytesWrittenExclNull=name&&stringToUTF8(info.name,name,bufSize);if(length)HEAP32[length>>>2>>>0]=numBytesWrittenExclNull;if(size)HEAP32[size>>>2>>>0]=info.size;if(type)HEAP32[type>>>2>>>0]=info.type}};function _glGetActiveAttrib(program,index,bufSize,length,size,type,name){length>>>=0;size>>>=0;type>>>=0;name>>>=0;return __glGetActiveAttribOrUniform("getActiveAttrib",program,index,bufSize,length,size,type,name)}_glGetActiveAttrib.sig="viiipppp";var _emscripten_glGetActiveAttrib=_glGetActiveAttrib;_emscripten_glGetActiveAttrib.sig="viiipppp";function _glGetActiveUniform(program,index,bufSize,length,size,type,name){length>>>=0;size>>>=0;type>>>=0;name>>>=0;return __glGetActiveAttribOrUniform("getActiveUniform",program,index,bufSize,length,size,type,name)}_glGetActiveUniform.sig="viiipppp";var _emscripten_glGetActiveUniform=_glGetActiveUniform;_emscripten_glGetActiveUniform.sig="viiipppp";function _glGetActiveUniformBlockName(program,uniformBlockIndex,bufSize,length,uniformBlockName){length>>>=0;uniformBlockName>>>=0;program=GL.programs[program];var result=GLctx.getActiveUniformBlockName(program,uniformBlockIndex);if(!result)return;if(uniformBlockName&&bufSize>0){var numBytesWrittenExclNull=stringToUTF8(result,uniformBlockName,bufSize);if(length)HEAP32[length>>>2>>>0]=numBytesWrittenExclNull}else{if(length)HEAP32[length>>>2>>>0]=0}}_glGetActiveUniformBlockName.sig="viiipp";var _emscripten_glGetActiveUniformBlockName=_glGetActiveUniformBlockName;_emscripten_glGetActiveUniformBlockName.sig="viiipp";function _glGetActiveUniformBlockiv(program,uniformBlockIndex,pname,params){params>>>=0;if(!params){GL.recordError(1281);return}program=GL.programs[program];if(pname==35393){var name=GLctx.getActiveUniformBlockName(program,uniformBlockIndex);HEAP32[params>>>2>>>0]=name.length+1;return}var result=GLctx.getActiveUniformBlockParameter(program,uniformBlockIndex,pname);if(result===null)return;if(pname==35395){for(var i=0;i<result.length;i++){HEAP32[params+i*4>>>2>>>0]=result[i]}}else{HEAP32[params>>>2>>>0]=result}}_glGetActiveUniformBlockiv.sig="viiip";var _emscripten_glGetActiveUniformBlockiv=_glGetActiveUniformBlockiv;_emscripten_glGetActiveUniformBlockiv.sig="viiip";function _glGetActiveUniformsiv(program,uniformCount,uniformIndices,pname,params){uniformIndices>>>=0;params>>>=0;if(!params){GL.recordError(1281);return}if(uniformCount>0&&uniformIndices==0){GL.recordError(1281);return}program=GL.programs[program];var ids=[];for(var i=0;i<uniformCount;i++){ids.push(HEAP32[uniformIndices+i*4>>>2>>>0])}var result=GLctx.getActiveUniforms(program,ids,pname);if(!result)return;var len=result.length;for(var i=0;i<len;i++){HEAP32[params+i*4>>>2>>>0]=result[i]}}_glGetActiveUniformsiv.sig="viipip";var _emscripten_glGetActiveUniformsiv=_glGetActiveUniformsiv;_emscripten_glGetActiveUniformsiv.sig="viipip";function _glGetAttachedShaders(program,maxCount,count,shaders){count>>>=0;shaders>>>=0;var result=GLctx.getAttachedShaders(GL.programs[program]);var len=result.length;if(len>maxCount){len=maxCount}HEAP32[count>>>2>>>0]=len;for(var i=0;i<len;++i){var id=GL.shaders.indexOf(result[i]);HEAP32[shaders+i*4>>>2>>>0]=id}}_glGetAttachedShaders.sig="viipp";var _emscripten_glGetAttachedShaders=_glGetAttachedShaders;_emscripten_glGetAttachedShaders.sig="viipp";function _glGetAttribLocation(program,name){name>>>=0;return GLctx.getAttribLocation(GL.programs[program],UTF8ToString(name))}_glGetAttribLocation.sig="iip";var _emscripten_glGetAttribLocation=_glGetAttribLocation;_emscripten_glGetAttribLocation.sig="iip";var writeI53ToI64=(ptr,num)=>{HEAPU32[ptr>>>2>>>0]=num;var lower=HEAPU32[ptr>>>2>>>0];HEAPU32[ptr+4>>>2>>>0]=(num-lower)/4294967296};var webglGetExtensions=()=>{var exts=getEmscriptenSupportedExtensions(GLctx);exts=exts.concat(exts.map(e=>"GL_"+e));return exts};var emscriptenWebGLGet=(name_,p,type)=>{if(!p){GL.recordError(1281);return}var ret=undefined;switch(name_){case 36346:ret=1;break;case 36344:if(type!=0&&type!=1){GL.recordError(1280)}return;case 34814:case 36345:ret=0;break;case 34466:var formats=GLctx.getParameter(34467);ret=formats?formats.length:0;break;case 33309:if(GL.currentContext.version<2){GL.recordError(1282);return}ret=webglGetExtensions().length;break;case 33307:case 33308:if(GL.currentContext.version<2){GL.recordError(1280);return}ret=name_==33307?3:0;break}if(ret===undefined){var result=GLctx.getParameter(name_);switch(typeof result){case"number":ret=result;break;case"boolean":ret=result?1:0;break;case"string":GL.recordError(1280);return;case"object":if(result===null){switch(name_){case 34964:case 35725:case 34965:case 36006:case 36007:case 32873:case 34229:case 36662:case 36663:case 35053:case 35055:case 36010:case 35097:case 35869:case 32874:case 36389:case 35983:case 35368:case 34068:{ret=0;break}default:{GL.recordError(1280);return}}}else if(result instanceof Float32Array||result instanceof Uint32Array||result instanceof Int32Array||result instanceof Array){for(var i=0;i<result.length;++i){switch(type){case 0:HEAP32[p+i*4>>>2>>>0]=result[i];break;case 2:HEAPF32[p+i*4>>>2>>>0]=result[i];break;case 4:HEAP8[p+i>>>0]=result[i]?1:0;break}}return}else{try{ret=result.name|0}catch(e){GL.recordError(1280);err(`GL_INVALID_ENUM in glGet${type}v: Unknown object returned from WebGL getParameter(${name_})! (error: ${e})`);return}}break;default:GL.recordError(1280);err(`GL_INVALID_ENUM in glGet${type}v: Native code calling glGet${type}v(${name_}) and it returns ${result} of type ${typeof result}!`);return}}switch(type){case 1:writeI53ToI64(p,ret);break;case 0:HEAP32[p>>>2>>>0]=ret;break;case 2:HEAPF32[p>>>2>>>0]=ret;break;case 4:HEAP8[p>>>0]=ret?1:0;break}};function _glGetBooleanv(name_,p){p>>>=0;return emscriptenWebGLGet(name_,p,4)}_glGetBooleanv.sig="vip";var _emscripten_glGetBooleanv=_glGetBooleanv;_emscripten_glGetBooleanv.sig="vip";function _glGetBufferParameteri64v(target,value,data){data>>>=0;if(!data){GL.recordError(1281);return}writeI53ToI64(data,GLctx.getBufferParameter(target,value))}_glGetBufferParameteri64v.sig="viip";var _emscripten_glGetBufferParameteri64v=_glGetBufferParameteri64v;_emscripten_glGetBufferParameteri64v.sig="viip";function _glGetBufferParameteriv(target,value,data){data>>>=0;if(!data){GL.recordError(1281);return}HEAP32[data>>>2>>>0]=GLctx.getBufferParameter(target,value)}_glGetBufferParameteriv.sig="viip";var _emscripten_glGetBufferParameteriv=_glGetBufferParameteriv;_emscripten_glGetBufferParameteriv.sig="viip";var _glGetError=()=>{var error=GLctx.getError()||GL.lastError;GL.lastError=0;return error};_glGetError.sig="i";var _emscripten_glGetError=_glGetError;_emscripten_glGetError.sig="i";function _glGetFloatv(name_,p){p>>>=0;return emscriptenWebGLGet(name_,p,2)}_glGetFloatv.sig="vip";var _emscripten_glGetFloatv=_glGetFloatv;_emscripten_glGetFloatv.sig="vip";function _glGetFragDataLocation(program,name){name>>>=0;return GLctx.getFragDataLocation(GL.programs[program],UTF8ToString(name))}_glGetFragDataLocation.sig="iip";var _emscripten_glGetFragDataLocation=_glGetFragDataLocation;_emscripten_glGetFragDataLocation.sig="iip";function _glGetFramebufferAttachmentParameteriv(target,attachment,pname,params){params>>>=0;var result=GLctx.getFramebufferAttachmentParameter(target,attachment,pname);if(result instanceof WebGLRenderbuffer||result instanceof WebGLTexture){result=result.name|0}HEAP32[params>>>2>>>0]=result}_glGetFramebufferAttachmentParameteriv.sig="viiip";var _emscripten_glGetFramebufferAttachmentParameteriv=_glGetFramebufferAttachmentParameteriv;_emscripten_glGetFramebufferAttachmentParameteriv.sig="viiip";var emscriptenWebGLGetIndexed=(target,index,data,type)=>{if(!data){GL.recordError(1281);return}var result=GLctx.getIndexedParameter(target,index);var ret;switch(typeof result){case"boolean":ret=result?1:0;break;case"number":ret=result;break;case"object":if(result===null){switch(target){case 35983:case 35368:ret=0;break;default:{GL.recordError(1280);return}}}else if(result instanceof WebGLBuffer){ret=result.name|0}else{GL.recordError(1280);return}break;default:GL.recordError(1280);return}switch(type){case 1:writeI53ToI64(data,ret);break;case 0:HEAP32[data>>>2>>>0]=ret;break;case 2:HEAPF32[data>>>2>>>0]=ret;break;case 4:HEAP8[data>>>0]=ret?1:0;break;default:throw"internal emscriptenWebGLGetIndexed() error, bad type: "+type}};function _glGetInteger64i_v(target,index,data){data>>>=0;return emscriptenWebGLGetIndexed(target,index,data,1)}_glGetInteger64i_v.sig="viip";var _emscripten_glGetInteger64i_v=_glGetInteger64i_v;_emscripten_glGetInteger64i_v.sig="viip";function _glGetInteger64v(name_,p){p>>>=0;emscriptenWebGLGet(name_,p,1)}_glGetInteger64v.sig="vip";var _emscripten_glGetInteger64v=_glGetInteger64v;_emscripten_glGetInteger64v.sig="vip";function _glGetIntegeri_v(target,index,data){data>>>=0;return emscriptenWebGLGetIndexed(target,index,data,0)}_glGetIntegeri_v.sig="viip";var _emscripten_glGetIntegeri_v=_glGetIntegeri_v;_emscripten_glGetIntegeri_v.sig="viip";function _glGetIntegerv(name_,p){p>>>=0;return emscriptenWebGLGet(name_,p,0)}_glGetIntegerv.sig="vip";var _emscripten_glGetIntegerv=_glGetIntegerv;_emscripten_glGetIntegerv.sig="vip";function _glGetInternalformativ(target,internalformat,pname,bufSize,params){params>>>=0;if(bufSize<0){GL.recordError(1281);return}if(!params){GL.recordError(1281);return}var ret=GLctx.getInternalformatParameter(target,internalformat,pname);if(ret===null)return;for(var i=0;i<ret.length&&i<bufSize;++i){HEAP32[params+i*4>>>2>>>0]=ret[i]}}_glGetInternalformativ.sig="viiiip";var _emscripten_glGetInternalformativ=_glGetInternalformativ;_emscripten_glGetInternalformativ.sig="viiiip";function _glGetProgramBinary(program,bufSize,length,binaryFormat,binary){length>>>=0;binaryFormat>>>=0;binary>>>=0;GL.recordError(1282)}_glGetProgramBinary.sig="viippp";var _emscripten_glGetProgramBinary=_glGetProgramBinary;_emscripten_glGetProgramBinary.sig="viippp";function _glGetProgramInfoLog(program,maxLength,length,infoLog){length>>>=0;infoLog>>>=0;var log=GLctx.getProgramInfoLog(GL.programs[program]);if(log===null)log="(unknown error)";var numBytesWrittenExclNull=maxLength>0&&infoLog?stringToUTF8(log,infoLog,maxLength):0;if(length)HEAP32[length>>>2>>>0]=numBytesWrittenExclNull}_glGetProgramInfoLog.sig="viipp";var _emscripten_glGetProgramInfoLog=_glGetProgramInfoLog;_emscripten_glGetProgramInfoLog.sig="viipp";function _glGetProgramiv(program,pname,p){p>>>=0;if(!p){GL.recordError(1281);return}if(program>=GL.counter){GL.recordError(1281);return}program=GL.programs[program];if(pname==35716){var log=GLctx.getProgramInfoLog(program);if(log===null)log="(unknown error)";HEAP32[p>>>2>>>0]=log.length+1}else if(pname==35719){if(!program.maxUniformLength){var numActiveUniforms=GLctx.getProgramParameter(program,35718);for(var i=0;i<numActiveUniforms;++i){program.maxUniformLength=Math.max(program.maxUniformLength,GLctx.getActiveUniform(program,i).name.length+1)}}HEAP32[p>>>2>>>0]=program.maxUniformLength}else if(pname==35722){if(!program.maxAttributeLength){var numActiveAttributes=GLctx.getProgramParameter(program,35721);for(var i=0;i<numActiveAttributes;++i){program.maxAttributeLength=Math.max(program.maxAttributeLength,GLctx.getActiveAttrib(program,i).name.length+1)}}HEAP32[p>>>2>>>0]=program.maxAttributeLength}else if(pname==35381){if(!program.maxUniformBlockNameLength){var numActiveUniformBlocks=GLctx.getProgramParameter(program,35382);for(var i=0;i<numActiveUniformBlocks;++i){program.maxUniformBlockNameLength=Math.max(program.maxUniformBlockNameLength,GLctx.getActiveUniformBlockName(program,i).length+1)}}HEAP32[p>>>2>>>0]=program.maxUniformBlockNameLength}else{HEAP32[p>>>2>>>0]=GLctx.getProgramParameter(program,pname)}}_glGetProgramiv.sig="viip";var _emscripten_glGetProgramiv=_glGetProgramiv;_emscripten_glGetProgramiv.sig="viip";function _glGetQueryObjecti64vEXT(id,pname,params){params>>>=0;if(!params){GL.recordError(1281);return}var query=GL.queries[id];var param;if(GL.currentContext.version<2){param=GLctx.disjointTimerQueryExt["getQueryObjectEXT"](query,pname)}else{param=GLctx.getQueryParameter(query,pname)}var ret;if(typeof param=="boolean"){ret=param?1:0}else{ret=param}writeI53ToI64(params,ret)}_glGetQueryObjecti64vEXT.sig="viip";var _emscripten_glGetQueryObjecti64vEXT=_glGetQueryObjecti64vEXT;function _glGetQueryObjectivEXT(id,pname,params){params>>>=0;if(!params){GL.recordError(1281);return}var query=GL.queries[id];var param=GLctx.disjointTimerQueryExt["getQueryObjectEXT"](query,pname);var ret;if(typeof param=="boolean"){ret=param?1:0}else{ret=param}HEAP32[params>>>2>>>0]=ret}_glGetQueryObjectivEXT.sig="viip";var _emscripten_glGetQueryObjectivEXT=_glGetQueryObjectivEXT;var _glGetQueryObjectui64vEXT=_glGetQueryObjecti64vEXT;var _emscripten_glGetQueryObjectui64vEXT=_glGetQueryObjectui64vEXT;function _glGetQueryObjectuiv(id,pname,params){params>>>=0;if(!params){GL.recordError(1281);return}var query=GL.queries[id];var param=GLctx.getQueryParameter(query,pname);var ret;if(typeof param=="boolean"){ret=param?1:0}else{ret=param}HEAP32[params>>>2>>>0]=ret}_glGetQueryObjectuiv.sig="viip";var _emscripten_glGetQueryObjectuiv=_glGetQueryObjectuiv;_emscripten_glGetQueryObjectuiv.sig="viip";var _glGetQueryObjectuivEXT=_glGetQueryObjectivEXT;var _emscripten_glGetQueryObjectuivEXT=_glGetQueryObjectuivEXT;function _glGetQueryiv(target,pname,params){params>>>=0;if(!params){GL.recordError(1281);return}HEAP32[params>>>2>>>0]=GLctx.getQuery(target,pname)}_glGetQueryiv.sig="viip";var _emscripten_glGetQueryiv=_glGetQueryiv;_emscripten_glGetQueryiv.sig="viip";function _glGetQueryivEXT(target,pname,params){params>>>=0;if(!params){GL.recordError(1281);return}HEAP32[params>>>2>>>0]=GLctx.disjointTimerQueryExt["getQueryEXT"](target,pname)}_glGetQueryivEXT.sig="viip";var _emscripten_glGetQueryivEXT=_glGetQueryivEXT;function _glGetRenderbufferParameteriv(target,pname,params){params>>>=0;if(!params){GL.recordError(1281);return}HEAP32[params>>>2>>>0]=GLctx.getRenderbufferParameter(target,pname)}_glGetRenderbufferParameteriv.sig="viip";var _emscripten_glGetRenderbufferParameteriv=_glGetRenderbufferParameteriv;_emscripten_glGetRenderbufferParameteriv.sig="viip";function _glGetSamplerParameterfv(sampler,pname,params){params>>>=0;if(!params){GL.recordError(1281);return}HEAPF32[params>>>2>>>0]=GLctx.getSamplerParameter(GL.samplers[sampler],pname)}_glGetSamplerParameterfv.sig="viip";var _emscripten_glGetSamplerParameterfv=_glGetSamplerParameterfv;_emscripten_glGetSamplerParameterfv.sig="viip";function _glGetSamplerParameteriv(sampler,pname,params){params>>>=0;if(!params){GL.recordError(1281);return}HEAP32[params>>>2>>>0]=GLctx.getSamplerParameter(GL.samplers[sampler],pname)}_glGetSamplerParameteriv.sig="viip";var _emscripten_glGetSamplerParameteriv=_glGetSamplerParameteriv;_emscripten_glGetSamplerParameteriv.sig="viip";function _glGetShaderInfoLog(shader,maxLength,length,infoLog){length>>>=0;infoLog>>>=0;var log=GLctx.getShaderInfoLog(GL.shaders[shader]);if(log===null)log="(unknown error)";var numBytesWrittenExclNull=maxLength>0&&infoLog?stringToUTF8(log,infoLog,maxLength):0;if(length)HEAP32[length>>>2>>>0]=numBytesWrittenExclNull}_glGetShaderInfoLog.sig="viipp";var _emscripten_glGetShaderInfoLog=_glGetShaderInfoLog;_emscripten_glGetShaderInfoLog.sig="viipp";function _glGetShaderPrecisionFormat(shaderType,precisionType,range,precision){range>>>=0;precision>>>=0;var result=GLctx.getShaderPrecisionFormat(shaderType,precisionType);HEAP32[range>>>2>>>0]=result.rangeMin;HEAP32[range+4>>>2>>>0]=result.rangeMax;HEAP32[precision>>>2>>>0]=result.precision}_glGetShaderPrecisionFormat.sig="viipp";var _emscripten_glGetShaderPrecisionFormat=_glGetShaderPrecisionFormat;_emscripten_glGetShaderPrecisionFormat.sig="viipp";function _glGetShaderSource(shader,bufSize,length,source){length>>>=0;source>>>=0;var result=GLctx.getShaderSource(GL.shaders[shader]);if(!result)return;var numBytesWrittenExclNull=bufSize>0&&source?stringToUTF8(result,source,bufSize):0;if(length)HEAP32[length>>>2>>>0]=numBytesWrittenExclNull}_glGetShaderSource.sig="viipp";var _emscripten_glGetShaderSource=_glGetShaderSource;_emscripten_glGetShaderSource.sig="viipp";function _glGetShaderiv(shader,pname,p){p>>>=0;if(!p){GL.recordError(1281);return}if(pname==35716){var log=GLctx.getShaderInfoLog(GL.shaders[shader]);if(log===null)log="(unknown error)";var logLength=log?log.length+1:0;HEAP32[p>>>2>>>0]=logLength}else if(pname==35720){var source=GLctx.getShaderSource(GL.shaders[shader]);var sourceLength=source?source.length+1:0;HEAP32[p>>>2>>>0]=sourceLength}else{HEAP32[p>>>2>>>0]=GLctx.getShaderParameter(GL.shaders[shader],pname)}}_glGetShaderiv.sig="viip";var _emscripten_glGetShaderiv=_glGetShaderiv;_emscripten_glGetShaderiv.sig="viip";var stringToNewUTF8=str=>{var size=lengthBytesUTF8(str)+1;var ret=_malloc(size);if(ret)stringToUTF8(str,ret,size);return ret};function _glGetString(name_){var ret=GL.stringCache[name_];if(!ret){switch(name_){case 7939:ret=stringToNewUTF8(webglGetExtensions().join(" "));break;case 7936:case 7937:case 37445:case 37446:var s=GLctx.getParameter(name_);if(!s){GL.recordError(1280)}ret=s?stringToNewUTF8(s):0;break;case 7938:var webGLVersion=GLctx.getParameter(7938);var glVersion=`OpenGL ES 2.0 (${webGLVersion})`;if(GL.currentContext.version>=2)glVersion=`OpenGL ES 3.0 (${webGLVersion})`;ret=stringToNewUTF8(glVersion);break;case 35724:var glslVersion=GLctx.getParameter(35724);var ver_re=/^WebGL GLSL ES ([0-9]\.[0-9][0-9]?)(?:$| .*)/;var ver_num=glslVersion.match(ver_re);if(ver_num!==null){if(ver_num[1].length==3)ver_num[1]=ver_num[1]+"0";glslVersion=`OpenGL ES GLSL ES ${ver_num[1]} (${glslVersion})`}ret=stringToNewUTF8(glslVersion);break;default:GL.recordError(1280)}GL.stringCache[name_]=ret}return ret}_glGetString.sig="pi";var _emscripten_glGetString=_glGetString;_emscripten_glGetString.sig="pi";function _glGetStringi(name,index){if(GL.currentContext.version<2){GL.recordError(1282);return 0}var stringiCache=GL.stringiCache[name];if(stringiCache){if(index<0||index>=stringiCache.length){GL.recordError(1281);return 0}return stringiCache[index]}switch(name){case 7939:var exts=webglGetExtensions().map(stringToNewUTF8);stringiCache=GL.stringiCache[name]=exts;if(index<0||index>=stringiCache.length){GL.recordError(1281);return 0}return stringiCache[index];default:GL.recordError(1280);return 0}}_glGetStringi.sig="pii";var _emscripten_glGetStringi=_glGetStringi;_emscripten_glGetStringi.sig="pii";function _glGetSynciv(sync,pname,bufSize,length,values){sync>>>=0;length>>>=0;values>>>=0;if(bufSize<0){GL.recordError(1281);return}if(!values){GL.recordError(1281);return}var ret=GLctx.getSyncParameter(GL.syncs[sync],pname);if(ret!==null){HEAP32[values>>>2>>>0]=ret;if(length)HEAP32[length>>>2>>>0]=1}}_glGetSynciv.sig="vpiipp";var _emscripten_glGetSynciv=_glGetSynciv;_emscripten_glGetSynciv.sig="vpiipp";function _glGetTexParameterfv(target,pname,params){params>>>=0;if(!params){GL.recordError(1281);return}HEAPF32[params>>>2>>>0]=GLctx.getTexParameter(target,pname)}_glGetTexParameterfv.sig="viip";var _emscripten_glGetTexParameterfv=_glGetTexParameterfv;_emscripten_glGetTexParameterfv.sig="viip";function _glGetTexParameteriv(target,pname,params){params>>>=0;if(!params){GL.recordError(1281);return}HEAP32[params>>>2>>>0]=GLctx.getTexParameter(target,pname)}_glGetTexParameteriv.sig="viip";var _emscripten_glGetTexParameteriv=_glGetTexParameteriv;_emscripten_glGetTexParameteriv.sig="viip";function _glGetTransformFeedbackVarying(program,index,bufSize,length,size,type,name){length>>>=0;size>>>=0;type>>>=0;name>>>=0;program=GL.programs[program];var info=GLctx.getTransformFeedbackVarying(program,index);if(!info)return;if(name&&bufSize>0){var numBytesWrittenExclNull=stringToUTF8(info.name,name,bufSize);if(length)HEAP32[length>>>2>>>0]=numBytesWrittenExclNull}else{if(length)HEAP32[length>>>2>>>0]=0}if(size)HEAP32[size>>>2>>>0]=info.size;if(type)HEAP32[type>>>2>>>0]=info.type}_glGetTransformFeedbackVarying.sig="viiipppp";var _emscripten_glGetTransformFeedbackVarying=_glGetTransformFeedbackVarying;_emscripten_glGetTransformFeedbackVarying.sig="viiipppp";function _glGetUniformBlockIndex(program,uniformBlockName){uniformBlockName>>>=0;return GLctx.getUniformBlockIndex(GL.programs[program],UTF8ToString(uniformBlockName))}_glGetUniformBlockIndex.sig="iip";var _emscripten_glGetUniformBlockIndex=_glGetUniformBlockIndex;_emscripten_glGetUniformBlockIndex.sig="iip";function _glGetUniformIndices(program,uniformCount,uniformNames,uniformIndices){uniformNames>>>=0;uniformIndices>>>=0;if(!uniformIndices){GL.recordError(1281);return}if(uniformCount>0&&(uniformNames==0||uniformIndices==0)){GL.recordError(1281);return}program=GL.programs[program];var names=[];for(var i=0;i<uniformCount;i++)names.push(UTF8ToString(HEAP32[uniformNames+i*4>>>2>>>0]));var result=GLctx.getUniformIndices(program,names);if(!result)return;var len=result.length;for(var i=0;i<len;i++){HEAP32[uniformIndices+i*4>>>2>>>0]=result[i]}}_glGetUniformIndices.sig="viipp";var _emscripten_glGetUniformIndices=_glGetUniformIndices;_emscripten_glGetUniformIndices.sig="viipp";var jstoi_q=str=>parseInt(str);var webglGetLeftBracePos=name=>name.slice(-1)=="]"&&name.lastIndexOf("[");var webglPrepareUniformLocationsBeforeFirstUse=program=>{var uniformLocsById=program.uniformLocsById,uniformSizeAndIdsByName=program.uniformSizeAndIdsByName,i,j;if(!uniformLocsById){program.uniformLocsById=uniformLocsById={};program.uniformArrayNamesById={};var numActiveUniforms=GLctx.getProgramParameter(program,35718);for(i=0;i<numActiveUniforms;++i){var u=GLctx.getActiveUniform(program,i);var nm=u.name;var sz=u.size;var lb=webglGetLeftBracePos(nm);var arrayName=lb>0?nm.slice(0,lb):nm;var id=program.uniformIdCounter;program.uniformIdCounter+=sz;uniformSizeAndIdsByName[arrayName]=[sz,id];for(j=0;j<sz;++j){uniformLocsById[id]=j;program.uniformArrayNamesById[id++]=arrayName}}}};function _glGetUniformLocation(program,name){name>>>=0;name=UTF8ToString(name);if(program=GL.programs[program]){webglPrepareUniformLocationsBeforeFirstUse(program);var uniformLocsById=program.uniformLocsById;var arrayIndex=0;var uniformBaseName=name;var leftBrace=webglGetLeftBracePos(name);if(leftBrace>0){arrayIndex=jstoi_q(name.slice(leftBrace+1))>>>0;uniformBaseName=name.slice(0,leftBrace)}var sizeAndId=program.uniformSizeAndIdsByName[uniformBaseName];if(sizeAndId&&arrayIndex<sizeAndId[0]){arrayIndex+=sizeAndId[1];if(uniformLocsById[arrayIndex]=uniformLocsById[arrayIndex]||GLctx.getUniformLocation(program,name)){return arrayIndex}}}else{GL.recordError(1281)}return-1}_glGetUniformLocation.sig="iip";var _emscripten_glGetUniformLocation=_glGetUniformLocation;_emscripten_glGetUniformLocation.sig="iip";var webglGetUniformLocation=location=>{var p=GLctx.currentProgram;if(p){var webglLoc=p.uniformLocsById[location];if(typeof webglLoc=="number"){p.uniformLocsById[location]=webglLoc=GLctx.getUniformLocation(p,p.uniformArrayNamesById[location]+(webglLoc>0?`[${webglLoc}]`:""))}return webglLoc}else{GL.recordError(1282)}};var emscriptenWebGLGetUniform=(program,location,params,type)=>{if(!params){GL.recordError(1281);return}program=GL.programs[program];webglPrepareUniformLocationsBeforeFirstUse(program);var data=GLctx.getUniform(program,webglGetUniformLocation(location));if(typeof data=="number"||typeof data=="boolean"){switch(type){case 0:HEAP32[params>>>2>>>0]=data;break;case 2:HEAPF32[params>>>2>>>0]=data;break}}else{for(var i=0;i<data.length;i++){switch(type){case 0:HEAP32[params+i*4>>>2>>>0]=data[i];break;case 2:HEAPF32[params+i*4>>>2>>>0]=data[i];break}}}};function _glGetUniformfv(program,location,params){params>>>=0;emscriptenWebGLGetUniform(program,location,params,2)}_glGetUniformfv.sig="viip";var _emscripten_glGetUniformfv=_glGetUniformfv;_emscripten_glGetUniformfv.sig="viip";function _glGetUniformiv(program,location,params){params>>>=0;emscriptenWebGLGetUniform(program,location,params,0)}_glGetUniformiv.sig="viip";var _emscripten_glGetUniformiv=_glGetUniformiv;_emscripten_glGetUniformiv.sig="viip";function _glGetUniformuiv(program,location,params){params>>>=0;return emscriptenWebGLGetUniform(program,location,params,0)}_glGetUniformuiv.sig="viip";var _emscripten_glGetUniformuiv=_glGetUniformuiv;_emscripten_glGetUniformuiv.sig="viip";var emscriptenWebGLGetVertexAttrib=(index,pname,params,type)=>{if(!params){GL.recordError(1281);return}var data=GLctx.getVertexAttrib(index,pname);if(pname==34975){HEAP32[params>>>2>>>0]=data&&data["name"]}else if(typeof data=="number"||typeof data=="boolean"){switch(type){case 0:HEAP32[params>>>2>>>0]=data;break;case 2:HEAPF32[params>>>2>>>0]=data;break;case 5:HEAP32[params>>>2>>>0]=Math.fround(data);break}}else{for(var i=0;i<data.length;i++){switch(type){case 0:HEAP32[params+i*4>>>2>>>0]=data[i];break;case 2:HEAPF32[params+i*4>>>2>>>0]=data[i];break;case 5:HEAP32[params+i*4>>>2>>>0]=Math.fround(data[i]);break}}}};function _glGetVertexAttribIiv(index,pname,params){params>>>=0;emscriptenWebGLGetVertexAttrib(index,pname,params,0)}_glGetVertexAttribIiv.sig="viip";var _emscripten_glGetVertexAttribIiv=_glGetVertexAttribIiv;_emscripten_glGetVertexAttribIiv.sig="viip";var _glGetVertexAttribIuiv=_glGetVertexAttribIiv;_glGetVertexAttribIuiv.sig="viip";var _emscripten_glGetVertexAttribIuiv=_glGetVertexAttribIuiv;_emscripten_glGetVertexAttribIuiv.sig="viip";function _glGetVertexAttribPointerv(index,pname,pointer){pointer>>>=0;if(!pointer){GL.recordError(1281);return}HEAP32[pointer>>>2>>>0]=GLctx.getVertexAttribOffset(index,pname)}_glGetVertexAttribPointerv.sig="viip";var _emscripten_glGetVertexAttribPointerv=_glGetVertexAttribPointerv;_emscripten_glGetVertexAttribPointerv.sig="viip";function _glGetVertexAttribfv(index,pname,params){params>>>=0;emscriptenWebGLGetVertexAttrib(index,pname,params,2)}_glGetVertexAttribfv.sig="viip";var _emscripten_glGetVertexAttribfv=_glGetVertexAttribfv;_emscripten_glGetVertexAttribfv.sig="viip";function _glGetVertexAttribiv(index,pname,params){params>>>=0;emscriptenWebGLGetVertexAttrib(index,pname,params,5)}_glGetVertexAttribiv.sig="viip";var _emscripten_glGetVertexAttribiv=_glGetVertexAttribiv;_emscripten_glGetVertexAttribiv.sig="viip";var _glHint=(x0,x1)=>GLctx.hint(x0,x1);_glHint.sig="vii";var _emscripten_glHint=_glHint;_emscripten_glHint.sig="vii";function _glInvalidateFramebuffer(target,numAttachments,attachments){attachments>>>=0;var list=tempFixedLengthArray[numAttachments];for(var i=0;i<numAttachments;i++){list[i]=HEAP32[attachments+i*4>>>2>>>0]}GLctx.invalidateFramebuffer(target,list)}_glInvalidateFramebuffer.sig="viip";var _emscripten_glInvalidateFramebuffer=_glInvalidateFramebuffer;_emscripten_glInvalidateFramebuffer.sig="viip";function _glInvalidateSubFramebuffer(target,numAttachments,attachments,x,y,width,height){attachments>>>=0;var list=tempFixedLengthArray[numAttachments];for(var i=0;i<numAttachments;i++){list[i]=HEAP32[attachments+i*4>>>2>>>0]}GLctx.invalidateSubFramebuffer(target,list,x,y,width,height)}_glInvalidateSubFramebuffer.sig="viipiiii";var _emscripten_glInvalidateSubFramebuffer=_glInvalidateSubFramebuffer;_emscripten_glInvalidateSubFramebuffer.sig="viipiiii";var _glIsBuffer=buffer=>{var b=GL.buffers[buffer];if(!b)return 0;return GLctx.isBuffer(b)};_glIsBuffer.sig="ii";var _emscripten_glIsBuffer=_glIsBuffer;_emscripten_glIsBuffer.sig="ii";var _glIsEnabled=x0=>GLctx.isEnabled(x0);_glIsEnabled.sig="ii";var _emscripten_glIsEnabled=_glIsEnabled;_emscripten_glIsEnabled.sig="ii";var _glIsFramebuffer=framebuffer=>{var fb=GL.framebuffers[framebuffer];if(!fb)return 0;return GLctx.isFramebuffer(fb)};_glIsFramebuffer.sig="ii";var _emscripten_glIsFramebuffer=_glIsFramebuffer;_emscripten_glIsFramebuffer.sig="ii";var _glIsProgram=program=>{program=GL.programs[program];if(!program)return 0;return GLctx.isProgram(program)};_glIsProgram.sig="ii";var _emscripten_glIsProgram=_glIsProgram;_emscripten_glIsProgram.sig="ii";var _glIsQuery=id=>{var query=GL.queries[id];if(!query)return 0;return GLctx.isQuery(query)};_glIsQuery.sig="ii";var _emscripten_glIsQuery=_glIsQuery;_emscripten_glIsQuery.sig="ii";var _glIsQueryEXT=id=>{var query=GL.queries[id];if(!query)return 0;return GLctx.disjointTimerQueryExt["isQueryEXT"](query)};_glIsQueryEXT.sig="ii";var _emscripten_glIsQueryEXT=_glIsQueryEXT;var _glIsRenderbuffer=renderbuffer=>{var rb=GL.renderbuffers[renderbuffer];if(!rb)return 0;return GLctx.isRenderbuffer(rb)};_glIsRenderbuffer.sig="ii";var _emscripten_glIsRenderbuffer=_glIsRenderbuffer;_emscripten_glIsRenderbuffer.sig="ii";var _glIsSampler=id=>{var sampler=GL.samplers[id];if(!sampler)return 0;return GLctx.isSampler(sampler)};_glIsSampler.sig="ii";var _emscripten_glIsSampler=_glIsSampler;_emscripten_glIsSampler.sig="ii";var _glIsShader=shader=>{var s=GL.shaders[shader];if(!s)return 0;return GLctx.isShader(s)};_glIsShader.sig="ii";var _emscripten_glIsShader=_glIsShader;_emscripten_glIsShader.sig="ii";function _glIsSync(sync){sync>>>=0;return GLctx.isSync(GL.syncs[sync])}_glIsSync.sig="ip";var _emscripten_glIsSync=_glIsSync;_emscripten_glIsSync.sig="ip";var _glIsTexture=id=>{var texture=GL.textures[id];if(!texture)return 0;return GLctx.isTexture(texture)};_glIsTexture.sig="ii";var _emscripten_glIsTexture=_glIsTexture;_emscripten_glIsTexture.sig="ii";var _glIsTransformFeedback=id=>GLctx.isTransformFeedback(GL.transformFeedbacks[id]);_glIsTransformFeedback.sig="ii";var _emscripten_glIsTransformFeedback=_glIsTransformFeedback;_emscripten_glIsTransformFeedback.sig="ii";var _glIsVertexArray=array=>{var vao=GL.vaos[array];if(!vao)return 0;return GLctx.isVertexArray(vao)};_glIsVertexArray.sig="ii";var _emscripten_glIsVertexArray=_glIsVertexArray;_emscripten_glIsVertexArray.sig="ii";var _glIsVertexArrayOES=_glIsVertexArray;_glIsVertexArrayOES.sig="ii";var _emscripten_glIsVertexArrayOES=_glIsVertexArrayOES;_emscripten_glIsVertexArrayOES.sig="ii";var _glLineWidth=x0=>GLctx.lineWidth(x0);_glLineWidth.sig="vf";var _emscripten_glLineWidth=_glLineWidth;_emscripten_glLineWidth.sig="vf";var _glLinkProgram=program=>{program=GL.programs[program];GLctx.linkProgram(program);program.uniformLocsById=0;program.uniformSizeAndIdsByName={}};_glLinkProgram.sig="vi";var _emscripten_glLinkProgram=_glLinkProgram;_emscripten_glLinkProgram.sig="vi";var _glPauseTransformFeedback=()=>GLctx.pauseTransformFeedback();_glPauseTransformFeedback.sig="v";var _emscripten_glPauseTransformFeedback=_glPauseTransformFeedback;_emscripten_glPauseTransformFeedback.sig="v";var _glPixelStorei=(pname,param)=>{if(pname==3317){GL.unpackAlignment=param}else if(pname==3314){GL.unpackRowLength=param}GLctx.pixelStorei(pname,param)};_glPixelStorei.sig="vii";var _emscripten_glPixelStorei=_glPixelStorei;_emscripten_glPixelStorei.sig="vii";var _glPolygonModeWEBGL=(face,mode)=>{GLctx.webglPolygonMode["polygonModeWEBGL"](face,mode)};_glPolygonModeWEBGL.sig="vii";var _emscripten_glPolygonModeWEBGL=_glPolygonModeWEBGL;var _glPolygonOffset=(x0,x1)=>GLctx.polygonOffset(x0,x1);_glPolygonOffset.sig="vff";var _emscripten_glPolygonOffset=_glPolygonOffset;_emscripten_glPolygonOffset.sig="vff";var _glPolygonOffsetClampEXT=(factor,units,clamp)=>{GLctx.extPolygonOffsetClamp["polygonOffsetClampEXT"](factor,units,clamp)};_glPolygonOffsetClampEXT.sig="vfff";var _emscripten_glPolygonOffsetClampEXT=_glPolygonOffsetClampEXT;function _glProgramBinary(program,binaryFormat,binary,length){binary>>>=0;GL.recordError(1280)}_glProgramBinary.sig="viipi";var _emscripten_glProgramBinary=_glProgramBinary;_emscripten_glProgramBinary.sig="viipi";var _glProgramParameteri=(program,pname,value)=>{GL.recordError(1280)};_glProgramParameteri.sig="viii";var _emscripten_glProgramParameteri=_glProgramParameteri;_emscripten_glProgramParameteri.sig="viii";var _glQueryCounterEXT=(id,target)=>{GLctx.disjointTimerQueryExt["queryCounterEXT"](GL.queries[id],target)};_glQueryCounterEXT.sig="vii";var _emscripten_glQueryCounterEXT=_glQueryCounterEXT;var _glReadBuffer=x0=>GLctx.readBuffer(x0);_glReadBuffer.sig="vi";var _emscripten_glReadBuffer=_glReadBuffer;_emscripten_glReadBuffer.sig="vi";var computeUnpackAlignedImageSize=(width,height,sizePerPixel)=>{function roundedToNextMultipleOf(x,y){return x+y-1&-y}var plainRowSize=(GL.unpackRowLength||width)*sizePerPixel;var alignedRowSize=roundedToNextMultipleOf(plainRowSize,GL.unpackAlignment);return height*alignedRowSize};var colorChannelsInGlTextureFormat=format=>{var colorChannels={5:3,6:4,8:2,29502:3,29504:4,26917:2,26918:2,29846:3,29847:4};return colorChannels[format-6402]||1};var heapObjectForWebGLType=type=>{type-=5120;if(type==0)return HEAP8;if(type==1)return HEAPU8;if(type==2)return HEAP16;if(type==4)return HEAP32;if(type==6)return HEAPF32;if(type==5||type==28922||type==28520||type==30779||type==30782)return HEAPU32;return HEAPU16};var toTypedArrayIndex=(pointer,heap)=>pointer>>>31-Math.clz32(heap.BYTES_PER_ELEMENT);var emscriptenWebGLGetTexPixelData=(type,format,width,height,pixels,internalFormat)=>{var heap=heapObjectForWebGLType(type);var sizePerPixel=colorChannelsInGlTextureFormat(format)*heap.BYTES_PER_ELEMENT;var bytes=computeUnpackAlignedImageSize(width,height,sizePerPixel);return heap.subarray(toTypedArrayIndex(pixels,heap)>>>0,toTypedArrayIndex(pixels+bytes,heap)>>>0)};function _glReadPixels(x,y,width,height,format,type,pixels){pixels>>>=0;if(GL.currentContext.version>=2){if(GLctx.currentPixelPackBufferBinding){GLctx.readPixels(x,y,width,height,format,type,pixels);return}}var pixelData=emscriptenWebGLGetTexPixelData(type,format,width,height,pixels,format);if(!pixelData){GL.recordError(1280);return}GLctx.readPixels(x,y,width,height,format,type,pixelData)}_glReadPixels.sig="viiiiiip";var _emscripten_glReadPixels=_glReadPixels;_emscripten_glReadPixels.sig="viiiiiip";var _glReleaseShaderCompiler=()=>{};_glReleaseShaderCompiler.sig="v";var _emscripten_glReleaseShaderCompiler=_glReleaseShaderCompiler;_emscripten_glReleaseShaderCompiler.sig="v";var _glRenderbufferStorage=(x0,x1,x2,x3)=>GLctx.renderbufferStorage(x0,x1,x2,x3);_glRenderbufferStorage.sig="viiii";var _emscripten_glRenderbufferStorage=_glRenderbufferStorage;_emscripten_glRenderbufferStorage.sig="viiii";var _glRenderbufferStorageMultisample=(x0,x1,x2,x3,x4)=>GLctx.renderbufferStorageMultisample(x0,x1,x2,x3,x4);_glRenderbufferStorageMultisample.sig="viiiii";var _emscripten_glRenderbufferStorageMultisample=_glRenderbufferStorageMultisample;_emscripten_glRenderbufferStorageMultisample.sig="viiiii";var _glResumeTransformFeedback=()=>GLctx.resumeTransformFeedback();_glResumeTransformFeedback.sig="v";var _emscripten_glResumeTransformFeedback=_glResumeTransformFeedback;_emscripten_glResumeTransformFeedback.sig="v";var _glSampleCoverage=(value,invert)=>{GLctx.sampleCoverage(value,!!invert)};_glSampleCoverage.sig="vfi";var _emscripten_glSampleCoverage=_glSampleCoverage;_emscripten_glSampleCoverage.sig="vfi";var _glSamplerParameterf=(sampler,pname,param)=>{GLctx.samplerParameterf(GL.samplers[sampler],pname,param)};_glSamplerParameterf.sig="viif";var _emscripten_glSamplerParameterf=_glSamplerParameterf;_emscripten_glSamplerParameterf.sig="viif";function _glSamplerParameterfv(sampler,pname,params){params>>>=0;var param=HEAPF32[params>>>2>>>0];GLctx.samplerParameterf(GL.samplers[sampler],pname,param)}_glSamplerParameterfv.sig="viip";var _emscripten_glSamplerParameterfv=_glSamplerParameterfv;_emscripten_glSamplerParameterfv.sig="viip";var _glSamplerParameteri=(sampler,pname,param)=>{GLctx.samplerParameteri(GL.samplers[sampler],pname,param)};_glSamplerParameteri.sig="viii";var _emscripten_glSamplerParameteri=_glSamplerParameteri;_emscripten_glSamplerParameteri.sig="viii";function _glSamplerParameteriv(sampler,pname,params){params>>>=0;var param=HEAP32[params>>>2>>>0];GLctx.samplerParameteri(GL.samplers[sampler],pname,param)}_glSamplerParameteriv.sig="viip";var _emscripten_glSamplerParameteriv=_glSamplerParameteriv;_emscripten_glSamplerParameteriv.sig="viip";var _glScissor=(x0,x1,x2,x3)=>GLctx.scissor(x0,x1,x2,x3);_glScissor.sig="viiii";var _emscripten_glScissor=_glScissor;_emscripten_glScissor.sig="viiii";function _glShaderBinary(count,shaders,binaryformat,binary,length){shaders>>>=0;binary>>>=0;GL.recordError(1280)}_glShaderBinary.sig="vipipi";var _emscripten_glShaderBinary=_glShaderBinary;_emscripten_glShaderBinary.sig="vipipi";function _glShaderSource(shader,count,string,length){string>>>=0;length>>>=0;var source=GL.getSource(shader,count,string,length);GLctx.shaderSource(GL.shaders[shader],source)}_glShaderSource.sig="viipp";var _emscripten_glShaderSource=_glShaderSource;_emscripten_glShaderSource.sig="viipp";var _glStencilFunc=(x0,x1,x2)=>GLctx.stencilFunc(x0,x1,x2);_glStencilFunc.sig="viii";var _emscripten_glStencilFunc=_glStencilFunc;_emscripten_glStencilFunc.sig="viii";var _glStencilFuncSeparate=(x0,x1,x2,x3)=>GLctx.stencilFuncSeparate(x0,x1,x2,x3);_glStencilFuncSeparate.sig="viiii";var _emscripten_glStencilFuncSeparate=_glStencilFuncSeparate;_emscripten_glStencilFuncSeparate.sig="viiii";var _glStencilMask=x0=>GLctx.stencilMask(x0);_glStencilMask.sig="vi";var _emscripten_glStencilMask=_glStencilMask;_emscripten_glStencilMask.sig="vi";var _glStencilMaskSeparate=(x0,x1)=>GLctx.stencilMaskSeparate(x0,x1);_glStencilMaskSeparate.sig="vii";var _emscripten_glStencilMaskSeparate=_glStencilMaskSeparate;_emscripten_glStencilMaskSeparate.sig="vii";var _glStencilOp=(x0,x1,x2)=>GLctx.stencilOp(x0,x1,x2);_glStencilOp.sig="viii";var _emscripten_glStencilOp=_glStencilOp;_emscripten_glStencilOp.sig="viii";var _glStencilOpSeparate=(x0,x1,x2,x3)=>GLctx.stencilOpSeparate(x0,x1,x2,x3);_glStencilOpSeparate.sig="viiii";var _emscripten_glStencilOpSeparate=_glStencilOpSeparate;_emscripten_glStencilOpSeparate.sig="viiii";function _glTexImage2D(target,level,internalFormat,width,height,border,format,type,pixels){pixels>>>=0;if(GL.currentContext.version>=2){if(GLctx.currentPixelUnpackBufferBinding){GLctx.texImage2D(target,level,internalFormat,width,height,border,format,type,pixels);return}}var pixelData=pixels?emscriptenWebGLGetTexPixelData(type,format,width,height,pixels,internalFormat):null;GLctx.texImage2D(target,level,internalFormat,width,height,border,format,type,pixelData)}_glTexImage2D.sig="viiiiiiiip";var _emscripten_glTexImage2D=_glTexImage2D;_emscripten_glTexImage2D.sig="viiiiiiiip";function _glTexImage3D(target,level,internalFormat,width,height,depth,border,format,type,pixels){pixels>>>=0;if(GLctx.currentPixelUnpackBufferBinding){GLctx.texImage3D(target,level,internalFormat,width,height,depth,border,format,type,pixels)}else if(pixels){var heap=heapObjectForWebGLType(type);var pixelData=emscriptenWebGLGetTexPixelData(type,format,width,height*depth,pixels,internalFormat);GLctx.texImage3D(target,level,internalFormat,width,height,depth,border,format,type,pixelData)}else{GLctx.texImage3D(target,level,internalFormat,width,height,depth,border,format,type,null)}}_glTexImage3D.sig="viiiiiiiiip";var _emscripten_glTexImage3D=_glTexImage3D;_emscripten_glTexImage3D.sig="viiiiiiiiip";var _glTexParameterf=(x0,x1,x2)=>GLctx.texParameterf(x0,x1,x2);_glTexParameterf.sig="viif";var _emscripten_glTexParameterf=_glTexParameterf;_emscripten_glTexParameterf.sig="viif";function _glTexParameterfv(target,pname,params){params>>>=0;var param=HEAPF32[params>>>2>>>0];GLctx.texParameterf(target,pname,param)}_glTexParameterfv.sig="viip";var _emscripten_glTexParameterfv=_glTexParameterfv;_emscripten_glTexParameterfv.sig="viip";var _glTexParameteri=(x0,x1,x2)=>GLctx.texParameteri(x0,x1,x2);_glTexParameteri.sig="viii";var _emscripten_glTexParameteri=_glTexParameteri;_emscripten_glTexParameteri.sig="viii";function _glTexParameteriv(target,pname,params){params>>>=0;var param=HEAP32[params>>>2>>>0];GLctx.texParameteri(target,pname,param)}_glTexParameteriv.sig="viip";var _emscripten_glTexParameteriv=_glTexParameteriv;_emscripten_glTexParameteriv.sig="viip";var _glTexStorage2D=(x0,x1,x2,x3,x4)=>GLctx.texStorage2D(x0,x1,x2,x3,x4);_glTexStorage2D.sig="viiiii";var _emscripten_glTexStorage2D=_glTexStorage2D;_emscripten_glTexStorage2D.sig="viiiii";var _glTexStorage3D=(x0,x1,x2,x3,x4,x5)=>GLctx.texStorage3D(x0,x1,x2,x3,x4,x5);_glTexStorage3D.sig="viiiiii";var _emscripten_glTexStorage3D=_glTexStorage3D;_emscripten_glTexStorage3D.sig="viiiiii";function _glTexSubImage2D(target,level,xoffset,yoffset,width,height,format,type,pixels){pixels>>>=0;if(GL.currentContext.version>=2){if(GLctx.currentPixelUnpackBufferBinding){GLctx.texSubImage2D(target,level,xoffset,yoffset,width,height,format,type,pixels);return}}var pixelData=pixels?emscriptenWebGLGetTexPixelData(type,format,width,height,pixels,0):null;GLctx.texSubImage2D(target,level,xoffset,yoffset,width,height,format,type,pixelData)}_glTexSubImage2D.sig="viiiiiiiip";var _emscripten_glTexSubImage2D=_glTexSubImage2D;_emscripten_glTexSubImage2D.sig="viiiiiiiip";function _glTexSubImage3D(target,level,xoffset,yoffset,zoffset,width,height,depth,format,type,pixels){pixels>>>=0;if(GLctx.currentPixelUnpackBufferBinding){GLctx.texSubImage3D(target,level,xoffset,yoffset,zoffset,width,height,depth,format,type,pixels)}else if(pixels){var heap=heapObjectForWebGLType(type);GLctx.texSubImage3D(target,level,xoffset,yoffset,zoffset,width,height,depth,format,type,heap,toTypedArrayIndex(pixels,heap))}else{GLctx.texSubImage3D(target,level,xoffset,yoffset,zoffset,width,height,depth,format,type,null)}}_glTexSubImage3D.sig="viiiiiiiiiip";var _emscripten_glTexSubImage3D=_glTexSubImage3D;_emscripten_glTexSubImage3D.sig="viiiiiiiiiip";function _glTransformFeedbackVaryings(program,count,varyings,bufferMode){varyings>>>=0;program=GL.programs[program];var vars=[];for(var i=0;i<count;i++)vars.push(UTF8ToString(HEAP32[varyings+i*4>>>2>>>0]));GLctx.transformFeedbackVaryings(program,vars,bufferMode)}_glTransformFeedbackVaryings.sig="viipi";var _emscripten_glTransformFeedbackVaryings=_glTransformFeedbackVaryings;_emscripten_glTransformFeedbackVaryings.sig="viipi";var _glUniform1f=(location,v0)=>{GLctx.uniform1f(webglGetUniformLocation(location),v0)};_glUniform1f.sig="vif";var _emscripten_glUniform1f=_glUniform1f;_emscripten_glUniform1f.sig="vif";var miniTempWebGLFloatBuffers=[];function _glUniform1fv(location,count,value){value>>>=0;if(count<=288){var view=miniTempWebGLFloatBuffers[count];for(var i=0;i<count;++i){view[i]=HEAPF32[value+4*i>>>2>>>0]}}else{var view=HEAPF32.subarray(value>>>2>>>0,value+count*4>>>2>>>0)}GLctx.uniform1fv(webglGetUniformLocation(location),view)}_glUniform1fv.sig="viip";var _emscripten_glUniform1fv=_glUniform1fv;_emscripten_glUniform1fv.sig="viip";var _glUniform1i=(location,v0)=>{GLctx.uniform1i(webglGetUniformLocation(location),v0)};_glUniform1i.sig="vii";var _emscripten_glUniform1i=_glUniform1i;_emscripten_glUniform1i.sig="vii";var miniTempWebGLIntBuffers=[];function _glUniform1iv(location,count,value){value>>>=0;if(count<=288){var view=miniTempWebGLIntBuffers[count];for(var i=0;i<count;++i){view[i]=HEAP32[value+4*i>>>2>>>0]}}else{var view=HEAP32.subarray(value>>>2>>>0,value+count*4>>>2>>>0)}GLctx.uniform1iv(webglGetUniformLocation(location),view)}_glUniform1iv.sig="viip";var _emscripten_glUniform1iv=_glUniform1iv;_emscripten_glUniform1iv.sig="viip";var _glUniform1ui=(location,v0)=>{GLctx.uniform1ui(webglGetUniformLocation(location),v0)};_glUniform1ui.sig="vii";var _emscripten_glUniform1ui=_glUniform1ui;_emscripten_glUniform1ui.sig="vii";function _glUniform1uiv(location,count,value){value>>>=0;count&&GLctx.uniform1uiv(webglGetUniformLocation(location),HEAPU32,value>>>2,count)}_glUniform1uiv.sig="viip";var _emscripten_glUniform1uiv=_glUniform1uiv;_emscripten_glUniform1uiv.sig="viip";var _glUniform2f=(location,v0,v1)=>{GLctx.uniform2f(webglGetUniformLocation(location),v0,v1)};_glUniform2f.sig="viff";var _emscripten_glUniform2f=_glUniform2f;_emscripten_glUniform2f.sig="viff";function _glUniform2fv(location,count,value){value>>>=0;if(count<=144){count*=2;var view=miniTempWebGLFloatBuffers[count];for(var i=0;i<count;i+=2){view[i]=HEAPF32[value+4*i>>>2>>>0];view[i+1]=HEAPF32[value+(4*i+4)>>>2>>>0]}}else{var view=HEAPF32.subarray(value>>>2>>>0,value+count*8>>>2>>>0)}GLctx.uniform2fv(webglGetUniformLocation(location),view)}_glUniform2fv.sig="viip";var _emscripten_glUniform2fv=_glUniform2fv;_emscripten_glUniform2fv.sig="viip";var _glUniform2i=(location,v0,v1)=>{GLctx.uniform2i(webglGetUniformLocation(location),v0,v1)};_glUniform2i.sig="viii";var _emscripten_glUniform2i=_glUniform2i;_emscripten_glUniform2i.sig="viii";function _glUniform2iv(location,count,value){value>>>=0;if(count<=144){count*=2;var view=miniTempWebGLIntBuffers[count];for(var i=0;i<count;i+=2){view[i]=HEAP32[value+4*i>>>2>>>0];view[i+1]=HEAP32[value+(4*i+4)>>>2>>>0]}}else{var view=HEAP32.subarray(value>>>2>>>0,value+count*8>>>2>>>0)}GLctx.uniform2iv(webglGetUniformLocation(location),view)}_glUniform2iv.sig="viip";var _emscripten_glUniform2iv=_glUniform2iv;_emscripten_glUniform2iv.sig="viip";var _glUniform2ui=(location,v0,v1)=>{GLctx.uniform2ui(webglGetUniformLocation(location),v0,v1)};_glUniform2ui.sig="viii";var _emscripten_glUniform2ui=_glUniform2ui;_emscripten_glUniform2ui.sig="viii";function _glUniform2uiv(location,count,value){value>>>=0;count&&GLctx.uniform2uiv(webglGetUniformLocation(location),HEAPU32,value>>>2,count*2)}_glUniform2uiv.sig="viip";var _emscripten_glUniform2uiv=_glUniform2uiv;_emscripten_glUniform2uiv.sig="viip";var _glUniform3f=(location,v0,v1,v2)=>{GLctx.uniform3f(webglGetUniformLocation(location),v0,v1,v2)};_glUniform3f.sig="vifff";var _emscripten_glUniform3f=_glUniform3f;_emscripten_glUniform3f.sig="vifff";function _glUniform3fv(location,count,value){value>>>=0;if(count<=96){count*=3;var view=miniTempWebGLFloatBuffers[count];for(var i=0;i<count;i+=3){view[i]=HEAPF32[value+4*i>>>2>>>0];view[i+1]=HEAPF32[value+(4*i+4)>>>2>>>0];view[i+2]=HEAPF32[value+(4*i+8)>>>2>>>0]}}else{var view=HEAPF32.subarray(value>>>2>>>0,value+count*12>>>2>>>0)}GLctx.uniform3fv(webglGetUniformLocation(location),view)}_glUniform3fv.sig="viip";var _emscripten_glUniform3fv=_glUniform3fv;_emscripten_glUniform3fv.sig="viip";var _glUniform3i=(location,v0,v1,v2)=>{GLctx.uniform3i(webglGetUniformLocation(location),v0,v1,v2)};_glUniform3i.sig="viiii";var _emscripten_glUniform3i=_glUniform3i;_emscripten_glUniform3i.sig="viiii";function _glUniform3iv(location,count,value){value>>>=0;if(count<=96){count*=3;var view=miniTempWebGLIntBuffers[count];for(var i=0;i<count;i+=3){view[i]=HEAP32[value+4*i>>>2>>>0];view[i+1]=HEAP32[value+(4*i+4)>>>2>>>0];view[i+2]=HEAP32[value+(4*i+8)>>>2>>>0]}}else{var view=HEAP32.subarray(value>>>2>>>0,value+count*12>>>2>>>0)}GLctx.uniform3iv(webglGetUniformLocation(location),view)}_glUniform3iv.sig="viip";var _emscripten_glUniform3iv=_glUniform3iv;_emscripten_glUniform3iv.sig="viip";var _glUniform3ui=(location,v0,v1,v2)=>{GLctx.uniform3ui(webglGetUniformLocation(location),v0,v1,v2)};_glUniform3ui.sig="viiii";var _emscripten_glUniform3ui=_glUniform3ui;_emscripten_glUniform3ui.sig="viiii";function _glUniform3uiv(location,count,value){value>>>=0;count&&GLctx.uniform3uiv(webglGetUniformLocation(location),HEAPU32,value>>>2,count*3)}_glUniform3uiv.sig="viip";var _emscripten_glUniform3uiv=_glUniform3uiv;_emscripten_glUniform3uiv.sig="viip";var _glUniform4f=(location,v0,v1,v2,v3)=>{GLctx.uniform4f(webglGetUniformLocation(location),v0,v1,v2,v3)};_glUniform4f.sig="viffff";var _emscripten_glUniform4f=_glUniform4f;_emscripten_glUniform4f.sig="viffff";function _glUniform4fv(location,count,value){value>>>=0;if(count<=72){var view=miniTempWebGLFloatBuffers[4*count];var heap=HEAPF32;value=value>>>2;count*=4;for(var i=0;i<count;i+=4){var dst=value+i;view[i]=heap[dst>>>0];view[i+1]=heap[dst+1>>>0];view[i+2]=heap[dst+2>>>0];view[i+3]=heap[dst+3>>>0]}}else{var view=HEAPF32.subarray(value>>>2>>>0,value+count*16>>>2>>>0)}GLctx.uniform4fv(webglGetUniformLocation(location),view)}_glUniform4fv.sig="viip";var _emscripten_glUniform4fv=_glUniform4fv;_emscripten_glUniform4fv.sig="viip";var _glUniform4i=(location,v0,v1,v2,v3)=>{GLctx.uniform4i(webglGetUniformLocation(location),v0,v1,v2,v3)};_glUniform4i.sig="viiiii";var _emscripten_glUniform4i=_glUniform4i;_emscripten_glUniform4i.sig="viiiii";function _glUniform4iv(location,count,value){value>>>=0;if(count<=72){count*=4;var view=miniTempWebGLIntBuffers[count];for(var i=0;i<count;i+=4){view[i]=HEAP32[value+4*i>>>2>>>0];view[i+1]=HEAP32[value+(4*i+4)>>>2>>>0];view[i+2]=HEAP32[value+(4*i+8)>>>2>>>0];view[i+3]=HEAP32[value+(4*i+12)>>>2>>>0]}}else{var view=HEAP32.subarray(value>>>2>>>0,value+count*16>>>2>>>0)}GLctx.uniform4iv(webglGetUniformLocation(location),view)}_glUniform4iv.sig="viip";var _emscripten_glUniform4iv=_glUniform4iv;_emscripten_glUniform4iv.sig="viip";var _glUniform4ui=(location,v0,v1,v2,v3)=>{GLctx.uniform4ui(webglGetUniformLocation(location),v0,v1,v2,v3)};_glUniform4ui.sig="viiiii";var _emscripten_glUniform4ui=_glUniform4ui;_emscripten_glUniform4ui.sig="viiiii";function _glUniform4uiv(location,count,value){value>>>=0;count&&GLctx.uniform4uiv(webglGetUniformLocation(location),HEAPU32,value>>>2,count*4)}_glUniform4uiv.sig="viip";var _emscripten_glUniform4uiv=_glUniform4uiv;_emscripten_glUniform4uiv.sig="viip";var _glUniformBlockBinding=(program,uniformBlockIndex,uniformBlockBinding)=>{program=GL.programs[program];GLctx.uniformBlockBinding(program,uniformBlockIndex,uniformBlockBinding)};_glUniformBlockBinding.sig="viii";var _emscripten_glUniformBlockBinding=_glUniformBlockBinding;_emscripten_glUniformBlockBinding.sig="viii";function _glUniformMatrix2fv(location,count,transpose,value){value>>>=0;if(count<=72){count*=4;var view=miniTempWebGLFloatBuffers[count];for(var i=0;i<count;i+=4){view[i]=HEAPF32[value+4*i>>>2>>>0];view[i+1]=HEAPF32[value+(4*i+4)>>>2>>>0];view[i+2]=HEAPF32[value+(4*i+8)>>>2>>>0];view[i+3]=HEAPF32[value+(4*i+12)>>>2>>>0]}}else{var view=HEAPF32.subarray(value>>>2>>>0,value+count*16>>>2>>>0)}GLctx.uniformMatrix2fv(webglGetUniformLocation(location),!!transpose,view)}_glUniformMatrix2fv.sig="viiip";var _emscripten_glUniformMatrix2fv=_glUniformMatrix2fv;_emscripten_glUniformMatrix2fv.sig="viiip";function _glUniformMatrix2x3fv(location,count,transpose,value){value>>>=0;count&&GLctx.uniformMatrix2x3fv(webglGetUniformLocation(location),!!transpose,HEAPF32,value>>>2,count*6)}_glUniformMatrix2x3fv.sig="viiip";var _emscripten_glUniformMatrix2x3fv=_glUniformMatrix2x3fv;_emscripten_glUniformMatrix2x3fv.sig="viiip";function _glUniformMatrix2x4fv(location,count,transpose,value){value>>>=0;count&&GLctx.uniformMatrix2x4fv(webglGetUniformLocation(location),!!transpose,HEAPF32,value>>>2,count*8)}_glUniformMatrix2x4fv.sig="viiip";var _emscripten_glUniformMatrix2x4fv=_glUniformMatrix2x4fv;_emscripten_glUniformMatrix2x4fv.sig="viiip";function _glUniformMatrix3fv(location,count,transpose,value){value>>>=0;if(count<=32){count*=9;var view=miniTempWebGLFloatBuffers[count];for(var i=0;i<count;i+=9){view[i]=HEAPF32[value+4*i>>>2>>>0];view[i+1]=HEAPF32[value+(4*i+4)>>>2>>>0];view[i+2]=HEAPF32[value+(4*i+8)>>>2>>>0];view[i+3]=HEAPF32[value+(4*i+12)>>>2>>>0];view[i+4]=HEAPF32[value+(4*i+16)>>>2>>>0];view[i+5]=HEAPF32[value+(4*i+20)>>>2>>>0];view[i+6]=HEAPF32[value+(4*i+24)>>>2>>>0];view[i+7]=HEAPF32[value+(4*i+28)>>>2>>>0];view[i+8]=HEAPF32[value+(4*i+32)>>>2>>>0]}}else{var view=HEAPF32.subarray(value>>>2>>>0,value+count*36>>>2>>>0)}GLctx.uniformMatrix3fv(webglGetUniformLocation(location),!!transpose,view)}_glUniformMatrix3fv.sig="viiip";var _emscripten_glUniformMatrix3fv=_glUniformMatrix3fv;_emscripten_glUniformMatrix3fv.sig="viiip";function _glUniformMatrix3x2fv(location,count,transpose,value){value>>>=0;count&&GLctx.uniformMatrix3x2fv(webglGetUniformLocation(location),!!transpose,HEAPF32,value>>>2,count*6)}_glUniformMatrix3x2fv.sig="viiip";var _emscripten_glUniformMatrix3x2fv=_glUniformMatrix3x2fv;_emscripten_glUniformMatrix3x2fv.sig="viiip";function _glUniformMatrix3x4fv(location,count,transpose,value){value>>>=0;count&&GLctx.uniformMatrix3x4fv(webglGetUniformLocation(location),!!transpose,HEAPF32,value>>>2,count*12)}_glUniformMatrix3x4fv.sig="viiip";var _emscripten_glUniformMatrix3x4fv=_glUniformMatrix3x4fv;_emscripten_glUniformMatrix3x4fv.sig="viiip";function _glUniformMatrix4fv(location,count,transpose,value){value>>>=0;if(count<=18){var view=miniTempWebGLFloatBuffers[16*count];var heap=HEAPF32;value=value>>>2;count*=16;for(var i=0;i<count;i+=16){var dst=value+i;view[i]=heap[dst>>>0];view[i+1]=heap[dst+1>>>0];view[i+2]=heap[dst+2>>>0];view[i+3]=heap[dst+3>>>0];view[i+4]=heap[dst+4>>>0];view[i+5]=heap[dst+5>>>0];view[i+6]=heap[dst+6>>>0];view[i+7]=heap[dst+7>>>0];view[i+8]=heap[dst+8>>>0];view[i+9]=heap[dst+9>>>0];view[i+10]=heap[dst+10>>>0];view[i+11]=heap[dst+11>>>0];view[i+12]=heap[dst+12>>>0];view[i+13]=heap[dst+13>>>0];view[i+14]=heap[dst+14>>>0];view[i+15]=heap[dst+15>>>0]}}else{var view=HEAPF32.subarray(value>>>2>>>0,value+count*64>>>2>>>0)}GLctx.uniformMatrix4fv(webglGetUniformLocation(location),!!transpose,view)}_glUniformMatrix4fv.sig="viiip";var _emscripten_glUniformMatrix4fv=_glUniformMatrix4fv;_emscripten_glUniformMatrix4fv.sig="viiip";function _glUniformMatrix4x2fv(location,count,transpose,value){value>>>=0;count&&GLctx.uniformMatrix4x2fv(webglGetUniformLocation(location),!!transpose,HEAPF32,value>>>2,count*8)}_glUniformMatrix4x2fv.sig="viiip";var _emscripten_glUniformMatrix4x2fv=_glUniformMatrix4x2fv;_emscripten_glUniformMatrix4x2fv.sig="viiip";function _glUniformMatrix4x3fv(location,count,transpose,value){value>>>=0;count&&GLctx.uniformMatrix4x3fv(webglGetUniformLocation(location),!!transpose,HEAPF32,value>>>2,count*12)}_glUniformMatrix4x3fv.sig="viiip";var _emscripten_glUniformMatrix4x3fv=_glUniformMatrix4x3fv;_emscripten_glUniformMatrix4x3fv.sig="viiip";var _glUseProgram=program=>{program=GL.programs[program];GLctx.useProgram(program);GLctx.currentProgram=program};_glUseProgram.sig="vi";var _emscripten_glUseProgram=_glUseProgram;_emscripten_glUseProgram.sig="vi";var _glValidateProgram=program=>{GLctx.validateProgram(GL.programs[program])};_glValidateProgram.sig="vi";var _emscripten_glValidateProgram=_glValidateProgram;_emscripten_glValidateProgram.sig="vi";var _glVertexAttrib1f=(x0,x1)=>GLctx.vertexAttrib1f(x0,x1);_glVertexAttrib1f.sig="vif";var _emscripten_glVertexAttrib1f=_glVertexAttrib1f;_emscripten_glVertexAttrib1f.sig="vif";function _glVertexAttrib1fv(index,v){v>>>=0;GLctx.vertexAttrib1f(index,HEAPF32[v>>>2])}_glVertexAttrib1fv.sig="vip";var _emscripten_glVertexAttrib1fv=_glVertexAttrib1fv;_emscripten_glVertexAttrib1fv.sig="vip";var _glVertexAttrib2f=(x0,x1,x2)=>GLctx.vertexAttrib2f(x0,x1,x2);_glVertexAttrib2f.sig="viff";var _emscripten_glVertexAttrib2f=_glVertexAttrib2f;_emscripten_glVertexAttrib2f.sig="viff";function _glVertexAttrib2fv(index,v){v>>>=0;GLctx.vertexAttrib2f(index,HEAPF32[v>>>2],HEAPF32[v+4>>>2])}_glVertexAttrib2fv.sig="vip";var _emscripten_glVertexAttrib2fv=_glVertexAttrib2fv;_emscripten_glVertexAttrib2fv.sig="vip";var _glVertexAttrib3f=(x0,x1,x2,x3)=>GLctx.vertexAttrib3f(x0,x1,x2,x3);_glVertexAttrib3f.sig="vifff";var _emscripten_glVertexAttrib3f=_glVertexAttrib3f;_emscripten_glVertexAttrib3f.sig="vifff";function _glVertexAttrib3fv(index,v){v>>>=0;GLctx.vertexAttrib3f(index,HEAPF32[v>>>2],HEAPF32[v+4>>>2],HEAPF32[v+8>>>2])}_glVertexAttrib3fv.sig="vip";var _emscripten_glVertexAttrib3fv=_glVertexAttrib3fv;_emscripten_glVertexAttrib3fv.sig="vip";var _glVertexAttrib4f=(x0,x1,x2,x3,x4)=>GLctx.vertexAttrib4f(x0,x1,x2,x3,x4);_glVertexAttrib4f.sig="viffff";var _emscripten_glVertexAttrib4f=_glVertexAttrib4f;_emscripten_glVertexAttrib4f.sig="viffff";function _glVertexAttrib4fv(index,v){v>>>=0;GLctx.vertexAttrib4f(index,HEAPF32[v>>>2],HEAPF32[v+4>>>2],HEAPF32[v+8>>>2],HEAPF32[v+12>>>2])}_glVertexAttrib4fv.sig="vip";var _emscripten_glVertexAttrib4fv=_glVertexAttrib4fv;_emscripten_glVertexAttrib4fv.sig="vip";var _glVertexAttribDivisor=(index,divisor)=>{GLctx.vertexAttribDivisor(index,divisor)};_glVertexAttribDivisor.sig="vii";var _emscripten_glVertexAttribDivisor=_glVertexAttribDivisor;_emscripten_glVertexAttribDivisor.sig="vii";var _glVertexAttribDivisorANGLE=_glVertexAttribDivisor;var _emscripten_glVertexAttribDivisorANGLE=_glVertexAttribDivisorANGLE;var _glVertexAttribDivisorARB=_glVertexAttribDivisor;var _emscripten_glVertexAttribDivisorARB=_glVertexAttribDivisorARB;var _glVertexAttribDivisorEXT=_glVertexAttribDivisor;var _emscripten_glVertexAttribDivisorEXT=_glVertexAttribDivisorEXT;var _glVertexAttribDivisorNV=_glVertexAttribDivisor;var _emscripten_glVertexAttribDivisorNV=_glVertexAttribDivisorNV;var _glVertexAttribI4i=(x0,x1,x2,x3,x4)=>GLctx.vertexAttribI4i(x0,x1,x2,x3,x4);_glVertexAttribI4i.sig="viiiii";var _emscripten_glVertexAttribI4i=_glVertexAttribI4i;_emscripten_glVertexAttribI4i.sig="viiiii";function _glVertexAttribI4iv(index,v){v>>>=0;GLctx.vertexAttribI4i(index,HEAP32[v>>>2],HEAP32[v+4>>>2],HEAP32[v+8>>>2],HEAP32[v+12>>>2])}_glVertexAttribI4iv.sig="vip";var _emscripten_glVertexAttribI4iv=_glVertexAttribI4iv;_emscripten_glVertexAttribI4iv.sig="vip";var _glVertexAttribI4ui=(x0,x1,x2,x3,x4)=>GLctx.vertexAttribI4ui(x0,x1,x2,x3,x4);_glVertexAttribI4ui.sig="viiiii";var _emscripten_glVertexAttribI4ui=_glVertexAttribI4ui;_emscripten_glVertexAttribI4ui.sig="viiiii";function _glVertexAttribI4uiv(index,v){v>>>=0;GLctx.vertexAttribI4ui(index,HEAPU32[v>>>2],HEAPU32[v+4>>>2],HEAPU32[v+8>>>2],HEAPU32[v+12>>>2])}_glVertexAttribI4uiv.sig="vip";var _emscripten_glVertexAttribI4uiv=_glVertexAttribI4uiv;_emscripten_glVertexAttribI4uiv.sig="vip";function _glVertexAttribIPointer(index,size,type,stride,ptr){ptr>>>=0;GLctx.vertexAttribIPointer(index,size,type,stride,ptr)}_glVertexAttribIPointer.sig="viiiip";var _emscripten_glVertexAttribIPointer=_glVertexAttribIPointer;_emscripten_glVertexAttribIPointer.sig="viiiip";function _glVertexAttribPointer(index,size,type,normalized,stride,ptr){ptr>>>=0;GLctx.vertexAttribPointer(index,size,type,!!normalized,stride,ptr)}_glVertexAttribPointer.sig="viiiiip";var _emscripten_glVertexAttribPointer=_glVertexAttribPointer;_emscripten_glVertexAttribPointer.sig="viiiiip";var _glViewport=(x0,x1,x2,x3)=>GLctx.viewport(x0,x1,x2,x3);_glViewport.sig="viiii";var _emscripten_glViewport=_glViewport;_emscripten_glViewport.sig="viiii";function _glWaitSync(sync,flags,timeout){sync>>>=0;timeout=Number(timeout);GLctx.waitSync(GL.syncs[sync],flags,timeout)}_glWaitSync.sig="vpij";var _emscripten_glWaitSync=_glWaitSync;_emscripten_glWaitSync.sig="vpij";function _emscripten_out(str){str>>>=0;return out(UTF8ToString(str))}_emscripten_out.sig="vp";class HandleAllocator{allocated=[undefined];freelist=[];get(id){return this.allocated[id]}has(id){return this.allocated[id]!==undefined}allocate(handle){var id=this.freelist.pop()||this.allocated.length;this.allocated[id]=handle;return id}free(id){this.allocated[id]=undefined;this.freelist.push(id)}}var promiseMap=new HandleAllocator;var makePromise=()=>{var promiseInfo={};promiseInfo.promise=new Promise((resolve,reject)=>{promiseInfo.reject=reject;promiseInfo.resolve=resolve});promiseInfo.id=promiseMap.allocate(promiseInfo);return promiseInfo};function _emscripten_promise_create(){return makePromise().id}_emscripten_promise_create.sig="p";function _emscripten_promise_destroy(id){id>>>=0;promiseMap.free(id)}_emscripten_promise_destroy.sig="vp";var getPromise=id=>promiseMap.get(id).promise;function _emscripten_promise_resolve(id,result,value){id>>>=0;value>>>=0;var info=promiseMap.get(id);switch(result){case 0:info.resolve(value);return;case 1:info.resolve(getPromise(value));return;case 2:info.resolve(getPromise(value));_emscripten_promise_destroy(value);return;case 3:info.reject(value);return}}_emscripten_promise_resolve.sig="vpip";var growMemory=size=>{var b=wasmMemory.buffer;var pages=(size-b.byteLength+65535)/65536|0;try{wasmMemory.grow(pages);updateMemoryViews();return 1}catch(e){}};function _emscripten_resize_heap(requestedSize){requestedSize>>>=0;var oldSize=HEAPU8.length;var maxHeapSize=getHeapMax();if(requestedSize>maxHeapSize){return false}for(var cutDown=1;cutDown<=4;cutDown*=2){var overGrownHeapSize=oldSize*(1+.2/cutDown);overGrownHeapSize=Math.min(overGrownHeapSize,requestedSize+100663296);var newSize=Math.min(maxHeapSize,alignMemory(Math.max(requestedSize,overGrownHeapSize),65536));var replacement=growMemory(newSize);if(replacement){return true}}return false}_emscripten_resize_heap.sig="ip";var _emscripten_runtime_keepalive_pop=runtimeKeepalivePop;_emscripten_runtime_keepalive_pop.sig="v";var _emscripten_runtime_keepalive_push=runtimeKeepalivePush;_emscripten_runtime_keepalive_push.sig="v";var ENV={};var getEnvStrings=()=>{if(!getEnvStrings.strings){var lang=(typeof navigator=="object"&&navigator.languages&&navigator.languages[0]||"C").replace("-","_")+".UTF-8";var env={USER:"web_user",LOGNAME:"web_user",PATH:"/",PWD:"/",HOME:"/home/web_user",LANG:lang,_:getExecutableName()};for(var x in ENV){if(ENV[x]===undefined)delete env[x];else env[x]=ENV[x]}var strings=[];for(var x in env){strings.push(`${x}=${env[x]}`)}getEnvStrings.strings=strings}return getEnvStrings.strings};function _environ_get(__environ,environ_buf){__environ>>>=0;environ_buf>>>=0;var bufSize=0;var envp=0;for(var string of getEnvStrings()){var ptr=environ_buf+bufSize;HEAPU32[__environ+envp>>>2>>>0]=ptr;bufSize+=stringToUTF8(string,ptr,Infinity)+1;envp+=4}return 0}_environ_get.sig="ipp";function _environ_sizes_get(penviron_count,penviron_buf_size){penviron_count>>>=0;penviron_buf_size>>>=0;var strings=getEnvStrings();HEAPU32[penviron_count>>>2>>>0]=strings.length;var bufSize=0;for(var string of strings){bufSize+=lengthBytesUTF8(string)+1}HEAPU32[penviron_buf_size>>>2>>>0]=bufSize;return 0}_environ_sizes_get.sig="ipp";function _fd_close(fd){try{var stream=SYSCALLS.getStreamFromFD(fd);FS.close(stream);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return e.errno}}_fd_close.sig="ii";function _fd_fdstat_get(fd,pbuf){pbuf>>>=0;try{var rightsBase=0;var rightsInheriting=0;var flags=0;{var stream=SYSCALLS.getStreamFromFD(fd);var type=stream.tty?2:FS.isDir(stream.mode)?3:FS.isLink(stream.mode)?7:4}HEAP8[pbuf>>>0]=type;HEAP16[pbuf+2>>>1>>>0]=flags;HEAP64[pbuf+8>>>3>>>0]=BigInt(rightsBase);HEAP64[pbuf+16>>>3>>>0]=BigInt(rightsInheriting);return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return e.errno}}_fd_fdstat_get.sig="iip";var doReadv=(stream,iov,iovcnt,offset)=>{var ret=0;for(var i=0;i<iovcnt;i++){var ptr=HEAPU32[iov>>>2>>>0];var len=HEAPU32[iov+4>>>2>>>0];iov+=8;var curr=FS.read(stream,HEAP8,ptr,len,offset);if(curr<0)return-1;ret+=curr;if(curr<len)break;if(typeof offset!="undefined"){offset+=curr}}return ret};function _fd_pread(fd,iov,iovcnt,offset,pnum){iov>>>=0;iovcnt>>>=0;offset=bigintToI53Checked(offset);pnum>>>=0;try{if(isNaN(offset))return 61;var stream=SYSCALLS.getStreamFromFD(fd);var num=doReadv(stream,iov,iovcnt,offset);HEAPU32[pnum>>>2>>>0]=num;return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return e.errno}}_fd_pread.sig="iippjp";var doWritev=(stream,iov,iovcnt,offset)=>{var ret=0;for(var i=0;i<iovcnt;i++){var ptr=HEAPU32[iov>>>2>>>0];var len=HEAPU32[iov+4>>>2>>>0];iov+=8;var curr=FS.write(stream,HEAP8,ptr,len,offset);if(curr<0)return-1;ret+=curr;if(curr<len){break}if(typeof offset!="undefined"){offset+=curr}}return ret};function _fd_pwrite(fd,iov,iovcnt,offset,pnum){iov>>>=0;iovcnt>>>=0;offset=bigintToI53Checked(offset);pnum>>>=0;try{if(isNaN(offset))return 61;var stream=SYSCALLS.getStreamFromFD(fd);var num=doWritev(stream,iov,iovcnt,offset);HEAPU32[pnum>>>2>>>0]=num;return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return e.errno}}_fd_pwrite.sig="iippjp";function _fd_read(fd,iov,iovcnt,pnum){iov>>>=0;iovcnt>>>=0;pnum>>>=0;try{var stream=SYSCALLS.getStreamFromFD(fd);var num=doReadv(stream,iov,iovcnt);HEAPU32[pnum>>>2>>>0]=num;return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return e.errno}}_fd_read.sig="iippp";function _fd_seek(fd,offset,whence,newOffset){offset=bigintToI53Checked(offset);newOffset>>>=0;try{if(isNaN(offset))return 61;var stream=SYSCALLS.getStreamFromFD(fd);FS.llseek(stream,offset,whence);HEAP64[newOffset>>>3>>>0]=BigInt(stream.position);if(stream.getdents&&offset===0&&whence===0)stream.getdents=null;return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return e.errno}}_fd_seek.sig="iijip";function _fd_sync(fd){try{var stream=SYSCALLS.getStreamFromFD(fd);if(stream.stream_ops?.fsync){return stream.stream_ops.fsync(stream)}return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return e.errno}}_fd_sync.sig="ii";function _fd_write(fd,iov,iovcnt,pnum){iov>>>=0;iovcnt>>>=0;pnum>>>=0;try{var stream=SYSCALLS.getStreamFromFD(fd);var num=doWritev(stream,iov,iovcnt);HEAPU32[pnum>>>2>>>0]=num;return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return e.errno}}_fd_write.sig="iippp";function _getaddrinfo(node,service,hint,out){node>>>=0;service>>>=0;hint>>>=0;out>>>=0;var addrs=[];var canon=null;var addr=0;var port=0;var flags=0;var family=0;var type=0;var proto=0;var ai,last;function allocaddrinfo(family,type,proto,canon,addr,port){var sa,salen,ai;var errno;salen=family===10?28:16;addr=family===10?inetNtop6(addr):inetNtop4(addr);sa=_malloc(salen);errno=writeSockaddr(sa,family,addr,port);assert(!errno);ai=_malloc(32);HEAP32[ai+4>>>2>>>0]=family;HEAP32[ai+8>>>2>>>0]=type;HEAP32[ai+12>>>2>>>0]=proto;HEAPU32[ai+24>>>2>>>0]=canon;HEAPU32[ai+20>>>2>>>0]=sa;if(family===10){HEAP32[ai+16>>>2>>>0]=28}else{HEAP32[ai+16>>>2>>>0]=16}HEAP32[ai+28>>>2>>>0]=0;return ai}if(hint){flags=HEAP32[hint>>>2>>>0];family=HEAP32[hint+4>>>2>>>0];type=HEAP32[hint+8>>>2>>>0];proto=HEAP32[hint+12>>>2>>>0]}if(type&&!proto){proto=type===2?17:6}if(!type&&proto){type=proto===17?2:1}if(proto===0){proto=6}if(type===0){type=1}if(!node&&!service){return-2}if(flags&~(1|2|4|1024|8|16|32)){return-1}if(hint!==0&&HEAP32[hint>>>2>>>0]&2&&!node){return-1}if(flags&32){return-2}if(type!==0&&type!==1&&type!==2){return-7}if(family!==0&&family!==2&&family!==10){return-6}if(service){service=UTF8ToString(service);port=parseInt(service,10);if(isNaN(port)){if(flags&1024){return-2}return-8}}if(!node){if(family===0){family=2}if((flags&1)===0){if(family===2){addr=_htonl(2130706433)}else{addr=[0,0,0,_htonl(1)]}}ai=allocaddrinfo(family,type,proto,null,addr,port);HEAPU32[out>>>2>>>0]=ai;return 0}node=UTF8ToString(node);addr=inetPton4(node);if(addr!==null){if(family===0||family===2){family=2}else if(family===10&&flags&8){addr=[0,0,_htonl(65535),addr];family=10}else{return-2}}else{addr=inetPton6(node);if(addr!==null){if(family===0||family===10){family=10}else{return-2}}}if(addr!=null){ai=allocaddrinfo(family,type,proto,node,addr,port);HEAPU32[out>>>2>>>0]=ai;return 0}if(flags&4){return-2}node=DNS.lookup_name(node);addr=inetPton4(node);if(family===0){family=2}else if(family===10){addr=[0,0,_htonl(65535),addr]}ai=allocaddrinfo(family,type,proto,null,addr,port);HEAPU32[out>>>2>>>0]=ai;return 0}_getaddrinfo.sig="ipppp";function _getnameinfo(sa,salen,node,nodelen,serv,servlen,flags){sa>>>=0;node>>>=0;serv>>>=0;var info=readSockaddr(sa,salen);if(info.errno){return-6}var port=info.port;var addr=info.addr;var overflowed=false;if(node&&nodelen){var lookup;if(flags&1||!(lookup=DNS.lookup_addr(addr))){if(flags&8){return-2}}else{addr=lookup}var numBytesWrittenExclNull=stringToUTF8(addr,node,nodelen);if(numBytesWrittenExclNull+1>=nodelen){overflowed=true}}if(serv&&servlen){port=""+port;var numBytesWrittenExclNull=stringToUTF8(port,serv,servlen);if(numBytesWrittenExclNull+1>=servlen){overflowed=true}}if(overflowed){return-12}return 0}_getnameinfo.sig="ipipipii";var Protocols={list:[],map:{}};var stringToAscii=(str,buffer)=>{for(var i=0;i<str.length;++i){HEAP8[buffer++>>>0]=str.charCodeAt(i)}HEAP8[buffer>>>0]=0};var _setprotoent=stayopen=>{function allocprotoent(name,proto,aliases){var nameBuf=_malloc(name.length+1);stringToAscii(name,nameBuf);var j=0;var length=aliases.length;var aliasListBuf=_malloc((length+1)*4);for(var i=0;i<length;i++,j+=4){var alias=aliases[i];var aliasBuf=_malloc(alias.length+1);stringToAscii(alias,aliasBuf);HEAPU32[aliasListBuf+j>>>2>>>0]=aliasBuf}HEAPU32[aliasListBuf+j>>>2>>>0]=0;var pe=_malloc(12);HEAPU32[pe>>>2>>>0]=nameBuf;HEAPU32[pe+4>>>2>>>0]=aliasListBuf;HEAP32[pe+8>>>2>>>0]=proto;return pe}var list=Protocols.list;var map=Protocols.map;if(list.length===0){var entry=allocprotoent("tcp",6,["TCP"]);list.push(entry);map["tcp"]=map["6"]=entry;entry=allocprotoent("udp",17,["UDP"]);list.push(entry);map["udp"]=map["17"]=entry}_setprotoent.index=0};_setprotoent.sig="vi";function _getprotobyname(name){name>>>=0;name=UTF8ToString(name);_setprotoent(true);var result=Protocols.map[name];return result}_getprotobyname.sig="pp";function _is_sentinel(...args){return wasmImports["is_sentinel"](...args)}_is_sentinel.stub=true;function _random_get(buffer,size){buffer>>>=0;size>>>=0;try{randomFill(HEAPU8.subarray(buffer>>>0,buffer+size>>>0));return 0}catch(e){if(typeof FS=="undefined"||!(e.name==="ErrnoError"))throw e;return e.errno}}_random_get.sig="ipp";var _stackAlloc=stackAlloc;var _stackRestore=stackSave;var _stackSave=stackSave;var FS_createPath=(...args)=>FS.createPath(...args);var FS_unlink=(...args)=>FS.unlink(...args);var FS_createLazyFile=(...args)=>FS.createLazyFile(...args);var FS_createDevice=(...args)=>FS.createDevice(...args);var writeI53ToI64Clamped=(ptr,num)=>{if(num>0x8000000000000000){HEAPU32[ptr>>>2>>>0]=4294967295;HEAPU32[ptr+4>>>2>>>0]=2147483647}else if(num<-0x8000000000000000){HEAPU32[ptr>>>2>>>0]=0;HEAPU32[ptr+4>>>2>>>0]=2147483648}else{writeI53ToI64(ptr,num)}};var writeI53ToI64Signaling=(ptr,num)=>{if(num>0x8000000000000000||num<-0x8000000000000000){throw`RangeError: ${num}`}writeI53ToI64(ptr,num)};var writeI53ToU64Clamped=(ptr,num)=>{if(num>0x10000000000000000){HEAPU32[ptr>>>2>>>0]=4294967295;HEAPU32[ptr+4>>>2>>>0]=4294967295}else if(num<0){HEAPU32[ptr>>>2>>>0]=0;HEAPU32[ptr+4>>>2>>>0]=0}else{writeI53ToI64(ptr,num)}};var writeI53ToU64Signaling=(ptr,num)=>{if(num<0||num>0x10000000000000000){throw`RangeError: ${num}`}writeI53ToI64(ptr,num)};var readI53FromU64=ptr=>HEAPU32[ptr>>>2>>>0]+HEAPU32[ptr+4>>>2>>>0]*4294967296;var convertI32PairToI53=(lo,hi)=>(lo>>>0)+hi*4294967296;var convertI32PairToI53Checked=(lo,hi)=>hi+2097152>>>0<4194305-!!lo?(lo>>>0)+hi*4294967296:NaN;var convertU32PairToI53=(lo,hi)=>(lo>>>0)+(hi>>>0)*4294967296;var getTempRet0=val=>__emscripten_tempret_get();var setTempRet0=val=>__emscripten_tempret_set(val);var ptrToString=ptr=>"0x"+ptr.toString(16).padStart(8,"0");function _emscripten_notify_memory_growth(memoryIndex){memoryIndex>>>=0;updateMemoryViews()}_emscripten_notify_memory_growth.sig="vp";var strError=errno=>UTF8ToString(_strerror(errno));var _endprotoent=()=>{};_endprotoent.sig="v";function _getprotoent(number){if(_setprotoent.index===Protocols.list.length){return 0}var result=Protocols.list[_setprotoent.index++];return result}_getprotoent.sig="p";function _getprotobynumber(number){_setprotoent(true);var result=Protocols.map[number];return result}_getprotobynumber.sig="pi";var Sockets={BUFFER_SIZE:10240,MAX_BUFFER_SIZE:10485760,nextFd:1,fds:{},nextport:1,maxport:65535,peer:null,connections:{},portmap:{},localAddr:4261412874,addrPool:[33554442,50331658,67108874,83886090,100663306,117440522,134217738,150994954,167772170,184549386,201326602,218103818,234881034]};function _emscripten_run_script(ptr){ptr>>>=0;eval(UTF8ToString(ptr))}_emscripten_run_script.sig="vp";function _emscripten_run_script_int(ptr){ptr>>>=0;return eval(UTF8ToString(ptr))|0}_emscripten_run_script_int.sig="ip";function _emscripten_run_script_string(ptr){ptr>>>=0;var s=eval(UTF8ToString(ptr));if(s==null){return 0}s+="";var me=_emscripten_run_script_string;var len=lengthBytesUTF8(s);if(!me.bufferSize||me.bufferSize<len+1){if(me.bufferSize)_free(me.buffer);me.bufferSize=len+1;me.buffer=_malloc(me.bufferSize)}stringToUTF8(s,me.buffer,me.bufferSize);return me.buffer}_emscripten_run_script_string.sig="pp";var _emscripten_random=()=>Math.random();_emscripten_random.sig="f";var _emscripten_performance_now=()=>performance.now();_emscripten_performance_now.sig="d";var __emscripten_get_now_is_monotonic=()=>nowIsMonotonic;__emscripten_get_now_is_monotonic.sig="i";var warnOnce=text=>{warnOnce.shown||={};if(!warnOnce.shown[text]){warnOnce.shown[text]=1;if(ENVIRONMENT_IS_NODE)text="warning: "+text;err(text)}};var jsStackTrace=()=>(new Error).stack.toString();var getCallstack=flags=>{var callstack=jsStackTrace();var lines=callstack.split("\n");callstack="";var firefoxRe=new RegExp("\\s*(.*?)@(.*?):([0-9]+):([0-9]+)");var chromeRe=new RegExp("\\s*at (.*?) \\((.*):(.*):(.*)\\)");for(var line of lines){var symbolName="";var file="";var lineno=0;var column=0;var parts=chromeRe.exec(line);if(parts?.length==5){symbolName=parts[1];file=parts[2];lineno=parts[3];column=parts[4]}else{parts=firefoxRe.exec(line);if(parts?.length>=4){symbolName=parts[1];file=parts[2];lineno=parts[3];column=parts[4]|0}else{callstack+=line+"\n";continue}}if(symbolName=="_emscripten_log"||symbolName=="_emscripten_get_callstack"){callstack="";continue}if(flags&24){if(flags&64){file=file.substring(file.replace(/\\/g,"/").lastIndexOf("/")+1)}callstack+=`    at ${symbolName} (${file}:${lineno}:${column})\n`}}callstack=callstack.replace(/\s+$/,"");return callstack};var emscriptenLog=(flags,str)=>{if(flags&24){str=str.replace(/\s+$/,"");str+=(str.length>0?"\n":"")+getCallstack(flags)}if(flags&1){if(flags&4){console.error(str)}else if(flags&2){console.warn(str)}else if(flags&512){console.info(str)}else if(flags&256){console.debug(str)}else{console.log(str)}}else if(flags&6){err(str)}else{out(str)}};var reallyNegative=x=>x<0||x===0&&1/x===-Infinity;var reSign=(value,bits)=>{if(value<=0){return value}var half=bits<=32?Math.abs(1<<bits-1):Math.pow(2,bits-1);if(value>=half&&(bits<=32||value>half)){value=-2*half+value}return value};var unSign=(value,bits)=>{if(value>=0){return value}return bits<=32?2*Math.abs(1<<bits-1)+value:Math.pow(2,bits)+value};var strLen=ptr=>{var end=ptr;while(HEAPU8[end>>>0])++end;return end-ptr};var formatString=(format,varargs)=>{var textIndex=format;var argIndex=varargs;function prepVararg(ptr,type){if(type==="double"||type==="i64"){if(ptr&7){ptr+=4}}else{}return ptr}function getNextArg(type){var ret;argIndex=prepVararg(argIndex,type);if(type==="double"){ret=HEAPF64[argIndex>>>3>>>0];argIndex+=8}else if(type=="i64"){ret=[HEAP32[argIndex>>>2>>>0],HEAP32[argIndex+4>>>2>>>0]];argIndex+=8}else{type="i32";ret=HEAP32[argIndex>>>2>>>0];argIndex+=4}return ret}var ret=[];var curr,next,currArg;while(1){var startTextIndex=textIndex;curr=HEAP8[textIndex>>>0];if(curr===0)break;next=HEAP8[textIndex+1>>>0];if(curr==37){var flagAlwaysSigned=false;var flagLeftAlign=false;var flagAlternative=false;var flagZeroPad=false;var flagPadSign=false;flagsLoop:while(1){switch(next){case 43:flagAlwaysSigned=true;break;case 45:flagLeftAlign=true;break;case 35:flagAlternative=true;break;case 48:if(flagZeroPad){break flagsLoop}else{flagZeroPad=true;break}case 32:flagPadSign=true;break;default:break flagsLoop}textIndex++;next=HEAP8[textIndex+1>>>0]}var width=0;if(next==42){width=getNextArg("i32");textIndex++;next=HEAP8[textIndex+1>>>0]}else{while(next>=48&&next<=57){width=width*10+(next-48);textIndex++;next=HEAP8[textIndex+1>>>0]}}var precisionSet=false,precision=-1;if(next==46){precision=0;precisionSet=true;textIndex++;next=HEAP8[textIndex+1>>>0];if(next==42){precision=getNextArg("i32");textIndex++}else{while(1){var precisionChr=HEAP8[textIndex+1>>>0];if(precisionChr<48||precisionChr>57)break;precision=precision*10+(precisionChr-48);textIndex++}}next=HEAP8[textIndex+1>>>0]}if(precision<0){precision=6;precisionSet=false}var argSize;switch(String.fromCharCode(next)){case"h":var nextNext=HEAP8[textIndex+2>>>0];if(nextNext==104){textIndex++;argSize=1}else{argSize=2}break;case"l":var nextNext=HEAP8[textIndex+2>>>0];if(nextNext==108){textIndex++;argSize=8}else{argSize=4}break;case"L":case"q":case"j":argSize=8;break;case"z":case"t":case"I":argSize=4;break;default:argSize=null}if(argSize)textIndex++;next=HEAP8[textIndex+1>>>0];switch(String.fromCharCode(next)){case"d":case"i":case"u":case"o":case"x":case"X":case"p":{var signed=next==100||next==105;argSize=argSize||4;currArg=getNextArg("i"+argSize*8);var argText;if(argSize==8){currArg=next==117?convertU32PairToI53(currArg[0],currArg[1]):convertI32PairToI53(currArg[0],currArg[1])}if(argSize<=4){var limit=Math.pow(256,argSize)-1;currArg=(signed?reSign:unSign)(currArg&limit,argSize*8)}var currAbsArg=Math.abs(currArg);var prefix="";if(next==100||next==105){argText=reSign(currArg,8*argSize).toString(10)}else if(next==117){argText=unSign(currArg,8*argSize).toString(10);currArg=Math.abs(currArg)}else if(next==111){argText=(flagAlternative?"0":"")+currAbsArg.toString(8)}else if(next==120||next==88){prefix=flagAlternative&&currArg!=0?"0x":"";if(currArg<0){currArg=-currArg;argText=(currAbsArg-1).toString(16);var buffer=[];for(var i=0;i<argText.length;i++){buffer.push((15-parseInt(argText[i],16)).toString(16))}argText=buffer.join("");while(argText.length<argSize*2)argText="f"+argText}else{argText=currAbsArg.toString(16)}if(next==88){prefix=prefix.toUpperCase();argText=argText.toUpperCase()}}else if(next==112){if(currAbsArg===0){argText="(nil)"}else{prefix="0x";argText=currAbsArg.toString(16)}}if(precisionSet){while(argText.length<precision){argText="0"+argText}}if(currArg>=0){if(flagAlwaysSigned){prefix="+"+prefix}else if(flagPadSign){prefix=" "+prefix}}if(argText.charAt(0)=="-"){prefix="-"+prefix;argText=argText.slice(1)}while(prefix.length+argText.length<width){if(flagLeftAlign){argText+=" "}else{if(flagZeroPad){argText="0"+argText}else{prefix=" "+prefix}}}argText=prefix+argText;argText.split("").forEach(chr=>ret.push(chr.charCodeAt(0)));break}case"f":case"F":case"e":case"E":case"g":case"G":{currArg=getNextArg("double");var argText;if(isNaN(currArg)){argText="nan";flagZeroPad=false}else if(!isFinite(currArg)){argText=(currArg<0?"-":"")+"inf";flagZeroPad=false}else{var isGeneral=false;var effectivePrecision=Math.min(precision,20);if(next==103||next==71){isGeneral=true;precision=precision||1;var exponent=parseInt(currArg.toExponential(effectivePrecision).split("e")[1],10);if(precision>exponent&&exponent>=-4){next=(next==103?"f":"F").charCodeAt(0);precision-=exponent+1}else{next=(next==103?"e":"E").charCodeAt(0);precision--}effectivePrecision=Math.min(precision,20)}if(next==101||next==69){argText=currArg.toExponential(effectivePrecision);if(/[eE][-+]\d$/.test(argText)){argText=argText.slice(0,-1)+"0"+argText.slice(-1)}}else if(next==102||next==70){argText=currArg.toFixed(effectivePrecision);if(currArg===0&&reallyNegative(currArg)){argText="-"+argText}}var parts=argText.split("e");if(isGeneral&&!flagAlternative){while(parts[0].length>1&&parts[0].includes(".")&&(parts[0].slice(-1)=="0"||parts[0].slice(-1)==".")){parts[0]=parts[0].slice(0,-1)}}else{if(flagAlternative&&argText.indexOf(".")==-1)parts[0]+=".";while(precision>effectivePrecision++)parts[0]+="0"}argText=parts[0]+(parts.length>1?"e"+parts[1]:"");if(next==69)argText=argText.toUpperCase();if(currArg>=0){if(flagAlwaysSigned){argText="+"+argText}else if(flagPadSign){argText=" "+argText}}}while(argText.length<width){if(flagLeftAlign){argText+=" "}else{if(flagZeroPad&&(argText[0]=="-"||argText[0]=="+")){argText=argText[0]+"0"+argText.slice(1)}else{argText=(flagZeroPad?"0":" ")+argText}}}if(next<97)argText=argText.toUpperCase();argText.split("").forEach(chr=>ret.push(chr.charCodeAt(0)));break}case"s":{var arg=getNextArg("i8*");var argLength=arg?strLen(arg):"(null)".length;if(precisionSet)argLength=Math.min(argLength,precision);if(!flagLeftAlign){while(argLength<width--){ret.push(32)}}if(arg){for(var i=0;i<argLength;i++){ret.push(HEAPU8[arg++>>>0])}}else{ret=ret.concat(intArrayFromString("(null)".slice(0,argLength),true))}if(flagLeftAlign){while(argLength<width--){ret.push(32)}}break}case"c":{if(flagLeftAlign)ret.push(getNextArg("i8"));while(--width>0){ret.push(32)}if(!flagLeftAlign)ret.push(getNextArg("i8"));break}case"n":{var ptr=getNextArg("i32*");HEAP32[ptr>>>2>>>0]=ret.length;break}case"%":{ret.push(curr);break}default:{for(var i=startTextIndex;i<textIndex+2;i++){ret.push(HEAP8[i>>>0])}}}textIndex+=2}else{ret.push(curr);textIndex+=1}}return ret};function _emscripten_log(flags,format,varargs){format>>>=0;varargs>>>=0;var result=formatString(format,varargs);var str=UTF8ArrayToString(result);emscriptenLog(flags,str)}_emscripten_log.sig="vipp";function _emscripten_get_compiler_setting(name){name>>>=0;throw"You must build with -sRETAIN_COMPILER_SETTINGS for getCompilerSetting or emscripten_get_compiler_setting to work"}_emscripten_get_compiler_setting.sig="pp";var _emscripten_has_asyncify=()=>0;_emscripten_has_asyncify.sig="i";var _emscripten_debugger=()=>{debugger};_emscripten_debugger.sig="v";function _emscripten_print_double(x,to,max){to>>>=0;var str=x+"";if(to)return stringToUTF8(str,to,max);else return lengthBytesUTF8(str)}_emscripten_print_double.sig="idpi";function _emscripten_asm_const_double(code,sigPtr,argbuf){code>>>=0;sigPtr>>>=0;argbuf>>>=0;return runEmAsmFunction(code,sigPtr,argbuf)}_emscripten_asm_const_double.sig="dppp";function _emscripten_asm_const_ptr(code,sigPtr,argbuf){code>>>=0;sigPtr>>>=0;argbuf>>>=0;return runEmAsmFunction(code,sigPtr,argbuf)}_emscripten_asm_const_ptr.sig="pppp";var runMainThreadEmAsm=(emAsmAddr,sigPtr,argbuf,sync)=>{var args=readEmAsmArgs(sigPtr,argbuf);return ASM_CONSTS[emAsmAddr](...args)};function _emscripten_asm_const_int_sync_on_main_thread(emAsmAddr,sigPtr,argbuf){emAsmAddr>>>=0;sigPtr>>>=0;argbuf>>>=0;return runMainThreadEmAsm(emAsmAddr,sigPtr,argbuf,1)}_emscripten_asm_const_int_sync_on_main_thread.sig="ippp";function _emscripten_asm_const_ptr_sync_on_main_thread(emAsmAddr,sigPtr,argbuf){emAsmAddr>>>=0;sigPtr>>>=0;argbuf>>>=0;return runMainThreadEmAsm(emAsmAddr,sigPtr,argbuf,1)}_emscripten_asm_const_ptr_sync_on_main_thread.sig="pppp";var _emscripten_asm_const_double_sync_on_main_thread=_emscripten_asm_const_int_sync_on_main_thread;_emscripten_asm_const_double_sync_on_main_thread.sig="dppp";function _emscripten_asm_const_async_on_main_thread(emAsmAddr,sigPtr,argbuf){emAsmAddr>>>=0;sigPtr>>>=0;argbuf>>>=0;return runMainThreadEmAsm(emAsmAddr,sigPtr,argbuf,0)}_emscripten_asm_const_async_on_main_thread.sig="vppp";function __Unwind_Backtrace(func,arg){func>>>=0;arg>>>=0;var trace=getCallstack();var parts=trace.split("\n");for(var i=0;i<parts.length;i++){var ret=getWasmTableEntry(func)(0,arg);if(ret!==0)return}}__Unwind_Backtrace.sig="ipp";function __Unwind_GetIPInfo(context,ipBefore){context>>>=0;ipBefore>>>=0;return abort("Unwind_GetIPInfo")}__Unwind_GetIPInfo.sig="ppp";function __Unwind_FindEnclosingFunction(ip){ip>>>=0;return 0}__Unwind_FindEnclosingFunction.sig="pp";var listenOnce=(object,event,func)=>object.addEventListener(event,func,{once:true});var autoResumeAudioContext=(ctx,elements)=>{if(!elements){elements=[document,document.getElementById("canvas")]}["keydown","mousedown","touchstart"].forEach(event=>{elements.forEach(element=>{if(element){listenOnce(element,event,()=>{if(ctx.state==="suspended")ctx.resume()})}})})};var dynCall=(sig,ptr,args=[],promising=false)=>{var func=getWasmTableEntry(ptr);var rtn=func(...args);function convert(rtn){return sig[0]=="p"?rtn>>>0:rtn}return convert(rtn)};var getDynCaller=(sig,ptr,promising=false)=>(...args)=>dynCall(sig,ptr,args,promising);var _emscripten_exit_with_live_runtime=()=>{runtimeKeepalivePush();throw"unwind"};_emscripten_exit_with_live_runtime.sig="v";var _emscripten_force_exit=status=>{__emscripten_runtime_keepalive_clear();_exit(status)};_emscripten_force_exit.sig="vi";function _emscripten_outn(str,len){str>>>=0;len>>>=0;return out(UTF8ToString(str,len))}_emscripten_outn.sig="vpp";function _emscripten_errn(str,len){str>>>=0;len>>>=0;return err(UTF8ToString(str,len))}_emscripten_errn.sig="vpp";var _emscripten_throw_number=number=>{throw number};_emscripten_throw_number.sig="vd";function _emscripten_throw_string(str){str>>>=0;throw UTF8ToString(str)}_emscripten_throw_string.sig="vp";var _emscripten_runtime_keepalive_check=keepRuntimeAlive;_emscripten_runtime_keepalive_check.sig="i";var asmjsMangle=x=>{if(x=="__main_argc_argv"){x="main"}return x.startsWith("dynCall_")?x:"_"+x};var ___global_base=1024;function __emscripten_fs_load_embedded_files(ptr){ptr>>>=0;do{var name_addr=HEAPU32[ptr>>>2>>>0];ptr+=4;var len=HEAPU32[ptr>>>2>>>0];ptr+=4;var content=HEAPU32[ptr>>>2>>>0];ptr+=4;var name=UTF8ToString(name_addr);FS.createPath("/",PATH.dirname(name),true,true);FS.createDataFile(name,null,HEAP8.subarray(content>>>0,content+len>>>0),true,true,true)}while(HEAPU32[ptr>>>2>>>0])}__emscripten_fs_load_embedded_files.sig="vp";var POINTER_SIZE=4;function getNativeTypeSize(type){switch(type){case"i1":case"i8":case"u8":return 1;case"i16":case"u16":return 2;case"i32":case"u32":return 4;case"i64":case"u64":return 8;case"float":return 4;case"double":return 8;default:{if(type.endsWith("*")){return POINTER_SIZE}if(type[0]==="i"){const bits=Number(type.slice(1));assert(bits%8===0,`getNativeTypeSize invalid bits ${bits}, ${type} type`);return bits/8}return 0}}}var onInits=[];var addOnInit=cb=>onInits.push(cb);var onMains=[];var addOnPreMain=cb=>onMains.push(cb);var onExits=[];var addOnExit=cb=>onExits.push(cb);var STACK_SIZE=5242880;var STACK_ALIGN=16;var ASSERTIONS=0;var getCFunc=ident=>{var func=Module["_"+ident];return func};var writeArrayToMemory=(array,buffer)=>{HEAP8.set(array,buffer>>>0)};var ccall=(ident,returnType,argTypes,args,opts)=>{var toC={string:str=>{var ret=0;if(str!==null&&str!==undefined&&str!==0){ret=stringToUTF8OnStack(str)}return ret},array:arr=>{var ret=stackAlloc(arr.length);writeArrayToMemory(arr,ret);return ret}};function convertReturnValue(ret){if(returnType==="string"){return UTF8ToString(ret)}if(returnType==="boolean")return Boolean(ret);return ret}var func=getCFunc(ident);var cArgs=[];var stack=0;if(args){for(var i=0;i<args.length;i++){var converter=toC[argTypes[i]];if(converter){if(stack===0)stack=stackSave();cArgs[i]=converter(args[i])}else{cArgs[i]=args[i]}}}var ret=func(...cArgs);function onDone(ret){if(stack!==0)stackRestore(stack);return convertReturnValue(ret)}ret=onDone(ret);return ret};var cwrap=(ident,returnType,argTypes,opts)=>{var numericArgs=!argTypes||argTypes.every(type=>type==="number"||type==="boolean");var numericRet=returnType!=="string";if(numericRet&&numericArgs&&!opts){return getCFunc(ident)}return(...args)=>ccall(ident,returnType,argTypes,args,opts)};var removeFunction=index=>{functionsInTableMap.delete(getWasmTableEntry(index));setWasmTableEntry(index,null);freeTableIndexes.push(index)};var _emscripten_math_cbrt=Math.cbrt;_emscripten_math_cbrt.sig="dd";var _emscripten_math_pow=Math.pow;_emscripten_math_pow.sig="ddd";var _emscripten_math_random=Math.random;_emscripten_math_random.sig="d";var _emscripten_math_sign=Math.sign;_emscripten_math_sign.sig="dd";var _emscripten_math_sqrt=Math.sqrt;_emscripten_math_sqrt.sig="dd";var _emscripten_math_exp=Math.exp;_emscripten_math_exp.sig="dd";var _emscripten_math_expm1=Math.expm1;_emscripten_math_expm1.sig="dd";var _emscripten_math_fmod=(x,y)=>x%y;_emscripten_math_fmod.sig="ddd";var _emscripten_math_log=Math.log;_emscripten_math_log.sig="dd";var _emscripten_math_log1p=Math.log1p;_emscripten_math_log1p.sig="dd";var _emscripten_math_log10=Math.log10;_emscripten_math_log10.sig="dd";var _emscripten_math_log2=Math.log2;_emscripten_math_log2.sig="dd";var _emscripten_math_round=Math.round;_emscripten_math_round.sig="dd";var _emscripten_math_acos=Math.acos;_emscripten_math_acos.sig="dd";var _emscripten_math_acosh=Math.acosh;_emscripten_math_acosh.sig="dd";var _emscripten_math_asin=Math.asin;_emscripten_math_asin.sig="dd";var _emscripten_math_asinh=Math.asinh;_emscripten_math_asinh.sig="dd";var _emscripten_math_atan=Math.atan;_emscripten_math_atan.sig="dd";var _emscripten_math_atanh=Math.atanh;_emscripten_math_atanh.sig="dd";var _emscripten_math_atan2=Math.atan2;_emscripten_math_atan2.sig="ddd";var _emscripten_math_cos=Math.cos;_emscripten_math_cos.sig="dd";var _emscripten_math_cosh=Math.cosh;_emscripten_math_cosh.sig="dd";function _emscripten_math_hypot(count,varargs){varargs>>>=0;var args=[];for(var i=0;i<count;++i){args.push(HEAPF64[varargs+i*8>>>3>>>0])}return Math.hypot(...args)}_emscripten_math_hypot.sig="dip";var _emscripten_math_sin=Math.sin;_emscripten_math_sin.sig="dd";var _emscripten_math_sinh=Math.sinh;_emscripten_math_sinh.sig="dd";var _emscripten_math_tan=Math.tan;_emscripten_math_tan.sig="dd";var _emscripten_math_tanh=Math.tanh;_emscripten_math_tanh.sig="dd";var intArrayToString=array=>{var ret=[];for(var i=0;i<array.length;i++){var chr=array[i];if(chr>255){chr&=255}ret.push(String.fromCharCode(chr))}return ret.join("")};var AsciiToString=ptr=>{ptr>>>=0;var str="";while(1){var ch=HEAPU8[ptr++>>>0];if(!ch)return str;str+=String.fromCharCode(ch)}};var UTF16Decoder=typeof TextDecoder!="undefined"?new TextDecoder("utf-16le"):undefined;var UTF16ToString=(ptr,maxBytesToRead)=>{var idx=ptr>>>1;var maxIdx=idx+maxBytesToRead/2;var endIdx=idx;while(!(endIdx>=maxIdx)&&HEAPU16[endIdx>>>0])++endIdx;if(endIdx-idx>16&&UTF16Decoder)return UTF16Decoder.decode(HEAPU16.subarray(idx>>>0,endIdx>>>0));var str="";for(var i=idx;!(i>=maxIdx);++i){var codeUnit=HEAPU16[i>>>0];if(codeUnit==0)break;str+=String.fromCharCode(codeUnit)}return str};var stringToUTF16=(str,outPtr,maxBytesToWrite)=>{maxBytesToWrite??=2147483647;if(maxBytesToWrite<2)return 0;maxBytesToWrite-=2;var startPtr=outPtr;var numCharsToWrite=maxBytesToWrite<str.length*2?maxBytesToWrite/2:str.length;for(var i=0;i<numCharsToWrite;++i){var codeUnit=str.charCodeAt(i);HEAP16[outPtr>>>1>>>0]=codeUnit;outPtr+=2}HEAP16[outPtr>>>1>>>0]=0;return outPtr-startPtr};var lengthBytesUTF16=str=>str.length*2;var UTF32ToString=(ptr,maxBytesToRead)=>{var i=0;var str="";while(!(i>=maxBytesToRead/4)){var utf32=HEAP32[ptr+i*4>>>2>>>0];if(utf32==0)break;++i;if(utf32>=65536){var ch=utf32-65536;str+=String.fromCharCode(55296|ch>>10,56320|ch&1023)}else{str+=String.fromCharCode(utf32)}}return str};var stringToUTF32=(str,outPtr,maxBytesToWrite)=>{outPtr>>>=0;maxBytesToWrite??=2147483647;if(maxBytesToWrite<4)return 0;var startPtr=outPtr;var endPtr=startPtr+maxBytesToWrite-4;for(var i=0;i<str.length;++i){var codeUnit=str.charCodeAt(i);if(codeUnit>=55296&&codeUnit<=57343){var trailSurrogate=str.charCodeAt(++i);codeUnit=65536+((codeUnit&1023)<<10)|trailSurrogate&1023}HEAP32[outPtr>>>2>>>0]=codeUnit;outPtr+=4;if(outPtr+4>endPtr)break}HEAP32[outPtr>>>2>>>0]=0;return outPtr-startPtr};var lengthBytesUTF32=str=>{var len=0;for(var i=0;i<str.length;++i){var codeUnit=str.charCodeAt(i);if(codeUnit>=55296&&codeUnit<=57343)++i;len+=4}return len};var JSEvents={memcpy(target,src,size){HEAP8.set(HEAP8.subarray(src>>>0,src+size>>>0),target>>>0)},removeAllEventListeners(){while(JSEvents.eventHandlers.length){JSEvents._removeHandler(JSEvents.eventHandlers.length-1)}JSEvents.deferredCalls=[]},registerRemoveEventListeners(){if(!JSEvents.removeEventListenersRegistered){addOnExit(JSEvents.removeAllEventListeners);JSEvents.removeEventListenersRegistered=true}},inEventHandler:0,deferredCalls:[],deferCall(targetFunction,precedence,argsList){function arraysHaveEqualContent(arrA,arrB){if(arrA.length!=arrB.length)return false;for(var i in arrA){if(arrA[i]!=arrB[i])return false}return true}for(var call of JSEvents.deferredCalls){if(call.targetFunction==targetFunction&&arraysHaveEqualContent(call.argsList,argsList)){return}}JSEvents.deferredCalls.push({targetFunction,precedence,argsList});JSEvents.deferredCalls.sort((x,y)=>x.precedence<y.precedence)},removeDeferredCalls(targetFunction){JSEvents.deferredCalls=JSEvents.deferredCalls.filter(call=>call.targetFunction!=targetFunction)},canPerformEventHandlerRequests(){if(navigator.userActivation){return navigator.userActivation.isActive}return JSEvents.inEventHandler&&JSEvents.currentEventHandler.allowsDeferredCalls},runDeferredCalls(){if(!JSEvents.canPerformEventHandlerRequests()){return}var deferredCalls=JSEvents.deferredCalls;JSEvents.deferredCalls=[];for(var call of deferredCalls){call.targetFunction(...call.argsList)}},eventHandlers:[],removeAllHandlersOnTarget:(target,eventTypeString)=>{for(var i=0;i<JSEvents.eventHandlers.length;++i){if(JSEvents.eventHandlers[i].target==target&&(!eventTypeString||eventTypeString==JSEvents.eventHandlers[i].eventTypeString)){JSEvents._removeHandler(i--)}}},_removeHandler(i){var h=JSEvents.eventHandlers[i];h.target.removeEventListener(h.eventTypeString,h.eventListenerFunc,h.useCapture);JSEvents.eventHandlers.splice(i,1)},registerOrRemoveHandler(eventHandler){if(!eventHandler.target){return-4}if(eventHandler.callbackfunc){eventHandler.eventListenerFunc=function(event){++JSEvents.inEventHandler;JSEvents.currentEventHandler=eventHandler;JSEvents.runDeferredCalls();eventHandler.handlerFunc(event);JSEvents.runDeferredCalls();--JSEvents.inEventHandler};eventHandler.target.addEventListener(eventHandler.eventTypeString,eventHandler.eventListenerFunc,eventHandler.useCapture);JSEvents.eventHandlers.push(eventHandler);JSEvents.registerRemoveEventListeners()}else{for(var i=0;i<JSEvents.eventHandlers.length;++i){if(JSEvents.eventHandlers[i].target==eventHandler.target&&JSEvents.eventHandlers[i].eventTypeString==eventHandler.eventTypeString){JSEvents._removeHandler(i--)}}}return 0},getNodeNameForTarget(target){if(!target)return"";if(target==window)return"#window";if(target==screen)return"#screen";return target?.nodeName||""},fullscreenEnabled(){return document.fullscreenEnabled||document.webkitFullscreenEnabled}};var maybeCStringToJsString=cString=>cString>2?UTF8ToString(cString):cString;var specialHTMLTargets=[0,typeof document!="undefined"?document:0,typeof window!="undefined"?window:0];var findEventTarget=target=>{target=maybeCStringToJsString(target);var domElement=specialHTMLTargets[target]||(typeof document!="undefined"?document.querySelector(target):null);return domElement};var registerKeyEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.keyEvent||=_malloc(160);var keyEventHandlerFunc=e=>{var keyEventData=JSEvents.keyEvent;HEAPF64[keyEventData>>>3>>>0]=e.timeStamp;var idx=keyEventData>>>2;HEAP32[idx+2>>>0]=e.location;HEAP8[keyEventData+12>>>0]=e.ctrlKey;HEAP8[keyEventData+13>>>0]=e.shiftKey;HEAP8[keyEventData+14>>>0]=e.altKey;HEAP8[keyEventData+15>>>0]=e.metaKey;HEAP8[keyEventData+16>>>0]=e.repeat;HEAP32[idx+5>>>0]=e.charCode;HEAP32[idx+6>>>0]=e.keyCode;HEAP32[idx+7>>>0]=e.which;stringToUTF8(e.key||"",keyEventData+32,32);stringToUTF8(e.code||"",keyEventData+64,32);stringToUTF8(e.char||"",keyEventData+96,32);stringToUTF8(e.locale||"",keyEventData+128,32);if(getWasmTableEntry(callbackfunc)(eventTypeId,keyEventData,userData))e.preventDefault()};var eventHandler={target:findEventTarget(target),eventTypeString,callbackfunc,handlerFunc:keyEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};var findCanvasEventTarget=findEventTarget;function _emscripten_set_keypress_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerKeyEventCallback(target,userData,useCapture,callbackfunc,1,"keypress",targetThread)}_emscripten_set_keypress_callback_on_thread.sig="ippipp";function _emscripten_set_keydown_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerKeyEventCallback(target,userData,useCapture,callbackfunc,2,"keydown",targetThread)}_emscripten_set_keydown_callback_on_thread.sig="ippipp";function _emscripten_set_keyup_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerKeyEventCallback(target,userData,useCapture,callbackfunc,3,"keyup",targetThread)}_emscripten_set_keyup_callback_on_thread.sig="ippipp";var getBoundingClientRect=e=>specialHTMLTargets.indexOf(e)<0?e.getBoundingClientRect():{left:0,top:0};var fillMouseEventData=(eventStruct,e,target)=>{HEAPF64[eventStruct>>>3>>>0]=e.timeStamp;var idx=eventStruct>>>2;HEAP32[idx+2>>>0]=e.screenX;HEAP32[idx+3>>>0]=e.screenY;HEAP32[idx+4>>>0]=e.clientX;HEAP32[idx+5>>>0]=e.clientY;HEAP8[eventStruct+24>>>0]=e.ctrlKey;HEAP8[eventStruct+25>>>0]=e.shiftKey;HEAP8[eventStruct+26>>>0]=e.altKey;HEAP8[eventStruct+27>>>0]=e.metaKey;HEAP16[idx*2+14>>>0]=e.button;HEAP16[idx*2+15>>>0]=e.buttons;HEAP32[idx+8>>>0]=e["movementX"];HEAP32[idx+9>>>0]=e["movementY"];var rect=getBoundingClientRect(target);HEAP32[idx+10>>>0]=e.clientX-(rect.left|0);HEAP32[idx+11>>>0]=e.clientY-(rect.top|0)};var registerMouseEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.mouseEvent||=_malloc(64);target=findEventTarget(target);var mouseEventHandlerFunc=(e=event)=>{fillMouseEventData(JSEvents.mouseEvent,e,target);if(getWasmTableEntry(callbackfunc)(eventTypeId,JSEvents.mouseEvent,userData))e.preventDefault()};var eventHandler={target,allowsDeferredCalls:eventTypeString!="mousemove"&&eventTypeString!="mouseenter"&&eventTypeString!="mouseleave",eventTypeString,callbackfunc,handlerFunc:mouseEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_click_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerMouseEventCallback(target,userData,useCapture,callbackfunc,4,"click",targetThread)}_emscripten_set_click_callback_on_thread.sig="ippipp";function _emscripten_set_mousedown_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerMouseEventCallback(target,userData,useCapture,callbackfunc,5,"mousedown",targetThread)}_emscripten_set_mousedown_callback_on_thread.sig="ippipp";function _emscripten_set_mouseup_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerMouseEventCallback(target,userData,useCapture,callbackfunc,6,"mouseup",targetThread)}_emscripten_set_mouseup_callback_on_thread.sig="ippipp";function _emscripten_set_dblclick_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerMouseEventCallback(target,userData,useCapture,callbackfunc,7,"dblclick",targetThread)}_emscripten_set_dblclick_callback_on_thread.sig="ippipp";function _emscripten_set_mousemove_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerMouseEventCallback(target,userData,useCapture,callbackfunc,8,"mousemove",targetThread)}_emscripten_set_mousemove_callback_on_thread.sig="ippipp";function _emscripten_set_mouseenter_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerMouseEventCallback(target,userData,useCapture,callbackfunc,33,"mouseenter",targetThread)}_emscripten_set_mouseenter_callback_on_thread.sig="ippipp";function _emscripten_set_mouseleave_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerMouseEventCallback(target,userData,useCapture,callbackfunc,34,"mouseleave",targetThread)}_emscripten_set_mouseleave_callback_on_thread.sig="ippipp";function _emscripten_set_mouseover_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerMouseEventCallback(target,userData,useCapture,callbackfunc,35,"mouseover",targetThread)}_emscripten_set_mouseover_callback_on_thread.sig="ippipp";function _emscripten_set_mouseout_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerMouseEventCallback(target,userData,useCapture,callbackfunc,36,"mouseout",targetThread)}_emscripten_set_mouseout_callback_on_thread.sig="ippipp";function _emscripten_get_mouse_status(mouseState){mouseState>>>=0;if(!JSEvents.mouseEvent)return-7;JSEvents.memcpy(mouseState,JSEvents.mouseEvent,64);return 0}_emscripten_get_mouse_status.sig="ip";var registerWheelEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.wheelEvent||=_malloc(96);var wheelHandlerFunc=(e=event)=>{var wheelEvent=JSEvents.wheelEvent;fillMouseEventData(wheelEvent,e,target);HEAPF64[wheelEvent+64>>>3>>>0]=e["deltaX"];HEAPF64[wheelEvent+72>>>3>>>0]=e["deltaY"];HEAPF64[wheelEvent+80>>>3>>>0]=e["deltaZ"];HEAP32[wheelEvent+88>>>2>>>0]=e["deltaMode"];if(getWasmTableEntry(callbackfunc)(eventTypeId,wheelEvent,userData))e.preventDefault()};var eventHandler={target,allowsDeferredCalls:true,eventTypeString,callbackfunc,handlerFunc:wheelHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_wheel_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;target=findEventTarget(target);if(!target)return-4;if(typeof target.onwheel!="undefined"){return registerWheelEventCallback(target,userData,useCapture,callbackfunc,9,"wheel",targetThread)}else{return-1}}_emscripten_set_wheel_callback_on_thread.sig="ippipp";var registerUiEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.uiEvent||=_malloc(36);target=findEventTarget(target);var uiEventHandlerFunc=(e=event)=>{if(e.target!=target){return}var b=document.body;if(!b){return}var uiEvent=JSEvents.uiEvent;HEAP32[uiEvent>>>2>>>0]=0;HEAP32[uiEvent+4>>>2>>>0]=b.clientWidth;HEAP32[uiEvent+8>>>2>>>0]=b.clientHeight;HEAP32[uiEvent+12>>>2>>>0]=innerWidth;HEAP32[uiEvent+16>>>2>>>0]=innerHeight;HEAP32[uiEvent+20>>>2>>>0]=outerWidth;HEAP32[uiEvent+24>>>2>>>0]=outerHeight;HEAP32[uiEvent+28>>>2>>>0]=pageXOffset|0;HEAP32[uiEvent+32>>>2>>>0]=pageYOffset|0;if(getWasmTableEntry(callbackfunc)(eventTypeId,uiEvent,userData))e.preventDefault()};var eventHandler={target,eventTypeString,callbackfunc,handlerFunc:uiEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_resize_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerUiEventCallback(target,userData,useCapture,callbackfunc,10,"resize",targetThread)}_emscripten_set_resize_callback_on_thread.sig="ippipp";function _emscripten_set_scroll_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerUiEventCallback(target,userData,useCapture,callbackfunc,11,"scroll",targetThread)}_emscripten_set_scroll_callback_on_thread.sig="ippipp";var registerFocusEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.focusEvent||=_malloc(256);var focusEventHandlerFunc=(e=event)=>{var nodeName=JSEvents.getNodeNameForTarget(e.target);var id=e.target.id?e.target.id:"";var focusEvent=JSEvents.focusEvent;stringToUTF8(nodeName,focusEvent+0,128);stringToUTF8(id,focusEvent+128,128);if(getWasmTableEntry(callbackfunc)(eventTypeId,focusEvent,userData))e.preventDefault()};var eventHandler={target:findEventTarget(target),eventTypeString,callbackfunc,handlerFunc:focusEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_blur_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerFocusEventCallback(target,userData,useCapture,callbackfunc,12,"blur",targetThread)}_emscripten_set_blur_callback_on_thread.sig="ippipp";function _emscripten_set_focus_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerFocusEventCallback(target,userData,useCapture,callbackfunc,13,"focus",targetThread)}_emscripten_set_focus_callback_on_thread.sig="ippipp";function _emscripten_set_focusin_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerFocusEventCallback(target,userData,useCapture,callbackfunc,14,"focusin",targetThread)}_emscripten_set_focusin_callback_on_thread.sig="ippipp";function _emscripten_set_focusout_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerFocusEventCallback(target,userData,useCapture,callbackfunc,15,"focusout",targetThread)}_emscripten_set_focusout_callback_on_thread.sig="ippipp";var fillDeviceOrientationEventData=(eventStruct,e,target)=>{HEAPF64[eventStruct>>>3>>>0]=e.alpha;HEAPF64[eventStruct+8>>>3>>>0]=e.beta;HEAPF64[eventStruct+16>>>3>>>0]=e.gamma;HEAP8[eventStruct+24>>>0]=e.absolute};var registerDeviceOrientationEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.deviceOrientationEvent||=_malloc(32);var deviceOrientationEventHandlerFunc=(e=event)=>{fillDeviceOrientationEventData(JSEvents.deviceOrientationEvent,e,target);if(getWasmTableEntry(callbackfunc)(eventTypeId,JSEvents.deviceOrientationEvent,userData))e.preventDefault()};var eventHandler={target:findEventTarget(target),eventTypeString,callbackfunc,handlerFunc:deviceOrientationEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_deviceorientation_callback_on_thread(userData,useCapture,callbackfunc,targetThread){userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerDeviceOrientationEventCallback(2,userData,useCapture,callbackfunc,16,"deviceorientation",targetThread)}_emscripten_set_deviceorientation_callback_on_thread.sig="ipipp";function _emscripten_get_deviceorientation_status(orientationState){orientationState>>>=0;if(!JSEvents.deviceOrientationEvent)return-7;JSEvents.memcpy(orientationState,JSEvents.deviceOrientationEvent,32);return 0}_emscripten_get_deviceorientation_status.sig="ip";var fillDeviceMotionEventData=(eventStruct,e,target)=>{var supportedFields=0;var a=e["acceleration"];supportedFields|=a&&1;var ag=e["accelerationIncludingGravity"];supportedFields|=ag&&2;var rr=e["rotationRate"];supportedFields|=rr&&4;a=a||{};ag=ag||{};rr=rr||{};HEAPF64[eventStruct>>>3>>>0]=a["x"];HEAPF64[eventStruct+8>>>3>>>0]=a["y"];HEAPF64[eventStruct+16>>>3>>>0]=a["z"];HEAPF64[eventStruct+24>>>3>>>0]=ag["x"];HEAPF64[eventStruct+32>>>3>>>0]=ag["y"];HEAPF64[eventStruct+40>>>3>>>0]=ag["z"];HEAPF64[eventStruct+48>>>3>>>0]=rr["alpha"];HEAPF64[eventStruct+56>>>3>>>0]=rr["beta"];HEAPF64[eventStruct+64>>>3>>>0]=rr["gamma"]};var registerDeviceMotionEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.deviceMotionEvent||=_malloc(80);var deviceMotionEventHandlerFunc=(e=event)=>{fillDeviceMotionEventData(JSEvents.deviceMotionEvent,e,target);if(getWasmTableEntry(callbackfunc)(eventTypeId,JSEvents.deviceMotionEvent,userData))e.preventDefault()};var eventHandler={target:findEventTarget(target),eventTypeString,callbackfunc,handlerFunc:deviceMotionEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_devicemotion_callback_on_thread(userData,useCapture,callbackfunc,targetThread){userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerDeviceMotionEventCallback(2,userData,useCapture,callbackfunc,17,"devicemotion",targetThread)}_emscripten_set_devicemotion_callback_on_thread.sig="ipipp";function _emscripten_get_devicemotion_status(motionState){motionState>>>=0;if(!JSEvents.deviceMotionEvent)return-7;JSEvents.memcpy(motionState,JSEvents.deviceMotionEvent,80);return 0}_emscripten_get_devicemotion_status.sig="ip";var screenOrientation=()=>{if(!window.screen)return undefined;return screen.orientation||screen["mozOrientation"]||screen["webkitOrientation"]};var fillOrientationChangeEventData=eventStruct=>{var orientationsType1=["portrait-primary","portrait-secondary","landscape-primary","landscape-secondary"];var orientationsType2=["portrait","portrait","landscape","landscape"];var orientationIndex=0;var orientationAngle=0;var screenOrientObj=screenOrientation();if(typeof screenOrientObj==="object"){orientationIndex=orientationsType1.indexOf(screenOrientObj.type);if(orientationIndex<0){orientationIndex=orientationsType2.indexOf(screenOrientObj.type)}if(orientationIndex>=0){orientationIndex=1<<orientationIndex}orientationAngle=screenOrientObj.angle}else{orientationAngle=window.orientation}HEAP32[eventStruct>>>2>>>0]=orientationIndex;HEAP32[eventStruct+4>>>2>>>0]=orientationAngle};var registerOrientationChangeEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.orientationChangeEvent||=_malloc(8);var orientationChangeEventHandlerFunc=(e=event)=>{var orientationChangeEvent=JSEvents.orientationChangeEvent;fillOrientationChangeEventData(orientationChangeEvent);if(getWasmTableEntry(callbackfunc)(eventTypeId,orientationChangeEvent,userData))e.preventDefault()};var eventHandler={target,eventTypeString,callbackfunc,handlerFunc:orientationChangeEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_orientationchange_callback_on_thread(userData,useCapture,callbackfunc,targetThread){userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;if(!window.screen||!screen.orientation)return-1;return registerOrientationChangeEventCallback(screen.orientation,userData,useCapture,callbackfunc,18,"change",targetThread)}_emscripten_set_orientationchange_callback_on_thread.sig="ipipp";function _emscripten_get_orientation_status(orientationChangeEvent){orientationChangeEvent>>>=0;if(!screenOrientation()&&typeof orientation=="undefined")return-1;fillOrientationChangeEventData(orientationChangeEvent);return 0}_emscripten_get_orientation_status.sig="ip";var _emscripten_lock_orientation=allowedOrientations=>{var orientations=[];if(allowedOrientations&1)orientations.push("portrait-primary");if(allowedOrientations&2)orientations.push("portrait-secondary");if(allowedOrientations&4)orientations.push("landscape-primary");if(allowedOrientations&8)orientations.push("landscape-secondary");var succeeded;if(screen.lockOrientation){succeeded=screen.lockOrientation(orientations)}else if(screen.mozLockOrientation){succeeded=screen.mozLockOrientation(orientations)}else if(screen.webkitLockOrientation){succeeded=screen.webkitLockOrientation(orientations)}else{return-1}if(succeeded){return 0}return-6};_emscripten_lock_orientation.sig="ii";var _emscripten_unlock_orientation=()=>{if(screen.unlockOrientation){screen.unlockOrientation()}else if(screen.mozUnlockOrientation){screen.mozUnlockOrientation()}else if(screen.webkitUnlockOrientation){screen.webkitUnlockOrientation()}else{return-1}return 0};_emscripten_unlock_orientation.sig="i";var fillFullscreenChangeEventData=eventStruct=>{var fullscreenElement=document.fullscreenElement||document.mozFullScreenElement||document.webkitFullscreenElement||document.msFullscreenElement;var isFullscreen=!!fullscreenElement;HEAP8[eventStruct>>>0]=isFullscreen;HEAP8[eventStruct+1>>>0]=JSEvents.fullscreenEnabled();var reportedElement=isFullscreen?fullscreenElement:JSEvents.previousFullscreenElement;var nodeName=JSEvents.getNodeNameForTarget(reportedElement);var id=reportedElement?.id||"";stringToUTF8(nodeName,eventStruct+2,128);stringToUTF8(id,eventStruct+130,128);HEAP32[eventStruct+260>>>2>>>0]=reportedElement?reportedElement.clientWidth:0;HEAP32[eventStruct+264>>>2>>>0]=reportedElement?reportedElement.clientHeight:0;HEAP32[eventStruct+268>>>2>>>0]=screen.width;HEAP32[eventStruct+272>>>2>>>0]=screen.height;if(isFullscreen){JSEvents.previousFullscreenElement=fullscreenElement}};var registerFullscreenChangeEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.fullscreenChangeEvent||=_malloc(276);var fullscreenChangeEventhandlerFunc=(e=event)=>{var fullscreenChangeEvent=JSEvents.fullscreenChangeEvent;fillFullscreenChangeEventData(fullscreenChangeEvent);if(getWasmTableEntry(callbackfunc)(eventTypeId,fullscreenChangeEvent,userData))e.preventDefault()};var eventHandler={target,eventTypeString,callbackfunc,handlerFunc:fullscreenChangeEventhandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_fullscreenchange_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;if(!JSEvents.fullscreenEnabled())return-1;target=findEventTarget(target);if(!target)return-4;registerFullscreenChangeEventCallback(target,userData,useCapture,callbackfunc,19,"webkitfullscreenchange",targetThread);return registerFullscreenChangeEventCallback(target,userData,useCapture,callbackfunc,19,"fullscreenchange",targetThread)}_emscripten_set_fullscreenchange_callback_on_thread.sig="ippipp";function _emscripten_get_fullscreen_status(fullscreenStatus){fullscreenStatus>>>=0;if(!JSEvents.fullscreenEnabled())return-1;fillFullscreenChangeEventData(fullscreenStatus);return 0}_emscripten_get_fullscreen_status.sig="ip";function _emscripten_get_canvas_element_size(target,width,height){target>>>=0;width>>>=0;height>>>=0;var canvas=findCanvasEventTarget(target);if(!canvas)return-4;HEAP32[width>>>2>>>0]=canvas.width;HEAP32[height>>>2>>>0]=canvas.height}_emscripten_get_canvas_element_size.sig="ippp";var getCanvasElementSize=target=>{var sp=stackSave();var w=stackAlloc(8);var h=w+4;var targetInt=stringToUTF8OnStack(target.id);var ret=_emscripten_get_canvas_element_size(targetInt,w,h);var size=[HEAP32[w>>>2>>>0],HEAP32[h>>>2>>>0]];stackRestore(sp);return size};function _emscripten_set_canvas_element_size(target,width,height){target>>>=0;var canvas=findCanvasEventTarget(target);if(!canvas)return-4;canvas.width=width;canvas.height=height;return 0}_emscripten_set_canvas_element_size.sig="ipii";var setCanvasElementSize=(target,width,height)=>{if(!target.controlTransferredOffscreen){target.width=width;target.height=height}else{var sp=stackSave();var targetInt=stringToUTF8OnStack(target.id);_emscripten_set_canvas_element_size(targetInt,width,height);stackRestore(sp)}};var currentFullscreenStrategy={};var registerRestoreOldStyle=canvas=>{var canvasSize=getCanvasElementSize(canvas);var oldWidth=canvasSize[0];var oldHeight=canvasSize[1];var oldCssWidth=canvas.style.width;var oldCssHeight=canvas.style.height;var oldBackgroundColor=canvas.style.backgroundColor;var oldDocumentBackgroundColor=document.body.style.backgroundColor;var oldPaddingLeft=canvas.style.paddingLeft;var oldPaddingRight=canvas.style.paddingRight;var oldPaddingTop=canvas.style.paddingTop;var oldPaddingBottom=canvas.style.paddingBottom;var oldMarginLeft=canvas.style.marginLeft;var oldMarginRight=canvas.style.marginRight;var oldMarginTop=canvas.style.marginTop;var oldMarginBottom=canvas.style.marginBottom;var oldDocumentBodyMargin=document.body.style.margin;var oldDocumentOverflow=document.documentElement.style.overflow;var oldDocumentScroll=document.body.scroll;var oldImageRendering=canvas.style.imageRendering;function restoreOldStyle(){var fullscreenElement=document.fullscreenElement||document.webkitFullscreenElement;if(!fullscreenElement){document.removeEventListener("fullscreenchange",restoreOldStyle);document.removeEventListener("webkitfullscreenchange",restoreOldStyle);setCanvasElementSize(canvas,oldWidth,oldHeight);canvas.style.width=oldCssWidth;canvas.style.height=oldCssHeight;canvas.style.backgroundColor=oldBackgroundColor;if(!oldDocumentBackgroundColor)document.body.style.backgroundColor="white";document.body.style.backgroundColor=oldDocumentBackgroundColor;canvas.style.paddingLeft=oldPaddingLeft;canvas.style.paddingRight=oldPaddingRight;canvas.style.paddingTop=oldPaddingTop;canvas.style.paddingBottom=oldPaddingBottom;canvas.style.marginLeft=oldMarginLeft;canvas.style.marginRight=oldMarginRight;canvas.style.marginTop=oldMarginTop;canvas.style.marginBottom=oldMarginBottom;document.body.style.margin=oldDocumentBodyMargin;document.documentElement.style.overflow=oldDocumentOverflow;document.body.scroll=oldDocumentScroll;canvas.style.imageRendering=oldImageRendering;if(canvas.GLctxObject)canvas.GLctxObject.GLctx.viewport(0,0,oldWidth,oldHeight);if(currentFullscreenStrategy.canvasResizedCallback){getWasmTableEntry(currentFullscreenStrategy.canvasResizedCallback)(37,0,currentFullscreenStrategy.canvasResizedCallbackUserData)}}}document.addEventListener("fullscreenchange",restoreOldStyle);document.addEventListener("webkitfullscreenchange",restoreOldStyle);return restoreOldStyle};var setLetterbox=(element,topBottom,leftRight)=>{element.style.paddingLeft=element.style.paddingRight=leftRight+"px";element.style.paddingTop=element.style.paddingBottom=topBottom+"px"};var JSEvents_resizeCanvasForFullscreen=(target,strategy)=>{var restoreOldStyle=registerRestoreOldStyle(target);var cssWidth=strategy.softFullscreen?innerWidth:screen.width;var cssHeight=strategy.softFullscreen?innerHeight:screen.height;var rect=getBoundingClientRect(target);var windowedCssWidth=rect.width;var windowedCssHeight=rect.height;var canvasSize=getCanvasElementSize(target);var windowedRttWidth=canvasSize[0];var windowedRttHeight=canvasSize[1];if(strategy.scaleMode==3){setLetterbox(target,(cssHeight-windowedCssHeight)/2,(cssWidth-windowedCssWidth)/2);cssWidth=windowedCssWidth;cssHeight=windowedCssHeight}else if(strategy.scaleMode==2){if(cssWidth*windowedRttHeight<windowedRttWidth*cssHeight){var desiredCssHeight=windowedRttHeight*cssWidth/windowedRttWidth;setLetterbox(target,(cssHeight-desiredCssHeight)/2,0);cssHeight=desiredCssHeight}else{var desiredCssWidth=windowedRttWidth*cssHeight/windowedRttHeight;setLetterbox(target,0,(cssWidth-desiredCssWidth)/2);cssWidth=desiredCssWidth}}target.style.backgroundColor||="black";document.body.style.backgroundColor||="black";target.style.width=cssWidth+"px";target.style.height=cssHeight+"px";if(strategy.filteringMode==1){target.style.imageRendering="optimizeSpeed";target.style.imageRendering="-moz-crisp-edges";target.style.imageRendering="-o-crisp-edges";target.style.imageRendering="-webkit-optimize-contrast";target.style.imageRendering="optimize-contrast";target.style.imageRendering="crisp-edges";target.style.imageRendering="pixelated"}var dpiScale=strategy.canvasResolutionScaleMode==2?devicePixelRatio:1;if(strategy.canvasResolutionScaleMode!=0){var newWidth=cssWidth*dpiScale|0;var newHeight=cssHeight*dpiScale|0;setCanvasElementSize(target,newWidth,newHeight);if(target.GLctxObject)target.GLctxObject.GLctx.viewport(0,0,newWidth,newHeight)}return restoreOldStyle};var JSEvents_requestFullscreen=(target,strategy)=>{if(strategy.scaleMode!=0||strategy.canvasResolutionScaleMode!=0){JSEvents_resizeCanvasForFullscreen(target,strategy)}if(target.requestFullscreen){target.requestFullscreen()}else if(target.webkitRequestFullscreen){target.webkitRequestFullscreen(Element.ALLOW_KEYBOARD_INPUT)}else{return JSEvents.fullscreenEnabled()?-3:-1}currentFullscreenStrategy=strategy;if(strategy.canvasResizedCallback){getWasmTableEntry(strategy.canvasResizedCallback)(37,0,strategy.canvasResizedCallbackUserData)}return 0};var hideEverythingExceptGivenElement=onlyVisibleElement=>{var child=onlyVisibleElement;var parent=child.parentNode;var hiddenElements=[];while(child!=document.body){var children=parent.children;for(var currChild of children){if(currChild!=child){hiddenElements.push({node:currChild,displayState:currChild.style.display});currChild.style.display="none"}}child=parent;parent=parent.parentNode}return hiddenElements};var restoreHiddenElements=hiddenElements=>{for(var elem of hiddenElements){elem.node.style.display=elem.displayState}};var restoreOldWindowedStyle=null;var softFullscreenResizeWebGLRenderTarget=()=>{var dpr=devicePixelRatio;var inHiDPIFullscreenMode=currentFullscreenStrategy.canvasResolutionScaleMode==2;var inAspectRatioFixedFullscreenMode=currentFullscreenStrategy.scaleMode==2;var inPixelPerfectFullscreenMode=currentFullscreenStrategy.canvasResolutionScaleMode!=0;var inCenteredWithoutScalingFullscreenMode=currentFullscreenStrategy.scaleMode==3;var screenWidth=inHiDPIFullscreenMode?Math.round(innerWidth*dpr):innerWidth;var screenHeight=inHiDPIFullscreenMode?Math.round(innerHeight*dpr):innerHeight;var w=screenWidth;var h=screenHeight;var canvas=currentFullscreenStrategy.target;var canvasSize=getCanvasElementSize(canvas);var x=canvasSize[0];var y=canvasSize[1];var topMargin;if(inAspectRatioFixedFullscreenMode){if(w*y<x*h)h=w*y/x|0;else if(w*y>x*h)w=h*x/y|0;topMargin=(screenHeight-h)/2|0}if(inPixelPerfectFullscreenMode){setCanvasElementSize(canvas,w,h);if(canvas.GLctxObject)canvas.GLctxObject.GLctx.viewport(0,0,w,h)}if(inHiDPIFullscreenMode){topMargin/=dpr;w/=dpr;h/=dpr;w=Math.round(w*1e4)/1e4;h=Math.round(h*1e4)/1e4;topMargin=Math.round(topMargin*1e4)/1e4}if(inCenteredWithoutScalingFullscreenMode){var t=(innerHeight-jstoi_q(canvas.style.height))/2;var b=(innerWidth-jstoi_q(canvas.style.width))/2;setLetterbox(canvas,t,b)}else{canvas.style.width=w+"px";canvas.style.height=h+"px";var b=(innerWidth-w)/2;setLetterbox(canvas,topMargin,b)}if(!inCenteredWithoutScalingFullscreenMode&&currentFullscreenStrategy.canvasResizedCallback){getWasmTableEntry(currentFullscreenStrategy.canvasResizedCallback)(37,0,currentFullscreenStrategy.canvasResizedCallbackUserData)}};var doRequestFullscreen=(target,strategy)=>{if(!JSEvents.fullscreenEnabled())return-1;target=findEventTarget(target);if(!target)return-4;if(!target.requestFullscreen&&!target.webkitRequestFullscreen){return-3}if(!JSEvents.canPerformEventHandlerRequests()){if(strategy.deferUntilInEventHandler){JSEvents.deferCall(JSEvents_requestFullscreen,1,[target,strategy]);return 1}return-2}return JSEvents_requestFullscreen(target,strategy)};function _emscripten_request_fullscreen(target,deferUntilInEventHandler){target>>>=0;var strategy={scaleMode:0,canvasResolutionScaleMode:0,filteringMode:0,deferUntilInEventHandler,canvasResizedCallbackTargetThread:2};return doRequestFullscreen(target,strategy)}_emscripten_request_fullscreen.sig="ipi";function _emscripten_request_fullscreen_strategy(target,deferUntilInEventHandler,fullscreenStrategy){target>>>=0;fullscreenStrategy>>>=0;var strategy={scaleMode:HEAP32[fullscreenStrategy>>>2>>>0],canvasResolutionScaleMode:HEAP32[fullscreenStrategy+4>>>2>>>0],filteringMode:HEAP32[fullscreenStrategy+8>>>2>>>0],deferUntilInEventHandler,canvasResizedCallback:HEAP32[fullscreenStrategy+12>>>2>>>0],canvasResizedCallbackUserData:HEAP32[fullscreenStrategy+16>>>2>>>0]};return doRequestFullscreen(target,strategy)}_emscripten_request_fullscreen_strategy.sig="ipip";function _emscripten_enter_soft_fullscreen(target,fullscreenStrategy){target>>>=0;fullscreenStrategy>>>=0;target=findEventTarget(target);if(!target)return-4;var strategy={scaleMode:HEAP32[fullscreenStrategy>>>2>>>0],canvasResolutionScaleMode:HEAP32[fullscreenStrategy+4>>>2>>>0],filteringMode:HEAP32[fullscreenStrategy+8>>>2>>>0],canvasResizedCallback:HEAP32[fullscreenStrategy+12>>>2>>>0],canvasResizedCallbackUserData:HEAP32[fullscreenStrategy+16>>>2>>>0],target,softFullscreen:true};var restoreOldStyle=JSEvents_resizeCanvasForFullscreen(target,strategy);document.documentElement.style.overflow="hidden";document.body.scroll="no";document.body.style.margin="0px";var hiddenElements=hideEverythingExceptGivenElement(target);function restoreWindowedState(){restoreOldStyle();restoreHiddenElements(hiddenElements);removeEventListener("resize",softFullscreenResizeWebGLRenderTarget);if(strategy.canvasResizedCallback){getWasmTableEntry(strategy.canvasResizedCallback)(37,0,strategy.canvasResizedCallbackUserData)}currentFullscreenStrategy=0}restoreOldWindowedStyle=restoreWindowedState;currentFullscreenStrategy=strategy;addEventListener("resize",softFullscreenResizeWebGLRenderTarget);if(strategy.canvasResizedCallback){getWasmTableEntry(strategy.canvasResizedCallback)(37,0,strategy.canvasResizedCallbackUserData)}return 0}_emscripten_enter_soft_fullscreen.sig="ipp";var _emscripten_exit_soft_fullscreen=()=>{restoreOldWindowedStyle?.();restoreOldWindowedStyle=null;return 0};_emscripten_exit_soft_fullscreen.sig="i";var _emscripten_exit_fullscreen=()=>{if(!JSEvents.fullscreenEnabled())return-1;JSEvents.removeDeferredCalls(JSEvents_requestFullscreen);var d=specialHTMLTargets[1];if(d.exitFullscreen){d.fullscreenElement&&d.exitFullscreen()}else if(d.webkitExitFullscreen){d.webkitFullscreenElement&&d.webkitExitFullscreen()}else{return-1}return 0};_emscripten_exit_fullscreen.sig="i";var fillPointerlockChangeEventData=eventStruct=>{var pointerLockElement=document.pointerLockElement||document.mozPointerLockElement||document.webkitPointerLockElement||document.msPointerLockElement;var isPointerlocked=!!pointerLockElement;HEAP8[eventStruct>>>0]=isPointerlocked;var nodeName=JSEvents.getNodeNameForTarget(pointerLockElement);var id=pointerLockElement?.id||"";stringToUTF8(nodeName,eventStruct+1,128);stringToUTF8(id,eventStruct+129,128)};var registerPointerlockChangeEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.pointerlockChangeEvent||=_malloc(257);var pointerlockChangeEventHandlerFunc=(e=event)=>{var pointerlockChangeEvent=JSEvents.pointerlockChangeEvent;fillPointerlockChangeEventData(pointerlockChangeEvent);if(getWasmTableEntry(callbackfunc)(eventTypeId,pointerlockChangeEvent,userData))e.preventDefault()};var eventHandler={target,eventTypeString,callbackfunc,handlerFunc:pointerlockChangeEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_pointerlockchange_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;if(!document||!document.body||!document.body.requestPointerLock&&!document.body.mozRequestPointerLock&&!document.body.webkitRequestPointerLock&&!document.body.msRequestPointerLock){return-1}target=findEventTarget(target);if(!target)return-4;registerPointerlockChangeEventCallback(target,userData,useCapture,callbackfunc,20,"mozpointerlockchange",targetThread);registerPointerlockChangeEventCallback(target,userData,useCapture,callbackfunc,20,"webkitpointerlockchange",targetThread);registerPointerlockChangeEventCallback(target,userData,useCapture,callbackfunc,20,"mspointerlockchange",targetThread);return registerPointerlockChangeEventCallback(target,userData,useCapture,callbackfunc,20,"pointerlockchange",targetThread)}_emscripten_set_pointerlockchange_callback_on_thread.sig="ippipp";var registerPointerlockErrorEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{var pointerlockErrorEventHandlerFunc=(e=event)=>{if(getWasmTableEntry(callbackfunc)(eventTypeId,0,userData))e.preventDefault()};var eventHandler={target,eventTypeString,callbackfunc,handlerFunc:pointerlockErrorEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_pointerlockerror_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;if(!document||!document.body.requestPointerLock&&!document.body.mozRequestPointerLock&&!document.body.webkitRequestPointerLock&&!document.body.msRequestPointerLock){return-1}target=findEventTarget(target);if(!target)return-4;registerPointerlockErrorEventCallback(target,userData,useCapture,callbackfunc,38,"mozpointerlockerror",targetThread);registerPointerlockErrorEventCallback(target,userData,useCapture,callbackfunc,38,"webkitpointerlockerror",targetThread);registerPointerlockErrorEventCallback(target,userData,useCapture,callbackfunc,38,"mspointerlockerror",targetThread);return registerPointerlockErrorEventCallback(target,userData,useCapture,callbackfunc,38,"pointerlockerror",targetThread)}_emscripten_set_pointerlockerror_callback_on_thread.sig="ippipp";function _emscripten_get_pointerlock_status(pointerlockStatus){pointerlockStatus>>>=0;if(pointerlockStatus)fillPointerlockChangeEventData(pointerlockStatus);if(!document.body||!document.body.requestPointerLock&&!document.body.mozRequestPointerLock&&!document.body.webkitRequestPointerLock&&!document.body.msRequestPointerLock){return-1}return 0}_emscripten_get_pointerlock_status.sig="ip";var requestPointerLock=target=>{if(target.requestPointerLock){target.requestPointerLock()}else{if(document.body.requestPointerLock){return-3}return-1}return 0};function _emscripten_request_pointerlock(target,deferUntilInEventHandler){target>>>=0;target=findEventTarget(target);if(!target)return-4;if(!target.requestPointerLock){return-1}if(!JSEvents.canPerformEventHandlerRequests()){if(deferUntilInEventHandler){JSEvents.deferCall(requestPointerLock,2,[target]);return 1}return-2}return requestPointerLock(target)}_emscripten_request_pointerlock.sig="ipi";var _emscripten_exit_pointerlock=()=>{JSEvents.removeDeferredCalls(requestPointerLock);if(document.exitPointerLock){document.exitPointerLock()}else{return-1}return 0};_emscripten_exit_pointerlock.sig="i";var _emscripten_vibrate=msecs=>{if(!navigator.vibrate)return-1;navigator.vibrate(msecs);return 0};_emscripten_vibrate.sig="ii";function _emscripten_vibrate_pattern(msecsArray,numEntries){msecsArray>>>=0;if(!navigator.vibrate)return-1;var vibrateList=[];for(var i=0;i<numEntries;++i){var msecs=HEAP32[msecsArray+i*4>>>2>>>0];vibrateList.push(msecs)}navigator.vibrate(vibrateList);return 0}_emscripten_vibrate_pattern.sig="ipi";var fillVisibilityChangeEventData=eventStruct=>{var visibilityStates=["hidden","visible","prerender","unloaded"];var visibilityState=visibilityStates.indexOf(document.visibilityState);HEAP8[eventStruct>>>0]=document.hidden;HEAP32[eventStruct+4>>>2>>>0]=visibilityState};var registerVisibilityChangeEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.visibilityChangeEvent||=_malloc(8);var visibilityChangeEventHandlerFunc=(e=event)=>{var visibilityChangeEvent=JSEvents.visibilityChangeEvent;fillVisibilityChangeEventData(visibilityChangeEvent);if(getWasmTableEntry(callbackfunc)(eventTypeId,visibilityChangeEvent,userData))e.preventDefault()};var eventHandler={target,eventTypeString,callbackfunc,handlerFunc:visibilityChangeEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_visibilitychange_callback_on_thread(userData,useCapture,callbackfunc,targetThread){userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;if(!specialHTMLTargets[1]){return-4}return registerVisibilityChangeEventCallback(specialHTMLTargets[1],userData,useCapture,callbackfunc,21,"visibilitychange",targetThread)}_emscripten_set_visibilitychange_callback_on_thread.sig="ipipp";function _emscripten_get_visibility_status(visibilityStatus){visibilityStatus>>>=0;if(typeof document.visibilityState=="undefined"&&typeof document.hidden=="undefined"){return-1}fillVisibilityChangeEventData(visibilityStatus);return 0}_emscripten_get_visibility_status.sig="ip";var registerTouchEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.touchEvent||=_malloc(1552);target=findEventTarget(target);var touchEventHandlerFunc=e=>{var t,touches={},et=e.touches;for(let t of et){t.isChanged=t.onTarget=0;touches[t.identifier]=t}for(let t of e.changedTouches){t.isChanged=1;touches[t.identifier]=t}for(let t of e.targetTouches){touches[t.identifier].onTarget=1}var touchEvent=JSEvents.touchEvent;HEAPF64[touchEvent>>>3>>>0]=e.timeStamp;HEAP8[touchEvent+12>>>0]=e.ctrlKey;HEAP8[touchEvent+13>>>0]=e.shiftKey;HEAP8[touchEvent+14>>>0]=e.altKey;HEAP8[touchEvent+15>>>0]=e.metaKey;var idx=touchEvent+16;var targetRect=getBoundingClientRect(target);var numTouches=0;for(let t of Object.values(touches)){var idx32=idx>>>2;HEAP32[idx32+0>>>0]=t.identifier;HEAP32[idx32+1>>>0]=t.screenX;HEAP32[idx32+2>>>0]=t.screenY;HEAP32[idx32+3>>>0]=t.clientX;HEAP32[idx32+4>>>0]=t.clientY;HEAP32[idx32+5>>>0]=t.pageX;HEAP32[idx32+6>>>0]=t.pageY;HEAP8[idx+28>>>0]=t.isChanged;HEAP8[idx+29>>>0]=t.onTarget;HEAP32[idx32+8>>>0]=t.clientX-(targetRect.left|0);HEAP32[idx32+9>>>0]=t.clientY-(targetRect.top|0);idx+=48;if(++numTouches>31){break}}HEAP32[touchEvent+8>>>2>>>0]=numTouches;if(getWasmTableEntry(callbackfunc)(eventTypeId,touchEvent,userData))e.preventDefault()};var eventHandler={target,allowsDeferredCalls:eventTypeString=="touchstart"||eventTypeString=="touchend",eventTypeString,callbackfunc,handlerFunc:touchEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_touchstart_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerTouchEventCallback(target,userData,useCapture,callbackfunc,22,"touchstart",targetThread)}_emscripten_set_touchstart_callback_on_thread.sig="ippipp";function _emscripten_set_touchend_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerTouchEventCallback(target,userData,useCapture,callbackfunc,23,"touchend",targetThread)}_emscripten_set_touchend_callback_on_thread.sig="ippipp";function _emscripten_set_touchmove_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerTouchEventCallback(target,userData,useCapture,callbackfunc,24,"touchmove",targetThread)}_emscripten_set_touchmove_callback_on_thread.sig="ippipp";function _emscripten_set_touchcancel_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;return registerTouchEventCallback(target,userData,useCapture,callbackfunc,25,"touchcancel",targetThread)}_emscripten_set_touchcancel_callback_on_thread.sig="ippipp";var fillGamepadEventData=(eventStruct,e)=>{HEAPF64[eventStruct>>>3>>>0]=e.timestamp;for(var i=0;i<e.axes.length;++i){HEAPF64[eventStruct+i*8+16>>>3>>>0]=e.axes[i]}for(var i=0;i<e.buttons.length;++i){if(typeof e.buttons[i]=="object"){HEAPF64[eventStruct+i*8+528>>>3>>>0]=e.buttons[i].value}else{HEAPF64[eventStruct+i*8+528>>>3>>>0]=e.buttons[i]}}for(var i=0;i<e.buttons.length;++i){if(typeof e.buttons[i]=="object"){HEAP8[eventStruct+i+1040>>>0]=e.buttons[i].pressed}else{HEAP8[eventStruct+i+1040>>>0]=e.buttons[i]==1}}HEAP8[eventStruct+1104>>>0]=e.connected;HEAP32[eventStruct+1108>>>2>>>0]=e.index;HEAP32[eventStruct+8>>>2>>>0]=e.axes.length;HEAP32[eventStruct+12>>>2>>>0]=e.buttons.length;stringToUTF8(e.id,eventStruct+1112,64);stringToUTF8(e.mapping,eventStruct+1176,64)};var registerGamepadEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.gamepadEvent||=_malloc(1240);var gamepadEventHandlerFunc=(e=event)=>{var gamepadEvent=JSEvents.gamepadEvent;fillGamepadEventData(gamepadEvent,e["gamepad"]);if(getWasmTableEntry(callbackfunc)(eventTypeId,gamepadEvent,userData))e.preventDefault()};var eventHandler={target:findEventTarget(target),allowsDeferredCalls:true,eventTypeString,callbackfunc,handlerFunc:gamepadEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};var _emscripten_sample_gamepad_data=()=>{try{if(navigator.getGamepads)return(JSEvents.lastGamepadState=navigator.getGamepads())?0:-1}catch(e){navigator.getGamepads=null}return-1};_emscripten_sample_gamepad_data.sig="i";function _emscripten_set_gamepadconnected_callback_on_thread(userData,useCapture,callbackfunc,targetThread){userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;if(_emscripten_sample_gamepad_data())return-1;return registerGamepadEventCallback(2,userData,useCapture,callbackfunc,26,"gamepadconnected",targetThread)}_emscripten_set_gamepadconnected_callback_on_thread.sig="ipipp";function _emscripten_set_gamepaddisconnected_callback_on_thread(userData,useCapture,callbackfunc,targetThread){userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;if(_emscripten_sample_gamepad_data())return-1;return registerGamepadEventCallback(2,userData,useCapture,callbackfunc,27,"gamepaddisconnected",targetThread)}_emscripten_set_gamepaddisconnected_callback_on_thread.sig="ipipp";var _emscripten_get_num_gamepads=()=>JSEvents.lastGamepadState.length;_emscripten_get_num_gamepads.sig="i";function _emscripten_get_gamepad_status(index,gamepadState){gamepadState>>>=0;if(index<0||index>=JSEvents.lastGamepadState.length)return-5;if(!JSEvents.lastGamepadState[index])return-7;fillGamepadEventData(gamepadState,JSEvents.lastGamepadState[index]);return 0}_emscripten_get_gamepad_status.sig="iip";var registerBeforeUnloadEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString)=>{var beforeUnloadEventHandlerFunc=(e=event)=>{var confirmationMessage=getWasmTableEntry(callbackfunc)(eventTypeId,0,userData);if(confirmationMessage){confirmationMessage=UTF8ToString(confirmationMessage)}if(confirmationMessage){e.preventDefault();e.returnValue=confirmationMessage;return confirmationMessage}};var eventHandler={target:findEventTarget(target),eventTypeString,callbackfunc,handlerFunc:beforeUnloadEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_beforeunload_callback_on_thread(userData,callbackfunc,targetThread){userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;if(typeof onbeforeunload=="undefined")return-1;if(targetThread!==1)return-5;return registerBeforeUnloadEventCallback(2,userData,true,callbackfunc,28,"beforeunload")}_emscripten_set_beforeunload_callback_on_thread.sig="ippp";var fillBatteryEventData=(eventStruct,e)=>{HEAPF64[eventStruct>>>3>>>0]=e.chargingTime;HEAPF64[eventStruct+8>>>3>>>0]=e.dischargingTime;HEAPF64[eventStruct+16>>>3>>>0]=e.level;HEAP8[eventStruct+24>>>0]=e.charging};var battery=()=>navigator.battery||navigator.mozBattery||navigator.webkitBattery;var registerBatteryEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{JSEvents.batteryEvent||=_malloc(32);var batteryEventHandlerFunc=(e=event)=>{var batteryEvent=JSEvents.batteryEvent;fillBatteryEventData(batteryEvent,battery());if(getWasmTableEntry(callbackfunc)(eventTypeId,batteryEvent,userData))e.preventDefault()};var eventHandler={target:findEventTarget(target),eventTypeString,callbackfunc,handlerFunc:batteryEventHandlerFunc,useCapture};return JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_batterychargingchange_callback_on_thread(userData,callbackfunc,targetThread){userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;if(!battery())return-1;return registerBatteryEventCallback(battery(),userData,true,callbackfunc,29,"chargingchange",targetThread)}_emscripten_set_batterychargingchange_callback_on_thread.sig="ippp";function _emscripten_set_batterylevelchange_callback_on_thread(userData,callbackfunc,targetThread){userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;if(!battery())return-1;return registerBatteryEventCallback(battery(),userData,true,callbackfunc,30,"levelchange",targetThread)}_emscripten_set_batterylevelchange_callback_on_thread.sig="ippp";function _emscripten_get_battery_status(batteryState){batteryState>>>=0;if(!battery())return-1;fillBatteryEventData(batteryState,battery());return 0}_emscripten_get_battery_status.sig="ip";function _emscripten_set_element_css_size(target,width,height){target>>>=0;target=findEventTarget(target);if(!target)return-4;target.style.width=width+"px";target.style.height=height+"px";return 0}_emscripten_set_element_css_size.sig="ipdd";function _emscripten_get_element_css_size(target,width,height){target>>>=0;width>>>=0;height>>>=0;target=findEventTarget(target);if(!target)return-4;var rect=getBoundingClientRect(target);HEAPF64[width>>>3>>>0]=rect.width;HEAPF64[height>>>3>>>0]=rect.height;return 0}_emscripten_get_element_css_size.sig="ippp";var _emscripten_html5_remove_all_event_listeners=()=>JSEvents.removeAllEventListeners();_emscripten_html5_remove_all_event_listeners.sig="v";var _emscripten_request_animation_frame=function(cb,userData){cb>>>=0;userData>>>=0;return requestAnimationFrame(timeStamp=>getWasmTableEntry(cb)(timeStamp,userData))};_emscripten_request_animation_frame.sig="ipp";var _emscripten_cancel_animation_frame=id=>cancelAnimationFrame(id);_emscripten_cancel_animation_frame.sig="vi";function _emscripten_request_animation_frame_loop(cb,userData){cb>>>=0;userData>>>=0;function tick(timeStamp){if(getWasmTableEntry(cb)(timeStamp,userData)){requestAnimationFrame(tick)}}return requestAnimationFrame(tick)}_emscripten_request_animation_frame_loop.sig="vpp";var _emscripten_get_device_pixel_ratio=()=>typeof devicePixelRatio=="number"&&devicePixelRatio||1;_emscripten_get_device_pixel_ratio.sig="d";function _emscripten_get_callstack(flags,str,maxbytes){str>>>=0;var callstack=getCallstack(flags);if(!str||maxbytes<=0){return lengthBytesUTF8(callstack)+1}var bytesWrittenExcludingNull=stringToUTF8(callstack,str,maxbytes);return bytesWrittenExcludingNull+1}_emscripten_get_callstack.sig="iipi";var convertFrameToPC=frame=>{abort("Cannot use convertFrameToPC (needed by __builtin_return_address) without -sUSE_OFFSET_CONVERTER");return 0};function _emscripten_return_address(level){var callstack=jsStackTrace().split("\n");if(callstack[0]=="Error"){callstack.shift()}var caller=callstack[level+3];return convertFrameToPC(caller)}_emscripten_return_address.sig="pi";var UNWIND_CACHE={};var saveInUnwindCache=callstack=>{callstack.forEach(frame=>{var pc=convertFrameToPC(frame);if(pc){UNWIND_CACHE[pc]=frame}})};function _emscripten_stack_snapshot(){var callstack=jsStackTrace().split("\n");if(callstack[0]=="Error"){callstack.shift()}saveInUnwindCache(callstack);UNWIND_CACHE.last_addr=convertFrameToPC(callstack[3]);UNWIND_CACHE.last_stack=callstack;return UNWIND_CACHE.last_addr}_emscripten_stack_snapshot.sig="p";function _emscripten_stack_unwind_buffer(addr,buffer,count){addr>>>=0;buffer>>>=0;var stack;if(UNWIND_CACHE.last_addr==addr){stack=UNWIND_CACHE.last_stack}else{stack=jsStackTrace().split("\n");if(stack[0]=="Error"){stack.shift()}saveInUnwindCache(stack)}var offset=3;while(stack[offset]&&convertFrameToPC(stack[offset])!=addr){++offset}for(var i=0;i<count&&stack[i+offset];++i){HEAP32[buffer+i*4>>>2>>>0]=convertFrameToPC(stack[i+offset])}return i}_emscripten_stack_unwind_buffer.sig="ippi";function _emscripten_pc_get_function(pc){pc>>>=0;abort("Cannot use emscripten_pc_get_function without -sUSE_OFFSET_CONVERTER");return 0}_emscripten_pc_get_function.sig="pp";var convertPCtoSourceLocation=pc=>{if(UNWIND_CACHE.last_get_source_pc==pc)return UNWIND_CACHE.last_source;var match;var source;if(!source){var frame=UNWIND_CACHE[pc];if(!frame)return null;if(match=/\((.*):(\d+):(\d+)\)$/.exec(frame)){source={file:match[1],line:match[2],column:match[3]}}else if(match=/@(.*):(\d+):(\d+)/.exec(frame)){source={file:match[1],line:match[2],column:match[3]}}}UNWIND_CACHE.last_get_source_pc=pc;UNWIND_CACHE.last_source=source;return source};function _emscripten_pc_get_file(pc){pc>>>=0;var result=convertPCtoSourceLocation(pc);if(!result)return 0;if(_emscripten_pc_get_file.ret)_free(_emscripten_pc_get_file.ret);_emscripten_pc_get_file.ret=stringToNewUTF8(result.file);return _emscripten_pc_get_file.ret}_emscripten_pc_get_file.sig="pp";function _emscripten_pc_get_line(pc){pc>>>=0;var result=convertPCtoSourceLocation(pc);return result?result.line:0}_emscripten_pc_get_line.sig="ip";function _emscripten_pc_get_column(pc){pc>>>=0;var result=convertPCtoSourceLocation(pc);return result?result.column||0:0}_emscripten_pc_get_column.sig="ip";var wasiRightsToMuslOFlags=rights=>{if(rights&2&&rights&64){return 2}if(rights&2){return 0}if(rights&64){return 1}throw new FS.ErrnoError(28)};var wasiOFlagsToMuslOFlags=oflags=>{var musl_oflags=0;if(oflags&1){musl_oflags|=64}if(oflags&8){musl_oflags|=512}if(oflags&2){musl_oflags|=65536}if(oflags&4){musl_oflags|=128}return musl_oflags};var _emscripten_unwind_to_js_event_loop=()=>{throw"unwind"};_emscripten_unwind_to_js_event_loop.sig="v";var safeSetTimeout=(func,timeout)=>{runtimeKeepalivePush();return setTimeout(()=>{runtimeKeepalivePop();callUserCallback(func)},timeout)};var setImmediateWrapped=func=>{setImmediateWrapped.mapping||=[];var id=setImmediateWrapped.mapping.length;setImmediateWrapped.mapping[id]=setImmediate(()=>{setImmediateWrapped.mapping[id]=undefined;func()});return id};var _emscripten_set_main_loop_timing=(mode,value)=>{MainLoop.timingMode=mode;MainLoop.timingValue=value;if(!MainLoop.func){return 1}if(!MainLoop.running){runtimeKeepalivePush();MainLoop.running=true}if(mode==0){MainLoop.scheduler=function MainLoop_scheduler_setTimeout(){var timeUntilNextTick=Math.max(0,MainLoop.tickStartTime+value-_emscripten_get_now())|0;setTimeout(MainLoop.runner,timeUntilNextTick)};MainLoop.method="timeout"}else if(mode==1){MainLoop.scheduler=function MainLoop_scheduler_rAF(){MainLoop.requestAnimationFrame(MainLoop.runner)};MainLoop.method="rAF"}else if(mode==2){if(typeof MainLoop.setImmediate=="undefined"){if(typeof setImmediate=="undefined"){var setImmediates=[];var emscriptenMainLoopMessageId="setimmediate";var MainLoop_setImmediate_messageHandler=event=>{if(event.data===emscriptenMainLoopMessageId||event.data.target===emscriptenMainLoopMessageId){event.stopPropagation();setImmediates.shift()()}};addEventListener("message",MainLoop_setImmediate_messageHandler,true);MainLoop.setImmediate=func=>{setImmediates.push(func);if(ENVIRONMENT_IS_WORKER){Module["setImmediates"]??=[];Module["setImmediates"].push(func);postMessage({target:emscriptenMainLoopMessageId})}else postMessage(emscriptenMainLoopMessageId,"*")}}else{MainLoop.setImmediate=setImmediate}}MainLoop.scheduler=function MainLoop_scheduler_setImmediate(){MainLoop.setImmediate(MainLoop.runner)};MainLoop.method="immediate"}return 0};_emscripten_set_main_loop_timing.sig="iii";var setMainLoop=(iterFunc,fps,simulateInfiniteLoop,arg,noSetTiming)=>{MainLoop.func=iterFunc;MainLoop.arg=arg;var thisMainLoopId=MainLoop.currentlyRunningMainloop;function checkIsRunning(){if(thisMainLoopId<MainLoop.currentlyRunningMainloop){runtimeKeepalivePop();maybeExit();return false}return true}MainLoop.running=false;MainLoop.runner=function MainLoop_runner(){if(ABORT)return;if(MainLoop.queue.length>0){var start=Date.now();var blocker=MainLoop.queue.shift();blocker.func(blocker.arg);if(MainLoop.remainingBlockers){var remaining=MainLoop.remainingBlockers;var next=remaining%1==0?remaining-1:Math.floor(remaining);if(blocker.counted){MainLoop.remainingBlockers=next}else{next=next+.5;MainLoop.remainingBlockers=(8*remaining+next)/9}}MainLoop.updateStatus();if(!checkIsRunning())return;setTimeout(MainLoop.runner,0);return}if(!checkIsRunning())return;MainLoop.currentFrameNumber=MainLoop.currentFrameNumber+1|0;if(MainLoop.timingMode==1&&MainLoop.timingValue>1&&MainLoop.currentFrameNumber%MainLoop.timingValue!=0){MainLoop.scheduler();return}else if(MainLoop.timingMode==0){MainLoop.tickStartTime=_emscripten_get_now()}MainLoop.runIter(iterFunc);if(!checkIsRunning())return;MainLoop.scheduler()};if(!noSetTiming){if(fps>0){_emscripten_set_main_loop_timing(0,1e3/fps)}else{_emscripten_set_main_loop_timing(1,1)}MainLoop.scheduler()}if(simulateInfiniteLoop){throw"unwind"}};var MainLoop={running:false,scheduler:null,method:"",currentlyRunningMainloop:0,func:null,arg:0,timingMode:0,timingValue:0,currentFrameNumber:0,queue:[],preMainLoop:[],postMainLoop:[],pause(){MainLoop.scheduler=null;MainLoop.currentlyRunningMainloop++},resume(){MainLoop.currentlyRunningMainloop++;var timingMode=MainLoop.timingMode;var timingValue=MainLoop.timingValue;var func=MainLoop.func;MainLoop.func=null;setMainLoop(func,0,false,MainLoop.arg,true);_emscripten_set_main_loop_timing(timingMode,timingValue);MainLoop.scheduler()},updateStatus(){if(Module["setStatus"]){var message=Module["statusMessage"]||"Please wait...";var remaining=MainLoop.remainingBlockers??0;var expected=MainLoop.expectedBlockers??0;if(remaining){if(remaining<expected){Module["setStatus"](`{message} ({expected - remaining}/{expected})`)}else{Module["setStatus"](message)}}else{Module["setStatus"]("")}}},init(){Module["preMainLoop"]&&MainLoop.preMainLoop.push(Module["preMainLoop"]);Module["postMainLoop"]&&MainLoop.postMainLoop.push(Module["postMainLoop"])},runIter(func){if(ABORT)return;for(var pre of MainLoop.preMainLoop){if(pre()===false){return}}callUserCallback(func);for(var post of MainLoop.postMainLoop){post()}},nextRAF:0,fakeRequestAnimationFrame(func){var now=Date.now();if(MainLoop.nextRAF===0){MainLoop.nextRAF=now+1e3/60}else{while(now+2>=MainLoop.nextRAF){MainLoop.nextRAF+=1e3/60}}var delay=Math.max(MainLoop.nextRAF-now,0);setTimeout(func,delay)},requestAnimationFrame(func){if(typeof requestAnimationFrame=="function"){requestAnimationFrame(func);return}var RAF=MainLoop.fakeRequestAnimationFrame;RAF(func)}};var safeRequestAnimationFrame=func=>{runtimeKeepalivePush();return MainLoop.requestAnimationFrame(()=>{runtimeKeepalivePop();callUserCallback(func)})};var clearImmediateWrapped=id=>{clearImmediate(setImmediateWrapped.mapping[id]);setImmediateWrapped.mapping[id]=undefined};var emClearImmediate;var emSetImmediate;var emClearImmediate_deps=["$emSetImmediate"];var _emscripten_set_immediate=function(cb,userData){cb>>>=0;userData>>>=0;runtimeKeepalivePush();return emSetImmediate(()=>{runtimeKeepalivePop();callUserCallback(()=>getWasmTableEntry(cb)(userData))})};_emscripten_set_immediate.sig="ipp";var _emscripten_clear_immediate=id=>{runtimeKeepalivePop();emClearImmediate(id)};_emscripten_clear_immediate.sig="vi";var _emscripten_set_immediate_loop=function(cb,userData){cb>>>=0;userData>>>=0;function tick(){callUserCallback(()=>{if(getWasmTableEntry(cb)(userData)){emSetImmediate(tick)}else{runtimeKeepalivePop()}})}runtimeKeepalivePush();emSetImmediate(tick)};_emscripten_set_immediate_loop.sig="vpp";var _emscripten_set_timeout=function(cb,msecs,userData){cb>>>=0;userData>>>=0;return safeSetTimeout(()=>getWasmTableEntry(cb)(userData),msecs)};_emscripten_set_timeout.sig="ipdp";var _emscripten_clear_timeout=clearTimeout;_emscripten_clear_timeout.sig="vi";var _emscripten_set_timeout_loop=function(cb,msecs,userData){cb>>>=0;userData>>>=0;function tick(){var t=_emscripten_get_now();var n=t+msecs;runtimeKeepalivePop();callUserCallback(()=>{if(getWasmTableEntry(cb)(t,userData)){runtimeKeepalivePush();var remaining=n-_emscripten_get_now();remaining=Math.max(0,remaining);setTimeout(tick,remaining)}})}runtimeKeepalivePush();return setTimeout(tick,0)};_emscripten_set_timeout_loop.sig="vpdp";var _emscripten_set_interval=function(cb,msecs,userData){cb>>>=0;userData>>>=0;runtimeKeepalivePush();return setInterval(()=>{callUserCallback(()=>getWasmTableEntry(cb)(userData))},msecs)};_emscripten_set_interval.sig="ipdp";var _emscripten_clear_interval=id=>{runtimeKeepalivePop();clearInterval(id)};_emscripten_clear_interval.sig="vi";var _emscripten_async_call=function(func,arg,millis){func>>>=0;arg>>>=0;var wrapper=()=>getWasmTableEntry(func)(arg);if(millis>=0||ENVIRONMENT_IS_NODE){safeSetTimeout(wrapper,millis)}else{safeRequestAnimationFrame(wrapper)}};_emscripten_async_call.sig="vppi";var registerPostMainLoop=f=>{typeof MainLoop!="undefined"&&MainLoop.postMainLoop.push(f)};var registerPreMainLoop=f=>{typeof MainLoop!="undefined"&&MainLoop.preMainLoop.push(f)};function _emscripten_get_main_loop_timing(mode,value){mode>>>=0;value>>>=0;if(mode)HEAP32[mode>>>2>>>0]=MainLoop.timingMode;if(value)HEAP32[value>>>2>>>0]=MainLoop.timingValue}_emscripten_get_main_loop_timing.sig="vpp";function _emscripten_set_main_loop(func,fps,simulateInfiniteLoop){func>>>=0;var iterFunc=getWasmTableEntry(func);setMainLoop(iterFunc,fps,simulateInfiniteLoop)}_emscripten_set_main_loop.sig="vpii";var _emscripten_set_main_loop_arg=function(func,arg,fps,simulateInfiniteLoop){func>>>=0;arg>>>=0;var iterFunc=()=>getWasmTableEntry(func)(arg);setMainLoop(iterFunc,fps,simulateInfiniteLoop,arg)};_emscripten_set_main_loop_arg.sig="vppii";var _emscripten_cancel_main_loop=()=>{MainLoop.pause();MainLoop.func=null};_emscripten_cancel_main_loop.sig="v";var _emscripten_pause_main_loop=()=>MainLoop.pause();_emscripten_pause_main_loop.sig="v";var _emscripten_resume_main_loop=()=>MainLoop.resume();_emscripten_resume_main_loop.sig="v";var __emscripten_push_main_loop_blocker=function(func,arg,name){func>>>=0;arg>>>=0;name>>>=0;MainLoop.queue.push({func:()=>{getWasmTableEntry(func)(arg)},name:UTF8ToString(name),counted:true});MainLoop.updateStatus()};__emscripten_push_main_loop_blocker.sig="vppp";var __emscripten_push_uncounted_main_loop_blocker=function(func,arg,name){func>>>=0;arg>>>=0;name>>>=0;MainLoop.queue.push({func:()=>{getWasmTableEntry(func)(arg)},name:UTF8ToString(name),counted:false});MainLoop.updateStatus()};__emscripten_push_uncounted_main_loop_blocker.sig="vppp";var _emscripten_set_main_loop_expected_blockers=num=>{MainLoop.expectedBlockers=num;MainLoop.remainingBlockers=num;MainLoop.updateStatus()};_emscripten_set_main_loop_expected_blockers.sig="vi";var idsToPromises=(idBuf,size)=>{var promises=[];for(var i=0;i<size;i++){var id=HEAP32[idBuf+i*4>>>2>>>0];promises[i]=getPromise(id)}return promises};var makePromiseCallback=(callback,userData)=>value=>{runtimeKeepalivePop();var stack=stackSave();var resultPtr=stackAlloc(POINTER_SIZE);HEAPU32[resultPtr>>>2>>>0]=0;try{var result=getWasmTableEntry(callback)(resultPtr,userData,value);var resultVal=HEAPU32[resultPtr>>>2>>>0]}catch(e){if(typeof e!="number"){throw 0}throw e}finally{stackRestore(stack)}switch(result){case 0:return resultVal;case 1:return getPromise(resultVal);case 2:var ret=getPromise(resultVal);_emscripten_promise_destroy(resultVal);return ret;case 3:throw resultVal}};function _emscripten_promise_then(id,onFulfilled,onRejected,userData){id>>>=0;onFulfilled>>>=0;onRejected>>>=0;userData>>>=0;runtimeKeepalivePush();var promise=getPromise(id);var newId=promiseMap.allocate({promise:promise.then(makePromiseCallback(onFulfilled,userData),makePromiseCallback(onRejected,userData))});return newId}_emscripten_promise_then.sig="ppppp";var _emscripten_promise_all=function(idBuf,resultBuf,size){idBuf>>>=0;resultBuf>>>=0;size>>>=0;var promises=idsToPromises(idBuf,size);var id=promiseMap.allocate({promise:Promise.all(promises).then(results=>{if(resultBuf){for(var i=0;i<size;i++){var result=results[i];HEAPU32[resultBuf+i*4>>>2>>>0]=result}}return resultBuf})});return id};_emscripten_promise_all.sig="pppp";var setPromiseResult=(ptr,fulfill,value)=>{var result=fulfill?0:3;HEAP32[ptr>>>2>>>0]=result;HEAPU32[ptr+4>>>2>>>0]=value};var _emscripten_promise_all_settled=function(idBuf,resultBuf,size){idBuf>>>=0;resultBuf>>>=0;size>>>=0;var promises=idsToPromises(idBuf,size);var id=promiseMap.allocate({promise:Promise.allSettled(promises).then(results=>{if(resultBuf){var offset=resultBuf;for(var i=0;i<size;i++,offset+=8){if(results[i].status==="fulfilled"){setPromiseResult(offset,true,results[i].value)}else{setPromiseResult(offset,false,results[i].reason)}}}return resultBuf})});return id};_emscripten_promise_all_settled.sig="pppp";var _emscripten_promise_any=function(idBuf,errorBuf,size){idBuf>>>=0;errorBuf>>>=0;size>>>=0;var promises=idsToPromises(idBuf,size);var id=promiseMap.allocate({promise:Promise.any(promises).catch(err=>{if(errorBuf){for(var i=0;i<size;i++){HEAPU32[errorBuf+i*4>>>2>>>0]=err.errors[i]}}throw errorBuf})});return id};_emscripten_promise_any.sig="pppp";function _emscripten_promise_race(idBuf,size){idBuf>>>=0;size>>>=0;var promises=idsToPromises(idBuf,size);var id=promiseMap.allocate({promise:Promise.race(promises)});return id}_emscripten_promise_race.sig="ppp";function _emscripten_promise_await(returnValuePtr,id){returnValuePtr>>>=0;id>>>=0;abort("emscripten_promise_await is only available with ASYNCIFY")}_emscripten_promise_await.sig="vpp";var getExceptionMessageCommon=ptr=>{var sp=stackSave();var type_addr_addr=stackAlloc(4);var message_addr_addr=stackAlloc(4);___get_exception_message(ptr,type_addr_addr,message_addr_addr);var type_addr=HEAPU32[type_addr_addr>>>2>>>0];var message_addr=HEAPU32[message_addr_addr>>>2>>>0];var type=UTF8ToString(type_addr);_free(type_addr);var message;if(message_addr){message=UTF8ToString(message_addr);_free(message_addr)}stackRestore(sp);return[type,message]};var getCppExceptionTag=()=>___cpp_exception;var getCppExceptionThrownObjectFromWebAssemblyException=ex=>{var unwind_header=ex.getArg(getCppExceptionTag(),0);return ___thrown_object_from_unwind_exception(unwind_header)};var incrementExceptionRefcount=ex=>{var ptr=getCppExceptionThrownObjectFromWebAssemblyException(ex);___cxa_increment_exception_refcount(ptr)};var decrementExceptionRefcount=ex=>{var ptr=getCppExceptionThrownObjectFromWebAssemblyException(ex);___cxa_decrement_exception_refcount(ptr)};var getExceptionMessage=ex=>{var ptr=getCppExceptionThrownObjectFromWebAssemblyException(ex);return getExceptionMessageCommon(ptr)};var Browser={useWebGL:false,isFullscreen:false,pointerLock:false,moduleContextCreatedCallbacks:[],workers:[],preloadedImages:{},preloadedAudios:{},getCanvas:()=>Module["canvas"],init(){if(Browser.initted)return;Browser.initted=true;var imagePlugin={};imagePlugin["canHandle"]=function imagePlugin_canHandle(name){return!Module["noImageDecoding"]&&/\.(jpg|jpeg|png|bmp|webp)$/i.test(name)};imagePlugin["handle"]=function imagePlugin_handle(byteArray,name,onload,onerror){var b=new Blob([byteArray],{type:Browser.getMimetype(name)});if(b.size!==byteArray.length){b=new Blob([new Uint8Array(byteArray).buffer],{type:Browser.getMimetype(name)})}var url=URL.createObjectURL(b);var img=new Image;img.onload=()=>{var canvas=document.createElement("canvas");canvas.width=img.width;canvas.height=img.height;var ctx=canvas.getContext("2d");ctx.drawImage(img,0,0);Browser.preloadedImages[name]=canvas;URL.revokeObjectURL(url);onload?.(byteArray)};img.onerror=event=>{err(`Image ${url} could not be decoded`);onerror?.()};img.src=url};preloadPlugins.push(imagePlugin);var audioPlugin={};audioPlugin["canHandle"]=function audioPlugin_canHandle(name){return!Module["noAudioDecoding"]&&name.slice(-4)in{".ogg":1,".wav":1,".mp3":1}};audioPlugin["handle"]=function audioPlugin_handle(byteArray,name,onload,onerror){var done=false;function finish(audio){if(done)return;done=true;Browser.preloadedAudios[name]=audio;onload?.(byteArray)}function fail(){if(done)return;done=true;Browser.preloadedAudios[name]=new Audio;onerror?.()}var b=new Blob([byteArray],{type:Browser.getMimetype(name)});var url=URL.createObjectURL(b);var audio=new Audio;audio.addEventListener("canplaythrough",()=>finish(audio),false);audio.onerror=function audio_onerror(event){if(done)return;err(`warning: browser could not fully decode audio ${name}, trying slower base64 approach`);function encode64(data){var BASE="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";var PAD="=";var ret="";var leftchar=0;var leftbits=0;for(var i=0;i<data.length;i++){leftchar=leftchar<<8|data[i];leftbits+=8;while(leftbits>=6){var curr=leftchar>>leftbits-6&63;leftbits-=6;ret+=BASE[curr]}}if(leftbits==2){ret+=BASE[(leftchar&3)<<4];ret+=PAD+PAD}else if(leftbits==4){ret+=BASE[(leftchar&15)<<2];ret+=PAD}return ret}audio.src="data:audio/x-"+name.slice(-3)+";base64,"+encode64(byteArray);finish(audio)};audio.src=url;safeSetTimeout(()=>{finish(audio)},1e4)};preloadPlugins.push(audioPlugin);function pointerLockChange(){var canvas=Browser.getCanvas();Browser.pointerLock=document["pointerLockElement"]===canvas||document["mozPointerLockElement"]===canvas||document["webkitPointerLockElement"]===canvas||document["msPointerLockElement"]===canvas}var canvas=Browser.getCanvas();if(canvas){canvas.requestPointerLock=canvas["requestPointerLock"]||canvas["mozRequestPointerLock"]||canvas["webkitRequestPointerLock"]||canvas["msRequestPointerLock"]||(()=>{});canvas.exitPointerLock=document["exitPointerLock"]||document["mozExitPointerLock"]||document["webkitExitPointerLock"]||document["msExitPointerLock"]||(()=>{});canvas.exitPointerLock=canvas.exitPointerLock.bind(document);document.addEventListener("pointerlockchange",pointerLockChange,false);document.addEventListener("mozpointerlockchange",pointerLockChange,false);document.addEventListener("webkitpointerlockchange",pointerLockChange,false);document.addEventListener("mspointerlockchange",pointerLockChange,false);if(Module["elementPointerLock"]){canvas.addEventListener("click",ev=>{if(!Browser.pointerLock&&Browser.getCanvas().requestPointerLock){Browser.getCanvas().requestPointerLock();ev.preventDefault()}},false)}}},createContext(canvas,useWebGL,setInModule,webGLContextAttributes){if(useWebGL&&Module["ctx"]&&canvas==Browser.getCanvas())return Module["ctx"];var ctx;var contextHandle;if(useWebGL){var contextAttributes={antialias:false,alpha:false,majorVersion:typeof WebGL2RenderingContext!="undefined"?2:1};if(webGLContextAttributes){for(var attribute in webGLContextAttributes){contextAttributes[attribute]=webGLContextAttributes[attribute]}}if(typeof GL!="undefined"){contextHandle=GL.createContext(canvas,contextAttributes);if(contextHandle){ctx=GL.getContext(contextHandle).GLctx}}}else{ctx=canvas.getContext("2d")}if(!ctx)return null;if(setInModule){Module["ctx"]=ctx;if(useWebGL)GL.makeContextCurrent(contextHandle);Browser.useWebGL=useWebGL;Browser.moduleContextCreatedCallbacks.forEach(callback=>callback());Browser.init()}return ctx},fullscreenHandlersInstalled:false,lockPointer:undefined,resizeCanvas:undefined,requestFullscreen(lockPointer,resizeCanvas){Browser.lockPointer=lockPointer;Browser.resizeCanvas=resizeCanvas;if(typeof Browser.lockPointer=="undefined")Browser.lockPointer=true;if(typeof Browser.resizeCanvas=="undefined")Browser.resizeCanvas=false;var canvas=Browser.getCanvas();function fullscreenChange(){Browser.isFullscreen=false;var canvasContainer=canvas.parentNode;if((document["fullscreenElement"]||document["mozFullScreenElement"]||document["msFullscreenElement"]||document["webkitFullscreenElement"]||document["webkitCurrentFullScreenElement"])===canvasContainer){canvas.exitFullscreen=Browser.exitFullscreen;if(Browser.lockPointer)canvas.requestPointerLock();Browser.isFullscreen=true;if(Browser.resizeCanvas){Browser.setFullscreenCanvasSize()}else{Browser.updateCanvasDimensions(canvas)}}else{canvasContainer.parentNode.insertBefore(canvas,canvasContainer);canvasContainer.parentNode.removeChild(canvasContainer);if(Browser.resizeCanvas){Browser.setWindowedCanvasSize()}else{Browser.updateCanvasDimensions(canvas)}}Module["onFullScreen"]?.(Browser.isFullscreen);Module["onFullscreen"]?.(Browser.isFullscreen)}if(!Browser.fullscreenHandlersInstalled){Browser.fullscreenHandlersInstalled=true;document.addEventListener("fullscreenchange",fullscreenChange,false);document.addEventListener("mozfullscreenchange",fullscreenChange,false);document.addEventListener("webkitfullscreenchange",fullscreenChange,false);document.addEventListener("MSFullscreenChange",fullscreenChange,false)}var canvasContainer=document.createElement("div");canvas.parentNode.insertBefore(canvasContainer,canvas);canvasContainer.appendChild(canvas);canvasContainer.requestFullscreen=canvasContainer["requestFullscreen"]||canvasContainer["mozRequestFullScreen"]||canvasContainer["msRequestFullscreen"]||(canvasContainer["webkitRequestFullscreen"]?()=>canvasContainer["webkitRequestFullscreen"](Element["ALLOW_KEYBOARD_INPUT"]):null)||(canvasContainer["webkitRequestFullScreen"]?()=>canvasContainer["webkitRequestFullScreen"](Element["ALLOW_KEYBOARD_INPUT"]):null);canvasContainer.requestFullscreen()},exitFullscreen(){if(!Browser.isFullscreen){return false}var CFS=document["exitFullscreen"]||document["cancelFullScreen"]||document["mozCancelFullScreen"]||document["msExitFullscreen"]||document["webkitCancelFullScreen"]||(()=>{});CFS.apply(document,[]);return true},safeSetTimeout(func,timeout){return safeSetTimeout(func,timeout)},getMimetype(name){return{jpg:"image/jpeg",jpeg:"image/jpeg",png:"image/png",bmp:"image/bmp",ogg:"audio/ogg",wav:"audio/wav",mp3:"audio/mpeg"}[name.slice(name.lastIndexOf(".")+1)]},getUserMedia(func){window.getUserMedia||=navigator["getUserMedia"]||navigator["mozGetUserMedia"];window.getUserMedia(func)},getMovementX(event){return event["movementX"]||event["mozMovementX"]||event["webkitMovementX"]||0},getMovementY(event){return event["movementY"]||event["mozMovementY"]||event["webkitMovementY"]||0},getMouseWheelDelta(event){var delta=0;switch(event.type){case"DOMMouseScroll":delta=event.detail/3;break;case"mousewheel":delta=event.wheelDelta/120;break;case"wheel":delta=event.deltaY;switch(event.deltaMode){case 0:delta/=100;break;case 1:delta/=3;break;case 2:delta*=80;break;default:throw"unrecognized mouse wheel delta mode: "+event.deltaMode}break;default:throw"unrecognized mouse wheel event: "+event.type}return delta},mouseX:0,mouseY:0,mouseMovementX:0,mouseMovementY:0,touches:{},lastTouches:{},calculateMouseCoords(pageX,pageY){var canvas=Browser.getCanvas();var rect=canvas.getBoundingClientRect();var scrollX=typeof window.scrollX!="undefined"?window.scrollX:window.pageXOffset;var scrollY=typeof window.scrollY!="undefined"?window.scrollY:window.pageYOffset;var adjustedX=pageX-(scrollX+rect.left);var adjustedY=pageY-(scrollY+rect.top);adjustedX=adjustedX*(canvas.width/rect.width);adjustedY=adjustedY*(canvas.height/rect.height);return{x:adjustedX,y:adjustedY}},setMouseCoords(pageX,pageY){const{x,y}=Browser.calculateMouseCoords(pageX,pageY);Browser.mouseMovementX=x-Browser.mouseX;Browser.mouseMovementY=y-Browser.mouseY;Browser.mouseX=x;Browser.mouseY=y},calculateMouseEvent(event){if(Browser.pointerLock){if(event.type!="mousemove"&&"mozMovementX"in event){Browser.mouseMovementX=Browser.mouseMovementY=0}else{Browser.mouseMovementX=Browser.getMovementX(event);Browser.mouseMovementY=Browser.getMovementY(event)}Browser.mouseX+=Browser.mouseMovementX;Browser.mouseY+=Browser.mouseMovementY}else{if(event.type==="touchstart"||event.type==="touchend"||event.type==="touchmove"){var touch=event.touch;if(touch===undefined){return}var coords=Browser.calculateMouseCoords(touch.pageX,touch.pageY);if(event.type==="touchstart"){Browser.lastTouches[touch.identifier]=coords;Browser.touches[touch.identifier]=coords}else if(event.type==="touchend"||event.type==="touchmove"){var last=Browser.touches[touch.identifier];last||=coords;Browser.lastTouches[touch.identifier]=last;Browser.touches[touch.identifier]=coords}return}Browser.setMouseCoords(event.pageX,event.pageY)}},resizeListeners:[],updateResizeListeners(){var canvas=Browser.getCanvas();Browser.resizeListeners.forEach(listener=>listener(canvas.width,canvas.height))},setCanvasSize(width,height,noUpdates){var canvas=Browser.getCanvas();Browser.updateCanvasDimensions(canvas,width,height);if(!noUpdates)Browser.updateResizeListeners()},windowedWidth:0,windowedHeight:0,setFullscreenCanvasSize(){if(typeof SDL!="undefined"){var flags=HEAPU32[SDL.screen>>>2>>>0];flags=flags|8388608;HEAP32[SDL.screen>>>2>>>0]=flags}Browser.updateCanvasDimensions(Browser.getCanvas());Browser.updateResizeListeners()},setWindowedCanvasSize(){if(typeof SDL!="undefined"){var flags=HEAPU32[SDL.screen>>>2>>>0];flags=flags&~8388608;HEAP32[SDL.screen>>>2>>>0]=flags}Browser.updateCanvasDimensions(Browser.getCanvas());Browser.updateResizeListeners()},updateCanvasDimensions(canvas,wNative,hNative){if(wNative&&hNative){canvas.widthNative=wNative;canvas.heightNative=hNative}else{wNative=canvas.widthNative;hNative=canvas.heightNative}var w=wNative;var h=hNative;if(Module["forcedAspectRatio"]>0){if(w/h<Module["forcedAspectRatio"]){w=Math.round(h*Module["forcedAspectRatio"])}else{h=Math.round(w/Module["forcedAspectRatio"])}}if((document["fullscreenElement"]||document["mozFullScreenElement"]||document["msFullscreenElement"]||document["webkitFullscreenElement"]||document["webkitCurrentFullScreenElement"])===canvas.parentNode&&typeof screen!="undefined"){var factor=Math.min(screen.width/w,screen.height/h);w=Math.round(w*factor);h=Math.round(h*factor)}if(Browser.resizeCanvas){if(canvas.width!=w)canvas.width=w;if(canvas.height!=h)canvas.height=h;if(typeof canvas.style!="undefined"){canvas.style.removeProperty("width");canvas.style.removeProperty("height")}}else{if(canvas.width!=wNative)canvas.width=wNative;if(canvas.height!=hNative)canvas.height=hNative;if(typeof canvas.style!="undefined"){if(w!=wNative||h!=hNative){canvas.style.setProperty("width",w+"px","important");canvas.style.setProperty("height",h+"px","important")}else{canvas.style.removeProperty("width");canvas.style.removeProperty("height")}}}}};var requestFullscreen=Browser.requestFullscreen;var setCanvasSize=Browser.setCanvasSize;var getUserMedia=Browser.getUserMedia;var createContext=Browser.createContext;var _emscripten_run_preload_plugins=function(file,onload,onerror){file>>>=0;onload>>>=0;onerror>>>=0;runtimeKeepalivePush();var _file=UTF8ToString(file);var data=FS.analyzePath(_file);if(!data.exists)return-1;FS.createPreloadedFile(PATH.dirname(_file),PATH.basename(_file),new Uint8Array(data.object.contents),true,true,()=>{runtimeKeepalivePop();if(onload)getWasmTableEntry(onload)(file)},()=>{runtimeKeepalivePop();if(onerror)getWasmTableEntry(onerror)(file)},true);return 0};_emscripten_run_preload_plugins.sig="ippp";var Browser_asyncPrepareDataCounter=0;var _emscripten_run_preload_plugins_data=function(data,size,suffix,arg,onload,onerror){data>>>=0;suffix>>>=0;arg>>>=0;onload>>>=0;onerror>>>=0;runtimeKeepalivePush();var _suffix=UTF8ToString(suffix);var name="prepare_data_"+Browser_asyncPrepareDataCounter+++"."+_suffix;var cname=stringToNewUTF8(name);FS.createPreloadedFile("/",name,HEAPU8.subarray(data>>>0,data+size>>>0),true,true,()=>{runtimeKeepalivePop();if(onload)getWasmTableEntry(onload)(arg,cname)},()=>{runtimeKeepalivePop();if(onerror)getWasmTableEntry(onerror)(arg)},true)};_emscripten_run_preload_plugins_data.sig="vpipppp";var _emscripten_async_run_script=function(script,millis){script>>>=0;safeSetTimeout(()=>_emscripten_run_script(script),millis)};_emscripten_async_run_script.sig="vpi";var _emscripten_async_load_script=async function(url,onload,onerror){url>>>=0;onload>>>=0;onerror>>>=0;url=UTF8ToString(url);runtimeKeepalivePush();var loadDone=()=>{runtimeKeepalivePop();if(onload){var onloadCallback=()=>callUserCallback(getWasmTableEntry(onload));if(runDependencies>0){dependenciesFulfilled=onloadCallback}else{onloadCallback()}}};var loadError=()=>{runtimeKeepalivePop();if(onerror){callUserCallback(getWasmTableEntry(onerror))}};if(ENVIRONMENT_IS_NODE){try{var data=await readAsync(url,false);eval(data);loadDone()}catch(e){err(e);loadError()}return}var script=document.createElement("script");script.onload=loadDone;script.onerror=loadError;script.src=url;document.body.appendChild(script)};_emscripten_async_load_script.sig="vppp";function _emscripten_get_window_title(){var buflen=256;if(!_emscripten_get_window_title.buffer){_emscripten_get_window_title.buffer=_malloc(buflen)}stringToUTF8(document.title,_emscripten_get_window_title.buffer,buflen);return _emscripten_get_window_title.buffer}_emscripten_get_window_title.sig="p";function _emscripten_set_window_title(title){title>>>=0;return document.title=UTF8ToString(title)}_emscripten_set_window_title.sig="vp";function _emscripten_get_screen_size(width,height){width>>>=0;height>>>=0;HEAP32[width>>>2>>>0]=screen.width;HEAP32[height>>>2>>>0]=screen.height}_emscripten_get_screen_size.sig="vpp";var _emscripten_hide_mouse=()=>{var styleSheet=document.styleSheets[0];var rules=styleSheet.cssRules;for(var i=0;i<rules.length;i++){if(rules[i].cssText.startsWith("canvas")){styleSheet.deleteRule(i);i--}}styleSheet.insertRule("canvas.emscripten { border: 1px solid black; cursor: none; }",0)};_emscripten_hide_mouse.sig="v";var _emscripten_set_canvas_size=(width,height)=>Browser.setCanvasSize(width,height);_emscripten_set_canvas_size.sig="vii";function _emscripten_get_canvas_size(width,height,isFullscreen){width>>>=0;height>>>=0;isFullscreen>>>=0;var canvas=Browser.getCanvas();HEAP32[width>>>2>>>0]=canvas.width;HEAP32[height>>>2>>>0]=canvas.height;HEAP32[isFullscreen>>>2>>>0]=Browser.isFullscreen?1:0}_emscripten_get_canvas_size.sig="vppp";function _emscripten_create_worker(url){url>>>=0;url=UTF8ToString(url);var id=Browser.workers.length;var info={worker:new Worker(url),callbacks:[],awaited:0,buffer:0,bufferSize:0};info.worker.onmessage=function info_worker_onmessage(msg){if(ABORT)return;var info=Browser.workers[id];if(!info)return;var callbackId=msg.data["callbackId"];var callbackInfo=info.callbacks[callbackId];if(!callbackInfo)return;if(msg.data["finalResponse"]){info.awaited--;info.callbacks[callbackId]=null;runtimeKeepalivePop()}var data=msg.data["data"];if(data){if(!data.byteLength)data=new Uint8Array(data);if(!info.buffer||info.bufferSize<data.length){if(info.buffer)_free(info.buffer);info.bufferSize=data.length;info.buffer=_malloc(data.length)}HEAPU8.set(data,info.buffer>>>0);callbackInfo.func(info.buffer,data.length,callbackInfo.arg)}else{callbackInfo.func(0,0,callbackInfo.arg)}};Browser.workers.push(info);return id}_emscripten_create_worker.sig="ip";var _emscripten_destroy_worker=id=>{var info=Browser.workers[id];info.worker.terminate();if(info.buffer)_free(info.buffer);Browser.workers[id]=null};_emscripten_destroy_worker.sig="vi";function _emscripten_call_worker(id,funcName,data,size,callback,arg){funcName>>>=0;data>>>=0;callback>>>=0;arg>>>=0;funcName=UTF8ToString(funcName);var info=Browser.workers[id];var callbackId=-1;if(callback){runtimeKeepalivePush();callbackId=info.callbacks.length;info.callbacks.push({func:getWasmTableEntry(callback),arg});info.awaited++}var transferObject={funcName,callbackId,data:data?new Uint8Array(HEAPU8.subarray(data>>>0,data+size>>>0)):0};if(data){info.worker.postMessage(transferObject,[transferObject.data.buffer])}else{info.worker.postMessage(transferObject)}}_emscripten_call_worker.sig="vippipp";var _emscripten_get_worker_queue_size=id=>{var info=Browser.workers[id];if(!info)return-1;return info.awaited};_emscripten_get_worker_queue_size.sig="ii";var getPreloadedImageData=(path,w,h)=>{path=PATH_FS.resolve(path);var canvas=Browser.preloadedImages[path];if(!canvas)return 0;var ctx=canvas.getContext("2d");var image=ctx.getImageData(0,0,canvas.width,canvas.height);var buf=_malloc(canvas.width*canvas.height*4);HEAPU8.set(image.data,buf>>>0);HEAP32[w>>>2>>>0]=canvas.width;HEAP32[h>>>2>>>0]=canvas.height;return buf};function _emscripten_get_preloaded_image_data(path,w,h){path>>>=0;w>>>=0;h>>>=0;return getPreloadedImageData(UTF8ToString(path),w,h)}_emscripten_get_preloaded_image_data.sig="pppp";var getPreloadedImageData__data=["$PATH_FS","malloc"];function _emscripten_get_preloaded_image_data_from_FILE(file,w,h){file>>>=0;w>>>=0;h>>>=0;var fd=_fileno(file);var stream=FS.getStream(fd);if(stream){return getPreloadedImageData(stream.path,w,h)}return 0}_emscripten_get_preloaded_image_data_from_FILE.sig="pppp";var wget={wgetRequests:{},nextWgetRequestHandle:0,getNextWgetRequestHandle(){var handle=wget.nextWgetRequestHandle;wget.nextWgetRequestHandle++;return handle}};var FS_mkdirTree=(path,mode)=>FS.mkdirTree(path,mode);var _emscripten_async_wget=function(url,file,onload,onerror){url>>>=0;file>>>=0;onload>>>=0;onerror>>>=0;runtimeKeepalivePush();var _url=UTF8ToString(url);var _file=UTF8ToString(file);_file=PATH_FS.resolve(_file);function doCallback(callback){if(callback){runtimeKeepalivePop();callUserCallback(()=>{var sp=stackSave();getWasmTableEntry(callback)(stringToUTF8OnStack(_file));stackRestore(sp)})}}var destinationDirectory=PATH.dirname(_file);FS_createPreloadedFile(destinationDirectory,PATH.basename(_file),_url,true,true,()=>doCallback(onload),()=>doCallback(onerror),false,false,()=>{try{FS_unlink(_file)}catch(e){}FS_mkdirTree(destinationDirectory)})};_emscripten_async_wget.sig="vpppp";var _emscripten_async_wget_data=async function(url,userdata,onload,onerror){url>>>=0;userdata>>>=0;onload>>>=0;onerror>>>=0;runtimeKeepalivePush();try{var byteArray=await asyncLoad(UTF8ToString(url));runtimeKeepalivePop();callUserCallback(()=>{var buffer=_malloc(byteArray.length);HEAPU8.set(byteArray,buffer>>>0);getWasmTableEntry(onload)(userdata,buffer,byteArray.length);_free(buffer)})}catch(e){if(onerror){runtimeKeepalivePop();callUserCallback(()=>{getWasmTableEntry(onerror)(userdata)})}}};_emscripten_async_wget_data.sig="vpppp";var _emscripten_async_wget2=function(url,file,request,param,userdata,onload,onerror,onprogress){url>>>=0;file>>>=0;request>>>=0;param>>>=0;userdata>>>=0;onload>>>=0;onerror>>>=0;onprogress>>>=0;runtimeKeepalivePush();var _url=UTF8ToString(url);var _file=UTF8ToString(file);_file=PATH_FS.resolve(_file);var _request=UTF8ToString(request);var _param=UTF8ToString(param);var index=_file.lastIndexOf("/");var http=new XMLHttpRequest;http.open(_request,_url,true);http.responseType="arraybuffer";var handle=wget.getNextWgetRequestHandle();var destinationDirectory=PATH.dirname(_file);http.onload=e=>{runtimeKeepalivePop();if(http.status>=200&&http.status<300){try{FS.unlink(_file)}catch(e){}FS.mkdirTree(destinationDirectory);FS.createDataFile(_file.slice(0,index),_file.slice(index+1),new Uint8Array(http.response),true,true,false);if(onload){var sp=stackSave();getWasmTableEntry(onload)(handle,userdata,stringToUTF8OnStack(_file));stackRestore(sp)}}else{if(onerror)getWasmTableEntry(onerror)(handle,userdata,http.status)}delete wget.wgetRequests[handle]};http.onerror=e=>{runtimeKeepalivePop();if(onerror)getWasmTableEntry(onerror)(handle,userdata,http.status);delete wget.wgetRequests[handle]};http.onprogress=e=>{if(e.lengthComputable||e.lengthComputable===undefined&&e.total!=0){var percentComplete=e.loaded/e.total*100;if(onprogress)getWasmTableEntry(onprogress)(handle,userdata,percentComplete)}};http.onabort=e=>{runtimeKeepalivePop();delete wget.wgetRequests[handle]};if(_request=="POST"){http.setRequestHeader("Content-type","application/x-www-form-urlencoded");http.send(_param)}else{http.send(null)}wget.wgetRequests[handle]=http;return handle};_emscripten_async_wget2.sig="ipppppppp";function _emscripten_async_wget2_data(url,request,param,userdata,free,onload,onerror,onprogress){url>>>=0;request>>>=0;param>>>=0;userdata>>>=0;onload>>>=0;onerror>>>=0;onprogress>>>=0;var _url=UTF8ToString(url);var _request=UTF8ToString(request);var _param=UTF8ToString(param);var http=new XMLHttpRequest;http.open(_request,_url,true);http.responseType="arraybuffer";var handle=wget.getNextWgetRequestHandle();function onerrorjs(){if(onerror){var sp=stackSave();var statusText=0;if(http.statusText){statusText=stringToUTF8OnStack(http.statusText)}getWasmTableEntry(onerror)(handle,userdata,http.status,statusText);stackRestore(sp)}}http.onload=e=>{if(http.status>=200&&http.status<300||http.status===0&&_url.slice(0,4).toLowerCase()!="http"){var byteArray=new Uint8Array(http.response);var buffer=_malloc(byteArray.length);HEAPU8.set(byteArray,buffer>>>0);if(onload)getWasmTableEntry(onload)(handle,userdata,buffer,byteArray.length);if(free)_free(buffer)}else{onerrorjs()}delete wget.wgetRequests[handle]};http.onerror=e=>{onerrorjs();delete wget.wgetRequests[handle]};http.onprogress=e=>{if(onprogress)getWasmTableEntry(onprogress)(handle,userdata,e.loaded,e.lengthComputable||e.lengthComputable===undefined?e.total:0)};http.onabort=e=>{delete wget.wgetRequests[handle]};if(_request=="POST"){http.setRequestHeader("Content-type","application/x-www-form-urlencoded");http.send(_param)}else{http.send(null)}wget.wgetRequests[handle]=http;return handle}_emscripten_async_wget2_data.sig="ippppippp";var _emscripten_async_wget2_abort=handle=>{var http=wget.wgetRequests[handle];http?.abort()};_emscripten_async_wget2_abort.sig="vi";function ___asctime_r(tmPtr,buf){tmPtr>>>=0;buf>>>=0;var date={tm_sec:HEAP32[tmPtr>>>2>>>0],tm_min:HEAP32[tmPtr+4>>>2>>>0],tm_hour:HEAP32[tmPtr+8>>>2>>>0],tm_mday:HEAP32[tmPtr+12>>>2>>>0],tm_mon:HEAP32[tmPtr+16>>>2>>>0],tm_year:HEAP32[tmPtr+20>>>2>>>0],tm_wday:HEAP32[tmPtr+24>>>2>>>0]};var days=["Sun","Mon","Tue","Wed","Thu","Fri","Sat"];var months=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"];var s=days[date.tm_wday]+" "+months[date.tm_mon]+(date.tm_mday<10?"  ":" ")+date.tm_mday+(date.tm_hour<10?" 0":" ")+date.tm_hour+(date.tm_min<10?":0":":")+date.tm_min+(date.tm_sec<10?":0":":")+date.tm_sec+" "+(1900+date.tm_year)+"\n";stringToUTF8(s,buf,26);return buf}___asctime_r.sig="ppp";var MONTH_DAYS_REGULAR=[31,28,31,30,31,30,31,31,30,31,30,31];var MONTH_DAYS_LEAP=[31,29,31,30,31,30,31,31,30,31,30,31];var arraySum=(array,index)=>{var sum=0;for(var i=0;i<=index;sum+=array[i++]){}return sum};var addDays=(date,days)=>{var newDate=new Date(date.getTime());while(days>0){var leap=isLeapYear(newDate.getFullYear());var currentMonth=newDate.getMonth();var daysInCurrentMonth=(leap?MONTH_DAYS_LEAP:MONTH_DAYS_REGULAR)[currentMonth];if(days>daysInCurrentMonth-newDate.getDate()){days-=daysInCurrentMonth-newDate.getDate()+1;newDate.setDate(1);if(currentMonth<11){newDate.setMonth(currentMonth+1)}else{newDate.setMonth(0);newDate.setFullYear(newDate.getFullYear()+1)}}else{newDate.setDate(newDate.getDate()+days);return newDate}}return newDate};function _strptime(buf,format,tm){buf>>>=0;format>>>=0;tm>>>=0;var pattern=UTF8ToString(format);var SPECIAL_CHARS="\\!@#$^&*()+=-[]/{}|:<>?,.";for(var i=0,ii=SPECIAL_CHARS.length;i<ii;++i){pattern=pattern.replace(new RegExp("\\"+SPECIAL_CHARS[i],"g"),"\\"+SPECIAL_CHARS[i])}var EQUIVALENT_MATCHERS={A:"%a",B:"%b",c:"%a %b %d %H:%M:%S %Y",D:"%m\\/%d\\/%y",e:"%d",F:"%Y-%m-%d",h:"%b",R:"%H\\:%M",r:"%I\\:%M\\:%S\\s%p",T:"%H\\:%M\\:%S",x:"%m\\/%d\\/(?:%y|%Y)",X:"%H\\:%M\\:%S"};var DATE_PATTERNS={a:"(?:Sun(?:day)?)|(?:Mon(?:day)?)|(?:Tue(?:sday)?)|(?:Wed(?:nesday)?)|(?:Thu(?:rsday)?)|(?:Fri(?:day)?)|(?:Sat(?:urday)?)",b:"(?:Jan(?:uary)?)|(?:Feb(?:ruary)?)|(?:Mar(?:ch)?)|(?:Apr(?:il)?)|May|(?:Jun(?:e)?)|(?:Jul(?:y)?)|(?:Aug(?:ust)?)|(?:Sep(?:tember)?)|(?:Oct(?:ober)?)|(?:Nov(?:ember)?)|(?:Dec(?:ember)?)",C:"\\d\\d",d:"0[1-9]|[1-9](?!\\d)|1\\d|2\\d|30|31",H:"\\d(?!\\d)|[0,1]\\d|20|21|22|23",I:"\\d(?!\\d)|0\\d|10|11|12",j:"00[1-9]|0?[1-9](?!\\d)|0?[1-9]\\d(?!\\d)|[1,2]\\d\\d|3[0-6]\\d",m:"0[1-9]|[1-9](?!\\d)|10|11|12",M:"0\\d|\\d(?!\\d)|[1-5]\\d",n:" ",p:"AM|am|PM|pm|A\\.M\\.|a\\.m\\.|P\\.M\\.|p\\.m\\.",S:"0\\d|\\d(?!\\d)|[1-5]\\d|60",U:"0\\d|\\d(?!\\d)|[1-4]\\d|50|51|52|53",W:"0\\d|\\d(?!\\d)|[1-4]\\d|50|51|52|53",w:"[0-6]",y:"\\d\\d",Y:"\\d\\d\\d\\d",t:" ",z:"Z|(?:[\\+\\-]\\d\\d:?(?:\\d\\d)?)"};var MONTH_NUMBERS={JAN:0,FEB:1,MAR:2,APR:3,MAY:4,JUN:5,JUL:6,AUG:7,SEP:8,OCT:9,NOV:10,DEC:11};var DAY_NUMBERS_SUN_FIRST={SUN:0,MON:1,TUE:2,WED:3,THU:4,FRI:5,SAT:6};var DAY_NUMBERS_MON_FIRST={MON:0,TUE:1,WED:2,THU:3,FRI:4,SAT:5,SUN:6};var capture=[];var pattern_out=pattern.replace(/%(.)/g,(m,c)=>EQUIVALENT_MATCHERS[c]||m).replace(/%(.)/g,(_,c)=>{let pat=DATE_PATTERNS[c];if(pat){capture.push(c);return`(${pat})`}else{return c}}).replace(/\s+/g,"\\s*");var matches=new RegExp("^"+pattern_out,"i").exec(UTF8ToString(buf));function initDate(){function fixup(value,min,max){return typeof value!="number"||isNaN(value)?min:value>=min?value<=max?value:max:min}return{year:fixup(HEAP32[tm+20>>>2>>>0]+1900,1970,9999),month:fixup(HEAP32[tm+16>>>2>>>0],0,11),day:fixup(HEAP32[tm+12>>>2>>>0],1,31),hour:fixup(HEAP32[tm+8>>>2>>>0],0,23),min:fixup(HEAP32[tm+4>>>2>>>0],0,59),sec:fixup(HEAP32[tm>>>2>>>0],0,59),gmtoff:0}}if(matches){var date=initDate();var value;var getMatch=symbol=>{var pos=capture.indexOf(symbol);if(pos>=0){return matches[pos+1]}return};if(value=getMatch("S")){date.sec=Number(value)}if(value=getMatch("M")){date.min=Number(value)}if(value=getMatch("H")){date.hour=Number(value)}else if(value=getMatch("I")){var hour=Number(value);if(value=getMatch("p")){hour+=value.toUpperCase()[0]==="P"?12:0}date.hour=hour}if(value=getMatch("Y")){date.year=Number(value)}else if(value=getMatch("y")){var year=Number(value);if(value=getMatch("C")){year+=Number(value)*100}else{year+=year<69?2e3:1900}date.year=year}if(value=getMatch("m")){date.month=Number(value)-1}else if(value=getMatch("b")){date.month=MONTH_NUMBERS[value.substring(0,3).toUpperCase()]||0}if(value=getMatch("d")){date.day=Number(value)}else if(value=getMatch("j")){var day=Number(value);var leapYear=isLeapYear(date.year);for(var month=0;month<12;++month){var daysUntilMonth=arraySum(leapYear?MONTH_DAYS_LEAP:MONTH_DAYS_REGULAR,month-1);if(day<=daysUntilMonth+(leapYear?MONTH_DAYS_LEAP:MONTH_DAYS_REGULAR)[month]){date.day=day-daysUntilMonth}}}else if(value=getMatch("a")){var weekDay=value.substring(0,3).toUpperCase();if(value=getMatch("U")){var weekDayNumber=DAY_NUMBERS_SUN_FIRST[weekDay];var weekNumber=Number(value);var janFirst=new Date(date.year,0,1);var endDate;if(janFirst.getDay()===0){endDate=addDays(janFirst,weekDayNumber+7*(weekNumber-1))}else{endDate=addDays(janFirst,7-janFirst.getDay()+weekDayNumber+7*(weekNumber-1))}date.day=endDate.getDate();date.month=endDate.getMonth()}else if(value=getMatch("W")){var weekDayNumber=DAY_NUMBERS_MON_FIRST[weekDay];var weekNumber=Number(value);var janFirst=new Date(date.year,0,1);var endDate;if(janFirst.getDay()===1){endDate=addDays(janFirst,weekDayNumber+7*(weekNumber-1))}else{endDate=addDays(janFirst,7-janFirst.getDay()+1+weekDayNumber+7*(weekNumber-1))}date.day=endDate.getDate();date.month=endDate.getMonth()}}if(value=getMatch("z")){if(value.toLowerCase()==="z"){date.gmtoff=0}else{var match=value.match(/^((?:\-|\+)\d\d):?(\d\d)?/);date.gmtoff=match[1]*3600;if(match[2]){date.gmtoff+=date.gmtoff>0?match[2]*60:-match[2]*60}}}var fullDate=new Date(date.year,date.month,date.day,date.hour,date.min,date.sec,0);HEAP32[tm>>>2>>>0]=fullDate.getSeconds();HEAP32[tm+4>>>2>>>0]=fullDate.getMinutes();HEAP32[tm+8>>>2>>>0]=fullDate.getHours();HEAP32[tm+12>>>2>>>0]=fullDate.getDate();HEAP32[tm+16>>>2>>>0]=fullDate.getMonth();HEAP32[tm+20>>>2>>>0]=fullDate.getFullYear()-1900;HEAP32[tm+24>>>2>>>0]=fullDate.getDay();HEAP32[tm+28>>>2>>>0]=arraySum(isLeapYear(fullDate.getFullYear())?MONTH_DAYS_LEAP:MONTH_DAYS_REGULAR,fullDate.getMonth()-1)+fullDate.getDate()-1;HEAP32[tm+32>>>2>>>0]=0;HEAP32[tm+36>>>2>>>0]=date.gmtoff;return buf+intArrayFromString(matches[0]).length-1}return 0}_strptime.sig="pppp";function _strptime_l(buf,format,tm,locale){buf>>>=0;format>>>=0;tm>>>=0;locale>>>=0;return _strptime(buf,format,tm)}_strptime_l.sig="ppppp";function __dlsym_catchup_js(handle,symbolIndex){handle>>>=0;var lib=LDSO.loadedLibsByHandle[handle];var symDict=lib.exports;var symName=Object.keys(symDict)[symbolIndex];var sym=symDict[symName];var result=addFunction(sym,sym.sig);return result}__dlsym_catchup_js.sig="ppi";var FS_readFile=(...args)=>FS.readFile(...args);var FS_root=(...args)=>FS.root(...args);var FS_mounts=(...args)=>FS.mounts(...args);var FS_devices=(...args)=>FS.devices(...args);var FS_streams=(...args)=>FS.streams(...args);var FS_nextInode=(...args)=>FS.nextInode(...args);var FS_nameTable=(...args)=>FS.nameTable(...args);var FS_currentPath=(...args)=>FS.currentPath(...args);var FS_initialized=(...args)=>FS.initialized(...args);var FS_ignorePermissions=(...args)=>FS.ignorePermissions(...args);var FS_trackingDelegate=(...args)=>FS.trackingDelegate(...args);var FS_filesystems=(...args)=>FS.filesystems(...args);var FS_syncFSRequests=(...args)=>FS.syncFSRequests(...args);var FS_readFiles=(...args)=>FS.readFiles(...args);var FS_lookupPath=(...args)=>FS.lookupPath(...args);var FS_getPath=(...args)=>FS.getPath(...args);var FS_hashName=(...args)=>FS.hashName(...args);var FS_hashAddNode=(...args)=>FS.hashAddNode(...args);var FS_hashRemoveNode=(...args)=>FS.hashRemoveNode(...args);var FS_lookupNode=(...args)=>FS.lookupNode(...args);var FS_createNode=(...args)=>FS.createNode(...args);var FS_destroyNode=(...args)=>FS.destroyNode(...args);var FS_isRoot=(...args)=>FS.isRoot(...args);var FS_isMountpoint=(...args)=>FS.isMountpoint(...args);var FS_isFile=(...args)=>FS.isFile(...args);var FS_isDir=(...args)=>FS.isDir(...args);var FS_isLink=(...args)=>FS.isLink(...args);var FS_isChrdev=(...args)=>FS.isChrdev(...args);var FS_isBlkdev=(...args)=>FS.isBlkdev(...args);var FS_isFIFO=(...args)=>FS.isFIFO(...args);var FS_isSocket=(...args)=>FS.isSocket(...args);var FS_flagsToPermissionString=(...args)=>FS.flagsToPermissionString(...args);var FS_nodePermissions=(...args)=>FS.nodePermissions(...args);var FS_mayLookup=(...args)=>FS.mayLookup(...args);var FS_mayCreate=(...args)=>FS.mayCreate(...args);var FS_mayDelete=(...args)=>FS.mayDelete(...args);var FS_mayOpen=(...args)=>FS.mayOpen(...args);var FS_checkOpExists=(...args)=>FS.checkOpExists(...args);var FS_nextfd=(...args)=>FS.nextfd(...args);var FS_getStreamChecked=(...args)=>FS.getStreamChecked(...args);var FS_getStream=(...args)=>FS.getStream(...args);var FS_createStream=(...args)=>FS.createStream(...args);var FS_closeStream=(...args)=>FS.closeStream(...args);var FS_dupStream=(...args)=>FS.dupStream(...args);var FS_doSetAttr=(...args)=>FS.doSetAttr(...args);var FS_chrdev_stream_ops=(...args)=>FS.chrdev_stream_ops(...args);var FS_major=(...args)=>FS.major(...args);var FS_minor=(...args)=>FS.minor(...args);var FS_makedev=(...args)=>FS.makedev(...args);var FS_registerDevice=(...args)=>FS.registerDevice(...args);var FS_getDevice=(...args)=>FS.getDevice(...args);var FS_getMounts=(...args)=>FS.getMounts(...args);var FS_syncfs=(...args)=>FS.syncfs(...args);var FS_mount=(...args)=>FS.mount(...args);var FS_unmount=(...args)=>FS.unmount(...args);var FS_lookup=(...args)=>FS.lookup(...args);var FS_mknod=(...args)=>FS.mknod(...args);var FS_statfs=(...args)=>FS.statfs(...args);var FS_statfsStream=(...args)=>FS.statfsStream(...args);var FS_statfsNode=(...args)=>FS.statfsNode(...args);var FS_create=(...args)=>FS.create(...args);var FS_mkdir=(...args)=>FS.mkdir(...args);var FS_mkdev=(...args)=>FS.mkdev(...args);var FS_symlink=(...args)=>FS.symlink(...args);var FS_rename=(...args)=>FS.rename(...args);var FS_rmdir=(...args)=>FS.rmdir(...args);var FS_readdir=(...args)=>FS.readdir(...args);var FS_readlink=(...args)=>FS.readlink(...args);var FS_stat=(...args)=>FS.stat(...args);var FS_fstat=(...args)=>FS.fstat(...args);var FS_lstat=(...args)=>FS.lstat(...args);var FS_doChmod=(...args)=>FS.doChmod(...args);var FS_chmod=(...args)=>FS.chmod(...args);var FS_lchmod=(...args)=>FS.lchmod(...args);var FS_fchmod=(...args)=>FS.fchmod(...args);var FS_doChown=(...args)=>FS.doChown(...args);var FS_chown=(...args)=>FS.chown(...args);var FS_lchown=(...args)=>FS.lchown(...args);var FS_fchown=(...args)=>FS.fchown(...args);var FS_doTruncate=(...args)=>FS.doTruncate(...args);var FS_truncate=(...args)=>FS.truncate(...args);var FS_ftruncate=(...args)=>FS.ftruncate(...args);var FS_utime=(...args)=>FS.utime(...args);var FS_open=(...args)=>FS.open(...args);var FS_close=(...args)=>FS.close(...args);var FS_isClosed=(...args)=>FS.isClosed(...args);var FS_llseek=(...args)=>FS.llseek(...args);var FS_read=(...args)=>FS.read(...args);var FS_write=(...args)=>FS.write(...args);var FS_mmap=(...args)=>FS.mmap(...args);var FS_msync=(...args)=>FS.msync(...args);var FS_ioctl=(...args)=>FS.ioctl(...args);var FS_writeFile=(...args)=>FS.writeFile(...args);var FS_cwd=(...args)=>FS.cwd(...args);var FS_chdir=(...args)=>FS.chdir(...args);var FS_createDefaultDirectories=(...args)=>FS.createDefaultDirectories(...args);var FS_createDefaultDevices=(...args)=>FS.createDefaultDevices(...args);var FS_createSpecialDirectories=(...args)=>FS.createSpecialDirectories(...args);var FS_createStandardStreams=(...args)=>FS.createStandardStreams(...args);var FS_staticInit=(...args)=>FS.staticInit(...args);var FS_init=(...args)=>FS.init(...args);var FS_quit=(...args)=>FS.quit(...args);var FS_findObject=(...args)=>FS.findObject(...args);var FS_analyzePath=(...args)=>FS.analyzePath(...args);var FS_createFile=(...args)=>FS.createFile(...args);var FS_forceLoadFile=(...args)=>FS.forceLoadFile(...args);var _setNetworkCallback=(event,userData,callback)=>{function _callback(data){callUserCallback(()=>{if(event==="error"){withStackSave(()=>{var msg=stringToUTF8OnStack(data[2]);getWasmTableEntry(callback)(data[0],data[1],msg,userData)})}else{getWasmTableEntry(callback)(data,userData)}})}runtimeKeepalivePush();SOCKFS.on(event,callback?_callback:null)};function _emscripten_set_socket_error_callback(userData,callback){userData>>>=0;callback>>>=0;return _setNetworkCallback("error",userData,callback)}_emscripten_set_socket_error_callback.sig="vpp";function _emscripten_set_socket_open_callback(userData,callback){userData>>>=0;callback>>>=0;return _setNetworkCallback("open",userData,callback)}_emscripten_set_socket_open_callback.sig="vpp";function _emscripten_set_socket_listen_callback(userData,callback){userData>>>=0;callback>>>=0;return _setNetworkCallback("listen",userData,callback)}_emscripten_set_socket_listen_callback.sig="vpp";function _emscripten_set_socket_connection_callback(userData,callback){userData>>>=0;callback>>>=0;return _setNetworkCallback("connection",userData,callback)}_emscripten_set_socket_connection_callback.sig="vpp";function _emscripten_set_socket_message_callback(userData,callback){userData>>>=0;callback>>>=0;return _setNetworkCallback("message",userData,callback)}_emscripten_set_socket_message_callback.sig="vpp";function _emscripten_set_socket_close_callback(userData,callback){userData>>>=0;callback>>>=0;return _setNetworkCallback("close",userData,callback)}_emscripten_set_socket_close_callback.sig="vpp";function _emscripten_webgl_enable_ANGLE_instanced_arrays(ctx){ctx>>>=0;return webgl_enable_ANGLE_instanced_arrays(GL.contexts[ctx].GLctx)}_emscripten_webgl_enable_ANGLE_instanced_arrays.sig="ip";function _emscripten_webgl_enable_OES_vertex_array_object(ctx){ctx>>>=0;return webgl_enable_OES_vertex_array_object(GL.contexts[ctx].GLctx)}_emscripten_webgl_enable_OES_vertex_array_object.sig="ip";function _emscripten_webgl_enable_WEBGL_draw_buffers(ctx){ctx>>>=0;return webgl_enable_WEBGL_draw_buffers(GL.contexts[ctx].GLctx)}_emscripten_webgl_enable_WEBGL_draw_buffers.sig="ip";function _emscripten_webgl_enable_WEBGL_multi_draw(ctx){ctx>>>=0;return webgl_enable_WEBGL_multi_draw(GL.contexts[ctx].GLctx)}_emscripten_webgl_enable_WEBGL_multi_draw.sig="ip";function _emscripten_webgl_enable_EXT_polygon_offset_clamp(ctx){ctx>>>=0;return webgl_enable_EXT_polygon_offset_clamp(GL.contexts[ctx].GLctx)}_emscripten_webgl_enable_EXT_polygon_offset_clamp.sig="ip";function _emscripten_webgl_enable_EXT_clip_control(ctx){ctx>>>=0;return webgl_enable_EXT_clip_control(GL.contexts[ctx].GLctx)}_emscripten_webgl_enable_EXT_clip_control.sig="ip";function _emscripten_webgl_enable_WEBGL_polygon_mode(ctx){ctx>>>=0;return webgl_enable_WEBGL_polygon_mode(GL.contexts[ctx].GLctx)}_emscripten_webgl_enable_WEBGL_polygon_mode.sig="ip";function _glVertexPointer(size,type,stride,ptr){ptr>>>=0;throw"Legacy GL function (glVertexPointer) called. If you want legacy GL emulation, you need to compile with -sLEGACY_GL_EMULATION to enable legacy GL emulation."}_glVertexPointer.sig="viiip";var _glMatrixMode=()=>{throw"Legacy GL function (glMatrixMode) called. If you want legacy GL emulation, you need to compile with -sLEGACY_GL_EMULATION to enable legacy GL emulation."};_glMatrixMode.sig="vi";var _glBegin=()=>{throw"Legacy GL function (glBegin) called. If you want legacy GL emulation, you need to compile with -sLEGACY_GL_EMULATION to enable legacy GL emulation."};_glBegin.sig="vi";var _glLoadIdentity=()=>{throw"Legacy GL function (glLoadIdentity) called. If you want legacy GL emulation, you need to compile with -sLEGACY_GL_EMULATION to enable legacy GL emulation."};_glLoadIdentity.sig="v";function _glMultiDrawArraysWEBGL(mode,firsts,counts,drawcount){firsts>>>=0;counts>>>=0;GLctx.multiDrawWebgl["multiDrawArraysWEBGL"](mode,HEAP32,firsts>>>2,HEAP32,counts>>>2,drawcount)}_glMultiDrawArraysWEBGL.sig="vippi";var _glMultiDrawArrays=_glMultiDrawArraysWEBGL;_glMultiDrawArrays.sig="vippi";var _glMultiDrawArraysANGLE=_glMultiDrawArraysWEBGL;function _glMultiDrawArraysInstancedWEBGL(mode,firsts,counts,instanceCounts,drawcount){firsts>>>=0;counts>>>=0;instanceCounts>>>=0;GLctx.multiDrawWebgl["multiDrawArraysInstancedWEBGL"](mode,HEAP32,firsts>>>2,HEAP32,counts>>>2,HEAP32,instanceCounts>>>2,drawcount)}_glMultiDrawArraysInstancedWEBGL.sig="vipppi";var _glMultiDrawArraysInstancedANGLE=_glMultiDrawArraysInstancedWEBGL;function _glMultiDrawElementsWEBGL(mode,counts,type,offsets,drawcount){counts>>>=0;offsets>>>=0;GLctx.multiDrawWebgl["multiDrawElementsWEBGL"](mode,HEAP32,counts>>>2,type,HEAP32,offsets>>>2,drawcount)}_glMultiDrawElementsWEBGL.sig="vipipi";var _glMultiDrawElements=_glMultiDrawElementsWEBGL;_glMultiDrawElements.sig="vipipi";var _glMultiDrawElementsANGLE=_glMultiDrawElementsWEBGL;function _glMultiDrawElementsInstancedWEBGL(mode,counts,type,offsets,instanceCounts,drawcount){counts>>>=0;offsets>>>=0;instanceCounts>>>=0;GLctx.multiDrawWebgl["multiDrawElementsInstancedWEBGL"](mode,HEAP32,counts>>>2,type,HEAP32,offsets>>>2,HEAP32,instanceCounts>>>2,drawcount)}_glMultiDrawElementsInstancedWEBGL.sig="vipippi";var _glMultiDrawElementsInstancedANGLE=_glMultiDrawElementsInstancedWEBGL;var _glClearDepth=x0=>GLctx.clearDepth(x0);_glClearDepth.sig="vd";var _glDepthRange=(x0,x1)=>GLctx.depthRange(x0,x1);_glDepthRange.sig="vdd";var _emscripten_glVertexPointer=_glVertexPointer;_emscripten_glVertexPointer.sig="viiip";var _emscripten_glMatrixMode=_glMatrixMode;_emscripten_glMatrixMode.sig="vi";var _emscripten_glBegin=_glBegin;_emscripten_glBegin.sig="vi";var _emscripten_glLoadIdentity=_glLoadIdentity;_emscripten_glLoadIdentity.sig="v";var _emscripten_glMultiDrawArrays=_glMultiDrawArrays;_emscripten_glMultiDrawArrays.sig="vippi";var _emscripten_glMultiDrawArraysANGLE=_glMultiDrawArraysANGLE;var _emscripten_glMultiDrawArraysWEBGL=_glMultiDrawArraysWEBGL;var _emscripten_glMultiDrawArraysInstancedANGLE=_glMultiDrawArraysInstancedANGLE;var _emscripten_glMultiDrawArraysInstancedWEBGL=_glMultiDrawArraysInstancedWEBGL;var _emscripten_glMultiDrawElements=_glMultiDrawElements;_emscripten_glMultiDrawElements.sig="vipipi";var _emscripten_glMultiDrawElementsANGLE=_glMultiDrawElementsANGLE;var _emscripten_glMultiDrawElementsWEBGL=_glMultiDrawElementsWEBGL;var _emscripten_glMultiDrawElementsInstancedANGLE=_glMultiDrawElementsInstancedANGLE;var _emscripten_glMultiDrawElementsInstancedWEBGL=_glMultiDrawElementsInstancedWEBGL;var _emscripten_glClearDepth=_glClearDepth;_emscripten_glClearDepth.sig="vd";var _emscripten_glDepthRange=_glDepthRange;_emscripten_glDepthRange.sig="vdd";function _glGetBufferSubData(target,offset,size,data){offset>>>=0;size>>>=0;data>>>=0;if(!data){GL.recordError(1281);return}size&&GLctx.getBufferSubData(target,offset,HEAPU8.subarray(data>>>0,data+size>>>0))}_glGetBufferSubData.sig="vippp";var _glDrawArraysInstancedBaseInstanceWEBGL=(mode,first,count,instanceCount,baseInstance)=>{GLctx.dibvbi["drawArraysInstancedBaseInstanceWEBGL"](mode,first,count,instanceCount,baseInstance)};_glDrawArraysInstancedBaseInstanceWEBGL.sig="viiiii";var _glDrawArraysInstancedBaseInstance=_glDrawArraysInstancedBaseInstanceWEBGL;_glDrawArraysInstancedBaseInstance.sig="viiiii";var _glDrawArraysInstancedBaseInstanceANGLE=_glDrawArraysInstancedBaseInstanceWEBGL;var _glDrawElementsInstancedBaseVertexBaseInstanceWEBGL=(mode,count,type,offset,instanceCount,baseVertex,baseinstance)=>{GLctx.dibvbi["drawElementsInstancedBaseVertexBaseInstanceWEBGL"](mode,count,type,offset,instanceCount,baseVertex,baseinstance)};_glDrawElementsInstancedBaseVertexBaseInstanceWEBGL.sig="viiiiiii";var _glDrawElementsInstancedBaseVertexBaseInstanceANGLE=_glDrawElementsInstancedBaseVertexBaseInstanceWEBGL;function _emscripten_webgl_enable_WEBGL_draw_instanced_base_vertex_base_instance(ctx){ctx>>>=0;return webgl_enable_WEBGL_draw_instanced_base_vertex_base_instance(GL.contexts[ctx].GLctx)}_emscripten_webgl_enable_WEBGL_draw_instanced_base_vertex_base_instance.sig="ip";var _glMultiDrawArraysInstancedBaseInstanceWEBGL=(mode,firsts,counts,instanceCounts,baseInstances,drawCount)=>{GLctx.mdibvbi["multiDrawArraysInstancedBaseInstanceWEBGL"](mode,HEAP32,firsts>>>2,HEAP32,counts>>>2,HEAP32,instanceCounts>>>2,HEAPU32,baseInstances>>>2,drawCount)};_glMultiDrawArraysInstancedBaseInstanceWEBGL.sig="viiiiii";var _glMultiDrawArraysInstancedBaseInstanceANGLE=_glMultiDrawArraysInstancedBaseInstanceWEBGL;var _glMultiDrawElementsInstancedBaseVertexBaseInstanceWEBGL=(mode,counts,type,offsets,instanceCounts,baseVertices,baseInstances,drawCount)=>{GLctx.mdibvbi["multiDrawElementsInstancedBaseVertexBaseInstanceWEBGL"](mode,HEAP32,counts>>>2,type,HEAP32,offsets>>>2,HEAP32,instanceCounts>>>2,HEAP32,baseVertices>>>2,HEAPU32,baseInstances>>>2,drawCount)};_glMultiDrawElementsInstancedBaseVertexBaseInstanceWEBGL.sig="viiiiiiii";var _glMultiDrawElementsInstancedBaseVertexBaseInstanceANGLE=_glMultiDrawElementsInstancedBaseVertexBaseInstanceWEBGL;function _emscripten_webgl_enable_WEBGL_multi_draw_instanced_base_vertex_base_instance(ctx){ctx>>>=0;return webgl_enable_WEBGL_multi_draw_instanced_base_vertex_base_instance(GL.contexts[ctx].GLctx)}_emscripten_webgl_enable_WEBGL_multi_draw_instanced_base_vertex_base_instance.sig="ip";var _emscripten_glGetBufferSubData=_glGetBufferSubData;_emscripten_glGetBufferSubData.sig="vippp";var _emscripten_glDrawArraysInstancedBaseInstanceWEBGL=_glDrawArraysInstancedBaseInstanceWEBGL;var _emscripten_glDrawArraysInstancedBaseInstance=_glDrawArraysInstancedBaseInstance;_emscripten_glDrawArraysInstancedBaseInstance.sig="viiiii";var _emscripten_glDrawArraysInstancedBaseInstanceANGLE=_glDrawArraysInstancedBaseInstanceANGLE;var _emscripten_glDrawElementsInstancedBaseVertexBaseInstanceWEBGL=_glDrawElementsInstancedBaseVertexBaseInstanceWEBGL;var _emscripten_glDrawElementsInstancedBaseVertexBaseInstanceANGLE=_glDrawElementsInstancedBaseVertexBaseInstanceANGLE;var _emscripten_glMultiDrawArraysInstancedBaseInstanceWEBGL=_glMultiDrawArraysInstancedBaseInstanceWEBGL;var _emscripten_glMultiDrawArraysInstancedBaseInstanceANGLE=_glMultiDrawArraysInstancedBaseInstanceANGLE;var _emscripten_glMultiDrawElementsInstancedBaseVertexBaseInstanceWEBGL=_glMultiDrawElementsInstancedBaseVertexBaseInstanceWEBGL;var _emscripten_glMultiDrawElementsInstancedBaseVertexBaseInstanceANGLE=_glMultiDrawElementsInstancedBaseVertexBaseInstanceANGLE;var ALLOC_NORMAL=0;var ALLOC_STACK=1;var allocate=(slab,allocator)=>{var ret;if(allocator==ALLOC_STACK){ret=stackAlloc(slab.length)}else{ret=_malloc(slab.length)}if(!slab.subarray&&!slab.slice){slab=new Uint8Array(slab)}HEAPU8.set(slab,ret>>>0);return ret};var writeStringToMemory=(string,buffer,dontAddNull)=>{warnOnce("writeStringToMemory is deprecated and should not be called! Use stringToUTF8() instead!");var lastChar,end;if(dontAddNull){end=buffer+lengthBytesUTF8(string);lastChar=HEAP8[end>>>0]}stringToUTF8(string,buffer,Infinity);if(dontAddNull)HEAP8[end>>>0]=lastChar};var writeAsciiToMemory=(str,buffer,dontAddNull)=>{for(var i=0;i<str.length;++i){HEAP8[buffer++>>>0]=str.charCodeAt(i)}if(!dontAddNull)HEAP8[buffer>>>0]=0};var allocateUTF8=stringToNewUTF8;var allocateUTF8OnStack=stringToUTF8OnStack;var demangle=func=>{demangle.recursionGuard=(demangle.recursionGuard|0)+1;if(demangle.recursionGuard>1)return func;return withStackSave(()=>{try{var s=func;if(s.startsWith("__Z"))s=s.slice(1);var buf=stringToUTF8OnStack(s);var status=stackAlloc(4);var ret=___cxa_demangle(buf,0,0,status);if(HEAP32[status>>>2>>>0]===0&&ret){return UTF8ToString(ret)}}catch(e){}finally{_free(ret);if(demangle.recursionGuard<2)--demangle.recursionGuard}return func})};var stackTrace=()=>{var js=jsStackTrace();if(Module["extraStackTrace"])js+="\n"+Module["extraStackTrace"]();return js};var print=out;var printErr=err;var jstoi_s=Number;var _emscripten_is_main_browser_thread=()=>!ENVIRONMENT_IS_WORKER;var webSockets=new HandleAllocator;var WS={socketEvent:null,getSocket(socketId){if(!webSockets.has(socketId)){return 0}return webSockets.get(socketId)},getSocketEvent(socketId){this.socketEvent||=_malloc(520);HEAPU32[this.socketEvent>>>2>>>0]=socketId;return this.socketEvent}};function _emscripten_websocket_get_ready_state(socketId,readyState){readyState>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}HEAP16[readyState>>>1>>>0]=socket.readyState;return 0}_emscripten_websocket_get_ready_state.sig="iip";function _emscripten_websocket_get_buffered_amount(socketId,bufferedAmount){bufferedAmount>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}HEAPU32[bufferedAmount>>>2>>>0]=socket.bufferedAmount;return 0}_emscripten_websocket_get_buffered_amount.sig="iip";function _emscripten_websocket_get_extensions(socketId,extensions,extensionsLength){extensions>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}if(!extensions)return-5;stringToUTF8(socket.extensions,extensions,extensionsLength);return 0}_emscripten_websocket_get_extensions.sig="iipi";function _emscripten_websocket_get_extensions_length(socketId,extensionsLength){extensionsLength>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}if(!extensionsLength)return-5;HEAP32[extensionsLength>>>2>>>0]=lengthBytesUTF8(socket.extensions)+1;return 0}_emscripten_websocket_get_extensions_length.sig="iip";function _emscripten_websocket_get_protocol(socketId,protocol,protocolLength){protocol>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}if(!protocol)return-5;stringToUTF8(socket.protocol,protocol,protocolLength);return 0}_emscripten_websocket_get_protocol.sig="iipi";function _emscripten_websocket_get_protocol_length(socketId,protocolLength){protocolLength>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}if(!protocolLength)return-5;HEAP32[protocolLength>>>2>>>0]=lengthBytesUTF8(socket.protocol)+1;return 0}_emscripten_websocket_get_protocol_length.sig="iip";function _emscripten_websocket_get_url(socketId,url,urlLength){url>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}if(!url)return-5;stringToUTF8(socket.url,url,urlLength);return 0}_emscripten_websocket_get_url.sig="iipi";function _emscripten_websocket_get_url_length(socketId,urlLength){urlLength>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}if(!urlLength)return-5;HEAP32[urlLength>>>2>>>0]=lengthBytesUTF8(socket.url)+1;return 0}_emscripten_websocket_get_url_length.sig="iip";function _emscripten_websocket_set_onopen_callback_on_thread(socketId,userData,callbackFunc,thread){userData>>>=0;callbackFunc>>>=0;thread>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}socket.onopen=function(e){var eventPtr=WS.getSocketEvent(socketId);getWasmTableEntry(callbackFunc)(0,eventPtr,userData)};return 0}_emscripten_websocket_set_onopen_callback_on_thread.sig="iippp";function _emscripten_websocket_set_onerror_callback_on_thread(socketId,userData,callbackFunc,thread){userData>>>=0;callbackFunc>>>=0;thread>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}socket.onerror=function(e){var eventPtr=WS.getSocketEvent(socketId);getWasmTableEntry(callbackFunc)(0,eventPtr,userData)};return 0}_emscripten_websocket_set_onerror_callback_on_thread.sig="iippp";function _emscripten_websocket_set_onclose_callback_on_thread(socketId,userData,callbackFunc,thread){userData>>>=0;callbackFunc>>>=0;thread>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}socket.onclose=function(e){var eventPtr=WS.getSocketEvent(socketId);HEAP8[eventPtr+4>>>0]=e.wasClean,HEAP16[eventPtr+6>>>1>>>0]=e.code,stringToUTF8(e.reason,eventPtr+8,512);getWasmTableEntry(callbackFunc)(0,eventPtr,userData)};return 0}_emscripten_websocket_set_onclose_callback_on_thread.sig="iippp";function _emscripten_websocket_set_onmessage_callback_on_thread(socketId,userData,callbackFunc,thread){userData>>>=0;callbackFunc>>>=0;thread>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}socket.onmessage=function(e){var isText=typeof e.data=="string";if(isText){var buf=stringToNewUTF8(e.data);var len=lengthBytesUTF8(e.data)+1}else{var len=e.data.byteLength;var buf=_malloc(len);HEAP8.set(new Uint8Array(e.data),buf>>>0)}var eventPtr=WS.getSocketEvent(socketId);HEAPU32[eventPtr+4>>>2>>>0]=buf,HEAP32[eventPtr+8>>>2>>>0]=len,HEAP8[eventPtr+12>>>0]=isText,getWasmTableEntry(callbackFunc)(0,eventPtr,userData);_free(buf)};return 0}_emscripten_websocket_set_onmessage_callback_on_thread.sig="iippp";function _emscripten_websocket_new(createAttributes){createAttributes>>>=0;if(typeof WebSocket=="undefined"){return-1}if(!createAttributes){return-5}var url=UTF8ToString(HEAPU32[createAttributes>>>2>>>0]);var protocols=HEAPU32[createAttributes+4>>>2>>>0];var socket=protocols?new WebSocket(url,UTF8ToString(protocols).split(",")):new WebSocket(url);socket.binaryType="arraybuffer";var socketId=webSockets.allocate(socket);return socketId}_emscripten_websocket_new.sig="ip";function _emscripten_websocket_send_utf8_text(socketId,textData){textData>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}var str=UTF8ToString(textData);socket.send(str);return 0}_emscripten_websocket_send_utf8_text.sig="iip";function _emscripten_websocket_send_binary(socketId,binaryData,dataLength){binaryData>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}socket.send(HEAPU8.subarray(binaryData>>>0,binaryData+dataLength>>>0));return 0}_emscripten_websocket_send_binary.sig="iipi";function _emscripten_websocket_close(socketId,code,reason){reason>>>=0;var socket=WS.getSocket(socketId);if(!socket){return-3}var reasonStr=reason?UTF8ToString(reason):undefined;if(reason)socket.close(code||undefined,UTF8ToString(reason));else if(code)socket.close(code);else socket.close();return 0}_emscripten_websocket_close.sig="iiip";var _emscripten_websocket_delete=socketId=>{var socket=WS.getSocket(socketId);if(!socket){return-3}socket.onopen=socket.onerror=socket.onclose=socket.onmessage=null;webSockets.free(socketId);return 0};_emscripten_websocket_delete.sig="ii";var _emscripten_websocket_is_supported=()=>typeof WebSocket!="undefined";_emscripten_websocket_is_supported.sig="i";var _emscripten_websocket_deinitialize=()=>{for(var i in WS.sockets){var socket=WS.sockets[i];if(socket){socket.close();_emscripten_websocket_delete(i)}}WS.sockets=[]};_emscripten_websocket_deinitialize.sig="v";var writeGLArray=(arr,dst,dstLength,heapType)=>{var len=arr.length;var writeLength=dstLength<len?dstLength:len;var heap=heapType?HEAPF32:HEAP32;dst=dst>>>2;for(var i=0;i<writeLength;++i){heap[dst+i>>>0]=arr[i]}return len};var webglPowerPreferences=["default","low-power","high-performance"];function _emscripten_webgl_do_create_context(target,attributes){target>>>=0;attributes>>>=0;var attr32=attributes>>>2;var powerPreference=HEAP32[attr32+(8>>2)>>>0];var contextAttributes={alpha:!!HEAP8[attributes+0>>>0],depth:!!HEAP8[attributes+1>>>0],stencil:!!HEAP8[attributes+2>>>0],antialias:!!HEAP8[attributes+3>>>0],premultipliedAlpha:!!HEAP8[attributes+4>>>0],preserveDrawingBuffer:!!HEAP8[attributes+5>>>0],powerPreference:webglPowerPreferences[powerPreference],failIfMajorPerformanceCaveat:!!HEAP8[attributes+12>>>0],majorVersion:HEAP32[attr32+(16>>2)>>>0],minorVersion:HEAP32[attr32+(20>>2)>>>0],enableExtensionsByDefault:HEAP8[attributes+24>>>0],explicitSwapControl:HEAP8[attributes+25>>>0],proxyContextToMainThread:HEAP32[attr32+(28>>2)>>>0],renderViaOffscreenBackBuffer:HEAP8[attributes+32>>>0]};var canvas=findCanvasEventTarget(target);if(!canvas){return 0}if(contextAttributes.explicitSwapControl){return 0}var contextHandle=GL.createContext(canvas,contextAttributes);return contextHandle}_emscripten_webgl_do_create_context.sig="ppp";var _emscripten_webgl_create_context=_emscripten_webgl_do_create_context;_emscripten_webgl_create_context.sig="ppp";function _emscripten_webgl_do_get_current_context(){return GL.currentContext?GL.currentContext.handle:0}_emscripten_webgl_do_get_current_context.sig="p";var _emscripten_webgl_get_current_context=_emscripten_webgl_do_get_current_context;_emscripten_webgl_get_current_context.sig="p";var _emscripten_webgl_do_commit_frame=()=>{if(!GL.currentContext||!GL.currentContext.GLctx){return-3}if(!GL.currentContext.attributes.explicitSwapControl){return-3}return 0};_emscripten_webgl_do_commit_frame.sig="i";var _emscripten_webgl_commit_frame=_emscripten_webgl_do_commit_frame;_emscripten_webgl_commit_frame.sig="i";function _emscripten_webgl_make_context_current(contextHandle){contextHandle>>>=0;var success=GL.makeContextCurrent(contextHandle);return success?0:-5}_emscripten_webgl_make_context_current.sig="ip";function _emscripten_webgl_get_drawing_buffer_size(contextHandle,width,height){contextHandle>>>=0;width>>>=0;height>>>=0;var GLContext=GL.getContext(contextHandle);if(!GLContext||!GLContext.GLctx||!width||!height){return-5}HEAP32[width>>>2>>>0]=GLContext.GLctx.drawingBufferWidth;HEAP32[height>>>2>>>0]=GLContext.GLctx.drawingBufferHeight;return 0}_emscripten_webgl_get_drawing_buffer_size.sig="ippp";function _emscripten_webgl_get_context_attributes(c,a){c>>>=0;a>>>=0;if(!a)return-5;c=GL.contexts[c];if(!c)return-3;var t=c.GLctx;if(!t)return-3;t=t.getContextAttributes();HEAP8[a>>>0]=t.alpha;HEAP8[a+1>>>0]=t.depth;HEAP8[a+2>>>0]=t.stencil;HEAP8[a+3>>>0]=t.antialias;HEAP8[a+4>>>0]=t.premultipliedAlpha;HEAP8[a+5>>>0]=t.preserveDrawingBuffer;var power=t["powerPreference"]&&webglPowerPreferences.indexOf(t["powerPreference"]);HEAP32[a+8>>>2>>>0]=power;HEAP8[a+12>>>0]=t.failIfMajorPerformanceCaveat;HEAP32[a+16>>>2>>>0]=c.version;HEAP32[a+20>>>2>>>0]=0;HEAP8[a+24>>>0]=c.attributes.enableExtensionsByDefault;return 0}_emscripten_webgl_get_context_attributes.sig="ipp";function _emscripten_webgl_destroy_context(contextHandle){contextHandle>>>=0;if(GL.currentContext==contextHandle)GL.currentContext=0;GL.deleteContext(contextHandle)}_emscripten_webgl_destroy_context.sig="ip";function _emscripten_webgl_enable_extension(contextHandle,extension){contextHandle>>>=0;extension>>>=0;var context=GL.getContext(contextHandle);var extString=UTF8ToString(extension);if(extString.startsWith("GL_"))extString=extString.slice(3);if(extString=="ANGLE_instanced_arrays")webgl_enable_ANGLE_instanced_arrays(GLctx);if(extString=="OES_vertex_array_object")webgl_enable_OES_vertex_array_object(GLctx);if(extString=="WEBGL_draw_buffers")webgl_enable_WEBGL_draw_buffers(GLctx);if(extString=="WEBGL_draw_instanced_base_vertex_base_instance")webgl_enable_WEBGL_draw_instanced_base_vertex_base_instance(GLctx);if(extString=="WEBGL_multi_draw_instanced_base_vertex_base_instance")webgl_enable_WEBGL_multi_draw_instanced_base_vertex_base_instance(GLctx);if(extString=="WEBGL_multi_draw")webgl_enable_WEBGL_multi_draw(GLctx);if(extString=="EXT_polygon_offset_clamp")webgl_enable_EXT_polygon_offset_clamp(GLctx);if(extString=="EXT_clip_control")webgl_enable_EXT_clip_control(GLctx);if(extString=="WEBGL_polygon_mode")webgl_enable_WEBGL_polygon_mode(GLctx);var ext=context.GLctx.getExtension(extString);return!!ext}_emscripten_webgl_enable_extension.sig="ipp";var _emscripten_supports_offscreencanvas=()=>0;_emscripten_supports_offscreencanvas.sig="i";var registerWebGlEventCallback=(target,userData,useCapture,callbackfunc,eventTypeId,eventTypeString,targetThread)=>{var webGlEventHandlerFunc=(e=event)=>{if(getWasmTableEntry(callbackfunc)(eventTypeId,0,userData))e.preventDefault()};var eventHandler={target:findEventTarget(target),eventTypeString,callbackfunc,handlerFunc:webGlEventHandlerFunc,useCapture};JSEvents.registerOrRemoveHandler(eventHandler)};function _emscripten_set_webglcontextlost_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;registerWebGlEventCallback(target,userData,useCapture,callbackfunc,31,"webglcontextlost",targetThread);return 0}_emscripten_set_webglcontextlost_callback_on_thread.sig="ippipp";function _emscripten_set_webglcontextrestored_callback_on_thread(target,userData,useCapture,callbackfunc,targetThread){target>>>=0;userData>>>=0;callbackfunc>>>=0;targetThread>>>=0;registerWebGlEventCallback(target,userData,useCapture,callbackfunc,32,"webglcontextrestored",targetThread);return 0}_emscripten_set_webglcontextrestored_callback_on_thread.sig="ippipp";function _emscripten_is_webgl_context_lost(contextHandle){contextHandle>>>=0;return!GL.contexts[contextHandle]||GL.contexts[contextHandle].GLctx.isContextLost()}_emscripten_is_webgl_context_lost.sig="ip";function _emscripten_webgl_get_supported_extensions(){return stringToNewUTF8(GLctx.getSupportedExtensions().join(" "))}_emscripten_webgl_get_supported_extensions.sig="p";var _emscripten_webgl_get_program_parameter_d=(program,param)=>GLctx.getProgramParameter(GL.programs[program],param);_emscripten_webgl_get_program_parameter_d.sig="dii";function _emscripten_webgl_get_program_info_log_utf8(program){return stringToNewUTF8(GLctx.getProgramInfoLog(GL.programs[program]))}_emscripten_webgl_get_program_info_log_utf8.sig="pi";var _emscripten_webgl_get_shader_parameter_d=(shader,param)=>GLctx.getShaderParameter(GL.shaders[shader],param);_emscripten_webgl_get_shader_parameter_d.sig="dii";function _emscripten_webgl_get_shader_info_log_utf8(shader){return stringToNewUTF8(GLctx.getShaderInfoLog(GL.shaders[shader]))}_emscripten_webgl_get_shader_info_log_utf8.sig="pi";function _emscripten_webgl_get_shader_source_utf8(shader){return stringToNewUTF8(GLctx.getShaderSource(GL.shaders[shader]))}_emscripten_webgl_get_shader_source_utf8.sig="pi";var _emscripten_webgl_get_vertex_attrib_d=(index,param)=>GLctx.getVertexAttrib(index,param);_emscripten_webgl_get_vertex_attrib_d.sig="dii";var _emscripten_webgl_get_vertex_attrib_o=(index,param)=>{var obj=GLctx.getVertexAttrib(index,param);return obj?.name};_emscripten_webgl_get_vertex_attrib_o.sig="iii";function _emscripten_webgl_get_vertex_attrib_v(index,param,dst,dstLength,dstType){dst>>>=0;return writeGLArray(GLctx.getVertexAttrib(index,param),dst,dstLength,dstType)}_emscripten_webgl_get_vertex_attrib_v.sig="iiipii";var _emscripten_webgl_get_uniform_d=(program,location)=>GLctx.getUniform(GL.programs[program],webglGetUniformLocation(location));_emscripten_webgl_get_uniform_d.sig="dii";function _emscripten_webgl_get_uniform_v(program,location,dst,dstLength,dstType){dst>>>=0;return writeGLArray(GLctx.getUniform(GL.programs[program],webglGetUniformLocation(location)),dst,dstLength,dstType)}_emscripten_webgl_get_uniform_v.sig="iiipii";function _emscripten_webgl_get_parameter_v(param,dst,dstLength,dstType){dst>>>=0;return writeGLArray(GLctx.getParameter(param),dst,dstLength,dstType)}_emscripten_webgl_get_parameter_v.sig="iipii";var _emscripten_webgl_get_parameter_d=param=>GLctx.getParameter(param);_emscripten_webgl_get_parameter_d.sig="di";var _emscripten_webgl_get_parameter_o=param=>{var obj=GLctx.getParameter(param);return obj?.name};_emscripten_webgl_get_parameter_o.sig="ii";function _emscripten_webgl_get_parameter_utf8(param){return stringToNewUTF8(GLctx.getParameter(param))}_emscripten_webgl_get_parameter_utf8.sig="pi";function _emscripten_webgl_get_parameter_i64v(param,dst){dst>>>=0;return writeI53ToI64(dst,GLctx.getParameter(param))}_emscripten_webgl_get_parameter_i64v.sig="vip";var EGL={errorCode:12288,defaultDisplayInitialized:false,currentContext:0,currentReadSurface:0,currentDrawSurface:0,contextAttributes:{alpha:false,depth:false,stencil:false,antialias:false},stringCache:{},setErrorCode(code){EGL.errorCode=code},chooseConfig(display,attribList,config,config_size,numConfigs){if(display!=62e3){EGL.setErrorCode(12296);return 0}if(attribList){for(;;){var param=HEAP32[attribList>>>2>>>0];if(param==12321){var alphaSize=HEAP32[attribList+4>>>2>>>0];EGL.contextAttributes.alpha=alphaSize>0}else if(param==12325){var depthSize=HEAP32[attribList+4>>>2>>>0];EGL.contextAttributes.depth=depthSize>0}else if(param==12326){var stencilSize=HEAP32[attribList+4>>>2>>>0];EGL.contextAttributes.stencil=stencilSize>0}else if(param==12337){var samples=HEAP32[attribList+4>>>2>>>0];EGL.contextAttributes.antialias=samples>0}else if(param==12338){var samples=HEAP32[attribList+4>>>2>>>0];EGL.contextAttributes.antialias=samples==1}else if(param==12544){var requestedPriority=HEAP32[attribList+4>>>2>>>0];EGL.contextAttributes.lowLatency=requestedPriority!=12547}else if(param==12344){break}attribList+=8}}if((!config||!config_size)&&!numConfigs){EGL.setErrorCode(12300);return 0}if(numConfigs){HEAP32[numConfigs>>>2>>>0]=1}if(config&&config_size>0){HEAPU32[config>>>2>>>0]=62002}EGL.setErrorCode(12288);return 1}};function _eglGetDisplay(nativeDisplayType){nativeDisplayType>>>=0;EGL.setErrorCode(12288);if(nativeDisplayType!=0&&nativeDisplayType!=1){return 0}return 62e3}_eglGetDisplay.sig="pp";function _eglInitialize(display,majorVersion,minorVersion){display>>>=0;majorVersion>>>=0;minorVersion>>>=0;if(display!=62e3){EGL.setErrorCode(12296);return 0}if(majorVersion){HEAP32[majorVersion>>>2>>>0]=1}if(minorVersion){HEAP32[minorVersion>>>2>>>0]=4}EGL.defaultDisplayInitialized=true;EGL.setErrorCode(12288);return 1}_eglInitialize.sig="ippp";function _eglTerminate(display){display>>>=0;if(display!=62e3){EGL.setErrorCode(12296);return 0}EGL.currentContext=0;EGL.currentReadSurface=0;EGL.currentDrawSurface=0;EGL.defaultDisplayInitialized=false;EGL.setErrorCode(12288);return 1}_eglTerminate.sig="ip";function _eglGetConfigs(display,configs,config_size,numConfigs){display>>>=0;configs>>>=0;numConfigs>>>=0;return EGL.chooseConfig(display,0,configs,config_size,numConfigs)}_eglGetConfigs.sig="ippip";function _eglChooseConfig(display,attrib_list,configs,config_size,numConfigs){display>>>=0;attrib_list>>>=0;configs>>>=0;numConfigs>>>=0;return EGL.chooseConfig(display,attrib_list,configs,config_size,numConfigs)}_eglChooseConfig.sig="ipppip";function _eglGetConfigAttrib(display,config,attribute,value){display>>>=0;config>>>=0;value>>>=0;if(display!=62e3){EGL.setErrorCode(12296);return 0}if(config!=62002){EGL.setErrorCode(12293);return 0}if(!value){EGL.setErrorCode(12300);return 0}EGL.setErrorCode(12288);switch(attribute){case 12320:HEAP32[value>>>2>>>0]=EGL.contextAttributes.alpha?32:24;return 1;case 12321:HEAP32[value>>>2>>>0]=EGL.contextAttributes.alpha?8:0;return 1;case 12322:HEAP32[value>>>2>>>0]=8;return 1;case 12323:HEAP32[value>>>2>>>0]=8;return 1;case 12324:HEAP32[value>>>2>>>0]=8;return 1;case 12325:HEAP32[value>>>2>>>0]=EGL.contextAttributes.depth?24:0;return 1;case 12326:HEAP32[value>>>2>>>0]=EGL.contextAttributes.stencil?8:0;return 1;case 12327:HEAP32[value>>>2>>>0]=12344;return 1;case 12328:HEAP32[value>>>2>>>0]=62002;return 1;case 12329:HEAP32[value>>>2>>>0]=0;return 1;case 12330:HEAP32[value>>>2>>>0]=4096;return 1;case 12331:HEAP32[value>>>2>>>0]=16777216;return 1;case 12332:HEAP32[value>>>2>>>0]=4096;return 1;case 12333:HEAP32[value>>>2>>>0]=0;return 1;case 12334:HEAP32[value>>>2>>>0]=0;return 1;case 12335:HEAP32[value>>>2>>>0]=12344;return 1;case 12337:HEAP32[value>>>2>>>0]=EGL.contextAttributes.antialias?4:0;return 1;case 12338:HEAP32[value>>>2>>>0]=EGL.contextAttributes.antialias?1:0;return 1;case 12339:HEAP32[value>>>2>>>0]=4;return 1;case 12340:HEAP32[value>>>2>>>0]=12344;return 1;case 12341:case 12342:case 12343:HEAP32[value>>>2>>>0]=-1;return 1;case 12345:case 12346:HEAP32[value>>>2>>>0]=0;return 1;case 12347:HEAP32[value>>>2>>>0]=0;return 1;case 12348:HEAP32[value>>>2>>>0]=1;return 1;case 12349:case 12350:HEAP32[value>>>2>>>0]=0;return 1;case 12351:HEAP32[value>>>2>>>0]=12430;return 1;case 12352:HEAP32[value>>>2>>>0]=4;return 1;case 12354:HEAP32[value>>>2>>>0]=0;return 1;default:EGL.setErrorCode(12292);return 0}}_eglGetConfigAttrib.sig="ippip";function _eglCreateWindowSurface(display,config,win,attrib_list){display>>>=0;config>>>=0;attrib_list>>>=0;if(display!=62e3){EGL.setErrorCode(12296);return 0}if(config!=62002){EGL.setErrorCode(12293);return 0}EGL.setErrorCode(12288);return 62006}_eglCreateWindowSurface.sig="pppip";function _eglDestroySurface(display,surface){display>>>=0;surface>>>=0;if(display!=62e3){EGL.setErrorCode(12296);return 0}if(surface!=62006){EGL.setErrorCode(12301);return 1}if(EGL.currentReadSurface==surface){EGL.currentReadSurface=0}if(EGL.currentDrawSurface==surface){EGL.currentDrawSurface=0}EGL.setErrorCode(12288);return 1}_eglDestroySurface.sig="ipp";function _eglCreateContext(display,config,hmm,contextAttribs){display>>>=0;config>>>=0;hmm>>>=0;contextAttribs>>>=0;if(display!=62e3){EGL.setErrorCode(12296);return 0}var glesContextVersion=1;for(;;){var param=HEAP32[contextAttribs>>>2>>>0];if(param==12440){glesContextVersion=HEAP32[contextAttribs+4>>>2>>>0]}else if(param==12344){break}else{EGL.setErrorCode(12292);return 0}contextAttribs+=8}if(glesContextVersion<2||glesContextVersion>3){EGL.setErrorCode(12293);return 0}EGL.contextAttributes.majorVersion=glesContextVersion-1;EGL.contextAttributes.minorVersion=0;EGL.context=GL.createContext(Browser.getCanvas(),EGL.contextAttributes);if(EGL.context!=0){EGL.setErrorCode(12288);GL.makeContextCurrent(EGL.context);Browser.useWebGL=true;Browser.moduleContextCreatedCallbacks.forEach(callback=>callback());GL.makeContextCurrent(null);return 62004}else{EGL.setErrorCode(12297);return 0}}_eglCreateContext.sig="ppppp";function _eglDestroyContext(display,context){display>>>=0;context>>>=0;if(display!=62e3){EGL.setErrorCode(12296);return 0}if(context!=62004){EGL.setErrorCode(12294);return 0}GL.deleteContext(EGL.context);EGL.setErrorCode(12288);if(EGL.currentContext==context){EGL.currentContext=0}return 1}_eglDestroyContext.sig="ipp";function _eglQuerySurface(display,surface,attribute,value){display>>>=0;surface>>>=0;value>>>=0;if(display!=62e3){EGL.setErrorCode(12296);return 0}if(surface!=62006){EGL.setErrorCode(12301);return 0}if(!value){EGL.setErrorCode(12300);return 0}EGL.setErrorCode(12288);switch(attribute){case 12328:HEAP32[value>>>2>>>0]=62002;return 1;case 12376:return 1;case 12375:HEAP32[value>>>2>>>0]=Browser.getCanvas().width;return 1;case 12374:HEAP32[value>>>2>>>0]=Browser.getCanvas().height;return 1;case 12432:HEAP32[value>>>2>>>0]=-1;return 1;case 12433:HEAP32[value>>>2>>>0]=-1;return 1;case 12434:HEAP32[value>>>2>>>0]=-1;return 1;case 12422:HEAP32[value>>>2>>>0]=12420;return 1;case 12441:HEAP32[value>>>2>>>0]=12442;return 1;case 12435:HEAP32[value>>>2>>>0]=12437;return 1;case 12416:case 12417:case 12418:case 12419:return 1;default:EGL.setErrorCode(12292);return 0}}_eglQuerySurface.sig="ippip";function _eglQueryContext(display,context,attribute,value){display>>>=0;context>>>=0;value>>>=0;if(display!=62e3){EGL.setErrorCode(12296);return 0}if(context!=62004){EGL.setErrorCode(12294);return 0}if(!value){EGL.setErrorCode(12300);return 0}EGL.setErrorCode(12288);switch(attribute){case 12328:HEAP32[value>>>2>>>0]=62002;return 1;case 12439:HEAP32[value>>>2>>>0]=12448;return 1;case 12440:HEAP32[value>>>2>>>0]=EGL.contextAttributes.majorVersion+1;return 1;case 12422:HEAP32[value>>>2>>>0]=12420;return 1;default:EGL.setErrorCode(12292);return 0}}_eglQueryContext.sig="ippip";var _eglGetError=()=>EGL.errorCode;_eglGetError.sig="i";function _eglQueryString(display,name){display>>>=0;if(display!=62e3){EGL.setErrorCode(12296);return 0}EGL.setErrorCode(12288);if(EGL.stringCache[name])return EGL.stringCache[name];var ret;switch(name){case 12371:ret=stringToNewUTF8("Emscripten");break;case 12372:ret=stringToNewUTF8("1.4 Emscripten EGL");break;case 12373:ret=stringToNewUTF8("");break;case 12429:ret=stringToNewUTF8("OpenGL_ES");break;default:EGL.setErrorCode(12300);return 0}EGL.stringCache[name]=ret;return ret}_eglQueryString.sig="ppi";var _eglBindAPI=api=>{if(api==12448){EGL.setErrorCode(12288);return 1}EGL.setErrorCode(12300);return 0};_eglBindAPI.sig="ii";var _eglQueryAPI=()=>{EGL.setErrorCode(12288);return 12448};_eglQueryAPI.sig="i";var _eglWaitClient=()=>{EGL.setErrorCode(12288);return 1};_eglWaitClient.sig="i";var _eglWaitNative=nativeEngineId=>{EGL.setErrorCode(12288);return 1};_eglWaitNative.sig="ii";var _eglWaitGL=_eglWaitClient;_eglWaitGL.sig="i";function _eglSwapInterval(display,interval){display>>>=0;if(display!=62e3){EGL.setErrorCode(12296);return 0}if(interval==0)_emscripten_set_main_loop_timing(0,0);else _emscripten_set_main_loop_timing(1,interval);EGL.setErrorCode(12288);return 1}_eglSwapInterval.sig="ipi";function _eglMakeCurrent(display,draw,read,context){display>>>=0;draw>>>=0;read>>>=0;context>>>=0;if(display!=62e3){EGL.setErrorCode(12296);return 0}if(context!=0&&context!=62004){EGL.setErrorCode(12294);return 0}if(read!=0&&read!=62006||draw!=0&&draw!=62006){EGL.setErrorCode(12301);return 0}GL.makeContextCurrent(context?EGL.context:null);EGL.currentContext=context;EGL.currentDrawSurface=draw;EGL.currentReadSurface=read;EGL.setErrorCode(12288);return 1}_eglMakeCurrent.sig="ipppp";function _eglGetCurrentContext(){return EGL.currentContext}_eglGetCurrentContext.sig="p";function _eglGetCurrentSurface(readdraw){if(readdraw==12378){return EGL.currentReadSurface}else if(readdraw==12377){return EGL.currentDrawSurface}else{EGL.setErrorCode(12300);return 0}}_eglGetCurrentSurface.sig="pi";function _eglGetCurrentDisplay(){return EGL.currentContext?62e3:0}_eglGetCurrentDisplay.sig="p";function _eglSwapBuffers(dpy,surface){dpy>>>=0;surface>>>=0;if(!EGL.defaultDisplayInitialized){EGL.setErrorCode(12289)}else if(!GLctx){EGL.setErrorCode(12290)}else if(GLctx.isContextLost()){EGL.setErrorCode(12302)}else{EGL.setErrorCode(12288);return 1}return 0}_eglSwapBuffers.sig="ipp";var _eglReleaseThread=()=>{EGL.currentContext=0;EGL.currentReadSurface=0;EGL.currentDrawSurface=0;EGL.setErrorCode(12288);return 1};_eglReleaseThread.sig="i";var _SDL_GetTicks=()=>Date.now()-SDL.startTime|0;_SDL_GetTicks.sig="i";function _SDL_LockSurface(surf){surf>>>=0;var surfData=SDL.surfaces[surf];surfData.locked++;if(surfData.locked>1)return 0;if(!surfData.buffer){surfData.buffer=_malloc(surfData.width*surfData.height*4);HEAPU32[surf+20>>>2>>>0]=surfData.buffer}HEAPU32[surf+20>>>2>>>0]=surfData.buffer;if(surf==SDL.screen&&Module.screenIsReadOnly&&surfData.image)return 0;if(SDL.defaults.discardOnLock){if(!surfData.image){surfData.image=surfData.ctx.createImageData(surfData.width,surfData.height)}if(!SDL.defaults.opaqueFrontBuffer)return}else{surfData.image=surfData.ctx.getImageData(0,0,surfData.width,surfData.height)}if(surf==SDL.screen&&SDL.defaults.opaqueFrontBuffer){var data=surfData.image.data;var num=data.length;for(var i=0;i<num/4;i++){data[i*4+3]=255}}if(SDL.defaults.copyOnLock&&!SDL.defaults.discardOnLock){if(surfData.isFlagSet(2097152)){throw"CopyOnLock is not supported for SDL_LockSurface with SDL_HWPALETTE flag set"+(new Error).stack}else{HEAPU8.set(surfData.image.data,surfData.buffer>>>0)}}return 0}_SDL_LockSurface.sig="ip";var SDL={defaults:{width:320,height:200,copyOnLock:true,discardOnLock:false,opaqueFrontBuffer:true},version:null,surfaces:{},canvasPool:[],events:[],fonts:[null],audios:[null],rwops:[null],music:{audio:null,volume:1},mixerFrequency:22050,mixerFormat:32784,mixerNumChannels:2,mixerChunkSize:1024,channelMinimumNumber:0,GL:false,glAttributes:{0:3,1:3,2:2,3:0,4:0,5:1,6:16,7:0,8:0,9:0,10:0,11:0,12:0,13:0,14:0,15:1,16:0,17:0,18:0},keyboardState:null,keyboardMap:{},canRequestFullscreen:false,isRequestingFullscreen:false,textInput:false,unicode:false,ttfContext:null,audio:null,startTime:null,initFlags:0,buttonState:0,modState:0,DOMButtons:[0,0,0],DOMEventToSDLEvent:{},TOUCH_DEFAULT_ID:0,eventHandler:null,eventHandlerContext:null,eventHandlerTemp:0,keyCodes:{16:1249,17:1248,18:1250,20:1081,33:1099,34:1102,35:1101,36:1098,37:1104,38:1106,39:1103,40:1105,44:316,45:1097,46:127,91:1251,93:1125,96:1122,97:1113,98:1114,99:1115,100:1116,101:1117,102:1118,103:1119,104:1120,105:1121,106:1109,107:1111,109:1110,110:1123,111:1108,112:1082,113:1083,114:1084,115:1085,116:1086,117:1087,118:1088,119:1089,120:1090,121:1091,122:1092,123:1093,124:1128,125:1129,126:1130,127:1131,128:1132,129:1133,130:1134,131:1135,132:1136,133:1137,134:1138,135:1139,144:1107,160:94,161:33,162:34,163:35,164:36,165:37,166:38,167:95,168:40,169:41,170:42,171:43,172:124,173:45,174:123,175:125,176:126,181:127,182:129,183:128,188:44,190:46,191:47,192:96,219:91,220:92,221:93,222:39,224:1251},scanCodes:{8:42,9:43,13:40,27:41,32:44,35:204,39:53,44:54,46:55,47:56,48:39,49:30,50:31,51:32,52:33,53:34,54:35,55:36,56:37,57:38,58:203,59:51,61:46,91:47,92:49,93:48,96:52,97:4,98:5,99:6,100:7,101:8,102:9,103:10,104:11,105:12,106:13,107:14,108:15,109:16,110:17,111:18,112:19,113:20,114:21,115:22,116:23,117:24,118:25,119:26,120:27,121:28,122:29,127:76,305:224,308:226,316:70},loadRect(rect){return{x:HEAP32[rect>>>2>>>0],y:HEAP32[rect+4>>>2>>>0],w:HEAP32[rect+8>>>2>>>0],h:HEAP32[rect+12>>>2>>>0]}},updateRect(rect,r){HEAP32[rect>>>2>>>0]=r.x;HEAP32[rect+4>>>2>>>0]=r.y;HEAP32[rect+8>>>2>>>0]=r.w;HEAP32[rect+12>>>2>>>0]=r.h},intersectionOfRects(first,second){var leftX=Math.max(first.x,second.x);var leftY=Math.max(first.y,second.y);var rightX=Math.min(first.x+first.w,second.x+second.w);var rightY=Math.min(first.y+first.h,second.y+second.h);return{x:leftX,y:leftY,w:Math.max(leftX,rightX)-leftX,h:Math.max(leftY,rightY)-leftY}},checkPixelFormat(fmt){},loadColorToCSSRGB(color){var rgba=HEAP32[color>>>2>>>0];return"rgb("+(rgba&255)+","+(rgba>>8&255)+","+(rgba>>16&255)+")"},loadColorToCSSRGBA(color){var rgba=HEAP32[color>>>2>>>0];return"rgba("+(rgba&255)+","+(rgba>>8&255)+","+(rgba>>16&255)+","+(rgba>>24&255)/255+")"},translateColorToCSSRGBA:rgba=>"rgba("+(rgba&255)+","+(rgba>>8&255)+","+(rgba>>16&255)+","+(rgba>>>24)/255+")",translateRGBAToCSSRGBA:(r,g,b,a)=>"rgba("+(r&255)+","+(g&255)+","+(b&255)+","+(a&255)/255+")",translateRGBAToColor:(r,g,b,a)=>r|g<<8|b<<16|a<<24,makeSurface(width,height,flags,usePageCanvas,source,rmask,gmask,bmask,amask){var is_SDL_HWSURFACE=flags&134217729;var is_SDL_HWPALETTE=flags&2097152;var is_SDL_OPENGL=flags&67108864;var surf=_malloc(60);var pixelFormat=_malloc(44);var bpp=is_SDL_HWPALETTE?1:4;var buffer=0;if(!is_SDL_HWSURFACE&&!is_SDL_OPENGL){buffer=_malloc(width*height*4)}HEAP32[surf>>>2>>>0]=flags;HEAPU32[surf+4>>>2>>>0]=pixelFormat;HEAP32[surf+8>>>2>>>0]=width;HEAP32[surf+12>>>2>>>0]=height;HEAP32[surf+16>>>2>>>0]=width*bpp;HEAPU32[surf+20>>>2>>>0]=buffer;var canvas=Browser.getCanvas();HEAP32[surf+36>>>2>>>0]=0;HEAP32[surf+40>>>2>>>0]=0;HEAP32[surf+44>>>2>>>0]=canvas.width;HEAP32[surf+48>>>2>>>0]=canvas.height;HEAP32[surf+56>>>2>>>0]=1;HEAP32[pixelFormat>>>2>>>0]=-2042224636;HEAP32[pixelFormat+4>>>2>>>0]=0;HEAP8[pixelFormat+8>>>0]=bpp*8;HEAP8[pixelFormat+9>>>0]=bpp;HEAP32[pixelFormat+12>>>2>>>0]=rmask||255;HEAP32[pixelFormat+16>>>2>>>0]=gmask||65280;HEAP32[pixelFormat+20>>>2>>>0]=bmask||16711680;HEAP32[pixelFormat+24>>>2>>>0]=amask||4278190080;SDL.GL=SDL.GL||is_SDL_OPENGL;if(!usePageCanvas){if(SDL.canvasPool.length>0){canvas=SDL.canvasPool.pop()}else{canvas=document.createElement("canvas")}canvas.width=width;canvas.height=height}var webGLContextAttributes={antialias:SDL.glAttributes[13]!=0&&SDL.glAttributes[14]>1,depth:SDL.glAttributes[6]>0,stencil:SDL.glAttributes[7]>0,alpha:SDL.glAttributes[3]>0};var ctx=Browser.createContext(canvas,is_SDL_OPENGL,usePageCanvas,webGLContextAttributes);SDL.surfaces[surf]={width,height,canvas,ctx,surf,buffer,pixelFormat,alpha:255,flags,locked:0,usePageCanvas,source,isFlagSet:flag=>flags&flag};return surf},copyIndexedColorData(surfData,rX,rY,rW,rH){if(!surfData.colors){return}var canvas=Browser.getCanvas();var fullWidth=canvas.width;var fullHeight=canvas.height;var startX=rX||0;var startY=rY||0;var endX=(rW||fullWidth-startX)+startX;var endY=(rH||fullHeight-startY)+startY;var buffer=surfData.buffer;if(!surfData.image.data32){surfData.image.data32=new Uint32Array(surfData.image.data.buffer)}var data32=surfData.image.data32;var colors32=surfData.colors32;for(var y=startY;y<endY;++y){var base=y*fullWidth;for(var x=startX;x<endX;++x){data32[base+x]=colors32[HEAPU8[buffer+(base+x)>>>0]]}}},freeSurface(surf){var refcountPointer=surf+56;var refcount=HEAP32[refcountPointer>>>2>>>0];if(refcount>1){HEAP32[refcountPointer>>>2>>>0]=refcount-1;return}var info=SDL.surfaces[surf];if(!info.usePageCanvas&&info.canvas)SDL.canvasPool.push(info.canvas);if(info.buffer)_free(info.buffer);_free(info.pixelFormat);_free(surf);SDL.surfaces[surf]=null;if(surf===SDL.screen){SDL.screen=null}},blitSurface(src,srcrect,dst,dstrect,scale){var srcData=SDL.surfaces[src];var dstData=SDL.surfaces[dst];var sr,dr;if(srcrect){sr=SDL.loadRect(srcrect)}else{sr={x:0,y:0,w:srcData.width,h:srcData.height}}if(dstrect){dr=SDL.loadRect(dstrect)}else{dr={x:0,y:0,w:srcData.width,h:srcData.height}}if(dstData.clipRect){var widthScale=!scale||sr.w===0?1:sr.w/dr.w;var heightScale=!scale||sr.h===0?1:sr.h/dr.h;dr=SDL.intersectionOfRects(dstData.clipRect,dr);sr.w=dr.w*widthScale;sr.h=dr.h*heightScale;if(dstrect){SDL.updateRect(dstrect,dr)}}var blitw,blith;if(scale){blitw=dr.w;blith=dr.h}else{blitw=sr.w;blith=sr.h}if(sr.w===0||sr.h===0||blitw===0||blith===0){return 0}var oldAlpha=dstData.ctx.globalAlpha;dstData.ctx.globalAlpha=srcData.alpha/255;dstData.ctx.drawImage(srcData.canvas,sr.x,sr.y,sr.w,sr.h,dr.x,dr.y,blitw,blith);dstData.ctx.globalAlpha=oldAlpha;if(dst!=SDL.screen){warnOnce("WARNING: copying canvas data to memory for compatibility");_SDL_LockSurface(dst);dstData.locked--}return 0},downFingers:{},savedKeydown:null,receiveEvent(event){function unpressAllPressedKeys(){for(var keyCode of Object.values(SDL.keyboardMap)){SDL.events.push({type:"keyup",keyCode})}}switch(event.type){case"touchstart":case"touchmove":{event.preventDefault();var touches=[];if(event.type==="touchstart"){for(var touch of event.touches){if(SDL.downFingers[touch.identifier]!=true){SDL.downFingers[touch.identifier]=true;touches.push(touch)}}}else{touches=event.touches}var firstTouch=touches[0];if(firstTouch){if(event.type=="touchstart"){SDL.DOMButtons[0]=1}var mouseEventType;switch(event.type){case"touchstart":mouseEventType="mousedown";break;case"touchmove":mouseEventType="mousemove";break}var mouseEvent={type:mouseEventType,button:0,pageX:firstTouch.clientX,pageY:firstTouch.clientY};SDL.events.push(mouseEvent)}for(var touch of touches){SDL.events.push({type:event.type,touch})}break}case"touchend":{event.preventDefault();for(var touch of event.changedTouches){if(SDL.downFingers[touch.identifier]===true){delete SDL.downFingers[touch.identifier]}}var mouseEvent={type:"mouseup",button:0,pageX:event.changedTouches[0].clientX,pageY:event.changedTouches[0].clientY};SDL.DOMButtons[0]=0;SDL.events.push(mouseEvent);for(var touch of event.changedTouches){SDL.events.push({type:"touchend",touch})}break}case"DOMMouseScroll":case"mousewheel":case"wheel":var delta=-Browser.getMouseWheelDelta(event);delta=delta==0?0:delta>0?Math.max(delta,1):Math.min(delta,-1);var button=(delta>0?4:5)-1;SDL.events.push({type:"mousedown",button,pageX:event.pageX,pageY:event.pageY});SDL.events.push({type:"mouseup",button,pageX:event.pageX,pageY:event.pageY});SDL.events.push({type:"wheel",deltaX:0,deltaY:delta});event.preventDefault();break;case"mousemove":if(SDL.DOMButtons[0]===1){SDL.events.push({type:"touchmove",touch:{identifier:0,deviceID:-1,pageX:event.pageX,pageY:event.pageY}})}if(Browser.pointerLock){if("mozMovementX"in event){event["movementX"]=event["mozMovementX"];event["movementY"]=event["mozMovementY"]}if(event["movementX"]==0&&event["movementY"]==0){event.preventDefault();return}}case"keydown":case"keyup":case"keypress":case"mousedown":case"mouseup":if(event.type!=="keydown"||!SDL.unicode&&!SDL.textInput||(event.key=="Backspace"||event.key=="Tab")){event.preventDefault()}if(event.type=="mousedown"){SDL.DOMButtons[event.button]=1;SDL.events.push({type:"touchstart",touch:{identifier:0,deviceID:-1,pageX:event.pageX,pageY:event.pageY}})}else if(event.type=="mouseup"){if(!SDL.DOMButtons[event.button]){return}SDL.events.push({type:"touchend",touch:{identifier:0,deviceID:-1,pageX:event.pageX,pageY:event.pageY}});SDL.DOMButtons[event.button]=0}if(event.type==="keydown"||event.type==="mousedown"){SDL.canRequestFullscreen=true}else if(event.type==="keyup"||event.type==="mouseup"){if(SDL.isRequestingFullscreen){Module["requestFullscreen"](true,true);SDL.isRequestingFullscreen=false}SDL.canRequestFullscreen=false}if(event.type==="keypress"&&SDL.savedKeydown){SDL.savedKeydown.keypressCharCode=event.charCode;SDL.savedKeydown=null}else if(event.type==="keydown"){SDL.savedKeydown=event}if(event.type!=="keypress"||SDL.textInput){SDL.events.push(event)}break;case"mouseout":for(var i=0;i<3;i++){if(SDL.DOMButtons[i]){SDL.events.push({type:"mouseup",button:i,pageX:event.pageX,pageY:event.pageY});SDL.DOMButtons[i]=0}}event.preventDefault();break;case"focus":SDL.events.push(event);event.preventDefault();break;case"blur":SDL.events.push(event);unpressAllPressedKeys();event.preventDefault();break;case"visibilitychange":SDL.events.push({type:"visibilitychange",visible:!document.hidden});unpressAllPressedKeys();event.preventDefault();break;case"unload":if(MainLoop.runner){SDL.events.push(event);MainLoop.runner()}return;case"resize":SDL.events.push(event);if(event.preventDefault){event.preventDefault()}break}if(SDL.events.length>=1e4){err("SDL event queue full, dropping events");SDL.events=SDL.events.slice(0,1e4)}SDL.flushEventsToHandler();return},lookupKeyCodeForEvent(event){var code=event.keyCode;if(code>=65&&code<=90){code+=32}else{code=SDL.keyCodes[code]||(code<128?code:0);if(event.location===2&&code>=(224|1<<10)&&code<=(227|1<<10)){code+=4}}return code},handleEvent(event){if(event.handled)return;event.handled=true;switch(event.type){case"touchstart":case"touchend":case"touchmove":{Browser.calculateMouseEvent(event);break}case"keydown":case"keyup":{var down=event.type==="keydown";var code=SDL.lookupKeyCodeForEvent(event);if(!code)return;HEAP8[SDL.keyboardState+code>>>0]=down;SDL.modState=(HEAP8[SDL.keyboardState+1248>>>0]?64:0)|(HEAP8[SDL.keyboardState+1249>>>0]?1:0)|(HEAP8[SDL.keyboardState+1250>>>0]?256:0)|(HEAP8[SDL.keyboardState+1252>>>0]?128:0)|(HEAP8[SDL.keyboardState+1253>>>0]?2:0)|(HEAP8[SDL.keyboardState+1254>>>0]?512:0);if(down){SDL.keyboardMap[code]=event.keyCode}else{delete SDL.keyboardMap[code]}break}case"mousedown":case"mouseup":if(event.type=="mousedown"){SDL.buttonState|=1<<event.button}else if(event.type=="mouseup"){SDL.buttonState&=~(1<<event.button)}case"mousemove":{Browser.calculateMouseEvent(event);break}}},flushEventsToHandler(){if(!SDL.eventHandler)return;while(SDL.pollEvent(SDL.eventHandlerTemp)){getWasmTableEntry(SDL.eventHandler)(SDL.eventHandlerContext,SDL.eventHandlerTemp)}},pollEvent(ptr){if(SDL.initFlags&512&&SDL.joystickEventState){SDL.queryJoysticks()}if(ptr){while(SDL.events.length>0){if(SDL.makeCEvent(SDL.events.shift(),ptr)!==false)return 1}return 0}return SDL.events.length>0},makeCEvent(event,ptr){if(typeof event=="number"){_memcpy(ptr,event,28);_free(event);return}SDL.handleEvent(event);switch(event.type){case"keydown":case"keyup":{var down=event.type==="keydown";var key=SDL.lookupKeyCodeForEvent(event);if(!key)return false;var scan;if(key>=1024){scan=key-1024}else{scan=SDL.scanCodes[key]||key}HEAP32[ptr>>>2>>>0]=SDL.DOMEventToSDLEvent[event.type];HEAP8[ptr+8>>>0]=down?1:0;HEAP8[ptr+9>>>0]=0;HEAP32[ptr+12>>>2>>>0]=scan;HEAP32[ptr+16>>>2>>>0]=key;HEAP16[ptr+20>>>1>>>0]=SDL.modState;HEAP32[ptr+24>>>2>>>0]=event.keypressCharCode||key;break}case"keypress":{HEAP32[ptr>>>2>>>0]=SDL.DOMEventToSDLEvent[event.type];var cStr=intArrayFromString(String.fromCharCode(event.charCode));for(var i=0;i<cStr.length;++i){HEAP8[ptr+(8+i)>>>0]=cStr[i]}break}case"mousedown":case"mouseup":case"mousemove":{if(event.type!="mousemove"){var down=event.type==="mousedown";HEAP32[ptr>>>2>>>0]=SDL.DOMEventToSDLEvent[event.type];HEAP32[ptr+4>>>2>>>0]=0;HEAP32[ptr+8>>>2>>>0]=0;HEAP32[ptr+12>>>2>>>0]=0;HEAP8[ptr+16>>>0]=event.button+1;HEAP8[ptr+17>>>0]=down?1:0;HEAP32[ptr+20>>>2>>>0]=Browser.mouseX;HEAP32[ptr+24>>>2>>>0]=Browser.mouseY}else{HEAP32[ptr>>>2>>>0]=SDL.DOMEventToSDLEvent[event.type];HEAP32[ptr+4>>>2>>>0]=0;HEAP32[ptr+8>>>2>>>0]=0;HEAP32[ptr+12>>>2>>>0]=0;HEAP32[ptr+16>>>2>>>0]=SDL.buttonState;HEAP32[ptr+20>>>2>>>0]=Browser.mouseX;HEAP32[ptr+24>>>2>>>0]=Browser.mouseY;HEAP32[ptr+28>>>2>>>0]=Browser.mouseMovementX;HEAP32[ptr+32>>>2>>>0]=Browser.mouseMovementY}break}case"wheel":{HEAP32[ptr>>>2>>>0]=SDL.DOMEventToSDLEvent[event.type];HEAP32[ptr+16>>>2>>>0]=event.deltaX;HEAP32[ptr+20>>>2>>>0]=event.deltaY;break}case"touchstart":case"touchend":case"touchmove":{var touch=event.touch;if(!Browser.touches[touch.identifier])break;var canvas=Browser.getCanvas();var x=Browser.touches[touch.identifier].x/canvas.width;var y=Browser.touches[touch.identifier].y/canvas.height;var lx=Browser.lastTouches[touch.identifier].x/canvas.width;var ly=Browser.lastTouches[touch.identifier].y/canvas.height;var dx=x-lx;var dy=y-ly;if(touch["deviceID"]===undefined)touch.deviceID=SDL.TOUCH_DEFAULT_ID;if(dx===0&&dy===0&&event.type==="touchmove")return false;HEAP32[ptr>>>2>>>0]=SDL.DOMEventToSDLEvent[event.type];HEAP32[ptr+4>>>2>>>0]=_SDL_GetTicks();HEAP64[ptr+8>>>3>>>0]=BigInt(touch.deviceID);HEAP64[ptr+16>>>3>>>0]=BigInt(touch.identifier);HEAPF32[ptr+24>>>2>>>0]=x;HEAPF32[ptr+28>>>2>>>0]=y;HEAPF32[ptr+32>>>2>>>0]=dx;HEAPF32[ptr+36>>>2>>>0]=dy;if(touch.force!==undefined){HEAPF32[ptr+40>>>2>>>0]=touch.force}else{HEAPF32[ptr+40>>>2>>>0]=event.type=="touchend"?0:1}break}case"unload":{HEAP32[ptr>>>2>>>0]=SDL.DOMEventToSDLEvent[event.type];break}case"resize":{HEAP32[ptr>>>2>>>0]=SDL.DOMEventToSDLEvent[event.type];HEAP32[ptr+4>>>2>>>0]=event.w;HEAP32[ptr+8>>>2>>>0]=event.h;break}case"joystick_button_up":case"joystick_button_down":{var state=event.type==="joystick_button_up"?0:1;HEAP32[ptr>>>2>>>0]=SDL.DOMEventToSDLEvent[event.type];HEAP8[ptr+4>>>0]=event.index;HEAP8[ptr+5>>>0]=event.button;HEAP8[ptr+6>>>0]=state;break}case"joystick_axis_motion":{HEAP32[ptr>>>2>>>0]=SDL.DOMEventToSDLEvent[event.type];HEAP8[ptr+4>>>0]=event.index;HEAP8[ptr+5>>>0]=event.axis;HEAP32[ptr+8>>>2>>>0]=SDL.joystickAxisValueConversion(event.value);break}case"focus":{HEAP32[ptr>>>2>>>0]=SDL.DOMEventToSDLEvent[event.type];HEAP32[ptr+4>>>2>>>0]=0;HEAP8[ptr+8>>>0]=12;break}case"blur":{HEAP32[ptr>>>2>>>0]=SDL.DOMEventToSDLEvent[event.type];HEAP32[ptr+4>>>2>>>0]=0;HEAP8[ptr+8>>>0]=13;break}case"visibilitychange":{var visibilityEventID=event.visible?1:2;HEAP32[ptr>>>2>>>0]=SDL.DOMEventToSDLEvent[event.type];HEAP32[ptr+4>>>2>>>0]=0;HEAP8[ptr+8>>>0]=visibilityEventID;break}default:throw"Unhandled SDL event: "+event.type}},makeFontString(height,fontName){if(fontName.charAt(0)!="'"&&fontName.charAt(0)!='"'){fontName='"'+fontName+'"'}return height+"px "+fontName+", serif"},estimateTextWidth(fontData,text){var h=fontData.size;var fontString=SDL.makeFontString(h,fontData.name);var tempCtx=SDL.ttfContext;tempCtx.font=fontString;var ret=tempCtx.measureText(text).width|0;return ret},allocateChannels(num){if(SDL.numChannels>=num&&num!=0)return;SDL.numChannels=num;SDL.channels=[];for(var i=0;i<num;i++){SDL.channels[i]={audio:null,volume:1}}},setGetVolume(info,volume){if(!info)return 0;var ret=info.volume*128;if(volume!=-1){info.volume=Math.min(Math.max(volume,0),128)/128;if(info.audio){try{info.audio.volume=info.volume;if(info.audio.webAudioGainNode)info.audio.webAudioGainNode["gain"]["value"]=info.volume}catch(e){err(`setGetVolume failed to set audio volume: ${e}`)}}}return ret},setPannerPosition(info,x,y,z){info?.audio?.webAudioPannerNode?.["setPosition"](x,y,z)},playWebAudio(audio){if(!audio)return;if(audio.webAudioNode)return;if(!SDL.webAudioAvailable())return;try{var webAudio=audio.resource.webAudio;audio.paused=false;if(!webAudio.decodedBuffer){if(webAudio.onDecodeComplete===undefined){abort("Cannot play back audio object that was not loaded")}webAudio.onDecodeComplete.push(()=>{if(!audio.paused)SDL.playWebAudio(audio)});return}audio.webAudioNode=SDL.audioContext["createBufferSource"]();audio.webAudioNode["buffer"]=webAudio.decodedBuffer;audio.webAudioNode["loop"]=audio.loop;audio.webAudioNode["onended"]=audio["onended"];audio.webAudioPannerNode=SDL.audioContext["createPanner"]();audio.webAudioPannerNode["setPosition"](0,0,-.5);audio.webAudioPannerNode["panningModel"]="equalpower";audio.webAudioGainNode=SDL.audioContext["createGain"]();audio.webAudioGainNode["gain"]["value"]=audio.volume;audio.webAudioNode["connect"](audio.webAudioPannerNode);audio.webAudioPannerNode["connect"](audio.webAudioGainNode);audio.webAudioGainNode["connect"](SDL.audioContext["destination"]);audio.webAudioNode["start"](0,audio.currentPosition);audio.startTime=SDL.audioContext["currentTime"]-audio.currentPosition}catch(e){err(`playWebAudio failed: ${e}`)}},pauseWebAudio(audio){if(!audio)return;if(audio.webAudioNode){try{audio.currentPosition=(SDL.audioContext["currentTime"]-audio.startTime)%audio.resource.webAudio.decodedBuffer.duration;audio.webAudioNode["onended"]=undefined;audio.webAudioNode.stop(0);audio.webAudioNode=undefined}catch(e){err(`pauseWebAudio failed: ${e}`)}}audio.paused=true},openAudioContext(){if(!SDL.audioContext){if(typeof AudioContext!="undefined"){SDL.audioContext=new AudioContext}else if(typeof webkitAudioContext!="undefined"){SDL.audioContext=new webkitAudioContext}}},webAudioAvailable:()=>!!SDL.audioContext,fillWebAudioBufferFromHeap(heapPtr,sizeSamplesPerChannel,dstAudioBuffer){var audio=SDL.audio;var numChannels=audio.channels;for(var c=0;c<numChannels;++c){var channelData=dstAudioBuffer["getChannelData"](c);if(channelData.length!=sizeSamplesPerChannel){throw"Web Audio output buffer length mismatch! Destination size: "+channelData.length+" samples vs expected "+sizeSamplesPerChannel+" samples!"}if(audio.format==32784){for(var j=0;j<sizeSamplesPerChannel;++j){channelData[j]=HEAP16[heapPtr+(j*numChannels+c)*2>>>1>>>0]/32768}}else if(audio.format==8){for(var j=0;j<sizeSamplesPerChannel;++j){var v=HEAP8[heapPtr+(j*numChannels+c)>>>0];channelData[j]=(v>=0?v-128:v+128)/128}}else if(audio.format==33056){for(var j=0;j<sizeSamplesPerChannel;++j){channelData[j]=HEAPF32[heapPtr+(j*numChannels+c)*4>>>2>>>0]}}else{throw"Invalid SDL audio format "+audio.format+"!"}}},joystickEventState:1,lastJoystickState:{},joystickNamePool:{},recordJoystickState(joystick,state){var buttons=[];for(var button of state.buttons){buttons.push(SDL.getJoystickButtonState(button))}SDL.lastJoystickState[joystick]={buttons,axes:state.axes.slice(0),timestamp:state.timestamp,index:state.index,id:state.id}},getJoystickButtonState(button){if(typeof button=="object"){return button["pressed"]}return button>0},queryJoysticks(){for(var joystick in SDL.lastJoystickState){var state=SDL.getGamepad(joystick-1);var prevState=SDL.lastJoystickState[joystick];if(typeof state=="undefined")return;if(state===null)return;if(typeof state.timestamp!="number"||state.timestamp!=prevState.timestamp||!state.timestamp){var i;for(i=0;i<state.buttons.length;i++){var buttonState=SDL.getJoystickButtonState(state.buttons[i]);if(buttonState!==prevState.buttons[i]){SDL.events.push({type:buttonState?"joystick_button_down":"joystick_button_up",joystick,index:joystick-1,button:i})}}for(i=0;i<state.axes.length;i++){if(state.axes[i]!==prevState.axes[i]){SDL.events.push({type:"joystick_axis_motion",joystick,index:joystick-1,axis:i,value:state.axes[i]})}}SDL.recordJoystickState(joystick,state)}}},joystickAxisValueConversion(value){value=Math.min(1,Math.max(value,-1));return Math.ceil((value+1)*32767.5-32768)},getGamepads(){var fcn=navigator.getGamepads||navigator.webkitGamepads||navigator.mozGamepads||navigator.gamepads||navigator.webkitGetGamepads;if(fcn!==undefined){return fcn.apply(navigator)}return[]},getGamepad(deviceIndex){var gamepads=SDL.getGamepads();if(gamepads.length>deviceIndex&&deviceIndex>=0){return gamepads[deviceIndex]}return null}};function _SDL_Linked_Version(){if(SDL.version===null){SDL.version=_malloc(3);HEAP8[SDL.version>>>0]=1;HEAP8[SDL.version+1>>>0]=3;HEAP8[SDL.version+2>>>0]=0}return SDL.version}_SDL_Linked_Version.sig="p";var _SDL_Init=initFlags=>{SDL.startTime=Date.now();SDL.initFlags=initFlags;if(!Module["doNotCaptureKeyboard"]){var keyboardListeningElement=Module["keyboardListeningElement"]||document;keyboardListeningElement.addEventListener("keydown",SDL.receiveEvent);keyboardListeningElement.addEventListener("keyup",SDL.receiveEvent);keyboardListeningElement.addEventListener("keypress",SDL.receiveEvent);window.addEventListener("focus",SDL.receiveEvent);window.addEventListener("blur",SDL.receiveEvent);document.addEventListener("visibilitychange",SDL.receiveEvent)}window.addEventListener("unload",SDL.receiveEvent);SDL.keyboardState=_calloc(65536,1);SDL.DOMEventToSDLEvent["keydown"]=768;SDL.DOMEventToSDLEvent["keyup"]=769;SDL.DOMEventToSDLEvent["keypress"]=771;SDL.DOMEventToSDLEvent["mousedown"]=1025;SDL.DOMEventToSDLEvent["mouseup"]=1026;SDL.DOMEventToSDLEvent["mousemove"]=1024;SDL.DOMEventToSDLEvent["wheel"]=1027;SDL.DOMEventToSDLEvent["touchstart"]=1792;SDL.DOMEventToSDLEvent["touchend"]=1793;SDL.DOMEventToSDLEvent["touchmove"]=1794;SDL.DOMEventToSDLEvent["unload"]=256;SDL.DOMEventToSDLEvent["resize"]=28673;SDL.DOMEventToSDLEvent["visibilitychange"]=512;SDL.DOMEventToSDLEvent["focus"]=512;SDL.DOMEventToSDLEvent["blur"]=512;SDL.DOMEventToSDLEvent["joystick_axis_motion"]=1536;SDL.DOMEventToSDLEvent["joystick_button_down"]=1539;SDL.DOMEventToSDLEvent["joystick_button_up"]=1540;return 0};_SDL_Init.sig="ii";var _SDL_WasInit=flags=>{if(SDL.startTime===null){_SDL_Init(0)}return 1};_SDL_WasInit.sig="ii";function _SDL_GetVideoInfo(){var ret=_calloc(20,1);var canvas=Browser.getCanvas();HEAP32[ret+12>>>2>>>0]=canvas.width;HEAP32[ret+16>>>2>>>0]=canvas.height;return ret}_SDL_GetVideoInfo.sig="p";function _SDL_ListModes(format,flags){format>>>=0;return-1}_SDL_ListModes.sig="ppi";var _SDL_VideoModeOK=(width,height,depth,flags)=>depth;_SDL_VideoModeOK.sig="iiiii";function _SDL_VideoDriverName(buf,max_size){buf>>>=0;if(SDL.startTime===null){return 0}var driverName=[101,109,115,99,114,105,112,116,101,110,95,115,100,108,95,100,114,105,118,101,114];var index=0;var size=driverName.length;if(max_size<=size){size=max_size-1}while(index<size){var value=driverName[index];HEAP8[buf+index>>>0]=value;index++}HEAP8[buf+index>>>0]=0;return buf}_SDL_VideoDriverName.sig="ppi";var _SDL_AudioDriverName=_SDL_VideoDriverName;_SDL_AudioDriverName.sig="ppi";var _SDL_SetVideoMode=function(width,height,depth,flags){var canvas=Browser.getCanvas();["touchstart","touchend","touchmove","mousedown","mouseup","mousemove","mousewheel","wheel","mouseout","DOMMouseScroll"].forEach(e=>canvas.addEventListener(e,SDL.receiveEvent,true));if(width==0&&height==0){width=canvas.width;height=canvas.height}if(!SDL.addedResizeListener){SDL.addedResizeListener=true;Browser.resizeListeners.push((w,h)=>{if(!SDL.settingVideoMode){SDL.receiveEvent({type:"resize",w,h})}})}SDL.settingVideoMode=true;Browser.setCanvasSize(width,height);SDL.settingVideoMode=false;if(SDL.screen){SDL.freeSurface(SDL.screen);assert(!SDL.screen)}if(SDL.GL)flags=flags|67108864;SDL.screen=SDL.makeSurface(width,height,flags,true,"screen");return SDL.screen};_SDL_SetVideoMode.sig="piiii";function _SDL_GetVideoSurface(){return SDL.screen}_SDL_GetVideoSurface.sig="p";var _SDL_AudioQuit=()=>{for(var i=0;i<SDL.numChannels;++i){var chan=SDL.channels[i];if(chan.audio){chan.audio.pause();chan.audio=undefined}}var audio=SDL.music.audio;audio?.pause();SDL.music.audio=undefined};_SDL_AudioQuit.sig="v";var _SDL_VideoQuit=()=>out("SDL_VideoQuit called (and ignored)");_SDL_VideoQuit.sig="v";var _SDL_QuitSubSystem=flags=>out("SDL_QuitSubSystem called (and ignored)");_SDL_QuitSubSystem.sig="vi";var _SDL_Quit=()=>{_SDL_AudioQuit();out("SDL_Quit called (and ignored)")};_SDL_Quit.sig="v";function _SDL_UnlockSurface(surf){surf>>>=0;assert(!SDL.GL);var surfData=SDL.surfaces[surf];if(!surfData.locked||--surfData.locked>0){return}if(surfData.isFlagSet(2097152)){SDL.copyIndexedColorData(surfData)}else if(!surfData.colors){var data=surfData.image.data;var buffer=surfData.buffer;assert(buffer%4==0,"Invalid buffer offset: "+buffer);var src=buffer>>>2;var dst=0;var isScreen=surf==SDL.screen;var num;if(typeof CanvasPixelArray!="undefined"&&data instanceof CanvasPixelArray){num=data.length;while(dst<num){var val=HEAP32[src>>>0];data[dst]=val&255;data[dst+1]=val>>8&255;data[dst+2]=val>>16&255;data[dst+3]=isScreen?255:val>>24&255;src++;dst+=4}}else{var data32=new Uint32Array(data.buffer);if(isScreen&&SDL.defaults.opaqueFrontBuffer){num=data32.length;data32.set(HEAP32.subarray(src>>>0,src+num>>>0));var data8=new Uint8Array(data.buffer);var i=3;var j=i+4*num;if(num%8==0){while(i<j){data8[i]=255;i=i+4|0;data8[i]=255;i=i+4|0;data8[i]=255;i=i+4|0;data8[i]=255;i=i+4|0;data8[i]=255;i=i+4|0;data8[i]=255;i=i+4|0;data8[i]=255;i=i+4|0;data8[i]=255;i=i+4|0}}else{while(i<j){data8[i]=255;i=i+4|0}}}else{data32.set(HEAP32.subarray(src>>>0,src+data32.length>>>0))}}}else{var canvas=Browser.getCanvas();var width=canvas.width;var height=canvas.height;var s=surfData.buffer;var data=surfData.image.data;var colors=surfData.colors;for(var y=0;y<height;y++){var base=y*width*4;for(var x=0;x<width;x++){var val=HEAPU8[s++>>>0]*4;var start=base+x*4;data[start]=colors[val];data[start+1]=colors[val+1];data[start+2]=colors[val+2]}s+=width*3}}surfData.ctx.putImageData(surfData.image,0,0)}_SDL_UnlockSurface.sig="vp";function _SDL_Flip(surf){surf>>>=0}_SDL_Flip.sig="ip";function _SDL_UpdateRect(surf,x,y,w,h){surf>>>=0}_SDL_UpdateRect.sig="vpiiii";function _SDL_UpdateRects(surf,numrects,rects){surf>>>=0;rects>>>=0}_SDL_UpdateRects.sig="vpip";var _SDL_Delay=delay=>{if(!ENVIRONMENT_IS_WORKER)abort("SDL_Delay called on the main thread! Potential infinite loop, quitting. (consider building with async support like ASYNCIFY)");var now=Date.now();while(Date.now()-now<delay){}};_SDL_Delay.sig="vi";function _SDL_WM_SetCaption(title,icon){title>>>=0;icon>>>=0;if(title){_emscripten_set_window_title(title)}icon&&=UTF8ToString(icon)}_SDL_WM_SetCaption.sig="vpp";var _SDL_EnableKeyRepeat=(delay,interval)=>{};_SDL_EnableKeyRepeat.sig="iii";function _SDL_GetKeyboardState(numKeys){numKeys>>>=0;if(numKeys){HEAP32[numKeys>>>2>>>0]=65536}return SDL.keyboardState}_SDL_GetKeyboardState.sig="pp";var _SDL_GetKeyState=()=>_SDL_GetKeyboardState(0);function _SDL_GetKeyName(key){var name="";if(key>=97&&key<=122||key>=48&&key<=57){name=String.fromCharCode(key)}var size=lengthBytesUTF8(name)+1;SDL.keyName=_realloc(SDL.keyName,size);stringToUTF8(name,SDL.keyName,size);return SDL.keyName}_SDL_GetKeyName.sig="pi";var _SDL_GetModState=()=>SDL.modState;_SDL_GetModState.sig="i";function _SDL_GetMouseState(x,y){x>>>=0;y>>>=0;if(x)HEAP32[x>>>2>>>0]=Browser.mouseX;if(y)HEAP32[y>>>2>>>0]=Browser.mouseY;return SDL.buttonState}_SDL_GetMouseState.sig="ipp";var _SDL_WarpMouse=(x,y)=>{};_SDL_WarpMouse.sig="vii";var _SDL_ShowCursor=toggle=>{switch(toggle){case 0:if(Browser.isFullscreen){Browser.getCanvas().requestPointerLock();return 0}return 1;case 1:Browser.getCanvas().exitPointerLock();return 1;case-1:return!Browser.pointerLock;default:err(`SDL_ShowCursor called with unknown toggle parameter value: ${toggle}`);break}};_SDL_ShowCursor.sig="ii";function _SDL_GetError(){SDL.errorMessage||=stringToNewUTF8("unknown SDL-emscripten error");return SDL.errorMessage}_SDL_GetError.sig="p";function _SDL_SetError(fmt,varargs){fmt>>>=0;varargs>>>=0}_SDL_SetError.sig="vpp";function _SDL_CreateRGBSurface(flags,width,height,depth,rmask,gmask,bmask,amask){return SDL.makeSurface(width,height,flags,false,"CreateRGBSurface",rmask,gmask,bmask,amask)}_SDL_CreateRGBSurface.sig="piiiiiiii";function _SDL_CreateRGBSurfaceFrom(pixels,width,height,depth,pitch,rmask,gmask,bmask,amask){pixels>>>=0;var surf=SDL.makeSurface(width,height,0,false,"CreateRGBSurfaceFrom",rmask,gmask,bmask,amask);if(depth!==32){err("TODO: Partially unimplemented SDL_CreateRGBSurfaceFrom called!");return surf}var data=SDL.surfaces[surf];var image=data.ctx.createImageData(width,height);var pitchOfDst=width*4;for(var row=0;row<height;++row){var baseOfSrc=row*pitch;var baseOfDst=row*pitchOfDst;for(var col=0;col<width*4;++col){image.data[baseOfDst+col]=HEAPU8[pixels+(baseOfDst+col)>>>0]}}data.ctx.putImageData(image,0,0);return surf}_SDL_CreateRGBSurfaceFrom.sig="ppiiiiiiii";function _SDL_ConvertSurface(surf,format,flags){surf>>>=0;format>>>=0;if(format){SDL.checkPixelFormat(format)}var oldData=SDL.surfaces[surf];var ret=SDL.makeSurface(oldData.width,oldData.height,oldData.flags,false,"copy:"+oldData.source);var newData=SDL.surfaces[ret];newData.ctx.globalCompositeOperation="copy";newData.ctx.drawImage(oldData.canvas,0,0);newData.ctx.globalCompositeOperation=oldData.ctx.globalCompositeOperation;return ret}_SDL_ConvertSurface.sig="pppi";function _SDL_DisplayFormat(surf){surf>>>=0;return _SDL_ConvertSurface(surf,0,0)}_SDL_DisplayFormat.sig="pp";function _SDL_DisplayFormatAlpha(surf){surf>>>=0;return _SDL_ConvertSurface(surf,0,0)}_SDL_DisplayFormatAlpha.sig="pp";function _SDL_FreeSurface(surf){surf>>>=0;if(surf)SDL.freeSurface(surf)}_SDL_FreeSurface.sig="vp";function _SDL_UpperBlit(src,srcrect,dst,dstrect){src>>>=0;srcrect>>>=0;dst>>>=0;dstrect>>>=0;return SDL.blitSurface(src,srcrect,dst,dstrect,false)}_SDL_UpperBlit.sig="ipppp";function _SDL_UpperBlitScaled(src,srcrect,dst,dstrect){src>>>=0;srcrect>>>=0;dst>>>=0;dstrect>>>=0;return SDL.blitSurface(src,srcrect,dst,dstrect,true)}_SDL_UpperBlitScaled.sig="ipppp";var _SDL_LowerBlit=_SDL_UpperBlit;_SDL_LowerBlit.sig="ipppp";var _SDL_LowerBlitScaled=_SDL_UpperBlitScaled;_SDL_LowerBlitScaled.sig="ipppp";function _SDL_GetClipRect(surf,rect){surf>>>=0;rect>>>=0;assert(rect);var surfData=SDL.surfaces[surf];var r=surfData.clipRect||{x:0,y:0,w:surfData.width,h:surfData.height};SDL.updateRect(rect,r)}_SDL_GetClipRect.sig="vpp";function _SDL_SetClipRect(surf,rect){surf>>>=0;rect>>>=0;var surfData=SDL.surfaces[surf];if(rect){surfData.clipRect=SDL.intersectionOfRects({x:0,y:0,w:surfData.width,h:surfData.height},SDL.loadRect(rect))}else{delete surfData.clipRect}}_SDL_SetClipRect.sig="ipp";function _SDL_FillRect(surf,rect,color){surf>>>=0;rect>>>=0;var surfData=SDL.surfaces[surf];assert(!surfData.locked);if(surfData.isFlagSet(2097152)){color=surfData.colors32[color]}var r=rect?SDL.loadRect(rect):{x:0,y:0,w:surfData.width,h:surfData.height};if(surfData.clipRect){r=SDL.intersectionOfRects(surfData.clipRect,r);if(rect){SDL.updateRect(rect,r)}}surfData.ctx.save();surfData.ctx.fillStyle=SDL.translateColorToCSSRGBA(color);surfData.ctx.fillRect(r.x,r.y,r.w,r.h);surfData.ctx.restore();return 0}_SDL_FillRect.sig="ippi";function _zoomSurface(src,x,y,smooth){src>>>=0;var srcData=SDL.surfaces[src];var w=srcData.width*x;var h=srcData.height*y;var ret=SDL.makeSurface(Math.abs(w),Math.abs(h),srcData.flags,false,"zoomSurface");var dstData=SDL.surfaces[ret];if(x>=0&&y>=0){dstData.ctx.drawImage(srcData.canvas,0,0,w,h)}else{dstData.ctx.save();dstData.ctx.scale(x<0?-1:1,y<0?-1:1);dstData.ctx.drawImage(srcData.canvas,w<0?w:0,h<0?h:0,Math.abs(w),Math.abs(h));dstData.ctx.restore()}return ret}_zoomSurface.sig="ppddi";function _rotozoomSurface(src,angle,zoom,smooth){src>>>=0;if(angle%360===0){return _zoomSurface(src,zoom,zoom,smooth)}var srcData=SDL.surfaces[src];var w=srcData.width*zoom;var h=srcData.height*zoom;var diagonal=Math.ceil(Math.sqrt(Math.pow(w,2)+Math.pow(h,2)));var ret=SDL.makeSurface(diagonal,diagonal,srcData.flags,false,"rotozoomSurface");var dstData=SDL.surfaces[ret];dstData.ctx.translate(diagonal/2,diagonal/2);dstData.ctx.rotate(-angle*Math.PI/180);dstData.ctx.drawImage(srcData.canvas,-w/2,-h/2,w,h);return ret}_rotozoomSurface.sig="ppddi";function _SDL_SetAlpha(surf,flag,alpha){surf>>>=0;var surfData=SDL.surfaces[surf];surfData.alpha=alpha;if(!(flag&65536)){surfData.alpha=255}}_SDL_SetAlpha.sig="ipii";function _SDL_SetColorKey(surf,flag,key){surf>>>=0;warnOnce("SDL_SetColorKey is a no-op for performance reasons");return 0}_SDL_SetColorKey.sig="ipii";function _SDL_PollEvent(ptr){ptr>>>=0;return SDL.pollEvent(ptr)}_SDL_PollEvent.sig="ip";function _SDL_PushEvent(ptr){ptr>>>=0;var copy=_malloc(28);_memcpy(copy,ptr,28);SDL.events.push(copy);return 0}_SDL_PushEvent.sig="ip";function _SDL_PeepEvents(events,requestedEventCount,action,from,to){events>>>=0;switch(action){case 2:{assert(requestedEventCount==1);var index=0;var retrievedEventCount=0;while(index<SDL.events.length&&retrievedEventCount<requestedEventCount){var event=SDL.events[index];var type=SDL.DOMEventToSDLEvent[event.type];if(from<=type&&type<=to){if(SDL.makeCEvent(event,events)===false){index++}else{SDL.events.splice(index,1);retrievedEventCount++}}else{index++}}return retrievedEventCount}default:throw"SDL_PeepEvents does not yet support that action: "+action}}_SDL_PeepEvents.sig="ipiiii";var _SDL_PumpEvents=()=>SDL.events.forEach(SDL.handleEvent);_SDL_PumpEvents.sig="v";function _emscripten_SDL_SetEventHandler(handler,userdata){handler>>>=0;userdata>>>=0;SDL.eventHandler=handler;SDL.eventHandlerContext=userdata;SDL.eventHandlerTemp||=_malloc(28)}_emscripten_SDL_SetEventHandler.sig="vpp";function _SDL_SetColors(surf,colors,firstColor,nColors){surf>>>=0;colors>>>=0;var surfData=SDL.surfaces[surf];if(!surfData.colors){var buffer=new ArrayBuffer(256*4);surfData.colors=new Uint8Array(buffer);surfData.colors32=new Uint32Array(buffer)}for(var i=0;i<nColors;++i){var index=(firstColor+i)*4;surfData.colors[index]=HEAPU8[colors+i*4>>>0];surfData.colors[index+1]=HEAPU8[colors+(i*4+1)>>>0];surfData.colors[index+2]=HEAPU8[colors+(i*4+2)>>>0];surfData.colors[index+3]=255}return 1}_SDL_SetColors.sig="ippii";function _SDL_SetPalette(surf,flags,colors,firstColor,nColors){surf>>>=0;colors>>>=0;return _SDL_SetColors(surf,colors,firstColor,nColors)}_SDL_SetPalette.sig="ipipii";function _SDL_MapRGB(fmt,r,g,b){fmt>>>=0;SDL.checkPixelFormat(fmt);return r&255|(g&255)<<8|(b&255)<<16|4278190080}_SDL_MapRGB.sig="ipiii";function _SDL_MapRGBA(fmt,r,g,b,a){fmt>>>=0;SDL.checkPixelFormat(fmt);return r&255|(g&255)<<8|(b&255)<<16|(a&255)<<24}_SDL_MapRGBA.sig="ipiiii";function _SDL_GetRGB(pixel,fmt,r,g,b){fmt>>>=0;r>>>=0;g>>>=0;b>>>=0;SDL.checkPixelFormat(fmt);if(r){HEAP8[r>>>0]=pixel&255}if(g){HEAP8[g>>>0]=pixel>>8&255}if(b){HEAP8[b>>>0]=pixel>>16&255}}_SDL_GetRGB.sig="vipppp";function _SDL_GetRGBA(pixel,fmt,r,g,b,a){fmt>>>=0;r>>>=0;g>>>=0;b>>>=0;a>>>=0;SDL.checkPixelFormat(fmt);if(r){HEAP8[r>>>0]=pixel&255}if(g){HEAP8[g>>>0]=pixel>>8&255}if(b){HEAP8[b>>>0]=pixel>>16&255}if(a){HEAP8[a>>>0]=pixel>>24&255}}_SDL_GetRGBA.sig="vippppp";var _SDL_GetAppState=()=>{var state=0;if(Browser.pointerLock){state|=1}if(document.hasFocus()){state|=2}state|=4;return state};_SDL_GetAppState.sig="i";var _SDL_WM_GrabInput=()=>{};_SDL_WM_GrabInput.sig="ii";function _SDL_WM_ToggleFullScreen(surf){surf>>>=0;if(Browser.exitFullscreen()){return 1}if(!SDL.canRequestFullscreen){return 0}SDL.isRequestingFullscreen=true;return 1}_SDL_WM_ToggleFullScreen.sig="ip";var _IMG_Init=flags=>flags;_IMG_Init.sig="ii";function _SDL_FreeRW(rwopsID){rwopsID>>>=0;SDL.rwops[rwopsID]=null;while(SDL.rwops.length>0&&SDL.rwops[SDL.rwops.length-1]===null){SDL.rwops.pop()}}_SDL_FreeRW.sig="vp";var _IMG_Load_RW=function(rwopsID,freeSrc){rwopsID>>>=0;var sp=stackSave();try{var cleanup=()=>{stackRestore(sp);if(rwops&&freeSrc)_SDL_FreeRW(rwopsID)};var addCleanup=func=>{var old=cleanup;cleanup=()=>{old();func()}};var callStbImage=(func,params)=>{var x=stackAlloc(4);var y=stackAlloc(4);var comp=stackAlloc(4);var data=Module["_"+func](...params,x,y,comp,0);if(!data)return null;addCleanup(()=>Module["_stbi_image_free"](data));return{rawData:true,data,width:HEAP32[x>>>2>>>0],height:HEAP32[y>>>2>>>0],size:HEAP32[x>>>2>>>0]*HEAP32[y>>>2>>>0]*HEAP32[comp>>>2>>>0],bpp:HEAP32[comp>>>2>>>0]}};var rwops=SDL.rwops[rwopsID];if(rwops===undefined){return 0}var raw;var filename=rwops.filename;if(filename===undefined){warnOnce("Only file names that have been preloaded are supported for IMG_Load_RW. Consider using STB_IMAGE=1 if you want synchronous image decoding (see settings.js), or package files with --use-preload-plugins");return 0}if(!raw){filename=PATH_FS.resolve(filename);raw=Browser.preloadedImages[filename];if(!raw){if(raw===null)err("Trying to reuse preloaded image, but freePreloadedMediaOnUse is set!");warnOnce("Cannot find preloaded image "+filename);warnOnce("Cannot find preloaded image "+filename+". Consider using STB_IMAGE=1 if you want synchronous image decoding (see settings.js), or package files with --use-preload-plugins");return 0}else if(Module["freePreloadedMediaOnUse"]){Browser.preloadedImages[filename]=null}}var surf=SDL.makeSurface(raw.width,raw.height,0,false,"load:"+filename);var surfData=SDL.surfaces[surf];surfData.ctx.globalCompositeOperation="copy";if(!raw.rawData){surfData.ctx.drawImage(raw,0,0,raw.width,raw.height,0,0,raw.width,raw.height)}else{var imageData=surfData.ctx.getImageData(0,0,surfData.width,surfData.height);if(raw.bpp==4){imageData.data.set(HEAPU8.subarray(raw.data>>>0,raw.data+raw.size>>>0))}else if(raw.bpp==3){var pixels=raw.size/3;var data=imageData.data;var sourcePtr=raw.data;var destPtr=0;for(var i=0;i<pixels;i++){data[destPtr++]=HEAPU8[sourcePtr++>>>0];data[destPtr++]=HEAPU8[sourcePtr++>>>0];data[destPtr++]=HEAPU8[sourcePtr++>>>0];data[destPtr++]=255}}else if(raw.bpp==2){var pixels=raw.size;var data=imageData.data;var sourcePtr=raw.data;var destPtr=0;for(var i=0;i<pixels;i++){var gray=HEAPU8[sourcePtr++>>>0];var alpha=HEAPU8[sourcePtr++>>>0];data[destPtr++]=gray;data[destPtr++]=gray;data[destPtr++]=gray;data[destPtr++]=alpha}}else if(raw.bpp==1){var pixels=raw.size;var data=imageData.data;var sourcePtr=raw.data;var destPtr=0;for(var i=0;i<pixels;i++){var value=HEAPU8[sourcePtr++>>>0];data[destPtr++]=value;data[destPtr++]=value;data[destPtr++]=value;data[destPtr++]=255}}else{err(`cannot handle bpp ${raw.bpp}`);return 0}surfData.ctx.putImageData(imageData,0,0)}surfData.ctx.globalCompositeOperation="source-over";_SDL_LockSurface(surf);surfData.locked--;if(SDL.GL){surfData.canvas=surfData.ctx=null}return surf}finally{cleanup()}};_IMG_Load_RW.sig="ppi";var _SDL_LoadBMP_RW=_IMG_Load_RW;_SDL_LoadBMP_RW.sig="ppi";function _SDL_RWFromFile(_name,mode){_name>>>=0;mode>>>=0;var id=SDL.rwops.length;var filename=UTF8ToString(_name);SDL.rwops.push({filename,mimetype:Browser.getMimetype(filename)});return id}_SDL_RWFromFile.sig="ppp";function _IMG_Load(filename){filename>>>=0;var rwops=_SDL_RWFromFile(filename,0);var result=_IMG_Load_RW(rwops,1);return result}_IMG_Load.sig="pp";var _IMG_Quit=()=>out("IMG_Quit called (and ignored)");_IMG_Quit.sig="v";function _SDL_OpenAudio(desired,obtained){desired>>>=0;obtained>>>=0;try{SDL.audio={freq:HEAPU32[desired>>>2>>>0],format:HEAPU16[desired+4>>>1>>>0],channels:HEAPU8[desired+6>>>0],samples:HEAPU16[desired+8>>>1>>>0],callback:HEAPU32[desired+16>>>2>>>0],userdata:HEAPU32[desired+20>>>2>>>0],paused:true,timer:null};if(SDL.audio.format==8){SDL.audio.silence=128}else if(SDL.audio.format==32784){SDL.audio.silence=0}else if(SDL.audio.format==33056){SDL.audio.silence=0}else{throw"Invalid SDL audio format "+SDL.audio.format+"!"}if(SDL.audio.freq<=0){throw"Unsupported sound frequency "+SDL.audio.freq+"!"}else if(SDL.audio.freq<=22050){SDL.audio.freq=22050}else if(SDL.audio.freq<=32e3){SDL.audio.freq=32e3}else if(SDL.audio.freq<=44100){SDL.audio.freq=44100}else if(SDL.audio.freq<=48e3){SDL.audio.freq=48e3}else if(SDL.audio.freq<=96e3){SDL.audio.freq=96e3}else{throw`Unsupported sound frequency ${SDL.audio.freq}!`}if(SDL.audio.channels==0){SDL.audio.channels=1}else if(SDL.audio.channels<0||SDL.audio.channels>32){throw`Unsupported number of audio channels for SDL audio: ${SDL.audio.channels}!`}else if(SDL.audio.channels!=1&&SDL.audio.channels!=2){out(`Warning: Using untested number of audio channels ${SDL.audio.channels}`)}if(SDL.audio.samples<128||SDL.audio.samples>524288){throw`Unsupported audio callback buffer size ${SDL.audio.samples}!`}else if((SDL.audio.samples&SDL.audio.samples-1)!=0){throw`Audio callback buffer size ${SDL.audio.samples} must be a power-of-two!`}var totalSamples=SDL.audio.samples*SDL.audio.channels;if(SDL.audio.format==8){SDL.audio.bytesPerSample=1}else if(SDL.audio.format==32784){SDL.audio.bytesPerSample=2}else if(SDL.audio.format==33056){SDL.audio.bytesPerSample=4}else{throw`Invalid SDL audio format ${SDL.audio.format}!`}SDL.audio.bufferSize=totalSamples*SDL.audio.bytesPerSample;SDL.audio.bufferDurationSecs=SDL.audio.bufferSize/SDL.audio.bytesPerSample/SDL.audio.channels/SDL.audio.freq;SDL.audio.bufferingDelay=50/1e3;SDL.audio.buffer=_malloc(SDL.audio.bufferSize);SDL.audio.numSimultaneouslyQueuedBuffers=Module["SDL_numSimultaneouslyQueuedBuffers"]||5;SDL.audio.queueNewAudioData=()=>{if(!SDL.audio)return;for(var i=0;i<SDL.audio.numSimultaneouslyQueuedBuffers;++i){var secsUntilNextPlayStart=SDL.audio.nextPlayTime-SDL.audioContext["currentTime"];if(secsUntilNextPlayStart>=SDL.audio.bufferingDelay+SDL.audio.bufferDurationSecs*SDL.audio.numSimultaneouslyQueuedBuffers)return;getWasmTableEntry(SDL.audio.callback)(SDL.audio.userdata,SDL.audio.buffer,SDL.audio.bufferSize);SDL.audio.pushAudio(SDL.audio.buffer,SDL.audio.bufferSize)}};SDL.audio.caller=()=>{if(!SDL.audio)return;--SDL.audio.numAudioTimersPending;SDL.audio.queueNewAudioData();var secsUntilNextPlayStart=SDL.audio.nextPlayTime-SDL.audioContext["currentTime"];var preemptBufferFeedSecs=SDL.audio.bufferDurationSecs/2;if(SDL.audio.numAudioTimersPending<SDL.audio.numSimultaneouslyQueuedBuffers){++SDL.audio.numAudioTimersPending;SDL.audio.timer=safeSetTimeout(SDL.audio.caller,Math.max(0,1e3*(secsUntilNextPlayStart-preemptBufferFeedSecs)));if(SDL.audio.numAudioTimersPending<SDL.audio.numSimultaneouslyQueuedBuffers){++SDL.audio.numAudioTimersPending;safeSetTimeout(SDL.audio.caller,1)}}};SDL.audio.audioOutput=new Audio;SDL.openAudioContext();if(!SDL.audioContext)throw"Web Audio API is not available!";autoResumeAudioContext(SDL.audioContext);SDL.audio.nextPlayTime=0;SDL.audio.pushAudio=(ptr,sizeBytes)=>{try{if(SDL.audio.paused)return;var sizeSamples=sizeBytes/SDL.audio.bytesPerSample;var sizeSamplesPerChannel=sizeSamples/SDL.audio.channels;if(sizeSamplesPerChannel!=SDL.audio.samples){throw"Received mismatching audio buffer size!"}var source=SDL.audioContext["createBufferSource"]();var soundBuffer=SDL.audioContext["createBuffer"](SDL.audio.channels,sizeSamplesPerChannel,SDL.audio.freq);source["connect"](SDL.audioContext["destination"]);SDL.fillWebAudioBufferFromHeap(ptr,sizeSamplesPerChannel,soundBuffer);source["buffer"]=soundBuffer;var curtime=SDL.audioContext["currentTime"];var playtime=Math.max(curtime+SDL.audio.bufferingDelay,SDL.audio.nextPlayTime);if(typeof source["start"]!="undefined"){source["start"](playtime)}else if(typeof source["noteOn"]!="undefined"){source["noteOn"](playtime)}SDL.audio.nextPlayTime=playtime+SDL.audio.bufferDurationSecs}catch(e){err(`Web Audio API error playing back audio: ${e.toString()}`)}};if(obtained){HEAP32[obtained>>>2>>>0]=SDL.audio.freq;HEAP16[obtained+4>>>1>>>0]=SDL.audio.format;HEAP8[obtained+6>>>0]=SDL.audio.channels;HEAP8[obtained+7>>>0]=SDL.audio.silence;HEAP16[obtained+8>>>1>>>0]=SDL.audio.samples;HEAPU32[obtained+16>>>2>>>0]=SDL.audio.callback;HEAPU32[obtained+20>>>2>>>0]=SDL.audio.userdata}SDL.allocateChannels(32)}catch(e){err(`Initializing SDL audio threw an exception: "${e.toString()}"! Continuing without audio`);SDL.audio=null;SDL.allocateChannels(0);if(obtained){HEAP32[obtained>>>2>>>0]=0;HEAP16[obtained+4>>>1>>>0]=0;HEAP8[obtained+6>>>0]=0;HEAP8[obtained+7>>>0]=0;HEAP16[obtained+8>>>1>>>0]=0;HEAPU32[obtained+16>>>2>>>0]=0;HEAPU32[obtained+20>>>2>>>0]=0}}if(!SDL.audio){return-1}return 0}_SDL_OpenAudio.sig="ipp";var _SDL_PauseAudio=pauseOn=>{if(!SDL.audio){return}if(pauseOn){if(SDL.audio.timer!==undefined){clearTimeout(SDL.audio.timer);SDL.audio.numAudioTimersPending=0;SDL.audio.timer=undefined}}else if(!SDL.audio.timer){SDL.audio.numAudioTimersPending=1;SDL.audio.timer=safeSetTimeout(SDL.audio.caller,1)}SDL.audio.paused=pauseOn};_SDL_PauseAudio.sig="vi";var _SDL_CloseAudio=()=>{if(SDL.audio){if(SDL.audio.callbackRemover){SDL.audio.callbackRemover();SDL.audio.callbackRemover=null}_SDL_PauseAudio(1);_free(SDL.audio.buffer);SDL.audio=null;SDL.allocateChannels(0)}};_SDL_CloseAudio.sig="v";var _SDL_LockAudio=()=>{};_SDL_LockAudio.sig="v";var _SDL_UnlockAudio=()=>{};_SDL_UnlockAudio.sig="v";function _SDL_CreateMutex(){return 0}_SDL_CreateMutex.sig="p";function _SDL_mutexP(mutex){mutex>>>=0;return 0}_SDL_mutexP.sig="ip";function _SDL_mutexV(mutex){mutex>>>=0;return 0}_SDL_mutexV.sig="ip";function _SDL_DestroyMutex(mutex){mutex>>>=0}_SDL_DestroyMutex.sig="vp";function _SDL_CreateCond(){return 0}_SDL_CreateCond.sig="p";function _SDL_CondSignal(cond){cond>>>=0}_SDL_CondSignal.sig="ip";function _SDL_CondWait(cond,mutex){cond>>>=0;mutex>>>=0}_SDL_CondWait.sig="ipp";function _SDL_DestroyCond(cond){cond>>>=0}_SDL_DestroyCond.sig="vp";var _SDL_StartTextInput=()=>{SDL.textInput=true};_SDL_StartTextInput.sig="v";var _SDL_StopTextInput=()=>{SDL.textInput=false};_SDL_StopTextInput.sig="v";var _Mix_Init=flags=>{if(!flags)return 0;return 8};_Mix_Init.sig="ii";var _Mix_Quit=()=>{};_Mix_Quit.sig="v";var _Mix_OpenAudio=(frequency,format,channels,chunksize)=>{SDL.openAudioContext();autoResumeAudioContext(SDL.audioContext);SDL.allocateChannels(32);SDL.mixerFrequency=frequency;SDL.mixerFormat=format;SDL.mixerNumChannels=channels;SDL.mixerChunkSize=chunksize;return 0};_Mix_OpenAudio.sig="iiiii";var _Mix_CloseAudio=_SDL_CloseAudio;_Mix_CloseAudio.sig="v";var _Mix_AllocateChannels=num=>{SDL.allocateChannels(num);return num};_Mix_AllocateChannels.sig="ii";function _Mix_ChannelFinished(func){func>>>=0;SDL.channelFinished=func}_Mix_ChannelFinished.sig="vp";var _Mix_Volume=(channel,volume)=>{if(channel==-1){for(var i=0;i<SDL.numChannels-1;i++){_Mix_Volume(i,volume)}return _Mix_Volume(SDL.numChannels-1,volume)}return SDL.setGetVolume(SDL.channels[channel],volume)};_Mix_Volume.sig="iii";var _Mix_SetPanning=(channel,left,right)=>{left/=255;right/=255;SDL.setPannerPosition(SDL.channels[channel],right-left,0,.1);return 1};_Mix_SetPanning.sig="iiii";function _Mix_LoadWAV_RW(rwopsID,freesrc){rwopsID>>>=0;var rwops=SDL.rwops[rwopsID];if(rwops===undefined)return 0;var filename="";var audio;var webAudio;var bytes;if(rwops.filename!==undefined){filename=PATH_FS.resolve(rwops.filename);var raw=Browser.preloadedAudios[filename];if(!raw){if(raw===null)err("Trying to reuse preloaded audio, but freePreloadedMediaOnUse is set!");if(!Module["noAudioDecoding"])warnOnce("Cannot find preloaded audio "+filename);try{bytes=FS.readFile(filename)}catch(e){err(`Couldn't find file for: ${filename}`);return 0}}if(Module["freePreloadedMediaOnUse"]){Browser.preloadedAudios[filename]=null}audio=raw}else if(rwops.bytes!==undefined){if(SDL.webAudioAvailable()){bytes=HEAPU8.buffer.slice(rwops.bytes,rwops.bytes+rwops.count)}else{bytes=HEAPU8.subarray(rwops.bytes>>>0,rwops.bytes+rwops.count>>>0)}}else{return 0}var arrayBuffer=bytes?bytes.buffer||bytes:bytes;var canPlayWithWebAudio=Module["SDL_canPlayWithWebAudio"]===undefined||Module["SDL_canPlayWithWebAudio"](filename,arrayBuffer);if(bytes!==undefined&&SDL.webAudioAvailable()&&canPlayWithWebAudio){audio=undefined;webAudio={onDecodeComplete:[]};SDL.audioContext["decodeAudioData"](arrayBuffer,data=>{webAudio.decodedBuffer=data;webAudio.onDecodeComplete.forEach(e=>e());delete webAudio.onDecodeComplete})}else if(audio===undefined&&bytes){var blob=new Blob([bytes],{type:rwops.mimetype});var url=URL.createObjectURL(blob);audio=new Audio;audio.src=url;audio.mozAudioChannelType="content"}var id=SDL.audios.length;SDL.audios.push({source:filename,audio,webAudio});return id}_Mix_LoadWAV_RW.sig="ppi";function _Mix_LoadWAV(filename){filename>>>=0;var rwops=_SDL_RWFromFile(filename,0);var result=_Mix_LoadWAV_RW(rwops,0);_SDL_FreeRW(rwops);return result}_Mix_LoadWAV.sig="pp";function _Mix_QuickLoad_RAW(mem,len){mem>>>=0;var audio;var webAudio;var numSamples=len>>1;var buffer=new Float32Array(numSamples);for(var i=0;i<numSamples;++i){buffer[i]=HEAP16[mem+i*2>>>1>>>0]/32768}if(SDL.webAudioAvailable()){webAudio={decodedBuffer:buffer}}else{audio=new Audio;audio.mozAudioChannelType="content";audio.numChannels=SDL.mixerNumChannels;audio.frequency=SDL.mixerFrequency}var id=SDL.audios.length;SDL.audios.push({source:"",audio,webAudio,buffer});return id}_Mix_QuickLoad_RAW.sig="ppi";function _Mix_FreeChunk(id){id>>>=0;SDL.audios[id]=null}_Mix_FreeChunk.sig="vp";var _Mix_ReserveChannels=num=>{SDL.channelMinimumNumber=num};_Mix_ReserveChannels.sig="ii";var _Mix_HaltChannel=channel=>{function halt(channel){var info=SDL.channels[channel];if(info.audio){info.audio.pause();info.audio=null}if(SDL.channelFinished){getWasmTableEntry(SDL.channelFinished)(channel)}}if(channel!=-1){halt(channel)}else{for(var i=0;i<SDL.channels.length;++i)halt(i)}return 0};_Mix_HaltChannel.sig="ii";function _Mix_PlayChannelTimed(channel,id,loops,ticks){id>>>=0;assert(ticks==-1);var info=SDL.audios[id];if(!info)return-1;if(!info.audio&&!info.webAudio)return-1;if(channel==-1){for(var i=SDL.channelMinimumNumber;i<SDL.numChannels;i++){if(!SDL.channels[i].audio){channel=i;break}}if(channel==-1){err(`All ${SDL.numChannels}  channels in use!`);return-1}}var channelInfo=SDL.channels[channel];var audio;if(info.webAudio){audio={resource:info,paused:false,currentPosition:0,play(){SDL.playWebAudio(this)},pause(){SDL.pauseWebAudio(this)}}}else{audio=info.audio.cloneNode(true);audio.numChannels=info.audio.numChannels;audio.frequency=info.audio.frequency}audio["onended"]=function(){if(channelInfo.audio===this||channelInfo.audio.webAudioNode===this){channelInfo.audio.paused=true;channelInfo.audio=null}if(SDL.channelFinished)getWasmTableEntry(SDL.channelFinished)(channel)};if(channelInfo.audio){_Mix_HaltChannel(channel)}channelInfo.audio=audio;audio.loop=loops!=0;audio.volume=channelInfo.volume;audio.play();return channel}_Mix_PlayChannelTimed.sig="iipii";var _Mix_FadingChannel=channel=>0;_Mix_FadingChannel.sig="ii";var _Mix_HaltMusic=()=>{var audio=SDL.music.audio;if(audio){audio.src=audio.src;audio.currentPosition=0;audio.pause()}SDL.music.audio=null;if(SDL.hookMusicFinished){getWasmTableEntry(SDL.hookMusicFinished)()}return 0};_Mix_HaltMusic.sig="i";function _Mix_HookMusicFinished(func){func>>>=0;SDL.hookMusicFinished=func;if(SDL.music.audio){SDL.music.audio["onended"]=_Mix_HaltMusic}}_Mix_HookMusicFinished.sig="vp";var _Mix_VolumeMusic=volume=>SDL.setGetVolume(SDL.music,volume);_Mix_VolumeMusic.sig="ii";function _Mix_LoadMUS_RW(filename){filename>>>=0;return _Mix_LoadWAV_RW(filename,0)}_Mix_LoadMUS_RW.sig="pp";function _Mix_LoadMUS(filename){filename>>>=0;var rwops=_SDL_RWFromFile(filename,0);var result=_Mix_LoadMUS_RW(rwops);_SDL_FreeRW(rwops);return result}_Mix_LoadMUS.sig="pp";var _Mix_FreeMusic=_Mix_FreeChunk;_Mix_FreeMusic.sig="vp";function _Mix_PlayMusic(id,loops){id>>>=0;if(SDL.music.audio){if(!SDL.music.audio.paused)err(`Music is already playing. ${SDL.music.source}`);SDL.music.audio.pause()}var info=SDL.audios[id];var audio;if(info.webAudio){audio={resource:info,paused:false,currentPosition:0,play(){SDL.playWebAudio(this)},pause(){SDL.pauseWebAudio(this)}}}else if(info.audio){audio=info.audio}audio["onended"]=function(){if(SDL.music.audio===this||SDL.music.audio?.webAudioNode===this){_Mix_HaltMusic()}};audio.loop=loops!=0&&loops!=1;audio.volume=SDL.music.volume;SDL.music.audio=audio;audio.play();return 0}_Mix_PlayMusic.sig="ipi";var _Mix_PauseMusic=()=>{var audio=SDL.music.audio;audio?.pause()};_Mix_PauseMusic.sig="v";var _Mix_ResumeMusic=()=>{var audio=SDL.music.audio;audio?.play()};_Mix_ResumeMusic.sig="v";var _Mix_FadeInMusicPos=_Mix_PlayMusic;_Mix_FadeInMusicPos.sig="ipiid";var _Mix_FadeOutMusic=_Mix_HaltMusic;_Mix_FadeOutMusic.sig="ii";var _Mix_PlayingMusic=()=>SDL.music.audio&&!SDL.music.audio.paused;_Mix_PlayingMusic.sig="i";var _Mix_Playing=channel=>{if(channel===-1){var count=0;for(var i=0;i<SDL.channels.length;i++){count+=_Mix_Playing(i)}return count}var info=SDL.channels[channel];if(info?.audio&&!info.audio.paused){return 1}return 0};_Mix_Playing.sig="ii";var _Mix_Pause=channel=>{if(channel===-1){for(var i=0;i<SDL.channels.length;i++){_Mix_Pause(i)}return}var info=SDL.channels[channel];if(info?.audio){info.audio.pause()}else{}};_Mix_Pause.sig="vi";var _Mix_Paused=channel=>{if(channel===-1){var pausedCount=0;for(var i=0;i<SDL.channels.length;i++){pausedCount+=_Mix_Paused(i)}return pausedCount}var info=SDL.channels[channel];return info?.audio?.paused?1:0};_Mix_Paused.sig="ii";var _Mix_PausedMusic=()=>SDL.music.audio?.paused?1:0;_Mix_PausedMusic.sig="i";var _Mix_Resume=channel=>{if(channel===-1){for(var i=0;i<SDL.channels.length;i++){_Mix_Resume(i)}return}var info=SDL.channels[channel];if(info?.audio)info.audio.play()};_Mix_Resume.sig="vi";var _TTF_Init=()=>{try{var offscreenCanvas=new OffscreenCanvas(0,0);SDL.ttfContext=offscreenCanvas.getContext("2d");if(typeof SDL.ttfContext.measureText!="function"){throw"bad context"}}catch(ex){var canvas=document.createElement("canvas");SDL.ttfContext=canvas.getContext("2d")}return 0};_TTF_Init.sig="i";function _TTF_OpenFont(name,size){name>>>=0;name=PATH.normalize(UTF8ToString(name));var id=SDL.fonts.length;SDL.fonts.push({name,size});return id}_TTF_OpenFont.sig="ppi";function _TTF_CloseFont(font){font>>>=0;SDL.fonts[font]=null}_TTF_CloseFont.sig="vp";function _TTF_RenderText_Solid(font,text,color){font>>>=0;text>>>=0;color>>>=0;text=UTF8ToString(text)||" ";var fontData=SDL.fonts[font];var w=SDL.estimateTextWidth(fontData,text);var h=fontData.size;color=SDL.loadColorToCSSRGB(color);var fontString=SDL.makeFontString(h,fontData.name);var surf=SDL.makeSurface(w,h,0,false,"text:"+text);var surfData=SDL.surfaces[surf];surfData.ctx.save();surfData.ctx.fillStyle=color;surfData.ctx.font=fontString;surfData.ctx.textBaseline="bottom";surfData.ctx.fillText(text,0,h|0);surfData.ctx.restore();return surf}_TTF_RenderText_Solid.sig="pppp";var _TTF_RenderText_Blended=_TTF_RenderText_Solid;_TTF_RenderText_Blended.sig="pppp";var _TTF_RenderText_Shaded=_TTF_RenderText_Solid;_TTF_RenderText_Shaded.sig="ppppp";var _TTF_RenderUTF8_Solid=_TTF_RenderText_Solid;_TTF_RenderUTF8_Solid.sig="pppp";function _TTF_SizeText(font,text,w,h){font>>>=0;text>>>=0;w>>>=0;h>>>=0;var fontData=SDL.fonts[font];if(w){HEAP32[w>>>2>>>0]=SDL.estimateTextWidth(fontData,UTF8ToString(text))}if(h){HEAP32[h>>>2>>>0]=fontData.size}return 0}_TTF_SizeText.sig="ipppp";var _TTF_SizeUTF8=_TTF_SizeText;_TTF_SizeUTF8.sig="ipppp";function _TTF_GlyphMetrics(font,ch,minx,maxx,miny,maxy,advance){font>>>=0;minx>>>=0;maxx>>>=0;miny>>>=0;maxy>>>=0;advance>>>=0;var fontData=SDL.fonts[font];var width=SDL.estimateTextWidth(fontData,String.fromCharCode(ch));if(advance){HEAP32[advance>>>2>>>0]=width}if(minx){HEAP32[minx>>>2>>>0]=0}if(maxx){HEAP32[maxx>>>2>>>0]=width}if(miny){HEAP32[miny>>>2>>>0]=0}if(maxy){HEAP32[maxy>>>2>>>0]=fontData.size}}_TTF_GlyphMetrics.sig="ipippppp";function _TTF_FontAscent(font){font>>>=0;var fontData=SDL.fonts[font];return fontData.size*.98|0}_TTF_FontAscent.sig="ip";function _TTF_FontDescent(font){font>>>=0;var fontData=SDL.fonts[font];return fontData.size*.02|0}_TTF_FontDescent.sig="ip";function _TTF_FontHeight(font){font>>>=0;var fontData=SDL.fonts[font];return fontData.size}_TTF_FontHeight.sig="ip";var _TTF_FontLineSkip=_TTF_FontHeight;_TTF_FontLineSkip.sig="ip";var _TTF_Quit=()=>out("TTF_Quit called (and ignored)");_TTF_Quit.sig="v";var SDL_gfx={drawRectangle:(surf,x1,y1,x2,y2,action,cssColor)=>{x1=x1<<16>>16;y1=y1<<16>>16;x2=x2<<16>>16;y2=y2<<16>>16;var surfData=SDL.surfaces[surf];assert(!surfData.locked);var x=x1<x2?x1:x2;var y=y1<y2?y1:y2;var w=Math.abs(x2-x1);var h=Math.abs(y2-y1);surfData.ctx.save();surfData.ctx[action+"Style"]=cssColor;surfData.ctx[action+"Rect"](x,y,w,h);surfData.ctx.restore()},drawLine:(surf,x1,y1,x2,y2,cssColor)=>{x1=x1<<16>>16;y1=y1<<16>>16;x2=x2<<16>>16;y2=y2<<16>>16;var surfData=SDL.surfaces[surf];assert(!surfData.locked);surfData.ctx.save();surfData.ctx.strokeStyle=cssColor;surfData.ctx.beginPath();surfData.ctx.moveTo(x1,y1);surfData.ctx.lineTo(x2,y2);surfData.ctx.stroke();surfData.ctx.restore()},drawEllipse:(surf,x,y,rx,ry,action,cssColor)=>{x=x<<16>>16;y=y<<16>>16;rx=rx<<16>>16;ry=ry<<16>>16;var surfData=SDL.surfaces[surf];assert(!surfData.locked);surfData.ctx.save();surfData.ctx.beginPath();surfData.ctx.translate(x,y);surfData.ctx.scale(rx,ry);surfData.ctx.arc(0,0,1,0,2*Math.PI);surfData.ctx.restore();surfData.ctx.save();surfData.ctx[action+"Style"]=cssColor;surfData.ctx[action]();surfData.ctx.restore()},translateColorToCSSRGBA:rgba=>`rgba(${rgba>>>24},${rgba>>16&255},${rgba>>8&255},${rgba&255})`};function _boxColor(surf,x1,y1,x2,y2,color){surf>>>=0;return SDL_gfx.drawRectangle(surf,x1,y1,x2,y2,"fill",SDL_gfx.translateColorToCSSRGBA(color))}_boxColor.sig="ipiiiii";function _boxRGBA(surf,x1,y1,x2,y2,r,g,b,a){surf>>>=0;return SDL_gfx.drawRectangle(surf,x1,y1,x2,y2,"fill",SDL.translateRGBAToCSSRGBA(r,g,b,a))}_boxRGBA.sig="ipiiiiiiii";function _rectangleColor(surf,x1,y1,x2,y2,color){surf>>>=0;return SDL_gfx.drawRectangle(surf,x1,y1,x2,y2,"stroke",SDL_gfx.translateColorToCSSRGBA(color))}_rectangleColor.sig="ipiiiii";function _rectangleRGBA(surf,x1,y1,x2,y2,r,g,b,a){surf>>>=0;return SDL_gfx.drawRectangle(surf,x1,y1,x2,y2,"stroke",SDL.translateRGBAToCSSRGBA(r,g,b,a))}_rectangleRGBA.sig="ipiiiiiiii";function _ellipseColor(surf,x,y,rx,ry,color){surf>>>=0;return SDL_gfx.drawEllipse(surf,x,y,rx,ry,"stroke",SDL_gfx.translateColorToCSSRGBA(color))}_ellipseColor.sig="ipiiiii";function _ellipseRGBA(surf,x,y,rx,ry,r,g,b,a){surf>>>=0;return SDL_gfx.drawEllipse(surf,x,y,rx,ry,"stroke",SDL.translateRGBAToCSSRGBA(r,g,b,a))}_ellipseRGBA.sig="ipiiiiiiii";function _filledEllipseColor(surf,x,y,rx,ry,color){surf>>>=0;return SDL_gfx.drawEllipse(surf,x,y,rx,ry,"fill",SDL_gfx.translateColorToCSSRGBA(color))}_filledEllipseColor.sig="ipiiiii";function _filledEllipseRGBA(surf,x,y,rx,ry,r,g,b,a){surf>>>=0;return SDL_gfx.drawEllipse(surf,x,y,rx,ry,"fill",SDL.translateRGBAToCSSRGBA(r,g,b,a))}_filledEllipseRGBA.sig="ipiiiiiiii";function _lineColor(surf,x1,y1,x2,y2,color){surf>>>=0;return SDL_gfx.drawLine(surf,x1,y1,x2,y2,SDL_gfx.translateColorToCSSRGBA(color))}_lineColor.sig="ipiiiii";function _lineRGBA(surf,x1,y1,x2,y2,r,g,b,a){surf>>>=0;return SDL_gfx.drawLine(surf,x1,y1,x2,y2,SDL.translateRGBAToCSSRGBA(r,g,b,a))}_lineRGBA.sig="ipiiiiiiii";function _pixelRGBA(surf,x1,y1,r,g,b,a){surf>>>=0;return _boxRGBA(surf,x1,y1,x1,y1,r,g,b,a)}_pixelRGBA.sig="ipiiiiii";var _SDL_GL_SetAttribute=(attr,value)=>{if(!(attr in SDL.glAttributes)){abort("Unknown SDL GL attribute ("+attr+"). Please check if your SDL version is supported.")}SDL.glAttributes[attr]=value};_SDL_GL_SetAttribute.sig="iii";function _SDL_GL_GetAttribute(attr,value){value>>>=0;if(!(attr in SDL.glAttributes)){abort("Unknown SDL GL attribute ("+attr+"). Please check if your SDL version is supported.")}if(value)HEAP32[value>>>2>>>0]=SDL.glAttributes[attr];return 0}_SDL_GL_GetAttribute.sig="iip";var _SDL_GL_SwapBuffers=()=>Browser.doSwapBuffers?.();_SDL_GL_SwapBuffers.sig="v";function _SDL_GL_ExtensionSupported(extension){extension>>>=0;return GLctx?.getExtension(UTF8ToString(extension))?1:0}_SDL_GL_ExtensionSupported.sig="ip";function _SDL_DestroyWindow(window){window>>>=0}_SDL_DestroyWindow.sig="vp";function _SDL_DestroyRenderer(renderer){renderer>>>=0}_SDL_DestroyRenderer.sig="vp";function _SDL_GetWindowFlags(window){window>>>=0;if(Browser.isFullscreen){return 1}return 0}_SDL_GetWindowFlags.sig="ip";function _SDL_GL_SwapWindow(window){window>>>=0}_SDL_GL_SwapWindow.sig="vp";function _SDL_GL_MakeCurrent(window,context){window>>>=0;context>>>=0}_SDL_GL_MakeCurrent.sig="ipp";function _SDL_GL_DeleteContext(context){context>>>=0}_SDL_GL_DeleteContext.sig="vp";var _SDL_GL_GetSwapInterval=()=>{if(MainLoop.timingMode==1){return MainLoop.timingValue}else{return 0}};_SDL_GL_GetSwapInterval.sig="i";var _SDL_GL_SetSwapInterval=state=>_emscripten_set_main_loop_timing(1,state);_SDL_GL_SetSwapInterval.sig="ii";function _SDL_SetWindowTitle(window,title){window>>>=0;title>>>=0;if(title)document.title=UTF8ToString(title)}_SDL_SetWindowTitle.sig="vpp";function _SDL_GetWindowSize(window,width,height){window>>>=0;width>>>=0;height>>>=0;var canvas=Browser.getCanvas();if(width)HEAP32[width>>>2>>>0]=canvas.width;if(height)HEAP32[height>>>2>>>0]=canvas.height}_SDL_GetWindowSize.sig="vppp";function _SDL_LogSetOutputFunction(callback,userdata){callback>>>=0;userdata>>>=0}_SDL_LogSetOutputFunction.sig="vpp";function _SDL_SetWindowFullscreen(window,fullscreen){window>>>=0;if(Browser.isFullscreen){Browser.getCanvas().exitFullscreen();return 1}return 0}_SDL_SetWindowFullscreen.sig="ipi";var _SDL_ClearError=()=>{};_SDL_ClearError.sig="v";var _SDL_SetGamma=(r,g,b)=>-1;_SDL_SetGamma.sig="ifff";function _SDL_SetGammaRamp(redTable,greenTable,blueTable){redTable>>>=0;greenTable>>>=0;blueTable>>>=0;return-1}_SDL_SetGammaRamp.sig="ippp";var _SDL_NumJoysticks=()=>{var count=0;var gamepads=SDL.getGamepads();for(var gamepad of gamepads){if(gamepad!==undefined)count++}return count};_SDL_NumJoysticks.sig="i";function _SDL_JoystickName(deviceIndex){var gamepad=SDL.getGamepad(deviceIndex);if(gamepad){var name=gamepad.id;if(SDL.joystickNamePool.hasOwnProperty(name)){return SDL.joystickNamePool[name]}return SDL.joystickNamePool[name]=stringToNewUTF8(name)}return 0}_SDL_JoystickName.sig="pi";function _SDL_JoystickOpen(deviceIndex){var gamepad=SDL.getGamepad(deviceIndex);if(gamepad){var joystick=deviceIndex+1;SDL.recordJoystickState(joystick,gamepad);return joystick}return 0}_SDL_JoystickOpen.sig="pi";var _SDL_JoystickOpened=deviceIndex=>SDL.lastJoystickState.hasOwnProperty(deviceIndex+1)?1:0;_SDL_JoystickOpened.sig="ii";function _SDL_JoystickIndex(joystick){joystick>>>=0;return joystick-1}_SDL_JoystickIndex.sig="ip";function _SDL_JoystickNumAxes(joystick){joystick>>>=0;var gamepad=SDL.getGamepad(joystick-1);if(gamepad){return gamepad.axes.length}return 0}_SDL_JoystickNumAxes.sig="ip";function _SDL_JoystickNumBalls(joystick){joystick>>>=0;return 0}_SDL_JoystickNumBalls.sig="ip";function _SDL_JoystickNumHats(joystick){joystick>>>=0;return 0}_SDL_JoystickNumHats.sig="ip";function _SDL_JoystickNumButtons(joystick){joystick>>>=0;var gamepad=SDL.getGamepad(joystick-1);if(gamepad){return gamepad.buttons.length}return 0}_SDL_JoystickNumButtons.sig="ip";var _SDL_JoystickUpdate=()=>SDL.queryJoysticks();_SDL_JoystickUpdate.sig="v";var _SDL_JoystickEventState=state=>{if(state<0){return SDL.joystickEventState}return SDL.joystickEventState=state};_SDL_JoystickEventState.sig="ii";function _SDL_JoystickGetAxis(joystick,axis){joystick>>>=0;var gamepad=SDL.getGamepad(joystick-1);if(gamepad?.axes.length>axis){return SDL.joystickAxisValueConversion(gamepad.axes[axis])}return 0}_SDL_JoystickGetAxis.sig="ipi";function _SDL_JoystickGetHat(joystick,hat){joystick>>>=0;return 0}_SDL_JoystickGetHat.sig="ipi";function _SDL_JoystickGetBall(joystick,ball,dxptr,dyptr){joystick>>>=0;dxptr>>>=0;dyptr>>>=0;return-1}_SDL_JoystickGetBall.sig="ipipp";function _SDL_JoystickGetButton(joystick,button){joystick>>>=0;var gamepad=SDL.getGamepad(joystick-1);if(gamepad?.buttons.length>button){return SDL.getJoystickButtonState(gamepad.buttons[button])?1:0}return 0}_SDL_JoystickGetButton.sig="ipi";function _SDL_JoystickClose(joystick){joystick>>>=0;delete SDL.lastJoystickState[joystick]}_SDL_JoystickClose.sig="vp";var _SDL_InitSubSystem=flags=>0;_SDL_InitSubSystem.sig="ii";function _SDL_RWFromConstMem(mem,size){mem>>>=0;var id=SDL.rwops.length;SDL.rwops.push({bytes:mem,count:size});return id}_SDL_RWFromConstMem.sig="ppi";var _SDL_RWFromMem=_SDL_RWFromConstMem;_SDL_RWFromMem.sig="ppi";var _SDL_GetNumAudioDrivers=()=>1;_SDL_GetNumAudioDrivers.sig="i";function _SDL_GetCurrentAudioDriver(){return stringToNewUTF8("Emscripten Audio")}_SDL_GetCurrentAudioDriver.sig="p";var _SDL_GetScancodeFromKey=key=>SDL.scanCodes[key];_SDL_GetScancodeFromKey.sig="ii";function _SDL_GetAudioDriver(index){return _SDL_GetCurrentAudioDriver()}_SDL_GetAudioDriver.sig="pi";var _SDL_EnableUNICODE=on=>{var ret=SDL.unicode||0;SDL.unicode=on;return ret};_SDL_EnableUNICODE.sig="ii";var _SDL_AddTimer=function(interval,callback,param){callback>>>=0;param>>>=0;return safeSetTimeout(()=>getWasmTableEntry(callback)(interval,param),interval)};_SDL_AddTimer.sig="iipp";var _SDL_RemoveTimer=id=>{clearTimeout(id);return true};_SDL_RemoveTimer.sig="ii";function _SDL_CreateThread(fs,data,pfnBeginThread,pfnEndThread){fs>>>=0;data>>>=0;throw"SDL threads cannot be supported in the web platform because they assume shared state. See emscripten_create_worker etc. for a message-passing concurrency model that does let you run code in another thread."}_SDL_CreateThread.sig="ppp";function _SDL_WaitThread(thread,status){thread>>>=0;status>>>=0;throw"SDL_WaitThread"}_SDL_WaitThread.sig="vpp";function _SDL_GetThreadID(thread){thread>>>=0;throw"SDL_GetThreadID"}_SDL_GetThreadID.sig="pp";function _SDL_ThreadID(){return 0}_SDL_ThreadID.sig="p";function _SDL_AllocRW(){throw"SDL_AllocRW: TODO"}_SDL_AllocRW.sig="p";function _SDL_CondBroadcast(cond){cond>>>=0;throw"SDL_CondBroadcast: TODO"}_SDL_CondBroadcast.sig="ip";function _SDL_CondWaitTimeout(cond,mutex,ms){cond>>>=0;mutex>>>=0;throw"SDL_CondWaitTimeout: TODO"}_SDL_CondWaitTimeout.sig="ippi";var _SDL_WM_IconifyWindow=()=>{throw"SDL_WM_IconifyWindow TODO"};_SDL_WM_IconifyWindow.sig="i";function _Mix_SetPostMix(func,arg){func>>>=0;arg>>>=0;return warnOnce("Mix_SetPostMix: TODO")}_Mix_SetPostMix.sig="vpp";function _Mix_VolumeChunk(chunk,volume){chunk>>>=0;throw"Mix_VolumeChunk: TODO"}_Mix_VolumeChunk.sig="ipi";var _Mix_SetPosition=(channel,angle,distance)=>{throw"Mix_SetPosition: TODO"};_Mix_SetPosition.sig="iiii";function _Mix_QuerySpec(frequency,format,channels){frequency>>>=0;format>>>=0;channels>>>=0;throw"Mix_QuerySpec: TODO"}_Mix_QuerySpec.sig="ippp";function _Mix_FadeInChannelTimed(channel,chunk,loop,ms,ticks){chunk>>>=0;throw"Mix_FadeInChannelTimed"}_Mix_FadeInChannelTimed.sig="iipiii";var _Mix_FadeOutChannel=()=>{throw"Mix_FadeOutChannel"};_Mix_FadeOutChannel.sig="iii";function _Mix_Linked_Version(){throw"Mix_Linked_Version: TODO"}_Mix_Linked_Version.sig="p";function _SDL_SaveBMP_RW(surface,dst,freedst){surface>>>=0;dst>>>=0;throw"SDL_SaveBMP_RW: TODO"}_SDL_SaveBMP_RW.sig="ippi";function _SDL_WM_SetIcon(icon,mask){icon>>>=0;mask>>>=0}_SDL_WM_SetIcon.sig="vpp";var _SDL_HasRDTSC=()=>0;_SDL_HasRDTSC.sig="i";var _SDL_HasMMX=()=>0;_SDL_HasMMX.sig="i";var _SDL_HasMMXExt=()=>0;_SDL_HasMMXExt.sig="i";var _SDL_Has3DNow=()=>0;_SDL_Has3DNow.sig="i";var _SDL_Has3DNowExt=()=>0;_SDL_Has3DNowExt.sig="i";var _SDL_HasSSE=()=>0;_SDL_HasSSE.sig="i";var _SDL_HasSSE2=()=>0;_SDL_HasSSE2.sig="i";var _SDL_HasAltiVec=()=>0;_SDL_HasAltiVec.sig="i";registerWasmPlugin();FS.createPreloadedFile=FS_createPreloadedFile;FS.staticInit();for(var base64ReverseLookup=new Uint8Array(123),i=25;i>=0;--i){base64ReverseLookup[48+i]=52+i;base64ReverseLookup[65+i]=i;base64ReverseLookup[97+i]=26+i}base64ReverseLookup[43]=62;base64ReverseLookup[47]=63;MEMFS.doesNotExistError=new FS.ErrnoError(44);MEMFS.doesNotExistError.stack="<generic error, no stack>";if(ENVIRONMENT_IS_NODE){NODEFS.staticInit();}for(let i=0;i<32;++i)tempFixedLengthArray.push(new Array(i));var miniTempWebGLFloatBuffersStorage=new Float32Array(288);for(var i=0;i<=288;++i){miniTempWebGLFloatBuffers[i]=miniTempWebGLFloatBuffersStorage.subarray(0,i)}var miniTempWebGLIntBuffersStorage=new Int32Array(288);for(var i=0;i<=288;++i){miniTempWebGLIntBuffers[i]=miniTempWebGLIntBuffersStorage.subarray(0,i)}Module["requestAnimationFrame"]=MainLoop.requestAnimationFrame;Module["pauseMainLoop"]=MainLoop.pause;Module["resumeMainLoop"]=MainLoop.resume;MainLoop.init();if(typeof setImmediate!="undefined"){emSetImmediate=setImmediateWrapped;emClearImmediate=clearImmediateWrapped}else if(typeof addEventListener=="function"){var __setImmediate_id_counter=0;var __setImmediate_queue=[];var __setImmediate_message_id="_si";var __setImmediate_cb=e=>{if(e.data===__setImmediate_message_id){e.stopPropagation();__setImmediate_queue.shift()();++__setImmediate_id_counter}};addEventListener("message",__setImmediate_cb,true);emSetImmediate=func=>{postMessage(__setImmediate_message_id,"*");return __setImmediate_id_counter+__setImmediate_queue.push(func)-1};emClearImmediate=id=>{var index=id-__setImmediate_id_counter;if(index>=0&&index<__setImmediate_queue.length)__setImmediate_queue[index]=()=>{}}}registerPostMainLoop(()=>SDL.audio?.queueNewAudioData?.());{initMemory();if(Module["preloadPlugins"])preloadPlugins=Module["preloadPlugins"];if(Module["noExitRuntime"])noExitRuntime=Module["noExitRuntime"];if(Module["print"])out=Module["print"];if(Module["printErr"])err=Module["printErr"];if(Module["dynamicLibraries"])dynamicLibraries=Module["dynamicLibraries"];if(Module["wasmBinary"])wasmBinary=Module["wasmBinary"];if(Module["arguments"])arguments_=Module["arguments"];if(Module["thisProgram"])thisProgram=Module["thisProgram"]}Module["addRunDependency"]=addRunDependency;Module["removeRunDependency"]=removeRunDependency;Module["ERRNO_CODES"]=ERRNO_CODES;Module["wasmTable"]=wasmTable;Module["FS_createPreloadedFile"]=FS_createPreloadedFile;Module["FS_unlink"]=FS_unlink;Module["FS_createPath"]=FS_createPath;Module["FS_createDevice"]=FS_createDevice;Module["FS_createDataFile"]=FS_createDataFile;Module["FS_createLazyFile"]=FS_createLazyFile;Module["LZ4"]=LZ4;Module["ExitStatus"]=ExitStatus;Module["GOTHandler"]=GOTHandler;Module["GOT"]=GOT;Module["currentModuleWeakSymbols"]=currentModuleWeakSymbols;Module["addOnPostRun"]=addOnPostRun;Module["onPostRuns"]=onPostRuns;Module["callRuntimeCallbacks"]=callRuntimeCallbacks;Module["addOnPreRun"]=addOnPreRun;Module["onPreRuns"]=onPreRuns;Module["getDylinkMetadata"]=getDylinkMetadata;Module["UTF8ArrayToString"]=UTF8ArrayToString;Module["UTF8Decoder"]=UTF8Decoder;Module["getValue"]=getValue;Module["loadDylibs"]=loadDylibs;Module["loadDynamicLibrary"]=loadDynamicLibrary;Module["LDSO"]=LDSO;Module["newDSO"]=newDSO;Module["loadWebAssemblyModule"]=loadWebAssemblyModule;Module["getMemory"]=getMemory;Module["___heap_base"]=___heap_base;Module["alignMemory"]=alignMemory;Module["relocateExports"]=relocateExports;Module["updateGOT"]=updateGOT;Module["isInternalSym"]=isInternalSym;Module["addFunction"]=addFunction;Module["convertJsFunctionToWasm"]=convertJsFunctionToWasm;Module["uleb128Encode"]=uleb128Encode;Module["sigToWasmTypes"]=sigToWasmTypes;Module["generateFuncType"]=generateFuncType;Module["getFunctionAddress"]=getFunctionAddress;Module["updateTableMap"]=updateTableMap;Module["getWasmTableEntry"]=getWasmTableEntry;Module["wasmTableMirror"]=wasmTableMirror;Module["wasmTable"]=wasmTable;Module["functionsInTableMap"]=functionsInTableMap;Module["getEmptyTableSlot"]=getEmptyTableSlot;Module["freeTableIndexes"]=freeTableIndexes;Module["setWasmTableEntry"]=setWasmTableEntry;Module["resolveGlobalSymbol"]=resolveGlobalSymbol;Module["isSymbolDefined"]=isSymbolDefined;Module["addOnPostCtor"]=addOnPostCtor;Module["onPostCtors"]=onPostCtors;Module["UTF8ToString"]=UTF8ToString;Module["mergeLibSymbols"]=mergeLibSymbols;Module["asyncLoad"]=asyncLoad;Module["preloadedWasm"]=preloadedWasm;Module["registerWasmPlugin"]=registerWasmPlugin;Module["preloadPlugins"]=preloadPlugins;Module["findLibraryFS"]=findLibraryFS;Module["replaceORIGIN"]=replaceORIGIN;Module["PATH"]=PATH;Module["withStackSave"]=withStackSave;Module["stackSave"]=stackSave;Module["stackRestore"]=stackRestore;Module["stackAlloc"]=stackAlloc;Module["lengthBytesUTF8"]=lengthBytesUTF8;Module["stringToUTF8OnStack"]=stringToUTF8OnStack;Module["stringToUTF8"]=stringToUTF8;Module["stringToUTF8Array"]=stringToUTF8Array;Module["FS"]=FS;Module["randomFill"]=randomFill;Module["initRandomFill"]=initRandomFill;Module["base64Decode"]=base64Decode;Module["PATH_FS"]=PATH_FS;Module["TTY"]=TTY;Module["FS_stdin_getChar"]=FS_stdin_getChar;Module["FS_stdin_getChar_buffer"]=FS_stdin_getChar_buffer;Module["intArrayFromString"]=intArrayFromString;Module["MEMFS"]=MEMFS;Module["mmapAlloc"]=mmapAlloc;Module["zeroMemory"]=zeroMemory;Module["FS_createPreloadedFile"]=FS_createPreloadedFile;Module["FS_createDataFile"]=FS_createDataFile;Module["FS_handledByPreloadPlugin"]=FS_handledByPreloadPlugin;Module["FS_modeStringToFlags"]=FS_modeStringToFlags;Module["FS_getMode"]=FS_getMode;Module["IDBFS"]=IDBFS;Module["NODEFS"]=NODEFS;Module["ERRNO_CODES"]=ERRNO_CODES;Module["WORKERFS"]=WORKERFS;Module["PROXYFS"]=PROXYFS;Module["LZ4"]=LZ4;Module["reportUndefinedSymbols"]=reportUndefinedSymbols;Module["noExitRuntime"]=noExitRuntime;Module["setValue"]=setValue;Module["___assert_fail"]=___assert_fail;Module["bigintToI53Checked"]=bigintToI53Checked;Module["INT53_MAX"]=INT53_MAX;Module["INT53_MIN"]=INT53_MIN;Module["___c_longjmp"]=___c_longjmp;Module["___call_sighandler"]=___call_sighandler;Module["___cpp_exception"]=___cpp_exception;Module["___memory_base"]=___memory_base;Module["___stack_high"]=___stack_high;Module["___stack_low"]=___stack_low;Module["___stack_pointer"]=___stack_pointer;Module["___syscall__newselect"]=___syscall__newselect;Module["SYSCALLS"]=SYSCALLS;Module["___syscall_accept4"]=___syscall_accept4;Module["getSocketFromFD"]=getSocketFromFD;Module["SOCKFS"]=SOCKFS;Module["writeSockaddr"]=writeSockaddr;Module["inetPton4"]=inetPton4;Module["inetPton6"]=inetPton6;Module["DNS"]=DNS;Module["___syscall_bind"]=___syscall_bind;Module["getSocketAddress"]=getSocketAddress;Module["readSockaddr"]=readSockaddr;Module["inetNtop4"]=inetNtop4;Module["inetNtop6"]=inetNtop6;Module["___syscall_chdir"]=___syscall_chdir;Module["___syscall_chmod"]=___syscall_chmod;Module["___syscall_connect"]=___syscall_connect;Module["___syscall_dup"]=___syscall_dup;Module["___syscall_dup3"]=___syscall_dup3;Module["___syscall_faccessat"]=___syscall_faccessat;Module["___syscall_fadvise64"]=___syscall_fadvise64;Module["___syscall_fallocate"]=___syscall_fallocate;Module["___syscall_fchdir"]=___syscall_fchdir;Module["___syscall_fchmod"]=___syscall_fchmod;Module["___syscall_fchmodat2"]=___syscall_fchmodat2;Module["___syscall_fchown32"]=___syscall_fchown32;Module["___syscall_fchownat"]=___syscall_fchownat;Module["___syscall_fcntl64"]=___syscall_fcntl64;Module["syscallGetVarargP"]=syscallGetVarargP;Module["syscallGetVarargI"]=syscallGetVarargI;Module["___syscall_fdatasync"]=___syscall_fdatasync;Module["___syscall_fstat64"]=___syscall_fstat64;Module["___syscall_fstatfs64"]=___syscall_fstatfs64;Module["___syscall_ftruncate64"]=___syscall_ftruncate64;Module["___syscall_getcwd"]=___syscall_getcwd;Module["___syscall_getdents64"]=___syscall_getdents64;Module["___syscall_getpeername"]=___syscall_getpeername;Module["___syscall_getsockname"]=___syscall_getsockname;Module["___syscall_getsockopt"]=___syscall_getsockopt;Module["___syscall_ioctl"]=___syscall_ioctl;Module["___syscall_listen"]=___syscall_listen;Module["___syscall_lstat64"]=___syscall_lstat64;Module["___syscall_mkdirat"]=___syscall_mkdirat;Module["___syscall_mknodat"]=___syscall_mknodat;Module["___syscall_newfstatat"]=___syscall_newfstatat;Module["___syscall_openat"]=___syscall_openat;Module["___syscall_pipe"]=___syscall_pipe;Module["PIPEFS"]=PIPEFS;Module["___syscall_poll"]=___syscall_poll;Module["___syscall_readlinkat"]=___syscall_readlinkat;Module["___syscall_recvfrom"]=___syscall_recvfrom;Module["___syscall_recvmsg"]=___syscall_recvmsg;Module["___syscall_renameat"]=___syscall_renameat;Module["___syscall_rmdir"]=___syscall_rmdir;Module["___syscall_sendmsg"]=___syscall_sendmsg;Module["___syscall_sendto"]=___syscall_sendto;Module["___syscall_socket"]=___syscall_socket;Module["___syscall_stat64"]=___syscall_stat64;Module["___syscall_statfs64"]=___syscall_statfs64;Module["___syscall_symlinkat"]=___syscall_symlinkat;Module["___syscall_truncate64"]=___syscall_truncate64;Module["___syscall_unlinkat"]=___syscall_unlinkat;Module["___syscall_utimensat"]=___syscall_utimensat;Module["readI53FromI64"]=readI53FromI64;Module["___table_base"]=___table_base;Module["__abort_js"]=__abort_js;Module["__dlopen_js"]=__dlopen_js;Module["dlopenInternal"]=dlopenInternal;Module["dlSetError"]=dlSetError;Module["__dlsym_js"]=__dlsym_js;Module["__emscripten_dlopen_js"]=__emscripten_dlopen_js;Module["callUserCallback"]=callUserCallback;Module["handleException"]=handleException;Module["maybeExit"]=maybeExit;Module["_exit"]=_exit;Module["exitJS"]=exitJS;Module["_proc_exit"]=_proc_exit;Module["keepRuntimeAlive"]=keepRuntimeAlive;Module["runtimeKeepaliveCounter"]=runtimeKeepaliveCounter;Module["runtimeKeepalivePush"]=runtimeKeepalivePush;Module["runtimeKeepalivePop"]=runtimeKeepalivePop;Module["__emscripten_get_progname"]=__emscripten_get_progname;Module["getExecutableName"]=getExecutableName;Module["__emscripten_lookup_name"]=__emscripten_lookup_name;Module["__emscripten_runtime_keepalive_clear"]=__emscripten_runtime_keepalive_clear;Module["__emscripten_system"]=__emscripten_system;Module["__gmtime_js"]=__gmtime_js;Module["__localtime_js"]=__localtime_js;Module["ydayFromDate"]=ydayFromDate;Module["isLeapYear"]=isLeapYear;Module["MONTH_DAYS_LEAP_CUMULATIVE"]=MONTH_DAYS_LEAP_CUMULATIVE;Module["MONTH_DAYS_REGULAR_CUMULATIVE"]=MONTH_DAYS_REGULAR_CUMULATIVE;Module["__mktime_js"]=__mktime_js;Module["__mmap_js"]=__mmap_js;Module["__msync_js"]=__msync_js;Module["__munmap_js"]=__munmap_js;Module["__setitimer_js"]=__setitimer_js;Module["timers"]=timers;Module["_emscripten_get_now"]=_emscripten_get_now;Module["__timegm_js"]=__timegm_js;Module["__tzset_js"]=__tzset_js;Module["_clock_res_get"]=_clock_res_get;Module["_emscripten_get_now_res"]=_emscripten_get_now_res;Module["nowIsMonotonic"]=nowIsMonotonic;Module["checkWasiClock"]=checkWasiClock;Module["_clock_time_get"]=_clock_time_get;Module["_emscripten_date_now"]=_emscripten_date_now;Module["_create_sentinel"]=_create_sentinel;Module["_emscripten_asm_const_int"]=_emscripten_asm_const_int;Module["runEmAsmFunction"]=runEmAsmFunction;Module["readEmAsmArgs"]=readEmAsmArgs;Module["readEmAsmArgsArray"]=readEmAsmArgsArray;Module["_emscripten_console_error"]=_emscripten_console_error;Module["_emscripten_console_log"]=_emscripten_console_log;Module["_emscripten_console_trace"]=_emscripten_console_trace;Module["_emscripten_console_warn"]=_emscripten_console_warn;Module["_emscripten_err"]=_emscripten_err;Module["_emscripten_get_heap_max"]=_emscripten_get_heap_max;Module["getHeapMax"]=getHeapMax;Module["_emscripten_glActiveTexture"]=_emscripten_glActiveTexture;Module["_glActiveTexture"]=_glActiveTexture;Module["GL"]=GL;Module["GLctx"]=GLctx;Module["webgl_enable_ANGLE_instanced_arrays"]=webgl_enable_ANGLE_instanced_arrays;Module["webgl_enable_OES_vertex_array_object"]=webgl_enable_OES_vertex_array_object;Module["webgl_enable_WEBGL_draw_buffers"]=webgl_enable_WEBGL_draw_buffers;Module["webgl_enable_WEBGL_draw_instanced_base_vertex_base_instance"]=webgl_enable_WEBGL_draw_instanced_base_vertex_base_instance;Module["webgl_enable_WEBGL_multi_draw_instanced_base_vertex_base_instance"]=webgl_enable_WEBGL_multi_draw_instanced_base_vertex_base_instance;Module["webgl_enable_EXT_polygon_offset_clamp"]=webgl_enable_EXT_polygon_offset_clamp;Module["webgl_enable_EXT_clip_control"]=webgl_enable_EXT_clip_control;Module["webgl_enable_WEBGL_polygon_mode"]=webgl_enable_WEBGL_polygon_mode;Module["webgl_enable_WEBGL_multi_draw"]=webgl_enable_WEBGL_multi_draw;Module["getEmscriptenSupportedExtensions"]=getEmscriptenSupportedExtensions;Module["_emscripten_glAttachShader"]=_emscripten_glAttachShader;Module["_glAttachShader"]=_glAttachShader;Module["_emscripten_glBeginQuery"]=_emscripten_glBeginQuery;Module["_glBeginQuery"]=_glBeginQuery;Module["_emscripten_glBeginQueryEXT"]=_emscripten_glBeginQueryEXT;Module["_glBeginQueryEXT"]=_glBeginQueryEXT;Module["_emscripten_glBeginTransformFeedback"]=_emscripten_glBeginTransformFeedback;Module["_glBeginTransformFeedback"]=_glBeginTransformFeedback;Module["_emscripten_glBindAttribLocation"]=_emscripten_glBindAttribLocation;Module["_glBindAttribLocation"]=_glBindAttribLocation;Module["_emscripten_glBindBuffer"]=_emscripten_glBindBuffer;Module["_glBindBuffer"]=_glBindBuffer;Module["_emscripten_glBindBufferBase"]=_emscripten_glBindBufferBase;Module["_glBindBufferBase"]=_glBindBufferBase;Module["_emscripten_glBindBufferRange"]=_emscripten_glBindBufferRange;Module["_glBindBufferRange"]=_glBindBufferRange;Module["_emscripten_glBindFramebuffer"]=_emscripten_glBindFramebuffer;Module["_glBindFramebuffer"]=_glBindFramebuffer;Module["_emscripten_glBindRenderbuffer"]=_emscripten_glBindRenderbuffer;Module["_glBindRenderbuffer"]=_glBindRenderbuffer;Module["_emscripten_glBindSampler"]=_emscripten_glBindSampler;Module["_glBindSampler"]=_glBindSampler;Module["_emscripten_glBindTexture"]=_emscripten_glBindTexture;Module["_glBindTexture"]=_glBindTexture;Module["_emscripten_glBindTransformFeedback"]=_emscripten_glBindTransformFeedback;Module["_glBindTransformFeedback"]=_glBindTransformFeedback;Module["_emscripten_glBindVertexArray"]=_emscripten_glBindVertexArray;Module["_glBindVertexArray"]=_glBindVertexArray;Module["_emscripten_glBindVertexArrayOES"]=_emscripten_glBindVertexArrayOES;Module["_glBindVertexArrayOES"]=_glBindVertexArrayOES;Module["_emscripten_glBlendColor"]=_emscripten_glBlendColor;Module["_glBlendColor"]=_glBlendColor;Module["_emscripten_glBlendEquation"]=_emscripten_glBlendEquation;Module["_glBlendEquation"]=_glBlendEquation;Module["_emscripten_glBlendEquationSeparate"]=_emscripten_glBlendEquationSeparate;Module["_glBlendEquationSeparate"]=_glBlendEquationSeparate;Module["_emscripten_glBlendFunc"]=_emscripten_glBlendFunc;Module["_glBlendFunc"]=_glBlendFunc;Module["_emscripten_glBlendFuncSeparate"]=_emscripten_glBlendFuncSeparate;Module["_glBlendFuncSeparate"]=_glBlendFuncSeparate;Module["_emscripten_glBlitFramebuffer"]=_emscripten_glBlitFramebuffer;Module["_glBlitFramebuffer"]=_glBlitFramebuffer;Module["_emscripten_glBufferData"]=_emscripten_glBufferData;Module["_glBufferData"]=_glBufferData;Module["_emscripten_glBufferSubData"]=_emscripten_glBufferSubData;Module["_glBufferSubData"]=_glBufferSubData;Module["_emscripten_glCheckFramebufferStatus"]=_emscripten_glCheckFramebufferStatus;Module["_glCheckFramebufferStatus"]=_glCheckFramebufferStatus;Module["_emscripten_glClear"]=_emscripten_glClear;Module["_glClear"]=_glClear;Module["_emscripten_glClearBufferfi"]=_emscripten_glClearBufferfi;Module["_glClearBufferfi"]=_glClearBufferfi;Module["_emscripten_glClearBufferfv"]=_emscripten_glClearBufferfv;Module["_glClearBufferfv"]=_glClearBufferfv;Module["_emscripten_glClearBufferiv"]=_emscripten_glClearBufferiv;Module["_glClearBufferiv"]=_glClearBufferiv;Module["_emscripten_glClearBufferuiv"]=_emscripten_glClearBufferuiv;Module["_glClearBufferuiv"]=_glClearBufferuiv;Module["_emscripten_glClearColor"]=_emscripten_glClearColor;Module["_glClearColor"]=_glClearColor;Module["_emscripten_glClearDepthf"]=_emscripten_glClearDepthf;Module["_glClearDepthf"]=_glClearDepthf;Module["_emscripten_glClearStencil"]=_emscripten_glClearStencil;Module["_glClearStencil"]=_glClearStencil;Module["_emscripten_glClientWaitSync"]=_emscripten_glClientWaitSync;Module["_glClientWaitSync"]=_glClientWaitSync;Module["_emscripten_glClipControlEXT"]=_emscripten_glClipControlEXT;Module["_glClipControlEXT"]=_glClipControlEXT;Module["_emscripten_glColorMask"]=_emscripten_glColorMask;Module["_glColorMask"]=_glColorMask;Module["_emscripten_glCompileShader"]=_emscripten_glCompileShader;Module["_glCompileShader"]=_glCompileShader;Module["_emscripten_glCompressedTexImage2D"]=_emscripten_glCompressedTexImage2D;Module["_glCompressedTexImage2D"]=_glCompressedTexImage2D;Module["_emscripten_glCompressedTexImage3D"]=_emscripten_glCompressedTexImage3D;Module["_glCompressedTexImage3D"]=_glCompressedTexImage3D;Module["_emscripten_glCompressedTexSubImage2D"]=_emscripten_glCompressedTexSubImage2D;Module["_glCompressedTexSubImage2D"]=_glCompressedTexSubImage2D;Module["_emscripten_glCompressedTexSubImage3D"]=_emscripten_glCompressedTexSubImage3D;Module["_glCompressedTexSubImage3D"]=_glCompressedTexSubImage3D;Module["_emscripten_glCopyBufferSubData"]=_emscripten_glCopyBufferSubData;Module["_glCopyBufferSubData"]=_glCopyBufferSubData;Module["_emscripten_glCopyTexImage2D"]=_emscripten_glCopyTexImage2D;Module["_glCopyTexImage2D"]=_glCopyTexImage2D;Module["_emscripten_glCopyTexSubImage2D"]=_emscripten_glCopyTexSubImage2D;Module["_glCopyTexSubImage2D"]=_glCopyTexSubImage2D;Module["_emscripten_glCopyTexSubImage3D"]=_emscripten_glCopyTexSubImage3D;Module["_glCopyTexSubImage3D"]=_glCopyTexSubImage3D;Module["_emscripten_glCreateProgram"]=_emscripten_glCreateProgram;Module["_glCreateProgram"]=_glCreateProgram;Module["_emscripten_glCreateShader"]=_emscripten_glCreateShader;Module["_glCreateShader"]=_glCreateShader;Module["_emscripten_glCullFace"]=_emscripten_glCullFace;Module["_glCullFace"]=_glCullFace;Module["_emscripten_glDeleteBuffers"]=_emscripten_glDeleteBuffers;Module["_glDeleteBuffers"]=_glDeleteBuffers;Module["_emscripten_glDeleteFramebuffers"]=_emscripten_glDeleteFramebuffers;Module["_glDeleteFramebuffers"]=_glDeleteFramebuffers;Module["_emscripten_glDeleteProgram"]=_emscripten_glDeleteProgram;Module["_glDeleteProgram"]=_glDeleteProgram;Module["_emscripten_glDeleteQueries"]=_emscripten_glDeleteQueries;Module["_glDeleteQueries"]=_glDeleteQueries;Module["_emscripten_glDeleteQueriesEXT"]=_emscripten_glDeleteQueriesEXT;Module["_glDeleteQueriesEXT"]=_glDeleteQueriesEXT;Module["_emscripten_glDeleteRenderbuffers"]=_emscripten_glDeleteRenderbuffers;Module["_glDeleteRenderbuffers"]=_glDeleteRenderbuffers;Module["_emscripten_glDeleteSamplers"]=_emscripten_glDeleteSamplers;Module["_glDeleteSamplers"]=_glDeleteSamplers;Module["_emscripten_glDeleteShader"]=_emscripten_glDeleteShader;Module["_glDeleteShader"]=_glDeleteShader;Module["_emscripten_glDeleteSync"]=_emscripten_glDeleteSync;Module["_glDeleteSync"]=_glDeleteSync;Module["_emscripten_glDeleteTextures"]=_emscripten_glDeleteTextures;Module["_glDeleteTextures"]=_glDeleteTextures;Module["_emscripten_glDeleteTransformFeedbacks"]=_emscripten_glDeleteTransformFeedbacks;Module["_glDeleteTransformFeedbacks"]=_glDeleteTransformFeedbacks;Module["_emscripten_glDeleteVertexArrays"]=_emscripten_glDeleteVertexArrays;Module["_glDeleteVertexArrays"]=_glDeleteVertexArrays;Module["_emscripten_glDeleteVertexArraysOES"]=_emscripten_glDeleteVertexArraysOES;Module["_glDeleteVertexArraysOES"]=_glDeleteVertexArraysOES;Module["_emscripten_glDepthFunc"]=_emscripten_glDepthFunc;Module["_glDepthFunc"]=_glDepthFunc;Module["_emscripten_glDepthMask"]=_emscripten_glDepthMask;Module["_glDepthMask"]=_glDepthMask;Module["_emscripten_glDepthRangef"]=_emscripten_glDepthRangef;Module["_glDepthRangef"]=_glDepthRangef;Module["_emscripten_glDetachShader"]=_emscripten_glDetachShader;Module["_glDetachShader"]=_glDetachShader;Module["_emscripten_glDisable"]=_emscripten_glDisable;Module["_glDisable"]=_glDisable;Module["_emscripten_glDisableVertexAttribArray"]=_emscripten_glDisableVertexAttribArray;Module["_glDisableVertexAttribArray"]=_glDisableVertexAttribArray;Module["_emscripten_glDrawArrays"]=_emscripten_glDrawArrays;Module["_glDrawArrays"]=_glDrawArrays;Module["_emscripten_glDrawArraysInstanced"]=_emscripten_glDrawArraysInstanced;Module["_glDrawArraysInstanced"]=_glDrawArraysInstanced;Module["_emscripten_glDrawArraysInstancedANGLE"]=_emscripten_glDrawArraysInstancedANGLE;Module["_glDrawArraysInstancedANGLE"]=_glDrawArraysInstancedANGLE;Module["_emscripten_glDrawArraysInstancedARB"]=_emscripten_glDrawArraysInstancedARB;Module["_glDrawArraysInstancedARB"]=_glDrawArraysInstancedARB;Module["_emscripten_glDrawArraysInstancedEXT"]=_emscripten_glDrawArraysInstancedEXT;Module["_glDrawArraysInstancedEXT"]=_glDrawArraysInstancedEXT;Module["_emscripten_glDrawArraysInstancedNV"]=_emscripten_glDrawArraysInstancedNV;Module["_glDrawArraysInstancedNV"]=_glDrawArraysInstancedNV;Module["_emscripten_glDrawBuffers"]=_emscripten_glDrawBuffers;Module["_glDrawBuffers"]=_glDrawBuffers;Module["tempFixedLengthArray"]=tempFixedLengthArray;Module["_emscripten_glDrawBuffersEXT"]=_emscripten_glDrawBuffersEXT;Module["_glDrawBuffersEXT"]=_glDrawBuffersEXT;Module["_emscripten_glDrawBuffersWEBGL"]=_emscripten_glDrawBuffersWEBGL;Module["_glDrawBuffersWEBGL"]=_glDrawBuffersWEBGL;Module["_emscripten_glDrawElements"]=_emscripten_glDrawElements;Module["_glDrawElements"]=_glDrawElements;Module["_emscripten_glDrawElementsInstanced"]=_emscripten_glDrawElementsInstanced;Module["_glDrawElementsInstanced"]=_glDrawElementsInstanced;Module["_emscripten_glDrawElementsInstancedANGLE"]=_emscripten_glDrawElementsInstancedANGLE;Module["_glDrawElementsInstancedANGLE"]=_glDrawElementsInstancedANGLE;Module["_emscripten_glDrawElementsInstancedARB"]=_emscripten_glDrawElementsInstancedARB;Module["_glDrawElementsInstancedARB"]=_glDrawElementsInstancedARB;Module["_emscripten_glDrawElementsInstancedEXT"]=_emscripten_glDrawElementsInstancedEXT;Module["_glDrawElementsInstancedEXT"]=_glDrawElementsInstancedEXT;Module["_emscripten_glDrawElementsInstancedNV"]=_emscripten_glDrawElementsInstancedNV;Module["_glDrawElementsInstancedNV"]=_glDrawElementsInstancedNV;Module["_emscripten_glDrawRangeElements"]=_emscripten_glDrawRangeElements;Module["_glDrawRangeElements"]=_glDrawRangeElements;Module["_emscripten_glEnable"]=_emscripten_glEnable;Module["_glEnable"]=_glEnable;Module["_emscripten_glEnableVertexAttribArray"]=_emscripten_glEnableVertexAttribArray;Module["_glEnableVertexAttribArray"]=_glEnableVertexAttribArray;Module["_emscripten_glEndQuery"]=_emscripten_glEndQuery;Module["_glEndQuery"]=_glEndQuery;Module["_emscripten_glEndQueryEXT"]=_emscripten_glEndQueryEXT;Module["_glEndQueryEXT"]=_glEndQueryEXT;Module["_emscripten_glEndTransformFeedback"]=_emscripten_glEndTransformFeedback;Module["_glEndTransformFeedback"]=_glEndTransformFeedback;Module["_emscripten_glFenceSync"]=_emscripten_glFenceSync;Module["_glFenceSync"]=_glFenceSync;Module["_emscripten_glFinish"]=_emscripten_glFinish;Module["_glFinish"]=_glFinish;Module["_emscripten_glFlush"]=_emscripten_glFlush;Module["_glFlush"]=_glFlush;Module["_emscripten_glFramebufferRenderbuffer"]=_emscripten_glFramebufferRenderbuffer;Module["_glFramebufferRenderbuffer"]=_glFramebufferRenderbuffer;Module["_emscripten_glFramebufferTexture2D"]=_emscripten_glFramebufferTexture2D;Module["_glFramebufferTexture2D"]=_glFramebufferTexture2D;Module["_emscripten_glFramebufferTextureLayer"]=_emscripten_glFramebufferTextureLayer;Module["_glFramebufferTextureLayer"]=_glFramebufferTextureLayer;Module["_emscripten_glFrontFace"]=_emscripten_glFrontFace;Module["_glFrontFace"]=_glFrontFace;Module["_emscripten_glGenBuffers"]=_emscripten_glGenBuffers;Module["_glGenBuffers"]=_glGenBuffers;Module["_emscripten_glGenFramebuffers"]=_emscripten_glGenFramebuffers;Module["_glGenFramebuffers"]=_glGenFramebuffers;Module["_emscripten_glGenQueries"]=_emscripten_glGenQueries;Module["_glGenQueries"]=_glGenQueries;Module["_emscripten_glGenQueriesEXT"]=_emscripten_glGenQueriesEXT;Module["_glGenQueriesEXT"]=_glGenQueriesEXT;Module["_emscripten_glGenRenderbuffers"]=_emscripten_glGenRenderbuffers;Module["_glGenRenderbuffers"]=_glGenRenderbuffers;Module["_emscripten_glGenSamplers"]=_emscripten_glGenSamplers;Module["_glGenSamplers"]=_glGenSamplers;Module["_emscripten_glGenTextures"]=_emscripten_glGenTextures;Module["_glGenTextures"]=_glGenTextures;Module["_emscripten_glGenTransformFeedbacks"]=_emscripten_glGenTransformFeedbacks;Module["_glGenTransformFeedbacks"]=_glGenTransformFeedbacks;Module["_emscripten_glGenVertexArrays"]=_emscripten_glGenVertexArrays;Module["_glGenVertexArrays"]=_glGenVertexArrays;Module["_emscripten_glGenVertexArraysOES"]=_emscripten_glGenVertexArraysOES;Module["_glGenVertexArraysOES"]=_glGenVertexArraysOES;Module["_emscripten_glGenerateMipmap"]=_emscripten_glGenerateMipmap;Module["_glGenerateMipmap"]=_glGenerateMipmap;Module["_emscripten_glGetActiveAttrib"]=_emscripten_glGetActiveAttrib;Module["_glGetActiveAttrib"]=_glGetActiveAttrib;Module["__glGetActiveAttribOrUniform"]=__glGetActiveAttribOrUniform;Module["_emscripten_glGetActiveUniform"]=_emscripten_glGetActiveUniform;Module["_glGetActiveUniform"]=_glGetActiveUniform;Module["_emscripten_glGetActiveUniformBlockName"]=_emscripten_glGetActiveUniformBlockName;Module["_glGetActiveUniformBlockName"]=_glGetActiveUniformBlockName;Module["_emscripten_glGetActiveUniformBlockiv"]=_emscripten_glGetActiveUniformBlockiv;Module["_glGetActiveUniformBlockiv"]=_glGetActiveUniformBlockiv;Module["_emscripten_glGetActiveUniformsiv"]=_emscripten_glGetActiveUniformsiv;Module["_glGetActiveUniformsiv"]=_glGetActiveUniformsiv;Module["_emscripten_glGetAttachedShaders"]=_emscripten_glGetAttachedShaders;Module["_glGetAttachedShaders"]=_glGetAttachedShaders;Module["_emscripten_glGetAttribLocation"]=_emscripten_glGetAttribLocation;Module["_glGetAttribLocation"]=_glGetAttribLocation;Module["_emscripten_glGetBooleanv"]=_emscripten_glGetBooleanv;Module["_glGetBooleanv"]=_glGetBooleanv;Module["emscriptenWebGLGet"]=emscriptenWebGLGet;Module["writeI53ToI64"]=writeI53ToI64;Module["webglGetExtensions"]=webglGetExtensions;Module["_emscripten_glGetBufferParameteri64v"]=_emscripten_glGetBufferParameteri64v;Module["_glGetBufferParameteri64v"]=_glGetBufferParameteri64v;Module["_emscripten_glGetBufferParameteriv"]=_emscripten_glGetBufferParameteriv;Module["_glGetBufferParameteriv"]=_glGetBufferParameteriv;Module["_emscripten_glGetError"]=_emscripten_glGetError;Module["_glGetError"]=_glGetError;Module["_emscripten_glGetFloatv"]=_emscripten_glGetFloatv;Module["_glGetFloatv"]=_glGetFloatv;Module["_emscripten_glGetFragDataLocation"]=_emscripten_glGetFragDataLocation;Module["_glGetFragDataLocation"]=_glGetFragDataLocation;Module["_emscripten_glGetFramebufferAttachmentParameteriv"]=_emscripten_glGetFramebufferAttachmentParameteriv;Module["_glGetFramebufferAttachmentParameteriv"]=_glGetFramebufferAttachmentParameteriv;Module["_emscripten_glGetInteger64i_v"]=_emscripten_glGetInteger64i_v;Module["_glGetInteger64i_v"]=_glGetInteger64i_v;Module["emscriptenWebGLGetIndexed"]=emscriptenWebGLGetIndexed;Module["_emscripten_glGetInteger64v"]=_emscripten_glGetInteger64v;Module["_glGetInteger64v"]=_glGetInteger64v;Module["_emscripten_glGetIntegeri_v"]=_emscripten_glGetIntegeri_v;Module["_glGetIntegeri_v"]=_glGetIntegeri_v;Module["_emscripten_glGetIntegerv"]=_emscripten_glGetIntegerv;Module["_glGetIntegerv"]=_glGetIntegerv;Module["_emscripten_glGetInternalformativ"]=_emscripten_glGetInternalformativ;Module["_glGetInternalformativ"]=_glGetInternalformativ;Module["_emscripten_glGetProgramBinary"]=_emscripten_glGetProgramBinary;Module["_glGetProgramBinary"]=_glGetProgramBinary;Module["_emscripten_glGetProgramInfoLog"]=_emscripten_glGetProgramInfoLog;Module["_glGetProgramInfoLog"]=_glGetProgramInfoLog;Module["_emscripten_glGetProgramiv"]=_emscripten_glGetProgramiv;Module["_glGetProgramiv"]=_glGetProgramiv;Module["_emscripten_glGetQueryObjecti64vEXT"]=_emscripten_glGetQueryObjecti64vEXT;Module["_glGetQueryObjecti64vEXT"]=_glGetQueryObjecti64vEXT;Module["_emscripten_glGetQueryObjectivEXT"]=_emscripten_glGetQueryObjectivEXT;Module["_glGetQueryObjectivEXT"]=_glGetQueryObjectivEXT;Module["_emscripten_glGetQueryObjectui64vEXT"]=_emscripten_glGetQueryObjectui64vEXT;Module["_glGetQueryObjectui64vEXT"]=_glGetQueryObjectui64vEXT;Module["_emscripten_glGetQueryObjectuiv"]=_emscripten_glGetQueryObjectuiv;Module["_glGetQueryObjectuiv"]=_glGetQueryObjectuiv;Module["_emscripten_glGetQueryObjectuivEXT"]=_emscripten_glGetQueryObjectuivEXT;Module["_glGetQueryObjectuivEXT"]=_glGetQueryObjectuivEXT;Module["_emscripten_glGetQueryiv"]=_emscripten_glGetQueryiv;Module["_glGetQueryiv"]=_glGetQueryiv;Module["_emscripten_glGetQueryivEXT"]=_emscripten_glGetQueryivEXT;Module["_glGetQueryivEXT"]=_glGetQueryivEXT;Module["_emscripten_glGetRenderbufferParameteriv"]=_emscripten_glGetRenderbufferParameteriv;Module["_glGetRenderbufferParameteriv"]=_glGetRenderbufferParameteriv;Module["_emscripten_glGetSamplerParameterfv"]=_emscripten_glGetSamplerParameterfv;Module["_glGetSamplerParameterfv"]=_glGetSamplerParameterfv;Module["_emscripten_glGetSamplerParameteriv"]=_emscripten_glGetSamplerParameteriv;Module["_glGetSamplerParameteriv"]=_glGetSamplerParameteriv;Module["_emscripten_glGetShaderInfoLog"]=_emscripten_glGetShaderInfoLog;Module["_glGetShaderInfoLog"]=_glGetShaderInfoLog;Module["_emscripten_glGetShaderPrecisionFormat"]=_emscripten_glGetShaderPrecisionFormat;Module["_glGetShaderPrecisionFormat"]=_glGetShaderPrecisionFormat;Module["_emscripten_glGetShaderSource"]=_emscripten_glGetShaderSource;Module["_glGetShaderSource"]=_glGetShaderSource;Module["_emscripten_glGetShaderiv"]=_emscripten_glGetShaderiv;Module["_glGetShaderiv"]=_glGetShaderiv;Module["_emscripten_glGetString"]=_emscripten_glGetString;Module["_glGetString"]=_glGetString;Module["stringToNewUTF8"]=stringToNewUTF8;Module["_emscripten_glGetStringi"]=_emscripten_glGetStringi;Module["_glGetStringi"]=_glGetStringi;Module["_emscripten_glGetSynciv"]=_emscripten_glGetSynciv;Module["_glGetSynciv"]=_glGetSynciv;Module["_emscripten_glGetTexParameterfv"]=_emscripten_glGetTexParameterfv;Module["_glGetTexParameterfv"]=_glGetTexParameterfv;Module["_emscripten_glGetTexParameteriv"]=_emscripten_glGetTexParameteriv;Module["_glGetTexParameteriv"]=_glGetTexParameteriv;Module["_emscripten_glGetTransformFeedbackVarying"]=_emscripten_glGetTransformFeedbackVarying;Module["_glGetTransformFeedbackVarying"]=_glGetTransformFeedbackVarying;Module["_emscripten_glGetUniformBlockIndex"]=_emscripten_glGetUniformBlockIndex;Module["_glGetUniformBlockIndex"]=_glGetUniformBlockIndex;Module["_emscripten_glGetUniformIndices"]=_emscripten_glGetUniformIndices;Module["_glGetUniformIndices"]=_glGetUniformIndices;Module["_emscripten_glGetUniformLocation"]=_emscripten_glGetUniformLocation;Module["_glGetUniformLocation"]=_glGetUniformLocation;Module["jstoi_q"]=jstoi_q;Module["webglPrepareUniformLocationsBeforeFirstUse"]=webglPrepareUniformLocationsBeforeFirstUse;Module["webglGetLeftBracePos"]=webglGetLeftBracePos;Module["_emscripten_glGetUniformfv"]=_emscripten_glGetUniformfv;Module["_glGetUniformfv"]=_glGetUniformfv;Module["emscriptenWebGLGetUniform"]=emscriptenWebGLGetUniform;Module["webglGetUniformLocation"]=webglGetUniformLocation;Module["_emscripten_glGetUniformiv"]=_emscripten_glGetUniformiv;Module["_glGetUniformiv"]=_glGetUniformiv;Module["_emscripten_glGetUniformuiv"]=_emscripten_glGetUniformuiv;Module["_glGetUniformuiv"]=_glGetUniformuiv;Module["_emscripten_glGetVertexAttribIiv"]=_emscripten_glGetVertexAttribIiv;Module["_glGetVertexAttribIiv"]=_glGetVertexAttribIiv;Module["emscriptenWebGLGetVertexAttrib"]=emscriptenWebGLGetVertexAttrib;Module["_emscripten_glGetVertexAttribIuiv"]=_emscripten_glGetVertexAttribIuiv;Module["_glGetVertexAttribIuiv"]=_glGetVertexAttribIuiv;Module["_emscripten_glGetVertexAttribPointerv"]=_emscripten_glGetVertexAttribPointerv;Module["_glGetVertexAttribPointerv"]=_glGetVertexAttribPointerv;Module["_emscripten_glGetVertexAttribfv"]=_emscripten_glGetVertexAttribfv;Module["_glGetVertexAttribfv"]=_glGetVertexAttribfv;Module["_emscripten_glGetVertexAttribiv"]=_emscripten_glGetVertexAttribiv;Module["_glGetVertexAttribiv"]=_glGetVertexAttribiv;Module["_emscripten_glHint"]=_emscripten_glHint;Module["_glHint"]=_glHint;Module["_emscripten_glInvalidateFramebuffer"]=_emscripten_glInvalidateFramebuffer;Module["_glInvalidateFramebuffer"]=_glInvalidateFramebuffer;Module["_emscripten_glInvalidateSubFramebuffer"]=_emscripten_glInvalidateSubFramebuffer;Module["_glInvalidateSubFramebuffer"]=_glInvalidateSubFramebuffer;Module["_emscripten_glIsBuffer"]=_emscripten_glIsBuffer;Module["_glIsBuffer"]=_glIsBuffer;Module["_emscripten_glIsEnabled"]=_emscripten_glIsEnabled;Module["_glIsEnabled"]=_glIsEnabled;Module["_emscripten_glIsFramebuffer"]=_emscripten_glIsFramebuffer;Module["_glIsFramebuffer"]=_glIsFramebuffer;Module["_emscripten_glIsProgram"]=_emscripten_glIsProgram;Module["_glIsProgram"]=_glIsProgram;Module["_emscripten_glIsQuery"]=_emscripten_glIsQuery;Module["_glIsQuery"]=_glIsQuery;Module["_emscripten_glIsQueryEXT"]=_emscripten_glIsQueryEXT;Module["_glIsQueryEXT"]=_glIsQueryEXT;Module["_emscripten_glIsRenderbuffer"]=_emscripten_glIsRenderbuffer;Module["_glIsRenderbuffer"]=_glIsRenderbuffer;Module["_emscripten_glIsSampler"]=_emscripten_glIsSampler;Module["_glIsSampler"]=_glIsSampler;Module["_emscripten_glIsShader"]=_emscripten_glIsShader;Module["_glIsShader"]=_glIsShader;Module["_emscripten_glIsSync"]=_emscripten_glIsSync;Module["_glIsSync"]=_glIsSync;Module["_emscripten_glIsTexture"]=_emscripten_glIsTexture;Module["_glIsTexture"]=_glIsTexture;Module["_emscripten_glIsTransformFeedback"]=_emscripten_glIsTransformFeedback;Module["_glIsTransformFeedback"]=_glIsTransformFeedback;Module["_emscripten_glIsVertexArray"]=_emscripten_glIsVertexArray;Module["_glIsVertexArray"]=_glIsVertexArray;Module["_emscripten_glIsVertexArrayOES"]=_emscripten_glIsVertexArrayOES;Module["_glIsVertexArrayOES"]=_glIsVertexArrayOES;Module["_emscripten_glLineWidth"]=_emscripten_glLineWidth;Module["_glLineWidth"]=_glLineWidth;Module["_emscripten_glLinkProgram"]=_emscripten_glLinkProgram;Module["_glLinkProgram"]=_glLinkProgram;Module["_emscripten_glPauseTransformFeedback"]=_emscripten_glPauseTransformFeedback;Module["_glPauseTransformFeedback"]=_glPauseTransformFeedback;Module["_emscripten_glPixelStorei"]=_emscripten_glPixelStorei;Module["_glPixelStorei"]=_glPixelStorei;Module["_emscripten_glPolygonModeWEBGL"]=_emscripten_glPolygonModeWEBGL;Module["_glPolygonModeWEBGL"]=_glPolygonModeWEBGL;Module["_emscripten_glPolygonOffset"]=_emscripten_glPolygonOffset;Module["_glPolygonOffset"]=_glPolygonOffset;Module["_emscripten_glPolygonOffsetClampEXT"]=_emscripten_glPolygonOffsetClampEXT;Module["_glPolygonOffsetClampEXT"]=_glPolygonOffsetClampEXT;Module["_emscripten_glProgramBinary"]=_emscripten_glProgramBinary;Module["_glProgramBinary"]=_glProgramBinary;Module["_emscripten_glProgramParameteri"]=_emscripten_glProgramParameteri;Module["_glProgramParameteri"]=_glProgramParameteri;Module["_emscripten_glQueryCounterEXT"]=_emscripten_glQueryCounterEXT;Module["_glQueryCounterEXT"]=_glQueryCounterEXT;Module["_emscripten_glReadBuffer"]=_emscripten_glReadBuffer;Module["_glReadBuffer"]=_glReadBuffer;Module["_emscripten_glReadPixels"]=_emscripten_glReadPixels;Module["_glReadPixels"]=_glReadPixels;Module["emscriptenWebGLGetTexPixelData"]=emscriptenWebGLGetTexPixelData;Module["computeUnpackAlignedImageSize"]=computeUnpackAlignedImageSize;Module["colorChannelsInGlTextureFormat"]=colorChannelsInGlTextureFormat;Module["heapObjectForWebGLType"]=heapObjectForWebGLType;Module["toTypedArrayIndex"]=toTypedArrayIndex;Module["_emscripten_glReleaseShaderCompiler"]=_emscripten_glReleaseShaderCompiler;Module["_glReleaseShaderCompiler"]=_glReleaseShaderCompiler;Module["_emscripten_glRenderbufferStorage"]=_emscripten_glRenderbufferStorage;Module["_glRenderbufferStorage"]=_glRenderbufferStorage;Module["_emscripten_glRenderbufferStorageMultisample"]=_emscripten_glRenderbufferStorageMultisample;Module["_glRenderbufferStorageMultisample"]=_glRenderbufferStorageMultisample;Module["_emscripten_glResumeTransformFeedback"]=_emscripten_glResumeTransformFeedback;Module["_glResumeTransformFeedback"]=_glResumeTransformFeedback;Module["_emscripten_glSampleCoverage"]=_emscripten_glSampleCoverage;Module["_glSampleCoverage"]=_glSampleCoverage;Module["_emscripten_glSamplerParameterf"]=_emscripten_glSamplerParameterf;Module["_glSamplerParameterf"]=_glSamplerParameterf;Module["_emscripten_glSamplerParameterfv"]=_emscripten_glSamplerParameterfv;Module["_glSamplerParameterfv"]=_glSamplerParameterfv;Module["_emscripten_glSamplerParameteri"]=_emscripten_glSamplerParameteri;Module["_glSamplerParameteri"]=_glSamplerParameteri;Module["_emscripten_glSamplerParameteriv"]=_emscripten_glSamplerParameteriv;Module["_glSamplerParameteriv"]=_glSamplerParameteriv;Module["_emscripten_glScissor"]=_emscripten_glScissor;Module["_glScissor"]=_glScissor;Module["_emscripten_glShaderBinary"]=_emscripten_glShaderBinary;Module["_glShaderBinary"]=_glShaderBinary;Module["_emscripten_glShaderSource"]=_emscripten_glShaderSource;Module["_glShaderSource"]=_glShaderSource;Module["_emscripten_glStencilFunc"]=_emscripten_glStencilFunc;Module["_glStencilFunc"]=_glStencilFunc;Module["_emscripten_glStencilFuncSeparate"]=_emscripten_glStencilFuncSeparate;Module["_glStencilFuncSeparate"]=_glStencilFuncSeparate;Module["_emscripten_glStencilMask"]=_emscripten_glStencilMask;Module["_glStencilMask"]=_glStencilMask;Module["_emscripten_glStencilMaskSeparate"]=_emscripten_glStencilMaskSeparate;Module["_glStencilMaskSeparate"]=_glStencilMaskSeparate;Module["_emscripten_glStencilOp"]=_emscripten_glStencilOp;Module["_glStencilOp"]=_glStencilOp;Module["_emscripten_glStencilOpSeparate"]=_emscripten_glStencilOpSeparate;Module["_glStencilOpSeparate"]=_glStencilOpSeparate;Module["_emscripten_glTexImage2D"]=_emscripten_glTexImage2D;Module["_glTexImage2D"]=_glTexImage2D;Module["_emscripten_glTexImage3D"]=_emscripten_glTexImage3D;Module["_glTexImage3D"]=_glTexImage3D;Module["_emscripten_glTexParameterf"]=_emscripten_glTexParameterf;Module["_glTexParameterf"]=_glTexParameterf;Module["_emscripten_glTexParameterfv"]=_emscripten_glTexParameterfv;Module["_glTexParameterfv"]=_glTexParameterfv;Module["_emscripten_glTexParameteri"]=_emscripten_glTexParameteri;Module["_glTexParameteri"]=_glTexParameteri;Module["_emscripten_glTexParameteriv"]=_emscripten_glTexParameteriv;Module["_glTexParameteriv"]=_glTexParameteriv;Module["_emscripten_glTexStorage2D"]=_emscripten_glTexStorage2D;Module["_glTexStorage2D"]=_glTexStorage2D;Module["_emscripten_glTexStorage3D"]=_emscripten_glTexStorage3D;Module["_glTexStorage3D"]=_glTexStorage3D;Module["_emscripten_glTexSubImage2D"]=_emscripten_glTexSubImage2D;Module["_glTexSubImage2D"]=_glTexSubImage2D;Module["_emscripten_glTexSubImage3D"]=_emscripten_glTexSubImage3D;Module["_glTexSubImage3D"]=_glTexSubImage3D;Module["_emscripten_glTransformFeedbackVaryings"]=_emscripten_glTransformFeedbackVaryings;Module["_glTransformFeedbackVaryings"]=_glTransformFeedbackVaryings;Module["_emscripten_glUniform1f"]=_emscripten_glUniform1f;Module["_glUniform1f"]=_glUniform1f;Module["_emscripten_glUniform1fv"]=_emscripten_glUniform1fv;Module["_glUniform1fv"]=_glUniform1fv;Module["miniTempWebGLFloatBuffers"]=miniTempWebGLFloatBuffers;Module["_emscripten_glUniform1i"]=_emscripten_glUniform1i;Module["_glUniform1i"]=_glUniform1i;Module["_emscripten_glUniform1iv"]=_emscripten_glUniform1iv;Module["_glUniform1iv"]=_glUniform1iv;Module["miniTempWebGLIntBuffers"]=miniTempWebGLIntBuffers;Module["_emscripten_glUniform1ui"]=_emscripten_glUniform1ui;Module["_glUniform1ui"]=_glUniform1ui;Module["_emscripten_glUniform1uiv"]=_emscripten_glUniform1uiv;Module["_glUniform1uiv"]=_glUniform1uiv;Module["_emscripten_glUniform2f"]=_emscripten_glUniform2f;Module["_glUniform2f"]=_glUniform2f;Module["_emscripten_glUniform2fv"]=_emscripten_glUniform2fv;Module["_glUniform2fv"]=_glUniform2fv;Module["_emscripten_glUniform2i"]=_emscripten_glUniform2i;Module["_glUniform2i"]=_glUniform2i;Module["_emscripten_glUniform2iv"]=_emscripten_glUniform2iv;Module["_glUniform2iv"]=_glUniform2iv;Module["_emscripten_glUniform2ui"]=_emscripten_glUniform2ui;Module["_glUniform2ui"]=_glUniform2ui;Module["_emscripten_glUniform2uiv"]=_emscripten_glUniform2uiv;Module["_glUniform2uiv"]=_glUniform2uiv;Module["_emscripten_glUniform3f"]=_emscripten_glUniform3f;Module["_glUniform3f"]=_glUniform3f;Module["_emscripten_glUniform3fv"]=_emscripten_glUniform3fv;Module["_glUniform3fv"]=_glUniform3fv;Module["_emscripten_glUniform3i"]=_emscripten_glUniform3i;Module["_glUniform3i"]=_glUniform3i;Module["_emscripten_glUniform3iv"]=_emscripten_glUniform3iv;Module["_glUniform3iv"]=_glUniform3iv;Module["_emscripten_glUniform3ui"]=_emscripten_glUniform3ui;Module["_glUniform3ui"]=_glUniform3ui;Module["_emscripten_glUniform3uiv"]=_emscripten_glUniform3uiv;Module["_glUniform3uiv"]=_glUniform3uiv;Module["_emscripten_glUniform4f"]=_emscripten_glUniform4f;Module["_glUniform4f"]=_glUniform4f;Module["_emscripten_glUniform4fv"]=_emscripten_glUniform4fv;Module["_glUniform4fv"]=_glUniform4fv;Module["_emscripten_glUniform4i"]=_emscripten_glUniform4i;Module["_glUniform4i"]=_glUniform4i;Module["_emscripten_glUniform4iv"]=_emscripten_glUniform4iv;Module["_glUniform4iv"]=_glUniform4iv;Module["_emscripten_glUniform4ui"]=_emscripten_glUniform4ui;Module["_glUniform4ui"]=_glUniform4ui;Module["_emscripten_glUniform4uiv"]=_emscripten_glUniform4uiv;Module["_glUniform4uiv"]=_glUniform4uiv;Module["_emscripten_glUniformBlockBinding"]=_emscripten_glUniformBlockBinding;Module["_glUniformBlockBinding"]=_glUniformBlockBinding;Module["_emscripten_glUniformMatrix2fv"]=_emscripten_glUniformMatrix2fv;Module["_glUniformMatrix2fv"]=_glUniformMatrix2fv;Module["_emscripten_glUniformMatrix2x3fv"]=_emscripten_glUniformMatrix2x3fv;Module["_glUniformMatrix2x3fv"]=_glUniformMatrix2x3fv;Module["_emscripten_glUniformMatrix2x4fv"]=_emscripten_glUniformMatrix2x4fv;Module["_glUniformMatrix2x4fv"]=_glUniformMatrix2x4fv;Module["_emscripten_glUniformMatrix3fv"]=_emscripten_glUniformMatrix3fv;Module["_glUniformMatrix3fv"]=_glUniformMatrix3fv;Module["_emscripten_glUniformMatrix3x2fv"]=_emscripten_glUniformMatrix3x2fv;Module["_glUniformMatrix3x2fv"]=_glUniformMatrix3x2fv;Module["_emscripten_glUniformMatrix3x4fv"]=_emscripten_glUniformMatrix3x4fv;Module["_glUniformMatrix3x4fv"]=_glUniformMatrix3x4fv;Module["_emscripten_glUniformMatrix4fv"]=_emscripten_glUniformMatrix4fv;Module["_glUniformMatrix4fv"]=_glUniformMatrix4fv;Module["_emscripten_glUniformMatrix4x2fv"]=_emscripten_glUniformMatrix4x2fv;Module["_glUniformMatrix4x2fv"]=_glUniformMatrix4x2fv;Module["_emscripten_glUniformMatrix4x3fv"]=_emscripten_glUniformMatrix4x3fv;Module["_glUniformMatrix4x3fv"]=_glUniformMatrix4x3fv;Module["_emscripten_glUseProgram"]=_emscripten_glUseProgram;Module["_glUseProgram"]=_glUseProgram;Module["_emscripten_glValidateProgram"]=_emscripten_glValidateProgram;Module["_glValidateProgram"]=_glValidateProgram;Module["_emscripten_glVertexAttrib1f"]=_emscripten_glVertexAttrib1f;Module["_glVertexAttrib1f"]=_glVertexAttrib1f;Module["_emscripten_glVertexAttrib1fv"]=_emscripten_glVertexAttrib1fv;Module["_glVertexAttrib1fv"]=_glVertexAttrib1fv;Module["_emscripten_glVertexAttrib2f"]=_emscripten_glVertexAttrib2f;Module["_glVertexAttrib2f"]=_glVertexAttrib2f;Module["_emscripten_glVertexAttrib2fv"]=_emscripten_glVertexAttrib2fv;Module["_glVertexAttrib2fv"]=_glVertexAttrib2fv;Module["_emscripten_glVertexAttrib3f"]=_emscripten_glVertexAttrib3f;Module["_glVertexAttrib3f"]=_glVertexAttrib3f;Module["_emscripten_glVertexAttrib3fv"]=_emscripten_glVertexAttrib3fv;Module["_glVertexAttrib3fv"]=_glVertexAttrib3fv;Module["_emscripten_glVertexAttrib4f"]=_emscripten_glVertexAttrib4f;Module["_glVertexAttrib4f"]=_glVertexAttrib4f;Module["_emscripten_glVertexAttrib4fv"]=_emscripten_glVertexAttrib4fv;Module["_glVertexAttrib4fv"]=_glVertexAttrib4fv;Module["_emscripten_glVertexAttribDivisor"]=_emscripten_glVertexAttribDivisor;Module["_glVertexAttribDivisor"]=_glVertexAttribDivisor;Module["_emscripten_glVertexAttribDivisorANGLE"]=_emscripten_glVertexAttribDivisorANGLE;Module["_glVertexAttribDivisorANGLE"]=_glVertexAttribDivisorANGLE;Module["_emscripten_glVertexAttribDivisorARB"]=_emscripten_glVertexAttribDivisorARB;Module["_glVertexAttribDivisorARB"]=_glVertexAttribDivisorARB;Module["_emscripten_glVertexAttribDivisorEXT"]=_emscripten_glVertexAttribDivisorEXT;Module["_glVertexAttribDivisorEXT"]=_glVertexAttribDivisorEXT;Module["_emscripten_glVertexAttribDivisorNV"]=_emscripten_glVertexAttribDivisorNV;Module["_glVertexAttribDivisorNV"]=_glVertexAttribDivisorNV;Module["_emscripten_glVertexAttribI4i"]=_emscripten_glVertexAttribI4i;Module["_glVertexAttribI4i"]=_glVertexAttribI4i;Module["_emscripten_glVertexAttribI4iv"]=_emscripten_glVertexAttribI4iv;Module["_glVertexAttribI4iv"]=_glVertexAttribI4iv;Module["_emscripten_glVertexAttribI4ui"]=_emscripten_glVertexAttribI4ui;Module["_glVertexAttribI4ui"]=_glVertexAttribI4ui;Module["_emscripten_glVertexAttribI4uiv"]=_emscripten_glVertexAttribI4uiv;Module["_glVertexAttribI4uiv"]=_glVertexAttribI4uiv;Module["_emscripten_glVertexAttribIPointer"]=_emscripten_glVertexAttribIPointer;Module["_glVertexAttribIPointer"]=_glVertexAttribIPointer;Module["_emscripten_glVertexAttribPointer"]=_emscripten_glVertexAttribPointer;Module["_glVertexAttribPointer"]=_glVertexAttribPointer;Module["_emscripten_glViewport"]=_emscripten_glViewport;Module["_glViewport"]=_glViewport;Module["_emscripten_glWaitSync"]=_emscripten_glWaitSync;Module["_glWaitSync"]=_glWaitSync;Module["_emscripten_out"]=_emscripten_out;Module["_emscripten_promise_create"]=_emscripten_promise_create;Module["makePromise"]=makePromise;Module["promiseMap"]=promiseMap;Module["HandleAllocator"]=HandleAllocator;Module["_emscripten_promise_destroy"]=_emscripten_promise_destroy;Module["_emscripten_promise_resolve"]=_emscripten_promise_resolve;Module["getPromise"]=getPromise;Module["_emscripten_resize_heap"]=_emscripten_resize_heap;Module["growMemory"]=growMemory;Module["_emscripten_runtime_keepalive_pop"]=_emscripten_runtime_keepalive_pop;Module["_emscripten_runtime_keepalive_push"]=_emscripten_runtime_keepalive_push;Module["_environ_get"]=_environ_get;Module["getEnvStrings"]=getEnvStrings;Module["ENV"]=ENV;Module["_environ_sizes_get"]=_environ_sizes_get;Module["_fd_close"]=_fd_close;Module["_fd_fdstat_get"]=_fd_fdstat_get;Module["_fd_pread"]=_fd_pread;Module["doReadv"]=doReadv;Module["_fd_pwrite"]=_fd_pwrite;Module["doWritev"]=doWritev;Module["_fd_read"]=_fd_read;Module["_fd_seek"]=_fd_seek;Module["_fd_sync"]=_fd_sync;Module["_fd_write"]=_fd_write;Module["_getaddrinfo"]=_getaddrinfo;Module["_getnameinfo"]=_getnameinfo;Module["_getprotobyname"]=_getprotobyname;Module["_setprotoent"]=_setprotoent;Module["Protocols"]=Protocols;Module["stringToAscii"]=stringToAscii;Module["_is_sentinel"]=_is_sentinel;Module["_random_get"]=_random_get;Module["_stackAlloc"]=_stackAlloc;Module["_stackRestore"]=_stackRestore;Module["_stackSave"]=_stackSave;Module["FS_createPath"]=FS_createPath;Module["FS_unlink"]=FS_unlink;Module["FS_createLazyFile"]=FS_createLazyFile;Module["FS_createDevice"]=FS_createDevice;Module["writeI53ToI64Clamped"]=writeI53ToI64Clamped;Module["writeI53ToI64Signaling"]=writeI53ToI64Signaling;Module["writeI53ToU64Clamped"]=writeI53ToU64Clamped;Module["writeI53ToU64Signaling"]=writeI53ToU64Signaling;Module["readI53FromU64"]=readI53FromU64;Module["convertI32PairToI53"]=convertI32PairToI53;Module["convertI32PairToI53Checked"]=convertI32PairToI53Checked;Module["convertU32PairToI53"]=convertU32PairToI53;Module["getTempRet0"]=getTempRet0;Module["setTempRet0"]=setTempRet0;Module["ptrToString"]=ptrToString;Module["_emscripten_notify_memory_growth"]=_emscripten_notify_memory_growth;Module["strError"]=strError;Module["_endprotoent"]=_endprotoent;Module["_getprotoent"]=_getprotoent;Module["_getprotobynumber"]=_getprotobynumber;Module["Sockets"]=Sockets;Module["_emscripten_run_script"]=_emscripten_run_script;Module["_emscripten_run_script_int"]=_emscripten_run_script_int;Module["_emscripten_run_script_string"]=_emscripten_run_script_string;Module["_emscripten_random"]=_emscripten_random;Module["_emscripten_performance_now"]=_emscripten_performance_now;Module["__emscripten_get_now_is_monotonic"]=__emscripten_get_now_is_monotonic;Module["warnOnce"]=warnOnce;Module["emscriptenLog"]=emscriptenLog;Module["getCallstack"]=getCallstack;Module["jsStackTrace"]=jsStackTrace;Module["_emscripten_log"]=_emscripten_log;Module["formatString"]=formatString;Module["reallyNegative"]=reallyNegative;Module["reSign"]=reSign;Module["unSign"]=unSign;Module["strLen"]=strLen;Module["_emscripten_get_compiler_setting"]=_emscripten_get_compiler_setting;Module["_emscripten_has_asyncify"]=_emscripten_has_asyncify;Module["_emscripten_debugger"]=_emscripten_debugger;Module["_emscripten_print_double"]=_emscripten_print_double;Module["_emscripten_asm_const_double"]=_emscripten_asm_const_double;Module["_emscripten_asm_const_ptr"]=_emscripten_asm_const_ptr;Module["runMainThreadEmAsm"]=runMainThreadEmAsm;Module["_emscripten_asm_const_int_sync_on_main_thread"]=_emscripten_asm_const_int_sync_on_main_thread;Module["_emscripten_asm_const_ptr_sync_on_main_thread"]=_emscripten_asm_const_ptr_sync_on_main_thread;Module["_emscripten_asm_const_double_sync_on_main_thread"]=_emscripten_asm_const_double_sync_on_main_thread;Module["_emscripten_asm_const_async_on_main_thread"]=_emscripten_asm_const_async_on_main_thread;Module["__Unwind_Backtrace"]=__Unwind_Backtrace;Module["__Unwind_GetIPInfo"]=__Unwind_GetIPInfo;Module["__Unwind_FindEnclosingFunction"]=__Unwind_FindEnclosingFunction;Module["listenOnce"]=listenOnce;Module["autoResumeAudioContext"]=autoResumeAudioContext;Module["getDynCaller"]=getDynCaller;Module["dynCall"]=dynCall;Module["_emscripten_exit_with_live_runtime"]=_emscripten_exit_with_live_runtime;Module["_emscripten_force_exit"]=_emscripten_force_exit;Module["_emscripten_outn"]=_emscripten_outn;Module["_emscripten_errn"]=_emscripten_errn;Module["_emscripten_throw_number"]=_emscripten_throw_number;Module["_emscripten_throw_string"]=_emscripten_throw_string;Module["_emscripten_runtime_keepalive_check"]=_emscripten_runtime_keepalive_check;Module["asmjsMangle"]=asmjsMangle;Module["___global_base"]=___global_base;Module["__emscripten_fs_load_embedded_files"]=__emscripten_fs_load_embedded_files;Module["getNativeTypeSize"]=getNativeTypeSize;Module["POINTER_SIZE"]=POINTER_SIZE;Module["onInits"]=onInits;Module["addOnInit"]=addOnInit;Module["onMains"]=onMains;Module["addOnPreMain"]=addOnPreMain;Module["onExits"]=onExits;Module["addOnExit"]=addOnExit;Module["STACK_SIZE"]=STACK_SIZE;Module["STACK_ALIGN"]=STACK_ALIGN;Module["ASSERTIONS"]=ASSERTIONS;Module["getCFunc"]=getCFunc;Module["ccall"]=ccall;Module["writeArrayToMemory"]=writeArrayToMemory;Module["cwrap"]=cwrap;Module["removeFunction"]=removeFunction;Module["_emscripten_math_cbrt"]=_emscripten_math_cbrt;Module["_emscripten_math_pow"]=_emscripten_math_pow;Module["_emscripten_math_random"]=_emscripten_math_random;Module["_emscripten_math_sign"]=_emscripten_math_sign;Module["_emscripten_math_sqrt"]=_emscripten_math_sqrt;Module["_emscripten_math_exp"]=_emscripten_math_exp;Module["_emscripten_math_expm1"]=_emscripten_math_expm1;Module["_emscripten_math_fmod"]=_emscripten_math_fmod;Module["_emscripten_math_log"]=_emscripten_math_log;Module["_emscripten_math_log1p"]=_emscripten_math_log1p;Module["_emscripten_math_log10"]=_emscripten_math_log10;Module["_emscripten_math_log2"]=_emscripten_math_log2;Module["_emscripten_math_round"]=_emscripten_math_round;Module["_emscripten_math_acos"]=_emscripten_math_acos;Module["_emscripten_math_acosh"]=_emscripten_math_acosh;Module["_emscripten_math_asin"]=_emscripten_math_asin;Module["_emscripten_math_asinh"]=_emscripten_math_asinh;Module["_emscripten_math_atan"]=_emscripten_math_atan;Module["_emscripten_math_atanh"]=_emscripten_math_atanh;Module["_emscripten_math_atan2"]=_emscripten_math_atan2;Module["_emscripten_math_cos"]=_emscripten_math_cos;Module["_emscripten_math_cosh"]=_emscripten_math_cosh;Module["_emscripten_math_hypot"]=_emscripten_math_hypot;Module["_emscripten_math_sin"]=_emscripten_math_sin;Module["_emscripten_math_sinh"]=_emscripten_math_sinh;Module["_emscripten_math_tan"]=_emscripten_math_tan;Module["_emscripten_math_tanh"]=_emscripten_math_tanh;Module["intArrayToString"]=intArrayToString;Module["AsciiToString"]=AsciiToString;Module["UTF16Decoder"]=UTF16Decoder;Module["UTF16ToString"]=UTF16ToString;Module["stringToUTF16"]=stringToUTF16;Module["lengthBytesUTF16"]=lengthBytesUTF16;Module["UTF32ToString"]=UTF32ToString;Module["stringToUTF32"]=stringToUTF32;Module["lengthBytesUTF32"]=lengthBytesUTF32;Module["JSEvents"]=JSEvents;Module["registerKeyEventCallback"]=registerKeyEventCallback;Module["findEventTarget"]=findEventTarget;Module["maybeCStringToJsString"]=maybeCStringToJsString;Module["specialHTMLTargets"]=specialHTMLTargets;Module["findCanvasEventTarget"]=findCanvasEventTarget;Module["_emscripten_set_keypress_callback_on_thread"]=_emscripten_set_keypress_callback_on_thread;Module["_emscripten_set_keydown_callback_on_thread"]=_emscripten_set_keydown_callback_on_thread;Module["_emscripten_set_keyup_callback_on_thread"]=_emscripten_set_keyup_callback_on_thread;Module["getBoundingClientRect"]=getBoundingClientRect;Module["fillMouseEventData"]=fillMouseEventData;Module["registerMouseEventCallback"]=registerMouseEventCallback;Module["_emscripten_set_click_callback_on_thread"]=_emscripten_set_click_callback_on_thread;Module["_emscripten_set_mousedown_callback_on_thread"]=_emscripten_set_mousedown_callback_on_thread;Module["_emscripten_set_mouseup_callback_on_thread"]=_emscripten_set_mouseup_callback_on_thread;Module["_emscripten_set_dblclick_callback_on_thread"]=_emscripten_set_dblclick_callback_on_thread;Module["_emscripten_set_mousemove_callback_on_thread"]=_emscripten_set_mousemove_callback_on_thread;Module["_emscripten_set_mouseenter_callback_on_thread"]=_emscripten_set_mouseenter_callback_on_thread;Module["_emscripten_set_mouseleave_callback_on_thread"]=_emscripten_set_mouseleave_callback_on_thread;Module["_emscripten_set_mouseover_callback_on_thread"]=_emscripten_set_mouseover_callback_on_thread;Module["_emscripten_set_mouseout_callback_on_thread"]=_emscripten_set_mouseout_callback_on_thread;Module["_emscripten_get_mouse_status"]=_emscripten_get_mouse_status;Module["registerWheelEventCallback"]=registerWheelEventCallback;Module["_emscripten_set_wheel_callback_on_thread"]=_emscripten_set_wheel_callback_on_thread;Module["registerUiEventCallback"]=registerUiEventCallback;Module["_emscripten_set_resize_callback_on_thread"]=_emscripten_set_resize_callback_on_thread;Module["_emscripten_set_scroll_callback_on_thread"]=_emscripten_set_scroll_callback_on_thread;Module["registerFocusEventCallback"]=registerFocusEventCallback;Module["_emscripten_set_blur_callback_on_thread"]=_emscripten_set_blur_callback_on_thread;Module["_emscripten_set_focus_callback_on_thread"]=_emscripten_set_focus_callback_on_thread;Module["_emscripten_set_focusin_callback_on_thread"]=_emscripten_set_focusin_callback_on_thread;Module["_emscripten_set_focusout_callback_on_thread"]=_emscripten_set_focusout_callback_on_thread;Module["fillDeviceOrientationEventData"]=fillDeviceOrientationEventData;Module["registerDeviceOrientationEventCallback"]=registerDeviceOrientationEventCallback;Module["_emscripten_set_deviceorientation_callback_on_thread"]=_emscripten_set_deviceorientation_callback_on_thread;Module["_emscripten_get_deviceorientation_status"]=_emscripten_get_deviceorientation_status;Module["fillDeviceMotionEventData"]=fillDeviceMotionEventData;Module["registerDeviceMotionEventCallback"]=registerDeviceMotionEventCallback;Module["_emscripten_set_devicemotion_callback_on_thread"]=_emscripten_set_devicemotion_callback_on_thread;Module["_emscripten_get_devicemotion_status"]=_emscripten_get_devicemotion_status;Module["screenOrientation"]=screenOrientation;Module["fillOrientationChangeEventData"]=fillOrientationChangeEventData;Module["registerOrientationChangeEventCallback"]=registerOrientationChangeEventCallback;Module["_emscripten_set_orientationchange_callback_on_thread"]=_emscripten_set_orientationchange_callback_on_thread;Module["_emscripten_get_orientation_status"]=_emscripten_get_orientation_status;Module["_emscripten_lock_orientation"]=_emscripten_lock_orientation;Module["_emscripten_unlock_orientation"]=_emscripten_unlock_orientation;Module["fillFullscreenChangeEventData"]=fillFullscreenChangeEventData;Module["registerFullscreenChangeEventCallback"]=registerFullscreenChangeEventCallback;Module["_emscripten_set_fullscreenchange_callback_on_thread"]=_emscripten_set_fullscreenchange_callback_on_thread;Module["_emscripten_get_fullscreen_status"]=_emscripten_get_fullscreen_status;Module["JSEvents_requestFullscreen"]=JSEvents_requestFullscreen;Module["JSEvents_resizeCanvasForFullscreen"]=JSEvents_resizeCanvasForFullscreen;Module["registerRestoreOldStyle"]=registerRestoreOldStyle;Module["getCanvasElementSize"]=getCanvasElementSize;Module["_emscripten_get_canvas_element_size"]=_emscripten_get_canvas_element_size;Module["setCanvasElementSize"]=setCanvasElementSize;Module["_emscripten_set_canvas_element_size"]=_emscripten_set_canvas_element_size;Module["currentFullscreenStrategy"]=currentFullscreenStrategy;Module["setLetterbox"]=setLetterbox;Module["hideEverythingExceptGivenElement"]=hideEverythingExceptGivenElement;Module["restoreHiddenElements"]=restoreHiddenElements;Module["restoreOldWindowedStyle"]=restoreOldWindowedStyle;Module["softFullscreenResizeWebGLRenderTarget"]=softFullscreenResizeWebGLRenderTarget;Module["doRequestFullscreen"]=doRequestFullscreen;Module["_emscripten_request_fullscreen"]=_emscripten_request_fullscreen;Module["_emscripten_request_fullscreen_strategy"]=_emscripten_request_fullscreen_strategy;Module["_emscripten_enter_soft_fullscreen"]=_emscripten_enter_soft_fullscreen;Module["_emscripten_exit_soft_fullscreen"]=_emscripten_exit_soft_fullscreen;Module["_emscripten_exit_fullscreen"]=_emscripten_exit_fullscreen;Module["fillPointerlockChangeEventData"]=fillPointerlockChangeEventData;Module["registerPointerlockChangeEventCallback"]=registerPointerlockChangeEventCallback;Module["_emscripten_set_pointerlockchange_callback_on_thread"]=_emscripten_set_pointerlockchange_callback_on_thread;Module["registerPointerlockErrorEventCallback"]=registerPointerlockErrorEventCallback;Module["_emscripten_set_pointerlockerror_callback_on_thread"]=_emscripten_set_pointerlockerror_callback_on_thread;Module["_emscripten_get_pointerlock_status"]=_emscripten_get_pointerlock_status;Module["requestPointerLock"]=requestPointerLock;Module["_emscripten_request_pointerlock"]=_emscripten_request_pointerlock;Module["_emscripten_exit_pointerlock"]=_emscripten_exit_pointerlock;Module["_emscripten_vibrate"]=_emscripten_vibrate;Module["_emscripten_vibrate_pattern"]=_emscripten_vibrate_pattern;Module["fillVisibilityChangeEventData"]=fillVisibilityChangeEventData;Module["registerVisibilityChangeEventCallback"]=registerVisibilityChangeEventCallback;Module["_emscripten_set_visibilitychange_callback_on_thread"]=_emscripten_set_visibilitychange_callback_on_thread;Module["_emscripten_get_visibility_status"]=_emscripten_get_visibility_status;Module["registerTouchEventCallback"]=registerTouchEventCallback;Module["_emscripten_set_touchstart_callback_on_thread"]=_emscripten_set_touchstart_callback_on_thread;Module["_emscripten_set_touchend_callback_on_thread"]=_emscripten_set_touchend_callback_on_thread;Module["_emscripten_set_touchmove_callback_on_thread"]=_emscripten_set_touchmove_callback_on_thread;Module["_emscripten_set_touchcancel_callback_on_thread"]=_emscripten_set_touchcancel_callback_on_thread;Module["fillGamepadEventData"]=fillGamepadEventData;Module["registerGamepadEventCallback"]=registerGamepadEventCallback;Module["_emscripten_set_gamepadconnected_callback_on_thread"]=_emscripten_set_gamepadconnected_callback_on_thread;Module["_emscripten_sample_gamepad_data"]=_emscripten_sample_gamepad_data;Module["_emscripten_set_gamepaddisconnected_callback_on_thread"]=_emscripten_set_gamepaddisconnected_callback_on_thread;Module["_emscripten_get_num_gamepads"]=_emscripten_get_num_gamepads;Module["_emscripten_get_gamepad_status"]=_emscripten_get_gamepad_status;Module["registerBeforeUnloadEventCallback"]=registerBeforeUnloadEventCallback;Module["_emscripten_set_beforeunload_callback_on_thread"]=_emscripten_set_beforeunload_callback_on_thread;Module["fillBatteryEventData"]=fillBatteryEventData;Module["battery"]=battery;Module["registerBatteryEventCallback"]=registerBatteryEventCallback;Module["_emscripten_set_batterychargingchange_callback_on_thread"]=_emscripten_set_batterychargingchange_callback_on_thread;Module["_emscripten_set_batterylevelchange_callback_on_thread"]=_emscripten_set_batterylevelchange_callback_on_thread;Module["_emscripten_get_battery_status"]=_emscripten_get_battery_status;Module["_emscripten_set_element_css_size"]=_emscripten_set_element_css_size;Module["_emscripten_get_element_css_size"]=_emscripten_get_element_css_size;Module["_emscripten_html5_remove_all_event_listeners"]=_emscripten_html5_remove_all_event_listeners;Module["_emscripten_request_animation_frame"]=_emscripten_request_animation_frame;Module["_emscripten_cancel_animation_frame"]=_emscripten_cancel_animation_frame;Module["_emscripten_request_animation_frame_loop"]=_emscripten_request_animation_frame_loop;Module["_emscripten_get_device_pixel_ratio"]=_emscripten_get_device_pixel_ratio;Module["_emscripten_get_callstack"]=_emscripten_get_callstack;Module["convertFrameToPC"]=convertFrameToPC;Module["_emscripten_return_address"]=_emscripten_return_address;Module["UNWIND_CACHE"]=UNWIND_CACHE;Module["_emscripten_stack_snapshot"]=_emscripten_stack_snapshot;Module["saveInUnwindCache"]=saveInUnwindCache;Module["_emscripten_stack_unwind_buffer"]=_emscripten_stack_unwind_buffer;Module["_emscripten_pc_get_function"]=_emscripten_pc_get_function;Module["convertPCtoSourceLocation"]=convertPCtoSourceLocation;Module["_emscripten_pc_get_file"]=_emscripten_pc_get_file;Module["_emscripten_pc_get_line"]=_emscripten_pc_get_line;Module["_emscripten_pc_get_column"]=_emscripten_pc_get_column;Module["wasiRightsToMuslOFlags"]=wasiRightsToMuslOFlags;Module["wasiOFlagsToMuslOFlags"]=wasiOFlagsToMuslOFlags;Module["_emscripten_unwind_to_js_event_loop"]=_emscripten_unwind_to_js_event_loop;Module["safeSetTimeout"]=safeSetTimeout;Module["setImmediateWrapped"]=setImmediateWrapped;Module["safeRequestAnimationFrame"]=safeRequestAnimationFrame;Module["MainLoop"]=MainLoop;Module["setMainLoop"]=setMainLoop;Module["_emscripten_set_main_loop_timing"]=_emscripten_set_main_loop_timing;Module["clearImmediateWrapped"]=clearImmediateWrapped;Module["emSetImmediate"]=emSetImmediate;Module["emClearImmediate"]=emClearImmediate;Module["emClearImmediate_deps"]=emClearImmediate_deps;Module["_emscripten_set_immediate"]=_emscripten_set_immediate;Module["_emscripten_clear_immediate"]=_emscripten_clear_immediate;Module["_emscripten_set_immediate_loop"]=_emscripten_set_immediate_loop;Module["_emscripten_set_timeout"]=_emscripten_set_timeout;Module["_emscripten_clear_timeout"]=_emscripten_clear_timeout;Module["_emscripten_set_timeout_loop"]=_emscripten_set_timeout_loop;Module["_emscripten_set_interval"]=_emscripten_set_interval;Module["_emscripten_clear_interval"]=_emscripten_clear_interval;Module["_emscripten_async_call"]=_emscripten_async_call;Module["registerPostMainLoop"]=registerPostMainLoop;Module["registerPreMainLoop"]=registerPreMainLoop;Module["_emscripten_get_main_loop_timing"]=_emscripten_get_main_loop_timing;Module["_emscripten_set_main_loop"]=_emscripten_set_main_loop;Module["_emscripten_set_main_loop_arg"]=_emscripten_set_main_loop_arg;Module["_emscripten_cancel_main_loop"]=_emscripten_cancel_main_loop;Module["_emscripten_pause_main_loop"]=_emscripten_pause_main_loop;Module["_emscripten_resume_main_loop"]=_emscripten_resume_main_loop;Module["__emscripten_push_main_loop_blocker"]=__emscripten_push_main_loop_blocker;Module["__emscripten_push_uncounted_main_loop_blocker"]=__emscripten_push_uncounted_main_loop_blocker;Module["_emscripten_set_main_loop_expected_blockers"]=_emscripten_set_main_loop_expected_blockers;Module["idsToPromises"]=idsToPromises;Module["makePromiseCallback"]=makePromiseCallback;Module["_emscripten_promise_then"]=_emscripten_promise_then;Module["_emscripten_promise_all"]=_emscripten_promise_all;Module["setPromiseResult"]=setPromiseResult;Module["_emscripten_promise_all_settled"]=_emscripten_promise_all_settled;Module["_emscripten_promise_any"]=_emscripten_promise_any;Module["_emscripten_promise_race"]=_emscripten_promise_race;Module["_emscripten_promise_await"]=_emscripten_promise_await;Module["getExceptionMessageCommon"]=getExceptionMessageCommon;Module["getCppExceptionTag"]=getCppExceptionTag;Module["getCppExceptionThrownObjectFromWebAssemblyException"]=getCppExceptionThrownObjectFromWebAssemblyException;Module["incrementExceptionRefcount"]=incrementExceptionRefcount;Module["decrementExceptionRefcount"]=decrementExceptionRefcount;Module["getExceptionMessage"]=getExceptionMessage;Module["Browser"]=Browser;Module["requestFullscreen"]=requestFullscreen;Module["setCanvasSize"]=setCanvasSize;Module["getUserMedia"]=getUserMedia;Module["createContext"]=createContext;Module["_emscripten_run_preload_plugins"]=_emscripten_run_preload_plugins;Module["Browser_asyncPrepareDataCounter"]=Browser_asyncPrepareDataCounter;Module["_emscripten_run_preload_plugins_data"]=_emscripten_run_preload_plugins_data;Module["_emscripten_async_run_script"]=_emscripten_async_run_script;Module["_emscripten_async_load_script"]=_emscripten_async_load_script;Module["_emscripten_get_window_title"]=_emscripten_get_window_title;Module["_emscripten_set_window_title"]=_emscripten_set_window_title;Module["_emscripten_get_screen_size"]=_emscripten_get_screen_size;Module["_emscripten_hide_mouse"]=_emscripten_hide_mouse;Module["_emscripten_set_canvas_size"]=_emscripten_set_canvas_size;Module["_emscripten_get_canvas_size"]=_emscripten_get_canvas_size;Module["_emscripten_create_worker"]=_emscripten_create_worker;Module["_emscripten_destroy_worker"]=_emscripten_destroy_worker;Module["_emscripten_call_worker"]=_emscripten_call_worker;Module["_emscripten_get_worker_queue_size"]=_emscripten_get_worker_queue_size;Module["_emscripten_get_preloaded_image_data"]=_emscripten_get_preloaded_image_data;Module["getPreloadedImageData"]=getPreloadedImageData;Module["getPreloadedImageData__data"]=getPreloadedImageData__data;Module["_emscripten_get_preloaded_image_data_from_FILE"]=_emscripten_get_preloaded_image_data_from_FILE;Module["wget"]=wget;Module["_emscripten_async_wget"]=_emscripten_async_wget;Module["FS_mkdirTree"]=FS_mkdirTree;Module["_emscripten_async_wget_data"]=_emscripten_async_wget_data;Module["_emscripten_async_wget2"]=_emscripten_async_wget2;Module["_emscripten_async_wget2_data"]=_emscripten_async_wget2_data;Module["_emscripten_async_wget2_abort"]=_emscripten_async_wget2_abort;Module["___asctime_r"]=___asctime_r;Module["MONTH_DAYS_REGULAR"]=MONTH_DAYS_REGULAR;Module["MONTH_DAYS_LEAP"]=MONTH_DAYS_LEAP;Module["arraySum"]=arraySum;Module["addDays"]=addDays;Module["_strptime"]=_strptime;Module["_strptime_l"]=_strptime_l;Module["__dlsym_catchup_js"]=__dlsym_catchup_js;Module["FS_readFile"]=FS_readFile;Module["FS_root"]=FS_root;Module["FS_mounts"]=FS_mounts;Module["FS_devices"]=FS_devices;Module["FS_streams"]=FS_streams;Module["FS_nextInode"]=FS_nextInode;Module["FS_nameTable"]=FS_nameTable;Module["FS_currentPath"]=FS_currentPath;Module["FS_initialized"]=FS_initialized;Module["FS_ignorePermissions"]=FS_ignorePermissions;Module["FS_trackingDelegate"]=FS_trackingDelegate;Module["FS_filesystems"]=FS_filesystems;Module["FS_syncFSRequests"]=FS_syncFSRequests;Module["FS_readFiles"]=FS_readFiles;Module["FS_lookupPath"]=FS_lookupPath;Module["FS_getPath"]=FS_getPath;Module["FS_hashName"]=FS_hashName;Module["FS_hashAddNode"]=FS_hashAddNode;Module["FS_hashRemoveNode"]=FS_hashRemoveNode;Module["FS_lookupNode"]=FS_lookupNode;Module["FS_createNode"]=FS_createNode;Module["FS_destroyNode"]=FS_destroyNode;Module["FS_isRoot"]=FS_isRoot;Module["FS_isMountpoint"]=FS_isMountpoint;Module["FS_isFile"]=FS_isFile;Module["FS_isDir"]=FS_isDir;Module["FS_isLink"]=FS_isLink;Module["FS_isChrdev"]=FS_isChrdev;Module["FS_isBlkdev"]=FS_isBlkdev;Module["FS_isFIFO"]=FS_isFIFO;Module["FS_isSocket"]=FS_isSocket;Module["FS_flagsToPermissionString"]=FS_flagsToPermissionString;Module["FS_nodePermissions"]=FS_nodePermissions;Module["FS_mayLookup"]=FS_mayLookup;Module["FS_mayCreate"]=FS_mayCreate;Module["FS_mayDelete"]=FS_mayDelete;Module["FS_mayOpen"]=FS_mayOpen;Module["FS_checkOpExists"]=FS_checkOpExists;Module["FS_nextfd"]=FS_nextfd;Module["FS_getStreamChecked"]=FS_getStreamChecked;Module["FS_getStream"]=FS_getStream;Module["FS_createStream"]=FS_createStream;Module["FS_closeStream"]=FS_closeStream;Module["FS_dupStream"]=FS_dupStream;Module["FS_doSetAttr"]=FS_doSetAttr;Module["FS_chrdev_stream_ops"]=FS_chrdev_stream_ops;Module["FS_major"]=FS_major;Module["FS_minor"]=FS_minor;Module["FS_makedev"]=FS_makedev;Module["FS_registerDevice"]=FS_registerDevice;Module["FS_getDevice"]=FS_getDevice;Module["FS_getMounts"]=FS_getMounts;Module["FS_syncfs"]=FS_syncfs;Module["FS_mount"]=FS_mount;Module["FS_unmount"]=FS_unmount;Module["FS_lookup"]=FS_lookup;Module["FS_mknod"]=FS_mknod;Module["FS_statfs"]=FS_statfs;Module["FS_statfsStream"]=FS_statfsStream;Module["FS_statfsNode"]=FS_statfsNode;Module["FS_create"]=FS_create;Module["FS_mkdir"]=FS_mkdir;Module["FS_mkdev"]=FS_mkdev;Module["FS_symlink"]=FS_symlink;Module["FS_rename"]=FS_rename;Module["FS_rmdir"]=FS_rmdir;Module["FS_readdir"]=FS_readdir;Module["FS_readlink"]=FS_readlink;Module["FS_stat"]=FS_stat;Module["FS_fstat"]=FS_fstat;Module["FS_lstat"]=FS_lstat;Module["FS_doChmod"]=FS_doChmod;Module["FS_chmod"]=FS_chmod;Module["FS_lchmod"]=FS_lchmod;Module["FS_fchmod"]=FS_fchmod;Module["FS_doChown"]=FS_doChown;Module["FS_chown"]=FS_chown;Module["FS_lchown"]=FS_lchown;Module["FS_fchown"]=FS_fchown;Module["FS_doTruncate"]=FS_doTruncate;Module["FS_truncate"]=FS_truncate;Module["FS_ftruncate"]=FS_ftruncate;Module["FS_utime"]=FS_utime;Module["FS_open"]=FS_open;Module["FS_close"]=FS_close;Module["FS_isClosed"]=FS_isClosed;Module["FS_llseek"]=FS_llseek;Module["FS_read"]=FS_read;Module["FS_write"]=FS_write;Module["FS_mmap"]=FS_mmap;Module["FS_msync"]=FS_msync;Module["FS_ioctl"]=FS_ioctl;Module["FS_writeFile"]=FS_writeFile;Module["FS_cwd"]=FS_cwd;Module["FS_chdir"]=FS_chdir;Module["FS_createDefaultDirectories"]=FS_createDefaultDirectories;Module["FS_createDefaultDevices"]=FS_createDefaultDevices;Module["FS_createSpecialDirectories"]=FS_createSpecialDirectories;Module["FS_createStandardStreams"]=FS_createStandardStreams;Module["FS_staticInit"]=FS_staticInit;Module["FS_init"]=FS_init;Module["FS_quit"]=FS_quit;Module["FS_findObject"]=FS_findObject;Module["FS_analyzePath"]=FS_analyzePath;Module["FS_createFile"]=FS_createFile;Module["FS_forceLoadFile"]=FS_forceLoadFile;Module["_setNetworkCallback"]=_setNetworkCallback;Module["_emscripten_set_socket_error_callback"]=_emscripten_set_socket_error_callback;Module["_emscripten_set_socket_open_callback"]=_emscripten_set_socket_open_callback;Module["_emscripten_set_socket_listen_callback"]=_emscripten_set_socket_listen_callback;Module["_emscripten_set_socket_connection_callback"]=_emscripten_set_socket_connection_callback;Module["_emscripten_set_socket_message_callback"]=_emscripten_set_socket_message_callback;Module["_emscripten_set_socket_close_callback"]=_emscripten_set_socket_close_callback;Module["_emscripten_webgl_enable_ANGLE_instanced_arrays"]=_emscripten_webgl_enable_ANGLE_instanced_arrays;Module["_emscripten_webgl_enable_OES_vertex_array_object"]=_emscripten_webgl_enable_OES_vertex_array_object;Module["_emscripten_webgl_enable_WEBGL_draw_buffers"]=_emscripten_webgl_enable_WEBGL_draw_buffers;Module["_emscripten_webgl_enable_WEBGL_multi_draw"]=_emscripten_webgl_enable_WEBGL_multi_draw;Module["_emscripten_webgl_enable_EXT_polygon_offset_clamp"]=_emscripten_webgl_enable_EXT_polygon_offset_clamp;Module["_emscripten_webgl_enable_EXT_clip_control"]=_emscripten_webgl_enable_EXT_clip_control;Module["_emscripten_webgl_enable_WEBGL_polygon_mode"]=_emscripten_webgl_enable_WEBGL_polygon_mode;Module["_glVertexPointer"]=_glVertexPointer;Module["_glMatrixMode"]=_glMatrixMode;Module["_glBegin"]=_glBegin;Module["_glLoadIdentity"]=_glLoadIdentity;Module["_glMultiDrawArrays"]=_glMultiDrawArrays;Module["_glMultiDrawArraysWEBGL"]=_glMultiDrawArraysWEBGL;Module["_glMultiDrawArraysANGLE"]=_glMultiDrawArraysANGLE;Module["_glMultiDrawArraysInstancedANGLE"]=_glMultiDrawArraysInstancedANGLE;Module["_glMultiDrawArraysInstancedWEBGL"]=_glMultiDrawArraysInstancedWEBGL;Module["_glMultiDrawElements"]=_glMultiDrawElements;Module["_glMultiDrawElementsWEBGL"]=_glMultiDrawElementsWEBGL;Module["_glMultiDrawElementsANGLE"]=_glMultiDrawElementsANGLE;Module["_glMultiDrawElementsInstancedANGLE"]=_glMultiDrawElementsInstancedANGLE;Module["_glMultiDrawElementsInstancedWEBGL"]=_glMultiDrawElementsInstancedWEBGL;Module["_glClearDepth"]=_glClearDepth;Module["_glDepthRange"]=_glDepthRange;Module["_emscripten_glVertexPointer"]=_emscripten_glVertexPointer;Module["_emscripten_glMatrixMode"]=_emscripten_glMatrixMode;Module["_emscripten_glBegin"]=_emscripten_glBegin;Module["_emscripten_glLoadIdentity"]=_emscripten_glLoadIdentity;Module["_emscripten_glMultiDrawArrays"]=_emscripten_glMultiDrawArrays;Module["_emscripten_glMultiDrawArraysANGLE"]=_emscripten_glMultiDrawArraysANGLE;Module["_emscripten_glMultiDrawArraysWEBGL"]=_emscripten_glMultiDrawArraysWEBGL;Module["_emscripten_glMultiDrawArraysInstancedANGLE"]=_emscripten_glMultiDrawArraysInstancedANGLE;Module["_emscripten_glMultiDrawArraysInstancedWEBGL"]=_emscripten_glMultiDrawArraysInstancedWEBGL;Module["_emscripten_glMultiDrawElements"]=_emscripten_glMultiDrawElements;Module["_emscripten_glMultiDrawElementsANGLE"]=_emscripten_glMultiDrawElementsANGLE;Module["_emscripten_glMultiDrawElementsWEBGL"]=_emscripten_glMultiDrawElementsWEBGL;Module["_emscripten_glMultiDrawElementsInstancedANGLE"]=_emscripten_glMultiDrawElementsInstancedANGLE;Module["_emscripten_glMultiDrawElementsInstancedWEBGL"]=_emscripten_glMultiDrawElementsInstancedWEBGL;Module["_emscripten_glClearDepth"]=_emscripten_glClearDepth;Module["_emscripten_glDepthRange"]=_emscripten_glDepthRange;Module["_glGetBufferSubData"]=_glGetBufferSubData;Module["_glDrawArraysInstancedBaseInstanceWEBGL"]=_glDrawArraysInstancedBaseInstanceWEBGL;Module["_glDrawArraysInstancedBaseInstance"]=_glDrawArraysInstancedBaseInstance;Module["_glDrawArraysInstancedBaseInstanceANGLE"]=_glDrawArraysInstancedBaseInstanceANGLE;Module["_glDrawElementsInstancedBaseVertexBaseInstanceWEBGL"]=_glDrawElementsInstancedBaseVertexBaseInstanceWEBGL;Module["_glDrawElementsInstancedBaseVertexBaseInstanceANGLE"]=_glDrawElementsInstancedBaseVertexBaseInstanceANGLE;Module["_emscripten_webgl_enable_WEBGL_draw_instanced_base_vertex_base_instance"]=_emscripten_webgl_enable_WEBGL_draw_instanced_base_vertex_base_instance;Module["_glMultiDrawArraysInstancedBaseInstanceWEBGL"]=_glMultiDrawArraysInstancedBaseInstanceWEBGL;Module["_glMultiDrawArraysInstancedBaseInstanceANGLE"]=_glMultiDrawArraysInstancedBaseInstanceANGLE;Module["_glMultiDrawElementsInstancedBaseVertexBaseInstanceWEBGL"]=_glMultiDrawElementsInstancedBaseVertexBaseInstanceWEBGL;Module["_glMultiDrawElementsInstancedBaseVertexBaseInstanceANGLE"]=_glMultiDrawElementsInstancedBaseVertexBaseInstanceANGLE;Module["_emscripten_webgl_enable_WEBGL_multi_draw_instanced_base_vertex_base_instance"]=_emscripten_webgl_enable_WEBGL_multi_draw_instanced_base_vertex_base_instance;Module["_emscripten_glGetBufferSubData"]=_emscripten_glGetBufferSubData;Module["_emscripten_glDrawArraysInstancedBaseInstanceWEBGL"]=_emscripten_glDrawArraysInstancedBaseInstanceWEBGL;Module["_emscripten_glDrawArraysInstancedBaseInstance"]=_emscripten_glDrawArraysInstancedBaseInstance;Module["_emscripten_glDrawArraysInstancedBaseInstanceANGLE"]=_emscripten_glDrawArraysInstancedBaseInstanceANGLE;Module["_emscripten_glDrawElementsInstancedBaseVertexBaseInstanceWEBGL"]=_emscripten_glDrawElementsInstancedBaseVertexBaseInstanceWEBGL;Module["_emscripten_glDrawElementsInstancedBaseVertexBaseInstanceANGLE"]=_emscripten_glDrawElementsInstancedBaseVertexBaseInstanceANGLE;Module["_emscripten_glMultiDrawArraysInstancedBaseInstanceWEBGL"]=_emscripten_glMultiDrawArraysInstancedBaseInstanceWEBGL;Module["_emscripten_glMultiDrawArraysInstancedBaseInstanceANGLE"]=_emscripten_glMultiDrawArraysInstancedBaseInstanceANGLE;Module["_emscripten_glMultiDrawElementsInstancedBaseVertexBaseInstanceWEBGL"]=_emscripten_glMultiDrawElementsInstancedBaseVertexBaseInstanceWEBGL;Module["_emscripten_glMultiDrawElementsInstancedBaseVertexBaseInstanceANGLE"]=_emscripten_glMultiDrawElementsInstancedBaseVertexBaseInstanceANGLE;Module["ALLOC_NORMAL"]=ALLOC_NORMAL;Module["ALLOC_STACK"]=ALLOC_STACK;Module["allocate"]=allocate;Module["writeStringToMemory"]=writeStringToMemory;Module["writeAsciiToMemory"]=writeAsciiToMemory;Module["allocateUTF8"]=allocateUTF8;Module["allocateUTF8OnStack"]=allocateUTF8OnStack;Module["demangle"]=demangle;Module["stackTrace"]=stackTrace;Module["print"]=print;Module["printErr"]=printErr;Module["jstoi_s"]=jstoi_s;Module["_emscripten_is_main_browser_thread"]=_emscripten_is_main_browser_thread;Module["webSockets"]=webSockets;Module["WS"]=WS;Module["_emscripten_websocket_get_ready_state"]=_emscripten_websocket_get_ready_state;Module["_emscripten_websocket_get_buffered_amount"]=_emscripten_websocket_get_buffered_amount;Module["_emscripten_websocket_get_extensions"]=_emscripten_websocket_get_extensions;Module["_emscripten_websocket_get_extensions_length"]=_emscripten_websocket_get_extensions_length;Module["_emscripten_websocket_get_protocol"]=_emscripten_websocket_get_protocol;Module["_emscripten_websocket_get_protocol_length"]=_emscripten_websocket_get_protocol_length;Module["_emscripten_websocket_get_url"]=_emscripten_websocket_get_url;Module["_emscripten_websocket_get_url_length"]=_emscripten_websocket_get_url_length;Module["_emscripten_websocket_set_onopen_callback_on_thread"]=_emscripten_websocket_set_onopen_callback_on_thread;Module["_emscripten_websocket_set_onerror_callback_on_thread"]=_emscripten_websocket_set_onerror_callback_on_thread;Module["_emscripten_websocket_set_onclose_callback_on_thread"]=_emscripten_websocket_set_onclose_callback_on_thread;Module["_emscripten_websocket_set_onmessage_callback_on_thread"]=_emscripten_websocket_set_onmessage_callback_on_thread;Module["_emscripten_websocket_new"]=_emscripten_websocket_new;Module["_emscripten_websocket_send_utf8_text"]=_emscripten_websocket_send_utf8_text;Module["_emscripten_websocket_send_binary"]=_emscripten_websocket_send_binary;Module["_emscripten_websocket_close"]=_emscripten_websocket_close;Module["_emscripten_websocket_delete"]=_emscripten_websocket_delete;Module["_emscripten_websocket_is_supported"]=_emscripten_websocket_is_supported;Module["_emscripten_websocket_deinitialize"]=_emscripten_websocket_deinitialize;Module["writeGLArray"]=writeGLArray;Module["webglPowerPreferences"]=webglPowerPreferences;Module["_emscripten_webgl_create_context"]=_emscripten_webgl_create_context;Module["_emscripten_webgl_do_create_context"]=_emscripten_webgl_do_create_context;Module["_emscripten_webgl_get_current_context"]=_emscripten_webgl_get_current_context;Module["_emscripten_webgl_do_get_current_context"]=_emscripten_webgl_do_get_current_context;Module["_emscripten_webgl_commit_frame"]=_emscripten_webgl_commit_frame;Module["_emscripten_webgl_do_commit_frame"]=_emscripten_webgl_do_commit_frame;Module["_emscripten_webgl_make_context_current"]=_emscripten_webgl_make_context_current;Module["_emscripten_webgl_get_drawing_buffer_size"]=_emscripten_webgl_get_drawing_buffer_size;Module["_emscripten_webgl_get_context_attributes"]=_emscripten_webgl_get_context_attributes;Module["_emscripten_webgl_destroy_context"]=_emscripten_webgl_destroy_context;Module["_emscripten_webgl_enable_extension"]=_emscripten_webgl_enable_extension;Module["_emscripten_supports_offscreencanvas"]=_emscripten_supports_offscreencanvas;Module["registerWebGlEventCallback"]=registerWebGlEventCallback;Module["_emscripten_set_webglcontextlost_callback_on_thread"]=_emscripten_set_webglcontextlost_callback_on_thread;Module["_emscripten_set_webglcontextrestored_callback_on_thread"]=_emscripten_set_webglcontextrestored_callback_on_thread;Module["_emscripten_is_webgl_context_lost"]=_emscripten_is_webgl_context_lost;Module["_emscripten_webgl_get_supported_extensions"]=_emscripten_webgl_get_supported_extensions;Module["_emscripten_webgl_get_program_parameter_d"]=_emscripten_webgl_get_program_parameter_d;Module["_emscripten_webgl_get_program_info_log_utf8"]=_emscripten_webgl_get_program_info_log_utf8;Module["_emscripten_webgl_get_shader_parameter_d"]=_emscripten_webgl_get_shader_parameter_d;Module["_emscripten_webgl_get_shader_info_log_utf8"]=_emscripten_webgl_get_shader_info_log_utf8;Module["_emscripten_webgl_get_shader_source_utf8"]=_emscripten_webgl_get_shader_source_utf8;Module["_emscripten_webgl_get_vertex_attrib_d"]=_emscripten_webgl_get_vertex_attrib_d;Module["_emscripten_webgl_get_vertex_attrib_o"]=_emscripten_webgl_get_vertex_attrib_o;Module["_emscripten_webgl_get_vertex_attrib_v"]=_emscripten_webgl_get_vertex_attrib_v;Module["_emscripten_webgl_get_uniform_d"]=_emscripten_webgl_get_uniform_d;Module["_emscripten_webgl_get_uniform_v"]=_emscripten_webgl_get_uniform_v;Module["_emscripten_webgl_get_parameter_v"]=_emscripten_webgl_get_parameter_v;Module["_emscripten_webgl_get_parameter_d"]=_emscripten_webgl_get_parameter_d;Module["_emscripten_webgl_get_parameter_o"]=_emscripten_webgl_get_parameter_o;Module["_emscripten_webgl_get_parameter_utf8"]=_emscripten_webgl_get_parameter_utf8;Module["_emscripten_webgl_get_parameter_i64v"]=_emscripten_webgl_get_parameter_i64v;Module["EGL"]=EGL;Module["_eglGetDisplay"]=_eglGetDisplay;Module["_eglInitialize"]=_eglInitialize;Module["_eglTerminate"]=_eglTerminate;Module["_eglGetConfigs"]=_eglGetConfigs;Module["_eglChooseConfig"]=_eglChooseConfig;Module["_eglGetConfigAttrib"]=_eglGetConfigAttrib;Module["_eglCreateWindowSurface"]=_eglCreateWindowSurface;Module["_eglDestroySurface"]=_eglDestroySurface;Module["_eglCreateContext"]=_eglCreateContext;Module["_eglDestroyContext"]=_eglDestroyContext;Module["_eglQuerySurface"]=_eglQuerySurface;Module["_eglQueryContext"]=_eglQueryContext;Module["_eglGetError"]=_eglGetError;Module["_eglQueryString"]=_eglQueryString;Module["_eglBindAPI"]=_eglBindAPI;Module["_eglQueryAPI"]=_eglQueryAPI;Module["_eglWaitClient"]=_eglWaitClient;Module["_eglWaitNative"]=_eglWaitNative;Module["_eglWaitGL"]=_eglWaitGL;Module["_eglSwapInterval"]=_eglSwapInterval;Module["_eglMakeCurrent"]=_eglMakeCurrent;Module["_eglGetCurrentContext"]=_eglGetCurrentContext;Module["_eglGetCurrentSurface"]=_eglGetCurrentSurface;Module["_eglGetCurrentDisplay"]=_eglGetCurrentDisplay;Module["_eglSwapBuffers"]=_eglSwapBuffers;Module["_eglReleaseThread"]=_eglReleaseThread;Module["SDL"]=SDL;Module["_SDL_GetTicks"]=_SDL_GetTicks;Module["_SDL_LockSurface"]=_SDL_LockSurface;Module["_SDL_Linked_Version"]=_SDL_Linked_Version;Module["_SDL_Init"]=_SDL_Init;Module["_SDL_WasInit"]=_SDL_WasInit;Module["_SDL_GetVideoInfo"]=_SDL_GetVideoInfo;Module["_SDL_ListModes"]=_SDL_ListModes;Module["_SDL_VideoModeOK"]=_SDL_VideoModeOK;Module["_SDL_AudioDriverName"]=_SDL_AudioDriverName;Module["_SDL_VideoDriverName"]=_SDL_VideoDriverName;Module["_SDL_SetVideoMode"]=_SDL_SetVideoMode;Module["_SDL_GetVideoSurface"]=_SDL_GetVideoSurface;Module["_SDL_AudioQuit"]=_SDL_AudioQuit;Module["_SDL_VideoQuit"]=_SDL_VideoQuit;Module["_SDL_QuitSubSystem"]=_SDL_QuitSubSystem;Module["_SDL_Quit"]=_SDL_Quit;Module["_SDL_UnlockSurface"]=_SDL_UnlockSurface;Module["_SDL_Flip"]=_SDL_Flip;Module["_SDL_UpdateRect"]=_SDL_UpdateRect;Module["_SDL_UpdateRects"]=_SDL_UpdateRects;Module["_SDL_Delay"]=_SDL_Delay;Module["_SDL_WM_SetCaption"]=_SDL_WM_SetCaption;Module["_SDL_EnableKeyRepeat"]=_SDL_EnableKeyRepeat;Module["_SDL_GetKeyboardState"]=_SDL_GetKeyboardState;Module["_SDL_GetKeyState"]=_SDL_GetKeyState;Module["_SDL_GetKeyName"]=_SDL_GetKeyName;Module["_SDL_GetModState"]=_SDL_GetModState;Module["_SDL_GetMouseState"]=_SDL_GetMouseState;Module["_SDL_WarpMouse"]=_SDL_WarpMouse;Module["_SDL_ShowCursor"]=_SDL_ShowCursor;Module["_SDL_GetError"]=_SDL_GetError;Module["_SDL_SetError"]=_SDL_SetError;Module["_SDL_CreateRGBSurface"]=_SDL_CreateRGBSurface;Module["_SDL_CreateRGBSurfaceFrom"]=_SDL_CreateRGBSurfaceFrom;Module["_SDL_ConvertSurface"]=_SDL_ConvertSurface;Module["_SDL_DisplayFormat"]=_SDL_DisplayFormat;Module["_SDL_DisplayFormatAlpha"]=_SDL_DisplayFormatAlpha;Module["_SDL_FreeSurface"]=_SDL_FreeSurface;Module["_SDL_UpperBlit"]=_SDL_UpperBlit;Module["_SDL_UpperBlitScaled"]=_SDL_UpperBlitScaled;Module["_SDL_LowerBlit"]=_SDL_LowerBlit;Module["_SDL_LowerBlitScaled"]=_SDL_LowerBlitScaled;Module["_SDL_GetClipRect"]=_SDL_GetClipRect;Module["_SDL_SetClipRect"]=_SDL_SetClipRect;Module["_SDL_FillRect"]=_SDL_FillRect;Module["_zoomSurface"]=_zoomSurface;Module["_rotozoomSurface"]=_rotozoomSurface;Module["_SDL_SetAlpha"]=_SDL_SetAlpha;Module["_SDL_SetColorKey"]=_SDL_SetColorKey;Module["_SDL_PollEvent"]=_SDL_PollEvent;Module["_SDL_PushEvent"]=_SDL_PushEvent;Module["_SDL_PeepEvents"]=_SDL_PeepEvents;Module["_SDL_PumpEvents"]=_SDL_PumpEvents;Module["_emscripten_SDL_SetEventHandler"]=_emscripten_SDL_SetEventHandler;Module["_SDL_SetColors"]=_SDL_SetColors;Module["_SDL_SetPalette"]=_SDL_SetPalette;Module["_SDL_MapRGB"]=_SDL_MapRGB;Module["_SDL_MapRGBA"]=_SDL_MapRGBA;Module["_SDL_GetRGB"]=_SDL_GetRGB;Module["_SDL_GetRGBA"]=_SDL_GetRGBA;Module["_SDL_GetAppState"]=_SDL_GetAppState;Module["_SDL_WM_GrabInput"]=_SDL_WM_GrabInput;Module["_SDL_WM_ToggleFullScreen"]=_SDL_WM_ToggleFullScreen;Module["_IMG_Init"]=_IMG_Init;Module["_IMG_Load_RW"]=_IMG_Load_RW;Module["_SDL_FreeRW"]=_SDL_FreeRW;Module["_SDL_LoadBMP_RW"]=_SDL_LoadBMP_RW;Module["_IMG_Load"]=_IMG_Load;Module["_SDL_RWFromFile"]=_SDL_RWFromFile;Module["_IMG_Quit"]=_IMG_Quit;Module["_SDL_OpenAudio"]=_SDL_OpenAudio;Module["_SDL_PauseAudio"]=_SDL_PauseAudio;Module["_SDL_CloseAudio"]=_SDL_CloseAudio;Module["_SDL_LockAudio"]=_SDL_LockAudio;Module["_SDL_UnlockAudio"]=_SDL_UnlockAudio;Module["_SDL_CreateMutex"]=_SDL_CreateMutex;Module["_SDL_mutexP"]=_SDL_mutexP;Module["_SDL_mutexV"]=_SDL_mutexV;Module["_SDL_DestroyMutex"]=_SDL_DestroyMutex;Module["_SDL_CreateCond"]=_SDL_CreateCond;Module["_SDL_CondSignal"]=_SDL_CondSignal;Module["_SDL_CondWait"]=_SDL_CondWait;Module["_SDL_DestroyCond"]=_SDL_DestroyCond;Module["_SDL_StartTextInput"]=_SDL_StartTextInput;Module["_SDL_StopTextInput"]=_SDL_StopTextInput;Module["_Mix_Init"]=_Mix_Init;Module["_Mix_Quit"]=_Mix_Quit;Module["_Mix_OpenAudio"]=_Mix_OpenAudio;Module["_Mix_CloseAudio"]=_Mix_CloseAudio;Module["_Mix_AllocateChannels"]=_Mix_AllocateChannels;Module["_Mix_ChannelFinished"]=_Mix_ChannelFinished;Module["_Mix_Volume"]=_Mix_Volume;Module["_Mix_SetPanning"]=_Mix_SetPanning;Module["_Mix_LoadWAV_RW"]=_Mix_LoadWAV_RW;Module["_Mix_LoadWAV"]=_Mix_LoadWAV;Module["_Mix_QuickLoad_RAW"]=_Mix_QuickLoad_RAW;Module["_Mix_FreeChunk"]=_Mix_FreeChunk;Module["_Mix_ReserveChannels"]=_Mix_ReserveChannels;Module["_Mix_PlayChannelTimed"]=_Mix_PlayChannelTimed;Module["_Mix_HaltChannel"]=_Mix_HaltChannel;Module["_Mix_FadingChannel"]=_Mix_FadingChannel;Module["_Mix_HookMusicFinished"]=_Mix_HookMusicFinished;Module["_Mix_HaltMusic"]=_Mix_HaltMusic;Module["_Mix_VolumeMusic"]=_Mix_VolumeMusic;Module["_Mix_LoadMUS_RW"]=_Mix_LoadMUS_RW;Module["_Mix_LoadMUS"]=_Mix_LoadMUS;Module["_Mix_FreeMusic"]=_Mix_FreeMusic;Module["_Mix_PlayMusic"]=_Mix_PlayMusic;Module["_Mix_PauseMusic"]=_Mix_PauseMusic;Module["_Mix_ResumeMusic"]=_Mix_ResumeMusic;Module["_Mix_FadeInMusicPos"]=_Mix_FadeInMusicPos;Module["_Mix_FadeOutMusic"]=_Mix_FadeOutMusic;Module["_Mix_PlayingMusic"]=_Mix_PlayingMusic;Module["_Mix_Playing"]=_Mix_Playing;Module["_Mix_Pause"]=_Mix_Pause;Module["_Mix_Paused"]=_Mix_Paused;Module["_Mix_PausedMusic"]=_Mix_PausedMusic;Module["_Mix_Resume"]=_Mix_Resume;Module["_TTF_Init"]=_TTF_Init;Module["_TTF_OpenFont"]=_TTF_OpenFont;Module["_TTF_CloseFont"]=_TTF_CloseFont;Module["_TTF_RenderText_Solid"]=_TTF_RenderText_Solid;Module["_TTF_RenderText_Blended"]=_TTF_RenderText_Blended;Module["_TTF_RenderText_Shaded"]=_TTF_RenderText_Shaded;Module["_TTF_RenderUTF8_Solid"]=_TTF_RenderUTF8_Solid;Module["_TTF_SizeUTF8"]=_TTF_SizeUTF8;Module["_TTF_SizeText"]=_TTF_SizeText;Module["_TTF_GlyphMetrics"]=_TTF_GlyphMetrics;Module["_TTF_FontAscent"]=_TTF_FontAscent;Module["_TTF_FontDescent"]=_TTF_FontDescent;Module["_TTF_FontHeight"]=_TTF_FontHeight;Module["_TTF_FontLineSkip"]=_TTF_FontLineSkip;Module["_TTF_Quit"]=_TTF_Quit;Module["SDL_gfx"]=SDL_gfx;Module["_boxColor"]=_boxColor;Module["_boxRGBA"]=_boxRGBA;Module["_rectangleColor"]=_rectangleColor;Module["_rectangleRGBA"]=_rectangleRGBA;Module["_ellipseColor"]=_ellipseColor;Module["_ellipseRGBA"]=_ellipseRGBA;Module["_filledEllipseColor"]=_filledEllipseColor;Module["_filledEllipseRGBA"]=_filledEllipseRGBA;Module["_lineColor"]=_lineColor;Module["_lineRGBA"]=_lineRGBA;Module["_pixelRGBA"]=_pixelRGBA;Module["_SDL_GL_SetAttribute"]=_SDL_GL_SetAttribute;Module["_SDL_GL_GetAttribute"]=_SDL_GL_GetAttribute;Module["_SDL_GL_SwapBuffers"]=_SDL_GL_SwapBuffers;Module["_SDL_GL_ExtensionSupported"]=_SDL_GL_ExtensionSupported;Module["_SDL_DestroyWindow"]=_SDL_DestroyWindow;Module["_SDL_DestroyRenderer"]=_SDL_DestroyRenderer;Module["_SDL_GetWindowFlags"]=_SDL_GetWindowFlags;Module["_SDL_GL_SwapWindow"]=_SDL_GL_SwapWindow;Module["_SDL_GL_MakeCurrent"]=_SDL_GL_MakeCurrent;Module["_SDL_GL_DeleteContext"]=_SDL_GL_DeleteContext;Module["_SDL_GL_GetSwapInterval"]=_SDL_GL_GetSwapInterval;Module["_SDL_GL_SetSwapInterval"]=_SDL_GL_SetSwapInterval;Module["_SDL_SetWindowTitle"]=_SDL_SetWindowTitle;Module["_SDL_GetWindowSize"]=_SDL_GetWindowSize;Module["_SDL_LogSetOutputFunction"]=_SDL_LogSetOutputFunction;Module["_SDL_SetWindowFullscreen"]=_SDL_SetWindowFullscreen;Module["_SDL_ClearError"]=_SDL_ClearError;Module["_SDL_SetGamma"]=_SDL_SetGamma;Module["_SDL_SetGammaRamp"]=_SDL_SetGammaRamp;Module["_SDL_NumJoysticks"]=_SDL_NumJoysticks;Module["_SDL_JoystickName"]=_SDL_JoystickName;Module["_SDL_JoystickOpen"]=_SDL_JoystickOpen;Module["_SDL_JoystickOpened"]=_SDL_JoystickOpened;Module["_SDL_JoystickIndex"]=_SDL_JoystickIndex;Module["_SDL_JoystickNumAxes"]=_SDL_JoystickNumAxes;Module["_SDL_JoystickNumBalls"]=_SDL_JoystickNumBalls;Module["_SDL_JoystickNumHats"]=_SDL_JoystickNumHats;Module["_SDL_JoystickNumButtons"]=_SDL_JoystickNumButtons;Module["_SDL_JoystickUpdate"]=_SDL_JoystickUpdate;Module["_SDL_JoystickEventState"]=_SDL_JoystickEventState;Module["_SDL_JoystickGetAxis"]=_SDL_JoystickGetAxis;Module["_SDL_JoystickGetHat"]=_SDL_JoystickGetHat;Module["_SDL_JoystickGetBall"]=_SDL_JoystickGetBall;Module["_SDL_JoystickGetButton"]=_SDL_JoystickGetButton;Module["_SDL_JoystickClose"]=_SDL_JoystickClose;Module["_SDL_InitSubSystem"]=_SDL_InitSubSystem;Module["_SDL_RWFromConstMem"]=_SDL_RWFromConstMem;Module["_SDL_RWFromMem"]=_SDL_RWFromMem;Module["_SDL_GetNumAudioDrivers"]=_SDL_GetNumAudioDrivers;Module["_SDL_GetCurrentAudioDriver"]=_SDL_GetCurrentAudioDriver;Module["_SDL_GetScancodeFromKey"]=_SDL_GetScancodeFromKey;Module["_SDL_GetAudioDriver"]=_SDL_GetAudioDriver;Module["_SDL_EnableUNICODE"]=_SDL_EnableUNICODE;Module["_SDL_AddTimer"]=_SDL_AddTimer;Module["_SDL_RemoveTimer"]=_SDL_RemoveTimer;Module["_SDL_CreateThread"]=_SDL_CreateThread;Module["_SDL_WaitThread"]=_SDL_WaitThread;Module["_SDL_GetThreadID"]=_SDL_GetThreadID;Module["_SDL_ThreadID"]=_SDL_ThreadID;Module["_SDL_AllocRW"]=_SDL_AllocRW;Module["_SDL_CondBroadcast"]=_SDL_CondBroadcast;Module["_SDL_CondWaitTimeout"]=_SDL_CondWaitTimeout;Module["_SDL_WM_IconifyWindow"]=_SDL_WM_IconifyWindow;Module["_Mix_SetPostMix"]=_Mix_SetPostMix;Module["_Mix_VolumeChunk"]=_Mix_VolumeChunk;Module["_Mix_SetPosition"]=_Mix_SetPosition;Module["_Mix_QuerySpec"]=_Mix_QuerySpec;Module["_Mix_FadeInChannelTimed"]=_Mix_FadeInChannelTimed;Module["_Mix_FadeOutChannel"]=_Mix_FadeOutChannel;Module["_Mix_Linked_Version"]=_Mix_Linked_Version;Module["_SDL_SaveBMP_RW"]=_SDL_SaveBMP_RW;Module["_SDL_WM_SetIcon"]=_SDL_WM_SetIcon;Module["_SDL_HasRDTSC"]=_SDL_HasRDTSC;Module["_SDL_HasMMX"]=_SDL_HasMMX;Module["_SDL_HasMMXExt"]=_SDL_HasMMXExt;Module["_SDL_Has3DNow"]=_SDL_Has3DNow;Module["_SDL_Has3DNowExt"]=_SDL_Has3DNowExt;Module["_SDL_HasSSE"]=_SDL_HasSSE;Module["_SDL_HasSSE2"]=_SDL_HasSSE2;Module["_SDL_HasAltiVec"]=_SDL_HasAltiVec;var ASM_CONSTS={3473994:()=>{throw new Error("intentionally triggered fatal error!")},3474051:()=>{wasmImports["open64"]=wasmImports["open"]},3474100:()=>jspiSupported};function console_error(msg){let jsmsg=UTF8ToString(msg);console.error(jsmsg)}function console_error_obj(obj){console.error(obj)}function new_error(type,msg,err){return new API.PythonError(UTF8ToString(type),msg,err)}new_error.sig="eiei";function fail_test(){API.fail_test=true}fail_test.sig="v";function capture_stderr(){API.capture_stderr()}capture_stderr.sig="v";function restore_stderr(){return API.restore_stderr()}restore_stderr.sig="e";function raw_call_js(func){func()}raw_call_js.sig="ve";function hiwire_invalid_ref_js(type,ref){API.fail_test=!!1;if(type===1&&!ref){if(_PyErr_Occurred()){const e=_wrap_exception();console.error("Pyodide internal error: Argument to hiwire_get is falsy. This was "+"probably because the Python error indicator was set when get_value was "+"called. The Python error that caused this was:",e);throw e}else{const msg="Pyodide internal error: Argument to hiwire_get is falsy (but error "+"indicator is not set).";console.error(msg);throw new Error(msg)}}const typestr={[1]:"get",[2]:"incref",[3]:"decref"}[type];const msg=`hiwire_${typestr} on invalid reference ${ref}. This is most likely due `+"to use after free. It may also be due to memory corruption.";console.error(msg);throw new Error(msg)}hiwire_invalid_ref_js.sig="vii";function set_pyodide_module(mod){API._pyodide=mod}set_pyodide_module.sig="ve";function js2python_immutable_js(value){try{let result=Module.js2python_convertImmutable(value);if(result!==undefined){return result}return 0}catch(e){Module.handle_js_error(e);return 0}errNoRet()}js2python_immutable_js.sig="ie";function js2python_js(value){try{let result=Module.js2python_convertImmutable(value);if(result!==undefined){return result}return _JsProxy_create(value)}catch(e){Module.handle_js_error(e);return 0}errNoRet()}js2python_js.sig="ie";function js2python_convert(v,depth,defaultConverter){try{return Module.js2python_convert(v,{depth,defaultConverter})}catch(e){Module.handle_js_error(e);return 0}errNoRet()}js2python_convert.sig="ieie";function isReservedWord(word){if(!Module.pythonReservedWords){Module.pythonReservedWords=new Set(["False","await","else","import","pass","None","break","except","in","raise","True","class","finally","is","return","and","continue","for","lambda","try","as","def","from","nonlocal","while","assert","del","global","not","with","async","elif","if","or","yield"])}return Module.pythonReservedWords.has(word)}function normalizeReservedWords(word){const noTrailing_=word.replace(/_*$/,"");if(!isReservedWord(noTrailing_)){return word}if(noTrailing_!==word){return word.slice(0,-1)}return word}function JsProxy_GetAttr_js(jsobj,ptrkey){try{const jskey=normalizeReservedWords(UTF8ToString(ptrkey));const result=jsobj[jskey];if(result===undefined&&!(jskey in jsobj)){return Module.error}return result}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsProxy_GetAttr_js.sig="eei";function JsProxy_SetAttr_js(jsobj,ptrkey,jsval){try{let jskey=normalizeReservedWords(UTF8ToString(ptrkey));jsobj[jskey]=jsval}catch(e){Module.handle_js_error(e);return-1}return 0}JsProxy_SetAttr_js.sig="ieie";function JsProxy_DelAttr_js(jsobj,ptrkey){try{let jskey=normalizeReservedWords(UTF8ToString(ptrkey));delete jsobj[jskey]}catch(e){Module.handle_js_error(e);return-1}return 0}JsProxy_DelAttr_js.sig="iei";function JsProxy_GetIter_js(obj){try{return obj[Symbol.iterator]()}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsProxy_GetIter_js.sig="ee";function handle_next_result_js(res,done,msg){try{let errmsg;if(typeof res!=="object"){errmsg=`Result should have type "object" not "${typeof res}"`}else if(typeof res.done==="undefined"){if(typeof res.then==="function"){errmsg=`Result was a promise, use anext() / asend() / athrow() instead.`}else{errmsg=`Result has no "done" field.`}}if(errmsg){HEAPU32[(msg>>2)+0>>>0]=stringToNewUTF8(errmsg);HEAPU32[(done>>2)+0>>>0]=-1}HEAPU32[(done>>2)+0>>>0]=res.done;return res.value}catch(e){Module.handle_js_error(e);return-1}return 0}handle_next_result_js.sig="eeii";function JsException_new_helper(name_ptr,message_ptr,stack_ptr){try{let name=UTF8ToString(name_ptr);let message=UTF8ToString(message_ptr);let stack=UTF8ToString(stack_ptr);return API.deserializeError(name,message,stack)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsException_new_helper.sig="eiii";function JsProxy_GetAsyncIter_js(obj){try{return obj[Symbol.asyncIterator]()}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsProxy_GetAsyncIter_js.sig="ee";function _agen_handle_result_js(p,msg,set_result,set_exception,closing){try{let errmsg;if(typeof p!=="object"){errmsg=`Result of anext() should be object not ${typeof p}`}else if(typeof p.then!=="function"){if(typeof p.done==="boolean"){errmsg=`Result of anext() was not a promise, use next() instead.`}else{errmsg=`Result of anext() was not a promise.`}}if(errmsg){HEAPU32[(msg>>2)+0>>>0]=stringToNewUTF8(errmsg);return-1}_Py_IncRef(set_result);_Py_IncRef(set_exception);p.then(({done,value})=>{__agen_handle_result_js_c(set_result,set_exception,done,value,closing)},err=>{__agen_handle_result_js_c(set_result,set_exception,-1,err,closing)}).finally(()=>{_Py_DecRef(set_result);_Py_DecRef(set_exception)});return 0}catch(e){Module.handle_js_error(e);return-1}return 0}_agen_handle_result_js.sig="ieiiii";function get_length_helper(val){try{let result;if(typeof val.size==="number"){result=val.size}else if(typeof val.length==="number"){result=val.length}else{return-2}if(result<0){return-3}if(result>2147483647){return-4}return result}catch(e){Module.handle_js_error(e);return-1}return 0}get_length_helper.sig="ie";function get_length_string(val){try{let result;if(typeof val.size==="number"){result=val.size}else if(typeof val.length==="number"){result=val.length}return stringToNewUTF8(" "+result.toString())}catch(e){Module.handle_js_error(e);return 0}errNoRet()}get_length_string.sig="ie";function destroy_jsarray_entries(array){for(let v of array){try{if(typeof v.destroy==="function"){v.destroy()}}catch(e){console.warn("Weird error:",e)}}}destroy_jsarray_entries.sig="ve";function JsArray_repeat_js(o,count){try{return Array.from({length:count},()=>o).flat()}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsArray_repeat_js.sig="eei";function JsArray_inplace_repeat_js(o,count){try{o.splice(0,o.length,...Array.from({length:count},()=>o).flat())}catch(e){Module.handle_js_error(e);return-1}return 0}JsArray_inplace_repeat_js.sig="iei";function JsArray_reversed_iterator(array){return new ReversedIterator(array)}class ReversedIterator{constructor(array){this._array=array;this._i=array.length-1}__length_hint__(){return this._array.length}[Symbol.toStringTag](){return"ReverseIterator"}next(){const i=this._i;const a=this._array;const done=i<0;const value=done?undefined:a[i];this._i--;return{done,value}}}JsArray_reversed_iterator.sig="ee";function JsArray_index_js(o,v,start,stop){try{for(let i=start;i<stop;i++){if(o[i]===v){return i}}return-2}catch(e){Module.handle_js_error(e);return-1}return 0}JsArray_index_js.sig="ieeii";function JsArray_count_js(o,v){try{let result=0;for(let i=0;i<o.length;i++){if(o[i]===v){result++}}return result}catch(e){Module.handle_js_error(e);return-1}return 0}JsArray_count_js.sig="iee";function JsArray_reverse_js(array){try{array.reverse()}catch(e){Module.handle_js_error(e);return-1}return 0}JsArray_reverse_js.sig="ie";function JsProxy_subscript_js(obj,key){try{let result=obj.get(key);if(result===undefined){if(obj.has&&typeof obj.has==="function"&&!obj.has(key)){return Module.error}}return result}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsProxy_subscript_js.sig="eee";function JsMap_GetIter_js(obj){try{let result;if(typeof obj.keys==="function"){result=obj.keys()}else{result=obj[Symbol.iterator]()}return result}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsMap_GetIter_js.sig="ee";function JsMap_clear_js(map){try{if(map&&typeof map.clear==="function"){map.clear();return 1}return 0}catch(e){Module.handle_js_error(e);return-1}return 0}JsMap_clear_js.sig="ie";function JsProxy_Dir_js(jsobj){try{let result=[];do{const names=Object.getOwnPropertyNames(jsobj);result.push(...names.filter(s=>{let c=s.charCodeAt(0);return c<48||c>57}).map(word=>isReservedWord(word.replace(/_*$/,""))?word+"_":word))}while(jsobj=Object.getPrototypeOf(jsobj));return result}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsProxy_Dir_js.sig="ee";function JsProxy_Bool_js(val){try{if(!val){return!!0}if(val.size===0){if(/HTML[A-Za-z]*Element/.test(getTypeTag(val))){return!!1}return!!0}if(val.length===0&&JsvArray_Check(val)){return!!0}if(val.byteLength===0){return!!0}return!!1}catch(e){return!!0}}JsProxy_Bool_js.sig="ie";function JsObjMap_GetIter_js(obj){try{return Module.iterObject(obj)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsObjMap_GetIter_js.sig="ee";function JsObjMap_length_js(obj){try{let length=0;for(let _ of Module.iterObject(obj)){length++}return length}catch(e){Module.handle_js_error(e);return-1}return 0}JsObjMap_length_js.sig="ie";function JsObjMap_subscript_js(obj,key){try{if(!Object.prototype.hasOwnProperty.call(obj,key)){return Module.error}return obj[key]}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsObjMap_subscript_js.sig="eee";function JsObjMap_ass_subscript_js(obj,key,value){try{if(value===Module.error){if(!Object.prototype.hasOwnProperty.call(obj,key)){return-1}delete obj[key]}else{obj[key]=value}return 0}catch(e){Module.handle_js_error(e);return-1}return 0}JsObjMap_ass_subscript_js.sig="ieee";function JsObjMap_contains_js(obj,key){try{return Object.prototype.hasOwnProperty.call(obj,key)}catch(e){Module.handle_js_error(e);return-1}return 0}JsObjMap_contains_js.sig="iee";function JsModule_GetAll_js(o){try{return Object.getOwnPropertyNames(o)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsModule_GetAll_js.sig="ee";function JsBuffer_DecodeString_js(buffer,encoding){try{let encoding_js;if(encoding){encoding_js=UTF8ToString(encoding)}const decoder=new TextDecoder(encoding_js,{fatal:!!1,ignoreBOM:!!1});let res;try{res=decoder.decode(buffer)}catch(e){if(e instanceof TypeError){return Module.error}throw e}return res}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsBuffer_DecodeString_js.sig="eei";function JsBuffer_get_info(jsobj,byteLength_ptr,format_ptr,size_ptr,checked_ptr){const[format_utf8,size,checked]=Module.get_buffer_datatype(jsobj);HEAPU32[(byteLength_ptr>>2)+0>>>0]=jsobj.byteLength;HEAPU32[(format_ptr>>2)+0>>>0]=format_utf8;HEAPU32[(size_ptr>>2)+0>>>0]=size;HEAPU8[checked_ptr+0>>>0]=checked}JsBuffer_get_info.sig="veiiii";function JsDoubleProxy_unwrap_js(id){try{return Module.PyProxy_getPtr(id)}catch(e){Module.handle_js_error(e);return 0}errNoRet()}JsDoubleProxy_unwrap_js.sig="ie";function JsProxy_to_weakref_js(pyproxy){try{return new WeakRef(pyproxy)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsProxy_to_weakref_js.sig="ee";function JsProxy_compute_typeflags(obj,is_py_json){try{let type_flags=0;if(API.isPyProxy(obj)&&!pyproxyIsAlive(obj)){return 0}const typeTag=getTypeTag(obj);function safeBool(cb){try{return cb()}catch(e){return!!0}}const isBufferView=safeBool(()=>ArrayBuffer.isView(obj));const isArray=safeBool(()=>Array.isArray(obj));const constructorName=safeBool(()=>obj.constructor.name)||"";if(typeof obj==="function"){type_flags|=1<<9}if(hasMethod(obj,"then")){type_flags|=1<<7}if(hasMethod(obj,Symbol.iterator)){type_flags|=1<<0}if(hasMethod(obj,Symbol.asyncIterator)){type_flags|=1<<15}if(hasMethod(obj,"next")&&(hasMethod(obj,Symbol.iterator)||!hasMethod(obj,Symbol.asyncIterator))){type_flags|=1<<1}if(hasMethod(obj,"next")&&(!hasMethod(obj,Symbol.iterator)||hasMethod(obj,Symbol.asyncIterator))){type_flags|=1<<18}if(hasProperty(obj,"size")||hasProperty(obj,"length")&&typeof obj!=="function"){type_flags|=1<<2}if(hasMethod(obj,"get")){type_flags|=1<<3}if(hasMethod(obj,"set")){type_flags|=1<<4}if(hasMethod(obj,"has")){type_flags|=1<<5}if(hasMethod(obj,"includes")){type_flags|=1<<6}if((isBufferView||typeTag==="[object ArrayBuffer]")&&!(type_flags&1<<9)){type_flags|=1<<8}if(API.isPyProxy(obj)){type_flags|=1<<13}if(isArray){type_flags|=1<<10}if(typeTag==="[object HTMLCollection]"||typeTag==="[object NodeList]"){type_flags|=1<<11}if(isBufferView&&typeTag!=="[object DataView]"){type_flags|=1<<12}if(typeTag==="[object Generator]"){type_flags|=1<<16}if(typeTag==="[object AsyncGenerator]"){type_flags|=1<<17}if(hasProperty(obj,"name")&&hasProperty(obj,"message")&&(hasProperty(obj,"stack")||constructorName==="DOMException")&&!(type_flags&(1<<9|1<<8))){type_flags|=1<<19}if(is_py_json&&type_flags&(1<<10|1<<11|1<<1)){type_flags|=1<<21}if(is_py_json&&!(type_flags&(1<<10|1<<12|1<<11|1<<8|1<<13|1<<1|1<<9|1<<19))){type_flags|=1<<20}return type_flags}catch(e){Module.handle_js_error(e);return-1}return 0}JsProxy_compute_typeflags.sig="iei";function is_comlink_proxy(obj){try{return!!(API.Comlink&&value[API.Comlink.createEndpoint])}catch(e){return!!0}}is_comlink_proxy.sig="ie";function can_run_sync_js(){return!!validSuspender.value}can_run_sync_js.sig="i";function my_dict_converter(){return Object.fromEntries}my_dict_converter.sig="e";function get_async_js_call_done_callback(proxies){try{return function(result){let msg="This borrowed proxy was automatically destroyed "+"at the end of an asynchronous function call. Try "+"using create_proxy or create_once_callable.";for(let px of proxies){Module.pyproxy_destroy(px,msg,!!0)}if(API.isPyProxy(result)){Module.pyproxy_destroy(result,msg,!!0)}}}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}get_async_js_call_done_callback.sig="ee";function wrap_generator(gen,proxies){try{proxies=new Set(proxies);const msg="This borrowed proxy was automatically destroyed "+"when a generator completed execution. Try "+"using create_proxy or create_once_callable.";function cleanup(){proxies.forEach(px=>Module.pyproxy_destroy(px,msg))}function wrap(funcname){return function(val){if(API.isPyProxy(val)){val=val.copy();proxies.add(val)}let res;try{res=gen[funcname](val)}catch(e){cleanup();throw e}if(res.done){proxies.delete(res.value);cleanup()}return res}}return{get[Symbol.toStringTag](){return"Generator"},[Symbol.iterator](){return this},next:wrap("next"),throw:wrap("throw"),return:wrap("return")}}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}wrap_generator.sig="eee";function wrap_async_generator(gen,proxies){try{proxies=new Set(proxies);const msg="This borrowed proxy was automatically destroyed "+"when an asynchronous generator completed execution. Try "+"using create_proxy or create_once_callable.";function cleanup(){proxies.forEach(px=>Module.pyproxy_destroy(px,msg))}function wrap(funcname){return async function(val){if(API.isPyProxy(val)){val=val.copy();proxies.add(val)}let res;try{res=await gen[funcname](val)}catch(e){cleanup();throw e}if(res.done){proxies.delete(res.value);cleanup()}return res}}return{get[Symbol.toStringTag](){return"AsyncGenerator"},[Symbol.asyncIterator](){return this},next:wrap("next"),throw:wrap("throw"),return:wrap("return")}}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}wrap_async_generator.sig="eee";function throw_no_gil(){throw new API.NoGilError("Attempted to use PyProxy when Python GIL not held")}throw_no_gil.sig="v";function pyproxy_Check(val){return API.isPyProxy(val)}pyproxy_Check.sig="ie";function pyproxy_AsPyObject(val){if(!API.isPyProxy(val)||!pyproxyIsAlive(val)){return 0}return Module.PyProxy_getPtr(val)}pyproxy_AsPyObject.sig="ie";function destroy_proxies(proxies,msg_ptr){let msg=undefined;if(msg_ptr){msg=_JsvString_FromId(msg_ptr)}for(let px of proxies){Module.pyproxy_destroy(px,msg,false)}}destroy_proxies.sig="vei";function gc_register_proxies(proxies){for(let px of proxies){Module.gc_register_proxy(Module.PyProxy_getAttrs(px).shared)}}gc_register_proxies.sig="ve";function destroy_proxy(px,msg_ptr){const{shared,props}=Module.PyProxy_getAttrsQuiet(px);if(!shared.ptr){return}if(props.roundtrip){return}let msg=undefined;if(msg_ptr){msg=_JsvString_FromId(msg_ptr)}Module.pyproxy_destroy(px,msg,false)}destroy_proxy.sig="vei";function proxy_cache_get(proxyCache,descr){const proxy=proxyCache.get(descr);if(!proxy){return Module.error}if(pyproxyIsAlive(proxy)){return proxy}else{proxyCache.delete(descr);return Module.error}}proxy_cache_get.sig="eei";function proxy_cache_set(proxyCache,descr,proxy){proxyCache.set(descr,proxy)}proxy_cache_set.sig="veie";function _pyproxyGen_make_result(done,value){return{done:!!done,value}}_pyproxyGen_make_result.sig="eie";function array_to_js(array,len){return Array.from(HEAP32.subarray(array/4>>>0,array/4+len>>>0))}array_to_js.sig="eii";function _pyproxy_get_buffer_result(start_ptr,smallest_ptr,largest_ptr,readonly,format,itemsize,shape,strides,view,c_contiguous,f_contiguous,sentinel){format=UTF8ToString(format);return{start_ptr,smallest_ptr,largest_ptr,readonly,format,itemsize,shape,strides,view,c_contiguous,f_contiguous}}_pyproxy_get_buffer_result.sig="eiiiiiieeiiii";function pyproxy_new_ex(ptrobj,capture_this,roundtrip,gcRegister,jsonAdaptor){try{return Module.pyproxy_new(ptrobj,{props:{captureThis:!!capture_this,roundtrip:!!roundtrip},gcRegister,jsonAdaptor})}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}pyproxy_new_ex.sig="eiiiii";function pyproxy_new(ptrobj){try{return Module.pyproxy_new(ptrobj)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}pyproxy_new.sig="ei";function create_once_callable(obj,may_syncify){try{_Py_IncRef(obj);let alreadyCalled=!!0;function wrapper(...args){if(alreadyCalled){throw new Error("OnceProxy can only be called once")}try{if(may_syncify){return Module.callPyObjectMaybePromising(obj,args)}else{return Module.callPyObject(obj,args)}}finally{wrapper.destroy()}}wrapper.destroy=function(){if(alreadyCalled){throw new Error("OnceProxy has already been destroyed")}alreadyCalled=!!1;Module.finalizationRegistry.unregister(wrapper);_Py_DecRef(obj)};Module.finalizationRegistry.register(wrapper,[obj,undefined],wrapper);return wrapper}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}create_once_callable.sig="eii";function create_promise_handles(handle_result,handle_exception,done_callback,js2py_converter){try{if(handle_result){_Py_IncRef(handle_result)}if(handle_exception){_Py_IncRef(handle_exception)}if(js2py_converter){_Py_IncRef(js2py_converter)}if(!done_callback){done_callback=x=>{}}let used=!!0;function checkUsed(){if(used){throw new Error("One of the promise handles has already been called.")}}function destroy(){checkUsed();used=!!1;if(handle_result){_Py_DecRef(handle_result)}if(handle_exception){_Py_DecRef(handle_exception)}if(js2py_converter){_Py_DecRef(js2py_converter)}}function onFulfilled(res){checkUsed();try{if(handle_result){return _create_promise_handles_result_helper(handle_result,js2py_converter,res)}}finally{done_callback(res);destroy()}}function onRejected(err){checkUsed();try{if(handle_exception){return Module.callPyObjectMaybePromising(handle_exception,[err])}}finally{done_callback(undefined);destroy()}}onFulfilled.destroy=destroy;onRejected.destroy=destroy;return[onFulfilled,onRejected]}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}create_promise_handles.sig="eiiei";function _python2js_buffer_inner(buf,itemsize,ndim,format,shape,strides,suboffsets){try{let converter=Module.get_converter(format,itemsize);return Module._python2js_buffer_recursive(buf,0,{ndim,format,itemsize,shape,strides,suboffsets,converter})}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}_python2js_buffer_inner.sig="eiiiiiii";function jslib_init_js(){try{HEAP32[_Jsr_undefined/4>>>0]=_hiwire_intern(undefined);HEAP32[_Jsr_true/4>>>0]=_hiwire_intern(true);HEAP32[_Jsr_false/4>>>0]=_hiwire_intern(false);HEAP32[_Jsr_error/4>>>0]=_hiwire_intern(_Jsv_GetNull());HEAP32[_Jsr_novalue/4>>>0]=_hiwire_intern({noValueMarker:1});Module.novalue=_hiwire_get(HEAP32[_Jsr_novalue/4>>>0]);Module.error=_hiwire_get(HEAP32[_Jsr_error/4>>>0]);Hiwire.num_keys=_hiwire_num_refs;return 0}catch(e){Module.handle_js_error(e);return-1}return 0}jslib_init_js.sig="i";function JsvNoValue_Check(v){return v===Module.novalue}JsvNoValue_Check.sig="ie";function JsvNum_fromInt(x){return x}JsvNum_fromInt.sig="ei";function JsvNum_fromDouble(val){return val}JsvNum_fromDouble.sig="ed";function JsvNum_fromDigits(digits,ndigits){let result=BigInt(0);for(let i=0;i<ndigits;i++){result+=BigInt(HEAPU32[(digits>>2)+i>>>0])<<BigInt(32*i)}result+=BigInt(HEAPU32[(digits>>2)+ndigits-1>>>0]&2147483648)<<BigInt(1+32*(ndigits-1));if(-Number.MAX_SAFE_INTEGER<result&&result<Number.MAX_SAFE_INTEGER){result=Number(result)}return result}JsvNum_fromDigits.sig="eii";function Jsv_to_bool(x){return!!x}Jsv_to_bool.sig="ie";function Jsv_typeof(x){return typeof x}Jsv_typeof.sig="ee";function Jsv_constructorName(obj){try{return stringToNewUTF8(obj.constructor.name)}catch(e){Module.handle_js_error(e);return 0}errNoRet()}Jsv_constructorName.sig="ie";function JsvUTF8ToString(ptr){return UTF8ToString(ptr)}JsvUTF8ToString.sig="ei";function JsvArray_New(){return[]}JsvArray_New.sig="e";function JsvArray_Check(obj){try{if(Array.isArray(obj)){return true}let typeTag=getTypeTag(obj);if(typeTag==="[object HTMLCollection]"||typeTag==="[object NodeList]"){return true}if(ArrayBuffer.isView(obj)&&obj.constructor.name!=="DataView"){return true}return false}catch(e){return false}}JsvArray_Check.sig="ie";function JsvArray_Get(arr,idx){try{const result=arr[idx];if(result===undefined&&!(idx in arr)){return Module.error}return result}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvArray_Get.sig="eei";function JsvArray_Set(arr,idx,val){try{arr[idx]=val}catch(e){Module.handle_js_error(e);return-1}return 0}JsvArray_Set.sig="ieie";function JsvArray_Delete(arr,idx){try{if(idx<0||idx>=arr.length){return Module.error}return arr.splice(idx,1)[0]}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvArray_Delete.sig="eei";function JsvArray_Push(arr,obj){return arr.push(obj)}JsvArray_Push.sig="iee";function JsvArray_Extend(arr,vals){arr.push(...vals)}JsvArray_Extend.sig="vee";function JsvArray_Insert(arr,idx,value){try{arr.splice(idx,0,value)}catch(e){Module.handle_js_error(e);return-1}return 0}JsvArray_Insert.sig="ieie";function JsvArray_ShallowCopy(arr){try{return"slice"in arr?arr.slice():Array.from(arr)}catch(e){Module.handle_js_error(e);return-1}return 0}JsvArray_ShallowCopy.sig="ee";function JsvArray_slice(obj,length,start,stop,step){try{let result;if(step===1){result=obj.slice(start,stop)}else{result=Array.from({length},(_,i)=>obj[start+i*step])}return result}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvArray_slice.sig="eeiiii";function JsvArray_slice_assign(obj,slicelength,start,stop,step,values_length,values){try{let jsvalues=[];for(let i=0;i<values_length;i++){const ref=_python2js(HEAPU32[(values>>2)+i>>>0]);if(ref===Module.error){return-1}jsvalues.push(ref)}if(step===1){obj.splice(start,slicelength,...jsvalues)}else{if(values!==0){for(let i=0;i<slicelength;i++){obj.splice(start+i*step,1,jsvalues[i])}}else{for(let i=slicelength-1;i>=0;i--){obj.splice(start+i*step,1)}}}}catch(e){Module.handle_js_error(e);return-1}return 0}JsvArray_slice_assign.sig="ieiiiiii";function JsvObject_New(){return{}}JsvObject_New.sig="e";function JsvObject_SetAttr(obj,attr,value){try{obj[attr]=value}catch(e){Module.handle_js_error(e);return-1}return 0}JsvObject_SetAttr.sig="ieee";function JsvObject_Entries(obj){try{return Object.entries(obj)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvObject_Entries.sig="ee";function JsvObject_Keys(obj){try{return Object.keys(obj)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvObject_Keys.sig="ee";function JsvObject_Values(obj){try{return Object.values(obj)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvObject_Values.sig="ee";function JsvObject_toString(obj){try{if(hasMethod(obj,"toString")){return obj.toString()}return Object.prototype.toString.call(obj)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvObject_toString.sig="ee";function JsvObject_CallMethod(obj,meth,args){try{return obj[meth](...args)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvObject_CallMethod.sig="eeee";function JsvObject_CallMethod_NoArgs(obj,meth){try{return obj[meth]()}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvObject_CallMethod_NoArgs.sig="eee";function JsvObject_CallMethod_OneArg(obj,meth,arg){try{return obj[meth](arg)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvObject_CallMethod_OneArg.sig="eeee";function JsvObject_CallMethod_TwoArgs(obj,meth,arg1,arg2){try{return obj[meth](arg1,arg2)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvObject_CallMethod_TwoArgs.sig="eeeee";function JsvFunction_Check(obj){try{return typeof obj==="function"}catch(e){return false}}JsvFunction_Check.sig="ie";function JsvFunction_CallBound(func,this_,args){try{return Function.prototype.apply.apply(func,[this_,args])}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvFunction_CallBound.sig="eeee";function JsvFunction_Call_OneArg(func,arg){try{return func(arg)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvFunction_Call_OneArg.sig="eee";function JsvFunction_Construct(func,args){try{return Reflect.construct(func,args)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvFunction_Construct.sig="eee";function JsvPromise_Check(obj){try{return isPromise(obj)}catch(e){return false}}JsvPromise_Check.sig="ie";function JsvPromise_Resolve(obj){try{return Promise.resolve(obj)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvPromise_Resolve.sig="ee";function jslib_init_buffers_js(){try{const dtypes_str=Array.from("bBhHiIqQfd").join(String.fromCharCode(0));const dtypes_ptr=stringToNewUTF8(dtypes_str);const dtypes_map=Object.fromEntries(Object.entries(dtypes_str).map(([idx,val])=>[val,dtypes_ptr+ +idx]));const buffer_datatype_map=new Map([["Int8Array",[dtypes_map["b"],1,true]],["Uint8Array",[dtypes_map["B"],1,true]],["Uint8ClampedArray",[dtypes_map["B"],1,true]],["Int16Array",[dtypes_map["h"],2,true]],["Uint16Array",[dtypes_map["H"],2,true]],["Int32Array",[dtypes_map["i"],4,true]],["Uint32Array",[dtypes_map["I"],4,true]],["Float32Array",[dtypes_map["f"],4,true]],["Float64Array",[dtypes_map["d"],8,true]],["BigInt64Array",[dtypes_map["q"],8,true]],["BigUint64Array",[dtypes_map["Q"],8,true]],["DataView",[dtypes_map["B"],1,false]],["ArrayBuffer",[dtypes_map["B"],1,false]]]);Module.get_buffer_datatype=function(jsobj){return buffer_datatype_map.get(jsobj.constructor.name)||[0,0,false]}}catch(e){Module.handle_js_error(e);return-1}return 0}jslib_init_buffers_js.sig="i";function JsvBuffer_assignToPtr(buf,ptr){try{Module.HEAPU8.set(bufferAsUint8Array(buf),ptr)}catch(e){Module.handle_js_error(e);return-1}return 0}JsvBuffer_assignToPtr.sig="iei";function JsvBuffer_assignFromPtr(buf,ptr){try{bufferAsUint8Array(buf).set(Module.HEAPU8.subarray(ptr,ptr+buf.byteLength))}catch(e){Module.handle_js_error(e);return-1}return 0}JsvBuffer_assignFromPtr.sig="iei";function JsvBuffer_readFromFile(buf,fd){try{let uint8_buf=bufferAsUint8Array(buf);let stream=Module.FS.streams[fd];Module.FS.read(stream,uint8_buf,0,uint8_buf.byteLength)}catch(e){Module.handle_js_error(e);return-1}return 0}JsvBuffer_readFromFile.sig="iei";function JsvBuffer_writeToFile(buf,fd){try{let uint8_buf=bufferAsUint8Array(buf);let stream=Module.FS.streams[fd];Module.FS.write(stream,uint8_buf,0,uint8_buf.byteLength)}catch(e){Module.handle_js_error(e);return-1}return 0}JsvBuffer_writeToFile.sig="iei";function JsvBuffer_intoFile(buf,fd){try{let uint8_buf=bufferAsUint8Array(buf);let stream=Module.FS.streams[fd];Module.FS.write(stream,uint8_buf,0,uint8_buf.byteLength,undefined,true)}catch(e){Module.handle_js_error(e);return-1}return 0}JsvBuffer_intoFile.sig="iei";function JsvGenerator_Check(obj){try{return getTypeTag(obj)==="[object Generator]"}catch(e){return false}}JsvGenerator_Check.sig="ie";function JsvAsyncGenerator_Check(obj){try{return getTypeTag(obj)==="[object AsyncGenerator]"}catch(e){return false}}JsvAsyncGenerator_Check.sig="ie";function JsvError_Throw(e){throw e}JsvError_Throw.sig="ve";function Jsv_less_than(a,b){try{return!!(a<b)}catch(e){return false}}Jsv_less_than.sig="iee";function Jsv_less_than_equal(a,b){try{return!!(a<=b)}catch(e){return false}}Jsv_less_than_equal.sig="iee";function Jsv_equal(a,b){try{return!!(a===b)}catch(e){return false}}Jsv_equal.sig="iee";function Jsv_not_equal(a,b){try{return!!(a!==b)}catch(e){return false}}Jsv_not_equal.sig="iee";function Jsv_greater_than(a,b){try{return!!(a>b)}catch(e){return false}}Jsv_greater_than.sig="iee";function Jsv_greater_than_equal(a,b){try{return!!(a>=b)}catch(e){return false}}Jsv_greater_than_equal.sig="iee";function JsvMap_New(){try{return new Map}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvMap_New.sig="e";function JsvLiteralMap_New(){try{return new API.LiteralMap}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvLiteralMap_New.sig="e";function JsvMap_Set(map,key,val){try{map.set(key,val)}catch(e){Module.handle_js_error(e);return-1}return 0}JsvMap_Set.sig="ieee";function JsvSet_New(){try{return new Set}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}JsvSet_New.sig="e";function JsvSet_Add(set,val){try{set.add(val)}catch(e){Module.handle_js_error(e);return-1}return 0}JsvSet_Add.sig="iee";function _python2js_addto_postprocess_list(list,parent,key,value){list.push([parent,key,value])}_python2js_addto_postprocess_list.sig="veeei";function _python2js_handle_postprocess_list(list,cache){for(const[parent,key,ptr]of list){let val=cache.get(ptr);if(parent.constructor.name==="LiteralMap"){parent.set(key,val)}else{parent[key]=val}}}_python2js_handle_postprocess_list.sig="vee";function _python2js_ucs1(ptr,len){try{let jsstr="";for(let i=0;i<len;++i){jsstr+=String.fromCharCode(HEAPU8[ptr+i>>>0])}return jsstr}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}_python2js_ucs1.sig="eii";function _python2js_ucs2(ptr,len){try{let jsstr="";for(let i=0;i<len;++i){jsstr+=String.fromCharCode(HEAPU16[(ptr>>1)+i>>>0])}return jsstr}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}_python2js_ucs2.sig="eii";function _python2js_ucs4(ptr,len){try{let jsstr="";for(let i=0;i<len;++i){jsstr+=String.fromCodePoint(HEAPU32[(ptr>>2)+i>>>0])}return jsstr}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}_python2js_ucs4.sig="eii";function _python2js_add_to_cache(cache,pyparent,jsparent){try{cache.set(pyparent,jsparent)}catch(e){Module.handle_js_error(e);return-1}return 0}_python2js_add_to_cache.sig="ieie";function _python2js_cache_lookup(cache,pyparent){return cache.get(pyparent)||Module.error}_python2js_cache_lookup.sig="eei";function _JsObject_Set_js(obj,key,value){try{if(key in obj){return-2}obj[key]=value}catch(e){Module.handle_js_error(e);return-1}return 0}_JsObject_Set_js.sig="ieee";function _JsArray_PushEntry_helper(array,key,value){try{array.push([key,value])}catch(e){Module.handle_js_error(e);return-1}return 0}_JsArray_PushEntry_helper.sig="ieee";function _JsArray_PostProcess_helper(jscontext,array){try{return jscontext.dict_converter(array)}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}_JsArray_PostProcess_helper.sig="eee";function python2js__default_converter_js(jscontext,object){try{let proxy=Module.pyproxy_new(object);try{return jscontext.default_converter(proxy,jscontext.converter,jscontext.cacheConversion)}finally{proxy.destroy()}}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}python2js__default_converter_js.sig="eei";function python2js__eager_converter_js(jscontext,object){try{if(jscontext.eager_visited.has(object)){return Module.novalue}jscontext.eager_visited.add(object);const proxy=Module.pyproxy_new(object);try{return jscontext.eager_converter(proxy,jscontext.converter,jscontext.cacheConversion)}finally{proxy.destroy()}}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}python2js__eager_converter_js.sig="eei";function python2js_custom__create_jscontext(context,cache,dict_converter,default_converter,eager_converter){try{const jscontext={};if(dict_converter){jscontext.dict_converter=dict_converter}if(default_converter){jscontext.default_converter=default_converter;jscontext.cacheConversion=function(input,output){if(!API.isPyProxy(input)){throw new TypeError("The first argument to cacheConversion must be a PyProxy.")}const input_ptr=Module.PyProxy_getPtr(input);cache.set(input_ptr,output)}}if(eager_converter){jscontext.eager_converter=eager_converter;jscontext.eager_visited=new Set}if(default_converter||eager_converter){jscontext.converter=function(x){if(!API.isPyProxy(x)){return x}const ptr=Module.PyProxy_getPtr(x);let res;try{res=__python2js(context,ptr)}catch(e){API.fatal_error(e)}if(res===Module.error){_pythonexc2js()}return res}}return jscontext}catch(e){Module.handle_js_error(e);return Module.error}errNoRet()}python2js_custom__create_jscontext.sig="eieeee";function destroy_proxies_js(proxies_id){try{for(const proxy of proxies_id){proxy.destroy()}}catch(e){Module.handle_js_error(e);return-1}return 0}destroy_proxies_js.sig="ie";function pyodide_js_init(){"use strict";(()=>{var Dr=Object.create;var ze=Object.defineProperty;var Rr=Object.getOwnPropertyDescriptor;var Lr=Object.getOwnPropertyNames;var $r=Object.getPrototypeOf,Cr=Object.prototype.hasOwnProperty;var a=(t,e)=>ze(t,"name",{value:e,configurable:!0}),b=(t=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(t,{get:(e,r)=>(typeof require<"u"?require:e)[r]}):t)(function(t){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+t+'" is not supported')});var Ur=(t,e,r,n)=>{if(e&&typeof e=="object"||typeof e=="function")for(let o of Lr(e))!Cr.call(t,o)&&o!==r&&ze(t,o,{get:()=>e[o],enumerable:!(n=Rr(e,o))||n.enumerable});return t};var E=(t,e,r)=>(r=t!=null?Dr($r(t)):{},Ur(e||!t||!t.__esModule?ze(r,"default",{value:t,enumerable:!0}):r,t));function Br(t){return!isNaN(parseFloat(t))&&isFinite(t)}a(Br,"_isNumber");function D(t){return t.charAt(0).toUpperCase()+t.substring(1)}a(D,"_capitalize");function Ge(t){return function(){return this[t]}}a(Ge,"_getter");var $=["isConstructor","isEval","isNative","isToplevel"],C=["columnNumber","lineNumber"],U=["fileName","functionName","source"],Hr=["args"],jr=["evalOrigin"],se=$.concat(C,U,Hr,jr);function v(t){if(t)for(var e=0;e<se.length;e++)t[se[e]]!==void 0&&this["set"+D(se[e])](t[se[e]])}a(v,"StackFrame");v.prototype={getArgs:a(function(){return this.args},"getArgs"),setArgs:a(function(t){if(Object.prototype.toString.call(t)!=="[object Array]")throw new TypeError("Args must be an Array");this.args=t},"setArgs"),getEvalOrigin:a(function(){return this.evalOrigin},"getEvalOrigin"),setEvalOrigin:a(function(t){if(t instanceof v)this.evalOrigin=t;else if(t instanceof Object)this.evalOrigin=new v(t);else throw new TypeError("Eval Origin must be an Object or StackFrame")},"setEvalOrigin"),toString:a(function(){var t=this.getFileName()||"",e=this.getLineNumber()||"",r=this.getColumnNumber()||"",n=this.getFunctionName()||"";return this.getIsEval()?t?"[eval] ("+t+":"+e+":"+r+")":"[eval]:"+e+":"+r:n?n+" ("+t+":"+e+":"+r+")":t+":"+e+":"+r},"toString")};v.fromString=a(function(e){var r=e.indexOf("("),n=e.lastIndexOf(")"),o=e.substring(0,r),i=e.substring(r+1,n).split(","),s=e.substring(n+1);if(s.indexOf("@")===0)var l=/@(.+?)(?::(\d+))?(?::(\d+))?$/.exec(s,""),c=l[1],u=l[2],y=l[3];return new v({functionName:o,args:i||void 0,fileName:c,lineNumber:u||void 0,columnNumber:y||void 0})},"StackFrame$$fromString");for(O=0;O<$.length;O++)v.prototype["get"+D($[O])]=Ge($[O]),v.prototype["set"+D($[O])]=function(t){return function(e){this[t]=!!e}}($[O]);var O;for(T=0;T<C.length;T++)v.prototype["get"+D(C[T])]=Ge(C[T]),v.prototype["set"+D(C[T])]=function(t){return function(e){if(!Br(e))throw new TypeError(t+" must be a Number");this[t]=Number(e)}}(C[T]);var T;for(F=0;F<U.length;F++)v.prototype["get"+D(U[F])]=Ge(U[F]),v.prototype["set"+D(U[F])]=function(t){return function(e){this[t]=String(e)}}(U[F]);var F,le=v;function Wr(){var t=/^\s*at .*(\S+:\d+|\(native\))/m,e=/^(eval@)?(\[native code])?$/;return{parse:a(function(n){if(n.stack&&n.stack.match(t))return this.parseV8OrIE(n);if(n.stack)return this.parseFFOrSafari(n);throw new Error("Cannot parse given Error object")},"ErrorStackParser$$parse"),extractLocation:a(function(n){if(n.indexOf(":")===-1)return[n];var o=/(.+?)(?::(\d+))?(?::(\d+))?$/,i=o.exec(n.replace(/[()]/g,""));return[i[1],i[2]||void 0,i[3]||void 0]},"ErrorStackParser$$extractLocation"),parseV8OrIE:a(function(n){var o=n.stack.split(`\n`).filter(function(i){return!!i.match(t)},this);return o.map(function(i){i.indexOf("(eval ")>-1&&(i=i.replace(/eval code/g,"eval").replace(/(\(eval at [^()]*)|(,.*$)/g,""));var s=i.replace(/^\s+/,"").replace(/\(eval code/g,"(").replace(/^.*?\s+/,""),l=s.match(/ (\(.+\)$)/);s=l?s.replace(l[0],""):s;var c=this.extractLocation(l?l[1]:s),u=l&&s||void 0,y=["eval","<anonymous>"].indexOf(c[0])>-1?void 0:c[0];return new le({functionName:u,fileName:y,lineNumber:c[1],columnNumber:c[2],source:i})},this)},"ErrorStackParser$$parseV8OrIE"),parseFFOrSafari:a(function(n){var o=n.stack.split(`\n`).filter(function(i){return!i.match(e)},this);return o.map(function(i){if(i.indexOf(" > eval")>-1&&(i=i.replace(/ line (\d+)(?: > eval line \d+)* > eval:\d+:\d+/g,":$1")),i.indexOf("@")===-1&&i.indexOf(":")===-1)return new le({functionName:i});var s=/((.*".+"[^@]*)?[^@]*)(?:@)/,l=i.match(s),c=l&&l[1]?l[1]:void 0,u=this.extractLocation(i.replace(s,""));return new le({functionName:c,fileName:u[0],lineNumber:u[1],columnNumber:u[2],source:i})},this)},"ErrorStackParser$$parseFFOrSafari")}}a(Wr,"ErrorStackParser");var zr=new Wr;var Ve=zr;function Mt(t){if(typeof t=="string")t=new Error(t);else if(t&&typeof t=="object"&&t.name==="ExitStatus"){let e=t.status;t=new z(t.message),t.status=e}else if(typeof t!="object"||t===null||typeof t.stack!="string"||typeof t.message!="string"){let e=API.getTypeTag(t),r=`A value of type ${typeof t} with tag ${e} was thrown as an error!`;try{r+=`\nString interpolation of the thrown value gives """${t}""".`}catch{r+=`\nString interpolation of the thrown value fails.`}try{r+=`\nThe thrown value's toString method returns """${t.toString()}""".`}catch{r+=`\nThe thrown value's toString method fails.`}t=new Error(r)}return t}a(Mt,"ensureCaughtObjectIsError");var Ke=class extends Error{static{a(this,"CppException")}constructor(e,r,n){let o=Module.getCppExceptionThrownObjectFromWebAssemblyException(n);r||(r=`The exception is an object of type ${e} at address ${o} which does not inherit from std::exception`),super(r),this.ty=e}get name(){return`${this.constructor.name} ${this.ty}`}},Gr=WebAssembly.Exception,Vr=a(t=>t instanceof Gr,"isWasmException");function Nt(t){let[e,r]=Module.getExceptionMessage(t);return new Ke(e,r,t)}a(Nt,"convertCppException");Tests.convertCppException=Nt;var Et=!1;API.fatal_error=function(t){if(t&&t.pyodide_fatal_error)return;if(Et){console.error("Recursive call to fatal_error. Inner error was:"),console.error(t);return}if(t instanceof G)throw t;typeof t=="number"||Vr(t)?t=Nt(t):t=Mt(t),t.pyodide_fatal_error=!0,Et=!0;let e=t instanceof z;e||(console.error("Pyodide has suffered a fatal error. Please report this to the Pyodide maintainers."),console.error("The cause of the fatal error was:"),API.inTestHoist?(console.error(t.toString()),console.error(t.stack)):console.error(t));try{e||_dump_traceback();let n=`Pyodide already ${e?"exited":"fatally failed"} and can no longer be used.`;for(let o of Reflect.ownKeys(API.public_api))typeof o=="string"&&o.startsWith("_")||o==="version"||Object.defineProperty(API.public_api,o,{enumerable:!0,configurable:!0,get:a(()=>{throw new Error(n)},"get")});API.on_fatal&&API.on_fatal(t)}catch(r){console.error("Another error occurred while handling the fatal error:"),console.error(r)}throw t};API.maybe_fatal_error=function(t){API._skip_unwind_fatal_error&&t==="unwind"||API.fatal_error(t)};var Je=[];API.capture_stderr=function(){Je=[],Module.FS.createDevice("/dev","capture_stderr",null,t=>Je.push(t)),Module.FS.closeStream(2),Module.FS.open("/dev/capture_stderr",1)};API.restore_stderr=function(){return Module.FS.closeStream(2),Module.FS.unlink("/dev/capture_stderr"),Module.FS.open("/dev/stderr",1),UTF8ArrayToString(new Uint8Array(Je))};API.fatal_loading_error=function(...t){let e=t.join(" ");if(_PyErr_Occurred()){API.capture_stderr(),_PyErr_Print();let r=API.restore_stderr();e+=`\n`+r}throw new ce(e)};function qe(t){if(!t)return!1;let e=t.fileName||"";if(e.includes("wasm-function"))return!0;if(!e.includes("pyodide.asm.js"))return!1;let r=t.functionName||"";return r.startsWith("Object.")&&(r=r.slice(7)),API.public_api&&r in API.public_api&&r!=="PythonError"?(t.functionName=r,!1):!0}a(qe,"isPyodideFrame");function kt(t){return qe(t)&&t.functionName==="new_error"}a(kt,"isErrorStart");Module.handle_js_error=function(t){if(t&&t.pyodide_fatal_error)throw t;if(t instanceof w)return;let e=!1;t instanceof R&&(e=_restore_sys_last_exception(t.__error_address));let r,n;try{r=Ve.parse(t)}catch{n=!0}if(n&&(t=Mt(t)),!e){let o=_JsProxy_create(t);_set_error(o),_Py_DecRef(o)}if(!n){if(kt(r[0])||kt(r[1]))for(;qe(r[0]);)r.shift();for(let o of r){if(qe(o))break;let i=stringToNewUTF8(o.functionName||"???"),s=stringToNewUTF8(o.fileName||"???.js");__PyTraceback_Add(i,s,o.lineNumber),_free(i),_free(s)}}};var R=class extends Error{static{a(this,"PythonError")}constructor(e,r,n){let o=Error.stackTraceLimit;Error.stackTraceLimit=1/0,super(r),Error.stackTraceLimit=o,this.type=e,this.__error_address=n}};API.PythonError=R;var w=class extends Error{static{a(this,"_PropagatePythonError")}constructor(){super("If you are seeing this message, an internal Pyodide error has occurred. Please report it to the Pyodide maintainers.")}};Module._PropagatePythonError=w;function Kr(t){Object.defineProperty(t.prototype,"name",{value:t.name})}a(Kr,"setName");var ce=class extends Error{static{a(this,"FatalPyodideError")}},z=class extends Error{static{a(this,"Exit")}},G=class extends Error{static{a(this,"NoGilError")}};[w,ce,z,R,G].forEach(Kr);API.NoGilError=G;API.errorConstructors=new Map([EvalError,RangeError,ReferenceError,SyntaxError,TypeError,URIError,globalThis.DOMException,globalThis.AssertionError,globalThis.SystemError].filter(t=>t).map(t=>[t.constructor.name,t]));API.deserializeError=function(t,e,r){let n=API.errorConstructors.get(t)||Error,o=new n(e);return API.errorConstructors.has(t)||(o.name=t),o.message=e,o.stack=r,o};function Jr(t){let e=0,r=[];for(let s of t){let l=s.codePointAt(0);r.push(l),e=l>e?l:e}let n=r.length,o=_PyUnicode_New(n,e);if(o===0)throw new w;let i=_PyUnicode_Data(o);if(e>65535)for(let s=0;s<n;s++)HEAPU32[(i>>2)+s>>>0]=r[s];else if(e>255)for(let s=0;s<n;s++)HEAPU16[(i>>1)+s>>>0]=r[s];else for(let s=0;s<n;s++)HEAPU8[i+s>>>0]=r[s];return o}a(Jr,"js2python_string");function qr(t){let e=t,r=0;for(t<0&&(t=-t),t<<=BigInt(1);t;)r++,t>>=BigInt(32);let n=stackSave(),o=stackAlloc(r*4);t=e;for(let s=0;s<r;s++)HEAPU32[(o>>2)+s>>>0]=Number(t&BigInt(4294967295)),t>>=BigInt(32);let i=__PyLong_FromByteArray(o,r*4,!0,!0);return stackRestore(n),i}a(qr,"js2python_bigint");function V(t){let e=Yr(t);if(e===0)throw new w;return e}a(V,"js2python_convertImmutable");Module.js2python_convertImmutable=V;function Yr(t){let e=typeof t;if(e==="string")return Jr(t);if(e==="number")return Number.isSafeInteger(t)?_PyLong_FromDouble(t):_PyFloat_FromDouble(t);if(e==="bigint")return qr(t);if(t===void 0)return __js2python_none();if(t===null)return __js2python_null();if(t===!0)return __js2python_true();if(t===!1)return __js2python_false();if(API.isPyProxy(t)){let{props:r,shared:n}=Module.PyProxy_getAttrs(t);return r.roundtrip?_JsProxy_create(t):__js2python_pyproxy(n.ptr)}}a(Yr,"js2python_convertImmutableInner");function Qr(t,e){let r=_PyList_New(t.length);if(r===0)return 0;let n=0;try{e.cache.set(t,r);for(let o=0;o<t.length;o++){if(n=ue(t[o],e),_Py_IncRef(n),_PyList_SetItem(r,o,n)===-1)throw new w;_Py_DecRef(n),n=0}}catch(o){throw _Py_DecRef(n),_Py_DecRef(r),o}return r}a(Qr,"js2python_convertList");function Ot(t,e,r){let n=_PyDict_New();if(n===0)return 0;let o=0,i=0;try{r.cache.set(t,n);for(let[s,l]of e){if(o=V(s),o===void 0){let c=s.constructor&&s.constructor.name||typeof s;throw new Error(`Cannot use key of type ${c} as a key to a Python dict`)}if(i=ue(l,r),_PyDict_SetItem(n,o,i)===-1)throw new w;_Py_DecRef(o),o=0,_Py_DecRef(i),i=0}}catch(s){throw _Py_DecRef(o),_Py_DecRef(i),_Py_DecRef(n),s}return n}a(Ot,"js2python_convertMap");function Xr(t,e){let r=_PySet_New(0);if(r===0)return 0;let n=0;try{e.cache.set(t,r);for(let o of t){if(n=V(o),n===void 0){let s=o.constructor&&o.constructor.name||typeof o;throw new Error(`Cannot use key of type ${s} as a key to a Python set`)}if(_PySet_Add(r,n)===-1)throw new w;_Py_DecRef(n),n=0}}catch(o){throw _Py_DecRef(n),_Py_DecRef(r),o}return r}a(Xr,"js2python_convertSet");function Tt(t,e){if(t.has(1)&&t.has(!0))throw new Error(`Cannot faithfully convert ${e} into Python since it contains both 1 and true as keys.`);if(t.has(0)&&t.has(!1))throw new Error(`Cannot faithfully convert ${e} into Python since it contains both 0 and false as keys.`)}a(Tt,"checkBoolIntCollision");function Zr(t,e){let r=getTypeTag(t);if(Array.isArray(t)||t==="[object HTMLCollection]"||t==="[object NodeList]")return Qr(t,e);if(r==="[object Map]"||t instanceof Map)return Tt(t,"Map"),Ot(t,t.entries(),e);if(r==="[object Set]"||t instanceof Set)return Tt(t,"Set"),Xr(t,e);if(r==="[object Object]"&&(t.constructor===void 0||t.constructor.name==="Object"))return Ot(t,Object.entries(t),e);if(r==="[object ArrayBuffer]"||ArrayBuffer.isView(t)){let[n,o]=Module.get_buffer_datatype(t);return _JsBuffer_CopyIntoMemoryView(t,t.byteLength,n,o)}}a(Zr,"js2python_convertOther");function ue(t,e){let r=V(t);if(r!==void 0)return r;if(e.depth===0)return _JsProxy_create(t);if(r=e.cache.get(t),r!==void 0)return r;e.depth--;try{if(r=Zr(t,e),r!==void 0)return r;if(!e.defaultConverter)return _JsProxy_create(t);let n=e.defaultConverter(t,e.converter,e.cacheConversion);return r=V(n),API.isPyProxy(n)&&Module.pyproxy_destroy(n,"",!1),r!==void 0?r:_JsProxy_create(n)}finally{e.depth++}}a(ue,"js2python_convert_with_context");function en(t,{depth:e,defaultConverter:r}){let n={cache:new Map,depth:e,defaultConverter:r,converter:a(o=>Module.pyproxy_new(ue(o,n)),"converter"),cacheConversion(o,i){if(API.isPyProxy(i))n.cache.set(o,Module.PyProxy_getPtr(i));else throw new Error("Second argument should be a PyProxy!")}};return ue(t,n)}a(en,"js2python_convert");Module.js2python_convert=en;Module.processBufferFormatString=function(t,e=""){if(t.length>2)throw new Error(`Expected format string to have length <= 2, got '${t}'.`+e);let r=t.slice(-1),n=t.slice(0,-1),o;switch(n){case"!":case">":o=!0;break;case"<":case"@":case"=":case"":o=!1;break;default:throw new Error(`Unrecognized alignment character ${n}.`+e)}let i;switch(r){case"b":i=Int8Array;break;case"s":case"p":case"c":case"B":case"?":i=Uint8Array;break;case"h":i=Int16Array;break;case"H":i=Uint16Array;break;case"i":case"l":case"n":i=Int32Array;break;case"I":case"L":case"N":case"P":i=Uint32Array;break;case"q":if(globalThis.BigInt64Array===void 0)throw new Error("BigInt64Array is not supported on this browser."+e);i=BigInt64Array;break;case"Q":if(globalThis.BigUint64Array===void 0)throw new Error("BigUint64Array is not supported on this browser."+e);i=BigUint64Array;break;case"f":i=Float32Array;break;case"d":i=Float64Array;break;case"e":throw new Error("Javascript has no Float16 support.");default:throw new Error(`Unrecognized format character '${r}'.`+e)}return[i,o]};Module.python2js_buffer_1d_contiguous=function(t,e,r){let n=e*r;return HEAP8.slice(t,t+n).buffer};Module.python2js_buffer_1d_noncontiguous=function(t,e,r,n,o){let i=o*n,s=new Uint8Array(i);for(let l=0;l<n;++l){let c=t+l*e;r>=0&&(c=HEAPU32[(c>>2)+0>>>0]+r),s.set(HEAP8.subarray(c>>>0,c+o>>>0),l*o)}return s.buffer};Module._python2js_buffer_recursive=function(t,e,r){let{shape:n,strides:o,ndim:i,converter:s,itemsize:l,suboffsets:c}=r,u=HEAPU32[(n>>2)+e>>>0],y=HEAP32[(o>>2)+e>>>0],_=-1;if(i===0)return s(Module.python2js_buffer_1d_contiguous(t,l,1));if(c!==0&&(_=HEAP32[(c>>2)+e>>>0]),e===i-1){let f;return y===l&&_<0?f=Module.python2js_buffer_1d_contiguous(t,y,u):f=Module.python2js_buffer_1d_noncontiguous(t,y,_,u,l),s(f)}let m=[];for(let f=0;f<u;++f){let I=t+f*y;_>=0&&(curptr=HEAPU32[(curptr>>2)+0>>>0]+_),m.push(Module._python2js_buffer_recursive(I,e+1,r))}return m};Module.get_converter=function(t,e){let r=UTF8ToString(t),[n,o]=Module.processBufferFormatString(r);switch(r.slice(-1)){case"s":let u=new TextDecoder("utf8",{ignoreBOM:!0});return y=>u.decode(y);case"?":return y=>Array.from(new Uint8Array(y),_=>!!_)}if(!o)return u=>new n(u);let s,l;switch(e){case 2:s="getUint16",l="setUint16";break;case 4:s="getUint32",l="setUint32";break;case 8:s="getFloat64",l="setFloat64";break;default:throw new Error(`Unexpected size ${e}`)}function c(u){let y=new DataView(u),_=y[s].bind(y),m=y[l].bind(y);for(let f=0;f<y.byteLength;f+=e)m(f,_(f,!0),!1);return u}return a(c,"swapFunc"),u=>new n(c(u))};function tn(t){try{return t instanceof g}catch{return!1}}a(tn,"isPyProxy");API.isPyProxy=tn;globalThis.FinalizationRegistry?Module.finalizationRegistry=new FinalizationRegistry(({ptr:t,cache:e})=>{e&&(e.leaked=!0,Bt(e));try{_check_gil();let r=validSuspender.value;validSuspender.value=!1,_Py_DecRef(t),validSuspender.value=r}catch(r){API.fatal_error(r)}}):Module.finalizationRegistry={register(){},unregister(){}};var Ye=new Map;Module.pyproxy_alloc_map=Ye;var ct,ut;Module.enable_pyproxy_allocation_tracing=function(){ct=a(function(t){Ye.set(t,Error().stack)},"trace_pyproxy_alloc"),ut=a(function(t){Ye.delete(t)},"trace_pyproxy_dealloc")};Module.disable_pyproxy_allocation_tracing=function(){ct=a(function(t){},"trace_pyproxy_alloc"),ut=a(function(t){},"trace_pyproxy_dealloc")};Module.disable_pyproxy_allocation_tracing();var $t=Symbol("pyproxy.attrs");function rn(t,e){_check_gil();let r=validSuspender.value;validSuspender.value=!1;try{return _pyproxy_getflags(t,e)}finally{validSuspender.value=r}}a(rn,"pyproxy_getflags");function J(t,{flags:e,cache:r,props:n,shared:o,gcRegister:i,jsonAdaptor:s}={}){i===void 0&&(i=!0);let l=e!==void 0?e:rn(t,!!s);l===-1&&_pythonexc2js();let c=l&8192,u=l&32768,y=l&1<<17,_=Module.getPyProxyClass(l),m;l&256?(m=a(function(){},"target"),Object.setPrototypeOf(m,_.prototype),delete m.length,delete m.name,m.prototype=void 0):m=Object.create(_.prototype);let f=!!o;o||(r||(r={map:new Map,json_adaptor_map:new Map,refcnt:0}),r.refcnt++,o={ptr:t,cache:r,flags:l,promise:void 0,destroyed_msg:void 0,gcRegistered:!1},_Py_IncRef(t)),n=Object.assign({isBound:!1,captureThis:!1,boundArgs:[],roundtrip:!1},n);let I;u?I=M:c?I=fn:y?I=_n:I=P;let oe=new Proxy(m,I);!f&&i&&Ct(o),f||ct(oe);let ae={shared:o,props:n};return m[$t]=ae,oe}a(J,"pyproxy_new");Module.pyproxy_new=J;function Ct(t){let e=Object.assign({},t);t.gcRegistered=!0,Module.finalizationRegistry.register(t,e,t)}a(Ct,"gc_register_proxy");Module.gc_register_proxy=Ct;function Oe(t){return t[$t]}a(Oe,"_getAttrsQuiet");Module.PyProxy_getAttrsQuiet=Oe;function S(t){let e=Oe(t);if(!e.shared.ptr)throw new Error(e.shared.destroyed_msg);return e}a(S,"_getAttrs");Module.PyProxy_getAttrs=S;function p(t){return S(t).shared.ptr}a(p,"_getPtr");function h(t){return Object.getPrototypeOf(t).$$flags}a(h,"_getFlags");function Ut(t){return!!(h(t)&98304)}a(Ut,"isJsonAdaptor");function Ft(t,e,r){let{captureThis:n,boundArgs:o,boundThis:i,isBound:s}=S(t).props;return n?s?[i].concat(o,r):[e].concat(r):s?o.concat(r):r}a(Ft,"_adjustArgs");var Dt=new Map;Module.getPyProxyClass=function(t){let e=[[1,Qe],[2,B],[4,L],[8,k],[16,Ze],[32,tt],[2048,rt],[512,et],[1024,nt],[4096,ot],[64,st],[128,lt],[256,ke],[8192,at],[16384,it]],r=Dt.get(t);if(r)return r;let n={};for(let[l,c]of e)t&l&&Object.assign(n,Object.getOwnPropertyDescriptors(c.prototype));(t&8192||t&2)&&Object.assign(n,Object.getOwnPropertyDescriptors(Xe.prototype)),n.constructor=Object.getOwnPropertyDescriptor(g.prototype,"constructor"),Object.assign(n,Object.getOwnPropertyDescriptors({$$flags:t}));let o=t&256?jt:Ht,i=Object.create(o,n);function s(){}return a(s,"NewPyProxyClass"),s.prototype=i,Dt.set(t,s),s};Module.PyProxy_getPtr=p;var Rt="This borrowed attribute proxy was automatically destroyed in the process of destroying the proxy it was borrowed from. Try using the 'copy' method.";function Bt(t){if(t&&(t.refcnt--,!t.leaked&&t.refcnt===0)){for(let e of t.map.values())Module.pyproxy_destroy(e,Rt,!0);for(let e of t.json_adaptor_map.values())Module.pyproxy_destroy(e,Rt,!0)}}a(Bt,"pyproxy_decref_cache");function nn(t,e){if(e=e||"Object has already been destroyed",API.debug_ffi){let r=t.type,n;try{n=t.toString()}catch(o){if(o.pyodide_fatal_error)throw o}e+=`\nThe object was of type "${r}" and `,n?e+=`had repr "${n}"`:e+="an error was raised when trying to generate its repr"}else e+="\nFor more information about the cause of this error, use `pyodide.setDebug(true)`";return e}a(nn,"generateDestroyedMessage");Module.pyproxy_destroy=function(t,e,r){let{shared:n,props:o}=Oe(t);if(!n.ptr||!r&&o.roundtrip)return;n.destroyed_msg=nn(t,e);let i=n.ptr;n.ptr=0,n.gcRegistered&&Module.finalizationRegistry.unregister(n),Bt(n.cache);try{_check_gil();let s=validSuspender.value;validSuspender.value=!1,_Py_DecRef(i),ut(t),validSuspender.value=s}catch(s){API.fatal_error(s)}};function pe(t,e,r){let n=e.length,o=Object.keys(r),i=Object.values(r),s=o.length;e.push(...i);let l;try{_check_gil();let c=validSuspender.value;validSuspender.value=!1,l=__pyproxy_apply(t,e,n,o,s),validSuspender.value=c}catch(c){API.maybe_fatal_error(c);return}if(l===Module.error&&_pythonexc2js(),l&&l.type==="coroutine"&&l._ensure_future){_check_gil();let c=validSuspender.value;validSuspender.value=!1;let u=__iscoroutinefunction(t);validSuspender.value=c,u&&l._ensure_future()}return l}a(pe,"callPyObjectKwargs");async function de(t,e,r){if(!Module.jspiSupported)throw new Error("WebAssembly stack switching not supported in this JavaScript runtime");let n=e.length,o=Object.keys(r),i=Object.values(r),s=o.length;e.push(...i);let l=stackSave(),c=stackAlloc(4),u;try{_check_gil();let y=validSuspender.value;validSuspender.value=!1,u=await Module.promisingApply(t,e,n,o,s,c),validSuspender.value=y}catch(y){API.fatal_error(y)}if(u=u[0],u===Module.error){_PyErr_SetRaisedException(HEAPU32[c/4>>>0]);try{_pythonexc2js()}finally{stackRestore(l)}}if(u&&u.type==="coroutine"&&u._ensure_future){_check_gil();let y=validSuspender.value;validSuspender.value=!1;let _=__iscoroutinefunction(t);validSuspender.value=y,_&&u._ensure_future()}return u}a(de,"callPyObjectKwargsPromising");Module.callPyObjectMaybePromising=async function(t,e){return Module.jspiSupported?await de(t,e,{}):pe(t,e,{})};Module.callPyObject=function(t,e){return pe(t,e,{})};var g=class t{static{a(this,"PyProxy")}static[Symbol.hasInstance](e){return[t,Wt].some(r=>Function.prototype[Symbol.hasInstance].call(r,e))}constructor(){throw new TypeError("PyProxy is not a constructor")}get[Symbol.toStringTag](){return"PyProxy"}get type(){let e=p(this);return __pyproxy_type(e)}toString(){let e=p(this),r;try{_check_gil();let n=validSuspender.value;validSuspender.value=!1,r=__pyproxy_repr(e),validSuspender.value=n}catch(n){API.fatal_error(n)}return r===Module.error&&_pythonexc2js(),r}destroy(e={}){e=Object.assign({message:"",destroyRoundtrip:!0},e);let{message:r,destroyRoundtrip:n}=e;Module.pyproxy_destroy(this,r,n)}copy(){let e=S(this);return J(e.shared.ptr,{flags:h(this),cache:e.shared.cache,props:e.props})}toJs({depth:e=-1,pyproxies:r=void 0,create_pyproxies:n=!0,dict_converter:o=void 0,default_converter:i=void 0,eager_converter:s=void 0}={}){let l=p(this),c,u;n?r?u=r:u=[]:u=Module.error;try{_check_gil();let y=validSuspender.value;validSuspender.value=!1,c=_python2js_custom(l,e,u,o??Module.error,i??Module.error,s??Module.error),validSuspender.value=y}catch(y){API.fatal_error(y)}return c===Module.error&&_pythonexc2js(),c}},Ht=g.prototype;Tests.Function=Function;var jt=Object.create(Function.prototype,Object.getOwnPropertyDescriptors(Ht));function Wt(){}a(Wt,"PyProxyFunction");Wt.prototype=jt;var fe=class extends g{static{a(this,"PyProxyWithLength")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&1)}},Qe=class{static{a(this,"PyLengthMethods")}get length(){let e=p(this),r;try{_check_gil();let n=validSuspender.value;validSuspender.value=!1,r=_PyObject_Size(e),validSuspender.value=n}catch(n){API.fatal_error(n)}return r===-1&&_pythonexc2js(),r}},ge=class extends g{static{a(this,"PyProxyWithGet")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&2)}},Xe=class{static{a(this,"PyAsJsonAdaptorMethods")}asJsJson(){let{shared:e,props:r}=S(this),n=h(this);return n&8192?n|=65536:n|=32768,J(e.ptr,{shared:e,flags:n,props:r})}},B=class{static{a(this,"PyGetItemMethods")}get(e){let{shared:r}=S(this),n;try{_check_gil();let o=validSuspender.value;validSuspender.value=!1,n=__pyproxy_getitem(r.ptr,e,r.cache.json_adaptor_map,Ut(this)),validSuspender.value=o}catch(o){API.fatal_error(o)}if(n===Module.error)if(_PyErr_Occurred())_pythonexc2js();else return;return n}asJsJson(){throw new Error("Should not happen")}},_e=class extends g{static{a(this,"PyProxyWithSet")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&4)}},L=class{static{a(this,"PySetItemMethods")}set(e,r){let n=p(this),o;try{_check_gil();let i=validSuspender.value;validSuspender.value=!1,o=__pyproxy_setitem(n,e,r),validSuspender.value=i}catch(i){API.fatal_error(i)}o===-1&&_pythonexc2js()}delete(e){let r=p(this),n;try{_check_gil();let o=validSuspender.value;validSuspender.value=!1,n=__pyproxy_delitem(r,e),validSuspender.value=o}catch(o){API.fatal_error(o)}n===-1&&_pythonexc2js()}},me=class extends g{static{a(this,"PyProxyWithHas")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&8)}},k=class{static{a(this,"PyContainsMethods")}has(e){let r=p(this),n;try{_check_gil();let o=validSuspender.value;validSuspender.value=!1,n=__pyproxy_contains(r,e),validSuspender.value=o}catch(o){API.fatal_error(o)}return n===-1&&_pythonexc2js(),n===1}};function*on(t,e,r,n){let o=[];try{for(;;){_check_gil();let i=validSuspender.value;validSuspender.value=!1;let s=__pyproxy_iter_next(t,r,n);if(validSuspender.value=i,s===Module.error)break;yield s,!n&&API.isPyProxy(s)&&o.push(s)}}catch(i){API.fatal_error(i)}finally{Module.finalizationRegistry.unregister(e),_Py_DecRef(t)}try{o.forEach(i=>Module.pyproxy_destroy(i,"This borrowed proxy was automatically destroyed when an iterator was exhausted."))}catch{}_PyErr_Occurred()&&_pythonexc2js()}a(on,"iter_helper");var he=class extends g{static{a(this,"PyIterable")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&48)}},Ze=class{static{a(this,"PyIterableMethods")}[Symbol.iterator](){let{shared:e}=S(this),r={},n;try{_check_gil();let i=validSuspender.value;validSuspender.value=!1,n=_PyObject_GetIter(e.ptr),validSuspender.value=i}catch(i){API.fatal_error(i)}n===0&&_pythonexc2js();let o=on(n,r,e.cache.json_adaptor_map,Ut(this));return Module.finalizationRegistry.register(o,[n,void 0],r),o}};async function*an(t,e){try{for(;;){let r;try{_check_gil();let n=validSuspender.value;if(validSuspender.value=!1,r=__pyproxy_aiter_next(t),validSuspender.value=n,r===Module.error)break}catch(n){API.fatal_error(n)}try{yield await r}catch(n){if(n&&typeof n=="object"&&n.type==="StopAsyncIteration")return;throw n}finally{r.destroy()}}}finally{Module.finalizationRegistry.unregister(e),_Py_DecRef(t)}_PyErr_Occurred()&&_pythonexc2js()}a(an,"aiter_helper");var Pe=class extends g{static{a(this,"PyAsyncIterable")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&1536)}},et=class{static{a(this,"PyAsyncIterableMethods")}[Symbol.asyncIterator](){let e=p(this),r={},n;try{_check_gil();let i=validSuspender.value;validSuspender.value=!1,n=_PyObject_GetAIter(e),validSuspender.value=i}catch(i){API.fatal_error(i)}n===0&&_pythonexc2js();let o=an(n,r);return Module.finalizationRegistry.register(o,[n,void 0],r),o}},be=class extends g{static{a(this,"PyIterator")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&32)}},tt=class{static{a(this,"PyIteratorMethods")}[Symbol.iterator](){return this}next(e=void 0){let r,n;try{_check_gil();let o=validSuspender.value;validSuspender.value=!1,r=__pyproxyGen_Send(p(this),e),validSuspender.value=o}catch(o){API.fatal_error(o)}return r===Module.error&&_pythonexc2js(),r}},ve=class extends g{static{a(this,"PyGenerator")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&2048)}},rt=class{static{a(this,"PyGeneratorMethods")}throw(e){let r;try{_check_gil();let n=validSuspender.value;validSuspender.value=!1,r=__pyproxyGen_throw(p(this),e),validSuspender.value=n}catch(n){API.fatal_error(n)}return r===Module.error&&_pythonexc2js(),r}return(e){let r;try{_check_gil();let n=validSuspender.value;validSuspender.value=!1,r=__pyproxyGen_return(p(this),e),validSuspender.value=n}catch(n){API.fatal_error(n)}return r===Module.error&&_pythonexc2js(),r}},xe=class extends g{static{a(this,"PyAsyncIterator")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&1024)}},nt=class{static{a(this,"PyAsyncIteratorMethods")}[Symbol.asyncIterator](){return this}async next(e=void 0){let r;try{_check_gil();let o=validSuspender.value;validSuspender.value=!1,r=__pyproxyGen_asend(p(this),e),validSuspender.value=o}catch(o){API.fatal_error(o)}r===Module.error&&_pythonexc2js();let n;try{n=await r}catch(o){if(o&&typeof o=="object"&&o.type==="StopAsyncIteration")return{done:!0,value:n};throw o}finally{r.destroy()}return{done:!1,value:n}}},we=class extends g{static{a(this,"PyAsyncGenerator")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&4096)}},ot=class{static{a(this,"PyAsyncGeneratorMethods")}async throw(e){let r;try{_check_gil();let o=validSuspender.value;validSuspender.value=!1,r=__pyproxyGen_athrow(p(this),e),validSuspender.value=o}catch(o){API.fatal_error(o)}r===Module.error&&_pythonexc2js();let n;try{n=await r}catch(o){if(o&&typeof o=="object"){if(o.type==="StopAsyncIteration")return{done:!0,value:n};if(o.type==="GeneratorExit")return{done:!0,value:n}}throw o}finally{r.destroy()}return{done:!1,value:n}}async return(e){let r;try{_check_gil();let o=validSuspender.value;validSuspender.value=!1,r=__pyproxyGen_areturn(p(this)),validSuspender.value=o}catch(o){API.fatal_error(o)}r===Module.error&&_pythonexc2js();let n;try{n=await r}catch(o){if(o&&typeof o=="object"){if(o.type==="StopAsyncIteration")return{done:!0,value:n};if(o.type==="GeneratorExit")return{done:!0,value:e}}throw o}finally{r.destroy()}return{done:!1,value:n}}},Se=class extends g{static{a(this,"PySequence")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&8192)}};function sn(t,e){let r=t.toString(),n=e.toString();return r===n?0:r<n?-1:1}a(sn,"defaultCompareFunc");var at=class{static{a(this,"PySequenceMethods")}get[Symbol.isConcatSpreadable](){return!0}join(e){return Array.prototype.join.call(this,e)}slice(e,r){return Array.prototype.slice.call(this,e,r)}lastIndexOf(e,r){return r===void 0&&(r=this.length),Array.prototype.lastIndexOf.call(this,e,r)}indexOf(e,r){return Array.prototype.indexOf.call(this,e,r)}forEach(e,r){Array.prototype.forEach.call(this,e,r)}map(e,r){return Array.prototype.map.call(this,e,r)}filter(e,r){return Array.prototype.filter.call(this,e,r)}some(e,r){return Array.prototype.some.call(this,e,r)}every(e,r){return Array.prototype.every.call(this,e,r)}reduce(...e){return Array.prototype.reduce.apply(this,e)}reduceRight(...e){return Array.prototype.reduceRight.apply(this,e)}at(e){return Array.prototype.at.call(this,e)}concat(...e){return Array.prototype.concat.apply(this,e)}includes(e){return this.has(e)}entries(){return Array.prototype.entries.call(this)}keys(){return Array.prototype.keys.call(this)}values(){return Array.prototype.values.call(this)}find(e,r){return Array.prototype.find.call(this,e,r)}findIndex(e,r){return Array.prototype.findIndex.call(this,e,r)}toJSON(){return Array.from(this)}asJsJson(){throw new Error("Should not happen")}},Ae=class extends g{static{a(this,"PyMutableSequence")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&8192)}},it=class{static{a(this,"PyMutableSequenceMethods")}reverse(){return this.$reverse(),this}sort(e){let r=API.public_api.pyimport("functools"),n=r.cmp_to_key,o;e?o=e:o=sn;function i(l,c){return l===void 0&&c===void 0?0:l===void 0?1:c===void 0?-1:o(l,c)}a(i,"wrapper");let s;try{s=n(i),this.$sort.callKwargs({key:s})}finally{s?.destroy(),n.destroy(),r.destroy()}return this}splice(e,r,...n){return r===void 0&&(r=1<<30),dn(this,e,e+r,n)}push(...e){for(let r of e)this.append(r);return this.length}pop(){return Lt(this,!1)}shift(){return Lt(this,!0)}unshift(...e){return e.forEach((r,n)=>{this.insert(n,r)}),this.length}copyWithin(...e){return Array.prototype.copyWithin.apply(this,e),this}fill(...e){return Array.prototype.fill.apply(this,e),this}};function ln(t,e){let r=p(t),n;try{_check_gil();let o=validSuspender.value;validSuspender.value=!1,n=__pyproxy_hasattr(r,e),validSuspender.value=o}catch(o){API.fatal_error(o)}return n===-1&&_pythonexc2js(),n!==0}a(ln,"python_hasattr");function cn(t,e){let{shared:r}=S(t),n=r.cache.map,o;try{_check_gil();let i=validSuspender.value;validSuspender.value=!1,o=__pyproxy_getattr(r.ptr,e,n),validSuspender.value=i}catch(i){API.fatal_error(i)}if(o===Module.error){_PyErr_Occurred()&&_pythonexc2js();return}return o}a(cn,"python_getattr");function un(t,e,r){let n=p(t),o;try{_check_gil();let i=validSuspender.value;validSuspender.value=!1,o=__pyproxy_setattr(n,e,r),validSuspender.value=i}catch(i){API.fatal_error(i)}o===-1&&_pythonexc2js()}a(un,"python_setattr");function yn(t,e){let r=p(t),n;try{_check_gil();let o=validSuspender.value;validSuspender.value=!1,n=__pyproxy_delattr(r,e),validSuspender.value=o}catch(o){API.fatal_error(o)}n===-1&&_pythonexc2js()}a(yn,"python_delattr");function dn(t,e,r,n){let o=p(t),i;try{_check_gil();let s=validSuspender.value;validSuspender.value=!1,i=__pyproxy_slice_assign(o,e,r,n),validSuspender.value=s}catch(s){API.fatal_error(s)}return i===Module.error&&_pythonexc2js(),i}a(dn,"python_slice_assign");function Lt(t,e){let r=p(t),n;try{_check_gil();let o=validSuspender.value;validSuspender.value=!1,n=__pyproxy_pop(r,e),validSuspender.value=o}catch(o){API.fatal_error(o)}return n===Module.error&&_pythonexc2js(),n}a(Lt,"python_pop");var pn=new Set(["name","length","caller","arguments"]);function ye(t,e,r){return t instanceof Function?e in t&&!(pn.has(e)||r&&e==="prototype"):e in t}a(ye,"filteredHasKey");var P={isExtensible(){return!0},has(t,e){return ye(t,e,!1)?!0:typeof e=="symbol"?!1:(e.startsWith("$")&&(e=e.slice(1)),ln(t,e))},get(t,e){return typeof e=="symbol"||ye(t,e,!0)?Reflect.get(t,e):(e.startsWith("$")&&(e=e.slice(1)),cn(t,e))},set(t,e,r){let n=Object.getOwnPropertyDescriptor(t,e);return n&&!n.writable&&!n.set?!1:typeof e=="symbol"||ye(t,e,!0)?Reflect.set(t,e,r):(e.startsWith("$")&&(e=e.slice(1)),un(t,e,r),!0)},deleteProperty(t,e){let r=Object.getOwnPropertyDescriptor(t,e);return r&&!r.configurable?!1:typeof e=="symbol"||ye(t,e,!0)?Reflect.deleteProperty(t,e):(e.startsWith("$")&&(e=e.slice(1)),yn(t,e),!0)},ownKeys(t){let e=p(t),r;try{_check_gil();let n=validSuspender.value;validSuspender.value=!1,r=__pyproxy_ownKeys(e),validSuspender.value=n}catch(n){API.fatal_error(n)}return r===Module.error&&_pythonexc2js(),r.push(...Reflect.ownKeys(t)),r},apply(t,e,r){return t.apply(e,r)}};function K(t){return t&&typeof t=="object"&&t.constructor&&t.constructor.name==="PythonError"}a(K,"isPythonError");var fn={isExtensible(){return!0},has(t,e){return typeof e=="string"&&/^[0-9]+$/.test(e)?Number(e)<t.length:P.has(t,e)},get(t,e){if(e==="length")return t.length;if(typeof e=="string"&&/^[0-9]+$/.test(e))try{return B.prototype.get.call(t,Number(e))}catch(r){if(K(r)&&r.type=="IndexError")return;throw r}return P.get(t,e)},set(t,e,r){if(typeof e=="string"&&/^[0-9]+$/.test(e))try{return L.prototype.set.call(t,Number(e),r),!0}catch(n){if(K(n)&&n.type=="IndexError")return!1;throw n}return P.set(t,e,r)},deleteProperty(t,e){if(typeof e=="string"&&/^[0-9]+$/.test(e))try{return L.prototype.delete.call(t,Number(e)),!0}catch(r){if(K(r)&&r.type=="IndexError")return!1;throw r}return P.deleteProperty(t,e)},ownKeys(t){let e=P.ownKeys(t);return e.push(...Array.from({length:t.length},(r,n)=>n.toString())),e.push("length"),e}},gn=new Set(["copy","constructor","$$flags","toString","destroy"]),M={isExtensible(){return!0},has(t,e){return k.prototype.has.call(t,e)?!0:typeof e=="string"&&/^[0-9]+$/.test(e)?k.prototype.has.call(t,Number(e)):!1},get(t,e){if(typeof e=="symbol"||gn.has(e))return Reflect.get(...arguments);let r=B.prototype.get.call(t,e);return r!==void 0||k.prototype.has.call(t,e)?r:typeof e=="string"&&/^[0-9]+$/.test(e)?B.prototype.get.call(t,Number(e)):Reflect.get(...arguments)},set(t,e,r){if(typeof e=="symbol")return!1;!k.prototype.has.call(t,e)&&typeof e=="string"&&/^[0-9]+$/.test(e)&&(e=Number(e));try{return L.prototype.set.call(t,e,r),!0}catch(n){if(K(n)&&n.type==="KeyError")return!1;throw n}},deleteProperty(t,e){if(typeof e=="symbol")return!1;!k.prototype.has.call(t,e)&&typeof e=="string"&&/^[0-9]+$/.test(e)&&(e=Number(e));try{return L.prototype.delete.call(t,e),!0}catch(r){if(K(r)&&r.type==="KeyError")return!1;throw r}},getOwnPropertyDescriptor(t,e){return M.has(t,e)?{configurable:!0,enumerable:!0,value:M.get(t,e),writable:!0}:void 0},ownKeys(t){let e=new Set;return zt(t,e),Array.from(e)}};function zt(t,e){let r=P.get(t,"keys")();for(let n of r)typeof n=="string"?e.add(n):typeof n=="number"&&e.add(n.toString());r.destroy()}a(zt,"dictOwnKeysHelper");var _n={isExtensible(){return!0},has(t,e){return P.has(t,e)?!0:M.has(t,e)},get(t,e){let r=P.get(t,e);return r!==void 0||P.has(t,e)?r:M.get(t,e)},set(t,e,r){return P.has(t,e)?P.set(t,e,r):M.set(t,e,r)},deleteProperty(t,e){return P.has(t,e)?P.deleteProperty(t,e):M.deleteProperty(t,e)},getOwnPropertyDescriptor(t,e){return Reflect.getOwnPropertyDescriptor(t,e)??M.getOwnPropertyDescriptor(t,e)},ownKeys(t){let e=new Set(P.ownKeys(t));return zt(t,e),Array.from(e)}},Ie=class extends g{static{a(this,"PyAwaitable")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&64)}},st=class{static{a(this,"PyAwaitableMethods")}_ensure_future(){let{shared:e}=Oe(this);if(e.promise)return e.promise;let r=e.ptr;r||S(this);let n,o,i=new Promise((l,c)=>{n=l,o=c}),s;try{_check_gil();let l=validSuspender.value;validSuspender.value=!1,s=__pyproxy_ensure_future(r,n,o),validSuspender.value=l}catch(l){API.fatal_error(l)}return s===-1&&_pythonexc2js(),e.promise=i,this.destroy(),i}then(e,r){return this._ensure_future().then(e,r)}catch(e){return this._ensure_future().catch(e)}finally(e){return this._ensure_future().finally(e)}},Ee=class extends g{static{a(this,"PyCallable")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&256)}},ke=class{static{a(this,"PyCallableMethods")}apply(e,r){return r=function(...n){return n}.apply(void 0,r),r=Ft(this,e,r),Module.callPyObject(p(this),r)}call(e,...r){return r=Ft(this,e,r),Module.callPyObject(p(this),r)}callWithOptions({relaxed:e,kwargs:r,promising:n},...o){let i={};if(r){if(o.length===0)throw new TypeError("callWithOptions with 'kwargs: true' requires at least one argument (the key word argument object)");if(i=o.pop(),i.constructor!==void 0&&i.constructor.name!=="Object")throw new TypeError("kwargs argument is not an object")}let s=e?API.pyodide_code.relaxed_call:this;return e&&o.unshift(this),(n?de:pe)(p(s),o,i)}callKwargs(...e){if(e.length===0)throw new TypeError("callKwargs requires at least one argument (the key word argument object)");let r=e.pop();if(r.constructor!==void 0&&r.constructor.name!=="Object")throw new TypeError("kwargs argument is not an object");return pe(p(this),e,r)}callRelaxed(...e){return API.pyodide_code.relaxed_call(this,...e)}callKwargsRelaxed(...e){return API.pyodide_code.relaxed_call.callKwargs(this,...e)}callPromising(...e){return de(p(this),e,{})}callPromisingKwargs(...e){if(e.length===0)throw new TypeError("callKwargs requires at least one argument (the key word argument object)");let r=e.pop();if(r.constructor!==void 0&&r.constructor.name!=="Object")throw new TypeError("kwargs argument is not an object");return de(p(this),e,r)}bind(e,...r){let{shared:n,props:o}=S(this),{boundArgs:i,boundThis:s,isBound:l}=o,c=e;l&&(c=s);let u=i.concat(r);return o=Object.assign({},o,{boundArgs:u,isBound:!0,boundThis:c}),J(n.ptr,{shared:n,flags:h(this),props:o})}captureThis(){let{props:e,shared:r}=S(this);return e=Object.assign({},e,{captureThis:!0}),J(r.ptr,{shared:r,flags:h(this),props:e})}};ke.prototype.prototype=Function.prototype;var mn=new Map([["i8",Int8Array],["u8",Uint8Array],["u8clamped",Uint8ClampedArray],["i16",Int16Array],["u16",Uint16Array],["i32",Int32Array],["u32",Uint32Array],["i32",Int32Array],["u32",Uint32Array],["i64",globalThis.BigInt64Array],["u64",globalThis.BigUint64Array],["f32",Float32Array],["f64",Float64Array],["dataview",DataView]]),Me=class extends g{static{a(this,"PyBuffer")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&!!(h(e)&128)}},lt=class{static{a(this,"PyBufferMethods")}getBuffer(e){let r;if(e&&(r=mn.get(e),r===void 0))throw new Error(`Unknown type ${e}`);let n=p(this),o;try{_check_gil();let A=validSuspender.value;validSuspender.value=!1,o=__pyproxy_get_buffer(n),validSuspender.value=A}catch(A){API.fatal_error(A)}o===Module.error&&_pythonexc2js();let{start_ptr:i,smallest_ptr:s,largest_ptr:l,readonly:c,format:u,itemsize:y,shape:_,strides:m,view:f,c_contiguous:I,f_contiguous:oe}=o,ae=!1;try{let A=!1;r===void 0&&([r,A]=Module.processBufferFormatString(u," In this case, you can pass an explicit type argument."));let N=parseInt(r.name.replace(/[^0-9]/g,""))/8||1;if(A&&N>1)throw new Error("JavaScript has no native support for big endian buffers. In this case, you can pass an explicit type argument. For instance, `getBuffer('dataview')` will return a `DataView`which has native support for reading big endian data. Alternatively, toJs will automatically convert the buffer to little endian.");let ie=l-s;if(ie!==0&&(i%N!==0||s%N!==0||l%N!==0))throw new Error(`Buffer does not have valid alignment for a ${r.name}`);let Or=ie/N,Tr=(i-s)/N,We;ie===0?We=new r:We=new r(HEAPU32.buffer,s,Or);for(let Fr of m.keys())m[Fr]/=N;return ae=!0,Object.create(q.prototype,Object.getOwnPropertyDescriptors({offset:Tr,readonly:c,format:u,itemsize:y,ndim:_.length,nbytes:ie,shape:_,strides:m,data:We,c_contiguous:I,f_contiguous:oe,_view_ptr:f,_released:!1}))}finally{if(!ae)try{_check_gil();let A=validSuspender.value;validSuspender.value=!1,_PyBuffer_Release(f),_PyMem_Free(f),validSuspender.value=A}catch(A){API.fatal_error(A)}}}},Ne=class extends g{static{a(this,"PyDict")}static[Symbol.hasInstance](e){return API.isPyProxy(e)&&e.type==="dict"}},q=class{static{a(this,"PyBufferView")}constructor(){throw new TypeError("PyBufferView is not a constructor")}release(){if(!this._released){try{_check_gil();let e=validSuspender.value;validSuspender.value=!1,_PyBuffer_Release(this._view_ptr),_PyMem_Free(this._view_ptr),validSuspender.value=e}catch(e){API.fatal_error(e)}this._released=!0,this.data=Module.error}}};var Gt={PyProxy:g,PyProxyWithLength:fe,PyProxyWithGet:ge,PyProxyWithSet:_e,PyProxyWithHas:me,PyDict:Ne,PyIterable:he,PyAsyncIterable:Pe,PyIterator:be,PyAsyncIterator:xe,PyGenerator:ve,PyAsyncGenerator:we,PyAwaitable:Ie,PyCallable:Ee,PyBuffer:Me,PyBufferView:q,PythonError:R,PySequence:Se,PyMutableSequence:Ae};function Vt(t){t.id!=="canvas"&&console.warn("If you are using canvas element for SDL library, it should have id 'canvas' to work properly."),Module.canvas=t}a(Vt,"setCanvas2D");function Kt(){return Module.canvas}a(Kt,"getCanvas2D");function hn(t){Vt(t)}a(hn,"setCanvas3D");function Pn(){return Kt()}a(Pn,"getCanvas3D");var Jt={setCanvas2D:Vt,getCanvas2D:Kt,setCanvas3D:hn,getCanvas3D:Pn};var qt=new Map([["INSTALLER","pyodide.unpackArchive"]]);function bn(){if(typeof API<"u"&&API!==globalThis.API)return API.runtimeEnv;let t=typeof Bun<"u",e=typeof Deno<"u",r=typeof process=="object"&&typeof process.versions=="object"&&typeof process.versions.node=="string"&&!process.browser,n=typeof navigator=="object"&&typeof navigator.userAgent=="string"&&navigator.userAgent.indexOf("Chrome")===-1&&navigator.userAgent.indexOf("Safari")>-1;return vn({IN_BUN:t,IN_DENO:e,IN_NODE:r,IN_SAFARI:n,IN_SHELL:typeof read=="function"&&typeof load=="function"})}a(bn,"getGlobalRuntimeEnv");var d=bn();function vn(t){let e=t.IN_NODE&&typeof module<"u"&&module.exports&&typeof b=="function"&&typeof __dirname=="string",r=t.IN_NODE&&!e,n=!t.IN_NODE&&!t.IN_DENO&&!t.IN_BUN,o=n&&typeof window<"u"&&typeof window.document<"u"&&typeof document.createElement=="function"&&"sessionStorage"in window&&typeof globalThis.importScripts!="function",i=n&&typeof globalThis.WorkerGlobalScope<"u"&&typeof globalThis.self<"u"&&globalThis.self instanceof globalThis.WorkerGlobalScope;return{...t,IN_BROWSER:n,IN_BROWSER_MAIN_THREAD:o,IN_BROWSER_WEB_WORKER:i,IN_NODE_COMMONJS:e,IN_NODE_ESM:r}}a(vn,"calculateDerivedFlags");function yt(){let t=a(()=>{},"_resolve"),e=a(()=>{},"_reject"),r=new Promise((n,o)=>{t=n,e=o});return r.resolve=t,r.reject=e,r}a(yt,"createResolvable");function Te(){let t=Promise.resolve();async function e(){let r=t,n;return t=new Promise(o=>n=o),await r,n}return a(e,"acquireLock"),e}a(Te,"createLock");var xn=/[-_.]+/g;function Yt(t){return t.replace(xn,"-").toLowerCase()}a(Yt,"canonicalizePackageName");var wn=/^.*?([^\/]*)\.whl$/;function Qt(t){let e=wn.exec(t);if(e){let r=e[1].toLowerCase().split("-");return{name:r[0],version:r[1],fileName:r.join("-")+".whl"}}}a(Qt,"uriToPackageData");function Xt(t){return btoa(t.match(/\w{2}/g).map(function(e){return String.fromCharCode(parseInt(e,16))}).join(""))}a(Xt,"base16ToBase64");var Zt,dt,er,Re,H;async function tr(){if(!d.IN_NODE||(Zt=(await import("node:url")).default,Re=await import("node:fs"),H=await import("node:fs/promises"),er=(await import("node:vm")).default,dt=await import("node:path"),nr=dt.sep,typeof b<"u"))return;let t=Re,e=await import("node:crypto"),r=await import("ws"),n=await import("node:child_process"),o={fs:t,crypto:e,ws:r,child_process:n};globalThis.require=function(i){return o[i]}}a(tr,"initNodeModules");function rr(t){return t.includes("://")||t.startsWith("/")}a(rr,"isAbsolute");function Sn(t,e){return dt.resolve(e||".",t)}a(Sn,"node_resolvePath");function An(t,e){return e===void 0&&(e=location),new URL(t,e).toString()}a(An,"browser_resolvePath");var Y;d.IN_NODE?Y=Sn:d.IN_SHELL?Y=a(t=>t,"resolvePath"):Y=An;var nr;d.IN_NODE||(nr="/");function In(t,e){return t.startsWith("file://")&&(t=t.slice(7)),t.includes("://")?{response:fetch(t)}:{binary:H.readFile(t).then(r=>new Uint8Array(r.buffer,r.byteOffset,r.byteLength))}}a(In,"node_getBinaryResponse");function En(t,e){if(t.startsWith("file://")&&(t=t.slice(7)),t.includes("://"))throw new Error("Shell cannot fetch urls");return{binary:Promise.resolve(new Uint8Array(readbuffer(t)))}}a(En,"shell_getBinaryResponse");function kn(t,e){let r=new URL(t,location);return{response:fetch(r,e?{integrity:e}:{})}}a(kn,"browser_getBinaryResponse");var De;d.IN_NODE?De=In:d.IN_SHELL?De=En:De=kn;async function Q(t,e){let{response:r,binary:n}=De(t,e);if(n)return n;let o=await r;if(!o.ok)throw new Error(`Failed to load '${t}': request failed.`);return new Uint8Array(await o.arrayBuffer())}a(Q,"loadBinaryFile");var Fe;if(d.IN_BROWSER_MAIN_THREAD)Fe=a(async t=>await import(t),"loadScript");else if(d.IN_BROWSER_WEB_WORKER)Fe=a(async t=>{try{globalThis.importScripts(t)}catch(e){if(e instanceof TypeError)await import(t);else throw e}},"loadScript");else if(d.IN_NODE)Fe=Mn;else if(d.IN_SHELL)Fe=load;else throw new Error("Cannot determine runtime environment");async function Mn(t){t.startsWith("file://")&&(t=t.slice(7)),t.includes("://")?er.runInThisContext(await(await fetch(t)).text()):await import(Zt.pathToFileURL(t).href)}a(Mn,"nodeLoadScript");async function or(t){if(d.IN_NODE&&t)try{await H.stat(t)}catch{await H.mkdir(t,{recursive:!0})}}a(or,"ensureDirNode");var X=class{constructor(e,r){this._lock=Te();this.#t=e,this.#e=r}static{a(this,"DynlibLoader")}#t;#e;async loadDynlib(e){let r=await this._lock();try{let n=this.#e.stackSave(),o=this.#e.stringToUTF8OnStack(e);try{let i=this.#e._emscripten_dlopen_promise(o,2);this.#e.stackRestore(n);let s=this.#e.getPromise(i);this.#e.promiseMap.free(i),await s}catch(i){let s=this.getDLError();throw new Error(`Failed to load dynamic library ${e}: ${s??i}`)}}catch(n){throw n&&n.message&&n.message.includes("need to see wasm magic number")?new Error(`Failed to load dynamic library ${e} $. We probably just tried to load a linux .so file or something.`):n}finally{r()}}getDLError(){let e=this.#e._dlerror();return e===0?void 0:this.#e.UTF8ToString(e,512).trim()}async loadDynlibsFromPackage(e,r){for(let n of r)await this.loadDynlib(n)}};if(typeof API<"u"&&typeof Module<"u"){let t=new X(API,Module);API.loadDynlib=t.loadDynlib.bind(t)}var Z=class{static{a(this,"Installer")}#t;#e;constructor(e,r){this.#t=e,this.#e=new X(e,r)}async install(e,r,n,o){let i=this.#t.package_loader.unpack_buffer.callKwargs({buffer:e,filename:r,extract_dir:n,metadata:o,calculate_dynlibs:!0});await this.#e.loadDynlibsFromPackage({file_name:r},i)}},ar;if(typeof API<"u"&&typeof Module<"u"){let t=new Z(API,Module);ar=t.install.bind(t),API.install=ar}function Nn(t,e,r){t();let n;try{n=r()}catch(o){throw e(),o}return n instanceof Promise?n.finally(()=>e()):(e(),n)}a(Nn,"withContext");function ir(t,e){return function(r){return function(...n){return Nn(t,e,()=>r.apply(this,n))}}}a(ir,"createContextWrapper");async function On(t){await tr();let e=await t,r=typeof e=="string"?JSON.parse(e):e;if(!r.packages)throw new Error("Loaded pyodide lock file does not contain the expected key 'packages'.");if(r.info.abi_version!==API.abiVersion)throw new Error(`Lock file ABI version doesn't match Pyodide ABI version.\n   lockfile version: ${r.info.abi_version}\n   pyodide  version: ${API.abiVersion}`);API.lockfile=r,API.lockfile_info=r.info,API.lockfile_packages=r.packages,API.lockfile_unvendored_stdlibs_and_test=[],API._import_name_to_package_name=new Map;for(let i of Object.keys(API.lockfile_packages)){let s=API.lockfile_packages[i];for(let l of s.imports)API._import_name_to_package_name.set(l,i);s.package_type==="cpython_module"&&API.lockfile_unvendored_stdlibs_and_test.push(i)}API.lockfile_unvendored_stdlibs=API.lockfile_unvendored_stdlibs_and_test.filter(i=>i!=="test");let n=API.config.packages;API.config.fullStdLib&&(n=[...n,...API.lockfile_unvendored_stdlibs]),await te(n,{messageCallback(){}}),await API.bootstrapFinalizedPromise,API.flushPackageManagerBuffers(),API._pyodide._importhook.register_module_not_found_hook(API._import_name_to_package_name,API.lockfile_unvendored_stdlibs_and_test),API.package_loader.init_loaded_packages()}a(On,"initializePackageIndex");var Tn="default channel",Fn="pyodide.loadPackage",pt=class{constructor(e,r){this.cdnURL="";this.loadedPackages={};this._lock=Te();this.streamReady=!1;this.stdoutBuffer=[];this.stderrBuffer=[];this.defaultChannel=Tn;this.#t=e,this.#e=r,this.#r=new Z(e,r),d.IN_NODE?(this.installBaseUrl=this.#t.config.packageCacheDir??this.#t.config.packageBaseUrl,this.cdnURL=this.#t.config.cdnUrl):this.installBaseUrl=this.#t.config.packageBaseUrl,this.stdout=n=>{if(!this.streamReady){this.stdoutBuffer.push(n);return}let o=this.#e.stackSave();try{let i=this.#e.stringToUTF8OnStack(n);this.#e._print_stdout(i)}finally{this.#e.stackRestore(o)}},this.stderr=n=>{if(!this.streamReady){this.stderrBuffer.push(n);return}let o=this.#e.stackSave();try{let i=this.#e.stringToUTF8OnStack(n);this.#e._print_stderr(i)}finally{this.#e.stackRestore(o)}}}static{a(this,"PackageManager")}#t;#e;#r;async loadPackage(e,r={checkIntegrity:!0}){return this.setCallbacks(r.messageCallback,r.errorCallback)(this.loadPackageInner.bind(this))(e,r)}async loadPackageInner(e,r={checkIntegrity:!0}){let n=new Set,o=Rn(e),i=this.recursiveDependencies(o);for(let[u,{name:y,normalizedName:_,channel:m}]of i){let f=this.getLoadedPackageChannel(y);f&&(i.delete(_),f===m||m===this.defaultChannel?this.logStdout(`${y} already loaded from ${f}`):this.logStderr(`URI mismatch, attempting to load package ${y} from ${m} while it is already loaded from ${f}. To override a dependency, load the custom package first.`))}if(i.size===0)return this.logStdout("No new packages to load"),[];let s=Array.from(i.values(),({name:u})=>u).sort().join(", "),l=new Map,c=await this._lock();try{this.logStdout(`Loading ${s}`);for(let[u,y]of i){if(this.getLoadedPackageChannel(y.name)){i.delete(y.normalizedName);continue}y.installPromise=this.downloadAndInstall(y,i,n,l,r.checkIntegrity)}if(await Promise.all(Array.from(i.values()).map(({installPromise:u})=>u)),n.size>0){let u=Array.from(n,y=>y.name).sort().join(", ");this.logStdout(`Loaded ${u}`)}if(l.size>0){let u=Array.from(l.keys()).sort().join(", ");this.logStdout(`Failed to load ${u}`);for(let[y,_]of l)this.logStderr(`The following error occurred while loading ${y}:`),this.logStderr(_.message)}return await this.#t.bootstrapFinalizedPromise,this.#t.importlib.invalidate_caches(),Array.from(n,Dn)}finally{c()}}addPackageToLoad(e,r){let n=Yt(e);if(r.has(n))return;let o=this.#t.lockfile_packages[n];if(!o)throw new Error(`No known package with name '${e}'`);if(r.set(n,{name:o.name,normalizedName:n,channel:this.defaultChannel,depends:o.depends,installPromise:void 0,done:yt(),packageData:o}),!this.getLoadedPackageChannel(o.name))for(let i of o.depends)this.addPackageToLoad(i,r)}recursiveDependencies(e){let r=new Map;for(let n of e){let o=Qt(n);if(o===void 0){this.addPackageToLoad(n,r);continue}let{name:i,version:s,fileName:l}=o,c=n;if(r.has(i)&&r.get(i).channel!==c){this.logStderr(`Loading same package ${i} from ${c} and ${r.get(i).channel}`);continue}r.set(i,{name:i,normalizedName:i,channel:c,depends:[],installPromise:void 0,done:yt(),packageData:{name:i,version:s,file_name:l,install_dir:"site",sha256:"",package_type:"package",imports:[],depends:[]}})}return r}async downloadPackage(e,r=!0){await or(this.installBaseUrl);let n,o,i;if(e.channel===this.defaultChannel){if(!(e.normalizedName in this.#t.lockfile_packages))throw new Error(`Internal error: no entry for package named ${name}`);let l=this.#t.lockfile_packages[e.normalizedName];if(n=l.file_name,!rr(n)&&!this.installBaseUrl)throw new Error(`Lock file file_name for package "${e.name}" is relative path "${n}" but no packageBaseUrl provided to loadPyodide.`);o=Y(n,this.installBaseUrl),i="sha256-"+Xt(l.sha256)}else o=e.channel,i=void 0;r||(i=void 0);try{return await Q(o,i)}catch(l){if(!d.IN_NODE||e.channel!==this.defaultChannel||!n||n.startsWith("/"))throw l}this.logStdout(`Didn't find package ${n} locally, attempting to load from ${this.cdnURL}`);let s=await Q(this.cdnURL+n);return this.logStdout(`Package ${n} loaded from ${this.cdnURL}, caching the wheel in node_modules for future use.`),await H.writeFile(o,s),s}async installPackage(e,r){let n=this.#t.lockfile_packages[e.normalizedName];n||(n=e.packageData);let o=n.file_name,i=this.#t.package_loader.get_install_dir(n.install_dir);await this.#r.install(r,o,i,new Map([["INSTALLER",Fn],["PYODIDE_SOURCE",e.channel===this.defaultChannel?"pyodide":e.channel]]))}async downloadAndInstall(e,r,n,o,i=!0){if(ee[e.name]===void 0)try{let s=await this.downloadPackage(e,i),l=e.depends.map(c=>r.has(c)?r.get(c).done:Promise.resolve());await this.#t.bootstrapFinalizedPromise,await Promise.all(l),await this.installPackage(e,s),n.add(e.packageData),ee[e.name]=e.channel}catch(s){o.set(e.name,s)}finally{e.done.resolve()}}flushBuffers(){this.streamReady=!0;for(let e of this.stdoutBuffer)this.stdout(e);for(let e of this.stderrBuffer)this.stderr(e);this.stdoutBuffer=[],this.stderrBuffer=[]}getLoadedPackageChannel(e){let r=this.loadedPackages[e];return r===void 0?null:r}setCallbacks(e,r){let n=this.stdout,o=this.stderr;return ir(()=>{this.stdout=e||n,this.stderr=r||o},()=>{this.stdout=n,this.stderr=o})}logStdout(e){this.stdout(e)}logStderr(e){this.stderr(e)}};function Dn({name:t,version:e,file_name:r,package_type:n}){return{name:t,version:e,fileName:r,packageType:n}}a(Dn,"filterPackageData");function Rn(t){return typeof t.toJs=="function"&&(t=t.toJs()),Array.isArray(t)||(t=[t]),t}a(Rn,"toStringArray");var te,ee;if(typeof API<"u"&&typeof Module<"u"){let t=new pt(API,Module);te=t.loadPackage.bind(t),ee=t.loadedPackages,API.flushPackageManagerBuffers=t.flushBuffers.bind(t),API.lockFilePromise&&(API.packageIndexReady=On(API.lockFilePromise)),API.packageManager=t}var sr="0.29.3";var vt=d.IN_NODE?b("node:fs"):void 0,ur=d.IN_NODE?b("node:tty"):void 0;function yr(t){try{vt.fsyncSync(t)}catch(e){if(e?.code==="EINVAL"||(t===0||t===1||t===2)&&(e?.code==="ENOTSUP"||e?.code==="EBADF"||e?.code==="EPERM"))return;throw e}}a(yr,"nodeFsync");var dr=!1,$e={},x={};function gt(t){$e[x.stdin]=t}a(gt,"_setStdinOps");function Ln(t){$e[x.stdout]=t}a(Ln,"_setStdoutOps");function $n(t){$e[x.stderr]=t}a($n,"_setStderrOps");function Cn(t){return t&&typeof t=="object"&&"errno"in t}a(Cn,"isErrnoError");var Un=new Int32Array(new WebAssembly.Memory({shared:!0,initial:1,maximum:1}).buffer);function Bn(t){try{return Atomics.wait(Un,0,0,t),!0}catch{return!1}}a(Bn,"syncSleep");function Hn(t){for(;;)try{return t()}catch(e){if(e&&e.code==="EAGAIN"&&Bn(100))continue;throw e}}a(Hn,"handleEAGAIN");function lr(t,e,r){let n;try{n=Hn(e)}catch(o){throw o&&o.code&&Module.ERRNO_CODES[o.code]?new FS.ErrnoError(Module.ERRNO_CODES[o.code]):Cn(o)?o:(console.error("Error thrown in read:"),console.error(o),new FS.ErrnoError(29))}if(n===void 0)throw console.warn(`${r} returned undefined; a correct implementation must return a number`),new FS.ErrnoError(29);return n!==0&&(t.node.timestamp=Date.now()),n}a(lr,"readWriteHelper");var cr=a((t,e,r)=>API.typedArrayAsUint8Array(t).subarray(e,e+r),"prepareBuffer"),ft={open:a(function(t){let e=$e[t.node.rdev];if(!e)throw new FS.ErrnoError(43);t.devops=e,t.tty=t.devops.isatty?{ops:{}}:void 0,t.seekable=!1},"open"),close:a(function(t){t.stream_ops.fsync(t)},"close"),fsync:a(function(t){let e=t.devops;e.fsync&&e.fsync()},"fsync"),read:a(function(t,e,r,n,o){return e=cr(e,r,n),lr(t,()=>t.devops.read(e),"read")},"read"),write:a(function(t,e,r,n,o){return e=cr(e,r,n),lr(t,()=>t.devops.write(e),"write")},"write")};function Ce(){dr&&(FS.closeStream(0),FS.closeStream(1),FS.closeStream(2),FS.open("/dev/stdin",0),FS.open("/dev/stdout",1),FS.open("/dev/stderr",1))}a(Ce,"refreshStreams");API.initializeStreams=function(t,e,r){let n=FS.createDevice.major++;x.stdin=FS.makedev(n,0),x.stdout=FS.makedev(n,1),x.stderr=FS.makedev(n,2),FS.registerDevice(x.stdin,ft),FS.registerDevice(x.stdout,ft),FS.registerDevice(x.stderr,ft),FS.unlink("/dev/stdin"),FS.unlink("/dev/stdout"),FS.unlink("/dev/stderr"),FS.mkdev("/dev/stdin",x.stdin),FS.mkdev("/dev/stdout",x.stdout),FS.mkdev("/dev/stderr",x.stderr),re({stdin:t}),xt({batched:e}),wt({batched:r}),dr=!0,Ce()};function jn(){d.IN_NODE?re(new mt(process.stdin.fd)):re({stdin:a(()=>prompt(),"stdin")})}a(jn,"setDefaultStdin");function Wn(){gt(new _t),Ce()}a(Wn,"setStdinError");function re(t={}){let{stdin:e,error:r,isatty:n,autoEOF:o,read:i}=t,s=+!!e+ +!!r+ +!!i;if(s>1)throw new TypeError("At most one of stdin, read, and error must be provided.");if(!e&&o!==void 0)throw new TypeError("The 'autoEOF' option can only be used with the 'stdin' option");if(s===0){jn();return}r&&Wn(),e&&(o=o===void 0?!0:o,gt(new ht(e.bind(t),!!n,o))),i&&gt(t),Ce()}a(re,"setStdin");function pr(t,e,r){let{raw:n,isatty:o,batched:i,write:s}=t,l=+!!n+ +!!i+ +!!s;if(l===0&&(t=r(),({raw:n,isatty:o,batched:i,write:s}=t)),l>1)throw new TypeError("At most one of 'raw', 'batched', and 'write' must be passed");if(!n&&!s&&o)throw new TypeError("Cannot set 'isatty' to true unless 'raw' or 'write' is provided");n&&e(new Pt(n.bind(t),!!o)),i&&e(new bt(i.bind(t))),s&&e(t),Ce()}a(pr,"_setStdwrite");function zn(){return d.IN_NODE?new Le(process.stdout.fd):{batched:a(t=>console.log(t),"batched")}}a(zn,"_getStdoutDefaults");function Gn(){return d.IN_NODE?new Le(process.stderr.fd):{batched:a(t=>console.warn(t),"batched")}}a(Gn,"_getStderrDefaults");function xt(t={}){pr(t,Ln,zn)}a(xt,"setStdout");function wt(t={}){pr(t,$n,Gn)}a(wt,"setStderr");var Vn=globalThis.TextEncoder??function(){},Kn=new Vn,_t=class{static{a(this,"ErrorReader")}read(e){throw new FS.ErrnoError(29)}},mt=class{static{a(this,"NodeReader")}constructor(e){this.fd=e,this.isatty=ur.isatty(e)}read(e){try{return vt.readSync(this.fd,e)}catch(r){if(r.toString().includes("EOF"))return 0;throw r}}fsync(){yr(this.fd)}},ht=class{static{a(this,"LegacyReader")}constructor(e,r,n){this.infunc=e,this.isatty=r,this.autoEOF=n,this.index=0,this.saved=void 0,this.insertEOF=!1}_getInput(){if(this.saved)return this.saved;let e=this.infunc();if(typeof e=="number")return e;if(e!=null){if(ArrayBuffer.isView(e)){if(e.BYTES_PER_ELEMENT!==1)throw console.warn(`Expected BYTES_PER_ELEMENT to be 1, infunc gave ${e.constructor}`),new FS.ErrnoError(29);return e}if(typeof e=="string")return e.endsWith(`\n`)||(e+=`\n`),e;if(Object.prototype.toString.call(e)==="[object ArrayBuffer]")return new Uint8Array(e);throw console.warn("Expected result to be undefined, null, string, array buffer, or array buffer view"),new FS.ErrnoError(29)}}read(e){if(this.insertEOF)return this.insertEOF=!1,0;let r=0;for(;;){let n=this._getInput();if(typeof n=="number"){e[0]=n,e=e.subarray(1),r++;continue}let o;if(n&&n.length>0)if(typeof n=="string"){let{read:i,written:s}=Kn.encodeInto(n,e);this.saved=n.slice(i),r+=s,o=e[s-1],e=e.subarray(s)}else{let i;n.length>e.length?(e.set(n.subarray(0,e.length)),this.saved=n.subarray(e.length),i=e.length):(e.set(n),this.saved=void 0,i=n.length),r+=i,o=e[i-1],e=e.subarray(i)}if(!(n&&n.length>0)||this.autoEOF||e.length===0)return this.insertEOF=r>0&&this.autoEOF&&o!==10,r}}fsync(){}},Pt=class{static{a(this,"CharacterCodeWriter")}constructor(e,r){this.out=e,this.isatty=r}write(e){for(let r of e)this.out(r);return e.length}},bt=class{constructor(e){this.isatty=!1;this.out=e,this.output=[]}static{a(this,"StringWriter")}write(e){for(let r of e)r===10?(this.out(UTF8ArrayToString(new Uint8Array(this.output))),this.output=[]):r!==0&&this.output.push(r);return e.length}fsync(){this.output&&this.output.length>0&&(this.out(UTF8ArrayToString(new Uint8Array(this.output))),this.output=[])}},Le=class{static{a(this,"NodeWriter")}constructor(e){this.fd=e,this.isatty=ur.isatty(e)}write(e){return vt.writeSync(this.fd,e)}fsync(){yr(this.fd)}};var St="sched$"+Math.random().toString(36).slice(2)+"$",W={},fr=0,j=null,At=[],Jn=typeof globalThis.scheduler?.postTask=="function";function qn(){if(!d.IN_BROWSER_MAIN_THREAD)return;let t=a(e=>{if(typeof e.data=="string"&&e.data.indexOf(St)===0){let r=+e.data.slice(St.length),n=W[r];if(!n)return;try{n()}finally{delete W[r]}}},"onGlobalMessage");globalThis.addEventListener("message",t,!1)}a(qn,"installPostMessageHandler");qn();function Yn(){j||d.IN_SAFARI||d.IN_DENO||d.IN_NODE||typeof globalThis.MessageChannel=="function"&&(j=new MessageChannel,j.port1.onmessage=()=>{let t=At.length;for(let e=0;e<t;e++){let r=At.shift(),n=W[r];if(n)try{n()}finally{delete W[r]}}},j.port1.start?.())}a(Yn,"ensureSharedChannel");Yn();function Qn(t){if(d.IN_NODE)setImmediate(t);else if(j){let e=fr++;W[e]=t,At.push(e),j.port2.postMessage(0)}else if(d.IN_BROWSER_MAIN_THREAD&&typeof globalThis.postMessage=="function"){let e=fr++;W[e]=t,globalThis.postMessage(St+e,"*")}else setTimeout(t,0)}a(Qn,"scheduleCallbackImmediate");function Ue(t,e=0){if(Jn){globalThis.scheduler.postTask(t,{delay:e});return}e<=2?Qn(t):setTimeout(t,e)}a(Ue,"scheduleCallback");var{get:Xn,getOwnPropertyDescriptor:Zn,ownKeys:eo}=Reflect,to=a(t=>({value:t,enumerable:!0,writable:!0,configurable:!0}),"getPropertyDescriptor"),_r=Symbol(),gr="prototype",ro={deleteProperty:a((t,e)=>t.has(e)?t.delete(e):delete t[e],"deleteProperty"),get(t,e,r){if(e===_r)return t;let n=t[e];return typeof n=="function"&&e!=="constructor"&&(n=n.bind(t)),n||=t.get(e),n},getOwnPropertyDescriptor(t,e){if(t.has(e))return to(t.get(e));if(e in t)return Zn(t,e)},has:a((t,e)=>t.has(e)||e in t,"has"),ownKeys:a(t=>[...t.keys(),...eo(t)].filter(e=>["string","symbol"].includes(typeof e)),"ownKeys"),set:a((t,e,r)=>(t.set(e,r),!0),"set")},no=new Proxy(class extends Map{static{a(this,"LiteralMap")}constructor(...e){return new Proxy(super(...e),ro)}},{get(t,e,...r){return e!==gr&&e in t[gr]?(n,...o)=>{let i=n[_r],s=i[e];return typeof s=="function"&&(s=s.apply(i,o)),s===i?n:s}:Xn(t,e,...r)}}),mr=no;var Be=new FinalizationRegistry(t=>void t());function oo(t){let e=new AbortController;for(let l of t)if(l.aborted)return e.abort(l.reason),e.signal;let r=new WeakRef(e),n=[],o=t.length;t.forEach(l=>{let c=new WeakRef(l);function u(){r.deref()?.abort(c.deref()?.reason)}a(u,"abort"),l.addEventListener("abort",u),n.push([c,u]),Be.register(l,()=>!--o&&i(),l)});function i(){n.forEach(([l,c])=>{let u=l.deref();u&&(u.removeEventListener("abort",c),Be.unregister(u));let y=r.deref();y&&(Be.unregister(y.signal),delete y.signal.__controller)})}a(i,"clear");let{signal:s}=e;return Be.register(s,i,s),s.addEventListener("abort",i),s.__controller=e,s}a(oo,"abortSignalAny");var hr=oo;API.getExpectedKeys=function(){return[null,API.config.jsglobals,API.public_api,API,Ue,API,{}]};var xr=Symbol("getAccessorList"),Pr=Symbol("getObject");function He(t,e=[]){return new Proxy(t,{get(r,n,o){if(n===xr)return e;if(n===Pr)return r;let i=Reflect.get(...arguments),s=Reflect.getOwnPropertyDescriptor(r,n);return s&&s.writable===!1&&!s.configurable||s&&s.set&&!s.get||!["object","function"].includes(typeof i)?i:He(i,[...e,n])},apply(r,n,o){return n=n?.[Pr]??n,Reflect.apply(r,n,o)},getPrototypeOf(){return He(Reflect.getPrototypeOf(...arguments),[...e,"[getProtoTypeOf]"])}})}a(He,"makeGlobalsProxy");var wr=1886286592,je=48;function ao(t,e){if(e.length!==8)throw new Error("Expected 256 bit buffer");for(let r=0;r<32;r++)e[r]=parseInt(t.slice(r*8,(r+1)*8),16)}a(ao,"encodeBuildId");function io(t){if(t.length!==8)throw new Error("Expected 256 bit buffer");return Array.from(t,e=>e.toString(16).padStart(8,"0")).join("")}a(io,"decodeBuildId");function br(t,e,r){if(e===r)return;if(typeof r=="function"&&typeof e!="function")throw console.warn(r,e),new Error(`Expected function at index ${t}`);let n=!1;try{n=JSON.stringify(e)===JSON.stringify(r)}catch(o){console.warn(o)}if(!n)throw console.warn(r,e),new Error(`Unexpected hiwire entry at index ${t}`)}a(br,"checkEntry");var ne=6;API.serializeHiwireState=function(t,e){e||(e=br);let r=[],n=API.getExpectedKeys();for(let s=0;s<n.length;s++){let l;try{l=Module.__hiwire_get(s)}catch{throw new Error(`Failed to get value at index ${s}`)}br(s,l,n[s])}for(let s=n.length;;s++){let l;try{l=Module.__hiwire_get(s)}catch{break}if(!["object","function"].includes(typeof l))throw new Error(`Unexpected object of type ${typeof l} at index ${s}`);if(l===null){r.push(l);continue}let c;try{c=l[xr]}catch{}if(c){r.push({path:c});continue}if(l===API){r.push({API:!0});continue}if(l===API.abortSignalAny){r.push({abortSignalAny:!0});continue}if(t){let u=t(l);try{JSON.stringify(u)}catch{throw console.warn(`Serializer returned result that cannot be JSON.stringify'd at index ${s}.`),console.warn("  Input: ",l),console.warn("  Output:",u),new Error(`Serializer returned result that cannot be JSON.stringify'd at index ${s}.`)}r.push({serialized:u});continue}throw new Error(`Can't serialize object at index ${s}`)}let o=[];if(Module.__hiwire_immortal_get(ne)?.noValueMarker!==1)throw new Error(`Internal error: expected js_no_value object at index ${ne}`);for(let s=ne+1;;s++){let l;try{l=Module.__hiwire_immortal_get(s)}catch{break}if(typeof l!="string")throw new Error("Expected a string");o.push(l)}return{hiwireKeys:r,immortalKeys:o}};API.makeSnapshot=function(t){if(!API.config._makeSnapshot)throw new Error("makeSnapshot only works if you passed the makeSnapshot option to loadPyodide");let e=API.serializeHiwireState(t),r=JSON.stringify(e),n=je+2*r.length;n=Math.ceil(n/16)*16;let o=new Uint8Array(n+Module.HEAP8.length),i=new TextEncoder,{written:s}=i.encodeInto(r,o.subarray(je)),l=new Uint32Array(o.buffer);return l[0]=wr,l[1]=n,l[2]=s,l[3]=0,ao(API.config.BUILD_ID,l.subarray(4,12)),o.subarray(n).set(Module.HEAP8),o};API.restoreSnapshot=function(t){let e=new Uint32Array(t.buffer,t.byteOffset,t.byteLength/4);if(e[0]!==wr)throw new Error("Snapshot has invalid magic number");let r=e[1],n=e[2],o=io(e.subarray(4,12));if(o!==API.config.BUILD_ID)throw new Error(`Snapshot build id mismatch\nexpected: ${API.config.BUILD_ID}\ngot     : ${o}\n`);let i=t.subarray(je,je+n);t=t.subarray(r);let s=(new TextDecoder).decode(i),l=JSON.parse(s);return Module.HEAP8.set(t),l};function Sr(){if(Module._jslib_init(),Module.__hiwire_immortal_get(ne)?.noValueMarker!==1)throw new Error(`Internal error: expected js_no_value object at index ${ne}`);Module._init_pyodide_proxy(),Module.runtimeKeepalivePush()}a(Sr,"syncUpSnapshotLoad1");function vr(t,e){if(Module.__hiwire_set(t,e)<0)throw new Error("table set failed")}a(vr,"tableSet");function Ar(t,e,r){let n=API.getExpectedKeys();n.forEach((o,i)=>vr(i,o)),e.hiwireKeys.forEach((o,i)=>{let s;if(!o)s=o;else if("path"in o)s=o.path.reduce((l,c)=>l[c],t)||null;else if("abortSignalAny"in o)s=API.abortSignalAny;else if("API"in o)s=API;else{if(!r)throw new Error("You must pass an appropriate deserializer as _snapshotDeserializer");s=r(o.serialized)}vr(n.length+i,s)}),e.immortalKeys.forEach(o=>Module.__hiwire_immortal_add(o))}a(Ar,"syncUpSnapshotLoad2");async function Ir(t,e){return new Promise((r,n)=>{t.FS.syncfs(e,o=>{o?n(o):r()})})}a(Ir,"syncfs");async function Er(t){return await Ir(t,!1)}a(Er,"syncLocalToRemote");async function kr(t){return await Ir(t,!0)}a(kr,"syncRemoteToLocal");API.loadBinaryFile=Q;API.rawRun=a(function(e){let r=Module.stringToNewUTF8(e);Module.API.capture_stderr();let n=_PyRun_SimpleString(r);_free(r);let o=Module.API.restore_stderr().trim();return[n,o]},"rawRun");API.runPythonInternal=function(t){return API._pyodide._base.eval_code(t,API.runPythonInternal_dict)};API.setPyProxyToStringMethod=function(t){Module.HEAP8[Module._compat_to_string_repr]=+t};API.setCompatToJsLiteralMap=function(t){Module.HEAP8[Module._compat_dict_to_literalmap]=+t};API.setCompatNullToNone=function(t){Module.HEAP8[Module._compat_null_to_none]=+t};API.saveState=()=>API.pyodide_py._state.save_state();API.restoreState=t=>API.pyodide_py._state.restore_state(t);API.scheduleCallback=Ue;typeof AbortSignal<"u"&&AbortSignal.any?API.abortSignalAny=AbortSignal.any:API.abortSignalAny=hr;API.LiteralMap=mr;function Mr(t){Module.FS.mkdirTree(t);let{node:e}=Module.FS.lookupPath(t,{follow_mount:!1});if(Module.FS.isMountpoint(e))throw new Error(`path '${t}' is already a file system mount point`);if(!Module.FS.isDir(e.mode))throw new Error(`path '${t}' points to a file not a directory`);for(let r in e.contents)throw new Error(`directory '${t}' is not empty`)}a(Mr,"ensureMountPathExists");var It=class{static{a(this,"PyodideAPI_")}static{this.version=sr}static{this.loadPackage=te}static{this.loadedPackages=ee}static{this.ffi=Gt}static{this.setStdin=re}static{this.setStdout=xt}static{this.setStderr=wt}static{this.globals={}}static{this.FS={}}static{this.PATH={}}static{this.canvas=Jt}static{this.ERRNO_CODES={}}static{this.pyodide_py={}}static async loadPackagesFromImports(e,r={checkIntegrity:!0}){let n=API.pyodide_code.find_imports(e),o;try{o=n.toJs()}finally{n.destroy()}if(o.length===0)return[];let i=API._import_name_to_package_name,s=new Set;for(let l of o)i.has(l)&&s.add(i.get(l));return s.size?await te(Array.from(s),r):[]}static runPython(e,r={}){return r.globals||(r.globals=API.globals),API.pyodide_code.eval_code.callKwargs(e,r)}static async runPythonAsync(e,r={}){return r.globals||(r.globals=API.globals),await API.pyodide_code.eval_code_async.callKwargs(e,r)}static registerJsModule(e,r){API.pyodide_ffi.register_js_module(e,r)}static unregisterJsModule(e){API.pyodide_ffi.unregister_js_module(e)}static toPy(e,{depth:r,defaultConverter:n}={depth:-1}){switch(typeof e){case"string":case"number":case"boolean":case"bigint":case"undefined":return e}if(!e||API.isPyProxy(e))return e;let o=0,i=0;try{o=Module.js2python_convert(e,{depth:r,defaultConverter:n})}catch(s){throw s instanceof Module._PropagatePythonError&&_pythonexc2js(),s}try{if(_JsProxy_Check(o))return e;i=_python2js(o),i===null&&_pythonexc2js()}finally{_Py_DecRef(o)}return i}static pyimport(e){return API.pyodide_base.pyimport_impl(e)}static unpackArchive(e,r,n={}){if(!ArrayBuffer.isView(e)&&API.getTypeTag(e)!=="[object ArrayBuffer]")throw new TypeError("Expected argument 'buffer' to be an ArrayBuffer or an ArrayBuffer view");API.typedArrayAsUint8Array(e);let o=n.extractDir;API.package_loader.unpack_buffer.callKwargs({buffer:e,format:r,extract_dir:o,metadata:qt})}static async mountNativeFS(e,r){if(r.constructor.name!=="FileSystemDirectoryHandle")throw new TypeError("Expected argument 'fileSystemHandle' to be a FileSystemDirectoryHandle");return Mr(e),Module.FS.mount(Module.FS.filesystems.NATIVEFS_ASYNC,{fileSystemHandle:r},e),await kr(Module),{syncfs:a(async()=>await Er(Module),"syncfs")}}static mountNodeFS(e,r){if(!d.IN_NODE)throw new Error("mountNodeFS only works in Node");Mr(e);let n;try{n=Re.lstatSync(r)}catch{throw new Error(`hostPath '${r}' does not exist`)}if(!n.isDirectory())throw new Error(`hostPath '${r}' is not a directory`);Module.FS.mount(Module.FS.filesystems.NODEFS,{root:r},e)}static registerComlink(e){API._Comlink=e}static setInterruptBuffer(e){Module.HEAP8[Module._Py_EMSCRIPTEN_SIGNAL_HANDLING]=+!!e,Module.Py_EmscriptenSignalBuffer=e}static checkInterrupt(){if(_PyGILState_Check()){__PyErr_CheckSignals()&&_pythonexc2js();return}else{let e=Module.Py_EmscriptenSignalBuffer;if(e&&e[0]===2)throw new Module.FS.ErrnoError(27)}}static setDebug(e){let r=!!API.debug_ffi;return API.debug_ffi=e,r}static makeMemorySnapshot({serializer:e}={}){if(!API.config._makeSnapshot)throw new Error("Can only use pyodide.makeMemorySnapshot if the _makeSnapshot option is passed to loadPyodide");return API.makeSnapshot(e)}static get lockfile(){return API.lockfile}static get lockfileBaseUrl(){return API.config.packageCacheDir??API.config.packageBaseUrl}};function so(){let t=Object.getOwnPropertyDescriptors(It);delete t.prototype;let e=Object.create({},t);return API.public_api=e,e.FS=Module.FS,e.PATH=Module.PATH,e.ERRNO_CODES=Module.ERRNO_CODES,e._module=Module,e._api=API,e}a(so,"makePublicAPI");function lo(t,e){return new Proxy(t,{get(r,n){return n==="get"?o=>{let i=r.get(o);return i===void 0&&(i=e.get(o)),i}:n==="has"?o=>r.has(o)||e.has(o):Reflect.get(r,n)}})}a(lo,"wrapPythonGlobals");var Nr;API.bootstrapFinalizedPromise=new Promise(t=>Nr=t);API.finalizeBootstrap=function(t,e){t&&Sr();let[r,n]=API.rawRun("import _pyodide_core");r&&API.fatal_loading_error(`Failed to import _pyodide_core\n`,n),API.runPythonInternal_dict=API._pyodide._base.eval_code("{}"),API.importlib=API.runPythonInternal("import importlib; importlib");let o=API.importlib.import_module;API.sys=o("sys"),API.os=o("os");let i=API.runPythonInternal("import __main__; __main__.__dict__"),s=API.runPythonInternal("import builtins; builtins.__dict__");API.globals=lo(i,s);let l=API._pyodide._importhook,c=so();API.config._makeSnapshot&&(API.config.jsglobals=He(API.config.jsglobals));let u=API.config.jsglobals;return t?Ar(u,t,e):(l.register_js_finder(),l.register_js_module("js",u),l.register_js_module("pyodide_js",c),l.register_windows_finder()),API.pyodide_py=o("pyodide"),API.pyodide_code=o("pyodide.code"),API.pyodide_ffi=o("pyodide.ffi"),API.package_loader=o("pyodide._package_loader"),API.pyodide_base=o("_pyodide._base"),API.sitepackages=API.package_loader.SITE_PACKAGES.__str__(),API.dsodir=API.package_loader.DSO_DIR.__str__(),API.defaultLdLibraryPath=[API.dsodir,API.sitepackages],API.os.environ.__setitem__("LD_LIBRARY_PATH",API.defaultLdLibraryPath.join(":")),c.pyodide_py=API.pyodide_py,c.globals=API.globals,Nr(),c}})()}var StackSwitching=(()=>{var __defProp=Object.defineProperty;var __getOwnPropDesc=Object.getOwnPropertyDescriptor;var __getOwnPropNames=Object.getOwnPropertyNames;var __hasOwnProp=Object.prototype.hasOwnProperty;var __export=(target,all)=>{for(var name in all)__defProp(target,name,{get:all[name],enumerable:true})};var __copyProps=(to,from,except,desc)=>{if(from&&typeof from==="object"||typeof from==="function"){for(let key of __getOwnPropNames(from))if(!__hasOwnProp.call(to,key)&&key!==except)__defProp(to,key,{get:()=>from[key],enumerable:!(desc=__getOwnPropDesc(from,key))||desc.enumerable})}return to};var __toCommonJS=mod=>__copyProps(__defProp({},"__esModule",{value:true}),mod);var stack_switching_exports={};__export(stack_switching_exports,{StackState:()=>StackState,createPromising:()=>createPromising,jspiSupported:()=>jspiSupported,newJspiSupported:()=>newJspiSupported,oldJspiSupported:()=>oldJspiSupported,promisingApply:()=>promisingApply,promisingRunMain:()=>promisingRunMain,suspenderGlobal:()=>suspenderGlobal,validSuspender:()=>validSuspender});var suspenderGlobal={value:null};var validSuspender={value:false};var promisingApplyHandler;function promisingApply(...args){validSuspender.value=true;Module.stackStop=stackSave();return promisingApplyHandler(...args)}var promisingRunMainHandler;function promisingRunMain(...args){validSuspender.value=true;Module.stackStop=stackSave();return promisingRunMainHandler(...args)}function createPromising(wasm_func){if(Module.newJspiSupported){const promisingFunc=WebAssembly.promising(wasm_func);async function wrapper(...args){const orig=validSuspender.value;validSuspender.value=true;try{return await promisingFunc(null,...args)}finally{validSuspender.value=orig}}return wrapper}const{parameters}=wasmFunctionType(wasm_func);parameters.shift();return new WebAssembly.Function({parameters,results:["externref"]},wasm_func,{promising:"first"})}function initSuspenders(){promisingApplyHandler=createPromising(wasmExports._pyproxy_apply_promising);if(wasmExports.run_main_promising){promisingRunMainHandler=createPromising(wasmExports.run_main_promising)}}var stackStates=[];var StackState=class{constructor(){this.start=stackSave();this.stop=Module.stackStop;this._copy=new Uint8Array(0);if(this.start!==this.stop){stackStates.push(this)}}restore(){let total=0;while(stackStates.length>0&&stackStates[stackStates.length-1].stop<this.stop){total+=stackStates.pop()._save()}const last=stackStates[stackStates.length-1];if(last&&last!==this){total+=last._save_up_to(this.stop)}if(last&&last.stop===this.stop){stackStates.pop()}if(this._copy.length!==0){Module.HEAP8.set(this._copy,this.start);total+=this._copy.length;this._copy=new Uint8Array(0)}Module.stackStop=this.stop;stackRestore(this.start);return total}_save_up_to(stop){let sz1=this._copy.length;let sz2=stop-this.start;if(sz2<=sz1){return 0}const new_segment=HEAP8.subarray(this.start+sz1>>>0,this.start+sz2>>>0);const c=new Uint8Array(sz2);c.set(this._copy);c.set(new_segment,sz1);this._copy=c;return sz2}_save(){return this._save_up_to(this.stop)}};var canConstructWasm=true;try{new WebAssembly.Module(new Uint8Array([0,97,115,109,1,0,0,0]))}catch(e){canConstructWasm=false}var newJspiSupported=canConstructWasm&&"Suspending"in WebAssembly;var oldJspiSupported=canConstructWasm&&"Suspender"in WebAssembly;var jspiSupported=newJspiSupported||oldJspiSupported;Module.newJspiSupported=newJspiSupported;Module.oldJspiSupported=oldJspiSupported;Module.jspiSupported=jspiSupported;if(jspiSupported){Module.preRun.push(initSuspenders)}return __toCommonJS(stack_switching_exports)})();const{StackState,createPromising,jspiSupported,newJspiSupported,oldJspiSupported,promisingApply,promisingRunMain,suspenderGlobal,validSuspender}=StackSwitching;Object.assign(Module,StackSwitching);const API=Module.API;const Hiwire={};const Tests={};API.tests=Tests;API.version="0.29.3";API.abiVersion="2025_0";Module.hiwire=Hiwire;function getTypeTag(x){try{return Object.prototype.toString.call(x)}catch(e){return""}}API.getTypeTag=getTypeTag;function hasProperty(obj,prop){try{while(obj){if(Object.hasOwn(obj,prop)){return true}obj=Object.getPrototypeOf(obj)}}catch(e){}return false}function hasMethod(obj,prop){try{return typeof obj[prop]==="function"}catch(e){return false}}const pyproxyIsAlive=px=>!!Module.PyProxy_getAttrsQuiet(px).shared.ptr;API.pyproxyIsAlive=pyproxyIsAlive;const errNoRet=()=>{throw new Error("Assertion error: control reached end of function without return")};function isPromise(obj){try{return typeof obj?.then==="function"}catch(e){return false}}API.isPromise=isPromise;function bufferAsUint8Array(arg){if(ArrayBuffer.isView(arg)){return new Uint8Array(arg.buffer,arg.byteOffset,arg.byteLength)}else{return new Uint8Array(arg)}}API.typedArrayAsUint8Array=bufferAsUint8Array;Module.iterObject=function*(object){for(let k in object){if(Object.hasOwn(object,k)){yield k}}};function wasmFunctionType(wasm_func){if(!WebAssembly.Function){throw new Error("No type reflection")}if(WebAssembly.Function.type){return WebAssembly.Function.type(wasm_func)}return wasm_func.type()}pyodide_js_init();pyodide_js_init.sig="v";function set_suspender(suspender){suspenderGlobal.value=suspender}set_suspender.sig="ve";function get_suspender(){return suspenderGlobal.value}get_suspender.sig="e";function syncifyHandler(x,y){return Module.error}async function inner(x,y){try{return await(x??y)}catch(e){if(e&&e.pyodide_fatal_error){throw e}Module.syncify_error=e;return Module.error}}if(newJspiSupported){syncifyHandler=new WebAssembly.Suspending(inner)}else if(oldJspiSupported){syncifyHandler=new WebAssembly.Function({parameters:["externref","externref"],results:["externref"]},inner,{suspending:"first"})}syncifyHandler.sig="eee";function JsvPromise_Syncify_handleError(){if(!Module.syncify_error){return}Module.handle_js_error(Module.syncify_error);delete Module.syncify_error}JsvPromise_Syncify_handleError.sig="v";function saveState(){if(!validSuspender.value){return Module.error}const stackState=new StackState;const threadState=_captureThreadState();return{threadState,stackState,suspender:suspenderGlobal.value}}saveState.sig="e";function restoreState(state){state.stackState.restore();_restoreThreadState(state.threadState);suspenderGlobal.value=state.suspender;validSuspender.value=true}restoreState.sig="ve";function _Py_emscripten_runtime(){var info;if(typeof navigator=="object"){info=navigator.userAgent}else if(typeof process=="object"){info="Node.js ".concat(process.version)}else{info="UNKNOWN"}var len=lengthBytesUTF8(info)+1;var res=_malloc(len);if(res)stringToUTF8(info,res,len);return res}_Py_emscripten_runtime.sig="i";function _Py_CheckEmscriptenSignals_Helper(){if(!Module.Py_EmscriptenSignalBuffer){return 0}try{let result=Module.Py_EmscriptenSignalBuffer[0];Module.Py_EmscriptenSignalBuffer[0]=0;return result}catch(e){return 0}}_Py_CheckEmscriptenSignals_Helper.sig="i";function _PyEM_GetCountArgsPtr(){return Module._PyEM_CountArgsPtr}_PyEM_GetCountArgsPtr.sig="i";function _PyEM_InitTrampoline_js(){const ptr=getPyEMCountArgsPtr();Module._PyEM_CountArgsPtr=ptr;const offset=HEAP32[__PyEM_EMSCRIPTEN_COUNT_ARGS_OFFSET/4>>>0];HEAP32[(__PyRuntime+offset)/4>>>0]=ptr}function getPyEMCountArgsPtr(){let isIOS=globalThis.navigator&&(/iPad|iPhone|iPod/.test(navigator.userAgent)||navigator.platform==="MacIntel"&&typeof navigator.maxTouchPoints!=="undefined"&&navigator.maxTouchPoints>1);if(isIOS){return 0}const code=new Uint8Array([0,97,115,109,1,0,0,0,1,27,5,96,0,1,127,96,1,127,1,127,96,2,127,127,1,127,96,3,127,127,127,1,127,96,1,127,0,2,9,1,1,101,1,116,1,112,0,0,3,2,1,1,7,5,1,1,102,0,0,10,68,1,66,1,1,112,32,0,37,0,34,1,251,20,3,2,4,69,13,0,65,3,15,11,32,1,251,20,2,2,4,69,13,0,65,2,15,11,32,1,251,20,1,2,4,69,13,0,65,1,15,11,32,1,251,20,0,2,4,69,13,0,65,0,15,11,65,127,11]);try{const mod=new WebAssembly.Module(code);const inst=new WebAssembly.Instance(mod,{e:{t:wasmTable}});return addFunction(inst.exports.f)}catch(e){return 0}}_PyEM_InitTrampoline_js.sig="v";function _PyEM_TrampolineCall_JS(func,arg1,arg2,arg3){return wasmTable.get(func)(arg1,arg2,arg3)}_PyEM_TrampolineCall_JS.sig="iiiii";function unbox_small_structs(type_ptr){var type_id=HEAPU16[(type_ptr+6>>1)+0>>>0];while(type_id===13){var elements=HEAPU32[(type_ptr+8>>2)+0>>>0];var first_element=HEAPU32[(elements>>2)+0>>>0];if(first_element===0){type_id=0;break}else if(HEAPU32[(elements>>2)+1>>>0]===0){type_ptr=first_element;type_id=HEAPU16[(first_element+6>>1)+0>>>0]}else{break}}return[type_ptr,type_id]}function ffi_call_js(cif,fn,rvalue,avalue){var abi=HEAPU32[(cif>>2)+0>>>0];var nargs=HEAPU32[(cif>>2)+1>>>0];var nfixedargs=HEAPU32[(cif>>2)+6>>>0];var arg_types_ptr=HEAPU32[(cif>>2)+2>>>0];var rtype_unboxed=unbox_small_structs(HEAPU32[(cif>>2)+3>>>0]);var rtype_ptr=rtype_unboxed[0];var rtype_id=rtype_unboxed[1];var orig_stack_ptr=stackSave();var cur_stack_ptr=orig_stack_ptr;var args=[];var ret_by_arg=!!0;if(rtype_id===15){throw new Error("complex ret marshalling nyi")}if(rtype_id<0||rtype_id>15){throw new Error("Unexpected rtype "+rtype_id)}if(rtype_id===4||rtype_id===13){args.push(rvalue);ret_by_arg=!!1}for(var i=0;i<nfixedargs;i++){var arg_ptr=HEAPU32[(avalue>>2)+i>>>0];var arg_unboxed=unbox_small_structs(HEAPU32[(arg_types_ptr>>2)+i>>>0]);var arg_type_ptr=arg_unboxed[0];var arg_type_id=arg_unboxed[1];switch(arg_type_id){case 1:case 10:case 9:case 14:args.push(HEAPU32[(arg_ptr>>2)+0>>>0]);break;case 2:args.push(HEAPF32[(arg_ptr>>2)+0>>>0]);break;case 3:args.push(HEAPF64[(arg_ptr>>3)+0>>>0]);break;case 5:args.push(HEAPU8[arg_ptr+0>>>0]);break;case 6:args.push(HEAP8[arg_ptr+0>>>0]);break;case 7:args.push(HEAPU16[(arg_ptr>>1)+0>>>0]);break;case 8:args.push(HEAP16[(arg_ptr>>1)+0>>>0]);break;case 11:case 12:args.push(HEAPU64[(arg_ptr>>3)+0>>>0]);break;case 4:args.push(HEAPU64[(arg_ptr>>3)+0>>>0]);args.push(HEAPU64[(arg_ptr>>3)+1>>>0]);break;case 13:var size=HEAPU32[(arg_type_ptr>>2)+0>>>0];var align=HEAPU16[(arg_type_ptr+4>>1)+0>>>0];cur_stack_ptr-=size,cur_stack_ptr&=~(align-1);HEAP8.subarray(cur_stack_ptr>>>0,cur_stack_ptr+size>>>0).set(HEAP8.subarray(arg_ptr>>>0,arg_ptr+size>>>0));args.push(cur_stack_ptr);break;case 15:throw new Error("complex marshalling nyi");default:throw new Error("Unexpected type "+arg_type_id)}}if(nfixedargs!=nargs){var struct_arg_info=[];for(var i=nargs-1;i>=nfixedargs;i--){var arg_ptr=HEAPU32[(avalue>>2)+i>>>0];var arg_unboxed=unbox_small_structs(HEAPU32[(arg_types_ptr>>2)+i>>>0]);var arg_type_ptr=arg_unboxed[0];var arg_type_id=arg_unboxed[1];switch(arg_type_id){case 5:case 6:cur_stack_ptr-=1,cur_stack_ptr&=~(1-1);HEAPU8[cur_stack_ptr+0>>>0]=HEAPU8[arg_ptr+0>>>0];break;case 7:case 8:cur_stack_ptr-=2,cur_stack_ptr&=~(2-1);HEAPU16[(cur_stack_ptr>>1)+0>>>0]=HEAPU16[(arg_ptr>>1)+0>>>0];break;case 1:case 9:case 10:case 14:case 2:cur_stack_ptr-=4,cur_stack_ptr&=~(4-1);HEAPU32[(cur_stack_ptr>>2)+0>>>0]=HEAPU32[(arg_ptr>>2)+0>>>0];break;case 3:case 11:case 12:cur_stack_ptr-=8,cur_stack_ptr&=~(8-1);HEAPU32[(cur_stack_ptr>>2)+0>>>0]=HEAPU32[(arg_ptr>>2)+0>>>0];HEAPU32[(cur_stack_ptr>>2)+1>>>0]=HEAPU32[(arg_ptr>>2)+1>>>0];break;case 4:cur_stack_ptr-=16,cur_stack_ptr&=~(8-1);HEAPU32[(cur_stack_ptr>>2)+0>>>0]=HEAPU32[(arg_ptr>>2)+0>>>0];HEAPU32[(cur_stack_ptr>>2)+1>>>0]=HEAPU32[(arg_ptr>>2)+1>>>0];HEAPU32[(cur_stack_ptr>>2)+2>>>0]=HEAPU32[(arg_ptr>>2)+2>>>0];HEAPU32[(cur_stack_ptr>>2)+3>>>0]=HEAPU32[(arg_ptr>>2)+3>>>0];break;case 13:cur_stack_ptr-=4,cur_stack_ptr&=~(4-1);struct_arg_info.push([cur_stack_ptr,arg_ptr,HEAPU32[(arg_type_ptr>>2)+0>>>0],HEAPU16[(arg_type_ptr+4>>1)+0>>>0]]);break;case 15:throw new Error("complex arg marshalling nyi");default:throw new Error("Unexpected argtype "+arg_type_id)}}args.push(cur_stack_ptr);for(var i=0;i<struct_arg_info.length;i++){var struct_info=struct_arg_info[i];var arg_target=struct_info[0];var arg_ptr=struct_info[1];var size=struct_info[2];var align=struct_info[3];cur_stack_ptr-=size,cur_stack_ptr&=~(align-1);HEAP8.subarray(cur_stack_ptr>>>0,cur_stack_ptr+size>>>0).set(HEAP8.subarray(arg_ptr>>>0,arg_ptr+size>>>0));HEAPU32[(arg_target>>2)+0>>>0]=cur_stack_ptr}}stackRestore(cur_stack_ptr);stackAlloc(0);var result=(0,getWasmTableEntry(fn).apply(null,args));stackRestore(orig_stack_ptr);if(ret_by_arg){return}switch(rtype_id){case 0:break;case 1:case 9:case 10:case 14:HEAPU32[(rvalue>>2)+0>>>0]=result;break;case 2:HEAPF32[(rvalue>>2)+0>>>0]=result;break;case 3:HEAPF64[(rvalue>>3)+0>>>0]=result;break;case 5:case 6:HEAPU8[rvalue+0>>>0]=result;break;case 7:case 8:HEAPU16[(rvalue>>1)+0>>>0]=result;break;case 11:case 12:HEAPU64[(rvalue>>3)+0>>>0]=result;break;case 15:throw new Error("complex ret marshalling nyi");default:throw new Error("Unexpected rtype "+rtype_id)}}ffi_call_js.sig="viiii";function ffi_closure_alloc_js(size,code){var closure=_malloc(size);var index=getEmptyTableSlot();HEAPU32[(code>>2)+0>>>0]=index;HEAPU32[(closure>>2)+0>>>0]=index;return closure}ffi_closure_alloc_js.sig="iii";function ffi_closure_free_js(closure){var index=HEAPU32[(closure>>2)+0>>>0];freeTableIndexes.push(index);_free(closure)}ffi_closure_free_js.sig="vi";function ffi_prep_closure_loc_js(closure,cif,fun,user_data,codeloc){var abi=HEAPU32[(cif>>2)+0>>>0];var nargs=HEAPU32[(cif>>2)+1>>>0];var nfixedargs=HEAPU32[(cif>>2)+6>>>0];var arg_types_ptr=HEAPU32[(cif>>2)+2>>>0];var rtype_unboxed=unbox_small_structs(HEAPU32[(cif>>2)+3>>>0]);var rtype_ptr=rtype_unboxed[0];var rtype_id=rtype_unboxed[1];var sig;var ret_by_arg=!!0;switch(rtype_id){case 0:sig="v";break;case 13:case 4:sig="vi";ret_by_arg=!!1;break;case 1:case 5:case 6:case 7:case 8:case 9:case 10:case 14:sig="i";break;case 2:sig="f";break;case 3:sig="d";break;case 11:case 12:sig="j";break;case 15:throw new Error("complex ret marshalling nyi");default:throw new Error("Unexpected rtype "+rtype_id)}var unboxed_arg_type_id_list=[];var unboxed_arg_type_info_list=[];for(var i=0;i<nargs;i++){var arg_unboxed=unbox_small_structs(HEAPU32[(arg_types_ptr>>2)+i>>>0]);var arg_type_ptr=arg_unboxed[0];var arg_type_id=arg_unboxed[1];unboxed_arg_type_id_list.push(arg_type_id);unboxed_arg_type_info_list.push([HEAPU32[(arg_type_ptr>>2)+0>>>0],HEAPU16[(arg_type_ptr+4>>1)+0>>>0]])}for(var i=0;i<nfixedargs;i++){switch(unboxed_arg_type_id_list[i]){case 1:case 5:case 6:case 7:case 8:case 9:case 10:case 14:case 13:sig+="i";break;case 2:sig+="f";break;case 3:sig+="d";break;case 4:sig+="jj";break;case 11:case 12:sig+="j";break;case 15:throw new Error("complex marshalling nyi");default:throw new Error("Unexpected argtype "+arg_type_id)}}if(nfixedargs<nargs){sig+="i"}0;function trampoline(){var args=Array.prototype.slice.call(arguments);var size=0;var orig_stack_ptr=stackSave();var cur_ptr=orig_stack_ptr;var ret_ptr;var jsarg_idx=0;if(ret_by_arg){ret_ptr=args[jsarg_idx++]}else{cur_ptr-=8,cur_ptr&=~(8-1);ret_ptr=cur_ptr}cur_ptr-=4*nargs;var args_ptr=cur_ptr;var carg_idx=0;for(;carg_idx<nfixedargs;carg_idx++){var cur_arg=args[jsarg_idx++];var arg_type_info=unboxed_arg_type_info_list[carg_idx];var arg_size=arg_type_info[0];var arg_align=arg_type_info[1];var arg_type_id=unboxed_arg_type_id_list[carg_idx];switch(arg_type_id){case 5:case 6:cur_ptr-=1,cur_ptr&=~(4-1);HEAPU32[(args_ptr>>2)+carg_idx>>>0]=cur_ptr;HEAPU8[cur_ptr+0>>>0]=cur_arg;break;case 7:case 8:cur_ptr-=2,cur_ptr&=~(4-1);HEAPU32[(args_ptr>>2)+carg_idx>>>0]=cur_ptr;HEAPU16[(cur_ptr>>1)+0>>>0]=cur_arg;break;case 1:case 9:case 10:case 14:cur_ptr-=4,cur_ptr&=~(4-1);HEAPU32[(args_ptr>>2)+carg_idx>>>0]=cur_ptr;HEAPU32[(cur_ptr>>2)+0>>>0]=cur_arg;break;case 13:cur_ptr-=arg_size,cur_ptr&=~(arg_align-1);HEAP8.subarray(cur_ptr>>>0,cur_ptr+arg_size>>>0).set(HEAP8.subarray(cur_arg>>>0,cur_arg+arg_size>>>0));HEAPU32[(args_ptr>>2)+carg_idx>>>0]=cur_ptr;break;case 2:cur_ptr-=4,cur_ptr&=~(4-1);HEAPU32[(args_ptr>>2)+carg_idx>>>0]=cur_ptr;HEAPF32[(cur_ptr>>2)+0>>>0]=cur_arg;break;case 3:cur_ptr-=8,cur_ptr&=~(8-1);HEAPU32[(args_ptr>>2)+carg_idx>>>0]=cur_ptr;HEAPF64[(cur_ptr>>3)+0>>>0]=cur_arg;break;case 11:case 12:cur_ptr-=8,cur_ptr&=~(8-1);HEAPU32[(args_ptr>>2)+carg_idx>>>0]=cur_ptr;HEAPU64[(cur_ptr>>3)+0>>>0]=cur_arg;break;case 4:cur_ptr-=16,cur_ptr&=~(8-1);HEAPU32[(args_ptr>>2)+carg_idx>>>0]=cur_ptr;HEAPU64[(cur_ptr>>3)+0>>>0]=cur_arg;cur_arg=args[jsarg_idx++];HEAPU64[(cur_ptr>>3)+1>>>0]=cur_arg;break}}var varargs=args[args.length-1];for(;carg_idx<nargs;carg_idx++){var arg_type_id=unboxed_arg_type_id_list[carg_idx];var arg_type_info=unboxed_arg_type_info_list[carg_idx];var arg_size=arg_type_info[0];var arg_align=arg_type_info[1];if(arg_type_id===13){var struct_ptr=HEAPU32[(varargs>>2)+0>>>0];cur_ptr-=arg_size,cur_ptr&=~(arg_align-1);HEAP8.subarray(cur_ptr>>>0,cur_ptr+arg_size>>>0).set(HEAP8.subarray(struct_ptr>>>0,struct_ptr+arg_size>>>0));HEAPU32[(args_ptr>>2)+carg_idx>>>0]=cur_ptr}else{HEAPU32[(args_ptr>>2)+carg_idx>>>0]=varargs}varargs+=4}stackRestore(cur_ptr);stackAlloc(0);0;getWasmTableEntry(HEAPU32[(closure>>2)+2>>>0])(HEAPU32[(closure>>2)+1>>>0],ret_ptr,args_ptr,HEAPU32[(closure>>2)+3>>>0]);stackRestore(orig_stack_ptr);if(!ret_by_arg){switch(sig[0]){case"i":return HEAPU32[(ret_ptr>>2)+0>>>0];case"j":return HEAPU64[(ret_ptr>>3)+0>>>0];case"d":return HEAPF64[(ret_ptr>>3)+0>>>0];case"f":return HEAPF32[(ret_ptr>>2)+0>>>0]}}}try{var wasm_trampoline=convertJsFunctionToWasm(trampoline,sig)}catch(e){return 1}setWasmTableEntry(codeloc,wasm_trampoline);HEAPU32[(closure>>2)+1>>>0]=cif;HEAPU32[(closure>>2)+2>>>0]=fun;HEAPU32[(closure>>2)+3>>>0]=user_data;return 0}ffi_prep_closure_loc_js.sig="iiiiii";function __hiwire_deduplicate_new(){return new Map}__hiwire_deduplicate_new.sig="e";function __hiwire_deduplicate_get(map,value){return map.get(value)}__hiwire_deduplicate_get.sig="iee";function __hiwire_deduplicate_set(map,value,ref){map.set(value,ref)}__hiwire_deduplicate_set.sig="veei";function __hiwire_deduplicate_delete(map,value){map.delete(value)}__hiwire_deduplicate_delete.sig="vee";var wasmImports={IMG_Init:_IMG_Init,IMG_Load:_IMG_Load,IMG_Load_RW:_IMG_Load_RW,IMG_Quit:_IMG_Quit,JsArray_count_js,JsArray_index_js,JsArray_inplace_repeat_js,JsArray_repeat_js,JsArray_reverse_js,JsArray_reversed_iterator,JsBuffer_DecodeString_js,JsBuffer_get_info,JsDoubleProxy_unwrap_js,JsException_new_helper,JsMap_GetIter_js,JsMap_clear_js,JsModule_GetAll_js,JsObjMap_GetIter_js,JsObjMap_ass_subscript_js,JsObjMap_contains_js,JsObjMap_length_js,JsObjMap_subscript_js,JsProxy_Bool_js,JsProxy_DelAttr_js,JsProxy_Dir_js,JsProxy_GetAsyncIter_js,JsProxy_GetAttr_js,JsProxy_GetIter_js,JsProxy_SetAttr_js,JsProxy_compute_typeflags,JsProxy_subscript_js,JsProxy_to_weakref_js,JsvArray_Check,JsvArray_Delete,JsvArray_Extend,JsvArray_Get,JsvArray_Insert,JsvArray_New,JsvArray_Push,JsvArray_Set,JsvArray_ShallowCopy,JsvArray_slice,JsvArray_slice_assign,JsvAsyncGenerator_Check,JsvBuffer_assignFromPtr,JsvBuffer_assignToPtr,JsvBuffer_intoFile,JsvBuffer_readFromFile,JsvBuffer_writeToFile,JsvError_Throw,JsvFunction_CallBound,JsvFunction_Call_OneArg,JsvFunction_Check,JsvFunction_Construct,JsvGenerator_Check,JsvLiteralMap_New,JsvMap_New,JsvMap_Set,JsvNoValue_Check,JsvNum_fromDigits,JsvNum_fromDouble,JsvNum_fromInt,JsvObject_CallMethod,JsvObject_CallMethod_NoArgs,JsvObject_CallMethod_OneArg,JsvObject_CallMethod_TwoArgs,JsvObject_Entries,JsvObject_Keys,JsvObject_New,JsvObject_SetAttr,JsvObject_Values,JsvObject_toString,JsvPromise_Check,JsvPromise_Resolve,JsvPromise_Syncify_handleError,JsvSet_Add,JsvSet_New,JsvUTF8ToString,Jsv_constructorName,Jsv_equal,Jsv_greater_than,Jsv_greater_than_equal,Jsv_less_than,Jsv_less_than_equal,Jsv_not_equal,Jsv_to_bool,Jsv_typeof,Mix_AllocateChannels:_Mix_AllocateChannels,Mix_ChannelFinished:_Mix_ChannelFinished,Mix_CloseAudio:_Mix_CloseAudio,Mix_FadeInChannelTimed:_Mix_FadeInChannelTimed,Mix_FadeInMusicPos:_Mix_FadeInMusicPos,Mix_FadeOutChannel:_Mix_FadeOutChannel,Mix_FadeOutMusic:_Mix_FadeOutMusic,Mix_FadingChannel:_Mix_FadingChannel,Mix_FreeChunk:_Mix_FreeChunk,Mix_FreeMusic:_Mix_FreeMusic,Mix_HaltChannel:_Mix_HaltChannel,Mix_HaltMusic:_Mix_HaltMusic,Mix_HookMusicFinished:_Mix_HookMusicFinished,Mix_Init:_Mix_Init,Mix_Linked_Version:_Mix_Linked_Version,Mix_LoadMUS:_Mix_LoadMUS,Mix_LoadMUS_RW:_Mix_LoadMUS_RW,Mix_LoadWAV:_Mix_LoadWAV,Mix_LoadWAV_RW:_Mix_LoadWAV_RW,Mix_OpenAudio:_Mix_OpenAudio,Mix_Pause:_Mix_Pause,Mix_PauseMusic:_Mix_PauseMusic,Mix_Paused:_Mix_Paused,Mix_PausedMusic:_Mix_PausedMusic,Mix_PlayChannelTimed:_Mix_PlayChannelTimed,Mix_PlayMusic:_Mix_PlayMusic,Mix_Playing:_Mix_Playing,Mix_PlayingMusic:_Mix_PlayingMusic,Mix_QuerySpec:_Mix_QuerySpec,Mix_QuickLoad_RAW:_Mix_QuickLoad_RAW,Mix_Quit:_Mix_Quit,Mix_ReserveChannels:_Mix_ReserveChannels,Mix_Resume:_Mix_Resume,Mix_ResumeMusic:_Mix_ResumeMusic,Mix_SetPanning:_Mix_SetPanning,Mix_SetPosition:_Mix_SetPosition,Mix_SetPostMix:_Mix_SetPostMix,Mix_Volume:_Mix_Volume,Mix_VolumeChunk:_Mix_VolumeChunk,Mix_VolumeMusic:_Mix_VolumeMusic,SDL_AddTimer:_SDL_AddTimer,SDL_AllocRW:_SDL_AllocRW,SDL_AudioDriverName:_SDL_AudioDriverName,SDL_AudioQuit:_SDL_AudioQuit,SDL_ClearError:_SDL_ClearError,SDL_CloseAudio:_SDL_CloseAudio,SDL_CondBroadcast:_SDL_CondBroadcast,SDL_CondSignal:_SDL_CondSignal,SDL_CondWait:_SDL_CondWait,SDL_CondWaitTimeout:_SDL_CondWaitTimeout,SDL_ConvertSurface:_SDL_ConvertSurface,SDL_CreateCond:_SDL_CreateCond,SDL_CreateMutex:_SDL_CreateMutex,SDL_CreateRGBSurface:_SDL_CreateRGBSurface,SDL_CreateRGBSurfaceFrom:_SDL_CreateRGBSurfaceFrom,SDL_CreateThread:_SDL_CreateThread,SDL_Delay:_SDL_Delay,SDL_DestroyCond:_SDL_DestroyCond,SDL_DestroyMutex:_SDL_DestroyMutex,SDL_DestroyRenderer:_SDL_DestroyRenderer,SDL_DestroyWindow:_SDL_DestroyWindow,SDL_DisplayFormat:_SDL_DisplayFormat,SDL_DisplayFormatAlpha:_SDL_DisplayFormatAlpha,SDL_EnableKeyRepeat:_SDL_EnableKeyRepeat,SDL_EnableUNICODE:_SDL_EnableUNICODE,SDL_FillRect:_SDL_FillRect,SDL_Flip:_SDL_Flip,SDL_FreeRW:_SDL_FreeRW,SDL_FreeSurface:_SDL_FreeSurface,SDL_GL_DeleteContext:_SDL_GL_DeleteContext,SDL_GL_ExtensionSupported:_SDL_GL_ExtensionSupported,SDL_GL_GetAttribute:_SDL_GL_GetAttribute,SDL_GL_GetSwapInterval:_SDL_GL_GetSwapInterval,SDL_GL_MakeCurrent:_SDL_GL_MakeCurrent,SDL_GL_SetAttribute:_SDL_GL_SetAttribute,SDL_GL_SetSwapInterval:_SDL_GL_SetSwapInterval,SDL_GL_SwapBuffers:_SDL_GL_SwapBuffers,SDL_GL_SwapWindow:_SDL_GL_SwapWindow,SDL_GetAppState:_SDL_GetAppState,SDL_GetAudioDriver:_SDL_GetAudioDriver,SDL_GetClipRect:_SDL_GetClipRect,SDL_GetCurrentAudioDriver:_SDL_GetCurrentAudioDriver,SDL_GetError:_SDL_GetError,SDL_GetKeyName:_SDL_GetKeyName,SDL_GetKeyState:_SDL_GetKeyState,SDL_GetKeyboardState:_SDL_GetKeyboardState,SDL_GetModState:_SDL_GetModState,SDL_GetMouseState:_SDL_GetMouseState,SDL_GetNumAudioDrivers:_SDL_GetNumAudioDrivers,SDL_GetRGB:_SDL_GetRGB,SDL_GetRGBA:_SDL_GetRGBA,SDL_GetScancodeFromKey:_SDL_GetScancodeFromKey,SDL_GetThreadID:_SDL_GetThreadID,SDL_GetTicks:_SDL_GetTicks,SDL_GetVideoInfo:_SDL_GetVideoInfo,SDL_GetVideoSurface:_SDL_GetVideoSurface,SDL_GetWindowFlags:_SDL_GetWindowFlags,SDL_GetWindowSize:_SDL_GetWindowSize,SDL_Has3DNow:_SDL_Has3DNow,SDL_Has3DNowExt:_SDL_Has3DNowExt,SDL_HasAltiVec:_SDL_HasAltiVec,SDL_HasMMX:_SDL_HasMMX,SDL_HasMMXExt:_SDL_HasMMXExt,SDL_HasRDTSC:_SDL_HasRDTSC,SDL_HasSSE:_SDL_HasSSE,SDL_HasSSE2:_SDL_HasSSE2,SDL_Init:_SDL_Init,SDL_InitSubSystem:_SDL_InitSubSystem,SDL_JoystickClose:_SDL_JoystickClose,SDL_JoystickEventState:_SDL_JoystickEventState,SDL_JoystickGetAxis:_SDL_JoystickGetAxis,SDL_JoystickGetBall:_SDL_JoystickGetBall,SDL_JoystickGetButton:_SDL_JoystickGetButton,SDL_JoystickGetHat:_SDL_JoystickGetHat,SDL_JoystickIndex:_SDL_JoystickIndex,SDL_JoystickName:_SDL_JoystickName,SDL_JoystickNumAxes:_SDL_JoystickNumAxes,SDL_JoystickNumBalls:_SDL_JoystickNumBalls,SDL_JoystickNumButtons:_SDL_JoystickNumButtons,SDL_JoystickNumHats:_SDL_JoystickNumHats,SDL_JoystickOpen:_SDL_JoystickOpen,SDL_JoystickOpened:_SDL_JoystickOpened,SDL_JoystickUpdate:_SDL_JoystickUpdate,SDL_Linked_Version:_SDL_Linked_Version,SDL_ListModes:_SDL_ListModes,SDL_LoadBMP_RW:_SDL_LoadBMP_RW,SDL_LockAudio:_SDL_LockAudio,SDL_LockSurface:_SDL_LockSurface,SDL_LogSetOutputFunction:_SDL_LogSetOutputFunction,SDL_LowerBlit:_SDL_LowerBlit,SDL_LowerBlitScaled:_SDL_LowerBlitScaled,SDL_MapRGB:_SDL_MapRGB,SDL_MapRGBA:_SDL_MapRGBA,SDL_NumJoysticks:_SDL_NumJoysticks,SDL_OpenAudio:_SDL_OpenAudio,SDL_PauseAudio:_SDL_PauseAudio,SDL_PeepEvents:_SDL_PeepEvents,SDL_PollEvent:_SDL_PollEvent,SDL_PumpEvents:_SDL_PumpEvents,SDL_PushEvent:_SDL_PushEvent,SDL_Quit:_SDL_Quit,SDL_QuitSubSystem:_SDL_QuitSubSystem,SDL_RWFromConstMem:_SDL_RWFromConstMem,SDL_RWFromFile:_SDL_RWFromFile,SDL_RWFromMem:_SDL_RWFromMem,SDL_RemoveTimer:_SDL_RemoveTimer,SDL_SaveBMP_RW:_SDL_SaveBMP_RW,SDL_SetAlpha:_SDL_SetAlpha,SDL_SetClipRect:_SDL_SetClipRect,SDL_SetColorKey:_SDL_SetColorKey,SDL_SetColors:_SDL_SetColors,SDL_SetError:_SDL_SetError,SDL_SetGamma:_SDL_SetGamma,SDL_SetGammaRamp:_SDL_SetGammaRamp,SDL_SetPalette:_SDL_SetPalette,SDL_SetVideoMode:_SDL_SetVideoMode,SDL_SetWindowFullscreen:_SDL_SetWindowFullscreen,SDL_SetWindowTitle:_SDL_SetWindowTitle,SDL_ShowCursor:_SDL_ShowCursor,SDL_StartTextInput:_SDL_StartTextInput,SDL_StopTextInput:_SDL_StopTextInput,SDL_ThreadID:_SDL_ThreadID,SDL_UnlockAudio:_SDL_UnlockAudio,SDL_UnlockSurface:_SDL_UnlockSurface,SDL_UpdateRect:_SDL_UpdateRect,SDL_UpdateRects:_SDL_UpdateRects,SDL_UpperBlit:_SDL_UpperBlit,SDL_UpperBlitScaled:_SDL_UpperBlitScaled,SDL_VideoDriverName:_SDL_VideoDriverName,SDL_VideoModeOK:_SDL_VideoModeOK,SDL_VideoQuit:_SDL_VideoQuit,SDL_WM_GrabInput:_SDL_WM_GrabInput,SDL_WM_IconifyWindow:_SDL_WM_IconifyWindow,SDL_WM_SetCaption:_SDL_WM_SetCaption,SDL_WM_SetIcon:_SDL_WM_SetIcon,SDL_WM_ToggleFullScreen:_SDL_WM_ToggleFullScreen,SDL_WaitThread:_SDL_WaitThread,SDL_WarpMouse:_SDL_WarpMouse,SDL_WasInit:_SDL_WasInit,SDL_mutexP:_SDL_mutexP,SDL_mutexV:_SDL_mutexV,TTF_CloseFont:_TTF_CloseFont,TTF_FontAscent:_TTF_FontAscent,TTF_FontDescent:_TTF_FontDescent,TTF_FontHeight:_TTF_FontHeight,TTF_FontLineSkip:_TTF_FontLineSkip,TTF_GlyphMetrics:_TTF_GlyphMetrics,TTF_Init:_TTF_Init,TTF_OpenFont:_TTF_OpenFont,TTF_Quit:_TTF_Quit,TTF_RenderText_Blended:_TTF_RenderText_Blended,TTF_RenderText_Shaded:_TTF_RenderText_Shaded,TTF_RenderText_Solid:_TTF_RenderText_Solid,TTF_RenderUTF8_Solid:_TTF_RenderUTF8_Solid,TTF_SizeText:_TTF_SizeText,TTF_SizeUTF8:_TTF_SizeUTF8,_JsArray_PostProcess_helper,_JsArray_PushEntry_helper,_JsObject_Set_js,_PyEM_GetCountArgsPtr,_PyEM_InitTrampoline_js,_PyEM_TrampolineCall_JS,_Py_CheckEmscriptenSignals_Helper,_Py_emscripten_runtime,_Unwind_Backtrace:__Unwind_Backtrace,_Unwind_FindEnclosingFunction:__Unwind_FindEnclosingFunction,_Unwind_GetIPInfo:__Unwind_GetIPInfo,__asctime_r:___asctime_r,__assert_fail:___assert_fail,__c_longjmp:___c_longjmp,__call_sighandler:___call_sighandler,__cpp_exception:___cpp_exception,__global_base:___global_base,__heap_base:___heap_base,__hiwire_deduplicate_delete,__hiwire_deduplicate_get,__hiwire_deduplicate_new,__hiwire_deduplicate_set,__indirect_function_table:wasmTable,__memory_base:___memory_base,__stack_high:___stack_high,__stack_low:___stack_low,__stack_pointer:___stack_pointer,__syscall__newselect:___syscall__newselect,__syscall_accept4:___syscall_accept4,__syscall_bind:___syscall_bind,__syscall_chdir:___syscall_chdir,__syscall_chmod:___syscall_chmod,__syscall_connect:___syscall_connect,__syscall_dup:___syscall_dup,__syscall_dup3:___syscall_dup3,__syscall_faccessat:___syscall_faccessat,__syscall_fadvise64:___syscall_fadvise64,__syscall_fallocate:___syscall_fallocate,__syscall_fchdir:___syscall_fchdir,__syscall_fchmod:___syscall_fchmod,__syscall_fchmodat2:___syscall_fchmodat2,__syscall_fchown32:___syscall_fchown32,__syscall_fchownat:___syscall_fchownat,__syscall_fcntl64:___syscall_fcntl64,__syscall_fdatasync:___syscall_fdatasync,__syscall_fstat64:___syscall_fstat64,__syscall_fstatfs64:___syscall_fstatfs64,__syscall_ftruncate64:___syscall_ftruncate64,__syscall_getcwd:___syscall_getcwd,__syscall_getdents64:___syscall_getdents64,__syscall_getpeername:___syscall_getpeername,__syscall_getsockname:___syscall_getsockname,__syscall_getsockopt:___syscall_getsockopt,__syscall_ioctl:___syscall_ioctl,__syscall_listen:___syscall_listen,__syscall_lstat64:___syscall_lstat64,__syscall_mkdirat:___syscall_mkdirat,__syscall_mknodat:___syscall_mknodat,__syscall_newfstatat:___syscall_newfstatat,__syscall_openat:___syscall_openat,__syscall_pipe:___syscall_pipe,__syscall_poll:___syscall_poll,__syscall_readlinkat:___syscall_readlinkat,__syscall_recvfrom:___syscall_recvfrom,__syscall_recvmsg:___syscall_recvmsg,__syscall_renameat:___syscall_renameat,__syscall_rmdir:___syscall_rmdir,__syscall_sendmsg:___syscall_sendmsg,__syscall_sendto:___syscall_sendto,__syscall_socket:___syscall_socket,__syscall_stat64:___syscall_stat64,__syscall_statfs64:___syscall_statfs64,__syscall_symlinkat:___syscall_symlinkat,__syscall_truncate64:___syscall_truncate64,__syscall_unlinkat:___syscall_unlinkat,__syscall_utimensat:___syscall_utimensat,__table_base:___table_base,_abort_js:__abort_js,_agen_handle_result_js,_dlopen_js:__dlopen_js,_dlsym_catchup_js:__dlsym_catchup_js,_dlsym_js:__dlsym_js,_emscripten_dlopen_js:__emscripten_dlopen_js,_emscripten_fs_load_embedded_files:__emscripten_fs_load_embedded_files,_emscripten_get_now_is_monotonic:__emscripten_get_now_is_monotonic,_emscripten_get_progname:__emscripten_get_progname,_emscripten_lookup_name:__emscripten_lookup_name,_emscripten_push_main_loop_blocker:__emscripten_push_main_loop_blocker,_emscripten_push_uncounted_main_loop_blocker:__emscripten_push_uncounted_main_loop_blocker,_emscripten_runtime_keepalive_clear:__emscripten_runtime_keepalive_clear,_emscripten_system:__emscripten_system,_glGetActiveAttribOrUniform:__glGetActiveAttribOrUniform,_gmtime_js:__gmtime_js,_localtime_js:__localtime_js,_mktime_js:__mktime_js,_mmap_js:__mmap_js,_msync_js:__msync_js,_munmap_js:__munmap_js,_pyproxyGen_make_result,_pyproxy_get_buffer_result,_python2js_add_to_cache,_python2js_addto_postprocess_list,_python2js_buffer_inner,_python2js_cache_lookup,_python2js_handle_postprocess_list,_python2js_ucs1,_python2js_ucs2,_python2js_ucs4,_setitimer_js:__setitimer_js,_timegm_js:__timegm_js,_tzset_js:__tzset_js,array_to_js,boxColor:_boxColor,boxRGBA:_boxRGBA,can_run_sync_js,capture_stderr,clock_res_get:_clock_res_get,clock_time_get:_clock_time_get,create_once_callable,create_promise_handles,create_sentinel:_create_sentinel,destroy_jsarray_entries,destroy_proxies,destroy_proxies_js,destroy_proxy,eglBindAPI:_eglBindAPI,eglChooseConfig:_eglChooseConfig,eglCreateContext:_eglCreateContext,eglCreateWindowSurface:_eglCreateWindowSurface,eglDestroyContext:_eglDestroyContext,eglDestroySurface:_eglDestroySurface,eglGetConfigAttrib:_eglGetConfigAttrib,eglGetConfigs:_eglGetConfigs,eglGetCurrentContext:_eglGetCurrentContext,eglGetCurrentDisplay:_eglGetCurrentDisplay,eglGetCurrentSurface:_eglGetCurrentSurface,eglGetDisplay:_eglGetDisplay,eglGetError:_eglGetError,eglInitialize:_eglInitialize,eglMakeCurrent:_eglMakeCurrent,eglQueryAPI:_eglQueryAPI,eglQueryContext:_eglQueryContext,eglQueryString:_eglQueryString,eglQuerySurface:_eglQuerySurface,eglReleaseThread:_eglReleaseThread,eglSwapBuffers:_eglSwapBuffers,eglSwapInterval:_eglSwapInterval,eglTerminate:_eglTerminate,eglWaitClient:_eglWaitClient,eglWaitGL:_eglWaitGL,eglWaitNative:_eglWaitNative,ellipseColor:_ellipseColor,ellipseRGBA:_ellipseRGBA,emscripten_SDL_SetEventHandler:_emscripten_SDL_SetEventHandler,emscripten_asm_const_async_on_main_thread:_emscripten_asm_const_async_on_main_thread,emscripten_asm_const_double:_emscripten_asm_const_double,emscripten_asm_const_double_sync_on_main_thread:_emscripten_asm_const_double_sync_on_main_thread,emscripten_asm_const_int:_emscripten_asm_const_int,emscripten_asm_const_int_sync_on_main_thread:_emscripten_asm_const_int_sync_on_main_thread,emscripten_asm_const_ptr:_emscripten_asm_const_ptr,emscripten_asm_const_ptr_sync_on_main_thread:_emscripten_asm_const_ptr_sync_on_main_thread,emscripten_async_call:_emscripten_async_call,emscripten_async_load_script:_emscripten_async_load_script,emscripten_async_run_script:_emscripten_async_run_script,emscripten_async_wget:_emscripten_async_wget,emscripten_async_wget2:_emscripten_async_wget2,emscripten_async_wget2_abort:_emscripten_async_wget2_abort,emscripten_async_wget2_data:_emscripten_async_wget2_data,emscripten_async_wget_data:_emscripten_async_wget_data,emscripten_call_worker:_emscripten_call_worker,emscripten_cancel_animation_frame:_emscripten_cancel_animation_frame,emscripten_cancel_main_loop:_emscripten_cancel_main_loop,emscripten_clear_immediate:_emscripten_clear_immediate,emscripten_clear_interval:_emscripten_clear_interval,emscripten_clear_timeout:_emscripten_clear_timeout,emscripten_console_error:_emscripten_console_error,emscripten_console_log:_emscripten_console_log,emscripten_console_trace:_emscripten_console_trace,emscripten_console_warn:_emscripten_console_warn,emscripten_create_worker:_emscripten_create_worker,emscripten_date_now:_emscripten_date_now,emscripten_debugger:_emscripten_debugger,emscripten_destroy_worker:_emscripten_destroy_worker,emscripten_enter_soft_fullscreen:_emscripten_enter_soft_fullscreen,emscripten_err:_emscripten_err,emscripten_errn:_emscripten_errn,emscripten_exit_fullscreen:_emscripten_exit_fullscreen,emscripten_exit_pointerlock:_emscripten_exit_pointerlock,emscripten_exit_soft_fullscreen:_emscripten_exit_soft_fullscreen,emscripten_exit_with_live_runtime:_emscripten_exit_with_live_runtime,emscripten_force_exit:_emscripten_force_exit,emscripten_get_battery_status:_emscripten_get_battery_status,emscripten_get_callstack:_emscripten_get_callstack,emscripten_get_canvas_element_size:_emscripten_get_canvas_element_size,emscripten_get_canvas_size:_emscripten_get_canvas_size,emscripten_get_compiler_setting:_emscripten_get_compiler_setting,emscripten_get_device_pixel_ratio:_emscripten_get_device_pixel_ratio,emscripten_get_devicemotion_status:_emscripten_get_devicemotion_status,emscripten_get_deviceorientation_status:_emscripten_get_deviceorientation_status,emscripten_get_element_css_size:_emscripten_get_element_css_size,emscripten_get_fullscreen_status:_emscripten_get_fullscreen_status,emscripten_get_gamepad_status:_emscripten_get_gamepad_status,emscripten_get_heap_max:_emscripten_get_heap_max,emscripten_get_main_loop_timing:_emscripten_get_main_loop_timing,emscripten_get_mouse_status:_emscripten_get_mouse_status,emscripten_get_now:_emscripten_get_now,emscripten_get_now_res:_emscripten_get_now_res,emscripten_get_num_gamepads:_emscripten_get_num_gamepads,emscripten_get_orientation_status:_emscripten_get_orientation_status,emscripten_get_pointerlock_status:_emscripten_get_pointerlock_status,emscripten_get_preloaded_image_data:_emscripten_get_preloaded_image_data,emscripten_get_preloaded_image_data_from_FILE:_emscripten_get_preloaded_image_data_from_FILE,emscripten_get_screen_size:_emscripten_get_screen_size,emscripten_get_visibility_status:_emscripten_get_visibility_status,emscripten_get_window_title:_emscripten_get_window_title,emscripten_get_worker_queue_size:_emscripten_get_worker_queue_size,emscripten_glActiveTexture:_emscripten_glActiveTexture,emscripten_glAttachShader:_emscripten_glAttachShader,emscripten_glBegin:_emscripten_glBegin,emscripten_glBeginQuery:_emscripten_glBeginQuery,emscripten_glBeginQueryEXT:_emscripten_glBeginQueryEXT,emscripten_glBeginTransformFeedback:_emscripten_glBeginTransformFeedback,emscripten_glBindAttribLocation:_emscripten_glBindAttribLocation,emscripten_glBindBuffer:_emscripten_glBindBuffer,emscripten_glBindBufferBase:_emscripten_glBindBufferBase,emscripten_glBindBufferRange:_emscripten_glBindBufferRange,emscripten_glBindFramebuffer:_emscripten_glBindFramebuffer,emscripten_glBindRenderbuffer:_emscripten_glBindRenderbuffer,emscripten_glBindSampler:_emscripten_glBindSampler,emscripten_glBindTexture:_emscripten_glBindTexture,emscripten_glBindTransformFeedback:_emscripten_glBindTransformFeedback,emscripten_glBindVertexArray:_emscripten_glBindVertexArray,emscripten_glBindVertexArrayOES:_emscripten_glBindVertexArrayOES,emscripten_glBlendColor:_emscripten_glBlendColor,emscripten_glBlendEquation:_emscripten_glBlendEquation,emscripten_glBlendEquationSeparate:_emscripten_glBlendEquationSeparate,emscripten_glBlendFunc:_emscripten_glBlendFunc,emscripten_glBlendFuncSeparate:_emscripten_glBlendFuncSeparate,emscripten_glBlitFramebuffer:_emscripten_glBlitFramebuffer,emscripten_glBufferData:_emscripten_glBufferData,emscripten_glBufferSubData:_emscripten_glBufferSubData,emscripten_glCheckFramebufferStatus:_emscripten_glCheckFramebufferStatus,emscripten_glClear:_emscripten_glClear,emscripten_glClearBufferfi:_emscripten_glClearBufferfi,emscripten_glClearBufferfv:_emscripten_glClearBufferfv,emscripten_glClearBufferiv:_emscripten_glClearBufferiv,emscripten_glClearBufferuiv:_emscripten_glClearBufferuiv,emscripten_glClearColor:_emscripten_glClearColor,emscripten_glClearDepth:_emscripten_glClearDepth,emscripten_glClearDepthf:_emscripten_glClearDepthf,emscripten_glClearStencil:_emscripten_glClearStencil,emscripten_glClientWaitSync:_emscripten_glClientWaitSync,emscripten_glClipControlEXT:_emscripten_glClipControlEXT,emscripten_glColorMask:_emscripten_glColorMask,emscripten_glCompileShader:_emscripten_glCompileShader,emscripten_glCompressedTexImage2D:_emscripten_glCompressedTexImage2D,emscripten_glCompressedTexImage3D:_emscripten_glCompressedTexImage3D,emscripten_glCompressedTexSubImage2D:_emscripten_glCompressedTexSubImage2D,emscripten_glCompressedTexSubImage3D:_emscripten_glCompressedTexSubImage3D,emscripten_glCopyBufferSubData:_emscripten_glCopyBufferSubData,emscripten_glCopyTexImage2D:_emscripten_glCopyTexImage2D,emscripten_glCopyTexSubImage2D:_emscripten_glCopyTexSubImage2D,emscripten_glCopyTexSubImage3D:_emscripten_glCopyTexSubImage3D,emscripten_glCreateProgram:_emscripten_glCreateProgram,emscripten_glCreateShader:_emscripten_glCreateShader,emscripten_glCullFace:_emscripten_glCullFace,emscripten_glDeleteBuffers:_emscripten_glDeleteBuffers,emscripten_glDeleteFramebuffers:_emscripten_glDeleteFramebuffers,emscripten_glDeleteProgram:_emscripten_glDeleteProgram,emscripten_glDeleteQueries:_emscripten_glDeleteQueries,emscripten_glDeleteQueriesEXT:_emscripten_glDeleteQueriesEXT,emscripten_glDeleteRenderbuffers:_emscripten_glDeleteRenderbuffers,emscripten_glDeleteSamplers:_emscripten_glDeleteSamplers,emscripten_glDeleteShader:_emscripten_glDeleteShader,emscripten_glDeleteSync:_emscripten_glDeleteSync,emscripten_glDeleteTextures:_emscripten_glDeleteTextures,emscripten_glDeleteTransformFeedbacks:_emscripten_glDeleteTransformFeedbacks,emscripten_glDeleteVertexArrays:_emscripten_glDeleteVertexArrays,emscripten_glDeleteVertexArraysOES:_emscripten_glDeleteVertexArraysOES,emscripten_glDepthFunc:_emscripten_glDepthFunc,emscripten_glDepthMask:_emscripten_glDepthMask,emscripten_glDepthRange:_emscripten_glDepthRange,emscripten_glDepthRangef:_emscripten_glDepthRangef,emscripten_glDetachShader:_emscripten_glDetachShader,emscripten_glDisable:_emscripten_glDisable,emscripten_glDisableVertexAttribArray:_emscripten_glDisableVertexAttribArray,emscripten_glDrawArrays:_emscripten_glDrawArrays,emscripten_glDrawArraysInstanced:_emscripten_glDrawArraysInstanced,emscripten_glDrawArraysInstancedANGLE:_emscripten_glDrawArraysInstancedANGLE,emscripten_glDrawArraysInstancedARB:_emscripten_glDrawArraysInstancedARB,emscripten_glDrawArraysInstancedBaseInstance:_emscripten_glDrawArraysInstancedBaseInstance,emscripten_glDrawArraysInstancedBaseInstanceANGLE:_emscripten_glDrawArraysInstancedBaseInstanceANGLE,emscripten_glDrawArraysInstancedBaseInstanceWEBGL:_emscripten_glDrawArraysInstancedBaseInstanceWEBGL,emscripten_glDrawArraysInstancedEXT:_emscripten_glDrawArraysInstancedEXT,emscripten_glDrawArraysInstancedNV:_emscripten_glDrawArraysInstancedNV,emscripten_glDrawBuffers:_emscripten_glDrawBuffers,emscripten_glDrawBuffersEXT:_emscripten_glDrawBuffersEXT,emscripten_glDrawBuffersWEBGL:_emscripten_glDrawBuffersWEBGL,emscripten_glDrawElements:_emscripten_glDrawElements,emscripten_glDrawElementsInstanced:_emscripten_glDrawElementsInstanced,emscripten_glDrawElementsInstancedANGLE:_emscripten_glDrawElementsInstancedANGLE,emscripten_glDrawElementsInstancedARB:_emscripten_glDrawElementsInstancedARB,emscripten_glDrawElementsInstancedBaseVertexBaseInstanceANGLE:_emscripten_glDrawElementsInstancedBaseVertexBaseInstanceANGLE,emscripten_glDrawElementsInstancedBaseVertexBaseInstanceWEBGL:_emscripten_glDrawElementsInstancedBaseVertexBaseInstanceWEBGL,emscripten_glDrawElementsInstancedEXT:_emscripten_glDrawElementsInstancedEXT,emscripten_glDrawElementsInstancedNV:_emscripten_glDrawElementsInstancedNV,emscripten_glDrawRangeElements:_emscripten_glDrawRangeElements,emscripten_glEnable:_emscripten_glEnable,emscripten_glEnableVertexAttribArray:_emscripten_glEnableVertexAttribArray,emscripten_glEndQuery:_emscripten_glEndQuery,emscripten_glEndQueryEXT:_emscripten_glEndQueryEXT,emscripten_glEndTransformFeedback:_emscripten_glEndTransformFeedback,emscripten_glFenceSync:_emscripten_glFenceSync,emscripten_glFinish:_emscripten_glFinish,emscripten_glFlush:_emscripten_glFlush,emscripten_glFramebufferRenderbuffer:_emscripten_glFramebufferRenderbuffer,emscripten_glFramebufferTexture2D:_emscripten_glFramebufferTexture2D,emscripten_glFramebufferTextureLayer:_emscripten_glFramebufferTextureLayer,emscripten_glFrontFace:_emscripten_glFrontFace,emscripten_glGenBuffers:_emscripten_glGenBuffers,emscripten_glGenFramebuffers:_emscripten_glGenFramebuffers,emscripten_glGenQueries:_emscripten_glGenQueries,emscripten_glGenQueriesEXT:_emscripten_glGenQueriesEXT,emscripten_glGenRenderbuffers:_emscripten_glGenRenderbuffers,emscripten_glGenSamplers:_emscripten_glGenSamplers,emscripten_glGenTextures:_emscripten_glGenTextures,emscripten_glGenTransformFeedbacks:_emscripten_glGenTransformFeedbacks,emscripten_glGenVertexArrays:_emscripten_glGenVertexArrays,emscripten_glGenVertexArraysOES:_emscripten_glGenVertexArraysOES,emscripten_glGenerateMipmap:_emscripten_glGenerateMipmap,emscripten_glGetActiveAttrib:_emscripten_glGetActiveAttrib,emscripten_glGetActiveUniform:_emscripten_glGetActiveUniform,emscripten_glGetActiveUniformBlockName:_emscripten_glGetActiveUniformBlockName,emscripten_glGetActiveUniformBlockiv:_emscripten_glGetActiveUniformBlockiv,emscripten_glGetActiveUniformsiv:_emscripten_glGetActiveUniformsiv,emscripten_glGetAttachedShaders:_emscripten_glGetAttachedShaders,emscripten_glGetAttribLocation:_emscripten_glGetAttribLocation,emscripten_glGetBooleanv:_emscripten_glGetBooleanv,emscripten_glGetBufferParameteri64v:_emscripten_glGetBufferParameteri64v,emscripten_glGetBufferParameteriv:_emscripten_glGetBufferParameteriv,emscripten_glGetBufferSubData:_emscripten_glGetBufferSubData,emscripten_glGetError:_emscripten_glGetError,emscripten_glGetFloatv:_emscripten_glGetFloatv,emscripten_glGetFragDataLocation:_emscripten_glGetFragDataLocation,emscripten_glGetFramebufferAttachmentParameteriv:_emscripten_glGetFramebufferAttachmentParameteriv,emscripten_glGetInteger64i_v:_emscripten_glGetInteger64i_v,emscripten_glGetInteger64v:_emscripten_glGetInteger64v,emscripten_glGetIntegeri_v:_emscripten_glGetIntegeri_v,emscripten_glGetIntegerv:_emscripten_glGetIntegerv,emscripten_glGetInternalformativ:_emscripten_glGetInternalformativ,emscripten_glGetProgramBinary:_emscripten_glGetProgramBinary,emscripten_glGetProgramInfoLog:_emscripten_glGetProgramInfoLog,emscripten_glGetProgramiv:_emscripten_glGetProgramiv,emscripten_glGetQueryObjecti64vEXT:_emscripten_glGetQueryObjecti64vEXT,emscripten_glGetQueryObjectivEXT:_emscripten_glGetQueryObjectivEXT,emscripten_glGetQueryObjectui64vEXT:_emscripten_glGetQueryObjectui64vEXT,emscripten_glGetQueryObjectuiv:_emscripten_glGetQueryObjectuiv,emscripten_glGetQueryObjectuivEXT:_emscripten_glGetQueryObjectuivEXT,emscripten_glGetQueryiv:_emscripten_glGetQueryiv,emscripten_glGetQueryivEXT:_emscripten_glGetQueryivEXT,emscripten_glGetRenderbufferParameteriv:_emscripten_glGetRenderbufferParameteriv,emscripten_glGetSamplerParameterfv:_emscripten_glGetSamplerParameterfv,emscripten_glGetSamplerParameteriv:_emscripten_glGetSamplerParameteriv,emscripten_glGetShaderInfoLog:_emscripten_glGetShaderInfoLog,emscripten_glGetShaderPrecisionFormat:_emscripten_glGetShaderPrecisionFormat,emscripten_glGetShaderSource:_emscripten_glGetShaderSource,emscripten_glGetShaderiv:_emscripten_glGetShaderiv,emscripten_glGetString:_emscripten_glGetString,emscripten_glGetStringi:_emscripten_glGetStringi,emscripten_glGetSynciv:_emscripten_glGetSynciv,emscripten_glGetTexParameterfv:_emscripten_glGetTexParameterfv,emscripten_glGetTexParameteriv:_emscripten_glGetTexParameteriv,emscripten_glGetTransformFeedbackVarying:_emscripten_glGetTransformFeedbackVarying,emscripten_glGetUniformBlockIndex:_emscripten_glGetUniformBlockIndex,emscripten_glGetUniformIndices:_emscripten_glGetUniformIndices,emscripten_glGetUniformLocation:_emscripten_glGetUniformLocation,emscripten_glGetUniformfv:_emscripten_glGetUniformfv,emscripten_glGetUniformiv:_emscripten_glGetUniformiv,emscripten_glGetUniformuiv:_emscripten_glGetUniformuiv,emscripten_glGetVertexAttribIiv:_emscripten_glGetVertexAttribIiv,emscripten_glGetVertexAttribIuiv:_emscripten_glGetVertexAttribIuiv,emscripten_glGetVertexAttribPointerv:_emscripten_glGetVertexAttribPointerv,emscripten_glGetVertexAttribfv:_emscripten_glGetVertexAttribfv,emscripten_glGetVertexAttribiv:_emscripten_glGetVertexAttribiv,emscripten_glHint:_emscripten_glHint,emscripten_glInvalidateFramebuffer:_emscripten_glInvalidateFramebuffer,emscripten_glInvalidateSubFramebuffer:_emscripten_glInvalidateSubFramebuffer,emscripten_glIsBuffer:_emscripten_glIsBuffer,emscripten_glIsEnabled:_emscripten_glIsEnabled,emscripten_glIsFramebuffer:_emscripten_glIsFramebuffer,emscripten_glIsProgram:_emscripten_glIsProgram,emscripten_glIsQuery:_emscripten_glIsQuery,emscripten_glIsQueryEXT:_emscripten_glIsQueryEXT,emscripten_glIsRenderbuffer:_emscripten_glIsRenderbuffer,emscripten_glIsSampler:_emscripten_glIsSampler,emscripten_glIsShader:_emscripten_glIsShader,emscripten_glIsSync:_emscripten_glIsSync,emscripten_glIsTexture:_emscripten_glIsTexture,emscripten_glIsTransformFeedback:_emscripten_glIsTransformFeedback,emscripten_glIsVertexArray:_emscripten_glIsVertexArray,emscripten_glIsVertexArrayOES:_emscripten_glIsVertexArrayOES,emscripten_glLineWidth:_emscripten_glLineWidth,emscripten_glLinkProgram:_emscripten_glLinkProgram,emscripten_glLoadIdentity:_emscripten_glLoadIdentity,emscripten_glMatrixMode:_emscripten_glMatrixMode,emscripten_glMultiDrawArrays:_emscripten_glMultiDrawArrays,emscripten_glMultiDrawArraysANGLE:_emscripten_glMultiDrawArraysANGLE,emscripten_glMultiDrawArraysInstancedANGLE:_emscripten_glMultiDrawArraysInstancedANGLE,emscripten_glMultiDrawArraysInstancedBaseInstanceANGLE:_emscripten_glMultiDrawArraysInstancedBaseInstanceANGLE,emscripten_glMultiDrawArraysInstancedBaseInstanceWEBGL:_emscripten_glMultiDrawArraysInstancedBaseInstanceWEBGL,emscripten_glMultiDrawArraysInstancedWEBGL:_emscripten_glMultiDrawArraysInstancedWEBGL,emscripten_glMultiDrawArraysWEBGL:_emscripten_glMultiDrawArraysWEBGL,emscripten_glMultiDrawElements:_emscripten_glMultiDrawElements,emscripten_glMultiDrawElementsANGLE:_emscripten_glMultiDrawElementsANGLE,emscripten_glMultiDrawElementsInstancedANGLE:_emscripten_glMultiDrawElementsInstancedANGLE,emscripten_glMultiDrawElementsInstancedBaseVertexBaseInstanceANGLE:_emscripten_glMultiDrawElementsInstancedBaseVertexBaseInstanceANGLE,emscripten_glMultiDrawElementsInstancedBaseVertexBaseInstanceWEBGL:_emscripten_glMultiDrawElementsInstancedBaseVertexBaseInstanceWEBGL,emscripten_glMultiDrawElementsInstancedWEBGL:_emscripten_glMultiDrawElementsInstancedWEBGL,emscripten_glMultiDrawElementsWEBGL:_emscripten_glMultiDrawElementsWEBGL,emscripten_glPauseTransformFeedback:_emscripten_glPauseTransformFeedback,emscripten_glPixelStorei:_emscripten_glPixelStorei,emscripten_glPolygonModeWEBGL:_emscripten_glPolygonModeWEBGL,emscripten_glPolygonOffset:_emscripten_glPolygonOffset,emscripten_glPolygonOffsetClampEXT:_emscripten_glPolygonOffsetClampEXT,emscripten_glProgramBinary:_emscripten_glProgramBinary,emscripten_glProgramParameteri:_emscripten_glProgramParameteri,emscripten_glQueryCounterEXT:_emscripten_glQueryCounterEXT,emscripten_glReadBuffer:_emscripten_glReadBuffer,emscripten_glReadPixels:_emscripten_glReadPixels,emscripten_glReleaseShaderCompiler:_emscripten_glReleaseShaderCompiler,emscripten_glRenderbufferStorage:_emscripten_glRenderbufferStorage,emscripten_glRenderbufferStorageMultisample:_emscripten_glRenderbufferStorageMultisample,emscripten_glResumeTransformFeedback:_emscripten_glResumeTransformFeedback,emscripten_glSampleCoverage:_emscripten_glSampleCoverage,emscripten_glSamplerParameterf:_emscripten_glSamplerParameterf,emscripten_glSamplerParameterfv:_emscripten_glSamplerParameterfv,emscripten_glSamplerParameteri:_emscripten_glSamplerParameteri,emscripten_glSamplerParameteriv:_emscripten_glSamplerParameteriv,emscripten_glScissor:_emscripten_glScissor,emscripten_glShaderBinary:_emscripten_glShaderBinary,emscripten_glShaderSource:_emscripten_glShaderSource,emscripten_glStencilFunc:_emscripten_glStencilFunc,emscripten_glStencilFuncSeparate:_emscripten_glStencilFuncSeparate,emscripten_glStencilMask:_emscripten_glStencilMask,emscripten_glStencilMaskSeparate:_emscripten_glStencilMaskSeparate,emscripten_glStencilOp:_emscripten_glStencilOp,emscripten_glStencilOpSeparate:_emscripten_glStencilOpSeparate,emscripten_glTexImage2D:_emscripten_glTexImage2D,emscripten_glTexImage3D:_emscripten_glTexImage3D,emscripten_glTexParameterf:_emscripten_glTexParameterf,emscripten_glTexParameterfv:_emscripten_glTexParameterfv,emscripten_glTexParameteri:_emscripten_glTexParameteri,emscripten_glTexParameteriv:_emscripten_glTexParameteriv,emscripten_glTexStorage2D:_emscripten_glTexStorage2D,emscripten_glTexStorage3D:_emscripten_glTexStorage3D,emscripten_glTexSubImage2D:_emscripten_glTexSubImage2D,emscripten_glTexSubImage3D:_emscripten_glTexSubImage3D,emscripten_glTransformFeedbackVaryings:_emscripten_glTransformFeedbackVaryings,emscripten_glUniform1f:_emscripten_glUniform1f,emscripten_glUniform1fv:_emscripten_glUniform1fv,emscripten_glUniform1i:_emscripten_glUniform1i,emscripten_glUniform1iv:_emscripten_glUniform1iv,emscripten_glUniform1ui:_emscripten_glUniform1ui,emscripten_glUniform1uiv:_emscripten_glUniform1uiv,emscripten_glUniform2f:_emscripten_glUniform2f,emscripten_glUniform2fv:_emscripten_glUniform2fv,emscripten_glUniform2i:_emscripten_glUniform2i,emscripten_glUniform2iv:_emscripten_glUniform2iv,emscripten_glUniform2ui:_emscripten_glUniform2ui,emscripten_glUniform2uiv:_emscripten_glUniform2uiv,emscripten_glUniform3f:_emscripten_glUniform3f,emscripten_glUniform3fv:_emscripten_glUniform3fv,emscripten_glUniform3i:_emscripten_glUniform3i,emscripten_glUniform3iv:_emscripten_glUniform3iv,emscripten_glUniform3ui:_emscripten_glUniform3ui,emscripten_glUniform3uiv:_emscripten_glUniform3uiv,emscripten_glUniform4f:_emscripten_glUniform4f,emscripten_glUniform4fv:_emscripten_glUniform4fv,emscripten_glUniform4i:_emscripten_glUniform4i,emscripten_glUniform4iv:_emscripten_glUniform4iv,emscripten_glUniform4ui:_emscripten_glUniform4ui,emscripten_glUniform4uiv:_emscripten_glUniform4uiv,emscripten_glUniformBlockBinding:_emscripten_glUniformBlockBinding,emscripten_glUniformMatrix2fv:_emscripten_glUniformMatrix2fv,emscripten_glUniformMatrix2x3fv:_emscripten_glUniformMatrix2x3fv,emscripten_glUniformMatrix2x4fv:_emscripten_glUniformMatrix2x4fv,emscripten_glUniformMatrix3fv:_emscripten_glUniformMatrix3fv,emscripten_glUniformMatrix3x2fv:_emscripten_glUniformMatrix3x2fv,emscripten_glUniformMatrix3x4fv:_emscripten_glUniformMatrix3x4fv,emscripten_glUniformMatrix4fv:_emscripten_glUniformMatrix4fv,emscripten_glUniformMatrix4x2fv:_emscripten_glUniformMatrix4x2fv,emscripten_glUniformMatrix4x3fv:_emscripten_glUniformMatrix4x3fv,emscripten_glUseProgram:_emscripten_glUseProgram,emscripten_glValidateProgram:_emscripten_glValidateProgram,emscripten_glVertexAttrib1f:_emscripten_glVertexAttrib1f,emscripten_glVertexAttrib1fv:_emscripten_glVertexAttrib1fv,emscripten_glVertexAttrib2f:_emscripten_glVertexAttrib2f,emscripten_glVertexAttrib2fv:_emscripten_glVertexAttrib2fv,emscripten_glVertexAttrib3f:_emscripten_glVertexAttrib3f,emscripten_glVertexAttrib3fv:_emscripten_glVertexAttrib3fv,emscripten_glVertexAttrib4f:_emscripten_glVertexAttrib4f,emscripten_glVertexAttrib4fv:_emscripten_glVertexAttrib4fv,emscripten_glVertexAttribDivisor:_emscripten_glVertexAttribDivisor,emscripten_glVertexAttribDivisorANGLE:_emscripten_glVertexAttribDivisorANGLE,emscripten_glVertexAttribDivisorARB:_emscripten_glVertexAttribDivisorARB,emscripten_glVertexAttribDivisorEXT:_emscripten_glVertexAttribDivisorEXT,emscripten_glVertexAttribDivisorNV:_emscripten_glVertexAttribDivisorNV,emscripten_glVertexAttribI4i:_emscripten_glVertexAttribI4i,emscripten_glVertexAttribI4iv:_emscripten_glVertexAttribI4iv,emscripten_glVertexAttribI4ui:_emscripten_glVertexAttribI4ui,emscripten_glVertexAttribI4uiv:_emscripten_glVertexAttribI4uiv,emscripten_glVertexAttribIPointer:_emscripten_glVertexAttribIPointer,emscripten_glVertexAttribPointer:_emscripten_glVertexAttribPointer,emscripten_glVertexPointer:_emscripten_glVertexPointer,emscripten_glViewport:_emscripten_glViewport,emscripten_glWaitSync:_emscripten_glWaitSync,emscripten_has_asyncify:_emscripten_has_asyncify,emscripten_hide_mouse:_emscripten_hide_mouse,emscripten_html5_remove_all_event_listeners:_emscripten_html5_remove_all_event_listeners,emscripten_is_main_browser_thread:_emscripten_is_main_browser_thread,emscripten_is_webgl_context_lost:_emscripten_is_webgl_context_lost,emscripten_lock_orientation:_emscripten_lock_orientation,emscripten_log:_emscripten_log,emscripten_math_acos:_emscripten_math_acos,emscripten_math_acosh:_emscripten_math_acosh,emscripten_math_asin:_emscripten_math_asin,emscripten_math_asinh:_emscripten_math_asinh,emscripten_math_atan:_emscripten_math_atan,emscripten_math_atan2:_emscripten_math_atan2,emscripten_math_atanh:_emscripten_math_atanh,emscripten_math_cbrt:_emscripten_math_cbrt,emscripten_math_cos:_emscripten_math_cos,emscripten_math_cosh:_emscripten_math_cosh,emscripten_math_exp:_emscripten_math_exp,emscripten_math_expm1:_emscripten_math_expm1,emscripten_math_fmod:_emscripten_math_fmod,emscripten_math_hypot:_emscripten_math_hypot,emscripten_math_log:_emscripten_math_log,emscripten_math_log10:_emscripten_math_log10,emscripten_math_log1p:_emscripten_math_log1p,emscripten_math_log2:_emscripten_math_log2,emscripten_math_pow:_emscripten_math_pow,emscripten_math_random:_emscripten_math_random,emscripten_math_round:_emscripten_math_round,emscripten_math_sign:_emscripten_math_sign,emscripten_math_sin:_emscripten_math_sin,emscripten_math_sinh:_emscripten_math_sinh,emscripten_math_sqrt:_emscripten_math_sqrt,emscripten_math_tan:_emscripten_math_tan,emscripten_math_tanh:_emscripten_math_tanh,emscripten_notify_memory_growth:_emscripten_notify_memory_growth,emscripten_out:_emscripten_out,emscripten_outn:_emscripten_outn,emscripten_pause_main_loop:_emscripten_pause_main_loop,emscripten_pc_get_column:_emscripten_pc_get_column,emscripten_pc_get_file:_emscripten_pc_get_file,emscripten_pc_get_function:_emscripten_pc_get_function,emscripten_pc_get_line:_emscripten_pc_get_line,emscripten_performance_now:_emscripten_performance_now,emscripten_print_double:_emscripten_print_double,emscripten_promise_all:_emscripten_promise_all,emscripten_promise_all_settled:_emscripten_promise_all_settled,emscripten_promise_any:_emscripten_promise_any,emscripten_promise_await:_emscripten_promise_await,emscripten_promise_create:_emscripten_promise_create,emscripten_promise_destroy:_emscripten_promise_destroy,emscripten_promise_race:_emscripten_promise_race,emscripten_promise_resolve:_emscripten_promise_resolve,emscripten_promise_then:_emscripten_promise_then,emscripten_random:_emscripten_random,emscripten_request_animation_frame:_emscripten_request_animation_frame,emscripten_request_animation_frame_loop:_emscripten_request_animation_frame_loop,emscripten_request_fullscreen:_emscripten_request_fullscreen,emscripten_request_fullscreen_strategy:_emscripten_request_fullscreen_strategy,emscripten_request_pointerlock:_emscripten_request_pointerlock,emscripten_resize_heap:_emscripten_resize_heap,emscripten_resume_main_loop:_emscripten_resume_main_loop,emscripten_return_address:_emscripten_return_address,emscripten_run_preload_plugins:_emscripten_run_preload_plugins,emscripten_run_preload_plugins_data:_emscripten_run_preload_plugins_data,emscripten_run_script:_emscripten_run_script,emscripten_run_script_int:_emscripten_run_script_int,emscripten_run_script_string:_emscripten_run_script_string,emscripten_runtime_keepalive_check:_emscripten_runtime_keepalive_check,emscripten_runtime_keepalive_pop:_emscripten_runtime_keepalive_pop,emscripten_runtime_keepalive_push:_emscripten_runtime_keepalive_push,emscripten_sample_gamepad_data:_emscripten_sample_gamepad_data,emscripten_set_batterychargingchange_callback_on_thread:_emscripten_set_batterychargingchange_callback_on_thread,emscripten_set_batterylevelchange_callback_on_thread:_emscripten_set_batterylevelchange_callback_on_thread,emscripten_set_beforeunload_callback_on_thread:_emscripten_set_beforeunload_callback_on_thread,emscripten_set_blur_callback_on_thread:_emscripten_set_blur_callback_on_thread,emscripten_set_canvas_element_size:_emscripten_set_canvas_element_size,emscripten_set_canvas_size:_emscripten_set_canvas_size,emscripten_set_click_callback_on_thread:_emscripten_set_click_callback_on_thread,emscripten_set_dblclick_callback_on_thread:_emscripten_set_dblclick_callback_on_thread,emscripten_set_devicemotion_callback_on_thread:_emscripten_set_devicemotion_callback_on_thread,emscripten_set_deviceorientation_callback_on_thread:_emscripten_set_deviceorientation_callback_on_thread,emscripten_set_element_css_size:_emscripten_set_element_css_size,emscripten_set_focus_callback_on_thread:_emscripten_set_focus_callback_on_thread,emscripten_set_focusin_callback_on_thread:_emscripten_set_focusin_callback_on_thread,emscripten_set_focusout_callback_on_thread:_emscripten_set_focusout_callback_on_thread,emscripten_set_fullscreenchange_callback_on_thread:_emscripten_set_fullscreenchange_callback_on_thread,emscripten_set_gamepadconnected_callback_on_thread:_emscripten_set_gamepadconnected_callback_on_thread,emscripten_set_gamepaddisconnected_callback_on_thread:_emscripten_set_gamepaddisconnected_callback_on_thread,emscripten_set_immediate:_emscripten_set_immediate,emscripten_set_immediate_loop:_emscripten_set_immediate_loop,emscripten_set_interval:_emscripten_set_interval,emscripten_set_keydown_callback_on_thread:_emscripten_set_keydown_callback_on_thread,emscripten_set_keypress_callback_on_thread:_emscripten_set_keypress_callback_on_thread,emscripten_set_keyup_callback_on_thread:_emscripten_set_keyup_callback_on_thread,emscripten_set_main_loop:_emscripten_set_main_loop,emscripten_set_main_loop_arg:_emscripten_set_main_loop_arg,emscripten_set_main_loop_expected_blockers:_emscripten_set_main_loop_expected_blockers,emscripten_set_main_loop_timing:_emscripten_set_main_loop_timing,emscripten_set_mousedown_callback_on_thread:_emscripten_set_mousedown_callback_on_thread,emscripten_set_mouseenter_callback_on_thread:_emscripten_set_mouseenter_callback_on_thread,emscripten_set_mouseleave_callback_on_thread:_emscripten_set_mouseleave_callback_on_thread,emscripten_set_mousemove_callback_on_thread:_emscripten_set_mousemove_callback_on_thread,emscripten_set_mouseout_callback_on_thread:_emscripten_set_mouseout_callback_on_thread,emscripten_set_mouseover_callback_on_thread:_emscripten_set_mouseover_callback_on_thread,emscripten_set_mouseup_callback_on_thread:_emscripten_set_mouseup_callback_on_thread,emscripten_set_orientationchange_callback_on_thread:_emscripten_set_orientationchange_callback_on_thread,emscripten_set_pointerlockchange_callback_on_thread:_emscripten_set_pointerlockchange_callback_on_thread,emscripten_set_pointerlockerror_callback_on_thread:_emscripten_set_pointerlockerror_callback_on_thread,emscripten_set_resize_callback_on_thread:_emscripten_set_resize_callback_on_thread,emscripten_set_scroll_callback_on_thread:_emscripten_set_scroll_callback_on_thread,emscripten_set_socket_close_callback:_emscripten_set_socket_close_callback,emscripten_set_socket_connection_callback:_emscripten_set_socket_connection_callback,emscripten_set_socket_error_callback:_emscripten_set_socket_error_callback,emscripten_set_socket_listen_callback:_emscripten_set_socket_listen_callback,emscripten_set_socket_message_callback:_emscripten_set_socket_message_callback,emscripten_set_socket_open_callback:_emscripten_set_socket_open_callback,emscripten_set_timeout:_emscripten_set_timeout,emscripten_set_timeout_loop:_emscripten_set_timeout_loop,emscripten_set_touchcancel_callback_on_thread:_emscripten_set_touchcancel_callback_on_thread,emscripten_set_touchend_callback_on_thread:_emscripten_set_touchend_callback_on_thread,emscripten_set_touchmove_callback_on_thread:_emscripten_set_touchmove_callback_on_thread,emscripten_set_touchstart_callback_on_thread:_emscripten_set_touchstart_callback_on_thread,emscripten_set_visibilitychange_callback_on_thread:_emscripten_set_visibilitychange_callback_on_thread,emscripten_set_webglcontextlost_callback_on_thread:_emscripten_set_webglcontextlost_callback_on_thread,emscripten_set_webglcontextrestored_callback_on_thread:_emscripten_set_webglcontextrestored_callback_on_thread,emscripten_set_wheel_callback_on_thread:_emscripten_set_wheel_callback_on_thread,emscripten_set_window_title:_emscripten_set_window_title,emscripten_stack_snapshot:_emscripten_stack_snapshot,emscripten_stack_unwind_buffer:_emscripten_stack_unwind_buffer,emscripten_supports_offscreencanvas:_emscripten_supports_offscreencanvas,emscripten_throw_number:_emscripten_throw_number,emscripten_throw_string:_emscripten_throw_string,emscripten_unlock_orientation:_emscripten_unlock_orientation,emscripten_unwind_to_js_event_loop:_emscripten_unwind_to_js_event_loop,emscripten_vibrate:_emscripten_vibrate,emscripten_vibrate_pattern:_emscripten_vibrate_pattern,emscripten_webgl_commit_frame:_emscripten_webgl_commit_frame,emscripten_webgl_create_context:_emscripten_webgl_create_context,emscripten_webgl_destroy_context:_emscripten_webgl_destroy_context,emscripten_webgl_do_commit_frame:_emscripten_webgl_do_commit_frame,emscripten_webgl_do_create_context:_emscripten_webgl_do_create_context,emscripten_webgl_do_get_current_context:_emscripten_webgl_do_get_current_context,emscripten_webgl_enable_ANGLE_instanced_arrays:_emscripten_webgl_enable_ANGLE_instanced_arrays,emscripten_webgl_enable_EXT_clip_control:_emscripten_webgl_enable_EXT_clip_control,emscripten_webgl_enable_EXT_polygon_offset_clamp:_emscripten_webgl_enable_EXT_polygon_offset_clamp,emscripten_webgl_enable_OES_vertex_array_object:_emscripten_webgl_enable_OES_vertex_array_object,emscripten_webgl_enable_WEBGL_draw_buffers:_emscripten_webgl_enable_WEBGL_draw_buffers,emscripten_webgl_enable_WEBGL_draw_instanced_base_vertex_base_instance:_emscripten_webgl_enable_WEBGL_draw_instanced_base_vertex_base_instance,emscripten_webgl_enable_WEBGL_multi_draw:_emscripten_webgl_enable_WEBGL_multi_draw,emscripten_webgl_enable_WEBGL_multi_draw_instanced_base_vertex_base_instance:_emscripten_webgl_enable_WEBGL_multi_draw_instanced_base_vertex_base_instance,emscripten_webgl_enable_WEBGL_polygon_mode:_emscripten_webgl_enable_WEBGL_polygon_mode,emscripten_webgl_enable_extension:_emscripten_webgl_enable_extension,emscripten_webgl_get_context_attributes:_emscripten_webgl_get_context_attributes,emscripten_webgl_get_current_context:_emscripten_webgl_get_current_context,emscripten_webgl_get_drawing_buffer_size:_emscripten_webgl_get_drawing_buffer_size,emscripten_webgl_get_parameter_d:_emscripten_webgl_get_parameter_d,emscripten_webgl_get_parameter_i64v:_emscripten_webgl_get_parameter_i64v,emscripten_webgl_get_parameter_o:_emscripten_webgl_get_parameter_o,emscripten_webgl_get_parameter_utf8:_emscripten_webgl_get_parameter_utf8,emscripten_webgl_get_parameter_v:_emscripten_webgl_get_parameter_v,emscripten_webgl_get_program_info_log_utf8:_emscripten_webgl_get_program_info_log_utf8,emscripten_webgl_get_program_parameter_d:_emscripten_webgl_get_program_parameter_d,emscripten_webgl_get_shader_info_log_utf8:_emscripten_webgl_get_shader_info_log_utf8,emscripten_webgl_get_shader_parameter_d:_emscripten_webgl_get_shader_parameter_d,emscripten_webgl_get_shader_source_utf8:_emscripten_webgl_get_shader_source_utf8,emscripten_webgl_get_supported_extensions:_emscripten_webgl_get_supported_extensions,emscripten_webgl_get_uniform_d:_emscripten_webgl_get_uniform_d,emscripten_webgl_get_uniform_v:_emscripten_webgl_get_uniform_v,emscripten_webgl_get_vertex_attrib_d:_emscripten_webgl_get_vertex_attrib_d,emscripten_webgl_get_vertex_attrib_o:_emscripten_webgl_get_vertex_attrib_o,emscripten_webgl_get_vertex_attrib_v:_emscripten_webgl_get_vertex_attrib_v,emscripten_webgl_make_context_current:_emscripten_webgl_make_context_current,emscripten_websocket_close:_emscripten_websocket_close,emscripten_websocket_deinitialize:_emscripten_websocket_deinitialize,emscripten_websocket_delete:_emscripten_websocket_delete,emscripten_websocket_get_buffered_amount:_emscripten_websocket_get_buffered_amount,emscripten_websocket_get_extensions:_emscripten_websocket_get_extensions,emscripten_websocket_get_extensions_length:_emscripten_websocket_get_extensions_length,emscripten_websocket_get_protocol:_emscripten_websocket_get_protocol,emscripten_websocket_get_protocol_length:_emscripten_websocket_get_protocol_length,emscripten_websocket_get_ready_state:_emscripten_websocket_get_ready_state,emscripten_websocket_get_url:_emscripten_websocket_get_url,emscripten_websocket_get_url_length:_emscripten_websocket_get_url_length,emscripten_websocket_is_supported:_emscripten_websocket_is_supported,emscripten_websocket_new:_emscripten_websocket_new,emscripten_websocket_send_binary:_emscripten_websocket_send_binary,emscripten_websocket_send_utf8_text:_emscripten_websocket_send_utf8_text,emscripten_websocket_set_onclose_callback_on_thread:_emscripten_websocket_set_onclose_callback_on_thread,emscripten_websocket_set_onerror_callback_on_thread:_emscripten_websocket_set_onerror_callback_on_thread,emscripten_websocket_set_onmessage_callback_on_thread:_emscripten_websocket_set_onmessage_callback_on_thread,emscripten_websocket_set_onopen_callback_on_thread:_emscripten_websocket_set_onopen_callback_on_thread,endprotoent:_endprotoent,environ_get:_environ_get,environ_sizes_get:_environ_sizes_get,exit:_exit,fail_test,fd_close:_fd_close,fd_fdstat_get:_fd_fdstat_get,fd_pread:_fd_pread,fd_pwrite:_fd_pwrite,fd_read:_fd_read,fd_seek:_fd_seek,fd_sync:_fd_sync,fd_write:_fd_write,ffi_call_js,ffi_closure_alloc_js,ffi_closure_free_js,ffi_prep_closure_loc_js,filledEllipseColor:_filledEllipseColor,filledEllipseRGBA:_filledEllipseRGBA,gc_register_proxies,get_async_js_call_done_callback,get_length_helper,get_length_string,get_suspender,getaddrinfo:_getaddrinfo,getnameinfo:_getnameinfo,getprotobyname:_getprotobyname,getprotobynumber:_getprotobynumber,getprotoent:_getprotoent,glActiveTexture:_glActiveTexture,glAttachShader:_glAttachShader,glBegin:_glBegin,glBeginQuery:_glBeginQuery,glBeginQueryEXT:_glBeginQueryEXT,glBeginTransformFeedback:_glBeginTransformFeedback,glBindAttribLocation:_glBindAttribLocation,glBindBuffer:_glBindBuffer,glBindBufferBase:_glBindBufferBase,glBindBufferRange:_glBindBufferRange,glBindFramebuffer:_glBindFramebuffer,glBindRenderbuffer:_glBindRenderbuffer,glBindSampler:_glBindSampler,glBindTexture:_glBindTexture,glBindTransformFeedback:_glBindTransformFeedback,glBindVertexArray:_glBindVertexArray,glBindVertexArrayOES:_glBindVertexArrayOES,glBlendColor:_glBlendColor,glBlendEquation:_glBlendEquation,glBlendEquationSeparate:_glBlendEquationSeparate,glBlendFunc:_glBlendFunc,glBlendFuncSeparate:_glBlendFuncSeparate,glBlitFramebuffer:_glBlitFramebuffer,glBufferData:_glBufferData,glBufferSubData:_glBufferSubData,glCheckFramebufferStatus:_glCheckFramebufferStatus,glClear:_glClear,glClearBufferfi:_glClearBufferfi,glClearBufferfv:_glClearBufferfv,glClearBufferiv:_glClearBufferiv,glClearBufferuiv:_glClearBufferuiv,glClearColor:_glClearColor,glClearDepth:_glClearDepth,glClearDepthf:_glClearDepthf,glClearStencil:_glClearStencil,glClientWaitSync:_glClientWaitSync,glClipControlEXT:_glClipControlEXT,glColorMask:_glColorMask,glCompileShader:_glCompileShader,glCompressedTexImage2D:_glCompressedTexImage2D,glCompressedTexImage3D:_glCompressedTexImage3D,glCompressedTexSubImage2D:_glCompressedTexSubImage2D,glCompressedTexSubImage3D:_glCompressedTexSubImage3D,glCopyBufferSubData:_glCopyBufferSubData,glCopyTexImage2D:_glCopyTexImage2D,glCopyTexSubImage2D:_glCopyTexSubImage2D,glCopyTexSubImage3D:_glCopyTexSubImage3D,glCreateProgram:_glCreateProgram,glCreateShader:_glCreateShader,glCullFace:_glCullFace,glDeleteBuffers:_glDeleteBuffers,glDeleteFramebuffers:_glDeleteFramebuffers,glDeleteProgram:_glDeleteProgram,glDeleteQueries:_glDeleteQueries,glDeleteQueriesEXT:_glDeleteQueriesEXT,glDeleteRenderbuffers:_glDeleteRenderbuffers,glDeleteSamplers:_glDeleteSamplers,glDeleteShader:_glDeleteShader,glDeleteSync:_glDeleteSync,glDeleteTextures:_glDeleteTextures,glDeleteTransformFeedbacks:_glDeleteTransformFeedbacks,glDeleteVertexArrays:_glDeleteVertexArrays,glDeleteVertexArraysOES:_glDeleteVertexArraysOES,glDepthFunc:_glDepthFunc,glDepthMask:_glDepthMask,glDepthRange:_glDepthRange,glDepthRangef:_glDepthRangef,glDetachShader:_glDetachShader,glDisable:_glDisable,glDisableVertexAttribArray:_glDisableVertexAttribArray,glDrawArrays:_glDrawArrays,glDrawArraysInstanced:_glDrawArraysInstanced,glDrawArraysInstancedANGLE:_glDrawArraysInstancedANGLE,glDrawArraysInstancedARB:_glDrawArraysInstancedARB,glDrawArraysInstancedBaseInstance:_glDrawArraysInstancedBaseInstance,glDrawArraysInstancedBaseInstanceANGLE:_glDrawArraysInstancedBaseInstanceANGLE,glDrawArraysInstancedBaseInstanceWEBGL:_glDrawArraysInstancedBaseInstanceWEBGL,glDrawArraysInstancedEXT:_glDrawArraysInstancedEXT,glDrawArraysInstancedNV:_glDrawArraysInstancedNV,glDrawBuffers:_glDrawBuffers,glDrawBuffersEXT:_glDrawBuffersEXT,glDrawBuffersWEBGL:_glDrawBuffersWEBGL,glDrawElements:_glDrawElements,glDrawElementsInstanced:_glDrawElementsInstanced,glDrawElementsInstancedANGLE:_glDrawElementsInstancedANGLE,glDrawElementsInstancedARB:_glDrawElementsInstancedARB,glDrawElementsInstancedBaseVertexBaseInstanceANGLE:_glDrawElementsInstancedBaseVertexBaseInstanceANGLE,glDrawElementsInstancedBaseVertexBaseInstanceWEBGL:_glDrawElementsInstancedBaseVertexBaseInstanceWEBGL,glDrawElementsInstancedEXT:_glDrawElementsInstancedEXT,glDrawElementsInstancedNV:_glDrawElementsInstancedNV,glDrawRangeElements:_glDrawRangeElements,glEnable:_glEnable,glEnableVertexAttribArray:_glEnableVertexAttribArray,glEndQuery:_glEndQuery,glEndQueryEXT:_glEndQueryEXT,glEndTransformFeedback:_glEndTransformFeedback,glFenceSync:_glFenceSync,glFinish:_glFinish,glFlush:_glFlush,glFramebufferRenderbuffer:_glFramebufferRenderbuffer,glFramebufferTexture2D:_glFramebufferTexture2D,glFramebufferTextureLayer:_glFramebufferTextureLayer,glFrontFace:_glFrontFace,glGenBuffers:_glGenBuffers,glGenFramebuffers:_glGenFramebuffers,glGenQueries:_glGenQueries,glGenQueriesEXT:_glGenQueriesEXT,glGenRenderbuffers:_glGenRenderbuffers,glGenSamplers:_glGenSamplers,glGenTextures:_glGenTextures,glGenTransformFeedbacks:_glGenTransformFeedbacks,glGenVertexArrays:_glGenVertexArrays,glGenVertexArraysOES:_glGenVertexArraysOES,glGenerateMipmap:_glGenerateMipmap,glGetActiveAttrib:_glGetActiveAttrib,glGetActiveUniform:_glGetActiveUniform,glGetActiveUniformBlockName:_glGetActiveUniformBlockName,glGetActiveUniformBlockiv:_glGetActiveUniformBlockiv,glGetActiveUniformsiv:_glGetActiveUniformsiv,glGetAttachedShaders:_glGetAttachedShaders,glGetAttribLocation:_glGetAttribLocation,glGetBooleanv:_glGetBooleanv,glGetBufferParameteri64v:_glGetBufferParameteri64v,glGetBufferParameteriv:_glGetBufferParameteriv,glGetBufferSubData:_glGetBufferSubData,glGetError:_glGetError,glGetFloatv:_glGetFloatv,glGetFragDataLocation:_glGetFragDataLocation,glGetFramebufferAttachmentParameteriv:_glGetFramebufferAttachmentParameteriv,glGetInteger64i_v:_glGetInteger64i_v,glGetInteger64v:_glGetInteger64v,glGetIntegeri_v:_glGetIntegeri_v,glGetIntegerv:_glGetIntegerv,glGetInternalformativ:_glGetInternalformativ,glGetProgramBinary:_glGetProgramBinary,glGetProgramInfoLog:_glGetProgramInfoLog,glGetProgramiv:_glGetProgramiv,glGetQueryObjecti64vEXT:_glGetQueryObjecti64vEXT,glGetQueryObjectivEXT:_glGetQueryObjectivEXT,glGetQueryObjectui64vEXT:_glGetQueryObjectui64vEXT,glGetQueryObjectuiv:_glGetQueryObjectuiv,glGetQueryObjectuivEXT:_glGetQueryObjectuivEXT,glGetQueryiv:_glGetQueryiv,glGetQueryivEXT:_glGetQueryivEXT,glGetRenderbufferParameteriv:_glGetRenderbufferParameteriv,glGetSamplerParameterfv:_glGetSamplerParameterfv,glGetSamplerParameteriv:_glGetSamplerParameteriv,glGetShaderInfoLog:_glGetShaderInfoLog,glGetShaderPrecisionFormat:_glGetShaderPrecisionFormat,glGetShaderSource:_glGetShaderSource,glGetShaderiv:_glGetShaderiv,glGetString:_glGetString,glGetStringi:_glGetStringi,glGetSynciv:_glGetSynciv,glGetTexParameterfv:_glGetTexParameterfv,glGetTexParameteriv:_glGetTexParameteriv,glGetTransformFeedbackVarying:_glGetTransformFeedbackVarying,glGetUniformBlockIndex:_glGetUniformBlockIndex,glGetUniformIndices:_glGetUniformIndices,glGetUniformLocation:_glGetUniformLocation,glGetUniformfv:_glGetUniformfv,glGetUniformiv:_glGetUniformiv,glGetUniformuiv:_glGetUniformuiv,glGetVertexAttribIiv:_glGetVertexAttribIiv,glGetVertexAttribIuiv:_glGetVertexAttribIuiv,glGetVertexAttribPointerv:_glGetVertexAttribPointerv,glGetVertexAttribfv:_glGetVertexAttribfv,glGetVertexAttribiv:_glGetVertexAttribiv,glHint:_glHint,glInvalidateFramebuffer:_glInvalidateFramebuffer,glInvalidateSubFramebuffer:_glInvalidateSubFramebuffer,glIsBuffer:_glIsBuffer,glIsEnabled:_glIsEnabled,glIsFramebuffer:_glIsFramebuffer,glIsProgram:_glIsProgram,glIsQuery:_glIsQuery,glIsQueryEXT:_glIsQueryEXT,glIsRenderbuffer:_glIsRenderbuffer,glIsSampler:_glIsSampler,glIsShader:_glIsShader,glIsSync:_glIsSync,glIsTexture:_glIsTexture,glIsTransformFeedback:_glIsTransformFeedback,glIsVertexArray:_glIsVertexArray,glIsVertexArrayOES:_glIsVertexArrayOES,glLineWidth:_glLineWidth,glLinkProgram:_glLinkProgram,glLoadIdentity:_glLoadIdentity,glMatrixMode:_glMatrixMode,glMultiDrawArrays:_glMultiDrawArrays,glMultiDrawArraysANGLE:_glMultiDrawArraysANGLE,glMultiDrawArraysInstancedANGLE:_glMultiDrawArraysInstancedANGLE,glMultiDrawArraysInstancedBaseInstanceANGLE:_glMultiDrawArraysInstancedBaseInstanceANGLE,glMultiDrawArraysInstancedBaseInstanceWEBGL:_glMultiDrawArraysInstancedBaseInstanceWEBGL,glMultiDrawArraysInstancedWEBGL:_glMultiDrawArraysInstancedWEBGL,glMultiDrawArraysWEBGL:_glMultiDrawArraysWEBGL,glMultiDrawElements:_glMultiDrawElements,glMultiDrawElementsANGLE:_glMultiDrawElementsANGLE,glMultiDrawElementsInstancedANGLE:_glMultiDrawElementsInstancedANGLE,glMultiDrawElementsInstancedBaseVertexBaseInstanceANGLE:_glMultiDrawElementsInstancedBaseVertexBaseInstanceANGLE,glMultiDrawElementsInstancedBaseVertexBaseInstanceWEBGL:_glMultiDrawElementsInstancedBaseVertexBaseInstanceWEBGL,glMultiDrawElementsInstancedWEBGL:_glMultiDrawElementsInstancedWEBGL,glMultiDrawElementsWEBGL:_glMultiDrawElementsWEBGL,glPauseTransformFeedback:_glPauseTransformFeedback,glPixelStorei:_glPixelStorei,glPolygonModeWEBGL:_glPolygonModeWEBGL,glPolygonOffset:_glPolygonOffset,glPolygonOffsetClampEXT:_glPolygonOffsetClampEXT,glProgramBinary:_glProgramBinary,glProgramParameteri:_glProgramParameteri,glQueryCounterEXT:_glQueryCounterEXT,glReadBuffer:_glReadBuffer,glReadPixels:_glReadPixels,glReleaseShaderCompiler:_glReleaseShaderCompiler,glRenderbufferStorage:_glRenderbufferStorage,glRenderbufferStorageMultisample:_glRenderbufferStorageMultisample,glResumeTransformFeedback:_glResumeTransformFeedback,glSampleCoverage:_glSampleCoverage,glSamplerParameterf:_glSamplerParameterf,glSamplerParameterfv:_glSamplerParameterfv,glSamplerParameteri:_glSamplerParameteri,glSamplerParameteriv:_glSamplerParameteriv,glScissor:_glScissor,glShaderBinary:_glShaderBinary,glShaderSource:_glShaderSource,glStencilFunc:_glStencilFunc,glStencilFuncSeparate:_glStencilFuncSeparate,glStencilMask:_glStencilMask,glStencilMaskSeparate:_glStencilMaskSeparate,glStencilOp:_glStencilOp,glStencilOpSeparate:_glStencilOpSeparate,glTexImage2D:_glTexImage2D,glTexImage3D:_glTexImage3D,glTexParameterf:_glTexParameterf,glTexParameterfv:_glTexParameterfv,glTexParameteri:_glTexParameteri,glTexParameteriv:_glTexParameteriv,glTexStorage2D:_glTexStorage2D,glTexStorage3D:_glTexStorage3D,glTexSubImage2D:_glTexSubImage2D,glTexSubImage3D:_glTexSubImage3D,glTransformFeedbackVaryings:_glTransformFeedbackVaryings,glUniform1f:_glUniform1f,glUniform1fv:_glUniform1fv,glUniform1i:_glUniform1i,glUniform1iv:_glUniform1iv,glUniform1ui:_glUniform1ui,glUniform1uiv:_glUniform1uiv,glUniform2f:_glUniform2f,glUniform2fv:_glUniform2fv,glUniform2i:_glUniform2i,glUniform2iv:_glUniform2iv,glUniform2ui:_glUniform2ui,glUniform2uiv:_glUniform2uiv,glUniform3f:_glUniform3f,glUniform3fv:_glUniform3fv,glUniform3i:_glUniform3i,glUniform3iv:_glUniform3iv,glUniform3ui:_glUniform3ui,glUniform3uiv:_glUniform3uiv,glUniform4f:_glUniform4f,glUniform4fv:_glUniform4fv,glUniform4i:_glUniform4i,glUniform4iv:_glUniform4iv,glUniform4ui:_glUniform4ui,glUniform4uiv:_glUniform4uiv,glUniformBlockBinding:_glUniformBlockBinding,glUniformMatrix2fv:_glUniformMatrix2fv,glUniformMatrix2x3fv:_glUniformMatrix2x3fv,glUniformMatrix2x4fv:_glUniformMatrix2x4fv,glUniformMatrix3fv:_glUniformMatrix3fv,glUniformMatrix3x2fv:_glUniformMatrix3x2fv,glUniformMatrix3x4fv:_glUniformMatrix3x4fv,glUniformMatrix4fv:_glUniformMatrix4fv,glUniformMatrix4x2fv:_glUniformMatrix4x2fv,glUniformMatrix4x3fv:_glUniformMatrix4x3fv,glUseProgram:_glUseProgram,glValidateProgram:_glValidateProgram,glVertexAttrib1f:_glVertexAttrib1f,glVertexAttrib1fv:_glVertexAttrib1fv,glVertexAttrib2f:_glVertexAttrib2f,glVertexAttrib2fv:_glVertexAttrib2fv,glVertexAttrib3f:_glVertexAttrib3f,glVertexAttrib3fv:_glVertexAttrib3fv,glVertexAttrib4f:_glVertexAttrib4f,glVertexAttrib4fv:_glVertexAttrib4fv,glVertexAttribDivisor:_glVertexAttribDivisor,glVertexAttribDivisorANGLE:_glVertexAttribDivisorANGLE,glVertexAttribDivisorARB:_glVertexAttribDivisorARB,glVertexAttribDivisorEXT:_glVertexAttribDivisorEXT,glVertexAttribDivisorNV:_glVertexAttribDivisorNV,glVertexAttribI4i:_glVertexAttribI4i,glVertexAttribI4iv:_glVertexAttribI4iv,glVertexAttribI4ui:_glVertexAttribI4ui,glVertexAttribI4uiv:_glVertexAttribI4uiv,glVertexAttribIPointer:_glVertexAttribIPointer,glVertexAttribPointer:_glVertexAttribPointer,glVertexPointer:_glVertexPointer,glViewport:_glViewport,glWaitSync:_glWaitSync,handle_next_result_js,hiwire_invalid_ref_js,is_comlink_proxy,is_sentinel:_is_sentinel,js2python_convert,js2python_immutable_js,js2python_js,jslib_init_buffers_js,jslib_init_js,lineColor:_lineColor,lineRGBA:_lineRGBA,memory:wasmMemory,my_dict_converter,new_error,pixelRGBA:_pixelRGBA,proc_exit:_proc_exit,proxy_cache_get,proxy_cache_set,pyodide_js_init,pyproxy_AsPyObject,pyproxy_Check,pyproxy_new,pyproxy_new_ex,python2js__default_converter_js,python2js__eager_converter_js,python2js_custom__create_jscontext,random_get:_random_get,raw_call_js,rectangleColor:_rectangleColor,rectangleRGBA:_rectangleRGBA,restoreState,restore_stderr,rotozoomSurface:_rotozoomSurface,saveState,setNetworkCallback:_setNetworkCallback,set_pyodide_module,set_suspender,setprotoent:_setprotoent,stackAlloc:_stackAlloc,stackRestore:_stackRestore,stackSave:_stackSave,strptime:_strptime,strptime_l:_strptime_l,syncifyHandler,throw_no_gil,wrap_async_generator,wrap_generator,zoomSurface:_zoomSurface};var wasmExports=await createWasm();var ___wasm_call_ctors=wasmExports["__wasm_call_ctors"];var _set_method_docstring=Module["_set_method_docstring"]=wasmExports["set_method_docstring"];var _PyObject_GetAttrString=Module["_PyObject_GetAttrString"]=wasmExports["PyObject_GetAttrString"];var __PyUnicode_FromId=Module["__PyUnicode_FromId"]=wasmExports["_PyUnicode_FromId"];var _PyObject_VectorcallMethod=Module["_PyObject_VectorcallMethod"]=wasmExports["PyObject_VectorcallMethod"];var _PyUnicode_AsUTF8AndSize=Module["_PyUnicode_AsUTF8AndSize"]=wasmExports["PyUnicode_AsUTF8AndSize"];var _malloc=wasmExports["malloc"];var __Py_Dealloc=Module["__Py_Dealloc"]=wasmExports["_Py_Dealloc"];var _PyErr_Format=Module["_PyErr_Format"]=wasmExports["PyErr_Format"];var _add_methods_and_set_docstrings=Module["_add_methods_and_set_docstrings"]=wasmExports["add_methods_and_set_docstrings"];var _PyModule_AddFunctions=Module["_PyModule_AddFunctions"]=wasmExports["PyModule_AddFunctions"];var _docstring_init=Module["_docstring_init"]=wasmExports["docstring_init"];var _PyImport_ImportModule=Module["_PyImport_ImportModule"]=wasmExports["PyImport_ImportModule"];var _dump_traceback=Module["_dump_traceback"]=wasmExports["dump_traceback"];var _fileno=wasmExports["fileno"];var _PyGILState_GetThisThreadState=Module["_PyGILState_GetThisThreadState"]=wasmExports["PyGILState_GetThisThreadState"];var _set_error=Module["_set_error"]=wasmExports["set_error"];var _PyErr_SetObject=Module["_PyErr_SetObject"]=wasmExports["PyErr_SetObject"];var _restore_sys_last_exception=Module["_restore_sys_last_exception"]=wasmExports["restore_sys_last_exception"];var _PySys_GetObject=Module["_PySys_GetObject"]=wasmExports["PySys_GetObject"];var _PyErr_SetRaisedException=Module["_PyErr_SetRaisedException"]=wasmExports["PyErr_SetRaisedException"];var _wrap_exception=Module["_wrap_exception"]=wasmExports["wrap_exception"];var _PyErr_GetRaisedException=Module["_PyErr_GetRaisedException"]=wasmExports["PyErr_GetRaisedException"];var _PyErr_GivenExceptionMatches=Module["_PyErr_GivenExceptionMatches"]=wasmExports["PyErr_GivenExceptionMatches"];var _PyErr_Print=Module["_PyErr_Print"]=wasmExports["PyErr_Print"];var __PyObject_GetAttrId=Module["__PyObject_GetAttrId"]=wasmExports["_PyObject_GetAttrId"];var _PyUnicode_AsUTF8=Module["_PyUnicode_AsUTF8"]=wasmExports["PyUnicode_AsUTF8"];var _PySys_WriteStderr=Module["_PySys_WriteStderr"]=wasmExports["PySys_WriteStderr"];var _PyErr_DisplayException=Module["_PyErr_DisplayException"]=wasmExports["PyErr_DisplayException"];var _JsvString_FromId=Module["_JsvString_FromId"]=wasmExports["JsvString_FromId"];var _pythonexc2js=Module["_pythonexc2js"]=wasmExports["pythonexc2js"];var _trigger_fatal_error=Module["_trigger_fatal_error"]=wasmExports["trigger_fatal_error"];var _raw_call=Module["_raw_call"]=wasmExports["raw_call"];var _JsProxy_Val=Module["_JsProxy_Val"]=wasmExports["JsProxy_Val"];var _error_handling_init=Module["_error_handling_init"]=wasmExports["error_handling_init"];var _hiwire_invalid_ref=Module["_hiwire_invalid_ref"]=wasmExports["hiwire_invalid_ref"];var _init_pyodide_proxy=Module["_init_pyodide_proxy"]=wasmExports["init_pyodide_proxy"];var _python2js=Module["_python2js"]=wasmExports["python2js"];var _PyInit__pyodide_core=Module["_PyInit__pyodide_core"]=wasmExports["PyInit__pyodide_core"];var _PyErr_Occurred=Module["_PyErr_Occurred"]=wasmExports["PyErr_Occurred"];var __PyErr_FormatFromCause=Module["__PyErr_FormatFromCause"]=wasmExports["_PyErr_FormatFromCause"];var _PyModule_Create2=Module["_PyModule_Create2"]=wasmExports["PyModule_Create2"];var _PyImport_GetModuleDict=Module["_PyImport_GetModuleDict"]=wasmExports["PyImport_GetModuleDict"];var _PyDict_SetItemString=Module["_PyDict_SetItemString"]=wasmExports["PyDict_SetItemString"];var _jslib_init=Module["_jslib_init"]=wasmExports["jslib_init"];var _python2js_init=Module["_python2js_init"]=wasmExports["python2js_init"];var _jsproxy_init=Module["_jsproxy_init"]=wasmExports["jsproxy_init"];var _jsproxy_call_init=Module["_jsproxy_call_init"]=wasmExports["jsproxy_call_init"];var _pyproxy_init=Module["_pyproxy_init"]=wasmExports["pyproxy_init"];var _jsbind_init=Module["_jsbind_init"]=wasmExports["jsbind_init"];var _pyodide_export=Module["_pyodide_export"]=wasmExports["pyodide_export"];var _PyUnicode_Data=Module["_PyUnicode_Data"]=wasmExports["PyUnicode_Data"];var __js2python_none=Module["__js2python_none"]=wasmExports["_js2python_none"];var __js2python_null=Module["__js2python_null"]=wasmExports["_js2python_null"];var __js2python_true=Module["__js2python_true"]=wasmExports["_js2python_true"];var __js2python_false=Module["__js2python_false"]=wasmExports["_js2python_false"];var __js2python_pyproxy=Module["__js2python_pyproxy"]=wasmExports["_js2python_pyproxy"];var _js2python_immutable=Module["_js2python_immutable"]=wasmExports["js2python_immutable"];var _js2python=Module["_js2python"]=wasmExports["js2python"];var _JsProxy_getflags=Module["_JsProxy_getflags"]=wasmExports["JsProxy_getflags"];var _PyLong_AsLong=Module["_PyLong_AsLong"]=wasmExports["PyLong_AsLong"];var _JsProxy_is_py_json=Module["_JsProxy_is_py_json"]=wasmExports["JsProxy_is_py_json"];var _js2python_as_py_json=Module["_js2python_as_py_json"]=wasmExports["js2python_as_py_json"];var _hiwire_get=Module["_hiwire_get"]=wasmExports["hiwire_get"];var _JsProxy_create_with_type=Module["_JsProxy_create_with_type"]=wasmExports["JsProxy_create_with_type"];var _JsProxy_bind_sig=Module["_JsProxy_bind_sig"]=wasmExports["JsProxy_bind_sig"];var _JsRef_toVal=Module["_JsRef_toVal"]=wasmExports["JsRef_toVal"];var _PyErr_SetString=Module["_PyErr_SetString"]=wasmExports["PyErr_SetString"];var _JsProxy_create_with_this=Module["_JsProxy_create_with_this"]=wasmExports["JsProxy_create_with_this"];var _JsProxy_bind_class=Module["_JsProxy_bind_class"]=wasmExports["JsProxy_bind_class"];var _clear_method_call_singleton=Module["_clear_method_call_singleton"]=wasmExports["clear_method_call_singleton"];var _hiwire_decref=Module["_hiwire_decref"]=wasmExports["hiwire_decref"];var _JsProxy_GetMethod=Module["_JsProxy_GetMethod"]=wasmExports["JsProxy_GetMethod"];var __PyObject_GenericGetAttrWithDict=Module["__PyObject_GenericGetAttrWithDict"]=wasmExports["_PyObject_GenericGetAttrWithDict"];var _strcmp=Module["_strcmp"]=wasmExports["strcmp"];var _PyArg_ParseTuple=Module["_PyArg_ParseTuple"]=wasmExports["PyArg_ParseTuple"];var _Js2PyConverter_convert=Module["_Js2PyConverter_convert"]=wasmExports["Js2PyConverter_convert"];var _hiwire_new=Module["_hiwire_new"]=wasmExports["hiwire_new"];var _hiwire_incref=Module["_hiwire_incref"]=wasmExports["hiwire_incref"];var _JsProxy_GetAttr=Module["_JsProxy_GetAttr"]=wasmExports["JsProxy_GetAttr"];var _handle_next_result=Module["_handle_next_result"]=wasmExports["handle_next_result"];var _free=Module["_free"]=wasmExports["free"];var _JsProxy_create_objmap=Module["_JsProxy_create_objmap"]=wasmExports["JsProxy_create_objmap"];var _JsProxy_am_send=Module["_JsProxy_am_send"]=wasmExports["JsProxy_am_send"];var _python2js_track_proxies=Module["_python2js_track_proxies"]=wasmExports["python2js_track_proxies"];var _JsvObject_CallMethodId_OneArg=Module["_JsvObject_CallMethodId_OneArg"]=wasmExports["JsvObject_CallMethodId_OneArg"];var _JsProxy_IterNext=Module["_JsProxy_IterNext"]=wasmExports["JsProxy_IterNext"];var __PyGen_SetStopIterationValue=Module["__PyGen_SetStopIterationValue"]=wasmExports["_PyGen_SetStopIterationValue"];var _JsGenerator_send=Module["_JsGenerator_send"]=wasmExports["JsGenerator_send"];var _PyErr_SetNone=Module["_PyErr_SetNone"]=wasmExports["PyErr_SetNone"];var _JsException_js_error_getter=Module["_JsException_js_error_getter"]=wasmExports["JsException_js_error_getter"];var _process_throw_args=Module["_process_throw_args"]=wasmExports["process_throw_args"];var _PyErr_NormalizeException=Module["_PyErr_NormalizeException"]=wasmExports["PyErr_NormalizeException"];var _PyException_GetTraceback=Module["_PyException_GetTraceback"]=wasmExports["PyException_GetTraceback"];var _PyException_SetTraceback=Module["_PyException_SetTraceback"]=wasmExports["PyException_SetTraceback"];var _PyErr_Restore=Module["_PyErr_Restore"]=wasmExports["PyErr_Restore"];var _PyErr_ExceptionMatches=Module["_PyErr_ExceptionMatches"]=wasmExports["PyErr_ExceptionMatches"];var _PyErr_Clear=Module["_PyErr_Clear"]=wasmExports["PyErr_Clear"];var _JsvObject_CallMethodId_NoArgs=Module["_JsvObject_CallMethodId_NoArgs"]=wasmExports["JsvObject_CallMethodId_NoArgs"];var _PyErr_Fetch=Module["_PyErr_Fetch"]=wasmExports["PyErr_Fetch"];var __agen_handle_result_js_c=Module["__agen_handle_result_js_c"]=wasmExports["_agen_handle_result_js_c"];var _PyObject_CallOneArg=Module["_PyObject_CallOneArg"]=wasmExports["PyObject_CallOneArg"];var __agen_handle_result=Module["__agen_handle_result"]=wasmExports["_agen_handle_result"];var _JsArray_sq_item=Module["_JsArray_sq_item"]=wasmExports["JsArray_sq_item"];var _JsArray_sq_ass_item=Module["_JsArray_sq_ass_item"]=wasmExports["JsArray_sq_ass_item"];var _JsTypedArray_sq_ass_item=Module["_JsTypedArray_sq_ass_item"]=wasmExports["JsTypedArray_sq_ass_item"];var _JsMap_update=Module["_JsMap_update"]=wasmExports["JsMap_update"];var _wrap_promise=Module["_wrap_promise"]=wasmExports["wrap_promise"];var _PyTuple_GetItem=Module["_PyTuple_GetItem"]=wasmExports["PyTuple_GetItem"];var _JsvObject_CallMethodId=Module["_JsvObject_CallMethodId"]=wasmExports["JsvObject_CallMethodId"];var _JsModule_GetAll=Module["_JsModule_GetAll"]=wasmExports["JsModule_GetAll"];var _PyType_IsSubtype=Module["_PyType_IsSubtype"]=wasmExports["PyType_IsSubtype"];var _JsProxy_Check=Module["_JsProxy_Check"]=wasmExports["JsProxy_Check"];var _JsBuffer_CopyIntoMemoryView=Module["_JsBuffer_CopyIntoMemoryView"]=wasmExports["JsBuffer_CopyIntoMemoryView"];var _PyMem_Malloc=Module["_PyMem_Malloc"]=wasmExports["PyMem_Malloc"];var _PyMemoryView_FromObject=Module["_PyMemoryView_FromObject"]=wasmExports["PyMemoryView_FromObject"];var _JsBuffer_cinit=Module["_JsBuffer_cinit"]=wasmExports["JsBuffer_cinit"];var _hiwire_new_deduplicate=Module["_hiwire_new_deduplicate"]=wasmExports["hiwire_new_deduplicate"];var _JsRef_new=Module["_JsRef_new"]=wasmExports["JsRef_new"];var _PyTuple_Pack=Module["_PyTuple_Pack"]=wasmExports["PyTuple_Pack"];var _PyLong_FromLong=Module["_PyLong_FromLong"]=wasmExports["PyLong_FromLong"];var _PyDict_GetItemWithError=Module["_PyDict_GetItemWithError"]=wasmExports["PyDict_GetItemWithError"];var _PyObject_SelfIter=Module["_PyObject_SelfIter"]=wasmExports["PyObject_SelfIter"];var _PyVectorcall_Call=Module["_PyVectorcall_Call"]=wasmExports["PyVectorcall_Call"];var _PyErr_NoMemory=Module["_PyErr_NoMemory"]=wasmExports["PyErr_NoMemory"];var _PyType_FromSpecWithBases=Module["_PyType_FromSpecWithBases"]=wasmExports["PyType_FromSpecWithBases"];var _PyObject_SetAttr=Module["_PyObject_SetAttr"]=wasmExports["PyObject_SetAttr"];var _PyMem_Free=Module["_PyMem_Free"]=wasmExports["PyMem_Free"];var _PyDict_SetItem=Module["_PyDict_SetItem"]=wasmExports["PyDict_SetItem"];var _JsProxy_create=Module["_JsProxy_create"]=wasmExports["JsProxy_create"];var _JsProxy_init_docstrings=Module["_JsProxy_init_docstrings"]=wasmExports["JsProxy_init_docstrings"];var _run_sync_not_supported=Module["_run_sync_not_supported"]=wasmExports["run_sync_not_supported"];var _run_sync=Module["_run_sync"]=wasmExports["run_sync"];var _py_is_awaitable=Module["_py_is_awaitable"]=wasmExports["py_is_awaitable"];var _JsvPromise_Syncify=Module["_JsvPromise_Syncify"]=wasmExports["JsvPromise_Syncify"];var _can_run_sync=Module["_can_run_sync"]=wasmExports["can_run_sync"];var _PyDict_New=Module["_PyDict_New"]=wasmExports["PyDict_New"];var _PyObject_SetAttrString=Module["_PyObject_SetAttrString"]=wasmExports["PyObject_SetAttrString"];var _PyModule_AddObject=Module["_PyModule_AddObject"]=wasmExports["PyModule_AddObject"];var _PyType_Ready=Module["_PyType_Ready"]=wasmExports["PyType_Ready"];var _JsMethod_Vectorcall_impl=Module["_JsMethod_Vectorcall_impl"]=wasmExports["JsMethod_Vectorcall_impl"];var _JsvObject_CallMethodId_TwoArgs=Module["_JsvObject_CallMethodId_TwoArgs"]=wasmExports["JsvObject_CallMethodId_TwoArgs"];var _PyObject_Repr=Module["_PyObject_Repr"]=wasmExports["PyObject_Repr"];var _PyIndex_Check=Module["_PyIndex_Check"]=wasmExports["PyIndex_Check"];var _PyNumber_AsSsize_t=Module["_PyNumber_AsSsize_t"]=wasmExports["PyNumber_AsSsize_t"];var _PySlice_Unpack=Module["_PySlice_Unpack"]=wasmExports["PySlice_Unpack"];var _PySlice_AdjustIndices=Module["_PySlice_AdjustIndices"]=wasmExports["PySlice_AdjustIndices"];var _PySequence_Fast=Module["_PySequence_Fast"]=wasmExports["PySequence_Fast"];var _PyArg_ParseTupleAndKeywords=Module["_PyArg_ParseTupleAndKeywords"]=wasmExports["PyArg_ParseTupleAndKeywords"];var _PySet_New=Module["_PySet_New"]=wasmExports["PySet_New"];var __PySet_Update=Module["__PySet_Update"]=wasmExports["_PySet_Update"];var _PyUnicode_FromString=Module["_PyUnicode_FromString"]=wasmExports["PyUnicode_FromString"];var _PySet_Discard=Module["_PySet_Discard"]=wasmExports["PySet_Discard"];var _PyList_New=Module["_PyList_New"]=wasmExports["PyList_New"];var _PyList_Extend=Module["_PyList_Extend"]=wasmExports["PyList_Extend"];var _PyList_Sort=Module["_PyList_Sort"]=wasmExports["PyList_Sort"];var __PyArg_ParseStack=Module["__PyArg_ParseStack"]=wasmExports["_PyArg_ParseStack"];var _PyObject_GetIter=Module["_PyObject_GetIter"]=wasmExports["PyObject_GetIter"];var _PyObject_RichCompareBool=Module["_PyObject_RichCompareBool"]=wasmExports["PyObject_RichCompareBool"];var _PyErr_WarnEx=Module["_PyErr_WarnEx"]=wasmExports["PyErr_WarnEx"];var __PyArg_ParseStackAndKeywords=Module["__PyArg_ParseStackAndKeywords"]=wasmExports["_PyArg_ParseStackAndKeywords"];var _hiwire_pop=Module["_hiwire_pop"]=wasmExports["hiwire_pop"];var _puts=Module["_puts"]=wasmExports["puts"];var _PyObject_GenericSetAttr=Module["_PyObject_GenericSetAttr"]=wasmExports["PyObject_GenericSetAttr"];var __Py_HashBytes=Module["__Py_HashBytes"]=wasmExports["_Py_HashBytes"];var _JsMethod_Construct_impl=Module["_JsMethod_Construct_impl"]=wasmExports["JsMethod_Construct_impl"];var __PyArg_CheckPositional=Module["__PyArg_CheckPositional"]=wasmExports["_PyArg_CheckPositional"];var _PyNumber_Index=Module["_PyNumber_Index"]=wasmExports["PyNumber_Index"];var _PyLong_AsSsize_t=Module["_PyLong_AsSsize_t"]=wasmExports["PyLong_AsSsize_t"];var _PyLong_FromSsize_t=Module["_PyLong_FromSsize_t"]=wasmExports["PyLong_FromSsize_t"];var _PyObject_GetItem=Module["_PyObject_GetItem"]=wasmExports["PyObject_GetItem"];var _PyObject_DelItem=Module["_PyObject_DelItem"]=wasmExports["PyObject_DelItem"];var _PyObject_SetItem=Module["_PyObject_SetItem"]=wasmExports["PyObject_SetItem"];var _PyObject_GetBuffer=Module["_PyObject_GetBuffer"]=wasmExports["PyObject_GetBuffer"];var _PyBuffer_Release=Module["_PyBuffer_Release"]=wasmExports["PyBuffer_Release"];var _PyBytes_FromStringAndSize=Module["_PyBytes_FromStringAndSize"]=wasmExports["PyBytes_FromStringAndSize"];var _PyObject_Vectorcall=Module["_PyObject_Vectorcall"]=wasmExports["PyObject_Vectorcall"];var _Py_EnterRecursiveCall=Module["_Py_EnterRecursiveCall"]=wasmExports["Py_EnterRecursiveCall"];var _Py_LeaveRecursiveCall=Module["_Py_LeaveRecursiveCall"]=wasmExports["Py_LeaveRecursiveCall"];var _Py2JsConverter_convert=Module["_Py2JsConverter_convert"]=wasmExports["Py2JsConverter_convert"];var _PyUnicode_FromFormat=Module["_PyUnicode_FromFormat"]=wasmExports["PyUnicode_FromFormat"];var _PyType_GenericNew=Module["_PyType_GenericNew"]=wasmExports["PyType_GenericNew"];var _PyObject_IsInstance=Module["_PyObject_IsInstance"]=wasmExports["PyObject_IsInstance"];var _python2js_inner=Module["_python2js_inner"]=wasmExports["python2js_inner"];var _python2js_custom=Module["_python2js_custom"]=wasmExports["python2js_custom"];var _PyObject_GC_UnTrack=Module["_PyObject_GC_UnTrack"]=wasmExports["PyObject_GC_UnTrack"];var _check_gil=Module["_check_gil"]=wasmExports["check_gil"];var _PyGILState_Check=Module["_PyGILState_Check"]=wasmExports["PyGILState_Check"];var _PyGen_GetCode=Module["_PyGen_GetCode"]=wasmExports["PyGen_GetCode"];var _pyproxy_getflags=Module["_pyproxy_getflags"]=wasmExports["pyproxy_getflags"];var _PyObject_HasAttr=Module["_PyObject_HasAttr"]=wasmExports["PyObject_HasAttr"];var _PyObject_IsSubclass=Module["_PyObject_IsSubclass"]=wasmExports["PyObject_IsSubclass"];var __pyproxy_repr=Module["__pyproxy_repr"]=wasmExports["_pyproxy_repr"];var _PyObject_Str=Module["_PyObject_Str"]=wasmExports["PyObject_Str"];var __pyproxy_type=Module["__pyproxy_type"]=wasmExports["_pyproxy_type"];var __pyproxy_hasattr=Module["__pyproxy_hasattr"]=wasmExports["_pyproxy_hasattr"];var _python2js_json_adaptor=Module["_python2js_json_adaptor"]=wasmExports["python2js_json_adaptor"];var __pyproxy_getattr=Module["__pyproxy_getattr"]=wasmExports["_pyproxy_getattr"];var __PyObject_GetMethod=Module["__PyObject_GetMethod"]=wasmExports["_PyObject_GetMethod"];var __pyproxy_setattr=Module["__pyproxy_setattr"]=wasmExports["_pyproxy_setattr"];var __pyproxy_delattr=Module["__pyproxy_delattr"]=wasmExports["_pyproxy_delattr"];var _PyObject_DelAttr=Module["_PyObject_DelAttr"]=wasmExports["PyObject_DelAttr"];var __pyproxy_getitem=Module["__pyproxy_getitem"]=wasmExports["_pyproxy_getitem"];var __pyproxy_setitem=Module["__pyproxy_setitem"]=wasmExports["_pyproxy_setitem"];var __pyproxy_delitem=Module["__pyproxy_delitem"]=wasmExports["_pyproxy_delitem"];var __pyproxy_slice_assign=Module["__pyproxy_slice_assign"]=wasmExports["_pyproxy_slice_assign"];var _PySequence_Size=Module["_PySequence_Size"]=wasmExports["PySequence_Size"];var _PySequence_GetSlice=Module["_PySequence_GetSlice"]=wasmExports["PySequence_GetSlice"];var _PySequence_SetSlice=Module["_PySequence_SetSlice"]=wasmExports["PySequence_SetSlice"];var _python2js_with_depth=Module["_python2js_with_depth"]=wasmExports["python2js_with_depth"];var __pyproxy_pop=Module["__pyproxy_pop"]=wasmExports["_pyproxy_pop"];var __pyproxy_contains=Module["__pyproxy_contains"]=wasmExports["_pyproxy_contains"];var _PySequence_Contains=Module["_PySequence_Contains"]=wasmExports["PySequence_Contains"];var __pyproxy_ownKeys=Module["__pyproxy_ownKeys"]=wasmExports["_pyproxy_ownKeys"];var _PyObject_Dir=Module["_PyObject_Dir"]=wasmExports["PyObject_Dir"];var _PyList_Size=Module["_PyList_Size"]=wasmExports["PyList_Size"];var _PyList_GetItem=Module["_PyList_GetItem"]=wasmExports["PyList_GetItem"];var __pyproxy_apply=Module["__pyproxy_apply"]=wasmExports["_pyproxy_apply"];var _PyTuple_New=Module["_PyTuple_New"]=wasmExports["PyTuple_New"];var __pyproxy_apply_promising=Module["__pyproxy_apply_promising"]=wasmExports["_pyproxy_apply_promising"];var __iscoroutinefunction=Module["__iscoroutinefunction"]=wasmExports["_iscoroutinefunction"];var __pyproxy_iter_next=Module["__pyproxy_iter_next"]=wasmExports["_pyproxy_iter_next"];var _PyIter_Next=Module["_PyIter_Next"]=wasmExports["PyIter_Next"];var __pyproxyGen_Send=Module["__pyproxyGen_Send"]=wasmExports["_pyproxyGen_Send"];var _PyIter_Send=Module["_PyIter_Send"]=wasmExports["PyIter_Send"];var __pyproxyGen_return=Module["__pyproxyGen_return"]=wasmExports["_pyproxyGen_return"];var __PyGen_FetchStopIterationValue=Module["__PyGen_FetchStopIterationValue"]=wasmExports["_PyGen_FetchStopIterationValue"];var __pyproxyGen_throw=Module["__pyproxyGen_throw"]=wasmExports["_pyproxyGen_throw"];var __pyproxyGen_asend=Module["__pyproxyGen_asend"]=wasmExports["_pyproxyGen_asend"];var __pyproxyGen_areturn=Module["__pyproxyGen_areturn"]=wasmExports["_pyproxyGen_areturn"];var __pyproxyGen_athrow=Module["__pyproxyGen_athrow"]=wasmExports["_pyproxyGen_athrow"];var __pyproxy_aiter_next=Module["__pyproxy_aiter_next"]=wasmExports["_pyproxy_aiter_next"];var _FutureDoneCallback_call_resolve=Module["_FutureDoneCallback_call_resolve"]=wasmExports["FutureDoneCallback_call_resolve"];var _FutureDoneCallback_call_reject=Module["_FutureDoneCallback_call_reject"]=wasmExports["FutureDoneCallback_call_reject"];var _FutureDoneCallback_call=Module["_FutureDoneCallback_call"]=wasmExports["FutureDoneCallback_call"];var _PyArg_UnpackTuple=Module["_PyArg_UnpackTuple"]=wasmExports["PyArg_UnpackTuple"];var __pyproxy_ensure_future=Module["__pyproxy_ensure_future"]=wasmExports["_pyproxy_ensure_future"];var __pyproxy_get_buffer=Module["__pyproxy_get_buffer"]=wasmExports["_pyproxy_get_buffer"];var _PyBuffer_FillContiguousStrides=Module["_PyBuffer_FillContiguousStrides"]=wasmExports["PyBuffer_FillContiguousStrides"];var _PyBuffer_IsContiguous=Module["_PyBuffer_IsContiguous"]=wasmExports["PyBuffer_IsContiguous"];var _create_promise_handles_result_helper=Module["_create_promise_handles_result_helper"]=wasmExports["create_promise_handles_result_helper"];var __python2js_buffer=Module["__python2js_buffer"]=wasmExports["_python2js_buffer"];var _Jsv_GetNull=Module["_Jsv_GetNull"]=wasmExports["Jsv_GetNull"];var _jslib_init_buffers=Module["_jslib_init_buffers"]=wasmExports["jslib_init_buffers"];var _JsRef_pop=Module["_JsRef_pop"]=wasmExports["JsRef_pop"];var _JsrString_FromId=Module["_JsrString_FromId"]=wasmExports["JsrString_FromId"];var _hiwire_intern=Module["_hiwire_intern"]=wasmExports["hiwire_intern"];var __python2js=Module["__python2js"]=wasmExports["_python2js"];var _PySequence_GetItem=Module["_PySequence_GetItem"]=wasmExports["PySequence_GetItem"];var _PyObject_CheckBuffer=Module["_PyObject_CheckBuffer"]=wasmExports["PyObject_CheckBuffer"];var _PyFloat_AsDouble=Module["_PyFloat_AsDouble"]=wasmExports["PyFloat_AsDouble"];var _python2js__default_converter=Module["_python2js__default_converter"]=wasmExports["python2js__default_converter"];var _python2js__eager_converter=Module["_python2js__eager_converter"]=wasmExports["python2js__eager_converter"];var _PyLong_AsLongAndOverflow=Module["_PyLong_AsLongAndOverflow"]=wasmExports["PyLong_AsLongAndOverflow"];var __PyLong_NumBits=Module["__PyLong_NumBits"]=wasmExports["_PyLong_NumBits"];var __PyLong_AsByteArray=Module["__PyLong_AsByteArray"]=wasmExports["_PyLong_AsByteArray"];var _saveAsyncioState=Module["_saveAsyncioState"]=wasmExports["saveAsyncioState"];var _PyObject_Hash=Module["_PyObject_Hash"]=wasmExports["PyObject_Hash"];var __PyDict_GetItem_KnownHash=Module["__PyDict_GetItem_KnownHash"]=wasmExports["_PyDict_GetItem_KnownHash"];var _restoreAsyncioState=Module["_restoreAsyncioState"]=wasmExports["restoreAsyncioState"];var _captureThreadState=Module["_captureThreadState"]=wasmExports["captureThreadState"];var _PyInterpreterState_Get=Module["_PyInterpreterState_Get"]=wasmExports["PyInterpreterState_Get"];var _PyThreadState_New=Module["_PyThreadState_New"]=wasmExports["PyThreadState_New"];var _PyThreadState_Swap=Module["_PyThreadState_Swap"]=wasmExports["PyThreadState_Swap"];var _restoreThreadState=Module["_restoreThreadState"]=wasmExports["restoreThreadState"];var _PyThreadState_Delete=Module["_PyThreadState_Delete"]=wasmExports["PyThreadState_Delete"];var _print_stdout=Module["_print_stdout"]=wasmExports["print_stdout"];var _fiprintf=Module["_fiprintf"]=wasmExports["fiprintf"];var _print_stderr=Module["_print_stderr"]=wasmExports["print_stderr"];var _main=Module["_main"]=wasmExports["__main_argc_argv"];var _PyImport_AppendInittab=Module["_PyImport_AppendInittab"]=wasmExports["PyImport_AppendInittab"];var _PyPreConfig_InitPythonConfig=Module["_PyPreConfig_InitPythonConfig"]=wasmExports["PyPreConfig_InitPythonConfig"];var _Py_PreInitializeFromBytesArgs=Module["_Py_PreInitializeFromBytesArgs"]=wasmExports["Py_PreInitializeFromBytesArgs"];var _PyStatus_Exception=Module["_PyStatus_Exception"]=wasmExports["PyStatus_Exception"];var _PyConfig_InitPythonConfig=Module["_PyConfig_InitPythonConfig"]=wasmExports["PyConfig_InitPythonConfig"];var _PyConfig_SetBytesArgv=Module["_PyConfig_SetBytesArgv"]=wasmExports["PyConfig_SetBytesArgv"];var _PyConfig_SetBytesString=Module["_PyConfig_SetBytesString"]=wasmExports["PyConfig_SetBytesString"];var _Py_InitializeFromConfig=Module["_Py_InitializeFromConfig"]=wasmExports["Py_InitializeFromConfig"];var _PyConfig_Clear=Module["_PyConfig_Clear"]=wasmExports["PyConfig_Clear"];var _Py_ExitStatusException=Module["_Py_ExitStatusException"]=wasmExports["Py_ExitStatusException"];var _run_main=Module["_run_main"]=wasmExports["run_main"];var _run_main_promising=Module["_run_main_promising"]=wasmExports["run_main_promising"];var _Py_GetBuildInfo=Module["_Py_GetBuildInfo"]=wasmExports["Py_GetBuildInfo"];var _PyOS_snprintf=Module["_PyOS_snprintf"]=wasmExports["PyOS_snprintf"];var __PyToken_OneChar=Module["__PyToken_OneChar"]=wasmExports["_PyToken_OneChar"];var __PyToken_TwoChars=Module["__PyToken_TwoChars"]=wasmExports["_PyToken_TwoChars"];var __PyToken_ThreeChars=Module["__PyToken_ThreeChars"]=wasmExports["_PyToken_ThreeChars"];var _strlen=Module["_strlen"]=wasmExports["strlen"];var _PyUnicode_DecodeUTF8=Module["_PyUnicode_DecodeUTF8"]=wasmExports["PyUnicode_DecodeUTF8"];var __PyArena_Malloc=Module["__PyArena_Malloc"]=wasmExports["_PyArena_Malloc"];var _strncpy=Module["_strncpy"]=wasmExports["strncpy"];var _PyMem_Realloc=Module["_PyMem_Realloc"]=wasmExports["PyMem_Realloc"];var _PyMem_Calloc=Module["_PyMem_Calloc"]=wasmExports["PyMem_Calloc"];var _strncmp=Module["_strncmp"]=wasmExports["strncmp"];var __PyArena_AddPyObject=Module["__PyArena_AddPyObject"]=wasmExports["_PyArena_AddPyObject"];var _PyBytes_AsString=Module["_PyBytes_AsString"]=wasmExports["PyBytes_AsString"];var __PyImport_GetModuleAttrString=Module["__PyImport_GetModuleAttrString"]=wasmExports["_PyImport_GetModuleAttrString"];var _PyUnicode_InternFromString=Module["_PyUnicode_InternFromString"]=wasmExports["PyUnicode_InternFromString"];var __PyType_Name=Module["__PyType_Name"]=wasmExports["_PyType_Name"];var __PyUnicode_InternImmortal=Module["__PyUnicode_InternImmortal"]=wasmExports["_PyUnicode_InternImmortal"];var _PyBytes_AsStringAndSize=Module["_PyBytes_AsStringAndSize"]=wasmExports["PyBytes_AsStringAndSize"];var _strchr=Module["_strchr"]=wasmExports["strchr"];var _PyUnicode_CompareWithASCIIString=Module["_PyUnicode_CompareWithASCIIString"]=wasmExports["PyUnicode_CompareWithASCIIString"];var ___errno_location=Module["___errno_location"]=wasmExports["__errno_location"];var _PyOS_strtoul=Module["_PyOS_strtoul"]=wasmExports["PyOS_strtoul"];var _PyLong_FromString=Module["_PyLong_FromString"]=wasmExports["PyLong_FromString"];var _PyOS_strtol=Module["_PyOS_strtol"]=wasmExports["PyOS_strtol"];var _PyOS_string_to_double=Module["_PyOS_string_to_double"]=wasmExports["PyOS_string_to_double"];var _PyComplex_FromCComplex=Module["_PyComplex_FromCComplex"]=wasmExports["PyComplex_FromCComplex"];var _PyFloat_FromDouble=Module["_PyFloat_FromDouble"]=wasmExports["PyFloat_FromDouble"];var _Py_BuildValue=Module["_Py_BuildValue"]=wasmExports["Py_BuildValue"];var _PyUnicode_FromFormatV=Module["_PyUnicode_FromFormatV"]=wasmExports["PyUnicode_FromFormatV"];var __PyErr_ProgramDecodedTextObject=Module["__PyErr_ProgramDecodedTextObject"]=wasmExports["_PyErr_ProgramDecodedTextObject"];var _PyUnicode_FromStringAndSize=Module["_PyUnicode_FromStringAndSize"]=wasmExports["PyUnicode_FromStringAndSize"];var _PyBytes_FromString=Module["_PyBytes_FromString"]=wasmExports["PyBytes_FromString"];var _PyBytes_Concat=Module["_PyBytes_Concat"]=wasmExports["PyBytes_Concat"];var __PyUnicodeWriter_Init=Module["__PyUnicodeWriter_Init"]=wasmExports["_PyUnicodeWriter_Init"];var __PyUnicodeWriter_WriteStr=Module["__PyUnicodeWriter_WriteStr"]=wasmExports["_PyUnicodeWriter_WriteStr"];var __PyUnicodeWriter_Dealloc=Module["__PyUnicodeWriter_Dealloc"]=wasmExports["_PyUnicodeWriter_Dealloc"];var __PyUnicodeWriter_Finish=Module["__PyUnicodeWriter_Finish"]=wasmExports["_PyUnicodeWriter_Finish"];var _strpbrk=Module["_strpbrk"]=wasmExports["strpbrk"];var _PyUnicode_DecodeUTF8Stateful=Module["_PyUnicode_DecodeUTF8Stateful"]=wasmExports["PyUnicode_DecodeUTF8Stateful"];var _siprintf=Module["_siprintf"]=wasmExports["siprintf"];var __PyUnicode_DecodeUnicodeEscapeInternal=Module["__PyUnicode_DecodeUnicodeEscapeInternal"]=wasmExports["_PyUnicode_DecodeUnicodeEscapeInternal"];var __PyErr_BadInternalCall=Module["__PyErr_BadInternalCall"]=wasmExports["_PyErr_BadInternalCall"];var __PyBytes_DecodeEscape=Module["__PyBytes_DecodeEscape"]=wasmExports["_PyBytes_DecodeEscape"];var _PyErr_WarnExplicitObject=Module["_PyErr_WarnExplicitObject"]=wasmExports["PyErr_WarnExplicitObject"];var _PySys_Audit=Module["_PySys_Audit"]=wasmExports["PySys_Audit"];var _memchr=Module["_memchr"]=wasmExports["memchr"];var __Py_FatalErrorFunc=Module["__Py_FatalErrorFunc"]=wasmExports["_Py_FatalErrorFunc"];var _memcmp=Module["_memcmp"]=wasmExports["memcmp"];var __PyUnicode_ScanIdentifier=Module["__PyUnicode_ScanIdentifier"]=wasmExports["_PyUnicode_ScanIdentifier"];var _PyUnicode_Substring=Module["_PyUnicode_Substring"]=wasmExports["PyUnicode_Substring"];var _PyUnicode_AsUTF8String=Module["_PyUnicode_AsUTF8String"]=wasmExports["PyUnicode_AsUTF8String"];var __PyUnicode_IsPrintable=Module["__PyUnicode_IsPrintable"]=wasmExports["_PyUnicode_IsPrintable"];var _PyOS_Readline=Module["_PyOS_Readline"]=wasmExports["PyOS_Readline"];var _strcpy=Module["_strcpy"]=wasmExports["strcpy"];var _PyObject_CallNoArgs=Module["_PyObject_CallNoArgs"]=wasmExports["PyObject_CallNoArgs"];var __Py_UniversalNewlineFgetsWithSize=Module["__Py_UniversalNewlineFgetsWithSize"]=wasmExports["_Py_UniversalNewlineFgetsWithSize"];var _fopencookie=Module["_fopencookie"]=wasmExports["fopencookie"];var _fclose=Module["_fclose"]=wasmExports["fclose"];var _getc=Module["_getc"]=wasmExports["getc"];var _ungetc=Module["_ungetc"]=wasmExports["ungetc"];var _ftell=Module["_ftell"]=wasmExports["ftell"];var _lseek=Module["_lseek"]=wasmExports["lseek"];var _PyErr_SetFromErrnoWithFilename=Module["_PyErr_SetFromErrnoWithFilename"]=wasmExports["PyErr_SetFromErrnoWithFilename"];var _PyObject_CallFunction=Module["_PyObject_CallFunction"]=wasmExports["PyObject_CallFunction"];var _PyObject_GetAttr=Module["_PyObject_GetAttr"]=wasmExports["PyObject_GetAttr"];var __PyObject_MakeTpCall=Module["__PyObject_MakeTpCall"]=wasmExports["_PyObject_MakeTpCall"];var __Py_CheckFunctionResult=Module["__Py_CheckFunctionResult"]=wasmExports["_Py_CheckFunctionResult"];var _read=Module["_read"]=wasmExports["read"];var _PyUnicode_Decode=Module["_PyUnicode_Decode"]=wasmExports["PyUnicode_Decode"];var _strcspn=Module["_strcspn"]=wasmExports["strcspn"];var _fflush=wasmExports["fflush"];var _fputs=Module["_fputs"]=wasmExports["fputs"];var _PyMem_RawFree=Module["_PyMem_RawFree"]=wasmExports["PyMem_RawFree"];var _PyEval_RestoreThread=Module["_PyEval_RestoreThread"]=wasmExports["PyEval_RestoreThread"];var _PyEval_SaveThread=Module["_PyEval_SaveThread"]=wasmExports["PyEval_SaveThread"];var _PyMem_RawRealloc=Module["_PyMem_RawRealloc"]=wasmExports["PyMem_RawRealloc"];var _clearerr=Module["_clearerr"]=wasmExports["clearerr"];var _fgets=Module["_fgets"]=wasmExports["fgets"];var _feof=Module["_feof"]=wasmExports["feof"];var _PyErr_CheckSignals=Module["_PyErr_CheckSignals"]=wasmExports["PyErr_CheckSignals"];var _PyMutex_Lock=Module["_PyMutex_Lock"]=wasmExports["PyMutex_Lock"];var _isatty=Module["_isatty"]=wasmExports["isatty"];var _PyMutex_Unlock=Module["_PyMutex_Unlock"]=wasmExports["PyMutex_Unlock"];var _PyObject_Type=Module["_PyObject_Type"]=wasmExports["PyObject_Type"];var __PyErr_SetString=Module["__PyErr_SetString"]=wasmExports["_PyErr_SetString"];var _PyObject_Size=Module["_PyObject_Size"]=wasmExports["PyObject_Size"];var _PyMapping_Size=Module["_PyMapping_Size"]=wasmExports["PyMapping_Size"];var _PyObject_Length=Module["_PyObject_Length"]=wasmExports["PyObject_Length"];var _PyObject_LengthHint=Module["_PyObject_LengthHint"]=wasmExports["PyObject_LengthHint"];var __PyErr_ExceptionMatches=Module["__PyErr_ExceptionMatches"]=wasmExports["_PyErr_ExceptionMatches"];var __PyErr_Clear=Module["__PyErr_Clear"]=wasmExports["_PyErr_Clear"];var __PyObject_LookupSpecial=Module["__PyObject_LookupSpecial"]=wasmExports["_PyObject_LookupSpecial"];var _Py_GenericAlias=Module["_Py_GenericAlias"]=wasmExports["Py_GenericAlias"];var _PyObject_GetOptionalAttr=Module["_PyObject_GetOptionalAttr"]=wasmExports["PyObject_GetOptionalAttr"];var __PyNumber_Index=Module["__PyNumber_Index"]=wasmExports["_PyNumber_Index"];var __PyErr_Format=Module["__PyErr_Format"]=wasmExports["_PyErr_Format"];var _PyMapping_GetOptionalItem=Module["_PyMapping_GetOptionalItem"]=wasmExports["PyMapping_GetOptionalItem"];var _PyDict_GetItemRef=Module["_PyDict_GetItemRef"]=wasmExports["PyDict_GetItemRef"];var _PySequence_SetItem=Module["_PySequence_SetItem"]=wasmExports["PySequence_SetItem"];var _PySequence_DelItem=Module["_PySequence_DelItem"]=wasmExports["PySequence_DelItem"];var _PyObject_DelItemString=Module["_PyObject_DelItemString"]=wasmExports["PyObject_DelItemString"];var _PyObject_CheckReadBuffer=Module["_PyObject_CheckReadBuffer"]=wasmExports["PyObject_CheckReadBuffer"];var _PyObject_AsCharBuffer=Module["_PyObject_AsCharBuffer"]=wasmExports["PyObject_AsCharBuffer"];var _PyObject_AsReadBuffer=Module["_PyObject_AsReadBuffer"]=wasmExports["PyObject_AsReadBuffer"];var _PyObject_AsWriteBuffer=Module["_PyObject_AsWriteBuffer"]=wasmExports["PyObject_AsWriteBuffer"];var _PyBuffer_GetPointer=Module["_PyBuffer_GetPointer"]=wasmExports["PyBuffer_GetPointer"];var _PyBuffer_SizeFromFormat=Module["_PyBuffer_SizeFromFormat"]=wasmExports["PyBuffer_SizeFromFormat"];var _PyObject_CallFunctionObjArgs=Module["_PyObject_CallFunctionObjArgs"]=wasmExports["PyObject_CallFunctionObjArgs"];var _PyBuffer_FromContiguous=Module["_PyBuffer_FromContiguous"]=wasmExports["PyBuffer_FromContiguous"];var _PyObject_CopyData=Module["_PyObject_CopyData"]=wasmExports["PyObject_CopyData"];var _PyBuffer_FillInfo=Module["_PyBuffer_FillInfo"]=wasmExports["PyBuffer_FillInfo"];var __PyBuffer_ReleaseInInterpreter=Module["__PyBuffer_ReleaseInInterpreter"]=wasmExports["_PyBuffer_ReleaseInInterpreter"];var __PyBuffer_ReleaseInInterpreterAndRawFree=Module["__PyBuffer_ReleaseInInterpreterAndRawFree"]=wasmExports["_PyBuffer_ReleaseInInterpreterAndRawFree"];var _PyObject_Format=Module["_PyObject_Format"]=wasmExports["PyObject_Format"];var _PyUnicode_New=Module["_PyUnicode_New"]=wasmExports["PyUnicode_New"];var _PyNumber_Check=Module["_PyNumber_Check"]=wasmExports["PyNumber_Check"];var _PyNumber_Or=Module["_PyNumber_Or"]=wasmExports["PyNumber_Or"];var _PyNumber_Xor=Module["_PyNumber_Xor"]=wasmExports["PyNumber_Xor"];var _PyNumber_And=Module["_PyNumber_And"]=wasmExports["PyNumber_And"];var _PyNumber_Lshift=Module["_PyNumber_Lshift"]=wasmExports["PyNumber_Lshift"];var _PyNumber_Rshift=Module["_PyNumber_Rshift"]=wasmExports["PyNumber_Rshift"];var _PyNumber_Subtract=Module["_PyNumber_Subtract"]=wasmExports["PyNumber_Subtract"];var _PyNumber_Divmod=Module["_PyNumber_Divmod"]=wasmExports["PyNumber_Divmod"];var _PyNumber_Add=Module["_PyNumber_Add"]=wasmExports["PyNumber_Add"];var _PyNumber_Multiply=Module["_PyNumber_Multiply"]=wasmExports["PyNumber_Multiply"];var _PyNumber_MatrixMultiply=Module["_PyNumber_MatrixMultiply"]=wasmExports["PyNumber_MatrixMultiply"];var _PyNumber_FloorDivide=Module["_PyNumber_FloorDivide"]=wasmExports["PyNumber_FloorDivide"];var _PyNumber_TrueDivide=Module["_PyNumber_TrueDivide"]=wasmExports["PyNumber_TrueDivide"];var _PyNumber_Remainder=Module["_PyNumber_Remainder"]=wasmExports["PyNumber_Remainder"];var _PyNumber_Power=Module["_PyNumber_Power"]=wasmExports["PyNumber_Power"];var _PyNumber_InPlaceOr=Module["_PyNumber_InPlaceOr"]=wasmExports["PyNumber_InPlaceOr"];var _PyNumber_InPlaceXor=Module["_PyNumber_InPlaceXor"]=wasmExports["PyNumber_InPlaceXor"];var _PyNumber_InPlaceAnd=Module["_PyNumber_InPlaceAnd"]=wasmExports["PyNumber_InPlaceAnd"];var _PyNumber_InPlaceLshift=Module["_PyNumber_InPlaceLshift"]=wasmExports["PyNumber_InPlaceLshift"];var _PyNumber_InPlaceRshift=Module["_PyNumber_InPlaceRshift"]=wasmExports["PyNumber_InPlaceRshift"];var _PyNumber_InPlaceSubtract=Module["_PyNumber_InPlaceSubtract"]=wasmExports["PyNumber_InPlaceSubtract"];var _PyNumber_InPlaceMatrixMultiply=Module["_PyNumber_InPlaceMatrixMultiply"]=wasmExports["PyNumber_InPlaceMatrixMultiply"];var _PyNumber_InPlaceFloorDivide=Module["_PyNumber_InPlaceFloorDivide"]=wasmExports["PyNumber_InPlaceFloorDivide"];var _PyNumber_InPlaceTrueDivide=Module["_PyNumber_InPlaceTrueDivide"]=wasmExports["PyNumber_InPlaceTrueDivide"];var _PyNumber_InPlaceRemainder=Module["_PyNumber_InPlaceRemainder"]=wasmExports["PyNumber_InPlaceRemainder"];var _PyNumber_InPlaceAdd=Module["_PyNumber_InPlaceAdd"]=wasmExports["PyNumber_InPlaceAdd"];var _PyNumber_InPlaceMultiply=Module["_PyNumber_InPlaceMultiply"]=wasmExports["PyNumber_InPlaceMultiply"];var _PyNumber_InPlacePower=Module["_PyNumber_InPlacePower"]=wasmExports["PyNumber_InPlacePower"];var _PyNumber_Negative=Module["_PyNumber_Negative"]=wasmExports["PyNumber_Negative"];var _PyNumber_Positive=Module["_PyNumber_Positive"]=wasmExports["PyNumber_Positive"];var _PyNumber_Invert=Module["_PyNumber_Invert"]=wasmExports["PyNumber_Invert"];var _PyNumber_Absolute=Module["_PyNumber_Absolute"]=wasmExports["PyNumber_Absolute"];var _PyErr_WarnFormat=Module["_PyErr_WarnFormat"]=wasmExports["PyErr_WarnFormat"];var __PyLong_Copy=Module["__PyLong_Copy"]=wasmExports["_PyLong_Copy"];var _PyNumber_Long=Module["_PyNumber_Long"]=wasmExports["PyNumber_Long"];var _PyLong_FromUnicodeObject=Module["_PyLong_FromUnicodeObject"]=wasmExports["PyLong_FromUnicodeObject"];var _PyNumber_Float=Module["_PyNumber_Float"]=wasmExports["PyNumber_Float"];var _PyLong_AsDouble=Module["_PyLong_AsDouble"]=wasmExports["PyLong_AsDouble"];var _PyFloat_FromString=Module["_PyFloat_FromString"]=wasmExports["PyFloat_FromString"];var _PyNumber_ToBase=Module["_PyNumber_ToBase"]=wasmExports["PyNumber_ToBase"];var __PyLong_Format=Module["__PyLong_Format"]=wasmExports["_PyLong_Format"];var _PySequence_Check=Module["_PySequence_Check"]=wasmExports["PySequence_Check"];var _PySequence_Length=Module["_PySequence_Length"]=wasmExports["PySequence_Length"];var _PySequence_Concat=Module["_PySequence_Concat"]=wasmExports["PySequence_Concat"];var _PySequence_Repeat=Module["_PySequence_Repeat"]=wasmExports["PySequence_Repeat"];var _PySequence_InPlaceConcat=Module["_PySequence_InPlaceConcat"]=wasmExports["PySequence_InPlaceConcat"];var _PySequence_InPlaceRepeat=Module["_PySequence_InPlaceRepeat"]=wasmExports["PySequence_InPlaceRepeat"];var __PySlice_FromIndices=Module["__PySlice_FromIndices"]=wasmExports["_PySlice_FromIndices"];var _PySequence_DelSlice=Module["_PySequence_DelSlice"]=wasmExports["PySequence_DelSlice"];var _PySequence_Tuple=Module["_PySequence_Tuple"]=wasmExports["PySequence_Tuple"];var _PyList_AsTuple=Module["_PyList_AsTuple"]=wasmExports["PyList_AsTuple"];var __PyTuple_Resize=Module["__PyTuple_Resize"]=wasmExports["_PyTuple_Resize"];var _PySeqIter_New=Module["_PySeqIter_New"]=wasmExports["PySeqIter_New"];var _PySequence_List=Module["_PySequence_List"]=wasmExports["PySequence_List"];var __PyList_Extend=Module["__PyList_Extend"]=wasmExports["_PyList_Extend"];var _PySequence_Count=Module["_PySequence_Count"]=wasmExports["PySequence_Count"];var _PySequence_In=Module["_PySequence_In"]=wasmExports["PySequence_In"];var _PySequence_Index=Module["_PySequence_Index"]=wasmExports["PySequence_Index"];var _PyMapping_Check=Module["_PyMapping_Check"]=wasmExports["PyMapping_Check"];var _PyMapping_Length=Module["_PyMapping_Length"]=wasmExports["PyMapping_Length"];var _PyMapping_GetItemString=Module["_PyMapping_GetItemString"]=wasmExports["PyMapping_GetItemString"];var _PyMapping_GetOptionalItemString=Module["_PyMapping_GetOptionalItemString"]=wasmExports["PyMapping_GetOptionalItemString"];var _PyMapping_SetItemString=Module["_PyMapping_SetItemString"]=wasmExports["PyMapping_SetItemString"];var _PyMapping_HasKeyStringWithError=Module["_PyMapping_HasKeyStringWithError"]=wasmExports["PyMapping_HasKeyStringWithError"];var _PyMapping_HasKeyWithError=Module["_PyMapping_HasKeyWithError"]=wasmExports["PyMapping_HasKeyWithError"];var _PyMapping_HasKeyString=Module["_PyMapping_HasKeyString"]=wasmExports["PyMapping_HasKeyString"];var _PyErr_FormatUnraisable=Module["_PyErr_FormatUnraisable"]=wasmExports["PyErr_FormatUnraisable"];var _PyMapping_HasKey=Module["_PyMapping_HasKey"]=wasmExports["PyMapping_HasKey"];var _PyMapping_Keys=Module["_PyMapping_Keys"]=wasmExports["PyMapping_Keys"];var _PyDict_Keys=Module["_PyDict_Keys"]=wasmExports["PyDict_Keys"];var _PyMapping_Items=Module["_PyMapping_Items"]=wasmExports["PyMapping_Items"];var _PyDict_Items=Module["_PyDict_Items"]=wasmExports["PyDict_Items"];var _PyMapping_Values=Module["_PyMapping_Values"]=wasmExports["PyMapping_Values"];var _PyDict_Values=Module["_PyDict_Values"]=wasmExports["PyDict_Values"];var __Py_CheckRecursiveCall=Module["__Py_CheckRecursiveCall"]=wasmExports["_Py_CheckRecursiveCall"];var _PyObject_IsTrue=Module["_PyObject_IsTrue"]=wasmExports["PyObject_IsTrue"];var _PyIter_Check=Module["_PyIter_Check"]=wasmExports["PyIter_Check"];var _PyObject_GetAIter=Module["_PyObject_GetAIter"]=wasmExports["PyObject_GetAIter"];var _PyAIter_Check=Module["_PyAIter_Check"]=wasmExports["PyAIter_Check"];var _PyBool_FromLong=Module["_PyBool_FromLong"]=wasmExports["PyBool_FromLong"];var __PyArg_NoKeywords=Module["__PyArg_NoKeywords"]=wasmExports["_PyArg_NoKeywords"];var _memrchr=Module["_memrchr"]=wasmExports["memrchr"];var _PyByteArray_FromObject=Module["_PyByteArray_FromObject"]=wasmExports["PyByteArray_FromObject"];var _PyByteArray_FromStringAndSize=Module["_PyByteArray_FromStringAndSize"]=wasmExports["PyByteArray_FromStringAndSize"];var __PyObject_New=Module["__PyObject_New"]=wasmExports["_PyObject_New"];var _PyByteArray_Size=Module["_PyByteArray_Size"]=wasmExports["PyByteArray_Size"];var _PyByteArray_AsString=Module["_PyByteArray_AsString"]=wasmExports["PyByteArray_AsString"];var _PyByteArray_Resize=Module["_PyByteArray_Resize"]=wasmExports["PyByteArray_Resize"];var _PyByteArray_Concat=Module["_PyByteArray_Concat"]=wasmExports["PyByteArray_Concat"];var __Py_GetConfig=Module["__Py_GetConfig"]=wasmExports["_Py_GetConfig"];var __PyObject_GC_New=Module["__PyObject_GC_New"]=wasmExports["_PyObject_GC_New"];var __PyArg_UnpackKeywords=Module["__PyArg_UnpackKeywords"]=wasmExports["_PyArg_UnpackKeywords"];var __PyArg_BadArgument=Module["__PyArg_BadArgument"]=wasmExports["_PyArg_BadArgument"];var _PyUnicode_AsEncodedString=Module["_PyUnicode_AsEncodedString"]=wasmExports["PyUnicode_AsEncodedString"];var _PyBuffer_ToContiguous=Module["_PyBuffer_ToContiguous"]=wasmExports["PyBuffer_ToContiguous"];var _PyObject_GC_Del=Module["_PyObject_GC_Del"]=wasmExports["PyObject_GC_Del"];var __PyBytes_Repeat=Module["__PyBytes_Repeat"]=wasmExports["_PyBytes_Repeat"];var __PyObject_GetState=Module["__PyObject_GetState"]=wasmExports["_PyObject_GetState"];var _PyUnicode_DecodeLatin1=Module["_PyUnicode_DecodeLatin1"]=wasmExports["PyUnicode_DecodeLatin1"];var _PyLong_AsInt=Module["_PyLong_AsInt"]=wasmExports["PyLong_AsInt"];var _PyLong_FromSize_t=Module["_PyLong_FromSize_t"]=wasmExports["PyLong_FromSize_t"];var __PyEval_SliceIndex=Module["__PyEval_SliceIndex"]=wasmExports["_PyEval_SliceIndex"];var _PyUnicode_GetDefaultEncoding=Module["_PyUnicode_GetDefaultEncoding"]=wasmExports["PyUnicode_GetDefaultEncoding"];var _PyUnicode_FromEncodedObject=Module["_PyUnicode_FromEncodedObject"]=wasmExports["PyUnicode_FromEncodedObject"];var _PyList_Append=Module["_PyList_Append"]=wasmExports["PyList_Append"];var _PyList_Reverse=Module["_PyList_Reverse"]=wasmExports["PyList_Reverse"];var __PyEval_GetBuiltin=Module["__PyEval_GetBuiltin"]=wasmExports["_PyEval_GetBuiltin"];var _PyObject_GenericGetAttr=Module["_PyObject_GenericGetAttr"]=wasmExports["PyObject_GenericGetAttr"];var _PyType_GenericAlloc=Module["_PyType_GenericAlloc"]=wasmExports["PyType_GenericAlloc"];var _PyObject_Free=Module["_PyObject_Free"]=wasmExports["PyObject_Free"];var _PyObject_Malloc=Module["_PyObject_Malloc"]=wasmExports["PyObject_Malloc"];var __Py_NewReference=Module["__Py_NewReference"]=wasmExports["_Py_NewReference"];var _PyObject_Calloc=Module["_PyObject_Calloc"]=wasmExports["PyObject_Calloc"];var _PyBytes_FromFormatV=Module["_PyBytes_FromFormatV"]=wasmExports["PyBytes_FromFormatV"];var __PyBytesWriter_Resize=Module["__PyBytesWriter_Resize"]=wasmExports["_PyBytesWriter_Resize"];var __PyBytesWriter_Finish=Module["__PyBytesWriter_Finish"]=wasmExports["_PyBytesWriter_Finish"];var __PyBytesWriter_Init=Module["__PyBytesWriter_Init"]=wasmExports["_PyBytesWriter_Init"];var __PyBytesWriter_Alloc=Module["__PyBytesWriter_Alloc"]=wasmExports["_PyBytesWriter_Alloc"];var __PyBytesWriter_WriteBytes=Module["__PyBytesWriter_WriteBytes"]=wasmExports["_PyBytesWriter_WriteBytes"];var __PyBytes_Resize=Module["__PyBytes_Resize"]=wasmExports["_PyBytes_Resize"];var __PyBytesWriter_Dealloc=Module["__PyBytesWriter_Dealloc"]=wasmExports["_PyBytesWriter_Dealloc"];var _PyBytes_FromFormat=Module["_PyBytes_FromFormat"]=wasmExports["PyBytes_FromFormat"];var _PyObject_ASCII=Module["_PyObject_ASCII"]=wasmExports["PyObject_ASCII"];var _PyOS_double_to_string=Module["_PyOS_double_to_string"]=wasmExports["PyOS_double_to_string"];var __PyBytesWriter_Prepare=Module["__PyBytesWriter_Prepare"]=wasmExports["_PyBytesWriter_Prepare"];var _PyBytes_DecodeEscape=Module["_PyBytes_DecodeEscape"]=wasmExports["PyBytes_DecodeEscape"];var _PyBytes_Size=Module["_PyBytes_Size"]=wasmExports["PyBytes_Size"];var __PyBytes_Find=Module["__PyBytes_Find"]=wasmExports["_PyBytes_Find"];var __PyBytes_ReverseFind=Module["__PyBytes_ReverseFind"]=wasmExports["_PyBytes_ReverseFind"];var _PyBytes_Repr=Module["_PyBytes_Repr"]=wasmExports["PyBytes_Repr"];var __PyBytes_Join=Module["__PyBytes_Join"]=wasmExports["_PyBytes_Join"];var _PyBytes_FromObject=Module["_PyBytes_FromObject"]=wasmExports["PyBytes_FromObject"];var _PyErr_BadArgument=Module["_PyErr_BadArgument"]=wasmExports["PyErr_BadArgument"];var _PyObject_Realloc=Module["_PyObject_Realloc"]=wasmExports["PyObject_Realloc"];var __Py_NewReferenceNoTotal=Module["__Py_NewReferenceNoTotal"]=wasmExports["_Py_NewReferenceNoTotal"];var _PyBytes_ConcatAndDel=Module["_PyBytes_ConcatAndDel"]=wasmExports["PyBytes_ConcatAndDel"];var _PyVectorcall_Function=Module["_PyVectorcall_Function"]=wasmExports["PyVectorcall_Function"];var __PyDict_FromItems=Module["__PyDict_FromItems"]=wasmExports["_PyDict_FromItems"];var _PyDict_Next=Module["_PyDict_Next"]=wasmExports["PyDict_Next"];var _PyObject_VectorcallDict=Module["_PyObject_VectorcallDict"]=wasmExports["PyObject_VectorcallDict"];var _PyModule_GetNameObject=Module["_PyModule_GetNameObject"]=wasmExports["PyModule_GetNameObject"];var _PyCallable_Check=Module["_PyCallable_Check"]=wasmExports["PyCallable_Check"];var __PyStack_AsDict=Module["__PyStack_AsDict"]=wasmExports["_PyStack_AsDict"];var _PyObject_Call=Module["_PyObject_Call"]=wasmExports["PyObject_Call"];var _PyCFunction_Call=Module["_PyCFunction_Call"]=wasmExports["PyCFunction_Call"];var _PyEval_CallObjectWithKeywords=Module["_PyEval_CallObjectWithKeywords"]=wasmExports["PyEval_CallObjectWithKeywords"];var _PyObject_CallObject=Module["_PyObject_CallObject"]=wasmExports["PyObject_CallObject"];var _PyEval_CallFunction=Module["_PyEval_CallFunction"]=wasmExports["PyEval_CallFunction"];var __PyObject_CallFunction_SizeT=Module["__PyObject_CallFunction_SizeT"]=wasmExports["_PyObject_CallFunction_SizeT"];var _PyObject_CallMethod=Module["_PyObject_CallMethod"]=wasmExports["PyObject_CallMethod"];var _PyEval_CallMethod=Module["_PyEval_CallMethod"]=wasmExports["PyEval_CallMethod"];var __PyObject_CallMethod=Module["__PyObject_CallMethod"]=wasmExports["_PyObject_CallMethod"];var __PyObject_CallMethodId=Module["__PyObject_CallMethodId"]=wasmExports["_PyObject_CallMethodId"];var __PyObject_CallMethod_SizeT=Module["__PyObject_CallMethod_SizeT"]=wasmExports["_PyObject_CallMethod_SizeT"];var _PyObject_CallMethodObjArgs=Module["_PyObject_CallMethodObjArgs"]=wasmExports["PyObject_CallMethodObjArgs"];var _PyVectorcall_NARGS=Module["_PyVectorcall_NARGS"]=wasmExports["PyVectorcall_NARGS"];var _PyCapsule_New=Module["_PyCapsule_New"]=wasmExports["PyCapsule_New"];var _PyCapsule_IsValid=Module["_PyCapsule_IsValid"]=wasmExports["PyCapsule_IsValid"];var _PyCapsule_GetPointer=Module["_PyCapsule_GetPointer"]=wasmExports["PyCapsule_GetPointer"];var _PyCapsule_GetName=Module["_PyCapsule_GetName"]=wasmExports["PyCapsule_GetName"];var _PyCapsule_GetDestructor=Module["_PyCapsule_GetDestructor"]=wasmExports["PyCapsule_GetDestructor"];var _PyCapsule_GetContext=Module["_PyCapsule_GetContext"]=wasmExports["PyCapsule_GetContext"];var _PyCapsule_SetPointer=Module["_PyCapsule_SetPointer"]=wasmExports["PyCapsule_SetPointer"];var _PyCapsule_SetName=Module["_PyCapsule_SetName"]=wasmExports["PyCapsule_SetName"];var _PyCapsule_SetDestructor=Module["_PyCapsule_SetDestructor"]=wasmExports["PyCapsule_SetDestructor"];var _PyCapsule_SetContext=Module["_PyCapsule_SetContext"]=wasmExports["PyCapsule_SetContext"];var __PyCapsule_SetTraverse=Module["__PyCapsule_SetTraverse"]=wasmExports["_PyCapsule_SetTraverse"];var _PyCapsule_Import=Module["_PyCapsule_Import"]=wasmExports["PyCapsule_Import"];var _PyCell_New=Module["_PyCell_New"]=wasmExports["PyCell_New"];var _PyCell_Get=Module["_PyCell_Get"]=wasmExports["PyCell_Get"];var _PyCell_Set=Module["_PyCell_Set"]=wasmExports["PyCell_Set"];var _PyObject_RichCompare=Module["_PyObject_RichCompare"]=wasmExports["PyObject_RichCompare"];var _PyMethod_Function=Module["_PyMethod_Function"]=wasmExports["PyMethod_Function"];var _PyMethod_Self=Module["_PyMethod_Self"]=wasmExports["PyMethod_Self"];var _PyMethod_New=Module["_PyMethod_New"]=wasmExports["PyMethod_New"];var _PyObject_ClearWeakRefs=Module["_PyObject_ClearWeakRefs"]=wasmExports["PyObject_ClearWeakRefs"];var _PyObject_GenericHash=Module["_PyObject_GenericHash"]=wasmExports["PyObject_GenericHash"];var __PyType_GetDict=Module["__PyType_GetDict"]=wasmExports["_PyType_GetDict"];var __PyType_LookupRef=Module["__PyType_LookupRef"]=wasmExports["_PyType_LookupRef"];var _PyInstanceMethod_New=Module["_PyInstanceMethod_New"]=wasmExports["PyInstanceMethod_New"];var _PyInstanceMethod_Function=Module["_PyInstanceMethod_Function"]=wasmExports["PyInstanceMethod_Function"];var _PyCode_AddWatcher=Module["_PyCode_AddWatcher"]=wasmExports["PyCode_AddWatcher"];var _PyCode_ClearWatcher=Module["_PyCode_ClearWatcher"]=wasmExports["PyCode_ClearWatcher"];var __PyObject_NewVar=Module["__PyObject_NewVar"]=wasmExports["_PyObject_NewVar"];var __PyUnicode_InternMortal=Module["__PyUnicode_InternMortal"]=wasmExports["_PyUnicode_InternMortal"];var _PyUnstable_Code_NewWithPosOnlyArgs=Module["_PyUnstable_Code_NewWithPosOnlyArgs"]=wasmExports["PyUnstable_Code_NewWithPosOnlyArgs"];var _PyUnicode_Compare=Module["_PyUnicode_Compare"]=wasmExports["PyUnicode_Compare"];var _PyUnstable_Code_New=Module["_PyUnstable_Code_New"]=wasmExports["PyUnstable_Code_New"];var _PyCode_NewEmpty=Module["_PyCode_NewEmpty"]=wasmExports["PyCode_NewEmpty"];var _PyUnicode_DecodeFSDefault=Module["_PyUnicode_DecodeFSDefault"]=wasmExports["PyUnicode_DecodeFSDefault"];var _PyCode_Addr2Line=Module["_PyCode_Addr2Line"]=wasmExports["PyCode_Addr2Line"];var __PyCode_CheckLineNumber=Module["__PyCode_CheckLineNumber"]=wasmExports["_PyCode_CheckLineNumber"];var _PyCode_Addr2Location=Module["_PyCode_Addr2Location"]=wasmExports["PyCode_Addr2Location"];var _PyUnstable_Code_GetExtra=Module["_PyUnstable_Code_GetExtra"]=wasmExports["PyUnstable_Code_GetExtra"];var _PyUnstable_Code_SetExtra=Module["_PyUnstable_Code_SetExtra"]=wasmExports["PyUnstable_Code_SetExtra"];var _PyCode_GetVarnames=Module["_PyCode_GetVarnames"]=wasmExports["PyCode_GetVarnames"];var _PyCode_GetCellvars=Module["_PyCode_GetCellvars"]=wasmExports["PyCode_GetCellvars"];var _PyCode_GetFreevars=Module["_PyCode_GetFreevars"]=wasmExports["PyCode_GetFreevars"];var _PyCode_GetCode=Module["_PyCode_GetCode"]=wasmExports["PyCode_GetCode"];var __PyCode_ConstantKey=Module["__PyCode_ConstantKey"]=wasmExports["_PyCode_ConstantKey"];var _PyComplex_AsCComplex=Module["_PyComplex_AsCComplex"]=wasmExports["PyComplex_AsCComplex"];var __PySet_NextEntry=Module["__PySet_NextEntry"]=wasmExports["_PySet_NextEntry"];var _PyFrozenSet_New=Module["_PyFrozenSet_New"]=wasmExports["PyFrozenSet_New"];var _PyLong_FromVoidPtr=Module["_PyLong_FromVoidPtr"]=wasmExports["PyLong_FromVoidPtr"];var __PyUnicode_Copy=Module["__PyUnicode_Copy"]=wasmExports["_PyUnicode_Copy"];var __Py_c_sum=Module["__Py_c_sum"]=wasmExports["_Py_c_sum"];var __Py_c_diff=Module["__Py_c_diff"]=wasmExports["_Py_c_diff"];var __Py_c_neg=Module["__Py_c_neg"]=wasmExports["_Py_c_neg"];var __Py_c_prod=Module["__Py_c_prod"]=wasmExports["_Py_c_prod"];var __Py_c_quot=Module["__Py_c_quot"]=wasmExports["_Py_c_quot"];var __Py_c_pow=Module["__Py_c_pow"]=wasmExports["_Py_c_pow"];var _atan2=Module["_atan2"]=wasmExports["atan2"];var _hypot=Module["_hypot"]=wasmExports["hypot"];var _pow=Module["_pow"]=wasmExports["pow"];var _log=Module["_log"]=wasmExports["log"];var _exp=Module["_exp"]=wasmExports["exp"];var _sin=Module["_sin"]=wasmExports["sin"];var _cos=Module["_cos"]=wasmExports["cos"];var __Py_c_abs=Module["__Py_c_abs"]=wasmExports["_Py_c_abs"];var _PyComplex_FromDoubles=Module["_PyComplex_FromDoubles"]=wasmExports["PyComplex_FromDoubles"];var _PyComplex_RealAsDouble=Module["_PyComplex_RealAsDouble"]=wasmExports["PyComplex_RealAsDouble"];var _PyComplex_ImagAsDouble=Module["_PyComplex_ImagAsDouble"]=wasmExports["PyComplex_ImagAsDouble"];var __Py_HashDouble=Module["__Py_HashDouble"]=wasmExports["_Py_HashDouble"];var __PyUnicode_TransformDecimalAndSpaceToASCII=Module["__PyUnicode_TransformDecimalAndSpaceToASCII"]=wasmExports["_PyUnicode_TransformDecimalAndSpaceToASCII"];var _PyCMethod_New=Module["_PyCMethod_New"]=wasmExports["PyCMethod_New"];var _PyMember_GetOne=Module["_PyMember_GetOne"]=wasmExports["PyMember_GetOne"];var _PyMember_SetOne=Module["_PyMember_SetOne"]=wasmExports["PyMember_SetOne"];var _PyTuple_GetSlice=Module["_PyTuple_GetSlice"]=wasmExports["PyTuple_GetSlice"];var _PyDescr_NewMethod=Module["_PyDescr_NewMethod"]=wasmExports["PyDescr_NewMethod"];var __PyObject_FunctionStr=Module["__PyObject_FunctionStr"]=wasmExports["_PyObject_FunctionStr"];var _PyDescr_NewClassMethod=Module["_PyDescr_NewClassMethod"]=wasmExports["PyDescr_NewClassMethod"];var _PyDescr_NewMember=Module["_PyDescr_NewMember"]=wasmExports["PyDescr_NewMember"];var _PyDescr_NewGetSet=Module["_PyDescr_NewGetSet"]=wasmExports["PyDescr_NewGetSet"];var _PyDescr_NewWrapper=Module["_PyDescr_NewWrapper"]=wasmExports["PyDescr_NewWrapper"];var _PyDescr_IsData=Module["_PyDescr_IsData"]=wasmExports["PyDescr_IsData"];var _PyDictProxy_New=Module["_PyDictProxy_New"]=wasmExports["PyDictProxy_New"];var _PyThreadState_Get=Module["_PyThreadState_Get"]=wasmExports["PyThreadState_Get"];var __PyTrash_thread_deposit_object=Module["__PyTrash_thread_deposit_object"]=wasmExports["_PyTrash_thread_deposit_object"];var __PyTrash_thread_destroy_chain=Module["__PyTrash_thread_destroy_chain"]=wasmExports["_PyTrash_thread_destroy_chain"];var _Py_HashPointer=Module["_Py_HashPointer"]=wasmExports["Py_HashPointer"];var _PyWrapper_New=Module["_PyWrapper_New"]=wasmExports["PyWrapper_New"];var _PyType_GetQualName=Module["_PyType_GetQualName"]=wasmExports["PyType_GetQualName"];var _PyDict_Contains=Module["_PyDict_Contains"]=wasmExports["PyDict_Contains"];var __PyUnicode_EqualToASCIIString=Module["__PyUnicode_EqualToASCIIString"]=wasmExports["_PyUnicode_EqualToASCIIString"];var _PyException_GetCause=Module["_PyException_GetCause"]=wasmExports["PyException_GetCause"];var _PyException_SetCause=Module["_PyException_SetCause"]=wasmExports["PyException_SetCause"];var _PyException_GetContext=Module["_PyException_GetContext"]=wasmExports["PyException_GetContext"];var _PyException_SetContext=Module["_PyException_SetContext"]=wasmExports["PyException_SetContext"];var _PyException_GetArgs=Module["_PyException_GetArgs"]=wasmExports["PyException_GetArgs"];var _PyException_SetArgs=Module["_PyException_SetArgs"]=wasmExports["PyException_SetArgs"];var _PyExceptionClass_Name=Module["_PyExceptionClass_Name"]=wasmExports["PyExceptionClass_Name"];var _PyUnstable_Exc_PrepReraiseStar=Module["_PyUnstable_Exc_PrepReraiseStar"]=wasmExports["PyUnstable_Exc_PrepReraiseStar"];var _PyUnicodeEncodeError_GetEncoding=Module["_PyUnicodeEncodeError_GetEncoding"]=wasmExports["PyUnicodeEncodeError_GetEncoding"];var _PyUnicodeDecodeError_GetEncoding=Module["_PyUnicodeDecodeError_GetEncoding"]=wasmExports["PyUnicodeDecodeError_GetEncoding"];var _PyUnicodeEncodeError_GetObject=Module["_PyUnicodeEncodeError_GetObject"]=wasmExports["PyUnicodeEncodeError_GetObject"];var _PyUnicodeDecodeError_GetObject=Module["_PyUnicodeDecodeError_GetObject"]=wasmExports["PyUnicodeDecodeError_GetObject"];var _PyUnicodeTranslateError_GetObject=Module["_PyUnicodeTranslateError_GetObject"]=wasmExports["PyUnicodeTranslateError_GetObject"];var _PyUnicodeEncodeError_GetStart=Module["_PyUnicodeEncodeError_GetStart"]=wasmExports["PyUnicodeEncodeError_GetStart"];var _PyUnicodeDecodeError_GetStart=Module["_PyUnicodeDecodeError_GetStart"]=wasmExports["PyUnicodeDecodeError_GetStart"];var _PyUnicodeTranslateError_GetStart=Module["_PyUnicodeTranslateError_GetStart"]=wasmExports["PyUnicodeTranslateError_GetStart"];var _PyUnicodeEncodeError_SetStart=Module["_PyUnicodeEncodeError_SetStart"]=wasmExports["PyUnicodeEncodeError_SetStart"];var _PyUnicodeDecodeError_SetStart=Module["_PyUnicodeDecodeError_SetStart"]=wasmExports["PyUnicodeDecodeError_SetStart"];var _PyUnicodeTranslateError_SetStart=Module["_PyUnicodeTranslateError_SetStart"]=wasmExports["PyUnicodeTranslateError_SetStart"];var _PyUnicodeEncodeError_GetEnd=Module["_PyUnicodeEncodeError_GetEnd"]=wasmExports["PyUnicodeEncodeError_GetEnd"];var _PyUnicodeDecodeError_GetEnd=Module["_PyUnicodeDecodeError_GetEnd"]=wasmExports["PyUnicodeDecodeError_GetEnd"];var _PyUnicodeTranslateError_GetEnd=Module["_PyUnicodeTranslateError_GetEnd"]=wasmExports["PyUnicodeTranslateError_GetEnd"];var _PyUnicodeEncodeError_SetEnd=Module["_PyUnicodeEncodeError_SetEnd"]=wasmExports["PyUnicodeEncodeError_SetEnd"];var _PyUnicodeDecodeError_SetEnd=Module["_PyUnicodeDecodeError_SetEnd"]=wasmExports["PyUnicodeDecodeError_SetEnd"];var _PyUnicodeTranslateError_SetEnd=Module["_PyUnicodeTranslateError_SetEnd"]=wasmExports["PyUnicodeTranslateError_SetEnd"];var _PyUnicodeEncodeError_GetReason=Module["_PyUnicodeEncodeError_GetReason"]=wasmExports["PyUnicodeEncodeError_GetReason"];var _PyUnicodeDecodeError_GetReason=Module["_PyUnicodeDecodeError_GetReason"]=wasmExports["PyUnicodeDecodeError_GetReason"];var _PyUnicodeTranslateError_GetReason=Module["_PyUnicodeTranslateError_GetReason"]=wasmExports["PyUnicodeTranslateError_GetReason"];var _PyUnicodeEncodeError_SetReason=Module["_PyUnicodeEncodeError_SetReason"]=wasmExports["PyUnicodeEncodeError_SetReason"];var _PyUnicodeDecodeError_SetReason=Module["_PyUnicodeDecodeError_SetReason"]=wasmExports["PyUnicodeDecodeError_SetReason"];var _PyUnicodeTranslateError_SetReason=Module["_PyUnicodeTranslateError_SetReason"]=wasmExports["PyUnicodeTranslateError_SetReason"];var _PyUnicodeDecodeError_Create=Module["_PyUnicodeDecodeError_Create"]=wasmExports["PyUnicodeDecodeError_Create"];var _PyModule_GetDict=Module["_PyModule_GetDict"]=wasmExports["PyModule_GetDict"];var _PyErr_NewException=Module["_PyErr_NewException"]=wasmExports["PyErr_NewException"];var _PySet_Add=Module["_PySet_Add"]=wasmExports["PySet_Add"];var _PySet_Contains=Module["_PySet_Contains"]=wasmExports["PySet_Contains"];var _PyTuple_Size=Module["_PyTuple_Size"]=wasmExports["PyTuple_Size"];var _PyDict_Copy=Module["_PyDict_Copy"]=wasmExports["PyDict_Copy"];var _PyUnicode_ReadChar=Module["_PyUnicode_ReadChar"]=wasmExports["PyUnicode_ReadChar"];var _PyObject_GenericGetDict=Module["_PyObject_GenericGetDict"]=wasmExports["PyObject_GenericGetDict"];var _PyObject_GenericSetDict=Module["_PyObject_GenericSetDict"]=wasmExports["PyObject_GenericSetDict"];var _PyObject_HasAttrWithError=Module["_PyObject_HasAttrWithError"]=wasmExports["PyObject_HasAttrWithError"];var _PyList_SetSlice=Module["_PyList_SetSlice"]=wasmExports["PyList_SetSlice"];var __PyUnicodeWriter_WriteASCIIString=Module["__PyUnicodeWriter_WriteASCIIString"]=wasmExports["_PyUnicodeWriter_WriteASCIIString"];var _PyObject_GC_Track=Module["_PyObject_GC_Track"]=wasmExports["PyObject_GC_Track"];var __Py_union_type_or=Module["__Py_union_type_or"]=wasmExports["_Py_union_type_or"];var _PyErr_WriteUnraisable=Module["_PyErr_WriteUnraisable"]=wasmExports["PyErr_WriteUnraisable"];var __PyGen_yf=Module["__PyGen_yf"]=wasmExports["_PyGen_yf"];var _PyObject_CallFinalizerFromDealloc=Module["_PyObject_CallFinalizerFromDealloc"]=wasmExports["PyObject_CallFinalizerFromDealloc"];var __Py_MakeCoro=Module["__Py_MakeCoro"]=wasmExports["_Py_MakeCoro"];var __PyObject_GC_NewVar=Module["__PyObject_GC_NewVar"]=wasmExports["_PyObject_GC_NewVar"];var _PyUnstable_InterpreterFrame_GetLine=Module["_PyUnstable_InterpreterFrame_GetLine"]=wasmExports["PyUnstable_InterpreterFrame_GetLine"];var _PyGen_NewWithQualName=Module["_PyGen_NewWithQualName"]=wasmExports["PyGen_NewWithQualName"];var _PyGen_New=Module["_PyGen_New"]=wasmExports["PyGen_New"];var __PyCoro_GetAwaitableIter=Module["__PyCoro_GetAwaitableIter"]=wasmExports["_PyCoro_GetAwaitableIter"];var _PyCoro_New=Module["_PyCoro_New"]=wasmExports["PyCoro_New"];var _PyAsyncGen_New=Module["_PyAsyncGen_New"]=wasmExports["PyAsyncGen_New"];var __PyEval_EvalFrameDefault=Module["__PyEval_EvalFrameDefault"]=wasmExports["_PyEval_EvalFrameDefault"];var _PyFile_FromFd=Module["_PyFile_FromFd"]=wasmExports["PyFile_FromFd"];var _PyFile_GetLine=Module["_PyFile_GetLine"]=wasmExports["PyFile_GetLine"];var _PyFile_WriteObject=Module["_PyFile_WriteObject"]=wasmExports["PyFile_WriteObject"];var _PyFile_WriteString=Module["_PyFile_WriteString"]=wasmExports["PyFile_WriteString"];var _PyObject_AsFileDescriptor=Module["_PyObject_AsFileDescriptor"]=wasmExports["PyObject_AsFileDescriptor"];var __PyLong_FileDescriptor_Converter=Module["__PyLong_FileDescriptor_Converter"]=wasmExports["_PyLong_FileDescriptor_Converter"];var _flockfile=Module["_flockfile"]=wasmExports["flockfile"];var _getc_unlocked=Module["_getc_unlocked"]=wasmExports["getc_unlocked"];var _funlockfile=Module["_funlockfile"]=wasmExports["funlockfile"];var _Py_UniversalNewlineFgets=Module["_Py_UniversalNewlineFgets"]=wasmExports["Py_UniversalNewlineFgets"];var _PyFile_NewStdPrinter=Module["_PyFile_NewStdPrinter"]=wasmExports["PyFile_NewStdPrinter"];var _PyFile_SetOpenCodeHook=Module["_PyFile_SetOpenCodeHook"]=wasmExports["PyFile_SetOpenCodeHook"];var _Py_IsInitialized=Module["_Py_IsInitialized"]=wasmExports["Py_IsInitialized"];var _PyFile_OpenCodeObject=Module["_PyFile_OpenCodeObject"]=wasmExports["PyFile_OpenCodeObject"];var _PyFile_OpenCode=Module["_PyFile_OpenCode"]=wasmExports["PyFile_OpenCode"];var __PyUnicode_AsUTF8String=Module["__PyUnicode_AsUTF8String"]=wasmExports["_PyUnicode_AsUTF8String"];var __Py_write=Module["__Py_write"]=wasmExports["_Py_write"];var _PyFloat_GetMax=Module["_PyFloat_GetMax"]=wasmExports["PyFloat_GetMax"];var _PyFloat_GetMin=Module["_PyFloat_GetMin"]=wasmExports["PyFloat_GetMin"];var _PyFloat_GetInfo=Module["_PyFloat_GetInfo"]=wasmExports["PyFloat_GetInfo"];var _PyStructSequence_New=Module["_PyStructSequence_New"]=wasmExports["PyStructSequence_New"];var _PyStructSequence_SetItem=Module["_PyStructSequence_SetItem"]=wasmExports["PyStructSequence_SetItem"];var __PyFloat_ExactDealloc=Module["__PyFloat_ExactDealloc"]=wasmExports["_PyFloat_ExactDealloc"];var __PyLong_Sign=Module["__PyLong_Sign"]=wasmExports["_PyLong_Sign"];var _frexp=Module["_frexp"]=wasmExports["frexp"];var _modf=Module["_modf"]=wasmExports["modf"];var _PyLong_FromDouble=Module["_PyLong_FromDouble"]=wasmExports["PyLong_FromDouble"];var __PyLong_Lshift=Module["__PyLong_Lshift"]=wasmExports["_PyLong_Lshift"];var _PyFloat_Pack2=Module["_PyFloat_Pack2"]=wasmExports["PyFloat_Pack2"];var _ldexp=Module["_ldexp"]=wasmExports["ldexp"];var _PyFloat_Pack4=Module["_PyFloat_Pack4"]=wasmExports["PyFloat_Pack4"];var _PyFloat_Pack8=Module["_PyFloat_Pack8"]=wasmExports["PyFloat_Pack8"];var _PyFloat_Unpack2=Module["_PyFloat_Unpack2"]=wasmExports["PyFloat_Unpack2"];var _PyFloat_Unpack4=Module["_PyFloat_Unpack4"]=wasmExports["PyFloat_Unpack4"];var _PyFloat_Unpack8=Module["_PyFloat_Unpack8"]=wasmExports["PyFloat_Unpack8"];var _fmod=Module["_fmod"]=wasmExports["fmod"];var _PyErr_SetFromErrno=Module["_PyErr_SetFromErrno"]=wasmExports["PyErr_SetFromErrno"];var _round=Module["_round"]=wasmExports["round"];var _strtol=Module["_strtol"]=wasmExports["strtol"];var _Py_ReprEnter=Module["_Py_ReprEnter"]=wasmExports["Py_ReprEnter"];var _PyDict_Update=Module["_PyDict_Update"]=wasmExports["PyDict_Update"];var _Py_ReprLeave=Module["_Py_ReprLeave"]=wasmExports["Py_ReprLeave"];var _PyDict_Size=Module["_PyDict_Size"]=wasmExports["PyDict_Size"];var _PyFrame_GetLineNumber=Module["_PyFrame_GetLineNumber"]=wasmExports["PyFrame_GetLineNumber"];var _PyFrame_New=Module["_PyFrame_New"]=wasmExports["PyFrame_New"];var _PyFrame_GetVar=Module["_PyFrame_GetVar"]=wasmExports["PyFrame_GetVar"];var __PyUnicode_Equal=Module["__PyUnicode_Equal"]=wasmExports["_PyUnicode_Equal"];var _PyFrame_GetVarString=Module["_PyFrame_GetVarString"]=wasmExports["PyFrame_GetVarString"];var _PyFrame_FastToLocalsWithError=Module["_PyFrame_FastToLocalsWithError"]=wasmExports["PyFrame_FastToLocalsWithError"];var _PyFrame_FastToLocals=Module["_PyFrame_FastToLocals"]=wasmExports["PyFrame_FastToLocals"];var _PyFrame_LocalsToFast=Module["_PyFrame_LocalsToFast"]=wasmExports["PyFrame_LocalsToFast"];var __PyFrame_IsEntryFrame=Module["__PyFrame_IsEntryFrame"]=wasmExports["_PyFrame_IsEntryFrame"];var _PyFrame_GetCode=Module["_PyFrame_GetCode"]=wasmExports["PyFrame_GetCode"];var _PyFrame_GetBack=Module["_PyFrame_GetBack"]=wasmExports["PyFrame_GetBack"];var _PyFrame_GetLocals=Module["_PyFrame_GetLocals"]=wasmExports["PyFrame_GetLocals"];var _PyFrame_GetGlobals=Module["_PyFrame_GetGlobals"]=wasmExports["PyFrame_GetGlobals"];var _PyFrame_GetBuiltins=Module["_PyFrame_GetBuiltins"]=wasmExports["PyFrame_GetBuiltins"];var _PyFrame_GetLasti=Module["_PyFrame_GetLasti"]=wasmExports["PyFrame_GetLasti"];var _PyFrame_GetGenerator=Module["_PyFrame_GetGenerator"]=wasmExports["PyFrame_GetGenerator"];var __PyErr_SetKeyError=Module["__PyErr_SetKeyError"]=wasmExports["_PyErr_SetKeyError"];var _PyDict_DelItem=Module["_PyDict_DelItem"]=wasmExports["PyDict_DelItem"];var _PyDict_GetItem=Module["_PyDict_GetItem"]=wasmExports["PyDict_GetItem"];var _PyDict_Pop=Module["_PyDict_Pop"]=wasmExports["PyDict_Pop"];var _PyCompile_OpcodeStackEffect=Module["_PyCompile_OpcodeStackEffect"]=wasmExports["PyCompile_OpcodeStackEffect"];var _PyFunction_AddWatcher=Module["_PyFunction_AddWatcher"]=wasmExports["PyFunction_AddWatcher"];var _PyFunction_ClearWatcher=Module["_PyFunction_ClearWatcher"]=wasmExports["PyFunction_ClearWatcher"];var _PyFunction_NewWithQualName=Module["_PyFunction_NewWithQualName"]=wasmExports["PyFunction_NewWithQualName"];var __PyFunction_SetVersion=Module["__PyFunction_SetVersion"]=wasmExports["_PyFunction_SetVersion"];var _PyFunction_New=Module["_PyFunction_New"]=wasmExports["PyFunction_New"];var _PyFunction_GetCode=Module["_PyFunction_GetCode"]=wasmExports["PyFunction_GetCode"];var _PyFunction_GetGlobals=Module["_PyFunction_GetGlobals"]=wasmExports["PyFunction_GetGlobals"];var _PyFunction_GetModule=Module["_PyFunction_GetModule"]=wasmExports["PyFunction_GetModule"];var _PyFunction_GetDefaults=Module["_PyFunction_GetDefaults"]=wasmExports["PyFunction_GetDefaults"];var _PyFunction_SetDefaults=Module["_PyFunction_SetDefaults"]=wasmExports["PyFunction_SetDefaults"];var _PyFunction_SetVectorcall=Module["_PyFunction_SetVectorcall"]=wasmExports["PyFunction_SetVectorcall"];var _PyFunction_GetKwDefaults=Module["_PyFunction_GetKwDefaults"]=wasmExports["PyFunction_GetKwDefaults"];var _PyFunction_SetKwDefaults=Module["_PyFunction_SetKwDefaults"]=wasmExports["PyFunction_SetKwDefaults"];var _PyFunction_GetClosure=Module["_PyFunction_GetClosure"]=wasmExports["PyFunction_GetClosure"];var _PyFunction_SetClosure=Module["_PyFunction_SetClosure"]=wasmExports["PyFunction_SetClosure"];var _PyFunction_GetAnnotations=Module["_PyFunction_GetAnnotations"]=wasmExports["PyFunction_GetAnnotations"];var _PyFunction_SetAnnotations=Module["_PyFunction_SetAnnotations"]=wasmExports["PyFunction_SetAnnotations"];var _PyClassMethod_New=Module["_PyClassMethod_New"]=wasmExports["PyClassMethod_New"];var _PyStaticMethod_New=Module["_PyStaticMethod_New"]=wasmExports["PyStaticMethod_New"];var _PyCallIter_New=Module["_PyCallIter_New"]=wasmExports["PyCallIter_New"];var _PyList_GetItemRef=Module["_PyList_GetItemRef"]=wasmExports["PyList_GetItemRef"];var _PyList_SetItem=Module["_PyList_SetItem"]=wasmExports["PyList_SetItem"];var _PyList_Insert=Module["_PyList_Insert"]=wasmExports["PyList_Insert"];var __PyList_AppendTakeRefListResize=Module["__PyList_AppendTakeRefListResize"]=wasmExports["_PyList_AppendTakeRefListResize"];var _PyList_GetSlice=Module["_PyList_GetSlice"]=wasmExports["PyList_GetSlice"];var __PySet_NextEntryRef=Module["__PySet_NextEntryRef"]=wasmExports["_PySet_NextEntryRef"];var _PyList_Clear=Module["_PyList_Clear"]=wasmExports["PyList_Clear"];var __PyList_FromArraySteal=Module["__PyList_FromArraySteal"]=wasmExports["_PyList_FromArraySteal"];var __PyUnicodeWriter_WriteChar=Module["__PyUnicodeWriter_WriteChar"]=wasmExports["_PyUnicodeWriter_WriteChar"];var __PyEval_SliceIndexNotNone=Module["__PyEval_SliceIndexNotNone"]=wasmExports["_PyEval_SliceIndexNotNone"];var _PyObject_HashNotImplemented=Module["_PyObject_HashNotImplemented"]=wasmExports["PyObject_HashNotImplemented"];var __PyLong_New=Module["__PyLong_New"]=wasmExports["_PyLong_New"];var __PyLong_FromDigits=Module["__PyLong_FromDigits"]=wasmExports["_PyLong_FromDigits"];var _PyLong_FromUnsignedLong=Module["_PyLong_FromUnsignedLong"]=wasmExports["PyLong_FromUnsignedLong"];var _PyLong_FromUnsignedLongLong=Module["_PyLong_FromUnsignedLongLong"]=wasmExports["PyLong_FromUnsignedLongLong"];var _PyLong_AsUnsignedLong=Module["_PyLong_AsUnsignedLong"]=wasmExports["PyLong_AsUnsignedLong"];var _PyLong_AsSize_t=Module["_PyLong_AsSize_t"]=wasmExports["PyLong_AsSize_t"];var _PyLong_AsUnsignedLongMask=Module["_PyLong_AsUnsignedLongMask"]=wasmExports["PyLong_AsUnsignedLongMask"];var __PyLong_FromByteArray=Module["__PyLong_FromByteArray"]=wasmExports["_PyLong_FromByteArray"];var _PyLong_AsNativeBytes=Module["_PyLong_AsNativeBytes"]=wasmExports["PyLong_AsNativeBytes"];var _PyLong_FromNativeBytes=Module["_PyLong_FromNativeBytes"]=wasmExports["PyLong_FromNativeBytes"];var _PyLong_FromUnsignedNativeBytes=Module["_PyLong_FromUnsignedNativeBytes"]=wasmExports["PyLong_FromUnsignedNativeBytes"];var _PyLong_AsVoidPtr=Module["_PyLong_AsVoidPtr"]=wasmExports["PyLong_AsVoidPtr"];var _PyLong_FromLongLong=Module["_PyLong_FromLongLong"]=wasmExports["PyLong_FromLongLong"];var _PyLong_AsLongLong=Module["_PyLong_AsLongLong"]=wasmExports["PyLong_AsLongLong"];var _PyLong_AsUnsignedLongLong=Module["_PyLong_AsUnsignedLongLong"]=wasmExports["PyLong_AsUnsignedLongLong"];var _PyLong_AsUnsignedLongLongMask=Module["_PyLong_AsUnsignedLongLongMask"]=wasmExports["PyLong_AsUnsignedLongLongMask"];var _PyLong_AsLongLongAndOverflow=Module["_PyLong_AsLongLongAndOverflow"]=wasmExports["PyLong_AsLongLongAndOverflow"];var __PyLong_UnsignedShort_Converter=Module["__PyLong_UnsignedShort_Converter"]=wasmExports["_PyLong_UnsignedShort_Converter"];var __PyLong_UnsignedInt_Converter=Module["__PyLong_UnsignedInt_Converter"]=wasmExports["_PyLong_UnsignedInt_Converter"];var __PyLong_UnsignedLong_Converter=Module["__PyLong_UnsignedLong_Converter"]=wasmExports["_PyLong_UnsignedLong_Converter"];var __PyLong_UnsignedLongLong_Converter=Module["__PyLong_UnsignedLongLong_Converter"]=wasmExports["_PyLong_UnsignedLongLong_Converter"];var __PyLong_Size_t_Converter=Module["__PyLong_Size_t_Converter"]=wasmExports["_PyLong_Size_t_Converter"];var __PyUnicodeWriter_PrepareInternal=Module["__PyUnicodeWriter_PrepareInternal"]=wasmExports["_PyUnicodeWriter_PrepareInternal"];var __PyLong_Frexp=Module["__PyLong_Frexp"]=wasmExports["_PyLong_Frexp"];var __PyLong_Add=Module["__PyLong_Add"]=wasmExports["_PyLong_Add"];var __PyLong_Subtract=Module["__PyLong_Subtract"]=wasmExports["_PyLong_Subtract"];var __PyLong_Multiply=Module["__PyLong_Multiply"]=wasmExports["_PyLong_Multiply"];var __PyLong_Rshift=Module["__PyLong_Rshift"]=wasmExports["_PyLong_Rshift"];var __PyLong_GCD=Module["__PyLong_GCD"]=wasmExports["_PyLong_GCD"];var __PyLong_DivmodNear=Module["__PyLong_DivmodNear"]=wasmExports["_PyLong_DivmodNear"];var _PyLong_GetInfo=Module["_PyLong_GetInfo"]=wasmExports["PyLong_GetInfo"];var _PyUnstable_Long_IsCompact=Module["_PyUnstable_Long_IsCompact"]=wasmExports["PyUnstable_Long_IsCompact"];var _PyUnstable_Long_CompactValue=Module["_PyUnstable_Long_CompactValue"]=wasmExports["PyUnstable_Long_CompactValue"];var _PyObject_Bytes=Module["_PyObject_Bytes"]=wasmExports["PyObject_Bytes"];var __PyObject_AssertFailed=Module["__PyObject_AssertFailed"]=wasmExports["_PyObject_AssertFailed"];var _PyObject_IS_GC=Module["_PyObject_IS_GC"]=wasmExports["PyObject_IS_GC"];var __PyDict_NewPresized=Module["__PyDict_NewPresized"]=wasmExports["_PyDict_NewPresized"];var __PyDict_GetItemRef_KnownHash_LockHeld=Module["__PyDict_GetItemRef_KnownHash_LockHeld"]=wasmExports["_PyDict_GetItemRef_KnownHash_LockHeld"];var __PyDict_GetItemStringWithError=Module["__PyDict_GetItemStringWithError"]=wasmExports["_PyDict_GetItemStringWithError"];var __PyDict_LoadGlobal=Module["__PyDict_LoadGlobal"]=wasmExports["_PyDict_LoadGlobal"];var __PyDict_SetItem_Take2=Module["__PyDict_SetItem_Take2"]=wasmExports["_PyDict_SetItem_Take2"];var __PyDict_SetItem_KnownHash_LockHeld=Module["__PyDict_SetItem_KnownHash_LockHeld"]=wasmExports["_PyDict_SetItem_KnownHash_LockHeld"];var __PyDict_SetItem_KnownHash=Module["__PyDict_SetItem_KnownHash"]=wasmExports["_PyDict_SetItem_KnownHash"];var __PyDict_DelItem_KnownHash=Module["__PyDict_DelItem_KnownHash"]=wasmExports["_PyDict_DelItem_KnownHash"];var __PyDict_DelItemIf=Module["__PyDict_DelItemIf"]=wasmExports["_PyDict_DelItemIf"];var _PyDict_Clear=Module["_PyDict_Clear"]=wasmExports["PyDict_Clear"];var _PyDict_PopString=Module["_PyDict_PopString"]=wasmExports["PyDict_PopString"];var __PyDict_Pop=Module["__PyDict_Pop"]=wasmExports["_PyDict_Pop"];var _PyDict_MergeFromSeq2=Module["_PyDict_MergeFromSeq2"]=wasmExports["PyDict_MergeFromSeq2"];var _PyDict_Merge=Module["_PyDict_Merge"]=wasmExports["PyDict_Merge"];var __PyDict_MergeEx=Module["__PyDict_MergeEx"]=wasmExports["_PyDict_MergeEx"];var _PyDict_SetDefaultRef=Module["_PyDict_SetDefaultRef"]=wasmExports["PyDict_SetDefaultRef"];var _PyDict_SetDefault=Module["_PyDict_SetDefault"]=wasmExports["PyDict_SetDefault"];var __PyDict_SizeOf=Module["__PyDict_SizeOf"]=wasmExports["_PyDict_SizeOf"];var _PyDict_ContainsString=Module["_PyDict_ContainsString"]=wasmExports["PyDict_ContainsString"];var _PyDict_GetItemString=Module["_PyDict_GetItemString"]=wasmExports["PyDict_GetItemString"];var _PyDict_GetItemStringRef=Module["_PyDict_GetItemStringRef"]=wasmExports["PyDict_GetItemStringRef"];var _PyDict_DelItemString=Module["_PyDict_DelItemString"]=wasmExports["PyDict_DelItemString"];var _PyObject_VisitManagedDict=Module["_PyObject_VisitManagedDict"]=wasmExports["PyObject_VisitManagedDict"];var __PyObject_SetManagedDict=Module["__PyObject_SetManagedDict"]=wasmExports["_PyObject_SetManagedDict"];var _PyObject_ClearManagedDict=Module["_PyObject_ClearManagedDict"]=wasmExports["PyObject_ClearManagedDict"];var _PyDict_Watch=Module["_PyDict_Watch"]=wasmExports["PyDict_Watch"];var _PyDict_Unwatch=Module["_PyDict_Unwatch"]=wasmExports["PyDict_Unwatch"];var _PyDict_AddWatcher=Module["_PyDict_AddWatcher"]=wasmExports["PyDict_AddWatcher"];var _PyDict_ClearWatcher=Module["_PyDict_ClearWatcher"]=wasmExports["PyDict_ClearWatcher"];var _PyArg_ValidateKeywordArguments=Module["_PyArg_ValidateKeywordArguments"]=wasmExports["PyArg_ValidateKeywordArguments"];var _PyODict_New=Module["_PyODict_New"]=wasmExports["PyODict_New"];var _PyODict_SetItem=Module["_PyODict_SetItem"]=wasmExports["PyODict_SetItem"];var __PyErr_ChainExceptions1=Module["__PyErr_ChainExceptions1"]=wasmExports["_PyErr_ChainExceptions1"];var _PyODict_DelItem=Module["_PyODict_DelItem"]=wasmExports["PyODict_DelItem"];var _PyMemoryView_FromMemory=Module["_PyMemoryView_FromMemory"]=wasmExports["PyMemoryView_FromMemory"];var _PyMemoryView_FromBuffer=Module["_PyMemoryView_FromBuffer"]=wasmExports["PyMemoryView_FromBuffer"];var _PyMemoryView_GetContiguous=Module["_PyMemoryView_GetContiguous"]=wasmExports["PyMemoryView_GetContiguous"];var _PyUnicode_AsASCIIString=Module["_PyUnicode_AsASCIIString"]=wasmExports["PyUnicode_AsASCIIString"];var _PyCFunction_New=Module["_PyCFunction_New"]=wasmExports["PyCFunction_New"];var _PyCFunction_NewEx=Module["_PyCFunction_NewEx"]=wasmExports["PyCFunction_NewEx"];var _PyCFunction_GetFunction=Module["_PyCFunction_GetFunction"]=wasmExports["PyCFunction_GetFunction"];var _PyCFunction_GetSelf=Module["_PyCFunction_GetSelf"]=wasmExports["PyCFunction_GetSelf"];var _PyCFunction_GetFlags=Module["_PyCFunction_GetFlags"]=wasmExports["PyCFunction_GetFlags"];var _PyModuleDef_Init=Module["_PyModuleDef_Init"]=wasmExports["PyModuleDef_Init"];var _PyModule_NewObject=Module["_PyModule_NewObject"]=wasmExports["PyModule_NewObject"];var _PyModule_New=Module["_PyModule_New"]=wasmExports["PyModule_New"];var _PyModule_SetDocString=Module["_PyModule_SetDocString"]=wasmExports["PyModule_SetDocString"];var _PyModule_FromDefAndSpec2=Module["_PyModule_FromDefAndSpec2"]=wasmExports["PyModule_FromDefAndSpec2"];var _PyModule_ExecDef=Module["_PyModule_ExecDef"]=wasmExports["PyModule_ExecDef"];var _PyModule_GetName=Module["_PyModule_GetName"]=wasmExports["PyModule_GetName"];var _PyModule_GetFilenameObject=Module["_PyModule_GetFilenameObject"]=wasmExports["PyModule_GetFilenameObject"];var _PyModule_GetFilename=Module["_PyModule_GetFilename"]=wasmExports["PyModule_GetFilename"];var _PyModule_GetDef=Module["_PyModule_GetDef"]=wasmExports["PyModule_GetDef"];var _PyModule_GetState=Module["_PyModule_GetState"]=wasmExports["PyModule_GetState"];var _PyUnicode_AsWideChar=Module["_PyUnicode_AsWideChar"]=wasmExports["PyUnicode_AsWideChar"];var _wcsrchr=Module["_wcsrchr"]=wasmExports["wcsrchr"];var _wcscmp=Module["_wcscmp"]=wasmExports["wcscmp"];var _PySys_FormatStderr=Module["_PySys_FormatStderr"]=wasmExports["PySys_FormatStderr"];var _PyUnicode_Join=Module["_PyUnicode_Join"]=wasmExports["PyUnicode_Join"];var __PyNamespace_New=Module["__PyNamespace_New"]=wasmExports["_PyNamespace_New"];var __PyArg_NoPositional=Module["__PyArg_NoPositional"]=wasmExports["_PyArg_NoPositional"];var __PyUnicode_CheckConsistency=Module["__PyUnicode_CheckConsistency"]=wasmExports["_PyUnicode_CheckConsistency"];var __PyObject_IsFreed=Module["__PyObject_IsFreed"]=wasmExports["_PyObject_IsFreed"];var _fwrite=Module["_fwrite"]=wasmExports["fwrite"];var _fputc=Module["_fputc"]=wasmExports["fputc"];var __PyObject_Dump=Module["__PyObject_Dump"]=wasmExports["_PyObject_Dump"];var _Py_IncRef=Module["_Py_IncRef"]=wasmExports["Py_IncRef"];var _Py_DecRef=Module["_Py_DecRef"]=wasmExports["Py_DecRef"];var __Py_IncRef=Module["__Py_IncRef"]=wasmExports["_Py_IncRef"];var __Py_DecRef=Module["__Py_DecRef"]=wasmExports["_Py_DecRef"];var _PyObject_Init=Module["_PyObject_Init"]=wasmExports["PyObject_Init"];var _PyObject_InitVar=Module["_PyObject_InitVar"]=wasmExports["PyObject_InitVar"];var _PyObject_CallFinalizer=Module["_PyObject_CallFinalizer"]=wasmExports["PyObject_CallFinalizer"];var __Py_ResurrectReference=Module["__Py_ResurrectReference"]=wasmExports["_Py_ResurrectReference"];var _PyObject_Print=Module["_PyObject_Print"]=wasmExports["PyObject_Print"];var _ferror=Module["_ferror"]=wasmExports["ferror"];var __Py_BreakPoint=Module["__Py_BreakPoint"]=wasmExports["_Py_BreakPoint"];var _PyGILState_Ensure=Module["_PyGILState_Ensure"]=wasmExports["PyGILState_Ensure"];var _PyGILState_Release=Module["_PyGILState_Release"]=wasmExports["PyGILState_Release"];var _PyUnicode_DecodeASCII=Module["_PyUnicode_DecodeASCII"]=wasmExports["PyUnicode_DecodeASCII"];var _PyObject_HasAttrStringWithError=Module["_PyObject_HasAttrStringWithError"]=wasmExports["PyObject_HasAttrStringWithError"];var _PyObject_GetOptionalAttrString=Module["_PyObject_GetOptionalAttrString"]=wasmExports["PyObject_GetOptionalAttrString"];var _PyObject_HasAttrString=Module["_PyObject_HasAttrString"]=wasmExports["PyObject_HasAttrString"];var _PyObject_DelAttrString=Module["_PyObject_DelAttrString"]=wasmExports["PyObject_DelAttrString"];var __PyObject_GetDictPtr=Module["__PyObject_GetDictPtr"]=wasmExports["_PyObject_GetDictPtr"];var __PyObject_GenericSetAttrWithDict=Module["__PyObject_GenericSetAttrWithDict"]=wasmExports["_PyObject_GenericSetAttrWithDict"];var _PyObject_Not=Module["_PyObject_Not"]=wasmExports["PyObject_Not"];var _PyThreadState_GetDict=Module["_PyThreadState_GetDict"]=wasmExports["PyThreadState_GetDict"];var _PyObject_GET_WEAKREFS_LISTPTR=Module["_PyObject_GET_WEAKREFS_LISTPTR"]=wasmExports["PyObject_GET_WEAKREFS_LISTPTR"];var _Py_NewRef=Module["_Py_NewRef"]=wasmExports["Py_NewRef"];var _Py_XNewRef=Module["_Py_XNewRef"]=wasmExports["Py_XNewRef"];var _Py_Is=Module["_Py_Is"]=wasmExports["Py_Is"];var _Py_IsNone=Module["_Py_IsNone"]=wasmExports["Py_IsNone"];var _Py_IsTrue=Module["_Py_IsTrue"]=wasmExports["Py_IsTrue"];var _Py_IsFalse=Module["_Py_IsFalse"]=wasmExports["Py_IsFalse"];var __Py_SetRefcnt=Module["__Py_SetRefcnt"]=wasmExports["_Py_SetRefcnt"];var _PyRefTracer_SetTracer=Module["_PyRefTracer_SetTracer"]=wasmExports["PyRefTracer_SetTracer"];var _PyRefTracer_GetTracer=Module["_PyRefTracer_GetTracer"]=wasmExports["PyRefTracer_GetTracer"];var _Py_GetConstant=Module["_Py_GetConstant"]=wasmExports["Py_GetConstant"];var _Py_GetConstantBorrowed=Module["_Py_GetConstantBorrowed"]=wasmExports["Py_GetConstantBorrowed"];var _sleep=Module["_sleep"]=wasmExports["sleep"];var _abort=Module["_abort"]=wasmExports["abort"];var _getenv=Module["_getenv"]=wasmExports["getenv"];var _sbrk=Module["_sbrk"]=wasmExports["sbrk"];var _clock_gettime=Module["_clock_gettime"]=wasmExports["clock_gettime"];var _vsnprintf=Module["_vsnprintf"]=wasmExports["vsnprintf"];var _atexit=Module["_atexit"]=wasmExports["atexit"];var _strstr=Module["_strstr"]=wasmExports["strstr"];var _snprintf=Module["_snprintf"]=wasmExports["snprintf"];var _calloc=wasmExports["calloc"];var _realloc=wasmExports["realloc"];var __PyMem_GetCurrentAllocatorName=Module["__PyMem_GetCurrentAllocatorName"]=wasmExports["_PyMem_GetCurrentAllocatorName"];var _PyMem_SetupDebugHooks=Module["_PyMem_SetupDebugHooks"]=wasmExports["PyMem_SetupDebugHooks"];var _PyMem_GetAllocator=Module["_PyMem_GetAllocator"]=wasmExports["PyMem_GetAllocator"];var _PyMem_SetAllocator=Module["_PyMem_SetAllocator"]=wasmExports["PyMem_SetAllocator"];var _PyObject_GetArenaAllocator=Module["_PyObject_GetArenaAllocator"]=wasmExports["PyObject_GetArenaAllocator"];var _PyObject_SetArenaAllocator=Module["_PyObject_SetArenaAllocator"]=wasmExports["PyObject_SetArenaAllocator"];var _PyMem_RawMalloc=Module["_PyMem_RawMalloc"]=wasmExports["PyMem_RawMalloc"];var _PyMem_RawCalloc=Module["_PyMem_RawCalloc"]=wasmExports["PyMem_RawCalloc"];var _wcslen=Module["_wcslen"]=wasmExports["wcslen"];var __PyMem_Strdup=Module["__PyMem_Strdup"]=wasmExports["_PyMem_Strdup"];var _PyPickleBuffer_FromObject=Module["_PyPickleBuffer_FromObject"]=wasmExports["PyPickleBuffer_FromObject"];var _PyPickleBuffer_GetBuffer=Module["_PyPickleBuffer_GetBuffer"]=wasmExports["PyPickleBuffer_GetBuffer"];var _PyPickleBuffer_Release=Module["_PyPickleBuffer_Release"]=wasmExports["PyPickleBuffer_Release"];var __PySlice_GetLongIndices=Module["__PySlice_GetLongIndices"]=wasmExports["_PySlice_GetLongIndices"];var __PySet_Contains=Module["__PySet_Contains"]=wasmExports["_PySet_Contains"];var _PySet_Size=Module["_PySet_Size"]=wasmExports["PySet_Size"];var _PySet_Clear=Module["_PySet_Clear"]=wasmExports["PySet_Clear"];var _PySet_Pop=Module["_PySet_Pop"]=wasmExports["PySet_Pop"];var _PySlice_New=Module["_PySlice_New"]=wasmExports["PySlice_New"];var _PySlice_GetIndices=Module["_PySlice_GetIndices"]=wasmExports["PySlice_GetIndices"];var _PySlice_GetIndicesEx=Module["_PySlice_GetIndicesEx"]=wasmExports["PySlice_GetIndicesEx"];var _PyStructSequence_GetItem=Module["_PyStructSequence_GetItem"]=wasmExports["PyStructSequence_GetItem"];var _PyStructSequence_InitType2=Module["_PyStructSequence_InitType2"]=wasmExports["PyStructSequence_InitType2"];var _PyStructSequence_InitType=Module["_PyStructSequence_InitType"]=wasmExports["PyStructSequence_InitType"];var __PyStructSequence_NewType=Module["__PyStructSequence_NewType"]=wasmExports["_PyStructSequence_NewType"];var _PyStructSequence_NewType=Module["_PyStructSequence_NewType"]=wasmExports["PyStructSequence_NewType"];var _PyTuple_SetItem=Module["_PyTuple_SetItem"]=wasmExports["PyTuple_SetItem"];var __PyTuple_FromArraySteal=Module["__PyTuple_FromArraySteal"]=wasmExports["_PyTuple_FromArraySteal"];var __PyObject_GC_Resize=Module["__PyObject_GC_Resize"]=wasmExports["_PyObject_GC_Resize"];var _PyType_GetDict=Module["_PyType_GetDict"]=wasmExports["PyType_GetDict"];var _strrchr=Module["_strrchr"]=wasmExports["strrchr"];var _PyType_ClearCache=Module["_PyType_ClearCache"]=wasmExports["PyType_ClearCache"];var _PyType_AddWatcher=Module["_PyType_AddWatcher"]=wasmExports["PyType_AddWatcher"];var _PyType_ClearWatcher=Module["_PyType_ClearWatcher"]=wasmExports["PyType_ClearWatcher"];var _PyType_Watch=Module["_PyType_Watch"]=wasmExports["PyType_Watch"];var _PyType_Unwatch=Module["_PyType_Unwatch"]=wasmExports["PyType_Unwatch"];var _PyType_Modified=Module["_PyType_Modified"]=wasmExports["PyType_Modified"];var _PyUnstable_Type_AssignVersionTag=Module["_PyUnstable_Type_AssignVersionTag"]=wasmExports["PyUnstable_Type_AssignVersionTag"];var _PyType_GetFullyQualifiedName=Module["_PyType_GetFullyQualifiedName"]=wasmExports["PyType_GetFullyQualifiedName"];var _PyType_GetFlags=Module["_PyType_GetFlags"]=wasmExports["PyType_GetFlags"];var _PyType_SUPPORTS_WEAKREFS=Module["_PyType_SUPPORTS_WEAKREFS"]=wasmExports["PyType_SUPPORTS_WEAKREFS"];var _PyType_FromMetaclass=Module["_PyType_FromMetaclass"]=wasmExports["PyType_FromMetaclass"];var _PyType_FromModuleAndSpec=Module["_PyType_FromModuleAndSpec"]=wasmExports["PyType_FromModuleAndSpec"];var _PyType_FromSpec=Module["_PyType_FromSpec"]=wasmExports["PyType_FromSpec"];var _PyType_GetName=Module["_PyType_GetName"]=wasmExports["PyType_GetName"];var _PyType_GetModuleName=Module["_PyType_GetModuleName"]=wasmExports["PyType_GetModuleName"];var _PyType_GetSlot=Module["_PyType_GetSlot"]=wasmExports["PyType_GetSlot"];var _PyType_GetModule=Module["_PyType_GetModule"]=wasmExports["PyType_GetModule"];var _PyType_GetModuleState=Module["_PyType_GetModuleState"]=wasmExports["PyType_GetModuleState"];var _PyType_GetModuleByDef=Module["_PyType_GetModuleByDef"]=wasmExports["PyType_GetModuleByDef"];var __PyType_GetModuleByDef2=Module["__PyType_GetModuleByDef2"]=wasmExports["_PyType_GetModuleByDef2"];var _PyObject_GetTypeData=Module["_PyObject_GetTypeData"]=wasmExports["PyObject_GetTypeData"];var _PyType_GetTypeDataSize=Module["_PyType_GetTypeDataSize"]=wasmExports["PyType_GetTypeDataSize"];var _PyObject_GetItemData=Module["_PyObject_GetItemData"]=wasmExports["PyObject_GetItemData"];var __PyType_Lookup=Module["__PyType_Lookup"]=wasmExports["_PyType_Lookup"];var _PyUnicode_IsIdentifier=Module["_PyUnicode_IsIdentifier"]=wasmExports["PyUnicode_IsIdentifier"];var _PyEval_GetGlobals=Module["_PyEval_GetGlobals"]=wasmExports["PyEval_GetGlobals"];var __PyStaticType_InitForExtension=Module["__PyStaticType_InitForExtension"]=wasmExports["_PyStaticType_InitForExtension"];var __PySuper_Lookup=Module["__PySuper_Lookup"]=wasmExports["_PySuper_Lookup"];var _PyWeakref_NewRef=Module["_PyWeakref_NewRef"]=wasmExports["PyWeakref_NewRef"];var _PyImport_GetModule=Module["_PyImport_GetModule"]=wasmExports["PyImport_GetModule"];var _PyImport_Import=Module["_PyImport_Import"]=wasmExports["PyImport_Import"];var __PyArg_UnpackKeywordsWithVararg=Module["__PyArg_UnpackKeywordsWithVararg"]=wasmExports["_PyArg_UnpackKeywordsWithVararg"];var __Py_hashtable_len=Module["__Py_hashtable_len"]=wasmExports["_Py_hashtable_len"];var __Py_GetErrorHandler=Module["__Py_GetErrorHandler"]=wasmExports["_Py_GetErrorHandler"];var _PyUnicode_CopyCharacters=Module["_PyUnicode_CopyCharacters"]=wasmExports["PyUnicode_CopyCharacters"];var _PyUnicode_Resize=Module["_PyUnicode_Resize"]=wasmExports["PyUnicode_Resize"];var _PyUnicode_FromWideChar=Module["_PyUnicode_FromWideChar"]=wasmExports["PyUnicode_FromWideChar"];var _PyUnicode_FromKindAndData=Module["_PyUnicode_FromKindAndData"]=wasmExports["PyUnicode_FromKindAndData"];var _PyUnicode_AsUCS4=Module["_PyUnicode_AsUCS4"]=wasmExports["PyUnicode_AsUCS4"];var _PyUnicode_AsUCS4Copy=Module["_PyUnicode_AsUCS4Copy"]=wasmExports["PyUnicode_AsUCS4Copy"];var _PyUnicode_Fill=Module["_PyUnicode_Fill"]=wasmExports["PyUnicode_Fill"];var _PyUnicode_AsWideCharString=Module["_PyUnicode_AsWideCharString"]=wasmExports["PyUnicode_AsWideCharString"];var _PyUnicode_FromOrdinal=Module["_PyUnicode_FromOrdinal"]=wasmExports["PyUnicode_FromOrdinal"];var _PyUnicode_FromObject=Module["_PyUnicode_FromObject"]=wasmExports["PyUnicode_FromObject"];var _PyCodec_LookupError=Module["_PyCodec_LookupError"]=wasmExports["PyCodec_LookupError"];var _PyUnicode_DecodeUTF16Stateful=Module["_PyUnicode_DecodeUTF16Stateful"]=wasmExports["PyUnicode_DecodeUTF16Stateful"];var _PyUnicode_DecodeUTF32Stateful=Module["_PyUnicode_DecodeUTF32Stateful"]=wasmExports["PyUnicode_DecodeUTF32Stateful"];var _PyUnicode_DecodeUTF16=Module["_PyUnicode_DecodeUTF16"]=wasmExports["PyUnicode_DecodeUTF16"];var _PyUnicode_DecodeUTF32=Module["_PyUnicode_DecodeUTF32"]=wasmExports["PyUnicode_DecodeUTF32"];var _PyUnicode_AsDecodedObject=Module["_PyUnicode_AsDecodedObject"]=wasmExports["PyUnicode_AsDecodedObject"];var _PyCodec_Decode=Module["_PyCodec_Decode"]=wasmExports["PyCodec_Decode"];var _PyUnicode_AsDecodedUnicode=Module["_PyUnicode_AsDecodedUnicode"]=wasmExports["PyUnicode_AsDecodedUnicode"];var _PyUnicode_AsEncodedObject=Module["_PyUnicode_AsEncodedObject"]=wasmExports["PyUnicode_AsEncodedObject"];var _PyCodec_Encode=Module["_PyCodec_Encode"]=wasmExports["PyCodec_Encode"];var _PyUnicode_EncodeLocale=Module["_PyUnicode_EncodeLocale"]=wasmExports["PyUnicode_EncodeLocale"];var __Py_EncodeLocaleEx=Module["__Py_EncodeLocaleEx"]=wasmExports["_Py_EncodeLocaleEx"];var _PyCodec_StrictErrors=Module["_PyCodec_StrictErrors"]=wasmExports["PyCodec_StrictErrors"];var _PyUnicode_EncodeFSDefault=Module["_PyUnicode_EncodeFSDefault"]=wasmExports["PyUnicode_EncodeFSDefault"];var __PyUnicode_EncodeUTF16=Module["__PyUnicode_EncodeUTF16"]=wasmExports["_PyUnicode_EncodeUTF16"];var __PyUnicode_EncodeUTF32=Module["__PyUnicode_EncodeUTF32"]=wasmExports["_PyUnicode_EncodeUTF32"];var _PyUnicode_AsEncodedUnicode=Module["_PyUnicode_AsEncodedUnicode"]=wasmExports["PyUnicode_AsEncodedUnicode"];var _PyUnicode_DecodeLocaleAndSize=Module["_PyUnicode_DecodeLocaleAndSize"]=wasmExports["PyUnicode_DecodeLocaleAndSize"];var __Py_DecodeLocaleEx=Module["__Py_DecodeLocaleEx"]=wasmExports["_Py_DecodeLocaleEx"];var _PyUnicode_DecodeLocale=Module["_PyUnicode_DecodeLocale"]=wasmExports["PyUnicode_DecodeLocale"];var _PyUnicode_DecodeFSDefaultAndSize=Module["_PyUnicode_DecodeFSDefaultAndSize"]=wasmExports["PyUnicode_DecodeFSDefaultAndSize"];var _PyUnicode_FSConverter=Module["_PyUnicode_FSConverter"]=wasmExports["PyUnicode_FSConverter"];var _PyOS_FSPath=Module["_PyOS_FSPath"]=wasmExports["PyOS_FSPath"];var _PyUnicode_FSDecoder=Module["_PyUnicode_FSDecoder"]=wasmExports["PyUnicode_FSDecoder"];var _wmemchr=Module["_wmemchr"]=wasmExports["wmemchr"];var __PyUnicode_AsUTF8NoNUL=Module["__PyUnicode_AsUTF8NoNUL"]=wasmExports["_PyUnicode_AsUTF8NoNUL"];var _PyUnicode_GetSize=Module["_PyUnicode_GetSize"]=wasmExports["PyUnicode_GetSize"];var _PyUnicode_GetLength=Module["_PyUnicode_GetLength"]=wasmExports["PyUnicode_GetLength"];var _PyUnicode_WriteChar=Module["_PyUnicode_WriteChar"]=wasmExports["PyUnicode_WriteChar"];var _PyUnicode_DecodeUTF7=Module["_PyUnicode_DecodeUTF7"]=wasmExports["PyUnicode_DecodeUTF7"];var _PyUnicode_DecodeUTF7Stateful=Module["_PyUnicode_DecodeUTF7Stateful"]=wasmExports["PyUnicode_DecodeUTF7Stateful"];var _PyUnicode_AsUTF32String=Module["_PyUnicode_AsUTF32String"]=wasmExports["PyUnicode_AsUTF32String"];var _PyUnicode_AsUTF16String=Module["_PyUnicode_AsUTF16String"]=wasmExports["PyUnicode_AsUTF16String"];var _PyUnicode_DecodeUnicodeEscape=Module["_PyUnicode_DecodeUnicodeEscape"]=wasmExports["PyUnicode_DecodeUnicodeEscape"];var _PyUnicode_AsUnicodeEscapeString=Module["_PyUnicode_AsUnicodeEscapeString"]=wasmExports["PyUnicode_AsUnicodeEscapeString"];var _PyUnicode_DecodeRawUnicodeEscape=Module["_PyUnicode_DecodeRawUnicodeEscape"]=wasmExports["PyUnicode_DecodeRawUnicodeEscape"];var _PyUnicode_AsRawUnicodeEscapeString=Module["_PyUnicode_AsRawUnicodeEscapeString"]=wasmExports["PyUnicode_AsRawUnicodeEscapeString"];var _PyUnicode_AsLatin1String=Module["_PyUnicode_AsLatin1String"]=wasmExports["PyUnicode_AsLatin1String"];var __PyUnicodeWriter_PrepareKindInternal=Module["__PyUnicodeWriter_PrepareKindInternal"]=wasmExports["_PyUnicodeWriter_PrepareKindInternal"];var _PyUnicode_DecodeCharmap=Module["_PyUnicode_DecodeCharmap"]=wasmExports["PyUnicode_DecodeCharmap"];var _PyUnicode_BuildEncodingMap=Module["_PyUnicode_BuildEncodingMap"]=wasmExports["PyUnicode_BuildEncodingMap"];var _PyUnicode_AsCharmapString=Module["_PyUnicode_AsCharmapString"]=wasmExports["PyUnicode_AsCharmapString"];var _PyUnicode_Translate=Module["_PyUnicode_Translate"]=wasmExports["PyUnicode_Translate"];var __PyUnicode_IsWhitespace=Module["__PyUnicode_IsWhitespace"]=wasmExports["_PyUnicode_IsWhitespace"];var __PyUnicode_ToDecimalDigit=Module["__PyUnicode_ToDecimalDigit"]=wasmExports["_PyUnicode_ToDecimalDigit"];var _PyUnicode_Count=Module["_PyUnicode_Count"]=wasmExports["PyUnicode_Count"];var _PyUnicode_Find=Module["_PyUnicode_Find"]=wasmExports["PyUnicode_Find"];var _PyUnicode_FindChar=Module["_PyUnicode_FindChar"]=wasmExports["PyUnicode_FindChar"];var _PyUnicode_Tailmatch=Module["_PyUnicode_Tailmatch"]=wasmExports["PyUnicode_Tailmatch"];var __PyUnicode_JoinArray=Module["__PyUnicode_JoinArray"]=wasmExports["_PyUnicode_JoinArray"];var _PyUnicode_Splitlines=Module["_PyUnicode_Splitlines"]=wasmExports["PyUnicode_Splitlines"];var __PyUnicode_IsLinebreak=Module["__PyUnicode_IsLinebreak"]=wasmExports["_PyUnicode_IsLinebreak"];var _wmemcmp=Module["_wmemcmp"]=wasmExports["wmemcmp"];var _PyUnicode_EqualToUTF8=Module["_PyUnicode_EqualToUTF8"]=wasmExports["PyUnicode_EqualToUTF8"];var _PyUnicode_EqualToUTF8AndSize=Module["_PyUnicode_EqualToUTF8AndSize"]=wasmExports["PyUnicode_EqualToUTF8AndSize"];var _PyUnicode_RichCompare=Module["_PyUnicode_RichCompare"]=wasmExports["PyUnicode_RichCompare"];var _PyUnicode_Contains=Module["_PyUnicode_Contains"]=wasmExports["PyUnicode_Contains"];var _PyUnicode_Concat=Module["_PyUnicode_Concat"]=wasmExports["PyUnicode_Concat"];var _PyUnicode_Append=Module["_PyUnicode_Append"]=wasmExports["PyUnicode_Append"];var _PyUnicode_AppendAndDel=Module["_PyUnicode_AppendAndDel"]=wasmExports["PyUnicode_AppendAndDel"];var _PyUnicode_Replace=Module["_PyUnicode_Replace"]=wasmExports["PyUnicode_Replace"];var _PyUnicode_Split=Module["_PyUnicode_Split"]=wasmExports["PyUnicode_Split"];var _PyUnicode_Partition=Module["_PyUnicode_Partition"]=wasmExports["PyUnicode_Partition"];var _PyUnicode_RPartition=Module["_PyUnicode_RPartition"]=wasmExports["PyUnicode_RPartition"];var _PyUnicode_RSplit=Module["_PyUnicode_RSplit"]=wasmExports["PyUnicode_RSplit"];var __PyUnicodeWriter_WriteSubstring=Module["__PyUnicodeWriter_WriteSubstring"]=wasmExports["_PyUnicodeWriter_WriteSubstring"];var __PyUnicodeWriter_WriteLatin1String=Module["__PyUnicodeWriter_WriteLatin1String"]=wasmExports["_PyUnicodeWriter_WriteLatin1String"];var _PyUnicode_Format=Module["_PyUnicode_Format"]=wasmExports["PyUnicode_Format"];var __PyUnicode_ExactDealloc=Module["__PyUnicode_ExactDealloc"]=wasmExports["_PyUnicode_ExactDealloc"];var __Py_hashtable_new_full=Module["__Py_hashtable_new_full"]=wasmExports["_Py_hashtable_new_full"];var __Py_hashtable_get=Module["__Py_hashtable_get"]=wasmExports["_Py_hashtable_get"];var __Py_hashtable_set=Module["__Py_hashtable_set"]=wasmExports["_Py_hashtable_set"];var __PyUnicode_InternInPlace=Module["__PyUnicode_InternInPlace"]=wasmExports["_PyUnicode_InternInPlace"];var _PyUnicode_InternInPlace=Module["_PyUnicode_InternInPlace"]=wasmExports["PyUnicode_InternInPlace"];var _PyUnicode_InternImmortal=Module["_PyUnicode_InternImmortal"]=wasmExports["PyUnicode_InternImmortal"];var __Py_hashtable_destroy=Module["__Py_hashtable_destroy"]=wasmExports["_Py_hashtable_destroy"];var _PyInit__string=Module["_PyInit__string"]=wasmExports["PyInit__string"];var __PyUnicode_IsLowercase=Module["__PyUnicode_IsLowercase"]=wasmExports["_PyUnicode_IsLowercase"];var __PyUnicode_IsUppercase=Module["__PyUnicode_IsUppercase"]=wasmExports["_PyUnicode_IsUppercase"];var __PyUnicode_IsTitlecase=Module["__PyUnicode_IsTitlecase"]=wasmExports["_PyUnicode_IsTitlecase"];var __PyUnicode_IsDecimalDigit=Module["__PyUnicode_IsDecimalDigit"]=wasmExports["_PyUnicode_IsDecimalDigit"];var __PyUnicode_IsDigit=Module["__PyUnicode_IsDigit"]=wasmExports["_PyUnicode_IsDigit"];var __PyUnicode_IsNumeric=Module["__PyUnicode_IsNumeric"]=wasmExports["_PyUnicode_IsNumeric"];var __PyUnicode_IsAlpha=Module["__PyUnicode_IsAlpha"]=wasmExports["_PyUnicode_IsAlpha"];var __PyUnicode_ToNumeric=Module["__PyUnicode_ToNumeric"]=wasmExports["_PyUnicode_ToNumeric"];var __PyUnicode_ToTitlecase=Module["__PyUnicode_ToTitlecase"]=wasmExports["_PyUnicode_ToTitlecase"];var __PyUnicode_ToDigit=Module["__PyUnicode_ToDigit"]=wasmExports["_PyUnicode_ToDigit"];var __PyUnicode_ToUppercase=Module["__PyUnicode_ToUppercase"]=wasmExports["_PyUnicode_ToUppercase"];var __PyUnicode_ToLowercase=Module["__PyUnicode_ToLowercase"]=wasmExports["_PyUnicode_ToLowercase"];var __PyWeakref_ClearRef=Module["__PyWeakref_ClearRef"]=wasmExports["_PyWeakref_ClearRef"];var _PyWeakref_NewProxy=Module["_PyWeakref_NewProxy"]=wasmExports["PyWeakref_NewProxy"];var _PyWeakref_GetRef=Module["_PyWeakref_GetRef"]=wasmExports["PyWeakref_GetRef"];var _PyWeakref_GetObject=Module["_PyWeakref_GetObject"]=wasmExports["PyWeakref_GetObject"];var _PyUnstable_Object_ClearWeakRefsNoCallbacks=Module["_PyUnstable_Object_ClearWeakRefsNoCallbacks"]=wasmExports["PyUnstable_Object_ClearWeakRefsNoCallbacks"];var __PyWeakref_IsDead=Module["__PyWeakref_IsDead"]=wasmExports["_PyWeakref_IsDead"];var _PyErr_ResourceWarning=Module["_PyErr_ResourceWarning"]=wasmExports["PyErr_ResourceWarning"];var _PyErr_WarnExplicit=Module["_PyErr_WarnExplicit"]=wasmExports["PyErr_WarnExplicit"];var _PyErr_WarnExplicitFormat=Module["_PyErr_WarnExplicitFormat"]=wasmExports["PyErr_WarnExplicitFormat"];var __Py_IsInterpreterFinalizing=Module["__Py_IsInterpreterFinalizing"]=wasmExports["_Py_IsInterpreterFinalizing"];var __PyWarnings_Init=Module["__PyWarnings_Init"]=wasmExports["_PyWarnings_Init"];var _PyThreadState_GetFrame=Module["_PyThreadState_GetFrame"]=wasmExports["PyThreadState_GetFrame"];var __PySys_GetAttr=Module["__PySys_GetAttr"]=wasmExports["_PySys_GetAttr"];var __Py_DisplaySourceLine=Module["__Py_DisplaySourceLine"]=wasmExports["_Py_DisplaySourceLine"];var _PyModule_AddObjectRef=Module["_PyModule_AddObjectRef"]=wasmExports["PyModule_AddObjectRef"];var _PyInit__ast=Module["_PyInit__ast"]=wasmExports["PyInit__ast"];var __PyOnceFlag_CallOnceSlow=Module["__PyOnceFlag_CallOnceSlow"]=wasmExports["_PyOnceFlag_CallOnceSlow"];var _PyModule_AddIntConstant=Module["_PyModule_AddIntConstant"]=wasmExports["PyModule_AddIntConstant"];var _PyInit__tokenize=Module["_PyInit__tokenize"]=wasmExports["PyInit__tokenize"];var _PyModule_AddType=Module["_PyModule_AddType"]=wasmExports["PyModule_AddType"];var _PyErr_SyntaxLocationObject=Module["_PyErr_SyntaxLocationObject"]=wasmExports["PyErr_SyntaxLocationObject"];var _PyImport_ImportModuleLevelObject=Module["_PyImport_ImportModuleLevelObject"]=wasmExports["PyImport_ImportModuleLevelObject"];var _PyEval_MergeCompilerFlags=Module["_PyEval_MergeCompilerFlags"]=wasmExports["PyEval_MergeCompilerFlags"];var __PyArena_New=Module["__PyArena_New"]=wasmExports["_PyArena_New"];var __PyArena_Free=Module["__PyArena_Free"]=wasmExports["_PyArena_Free"];var __PyAST_Compile=Module["__PyAST_Compile"]=wasmExports["_PyAST_Compile"];var _Py_CompileStringObject=Module["_Py_CompileStringObject"]=wasmExports["Py_CompileStringObject"];var _PyEval_GetBuiltins=Module["_PyEval_GetBuiltins"]=wasmExports["PyEval_GetBuiltins"];var _PyEval_EvalCode=Module["_PyEval_EvalCode"]=wasmExports["PyEval_EvalCode"];var _PyRun_StringFlags=Module["_PyRun_StringFlags"]=wasmExports["PyRun_StringFlags"];var _PyEval_EvalCodeEx=Module["_PyEval_EvalCodeEx"]=wasmExports["PyEval_EvalCodeEx"];var _Py_GetRecursionLimit=Module["_Py_GetRecursionLimit"]=wasmExports["Py_GetRecursionLimit"];var _Py_SetRecursionLimit=Module["_Py_SetRecursionLimit"]=wasmExports["Py_SetRecursionLimit"];var __PyEval_MatchKeys=Module["__PyEval_MatchKeys"]=wasmExports["_PyEval_MatchKeys"];var __PyEval_MatchClass=Module["__PyEval_MatchClass"]=wasmExports["_PyEval_MatchClass"];var __PyEvalFramePushAndInit=Module["__PyEvalFramePushAndInit"]=wasmExports["_PyEvalFramePushAndInit"];var _PyEval_EvalFrame=Module["_PyEval_EvalFrame"]=wasmExports["PyEval_EvalFrame"];var _PyEval_EvalFrameEx=Module["_PyEval_EvalFrameEx"]=wasmExports["PyEval_EvalFrameEx"];var __PyEval_FrameClearAndPop=Module["__PyEval_FrameClearAndPop"]=wasmExports["_PyEval_FrameClearAndPop"];var _PyTraceBack_Here=Module["_PyTraceBack_Here"]=wasmExports["PyTraceBack_Here"];var __Py_HandlePending=Module["__Py_HandlePending"]=wasmExports["_Py_HandlePending"];var __PyEval_CheckExceptStarTypeValid=Module["__PyEval_CheckExceptStarTypeValid"]=wasmExports["_PyEval_CheckExceptStarTypeValid"];var __PyEval_ExceptionGroupMatch=Module["__PyEval_ExceptionGroupMatch"]=wasmExports["_PyEval_ExceptionGroupMatch"];var _PyErr_SetHandledException=Module["_PyErr_SetHandledException"]=wasmExports["PyErr_SetHandledException"];var __PyEval_FormatExcCheckArg=Module["__PyEval_FormatExcCheckArg"]=wasmExports["_PyEval_FormatExcCheckArg"];var __PyEval_FormatKwargsError=Module["__PyEval_FormatKwargsError"]=wasmExports["_PyEval_FormatKwargsError"];var __PyEval_FormatExcUnbound=Module["__PyEval_FormatExcUnbound"]=wasmExports["_PyEval_FormatExcUnbound"];var __PyThreadState_PopFrame=Module["__PyThreadState_PopFrame"]=wasmExports["_PyThreadState_PopFrame"];var __PyEval_UnpackIterable=Module["__PyEval_UnpackIterable"]=wasmExports["_PyEval_UnpackIterable"];var __PyEval_CheckExceptTypeValid=Module["__PyEval_CheckExceptTypeValid"]=wasmExports["_PyEval_CheckExceptTypeValid"];var __PyEval_MonitorRaise=Module["__PyEval_MonitorRaise"]=wasmExports["_PyEval_MonitorRaise"];var __PyEval_FormatAwaitableError=Module["__PyEval_FormatAwaitableError"]=wasmExports["_PyEval_FormatAwaitableError"];var _PyThreadState_EnterTracing=Module["_PyThreadState_EnterTracing"]=wasmExports["PyThreadState_EnterTracing"];var _PyThreadState_LeaveTracing=Module["_PyThreadState_LeaveTracing"]=wasmExports["PyThreadState_LeaveTracing"];var _PyEval_SetProfile=Module["_PyEval_SetProfile"]=wasmExports["PyEval_SetProfile"];var __PyEval_SetProfile=Module["__PyEval_SetProfile"]=wasmExports["_PyEval_SetProfile"];var _PyEval_SetProfileAllThreads=Module["_PyEval_SetProfileAllThreads"]=wasmExports["PyEval_SetProfileAllThreads"];var _PyInterpreterState_ThreadHead=Module["_PyInterpreterState_ThreadHead"]=wasmExports["PyInterpreterState_ThreadHead"];var _PyThreadState_Next=Module["_PyThreadState_Next"]=wasmExports["PyThreadState_Next"];var _PyEval_SetTrace=Module["_PyEval_SetTrace"]=wasmExports["PyEval_SetTrace"];var _PyEval_SetTraceAllThreads=Module["_PyEval_SetTraceAllThreads"]=wasmExports["PyEval_SetTraceAllThreads"];var _PyEval_GetFrame=Module["_PyEval_GetFrame"]=wasmExports["PyEval_GetFrame"];var _PyEval_GetLocals=Module["_PyEval_GetLocals"]=wasmExports["PyEval_GetLocals"];var _PyEval_GetFrameLocals=Module["_PyEval_GetFrameLocals"]=wasmExports["PyEval_GetFrameLocals"];var _PyEval_GetFrameGlobals=Module["_PyEval_GetFrameGlobals"]=wasmExports["PyEval_GetFrameGlobals"];var _PyEval_GetFrameBuiltins=Module["_PyEval_GetFrameBuiltins"]=wasmExports["PyEval_GetFrameBuiltins"];var _PyEval_GetFuncName=Module["_PyEval_GetFuncName"]=wasmExports["PyEval_GetFuncName"];var _PyEval_GetFuncDesc=Module["_PyEval_GetFuncDesc"]=wasmExports["PyEval_GetFuncDesc"];var _PyUnstable_Eval_RequestCodeExtraIndex=Module["_PyUnstable_Eval_RequestCodeExtraIndex"]=wasmExports["PyUnstable_Eval_RequestCodeExtraIndex"];var _PyCodec_Register=Module["_PyCodec_Register"]=wasmExports["PyCodec_Register"];var _PyCodec_Unregister=Module["_PyCodec_Unregister"]=wasmExports["PyCodec_Unregister"];var _PyCodec_KnownEncoding=Module["_PyCodec_KnownEncoding"]=wasmExports["PyCodec_KnownEncoding"];var _PyCodec_Encoder=Module["_PyCodec_Encoder"]=wasmExports["PyCodec_Encoder"];var _PyCodec_Decoder=Module["_PyCodec_Decoder"]=wasmExports["PyCodec_Decoder"];var _PyCodec_IncrementalEncoder=Module["_PyCodec_IncrementalEncoder"]=wasmExports["PyCodec_IncrementalEncoder"];var _PyCodec_IncrementalDecoder=Module["_PyCodec_IncrementalDecoder"]=wasmExports["PyCodec_IncrementalDecoder"];var _PyCodec_StreamReader=Module["_PyCodec_StreamReader"]=wasmExports["PyCodec_StreamReader"];var _PyCodec_StreamWriter=Module["_PyCodec_StreamWriter"]=wasmExports["PyCodec_StreamWriter"];var _PyCodec_RegisterError=Module["_PyCodec_RegisterError"]=wasmExports["PyCodec_RegisterError"];var _PyCodec_IgnoreErrors=Module["_PyCodec_IgnoreErrors"]=wasmExports["PyCodec_IgnoreErrors"];var _PyCodec_ReplaceErrors=Module["_PyCodec_ReplaceErrors"]=wasmExports["PyCodec_ReplaceErrors"];var _PyCodec_XMLCharRefReplaceErrors=Module["_PyCodec_XMLCharRefReplaceErrors"]=wasmExports["PyCodec_XMLCharRefReplaceErrors"];var _PyCodec_BackslashReplaceErrors=Module["_PyCodec_BackslashReplaceErrors"]=wasmExports["PyCodec_BackslashReplaceErrors"];var _PyCodec_NameReplaceErrors=Module["_PyCodec_NameReplaceErrors"]=wasmExports["PyCodec_NameReplaceErrors"];var _PyStatus_NoMemory=Module["_PyStatus_NoMemory"]=wasmExports["PyStatus_NoMemory"];var _PyStatus_Error=Module["_PyStatus_Error"]=wasmExports["PyStatus_Error"];var _PyStatus_Ok=Module["_PyStatus_Ok"]=wasmExports["PyStatus_Ok"];var _PyCompile_OpcodeStackEffectWithJump=Module["_PyCompile_OpcodeStackEffectWithJump"]=wasmExports["PyCompile_OpcodeStackEffectWithJump"];var __PyCompile_OpcodeIsValid=Module["__PyCompile_OpcodeIsValid"]=wasmExports["_PyCompile_OpcodeIsValid"];var __PyCompile_OpcodeHasArg=Module["__PyCompile_OpcodeHasArg"]=wasmExports["_PyCompile_OpcodeHasArg"];var __PyCompile_OpcodeHasConst=Module["__PyCompile_OpcodeHasConst"]=wasmExports["_PyCompile_OpcodeHasConst"];var __PyCompile_OpcodeHasName=Module["__PyCompile_OpcodeHasName"]=wasmExports["_PyCompile_OpcodeHasName"];var __PyCompile_OpcodeHasJump=Module["__PyCompile_OpcodeHasJump"]=wasmExports["_PyCompile_OpcodeHasJump"];var __PyCompile_OpcodeHasFree=Module["__PyCompile_OpcodeHasFree"]=wasmExports["_PyCompile_OpcodeHasFree"];var __PyCompile_OpcodeHasLocal=Module["__PyCompile_OpcodeHasLocal"]=wasmExports["_PyCompile_OpcodeHasLocal"];var __PyCompile_OpcodeHasExc=Module["__PyCompile_OpcodeHasExc"]=wasmExports["_PyCompile_OpcodeHasExc"];var __PyCompile_CleanDoc=Module["__PyCompile_CleanDoc"]=wasmExports["_PyCompile_CleanDoc"];var __PyCompile_CodeGen=Module["__PyCompile_CodeGen"]=wasmExports["_PyCompile_CodeGen"];var __PyCompile_OptimizeCfg=Module["__PyCompile_OptimizeCfg"]=wasmExports["_PyCompile_OptimizeCfg"];var __PyInstructionSequence_New=Module["__PyInstructionSequence_New"]=wasmExports["_PyInstructionSequence_New"];var __PyCompile_Assemble=Module["__PyCompile_Assemble"]=wasmExports["_PyCompile_Assemble"];var _PyCode_Optimize=Module["_PyCode_Optimize"]=wasmExports["PyCode_Optimize"];var _PyErr_ProgramTextObject=Module["_PyErr_ProgramTextObject"]=wasmExports["PyErr_ProgramTextObject"];var __PyContext_NewHamtForTests=Module["__PyContext_NewHamtForTests"]=wasmExports["_PyContext_NewHamtForTests"];var _PyContext_New=Module["_PyContext_New"]=wasmExports["PyContext_New"];var _PyContext_Copy=Module["_PyContext_Copy"]=wasmExports["PyContext_Copy"];var _PyContext_CopyCurrent=Module["_PyContext_CopyCurrent"]=wasmExports["PyContext_CopyCurrent"];var _PyContext_Enter=Module["_PyContext_Enter"]=wasmExports["PyContext_Enter"];var _PyContext_Exit=Module["_PyContext_Exit"]=wasmExports["PyContext_Exit"];var _PyContextVar_New=Module["_PyContextVar_New"]=wasmExports["PyContextVar_New"];var _PyContextVar_Get=Module["_PyContextVar_Get"]=wasmExports["PyContextVar_Get"];var _PyContextVar_Set=Module["_PyContextVar_Set"]=wasmExports["PyContextVar_Set"];var _PyContextVar_Reset=Module["_PyContextVar_Reset"]=wasmExports["PyContextVar_Reset"];var __PyCriticalSection_BeginSlow=Module["__PyCriticalSection_BeginSlow"]=wasmExports["_PyCriticalSection_BeginSlow"];var __PyCriticalSection2_BeginSlow=Module["__PyCriticalSection2_BeginSlow"]=wasmExports["_PyCriticalSection2_BeginSlow"];var __PyCriticalSection_SuspendAll=Module["__PyCriticalSection_SuspendAll"]=wasmExports["_PyCriticalSection_SuspendAll"];var __PyCriticalSection_Resume=Module["__PyCriticalSection_Resume"]=wasmExports["_PyCriticalSection_Resume"];var _PyCriticalSection_Begin=Module["_PyCriticalSection_Begin"]=wasmExports["PyCriticalSection_Begin"];var _PyCriticalSection_End=Module["_PyCriticalSection_End"]=wasmExports["PyCriticalSection_End"];var _PyCriticalSection2_Begin=Module["_PyCriticalSection2_Begin"]=wasmExports["PyCriticalSection2_Begin"];var _PyCriticalSection2_End=Module["_PyCriticalSection2_End"]=wasmExports["PyCriticalSection2_End"];var __PyEval_AddPendingCall=Module["__PyEval_AddPendingCall"]=wasmExports["_PyEval_AddPendingCall"];var __PyCrossInterpreterData_Lookup=Module["__PyCrossInterpreterData_Lookup"]=wasmExports["_PyCrossInterpreterData_Lookup"];var __PyCrossInterpreterData_RegisterClass=Module["__PyCrossInterpreterData_RegisterClass"]=wasmExports["_PyCrossInterpreterData_RegisterClass"];var __PyCrossInterpreterData_UnregisterClass=Module["__PyCrossInterpreterData_UnregisterClass"]=wasmExports["_PyCrossInterpreterData_UnregisterClass"];var __PyCrossInterpreterData_New=Module["__PyCrossInterpreterData_New"]=wasmExports["_PyCrossInterpreterData_New"];var __PyCrossInterpreterData_Free=Module["__PyCrossInterpreterData_Free"]=wasmExports["_PyCrossInterpreterData_Free"];var __PyCrossInterpreterData_Clear=Module["__PyCrossInterpreterData_Clear"]=wasmExports["_PyCrossInterpreterData_Clear"];var __PyCrossInterpreterData_Init=Module["__PyCrossInterpreterData_Init"]=wasmExports["_PyCrossInterpreterData_Init"];var _PyInterpreterState_GetID=Module["_PyInterpreterState_GetID"]=wasmExports["PyInterpreterState_GetID"];var __PyCrossInterpreterData_InitWithSize=Module["__PyCrossInterpreterData_InitWithSize"]=wasmExports["_PyCrossInterpreterData_InitWithSize"];var __PyObject_CheckCrossInterpreterData=Module["__PyObject_CheckCrossInterpreterData"]=wasmExports["_PyObject_CheckCrossInterpreterData"];var __PyObject_GetCrossInterpreterData=Module["__PyObject_GetCrossInterpreterData"]=wasmExports["_PyObject_GetCrossInterpreterData"];var __PyCrossInterpreterData_Release=Module["__PyCrossInterpreterData_Release"]=wasmExports["_PyCrossInterpreterData_Release"];var __PyCrossInterpreterData_NewObject=Module["__PyCrossInterpreterData_NewObject"]=wasmExports["_PyCrossInterpreterData_NewObject"];var __PyInterpreterState_LookUpID=Module["__PyInterpreterState_LookUpID"]=wasmExports["_PyInterpreterState_LookUpID"];var __PyCrossInterpreterData_ReleaseAndRawFree=Module["__PyCrossInterpreterData_ReleaseAndRawFree"]=wasmExports["_PyCrossInterpreterData_ReleaseAndRawFree"];var __PyXI_InitExcInfo=Module["__PyXI_InitExcInfo"]=wasmExports["_PyXI_InitExcInfo"];var __PyXI_FormatExcInfo=Module["__PyXI_FormatExcInfo"]=wasmExports["_PyXI_FormatExcInfo"];var __PyXI_ExcInfoAsObject=Module["__PyXI_ExcInfoAsObject"]=wasmExports["_PyXI_ExcInfoAsObject"];var __PyXI_ClearExcInfo=Module["__PyXI_ClearExcInfo"]=wasmExports["_PyXI_ClearExcInfo"];var __PyXI_ApplyError=Module["__PyXI_ApplyError"]=wasmExports["_PyXI_ApplyError"];var __PyXI_FreeNamespace=Module["__PyXI_FreeNamespace"]=wasmExports["_PyXI_FreeNamespace"];var __PyXI_NamespaceFromNames=Module["__PyXI_NamespaceFromNames"]=wasmExports["_PyXI_NamespaceFromNames"];var __PyXI_FillNamespaceFromDict=Module["__PyXI_FillNamespaceFromDict"]=wasmExports["_PyXI_FillNamespaceFromDict"];var __PyXI_ApplyNamespace=Module["__PyXI_ApplyNamespace"]=wasmExports["_PyXI_ApplyNamespace"];var __PyXI_ApplyCapturedException=Module["__PyXI_ApplyCapturedException"]=wasmExports["_PyXI_ApplyCapturedException"];var __PyXI_HasCapturedException=Module["__PyXI_HasCapturedException"]=wasmExports["_PyXI_HasCapturedException"];var __PyXI_Enter=Module["__PyXI_Enter"]=wasmExports["_PyXI_Enter"];var __PyThreadState_NewBound=Module["__PyThreadState_NewBound"]=wasmExports["_PyThreadState_NewBound"];var __PyInterpreterState_SetRunningMain=Module["__PyInterpreterState_SetRunningMain"]=wasmExports["_PyInterpreterState_SetRunningMain"];var _PyUnstable_InterpreterState_GetMainModule=Module["_PyUnstable_InterpreterState_GetMainModule"]=wasmExports["PyUnstable_InterpreterState_GetMainModule"];var __PyInterpreterState_SetNotRunningMain=Module["__PyInterpreterState_SetNotRunningMain"]=wasmExports["_PyInterpreterState_SetNotRunningMain"];var _PyThreadState_Clear=Module["_PyThreadState_Clear"]=wasmExports["PyThreadState_Clear"];var __PyXI_Exit=Module["__PyXI_Exit"]=wasmExports["_PyXI_Exit"];var _PyErr_PrintEx=Module["_PyErr_PrintEx"]=wasmExports["PyErr_PrintEx"];var __PyXI_NewInterpreter=Module["__PyXI_NewInterpreter"]=wasmExports["_PyXI_NewInterpreter"];var _Py_NewInterpreterFromConfig=Module["_Py_NewInterpreterFromConfig"]=wasmExports["Py_NewInterpreterFromConfig"];var __PyErr_SetFromPyStatus=Module["__PyErr_SetFromPyStatus"]=wasmExports["_PyErr_SetFromPyStatus"];var _PyThreadState_GetInterpreter=Module["_PyThreadState_GetInterpreter"]=wasmExports["PyThreadState_GetInterpreter"];var __PyXI_EndInterpreter=Module["__PyXI_EndInterpreter"]=wasmExports["_PyXI_EndInterpreter"];var __PyInterpreterState_IsReady=Module["__PyInterpreterState_IsReady"]=wasmExports["_PyInterpreterState_IsReady"];var _PyInterpreterState_Delete=Module["_PyInterpreterState_Delete"]=wasmExports["PyInterpreterState_Delete"];var _Py_EndInterpreter=Module["_Py_EndInterpreter"]=wasmExports["Py_EndInterpreter"];var __PyErr_SetLocaleString=Module["__PyErr_SetLocaleString"]=wasmExports["_PyErr_SetLocaleString"];var _PyErr_GetHandledException=Module["_PyErr_GetHandledException"]=wasmExports["PyErr_GetHandledException"];var _PyErr_GetExcInfo=Module["_PyErr_GetExcInfo"]=wasmExports["PyErr_GetExcInfo"];var _PyErr_SetExcInfo=Module["_PyErr_SetExcInfo"]=wasmExports["PyErr_SetExcInfo"];var _PyErr_SetFromErrnoWithFilenameObject=Module["_PyErr_SetFromErrnoWithFilenameObject"]=wasmExports["PyErr_SetFromErrnoWithFilenameObject"];var _PyErr_SetFromErrnoWithFilenameObjects=Module["_PyErr_SetFromErrnoWithFilenameObjects"]=wasmExports["PyErr_SetFromErrnoWithFilenameObjects"];var _strerror=wasmExports["strerror"];var _PyErr_SetImportErrorSubclass=Module["_PyErr_SetImportErrorSubclass"]=wasmExports["PyErr_SetImportErrorSubclass"];var _PyErr_SetImportError=Module["_PyErr_SetImportError"]=wasmExports["PyErr_SetImportError"];var _PyErr_BadInternalCall=Module["_PyErr_BadInternalCall"]=wasmExports["PyErr_BadInternalCall"];var _PyErr_FormatV=Module["_PyErr_FormatV"]=wasmExports["PyErr_FormatV"];var _PyErr_NewExceptionWithDoc=Module["_PyErr_NewExceptionWithDoc"]=wasmExports["PyErr_NewExceptionWithDoc"];var _PyTraceBack_Print=Module["_PyTraceBack_Print"]=wasmExports["PyTraceBack_Print"];var _PyErr_SyntaxLocation=Module["_PyErr_SyntaxLocation"]=wasmExports["PyErr_SyntaxLocation"];var _PyErr_SyntaxLocationEx=Module["_PyErr_SyntaxLocationEx"]=wasmExports["PyErr_SyntaxLocationEx"];var _PyErr_RangedSyntaxLocationObject=Module["_PyErr_RangedSyntaxLocationObject"]=wasmExports["PyErr_RangedSyntaxLocationObject"];var _PyErr_ProgramText=Module["_PyErr_ProgramText"]=wasmExports["PyErr_ProgramText"];var __Py_fopen_obj=Module["__Py_fopen_obj"]=wasmExports["_Py_fopen_obj"];var _PyUnstable_InterpreterFrame_GetCode=Module["_PyUnstable_InterpreterFrame_GetCode"]=wasmExports["PyUnstable_InterpreterFrame_GetCode"];var _PyUnstable_InterpreterFrame_GetLasti=Module["_PyUnstable_InterpreterFrame_GetLasti"]=wasmExports["PyUnstable_InterpreterFrame_GetLasti"];var _Py_FrozenMain=Module["_Py_FrozenMain"]=wasmExports["Py_FrozenMain"];var _Py_GETENV=Module["_Py_GETENV"]=wasmExports["Py_GETENV"];var _Py_GetVersion=Module["_Py_GetVersion"]=wasmExports["Py_GetVersion"];var _Py_GetCopyright=Module["_Py_GetCopyright"]=wasmExports["Py_GetCopyright"];var _PyImport_ImportFrozenModule=Module["_PyImport_ImportFrozenModule"]=wasmExports["PyImport_ImportFrozenModule"];var _PyRun_AnyFileExFlags=Module["_PyRun_AnyFileExFlags"]=wasmExports["PyRun_AnyFileExFlags"];var _Py_FinalizeEx=Module["_Py_FinalizeEx"]=wasmExports["Py_FinalizeEx"];var _PyGC_Enable=Module["_PyGC_Enable"]=wasmExports["PyGC_Enable"];var _PyGC_Disable=Module["_PyGC_Disable"]=wasmExports["PyGC_Disable"];var _PyGC_IsEnabled=Module["_PyGC_IsEnabled"]=wasmExports["PyGC_IsEnabled"];var _PyGC_Collect=Module["_PyGC_Collect"]=wasmExports["PyGC_Collect"];var _PyTime_PerfCounterRaw=Module["_PyTime_PerfCounterRaw"]=wasmExports["PyTime_PerfCounterRaw"];var _PyTime_AsSecondsDouble=Module["_PyTime_AsSecondsDouble"]=wasmExports["PyTime_AsSecondsDouble"];var _PyUnstable_Object_GC_NewWithExtraData=Module["_PyUnstable_Object_GC_NewWithExtraData"]=wasmExports["PyUnstable_Object_GC_NewWithExtraData"];var _PyObject_GC_IsTracked=Module["_PyObject_GC_IsTracked"]=wasmExports["PyObject_GC_IsTracked"];var _PyObject_GC_IsFinalized=Module["_PyObject_GC_IsFinalized"]=wasmExports["PyObject_GC_IsFinalized"];var _PyUnstable_GC_VisitObjects=Module["_PyUnstable_GC_VisitObjects"]=wasmExports["PyUnstable_GC_VisitObjects"];var _PyArg_Parse=Module["_PyArg_Parse"]=wasmExports["PyArg_Parse"];var __PyArg_Parse_SizeT=Module["__PyArg_Parse_SizeT"]=wasmExports["_PyArg_Parse_SizeT"];var __PyArg_ParseTuple_SizeT=Module["__PyArg_ParseTuple_SizeT"]=wasmExports["_PyArg_ParseTuple_SizeT"];var _PyArg_VaParse=Module["_PyArg_VaParse"]=wasmExports["PyArg_VaParse"];var __PyArg_VaParse_SizeT=Module["__PyArg_VaParse_SizeT"]=wasmExports["_PyArg_VaParse_SizeT"];var __PyArg_ParseTupleAndKeywords_SizeT=Module["__PyArg_ParseTupleAndKeywords_SizeT"]=wasmExports["_PyArg_ParseTupleAndKeywords_SizeT"];var _PyArg_VaParseTupleAndKeywords=Module["_PyArg_VaParseTupleAndKeywords"]=wasmExports["PyArg_VaParseTupleAndKeywords"];var __PyArg_VaParseTupleAndKeywords_SizeT=Module["__PyArg_VaParseTupleAndKeywords_SizeT"]=wasmExports["_PyArg_VaParseTupleAndKeywords_SizeT"];var __PyArg_ParseTupleAndKeywordsFast=Module["__PyArg_ParseTupleAndKeywordsFast"]=wasmExports["_PyArg_ParseTupleAndKeywordsFast"];var _Py_GetCompiler=Module["_Py_GetCompiler"]=wasmExports["Py_GetCompiler"];var _Py_GetPlatform=Module["_Py_GetPlatform"]=wasmExports["Py_GetPlatform"];var _PyEval_ThreadsInitialized=Module["_PyEval_ThreadsInitialized"]=wasmExports["PyEval_ThreadsInitialized"];var _PyThread_init_thread=Module["_PyThread_init_thread"]=wasmExports["PyThread_init_thread"];var _pthread_cond_destroy=Module["_pthread_cond_destroy"]=wasmExports["pthread_cond_destroy"];var _pthread_mutex_destroy=Module["_pthread_mutex_destroy"]=wasmExports["pthread_mutex_destroy"];var _PyEval_InitThreads=Module["_PyEval_InitThreads"]=wasmExports["PyEval_InitThreads"];var _PyEval_AcquireLock=Module["_PyEval_AcquireLock"]=wasmExports["PyEval_AcquireLock"];var _pthread_mutex_lock=Module["_pthread_mutex_lock"]=wasmExports["pthread_mutex_lock"];var _pthread_cond_timedwait=Module["_pthread_cond_timedwait"]=wasmExports["pthread_cond_timedwait"];var _pthread_mutex_unlock=Module["_pthread_mutex_unlock"]=wasmExports["pthread_mutex_unlock"];var _pthread_cond_signal=Module["_pthread_cond_signal"]=wasmExports["pthread_cond_signal"];var _PyThread_exit_thread=Module["_PyThread_exit_thread"]=wasmExports["PyThread_exit_thread"];var _PyThread_get_thread_ident=Module["_PyThread_get_thread_ident"]=wasmExports["PyThread_get_thread_ident"];var _PyEval_ReleaseLock=Module["_PyEval_ReleaseLock"]=wasmExports["PyEval_ReleaseLock"];var _pthread_cond_wait=Module["_pthread_cond_wait"]=wasmExports["pthread_cond_wait"];var _PyEval_AcquireThread=Module["_PyEval_AcquireThread"]=wasmExports["PyEval_AcquireThread"];var _PyEval_ReleaseThread=Module["_PyEval_ReleaseThread"]=wasmExports["PyEval_ReleaseThread"];var _Py_AddPendingCall=Module["_Py_AddPendingCall"]=wasmExports["Py_AddPendingCall"];var __PyEval_MakePendingCalls=Module["__PyEval_MakePendingCalls"]=wasmExports["_PyEval_MakePendingCalls"];var _Py_MakePendingCalls=Module["_Py_MakePendingCalls"]=wasmExports["Py_MakePendingCalls"];var _pthread_mutex_init=Module["_pthread_mutex_init"]=wasmExports["pthread_mutex_init"];var __Py_hashtable_hash_ptr=Module["__Py_hashtable_hash_ptr"]=wasmExports["_Py_hashtable_hash_ptr"];var __Py_hashtable_compare_direct=Module["__Py_hashtable_compare_direct"]=wasmExports["_Py_hashtable_compare_direct"];var __Py_hashtable_size=Module["__Py_hashtable_size"]=wasmExports["_Py_hashtable_size"];var __Py_hashtable_steal=Module["__Py_hashtable_steal"]=wasmExports["_Py_hashtable_steal"];var __Py_hashtable_foreach=Module["__Py_hashtable_foreach"]=wasmExports["_Py_hashtable_foreach"];var __Py_hashtable_new=Module["__Py_hashtable_new"]=wasmExports["_Py_hashtable_new"];var __Py_hashtable_clear=Module["__Py_hashtable_clear"]=wasmExports["_Py_hashtable_clear"];var __PyRecursiveMutex_Lock=Module["__PyRecursiveMutex_Lock"]=wasmExports["_PyRecursiveMutex_Lock"];var __PyRecursiveMutex_Unlock=Module["__PyRecursiveMutex_Unlock"]=wasmExports["_PyRecursiveMutex_Unlock"];var _PyThread_get_thread_ident_ex=Module["_PyThread_get_thread_ident_ex"]=wasmExports["PyThread_get_thread_ident_ex"];var __PyImport_SetModule=Module["__PyImport_SetModule"]=wasmExports["_PyImport_SetModule"];var _PyImport_AddModuleRef=Module["_PyImport_AddModuleRef"]=wasmExports["PyImport_AddModuleRef"];var _PyImport_AddModuleObject=Module["_PyImport_AddModuleObject"]=wasmExports["PyImport_AddModuleObject"];var _PyImport_AddModule=Module["_PyImport_AddModule"]=wasmExports["PyImport_AddModule"];var _PyState_FindModule=Module["_PyState_FindModule"]=wasmExports["PyState_FindModule"];var __PyState_AddModule=Module["__PyState_AddModule"]=wasmExports["_PyState_AddModule"];var _PyState_AddModule=Module["_PyState_AddModule"]=wasmExports["PyState_AddModule"];var _PyState_RemoveModule=Module["_PyState_RemoveModule"]=wasmExports["PyState_RemoveModule"];var __PyImport_ClearExtension=Module["__PyImport_ClearExtension"]=wasmExports["_PyImport_ClearExtension"];var _PyImport_ExtendInittab=Module["_PyImport_ExtendInittab"]=wasmExports["PyImport_ExtendInittab"];var _PyImport_GetMagicNumber=Module["_PyImport_GetMagicNumber"]=wasmExports["PyImport_GetMagicNumber"];var _PyImport_GetMagicTag=Module["_PyImport_GetMagicTag"]=wasmExports["PyImport_GetMagicTag"];var _PyImport_ExecCodeModule=Module["_PyImport_ExecCodeModule"]=wasmExports["PyImport_ExecCodeModule"];var _PyImport_ExecCodeModuleObject=Module["_PyImport_ExecCodeModuleObject"]=wasmExports["PyImport_ExecCodeModuleObject"];var _PyImport_ExecCodeModuleWithPathnames=Module["_PyImport_ExecCodeModuleWithPathnames"]=wasmExports["PyImport_ExecCodeModuleWithPathnames"];var _PyImport_ExecCodeModuleEx=Module["_PyImport_ExecCodeModuleEx"]=wasmExports["PyImport_ExecCodeModuleEx"];var _PyImport_ImportFrozenModuleObject=Module["_PyImport_ImportFrozenModuleObject"]=wasmExports["PyImport_ImportFrozenModuleObject"];var _PyMarshal_ReadObjectFromString=Module["_PyMarshal_ReadObjectFromString"]=wasmExports["PyMarshal_ReadObjectFromString"];var _PyImport_GetImporter=Module["_PyImport_GetImporter"]=wasmExports["PyImport_GetImporter"];var _PyImport_ImportModuleNoBlock=Module["_PyImport_ImportModuleNoBlock"]=wasmExports["PyImport_ImportModuleNoBlock"];var __PyTime_AsMicroseconds=Module["__PyTime_AsMicroseconds"]=wasmExports["_PyTime_AsMicroseconds"];var _PyImport_ImportModuleLevel=Module["_PyImport_ImportModuleLevel"]=wasmExports["PyImport_ImportModuleLevel"];var _PyImport_ReloadModule=Module["_PyImport_ReloadModule"]=wasmExports["PyImport_ReloadModule"];var __PyImport_GetModuleAttr=Module["__PyImport_GetModuleAttr"]=wasmExports["_PyImport_GetModuleAttr"];var _PyInit__imp=Module["_PyInit__imp"]=wasmExports["PyInit__imp"];var __PyRecursiveMutex_IsLockedByCurrentThread=Module["__PyRecursiveMutex_IsLockedByCurrentThread"]=wasmExports["_PyRecursiveMutex_IsLockedByCurrentThread"];var _PyModule_Add=Module["_PyModule_Add"]=wasmExports["PyModule_Add"];var _PyStatus_Exit=Module["_PyStatus_Exit"]=wasmExports["PyStatus_Exit"];var _PyStatus_IsError=Module["_PyStatus_IsError"]=wasmExports["PyStatus_IsError"];var _PyStatus_IsExit=Module["_PyStatus_IsExit"]=wasmExports["PyStatus_IsExit"];var _PyWideStringList_Insert=Module["_PyWideStringList_Insert"]=wasmExports["PyWideStringList_Insert"];var _PyWideStringList_Append=Module["_PyWideStringList_Append"]=wasmExports["PyWideStringList_Append"];var _Py_GetArgcArgv=Module["_Py_GetArgcArgv"]=wasmExports["Py_GetArgcArgv"];var __PyConfig_InitCompatConfig=Module["__PyConfig_InitCompatConfig"]=wasmExports["_PyConfig_InitCompatConfig"];var _PyConfig_InitIsolatedConfig=Module["_PyConfig_InitIsolatedConfig"]=wasmExports["PyConfig_InitIsolatedConfig"];var _PyConfig_SetString=Module["_PyConfig_SetString"]=wasmExports["PyConfig_SetString"];var _Py_DecodeLocale=Module["_Py_DecodeLocale"]=wasmExports["Py_DecodeLocale"];var __PyConfig_AsDict=Module["__PyConfig_AsDict"]=wasmExports["_PyConfig_AsDict"];var __PyConfig_FromDict=Module["__PyConfig_FromDict"]=wasmExports["_PyConfig_FromDict"];var _wcschr=Module["_wcschr"]=wasmExports["wcschr"];var _setvbuf=Module["_setvbuf"]=wasmExports["setvbuf"];var _PyConfig_SetArgv=Module["_PyConfig_SetArgv"]=wasmExports["PyConfig_SetArgv"];var _PyConfig_SetWideStringList=Module["_PyConfig_SetWideStringList"]=wasmExports["PyConfig_SetWideStringList"];var _putchar=Module["_putchar"]=wasmExports["putchar"];var _iprintf=Module["_iprintf"]=wasmExports["iprintf"];var _wcstok=Module["_wcstok"]=wasmExports["wcstok"];var _strtoul=Module["_strtoul"]=wasmExports["strtoul"];var _wcstol=Module["_wcstol"]=wasmExports["wcstol"];var _setlocale=Module["_setlocale"]=wasmExports["setlocale"];var _PyConfig_Read=Module["_PyConfig_Read"]=wasmExports["PyConfig_Read"];var __Py_GetConfigsAsDict=Module["__Py_GetConfigsAsDict"]=wasmExports["_Py_GetConfigsAsDict"];var __PyInterpreterConfig_AsDict=Module["__PyInterpreterConfig_AsDict"]=wasmExports["_PyInterpreterConfig_AsDict"];var __PyInterpreterConfig_InitFromDict=Module["__PyInterpreterConfig_InitFromDict"]=wasmExports["_PyInterpreterConfig_InitFromDict"];var __PyInterpreterConfig_UpdateFromDict=Module["__PyInterpreterConfig_UpdateFromDict"]=wasmExports["_PyInterpreterConfig_UpdateFromDict"];var __PyInterpreterConfig_InitFromState=Module["__PyInterpreterConfig_InitFromState"]=wasmExports["_PyInterpreterConfig_InitFromState"];var _PyMonitoring_EnterScope=Module["_PyMonitoring_EnterScope"]=wasmExports["PyMonitoring_EnterScope"];var _PyMonitoring_ExitScope=Module["_PyMonitoring_ExitScope"]=wasmExports["PyMonitoring_ExitScope"];var __PyMonitoring_FirePyStartEvent=Module["__PyMonitoring_FirePyStartEvent"]=wasmExports["_PyMonitoring_FirePyStartEvent"];var __PyMonitoring_FirePyResumeEvent=Module["__PyMonitoring_FirePyResumeEvent"]=wasmExports["_PyMonitoring_FirePyResumeEvent"];var __PyMonitoring_FirePyReturnEvent=Module["__PyMonitoring_FirePyReturnEvent"]=wasmExports["_PyMonitoring_FirePyReturnEvent"];var __PyMonitoring_FirePyYieldEvent=Module["__PyMonitoring_FirePyYieldEvent"]=wasmExports["_PyMonitoring_FirePyYieldEvent"];var __PyMonitoring_FireCallEvent=Module["__PyMonitoring_FireCallEvent"]=wasmExports["_PyMonitoring_FireCallEvent"];var __PyMonitoring_FireLineEvent=Module["__PyMonitoring_FireLineEvent"]=wasmExports["_PyMonitoring_FireLineEvent"];var __PyMonitoring_FireJumpEvent=Module["__PyMonitoring_FireJumpEvent"]=wasmExports["_PyMonitoring_FireJumpEvent"];var __PyMonitoring_FireBranchEvent=Module["__PyMonitoring_FireBranchEvent"]=wasmExports["_PyMonitoring_FireBranchEvent"];var __PyMonitoring_FireCReturnEvent=Module["__PyMonitoring_FireCReturnEvent"]=wasmExports["_PyMonitoring_FireCReturnEvent"];var __PyMonitoring_FirePyThrowEvent=Module["__PyMonitoring_FirePyThrowEvent"]=wasmExports["_PyMonitoring_FirePyThrowEvent"];var __PyMonitoring_FireRaiseEvent=Module["__PyMonitoring_FireRaiseEvent"]=wasmExports["_PyMonitoring_FireRaiseEvent"];var __PyMonitoring_FireCRaiseEvent=Module["__PyMonitoring_FireCRaiseEvent"]=wasmExports["_PyMonitoring_FireCRaiseEvent"];var __PyMonitoring_FireReraiseEvent=Module["__PyMonitoring_FireReraiseEvent"]=wasmExports["_PyMonitoring_FireReraiseEvent"];var __PyMonitoring_FireExceptionHandledEvent=Module["__PyMonitoring_FireExceptionHandledEvent"]=wasmExports["_PyMonitoring_FireExceptionHandledEvent"];var __PyMonitoring_FirePyUnwindEvent=Module["__PyMonitoring_FirePyUnwindEvent"]=wasmExports["_PyMonitoring_FirePyUnwindEvent"];var __PyMonitoring_FireStopIterationEvent=Module["__PyMonitoring_FireStopIterationEvent"]=wasmExports["_PyMonitoring_FireStopIterationEvent"];var __PyCompile_GetUnaryIntrinsicName=Module["__PyCompile_GetUnaryIntrinsicName"]=wasmExports["_PyCompile_GetUnaryIntrinsicName"];var __PyCompile_GetBinaryIntrinsicName=Module["__PyCompile_GetBinaryIntrinsicName"]=wasmExports["_PyCompile_GetBinaryIntrinsicName"];var _PyTime_MonotonicRaw=Module["_PyTime_MonotonicRaw"]=wasmExports["PyTime_MonotonicRaw"];var __PyParkingLot_Park=Module["__PyParkingLot_Park"]=wasmExports["_PyParkingLot_Park"];var __PyDeadline_Get=Module["__PyDeadline_Get"]=wasmExports["_PyDeadline_Get"];var __PyParkingLot_Unpark=Module["__PyParkingLot_Unpark"]=wasmExports["_PyParkingLot_Unpark"];var __PySemaphore_Init=Module["__PySemaphore_Init"]=wasmExports["_PySemaphore_Init"];var __PySemaphore_Wait=Module["__PySemaphore_Wait"]=wasmExports["_PySemaphore_Wait"];var __PySemaphore_Destroy=Module["__PySemaphore_Destroy"]=wasmExports["_PySemaphore_Destroy"];var __PySemaphore_Wakeup=Module["__PySemaphore_Wakeup"]=wasmExports["_PySemaphore_Wakeup"];var __PyEvent_IsSet=Module["__PyEvent_IsSet"]=wasmExports["_PyEvent_IsSet"];var __PyEvent_Notify=Module["__PyEvent_Notify"]=wasmExports["_PyEvent_Notify"];var __PyParkingLot_UnparkAll=Module["__PyParkingLot_UnparkAll"]=wasmExports["_PyParkingLot_UnparkAll"];var _PyEvent_Wait=Module["_PyEvent_Wait"]=wasmExports["PyEvent_Wait"];var _PyEvent_WaitTimed=Module["_PyEvent_WaitTimed"]=wasmExports["PyEvent_WaitTimed"];var __PyRWMutex_RLock=Module["__PyRWMutex_RLock"]=wasmExports["_PyRWMutex_RLock"];var __PyRWMutex_RUnlock=Module["__PyRWMutex_RUnlock"]=wasmExports["_PyRWMutex_RUnlock"];var __PyRWMutex_Lock=Module["__PyRWMutex_Lock"]=wasmExports["_PyRWMutex_Lock"];var __PyRWMutex_Unlock=Module["__PyRWMutex_Unlock"]=wasmExports["_PyRWMutex_Unlock"];var __PySeqLock_LockWrite=Module["__PySeqLock_LockWrite"]=wasmExports["_PySeqLock_LockWrite"];var _sched_yield=Module["_sched_yield"]=wasmExports["sched_yield"];var __PySeqLock_AbandonWrite=Module["__PySeqLock_AbandonWrite"]=wasmExports["_PySeqLock_AbandonWrite"];var __PySeqLock_UnlockWrite=Module["__PySeqLock_UnlockWrite"]=wasmExports["_PySeqLock_UnlockWrite"];var __PySeqLock_BeginRead=Module["__PySeqLock_BeginRead"]=wasmExports["_PySeqLock_BeginRead"];var __PySeqLock_EndRead=Module["__PySeqLock_EndRead"]=wasmExports["_PySeqLock_EndRead"];var __PySeqLock_AfterFork=Module["__PySeqLock_AfterFork"]=wasmExports["_PySeqLock_AfterFork"];var _PyMarshal_WriteLongToFile=Module["_PyMarshal_WriteLongToFile"]=wasmExports["PyMarshal_WriteLongToFile"];var _PyMarshal_WriteObjectToFile=Module["_PyMarshal_WriteObjectToFile"]=wasmExports["PyMarshal_WriteObjectToFile"];var _PyMarshal_ReadShortFromFile=Module["_PyMarshal_ReadShortFromFile"]=wasmExports["PyMarshal_ReadShortFromFile"];var _PyMarshal_ReadLongFromFile=Module["_PyMarshal_ReadLongFromFile"]=wasmExports["PyMarshal_ReadLongFromFile"];var _PyMarshal_ReadLastObjectFromFile=Module["_PyMarshal_ReadLastObjectFromFile"]=wasmExports["PyMarshal_ReadLastObjectFromFile"];var __Py_fstat_noraise=Module["__Py_fstat_noraise"]=wasmExports["_Py_fstat_noraise"];var _fread=Module["_fread"]=wasmExports["fread"];var _PyMarshal_ReadObjectFromFile=Module["_PyMarshal_ReadObjectFromFile"]=wasmExports["PyMarshal_ReadObjectFromFile"];var _PyMarshal_WriteObjectToString=Module["_PyMarshal_WriteObjectToString"]=wasmExports["PyMarshal_WriteObjectToString"];var _PyMarshal_Init=Module["_PyMarshal_Init"]=wasmExports["PyMarshal_Init"];var __Py_convert_optional_to_ssize_t=Module["__Py_convert_optional_to_ssize_t"]=wasmExports["_Py_convert_optional_to_ssize_t"];var __Py_BuildValue_SizeT=Module["__Py_BuildValue_SizeT"]=wasmExports["_Py_BuildValue_SizeT"];var _Py_VaBuildValue=Module["_Py_VaBuildValue"]=wasmExports["Py_VaBuildValue"];var __Py_VaBuildValue_SizeT=Module["__Py_VaBuildValue_SizeT"]=wasmExports["_Py_VaBuildValue_SizeT"];var _PyModule_AddStringConstant=Module["_PyModule_AddStringConstant"]=wasmExports["PyModule_AddStringConstant"];var _PyOS_vsnprintf=Module["_PyOS_vsnprintf"]=wasmExports["PyOS_vsnprintf"];var _pthread_cond_init=Module["_pthread_cond_init"]=wasmExports["pthread_cond_init"];var _PyTime_TimeRaw=Module["_PyTime_TimeRaw"]=wasmExports["PyTime_TimeRaw"];var __PyTime_AsTimespec_clamp=Module["__PyTime_AsTimespec_clamp"]=wasmExports["_PyTime_AsTimespec_clamp"];var __PyParkingLot_AfterFork=Module["__PyParkingLot_AfterFork"]=wasmExports["_PyParkingLot_AfterFork"];var __PyPathConfig_ClearGlobal=Module["__PyPathConfig_ClearGlobal"]=wasmExports["_PyPathConfig_ClearGlobal"];var _wcscpy=Module["_wcscpy"]=wasmExports["wcscpy"];var _Py_SetPath=Module["_Py_SetPath"]=wasmExports["Py_SetPath"];var _Py_SetPythonHome=Module["_Py_SetPythonHome"]=wasmExports["Py_SetPythonHome"];var _Py_SetProgramName=Module["_Py_SetProgramName"]=wasmExports["Py_SetProgramName"];var _Py_GetPath=Module["_Py_GetPath"]=wasmExports["Py_GetPath"];var _Py_GetPrefix=Module["_Py_GetPrefix"]=wasmExports["Py_GetPrefix"];var _Py_GetExecPrefix=Module["_Py_GetExecPrefix"]=wasmExports["Py_GetExecPrefix"];var _Py_GetProgramFullPath=Module["_Py_GetProgramFullPath"]=wasmExports["Py_GetProgramFullPath"];var _Py_GetPythonHome=Module["_Py_GetPythonHome"]=wasmExports["Py_GetPythonHome"];var _Py_GetProgramName=Module["_Py_GetProgramName"]=wasmExports["Py_GetProgramName"];var _wcsncpy=Module["_wcsncpy"]=wasmExports["wcsncpy"];var _wcsncmp=Module["_wcsncmp"]=wasmExports["wcsncmp"];var __PyPreConfig_InitCompatConfig=Module["__PyPreConfig_InitCompatConfig"]=wasmExports["_PyPreConfig_InitCompatConfig"];var _PyPreConfig_InitIsolatedConfig=Module["_PyPreConfig_InitIsolatedConfig"]=wasmExports["PyPreConfig_InitIsolatedConfig"];var __Py_SetLocaleFromEnv=Module["__Py_SetLocaleFromEnv"]=wasmExports["_Py_SetLocaleFromEnv"];var _PyHash_GetFuncDef=Module["_PyHash_GetFuncDef"]=wasmExports["PyHash_GetFuncDef"];var _Py_IsFinalizing=Module["_Py_IsFinalizing"]=wasmExports["Py_IsFinalizing"];var _nl_langinfo=Module["_nl_langinfo"]=wasmExports["nl_langinfo"];var _setenv=Module["_setenv"]=wasmExports["setenv"];var __PyInterpreterState_SetConfig=Module["__PyInterpreterState_SetConfig"]=wasmExports["_PyInterpreterState_SetConfig"];var _Py_PreInitializeFromArgs=Module["_Py_PreInitializeFromArgs"]=wasmExports["Py_PreInitializeFromArgs"];var _Py_PreInitialize=Module["_Py_PreInitialize"]=wasmExports["Py_PreInitialize"];var _Py_InitializeEx=Module["_Py_InitializeEx"]=wasmExports["Py_InitializeEx"];var _Py_FatalError=Module["_Py_FatalError"]=wasmExports["Py_FatalError"];var _Py_Initialize=Module["_Py_Initialize"]=wasmExports["Py_Initialize"];var __Py_InitializeMain=Module["__Py_InitializeMain"]=wasmExports["_Py_InitializeMain"];var __PyThreadState_New=Module["__PyThreadState_New"]=wasmExports["_PyThreadState_New"];var _Py_Finalize=Module["_Py_Finalize"]=wasmExports["Py_Finalize"];var _PyInterpreterState_New=Module["_PyInterpreterState_New"]=wasmExports["PyInterpreterState_New"];var _Py_NewInterpreter=Module["_Py_NewInterpreter"]=wasmExports["Py_NewInterpreter"];var __Py_write_noraise=Module["__Py_write_noraise"]=wasmExports["_Py_write_noraise"];var _vfprintf=Module["_vfprintf"]=wasmExports["vfprintf"];var __Py_FatalRefcountErrorFunc=Module["__Py_FatalRefcountErrorFunc"]=wasmExports["_Py_FatalRefcountErrorFunc"];var _Py_AtExit=Module["_Py_AtExit"]=wasmExports["Py_AtExit"];var _Py_Exit=Module["_Py_Exit"]=wasmExports["Py_Exit"];var _Py_FdIsInteractive=Module["_Py_FdIsInteractive"]=wasmExports["Py_FdIsInteractive"];var _PyOS_getsig=Module["_PyOS_getsig"]=wasmExports["PyOS_getsig"];var _signal=Module["_signal"]=wasmExports["signal"];var _PyOS_setsig=Module["_PyOS_setsig"]=wasmExports["PyOS_setsig"];var _siginterrupt=Module["_siginterrupt"]=wasmExports["siginterrupt"];var __PyInterpreterState_New=Module["__PyInterpreterState_New"]=wasmExports["_PyInterpreterState_New"];var _PySys_SetObject=Module["_PySys_SetObject"]=wasmExports["PySys_SetObject"];var __Py_IsValidFD=Module["__Py_IsValidFD"]=wasmExports["_Py_IsValidFD"];var _PyOS_mystrnicmp=Module["_PyOS_mystrnicmp"]=wasmExports["PyOS_mystrnicmp"];var __PyThreadState_GetCurrent=Module["__PyThreadState_GetCurrent"]=wasmExports["_PyThreadState_GetCurrent"];var _PyThread_tss_create=Module["_PyThread_tss_create"]=wasmExports["PyThread_tss_create"];var _PyThread_tss_is_created=Module["_PyThread_tss_is_created"]=wasmExports["PyThread_tss_is_created"];var _PyThread_tss_delete=Module["_PyThread_tss_delete"]=wasmExports["PyThread_tss_delete"];var _PyThread_tss_get=Module["_PyThread_tss_get"]=wasmExports["PyThread_tss_get"];var _PyThread_tss_set=Module["_PyThread_tss_set"]=wasmExports["PyThread_tss_set"];var _PyInterpreterState_Clear=Module["_PyInterpreterState_Clear"]=wasmExports["PyInterpreterState_Clear"];var _PyThread_free_lock=Module["_PyThread_free_lock"]=wasmExports["PyThread_free_lock"];var __PyInterpreterState_IsRunningMain=Module["__PyInterpreterState_IsRunningMain"]=wasmExports["_PyInterpreterState_IsRunningMain"];var __PyInterpreterState_FailIfRunningMain=Module["__PyInterpreterState_FailIfRunningMain"]=wasmExports["_PyInterpreterState_FailIfRunningMain"];var __PyInterpreterState_GetWhence=Module["__PyInterpreterState_GetWhence"]=wasmExports["_PyInterpreterState_GetWhence"];var _PyInterpreterState_GetDict=Module["_PyInterpreterState_GetDict"]=wasmExports["PyInterpreterState_GetDict"];var __PyInterpreterState_ObjectToID=Module["__PyInterpreterState_ObjectToID"]=wasmExports["_PyInterpreterState_ObjectToID"];var __PyInterpreterState_GetIDObject=Module["__PyInterpreterState_GetIDObject"]=wasmExports["_PyInterpreterState_GetIDObject"];var _PyThread_allocate_lock=Module["_PyThread_allocate_lock"]=wasmExports["PyThread_allocate_lock"];var __PyInterpreterState_IDInitref=Module["__PyInterpreterState_IDInitref"]=wasmExports["_PyInterpreterState_IDInitref"];var __PyInterpreterState_IDIncref=Module["__PyInterpreterState_IDIncref"]=wasmExports["_PyInterpreterState_IDIncref"];var _PyThread_acquire_lock=Module["_PyThread_acquire_lock"]=wasmExports["PyThread_acquire_lock"];var _PyThread_release_lock=Module["_PyThread_release_lock"]=wasmExports["PyThread_release_lock"];var __PyInterpreterState_IDDecref=Module["__PyInterpreterState_IDDecref"]=wasmExports["_PyInterpreterState_IDDecref"];var __PyInterpreterState_RequiresIDRef=Module["__PyInterpreterState_RequiresIDRef"]=wasmExports["_PyInterpreterState_RequiresIDRef"];var __PyInterpreterState_RequireIDRef=Module["__PyInterpreterState_RequireIDRef"]=wasmExports["_PyInterpreterState_RequireIDRef"];var __PyInterpreterState_LookUpIDObject=Module["__PyInterpreterState_LookUpIDObject"]=wasmExports["_PyInterpreterState_LookUpIDObject"];var __PyThreadState_Prealloc=Module["__PyThreadState_Prealloc"]=wasmExports["_PyThreadState_Prealloc"];var __PyThreadState_Init=Module["__PyThreadState_Init"]=wasmExports["_PyThreadState_Init"];var _PyThreadState_DeleteCurrent=Module["_PyThreadState_DeleteCurrent"]=wasmExports["PyThreadState_DeleteCurrent"];var __PyThreadState_GetDict=Module["__PyThreadState_GetDict"]=wasmExports["_PyThreadState_GetDict"];var _PyThreadState_GetID=Module["_PyThreadState_GetID"]=wasmExports["PyThreadState_GetID"];var _PyThreadState_SetAsyncExc=Module["_PyThreadState_SetAsyncExc"]=wasmExports["PyThreadState_SetAsyncExc"];var _PyThreadState_GetUnchecked=Module["_PyThreadState_GetUnchecked"]=wasmExports["PyThreadState_GetUnchecked"];var _PyInterpreterState_Head=Module["_PyInterpreterState_Head"]=wasmExports["PyInterpreterState_Head"];var _PyInterpreterState_Main=Module["_PyInterpreterState_Main"]=wasmExports["PyInterpreterState_Main"];var _PyInterpreterState_Next=Module["_PyInterpreterState_Next"]=wasmExports["PyInterpreterState_Next"];var __PyThread_CurrentFrames=Module["__PyThread_CurrentFrames"]=wasmExports["_PyThread_CurrentFrames"];var __PyInterpreterState_GetEvalFrameFunc=Module["__PyInterpreterState_GetEvalFrameFunc"]=wasmExports["_PyInterpreterState_GetEvalFrameFunc"];var __PyInterpreterState_SetEvalFrameFunc=Module["__PyInterpreterState_SetEvalFrameFunc"]=wasmExports["_PyInterpreterState_SetEvalFrameFunc"];var __PyInterpreterState_GetConfigCopy=Module["__PyInterpreterState_GetConfigCopy"]=wasmExports["_PyInterpreterState_GetConfigCopy"];var _rewind=Module["_rewind"]=wasmExports["rewind"];var _PyRun_InteractiveLoopFlags=Module["_PyRun_InteractiveLoopFlags"]=wasmExports["PyRun_InteractiveLoopFlags"];var _PyRun_InteractiveOneObject=Module["_PyRun_InteractiveOneObject"]=wasmExports["PyRun_InteractiveOneObject"];var _PyRun_InteractiveOneFlags=Module["_PyRun_InteractiveOneFlags"]=wasmExports["PyRun_InteractiveOneFlags"];var _PyRun_SimpleFileExFlags=Module["_PyRun_SimpleFileExFlags"]=wasmExports["PyRun_SimpleFileExFlags"];var _PyRun_SimpleStringFlags=Module["_PyRun_SimpleStringFlags"]=wasmExports["PyRun_SimpleStringFlags"];var _PyErr_Display=Module["_PyErr_Display"]=wasmExports["PyErr_Display"];var _PyRun_FileExFlags=Module["_PyRun_FileExFlags"]=wasmExports["PyRun_FileExFlags"];var _Py_CompileStringExFlags=Module["_Py_CompileStringExFlags"]=wasmExports["Py_CompileStringExFlags"];var _PyRun_AnyFile=Module["_PyRun_AnyFile"]=wasmExports["PyRun_AnyFile"];var _PyRun_AnyFileEx=Module["_PyRun_AnyFileEx"]=wasmExports["PyRun_AnyFileEx"];var _PyRun_AnyFileFlags=Module["_PyRun_AnyFileFlags"]=wasmExports["PyRun_AnyFileFlags"];var _PyRun_File=Module["_PyRun_File"]=wasmExports["PyRun_File"];var _PyRun_FileEx=Module["_PyRun_FileEx"]=wasmExports["PyRun_FileEx"];var _PyRun_FileFlags=Module["_PyRun_FileFlags"]=wasmExports["PyRun_FileFlags"];var _PyRun_SimpleFile=Module["_PyRun_SimpleFile"]=wasmExports["PyRun_SimpleFile"];var _PyRun_SimpleFileEx=Module["_PyRun_SimpleFileEx"]=wasmExports["PyRun_SimpleFileEx"];var _PyRun_String=Module["_PyRun_String"]=wasmExports["PyRun_String"];var _PyRun_SimpleString=Module["_PyRun_SimpleString"]=wasmExports["PyRun_SimpleString"];var _Py_CompileString=Module["_Py_CompileString"]=wasmExports["Py_CompileString"];var _Py_CompileStringFlags=Module["_Py_CompileStringFlags"]=wasmExports["Py_CompileStringFlags"];var _PyRun_InteractiveOne=Module["_PyRun_InteractiveOne"]=wasmExports["PyRun_InteractiveOne"];var _PyRun_InteractiveLoop=Module["_PyRun_InteractiveLoop"]=wasmExports["PyRun_InteractiveLoop"];var __PyLong_AsTime_t=Module["__PyLong_AsTime_t"]=wasmExports["_PyLong_AsTime_t"];var __PyLong_FromTime_t=Module["__PyLong_FromTime_t"]=wasmExports["_PyLong_FromTime_t"];var __PyTime_ObjectToTime_t=Module["__PyTime_ObjectToTime_t"]=wasmExports["_PyTime_ObjectToTime_t"];var __PyTime_ObjectToTimespec=Module["__PyTime_ObjectToTimespec"]=wasmExports["_PyTime_ObjectToTimespec"];var __PyTime_ObjectToTimeval=Module["__PyTime_ObjectToTimeval"]=wasmExports["_PyTime_ObjectToTimeval"];var __PyTime_FromSeconds=Module["__PyTime_FromSeconds"]=wasmExports["_PyTime_FromSeconds"];var __PyTime_FromLong=Module["__PyTime_FromLong"]=wasmExports["_PyTime_FromLong"];var __PyTime_FromSecondsObject=Module["__PyTime_FromSecondsObject"]=wasmExports["_PyTime_FromSecondsObject"];var __PyTime_FromMillisecondsObject=Module["__PyTime_FromMillisecondsObject"]=wasmExports["_PyTime_FromMillisecondsObject"];var __PyTime_AsLong=Module["__PyTime_AsLong"]=wasmExports["_PyTime_AsLong"];var __PyTime_AsMilliseconds=Module["__PyTime_AsMilliseconds"]=wasmExports["_PyTime_AsMilliseconds"];var __PyTime_AsTimeval=Module["__PyTime_AsTimeval"]=wasmExports["_PyTime_AsTimeval"];var __PyTime_AsTimeval_clamp=Module["__PyTime_AsTimeval_clamp"]=wasmExports["_PyTime_AsTimeval_clamp"];var __PyTime_AsTimevalTime_t=Module["__PyTime_AsTimevalTime_t"]=wasmExports["_PyTime_AsTimevalTime_t"];var __PyTime_AsTimespec=Module["__PyTime_AsTimespec"]=wasmExports["_PyTime_AsTimespec"];var _PyTime_Time=Module["_PyTime_Time"]=wasmExports["PyTime_Time"];var _clock_getres=Module["_clock_getres"]=wasmExports["clock_getres"];var _PyTime_Monotonic=Module["_PyTime_Monotonic"]=wasmExports["PyTime_Monotonic"];var __PyTime_MonotonicWithInfo=Module["__PyTime_MonotonicWithInfo"]=wasmExports["_PyTime_MonotonicWithInfo"];var _PyTime_PerfCounter=Module["_PyTime_PerfCounter"]=wasmExports["PyTime_PerfCounter"];var __PyTime_localtime=Module["__PyTime_localtime"]=wasmExports["_PyTime_localtime"];var _localtime_r=Module["_localtime_r"]=wasmExports["localtime_r"];var __PyTime_gmtime=Module["__PyTime_gmtime"]=wasmExports["_PyTime_gmtime"];var _gmtime_r=Module["_gmtime_r"]=wasmExports["gmtime_r"];var __PyDeadline_Init=Module["__PyDeadline_Init"]=wasmExports["_PyDeadline_Init"];var _getentropy=Module["_getentropy"]=wasmExports["getentropy"];var __Py_open=Module["__Py_open"]=wasmExports["_Py_open"];var _close=Module["_close"]=wasmExports["close"];var __Py_fstat=Module["__Py_fstat"]=wasmExports["_Py_fstat"];var __Py_open_noraise=Module["__Py_open_noraise"]=wasmExports["_Py_open_noraise"];var __PyOS_URandomNonblock=Module["__PyOS_URandomNonblock"]=wasmExports["_PyOS_URandomNonblock"];var _PySys_AuditTuple=Module["_PySys_AuditTuple"]=wasmExports["PySys_AuditTuple"];var _PySys_AddAuditHook=Module["_PySys_AddAuditHook"]=wasmExports["PySys_AddAuditHook"];var __PySys_GetSizeOf=Module["__PySys_GetSizeOf"]=wasmExports["_PySys_GetSizeOf"];var _PyUnstable_PerfMapState_Init=Module["_PyUnstable_PerfMapState_Init"]=wasmExports["PyUnstable_PerfMapState_Init"];var _getpid=Module["_getpid"]=wasmExports["getpid"];var _open=Module["_open"]=wasmExports["open"];var _fdopen=Module["_fdopen"]=wasmExports["fdopen"];var _PyUnstable_WritePerfMapEntry=Module["_PyUnstable_WritePerfMapEntry"]=wasmExports["PyUnstable_WritePerfMapEntry"];var _PyUnstable_PerfMapState_Fini=Module["_PyUnstable_PerfMapState_Fini"]=wasmExports["PyUnstable_PerfMapState_Fini"];var _PyUnstable_CopyPerfMapFile=Module["_PyUnstable_CopyPerfMapFile"]=wasmExports["PyUnstable_CopyPerfMapFile"];var _fopen=Module["_fopen"]=wasmExports["fopen"];var _PySys_ResetWarnOptions=Module["_PySys_ResetWarnOptions"]=wasmExports["PySys_ResetWarnOptions"];var _PySys_AddWarnOptionUnicode=Module["_PySys_AddWarnOptionUnicode"]=wasmExports["PySys_AddWarnOptionUnicode"];var _PySys_AddWarnOption=Module["_PySys_AddWarnOption"]=wasmExports["PySys_AddWarnOption"];var _PySys_HasWarnOptions=Module["_PySys_HasWarnOptions"]=wasmExports["PySys_HasWarnOptions"];var _PySys_AddXOption=Module["_PySys_AddXOption"]=wasmExports["PySys_AddXOption"];var _PySys_GetXOptions=Module["_PySys_GetXOptions"]=wasmExports["PySys_GetXOptions"];var _PyThread_GetInfo=Module["_PyThread_GetInfo"]=wasmExports["PyThread_GetInfo"];var _PySys_SetPath=Module["_PySys_SetPath"]=wasmExports["PySys_SetPath"];var _PySys_SetArgvEx=Module["_PySys_SetArgvEx"]=wasmExports["PySys_SetArgvEx"];var _PySys_SetArgv=Module["_PySys_SetArgv"]=wasmExports["PySys_SetArgv"];var _PySys_WriteStdout=Module["_PySys_WriteStdout"]=wasmExports["PySys_WriteStdout"];var _PySys_FormatStdout=Module["_PySys_FormatStdout"]=wasmExports["PySys_FormatStdout"];var _pthread_condattr_init=Module["_pthread_condattr_init"]=wasmExports["pthread_condattr_init"];var _pthread_condattr_setclock=Module["_pthread_condattr_setclock"]=wasmExports["pthread_condattr_setclock"];var _PyThread_start_joinable_thread=Module["_PyThread_start_joinable_thread"]=wasmExports["PyThread_start_joinable_thread"];var _pthread_attr_init=Module["_pthread_attr_init"]=wasmExports["pthread_attr_init"];var _pthread_attr_setstacksize=Module["_pthread_attr_setstacksize"]=wasmExports["pthread_attr_setstacksize"];var _pthread_attr_destroy=Module["_pthread_attr_destroy"]=wasmExports["pthread_attr_destroy"];var _pthread_create=Module["_pthread_create"]=wasmExports["pthread_create"];var _PyThread_start_new_thread=Module["_PyThread_start_new_thread"]=wasmExports["PyThread_start_new_thread"];var _pthread_detach=Module["_pthread_detach"]=wasmExports["pthread_detach"];var _PyThread_join_thread=Module["_PyThread_join_thread"]=wasmExports["PyThread_join_thread"];var _pthread_join=Module["_pthread_join"]=wasmExports["pthread_join"];var _PyThread_detach_thread=Module["_PyThread_detach_thread"]=wasmExports["PyThread_detach_thread"];var _pthread_self=Module["_pthread_self"]=wasmExports["pthread_self"];var _PyThread_acquire_lock_timed=Module["_PyThread_acquire_lock_timed"]=wasmExports["PyThread_acquire_lock_timed"];var _pthread_mutex_trylock=Module["_pthread_mutex_trylock"]=wasmExports["pthread_mutex_trylock"];var _PyThread_create_key=Module["_PyThread_create_key"]=wasmExports["PyThread_create_key"];var _pthread_key_create=Module["_pthread_key_create"]=wasmExports["pthread_key_create"];var _pthread_key_delete=Module["_pthread_key_delete"]=wasmExports["pthread_key_delete"];var _PyThread_delete_key=Module["_PyThread_delete_key"]=wasmExports["PyThread_delete_key"];var _PyThread_delete_key_value=Module["_PyThread_delete_key_value"]=wasmExports["PyThread_delete_key_value"];var _pthread_setspecific=Module["_pthread_setspecific"]=wasmExports["pthread_setspecific"];var _PyThread_set_key_value=Module["_PyThread_set_key_value"]=wasmExports["PyThread_set_key_value"];var _PyThread_get_key_value=Module["_PyThread_get_key_value"]=wasmExports["PyThread_get_key_value"];var _pthread_getspecific=Module["_pthread_getspecific"]=wasmExports["pthread_getspecific"];var _PyThread_ReInitTLS=Module["_PyThread_ReInitTLS"]=wasmExports["PyThread_ReInitTLS"];var _PyThread_get_stacksize=Module["_PyThread_get_stacksize"]=wasmExports["PyThread_get_stacksize"];var _PyThread_set_stacksize=Module["_PyThread_set_stacksize"]=wasmExports["PyThread_set_stacksize"];var _PyThread_ParseTimeoutArg=Module["_PyThread_ParseTimeoutArg"]=wasmExports["PyThread_ParseTimeoutArg"];var _PyThread_acquire_lock_timed_with_retries=Module["_PyThread_acquire_lock_timed_with_retries"]=wasmExports["PyThread_acquire_lock_timed_with_retries"];var _PyThread_tss_alloc=Module["_PyThread_tss_alloc"]=wasmExports["PyThread_tss_alloc"];var _PyThread_tss_free=Module["_PyThread_tss_free"]=wasmExports["PyThread_tss_free"];var _confstr=Module["_confstr"]=wasmExports["confstr"];var __PyTraceback_Add=Module["__PyTraceback_Add"]=wasmExports["_PyTraceback_Add"];var _PyTraceMalloc_Track=Module["_PyTraceMalloc_Track"]=wasmExports["PyTraceMalloc_Track"];var _PyTraceMalloc_Untrack=Module["_PyTraceMalloc_Untrack"]=wasmExports["PyTraceMalloc_Untrack"];var __PyTraceMalloc_GetTraceback=Module["__PyTraceMalloc_GetTraceback"]=wasmExports["_PyTraceMalloc_GetTraceback"];var _PyOS_mystricmp=Module["_PyOS_mystricmp"]=wasmExports["PyOS_mystricmp"];var __Py_strhex=Module["__Py_strhex"]=wasmExports["_Py_strhex"];var __Py_strhex_bytes_with_sep=Module["__Py_strhex_bytes_with_sep"]=wasmExports["_Py_strhex_bytes_with_sep"];var _localeconv=Module["_localeconv"]=wasmExports["localeconv"];var _mbstowcs=Module["_mbstowcs"]=wasmExports["mbstowcs"];var _mbrtowc=Module["_mbrtowc"]=wasmExports["mbrtowc"];var _Py_EncodeLocale=Module["_Py_EncodeLocale"]=wasmExports["Py_EncodeLocale"];var _fstat=Module["_fstat"]=wasmExports["fstat"];var _stat=Module["_stat"]=wasmExports["stat"];var __Py_stat=Module["__Py_stat"]=wasmExports["_Py_stat"];var _fcntl=Module["_fcntl"]=wasmExports["fcntl"];var __Py_set_inheritable=Module["__Py_set_inheritable"]=wasmExports["_Py_set_inheritable"];var __Py_set_inheritable_async_safe=Module["__Py_set_inheritable_async_safe"]=wasmExports["_Py_set_inheritable_async_safe"];var _wcstombs=Module["_wcstombs"]=wasmExports["wcstombs"];var _write=Module["_write"]=wasmExports["write"];var _readlink=Module["_readlink"]=wasmExports["readlink"];var _realpath=Module["_realpath"]=wasmExports["realpath"];var _getcwd=Module["_getcwd"]=wasmExports["getcwd"];var __Py_normpath=Module["__Py_normpath"]=wasmExports["_Py_normpath"];var __Py_dup=Module["__Py_dup"]=wasmExports["_Py_dup"];var __Py_closerange=Module["__Py_closerange"]=wasmExports["_Py_closerange"];var _sysconf=Module["_sysconf"]=wasmExports["sysconf"];var __Py_UTF8_Edit_Cost=Module["__Py_UTF8_Edit_Cost"]=wasmExports["_Py_UTF8_Edit_Cost"];var _PyUnstable_PerfTrampoline_CompileCode=Module["_PyUnstable_PerfTrampoline_CompileCode"]=wasmExports["PyUnstable_PerfTrampoline_CompileCode"];var _PyUnstable_PerfTrampoline_SetPersistAfterFork=Module["_PyUnstable_PerfTrampoline_SetPersistAfterFork"]=wasmExports["PyUnstable_PerfTrampoline_SetPersistAfterFork"];var _dlopen=Module["_dlopen"]=wasmExports["dlopen"];var _dlerror=Module["_dlerror"]=wasmExports["dlerror"];var _dlsym=Module["_dlsym"]=wasmExports["dlsym"];var _PyErr_SetInterruptEx=Module["_PyErr_SetInterruptEx"]=wasmExports["PyErr_SetInterruptEx"];var _PyInit__ctypes=Module["_PyInit__ctypes"]=wasmExports["PyInit__ctypes"];var _PyInit__posixsubprocess=Module["_PyInit__posixsubprocess"]=wasmExports["PyInit__posixsubprocess"];var _PyInit__bz2=Module["_PyInit__bz2"]=wasmExports["PyInit__bz2"];var _PyInit_zlib=Module["_PyInit_zlib"]=wasmExports["PyInit_zlib"];var _PyInit_array=Module["_PyInit_array"]=wasmExports["PyInit_array"];var _PyInit__asyncio=Module["_PyInit__asyncio"]=wasmExports["PyInit__asyncio"];var _PyInit__bisect=Module["_PyInit__bisect"]=wasmExports["PyInit__bisect"];var _PyInit__contextvars=Module["_PyInit__contextvars"]=wasmExports["PyInit__contextvars"];var _PyInit__csv=Module["_PyInit__csv"]=wasmExports["PyInit__csv"];var _PyInit__heapq=Module["_PyInit__heapq"]=wasmExports["PyInit__heapq"];var _PyInit__json=Module["_PyInit__json"]=wasmExports["PyInit__json"];var _PyInit__lsprof=Module["_PyInit__lsprof"]=wasmExports["PyInit__lsprof"];var _PyInit__opcode=Module["_PyInit__opcode"]=wasmExports["PyInit__opcode"];var _PyInit__pickle=Module["_PyInit__pickle"]=wasmExports["PyInit__pickle"];var _PyInit__queue=Module["_PyInit__queue"]=wasmExports["PyInit__queue"];var _PyInit__random=Module["_PyInit__random"]=wasmExports["PyInit__random"];var _PyInit__struct=Module["_PyInit__struct"]=wasmExports["PyInit__struct"];var _PyInit__zoneinfo=Module["_PyInit__zoneinfo"]=wasmExports["PyInit__zoneinfo"];var _PyInit_math=Module["_PyInit_math"]=wasmExports["PyInit_math"];var _PyInit_cmath=Module["_PyInit_cmath"]=wasmExports["PyInit_cmath"];var _PyInit__statistics=Module["_PyInit__statistics"]=wasmExports["PyInit__statistics"];var _PyInit__datetime=Module["_PyInit__datetime"]=wasmExports["PyInit__datetime"];var _PyInit__decimal=Module["_PyInit__decimal"]=wasmExports["PyInit__decimal"];var _PyInit_binascii=Module["_PyInit_binascii"]=wasmExports["PyInit_binascii"];var _PyInit__md5=Module["_PyInit__md5"]=wasmExports["PyInit__md5"];var _PyInit__sha1=Module["_PyInit__sha1"]=wasmExports["PyInit__sha1"];var _PyInit__sha2=Module["_PyInit__sha2"]=wasmExports["PyInit__sha2"];var _PyInit__sha3=Module["_PyInit__sha3"]=wasmExports["PyInit__sha3"];var _PyInit__blake2=Module["_PyInit__blake2"]=wasmExports["PyInit__blake2"];var _PyInit_pyexpat=Module["_PyInit_pyexpat"]=wasmExports["PyInit_pyexpat"];var _PyInit__elementtree=Module["_PyInit__elementtree"]=wasmExports["PyInit__elementtree"];var _PyInit__codecs_cn=Module["_PyInit__codecs_cn"]=wasmExports["PyInit__codecs_cn"];var _PyInit__codecs_hk=Module["_PyInit__codecs_hk"]=wasmExports["PyInit__codecs_hk"];var _PyInit__codecs_iso2022=Module["_PyInit__codecs_iso2022"]=wasmExports["PyInit__codecs_iso2022"];var _PyInit__codecs_jp=Module["_PyInit__codecs_jp"]=wasmExports["PyInit__codecs_jp"];var _PyInit__codecs_kr=Module["_PyInit__codecs_kr"]=wasmExports["PyInit__codecs_kr"];var _PyInit__codecs_tw=Module["_PyInit__codecs_tw"]=wasmExports["PyInit__codecs_tw"];var _PyInit__multibytecodec=Module["_PyInit__multibytecodec"]=wasmExports["PyInit__multibytecodec"];var _PyInit_unicodedata=Module["_PyInit_unicodedata"]=wasmExports["PyInit_unicodedata"];var _PyInit_mmap=Module["_PyInit_mmap"]=wasmExports["PyInit_mmap"];var _PyInit_select=Module["_PyInit_select"]=wasmExports["PyInit_select"];var _PyInit__socket=Module["_PyInit__socket"]=wasmExports["PyInit__socket"];var _PyInit_atexit=Module["_PyInit_atexit"]=wasmExports["PyInit_atexit"];var _PyInit_faulthandler=Module["_PyInit_faulthandler"]=wasmExports["PyInit_faulthandler"];var _PyInit_posix=Module["_PyInit_posix"]=wasmExports["PyInit_posix"];var _PyInit__signal=Module["_PyInit__signal"]=wasmExports["PyInit__signal"];var _PyInit__tracemalloc=Module["_PyInit__tracemalloc"]=wasmExports["PyInit__tracemalloc"];var _PyInit__suggestions=Module["_PyInit__suggestions"]=wasmExports["PyInit__suggestions"];var _PyInit__codecs=Module["_PyInit__codecs"]=wasmExports["PyInit__codecs"];var _PyInit__collections=Module["_PyInit__collections"]=wasmExports["PyInit__collections"];var _PyInit_errno=Module["_PyInit_errno"]=wasmExports["PyInit_errno"];var _PyInit__io=Module["_PyInit__io"]=wasmExports["PyInit__io"];var _PyInit_itertools=Module["_PyInit_itertools"]=wasmExports["PyInit_itertools"];var _PyInit__sre=Module["_PyInit__sre"]=wasmExports["PyInit__sre"];var _PyInit__sysconfig=Module["_PyInit__sysconfig"]=wasmExports["PyInit__sysconfig"];var _PyInit__thread=Module["_PyInit__thread"]=wasmExports["PyInit__thread"];var _PyInit_time=Module["_PyInit_time"]=wasmExports["PyInit_time"];var _PyInit__typing=Module["_PyInit__typing"]=wasmExports["PyInit__typing"];var _PyInit__weakref=Module["_PyInit__weakref"]=wasmExports["PyInit__weakref"];var _PyInit__abc=Module["_PyInit__abc"]=wasmExports["PyInit__abc"];var _PyInit__functools=Module["_PyInit__functools"]=wasmExports["PyInit__functools"];var _PyInit__locale=Module["_PyInit__locale"]=wasmExports["PyInit__locale"];var _PyInit__operator=Module["_PyInit__operator"]=wasmExports["PyInit__operator"];var _PyInit__stat=Module["_PyInit__stat"]=wasmExports["PyInit__stat"];var _PyInit__symtable=Module["_PyInit__symtable"]=wasmExports["PyInit__symtable"];var _PyInit_gc=Module["_PyInit_gc"]=wasmExports["PyInit_gc"];var _Py_RunMain=Module["_Py_RunMain"]=wasmExports["Py_RunMain"];var _perror=Module["_perror"]=wasmExports["perror"];var _kill=Module["_kill"]=wasmExports["kill"];var _Py_Main=Module["_Py_Main"]=wasmExports["Py_Main"];var _Py_BytesMain=Module["_Py_BytesMain"]=wasmExports["Py_BytesMain"];var _strcat=Module["_strcat"]=wasmExports["strcat"];var _memmove=Module["_memmove"]=wasmExports["memmove"];var _memset=Module["_memset"]=wasmExports["memset"];var _ffi_closure_alloc=Module["_ffi_closure_alloc"]=wasmExports["ffi_closure_alloc"];var _ffi_prep_cif=Module["_ffi_prep_cif"]=wasmExports["ffi_prep_cif"];var _ffi_prep_closure_loc=Module["_ffi_prep_closure_loc"]=wasmExports["ffi_prep_closure_loc"];var _ffi_closure_free=Module["_ffi_closure_free"]=wasmExports["ffi_closure_free"];var _ffi_prep_cif_var=Module["_ffi_prep_cif_var"]=wasmExports["ffi_prep_cif_var"];var _ffi_call=Module["_ffi_call"]=wasmExports["ffi_call"];var _dlclose=Module["_dlclose"]=wasmExports["dlclose"];var ___extenddftf2=Module["___extenddftf2"]=wasmExports["__extenddftf2"];var ___trunctfdf2=Module["___trunctfdf2"]=wasmExports["__trunctfdf2"];var __Py_Gid_Converter=Module["__Py_Gid_Converter"]=wasmExports["_Py_Gid_Converter"];var __Py_Uid_Converter=Module["__Py_Uid_Converter"]=wasmExports["_Py_Uid_Converter"];var _PyOS_BeforeFork=Module["_PyOS_BeforeFork"]=wasmExports["PyOS_BeforeFork"];var _PyOS_AfterFork_Parent=Module["_PyOS_AfterFork_Parent"]=wasmExports["PyOS_AfterFork_Parent"];var _fork=Module["_fork"]=wasmExports["fork"];var _PyOS_AfterFork_Child=Module["_PyOS_AfterFork_Child"]=wasmExports["PyOS_AfterFork_Child"];var __exit=Module["__exit"]=wasmExports["_exit"];var _dup=Module["_dup"]=wasmExports["dup"];var _dup2=Module["_dup2"]=wasmExports["dup2"];var _chdir=Module["_chdir"]=wasmExports["chdir"];var _umask=Module["_umask"]=wasmExports["umask"];var __Py_RestoreSignals=Module["__Py_RestoreSignals"]=wasmExports["_Py_RestoreSignals"];var _setsid=Module["_setsid"]=wasmExports["setsid"];var _setpgid=Module["_setpgid"]=wasmExports["setpgid"];var _setregid=Module["_setregid"]=wasmExports["setregid"];var _setreuid=Module["_setreuid"]=wasmExports["setreuid"];var _execve=Module["_execve"]=wasmExports["execve"];var _execv=Module["_execv"]=wasmExports["execv"];var _opendir=Module["_opendir"]=wasmExports["opendir"];var _dirfd=Module["_dirfd"]=wasmExports["dirfd"];var _readdir=Module["_readdir"]=wasmExports["readdir"];var _closedir=Module["_closedir"]=wasmExports["closedir"];var _BZ2_bzCompressEnd=Module["_BZ2_bzCompressEnd"]=wasmExports["BZ2_bzCompressEnd"];var _BZ2_bzCompressInit=Module["_BZ2_bzCompressInit"]=wasmExports["BZ2_bzCompressInit"];var _BZ2_bzCompress=Module["_BZ2_bzCompress"]=wasmExports["BZ2_bzCompress"];var _BZ2_bzDecompressEnd=Module["_BZ2_bzDecompressEnd"]=wasmExports["BZ2_bzDecompressEnd"];var _BZ2_bzDecompressInit=Module["_BZ2_bzDecompressInit"]=wasmExports["BZ2_bzDecompressInit"];var _BZ2_bzDecompress=Module["_BZ2_bzDecompress"]=wasmExports["BZ2_bzDecompress"];var _adler32=Module["_adler32"]=wasmExports["adler32"];var _deflateInit2_=Module["_deflateInit2_"]=wasmExports["deflateInit2_"];var _deflateEnd=Module["_deflateEnd"]=wasmExports["deflateEnd"];var _deflate=Module["_deflate"]=wasmExports["deflate"];var _deflateSetDictionary=Module["_deflateSetDictionary"]=wasmExports["deflateSetDictionary"];var _crc32=Module["_crc32"]=wasmExports["crc32"];var _inflateInit2_=Module["_inflateInit2_"]=wasmExports["inflateInit2_"];var _inflateEnd=Module["_inflateEnd"]=wasmExports["inflateEnd"];var _inflate=Module["_inflate"]=wasmExports["inflate"];var _inflateSetDictionary=Module["_inflateSetDictionary"]=wasmExports["inflateSetDictionary"];var _zlibVersion=Module["_zlibVersion"]=wasmExports["zlibVersion"];var _deflateCopy=Module["_deflateCopy"]=wasmExports["deflateCopy"];var _inflateCopy=Module["_inflateCopy"]=wasmExports["inflateCopy"];var _acos=Module["_acos"]=wasmExports["acos"];var _acosh=Module["_acosh"]=wasmExports["acosh"];var _asin=Module["_asin"]=wasmExports["asin"];var _asinh=Module["_asinh"]=wasmExports["asinh"];var _atan=Module["_atan"]=wasmExports["atan"];var _atanh=Module["_atanh"]=wasmExports["atanh"];var _cbrt=Module["_cbrt"]=wasmExports["cbrt"];var _copysign=Module["_copysign"]=wasmExports["copysign"];var _cosh=Module["_cosh"]=wasmExports["cosh"];var _erf=Module["_erf"]=wasmExports["erf"];var _erfc=Module["_erfc"]=wasmExports["erfc"];var _exp2=Module["_exp2"]=wasmExports["exp2"];var _expm1=Module["_expm1"]=wasmExports["expm1"];var _fabs=Module["_fabs"]=wasmExports["fabs"];var _fma=Module["_fma"]=wasmExports["fma"];var _sinh=Module["_sinh"]=wasmExports["sinh"];var _sqrt=Module["_sqrt"]=wasmExports["sqrt"];var _tan=Module["_tan"]=wasmExports["tan"];var _tanh=Module["_tanh"]=wasmExports["tanh"];var _nextafter=Module["_nextafter"]=wasmExports["nextafter"];var _log1p=Module["_log1p"]=wasmExports["log1p"];var _log10=Module["_log10"]=wasmExports["log10"];var _log2=Module["_log2"]=wasmExports["log2"];var _explicit_bzero=Module["_explicit_bzero"]=wasmExports["explicit_bzero"];var _strncat=Module["_strncat"]=wasmExports["strncat"];var _mmap=Module["_mmap"]=wasmExports["mmap"];var _munmap=Module["_munmap"]=wasmExports["munmap"];var _msync=Module["_msync"]=wasmExports["msync"];var _madvise=Module["_madvise"]=wasmExports["madvise"];var _ftruncate=Module["_ftruncate"]=wasmExports["ftruncate"];var _mremap=Module["_mremap"]=wasmExports["mremap"];var _poll=Module["_poll"]=wasmExports["poll"];var _select=Module["_select"]=wasmExports["select"];var _inet_ntop=Module["_inet_ntop"]=wasmExports["inet_ntop"];var _gethostbyname=Module["_gethostbyname"]=wasmExports["gethostbyname"];var _gethostbyaddr=Module["_gethostbyaddr"]=wasmExports["gethostbyaddr"];var _gethostname=Module["_gethostname"]=wasmExports["gethostname"];var _getservbyname=Module["_getservbyname"]=wasmExports["getservbyname"];var _ntohs=wasmExports["ntohs"];var _htons=wasmExports["htons"];var _getservbyport=Module["_getservbyport"]=wasmExports["getservbyport"];var _ntohl=Module["_ntohl"]=wasmExports["ntohl"];var _htonl=wasmExports["htonl"];var _inet_aton=Module["_inet_aton"]=wasmExports["inet_aton"];var _inet_ntoa=Module["_inet_ntoa"]=wasmExports["inet_ntoa"];var _inet_pton=Module["_inet_pton"]=wasmExports["inet_pton"];var _gai_strerror=Module["_gai_strerror"]=wasmExports["gai_strerror"];var _freeaddrinfo=Module["_freeaddrinfo"]=wasmExports["freeaddrinfo"];var _if_nameindex=Module["_if_nameindex"]=wasmExports["if_nameindex"];var _if_freenameindex=Module["_if_freenameindex"]=wasmExports["if_freenameindex"];var _if_nametoindex=Module["_if_nametoindex"]=wasmExports["if_nametoindex"];var _if_indextoname=Module["_if_indextoname"]=wasmExports["if_indextoname"];var ___h_errno_location=Module["___h_errno_location"]=wasmExports["__h_errno_location"];var _hstrerror=Module["_hstrerror"]=wasmExports["hstrerror"];var _getsockname=Module["_getsockname"]=wasmExports["getsockname"];var _socket=Module["_socket"]=wasmExports["socket"];var _getsockopt=Module["_getsockopt"]=wasmExports["getsockopt"];var _bind=Module["_bind"]=wasmExports["bind"];var _getpeername=Module["_getpeername"]=wasmExports["getpeername"];var _listen=Module["_listen"]=wasmExports["listen"];var _setsockopt=Module["_setsockopt"]=wasmExports["setsockopt"];var _accept4=Module["_accept4"]=wasmExports["accept4"];var _accept=Module["_accept"]=wasmExports["accept"];var _connect=Module["_connect"]=wasmExports["connect"];var _recv=Module["_recv"]=wasmExports["recv"];var _recvfrom=Module["_recvfrom"]=wasmExports["recvfrom"];var _send=Module["_send"]=wasmExports["send"];var _sendto=Module["_sendto"]=wasmExports["sendto"];var _recvmsg=Module["_recvmsg"]=wasmExports["recvmsg"];var _sendmsg=Module["_sendmsg"]=wasmExports["sendmsg"];var _PyUnstable_AtExit=Module["_PyUnstable_AtExit"]=wasmExports["PyUnstable_AtExit"];var _getrlimit=Module["_getrlimit"]=wasmExports["getrlimit"];var _setrlimit=Module["_setrlimit"]=wasmExports["setrlimit"];var _raise=Module["_raise"]=wasmExports["raise"];var _sigfillset=Module["_sigfillset"]=wasmExports["sigfillset"];var _pthread_sigmask=Module["_pthread_sigmask"]=wasmExports["pthread_sigmask"];var _PyOS_AfterFork=Module["_PyOS_AfterFork"]=wasmExports["PyOS_AfterFork"];var __PyLong_FromGid=Module["__PyLong_FromGid"]=wasmExports["_PyLong_FromGid"];var _sigemptyset=Module["_sigemptyset"]=wasmExports["sigemptyset"];var _sigaddset=Module["_sigaddset"]=wasmExports["sigaddset"];var _access=Module["_access"]=wasmExports["access"];var _ttyname_r=Module["_ttyname_r"]=wasmExports["ttyname_r"];var _fchdir=Module["_fchdir"]=wasmExports["fchdir"];var _fchmod=Module["_fchmod"]=wasmExports["fchmod"];var _fchmodat=Module["_fchmodat"]=wasmExports["fchmodat"];var _chmod=Module["_chmod"]=wasmExports["chmod"];var _fchown=Module["_fchown"]=wasmExports["fchown"];var _fchownat=Module["_fchownat"]=wasmExports["fchownat"];var _chown=Module["_chown"]=wasmExports["chown"];var _chroot=Module["_chroot"]=wasmExports["chroot"];var _ctermid=Module["_ctermid"]=wasmExports["ctermid"];var _fdopendir=Module["_fdopendir"]=wasmExports["fdopendir"];var _rewinddir=Module["_rewinddir"]=wasmExports["rewinddir"];var _mkdirat=Module["_mkdirat"]=wasmExports["mkdirat"];var _mkdir=Module["_mkdir"]=wasmExports["mkdir"];var _getpriority=Module["_getpriority"]=wasmExports["getpriority"];var _readlinkat=Module["_readlinkat"]=wasmExports["readlinkat"];var _unlinkat=Module["_unlinkat"]=wasmExports["unlinkat"];var _rmdir=Module["_rmdir"]=wasmExports["rmdir"];var _symlink=Module["_symlink"]=wasmExports["symlink"];var _system=Module["_system"]=wasmExports["system"];var _uname=Module["_uname"]=wasmExports["uname"];var _futimesat=Module["_futimesat"]=wasmExports["futimesat"];var _futimens=Module["_futimens"]=wasmExports["futimens"];var _times=Module["_times"]=wasmExports["times"];var _fexecve=Module["_fexecve"]=wasmExports["fexecve"];var _posix_openpt=Module["_posix_openpt"]=wasmExports["posix_openpt"];var _grantpt=Module["_grantpt"]=wasmExports["grantpt"];var _unlockpt=Module["_unlockpt"]=wasmExports["unlockpt"];var _ptsname_r=Module["_ptsname_r"]=wasmExports["ptsname_r"];var _login_tty=Module["_login_tty"]=wasmExports["login_tty"];var _getgid=Module["_getgid"]=wasmExports["getgid"];var _getpgrp=Module["_getpgrp"]=wasmExports["getpgrp"];var _getppid=Module["_getppid"]=wasmExports["getppid"];var _getuid=Module["_getuid"]=wasmExports["getuid"];var _getlogin=Module["_getlogin"]=wasmExports["getlogin"];var _killpg=Module["_killpg"]=wasmExports["killpg"];var _setuid=Module["_setuid"]=wasmExports["setuid"];var _setgid=Module["_setgid"]=wasmExports["setgid"];var _getpgid=Module["_getpgid"]=wasmExports["getpgid"];var _setpgrp=Module["_setpgrp"]=wasmExports["setpgrp"];var _wait=Module["_wait"]=wasmExports["wait"];var _wait3=Module["_wait3"]=wasmExports["wait3"];var _wait4=Module["_wait4"]=wasmExports["wait4"];var _waitid=Module["_waitid"]=wasmExports["waitid"];var _waitpid=Module["_waitpid"]=wasmExports["waitpid"];var _getsid=Module["_getsid"]=wasmExports["getsid"];var _tcgetpgrp=Module["_tcgetpgrp"]=wasmExports["tcgetpgrp"];var _tcsetpgrp=Module["_tcsetpgrp"]=wasmExports["tcsetpgrp"];var _openat=Module["_openat"]=wasmExports["openat"];var _dup3=Module["_dup3"]=wasmExports["dup3"];var _lockf=Module["_lockf"]=wasmExports["lockf"];var _readv=Module["_readv"]=wasmExports["readv"];var _pread=Module["_pread"]=wasmExports["pread"];var _writev=Module["_writev"]=wasmExports["writev"];var _pwrite=Module["_pwrite"]=wasmExports["pwrite"];var _pipe=Module["_pipe"]=wasmExports["pipe"];var _truncate=Module["_truncate"]=wasmExports["truncate"];var _posix_fadvise=Module["_posix_fadvise"]=wasmExports["posix_fadvise"];var _unsetenv=Module["_unsetenv"]=wasmExports["unsetenv"];var _fsync=Module["_fsync"]=wasmExports["fsync"];var _sync=Module["_sync"]=wasmExports["sync"];var _fdatasync=Module["_fdatasync"]=wasmExports["fdatasync"];var _fstatvfs=Module["_fstatvfs"]=wasmExports["fstatvfs"];var _statvfs=Module["_statvfs"]=wasmExports["statvfs"];var _fpathconf=Module["_fpathconf"]=wasmExports["fpathconf"];var _pathconf=Module["_pathconf"]=wasmExports["pathconf"];var _getloadavg=Module["_getloadavg"]=wasmExports["getloadavg"];var _lstat=Module["_lstat"]=wasmExports["lstat"];var _fstatat=Module["_fstatat"]=wasmExports["fstatat"];var _renameat=Module["_renameat"]=wasmExports["renameat"];var _rename=Module["_rename"]=wasmExports["rename"];var _unlink=Module["_unlink"]=wasmExports["unlink"];var _utimes=Module["_utimes"]=wasmExports["utimes"];var _qsort=Module["_qsort"]=wasmExports["qsort"];var _PySignal_SetWakeupFd=Module["_PySignal_SetWakeupFd"]=wasmExports["PySignal_SetWakeupFd"];var __PyErr_CheckSignals=Module["__PyErr_CheckSignals"]=wasmExports["_PyErr_CheckSignals"];var _PyErr_SetInterrupt=Module["_PyErr_SetInterrupt"]=wasmExports["PyErr_SetInterrupt"];var _PyOS_InterruptOccurred=Module["_PyOS_InterruptOccurred"]=wasmExports["PyOS_InterruptOccurred"];var __PyOS_IsMainThread=Module["__PyOS_IsMainThread"]=wasmExports["_PyOS_IsMainThread"];var _getitimer=Module["_getitimer"]=wasmExports["getitimer"];var _strsignal=Module["_strsignal"]=wasmExports["strsignal"];var _pause=Module["_pause"]=wasmExports["pause"];var _sigpending=Module["_sigpending"]=wasmExports["sigpending"];var _sigwait=Module["_sigwait"]=wasmExports["sigwait"];var _sigwaitinfo=Module["_sigwaitinfo"]=wasmExports["sigwaitinfo"];var _sigtimedwait=Module["_sigtimedwait"]=wasmExports["sigtimedwait"];var _sigismember=Module["_sigismember"]=wasmExports["sigismember"];var ___libc_current_sigrtmin=Module["___libc_current_sigrtmin"]=wasmExports["__libc_current_sigrtmin"];var ___libc_current_sigrtmax=Module["___libc_current_sigrtmax"]=wasmExports["__libc_current_sigrtmax"];var _isalnum=Module["_isalnum"]=wasmExports["isalnum"];var _tolower=Module["_tolower"]=wasmExports["tolower"];var _toupper=Module["_toupper"]=wasmExports["toupper"];var _clock_settime=Module["_clock_settime"]=wasmExports["clock_settime"];var _pthread_getcpuclockid=Module["_pthread_getcpuclockid"]=wasmExports["pthread_getcpuclockid"];var _clock_nanosleep=Module["_clock_nanosleep"]=wasmExports["clock_nanosleep"];var _time=Module["_time"]=wasmExports["time"];var _mktime=Module["_mktime"]=wasmExports["mktime"];var _wcsftime=Module["_wcsftime"]=wasmExports["wcsftime"];var _clock=Module["_clock"]=wasmExports["clock"];var _wcscoll=Module["_wcscoll"]=wasmExports["wcscoll"];var _wcsxfrm=Module["_wcsxfrm"]=wasmExports["wcsxfrm"];var _gettext=Module["_gettext"]=wasmExports["gettext"];var _dgettext=Module["_dgettext"]=wasmExports["dgettext"];var _dcgettext=Module["_dcgettext"]=wasmExports["dcgettext"];var _textdomain=Module["_textdomain"]=wasmExports["textdomain"];var _bindtextdomain=Module["_bindtextdomain"]=wasmExports["bindtextdomain"];var _bind_textdomain_codeset=Module["_bind_textdomain_codeset"]=wasmExports["bind_textdomain_codeset"];var _gettimeofday=Module["_gettimeofday"]=wasmExports["gettimeofday"];var ___small_fprintf=Module["___small_fprintf"]=wasmExports["__small_fprintf"];var __Py_Get_Getpath_CodeObject=Module["__Py_Get_Getpath_CodeObject"]=wasmExports["_Py_Get_Getpath_CodeObject"];var _ffi_prep_closure=Module["_ffi_prep_closure"]=wasmExports["ffi_prep_closure"];var _ffi_get_struct_offsets=Module["_ffi_get_struct_offsets"]=wasmExports["ffi_get_struct_offsets"];var _ffi_java_raw_size=Module["_ffi_java_raw_size"]=wasmExports["ffi_java_raw_size"];var _ffi_java_raw_to_ptrarray=Module["_ffi_java_raw_to_ptrarray"]=wasmExports["ffi_java_raw_to_ptrarray"];var _ffi_java_ptrarray_to_raw=Module["_ffi_java_ptrarray_to_raw"]=wasmExports["ffi_java_ptrarray_to_raw"];var _ffi_java_raw_call=Module["_ffi_java_raw_call"]=wasmExports["ffi_java_raw_call"];var _ffi_prep_java_raw_closure_loc=Module["_ffi_prep_java_raw_closure_loc"]=wasmExports["ffi_prep_java_raw_closure_loc"];var _ffi_prep_java_raw_closure=Module["_ffi_prep_java_raw_closure"]=wasmExports["ffi_prep_java_raw_closure"];var _ffi_tramp_is_supported=Module["_ffi_tramp_is_supported"]=wasmExports["ffi_tramp_is_supported"];var _ffi_tramp_alloc=Module["_ffi_tramp_alloc"]=wasmExports["ffi_tramp_alloc"];var _ffi_tramp_set_parms=Module["_ffi_tramp_set_parms"]=wasmExports["ffi_tramp_set_parms"];var _ffi_tramp_get_addr=Module["_ffi_tramp_get_addr"]=wasmExports["ffi_tramp_get_addr"];var _ffi_tramp_free=Module["_ffi_tramp_free"]=wasmExports["ffi_tramp_free"];var __hiwire_immortal_add=Module["__hiwire_immortal_add"]=wasmExports["_hiwire_immortal_add"];var __hiwire_immortal_get=Module["__hiwire_immortal_get"]=wasmExports["_hiwire_immortal_get"];var __hiwire_get=Module["__hiwire_get"]=wasmExports["_hiwire_get"];var __hiwire_set=Module["__hiwire_set"]=wasmExports["_hiwire_set"];var _hiwire_num_refs=Module["_hiwire_num_refs"]=wasmExports["hiwire_num_refs"];var __hiwire_slot_info=Module["__hiwire_slot_info"]=wasmExports["_hiwire_slot_info"];var __hiwire_delete=Module["__hiwire_delete"]=wasmExports["_hiwire_delete"];var __hiwire_immortal_table_init=Module["__hiwire_immortal_table_init"]=wasmExports["_hiwire_immortal_table_init"];var _emscripten_GetProcAddress=Module["_emscripten_GetProcAddress"]=wasmExports["emscripten_GetProcAddress"];var _emscripten_webgl1_get_proc_address=Module["_emscripten_webgl1_get_proc_address"]=wasmExports["emscripten_webgl1_get_proc_address"];var __webgl1_match_ext_proc_address_without_suffix=Module["__webgl1_match_ext_proc_address_without_suffix"]=wasmExports["_webgl1_match_ext_proc_address_without_suffix"];var _emscripten_webgl2_get_proc_address=Module["_emscripten_webgl2_get_proc_address"]=wasmExports["emscripten_webgl2_get_proc_address"];var __webgl2_match_ext_proc_address_without_suffix=Module["__webgl2_match_ext_proc_address_without_suffix"]=wasmExports["_webgl2_match_ext_proc_address_without_suffix"];var _emscripten_webgl_get_proc_address=Module["_emscripten_webgl_get_proc_address"]=wasmExports["emscripten_webgl_get_proc_address"];var _SDL_GL_GetProcAddress=Module["_SDL_GL_GetProcAddress"]=wasmExports["SDL_GL_GetProcAddress"];var _eglGetProcAddress=Module["_eglGetProcAddress"]=wasmExports["eglGetProcAddress"];var _glfwGetProcAddress=Module["_glfwGetProcAddress"]=wasmExports["glfwGetProcAddress"];var _emscripten_webgl_init_context_attributes=Module["_emscripten_webgl_init_context_attributes"]=wasmExports["emscripten_webgl_init_context_attributes"];var _emscripten_is_main_runtime_thread=Module["_emscripten_is_main_runtime_thread"]=wasmExports["emscripten_is_main_runtime_thread"];var _BZ2_blockSort=Module["_BZ2_blockSort"]=wasmExports["BZ2_blockSort"];var _BZ2_bz__AssertH__fail=Module["_BZ2_bz__AssertH__fail"]=wasmExports["BZ2_bz__AssertH__fail"];var _BZ2_bzlibVersion=Module["_BZ2_bzlibVersion"]=wasmExports["BZ2_bzlibVersion"];var _BZ2_compressBlock=Module["_BZ2_compressBlock"]=wasmExports["BZ2_compressBlock"];var _BZ2_indexIntoF=Module["_BZ2_indexIntoF"]=wasmExports["BZ2_indexIntoF"];var _BZ2_decompress=Module["_BZ2_decompress"]=wasmExports["BZ2_decompress"];var _BZ2_bzWriteOpen=Module["_BZ2_bzWriteOpen"]=wasmExports["BZ2_bzWriteOpen"];var _BZ2_bzWrite=Module["_BZ2_bzWrite"]=wasmExports["BZ2_bzWrite"];var _BZ2_bzWriteClose=Module["_BZ2_bzWriteClose"]=wasmExports["BZ2_bzWriteClose"];var _BZ2_bzWriteClose64=Module["_BZ2_bzWriteClose64"]=wasmExports["BZ2_bzWriteClose64"];var _BZ2_bzReadOpen=Module["_BZ2_bzReadOpen"]=wasmExports["BZ2_bzReadOpen"];var _BZ2_bzReadClose=Module["_BZ2_bzReadClose"]=wasmExports["BZ2_bzReadClose"];var _BZ2_bzRead=Module["_BZ2_bzRead"]=wasmExports["BZ2_bzRead"];var _fgetc=Module["_fgetc"]=wasmExports["fgetc"];var _BZ2_bzReadGetUnused=Module["_BZ2_bzReadGetUnused"]=wasmExports["BZ2_bzReadGetUnused"];var _BZ2_bzBuffToBuffCompress=Module["_BZ2_bzBuffToBuffCompress"]=wasmExports["BZ2_bzBuffToBuffCompress"];var _BZ2_bzBuffToBuffDecompress=Module["_BZ2_bzBuffToBuffDecompress"]=wasmExports["BZ2_bzBuffToBuffDecompress"];var _BZ2_bzopen=Module["_BZ2_bzopen"]=wasmExports["BZ2_bzopen"];var _BZ2_bzdopen=Module["_BZ2_bzdopen"]=wasmExports["BZ2_bzdopen"];var _BZ2_bzread=Module["_BZ2_bzread"]=wasmExports["BZ2_bzread"];var _BZ2_bzwrite=Module["_BZ2_bzwrite"]=wasmExports["BZ2_bzwrite"];var _BZ2_bzflush=Module["_BZ2_bzflush"]=wasmExports["BZ2_bzflush"];var _BZ2_bzclose=Module["_BZ2_bzclose"]=wasmExports["BZ2_bzclose"];var _BZ2_bzerror=Module["_BZ2_bzerror"]=wasmExports["BZ2_bzerror"];var _BZ2_bsInitWrite=Module["_BZ2_bsInitWrite"]=wasmExports["BZ2_bsInitWrite"];var _BZ2_hbMakeCodeLengths=Module["_BZ2_hbMakeCodeLengths"]=wasmExports["BZ2_hbMakeCodeLengths"];var _BZ2_hbAssignCodes=Module["_BZ2_hbAssignCodes"]=wasmExports["BZ2_hbAssignCodes"];var _BZ2_hbCreateDecodeTables=Module["_BZ2_hbCreateDecodeTables"]=wasmExports["BZ2_hbCreateDecodeTables"];var _adler32_z=Module["_adler32_z"]=wasmExports["adler32_z"];var _adler32_combine=Module["_adler32_combine"]=wasmExports["adler32_combine"];var _adler32_combine64=Module["_adler32_combine64"]=wasmExports["adler32_combine64"];var _compress2=Module["_compress2"]=wasmExports["compress2"];var _deflateInit_=Module["_deflateInit_"]=wasmExports["deflateInit_"];var _compress=Module["_compress"]=wasmExports["compress"];var _compressBound=Module["_compressBound"]=wasmExports["compressBound"];var _get_crc_table=Module["_get_crc_table"]=wasmExports["get_crc_table"];var _crc32_z=Module["_crc32_z"]=wasmExports["crc32_z"];var _crc32_combine64=Module["_crc32_combine64"]=wasmExports["crc32_combine64"];var _crc32_combine=Module["_crc32_combine"]=wasmExports["crc32_combine"];var _crc32_combine_gen64=Module["_crc32_combine_gen64"]=wasmExports["crc32_combine_gen64"];var _crc32_combine_gen=Module["_crc32_combine_gen"]=wasmExports["crc32_combine_gen"];var _crc32_combine_op=Module["_crc32_combine_op"]=wasmExports["crc32_combine_op"];var _zcalloc=Module["_zcalloc"]=wasmExports["zcalloc"];var _zcfree=Module["_zcfree"]=wasmExports["zcfree"];var _deflateReset=Module["_deflateReset"]=wasmExports["deflateReset"];var _deflateResetKeep=Module["_deflateResetKeep"]=wasmExports["deflateResetKeep"];var _deflateGetDictionary=Module["_deflateGetDictionary"]=wasmExports["deflateGetDictionary"];var __tr_init=Module["__tr_init"]=wasmExports["_tr_init"];var _deflateSetHeader=Module["_deflateSetHeader"]=wasmExports["deflateSetHeader"];var _deflatePending=Module["_deflatePending"]=wasmExports["deflatePending"];var _deflatePrime=Module["_deflatePrime"]=wasmExports["deflatePrime"];var __tr_flush_bits=Module["__tr_flush_bits"]=wasmExports["_tr_flush_bits"];var _deflateParams=Module["_deflateParams"]=wasmExports["deflateParams"];var __tr_align=Module["__tr_align"]=wasmExports["_tr_align"];var __tr_stored_block=Module["__tr_stored_block"]=wasmExports["_tr_stored_block"];var _deflateTune=Module["_deflateTune"]=wasmExports["deflateTune"];var _deflateBound=Module["_deflateBound"]=wasmExports["deflateBound"];var __tr_flush_block=Module["__tr_flush_block"]=wasmExports["_tr_flush_block"];var _gzclose=Module["_gzclose"]=wasmExports["gzclose"];var _gzclose_r=Module["_gzclose_r"]=wasmExports["gzclose_r"];var _gzclose_w=Module["_gzclose_w"]=wasmExports["gzclose_w"];var _gzopen=Module["_gzopen"]=wasmExports["gzopen"];var _gzopen64=Module["_gzopen64"]=wasmExports["gzopen64"];var _gzdopen=Module["_gzdopen"]=wasmExports["gzdopen"];var _gzbuffer=Module["_gzbuffer"]=wasmExports["gzbuffer"];var _gzrewind=Module["_gzrewind"]=wasmExports["gzrewind"];var _gzseek64=Module["_gzseek64"]=wasmExports["gzseek64"];var _gz_error=Module["_gz_error"]=wasmExports["gz_error"];var _gzseek=Module["_gzseek"]=wasmExports["gzseek"];var _gztell64=Module["_gztell64"]=wasmExports["gztell64"];var _gztell=Module["_gztell"]=wasmExports["gztell"];var _gzoffset64=Module["_gzoffset64"]=wasmExports["gzoffset64"];var _gzoffset=Module["_gzoffset"]=wasmExports["gzoffset"];var _gzeof=Module["_gzeof"]=wasmExports["gzeof"];var _gzerror=Module["_gzerror"]=wasmExports["gzerror"];var _gzclearerr=Module["_gzclearerr"]=wasmExports["gzclearerr"];var _gz_intmax=Module["_gz_intmax"]=wasmExports["gz_intmax"];var _gzread=Module["_gzread"]=wasmExports["gzread"];var _gzfread=Module["_gzfread"]=wasmExports["gzfread"];var _gzgetc=Module["_gzgetc"]=wasmExports["gzgetc"];var _gzgetc_=Module["_gzgetc_"]=wasmExports["gzgetc_"];var _gzungetc=Module["_gzungetc"]=wasmExports["gzungetc"];var _inflateReset=Module["_inflateReset"]=wasmExports["inflateReset"];var _gzgets=Module["_gzgets"]=wasmExports["gzgets"];var _gzdirect=Module["_gzdirect"]=wasmExports["gzdirect"];var _gzwrite=Module["_gzwrite"]=wasmExports["gzwrite"];var _gzfwrite=Module["_gzfwrite"]=wasmExports["gzfwrite"];var _gzputc=Module["_gzputc"]=wasmExports["gzputc"];var _gzputs=Module["_gzputs"]=wasmExports["gzputs"];var _gzvprintf=Module["_gzvprintf"]=wasmExports["gzvprintf"];var _gzprintf=Module["_gzprintf"]=wasmExports["gzprintf"];var _gzflush=Module["_gzflush"]=wasmExports["gzflush"];var _gzsetparams=Module["_gzsetparams"]=wasmExports["gzsetparams"];var _inflateBackInit_=Module["_inflateBackInit_"]=wasmExports["inflateBackInit_"];var _inflateBack=Module["_inflateBack"]=wasmExports["inflateBack"];var _inflate_table=Module["_inflate_table"]=wasmExports["inflate_table"];var _inflate_fast=Module["_inflate_fast"]=wasmExports["inflate_fast"];var _inflateBackEnd=Module["_inflateBackEnd"]=wasmExports["inflateBackEnd"];var _inflateResetKeep=Module["_inflateResetKeep"]=wasmExports["inflateResetKeep"];var _inflateReset2=Module["_inflateReset2"]=wasmExports["inflateReset2"];var _inflateInit_=Module["_inflateInit_"]=wasmExports["inflateInit_"];var _inflatePrime=Module["_inflatePrime"]=wasmExports["inflatePrime"];var _inflateGetDictionary=Module["_inflateGetDictionary"]=wasmExports["inflateGetDictionary"];var _inflateGetHeader=Module["_inflateGetHeader"]=wasmExports["inflateGetHeader"];var _inflateSync=Module["_inflateSync"]=wasmExports["inflateSync"];var _inflateSyncPoint=Module["_inflateSyncPoint"]=wasmExports["inflateSyncPoint"];var _inflateUndermine=Module["_inflateUndermine"]=wasmExports["inflateUndermine"];var _inflateValidate=Module["_inflateValidate"]=wasmExports["inflateValidate"];var _inflateMark=Module["_inflateMark"]=wasmExports["inflateMark"];var _inflateCodesUsed=Module["_inflateCodesUsed"]=wasmExports["inflateCodesUsed"];var __tr_tally=Module["__tr_tally"]=wasmExports["_tr_tally"];var _uncompress2=Module["_uncompress2"]=wasmExports["uncompress2"];var _uncompress=Module["_uncompress"]=wasmExports["uncompress"];var _zlibCompileFlags=Module["_zlibCompileFlags"]=wasmExports["zlibCompileFlags"];var _zError=Module["_zError"]=wasmExports["zError"];var _getdate=Module["_getdate"]=wasmExports["getdate"];var _stime=Module["_stime"]=wasmExports["stime"];var _clock_getcpuclockid=Module["_clock_getcpuclockid"]=wasmExports["clock_getcpuclockid"];var _getpwnam=Module["_getpwnam"]=wasmExports["getpwnam"];var _getpwuid=Module["_getpwuid"]=wasmExports["getpwuid"];var _getpwnam_r=Module["_getpwnam_r"]=wasmExports["getpwnam_r"];var _getpwuid_r=Module["_getpwuid_r"]=wasmExports["getpwuid_r"];var _setpwent=Module["_setpwent"]=wasmExports["setpwent"];var _endpwent=Module["_endpwent"]=wasmExports["endpwent"];var _getpwent=Module["_getpwent"]=wasmExports["getpwent"];var _getgrnam=Module["_getgrnam"]=wasmExports["getgrnam"];var _getgrgid=Module["_getgrgid"]=wasmExports["getgrgid"];var _getgrnam_r=Module["_getgrnam_r"]=wasmExports["getgrnam_r"];var _getgrgid_r=Module["_getgrgid_r"]=wasmExports["getgrgid_r"];var _getgrent=Module["_getgrent"]=wasmExports["getgrent"];var _endgrent=Module["_endgrent"]=wasmExports["endgrent"];var _setgrent=Module["_setgrent"]=wasmExports["setgrent"];var _flock=Module["_flock"]=wasmExports["flock"];var _vfork=Module["_vfork"]=wasmExports["vfork"];var _posix_spawn=Module["_posix_spawn"]=wasmExports["posix_spawn"];var _popen=Module["_popen"]=wasmExports["popen"];var _pclose=Module["_pclose"]=wasmExports["pclose"];var _setgroups=Module["_setgroups"]=wasmExports["setgroups"];var _sigaltstack=Module["_sigaltstack"]=wasmExports["sigaltstack"];var ___syscall_uname=Module["___syscall_uname"]=wasmExports["__syscall_uname"];var ___syscall_setpgid=Module["___syscall_setpgid"]=wasmExports["__syscall_setpgid"];var ___syscall_sync=Module["___syscall_sync"]=wasmExports["__syscall_sync"];var ___syscall_getsid=Module["___syscall_getsid"]=wasmExports["__syscall_getsid"];var ___syscall_getpgid=Module["___syscall_getpgid"]=wasmExports["__syscall_getpgid"];var ___syscall_getpid=Module["___syscall_getpid"]=wasmExports["__syscall_getpid"];var ___syscall_getppid=Module["___syscall_getppid"]=wasmExports["__syscall_getppid"];var ___syscall_linkat=Module["___syscall_linkat"]=wasmExports["__syscall_linkat"];var ___syscall_getgroups32=Module["___syscall_getgroups32"]=wasmExports["__syscall_getgroups32"];var ___syscall_setsid=Module["___syscall_setsid"]=wasmExports["__syscall_setsid"];var ___syscall_umask=Module["___syscall_umask"]=wasmExports["__syscall_umask"];var ___syscall_getrusage=Module["___syscall_getrusage"]=wasmExports["__syscall_getrusage"];var ___syscall_getpriority=Module["___syscall_getpriority"]=wasmExports["__syscall_getpriority"];var ___syscall_setpriority=Module["___syscall_setpriority"]=wasmExports["__syscall_setpriority"];var ___syscall_setdomainname=Module["___syscall_setdomainname"]=wasmExports["__syscall_setdomainname"];var ___syscall_getuid32=Module["___syscall_getuid32"]=wasmExports["__syscall_getuid32"];var ___syscall_getgid32=Module["___syscall_getgid32"]=wasmExports["__syscall_getgid32"];var ___syscall_geteuid32=Module["___syscall_geteuid32"]=wasmExports["__syscall_geteuid32"];var ___syscall_getegid32=Module["___syscall_getegid32"]=wasmExports["__syscall_getegid32"];var ___syscall_getresuid32=Module["___syscall_getresuid32"]=wasmExports["__syscall_getresuid32"];var ___syscall_getresgid32=Module["___syscall_getresgid32"]=wasmExports["__syscall_getresgid32"];var ___syscall_pause=Module["___syscall_pause"]=wasmExports["__syscall_pause"];var ___syscall_madvise=Module["___syscall_madvise"]=wasmExports["__syscall_madvise"];var ___syscall_mlock=Module["___syscall_mlock"]=wasmExports["__syscall_mlock"];var ___syscall_munlock=Module["___syscall_munlock"]=wasmExports["__syscall_munlock"];var ___syscall_mprotect=Module["___syscall_mprotect"]=wasmExports["__syscall_mprotect"];var ___syscall_mremap=Module["___syscall_mremap"]=wasmExports["__syscall_mremap"];var ___syscall_mlockall=Module["___syscall_mlockall"]=wasmExports["__syscall_mlockall"];var ___syscall_munlockall=Module["___syscall_munlockall"]=wasmExports["__syscall_munlockall"];var ___syscall_prlimit64=Module["___syscall_prlimit64"]=wasmExports["__syscall_prlimit64"];var _emscripten_stack_get_end=Module["_emscripten_stack_get_end"]=wasmExports["emscripten_stack_get_end"];var _emscripten_stack_get_base=Module["_emscripten_stack_get_base"]=wasmExports["emscripten_stack_get_base"];var ___syscall_setsockopt=Module["___syscall_setsockopt"]=wasmExports["__syscall_setsockopt"];var ___syscall_acct=Module["___syscall_acct"]=wasmExports["__syscall_acct"];var ___syscall_mincore=Module["___syscall_mincore"]=wasmExports["__syscall_mincore"];var ___syscall_pipe2=Module["___syscall_pipe2"]=wasmExports["__syscall_pipe2"];var ___syscall_pselect6=Module["___syscall_pselect6"]=wasmExports["__syscall_pselect6"];var ___syscall_recvmmsg=Module["___syscall_recvmmsg"]=wasmExports["__syscall_recvmmsg"];var ___syscall_sendmmsg=Module["___syscall_sendmmsg"]=wasmExports["__syscall_sendmmsg"];var ___syscall_shutdown=Module["___syscall_shutdown"]=wasmExports["__syscall_shutdown"];var ___syscall_socketpair=Module["___syscall_socketpair"]=wasmExports["__syscall_socketpair"];var ___syscall_wait4=Module["___syscall_wait4"]=wasmExports["__syscall_wait4"];var _cosf=Module["_cosf"]=wasmExports["cosf"];var _sinf=Module["_sinf"]=wasmExports["sinf"];var _expf=Module["_expf"]=wasmExports["expf"];var ___multf3=Module["___multf3"]=wasmExports["__multf3"];var ___addtf3=Module["___addtf3"]=wasmExports["__addtf3"];var ___subtf3=Module["___subtf3"]=wasmExports["__subtf3"];var ___ctype_b_loc=Module["___ctype_b_loc"]=wasmExports["__ctype_b_loc"];var ___ctype_get_mb_cur_max=Module["___ctype_get_mb_cur_max"]=wasmExports["__ctype_get_mb_cur_max"];var ___get_tp=Module["___get_tp"]=wasmExports["__get_tp"];var ___ctype_tolower_loc=Module["___ctype_tolower_loc"]=wasmExports["__ctype_tolower_loc"];var ___ctype_toupper_loc=Module["___ctype_toupper_loc"]=wasmExports["__ctype_toupper_loc"];var ___emscripten_environ_constructor=Module["___emscripten_environ_constructor"]=wasmExports["__emscripten_environ_constructor"];var _emscripten_builtin_malloc=Module["_emscripten_builtin_malloc"]=wasmExports["emscripten_builtin_malloc"];var ___flt_rounds=Module["___flt_rounds"]=wasmExports["__flt_rounds"];var _fegetround=Module["_fegetround"]=wasmExports["fegetround"];var ___fmodeflags=Module["___fmodeflags"]=wasmExports["__fmodeflags"];var ___fpclassify=Module["___fpclassify"]=wasmExports["__fpclassify"];var ___fpclassifyf=Module["___fpclassifyf"]=wasmExports["__fpclassifyf"];var ___fpclassifyl=Module["___fpclassifyl"]=wasmExports["__fpclassifyl"];var ___divtf3=Module["___divtf3"]=wasmExports["__divtf3"];var ___mo_lookup=Module["___mo_lookup"]=wasmExports["__mo_lookup"];var ___month_to_secs=Module["___month_to_secs"]=wasmExports["__month_to_secs"];var ___overflow=Module["___overflow"]=wasmExports["__overflow"];var _scalbn=Module["_scalbn"]=wasmExports["scalbn"];var _floor=Module["_floor"]=wasmExports["floor"];var ___lttf2=Module["___lttf2"]=wasmExports["__lttf2"];var ___fixtfdi=Module["___fixtfdi"]=wasmExports["__fixtfdi"];var ___gttf2=Module["___gttf2"]=wasmExports["__gttf2"];var ___fixtfsi=Module["___fixtfsi"]=wasmExports["__fixtfsi"];var ___floatsitf=Module["___floatsitf"]=wasmExports["__floatsitf"];var ___signbit=Module["___signbit"]=wasmExports["__signbit"];var ___signbitf=Module["___signbitf"]=wasmExports["__signbitf"];var ___signbitl=Module["___signbitl"]=wasmExports["__signbitl"];var _memcpy=wasmExports["memcpy"];var ___stack_chk_fail=Module["___stack_chk_fail"]=wasmExports["__stack_chk_fail"];var ___wasi_syscall_ret=Module["___wasi_syscall_ret"]=wasmExports["__wasi_syscall_ret"];var ___synccall=Module["___synccall"]=wasmExports["__synccall"];var _fabsl=Module["_fabsl"]=wasmExports["fabsl"];var ___getf2=Module["___getf2"]=wasmExports["__getf2"];var ___year_to_secs=Module["___year_to_secs"]=wasmExports["__year_to_secs"];var ___lock=Module["___lock"]=wasmExports["__lock"];var ___unlock=Module["___unlock"]=wasmExports["__unlock"];var _tzset=Module["_tzset"]=wasmExports["tzset"];var ___uflow=Module["___uflow"]=wasmExports["__uflow"];var ___fxstat=Module["___fxstat"]=wasmExports["__fxstat"];var ___fxstatat=Module["___fxstatat"]=wasmExports["__fxstatat"];var ___lxstat=Module["___lxstat"]=wasmExports["__lxstat"];var ___xstat=Module["___xstat"]=wasmExports["__xstat"];var ___xmknod=Module["___xmknod"]=wasmExports["__xmknod"];var _mknod=Module["_mknod"]=wasmExports["mknod"];var ___xmknodat=Module["___xmknodat"]=wasmExports["__xmknodat"];var _mknodat=Module["_mknodat"]=wasmExports["mknodat"];var __Exit=Module["__Exit"]=wasmExports["_Exit"];var _a64l=Module["_a64l"]=wasmExports["a64l"];var _l64a=Module["_l64a"]=wasmExports["l64a"];var _abs=Module["_abs"]=wasmExports["abs"];var _acct=Module["_acct"]=wasmExports["acct"];var _acosf=Module["_acosf"]=wasmExports["acosf"];var _sqrtf=Module["_sqrtf"]=wasmExports["sqrtf"];var _acoshf=Module["_acoshf"]=wasmExports["acoshf"];var _log1pf=Module["_log1pf"]=wasmExports["log1pf"];var _logf=Module["_logf"]=wasmExports["logf"];var _acoshl=Module["_acoshl"]=wasmExports["acoshl"];var _acosl=Module["_acosl"]=wasmExports["acosl"];var ___eqtf2=Module["___eqtf2"]=wasmExports["__eqtf2"];var ___netf2=Module["___netf2"]=wasmExports["__netf2"];var _sqrtl=Module["_sqrtl"]=wasmExports["sqrtl"];var _alarm=Module["_alarm"]=wasmExports["alarm"];var _setitimer=Module["_setitimer"]=wasmExports["setitimer"];var _aligned_alloc=Module["_aligned_alloc"]=wasmExports["aligned_alloc"];var _posix_memalign=Module["_posix_memalign"]=wasmExports["posix_memalign"];var _alphasort=Module["_alphasort"]=wasmExports["alphasort"];var _strcoll=Module["_strcoll"]=wasmExports["strcoll"];var _asctime=Module["_asctime"]=wasmExports["asctime"];var ___nl_langinfo_l=Module["___nl_langinfo_l"]=wasmExports["__nl_langinfo_l"];var _asctime_r=Module["_asctime_r"]=wasmExports["asctime_r"];var _asinf=Module["_asinf"]=wasmExports["asinf"];var _fabsf=Module["_fabsf"]=wasmExports["fabsf"];var _asinhf=Module["_asinhf"]=wasmExports["asinhf"];var _asinhl=Module["_asinhl"]=wasmExports["asinhl"];var _asinl=Module["_asinl"]=wasmExports["asinl"];var _asprintf=Module["_asprintf"]=wasmExports["asprintf"];var _vasprintf=Module["_vasprintf"]=wasmExports["vasprintf"];var _at_quick_exit=Module["_at_quick_exit"]=wasmExports["at_quick_exit"];var _atan2f=Module["_atan2f"]=wasmExports["atan2f"];var _atanf=Module["_atanf"]=wasmExports["atanf"];var _atan2l=Module["_atan2l"]=wasmExports["atan2l"];var _atanl=Module["_atanl"]=wasmExports["atanl"];var _atanhf=Module["_atanhf"]=wasmExports["atanhf"];var _atanhl=Module["_atanhl"]=wasmExports["atanhl"];var _log1pl=Module["_log1pl"]=wasmExports["log1pl"];var ___funcs_on_exit=wasmExports["__funcs_on_exit"];var ____cxa_finalize=Module["____cxa_finalize"]=wasmExports["___cxa_finalize"];var ____cxa_atexit=Module["____cxa_atexit"]=wasmExports["___cxa_atexit"];var ___libc_calloc=Module["___libc_calloc"]=wasmExports["__libc_calloc"];var ___atexit=Module["___atexit"]=wasmExports["__atexit"];var ___cxa_atexit=Module["___cxa_atexit"]=wasmExports["__cxa_atexit"];var ___cxa_finalize=Module["___cxa_finalize"]=wasmExports["__cxa_finalize"];var _atof=Module["_atof"]=wasmExports["atof"];var _strtod=Module["_strtod"]=wasmExports["strtod"];var _atoi=Module["_atoi"]=wasmExports["atoi"];var _atol=Module["_atol"]=wasmExports["atol"];var _atoll=Module["_atoll"]=wasmExports["atoll"];var _basename=Module["_basename"]=wasmExports["basename"];var ___xpg_basename=Module["___xpg_basename"]=wasmExports["__xpg_basename"];var _bcmp=Module["_bcmp"]=wasmExports["bcmp"];var _bcopy=Module["_bcopy"]=wasmExports["bcopy"];var _strcasecmp=Module["_strcasecmp"]=wasmExports["strcasecmp"];var _bsearch=Module["_bsearch"]=wasmExports["bsearch"];var _btowc=Module["_btowc"]=wasmExports["btowc"];var _bzero=Module["_bzero"]=wasmExports["bzero"];var _c16rtomb=Module["_c16rtomb"]=wasmExports["c16rtomb"];var _wcrtomb=Module["_wcrtomb"]=wasmExports["wcrtomb"];var _c32rtomb=Module["_c32rtomb"]=wasmExports["c32rtomb"];var _cabs=Module["_cabs"]=wasmExports["cabs"];var _cabsf=Module["_cabsf"]=wasmExports["cabsf"];var _hypotf=Module["_hypotf"]=wasmExports["hypotf"];var _cabsl=Module["_cabsl"]=wasmExports["cabsl"];var _hypotl=Module["_hypotl"]=wasmExports["hypotl"];var _cacos=Module["_cacos"]=wasmExports["cacos"];var _casin=Module["_casin"]=wasmExports["casin"];var _cacosf=Module["_cacosf"]=wasmExports["cacosf"];var _casinf=Module["_casinf"]=wasmExports["casinf"];var _cacosh=Module["_cacosh"]=wasmExports["cacosh"];var _cacoshf=Module["_cacoshf"]=wasmExports["cacoshf"];var _cacoshl=Module["_cacoshl"]=wasmExports["cacoshl"];var _cacosl=Module["_cacosl"]=wasmExports["cacosl"];var _casinl=Module["_casinl"]=wasmExports["casinl"];var _call_once=Module["_call_once"]=wasmExports["call_once"];var _carg=Module["_carg"]=wasmExports["carg"];var _cargf=Module["_cargf"]=wasmExports["cargf"];var _cargl=Module["_cargl"]=wasmExports["cargl"];var _csqrt=Module["_csqrt"]=wasmExports["csqrt"];var _clog=Module["_clog"]=wasmExports["clog"];var _csqrtf=Module["_csqrtf"]=wasmExports["csqrtf"];var _clogf=Module["_clogf"]=wasmExports["clogf"];var _casinh=Module["_casinh"]=wasmExports["casinh"];var _casinhf=Module["_casinhf"]=wasmExports["casinhf"];var _casinhl=Module["_casinhl"]=wasmExports["casinhl"];var _csqrtl=Module["_csqrtl"]=wasmExports["csqrtl"];var _clogl=Module["_clogl"]=wasmExports["clogl"];var _catan=Module["_catan"]=wasmExports["catan"];var _catanf=Module["_catanf"]=wasmExports["catanf"];var _catanh=Module["_catanh"]=wasmExports["catanh"];var _catanhf=Module["_catanhf"]=wasmExports["catanhf"];var _catanhl=Module["_catanhl"]=wasmExports["catanhl"];var _catanl=Module["_catanl"]=wasmExports["catanl"];var _logl=Module["_logl"]=wasmExports["logl"];var ___trunctfsf2=Module["___trunctfsf2"]=wasmExports["__trunctfsf2"];var ___extendsftf2=Module["___extendsftf2"]=wasmExports["__extendsftf2"];var _catclose=Module["_catclose"]=wasmExports["catclose"];var _catgets=Module["_catgets"]=wasmExports["catgets"];var _catopen=Module["_catopen"]=wasmExports["catopen"];var _cbrtf=Module["_cbrtf"]=wasmExports["cbrtf"];var _cbrtl=Module["_cbrtl"]=wasmExports["cbrtl"];var _ccos=Module["_ccos"]=wasmExports["ccos"];var _ccosh=Module["_ccosh"]=wasmExports["ccosh"];var _ccosf=Module["_ccosf"]=wasmExports["ccosf"];var _ccoshf=Module["_ccoshf"]=wasmExports["ccoshf"];var _coshf=Module["_coshf"]=wasmExports["coshf"];var _sinhf=Module["_sinhf"]=wasmExports["sinhf"];var _copysignf=Module["_copysignf"]=wasmExports["copysignf"];var _ccoshl=Module["_ccoshl"]=wasmExports["ccoshl"];var _ccosl=Module["_ccosl"]=wasmExports["ccosl"];var _ceil=Module["_ceil"]=wasmExports["ceil"];var _ceilf=Module["_ceilf"]=wasmExports["ceilf"];var _ceill=Module["_ceill"]=wasmExports["ceill"];var _cexp=Module["_cexp"]=wasmExports["cexp"];var _cexpf=Module["_cexpf"]=wasmExports["cexpf"];var _cexpl=Module["_cexpl"]=wasmExports["cexpl"];var _cfgetospeed=Module["_cfgetospeed"]=wasmExports["cfgetospeed"];var _cfgetispeed=Module["_cfgetispeed"]=wasmExports["cfgetispeed"];var _cfmakeraw=Module["_cfmakeraw"]=wasmExports["cfmakeraw"];var _cfsetospeed=Module["_cfsetospeed"]=wasmExports["cfsetospeed"];var _cfsetispeed=Module["_cfsetispeed"]=wasmExports["cfsetispeed"];var _cfsetspeed=Module["_cfsetspeed"]=wasmExports["cfsetspeed"];var _cimag=Module["_cimag"]=wasmExports["cimag"];var _cimagf=Module["_cimagf"]=wasmExports["cimagf"];var _cimagl=Module["_cimagl"]=wasmExports["cimagl"];var _clearenv=Module["_clearenv"]=wasmExports["clearenv"];var _clearerr_unlocked=Module["_clearerr_unlocked"]=wasmExports["clearerr_unlocked"];var ___wasi_timestamp_to_timespec=Module["___wasi_timestamp_to_timespec"]=wasmExports["__wasi_timestamp_to_timespec"];var _emscripten_thread_sleep=Module["_emscripten_thread_sleep"]=wasmExports["emscripten_thread_sleep"];var _cnd_broadcast=Module["_cnd_broadcast"]=wasmExports["cnd_broadcast"];var _cnd_destroy=Module["_cnd_destroy"]=wasmExports["cnd_destroy"];var _cnd_init=Module["_cnd_init"]=wasmExports["cnd_init"];var _cnd_signal=Module["_cnd_signal"]=wasmExports["cnd_signal"];var _cnd_timedwait=Module["_cnd_timedwait"]=wasmExports["cnd_timedwait"];var _cnd_wait=Module["_cnd_wait"]=wasmExports["cnd_wait"];var _conj=Module["_conj"]=wasmExports["conj"];var _conjf=Module["_conjf"]=wasmExports["conjf"];var _conjl=Module["_conjl"]=wasmExports["conjl"];var _copysignl=Module["_copysignl"]=wasmExports["copysignl"];var _expm1f=Module["_expm1f"]=wasmExports["expm1f"];var _coshl=Module["_coshl"]=wasmExports["coshl"];var _cosl=Module["_cosl"]=wasmExports["cosl"];var _cpow=Module["_cpow"]=wasmExports["cpow"];var ___muldc3=Module["___muldc3"]=wasmExports["__muldc3"];var _cpowf=Module["_cpowf"]=wasmExports["cpowf"];var ___mulsc3=Module["___mulsc3"]=wasmExports["__mulsc3"];var _cpowl=Module["_cpowl"]=wasmExports["cpowl"];var ___unordtf2=Module["___unordtf2"]=wasmExports["__unordtf2"];var ___multc3=Module["___multc3"]=wasmExports["__multc3"];var _cproj=Module["_cproj"]=wasmExports["cproj"];var _cprojf=Module["_cprojf"]=wasmExports["cprojf"];var _cprojl=Module["_cprojl"]=wasmExports["cprojl"];var _creal=Module["_creal"]=wasmExports["creal"];var _crealf=Module["_crealf"]=wasmExports["crealf"];var _creall=Module["_creall"]=wasmExports["creall"];var _creat=Module["_creat"]=wasmExports["creat"];var _crypt=Module["_crypt"]=wasmExports["crypt"];var ___crypt_blowfish=Module["___crypt_blowfish"]=wasmExports["__crypt_blowfish"];var ___crypt_des=Module["___crypt_des"]=wasmExports["__crypt_des"];var ___crypt_md5=Module["___crypt_md5"]=wasmExports["__crypt_md5"];var _strnlen=Module["_strnlen"]=wasmExports["strnlen"];var ___crypt_sha256=Module["___crypt_sha256"]=wasmExports["__crypt_sha256"];var ___crypt_sha512=Module["___crypt_sha512"]=wasmExports["__crypt_sha512"];var _crypt_r=Module["_crypt_r"]=wasmExports["crypt_r"];var _sprintf=Module["_sprintf"]=wasmExports["sprintf"];var _csin=Module["_csin"]=wasmExports["csin"];var _csinh=Module["_csinh"]=wasmExports["csinh"];var _csinf=Module["_csinf"]=wasmExports["csinf"];var _csinhf=Module["_csinhf"]=wasmExports["csinhf"];var _csinhl=Module["_csinhl"]=wasmExports["csinhl"];var _csinl=Module["_csinl"]=wasmExports["csinl"];var _ctan=Module["_ctan"]=wasmExports["ctan"];var _ctanh=Module["_ctanh"]=wasmExports["ctanh"];var _ctanf=Module["_ctanf"]=wasmExports["ctanf"];var _ctanhf=Module["_ctanhf"]=wasmExports["ctanhf"];var _tanf=Module["_tanf"]=wasmExports["tanf"];var _ctanhl=Module["_ctanhl"]=wasmExports["ctanhl"];var _ctanl=Module["_ctanl"]=wasmExports["ctanl"];var _ctime=Module["_ctime"]=wasmExports["ctime"];var _localtime=Module["_localtime"]=wasmExports["localtime"];var _ctime_r=Module["_ctime_r"]=wasmExports["ctime_r"];var _dcngettext=Module["_dcngettext"]=wasmExports["dcngettext"];var ___gettextdomain=Module["___gettextdomain"]=wasmExports["__gettextdomain"];var _dngettext=Module["_dngettext"]=wasmExports["dngettext"];var _difftime=Module["_difftime"]=wasmExports["difftime"];var _dirname=Module["_dirname"]=wasmExports["dirname"];var _div=Module["_div"]=wasmExports["div"];var _dladdr=Module["_dladdr"]=wasmExports["dladdr"];var ___libc_free=Module["___libc_free"]=wasmExports["__libc_free"];var ___libc_malloc=Module["___libc_malloc"]=wasmExports["__libc_malloc"];var ___dl_seterr=wasmExports["__dl_seterr"];var _dn_comp=Module["_dn_comp"]=wasmExports["dn_comp"];var _dn_expand=Module["_dn_expand"]=wasmExports["dn_expand"];var _dn_skipname=Module["_dn_skipname"]=wasmExports["dn_skipname"];var _dprintf=Module["_dprintf"]=wasmExports["dprintf"];var _vdprintf=Module["_vdprintf"]=wasmExports["vdprintf"];var _erand48=Module["_erand48"]=wasmExports["erand48"];var _drand48=Module["_drand48"]=wasmExports["drand48"];var ___wasi_fd_is_valid=Module["___wasi_fd_is_valid"]=wasmExports["__wasi_fd_is_valid"];var ___duplocale=Module["___duplocale"]=wasmExports["__duplocale"];var _duplocale=Module["_duplocale"]=wasmExports["duplocale"];var _new_dlevent=Module["_new_dlevent"]=wasmExports["new_dlevent"];var __emscripten_find_dylib=wasmExports["_emscripten_find_dylib"];var _strspn=Module["_strspn"]=wasmExports["strspn"];var _pthread_setcancelstate=Module["_pthread_setcancelstate"]=wasmExports["pthread_setcancelstate"];var _emscripten_dlopen=Module["_emscripten_dlopen"]=wasmExports["emscripten_dlopen"];var _emscripten_dlopen_promise=Module["_emscripten_dlopen_promise"]=wasmExports["emscripten_dlopen_promise"];var _ecvt=Module["_ecvt"]=wasmExports["ecvt"];var _emscripten_console_logf=Module["_emscripten_console_logf"]=wasmExports["emscripten_console_logf"];var _emscripten_console_errorf=Module["_emscripten_console_errorf"]=wasmExports["emscripten_console_errorf"];var _emscripten_console_warnf=Module["_emscripten_console_warnf"]=wasmExports["emscripten_console_warnf"];var _emscripten_console_tracef=Module["_emscripten_console_tracef"]=wasmExports["emscripten_console_tracef"];var _emscripten_outf=Module["_emscripten_outf"]=wasmExports["emscripten_outf"];var _emscripten_errf=Module["_emscripten_errf"]=wasmExports["emscripten_errf"];var _emscripten_fiber_init=Module["_emscripten_fiber_init"]=wasmExports["emscripten_fiber_init"];var _emscripten_fiber_init_from_current_context=Module["_emscripten_fiber_init_from_current_context"]=wasmExports["emscripten_fiber_init_from_current_context"];var _emscripten_get_heap_size=Module["_emscripten_get_heap_size"]=wasmExports["emscripten_get_heap_size"];var __emscripten_memcpy_bulkmem=Module["__emscripten_memcpy_bulkmem"]=wasmExports["_emscripten_memcpy_bulkmem"];var _emscripten_builtin_memcpy=Module["_emscripten_builtin_memcpy"]=wasmExports["emscripten_builtin_memcpy"];var ___memset=Module["___memset"]=wasmExports["__memset"];var _emscripten_builtin_memset=Module["_emscripten_builtin_memset"]=wasmExports["emscripten_builtin_memset"];var __emscripten_memset_bulkmem=Module["__emscripten_memset_bulkmem"]=wasmExports["_emscripten_memset_bulkmem"];var ___syscall_munmap=Module["___syscall_munmap"]=wasmExports["__syscall_munmap"];var _emscripten_builtin_free=Module["_emscripten_builtin_free"]=wasmExports["emscripten_builtin_free"];var ___syscall_msync=Module["___syscall_msync"]=wasmExports["__syscall_msync"];var ___syscall_mmap2=Module["___syscall_mmap2"]=wasmExports["__syscall_mmap2"];var _emscripten_builtin_memalign=wasmExports["emscripten_builtin_memalign"];var _emscripten_scan_stack=Module["_emscripten_scan_stack"]=wasmExports["emscripten_scan_stack"];var _emscripten_stack_get_current=Module["_emscripten_stack_get_current"]=wasmExports["emscripten_stack_get_current"];var ___time=Module["___time"]=wasmExports["__time"];var ___gettimeofday=Module["___gettimeofday"]=wasmExports["__gettimeofday"];var _dysize=Module["_dysize"]=wasmExports["dysize"];var _setkey=Module["_setkey"]=wasmExports["setkey"];var _encrypt=Module["_encrypt"]=wasmExports["encrypt"];var _sethostent=Module["_sethostent"]=wasmExports["sethostent"];var _gethostent=Module["_gethostent"]=wasmExports["gethostent"];var _getnetent=Module["_getnetent"]=wasmExports["getnetent"];var _endhostent=Module["_endhostent"]=wasmExports["endhostent"];var _setnetent=Module["_setnetent"]=wasmExports["setnetent"];var _endnetent=Module["_endnetent"]=wasmExports["endnetent"];var _erff=Module["_erff"]=wasmExports["erff"];var _erfcf=Module["_erfcf"]=wasmExports["erfcf"];var _erfl=Module["_erfl"]=wasmExports["erfl"];var _erfcl=Module["_erfcl"]=wasmExports["erfcl"];var _vwarn=Module["_vwarn"]=wasmExports["vwarn"];var _fprintf=Module["_fprintf"]=wasmExports["fprintf"];var _vwarnx=Module["_vwarnx"]=wasmExports["vwarnx"];var _putc=Module["_putc"]=wasmExports["putc"];var _verr=Module["_verr"]=wasmExports["verr"];var _verrx=Module["_verrx"]=wasmExports["verrx"];var _warn=Module["_warn"]=wasmExports["warn"];var _warnx=Module["_warnx"]=wasmExports["warnx"];var _err=Module["_err"]=wasmExports["err"];var _errx=Module["_errx"]=wasmExports["errx"];var _ether_aton_r=Module["_ether_aton_r"]=wasmExports["ether_aton_r"];var _ether_aton=Module["_ether_aton"]=wasmExports["ether_aton"];var _ether_ntoa_r=Module["_ether_ntoa_r"]=wasmExports["ether_ntoa_r"];var _ether_ntoa=Module["_ether_ntoa"]=wasmExports["ether_ntoa"];var _ether_line=Module["_ether_line"]=wasmExports["ether_line"];var _ether_ntohost=Module["_ether_ntohost"]=wasmExports["ether_ntohost"];var _ether_hostton=Module["_ether_hostton"]=wasmExports["ether_hostton"];var _euidaccess=Module["_euidaccess"]=wasmExports["euidaccess"];var _faccessat=Module["_faccessat"]=wasmExports["faccessat"];var _eaccess=Module["_eaccess"]=wasmExports["eaccess"];var _execl=Module["_execl"]=wasmExports["execl"];var _execle=Module["_execle"]=wasmExports["execle"];var _execlp=Module["_execlp"]=wasmExports["execlp"];var _execvp=Module["_execvp"]=wasmExports["execvp"];var _execvpe=Module["_execvpe"]=wasmExports["execvpe"];var _exp10=Module["_exp10"]=wasmExports["exp10"];var _pow10=Module["_pow10"]=wasmExports["pow10"];var _exp10f=Module["_exp10f"]=wasmExports["exp10f"];var _modff=Module["_modff"]=wasmExports["modff"];var _exp2f=Module["_exp2f"]=wasmExports["exp2f"];var _pow10f=Module["_pow10f"]=wasmExports["pow10f"];var _exp10l=Module["_exp10l"]=wasmExports["exp10l"];var _modfl=Module["_modfl"]=wasmExports["modfl"];var _exp2l=Module["_exp2l"]=wasmExports["exp2l"];var _powl=Module["_powl"]=wasmExports["powl"];var _pow10l=Module["_pow10l"]=wasmExports["pow10l"];var ___letf2=Module["___letf2"]=wasmExports["__letf2"];var _scalbnl=Module["_scalbnl"]=wasmExports["scalbnl"];var _expl=Module["_expl"]=wasmExports["expl"];var _expm1l=Module["_expm1l"]=wasmExports["expm1l"];var __flushlbf=Module["__flushlbf"]=wasmExports["_flushlbf"];var ___fsetlocking=Module["___fsetlocking"]=wasmExports["__fsetlocking"];var ___fwriting=Module["___fwriting"]=wasmExports["__fwriting"];var ___freading=Module["___freading"]=wasmExports["__freading"];var ___freadable=Module["___freadable"]=wasmExports["__freadable"];var ___fwritable=Module["___fwritable"]=wasmExports["__fwritable"];var ___flbf=Module["___flbf"]=wasmExports["__flbf"];var ___fbufsize=Module["___fbufsize"]=wasmExports["__fbufsize"];var ___fpending=Module["___fpending"]=wasmExports["__fpending"];var ___fpurge=Module["___fpurge"]=wasmExports["__fpurge"];var _fpurge=Module["_fpurge"]=wasmExports["fpurge"];var ___freadahead=Module["___freadahead"]=wasmExports["__freadahead"];var ___freadptr=Module["___freadptr"]=wasmExports["__freadptr"];var ___freadptrinc=Module["___freadptrinc"]=wasmExports["__freadptrinc"];var ___fseterr=Module["___fseterr"]=wasmExports["__fseterr"];var _fcvt=Module["_fcvt"]=wasmExports["fcvt"];var _fdim=Module["_fdim"]=wasmExports["fdim"];var _fdimf=Module["_fdimf"]=wasmExports["fdimf"];var _fdiml=Module["_fdiml"]=wasmExports["fdiml"];var _fegetexceptflag=Module["_fegetexceptflag"]=wasmExports["fegetexceptflag"];var _fetestexcept=Module["_fetestexcept"]=wasmExports["fetestexcept"];var _feholdexcept=Module["_feholdexcept"]=wasmExports["feholdexcept"];var _fegetenv=Module["_fegetenv"]=wasmExports["fegetenv"];var _feclearexcept=Module["_feclearexcept"]=wasmExports["feclearexcept"];var _feraiseexcept=Module["_feraiseexcept"]=wasmExports["feraiseexcept"];var ___fesetround=Module["___fesetround"]=wasmExports["__fesetround"];var _fesetenv=Module["_fesetenv"]=wasmExports["fesetenv"];var _feof_unlocked=Module["_feof_unlocked"]=wasmExports["feof_unlocked"];var __IO_feof_unlocked=Module["__IO_feof_unlocked"]=wasmExports["_IO_feof_unlocked"];var _ferror_unlocked=Module["_ferror_unlocked"]=wasmExports["ferror_unlocked"];var __IO_ferror_unlocked=Module["__IO_ferror_unlocked"]=wasmExports["_IO_ferror_unlocked"];var _fesetexceptflag=Module["_fesetexceptflag"]=wasmExports["fesetexceptflag"];var _fesetround=Module["_fesetround"]=wasmExports["fesetround"];var _feupdateenv=Module["_feupdateenv"]=wasmExports["feupdateenv"];var _fflush_unlocked=Module["_fflush_unlocked"]=wasmExports["fflush_unlocked"];var _ffs=Module["_ffs"]=wasmExports["ffs"];var _ffsl=Module["_ffsl"]=wasmExports["ffsl"];var _ffsll=Module["_ffsll"]=wasmExports["ffsll"];var _emscripten_futex_wake=Module["_emscripten_futex_wake"]=wasmExports["emscripten_futex_wake"];var _fgetln=Module["_fgetln"]=wasmExports["fgetln"];var _getline=Module["_getline"]=wasmExports["getline"];var _fgetpos=Module["_fgetpos"]=wasmExports["fgetpos"];var _fgets_unlocked=Module["_fgets_unlocked"]=wasmExports["fgets_unlocked"];var ___fgetwc_unlocked=Module["___fgetwc_unlocked"]=wasmExports["__fgetwc_unlocked"];var _fwide=Module["_fwide"]=wasmExports["fwide"];var _mbtowc=Module["_mbtowc"]=wasmExports["mbtowc"];var _fgetwc=Module["_fgetwc"]=wasmExports["fgetwc"];var _fgetwc_unlocked=Module["_fgetwc_unlocked"]=wasmExports["fgetwc_unlocked"];var _getwc_unlocked=Module["_getwc_unlocked"]=wasmExports["getwc_unlocked"];var _fgetws=Module["_fgetws"]=wasmExports["fgetws"];var _fgetws_unlocked=Module["_fgetws_unlocked"]=wasmExports["fgetws_unlocked"];var _fileno_unlocked=Module["_fileno_unlocked"]=wasmExports["fileno_unlocked"];var _finite=Module["_finite"]=wasmExports["finite"];var _finitef=Module["_finitef"]=wasmExports["finitef"];var ___floatunsitf=Module["___floatunsitf"]=wasmExports["__floatunsitf"];var _fmodl=Module["_fmodl"]=wasmExports["fmodl"];var _ftrylockfile=Module["_ftrylockfile"]=wasmExports["ftrylockfile"];var _floorf=Module["_floorf"]=wasmExports["floorf"];var _floorl=Module["_floorl"]=wasmExports["floorl"];var _fmaf=Module["_fmaf"]=wasmExports["fmaf"];var _fmal=Module["_fmal"]=wasmExports["fmal"];var _frexpl=Module["_frexpl"]=wasmExports["frexpl"];var _nextafterl=Module["_nextafterl"]=wasmExports["nextafterl"];var _ilogbl=Module["_ilogbl"]=wasmExports["ilogbl"];var _fmax=Module["_fmax"]=wasmExports["fmax"];var _fmaxf=Module["_fmaxf"]=wasmExports["fmaxf"];var _fmaxl=Module["_fmaxl"]=wasmExports["fmaxl"];var _fmemopen=Module["_fmemopen"]=wasmExports["fmemopen"];var _fmin=Module["_fmin"]=wasmExports["fmin"];var _fminf=Module["_fminf"]=wasmExports["fminf"];var _fminl=Module["_fminl"]=wasmExports["fminl"];var _fmodf=Module["_fmodf"]=wasmExports["fmodf"];var _fmtmsg=Module["_fmtmsg"]=wasmExports["fmtmsg"];var _fnmatch=Module["_fnmatch"]=wasmExports["fnmatch"];var _towupper=Module["_towupper"]=wasmExports["towupper"];var _towlower=Module["_towlower"]=wasmExports["towlower"];var _wctype=Module["_wctype"]=wasmExports["wctype"];var _iswctype=Module["_iswctype"]=wasmExports["iswctype"];var _forkpty=Module["_forkpty"]=wasmExports["forkpty"];var _openpty=Module["_openpty"]=wasmExports["openpty"];var _pipe2=Module["_pipe2"]=wasmExports["pipe2"];var _vfiprintf=Module["_vfiprintf"]=wasmExports["vfiprintf"];var ___small_vfprintf=Module["___small_vfprintf"]=wasmExports["__small_vfprintf"];var _fputs_unlocked=Module["_fputs_unlocked"]=wasmExports["fputs_unlocked"];var ___fputwc_unlocked=Module["___fputwc_unlocked"]=wasmExports["__fputwc_unlocked"];var _wctomb=Module["_wctomb"]=wasmExports["wctomb"];var _fputwc=Module["_fputwc"]=wasmExports["fputwc"];var _fputwc_unlocked=Module["_fputwc_unlocked"]=wasmExports["fputwc_unlocked"];var _putwc_unlocked=Module["_putwc_unlocked"]=wasmExports["putwc_unlocked"];var _fputws=Module["_fputws"]=wasmExports["fputws"];var _wcsrtombs=Module["_wcsrtombs"]=wasmExports["wcsrtombs"];var _fputws_unlocked=Module["_fputws_unlocked"]=wasmExports["fputws_unlocked"];var _fread_unlocked=Module["_fread_unlocked"]=wasmExports["fread_unlocked"];var _freelocale=Module["_freelocale"]=wasmExports["freelocale"];var ___freelocale=Module["___freelocale"]=wasmExports["__freelocale"];var _freopen=Module["_freopen"]=wasmExports["freopen"];var _frexpf=Module["_frexpf"]=wasmExports["frexpf"];var _fscanf=Module["_fscanf"]=wasmExports["fscanf"];var _vfscanf=Module["_vfscanf"]=wasmExports["vfscanf"];var ___isoc99_fscanf=Module["___isoc99_fscanf"]=wasmExports["__isoc99_fscanf"];var _fseek=Module["_fseek"]=wasmExports["fseek"];var _fseeko=Module["_fseeko"]=wasmExports["fseeko"];var _fsetpos=Module["_fsetpos"]=wasmExports["fsetpos"];var _ftello=Module["_ftello"]=wasmExports["ftello"];var _ftime=Module["_ftime"]=wasmExports["ftime"];var _utimensat=Module["_utimensat"]=wasmExports["utimensat"];var _fwprintf=Module["_fwprintf"]=wasmExports["fwprintf"];var _vfwprintf=Module["_vfwprintf"]=wasmExports["vfwprintf"];var _fwrite_unlocked=Module["_fwrite_unlocked"]=wasmExports["fwrite_unlocked"];var _fwscanf=Module["_fwscanf"]=wasmExports["fwscanf"];var _vfwscanf=Module["_vfwscanf"]=wasmExports["vfwscanf"];var ___isoc99_fwscanf=Module["___isoc99_fwscanf"]=wasmExports["__isoc99_fwscanf"];var _gcvt=Module["_gcvt"]=wasmExports["gcvt"];var _get_current_dir_name=Module["_get_current_dir_name"]=wasmExports["get_current_dir_name"];var _strdup=Module["_strdup"]=wasmExports["strdup"];var __IO_getc=Module["__IO_getc"]=wasmExports["_IO_getc"];var _fgetc_unlocked=Module["_fgetc_unlocked"]=wasmExports["fgetc_unlocked"];var __IO_getc_unlocked=Module["__IO_getc_unlocked"]=wasmExports["_IO_getc_unlocked"];var _getchar=Module["_getchar"]=wasmExports["getchar"];var _getchar_unlocked=Module["_getchar_unlocked"]=wasmExports["getchar_unlocked"];var _getdelim=Module["_getdelim"]=wasmExports["getdelim"];var ___getdelim=Module["___getdelim"]=wasmExports["__getdelim"];var _getdents=Module["_getdents"]=wasmExports["getdents"];var _getdomainname=Module["_getdomainname"]=wasmExports["getdomainname"];var _getegid=Module["_getegid"]=wasmExports["getegid"];var _geteuid=Module["_geteuid"]=wasmExports["geteuid"];var _getgroups=Module["_getgroups"]=wasmExports["getgroups"];var _gethostid=Module["_gethostid"]=wasmExports["gethostid"];var _freeifaddrs=Module["_freeifaddrs"]=wasmExports["freeifaddrs"];var _getifaddrs=Module["_getifaddrs"]=wasmExports["getifaddrs"];var ___getitimer=Module["___getitimer"]=wasmExports["__getitimer"];var _getlogin_r=Module["_getlogin_r"]=wasmExports["getlogin_r"];var _getopt=Module["_getopt"]=wasmExports["getopt"];var ___posix_getopt=Module["___posix_getopt"]=wasmExports["__posix_getopt"];var _getopt_long=Module["_getopt_long"]=wasmExports["getopt_long"];var _getopt_long_only=Module["_getopt_long_only"]=wasmExports["getopt_long_only"];var _mblen=Module["_mblen"]=wasmExports["mblen"];var _getpagesize=Module["_getpagesize"]=wasmExports["getpagesize"];var _getresgid=Module["_getresgid"]=wasmExports["getresgid"];var _getresuid=Module["_getresuid"]=wasmExports["getresuid"];var _getrusage=Module["_getrusage"]=wasmExports["getrusage"];var _gets=Module["_gets"]=wasmExports["gets"];var _getservbyname_r=Module["_getservbyname_r"]=wasmExports["getservbyname_r"];var _getservbyport_r=Module["_getservbyport_r"]=wasmExports["getservbyport_r"];var _getsubopt=Module["_getsubopt"]=wasmExports["getsubopt"];var _gettid=Module["_gettid"]=wasmExports["gettid"];var _getw=Module["_getw"]=wasmExports["getw"];var _getwc=Module["_getwc"]=wasmExports["getwc"];var _getwchar=Module["_getwchar"]=wasmExports["getwchar"];var _getwchar_unlocked=Module["_getwchar_unlocked"]=wasmExports["getwchar_unlocked"];var _glob=Module["_glob"]=wasmExports["glob"];var _globfree=Module["_globfree"]=wasmExports["globfree"];var _gmtime=Module["_gmtime"]=wasmExports["gmtime"];var _herror=Module["_herror"]=wasmExports["herror"];var _hcreate=Module["_hcreate"]=wasmExports["hcreate"];var _hdestroy=Module["_hdestroy"]=wasmExports["hdestroy"];var _hsearch=Module["_hsearch"]=wasmExports["hsearch"];var _hcreate_r=Module["_hcreate_r"]=wasmExports["hcreate_r"];var _hdestroy_r=Module["_hdestroy_r"]=wasmExports["hdestroy_r"];var _hsearch_r=Module["_hsearch_r"]=wasmExports["hsearch_r"];var _iconv_open=Module["_iconv_open"]=wasmExports["iconv_open"];var _iconv=Module["_iconv"]=wasmExports["iconv"];var _iconv_close=Module["_iconv_close"]=wasmExports["iconv_close"];var _ioctl=Module["_ioctl"]=wasmExports["ioctl"];var _ilogb=Module["_ilogb"]=wasmExports["ilogb"];var _ilogbf=Module["_ilogbf"]=wasmExports["ilogbf"];var _imaxabs=Module["_imaxabs"]=wasmExports["imaxabs"];var _imaxdiv=Module["_imaxdiv"]=wasmExports["imaxdiv"];var _index=Module["_index"]=wasmExports["index"];var _inet_addr=Module["_inet_addr"]=wasmExports["inet_addr"];var _inet_network=Module["_inet_network"]=wasmExports["inet_network"];var _inet_makeaddr=Module["_inet_makeaddr"]=wasmExports["inet_makeaddr"];var _inet_lnaof=Module["_inet_lnaof"]=wasmExports["inet_lnaof"];var _inet_netof=Module["_inet_netof"]=wasmExports["inet_netof"];var _insque=Module["_insque"]=wasmExports["insque"];var _remque=Module["_remque"]=wasmExports["remque"];var ___intscan=Module["___intscan"]=wasmExports["__intscan"];var ___multi3=Module["___multi3"]=wasmExports["__multi3"];var ___isalnum_l=Module["___isalnum_l"]=wasmExports["__isalnum_l"];var _isalnum_l=Module["_isalnum_l"]=wasmExports["isalnum_l"];var _isalpha=Module["_isalpha"]=wasmExports["isalpha"];var ___isalpha_l=Module["___isalpha_l"]=wasmExports["__isalpha_l"];var _isalpha_l=Module["_isalpha_l"]=wasmExports["isalpha_l"];var _isascii=Module["_isascii"]=wasmExports["isascii"];var _isblank=Module["_isblank"]=wasmExports["isblank"];var ___isblank_l=Module["___isblank_l"]=wasmExports["__isblank_l"];var _isblank_l=Module["_isblank_l"]=wasmExports["isblank_l"];var _iscntrl=Module["_iscntrl"]=wasmExports["iscntrl"];var ___iscntrl_l=Module["___iscntrl_l"]=wasmExports["__iscntrl_l"];var _iscntrl_l=Module["_iscntrl_l"]=wasmExports["iscntrl_l"];var _isdigit=Module["_isdigit"]=wasmExports["isdigit"];var ___isdigit_l=Module["___isdigit_l"]=wasmExports["__isdigit_l"];var _isdigit_l=Module["_isdigit_l"]=wasmExports["isdigit_l"];var _isgraph=Module["_isgraph"]=wasmExports["isgraph"];var ___isgraph_l=Module["___isgraph_l"]=wasmExports["__isgraph_l"];var _isgraph_l=Module["_isgraph_l"]=wasmExports["isgraph_l"];var _islower=Module["_islower"]=wasmExports["islower"];var ___islower_l=Module["___islower_l"]=wasmExports["__islower_l"];var _islower_l=Module["_islower_l"]=wasmExports["islower_l"];var _isprint=Module["_isprint"]=wasmExports["isprint"];var ___isprint_l=Module["___isprint_l"]=wasmExports["__isprint_l"];var _isprint_l=Module["_isprint_l"]=wasmExports["isprint_l"];var _ispunct=Module["_ispunct"]=wasmExports["ispunct"];var ___ispunct_l=Module["___ispunct_l"]=wasmExports["__ispunct_l"];var _ispunct_l=Module["_ispunct_l"]=wasmExports["ispunct_l"];var _issetugid=Module["_issetugid"]=wasmExports["issetugid"];var _isspace=Module["_isspace"]=wasmExports["isspace"];var ___isspace_l=Module["___isspace_l"]=wasmExports["__isspace_l"];var _isspace_l=Module["_isspace_l"]=wasmExports["isspace_l"];var _isupper=Module["_isupper"]=wasmExports["isupper"];var ___isupper_l=Module["___isupper_l"]=wasmExports["__isupper_l"];var _isupper_l=Module["_isupper_l"]=wasmExports["isupper_l"];var _iswalnum=Module["_iswalnum"]=wasmExports["iswalnum"];var _iswalpha=Module["_iswalpha"]=wasmExports["iswalpha"];var ___iswalnum_l=Module["___iswalnum_l"]=wasmExports["__iswalnum_l"];var _iswalnum_l=Module["_iswalnum_l"]=wasmExports["iswalnum_l"];var ___iswalpha_l=Module["___iswalpha_l"]=wasmExports["__iswalpha_l"];var _iswalpha_l=Module["_iswalpha_l"]=wasmExports["iswalpha_l"];var _iswblank=Module["_iswblank"]=wasmExports["iswblank"];var ___iswblank_l=Module["___iswblank_l"]=wasmExports["__iswblank_l"];var _iswblank_l=Module["_iswblank_l"]=wasmExports["iswblank_l"];var _iswcntrl=Module["_iswcntrl"]=wasmExports["iswcntrl"];var ___iswcntrl_l=Module["___iswcntrl_l"]=wasmExports["__iswcntrl_l"];var _iswcntrl_l=Module["_iswcntrl_l"]=wasmExports["iswcntrl_l"];var _iswgraph=Module["_iswgraph"]=wasmExports["iswgraph"];var _iswlower=Module["_iswlower"]=wasmExports["iswlower"];var _iswprint=Module["_iswprint"]=wasmExports["iswprint"];var _iswpunct=Module["_iswpunct"]=wasmExports["iswpunct"];var _iswspace=Module["_iswspace"]=wasmExports["iswspace"];var _iswupper=Module["_iswupper"]=wasmExports["iswupper"];var _iswxdigit=Module["_iswxdigit"]=wasmExports["iswxdigit"];var ___iswctype_l=Module["___iswctype_l"]=wasmExports["__iswctype_l"];var ___wctype_l=Module["___wctype_l"]=wasmExports["__wctype_l"];var _iswctype_l=Module["_iswctype_l"]=wasmExports["iswctype_l"];var _wctype_l=Module["_wctype_l"]=wasmExports["wctype_l"];var _iswdigit=Module["_iswdigit"]=wasmExports["iswdigit"];var ___iswdigit_l=Module["___iswdigit_l"]=wasmExports["__iswdigit_l"];var _iswdigit_l=Module["_iswdigit_l"]=wasmExports["iswdigit_l"];var ___iswgraph_l=Module["___iswgraph_l"]=wasmExports["__iswgraph_l"];var _iswgraph_l=Module["_iswgraph_l"]=wasmExports["iswgraph_l"];var ___iswlower_l=Module["___iswlower_l"]=wasmExports["__iswlower_l"];var _iswlower_l=Module["_iswlower_l"]=wasmExports["iswlower_l"];var ___iswprint_l=Module["___iswprint_l"]=wasmExports["__iswprint_l"];var _iswprint_l=Module["_iswprint_l"]=wasmExports["iswprint_l"];var ___iswpunct_l=Module["___iswpunct_l"]=wasmExports["__iswpunct_l"];var _iswpunct_l=Module["_iswpunct_l"]=wasmExports["iswpunct_l"];var ___iswspace_l=Module["___iswspace_l"]=wasmExports["__iswspace_l"];var _iswspace_l=Module["_iswspace_l"]=wasmExports["iswspace_l"];var ___iswupper_l=Module["___iswupper_l"]=wasmExports["__iswupper_l"];var _iswupper_l=Module["_iswupper_l"]=wasmExports["iswupper_l"];var ___iswxdigit_l=Module["___iswxdigit_l"]=wasmExports["__iswxdigit_l"];var _iswxdigit_l=Module["_iswxdigit_l"]=wasmExports["iswxdigit_l"];var _isxdigit=Module["_isxdigit"]=wasmExports["isxdigit"];var ___isxdigit_l=Module["___isxdigit_l"]=wasmExports["__isxdigit_l"];var _isxdigit_l=Module["_isxdigit_l"]=wasmExports["isxdigit_l"];var _j0=Module["_j0"]=wasmExports["j0"];var _y0=Module["_y0"]=wasmExports["y0"];var _j0f=Module["_j0f"]=wasmExports["j0f"];var _y0f=Module["_y0f"]=wasmExports["y0f"];var _j1=Module["_j1"]=wasmExports["j1"];var _y1=Module["_y1"]=wasmExports["y1"];var _j1f=Module["_j1f"]=wasmExports["j1f"];var _y1f=Module["_y1f"]=wasmExports["y1f"];var _jn=Module["_jn"]=wasmExports["jn"];var _yn=Module["_yn"]=wasmExports["yn"];var _jnf=Module["_jnf"]=wasmExports["jnf"];var _ynf=Module["_ynf"]=wasmExports["ynf"];var _labs=Module["_labs"]=wasmExports["labs"];var ___nl_langinfo=Module["___nl_langinfo"]=wasmExports["__nl_langinfo"];var _nl_langinfo_l=Module["_nl_langinfo_l"]=wasmExports["nl_langinfo_l"];var _lchmod=Module["_lchmod"]=wasmExports["lchmod"];var _lchown=Module["_lchown"]=wasmExports["lchown"];var _lcong48=Module["_lcong48"]=wasmExports["lcong48"];var _ldexpf=Module["_ldexpf"]=wasmExports["ldexpf"];var _scalbnf=Module["_scalbnf"]=wasmExports["scalbnf"];var _ldexpl=Module["_ldexpl"]=wasmExports["ldexpl"];var _ldiv=Module["_ldiv"]=wasmExports["ldiv"];var _get_nprocs_conf=Module["_get_nprocs_conf"]=wasmExports["get_nprocs_conf"];var _get_nprocs=Module["_get_nprocs"]=wasmExports["get_nprocs"];var _get_phys_pages=Module["_get_phys_pages"]=wasmExports["get_phys_pages"];var _get_avphys_pages=Module["_get_avphys_pages"]=wasmExports["get_avphys_pages"];var _lgamma=Module["_lgamma"]=wasmExports["lgamma"];var _lgamma_r=Module["_lgamma_r"]=wasmExports["lgamma_r"];var _lgammaf=Module["_lgammaf"]=wasmExports["lgammaf"];var _lgammaf_r=Module["_lgammaf_r"]=wasmExports["lgammaf_r"];var ___lgammal_r=Module["___lgammal_r"]=wasmExports["__lgammal_r"];var _lgammal=Module["_lgammal"]=wasmExports["lgammal"];var _lgammal_r=Module["_lgammal_r"]=wasmExports["lgammal_r"];var _emscripten_has_threading_support=Module["_emscripten_has_threading_support"]=wasmExports["emscripten_has_threading_support"];var _emscripten_num_logical_cores=Module["_emscripten_num_logical_cores"]=wasmExports["emscripten_num_logical_cores"];var _emscripten_futex_wait=Module["_emscripten_futex_wait"]=wasmExports["emscripten_futex_wait"];var _emscripten_main_thread_process_queued_calls=Module["_emscripten_main_thread_process_queued_calls"]=wasmExports["emscripten_main_thread_process_queued_calls"];var _emscripten_current_thread_process_queued_calls=Module["_emscripten_current_thread_process_queued_calls"]=wasmExports["emscripten_current_thread_process_queued_calls"];var __emscripten_yield=Module["__emscripten_yield"]=wasmExports["_emscripten_yield"];var __emscripten_check_timers=Module["__emscripten_check_timers"]=wasmExports["_emscripten_check_timers"];var _pthread_mutex_consistent=Module["_pthread_mutex_consistent"]=wasmExports["pthread_mutex_consistent"];var _pthread_barrier_init=Module["_pthread_barrier_init"]=wasmExports["pthread_barrier_init"];var _pthread_barrier_destroy=Module["_pthread_barrier_destroy"]=wasmExports["pthread_barrier_destroy"];var _pthread_barrier_wait=Module["_pthread_barrier_wait"]=wasmExports["pthread_barrier_wait"];var _pthread_cond_broadcast=Module["_pthread_cond_broadcast"]=wasmExports["pthread_cond_broadcast"];var _pthread_atfork=Module["_pthread_atfork"]=wasmExports["pthread_atfork"];var _pthread_cancel=Module["_pthread_cancel"]=wasmExports["pthread_cancel"];var _pthread_testcancel=Module["_pthread_testcancel"]=wasmExports["pthread_testcancel"];var ___pthread_detach=Module["___pthread_detach"]=wasmExports["__pthread_detach"];var _pthread_equal=Module["_pthread_equal"]=wasmExports["pthread_equal"];var _pthread_mutexattr_init=Module["_pthread_mutexattr_init"]=wasmExports["pthread_mutexattr_init"];var _pthread_mutexattr_setprotocol=Module["_pthread_mutexattr_setprotocol"]=wasmExports["pthread_mutexattr_setprotocol"];var _pthread_mutexattr_settype=Module["_pthread_mutexattr_settype"]=wasmExports["pthread_mutexattr_settype"];var _pthread_mutexattr_destroy=Module["_pthread_mutexattr_destroy"]=wasmExports["pthread_mutexattr_destroy"];var _pthread_mutexattr_setpshared=Module["_pthread_mutexattr_setpshared"]=wasmExports["pthread_mutexattr_setpshared"];var _pthread_condattr_destroy=Module["_pthread_condattr_destroy"]=wasmExports["pthread_condattr_destroy"];var _pthread_condattr_setpshared=Module["_pthread_condattr_setpshared"]=wasmExports["pthread_condattr_setpshared"];var _pthread_setcanceltype=Module["_pthread_setcanceltype"]=wasmExports["pthread_setcanceltype"];var _pthread_rwlock_init=Module["_pthread_rwlock_init"]=wasmExports["pthread_rwlock_init"];var _pthread_rwlock_destroy=Module["_pthread_rwlock_destroy"]=wasmExports["pthread_rwlock_destroy"];var _pthread_rwlock_rdlock=Module["_pthread_rwlock_rdlock"]=wasmExports["pthread_rwlock_rdlock"];var _pthread_rwlock_tryrdlock=Module["_pthread_rwlock_tryrdlock"]=wasmExports["pthread_rwlock_tryrdlock"];var _pthread_rwlock_timedrdlock=Module["_pthread_rwlock_timedrdlock"]=wasmExports["pthread_rwlock_timedrdlock"];var _pthread_rwlock_wrlock=Module["_pthread_rwlock_wrlock"]=wasmExports["pthread_rwlock_wrlock"];var _pthread_rwlock_trywrlock=Module["_pthread_rwlock_trywrlock"]=wasmExports["pthread_rwlock_trywrlock"];var _pthread_rwlock_timedwrlock=Module["_pthread_rwlock_timedwrlock"]=wasmExports["pthread_rwlock_timedwrlock"];var _pthread_rwlock_unlock=Module["_pthread_rwlock_unlock"]=wasmExports["pthread_rwlock_unlock"];var _pthread_rwlockattr_init=Module["_pthread_rwlockattr_init"]=wasmExports["pthread_rwlockattr_init"];var _pthread_rwlockattr_destroy=Module["_pthread_rwlockattr_destroy"]=wasmExports["pthread_rwlockattr_destroy"];var _pthread_rwlockattr_setpshared=Module["_pthread_rwlockattr_setpshared"]=wasmExports["pthread_rwlockattr_setpshared"];var _pthread_spin_init=Module["_pthread_spin_init"]=wasmExports["pthread_spin_init"];var _pthread_spin_destroy=Module["_pthread_spin_destroy"]=wasmExports["pthread_spin_destroy"];var _pthread_spin_lock=Module["_pthread_spin_lock"]=wasmExports["pthread_spin_lock"];var _pthread_spin_trylock=Module["_pthread_spin_trylock"]=wasmExports["pthread_spin_trylock"];var _pthread_spin_unlock=Module["_pthread_spin_unlock"]=wasmExports["pthread_spin_unlock"];var _sem_init=Module["_sem_init"]=wasmExports["sem_init"];var _sem_post=Module["_sem_post"]=wasmExports["sem_post"];var _sem_wait=Module["_sem_wait"]=wasmExports["sem_wait"];var _sem_trywait=Module["_sem_trywait"]=wasmExports["sem_trywait"];var _sem_destroy=Module["_sem_destroy"]=wasmExports["sem_destroy"];var _pthread_mutex_timedlock=Module["_pthread_mutex_timedlock"]=wasmExports["pthread_mutex_timedlock"];var _emscripten_builtin_pthread_create=Module["_emscripten_builtin_pthread_create"]=wasmExports["emscripten_builtin_pthread_create"];var _emscripten_builtin_pthread_join=Module["_emscripten_builtin_pthread_join"]=wasmExports["emscripten_builtin_pthread_join"];var _pthread_once=Module["_pthread_once"]=wasmExports["pthread_once"];var _emscripten_builtin_pthread_exit=Module["_emscripten_builtin_pthread_exit"]=wasmExports["emscripten_builtin_pthread_exit"];var _pthread_exit=Module["_pthread_exit"]=wasmExports["pthread_exit"];var _emscripten_builtin_pthread_detach=Module["_emscripten_builtin_pthread_detach"]=wasmExports["emscripten_builtin_pthread_detach"];var _thrd_detach=Module["_thrd_detach"]=wasmExports["thrd_detach"];var _link=Module["_link"]=wasmExports["link"];var _linkat=Module["_linkat"]=wasmExports["linkat"];var _llabs=Module["_llabs"]=wasmExports["llabs"];var _lldiv=Module["_lldiv"]=wasmExports["lldiv"];var _llrint=Module["_llrint"]=wasmExports["llrint"];var _rint=Module["_rint"]=wasmExports["rint"];var _llrintf=Module["_llrintf"]=wasmExports["llrintf"];var _rintf=Module["_rintf"]=wasmExports["rintf"];var _llrintl=Module["_llrintl"]=wasmExports["llrintl"];var _rintl=Module["_rintl"]=wasmExports["rintl"];var _llround=Module["_llround"]=wasmExports["llround"];var _llroundf=Module["_llroundf"]=wasmExports["llroundf"];var _roundf=Module["_roundf"]=wasmExports["roundf"];var _llroundl=Module["_llroundl"]=wasmExports["llroundl"];var _roundl=Module["_roundl"]=wasmExports["roundl"];var _log10f=Module["_log10f"]=wasmExports["log10f"];var _log10l=Module["_log10l"]=wasmExports["log10l"];var _log2f=Module["_log2f"]=wasmExports["log2f"];var _log2l=Module["_log2l"]=wasmExports["log2l"];var _logb=Module["_logb"]=wasmExports["logb"];var _logbf=Module["_logbf"]=wasmExports["logbf"];var _logbl=Module["_logbl"]=wasmExports["logbl"];var _strtoull=Module["_strtoull"]=wasmExports["strtoull"];var _nrand48=Module["_nrand48"]=wasmExports["nrand48"];var _lrand48=Module["_lrand48"]=wasmExports["lrand48"];var _lrint=Module["_lrint"]=wasmExports["lrint"];var _lrintf=Module["_lrintf"]=wasmExports["lrintf"];var _lrintl=Module["_lrintl"]=wasmExports["lrintl"];var _lround=Module["_lround"]=wasmExports["lround"];var _lroundf=Module["_lroundf"]=wasmExports["lroundf"];var _lroundl=Module["_lroundl"]=wasmExports["lroundl"];var _lsearch=Module["_lsearch"]=wasmExports["lsearch"];var _lfind=Module["_lfind"]=wasmExports["lfind"];var _mbrlen=Module["_mbrlen"]=wasmExports["mbrlen"];var _mbrtoc16=Module["_mbrtoc16"]=wasmExports["mbrtoc16"];var _mbrtoc32=Module["_mbrtoc32"]=wasmExports["mbrtoc32"];var _mbsinit=Module["_mbsinit"]=wasmExports["mbsinit"];var _mbsnrtowcs=Module["_mbsnrtowcs"]=wasmExports["mbsnrtowcs"];var _mbsrtowcs=Module["_mbsrtowcs"]=wasmExports["mbsrtowcs"];var _memccpy=Module["_memccpy"]=wasmExports["memccpy"];var _memmem=Module["_memmem"]=wasmExports["memmem"];var _mempcpy=Module["_mempcpy"]=wasmExports["mempcpy"];var _mincore=Module["_mincore"]=wasmExports["mincore"];var _mkdtemp=Module["_mkdtemp"]=wasmExports["mkdtemp"];var _mkfifo=Module["_mkfifo"]=wasmExports["mkfifo"];var _mkfifoat=Module["_mkfifoat"]=wasmExports["mkfifoat"];var _mkostemp=Module["_mkostemp"]=wasmExports["mkostemp"];var _mkostemps=Module["_mkostemps"]=wasmExports["mkostemps"];var _mkstemp=Module["_mkstemp"]=wasmExports["mkstemp"];var _mkstemps=Module["_mkstemps"]=wasmExports["mkstemps"];var _mktemp=Module["_mktemp"]=wasmExports["mktemp"];var _timegm=Module["_timegm"]=wasmExports["timegm"];var _mlock=Module["_mlock"]=wasmExports["mlock"];var _mlockall=Module["_mlockall"]=wasmExports["mlockall"];var _emscripten_builtin_mmap=Module["_emscripten_builtin_mmap"]=wasmExports["emscripten_builtin_mmap"];var _setmntent=Module["_setmntent"]=wasmExports["setmntent"];var _endmntent=Module["_endmntent"]=wasmExports["endmntent"];var _getmntent_r=Module["_getmntent_r"]=wasmExports["getmntent_r"];var _sscanf=Module["_sscanf"]=wasmExports["sscanf"];var _getmntent=Module["_getmntent"]=wasmExports["getmntent"];var _addmntent=Module["_addmntent"]=wasmExports["addmntent"];var _hasmntopt=Module["_hasmntopt"]=wasmExports["hasmntopt"];var _mprotect=Module["_mprotect"]=wasmExports["mprotect"];var _jrand48=Module["_jrand48"]=wasmExports["jrand48"];var _mrand48=Module["_mrand48"]=wasmExports["mrand48"];var _mtx_destroy=Module["_mtx_destroy"]=wasmExports["mtx_destroy"];var _mtx_init=Module["_mtx_init"]=wasmExports["mtx_init"];var _mtx_lock=Module["_mtx_lock"]=wasmExports["mtx_lock"];var _mtx_timedlock=Module["_mtx_timedlock"]=wasmExports["mtx_timedlock"];var _mtx_trylock=Module["_mtx_trylock"]=wasmExports["mtx_trylock"];var _mtx_unlock=Module["_mtx_unlock"]=wasmExports["mtx_unlock"];var _munlock=Module["_munlock"]=wasmExports["munlock"];var _munlockall=Module["_munlockall"]=wasmExports["munlockall"];var _emscripten_builtin_munmap=Module["_emscripten_builtin_munmap"]=wasmExports["emscripten_builtin_munmap"];var _nan=Module["_nan"]=wasmExports["nan"];var _nanf=Module["_nanf"]=wasmExports["nanf"];var _nanl=Module["_nanl"]=wasmExports["nanl"];var _nanosleep=Module["_nanosleep"]=wasmExports["nanosleep"];var _nearbyint=Module["_nearbyint"]=wasmExports["nearbyint"];var _nearbyintf=Module["_nearbyintf"]=wasmExports["nearbyintf"];var _nearbyintl=Module["_nearbyintl"]=wasmExports["nearbyintl"];var _getnetbyaddr=Module["_getnetbyaddr"]=wasmExports["getnetbyaddr"];var _getnetbyname=Module["_getnetbyname"]=wasmExports["getnetbyname"];var ___newlocale=Module["___newlocale"]=wasmExports["__newlocale"];var _newlocale=Module["_newlocale"]=wasmExports["newlocale"];var _nextafterf=Module["_nextafterf"]=wasmExports["nextafterf"];var _nexttoward=Module["_nexttoward"]=wasmExports["nexttoward"];var _nexttowardf=Module["_nexttowardf"]=wasmExports["nexttowardf"];var _nexttowardl=Module["_nexttowardl"]=wasmExports["nexttowardl"];var _nftw=Module["_nftw"]=wasmExports["nftw"];var _nice=Module["_nice"]=wasmExports["nice"];var _setpriority=Module["_setpriority"]=wasmExports["setpriority"];var _ns_get16=Module["_ns_get16"]=wasmExports["ns_get16"];var _ns_get32=Module["_ns_get32"]=wasmExports["ns_get32"];var _ns_put16=Module["_ns_put16"]=wasmExports["ns_put16"];var _ns_put32=Module["_ns_put32"]=wasmExports["ns_put32"];var _ns_skiprr=Module["_ns_skiprr"]=wasmExports["ns_skiprr"];var _ns_initparse=Module["_ns_initparse"]=wasmExports["ns_initparse"];var _ns_name_uncompress=Module["_ns_name_uncompress"]=wasmExports["ns_name_uncompress"];var _ns_parserr=Module["_ns_parserr"]=wasmExports["ns_parserr"];var _open_memstream=Module["_open_memstream"]=wasmExports["open_memstream"];var _open_wmemstream=Module["_open_wmemstream"]=wasmExports["open_wmemstream"];var _tcsetattr=Module["_tcsetattr"]=wasmExports["tcsetattr"];var _posix_close=Module["_posix_close"]=wasmExports["posix_close"];var _posix_fallocate=Module["_posix_fallocate"]=wasmExports["posix_fallocate"];var _posix_madvise=Module["_posix_madvise"]=wasmExports["posix_madvise"];var _posix_spawn_file_actions_addchdir_np=Module["_posix_spawn_file_actions_addchdir_np"]=wasmExports["posix_spawn_file_actions_addchdir_np"];var _posix_spawn_file_actions_addclose=Module["_posix_spawn_file_actions_addclose"]=wasmExports["posix_spawn_file_actions_addclose"];var _posix_spawn_file_actions_adddup2=Module["_posix_spawn_file_actions_adddup2"]=wasmExports["posix_spawn_file_actions_adddup2"];var _posix_spawn_file_actions_addfchdir_np=Module["_posix_spawn_file_actions_addfchdir_np"]=wasmExports["posix_spawn_file_actions_addfchdir_np"];var _posix_spawn_file_actions_addopen=Module["_posix_spawn_file_actions_addopen"]=wasmExports["posix_spawn_file_actions_addopen"];var _posix_spawn_file_actions_destroy=Module["_posix_spawn_file_actions_destroy"]=wasmExports["posix_spawn_file_actions_destroy"];var _posix_spawn_file_actions_init=Module["_posix_spawn_file_actions_init"]=wasmExports["posix_spawn_file_actions_init"];var _posix_spawnattr_destroy=Module["_posix_spawnattr_destroy"]=wasmExports["posix_spawnattr_destroy"];var _posix_spawnattr_getflags=Module["_posix_spawnattr_getflags"]=wasmExports["posix_spawnattr_getflags"];var _posix_spawnattr_getpgroup=Module["_posix_spawnattr_getpgroup"]=wasmExports["posix_spawnattr_getpgroup"];var _posix_spawnattr_getsigdefault=Module["_posix_spawnattr_getsigdefault"]=wasmExports["posix_spawnattr_getsigdefault"];var _posix_spawnattr_getsigmask=Module["_posix_spawnattr_getsigmask"]=wasmExports["posix_spawnattr_getsigmask"];var _posix_spawnattr_init=Module["_posix_spawnattr_init"]=wasmExports["posix_spawnattr_init"];var _posix_spawnattr_getschedparam=Module["_posix_spawnattr_getschedparam"]=wasmExports["posix_spawnattr_getschedparam"];var _posix_spawnattr_setschedparam=Module["_posix_spawnattr_setschedparam"]=wasmExports["posix_spawnattr_setschedparam"];var _posix_spawnattr_getschedpolicy=Module["_posix_spawnattr_getschedpolicy"]=wasmExports["posix_spawnattr_getschedpolicy"];var _posix_spawnattr_setschedpolicy=Module["_posix_spawnattr_setschedpolicy"]=wasmExports["posix_spawnattr_setschedpolicy"];var _posix_spawnattr_setflags=Module["_posix_spawnattr_setflags"]=wasmExports["posix_spawnattr_setflags"];var _posix_spawnattr_setpgroup=Module["_posix_spawnattr_setpgroup"]=wasmExports["posix_spawnattr_setpgroup"];var _posix_spawnattr_setsigdefault=Module["_posix_spawnattr_setsigdefault"]=wasmExports["posix_spawnattr_setsigdefault"];var _posix_spawnattr_setsigmask=Module["_posix_spawnattr_setsigmask"]=wasmExports["posix_spawnattr_setsigmask"];var _powf=Module["_powf"]=wasmExports["powf"];var _preadv=Module["_preadv"]=wasmExports["preadv"];var _printf=Module["_printf"]=wasmExports["printf"];var ___small_printf=Module["___small_printf"]=wasmExports["__small_printf"];var _em_proxying_queue_create=Module["_em_proxying_queue_create"]=wasmExports["em_proxying_queue_create"];var _em_proxying_queue_destroy=Module["_em_proxying_queue_destroy"]=wasmExports["em_proxying_queue_destroy"];var _emscripten_proxy_get_system_queue=Module["_emscripten_proxy_get_system_queue"]=wasmExports["emscripten_proxy_get_system_queue"];var _emscripten_proxy_execute_queue=Module["_emscripten_proxy_execute_queue"]=wasmExports["emscripten_proxy_execute_queue"];var _emscripten_proxy_finish=Module["_emscripten_proxy_finish"]=wasmExports["emscripten_proxy_finish"];var _emscripten_proxy_async=Module["_emscripten_proxy_async"]=wasmExports["emscripten_proxy_async"];var _emscripten_proxy_sync=Module["_emscripten_proxy_sync"]=wasmExports["emscripten_proxy_sync"];var _emscripten_proxy_sync_with_ctx=Module["_emscripten_proxy_sync_with_ctx"]=wasmExports["emscripten_proxy_sync_with_ctx"];var _pselect=Module["_pselect"]=wasmExports["pselect"];var _pthread_attr_getdetachstate=Module["_pthread_attr_getdetachstate"]=wasmExports["pthread_attr_getdetachstate"];var _pthread_attr_getguardsize=Module["_pthread_attr_getguardsize"]=wasmExports["pthread_attr_getguardsize"];var _pthread_attr_getinheritsched=Module["_pthread_attr_getinheritsched"]=wasmExports["pthread_attr_getinheritsched"];var _pthread_attr_getschedparam=Module["_pthread_attr_getschedparam"]=wasmExports["pthread_attr_getschedparam"];var _pthread_attr_getschedpolicy=Module["_pthread_attr_getschedpolicy"]=wasmExports["pthread_attr_getschedpolicy"];var _pthread_attr_getscope=Module["_pthread_attr_getscope"]=wasmExports["pthread_attr_getscope"];var _pthread_attr_getstack=Module["_pthread_attr_getstack"]=wasmExports["pthread_attr_getstack"];var _pthread_attr_getstacksize=Module["_pthread_attr_getstacksize"]=wasmExports["pthread_attr_getstacksize"];var _pthread_barrierattr_getpshared=Module["_pthread_barrierattr_getpshared"]=wasmExports["pthread_barrierattr_getpshared"];var _pthread_condattr_getclock=Module["_pthread_condattr_getclock"]=wasmExports["pthread_condattr_getclock"];var _pthread_condattr_getpshared=Module["_pthread_condattr_getpshared"]=wasmExports["pthread_condattr_getpshared"];var _pthread_mutexattr_getprotocol=Module["_pthread_mutexattr_getprotocol"]=wasmExports["pthread_mutexattr_getprotocol"];var _pthread_mutexattr_getpshared=Module["_pthread_mutexattr_getpshared"]=wasmExports["pthread_mutexattr_getpshared"];var _pthread_mutexattr_getrobust=Module["_pthread_mutexattr_getrobust"]=wasmExports["pthread_mutexattr_getrobust"];var _pthread_mutexattr_gettype=Module["_pthread_mutexattr_gettype"]=wasmExports["pthread_mutexattr_gettype"];var _pthread_rwlockattr_getpshared=Module["_pthread_rwlockattr_getpshared"]=wasmExports["pthread_rwlockattr_getpshared"];var _pthread_attr_setdetachstate=Module["_pthread_attr_setdetachstate"]=wasmExports["pthread_attr_setdetachstate"];var _pthread_attr_setguardsize=Module["_pthread_attr_setguardsize"]=wasmExports["pthread_attr_setguardsize"];var _pthread_attr_setinheritsched=Module["_pthread_attr_setinheritsched"]=wasmExports["pthread_attr_setinheritsched"];var _pthread_attr_setschedparam=Module["_pthread_attr_setschedparam"]=wasmExports["pthread_attr_setschedparam"];var _pthread_attr_setschedpolicy=Module["_pthread_attr_setschedpolicy"]=wasmExports["pthread_attr_setschedpolicy"];var _pthread_attr_setscope=Module["_pthread_attr_setscope"]=wasmExports["pthread_attr_setscope"];var _pthread_attr_setstack=Module["_pthread_attr_setstack"]=wasmExports["pthread_attr_setstack"];var __pthread_cleanup_push=Module["__pthread_cleanup_push"]=wasmExports["_pthread_cleanup_push"];var __pthread_cleanup_pop=Module["__pthread_cleanup_pop"]=wasmExports["_pthread_cleanup_pop"];var _pthread_getattr_np=Module["_pthread_getattr_np"]=wasmExports["pthread_getattr_np"];var _pthread_getconcurrency=Module["_pthread_getconcurrency"]=wasmExports["pthread_getconcurrency"];var _pthread_getschedparam=Module["_pthread_getschedparam"]=wasmExports["pthread_getschedparam"];var _thrd_current=Module["_thrd_current"]=wasmExports["thrd_current"];var _emscripten_main_runtime_thread_id=Module["_emscripten_main_runtime_thread_id"]=wasmExports["emscripten_main_runtime_thread_id"];var _pthread_setconcurrency=Module["_pthread_setconcurrency"]=wasmExports["pthread_setconcurrency"];var _pthread_setschedprio=Module["_pthread_setschedprio"]=wasmExports["pthread_setschedprio"];var ___sig_is_blocked=Module["___sig_is_blocked"]=wasmExports["__sig_is_blocked"];var _sigorset=Module["_sigorset"]=wasmExports["sigorset"];var _sigandset=Module["_sigandset"]=wasmExports["sigandset"];var _sigdelset=Module["_sigdelset"]=wasmExports["sigdelset"];var _ptsname=Module["_ptsname"]=wasmExports["ptsname"];var __IO_putc=Module["__IO_putc"]=wasmExports["_IO_putc"];var _putc_unlocked=Module["_putc_unlocked"]=wasmExports["putc_unlocked"];var _fputc_unlocked=Module["_fputc_unlocked"]=wasmExports["fputc_unlocked"];var __IO_putc_unlocked=Module["__IO_putc_unlocked"]=wasmExports["_IO_putc_unlocked"];var _putchar_unlocked=Module["_putchar_unlocked"]=wasmExports["putchar_unlocked"];var _putenv=Module["_putenv"]=wasmExports["putenv"];var _putw=Module["_putw"]=wasmExports["putw"];var _putwc=Module["_putwc"]=wasmExports["putwc"];var _putwchar=Module["_putwchar"]=wasmExports["putwchar"];var _putwchar_unlocked=Module["_putwchar_unlocked"]=wasmExports["putwchar_unlocked"];var _pwritev=Module["_pwritev"]=wasmExports["pwritev"];var _qsort_r=Module["_qsort_r"]=wasmExports["qsort_r"];var _quick_exit=Module["_quick_exit"]=wasmExports["quick_exit"];var _action_abort=Module["_action_abort"]=wasmExports["action_abort"];var _action_terminate=Module["_action_terminate"]=wasmExports["action_terminate"];var _srand=Module["_srand"]=wasmExports["srand"];var _rand=Module["_rand"]=wasmExports["rand"];var _rand_r=Module["_rand_r"]=wasmExports["rand_r"];var _srandom=Module["_srandom"]=wasmExports["srandom"];var _initstate=Module["_initstate"]=wasmExports["initstate"];var _setstate=Module["_setstate"]=wasmExports["setstate"];var _random=Module["_random"]=wasmExports["random"];var _readdir_r=Module["_readdir_r"]=wasmExports["readdir_r"];var _recvmmsg=Module["_recvmmsg"]=wasmExports["recvmmsg"];var _regcomp=Module["_regcomp"]=wasmExports["regcomp"];var _regfree=Module["_regfree"]=wasmExports["regfree"];var _regerror=Module["_regerror"]=wasmExports["regerror"];var _regexec=Module["_regexec"]=wasmExports["regexec"];var _remainder=Module["_remainder"]=wasmExports["remainder"];var _remquo=Module["_remquo"]=wasmExports["remquo"];var _drem=Module["_drem"]=wasmExports["drem"];var _remainderf=Module["_remainderf"]=wasmExports["remainderf"];var _remquof=Module["_remquof"]=wasmExports["remquof"];var _dremf=Module["_dremf"]=wasmExports["dremf"];var _remainderl=Module["_remainderl"]=wasmExports["remainderl"];var _remquol=Module["_remquol"]=wasmExports["remquol"];var _remove=Module["_remove"]=wasmExports["remove"];var _res_init=Module["_res_init"]=wasmExports["res_init"];var _res_mkquery=Module["_res_mkquery"]=wasmExports["res_mkquery"];var ___res_msend=Module["___res_msend"]=wasmExports["__res_msend"];var _res_send=Module["_res_send"]=wasmExports["res_send"];var ___res_state=Module["___res_state"]=wasmExports["__res_state"];var _rindex=Module["_rindex"]=wasmExports["rindex"];var _scalb=Module["_scalb"]=wasmExports["scalb"];var _scalbf=Module["_scalbf"]=wasmExports["scalbf"];var _scalbln=Module["_scalbln"]=wasmExports["scalbln"];var _scalblnf=Module["_scalblnf"]=wasmExports["scalblnf"];var _scalblnl=Module["_scalblnl"]=wasmExports["scalblnl"];var _scandir=Module["_scandir"]=wasmExports["scandir"];var _scanf=Module["_scanf"]=wasmExports["scanf"];var _vscanf=Module["_vscanf"]=wasmExports["vscanf"];var ___isoc99_scanf=Module["___isoc99_scanf"]=wasmExports["__isoc99_scanf"];var _secure_getenv=Module["_secure_getenv"]=wasmExports["secure_getenv"];var _seed48=Module["_seed48"]=wasmExports["seed48"];var _seekdir=Module["_seekdir"]=wasmExports["seekdir"];var _sendmmsg=Module["_sendmmsg"]=wasmExports["sendmmsg"];var _endservent=Module["_endservent"]=wasmExports["endservent"];var _setservent=Module["_setservent"]=wasmExports["setservent"];var _getservent=Module["_getservent"]=wasmExports["getservent"];var _setbuf=Module["_setbuf"]=wasmExports["setbuf"];var _setbuffer=Module["_setbuffer"]=wasmExports["setbuffer"];var _setdomainname=Module["_setdomainname"]=wasmExports["setdomainname"];var _setegid=Module["_setegid"]=wasmExports["setegid"];var _seteuid=Module["_seteuid"]=wasmExports["seteuid"];var __emscripten_timeout=wasmExports["_emscripten_timeout"];var _setlinebuf=Module["_setlinebuf"]=wasmExports["setlinebuf"];var _setresgid=Module["_setresgid"]=wasmExports["setresgid"];var _setresuid=Module["_setresuid"]=wasmExports["setresuid"];var _shm_open=Module["_shm_open"]=wasmExports["shm_open"];var _shm_unlink=Module["_shm_unlink"]=wasmExports["shm_unlink"];var _sigaction=Module["_sigaction"]=wasmExports["sigaction"];var _sigisemptyset=Module["_sigisemptyset"]=wasmExports["sigisemptyset"];var _bsd_signal=Module["_bsd_signal"]=wasmExports["bsd_signal"];var ___sysv_signal=Module["___sysv_signal"]=wasmExports["__sysv_signal"];var _significand=Module["_significand"]=wasmExports["significand"];var _significandf=Module["_significandf"]=wasmExports["significandf"];var _sigprocmask=Module["_sigprocmask"]=wasmExports["sigprocmask"];var _sincos=Module["_sincos"]=wasmExports["sincos"];var _sincosf=Module["_sincosf"]=wasmExports["sincosf"];var _sincosl=Module["_sincosl"]=wasmExports["sincosl"];var _sinhl=Module["_sinhl"]=wasmExports["sinhl"];var _sinl=Module["_sinl"]=wasmExports["sinl"];var _sockatmark=Module["_sockatmark"]=wasmExports["sockatmark"];var _vsprintf=Module["_vsprintf"]=wasmExports["vsprintf"];var _vsiprintf=Module["_vsiprintf"]=wasmExports["vsiprintf"];var ___small_sprintf=Module["___small_sprintf"]=wasmExports["__small_sprintf"];var ___small_vsprintf=Module["___small_vsprintf"]=wasmExports["__small_vsprintf"];var _srand48=Module["_srand48"]=wasmExports["srand48"];var _vsscanf=Module["_vsscanf"]=wasmExports["vsscanf"];var ___isoc99_sscanf=Module["___isoc99_sscanf"]=wasmExports["__isoc99_sscanf"];var _statfs=Module["_statfs"]=wasmExports["statfs"];var _fstatfs=Module["_fstatfs"]=wasmExports["fstatfs"];var _statx=Module["_statx"]=wasmExports["statx"];var _stpcpy=Module["_stpcpy"]=wasmExports["stpcpy"];var _stpncpy=Module["_stpncpy"]=wasmExports["stpncpy"];var ___strcasecmp_l=Module["___strcasecmp_l"]=wasmExports["__strcasecmp_l"];var _strcasecmp_l=Module["_strcasecmp_l"]=wasmExports["strcasecmp_l"];var _strcasestr=Module["_strcasestr"]=wasmExports["strcasestr"];var _strncasecmp=Module["_strncasecmp"]=wasmExports["strncasecmp"];var _strchrnul=Module["_strchrnul"]=wasmExports["strchrnul"];var ___strcoll_l=Module["___strcoll_l"]=wasmExports["__strcoll_l"];var _strcoll_l=Module["_strcoll_l"]=wasmExports["strcoll_l"];var ___strerror_l=Module["___strerror_l"]=wasmExports["__strerror_l"];var _strerror_l=Module["_strerror_l"]=wasmExports["strerror_l"];var _strerror_r=Module["_strerror_r"]=wasmExports["strerror_r"];var ___xpg_strerror_r=Module["___xpg_strerror_r"]=wasmExports["__xpg_strerror_r"];var _strfmon_l=Module["_strfmon_l"]=wasmExports["strfmon_l"];var _strfmon=Module["_strfmon"]=wasmExports["strfmon"];var _strftime=Module["_strftime"]=wasmExports["strftime"];var _strftime_l=Module["_strftime_l"]=wasmExports["strftime_l"];var _strlcat=Module["_strlcat"]=wasmExports["strlcat"];var _strlcpy=Module["_strlcpy"]=wasmExports["strlcpy"];var _strlwr=Module["_strlwr"]=wasmExports["strlwr"];var ___strncasecmp_l=Module["___strncasecmp_l"]=wasmExports["__strncasecmp_l"];var _strncasecmp_l=Module["_strncasecmp_l"]=wasmExports["strncasecmp_l"];var _strndup=Module["_strndup"]=wasmExports["strndup"];var _strsep=Module["_strsep"]=wasmExports["strsep"];var _strtof=Module["_strtof"]=wasmExports["strtof"];var _strtold=Module["_strtold"]=wasmExports["strtold"];var _strtof_l=Module["_strtof_l"]=wasmExports["strtof_l"];var _strtod_l=Module["_strtod_l"]=wasmExports["strtod_l"];var _strtold_l=Module["_strtold_l"]=wasmExports["strtold_l"];var ___strtof_l=Module["___strtof_l"]=wasmExports["__strtof_l"];var ___strtod_l=Module["___strtod_l"]=wasmExports["__strtod_l"];var ___strtold_l=Module["___strtold_l"]=wasmExports["__strtold_l"];var _strtok=Module["_strtok"]=wasmExports["strtok"];var _strtok_r=Module["_strtok_r"]=wasmExports["strtok_r"];var _strtoll=Module["_strtoll"]=wasmExports["strtoll"];var _strtoimax=Module["_strtoimax"]=wasmExports["strtoimax"];var _strtoumax=Module["_strtoumax"]=wasmExports["strtoumax"];var ___strtol_internal=Module["___strtol_internal"]=wasmExports["__strtol_internal"];var ___strtoul_internal=Module["___strtoul_internal"]=wasmExports["__strtoul_internal"];var ___strtoll_internal=Module["___strtoll_internal"]=wasmExports["__strtoll_internal"];var ___strtoull_internal=Module["___strtoull_internal"]=wasmExports["__strtoull_internal"];var ___strtoimax_internal=Module["___strtoimax_internal"]=wasmExports["__strtoimax_internal"];var ___strtoumax_internal=Module["___strtoumax_internal"]=wasmExports["__strtoumax_internal"];var _strtoull_l=Module["_strtoull_l"]=wasmExports["strtoull_l"];var _strtoll_l=Module["_strtoll_l"]=wasmExports["strtoll_l"];var _strtoul_l=Module["_strtoul_l"]=wasmExports["strtoul_l"];var _strtol_l=Module["_strtol_l"]=wasmExports["strtol_l"];var _strupr=Module["_strupr"]=wasmExports["strupr"];var _strverscmp=Module["_strverscmp"]=wasmExports["strverscmp"];var ___strxfrm_l=Module["___strxfrm_l"]=wasmExports["__strxfrm_l"];var _strxfrm=Module["_strxfrm"]=wasmExports["strxfrm"];var _strxfrm_l=Module["_strxfrm_l"]=wasmExports["strxfrm_l"];var _swab=Module["_swab"]=wasmExports["swab"];var _swprintf=Module["_swprintf"]=wasmExports["swprintf"];var _vswprintf=Module["_vswprintf"]=wasmExports["vswprintf"];var _swscanf=Module["_swscanf"]=wasmExports["swscanf"];var _vswscanf=Module["_vswscanf"]=wasmExports["vswscanf"];var ___isoc99_swscanf=Module["___isoc99_swscanf"]=wasmExports["__isoc99_swscanf"];var _symlinkat=Module["_symlinkat"]=wasmExports["symlinkat"];var _setlogmask=Module["_setlogmask"]=wasmExports["setlogmask"];var _closelog=Module["_closelog"]=wasmExports["closelog"];var _openlog=Module["_openlog"]=wasmExports["openlog"];var _syslog=Module["_syslog"]=wasmExports["syslog"];var _vsyslog=Module["_vsyslog"]=wasmExports["vsyslog"];var _tanhf=Module["_tanhf"]=wasmExports["tanhf"];var _tanhl=Module["_tanhl"]=wasmExports["tanhl"];var _tanl=Module["_tanl"]=wasmExports["tanl"];var _tcdrain=Module["_tcdrain"]=wasmExports["tcdrain"];var _tcflow=Module["_tcflow"]=wasmExports["tcflow"];var _tcflush=Module["_tcflush"]=wasmExports["tcflush"];var _tcgetattr=Module["_tcgetattr"]=wasmExports["tcgetattr"];var _tcgetsid=Module["_tcgetsid"]=wasmExports["tcgetsid"];var _tcgetwinsize=Module["_tcgetwinsize"]=wasmExports["tcgetwinsize"];var _tcsendbreak=Module["_tcsendbreak"]=wasmExports["tcsendbreak"];var _tcsetwinsize=Module["_tcsetwinsize"]=wasmExports["tcsetwinsize"];var _tdelete=Module["_tdelete"]=wasmExports["tdelete"];var _tdestroy=Module["_tdestroy"]=wasmExports["tdestroy"];var _telldir=Module["_telldir"]=wasmExports["telldir"];var _tempnam=Module["_tempnam"]=wasmExports["tempnam"];var _ngettext=Module["_ngettext"]=wasmExports["ngettext"];var _tfind=Module["_tfind"]=wasmExports["tfind"];var _tgamma=Module["_tgamma"]=wasmExports["tgamma"];var _tgammaf=Module["_tgammaf"]=wasmExports["tgammaf"];var _tgammal=Module["_tgammal"]=wasmExports["tgammal"];var _thrd_create=Module["_thrd_create"]=wasmExports["thrd_create"];var _thrd_exit=Module["_thrd_exit"]=wasmExports["thrd_exit"];var _thrd_join=Module["_thrd_join"]=wasmExports["thrd_join"];var _thrd_sleep=Module["_thrd_sleep"]=wasmExports["thrd_sleep"];var _thrd_yield=Module["_thrd_yield"]=wasmExports["thrd_yield"];var _emscripten_set_thread_name=Module["_emscripten_set_thread_name"]=wasmExports["emscripten_set_thread_name"];var _timespec_get=Module["_timespec_get"]=wasmExports["timespec_get"];var _tmpfile=Module["_tmpfile"]=wasmExports["tmpfile"];var _tmpnam=Module["_tmpnam"]=wasmExports["tmpnam"];var _toascii=Module["_toascii"]=wasmExports["toascii"];var ___tolower_l=Module["___tolower_l"]=wasmExports["__tolower_l"];var _tolower_l=Module["_tolower_l"]=wasmExports["tolower_l"];var ___toupper_l=Module["___toupper_l"]=wasmExports["__toupper_l"];var _toupper_l=Module["_toupper_l"]=wasmExports["toupper_l"];var ___towupper_l=Module["___towupper_l"]=wasmExports["__towupper_l"];var ___towlower_l=Module["___towlower_l"]=wasmExports["__towlower_l"];var _towupper_l=Module["_towupper_l"]=wasmExports["towupper_l"];var _towlower_l=Module["_towlower_l"]=wasmExports["towlower_l"];var _trunc=Module["_trunc"]=wasmExports["trunc"];var _truncf=Module["_truncf"]=wasmExports["truncf"];var _truncl=Module["_truncl"]=wasmExports["truncl"];var _tsearch=Module["_tsearch"]=wasmExports["tsearch"];var _tss_create=Module["_tss_create"]=wasmExports["tss_create"];var _tss_delete=Module["_tss_delete"]=wasmExports["tss_delete"];var _tss_set=Module["_tss_set"]=wasmExports["tss_set"];var _ttyname=Module["_ttyname"]=wasmExports["ttyname"];var _twalk=Module["_twalk"]=wasmExports["twalk"];var _ualarm=Module["_ualarm"]=wasmExports["ualarm"];var _ungetwc=Module["_ungetwc"]=wasmExports["ungetwc"];var ___uselocale=Module["___uselocale"]=wasmExports["__uselocale"];var _uselocale=Module["_uselocale"]=wasmExports["uselocale"];var _usleep=Module["_usleep"]=wasmExports["usleep"];var _utime=Module["_utime"]=wasmExports["utime"];var _versionsort=Module["_versionsort"]=wasmExports["versionsort"];var ___vfprintf_internal=Module["___vfprintf_internal"]=wasmExports["__vfprintf_internal"];var ___isoc99_vfscanf=Module["___isoc99_vfscanf"]=wasmExports["__isoc99_vfscanf"];var _wcsnlen=Module["_wcsnlen"]=wasmExports["wcsnlen"];var ___isoc99_vfwscanf=Module["___isoc99_vfwscanf"]=wasmExports["__isoc99_vfwscanf"];var _vprintf=Module["_vprintf"]=wasmExports["vprintf"];var ___isoc99_vscanf=Module["___isoc99_vscanf"]=wasmExports["__isoc99_vscanf"];var _vsniprintf=Module["_vsniprintf"]=wasmExports["vsniprintf"];var ___small_vsnprintf=Module["___small_vsnprintf"]=wasmExports["__small_vsnprintf"];var ___isoc99_vsscanf=Module["___isoc99_vsscanf"]=wasmExports["__isoc99_vsscanf"];var ___isoc99_vswscanf=Module["___isoc99_vswscanf"]=wasmExports["__isoc99_vswscanf"];var _vwprintf=Module["_vwprintf"]=wasmExports["vwprintf"];var _vwscanf=Module["_vwscanf"]=wasmExports["vwscanf"];var ___isoc99_vwscanf=Module["___isoc99_vwscanf"]=wasmExports["__isoc99_vwscanf"];var _wcpcpy=Module["_wcpcpy"]=wasmExports["wcpcpy"];var _wcpncpy=Module["_wcpncpy"]=wasmExports["wcpncpy"];var _wcscasecmp=Module["_wcscasecmp"]=wasmExports["wcscasecmp"];var _wcsncasecmp=Module["_wcsncasecmp"]=wasmExports["wcsncasecmp"];var _wcscasecmp_l=Module["_wcscasecmp_l"]=wasmExports["wcscasecmp_l"];var _wcscat=Module["_wcscat"]=wasmExports["wcscat"];var ___wcscoll_l=Module["___wcscoll_l"]=wasmExports["__wcscoll_l"];var _wcscoll_l=Module["_wcscoll_l"]=wasmExports["wcscoll_l"];var _wcscspn=Module["_wcscspn"]=wasmExports["wcscspn"];var _wcsdup=Module["_wcsdup"]=wasmExports["wcsdup"];var _wmemcpy=Module["_wmemcpy"]=wasmExports["wmemcpy"];var ___wcsftime_l=Module["___wcsftime_l"]=wasmExports["__wcsftime_l"];var _wcstoul=Module["_wcstoul"]=wasmExports["wcstoul"];var _wcsftime_l=Module["_wcsftime_l"]=wasmExports["wcsftime_l"];var _wcsncasecmp_l=Module["_wcsncasecmp_l"]=wasmExports["wcsncasecmp_l"];var _wcsncat=Module["_wcsncat"]=wasmExports["wcsncat"];var _wmemset=Module["_wmemset"]=wasmExports["wmemset"];var _wcsnrtombs=Module["_wcsnrtombs"]=wasmExports["wcsnrtombs"];var _wcspbrk=Module["_wcspbrk"]=wasmExports["wcspbrk"];var _wcsspn=Module["_wcsspn"]=wasmExports["wcsspn"];var _wcsstr=Module["_wcsstr"]=wasmExports["wcsstr"];var _wcstof=Module["_wcstof"]=wasmExports["wcstof"];var _wcstod=Module["_wcstod"]=wasmExports["wcstod"];var _wcstold=Module["_wcstold"]=wasmExports["wcstold"];var _wcstoull=Module["_wcstoull"]=wasmExports["wcstoull"];var _wcstoll=Module["_wcstoll"]=wasmExports["wcstoll"];var _wcstoimax=Module["_wcstoimax"]=wasmExports["wcstoimax"];var _wcstoumax=Module["_wcstoumax"]=wasmExports["wcstoumax"];var _wcswcs=Module["_wcswcs"]=wasmExports["wcswcs"];var _wcswidth=Module["_wcswidth"]=wasmExports["wcswidth"];var _wcwidth=Module["_wcwidth"]=wasmExports["wcwidth"];var ___wcsxfrm_l=Module["___wcsxfrm_l"]=wasmExports["__wcsxfrm_l"];var _wcsxfrm_l=Module["_wcsxfrm_l"]=wasmExports["wcsxfrm_l"];var _wctob=Module["_wctob"]=wasmExports["wctob"];var _wctrans=Module["_wctrans"]=wasmExports["wctrans"];var _towctrans=Module["_towctrans"]=wasmExports["towctrans"];var ___wctrans_l=Module["___wctrans_l"]=wasmExports["__wctrans_l"];var ___towctrans_l=Module["___towctrans_l"]=wasmExports["__towctrans_l"];var _wctrans_l=Module["_wctrans_l"]=wasmExports["wctrans_l"];var _towctrans_l=Module["_towctrans_l"]=wasmExports["towctrans_l"];var _wmemmove=Module["_wmemmove"]=wasmExports["wmemmove"];var _wprintf=Module["_wprintf"]=wasmExports["wprintf"];var _wscanf=Module["_wscanf"]=wasmExports["wscanf"];var ___isoc99_wscanf=Module["___isoc99_wscanf"]=wasmExports["__isoc99_wscanf"];var ___libc_realloc=Module["___libc_realloc"]=wasmExports["__libc_realloc"];var _realloc_in_place=Module["_realloc_in_place"]=wasmExports["realloc_in_place"];var _memalign=Module["_memalign"]=wasmExports["memalign"];var _valloc=Module["_valloc"]=wasmExports["valloc"];var _pvalloc=Module["_pvalloc"]=wasmExports["pvalloc"];var _mallinfo=Module["_mallinfo"]=wasmExports["mallinfo"];var _mallopt=Module["_mallopt"]=wasmExports["mallopt"];var _malloc_trim=Module["_malloc_trim"]=wasmExports["malloc_trim"];var _malloc_usable_size=Module["_malloc_usable_size"]=wasmExports["malloc_usable_size"];var _malloc_footprint=Module["_malloc_footprint"]=wasmExports["malloc_footprint"];var _malloc_max_footprint=Module["_malloc_max_footprint"]=wasmExports["malloc_max_footprint"];var _malloc_footprint_limit=Module["_malloc_footprint_limit"]=wasmExports["malloc_footprint_limit"];var _malloc_set_footprint_limit=Module["_malloc_set_footprint_limit"]=wasmExports["malloc_set_footprint_limit"];var _independent_calloc=Module["_independent_calloc"]=wasmExports["independent_calloc"];var _independent_comalloc=Module["_independent_comalloc"]=wasmExports["independent_comalloc"];var _bulk_free=Module["_bulk_free"]=wasmExports["bulk_free"];var _emscripten_builtin_realloc=Module["_emscripten_builtin_realloc"]=wasmExports["emscripten_builtin_realloc"];var _emscripten_builtin_calloc=Module["_emscripten_builtin_calloc"]=wasmExports["emscripten_builtin_calloc"];var _emscripten_get_sbrk_ptr=Module["_emscripten_get_sbrk_ptr"]=wasmExports["emscripten_get_sbrk_ptr"];var _brk=Module["_brk"]=wasmExports["brk"];var ___trap=wasmExports["__trap"];var ___absvdi2=Module["___absvdi2"]=wasmExports["__absvdi2"];var ___absvsi2=Module["___absvsi2"]=wasmExports["__absvsi2"];var ___absvti2=Module["___absvti2"]=wasmExports["__absvti2"];var ___adddf3=Module["___adddf3"]=wasmExports["__adddf3"];var ___fe_getround=Module["___fe_getround"]=wasmExports["__fe_getround"];var ___fe_raise_inexact=Module["___fe_raise_inexact"]=wasmExports["__fe_raise_inexact"];var ___addsf3=Module["___addsf3"]=wasmExports["__addsf3"];var ___ashlti3=Module["___ashlti3"]=wasmExports["__ashlti3"];var ___lshrti3=Module["___lshrti3"]=wasmExports["__lshrti3"];var ___addvdi3=Module["___addvdi3"]=wasmExports["__addvdi3"];var ___addvsi3=Module["___addvsi3"]=wasmExports["__addvsi3"];var ___addvti3=Module["___addvti3"]=wasmExports["__addvti3"];var ___ashldi3=Module["___ashldi3"]=wasmExports["__ashldi3"];var ___ashrdi3=Module["___ashrdi3"]=wasmExports["__ashrdi3"];var ___ashrti3=Module["___ashrti3"]=wasmExports["__ashrti3"];var ___atomic_is_lock_free=Module["___atomic_is_lock_free"]=wasmExports["__atomic_is_lock_free"];var ___atomic_load=Module["___atomic_load"]=wasmExports["__atomic_load"];var ___atomic_store=Module["___atomic_store"]=wasmExports["__atomic_store"];var ___atomic_compare_exchange=Module["___atomic_compare_exchange"]=wasmExports["__atomic_compare_exchange"];var ___atomic_exchange=Module["___atomic_exchange"]=wasmExports["__atomic_exchange"];var ___atomic_load_1=Module["___atomic_load_1"]=wasmExports["__atomic_load_1"];var ___atomic_load_2=Module["___atomic_load_2"]=wasmExports["__atomic_load_2"];var ___atomic_load_4=Module["___atomic_load_4"]=wasmExports["__atomic_load_4"];var ___atomic_load_8=Module["___atomic_load_8"]=wasmExports["__atomic_load_8"];var ___atomic_load_16=Module["___atomic_load_16"]=wasmExports["__atomic_load_16"];var ___atomic_store_1=Module["___atomic_store_1"]=wasmExports["__atomic_store_1"];var ___atomic_store_2=Module["___atomic_store_2"]=wasmExports["__atomic_store_2"];var ___atomic_store_4=Module["___atomic_store_4"]=wasmExports["__atomic_store_4"];var ___atomic_store_8=Module["___atomic_store_8"]=wasmExports["__atomic_store_8"];var ___atomic_store_16=Module["___atomic_store_16"]=wasmExports["__atomic_store_16"];var ___atomic_exchange_1=Module["___atomic_exchange_1"]=wasmExports["__atomic_exchange_1"];var ___atomic_exchange_2=Module["___atomic_exchange_2"]=wasmExports["__atomic_exchange_2"];var ___atomic_exchange_4=Module["___atomic_exchange_4"]=wasmExports["__atomic_exchange_4"];var ___atomic_exchange_8=Module["___atomic_exchange_8"]=wasmExports["__atomic_exchange_8"];var ___atomic_exchange_16=Module["___atomic_exchange_16"]=wasmExports["__atomic_exchange_16"];var ___atomic_compare_exchange_1=Module["___atomic_compare_exchange_1"]=wasmExports["__atomic_compare_exchange_1"];var ___atomic_compare_exchange_2=Module["___atomic_compare_exchange_2"]=wasmExports["__atomic_compare_exchange_2"];var ___atomic_compare_exchange_4=Module["___atomic_compare_exchange_4"]=wasmExports["__atomic_compare_exchange_4"];var ___atomic_compare_exchange_8=Module["___atomic_compare_exchange_8"]=wasmExports["__atomic_compare_exchange_8"];var ___atomic_compare_exchange_16=Module["___atomic_compare_exchange_16"]=wasmExports["__atomic_compare_exchange_16"];var ___atomic_fetch_add_1=Module["___atomic_fetch_add_1"]=wasmExports["__atomic_fetch_add_1"];var ___atomic_fetch_add_2=Module["___atomic_fetch_add_2"]=wasmExports["__atomic_fetch_add_2"];var ___atomic_fetch_add_4=Module["___atomic_fetch_add_4"]=wasmExports["__atomic_fetch_add_4"];var ___atomic_fetch_add_8=Module["___atomic_fetch_add_8"]=wasmExports["__atomic_fetch_add_8"];var ___atomic_fetch_add_16=Module["___atomic_fetch_add_16"]=wasmExports["__atomic_fetch_add_16"];var ___atomic_fetch_sub_1=Module["___atomic_fetch_sub_1"]=wasmExports["__atomic_fetch_sub_1"];var ___atomic_fetch_sub_2=Module["___atomic_fetch_sub_2"]=wasmExports["__atomic_fetch_sub_2"];var ___atomic_fetch_sub_4=Module["___atomic_fetch_sub_4"]=wasmExports["__atomic_fetch_sub_4"];var ___atomic_fetch_sub_8=Module["___atomic_fetch_sub_8"]=wasmExports["__atomic_fetch_sub_8"];var ___atomic_fetch_sub_16=Module["___atomic_fetch_sub_16"]=wasmExports["__atomic_fetch_sub_16"];var ___atomic_fetch_and_1=Module["___atomic_fetch_and_1"]=wasmExports["__atomic_fetch_and_1"];var ___atomic_fetch_and_2=Module["___atomic_fetch_and_2"]=wasmExports["__atomic_fetch_and_2"];var ___atomic_fetch_and_4=Module["___atomic_fetch_and_4"]=wasmExports["__atomic_fetch_and_4"];var ___atomic_fetch_and_8=Module["___atomic_fetch_and_8"]=wasmExports["__atomic_fetch_and_8"];var ___atomic_fetch_and_16=Module["___atomic_fetch_and_16"]=wasmExports["__atomic_fetch_and_16"];var ___atomic_fetch_or_1=Module["___atomic_fetch_or_1"]=wasmExports["__atomic_fetch_or_1"];var ___atomic_fetch_or_2=Module["___atomic_fetch_or_2"]=wasmExports["__atomic_fetch_or_2"];var ___atomic_fetch_or_4=Module["___atomic_fetch_or_4"]=wasmExports["__atomic_fetch_or_4"];var ___atomic_fetch_or_8=Module["___atomic_fetch_or_8"]=wasmExports["__atomic_fetch_or_8"];var ___atomic_fetch_or_16=Module["___atomic_fetch_or_16"]=wasmExports["__atomic_fetch_or_16"];var ___atomic_fetch_xor_1=Module["___atomic_fetch_xor_1"]=wasmExports["__atomic_fetch_xor_1"];var ___atomic_fetch_xor_2=Module["___atomic_fetch_xor_2"]=wasmExports["__atomic_fetch_xor_2"];var ___atomic_fetch_xor_4=Module["___atomic_fetch_xor_4"]=wasmExports["__atomic_fetch_xor_4"];var ___atomic_fetch_xor_8=Module["___atomic_fetch_xor_8"]=wasmExports["__atomic_fetch_xor_8"];var ___atomic_fetch_xor_16=Module["___atomic_fetch_xor_16"]=wasmExports["__atomic_fetch_xor_16"];var ___atomic_fetch_nand_1=Module["___atomic_fetch_nand_1"]=wasmExports["__atomic_fetch_nand_1"];var ___atomic_fetch_nand_2=Module["___atomic_fetch_nand_2"]=wasmExports["__atomic_fetch_nand_2"];var ___atomic_fetch_nand_4=Module["___atomic_fetch_nand_4"]=wasmExports["__atomic_fetch_nand_4"];var ___atomic_fetch_nand_8=Module["___atomic_fetch_nand_8"]=wasmExports["__atomic_fetch_nand_8"];var ___atomic_fetch_nand_16=Module["___atomic_fetch_nand_16"]=wasmExports["__atomic_fetch_nand_16"];var _atomic_flag_clear=Module["_atomic_flag_clear"]=wasmExports["atomic_flag_clear"];var _atomic_flag_clear_explicit=Module["_atomic_flag_clear_explicit"]=wasmExports["atomic_flag_clear_explicit"];var _atomic_flag_test_and_set=Module["_atomic_flag_test_and_set"]=wasmExports["atomic_flag_test_and_set"];var _atomic_flag_test_and_set_explicit=Module["_atomic_flag_test_and_set_explicit"]=wasmExports["atomic_flag_test_and_set_explicit"];var _atomic_signal_fence=Module["_atomic_signal_fence"]=wasmExports["atomic_signal_fence"];var _atomic_thread_fence=Module["_atomic_thread_fence"]=wasmExports["atomic_thread_fence"];var ___bswapdi2=Module["___bswapdi2"]=wasmExports["__bswapdi2"];var ___bswapsi2=Module["___bswapsi2"]=wasmExports["__bswapsi2"];var ___clear_cache=Module["___clear_cache"]=wasmExports["__clear_cache"];var ___clzdi2=Module["___clzdi2"]=wasmExports["__clzdi2"];var ___clzsi2=Module["___clzsi2"]=wasmExports["__clzsi2"];var ___clzti2=Module["___clzti2"]=wasmExports["__clzti2"];var ___cmpdi2=Module["___cmpdi2"]=wasmExports["__cmpdi2"];var ___cmpti2=Module["___cmpti2"]=wasmExports["__cmpti2"];var ___ledf2=Module["___ledf2"]=wasmExports["__ledf2"];var ___gedf2=Module["___gedf2"]=wasmExports["__gedf2"];var ___unorddf2=Module["___unorddf2"]=wasmExports["__unorddf2"];var ___eqdf2=Module["___eqdf2"]=wasmExports["__eqdf2"];var ___ltdf2=Module["___ltdf2"]=wasmExports["__ltdf2"];var ___nedf2=Module["___nedf2"]=wasmExports["__nedf2"];var ___gtdf2=Module["___gtdf2"]=wasmExports["__gtdf2"];var ___lesf2=Module["___lesf2"]=wasmExports["__lesf2"];var ___gesf2=Module["___gesf2"]=wasmExports["__gesf2"];var ___unordsf2=Module["___unordsf2"]=wasmExports["__unordsf2"];var ___eqsf2=Module["___eqsf2"]=wasmExports["__eqsf2"];var ___ltsf2=Module["___ltsf2"]=wasmExports["__ltsf2"];var ___nesf2=Module["___nesf2"]=wasmExports["__nesf2"];var ___gtsf2=Module["___gtsf2"]=wasmExports["__gtsf2"];var ___ctzdi2=Module["___ctzdi2"]=wasmExports["__ctzdi2"];var ___ctzsi2=Module["___ctzsi2"]=wasmExports["__ctzsi2"];var ___ctzti2=Module["___ctzti2"]=wasmExports["__ctzti2"];var ___divdc3=Module["___divdc3"]=wasmExports["__divdc3"];var ___divdf3=Module["___divdf3"]=wasmExports["__divdf3"];var ___divdi3=Module["___divdi3"]=wasmExports["__divdi3"];var ___udivmoddi4=Module["___udivmoddi4"]=wasmExports["__udivmoddi4"];var ___divmoddi4=Module["___divmoddi4"]=wasmExports["__divmoddi4"];var ___divmodsi4=Module["___divmodsi4"]=wasmExports["__divmodsi4"];var ___udivmodsi4=Module["___udivmodsi4"]=wasmExports["__udivmodsi4"];var ___divmodti4=Module["___divmodti4"]=wasmExports["__divmodti4"];var ___udivmodti4=Module["___udivmodti4"]=wasmExports["__udivmodti4"];var ___divsc3=Module["___divsc3"]=wasmExports["__divsc3"];var ___divsf3=Module["___divsf3"]=wasmExports["__divsf3"];var ___divsi3=Module["___divsi3"]=wasmExports["__divsi3"];var ___divtc3=Module["___divtc3"]=wasmExports["__divtc3"];var ___divti3=Module["___divti3"]=wasmExports["__divti3"];var _setThrew=Module["_setThrew"]=wasmExports["setThrew"];var ___wasm_setjmp=Module["___wasm_setjmp"]=wasmExports["__wasm_setjmp"];var ___wasm_setjmp_test=Module["___wasm_setjmp_test"]=wasmExports["__wasm_setjmp_test"];var ___wasm_longjmp=Module["___wasm_longjmp"]=wasmExports["__wasm_longjmp"];var __emscripten_tempret_set=wasmExports["_emscripten_tempret_set"];var __emscripten_tempret_get=wasmExports["_emscripten_tempret_get"];var ___get_temp_ret=Module["___get_temp_ret"]=wasmExports["__get_temp_ret"];var ___set_temp_ret=Module["___set_temp_ret"]=wasmExports["__set_temp_ret"];var _getTempRet0=Module["_getTempRet0"]=wasmExports["getTempRet0"];var _setTempRet0=Module["_setTempRet0"]=wasmExports["setTempRet0"];var ___emutls_get_address=Module["___emutls_get_address"]=wasmExports["__emutls_get_address"];var ___enable_execute_stack=Module["___enable_execute_stack"]=wasmExports["__enable_execute_stack"];var ___extendhfsf2=Module["___extendhfsf2"]=wasmExports["__extendhfsf2"];var ___gnu_h2f_ieee=Module["___gnu_h2f_ieee"]=wasmExports["__gnu_h2f_ieee"];var ___extendsfdf2=Module["___extendsfdf2"]=wasmExports["__extendsfdf2"];var ___ffsdi2=Module["___ffsdi2"]=wasmExports["__ffsdi2"];var ___ffssi2=Module["___ffssi2"]=wasmExports["__ffssi2"];var ___ffsti2=Module["___ffsti2"]=wasmExports["__ffsti2"];var ___fixdfdi=Module["___fixdfdi"]=wasmExports["__fixdfdi"];var ___fixunsdfdi=Module["___fixunsdfdi"]=wasmExports["__fixunsdfdi"];var ___fixdfsi=Module["___fixdfsi"]=wasmExports["__fixdfsi"];var ___fixdfti=Module["___fixdfti"]=wasmExports["__fixdfti"];var ___fixsfdi=Module["___fixsfdi"]=wasmExports["__fixsfdi"];var ___fixunssfdi=Module["___fixunssfdi"]=wasmExports["__fixunssfdi"];var ___fixsfsi=Module["___fixsfsi"]=wasmExports["__fixsfsi"];var ___fixsfti=Module["___fixsfti"]=wasmExports["__fixsfti"];var ___fixtfti=Module["___fixtfti"]=wasmExports["__fixtfti"];var ___fixunsdfsi=Module["___fixunsdfsi"]=wasmExports["__fixunsdfsi"];var ___fixunsdfti=Module["___fixunsdfti"]=wasmExports["__fixunsdfti"];var ___fixunssfsi=Module["___fixunssfsi"]=wasmExports["__fixunssfsi"];var ___fixunssfti=Module["___fixunssfti"]=wasmExports["__fixunssfti"];var ___fixunstfdi=Module["___fixunstfdi"]=wasmExports["__fixunstfdi"];var ___fixunstfsi=Module["___fixunstfsi"]=wasmExports["__fixunstfsi"];var ___fixunstfti=Module["___fixunstfti"]=wasmExports["__fixunstfti"];var ___floatdidf=Module["___floatdidf"]=wasmExports["__floatdidf"];var ___floatdisf=Module["___floatdisf"]=wasmExports["__floatdisf"];var ___floatditf=Module["___floatditf"]=wasmExports["__floatditf"];var ___floatsidf=Module["___floatsidf"]=wasmExports["__floatsidf"];var ___floatsisf=Module["___floatsisf"]=wasmExports["__floatsisf"];var ___floattidf=Module["___floattidf"]=wasmExports["__floattidf"];var ___floattisf=Module["___floattisf"]=wasmExports["__floattisf"];var ___floattitf=Module["___floattitf"]=wasmExports["__floattitf"];var ___floatundidf=Module["___floatundidf"]=wasmExports["__floatundidf"];var ___floatundisf=Module["___floatundisf"]=wasmExports["__floatundisf"];var ___floatunditf=Module["___floatunditf"]=wasmExports["__floatunditf"];var ___floatunsidf=Module["___floatunsidf"]=wasmExports["__floatunsidf"];var ___floatunsisf=Module["___floatunsisf"]=wasmExports["__floatunsisf"];var ___floatuntidf=Module["___floatuntidf"]=wasmExports["__floatuntidf"];var ___floatuntisf=Module["___floatuntisf"]=wasmExports["__floatuntisf"];var ___floatuntitf=Module["___floatuntitf"]=wasmExports["__floatuntitf"];var ___lshrdi3=Module["___lshrdi3"]=wasmExports["__lshrdi3"];var ___moddi3=Module["___moddi3"]=wasmExports["__moddi3"];var ___modsi3=Module["___modsi3"]=wasmExports["__modsi3"];var ___modti3=Module["___modti3"]=wasmExports["__modti3"];var ___muldf3=Module["___muldf3"]=wasmExports["__muldf3"];var ___muldi3=Module["___muldi3"]=wasmExports["__muldi3"];var ___mulodi4=Module["___mulodi4"]=wasmExports["__mulodi4"];var ___mulosi4=Module["___mulosi4"]=wasmExports["__mulosi4"];var ___muloti4=Module["___muloti4"]=wasmExports["__muloti4"];var ___udivti3=Module["___udivti3"]=wasmExports["__udivti3"];var ___mulsf3=Module["___mulsf3"]=wasmExports["__mulsf3"];var ___mulvdi3=Module["___mulvdi3"]=wasmExports["__mulvdi3"];var ___mulvsi3=Module["___mulvsi3"]=wasmExports["__mulvsi3"];var ___mulvti3=Module["___mulvti3"]=wasmExports["__mulvti3"];var ___negdf2=Module["___negdf2"]=wasmExports["__negdf2"];var ___negdi2=Module["___negdi2"]=wasmExports["__negdi2"];var ___negsf2=Module["___negsf2"]=wasmExports["__negsf2"];var ___negti2=Module["___negti2"]=wasmExports["__negti2"];var ___negvdi2=Module["___negvdi2"]=wasmExports["__negvdi2"];var ___negvsi2=Module["___negvsi2"]=wasmExports["__negvsi2"];var ___negvti2=Module["___negvti2"]=wasmExports["__negvti2"];var ___paritydi2=Module["___paritydi2"]=wasmExports["__paritydi2"];var ___paritysi2=Module["___paritysi2"]=wasmExports["__paritysi2"];var ___parityti2=Module["___parityti2"]=wasmExports["__parityti2"];var ___popcountdi2=Module["___popcountdi2"]=wasmExports["__popcountdi2"];var ___popcountsi2=Module["___popcountsi2"]=wasmExports["__popcountsi2"];var ___popcountti2=Module["___popcountti2"]=wasmExports["__popcountti2"];var ___powidf2=Module["___powidf2"]=wasmExports["__powidf2"];var ___powisf2=Module["___powisf2"]=wasmExports["__powisf2"];var ___powitf2=Module["___powitf2"]=wasmExports["__powitf2"];var _emscripten_stack_init=Module["_emscripten_stack_init"]=wasmExports["emscripten_stack_init"];var _emscripten_stack_set_limits=Module["_emscripten_stack_set_limits"]=wasmExports["emscripten_stack_set_limits"];var _emscripten_stack_get_free=Module["_emscripten_stack_get_free"]=wasmExports["emscripten_stack_get_free"];var __emscripten_stack_restore=wasmExports["_emscripten_stack_restore"];var __emscripten_stack_alloc=wasmExports["_emscripten_stack_alloc"];var ___subdf3=Module["___subdf3"]=wasmExports["__subdf3"];var ___subsf3=Module["___subsf3"]=wasmExports["__subsf3"];var ___subvdi3=Module["___subvdi3"]=wasmExports["__subvdi3"];var ___subvsi3=Module["___subvsi3"]=wasmExports["__subvsi3"];var ___subvti3=Module["___subvti3"]=wasmExports["__subvti3"];var ___truncdfhf2=Module["___truncdfhf2"]=wasmExports["__truncdfhf2"];var ___truncdfsf2=Module["___truncdfsf2"]=wasmExports["__truncdfsf2"];var ___truncsfhf2=Module["___truncsfhf2"]=wasmExports["__truncsfhf2"];var ___gnu_f2h_ieee=Module["___gnu_f2h_ieee"]=wasmExports["__gnu_f2h_ieee"];var ___ucmpdi2=Module["___ucmpdi2"]=wasmExports["__ucmpdi2"];var ___ucmpti2=Module["___ucmpti2"]=wasmExports["__ucmpti2"];var ___udivdi3=Module["___udivdi3"]=wasmExports["__udivdi3"];var ___udivsi3=Module["___udivsi3"]=wasmExports["__udivsi3"];var ___umoddi3=Module["___umoddi3"]=wasmExports["__umoddi3"];var ___umodsi3=Module["___umodsi3"]=wasmExports["__umodsi3"];var ___umodti3=Module["___umodti3"]=wasmExports["__umodti3"];var ___cxa_begin_catch=Module["___cxa_begin_catch"]=wasmExports["__cxa_begin_catch"];var ___cxa_rethrow=Module["___cxa_rethrow"]=wasmExports["__cxa_rethrow"];var ___cxa_end_catch=Module["___cxa_end_catch"]=wasmExports["__cxa_end_catch"];var ___cxa_allocate_exception=Module["___cxa_allocate_exception"]=wasmExports["__cxa_allocate_exception"];var ___cxa_free_exception=Module["___cxa_free_exception"]=wasmExports["__cxa_free_exception"];var ___cxa_throw=wasmExports["__cxa_throw"];var ___cxa_pure_virtual=Module["___cxa_pure_virtual"]=wasmExports["__cxa_pure_virtual"];var ___cxa_uncaught_exceptions=Module["___cxa_uncaught_exceptions"]=wasmExports["__cxa_uncaught_exceptions"];var ___cxa_decrement_exception_refcount=wasmExports["__cxa_decrement_exception_refcount"];var ___cxa_increment_exception_refcount=wasmExports["__cxa_increment_exception_refcount"];var ___cxa_current_primary_exception=Module["___cxa_current_primary_exception"]=wasmExports["__cxa_current_primary_exception"];var ___cxa_rethrow_primary_exception=Module["___cxa_rethrow_primary_exception"]=wasmExports["__cxa_rethrow_primary_exception"];var ___cxa_init_primary_exception=Module["___cxa_init_primary_exception"]=wasmExports["__cxa_init_primary_exception"];var ___dynamic_cast=Module["___dynamic_cast"]=wasmExports["__dynamic_cast"];var ___cxa_bad_cast=Module["___cxa_bad_cast"]=wasmExports["__cxa_bad_cast"];var ___cxa_bad_typeid=Module["___cxa_bad_typeid"]=wasmExports["__cxa_bad_typeid"];var ___cxa_throw_bad_array_new_length=Module["___cxa_throw_bad_array_new_length"]=wasmExports["__cxa_throw_bad_array_new_length"];var ___cxa_get_globals_fast=Module["___cxa_get_globals_fast"]=wasmExports["__cxa_get_globals_fast"];var ___cxa_demangle=wasmExports["__cxa_demangle"];var ___cxa_allocate_dependent_exception=Module["___cxa_allocate_dependent_exception"]=wasmExports["__cxa_allocate_dependent_exception"];var ___cxa_free_dependent_exception=Module["___cxa_free_dependent_exception"]=wasmExports["__cxa_free_dependent_exception"];var ___cxa_get_globals=Module["___cxa_get_globals"]=wasmExports["__cxa_get_globals"];var __Unwind_RaiseException=Module["__Unwind_RaiseException"]=wasmExports["_Unwind_RaiseException"];var ___cxa_get_exception_ptr=Module["___cxa_get_exception_ptr"]=wasmExports["__cxa_get_exception_ptr"];var __Unwind_DeleteException=Module["__Unwind_DeleteException"]=wasmExports["_Unwind_DeleteException"];var ___cxa_call_terminate=Module["___cxa_call_terminate"]=wasmExports["__cxa_call_terminate"];var ___cxa_current_exception_type=Module["___cxa_current_exception_type"]=wasmExports["__cxa_current_exception_type"];var ___cxa_uncaught_exception=Module["___cxa_uncaught_exception"]=wasmExports["__cxa_uncaught_exception"];var ___thrown_object_from_unwind_exception=wasmExports["__thrown_object_from_unwind_exception"];var ___get_exception_message=wasmExports["__get_exception_message"];var ___get_exception_terminate_message=Module["___get_exception_terminate_message"]=wasmExports["__get_exception_terminate_message"];var ___cxa_guard_acquire=Module["___cxa_guard_acquire"]=wasmExports["__cxa_guard_acquire"];var ___cxa_guard_release=Module["___cxa_guard_release"]=wasmExports["__cxa_guard_release"];var ___cxa_guard_abort=Module["___cxa_guard_abort"]=wasmExports["__cxa_guard_abort"];var ___gxx_personality_wasm0=Module["___gxx_personality_wasm0"]=wasmExports["__gxx_personality_wasm0"];var __Unwind_SetGR=Module["__Unwind_SetGR"]=wasmExports["_Unwind_SetGR"];var __Unwind_SetIP=Module["__Unwind_SetIP"]=wasmExports["_Unwind_SetIP"];var __Unwind_GetLanguageSpecificData=Module["__Unwind_GetLanguageSpecificData"]=wasmExports["_Unwind_GetLanguageSpecificData"];var __Unwind_GetIP=Module["__Unwind_GetIP"]=wasmExports["_Unwind_GetIP"];var __Unwind_GetRegionStart=Module["__Unwind_GetRegionStart"]=wasmExports["_Unwind_GetRegionStart"];var ___cxa_call_unexpected=Module["___cxa_call_unexpected"]=wasmExports["__cxa_call_unexpected"];var ___cxa_thread_atexit=Module["___cxa_thread_atexit"]=wasmExports["__cxa_thread_atexit"];var ___cxa_deleted_virtual=Module["___cxa_deleted_virtual"]=wasmExports["__cxa_deleted_virtual"];var __Unwind_CallPersonality=Module["__Unwind_CallPersonality"]=wasmExports["_Unwind_CallPersonality"];var _gethostbyaddr_r=Module["_gethostbyaddr_r"]=wasmExports["gethostbyaddr_r"];var _gethostbyname2=Module["_gethostbyname2"]=wasmExports["gethostbyname2"];var _gethostbyname2_r=Module["_gethostbyname2_r"]=wasmExports["gethostbyname2_r"];var _gethostbyname_r=Module["_gethostbyname_r"]=wasmExports["gethostbyname_r"];var _shutdown=Module["_shutdown"]=wasmExports["shutdown"];var _socketpair=Module["_socketpair"]=wasmExports["socketpair"];var ___wasm_apply_data_relocs=wasmExports["__wasm_apply_data_relocs"];var _py_docstring_mod=Module["_py_docstring_mod"]=3474304;var _PyExc_AttributeError=Module["_PyExc_AttributeError"]=2794608;var _stdout=Module["_stdout"]=3326440;var _PyExc_ModuleNotFoundError=Module["_PyExc_ModuleNotFoundError"]=2794512;var __Py_NoneStruct=Module["__Py_NoneStruct"]=2829304;var _internal_error=Module["_internal_error"]=3474312;var _conversion_error=Module["_conversion_error"]=3474316;var _PyExc_ImportError=Module["_PyExc_ImportError"]=2794508;var _pyodide_export_=Module["_pyodide_export_"]=2778088;var _pystate_keepalive_=Module["_pystate_keepalive_"]=2778092;var _pystate_keepalive=Module["_pystate_keepalive"]=3474508;var _compat_null_to_none=Module["_compat_null_to_none"]=3474324;var _py_jsnull=Module["_py_jsnull"]=3474456;var __Py_TrueStruct=Module["__Py_TrueStruct"]=2782932;var __Py_FalseStruct=Module["__Py_FalseStruct"]=2782948;var _Jsr_undefined=Module["_Jsr_undefined"]=3474436;var _jsbind=Module["_jsbind"]=3474380;var _Jsr_error=Module["_Jsr_error"]=3474432;var _PyExc_TypeError=Module["_PyExc_TypeError"]=2794476;var _PyExc_StopIteration=Module["_PyExc_StopIteration"]=2794484;var _PyTraceBack_Type=Module["_PyTraceBack_Type"]=3172300;var _PyExc_GeneratorExit=Module["_PyExc_GeneratorExit"]=2794488;var _PyExc_StopAsyncIteration=Module["_PyExc_StopAsyncIteration"]=2794480;var _PyExc_RuntimeError=Module["_PyExc_RuntimeError"]=2794584;var _PyExc_IndexError=Module["_PyExc_IndexError"]=2794836;var _PyExc_Exception=Module["_PyExc_Exception"]=2794472;var _PyExc_BaseException=Module["_PyExc_BaseException"]=2794468;var _methods=Module["_methods"]=2778896;var _PyExc_SystemError=Module["_PyExc_SystemError"]=2794880;var _PyExc_KeyError=Module["_PyExc_KeyError"]=2794840;var _PySlice_Type=Module["_PySlice_Type"]=2840400;var _PyLong_Type=Module["_PyLong_Type"]=2820548;var _PyBool_Type=Module["_PyBool_Type"]=2783108;var _PyExc_ValueError=Module["_PyExc_ValueError"]=2794500;var _PyExc_NotImplementedError=Module["_PyExc_NotImplementedError"]=2794596;var _PyBaseObject_Type=Module["_PyBaseObject_Type"]=2842440;var _PyExc_OverflowError=Module["_PyExc_OverflowError"]=2794872;var _PyList_Type=Module["_PyList_Type"]=2818960;var _PyTuple_Type=Module["_PyTuple_Type"]=2840912;var _PyExc_RuntimeWarning=Module["_PyExc_RuntimeWarning"]=2795124;var __Py_NotImplementedStruct=Module["__Py_NotImplementedStruct"]=2830080;var _default_signature=Module["_default_signature"]=3474388;var _no_default=Module["_no_default"]=3474384;var _PyCoro_Type=Module["_PyCoro_Type"]=2812480;var _PyGen_Type=Module["_PyGen_Type"]=2811952;var _PyDict_Type=Module["_PyDict_Type"]=2821568;var _compat_to_string_repr=Module["_compat_to_string_repr"]=3474404;var _PyMethod_Type=Module["_PyMethod_Type"]=2788264;var _PyFunction_Type=Module["_PyFunction_Type"]=2816820;var _py_buffer_len_offset=Module["_py_buffer_len_offset"]=2781544;var _py_buffer_shape_offset=Module["_py_buffer_shape_offset"]=2781548;var _Jsr_true=Module["_Jsr_true"]=3474440;var _Jsr_false=Module["_Jsr_false"]=3474444;var _Jsr_novalue=Module["_Jsr_novalue"]=3474448;var _PySet_Type=Module["_PySet_Type"]=2839024;var _PyFloat_Type=Module["_PyFloat_Type"]=2815052;var _compat_dict_to_literalmap=Module["_compat_dict_to_literalmap"]=3474452;var _threadstate_freelist_len=Module["_threadstate_freelist_len"]=3474504;var _threadstate_freelist=Module["_threadstate_freelist"]=3474464;var _stderr=Module["_stderr"]=3326136;var __PyParser_TokenNames=Module["__PyParser_TokenNames"]=2782224;var _PyExc_SyntaxError=Module["_PyExc_SyntaxError"]=2794612;var __PyExc_IncompleteInputError=Module["__PyExc_IncompleteInputError"]=2794624;var _PyExc_LookupError=Module["_PyExc_LookupError"]=2794832;var _PyExc_UnicodeDecodeError=Module["_PyExc_UnicodeDecodeError"]=2794852;var _PyExc_IndentationError=Module["_PyExc_IndentationError"]=2794616;var _PyExc_KeyboardInterrupt=Module["_PyExc_KeyboardInterrupt"]=2794504;var _PyExc_TabError=Module["_PyExc_TabError"]=2794620;var _PyExc_UnicodeError=Module["_PyExc_UnicodeError"]=2794844;var _stdin=Module["_stdin"]=3326288;var _PyExc_MemoryError=Module["_PyExc_MemoryError"]=2794888;var __PyRuntime=Module["__PyRuntime"]=2869536;var _PyComplex_Type=Module["_PyComplex_Type"]=2790556;var _PyUnicode_Type=Module["_PyUnicode_Type"]=2850192;var _PyBytes_Type=Module["_PyBytes_Type"]=2786480;var __Py_EllipsisObject=Module["__Py_EllipsisObject"]=2840256;var __Py_ctype_table=Module["__Py_ctype_table"]=477376;var _PyExc_DeprecationWarning=Module["_PyExc_DeprecationWarning"]=2795112;var _PyExc_SyntaxWarning=Module["_PyExc_SyntaxWarning"]=2795120;var __Py_ctype_tolower=Module["__Py_ctype_tolower"]=478400;var _PyExc_OSError=Module["_PyExc_OSError"]=2794516;var __PyOS_ReadlineTState=Module["__PyOS_ReadlineTState"]=3474580;var _PyOS_InputHook=Module["_PyOS_InputHook"]=3474584;var _PyOS_ReadlineFunctionPointer=Module["_PyOS_ReadlineFunctionPointer"]=3474588;var _PyType_Type=Module["_PyType_Type"]=2842048;var _PyExc_BufferError=Module["_PyExc_BufferError"]=2795100;var _PyCFunction_Type=Module["_PyCFunction_Type"]=2827960;var _PyByteArray_Type=Module["_PyByteArray_Type"]=2784400;var __PyByteArray_empty_string=Module["__PyByteArray_empty_string"]=3474593;var __PyUnion_Type=Module["__PyUnion_Type"]=2852728;var __Py_ctype_toupper=Module["__Py_ctype_toupper"]=478656;var _Py_hexdigits=Module["_Py_hexdigits"]=2858608;var _PyExc_BytesWarning=Module["_PyExc_BytesWarning"]=2795140;var _PyByteArrayIter_Type=Module["_PyByteArrayIter_Type"]=2784672;var __PyLong_DigitValue=Module["__PyLong_DigitValue"]=2819808;var _PyBytesIter_Type=Module["_PyBytesIter_Type"]=2786752;var _PyModule_Type=Module["_PyModule_Type"]=2828712;var _PyCapsule_Type=Module["_PyCapsule_Type"]=2787652;var _PyCell_Type=Module["_PyCell_Type"]=2787912;var _PyInstanceMethod_Type=Module["_PyInstanceMethod_Type"]=2788568;var _PyCode_Type=Module["_PyCode_Type"]=2789756;var _PyFrozenSet_Type=Module["_PyFrozenSet_Type"]=2839584;var _PyExc_ZeroDivisionError=Module["_PyExc_ZeroDivisionError"]=2794876;var _PyMethodDescr_Type=Module["_PyMethodDescr_Type"]=2791024;var _PyClassMethodDescr_Type=Module["_PyClassMethodDescr_Type"]=2791232;var _PyMemberDescr_Type=Module["_PyMemberDescr_Type"]=2791500;var _PyGetSetDescr_Type=Module["_PyGetSetDescr_Type"]=2791772;var _PyWrapperDescr_Type=Module["_PyWrapperDescr_Type"]=2792064;var _PyDictProxy_Type=Module["_PyDictProxy_Type"]=2793008;var _PyProperty_Type=Module["_PyProperty_Type"]=2793468;var _PyReversed_Type=Module["_PyReversed_Type"]=2794176;var _PyEnum_Type=Module["_PyEnum_Type"]=2793904;var _PyExc_BaseExceptionGroup=Module["_PyExc_BaseExceptionGroup"]=2794496;var _PyExc_UnicodeTranslateError=Module["_PyExc_UnicodeTranslateError"]=2794856;var _PyExc_BlockingIOError=Module["_PyExc_BlockingIOError"]=2794520;var _PyExc_BrokenPipeError=Module["_PyExc_BrokenPipeError"]=2794532;var _PyExc_ChildProcessError=Module["_PyExc_ChildProcessError"]=2794528;var _PyExc_ConnectionAbortedError=Module["_PyExc_ConnectionAbortedError"]=2794536;var _PyExc_ConnectionRefusedError=Module["_PyExc_ConnectionRefusedError"]=2794540;var _PyExc_ConnectionResetError=Module["_PyExc_ConnectionResetError"]=2794544;var _PyExc_FileExistsError=Module["_PyExc_FileExistsError"]=2794548;var _PyExc_FileNotFoundError=Module["_PyExc_FileNotFoundError"]=2794552;var _PyExc_IsADirectoryError=Module["_PyExc_IsADirectoryError"]=2794556;var _PyExc_NotADirectoryError=Module["_PyExc_NotADirectoryError"]=2794560;var _PyExc_InterruptedError=Module["_PyExc_InterruptedError"]=2794564;var _PyExc_PermissionError=Module["_PyExc_PermissionError"]=2794568;var _PyExc_ProcessLookupError=Module["_PyExc_ProcessLookupError"]=2794572;var _PyExc_TimeoutError=Module["_PyExc_TimeoutError"]=2794576;var _PyExc_EnvironmentError=Module["_PyExc_EnvironmentError"]=3474596;var _PyExc_IOError=Module["_PyExc_IOError"]=3474600;var _PyExc_SystemExit=Module["_PyExc_SystemExit"]=2794492;var _PyExc_ConnectionError=Module["_PyExc_ConnectionError"]=2794524;var _PyExc_EOFError=Module["_PyExc_EOFError"]=2794580;var _PyExc_RecursionError=Module["_PyExc_RecursionError"]=2794588;var _PyExc_PythonFinalizationError=Module["_PyExc_PythonFinalizationError"]=2794592;var _PyExc_NameError=Module["_PyExc_NameError"]=2794600;var _PyExc_UnboundLocalError=Module["_PyExc_UnboundLocalError"]=2794604;var _PyExc_UnicodeEncodeError=Module["_PyExc_UnicodeEncodeError"]=2794848;var _PyExc_AssertionError=Module["_PyExc_AssertionError"]=2794860;var _PyExc_ArithmeticError=Module["_PyExc_ArithmeticError"]=2794864;var _PyExc_FloatingPointError=Module["_PyExc_FloatingPointError"]=2794868;var _PyExc_ReferenceError=Module["_PyExc_ReferenceError"]=2794884;var _PyExc_Warning=Module["_PyExc_Warning"]=2795104;var _PyExc_UserWarning=Module["_PyExc_UserWarning"]=2795108;var _PyExc_PendingDeprecationWarning=Module["_PyExc_PendingDeprecationWarning"]=2795116;var _PyExc_FutureWarning=Module["_PyExc_FutureWarning"]=2795128;var _PyExc_ImportWarning=Module["_PyExc_ImportWarning"]=2795132;var _PyExc_UnicodeWarning=Module["_PyExc_UnicodeWarning"]=2795136;var _PyExc_EncodingWarning=Module["_PyExc_EncodingWarning"]=2795144;var _PyExc_ResourceWarning=Module["_PyExc_ResourceWarning"]=2795148;var _Py_GenericAliasType=Module["_Py_GenericAliasType"]=2811404;var _PyAsyncGen_Type=Module["_PyAsyncGen_Type"]=2813260;var __PyAsyncGenASend_Type=Module["__PyAsyncGenASend_Type"]=2813552;var _PyStdPrinter_Type=Module["_PyStdPrinter_Type"]=2814432;var __Py_SwappedOp=Module["__Py_SwappedOp"]=2829312;var _PyFrameLocalsProxy_Type=Module["_PyFrameLocalsProxy_Type"]=2815776;var _PyFrame_Type=Module["_PyFrame_Type"]=2816280;var _PyClassMethod_Type=Module["_PyClassMethod_Type"]=2817164;var _PyStaticMethod_Type=Module["_PyStaticMethod_Type"]=2817500;var _PySeqIter_Type=Module["_PySeqIter_Type"]=2817904;var _PyCallIter_Type=Module["_PyCallIter_Type"]=2818144;var _PyDictKeys_Type=Module["_PyDictKeys_Type"]=2823352;var _PyDictValues_Type=Module["_PyDictValues_Type"]=2823936;var _PyDictItems_Type=Module["_PyDictItems_Type"]=2823648;var _PyListIter_Type=Module["_PyListIter_Type"]=2819232;var _PyListRevIter_Type=Module["_PyListRevIter_Type"]=2819504;var _PyDictIterKey_Type=Module["_PyDictIterKey_Type"]=2821824;var _PyDictRevIterKey_Type=Module["_PyDictRevIterKey_Type"]=2822448;var _PyDictRevIterValue_Type=Module["_PyDictRevIterValue_Type"]=2822864;var _PyDictIterItem_Type=Module["_PyDictIterItem_Type"]=2822240;var _PyDictIterValue_Type=Module["_PyDictIterValue_Type"]=2822032;var _PyDictRevIterItem_Type=Module["_PyDictRevIterItem_Type"]=2822656;var _PyODict_Type=Module["_PyODict_Type"]=2824648;var _PyODictIter_Type=Module["_PyODictIter_Type"]=2824896;var _PyODictKeys_Type=Module["_PyODictKeys_Type"]=2825136;var _PyODictValues_Type=Module["_PyODictValues_Type"]=2825616;var _PyODictItems_Type=Module["_PyODictItems_Type"]=2825376;var _PyMemoryView_Type=Module["_PyMemoryView_Type"]=2827140;var _PyCMethod_Type=Module["_PyCMethod_Type"]=2828168;var _PyModuleDef_Type=Module["_PyModuleDef_Type"]=2828376;var __PyNone_Type=Module["__PyNone_Type"]=2829480;var __PyNotImplemented_Type=Module["__PyNotImplemented_Type"]=2829872;var _PyContextToken_Type=Module["_PyContextToken_Type"]=2859596;var _PyContextVar_Type=Module["_PyContextVar_Type"]=2859288;var _PyContext_Type=Module["_PyContext_Type"]=2858960;var _PyEllipsis_Type=Module["_PyEllipsis_Type"]=2840048;var _PyFilter_Type=Module["_PyFilter_Type"]=2856064;var _PyLongRangeIter_Type=Module["_PyLongRangeIter_Type"]=2838016;var _PyMap_Type=Module["_PyMap_Type"]=2856304;var _PyPickleBuffer_Type=Module["_PyPickleBuffer_Type"]=2836896;var _PyRangeIter_Type=Module["_PyRangeIter_Type"]=2837744;var _PyRange_Type=Module["_PyRange_Type"]=2837472;var _PySetIter_Type=Module["_PySetIter_Type"]=2838272;var _PySuper_Type=Module["_PySuper_Type"]=2842944;var _PyTupleIter_Type=Module["_PyTupleIter_Type"]=2841184;var _PyUnicodeIter_Type=Module["_PyUnicodeIter_Type"]=2850464;var _PyZip_Type=Module["_PyZip_Type"]=2856560;var __PyWeakref_CallableProxyType=Module["__PyWeakref_CallableProxyType"]=2853680;var __PyWeakref_ProxyType=Module["__PyWeakref_ProxyType"]=2853472;var __PyWeakref_RefType=Module["__PyWeakref_RefType"]=2853016;var __PySet_Dummy=Module["__PySet_Dummy"]=2839800;var _PyStructSequence_UnnamedField=Module["_PyStructSequence_UnnamedField"]=2840628;var __Py_ascii_whitespace=Module["__Py_ascii_whitespace"]=325408;var __PyIntrinsics_UnaryFunctions=Module["__PyIntrinsics_UnaryFunctions"]=2864528;var __PyIntrinsics_BinaryFunctions=Module["__PyIntrinsics_BinaryFunctions"]=2864624;var __PyEval_ConversionFuncs=Module["__PyEval_ConversionFuncs"]=2858592;var _Py_EMSCRIPTEN_SIGNAL_HANDLING=Module["_Py_EMSCRIPTEN_SIGNAL_HANDLING"]=3512276;var __PyEval_BinaryOps=Module["__PyEval_BinaryOps"]=2858480;var _PyExc_InterpreterError=Module["_PyExc_InterpreterError"]=2860024;var _PyExc_InterpreterNotFoundError=Module["_PyExc_InterpreterNotFoundError"]=2860028;var _PyUnstable_ExecutableKinds=Module["_PyUnstable_ExecutableKinds"]=2860512;var _Py_Version=Module["_Py_Version"]=460964;var _PyImport_Inittab=Module["_PyImport_Inittab"]=2862176;var __PyImport_FrozenBootstrap=Module["__PyImport_FrozenBootstrap"]=3321248;var _PyImport_FrozenModules=Module["_PyImport_FrozenModules"]=3521096;var __PyImport_FrozenStdlib=Module["__PyImport_FrozenStdlib"]=3321520;var __PyImport_FrozenTest=Module["__PyImport_FrozenTest"]=3321728;var _Py_IgnoreEnvironmentFlag=Module["_Py_IgnoreEnvironmentFlag"]=3511020;var _Py_IsolatedFlag=Module["_Py_IsolatedFlag"]=3511040;var _Py_BytesWarningFlag=Module["_Py_BytesWarningFlag"]=3511012;var _Py_InspectFlag=Module["_Py_InspectFlag"]=3511e3;var _Py_InteractiveFlag=Module["_Py_InteractiveFlag"]=3510996;var _Py_OptimizeFlag=Module["_Py_OptimizeFlag"]=3511004;var _Py_DebugFlag=Module["_Py_DebugFlag"]=3510984;var _Py_VerboseFlag=Module["_Py_VerboseFlag"]=3510988;var _Py_QuietFlag=Module["_Py_QuietFlag"]=3510992;var _Py_FrozenFlag=Module["_Py_FrozenFlag"]=3511016;var _Py_UnbufferedStdioFlag=Module["_Py_UnbufferedStdioFlag"]=3511032;var _Py_NoSiteFlag=Module["_Py_NoSiteFlag"]=3511008;var _Py_DontWriteBytecodeFlag=Module["_Py_DontWriteBytecodeFlag"]=3511024;var _Py_NoUserSiteDirectory=Module["_Py_NoUserSiteDirectory"]=3511028;var _Py_HashRandomizationFlag=Module["_Py_HashRandomizationFlag"]=3511036;var _Py_FileSystemDefaultEncoding=Module["_Py_FileSystemDefaultEncoding"]=3511144;var _Py_HasFileSystemDefaultEncoding=Module["_Py_HasFileSystemDefaultEncoding"]=3511148;var _Py_FileSystemDefaultEncodeErrors=Module["_Py_FileSystemDefaultEncodeErrors"]=3511152;var _Py_UTF8Mode=Module["_Py_UTF8Mode"]=3510980;var __Py_HashSecret=Module["__Py_HashSecret"]=3511160;var _PY_TIMEOUT_MAX=Module["_PY_TIMEOUT_MAX"]=492616;var __PyEM_EMSCRIPTEN_COUNT_ARGS_OFFSET=Module["__PyEM_EMSCRIPTEN_COUNT_ARGS_OFFSET"]=493560;var _ffi_type_pointer=Module["_ffi_type_pointer"]=2425108;var _ffi_type_void=Module["_ffi_type_void"]=2425e3;var _ffi_type_sint32=Module["_ffi_type_sint32"]=2425072;var _ffi_type_uint8=Module["_ffi_type_uint8"]=2425012;var _ffi_type_double=Module["_ffi_type_double"]=2425132;var _ffi_type_longdouble=Module["_ffi_type_longdouble"]=2425144;var _ffi_type_float=Module["_ffi_type_float"]=2425120;var _ffi_type_sint16=Module["_ffi_type_sint16"]=2425048;var _ffi_type_uint16=Module["_ffi_type_uint16"]=2425036;var _ffi_type_uint32=Module["_ffi_type_uint32"]=2425060;var _ffi_type_sint64=Module["_ffi_type_sint64"]=2425096;var _ffi_type_uint64=Module["_ffi_type_uint64"]=2425084;var _ffi_type_sint8=Module["_ffi_type_sint8"]=2425024;var _environ=Module["_environ"]=3521120;var __deduplicate_map=Module["__deduplicate_map"]=3521100;var _BZ2_crc32Table=Module["_BZ2_crc32Table"]=3321904;var _BZ2_rNums=Module["_BZ2_rNums"]=3322928;var _z_errmsg=Module["_z_errmsg"]=3325168;var __length_code=Module["__length_code"]=2435824;var __dist_code=Module["__dist_code"]=2435312;var _deflate_copyright=Module["_deflate_copyright"]=2430480;var _inflate_copyright=Module["_inflate_copyright"]=2435008;var ___environ=Module["___environ"]=3521120;var ____environ=Module["____environ"]=3521120;var __environ=Module["__environ"]=3521120;var ___stack_chk_guard=Module["___stack_chk_guard"]=3521132;var _daylight=Module["_daylight"]=3521140;var _timezone=Module["_timezone"]=3521136;var ___tzname=Module["___tzname"]=3521144;var ___timezone=Module["___timezone"]=3521136;var ___daylight=Module["___daylight"]=3521140;var _tzname=Module["_tzname"]=3521144;var ___progname=Module["___progname"]=3523072;var ___optreset=Module["___optreset"]=3522036;var _optind=Module["_optind"]=3325416;var ___optpos=Module["___optpos"]=3522040;var _optarg=Module["_optarg"]=3522044;var _optopt=Module["_optopt"]=3522048;var _opterr=Module["_opterr"]=3325420;var _optreset=Module["_optreset"]=3522036;var _h_errno=Module["_h_errno"]=3522172;var ___signgam=Module["___signgam"]=3537468;var __ns_flagdata=Module["__ns_flagdata"]=2623184;var ___progname_full=Module["___progname_full"]=3523076;var _program_invocation_short_name=Module["_program_invocation_short_name"]=3523072;var _program_invocation_name=Module["_program_invocation_name"]=3523076;var ___sig_pending=Module["___sig_pending"]=3527448;var ___sig_actions=Module["___sig_actions"]=3528368;var _signgam=Module["_signgam"]=3537468;var ___THREW__=Module["___THREW__"]=3544272;var ___threwValue=Module["___threwValue"]=3544276;var ___cxa_unexpected_handler=Module["___cxa_unexpected_handler"]=3336788;var ___cxa_terminate_handler=Module["___cxa_terminate_handler"]=3336784;var ___cxa_new_handler=Module["___cxa_new_handler"]=3567072;var ___wasm_lpad_context=Module["___wasm_lpad_context"]=3567616;var _in6addr_any=Module["_in6addr_any"]=2777900;var _in6addr_loopback=Module["_in6addr_loopback"]=2777916;function applySignatureConversions(wasmExports){wasmExports=Object.assign({},wasmExports);var makeWrapper_pp=f=>a0=>f(a0)>>>0;var makeWrapper_p=f=>()=>f()>>>0;var makeWrapper_pP=f=>a0=>f(a0)>>>0;var makeWrapper_ppp=f=>(a0,a1)=>f(a0,a1)>>>0;var makeWrapper_p_=f=>a0=>f(a0)>>>0;var makeWrapper_pppp=f=>(a0,a1,a2)=>f(a0,a1,a2)>>>0;var makeWrapper_ppppp=f=>(a0,a1,a2,a3)=>f(a0,a1,a2,a3)>>>0;wasmExports["malloc"]=makeWrapper_pp(wasmExports["malloc"]);wasmExports["__errno_location"]=makeWrapper_p(wasmExports["__errno_location"]);wasmExports["sbrk"]=makeWrapper_pP(wasmExports["sbrk"]);wasmExports["calloc"]=makeWrapper_ppp(wasmExports["calloc"]);wasmExports["strerror"]=makeWrapper_p_(wasmExports["strerror"]);wasmExports["pthread_self"]=makeWrapper_p(wasmExports["pthread_self"]);wasmExports["emscripten_stack_get_end"]=makeWrapper_p(wasmExports["emscripten_stack_get_end"]);wasmExports["emscripten_stack_get_base"]=makeWrapper_p(wasmExports["emscripten_stack_get_base"]);wasmExports["emscripten_builtin_malloc"]=makeWrapper_pp(wasmExports["emscripten_builtin_malloc"]);wasmExports["memcpy"]=makeWrapper_pppp(wasmExports["memcpy"]);wasmExports["_emscripten_find_dylib"]=makeWrapper_ppppp(wasmExports["_emscripten_find_dylib"]);wasmExports["emscripten_builtin_memalign"]=makeWrapper_ppp(wasmExports["emscripten_builtin_memalign"]);wasmExports["emscripten_stack_get_current"]=makeWrapper_p(wasmExports["emscripten_stack_get_current"]);wasmExports["emscripten_main_runtime_thread_id"]=makeWrapper_p(wasmExports["emscripten_main_runtime_thread_id"]);wasmExports["memalign"]=makeWrapper_ppp(wasmExports["memalign"]);wasmExports["emscripten_builtin_calloc"]=makeWrapper_ppp(wasmExports["emscripten_builtin_calloc"]);wasmExports["_emscripten_stack_alloc"]=makeWrapper_pp(wasmExports["_emscripten_stack_alloc"]);wasmExports["__cxa_get_exception_ptr"]=makeWrapper_pp(wasmExports["__cxa_get_exception_ptr"]);return wasmExports}function callMain(args=[]){var entryFunction=resolveGlobalSymbol("main").sym;if(!entryFunction)return;args.unshift(thisProgram);var argc=args.length;var argv=stackAlloc((argc+1)*4);var argv_ptr=argv;args.forEach(arg=>{HEAPU32[argv_ptr>>>2>>>0]=stringToUTF8OnStack(arg);argv_ptr+=4});HEAPU32[argv_ptr>>>2>>>0]=0;try{var ret=entryFunction(argc,argv);exitJS(ret,true);return ret}catch(e){return handleException(e)}}function run(args=arguments_){if(runDependencies>0){dependenciesFulfilled=run;return}preRun();if(runDependencies>0){dependenciesFulfilled=run;return}function doRun(){Module["calledRun"]=true;if(ABORT)return;initRuntime();preMain();readyPromiseResolve(Module);Module["onRuntimeInitialized"]?.();var noInitialRun=Module["noInitialRun"]||false;if(!noInitialRun)callMain(args);postRun()}if(Module["setStatus"]){Module["setStatus"]("Running...");setTimeout(()=>{setTimeout(()=>Module["setStatus"](""),1);doRun()},1)}else{doRun()}}function preInit(){if(Module["preInit"]){if(typeof Module["preInit"]=="function")Module["preInit"]=[Module["preInit"]];while(Module["preInit"].length>0){Module["preInit"].shift()()}}}preInit();run();moduleRtn=readyPromise;
-
-
-  return moduleRtn;
-}
-);
-})();
-globalThis._createPyodideModule = _createPyodideModule;
diff --git a/crates/execution/assets/pyodide/pyodide.asm.wasm b/crates/execution/assets/pyodide/pyodide.asm.wasm
deleted file mode 100755
index 5fac234e3..000000000
Binary files a/crates/execution/assets/pyodide/pyodide.asm.wasm and /dev/null differ
diff --git a/crates/execution/assets/pyodide/pyodide.mjs b/crates/execution/assets/pyodide/pyodide.mjs
deleted file mode 100644
index 8325d8810..000000000
--- a/crates/execution/assets/pyodide/pyodide.mjs
+++ /dev/null
@@ -1,4 +0,0 @@
-var Z=Object.defineProperty;var o=(e,t)=>Z(e,"name",{value:t,configurable:!0}),A=(e=>typeof require<"u"?require:typeof Proxy<"u"?new Proxy(e,{get:(t,n)=>(typeof require<"u"?require:t)[n]}):e)(function(e){if(typeof require<"u")return require.apply(this,arguments);throw Error('Dynamic require of "'+e+'" is not supported')});var W=(()=>{for(var e=new Uint8Array(128),t=0;t<64;t++)e[t<26?t+65:t<52?t+71:t<62?t-4:t*4-205]=t;return n=>{for(var i=n.length,s=new Uint8Array((i-(n[i-1]=="=")-(n[i-2]=="="))*3/4|0),r=0,a=0;r<i;){var l=e[n.charCodeAt(r++)],c=e[n.charCodeAt(r++)],d=e[n.charCodeAt(r++)],u=e[n.charCodeAt(r++)];s[a++]=l<<2|c>>4,s[a++]=c<<4|d>>2,s[a++]=d<<6|u}return s}})();function ee(e){return!isNaN(parseFloat(e))&&isFinite(e)}o(ee,"_isNumber");function P(e){return e.charAt(0).toUpperCase()+e.substring(1)}o(P,"_capitalize");function x(e){return function(){return this[e]}}o(x,"_getter");function $e(e){if(typeof Buffer<"u")return Buffer.from(e,"utf8").toString("base64");let t=typeof TextEncoder<"u"?new TextEncoder().encode(e):Uint8Array.from(e,r=>r.charCodeAt(0)&255),n="";for(let r=0;r<t.length;r+=1)n+=String.fromCharCode(t[r]);return typeof btoa=="function"?btoa(n):W(String.fromCharCode(...t))}o($e,"encodeJavaScriptModuleAsBase64");var N=["isConstructor","isEval","isNative","isToplevel"],S=["columnNumber","lineNumber"],I=["fileName","functionName","source"],te=["args"],ne=["evalOrigin"],F=N.concat(S,I,te,ne);function p(e){if(e)for(var t=0;t<F.length;t++)e[F[t]]!==void 0&&this["set"+P(F[t])](e[F[t]])}o(p,"StackFrame");p.prototype={getArgs:o(function(){return this.args},"getArgs"),setArgs:o(function(e){if(Object.prototype.toString.call(e)!=="[object Array]")throw new TypeError("Args must be an Array");this.args=e},"setArgs"),getEvalOrigin:o(function(){return this.evalOrigin},"getEvalOrigin"),setEvalOrigin:o(function(e){if(e instanceof p)this.evalOrigin=e;else if(e instanceof Object)this.evalOrigin=new p(e);else throw new TypeError("Eval Origin must be an Object or StackFrame")},"setEvalOrigin"),toString:o(function(){var e=this.getFileName()||"",t=this.getLineNumber()||"",n=this.getColumnNumber()||"",i=this.getFunctionName()||"";return this.getIsEval()?e?"[eval] ("+e+":"+t+":"+n+")":"[eval]:"+t+":"+n:i?i+" ("+e+":"+t+":"+n+")":e+":"+t+":"+n},"toString")};p.fromString=o(function(t){var n=t.indexOf("("),i=t.lastIndexOf(")"),s=t.substring(0,n),r=t.substring(n+1,i).split(","),a=t.substring(i+1);if(a.indexOf("@")===0)var l=/@(.+?)(?::(\d+))?(?::(\d+))?$/.exec(a,""),c=l[1],d=l[2],u=l[3];return new p({functionName:s,args:r||void 0,fileName:c,lineNumber:d||void 0,columnNumber:u||void 0})},"StackFrame$$fromString");for(b=0;b<N.length;b++)p.prototype["get"+P(N[b])]=x(N[b]),p.prototype["set"+P(N[b])]=function(e){return function(t){this[e]=!!t}}(N[b]);var b;for(v=0;v<S.length;v++)p.prototype["get"+P(S[v])]=x(S[v]),p.prototype["set"+P(S[v])]=function(e){return function(t){if(!ee(t))throw new TypeError(e+" must be a Number");this[e]=Number(t)}}(S[v]);var v;for(E=0;E<I.length;E++)p.prototype["get"+P(I[E])]=x(I[E]),p.prototype["set"+P(I[E])]=function(e){return function(t){this[e]=String(t)}}(I[E]);var E,O=p;function re(){var e=/^\s*at .*(\S+:\d+|\(native\))/m,t=/^(eval@)?(\[native code])?$/;return{parse:o(function(i){if(i.stack&&i.stack.match(e))return this.parseV8OrIE(i);if(i.stack)return this.parseFFOrSafari(i);throw new Error("Cannot parse given Error object")},"ErrorStackParser$$parse"),extractLocation:o(function(i){if(i.indexOf(":")===-1)return[i];var s=/(.+?)(?::(\d+))?(?::(\d+))?$/,r=s.exec(i.replace(/[()]/g,""));return[r[1],r[2]||void 0,r[3]||void 0]},"ErrorStackParser$$extractLocation"),parseV8OrIE:o(function(i){var s=i.stack.split(`
-`).filter(function(r){return!!r.match(e)},this);return s.map(function(r){r.indexOf("(eval ")>-1&&(r=r.replace(/eval code/g,"eval").replace(/(\(eval at [^()]*)|(,.*$)/g,""));var a=r.replace(/^\s+/,"").replace(/\(eval code/g,"(").replace(/^.*?\s+/,""),l=a.match(/ (\(.+\)$)/);a=l?a.replace(l[0],""):a;var c=this.extractLocation(l?l[1]:a),d=l&&a||void 0,u=["eval","<anonymous>"].indexOf(c[0])>-1?void 0:c[0];return new O({functionName:d,fileName:u,lineNumber:c[1],columnNumber:c[2],source:r})},this)},"ErrorStackParser$$parseV8OrIE"),parseFFOrSafari:o(function(i){var s=i.stack.split(`
-`).filter(function(r){return!r.match(t)},this);return s.map(function(r){if(r.indexOf(" > eval")>-1&&(r=r.replace(/ line (\d+)(?: > eval line \d+)* > eval:\d+:\d+/g,":$1")),r.indexOf("@")===-1&&r.indexOf(":")===-1)return new O({functionName:r});var a=/((.*".+"[^@]*)?[^@]*)(?:@)/,l=r.match(a),c=l&&l[1]?l[1]:void 0,d=this.extractLocation(r.replace(a,""));return new O({functionName:c,fileName:d[0],lineNumber:d[1],columnNumber:d[2],source:r})},this)},"ErrorStackParser$$parseFFOrSafari")}}o(re,"ErrorStackParser");var ie=new re;var M=ie;function oe(){if(typeof API<"u"&&API!==globalThis.API)return API.runtimeEnv;let e=typeof Bun<"u",t=typeof Deno<"u",n=typeof process=="object"&&typeof process.versions=="object"&&typeof process.versions.node=="string"&&!process.browser,i=typeof navigator=="object"&&typeof navigator.userAgent=="string"&&navigator.userAgent.indexOf("Chrome")===-1&&navigator.userAgent.indexOf("Safari")>-1;return ae({IN_BUN:e,IN_DENO:t,IN_NODE:n,IN_SAFARI:i,IN_SHELL:typeof read=="function"&&typeof load=="function"})}o(oe,"getGlobalRuntimeEnv");var f=oe();function ae(e){let t=e.IN_NODE&&typeof module<"u"&&module.exports&&typeof A=="function"&&typeof __dirname=="string",n=e.IN_NODE&&!t,i=!e.IN_NODE&&!e.IN_DENO&&!e.IN_BUN,s=i&&typeof window<"u"&&typeof window.document<"u"&&typeof document.createElement=="function"&&"sessionStorage"in window&&typeof globalThis.importScripts!="function",r=i&&typeof globalThis.WorkerGlobalScope<"u"&&typeof globalThis.self<"u"&&globalThis.self instanceof globalThis.WorkerGlobalScope;return{...e,IN_BROWSER:i,IN_BROWSER_MAIN_THREAD:s,IN_BROWSER_WEB_WORKER:r,IN_NODE_COMMONJS:t,IN_NODE_ESM:n}}o(ae,"calculateDerivedFlags");var $,D,H,B,L;async function T(){if(!f.IN_NODE||($=(await import("node:url")).default,B=await import("node:fs"),L=await import("node:fs/promises"),H=(await import("node:vm")).default,D=await import("node:path"),C=D.sep,typeof A<"u"))return;let e=B,t=await import("node:crypto"),n=await import("ws"),i=await import("node:child_process"),s={fs:e,crypto:t,ws:n,child_process:i};globalThis.require=function(r){return s[r]}}o(T,"initNodeModules");function se(e,t){return D.resolve(t||".",e)}o(se,"node_resolvePath");function le(e,t){return t===void 0&&(t=location),new URL(e,t).toString()}o(le,"browser_resolvePath");var _;f.IN_NODE?_=se:f.IN_SHELL?_=o(e=>e,"resolvePath"):_=le;var C;f.IN_NODE||(C="/");function ce(e,t){return e.startsWith("file://")&&(e=e.slice(7)),e.includes("://")?{response:fetch(e)}:{binary:L.readFile(e).then(n=>new Uint8Array(n.buffer,n.byteOffset,n.byteLength))}}o(ce,"node_getBinaryResponse");function de(e,t){if(e.startsWith("file://")&&(e=e.slice(7)),e.includes("://"))throw new Error("Shell cannot fetch urls");return{binary:Promise.resolve(new Uint8Array(readbuffer(e)))}}o(de,"shell_getBinaryResponse");function ue(e,t){let n=new URL(e,location);return{response:fetch(n,t?{integrity:t}:{})}}o(ue,"browser_getBinaryResponse");var R;f.IN_NODE?R=ce:f.IN_SHELL?R=de:R=ue;async function j(e,t){let{response:n,binary:i}=R(e,t);if(i)return i;let s=await n;if(!s.ok)throw new Error(`Failed to load '${e}': request failed.`);return new Uint8Array(await s.arrayBuffer())}o(j,"loadBinaryFile");var w;if(f.IN_BROWSER_MAIN_THREAD)w=o(async e=>await import(e),"loadScript");else if(f.IN_BROWSER_WEB_WORKER)w=o(async e=>{try{globalThis.importScripts(e)}catch(t){if(t instanceof TypeError)await import(e);else throw t}},"loadScript");else if(f.IN_NODE)w=fe;else if(f.IN_SHELL)w=load;else throw new Error("Cannot determine runtime environment");async function fe(e){e.startsWith("file://")&&(e=e.slice(7)),e.includes("://")?H.runInThisContext(await(await fetch(e)).text()):await import(e.startsWith("/" )?e:$.pathToFileURL(e).href)}o(fe,"nodeLoadScript");async function V(e){if(f.IN_NODE){await T();let t=await L.readFile(e,{encoding:"utf8"});return JSON.parse(t)}else if(f.IN_SHELL){let t=read(e);return JSON.parse(t)}else return await(await fetch(e)).json()}o(V,"loadLockFile");async function z(){if(f.IN_NODE_COMMONJS)return __dirname;let e;try{throw new Error}catch(i){e=i}let t=M.parse(e)[0].fileName;if(f.IN_NODE&&!t.startsWith("file://")&&(t=`file://${t}`),f.IN_NODE_ESM){let i=await import("node:path");return(await import("node:url")).fileURLToPath(i.dirname(t))}let n=t.lastIndexOf(C);if(n===-1)throw new Error("Could not extract indexURL path from pyodide module location. Please pass the indexURL explicitly to loadPyodide.");return t.slice(0,n)}o(z,"calculateDirname");function J(e){return e.substring(0,e.lastIndexOf("/")+1)||globalThis.location?.toString()||"."}o(J,"calculateInstallBaseUrl");function q(e){let t=e.FS,n=e.FS.filesystems.MEMFS,i=e.PATH,s={DIR_MODE:16895,FILE_MODE:33279,mount:o(function(r){if(!r.opts.fileSystemHandle)throw new Error("opts.fileSystemHandle is required");return n.mount.apply(null,arguments)},"mount"),syncfs:o(async(r,a,l)=>{try{let c=s.getLocalSet(r),d=await s.getRemoteSet(r),u=a?d:c,y=a?c:d;await s.reconcile(r,u,y),l(null)}catch(c){l(c)}},"syncfs"),getLocalSet:o(r=>{let a=Object.create(null);function l(u){return u!=="."&&u!==".."}o(l,"isRealDir");function c(u){return y=>i.join2(u,y)}o(c,"toAbsolute");let d=t.readdir(r.mountpoint).filter(l).map(c(r.mountpoint));for(;d.length;){let u=d.pop(),y=t.stat(u);t.isDir(y.mode)&&d.push.apply(d,t.readdir(u).filter(l).map(c(u))),a[u]={timestamp:y.mtime,mode:y.mode}}return{type:"local",entries:a}},"getLocalSet"),getRemoteSet:o(async r=>{let a=Object.create(null),l=await me(r.opts.fileSystemHandle);for(let[c,d]of l)c!=="."&&(a[i.join2(r.mountpoint,c)]={timestamp:d.kind==="file"?new Date((await d.getFile()).lastModified):new Date,mode:d.kind==="file"?s.FILE_MODE:s.DIR_MODE});return{type:"remote",entries:a,handles:l}},"getRemoteSet"),loadLocalEntry:o(r=>{let l=t.lookupPath(r,{}).node,c=t.stat(r);if(t.isDir(c.mode))return{timestamp:c.mtime,mode:c.mode};if(t.isFile(c.mode))return l.contents=n.getFileDataAsTypedArray(l),{timestamp:c.mtime,mode:c.mode,contents:l.contents};throw new Error("node type not supported")},"loadLocalEntry"),storeLocalEntry:o((r,a)=>{if(t.isDir(a.mode))t.mkdirTree(r,a.mode);else if(t.isFile(a.mode))t.writeFile(r,a.contents,{canOwn:!0});else throw new Error("node type not supported");t.chmod(r,a.mode),t.utime(r,a.timestamp,a.timestamp)},"storeLocalEntry"),removeLocalEntry:o(r=>{var a=t.stat(r);t.isDir(a.mode)?t.rmdir(r):t.isFile(a.mode)&&t.unlink(r)},"removeLocalEntry"),loadRemoteEntry:o(async r=>{if(r.kind==="file"){let a=await r.getFile();return{contents:new Uint8Array(await a.arrayBuffer()),mode:s.FILE_MODE,timestamp:new Date(a.lastModified)}}else{if(r.kind==="directory")return{mode:s.DIR_MODE,timestamp:new Date};throw new Error("unknown kind: "+r.kind)}},"loadRemoteEntry"),storeRemoteEntry:o(async(r,a,l)=>{let c=r.get(i.dirname(a)),d=t.isFile(l.mode)?await c.getFileHandle(i.basename(a),{create:!0}):await c.getDirectoryHandle(i.basename(a),{create:!0});if(d.kind==="file"){let u=await d.createWritable();await u.write(l.contents),await u.close()}r.set(a,d)},"storeRemoteEntry"),removeRemoteEntry:o(async(r,a)=>{await r.get(i.dirname(a)).removeEntry(i.basename(a)),r.delete(a)},"removeRemoteEntry"),reconcile:o(async(r,a,l)=>{let c=0,d=[];Object.keys(a.entries).forEach(function(m){let g=a.entries[m],h=l.entries[m];(!h||t.isFile(g.mode)&&g.timestamp.getTime()>h.timestamp.getTime())&&(d.push(m),c++)}),d.sort();let u=[];if(Object.keys(l.entries).forEach(function(m){a.entries[m]||(u.push(m),c++)}),u.sort().reverse(),!c)return;let y=a.type==="remote"?a.handles:l.handles;for(let m of d){let g=i.normalize(m.replace(r.mountpoint,"/")).substring(1);if(l.type==="local"){let h=y.get(g),Q=await s.loadRemoteEntry(h);s.storeLocalEntry(m,Q)}else{let h=s.loadLocalEntry(m);await s.storeRemoteEntry(y,g,h)}}for(let m of u)if(l.type==="local")s.removeLocalEntry(m);else{let g=i.normalize(m.replace(r.mountpoint,"/")).substring(1);await s.removeRemoteEntry(y,g)}},"reconcile")};e.FS.filesystems.NATIVEFS_ASYNC=s}o(q,"initializeNativeFS");var me=o(async e=>{let t=[];async function n(s){for await(let r of s.values())t.push(r),r.kind==="directory"&&await n(r)}o(n,"collect"),await n(e);let i=new Map;i.set(".",e);for(let s of t){let r=(await e.resolve(s)).join("/");i.set(r,s)}return i},"getFsHandles");var G=W("AGFzbQEAAAABDANfAGAAAW9gAW8BfwMDAgECByECD2NyZWF0ZV9zZW50aW5lbAAAC2lzX3NlbnRpbmVsAAEKEwIHAPsBAPsbCwkAIAD7GvsUAAs=");var ye=async function(){if(!(globalThis.navigator&&(/iPad|iPhone|iPod/.test(navigator.userAgent)||navigator.platform==="MacIntel"&&typeof navigator.maxTouchPoints<"u"&&navigator.maxTouchPoints>1)))try{let t=await WebAssembly.compile(G);return await WebAssembly.instantiate(t)}catch(t){if(t instanceof WebAssembly.CompileError)return;throw t}}();async function K(){let e=await ye;if(e)return e.exports;let t=Symbol("error marker");return{create_sentinel:o(()=>t,"create_sentinel"),is_sentinel:o(n=>n===t,"is_sentinel")}}o(K,"getSentinelImport");function Y(e){let t={config:e,runtimeEnv:f},n={noImageDecoding:!0,noAudioDecoding:!0,noWasmDecoding:!1,preRun:he(e),print:e.stdout,printErr:e.stderr,onExit(i){n.exitCode=i},thisProgram:e._sysExecutable,arguments:e.args,API:t,locateFile:o(i=>e.indexURL+i,"locateFile"),instantiateWasm:Ne(e.indexURL)};return n}o(Y,"createSettings");function ge(e){return function(t){let n="/";try{t.FS.mkdirTree(e)}catch(i){console.error(`Error occurred while making a home directory '${e}':`),console.error(i),console.error(`Using '${n}' for a home directory instead`),e=n}t.FS.chdir(e)}}o(ge,"createHomeDirectory");function be(e){return function(t){Object.assign(t.ENV,e)}}o(be,"setEnvironment");function ve(e){return e?[async t=>{t.addRunDependency("fsInitHook");try{await e(t.FS,{sitePackages:t.API.sitePackages})}finally{t.removeRunDependency("fsInitHook")}}]:[]}o(ve,"callFsInitHook");function Ee(e){let t=e.HEAPU32[e._Py_Version>>>2],n=t>>>24&255,i=t>>>16&255,s=t>>>8&255;return[n,i,s]}o(Ee,"computeVersionTuple");function Pe(e){let t=j(e);return async n=>{n.API.pyVersionTuple=Ee(n);let[i,s]=n.API.pyVersionTuple;n.FS.mkdirTree("/lib"),n.API.sitePackages=`/lib/python${i}.${s}/site-packages`,n.FS.mkdirTree(n.API.sitePackages),n.addRunDependency("install-stdlib");try{let r=await t;n.FS.writeFile(`/lib/python${i}${s}.zip`,r);}catch(r){console.error("Error occurred while installing the standard library:"),console.error(r)}finally{n.removeRunDependency("install-stdlib")}}}o(Pe,"installStdlib");function he(e){let t;return e.stdLibURL!=null?t=e.stdLibURL:t=e.indexURL+"python_stdlib.zip",[Pe(t),ge(e.env.HOME),be(e.env),q,...ve(e.fsInit)]}o(he,"getFileSystemInitializationFuncs");function Ne(e){if(typeof WasmOffsetConverter<"u")return;let{binary:t,response:n}=R(e+"pyodide.asm.wasm"),i=K();return function(s,r){return async function(){s.sentinel=await i;try{let a;if(n){a=await WebAssembly.instantiateStreaming(n,s);}else{let l=await t;a=await WebAssembly.instantiate(l,s);}let{instance:l,module:c}=a;r(l,c);}catch(a){console.warn("wasm instantiation failed!"),console.warn(a)}}(),{}}}o(Ne,"getInstantiateWasmFunc");var X="0.29.3";function k(e){return e===void 0||e.endsWith("/")?e:e+"/"}o(k,"withTrailingSlash");var U=X;async function Se(e={}){if(await T(),e.lockFileContents&&e.lockFileURL)throw new Error("Can't pass both lockFileContents and lockFileURL");let t=e.indexURL||await z();if(t=k(_(t)),e.packageBaseUrl=k(e.packageBaseUrl),e.cdnUrl=k(e.packageBaseUrl??`https://cdn.jsdelivr.net/pyodide/v${U}/full/`),!e.lockFileContents){let s=e.lockFileURL??t+"pyodide-lock.json";e.lockFileContents=V(s),e.packageBaseUrl??=J(s)}e.indexURL=t,e.packageCacheDir&&(e.packageCacheDir=k(_(e.packageCacheDir)));let n={fullStdLib:!1,jsglobals:globalThis,stdin:globalThis.prompt?()=>globalThis.prompt():void 0,args:[],env:{},packages:[],packageCacheDir:e.packageBaseUrl,enableRunUntilComplete:!0,checkAPIVersion:!0,BUILD_ID:"b7b7b0f46eb68e65c029c0dc739270e8a5d35251e9aab6014ee1c2f630e5d1d0"},i=Object.assign(n,e);return i.env.HOME??="/home/pyodide",i.env.PYTHONINSPECT??="1",i}o(Se,"initializeConfiguration");function Ie(e){let t=Y(e),n=t.API;return n.lockFilePromise=Promise.resolve(e.lockFileContents),t}o(Ie,"createEmscriptenSettings");async function we(e){if(typeof _createPyodideModule!="function"){let t=`${e.indexURL}pyodide.asm.js`;await w(t)}}o(we,"loadWasmScript");async function _e(e,t){if(!e._loadSnapshot)return;let n=await e._loadSnapshot,i=ArrayBuffer.isView(n)?n:new Uint8Array(n);return t.noInitialRun=!0,t.INITIAL_MEMORY=i.length,i}o(_e,"prepareSnapshot");async function Re(e){let t=await _createPyodideModule(e);if(e.exitCode!==void 0)throw new t.ExitStatus(e.exitCode);return t}o(Re,"createPyodideModule");function ke(e,t){let n=e.API;if(t.pyproxyToStringRepr&&n.setPyProxyToStringMethod(!0),t.convertNullToNone&&n.setCompatNullToNone(!0),t.toJsLiteralMap&&n.setCompatToJsLiteralMap(!0),n.version!==U&&t.checkAPIVersion)throw new Error(`Pyodide version does not match: '${U}' <==> '${n.version}'. If you updated the Pyodide version, make sure you also updated the 'indexURL' parameter passed to loadPyodide.`);e.locateFile=i=>{throw i.endsWith(".so")?new Error(`Failed to find dynamic library "${i}"`):new Error(`Unexpected call to locateFile("${i}")`)}}o(ke,"configureAPI");function Ae(e,t,n){let i=e.API,s;return t&&(s=i.restoreSnapshot(t)),i.finalizeBootstrap(s,n._snapshotDeserializer)}o(Ae,"bootstrapPyodide");async function Fe(e,t){let n=e._api;return n.sys.path.insert(0,""),n._pyodide.set_excepthook(),await n.packageIndexReady,n.initializeStreams(t.stdin,t.stdout,t.stderr),e}o(Fe,"finalizeSetup");async function ct(e={}){let t=await Se(e),n=Ie(t);await we(t);let i=await _e(t,n);let s=await Re(n);ke(s,t);let r=Ae(s,i,t);let a=await Fe(r,t);return a}o(ct,"loadPyodide");export{ct as loadPyodide,U as version};
-//# sourceMappingURL=pyodide.mjs.map
diff --git a/crates/execution/assets/pyodide/python_dateutil-2.9.0.post0-py2.py3-none-any.whl b/crates/execution/assets/pyodide/python_dateutil-2.9.0.post0-py2.py3-none-any.whl
deleted file mode 100644
index b9a87e998..000000000
Binary files a/crates/execution/assets/pyodide/python_dateutil-2.9.0.post0-py2.py3-none-any.whl and /dev/null differ
diff --git a/crates/execution/assets/pyodide/python_stdlib.zip b/crates/execution/assets/pyodide/python_stdlib.zip
deleted file mode 100644
index 65150abe8..000000000
Binary files a/crates/execution/assets/pyodide/python_stdlib.zip and /dev/null differ
diff --git a/crates/execution/assets/pyodide/pytz-2025.2-py2.py3-none-any.whl b/crates/execution/assets/pyodide/pytz-2025.2-py2.py3-none-any.whl
deleted file mode 100644
index e32bd1ab4..000000000
Binary files a/crates/execution/assets/pyodide/pytz-2025.2-py2.py3-none-any.whl and /dev/null differ
diff --git a/crates/execution/assets/pyodide/six-1.17.0-py2.py3-none-any.whl b/crates/execution/assets/pyodide/six-1.17.0-py2.py3-none-any.whl
deleted file mode 100644
index becf377dc..000000000
Binary files a/crates/execution/assets/pyodide/six-1.17.0-py2.py3-none-any.whl and /dev/null differ
diff --git a/crates/execution/assets/runners/python-runner.mjs b/crates/execution/assets/runners/python-runner.mjs
deleted file mode 100644
index cbc835b83..000000000
--- a/crates/execution/assets/runners/python-runner.mjs
+++ /dev/null
@@ -1,2543 +0,0 @@
-import { closeSync, createReadStream, mkdirSync, readFileSync, readSync, writeSync } from 'node:fs';
-import { readFile } from 'node:fs/promises';
-import * as moduleBuiltin from 'node:module';
-import { performance as realPerformance } from 'node:perf_hooks';
-import path from 'node:path';
-import readline from 'node:readline';
-import { URL } from 'node:url';
-
-const ACCESS_DENIED_CODE = 'ERR_ACCESS_DENIED';
-const ASSET_ROOT_ENV = 'AGENTOS_NODE_IMPORT_CACHE_ASSET_ROOT';
-const PYODIDE_INDEX_URL_ENV = 'AGENTOS_PYODIDE_INDEX_URL';
-const PYODIDE_PACKAGE_BASE_URL_ENV = 'AGENTOS_PYODIDE_PACKAGE_BASE_URL';
-const PYODIDE_PACKAGE_CACHE_DIR_ENV = 'AGENTOS_PYODIDE_PACKAGE_CACHE_DIR';
-const PYODIDE_PACKAGE_CACHE_GUEST_ROOT = '/__agentos_pyodide_cache';
-const PYTHON_CODE_ENV = 'AGENTOS_PYTHON_CODE';
-const PYTHON_FILE_ENV = 'AGENTOS_PYTHON_FILE';
-const PYTHON_ARGV_ENV = 'AGENTOS_PYTHON_ARGV';
-const PYTHON_MODULE_ENV = 'AGENTOS_PYTHON_MODULE';
-const PYTHON_STDIN_PROGRAM_ENV = 'AGENTOS_PYTHON_STDIN_PROGRAM';
-const PYTHON_INTERACTIVE_ENV = 'AGENTOS_PYTHON_INTERACTIVE';
-const PYTHON_PREWARM_ONLY_ENV = 'AGENTOS_PYTHON_PREWARM_ONLY';
-const PYTHON_WARMUP_DEBUG_ENV = 'AGENTOS_PYTHON_WARMUP_DEBUG';
-const PYTHON_WARMUP_METRICS_PREFIX = '__AGENTOS_PYTHON_WARMUP_METRICS__:';
-const PYTHON_PRELOAD_PACKAGES_ENV = 'AGENTOS_PYTHON_PRELOAD_PACKAGES';
-const PYTHON_VFS_RPC_REQUEST_FD_ENV = 'AGENTOS_PYTHON_VFS_RPC_REQUEST_FD';
-const PYTHON_VFS_RPC_RESPONSE_FD_ENV = 'AGENTOS_PYTHON_VFS_RPC_RESPONSE_FD';
-const PYTHON_RUNTIME_ENV_NAMES = ['HOME', 'USER', 'LOGNAME', 'SHELL', 'PWD', 'TMPDIR', 'PATH'];
-const INTERNAL_ENV = globalThis.__agentOSPythonInternalEnv ?? Object.create(null);
-const ALLOW_PROCESS_BINDINGS = readRunnerEnv('AGENTOS_ALLOW_PROCESS_BINDINGS') === '1';
-const STDIN_FD = 0;
-const SUPPORTED_PRELOAD_PACKAGES = ['numpy', 'pandas'];
-const SUPPORTED_PRELOAD_PACKAGE_SET = new Set(SUPPORTED_PRELOAD_PACKAGES);
-const DENIED_BUILTINS = new Set([
-  'child_process',
-  'cluster',
-  'dgram',
-  'diagnostics_channel',
-  'dns',
-  'http',
-  'http2',
-  'https',
-  'inspector',
-  'module',
-  'net',
-  'tls',
-  'trace_events',
-  'v8',
-  'vm',
-  'worker_threads',
-]);
-const originalFetch =
-  typeof globalThis.fetch === 'function'
-    ? globalThis.fetch.bind(globalThis)
-    : null;
-const originalRequire =
-  typeof globalThis.require === 'function'
-    ? globalThis.require.bind(globalThis)
-    : null;
-const PYTHON_STDIN_DONE_SENTINEL = '__AGENTOS_PYTHON_STDIN_DONE__';
-function canCallBridgeSync(bridge) {
-  return (
-    typeof bridge?.applySyncPromise === 'function' ||
-    typeof bridge?.applySync === 'function' ||
-    typeof bridge === 'function'
-  );
-}
-
-function callBridgeSync(bridge, args) {
-  if (typeof bridge?.applySyncPromise === 'function') {
-    return bridge.applySyncPromise(void 0, args);
-  }
-  if (typeof bridge?.applySync === 'function') {
-    return bridge.applySync(void 0, args);
-  }
-  if (typeof bridge === 'function') {
-    return bridge(...args);
-  }
-  return undefined;
-}
-
-const bridgePythonRpc =
-  canCallBridgeSync(globalThis._pythonRpc)
-    ? globalThis._pythonRpc
-    : null;
-const bridgePythonStdinRead =
-  canCallBridgeSync(globalThis._pythonStdinRead)
-    ? globalThis._pythonStdinRead
-    : null;
-const bridgeKernelStdinRead = globalThis._kernelStdinRead ?? null;
-const bridgeLoadFileSync =
-  canCallBridgeSync(globalThis._loadFileSync)
-    ? globalThis._loadFileSync
-    : null;
-const originalGetBuiltinModule =
-  typeof process.getBuiltinModule === 'function'
-    ? process.getBuiltinModule.bind(process)
-    : null;
-const CONTROL_PIPE_FD = parseControlPipeFd(readRunnerEnv('AGENTOS_CONTROL_PIPE_FD'));
-const register = typeof moduleBuiltin?.register === 'function' ? moduleBuiltin.register.bind(moduleBuiltin) : null;
-
-function readRunnerEnv(name) {
-  const internalValue = INTERNAL_ENV[name];
-  if (typeof internalValue === 'string') {
-    return internalValue;
-  }
-  return process.env[name];
-}
-
-function requiredEnv(name) {
-  const value = readRunnerEnv(name);
-  if (value == null) {
-    throw new Error(`${name} is required`);
-  }
-  return value;
-}
-
-function parseControlPipeFd(value) {
-  if (typeof value !== 'string' || value.trim() === '') {
-    return null;
-  }
-
-  const parsed = Number.parseInt(value, 10);
-  return Number.isInteger(parsed) && parsed >= 0 ? parsed : null;
-}
-
-function emitControlMessage(message) {
-  if (CONTROL_PIPE_FD == null) {
-    return;
-  }
-
-  try {
-    writeSync(CONTROL_PIPE_FD, `${JSON.stringify(message)}\n`);
-  } catch {
-    // Ignore control-channel write failures during teardown.
-  }
-}
-
-function normalizeDirectoryPath(value) {
-  return value.endsWith(path.sep) ? value : `${value}${path.sep}`;
-}
-
-function pathToFileUrlString(value) {
-  const normalizedPath = path.resolve(value);
-  return `file://${normalizedPath.startsWith(path.sep) ? normalizedPath : `${path.sep}${normalizedPath}`}`;
-}
-
-function fileUrlToPathString(value) {
-  const url = value instanceof URL ? value : new URL(String(value));
-  if (url.protocol !== 'file:') {
-    throw new Error(`Expected file URL, received ${url.protocol}`);
-  }
-  return decodeURIComponent(url.pathname);
-}
-
-function resolveIndexLocation(value) {
-  if (/^[A-Za-z][A-Za-z0-9+.-]*:/.test(value)) {
-    const normalizedUrl = value.endsWith('/') ? value : `${value}/`;
-    if (!normalizedUrl.startsWith('file:')) {
-      return {
-        indexPath: normalizedUrl,
-        indexUrl: normalizedUrl,
-      };
-    }
-
-    const indexPath = normalizeDirectoryPath(fileUrlToPathString(normalizedUrl));
-    return {
-      indexPath,
-      indexUrl: pathToFileUrlString(indexPath),
-    };
-  }
-
-  const indexPath = normalizeDirectoryPath(path.resolve(value));
-  return {
-    indexPath,
-    indexUrl: pathToFileUrlString(indexPath),
-  };
-}
-
-function normalizeBaseUrl(value) {
-  if (typeof value !== 'string' || value.trim() === '') {
-    throw new Error('package base URL must not be empty');
-  }
-
-  if (/^[A-Za-z][A-Za-z0-9+.-]*:/.test(value)) {
-    return value.endsWith('/') ? value : `${value}/`;
-  }
-
-  return normalizeDirectoryPath(path.resolve(value));
-}
-
-function normalizePyodideShellPath(value) {
-  if (typeof value !== 'string') {
-    throw new Error(`expected shell path to be a string, received ${typeof value}`);
-  }
-
-  if (value.startsWith('file://')) {
-    return fileUrlToPathString(value);
-  }
-
-  if (/^[A-Za-z][A-Za-z0-9+.-]*:/.test(value)) {
-    throw new Error(`unsupported Pyodide shell URL ${value}`);
-  }
-
-  return value;
-}
-
-function installPyodideShellCompat() {
-  const originalRead = globalThis.read;
-  const originalReadbuffer = globalThis.readbuffer;
-  const originalLoad = globalThis.load;
-  const originalArguments = globalThis.arguments;
-  const originalScriptArgs = globalThis.scriptArgs;
-  const originalPrint = globalThis.print;
-  const originalPrintErr = globalThis.printErr;
-
-  const shellRead = (target, mode) => {
-    const normalized = normalizePyodideShellPath(String(target));
-    if (mode === 'binary') {
-      return new Uint8Array(readFileSync(normalized));
-    }
-    return readFileSync(normalized, 'utf8');
-  };
-
-  globalThis.read = shellRead;
-  globalThis.readbuffer = (target) => new Uint8Array(readFileSync(normalizePyodideShellPath(String(target))));
-  globalThis.load = async (target) => {
-    const normalized = normalizePyodideShellPath(String(target));
-    await import(normalized.startsWith('/') ? normalized : pathToFileUrlString(normalized));
-  };
-  globalThis.arguments = [];
-  globalThis.scriptArgs = [];
-  const writeShellStream = (stream, args) => {
-    const value = args.join(' ');
-    if (value.trim().length === 0) {
-      return;
-    }
-    writeStream(stream, value);
-  };
-
-  globalThis.print = (...args) => writeShellStream(process.stdout, args);
-  globalThis.printErr = (...args) => writeShellStream(process.stderr, args);
-
-  return () => {
-    if (originalRead === undefined) {
-      delete globalThis.read;
-    } else {
-      globalThis.read = originalRead;
-    }
-    if (originalReadbuffer === undefined) {
-      delete globalThis.readbuffer;
-    } else {
-      globalThis.readbuffer = originalReadbuffer;
-    }
-    if (originalLoad === undefined) {
-      delete globalThis.load;
-    } else {
-      globalThis.load = originalLoad;
-    }
-    if (originalArguments === undefined) {
-      delete globalThis.arguments;
-    } else {
-      globalThis.arguments = originalArguments;
-    }
-    if (originalScriptArgs === undefined) {
-      delete globalThis.scriptArgs;
-    } else {
-      globalThis.scriptArgs = originalScriptArgs;
-    }
-    if (originalPrint === undefined) {
-      delete globalThis.print;
-    } else {
-      globalThis.print = originalPrint;
-    }
-    if (originalPrintErr === undefined) {
-      delete globalThis.printErr;
-    } else {
-      globalThis.printErr = originalPrintErr;
-    }
-  };
-}
-
-function resolvePyodideResource(indexPath, indexUrl, resourceName) {
-  if (typeof indexPath === 'string' && path.isAbsolute(indexPath)) {
-    const resourcePath = path.join(indexPath, resourceName);
-    return {
-      path: resourcePath,
-      url: resourcePath,
-    };
-  }
-
-  const resourceUrl = new URL(resourceName, indexUrl).href;
-  return {
-    path: resourceUrl,
-    url: resourceUrl,
-  };
-}
-
-function writeStream(stream, message) {
-  if (message == null) {
-    return;
-  }
-
-  const value = typeof message === 'string' ? message : String(message);
-  stream.write(value.endsWith('\n') ? value : `${value}\n`);
-}
-
-function writePyodideStdout(message) {
-  if (message == null) {
-    return;
-  }
-
-  const value = typeof message === 'string' ? message : String(message);
-  const trimmed = value.trim();
-  if (trimmed.length === 0) {
-    return;
-  }
-  if (
-    trimmed.startsWith('Loading ') ||
-    trimmed.startsWith('Loaded ') ||
-    trimmed.startsWith("Didn't find package ") ||
-    (trimmed.startsWith('Package ') && trimmed.includes(' loaded from '))
-  ) {
-    return;
-  }
-
-  writeStream(process.stdout, value);
-}
-
-function resolvePyodidePackageCacheDir() {
-  const configured = readRunnerEnv(PYODIDE_PACKAGE_CACHE_DIR_ENV);
-  if (typeof configured === 'string' && configured.trim() !== '') {
-    return path.resolve(configured);
-  }
-
-  return PYODIDE_PACKAGE_CACHE_GUEST_ROOT;
-}
-
-function emitWarmupStage(stage) {
-  if (readRunnerEnv(PYTHON_WARMUP_DEBUG_ENV) !== '1') {
-    return;
-  }
-
-  writeStream(process.stderr, `__AGENTOS_PYTHON_WARMUP_STAGE__:${stage}`);
-}
-
-function emitPythonDebug(channel, message) {
-  if (readRunnerEnv(PYTHON_WARMUP_DEBUG_ENV) !== '1') {
-    return;
-  }
-
-  writeStream(process.stderr, `__AGENTOS_PYTHON_${channel}__:${message}`);
-}
-
-function formatError(error) {
-  if (error instanceof Error) {
-    return error.stack || error.message || String(error);
-  }
-
-  return String(error);
-}
-
-function wrapPythonStartupError(step, context, error) {
-  const details = Object.entries(context)
-    .filter(([, value]) => value != null && value !== '')
-    .map(([key, value]) => `${key}=${value}`)
-    .join(', ');
-  const suffix = details.length > 0 ? ` (${details})` : '';
-  return new Error(`Python runtime ${step} failed${suffix}: ${formatError(error)}`);
-}
-
-function normalizeFetchHeaders(headers) {
-  if (headers == null) {
-    return {};
-  }
-
-  if (headers instanceof Headers) {
-    return Object.fromEntries(headers.entries());
-  }
-
-  if (Array.isArray(headers)) {
-    return Object.fromEntries(headers);
-  }
-
-  return Object.fromEntries(Object.entries(headers).map(([key, value]) => [key, String(value)]));
-}
-
-async function normalizeFetchBody(body) {
-  if (body == null) {
-    return null;
-  }
-
-  if (typeof body === 'string') {
-    return Buffer.from(body).toString('base64');
-  }
-
-  if (ArrayBuffer.isView(body)) {
-    return Buffer.from(body.buffer, body.byteOffset, body.byteLength).toString('base64');
-  }
-
-  if (body instanceof ArrayBuffer) {
-    return Buffer.from(body).toString('base64');
-  }
-
-  if (typeof Blob !== 'undefined' && body instanceof Blob) {
-    return Buffer.from(await body.arrayBuffer()).toString('base64');
-  }
-
-  throw new Error('unsupported fetch body type for secure-exec Python package loading');
-}
-
-function emitPythonStartupMetrics({
-  prewarmOnly,
-  startupMs,
-  loadPyodideMs,
-  packageLoadMs,
-  packageCount,
-  source,
-}) {
-  if (readRunnerEnv(PYTHON_WARMUP_DEBUG_ENV) !== '1') {
-    return;
-  }
-
-  writeStream(
-    process.stderr,
-    `${PYTHON_WARMUP_METRICS_PREFIX}${JSON.stringify({
-      phase: 'startup',
-      prewarmOnly,
-      startupMs,
-      loadPyodideMs,
-      packageLoadMs,
-      packageCount,
-      source,
-    })}`,
-  );
-}
-
-function parsePreloadPackages(value) {
-  if (value == null || value.trim() === '') {
-    return [];
-  }
-
-  let parsed;
-  try {
-    parsed = JSON.parse(value);
-  } catch (error) {
-    throw new Error(
-      `${PYTHON_PRELOAD_PACKAGES_ENV} must be a JSON array of package names: ${formatError(error)}`,
-    );
-  }
-
-  if (!Array.isArray(parsed)) {
-    throw new Error(`${PYTHON_PRELOAD_PACKAGES_ENV} must be a JSON array of package names`);
-  }
-
-  const packages = [];
-  const seen = new Set();
-
-  for (const entry of parsed) {
-    if (typeof entry !== 'string') {
-      throw new Error(`${PYTHON_PRELOAD_PACKAGES_ENV} entries must be strings`);
-    }
-
-    const name = entry.trim();
-    if (name.length === 0) {
-      throw new Error(`${PYTHON_PRELOAD_PACKAGES_ENV} entries must not be empty`);
-    }
-
-    if (!SUPPORTED_PRELOAD_PACKAGE_SET.has(name)) {
-      throw new Error(
-        `Unsupported bundled Python package "${name}". Available packages: ${SUPPORTED_PRELOAD_PACKAGES.join(', ')}`,
-      );
-    }
-
-    if (!seen.has(name)) {
-      seen.add(name);
-      packages.push(name);
-    }
-  }
-
-  return packages;
-}
-
-function parseOptionalFd(name) {
-  const value = readRunnerEnv(name);
-  if (value == null || value.trim() === '') {
-    return null;
-  }
-
-  const fd = Number.parseInt(value, 10);
-  if (!Number.isInteger(fd) || fd < 0) {
-    throw new Error(`${name} must be a non-negative integer file descriptor`);
-  }
-
-  return fd;
-}
-
-function normalizeWriteContent(content) {
-  if (typeof content === 'string') {
-    return content;
-  }
-  if (ArrayBuffer.isView(content)) {
-    return Buffer.from(content.buffer, content.byteOffset, content.byteLength).toString('base64');
-  }
-  if (content instanceof ArrayBuffer) {
-    return Buffer.from(content).toString('base64');
-  }
-  throw new Error('fsWrite requires a base64 string or Uint8Array');
-}
-
-function rejectPendingRpcRequests(pending, error) {
-  for (const { reject } of pending.values()) {
-    reject(error);
-  }
-  pending.clear();
-}
-
-function normalizePythonBridgeError(error) {
-  const normalized = error instanceof Error ? error : new Error(String(error));
-  const message = normalized.message || String(error);
-  const separatorIndex = message.indexOf(': ');
-  if (separatorIndex > 0) {
-    const code = message.slice(0, separatorIndex);
-    if (/^(?:ERR_[A-Z0-9_]+|E[A-Z0-9_]+)$/.test(code)) {
-      normalized.code = code;
-      normalized.message = message.slice(separatorIndex + 2);
-    }
-  }
-  if (typeof normalized.code !== 'string') {
-    normalized.code = 'ERR_AGENTOS_PYTHON_VFS_RPC';
-  }
-  return normalized;
-}
-
-function createPythonBridgeRpcBridge() {
-  if (!bridgePythonRpc) {
-    return null;
-  }
-
-  function requestSync(method, payload = {}) {
-    try {
-      return callBridgeSync(bridgePythonRpc, [{
-        method,
-        ...payload,
-      }]) ?? {};
-    } catch (error) {
-      throw normalizePythonBridgeError(error);
-    }
-  }
-
-  return {
-    fsReadSync(path) {
-      const result = requestSync('fsRead', { path });
-      return result.contentBase64 ?? '';
-    },
-    async fsRead(path) {
-      return this.fsReadSync(path);
-    },
-    fsWriteSync(path, content) {
-      requestSync('fsWrite', {
-        path,
-        contentBase64: normalizeWriteContent(content),
-      });
-    },
-    async fsWrite(path, content) {
-      this.fsWriteSync(path, content);
-    },
-    fsStatSync(path) {
-      const result = requestSync('fsStat', { path });
-      return result.stat ?? null;
-    },
-    async fsStat(path) {
-      return this.fsStatSync(path);
-    },
-    fsLstatSync(path) {
-      const result = requestSync('fsLstat', { path });
-      return result.stat ?? null;
-    },
-    fsReaddirSync(path) {
-      const result = requestSync('fsReaddir', { path });
-      return result.entries ?? [];
-    },
-    async fsReaddir(path) {
-      return this.fsReaddirSync(path);
-    },
-    fsMkdirSync(path, options = {}) {
-      requestSync('fsMkdir', {
-        path,
-        recursive: options?.recursive === true,
-      });
-    },
-    async fsMkdir(path, options = {}) {
-      this.fsMkdirSync(path, options);
-    },
-    fsUnlinkSync(path) {
-      requestSync('fsUnlink', { path });
-    },
-    fsRmdirSync(path) {
-      requestSync('fsRmdir', { path });
-    },
-    fsRenameSync(path, destination) {
-      requestSync('fsRename', { path, destination });
-    },
-    fsSymlinkSync(target, path) {
-      requestSync('fsSymlink', { target, path });
-    },
-    fsReadlinkSync(path) {
-      const result = requestSync('fsReadlink', { path });
-      return result.target ?? '';
-    },
-    fsSetattrSync(path, attr) {
-      requestSync('fsSetattr', { path, ...attr });
-    },
-    httpRequestSync(url, method = 'GET', headersJson = '{}', bodyBase64 = null) {
-      let headers;
-      try {
-        headers = JSON.parse(headersJson);
-      } catch (error) {
-        throw new Error(`invalid Python httpRequest headers JSON: ${formatError(error)}`);
-      }
-      return JSON.stringify(requestSync('httpRequest', {
-        url,
-        httpMethod: method,
-        headers,
-        bodyBase64,
-      }));
-    },
-    dnsLookupSync(hostname, family = null) {
-      return JSON.stringify(requestSync('dnsLookup', { hostname, family }));
-    },
-    subprocessRunSync(
-      command,
-      argsJson = '[]',
-      cwd = null,
-      envJson = '{}',
-      shell = false,
-      maxBuffer = null,
-    ) {
-      let args;
-      let env;
-      try {
-        args = JSON.parse(argsJson);
-        env = JSON.parse(envJson);
-      } catch (error) {
-        throw new Error(`invalid Python subprocessRun payload JSON: ${formatError(error)}`);
-      }
-      return JSON.stringify(requestSync('subprocessRun', {
-        command,
-        args,
-        cwd,
-        env,
-        shell,
-        maxBuffer,
-      }));
-    },
-    socketConnectSync(host, port) {
-      return JSON.stringify(requestSync('socketConnect', { hostname: host, port }));
-    },
-    socketSendSync(socketId, dataBase64) {
-      return JSON.stringify(requestSync('socketSend', { socketId, bodyBase64: dataBase64 }));
-    },
-    socketRecvSync(socketId, maxBuffer) {
-      return JSON.stringify(requestSync('socketRecv', { socketId, maxBuffer }));
-    },
-    socketCloseSync(socketId) {
-      return JSON.stringify(requestSync('socketClose', { socketId }));
-    },
-    udpCreateSync() {
-      return JSON.stringify(requestSync('udpCreate', {}));
-    },
-    udpSendtoSync(socketId, host, port, dataBase64) {
-      return JSON.stringify(
-        requestSync('udpSendto', { socketId, hostname: host, port, bodyBase64: dataBase64 }),
-      );
-    },
-    udpRecvfromSync(socketId, maxBuffer) {
-      return JSON.stringify(requestSync('udpRecvfrom', { socketId, maxBuffer }));
-    },
-    dispose() {},
-  };
-}
-
-function createPythonFdRpcBridge() {
-  const requestFd = parseOptionalFd(PYTHON_VFS_RPC_REQUEST_FD_ENV);
-  const responseFd = parseOptionalFd(PYTHON_VFS_RPC_RESPONSE_FD_ENV);
-
-  if (requestFd == null && responseFd == null) {
-    return null;
-  }
-
-  if (requestFd == null || responseFd == null) {
-    throw new Error(
-      `both ${PYTHON_VFS_RPC_REQUEST_FD_ENV} and ${PYTHON_VFS_RPC_RESPONSE_FD_ENV} are required`,
-    );
-  }
-
-  let nextRequestId = 1;
-  const queuedResponses = new Map();
-  let responseBuffer = '';
-
-  function readResponseLineSync() {
-    while (true) {
-      const newlineIndex = responseBuffer.indexOf('\n');
-      if (newlineIndex >= 0) {
-        const line = responseBuffer.slice(0, newlineIndex);
-        responseBuffer = responseBuffer.slice(newlineIndex + 1);
-        return line;
-      }
-
-      const chunk = Buffer.alloc(4096);
-      const bytesRead = readSync(responseFd, chunk, 0, chunk.length, null);
-      if (bytesRead === 0) {
-        throw new Error('secure-exec Python VFS RPC response channel closed unexpectedly');
-      }
-      responseBuffer += chunk.subarray(0, bytesRead).toString('utf8');
-    }
-  }
-
-  function parseResponseLine(line) {
-    try {
-      return JSON.parse(line);
-    } catch (error) {
-      throw new Error(`invalid secure-exec Python VFS RPC response: ${formatError(error)}`);
-    }
-  }
-
-  function waitForResponseSync(id) {
-    const queued = queuedResponses.get(id);
-    if (queued) {
-      queuedResponses.delete(id);
-      return queued;
-    }
-
-    while (true) {
-      const line = readResponseLineSync();
-      if (line.trim() === '') {
-        continue;
-      }
-
-      const message = parseResponseLine(line);
-      if (message?.id === id) {
-        return message;
-      }
-      queuedResponses.set(message?.id, message);
-    }
-  }
-
-  function requestSync(method, payload = {}) {
-    const id = nextRequestId++;
-    writeSync(
-      requestFd,
-      `${JSON.stringify({
-        id,
-        method,
-        ...payload,
-      })}\n`,
-    );
-
-    const message = waitForResponseSync(id);
-    if (message?.ok) {
-      return message.result ?? {};
-    }
-
-    const error = new Error(message?.error?.message || `secure-exec Python VFS RPC request ${id} failed`);
-    error.code = message?.error?.code || 'ERR_AGENTOS_PYTHON_VFS_RPC';
-    throw error;
-  }
-
-  function request(method, payload = {}) {
-    return Promise.resolve().then(() => requestSync(method, payload));
-  }
-
-  return {
-    fsReadSync(path) {
-      const result = requestSync('fsRead', { path });
-      return result.contentBase64 ?? '';
-    },
-    async fsRead(path) {
-      return this.fsReadSync(path);
-    },
-    fsWriteSync(path, content) {
-      requestSync('fsWrite', {
-        path,
-        contentBase64: normalizeWriteContent(content),
-      });
-    },
-    async fsWrite(path, content) {
-      this.fsWriteSync(path, content);
-    },
-    fsStatSync(path) {
-      const result = requestSync('fsStat', { path });
-      return result.stat ?? null;
-    },
-    async fsStat(path) {
-      return this.fsStatSync(path);
-    },
-    fsLstatSync(path) {
-      const result = requestSync('fsLstat', { path });
-      return result.stat ?? null;
-    },
-    fsReaddirSync(path) {
-      const result = requestSync('fsReaddir', { path });
-      return result.entries ?? [];
-    },
-    async fsReaddir(path) {
-      return this.fsReaddirSync(path);
-    },
-    fsMkdirSync(path, options = {}) {
-      requestSync('fsMkdir', {
-        path,
-        recursive: options?.recursive === true,
-      });
-    },
-    async fsMkdir(path, options = {}) {
-      this.fsMkdirSync(path, options);
-    },
-    fsUnlinkSync(path) {
-      requestSync('fsUnlink', { path });
-    },
-    fsRmdirSync(path) {
-      requestSync('fsRmdir', { path });
-    },
-    fsRenameSync(path, destination) {
-      requestSync('fsRename', { path, destination });
-    },
-    fsSymlinkSync(target, path) {
-      requestSync('fsSymlink', { target, path });
-    },
-    fsReadlinkSync(path) {
-      const result = requestSync('fsReadlink', { path });
-      return result.target ?? '';
-    },
-    fsSetattrSync(path, attr) {
-      requestSync('fsSetattr', { path, ...attr });
-    },
-    httpRequestSync(url, method = 'GET', headersJson = '{}', bodyBase64 = null) {
-      let headers;
-      try {
-        headers = JSON.parse(headersJson);
-      } catch (error) {
-        throw new Error(`invalid Python httpRequest headers JSON: ${formatError(error)}`);
-      }
-      return JSON.stringify(requestSync('httpRequest', {
-        url,
-        httpMethod: method,
-        headers,
-        bodyBase64,
-      }));
-    },
-    dnsLookupSync(hostname, family = null) {
-      return JSON.stringify(requestSync('dnsLookup', { hostname, family }));
-    },
-    subprocessRunSync(
-      command,
-      argsJson = '[]',
-      cwd = null,
-      envJson = '{}',
-      shell = false,
-      maxBuffer = null,
-    ) {
-      let args;
-      let env;
-      try {
-        args = JSON.parse(argsJson);
-        env = JSON.parse(envJson);
-      } catch (error) {
-        throw new Error(`invalid Python subprocessRun payload JSON: ${formatError(error)}`);
-      }
-      return JSON.stringify(requestSync('subprocessRun', {
-        command,
-        args,
-        cwd,
-        env,
-        shell,
-        maxBuffer,
-      }));
-    },
-    dispose() {
-      try {
-        closeSync(requestFd);
-      } catch {
-        // Ignore repeated-close shutdown races.
-      }
-      try {
-        closeSync(responseFd);
-      } catch {
-        // Ignore repeated-close shutdown races.
-      }
-    },
-  };
-}
-
-function accessDenied(subject) {
-  const error = new Error(`${subject} is not available in the secure-exec guest Python runtime`);
-  error.code = ACCESS_DENIED_CODE;
-  return error;
-}
-
-const PYTHON_GUEST_IMPORT_BLOCKLIST_SOURCE = String.raw`
-import builtins as _agentos_builtins
-import sys as _agentos_sys
-import types as _agentos_types
-
-try:
-    import agentos_internal_js as _agentos_safe_js
-    import agentos_internal_pyodide_js as _agentos_safe_pyodide_js
-    import agentos_internal_pyodide_js_api as _agentos_safe_pyodide_js_api
-except Exception:
-    _agentos_safe_js = None
-    _agentos_safe_pyodide_js = None
-    _agentos_safe_pyodide_js_api = None
-
-def _agentos_raise_access_denied(module_name):
-    raise RuntimeError(f"{module_name} is not available in the secure-exec guest Python runtime")
-
-class _SecureExecBlockedModule(_agentos_types.ModuleType):
-    def __init__(self, name):
-        super().__init__(name)
-        self.__dict__['__all__'] = ()
-
-    def __getattr__(self, _name):
-        _agentos_raise_access_denied(self.__name__)
-
-    def __dir__(self):
-        return []
-
-_agentos_blocked_modules = {
-    _agentos_module_name: _SecureExecBlockedModule(_agentos_module_name)
-    for _agentos_module_name in ('js', 'pyodide_js')
-}
-
-_agentos_safe_modules = {
-    "js": _agentos_safe_js,
-    "pyodide_js": _agentos_safe_pyodide_js,
-    "pyodide_js._api": _agentos_safe_pyodide_js_api,
-}
-
-_agentos_original_import = _agentos_builtins.__import__
-
-def _agentos_allow_internal_js(globals):
-    module_name = str((globals or {}).get("__name__", ""))
-    return module_name.startswith("micropip") or module_name.startswith("pyodide.http")
-
-def _agentos_import(name, globals=None, locals=None, fromlist=(), level=0):
-    if name in _agentos_safe_modules and _agentos_safe_modules[name] is not None and _agentos_allow_internal_js(globals):
-        return _agentos_safe_modules[name]
-    if name in _agentos_blocked_modules:
-        return _agentos_blocked_modules[name]
-    return _agentos_original_import(name, globals, locals, fromlist, level)
-
-_agentos_builtins.__import__ = _agentos_import
-_agentos_sys.modules.update(_agentos_blocked_modules)
-`;
-
-const PYTHON_KERNEL_RPC_SHIMS_SOURCE = String.raw`
-import base64 as _agentos_base64
-import json as _agentos_json
-import socket as _agentos_socket
-import subprocess as _agentos_subprocess
-import sys as _agentos_sys
-import types as _agentos_types
-import urllib.error as _agentos_urllib_error
-import urllib.request as _agentos_urllib_request
-from email.message import Message as _SecureExecMessage
-from js import __agentOSPythonVfsRpc as _agentos_rpc
-
-def _agentos_raise_from_error(error):
-    if not isinstance(error, dict):
-        raise RuntimeError(str(error))
-    message = str(error.get("message", "secure-exec Python bridge request failed"))
-    if "EACCES:" in message:
-        raise PermissionError(message)
-    if "command not found" in message:
-        raise FileNotFoundError(message)
-    raise OSError(message)
-
-def _agentos_normalize_family(family):
-    if family in (None, 0):
-        return None
-    if family == _agentos_socket.AF_INET:
-        return 4
-    if family == _agentos_socket.AF_INET6:
-        return 6
-    return None
-
-def _agentos_dns_lookup(hostname, family=None):
-    try:
-        result = _agentos_json.loads(
-            _agentos_rpc.dnsLookupSync(hostname, _agentos_normalize_family(family))
-        )
-    except Exception as error:
-        _agentos_raise_from_error({"message": str(error)})
-    addresses = result.get("addresses") or []
-    if not addresses:
-        raise OSError(f"secure-exec DNS lookup returned no addresses for {hostname}")
-    return addresses
-
-class _SecureExecHttpResponse:
-    def __init__(self, payload):
-        self.status = int(payload.get("status", 0))
-        self.reason = str(payload.get("reason", ""))
-        self.url = str(payload.get("url", ""))
-        self._body = _agentos_base64.b64decode(payload.get("bodyBase64", "") or "")
-        headers = payload.get("headers") or {}
-        self.headers = _SecureExecMessage()
-        for name, values in headers.items():
-          for value in values:
-            self.headers.add_header(str(name), str(value))
-
-    def read(self, amt=-1):
-        if amt is None or amt < 0:
-            return self._body
-        return self._body[:amt]
-
-    def getcode(self):
-        return self.status
-
-    def info(self):
-        return self.headers
-
-    def close(self):
-        return None
-
-    def __enter__(self):
-        return self
-
-    def __exit__(self, exc_type, exc, tb):
-        self.close()
-        return False
-
-class _SecureExecPyfetchResponse:
-    def __init__(self, payload):
-        self.status = int(payload.get("status", 0))
-        self.status_text = str(payload.get("reason", ""))
-        self.url = str(payload.get("url", ""))
-        self.headers = {str(name): ", ".join(values) for name, values in (payload.get("headers") or {}).items()}
-        self._body = _agentos_base64.b64decode(payload.get("bodyBase64", "") or "")
-
-    async def bytes(self):
-        return self._body
-
-    async def string(self):
-        return self._body.decode("utf-8", errors="replace")
-
-    def raise_for_status(self):
-        if self.status >= 400:
-            raise RuntimeError(f"{self.status} {self.status_text}")
-
-def _agentos_extract_request_parts(url_or_request, data=None):
-    if isinstance(url_or_request, _agentos_urllib_request.Request):
-        request = url_or_request
-        url = request.full_url
-        method = request.get_method()
-        headers = dict(request.header_items())
-        payload = request.data if data is None else data
-    else:
-        url = str(url_or_request)
-        method = "POST" if data is not None else "GET"
-        headers = {}
-        payload = data
-    body_base64 = None
-    if payload is not None:
-        if isinstance(payload, str):
-            payload = payload.encode("utf-8")
-        body_base64 = _agentos_base64.b64encode(payload).decode("ascii")
-    return url, method, headers, body_base64
-
-def _agentos_http_request(url_or_request, data=None):
-    url, method, headers, body_base64 = _agentos_extract_request_parts(url_or_request, data)
-    try:
-        payload = _agentos_json.loads(
-            _agentos_rpc.httpRequestSync(url, method, _agentos_json.dumps(headers), body_base64)
-        )
-    except Exception as error:
-        _agentos_raise_from_error({"message": str(error)})
-    response = _SecureExecHttpResponse(payload)
-    if response.status >= 400:
-        raise _agentos_urllib_error.HTTPError(
-            url,
-            response.status,
-            response.reason,
-            response.headers,
-            response,
-        )
-    return response
-
-async def _agentos_pyfetch(url, **kwargs):
-    headers = dict(kwargs.get("headers") or {})
-    method = str(kwargs.get("method", "GET")).upper()
-    body = kwargs.get("body")
-    if body is not None and isinstance(body, str):
-        body = body.encode("utf-8")
-    body_base64 = None if body is None else _agentos_base64.b64encode(body).decode("ascii")
-    try:
-        payload = _agentos_json.loads(
-            _agentos_rpc.httpRequestSync(
-                str(url),
-                method,
-                _agentos_json.dumps(headers),
-                body_base64,
-            )
-        )
-    except Exception as error:
-        _agentos_raise_from_error({"message": str(error)})
-    return _SecureExecPyfetchResponse(payload)
-
-def _agentos_urlopen(url, data=None, timeout=None, *args, **kwargs):
-    del timeout, args, kwargs
-    return _agentos_http_request(url, data=data)
-
-_agentos_urllib_request.urlopen = _agentos_urlopen
-
-try:
-    import pyodide.http as _agentos_pyodide_http
-except ModuleNotFoundError:
-    _agentos_pyodide_http = None
-else:
-    _agentos_pyodide_http.pyfetch = _agentos_pyfetch
-
-_agentos_original_getaddrinfo = _agentos_socket.getaddrinfo
-
-def _agentos_getaddrinfo(host, port, family=0, type=0, proto=0, flags=0):
-    if host in (None, "", "0.0.0.0", "::"):
-        return _agentos_original_getaddrinfo(host, port, family, type, proto, flags)
-    addresses = _agentos_dns_lookup(host, family)
-    socktype = type or _agentos_socket.SOCK_STREAM
-    protocol = proto or 0
-    normalized_family = family or _agentos_socket.AF_INET
-    results = []
-    for address in addresses:
-        entry_family = _agentos_socket.AF_INET6 if ":" in address else _agentos_socket.AF_INET
-        if family not in (0, entry_family):
-            continue
-        if entry_family == _agentos_socket.AF_INET6:
-            sockaddr = (address, port, 0, 0)
-        else:
-            sockaddr = (address, port)
-        results.append((entry_family, socktype, protocol, "", sockaddr))
-    if not results:
-        raise OSError(f"secure-exec DNS lookup returned no matching addresses for {host}")
-    return results
-
-def _agentos_gethostbyname(host):
-    return _agentos_dns_lookup(host, _agentos_socket.AF_INET)[0]
-
-_agentos_socket.getaddrinfo = _agentos_getaddrinfo
-_agentos_socket.gethostbyname = _agentos_gethostbyname
-
-# Raw socket bridge: back socket.socket() with the host (outbound TCP + UDP).
-# Reads poll (the host uses a short read timeout) so the synchronous RPC never
-# stalls the sidecar; the loop below re-polls to emulate blocking semantics.
-import base64 as _agentos_base64
-import time as _agentos_time
-import errno as _agentos_errno
-
-_agentos_original_socket_class = _agentos_socket.socket
-
-def _agentos_socket_oserror(exc):
-    # Host errors arrive as "E<NAME>: message"; recover the errno so Python
-    # code can catch ConnectionRefusedError/TimeoutError/etc. (OSError picks the
-    # right subclass from the errno).
-    message = str(getattr(exc, "message", None) or exc)
-    head = message.split(":", 1)[0].strip()
-    code = getattr(_agentos_errno, head, 0) if head[:1] == "E" and head.isupper() else 0
-    return OSError(code or 0, message)
-
-def _agentos_socket_rpc(call):
-    try:
-        return _agentos_json.loads(call())
-    except OSError:
-        raise
-    except Exception as exc:
-        raise _agentos_socket_oserror(exc) from None
-
-class _SecureExecSocket:
-    def __init__(self, family=None, type=None, proto=0, fileno=None):
-        self.family = family if family is not None else _agentos_socket.AF_INET
-        self.type = type if type is not None else _agentos_socket.SOCK_STREAM
-        self.proto = proto
-        self._timeout = None  # None blocks; 0 is non-blocking; >0 is a deadline
-        self._id = None
-        self._closed = False
-        self._is_udp = self.type == _agentos_socket.SOCK_DGRAM
-        if self._is_udp:
-            resp = _agentos_socket_rpc(lambda: _agentos_rpc.udpCreateSync())
-            self._id = int(resp["socketId"])
-
-    def connect(self, address):
-        host, port = address[0], address[1]
-        resp = _agentos_socket_rpc(lambda: _agentos_rpc.socketConnectSync(str(host), int(port)))
-        self._id = int(resp["socketId"])
-
-    def connect_ex(self, address):
-        try:
-            self.connect(address)
-            return 0
-        except OSError as exc:
-            return exc.errno or 1
-
-    def _ensure_id(self):
-        if self._id is None:
-            raise OSError(9, "Bad file descriptor")
-        return self._id
-
-    def send(self, data, flags=0):
-        sid = self._ensure_id()
-        b64 = _agentos_base64.b64encode(bytes(data)).decode("ascii")
-        resp = _agentos_socket_rpc(lambda: _agentos_rpc.socketSendSync(sid, b64))
-        return int(resp.get("bytesSent", len(data)))
-
-    def sendall(self, data, flags=0):
-        payload = bytes(data)
-        total = 0
-        while total < len(payload):
-            total += self.send(payload[total:], flags)
-        return None
-
-    def _poll(self, bufsize, recv_fn):
-        deadline = None
-        if self._timeout is not None and self._timeout > 0:
-            deadline = _agentos_time.monotonic() + self._timeout
-        backoff = 0.0
-        while True:
-            resp = _agentos_socket_rpc(lambda: recv_fn(int(bufsize)))
-            if resp.get("closed"):
-                return b"", resp
-            data = resp.get("dataBase64") or ""
-            if data:
-                return _agentos_base64.b64decode(data), resp
-            if resp.get("timedOut"):
-                if self._timeout == 0:
-                    raise BlockingIOError(11, "Resource temporarily unavailable")
-                if deadline is not None and _agentos_time.monotonic() >= deadline:
-                    raise _agentos_socket.timeout("timed out")
-                # Guest-side capped backoff so a blocking recv on a silent socket
-                # doesn't hammer the host loop with back-to-back polls.
-                if backoff:
-                    _agentos_time.sleep(backoff)
-                backoff = min(backoff * 2 if backoff else 0.005, 0.05)
-                continue
-            return b"", resp
-
-    def recv(self, bufsize, flags=0):
-        sid = self._ensure_id()
-        data, _ = self._poll(bufsize, lambda n: _agentos_rpc.socketRecvSync(sid, n))
-        return data
-
-    def sendto(self, data, *args):
-        address = args[-1]
-        host, port = address[0], address[1]
-        if self._id is None:
-            resp = _agentos_socket_rpc(lambda: _agentos_rpc.udpCreateSync())
-            self._id = int(resp["socketId"])
-        b64 = _agentos_base64.b64encode(bytes(data)).decode("ascii")
-        resp = _agentos_socket_rpc(
-            lambda: _agentos_rpc.udpSendtoSync(self._id, str(host), int(port), b64)
-        )
-        return int(resp.get("bytesSent", len(data)))
-
-    def recvfrom(self, bufsize, flags=0):
-        sid = self._ensure_id()
-        data, resp = self._poll(bufsize, lambda n: _agentos_rpc.udpRecvfromSync(sid, n))
-        addr = (resp.get("host", ""), int(resp.get("port", 0))) if resp else ("", 0)
-        return data, addr
-
-    def settimeout(self, value):
-        self._timeout = value
-
-    def gettimeout(self):
-        return self._timeout
-
-    def setblocking(self, flag):
-        self._timeout = None if flag else 0.0
-
-    def setsockopt(self, *args, **kwargs):
-        return None
-
-    def getsockopt(self, *args, **kwargs):
-        return 0
-
-    def fileno(self):
-        return self._id if self._id is not None else -1
-
-    def getpeername(self):
-        return ("", 0)
-
-    def getsockname(self):
-        return ("0.0.0.0", 0)
-
-    def close(self):
-        if self._closed:
-            return
-        self._closed = True
-        if self._id is not None:
-            try:
-                _agentos_rpc.socketCloseSync(self._id)
-            except Exception:
-                pass
-            self._id = None
-
-    def __enter__(self):
-        return self
-
-    def __exit__(self, *exc):
-        self.close()
-
-    def __del__(self):
-        try:
-            self.close()
-        except Exception:
-            pass
-
-def _agentos_socket_factory(family=-1, type=-1, proto=0, fileno=None):
-    fam = family if family != -1 else _agentos_socket.AF_INET
-    typ = type if type != -1 else _agentos_socket.SOCK_STREAM
-    if (
-        fileno is None
-        and fam in (_agentos_socket.AF_INET, _agentos_socket.AF_INET6)
-        and typ in (_agentos_socket.SOCK_STREAM, _agentos_socket.SOCK_DGRAM)
-    ):
-        return _SecureExecSocket(fam, typ, proto)
-    return _agentos_original_socket_class(family, type, proto, fileno)
-
-_agentos_socket.socket = _agentos_socket_factory
-
-class _SecureExecRequestsResponse:
-    def __init__(self, payload):
-        self.status_code = int(payload.get("status", 0))
-        self.reason = str(payload.get("reason", ""))
-        self.url = str(payload.get("url", ""))
-        self.headers = {str(name): ", ".join(values) for name, values in (payload.get("headers") or {}).items()}
-        self.content = _agentos_base64.b64decode(payload.get("bodyBase64", "") or "")
-        self.encoding = "utf-8"
-        self.ok = self.status_code < 400
-
-    @property
-    def text(self):
-        return self.content.decode(self.encoding, errors="replace")
-
-    def json(self):
-        return _agentos_json.loads(self.text)
-
-    def raise_for_status(self):
-        if self.status_code >= 400:
-            raise RuntimeError(f"{self.status_code} {self.reason}")
-
-class _SecureExecRequestsSession:
-    def request(self, method, url, **kwargs):
-        headers = dict(kwargs.get("headers") or {})
-        data = kwargs.get("data")
-        if data is not None and isinstance(data, str):
-            data = data.encode("utf-8")
-        body_base64 = None if data is None else _agentos_base64.b64encode(data).decode("ascii")
-        try:
-            payload = _agentos_json.loads(
-                _agentos_rpc.httpRequestSync(
-                    str(url),
-                    str(method).upper(),
-                    _agentos_json.dumps(headers),
-                    body_base64,
-                )
-            )
-        except Exception as error:
-            _agentos_raise_from_error({"message": str(error)})
-        return _SecureExecRequestsResponse(payload)
-
-    def get(self, url, **kwargs):
-        return self.request("GET", url, **kwargs)
-
-def _agentos_install_requests_module():
-    module = _agentos_types.ModuleType("requests")
-    session = _SecureExecRequestsSession
-    module.Session = session
-    module.Response = _SecureExecRequestsResponse
-    module.request = lambda method, url, **kwargs: session().request(method, url, **kwargs)
-    module.get = lambda url, **kwargs: session().get(url, **kwargs)
-    module.exceptions = _agentos_types.SimpleNamespace(RequestException=RuntimeError)
-    _agentos_sys.modules["requests"] = module
-
-try:
-    import requests as _agentos_requests
-except ModuleNotFoundError:
-    _agentos_install_requests_module()
-else:
-    _agentos_requests.Session = _SecureExecRequestsSession
-    _agentos_requests.Response = _SecureExecRequestsResponse
-    _agentos_requests.request = lambda method, url, **kwargs: _SecureExecRequestsSession().request(method, url, **kwargs)
-    _agentos_requests.get = lambda url, **kwargs: _SecureExecRequestsSession().get(url, **kwargs)
-
-class _SecureExecCompletedProcess:
-    def __init__(self, args, returncode, stdout, stderr):
-        self.args = args
-        self.returncode = returncode
-        self.stdout = stdout
-        self.stderr = stderr
-
-def _agentos_subprocess_run(args, *, capture_output=False, check=False, cwd=None, env=None, input=None, shell=False, text=False, encoding="utf-8", errors="strict", stdout=None, stderr=None, timeout=None, **kwargs):
-    del kwargs, stdout, stderr, timeout
-    if isinstance(args, (str, bytes)):
-        command = args.decode("utf-8") if isinstance(args, bytes) else args
-        argv = []
-    else:
-        values = list(args)
-        if not values:
-            raise ValueError("subprocess.run args must not be empty")
-        command = str(values[0])
-        argv = [str(value) for value in values[1:]]
-    merged_env = dict(env or {})
-    resolved_cwd = cwd if cwd is not None else _agentos_os.environ.get("PWD")
-    if input is not None:
-        raise NotImplementedError("subprocess.run input is not supported in the secure-exec Python runtime")
-    try:
-        payload = _agentos_json.loads(
-            _agentos_rpc.subprocessRunSync(
-                command,
-                _agentos_json.dumps(argv),
-                resolved_cwd,
-                _agentos_json.dumps(merged_env),
-                bool(shell),
-            )
-        )
-    except Exception as error:
-        _agentos_raise_from_error({"message": str(error)})
-    stdout_bytes = payload.get("stdout", "").encode("utf-8")
-    stderr_bytes = payload.get("stderr", "").encode("utf-8")
-    if text or encoding is not None:
-        stdout_value = stdout_bytes.decode(encoding or "utf-8", errors=errors)
-        stderr_value = stderr_bytes.decode(encoding or "utf-8", errors=errors)
-    else:
-        stdout_value = stdout_bytes
-        stderr_value = stderr_bytes
-    result = _SecureExecCompletedProcess(
-        args,
-        int(payload.get("exitCode", 1)),
-        stdout_value if capture_output else None,
-        stderr_value if capture_output else None,
-    )
-    if check and result.returncode != 0:
-        raise _agentos_subprocess.CalledProcessError(
-            result.returncode,
-            args,
-            output=result.stdout,
-            stderr=result.stderr,
-        )
-    return result
-
-_agentos_subprocess.run = _agentos_subprocess_run
-`;
-
-function hardenProperty(target, key, value) {
-  try {
-    Object.defineProperty(target, key, {
-      value,
-      writable: false,
-      configurable: false,
-    });
-  } catch (error) {
-    try {
-      target[key] = value;
-      if (target[key] === value) {
-        return;
-      }
-    } catch {
-      // Fall through to the original hardening error.
-    }
-    throw new Error(`Failed to harden property ${String(key)}`, { cause: error });
-  }
-}
-
-function normalizeBuiltin(specifier) {
-  if (typeof specifier !== 'string') {
-    return null;
-  }
-
-  return specifier.startsWith('node:') ? specifier.slice('node:'.length) : specifier;
-}
-
-function installPythonGuestImportBlocklist(pyodide) {
-  if (typeof pyodide?.runPython !== 'function') {
-    return;
-  }
-
-  pyodide.runPython(PYTHON_GUEST_IMPORT_BLOCKLIST_SOURCE);
-}
-
-function buildPythonRuntimeEnv() {
-  const runtimeEnv = {};
-  for (const name of PYTHON_RUNTIME_ENV_NAMES) {
-    if (typeof process.env[name] === 'string') {
-      runtimeEnv[name] = process.env[name];
-    }
-  }
-  return runtimeEnv;
-}
-
-function installPythonRuntimeEnv(pyodide) {
-  if (typeof pyodide?.runPython !== 'function') {
-    return;
-  }
-
-  const runtimeEnv = buildPythonRuntimeEnv();
-
-  pyodide.runPython(`
-import json as _agentos_json
-import os as _agentos_os
-
-for _agentos_key, _agentos_value in _agentos_json.loads(${JSON.stringify(JSON.stringify(runtimeEnv))}).items():
-    _agentos_os.environ[_agentos_key] = _agentos_value
-`);
-}
-
-function installPythonKernelRpcShims(pyodide) {
-  if (typeof pyodide?.runPython !== 'function' || !globalThis.__agentOSPythonVfsRpc) {
-    return;
-  }
-
-  pyodide.runPython(PYTHON_KERNEL_RPC_SHIMS_SOURCE);
-}
-
-function installPythonMicropipCompat(pyodide) {
-  if (typeof pyodide?.registerJsModule !== 'function') {
-    return;
-  }
-
-  const abortSignalAny = (signals) => {
-    const values = Array.from(signals ?? []);
-    if (typeof AbortSignal?.any === 'function') {
-      return AbortSignal.any(values);
-    }
-
-    const controller = new AbortController();
-    for (const signal of values) {
-      if (!signal) {
-        continue;
-      }
-      if (signal.aborted) {
-        controller.abort(signal.reason);
-        return controller.signal;
-      }
-      signal.addEventListener?.(
-        'abort',
-        () => {
-          if (!controller.signal.aborted) {
-            controller.abort(signal.reason);
-          }
-        },
-        { once: true },
-      );
-    }
-    return controller.signal;
-  };
-
-  pyodide.registerJsModule('agentos_internal_js', {
-    AbortController,
-    AbortSignal,
-    Object,
-    Request,
-    fetch: globalThis.fetch,
-  });
-  const pyodideApiCompat = {
-    abortSignalAny,
-    install: pyodide?._api?.install,
-    loadBinaryFile: pyodide?._api?.loadBinaryFile,
-    lockfile_info: pyodide?._api?.lockfile_info,
-    lockfile_packages: pyodide?._api?.lockfile_packages,
-  };
-  pyodide.registerJsModule('agentos_internal_pyodide_js', {
-    loadedPackages: pyodide.loadedPackages,
-    loadPackage: pyodide.loadPackage?.bind(pyodide),
-    lockfileBaseUrl: pyodide?._api?.config?.packageBaseUrl ?? '',
-    _api: pyodideApiCompat,
-  });
-  pyodide.registerJsModule('agentos_internal_pyodide_js_api', pyodideApiCompat);
-}
-
-function installPythonGuestPreloadHardening(bridge = null) {
-  if (originalRequire) {
-    hardenProperty(globalThis, 'require', () => {
-      throw accessDenied('require');
-    });
-  }
-
-  if (originalFetch) {
-    const restrictedFetch = async (resource, init = {}) => {
-      const request = typeof Request !== 'undefined' && resource instanceof Request ? resource : null;
-      const candidate =
-        typeof resource === 'string'
-          ? resource
-          : resource instanceof URL
-            ? resource.href
-            : request?.url;
-
-      let url;
-      try {
-        url = new URL(String(candidate ?? ''));
-      } catch {
-        throw accessDenied('network access');
-      }
-
-      if (url.protocol === 'data:' || url.protocol === 'file:') {
-        emitPythonDebug('HTTP_DEBUG', `fetch:passthrough:${url.href}`);
-        return originalFetch(resource, init);
-      }
-
-      if ((url.protocol === 'http:' || url.protocol === 'https:') && bridge) {
-        const method = (init.method ?? request?.method ?? 'GET').toUpperCase();
-        const headers = normalizeFetchHeaders(init.headers ?? request?.headers);
-        const bodyBase64 = await normalizeFetchBody(init.body ?? null);
-        emitPythonDebug('HTTP_DEBUG', `fetch:start:${method}:${url.href}`);
-        const payload = JSON.parse(
-          bridge.httpRequestSync(url.href, method, JSON.stringify(headers), bodyBase64),
-        );
-        emitPythonDebug(
-          'HTTP_DEBUG',
-          `fetch:ok:${payload.status ?? 0}:${url.href}`,
-        );
-        const responseBody = Buffer.from(payload.bodyBase64 ?? '', 'base64');
-        return new Response(responseBody, {
-          status: payload.status,
-          statusText: payload.reason,
-          headers: payload.headers ?? {},
-        });
-      }
-
-      if (url.protocol !== 'data:' && url.protocol !== 'file:') {
-        throw accessDenied(`network access to ${url.protocol}`);
-      }
-      return originalFetch(resource, init);
-    };
-
-    try {
-      hardenProperty(globalThis, 'fetch', restrictedFetch);
-    } catch {
-      // The shared JS runtime may have already sealed fetch with its own restrictions.
-    }
-  }
-}
-
-function installPythonGuestProcessHardening() {
-  if (!ALLOW_PROCESS_BINDINGS) {
-    hardenProperty(process, 'binding', () => {
-      throw accessDenied('process.binding');
-    });
-    hardenProperty(process, '_linkedBinding', () => {
-      throw accessDenied('process._linkedBinding');
-    });
-    hardenProperty(process, 'dlopen', () => {
-      throw accessDenied('process.dlopen');
-    });
-  }
-
-  if (originalGetBuiltinModule) {
-    hardenProperty(process, 'getBuiltinModule', (specifier) => {
-      const normalized = normalizeBuiltin(specifier);
-      if (normalized && DENIED_BUILTINS.has(normalized)) {
-        throw accessDenied(`node:${normalized}`);
-      }
-      return originalGetBuiltinModule(specifier);
-    });
-  }
-}
-
-function installPythonGuestLoaderHooks() {
-  const assetRoot = readRunnerEnv(ASSET_ROOT_ENV);
-  if (!assetRoot || !register) {
-    return;
-  }
-
-  register(new URL('./loader.mjs', import.meta.url), import.meta.url);
-}
-
-function installPythonVfsRpcBridge() {
-  const bridge = createPythonBridgeRpcBridge() ?? createPythonFdRpcBridge();
-  if (!bridge) {
-    return null;
-  }
-
-  hardenProperty(globalThis, '__agentOSPythonVfsRpc', bridge);
-  return bridge;
-}
-
-function installPythonWorkspaceFs(pyodide, bridge) {
-  if (!bridge) {
-    return;
-  }
-
-  const { FS, ERRNO_CODES } = pyodide;
-  if (!FS?.mount || !FS?.filesystems?.MEMFS || !ERRNO_CODES) {
-    return;
-  }
-
-  const MEMFS = FS.filesystems.MEMFS;
-  const memfsDirNodeOps = MEMFS.ops_table.dir.node;
-  const memfsDirStreamOps = MEMFS.ops_table.dir.stream;
-  const memfsFileNodeOps = MEMFS.ops_table.file.node;
-  const memfsFileStreamOps = MEMFS.ops_table.file.stream;
-  const memfsLinkNodeOps = MEMFS.ops_table.link.node;
-  const workspaceDirStreamOps = memfsDirStreamOps;
-
-  function joinGuestPath(parentPath, name) {
-    return parentPath === '/' ? `/${name}` : `${parentPath}/${name}`;
-  }
-
-  function nodeGuestPath(node) {
-    return node.agentOSGuestPath || node.mount?.mountpoint || '/workspace';
-  }
-
-  function createFsError(error) {
-    if (error instanceof FS.ErrnoError) {
-      return error;
-    }
-
-    const diagnostic = `${error?.code || ''} ${error?.message || ''} ${error?.stack || ''}`;
-    const message = diagnostic.toLowerCase();
-    let errno = ERRNO_CODES.EIO;
-    if (/permission denied|access denied|denied/.test(message)) {
-      errno = ERRNO_CODES.EACCES;
-    } else if (/read-only|erofs/.test(message)) {
-      errno = ERRNO_CODES.EROFS;
-    } else if (/not a directory|enotdir/.test(message)) {
-      errno = ERRNO_CODES.ENOTDIR;
-    } else if (/is a directory|eisdir/.test(message)) {
-      errno = ERRNO_CODES.EISDIR;
-    } else if (/exists|already exists|eexist/.test(message)) {
-      errno = ERRNO_CODES.EEXIST;
-    } else if (/not found|no such file|enoent/.test(message)) {
-      errno = ERRNO_CODES.ENOENT;
-    }
-
-    return new FS.ErrnoError(errno);
-  }
-
-  function withFsErrors(operation) {
-    try {
-      return operation();
-    } catch (error) {
-      throw createFsError(error);
-    }
-  }
-
-  function updateNodeFromRemoteStat(node, stat) {
-    if (!stat) {
-      throw new FS.ErrnoError(ERRNO_CODES.ENOENT);
-    }
-
-    node.mode = stat.mode;
-    node.timestamp = Date.now();
-    if (FS.isFile(stat.mode) && !node.agentOSDirty) {
-      node.agentOSRemoteSize = stat.size;
-    }
-  }
-
-  function createWorkspaceNode(parent, name, mode, dev, guestPath) {
-    const node = MEMFS.createNode(parent, name, mode, dev);
-    node.agentOSGuestPath = guestPath;
-    node.agentOSDirty = false;
-    node.agentOSLoaded = FS.isDir(mode);
-    node.agentOSRemoteSize = 0;
-    if (FS.isDir(mode)) {
-      node.node_ops = workspaceDirNodeOps;
-      node.stream_ops = workspaceDirStreamOps;
-    } else if (FS.isLink(mode)) {
-      node.node_ops = workspaceLinkNodeOps;
-    } else if (FS.isFile(mode)) {
-      node.node_ops = workspaceFileNodeOps;
-      node.stream_ops = workspaceFileStreamOps;
-    }
-    return node;
-  }
-
-  function syncDirectory(node) {
-    const guestPath = nodeGuestPath(node);
-    const entries = withFsErrors(() => bridge.fsReaddirSync(guestPath));
-    const remoteNames = new Set(entries);
-
-    for (const name of Object.keys(node.contents || {})) {
-      if (remoteNames.has(name)) {
-        continue;
-      }
-
-      const child = node.contents[name];
-      if (FS.isDir(child.mode)) {
-        memfsDirNodeOps.rmdir(node, name);
-      } else {
-        memfsDirNodeOps.unlink(node, name);
-      }
-    }
-
-    for (const name of entries) {
-      const childPath = joinGuestPath(guestPath, name);
-      // lstat (don't follow) so a host symlink is created as a link node.
-      const stat = withFsErrors(() => bridge.fsLstatSync(childPath));
-      const existing = node.contents[name];
-
-      if (existing) {
-        const existingIsDir = FS.isDir(existing.mode);
-        const remoteIsDir = Boolean(stat?.isDirectory);
-        if (existingIsDir !== remoteIsDir) {
-          if (existingIsDir) {
-            memfsDirNodeOps.rmdir(node, name);
-          } else {
-            memfsDirNodeOps.unlink(node, name);
-          }
-        } else {
-          existing.agentOSGuestPath = childPath;
-          updateNodeFromRemoteStat(existing, stat);
-          if (FS.isFile(existing.mode) && !existing.agentOSDirty) {
-            existing.agentOSLoaded = false;
-          }
-          continue;
-        }
-      }
-
-      const mode = stat?.mode ?? (stat?.isDirectory ? 0o040755 : 0o100644);
-      const child = createWorkspaceNode(node, name, mode, 0, childPath);
-      updateNodeFromRemoteStat(child, stat);
-    }
-  }
-
-  function loadFileContents(node) {
-    if (node.agentOSDirty) {
-      return;
-    }
-
-    const stat = withFsErrors(() => bridge.fsStatSync(nodeGuestPath(node)));
-    updateNodeFromRemoteStat(node, stat);
-    const contentBase64 = withFsErrors(() => bridge.fsReadSync(nodeGuestPath(node)));
-    const bytes = Uint8Array.from(Buffer.from(contentBase64, 'base64'));
-    node.contents = bytes;
-    node.usedBytes = bytes.length;
-    node.agentOSLoaded = true;
-    node.agentOSRemoteSize = bytes.length;
-  }
-
-  function persistFile(node) {
-    const contents = node.contents ? MEMFS.getFileDataAsTypedArray(node) : new Uint8Array(0);
-    withFsErrors(() => bridge.fsWriteSync(nodeGuestPath(node), contents));
-    node.agentOSDirty = false;
-    node.agentOSLoaded = true;
-    node.agentOSRemoteSize = contents.length;
-    node.timestamp = Date.now();
-  }
-
-  function makeStat(node, stat) {
-    const mode = stat?.mode ?? node.mode;
-    const size = FS.isDir(mode) ? 4096 : (node.agentOSDirty ? node.usedBytes : (stat?.size ?? node.usedBytes ?? 0));
-    const timestamp = new Date(node.timestamp || Date.now());
-
-    return {
-      dev: 1,
-      ino: node.id,
-      mode,
-      nlink: FS.isDir(mode) ? 2 : 1,
-      uid: 0,
-      gid: 0,
-      rdev: 0,
-      size,
-      atime: timestamp,
-      mtime: timestamp,
-      ctime: timestamp,
-      blksize: 4096,
-      blocks: Math.max(1, Math.ceil(size / 4096)),
-    };
-  }
-
-  function toEpochMs(value) {
-    if (value == null) return null;
-    if (typeof value === 'number') return value;
-    if (typeof value.getTime === 'function') return value.getTime();
-    return null;
-  }
-
-  // Propagate chmod/chown/utimes from an Emscripten `setattr` into the host VFS.
-  // (size/truncate is handled via the dirty-write path, not here.)
-  function propagateSetattrToHost(node, attr) {
-    if (!attr) return;
-    const payload = {};
-    if (attr.mode != null) payload.mode = attr.mode & 0o7777;
-    // `os.chown(p, uid, -1)` keeps a side; never forward a negative sentinel
-    // (it would saturate to 0 = root on the host).
-    if (attr.uid != null && attr.uid >= 0) payload.uid = attr.uid;
-    if (attr.gid != null && attr.gid >= 0) payload.gid = attr.gid;
-    const atimeMs = toEpochMs(attr.atime ?? attr.timestamp);
-    const mtimeMs = toEpochMs(attr.mtime ?? attr.timestamp);
-    if (atimeMs != null && mtimeMs != null) {
-      payload.atimeMs = Math.trunc(atimeMs);
-      payload.mtimeMs = Math.trunc(mtimeMs);
-    }
-    if (Object.keys(payload).length === 0) return;
-    withFsErrors(() => bridge.fsSetattrSync(nodeGuestPath(node), payload));
-  }
-
-  const workspaceLinkNodeOps = {
-    // A symlink node reports itself (lstat semantics), not its target — so use
-    // the in-memory link mode rather than a host stat (which follows the link).
-    getattr(node) {
-      return makeStat(node, null);
-    },
-    setattr(node, attr) {
-      // Host first: if the host op fails (e.g. read-only root) it throws before
-      // we mutate the in-isolate node, so the two views stay consistent.
-      propagateSetattrToHost(node, attr);
-      memfsLinkNodeOps.setattr(node, attr);
-    },
-    readlink(node) {
-      return withFsErrors(() => bridge.fsReadlinkSync(nodeGuestPath(node)));
-    },
-  };
-
-  const workspaceFileNodeOps = {
-    getattr(node) {
-      const stat = node.agentOSDirty
-        ? null
-        : withFsErrors(() => bridge.fsStatSync(nodeGuestPath(node)));
-      if (stat) {
-        updateNodeFromRemoteStat(node, stat);
-      }
-      return makeStat(node, stat);
-    },
-    setattr(node, attr) {
-      // Host first (see link setattr) so a failed host op leaves the in-isolate
-      // node untouched.
-      propagateSetattrToHost(node, attr);
-      memfsFileNodeOps.setattr(node, attr);
-      if (attr?.size != null) {
-        node.agentOSDirty = true;
-        node.agentOSLoaded = true;
-      }
-    },
-  };
-
-  const workspaceFileStreamOps = {
-    llseek(stream, offset, whence) {
-      return memfsFileStreamOps.llseek(stream, offset, whence);
-    },
-    read(stream, buffer, offset, length, position) {
-      if (!stream.node.agentOSLoaded && !stream.node.agentOSDirty) {
-        loadFileContents(stream.node);
-      }
-      return memfsFileStreamOps.read(stream, buffer, offset, length, position);
-    },
-    write(stream, buffer, offset, length, position, canOwn) {
-      if (!stream.node.agentOSLoaded && !stream.node.agentOSDirty) {
-        loadFileContents(stream.node);
-      }
-      const written = memfsFileStreamOps.write(stream, buffer, offset, length, position, canOwn);
-      stream.node.agentOSDirty = true;
-      persistFile(stream.node);
-      return written;
-    },
-    mmap(stream, length, position, prot, flags) {
-      if (!stream.node.agentOSLoaded && !stream.node.agentOSDirty) {
-        loadFileContents(stream.node);
-      }
-      return memfsFileStreamOps.mmap(stream, length, position, prot, flags);
-    },
-    msync(stream, buffer, offset, length, mmapFlags) {
-      const result = memfsFileStreamOps.msync(stream, buffer, offset, length, mmapFlags);
-      stream.node.agentOSDirty = true;
-      persistFile(stream.node);
-      return result;
-    },
-  };
-
-  const workspaceDirNodeOps = {
-    getattr(node) {
-      const stat = withFsErrors(() => bridge.fsStatSync(nodeGuestPath(node)));
-      updateNodeFromRemoteStat(node, stat);
-      return makeStat(node, stat);
-    },
-    setattr(node, attr) {
-      // Host first (see link setattr).
-      propagateSetattrToHost(node, attr);
-      memfsDirNodeOps.setattr(node, attr);
-    },
-    lookup(parent, name) {
-      syncDirectory(parent);
-      try {
-        return memfsDirNodeOps.lookup(parent, name);
-      } catch (error) {
-        if (!(error instanceof FS.ErrnoError) || error.errno !== ERRNO_CODES.ENOENT) {
-          throw error;
-        }
-
-        const guestPath = joinGuestPath(nodeGuestPath(parent), name);
-        // lstat (don't follow) so a directly-looked-up host symlink is a link node.
-        const stat = withFsErrors(() => bridge.fsLstatSync(guestPath));
-        const child = createWorkspaceNode(parent, name, stat.mode, 0, guestPath);
-        updateNodeFromRemoteStat(child, stat);
-        return child;
-      }
-    },
-    mknod(parent, name, mode, dev) {
-      const guestPath = joinGuestPath(nodeGuestPath(parent), name);
-      const node = createWorkspaceNode(parent, name, mode, dev, guestPath);
-      if (FS.isDir(mode)) {
-        withFsErrors(() => bridge.fsMkdirSync(guestPath, { recursive: false }));
-      } else if (FS.isFile(mode)) {
-        node.contents = new Uint8Array(0);
-        node.usedBytes = 0;
-        node.agentOSDirty = true;
-        persistFile(node);
-      }
-      return node;
-    },
-    rename(oldNode, newDir, newName) {
-      const source = nodeGuestPath(oldNode);
-      const destination = joinGuestPath(nodeGuestPath(newDir), newName);
-      withFsErrors(() => bridge.fsRenameSync(source, destination));
-      // `nodeGuestPath` reads the stored path, so retarget the node before it
-      // moves in the in-memory tree; children re-derive on the next sync.
-      oldNode.agentOSGuestPath = destination;
-      memfsDirNodeOps.rename(oldNode, newDir, newName);
-    },
-    unlink(parent, name) {
-      withFsErrors(() =>
-        bridge.fsUnlinkSync(joinGuestPath(nodeGuestPath(parent), name)),
-      );
-      if (parent.contents && Object.prototype.hasOwnProperty.call(parent.contents, name)) {
-        memfsDirNodeOps.unlink(parent, name);
-      }
-    },
-    rmdir(parent, name) {
-      withFsErrors(() =>
-        bridge.fsRmdirSync(joinGuestPath(nodeGuestPath(parent), name)),
-      );
-      if (parent.contents && Object.prototype.hasOwnProperty.call(parent.contents, name)) {
-        memfsDirNodeOps.rmdir(parent, name);
-      }
-    },
-    readdir(node) {
-      syncDirectory(node);
-      return memfsDirNodeOps.readdir(node);
-    },
-    symlink(parent, newName, oldPath) {
-      const guestPath = joinGuestPath(nodeGuestPath(parent), newName);
-      withFsErrors(() => bridge.fsSymlinkSync(oldPath, guestPath));
-      const node = createWorkspaceNode(parent, newName, 0o120777, 0, guestPath);
-      node.link = oldPath;
-      node.usedBytes = oldPath.length;
-      return node;
-    },
-  };
-
-  const overlayBackend = {
-    mount(mount) {
-      const root = MEMFS.mount(mount);
-      root.agentOSGuestPath = mount.mountpoint;
-      root.agentOSDirty = false;
-      root.agentOSLoaded = true;
-      root.agentOSRemoteSize = 0;
-      root.node_ops = workspaceDirNodeOps;
-      root.stream_ops = workspaceDirStreamOps;
-      return root;
-    },
-  };
-
-  function mountVfsAt(guestPath) {
-    try {
-      FS.mkdir(guestPath);
-    } catch (error) {
-      if (!(error instanceof FS.ErrnoError) || error.errno !== ERRNO_CODES.EEXIST) {
-        throw error;
-      }
-    }
-    FS.mount(overlayBackend, {}, guestPath);
-  }
-
-  // Mount the kernel VFS over the VM's real top-level directories so Python sees
-  // the whole guest filesystem — `/tmp`, `/etc`, `/root`, `/usr`, … — exactly
-  // like the JS/WASM runtimes and `vm.readFile()`. Pyodide owns a handful of
-  // paths in its own in-isolate FS; keep those on MEMFS so the interpreter, its
-  // stdlib, and its devices keep working.
-  const RESERVED_ROOTS = new Set([
-    'lib',
-    'dev',
-    'proc',
-    'home',
-    '__agentos_pyodide',
-    '__agentos_pyodide_cache',
-  ]);
-  let rootEntries = [];
-  try {
-    rootEntries = bridge.fsReaddirSync('/');
-  } catch (error) {
-    // A nested Python child can't reach the kernel VFS (it gets a recoverable
-    // "unavailable" error and falls back to the in-isolate FS) — that case is
-    // expected and quiet. Any other failure means the top-level process lost the
-    // VM root, which is worth surfacing.
-    if (!/not available for nested child/.test(String(error?.message ?? error))) {
-      writeStream(
-        process.stderr,
-        `agentos: could not bridge the VM filesystem into Python (${formatError(error)}); only /workspace will be visible\n`,
-      );
-    }
-    rootEntries = [];
-  }
-  for (const name of rootEntries) {
-    if (RESERVED_ROOTS.has(name)) {
-      continue;
-    }
-    const childPath = `/${name}`;
-    let isDir = false;
-    try {
-      isDir = Boolean(bridge.fsStatSync(childPath)?.isDirectory);
-    } catch {
-      isDir = false;
-    }
-    if (!isDir) {
-      continue;
-    }
-    try {
-      mountVfsAt(childPath);
-    } catch {
-      // A path Pyodide owns or cannot shadow — skip it rather than abort boot.
-    }
-  }
-  // /workspace stays available for backward compatibility even if the VM root
-  // does not advertise it.
-  if (!rootEntries.includes('workspace')) {
-    mountVfsAt('/workspace');
-  }
-}
-
-async function readLockFileContents(indexPath, indexURL) {
-  const { path: lockFilePath, url: lockFileUrl } = resolvePyodideResource(
-    indexPath,
-    indexURL,
-    'pyodide-lock.json',
-  );
-  try {
-    if (typeof lockFilePath === 'string' && lockFilePath.startsWith('/') && bridgeLoadFileSync) {
-      return callBridgeSync(bridgeLoadFileSync, [lockFilePath]);
-    }
-    return await readFile(lockFilePath, 'utf8');
-  } catch (error) {
-    throw wrapPythonStartupError('lock file readFile', {
-      indexPath,
-      indexURL,
-      lockFileUrl,
-      lockFilePath,
-    }, error);
-  }
-}
-
-function installPythonStdin(pyodide) {
-  if (typeof pyodide?.setStdin !== 'function') {
-    return;
-  }
-
-  function readFromKernelStdin(buffer) {
-    while (true) {
-      if (bridgePythonStdinRead) {
-        const response = callBridgeSync(bridgePythonStdinRead, [buffer.length, 100]);
-        if (response === PYTHON_STDIN_DONE_SENTINEL) {
-          return 0;
-        }
-
-        const dataBase64 = typeof response === 'string' ? response : '';
-        if (dataBase64.length === 0) {
-          continue;
-        }
-
-        const chunk = Buffer.from(dataBase64, 'base64');
-        const target = Buffer.from(buffer.buffer, buffer.byteOffset, buffer.byteLength);
-        chunk.copy(target, 0, 0, Math.min(chunk.length, target.length));
-        return Math.min(chunk.length, buffer.length);
-      }
-
-      const response = callBridgeSync(bridgeKernelStdinRead, [buffer.length, 100]);
-      if (response?.done) {
-        return 0;
-      }
-
-      const dataBase64 = typeof response?.dataBase64 === 'string' ? response.dataBase64 : '';
-      if (dataBase64.length === 0) {
-        continue;
-      }
-
-      const chunk = Buffer.from(dataBase64, 'base64');
-      const target = Buffer.from(buffer.buffer, buffer.byteOffset, buffer.byteLength);
-      chunk.copy(target, 0, 0, Math.min(chunk.length, target.length));
-      return Math.min(chunk.length, buffer.length);
-    }
-  }
-
-  pyodide.setStdin({
-    isatty: false,
-    read(buffer) {
-      if (bridgeKernelStdinRead) {
-        return readFromKernelStdin(buffer);
-      }
-      return readSync(STDIN_FD, buffer, 0, buffer.length, null);
-    },
-  });
-}
-
-function applyPythonArgv(pyodide) {
-  const argvJson = readRunnerEnv(PYTHON_ARGV_ENV);
-  if (argvJson == null) {
-    return;
-  }
-  let argv;
-  try {
-    argv = JSON.parse(argvJson);
-  } catch {
-    return;
-  }
-  if (!Array.isArray(argv)) {
-    return;
-  }
-  const normalized = argv.map((value) => String(value));
-  pyodide.globals.set('__agentos_argv', pyodide.toPy(normalized));
-  try {
-    pyodide.runPython('import sys as _agentos_sys_argv\n_agentos_sys_argv.argv = list(__agentos_argv)\ndel _agentos_sys_argv');
-  } finally {
-    pyodide.globals.delete('__agentos_argv');
-  }
-}
-
-// Drains the guest stdin stream to EOF and returns it as text. Used for
-// `python -` (and piped programs), where stdin IS the program body.
-function readProgramFromStdin() {
-  const chunks = [];
-  const CHUNK = 65536;
-  if (bridgePythonStdinRead) {
-    while (true) {
-      const response = callBridgeSync(bridgePythonStdinRead, [CHUNK, 100]);
-      if (response === PYTHON_STDIN_DONE_SENTINEL) {
-        break;
-      }
-      const dataBase64 = typeof response === 'string' ? response : '';
-      if (dataBase64.length === 0) {
-        continue;
-      }
-      chunks.push(Buffer.from(dataBase64, 'base64'));
-    }
-  } else if (bridgeKernelStdinRead) {
-    while (true) {
-      const response = callBridgeSync(bridgeKernelStdinRead, [CHUNK, 100]);
-      if (response?.done) {
-        break;
-      }
-      const dataBase64 = typeof response?.dataBase64 === 'string' ? response.dataBase64 : '';
-      if (dataBase64.length === 0) {
-        continue;
-      }
-      chunks.push(Buffer.from(dataBase64, 'base64'));
-    }
-  } else {
-    const buffer = Buffer.alloc(CHUNK);
-    while (true) {
-      let bytesRead = 0;
-      try {
-        bytesRead = readSync(STDIN_FD, buffer, 0, buffer.length, null);
-      } catch {
-        break;
-      }
-      if (bytesRead === 0) {
-        break;
-      }
-      chunks.push(Buffer.from(buffer.subarray(0, bytesRead)));
-    }
-  }
-  return Buffer.concat(chunks).toString('utf8');
-}
-
-// A persistent, kernel-VFS-backed site-packages. The default Pyodide
-// site-packages lives in the per-process in-isolate MEMFS, so anything installed
-// there vanishes when the process exits. This directory lives on the VM
-// filesystem (via the kernel VFS), so `pip install` survives across separate
-// `python` invocations and is visible to other processes — just like a real
-// `site-packages`. It is prepended to `sys.path` on every boot.
-const PYTHON_VFS_SITE_PACKAGES = '/root/.agentos/site-packages';
-
-function installPythonVfsSitePackages(pyodide) {
-  if (typeof pyodide?.runPython !== 'function') {
-    return;
-  }
-  try {
-    pyodide.globals.set('__agentos_vfs_site', PYTHON_VFS_SITE_PACKAGES);
-    pyodide.runPython(
-      'import os as _os, sys as _sys\n' +
-        'try:\n' +
-        '    _os.makedirs(__agentos_vfs_site, exist_ok=True)\n' +
-        '    if __agentos_vfs_site not in _sys.path:\n' +
-        // Append (not prepend): the stdlib + bundled packages stay first, so
-        // hot imports resolve from the fast in-isolate FS and only genuinely
-        // pip-installed packages incur a VFS lookup, and a VFS package can't
-        // shadow the stdlib.
-        '        _sys.path.append(__agentos_vfs_site)\n' +
-        // Best-effort: if the VFS site-packages can't be created (e.g. a
-        // read-only `/root`), persistence is simply unavailable — pip still
-        // works in-process. Degrade quietly rather than spam stderr.
-        'except OSError:\n' +
-        '    pass\n' +
-        'finally:\n' +
-        '    del _os, _sys',
-    );
-  } catch (error) {
-    writeStream(process.stderr, `agentos: VFS site-packages setup failed: ${formatError(error)}\n`);
-  } finally {
-    try {
-      pyodide.globals.delete('__agentos_vfs_site');
-    } catch {}
-  }
-}
-
-// `pip` / `python -m pip`: emulate the common pip CLI via Pyodide's micropip,
-// which fetches wheels through the runner's kernel-backed fetch (so egress is
-// governed by the VM network policy, never an ambient host fetch). Installed
-// packages are copied into the persistent VFS site-packages so they survive the
-// per-process interpreter and can be imported by a later `python` invocation.
-async function runPythonPip(pyodide) {
-  pyodide.globals.set('__agentos_vfs_site', PYTHON_VFS_SITE_PACKAGES);
-  try {
-    await pyodide.runPythonAsync(`
-import os, shutil, site, sys
-_agentos_pip_args = sys.argv[1:]
-if _agentos_pip_args and _agentos_pip_args[0] == "install":
-    import micropip
-    _agentos_pip_pkgs = [a for a in _agentos_pip_args[1:] if not a.startswith("-")]
-    if not _agentos_pip_pkgs:
-        print("ERROR: You must give at least one requirement to install", file=sys.stderr)
-        sys.exit(1)
-    _agentos_sp = site.getsitepackages()[0]
-    _agentos_before = set(os.listdir(_agentos_sp)) if os.path.isdir(_agentos_sp) else set()
-    await micropip.install(_agentos_pip_pkgs)
-    # Persist whatever micropip extracted into the in-isolate site-packages into
-    # the VFS-backed site-packages so it survives this process.
-    os.makedirs(__agentos_vfs_site, exist_ok=True)
-    _agentos_after = set(os.listdir(_agentos_sp)) if os.path.isdir(_agentos_sp) else set()
-    for _agentos_name in sorted(_agentos_after - _agentos_before):
-        _agentos_src = os.path.join(_agentos_sp, _agentos_name)
-        _agentos_dst = os.path.join(__agentos_vfs_site, _agentos_name)
-        if os.path.isdir(_agentos_src):
-            shutil.copytree(_agentos_src, _agentos_dst, dirs_exist_ok=True)
-        else:
-            shutil.copy2(_agentos_src, _agentos_dst)
-    print("Successfully installed " + " ".join(_agentos_pip_pkgs))
-elif _agentos_pip_args and _agentos_pip_args[0] in ("--version", "-V", "version"):
-    print("pip (agentOS micropip shim)")
-elif _agentos_pip_args and _agentos_pip_args[0] == "list":
-    import micropip
-    for _agentos_pkg in sorted(micropip.list()):
-        print(_agentos_pkg)
-else:
-    print("usage: pip install <package> [<package> ...]", file=sys.stderr)
-    sys.exit(2)
-`);
-  } finally {
-    try {
-      pyodide.globals.delete('__agentos_vfs_site');
-    } catch {}
-  }
-}
-
-// Minimal interactive REPL backed by the kernel stdin stream (sys.stdin via
-// setStdin). Prompts use the standard PS1/PS2; EOF on stdin ends the session.
-async function runPythonRepl(pyodide) {
-  await pyodide.runPythonAsync(`
-import sys
-from code import InteractiveConsole
-if not hasattr(sys, "ps1"):
-    sys.ps1 = ">>> "
-if not hasattr(sys, "ps2"):
-    sys.ps2 = "... "
-InteractiveConsole(locals={"__name__": "__main__", "__doc__": None}).interact(banner="", exitmsg="")
-`);
-}
-
-function resolvePythonSource(pyodide) {
-  const filePath = readRunnerEnv(PYTHON_FILE_ENV);
-  if (filePath != null) {
-    if (typeof pyodide?.FS?.readFile !== 'function') {
-      throw new Error(`Pyodide FS.readFile() is required to execute ${filePath}`);
-    }
-
-    return pyodide.FS.readFile(filePath, { encoding: 'utf8' });
-  }
-
-  return requiredEnv(PYTHON_CODE_ENV);
-}
-
-let pythonVfsRpcBridge = null;
-
-try {
-  const startupStarted = realPerformance.now();
-  emitWarmupStage('startup');
-  emitWarmupStage(`python-rpc-bridge:${bridgePythonRpc ? 'on' : 'off'}`);
-  const { indexPath, indexUrl } = resolveIndexLocation(requiredEnv(PYODIDE_INDEX_URL_ENV));
-  const bundledPackageBaseUrl = normalizeBaseUrl(indexPath);
-  const packageBaseUrl = normalizeBaseUrl(
-    readRunnerEnv(PYODIDE_PACKAGE_BASE_URL_ENV) ?? bundledPackageBaseUrl,
-  );
-  const packageCacheDir = resolvePyodidePackageCacheDir();
-  emitWarmupStage(`package-cache-dir:${packageCacheDir}`);
-  const prewarmOnly = readRunnerEnv(PYTHON_PREWARM_ONLY_ENV) === '1';
-  const preloadPackages = parsePreloadPackages(readRunnerEnv(PYTHON_PRELOAD_PACKAGES_ENV));
-  const lockFileContents = await readLockFileContents(indexPath, indexUrl).catch((error) => {
-    throw wrapPythonStartupError('lock file read', { indexPath, indexUrl }, error);
-  });
-  emitWarmupStage('lock-file-ready');
-  const { url: pyodideModuleUrl } = resolvePyodideResource(indexPath, indexUrl, 'pyodide.mjs');
-  const restorePyodideShellCompat = installPyodideShellCompat();
-  const { loadPyodide } = await import(pyodideModuleUrl).catch((error) => {
-    throw wrapPythonStartupError('module import', { indexPath, indexUrl, pyodideModuleUrl }, error);
-  });
-  emitWarmupStage('module-imported');
-
-  if (typeof loadPyodide !== 'function') {
-    throw new Error(`pyodide.mjs at ${indexUrl} does not export loadPyodide()`);
-  }
-
-  if (prewarmOnly) {
-    const stdlibResource = resolvePyodideResource(indexPath, indexUrl, 'python_stdlib.zip');
-    const wasmResource = resolvePyodideResource(indexPath, indexUrl, 'pyodide.asm.wasm');
-    await readFile(stdlibResource.path);
-    await readFile(wasmResource.path);
-    restorePyodideShellCompat();
-    emitWarmupStage('prewarm-assets-ready');
-    emitPythonStartupMetrics({
-      prewarmOnly: true,
-      startupMs: realPerformance.now() - startupStarted,
-      loadPyodideMs: 0,
-      packageLoadMs: 0,
-      packageCount: 0,
-      source: 'prewarm',
-    });
-    process.exitCode = 0;
-  } else {
-  pythonVfsRpcBridge = installPythonVfsRpcBridge();
-  installPythonGuestPreloadHardening(pythonVfsRpcBridge);
-  mkdirSync(packageCacheDir, { recursive: true });
-  emitWarmupStage('before-load-pyodide');
-  const loadPyodideStarted = realPerformance.now();
-  const pyodide = await loadPyodide({
-    indexURL: indexPath,
-    lockFileContents,
-    packageBaseUrl: bundledPackageBaseUrl,
-    packageCacheDir,
-    env: buildPythonRuntimeEnv(),
-    stdout: writePyodideStdout,
-    stderr: (message) => writeStream(process.stderr, message),
-  }).catch((error) => {
-    throw wrapPythonStartupError(
-      'Pyodide bootstrap',
-      {
-        indexPath,
-        indexUrl,
-        packageBaseUrl,
-        bundledPackageBaseUrl,
-        packageCacheDir,
-        pyodideModuleUrl,
-      },
-      error,
-    );
-  });
-  restorePyodideShellCompat();
-  emitWarmupStage('after-load-pyodide');
-  const loadPyodideMs = realPerformance.now() - loadPyodideStarted;
-  let packageLoadMs = 0;
-
-  installPythonStdin(pyodide);
-  installPythonWorkspaceFs(pyodide, pythonVfsRpcBridge);
-  installPythonVfsSitePackages(pyodide);
-  installPythonGuestLoaderHooks();
-  if (pyodide?._api?.config) {
-    pyodide._api.config.packageBaseUrl = bundledPackageBaseUrl;
-    emitWarmupStage(`pyodide-package-base:${pyodide._api.config.packageBaseUrl}`);
-  }
-  const canLoadPackages = typeof pyodide?.loadPackage === 'function';
-  if (!canLoadPackages && preloadPackages.length > 0) {
-    throw new Error('Pyodide loadPackage() is required to preload Python packages');
-  }
-  if (canLoadPackages) {
-    emitWarmupStage('before-load-micropip');
-    await pyodide.loadPackage(['micropip']);
-    emitWarmupStage('after-load-micropip');
-    if (preloadPackages.length > 0) {
-      emitWarmupStage('before-load-preload-packages');
-      const packageLoadStarted = realPerformance.now();
-      await pyodide.loadPackage(preloadPackages);
-      packageLoadMs = realPerformance.now() - packageLoadStarted;
-      emitWarmupStage('after-load-preload-packages');
-    }
-  }
-  if (pyodide?._api?.config) {
-    pyodide._api.config.packageBaseUrl = packageBaseUrl;
-    emitWarmupStage(`micropip-package-base:${pyodide._api.config.packageBaseUrl}`);
-  }
-  installPythonMicropipCompat(pyodide);
-  installPythonKernelRpcShims(pyodide);
-  installPythonGuestProcessHardening();
-  installPythonGuestImportBlocklist(pyodide);
-  installPythonRuntimeEnv(pyodide);
-  applyPythonArgv(pyodide);
-  const moduleName = readRunnerEnv(PYTHON_MODULE_ENV);
-  const stdinProgram = readRunnerEnv(PYTHON_STDIN_PROGRAM_ENV) === '1';
-  const interactive = readRunnerEnv(PYTHON_INTERACTIVE_ENV) === '1';
-  const source = moduleName
-    ? `module:${moduleName}`
-    : stdinProgram
-      ? 'stdin'
-      : interactive
-        ? 'repl'
-        : readRunnerEnv(PYTHON_FILE_ENV) != null
-          ? 'file'
-          : 'inline';
-  emitPythonStartupMetrics({
-    prewarmOnly: false,
-    startupMs: realPerformance.now() - startupStarted,
-    loadPyodideMs,
-    packageLoadMs,
-    packageCount: preloadPackages.length,
-    source,
-  });
-  if (moduleName === 'pip') {
-    await runPythonPip(pyodide);
-  } else if (moduleName) {
-    pyodide.globals.set('__agentos_module', moduleName);
-    try {
-      await pyodide.runPythonAsync(
-        'import runpy\nrunpy.run_module(__agentos_module, run_name="__main__", alter_sys=True)',
-      );
-    } finally {
-      pyodide.globals.delete('__agentos_module');
-    }
-  } else if (stdinProgram) {
-    await pyodide.runPythonAsync(readProgramFromStdin());
-  } else if (interactive) {
-    await runPythonRepl(pyodide);
-  } else {
-    await pyodide.runPythonAsync(resolvePythonSource(pyodide));
-  }
-  }
-} catch (error) {
-  writeStream(process.stderr, formatError(error));
-  process.exitCode = 1;
-} finally {
-  pythonVfsRpcBridge?.dispose();
-  emitControlMessage({ type: 'python_exit', exitCode: process.exitCode ?? 0 });
-}
-process.exit(process.exitCode ?? 0);
diff --git a/crates/execution/assets/runners/wasi-module.js b/crates/execution/assets/runners/wasi-module.js
deleted file mode 100644
index baebd6ba7..000000000
--- a/crates/execution/assets/runners/wasi-module.js
+++ /dev/null
@@ -1,2686 +0,0 @@
-if (typeof globalThis !== "undefined" && typeof globalThis.__agentOSWasiModule === "undefined") {
-  // Per-backend host seam (C / convergence): native populates it from its own
-  // host globals (the `|| __agentOs*` fallbacks below); a non-native backend
-  // (the browser converged worker) can pre-set `globalThis.__agentOSWasiHost`
-  // with browser-provided equivalents so this same preview1 runner is shared.
-  const __agentOSWasiHost =
-    (typeof globalThis.__agentOSWasiHost === "object" &&
-      globalThis.__agentOSWasiHost) ||
-    {};
-  const __agentOSWasiRequireBuiltin =
-    __agentOSWasiHost.requireBuiltin ||
-    (typeof __agentOSRequireBuiltin !== "undefined"
-      ? __agentOSRequireBuiltin
-      : (name) => globalThis.require(name));
-  const __agentOSFs = () => __agentOSWasiRequireBuiltin("node:fs");
-  const __agentOSPath = () => __agentOSWasiRequireBuiltin("node:path");
-  const __agentOSCrypto = () => __agentOSWasiRequireBuiltin("node:crypto");
-  // Stdio sync-RPC bridge + fd-handle lookup come from the host seam (a
-  // non-native backend supplies browser equivalents); native falls back to its
-  // own host globals so behavior is unchanged.
-  // Lazy resolvers: the native host globals are populated AFTER this module is
-  // defined (per-execution), so resolve at call time, not at module-load.
-  const __agentOSWasiSyncRpc = () =>
-    __agentOSWasiHost.syncRpc ||
-    (typeof globalThis.__agentOSSyncRpc !== "undefined"
-      ? globalThis.__agentOSSyncRpc
-      : undefined);
-  const __agentOSWasiLookupFdHandle = () =>
-    __agentOSWasiHost.lookupFdHandle ||
-    (typeof globalThis.lookupFdHandle === "function"
-      ? globalThis.lookupFdHandle
-      : undefined);
-  const __agentOSWasiErrnoSuccess = 0;
-  const __agentOSWasiErrnoAcces = 2;
-  const __agentOSWasiErrnoBadf = 8;
-  const __agentOSWasiErrnoExist = 20;
-  const __agentOSWasiErrnoFault = 21;
-  const __agentOSWasiErrnoInval = 28;
-  const __agentOSWasiErrnoIo = 29;
-  const __agentOSWasiErrnoNoent = 44;
-  const __agentOSWasiErrnoNosys = 52;
-  const __agentOSWasiErrnoNotdir = 54;
-  const __agentOSWasiErrnoPipe = 64;
-  const __agentOSWasiErrnoRofs = 69;
-  const __agentOSWasiErrnoNotcapable = 76;
-  const __agentOSWasiErrnoXdev = 18;
-  const __agentOSWasiFiletypeUnknown = 0;
-  const __agentOSWasiFiletypeCharacterDevice = 2;
-  const __agentOSWasiFiletypeDirectory = 3;
-  const __agentOSWasiFiletypeRegularFile = 4;
-  const __agentOSWasiFiletypeSymbolicLink = 7;
-  const __agentOSWasiLookupSymlinkFollow = 1;
-  const __agentOSWasiOpenCreate = 1;
-  const __agentOSWasiOpenDirectory = 2;
-  const __agentOSWasiOpenExclusive = 4;
-  const __agentOSWasiOpenTruncate = 8;
-  const __agentOSWasiRightFdRead = 1n << 1n;
-  const __agentOSWasiRightFdWrite = 1n << 6n;
-  const __agentOSWasiDefaultRightsBase = 0xffffffffffffffffn;
-  const __agentOSWasiDefaultRightsInheriting = 0xffffffffffffffffn;
-  const __agentOSWasiWhenceSet = 0;
-  const __agentOSWasiWhenceCur = 1;
-  const __agentOSWasiWhenceEnd = 2;
-  // Read cap: a non-native backend provides it via the seam; native uses its
-  // build-substituted constant. The ternary short-circuits so the native-only
-  // placeholder token is never evaluated when the seam supplies a number.
-  const __agentOSWasmSyncReadLimitBytes =
-    typeof __agentOSWasiHost.syncReadLimitBytes === "number"
-      ? __agentOSWasiHost.syncReadLimitBytes
-      : __SECURE_EXEC_WASM_SYNC_READ_LIMIT_BYTES__;
-  const __agentOSKernelStdioSyncRpcEnabled = () =>
-    process?.env?.AGENTOS_WASI_STDIO_SYNC_RPC === "1";
-  const __agentOSWasiDebugEnabled = () => process?.env?.AGENTOS_WASM_WASI_DEBUG === "1";
-  const __agentOSWasiSyscallCountersEnabled = () =>
-    process?.env?.AGENTOS_WASI_SYSCALL_COUNTERS === "1";
-  const __agentOSWasiNow = () =>
-    typeof performance?.now === "function" ? performance.now() : Date.now();
-  const __agentOSWasiDebug = (message) => {
-    if (!__agentOSWasiDebugEnabled() || typeof process?.stderr?.write !== "function") {
-      return;
-    }
-    try {
-      process.stderr.write(`[secure-exec-wasi] ${message}\n`);
-    } catch {
-      // Ignore debug logging failures.
-    }
-  };
-
-  class WASI {
-    constructor(options = {}) {
-      this.args = Array.isArray(options.args) ? options.args.map((value) => String(value)) : [];
-      this.env =
-        options.env && typeof options.env === "object"
-          ? Object.fromEntries(
-              Object.entries(options.env).map(([key, value]) => [String(key), String(value)]),
-            )
-          : {};
-      this.preopens = options.preopens && typeof options.preopens === "object" ? options.preopens : {};
-      this.returnOnExit = options.returnOnExit === true;
-      this.instance = null;
-      this.nextFd = 3;
-      this.fsModule = null;
-      this.pathModule = null;
-      this.fdTable = new Map([
-        [0, { kind: "stdin", fdFlags: 0 }],
-        [1, { kind: "stdout", fdFlags: 0 }],
-        [2, { kind: "stderr", fdFlags: 0 }],
-      ]);
-      this.statCache = new Map();
-      this.syscallCountersEnabled = __agentOSWasiSyscallCountersEnabled();
-      for (const [guestPath, spec] of Object.entries(this.preopens)) {
-        const normalized = this._normalizePreopenSpec(spec);
-        if (!normalized) {
-          continue;
-        }
-        this.fdTable.set(this.nextFd++, {
-          kind: "preopen",
-          guestPath: String(guestPath),
-          hostPath: normalized.hostPath,
-          readOnly: normalized.readOnly,
-          rightsBase: normalized.rightsBase,
-          rightsInheriting: normalized.rightsInheriting,
-          fdFlags: 0,
-        });
-      }
-      this.wasiImport = {
-        args_get: (...args) => this._argsGet(...args),
-        args_sizes_get: (...args) => this._argsSizesGet(...args),
-        clock_time_get: (...args) => this._clockTimeGet(...args),
-        clock_res_get: (...args) => this._clockResGet(...args),
-        environ_get: (...args) => this._environGet(...args),
-        environ_sizes_get: (...args) => this._environSizesGet(...args),
-        fd_close: (...args) => this._fdClose(...args),
-        fd_fdstat_get: (...args) => this._fdFdstatGet(...args),
-        fd_fdstat_set_flags: (...args) => this._fdFdstatSetFlags(...args),
-        fd_filestat_get: (...args) => this._fdFilestatGet(...args),
-        fd_filestat_set_size: (...args) => this._fdFilestatSetSize(...args),
-        fd_prestat_dir_name: (...args) => this._fdPrestatDirName(...args),
-        fd_prestat_get: (...args) => this._fdPrestatGet(...args),
-        fd_pread: (...args) => this._fdPread(...args),
-        fd_pwrite: (...args) => this._fdPwrite(...args),
-        fd_readdir: (...args) => this._fdReaddir(...args),
-        fd_read: (...args) => this._fdRead(...args),
-        fd_seek: (...args) => this._fdSeek(...args),
-        fd_sync: (...args) => this._fdSync(...args),
-        fd_tell: (...args) => this._fdTell(...args),
-        fd_write: (...args) => this._fdWrite(...args),
-        path_create_directory: (...args) => this._pathCreateDirectory(...args),
-        path_filestat_get: (...args) => this._pathFilestatGet(...args),
-        path_link: (...args) => this._pathLink(...args),
-        path_open: (...args) => this._pathOpen(...args),
-        path_readlink: (...args) => this._pathReadlink(...args),
-        path_remove_directory: (...args) => this._pathRemoveDirectory(...args),
-        path_rename: (...args) => this._pathRename(...args),
-        path_symlink: (...args) => this._pathSymlink(...args),
-        path_unlink_file: (...args) => this._pathUnlinkFile(...args),
-        poll_oneoff: (...args) => this._pollOneoff(...args),
-        proc_exit: (...args) => this._procExit(...args),
-        random_get: (...args) => this._randomGet(...args),
-        sched_yield: (...args) => this._schedYield(...args),
-      };
-      this._installSyscallCounterWrappers();
-    }
-
-    _fs() {
-      if (!this.fsModule) {
-        this.fsModule = __agentOSFs();
-      }
-      return this.fsModule;
-    }
-
-    _path() {
-      if (!this.pathModule) {
-        this.pathModule = __agentOSPath();
-      }
-      return this.pathModule;
-    }
-
-    _recordWasiSyscallMetric(name, startedAt, details = {}) {
-      if (!this.syscallCountersEnabled || typeof process?.stderr?.write !== "function") {
-        return;
-      }
-      try {
-        const elapsedMs = __agentOSWasiNow() - startedAt;
-        process.stderr.write(
-          `__AGENTOS_WASI_SYSCALL_METRICS__:${JSON.stringify({
-            name,
-            elapsedMs,
-            ...details,
-          })}\n`,
-        );
-      } catch {
-        // Ignore metrics failures.
-      }
-    }
-
-    _measureWasiPhase(name, fn) {
-      if (!this.syscallCountersEnabled || !this._activeWasiMetric) {
-        return fn();
-      }
-      const startedAt = __agentOSWasiNow();
-      try {
-        return fn();
-      } finally {
-        const phases = (this._activeWasiMetric.phases ??= {});
-        phases[name] = (phases[name] ?? 0) + (__agentOSWasiNow() - startedAt);
-      }
-    }
-
-    _installSyscallCounterWrappers() {
-      if (!this.syscallCountersEnabled) {
-        return;
-      }
-      for (const name of [
-        "path_open",
-        "path_filestat_get",
-        "fd_filestat_get",
-        "fd_write",
-      ]) {
-        const original = this.wasiImport[name];
-        if (typeof original !== "function") {
-          continue;
-        }
-        this.wasiImport[name] = (...args) => {
-          const startedAt = __agentOSWasiNow();
-          const previousMetric = this._activeWasiMetric;
-          const activeMetric = { name, phases: {} };
-          this._activeWasiMetric = activeMetric;
-          let result;
-          try {
-            result = original(...args);
-          } finally {
-            this._activeWasiMetric = previousMetric;
-          }
-          const details = {
-            result,
-            fd: Number(args[0]) >>> 0,
-            iovsLen: name === "fd_write" ? Number(args[2]) >>> 0 : undefined,
-            phases: activeMetric.phases,
-          };
-          if (name === "path_filestat_get") {
-            try {
-              const target = this._readString(args[2], args[3]);
-              details.pathLen = target.length;
-              details.pathKind = target.startsWith("/")
-                ? "absolute"
-                : target.includes("/")
-                  ? "relative-nested"
-                  : "relative-child";
-              details.pathSample =
-                target.length > 120 ? `${target.slice(0, 120)}...` : target;
-            } catch {
-              // Leave path-shape fields absent if the guest pointer is invalid.
-            }
-          }
-          this._recordWasiSyscallMetric(name, startedAt, {
-            ...details,
-          });
-          return result;
-        };
-      }
-    }
-
-    start(instance) {
-      this.instance = instance;
-      try {
-        if (typeof instance?.exports?._start === "function") {
-          instance.exports._start();
-        }
-        return 0;
-      } catch (error) {
-        if (error && error.__agentOSWasiExit === true) {
-          return Number(error.code) >>> 0;
-        }
-        throw error;
-      }
-    }
-
-    _memoryView() {
-      const memory = this.instance?.exports?.memory;
-      if (!(memory instanceof WebAssembly.Memory)) {
-        throw new Error("WASI memory export is unavailable");
-      }
-      return new DataView(memory.buffer);
-    }
-
-    _memoryBytes() {
-      const memory = this.instance?.exports?.memory;
-      if (!(memory instanceof WebAssembly.Memory)) {
-        throw new Error("WASI memory export is unavailable");
-      }
-      return new Uint8Array(memory.buffer);
-    }
-
-    _boundedIovLength(iovs, iovsLen) {
-      const view = this._memoryView();
-      let length = 0;
-      for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-        const entryOffset = (Number(iovs) >>> 0) + index * 8;
-        length += view.getUint32(entryOffset + 4, true);
-        if (length > __agentOSWasmSyncReadLimitBytes) {
-          throw new RangeError(
-            `WASI read iov length ${length} exceeds ${__agentOSWasmSyncReadLimitBytes}`,
-          );
-        }
-      }
-      return length >>> 0;
-    }
-
-    // Read-side iov capacity, clamped (not thrown) to the sync read cap. A guest
-    // may legitimately offer a huge read buffer (e.g. iov_len 0xffffffc0 = "read
-    // up to ~4GB"); the runner reads only what is available, bounded by the cap,
-    // so the read allocation/RPC stays bounded without rejecting the read. Writes
-    // keep using _boundedIovLength (throwing) because their iov length is real
-    // data that must not be silently truncated.
-    _boundedReadLength(iovs, iovsLen) {
-      const view = this._memoryView();
-      let length = 0;
-      for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-        const entryOffset = (Number(iovs) >>> 0) + index * 8;
-        length += view.getUint32(entryOffset + 4, true);
-        if (length >= __agentOSWasmSyncReadLimitBytes) {
-          return __agentOSWasmSyncReadLimitBytes;
-        }
-      }
-      return length >>> 0;
-    }
-
-    _normalizeRights(value, fallback) {
-      try {
-        return BigInt.asUintN(64, BigInt(value));
-      } catch {
-        return fallback;
-      }
-    }
-
-    _normalizePreopenSpec(value) {
-      // Path-model seam (convergence item C): native maps guest paths to HOST
-      // paths (its preopen specs carry `hostPath`); a non-native backend with no
-      // host paths (the browser, whose `require("fs")` IS the kernel VFS) can
-      // supply `__agentOSWasiHost.normalizePreopen` to treat the guest/VFS path
-      // as the "hostPath" identity, so the same runner serves both.
-      if (typeof __agentOSWasiHost.normalizePreopen === "function") {
-        const seamNormalized = __agentOSWasiHost.normalizePreopen(value, {
-          defaultRightsBase: __agentOSWasiDefaultRightsBase,
-          defaultRightsInheriting: __agentOSWasiDefaultRightsInheriting,
-          normalizeRights: (rights, fallback) =>
-            this._normalizeRights(rights, fallback),
-        });
-        return seamNormalized ?? null;
-      }
-      if (typeof value === "string") {
-        return {
-          hostPath: String(value),
-          readOnly: false,
-          rightsBase: __agentOSWasiDefaultRightsBase,
-          rightsInheriting: __agentOSWasiDefaultRightsInheriting,
-        };
-      }
-      if (!value || typeof value !== "object" || typeof value.hostPath !== "string") {
-        return null;
-      }
-      return {
-        hostPath: String(value.hostPath),
-        readOnly: value.readOnly === true,
-        rightsBase: this._normalizeRights(
-          value.rightsBase,
-          __agentOSWasiDefaultRightsBase,
-        ),
-        rightsInheriting: this._normalizeRights(
-          value.rightsInheriting,
-          __agentOSWasiDefaultRightsInheriting,
-        ),
-      };
-    }
-
-    _descriptorRightsBase(entry) {
-      return this._normalizeRights(
-        entry?.rightsBase,
-        __agentOSWasiDefaultRightsBase,
-      );
-    }
-
-    _descriptorRightsInheriting(entry) {
-      return this._normalizeRights(
-        entry?.rightsInheriting,
-        __agentOSWasiDefaultRightsInheriting,
-      );
-    }
-
-    _hasWriteRights(rights) {
-      try {
-        return (BigInt(rights) & __agentOSWasiRightFdWrite) !== 0n;
-      } catch {
-        return true;
-      }
-    }
-
-    _writeUint32(ptr, value) {
-      try {
-        this._memoryView().setUint32(Number(ptr) >>> 0, Number(value) >>> 0, true);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        __agentOSWasiDebug(`writeUint32 failed ptr=${Number(ptr)} value=${Number(value)}`);
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _writeUint64(ptr, value) {
-      try {
-        this._memoryView().setBigUint64(Number(ptr) >>> 0, BigInt(value), true);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        __agentOSWasiDebug(`writeUint64 failed ptr=${Number(ptr)} value=${String(value)}`);
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _writeBytes(ptr, bytes) {
-      try {
-        this._memoryBytes().set(bytes, Number(ptr) >>> 0);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        __agentOSWasiDebug(`writeBytes failed ptr=${Number(ptr)} len=${bytes?.length ?? 0}`);
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _readBytes(ptr, len) {
-      const start = Number(ptr) >>> 0;
-      const end = start + (Number(len) >>> 0);
-      return Buffer.from(this._memoryBytes().slice(start, end));
-    }
-
-    _readString(ptr, len) {
-      return this._readBytes(ptr, len).toString("utf8");
-    }
-
-    _decodeSyncRpcBytes(value) {
-      if (value == null) {
-        return null;
-      }
-      if (typeof Buffer !== "undefined" && Buffer.isBuffer(value)) {
-        return value;
-      }
-      if (value instanceof Uint8Array) {
-        return Buffer.from(value);
-      }
-      if (ArrayBuffer.isView(value)) {
-        return Buffer.from(value.buffer, value.byteOffset, value.byteLength);
-      }
-      if (value instanceof ArrayBuffer) {
-        return Buffer.from(value);
-      }
-      if (
-        value &&
-        typeof value === "object" &&
-        value.__agentOSType === "bytes" &&
-        typeof value.base64 === "string"
-      ) {
-        return Buffer.from(value.base64, "base64");
-      }
-      return null;
-    }
-
-    _dequeuePipeBytes(pipe, maxBytes) {
-      if (!pipe || !Array.isArray(pipe.chunks) || pipe.chunks.length === 0) {
-        return Buffer.alloc(0);
-      }
-
-      let remaining = Math.max(0, Number(maxBytes) >>> 0);
-      if (remaining === 0) {
-        return Buffer.alloc(0);
-      }
-
-      const parts = [];
-      while (remaining > 0 && pipe.chunks.length > 0) {
-        const chunk = pipe.chunks[0];
-        if (!chunk || chunk.length === 0) {
-          pipe.chunks.shift();
-          continue;
-        }
-
-        if (chunk.length <= remaining) {
-          parts.push(chunk);
-          pipe.chunks.shift();
-          remaining -= chunk.length;
-          continue;
-        }
-
-        parts.push(chunk.subarray(0, remaining));
-        pipe.chunks[0] = chunk.subarray(remaining);
-        remaining = 0;
-      }
-
-      return Buffer.concat(parts);
-    }
-
-    _enqueuePipeBytes(pipe, bytes) {
-      if (!pipe || !Array.isArray(pipe.chunks)) {
-        return;
-      }
-      const chunk = Buffer.from(bytes ?? []);
-      if (chunk.length === 0) {
-        return;
-      }
-      pipe.chunks.push(chunk);
-    }
-
-    _pipeHasReaders(pipe) {
-      return (
-        (pipe?.readHandleCount ?? 0) > 0 ||
-        (pipe?.consumers?.size ?? 0) > 0
-      );
-    }
-
-    _flushPipeConsumers(pipe) {
-      if (
-        !pipe ||
-        typeof pipe.consumers?.entries !== "function" ||
-        !Array.isArray(pipe.chunks) ||
-        pipe.chunks.length === 0 ||
-        typeof globalThis?.__agentOSSyncRpc?.callSync !== "function"
-      ) {
-        return false;
-      }
-
-      let flushed = false;
-      while (pipe.chunks.length > 0) {
-        const chunk = pipe.chunks.shift();
-        if (!chunk || chunk.length === 0) {
-          continue;
-        }
-
-        for (const [consumerKey, consumer] of Array.from(pipe.consumers.entries())) {
-          if (!consumer || typeof consumer.childId !== "string") {
-            pipe.consumers.delete(consumerKey);
-            continue;
-          }
-          try {
-            __agentOSWasiSyncRpc().callSync("child_process.write_stdin", [
-              consumer.childId,
-              chunk,
-            ]);
-            flushed = true;
-          } catch {
-            pipe.consumers.delete(consumerKey);
-          }
-        }
-      }
-
-      return flushed;
-    }
-
-    _closePipeConsumers(pipe) {
-      if (
-        !pipe ||
-        typeof pipe.consumers?.entries !== "function" ||
-        typeof globalThis?.__agentOSSyncRpc?.callSync !== "function"
-      ) {
-        return false;
-      }
-
-      let closed = false;
-      for (const [consumerKey, consumer] of Array.from(pipe.consumers.entries())) {
-        if (!consumer || typeof consumer.childId !== "string") {
-          pipe.consumers.delete(consumerKey);
-          continue;
-        }
-        try {
-          __agentOSWasiSyncRpc().callSync("child_process.close_stdin", [
-            consumer.childId,
-          ]);
-          closed = true;
-        } catch {
-          // Ignore close errors during teardown.
-        }
-        pipe.consumers.delete(consumerKey);
-      }
-
-      return closed;
-    }
-
-    _pumpPipeProducers(pipe, waitMs) {
-      if (
-        !pipe ||
-        typeof pipe.producers?.entries !== "function" ||
-        typeof globalThis?.__agentOSSyncRpc?.callSync !== "function"
-      ) {
-        return false;
-      }
-
-      let processed = false;
-      for (const [producerKey, producer] of Array.from(pipe.producers.entries())) {
-        if (!producer || typeof producer.childId !== "string") {
-          pipe.producers.delete(producerKey);
-          continue;
-        }
-
-        let event = null;
-        try {
-          event = __agentOSWasiSyncRpc().callSync("child_process.poll", [
-            producer.childId,
-            Math.max(0, Number(waitMs) >>> 0),
-          ]);
-        } catch {
-          pipe.producers.delete(producerKey);
-          continue;
-        }
-
-        if (!event) {
-          continue;
-        }
-
-        processed = true;
-        const streamType =
-          producer.stream === "stderr" ? "stderr" : producer.stream === "stdout" ? "stdout" : null;
-        if ((event.type === "stdout" || event.type === "stderr") && event.type === streamType) {
-          const chunk = this._decodeSyncRpcBytes(event.data);
-          if (chunk && chunk.length > 0) {
-            pipe.chunks.push(Buffer.from(chunk));
-          }
-          continue;
-        }
-
-        if (event.type === "exit") {
-          pipe.producers.delete(producerKey);
-          if (pipe.producers.size === 0 && (pipe.writeHandleCount ?? 0) === 0) {
-            this._closePipeConsumers(pipe);
-          }
-          continue;
-        }
-      }
-
-      return processed;
-    }
-
-    _collectIovs(iovs, iovsLen) {
-      const totalLength = this._boundedIovLength(iovs, iovsLen);
-      const view = this._memoryView();
-      const chunks = [];
-      for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-        const entryOffset = (Number(iovs) >>> 0) + index * 8;
-        const ptr = view.getUint32(entryOffset, true);
-        const len = view.getUint32(entryOffset + 4, true);
-        chunks.push(this._readBytes(ptr, len));
-      }
-      return Buffer.concat(chunks, totalLength);
-    }
-
-    _writeToIovs(iovs, iovsLen, bytes) {
-      const view = this._memoryView();
-      const memory = this._memoryBytes();
-      let sourceOffset = 0;
-      for (let index = 0; index < (Number(iovsLen) >>> 0) && sourceOffset < bytes.length; index += 1) {
-        const entryOffset = (Number(iovs) >>> 0) + index * 8;
-        const ptr = view.getUint32(entryOffset, true);
-        const len = view.getUint32(entryOffset + 4, true);
-        const chunk = bytes.subarray(sourceOffset, sourceOffset + len);
-        memory.set(chunk, Number(ptr) >>> 0);
-        sourceOffset += chunk.length;
-      }
-      return sourceOffset;
-    }
-
-    _stringTable(values) {
-      return values.map((value) => Buffer.from(`${String(value)}\0`, "utf8"));
-    }
-
-    _writeStringTable(values, offsetsPtr, bufferPtr) {
-      try {
-        const view = this._memoryView();
-        const memory = this._memoryBytes();
-        let cursor = Number(bufferPtr) >>> 0;
-        for (let index = 0; index < values.length; index += 1) {
-          const bytes = values[index];
-          view.setUint32((Number(offsetsPtr) >>> 0) + index * 4, cursor, true);
-          memory.set(bytes, cursor);
-          cursor += bytes.length;
-        }
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        __agentOSWasiDebug(
-          `writeStringTable failed offsetsPtr=${Number(offsetsPtr)} bufferPtr=${Number(bufferPtr)} count=${values.length}`,
-        );
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _filetypeForStats(stats) {
-      if (!stats) {
-        return __agentOSWasiFiletypeUnknown;
-      }
-      const mode = Number(stats.mode);
-      if (Number.isFinite(mode)) {
-        switch (mode & 0o170000) {
-          case 0o040000:
-            return __agentOSWasiFiletypeDirectory;
-          case 0o100000:
-            return __agentOSWasiFiletypeRegularFile;
-          case 0o120000:
-            return __agentOSWasiFiletypeSymbolicLink;
-          case 0o020000:
-            return __agentOSWasiFiletypeCharacterDevice;
-        }
-      }
-      if (stats.isDirectory === true) {
-        return __agentOSWasiFiletypeDirectory;
-      }
-      if (stats.isSymbolicLink === true) {
-        return __agentOSWasiFiletypeSymbolicLink;
-      }
-      if (typeof stats.isDirectory === "function" && stats.isDirectory()) {
-        return __agentOSWasiFiletypeDirectory;
-      }
-      if (typeof stats.isFile === "function" && stats.isFile()) {
-        return __agentOSWasiFiletypeRegularFile;
-      }
-      if (typeof stats.isSymbolicLink === "function" && stats.isSymbolicLink()) {
-        return __agentOSWasiFiletypeSymbolicLink;
-      }
-      if (typeof stats.isCharacterDevice === "function" && stats.isCharacterDevice()) {
-        return __agentOSWasiFiletypeCharacterDevice;
-      }
-      if (stats.isDirectory === false && stats.isSymbolicLink === false) {
-        return __agentOSWasiFiletypeRegularFile;
-      }
-      return __agentOSWasiFiletypeUnknown;
-    }
-
-    _filetypeForDirent(dirent) {
-      if (!dirent || typeof dirent !== "object") {
-        return __agentOSWasiFiletypeUnknown;
-      }
-      if (typeof dirent.isDirectory === "function" && dirent.isDirectory()) {
-        return __agentOSWasiFiletypeDirectory;
-      }
-      if (typeof dirent.isFile === "function" && dirent.isFile()) {
-        return __agentOSWasiFiletypeRegularFile;
-      }
-      if (typeof dirent.isSymbolicLink === "function" && dirent.isSymbolicLink()) {
-        return __agentOSWasiFiletypeSymbolicLink;
-      }
-      if (typeof dirent.isCharacterDevice === "function" && dirent.isCharacterDevice()) {
-        return __agentOSWasiFiletypeCharacterDevice;
-      }
-      return __agentOSWasiFiletypeUnknown;
-    }
-
-    _clearStatCache() {
-      this.statCache?.clear?.();
-    }
-
-    _statCacheKey(resolved, follow) {
-      const path = typeof resolved?.guestPath === "string"
-        ? resolved.guestPath
-        : this._resolvedFsPath(resolved);
-      return typeof path === "string" ? `${follow ? "stat" : "lstat"}:${path}` : null;
-    }
-
-    _fdFiletype(entry) {
-      if (!entry) {
-        return __agentOSWasiFiletypeUnknown;
-      }
-      if (
-        entry.kind === "stdin" ||
-        entry.kind === "stdout" ||
-        entry.kind === "stderr"
-      ) {
-        return __agentOSWasiFiletypeCharacterDevice;
-      }
-      if (entry.kind === "preopen" || entry.kind === "directory") {
-        return __agentOSWasiFiletypeDirectory;
-      }
-      if (entry.kind === "symlink") {
-        return __agentOSWasiFiletypeSymbolicLink;
-      }
-      return __agentOSWasiFiletypeRegularFile;
-    }
-
-    _mapFsError(error) {
-      switch (error?.code) {
-        case "EACCES":
-        case "EPERM":
-          return __agentOSWasiErrnoAcces;
-        case "ENOENT":
-          return __agentOSWasiErrnoNoent;
-        case "ENOTDIR":
-          return __agentOSWasiErrnoNotdir;
-        case "EEXIST":
-          return __agentOSWasiErrnoExist;
-        case "EINVAL":
-          return __agentOSWasiErrnoInval;
-        case "EROFS":
-          return __agentOSWasiErrnoRofs;
-        case "EXDEV":
-          return __agentOSWasiErrnoXdev;
-        default:
-          return __agentOSWasiErrnoIo;
-      }
-    }
-
-    _descriptorEntry(fd) {
-      return this.fdTable.get(Number(fd) >>> 0) ?? null;
-    }
-
-    _localFdHandle(fd) {
-      // A non-native backend whose `realFd` values are not real host OS fds with
-      // their own kernel offset (the browser, whose fs descriptors are a JS
-      // handle table) disables local-fd passthrough so locally-opened files use
-      // the offset-aware file branches (fd_read/fd_write pass the tracked
-      // entry.offset as an explicit position) instead of host-passthrough reads
-      // that rely on a null position advancing a real fd. Native keeps passthrough
-      // so guest-opened fds can be shared with child processes.
-      if (__agentOSWasiHost.disableLocalFdPassthrough === true) {
-        return null;
-      }
-      const descriptor = Number(fd) >>> 0;
-      const entry = this._descriptorEntry(descriptor);
-      if (!entry || typeof entry.realFd !== "number") {
-        return null;
-      }
-      return {
-        kind: "host-passthrough",
-        targetFd: entry.realFd,
-        displayFd: Number(fd) >>> 0,
-        refCount: 1,
-        open: true,
-        readOnly: entry.readOnly === true,
-      };
-    }
-
-    _externalFdHandle(fd) {
-      const descriptor = Number(fd) >>> 0;
-      const localHandle = this._localFdHandle(descriptor);
-      if (localHandle) {
-        return localHandle;
-      }
-      try {
-        if (typeof lookupFdHandle === "function") {
-          return lookupFdHandle(descriptor) ?? null;
-        }
-      } catch {
-        // Fall through to other lookup paths.
-      }
-      try {
-        const __agentOSWasiFdHandleFn = __agentOSWasiLookupFdHandle();
-        if (typeof __agentOSWasiFdHandleFn === "function") {
-          return __agentOSWasiFdHandleFn(descriptor) ?? null;
-        }
-      } catch {
-        // Ignore missing global bridge helpers.
-      }
-      return null;
-    }
-
-    _descriptorHostPath(entry) {
-      if (!entry) {
-        return null;
-      }
-      if (typeof entry.hostPath === "string") {
-        return entry.hostPath;
-      }
-      if (typeof entry.realFd === "number") {
-        return __agentOSFs().readlinkSync(`/proc/self/fd/${entry.realFd}`);
-      }
-      return null;
-    }
-
-    _descriptorFsPath(entry) {
-      if (!entry) {
-        return null;
-      }
-      if (typeof entry.hostPath === "string" && entry.hostPath.length > 0) {
-        return entry.hostPath;
-      }
-      if (typeof entry.guestPath === "string" && entry.guestPath.length > 0) {
-        return entry.guestPath;
-      }
-      return null;
-    }
-
-    _sidecarManagedProcess() {
-      if (
-        typeof globalThis.__agentOSWasmInternalEnv?.AGENTOS_SANDBOX_ROOT ===
-          "string" &&
-        globalThis.__agentOSWasmInternalEnv.AGENTOS_SANDBOX_ROOT.length > 0
-      ) {
-        return true;
-      }
-      return (
-        typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-        process.env.AGENTOS_SANDBOX_ROOT.length > 0
-      );
-    }
-
-    _descriptorDirectoryFsPath(entry) {
-      if (
-        (entry?.kind === "preopen" || entry?.kind === "directory") &&
-        this._sidecarManagedProcess()
-      ) {
-        return this._descriptorGuestPath(entry);
-      }
-      return this._descriptorFsPath(entry);
-    }
-
-    _descriptorGuestPath(entry) {
-      if (!entry) {
-        return null;
-      }
-      const guestPath = typeof entry.guestPath === "string" ? entry.guestPath : null;
-      if (guestPath === ".") {
-        return this._currentGuestCwd();
-      }
-      if (typeof guestPath === "string" && guestPath.length > 0) {
-        return __agentOSPath().posix.normalize(guestPath);
-      }
-      return null;
-    }
-
-    _descriptorPreopenName(entry) {
-      if (!entry) {
-        return null;
-      }
-      const guestPath = typeof entry.guestPath === "string" ? entry.guestPath : null;
-      if (guestPath === ".") {
-        return this._descriptorGuestPath(entry);
-      }
-      if (typeof guestPath === "string" && guestPath.length > 0) {
-        return __agentOSPath().posix.normalize(guestPath);
-      }
-      return null;
-    }
-
-    _currentDirectoryPreopen() {
-      for (const entry of this.fdTable.values()) {
-        if (entry?.kind === "preopen" && entry.guestPath === ".") {
-          return entry;
-        }
-      }
-      return null;
-    }
-
-    _descriptorPathBase(entry, target) {
-      const baseGuestPath = this._descriptorGuestPath(entry);
-      if (typeof baseGuestPath !== "string") {
-        return null;
-      }
-      return {
-        entry,
-        guestPath: baseGuestPath,
-        hostPath: typeof entry?.hostPath === "string" ? entry.hostPath : null,
-      };
-    }
-
-    _hostPathExists(hostPath) {
-      return this._measureWasiPhase("hostPathExists", () => {
-        try {
-          __agentOSFs().statSync(hostPath);
-          return true;
-        } catch {
-          return false;
-        }
-      });
-    }
-
-    _createParentExists(guestPath, hostPath) {
-      const target =
-        this._sidecarManagedProcess() && typeof guestPath === "string"
-          ? guestPath
-          : hostPath;
-      if (typeof target !== "string") {
-        return false;
-      }
-      return this._measureWasiPhase("createParentExists", () => {
-        try {
-          __agentOSFs().statSync(__agentOSPath().dirname(target));
-          return true;
-        } catch {
-          return false;
-        }
-      });
-    }
-
-    _currentGuestCwd() {
-      const pwd =
-        typeof this.env?.PWD === "string" && this.env.PWD.startsWith("/")
-          ? this.env.PWD
-          : typeof this.env?.HOME === "string" && this.env.HOME.startsWith("/")
-            ? this.env.HOME
-            : "/";
-      return __agentOSPath().posix.normalize(pwd);
-    }
-
-    _resolveHostMappingForGuestPath(guestPath) {
-      return this._measureWasiPhase("resolveHostMapping", () => {
-        const normalized = __agentOSPath().posix.normalize(guestPath);
-        const mappings = [];
-        for (const entry of this.fdTable.values()) {
-          if (entry?.kind !== "preopen" || typeof entry.hostPath !== "string") {
-            continue;
-          }
-          const guestRoot = this._descriptorGuestPath(entry);
-          if (typeof guestRoot !== "string") {
-            continue;
-          }
-          mappings.push({
-            guestRoot,
-            hostPath: entry.hostPath,
-            readOnly: entry.readOnly === true,
-          });
-        }
-        mappings.sort((left, right) => right.guestRoot.length - left.guestRoot.length);
-
-        for (const mapping of mappings) {
-          const matchesRoot = mapping.guestRoot === "/" && normalized.startsWith("/");
-          const matchesNested =
-            normalized === mapping.guestRoot ||
-            normalized.startsWith(`${mapping.guestRoot}/`);
-          if (!matchesRoot && !matchesNested) {
-            continue;
-          }
-          const suffix =
-            normalized === mapping.guestRoot
-              ? ""
-              : mapping.guestRoot === "/"
-                ? normalized.slice(1)
-                : normalized.slice(mapping.guestRoot.length + 1);
-          return {
-            hostPath: suffix
-              ? __agentOSPath().join(mapping.hostPath, ...suffix.split("/"))
-              : mapping.hostPath,
-            readOnly: mapping.readOnly,
-          };
-        }
-
-        return null;
-      });
-    }
-
-    _resolveHostPathForGuestPath(guestPath) {
-      return this._resolveHostMappingForGuestPath(guestPath)?.hostPath ?? null;
-    }
-
-    _rootRelativeTargetPrefersCwd(target) {
-      const normalizedTarget = __agentOSPath().posix.normalize(target || ".");
-      if (normalizedTarget !== ".") {
-        return false;
-      }
-      return !this._rootRelativeTargetMatchesAbsoluteArg(target);
-    }
-
-    _rootRelativeTargetMatchesAbsoluteArg(target) {
-      const rootGuestPath = __agentOSPath().posix.resolve("/", target);
-      return this.args
-        .slice(1)
-        .some(
-          (arg) =>
-            typeof arg === "string" &&
-            arg.startsWith("/") &&
-            __agentOSPath().posix.normalize(arg) === rootGuestPath,
-        );
-    }
-
-    _rootRelativeTargetIsWithinAbsoluteArg(target) {
-      const rootGuestPath = __agentOSPath().posix.resolve("/", target);
-      return this.args
-        .slice(1)
-        .some((arg) => {
-          if (typeof arg !== "string" || !arg.startsWith("/")) {
-            return false;
-          }
-          const normalizedArg = __agentOSPath().posix.normalize(arg);
-          return (
-            rootGuestPath === normalizedArg ||
-            rootGuestPath.startsWith(`${normalizedArg}/`)
-          );
-        });
-    }
-
-    _resolveRootRelativePath(target, preferCreateParent = false) {
-      const rootGuestPath = __agentOSPath().posix.resolve("/", target);
-      const rootMapping = this._resolveHostMappingForGuestPath(rootGuestPath);
-      const rootHostPath = rootMapping?.hostPath ?? null;
-      const cwdGuestPath = this._currentGuestCwd();
-      if (cwdGuestPath !== "/") {
-        const cwdGuestTarget = __agentOSPath().posix.resolve(cwdGuestPath, target);
-        const cwdMapping = this._resolveHostMappingForGuestPath(cwdGuestTarget);
-        const cwdHostTarget = cwdMapping?.hostPath ?? null;
-        if (
-          typeof cwdHostTarget === "string" &&
-          (
-            (
-              preferCreateParent &&
-              !this._rootRelativeTargetIsWithinAbsoluteArg(target) &&
-              this._createParentExists(cwdGuestTarget, cwdHostTarget)
-            ) ||
-            this._rootRelativeTargetPrefersCwd(target) ||
-            (
-              this._hostPathExists(cwdHostTarget) &&
-              !(typeof rootHostPath === "string" && this._hostPathExists(rootHostPath))
-            )
-          )
-        ) {
-          return {
-            guestPath: cwdGuestTarget,
-            hostPath: cwdHostTarget,
-            readOnly: cwdMapping?.readOnly === true,
-          };
-        }
-      }
-      return {
-        guestPath: rootGuestPath,
-        hostPath: rootHostPath,
-        readOnly: rootMapping?.readOnly === true,
-      };
-    }
-
-    _resolveAbsolutePath(target, preferCreateParent = false) {
-      const rootGuestPath = __agentOSPath().posix.normalize(target);
-      const rootMapping = this._resolveHostMappingForGuestPath(rootGuestPath);
-      const rootHostPath = rootMapping?.hostPath ?? null;
-      const cwdGuestPath = this._currentGuestCwd();
-      if (
-        cwdGuestPath !== "/" &&
-        !this._rootRelativeTargetIsWithinAbsoluteArg(target)
-      ) {
-        const cwdGuestTarget = __agentOSPath().posix.resolve(
-          cwdGuestPath,
-          target.replace(/^\/+/, ""),
-        );
-        const cwdMapping = this._resolveHostMappingForGuestPath(cwdGuestTarget);
-        const cwdHostTarget = cwdMapping?.hostPath ?? null;
-        if (
-          typeof cwdHostTarget === "string" &&
-          (
-            (
-              preferCreateParent &&
-              this._createParentExists(cwdGuestTarget, cwdHostTarget)
-            ) ||
-            (
-              this._hostPathExists(cwdHostTarget) &&
-              !(typeof rootHostPath === "string" && this._hostPathExists(rootHostPath))
-            )
-          )
-        ) {
-          return {
-            guestPath: cwdGuestTarget,
-            hostPath: cwdHostTarget,
-            readOnly: cwdMapping?.readOnly === true,
-          };
-        }
-      }
-      return {
-        guestPath: rootGuestPath,
-        hostPath: rootHostPath,
-        readOnly: rootMapping?.readOnly === true,
-      };
-    }
-
-    _resolveDescriptorPath(fd, pathPtr, pathLen, options = {}) {
-      const entry = this._measureWasiPhase("descriptorEntry", () => this._descriptorEntry(fd));
-      if (!entry) {
-        return { error: __agentOSWasiErrnoBadf };
-      }
-      const target = this._measureWasiPhase("readString", () => this._readString(pathPtr, pathLen));
-      const base = this._measureWasiPhase("descriptorPathBase", () => this._descriptorPathBase(entry, target));
-      if (!base || typeof base.guestPath !== "string") {
-        return { error: __agentOSWasiErrnoBadf };
-      }
-      const guestPath = this._measureWasiPhase("guestPathResolve", () =>
-        target.startsWith("/")
-          ? __agentOSPath().posix.normalize(target)
-          : __agentOSPath().posix.resolve(base.guestPath, target)
-      );
-      const mapped = this._measureWasiPhase("descriptorPathMap", () =>
-        target.startsWith("/")
-          ? this._resolveAbsolutePath(
-              target,
-              options.preferCreateParent === true,
-            )
-          : base.guestPath === "/"
-            ? this._resolveRootRelativePath(
-                target,
-                options.preferCreateParent === true,
-              )
-            : {
-                guestPath,
-                ...(
-                  this._resolveHostMappingForGuestPath(guestPath) ??
-                  { hostPath: null, readOnly: false }
-                ),
-              }
-      );
-      const hostPath = mapped.hostPath;
-      if (typeof hostPath !== "string") {
-        return { error: __agentOSWasiErrnoNoent };
-      }
-      return {
-        error: __agentOSWasiErrnoSuccess,
-        guestPath: mapped.guestPath,
-        hostPath,
-        readOnly: mapped.readOnly === true,
-      };
-    }
-
-    _resolvedFsPath(resolved) {
-      if (this._sidecarManagedProcess() && typeof resolved?.guestPath === "string") {
-        return resolved.guestPath;
-      }
-      return resolved?.hostPath ?? null;
-    }
-
-    _statResolvedPath(resolved, follow) {
-      if (
-        typeof globalThis?.__agentOSSyncRpc?.callSync === "function" &&
-        typeof resolved?.guestPath === "string"
-      ) {
-        return this._measureWasiPhase(follow ? "syncRpcStat" : "syncRpcLstat", () =>
-          __agentOSWasiSyncRpc().callSync(follow ? "fs.statSync" : "fs.lstatSync", [
-            resolved.guestPath,
-          ])
-        );
-      }
-      const bridgeStat = follow ? globalThis?._fsStat : globalThis?._fsLstat;
-      if (
-        typeof bridgeStat?.applySyncPromise === "function" &&
-        typeof resolved?.guestPath === "string"
-      ) {
-        return this._measureWasiPhase(follow ? "bridgeStatSync" : "bridgeLstatSync", () =>
-          bridgeStat.applySyncPromise(void 0, [resolved.guestPath])
-        );
-      }
-      const fsPath = this._resolvedFsPath(resolved);
-      return this._measureWasiPhase(follow ? "fsModuleStatSync" : "fsModuleLstatSync", () =>
-        follow ? this._fs().statSync(fsPath) : this._fs().lstatSync(fsPath)
-      );
-    }
-
-
-    _resolveDescriptorDirectStatPath(fd, target) {
-      if (
-        typeof target !== "string" ||
-        target.length === 0 ||
-        target === "." ||
-        target === ".." ||
-        target.startsWith("/")
-      ) {
-        return null;
-      }
-      const entry = this._descriptorEntry(fd);
-      if (
-        !entry ||
-        (entry.kind !== "directory" && entry.kind !== "preopen") ||
-        typeof entry.hostPath !== "string" ||
-        entry.hostPath.length === 0
-      ) {
-        return null;
-      }
-      const baseGuestPath = this._descriptorGuestPath(entry);
-      if (typeof baseGuestPath !== "string") {
-        return null;
-      }
-      if (entry.kind === "preopen" && baseGuestPath === "/") {
-        if (!this._rootRelativeTargetIsWithinAbsoluteArg(target)) {
-          return null;
-        }
-      } else if (target.includes("/")) {
-        return null;
-      }
-      return {
-        error: __agentOSWasiErrnoSuccess,
-        guestPath: this._path().posix.resolve(baseGuestPath, target),
-        hostPath: this._path().join(entry.hostPath, target),
-        readOnly: entry.readOnly === true,
-      };
-    }
-
-    _writeFilestat(statPtr, stats, fallbackType) {
-      try {
-        const view = this._memoryView();
-        const offset = Number(statPtr) >>> 0;
-        const filetype = stats ? this._filetypeForStats(stats) : fallbackType;
-        view.setBigUint64(offset, 0n, true);
-        view.setBigUint64(offset + 8, BigInt(stats?.ino ?? 0), true);
-        view.setUint8(offset + 16, filetype);
-        view.setBigUint64(offset + 24, BigInt(stats?.nlink ?? 1), true);
-        view.setBigUint64(offset + 32, BigInt(stats?.size ?? 0), true);
-        view.setBigUint64(offset + 40, BigInt(Math.trunc((stats?.atimeMs ?? 0) * 1000000)), true);
-        view.setBigUint64(offset + 48, BigInt(Math.trunc((stats?.mtimeMs ?? 0) * 1000000)), true);
-        view.setBigUint64(offset + 56, BigInt(Math.trunc((stats?.ctimeMs ?? 0) * 1000000)), true);
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _argsSizesGet(argcPtr, argvBufSizePtr) {
-      const values = this._stringTable(this.args);
-      const total = values.reduce((sum, value) => sum + value.length, 0);
-      const argcStatus = this._writeUint32(argcPtr, values.length);
-      if (argcStatus !== __agentOSWasiErrnoSuccess) {
-        return argcStatus;
-      }
-      return this._writeUint32(argvBufSizePtr, total);
-    }
-
-    _argsGet(argvPtr, argvBufPtr) {
-      return this._writeStringTable(this._stringTable(this.args), argvPtr, argvBufPtr);
-    }
-
-    _environEntries() {
-      return Object.entries(this.env).map(([key, value]) => `${key}=${value}`);
-    }
-
-    _environSizesGet(countPtr, bufSizePtr) {
-      const values = this._stringTable(this._environEntries());
-      const total = values.reduce((sum, value) => sum + value.length, 0);
-      const countStatus = this._writeUint32(countPtr, values.length);
-      if (countStatus !== __agentOSWasiErrnoSuccess) {
-        return countStatus;
-      }
-      return this._writeUint32(bufSizePtr, total);
-    }
-
-    _environGet(environPtr, environBufPtr) {
-      return this._writeStringTable(
-        this._stringTable(this._environEntries()),
-        environPtr,
-        environBufPtr,
-      );
-    }
-
-    _clockTimeGet(_clockId, _precision, resultPtr) {
-      return this._writeUint64(resultPtr, BigInt(Date.now()) * 1000000n);
-    }
-
-    _clockResGet(_clockId, resultPtr) {
-      return this._writeUint64(resultPtr, 1000000n);
-    }
-
-    _fdWrite(fd, iovs, iovsLen, nwrittenPtr) {
-      try {
-        const bytes = this._measureWasiPhase("collectIovs", () => this._collectIovs(iovs, iovsLen));
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._measureWasiPhase("externalFdHandle", () => this._externalFdHandle(descriptor));
-        if (handle?.kind === "pipe-write" && handle.pipe) {
-          if (bytes.length > 0 && !this._pipeHasReaders(handle.pipe)) {
-            return __agentOSWasiErrnoPipe;
-          }
-          this._enqueuePipeBytes(handle.pipe, bytes);
-          this._flushPipeConsumers(handle.pipe);
-          return this._writeUint32(nwrittenPtr, bytes.length);
-        }
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          if (handle.readOnly === true) {
-            return __agentOSWasiErrnoRofs;
-          }
-          if (descriptor === 1 || descriptor === 2) {
-            const sidecarManagedProcess =
-              typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-              process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-            const useKernelStdioSyncRpc =
-              sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled();
-            if (useKernelStdioSyncRpc) {
-              const written = this._measureWasiPhase("kernelStdioWrite", () =>
-                Number(
-                  __agentOSWasiSyncRpc().callSync("__kernel_stdio_write", [descriptor, bytes]),
-                ) >>> 0
-              );
-              return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-            }
-          }
-          const written = this._measureWasiPhase("writeSync", () =>
-            __agentOSFs().writeSync(
-              handle.targetFd,
-              bytes,
-              0,
-              bytes.length,
-              null,
-            )
-          );
-          return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-        }
-        if (handle?.kind === "guest-file" && typeof handle.targetFd === "number") {
-          const position = handle.append ? null : (handle.position ?? 0);
-          const written = this._measureWasiPhase("writeSync", () =>
-            __agentOSFs().writeSync(
-              handle.targetFd,
-              bytes,
-              0,
-              bytes.length,
-              position,
-            )
-          );
-          if (handle.append) {
-            handle.position = this._measureWasiPhase("appendFstat", () =>
-              Number(__agentOSFs().fstatSync(handle.targetFd).size ?? 0)
-            );
-          } else {
-            handle.position = (handle.position ?? 0) + written;
-          }
-          return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-        }
-        if (handle?.kind === "stdio" && typeof handle.targetFd === "number") {
-          const targetFd = Number(handle.targetFd) >>> 0;
-          if (targetFd === 1 || targetFd === 2) {
-            const sidecarManagedProcess =
-              typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-              process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-            const useKernelStdioSyncRpc =
-              sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled();
-            const written = useKernelStdioSyncRpc
-              ? this._measureWasiPhase("kernelStdioWrite", () =>
-                  Number(__agentOSWasiSyncRpc().callSync("__kernel_stdio_write", [targetFd, bytes])) >>> 0
-                )
-              : this._measureWasiPhase("processStreamWrite", () =>
-                  (targetFd === 2 ? process.stderr.write(bytes) : process.stdout.write(bytes), bytes.length)
-                );
-            return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-          }
-          return __agentOSWasiErrnoBadf;
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (entry.kind === "stdout") {
-          const sidecarManagedProcess =
-            typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-            process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-          const useKernelStdioSyncRpc =
-            sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled();
-          const written = useKernelStdioSyncRpc
-            ? this._measureWasiPhase("kernelStdioWrite", () =>
-                Number(__agentOSWasiSyncRpc().callSync("__kernel_stdio_write", [1, bytes])) >>> 0
-              )
-            : this._measureWasiPhase("processStreamWrite", () =>
-                (process.stdout.write(bytes), bytes.length)
-              );
-          return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-        }
-        if (entry.kind === "stderr") {
-          const sidecarManagedProcess =
-            typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-            process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-          const useKernelStdioSyncRpc =
-            sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled();
-          const written = useKernelStdioSyncRpc
-            ? this._measureWasiPhase("kernelStdioWrite", () =>
-                Number(__agentOSWasiSyncRpc().callSync("__kernel_stdio_write", [2, bytes])) >>> 0
-              )
-            : this._measureWasiPhase("processStreamWrite", () =>
-                (process.stderr.write(bytes), bytes.length)
-              );
-          return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-        }
-        if (entry.readOnly === true) {
-          return __agentOSWasiErrnoRofs;
-        }
-        if (entry.kind === "file") {
-          this._clearStatCache();
-          const position = typeof entry.offset === "number" ? entry.offset : null;
-          const written = this._measureWasiPhase("writeSync", () =>
-            __agentOSFs().writeSync(
-              entry.realFd,
-              bytes,
-              0,
-              bytes.length,
-              position,
-            )
-          );
-          if (typeof entry.offset === "number") {
-            entry.offset += written;
-          }
-          return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-        }
-        return __agentOSWasiErrnoBadf;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdPwrite(fd, iovs, iovsLen, offset, nwrittenPtr) {
-      try {
-        const bytes = this._collectIovs(iovs, iovsLen);
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._externalFdHandle(descriptor);
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          if (handle.readOnly === true) {
-            return __agentOSWasiErrnoRofs;
-          }
-          const written = __agentOSFs().writeSync(
-            handle.targetFd,
-            bytes,
-            0,
-            bytes.length,
-            Number(offset) >>> 0,
-          );
-          return this._writeUint32(nwrittenPtr, written);
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry || entry.kind !== "file") {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (entry.readOnly === true) {
-          return __agentOSWasiErrnoRofs;
-        }
-        const written = __agentOSFs().writeSync(
-          entry.realFd,
-          bytes,
-          0,
-          bytes.length,
-          Number(offset) >>> 0,
-        );
-        return this._writeUint32(nwrittenPtr, written);
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdPread(fd, iovs, iovsLen, offset, nreadPtr) {
-      try {
-        const descriptor = Number(fd) >>> 0;
-        const explicitOffset = Number(offset) >>> 0;
-        const totalLength = this._boundedReadLength(iovs, iovsLen);
-        const buffer = Buffer.alloc(totalLength);
-        const handle = this._externalFdHandle(descriptor);
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          const bytesRead = __agentOSFs().readSync(
-            handle.targetFd,
-            buffer,
-            0,
-            totalLength,
-            explicitOffset,
-          );
-          const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-          return this._writeUint32(nreadPtr, written);
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry || entry.kind !== "file") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const bytesRead = __agentOSFs().readSync(
-          entry.realFd,
-          buffer,
-          0,
-          totalLength,
-          explicitOffset,
-        );
-        const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-        return this._writeUint32(nreadPtr, written);
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdRead(fd, iovs, iovsLen, nreadPtr) {
-      try {
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._externalFdHandle(descriptor);
-        if (handle?.kind === "pipe-read" && handle.pipe) {
-          const totalLength = this._boundedReadLength(iovs, iovsLen);
-          while (handle.pipe.chunks.length === 0) {
-            if (handle.pipe.writeHandleCount === 0 && handle.pipe.producers.size === 0) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            this._pumpPipeProducers(handle.pipe, 10);
-          }
-          const chunk = this._dequeuePipeBytes(handle.pipe, totalLength);
-          const written = this._writeToIovs(iovs, iovsLen, chunk);
-          return this._writeUint32(nreadPtr, written);
-        }
-        if (handle?.kind === "stdio" && Number(handle.targetFd) === 0) {
-          const totalLength = this._boundedReadLength(iovs, iovsLen);
-          if (typeof __agentOSWasiHost.readStdin === "function") {
-            const value = __agentOSWasiHost.readStdin(totalLength);
-            if (value == null) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            const chunk =
-              typeof value === "string"
-                ? Buffer.from(value, "utf8")
-                : value instanceof Uint8Array
-                  ? value
-                  : Buffer.from(value);
-            if (chunk.length === 0) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            const written = this._writeToIovs(iovs, iovsLen, chunk);
-            return this._writeUint32(nreadPtr, written);
-          }
-          const buffer = Buffer.alloc(totalLength);
-          const bytesRead = __agentOSFs().readSync(0, buffer, 0, totalLength, null);
-          const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-          return this._writeUint32(nreadPtr, written);
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (entry.kind === "stdin") {
-          const totalLength = this._boundedReadLength(iovs, iovsLen);
-          const syncRpc =
-            typeof globalThis?.__agentOSSyncRpc?.callSync === "function"
-              ? __agentOSWasiSyncRpc()
-              : null;
-          const sidecarManagedProcess =
-            typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-            process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-          if (syncRpc && (sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled())) {
-            try {
-              let chunk = null;
-              while (true) {
-                const response = syncRpc.callSync("__kernel_stdin_read", [totalLength, 10]);
-                if (
-                  response &&
-                  typeof response === "object" &&
-                  typeof response.dataBase64 === "string"
-                ) {
-                  chunk = Buffer.from(response.dataBase64, "base64");
-                  break;
-                }
-                if (response && typeof response === "object" && response.done === true) {
-                  chunk = Buffer.alloc(0);
-                  break;
-                }
-                if (
-                  typeof Atomics?.wait === "function" &&
-                  typeof syntheticWaitArray !== "undefined"
-                ) {
-                  Atomics.wait(syntheticWaitArray, 0, 0, 10);
-                }
-              }
-              if (!chunk || chunk.length === 0) {
-                return this._writeUint32(nreadPtr, 0);
-              }
-              const written = this._writeToIovs(iovs, iovsLen, chunk);
-              return this._writeUint32(nreadPtr, written);
-            } catch {
-              // Fall back to direct stdin reads when the sync bridge is unavailable
-              // in the standalone runner bootstrap.
-            }
-          }
-          // Host-seam stdin (a non-native backend whose stdin is delivered through
-          // the runtime process object, not a kernel fd): read the queued bytes
-          // directly instead of fs.readSync on a descriptor the JS fs table does
-          // not own.
-          if (typeof __agentOSWasiHost.readStdin === "function") {
-            const value = __agentOSWasiHost.readStdin(totalLength);
-            if (value == null) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            const chunk =
-              typeof value === "string"
-                ? Buffer.from(value, "utf8")
-                : value instanceof Uint8Array
-                  ? value
-                  : Buffer.from(value);
-            if (chunk.length === 0) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            const written = this._writeToIovs(iovs, iovsLen, chunk);
-            return this._writeUint32(nreadPtr, written);
-          }
-          const buffer = Buffer.alloc(totalLength);
-          const directStdinFd =
-            (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-            typeof handle.targetFd === "number"
-              ? handle.targetFd
-              : typeof process?.stdin?.fd === "number"
-                ? process.stdin.fd
-                : 0;
-          const bytesRead = __agentOSFs().readSync(
-            directStdinFd,
-            buffer,
-            0,
-            totalLength,
-            null,
-          );
-          const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-          return this._writeUint32(nreadPtr, written);
-        }
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          const totalLength = this._boundedReadLength(iovs, iovsLen);
-          const buffer = Buffer.alloc(totalLength);
-          const bytesRead = __agentOSFs().readSync(
-            handle.targetFd,
-            buffer,
-            0,
-            totalLength,
-            null,
-          );
-          const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-          return this._writeUint32(nreadPtr, written);
-        }
-        if (entry.kind !== "file") {
-          return __agentOSWasiErrnoBadf;
-        }
-        // WASI rights: a descriptor opened without FD_READ cannot be read.
-        if (
-          typeof entry.rightsBase === "bigint" &&
-          (entry.rightsBase & __agentOSWasiRightFdRead) === 0n
-        ) {
-          return __agentOSWasiErrnoNotcapable;
-        }
-        const totalLength = this._boundedReadLength(iovs, iovsLen);
-        const buffer = Buffer.alloc(totalLength);
-        const position = typeof entry.offset === "number" ? entry.offset : null;
-        const bytesRead = __agentOSFs().readSync(
-          entry.realFd,
-          buffer,
-          0,
-          totalLength,
-          position,
-        );
-        if (typeof entry.offset === "number") {
-          entry.offset += bytesRead;
-        }
-        const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-        return this._writeUint32(nreadPtr, written);
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdClose(fd) {
-      try {
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._externalFdHandle(descriptor);
-        if (handle?.kind === "pipe-read" && handle.pipe) {
-          handle.open = false;
-          handle.pipe.readHandleCount = Math.max(0, (handle.pipe.readHandleCount ?? 0) - 1);
-          if (typeof handle.onClose === "function") {
-            handle.onClose(handle, descriptor);
-          }
-          return __agentOSWasiErrnoSuccess;
-        }
-        if (handle?.kind === "pipe-write" && handle.pipe) {
-          handle.open = false;
-          handle.pipe.writeHandleCount = Math.max(0, (handle.pipe.writeHandleCount ?? 0) - 1);
-          if (typeof handle.onClose === "function") {
-            handle.onClose(handle, descriptor);
-          }
-          return __agentOSWasiErrnoSuccess;
-        }
-        if (handle?.kind === "guest-file" || handle?.kind === "stdio") {
-          handle.open = false;
-          return __agentOSWasiErrnoSuccess;
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        const retainedDelegateRefs = (() => {
-          try {
-            if (typeof globalThis.__agentOSWasiDelegateFdRefCount === "function") {
-              return Number(globalThis.__agentOSWasiDelegateFdRefCount(descriptor)) || 0;
-            }
-          } catch {
-            // Fall through to the default close path.
-          }
-          return 0;
-        })();
-        if (entry.kind === "file" && retainedDelegateRefs <= 0) {
-          __agentOSFs().closeSync(entry.realFd);
-        }
-        if (descriptor > 2 && retainedDelegateRefs <= 0) {
-          this.fdTable.delete(descriptor);
-        }
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdSync(fd) {
-      try {
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._externalFdHandle(descriptor);
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          __agentOSFs().fsyncSync(handle.targetFd);
-          return __agentOSWasiErrnoSuccess;
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        // fsync on a stdio stream (stdin/stdout/stderr) is a no-op success; only
-        // descriptors with a real backing fd are flushed.
-        if (
-          entry.kind === "stdin" ||
-          entry.kind === "stdout" ||
-          entry.kind === "stderr"
-        ) {
-          return __agentOSWasiErrnoSuccess;
-        }
-        if (entry.kind !== "file" || typeof entry.realFd !== "number") {
-          return __agentOSWasiErrnoBadf;
-        }
-        __agentOSFs().fsyncSync(entry.realFd);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdFdstatGet(fd, statPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        const view = this._memoryView();
-        const offset = Number(statPtr) >>> 0;
-        view.setUint8(offset, this._fdFiletype(entry));
-        view.setUint16(offset + 2, (Number(entry.fdFlags) >>> 0) & 0xffff, true);
-        view.setBigUint64(offset + 8, this._descriptorRightsBase(entry), true);
-        view.setBigUint64(offset + 16, this._descriptorRightsInheriting(entry), true);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdFdstatSetFlags(fd, flags) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        entry.fdFlags = (Number(flags) >>> 0) & 0xffff;
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdFilestatGet(fd, statPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (
-          entry.kind === "stdin" ||
-          entry.kind === "stdout" ||
-          entry.kind === "stderr"
-        ) {
-          return this._writeFilestat(statPtr, null, __agentOSWasiFiletypeCharacterDevice);
-        }
-        if (entry.kind === "preopen") {
-          const stats = __agentOSFs().statSync(entry.guestPath);
-          return this._writeFilestat(statPtr, stats, __agentOSWasiFiletypeDirectory);
-        }
-        const stats =
-          typeof entry.realFd === "number"
-            ? __agentOSFs().fstatSync(entry.realFd)
-            : __agentOSFs().statSync(this._descriptorFsPath(entry));
-        return this._writeFilestat(statPtr, stats, this._fdFiletype(entry));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdFilestatSetSize(fd, size) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "file" || typeof entry.realFd !== "number") {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (entry.readOnly === true) {
-          return __agentOSWasiErrnoRofs;
-        }
-        __agentOSFs().ftruncateSync(entry.realFd, Number(size));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdSeek(fd, offset, whence, newOffsetPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "file" || typeof entry.realFd !== "number") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const delta = Number(offset);
-        if (!Number.isFinite(delta)) {
-          return __agentOSWasiErrnoInval;
-        }
-        const currentOffset = typeof entry.offset === "number" ? entry.offset : 0;
-        let nextOffset = 0;
-        switch (Number(whence) >>> 0) {
-          case __agentOSWasiWhenceSet:
-            nextOffset = delta;
-            break;
-          case __agentOSWasiWhenceCur:
-            nextOffset = currentOffset + delta;
-            break;
-          case __agentOSWasiWhenceEnd: {
-            const stats = __agentOSFs().fstatSync(entry.realFd);
-            nextOffset = Number(stats?.size ?? 0) + delta;
-            break;
-          }
-          default:
-            return __agentOSWasiErrnoInval;
-        }
-        if (!Number.isFinite(nextOffset) || nextOffset < 0) {
-          return __agentOSWasiErrnoInval;
-        }
-        entry.offset = nextOffset;
-        return this._writeUint64(newOffsetPtr, BigInt(nextOffset));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdTell(fd, offsetPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "file") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const offset = typeof entry.offset === "number" ? entry.offset : 0;
-        return this._writeUint64(offsetPtr, BigInt(offset));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdPrestatGet(fd, prestatPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "preopen") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const guestPath = this._descriptorPreopenName(entry);
-        if (typeof guestPath !== "string") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const view = this._memoryView();
-        const offset = Number(prestatPtr) >>> 0;
-        view.setUint8(offset, 0);
-        view.setUint32(offset + 4, Buffer.byteLength(guestPath), true);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdPrestatDirName(fd, pathPtr, pathLen) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "preopen") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const guestPath = this._descriptorPreopenName(entry);
-        if (typeof guestPath !== "string") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const bytes = Buffer.from(guestPath, "utf8");
-        if ((Number(pathLen) >>> 0) < bytes.length) {
-          return __agentOSWasiErrnoFault;
-        }
-        return this._writeBytes(pathPtr, bytes);
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdReaddir(fd, bufPtr, bufLen, cookie, bufUsedPtr) {
-      const startedAt = __agentOSWasiNow();
-      const requestedCookie = Number(cookie) >>> 0;
-      const requestedBufLen = Number(bufLen) >>> 0;
-      try {
-        const entry = this._descriptorEntry(fd);
-        const fsPath = this._descriptorDirectoryFsPath(entry);
-        if (
-          !entry ||
-          (entry.kind !== "preopen" && entry.kind !== "directory") ||
-          typeof fsPath !== "string"
-        ) {
-          return __agentOSWasiErrnoBadf;
-        }
-        let dirents =
-          requestedCookie > 0 && Array.isArray(entry.readdirCache)
-            ? entry.readdirCache
-            : null;
-        if (!dirents) {
-          dirents = __agentOSFs()
-            .readdirSync(fsPath, { withFileTypes: true })
-            .map((entry) =>
-              typeof entry === "string"
-                ? { name: entry, filetype: __agentOSWasiFiletypeUnknown }
-                : {
-                    name: String(entry?.name ?? ""),
-                    filetype: this._filetypeForDirent(entry),
-                  }
-            )
-            .sort((left, right) => left.name.localeCompare(right.name));
-          entry.readdirCache = dirents;
-        }
-        const view = this._memoryView();
-        const memory = this._memoryBytes();
-        let offset = Number(bufPtr) >>> 0;
-        const limit = offset + requestedBufLen;
-        let used = 0;
-        let recordsReturned = 0;
-        let stoppedRecordTooLarge = false;
-        for (let index = requestedCookie; index < dirents.length; index += 1) {
-          const dirent = dirents[index];
-          const name = typeof dirent === "string" ? dirent : String(dirent?.name ?? "");
-          const filetype =
-            typeof dirent === "object"
-              ? Number(dirent?.filetype ?? __agentOSWasiFiletypeUnknown) >>> 0
-              : __agentOSWasiFiletypeUnknown;
-          const nameBytes = Buffer.from(name, "utf8");
-          const recordLen = 24 + nameBytes.length;
-          if (offset + recordLen > limit) {
-            const remaining = Math.max(0, limit - offset);
-            if (remaining > 0) {
-              const record = Buffer.alloc(recordLen);
-              const recordView = new DataView(
-                record.buffer,
-                record.byteOffset,
-                record.byteLength,
-              );
-              recordView.setBigUint64(0, BigInt(index + 1), true);
-              recordView.setBigUint64(8, BigInt(index + 1), true);
-              recordView.setUint32(16, nameBytes.length, true);
-              recordView.setUint8(
-                20,
-                filetype,
-              );
-              record.set(nameBytes, 24);
-              memory.set(record.subarray(0, remaining), offset);
-              offset += remaining;
-              used += remaining;
-            }
-            stoppedRecordTooLarge = true;
-            break;
-          }
-          view.setBigUint64(offset, BigInt(index + 1), true);
-          view.setBigUint64(offset + 8, BigInt(index + 1), true);
-          view.setUint32(offset + 16, nameBytes.length, true);
-          view.setUint8(
-            offset + 20,
-            filetype,
-          );
-          memory.set(nameBytes, offset + 24);
-          offset += recordLen;
-          used += recordLen;
-          recordsReturned += 1;
-        }
-        const result = this._writeUint32(bufUsedPtr, used);
-        this._recordWasiSyscallMetric("fd_readdir", startedAt, {
-          result,
-          fd: Number(fd) >>> 0,
-          cookie: requestedCookie,
-          bufLen: requestedBufLen,
-          used,
-          recordsReturned,
-          totalDirentsRead: dirents.length,
-          stoppedRecordTooLarge,
-        });
-        return result;
-      } catch (error) {
-        this._recordWasiSyscallMetric("fd_readdir", startedAt, {
-          result: "error",
-          fd: Number(fd) >>> 0,
-          cookie: requestedCookie,
-          bufLen: requestedBufLen,
-        });
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathCreateDirectory(fd, pathPtr, pathLen) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen, {
-          preferCreateParent: true,
-        });
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        if (resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        this._clearStatCache();
-        __agentOSFs().mkdirSync(this._resolvedFsPath(resolved));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathLink(oldFd, _oldFlags, oldPathPtr, oldPathLen, newFd, newPathPtr, newPathLen) {
-      try {
-        const source = this._resolveDescriptorPath(oldFd, oldPathPtr, oldPathLen);
-        if (source.error !== __agentOSWasiErrnoSuccess) {
-          return source.error;
-        }
-        const destination = this._resolveDescriptorPath(newFd, newPathPtr, newPathLen);
-        if (destination.error !== __agentOSWasiErrnoSuccess) {
-          return destination.error;
-        }
-        if (source.readOnly || destination.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        this._clearStatCache();
-        __agentOSFs().linkSync(this._resolvedFsPath(source), this._resolvedFsPath(destination));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathOpen(fd, _dirflags, pathPtr, pathLen, oflags, rightsBase, rightsInheriting, _fdflags, openedFdPtr) {
-      try {
-        const entry = this._measureWasiPhase("descriptorEntry", () => this._descriptorEntry(fd));
-        if (
-          !entry ||
-          (entry.kind !== "preopen" && entry.kind !== "directory") ||
-          typeof entry.hostPath !== "string"
-        ) {
-          return __agentOSWasiErrnoBadf;
-        }
-        const requestedFlags = Number(oflags) >>> 0;
-        const createOrTruncate =
-          (requestedFlags & __agentOSWasiOpenCreate) !== 0 ||
-          (requestedFlags & __agentOSWasiOpenTruncate) !== 0;
-        const resolved = this._measureWasiPhase("resolveDescriptorPath", () =>
-          this._resolveDescriptorPath(fd, pathPtr, pathLen, {
-            preferCreateParent: createOrTruncate,
-          })
-        );
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        const guestPath = resolved.guestPath;
-        const fsPath = this._resolvedFsPath(resolved);
-        const openDirectory = (requestedFlags & __agentOSWasiOpenDirectory) !== 0;
-        const allowedRightsBase = this._descriptorRightsBase(entry);
-        const allowedRightsInheriting = this._descriptorRightsInheriting(entry);
-        const requestedRightsBase = this._normalizeRights(rightsBase, allowedRightsInheriting);
-        const requestedRightsInheriting = this._normalizeRights(
-          rightsInheriting,
-          allowedRightsInheriting,
-        );
-        if (
-          (requestedRightsBase & ~allowedRightsInheriting) !== 0n ||
-          (requestedRightsInheriting & ~allowedRightsInheriting) !== 0n
-        ) {
-          return __agentOSWasiErrnoAcces;
-        }
-        const requestedWriteAccess =
-          !openDirectory &&
-          (createOrTruncate || this._hasWriteRights(requestedRightsBase));
-        if (
-          requestedWriteAccess &&
-          !this._hasWriteRights(allowedRightsBase)
-        ) {
-          return __agentOSWasiErrnoAcces;
-        }
-        if (requestedWriteAccess && resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        if (createOrTruncate) {
-          this._clearStatCache();
-        }
-        const fsConstants = __agentOSFs().constants ?? {};
-        let openFlags = requestedWriteAccess
-          ? fsConstants.O_RDWR ?? 2
-          : fsConstants.O_RDONLY ?? 0;
-        if ((requestedFlags & __agentOSWasiOpenCreate) !== 0) {
-          openFlags |= fsConstants.O_CREAT ?? 64;
-        }
-        if ((requestedFlags & __agentOSWasiOpenExclusive) !== 0) {
-          openFlags |= fsConstants.O_EXCL ?? 128;
-        }
-        if ((requestedFlags & __agentOSWasiOpenTruncate) !== 0) {
-          openFlags |= fsConstants.O_TRUNC ?? 512;
-        }
-        if (openDirectory) {
-          openFlags |= fsConstants.O_DIRECTORY ?? 0;
-        }
-        const realFd = this._measureWasiPhase("openSync", () => __agentOSFs().openSync(fsPath, openFlags));
-        const openedKind = openDirectory || createOrTruncate
-          ? (openDirectory ? "directory" : "file")
-          : this._measureWasiPhase("postOpenStat", () =>
-              __agentOSFs().statSync(fsPath).isDirectory() ? "directory" : "file"
-            );
-        const openedFd = this.nextFd++;
-        this._measureWasiPhase("fdTableSet", () => {
-          this.fdTable.set(openedFd, {
-            kind: openedKind,
-            guestPath,
-            hostPath: fsPath,
-            readOnly: resolved.readOnly === true,
-            realFd,
-            offset: 0,
-            rightsBase: requestedRightsBase & allowedRightsInheriting,
-            rightsInheriting: requestedRightsInheriting & allowedRightsInheriting,
-            fdFlags: (Number(_fdflags) >>> 0) & 0xffff,
-          });
-        });
-        return this._measureWasiPhase("writeOpenedFd", () => this._writeUint32(openedFdPtr, openedFd));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathSymlink(targetPtr, targetLen, fd, pathPtr, pathLen) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        if (resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        const target = this._readString(targetPtr, targetLen);
-        this._clearStatCache();
-        __agentOSFs().symlinkSync(target, this._resolvedFsPath(resolved));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathRemoveDirectory(fd, pathPtr, pathLen) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        if (resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        this._clearStatCache();
-        __agentOSFs().rmdirSync(this._resolvedFsPath(resolved));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathRename(oldFd, oldPathPtr, oldPathLen, newFd, newPathPtr, newPathLen) {
-      try {
-        const source = this._resolveDescriptorPath(oldFd, oldPathPtr, oldPathLen);
-        if (source.error !== __agentOSWasiErrnoSuccess) {
-          return source.error;
-        }
-        const destination = this._resolveDescriptorPath(newFd, newPathPtr, newPathLen);
-        if (destination.error !== __agentOSWasiErrnoSuccess) {
-          return destination.error;
-        }
-        if (source.readOnly || destination.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        this._clearStatCache();
-        __agentOSFs().renameSync(this._resolvedFsPath(source), this._resolvedFsPath(destination));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathUnlinkFile(fd, pathPtr, pathLen) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        if (resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        this._clearStatCache();
-        __agentOSFs().unlinkSync(this._resolvedFsPath(resolved));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathFilestatGet(fd, flags, pathPtr, pathLen, statPtr) {
-      try {
-        const target = this._measureWasiPhase("readString", () => this._readString(pathPtr, pathLen));
-        const resolved =
-          this._measureWasiPhase("resolveDirectStatPath", () => this._resolveDescriptorDirectStatPath(fd, target)) ??
-          this._measureWasiPhase("resolveDescriptorPath", () => this._resolveDescriptorPath(fd, pathPtr, pathLen));
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        const follow = (Number(flags) & __agentOSWasiLookupSymlinkFollow) !== 0;
-        const cacheKey = this._statCacheKey(resolved, follow);
-        let stats = cacheKey ? this.statCache.get(cacheKey) : undefined;
-        if (stats) {
-          this._measureWasiPhase("statCacheHit", () => undefined);
-        } else {
-          stats = this._measureWasiPhase(follow ? "statSync" : "lstatSync", () =>
-            this._statResolvedPath(resolved, follow)
-          );
-          if (cacheKey) {
-            this.statCache.set(cacheKey, stats);
-          }
-        }
-        return this._measureWasiPhase("writeFilestat", () => this._writeFilestat(statPtr, stats, this._filetypeForStats(stats)));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathReadlink(fd, pathPtr, pathLen, bufPtr, bufLen, bufUsedPtr) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        const bytes = Buffer.from(__agentOSFs().readlinkSync(resolved.guestPath), "utf8");
-        const length = Math.min(bytes.length, Number(bufLen) >>> 0);
-        const writeStatus = this._writeBytes(bufPtr, bytes.subarray(0, length));
-        if (writeStatus !== __agentOSWasiErrnoSuccess) {
-          return writeStatus;
-        }
-        return this._writeUint32(bufUsedPtr, length);
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pollOneoff(inPtr, outPtr, nsubscriptions, neventsPtr) {
-      try {
-        const subscriptionCount = Number(nsubscriptions) >>> 0;
-        if (subscriptionCount === 0) {
-          return this._writeUint32(neventsPtr, 0);
-        }
-
-        const subscriptionSize = 48;
-        const eventSize = 32;
-        const kernelPollIn = 0x0001;
-        const kernelPollOut = 0x0004;
-        const kernelPollErr = 0x0008;
-        const kernelPollHup = 0x0010;
-        const view = this._memoryView();
-        const memory = this._memoryBytes();
-        const syncRpc =
-          typeof globalThis?.__agentOSSyncRpc?.callSync === "function"
-            ? __agentOSWasiSyncRpc()
-            : null;
-        const subscriptions = [];
-        let timeoutMs = null;
-
-        for (let index = 0; index < subscriptionCount; index += 1) {
-          const base = (Number(inPtr) >>> 0) + index * subscriptionSize;
-          const tag = view.getUint8(base + 8);
-          const userdata = memory.slice(base, base + 8);
-          if (tag === 0) {
-            const timeoutNs = view.getBigUint64(base + 24, true);
-            const relativeTimeoutMs = Number(timeoutNs / 1000000n);
-            timeoutMs =
-              timeoutMs == null ? relativeTimeoutMs : Math.min(timeoutMs, relativeTimeoutMs);
-            subscriptions.push({ kind: "clock", userdata });
-            continue;
-          }
-
-          if (tag !== 1 && tag !== 2) {
-            subscriptions.push({ kind: "unsupported", userdata });
-            continue;
-          }
-
-          const fd = view.getUint32(base + 16, true);
-          const descriptor = Number(fd) >>> 0;
-          const handle = this._externalFdHandle(descriptor);
-          const entry = this._descriptorEntry(descriptor);
-          let targetFd = null;
-          if (
-            (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-            typeof handle.targetFd === "number"
-          ) {
-            targetFd = Number(handle.targetFd) >>> 0;
-          } else if (
-            entry?.kind === "stdin" ||
-            entry?.kind === "stdout" ||
-            entry?.kind === "stderr"
-          ) {
-            targetFd = descriptor;
-          }
-
-          subscriptions.push({
-            kind: tag === 1 ? "fd_read" : "fd_write",
-            fd: descriptor,
-            handle,
-            targetFd,
-            streamKind: entry?.kind,
-            userdata,
-          });
-        }
-
-        const deadline = timeoutMs == null ? null : Date.now() + Math.max(0, timeoutMs);
-        const readyEvents = [];
-
-        while (readyEvents.length === 0) {
-          for (const subscription of subscriptions) {
-            // A clock subscription is ready once its deadline has elapsed; report
-            // it as a first-class event so it is returned alongside any ready fds
-            // (not only as a fallback when nothing else is ready).
-            if (subscription.kind === "clock") {
-              if (deadline != null && Date.now() >= deadline) {
-                readyEvents.push({
-                  userdata: subscription.userdata,
-                  error: __agentOSWasiErrnoSuccess,
-                  type: 0,
-                  nbytes: 0,
-                  flags: 0,
-                });
-              }
-              continue;
-            }
-            if (subscription.kind === "fd_read" && subscription.handle?.kind === "pipe-read") {
-              const pipe = subscription.handle.pipe;
-              if (
-                pipe &&
-                (pipe.chunks.length > 0 ||
-                  (pipe.writeHandleCount === 0 && pipe.producers.size === 0))
-              ) {
-                readyEvents.push({
-                  userdata: subscription.userdata,
-                  error: __agentOSWasiErrnoSuccess,
-                  type: 1,
-                  nbytes: pipe.chunks[0]?.length ?? 0,
-                  flags: 0,
-                });
-              }
-              continue;
-            }
-
-            // Without a kernel poll bridge, resolve stdin fd_read readiness from
-            // the host-seam queued byte count (the browser delivers stdin through
-            // the runtime process object). Reporting nbytes does not consume input.
-            if (
-              !syncRpc &&
-              subscription.kind === "fd_read" &&
-              subscription.streamKind === "stdin" &&
-              typeof __agentOSWasiHost.stdinReadableBytes === "function"
-            ) {
-              const available = Number(__agentOSWasiHost.stdinReadableBytes()) >>> 0;
-              if (available > 0) {
-                readyEvents.push({
-                  userdata: subscription.userdata,
-                  error: __agentOSWasiErrnoSuccess,
-                  type: 1,
-                  nbytes: available,
-                  flags: 0,
-                });
-              }
-              continue;
-            }
-
-            if (subscription.kind === "fd_write" && subscription.handle?.kind === "pipe-write") {
-              readyEvents.push({
-                userdata: subscription.userdata,
-                error: __agentOSWasiErrnoSuccess,
-                type: 2,
-                nbytes: 65536,
-                flags: 0,
-              });
-              continue;
-            }
-
-            // Without a kernel poll bridge (a non-native backend) stdout/stderr
-            // are always writable, so resolve their fd_write readiness directly
-            // instead of leaving it to the (absent) __kernel_poll round-trip.
-            if (
-              !syncRpc &&
-              subscription.kind === "fd_write" &&
-              (subscription.streamKind === "stdout" ||
-                subscription.streamKind === "stderr")
-            ) {
-              readyEvents.push({
-                userdata: subscription.userdata,
-                error: __agentOSWasiErrnoSuccess,
-                type: 2,
-                nbytes: 65536,
-                flags: 0,
-              });
-            }
-          }
-
-          if (readyEvents.length > 0) {
-            break;
-          }
-
-          // Without a kernel poll bridge, fd readiness is resolved synchronously
-          // above (stdio fast paths) or via pipes; if there is no clock to wait on
-          // and no pipe to pump, no further progress is possible, so stop instead
-          // of busy-waiting until the caller times out.
-          if (
-            !syncRpc &&
-            !subscriptions.some((subscription) => subscription.kind === "clock") &&
-            !subscriptions.some(
-              (subscription) =>
-                subscription.handle?.kind === "pipe-read" ||
-                subscription.handle?.kind === "pipe-write",
-            )
-          ) {
-            break;
-          }
-
-          const pollTargets = subscriptions
-            .filter(
-              (subscription) =>
-                (subscription.kind === "fd_read" || subscription.kind === "fd_write") &&
-                typeof subscription.targetFd === "number",
-            )
-            .map((subscription) => ({
-              fd: subscription.targetFd,
-              events: subscription.kind === "fd_read" ? kernelPollIn : kernelPollOut,
-            }));
-          const waitMs =
-            deadline == null ? 10 : Math.max(0, Math.min(10, deadline - Date.now()));
-
-          if (syncRpc && pollTargets.length > 0) {
-            let response = null;
-            try {
-              response = syncRpc.callSync("__kernel_poll", [pollTargets, waitMs]);
-            } catch (error) {
-              __agentOSWasiDebug(
-                `poll_oneoff __kernel_poll failed: ${
-                  error instanceof Error ? error.message : String(error)
-                }`,
-              );
-            }
-
-            const responseEntries = Array.isArray(response?.fds) ? response.fds : [];
-            for (const subscription of subscriptions) {
-              if (
-                (subscription.kind !== "fd_read" && subscription.kind !== "fd_write") ||
-                typeof subscription.targetFd !== "number"
-              ) {
-                continue;
-              }
-
-              const responseEntry = responseEntries.find(
-                (entry) => (Number(entry?.fd) >>> 0) === subscription.targetFd,
-              );
-              const revents = Number(responseEntry?.revents) >>> 0;
-              const interested =
-                subscription.kind === "fd_read"
-                  ? kernelPollIn | kernelPollErr | kernelPollHup
-                  : kernelPollOut | kernelPollErr | kernelPollHup;
-              if ((revents & interested) === 0) {
-                continue;
-              }
-
-              readyEvents.push({
-                userdata: subscription.userdata,
-                error: __agentOSWasiErrnoSuccess,
-                type: subscription.kind === "fd_read" ? 1 : 2,
-                nbytes: subscription.kind === "fd_read" ? 1 : 65536,
-                flags: 0,
-              });
-            }
-          }
-
-          if (readyEvents.length > 0) {
-            break;
-          }
-
-          let pumped = false;
-          for (const subscription of subscriptions) {
-            if (subscription.kind === "fd_read" && subscription.handle?.kind === "pipe-read") {
-              pumped = this._pumpPipeProducers(subscription.handle.pipe, 10) || pumped;
-            }
-          }
-
-          if (pumped) {
-            continue;
-          }
-
-          if (deadline != null && Date.now() >= deadline) {
-            break;
-          }
-
-          if (
-            pollTargets.length === 0 &&
-            typeof Atomics?.wait !== "function" &&
-            deadline == null
-          ) {
-            break;
-          }
-
-          if (
-            typeof Atomics?.wait === "function" &&
-            typeof syntheticWaitArray !== "undefined"
-          ) {
-            Atomics.wait(syntheticWaitArray, 0, 0, waitMs);
-          } else if (!syncRpc && pollTargets.length === 0) {
-            break;
-          }
-        }
-
-        if (
-          readyEvents.length === 0 &&
-          subscriptions.some((subscription) => subscription.kind === "clock")
-        ) {
-          const clockSubscription = subscriptions.find(
-            (subscription) => subscription.kind === "clock",
-          );
-          readyEvents.push({
-            userdata: clockSubscription.userdata,
-            error: __agentOSWasiErrnoSuccess,
-            type: 0,
-            nbytes: 0,
-            flags: 0,
-          });
-        }
-
-        for (let index = 0; index < readyEvents.length; index += 1) {
-          const base = (Number(outPtr) >>> 0) + index * eventSize;
-          const event = readyEvents[index];
-          memory.set(event.userdata, base);
-          view.setUint16(base + 8, event.error, true);
-          view.setUint8(base + 10, event.type);
-          view.setBigUint64(base + 16, BigInt(event.nbytes), true);
-          view.setUint16(base + 24, event.flags, true);
-        }
-
-        return this._writeUint32(neventsPtr, readyEvents.length);
-      } catch (error) {
-        __agentOSWasiDebug(
-          `poll_oneoff failed: ${error instanceof Error ? error.message : String(error)}`,
-        );
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _randomGet(bufPtr, bufLen) {
-      try {
-        const length = Number(bufLen) >>> 0;
-        const bytes = Buffer.allocUnsafe(length);
-        __agentOSCrypto().randomFillSync(bytes);
-        return this._writeBytes(bufPtr, bytes);
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _schedYield() {
-      return __agentOSWasiErrnoSuccess;
-    }
-
-    _procExit(code) {
-      if (this.returnOnExit) {
-        const error = new Error(`wasi exit(${Number(code) >>> 0})`);
-        error.__agentOSWasiExit = true;
-        error.code = Number(code) >>> 0;
-        throw error;
-      }
-      process.exit(Number(code) >>> 0);
-    }
-  }
-
-  Object.defineProperty(globalThis, "__agentOSWasiModule", {
-    configurable: true,
-    enumerable: false,
-    value: { WASI },
-    writable: true,
-  });
-}
diff --git a/crates/execution/assets/runners/wasi-module.js.orig b/crates/execution/assets/runners/wasi-module.js.orig
deleted file mode 100644
index 53a9e960b..000000000
--- a/crates/execution/assets/runners/wasi-module.js.orig
+++ /dev/null
@@ -1,2262 +0,0 @@
-if (typeof globalThis !== "undefined" && typeof globalThis.__agentOSWasiModule === "undefined") {
-  // Per-backend host seam (C / convergence): native populates it from its own
-  // host globals (the `|| __agentOs*` fallbacks below); a non-native backend
-  // (the browser converged worker) can pre-set `globalThis.__agentOSWasiHost`
-  // with browser-provided equivalents so this same preview1 runner is shared.
-  const __agentOSWasiHost =
-    (typeof globalThis.__agentOSWasiHost === "object" &&
-      globalThis.__agentOSWasiHost) ||
-    {};
-  const __agentOSWasiRequireBuiltin =
-    __agentOSWasiHost.requireBuiltin ||
-    (typeof __agentOSRequireBuiltin !== "undefined"
-      ? __agentOSRequireBuiltin
-      : (name) => globalThis.require(name));
-  const __agentOSFs = () => __agentOSWasiRequireBuiltin("node:fs");
-  const __agentOSPath = () => __agentOSWasiRequireBuiltin("node:path");
-  const __agentOSCrypto = () => __agentOSWasiRequireBuiltin("node:crypto");
-  // Stdio sync-RPC bridge + fd-handle lookup come from the host seam (a
-  // non-native backend supplies browser equivalents); native falls back to its
-  // own host globals so behavior is unchanged.
-  // Lazy resolvers: the native host globals are populated AFTER this module is
-  // defined (per-execution), so resolve at call time, not at module-load.
-  const __agentOSWasiSyncRpc = () =>
-    __agentOSWasiHost.syncRpc ||
-    (typeof globalThis.__agentOSSyncRpc !== "undefined"
-      ? globalThis.__agentOSSyncRpc
-      : undefined);
-  const __agentOSWasiLookupFdHandle = () =>
-    __agentOSWasiHost.lookupFdHandle ||
-    (typeof globalThis.lookupFdHandle === "function"
-      ? globalThis.lookupFdHandle
-      : undefined);
-  const __agentOSWasiErrnoSuccess = 0;
-  const __agentOSWasiErrnoAcces = 2;
-  const __agentOSWasiErrnoBadf = 8;
-  const __agentOSWasiErrnoExist = 20;
-  const __agentOSWasiErrnoFault = 21;
-  const __agentOSWasiErrnoInval = 28;
-  const __agentOSWasiErrnoIo = 29;
-  const __agentOSWasiErrnoNoent = 44;
-  const __agentOSWasiErrnoNosys = 52;
-  const __agentOSWasiErrnoNotdir = 54;
-  const __agentOSWasiErrnoPipe = 64;
-  const __agentOSWasiErrnoRofs = 69;
-  const __agentOSWasiErrnoNotcapable = 76;
-  const __agentOSWasiErrnoXdev = 18;
-  const __agentOSWasiFiletypeUnknown = 0;
-  const __agentOSWasiFiletypeCharacterDevice = 2;
-  const __agentOSWasiFiletypeDirectory = 3;
-  const __agentOSWasiFiletypeRegularFile = 4;
-  const __agentOSWasiFiletypeSymbolicLink = 7;
-  const __agentOSWasiLookupSymlinkFollow = 1;
-  const __agentOSWasiOpenCreate = 1;
-  const __agentOSWasiOpenDirectory = 2;
-  const __agentOSWasiOpenExclusive = 4;
-  const __agentOSWasiOpenTruncate = 8;
-  const __agentOSWasiRightFdRead = 1n << 1n;
-  const __agentOSWasiRightFdWrite = 1n << 6n;
-  const __agentOSWasiDefaultRightsBase = 0xffffffffffffffffn;
-  const __agentOSWasiDefaultRightsInheriting = 0xffffffffffffffffn;
-  const __agentOSWasiWhenceSet = 0;
-  const __agentOSWasiWhenceCur = 1;
-  const __agentOSWasiWhenceEnd = 2;
-  // Read cap: a non-native backend provides it via the seam; native uses its
-  // build-substituted constant. The ternary short-circuits so the native-only
-  // placeholder token is never evaluated when the seam supplies a number.
-  const __agentOSWasmSyncReadLimitBytes =
-    typeof __agentOSWasiHost.syncReadLimitBytes === "number"
-      ? __agentOSWasiHost.syncReadLimitBytes
-      : __SECURE_EXEC_WASM_SYNC_READ_LIMIT_BYTES__;
-  const __agentOSKernelStdioSyncRpcEnabled = () =>
-    process?.env?.AGENTOS_WASI_STDIO_SYNC_RPC === "1";
-  const __agentOSWasiDebugEnabled = () => process?.env?.AGENTOS_WASM_WASI_DEBUG === "1";
-  const __agentOSWasiDebug = (message) => {
-    if (!__agentOSWasiDebugEnabled() || typeof process?.stderr?.write !== "function") {
-      return;
-    }
-    try {
-      process.stderr.write(`[secure-exec-wasi] ${message}\n`);
-    } catch {
-      // Ignore debug logging failures.
-    }
-  };
-
-  class WASI {
-    constructor(options = {}) {
-      this.args = Array.isArray(options.args) ? options.args.map((value) => String(value)) : [];
-      this.env =
-        options.env && typeof options.env === "object"
-          ? Object.fromEntries(
-              Object.entries(options.env).map(([key, value]) => [String(key), String(value)]),
-            )
-          : {};
-      this.preopens = options.preopens && typeof options.preopens === "object" ? options.preopens : {};
-      this.returnOnExit = options.returnOnExit === true;
-      this.instance = null;
-      this.nextFd = 3;
-      this.fdTable = new Map([
-        [0, { kind: "stdin", fdFlags: 0 }],
-        [1, { kind: "stdout", fdFlags: 0 }],
-        [2, { kind: "stderr", fdFlags: 0 }],
-      ]);
-      for (const [guestPath, spec] of Object.entries(this.preopens)) {
-        const normalized = this._normalizePreopenSpec(spec);
-        if (!normalized) {
-          continue;
-        }
-        this.fdTable.set(this.nextFd++, {
-          kind: "preopen",
-          guestPath: String(guestPath),
-          hostPath: normalized.hostPath,
-          readOnly: normalized.readOnly,
-          rightsBase: normalized.rightsBase,
-          rightsInheriting: normalized.rightsInheriting,
-          fdFlags: 0,
-        });
-      }
-      this.wasiImport = {
-        args_get: (...args) => this._argsGet(...args),
-        args_sizes_get: (...args) => this._argsSizesGet(...args),
-        clock_time_get: (...args) => this._clockTimeGet(...args),
-        clock_res_get: (...args) => this._clockResGet(...args),
-        environ_get: (...args) => this._environGet(...args),
-        environ_sizes_get: (...args) => this._environSizesGet(...args),
-        fd_close: (...args) => this._fdClose(...args),
-        fd_fdstat_get: (...args) => this._fdFdstatGet(...args),
-        fd_fdstat_set_flags: (...args) => this._fdFdstatSetFlags(...args),
-        fd_filestat_get: (...args) => this._fdFilestatGet(...args),
-        fd_filestat_set_size: (...args) => this._fdFilestatSetSize(...args),
-        fd_prestat_dir_name: (...args) => this._fdPrestatDirName(...args),
-        fd_prestat_get: (...args) => this._fdPrestatGet(...args),
-        fd_pread: (...args) => this._fdPread(...args),
-        fd_pwrite: (...args) => this._fdPwrite(...args),
-        fd_readdir: (...args) => this._fdReaddir(...args),
-        fd_read: (...args) => this._fdRead(...args),
-        fd_seek: (...args) => this._fdSeek(...args),
-        fd_sync: (...args) => this._fdSync(...args),
-        fd_tell: (...args) => this._fdTell(...args),
-        fd_write: (...args) => this._fdWrite(...args),
-        path_create_directory: (...args) => this._pathCreateDirectory(...args),
-        path_filestat_get: (...args) => this._pathFilestatGet(...args),
-        path_link: (...args) => this._pathLink(...args),
-        path_open: (...args) => this._pathOpen(...args),
-        path_readlink: (...args) => this._pathReadlink(...args),
-        path_remove_directory: (...args) => this._pathRemoveDirectory(...args),
-        path_rename: (...args) => this._pathRename(...args),
-        path_symlink: (...args) => this._pathSymlink(...args),
-        path_unlink_file: (...args) => this._pathUnlinkFile(...args),
-        poll_oneoff: (...args) => this._pollOneoff(...args),
-        proc_exit: (...args) => this._procExit(...args),
-        random_get: (...args) => this._randomGet(...args),
-        sched_yield: (...args) => this._schedYield(...args),
-      };
-    }
-
-    start(instance) {
-      this.instance = instance;
-      try {
-        if (typeof instance?.exports?._start === "function") {
-          instance.exports._start();
-        }
-        return 0;
-      } catch (error) {
-        if (error && error.__agentOSWasiExit === true) {
-          return Number(error.code) >>> 0;
-        }
-        throw error;
-      }
-    }
-
-    _memoryView() {
-      const memory = this.instance?.exports?.memory;
-      if (!(memory instanceof WebAssembly.Memory)) {
-        throw new Error("WASI memory export is unavailable");
-      }
-      return new DataView(memory.buffer);
-    }
-
-    _memoryBytes() {
-      const memory = this.instance?.exports?.memory;
-      if (!(memory instanceof WebAssembly.Memory)) {
-        throw new Error("WASI memory export is unavailable");
-      }
-      return new Uint8Array(memory.buffer);
-    }
-
-    _boundedIovLength(iovs, iovsLen) {
-      const view = this._memoryView();
-      let length = 0;
-      for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-        const entryOffset = (Number(iovs) >>> 0) + index * 8;
-        length += view.getUint32(entryOffset + 4, true);
-        if (length > __agentOSWasmSyncReadLimitBytes) {
-          throw new RangeError(
-            `WASI read iov length ${length} exceeds ${__agentOSWasmSyncReadLimitBytes}`,
-          );
-        }
-      }
-      return length >>> 0;
-    }
-
-    // Read-side iov capacity, clamped (not thrown) to the sync read cap. A guest
-    // may legitimately offer a huge read buffer (e.g. iov_len 0xffffffc0 = "read
-    // up to ~4GB"); the runner reads only what is available, bounded by the cap,
-    // so the read allocation/RPC stays bounded without rejecting the read. Writes
-    // keep using _boundedIovLength (throwing) because their iov length is real
-    // data that must not be silently truncated.
-    _boundedReadLength(iovs, iovsLen) {
-      const view = this._memoryView();
-      let length = 0;
-      for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-        const entryOffset = (Number(iovs) >>> 0) + index * 8;
-        length += view.getUint32(entryOffset + 4, true);
-        if (length >= __agentOSWasmSyncReadLimitBytes) {
-          return __agentOSWasmSyncReadLimitBytes;
-        }
-      }
-      return length >>> 0;
-    }
-
-    _normalizeRights(value, fallback) {
-      try {
-        return BigInt.asUintN(64, BigInt(value));
-      } catch {
-        return fallback;
-      }
-    }
-
-    _normalizePreopenSpec(value) {
-      // Path-model seam (convergence item C): native maps guest paths to HOST
-      // paths (its preopen specs carry `hostPath`); a non-native backend with no
-      // host paths (the browser, whose `require("fs")` IS the kernel VFS) can
-      // supply `__agentOSWasiHost.normalizePreopen` to treat the guest/VFS path
-      // as the "hostPath" identity, so the same runner serves both.
-      if (typeof __agentOSWasiHost.normalizePreopen === "function") {
-        const seamNormalized = __agentOSWasiHost.normalizePreopen(value, {
-          defaultRightsBase: __agentOSWasiDefaultRightsBase,
-          defaultRightsInheriting: __agentOSWasiDefaultRightsInheriting,
-          normalizeRights: (rights, fallback) =>
-            this._normalizeRights(rights, fallback),
-        });
-        return seamNormalized ?? null;
-      }
-      if (typeof value === "string") {
-        return {
-          hostPath: String(value),
-          readOnly: false,
-          rightsBase: __agentOSWasiDefaultRightsBase,
-          rightsInheriting: __agentOSWasiDefaultRightsInheriting,
-        };
-      }
-      if (!value || typeof value !== "object" || typeof value.hostPath !== "string") {
-        return null;
-      }
-      return {
-        hostPath: String(value.hostPath),
-        readOnly: value.readOnly === true,
-        rightsBase: this._normalizeRights(
-          value.rightsBase,
-          __agentOSWasiDefaultRightsBase,
-        ),
-        rightsInheriting: this._normalizeRights(
-          value.rightsInheriting,
-          __agentOSWasiDefaultRightsInheriting,
-        ),
-      };
-    }
-
-    _descriptorRightsBase(entry) {
-      return this._normalizeRights(
-        entry?.rightsBase,
-        __agentOSWasiDefaultRightsBase,
-      );
-    }
-
-    _descriptorRightsInheriting(entry) {
-      return this._normalizeRights(
-        entry?.rightsInheriting,
-        __agentOSWasiDefaultRightsInheriting,
-      );
-    }
-
-    _hasWriteRights(rights) {
-      try {
-        return (BigInt(rights) & __agentOSWasiRightFdWrite) !== 0n;
-      } catch {
-        return true;
-      }
-    }
-
-    _writeUint32(ptr, value) {
-      try {
-        this._memoryView().setUint32(Number(ptr) >>> 0, Number(value) >>> 0, true);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        __agentOSWasiDebug(`writeUint32 failed ptr=${Number(ptr)} value=${Number(value)}`);
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _writeUint64(ptr, value) {
-      try {
-        this._memoryView().setBigUint64(Number(ptr) >>> 0, BigInt(value), true);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        __agentOSWasiDebug(`writeUint64 failed ptr=${Number(ptr)} value=${String(value)}`);
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _writeBytes(ptr, bytes) {
-      try {
-        this._memoryBytes().set(bytes, Number(ptr) >>> 0);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        __agentOSWasiDebug(`writeBytes failed ptr=${Number(ptr)} len=${bytes?.length ?? 0}`);
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _readBytes(ptr, len) {
-      const start = Number(ptr) >>> 0;
-      const end = start + (Number(len) >>> 0);
-      return Buffer.from(this._memoryBytes().slice(start, end));
-    }
-
-    _readString(ptr, len) {
-      return this._readBytes(ptr, len).toString("utf8");
-    }
-
-    _decodeSyncRpcBytes(value) {
-      if (value == null) {
-        return null;
-      }
-      if (typeof Buffer !== "undefined" && Buffer.isBuffer(value)) {
-        return value;
-      }
-      if (value instanceof Uint8Array) {
-        return Buffer.from(value);
-      }
-      if (ArrayBuffer.isView(value)) {
-        return Buffer.from(value.buffer, value.byteOffset, value.byteLength);
-      }
-      if (value instanceof ArrayBuffer) {
-        return Buffer.from(value);
-      }
-      if (
-        value &&
-        typeof value === "object" &&
-        value.__agentOSType === "bytes" &&
-        typeof value.base64 === "string"
-      ) {
-        return Buffer.from(value.base64, "base64");
-      }
-      return null;
-    }
-
-    _dequeuePipeBytes(pipe, maxBytes) {
-      if (!pipe || !Array.isArray(pipe.chunks) || pipe.chunks.length === 0) {
-        return Buffer.alloc(0);
-      }
-
-      let remaining = Math.max(0, Number(maxBytes) >>> 0);
-      if (remaining === 0) {
-        return Buffer.alloc(0);
-      }
-
-      const parts = [];
-      while (remaining > 0 && pipe.chunks.length > 0) {
-        const chunk = pipe.chunks[0];
-        if (!chunk || chunk.length === 0) {
-          pipe.chunks.shift();
-          continue;
-        }
-
-        if (chunk.length <= remaining) {
-          parts.push(chunk);
-          pipe.chunks.shift();
-          remaining -= chunk.length;
-          continue;
-        }
-
-        parts.push(chunk.subarray(0, remaining));
-        pipe.chunks[0] = chunk.subarray(remaining);
-        remaining = 0;
-      }
-
-      return Buffer.concat(parts);
-    }
-
-    _enqueuePipeBytes(pipe, bytes) {
-      if (!pipe || !Array.isArray(pipe.chunks)) {
-        return;
-      }
-      const chunk = Buffer.from(bytes ?? []);
-      if (chunk.length === 0) {
-        return;
-      }
-      pipe.chunks.push(chunk);
-    }
-
-    _pipeHasReaders(pipe) {
-      return (
-        (pipe?.readHandleCount ?? 0) > 0 ||
-        (pipe?.consumers?.size ?? 0) > 0
-      );
-    }
-
-    _flushPipeConsumers(pipe) {
-      if (
-        !pipe ||
-        typeof pipe.consumers?.entries !== "function" ||
-        !Array.isArray(pipe.chunks) ||
-        pipe.chunks.length === 0 ||
-        typeof globalThis?.__agentOSSyncRpc?.callSync !== "function"
-      ) {
-        return false;
-      }
-
-      let flushed = false;
-      while (pipe.chunks.length > 0) {
-        const chunk = pipe.chunks.shift();
-        if (!chunk || chunk.length === 0) {
-          continue;
-        }
-
-        for (const [consumerKey, consumer] of Array.from(pipe.consumers.entries())) {
-          if (!consumer || typeof consumer.childId !== "string") {
-            pipe.consumers.delete(consumerKey);
-            continue;
-          }
-          try {
-            __agentOSWasiSyncRpc().callSync("child_process.write_stdin", [
-              consumer.childId,
-              chunk,
-            ]);
-            flushed = true;
-          } catch {
-            pipe.consumers.delete(consumerKey);
-          }
-        }
-      }
-
-      return flushed;
-    }
-
-    _closePipeConsumers(pipe) {
-      if (
-        !pipe ||
-        typeof pipe.consumers?.entries !== "function" ||
-        typeof globalThis?.__agentOSSyncRpc?.callSync !== "function"
-      ) {
-        return false;
-      }
-
-      let closed = false;
-      for (const [consumerKey, consumer] of Array.from(pipe.consumers.entries())) {
-        if (!consumer || typeof consumer.childId !== "string") {
-          pipe.consumers.delete(consumerKey);
-          continue;
-        }
-        try {
-          __agentOSWasiSyncRpc().callSync("child_process.close_stdin", [
-            consumer.childId,
-          ]);
-          closed = true;
-        } catch {
-          // Ignore close errors during teardown.
-        }
-        pipe.consumers.delete(consumerKey);
-      }
-
-      return closed;
-    }
-
-    _pumpPipeProducers(pipe, waitMs) {
-      if (
-        !pipe ||
-        typeof pipe.producers?.entries !== "function" ||
-        typeof globalThis?.__agentOSSyncRpc?.callSync !== "function"
-      ) {
-        return false;
-      }
-
-      let processed = false;
-      for (const [producerKey, producer] of Array.from(pipe.producers.entries())) {
-        if (!producer || typeof producer.childId !== "string") {
-          pipe.producers.delete(producerKey);
-          continue;
-        }
-
-        let event = null;
-        try {
-          event = __agentOSWasiSyncRpc().callSync("child_process.poll", [
-            producer.childId,
-            Math.max(0, Number(waitMs) >>> 0),
-          ]);
-        } catch {
-          pipe.producers.delete(producerKey);
-          continue;
-        }
-
-        if (!event) {
-          continue;
-        }
-
-        processed = true;
-        const streamType =
-          producer.stream === "stderr" ? "stderr" : producer.stream === "stdout" ? "stdout" : null;
-        if ((event.type === "stdout" || event.type === "stderr") && event.type === streamType) {
-          const chunk = this._decodeSyncRpcBytes(event.data);
-          if (chunk && chunk.length > 0) {
-            pipe.chunks.push(Buffer.from(chunk));
-          }
-          continue;
-        }
-
-        if (event.type === "exit") {
-          pipe.producers.delete(producerKey);
-          if (pipe.producers.size === 0 && (pipe.writeHandleCount ?? 0) === 0) {
-            this._closePipeConsumers(pipe);
-          }
-          continue;
-        }
-      }
-
-      return processed;
-    }
-
-    _collectIovs(iovs, iovsLen) {
-      const totalLength = this._boundedIovLength(iovs, iovsLen);
-      const view = this._memoryView();
-      const chunks = [];
-      for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-        const entryOffset = (Number(iovs) >>> 0) + index * 8;
-        const ptr = view.getUint32(entryOffset, true);
-        const len = view.getUint32(entryOffset + 4, true);
-        chunks.push(this._readBytes(ptr, len));
-      }
-      return Buffer.concat(chunks, totalLength);
-    }
-
-    _writeToIovs(iovs, iovsLen, bytes) {
-      const view = this._memoryView();
-      const memory = this._memoryBytes();
-      let sourceOffset = 0;
-      for (let index = 0; index < (Number(iovsLen) >>> 0) && sourceOffset < bytes.length; index += 1) {
-        const entryOffset = (Number(iovs) >>> 0) + index * 8;
-        const ptr = view.getUint32(entryOffset, true);
-        const len = view.getUint32(entryOffset + 4, true);
-        const chunk = bytes.subarray(sourceOffset, sourceOffset + len);
-        memory.set(chunk, Number(ptr) >>> 0);
-        sourceOffset += chunk.length;
-      }
-      return sourceOffset;
-    }
-
-    _stringTable(values) {
-      return values.map((value) => Buffer.from(`${String(value)}\0`, "utf8"));
-    }
-
-    _writeStringTable(values, offsetsPtr, bufferPtr) {
-      try {
-        const view = this._memoryView();
-        const memory = this._memoryBytes();
-        let cursor = Number(bufferPtr) >>> 0;
-        for (let index = 0; index < values.length; index += 1) {
-          const bytes = values[index];
-          view.setUint32((Number(offsetsPtr) >>> 0) + index * 4, cursor, true);
-          memory.set(bytes, cursor);
-          cursor += bytes.length;
-        }
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        __agentOSWasiDebug(
-          `writeStringTable failed offsetsPtr=${Number(offsetsPtr)} bufferPtr=${Number(bufferPtr)} count=${values.length}`,
-        );
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _filetypeForStats(stats) {
-      if (!stats) {
-        return __agentOSWasiFiletypeUnknown;
-      }
-      if (typeof stats.isDirectory === "function" && stats.isDirectory()) {
-        return __agentOSWasiFiletypeDirectory;
-      }
-      if (typeof stats.isFile === "function" && stats.isFile()) {
-        return __agentOSWasiFiletypeRegularFile;
-      }
-      if (typeof stats.isSymbolicLink === "function" && stats.isSymbolicLink()) {
-        return __agentOSWasiFiletypeSymbolicLink;
-      }
-      if (typeof stats.isCharacterDevice === "function" && stats.isCharacterDevice()) {
-        return __agentOSWasiFiletypeCharacterDevice;
-      }
-      return __agentOSWasiFiletypeUnknown;
-    }
-
-    _fdFiletype(entry) {
-      if (!entry) {
-        return __agentOSWasiFiletypeUnknown;
-      }
-      if (
-        entry.kind === "stdin" ||
-        entry.kind === "stdout" ||
-        entry.kind === "stderr"
-      ) {
-        return __agentOSWasiFiletypeCharacterDevice;
-      }
-      if (entry.kind === "preopen" || entry.kind === "directory") {
-        return __agentOSWasiFiletypeDirectory;
-      }
-      if (entry.kind === "symlink") {
-        return __agentOSWasiFiletypeSymbolicLink;
-      }
-      return __agentOSWasiFiletypeRegularFile;
-    }
-
-    _mapFsError(error) {
-      switch (error?.code) {
-        case "EACCES":
-        case "EPERM":
-          return __agentOSWasiErrnoAcces;
-        case "ENOENT":
-          return __agentOSWasiErrnoNoent;
-        case "ENOTDIR":
-          return __agentOSWasiErrnoNotdir;
-        case "EEXIST":
-          return __agentOSWasiErrnoExist;
-        case "EINVAL":
-          return __agentOSWasiErrnoInval;
-        case "EROFS":
-          return __agentOSWasiErrnoRofs;
-        case "EXDEV":
-          return __agentOSWasiErrnoXdev;
-        default:
-          return __agentOSWasiErrnoIo;
-      }
-    }
-
-    _descriptorEntry(fd) {
-      return this.fdTable.get(Number(fd) >>> 0) ?? null;
-    }
-
-    _localFdHandle(fd) {
-      // A non-native backend whose `realFd` values are not real host OS fds with
-      // their own kernel offset (the browser, whose fs descriptors are a JS
-      // handle table) disables local-fd passthrough so locally-opened files use
-      // the offset-aware file branches (fd_read/fd_write pass the tracked
-      // entry.offset as an explicit position) instead of host-passthrough reads
-      // that rely on a null position advancing a real fd. Native keeps passthrough
-      // so guest-opened fds can be shared with child processes.
-      if (__agentOSWasiHost.disableLocalFdPassthrough === true) {
-        return null;
-      }
-      const entry = this._descriptorEntry(fd);
-      if (!entry || typeof entry.realFd !== "number") {
-        return null;
-      }
-      return {
-        kind: "host-passthrough",
-        targetFd: entry.realFd,
-        displayFd: Number(fd) >>> 0,
-        refCount: 1,
-        open: true,
-        readOnly: entry.readOnly === true,
-      };
-    }
-
-    _externalFdHandle(fd) {
-      const descriptor = Number(fd) >>> 0;
-      const localHandle = this._localFdHandle(descriptor);
-      if (localHandle) {
-        return localHandle;
-      }
-      try {
-        if (typeof lookupFdHandle === "function") {
-          return lookupFdHandle(descriptor) ?? null;
-        }
-      } catch {
-        // Fall through to other lookup paths.
-      }
-      try {
-        const __agentOSWasiFdHandleFn = __agentOSWasiLookupFdHandle();
-        if (typeof __agentOSWasiFdHandleFn === "function") {
-          return __agentOSWasiFdHandleFn(descriptor) ?? null;
-        }
-      } catch {
-        // Ignore missing global bridge helpers.
-      }
-      return null;
-    }
-
-    _descriptorHostPath(entry) {
-      if (!entry) {
-        return null;
-      }
-      if (typeof entry.hostPath === "string") {
-        return entry.hostPath;
-      }
-      if (typeof entry.realFd === "number") {
-        return __agentOSFs().readlinkSync(`/proc/self/fd/${entry.realFd}`);
-      }
-      return null;
-    }
-
-    _descriptorFsPath(entry) {
-      if (!entry) {
-        return null;
-      }
-      if (typeof entry.hostPath === "string" && entry.hostPath.length > 0) {
-        return entry.hostPath;
-      }
-      if (typeof entry.guestPath === "string" && entry.guestPath.length > 0) {
-        return entry.guestPath;
-      }
-      return null;
-    }
-
-    _sidecarManagedProcess() {
-      if (
-        typeof globalThis.__agentOSWasmInternalEnv?.AGENTOS_SANDBOX_ROOT ===
-          "string" &&
-        globalThis.__agentOSWasmInternalEnv.AGENTOS_SANDBOX_ROOT.length > 0
-      ) {
-        return true;
-      }
-      return (
-        typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-        process.env.AGENTOS_SANDBOX_ROOT.length > 0
-      );
-    }
-
-    _descriptorDirectoryFsPath(entry) {
-      if (
-        (entry?.kind === "preopen" || entry?.kind === "directory") &&
-        this._sidecarManagedProcess()
-      ) {
-        return this._descriptorGuestPath(entry);
-      }
-      return this._descriptorFsPath(entry);
-    }
-
-    _descriptorGuestPath(entry) {
-      if (!entry) {
-        return null;
-      }
-      const guestPath = typeof entry.guestPath === "string" ? entry.guestPath : null;
-      if (guestPath === ".") {
-        return this._currentGuestCwd();
-      }
-      if (typeof guestPath === "string" && guestPath.length > 0) {
-        return __agentOSPath().posix.normalize(guestPath);
-      }
-      return null;
-    }
-
-    _descriptorPreopenName(entry) {
-      if (!entry) {
-        return null;
-      }
-      const guestPath = typeof entry.guestPath === "string" ? entry.guestPath : null;
-      if (guestPath === ".") {
-        return this._descriptorGuestPath(entry);
-      }
-      if (typeof guestPath === "string" && guestPath.length > 0) {
-        return __agentOSPath().posix.normalize(guestPath);
-      }
-      return null;
-    }
-
-    _currentDirectoryPreopen() {
-      for (const entry of this.fdTable.values()) {
-        if (entry?.kind === "preopen" && entry.guestPath === ".") {
-          return entry;
-        }
-      }
-      return null;
-    }
-
-    _descriptorPathBase(entry, target) {
-      const baseGuestPath = this._descriptorGuestPath(entry);
-      if (typeof baseGuestPath !== "string") {
-        return null;
-      }
-      return {
-        entry,
-        guestPath: baseGuestPath,
-        hostPath: typeof entry?.hostPath === "string" ? entry.hostPath : null,
-      };
-    }
-
-    _hostPathExists(hostPath) {
-      try {
-        __agentOSFs().statSync(hostPath);
-        return true;
-      } catch {
-        return false;
-      }
-    }
-
-    _currentGuestCwd() {
-      const pwd =
-        typeof this.env?.PWD === "string" && this.env.PWD.startsWith("/")
-          ? this.env.PWD
-          : typeof this.env?.HOME === "string" && this.env.HOME.startsWith("/")
-            ? this.env.HOME
-            : "/";
-      return __agentOSPath().posix.normalize(pwd);
-    }
-
-    _resolveHostMappingForGuestPath(guestPath) {
-      const normalized = __agentOSPath().posix.normalize(guestPath);
-      const mappings = [];
-      for (const entry of this.fdTable.values()) {
-        if (entry?.kind !== "preopen" || typeof entry.hostPath !== "string") {
-          continue;
-        }
-        const guestRoot = this._descriptorGuestPath(entry);
-        if (typeof guestRoot !== "string") {
-          continue;
-        }
-        mappings.push({
-          guestRoot,
-          hostPath: entry.hostPath,
-          readOnly: entry.readOnly === true,
-        });
-      }
-      mappings.sort((left, right) => right.guestRoot.length - left.guestRoot.length);
-
-      for (const mapping of mappings) {
-        const matchesRoot = mapping.guestRoot === "/" && normalized.startsWith("/");
-        const matchesNested =
-          normalized === mapping.guestRoot ||
-          normalized.startsWith(`${mapping.guestRoot}/`);
-        if (!matchesRoot && !matchesNested) {
-          continue;
-        }
-        const suffix =
-          normalized === mapping.guestRoot
-            ? ""
-            : mapping.guestRoot === "/"
-              ? normalized.slice(1)
-              : normalized.slice(mapping.guestRoot.length + 1);
-        return {
-          hostPath: suffix
-            ? __agentOSPath().join(mapping.hostPath, ...suffix.split("/"))
-            : mapping.hostPath,
-          readOnly: mapping.readOnly,
-        };
-      }
-
-      return null;
-    }
-
-    _resolveHostPathForGuestPath(guestPath) {
-      return this._resolveHostMappingForGuestPath(guestPath)?.hostPath ?? null;
-    }
-
-    _rootRelativeTargetPrefersCwd(target) {
-      const normalizedTarget = __agentOSPath().posix.normalize(target || ".");
-      if (normalizedTarget !== ".") {
-        return false;
-      }
-      return !this._rootRelativeTargetMatchesAbsoluteArg(target);
-    }
-
-    _rootRelativeTargetMatchesAbsoluteArg(target) {
-      const rootGuestPath = __agentOSPath().posix.resolve("/", target);
-      return this.args
-        .slice(1)
-        .some(
-          (arg) =>
-            typeof arg === "string" &&
-            arg.startsWith("/") &&
-            __agentOSPath().posix.normalize(arg) === rootGuestPath,
-        );
-    }
-
-    _resolveRootRelativePath(target, preferCreateParent = false) {
-      const rootGuestPath = __agentOSPath().posix.resolve("/", target);
-      const rootMapping = this._resolveHostMappingForGuestPath(rootGuestPath);
-      const rootHostPath = rootMapping?.hostPath ?? null;
-      const cwdGuestPath = this._currentGuestCwd();
-      if (cwdGuestPath !== "/") {
-        const cwdGuestTarget = __agentOSPath().posix.resolve(cwdGuestPath, target);
-        const cwdMapping = this._resolveHostMappingForGuestPath(cwdGuestTarget);
-        const cwdHostTarget = cwdMapping?.hostPath ?? null;
-        if (
-          typeof cwdHostTarget === "string" &&
-          (
-            (preferCreateParent && !this._rootRelativeTargetMatchesAbsoluteArg(target)) ||
-            this._rootRelativeTargetPrefersCwd(target) ||
-            (
-              this._hostPathExists(cwdHostTarget) &&
-              !(typeof rootHostPath === "string" && this._hostPathExists(rootHostPath))
-            )
-          )
-        ) {
-          return {
-            guestPath: cwdGuestTarget,
-            hostPath: cwdHostTarget,
-            readOnly: cwdMapping?.readOnly === true,
-          };
-        }
-      }
-      return {
-        guestPath: rootGuestPath,
-        hostPath: rootHostPath,
-        readOnly: rootMapping?.readOnly === true,
-      };
-    }
-
-    _resolveDescriptorPath(fd, pathPtr, pathLen, options = {}) {
-      const entry = this._descriptorEntry(fd);
-      if (!entry) {
-        return { error: __agentOSWasiErrnoBadf };
-      }
-      const target = this._readString(pathPtr, pathLen);
-      const base = this._descriptorPathBase(entry, target);
-      if (!base || typeof base.guestPath !== "string") {
-        return { error: __agentOSWasiErrnoBadf };
-      }
-      const guestPath = target.startsWith("/")
-        ? __agentOSPath().posix.normalize(target)
-        : __agentOSPath().posix.resolve(base.guestPath, target);
-      const mapped =
-        base.guestPath === "/" && !target.startsWith("/")
-          ? this._resolveRootRelativePath(
-              target,
-              options.preferCreateParent === true,
-            )
-          : {
-              guestPath,
-              ...(
-                this._resolveHostMappingForGuestPath(guestPath) ??
-                { hostPath: null, readOnly: false }
-              ),
-            };
-      const hostPath = mapped.hostPath;
-      if (typeof hostPath !== "string") {
-        return { error: __agentOSWasiErrnoNoent };
-      }
-      return {
-        error: __agentOSWasiErrnoSuccess,
-        guestPath: mapped.guestPath,
-        hostPath,
-        readOnly: mapped.readOnly === true,
-      };
-    }
-
-    _resolvedFsPath(resolved) {
-      if (this._sidecarManagedProcess() && typeof resolved?.guestPath === "string") {
-        return resolved.guestPath;
-      }
-      return resolved?.hostPath ?? null;
-    }
-
-    _writeFilestat(statPtr, stats, fallbackType) {
-      try {
-        const view = this._memoryView();
-        const offset = Number(statPtr) >>> 0;
-        const filetype = stats ? this._filetypeForStats(stats) : fallbackType;
-        view.setBigUint64(offset, 0n, true);
-        view.setBigUint64(offset + 8, BigInt(stats?.ino ?? 0), true);
-        view.setUint8(offset + 16, filetype);
-        view.setBigUint64(offset + 24, BigInt(stats?.nlink ?? 1), true);
-        view.setBigUint64(offset + 32, BigInt(stats?.size ?? 0), true);
-        view.setBigUint64(offset + 40, BigInt(Math.trunc((stats?.atimeMs ?? 0) * 1000000)), true);
-        view.setBigUint64(offset + 48, BigInt(Math.trunc((stats?.mtimeMs ?? 0) * 1000000)), true);
-        view.setBigUint64(offset + 56, BigInt(Math.trunc((stats?.ctimeMs ?? 0) * 1000000)), true);
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _argsSizesGet(argcPtr, argvBufSizePtr) {
-      const values = this._stringTable(this.args);
-      const total = values.reduce((sum, value) => sum + value.length, 0);
-      const argcStatus = this._writeUint32(argcPtr, values.length);
-      if (argcStatus !== __agentOSWasiErrnoSuccess) {
-        return argcStatus;
-      }
-      return this._writeUint32(argvBufSizePtr, total);
-    }
-
-    _argsGet(argvPtr, argvBufPtr) {
-      return this._writeStringTable(this._stringTable(this.args), argvPtr, argvBufPtr);
-    }
-
-    _environEntries() {
-      return Object.entries(this.env).map(([key, value]) => `${key}=${value}`);
-    }
-
-    _environSizesGet(countPtr, bufSizePtr) {
-      const values = this._stringTable(this._environEntries());
-      const total = values.reduce((sum, value) => sum + value.length, 0);
-      const countStatus = this._writeUint32(countPtr, values.length);
-      if (countStatus !== __agentOSWasiErrnoSuccess) {
-        return countStatus;
-      }
-      return this._writeUint32(bufSizePtr, total);
-    }
-
-    _environGet(environPtr, environBufPtr) {
-      return this._writeStringTable(
-        this._stringTable(this._environEntries()),
-        environPtr,
-        environBufPtr,
-      );
-    }
-
-    _clockTimeGet(_clockId, _precision, resultPtr) {
-      return this._writeUint64(resultPtr, BigInt(Date.now()) * 1000000n);
-    }
-
-    _clockResGet(_clockId, resultPtr) {
-      return this._writeUint64(resultPtr, 1000000n);
-    }
-
-    _fdWrite(fd, iovs, iovsLen, nwrittenPtr) {
-      try {
-        const bytes = this._collectIovs(iovs, iovsLen);
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._externalFdHandle(descriptor);
-        if (handle?.kind === "pipe-write" && handle.pipe) {
-          if (bytes.length > 0 && !this._pipeHasReaders(handle.pipe)) {
-            return __agentOSWasiErrnoPipe;
-          }
-          this._enqueuePipeBytes(handle.pipe, bytes);
-          this._flushPipeConsumers(handle.pipe);
-          return this._writeUint32(nwrittenPtr, bytes.length);
-        }
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          if (handle.readOnly === true) {
-            return __agentOSWasiErrnoRofs;
-          }
-          if (descriptor === 1 || descriptor === 2) {
-            const sidecarManagedProcess =
-              typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-              process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-            const useKernelStdioSyncRpc =
-              sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled();
-            if (useKernelStdioSyncRpc) {
-              const written = Number(
-                __agentOSWasiSyncRpc().callSync("__kernel_stdio_write", [descriptor, bytes]),
-              ) >>> 0;
-              return this._writeUint32(nwrittenPtr, written);
-            }
-          }
-          const written = __agentOSFs().writeSync(
-            handle.targetFd,
-            bytes,
-            0,
-            bytes.length,
-            null,
-          );
-          return this._writeUint32(nwrittenPtr, written);
-        }
-        if (handle?.kind === "guest-file" && typeof handle.targetFd === "number") {
-          const position = handle.append ? null : (handle.position ?? 0);
-          const written = __agentOSFs().writeSync(
-            handle.targetFd,
-            bytes,
-            0,
-            bytes.length,
-            position,
-          );
-          if (handle.append) {
-            handle.position = Number(__agentOSFs().fstatSync(handle.targetFd).size ?? 0);
-          } else {
-            handle.position = (handle.position ?? 0) + written;
-          }
-          return this._writeUint32(nwrittenPtr, written);
-        }
-        if (handle?.kind === "stdio" && typeof handle.targetFd === "number") {
-          const targetFd = Number(handle.targetFd) >>> 0;
-          if (targetFd === 1 || targetFd === 2) {
-            const sidecarManagedProcess =
-              typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-              process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-            const useKernelStdioSyncRpc =
-              sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled();
-            const written = useKernelStdioSyncRpc
-              ? Number(__agentOSWasiSyncRpc().callSync("__kernel_stdio_write", [targetFd, bytes])) >>> 0
-              : (targetFd === 2 ? process.stderr.write(bytes) : process.stdout.write(bytes), bytes.length);
-            return this._writeUint32(nwrittenPtr, written);
-          }
-          return __agentOSWasiErrnoBadf;
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (entry.kind === "stdout") {
-          const sidecarManagedProcess =
-            typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-            process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-          const useKernelStdioSyncRpc =
-            sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled();
-          const written = useKernelStdioSyncRpc
-            ? Number(__agentOSWasiSyncRpc().callSync("__kernel_stdio_write", [1, bytes])) >>> 0
-            : (process.stdout.write(bytes), bytes.length);
-          return this._writeUint32(nwrittenPtr, written);
-        }
-        if (entry.kind === "stderr") {
-          const sidecarManagedProcess =
-            typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-            process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-          const useKernelStdioSyncRpc =
-            sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled();
-          const written = useKernelStdioSyncRpc
-            ? Number(__agentOSWasiSyncRpc().callSync("__kernel_stdio_write", [2, bytes])) >>> 0
-            : (process.stderr.write(bytes), bytes.length);
-          return this._writeUint32(nwrittenPtr, written);
-        }
-        if (entry.readOnly === true) {
-          return __agentOSWasiErrnoRofs;
-        }
-        if (entry.kind === "file") {
-          const position = typeof entry.offset === "number" ? entry.offset : null;
-          const written = __agentOSFs().writeSync(
-            entry.realFd,
-            bytes,
-            0,
-            bytes.length,
-            position,
-          );
-          if (typeof entry.offset === "number") {
-            entry.offset += written;
-          }
-          return this._writeUint32(nwrittenPtr, written);
-        }
-        return __agentOSWasiErrnoBadf;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdPwrite(fd, iovs, iovsLen, offset, nwrittenPtr) {
-      try {
-        const bytes = this._collectIovs(iovs, iovsLen);
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._externalFdHandle(descriptor);
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          if (handle.readOnly === true) {
-            return __agentOSWasiErrnoRofs;
-          }
-          const written = __agentOSFs().writeSync(
-            handle.targetFd,
-            bytes,
-            0,
-            bytes.length,
-            Number(offset) >>> 0,
-          );
-          return this._writeUint32(nwrittenPtr, written);
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry || entry.kind !== "file") {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (entry.readOnly === true) {
-          return __agentOSWasiErrnoRofs;
-        }
-        const written = __agentOSFs().writeSync(
-          entry.realFd,
-          bytes,
-          0,
-          bytes.length,
-          Number(offset) >>> 0,
-        );
-        return this._writeUint32(nwrittenPtr, written);
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdPread(fd, iovs, iovsLen, offset, nreadPtr) {
-      try {
-        const descriptor = Number(fd) >>> 0;
-        const explicitOffset = Number(offset) >>> 0;
-        const totalLength = this._boundedReadLength(iovs, iovsLen);
-        const buffer = Buffer.alloc(totalLength);
-        const handle = this._externalFdHandle(descriptor);
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          const bytesRead = __agentOSFs().readSync(
-            handle.targetFd,
-            buffer,
-            0,
-            totalLength,
-            explicitOffset,
-          );
-          const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-          return this._writeUint32(nreadPtr, written);
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry || entry.kind !== "file") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const bytesRead = __agentOSFs().readSync(
-          entry.realFd,
-          buffer,
-          0,
-          totalLength,
-          explicitOffset,
-        );
-        const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-        return this._writeUint32(nreadPtr, written);
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdRead(fd, iovs, iovsLen, nreadPtr) {
-      try {
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._externalFdHandle(descriptor);
-        if (handle?.kind === "pipe-read" && handle.pipe) {
-          const totalLength = this._boundedReadLength(iovs, iovsLen);
-          while (handle.pipe.chunks.length === 0) {
-            if (handle.pipe.writeHandleCount === 0 && handle.pipe.producers.size === 0) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            this._pumpPipeProducers(handle.pipe, 10);
-          }
-          const chunk = this._dequeuePipeBytes(handle.pipe, totalLength);
-          const written = this._writeToIovs(iovs, iovsLen, chunk);
-          return this._writeUint32(nreadPtr, written);
-        }
-        if (handle?.kind === "stdio" && Number(handle.targetFd) === 0) {
-          const totalLength = this._boundedReadLength(iovs, iovsLen);
-          if (typeof __agentOSWasiHost.readStdin === "function") {
-            const value = __agentOSWasiHost.readStdin(totalLength);
-            if (value == null) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            const chunk =
-              typeof value === "string"
-                ? Buffer.from(value, "utf8")
-                : value instanceof Uint8Array
-                  ? value
-                  : Buffer.from(value);
-            if (chunk.length === 0) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            const written = this._writeToIovs(iovs, iovsLen, chunk);
-            return this._writeUint32(nreadPtr, written);
-          }
-          const buffer = Buffer.alloc(totalLength);
-          const bytesRead = __agentOSFs().readSync(0, buffer, 0, totalLength, null);
-          const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-          return this._writeUint32(nreadPtr, written);
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (entry.kind === "stdin") {
-          const totalLength = this._boundedReadLength(iovs, iovsLen);
-          const syncRpc =
-            typeof globalThis?.__agentOSSyncRpc?.callSync === "function"
-              ? __agentOSWasiSyncRpc()
-              : null;
-          const sidecarManagedProcess =
-            typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-            process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-          if (syncRpc && (sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled())) {
-            try {
-              let chunk = null;
-              while (true) {
-                const response = syncRpc.callSync("__kernel_stdin_read", [totalLength, 10]);
-                if (
-                  response &&
-                  typeof response === "object" &&
-                  typeof response.dataBase64 === "string"
-                ) {
-                  chunk = Buffer.from(response.dataBase64, "base64");
-                  break;
-                }
-                if (response && typeof response === "object" && response.done === true) {
-                  chunk = Buffer.alloc(0);
-                  break;
-                }
-                if (
-                  typeof Atomics?.wait === "function" &&
-                  typeof syntheticWaitArray !== "undefined"
-                ) {
-                  Atomics.wait(syntheticWaitArray, 0, 0, 10);
-                }
-              }
-              if (!chunk || chunk.length === 0) {
-                return this._writeUint32(nreadPtr, 0);
-              }
-              const written = this._writeToIovs(iovs, iovsLen, chunk);
-              return this._writeUint32(nreadPtr, written);
-            } catch {
-              // Fall back to direct stdin reads when the sync bridge is unavailable
-              // in the standalone runner bootstrap.
-            }
-          }
-          // Host-seam stdin (a non-native backend whose stdin is delivered through
-          // the runtime process object, not a kernel fd): read the queued bytes
-          // directly instead of fs.readSync on a descriptor the JS fs table does
-          // not own.
-          if (typeof __agentOSWasiHost.readStdin === "function") {
-            const value = __agentOSWasiHost.readStdin(totalLength);
-            if (value == null) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            const chunk =
-              typeof value === "string"
-                ? Buffer.from(value, "utf8")
-                : value instanceof Uint8Array
-                  ? value
-                  : Buffer.from(value);
-            if (chunk.length === 0) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            const written = this._writeToIovs(iovs, iovsLen, chunk);
-            return this._writeUint32(nreadPtr, written);
-          }
-          const buffer = Buffer.alloc(totalLength);
-          const directStdinFd =
-            (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-            typeof handle.targetFd === "number"
-              ? handle.targetFd
-              : typeof process?.stdin?.fd === "number"
-                ? process.stdin.fd
-                : 0;
-          const bytesRead = __agentOSFs().readSync(
-            directStdinFd,
-            buffer,
-            0,
-            totalLength,
-            null,
-          );
-          const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-          return this._writeUint32(nreadPtr, written);
-        }
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          const totalLength = this._boundedReadLength(iovs, iovsLen);
-          const buffer = Buffer.alloc(totalLength);
-          const bytesRead = __agentOSFs().readSync(
-            handle.targetFd,
-            buffer,
-            0,
-            totalLength,
-            null,
-          );
-          const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-          return this._writeUint32(nreadPtr, written);
-        }
-        if (entry.kind !== "file") {
-          return __agentOSWasiErrnoBadf;
-        }
-        // WASI rights: a descriptor opened without FD_READ cannot be read.
-        if (
-          typeof entry.rightsBase === "bigint" &&
-          (entry.rightsBase & __agentOSWasiRightFdRead) === 0n
-        ) {
-          return __agentOSWasiErrnoNotcapable;
-        }
-        const totalLength = this._boundedReadLength(iovs, iovsLen);
-        const buffer = Buffer.alloc(totalLength);
-        const position = typeof entry.offset === "number" ? entry.offset : null;
-        const bytesRead = __agentOSFs().readSync(
-          entry.realFd,
-          buffer,
-          0,
-          totalLength,
-          position,
-        );
-        if (typeof entry.offset === "number") {
-          entry.offset += bytesRead;
-        }
-        const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-        return this._writeUint32(nreadPtr, written);
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdClose(fd) {
-      try {
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._externalFdHandle(descriptor);
-        if (handle?.kind === "pipe-read" && handle.pipe) {
-          handle.open = false;
-          handle.pipe.readHandleCount = Math.max(0, (handle.pipe.readHandleCount ?? 0) - 1);
-          if (typeof handle.onClose === "function") {
-            handle.onClose(handle, descriptor);
-          }
-          return __agentOSWasiErrnoSuccess;
-        }
-        if (handle?.kind === "pipe-write" && handle.pipe) {
-          handle.open = false;
-          handle.pipe.writeHandleCount = Math.max(0, (handle.pipe.writeHandleCount ?? 0) - 1);
-          if (typeof handle.onClose === "function") {
-            handle.onClose(handle, descriptor);
-          }
-          return __agentOSWasiErrnoSuccess;
-        }
-        if (handle?.kind === "guest-file" || handle?.kind === "stdio") {
-          handle.open = false;
-          return __agentOSWasiErrnoSuccess;
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        const retainedDelegateRefs = (() => {
-          try {
-            if (typeof globalThis.__agentOSWasiDelegateFdRefCount === "function") {
-              return Number(globalThis.__agentOSWasiDelegateFdRefCount(descriptor)) || 0;
-            }
-          } catch {
-            // Fall through to the default close path.
-          }
-          return 0;
-        })();
-        if (entry.kind === "file" && retainedDelegateRefs <= 0) {
-          __agentOSFs().closeSync(entry.realFd);
-        }
-        if (descriptor > 2 && retainedDelegateRefs <= 0) {
-          this.fdTable.delete(descriptor);
-        }
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdSync(fd) {
-      try {
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._externalFdHandle(descriptor);
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          __agentOSFs().fsyncSync(handle.targetFd);
-          return __agentOSWasiErrnoSuccess;
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        // fsync on a stdio stream (stdin/stdout/stderr) is a no-op success; only
-        // descriptors with a real backing fd are flushed.
-        if (
-          entry.kind === "stdin" ||
-          entry.kind === "stdout" ||
-          entry.kind === "stderr"
-        ) {
-          return __agentOSWasiErrnoSuccess;
-        }
-        if (entry.kind !== "file" || typeof entry.realFd !== "number") {
-          return __agentOSWasiErrnoBadf;
-        }
-        __agentOSFs().fsyncSync(entry.realFd);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdFdstatGet(fd, statPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        const view = this._memoryView();
-        const offset = Number(statPtr) >>> 0;
-        view.setUint8(offset, this._fdFiletype(entry));
-        view.setUint16(offset + 2, (Number(entry.fdFlags) >>> 0) & 0xffff, true);
-        view.setBigUint64(offset + 8, this._descriptorRightsBase(entry), true);
-        view.setBigUint64(offset + 16, this._descriptorRightsInheriting(entry), true);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdFdstatSetFlags(fd, flags) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        entry.fdFlags = (Number(flags) >>> 0) & 0xffff;
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdFilestatGet(fd, statPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (
-          entry.kind === "stdin" ||
-          entry.kind === "stdout" ||
-          entry.kind === "stderr"
-        ) {
-          return this._writeFilestat(statPtr, null, __agentOSWasiFiletypeCharacterDevice);
-        }
-        if (entry.kind === "preopen") {
-          const stats = __agentOSFs().statSync(entry.guestPath);
-          return this._writeFilestat(statPtr, stats, __agentOSWasiFiletypeDirectory);
-        }
-        const stats =
-          typeof entry.realFd === "number"
-            ? __agentOSFs().fstatSync(entry.realFd)
-            : __agentOSFs().statSync(this._descriptorFsPath(entry));
-        return this._writeFilestat(statPtr, stats, this._fdFiletype(entry));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdFilestatSetSize(fd, size) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "file" || typeof entry.realFd !== "number") {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (entry.readOnly === true) {
-          return __agentOSWasiErrnoRofs;
-        }
-        __agentOSFs().ftruncateSync(entry.realFd, Number(size));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdSeek(fd, offset, whence, newOffsetPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "file" || typeof entry.realFd !== "number") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const delta = Number(offset);
-        if (!Number.isFinite(delta)) {
-          return __agentOSWasiErrnoInval;
-        }
-        const currentOffset = typeof entry.offset === "number" ? entry.offset : 0;
-        let nextOffset = 0;
-        switch (Number(whence) >>> 0) {
-          case __agentOSWasiWhenceSet:
-            nextOffset = delta;
-            break;
-          case __agentOSWasiWhenceCur:
-            nextOffset = currentOffset + delta;
-            break;
-          case __agentOSWasiWhenceEnd: {
-            const stats = __agentOSFs().fstatSync(entry.realFd);
-            nextOffset = Number(stats?.size ?? 0) + delta;
-            break;
-          }
-          default:
-            return __agentOSWasiErrnoInval;
-        }
-        if (!Number.isFinite(nextOffset) || nextOffset < 0) {
-          return __agentOSWasiErrnoInval;
-        }
-        entry.offset = nextOffset;
-        return this._writeUint64(newOffsetPtr, BigInt(nextOffset));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdTell(fd, offsetPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "file") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const offset = typeof entry.offset === "number" ? entry.offset : 0;
-        return this._writeUint64(offsetPtr, BigInt(offset));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdPrestatGet(fd, prestatPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "preopen") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const guestPath = this._descriptorPreopenName(entry);
-        if (typeof guestPath !== "string") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const view = this._memoryView();
-        const offset = Number(prestatPtr) >>> 0;
-        view.setUint8(offset, 0);
-        view.setUint32(offset + 4, Buffer.byteLength(guestPath), true);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdPrestatDirName(fd, pathPtr, pathLen) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "preopen") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const guestPath = this._descriptorPreopenName(entry);
-        if (typeof guestPath !== "string") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const bytes = Buffer.from(guestPath, "utf8");
-        if ((Number(pathLen) >>> 0) < bytes.length) {
-          return __agentOSWasiErrnoFault;
-        }
-        return this._writeBytes(pathPtr, bytes);
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdReaddir(fd, bufPtr, bufLen, cookie, bufUsedPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        const fsPath = this._descriptorDirectoryFsPath(entry);
-        if (
-          !entry ||
-          (entry.kind !== "preopen" && entry.kind !== "directory") ||
-          typeof fsPath !== "string"
-        ) {
-          return __agentOSWasiErrnoBadf;
-        }
-        const dirents = __agentOSFs()
-          .readdirSync(fsPath, { withFileTypes: true })
-          .sort((left, right) => left.name.localeCompare(right.name));
-        const view = this._memoryView();
-        const memory = this._memoryBytes();
-        let offset = Number(bufPtr) >>> 0;
-        const limit = offset + (Number(bufLen) >>> 0);
-        let used = 0;
-        for (let index = Number(cookie) >>> 0; index < dirents.length; index += 1) {
-          const dirent = dirents[index];
-          const nameBytes = Buffer.from(dirent.name, "utf8");
-          const recordLen = 24 + nameBytes.length;
-          if (offset + recordLen > limit) {
-            break;
-          }
-          view.setBigUint64(offset, BigInt(index + 1), true);
-          view.setBigUint64(offset + 8, BigInt(index + 1), true);
-          view.setUint32(offset + 16, nameBytes.length, true);
-          view.setUint8(
-            offset + 20,
-            dirent.isDirectory()
-              ? __agentOSWasiFiletypeDirectory
-              : dirent.isSymbolicLink()
-                ? __agentOSWasiFiletypeSymbolicLink
-                : __agentOSWasiFiletypeRegularFile,
-          );
-          memory.set(nameBytes, offset + 24);
-          offset += recordLen;
-          used += recordLen;
-        }
-        return this._writeUint32(bufUsedPtr, used);
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathCreateDirectory(fd, pathPtr, pathLen) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        if (resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        __agentOSFs().mkdirSync(this._resolvedFsPath(resolved));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathLink(oldFd, _oldFlags, oldPathPtr, oldPathLen, newFd, newPathPtr, newPathLen) {
-      try {
-        const source = this._resolveDescriptorPath(oldFd, oldPathPtr, oldPathLen);
-        if (source.error !== __agentOSWasiErrnoSuccess) {
-          return source.error;
-        }
-        const destination = this._resolveDescriptorPath(newFd, newPathPtr, newPathLen);
-        if (destination.error !== __agentOSWasiErrnoSuccess) {
-          return destination.error;
-        }
-        if (source.readOnly || destination.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        __agentOSFs().linkSync(this._resolvedFsPath(source), this._resolvedFsPath(destination));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathOpen(fd, _dirflags, pathPtr, pathLen, oflags, rightsBase, rightsInheriting, _fdflags, openedFdPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (
-          !entry ||
-          (entry.kind !== "preopen" && entry.kind !== "directory") ||
-          typeof entry.hostPath !== "string"
-        ) {
-          return __agentOSWasiErrnoBadf;
-        }
-        const requestedFlags = Number(oflags) >>> 0;
-        const createOrTruncate =
-          (requestedFlags & __agentOSWasiOpenCreate) !== 0 ||
-          (requestedFlags & __agentOSWasiOpenTruncate) !== 0;
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen, {
-          preferCreateParent: createOrTruncate,
-        });
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        const guestPath = resolved.guestPath;
-        const fsPath = this._resolvedFsPath(resolved);
-        const openDirectory = (requestedFlags & __agentOSWasiOpenDirectory) !== 0;
-        const allowedRightsBase = this._descriptorRightsBase(entry);
-        const allowedRightsInheriting = this._descriptorRightsInheriting(entry);
-        const requestedRightsBase = this._normalizeRights(rightsBase, allowedRightsInheriting);
-        const requestedRightsInheriting = this._normalizeRights(
-          rightsInheriting,
-          allowedRightsInheriting,
-        );
-        if (
-          (requestedRightsBase & ~allowedRightsInheriting) !== 0n ||
-          (requestedRightsInheriting & ~allowedRightsInheriting) !== 0n
-        ) {
-          return __agentOSWasiErrnoAcces;
-        }
-        const requestedWriteAccess =
-          !openDirectory &&
-          (createOrTruncate || this._hasWriteRights(requestedRightsBase));
-        if (
-          requestedWriteAccess &&
-          !this._hasWriteRights(allowedRightsBase)
-        ) {
-          return __agentOSWasiErrnoAcces;
-        }
-        if (requestedWriteAccess && resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        const fsConstants = __agentOSFs().constants ?? {};
-        let openFlags = requestedWriteAccess
-          ? fsConstants.O_RDWR ?? 2
-          : fsConstants.O_RDONLY ?? 0;
-        if ((requestedFlags & __agentOSWasiOpenCreate) !== 0) {
-          openFlags |= fsConstants.O_CREAT ?? 64;
-        }
-        if ((requestedFlags & __agentOSWasiOpenExclusive) !== 0) {
-          openFlags |= fsConstants.O_EXCL ?? 128;
-        }
-        if ((requestedFlags & __agentOSWasiOpenTruncate) !== 0) {
-          openFlags |= fsConstants.O_TRUNC ?? 512;
-        }
-        if (openDirectory) {
-          openFlags |= fsConstants.O_DIRECTORY ?? 0;
-        }
-        if (createOrTruncate && !openDirectory) {
-          __agentOSFs().statSync(__agentOSPath().dirname(fsPath));
-        } else {
-          __agentOSFs().statSync(fsPath);
-        }
-        const realFd = __agentOSFs().openSync(fsPath, openFlags);
-        const stats =
-          createOrTruncate && !openDirectory
-            ? __agentOSFs().fstatSync(realFd)
-            : __agentOSFs().statSync(fsPath);
-        const openedFd = this.nextFd++;
-        this.fdTable.set(openedFd, {
-          kind: stats.isDirectory() ? "directory" : "file",
-          guestPath,
-          hostPath: fsPath,
-          readOnly: resolved.readOnly === true,
-          realFd,
-          offset: 0,
-          rightsBase: requestedRightsBase & allowedRightsInheriting,
-          rightsInheriting: requestedRightsInheriting & allowedRightsInheriting,
-          fdFlags: (Number(_fdflags) >>> 0) & 0xffff,
-        });
-        return this._writeUint32(openedFdPtr, openedFd);
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathSymlink(targetPtr, targetLen, fd, pathPtr, pathLen) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        if (resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        const target = this._readString(targetPtr, targetLen);
-        __agentOSFs().symlinkSync(target, this._resolvedFsPath(resolved));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathRemoveDirectory(fd, pathPtr, pathLen) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        if (resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        __agentOSFs().rmdirSync(this._resolvedFsPath(resolved));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathRename(oldFd, oldPathPtr, oldPathLen, newFd, newPathPtr, newPathLen) {
-      try {
-        const source = this._resolveDescriptorPath(oldFd, oldPathPtr, oldPathLen);
-        if (source.error !== __agentOSWasiErrnoSuccess) {
-          return source.error;
-        }
-        const destination = this._resolveDescriptorPath(newFd, newPathPtr, newPathLen);
-        if (destination.error !== __agentOSWasiErrnoSuccess) {
-          return destination.error;
-        }
-        if (source.readOnly || destination.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        __agentOSFs().renameSync(this._resolvedFsPath(source), this._resolvedFsPath(destination));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathUnlinkFile(fd, pathPtr, pathLen) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        if (resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        __agentOSFs().unlinkSync(this._resolvedFsPath(resolved));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathFilestatGet(fd, flags, pathPtr, pathLen, statPtr) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        const follow = (Number(flags) & __agentOSWasiLookupSymlinkFollow) !== 0;
-        const stats = follow
-          ? __agentOSFs().statSync(this._resolvedFsPath(resolved))
-          : __agentOSFs().lstatSync(this._resolvedFsPath(resolved));
-        return this._writeFilestat(statPtr, stats, this._filetypeForStats(stats));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathReadlink(fd, pathPtr, pathLen, bufPtr, bufLen, bufUsedPtr) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        const bytes = Buffer.from(__agentOSFs().readlinkSync(resolved.guestPath), "utf8");
-        const length = Math.min(bytes.length, Number(bufLen) >>> 0);
-        const writeStatus = this._writeBytes(bufPtr, bytes.subarray(0, length));
-        if (writeStatus !== __agentOSWasiErrnoSuccess) {
-          return writeStatus;
-        }
-        return this._writeUint32(bufUsedPtr, length);
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pollOneoff(inPtr, outPtr, nsubscriptions, neventsPtr) {
-      try {
-        const subscriptionCount = Number(nsubscriptions) >>> 0;
-        if (subscriptionCount === 0) {
-          return this._writeUint32(neventsPtr, 0);
-        }
-
-        const subscriptionSize = 48;
-        const eventSize = 32;
-        const kernelPollIn = 0x0001;
-        const kernelPollOut = 0x0004;
-        const kernelPollErr = 0x0008;
-        const kernelPollHup = 0x0010;
-        const view = this._memoryView();
-        const memory = this._memoryBytes();
-        const syncRpc =
-          typeof globalThis?.__agentOSSyncRpc?.callSync === "function"
-            ? __agentOSWasiSyncRpc()
-            : null;
-        const subscriptions = [];
-        let timeoutMs = null;
-
-        for (let index = 0; index < subscriptionCount; index += 1) {
-          const base = (Number(inPtr) >>> 0) + index * subscriptionSize;
-          const tag = view.getUint8(base + 8);
-          const userdata = memory.slice(base, base + 8);
-          if (tag === 0) {
-            const timeoutNs = view.getBigUint64(base + 24, true);
-            const relativeTimeoutMs = Number(timeoutNs / 1000000n);
-            timeoutMs =
-              timeoutMs == null ? relativeTimeoutMs : Math.min(timeoutMs, relativeTimeoutMs);
-            subscriptions.push({ kind: "clock", userdata });
-            continue;
-          }
-
-          if (tag !== 1 && tag !== 2) {
-            subscriptions.push({ kind: "unsupported", userdata });
-            continue;
-          }
-
-          const fd = view.getUint32(base + 16, true);
-          const descriptor = Number(fd) >>> 0;
-          const handle = this._externalFdHandle(descriptor);
-          const entry = this._descriptorEntry(descriptor);
-          let targetFd = null;
-          if (
-            (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-            typeof handle.targetFd === "number"
-          ) {
-            targetFd = Number(handle.targetFd) >>> 0;
-          } else if (
-            entry?.kind === "stdin" ||
-            entry?.kind === "stdout" ||
-            entry?.kind === "stderr"
-          ) {
-            targetFd = descriptor;
-          }
-
-          subscriptions.push({
-            kind: tag === 1 ? "fd_read" : "fd_write",
-            fd: descriptor,
-            handle,
-            targetFd,
-            streamKind: entry?.kind,
-            userdata,
-          });
-        }
-
-        const deadline = timeoutMs == null ? null : Date.now() + Math.max(0, timeoutMs);
-        const readyEvents = [];
-
-        while (readyEvents.length === 0) {
-          for (const subscription of subscriptions) {
-            // A clock subscription is ready once its deadline has elapsed; report
-            // it as a first-class event so it is returned alongside any ready fds
-            // (not only as a fallback when nothing else is ready).
-            if (subscription.kind === "clock") {
-              if (deadline != null && Date.now() >= deadline) {
-                readyEvents.push({
-                  userdata: subscription.userdata,
-                  error: __agentOSWasiErrnoSuccess,
-                  type: 0,
-                  nbytes: 0,
-                  flags: 0,
-                });
-              }
-              continue;
-            }
-            if (subscription.kind === "fd_read" && subscription.handle?.kind === "pipe-read") {
-              const pipe = subscription.handle.pipe;
-              if (
-                pipe &&
-                (pipe.chunks.length > 0 ||
-                  (pipe.writeHandleCount === 0 && pipe.producers.size === 0))
-              ) {
-                readyEvents.push({
-                  userdata: subscription.userdata,
-                  error: __agentOSWasiErrnoSuccess,
-                  type: 1,
-                  nbytes: pipe.chunks[0]?.length ?? 0,
-                  flags: 0,
-                });
-              }
-              continue;
-            }
-
-            // Without a kernel poll bridge, resolve stdin fd_read readiness from
-            // the host-seam queued byte count (the browser delivers stdin through
-            // the runtime process object). Reporting nbytes does not consume input.
-            if (
-              !syncRpc &&
-              subscription.kind === "fd_read" &&
-              subscription.streamKind === "stdin" &&
-              typeof __agentOSWasiHost.stdinReadableBytes === "function"
-            ) {
-              const available = Number(__agentOSWasiHost.stdinReadableBytes()) >>> 0;
-              if (available > 0) {
-                readyEvents.push({
-                  userdata: subscription.userdata,
-                  error: __agentOSWasiErrnoSuccess,
-                  type: 1,
-                  nbytes: available,
-                  flags: 0,
-                });
-              }
-              continue;
-            }
-
-            if (subscription.kind === "fd_write" && subscription.handle?.kind === "pipe-write") {
-              readyEvents.push({
-                userdata: subscription.userdata,
-                error: __agentOSWasiErrnoSuccess,
-                type: 2,
-                nbytes: 65536,
-                flags: 0,
-              });
-              continue;
-            }
-
-            // Without a kernel poll bridge (a non-native backend) stdout/stderr
-            // are always writable, so resolve their fd_write readiness directly
-            // instead of leaving it to the (absent) __kernel_poll round-trip.
-            if (
-              !syncRpc &&
-              subscription.kind === "fd_write" &&
-              (subscription.streamKind === "stdout" ||
-                subscription.streamKind === "stderr")
-            ) {
-              readyEvents.push({
-                userdata: subscription.userdata,
-                error: __agentOSWasiErrnoSuccess,
-                type: 2,
-                nbytes: 65536,
-                flags: 0,
-              });
-            }
-          }
-
-          if (readyEvents.length > 0) {
-            break;
-          }
-
-          // Without a kernel poll bridge, fd readiness is resolved synchronously
-          // above (stdio fast paths) or via pipes; if there is no clock to wait on
-          // and no pipe to pump, no further progress is possible, so stop instead
-          // of busy-waiting until the caller times out.
-          if (
-            !syncRpc &&
-            !subscriptions.some((subscription) => subscription.kind === "clock") &&
-            !subscriptions.some(
-              (subscription) =>
-                subscription.handle?.kind === "pipe-read" ||
-                subscription.handle?.kind === "pipe-write",
-            )
-          ) {
-            break;
-          }
-
-          const pollTargets = subscriptions
-            .filter(
-              (subscription) =>
-                (subscription.kind === "fd_read" || subscription.kind === "fd_write") &&
-                typeof subscription.targetFd === "number",
-            )
-            .map((subscription) => ({
-              fd: subscription.targetFd,
-              events: subscription.kind === "fd_read" ? kernelPollIn : kernelPollOut,
-            }));
-          const waitMs =
-            deadline == null ? 10 : Math.max(0, Math.min(10, deadline - Date.now()));
-
-          if (syncRpc && pollTargets.length > 0) {
-            let response = null;
-            try {
-              response = syncRpc.callSync("__kernel_poll", [pollTargets, waitMs]);
-            } catch (error) {
-              __agentOSWasiDebug(
-                `poll_oneoff __kernel_poll failed: ${
-                  error instanceof Error ? error.message : String(error)
-                }`,
-              );
-            }
-
-            const responseEntries = Array.isArray(response?.fds) ? response.fds : [];
-            for (const subscription of subscriptions) {
-              if (
-                (subscription.kind !== "fd_read" && subscription.kind !== "fd_write") ||
-                typeof subscription.targetFd !== "number"
-              ) {
-                continue;
-              }
-
-              const responseEntry = responseEntries.find(
-                (entry) => (Number(entry?.fd) >>> 0) === subscription.targetFd,
-              );
-              const revents = Number(responseEntry?.revents) >>> 0;
-              const interested =
-                subscription.kind === "fd_read"
-                  ? kernelPollIn | kernelPollErr | kernelPollHup
-                  : kernelPollOut | kernelPollErr | kernelPollHup;
-              if ((revents & interested) === 0) {
-                continue;
-              }
-
-              readyEvents.push({
-                userdata: subscription.userdata,
-                error: __agentOSWasiErrnoSuccess,
-                type: subscription.kind === "fd_read" ? 1 : 2,
-                nbytes: subscription.kind === "fd_read" ? 1 : 65536,
-                flags: 0,
-              });
-            }
-          }
-
-          if (readyEvents.length > 0) {
-            break;
-          }
-
-          let pumped = false;
-          for (const subscription of subscriptions) {
-            if (subscription.kind === "fd_read" && subscription.handle?.kind === "pipe-read") {
-              pumped = this._pumpPipeProducers(subscription.handle.pipe, 10) || pumped;
-            }
-          }
-
-          if (pumped) {
-            continue;
-          }
-
-          if (deadline != null && Date.now() >= deadline) {
-            break;
-          }
-
-          if (
-            pollTargets.length === 0 &&
-            typeof Atomics?.wait !== "function" &&
-            deadline == null
-          ) {
-            break;
-          }
-
-          if (
-            typeof Atomics?.wait === "function" &&
-            typeof syntheticWaitArray !== "undefined"
-          ) {
-            Atomics.wait(syntheticWaitArray, 0, 0, waitMs);
-          } else if (!syncRpc && pollTargets.length === 0) {
-            break;
-          }
-        }
-
-        if (
-          readyEvents.length === 0 &&
-          subscriptions.some((subscription) => subscription.kind === "clock")
-        ) {
-          const clockSubscription = subscriptions.find(
-            (subscription) => subscription.kind === "clock",
-          );
-          readyEvents.push({
-            userdata: clockSubscription.userdata,
-            error: __agentOSWasiErrnoSuccess,
-            type: 0,
-            nbytes: 0,
-            flags: 0,
-          });
-        }
-
-        for (let index = 0; index < readyEvents.length; index += 1) {
-          const base = (Number(outPtr) >>> 0) + index * eventSize;
-          const event = readyEvents[index];
-          memory.set(event.userdata, base);
-          view.setUint16(base + 8, event.error, true);
-          view.setUint8(base + 10, event.type);
-          view.setBigUint64(base + 16, BigInt(event.nbytes), true);
-          view.setUint16(base + 24, event.flags, true);
-        }
-
-        return this._writeUint32(neventsPtr, readyEvents.length);
-      } catch (error) {
-        __agentOSWasiDebug(
-          `poll_oneoff failed: ${error instanceof Error ? error.message : String(error)}`,
-        );
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _randomGet(bufPtr, bufLen) {
-      try {
-        const length = Number(bufLen) >>> 0;
-        const bytes = Buffer.allocUnsafe(length);
-        __agentOSCrypto().randomFillSync(bytes);
-        return this._writeBytes(bufPtr, bytes);
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _schedYield() {
-      return __agentOSWasiErrnoSuccess;
-    }
-
-    _procExit(code) {
-      if (this.returnOnExit) {
-        const error = new Error(`wasi exit(${Number(code) >>> 0})`);
-        error.__agentOSWasiExit = true;
-        error.code = Number(code) >>> 0;
-        throw error;
-      }
-      process.exit(Number(code) >>> 0);
-    }
-  }
-
-  Object.defineProperty(globalThis, "__agentOSWasiModule", {
-    configurable: true,
-    enumerable: false,
-    value: { WASI },
-    writable: true,
-  });
-}
diff --git a/crates/execution/assets/runners/wasm-runner.mjs b/crates/execution/assets/runners/wasm-runner.mjs
deleted file mode 100644
index bb552698a..000000000
--- a/crates/execution/assets/runners/wasm-runner.mjs
+++ /dev/null
@@ -1,6075 +0,0 @@
-const fsModule =
-  typeof globalThis._requireFrom === 'function'
-    ? globalThis._requireFrom('node:fs', '/')
-    : __agentOSRequireBuiltin('node:fs');
-const fs = fsModule.promises;
-const { readSync, writeSync } = fsModule;
-const path =
-  typeof globalThis._requireFrom === 'function'
-    ? globalThis._requireFrom('node:path', '/')
-    : __agentOSRequireBuiltin('node:path');
-const { WASI } = globalThis.__agentOSWasiModule;
-const HOST_CWD =
-  typeof process?.env?.AGENTOS_WASM_HOST_CWD === 'string' &&
-  process.env.AGENTOS_WASM_HOST_CWD.length > 0
-    ? path.resolve(process.env.AGENTOS_WASM_HOST_CWD)
-    : path.resolve('.');
-
-const WASI_ERRNO_SUCCESS = 0;
-const WASI_ERRNO_ACCES = 2;
-const WASI_ERRNO_AGAIN = 6;
-const WASI_ERRNO_BADF = 8;
-const WASI_ERRNO_CHILD = 10;
-const WASI_ERRNO_INVAL = 28;
-const WASI_ERRNO_NOENT = 44;
-const WASI_ERRNO_PIPE = 64;
-const WASI_ERRNO_ROFS = 69;
-const WASI_ERRNO_SPIPE = 70;
-const WASI_ERRNO_SRCH = 71;
-const WASI_ERRNO_FAULT = 21;
-const WASI_RIGHT_FD_WRITE = 64n;
-const WASI_FILETYPE_UNKNOWN = 0;
-const WASI_FILETYPE_CHARACTER_DEVICE = 2;
-const WASI_FILETYPE_REGULAR_FILE = 4;
-const WASI_OFLAGS_CREAT = 1;
-const WASI_OFLAGS_DIRECTORY = 2;
-const WASI_OFLAGS_EXCL = 4;
-const WASI_OFLAGS_TRUNC = 8;
-const WASI_FDFLAGS_APPEND = 1;
-const WASI_WHENCE_SET = 0;
-const WASI_WHENCE_CUR = 1;
-const WASI_WHENCE_END = 2;
-const WASM_PAGE_BYTES = 65536;
-const DEFAULT_VIRTUAL_PID = 1;
-const DEFAULT_VIRTUAL_PPID = 0;
-const DEFAULT_VIRTUAL_UID = 0;
-const DEFAULT_VIRTUAL_GID = 0;
-const DEFAULT_VIRTUAL_OS_USER = 'root';
-const DEFAULT_VIRTUAL_OS_HOMEDIR = '/root';
-const DEFAULT_VIRTUAL_OS_SHELL = '/bin/sh';
-
-function parseVirtualProcessNumber(value, fallback) {
-  if (typeof value !== 'string' || value.trim() === '') {
-    return fallback;
-  }
-  const parsed = Number.parseInt(value, 10);
-  return Number.isInteger(parsed) && parsed >= 0 ? parsed : fallback;
-}
-
-function parseVirtualProcessString(value, fallback) {
-  return typeof value === 'string' && value.length > 0 ? value : fallback;
-}
-
-function resolveVirtualPath(value, fallback) {
-  const resolved = parseVirtualProcessString(value, fallback);
-  return resolved.startsWith('/') ? path.posix.normalize(resolved) : fallback;
-}
-
-function isPathLike(specifier) {
-  return specifier.startsWith('.') || specifier.startsWith('/') || specifier.startsWith('file:');
-}
-
-function resolveModuleGuestPathToHostPath(guestPath) {
-  return resolveModuleGuestPathToHostMapping(guestPath)?.hostPath ?? null;
-}
-
-function resolveModuleGuestPathToHostMapping(guestPath) {
-  if (typeof guestPath !== 'string') {
-    return null;
-  }
-
-  const normalized = path.posix.normalize(guestPath);
-  for (const mapping of GUEST_PATH_MAPPINGS) {
-    if (mapping.guestPath === '/') {
-      const suffix = normalized.replace(/^\/+/, '');
-      return {
-        hostPath: suffix ? path.join(mapping.hostPath, suffix) : mapping.hostPath,
-        readOnly: mapping.readOnly === true,
-      };
-    }
-
-    if (
-      normalized !== mapping.guestPath &&
-      !normalized.startsWith(`${mapping.guestPath}/`)
-    ) {
-      continue;
-    }
-
-    const suffix =
-      normalized === mapping.guestPath
-        ? ''
-        : normalized.slice(mapping.guestPath.length + 1);
-    return {
-      hostPath: suffix ? path.join(mapping.hostPath, ...suffix.split('/')) : mapping.hostPath,
-      readOnly: mapping.readOnly === true,
-    };
-  }
-
-  return null;
-}
-
-function resolveModulePath(specifier) {
-  if (specifier.startsWith('file:')) {
-    const guestPath = guestFilePathFromUrl(specifier);
-    if (guestPath) {
-      return resolveModuleGuestPathToHostPath(guestPath) ?? new URL(specifier);
-    }
-    return new URL(specifier);
-  }
-  if (isPathLike(specifier)) {
-    if (specifier.startsWith('/')) {
-      return resolveModuleGuestPathToHostPath(specifier) ?? path.resolve(process.cwd(), specifier);
-    }
-    return path.resolve(process.cwd(), specifier);
-  }
-  return specifier;
-}
-
-function parseGuestPathMappings(value) {
-  if (typeof value !== 'string' || value.length === 0) {
-    return [];
-  }
-  try {
-    return JSON.parse(value)
-      .map((entry) => {
-        const guestPath =
-          entry && typeof entry.guestPath === 'string'
-            ? path.posix.normalize(entry.guestPath)
-            : null;
-        const hostPath =
-          entry && typeof entry.hostPath === 'string'
-            ? path.resolve(entry.hostPath)
-            : null;
-        return guestPath && hostPath
-          ? { guestPath, hostPath, readOnly: entry.readOnly === true }
-          : null;
-      })
-      .filter(Boolean)
-      .sort((left, right) => right.guestPath.length - left.guestPath.length);
-  } catch {
-    return [];
-  }
-}
-
-const modulePath = process.env.AGENTOS_WASM_MODULE_PATH;
-if (!modulePath) {
-  throw new Error('AGENTOS_WASM_MODULE_PATH is required');
-}
-const moduleBase64 = process.env.AGENTOS_WASM_MODULE_BASE64;
-const __agentOSWasmPhaseDebug = process.env.AGENTOS_WASM_WARMUP_DEBUG === '1';
-const __agentOSWasmPhaseTimings = [];
-const __agentOSWasiSyscallPhasesEnabled = process.env.AGENTOS_WASI_SYSCALL_PHASES === '1';
-const __agentOSWasiSyscallMetrics = new Map();
-const __agentOSWasiSyncRpcMetrics = new Map();
-
-function __agentOSWasmNowNs() {
-  return process.hrtime.bigint();
-}
-
-function __agentOSWasmRecordPhase(name, startedNs) {
-  if (!__agentOSWasmPhaseDebug) {
-    return;
-  }
-  const elapsedNs = __agentOSWasmNowNs() - startedNs;
-  __agentOSWasmPhaseTimings.push({
-    name,
-    ms: Number(elapsedNs) / 1000000,
-  });
-}
-
-function __agentOSWasmMeasurePhase(name, run) {
-  const startedNs = __agentOSWasmNowNs();
-  try {
-    return run();
-  } finally {
-    __agentOSWasmRecordPhase(name, startedNs);
-  }
-}
-
-function __agentOSWasiMetricFor(map, key, factory) {
-  let metric = map.get(key);
-  if (!metric) {
-    metric = factory();
-    map.set(key, metric);
-  }
-  return metric;
-}
-
-function __agentOSWasiSyscallMetric(name) {
-  return __agentOSWasiMetricFor(__agentOSWasiSyscallMetrics, name, () => ({
-    name,
-    count: 0,
-    totalNs: 0n,
-    phases: new Map(),
-  }));
-}
-
-function __agentOSWasiRecordSyscall(name, startedNs) {
-  if (!__agentOSWasiSyscallPhasesEnabled) {
-    return;
-  }
-  const metric = __agentOSWasiSyscallMetric(name);
-  metric.count += 1;
-  metric.totalNs += __agentOSWasmNowNs() - startedNs;
-}
-
-function __agentOSWasiRecordPhase(syscallName, phaseName, startedNs) {
-  if (!__agentOSWasiSyscallPhasesEnabled) {
-    return;
-  }
-  const syscall = __agentOSWasiSyscallMetric(syscallName);
-  const phase = __agentOSWasiMetricFor(syscall.phases, phaseName, () => ({
-    name: phaseName,
-    count: 0,
-    totalNs: 0n,
-  }));
-  phase.count += 1;
-  phase.totalNs += __agentOSWasmNowNs() - startedNs;
-}
-
-function __agentOSWasiMeasurePhase(syscallName, phaseName, run) {
-  if (!__agentOSWasiSyscallPhasesEnabled) {
-    return run();
-  }
-  const startedNs = __agentOSWasmNowNs();
-  try {
-    return run();
-  } finally {
-    __agentOSWasiRecordPhase(syscallName, phaseName, startedNs);
-  }
-}
-
-function __agentOSWasiRecordSyncRpc(method, route, startedNs) {
-  if (!__agentOSWasiSyscallPhasesEnabled) {
-    return;
-  }
-  const key = `${route}:${method}`;
-  const metric = __agentOSWasiMetricFor(__agentOSWasiSyncRpcMetrics, key, () => ({
-    method,
-    route,
-    count: 0,
-    totalNs: 0n,
-  }));
-  metric.count += 1;
-  metric.totalNs += __agentOSWasmNowNs() - startedNs;
-}
-
-function __agentOSWasiNsToUs(ns) {
-  return Number(ns) / 1000;
-}
-
-function __agentOSWasiMetricSummary(metric) {
-  const totalUs = __agentOSWasiNsToUs(metric.totalNs);
-  return {
-    name: metric.name,
-    count: metric.count,
-    totalUs,
-    avgUs: metric.count > 0 ? totalUs / metric.count : 0,
-    phases: Array.from(metric.phases.values())
-      .map((phase) => {
-        const phaseTotalUs = __agentOSWasiNsToUs(phase.totalNs);
-        return {
-          name: phase.name,
-          count: phase.count,
-          totalUs: phaseTotalUs,
-          avgUs: phase.count > 0 ? phaseTotalUs / phase.count : 0,
-        };
-      })
-      .sort((left, right) => right.totalUs - left.totalUs),
-  };
-}
-
-function __agentOSWasiEmitSyscallPhaseMetrics() {
-  if (!__agentOSWasiSyscallPhasesEnabled || typeof process?.stderr?.write !== 'function') {
-    return;
-  }
-  try {
-    process.stderr.write(`__AGENTOS_WASI_SYSCALL_PHASE_METRICS__:${JSON.stringify({
-      modulePath,
-      syscalls: Array.from(__agentOSWasiSyscallMetrics.values())
-        .map(__agentOSWasiMetricSummary)
-        .sort((left, right) => right.totalUs - left.totalUs),
-      syncRpc: Array.from(__agentOSWasiSyncRpcMetrics.values())
-        .map((metric) => {
-          const totalUs = __agentOSWasiNsToUs(metric.totalNs);
-          return {
-            method: metric.method,
-            route: metric.route,
-            count: metric.count,
-            totalUs,
-            avgUs: metric.count > 0 ? totalUs / metric.count : 0,
-          };
-        })
-        .sort((left, right) => right.totalUs - left.totalUs),
-    })}\n`);
-  } catch {
-    // Diagnostics must never change command behavior.
-  }
-}
-
-if (__agentOSWasiSyscallPhasesEnabled && typeof process?.on === 'function') {
-  process.on('exit', () => {
-    __agentOSWasiEmitSyscallPhaseMetrics();
-  });
-}
-
-function __agentOSWasmEmitPhaseMetrics(reason, extra = {}) {
-  if (!__agentOSWasmPhaseDebug || typeof process?.stderr?.write !== 'function') {
-    return;
-  }
-  try {
-    process.stderr.write(`__AGENTOS_WASM_PHASE_METRICS__:${JSON.stringify({
-      reason,
-      modulePath,
-      moduleBytes: typeof moduleBinary !== 'undefined' ? moduleBinary.byteLength : null,
-      phases: __agentOSWasmPhaseTimings,
-      ...extra,
-    })}\n`);
-  } catch {
-    // Diagnostics must never change command behavior.
-  }
-}
-
-const guestArgv = JSON.parse(process.env.AGENTOS_GUEST_ARGV ?? '[]');
-const guestEnv = JSON.parse(process.env.AGENTOS_GUEST_ENV ?? '{}');
-const GUEST_PATH_MAPPINGS = parseGuestPathMappings(process.env.AGENTOS_GUEST_PATH_MAPPINGS);
-const permissionTier = process.env.AGENTOS_WASM_PERMISSION_TIER ?? 'full';
-const prewarmOnly = process.env.AGENTOS_WASM_PREWARM_ONLY === '1';
-const maxMemoryBytesValue = Number(process.env.AGENTOS_WASM_MAX_MEMORY_BYTES);
-const maxMemoryPages = Number.isFinite(maxMemoryBytesValue)
-  ? Math.max(0, Math.floor(maxMemoryBytesValue / WASM_PAGE_BYTES))
-  : null;
-const maxStackBytesValue = Number(process.env.AGENTOS_WASM_MAX_STACK_BYTES);
-const maxStackBytes =
-  Number.isFinite(maxStackBytesValue) && maxStackBytesValue > 0
-    ? Math.floor(maxStackBytesValue)
-    : null;
-
-// A guest can drive WebAssembly into never-returning recursion. V8's default
-// native stack guard already traps that as a generic `RangeError`, but the
-// operator-configured `AGENTOS_WASM_MAX_STACK_BYTES` budget was previously
-// never consulted, so the cap was dead. When a stack byte budget is set, treat
-// a stack-exhaustion trap as enforcement of THAT budget: terminate the guest
-// nonzero and attribute the failure to the configured limit instead of leaking
-// the engine's generic default-guard message.
-function isWasmStackExhaustionTrap(error) {
-  const message = typeof error?.message === 'string' ? error.message : '';
-  // V8 raises `RangeError: Maximum call stack size exceeded` when its native
-  // stack guard fires on runaway recursion (the WebAssembly call stack is
-  // mapped onto V8's). Match that explicitly rather than treating every
-  // `RangeError` as stack exhaustion, so unrelated range failures still
-  // surface with their own message.
-  return /maximum call stack size exceeded/i.test(message);
-}
-
-function reportConfiguredStackLimitExceeded(error) {
-  const detail = typeof error?.message === 'string' && error.message.length > 0
-    ? ` (${error.message})`
-    : '';
-  if (typeof process?.stderr?.write === 'function') {
-    process.stderr.write(
-      `WebAssembly guest exceeded the configured stack byte limit of ${maxStackBytes} bytes${detail}\n`,
-    );
-  }
-}
-const frozenTimeValue = Number(process.env.AGENTOS_FROZEN_TIME_MS);
-const frozenTimeMs = Number.isFinite(frozenTimeValue) ? Math.trunc(frozenTimeValue) : Date.now();
-const frozenTimeNs = BigInt(frozenTimeMs) * 1000000n;
-const VIRTUAL_UID = parseVirtualProcessNumber(
-  process.env.AGENTOS_VIRTUAL_PROCESS_UID,
-  DEFAULT_VIRTUAL_UID,
-);
-const VIRTUAL_GID = parseVirtualProcessNumber(
-  process.env.AGENTOS_VIRTUAL_PROCESS_GID,
-  DEFAULT_VIRTUAL_GID,
-);
-const VIRTUAL_PID = parseVirtualProcessNumber(
-  process.env.AGENTOS_VIRTUAL_PROCESS_PID,
-  DEFAULT_VIRTUAL_PID,
-);
-const VIRTUAL_PPID = parseVirtualProcessNumber(
-  process.env.AGENTOS_VIRTUAL_PROCESS_PPID,
-  DEFAULT_VIRTUAL_PPID,
-);
-const VIRTUAL_OS_USER = parseVirtualProcessString(
-  (globalThis.__agentOSVirtualOs||{}).user,
-  DEFAULT_VIRTUAL_OS_USER,
-);
-const VIRTUAL_OS_HOMEDIR = resolveVirtualPath(
-  (globalThis.__agentOSVirtualOs||{}).homedir,
-  DEFAULT_VIRTUAL_OS_HOMEDIR,
-);
-const VIRTUAL_OS_SHELL = resolveVirtualPath(
-  (globalThis.__agentOSVirtualOs||{}).shell,
-  DEFAULT_VIRTUAL_OS_SHELL,
-);
-const CONTROL_PIPE_FD = parseControlPipeFd(process.env.AGENTOS_CONTROL_PIPE_FD);
-const NODE_SYNC_RPC_ENABLE = process.env.AGENTOS_NODE_SYNC_RPC_ENABLE === '1';
-const NODE_SYNC_RPC_REQUEST_FD = parseControlPipeFd(process.env.AGENTOS_NODE_SYNC_RPC_REQUEST_FD);
-const NODE_SYNC_RPC_RESPONSE_FD = parseControlPipeFd(process.env.AGENTOS_NODE_SYNC_RPC_RESPONSE_FD);
-const KERNEL_STDIO_SYNC_RPC = process.env.AGENTOS_WASI_STDIO_SYNC_RPC === '1';
-const SIDECAR_MANAGED_PROCESS =
-  typeof process?.env?.AGENTOS_SANDBOX_ROOT === 'string' &&
-  process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-let nextSyncRpcId = 1;
-let syncRpcResponseBuffer = '';
-const spawnedChildren = new Map();
-const spawnedChildrenById = new Map();
-let nextSyntheticChildPid = 0x40000000;
-const syntheticFdEntries = new Map();
-const delegateManagedFdRefCounts = new Map();
-const closedPassthroughFds = new Set();
-globalThis.__agentOSWasiDelegateFdRefCount = (fd) =>
-  delegateManagedFdRefCounts.get(Number(fd) >>> 0) ?? 0;
-const passthroughHandles = new Map([
-  [0, { kind: 'passthrough', targetFd: 0, displayFd: 0, refCount: 0, open: true }],
-  [1, { kind: 'passthrough', targetFd: 1, displayFd: 1, refCount: 0, open: true }],
-  [2, { kind: 'passthrough', targetFd: 2, displayFd: 2, refCount: 0, open: true }],
-]);
-const retainedSyntheticHandlesByDisplayFd = new Map();
-const retainedSpawnOutputHandlesByFd = new Map();
-let nextSyntheticFd = 64;
-let nextSyntheticPipeId = 1;
-const syntheticWaitArray = new Int32Array(new SharedArrayBuffer(4));
-let delegateWriteScratch = { base: 0, capacity: 0 };
-
-function traceHostProcess(event, details) {
-  const enabled =
-    (typeof TRACE_HOST_PROCESS === 'boolean' && TRACE_HOST_PROCESS) ||
-    (typeof HOST_PROCESS_ENV !== 'undefined' &&
-      HOST_PROCESS_ENV?.AGENTOS_TRACE_HOST_PROCESS === '1') ||
-    (typeof process !== 'undefined' && process?.env?.AGENTOS_TRACE_HOST_PROCESS === '1');
-  if (!enabled) {
-    return;
-  }
-  try {
-    process.stderr.write(`[agent-os-host-process] ${event} ${JSON.stringify(details)}\n`);
-  } catch {
-    // Ignore tracing failures.
-  }
-}
-
-const WASI_RIGHT_FD_DATASYNC = 1n << 0n;
-const WASI_RIGHT_FD_READ = 1n << 1n;
-const WASI_RIGHT_FD_SEEK = 1n << 2n;
-const WASI_RIGHT_FD_FDSTAT_SET_FLAGS = 1n << 3n;
-const WASI_RIGHT_FD_SYNC = 1n << 4n;
-const WASI_RIGHT_FD_TELL = 1n << 5n;
-const WASI_RIGHT_FD_ADVISE = 1n << 7n;
-const WASI_RIGHT_FD_ALLOCATE = 1n << 8n;
-const WASI_RIGHT_PATH_CREATE_DIRECTORY = 1n << 9n;
-const WASI_RIGHT_PATH_LINK_SOURCE = 1n << 10n;
-const WASI_RIGHT_PATH_LINK_TARGET = 1n << 11n;
-const WASI_RIGHT_PATH_OPEN = 1n << 13n;
-const WASI_RIGHT_FD_READDIR = 1n << 14n;
-const WASI_RIGHT_PATH_READLINK = 1n << 15n;
-const WASI_RIGHT_PATH_RENAME_SOURCE = 1n << 16n;
-const WASI_RIGHT_PATH_RENAME_TARGET = 1n << 17n;
-const WASI_RIGHT_PATH_FILESTAT_GET = 1n << 18n;
-const WASI_RIGHT_PATH_FILESTAT_SET_SIZE = 1n << 19n;
-const WASI_RIGHT_PATH_FILESTAT_SET_TIMES = 1n << 20n;
-const WASI_RIGHT_FD_FILESTAT_GET = 1n << 21n;
-const WASI_RIGHT_FD_FILESTAT_SET_SIZE = 1n << 22n;
-const WASI_RIGHT_FD_FILESTAT_SET_TIMES = 1n << 23n;
-const WASI_RIGHT_PATH_SYMLINK = 1n << 24n;
-const WASI_RIGHT_PATH_REMOVE_DIRECTORY = 1n << 25n;
-const WASI_RIGHT_PATH_UNLINK_FILE = 1n << 26n;
-const WASI_RIGHT_POLL_FD_READWRITE = 1n << 27n;
-
-const READ_ONLY_PREOPEN_RIGHTS_BASE =
-  WASI_RIGHT_FD_READ |
-  WASI_RIGHT_FD_SEEK |
-  WASI_RIGHT_FD_FDSTAT_SET_FLAGS |
-  WASI_RIGHT_FD_TELL |
-  WASI_RIGHT_PATH_OPEN |
-  WASI_RIGHT_FD_READDIR |
-  WASI_RIGHT_PATH_READLINK |
-  WASI_RIGHT_PATH_FILESTAT_GET |
-  WASI_RIGHT_FD_FILESTAT_GET |
-  WASI_RIGHT_POLL_FD_READWRITE;
-const READ_ONLY_PREOPEN_RIGHTS_INHERITING =
-  WASI_RIGHT_FD_READ |
-  WASI_RIGHT_FD_SEEK |
-  WASI_RIGHT_FD_FDSTAT_SET_FLAGS |
-  WASI_RIGHT_FD_TELL |
-  WASI_RIGHT_FD_FILESTAT_GET |
-  WASI_RIGHT_POLL_FD_READWRITE;
-const READ_WRITE_PREOPEN_RIGHTS_BASE =
-  READ_ONLY_PREOPEN_RIGHTS_BASE |
-  WASI_RIGHT_FD_DATASYNC |
-  WASI_RIGHT_FD_SYNC |
-  WASI_RIGHT_FD_WRITE |
-  WASI_RIGHT_FD_ADVISE |
-  WASI_RIGHT_FD_ALLOCATE |
-  WASI_RIGHT_PATH_CREATE_DIRECTORY |
-  WASI_RIGHT_PATH_FILESTAT_SET_SIZE |
-  WASI_RIGHT_PATH_FILESTAT_SET_TIMES |
-  WASI_RIGHT_FD_FILESTAT_SET_SIZE |
-  WASI_RIGHT_FD_FILESTAT_SET_TIMES;
-const READ_WRITE_PREOPEN_RIGHTS_INHERITING =
-  READ_ONLY_PREOPEN_RIGHTS_INHERITING |
-  WASI_RIGHT_FD_DATASYNC |
-  WASI_RIGHT_FD_SYNC |
-  WASI_RIGHT_FD_WRITE |
-  WASI_RIGHT_FD_ADVISE |
-  WASI_RIGHT_FD_ALLOCATE |
-  WASI_RIGHT_FD_FILESTAT_SET_SIZE |
-  WASI_RIGHT_FD_FILESTAT_SET_TIMES;
-const FULL_PREOPEN_RIGHTS_BASE =
-  READ_WRITE_PREOPEN_RIGHTS_BASE |
-  WASI_RIGHT_PATH_LINK_SOURCE |
-  WASI_RIGHT_PATH_LINK_TARGET |
-  WASI_RIGHT_PATH_RENAME_SOURCE |
-  WASI_RIGHT_PATH_RENAME_TARGET |
-  WASI_RIGHT_PATH_SYMLINK |
-  WASI_RIGHT_PATH_REMOVE_DIRECTORY |
-  WASI_RIGHT_PATH_UNLINK_FILE;
-const FULL_PREOPEN_RIGHTS_INHERITING = READ_WRITE_PREOPEN_RIGHTS_INHERITING;
-
-function buildPreopenRights() {
-  switch (permissionTier) {
-    case 'read-only':
-      return {
-        rightsBase: READ_ONLY_PREOPEN_RIGHTS_BASE,
-        rightsInheriting: READ_ONLY_PREOPEN_RIGHTS_INHERITING,
-      };
-    case 'read-write':
-      return {
-        rightsBase: READ_WRITE_PREOPEN_RIGHTS_BASE,
-        rightsInheriting: READ_WRITE_PREOPEN_RIGHTS_INHERITING,
-      };
-    case 'full':
-    default:
-      return {
-        rightsBase: FULL_PREOPEN_RIGHTS_BASE,
-        rightsInheriting: FULL_PREOPEN_RIGHTS_INHERITING,
-      };
-  }
-}
-
-function createPreopen(hostPath, readOnly = false) {
-  const rights =
-    readOnly === true
-      ? {
-          rightsBase: READ_ONLY_PREOPEN_RIGHTS_BASE,
-          rightsInheriting: READ_ONLY_PREOPEN_RIGHTS_INHERITING,
-        }
-      : buildPreopenRights();
-  return {
-    hostPath,
-    readOnly: readOnly === true,
-    rightsBase: rights.rightsBase,
-    rightsInheriting: rights.rightsInheriting,
-  };
-}
-
-function mappingContainsGuestPath(mapping, guestPath) {
-  if (!mapping || typeof mapping.guestPath !== 'string' || typeof guestPath !== 'string') {
-    return false;
-  }
-  const normalized = path.posix.normalize(guestPath);
-  return (
-    normalized === mapping.guestPath ||
-    mapping.guestPath === '/' ||
-    normalized.startsWith(`${mapping.guestPath}/`)
-  );
-}
-
-function mappingContainsHostPath(mapping, hostPath) {
-  if (!mapping || typeof mapping.hostPath !== 'string' || typeof hostPath !== 'string') {
-    return false;
-  }
-  const normalized = path.resolve(hostPath);
-  const root = path.resolve(mapping.hostPath);
-  return normalized === root || normalized.startsWith(`${root}${path.sep}`);
-}
-
-function readOnlyForCwd(guestCwd) {
-  for (const mapping of GUEST_PATH_MAPPINGS) {
-    if (
-      mapping?.readOnly === true &&
-      (mappingContainsGuestPath(mapping, guestCwd) ||
-        mappingContainsHostPath(mapping, HOST_CWD))
-    ) {
-      return true;
-    }
-  }
-  return false;
-}
-
-function buildPreopens() {
-  switch (permissionTier) {
-    case 'isolated':
-      return {};
-    case 'read-only':
-    case 'read-write':
-    case 'full':
-    default:
-      const guestCwd =
-        typeof guestEnv?.PWD === 'string' && guestEnv.PWD.startsWith('/')
-          ? path.posix.normalize(guestEnv.PWD)
-          : typeof process.env.PWD === 'string' && process.env.PWD.startsWith('/')
-            ? path.posix.normalize(process.env.PWD)
-            : null;
-      const preopens = {};
-      const seen = new Set();
-      const cwdReadOnly = readOnlyForCwd(guestCwd);
-      const cwdMount = guestCwd || '/workspace';
-      preopens[cwdMount] = createPreopen(HOST_CWD, cwdReadOnly);
-      seen.add(cwdMount);
-      const rootMapping = GUEST_PATH_MAPPINGS.find(
-        (mapping) => mapping && mapping.guestPath === '/',
-      );
-      if (rootMapping && !seen.has('/')) {
-        preopens['/'] = createPreopen(rootMapping.hostPath, rootMapping.readOnly);
-        seen.add('/');
-      }
-      for (const mapping of GUEST_PATH_MAPPINGS) {
-        if (!mapping || typeof mapping.guestPath !== 'string' || typeof mapping.hostPath !== 'string') {
-          continue;
-        }
-        const guestPath = path.posix.normalize(mapping.guestPath);
-        if (
-          !path.posix.isAbsolute(guestPath) ||
-          seen.has(guestPath) ||
-          guestPath === guestCwd
-        ) {
-          continue;
-        }
-        preopens[guestPath] = createPreopen(mapping.hostPath, mapping.readOnly);
-        seen.add(guestPath);
-      }
-      if (cwdMount !== '/workspace' && !seen.has('/workspace')) {
-        preopens['/workspace'] = createPreopen(HOST_CWD, cwdReadOnly);
-        seen.add('/workspace');
-      }
-      return preopens;
-  }
-}
-
-function readVarUint(bytes, offset, label) {
-  let value = 0;
-  let shift = 0;
-  let cursor = offset;
-  for (let count = 0; count < 10; count += 1) {
-    if (cursor >= bytes.length) {
-      throw new Error(`WebAssembly ${label} truncated`);
-    }
-    const byte = bytes[cursor];
-    cursor += 1;
-    value += (byte & 0x7f) * 2 ** shift;
-    if ((byte & 0x80) === 0) {
-      return { value, offset: cursor };
-    }
-    shift += 7;
-  }
-  throw new Error(`WebAssembly ${label} exceeds varuint limit`);
-}
-
-function encodeVarUint(value) {
-  const encoded = [];
-  let remaining = Math.trunc(value);
-  do {
-    let byte = remaining & 0x7f;
-    remaining = Math.floor(remaining / 128);
-    if (remaining > 0) {
-      byte |= 0x80;
-    }
-    encoded.push(byte);
-  } while (remaining > 0);
-  return encoded;
-}
-
-function appendBytes(out, bytes) {
-  for (let i = 0; i < bytes.length; i += 1) {
-    out.push(bytes[i]);
-  }
-}
-
-function rewriteMemorySection(sectionBytes, limitPages) {
-  let offset = 0;
-  const countResult = readVarUint(sectionBytes, offset, 'memory count');
-  const count = countResult.value;
-  offset = countResult.offset;
-  const rewritten = [];
-  appendBytes(rewritten, encodeVarUint(count));
-
-  for (let index = 0; index < count; index += 1) {
-    const flagsResult = readVarUint(sectionBytes, offset, 'memory flags');
-    const flags = flagsResult.value;
-    offset = flagsResult.offset;
-
-    if ((flags & ~1) !== 0) {
-      throw new Error(
-        `configured WebAssembly memory limit does not support memory flags ${flags}`,
-      );
-    }
-
-    const initialResult = readVarUint(sectionBytes, offset, 'memory minimum');
-    const initialPages = initialResult.value;
-    offset = initialResult.offset;
-
-    let maximumPages = null;
-    if ((flags & 1) !== 0) {
-      const maximumResult = readVarUint(sectionBytes, offset, 'memory maximum');
-      maximumPages = maximumResult.value;
-      offset = maximumResult.offset;
-    }
-
-    if (initialPages > limitPages) {
-      throw new Error(
-        `initial WebAssembly memory of ${initialPages * WASM_PAGE_BYTES} bytes exceeds the configured limit of ${limitPages * WASM_PAGE_BYTES} bytes`,
-      );
-    }
-
-    const cappedMaximumPages =
-      maximumPages == null ? limitPages : Math.min(maximumPages, limitPages);
-    appendBytes(rewritten, encodeVarUint(1));
-    appendBytes(rewritten, encodeVarUint(initialPages));
-    appendBytes(rewritten, encodeVarUint(cappedMaximumPages));
-  }
-
-  if (offset !== sectionBytes.length) {
-    throw new Error('memory section parsing did not consume the full section');
-  }
-
-  return rewritten;
-}
-
-function enforceMemoryLimit(moduleBytes, limitPages) {
-  if (!Number.isInteger(limitPages)) {
-    return moduleBytes;
-  }
-
-  const bytes = moduleBytes instanceof Uint8Array ? moduleBytes : new Uint8Array(moduleBytes);
-  if (bytes.length < 8 || bytes[0] !== 0 || bytes[1] !== 0x61 || bytes[2] !== 0x73 || bytes[3] !== 0x6d) {
-    throw new Error('module is not a valid WebAssembly binary');
-  }
-
-  const rewritten = Array.from(bytes.slice(0, 8));
-  let offset = 8;
-
-  while (offset < bytes.length) {
-    const sectionStart = offset;
-    const sectionId = bytes[offset];
-    offset += 1;
-    const sectionSizeResult = readVarUint(bytes, offset, 'section size');
-    const sectionSize = sectionSizeResult.value;
-    offset = sectionSizeResult.offset;
-    const sectionEnd = offset + sectionSize;
-    if (sectionEnd > bytes.length) {
-      throw new Error('section extends past end of module');
-    }
-
-    if (sectionId !== 5) {
-      appendBytes(rewritten, bytes.slice(sectionStart, sectionEnd));
-      offset = sectionEnd;
-      continue;
-    }
-
-    const rewrittenSection = rewriteMemorySection(bytes.slice(offset, sectionEnd), limitPages);
-    rewritten.push(sectionId);
-    appendBytes(rewritten, encodeVarUint(rewrittenSection.length));
-    appendBytes(rewritten, rewrittenSection);
-    offset = sectionEnd;
-  }
-
-  return Buffer.from(rewritten);
-}
-
-function decodeBase64ToUint8Array(value) {
-  return Buffer.from(value, 'base64');
-}
-
-// Memoized kernel-PTY probe for the guest's stdio fds. Rust's
-// `stdin().is_terminal()` (and wasi-libc `isatty`) ask `fd_fdstat_get` for a
-// CHARACTER_DEVICE filetype; the runner-process fds are pipes, so a delegated
-// answer hides the kernel PTY and interactive guests (e.g. brush's prompt)
-// believe stdin is not a terminal. Ask the sidecar's kernel instead.
-const stdioTtyCache = new Map();
-function stdioFdIsKernelTty(fd) {
-  const descriptor = Number(fd) >>> 0;
-  if (descriptor > 2) return false;
-  if (KERNEL_STDIO_SYNC_RPC) return true;
-  if (stdioTtyCache.has(descriptor)) return stdioTtyCache.get(descriptor);
-  let isTty = false;
-  try {
-    isTty = callSyncRpc('__kernel_isatty', [descriptor]) === true;
-  } catch {
-    isTty = false;
-  }
-  stdioTtyCache.set(descriptor, isTty);
-  return isTty;
-}
-
-// Long event-driven in-RPC waits: the sidecar services __kernel_stdin_read /
-// __kernel_poll by parking the RPC and replying when kernel poll state changes
-// (reply-by-token), so a long wait costs no dispatch-loop time and near-zero
-// CPU (the guest thread blocks in Atomics.wait inside callSync). Keep each
-// slice under the 30s guest sync-RPC deadline.
-const KERNEL_WAIT_SLICE_MS = 10_000;
-
-function readKernelStdinChunk(maxBytes) {
-  const requestedLength = Math.max(1, Number(maxBytes) >>> 0);
-  while (true) {
-    const response = callSyncRpc('__kernel_stdin_read', [
-      requestedLength,
-      KERNEL_WAIT_SLICE_MS,
-    ]);
-    if (response && typeof response.dataBase64 === 'string') {
-      return Buffer.from(response.dataBase64, 'base64');
-    }
-    if (response && response.done === true) {
-      return null;
-    }
-  }
-}
-
-const rawModuleBytes = globalThis.__agentOSWasmModuleBytes;
-const moduleSource =
-  rawModuleBytes instanceof Uint8Array
-    ? Buffer.from(rawModuleBytes.buffer, rawModuleBytes.byteOffset, rawModuleBytes.byteLength)
-    : typeof moduleBase64 === 'string' && moduleBase64.length > 0
-    ? moduleBase64
-    : fsModule.readFileSync(resolveModulePath(modulePath));
-const moduleBytes =
-  typeof moduleSource === 'string'
-    ? __agentOSWasmMeasurePhase('decodeBase64ToUint8Array', () => decodeBase64ToUint8Array(moduleSource))
-    : moduleSource;
-const moduleBinary = __agentOSWasmMeasurePhase('enforceMemoryLimit', () => enforceMemoryLimit(moduleBytes, maxMemoryPages));
-const module = __agentOSWasmMeasurePhase('WebAssembly.Module', () => new WebAssembly.Module(moduleBinary));
-
-if (prewarmOnly) {
-  __agentOSWasmEmitPhaseMetrics('prewarm');
-  process.exit(0);
-}
-
-const WASI_PREOPENS = buildPreopens();
-const WASI_PREOPEN_FD_BASE = 3;
-const WASI_PREOPEN_ENTRIES = Object.entries(WASI_PREOPENS);
-
-const wasi = new WASI({
-  version: 'preview1',
-  args: guestArgv,
-  env: guestEnv,
-  preopens: WASI_PREOPENS,
-  returnOnExit: true,
-});
-
-let instanceMemory = null;
-const wasiImport = { ...wasi.wasiImport };
-// node:wasi omits sock_shutdown; guest socket teardown happens via fd_close + host_net, so a
-// success no-op is sufficient (needed for the cross-compiled X server / X clients).
-if (typeof wasiImport.sock_shutdown !== 'function') {
-  wasiImport.sock_shutdown = () => 0;
-}
-const delegateClockTimeGet =
-  typeof wasi.wasiImport.clock_time_get === 'function'
-    ? wasi.wasiImport.clock_time_get.bind(wasi.wasiImport)
-    : null;
-const delegateClockResGet =
-  typeof wasi.wasiImport.clock_res_get === 'function'
-    ? wasi.wasiImport.clock_res_get.bind(wasi.wasiImport)
-    : null;
-const delegatePathOpen =
-  typeof wasi.wasiImport.path_open === 'function'
-    ? wasi.wasiImport.path_open.bind(wasi.wasiImport)
-    : null;
-const delegateFdWrite =
-  typeof wasi.wasiImport.fd_write === 'function'
-    ? wasi.wasiImport.fd_write.bind(wasi.wasiImport)
-    : null;
-const delegateFdPread =
-  typeof wasi.wasiImport.fd_pread === 'function'
-    ? wasi.wasiImport.fd_pread.bind(wasi.wasiImport)
-    : null;
-const delegateFdPwrite =
-  typeof wasi.wasiImport.fd_pwrite === 'function'
-    ? wasi.wasiImport.fd_pwrite.bind(wasi.wasiImport)
-    : null;
-const delegateFdSync =
-  typeof wasi.wasiImport.fd_sync === 'function'
-    ? wasi.wasiImport.fd_sync.bind(wasi.wasiImport)
-    : null;
-
-function decodeSignalMask(maskLo, maskHi) {
-  const values = [];
-  const lo = Number(maskLo) >>> 0;
-  const hi = Number(maskHi) >>> 0;
-  for (let bit = 0; bit < 32; bit += 1) {
-    if (((lo >>> bit) & 1) === 1) {
-      values.push(bit + 1);
-    }
-  }
-  for (let bit = 0; bit < 32; bit += 1) {
-    if (((hi >>> bit) & 1) === 1) {
-      values.push(bit + 33);
-    }
-  }
-  return values;
-}
-
-function parseControlPipeFd(value) {
-  if (typeof value !== 'string' || value.trim() === '') {
-    return null;
-  }
-
-  const parsed = Number.parseInt(value, 10);
-  return Number.isInteger(parsed) && parsed >= 3 ? parsed : null;
-}
-
-function emitControlMessage(message) {
-  const emitSignalStateFallback = () => {
-    if (
-      message?.type === 'signal_state' &&
-      typeof process?.stdout?.write === 'function'
-    ) {
-      try {
-        process.stdout.write(`__AGENTOS_WASM_SIGNAL_STATE__:${JSON.stringify(message)}\n`);
-      } catch {
-        // Ignore signal-state bridge failures during teardown.
-      }
-    }
-  };
-
-  if (CONTROL_PIPE_FD == null) {
-    emitSignalStateFallback();
-    return;
-  }
-
-  try {
-    writeSync(CONTROL_PIPE_FD, `${JSON.stringify(message)}\n`);
-  } catch {
-    emitSignalStateFallback();
-  }
-}
-
-function isWorkspaceReadOnly() {
-  return permissionTier === 'read-only' || permissionTier === 'isolated';
-}
-
-function hasWriteRights(rights) {
-  try {
-    return (BigInt(rights) & WASI_RIGHT_FD_WRITE) !== 0n;
-  } catch {
-    return true;
-  }
-}
-
-function hasReadRights(rights) {
-  try {
-    return (BigInt(rights) & WASI_RIGHT_FD_READ) !== 0n;
-  } catch {
-    return true;
-  }
-}
-
-function hasMutationOpenFlags(oflags) {
-  const normalized = Number(oflags) >>> 0;
-  return (
-    (normalized & WASI_OFLAGS_CREAT) !== 0 ||
-    (normalized & WASI_OFLAGS_EXCL) !== 0 ||
-    (normalized & WASI_OFLAGS_TRUNC) !== 0
-  );
-}
-
-function denyReadOnlyMutation() {
-  return WASI_ERRNO_ROFS;
-}
-
-function guestPathForPreopenKey(key) {
-  if (key === '.') {
-    return HOST_FS_GUEST_CWD;
-  }
-  return path.posix.normalize(key);
-}
-
-function resolvePathOpenGuestPath(fd, pathPtr, pathLen) {
-  const target = readGuestString(pathPtr, pathLen);
-  if (target.startsWith('/')) {
-    return path.posix.normalize(target);
-  }
-
-  const handle = lookupFdHandle(fd);
-  if (handle && typeof handle.guestPath === 'string') {
-    return path.posix.resolve(handle.guestPath, target);
-  }
-
-  const preopenIndex = (Number(fd) >>> 0) - WASI_PREOPEN_FD_BASE;
-  const preopen = WASI_PREOPEN_ENTRIES[preopenIndex];
-  if (preopen) {
-    return path.posix.resolve(guestPathForPreopenKey(preopen[0]), target);
-  }
-
-  return null;
-}
-
-function guestPathIsReadOnly(guestPath) {
-  return GUEST_PATH_MAPPINGS.some(
-    (mapping) => mapping?.readOnly === true && mappingContainsGuestPath(mapping, guestPath),
-  );
-}
-
-function resolvedGuestPathIsReadOnly(fd, pathPtr, pathLen) {
-  try {
-    const guestPath = resolvePathOpenGuestPath(fd, pathPtr, pathLen);
-    return typeof guestPath === 'string' && guestPathIsReadOnly(guestPath);
-  } catch {
-    return false;
-  }
-}
-
-// Guest path recorded for a managed (path_open passthrough) fd, if known.
-function guestPathForManagedFd(fd) {
-  const handle = lookupFdHandle(fd);
-  if (handle?.kind === 'passthrough' && typeof handle.guestPath === 'string') {
-    return handle.guestPath;
-  }
-  return null;
-}
-
-// WASI fstflags bits for *_filestat_set_times.
-const WASI_FSTFLAGS_ATIM = 1;
-const WASI_FSTFLAGS_ATIM_NOW = 2;
-const WASI_FSTFLAGS_MTIM = 4;
-const WASI_FSTFLAGS_MTIM_NOW = 8;
-const WASI_LOOKUPFLAGS_SYMLINK_FOLLOW = 1;
-
-// Resolve the (atime, mtime) seconds to apply for a *_filestat_set_times call:
-// explicit nanosecond args, "now", or preserve-current (the OMIT case; node's
-// utimes has no omit, so re-apply the current value from stat).
-function resolveSetTimes(currentStat, atimNs, mtimNs, fstFlags) {
-  const flags = Number(fstFlags) >>> 0;
-  const nowSec = Date.now() / 1000;
-  let atime = currentStat.atimeMs / 1000;
-  let mtime = currentStat.mtimeMs / 1000;
-  if (flags & WASI_FSTFLAGS_ATIM_NOW) {
-    atime = nowSec;
-  } else if (flags & WASI_FSTFLAGS_ATIM) {
-    atime = Number(BigInt(atimNs)) / 1e9;
-  }
-  if (flags & WASI_FSTFLAGS_MTIM_NOW) {
-    mtime = nowSec;
-  } else if (flags & WASI_FSTFLAGS_MTIM) {
-    mtime = Number(BigInt(mtimNs)) / 1e9;
-  }
-  return { atime, mtime };
-}
-
-// The embedded WASI shim omits the *_filestat_set_times ops entirely, which
-// makes instantiation of any module importing them fail with a LinkError
-// (vim uses path_filestat_set_times to restore file timestamps). Implement
-// them against the bridge fs (the kernel VFS) when the base has no delegate.
-if (typeof wasiImport.path_filestat_set_times !== 'function') {
-  wasiImport.path_filestat_set_times = (fd, flags, pathPtr, pathLen, atimNs, mtimNs, fstFlags) => {
-    try {
-      const guestPath = resolvePathOpenGuestPath(fd, pathPtr, pathLen);
-      if (typeof guestPath !== 'string') {
-        return WASI_ERRNO_BADF;
-      }
-      const follow = (Number(flags) >>> 0) & WASI_LOOKUPFLAGS_SYMLINK_FOLLOW;
-      const stat = follow ? fsModule.statSync(guestPath) : fsModule.lstatSync(guestPath);
-      const { atime, mtime } = resolveSetTimes(stat, atimNs, mtimNs, fstFlags);
-      if (follow || typeof fsModule.lutimesSync !== 'function') {
-        fsModule.utimesSync(guestPath, atime, mtime);
-      } else {
-        fsModule.lutimesSync(guestPath, atime, mtime);
-      }
-      return WASI_ERRNO_SUCCESS;
-    } catch (error) {
-      return error?.code === 'ENOENT' ? WASI_ERRNO_NOENT : WASI_ERRNO_INVAL;
-    }
-  };
-}
-
-if (typeof wasiImport.fd_filestat_set_times !== 'function') {
-  wasiImport.fd_filestat_set_times = (fd, atimNs, mtimNs, fstFlags) => {
-    try {
-      const guestPath = guestPathForManagedFd(fd);
-      if (typeof guestPath !== 'string') {
-        return WASI_ERRNO_BADF;
-      }
-      const stat = fsModule.statSync(guestPath);
-      const { atime, mtime } = resolveSetTimes(stat, atimNs, mtimNs, fstFlags);
-      fsModule.utimesSync(guestPath, atime, mtime);
-      return WASI_ERRNO_SUCCESS;
-    } catch (error) {
-      return error?.code === 'ENOENT' ? WASI_ERRNO_NOENT : WASI_ERRNO_INVAL;
-    }
-  };
-}
-
-function pathOpenMayCreateTarget(oflags, rightsBase, fdflags) {
-  const normalizedOflags = Number(oflags) >>> 0;
-  const normalizedFdflags = Number(fdflags) >>> 0;
-  return (
-    (normalizedOflags & WASI_OFLAGS_CREAT) !== 0 ||
-    ((normalizedFdflags & WASI_FDFLAGS_APPEND) !== 0 && hasWriteRights(rightsBase))
-  );
-}
-
-function precreatePathOpenTarget(fd, pathPtr, pathLen, oflags, rightsBase, fdflags) {
-  if (!pathOpenMayCreateTarget(oflags, rightsBase, fdflags)) {
-    return null;
-  }
-
-  const guestPath = resolvePathOpenGuestPath(fd, pathPtr, pathLen);
-  if (typeof guestPath !== 'string') {
-    return null;
-  }
-
-  if (!fsModule.existsSync(guestPath)) {
-    fsModule.writeFileSync(guestPath, Buffer.alloc(0));
-  }
-  return guestPath;
-}
-
-function fsOpenFlagForPathOpen(oflags, rightsBase, fdflags) {
-  const normalizedOflags = Number(oflags) >>> 0;
-  const normalizedFdflags = Number(fdflags) >>> 0;
-  const wantsRead = hasReadRights(rightsBase);
-  const wantsWrite = hasWriteRights(rightsBase);
-  const wantsExclusive = (normalizedOflags & WASI_OFLAGS_EXCL) !== 0;
-  const wantsAppend = (normalizedFdflags & WASI_FDFLAGS_APPEND) !== 0;
-  const wantsTruncate = (normalizedOflags & WASI_OFLAGS_TRUNC) !== 0;
-
-  if (!wantsWrite) {
-    return 'r';
-  }
-
-  if (wantsAppend) {
-    if (wantsExclusive) {
-      return wantsRead ? 'ax+' : 'ax';
-    }
-    return wantsRead ? 'a+' : 'a';
-  }
-
-  if (wantsTruncate) {
-    if (wantsExclusive) {
-      return wantsRead ? 'wx+' : 'wx';
-    }
-    return wantsRead ? 'w+' : 'w';
-  }
-
-  return 'r+';
-}
-
-function allocateSyntheticFd() {
-  let fd = nextSyntheticFd;
-  while (
-    syntheticFdEntries.has(fd) ||
-    passthroughHandles.has(fd) ||
-    delegateManagedFdRefCounts.has(fd)
-  ) {
-    fd += 1;
-  }
-  nextSyntheticFd = fd + 1;
-  return fd;
-}
-
-function openGuestFileForPathOpen(fd, pathPtr, pathLen, oflags, rightsBase, fdflags, openedFdPtr) {
-  if (!pathOpenMayCreateTarget(oflags, rightsBase, fdflags)) {
-    return null;
-  }
-
-  const normalizedOflags = Number(oflags) >>> 0;
-  const normalizedFdflags = Number(fdflags) >>> 0;
-
-  const guestPath = resolvePathOpenGuestPath(fd, pathPtr, pathLen);
-  if (typeof guestPath !== 'string') {
-    return null;
-  }
-
-  const append = (normalizedFdflags & WASI_FDFLAGS_APPEND) !== 0;
-  const exclusive = (normalizedOflags & WASI_OFLAGS_EXCL) !== 0;
-  const truncate = (normalizedOflags & WASI_OFLAGS_TRUNC) !== 0;
-  if (!append && !exclusive && !truncate && !fsModule.existsSync(guestPath)) {
-    fsModule.writeFileSync(guestPath, Buffer.alloc(0));
-  }
-  const targetFd = fsModule.openSync(
-    guestPath,
-    fsOpenFlagForPathOpen(oflags, rightsBase, fdflags),
-    0o666,
-  );
-  const openedFd = allocateSyntheticFd();
-  syntheticFdEntries.set(openedFd, {
-    kind: 'guest-file',
-    targetFd,
-    displayFd: openedFd,
-    refCount: 1,
-    open: true,
-    guestPath,
-    position: append ? Number(fsModule.fstatSync(targetFd).size ?? 0) : 0,
-    append,
-  });
-  return writeGuestUint32(openedFdPtr, openedFd);
-}
-
-function fsOpenNumericFlagsForManagedPath(rightsBase, fdflags) {
-  const wantsRead = hasReadRights(rightsBase);
-  const wantsWrite = hasWriteRights(rightsBase);
-  let flags = wantsWrite ? (wantsRead ? 0o2 : 0o1) : 0;
-  if ((Number(fdflags) & WASI_FDFLAGS_APPEND) !== 0) {
-    flags |= 0o2000;
-  }
-  return flags;
-}
-
-function openManagedPathIoFd(guestPath, rightsBase, fdflags) {
-  if (typeof guestPath !== 'string' || guestPath === '/dev/null') {
-    return null;
-  }
-  try {
-    return fsModule.openSync(
-      guestPath,
-      fsOpenNumericFlagsForManagedPath(rightsBase, fdflags),
-      0o666,
-    );
-  } catch {
-    return null;
-  }
-}
-
-function retainPathOpenDelegateFd(openedFdPtr, guestPath, fdflags, rightsBase) {
-  if (!(instanceMemory instanceof WebAssembly.Memory)) {
-    return WASI_ERRNO_SUCCESS;
-  }
-
-  try {
-    const openedFd = new DataView(instanceMemory.buffer).getUint32(Number(openedFdPtr), true);
-    const append = (Number(fdflags) & WASI_FDFLAGS_APPEND) !== 0;
-    retainDelegateFd(openedFd);
-    if (openedFd > 2 && !passthroughHandles.has(openedFd)) {
-      const ioFd = openManagedPathIoFd(guestPath, rightsBase, fdflags);
-      closedPassthroughFds.delete(openedFd);
-      passthroughHandles.set(openedFd, {
-        kind: 'passthrough',
-        targetFd: openedFd,
-        ioFd,
-        displayFd: openedFd,
-        refCount: 0,
-        open: true,
-        readOnly:
-          typeof guestPath === 'string' &&
-          resolveModuleGuestPathToHostMapping(guestPath)?.readOnly === true,
-        append,
-        position: append && typeof ioFd === 'number'
-          ? Number(fsModule.fstatSync(ioFd).size ?? 0)
-          : 0,
-        ...(typeof guestPath === 'string' ? { guestPath } : {}),
-      });
-    }
-    return WASI_ERRNO_SUCCESS;
-  } catch {
-    return WASI_ERRNO_FAULT;
-  }
-}
-
-function writeGuestUint32(ptr, value) {
-  if (!(instanceMemory instanceof WebAssembly.Memory)) {
-    return WASI_ERRNO_FAULT;
-  }
-
-  try {
-    new DataView(instanceMemory.buffer).setUint32(Number(ptr), Number(value) >>> 0, true);
-    return WASI_ERRNO_SUCCESS;
-  } catch {
-    return WASI_ERRNO_FAULT;
-  }
-}
-
-function readGuestUint32(ptr) {
-  if (!(instanceMemory instanceof WebAssembly.Memory)) {
-    throw new Error('WebAssembly memory is unavailable');
-  }
-  return new DataView(instanceMemory.buffer).getUint32(Number(ptr), true);
-}
-
-function writeGuestUint64(ptr, value) {
-  if (!(instanceMemory instanceof WebAssembly.Memory)) {
-    return WASI_ERRNO_FAULT;
-  }
-
-  try {
-    new DataView(instanceMemory.buffer).setBigUint64(Number(ptr), BigInt(value), true);
-    return WASI_ERRNO_SUCCESS;
-  } catch {
-    return WASI_ERRNO_FAULT;
-  }
-}
-
-function statTimestampNs(value) {
-  const numeric = Number(value);
-  return BigInt(Math.trunc((Number.isFinite(numeric) ? numeric : 0) * 1000000));
-}
-
-function writeGuestFilestat(ptr, stats, filetype = WASI_FILETYPE_REGULAR_FILE) {
-  if (!(instanceMemory instanceof WebAssembly.Memory)) {
-    return WASI_ERRNO_FAULT;
-  }
-
-  try {
-    const view = new DataView(instanceMemory.buffer);
-    const offset = Number(ptr) >>> 0;
-    view.setBigUint64(offset, 0n, true);
-    view.setBigUint64(offset + 8, BigInt(stats?.ino ?? 0), true);
-    view.setUint8(offset + 16, Number(filetype) >>> 0);
-    view.setBigUint64(offset + 24, BigInt(stats?.nlink ?? 1), true);
-    view.setBigUint64(offset + 32, BigInt(stats?.size ?? 0), true);
-    view.setBigUint64(offset + 40, statTimestampNs(stats?.atimeMs), true);
-    view.setBigUint64(offset + 48, statTimestampNs(stats?.mtimeMs), true);
-    view.setBigUint64(offset + 56, statTimestampNs(stats?.ctimeMs), true);
-    return WASI_ERRNO_SUCCESS;
-  } catch {
-    return WASI_ERRNO_FAULT;
-  }
-}
-
-function writeGuestFdstat(ptr, filetype, flags, rightsBase, rightsInheriting) {
-  if (!(instanceMemory instanceof WebAssembly.Memory)) {
-    return WASI_ERRNO_FAULT;
-  }
-
-  try {
-    const view = new DataView(instanceMemory.buffer);
-    const offset = Number(ptr) >>> 0;
-    view.setUint8(offset, Number(filetype) >>> 0);
-    view.setUint16(offset + 2, Number(flags) >>> 0, true);
-    view.setBigUint64(offset + 8, BigInt(rightsBase), true);
-    view.setBigUint64(offset + 16, BigInt(rightsInheriting), true);
-    return WASI_ERRNO_SUCCESS;
-  } catch {
-    return WASI_ERRNO_FAULT;
-  }
-}
-
-function mapSyntheticFsError(error) {
-  switch (error?.code) {
-    case 'EBADF':
-      return WASI_ERRNO_BADF;
-    case 'EACCES':
-    case 'EPERM':
-      return WASI_ERRNO_ACCES;
-    case 'EINVAL':
-      return WASI_ERRNO_INVAL;
-    case 'EROFS':
-      return WASI_ERRNO_ROFS;
-    default:
-      return WASI_ERRNO_FAULT;
-  }
-}
-
-function seekGuestFileHandle(handle, offset, whence) {
-  const numericWhence = Number(whence) >>> 0;
-  let base;
-  if (numericWhence === WASI_WHENCE_SET) {
-    base = 0n;
-  } else if (numericWhence === WASI_WHENCE_CUR) {
-    base = BigInt(handle.position ?? 0);
-  } else if (numericWhence === WASI_WHENCE_END) {
-    base = BigInt(Number(fsModule.fstatSync(handle.targetFd).size ?? 0));
-  } else {
-    return null;
-  }
-
-  const next = base + BigInt(offset);
-  if (next < 0n || next > BigInt(Number.MAX_SAFE_INTEGER)) {
-    return null;
-  }
-
-  handle.position = Number(next);
-  return next;
-}
-
-function createPipeHandle(kind, pipe, displayFd) {
-  if (kind === 'pipe-read') {
-    pipe.readHandleCount += 1;
-  } else if (kind === 'pipe-write') {
-    pipe.writeHandleCount += 1;
-  }
-
-  return {
-    kind,
-    pipe,
-    displayFd: Number(displayFd) >>> 0,
-    refCount: 1,
-    open: true,
-  };
-}
-
-function retainDelegateFd(fd) {
-  const numericFd = Number(fd) >>> 0;
-  delegateManagedFdRefCounts.set(numericFd, (delegateManagedFdRefCounts.get(numericFd) ?? 0) + 1);
-}
-
-function releaseDelegateFd(fd) {
-  const numericFd = Number(fd) >>> 0;
-  const current = delegateManagedFdRefCounts.get(numericFd);
-  if (current == null) {
-    return false;
-  }
-  if (current <= 1) {
-    delegateManagedFdRefCounts.delete(numericFd);
-    return true;
-  }
-  delegateManagedFdRefCounts.set(numericFd, current - 1);
-  return false;
-}
-
-function lookupFdHandle(fd) {
-  const numericFd = Number(fd) >>> 0;
-  return (
-    syntheticFdEntries.get(numericFd) ??
-    retainedSpawnOutputHandlesByFd.get(numericFd)?.handle ??
-    passthroughHandles.get(numericFd) ??
-    null
-  );
-}
-
-function lookupSyntheticHandleByDisplayFd(fd, expectedKind = null) {
-  const numericFd = Number(fd) >>> 0;
-  for (const handle of syntheticFdEntries.values()) {
-    if (!handle || handle.displayFd !== numericFd) {
-      continue;
-    }
-    if (expectedKind && handle.kind !== expectedKind) {
-      continue;
-    }
-    return handle;
-  }
-
-  const retainedHandle = retainedSyntheticHandlesByDisplayFd.get(numericFd) ?? null;
-  if (
-    retainedHandle &&
-    (!expectedKind || retainedHandle.kind === expectedKind)
-  ) {
-    return retainedHandle;
-  }
-
-  return null;
-}
-
-function retainSyntheticHandleByDisplayFd(handle) {
-  if (
-    handle &&
-    (handle.kind === 'pipe-read' || handle.kind === 'pipe-write')
-  ) {
-    retainedSyntheticHandlesByDisplayFd.set(handle.displayFd >>> 0, handle);
-  }
-}
-
-function releaseRetainedSyntheticHandleByDisplayFd(handle) {
-  if (!handle) {
-    return;
-  }
-
-  const displayFd = handle.displayFd >>> 0;
-  if (retainedSyntheticHandlesByDisplayFd.get(displayFd) === handle) {
-    retainedSyntheticHandlesByDisplayFd.delete(displayFd);
-  }
-}
-
-function cloneFdHandle(fd) {
-  const handle = lookupFdHandle(fd);
-  if (!handle) {
-    return null;
-  }
-  handle.refCount += 1;
-  return handle;
-}
-
-function passthroughHandleHasCanonicalMapping(handle) {
-  for (const current of passthroughHandles.values()) {
-    if (current === handle) {
-      return true;
-    }
-  }
-  return false;
-}
-
-function releaseFdHandle(handle) {
-  if (!handle) {
-    return;
-  }
-
-  if (handle.kind === 'passthrough') {
-    handle.refCount = Math.max(0, handle.refCount - 1);
-    if (
-      handle.refCount === 0 &&
-      handle.open &&
-      handle.targetFd > 2 &&
-      !passthroughHandleHasCanonicalMapping(handle) &&
-      releaseDelegateFd(handle.targetFd) &&
-      typeof delegateManagedFdClose === 'function'
-    ) {
-      delegateManagedFdClose(handle.targetFd);
-    }
-    if (handle.refCount === 0 && handle.open && typeof handle.ioFd === 'number') {
-      try {
-        fsModule.closeSync(handle.ioFd);
-      } catch {}
-      handle.ioFd = null;
-    }
-    return;
-  }
-
-  if (handle.kind === 'guest-file') {
-    handle.refCount = Math.max(0, handle.refCount - 1);
-    if (handle.refCount === 0 && handle.open) {
-      handle.open = false;
-      fsModule.closeSync(handle.targetFd);
-    }
-    return;
-  }
-
-  handle.refCount = Math.max(0, handle.refCount - 1);
-  if (handle.refCount > 0 || !handle.open) {
-    return;
-  }
-
-  handle.open = false;
-  if (handle.kind === 'pipe-read') {
-    handle.pipe.readHandleCount = Math.max(0, handle.pipe.readHandleCount - 1);
-  } else if (handle.kind === 'pipe-write') {
-    handle.pipe.writeHandleCount = Math.max(0, handle.pipe.writeHandleCount - 1);
-    if (handle.pipe.writeHandleCount === 0 && (handle.pipe.producers?.size ?? 0) === 0) {
-      closePipeConsumers(handle.pipe);
-    }
-  }
-}
-
-function closeSyntheticFd(fd) {
-  const numericFd = Number(fd) >>> 0;
-  const handle = syntheticFdEntries.get(numericFd);
-  if (!handle) {
-    return false;
-  }
-
-  const shouldRetainMapping =
-    ((handle.kind === 'pipe-write' && (handle.pipe.producers?.size ?? 0) > 0) ||
-      (handle.kind === 'pipe-read' && (handle.pipe.consumers?.size ?? 0) > 0));
-  if (shouldRetainMapping) {
-    retainSyntheticHandleByDisplayFd(handle);
-  }
-  if (!shouldRetainMapping) {
-    syntheticFdEntries.delete(numericFd);
-  }
-  releaseFdHandle(handle);
-  if (shouldRetainMapping) {
-    collectInactivePipeHandles(handle.pipe);
-  }
-  return true;
-}
-
-function closePassthroughFd(fd) {
-  const numericFd = Number(fd) >>> 0;
-  const handle = passthroughHandles.get(numericFd);
-  if (!handle) {
-    return false;
-  }
-
-  passthroughHandles.delete(numericFd);
-  closedPassthroughFds.add(numericFd);
-  if ((handle.refCount ?? 0) === 0) {
-    releaseFdHandle(handle);
-  }
-  return true;
-}
-
-function rejectClosedPassthroughFd(fd) {
-  return closedPassthroughFds.has(Number(fd) >>> 0);
-}
-
-function collectInactivePipeHandles(pipe) {
-  if (!pipe) {
-    return;
-  }
-
-  if (
-    (pipe.readHandleCount ?? 0) > 0 ||
-    (pipe.writeHandleCount ?? 0) > 0 ||
-    (pipe.producers?.size ?? 0) > 0 ||
-    (pipe.consumers?.size ?? 0) > 0
-  ) {
-    return;
-  }
-
-  for (const [fd, handle] of Array.from(syntheticFdEntries.entries())) {
-    if (
-      (handle.kind === 'pipe-read' || handle.kind === 'pipe-write') &&
-      handle.pipe === pipe &&
-      !handle.open &&
-      handle.refCount === 0
-    ) {
-      syntheticFdEntries.delete(fd);
-    }
-  }
-
-  for (const [displayFd, handle] of Array.from(retainedSyntheticHandlesByDisplayFd.entries())) {
-    if (
-      (handle.kind === 'pipe-read' || handle.kind === 'pipe-write') &&
-      handle.pipe === pipe &&
-      !handle.open &&
-      handle.refCount === 0
-    ) {
-      retainedSyntheticHandlesByDisplayFd.delete(displayFd);
-    }
-  }
-}
-
-function resolveSpawnFd(fd) {
-  const numericFd = Number(fd) >>> 0;
-  const handle = lookupFdHandle(fd);
-  if (!handle) {
-    return numericFd;
-  }
-  if (handle.kind === 'passthrough') {
-    return handle.targetFd >>> 0;
-  }
-  if (handle.kind === 'guest-file') {
-    return numericFd;
-  }
-  return handle.displayFd >>> 0;
-}
-
-function spawnStdinFdIsSyntheticPipe(fd) {
-  const handle =
-    lookupFdHandle(fd) ?? lookupSyntheticHandleByDisplayFd(fd, 'pipe-read');
-  return handle?.kind === 'pipe-read';
-}
-
-// Shell input redirects (`cmd < file`) reach proc_spawn as a plain file fd in
-// stdin_fd. The child cannot share that descriptor across the spawn boundary,
-// so the remaining file contents are materialized and written to the child's
-// stdin pipe, exactly like POSIX children reading an inherited file fd to EOF.
-// Returns null when the fd is not a readable file-backed handle so callers can
-// fail loudly instead of leaving the child hanging on an open stdin pipe.
-function readSpawnStdinRedirectBytes(fd) {
-  const numericFd = Number(fd) >>> 0;
-  const handle = lookupFdHandle(numericFd);
-  if (!handle) {
-    return null;
-  }
-
-  if (handle.kind === 'guest-file') {
-    const chunks = [];
-    let position = handle.position ?? 0;
-    for (;;) {
-      const buffer = Buffer.alloc(65536);
-      const bytesRead = fsModule.readSync(
-        handle.targetFd,
-        buffer,
-        0,
-        buffer.length,
-        position,
-      );
-      if (bytesRead <= 0) {
-        break;
-      }
-      chunks.push(buffer.subarray(0, bytesRead));
-      position += bytesRead;
-    }
-    handle.position = position;
-    return Buffer.concat(chunks);
-  }
-
-  if (handle.kind === 'passthrough' && typeof handle.guestPath === 'string') {
-    if (handle.guestPath === '/dev/null') {
-      return Buffer.alloc(0);
-    }
-    const stats = fsModule.statSync(handle.guestPath);
-    if (!stats.isFile()) {
-      return null;
-    }
-    return Buffer.from(fsModule.readFileSync(handle.guestPath));
-  }
-
-  return null;
-}
-
-function retainSpawnOutputHandle(fd) {
-  const numericFd = Number(fd) >>> 0;
-  if (numericFd <= 2) {
-    return null;
-  }
-
-  const retained = retainedSpawnOutputHandlesByFd.get(numericFd);
-  if (retained) {
-    retained.refCount += 1;
-    retained.handle.refCount += 1;
-    return { fd: numericFd, handle: retained.handle };
-  }
-
-  const handle = lookupFdHandle(numericFd);
-  if (handle?.kind !== 'guest-file' && handle?.kind !== 'passthrough') {
-    return null;
-  }
-
-  handle.refCount += 1;
-  retainedSpawnOutputHandlesByFd.set(numericFd, { handle, refCount: 1 });
-  return { fd: numericFd, handle };
-}
-
-function releaseSpawnOutputHandles(retainedHandles) {
-  for (const retained of retainedHandles ?? []) {
-    if (!retained || typeof retained.fd !== 'number' || !retained.handle) {
-      continue;
-    }
-    const retainedEntry = retainedSpawnOutputHandlesByFd.get(retained.fd);
-    if (retainedEntry?.handle === retained.handle) {
-      retainedEntry.refCount -= 1;
-      if (retainedEntry.refCount <= 0) {
-        retainedSpawnOutputHandlesByFd.delete(retained.fd);
-      }
-    }
-    releaseFdHandle(retained.handle);
-  }
-}
-
-function collectGuestIovBytes(iovs, iovsLen) {
-  if (!(instanceMemory instanceof WebAssembly.Memory)) {
-    throw new Error('WebAssembly memory is not available');
-  }
-
-  const chunks = [];
-  let totalLength = 0;
-
-  for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-    const view = new DataView(instanceMemory.buffer);
-    const entryOffset = (Number(iovs) >>> 0) + index * 8;
-    const ptr = view.getUint32(entryOffset, true);
-    const len = view.getUint32(entryOffset + 4, true);
-    const chunk = readGuestBytes(ptr, len);
-    chunks.push(chunk);
-    totalLength += chunk.length;
-  }
-
-  return Buffer.concat(chunks, totalLength);
-}
-
-function writeBytesToGuestIovs(iovs, iovsLen, bytes) {
-  if (!(instanceMemory instanceof WebAssembly.Memory)) {
-    throw new Error('WebAssembly memory is not available');
-  }
-
-  const source = Buffer.from(bytes ?? []);
-  let written = 0;
-
-  for (let index = 0; index < (Number(iovsLen) >>> 0) && written < source.length; index += 1) {
-    const view = new DataView(instanceMemory.buffer);
-    const memory = new Uint8Array(instanceMemory.buffer);
-    const entryOffset = (Number(iovs) >>> 0) + index * 8;
-    const ptr = view.getUint32(entryOffset, true);
-    const len = view.getUint32(entryOffset + 4, true);
-    const remaining = source.length - written;
-    const chunkLength = Math.min(len >>> 0, remaining);
-    memory.set(source.subarray(written, written + chunkLength), ptr >>> 0);
-    written += chunkLength;
-  }
-
-  return written >>> 0;
-}
-
-function dequeuePipeBytes(pipe, maxBytes) {
-  const requested = Math.max(0, Number(maxBytes) >>> 0);
-  if (requested === 0 || pipe.chunks.length === 0) {
-    return Buffer.alloc(0);
-  }
-
-  const parts = [];
-  let remaining = requested;
-  while (remaining > 0 && pipe.chunks.length > 0) {
-    const chunk = pipe.chunks[0];
-    if (chunk.length <= remaining) {
-      parts.push(chunk);
-      pipe.chunks.shift();
-      remaining -= chunk.length;
-      continue;
-    }
-
-    parts.push(chunk.subarray(0, remaining));
-    pipe.chunks[0] = chunk.subarray(remaining);
-    remaining = 0;
-  }
-
-  return Buffer.concat(parts);
-}
-
-function enqueuePipeBytes(pipe, bytes) {
-  const chunk = Buffer.from(bytes ?? []);
-  if (chunk.length === 0) {
-    return;
-  }
-  pipe.chunks.push(chunk);
-}
-
-function pipeHasReaders(pipe) {
-  return (
-    (pipe?.readHandleCount ?? 0) > 0 ||
-    (pipe?.consumers?.size ?? 0) > 0
-  );
-}
-
-function unregisterPipeProducer(pipe, producerKey) {
-  if (!pipe || typeof pipe.producers?.delete !== 'function') {
-    return;
-  }
-  pipe.producers.delete(producerKey);
-  if (pipe.producers.size === 0 && (pipe.writeHandleCount ?? 0) === 0) {
-    closePipeConsumers(pipe);
-  }
-  collectInactivePipeHandles(pipe);
-}
-
-function unregisterPipeConsumer(pipe, consumerKey) {
-  if (!pipe || typeof pipe.consumers?.delete !== 'function') {
-    return;
-  }
-  pipe.consumers.delete(consumerKey);
-  collectInactivePipeHandles(pipe);
-}
-
-function unregisterChildPipeProducers(record) {
-  if (!record || !record.childId) {
-    return;
-  }
-
-  for (const [stream, fd, pipe] of [
-    ['stdout', record.stdoutFd, record.stdoutPipe],
-    ['stderr', record.stderrFd, record.stderrPipe],
-  ]) {
-    const outputPipe =
-      pipe ??
-      (() => {
-        const handle =
-          lookupFdHandle(fd) ?? lookupSyntheticHandleByDisplayFd(fd, 'pipe-write');
-        return handle?.kind === 'pipe-write' ? handle.pipe : null;
-      })();
-    if (outputPipe) {
-      unregisterPipeProducer(outputPipe, `${record.childId}:${stream}`);
-    }
-  }
-}
-
-function unregisterChildPipeConsumers(record) {
-  if (!record || !record.childId) {
-    return;
-  }
-
-  const inputPipe = resolveChildInputPipe(record);
-  if (inputPipe) {
-    unregisterPipeConsumer(inputPipe, `${record.childId}:stdin`);
-  }
-}
-
-function resolveChildInputPipe(record) {
-  if (!record) {
-    return null;
-  }
-
-  return (
-    record.stdinPipe ??
-    (() => {
-      const handle =
-        lookupFdHandle(record.stdinFd) ??
-        lookupSyntheticHandleByDisplayFd(record.stdinFd, 'pipe-read');
-      return handle?.kind === 'pipe-read' ? handle.pipe : null;
-    })()
-  );
-}
-
-function registerPipeProducer(fd, childId, stream) {
-  const handle =
-    lookupFdHandle(fd) ?? lookupSyntheticHandleByDisplayFd(fd, 'pipe-write');
-  if (handle?.kind !== 'pipe-write') {
-    return null;
-  }
-  handle.pipe.producers.set(`${childId}:${stream}`, { childId, stream });
-  traceHostProcess('register-producer', { fd: Number(fd) >>> 0, childId, stream, pipeId: handle.pipe.id });
-  return handle.pipe;
-}
-
-function registerPipeConsumer(fd, childId, stream) {
-  const handle =
-    lookupFdHandle(fd) ?? lookupSyntheticHandleByDisplayFd(fd, 'pipe-read');
-  if (handle?.kind !== 'pipe-read') {
-    return null;
-  }
-  handle.pipe.consumers.set(`${childId}:${stream}`, { childId, stream });
-  const shouldDeferInitialDelivery =
-    stream === 'stdin' && !spawnedChildrenById.has(childId);
-  traceHostProcess('register-consumer', {
-    fd: Number(fd) >>> 0,
-    childId,
-    stream,
-    pipeId: handle.pipe.id,
-    deferred: shouldDeferInitialDelivery,
-  });
-  if (!shouldDeferInitialDelivery) {
-    if (handle.pipe.chunks.length > 0) {
-      flushPipeConsumers(handle.pipe);
-    }
-    if (handle.pipe.producers.size === 0 && (handle.pipe.writeHandleCount ?? 0) === 0) {
-      closePipeConsumers(handle.pipe);
-    }
-  }
-  return handle.pipe;
-}
-
-function flushPipeConsumers(pipe) {
-  if (
-    !pipe ||
-    typeof pipe.consumers?.size !== 'number' ||
-    !Array.isArray(pipe.chunks) ||
-    pipe.consumers.size === 0 ||
-    pipe.chunks.length === 0
-  ) {
-    return false;
-  }
-
-  let flushed = false;
-  while (pipe.chunks.length > 0) {
-    const chunk = pipe.chunks[0];
-    if (!chunk || chunk.length === 0) {
-      pipe.chunks.shift();
-      continue;
-    }
-    let shouldRetryChunk = false;
-    for (const [consumerKey, consumer] of Array.from(pipe.consumers.entries())) {
-      try {
-        callSyncRpc('child_process.write_stdin', [consumer.childId, chunk]);
-        traceHostProcess('flush-consumer-write', {
-          pipeId: pipe.id,
-          childId: consumer.childId,
-          bytes: chunk.length,
-        });
-        flushed = true;
-      } catch (error) {
-        if (spawnedChildrenById.has(consumer?.childId) && isChildProcessGoneError(error)) {
-          shouldRetryChunk = true;
-          continue;
-        }
-        traceHostProcess('flush-consumer-write-failed', {
-          pipeId: pipe.id,
-          childId: consumer?.childId ?? null,
-        });
-        pipe.consumers.delete(consumerKey);
-      }
-    }
-    if (shouldRetryChunk) {
-      break;
-    }
-    pipe.chunks.shift();
-  }
-
-  return flushed;
-}
-
-function closePipeConsumers(pipe) {
-  if (!pipe || typeof pipe.consumers?.size !== 'number' || pipe.consumers.size === 0) {
-    return false;
-  }
-
-  let closed = false;
-  for (const [consumerKey, consumer] of Array.from(pipe.consumers.entries())) {
-    try {
-      callSyncRpc('child_process.close_stdin', [consumer.childId]);
-      traceHostProcess('close-consumer-stdin', {
-        pipeId: pipe.id,
-        childId: consumer.childId,
-      });
-      closed = true;
-    } catch (error) {
-      if (spawnedChildrenById.has(consumer?.childId) && isChildProcessGoneError(error)) {
-        continue;
-      }
-      traceHostProcess('close-consumer-stdin-failed', {
-        pipeId: pipe.id,
-        childId: consumer?.childId ?? null,
-      });
-      // Ignore close errors during teardown.
-    }
-    pipe.consumers.delete(consumerKey);
-  }
-
-  collectInactivePipeHandles(pipe);
-  return closed;
-}
-
-function consumeSpawnOutputFd(fd) {
-  const numericFd = Number(fd) >>> 0;
-  const handle = syntheticFdEntries.get(numericFd);
-  if (handle?.kind === 'pipe-write' && handle.open) {
-    // Release the guest-owned write handle but retain the fd mapping so later
-    // child stdout/stderr events can still route into the synthetic pipe.
-    releaseFdHandle(handle);
-  }
-}
-
-function routeChunkToFd(fd, bytes) {
-  const numericFd = Number(fd) >>> 0;
-  const handle =
-    lookupFdHandle(numericFd) ??
-    lookupSyntheticHandleByDisplayFd(numericFd) ??
-    (typeof globalThis.lookupFdHandle === 'function'
-      ? globalThis.lookupFdHandle(numericFd)
-      : null);
-  traceHostProcess('route-chunk', {
-    fd: numericFd,
-    handleKind: handle?.kind ?? null,
-    bytes: Buffer.from(bytes ?? []).length,
-  });
-  if (!handle) {
-    if (isStdioFd(numericFd) && routeChunkToDelegateFd(numericFd, bytes)) {
-      return;
-    }
-    if (isStdioFd(numericFd)) {
-      writeToStdioFd(numericFd, Buffer.from(bytes ?? []));
-      return;
-    }
-    if (numericFd > 2 && routeChunkToDelegateFd(numericFd, bytes)) {
-      return;
-    }
-    writeSync(numericFd, bytes);
-    return;
-  }
-
-  if (handle.kind === 'passthrough') {
-    if (handle.append === true && typeof handle.guestPath === 'string') {
-      fsModule.appendFileSync(handle.guestPath, Buffer.from(bytes ?? []));
-      return;
-    }
-    if (routeChunkToDelegateFd(handle.targetFd, bytes)) {
-      return;
-    }
-    if (isStdioFd(handle.targetFd)) {
-      writeToStdioFd(handle.targetFd, Buffer.from(bytes ?? []));
-      return;
-    }
-    writeSync(handle.targetFd, bytes);
-    return;
-  }
-
-  if (handle.kind === 'host-passthrough') {
-    if (routeChunkToDelegateFd(handle.displayFd ?? numericFd, bytes)) {
-      return;
-    }
-    if (routeChunkToDelegateFd(handle.targetFd, bytes)) {
-      return;
-    }
-    if (isStdioFd(handle.targetFd)) {
-      writeToStdioFd(handle.targetFd, Buffer.from(bytes ?? []));
-      return;
-    }
-    writeSync(handle.targetFd, bytes);
-    return;
-  }
-
-  if (handle.kind === 'pipe-write') {
-    enqueuePipeBytes(handle.pipe, bytes);
-    flushPipeConsumers(handle.pipe);
-    return;
-  }
-
-  if (handle.kind === 'guest-file') {
-    writeBytesToGuestFileHandle(handle, Buffer.from(bytes ?? []));
-    return;
-  }
-
-  throw new Error(`bad file descriptor ${numericFd}`);
-}
-
-function writeBytesToGuestFileHandle(handle, bytes) {
-  const chunk = Buffer.from(bytes ?? []);
-  const position = handle.append ? null : (handle.position ?? 0);
-  const written = fsModule.writeSync(
-    handle.targetFd,
-    chunk,
-    0,
-    chunk.length,
-    position,
-  );
-  if (handle.append) {
-    handle.position = Number(fsModule.fstatSync(handle.targetFd).size ?? 0);
-  } else {
-    handle.position = (handle.position ?? 0) + written;
-  }
-  return written;
-}
-
-function routeChunkToDelegateFd(fd, bytes) {
-  if (!(instanceMemory instanceof WebAssembly.Memory) || typeof delegateManagedFdWrite !== 'function') {
-    return false;
-  }
-
-  const chunk = Buffer.from(bytes ?? []);
-  const needed = 8 + chunk.length + 4;
-  if (
-    delegateWriteScratch.capacity < needed ||
-    delegateWriteScratch.base + needed > instanceMemory.buffer.byteLength
-  ) {
-    const pages = Math.max(1, Math.ceil(needed / 65536));
-    const basePage = instanceMemory.grow(pages);
-    delegateWriteScratch = {
-      base: basePage * 65536,
-      capacity: pages * 65536,
-    };
-  }
-
-  try {
-    const iovsPtr = delegateWriteScratch.base;
-    const dataPtr = iovsPtr + 8;
-    const nwrittenPtr = dataPtr + chunk.length;
-    const memory = new Uint8Array(instanceMemory.buffer);
-    const view = new DataView(instanceMemory.buffer);
-    memory.set(chunk, dataPtr);
-    view.setUint32(iovsPtr, dataPtr, true);
-    view.setUint32(iovsPtr + 4, chunk.length, true);
-    const result = delegateManagedFdWrite(fd, iovsPtr, 1, nwrittenPtr);
-    traceHostProcess('route-chunk-delegate', {
-      fd: Number(fd) >>> 0,
-      bytes: chunk.length,
-      result,
-    });
-    return result === WASI_ERRNO_SUCCESS;
-  } catch (error) {
-    traceHostProcess('route-chunk-delegate-error', {
-      fd: Number(fd) >>> 0,
-      bytes: chunk.length,
-      message: error instanceof Error ? error.message : String(error),
-    });
-    return false;
-  }
-}
-
-function finalizeChildExit(record, exitCode, signal) {
-  const status =
-    signal == null
-      ? (Number(exitCode ?? 1) & 0xff)
-      : 128 + (signalNumberFromName(signal) & 0x7f);
-  record.exitStatus = status;
-  for (const fd of record.delegateRetainedFds ?? []) {
-    if (releaseDelegateFd(fd) && typeof delegateManagedFdClose === 'function') {
-      delegateManagedFdClose(fd);
-    }
-  }
-  releaseSpawnOutputHandles(record.retainedSpawnOutputHandles);
-  unregisterChildPipeProducers(record);
-  unregisterChildPipeConsumers(record);
-  return status;
-}
-
-function pollChildEvent(record, waitMs) {
-  if (Array.isArray(record?.pendingEvents) && record.pendingEvents.length > 0) {
-    return record.pendingEvents.shift() ?? null;
-  }
-  if (record?.synthetic) {
-    return null;
-  }
-  return callSyncRpc('child_process.poll', [record.childId, waitMs]);
-}
-
-function isChildProcessGoneError(error) {
-  return (
-    (error instanceof Error && error.code === 'ECHILD') ||
-    (error instanceof Error &&
-      typeof error.message === 'string' &&
-      error.message.startsWith('ECHILD:'))
-  );
-}
-
-function resolveSyntheticGuestPath(value, fromGuestDir = '/') {
-  if (typeof value !== 'string') {
-    return value;
-  }
-  if (value.startsWith('file:')) {
-    try {
-      return path.posix.normalize(new URL(value).pathname);
-    } catch {
-      return value;
-    }
-  }
-  if (value.startsWith('/')) {
-    return path.posix.normalize(value);
-  }
-  if (value.startsWith('./') || value.startsWith('../')) {
-    return path.posix.normalize(path.posix.join(fromGuestDir, value));
-  }
-  return value;
-}
-
-function resolveSyntheticHostPath(value, fromGuestDir = '/') {
-  const mapping = resolveSyntheticHostMapping(value, fromGuestDir);
-  return mapping?.hostPath ?? null;
-}
-
-function resolveSyntheticHostMapping(value, fromGuestDir = '/') {
-  const guestPath = resolveSyntheticGuestPath(value, fromGuestDir);
-  if (typeof guestPath !== 'string') {
-    return null;
-  }
-  return resolveModuleGuestPathToHostMapping(guestPath);
-}
-
-function chmodMappedGuestPath(guestPath, hostPath, mode) {
-  fsModule.chmodSync(hostPath, mode);
-  try {
-    if (typeof guestPath === 'string' && guestPath.length > 0) {
-      fsModule.chmodSync(guestPath, mode);
-    }
-  } catch {
-    // Best effort: host-mapped paths may not also exist as direct kernel paths.
-  }
-}
-
-function maybeCreateSyntheticCommandResult(command, args, cwd) {
-  const basename = path.posix.basename(String(command || ''));
-
-  if (basename === 'chmod') {
-    if (args.length < 2 || !args.every((arg) => typeof arg === 'string')) {
-      return null;
-    }
-    const modeArg = args[0];
-    if (!/^[0-7]{3,4}$/.test(modeArg)) {
-      return null;
-    }
-    const mode = Number.parseInt(modeArg, 8) >>> 0;
-    try {
-      for (const targetArg of args.slice(1)) {
-        const guestPath = resolveSyntheticGuestPath(targetArg, cwd || '/');
-        const mapping = resolveSyntheticHostMapping(targetArg, cwd || '/');
-        if (!mapping || typeof mapping.hostPath !== 'string') {
-          throw new Error(`No such file or directory: ${targetArg}`);
-        }
-        if (mapping.readOnly) {
-          const error = new Error(`Read-only file system: ${targetArg}`);
-          error.code = 'EROFS';
-          throw error;
-        }
-        chmodMappedGuestPath(guestPath, mapping.hostPath, mode);
-      }
-      return { exitCode: 0, stdout: '', stderr: '' };
-    } catch (error) {
-      return {
-        exitCode: 1,
-        stdout: '',
-        stderr: `chmod: ${error instanceof Error ? error.message : String(error)}\n`,
-      };
-    }
-  }
-
-  if (basename === 'stat') {
-    if (
-      args.length === 3 &&
-      args[0] === '-c' &&
-      (args[1] === '%a' || args[1] === '"%a"') &&
-      typeof args[2] === 'string'
-    ) {
-      try {
-        const hostPath = resolveSyntheticHostPath(args[2], cwd || '/');
-        if (typeof hostPath !== 'string') {
-          return null;
-        }
-        const stat = fsModule.statSync(hostPath);
-        const mode = Number(stat?.mode) >>> 0;
-        return {
-          exitCode: 0,
-          stdout: `${(mode & 0o777).toString(8)}\n`,
-          stderr: '',
-        };
-      } catch {
-        return null;
-      }
-    }
-    return null;
-  }
-
-  return null;
-}
-
-function createSyntheticChildRecord(result, stdinTarget, stdoutTarget, stderrTarget) {
-  const pid = nextSyntheticChildPid++;
-  const childId = `synthetic-child-${pid}`;
-  const pendingEvents = [{
-    type: 'exit',
-    exitCode: Number(result?.exitCode ?? 1) >>> 0,
-    signal: null,
-  }];
-
-  return {
-    childId,
-    pid,
-    stdinFd: stdinTarget,
-    stdoutFd: stdoutTarget,
-    stderrFd: stderrTarget,
-    stdinPipe: null,
-    stdoutPipe: null,
-    stderrPipe: null,
-    delegateRetainedFds: [],
-    exitStatus: null,
-    pendingEvents,
-    synthetic: true,
-  };
-}
-
-function emitSyntheticCommandOutput(record, stdoutFd, stderrFd, result) {
-  const syntheticOutputs = [
-    ['stdout', stdoutFd, record.stdoutFd, result?.stdout],
-    ['stderr', stderrFd, record.stderrFd, result?.stderr],
-  ];
-
-  for (const [stream, rawFd, targetFd, value] of syntheticOutputs) {
-    const text = typeof value === 'string' ? value : '';
-    const pipe = registerPipeProducer(targetFd, record.childId, stream);
-    consumeSpawnOutputFd(rawFd);
-    if (text.length > 0 && targetFd !== 0xffffffff) {
-      routeChunkToFd(targetFd, Buffer.from(text, 'utf8'));
-    }
-    if (pipe) {
-      unregisterPipeProducer(pipe, `${record.childId}:${stream}`);
-    }
-  }
-}
-
-function reapSpawnedChild(record) {
-  if (!record) {
-    return;
-  }
-
-  spawnedChildren.delete(record.pid);
-  if (typeof record.childId === 'string' && record.childId.length > 0) {
-    spawnedChildrenById.delete(record.childId);
-  }
-}
-
-function processChildEvent(record, event) {
-  if (!event) {
-    return false;
-  }
-  traceHostProcess('child-event', {
-    childId: record?.childId ?? null,
-    pid: record?.pid ?? null,
-    type: event.type,
-    exitCode: event.exitCode ?? null,
-    signal: event.signal ?? null,
-  });
-
-  if (event.type === 'stdout' && record.stdoutFd !== 0xffffffff) {
-    const chunk = decodeSyncRpcValue(event.data);
-    if (chunk?.length > 0) {
-      routeChunkToFd(record.stdoutFd, chunk);
-    }
-    return true;
-  }
-
-  if (event.type === 'stderr' && record.stderrFd !== 0xffffffff) {
-    const chunk = decodeSyncRpcValue(event.data);
-    if (chunk?.length > 0) {
-      routeChunkToFd(record.stderrFd, chunk);
-    }
-    return true;
-  }
-
-  if (event.type === 'signal') {
-    dispatchWasmSignal(
-      typeof event.number === 'number' ? event.number : signalNumberFromName(event.signal),
-    );
-    return true;
-  }
-
-  if (event.type === 'exit') {
-    const exitCode =
-      typeof event.exitCode === 'number' ? Math.trunc(event.exitCode) : null;
-    const signal =
-      typeof event.signal === 'string' ? event.signal : null;
-    while (true) {
-      let trailingEvent = null;
-      try {
-        trailingEvent = pollChildEvent(record, 0);
-      } catch (error) {
-        if (isChildProcessGoneError(error)) {
-          break;
-        }
-        throw error;
-      }
-      if (!trailingEvent) {
-        break;
-      }
-      if (!processChildEvent(record, trailingEvent)) {
-        break;
-      }
-    }
-    finalizeChildExit(record, exitCode, signal);
-    return true;
-  }
-
-  return false;
-}
-
-function pumpPipeProducers(pipe, waitMs) {
-  let processed = false;
-  for (const [producerKey, producer] of Array.from(pipe.producers.entries())) {
-    const record = spawnedChildrenById.get(producer.childId);
-    if (!record) {
-      unregisterPipeProducer(pipe, producerKey);
-      continue;
-    }
-    if (typeof record.exitStatus === 'number') {
-      unregisterPipeProducer(pipe, producerKey);
-      continue;
-    }
-
-    processed = pumpChildInputPipe(record, 0) || processed;
-
-    const event = pollChildEvent(record, waitMs);
-    if (!event) {
-      continue;
-    }
-
-    processed = true;
-    processChildEvent(record, event);
-  }
-
-  return processed;
-}
-
-function pumpChildInputPipe(record, waitMs) {
-  const inputPipe = resolveChildInputPipe(record);
-  if (!inputPipe) {
-    traceHostProcess('pump-child-input-skip-no-pipe', {
-      childId: record?.childId ?? null,
-    });
-    return false;
-  }
-  if (record.pumpingInputPipe === true) {
-    return false;
-  }
-  record.pumpingInputPipe = true;
-  try {
-    const stdinReadyAt = Number(record?.stdinReadyAtMs) || 0;
-    if (stdinReadyAt > Date.now()) {
-      traceHostProcess('pump-child-input-deferred', {
-        childId: record?.childId ?? null,
-        waitMs: Number(waitMs) >>> 0,
-        stdinReadyAt,
-        now: Date.now(),
-        chunkCount: inputPipe.chunks.length,
-        writeHandleCount: inputPipe.writeHandleCount ?? null,
-        producerCount: inputPipe.producers?.size ?? null,
-      });
-      return false;
-    }
-
-    let progressed = false;
-    traceHostProcess('pump-child-input-begin', {
-      childId: record?.childId ?? null,
-      waitMs: Number(waitMs) >>> 0,
-      chunkCount: inputPipe.chunks.length,
-      writeHandleCount: inputPipe.writeHandleCount ?? null,
-      producerCount: inputPipe.producers?.size ?? null,
-    });
-    if (inputPipe.chunks.length > 0) {
-      progressed = flushPipeConsumers(inputPipe) || progressed;
-    }
-
-    if (inputPipe.producers.size === 0 && (inputPipe.writeHandleCount ?? 0) === 0) {
-      return closePipeConsumers(inputPipe) || progressed;
-    }
-
-    const pumped = pumpPipeProducers(inputPipe, waitMs);
-    progressed = pumped || progressed;
-    if (inputPipe.chunks.length > 0) {
-      progressed = flushPipeConsumers(inputPipe) || progressed;
-    }
-    if (inputPipe.producers.size === 0 && (inputPipe.writeHandleCount ?? 0) === 0) {
-      progressed = closePipeConsumers(inputPipe) || progressed;
-    }
-
-    return progressed;
-  } finally {
-    record.pumpingInputPipe = false;
-  }
-}
-
-function pumpSpawnedChildren(waitMs) {
-  let progressed = false;
-  for (const record of Array.from(spawnedChildren.values())) {
-    if (!record || typeof record.exitStatus === 'number') {
-      continue;
-    }
-    try {
-      const event = pollChildEvent(record, waitMs);
-      if (event) {
-        processChildEvent(record, event);
-        progressed = true;
-      }
-      progressed = pumpChildInputPipe(record, 0) || progressed;
-    } catch (error) {
-      if (!isChildProcessGoneError(error)) {
-        throw error;
-      }
-    }
-  }
-  return progressed;
-}
-
-function encodeGuestBytes(value) {
-  return new TextEncoder().encode(String(value));
-}
-
-function readGuestBytes(ptr, len) {
-  if (!(instanceMemory instanceof WebAssembly.Memory)) {
-    throw new Error('WebAssembly memory is not available');
-  }
-
-  const start = Number(ptr) >>> 0;
-  const length = Number(len) >>> 0;
-  return Buffer.from(new Uint8Array(instanceMemory.buffer, start, length));
-}
-
-function readGuestString(ptr, len) {
-  return readGuestBytes(ptr, len).toString('utf8');
-}
-
-function decodeNullSeparatedStrings(buffer) {
-  if (!buffer || buffer.length === 0) {
-    return [];
-  }
-
-  return buffer
-    .toString('utf8')
-    .split('\0')
-    .filter((entry) => entry.length > 0);
-}
-
-function parseSerializedEnv(buffer) {
-  const env = {};
-  for (const entry of decodeNullSeparatedStrings(buffer)) {
-    const delimiter = entry.indexOf('=');
-    if (delimiter <= 0) {
-      continue;
-    }
-    env[entry.slice(0, delimiter)] = entry.slice(delimiter + 1);
-  }
-  return env;
-}
-
-function encodeSyncRpcValue(value) {
-  if (
-    value == null ||
-    typeof value === 'string' ||
-    typeof value === 'number' ||
-    typeof value === 'boolean'
-  ) {
-    return value;
-  }
-
-  if (typeof Buffer === 'function' && Buffer.isBuffer(value)) {
-    return {
-      __agentOSType: 'bytes',
-      base64: value.toString('base64'),
-    };
-  }
-
-  if (ArrayBuffer.isView(value)) {
-    return {
-      __agentOSType: 'bytes',
-      base64: Buffer.from(value.buffer, value.byteOffset, value.byteLength).toString('base64'),
-    };
-  }
-
-  if (value instanceof ArrayBuffer) {
-    return {
-      __agentOSType: 'bytes',
-      base64: Buffer.from(value).toString('base64'),
-    };
-  }
-
-  if (Array.isArray(value)) {
-    return value.map((entry) => encodeSyncRpcValue(entry));
-  }
-
-  if (typeof value === 'object') {
-    return Object.fromEntries(
-      Object.entries(value).map(([key, entry]) => [key, encodeSyncRpcValue(entry)]),
-    );
-  }
-
-  return String(value);
-}
-
-function decodeSyncRpcValue(value) {
-  if (Array.isArray(value)) {
-    return value.map((entry) => decodeSyncRpcValue(entry));
-  }
-
-  if (Buffer.isBuffer(value)) {
-    return value;
-  }
-
-  if (ArrayBuffer.isView(value)) {
-    return Buffer.from(value.buffer, value.byteOffset, value.byteLength);
-  }
-
-  if (value && typeof value === 'object') {
-    if (value.__type === 'Buffer' && typeof value.data === 'string') {
-      return Buffer.from(value.data, 'base64');
-    }
-
-    if (value.__agentOSType === 'bytes' && typeof value.base64 === 'string') {
-      return Buffer.from(value.base64, 'base64');
-    }
-
-    return Object.fromEntries(
-      Object.entries(value).map(([key, entry]) => [key, decodeSyncRpcValue(entry)]),
-    );
-  }
-
-  return value;
-}
-
-function readSyncRpcLine() {
-  while (true) {
-    const newlineIndex = syncRpcResponseBuffer.indexOf('\n');
-    if (newlineIndex >= 0) {
-      const line = syncRpcResponseBuffer.slice(0, newlineIndex);
-      syncRpcResponseBuffer = syncRpcResponseBuffer.slice(newlineIndex + 1);
-      return line;
-    }
-
-    const chunk = Buffer.alloc(4096);
-    const bytesRead = readSync(NODE_SYNC_RPC_RESPONSE_FD, chunk, 0, chunk.length, null);
-    if (bytesRead === 0) {
-      throw new Error('secure-exec WASM sync RPC response channel closed unexpectedly');
-    }
-    syncRpcResponseBuffer += chunk.subarray(0, bytesRead).toString('utf8');
-  }
-}
-
-function callSyncRpc(method, args = []) {
-  if (
-    globalThis.__agentOSSyncRpc &&
-    typeof globalThis.__agentOSSyncRpc.callSync === 'function'
-  ) {
-    const startedNs = __agentOSWasmNowNs();
-    try {
-      return globalThis.__agentOSSyncRpc.callSync(method, args);
-    } finally {
-      __agentOSWasiRecordSyncRpc(method, 'glue', startedNs);
-    }
-  }
-
-  if (!NODE_SYNC_RPC_ENABLE || NODE_SYNC_RPC_REQUEST_FD == null || NODE_SYNC_RPC_RESPONSE_FD == null) {
-    const error = new Error(`secure-exec WASM sync RPC is unavailable for ${method}`);
-    error.code = 'ERR_AGENTOS_WASM_SYNC_RPC_UNAVAILABLE';
-    throw error;
-  }
-
-  const startedNs = __agentOSWasmNowNs();
-  try {
-    const payload = JSON.stringify({
-      id: nextSyncRpcId++,
-      method,
-      args: encodeSyncRpcValue(args),
-    });
-    writeSync(NODE_SYNC_RPC_REQUEST_FD, `${payload}\n`);
-
-    const response = JSON.parse(readSyncRpcLine());
-    if (response?.ok) {
-      return decodeSyncRpcValue(response.result);
-    }
-
-    const error = new Error(
-      response?.error?.message || `secure-exec WASM sync RPC ${method} failed`,
-    );
-    if (typeof response?.error?.code === 'string') {
-      error.code = response.error.code;
-    }
-    throw error;
-  } finally {
-    __agentOSWasiRecordSyncRpc(method, 'pipe', startedNs);
-  }
-}
-
-const hostNetSockets = new Map();
-let nextHostNetSocketFd = 0x40000000;
-const HOST_NET_TIMEOUT_SENTINEL = '__secure_exec_net_timeout__';
-
-function getHostNetSocket(fd) {
-  return hostNetSockets.get(Number(fd) >>> 0) ?? null;
-}
-
-function dequeueHostNetBytes(socket, maxBytes) {
-  const requested = Math.max(0, Number(maxBytes) >>> 0);
-  if (requested === 0 || socket.readChunks.length === 0) {
-    return Buffer.alloc(0);
-  }
-
-  const parts = [];
-  let remaining = requested;
-  while (remaining > 0 && socket.readChunks.length > 0) {
-    const chunk = socket.readChunks[0];
-    if (chunk.length <= remaining) {
-      parts.push(chunk);
-      socket.readChunks.shift();
-      remaining -= chunk.length;
-      continue;
-    }
-
-    parts.push(chunk.subarray(0, remaining));
-    socket.readChunks[0] = chunk.subarray(remaining);
-    remaining = 0;
-  }
-
-  return Buffer.concat(parts);
-}
-
-function pollHostNetSocket(socket, waitMs) {
-  if (!socket?.socketId || socket.closed) {
-    return null;
-  }
-
-  const event = callSyncRpc('net.poll', [socket.socketId, Math.max(0, Number(waitMs) >>> 0)]);
-  if (!event) {
-    return null;
-  }
-
-  if (event.type === 'data') {
-    const chunk = decodeSyncRpcValue(event.data);
-    if (chunk?.length > 0) {
-      socket.readChunks.push(Buffer.from(chunk));
-    }
-    return event;
-  }
-
-  if (event.type === 'end' || event.type === 'close') {
-    socket.readableEnded = true;
-    if (event.type === 'close') {
-      socket.closed = true;
-      socket.socketId = null;
-    }
-    return event;
-  }
-
-  if (event.type === 'error') {
-    socket.lastError = String(event.message || event.code || 'socket error');
-    socket.closed = true;
-    socket.socketId = null;
-    return event;
-  }
-
-  return event;
-}
-
-function parseHostNetAddress(raw) {
-  const value = String(raw ?? '').trim();
-  if (!value) {
-    throw new Error('host_net address is required');
-  }
-
-  if (value.startsWith('[')) {
-    const end = value.indexOf(']');
-    if (end < 0 || value.charCodeAt(end + 1) !== 58) {
-      throw new Error(`invalid host_net address ${value}`);
-    }
-    return {
-      host: value.slice(1, end),
-      port: Number.parseInt(value.slice(end + 2), 10),
-    };
-  }
-
-  const separator = value.lastIndexOf(':');
-  if (separator <= 0 || separator === value.length - 1) {
-    throw new Error(`invalid host_net address ${value}`);
-  }
-
-  return {
-    host: value.slice(0, separator),
-    port: Number.parseInt(value.slice(separator + 1), 10),
-  };
-}
-
-function parseHostNetListenAddress(raw) {
-  const value = String(raw ?? '').trim();
-  if (!value) {
-    throw new Error('host_net listen address is required');
-  }
-  if (value.startsWith('/')) {
-    return { path: value };
-  }
-  const address = parseHostNetAddress(value);
-  return { host: address.host, port: address.port };
-}
-
-function normalizeHostNetAddressInfo(address, port) {
-  const host = String(address ?? '');
-  const numericPort = Number(port);
-  if (!host || !Number.isInteger(numericPort) || numericPort < 0 || numericPort > 65535) {
-    return null;
-  }
-  return { address: host, port: numericPort };
-}
-
-function formatHostNetAddressInfo(info) {
-  const address = String(info?.address ?? '');
-  const port = Number(info?.port);
-  if (!address || !Number.isInteger(port) || port < 0 || port > 65535) {
-    throw new Error('host_net socket address is incomplete');
-  }
-  return `${address}:${port}`;
-}
-
-const HOST_NET_AF_INET = 2;
-const HOST_NET_AF_INET6 = 10;
-const HOST_NET_SOCK_DGRAM = 5;
-const HOST_NET_SOCKET_TYPE_MASK = 0xf;
-const HOST_NET_SOL_SOCKET = 1;
-const HOST_NET_WASI_SOL_SOCKET = 0x7fffffff;
-const HOST_NET_SO_RCVTIMEO_64 = 20;
-const HOST_NET_SO_RCVTIMEO_32 = 66;
-const HOST_NET_TIMEVAL_BYTES = 16;
-
-function hostNetSocketBaseType(socket) {
-  return Number(socket?.sockType ?? 0) & HOST_NET_SOCKET_TYPE_MASK;
-}
-
-function hostNetSockoptKind(level, optname, optvalLen) {
-  const normalizedLevel = Number(level) >>> 0;
-  const normalizedOptname = Number(optname) >>> 0;
-  const normalizedOptvalLen = Number(optvalLen) >>> 0;
-  if (
-    normalizedLevel !== HOST_NET_SOL_SOCKET &&
-    normalizedLevel !== HOST_NET_WASI_SOL_SOCKET
-  ) {
-    return null;
-  }
-  if (normalizedOptvalLen !== HOST_NET_TIMEVAL_BYTES) {
-    return null;
-  }
-  if (
-    normalizedOptname === HOST_NET_SO_RCVTIMEO_64 ||
-    normalizedOptname === HOST_NET_SO_RCVTIMEO_32
-  ) {
-    return 'recv-timeout';
-  }
-  return null;
-}
-
-function parseHostNetTimevalMs(bytes) {
-  if (bytes.byteLength !== HOST_NET_TIMEVAL_BYTES) {
-    return null;
-  }
-  const view = new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength);
-  const seconds = view.getBigInt64(0, true);
-  const microseconds = view.getBigInt64(8, true);
-  if (seconds < 0n || microseconds < 0n || microseconds > 999999n) {
-    return null;
-  }
-  if (seconds === 0n && microseconds === 0n) {
-    return null;
-  }
-  const milliseconds = seconds * 1000n + (microseconds + 999n) / 1000n;
-  if (milliseconds > BigInt(Number.MAX_SAFE_INTEGER)) {
-    return null;
-  }
-  return Number(milliseconds);
-}
-
-function ensureHostNetUdpSocket(socket) {
-  if (!socket || socket.closed || hostNetSocketBaseType(socket) !== HOST_NET_SOCK_DGRAM) {
-    return null;
-  }
-  if (socket.udpSocketId) {
-    return socket.udpSocketId;
-  }
-
-  const type = socket.domain === HOST_NET_AF_INET6 ? 'udp6' : 'udp4';
-  const result = callSyncRpc('dgram.createSocket', [{ type }]);
-  if (!result || typeof result.socketId !== 'string') {
-    throw new Error('host_net dgram socket creation failed');
-  }
-  socket.udpSocketId = result.socketId;
-  return socket.udpSocketId;
-}
-
-function signalNumberFromName(signal) {
-  const mapped = LINUX_SIGNAL_NAMES.indexOf(String(signal));
-  if (mapped > 0) {
-    return mapped;
-  }
-  if (String(signal).startsWith('SIG')) {
-    const numeric = Number.parseInt(String(signal).slice(3), 10);
-    return Number.isInteger(numeric) ? numeric : 15;
-  }
-  return 15;
-}
-
-function signalNameFromNumber(signal) {
-  const numeric = Number(signal) >>> 0;
-  return LINUX_SIGNAL_NAMES[numeric] ?? `SIG${numeric}`;
-}
-
-const LINUX_SIGNAL_NAMES = [
-  null,
-  'SIGHUP',
-  'SIGINT',
-  'SIGQUIT',
-  'SIGILL',
-  'SIGTRAP',
-  'SIGABRT',
-  'SIGBUS',
-  'SIGFPE',
-  'SIGKILL',
-  'SIGUSR1',
-  'SIGSEGV',
-  'SIGUSR2',
-  'SIGPIPE',
-  'SIGALRM',
-  'SIGTERM',
-  null,
-  'SIGCHLD',
-  'SIGCONT',
-  'SIGSTOP',
-  'SIGTSTP',
-  'SIGTTIN',
-  'SIGTTOU',
-  'SIGURG',
-  'SIGXCPU',
-  'SIGXFSZ',
-  'SIGVTALRM',
-  'SIGPROF',
-  'SIGWINCH',
-  'SIGIO',
-  'SIGPWR',
-  'SIGSYS',
-];
-
-function writeGuestBytes(ptr, maxLen, bytes, actualLenPtr) {
-  if (!(instanceMemory instanceof WebAssembly.Memory)) {
-    return WASI_ERRNO_FAULT;
-  }
-
-  try {
-    const requestedLength = Number(maxLen) >>> 0;
-    const memory = new Uint8Array(instanceMemory.buffer);
-    const written = Math.min(requestedLength, bytes.byteLength);
-    memory.set(bytes.subarray(0, written), Number(ptr));
-    return writeGuestUint32(actualLenPtr, written);
-  } catch {
-    return WASI_ERRNO_FAULT;
-  }
-}
-
-// Perform a single NON-BLOCKING accept on a listening host_net socket. On success it
-// registers the accepted connection as a new host_net socket and returns
-// { acceptedFd, address } (address is a Buffer: "host:port" for TCP, the peer path for
-// AF_UNIX). Returns null when no connection is currently pending. Used by both net_poll
-// (to report accurate listener readiness) and net_accept (non-blocking semantics) so the
-// server never blocks inside accept() and starves already-connected clients.
-function tryHostNetAcceptOnce(socket) {
-  let result = callSyncRpc('net.server_accept', [socket.serverId]);
-  if (!result || result === HOST_NET_TIMEOUT_SENTINEL) {
-    return null;
-  }
-  if (typeof result === 'string') {
-    result = JSON.parse(result);
-  }
-  if (!result || typeof result.socketId !== 'string') {
-    return null;
-  }
-
-  const acceptedFd = nextHostNetSocketFd++;
-  hostNetSockets.set(acceptedFd, {
-    domain: socket.domain,
-    sockType: socket.sockType,
-    protocol: socket.protocol,
-    bindOptions: null,
-    localInfo: normalizeHostNetAddressInfo(result.info?.localAddress, result.info?.localPort),
-    localReservation: null,
-    remoteInfo: normalizeHostNetAddressInfo(result.info?.remoteAddress, result.info?.remotePort),
-    serverId: null,
-    socketId: result.socketId,
-    udpSocketId: null,
-    recvTimeoutMs: socket.recvTimeoutMs,
-    readChunks: [],
-    readableEnded: false,
-    closed: false,
-    lastError: null,
-  });
-
-  let address;
-  if (result.info?.remoteAddress != null && result.info?.remotePort != null) {
-    address = Buffer.from(formatHostNetAddressInfo({
-      address: result.info.remoteAddress,
-      port: result.info.remotePort,
-    }), 'utf8');
-  } else {
-    address = Buffer.from(String(result.info?.remotePath ?? ''), 'utf8');
-  }
-  return { acceptedFd, address };
-}
-
-const hostNetImport = {
-  // Poll an array of pollfd entries (8 bytes each: i32 fd, i16 events, i16 revents).
-  // Connected sockets report POLLIN when data is queued; listening sockets report POLLIN
-  // only when a connection is actually pending (a buffered non-blocking accept), so the
-  // server's WaitForSomething does not spin forever inside a blocking accept().
-  // POLLOUT is always writable.
-  net_poll(fdsPtr, nfds, timeoutMs, retReadyPtr) {
-    const n = Number(nfds) >>> 0;
-    const base0 = Number(fdsPtr) >>> 0;
-    // The patched wasi sysroot's effective poll bits (bits/poll.h): POLLIN=POLLRDNORM=0x1,
-    // POLLOUT=POLLWRNORM=0x2 (NOT the 0x004 in legacy poll.h). Guests (X server + libxcb) use
-    // these, so net_poll must match or POLLOUT readiness is never reported and writers block.
-    const POLLIN = 0x001;
-    const POLLOUT = 0x002;
-    const POLLERR = 0x008;
-    const POLLHUP = 0x010;
-    const POLLNVAL = 0x020;
-    const t = Number(timeoutMs) | 0;
-    const deadline = t < 0 ? null : Date.now() + Math.max(0, t);
-    const kernelManagedStdio =
-      KERNEL_STDIO_SYNC_RPC ||
-      (typeof process?.env?.AGENTOS_SANDBOX_ROOT === 'string' &&
-        process.env.AGENTOS_SANDBOX_ROOT.length > 0);
-    try {
-      while (true) {
-        const view = new DataView(instanceMemory.buffer);
-        let ready = 0;
-        // fds the kernel owns (PTY/pipe stdio in sidecar-managed mode): their readiness
-        // comes from a batched __kernel_poll below, which doubles as the wait slice.
-        const kernelTargets = [];
-        const kernelEntries = [];
-        for (let i = 0; i < n; i++) {
-          const base = base0 + i * 8;
-          const fd = view.getInt32(base, true);
-          const events = view.getUint16(base + 4, true);
-          let revents = 0;
-          const socket = getHostNetSocket(fd);
-          const handle = fd >= 0 ? lookupFdHandle(fd >>> 0) : undefined;
-          if (socket && !socket.closed) {
-            if (socket.serverId) {
-              if (events & POLLIN) {
-                // Report the listener readable only when a connection is actually pending.
-                if (!socket.pendingAccepts) socket.pendingAccepts = [];
-                if (socket.pendingAccepts.length === 0) {
-                  const accepted = tryHostNetAcceptOnce(socket);
-                  if (accepted) socket.pendingAccepts.push(accepted);
-                }
-                if (socket.pendingAccepts.length > 0) revents |= POLLIN;
-              }
-            } else if (socket.socketId) {
-              if (events & POLLIN && socket.readChunks && socket.readChunks.length > 0) {
-                revents |= POLLIN;
-              }
-              if (events & POLLOUT) revents |= POLLOUT;
-            }
-          } else if (handle?.kind === 'pipe-read') {
-            if (events & POLLIN) {
-              pumpPipeProducers(handle.pipe, 0);
-              if (handle.pipe.chunks.length > 0) {
-                revents |= POLLIN;
-              } else if (
-                handle.pipe.writeHandleCount === 0 &&
-                handle.pipe.producers.size === 0
-              ) {
-                revents |= POLLHUP;
-              }
-            }
-          } else if (handle?.kind === 'pipe-write') {
-            if (events & POLLOUT) revents |= POLLOUT;
-          } else if (
-            fd >= 0 &&
-            fd <= 2 &&
-            kernelManagedStdio &&
-            (!handle || (handle.kind === 'passthrough' && handle.targetFd === fd))
-          ) {
-            // Kernel-managed stdio (PTY slave / stdio pipes): ask the kernel, like a
-            // native poll(2) on the terminal fd.
-            kernelTargets.push({
-              fd,
-              events:
-                ((events & POLLIN) !== 0 ? KERNEL_POLLIN : 0) |
-                ((events & POLLOUT) !== 0 ? KERNEL_POLLOUT : 0),
-            });
-            kernelEntries.push({ base, fd, events });
-          } else if (handle) {
-            // Regular files / other VFS-backed fds: always ready, as on Linux.
-            revents |= events & (POLLIN | POLLOUT);
-          } else if (fd >= 0 && fd <= 2) {
-            // Non-kernel-managed stdio (plain runner stdio): report requested
-            // readiness rather than blocking a guest forever on fds we cannot wait on.
-            revents |= events & (POLLIN | POLLOUT);
-          } else if (fd >= 0) {
-            revents |= POLLNVAL;
-          }
-          view.setUint16(base + 6, revents, true);
-          if (revents) ready++;
-        }
-
-        if (kernelTargets.length > 0) {
-          // If something is already ready (or this is a non-blocking poll), probe the
-          // kernel without waiting; otherwise let the kernel wait one slice for us.
-          const remaining = deadline == null ? Infinity : deadline - Date.now();
-          const sliceMs =
-            ready > 0 || t === 0
-              ? 0
-              : Math.max(0, Math.min(KERNEL_WAIT_SLICE_MS, remaining));
-          let response = null;
-          try {
-            response = callSyncRpc('__kernel_poll', [kernelTargets, sliceMs]);
-          } catch {
-            response = null;
-          }
-          const responseEntries = Array.isArray(response?.fds) ? response.fds : [];
-          for (const entry of kernelEntries) {
-            const responseEntry = responseEntries.find(
-              (item) => (Number(item?.fd) >>> 0) === (entry.fd >>> 0),
-            );
-            const kernelRevents = Number(responseEntry?.revents) >>> 0;
-            let revents = 0;
-            if (kernelRevents & KERNEL_POLLIN) revents |= POLLIN & entry.events;
-            if (kernelRevents & KERNEL_POLLOUT) revents |= POLLOUT & entry.events;
-            if (kernelRevents & KERNEL_POLLERR) revents |= POLLERR;
-            if (kernelRevents & KERNEL_POLLHUP) revents |= POLLHUP;
-            new DataView(instanceMemory.buffer).setUint16(entry.base + 6, revents, true);
-            if (revents) ready++;
-          }
-        }
-
-        if (ready > 0 || t === 0 || (deadline != null && Date.now() >= deadline)) {
-          new DataView(instanceMemory.buffer).setUint32(Number(retReadyPtr) >>> 0, ready >>> 0, true);
-          return 0;
-        }
-        let pumpedSocket = false;
-        const v2 = new DataView(instanceMemory.buffer);
-        for (let i = 0; i < n; i++) {
-          const fd = v2.getInt32(base0 + i * 8, true);
-          const s = getHostNetSocket(fd);
-          if (s && s.socketId && !s.serverId) {
-            pollHostNetSocket(s, 10);
-            pumpedSocket = true;
-          }
-        }
-        if (kernelTargets.length === 0 && !pumpedSocket) {
-          // Nothing to wait on except time: sleep a slice instead of hot-spinning.
-          const remaining = deadline == null ? Infinity : deadline - Date.now();
-          Atomics.wait(syntheticWaitArray, 0, 0, Math.max(1, Math.min(10, remaining)));
-        }
-      }
-    } catch (_e) {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  net_socket(domain, sockType, protocol, retFdPtr) {
-    try {
-      const numericDomain = Number(domain) >>> 0;
-      const numericType = Number(sockType) >>> 0;
-      const numericProtocol = Number(protocol) >>> 0;
-
-      const fd = nextHostNetSocketFd++;
-      hostNetSockets.set(fd, {
-        domain: numericDomain,
-        sockType: numericType,
-        protocol: numericProtocol,
-        bindOptions: null,
-        localInfo: null,
-        localReservation: null,
-        remoteInfo: null,
-        serverId: null,
-        socketId: null,
-        udpSocketId: null,
-        recvTimeoutMs: null,
-        readChunks: [],
-        readableEnded: false,
-        closed: false,
-        lastError: null,
-      });
-      return writeGuestUint32(retFdPtr, fd);
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  // Mark a host_net socket non-blocking (O_NONBLOCK). The patched wasi-libc fcntl cannot reach
-  // host_net fds, so libxcb calls this directly. Non-blocking recv returns EAGAIN on no data.
-  net_set_nonblock(fd, enable) {
-    const socket = getHostNetSocket(fd);
-    if (!socket) return WASI_ERRNO_BADF;
-    socket.nonblock = (Number(enable) >>> 0) !== 0;
-    return WASI_ERRNO_SUCCESS;
-  },
-  net_connect(fd, addrPtr, addrLen) {
-    const socket = getHostNetSocket(fd);
-    if (!socket) {
-      return WASI_ERRNO_BADF;
-    }
-
-    try {
-      let rawAddr = String(readGuestString(addrPtr, addrLen) ?? '');
-      // A sockaddr_un serialized from sizeof(struct sockaddr_un) carries trailing NUL
-      // padding; cut at the first NUL so the unix path is clean before classification.
-      const nulAt = rawAddr.indexOf(String.fromCharCode(0));
-      if (nulAt >= 0) rawAddr = rawAddr.slice(0, nulAt);
-      rawAddr = rawAddr.trim();
-      // AF_UNIX path connect (e.g. X11 /tmp/.X11-unix/X0): the C library passes the
-      // raw sun_path, the same '/'-prefixed string net_bind/net_listen receive. Route it
-      // to the sidecar's path-based net.connect, which dials the host-backed unix socket
-      // the listener bound under the VM sandbox root, so two guests in one VM can talk.
-      if (rawAddr.startsWith('/')) {
-        let result;
-        try {
-          result = callSyncRpc('net.connect', [{ path: rawAddr }]);
-        } catch (e) {
-          try { process.stderr.write('[host_net] connect ' + rawAddr + ' failed: ' + (e && e.message ? e.message : String(e)) + '\n'); } catch (_) {}
-          return WASI_ERRNO_FAULT;
-        }
-        if (!result || typeof result.socketId !== 'string') {
-          try { process.stderr.write('[host_net] ' + rawAddr + ' returned no socketId\n'); } catch (_) {}
-          return WASI_ERRNO_FAULT;
-        }
-        socket.socketId = result.socketId;
-        socket.localInfo = null;
-        socket.localReservation = null;
-        socket.remoteInfo = null;
-        socket.readChunks.length = 0;
-        socket.readableEnded = false;
-        socket.closed = false;
-        socket.lastError = null;
-        return WASI_ERRNO_SUCCESS;
-      }
-      const { host, port } = parseHostNetAddress(rawAddr);
-      if (!Number.isInteger(port) || port < 0 || port > 65535) {
-        return WASI_ERRNO_FAULT;
-      }
-
-      const request = { host, port };
-      if (socket.bindOptions?.host != null) {
-        request.localAddress = socket.bindOptions.host;
-      }
-      if (socket.bindOptions?.port != null) {
-        request.localPort = socket.bindOptions.port;
-      }
-      if (socket.localReservation != null) {
-        request.localReservation = socket.localReservation;
-      }
-
-      const result = callSyncRpc('net.connect', [request]);
-      if (!result || typeof result.socketId !== 'string') {
-        return WASI_ERRNO_FAULT;
-      }
-
-      socket.socketId = result.socketId;
-      socket.localInfo = normalizeHostNetAddressInfo(result.localAddress, result.localPort);
-      socket.localReservation = null;
-      socket.remoteInfo = normalizeHostNetAddressInfo(result.remoteAddress, result.remotePort);
-      socket.readChunks.length = 0;
-      socket.readableEnded = false;
-      socket.closed = false;
-      socket.lastError = null;
-      return WASI_ERRNO_SUCCESS;
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  net_getaddrinfo(hostPtr, hostLen, portPtr, portLen, family, retAddrPtr, retAddrLenPtr) {
-    try {
-      const hostname = readGuestString(hostPtr, hostLen);
-      const numericFamily = Number(family) >>> 0;
-      const lookupOptions = { hostname, all: true };
-      if (numericFamily === 4) {
-        lookupOptions.family = 4;
-      } else if (numericFamily === 6) {
-        lookupOptions.family = 6;
-      } else if (numericFamily !== 0) {
-        return WASI_ERRNO_INVAL;
-      }
-
-      const records = callSyncRpc('dns.lookup', [lookupOptions]);
-      if (!Array.isArray(records)) {
-        return WASI_ERRNO_FAULT;
-      }
-      const payload = records.map((record) => {
-        const family = Number(record?.family);
-        if (family !== 4 && family !== 6) {
-          throw new Error('host_net dns record family is unsupported');
-        }
-        return {
-          addr: String(record?.address ?? ''),
-          family,
-        };
-      });
-      const encoded = Buffer.from(JSON.stringify(payload), 'utf8');
-      return writeGuestBytes(
-        retAddrPtr,
-        readGuestUint32(retAddrLenPtr),
-        encoded,
-        retAddrLenPtr,
-      );
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  net_bind(fd, addrPtr, addrLen) {
-    const socket = getHostNetSocket(fd);
-    if (!socket || socket.closed) {
-      return WASI_ERRNO_BADF;
-    }
-
-    try {
-      if (socket.localReservation != null) {
-        callSyncRpc('net.release_tcp_port', [socket.localReservation]);
-        socket.localReservation = null;
-      }
-
-      socket.bindOptions = parseHostNetListenAddress(readGuestString(addrPtr, addrLen));
-      if (hostNetSocketBaseType(socket) === HOST_NET_SOCK_DGRAM) {
-        if (socket.bindOptions.path != null) {
-          return WASI_ERRNO_FAULT;
-        }
-        const udpSocketId = ensureHostNetUdpSocket(socket);
-        if (!udpSocketId) {
-          return WASI_ERRNO_FAULT;
-        }
-        const result = callSyncRpc('dgram.bind', [
-          udpSocketId,
-          {
-            address: socket.bindOptions.host,
-            port: socket.bindOptions.port,
-          },
-        ]);
-        socket.localInfo = normalizeHostNetAddressInfo(result?.localAddress, result?.localPort);
-        return socket.localInfo ? WASI_ERRNO_SUCCESS : WASI_ERRNO_FAULT;
-      }
-
-      if (socket.bindOptions.path == null) {
-        const reservation = callSyncRpc('net.reserve_tcp_port', [socket.bindOptions]);
-        if (
-          !reservation ||
-          typeof reservation.reservationId !== 'string' ||
-          !Number.isInteger(Number(reservation.localPort))
-        ) {
-          return WASI_ERRNO_FAULT;
-        }
-        socket.localReservation = reservation.reservationId;
-        socket.bindOptions = {
-          ...socket.bindOptions,
-          host: reservation.localAddress ?? socket.bindOptions.host,
-          port: Number(reservation.localPort),
-        };
-        socket.localInfo = normalizeHostNetAddressInfo(
-          socket.bindOptions.host ?? '127.0.0.1',
-          socket.bindOptions.port,
-        );
-      } else {
-        socket.localInfo = null;
-      }
-      return WASI_ERRNO_SUCCESS;
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  net_listen(fd, backlog) {
-    const socket = getHostNetSocket(fd);
-    if (!socket || socket.closed) {
-      return WASI_ERRNO_BADF;
-    }
-    if (socket.serverId || !socket.bindOptions) {
-      return WASI_ERRNO_FAULT;
-    }
-
-    try {
-      const request = {
-        ...socket.bindOptions,
-        backlog: Math.max(0, Number(backlog) >>> 0),
-      };
-      if (socket.localReservation != null) {
-        request.localReservation = socket.localReservation;
-      }
-
-      const result = callSyncRpc('net.listen', [request]);
-      if (!result || typeof result.serverId !== 'string') {
-        return WASI_ERRNO_FAULT;
-      }
-      socket.serverId = result.serverId;
-      socket.localReservation = null;
-      socket.localInfo = normalizeHostNetAddressInfo(result.localAddress, result.localPort);
-      return WASI_ERRNO_SUCCESS;
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  net_accept(fd, retFdPtr, retAddrPtr, retAddrLenPtr) {
-    const socket = getHostNetSocket(fd);
-    if (!socket?.serverId || socket.closed) {
-      return WASI_ERRNO_BADF;
-    }
-
-    try {
-      // First drain a connection already buffered by net_poll's readiness probe; otherwise block
-      // until one arrives (POSIX blocking-accept semantics, for guests that accept() without polling
-      // first). This no longer starves connected clients: net_poll now reports the listener readable
-      // only when a connection is actually pending, so the X server only reaches accept() when there
-      // is one to take, and otherwise services connected client fds instead.
-      if (!socket.pendingAccepts) socket.pendingAccepts = [];
-      let accepted = socket.pendingAccepts.shift();
-      while (!accepted) {
-        accepted = tryHostNetAcceptOnce(socket);
-        if (!accepted) {
-          pumpSpawnedChildren(10);
-        }
-      }
-      if (writeGuestUint32(retFdPtr, accepted.acceptedFd) !== WASI_ERRNO_SUCCESS) {
-        return WASI_ERRNO_FAULT;
-      }
-      return writeGuestBytes(retAddrPtr, readGuestUint32(retAddrLenPtr), accepted.address, retAddrLenPtr);
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  net_getsockname(fd, addrPtr, addrLenPtr) {
-    const socket = getHostNetSocket(fd);
-    if (!socket || socket.closed) {
-      return WASI_ERRNO_BADF;
-    }
-    if (!socket.localInfo) {
-      return WASI_ERRNO_INVAL;
-    }
-
-    try {
-      const address = Buffer.from(formatHostNetAddressInfo(socket.localInfo), 'utf8');
-      return writeGuestBytes(addrPtr, readGuestUint32(addrLenPtr), address, addrLenPtr);
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  net_getpeername(fd, addrPtr, addrLenPtr) {
-    const socket = getHostNetSocket(fd);
-    if (!socket || socket.closed) {
-      return WASI_ERRNO_BADF;
-    }
-    if (!socket.remoteInfo) {
-      return WASI_ERRNO_INVAL;
-    }
-
-    try {
-      const address = Buffer.from(formatHostNetAddressInfo(socket.remoteInfo), 'utf8');
-      return writeGuestBytes(addrPtr, readGuestUint32(addrLenPtr), address, addrLenPtr);
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  net_send(fd, bufPtr, bufLen, flags, retSentPtr) {
-    const socket = getHostNetSocket(fd);
-    if (!socket?.socketId || socket.closed) {
-      return WASI_ERRNO_BADF;
-    }
-
-    try {
-      const chunk = readGuestBytes(bufPtr, bufLen);
-      if ((Number(flags) >>> 0) !== 0) {
-        // Non-zero send flags are currently ignored in the WASM host_net shim.
-      }
-      const written = Number(callSyncRpc('net.write', [socket.socketId, chunk])) >>> 0;
-      return writeGuestUint32(retSentPtr, written);
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  net_recv(fd, bufPtr, bufLen, flags, retReceivedPtr) {
-    const socket = getHostNetSocket(fd);
-    if (!socket) {
-      return WASI_ERRNO_BADF;
-    }
-
-    try {
-      if ((Number(flags) >>> 0) !== 0) {
-        // Non-zero recv flags are currently ignored in the WASM host_net shim.
-      }
-
-      // Non-blocking sockets (O_NONBLOCK via net_set_nonblock, used by libxcb's poll_for_*):
-      // pull whatever is queued, do ONE short readiness probe, and return EAGAIN if still empty
-      // instead of blocking. libxcb assumes its "poll" reads never block on an empty socket.
-      if (socket.nonblock) {
-        let queued = dequeueHostNetBytes(socket, bufLen);
-        if (queued.length > 0) {
-          return writeGuestBytes(bufPtr, bufLen, queued, retReceivedPtr);
-        }
-        if (socket.lastError) return WASI_ERRNO_FAULT;
-        if (socket.readableEnded || socket.closed || !socket.socketId) {
-          return writeGuestUint32(retReceivedPtr, 0);
-        }
-        pollHostNetSocket(socket, 0);
-        queued = dequeueHostNetBytes(socket, bufLen);
-        if (queued.length > 0) {
-          return writeGuestBytes(bufPtr, bufLen, queued, retReceivedPtr);
-        }
-        if (socket.readableEnded || socket.closed || !socket.socketId) {
-          return writeGuestUint32(retReceivedPtr, 0);
-        }
-        return WASI_ERRNO_AGAIN;
-      }
-
-      const deadline =
-        socket.recvTimeoutMs == null ? null : Date.now() + Math.max(0, socket.recvTimeoutMs);
-      while (true) {
-        const queued = dequeueHostNetBytes(socket, bufLen);
-        if (queued.length > 0) {
-          return writeGuestBytes(bufPtr, bufLen, queued, retReceivedPtr);
-        }
-
-        if (socket.lastError) {
-          return WASI_ERRNO_FAULT;
-        }
-
-        if (socket.readableEnded || socket.closed || !socket.socketId) {
-          return writeGuestUint32(retReceivedPtr, 0);
-        }
-
-        const pollWaitMs =
-          deadline == null ? 50 : Math.max(0, Math.min(50, deadline - Date.now()));
-        if (deadline != null && pollWaitMs === 0) {
-          return WASI_ERRNO_AGAIN;
-        }
-        pollHostNetSocket(socket, pollWaitMs);
-        if (deadline != null && Date.now() >= deadline) {
-          return WASI_ERRNO_AGAIN;
-        }
-      }
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  net_sendto(fd, bufPtr, bufLen, flags, addrPtr, addrLen, retSentPtr) {
-    const socket = getHostNetSocket(fd);
-    if (!socket || socket.closed) {
-      return WASI_ERRNO_BADF;
-    }
-
-    try {
-      if ((Number(flags) >>> 0) !== 0) {
-        return WASI_ERRNO_INVAL;
-      }
-      const udpSocketId = ensureHostNetUdpSocket(socket);
-      if (!udpSocketId) {
-        return WASI_ERRNO_FAULT;
-      }
-
-      const { host, port } = parseHostNetAddress(readGuestString(addrPtr, addrLen));
-      const chunk = readGuestBytes(bufPtr, bufLen);
-      const result = callSyncRpc('dgram.send', [
-        udpSocketId,
-        chunk,
-        { address: host, port },
-      ]);
-      socket.localInfo = normalizeHostNetAddressInfo(result?.localAddress, result?.localPort);
-      const written = Number(result?.bytes) >>> 0;
-      return writeGuestUint32(retSentPtr, written);
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  net_recvfrom(fd, bufPtr, bufLen, flags, retReceivedPtr, retAddrPtr, retAddrLenPtr) {
-    const socket = getHostNetSocket(fd);
-    if (!socket || socket.closed) {
-      return WASI_ERRNO_BADF;
-    }
-
-    try {
-      if ((Number(flags) >>> 0) !== 0) {
-        return WASI_ERRNO_INVAL;
-      }
-      const udpSocketId = ensureHostNetUdpSocket(socket);
-      if (!udpSocketId) {
-        return WASI_ERRNO_FAULT;
-      }
-
-      const deadline =
-        socket.recvTimeoutMs == null ? null : Date.now() + Math.max(0, socket.recvTimeoutMs);
-      while (true) {
-        const pollWaitMs =
-          deadline == null ? 50 : Math.max(0, Math.min(50, deadline - Date.now()));
-        if (deadline != null && pollWaitMs === 0) {
-          return WASI_ERRNO_AGAIN;
-        }
-        const event = callSyncRpc('dgram.poll', [udpSocketId, pollWaitMs]);
-        if (!event) {
-          if (deadline != null && Date.now() >= deadline) {
-            return WASI_ERRNO_AGAIN;
-          }
-          continue;
-        }
-        if (event.type === 'error') {
-          return WASI_ERRNO_FAULT;
-        }
-        if (event.type !== 'message') {
-          continue;
-        }
-
-        let bytes;
-        if (event.data && typeof event.data === 'object' && typeof event.data.base64 === 'string') {
-          bytes = Buffer.from(event.data.base64, 'base64');
-        } else {
-          try {
-            bytes = decodeFsBytesPayload(event.data, 'host_net recvfrom data');
-          } catch {
-            return WASI_ERRNO_FAULT;
-          }
-        }
-        const dataResult = writeGuestBytes(bufPtr, bufLen, bytes, retReceivedPtr);
-        if (dataResult !== WASI_ERRNO_SUCCESS) {
-          return dataResult;
-        }
-        if (!event.remoteAddress || !Number.isInteger(Number(event.remotePort))) {
-          return WASI_ERRNO_BADF;
-        }
-        let address;
-        try {
-          address = Buffer.from(formatHostNetAddressInfo({
-            address: event.remoteAddress,
-            port: event.remotePort,
-          }), 'utf8');
-        } catch {
-          return WASI_ERRNO_INVAL;
-        }
-        let addressCapacity;
-        try {
-          addressCapacity = readGuestUint32(retAddrLenPtr);
-        } catch {
-          return WASI_ERRNO_FAULT;
-        }
-        const addressResult = writeGuestBytes(retAddrPtr, addressCapacity, address, retAddrLenPtr);
-        return addressResult;
-      }
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  net_setsockopt(fd, level, optname, optvalPtr, optvalLen) {
-    const socket = getHostNetSocket(fd);
-    if (!socket || socket.closed) {
-      return WASI_ERRNO_BADF;
-    }
-    const sockoptKind = hostNetSockoptKind(level, optname, optvalLen);
-    if (sockoptKind == null) {
-      return WASI_ERRNO_INVAL;
-    }
-    try {
-      const timeoutMs = parseHostNetTimevalMs(readGuestBytes(optvalPtr, optvalLen));
-      if (timeoutMs == null && readGuestBytes(optvalPtr, optvalLen).some((byte) => byte !== 0)) {
-        return WASI_ERRNO_INVAL;
-      }
-      if (sockoptKind === 'recv-timeout') {
-        socket.recvTimeoutMs = timeoutMs;
-      }
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-    return WASI_ERRNO_SUCCESS;
-  },
-  net_close(fd) {
-    const numericFd = Number(fd) >>> 0;
-    const socket = hostNetSockets.get(numericFd);
-    if (!socket) {
-      return WASI_ERRNO_BADF;
-    }
-
-    hostNetSockets.delete(numericFd);
-    try {
-      if (socket.localReservation != null) {
-        callSyncRpc('net.release_tcp_port', [socket.localReservation]);
-      }
-      if (socket.socketId && !socket.closed) {
-        callSyncRpc('net.destroy', [socket.socketId]);
-      }
-      if (socket.udpSocketId) {
-        callSyncRpc('dgram.close', [socket.udpSocketId]);
-      }
-      return WASI_ERRNO_SUCCESS;
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-  net_tls_connect(fd, hostnamePtr, hostnameLen) {
-    const socket = getHostNetSocket(fd);
-    if (!socket?.socketId || socket.closed) {
-      return WASI_ERRNO_BADF;
-    }
-
-    try {
-      const servername = readGuestString(hostnamePtr, hostnameLen);
-      const tlsOptions = { servername };
-      if (guestEnv.NODE_TLS_REJECT_UNAUTHORIZED === '0') {
-        tlsOptions.rejectUnauthorized = false;
-      }
-      callSyncRpc('net.socket_upgrade_tls', [
-        socket.socketId,
-        JSON.stringify(tlsOptions),
-      ]);
-      return WASI_ERRNO_SUCCESS;
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  },
-};
-
-const hostProcessImport = {
-        proc_spawn(
-          argvPtr,
-          argvLen,
-          envpPtr,
-          envpLen,
-          stdinFd,
-          stdoutFd,
-          stderrFd,
-          cwdPtr,
-          cwdLen,
-          retPidPtr,
-        ) {
-          if (permissionTier !== 'full') {
-            return WASI_ERRNO_FAULT;
-          }
-          try {
-            const argv = decodeNullSeparatedStrings(readGuestBytes(argvPtr, argvLen));
-            if (argv.length === 0) {
-              return WASI_ERRNO_FAULT;
-            }
-
-            const [command, ...args] = argv;
-            const env = parseSerializedEnv(readGuestBytes(envpPtr, envpLen));
-            const cwd =
-              Number(cwdLen) > 0 ? readGuestString(cwdPtr, cwdLen) : undefined;
-            const stdinTarget = resolveSpawnFd(stdinFd);
-            const stdoutTarget = resolveSpawnFd(stdoutFd);
-            const stderrTarget = resolveSpawnFd(stderrFd);
-            const syntheticResult = maybeCreateSyntheticCommandResult(command, args, cwd);
-            if (syntheticResult) {
-              const record = createSyntheticChildRecord(
-                syntheticResult,
-                stdinTarget,
-                stdoutTarget,
-                stderrTarget,
-              );
-              spawnedChildren.set(record.pid, record);
-              spawnedChildrenById.set(record.childId, record);
-              traceHostProcess('proc-spawn-synthetic', {
-                command,
-                childId: record.childId,
-                pid: record.pid,
-                exitCode: syntheticResult.exitCode,
-              });
-              emitSyntheticCommandOutput(record, stdoutFd, stderrFd, syntheticResult);
-              return writeGuestUint32(retPidPtr, record.pid);
-            }
-            traceHostProcess('proc-spawn-begin', {
-              command,
-              args,
-              cwd: cwd ?? null,
-              stdinFd: Number(stdinFd) >>> 0,
-              stdoutFd: Number(stdoutFd) >>> 0,
-              stderrFd: Number(stderrFd) >>> 0,
-              stdinTarget,
-              stdoutTarget,
-              stderrTarget,
-            });
-            let stdinRedirectBytes = null;
-            if (
-              stdinTarget > 2 &&
-              stdinTarget !== 0xffffffff &&
-              !spawnStdinFdIsSyntheticPipe(stdinTarget)
-            ) {
-              stdinRedirectBytes = readSpawnStdinRedirectBytes(stdinTarget);
-              if (stdinRedirectBytes == null) {
-                traceHostProcess('proc-spawn-stdin-redirect-unreadable', {
-                  command,
-                  stdinFd: stdinTarget,
-                });
-                return WASI_ERRNO_FAULT;
-              }
-            }
-            const result = callSyncRpc('child_process.spawn', [
-              {
-                command,
-                args,
-                options: {
-                  cwd,
-                  env,
-                  internalBootstrapEnv: {},
-                  shell: false,
-                  stdio: [
-                    stdinTarget === 0
-                      ? 'inherit'
-                      : stdinTarget === 0xffffffff
-                        ? 'ignore'
-                        : 'pipe',
-                    stdoutTarget === 1
-                      ? 'inherit'
-                      : stdoutTarget === 0xffffffff
-                        ? 'ignore'
-                        : 'pipe',
-                    stderrTarget === 2
-                      ? 'inherit'
-                      : stderrTarget === 0xffffffff
-                        ? 'ignore'
-                        : 'pipe',
-                  ],
-                },
-              },
-            ]);
-            const pid = Number(result?.pid) >>> 0;
-            if (!Number.isInteger(pid) || pid === 0 || typeof result?.childId !== 'string') {
-              return WASI_ERRNO_FAULT;
-            }
-
-            const stdinPipe = registerPipeConsumer(stdinTarget, result.childId, 'stdin');
-            const stdoutPipe = registerPipeProducer(stdoutTarget, result.childId, 'stdout');
-            const stderrPipe = registerPipeProducer(stderrTarget, result.childId, 'stderr');
-            const retainedSpawnOutputHandles = [stdoutTarget, stderrTarget]
-              .filter((fd, index, values) => values.indexOf(fd) === index)
-              .map((fd) => retainSpawnOutputHandle(fd))
-              .filter(Boolean);
-            const delegateRetainedFds = [stdinTarget, stdoutTarget, stderrTarget].filter(
-              (fd, index, values) =>
-                fd > 2 &&
-                delegateManagedFdRefCounts.has(fd) &&
-                values.indexOf(fd) === index,
-            );
-            for (const fd of delegateRetainedFds) {
-              retainDelegateFd(fd);
-            }
-            const record = {
-              childId: result.childId,
-              pid,
-              stdinFd: stdinTarget,
-              stdoutFd: stdoutTarget,
-              stderrFd: stderrTarget,
-              stdinPipe,
-              stdoutPipe,
-              stderrPipe,
-              stdinReadyAtMs: Date.now() + 100,
-              delegateRetainedFds,
-              retainedSpawnOutputHandles,
-              exitStatus: null,
-      };
-            spawnedChildren.set(pid, record);
-            spawnedChildrenById.set(result.childId, record);
-            traceHostProcess('proc-spawn-ready', {
-              command,
-              childId: result.childId,
-              pid,
-            });
-            if (stdinRedirectBytes != null) {
-              if (stdinRedirectBytes.length > 0) {
-                callSyncRpc('child_process.write_stdin', [
-                  result.childId,
-                  stdinRedirectBytes,
-                ]);
-              }
-              callSyncRpc('child_process.close_stdin', [result.childId]);
-            }
-            consumeSpawnOutputFd(stdoutFd);
-            consumeSpawnOutputFd(stderrFd);
-            return writeGuestUint32(retPidPtr, pid);
-          } catch (error) {
-            traceHostProcess('proc-spawn-fault', {
-              message: error instanceof Error ? error.message : String(error),
-            });
-            return WASI_ERRNO_FAULT;
-          }
-        },
-        proc_waitpid(pid, options, retStatusPtr, retPidPtr) {
-          const requestedPid = Number(pid) >>> 0;
-          if (permissionTier !== 'full') {
-            return requestedPid === 0xffffffff ? WASI_ERRNO_CHILD : WASI_ERRNO_SRCH;
-          }
-          const record =
-            requestedPid === 0xffffffff
-              ? spawnedChildren.values().next().value
-              : spawnedChildren.get(requestedPid);
-          if (!record) {
-            return requestedPid === 0xffffffff ? WASI_ERRNO_CHILD : WASI_ERRNO_SRCH;
-          }
-
-          try {
-            const nonBlocking = (Number(options) >>> 0) !== 0;
-            traceHostProcess('proc-waitpid-begin', {
-              requestedPid,
-              childId: record.childId,
-              pid: record.pid,
-            });
-            if (typeof record.exitStatus === 'number') {
-              if (writeGuestUint32(retStatusPtr, record.exitStatus) !== WASI_ERRNO_SUCCESS) {
-                return WASI_ERRNO_FAULT;
-              }
-              const writePidResult = writeGuestUint32(retPidPtr, record.pid);
-              if (writePidResult !== WASI_ERRNO_SUCCESS) {
-                return writePidResult;
-              }
-              reapSpawnedChild(record);
-              return writePidResult;
-            }
-
-            while (true) {
-              const event = pollChildEvent(
-                record,
-                nonBlocking ? 0 : 10,
-              );
-              if (!event) {
-                if (!pumpChildInputPipe(record, nonBlocking ? 0 : 10)) {
-                  if (nonBlocking) {
-                    return writeGuestUint32(retPidPtr, 0);
-                  }
-                }
-                continue;
-              }
-              traceHostProcess('proc-waitpid-poll', {
-                requestedPid,
-                childId: record.childId,
-                type: event.type,
-              });
-
-              if (event.type === 'stdout' && record.stdoutFd !== 0xffffffff) {
-                const chunk = decodeSyncRpcValue(event.data);
-                if (chunk?.length > 0) {
-                  routeChunkToFd(record.stdoutFd, chunk);
-                }
-                continue;
-              }
-
-              if (event.type === 'stderr' && record.stderrFd !== 0xffffffff) {
-                const chunk = decodeSyncRpcValue(event.data);
-                if (chunk?.length > 0) {
-                  routeChunkToFd(record.stderrFd, chunk);
-                }
-                continue;
-              }
-
-              if (event.type === 'signal') {
-                processChildEvent(record, event);
-                continue;
-              }
-
-              if (event.type === 'exit') {
-                processChildEvent(record, event);
-                if (writeGuestUint32(retStatusPtr, record.exitStatus ?? 1) !== WASI_ERRNO_SUCCESS) {
-                  return WASI_ERRNO_FAULT;
-                }
-                const writePidResult = writeGuestUint32(retPidPtr, record.pid);
-                if (writePidResult !== WASI_ERRNO_SUCCESS) {
-                  return writePidResult;
-                }
-                reapSpawnedChild(record);
-                return writePidResult;
-              }
-            }
-          } catch {
-            traceHostProcess('proc-waitpid-fault', {
-              requestedPid,
-              childId: record.childId,
-              pid: record.pid,
-            });
-            return WASI_ERRNO_FAULT;
-          }
-        },
-        proc_kill(pid, signal) {
-          if (permissionTier !== 'full') {
-            return WASI_ERRNO_SRCH;
-          }
-          const targetPid = Number(pid) >>> 0;
-          const signalName = signalNameFromNumber(signal);
-
-          try {
-            if (targetPid === VIRTUAL_PID) {
-              callSyncRpc('process.kill', [VIRTUAL_PID, signalName]);
-              if (
-                Number(signal) > 0 &&
-                typeof instance?.exports?.__wasi_signal_trampoline === 'function'
-              ) {
-                instance.exports.__wasi_signal_trampoline(Number(signal) | 0);
-              }
-              return WASI_ERRNO_SUCCESS;
-            }
-
-            const record = spawnedChildren.get(targetPid);
-            if (record) {
-              callSyncRpc('child_process.kill', [record.childId, signalName]);
-              return WASI_ERRNO_SUCCESS;
-            }
-
-            callSyncRpc('process.kill', [targetPid, signalName]);
-            return WASI_ERRNO_SUCCESS;
-          } catch (error) {
-            if (error?.code === 'ESRCH') {
-              return WASI_ERRNO_SRCH;
-            }
-            return WASI_ERRNO_FAULT;
-          }
-        },
-        proc_getpid(retPidPtr) {
-          return writeGuestUint32(retPidPtr, VIRTUAL_PID);
-        },
-        proc_getppid(retPidPtr) {
-          return writeGuestUint32(retPidPtr, VIRTUAL_PPID);
-        },
-        fd_pipe(retReadFdPtr, retWriteFdPtr) {
-          try {
-            const pipe = {
-              id: nextSyntheticPipeId++,
-              chunks: [],
-              consumers: new Map(),
-              producers: new Map(),
-              readHandleCount: 0,
-              writeHandleCount: 0,
-            };
-            const readFd = nextSyntheticFd++;
-            const writeFd = nextSyntheticFd++;
-            syntheticFdEntries.set(readFd, createPipeHandle('pipe-read', pipe, readFd));
-            syntheticFdEntries.set(writeFd, createPipeHandle('pipe-write', pipe, writeFd));
-            if (writeGuestUint32(retReadFdPtr, readFd) !== WASI_ERRNO_SUCCESS) {
-              return WASI_ERRNO_FAULT;
-            }
-            return writeGuestUint32(retWriteFdPtr, writeFd);
-          } catch {
-            return WASI_ERRNO_FAULT;
-          }
-        },
-        fd_dup(fd, retNewFdPtr) {
-          try {
-            const handle = cloneFdHandle(fd);
-            if (!handle) {
-              return WASI_ERRNO_BADF;
-            }
-            let duplicatedFd = 0;
-            while (
-              duplicatedFd <= 2 &&
-              (
-                syntheticFdEntries.has(duplicatedFd) ||
-                passthroughHandles.has(duplicatedFd) ||
-                delegateManagedFdRefCounts.has(duplicatedFd)
-              )
-            ) {
-              duplicatedFd += 1;
-            }
-            if (duplicatedFd > 2) {
-              duplicatedFd = nextSyntheticFd++;
-            }
-            syntheticFdEntries.set(duplicatedFd, handle);
-            traceHostProcess('fd-dup', {
-              fd: Number(fd) >>> 0,
-              duplicatedFd,
-              handleKind: handle.kind,
-              targetFd: handle.targetFd ?? null,
-              displayFd: handle.displayFd ?? null,
-            });
-            return writeGuestUint32(retNewFdPtr, duplicatedFd);
-          } catch {
-            return WASI_ERRNO_FAULT;
-          }
-        },
-        fd_dup2(oldFd, newFd) {
-          try {
-            const sourceFd = Number(oldFd) >>> 0;
-            const targetFd = Number(newFd) >>> 0;
-            if (sourceFd === targetFd) {
-              if (!lookupFdHandle(sourceFd)) {
-                return WASI_ERRNO_BADF;
-              }
-              traceHostProcess('fd-dup2-same-fd', {
-                oldFd: sourceFd,
-                newFd: targetFd,
-              });
-              return WASI_ERRNO_SUCCESS;
-            }
-
-            const sourceHandle = cloneFdHandle(sourceFd);
-            if (!sourceHandle) {
-              return WASI_ERRNO_BADF;
-            }
-
-            traceHostProcess('fd-dup2-begin', {
-              oldFd: sourceFd,
-              newFd: targetFd,
-              sourceKind: sourceHandle.kind,
-              sourceTargetFd: sourceHandle.targetFd ?? null,
-              sourceDisplayFd: sourceHandle.displayFd ?? null,
-              existingKind: syntheticFdEntries.get(targetFd)?.kind ?? passthroughHandles.get(targetFd)?.kind ?? null,
-            });
-
-            closeSyntheticFd(targetFd);
-            closePassthroughFd(targetFd);
-            syntheticFdEntries.set(targetFd, sourceHandle);
-            traceHostProcess('fd-dup2-installed', {
-              oldFd: sourceFd,
-              newFd: targetFd,
-              sourceKind: sourceHandle.kind,
-            });
-            return WASI_ERRNO_SUCCESS;
-          } catch {
-            return WASI_ERRNO_FAULT;
-          }
-        },
-        fd_dup_min(fd, minFd, retNewFdPtr) {
-          try {
-            const sourceFd = Number(fd);
-            const minimumFdNumber = Number(minFd);
-            if (!Number.isInteger(sourceFd) || sourceFd < 0) {
-              return WASI_ERRNO_BADF;
-            }
-            if (!Number.isInteger(minimumFdNumber) || minimumFdNumber < 0) {
-              return WASI_ERRNO_INVAL;
-            }
-
-            const handle = cloneFdHandle(sourceFd);
-            if (!handle) {
-              return WASI_ERRNO_BADF;
-            }
-
-            let duplicatedFd = minimumFdNumber >>> 0;
-            while (
-              syntheticFdEntries.has(duplicatedFd) ||
-              passthroughHandles.has(duplicatedFd) ||
-              delegateManagedFdRefCounts.has(duplicatedFd)
-            ) {
-              duplicatedFd += 1;
-            }
-            nextSyntheticFd = Math.max(nextSyntheticFd, duplicatedFd + 1);
-
-            syntheticFdEntries.set(duplicatedFd, handle);
-            traceHostProcess('fd-dup-min', {
-              fd: sourceFd >>> 0,
-              minimumFd: minimumFdNumber >>> 0,
-              duplicatedFd,
-              handleKind: handle.kind,
-              targetFd: handle.targetFd ?? null,
-              displayFd: handle.displayFd ?? null,
-            });
-            return writeGuestUint32(retNewFdPtr, duplicatedFd);
-          } catch {
-            return WASI_ERRNO_FAULT;
-          }
-        },
-        sleep_ms(milliseconds) {
-          try {
-            Atomics.wait(new Int32Array(new SharedArrayBuffer(4)), 0, 0, Number(milliseconds) >>> 0);
-            return WASI_ERRNO_SUCCESS;
-          } catch {
-            return WASI_ERRNO_FAULT;
-          }
-        },
-        pty_open(retMasterFdPtr, retSlaveFdPtr) {
-          return WASI_ERRNO_FAULT;
-        },
-        proc_sigaction(signal, action, maskLo, maskHi, flags) {
-          if (permissionTier !== 'full') {
-            return WASI_ERRNO_FAULT;
-          }
-          try {
-            const registration = {
-              action: action === 0 ? 'default' : action === 1 ? 'ignore' : 'user',
-              mask: decodeSignalMask(maskLo, maskHi),
-              flags: Number(flags) >>> 0,
-            };
-            emitControlMessage({
-              type: 'signal_state',
-              signal: Number(signal) >>> 0,
-              registration,
-            });
-            return WASI_ERRNO_SUCCESS;
-          } catch {
-            return WASI_ERRNO_FAULT;
-          }
-        },
-};
-
-const limitedHostProcessImport = {
-  fd_dup_min: hostProcessImport.fd_dup_min,
-};
-
-const hostUserImport = {
-  getuid(retUidPtr) {
-    return writeGuestUint32(retUidPtr, VIRTUAL_UID);
-  },
-  getgid(retGidPtr) {
-    return writeGuestUint32(retGidPtr, VIRTUAL_GID);
-  },
-  geteuid(retUidPtr) {
-    return writeGuestUint32(retUidPtr, VIRTUAL_UID);
-  },
-  getegid(retGidPtr) {
-    return writeGuestUint32(retGidPtr, VIRTUAL_GID);
-  },
-  isatty(fd, retBoolPtr) {
-    const descriptor = Number(fd) >>> 0;
-    const isTerminal = descriptor <= 2 && stdioFdIsKernelTty(descriptor) ? 1 : 0;
-    return writeGuestUint32(retBoolPtr, isTerminal);
-  },
-  getpwuid(uid, bufPtr, bufLen, retLenPtr) {
-    const numericUid = Number(uid) >>> 0;
-    const passwdEntry =
-      numericUid === VIRTUAL_UID
-        ? `${VIRTUAL_OS_USER}:x:${VIRTUAL_UID}:${VIRTUAL_GID}::${VIRTUAL_OS_HOMEDIR}:${VIRTUAL_OS_SHELL}`
-        : `user${numericUid}:x:${numericUid}:${numericUid}::/home/user${numericUid}:/bin/sh`;
-    return writeGuestBytes(bufPtr, bufLen, encodeGuestBytes(passwdEntry), retLenPtr);
-  },
-};
-
-const HOST_FS_MODE_REGULAR = 0o100644;
-const HOST_FS_MODE_CHARACTER = 0o020666;
-const HOST_FS_MODE_FIFO = 0o010600;
-const HOST_FS_GUEST_CWD =
-  typeof guestEnv?.PWD === 'string' && guestEnv.PWD.startsWith('/')
-    ? path.posix.normalize(guestEnv.PWD)
-    : '/';
-
-for (let index = 0; index < WASI_PREOPEN_ENTRIES.length; index += 1) {
-  const fd = WASI_PREOPEN_FD_BASE + index;
-  const [guestPath, preopenSpec] = WASI_PREOPEN_ENTRIES[index];
-  if (!passthroughHandles.has(fd)) {
-    retainDelegateFd(fd);
-    closedPassthroughFds.delete(fd);
-    passthroughHandles.set(fd, {
-      kind: 'passthrough',
-      targetFd: fd,
-      displayFd: fd,
-      refCount: 0,
-      open: true,
-      guestPath: guestPathForPreopenKey(guestPath),
-      readOnly: preopenSpec?.readOnly === true,
-    });
-  }
-}
-
-function hostFsModeFromStat(stat) {
-  const mode = Number(stat?.mode);
-  return Number.isInteger(mode) && mode > 0 ? mode >>> 0 : 0;
-}
-
-const hostFsSizeByGuestPath = new Map();
-// Bound the per-path size cache so a guest truncating many distinct paths cannot
-// grow it without limit. Entries are insertion-ordered, so evicting the oldest
-// key is a cheap LRU-ish bound.
-const HOST_FS_SIZE_CACHE_MAX_ENTRIES = 4096;
-let hostFsSizeCacheEvictionWarned = false;
-
-function forgetHostFsSize(guestPath) {
-  if (typeof guestPath !== 'string') {
-    return;
-  }
-  hostFsSizeByGuestPath.delete(path.posix.normalize(guestPath));
-}
-
-function rememberHostFsSize(guestPath, size) {
-  if (typeof guestPath !== 'string') {
-    return;
-  }
-  const normalized = path.posix.normalize(guestPath);
-  if (!Number.isFinite(size) || size < 0) {
-    hostFsSizeByGuestPath.delete(normalized);
-    return;
-  }
-  if (
-    !hostFsSizeByGuestPath.has(normalized) &&
-    hostFsSizeByGuestPath.size >= HOST_FS_SIZE_CACHE_MAX_ENTRIES
-  ) {
-    const oldest = hostFsSizeByGuestPath.keys().next().value;
-    if (oldest !== undefined) {
-      hostFsSizeByGuestPath.delete(oldest);
-    }
-    if (!hostFsSizeCacheEvictionWarned) {
-      hostFsSizeCacheEvictionWarned = true;
-      traceHostProcess('host-fs-size-cache-evict', {
-        max: HOST_FS_SIZE_CACHE_MAX_ENTRIES,
-      });
-    }
-  }
-  hostFsSizeByGuestPath.set(normalized, BigInt(Math.trunc(size)));
-}
-
-function rememberedHostFsSize(guestPath) {
-  if (typeof guestPath !== 'string') {
-    return null;
-  }
-  return hostFsSizeByGuestPath.get(path.posix.normalize(guestPath)) ?? null;
-}
-
-function resolveHostFsPath(value, fromGuestDir = HOST_FS_GUEST_CWD) {
-  return resolveHostFsMapping(value, fromGuestDir)?.hostPath ?? null;
-}
-
-function resolveHostFsMapping(value, fromGuestDir = HOST_FS_GUEST_CWD) {
-  const guestPath = resolveSyntheticGuestPath(value, fromGuestDir);
-  if (typeof guestPath !== 'string') {
-    return null;
-  }
-  return resolveModuleGuestPathToHostMapping(guestPath);
-}
-
-const hostFsImport = {
-  fd_mode(fd) {
-    const descriptor = Number(fd) >>> 0;
-    if (descriptor <= 2) {
-      return HOST_FS_MODE_CHARACTER;
-    }
-
-    const handle = lookupFdHandle(descriptor);
-    if (handle?.kind === 'pipe-read' || handle?.kind === 'pipe-write') {
-      return HOST_FS_MODE_FIFO;
-    }
-
-    try {
-      const targetFd =
-        typeof handle?.ioFd === 'number'
-          ? Number(handle.ioFd) >>> 0
-          : typeof handle?.targetFd === 'number'
-            ? Number(handle.targetFd) >>> 0
-            : descriptor;
-      return hostFsModeFromStat(fsModule.fstatSync(targetFd)) || HOST_FS_MODE_REGULAR;
-    } catch {
-      return HOST_FS_MODE_REGULAR;
-    }
-  },
-  fd_size(fd) {
-    const descriptor = Number(fd) >>> 0;
-    try {
-      const handle = lookupFdHandle(descriptor);
-      const rememberedSize = rememberedHostFsSize(handle?.guestPath);
-      if (rememberedSize != null) {
-        return rememberedSize;
-      }
-      if (typeof handle?.ioFd === 'number') {
-        return BigInt(fsModule.fstatSync(Number(handle.ioFd) >>> 0).size ?? -1);
-      }
-      if (typeof handle?.guestPath === 'string') {
-        const hostPath = resolveHostFsPath(handle.guestPath);
-        if (typeof hostPath === 'string') {
-          return BigInt(fsModule.statSync(hostPath).size ?? -1);
-        }
-        return BigInt(fsModule.statSync(handle.guestPath).size ?? -1);
-      }
-      const targetFd = typeof handle?.targetFd === 'number'
-        ? Number(handle.targetFd) >>> 0
-        : descriptor;
-      return BigInt(fsModule.fstatSync(targetFd).size ?? -1);
-    } catch {
-      return (1n << 64n) - 1n;
-    }
-  },
-  path_mode(fd, pathPtr, pathLen, followSymlinks) {
-    try {
-      const target = resolvePathOpenGuestPath(fd, pathPtr, pathLen);
-      if (typeof target !== 'string') {
-        return 0;
-      }
-      const hostPath = resolveHostFsPath(target);
-      if (typeof hostPath !== 'string') {
-        return 0;
-      }
-      const stat =
-        Number(followSymlinks) === 0
-          ? fsModule.lstatSync(hostPath)
-          : fsModule.statSync(hostPath);
-      const mode = hostFsModeFromStat(stat);
-      traceHostProcess('host-fs-path-mode', {
-        target,
-        hostPath,
-        followSymlinks: Number(followSymlinks) >>> 0,
-        mode,
-      });
-      return mode;
-    } catch {
-      traceHostProcess('host-fs-path-mode-fault', {});
-      return 0;
-    }
-  },
-  path_size(fd, pathPtr, pathLen, followSymlinks) {
-    const target = resolvePathOpenGuestPath(fd, pathPtr, pathLen);
-    if (typeof target !== 'string') {
-      return (1n << 64n) - 1n;
-    }
-    const rememberedSize = rememberedHostFsSize(target);
-    if (rememberedSize != null) {
-      return rememberedSize;
-    }
-
-    try {
-      const hostPath = resolveHostFsPath(target);
-      if (typeof hostPath === 'string') {
-        const stat =
-          Number(followSymlinks) === 0
-            ? fsModule.lstatSync(hostPath)
-            : fsModule.statSync(hostPath);
-        return BigInt(stat?.size ?? -1);
-      }
-      const guestStat =
-        Number(followSymlinks) === 0
-          ? fsModule.lstatSync(target)
-          : fsModule.statSync(target);
-      return BigInt(guestStat?.size ?? -1);
-    } catch {
-      return (1n << 64n) - 1n;
-    }
-  },
-  chmod(fd, pathPtr, pathLen, mode) {
-    try {
-      const target = resolvePathOpenGuestPath(fd, pathPtr, pathLen);
-      if (typeof target !== 'string') {
-        return 1;
-      }
-      const mapping = resolveHostFsMapping(target);
-      if (!mapping || typeof mapping.hostPath !== 'string') {
-        return 1;
-      }
-      if (mapping.readOnly) {
-        return 1;
-      }
-      traceHostProcess('host-fs-chmod', {
-        target,
-        hostPath: mapping.hostPath,
-        mode: Number(mode) >>> 0,
-      });
-      chmodMappedGuestPath(target, mapping.hostPath, Number(mode) >>> 0);
-      return 0;
-    } catch {
-      traceHostProcess('host-fs-chmod-fault', {});
-      return 1;
-    }
-  },
-  fchmod(fd, mode) {
-    try {
-      const descriptor = Number(fd) >>> 0;
-      const handle = lookupFdHandle(descriptor);
-      if (handle?.readOnly === true) {
-        return 1;
-      }
-      if (typeof handle?.guestPath === 'string') {
-        const mapping = resolveHostFsMapping(handle.guestPath);
-        if (!mapping || typeof mapping.hostPath !== 'string' || mapping.readOnly) {
-          return 1;
-        }
-        chmodMappedGuestPath(handle.guestPath, mapping.hostPath, Number(mode) >>> 0);
-        return 0;
-      }
-      const targetFd =
-        typeof handle?.targetFd === 'number' ? Number(handle.targetFd) >>> 0 : descriptor;
-      fsModule.fchmodSync(targetFd, Number(mode) >>> 0);
-      return 0;
-    } catch {
-      traceHostProcess('host-fs-fchmod-fault', {});
-      return 1;
-    }
-  },
-  ftruncate(fd, length) {
-    try {
-      const descriptor = Number(fd) >>> 0;
-      const nextSize = Number(length);
-      if (!Number.isFinite(nextSize) || nextSize < 0) {
-        return 1;
-      }
-      const handle = lookupFdHandle(descriptor);
-      if (handle?.readOnly === true) {
-        return 1;
-      }
-      if (typeof handle?.ioFd === 'number') {
-        fsModule.ftruncateSync(handle.ioFd, nextSize);
-        if ((handle.position ?? 0) > nextSize) {
-          handle.position = nextSize;
-        }
-        rememberHostFsSize(handle.guestPath, nextSize);
-        return 0;
-      }
-      if (typeof handle?.guestPath === 'string') {
-        const pathFd = fsModule.openSync(handle.guestPath, 0o1, 0o666);
-        try {
-          fsModule.ftruncateSync(pathFd, nextSize);
-          if ((handle.position ?? 0) > nextSize) {
-            handle.position = nextSize;
-          }
-          rememberHostFsSize(handle.guestPath, nextSize);
-        } finally {
-          fsModule.closeSync(pathFd);
-        }
-        return 0;
-      }
-      return 1;
-    } catch {
-      return 1;
-    }
-  },
-};
-
-wasiImport.clock_time_get = (clockId, precision, resultPtr) => {
-  const numericClockId = Number(clockId) >>> 0;
-  if (numericClockId !== 0 && delegateClockTimeGet) {
-    return delegateClockTimeGet(clockId, precision, resultPtr);
-  }
-  if (!(instanceMemory instanceof WebAssembly.Memory)) {
-    return delegateClockTimeGet
-      ? delegateClockTimeGet(clockId, precision, resultPtr)
-      : WASI_ERRNO_FAULT;
-  }
-
-  try {
-    const view = new DataView(instanceMemory.buffer);
-    view.setBigUint64(Number(resultPtr), frozenTimeNs, true);
-    return WASI_ERRNO_SUCCESS;
-  } catch {
-    return WASI_ERRNO_FAULT;
-  }
-};
-
-wasiImport.clock_res_get = (clockId, resultPtr) => {
-  const numericClockId = Number(clockId) >>> 0;
-  if (numericClockId !== 0 && delegateClockResGet) {
-    return delegateClockResGet(clockId, resultPtr);
-  }
-  if (!(instanceMemory instanceof WebAssembly.Memory)) {
-    return delegateClockResGet
-      ? delegateClockResGet(clockId, resultPtr)
-      : WASI_ERRNO_FAULT;
-  }
-
-  try {
-    const view = new DataView(instanceMemory.buffer);
-    view.setBigUint64(Number(resultPtr), 1000000n, true);
-    return WASI_ERRNO_SUCCESS;
-  } catch {
-    return WASI_ERRNO_FAULT;
-  }
-};
-
-if (delegatePathOpen) {
-  wasiImport.path_open = (
-    fd,
-    dirflags,
-    pathPtr,
-    pathLen,
-    oflags,
-    rightsBase,
-    rightsInheriting,
-    fdflags,
-    openedFdPtr,
-  ) => {
-    const workspaceReadOnlyDenied = __agentOSWasiMeasurePhase('path_open', 'readonly_policy', () =>
-      isWorkspaceReadOnly() &&
-      (hasMutationOpenFlags(oflags) || hasWriteRights(rightsBase))
-    );
-    if (workspaceReadOnlyDenied) {
-      return denyReadOnlyMutation();
-    }
-
-    const passthroughDirHandle = __agentOSWasiMeasurePhase('path_open', 'lookup_handle', () =>
-      lookupFdHandle(fd)
-    );
-    if (passthroughDirHandle && passthroughDirHandle.kind !== 'passthrough') {
-      return WASI_ERRNO_BADF;
-    }
-    if (!passthroughDirHandle && rejectClosedPassthroughFd(fd)) {
-      return WASI_ERRNO_BADF;
-    }
-
-    const delegateDirFd =
-      passthroughDirHandle?.kind === 'passthrough'
-        ? passthroughDirHandle.targetFd
-        : fd;
-    const guestPath = __agentOSWasiMeasurePhase('path_open', 'path_resolution', () =>
-      resolvePathOpenGuestPath(fd, pathPtr, pathLen)
-    );
-    const guestReadOnlyDenied = __agentOSWasiMeasurePhase('path_open', 'readonly_policy', () =>
-      guestPathIsReadOnly(guestPath) &&
-      (hasMutationOpenFlags(oflags) || hasWriteRights(rightsBase))
-    );
-    if (guestReadOnlyDenied) {
-      return denyReadOnlyMutation();
-    }
-    const mayCreateTarget = pathOpenMayCreateTarget(oflags, rightsBase, fdflags);
-    if (!SIDECAR_MANAGED_PROCESS && mayCreateTarget) {
-      try {
-        const syntheticResult = __agentOSWasiMeasurePhase(
-          'path_open',
-          'synthetic_open',
-          () => openGuestFileForPathOpen(
-            fd,
-            pathPtr,
-            pathLen,
-            oflags,
-            rightsBase,
-            fdflags,
-            openedFdPtr,
-          ),
-        );
-        if (syntheticResult != null) {
-          return syntheticResult;
-        }
-      } catch {
-        return WASI_ERRNO_FAULT;
-      }
-    }
-
-    let result = __agentOSWasiMeasurePhase(
-      'path_open',
-      'delegate_call',
-      () => delegatePathOpen(
-        delegateDirFd,
-        dirflags,
-        pathPtr,
-        pathLen,
-        oflags,
-        rightsBase,
-        rightsInheriting,
-        fdflags,
-        openedFdPtr,
-      ),
-    );
-
-    // Precreate-and-retry exists for creatable targets the delegate reports
-    // as missing (e.g. `>>` append redirect targets). Only retry on NOENT:
-    // retrying on permission errors would mask the real errno and attempt to
-    // create a file the kernel just denied.
-    if (
-      result === WASI_ERRNO_NOENT &&
-      mayCreateTarget
-    ) {
-      try {
-        __agentOSWasiMeasurePhase('path_open', 'synthetic_precreate', () =>
-          precreatePathOpenTarget(fd, pathPtr, pathLen, oflags, rightsBase, fdflags)
-        );
-        result = __agentOSWasiMeasurePhase(
-          'path_open',
-          'delegate_call',
-          () => delegatePathOpen(
-            delegateDirFd,
-            dirflags,
-            pathPtr,
-            pathLen,
-            oflags,
-            rightsBase,
-            rightsInheriting,
-            fdflags,
-            openedFdPtr,
-          ),
-        );
-        if (!SIDECAR_MANAGED_PROCESS && result !== WASI_ERRNO_SUCCESS) {
-          const fallbackResult = __agentOSWasiMeasurePhase(
-            'path_open',
-            'synthetic_open',
-            () => openGuestFileForPathOpen(
-              fd,
-              pathPtr,
-              pathLen,
-              oflags,
-              rightsBase,
-              fdflags,
-              openedFdPtr,
-            ),
-          );
-          if (fallbackResult != null) {
-            return fallbackResult;
-          }
-        }
-      } catch {
-        return WASI_ERRNO_FAULT;
-      }
-    }
-
-    if (result === WASI_ERRNO_SUCCESS) {
-      return __agentOSWasiMeasurePhase('path_open', 'fd_bookkeeping', () =>
-        retainPathOpenDelegateFd(openedFdPtr, guestPath, fdflags, rightsBase)
-      );
-    }
-    return result;
-  };
-}
-
-function wrapReadOnlyPathMutation(name, shouldDeny) {
-  const delegate = typeof wasiImport[name] === 'function' ? wasiImport[name].bind(wasiImport) : null;
-  if (!delegate) {
-    return;
-  }
-  wasiImport[name] = (...args) => {
-    if (shouldDeny(...args)) {
-      return denyReadOnlyMutation();
-    }
-    return delegate(...args);
-  };
-}
-
-wrapReadOnlyPathMutation('path_create_directory', (fd, pathPtr, pathLen) =>
-  resolvedGuestPathIsReadOnly(fd, pathPtr, pathLen),
-);
-wrapReadOnlyPathMutation('path_filestat_set_times', (fd, _flags, pathPtr, pathLen) =>
-  resolvedGuestPathIsReadOnly(fd, pathPtr, pathLen),
-);
-wrapReadOnlyPathMutation(
-  'path_link',
-  (oldFd, _oldFlags, oldPathPtr, oldPathLen, newFd, newPathPtr, newPathLen) =>
-    resolvedGuestPathIsReadOnly(oldFd, oldPathPtr, oldPathLen) ||
-    resolvedGuestPathIsReadOnly(newFd, newPathPtr, newPathLen),
-);
-wrapReadOnlyPathMutation('path_remove_directory', (fd, pathPtr, pathLen) =>
-  resolvedGuestPathIsReadOnly(fd, pathPtr, pathLen),
-);
-wrapReadOnlyPathMutation(
-  'path_rename',
-  (oldFd, oldPathPtr, oldPathLen, newFd, newPathPtr, newPathLen) =>
-    resolvedGuestPathIsReadOnly(oldFd, oldPathPtr, oldPathLen) ||
-    resolvedGuestPathIsReadOnly(newFd, newPathPtr, newPathLen),
-);
-wrapReadOnlyPathMutation('path_symlink', (_oldPathPtr, _oldPathLen, fd, newPathPtr, newPathLen) =>
-  resolvedGuestPathIsReadOnly(fd, newPathPtr, newPathLen),
-);
-wrapReadOnlyPathMutation('path_unlink_file', (fd, pathPtr, pathLen) =>
-  resolvedGuestPathIsReadOnly(fd, pathPtr, pathLen),
-);
-
-if (isWorkspaceReadOnly()) {
-
-  wasiImport.fd_write = (fd, iovs, iovsLen, nwrittenPtr) => {
-    if (Number(fd) > 2) {
-      return denyReadOnlyMutation();
-    }
-
-    return delegateFdWrite ? delegateFdWrite(fd, iovs, iovsLen, nwrittenPtr) : WASI_ERRNO_FAULT;
-  };
-
-  wasiImport.fd_pwrite = (fd, iovs, iovsLen, offset, nwrittenPtr) => {
-    if (Number(fd) > 2) {
-      return denyReadOnlyMutation();
-    }
-
-    return delegateFdPwrite
-      ? delegateFdPwrite(fd, iovs, iovsLen, offset, nwrittenPtr)
-      : WASI_ERRNO_FAULT;
-  };
-
-  for (const name of [
-    'fd_allocate',
-    'fd_filestat_set_size',
-    'fd_filestat_set_times',
-    'path_create_directory',
-    'path_filestat_set_times',
-    'path_link',
-    'path_remove_directory',
-    'path_rename',
-    'path_symlink',
-    'path_unlink_file',
-  ]) {
-    if (typeof wasiImport[name] === 'function') {
-      wasiImport[name] = () => denyReadOnlyMutation();
-    }
-  }
-}
-
-const delegateManagedFdRead =
-  typeof wasiImport.fd_read === 'function'
-    ? wasiImport.fd_read.bind(wasiImport)
-    : null;
-const delegateManagedFdWrite =
-  typeof wasiImport.fd_write === 'function'
-    ? wasiImport.fd_write.bind(wasiImport)
-    : null;
-const delegateManagedFdPwrite =
-  typeof wasiImport.fd_pwrite === 'function'
-    ? wasiImport.fd_pwrite.bind(wasiImport)
-    : null;
-const delegateManagedFdSeek =
-  typeof wasiImport.fd_seek === 'function'
-    ? wasiImport.fd_seek.bind(wasiImport)
-    : null;
-const delegateManagedFdTell =
-  typeof wasiImport.fd_tell === 'function'
-    ? wasiImport.fd_tell.bind(wasiImport)
-    : null;
-const delegateManagedFdFdstatGet =
-  typeof wasiImport.fd_fdstat_get === 'function'
-    ? wasiImport.fd_fdstat_get.bind(wasiImport)
-    : null;
-const delegateManagedFdFdstatSetFlags =
-  typeof wasiImport.fd_fdstat_set_flags === 'function'
-    ? wasiImport.fd_fdstat_set_flags.bind(wasiImport)
-    : null;
-const delegateManagedFdFilestatGet =
-  typeof wasiImport.fd_filestat_get === 'function'
-    ? wasiImport.fd_filestat_get.bind(wasiImport)
-    : null;
-const delegateManagedFdFilestatSetSize =
-  typeof wasiImport.fd_filestat_set_size === 'function'
-    ? wasiImport.fd_filestat_set_size.bind(wasiImport)
-    : null;
-const delegateManagedFdClose =
-  typeof wasiImport.fd_close === 'function'
-    ? wasiImport.fd_close.bind(wasiImport)
-    : null;
-const delegateManagedFdPrestatGet =
-  typeof wasiImport.fd_prestat_get === 'function'
-    ? wasiImport.fd_prestat_get.bind(wasiImport)
-    : null;
-const delegateManagedFdPrestatDirName =
-  typeof wasiImport.fd_prestat_dir_name === 'function'
-    ? wasiImport.fd_prestat_dir_name.bind(wasiImport)
-    : null;
-const delegateManagedPollOneoff =
-  typeof wasiImport.poll_oneoff === 'function'
-    ? wasiImport.poll_oneoff.bind(wasiImport)
-    : null;
-const KERNEL_POLLIN = 0x0001;
-const KERNEL_POLLOUT = 0x0004;
-const KERNEL_POLLERR = 0x0008;
-const KERNEL_POLLHUP = 0x0010;
-
-wasiImport.fd_read = (fd, iovs, iovsLen, nreadPtr) => {
-  const numericFd = Number(fd) >>> 0;
-  const handle = __agentOSWasiMeasurePhase('fd_read', 'lookup_handle', () =>
-    lookupFdHandle(numericFd)
-  );
-  if (handle?.kind === 'pipe-read') {
-    try {
-      const requestedLength = __agentOSWasiMeasurePhase('fd_read', 'iov_scan', () => {
-        if (!(instanceMemory instanceof WebAssembly.Memory)) {
-          return 0;
-        }
-        const view = new DataView(instanceMemory.buffer);
-        let total = 0;
-        for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-          const entryOffset = (Number(iovs) >>> 0) + index * 8;
-          total += view.getUint32(entryOffset + 4, true);
-        }
-        return total >>> 0;
-      });
-
-      const pipeClosed = __agentOSWasiMeasurePhase('fd_read', 'pipe_wait', () => {
-        while (handle.pipe.chunks.length === 0) {
-          if (handle.pipe.writeHandleCount === 0 && handle.pipe.producers.size === 0) {
-            return true;
-          }
-
-          const pumped = pumpPipeProducers(handle.pipe, 10);
-          if (!pumped) {
-            Atomics.wait(syntheticWaitArray, 0, 0, 10);
-          }
-        }
-        return false;
-      });
-      if (pipeClosed) {
-        return __agentOSWasiMeasurePhase('fd_read', 'result_marshal', () =>
-          writeGuestUint32(nreadPtr, 0)
-        );
-      }
-
-      const chunk = __agentOSWasiMeasurePhase('fd_read', 'host_io', () =>
-        dequeuePipeBytes(handle.pipe, requestedLength)
-      );
-      const written = __agentOSWasiMeasurePhase('fd_read', 'guest_iov_write', () =>
-        writeBytesToGuestIovs(iovs, iovsLen, chunk)
-      );
-      return __agentOSWasiMeasurePhase('fd_read', 'result_marshal', () =>
-        writeGuestUint32(nreadPtr, written)
-      );
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  }
-
-  if (handle?.kind === 'guest-file') {
-    try {
-      const requestedLength = __agentOSWasiMeasurePhase('fd_read', 'iov_scan', () => {
-        if (!(instanceMemory instanceof WebAssembly.Memory)) {
-          return 0;
-        }
-        const view = new DataView(instanceMemory.buffer);
-        let total = 0;
-        for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-          const entryOffset = (Number(iovs) >>> 0) + index * 8;
-          total += view.getUint32(entryOffset + 4, true);
-        }
-        return total >>> 0;
-      });
-      const buffer = Buffer.alloc(requestedLength);
-      const bytesRead = __agentOSWasiMeasurePhase('fd_read', 'host_io', () =>
-        fsModule.readSync(
-          handle.targetFd,
-          buffer,
-          0,
-          requestedLength,
-          handle.position ?? 0,
-        )
-      );
-      handle.position = (handle.position ?? 0) + bytesRead;
-      const written = __agentOSWasiMeasurePhase('fd_read', 'guest_iov_write', () =>
-        writeBytesToGuestIovs(iovs, iovsLen, buffer.subarray(0, bytesRead))
-      );
-      return __agentOSWasiMeasurePhase('fd_read', 'result_marshal', () =>
-        writeGuestUint32(nreadPtr, written)
-      );
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  }
-
-  if (handle?.kind === 'passthrough' && typeof handle.ioFd === 'number') {
-    try {
-      const requestedLength = __agentOSWasiMeasurePhase('fd_read', 'iov_scan', () => {
-        if (!(instanceMemory instanceof WebAssembly.Memory)) {
-          return 0;
-        }
-        const view = new DataView(instanceMemory.buffer);
-        let total = 0;
-        for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-          const entryOffset = (Number(iovs) >>> 0) + index * 8;
-          total += view.getUint32(entryOffset + 4, true);
-        }
-        return total >>> 0;
-      });
-      const buffer = Buffer.alloc(requestedLength);
-      const bytesRead = __agentOSWasiMeasurePhase('fd_read', 'host_io', () =>
-        fsModule.readSync(
-          handle.ioFd,
-          buffer,
-          0,
-          requestedLength,
-          handle.position ?? 0,
-        )
-      );
-      handle.position = (handle.position ?? 0) + bytesRead;
-      const written = __agentOSWasiMeasurePhase('fd_read', 'guest_iov_write', () =>
-        writeBytesToGuestIovs(iovs, iovsLen, buffer.subarray(0, bytesRead))
-      );
-      return __agentOSWasiMeasurePhase('fd_read', 'result_marshal', () =>
-        writeGuestUint32(nreadPtr, written)
-      );
-    } catch (error) {
-      return mapSyntheticFsError(error);
-    }
-  }
-
-  if (
-    numericFd === 0 &&
-    handle?.kind === 'passthrough' &&
-    handle.targetFd === 0 &&
-    passthroughHandles.get(0) === handle
-  ) {
-    const sidecarManagedProcess =
-      typeof process?.env?.AGENTOS_SANDBOX_ROOT === 'string' &&
-      process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-    if (sidecarManagedProcess || KERNEL_STDIO_SYNC_RPC) {
-      try {
-        const requestedLength = __agentOSWasiMeasurePhase('fd_read', 'iov_scan', () => {
-          if (!(instanceMemory instanceof WebAssembly.Memory)) {
-            return 0;
-          }
-          const view = new DataView(instanceMemory.buffer);
-          let total = 0;
-          for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-            const entryOffset = (Number(iovs) >>> 0) + index * 8;
-            total += view.getUint32(entryOffset + 4, true);
-          }
-          return total >>> 0;
-        });
-        const chunk = __agentOSWasiMeasurePhase('fd_read', 'kernel_stdin_read', () =>
-          readKernelStdinChunk(requestedLength)
-        );
-        if (!chunk || chunk.length === 0) {
-          return __agentOSWasiMeasurePhase('fd_read', 'result_marshal', () =>
-            writeGuestUint32(nreadPtr, 0)
-          );
-        }
-        const written = __agentOSWasiMeasurePhase('fd_read', 'guest_iov_write', () =>
-          writeBytesToGuestIovs(iovs, iovsLen, chunk)
-        );
-        return __agentOSWasiMeasurePhase('fd_read', 'result_marshal', () =>
-          writeGuestUint32(nreadPtr, written)
-        );
-      } catch {
-        return WASI_ERRNO_FAULT;
-      }
-    }
-  }
-
-  if (!handle && numericFd <= 2) {
-    return WASI_ERRNO_BADF;
-  }
-
-  if (handle?.kind === 'passthrough') {
-    return delegateManagedFdRead
-      ? __agentOSWasiMeasurePhase('fd_read', 'delegate_call', () =>
-          delegateManagedFdRead(handle.targetFd, iovs, iovsLen, nreadPtr)
-        )
-      : WASI_ERRNO_BADF;
-  }
-
-  if (rejectClosedPassthroughFd(numericFd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  return delegateManagedFdRead
-    ? __agentOSWasiMeasurePhase('fd_read', 'delegate_call', () =>
-        delegateManagedFdRead(numericFd, iovs, iovsLen, nreadPtr)
-      )
-    : WASI_ERRNO_BADF;
-};
-
-wasiImport.fd_pread = (fd, iovs, iovsLen, offset, nreadPtr) => {
-  const handle = lookupFdHandle(fd);
-  if (handle?.kind === 'guest-file') {
-    try {
-      const requestedLength = (() => {
-        if (!(instanceMemory instanceof WebAssembly.Memory)) {
-          return 0;
-        }
-        const view = new DataView(instanceMemory.buffer);
-        let total = 0;
-        for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-          const entryOffset = (Number(iovs) >>> 0) + index * 8;
-          total += view.getUint32(entryOffset + 4, true);
-        }
-        return total >>> 0;
-      })();
-      const buffer = Buffer.alloc(requestedLength);
-      const bytesRead = fsModule.readSync(
-        handle.targetFd,
-        buffer,
-        0,
-        requestedLength,
-        Number(offset),
-      );
-      const written = writeBytesToGuestIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-      return writeGuestUint32(nreadPtr, written);
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  }
-
-  if (handle?.kind === 'passthrough') {
-    if (typeof handle.ioFd === 'number') {
-      try {
-        const requestedLength = (() => {
-          if (!(instanceMemory instanceof WebAssembly.Memory)) {
-            return 0;
-          }
-          const view = new DataView(instanceMemory.buffer);
-          let total = 0;
-          for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-            const entryOffset = (Number(iovs) >>> 0) + index * 8;
-            total += view.getUint32(entryOffset + 4, true);
-          }
-          return total >>> 0;
-        })();
-        const buffer = Buffer.alloc(requestedLength);
-        const bytesRead = fsModule.readSync(
-          handle.ioFd,
-          buffer,
-          0,
-          requestedLength,
-          Number(offset),
-        );
-        const written = writeBytesToGuestIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-        return writeGuestUint32(nreadPtr, written);
-      } catch (error) {
-        return mapSyntheticFsError(error);
-      }
-    }
-    return delegateFdPread
-      ? delegateFdPread(handle.targetFd, iovs, iovsLen, offset, nreadPtr)
-      : WASI_ERRNO_BADF;
-  }
-
-  if (rejectClosedPassthroughFd(fd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  return delegateFdPread
-    ? delegateFdPread(fd, iovs, iovsLen, offset, nreadPtr)
-    : WASI_ERRNO_BADF;
-};
-
-wasiImport.fd_pwrite = (fd, iovs, iovsLen, offset, nwrittenPtr) => {
-  const handle = lookupFdHandle(fd);
-  if (handle?.kind === 'guest-file') {
-    try {
-      const bytes = collectGuestIovBytes(iovs, iovsLen);
-      const written = fsModule.writeSync(
-        handle.targetFd,
-        bytes,
-        0,
-        bytes.length,
-        Number(offset),
-      );
-      return writeGuestUint32(nwrittenPtr, written);
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  }
-
-  if (handle?.kind === 'passthrough') {
-    if (handle.readOnly === true) {
-      return WASI_ERRNO_ROFS;
-    }
-    if (typeof handle.ioFd === 'number') {
-      try {
-        const bytes = collectGuestIovBytes(iovs, iovsLen);
-        const written = fsModule.writeSync(
-          handle.ioFd,
-          bytes,
-          0,
-          bytes.length,
-          Number(offset),
-        );
-        // A positioned write can grow the file past a size remembered from a
-        // prior truncate; drop the stale entry so fd_size/path_size fall
-        // through to the authoritative fstat.
-        forgetHostFsSize(handle.guestPath);
-        return writeGuestUint32(nwrittenPtr, written);
-      } catch (error) {
-        return mapSyntheticFsError(error);
-      }
-    }
-    return delegateManagedFdPwrite
-      ? delegateManagedFdPwrite(handle.targetFd, iovs, iovsLen, offset, nwrittenPtr)
-      : WASI_ERRNO_BADF;
-  }
-
-  if (rejectClosedPassthroughFd(fd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  return delegateManagedFdPwrite
-    ? delegateManagedFdPwrite(fd, iovs, iovsLen, offset, nwrittenPtr)
-    : WASI_ERRNO_BADF;
-};
-
-wasiImport.fd_sync = (fd) => {
-  const handle = lookupFdHandle(fd);
-  if (handle?.kind === 'guest-file') {
-    return WASI_ERRNO_SUCCESS;
-  }
-
-  if (handle?.kind === 'passthrough') {
-    return delegateFdSync ? delegateFdSync(handle.targetFd) : WASI_ERRNO_SUCCESS;
-  }
-
-  if (rejectClosedPassthroughFd(fd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  return delegateFdSync ? delegateFdSync(fd) : WASI_ERRNO_SUCCESS;
-};
-
-wasiImport.fd_seek = (fd, offset, whence, newOffsetPtr) => {
-  const handle = lookupFdHandle(fd);
-  if (handle?.kind === 'guest-file') {
-    try {
-      const next = seekGuestFileHandle(handle, offset, whence);
-      if (next == null) {
-        return WASI_ERRNO_INVAL;
-      }
-      return writeGuestUint64(newOffsetPtr, next);
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  }
-
-  if (handle && handle.kind !== 'passthrough') {
-    return WASI_ERRNO_SPIPE;
-  }
-
-  if (handle?.kind === 'passthrough') {
-    if (typeof handle.ioFd === 'number') {
-      try {
-        const next = seekGuestFileHandle(handle, offset, whence);
-        if (next == null) {
-          return WASI_ERRNO_INVAL;
-        }
-        return writeGuestUint64(newOffsetPtr, next);
-      } catch {
-        return WASI_ERRNO_FAULT;
-      }
-    }
-    return delegateManagedFdSeek
-      ? delegateManagedFdSeek(handle.targetFd, offset, whence, newOffsetPtr)
-      : WASI_ERRNO_BADF;
-  }
-
-  if (rejectClosedPassthroughFd(fd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  return delegateManagedFdSeek
-    ? delegateManagedFdSeek(fd, offset, whence, newOffsetPtr)
-    : WASI_ERRNO_BADF;
-};
-
-wasiImport.fd_tell = (fd, offsetPtr) => {
-  const handle = lookupFdHandle(fd);
-  if (handle?.kind === 'guest-file') {
-    return writeGuestUint64(offsetPtr, BigInt(handle.position ?? 0));
-  }
-
-  if (handle && handle.kind !== 'passthrough') {
-    return WASI_ERRNO_SPIPE;
-  }
-
-  if (handle?.kind === 'passthrough') {
-    if (typeof handle.ioFd === 'number') {
-      return writeGuestUint64(offsetPtr, BigInt(handle.position ?? 0));
-    }
-    return delegateManagedFdTell
-      ? delegateManagedFdTell(handle.targetFd, offsetPtr)
-      : WASI_ERRNO_BADF;
-  }
-
-  if (rejectClosedPassthroughFd(fd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  return delegateManagedFdTell
-    ? delegateManagedFdTell(fd, offsetPtr)
-    : WASI_ERRNO_BADF;
-};
-
-wasiImport.fd_fdstat_get = (fd, statPtr) => {
-  const handle = __agentOSWasiMeasurePhase('fd_fdstat_get', 'lookup_handle', () =>
-    lookupFdHandle(fd)
-  );
-  // Kernel-PTY stdio must report CHARACTER_DEVICE so guest is_terminal()/
-  // isatty() see the TTY (the runner-process fds behind the delegate are
-  // pipes). Resolve dup'd passthrough handles to their target fd first.
-  {
-    const stdioFd =
-      handle?.kind === 'passthrough' ? Number(handle.targetFd) >>> 0 : Number(fd) >>> 0;
-    if ((handle == null || handle.kind === 'passthrough') && stdioFd <= 2 &&
-        stdioFdIsKernelTty(stdioFd)) {
-      return __agentOSWasiMeasurePhase(
-        'fd_fdstat_get',
-        'marshal_fdstat',
-        () => writeGuestFdstat(
-          statPtr,
-          WASI_FILETYPE_CHARACTER_DEVICE,
-          0,
-          WASI_RIGHT_FD_READ |
-            WASI_RIGHT_FD_WRITE |
-            WASI_RIGHT_FD_FDSTAT_SET_FLAGS |
-            WASI_RIGHT_FD_FILESTAT_GET |
-            WASI_RIGHT_POLL_FD_READWRITE,
-          0n,
-        ),
-      );
-    }
-  }
-  if (handle?.kind === 'pipe-read') {
-    return __agentOSWasiMeasurePhase(
-      'fd_fdstat_get',
-      'marshal_fdstat',
-      () => writeGuestFdstat(
-        statPtr,
-        WASI_FILETYPE_UNKNOWN,
-        0,
-        WASI_RIGHT_FD_READ |
-          WASI_RIGHT_FD_FDSTAT_SET_FLAGS |
-          WASI_RIGHT_FD_FILESTAT_GET |
-          WASI_RIGHT_POLL_FD_READWRITE,
-        0n,
-      ),
-    );
-  }
-
-  if (handle?.kind === 'pipe-write') {
-    return __agentOSWasiMeasurePhase(
-      'fd_fdstat_get',
-      'marshal_fdstat',
-      () => writeGuestFdstat(
-        statPtr,
-        WASI_FILETYPE_UNKNOWN,
-        0,
-        WASI_RIGHT_FD_WRITE |
-          WASI_RIGHT_FD_FDSTAT_SET_FLAGS |
-          WASI_RIGHT_FD_FILESTAT_GET |
-          WASI_RIGHT_POLL_FD_READWRITE,
-        0n,
-      ),
-    );
-  }
-
-  if (handle && handle.kind !== 'passthrough') {
-    return WASI_ERRNO_BADF;
-  }
-
-  if (handle?.kind === 'passthrough') {
-    return delegateManagedFdFdstatGet
-      ? __agentOSWasiMeasurePhase('fd_fdstat_get', 'delegate_call', () =>
-          delegateManagedFdFdstatGet(handle.targetFd, statPtr)
-        )
-      : WASI_ERRNO_BADF;
-  }
-
-  if (rejectClosedPassthroughFd(fd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  return delegateManagedFdFdstatGet
-    ? __agentOSWasiMeasurePhase('fd_fdstat_get', 'delegate_call', () =>
-        delegateManagedFdFdstatGet(fd, statPtr)
-      )
-    : WASI_ERRNO_BADF;
-};
-
-wasiImport.fd_fdstat_set_flags = (fd, flags) => {
-  const handle = lookupFdHandle(fd);
-  if (handle && handle.kind !== 'passthrough') {
-    return WASI_ERRNO_BADF;
-  }
-
-  if (handle?.kind === 'passthrough') {
-    return delegateManagedFdFdstatSetFlags
-      ? delegateManagedFdFdstatSetFlags(handle.targetFd, flags)
-      : WASI_ERRNO_BADF;
-  }
-
-  if (rejectClosedPassthroughFd(fd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  return delegateManagedFdFdstatSetFlags
-    ? delegateManagedFdFdstatSetFlags(fd, flags)
-    : WASI_ERRNO_BADF;
-};
-
-wasiImport.fd_filestat_get = (fd, statPtr) => {
-  const handle = lookupFdHandle(fd);
-  if (handle?.kind === 'guest-file') {
-    try {
-      return writeGuestFilestat(statPtr, fsModule.fstatSync(handle.targetFd));
-    } catch (error) {
-      return mapSyntheticFsError(error);
-    }
-  }
-
-  if (handle?.kind === 'passthrough') {
-    if (typeof handle.ioFd === 'number') {
-      try {
-        return writeGuestFilestat(statPtr, fsModule.fstatSync(handle.ioFd));
-      } catch (error) {
-        return mapSyntheticFsError(error);
-      }
-    }
-    return delegateManagedFdFilestatGet
-      ? delegateManagedFdFilestatGet(handle.targetFd, statPtr)
-      : WASI_ERRNO_BADF;
-  }
-
-  if (rejectClosedPassthroughFd(fd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  return delegateManagedFdFilestatGet
-    ? delegateManagedFdFilestatGet(fd, statPtr)
-    : WASI_ERRNO_BADF;
-};
-
-wasiImport.fd_filestat_set_size = (fd, size) => {
-  const handle = lookupFdHandle(fd);
-  if (handle?.kind === 'guest-file') {
-    try {
-      const nextSize = Number(size);
-      fsModule.ftruncateSync(handle.targetFd, nextSize);
-      if ((handle.position ?? 0) > nextSize) {
-        handle.position = nextSize;
-      }
-      rememberHostFsSize(handle.guestPath, nextSize);
-      return WASI_ERRNO_SUCCESS;
-    } catch (error) {
-      return mapSyntheticFsError(error);
-    }
-  }
-
-  if (handle?.kind === 'passthrough') {
-    if (handle.readOnly === true) {
-      return WASI_ERRNO_ROFS;
-    }
-    if (typeof handle.ioFd === 'number') {
-      try {
-        const nextSize = Number(size);
-        fsModule.ftruncateSync(handle.ioFd, nextSize);
-        if ((handle.position ?? 0) > nextSize) {
-          handle.position = nextSize;
-        }
-        rememberHostFsSize(handle.guestPath, nextSize);
-        return WASI_ERRNO_SUCCESS;
-      } catch (error) {
-        return mapSyntheticFsError(error);
-      }
-    }
-    if (typeof handle.guestPath === 'string') {
-      try {
-        const nextSize = Number(size);
-        const pathFd = fsModule.openSync(handle.guestPath, 0o1, 0o666);
-        try {
-          fsModule.ftruncateSync(pathFd, nextSize);
-          if ((handle.position ?? 0) > nextSize) {
-            handle.position = nextSize;
-          }
-          rememberHostFsSize(handle.guestPath, nextSize);
-        } finally {
-          fsModule.closeSync(pathFd);
-        }
-        return WASI_ERRNO_SUCCESS;
-      } catch (error) {
-        return mapSyntheticFsError(error);
-      }
-    }
-    return delegateManagedFdFilestatSetSize
-      ? delegateManagedFdFilestatSetSize(handle.targetFd, size)
-      : WASI_ERRNO_BADF;
-  }
-
-  if (rejectClosedPassthroughFd(fd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  return delegateManagedFdFilestatSetSize
-    ? delegateManagedFdFilestatSetSize(fd, size)
-    : WASI_ERRNO_BADF;
-};
-
-wasiImport.fd_prestat_get = (fd, prestatPtr) => {
-  const handle = lookupFdHandle(fd);
-  if (handle && handle.kind !== 'passthrough') {
-    return WASI_ERRNO_BADF;
-  }
-
-  if (handle?.kind === 'passthrough') {
-    return delegateManagedFdPrestatGet
-      ? delegateManagedFdPrestatGet(handle.targetFd, prestatPtr)
-      : WASI_ERRNO_BADF;
-  }
-
-  if (rejectClosedPassthroughFd(fd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  return delegateManagedFdPrestatGet
-    ? delegateManagedFdPrestatGet(fd, prestatPtr)
-    : WASI_ERRNO_BADF;
-};
-
-wasiImport.fd_prestat_dir_name = (fd, pathPtr, pathLen) => {
-  const handle = lookupFdHandle(fd);
-  if (handle && handle.kind !== 'passthrough') {
-    return WASI_ERRNO_BADF;
-  }
-
-  if (handle?.kind === 'passthrough') {
-    return delegateManagedFdPrestatDirName
-      ? delegateManagedFdPrestatDirName(handle.targetFd, pathPtr, pathLen)
-      : WASI_ERRNO_BADF;
-  }
-
-  if (rejectClosedPassthroughFd(fd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  return delegateManagedFdPrestatDirName
-    ? delegateManagedFdPrestatDirName(fd, pathPtr, pathLen)
-    : WASI_ERRNO_BADF;
-};
-
-wasiImport.fd_write = (fd, iovs, iovsLen, nwrittenPtr) => {
-  const handle = __agentOSWasiMeasurePhase('fd_write', 'lookup_handle', () =>
-    lookupFdHandle(fd)
-  );
-  const numericFd = Number(fd) >>> 0;
-  if (handle?.kind === 'pipe-write') {
-    try {
-      const bytes = __agentOSWasiMeasurePhase('fd_write', 'guest_iov_collect', () =>
-        collectGuestIovBytes(iovs, iovsLen)
-      );
-      if (bytes.length > 0 && !pipeHasReaders(handle.pipe)) {
-        return WASI_ERRNO_PIPE;
-      }
-      __agentOSWasiMeasurePhase('fd_write', 'host_io', () => {
-        enqueuePipeBytes(handle.pipe, bytes);
-        flushPipeConsumers(handle.pipe);
-      });
-      return __agentOSWasiMeasurePhase('fd_write', 'result_marshal', () =>
-        writeGuestUint32(nwrittenPtr, bytes.length)
-      );
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  }
-
-  if (handle?.kind === 'guest-file') {
-    try {
-      const bytes = __agentOSWasiMeasurePhase('fd_write', 'guest_iov_collect', () =>
-        collectGuestIovBytes(iovs, iovsLen)
-      );
-      const written = __agentOSWasiMeasurePhase('fd_write', 'host_io', () =>
-        writeBytesToGuestFileHandle(handle, bytes)
-      );
-      return __agentOSWasiMeasurePhase('fd_write', 'result_marshal', () =>
-        writeGuestUint32(nwrittenPtr, written)
-      );
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  }
-
-  if (numericFd === 1 || numericFd === 2) {
-    try {
-      const bytes = __agentOSWasiMeasurePhase('fd_write', 'guest_iov_collect', () =>
-        collectGuestIovBytes(iovs, iovsLen)
-      );
-      const sidecarManagedProcess =
-        typeof process?.env?.AGENTOS_SANDBOX_ROOT === 'string' &&
-        process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-      if (sidecarManagedProcess || KERNEL_STDIO_SYNC_RPC) {
-        const written = __agentOSWasiMeasurePhase('fd_write', 'sync_rpc', () =>
-          Number(callSyncRpc('__kernel_stdio_write', [numericFd, bytes])) >>> 0
-        );
-        return __agentOSWasiMeasurePhase('fd_write', 'result_marshal', () =>
-          writeGuestUint32(nwrittenPtr, written)
-        );
-      }
-      __agentOSWasiMeasurePhase('fd_write', 'host_io', () =>
-        (numericFd === 1 ? process.stdout : process.stderr).write(bytes)
-      );
-      return __agentOSWasiMeasurePhase('fd_write', 'result_marshal', () =>
-        writeGuestUint32(nwrittenPtr, bytes.length)
-      );
-    } catch {
-      return WASI_ERRNO_FAULT;
-    }
-  }
-
-  if (handle?.kind === 'passthrough') {
-    if (handle.readOnly === true) {
-      return WASI_ERRNO_ROFS;
-    }
-    if (typeof handle.ioFd === 'number') {
-      try {
-        const bytes = __agentOSWasiMeasurePhase('fd_write', 'guest_iov_collect', () =>
-          collectGuestIovBytes(iovs, iovsLen)
-        );
-        const written = __agentOSWasiMeasurePhase('fd_write', 'host_io', () =>
-          writeBytesToGuestFileHandle({ ...handle, targetFd: handle.ioFd }, bytes)
-        );
-        if (handle.append) {
-          handle.position = Number(fsModule.fstatSync(handle.ioFd).size ?? 0);
-        } else {
-          handle.position = (handle.position ?? 0) + written;
-        }
-        // The write grew/changed the file; a size remembered from a prior
-        // truncate is now stale. Drop it so fd_size/path_size fall through to
-        // the authoritative fstat rather than reporting the old length.
-        forgetHostFsSize(handle.guestPath);
-        return __agentOSWasiMeasurePhase('fd_write', 'result_marshal', () =>
-          writeGuestUint32(nwrittenPtr, written)
-        );
-      } catch (error) {
-        return mapSyntheticFsError(error);
-      }
-    }
-    return delegateManagedFdWrite
-      ? __agentOSWasiMeasurePhase('fd_write', 'delegate_call', () =>
-          delegateManagedFdWrite(handle.targetFd, iovs, iovsLen, nwrittenPtr)
-        )
-      : WASI_ERRNO_BADF;
-  }
-
-  if (!handle && numericFd <= 2) {
-    return WASI_ERRNO_BADF;
-  }
-
-  if (rejectClosedPassthroughFd(fd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  return delegateManagedFdWrite
-    ? __agentOSWasiMeasurePhase('fd_write', 'delegate_call', () =>
-        delegateManagedFdWrite(fd, iovs, iovsLen, nwrittenPtr)
-      )
-    : WASI_ERRNO_BADF;
-};
-
-wasiImport.fd_close = (fd) => {
-  traceHostProcess('fd-close-begin', {
-    fd: Number(fd) >>> 0,
-    syntheticKind: syntheticFdEntries.get(Number(fd) >>> 0)?.kind ?? null,
-    passthroughKind: passthroughHandles.get(Number(fd) >>> 0)?.kind ?? null,
-  });
-  if (__agentOSWasiMeasurePhase('fd_close', 'synthetic_close', () => closeSyntheticFd(fd))) {
-    traceHostProcess('fd-close-synthetic', { fd: Number(fd) >>> 0 });
-    return WASI_ERRNO_SUCCESS;
-  }
-
-  const handle = __agentOSWasiMeasurePhase('fd_close', 'lookup_handle', () =>
-    lookupFdHandle(fd)
-  );
-  if (handle?.kind === 'passthrough') {
-    traceHostProcess('fd-close-passthrough', {
-      fd: Number(fd) >>> 0,
-      targetFd: handle.targetFd ?? null,
-    });
-    __agentOSWasiMeasurePhase('fd_close', 'fd_bookkeeping', () => closePassthroughFd(fd));
-    return WASI_ERRNO_SUCCESS;
-  }
-
-  if (!handle && Number(fd) >>> 0 <= 2) {
-    return WASI_ERRNO_BADF;
-  }
-
-  if (rejectClosedPassthroughFd(fd)) {
-    return WASI_ERRNO_BADF;
-  }
-
-  if (delegateManagedFdRefCounts.has(Number(fd) >>> 0)) {
-    const shouldDelegateClose = __agentOSWasiMeasurePhase('fd_close', 'fd_bookkeeping', () =>
-      releaseDelegateFd(fd)
-    );
-    traceHostProcess('fd-close-delegate-tracked', {
-      fd: Number(fd) >>> 0,
-      shouldDelegateClose,
-      remainingRefs: delegateManagedFdRefCounts.get(Number(fd) >>> 0) ?? 0,
-    });
-    if (!shouldDelegateClose) {
-      return WASI_ERRNO_SUCCESS;
-    }
-    passthroughHandles.delete(Number(fd) >>> 0);
-  }
-
-  traceHostProcess('fd-close-delegate', { fd: Number(fd) >>> 0 });
-  return delegateManagedFdClose
-    ? __agentOSWasiMeasurePhase('fd_close', 'delegate_call', () =>
-        delegateManagedFdClose(fd)
-      )
-    : WASI_ERRNO_BADF;
-};
-
-wasiImport.poll_oneoff = (inPtr, outPtr, nsubscriptions, neventsPtr) => {
-  if (!(instanceMemory instanceof WebAssembly.Memory)) {
-    return delegateManagedPollOneoff
-      ? delegateManagedPollOneoff(inPtr, outPtr, nsubscriptions, neventsPtr)
-      : WASI_ERRNO_FAULT;
-  }
-
-  const subscriptionCount = Number(nsubscriptions) >>> 0;
-  if (subscriptionCount === 0) {
-    return writeGuestUint32(neventsPtr, 0);
-  }
-
-  const subscriptionSize = 48;
-  const eventSize = 32;
-  const view = new DataView(instanceMemory.buffer);
-  const memory = new Uint8Array(instanceMemory.buffer);
-  const subscriptions = [];
-  let hasSyntheticSubscription = false;
-  let hasRemappedPassthroughSubscription = false;
-  const sidecarManagedProcess =
-    typeof process?.env?.AGENTOS_SANDBOX_ROOT === 'string' &&
-    process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-  let timeoutMs = null;
-
-  for (let index = 0; index < subscriptionCount; index += 1) {
-    const base = (Number(inPtr) >>> 0) + index * subscriptionSize;
-    const tag = view.getUint8(base + 8);
-    const userdata = memory.slice(base, base + 8);
-    if (tag === 0) {
-      const timeoutNs = view.getBigUint64(base + 24, true);
-      const relativeTimeoutMs = Number(timeoutNs / 1000000n);
-      timeoutMs =
-        timeoutMs == null ? relativeTimeoutMs : Math.min(timeoutMs, relativeTimeoutMs);
-      subscriptions.push({ kind: 'clock', userdata });
-      continue;
-    }
-
-    if (tag !== 1 && tag !== 2) {
-      subscriptions.push({ kind: 'unsupported', userdata });
-      continue;
-    }
-
-    const fd = view.getUint32(base + 16, true);
-    const handle = lookupFdHandle(fd);
-    if (!handle && rejectClosedPassthroughFd(fd)) {
-      hasSyntheticSubscription = true;
-      subscriptions.push({
-        kind: tag === 1 ? 'fd_read' : 'fd_write',
-        fd,
-        handle,
-        userdata,
-        error: WASI_ERRNO_BADF,
-      });
-      continue;
-    }
-    if (handle && handle.kind !== 'passthrough') {
-      hasSyntheticSubscription = true;
-    } else if (handle?.kind === 'passthrough') {
-      const targetFd = Number(handle.targetFd) >>> 0;
-      if (
-        targetFd !== fd ||
-        (fd === 0 && (sidecarManagedProcess || KERNEL_STDIO_SYNC_RPC))
-      ) {
-        hasRemappedPassthroughSubscription = true;
-      }
-    } else if (!handle && fd <= 2 && (sidecarManagedProcess || KERNEL_STDIO_SYNC_RPC)) {
-      // Kernel-managed stdio with no local handle: fd 0/1/2 map straight to
-      // the kernel PTY/pipes, so readiness must come from __kernel_poll — the
-      // delegate's fds are the runner process's own stdio and never fire for
-      // guest terminal input (vim's RealWaitForChar polls fd 0 this way).
-      hasRemappedPassthroughSubscription = true;
-    }
-    subscriptions.push({
-      kind: tag === 1 ? 'fd_read' : 'fd_write',
-      fd,
-      handle,
-      userdata,
-    });
-  }
-
-  if (!hasSyntheticSubscription && !hasRemappedPassthroughSubscription) {
-    return delegateManagedPollOneoff
-      ? delegateManagedPollOneoff(inPtr, outPtr, nsubscriptions, neventsPtr)
-      : WASI_ERRNO_BADF;
-  }
-
-  const deadline = timeoutMs == null ? null : Date.now() + Math.max(0, timeoutMs);
-  const readyEvents = [];
-
-  function collectKernelReadyEvents(waitMs) {
-    if (!hasRemappedPassthroughSubscription) {
-      return [];
-    }
-
-    const kernelPollFdFor = (subscription) => {
-      if (subscription.kind !== 'fd_read' && subscription.kind !== 'fd_write') {
-        return null;
-      }
-      const fd = Number(subscription.fd) >>> 0;
-      if (subscription.handle?.kind === 'passthrough') {
-        const targetFd = Number(subscription.handle.targetFd) >>> 0;
-        if (targetFd !== fd || (fd === 0 && (sidecarManagedProcess || KERNEL_STDIO_SYNC_RPC))) {
-          return targetFd;
-        }
-        return null;
-      }
-      if (!subscription.handle && fd <= 2 && (sidecarManagedProcess || KERNEL_STDIO_SYNC_RPC)) {
-        return fd;
-      }
-      return null;
-    };
-    const pollTargets = subscriptions
-      .filter((subscription) => kernelPollFdFor(subscription) != null)
-      .map((subscription) => ({
-        fd: kernelPollFdFor(subscription),
-        events: subscription.kind === 'fd_read' ? KERNEL_POLLIN : KERNEL_POLLOUT,
-      }));
-    if (pollTargets.length === 0) {
-      return [];
-    }
-
-    let response;
-    try {
-      response = callSyncRpc('__kernel_poll', [
-        pollTargets,
-        Math.max(0, Number(waitMs) >>> 0),
-      ]);
-    } catch {
-      return [];
-    }
-
-    const responseEntries = Array.isArray(response?.fds) ? response.fds : [];
-    const ready = [];
-    for (const subscription of subscriptions) {
-      const kernelFd = kernelPollFdFor(subscription);
-      if (kernelFd == null) {
-        continue;
-      }
-
-      const targetFd = kernelFd;
-      const responseEntry = responseEntries.find(
-        (entry) => (Number(entry?.fd) >>> 0) === targetFd
-      );
-      const revents = Number(responseEntry?.revents) >>> 0;
-      const interested =
-        subscription.kind === 'fd_read'
-          ? KERNEL_POLLIN | KERNEL_POLLERR | KERNEL_POLLHUP
-          : KERNEL_POLLOUT | KERNEL_POLLERR | KERNEL_POLLHUP;
-      if ((revents & interested) === 0) {
-        continue;
-      }
-
-      ready.push({
-        userdata: subscription.userdata,
-        error: WASI_ERRNO_SUCCESS,
-        type: subscription.kind === 'fd_read' ? 1 : 2,
-        nbytes: subscription.kind === 'fd_read' ? 1 : 65536,
-        flags: 0,
-      });
-    }
-    return ready;
-  }
-
-  while (readyEvents.length === 0) {
-    for (const subscription of subscriptions) {
-      if (subscription.error != null) {
-        readyEvents.push({
-          userdata: subscription.userdata,
-          error: subscription.error,
-          type: subscription.kind === 'fd_read' ? 1 : 2,
-          nbytes: 0,
-          flags: 0,
-        });
-        continue;
-      }
-
-      if (subscription.kind === 'fd_read' && subscription.handle?.kind === 'pipe-read') {
-        const pipe = subscription.handle.pipe;
-        if (pipe.chunks.length > 0 || (pipe.writeHandleCount === 0 && pipe.producers.size === 0)) {
-          readyEvents.push({
-            userdata: subscription.userdata,
-            error: WASI_ERRNO_SUCCESS,
-            type: 1,
-            nbytes: pipe.chunks[0]?.length ?? 0,
-            flags: 0,
-          });
-        }
-        continue;
-      }
-
-      if (subscription.kind === 'fd_write' && subscription.handle?.kind === 'pipe-write') {
-        readyEvents.push({
-          userdata: subscription.userdata,
-          error: WASI_ERRNO_SUCCESS,
-          type: 2,
-          nbytes: 65536,
-          flags: 0,
-        });
-        continue;
-      }
-    }
-
-    if (readyEvents.length > 0) {
-      break;
-    }
-
-    if (hasRemappedPassthroughSubscription) {
-      // Kernel fds wait event-driven in the sidecar (parked RPC), so the slice
-      // can be long. Synthetic (pipe) subscriptions still need short local
-      // pumping, so only use the long slice when every subscription is
-      // kernel-backed.
-      const kernelWaitMs = hasSyntheticSubscription
-        ? deadline == null
-          ? 10
-          : Math.max(0, Math.min(10, deadline - Date.now()))
-        : deadline == null
-          ? KERNEL_WAIT_SLICE_MS
-          : Math.max(0, Math.min(KERNEL_WAIT_SLICE_MS, deadline - Date.now()));
-      readyEvents.push(...collectKernelReadyEvents(kernelWaitMs));
-      if (readyEvents.length > 0) {
-        break;
-      }
-    }
-
-    let pumped = false;
-    for (const subscription of subscriptions) {
-      if (subscription.kind === 'fd_read' && subscription.handle?.kind === 'pipe-read') {
-        pumped = pumpPipeProducers(subscription.handle.pipe, 10) || pumped;
-      }
-    }
-
-    if (pumped) {
-      continue;
-    }
-
-    if (deadline != null && Date.now() >= deadline) {
-      break;
-    }
-
-    Atomics.wait(
-      syntheticWaitArray,
-      0,
-      0,
-      deadline == null ? 10 : Math.max(0, Math.min(10, deadline - Date.now())),
-    );
-  }
-
-  if (readyEvents.length === 0 && subscriptions.some((subscription) => subscription.kind === 'clock')) {
-    const clockSubscription = subscriptions.find((subscription) => subscription.kind === 'clock');
-    readyEvents.push({
-      userdata: clockSubscription.userdata,
-      error: WASI_ERRNO_SUCCESS,
-      type: 0,
-      nbytes: 0,
-      flags: 0,
-    });
-  }
-
-  for (let index = 0; index < readyEvents.length; index += 1) {
-    const base = (Number(outPtr) >>> 0) + index * eventSize;
-    const event = readyEvents[index];
-    memory.set(event.userdata, base);
-    view.setUint16(base + 8, event.error, true);
-    view.setUint8(base + 10, event.type);
-    view.setBigUint64(base + 16, BigInt(event.nbytes), true);
-    view.setUint16(base + 24, event.flags, true);
-  }
-
-  return writeGuestUint32(neventsPtr, readyEvents.length);
-};
-
-// Terminal event source for crossterm-based guests (brush shell, reedline).
-// The patched crossterm WasiEventSource reads keystrokes through this import:
-//   read(ptr, len, timeout_ms) -> usize
-// It performs a timed read of the guest's stdin (the kernel PTY/pipe) and copies
-// the bytes into guest memory, returning the count (0 on timeout / EOF). usize::MAX
-// (-1 as i32) means block until input. Backed by the same __kernel_stdin_read RPC
-// the wasi fd_read path uses, so it works identically under native and browser.
-const hostTtyImport = {
-  // Long event-driven waits: the sidecar parks __kernel_stdin_read and replies
-  // when the PTY becomes readable (reply-by-token), so a host->guest write the
-  // caller is waiting for (e.g. the CPR reply to crossterm's cursor-position
-  // query) lands immediately — no polling slices, no self-deadlock.
-  read(ptr, len, timeoutMs) {
-    const cap = Number(len) >>> 0;
-    if (cap === 0) return 0;
-    const blocking = (timeoutMs >>> 0) === 0xffffffff;
-    const deadline = blocking ? Infinity : Date.now() + (Number(timeoutMs) >>> 0);
-    while (true) {
-      const remaining = deadline - Date.now();
-      if (remaining <= 0) return 0;
-      const response = callSyncRpc('__kernel_stdin_read', [
-        cap,
-        Math.min(remaining, KERNEL_WAIT_SLICE_MS),
-      ]);
-      if (response && typeof response.dataBase64 === 'string') {
-        const bytes = Buffer.from(response.dataBase64, 'base64');
-        const n = Math.min(bytes.length, cap);
-        if (n > 0) {
-          new Uint8Array(instanceMemory.buffer).set(bytes.subarray(0, n), ptr >>> 0);
-          return n;
-        }
-      }
-      if (response && response.done === true) return 0;
-    }
-  },
-  // `host_tty.isatty(fd)` -> 1 if the guest fd is a kernel PTY, else 0.
-  isatty(fd) {
-    const descriptor = Number(fd) >>> 0;
-    return descriptor <= 2 && stdioFdIsKernelTty(descriptor) ? 1 : 0;
-  },
-  // `host_tty.get_size(fd, colsPtr, rowsPtr)` -> writes the PTY window size as two
-  // little-endian u16s and returns 0; non-zero (ENOTTY) if fd is not a PTY.
-  get_size(fd, colsPtr, rowsPtr) {
-    const size = callSyncRpc('__kernel_tty_size', [fd >>> 0]);
-    if (!size || typeof size.cols !== 'number' || typeof size.rows !== 'number') {
-      return 25; // ENOTTY
-    }
-    const view = new DataView(instanceMemory.buffer);
-    view.setUint16(colsPtr >>> 0, size.cols & 0xffff, true);
-    view.setUint16(rowsPtr >>> 0, size.rows & 0xffff, true);
-    return 0;
-  },
-  // Toggle terminal raw mode on the guest's PTY. crossterm/pty_probe/vim call this
-  // instead of tcsetattr; route it to the kernel so the guest gets raw keystrokes.
-  set_raw_mode(enabled) {
-    if (!stdioFdIsKernelTty(0)) {
-      return 25; // ENOTTY
-    }
-    callSyncRpc('__pty_set_raw_mode', [(enabled >>> 0) !== 0]);
-    return 0;
-  },
-};
-
-function __agentOSWasiWrapImport(name, delegate) {
-  if (!__agentOSWasiSyscallPhasesEnabled || typeof delegate !== 'function') {
-    return delegate;
-  }
-  return (...args) => {
-    const startedNs = __agentOSWasmNowNs();
-    try {
-      return delegate(...args);
-    } finally {
-      __agentOSWasiRecordSyscall(name, startedNs);
-    }
-  };
-}
-
-if (__agentOSWasiSyscallPhasesEnabled) {
-  for (const [name, delegate] of Object.entries(wasiImport)) {
-    if (typeof delegate === 'function') {
-      wasiImport[name] = __agentOSWasiWrapImport(name, delegate.bind(wasiImport));
-    }
-  }
-}
-
-const instance = __agentOSWasmMeasurePhase('WebAssembly.Instance', () => new WebAssembly.Instance(module, {
-  wasi_snapshot_preview1: wasiImport,
-  wasi_unstable: wasiImport,
-  host_tty: hostTtyImport,
-  // Read-write commands like DuckDB need fd_dup_min from the patched
-  // wasi-libc surface, but broader host_process capabilities stay
-  // reserved for the full tier.
-  host_process:
-    permissionTier === 'full'
-      ? hostProcessImport
-      : permissionTier === 'isolated'
-        ? undefined
-        : limitedHostProcessImport,
-  host_net: permissionTier === 'full' ? hostNetImport : undefined,
-  host_user: hostUserImport,
-  host_fs: hostFsImport,
-}));
-
-if (instance.exports.memory instanceof WebAssembly.Memory) {
-  instanceMemory = instance.exports.memory;
-}
-
-function dispatchWasmSignal(signal) {
-  const numeric = Number(signal) | 0;
-  if (
-    numeric > 0 &&
-    typeof instance?.exports?.__wasi_signal_trampoline === 'function'
-  ) {
-    instance.exports.__wasi_signal_trampoline(numeric);
-  }
-}
-
-Object.defineProperty(globalThis, '__secureExecWasmSignalDispatch', {
-  configurable: true,
-  writable: true,
-  value: (_eventType, payload) => {
-    const signal =
-      typeof payload?.number === 'number'
-        ? payload.number
-        : signalNumberFromName(payload?.signal);
-    dispatchWasmSignal(signal);
-  },
-});
-
-if (typeof instance.exports._start === 'function') {
-  // The `RuntimeError: unreachable` reports that used to point at
-  // `WASI.start()` were caused by the host shim around guest startup, not by
-  // V8 itself. Standalone runs must keep ordinary stdio on local process
-  // streams unless kernel stdio sync-RPC is explicitly enabled, while
-  // `poll_oneoff` still routes readiness probes through `__kernel_poll`.
-  // That preserves the expected startup ordering so guest `_start` checks can
-  // observe the ready event before we exit the runner.
-  let exitCode;
-  try {
-    exitCode = __agentOSWasmMeasurePhase('wasi.start', () => wasi.start(instance));
-  } catch (error) {
-    __agentOSWasmEmitPhaseMetrics('wasi.start.error', {
-      error: error && typeof error === 'object' && 'message' in error ? String(error.message) : String(error),
-    });
-    if (maxStackBytes !== null && isWasmStackExhaustionTrap(error)) {
-      reportConfiguredStackLimitExceeded(error);
-      process.exit(1);
-    }
-    throw error;
-  }
-  __agentOSWasmEmitPhaseMetrics('complete', { exitCode });
-  process.exit(typeof exitCode === 'number' ? exitCode : 0);
-} else if (typeof instance.exports.run === 'function') {
-  const result = await instance.exports.run();
-  if (typeof result !== 'undefined') {
-    console.log(String(result));
-  }
-} else {
-  throw new Error('WebAssembly module must export _start or run');
-}
diff --git a/crates/execution/assets/undici-shims/async_hooks.js b/crates/execution/assets/undici-shims/async_hooks.js
deleted file mode 100644
index 5cf4ad48e..000000000
--- a/crates/execution/assets/undici-shims/async_hooks.js
+++ /dev/null
@@ -1,94 +0,0 @@
-"use strict";
-
-class AsyncLocalStorage {
-	constructor() {
-		this._enabled = false;
-		this._store = undefined;
-	}
-
-	disable() {
-		this._enabled = false;
-		this._store = undefined;
-	}
-
-	enterWith(store) {
-		this._enabled = true;
-		this._store = store;
-	}
-
-	exit(callback, ...args) {
-		const previousEnabled = this._enabled;
-		const previousStore = this._store;
-		this._enabled = false;
-		this._store = undefined;
-		try {
-			return callback(...args);
-		} finally {
-			this._enabled = previousEnabled;
-			this._store = previousStore;
-		}
-	}
-
-	getStore() {
-		return this._enabled ? this._store : undefined;
-	}
-
-	run(store, callback, ...args) {
-		const previousEnabled = this._enabled;
-		const previousStore = this._store;
-		this._enabled = true;
-		this._store = store;
-		try {
-			return callback(...args);
-		} finally {
-			this._enabled = previousEnabled;
-			this._store = previousStore;
-		}
-	}
-}
-
-class AsyncResource {
-	constructor(type = "SecureExecAsyncResource") {
-		this.type = type;
-	}
-
-	bind(fn, thisArg = undefined) {
-		if (typeof fn !== "function") {
-			return fn;
-		}
-		return (...args) => this.runInAsyncScope(fn, thisArg ?? this, ...args);
-	}
-
-	emitDestroy() {}
-
-	runInAsyncScope(fn, thisArg, ...args) {
-		return fn.apply(thisArg, args);
-	}
-}
-
-function createHook() {
-	return {
-		enable() {
-			return this;
-		},
-		disable() {
-			return this;
-		},
-	};
-}
-
-function executionAsyncId() {
-	return 0;
-}
-
-function triggerAsyncId() {
-	return 0;
-}
-
-module.exports = {
-	AsyncLocalStorage,
-	AsyncResource,
-	createHook,
-	executionAsyncId,
-	triggerAsyncId,
-};
diff --git a/crates/execution/assets/undici-shims/diagnostics_channel.js b/crates/execution/assets/undici-shims/diagnostics_channel.js
deleted file mode 100644
index 1ef5516fd..000000000
--- a/crates/execution/assets/undici-shims/diagnostics_channel.js
+++ /dev/null
@@ -1,59 +0,0 @@
-"use strict";
-
-const subscribers = new Map();
-const channels = new Map();
-
-function ensureSubscribers(name) {
-	let list = subscribers.get(name);
-	if (!list) {
-		list = new Set();
-		subscribers.set(name, list);
-	}
-	return list;
-}
-
-function createChannel(name) {
-	return {
-		name,
-		get hasSubscribers() {
-			return ensureSubscribers(name).size > 0;
-		},
-		publish(message) {
-			for (const subscriber of ensureSubscribers(name)) {
-				subscriber(message, name);
-			}
-		},
-		subscribe(onMessage) {
-			ensureSubscribers(name).add(onMessage);
-			return this;
-		},
-		unsubscribe(onMessage) {
-			ensureSubscribers(name).delete(onMessage);
-			return this;
-		},
-	};
-}
-
-function channel(name) {
-	if (!channels.has(name)) {
-		channels.set(name, createChannel(name));
-	}
-	return channels.get(name);
-}
-
-function subscribe(name, onMessage) {
-	channel(name).subscribe(onMessage);
-}
-
-function unsubscribe(name, onMessage) {
-	channel(name).unsubscribe(onMessage);
-}
-
-module.exports = {
-	channel,
-	hasSubscribers(name) {
-		return channel(name).hasSubscribers;
-	},
-	subscribe,
-	unsubscribe,
-};
diff --git a/crates/execution/assets/undici-shims/dns-promises.js b/crates/execution/assets/undici-shims/dns-promises.js
deleted file mode 100644
index 05461fe55..000000000
--- a/crates/execution/assets/undici-shims/dns-promises.js
+++ /dev/null
@@ -1,37 +0,0 @@
-"use strict";
-
-function getDnsPromisesModule() {
-	const mod = globalThis._dnsModule?.promises;
-	if (!mod) {
-		throw new Error("node:dns/promises bridge module is not available");
-	}
-	return mod;
-}
-
-const exported = {};
-for (const key of [
-	"Resolver",
-	"lookup",
-	"resolve",
-	"resolve4",
-	"resolve6",
-	"resolveAny",
-	"resolveMx",
-	"resolveTxt",
-	"resolveSrv",
-	"resolveCname",
-	"resolvePtr",
-	"resolveNs",
-	"resolveSoa",
-	"resolveNaptr",
-	"resolveCaa",
-]) {
-	Object.defineProperty(exported, key, {
-		enumerable: true,
-		get() {
-			return getDnsPromisesModule()[key];
-		},
-	});
-}
-
-module.exports = exported;
diff --git a/crates/execution/assets/undici-shims/dns.js b/crates/execution/assets/undici-shims/dns.js
deleted file mode 100644
index 9646ccd24..000000000
--- a/crates/execution/assets/undici-shims/dns.js
+++ /dev/null
@@ -1,48 +0,0 @@
-"use strict";
-
-function getDnsModule() {
-	const mod = globalThis._dnsModule;
-	if (!mod) {
-		throw new Error("node:dns bridge module is not available");
-	}
-	return mod;
-}
-
-const exported = {};
-for (const key of [
-	"ADDRCONFIG",
-	"ALL",
-	"Resolver",
-	"V4MAPPED",
-	"constants",
-	"getDefaultResultOrder",
-	"getServers",
-	"lookup",
-	"lookupService",
-	"promises",
-	"resolve",
-	"resolve4",
-	"resolve6",
-	"resolveAny",
-	"resolveMx",
-	"resolveTxt",
-	"resolveSrv",
-	"resolveCname",
-	"resolvePtr",
-	"resolveNs",
-	"resolveSoa",
-	"resolveNaptr",
-	"resolveCaa",
-	"reverse",
-	"setDefaultResultOrder",
-	"setServers",
-]) {
-	Object.defineProperty(exported, key, {
-		enumerable: true,
-		get() {
-			return getDnsModule()[key];
-		},
-	});
-}
-
-module.exports = exported;
diff --git a/crates/execution/assets/undici-shims/http.js b/crates/execution/assets/undici-shims/http.js
deleted file mode 100644
index 245cea8f6..000000000
--- a/crates/execution/assets/undici-shims/http.js
+++ /dev/null
@@ -1,76 +0,0 @@
-"use strict";
-
-function getHttpModule() {
-	if (!globalThis._httpModule) {
-		throw new Error("node:http bridge module is not available");
-	}
-	return globalThis._httpModule;
-}
-
-class AgentPlaceholder {}
-class ClientRequestPlaceholder {}
-class IncomingMessagePlaceholder {}
-class ServerPlaceholder {}
-class ServerResponsePlaceholder {}
-
-const METHODS = [
-	"CHECKOUT",
-	"CONNECT",
-	"COPY",
-	"DELETE",
-	"GET",
-	"HEAD",
-	"LOCK",
-	"M-SEARCH",
-	"MERGE",
-	"MKACTIVITY",
-	"MKCOL",
-	"MOVE",
-	"NOTIFY",
-	"OPTIONS",
-	"PATCH",
-	"POST",
-	"PROPFIND",
-	"PROPPATCH",
-	"PURGE",
-	"PUT",
-	"REPORT",
-	"SEARCH",
-	"SUBSCRIBE",
-	"TRACE",
-	"UNLOCK",
-	"UNSUBSCRIBE",
-];
-
-module.exports = {
-	Agent: AgentPlaceholder,
-	ClientRequest: ClientRequestPlaceholder,
-	IncomingMessage: IncomingMessagePlaceholder,
-	METHODS,
-	STATUS_CODES: {},
-	Server: ServerPlaceholder,
-	ServerResponse: ServerResponsePlaceholder,
-	_checkInvalidHeaderChar(value) {
-		return getHttpModule()._checkInvalidHeaderChar(value);
-	},
-	_checkIsHttpToken(value) {
-		return getHttpModule()._checkIsHttpToken(value);
-	},
-	createServer(...args) {
-		return getHttpModule().createServer(...args);
-	},
-	get(...args) {
-		return getHttpModule().get(...args);
-	},
-	globalAgent: new AgentPlaceholder(),
-	maxHeaderSize: 65535,
-	request(...args) {
-		return getHttpModule().request(...args);
-	},
-	validateHeaderName(name, label) {
-		return getHttpModule().validateHeaderName(name, label);
-	},
-	validateHeaderValue(name, value) {
-		return getHttpModule().validateHeaderValue(name, value);
-	},
-};
diff --git a/crates/execution/assets/undici-shims/http2.js b/crates/execution/assets/undici-shims/http2.js
deleted file mode 100644
index d6bc80355..000000000
--- a/crates/execution/assets/undici-shims/http2.js
+++ /dev/null
@@ -1,51 +0,0 @@
-"use strict";
-
-const constants = {
-  HTTP2_HEADER_METHOD: ":method",
-  HTTP2_HEADER_PATH: ":path",
-  HTTP2_HEADER_SCHEME: ":scheme",
-  HTTP2_HEADER_AUTHORITY: ":authority",
-  HTTP2_HEADER_STATUS: ":status",
-  HTTP2_HEADER_CONTENT_TYPE: "content-type",
-  HTTP2_HEADER_CONTENT_LENGTH: "content-length",
-  HTTP2_HEADER_LAST_MODIFIED: "last-modified",
-  HTTP2_HEADER_ACCEPT: "accept",
-  HTTP2_HEADER_ACCEPT_ENCODING: "accept-encoding",
-  HTTP2_METHOD_GET: "GET",
-  HTTP2_METHOD_POST: "POST",
-  HTTP2_METHOD_PUT: "PUT",
-  HTTP2_METHOD_DELETE: "DELETE",
-  DEFAULT_SETTINGS_MAX_HEADER_LIST_SIZE: 65535,
-};
-
-function notImplemented(name) {
-  const error = new Error(`node:http2 ${name} is not available in the secure-exec bridge bootstrap`);
-  error.code = "ERR_NOT_IMPLEMENTED";
-  throw error;
-}
-
-function connect() {
-  notImplemented("connect");
-}
-
-function createServer() {
-  notImplemented("createServer");
-}
-
-function createSecureServer() {
-  notImplemented("createSecureServer");
-}
-
-function getDefaultSettings() {
-  return {
-    maxHeaderListSize: constants.DEFAULT_SETTINGS_MAX_HEADER_LIST_SIZE,
-  };
-}
-
-module.exports = {
-  constants,
-  connect,
-  createServer,
-  createSecureServer,
-  getDefaultSettings,
-};
diff --git a/crates/execution/assets/undici-shims/https.js b/crates/execution/assets/undici-shims/https.js
deleted file mode 100644
index a44de62f6..000000000
--- a/crates/execution/assets/undici-shims/https.js
+++ /dev/null
@@ -1,76 +0,0 @@
-"use strict";
-
-function getHttpsModule() {
-	if (!globalThis._httpsModule) {
-		throw new Error("node:https bridge module is not available");
-	}
-	return globalThis._httpsModule;
-}
-
-class AgentPlaceholder {}
-class ClientRequestPlaceholder {}
-class IncomingMessagePlaceholder {}
-class ServerPlaceholder {}
-class ServerResponsePlaceholder {}
-
-const METHODS = [
-	"CHECKOUT",
-	"CONNECT",
-	"COPY",
-	"DELETE",
-	"GET",
-	"HEAD",
-	"LOCK",
-	"M-SEARCH",
-	"MERGE",
-	"MKACTIVITY",
-	"MKCOL",
-	"MOVE",
-	"NOTIFY",
-	"OPTIONS",
-	"PATCH",
-	"POST",
-	"PROPFIND",
-	"PROPPATCH",
-	"PURGE",
-	"PUT",
-	"REPORT",
-	"SEARCH",
-	"SUBSCRIBE",
-	"TRACE",
-	"UNLOCK",
-	"UNSUBSCRIBE",
-];
-
-module.exports = {
-	Agent: AgentPlaceholder,
-	ClientRequest: ClientRequestPlaceholder,
-	IncomingMessage: IncomingMessagePlaceholder,
-	METHODS,
-	STATUS_CODES: {},
-	Server: ServerPlaceholder,
-	ServerResponse: ServerResponsePlaceholder,
-	_checkInvalidHeaderChar(value) {
-		return getHttpsModule()._checkInvalidHeaderChar(value);
-	},
-	_checkIsHttpToken(value) {
-		return getHttpsModule()._checkIsHttpToken(value);
-	},
-	createServer(...args) {
-		return getHttpsModule().createServer(...args);
-	},
-	get(...args) {
-		return getHttpsModule().get(...args);
-	},
-	globalAgent: new AgentPlaceholder(),
-	maxHeaderSize: 65535,
-	request(...args) {
-		return getHttpsModule().request(...args);
-	},
-	validateHeaderName(name, label) {
-		return getHttpsModule().validateHeaderName(name, label);
-	},
-	validateHeaderValue(name, value) {
-		return getHttpsModule().validateHeaderValue(name, value);
-	},
-};
diff --git a/crates/execution/assets/undici-shims/net.js b/crates/execution/assets/undici-shims/net.js
deleted file mode 100644
index d988e62d3..000000000
--- a/crates/execution/assets/undici-shims/net.js
+++ /dev/null
@@ -1,37 +0,0 @@
-"use strict";
-
-function getNetModule() {
-	const mod = globalThis._netModule;
-	if (!mod) {
-		throw new Error("node:net bridge module is not available");
-	}
-	return mod;
-}
-
-const exported = {};
-for (const key of [
-	"BlockList",
-	"Socket",
-	"SocketAddress",
-	"Server",
-	"Stream",
-	"connect",
-	"createConnection",
-	"createServer",
-	"getDefaultAutoSelectFamily",
-	"getDefaultAutoSelectFamilyAttemptTimeout",
-	"isIP",
-	"isIPv4",
-	"isIPv6",
-	"setDefaultAutoSelectFamily",
-	"setDefaultAutoSelectFamilyAttemptTimeout",
-]) {
-	Object.defineProperty(exported, key, {
-		enumerable: true,
-		get() {
-			return getNetModule()[key];
-		},
-	});
-}
-
-module.exports = exported;
diff --git a/crates/execution/assets/undici-shims/package.json b/crates/execution/assets/undici-shims/package.json
deleted file mode 100644
index a0df0c867..000000000
--- a/crates/execution/assets/undici-shims/package.json
+++ /dev/null
@@ -1,3 +0,0 @@
-{
-	"type": "commonjs"
-}
diff --git a/crates/execution/assets/undici-shims/perf_hooks.js b/crates/execution/assets/undici-shims/perf_hooks.js
deleted file mode 100644
index f4b560111..000000000
--- a/crates/execution/assets/undici-shims/perf_hooks.js
+++ /dev/null
@@ -1,12 +0,0 @@
-"use strict";
-
-const performance =
-	globalThis.performance ??
-	({
-		now() {
-			return Date.now();
-		},
-		timeOrigin: Date.now(),
-	});
-
-module.exports = { performance };
diff --git a/crates/execution/assets/undici-shims/runtime-features.js b/crates/execution/assets/undici-shims/runtime-features.js
deleted file mode 100644
index 79ca08b4e..000000000
--- a/crates/execution/assets/undici-shims/runtime-features.js
+++ /dev/null
@@ -1,37 +0,0 @@
-"use strict";
-
-const knownFeatures = new Set(["crypto", "sqlite", "markAsUncloneable", "zstd"]);
-
-class RuntimeFeatures {
-  #map = new Map([
-    ["crypto", true],
-    ["sqlite", false],
-    ["markAsUncloneable", false],
-    ["zstd", false],
-  ]);
-
-  clear() {
-    this.#map.clear();
-  }
-
-  has(feature) {
-    if (!knownFeatures.has(feature)) {
-      throw new TypeError(`unknown feature: ${feature}`);
-    }
-    return this.#map.get(feature) ?? false;
-  }
-
-  set(feature, value) {
-    if (!knownFeatures.has(feature)) {
-      throw new TypeError(`unknown feature: ${feature}`);
-    }
-    this.#map.set(feature, Boolean(value));
-  }
-}
-
-const runtimeFeatures = new RuntimeFeatures();
-
-module.exports = {
-  runtimeFeatures,
-  default: runtimeFeatures,
-};
diff --git a/crates/execution/assets/undici-shims/sqlite.js b/crates/execution/assets/undici-shims/sqlite.js
deleted file mode 100644
index bd51c8332..000000000
--- a/crates/execution/assets/undici-shims/sqlite.js
+++ /dev/null
@@ -1,5 +0,0 @@
-"use strict";
-
-const error = new Error("No such built-in module: node:sqlite");
-error.code = "ERR_UNKNOWN_BUILTIN_MODULE";
-throw error;
diff --git a/crates/execution/assets/undici-shims/stream.js b/crates/execution/assets/undici-shims/stream.js
deleted file mode 100644
index 78f074f27..000000000
--- a/crates/execution/assets/undici-shims/stream.js
+++ /dev/null
@@ -1,121 +0,0 @@
-"use strict";
-
-import streamDefault, * as streamNs from "secure-exec-stream-stdlib";
-
-const baseStreamModule = streamNs.default ?? streamDefault ?? {};
-const baseFinished = streamNs.finished ?? baseStreamModule.finished;
-
-const isWebReadableStream = (stream) =>
-	Boolean(stream) &&
-	typeof stream.getReader === "function" &&
-	typeof stream.cancel === "function";
-
-const isWebWritableStream = (stream) =>
-	Boolean(stream) &&
-	typeof stream.getWriter === "function" &&
-	typeof stream.abort === "function";
-
-const normalizeStreamError = (value) => {
-	if (value instanceof Error) {
-		return value;
-	}
-	if (value == null) {
-		return new Error("stream errored");
-	}
-	return new Error(String(value));
-};
-
-export const finished = (stream, options, callback) => {
-	let normalizedOptions = options;
-	let normalizedCallback = callback;
-	if (typeof normalizedOptions === "function") {
-		normalizedCallback = normalizedOptions;
-		normalizedOptions = {};
-	}
-	if (
-		!isWebReadableStream(stream) &&
-		!isWebWritableStream(stream) &&
-		typeof baseFinished === "function"
-	) {
-		return baseFinished(stream, normalizedOptions, normalizedCallback);
-	}
-
-	const done =
-		typeof normalizedCallback === "function" ? normalizedCallback : () => {};
-	const readableEnabled = normalizedOptions?.readable !== false;
-	const writableEnabled = normalizedOptions?.writable !== false;
-	let cancelled = false;
-	let timer = null;
-
-	const cleanup = () => {
-		cancelled = true;
-		if (timer !== null) {
-			clearTimeout(timer);
-			timer = null;
-		}
-	};
-
-	const complete = (error = undefined) => {
-		if (cancelled) {
-			return;
-		}
-		cleanup();
-		queueMicrotask(() => done(error));
-	};
-
-	const poll = () => {
-		if (cancelled) {
-			return;
-		}
-		const state = stream?._state;
-		if (state === "errored") {
-			complete(normalizeStreamError(stream?._storedError));
-			return;
-		}
-		if (
-			state === "closed" ||
-			(isWebReadableStream(stream) && !readableEnabled) ||
-			(isWebWritableStream(stream) && !writableEnabled)
-		) {
-			complete();
-			return;
-		}
-		timer = setTimeout(poll, 0);
-	};
-
-	poll();
-	return cleanup;
-};
-
-export const isReadable = (stream) => {
-	if (isWebReadableStream(stream)) {
-		return stream._state === "readable";
-	}
-	return Boolean(stream) && stream.readable !== false && stream.destroyed !== true;
-};
-
-export const isErrored = (stream) => {
-	if (isWebReadableStream(stream) || isWebWritableStream(stream)) {
-		return stream?._state === "errored";
-	}
-	return stream?.errored != null;
-};
-
-export const isDisturbed = (stream) => {
-	return Boolean(
-		stream?.locked ||
-			stream?.disturbed === true ||
-			stream?._disturbed === true ||
-			stream?.readableDidRead === true,
-	);
-};
-
-export * from "secure-exec-stream-stdlib";
-
-export default {
-	...baseStreamModule,
-	finished,
-	isReadable,
-	isErrored,
-	isDisturbed,
-};
diff --git a/crates/execution/assets/undici-shims/tls.js b/crates/execution/assets/undici-shims/tls.js
deleted file mode 100644
index 8ca250b59..000000000
--- a/crates/execution/assets/undici-shims/tls.js
+++ /dev/null
@@ -1,30 +0,0 @@
-"use strict";
-
-function getTlsModule() {
-	const mod = globalThis._tlsModule;
-	if (!mod) {
-		throw new Error("node:tls bridge module is not available");
-	}
-	return mod;
-}
-
-const exported = {};
-for (const key of [
-	"connect",
-	"createServer",
-	"createSecureContext",
-	"TLSSocket",
-	"Server",
-	"checkServerIdentity",
-	"getCiphers",
-	"rootCertificates",
-]) {
-	Object.defineProperty(exported, key, {
-		enumerable: true,
-		get() {
-			return getTlsModule()[key];
-		},
-	});
-}
-
-module.exports = exported;
diff --git a/crates/execution/assets/undici-shims/util-types.js b/crates/execution/assets/undici-shims/util-types.js
deleted file mode 100644
index 5e1cc4d26..000000000
--- a/crates/execution/assets/undici-shims/util-types.js
+++ /dev/null
@@ -1,24 +0,0 @@
-"use strict";
-
-function isArrayBuffer(value) {
-	return value instanceof ArrayBuffer;
-}
-
-function isArrayBufferView(value) {
-	return ArrayBuffer.isView(value);
-}
-
-function isUint8Array(value) {
-	return value instanceof Uint8Array;
-}
-
-function isProxy(_value) {
-	return false;
-}
-
-module.exports = {
-	isArrayBuffer,
-	isArrayBufferView,
-	isProxy,
-	isUint8Array,
-};
diff --git a/crates/execution/assets/undici-shims/web-streams-global.js b/crates/execution/assets/undici-shims/web-streams-global.js
deleted file mode 100644
index ef925278b..000000000
--- a/crates/execution/assets/undici-shims/web-streams-global.js
+++ /dev/null
@@ -1,81 +0,0 @@
-"use strict";
-
-import {
-	ReadableStream as WebReadableStream,
-	WritableStream as WebWritableStream,
-	TransformStream as WebTransformStream,
-} from "web-streams-polyfill/ponyfill/es2018";
-
-class FallbackTextEncoderStream {
-	constructor() {
-		const encoder = new globalThis.TextEncoder();
-		const stream = new WebTransformStream({
-			transform(chunk, controller) {
-				controller.enqueue(encoder.encode(chunk));
-			},
-		});
-
-		this.encoding = "utf-8";
-		this.readable = stream.readable;
-		this.writable = stream.writable;
-	}
-}
-
-class FallbackTextDecoderStream {
-	constructor(label = "utf-8", options = undefined) {
-		const decoder = new globalThis.TextDecoder(label, options);
-		const stream = new WebTransformStream({
-			transform(chunk, controller) {
-				const text = decoder.decode(chunk, { stream: true });
-				if (text.length > 0) {
-					controller.enqueue(text);
-				}
-			},
-			flush(controller) {
-				const text = decoder.decode();
-				if (text.length > 0) {
-					controller.enqueue(text);
-				}
-			},
-		});
-
-		this.encoding = decoder.encoding;
-		this.fatal = decoder.fatal;
-		this.ignoreBOM = decoder.ignoreBOM;
-		this.readable = stream.readable;
-		this.writable = stream.writable;
-	}
-}
-
-const WebTextEncoderStream =
-	typeof globalThis.TextEncoderStream === "function"
-		? globalThis.TextEncoderStream
-		: FallbackTextEncoderStream;
-const WebTextDecoderStream =
-	typeof globalThis.TextDecoderStream === "function"
-		? globalThis.TextDecoderStream
-		: FallbackTextDecoderStream;
-
-if (typeof globalThis.ReadableStream === "undefined") {
-	globalThis.ReadableStream = WebReadableStream;
-}
-if (typeof globalThis.WritableStream === "undefined") {
-	globalThis.WritableStream = WebWritableStream;
-}
-if (typeof globalThis.TransformStream === "undefined") {
-	globalThis.TransformStream = WebTransformStream;
-}
-if (typeof globalThis.TextEncoderStream === "undefined") {
-	globalThis.TextEncoderStream = WebTextEncoderStream;
-}
-if (typeof globalThis.TextDecoderStream === "undefined") {
-	globalThis.TextDecoderStream = WebTextDecoderStream;
-}
-
-export {
-	WebReadableStream,
-	WebWritableStream,
-	WebTransformStream,
-	WebTextEncoderStream,
-	WebTextDecoderStream,
-};
diff --git a/crates/execution/assets/undici-shims/worker_threads.js b/crates/execution/assets/undici-shims/worker_threads.js
deleted file mode 100644
index 9a4dddfd9..000000000
--- a/crates/execution/assets/undici-shims/worker_threads.js
+++ /dev/null
@@ -1,7 +0,0 @@
-"use strict";
-
-module.exports = {
-  isMainThread: true,
-  parentPort: null,
-  workerData: null,
-};
diff --git a/crates/execution/assets/undici-shims/zlib.js b/crates/execution/assets/undici-shims/zlib.js
deleted file mode 100644
index 3af356f1b..000000000
--- a/crates/execution/assets/undici-shims/zlib.js
+++ /dev/null
@@ -1,36 +0,0 @@
-"use strict";
-
-function getZlibModule() {
-	const mod = globalThis.__secureExecBuiltinZlibModule;
-	if (!mod) {
-		throw new Error("node:zlib bridge module is not available");
-	}
-	return mod;
-}
-
-module.exports = new Proxy(
-	{},
-	{
-		get(_target, property) {
-			return getZlibModule()[property];
-		},
-		has(_target, property) {
-			return property in getZlibModule();
-		},
-		ownKeys() {
-			return Reflect.ownKeys(getZlibModule());
-		},
-		getOwnPropertyDescriptor(_target, property) {
-			const descriptor = Object.getOwnPropertyDescriptor(getZlibModule(), property);
-			if (descriptor) {
-				return descriptor;
-			}
-			return {
-				configurable: true,
-				enumerable: true,
-				value: undefined,
-				writable: false,
-			};
-		},
-	},
-);
diff --git a/crates/execution/assets/wasi-preview1-imports.json b/crates/execution/assets/wasi-preview1-imports.json
deleted file mode 100644
index 1aaaa4131..000000000
--- a/crates/execution/assets/wasi-preview1-imports.json
+++ /dev/null
@@ -1,36 +0,0 @@
-[
-  "args_get",
-  "args_sizes_get",
-  "clock_res_get",
-  "clock_time_get",
-  "environ_get",
-  "environ_sizes_get",
-  "fd_close",
-  "fd_fdstat_get",
-  "fd_fdstat_set_flags",
-  "fd_filestat_get",
-  "fd_filestat_set_size",
-  "fd_pread",
-  "fd_prestat_dir_name",
-  "fd_prestat_get",
-  "fd_pwrite",
-  "fd_read",
-  "fd_readdir",
-  "fd_seek",
-  "fd_sync",
-  "fd_tell",
-  "fd_write",
-  "path_create_directory",
-  "path_filestat_get",
-  "path_link",
-  "path_open",
-  "path_readlink",
-  "path_remove_directory",
-  "path_rename",
-  "path_symlink",
-  "path_unlink_file",
-  "poll_oneoff",
-  "proc_exit",
-  "random_get",
-  "sched_yield"
-]
diff --git a/crates/execution/benchmarks/node-import-baseline.md b/crates/execution/benchmarks/node-import-baseline.md
deleted file mode 100644
index 4a86d8817..000000000
--- a/crates/execution/benchmarks/node-import-baseline.md
+++ /dev/null
@@ -1,55 +0,0 @@
-# secure-exec Node Import Benchmark
-
-- Generated at unix ms: `1775118070728`
-- Node binary: `node`
-- Node version: `v24.13.0`
-- Host: `linux` / `x86_64` / `20` logical CPUs
-- Repo root: `/home/nathan/a5`
-- Iterations: `5` recorded, `1` warmup
-- Reproduce: `cargo run -p secure-exec-execution --bin node-import-bench -- --iterations 5 --warmup-iterations 1`
-
-| Scenario | Fixture | Cache | Mean wall (ms) | P50 | P95 | Mean import (ms) | Mean startup overhead (ms) |
-| --- | --- | --- | ---: | ---: | ---: | ---: | ---: |
-| `isolate-startup` | empty entrypoint | disabled | 17.17 | 16.11 | 20.98 | n/a | n/a |
-| `cold-local-import` | 24-module local ESM graph | disabled | 19.76 | 18.61 | 22.76 | 2.06 | 17.69 |
-| `warm-local-import` | 24-module local ESM graph | primed | 18.84 | 19.00 | 19.52 | 1.89 | 16.95 |
-| `builtin-import` | node:path + node:url + node:fs/promises | disabled | 17.89 | 17.13 | 20.14 | 0.84 | 17.05 |
-| `large-package-import` | typescript | disabled | 206.93 | 207.47 | 215.58 | 189.49 | 17.44 |
-
-## Hotspot Guidance
-
-- Compile-cache reuse cuts the local import graph from 2.06 to 1.89 on average (8.6% faster), but the warm path still spends 16.95 outside guest module evaluation. That keeps startup prewarm work in `ARC-021D` and sidecar warm-pool/snapshot work in `ARC-022` on the critical path above the `17.17` empty-isolate floor.
-- Warm local imports still spend 90.0% of wall time in process startup, wrapper evaluation, and stdio handling instead of guest import work. Optimizations that only touch module compilation will not remove that floor.
-- The large real-world package import (`typescript`) is 225.7x the builtin path (189.49 versus 0.84). That makes `ARC-021C` the right next import-path optimization story: cache sidecar-scoped resolution results, package-type lookups, and module-format classification before attempting deeper structural rewrites.
-- No new PRD stories were added from this run. The measured hotspots already map cleanly onto existing follow-ons: `ARC-021C` for safe resolution and metadata caches, `ARC-021D` for builtin/polyfill prewarm, and `ARC-022` for broader warm-pool and timing-mitigation execution work.
-
-## Raw Samples
-
-### `isolate-startup`
-- Description: Minimal guest with no extra imports. Measures the current startup floor for create-context plus node process bootstrap.
-- Wall samples (ms): [20.98, 17.24, 15.76, 15.74, 16.11]
-
-### `cold-local-import`
-- Description: Cold import of a repo-local ESM graph that simulates layered application modules without compile-cache reuse.
-- Wall samples (ms): [18.16, 18.09, 18.61, 21.16, 22.76]
-- Guest import samples (ms): [2.09, 2.03, 1.96, 2.24, 2.00]
-- Startup overhead samples (ms): [16.07, 16.06, 16.65, 18.92, 20.75]
-
-### `warm-local-import`
-- Description: Warm import of the same local ESM graph after a compile-cache priming pass in an earlier isolate.
-- Wall samples (ms): [19.00, 19.52, 19.01, 18.00, 18.65]
-- Guest import samples (ms): [1.78, 1.91, 1.87, 2.02, 1.84]
-- Startup overhead samples (ms): [17.22, 17.61, 17.14, 15.98, 16.81]
-
-### `builtin-import`
-- Description: Import of the common builtin path used by the wrappers and polyfill-adjacent bootstrap code.
-- Wall samples (ms): [20.14, 17.13, 16.58, 15.79, 19.81]
-- Guest import samples (ms): [0.85, 0.85, 0.86, 0.83, 0.82]
-- Startup overhead samples (ms): [19.29, 16.29, 15.73, 14.97, 18.99]
-
-### `large-package-import`
-- Description: Cold import of the real-world `typescript` package from the workspace root `node_modules` tree.
-- Wall samples (ms): [207.96, 203.42, 215.58, 200.22, 207.47]
-- Guest import samples (ms): [190.64, 186.51, 198.01, 182.53, 189.76]
-- Startup overhead samples (ms): [17.32, 16.91, 17.57, 17.69, 17.71]
-
diff --git a/crates/execution/build.rs b/crates/execution/build.rs
deleted file mode 100644
index c3a30933a..000000000
--- a/crates/execution/build.rs
+++ /dev/null
@@ -1,99 +0,0 @@
-use std::env;
-use std::fs;
-use std::path::{Path, PathBuf};
-
-/// Large Pyodide runtime assets are excluded from the published crate (see the
-/// `exclude` list in Cargo.toml) to keep it under the registry size limit.
-/// During in-tree (workspace) builds they are copied from `assets/pyodide/`.
-///
-/// When building the published crate (the unpacked tarball, where these assets
-/// are absent) Python support is built WITHOUT the externalized Pyodide assets:
-/// each missing asset is staged as an empty placeholder so the `include_bytes!`
-/// of the OUT_DIR copy still compiles, and the `secure_exec_pyodide_unavailable`
-/// cfg is set so the runtime reports Python as unavailable instead of trying to
-/// boot an incomplete Pyodide. This keeps `cargo publish` verification free of
-/// any CDN/network dependency. Python support remains fully functional in the
-/// workspace build where the in-tree assets exist.
-const EXTERNALIZED_PYODIDE_ASSETS: &[&str] = &[
-    "pyodide.asm.wasm",
-    "pyodide.asm.js",
-    "python_stdlib.zip",
-    "numpy-2.2.5-cp313-cp313-pyodide_2025_0_wasm32.whl",
-    "pandas-2.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl",
-];
-
-fn main() {
-    let manifest_dir =
-        PathBuf::from(env::var_os("CARGO_MANIFEST_DIR").expect("CARGO_MANIFEST_DIR must be set"));
-    let out_dir = PathBuf::from(env::var_os("OUT_DIR").expect("OUT_DIR must be set"));
-
-    println!("cargo:rerun-if-changed=build.rs");
-    // Declare the cfg used to gate Python availability so `cargo` does not warn
-    // about an unexpected cfg name.
-    println!("cargo:rustc-check-cfg=cfg(secure_exec_pyodide_unavailable)");
-    secure_exec_build_support::build_v8_bridge(&manifest_dir, &out_dir);
-    stage_pyodide_assets(&manifest_dir, &out_dir);
-}
-
-fn stage_pyodide_assets(manifest_dir: &Path, out_dir: &Path) {
-    let pyodide_out = out_dir.join("pyodide");
-    fs::create_dir_all(&pyodide_out).unwrap_or_else(|error| {
-        panic!(
-            "failed to create pyodide staging dir {}: {}",
-            pyodide_out.display(),
-            error
-        )
-    });
-
-    let mut pyodide_unavailable = false;
-
-    for asset in EXTERNALIZED_PYODIDE_ASSETS {
-        let in_tree = manifest_dir.join("assets/pyodide").join(asset);
-        let dest = pyodide_out.join(asset);
-        println!("cargo:rerun-if-changed={}", in_tree.display());
-
-        if dest.exists() && !is_placeholder(&dest) {
-            continue;
-        }
-
-        if in_tree.exists() {
-            fs::copy(&in_tree, &dest).unwrap_or_else(|error| {
-                panic!(
-                    "failed to copy pyodide asset {} to {}: {}",
-                    in_tree.display(),
-                    dest.display(),
-                    error
-                )
-            });
-        } else {
-            // Published-crate build: the externalized asset is absent and there
-            // is no CDN dependency. Stage an empty placeholder so `include_bytes!`
-            // compiles, and mark Python as unavailable for this build.
-            pyodide_unavailable = true;
-            fs::write(&dest, b"").unwrap_or_else(|error| {
-                panic!(
-                    "failed to write pyodide placeholder {}: {}",
-                    dest.display(),
-                    error
-                )
-            });
-        }
-    }
-
-    if pyodide_unavailable {
-        println!("cargo:rustc-cfg=secure_exec_pyodide_unavailable");
-        println!(
-            "cargo:warning=secure-exec-execution: building without bundled Pyodide assets; \
-             guest Python execution will be unavailable in this build."
-        );
-    }
-}
-
-/// A zero-byte staged asset is a placeholder written by a prior published-crate
-/// build; treat it as missing so a later workspace build can replace it with the
-/// real in-tree asset.
-fn is_placeholder(path: &Path) -> bool {
-    fs::metadata(path)
-        .map(|meta| meta.len() == 0)
-        .unwrap_or(false)
-}
diff --git a/crates/execution/src/benchmark.rs b/crates/execution/src/benchmark.rs
deleted file mode 100644
index 7d0076a49..000000000
--- a/crates/execution/src/benchmark.rs
+++ /dev/null
@@ -1,3590 +0,0 @@
-use crate::{
-    CreateJavascriptContextRequest, JavascriptExecutionEngine, JavascriptExecutionError,
-    StartJavascriptExecutionRequest,
-};
-use serde::{Deserialize, Serialize};
-use std::collections::BTreeMap;
-use std::env;
-use std::fmt;
-use std::fmt::Write as _;
-use std::fs;
-use std::path::{Path, PathBuf};
-use std::process::Command;
-use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
-
-const BENCHMARK_MARKER_PREFIX: &str = "__AGENTOS_BENCH__:";
-const LOCAL_GRAPH_MODULE_COUNT: usize = 24;
-const BENCHMARK_ARTIFACT_VERSION: u32 = 5;
-const BENCHMARK_ARTIFACT_DIR: &str = "target/benchmark-reports/node-import-bench";
-const BENCHMARK_RUN_STATE_FILE: &str = "run-state.json";
-const TRANSPORT_RTT_CHANNEL: &str = "execution-stdio-echo";
-const TRANSPORT_RTT_PAYLOAD_BYTES: [usize; 3] = [32, 4 * 1024, 64 * 1024];
-const TRANSPORT_POLL_TIMEOUT: Duration = Duration::from_secs(5);
-const MAX_BENCHMARK_ITERATIONS: usize = 1_000;
-const MAX_BENCHMARK_WARMUP_ITERATIONS: usize = 1_000;
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct JavascriptBenchmarkConfig {
-    pub iterations: usize,
-    pub warmup_iterations: usize,
-}
-
-impl Default for JavascriptBenchmarkConfig {
-    fn default() -> Self {
-        Self {
-            iterations: 5,
-            warmup_iterations: 1,
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize)]
-pub struct BenchmarkHost {
-    pub node_binary: String,
-    pub node_version: String,
-    pub os: &'static str,
-    pub arch: &'static str,
-    pub logical_cpus: usize,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
-pub struct BenchmarkScenarioPhases<T> {
-    pub context_setup_ms: T,
-    pub startup_ms: T,
-    #[serde(skip_serializing_if = "Option::is_none", default)]
-    pub guest_execution_ms: Option<T>,
-    pub completion_ms: T,
-}
-
-#[derive(Debug, Clone, PartialEq, Default, Serialize, Deserialize)]
-pub struct BenchmarkStats {
-    pub mean_ms: f64,
-    pub p50_ms: f64,
-    pub p95_ms: f64,
-    pub min_ms: f64,
-    pub max_ms: f64,
-    pub stddev_ms: f64,
-}
-
-#[derive(Debug, Clone, PartialEq, Default, Serialize, Deserialize)]
-pub struct BenchmarkDistributionStats {
-    pub mean: f64,
-    pub p50: f64,
-    pub p95: f64,
-    pub min: f64,
-    pub max: f64,
-    pub stddev: f64,
-}
-
-#[derive(Debug, Clone, PartialEq, Default, Serialize, Deserialize)]
-pub struct BenchmarkResourceUsage<T> {
-    #[serde(skip_serializing_if = "Option::is_none", default)]
-    pub rss_bytes: Option<T>,
-    #[serde(skip_serializing_if = "Option::is_none", default)]
-    pub heap_used_bytes: Option<T>,
-    #[serde(skip_serializing_if = "Option::is_none", default)]
-    pub cpu_user_us: Option<T>,
-    #[serde(skip_serializing_if = "Option::is_none", default)]
-    pub cpu_system_us: Option<T>,
-    #[serde(skip_serializing_if = "Option::is_none", default)]
-    pub cpu_total_us: Option<T>,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize)]
-pub struct BenchmarkTransportRttReport {
-    pub channel: &'static str,
-    pub payload_bytes: usize,
-    pub samples_ms: Vec<f64>,
-    pub stats: BenchmarkStats,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize)]
-pub struct BenchmarkScenarioReport {
-    pub id: &'static str,
-    pub workload: &'static str,
-    pub runtime: &'static str,
-    pub mode: &'static str,
-    pub description: &'static str,
-    pub fixture: &'static str,
-    pub compile_cache: &'static str,
-    pub wall_samples_ms: Vec<f64>,
-    pub wall_stats: BenchmarkStats,
-    pub guest_import_samples_ms: Option<Vec<f64>>,
-    pub guest_import_stats: Option<BenchmarkStats>,
-    pub startup_overhead_samples_ms: Option<Vec<f64>>,
-    pub startup_overhead_stats: Option<BenchmarkStats>,
-    pub phase_samples_ms: BenchmarkScenarioPhases<Vec<f64>>,
-    pub phase_stats: BenchmarkScenarioPhases<BenchmarkStats>,
-    #[serde(skip_serializing_if = "Option::is_none", default)]
-    pub resource_usage_samples: Option<BenchmarkResourceUsage<Vec<f64>>>,
-    #[serde(skip_serializing_if = "Option::is_none", default)]
-    pub resource_usage_stats: Option<BenchmarkResourceUsage<BenchmarkDistributionStats>>,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize)]
-pub struct JavascriptBenchmarkReport {
-    pub generated_at_unix_ms: u128,
-    pub config: JavascriptBenchmarkConfig,
-    pub host: BenchmarkHost,
-    pub repo_root: PathBuf,
-    pub transport_rtt: Vec<BenchmarkTransportRttReport>,
-    pub scenarios: Vec<BenchmarkScenarioReport>,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize)]
-pub struct BenchmarkComparison {
-    pub baseline: BenchmarkComparisonBaseline,
-    pub summary: BenchmarkComparisonSummary,
-    pub scenario_deltas: Vec<BenchmarkScenarioDelta>,
-    pub scenarios_missing_from_baseline: Vec<String>,
-    pub baseline_only_scenarios: Vec<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize)]
-pub struct BenchmarkComparisonBaseline {
-    pub artifact_version: u32,
-    pub generated_at_unix_ms: u128,
-    pub path: PathBuf,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize)]
-pub struct BenchmarkComparisonSummary {
-    pub compared_scenario_count: usize,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub largest_wall_improvement: Option<BenchmarkDeltaHighlight>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub largest_wall_regression: Option<BenchmarkDeltaHighlight>,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize)]
-pub struct BenchmarkDeltaHighlight {
-    pub id: String,
-    pub delta_ms: f64,
-    pub delta_pct: f64,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize)]
-pub struct BenchmarkScenarioDelta {
-    pub id: String,
-    pub description: String,
-    pub wall_mean_ms: BenchmarkMetricDelta,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub guest_import_mean_ms: Option<BenchmarkMetricDelta>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub startup_overhead_mean_ms: Option<BenchmarkMetricDelta>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub phase_mean_ms: Option<BenchmarkScenarioPhases<BenchmarkMetricDelta>>,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize)]
-pub struct BenchmarkMetricDelta {
-    pub baseline_ms: f64,
-    pub current_ms: f64,
-    pub delta_ms: f64,
-    pub delta_pct: f64,
-}
-
-impl JavascriptBenchmarkReport {
-    pub fn render_markdown(&self) -> String {
-        self.render_markdown_with_comparison(None)
-    }
-
-    pub fn render_markdown_with_comparison(
-        &self,
-        comparison: Option<&BenchmarkComparison>,
-    ) -> String {
-        let mut markdown = String::new();
-        let _ = writeln!(&mut markdown, "# secure-exec Node Import Benchmark");
-        let _ = writeln!(&mut markdown);
-        let _ = writeln!(
-            &mut markdown,
-            "- Generated at unix ms: `{}`",
-            self.generated_at_unix_ms
-        );
-        let _ = writeln!(&mut markdown, "- Node binary: `{}`", self.host.node_binary);
-        let _ = writeln!(
-            &mut markdown,
-            "- Node version: `{}`",
-            self.host.node_version.trim()
-        );
-        let _ = writeln!(
-            &mut markdown,
-            "- Host: `{}` / `{}` / `{}` logical CPUs",
-            self.host.os, self.host.arch, self.host.logical_cpus
-        );
-        let _ = writeln!(&mut markdown, "- Repo root: `{}`", self.repo_root.display());
-        let _ = writeln!(
-            &mut markdown,
-            "- Iterations: `{}` recorded, `{}` warmup",
-            self.config.iterations, self.config.warmup_iterations
-        );
-        let _ = writeln!(
-            &mut markdown,
-            "- Reproduce: `cargo run -p secure-exec-execution --bin node-import-bench -- --iterations {} --warmup-iterations {}`",
-            self.config.iterations, self.config.warmup_iterations
-        );
-        let _ = writeln!(&mut markdown);
-        let _ = writeln!(&mut markdown, "## Transport RTT");
-        let _ = writeln!(&mut markdown);
-        let _ = writeln!(
-            &mut markdown,
-            "| Channel | Payload (bytes) | Mean RTT (ms) | P50 | P95 |"
-        );
-        let _ = writeln!(&mut markdown, "| --- | ---: | ---: | ---: | ---: |");
-
-        for transport in &self.transport_rtt {
-            let _ = writeln!(
-                &mut markdown,
-                "| `{}` | {} | {} | {} | {} |",
-                transport.channel,
-                transport.payload_bytes,
-                format_ms(transport.stats.mean_ms),
-                format_ms(transport.stats.p50_ms),
-                format_ms(transport.stats.p95_ms),
-            );
-        }
-
-        let _ = writeln!(&mut markdown, "## Control Matrix");
-        let _ = writeln!(&mut markdown);
-
-        for row in self.control_matrix() {
-            let _ = writeln!(
-                &mut markdown,
-                "- Workload `{}`: runtimes {}, modes {}, scenarios {}",
-                row.workload,
-                format_label_list(&row.runtimes),
-                format_label_list(&row.modes),
-                format_label_list(&row.scenario_ids),
-            );
-        }
-
-        let _ = writeln!(&mut markdown);
-        let _ = writeln!(&mut markdown, "## Scenario Summary");
-        let _ = writeln!(&mut markdown);
-        let _ = writeln!(
-            &mut markdown,
-            "| Scenario | Workload | Runtime | Mode | Fixture | Cache | Mean wall (ms) | Mean context (ms) | Mean startup (ms) | Mean guest exec (ms) | Mean completion (ms) | Mean startup overhead (ms) |"
-        );
-        let _ = writeln!(
-            &mut markdown,
-            "| --- | --- | --- | --- | --- | --- | ---: | ---: | ---: | ---: | ---: | ---: |"
-        );
-
-        for scenario in &self.scenarios {
-            let guest_execution_mean = scenario
-                .phase_stats
-                .guest_execution_ms
-                .as_ref()
-                .map(|stats| format_ms(stats.mean_ms))
-                .unwrap_or_else(|| String::from("n/a"));
-            let startup_overhead_mean = scenario
-                .startup_overhead_stats
-                .as_ref()
-                .map(|stats| format_ms(stats.mean_ms))
-                .unwrap_or_else(|| String::from("n/a"));
-
-            let _ = writeln!(
-                &mut markdown,
-                "| `{}` | `{}` | `{}` | `{}` | {} | {} | {} | {} | {} | {} | {} | {} |",
-                scenario.id,
-                scenario.workload,
-                scenario.runtime,
-                scenario.mode,
-                scenario.fixture,
-                scenario.compile_cache,
-                format_ms(scenario.wall_stats.mean_ms),
-                format_ms(scenario.phase_stats.context_setup_ms.mean_ms),
-                format_ms(scenario.phase_stats.startup_ms.mean_ms),
-                guest_execution_mean,
-                format_ms(scenario.phase_stats.completion_ms.mean_ms),
-                startup_overhead_mean,
-            );
-        }
-
-        let _ = writeln!(&mut markdown);
-        let _ = writeln!(&mut markdown, "## Stability And Resource Summary");
-        let _ = writeln!(&mut markdown);
-        let _ = writeln!(
-            &mut markdown,
-            "| Scenario | Wall P50 (ms) | Wall min-max (ms) | Wall stddev (ms) | Mean RSS (MiB) | Mean heap (MiB) | Mean total CPU (ms) |"
-        );
-        let _ = writeln!(
-            &mut markdown,
-            "| --- | ---: | --- | ---: | ---: | ---: | ---: |"
-        );
-
-        for scenario in &self.scenarios {
-            let _ = writeln!(
-                &mut markdown,
-                "| `{}` | {} | {}-{} | {} | {} | {} | {} |",
-                scenario.id,
-                format_ms(scenario.wall_stats.p50_ms),
-                format_ms(scenario.wall_stats.min_ms),
-                format_ms(scenario.wall_stats.max_ms),
-                format_ms(scenario.wall_stats.stddev_ms),
-                scenario
-                    .resource_usage_stats
-                    .as_ref()
-                    .and_then(|stats| stats.rss_bytes.as_ref())
-                    .map(|stats| format_mib(bytes_to_mib(stats.mean)))
-                    .unwrap_or_else(|| String::from("n/a")),
-                scenario
-                    .resource_usage_stats
-                    .as_ref()
-                    .and_then(|stats| stats.heap_used_bytes.as_ref())
-                    .map(|stats| format_mib(bytes_to_mib(stats.mean)))
-                    .unwrap_or_else(|| String::from("n/a")),
-                scenario
-                    .resource_usage_stats
-                    .as_ref()
-                    .and_then(|stats| stats.cpu_total_us.as_ref())
-                    .map(|stats| format_ms(micros_to_ms(stats.mean)))
-                    .unwrap_or_else(|| String::from("n/a")),
-            );
-        }
-
-        let _ = writeln!(&mut markdown);
-        let _ = writeln!(&mut markdown, "## Ranked Hotspots");
-        let _ = writeln!(&mut markdown);
-
-        for ranking in self.hotspot_rankings() {
-            let _ = writeln!(
-                &mut markdown,
-                "### {} (`{}`, `{}`)",
-                ranking.label, ranking.dimension, ranking.unit
-            );
-            let _ = writeln!(&mut markdown);
-            let _ = writeln!(
-                &mut markdown,
-                "| Rank | Scenario | Workload | Runtime | Mode | Value |"
-            );
-            let _ = writeln!(&mut markdown, "| ---: | --- | --- | --- | --- | ---: |");
-
-            for scenario in &ranking.ranked_scenarios {
-                let _ = writeln!(
-                    &mut markdown,
-                    "| {} | `{}` | `{}` | `{}` | `{}` | {} |",
-                    scenario.rank,
-                    scenario.id,
-                    scenario.workload,
-                    scenario.runtime,
-                    scenario.mode,
-                    format_hotspot_value(ranking.unit, scenario.value),
-                );
-            }
-
-            if !ranking.scenarios_without_metric.is_empty() {
-                let _ = writeln!(&mut markdown);
-                let _ = writeln!(
-                    &mut markdown,
-                    "Missing metric for: {}",
-                    format_string_label_list(&ranking.scenarios_without_metric),
-                );
-            }
-
-            let _ = writeln!(&mut markdown);
-        }
-
-        let _ = writeln!(&mut markdown, "## Hotspot Guidance");
-        let _ = writeln!(&mut markdown);
-
-        for line in self.guidance_lines() {
-            let _ = writeln!(&mut markdown, "- {line}");
-        }
-
-        if let Some(comparison) = comparison {
-            let _ = writeln!(&mut markdown);
-            let _ = writeln!(&mut markdown, "## Baseline Comparison");
-            let _ = writeln!(&mut markdown);
-            let _ = writeln!(
-                &mut markdown,
-                "- Baseline artifact: `{}`",
-                comparison.baseline.path.display()
-            );
-            let _ = writeln!(
-                &mut markdown,
-                "- Baseline generated at unix ms: `{}`",
-                comparison.baseline.generated_at_unix_ms
-            );
-            let _ = writeln!(
-                &mut markdown,
-                "- Compared scenarios: `{}`",
-                comparison.summary.compared_scenario_count
-            );
-            if let Some(improvement) = &comparison.summary.largest_wall_improvement {
-                let _ = writeln!(
-                    &mut markdown,
-                    "- Largest wall-time improvement: `{}` at {} ({})",
-                    improvement.id,
-                    format_delta_ms(improvement.delta_ms),
-                    format_delta_pct(improvement.delta_pct),
-                );
-            }
-            if let Some(regression) = &comparison.summary.largest_wall_regression {
-                let _ = writeln!(
-                    &mut markdown,
-                    "- Largest wall-time regression: `{}` at {} ({})",
-                    regression.id,
-                    format_delta_ms(regression.delta_ms),
-                    format_delta_pct(regression.delta_pct),
-                );
-            }
-            if !comparison.scenarios_missing_from_baseline.is_empty() {
-                let _ = writeln!(
-                    &mut markdown,
-                    "- Scenarios missing from baseline: {}",
-                    comparison.scenarios_missing_from_baseline.join(", ")
-                );
-            }
-            if !comparison.baseline_only_scenarios.is_empty() {
-                let _ = writeln!(
-                    &mut markdown,
-                    "- Baseline-only scenarios: {}",
-                    comparison.baseline_only_scenarios.join(", ")
-                );
-            }
-            let _ = writeln!(&mut markdown);
-            let _ = writeln!(
-                &mut markdown,
-                "| Scenario | Wall delta (ms) | Wall delta % | Import delta (ms) | Startup delta (ms) | Context delta (ms) | Completion delta (ms) |"
-            );
-            let _ = writeln!(
-                &mut markdown,
-                "| --- | ---: | ---: | ---: | ---: | ---: | ---: |"
-            );
-
-            for scenario in &comparison.scenario_deltas {
-                let import_delta = scenario
-                    .guest_import_mean_ms
-                    .as_ref()
-                    .map(|delta| format_delta_ms(delta.delta_ms))
-                    .unwrap_or_else(|| String::from("n/a"));
-                let startup_delta = scenario
-                    .startup_overhead_mean_ms
-                    .as_ref()
-                    .map(|delta| format_delta_ms(delta.delta_ms))
-                    .unwrap_or_else(|| String::from("n/a"));
-                let context_delta = scenario
-                    .phase_mean_ms
-                    .as_ref()
-                    .map(|delta| format_delta_ms(delta.context_setup_ms.delta_ms))
-                    .unwrap_or_else(|| String::from("n/a"));
-                let completion_delta = scenario
-                    .phase_mean_ms
-                    .as_ref()
-                    .map(|delta| format_delta_ms(delta.completion_ms.delta_ms))
-                    .unwrap_or_else(|| String::from("n/a"));
-
-                let _ = writeln!(
-                    &mut markdown,
-                    "| `{}` | {} | {} | {} | {} | {} | {} |",
-                    scenario.id,
-                    format_delta_ms(scenario.wall_mean_ms.delta_ms),
-                    format_delta_pct(scenario.wall_mean_ms.delta_pct),
-                    import_delta,
-                    startup_delta,
-                    context_delta,
-                    completion_delta,
-                );
-            }
-        }
-
-        let _ = writeln!(&mut markdown);
-        let _ = writeln!(&mut markdown, "## Raw Samples");
-        let _ = writeln!(&mut markdown);
-
-        for scenario in &self.scenarios {
-            let _ = writeln!(&mut markdown, "### `{}`", scenario.id);
-            let _ = writeln!(&mut markdown, "- Workload: `{}`", scenario.workload);
-            let _ = writeln!(&mut markdown, "- Runtime: `{}`", scenario.runtime);
-            let _ = writeln!(&mut markdown, "- Mode: `{}`", scenario.mode);
-            let _ = writeln!(&mut markdown, "- Description: {}", scenario.description);
-            let _ = writeln!(
-                &mut markdown,
-                "- Wall samples (ms): {}",
-                format_sample_list(&scenario.wall_samples_ms)
-            );
-            if let Some(samples) = &scenario.guest_import_samples_ms {
-                let _ = writeln!(
-                    &mut markdown,
-                    "- Guest import samples (ms): {}",
-                    format_sample_list(samples)
-                );
-            }
-            if let Some(samples) = &scenario.startup_overhead_samples_ms {
-                let _ = writeln!(
-                    &mut markdown,
-                    "- Startup overhead samples (ms): {}",
-                    format_sample_list(samples)
-                );
-            }
-            let _ = writeln!(
-                &mut markdown,
-                "- Context setup samples (ms): {}",
-                format_sample_list(&scenario.phase_samples_ms.context_setup_ms)
-            );
-            let _ = writeln!(
-                &mut markdown,
-                "- Startup samples (ms): {}",
-                format_sample_list(&scenario.phase_samples_ms.startup_ms)
-            );
-            if let Some(samples) = &scenario.phase_samples_ms.guest_execution_ms {
-                let _ = writeln!(
-                    &mut markdown,
-                    "- Guest execution samples (ms): {}",
-                    format_sample_list(samples)
-                );
-            }
-            let _ = writeln!(
-                &mut markdown,
-                "- Completion samples (ms): {}",
-                format_sample_list(&scenario.phase_samples_ms.completion_ms)
-            );
-            if let Some(samples) = &scenario.resource_usage_samples {
-                if let Some(rss_samples) = &samples.rss_bytes {
-                    let _ = writeln!(
-                        &mut markdown,
-                        "- RSS samples (MiB): {}",
-                        format_scaled_sample_list(rss_samples, bytes_to_mib)
-                    );
-                }
-                if let Some(heap_samples) = &samples.heap_used_bytes {
-                    let _ = writeln!(
-                        &mut markdown,
-                        "- Heap samples (MiB): {}",
-                        format_scaled_sample_list(heap_samples, bytes_to_mib)
-                    );
-                }
-                if let Some(cpu_samples) = &samples.cpu_total_us {
-                    let _ = writeln!(
-                        &mut markdown,
-                        "- Total CPU samples (ms): {}",
-                        format_scaled_sample_list(cpu_samples, micros_to_ms)
-                    );
-                }
-            }
-            let _ = writeln!(&mut markdown);
-        }
-
-        markdown
-    }
-
-    pub fn render_json(&self) -> Result<String, serde_json::Error> {
-        self.render_json_with_comparison(None)
-    }
-
-    pub fn render_json_with_comparison(
-        &self,
-        comparison: Option<&BenchmarkComparison>,
-    ) -> Result<String, serde_json::Error> {
-        serde_json::to_string_pretty(&self.json_artifact(comparison))
-    }
-
-    pub fn write_artifacts(
-        &self,
-        output_dir: &Path,
-    ) -> Result<JavascriptBenchmarkArtifactPaths, JavascriptBenchmarkError> {
-        self.write_artifacts_with_comparison(output_dir, None)
-    }
-
-    pub fn write_artifacts_with_comparison(
-        &self,
-        output_dir: &Path,
-        comparison: Option<&BenchmarkComparison>,
-    ) -> Result<JavascriptBenchmarkArtifactPaths, JavascriptBenchmarkError> {
-        fs::create_dir_all(output_dir)?;
-
-        let markdown_path = output_dir.join("report.md");
-        let json_path = output_dir.join("report.json");
-        write_string_atomic(
-            &markdown_path,
-            &self.render_markdown_with_comparison(comparison),
-        )?;
-        write_string_atomic(&json_path, &self.render_json_with_comparison(comparison)?)?;
-
-        Ok(JavascriptBenchmarkArtifactPaths {
-            markdown_path,
-            json_path,
-        })
-    }
-
-    pub fn compare_to_baseline_path(
-        &self,
-        baseline_path: &Path,
-    ) -> Result<BenchmarkComparison, JavascriptBenchmarkError> {
-        let baseline = load_benchmark_artifact(baseline_path)?;
-        Ok(BenchmarkComparison::from_reports(
-            self,
-            baseline_path,
-            &baseline,
-        ))
-    }
-
-    fn guidance_lines(&self) -> Vec<String> {
-        let isolate = self.scenario("isolate-startup");
-        let cold_local = self.scenario("cold-local-import");
-        let warm_local = self.scenario("warm-local-import");
-        let prewarmed_local = self.scenario("prewarmed-local-import");
-        let builtin = self.scenario("builtin-import");
-        let large = self.scenario("large-package-import");
-
-        let mut guidance = Vec::new();
-
-        if let (
-            Some(cold_import),
-            Some(warm_import),
-            Some(warm_context),
-            Some(warm_startup_phase),
-            Some(warm_completion),
-            Some(warm_startup_overhead),
-            Some(warm_wall),
-            Some(isolate_wall),
-        ) = (
-            cold_local
-                .and_then(|scenario| scenario.guest_import_stats.as_ref())
-                .map(|stats| stats.mean_ms),
-            warm_local
-                .and_then(|scenario| scenario.guest_import_stats.as_ref())
-                .map(|stats| stats.mean_ms),
-            warm_local.map(|scenario| scenario.phase_stats.context_setup_ms.mean_ms),
-            warm_local.map(|scenario| scenario.phase_stats.startup_ms.mean_ms),
-            warm_local.map(|scenario| scenario.phase_stats.completion_ms.mean_ms),
-            warm_local
-                .and_then(|scenario| scenario.startup_overhead_stats.as_ref())
-                .map(|stats| stats.mean_ms),
-            warm_local.map(|scenario| scenario.wall_stats.mean_ms),
-            isolate.map(|scenario| scenario.wall_stats.mean_ms),
-        ) {
-            guidance.push(format!(
-                "Compile-cache reuse cuts the local import graph from {} to {} on average ({:.1}% faster), but the warm path still spends {} outside guest module evaluation. That keeps startup prewarm work in `ARC-021D` and sidecar warm-pool/snapshot work in `ARC-022` on the critical path above the `{}` empty-isolate floor.",
-                format_ms(cold_import),
-                format_ms(warm_import),
-                percentage_reduction(cold_import, warm_import),
-                format_ms(warm_startup_overhead),
-                format_ms(isolate_wall),
-            ));
-            if warm_wall > 0.0 {
-                guidance.push(format!(
-                    "Warm local imports still spend {:.1}% of wall time in process startup, wrapper evaluation, and stdio handling instead of guest import work. Optimizations that only touch module compilation will not remove that floor.",
-                    percentage_share(warm_startup_overhead, warm_wall),
-                ));
-            }
-            let warm_guest = warm_local
-                .and_then(|scenario| scenario.phase_stats.guest_execution_ms.as_ref())
-                .map(|stats| stats.mean_ms)
-                .unwrap_or(0.0);
-            guidance.push(format!(
-                "The warm path phase split is {} context setup, {} runtime startup, {} guest execution, and {} completion/stdio work. Future attribution can now separate bootstrap wins from pure transport/collection wins instead of treating them as one startup bucket.",
-                format_ms(warm_context),
-                format_ms(warm_startup_phase),
-                format_ms(warm_guest),
-                format_ms(warm_completion),
-            ));
-        }
-
-        if let (Some(warm_startup_overhead), Some(prewarmed_startup_overhead), Some(isolate_wall)) = (
-            warm_local
-                .and_then(|scenario| scenario.startup_overhead_stats.as_ref())
-                .map(|stats| stats.mean_ms),
-            prewarmed_local
-                .and_then(|scenario| scenario.startup_overhead_stats.as_ref())
-                .map(|stats| stats.mean_ms),
-            isolate.map(|scenario| scenario.wall_stats.mean_ms),
-        ) {
-            guidance.push(format!(
-                "Keeping the current import-cache materialization and builtin/polyfill prewarm alive inside one execution engine cuts warm local startup overhead from {} to {} ({:.1}% faster). The remaining {} of non-import work is the post-prewarm floor that broader warm-pool/snapshot work would still need to attack above the `{}` empty-isolate baseline.",
-                format_ms(warm_startup_overhead),
-                format_ms(prewarmed_startup_overhead),
-                percentage_reduction(warm_startup_overhead, prewarmed_startup_overhead),
-                format_ms(prewarmed_startup_overhead),
-                format_ms(isolate_wall),
-            ));
-        }
-
-        if let (Some(builtin_import), Some(large_import)) = (
-            builtin
-                .and_then(|scenario| scenario.guest_import_stats.as_ref())
-                .map(|stats| stats.mean_ms),
-            large
-                .and_then(|scenario| scenario.guest_import_stats.as_ref())
-                .map(|stats| stats.mean_ms),
-        ) {
-            guidance.push(format!(
-                "The large real-world package import (`typescript`) is {:.1}x the builtin path ({} versus {}). That makes `ARC-021C` the right next import-path optimization story: cache sidecar-scoped resolution results, package-type lookups, and module-format classification before attempting deeper structural rewrites.",
-                safe_ratio(large_import, builtin_import),
-                format_ms(large_import),
-                format_ms(builtin_import),
-            ));
-        }
-
-        if let (Some(smallest), Some(largest)) =
-            (self.transport_rtt.first(), self.transport_rtt.last())
-        {
-            guidance.push(format!(
-                "Execution-transport RTT over the stdio bridge rises from {} at {} bytes to {} at {} bytes. That gives later work a direct transport floor to compare against the larger startup and import phases.",
-                format_ms(smallest.stats.mean_ms),
-                smallest.payload_bytes,
-                format_ms(largest.stats.mean_ms),
-                largest.payload_bytes,
-            ));
-        }
-
-        if let Some(noisiest) = self.scenarios.iter().max_by(|lhs, rhs| {
-            lhs.wall_stats
-                .stddev_ms
-                .total_cmp(&rhs.wall_stats.stddev_ms)
-        }) {
-            guidance.push(format!(
-                "Wall-time noise is now surfaced directly in the same artifact set: `{}` currently shows the largest spread at {} stddev over a {}-{} wall range, so future deltas on that path should be judged against stability as well as mean time.",
-                noisiest.id,
-                format_ms(noisiest.wall_stats.stddev_ms),
-                format_ms(noisiest.wall_stats.min_ms),
-                format_ms(noisiest.wall_stats.max_ms),
-            ));
-        }
-
-        if let Some(heaviest) = self.scenarios.iter().max_by(|lhs, rhs| {
-            lhs.resource_usage_stats
-                .as_ref()
-                .and_then(|stats| stats.rss_bytes.as_ref())
-                .map(|stats| stats.mean)
-                .unwrap_or(f64::NEG_INFINITY)
-                .total_cmp(
-                    &rhs.resource_usage_stats
-                        .as_ref()
-                        .and_then(|stats| stats.rss_bytes.as_ref())
-                        .map(|stats| stats.mean)
-                        .unwrap_or(f64::NEG_INFINITY),
-                )
-        }) {
-            if let Some(rss_mean) = heaviest
-                .resource_usage_stats
-                .as_ref()
-                .and_then(|stats| stats.rss_bytes.as_ref())
-            {
-                guidance.push(format!(
-                    "Per-scenario resource reporting is now attached to the benchmark rows themselves: `{}` currently has the highest mean RSS at {} MiB, so import-path changes can now be judged for memory regressions without a separate memory-only pass.",
-                    heaviest.id,
-                    format_mib(bytes_to_mib(rss_mean.mean)),
-                ));
-            }
-        }
-
-        guidance.push(String::from(
-            "No new PRD stories were added from this run. The measured hotspots already map cleanly onto existing follow-ons: `ARC-021C` for safe resolution and metadata caches, `ARC-021D` for builtin/polyfill prewarm, and `ARC-022` for broader warm-pool and timing-mitigation execution work.",
-        ));
-
-        guidance
-    }
-
-    fn scenario(&self, id: &str) -> Option<&BenchmarkScenarioReport> {
-        self.scenarios.iter().find(|scenario| scenario.id == id)
-    }
-
-    fn json_artifact<'a>(
-        &'a self,
-        comparison: Option<&'a BenchmarkComparison>,
-    ) -> JavascriptBenchmarkArtifact<'a> {
-        JavascriptBenchmarkArtifact {
-            artifact_version: BENCHMARK_ARTIFACT_VERSION,
-            generated_at_unix_ms: self.generated_at_unix_ms,
-            command: format!(
-                "cargo run -p secure-exec-execution --bin node-import-bench -- --iterations {} --warmup-iterations {}",
-                self.config.iterations, self.config.warmup_iterations
-            ),
-            config: &self.config,
-            host: &self.host,
-            repo_root: &self.repo_root,
-            summary: self.summary(),
-            comparison,
-            transport_rtt: self
-                .transport_rtt
-                .iter()
-                .map(|transport| BenchmarkTransportRttArtifact {
-                    channel: transport.channel,
-                    payload_bytes: transport.payload_bytes,
-                    samples_ms: &transport.samples_ms,
-                    stats: &transport.stats,
-                })
-                .collect(),
-            scenarios: self
-                .scenarios
-                .iter()
-                .map(|scenario| BenchmarkScenarioArtifact {
-                    id: scenario.id,
-                    workload: scenario.workload,
-                    runtime: scenario.runtime,
-                    mode: scenario.mode,
-                    description: scenario.description,
-                    fixture: scenario.fixture,
-                    compile_cache: scenario.compile_cache,
-                    wall_samples_ms: &scenario.wall_samples_ms,
-                    wall_stats: &scenario.wall_stats,
-                    guest_import_samples_ms: scenario.guest_import_samples_ms.as_deref(),
-                    guest_import_stats: scenario.guest_import_stats.as_ref(),
-                    startup_overhead_samples_ms: scenario.startup_overhead_samples_ms.as_deref(),
-                    startup_overhead_stats: scenario.startup_overhead_stats.as_ref(),
-                    mean_startup_share_pct: scenario.mean_startup_share_pct(),
-                    phase_samples_ms: &scenario.phase_samples_ms,
-                    phase_stats: &scenario.phase_stats,
-                    resource_usage_samples: scenario.resource_usage_samples.as_ref(),
-                    resource_usage_stats: scenario.resource_usage_stats.as_ref(),
-                })
-                .collect(),
-        }
-    }
-
-    fn summary(&self) -> BenchmarkSummaryArtifact<'_> {
-        BenchmarkSummaryArtifact {
-            scenario_count: self.scenarios.len(),
-            recorded_samples_per_scenario: self.config.iterations,
-            warmup_iterations: self.config.warmup_iterations,
-            control_matrix: self.control_matrix(),
-            slowest_wall_scenario: self.slowest_scenario_by(|scenario| scenario.wall_stats.mean_ms),
-            slowest_guest_import_scenario: self.slowest_scenario_by(|scenario| {
-                scenario
-                    .guest_import_stats
-                    .as_ref()
-                    .map(|stats| stats.mean_ms)
-                    .unwrap_or(f64::NEG_INFINITY)
-            }),
-            highest_startup_share_scenario: self.scenarios.iter().max_by(|lhs, rhs| {
-                lhs.mean_startup_share_pct()
-                    .unwrap_or(f64::NEG_INFINITY)
-                    .total_cmp(&rhs.mean_startup_share_pct().unwrap_or(f64::NEG_INFINITY))
-            }),
-            hotspot_rankings: self.hotspot_rankings(),
-            guidance_lines: self.guidance_lines(),
-        }
-    }
-
-    fn control_matrix(&self) -> Vec<BenchmarkControlMatrixArtifact<'_>> {
-        let mut rows = Vec::new();
-        let mut row_indexes = BTreeMap::new();
-
-        for scenario in &self.scenarios {
-            let row_index = *row_indexes.entry(scenario.workload).or_insert_with(|| {
-                rows.push(BenchmarkControlMatrixArtifact {
-                    workload: scenario.workload,
-                    runtimes: Vec::new(),
-                    modes: Vec::new(),
-                    scenario_ids: Vec::new(),
-                });
-                rows.len() - 1
-            });
-            let row = &mut rows[row_index];
-            push_unique_label(&mut row.runtimes, scenario.runtime);
-            push_unique_label(&mut row.modes, scenario.mode);
-            row.scenario_ids.push(scenario.id);
-        }
-
-        rows
-    }
-
-    fn slowest_scenario_by(
-        &self,
-        value: impl Fn(&BenchmarkScenarioReport) -> f64,
-    ) -> Option<&BenchmarkScenarioReport> {
-        self.scenarios
-            .iter()
-            .max_by(|lhs, rhs| value(lhs).total_cmp(&value(rhs)))
-    }
-
-    fn hotspot_rankings(&self) -> Vec<BenchmarkHotspotRankingArtifact<'_>> {
-        HOTSPOT_METRICS
-            .iter()
-            .map(|metric| {
-                let mut ranked_scenarios = self
-                    .scenarios
-                    .iter()
-                    .filter_map(|scenario| {
-                        (metric.value)(scenario).map(|value| BenchmarkHotspotScenarioArtifact {
-                            rank: 0,
-                            id: scenario.id,
-                            workload: scenario.workload,
-                            runtime: scenario.runtime,
-                            mode: scenario.mode,
-                            value,
-                        })
-                    })
-                    .collect::<Vec<_>>();
-                ranked_scenarios.sort_by(|lhs, rhs| {
-                    rhs.value
-                        .total_cmp(&lhs.value)
-                        .then_with(|| lhs.id.cmp(rhs.id))
-                });
-                for (index, scenario) in ranked_scenarios.iter_mut().enumerate() {
-                    scenario.rank = index + 1;
-                }
-
-                BenchmarkHotspotRankingArtifact {
-                    metric: metric.metric,
-                    label: metric.label,
-                    dimension: metric.dimension,
-                    unit: metric.unit,
-                    ranked_scenarios,
-                    scenarios_without_metric: self
-                        .scenarios
-                        .iter()
-                        .filter(|scenario| (metric.value)(scenario).is_none())
-                        .map(|scenario| scenario.id)
-                        .collect(),
-                }
-            })
-            .collect()
-    }
-}
-
-impl BenchmarkScenarioReport {
-    fn mean_startup_share_pct(&self) -> Option<f64> {
-        let startup_mean = self.startup_overhead_stats.as_ref()?.mean_ms;
-        let wall_mean = self.wall_stats.mean_ms;
-        if wall_mean <= 0.0 {
-            Some(0.0)
-        } else {
-            Some((startup_mean / wall_mean) * 100.0)
-        }
-    }
-
-    fn wall_range_ms(&self) -> f64 {
-        self.wall_stats.max_ms - self.wall_stats.min_ms
-    }
-}
-
-impl BenchmarkResourceUsage<Vec<f64>> {
-    fn push_sample(&mut self, sample: &BenchmarkResourceUsage<f64>) {
-        push_optional_sample(&mut self.rss_bytes, sample.rss_bytes);
-        push_optional_sample(&mut self.heap_used_bytes, sample.heap_used_bytes);
-        push_optional_sample(&mut self.cpu_user_us, sample.cpu_user_us);
-        push_optional_sample(&mut self.cpu_system_us, sample.cpu_system_us);
-        push_optional_sample(&mut self.cpu_total_us, sample.cpu_total_us);
-    }
-
-    fn into_populated(self) -> Option<Self> {
-        (!self.is_empty()).then_some(self)
-    }
-}
-
-impl<T> BenchmarkResourceUsage<T> {
-    fn is_empty(&self) -> bool {
-        self.rss_bytes.is_none()
-            && self.heap_used_bytes.is_none()
-            && self.cpu_user_us.is_none()
-            && self.cpu_system_us.is_none()
-            && self.cpu_total_us.is_none()
-    }
-}
-
-impl BenchmarkComparison {
-    fn from_reports(
-        current: &JavascriptBenchmarkReport,
-        baseline_path: &Path,
-        baseline: &StoredBenchmarkArtifact,
-    ) -> Self {
-        let baseline_path =
-            fs::canonicalize(baseline_path).unwrap_or_else(|_| baseline_path.to_path_buf());
-        let baseline_by_id = baseline
-            .scenarios
-            .iter()
-            .map(|scenario| (scenario.id.as_str(), scenario))
-            .collect::<BTreeMap<_, _>>();
-
-        let mut scenario_deltas = Vec::new();
-        let mut scenarios_missing_from_baseline = Vec::new();
-
-        for scenario in &current.scenarios {
-            if let Some(baseline_scenario) = baseline_by_id.get(scenario.id) {
-                scenario_deltas.push(BenchmarkScenarioDelta {
-                    id: scenario.id.to_owned(),
-                    description: scenario.description.to_owned(),
-                    wall_mean_ms: BenchmarkMetricDelta::from_means(
-                        baseline_scenario.wall_stats.mean_ms,
-                        scenario.wall_stats.mean_ms,
-                    ),
-                    guest_import_mean_ms: match (
-                        baseline_scenario.guest_import_stats.as_ref(),
-                        scenario.guest_import_stats.as_ref(),
-                    ) {
-                        (Some(baseline_stats), Some(current_stats)) => {
-                            Some(BenchmarkMetricDelta::from_means(
-                                baseline_stats.mean_ms,
-                                current_stats.mean_ms,
-                            ))
-                        }
-                        _ => None,
-                    },
-                    startup_overhead_mean_ms: match (
-                        baseline_scenario.startup_overhead_stats.as_ref(),
-                        scenario.startup_overhead_stats.as_ref(),
-                    ) {
-                        (Some(baseline_stats), Some(current_stats)) => {
-                            Some(BenchmarkMetricDelta::from_means(
-                                baseline_stats.mean_ms,
-                                current_stats.mean_ms,
-                            ))
-                        }
-                        _ => None,
-                    },
-                    phase_mean_ms: match (
-                        baseline_scenario.phase_stats.as_ref(),
-                        Some(&scenario.phase_stats),
-                    ) {
-                        (Some(baseline_phase), Some(current_phase)) => {
-                            Some(BenchmarkScenarioPhases {
-                                context_setup_ms: BenchmarkMetricDelta::from_means(
-                                    baseline_phase.context_setup_ms.mean_ms,
-                                    current_phase.context_setup_ms.mean_ms,
-                                ),
-                                startup_ms: BenchmarkMetricDelta::from_means(
-                                    baseline_phase.startup_ms.mean_ms,
-                                    current_phase.startup_ms.mean_ms,
-                                ),
-                                guest_execution_ms: match (
-                                    baseline_phase.guest_execution_ms.as_ref(),
-                                    current_phase.guest_execution_ms.as_ref(),
-                                ) {
-                                    (Some(baseline_stats), Some(current_stats)) => {
-                                        Some(BenchmarkMetricDelta::from_means(
-                                            baseline_stats.mean_ms,
-                                            current_stats.mean_ms,
-                                        ))
-                                    }
-                                    _ => None,
-                                },
-                                completion_ms: BenchmarkMetricDelta::from_means(
-                                    baseline_phase.completion_ms.mean_ms,
-                                    current_phase.completion_ms.mean_ms,
-                                ),
-                            })
-                        }
-                        _ => None,
-                    },
-                });
-            } else {
-                scenarios_missing_from_baseline.push(scenario.id.to_owned());
-            }
-        }
-
-        let current_ids = current
-            .scenarios
-            .iter()
-            .map(|scenario| (scenario.id, ()))
-            .collect::<BTreeMap<_, _>>();
-        let baseline_only_scenarios = baseline
-            .scenarios
-            .iter()
-            .filter(|scenario| !current_ids.contains_key(scenario.id.as_str()))
-            .map(|scenario| scenario.id.clone())
-            .collect::<Vec<_>>();
-
-        let largest_wall_improvement = scenario_deltas
-            .iter()
-            .filter(|scenario| scenario.wall_mean_ms.delta_ms < 0.0)
-            .min_by(|lhs, rhs| {
-                lhs.wall_mean_ms
-                    .delta_ms
-                    .total_cmp(&rhs.wall_mean_ms.delta_ms)
-            })
-            .map(BenchmarkDeltaHighlight::from_wall_delta);
-        let largest_wall_regression = scenario_deltas
-            .iter()
-            .filter(|scenario| scenario.wall_mean_ms.delta_ms > 0.0)
-            .max_by(|lhs, rhs| {
-                lhs.wall_mean_ms
-                    .delta_ms
-                    .total_cmp(&rhs.wall_mean_ms.delta_ms)
-            })
-            .map(BenchmarkDeltaHighlight::from_wall_delta);
-
-        Self {
-            baseline: BenchmarkComparisonBaseline {
-                artifact_version: baseline.artifact_version,
-                generated_at_unix_ms: baseline.generated_at_unix_ms,
-                path: baseline_path,
-            },
-            summary: BenchmarkComparisonSummary {
-                compared_scenario_count: scenario_deltas.len(),
-                largest_wall_improvement,
-                largest_wall_regression,
-            },
-            scenario_deltas,
-            scenarios_missing_from_baseline,
-            baseline_only_scenarios,
-        }
-    }
-}
-
-impl BenchmarkDeltaHighlight {
-    fn from_wall_delta(delta: &BenchmarkScenarioDelta) -> Self {
-        Self {
-            id: delta.id.clone(),
-            delta_ms: delta.wall_mean_ms.delta_ms,
-            delta_pct: delta.wall_mean_ms.delta_pct,
-        }
-    }
-}
-
-impl BenchmarkMetricDelta {
-    fn from_means(baseline_ms: f64, current_ms: f64) -> Self {
-        let delta_ms = current_ms - baseline_ms;
-        let delta_pct = if baseline_ms <= 0.0 {
-            0.0
-        } else {
-            (delta_ms / baseline_ms) * 100.0
-        };
-
-        Self {
-            baseline_ms,
-            current_ms,
-            delta_ms,
-            delta_pct,
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct JavascriptBenchmarkArtifactPaths {
-    pub markdown_path: PathBuf,
-    pub json_path: PathBuf,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct JavascriptBenchmarkRunOutput {
-    pub artifact_paths: JavascriptBenchmarkArtifactPaths,
-    pub resumed_stage_count: usize,
-}
-
-#[derive(Debug, Serialize)]
-struct JavascriptBenchmarkArtifact<'a> {
-    artifact_version: u32,
-    generated_at_unix_ms: u128,
-    command: String,
-    config: &'a JavascriptBenchmarkConfig,
-    host: &'a BenchmarkHost,
-    repo_root: &'a Path,
-    summary: BenchmarkSummaryArtifact<'a>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    comparison: Option<&'a BenchmarkComparison>,
-    transport_rtt: Vec<BenchmarkTransportRttArtifact<'a>>,
-    scenarios: Vec<BenchmarkScenarioArtifact<'a>>,
-}
-
-#[derive(Debug, Serialize)]
-struct BenchmarkSummaryArtifact<'a> {
-    scenario_count: usize,
-    recorded_samples_per_scenario: usize,
-    warmup_iterations: usize,
-    control_matrix: Vec<BenchmarkControlMatrixArtifact<'a>>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    slowest_wall_scenario: Option<&'a BenchmarkScenarioReport>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    slowest_guest_import_scenario: Option<&'a BenchmarkScenarioReport>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    highest_startup_share_scenario: Option<&'a BenchmarkScenarioReport>,
-    hotspot_rankings: Vec<BenchmarkHotspotRankingArtifact<'a>>,
-    guidance_lines: Vec<String>,
-}
-
-#[derive(Debug, Serialize)]
-struct BenchmarkScenarioArtifact<'a> {
-    id: &'static str,
-    workload: &'static str,
-    runtime: &'static str,
-    mode: &'static str,
-    description: &'static str,
-    fixture: &'static str,
-    compile_cache: &'static str,
-    wall_samples_ms: &'a [f64],
-    wall_stats: &'a BenchmarkStats,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    guest_import_samples_ms: Option<&'a [f64]>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    guest_import_stats: Option<&'a BenchmarkStats>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    startup_overhead_samples_ms: Option<&'a [f64]>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    startup_overhead_stats: Option<&'a BenchmarkStats>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    mean_startup_share_pct: Option<f64>,
-    phase_samples_ms: &'a BenchmarkScenarioPhases<Vec<f64>>,
-    phase_stats: &'a BenchmarkScenarioPhases<BenchmarkStats>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    resource_usage_samples: Option<&'a BenchmarkResourceUsage<Vec<f64>>>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    resource_usage_stats: Option<&'a BenchmarkResourceUsage<BenchmarkDistributionStats>>,
-}
-
-#[derive(Debug, Serialize)]
-struct BenchmarkControlMatrixArtifact<'a> {
-    workload: &'a str,
-    runtimes: Vec<&'a str>,
-    modes: Vec<&'a str>,
-    scenario_ids: Vec<&'a str>,
-}
-
-#[derive(Debug, Serialize)]
-struct BenchmarkTransportRttArtifact<'a> {
-    channel: &'static str,
-    payload_bytes: usize,
-    samples_ms: &'a [f64],
-    stats: &'a BenchmarkStats,
-}
-
-#[derive(Debug, Serialize)]
-struct BenchmarkHotspotRankingArtifact<'a> {
-    metric: &'static str,
-    label: &'static str,
-    dimension: &'static str,
-    unit: &'static str,
-    ranked_scenarios: Vec<BenchmarkHotspotScenarioArtifact<'a>>,
-    #[serde(skip_serializing_if = "Vec::is_empty")]
-    scenarios_without_metric: Vec<&'a str>,
-}
-
-#[derive(Debug, Serialize)]
-struct BenchmarkHotspotScenarioArtifact<'a> {
-    rank: usize,
-    id: &'a str,
-    workload: &'a str,
-    runtime: &'a str,
-    mode: &'a str,
-    value: f64,
-}
-
-struct HotspotMetricDefinition {
-    metric: &'static str,
-    label: &'static str,
-    dimension: &'static str,
-    unit: &'static str,
-    value: fn(&BenchmarkScenarioReport) -> Option<f64>,
-}
-
-const HOTSPOT_METRICS: [HotspotMetricDefinition; 13] = [
-    HotspotMetricDefinition {
-        metric: "wall_mean_ms",
-        label: "Wall Time",
-        dimension: "time",
-        unit: "ms",
-        value: hotspot_wall_mean_ms,
-    },
-    HotspotMetricDefinition {
-        metric: "wall_stddev_ms",
-        label: "Wall Time Stddev",
-        dimension: "stability",
-        unit: "ms",
-        value: hotspot_wall_stddev_ms,
-    },
-    HotspotMetricDefinition {
-        metric: "wall_range_ms",
-        label: "Wall Time Range",
-        dimension: "stability",
-        unit: "ms",
-        value: hotspot_wall_range_ms,
-    },
-    HotspotMetricDefinition {
-        metric: "guest_import_mean_ms",
-        label: "Guest Import Time",
-        dimension: "time",
-        unit: "ms",
-        value: hotspot_guest_import_mean_ms,
-    },
-    HotspotMetricDefinition {
-        metric: "startup_overhead_mean_ms",
-        label: "Startup Overhead",
-        dimension: "time",
-        unit: "ms",
-        value: hotspot_startup_overhead_mean_ms,
-    },
-    HotspotMetricDefinition {
-        metric: "context_setup_mean_ms",
-        label: "Context Setup Phase",
-        dimension: "time",
-        unit: "ms",
-        value: hotspot_context_setup_mean_ms,
-    },
-    HotspotMetricDefinition {
-        metric: "startup_phase_mean_ms",
-        label: "Runtime Startup Phase",
-        dimension: "time",
-        unit: "ms",
-        value: hotspot_startup_phase_mean_ms,
-    },
-    HotspotMetricDefinition {
-        metric: "guest_execution_mean_ms",
-        label: "Guest Execution Phase",
-        dimension: "time",
-        unit: "ms",
-        value: hotspot_guest_execution_mean_ms,
-    },
-    HotspotMetricDefinition {
-        metric: "completion_mean_ms",
-        label: "Completion/Stdio Phase",
-        dimension: "time",
-        unit: "ms",
-        value: hotspot_completion_mean_ms,
-    },
-    HotspotMetricDefinition {
-        metric: "startup_share_pct",
-        label: "Startup Share Of Wall",
-        dimension: "share",
-        unit: "pct",
-        value: hotspot_startup_share_pct,
-    },
-    HotspotMetricDefinition {
-        metric: "rss_mean_mib",
-        label: "RSS",
-        dimension: "memory",
-        unit: "MiB",
-        value: hotspot_rss_mean_mib,
-    },
-    HotspotMetricDefinition {
-        metric: "heap_mean_mib",
-        label: "Heap Used",
-        dimension: "memory",
-        unit: "MiB",
-        value: hotspot_heap_mean_mib,
-    },
-    HotspotMetricDefinition {
-        metric: "cpu_total_mean_ms",
-        label: "Total CPU",
-        dimension: "cpu",
-        unit: "ms",
-        value: hotspot_total_cpu_mean_ms,
-    },
-];
-
-#[derive(Debug)]
-pub enum JavascriptBenchmarkError {
-    InvalidConfig(&'static str),
-    InvalidWorkspaceRoot(PathBuf),
-    InvalidBaselineReport {
-        path: PathBuf,
-        message: String,
-    },
-    Io(std::io::Error),
-    Utf8(std::string::FromUtf8Error),
-    Execution(JavascriptExecutionError),
-    NodeVersion(std::io::Error),
-    MissingBenchmarkMetric(&'static str),
-    InvalidBenchmarkMetric {
-        scenario: &'static str,
-        raw_value: String,
-    },
-    TransportProbeTimeout {
-        payload_bytes: usize,
-    },
-    TransportProbeExited {
-        exit_code: i32,
-        stderr: String,
-    },
-    InvalidTransportProbeResponse {
-        payload_bytes: usize,
-        expected: String,
-        actual: String,
-    },
-    NonZeroExit {
-        scenario: &'static str,
-        exit_code: i32,
-        stderr: String,
-    },
-}
-
-impl fmt::Display for JavascriptBenchmarkError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::InvalidConfig(message) => write!(f, "invalid benchmark config: {message}"),
-            Self::InvalidWorkspaceRoot(path) => {
-                write!(
-                    f,
-                    "failed to resolve workspace root from execution crate path: {}",
-                    path.display()
-                )
-            }
-            Self::InvalidBaselineReport { path, message } => {
-                write!(
-                    f,
-                    "failed to parse benchmark baseline artifact {}: {message}",
-                    path.display()
-                )
-            }
-            Self::Io(err) => write!(f, "benchmark I/O failure: {err}"),
-            Self::Utf8(err) => write!(f, "benchmark output was not valid UTF-8: {err}"),
-            Self::Execution(err) => write!(f, "benchmark execution failed: {err}"),
-            Self::NodeVersion(err) => write!(f, "failed to query node version: {err}"),
-            Self::MissingBenchmarkMetric(scenario) => {
-                write!(
-                    f,
-                    "benchmark scenario `{scenario}` did not emit a metric marker"
-                )
-            }
-            Self::InvalidBenchmarkMetric {
-                scenario,
-                raw_value,
-            } => write!(
-                f,
-                "benchmark scenario `{scenario}` emitted an invalid metric: {raw_value}"
-            ),
-            Self::TransportProbeTimeout { payload_bytes } => {
-                write!(
-                    f,
-                    "transport probe timed out waiting for {payload_bytes}-byte round-trip"
-                )
-            }
-            Self::TransportProbeExited { exit_code, stderr } => {
-                write!(f, "transport probe exited with code {exit_code}: {stderr}")
-            }
-            Self::InvalidTransportProbeResponse {
-                payload_bytes,
-                expected,
-                actual,
-            } => write!(
-                f,
-                "transport probe returned unexpected payload for {payload_bytes}-byte round-trip: expected {expected:?}, got {actual:?}"
-            ),
-            Self::NonZeroExit {
-                scenario,
-                exit_code,
-                stderr,
-            } => write!(
-                f,
-                "benchmark scenario `{scenario}` exited with code {exit_code}: {stderr}"
-            ),
-        }
-    }
-}
-
-impl std::error::Error for JavascriptBenchmarkError {}
-
-impl From<std::io::Error> for JavascriptBenchmarkError {
-    fn from(err: std::io::Error) -> Self {
-        Self::Io(err)
-    }
-}
-
-impl From<std::string::FromUtf8Error> for JavascriptBenchmarkError {
-    fn from(err: std::string::FromUtf8Error) -> Self {
-        Self::Utf8(err)
-    }
-}
-
-impl From<serde_json::Error> for JavascriptBenchmarkError {
-    fn from(err: serde_json::Error) -> Self {
-        Self::Io(std::io::Error::new(std::io::ErrorKind::InvalidData, err))
-    }
-}
-
-impl From<JavascriptExecutionError> for JavascriptBenchmarkError {
-    fn from(err: JavascriptExecutionError) -> Self {
-        Self::Execution(err)
-    }
-}
-
-pub fn run_javascript_benchmarks(
-    config: &JavascriptBenchmarkConfig,
-) -> Result<JavascriptBenchmarkReport, JavascriptBenchmarkError> {
-    validate_benchmark_config(config)?;
-
-    let repo_root = workspace_root()?;
-    let host = benchmark_host()?;
-    let workspace = BenchmarkWorkspace::create(&repo_root)?;
-    let transport_rtt = measure_transport_rtt(&workspace, config)?;
-
-    let mut scenarios = Vec::new();
-
-    for scenario in benchmark_scenarios() {
-        scenarios.push(run_scenario(&workspace, config, scenario)?);
-    }
-
-    Ok(JavascriptBenchmarkReport {
-        generated_at_unix_ms: SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .unwrap_or_default()
-            .as_millis(),
-        config: config.clone(),
-        host,
-        repo_root,
-        transport_rtt,
-        scenarios,
-    })
-}
-
-fn benchmark_artifact_dir(repo_root: &Path) -> PathBuf {
-    repo_root.join(BENCHMARK_ARTIFACT_DIR)
-}
-
-fn benchmark_run_state_path(artifact_dir: &Path) -> PathBuf {
-    artifact_dir.join(BENCHMARK_RUN_STATE_FILE)
-}
-
-fn load_benchmark_run_state(
-    state_path: &Path,
-    config: &JavascriptBenchmarkConfig,
-    host: &BenchmarkHost,
-    repo_root: &Path,
-    definitions: &[ScenarioDefinition],
-) -> Result<StoredBenchmarkRunState, JavascriptBenchmarkError> {
-    match fs::read_to_string(state_path) {
-        Ok(raw) => match serde_json::from_str::<StoredBenchmarkRunState>(&raw) {
-            Ok(state) if state.is_compatible(config, host, repo_root) => {
-                Ok(state.sanitized(definitions))
-            }
-            Ok(_) | Err(_) => Ok(StoredBenchmarkRunState::new(config, host, repo_root)),
-        },
-        Err(err) if err.kind() == std::io::ErrorKind::NotFound => {
-            Ok(StoredBenchmarkRunState::new(config, host, repo_root))
-        }
-        Err(err) => Err(JavascriptBenchmarkError::Io(err)),
-    }
-}
-
-fn persist_benchmark_run_state(
-    state_path: &Path,
-    state: &StoredBenchmarkRunState,
-) -> Result<(), JavascriptBenchmarkError> {
-    write_string_atomic(state_path, &serde_json::to_string_pretty(state)?)
-}
-
-fn write_string_atomic(path: &Path, contents: &str) -> Result<(), JavascriptBenchmarkError> {
-    if let Some(parent) = path.parent() {
-        fs::create_dir_all(parent)?;
-    }
-
-    let temp_path = path.with_file_name(format!(
-        ".{}.tmp-{}-{}",
-        path.file_name()
-            .and_then(|name| name.to_str())
-            .unwrap_or("artifact"),
-        std::process::id(),
-        SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .unwrap_or_default()
-            .as_nanos()
-    ));
-    fs::write(&temp_path, contents)?;
-    if let Err(err) = fs::rename(&temp_path, path) {
-        let _ = fs::remove_file(&temp_path);
-        return Err(JavascriptBenchmarkError::Io(err));
-    }
-
-    Ok(())
-}
-
-fn remove_file_if_exists(path: &Path) -> Result<(), JavascriptBenchmarkError> {
-    match fs::remove_file(path) {
-        Ok(()) => Ok(()),
-        Err(err) if err.kind() == std::io::ErrorKind::NotFound => Ok(()),
-        Err(err) => Err(JavascriptBenchmarkError::Io(err)),
-    }
-}
-
-fn current_unix_ms() -> u128 {
-    SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .unwrap_or_default()
-        .as_millis()
-}
-
-#[derive(Debug, Clone, Copy)]
-struct ScenarioDefinition {
-    id: &'static str,
-    workload: &'static str,
-    runtime: ScenarioRuntime,
-    mode: ScenarioMode,
-    description: &'static str,
-    fixture: &'static str,
-    entrypoint: &'static str,
-    compile_cache: CompileCacheStrategy,
-    engine_reuse: EngineReuseStrategy,
-    expect_import_metric: bool,
-    env: ScenarioEnvironment,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum CompileCacheStrategy {
-    Disabled,
-    Primed,
-}
-
-impl CompileCacheStrategy {
-    fn label(self) -> &'static str {
-        match self {
-            Self::Disabled => "disabled",
-            Self::Primed => "primed",
-        }
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum EngineReuseStrategy {
-    FreshPerSample,
-    SharedAcrossScenario,
-    SharedContextAcrossScenario,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum ScenarioEnvironment {
-    None,
-    ProjectedWorkspaceNodeModules,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum ScenarioRuntime {
-    NativeExecution,
-    HostNode,
-}
-
-impl ScenarioRuntime {
-    fn label(self) -> &'static str {
-        match self {
-            Self::NativeExecution => "native-execution",
-            Self::HostNode => "host-node",
-        }
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum ScenarioMode {
-    BaselineControl,
-    TrueColdStart,
-    NewSessionReplay,
-    SameSessionReplay,
-    SameEngineReplay,
-    HostControl,
-}
-
-impl ScenarioMode {
-    fn label(self) -> &'static str {
-        match self {
-            Self::BaselineControl => "baseline-control",
-            Self::TrueColdStart => "true-cold-start",
-            Self::NewSessionReplay => "new-session-replay",
-            Self::SameSessionReplay => "same-session-replay",
-            Self::SameEngineReplay => "same-engine-replay",
-            Self::HostControl => "host-control",
-        }
-    }
-}
-
-#[derive(Debug)]
-struct SampleMeasurement {
-    wall_ms: f64,
-    guest_import_ms: Option<f64>,
-    context_setup_ms: f64,
-    startup_ms: f64,
-    completion_ms: f64,
-    resource_usage: Option<BenchmarkResourceUsage<f64>>,
-}
-
-#[derive(Debug)]
-struct BenchmarkWorkspace {
-    root: PathBuf,
-    repo_root: PathBuf,
-}
-
-#[derive(Debug, Deserialize)]
-struct StoredBenchmarkArtifact {
-    artifact_version: u32,
-    generated_at_unix_ms: u128,
-    scenarios: Vec<StoredBenchmarkScenario>,
-}
-
-#[derive(Debug, Deserialize)]
-struct StoredBenchmarkScenario {
-    id: String,
-    wall_stats: BenchmarkStats,
-    #[serde(default)]
-    guest_import_stats: Option<BenchmarkStats>,
-    #[serde(default)]
-    startup_overhead_stats: Option<BenchmarkStats>,
-    #[serde(default)]
-    phase_stats: Option<BenchmarkScenarioPhases<BenchmarkStats>>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-struct StoredBenchmarkRunHost {
-    node_binary: String,
-    node_version: String,
-    os: String,
-    arch: String,
-    logical_cpus: usize,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
-struct StoredBenchmarkRunState {
-    artifact_version: u32,
-    config: JavascriptBenchmarkConfig,
-    host: StoredBenchmarkRunHost,
-    repo_root: PathBuf,
-    #[serde(default)]
-    transport_rtt: Option<Vec<StoredBenchmarkTransportRttReport>>,
-    #[serde(default)]
-    scenarios: Vec<StoredBenchmarkScenarioReport>,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
-struct StoredBenchmarkTransportRttReport {
-    payload_bytes: usize,
-    samples_ms: Vec<f64>,
-    stats: BenchmarkStats,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
-struct StoredBenchmarkScenarioReport {
-    id: String,
-    wall_samples_ms: Vec<f64>,
-    wall_stats: BenchmarkStats,
-    #[serde(default)]
-    guest_import_samples_ms: Option<Vec<f64>>,
-    #[serde(default)]
-    guest_import_stats: Option<BenchmarkStats>,
-    #[serde(default)]
-    startup_overhead_samples_ms: Option<Vec<f64>>,
-    #[serde(default)]
-    startup_overhead_stats: Option<BenchmarkStats>,
-    phase_samples_ms: BenchmarkScenarioPhases<Vec<f64>>,
-    phase_stats: BenchmarkScenarioPhases<BenchmarkStats>,
-    #[serde(default)]
-    resource_usage_samples: Option<BenchmarkResourceUsage<Vec<f64>>>,
-    #[serde(default)]
-    resource_usage_stats: Option<BenchmarkResourceUsage<BenchmarkDistributionStats>>,
-}
-
-impl BenchmarkWorkspace {
-    fn create(repo_root: &Path) -> Result<Self, JavascriptBenchmarkError> {
-        let root = repo_root.join(format!(
-            ".tmp-secure-exec-execution-bench-{}-{}",
-            std::process::id(),
-            SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .unwrap_or_default()
-                .as_nanos()
-        ));
-        fs::create_dir_all(&root)?;
-        write_benchmark_workspace(&root, repo_root)?;
-        Ok(Self {
-            root,
-            repo_root: repo_root.to_path_buf(),
-        })
-    }
-}
-
-impl Drop for BenchmarkWorkspace {
-    fn drop(&mut self) {
-        let _ = fs::remove_dir_all(&self.root);
-    }
-}
-
-impl StoredBenchmarkRunHost {
-    fn from_host(host: &BenchmarkHost) -> Self {
-        Self {
-            node_binary: host.node_binary.clone(),
-            node_version: host.node_version.clone(),
-            os: host.os.to_owned(),
-            arch: host.arch.to_owned(),
-            logical_cpus: host.logical_cpus,
-        }
-    }
-
-    fn matches_host(&self, host: &BenchmarkHost) -> bool {
-        self.node_binary == host.node_binary
-            && self.node_version == host.node_version
-            && self.os == host.os
-            && self.arch == host.arch
-            && self.logical_cpus == host.logical_cpus
-    }
-}
-
-impl StoredBenchmarkRunState {
-    fn new(config: &JavascriptBenchmarkConfig, host: &BenchmarkHost, repo_root: &Path) -> Self {
-        Self {
-            artifact_version: BENCHMARK_ARTIFACT_VERSION,
-            config: config.clone(),
-            host: StoredBenchmarkRunHost::from_host(host),
-            repo_root: repo_root.to_path_buf(),
-            transport_rtt: None,
-            scenarios: Vec::new(),
-        }
-    }
-
-    fn is_compatible(
-        &self,
-        config: &JavascriptBenchmarkConfig,
-        host: &BenchmarkHost,
-        repo_root: &Path,
-    ) -> bool {
-        self.artifact_version == BENCHMARK_ARTIFACT_VERSION
-            && self.config == *config
-            && self.host.matches_host(host)
-            && self.repo_root == repo_root
-    }
-
-    fn sanitized(mut self, definitions: &[ScenarioDefinition]) -> Self {
-        if let Some(transport_rtt) = &self.transport_rtt {
-            let payloads = transport_rtt
-                .iter()
-                .map(|report| report.payload_bytes)
-                .collect::<Vec<_>>();
-            if payloads != TRANSPORT_RTT_PAYLOAD_BYTES {
-                self.transport_rtt = None;
-            }
-        }
-
-        let mut scenarios_by_id = self
-            .scenarios
-            .into_iter()
-            .map(|scenario| (scenario.id.clone(), scenario))
-            .collect::<BTreeMap<_, _>>();
-        self.scenarios = definitions
-            .iter()
-            .filter_map(|definition| scenarios_by_id.remove(definition.id))
-            .collect();
-        self
-    }
-
-    fn resumed_stage_count(&self, definitions: &[ScenarioDefinition]) -> usize {
-        usize::from(self.transport_rtt.is_some())
-            + definitions
-                .iter()
-                .filter(|definition| self.has_scenario(definition.id))
-                .count()
-    }
-
-    fn has_scenario(&self, id: &str) -> bool {
-        self.scenarios.iter().any(|scenario| scenario.id == id)
-    }
-
-    fn record_transport_rtt(&mut self, transport_rtt: &[BenchmarkTransportRttReport]) {
-        self.transport_rtt = Some(
-            transport_rtt
-                .iter()
-                .map(StoredBenchmarkTransportRttReport::from_report)
-                .collect(),
-        );
-    }
-
-    fn record_scenario(&mut self, scenario: &BenchmarkScenarioReport) {
-        self.scenarios.retain(|stored| stored.id != scenario.id);
-        self.scenarios
-            .push(StoredBenchmarkScenarioReport::from_report(scenario));
-    }
-
-    fn to_report(
-        &self,
-        config: &JavascriptBenchmarkConfig,
-        host: &BenchmarkHost,
-        repo_root: &Path,
-        definitions: &[ScenarioDefinition],
-    ) -> JavascriptBenchmarkReport {
-        let scenarios_by_id = self
-            .scenarios
-            .iter()
-            .map(|scenario| (scenario.id.as_str(), scenario))
-            .collect::<BTreeMap<_, _>>();
-
-        JavascriptBenchmarkReport {
-            generated_at_unix_ms: current_unix_ms(),
-            config: config.clone(),
-            host: host.clone(),
-            repo_root: repo_root.to_path_buf(),
-            transport_rtt: self
-                .transport_rtt
-                .clone()
-                .unwrap_or_default()
-                .into_iter()
-                .map(StoredBenchmarkTransportRttReport::into_report)
-                .collect(),
-            scenarios: definitions
-                .iter()
-                .filter_map(|definition| {
-                    scenarios_by_id
-                        .get(definition.id)
-                        .map(|scenario| scenario.to_report(*definition))
-                })
-                .collect(),
-        }
-    }
-}
-
-impl StoredBenchmarkTransportRttReport {
-    fn from_report(report: &BenchmarkTransportRttReport) -> Self {
-        Self {
-            payload_bytes: report.payload_bytes,
-            samples_ms: report.samples_ms.clone(),
-            stats: report.stats.clone(),
-        }
-    }
-
-    fn into_report(self) -> BenchmarkTransportRttReport {
-        BenchmarkTransportRttReport {
-            channel: TRANSPORT_RTT_CHANNEL,
-            payload_bytes: self.payload_bytes,
-            samples_ms: self.samples_ms,
-            stats: self.stats,
-        }
-    }
-}
-
-impl StoredBenchmarkScenarioReport {
-    fn from_report(report: &BenchmarkScenarioReport) -> Self {
-        Self {
-            id: report.id.to_owned(),
-            wall_samples_ms: report.wall_samples_ms.clone(),
-            wall_stats: report.wall_stats.clone(),
-            guest_import_samples_ms: report.guest_import_samples_ms.clone(),
-            guest_import_stats: report.guest_import_stats.clone(),
-            startup_overhead_samples_ms: report.startup_overhead_samples_ms.clone(),
-            startup_overhead_stats: report.startup_overhead_stats.clone(),
-            phase_samples_ms: report.phase_samples_ms.clone(),
-            phase_stats: report.phase_stats.clone(),
-            resource_usage_samples: report.resource_usage_samples.clone(),
-            resource_usage_stats: report.resource_usage_stats.clone(),
-        }
-    }
-
-    fn to_report(&self, definition: ScenarioDefinition) -> BenchmarkScenarioReport {
-        BenchmarkScenarioReport {
-            id: definition.id,
-            workload: definition.workload,
-            runtime: definition.runtime.label(),
-            mode: definition.mode.label(),
-            description: definition.description,
-            fixture: definition.fixture,
-            compile_cache: definition.compile_cache.label(),
-            wall_samples_ms: self.wall_samples_ms.clone(),
-            wall_stats: self.wall_stats.clone(),
-            guest_import_samples_ms: self.guest_import_samples_ms.clone(),
-            guest_import_stats: self.guest_import_stats.clone(),
-            startup_overhead_samples_ms: self.startup_overhead_samples_ms.clone(),
-            startup_overhead_stats: self.startup_overhead_stats.clone(),
-            phase_samples_ms: self.phase_samples_ms.clone(),
-            phase_stats: self.phase_stats.clone(),
-            resource_usage_samples: self.resource_usage_samples.clone(),
-            resource_usage_stats: self.resource_usage_stats.clone(),
-        }
-    }
-}
-
-pub fn run_javascript_benchmarks_with_recovery(
-    config: &JavascriptBenchmarkConfig,
-    baseline_path: Option<&Path>,
-) -> Result<JavascriptBenchmarkRunOutput, JavascriptBenchmarkError> {
-    validate_benchmark_config(config)?;
-
-    let repo_root = workspace_root()?;
-    let host = benchmark_host()?;
-    let artifact_dir = benchmark_artifact_dir(&repo_root);
-    let workspace = BenchmarkWorkspace::create(&repo_root)?;
-    let (report, resumed_stage_count, state_path) = orchestrate_javascript_benchmark_report(
-        config,
-        &repo_root,
-        &host,
-        &artifact_dir,
-        || measure_transport_rtt(&workspace, config),
-        |scenario| run_scenario(&workspace, config, scenario),
-    )?;
-    let comparison = baseline_path
-        .map(|path| report.compare_to_baseline_path(path))
-        .transpose()?;
-    let artifact_paths =
-        report.write_artifacts_with_comparison(&artifact_dir, comparison.as_ref())?;
-    remove_file_if_exists(&state_path)?;
-
-    Ok(JavascriptBenchmarkRunOutput {
-        artifact_paths,
-        resumed_stage_count,
-    })
-}
-
-fn orchestrate_javascript_benchmark_report<MeasureTransport, RunScenario>(
-    config: &JavascriptBenchmarkConfig,
-    repo_root: &Path,
-    host: &BenchmarkHost,
-    artifact_dir: &Path,
-    mut measure_transport: MeasureTransport,
-    mut run_scenario: RunScenario,
-) -> Result<(JavascriptBenchmarkReport, usize, PathBuf), JavascriptBenchmarkError>
-where
-    MeasureTransport: FnMut() -> Result<Vec<BenchmarkTransportRttReport>, JavascriptBenchmarkError>,
-    RunScenario:
-        FnMut(ScenarioDefinition) -> Result<BenchmarkScenarioReport, JavascriptBenchmarkError>,
-{
-    validate_benchmark_config(config)?;
-
-    fs::create_dir_all(artifact_dir)?;
-
-    let definitions = benchmark_scenarios();
-    let state_path = benchmark_run_state_path(artifact_dir);
-    let mut state = load_benchmark_run_state(&state_path, config, host, repo_root, &definitions)?;
-    let resumed_stage_count = state.resumed_stage_count(&definitions);
-
-    if state.transport_rtt.is_none() {
-        let transport_rtt = measure_transport()?;
-        state.record_transport_rtt(&transport_rtt);
-        persist_benchmark_run_state(&state_path, &state)?;
-    }
-
-    for definition in definitions {
-        if state.has_scenario(definition.id) {
-            continue;
-        }
-
-        let scenario = run_scenario(definition)?;
-        state.record_scenario(&scenario);
-        persist_benchmark_run_state(&state_path, &state)?;
-    }
-
-    Ok((
-        state.to_report(config, host, repo_root, &benchmark_scenarios()),
-        resumed_stage_count,
-        state_path,
-    ))
-}
-
-fn validate_benchmark_config(
-    config: &JavascriptBenchmarkConfig,
-) -> Result<(), JavascriptBenchmarkError> {
-    if config.iterations == 0 {
-        return Err(JavascriptBenchmarkError::InvalidConfig(
-            "iterations must be greater than zero",
-        ));
-    }
-    if config.iterations > MAX_BENCHMARK_ITERATIONS {
-        return Err(JavascriptBenchmarkError::InvalidConfig(
-            "iterations must be less than or equal to 1000",
-        ));
-    }
-    if config.warmup_iterations > MAX_BENCHMARK_WARMUP_ITERATIONS {
-        return Err(JavascriptBenchmarkError::InvalidConfig(
-            "warmup iterations must be less than or equal to 1000",
-        ));
-    }
-
-    Ok(())
-}
-
-fn benchmark_scenarios() -> [ScenarioDefinition; 21] {
-    [
-        ScenarioDefinition {
-            id: "isolate-startup",
-            workload: "startup-floor",
-            runtime: ScenarioRuntime::NativeExecution,
-            mode: ScenarioMode::BaselineControl,
-            description: "Minimal guest with no extra imports. Measures the current startup floor for create-context plus node process bootstrap.",
-            fixture: "empty entrypoint",
-            entrypoint: "./bench/isolate-startup.mjs",
-            compile_cache: CompileCacheStrategy::Disabled,
-            engine_reuse: EngineReuseStrategy::FreshPerSample,
-            expect_import_metric: false,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "prewarmed-isolate-startup",
-            workload: "startup-floor",
-            runtime: ScenarioRuntime::NativeExecution,
-            mode: ScenarioMode::SameEngineReplay,
-            description: "Minimal guest after a priming pass while one execution engine keeps materialized assets and builtin/polyfill prewarm state alive, isolating the hot startup floor from import work.",
-            fixture: "empty entrypoint",
-            entrypoint: "./bench/isolate-startup.mjs",
-            compile_cache: CompileCacheStrategy::Primed,
-            engine_reuse: EngineReuseStrategy::SharedAcrossScenario,
-            expect_import_metric: false,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "cold-local-import",
-            workload: "local-import",
-            runtime: ScenarioRuntime::NativeExecution,
-            mode: ScenarioMode::TrueColdStart,
-            description: "Cold import of a repo-local ESM graph that simulates layered application modules without compile-cache reuse.",
-            fixture: "24-module local ESM graph",
-            entrypoint: "./bench/cold-local-import.mjs",
-            compile_cache: CompileCacheStrategy::Disabled,
-            engine_reuse: EngineReuseStrategy::FreshPerSample,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "warm-local-import",
-            workload: "local-import",
-            runtime: ScenarioRuntime::NativeExecution,
-            mode: ScenarioMode::NewSessionReplay,
-            description: "Warm import of the same local ESM graph after a compile-cache priming pass in an earlier isolate.",
-            fixture: "24-module local ESM graph",
-            entrypoint: "./bench/warm-local-import.mjs",
-            compile_cache: CompileCacheStrategy::Primed,
-            engine_reuse: EngineReuseStrategy::FreshPerSample,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "same-context-local-import",
-            workload: "local-import",
-            runtime: ScenarioRuntime::NativeExecution,
-            mode: ScenarioMode::SameSessionReplay,
-            description: "Warm import of the same local ESM graph by replaying executions against one reused JavaScript context after a compile-cache priming pass.",
-            fixture: "24-module local ESM graph",
-            entrypoint: "./bench/warm-local-import.mjs",
-            compile_cache: CompileCacheStrategy::Primed,
-            engine_reuse: EngineReuseStrategy::SharedContextAcrossScenario,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "prewarmed-local-import",
-            workload: "local-import",
-            runtime: ScenarioRuntime::NativeExecution,
-            mode: ScenarioMode::SameEngineReplay,
-            description: "Warm import of the same local ESM graph after compile-cache priming while one execution engine keeps materialized assets and builtin/polyfill prewarm state alive.",
-            fixture: "24-module local ESM graph",
-            entrypoint: "./bench/warm-local-import.mjs",
-            compile_cache: CompileCacheStrategy::Primed,
-            engine_reuse: EngineReuseStrategy::SharedAcrossScenario,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "host-local-import",
-            workload: "local-import",
-            runtime: ScenarioRuntime::HostNode,
-            mode: ScenarioMode::HostControl,
-            description: "Direct host-Node control for the same local ESM graph so later runs can separate native executor overhead from guest import work.",
-            fixture: "24-module local ESM graph",
-            entrypoint: "./bench/cold-local-import.mjs",
-            compile_cache: CompileCacheStrategy::Disabled,
-            engine_reuse: EngineReuseStrategy::FreshPerSample,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "builtin-import",
-            workload: "builtin-import",
-            runtime: ScenarioRuntime::NativeExecution,
-            mode: ScenarioMode::TrueColdStart,
-            description: "Import of the common builtin path used by the wrappers and polyfill-adjacent bootstrap code.",
-            fixture: "node:path + node:url + node:fs/promises",
-            entrypoint: "./bench/builtin-import.mjs",
-            compile_cache: CompileCacheStrategy::Disabled,
-            engine_reuse: EngineReuseStrategy::FreshPerSample,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "hot-builtin-stream-import",
-            workload: "builtin-hot-import",
-            runtime: ScenarioRuntime::NativeExecution,
-            mode: ScenarioMode::SameEngineReplay,
-            description: "Hot single-import microbench for `node:stream` after a priming pass inside one reused execution engine.",
-            fixture: "node:stream",
-            entrypoint: "./bench/hot-builtin-stream-import.mjs",
-            compile_cache: CompileCacheStrategy::Primed,
-            engine_reuse: EngineReuseStrategy::SharedAcrossScenario,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "hot-builtin-stream-web-import",
-            workload: "builtin-hot-import",
-            runtime: ScenarioRuntime::NativeExecution,
-            mode: ScenarioMode::SameEngineReplay,
-            description: "Hot single-import microbench for `node:stream/web` after a priming pass inside one reused execution engine.",
-            fixture: "node:stream/web",
-            entrypoint: "./bench/hot-builtin-stream-web-import.mjs",
-            compile_cache: CompileCacheStrategy::Primed,
-            engine_reuse: EngineReuseStrategy::SharedAcrossScenario,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "hot-builtin-crypto-import",
-            workload: "builtin-hot-import",
-            runtime: ScenarioRuntime::NativeExecution,
-            mode: ScenarioMode::SameEngineReplay,
-            description: "Hot single-import microbench for `node:crypto` after a priming pass inside one reused execution engine.",
-            fixture: "node:crypto",
-            entrypoint: "./bench/hot-builtin-crypto-import.mjs",
-            compile_cache: CompileCacheStrategy::Primed,
-            engine_reuse: EngineReuseStrategy::SharedAcrossScenario,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "hot-builtin-zlib-import",
-            workload: "builtin-hot-import",
-            runtime: ScenarioRuntime::NativeExecution,
-            mode: ScenarioMode::SameEngineReplay,
-            description: "Hot single-import microbench for `node:zlib` after a priming pass inside one reused execution engine.",
-            fixture: "node:zlib",
-            entrypoint: "./bench/hot-builtin-zlib-import.mjs",
-            compile_cache: CompileCacheStrategy::Primed,
-            engine_reuse: EngineReuseStrategy::SharedAcrossScenario,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "hot-builtin-assert-import",
-            workload: "builtin-hot-import",
-            runtime: ScenarioRuntime::NativeExecution,
-            mode: ScenarioMode::SameEngineReplay,
-            description: "Hot single-import microbench for `node:assert/strict` after a priming pass inside one reused execution engine.",
-            fixture: "node:assert/strict",
-            entrypoint: "./bench/hot-builtin-assert-import.mjs",
-            compile_cache: CompileCacheStrategy::Primed,
-            engine_reuse: EngineReuseStrategy::SharedAcrossScenario,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "hot-builtin-url-import",
-            workload: "builtin-hot-import",
-            runtime: ScenarioRuntime::NativeExecution,
-            mode: ScenarioMode::SameEngineReplay,
-            description: "Hot single-import microbench for `node:url` after a priming pass inside one reused execution engine.",
-            fixture: "node:url",
-            entrypoint: "./bench/hot-builtin-url-import.mjs",
-            compile_cache: CompileCacheStrategy::Primed,
-            engine_reuse: EngineReuseStrategy::SharedAcrossScenario,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "hot-projected-package-file-import",
-            workload: "projected-package-hot-import",
-            runtime: ScenarioRuntime::HostNode,
-            mode: ScenarioMode::SameEngineReplay,
-            description: "Hot projected-package single-import microbench for the TypeScript compiler file with compile cache and projected-source manifest reuse enabled across repeated contexts.",
-            fixture: "projected TypeScript compiler file",
-            entrypoint: "./bench/hot-projected-package-file-import.mjs",
-            compile_cache: CompileCacheStrategy::Primed,
-            engine_reuse: EngineReuseStrategy::FreshPerSample,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::ProjectedWorkspaceNodeModules,
-        },
-        ScenarioDefinition {
-            id: "large-package-import",
-            workload: "large-package-import",
-            runtime: ScenarioRuntime::HostNode,
-            mode: ScenarioMode::TrueColdStart,
-            description: "Cold import of the real-world `typescript` package from the workspace root `node_modules` tree.",
-            fixture: "typescript",
-            entrypoint: "./bench/large-package-import.mjs",
-            compile_cache: CompileCacheStrategy::Disabled,
-            engine_reuse: EngineReuseStrategy::FreshPerSample,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "projected-package-import",
-            workload: "projected-package-import",
-            runtime: ScenarioRuntime::HostNode,
-            mode: ScenarioMode::HostControl,
-            description: "Projected-package guest-path import of TypeScript with compile cache and projected-source manifest reuse enabled across repeated contexts.",
-            fixture: "projected TypeScript guest-path import",
-            entrypoint: "./bench/projected-package-import.mjs",
-            compile_cache: CompileCacheStrategy::Primed,
-            engine_reuse: EngineReuseStrategy::FreshPerSample,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::ProjectedWorkspaceNodeModules,
-        },
-        ScenarioDefinition {
-            id: "pdf-lib-startup",
-            workload: "pdf-lib-startup",
-            runtime: ScenarioRuntime::HostNode,
-            mode: ScenarioMode::HostControl,
-            description: "Cold import of `pdf-lib` plus representative document setup that creates a PDF page and embeds a standard font.",
-            fixture: "pdf-lib document creation",
-            entrypoint: "./bench/pdf-lib-startup.mjs",
-            compile_cache: CompileCacheStrategy::Disabled,
-            engine_reuse: EngineReuseStrategy::FreshPerSample,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "jszip-startup",
-            workload: "jszip-startup",
-            runtime: ScenarioRuntime::HostNode,
-            mode: ScenarioMode::HostControl,
-            description: "Cold import of `jszip` plus representative archive staging that builds a nested archive structure.",
-            fixture: "jszip archive staging",
-            entrypoint: "./bench/jszip-startup.mjs",
-            compile_cache: CompileCacheStrategy::Disabled,
-            engine_reuse: EngineReuseStrategy::FreshPerSample,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "jszip-end-to-end",
-            workload: "jszip-end-to-end",
-            runtime: ScenarioRuntime::HostNode,
-            mode: ScenarioMode::HostControl,
-            description: "Cold import of `jszip` plus a full compressed archive roundtrip that writes, compresses, reloads, and validates nested archive contents.",
-            fixture: "jszip end-to-end archive roundtrip",
-            entrypoint: "./bench/jszip-end-to-end.mjs",
-            compile_cache: CompileCacheStrategy::Disabled,
-            engine_reuse: EngineReuseStrategy::FreshPerSample,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-        ScenarioDefinition {
-            id: "jszip-repeated-session-compressed",
-            workload: "jszip-repeated-session-compressed",
-            runtime: ScenarioRuntime::HostNode,
-            mode: ScenarioMode::HostControl,
-            description: "Repeated-session `jszip` workload after a compile-cache priming pass that compresses and reloads a nested archive in each fresh isolate.",
-            fixture: "jszip compressed archive roundtrip",
-            entrypoint: "./bench/jszip-repeated-session-compressed.mjs",
-            compile_cache: CompileCacheStrategy::Primed,
-            engine_reuse: EngineReuseStrategy::FreshPerSample,
-            expect_import_metric: true,
-            env: ScenarioEnvironment::None,
-        },
-    ]
-}
-
-fn run_scenario(
-    workspace: &BenchmarkWorkspace,
-    config: &JavascriptBenchmarkConfig,
-    scenario: ScenarioDefinition,
-) -> Result<BenchmarkScenarioReport, JavascriptBenchmarkError> {
-    let compile_cache_root = workspace
-        .root
-        .join("compile-cache")
-        .join(scenario.id.replace('-', "_"));
-    let mut shared_engine = match scenario.engine_reuse {
-        EngineReuseStrategy::FreshPerSample => None,
-        EngineReuseStrategy::SharedAcrossScenario
-        | EngineReuseStrategy::SharedContextAcrossScenario => {
-            Some(JavascriptExecutionEngine::default())
-        }
-    };
-    let mut shared_context = None;
-
-    if scenario.compile_cache == CompileCacheStrategy::Primed {
-        run_sample(
-            workspace,
-            &scenario,
-            Some(compile_cache_root.clone()),
-            shared_engine.as_mut(),
-            &mut shared_context,
-        )?;
-    }
-
-    for _ in 0..config.warmup_iterations {
-        run_sample(
-            workspace,
-            &scenario,
-            compile_cache_root_for_strategy(scenario.compile_cache, &compile_cache_root),
-            shared_engine.as_mut(),
-            &mut shared_context,
-        )?;
-    }
-
-    let mut wall_samples_ms = Vec::with_capacity(config.iterations);
-    let mut guest_import_samples_ms = if scenario.expect_import_metric {
-        Some(Vec::with_capacity(config.iterations))
-    } else {
-        None
-    };
-    let mut context_setup_samples_ms = Vec::with_capacity(config.iterations);
-    let mut startup_samples_ms = Vec::with_capacity(config.iterations);
-    let mut completion_samples_ms = Vec::with_capacity(config.iterations);
-    let mut resource_usage_samples = BenchmarkResourceUsage::<Vec<f64>>::default();
-
-    for _ in 0..config.iterations {
-        let sample = run_sample(
-            workspace,
-            &scenario,
-            compile_cache_root_for_strategy(scenario.compile_cache, &compile_cache_root),
-            shared_engine.as_mut(),
-            &mut shared_context,
-        )?;
-        wall_samples_ms.push(sample.wall_ms);
-        context_setup_samples_ms.push(sample.context_setup_ms);
-        startup_samples_ms.push(sample.startup_ms);
-        completion_samples_ms.push(sample.completion_ms);
-
-        if let (Some(import_ms), Some(samples)) =
-            (sample.guest_import_ms, guest_import_samples_ms.as_mut())
-        {
-            samples.push(import_ms);
-        }
-        if let Some(resource_usage) = sample.resource_usage.as_ref() {
-            resource_usage_samples.push_sample(resource_usage);
-        }
-    }
-
-    let startup_overhead_samples_ms = guest_import_samples_ms.as_ref().map(|guest_samples| {
-        context_setup_samples_ms
-            .iter()
-            .zip(startup_samples_ms.iter())
-            .zip(completion_samples_ms.iter())
-            .zip(guest_samples.iter())
-            .map(|(((context_ms, startup_ms), completion_ms), _guest_ms)| {
-                context_ms + startup_ms + completion_ms
-            })
-            .collect::<Vec<_>>()
-    });
-
-    let phase_samples_ms = BenchmarkScenarioPhases {
-        context_setup_ms: context_setup_samples_ms,
-        startup_ms: startup_samples_ms,
-        guest_execution_ms: guest_import_samples_ms.clone(),
-        completion_ms: completion_samples_ms,
-    };
-    let resource_usage_samples = resource_usage_samples.into_populated();
-
-    Ok(BenchmarkScenarioReport {
-        id: scenario.id,
-        workload: scenario.workload,
-        runtime: scenario.runtime.label(),
-        mode: scenario.mode.label(),
-        description: scenario.description,
-        fixture: scenario.fixture,
-        compile_cache: scenario.compile_cache.label(),
-        wall_stats: compute_stats(&wall_samples_ms),
-        guest_import_stats: guest_import_samples_ms
-            .as_ref()
-            .map(|samples| compute_stats(samples)),
-        startup_overhead_stats: startup_overhead_samples_ms
-            .as_ref()
-            .map(|samples| compute_stats(samples)),
-        phase_stats: BenchmarkScenarioPhases {
-            context_setup_ms: compute_stats(&phase_samples_ms.context_setup_ms),
-            startup_ms: compute_stats(&phase_samples_ms.startup_ms),
-            guest_execution_ms: phase_samples_ms
-                .guest_execution_ms
-                .as_ref()
-                .map(|samples| compute_stats(samples)),
-            completion_ms: compute_stats(&phase_samples_ms.completion_ms),
-        },
-        resource_usage_stats: resource_usage_samples
-            .as_ref()
-            .and_then(compute_resource_usage_stats),
-        wall_samples_ms,
-        guest_import_samples_ms,
-        startup_overhead_samples_ms,
-        phase_samples_ms,
-        resource_usage_samples,
-    })
-}
-
-fn compile_cache_root_for_strategy(strategy: CompileCacheStrategy, root: &Path) -> Option<PathBuf> {
-    match strategy {
-        CompileCacheStrategy::Disabled => None,
-        CompileCacheStrategy::Primed => Some(root.to_path_buf()),
-    }
-}
-
-fn run_sample(
-    workspace: &BenchmarkWorkspace,
-    scenario: &ScenarioDefinition,
-    compile_cache_root: Option<PathBuf>,
-    shared_engine: Option<&mut JavascriptExecutionEngine>,
-    shared_context: &mut Option<crate::JavascriptContext>,
-) -> Result<SampleMeasurement, JavascriptBenchmarkError> {
-    match scenario.runtime {
-        ScenarioRuntime::NativeExecution => run_native_sample(
-            workspace,
-            scenario,
-            compile_cache_root,
-            shared_engine,
-            shared_context,
-        ),
-        ScenarioRuntime::HostNode => run_host_node_sample(workspace, scenario),
-    }
-}
-
-fn run_native_sample(
-    workspace: &BenchmarkWorkspace,
-    scenario: &ScenarioDefinition,
-    compile_cache_root: Option<PathBuf>,
-    shared_engine: Option<&mut JavascriptExecutionEngine>,
-    shared_context: &mut Option<crate::JavascriptContext>,
-) -> Result<SampleMeasurement, JavascriptBenchmarkError> {
-    let mut fresh_engine = JavascriptExecutionEngine::default();
-    let engine = shared_engine.unwrap_or(&mut fresh_engine);
-    let context_started_at = Instant::now();
-    let (context, context_setup_ms) = match scenario.engine_reuse {
-        EngineReuseStrategy::SharedContextAcrossScenario => {
-            if let Some(context) = shared_context.as_ref() {
-                (context.clone(), 0.0)
-            } else {
-                let context = engine.create_context(CreateJavascriptContextRequest {
-                    vm_id: String::from("vm-bench"),
-                    bootstrap_module: None,
-                    compile_cache_root,
-                });
-                let context_setup_ms = context_started_at.elapsed().as_secs_f64() * 1000.0;
-                *shared_context = Some(context.clone());
-                (context, context_setup_ms)
-            }
-        }
-        _ => {
-            let context = engine.create_context(CreateJavascriptContextRequest {
-                vm_id: String::from("vm-bench"),
-                bootstrap_module: None,
-                compile_cache_root,
-            });
-            let context_setup_ms = context_started_at.elapsed().as_secs_f64() * 1000.0;
-            (context, context_setup_ms)
-        }
-    };
-
-    let startup_started_at = Instant::now();
-    let execution = engine.start_execution(StartJavascriptExecutionRequest {
-        limits: Default::default(),
-        guest_runtime: Default::default(),
-        vm_id: String::from("vm-bench"),
-        context_id: context.context_id,
-        argv: vec![String::from(scenario.entrypoint)],
-        env: scenario_env(workspace, scenario),
-        cwd: workspace.root.clone(),
-        wasm_module_bytes: None,
-        inline_code: None,
-    })?;
-    let startup_ms = startup_started_at.elapsed().as_secs_f64() * 1000.0;
-
-    let completion_started_at = Instant::now();
-    let result = execution.wait()?;
-    let completion_total_ms = completion_started_at.elapsed().as_secs_f64() * 1000.0;
-    let stdout = String::from_utf8(result.stdout)?;
-    let stderr = String::from_utf8(result.stderr)?;
-
-    if result.exit_code != 0 {
-        return Err(JavascriptBenchmarkError::NonZeroExit {
-            scenario: scenario.id,
-            exit_code: result.exit_code,
-            stderr,
-        });
-    }
-
-    let parsed_metrics =
-        parse_benchmark_metrics(scenario.id, &stdout, scenario.expect_import_metric)?;
-    let guest_import_ms = parsed_metrics.import_ms;
-    let completion_ms = guest_import_ms
-        .map(|guest_ms| saturating_delta_ms(completion_total_ms, guest_ms))
-        .unwrap_or(completion_total_ms);
-    let wall_ms = context_setup_ms + startup_ms + completion_total_ms;
-
-    Ok(SampleMeasurement {
-        wall_ms,
-        guest_import_ms,
-        context_setup_ms,
-        startup_ms,
-        completion_ms,
-        resource_usage: parsed_metrics.resource_usage,
-    })
-}
-
-fn run_host_node_sample(
-    workspace: &BenchmarkWorkspace,
-    scenario: &ScenarioDefinition,
-) -> Result<SampleMeasurement, JavascriptBenchmarkError> {
-    let started_at = Instant::now();
-    let output = Command::new(crate::host_node::node_binary())
-        .arg(scenario.entrypoint)
-        .current_dir(&workspace.root)
-        .envs(scenario_env(workspace, scenario))
-        .output()?;
-    let wall_ms = started_at.elapsed().as_secs_f64() * 1000.0;
-    let stdout = String::from_utf8(output.stdout)?;
-    let stderr = String::from_utf8(output.stderr)?;
-
-    if !output.status.success() {
-        return Err(JavascriptBenchmarkError::NonZeroExit {
-            scenario: scenario.id,
-            exit_code: output.status.code().unwrap_or(-1),
-            stderr,
-        });
-    }
-
-    let parsed_metrics =
-        parse_benchmark_metrics(scenario.id, &stdout, scenario.expect_import_metric)?;
-    let guest_import_ms = parsed_metrics.import_ms;
-    let startup_ms = guest_import_ms
-        .map(|guest_ms| saturating_delta_ms(wall_ms, guest_ms))
-        .unwrap_or(wall_ms);
-
-    Ok(SampleMeasurement {
-        wall_ms,
-        guest_import_ms,
-        context_setup_ms: 0.0,
-        startup_ms,
-        completion_ms: 0.0,
-        resource_usage: parsed_metrics.resource_usage,
-    })
-}
-
-fn scenario_env(
-    workspace: &BenchmarkWorkspace,
-    scenario: &ScenarioDefinition,
-) -> BTreeMap<String, String> {
-    match scenario.env {
-        ScenarioEnvironment::None => BTreeMap::new(),
-        ScenarioEnvironment::ProjectedWorkspaceNodeModules => {
-            let projected_node_modules = workspace.repo_root.join("node_modules");
-            let projected_node_modules_json =
-                serde_json::to_string(&vec![projected_node_modules.display().to_string()])
-                    .expect("serialize projected node_modules read path");
-            let guest_path_mappings = serde_json::json!([{
-                "guestPath": "/root/node_modules",
-                "hostPath": projected_node_modules.display().to_string(),
-            }])
-            .to_string();
-
-            BTreeMap::from([
-                (
-                    String::from("AGENTOS_EXTRA_FS_READ_PATHS"),
-                    projected_node_modules_json,
-                ),
-                (
-                    String::from("AGENTOS_GUEST_PATH_MAPPINGS"),
-                    guest_path_mappings,
-                ),
-            ])
-        }
-    }
-}
-
-fn measure_transport_rtt(
-    workspace: &BenchmarkWorkspace,
-    config: &JavascriptBenchmarkConfig,
-) -> Result<Vec<BenchmarkTransportRttReport>, JavascriptBenchmarkError> {
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-transport"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-    let mut execution = engine.start_execution(StartJavascriptExecutionRequest {
-        limits: Default::default(),
-        guest_runtime: Default::default(),
-        vm_id: String::from("vm-transport"),
-        context_id: context.context_id,
-        argv: vec![String::from("./bench/transport-echo.mjs")],
-        env: BTreeMap::from([(
-            String::from("SECURE_EXEC_KEEP_STDIN_OPEN"),
-            String::from("1"),
-        )]),
-        cwd: workspace.root.clone(),
-        wasm_module_bytes: None,
-        inline_code: None,
-    })?;
-
-    let mut stdout_buffer = String::new();
-    let mut stderr_buffer = String::new();
-    let mut reports = Vec::with_capacity(TRANSPORT_RTT_PAYLOAD_BYTES.len());
-
-    for payload_bytes in TRANSPORT_RTT_PAYLOAD_BYTES {
-        for warmup_index in 0..config.warmup_iterations {
-            let label = format!("warmup-{}-{warmup_index}", payload_bytes);
-            measure_transport_roundtrip(
-                &mut execution,
-                payload_bytes,
-                &label,
-                &mut stdout_buffer,
-                &mut stderr_buffer,
-            )?;
-        }
-
-        let mut samples_ms = Vec::with_capacity(config.iterations);
-        for iteration in 0..config.iterations {
-            let label = format!("measure-{}-{iteration}", payload_bytes);
-            samples_ms.push(measure_transport_roundtrip(
-                &mut execution,
-                payload_bytes,
-                &label,
-                &mut stdout_buffer,
-                &mut stderr_buffer,
-            )?);
-        }
-
-        reports.push(BenchmarkTransportRttReport {
-            channel: TRANSPORT_RTT_CHANNEL,
-            payload_bytes,
-            stats: compute_stats(&samples_ms),
-            samples_ms,
-        });
-    }
-
-    execution.close_stdin()?;
-    let result = execution.wait()?;
-    if result.exit_code != 0 {
-        stderr_buffer.push_str(&String::from_utf8(result.stderr)?);
-        return Err(JavascriptBenchmarkError::TransportProbeExited {
-            exit_code: result.exit_code,
-            stderr: stderr_buffer,
-        });
-    }
-
-    Ok(reports)
-}
-
-fn measure_transport_roundtrip(
-    execution: &mut crate::JavascriptExecution,
-    payload_bytes: usize,
-    label: &str,
-    stdout_buffer: &mut String,
-    stderr_buffer: &mut String,
-) -> Result<f64, JavascriptBenchmarkError> {
-    let payload = transport_probe_payload(payload_bytes, label);
-    let expected_line = format!("{payload}\n");
-    let started_at = Instant::now();
-    execution.write_stdin(expected_line.as_bytes())?;
-
-    loop {
-        if let Some(line) = take_complete_line(stdout_buffer) {
-            if line == payload {
-                return Ok(started_at.elapsed().as_secs_f64() * 1000.0);
-            }
-            return Err(JavascriptBenchmarkError::InvalidTransportProbeResponse {
-                payload_bytes,
-                expected: payload,
-                actual: line,
-            });
-        }
-
-        match execution.poll_event_blocking(TRANSPORT_POLL_TIMEOUT)? {
-            Some(crate::JavascriptExecutionEvent::Stdout(chunk)) => {
-                stdout_buffer.push_str(&String::from_utf8(chunk)?);
-            }
-            Some(crate::JavascriptExecutionEvent::Stderr(chunk)) => {
-                stderr_buffer.push_str(&String::from_utf8(chunk)?);
-            }
-            Some(crate::JavascriptExecutionEvent::SyncRpcRequest(request)) => {
-                return Err(JavascriptBenchmarkError::Execution(
-                    JavascriptExecutionError::PendingSyncRpcRequest(request.id),
-                ));
-            }
-            Some(crate::JavascriptExecutionEvent::SignalState { .. }) => {}
-            Some(crate::JavascriptExecutionEvent::Exited(exit_code)) => {
-                return Err(JavascriptBenchmarkError::TransportProbeExited {
-                    exit_code,
-                    stderr: stderr_buffer.clone(),
-                });
-            }
-            None => {
-                return Err(JavascriptBenchmarkError::TransportProbeTimeout { payload_bytes });
-            }
-        }
-    }
-}
-
-fn transport_probe_payload(payload_bytes: usize, label: &str) -> String {
-    if payload_bytes == 0 {
-        return format!("transport:{label}:");
-    }
-
-    let header = format!("transport:{label}:");
-    let fill_len = payload_bytes.saturating_sub(header.len());
-    format!("{header}{}", "x".repeat(fill_len))
-}
-
-fn take_complete_line(buffer: &mut String) -> Option<String> {
-    let newline_index = buffer.find('\n')?;
-    let line = buffer[..newline_index].trim_end_matches('\r').to_owned();
-    buffer.drain(..=newline_index);
-    Some(line)
-}
-
-#[derive(Debug, Default, Deserialize)]
-struct ParsedBenchmarkMetrics {
-    #[serde(default)]
-    import_ms: Option<f64>,
-    #[serde(default)]
-    resource_usage: Option<BenchmarkResourceUsage<f64>>,
-}
-
-fn parse_benchmark_metrics(
-    scenario_id: &'static str,
-    stdout: &str,
-    expect_import_metric: bool,
-) -> Result<ParsedBenchmarkMetrics, JavascriptBenchmarkError> {
-    let raw_value = stdout
-        .lines()
-        .rev()
-        .find_map(|line| line.strip_prefix(BENCHMARK_MARKER_PREFIX))
-        .ok_or(JavascriptBenchmarkError::MissingBenchmarkMetric(
-            scenario_id,
-        ))?
-        .trim();
-
-    if let Ok(parsed) = serde_json::from_str::<ParsedBenchmarkMetrics>(raw_value) {
-        let has_resource_usage = match parsed.resource_usage.as_ref() {
-            Some(resource_usage) => !resource_usage.is_empty(),
-            None => false,
-        };
-        if parsed.import_ms.is_some() || has_resource_usage {
-            if expect_import_metric && parsed.import_ms.is_none() {
-                return Err(JavascriptBenchmarkError::MissingBenchmarkMetric(
-                    scenario_id,
-                ));
-            }
-            return Ok(parsed);
-        }
-    }
-
-    raw_value
-        .parse::<f64>()
-        .map(|import_ms| ParsedBenchmarkMetrics {
-            import_ms: Some(import_ms),
-            resource_usage: None,
-        })
-        .map_err(|_| JavascriptBenchmarkError::InvalidBenchmarkMetric {
-            scenario: scenario_id,
-            raw_value: raw_value.to_owned(),
-        })
-}
-
-fn workspace_root() -> Result<PathBuf, JavascriptBenchmarkError> {
-    let manifest_dir = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
-    manifest_dir
-        .parent()
-        .and_then(Path::parent)
-        .map(Path::to_path_buf)
-        .ok_or(JavascriptBenchmarkError::InvalidWorkspaceRoot(manifest_dir))
-}
-
-fn load_benchmark_artifact(
-    baseline_path: &Path,
-) -> Result<StoredBenchmarkArtifact, JavascriptBenchmarkError> {
-    let raw = fs::read_to_string(baseline_path)?;
-    serde_json::from_str(&raw).map_err(|err| JavascriptBenchmarkError::InvalidBaselineReport {
-        path: baseline_path.to_path_buf(),
-        message: err.to_string(),
-    })
-}
-
-fn benchmark_host() -> Result<BenchmarkHost, JavascriptBenchmarkError> {
-    let node_binary = crate::host_node::node_binary();
-    let output = Command::new(&node_binary)
-        .arg("--version")
-        .output()
-        .map_err(JavascriptBenchmarkError::NodeVersion)?;
-    let node_version = String::from_utf8(output.stdout)?;
-
-    Ok(BenchmarkHost {
-        node_binary,
-        node_version,
-        os: env::consts::OS,
-        arch: env::consts::ARCH,
-        logical_cpus: std::thread::available_parallelism()
-            .map(usize::from)
-            .unwrap_or(1),
-    })
-}
-
-fn write_benchmark_workspace(
-    root: &Path,
-    repo_root: &Path,
-) -> Result<(), JavascriptBenchmarkError> {
-    fs::create_dir_all(root.join("bench"))?;
-    fs::create_dir_all(root.join("bench/local-graph"))?;
-    let host_node_modules = repo_root.join("node_modules");
-    let workspace_node_modules = root.join("node_modules");
-    if host_node_modules.exists() && !workspace_node_modules.exists() {
-        std::os::unix::fs::symlink(&host_node_modules, &workspace_node_modules)?;
-    }
-    fs::write(
-        root.join("package.json"),
-        "{\n  \"name\": \"secure-exec-execution-bench\",\n  \"private\": true,\n  \"type\": \"module\"\n}\n",
-    )?;
-
-    for index in 0..LOCAL_GRAPH_MODULE_COUNT {
-        let path = root
-            .join("bench/local-graph")
-            .join(format!("mod-{index:02}.mjs"));
-        let source = if index == 0 {
-            String::from("export const value = 1;\n")
-        } else {
-            format!(
-                "import {{ value as previous }} from './mod-{previous:02}.mjs';\nexport const value = previous + {index};\n",
-                previous = index - 1
-            )
-        };
-        fs::write(path, source)?;
-    }
-
-    let final_value = local_graph_terminal_value();
-    fs::write(
-        root.join("bench/local-graph/root.mjs"),
-        format!(
-            "import {{ value }} from './mod-{last:02}.mjs';\nexport {{ value }};\nexport const expected = {final_value};\n",
-            last = LOCAL_GRAPH_MODULE_COUNT - 1
-        ),
-    )?;
-    fs::write(
-        root.join("bench/benchmark-metrics.mjs"),
-        benchmark_metrics_module_source(),
-    )?;
-
-    fs::write(
-        root.join("bench/isolate-startup.mjs"),
-        resource_only_entrypoint_source("console.log('isolate-ready');"),
-    )?;
-    fs::write(
-        root.join("bench/cold-local-import.mjs"),
-        local_import_entrypoint_source(final_value),
-    )?;
-    fs::write(
-        root.join("bench/warm-local-import.mjs"),
-        local_import_entrypoint_source(final_value),
-    )?;
-    fs::write(
-        root.join("bench/builtin-import.mjs"),
-        timed_entrypoint_source(
-            "const [pathMod, fsMod, urlMod] = await Promise.all([\n  import('node:path'),\n  import('node:fs/promises'),\n  import('node:url'),\n]);\nif (typeof pathMod.basename !== 'function' || typeof fsMod.readFile !== 'function' || typeof urlMod.pathToFileURL !== 'function') {\n  throw new Error('builtin import fixture did not load expected exports');\n}",
-        ),
-    )?;
-    fs::write(
-        root.join("bench/hot-builtin-stream-import.mjs"),
-        single_import_entrypoint_source(
-            "node:stream",
-            "typeof imported.Readable === 'function'",
-            "node:stream import did not expose Readable",
-        ),
-    )?;
-    fs::write(
-        root.join("bench/hot-builtin-stream-web-import.mjs"),
-        single_import_entrypoint_source(
-            "node:stream/web",
-            "typeof imported.ReadableStream === 'function'",
-            "node:stream/web import did not expose ReadableStream",
-        ),
-    )?;
-    fs::write(
-        root.join("bench/hot-builtin-crypto-import.mjs"),
-        single_import_entrypoint_source(
-            "node:crypto",
-            "typeof imported.createHash === 'function'",
-            "node:crypto import did not expose createHash",
-        ),
-    )?;
-    fs::write(
-        root.join("bench/hot-builtin-zlib-import.mjs"),
-        single_import_entrypoint_source(
-            "node:zlib",
-            "typeof imported.gzipSync === 'function'",
-            "node:zlib import did not expose gzipSync",
-        ),
-    )?;
-    fs::write(
-        root.join("bench/hot-builtin-assert-import.mjs"),
-        single_import_entrypoint_source(
-            "node:assert/strict",
-            "typeof imported.strictEqual === 'function'",
-            "node:assert/strict import did not expose strictEqual",
-        ),
-    )?;
-    fs::write(
-        root.join("bench/hot-builtin-url-import.mjs"),
-        single_import_entrypoint_source(
-            "node:url",
-            "typeof imported.pathToFileURL === 'function'",
-            "node:url import did not expose pathToFileURL",
-        ),
-    )?;
-    fs::write(
-        root.join("bench/large-package-import.mjs"),
-        timed_entrypoint_source(
-            "const typescript = await import('typescript');\nif (typeof typescript.transpileModule !== 'function') {\n  throw new Error('typescript import did not expose transpileModule');\n}",
-        ),
-    )?;
-    fs::write(
-        root.join("bench/hot-projected-package-file-import.mjs"),
-        projected_package_file_import_entrypoint_source(),
-    )?;
-    fs::write(
-        root.join("bench/projected-package-import.mjs"),
-        projected_package_import_entrypoint_source(),
-    )?;
-    fs::write(
-        root.join("bench/pdf-lib-startup.mjs"),
-        pdf_lib_startup_entrypoint_source(),
-    )?;
-    fs::write(
-        root.join("bench/jszip-startup.mjs"),
-        jszip_startup_entrypoint_source(),
-    )?;
-    fs::write(
-        root.join("bench/jszip-end-to-end.mjs"),
-        jszip_end_to_end_entrypoint_source(),
-    )?;
-    fs::write(
-        root.join("bench/jszip-repeated-session-compressed.mjs"),
-        jszip_repeated_session_compressed_entrypoint_source(),
-    )?;
-    fs::write(
-        root.join("bench/transport-echo.mjs"),
-        "process.stdin.setEncoding('utf8');\nlet buffered = '';\nconst flushLines = () => {\n  let newlineIndex = buffered.indexOf('\\n');\n  while (newlineIndex >= 0) {\n    const line = buffered.slice(0, newlineIndex).replace(/\\r$/, '');\n    buffered = buffered.slice(newlineIndex + 1);\n    process.stdout.write(line);\n    newlineIndex = buffered.indexOf('\\n');\n  }\n};\nprocess.stdin.on('data', (chunk) => {\n  buffered += chunk;\n  flushLines();\n});\nprocess.stdin.on('end', () => {\n  if (buffered.length > 0) {\n    process.stdout.write(buffered.replace(/\\r$/, ''));\n  }\n});\n",
-    )?;
-
-    Ok(())
-}
-
-fn local_import_entrypoint_source(final_value: usize) -> String {
-    timed_entrypoint_source(&format!(
-        "const graph = await import('./local-graph/root.mjs');\nif (graph.value !== {final_value} || graph.expected !== {final_value}) {{\n  throw new Error(`local graph import returned ${{\n    graph.value\n  }} instead of {final_value}`);\n}}"
-    ))
-}
-
-fn single_import_entrypoint_source(
-    specifier: &str,
-    validation_expression: &str,
-    error_message: &str,
-) -> String {
-    timed_entrypoint_source(&format!(
-        "const imported = await import('{specifier}');\nif (!({validation_expression})) {{\n  throw new Error('{error_message}');\n}}"
-    ))
-}
-
-fn projected_package_file_import_entrypoint_source() -> String {
-    timed_entrypoint_source(
-        "const typescriptModule = await import('../node_modules/typescript/lib/typescript.js');\nconst typescript = typescriptModule.default ?? typescriptModule;\nif (typeof typescript.transpileModule !== 'function') {\n  throw new Error('projected package file import did not expose transpileModule');\n}",
-    )
-}
-
-fn projected_package_import_entrypoint_source() -> String {
-    timed_entrypoint_source(
-        "const typescriptModule = await import('../node_modules/typescript/lib/typescript.js');\nconst typescript = typescriptModule.default ?? typescriptModule;\nconst sourceFile = typescript.createSourceFile(\n  'bench.ts',\n  'const answer: number = 42;',\n  typescript.ScriptTarget.ES2022,\n  true,\n);\nif (\n  typeof typescript.transpileModule !== 'function' ||\n  typeof typescript.createSourceFile !== 'function' ||\n  !sourceFile ||\n  sourceFile.statements.length !== 1\n) {\n  throw new Error('projected package import did not expose TypeScript compiler APIs');\n}",
-    )
-}
-
-fn pdf_lib_startup_entrypoint_source() -> String {
-    timed_entrypoint_source(
-        "const pdfLib = await import('pdf-lib');\nconst pdfDoc = await pdfLib.PDFDocument.create();\nconst page = pdfDoc.addPage([612, 792]);\nconst font = await pdfDoc.embedFont(pdfLib.StandardFonts.Helvetica);\npage.drawText('secure-exec pdf-lib benchmark', {\n  x: 50,\n  y: 750,\n  font,\n  size: 18,\n});\nif (pdfDoc.getPageCount() !== 1 || page.getSize().width !== 612) {\n  throw new Error('pdf-lib fixture did not create the expected document');\n}",
-    )
-}
-
-fn jszip_startup_entrypoint_source() -> String {
-    timed_entrypoint_source(
-        "const jszipModule = await import('jszip');\nconst JSZip = jszipModule.default ?? jszipModule;\nconst zip = new JSZip();\nzip.file('README.txt', 'secure-exec benchmark archive');\nconst notes = zip.folder('notes');\nif (!notes) {\n  throw new Error('jszip fixture failed to create nested folder');\n}\nnotes.file('todo.txt', 'benchmark staging payload');\nconst fileCount = Object.values(zip.files).filter((entry) => !entry.dir).length;\nif (typeof zip.generateAsync !== 'function' || fileCount !== 2) {\n  throw new Error('jszip fixture did not stage the expected archive');\n}",
-    )
-}
-
-fn jszip_end_to_end_entrypoint_source() -> String {
-    timed_entrypoint_source(
-        "const jszipModule = await import('jszip');\nconst JSZip = jszipModule.default ?? jszipModule;\nconst zip = new JSZip();\nconst repeatedPayload = 'secure-exec benchmark payload '.repeat(512);\nzip.file('README.txt', repeatedPayload);\nconst notes = zip.folder('notes');\nif (!notes) {\n  throw new Error('jszip end-to-end fixture failed to create notes folder');\n}\nnotes.file('todo.txt', 'complete the archive roundtrip');\nconst data = zip.folder('data');\nif (!data) {\n  throw new Error('jszip end-to-end fixture failed to create data folder');\n}\ndata.file('payload.json', JSON.stringify({\n  repeatedPayloadLength: repeatedPayload.length,\n  mode: 'cold-end-to-end',\n}));\nconst archiveBytes = await zip.generateAsync({\n  type: 'uint8array',\n  compression: 'DEFLATE',\n  compressionOptions: { level: 6 },\n});\nconst restored = await JSZip.loadAsync(archiveBytes);\nconst restoredFileCount = Object.values(restored.files).filter((entry) => !entry.dir).length;\nconst restoredReadme = await restored.file('README.txt')?.async('string');\nconst restoredTodo = await restored.file('notes/todo.txt')?.async('string');\nconst restoredPayload = await restored.file('data/payload.json')?.async('string');\nif (\n  archiveBytes.byteLength >= repeatedPayload.length ||\n  restoredFileCount !== 3 ||\n  restoredReadme !== repeatedPayload ||\n  restoredTodo !== 'complete the archive roundtrip' ||\n  !restoredPayload?.includes('cold-end-to-end')\n) {\n  throw new Error('jszip end-to-end fixture did not complete the compressed archive roundtrip');\n}",
-    )
-}
-
-fn jszip_repeated_session_compressed_entrypoint_source() -> String {
-    timed_entrypoint_source(
-        "const jszipModule = await import('jszip');\nconst JSZip = jszipModule.default ?? jszipModule;\nconst zip = new JSZip();\nconst repeatedPayload = 'secure-exec benchmark payload '.repeat(512);\nzip.file('README.txt', repeatedPayload);\nconst notes = zip.folder('notes');\nif (!notes) {\n  throw new Error('jszip repeated-session fixture failed to create notes folder');\n}\nnotes.file('todo.txt', 'repeat this session workload');\nconst data = zip.folder('data');\nif (!data) {\n  throw new Error('jszip repeated-session fixture failed to create data folder');\n}\ndata.file('payload.json', JSON.stringify({\n  repeatedPayloadLength: repeatedPayload.length,\n  repeatedSessions: true,\n}));\nconst archiveBytes = await zip.generateAsync({\n  type: 'uint8array',\n  compression: 'DEFLATE',\n  compressionOptions: { level: 6 },\n});\nconst restored = await JSZip.loadAsync(archiveBytes);\nconst restoredFileCount = Object.values(restored.files).filter((entry) => !entry.dir).length;\nconst restoredReadme = await restored.file('README.txt')?.async('string');\nconst restoredTodo = await restored.file('notes/todo.txt')?.async('string');\nif (\n  archiveBytes.byteLength >= repeatedPayload.length ||\n  restoredFileCount !== 3 ||\n  restoredReadme !== repeatedPayload ||\n  restoredTodo !== 'repeat this session workload'\n) {\n  throw new Error('jszip repeated-session fixture did not complete the compressed archive roundtrip');\n}",
-    )
-}
-
-fn benchmark_metrics_module_source() -> String {
-    format!(
-        "const BENCHMARK_MARKER_PREFIX = '{BENCHMARK_MARKER_PREFIX}';\n\nexport function emitBenchmarkMetrics(importMs) {{\n  const memoryUsage = process.memoryUsage();\n  const resourceUsage = typeof process.resourceUsage === 'function'\n    ? process.resourceUsage()\n    : null;\n  const payload = {{\n    resource_usage: {{\n      rss_bytes: memoryUsage.rss,\n      heap_used_bytes: memoryUsage.heapUsed,\n      ...(resourceUsage\n        ? {{\n            cpu_user_us: resourceUsage.userCPUTime,\n            cpu_system_us: resourceUsage.systemCPUTime,\n            cpu_total_us: resourceUsage.userCPUTime + resourceUsage.systemCPUTime,\n          }}\n        : {{}}),\n    }},\n  }};\n\n  if (typeof importMs === 'number') {{\n    payload.import_ms = importMs;\n  }}\n\n  console.log(BENCHMARK_MARKER_PREFIX + JSON.stringify(payload));\n}}\n"
-    )
-}
-
-fn resource_only_entrypoint_source(body: &str) -> String {
-    format!(
-        "import {{ emitBenchmarkMetrics }} from './benchmark-metrics.mjs';\n{body}\nemitBenchmarkMetrics();\n"
-    )
-}
-
-fn timed_entrypoint_source(body: &str) -> String {
-    format!(
-        "import {{ performance }} from 'node:perf_hooks';\nimport {{ emitBenchmarkMetrics }} from './benchmark-metrics.mjs';\nconst started = performance.now();\n{body}\nemitBenchmarkMetrics(performance.now() - started);\n"
-    )
-}
-
-fn local_graph_terminal_value() -> usize {
-    let mut value = 1;
-
-    for index in 1..LOCAL_GRAPH_MODULE_COUNT {
-        value += index;
-    }
-
-    value
-}
-
-fn compute_distribution_stats(samples: &[f64]) -> BenchmarkDistributionStats {
-    let mut sorted = samples.to_vec();
-    sorted.sort_by(|a, b| a.total_cmp(b));
-    let mean = sorted.iter().sum::<f64>() / sorted.len() as f64;
-
-    BenchmarkDistributionStats {
-        mean,
-        p50: percentile(&sorted, 50.0),
-        p95: percentile(&sorted, 95.0),
-        min: *sorted.first().unwrap_or(&0.0),
-        max: *sorted.last().unwrap_or(&0.0),
-        stddev: standard_deviation(&sorted, mean),
-    }
-}
-
-fn compute_stats(samples: &[f64]) -> BenchmarkStats {
-    let stats = compute_distribution_stats(samples);
-
-    BenchmarkStats {
-        mean_ms: stats.mean,
-        p50_ms: stats.p50,
-        p95_ms: stats.p95,
-        min_ms: stats.min,
-        max_ms: stats.max,
-        stddev_ms: stats.stddev,
-    }
-}
-
-fn compute_resource_usage_stats(
-    samples: &BenchmarkResourceUsage<Vec<f64>>,
-) -> Option<BenchmarkResourceUsage<BenchmarkDistributionStats>> {
-    let stats = BenchmarkResourceUsage {
-        rss_bytes: samples
-            .rss_bytes
-            .as_ref()
-            .map(|samples| compute_distribution_stats(samples)),
-        heap_used_bytes: samples
-            .heap_used_bytes
-            .as_ref()
-            .map(|samples| compute_distribution_stats(samples)),
-        cpu_user_us: samples
-            .cpu_user_us
-            .as_ref()
-            .map(|samples| compute_distribution_stats(samples)),
-        cpu_system_us: samples
-            .cpu_system_us
-            .as_ref()
-            .map(|samples| compute_distribution_stats(samples)),
-        cpu_total_us: samples
-            .cpu_total_us
-            .as_ref()
-            .map(|samples| compute_distribution_stats(samples)),
-    };
-
-    (!stats.is_empty()).then_some(stats)
-}
-
-fn standard_deviation(samples: &[f64], mean: f64) -> f64 {
-    if samples.is_empty() {
-        return 0.0;
-    }
-
-    let variance = samples
-        .iter()
-        .map(|sample| {
-            let delta = sample - mean;
-            delta * delta
-        })
-        .sum::<f64>()
-        / samples.len() as f64;
-
-    variance.sqrt()
-}
-
-fn percentile(sorted: &[f64], p: f64) -> f64 {
-    if sorted.is_empty() {
-        return 0.0;
-    }
-
-    let rank = ((p / 100.0) * sorted.len() as f64).ceil() as usize;
-    let index = rank.saturating_sub(1).min(sorted.len() - 1);
-    sorted[index]
-}
-
-fn percentage_reduction(original: f64, current: f64) -> f64 {
-    if original <= 0.0 {
-        0.0
-    } else {
-        ((original - current) / original) * 100.0
-    }
-}
-
-fn percentage_share(part: f64, total: f64) -> f64 {
-    if total <= 0.0 {
-        0.0
-    } else {
-        (part / total) * 100.0
-    }
-}
-
-fn safe_ratio(lhs: f64, rhs: f64) -> f64 {
-    if rhs <= 0.0 {
-        0.0
-    } else {
-        lhs / rhs
-    }
-}
-
-fn saturating_delta_ms(total_ms: f64, subtracted_ms: f64) -> f64 {
-    (total_ms - subtracted_ms).max(0.0)
-}
-
-fn format_ms(value: f64) -> String {
-    format!("{value:.2}")
-}
-
-fn format_hotspot_value(unit: &str, value: f64) -> String {
-    match unit {
-        "pct" => format!("{value:.1}%"),
-        "MiB" => format_mib(value),
-        _ => format_ms(value),
-    }
-}
-
-fn format_sample_list(samples: &[f64]) -> String {
-    format_scaled_sample_list(samples, std::convert::identity)
-}
-
-fn format_scaled_sample_list(samples: &[f64], scale: impl Fn(f64) -> f64) -> String {
-    let mut formatted = String::from("[");
-
-    for (index, sample) in samples.iter().enumerate() {
-        if index > 0 {
-            formatted.push_str(", ");
-        }
-        let _ = write!(&mut formatted, "{:.2}", scale(*sample));
-    }
-
-    formatted.push(']');
-    formatted
-}
-
-fn format_mib(value: f64) -> String {
-    format!("{value:.2}")
-}
-
-fn format_label_list(labels: &[&str]) -> String {
-    labels
-        .iter()
-        .map(|label| format!("`{label}`"))
-        .collect::<Vec<_>>()
-        .join(", ")
-}
-
-fn format_string_label_list(labels: &[&str]) -> String {
-    labels
-        .iter()
-        .map(|label| format!("`{label}`"))
-        .collect::<Vec<_>>()
-        .join(", ")
-}
-
-fn push_unique_label<'a>(labels: &mut Vec<&'a str>, value: &'a str) {
-    if !labels.contains(&value) {
-        labels.push(value);
-    }
-}
-
-fn format_delta_ms(value: f64) -> String {
-    format!("{value:+.2}")
-}
-
-fn format_delta_pct(value: f64) -> String {
-    format!("{value:+.1}%")
-}
-
-fn push_optional_sample(samples: &mut Option<Vec<f64>>, value: Option<f64>) {
-    if let Some(value) = value {
-        samples.get_or_insert_with(Vec::new).push(value);
-    }
-}
-
-fn bytes_to_mib(value: f64) -> f64 {
-    value / (1024.0 * 1024.0)
-}
-
-fn micros_to_ms(value: f64) -> f64 {
-    value / 1000.0
-}
-
-fn hotspot_wall_mean_ms(scenario: &BenchmarkScenarioReport) -> Option<f64> {
-    Some(scenario.wall_stats.mean_ms)
-}
-
-fn hotspot_wall_stddev_ms(scenario: &BenchmarkScenarioReport) -> Option<f64> {
-    Some(scenario.wall_stats.stddev_ms)
-}
-
-fn hotspot_wall_range_ms(scenario: &BenchmarkScenarioReport) -> Option<f64> {
-    Some(scenario.wall_range_ms())
-}
-
-fn hotspot_guest_import_mean_ms(scenario: &BenchmarkScenarioReport) -> Option<f64> {
-    scenario
-        .guest_import_stats
-        .as_ref()
-        .map(|stats| stats.mean_ms)
-}
-
-fn hotspot_startup_overhead_mean_ms(scenario: &BenchmarkScenarioReport) -> Option<f64> {
-    scenario
-        .startup_overhead_stats
-        .as_ref()
-        .map(|stats| stats.mean_ms)
-}
-
-fn hotspot_context_setup_mean_ms(scenario: &BenchmarkScenarioReport) -> Option<f64> {
-    Some(scenario.phase_stats.context_setup_ms.mean_ms)
-}
-
-fn hotspot_startup_phase_mean_ms(scenario: &BenchmarkScenarioReport) -> Option<f64> {
-    Some(scenario.phase_stats.startup_ms.mean_ms)
-}
-
-fn hotspot_guest_execution_mean_ms(scenario: &BenchmarkScenarioReport) -> Option<f64> {
-    scenario
-        .phase_stats
-        .guest_execution_ms
-        .as_ref()
-        .map(|stats| stats.mean_ms)
-}
-
-fn hotspot_completion_mean_ms(scenario: &BenchmarkScenarioReport) -> Option<f64> {
-    Some(scenario.phase_stats.completion_ms.mean_ms)
-}
-
-fn hotspot_startup_share_pct(scenario: &BenchmarkScenarioReport) -> Option<f64> {
-    scenario.mean_startup_share_pct()
-}
-
-fn hotspot_rss_mean_mib(scenario: &BenchmarkScenarioReport) -> Option<f64> {
-    scenario
-        .resource_usage_stats
-        .as_ref()?
-        .rss_bytes
-        .as_ref()
-        .map(|stats| bytes_to_mib(stats.mean))
-}
-
-fn hotspot_heap_mean_mib(scenario: &BenchmarkScenarioReport) -> Option<f64> {
-    scenario
-        .resource_usage_stats
-        .as_ref()?
-        .heap_used_bytes
-        .as_ref()
-        .map(|stats| bytes_to_mib(stats.mean))
-}
-
-fn hotspot_total_cpu_mean_ms(scenario: &BenchmarkScenarioReport) -> Option<f64> {
-    scenario
-        .resource_usage_stats
-        .as_ref()?
-        .cpu_total_us
-        .as_ref()
-        .map(|stats| micros_to_ms(stats.mean))
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::cell::RefCell;
-    use tempfile::tempdir;
-
-    fn synthetic_transport_reports() -> Vec<BenchmarkTransportRttReport> {
-        TRANSPORT_RTT_PAYLOAD_BYTES
-            .iter()
-            .enumerate()
-            .map(|(index, payload_bytes)| {
-                let sample = index as f64 + 1.0;
-                BenchmarkTransportRttReport {
-                    channel: TRANSPORT_RTT_CHANNEL,
-                    payload_bytes: *payload_bytes,
-                    samples_ms: vec![sample],
-                    stats: compute_stats(&[sample]),
-                }
-            })
-            .collect()
-    }
-
-    fn synthetic_scenario_report(
-        definition: ScenarioDefinition,
-        wall_sample_ms: f64,
-    ) -> BenchmarkScenarioReport {
-        let context_setup_ms = wall_sample_ms / 5.0;
-        let startup_ms = wall_sample_ms / 4.0;
-        let guest_execution_ms = definition
-            .expect_import_metric
-            .then_some(wall_sample_ms / 3.0);
-        let completion_ms =
-            wall_sample_ms - context_setup_ms - startup_ms - guest_execution_ms.unwrap_or(0.0);
-        let startup_overhead_ms = definition
-            .expect_import_metric
-            .then_some(context_setup_ms + startup_ms + completion_ms);
-        let resource_usage_samples = BenchmarkResourceUsage {
-            rss_bytes: Some(vec![64.0 * 1024.0 * 1024.0]),
-            heap_used_bytes: Some(vec![12.0 * 1024.0 * 1024.0]),
-            cpu_user_us: None,
-            cpu_system_us: None,
-            cpu_total_us: Some(vec![wall_sample_ms * 1000.0]),
-        };
-
-        BenchmarkScenarioReport {
-            id: definition.id,
-            workload: definition.workload,
-            runtime: definition.runtime.label(),
-            mode: definition.mode.label(),
-            description: definition.description,
-            fixture: definition.fixture,
-            compile_cache: definition.compile_cache.label(),
-            wall_samples_ms: vec![wall_sample_ms],
-            wall_stats: compute_stats(&[wall_sample_ms]),
-            guest_import_samples_ms: guest_execution_ms.map(|sample| vec![sample]),
-            guest_import_stats: guest_execution_ms.map(|sample| compute_stats(&[sample])),
-            startup_overhead_samples_ms: startup_overhead_ms.map(|sample| vec![sample]),
-            startup_overhead_stats: startup_overhead_ms.map(|sample| compute_stats(&[sample])),
-            phase_samples_ms: BenchmarkScenarioPhases {
-                context_setup_ms: vec![context_setup_ms],
-                startup_ms: vec![startup_ms],
-                guest_execution_ms: guest_execution_ms.map(|sample| vec![sample]),
-                completion_ms: vec![completion_ms],
-            },
-            phase_stats: BenchmarkScenarioPhases {
-                context_setup_ms: compute_stats(&[context_setup_ms]),
-                startup_ms: compute_stats(&[startup_ms]),
-                guest_execution_ms: guest_execution_ms.map(|sample| compute_stats(&[sample])),
-                completion_ms: compute_stats(&[completion_ms]),
-            },
-            resource_usage_stats: compute_resource_usage_stats(&resource_usage_samples),
-            resource_usage_samples: Some(resource_usage_samples),
-        }
-    }
-
-    fn synthetic_host() -> BenchmarkHost {
-        BenchmarkHost {
-            node_binary: String::from("node"),
-            node_version: String::from("v22.0.0"),
-            os: "linux",
-            arch: "x86_64",
-            logical_cpus: 8,
-        }
-    }
-
-    #[test]
-    fn javascript_benchmark_config_rejects_unbounded_iteration_counts() {
-        assert!(matches!(
-            validate_benchmark_config(&JavascriptBenchmarkConfig {
-                iterations: 0,
-                warmup_iterations: 0,
-            }),
-            Err(JavascriptBenchmarkError::InvalidConfig(
-                "iterations must be greater than zero"
-            ))
-        ));
-        assert!(matches!(
-            validate_benchmark_config(&JavascriptBenchmarkConfig {
-                iterations: MAX_BENCHMARK_ITERATIONS + 1,
-                warmup_iterations: 0,
-            }),
-            Err(JavascriptBenchmarkError::InvalidConfig(
-                "iterations must be less than or equal to 1000"
-            ))
-        ));
-        assert!(matches!(
-            validate_benchmark_config(&JavascriptBenchmarkConfig {
-                iterations: 1,
-                warmup_iterations: MAX_BENCHMARK_WARMUP_ITERATIONS + 1,
-            }),
-            Err(JavascriptBenchmarkError::InvalidConfig(
-                "warmup iterations must be less than or equal to 1000"
-            ))
-        ));
-    }
-
-    #[test]
-    fn javascript_benchmark_orchestration_resumes_completed_stages_from_run_state() {
-        let tempdir = tempdir().expect("create tempdir");
-        let repo_root = tempdir.path().join("repo");
-        let artifact_dir = tempdir.path().join("artifacts");
-        fs::create_dir_all(&repo_root).expect("create repo root");
-
-        let config = JavascriptBenchmarkConfig {
-            iterations: 1,
-            warmup_iterations: 0,
-        };
-        let host = synthetic_host();
-        let definitions = benchmark_scenarios();
-        let mut state = StoredBenchmarkRunState::new(&config, &host, &repo_root);
-        state.record_transport_rtt(&synthetic_transport_reports());
-        state.record_scenario(&synthetic_scenario_report(definitions[0], 10.0));
-        persist_benchmark_run_state(&benchmark_run_state_path(&artifact_dir), &state)
-            .expect("persist initial run state");
-
-        let transport_calls = RefCell::new(0usize);
-        let scenario_calls = RefCell::new(Vec::new());
-        let (report, resumed_stage_count, _) = orchestrate_javascript_benchmark_report(
-            &config,
-            &repo_root,
-            &host,
-            &artifact_dir,
-            || {
-                *transport_calls.borrow_mut() += 1;
-                Ok(synthetic_transport_reports())
-            },
-            |definition| {
-                scenario_calls.borrow_mut().push(definition.id.to_owned());
-                Ok(synthetic_scenario_report(definition, 20.0))
-            },
-        )
-        .expect("resume benchmark orchestration");
-
-        assert_eq!(resumed_stage_count, 2);
-        assert_eq!(*transport_calls.borrow(), 0);
-        assert_eq!(
-            scenario_calls.borrow().as_slice(),
-            &definitions[1..]
-                .iter()
-                .map(|definition| definition.id.to_owned())
-                .collect::<Vec<_>>()
-        );
-        assert_eq!(
-            report.transport_rtt.len(),
-            TRANSPORT_RTT_PAYLOAD_BYTES.len()
-        );
-        assert_eq!(report.scenarios.len(), definitions.len());
-        assert_eq!(report.scenarios[0].id, definitions[0].id);
-        assert_eq!(report.scenarios[1].id, definitions[1].id);
-    }
-
-    #[test]
-    fn javascript_benchmark_orchestration_persists_completed_stages_before_failure() {
-        let tempdir = tempdir().expect("create tempdir");
-        let repo_root = tempdir.path().join("repo");
-        let artifact_dir = tempdir.path().join("artifacts");
-        fs::create_dir_all(&repo_root).expect("create repo root");
-
-        let config = JavascriptBenchmarkConfig {
-            iterations: 1,
-            warmup_iterations: 0,
-        };
-        let host = synthetic_host();
-        let state_path = benchmark_run_state_path(&artifact_dir);
-        let failure = orchestrate_javascript_benchmark_report(
-            &config,
-            &repo_root,
-            &host,
-            &artifact_dir,
-            || Ok(synthetic_transport_reports()),
-            |definition| {
-                if definition.id == "cold-local-import" {
-                    Err(JavascriptBenchmarkError::InvalidConfig("synthetic failure"))
-                } else {
-                    Ok(synthetic_scenario_report(definition, 15.0))
-                }
-            },
-        )
-        .expect_err("expected synthetic orchestration failure");
-
-        assert!(matches!(
-            failure,
-            JavascriptBenchmarkError::InvalidConfig("synthetic failure")
-        ));
-
-        let stored_state = serde_json::from_str::<StoredBenchmarkRunState>(
-            &fs::read_to_string(&state_path).expect("read persisted run state"),
-        )
-        .expect("parse persisted run state");
-        assert!(stored_state.transport_rtt.is_some());
-        assert_eq!(
-            stored_state
-                .scenarios
-                .iter()
-                .map(|scenario| scenario.id.as_str())
-                .collect::<Vec<_>>(),
-            vec!["isolate-startup", "prewarmed-isolate-startup"]
-        );
-    }
-}
diff --git a/crates/execution/src/bin/node-import-bench.rs b/crates/execution/src/bin/node-import-bench.rs
deleted file mode 100644
index b85e613bb..000000000
--- a/crates/execution/src/bin/node-import-bench.rs
+++ /dev/null
@@ -1,108 +0,0 @@
-use secure_exec_execution::benchmark::{
-    run_javascript_benchmarks_with_recovery, JavascriptBenchmarkConfig,
-};
-use std::path::PathBuf;
-
-struct CliConfig {
-    benchmark: JavascriptBenchmarkConfig,
-    baseline_path: Option<PathBuf>,
-}
-
-fn main() {
-    match parse_config(std::env::args().skip(1)) {
-        Ok(cli_config) => match run_javascript_benchmarks_with_recovery(
-            &cli_config.benchmark,
-            cli_config.baseline_path.as_deref(),
-        ) {
-            Ok(output) => {
-                if output.resumed_stage_count > 0 {
-                    eprintln!(
-                        "Resumed {} completed benchmark stages from {}",
-                        output.resumed_stage_count,
-                        output
-                            .artifact_paths
-                            .json_path
-                            .parent()
-                            .expect("benchmark artifact parent directory")
-                            .join("run-state.json")
-                            .display()
-                    );
-                }
-                if let Some(path) = &cli_config.baseline_path {
-                    eprintln!("Compared against baseline {}", path.display());
-                }
-                eprintln!(
-                    "Wrote Markdown report to {}",
-                    output.artifact_paths.markdown_path.display()
-                );
-                eprintln!(
-                    "Wrote JSON report to {}",
-                    output.artifact_paths.json_path.display()
-                );
-                match std::fs::read_to_string(&output.artifact_paths.markdown_path) {
-                    Ok(markdown) => print!("{markdown}"),
-                    Err(err) => {
-                        eprintln!("failed to read generated markdown report: {err}");
-                        std::process::exit(1);
-                    }
-                }
-            }
-            Err(err) => {
-                eprintln!("{err}");
-                std::process::exit(1);
-            }
-        },
-        Err(err) => {
-            eprintln!("{err}");
-            eprintln!();
-            eprintln!("Usage: cargo run -p secure-exec-execution --bin node-import-bench -- [--iterations N] [--warmup-iterations N] [--baseline PATH]");
-            std::process::exit(2);
-        }
-    }
-}
-
-fn parse_config(args: impl IntoIterator<Item = String>) -> Result<CliConfig, String> {
-    let mut benchmark = JavascriptBenchmarkConfig::default();
-    let mut baseline_path = None;
-    let mut args = args.into_iter();
-
-    while let Some(arg) = args.next() {
-        match arg.as_str() {
-            "--iterations" => {
-                let value = args
-                    .next()
-                    .ok_or_else(|| String::from("missing value for --iterations"))?;
-                benchmark.iterations = parse_usize_flag("--iterations", &value)?;
-            }
-            "--warmup-iterations" => {
-                let value = args
-                    .next()
-                    .ok_or_else(|| String::from("missing value for --warmup-iterations"))?;
-                benchmark.warmup_iterations = parse_usize_flag("--warmup-iterations", &value)?;
-            }
-            "--baseline" => {
-                let value = args
-                    .next()
-                    .ok_or_else(|| String::from("missing value for --baseline"))?;
-                baseline_path = Some(PathBuf::from(value));
-            }
-            "--help" | "-h" => {
-                return Err(String::from("help requested"));
-            }
-            unknown => {
-                return Err(format!("unknown argument: {unknown}"));
-            }
-        }
-    }
-
-    Ok(CliConfig {
-        benchmark,
-        baseline_path,
-    })
-}
-
-fn parse_usize_flag(flag: &str, value: &str) -> Result<usize, String> {
-    value
-        .parse::<usize>()
-        .map_err(|_| format!("invalid value for {flag}: {value}"))
-}
diff --git a/crates/execution/src/common.rs b/crates/execution/src/common.rs
deleted file mode 100644
index a66c93910..000000000
--- a/crates/execution/src/common.rs
+++ /dev/null
@@ -1,92 +0,0 @@
-use std::collections::BTreeMap;
-use std::fmt::Write as _;
-use std::time::{SystemTime, UNIX_EPOCH};
-
-pub(crate) fn frozen_time_ms() -> u128 {
-    SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .expect("system clock before unix epoch")
-        .as_millis()
-}
-
-pub(crate) fn stable_hash64(bytes: &[u8]) -> u64 {
-    let mut hash = 0xcbf29ce484222325_u64;
-
-    for byte in bytes {
-        hash ^= u64::from(*byte);
-        hash = hash.wrapping_mul(0x100000001b3);
-    }
-
-    hash
-}
-
-pub(crate) fn encode_json_string_array(values: &[String]) -> String {
-    let mut json = String::from("[");
-
-    for (index, value) in values.iter().enumerate() {
-        if index > 0 {
-            json.push(',');
-        }
-        json.push_str(&encode_json_string(value));
-    }
-
-    json.push(']');
-    json
-}
-
-pub(crate) fn encode_json_string_map(values: &BTreeMap<String, String>) -> String {
-    let mut json = String::from("{");
-
-    for (index, (key, value)) in values.iter().enumerate() {
-        if index > 0 {
-            json.push(',');
-        }
-        json.push_str(&encode_json_string(key));
-        json.push(':');
-        json.push_str(&encode_json_string(value));
-    }
-
-    json.push('}');
-    json
-}
-
-pub(crate) fn encode_json_string(value: &str) -> String {
-    let mut json = String::with_capacity(value.len() + 2);
-    json.push('"');
-
-    for ch in value.chars() {
-        match ch {
-            '"' => json.push_str("\\\""),
-            '\\' => json.push_str("\\\\"),
-            '\n' => json.push_str("\\n"),
-            '\r' => json.push_str("\\r"),
-            '\t' => json.push_str("\\t"),
-            '\u{08}' => json.push_str("\\b"),
-            '\u{0C}' => json.push_str("\\f"),
-            ch if ch.is_control() || u32::from(ch) > 0xFFFF => {
-                push_utf16_escape(&mut json, ch);
-            }
-            ch => json.push(ch),
-        }
-    }
-
-    json.push('"');
-    json
-}
-
-fn push_utf16_escape(json: &mut String, ch: char) {
-    let mut units = [0_u16; 2];
-    for unit in ch.encode_utf16(&mut units).iter() {
-        let _ = write!(json, "\\u{:04x}", unit);
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::encode_json_string;
-
-    #[test]
-    fn encode_json_string_escapes_non_bmp_as_surrogate_pairs() {
-        assert_eq!(encode_json_string("emoji: 😀"), r#""emoji: \ud83d\ude00""#);
-    }
-}
diff --git a/crates/execution/src/host_node.rs b/crates/execution/src/host_node.rs
deleted file mode 100644
index af5f96011..000000000
--- a/crates/execution/src/host_node.rs
+++ /dev/null
@@ -1,27 +0,0 @@
-use std::path::{Path, PathBuf};
-
-const NODE_BINARY_ENV: &str = "AGENTOS_NODE_BINARY";
-const DEFAULT_NODE_BINARY: &str = "node";
-
-pub(crate) fn node_binary() -> String {
-    let configured =
-        std::env::var(NODE_BINARY_ENV).unwrap_or_else(|_| String::from(DEFAULT_NODE_BINARY));
-    resolve_executable_path(&configured).unwrap_or(configured)
-}
-
-fn resolve_executable_path(binary: &str) -> Option<String> {
-    let path = Path::new(binary);
-    if path.is_absolute() || binary.contains(std::path::MAIN_SEPARATOR) {
-        return Some(path.to_string_lossy().into_owned());
-    }
-
-    let path_env = std::env::var_os("PATH")?;
-    for directory in std::env::split_paths(&path_env) {
-        let candidate: PathBuf = directory.join(binary);
-        if candidate.is_file() {
-            return Some(candidate.to_string_lossy().into_owned());
-        }
-    }
-
-    None
-}
diff --git a/crates/execution/src/javascript.rs b/crates/execution/src/javascript.rs
deleted file mode 100644
index d83ed63b7..000000000
--- a/crates/execution/src/javascript.rs
+++ /dev/null
@@ -1,7818 +0,0 @@
-use crate::common::stable_hash64;
-use crate::node_import_cache::{
-    NodeImportCache, NodeImportCacheCleanup, NODE_IMPORT_CACHE_ASSET_ROOT_ENV,
-};
-use crate::runtime_support::{
-    NODE_COMPILE_CACHE_ENV, NODE_DISABLE_COMPILE_CACHE_ENV, NODE_FROZEN_TIME_ENV,
-    NODE_SANDBOX_ROOT_ENV,
-};
-use crate::signal::NodeSignalHandlerRegistration;
-use crate::v8_host::{V8RuntimeHost, V8SessionHandle};
-use crate::v8_ipc::BinaryFrame;
-use crate::v8_runtime;
-use getrandom::getrandom;
-use secure_exec_bridge::queue_tracker::{register_queue, TrackedLimit, TrackedReceiver};
-use secure_exec_v8_runtime::runtime_protocol::{RuntimeCommand, WarmSessionHint};
-use serde::Deserialize;
-use serde::Serialize;
-use serde_json::{json, Value};
-use std::cmp::Reverse;
-use std::collections::{BTreeMap, BinaryHeap, HashMap, HashSet, VecDeque};
-use std::fmt;
-use std::fs::{self, File};
-use std::io::{BufRead, BufReader, BufWriter, Write};
-use std::os::fd::OwnedFd;
-use std::panic::{catch_unwind, AssertUnwindSafe};
-use std::path::{Path, PathBuf};
-use std::sync::{
-    atomic::{AtomicU64, Ordering},
-    mpsc::{self, Receiver, SyncSender, TrySendError},
-    Arc, Condvar, Mutex, OnceLock,
-};
-use std::thread;
-use std::time::{Duration, Instant};
-use tokio::sync::{
-    mpsc::{channel, error::TryRecvError as TokioTryRecvError, Receiver as TokioReceiver},
-    Notify,
-};
-use tokio::time;
-
-const NODE_ENTRYPOINT_ENV: &str = "AGENTOS_ENTRYPOINT";
-const NODE_BOOTSTRAP_ENV: &str = "AGENTOS_BOOTSTRAP_MODULE";
-const NODE_GUEST_ARGV_ENV: &str = "AGENTOS_GUEST_ARGV";
-const NODE_PREWARM_IMPORTS_ENV: &str = "AGENTOS_NODE_PREWARM_IMPORTS";
-const NODE_IMPORT_COMPILE_CACHE_NAMESPACE_VERSION: &str = "3";
-const NODE_IMPORT_CACHE_LOADER_PATH_ENV: &str = "AGENTOS_NODE_IMPORT_CACHE_LOADER_PATH";
-const NODE_IMPORT_CACHE_PATH_ENV: &str = "AGENTOS_NODE_IMPORT_CACHE_PATH";
-const NODE_KEEP_STDIN_OPEN_ENV: &str = "SECURE_EXEC_KEEP_STDIN_OPEN";
-const NODE_GUEST_ENTRYPOINT_ENV: &str = "AGENTOS_GUEST_ENTRYPOINT";
-const NODE_GUEST_ENTRYPOINT_MODULE_MODE_ENV: &str = "AGENTOS_GUEST_ENTRYPOINT_MODULE_MODE";
-const NODE_GUEST_PATH_MAPPINGS_ENV: &str = "AGENTOS_GUEST_PATH_MAPPINGS";
-const NODE_VIRTUAL_PROCESS_EXEC_PATH_ENV: &str = "AGENTOS_VIRTUAL_PROCESS_EXEC_PATH";
-const NODE_VIRTUAL_PROCESS_PID_ENV: &str = "AGENTOS_VIRTUAL_PROCESS_PID";
-const NODE_VIRTUAL_PROCESS_PPID_ENV: &str = "AGENTOS_VIRTUAL_PROCESS_PPID";
-const NODE_VIRTUAL_PROCESS_UID_ENV: &str = "AGENTOS_VIRTUAL_PROCESS_UID";
-const NODE_VIRTUAL_PROCESS_GID_ENV: &str = "AGENTOS_VIRTUAL_PROCESS_GID";
-const NODE_PARENT_ALLOW_CHILD_PROCESS_ENV: &str = "AGENTOS_PARENT_NODE_ALLOW_CHILD_PROCESS";
-const NODE_PARENT_ALLOW_WORKER_ENV: &str = "AGENTOS_PARENT_NODE_ALLOW_WORKER";
-const NODE_EXTRA_FS_READ_PATHS_ENV: &str = "AGENTOS_EXTRA_FS_READ_PATHS";
-const NODE_EXTRA_FS_WRITE_PATHS_ENV: &str = "AGENTOS_EXTRA_FS_WRITE_PATHS";
-const NODE_ALLOWED_BUILTINS_ENV: &str = "AGENTOS_ALLOWED_NODE_BUILTINS";
-const NODE_LOOPBACK_EXEMPT_PORTS_ENV: &str = "AGENTOS_LOOPBACK_EXEMPT_PORTS";
-const NODE_SYNC_RPC_ENABLE_ENV: &str = "AGENTOS_NODE_SYNC_RPC_ENABLE";
-const NODE_SYNC_RPC_REQUEST_FD_ENV: &str = "AGENTOS_NODE_SYNC_RPC_REQUEST_FD";
-const NODE_SYNC_RPC_RESPONSE_FD_ENV: &str = "AGENTOS_NODE_SYNC_RPC_RESPONSE_FD";
-const NODE_SYNC_RPC_DATA_BYTES_ENV: &str = "AGENTOS_NODE_SYNC_RPC_DATA_BYTES";
-const NODE_SYNC_RPC_WAIT_TIMEOUT_MS_ENV: &str = "AGENTOS_NODE_SYNC_RPC_WAIT_TIMEOUT_MS";
-static NEXT_V8_SESSION_ID: AtomicU64 = AtomicU64::new(1);
-static JAVASCRIPT_TIMER_WHEEL: OnceLock<Arc<TimerWheel>> = OnceLock::new();
-
-#[derive(Default)]
-struct JsStartPhaseStats {
-    calls: u64,
-    total_ns: u128,
-    max_ns: u128,
-}
-
-static JS_START_PHASES: OnceLock<Mutex<BTreeMap<String, JsStartPhaseStats>>> = OnceLock::new();
-static JS_EVENT_PHASES: OnceLock<Mutex<BTreeMap<String, JsStartPhaseStats>>> = OnceLock::new();
-
-fn js_start_phases_enabled() -> bool {
-    std::env::var("AGENTOS_JS_START_PHASES").as_deref() == Ok("1")
-}
-
-fn js_event_phases_enabled() -> bool {
-    std::env::var("AGENTOS_JS_EVENT_PHASES").as_deref() == Ok("1")
-}
-
-fn record_js_start_phase(stage: &str, elapsed: Duration) {
-    if !js_start_phases_enabled() {
-        return;
-    }
-    record_js_phase_stats(
-        &JS_START_PHASES,
-        "AGENTOS_JS_START_PHASES_FILE",
-        stage,
-        elapsed,
-    );
-}
-
-fn record_js_event_phase(stage: &str, elapsed: Duration) {
-    if !js_event_phases_enabled() {
-        return;
-    }
-    record_js_phase_stats(
-        &JS_EVENT_PHASES,
-        "AGENTOS_JS_EVENT_PHASES_FILE",
-        stage,
-        elapsed,
-    );
-}
-
-fn record_js_phase_stats(
-    phases: &OnceLock<Mutex<BTreeMap<String, JsStartPhaseStats>>>,
-    path_env: &str,
-    stage: &str,
-    elapsed: Duration,
-) {
-    let phases = phases.get_or_init(|| Mutex::new(BTreeMap::new()));
-    let Ok(mut phases) = phases.lock() else {
-        return;
-    };
-    let stats = phases.entry(stage.to_string()).or_default();
-    stats.calls += 1;
-    let elapsed_ns = elapsed.as_nanos();
-    stats.total_ns += elapsed_ns;
-    stats.max_ns = stats.max_ns.max(elapsed_ns);
-
-    let Some(path) = std::env::var_os(path_env) else {
-        return;
-    };
-    let mut output = String::new();
-    for (stage, stats) in phases.iter() {
-        let total_us = stats.total_ns / 1_000;
-        let avg_us = if stats.calls == 0 {
-            0
-        } else {
-            total_us / u128::from(stats.calls)
-        };
-        let max_us = stats.max_ns / 1_000;
-        output.push_str(&format!(
-            "stage={stage} calls={} total_us={total_us} avg_us={avg_us} max_us={max_us}\n",
-            stats.calls
-        ));
-    }
-    let _ = fs::write(path, output);
-}
-
-const DEFAULT_V8_CPU_TIME_LIMIT_MS: u32 = 30_000;
-const DEFAULT_V8_WALL_CLOCK_LIMIT_MS: u32 = 0;
-const DEFAULT_NODE_IMPORT_CACHE_MATERIALIZE_TIMEOUT_MS: u64 = 30_000;
-const NODE_SYNC_RPC_DEFAULT_DATA_BYTES: usize = 4 * 1024 * 1024;
-const NODE_SYNC_RPC_DEFAULT_WAIT_TIMEOUT_MS: u64 = 30_000;
-const NODE_SYNC_RPC_RESPONSE_QUEUE_CAPACITY: usize = 1;
-const FORWARD_KERNEL_STDIN_RPC_ENV: &str = "AGENTOS_FORWARD_KERNEL_STDIN_RPC";
-// Defense-in-depth headroom: a transient burst of guest events (e.g. a chatty
-// tool/skill turn) should be absorbed by the buffer, so the producer only ever
-// hits backpressure under a genuinely stuck consumer rather than on every spike.
-const JAVASCRIPT_EVENT_CHANNEL_CAPACITY: usize = 512;
-const JAVASCRIPT_EVENT_PAYLOAD_LIMIT_BYTES: usize = 1024 * 1024;
-const JAVASCRIPT_CAPTURED_OUTPUT_LIMIT_BYTES: usize = 16 * 1024 * 1024;
-const KERNEL_STDIN_BUFFER_LIMIT_BYTES: usize = 16 * 1024 * 1024;
-const NODE_WARMUP_MARKER_VERSION: &str = "1";
-const NODE_WARMUP_SPECIFIERS: &[&str] = &[
-    "secure-exec:builtin/path",
-    "secure-exec:builtin/url",
-    "secure-exec:builtin/fs-promises",
-    "secure-exec:polyfill/path",
-];
-
-#[derive(Debug, Default, Clone)]
-struct SyncBridgePhaseStats {
-    calls: u64,
-    total_us: u64,
-    max_us: u64,
-}
-
-static SYNC_BRIDGE_PHASES: OnceLock<Mutex<BTreeMap<String, SyncBridgePhaseStats>>> =
-    OnceLock::new();
-static SYNC_BRIDGE_REQUEST_ENQUEUED: OnceLock<Mutex<HashMap<u64, (String, Instant)>>> =
-    OnceLock::new();
-
-fn sync_bridge_phases_enabled() -> bool {
-    std::env::var("AGENTOS_SYNC_BRIDGE_PHASES").as_deref() == Ok("1")
-}
-
-fn record_sync_bridge_phase(method: &str, stage: &str, elapsed: Duration) {
-    if !sync_bridge_phases_enabled() {
-        return;
-    }
-    let stats = SYNC_BRIDGE_PHASES.get_or_init(|| Mutex::new(BTreeMap::new()));
-    let Ok(mut stats) = stats.lock() else {
-        return;
-    };
-    let elapsed_us = elapsed.as_micros() as u64;
-    let key = format!("{method}:{stage}");
-    let entry = stats.entry(key).or_default();
-    entry.calls += 1;
-    entry.total_us = entry.total_us.wrapping_add(elapsed_us);
-    entry.max_us = entry.max_us.max(elapsed_us);
-
-    if let Ok(path) = std::env::var("AGENTOS_SYNC_BRIDGE_PHASES_FILE") {
-        let mut lines = String::new();
-        for (key, value) in stats.iter() {
-            let Some((method, stage)) = key.split_once(':') else {
-                continue;
-            };
-            let avg_us = value.total_us.checked_div(value.calls).unwrap_or(0);
-            lines.push_str(&format!(
-                "method={method} stage={stage} calls={} total_us={} avg_us={} max_us={}\n",
-                value.calls, value.total_us, avg_us, value.max_us
-            ));
-        }
-        let _ = fs::write(path, lines);
-    }
-}
-
-pub fn record_sync_bridge_request_enqueued(call_id: u64, method: &str) {
-    if !sync_bridge_phases_enabled() {
-        return;
-    }
-    let requests = SYNC_BRIDGE_REQUEST_ENQUEUED.get_or_init(|| Mutex::new(HashMap::new()));
-    let Ok(mut requests) = requests.lock() else {
-        return;
-    };
-    if requests.len() > 4096 {
-        requests.clear();
-    }
-    requests.insert(call_id, (method.to_owned(), Instant::now()));
-}
-
-pub fn record_sync_bridge_request_observed(call_id: u64, fallback_method: &str) {
-    if !sync_bridge_phases_enabled() {
-        return;
-    }
-    let Some(requests) = SYNC_BRIDGE_REQUEST_ENQUEUED.get() else {
-        return;
-    };
-    let Ok(mut requests) = requests.lock() else {
-        return;
-    };
-    let Some((method, started)) = requests.remove(&call_id) else {
-        return;
-    };
-    let method = if method.is_empty() {
-        fallback_method
-    } else {
-        method.as_str()
-    };
-    record_sync_bridge_phase(method, "request_service_observed", started.elapsed());
-}
-const CONTROLLED_STDERR_PREFIXES: &[&str] =
-    &[crate::node_import_cache::NODE_IMPORT_CACHE_METRICS_PREFIX];
-const RESERVED_NODE_ENV_KEYS: &[&str] = &[
-    NODE_BOOTSTRAP_ENV,
-    NODE_COMPILE_CACHE_ENV,
-    NODE_DISABLE_COMPILE_CACHE_ENV,
-    NODE_ENTRYPOINT_ENV,
-    NODE_EXTRA_FS_READ_PATHS_ENV,
-    NODE_EXTRA_FS_WRITE_PATHS_ENV,
-    NODE_SANDBOX_ROOT_ENV,
-    NODE_FROZEN_TIME_ENV,
-    NODE_GUEST_ENTRYPOINT_ENV,
-    NODE_GUEST_ENTRYPOINT_MODULE_MODE_ENV,
-    NODE_GUEST_ARGV_ENV,
-    NODE_GUEST_PATH_MAPPINGS_ENV,
-    NODE_VIRTUAL_PROCESS_EXEC_PATH_ENV,
-    NODE_VIRTUAL_PROCESS_PID_ENV,
-    NODE_VIRTUAL_PROCESS_PPID_ENV,
-    NODE_VIRTUAL_PROCESS_UID_ENV,
-    NODE_VIRTUAL_PROCESS_GID_ENV,
-    NODE_PARENT_ALLOW_CHILD_PROCESS_ENV,
-    NODE_PARENT_ALLOW_WORKER_ENV,
-    NODE_IMPORT_CACHE_ASSET_ROOT_ENV,
-    NODE_IMPORT_CACHE_LOADER_PATH_ENV,
-    NODE_IMPORT_CACHE_PATH_ENV,
-    NODE_KEEP_STDIN_OPEN_ENV,
-    NODE_ALLOWED_BUILTINS_ENV,
-    NODE_LOOPBACK_EXEMPT_PORTS_ENV,
-    NODE_SYNC_RPC_ENABLE_ENV,
-    NODE_SYNC_RPC_REQUEST_FD_ENV,
-    NODE_SYNC_RPC_RESPONSE_FD_ENV,
-    NODE_SYNC_RPC_DATA_BYTES_ENV,
-    NODE_SYNC_RPC_WAIT_TIMEOUT_MS_ENV,
-];
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-#[serde(tag = "type", rename_all = "snake_case")]
-enum NodeControlMessage {
-    NodeImportCacheMetrics {
-        metrics: serde_json::Value,
-    },
-    PythonExit {
-        #[serde(rename = "exitCode")]
-        exit_code: i32,
-    },
-    SignalState {
-        signal: u32,
-        registration: NodeSignalHandlerRegistration,
-    },
-}
-
-#[derive(Debug, Default)]
-struct LinePrefixFilter {
-    pending: Vec<u8>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct JavascriptSyncRpcRequest {
-    pub id: u64,
-    pub method: String,
-    pub args: Vec<Value>,
-    pub raw_bytes_args: HashMap<usize, Vec<u8>>,
-}
-
-#[derive(Debug, Deserialize)]
-struct JavascriptSyncRpcRequestWire {
-    id: u64,
-    method: String,
-    #[serde(default)]
-    args: Vec<Value>,
-}
-
-struct JavascriptSyncRpcChannels {
-    parent_request_reader: File,
-    parent_response_writer: File,
-    child_request_writer: OwnedFd,
-    child_response_reader: OwnedFd,
-}
-
-impl LinePrefixFilter {
-    fn filter_chunk(&mut self, chunk: &[u8], prefixes: &[&str]) -> Vec<u8> {
-        self.pending.extend_from_slice(chunk);
-        let mut filtered = Vec::new();
-
-        while let Some(newline_index) = self.pending.iter().position(|byte| *byte == b'\n') {
-            let line = self.pending.drain(..=newline_index).collect::<Vec<_>>();
-            if !has_control_prefix(&line, prefixes) {
-                filtered.extend_from_slice(&line);
-            }
-        }
-
-        filtered
-    }
-}
-
-fn has_control_prefix(line: &[u8], prefixes: &[&str]) -> bool {
-    let text = String::from_utf8_lossy(line);
-    let trimmed = text.trim_end_matches(['\r', '\n']);
-    prefixes.iter().any(|prefix| trimmed.starts_with(prefix))
-}
-
-#[derive(Debug)]
-struct JavascriptSyncRpcResponseWriter {
-    sender: SyncSender<Vec<u8>>,
-    timeout: Duration,
-}
-
-impl JavascriptSyncRpcResponseWriter {
-    fn new(writer: File, timeout: Duration) -> Self {
-        let (sender, receiver) = mpsc::sync_channel(NODE_SYNC_RPC_RESPONSE_QUEUE_CAPACITY);
-        spawn_javascript_sync_rpc_response_writer(writer, receiver);
-        Self { sender, timeout }
-    }
-
-    fn send(&self, payload: Vec<u8>) -> Result<(), JavascriptExecutionError> {
-        let started = Instant::now();
-        let mut payload = Some(payload);
-
-        loop {
-            match self
-                .sender
-                .try_send(payload.take().expect("payload should be present"))
-            {
-                Ok(()) => return Ok(()),
-                Err(TrySendError::Disconnected(_)) => {
-                    return Err(JavascriptExecutionError::RpcResponse(String::from(
-                        "JavaScript sync RPC response channel closed unexpectedly",
-                    )));
-                }
-                Err(TrySendError::Full(returned_payload)) => {
-                    if started.elapsed() >= self.timeout {
-                        return Err(JavascriptExecutionError::RpcResponse(format!(
-                            "timed out after {}ms while queueing JavaScript sync RPC response",
-                            self.timeout.as_millis()
-                        )));
-                    }
-                    payload = Some(returned_payload);
-                    thread::sleep(Duration::from_millis(5));
-                }
-            }
-        }
-    }
-}
-
-impl Clone for JavascriptSyncRpcResponseWriter {
-    fn clone(&self) -> Self {
-        Self {
-            sender: self.sender.clone(),
-            timeout: self.timeout,
-        }
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum PendingSyncRpcState {
-    Pending(u64),
-    TimedOut(u64),
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum PendingSyncRpcResolution {
-    Pending,
-    TimedOut,
-    Missing,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct CreateJavascriptContextRequest {
-    pub vm_id: String,
-    pub bootstrap_module: Option<String>,
-    pub compile_cache_root: Option<PathBuf>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct JavascriptContext {
-    pub context_id: String,
-    pub vm_id: String,
-    pub bootstrap_module: Option<String>,
-    pub compile_cache_dir: Option<PathBuf>,
-}
-
-/// Per-execution JavaScript runtime limits, carried as typed fields on the
-/// execution request rather than `AGENTOS_*` env vars. The sidecar populates
-/// these from the per-VM `VmLimits` (which originate from `CreateVmConfig` on
-/// the BARE wire); `None` selects the engine default. See the env-vs-wire rule
-/// in `crates/sidecar/CLAUDE.md`.
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct JavascriptExecutionLimits {
-    /// V8 heap cap in MB. `None`/`Some(0)` keeps the engine default heap.
-    pub v8_heap_limit_mb: Option<u32>,
-    /// Sync-RPC blocking-wait ceiling in ms. `None` keeps the engine default.
-    pub sync_rpc_wait_timeout_ms: Option<u64>,
-    /// Active JavaScript CPU-time budget in ms. `None` keeps the engine default;
-    /// `Some(0)` disables the CPU watchdog.
-    pub cpu_time_limit_ms: Option<u32>,
-    /// JavaScript wall-clock backstop in ms. `None` keeps the engine default;
-    /// `Some(0)` disables the wall-clock watchdog.
-    pub wall_clock_limit_ms: Option<u32>,
-    /// Timeout for materializing the per-VM Node import cache.
-    pub import_cache_materialize_timeout_ms: Option<u64>,
-}
-
-/// Per-execution guest-runtime config carried as typed fields rather than
-/// `AGENTOS_*` env vars. The sidecar populates these from kernel state
-/// (`user_profile()`, `resource_limits()`) and `CreateVmConfig`; the runtime
-/// shim interpolates them into a `_processConfig` object the guest reads, so the
-/// guest's virtual identity no longer rides the ambient env channel. `None`
-/// keeps the guest-runtime default. See the env-vs-wire rule in
-/// `crates/sidecar/CLAUDE.md`.
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct GuestRuntimeConfig {
-    /// Virtual `process.pid`.
-    pub virtual_pid: Option<u64>,
-    /// Virtual `process.ppid`.
-    pub virtual_ppid: Option<u64>,
-    /// Virtual `process.uid` / `process.euid`.
-    pub virtual_uid: Option<u64>,
-    /// Virtual `process.gid` / `process.egid` / `process.groups`.
-    pub virtual_gid: Option<u64>,
-    /// Virtual `process.execPath`.
-    pub virtual_exec_path: Option<String>,
-    /// `os.cpus().length`.
-    pub os_cpu_count: Option<u64>,
-    /// `os.totalmem()` in bytes.
-    pub os_totalmem: Option<u64>,
-    /// `os.freemem()` in bytes.
-    pub os_freemem: Option<u64>,
-    /// `os.homedir()`.
-    pub os_homedir: Option<String>,
-    /// `os.hostname()`.
-    pub os_hostname: Option<String>,
-    /// `os.tmpdir()`.
-    pub os_tmpdir: Option<String>,
-    /// `os.type()`.
-    pub os_type: Option<String>,
-    /// `os.release()`.
-    pub os_release: Option<String>,
-    /// `os.version()`.
-    pub os_version: Option<String>,
-    /// `os.machine()`.
-    pub os_machine: Option<String>,
-    /// Default login shell.
-    pub os_shell: Option<String>,
-    /// `os.userInfo().username`.
-    pub os_user: Option<String>,
-    /// Opt-in high-resolution monotonic guest clock. Default false preserves
-    /// the security-oriented coarse clock.
-    pub high_resolution_time: bool,
-    /// Optional agent-SDK bundle (esbuild IIFE) to evaluate into the per-sidecar
-    /// V8 snapshot alongside the bridge, so the SDK is loaded once per sidecar and
-    /// reused across sessions instead of re-imported on every execution. `None`
-    /// keeps the bridge-only snapshot (unchanged behavior). The runtime caches the
-    /// snapshot process-wide keyed by sha256(bridge_code + this bundle).
-    pub snapshot_userland_code: Option<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct StartJavascriptExecutionRequest {
-    pub vm_id: String,
-    pub context_id: String,
-    pub argv: Vec<String>,
-    pub env: BTreeMap<String, String>,
-    pub cwd: PathBuf,
-    /// Per-execution runtime limits (see [`JavascriptExecutionLimits`]).
-    pub limits: JavascriptExecutionLimits,
-    /// Per-execution guest-runtime config (see [`GuestRuntimeConfig`]).
-    pub guest_runtime: GuestRuntimeConfig,
-    /// Optional inline JavaScript code supplied by the sidecar.
-    /// Eval entrypoints always execute this source directly. Module-mode file
-    /// entrypoints may also use it so the isolate can evaluate the original
-    /// source without re-reading through the host. CommonJS file entrypoints
-    /// still go through the normal require() wrapper so Node-style globals such
-    /// as __filename and __dirname are initialized correctly.
-    pub inline_code: Option<String>,
-    /// Optional raw WASM module bytes to expose to the runner isolate for this
-    /// execution.
-    pub wasm_module_bytes: Option<Arc<Vec<u8>>>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum JavascriptExecutionEvent {
-    Stdout(Vec<u8>),
-    Stderr(Vec<u8>),
-    SyncRpcRequest(JavascriptSyncRpcRequest),
-    SignalState {
-        signal: u32,
-        registration: NodeSignalHandlerRegistration,
-    },
-    Exited(i32),
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-enum JavascriptProcessEvent {
-    Stdout(Vec<u8>),
-    RawStderr(Vec<u8>),
-    SyncRpcRequest(JavascriptSyncRpcRequest),
-    Control(NodeControlMessage),
-    Exited(i32),
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct JavascriptExecutionResult {
-    pub execution_id: String,
-    pub exit_code: i32,
-    pub stdout: Vec<u8>,
-    pub stderr: Vec<u8>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-struct GuestPathMapping {
-    guest_path: String,
-    host_path: PathBuf,
-}
-
-#[derive(Debug, Deserialize)]
-struct GuestPathMappingWire {
-    #[serde(rename = "guestPath")]
-    guest_path: String,
-    #[serde(rename = "hostPath")]
-    host_path: String,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Hash)]
-pub enum ModuleResolveMode {
-    Require,
-    Import,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum LocalResolvedModuleFormat {
-    Module,
-    Commonjs,
-    Json,
-}
-
-impl LocalResolvedModuleFormat {
-    pub fn as_str(self) -> &'static str {
-        match self {
-            Self::Module => "module",
-            Self::Commonjs => "commonjs",
-            Self::Json => "json",
-        }
-    }
-}
-
-#[derive(Debug, Clone, Default)]
-pub struct LocalModuleResolutionCache {
-    resolve_results: HashMap<(String, String, ModuleResolveMode), Option<String>>,
-    module_format_results: HashMap<String, Option<LocalResolvedModuleFormat>>,
-    package_json_results: HashMap<String, Option<LocalPackageJson>>,
-    exists_results: HashMap<String, bool>,
-    stat_results: HashMap<String, Option<bool>>,
-}
-
-/// Read-only filesystem primitives the module resolver needs. The resolution
-/// algorithm itself is pure path algebra over these four operations; pointing
-/// it at a different backing store (host files vs. the kernel VFS) is purely a
-/// matter of supplying a different `ModuleFsReader`.
-///
-/// All paths are guest paths (e.g. `/root/node_modules/foo/index.js`). Symlink
-/// following is the reader's responsibility: `canonical_guest_path` must return
-/// the fully-resolved guest path (realpath), and `path_is_dir`/`path_exists`
-/// must follow symlinks the way real Node's `fs.stat`/`fs.existsSync` do.
-pub trait ModuleFsReader {
-    /// Realpath of `guest_path`, expressed as a guest path. `None` if the path
-    /// does not resolve (does not exist / escapes the addressable tree).
-    fn canonical_guest_path(&mut self, guest_path: &str) -> Option<String>;
-
-    /// Read the file at `guest_path` as a UTF-8 string, following symlinks.
-    fn read_to_string(&mut self, guest_path: &str) -> Option<String>;
-
-    /// `Some(true)` if `guest_path` is a directory, `Some(false)` if it exists
-    /// but is not a directory, `None` if it does not exist. Follows symlinks.
-    fn path_is_dir(&mut self, guest_path: &str) -> Option<bool>;
-
-    /// Whether `guest_path` exists, following symlinks.
-    fn path_exists(&mut self, guest_path: &str) -> bool;
-}
-
-/// Guest JavaScript module-resolution mode (the `moduleResolution` axis of
-/// `jsRuntime`). Defaults to full Node.js resolution.
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
-enum GuestModuleResolution {
-    /// node_modules ancestor-walk + exports/conditions + realpath.
-    #[default]
-    Node,
-    /// Relative/absolute ESM only; bare specifiers do not resolve.
-    Relative,
-    /// No resolution at all; every specifier (relative included) is denied.
-    None,
-}
-
-impl GuestModuleResolution {
-    fn from_env(env: &BTreeMap<String, String>) -> Self {
-        match env.get("AGENTOS_JS_MODULE_RESOLUTION").map(String::as_str) {
-            Some("relative") => Self::Relative,
-            Some("none") => Self::None,
-            _ => Self::Node,
-        }
-    }
-}
-
-#[derive(Default)]
-struct LocalBridgeState {
-    translator: GuestPathTranslator,
-    resolution_cache: LocalModuleResolutionCache,
-    /// jsRuntime module-resolution mode for this execution.
-    module_resolution: GuestModuleResolution,
-    handle_descriptions: HashMap<String, String>,
-    next_timer_id: u64,
-    timers: Arc<Mutex<HashMap<u64, LocalTimerEntry>>>,
-    kernel_stdin: Arc<LocalKernelStdinBridge>,
-    forward_kernel_stdin_rpc: bool,
-    v8_session: Option<V8SessionHandle>,
-    /// Optional read-only reader over the mounted `node_modules` VFS, supplied by
-    /// the sidecar. When present, the bridge thread resolves module-resolution
-    /// RPCs (`_resolveModule` / `_loadFile` / `_moduleFormat` /
-    /// `_batchResolveModules`) inline against this reader, concurrently with the
-    /// service loop — so a large cold-start module graph does not serialize
-    /// behind / starve the ACP bootstrap on the single service-loop thread.
-    /// `None` means "route module resolution to the service loop" (the kernel-VFS
-    /// fallback for callers that supply no reader).
-    module_reader: Option<Box<dyn ModuleFsReader + Send>>,
-}
-
-impl Drop for LocalBridgeState {
-    /// Tear down all tracked timers when the bridge state is dropped (which
-    /// happens when the event-bridge service loop exits on session termination —
-    /// success, error, or shutdown). Clearing the shared `timers` map cancels both
-    /// kernel and bridge timers: any in-flight wheel action that wakes afterwards
-    /// finds its entry gone and suppresses its callback via `timer_should_fire`,
-    /// so a destroyed session's timers do not fire after the fact.
-    fn drop(&mut self) {
-        if let Ok(mut timers) = self.timers.lock() {
-            timers.clear();
-        }
-    }
-}
-
-#[derive(Debug, Default)]
-struct LocalKernelStdinBridge {
-    state: Mutex<LocalKernelStdinState>,
-    ready: Condvar,
-}
-
-#[derive(Debug, Default)]
-struct LocalKernelStdinState {
-    bytes: VecDeque<u8>,
-    closed: bool,
-}
-
-#[derive(Debug, Clone, Default)]
-struct GuestPathTranslator {
-    implicit_guest_cwd: String,
-    implicit_host_cwd: PathBuf,
-    sandbox_root: Option<PathBuf>,
-    mappings: Vec<GuestPathMapping>,
-}
-
-#[derive(Debug, Clone, Deserialize, Default)]
-struct LocalPackageJson {
-    #[serde(default)]
-    name: Option<String>,
-    #[serde(default)]
-    main: Option<String>,
-    #[serde(default)]
-    #[serde(rename = "type")]
-    package_type: Option<String>,
-    #[serde(default)]
-    exports: Option<Value>,
-    #[serde(default)]
-    imports: Option<Value>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-struct LocalTimerEntry {
-    delay_ms: u64,
-    generation: u64,
-    repeat: bool,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Deserialize)]
-#[serde(rename_all = "kebab-case")]
-enum PolyfillSourceKind {
-    NodeStdlibBrowser,
-    CustomBridge,
-    Denied,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct PolyfillRegistryGroup {
-    source: PolyfillSourceKind,
-    #[serde(default)]
-    error_code: Option<String>,
-    names: Vec<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct PolyfillRegistry {
-    version: u32,
-    groups: Vec<PolyfillRegistryGroup>,
-}
-
-static POLYFILL_REGISTRY: OnceLock<PolyfillRegistry> = OnceLock::new();
-
-fn polyfill_registry() -> &'static PolyfillRegistry {
-    POLYFILL_REGISTRY.get_or_init(|| {
-        serde_json::from_str(include_str!("../assets/polyfill-registry.json"))
-            .expect("polyfill-registry.json must be valid")
-    })
-}
-
-#[derive(Debug, Clone, PartialEq)]
-enum LocalBridgeCallResult {
-    Immediate(Value),
-    Deferred,
-}
-
-/// Upper bound on guest-supplied timer delays, matching the JS `TIMEOUT_MAX`
-/// ceiling (`2**31 - 1` ms, ~24.8 days). Guest code can pass a delay up to
-/// `u64::MAX` ms; clamping keeps the timer wheel's deadline math and session
-/// handle lifetime within Node-compatible bounds.
-const MAX_TIMER_DELAY_MS: u64 = 2_147_483_647;
-
-fn timer_delay_ms(value: Option<&Value>) -> u64 {
-    let delay = match value {
-        Some(Value::Number(number)) => number.as_f64().unwrap_or(0.0),
-        Some(Value::String(text)) => text.parse::<f64>().unwrap_or(0.0),
-        _ => 0.0,
-    };
-
-    if !delay.is_finite() || delay <= 0.0 {
-        0
-    } else {
-        delay.floor().min(MAX_TIMER_DELAY_MS as f64) as u64
-    }
-}
-
-/// Decide whether a woken timer action should fire, and reclaim its tracking
-/// entry. Returns `false` (suppressing the callback) when the timer is gone from
-/// the map (cleared, or wiped on session teardown) or its generation no longer
-/// matches the one captured at scheduling time (re-armed/cancelled). A one-shot
-/// (`repeat == false`) timer that does fire is removed from the map so its id is
-/// reclaimed. Shared by the kernel-timer and bridge-timer paths so both honor the
-/// same cancellation semantics.
-fn timer_should_fire(
-    timers: &Arc<Mutex<HashMap<u64, LocalTimerEntry>>>,
-    timer_id: u64,
-    generation: u64,
-) -> bool {
-    timers
-        .lock()
-        .ok()
-        .and_then(|mut timers| {
-            let (current_generation, repeat) = timers
-                .get(&timer_id)
-                .map(|entry| (entry.generation, entry.repeat))?;
-            if current_generation != generation {
-                return Some(false);
-            }
-            if !repeat {
-                timers.remove(&timer_id);
-            }
-            Some(true)
-        })
-        .unwrap_or(false)
-}
-
-struct TimerWheel {
-    state: Mutex<TimerWheelState>,
-    ready: Condvar,
-}
-
-#[derive(Default)]
-struct TimerWheelState {
-    heap: BinaryHeap<Reverse<(Instant, u64)>>,
-    entries: HashMap<u64, TimerAction>,
-    next_seq: u64,
-}
-
-enum TimerAction {
-    StreamEvent {
-        session: V8SessionHandle,
-        timer_id: u64,
-        generation: u64,
-        timers: Arc<Mutex<HashMap<u64, LocalTimerEntry>>>,
-    },
-    BridgeResponse {
-        session: V8SessionHandle,
-        call_id: u64,
-        timer_id: u64,
-        generation: u64,
-        timers: Arc<Mutex<HashMap<u64, LocalTimerEntry>>>,
-    },
-}
-
-impl TimerAction {
-    fn execute(self) {
-        match self {
-            Self::StreamEvent {
-                session,
-                timer_id,
-                generation,
-                timers,
-            } => {
-                if !timer_should_fire(&timers, timer_id, generation) {
-                    return;
-                }
-
-                let payload =
-                    v8_runtime::json_to_cbor_payload(&json!(timer_id)).unwrap_or_default();
-                let _ = session.send_stream_event("timer", payload);
-            }
-            Self::BridgeResponse {
-                session,
-                call_id,
-                timer_id,
-                generation,
-                timers,
-            } => {
-                if !timer_should_fire(&timers, timer_id, generation) {
-                    return;
-                }
-                let _ = session.send_bridge_response(call_id, 0, Vec::new());
-            }
-        }
-    }
-}
-
-impl TimerWheel {
-    fn get() -> &'static Arc<Self> {
-        JAVASCRIPT_TIMER_WHEEL.get_or_init(Self::start)
-    }
-
-    fn start() -> Arc<Self> {
-        let wheel = Arc::new(Self {
-            state: Mutex::new(TimerWheelState::default()),
-            ready: Condvar::new(),
-        });
-        let worker = Arc::clone(&wheel);
-        // Detached daemon: queued entries carry generation-checked session handles,
-        // matching the previous fire-and-forget timer threads without one OS
-        // thread per guest timer.
-        if let Err(error) = thread::Builder::new()
-            .name(String::from("secure-exec-js-timer-wheel"))
-            .spawn(move || worker.run())
-        {
-            tracing::warn!(?error, "failed to start JavaScript timer wheel thread");
-        }
-        wheel
-    }
-
-    fn schedule(&self, delay_ms: u64, action: TimerAction) {
-        let now = Instant::now();
-        let deadline = now
-            .checked_add(Duration::from_millis(delay_ms))
-            .unwrap_or(now);
-        let mut state = self.lock_state();
-        let old_earliest = state.heap.peek().map(|Reverse((deadline, _))| *deadline);
-        let seq = state.next_seq;
-        state.next_seq = state.next_seq.wrapping_add(1);
-        state.heap.push(Reverse((deadline, seq)));
-        state.entries.insert(seq, action);
-        if old_earliest.is_none_or(|old| deadline < old) {
-            self.ready.notify_one();
-        }
-    }
-
-    fn run(&self) {
-        loop {
-            let due = {
-                let mut state = self.lock_state();
-                loop {
-                    match state.heap.peek().copied() {
-                        Some(Reverse((deadline, _))) => {
-                            let now = Instant::now();
-                            if deadline <= now {
-                                break;
-                            }
-                            let timeout = deadline.saturating_duration_since(now);
-                            state = match self.ready.wait_timeout(state, timeout) {
-                                Ok((state, _)) => state,
-                                Err(poisoned) => poisoned.into_inner().0,
-                            };
-                        }
-                        None => {
-                            state = match self.ready.wait(state) {
-                                Ok(state) => state,
-                                Err(poisoned) => poisoned.into_inner(),
-                            };
-                        }
-                    }
-                }
-
-                let now = Instant::now();
-                let mut due = Vec::new();
-                while let Some(Reverse((deadline, seq))) = state.heap.peek().copied() {
-                    if deadline > now {
-                        break;
-                    }
-                    state.heap.pop();
-                    if let Some(action) = state.entries.remove(&seq) {
-                        due.push(action);
-                    }
-                }
-                due
-            };
-
-            for action in due {
-                if catch_unwind(AssertUnwindSafe(|| action.execute())).is_err() {
-                    tracing::warn!("JavaScript timer wheel action panicked");
-                }
-            }
-        }
-    }
-
-    fn lock_state(&self) -> std::sync::MutexGuard<'_, TimerWheelState> {
-        match self.state.lock() {
-            Ok(state) => state,
-            Err(poisoned) => poisoned.into_inner(),
-        }
-    }
-}
-
-impl GuestPathTranslator {
-    fn from_host_context(
-        env: &BTreeMap<String, String>,
-        host_cwd: PathBuf,
-        guest_cwd: String,
-    ) -> Self {
-        let mut mappings = parse_guest_path_mappings_from_env(env)
-            .into_iter()
-            .filter(|mapping| mapping.guest_path.starts_with('/'))
-            .collect::<Vec<_>>();
-
-        if !mappings
-            .iter()
-            .any(|mapping| mapping.guest_path == guest_cwd && mapping.host_path == host_cwd)
-        {
-            mappings.push(GuestPathMapping {
-                guest_path: guest_cwd.clone(),
-                host_path: host_cwd.clone(),
-            });
-        }
-
-        sort_guest_path_mappings(&mut mappings);
-
-        Self {
-            implicit_guest_cwd: guest_cwd,
-            implicit_host_cwd: host_cwd,
-            sandbox_root: env
-                .get(NODE_SANDBOX_ROOT_ENV)
-                .filter(|value| Path::new(value.as_str()).is_absolute())
-                .map(PathBuf::from),
-            mappings,
-        }
-    }
-
-    fn is_known_host_path(&self, host_path: &Path) -> bool {
-        if host_path.starts_with(&self.implicit_host_cwd) {
-            return true;
-        }
-
-        if let Some(sandbox_root) = &self.sandbox_root {
-            if host_path.starts_with(sandbox_root) {
-                return true;
-            }
-        }
-
-        self.mappings.iter().any(|mapping| {
-            host_path.starts_with(&mapping.host_path)
-                || fs::canonicalize(&mapping.host_path)
-                    .map(|real_path| host_path.starts_with(real_path))
-                    .unwrap_or(false)
-        })
-    }
-
-    fn from_request(request: &StartJavascriptExecutionRequest) -> Self {
-        let implicit_guest_cwd = request
-            .env
-            .get("PWD")
-            .filter(|value| value.starts_with('/'))
-            .cloned()
-            .or_else(|| {
-                request
-                    .env
-                    .get("HOME")
-                    .filter(|value| value.starts_with('/'))
-                    .cloned()
-            })
-            .unwrap_or_else(|| String::from("/root"));
-        let mut translator = Self::from_host_context(
-            &request.env,
-            request.cwd.clone(),
-            implicit_guest_cwd.clone(),
-        );
-        translator.mappings.sort_by(|left, right| {
-            let left_is_implicit =
-                left.guest_path == implicit_guest_cwd && left.host_path == request.cwd;
-            let right_is_implicit =
-                right.guest_path == implicit_guest_cwd && right.host_path == request.cwd;
-            right
-                .guest_path
-                .len()
-                .cmp(&left.guest_path.len())
-                .then_with(|| right_is_implicit.cmp(&left_is_implicit))
-                .then_with(|| {
-                    right
-                        .host_path
-                        .components()
-                        .count()
-                        .cmp(&left.host_path.components().count())
-                })
-        });
-        translator
-    }
-
-    fn guest_cwd(&self) -> &str {
-        &self.implicit_guest_cwd
-    }
-
-    fn resolve_host_entrypoint(&self, cwd: &Path, entrypoint: &str) -> PathBuf {
-        if entrypoint == "-e" || entrypoint == "--eval" {
-            return PathBuf::from(entrypoint);
-        }
-
-        let path = Path::new(entrypoint);
-        if path.is_absolute() {
-            if self.is_known_host_path(path) {
-                return path.to_path_buf();
-            }
-            self.guest_to_host(entrypoint)
-                .unwrap_or_else(|| path.to_path_buf())
-        } else {
-            cwd.join(path)
-        }
-    }
-
-    fn host_to_guest_string(&self, host_path: &Path) -> String {
-        if !host_path.is_absolute() {
-            return normalize_guest_path(&host_path.to_string_lossy());
-        }
-
-        for mapping in &self.mappings {
-            if let Ok(stripped) = host_path.strip_prefix(&mapping.host_path) {
-                return join_guest_path(
-                    &mapping.guest_path,
-                    &stripped.to_string_lossy().replace('\\', "/"),
-                );
-            }
-            if let Ok(real_mapping_path) = fs::canonicalize(&mapping.host_path) {
-                if let Ok(stripped) = host_path.strip_prefix(&real_mapping_path) {
-                    return join_guest_path(
-                        &mapping.guest_path,
-                        &stripped.to_string_lossy().replace('\\', "/"),
-                    );
-                }
-            }
-        }
-
-        if let Ok(stripped) = host_path.strip_prefix(&self.implicit_host_cwd) {
-            return join_guest_path(
-                &self.implicit_guest_cwd,
-                &stripped.to_string_lossy().replace('\\', "/"),
-            );
-        }
-
-        if let Some(sandbox_root) = &self.sandbox_root {
-            if let Ok(stripped) = host_path.strip_prefix(sandbox_root) {
-                return join_guest_path("/", &stripped.to_string_lossy().replace('\\', "/"));
-            }
-        }
-
-        let basename = host_path
-            .file_name()
-            .and_then(|value| value.to_str())
-            .unwrap_or("unknown");
-        join_guest_path("/unknown", basename)
-    }
-
-    fn guest_to_host(&self, guest_path: &str) -> Option<PathBuf> {
-        let normalized = normalize_guest_path(guest_path);
-        let mut fallback_candidate = None;
-
-        for mapping in &self.mappings {
-            if let Some(suffix) = strip_guest_prefix(&normalized, &mapping.guest_path) {
-                let candidate = join_host_path(&mapping.host_path, suffix);
-                if candidate.exists() {
-                    return self.confine_host_path(candidate);
-                }
-                if let Ok(real_mapping_path) = fs::canonicalize(&mapping.host_path) {
-                    let real_candidate = join_host_path(&real_mapping_path, suffix);
-                    if real_candidate.exists() {
-                        return self.confine_host_path(real_candidate);
-                    }
-                    if let Some(sibling_candidate) =
-                        resolve_pnpm_sibling_host_path(&real_mapping_path, suffix)
-                    {
-                        return self.confine_host_path(sibling_candidate);
-                    }
-                }
-                fallback_candidate.get_or_insert(candidate);
-            }
-        }
-        if let Some(suffix) = strip_guest_prefix(&normalized, &self.implicit_guest_cwd) {
-            return self.confine_host_path(join_host_path(&self.implicit_host_cwd, suffix));
-        }
-
-        if let Some(candidate) = fallback_candidate {
-            return self.confine_host_path(candidate);
-        }
-
-        if let Some(sandbox_root) = &self.sandbox_root {
-            return self.confine_host_path(join_host_path(
-                sandbox_root,
-                normalized.trim_start_matches('/'),
-            ));
-        }
-
-        None
-    }
-
-    fn confine_host_path(&self, host_path: PathBuf) -> Option<PathBuf> {
-        let allowed_roots = self.allowed_canonical_host_roots();
-        if allowed_roots.is_empty() {
-            return None;
-        }
-
-        if let Ok(canonical_path) = fs::canonicalize(&host_path) {
-            return canonical_path_is_allowed(&canonical_path, &allowed_roots).then_some(host_path);
-        }
-
-        let existing_ancestor = nearest_existing_host_ancestor(&host_path)?;
-        let canonical_ancestor = fs::canonicalize(existing_ancestor).ok()?;
-        canonical_path_is_allowed(&canonical_ancestor, &allowed_roots).then_some(host_path)
-    }
-
-    fn allowed_canonical_host_roots(&self) -> Vec<PathBuf> {
-        let mut roots = Vec::new();
-        for root in self
-            .mappings
-            .iter()
-            .map(|mapping| mapping.host_path.as_path())
-            .chain(std::iter::once(self.implicit_host_cwd.as_path()))
-            .chain(self.sandbox_root.as_deref())
-        {
-            if let Ok(canonical_root) = fs::canonicalize(root) {
-                if !roots.iter().any(|existing| existing == &canonical_root) {
-                    roots.push(canonical_root);
-                }
-            }
-        }
-        roots
-    }
-
-    fn canonical_guest_path(&self, guest_path: &str) -> Option<String> {
-        let host_path = self.guest_to_host(guest_path)?;
-        let canonical = fs::canonicalize(host_path).ok()?;
-        for mapping in &self.mappings {
-            if strip_guest_prefix(guest_path, &mapping.guest_path).is_none() {
-                continue;
-            }
-            if let Ok(stripped) = canonical.strip_prefix(&mapping.host_path) {
-                return Some(join_guest_path(
-                    &mapping.guest_path,
-                    &stripped.to_string_lossy().replace('\\', "/"),
-                ));
-            }
-            if let Ok(real_mapping_path) = fs::canonicalize(&mapping.host_path) {
-                if let Ok(stripped) = canonical.strip_prefix(&real_mapping_path) {
-                    return Some(join_guest_path(
-                        &mapping.guest_path,
-                        &stripped.to_string_lossy().replace('\\', "/"),
-                    ));
-                }
-            }
-        }
-        if let Some(node_modules_root) = self
-            .mappings
-            .iter()
-            .find(|mapping| mapping.guest_path == "/root/node_modules")
-        {
-            if let Ok(stripped) = canonical.strip_prefix(&node_modules_root.host_path) {
-                return Some(join_guest_path(
-                    &node_modules_root.guest_path,
-                    &stripped.to_string_lossy().replace('\\', "/"),
-                ));
-            }
-            if let Ok(real_root) = fs::canonicalize(&node_modules_root.host_path) {
-                if let Ok(stripped) = canonical.strip_prefix(&real_root) {
-                    return Some(join_guest_path(
-                        &node_modules_root.guest_path,
-                        &stripped.to_string_lossy().replace('\\', "/"),
-                    ));
-                }
-            }
-        }
-        let guest = self.host_to_guest_string(&canonical);
-        (!guest.starts_with("/unknown/")).then_some(normalize_guest_path(&guest))
-    }
-}
-
-fn sort_guest_path_mappings(mappings: &mut [GuestPathMapping]) {
-    mappings.sort_by(|left, right| {
-        right
-            .guest_path
-            .len()
-            .cmp(&left.guest_path.len())
-            .then_with(|| {
-                right
-                    .host_path
-                    .components()
-                    .count()
-                    .cmp(&left.host_path.components().count())
-            })
-    });
-}
-
-fn canonical_path_is_allowed(path: &Path, allowed_roots: &[PathBuf]) -> bool {
-    allowed_roots
-        .iter()
-        .any(|root| path == root || path.starts_with(root))
-}
-
-fn nearest_existing_host_ancestor(path: &Path) -> Option<&Path> {
-    let mut candidate = Some(path);
-    while let Some(current) = candidate {
-        if fs::symlink_metadata(current).is_ok() {
-            return Some(current);
-        }
-        candidate = current.parent();
-    }
-    None
-}
-
-#[doc(hidden)]
-pub struct ModuleResolutionTestHarness {
-    local_bridge: LocalBridgeState,
-}
-
-impl ModuleResolutionTestHarness {
-    pub fn new(host_root: impl Into<PathBuf>) -> Self {
-        let host_root = host_root.into();
-        let mut mappings = vec![
-            GuestPathMapping {
-                guest_path: String::from("/root/node_modules"),
-                host_path: host_root.join("node_modules"),
-            },
-            GuestPathMapping {
-                guest_path: String::from("/root"),
-                host_path: host_root.clone(),
-            },
-        ];
-        sort_guest_path_mappings(&mut mappings);
-
-        // Build via default + in-place assignment rather than `..default()`:
-        // LocalBridgeState implements Drop (to cancel timers on session teardown),
-        // and functional-record-update would move fields out of a Drop type (E0509).
-        let mut local_bridge = LocalBridgeState::default();
-        local_bridge.translator = GuestPathTranslator {
-            implicit_guest_cwd: String::from("/root"),
-            implicit_host_cwd: host_root,
-            sandbox_root: None,
-            mappings,
-        };
-        Self { local_bridge }
-    }
-
-    pub fn resolve_import(&mut self, specifier: &str, from_path: &str) -> Option<String> {
-        self.local_bridge
-            .resolve_module(specifier, from_path, ModuleResolveMode::Import)
-    }
-
-    pub fn resolve_require(&mut self, specifier: &str, from_path: &str) -> Option<String> {
-        self.local_bridge
-            .resolve_module(specifier, from_path, ModuleResolveMode::Require)
-    }
-
-    pub fn module_format(&mut self, path: &str) -> Option<&'static str> {
-        self.local_bridge
-            .module_format(path)
-            .map(LocalResolvedModuleFormat::as_str)
-    }
-}
-
-#[doc(hidden)]
-pub fn handle_internal_bridge_call_from_host_context(
-    host_cwd: &Path,
-    guest_cwd: &str,
-    env: &BTreeMap<String, String>,
-    method: &str,
-    args: &[Value],
-) -> Option<Value> {
-    // default + in-place assign: LocalBridgeState is Drop, so `..default()` (E0509)
-    // is not allowed.
-    let mut local_bridge = LocalBridgeState::default();
-    local_bridge.translator =
-        GuestPathTranslator::from_host_context(env, host_cwd.to_path_buf(), guest_cwd.to_owned());
-
-    match local_bridge.handle_internal_bridge_call(0, method, args) {
-        Some(LocalBridgeCallResult::Immediate(value)) => Some(value),
-        _ => None,
-    }
-}
-
-fn resolve_pnpm_sibling_host_path(real_mapping_path: &Path, suffix: &str) -> Option<PathBuf> {
-    let trimmed = suffix.strip_prefix("node_modules/")?;
-    let mut current = Some(real_mapping_path);
-    while let Some(path) = current {
-        if path.file_name().and_then(|name| name.to_str()) == Some("node_modules") {
-            let candidate = join_host_path(path, trimmed);
-            if candidate.exists() {
-                return Some(candidate);
-            }
-            break;
-        }
-        current = path.parent();
-    }
-    None
-}
-
-fn parse_guest_path_mappings(request: &StartJavascriptExecutionRequest) -> Vec<GuestPathMapping> {
-    parse_guest_path_mappings_from_env(&request.env)
-}
-
-fn parse_guest_path_mappings_from_env(env: &BTreeMap<String, String>) -> Vec<GuestPathMapping> {
-    env.get(NODE_GUEST_PATH_MAPPINGS_ENV)
-        .and_then(|value| serde_json::from_str::<Vec<GuestPathMappingWire>>(value).ok())
-        .into_iter()
-        .flatten()
-        .map(|mapping| GuestPathMapping {
-            guest_path: normalize_guest_path(&mapping.guest_path),
-            host_path: PathBuf::from(mapping.host_path),
-        })
-        .collect()
-}
-
-fn normalize_guest_path(path: &str) -> String {
-    let mut segments = Vec::new();
-    let absolute = path.starts_with('/');
-    for segment in path.split('/') {
-        match segment {
-            "" | "." => {}
-            ".." => {
-                segments.pop();
-            }
-            other => segments.push(other),
-        }
-    }
-    if !absolute {
-        return segments.join("/");
-    }
-    if segments.is_empty() {
-        String::from("/")
-    } else {
-        format!("/{}", segments.join("/"))
-    }
-}
-
-fn join_guest_path(base: &str, suffix: &str) -> String {
-    if suffix.is_empty() || suffix == "." {
-        return normalize_guest_path(base);
-    }
-    let trimmed = suffix.trim_start_matches('/');
-    normalize_guest_path(&format!("{}/{}", base.trim_end_matches('/'), trimmed))
-}
-
-fn strip_guest_prefix<'a>(path: &'a str, prefix: &str) -> Option<&'a str> {
-    if prefix == "/" {
-        return path.strip_prefix('/');
-    }
-    if path == prefix {
-        return Some("");
-    }
-    path.strip_prefix(prefix)
-        .and_then(|suffix| suffix.strip_prefix('/'))
-}
-
-fn join_host_path(base: &Path, suffix: &str) -> PathBuf {
-    if suffix.is_empty() {
-        return base.to_path_buf();
-    }
-    let mut joined = base.to_path_buf();
-    for segment in suffix.split('/') {
-        if segment.is_empty() || segment == "." {
-            continue;
-        }
-        if segment == ".." {
-            joined.pop();
-        } else {
-            joined.push(segment);
-        }
-    }
-    joined
-}
-
-fn translate_v8_bridge_value_to_legacy(value: &Value) -> Value {
-    match value {
-        Value::Array(values) => Value::Array(
-            values
-                .iter()
-                .map(translate_v8_bridge_value_to_legacy)
-                .collect(),
-        ),
-        Value::Object(map) if map.get("__type").and_then(Value::as_str) == Some("Buffer") => {
-            json!({
-                "__agentOSType": "bytes",
-                "base64": map.get("data").cloned().unwrap_or(Value::String(String::new())),
-            })
-        }
-        Value::Object(map) => Value::Object(
-            map.iter()
-                .map(|(key, value)| (key.clone(), translate_v8_bridge_value_to_legacy(value)))
-                .collect(),
-        ),
-        other => other.clone(),
-    }
-}
-
-fn translate_request_args_for_legacy(method: &str, args: &[Value]) -> Vec<Value> {
-    let mut translated = args
-        .iter()
-        .map(translate_v8_bridge_value_to_legacy)
-        .collect::<Vec<_>>();
-
-    if matches!(method, "fs.writeFileSync" | "fs.promises.writeFile") {
-        if let Some(Value::String(data)) = translated.get(1) {
-            translated[1] = json!({
-                "__agentOSType": "bytes",
-                "base64": v8_runtime::base64_encode_pub(data.as_bytes()),
-            });
-        }
-    }
-
-    translated
-}
-
-fn translate_legacy_bridge_value_to_v8(value: &Value) -> Value {
-    match value {
-        Value::Array(values) => Value::Array(
-            values
-                .iter()
-                .map(translate_legacy_bridge_value_to_v8)
-                .collect(),
-        ),
-        Value::Object(map) if map.get("__agentOSType").and_then(Value::as_str) == Some("bytes") => {
-            json!({
-                "__type": "Buffer",
-                "data": map.get("base64").cloned().unwrap_or(Value::String(String::new())),
-            })
-        }
-        Value::Object(map) => Value::Object(
-            map.iter()
-                .map(|(key, value)| (key.clone(), translate_legacy_bridge_value_to_v8(value)))
-                .collect(),
-        ),
-        other => other.clone(),
-    }
-}
-
-fn decode_bridge_output_arg(value: &Value) -> Vec<u8> {
-    match value {
-        Value::String(s) => s.as_bytes().to_vec(),
-        Value::Object(map)
-            if map.get("__type").and_then(Value::as_str) == Some("Buffer")
-                || map.get("__agentOSType").and_then(Value::as_str) == Some("bytes") =>
-        {
-            let base64_value = map
-                .get("data")
-                .or_else(|| map.get("base64"))
-                .and_then(Value::as_str);
-            if let Some(base64_value) = base64_value {
-                if let Some(bytes) = v8_runtime::base64_decode_pub(base64_value) {
-                    return bytes;
-                }
-            }
-            value.to_string().into_bytes()
-        }
-        other => other.to_string().into_bytes(),
-    }
-}
-
-fn decode_bridge_output_args(args: &[Value]) -> Vec<u8> {
-    let mut output = Vec::new();
-    for (index, arg) in args.iter().enumerate() {
-        if index > 0 {
-            output.push(b' ');
-        }
-        output.extend(decode_bridge_output_arg(arg));
-    }
-    output
-}
-
-#[derive(Debug)]
-pub enum JavascriptExecutionError {
-    EmptyArgv,
-    MissingContext(String),
-    VmMismatch { expected: String, found: String },
-    PrepareImportCache(std::io::Error),
-    Spawn(std::io::Error),
-    PendingSyncRpcRequest(u64),
-    ExpiredSyncRpcRequest(u64),
-    RpcResponse(String),
-    Terminate(std::io::Error),
-    StdinClosed,
-    Stdin(std::io::Error),
-    OutputBufferExceeded { stream: &'static str, limit: usize },
-    EventChannelClosed,
-}
-
-impl fmt::Display for JavascriptExecutionError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::EmptyArgv => f.write_str("guest JavaScript execution requires argv[0]"),
-            Self::MissingContext(context_id) => {
-                write!(f, "unknown guest JavaScript context: {context_id}")
-            }
-            Self::VmMismatch { expected, found } => {
-                write!(
-                    f,
-                    "guest JavaScript context belongs to vm {expected}, not {found}"
-                )
-            }
-            Self::PrepareImportCache(err) => {
-                write!(
-                    f,
-                    "failed to prepare sidecar-scoped Node import cache: {err}"
-                )
-            }
-            Self::Spawn(err) => write!(f, "failed to start guest JavaScript runtime: {err}"),
-            Self::PendingSyncRpcRequest(id) => {
-                write!(
-                    f,
-                    "guest JavaScript execution requires servicing pending sync RPC request {id}"
-                )
-            }
-            Self::ExpiredSyncRpcRequest(id) => {
-                write!(f, "sync RPC request {id} is no longer pending")
-            }
-            Self::RpcResponse(message) => {
-                write!(
-                    f,
-                    "failed to reply to guest JavaScript sync RPC request: {message}"
-                )
-            }
-            Self::Terminate(err) => {
-                write!(f, "failed to terminate guest JavaScript runtime: {err}")
-            }
-            Self::StdinClosed => f.write_str("guest JavaScript stdin is already closed"),
-            Self::Stdin(err) => write!(f, "failed to write guest stdin: {err}"),
-            Self::OutputBufferExceeded { stream, limit } => {
-                write!(
-                    f,
-                    "guest JavaScript {stream} exceeded the captured output limit of {limit} bytes"
-                )
-            }
-            Self::EventChannelClosed => {
-                f.write_str("guest JavaScript event channel closed unexpectedly")
-            }
-        }
-    }
-}
-
-impl std::error::Error for JavascriptExecutionError {}
-
-#[derive(Debug)]
-pub struct JavascriptExecution {
-    execution_id: String,
-    child_pid: u32,
-    events: tokio::sync::Mutex<TokioReceiver<JavascriptExecutionEvent>>,
-    pending_sync_rpc: Arc<Mutex<Option<PendingSyncRpcState>>>,
-    kernel_stdin: Arc<LocalKernelStdinBridge>,
-    _import_cache_guard: Arc<NodeImportCacheCleanup>,
-    v8_session: V8SessionHandle,
-    /// Host-direct module resolver state, used ONLY by the standalone `wait()`
-    /// loop. The real VM runtime resolves modules against the kernel VFS on the
-    /// sidecar service loop and never reaches this; but `wait()` runs without a
-    /// kernel (dev/test harness), so it services module-resolution sync RPCs
-    /// host-directly from the request's path translator.
-    module_resolution: Mutex<(GuestPathTranslator, LocalModuleResolutionCache)>,
-}
-
-impl JavascriptExecution {
-    pub fn execution_id(&self) -> &str {
-        &self.execution_id
-    }
-
-    pub fn child_pid(&self) -> u32 {
-        self.child_pid
-    }
-
-    pub fn v8_session_handle(&self) -> V8SessionHandle {
-        self.v8_session.clone()
-    }
-
-    pub fn uses_shared_v8_runtime(&self) -> bool {
-        true
-    }
-
-    pub fn write_stdin(&mut self, chunk: &[u8]) -> Result<(), JavascriptExecutionError> {
-        self.kernel_stdin.write(chunk)?;
-        let payload = v8_runtime::json_to_cbor_payload(&json!({
-            "dataBase64": v8_runtime::base64_encode_pub(chunk),
-        }))
-        .map_err(JavascriptExecutionError::Stdin)?;
-        self.v8_session
-            .send_stream_event("stdin", payload)
-            .map_err(JavascriptExecutionError::Stdin)
-    }
-
-    pub fn close_stdin(&mut self) -> Result<(), JavascriptExecutionError> {
-        self.kernel_stdin.close();
-        let _ = self.v8_session.send_stream_event("stdin_end", vec![]);
-        Ok(())
-    }
-
-    pub(crate) fn write_kernel_stdin_only(
-        &mut self,
-        chunk: &[u8],
-    ) -> Result<(), JavascriptExecutionError> {
-        self.kernel_stdin.write(chunk)
-    }
-
-    pub(crate) fn close_kernel_stdin_only(&mut self) {
-        self.kernel_stdin.close();
-    }
-
-    pub fn read_kernel_stdin_sync_rpc(
-        &self,
-        request: &JavascriptSyncRpcRequest,
-    ) -> Result<Value, JavascriptExecutionError> {
-        if request.method != "__kernel_stdin_read" {
-            return Ok(Value::Null);
-        }
-
-        Ok(self.kernel_stdin.read(&request.args))
-    }
-
-    pub(crate) fn handle_kernel_stdin_sync_rpc(
-        &mut self,
-        request: &JavascriptSyncRpcRequest,
-    ) -> Result<bool, JavascriptExecutionError> {
-        if request.method != "__kernel_stdin_read" {
-            return Ok(false);
-        }
-
-        let response = self.kernel_stdin.read(&request.args);
-        self.respond_sync_rpc_success(request.id, response)?;
-        Ok(true)
-    }
-
-    pub fn terminate(&self) -> Result<(), JavascriptExecutionError> {
-        self.v8_session
-            .terminate()
-            .map_err(JavascriptExecutionError::Terminate)
-    }
-
-    pub fn send_stream_event(
-        &self,
-        event_type: &str,
-        payload: Value,
-    ) -> Result<(), JavascriptExecutionError> {
-        let payload = v8_runtime::json_to_cbor_payload(&payload)
-            .map_err(|error| JavascriptExecutionError::RpcResponse(error.to_string()))?;
-        self.v8_session
-            .send_stream_event(event_type, payload)
-            .map_err(|error| JavascriptExecutionError::RpcResponse(error.to_string()))
-    }
-
-    pub fn respond_sync_rpc_success(
-        &mut self,
-        id: u64,
-        result: Value,
-    ) -> Result<(), JavascriptExecutionError> {
-        let phase_start = Instant::now();
-        match self.clear_pending_sync_rpc(id)? {
-            PendingSyncRpcResolution::Pending => {}
-            PendingSyncRpcResolution::TimedOut => {
-                return Err(JavascriptExecutionError::ExpiredSyncRpcRequest(id));
-            }
-            PendingSyncRpcResolution::Missing => {}
-        }
-        record_sync_bridge_phase(
-            "sync_rpc_response",
-            "response_clear_pending",
-            phase_start.elapsed(),
-        );
-
-        let phase_start = Instant::now();
-        let payload = translate_legacy_bridge_value_to_v8(&result);
-        record_sync_bridge_phase(
-            "sync_rpc_response",
-            "response_translate_value",
-            phase_start.elapsed(),
-        );
-        let phase_start = Instant::now();
-        let payload = v8_runtime::json_to_cbor_payload(&payload)
-            .map_err(|e| JavascriptExecutionError::RpcResponse(e.to_string()))?;
-        record_sync_bridge_phase(
-            "sync_rpc_response",
-            "response_encode_cbor",
-            phase_start.elapsed(),
-        );
-        let phase_start = Instant::now();
-        let result = self
-            .v8_session
-            .send_bridge_response(id, 0, payload)
-            .map_err(|e| JavascriptExecutionError::RpcResponse(e.to_string()));
-        record_sync_bridge_phase("sync_rpc_response", "response_send", phase_start.elapsed());
-        result
-    }
-
-    pub fn respond_sync_rpc_raw_success(
-        &mut self,
-        id: u64,
-        payload: Vec<u8>,
-    ) -> Result<(), JavascriptExecutionError> {
-        let phase_start = Instant::now();
-        match self.clear_pending_sync_rpc(id)? {
-            PendingSyncRpcResolution::Pending => {}
-            PendingSyncRpcResolution::TimedOut => {
-                return Err(JavascriptExecutionError::ExpiredSyncRpcRequest(id));
-            }
-            PendingSyncRpcResolution::Missing => {}
-        }
-        record_sync_bridge_phase(
-            "sync_rpc_raw_response",
-            "response_clear_pending",
-            phase_start.elapsed(),
-        );
-
-        let phase_start = Instant::now();
-        let result = self
-            .v8_session
-            .send_bridge_response(id, 2, payload)
-            .map_err(|e| JavascriptExecutionError::RpcResponse(e.to_string()));
-        record_sync_bridge_phase(
-            "sync_rpc_raw_response",
-            "response_send",
-            phase_start.elapsed(),
-        );
-        result
-    }
-
-    pub fn respond_sync_rpc_error(
-        &mut self,
-        id: u64,
-        code: impl Into<String>,
-        message: impl Into<String>,
-    ) -> Result<(), JavascriptExecutionError> {
-        match self.clear_pending_sync_rpc(id)? {
-            PendingSyncRpcResolution::Pending => {}
-            PendingSyncRpcResolution::TimedOut => {
-                return Err(JavascriptExecutionError::ExpiredSyncRpcRequest(id));
-            }
-            PendingSyncRpcResolution::Missing => {}
-        }
-
-        let error_msg = format!("{}: {}", code.into(), message.into());
-        self.v8_session
-            .send_bridge_response(id, 1, error_msg.into_bytes())
-            .map_err(|e| JavascriptExecutionError::RpcResponse(e.to_string()))
-    }
-
-    pub async fn poll_event(
-        &self,
-        timeout: Duration,
-    ) -> Result<Option<JavascriptExecutionEvent>, JavascriptExecutionError> {
-        if timeout.is_zero() {
-            let mut events = self.events.lock().await;
-            return match events.try_recv() {
-                Ok(event) => Ok(Some(event)),
-                Err(TokioTryRecvError::Empty) => Ok(None),
-                Err(TokioTryRecvError::Disconnected) => {
-                    Err(JavascriptExecutionError::EventChannelClosed)
-                }
-            };
-        }
-
-        let mut events = self.events.lock().await;
-        match time::timeout(timeout, events.recv()).await {
-            Ok(Some(event)) => Ok(Some(event)),
-            Ok(None) => Err(JavascriptExecutionError::EventChannelClosed),
-            Err(_) => Ok(None),
-        }
-    }
-
-    pub fn poll_event_blocking(
-        &self,
-        timeout: Duration,
-    ) -> Result<Option<JavascriptExecutionEvent>, JavascriptExecutionError> {
-        let deadline = Instant::now() + timeout;
-        loop {
-            if let Ok(mut events) = self.events.try_lock() {
-                match events.try_recv() {
-                    Ok(event) => return Ok(Some(event)),
-                    Err(TokioTryRecvError::Disconnected) => {
-                        return Err(JavascriptExecutionError::EventChannelClosed);
-                    }
-                    Err(TokioTryRecvError::Empty) => {
-                        if Instant::now() >= deadline {
-                            return Ok(None);
-                        }
-                    }
-                }
-            }
-
-            if Instant::now() >= deadline {
-                return Ok(None);
-            }
-            thread::sleep(Duration::from_millis(1));
-        }
-    }
-
-    pub fn wait(mut self) -> Result<JavascriptExecutionResult, JavascriptExecutionError> {
-        self.close_stdin()?;
-        let mut events = std::mem::replace(
-            self.events.get_mut(),
-            channel(JAVASCRIPT_EVENT_CHANNEL_CAPACITY).1,
-        );
-        let execution_id = std::mem::take(&mut self.execution_id);
-
-        let mut stdout = Vec::new();
-        let mut stderr = Vec::new();
-
-        loop {
-            match events.blocking_recv() {
-                Some(JavascriptExecutionEvent::Stdout(chunk)) => {
-                    append_captured_output(&mut stdout, chunk, "stdout")?;
-                }
-                Some(JavascriptExecutionEvent::Stderr(chunk)) => {
-                    append_captured_output(&mut stderr, chunk, "stderr")?;
-                }
-                Some(JavascriptExecutionEvent::SyncRpcRequest(request)) => {
-                    // The standalone engine has no kernel/service loop. Service
-                    // module-resolution RPCs host-directly (the only FS source
-                    // available here) so `wait()` does not deadlock; everything
-                    // else is unsupported off the VM path.
-                    if self.try_service_standalone_module_sync_rpc(&request)? {
-                        continue;
-                    }
-                    return Err(JavascriptExecutionError::PendingSyncRpcRequest(request.id));
-                }
-                Some(JavascriptExecutionEvent::SignalState { .. }) => {}
-                Some(JavascriptExecutionEvent::Exited(exit_code)) => {
-                    return Ok(JavascriptExecutionResult {
-                        execution_id,
-                        exit_code,
-                        stdout,
-                        stderr,
-                    });
-                }
-                None => return Err(JavascriptExecutionError::EventChannelClosed),
-            }
-        }
-    }
-
-    /// Service a module-resolution sync RPC host-directly, for consumers that
-    /// drive the V8 bridge without a kernel/service loop (the standalone
-    /// `wait()` loop and the Python/WASM prewarm loops). Uses this execution's
-    /// own path translator (captured at start, including any runtime path
-    /// mappings) and a persistent cache. Returns `Ok(true)` if the request was a
-    /// module method and was answered, `Ok(false)` if it should fall through.
-    ///
-    /// The real VM runtime resolves modules against the kernel VFS on the
-    /// sidecar service loop and never calls this.
-    pub fn try_service_standalone_module_sync_rpc(
-        &mut self,
-        request: &JavascriptSyncRpcRequest,
-    ) -> Result<bool, JavascriptExecutionError> {
-        let result = {
-            let mut guard = self.module_resolution.lock().map_err(|_| {
-                JavascriptExecutionError::RpcResponse(String::from(
-                    "standalone module resolution state poisoned",
-                ))
-            })?;
-            let (translator, cache) = &mut *guard;
-            let mut resolver = ModuleResolver::new(translator, cache);
-            match request.method.as_str() {
-                "__resolve_module" | "_resolveModule" | "_resolveModuleSync" => {
-                    let specifier = request.args.first().and_then(Value::as_str).unwrap_or("");
-                    let parent = request.args.get(1).and_then(Value::as_str).unwrap_or("/");
-                    let mode = match request.args.get(2).and_then(Value::as_str) {
-                        Some("import") => ModuleResolveMode::Import,
-                        Some("require") => ModuleResolveMode::Require,
-                        _ if request.method == "_resolveModuleSync" => ModuleResolveMode::Require,
-                        _ => ModuleResolveMode::Import,
-                    };
-                    resolver
-                        .resolve_module(specifier, parent, mode)
-                        .map(Value::String)
-                        .unwrap_or(Value::Null)
-                }
-                "__load_file" | "_loadFile" | "_loadFileSync" => resolver
-                    .load_file(request.args.first().and_then(Value::as_str).unwrap_or(""))
-                    .map(Value::String)
-                    .unwrap_or(Value::Null),
-                "__module_format" | "_moduleFormat" => resolver
-                    .module_format(request.args.first().and_then(Value::as_str).unwrap_or(""))
-                    .map(|format| Value::String(String::from(format.as_str())))
-                    .unwrap_or(Value::Null),
-                "__batch_resolve_modules" | "_batchResolveModules" => {
-                    resolver.batch_resolve_modules(&request.args)
-                }
-                _ => return Ok(false),
-            }
-        };
-        self.respond_sync_rpc_success(request.id, result)?;
-        Ok(true)
-    }
-
-    fn clear_pending_sync_rpc(
-        &self,
-        id: u64,
-    ) -> Result<PendingSyncRpcResolution, JavascriptExecutionError> {
-        let mut pending = self.pending_sync_rpc.lock().map_err(|_| {
-            JavascriptExecutionError::RpcResponse(String::from(
-                "sync RPC pending-request state lock poisoned",
-            ))
-        })?;
-        match *pending {
-            Some(PendingSyncRpcState::Pending(current)) if current == id => {
-                *pending = None;
-                Ok(PendingSyncRpcResolution::Pending)
-            }
-            Some(PendingSyncRpcState::TimedOut(current)) if current == id => {
-                Ok(PendingSyncRpcResolution::TimedOut)
-            }
-            _ => Ok(PendingSyncRpcResolution::Missing),
-        }
-    }
-}
-
-impl Drop for JavascriptExecution {
-    fn drop(&mut self) {
-        let _ = self.v8_session.destroy();
-    }
-}
-
-fn append_captured_output(
-    target: &mut Vec<u8>,
-    chunk: Vec<u8>,
-    stream: &'static str,
-) -> Result<(), JavascriptExecutionError> {
-    let next_len = target.len().checked_add(chunk.len()).ok_or(
-        JavascriptExecutionError::OutputBufferExceeded {
-            stream,
-            limit: JAVASCRIPT_CAPTURED_OUTPUT_LIMIT_BYTES,
-        },
-    )?;
-    if next_len > JAVASCRIPT_CAPTURED_OUTPUT_LIMIT_BYTES {
-        return Err(JavascriptExecutionError::OutputBufferExceeded {
-            stream,
-            limit: JAVASCRIPT_CAPTURED_OUTPUT_LIMIT_BYTES,
-        });
-    }
-
-    target.extend(chunk);
-    Ok(())
-}
-
-struct V8SessionRegistrationGuard<'a> {
-    v8_host: &'a V8RuntimeHost,
-    session_id: String,
-    active: bool,
-}
-
-impl<'a> V8SessionRegistrationGuard<'a> {
-    fn new(v8_host: &'a V8RuntimeHost, session_id: String) -> Self {
-        Self {
-            v8_host,
-            session_id,
-            active: true,
-        }
-    }
-
-    fn disarm(&mut self) {
-        self.active = false;
-    }
-}
-
-impl Drop for V8SessionRegistrationGuard<'_> {
-    fn drop(&mut self) {
-        if self.active {
-            self.v8_host.unregister_session(&self.session_id);
-        }
-    }
-}
-
-struct PendingV8SessionRegistration<'a> {
-    frame_receiver: TrackedReceiver<BinaryFrame>,
-    registration_guard: V8SessionRegistrationGuard<'a>,
-}
-
-fn register_v8_session<F>(
-    v8_host: &V8RuntimeHost,
-    session_id: String,
-    heap_limit_mb: u32,
-    cpu_time_limit_ms: u32,
-    wall_clock_limit_ms: u32,
-    warm_hint: Option<WarmSessionHint>,
-    create_session: F,
-) -> Result<PendingV8SessionRegistration<'_>, JavascriptExecutionError>
-where
-    F: FnOnce(RuntimeCommand) -> std::io::Result<()>,
-{
-    let frame_receiver = v8_host
-        .register_session(&session_id)
-        .map_err(JavascriptExecutionError::Spawn)?;
-    let registration_guard = V8SessionRegistrationGuard::new(v8_host, session_id.clone());
-
-    create_session(RuntimeCommand::CreateSession {
-        session_id,
-        heap_limit_mb: (heap_limit_mb > 0).then_some(heap_limit_mb),
-        cpu_time_limit_ms: (cpu_time_limit_ms > 0).then_some(cpu_time_limit_ms),
-        wall_clock_limit_ms: (wall_clock_limit_ms > 0).then_some(wall_clock_limit_ms),
-        warm_hint,
-    })
-    .map_err(JavascriptExecutionError::Spawn)?;
-
-    Ok(PendingV8SessionRegistration {
-        frame_receiver,
-        registration_guard,
-    })
-}
-
-#[derive(Default)]
-pub struct JavascriptExecutionEngine {
-    next_context_id: usize,
-    next_execution_id: usize,
-    contexts: BTreeMap<String, JavascriptContext>,
-    import_caches: BTreeMap<String, NodeImportCache>,
-    v8_host: Option<V8RuntimeHost>,
-    event_notify: Option<Arc<Notify>>,
-}
-
-impl std::fmt::Debug for JavascriptExecutionEngine {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        f.debug_struct("JavascriptExecutionEngine")
-            .field("next_context_id", &self.next_context_id)
-            .field("next_execution_id", &self.next_execution_id)
-            .field("contexts", &self.contexts)
-            .field("v8_host", &self.v8_host.is_some())
-            .finish()
-    }
-}
-
-impl JavascriptExecutionEngine {
-    #[doc(hidden)]
-    pub fn set_event_notify(&mut self, notify: Option<Arc<Notify>>) {
-        self.event_notify = notify;
-    }
-
-    #[doc(hidden)]
-    pub fn set_import_cache_base_dir(&mut self, vm_id: impl Into<String>, base_dir: PathBuf) {
-        self.import_caches
-            .insert(vm_id.into(), NodeImportCache::new_in(base_dir));
-    }
-
-    pub fn create_context(&mut self, request: CreateJavascriptContextRequest) -> JavascriptContext {
-        self.next_context_id += 1;
-        self.import_caches.entry(request.vm_id.clone()).or_default();
-
-        let context = JavascriptContext {
-            context_id: format!("js-ctx-{}", self.next_context_id),
-            vm_id: request.vm_id,
-            bootstrap_module: request.bootstrap_module,
-            compile_cache_dir: request
-                .compile_cache_root
-                .map(resolve_node_import_compile_cache_dir),
-        };
-        self.contexts
-            .insert(context.context_id.clone(), context.clone());
-        context
-    }
-
-    pub fn start_execution(
-        &mut self,
-        request: StartJavascriptExecutionRequest,
-    ) -> Result<JavascriptExecution, JavascriptExecutionError> {
-        self.start_execution_with_module_reader(request, None, None)
-    }
-
-    fn ensure_v8_host(&mut self) -> Result<(), JavascriptExecutionError> {
-        let should_spawn_v8_host = match self.v8_host.as_mut() {
-            Some(v8_host) => !v8_host
-                .is_alive()
-                .map_err(JavascriptExecutionError::Spawn)?,
-            None => true,
-        };
-        if should_spawn_v8_host {
-            self.v8_host = Some(V8RuntimeHost::spawn().map_err(JavascriptExecutionError::Spawn)?);
-        }
-        Ok(())
-    }
-
-    pub(crate) fn snapshot_userland_ready(
-        &mut self,
-        userland_code: &str,
-    ) -> Result<bool, JavascriptExecutionError> {
-        self.ensure_v8_host()?;
-        Ok(self
-            .v8_host
-            .as_ref()
-            .expect("V8 host initialized")
-            .snapshot_ready(userland_code))
-    }
-
-    pub(crate) fn pre_warm_snapshot(
-        &mut self,
-        userland_code: &str,
-    ) -> Result<(), JavascriptExecutionError> {
-        self.ensure_v8_host()?;
-        self.v8_host
-            .as_ref()
-            .expect("V8 host initialized")
-            .pre_warm_snapshot(userland_code)
-            .map_err(JavascriptExecutionError::Spawn)
-    }
-
-    pub(crate) fn pre_warm_workers(
-        &mut self,
-        userland_code: &str,
-        heap_limit_mb: u32,
-        count: usize,
-    ) -> Result<(), JavascriptExecutionError> {
-        self.ensure_v8_host()?;
-        self.v8_host
-            .as_ref()
-            .expect("V8 host initialized")
-            .pre_warm_workers(userland_code, heap_limit_mb, count);
-        Ok(())
-    }
-
-    /// Like [`start_execution`](Self::start_execution) but with an optional
-    /// read-only VFS reader over the mounted `node_modules` tree. When supplied,
-    /// the bridge thread resolves module-resolution RPCs inline against this
-    /// reader (off the service loop, concurrently with it) instead of routing
-    /// them through the service loop. The reader must be `Send` because it is
-    /// moved onto the bridge thread; it must read the same mount the guest sees.
-    pub fn start_execution_with_module_reader(
-        &mut self,
-        request: StartJavascriptExecutionRequest,
-        module_reader: Option<Box<dyn ModuleFsReader + Send>>,
-        guest_reader: Option<Box<dyn secure_exec_v8_runtime::execution::GuestModuleReader>>,
-    ) -> Result<JavascriptExecution, JavascriptExecutionError> {
-        let context = self
-            .contexts
-            .get(&request.context_id)
-            .cloned()
-            .ok_or_else(|| JavascriptExecutionError::MissingContext(request.context_id.clone()))?;
-
-        if context.vm_id != request.vm_id {
-            return Err(JavascriptExecutionError::VmMismatch {
-                expected: context.vm_id,
-                found: request.vm_id,
-            });
-        }
-
-        if request.argv.is_empty() {
-            return Err(JavascriptExecutionError::EmptyArgv);
-        }
-
-        let phase_start = Instant::now();
-        // Ensure import cache is materialized (still needed for module resolution)
-        let import_cache = self.import_caches.entry(context.vm_id.clone()).or_default();
-        import_cache
-            .ensure_materialized_with_timeout(javascript_import_cache_materialize_timeout(&request))
-            .map_err(JavascriptExecutionError::PrepareImportCache)?;
-        let import_cache_guard = import_cache.cleanup_guard();
-        record_js_start_phase("js_start_import_cache", phase_start.elapsed());
-
-        self.next_execution_id += 1;
-        let execution_id = format!("exec-{}", self.next_execution_id);
-        let sync_rpc_timeout = javascript_sync_rpc_timeout(&request);
-
-        let phase_start = Instant::now();
-        self.ensure_v8_host()?;
-        let v8_host = self.v8_host.as_ref().unwrap();
-        record_js_start_phase("js_start_v8_host_ready", phase_start.elapsed());
-
-        let phase_start = Instant::now();
-        // Create a V8 session
-        let session_id = format!(
-            "v8-{execution_id}-{}",
-            NEXT_V8_SESSION_ID.fetch_add(1, Ordering::Relaxed)
-        );
-        let heap_limit_mb = javascript_heap_limit_mb(&request);
-        let cpu_time_limit_ms = javascript_cpu_time_limit_ms(&request);
-        let wall_clock_limit_ms = javascript_wall_clock_limit_ms(&request);
-        let snapshot_userland_code = request
-            .guest_runtime
-            .snapshot_userland_code
-            .clone()
-            .unwrap_or_default();
-        let warm_hint = Some(WarmSessionHint {
-            bridge_code: V8RuntimeHost::bridge_code().to_owned(),
-            userland_code: snapshot_userland_code.clone(),
-            heap_limit_mb: (heap_limit_mb > 0).then_some(heap_limit_mb),
-        });
-        if snapshot_userland_code.is_empty() && heap_limit_mb == 0 {
-            v8_host.seed_default_warm_workers_async();
-        }
-        let PendingV8SessionRegistration {
-            frame_receiver,
-            mut registration_guard,
-        } = register_v8_session(
-            v8_host,
-            session_id.clone(),
-            heap_limit_mb,
-            cpu_time_limit_ms,
-            wall_clock_limit_ms,
-            warm_hint,
-            |command| v8_host.create_session_from_command(command),
-        )?;
-        record_js_start_phase("js_start_v8_session_register", phase_start.elapsed());
-
-        let phase_start = Instant::now();
-        // Build user code: prefer inline code, fall back to entrypoint-based
-        let translator = GuestPathTranslator::from_request(&request);
-        let host_entrypoint = translator.resolve_host_entrypoint(&request.cwd, &request.argv[0]);
-        let guest_entrypoint = if request.argv[0] == "-e" || request.argv[0] == "--eval" {
-            request.argv[0].clone()
-        } else if let Some(explicit_guest_entrypoint) = request
-            .env
-            .get(NODE_GUEST_ENTRYPOINT_ENV)
-            .filter(|value| value.starts_with('/'))
-        {
-            // Part B (guest-VFS adapter launch): the sidecar already resolved the
-            // GUEST entrypoint path (AGENTOS_GUEST_ENTRYPOINT). Use it directly as
-            // the sourceURL / module-resolution base instead of translating the
-            // host entrypoint — `host_to_guest_string` misses for guest-native
-            // mounts (`agentos_packages`, whose host staging dir is not in the
-            // translation map) and falls back to `/unknown/<cmd>`, which then
-            // poisons the adapter's own relative/bare imports. For host-backed
-            // mounts the two values are equal, so this is a no-op there. Applies
-            // to child launches too (they set AGENTOS_GUEST_ENTRYPOINT as well),
-            // which is the child-process `/unknown` case.
-            explicit_guest_entrypoint.clone()
-        } else {
-            translator.host_to_guest_string(&host_entrypoint)
-        };
-        let process_argv = if matches!(guest_entrypoint.as_str(), "-e" | "--eval") {
-            std::iter::once(String::from("node"))
-                .chain(request.argv.iter().skip(1).cloned())
-                .collect::<Vec<_>>()
-        } else {
-            std::iter::once(String::from("node"))
-                .chain(std::iter::once(guest_entrypoint.clone()))
-                .chain(request.argv.iter().skip(1).cloned())
-                .collect::<Vec<_>>()
-        };
-        let inline_code = request
-            .inline_code
-            .clone()
-            .map(|inline_code| strip_javascript_hashbang(&inline_code));
-        let use_module_mode = request
-            .env
-            .get(NODE_GUEST_ENTRYPOINT_MODULE_MODE_ENV)
-            .is_some_and(|value| value == "1" || value.eq_ignore_ascii_case("true"))
-            || host_entrypoint_uses_module_mode(&host_entrypoint)
-            || inline_code
-                .as_deref()
-                .is_some_and(inline_code_uses_module_mode);
-        if !matches!(guest_entrypoint.as_str(), "-e" | "--eval") && !use_module_mode {
-            if let Some(inline_code) = inline_code.as_ref() {
-                if let Some(parent) = host_entrypoint.parent() {
-                    fs::create_dir_all(parent)
-                        .map_err(JavascriptExecutionError::PrepareImportCache)?;
-                }
-                fs::write(&host_entrypoint, inline_code)
-                    .map_err(JavascriptExecutionError::PrepareImportCache)?;
-            }
-        }
-        let user_code = if matches!(guest_entrypoint.as_str(), "-e" | "--eval") {
-            inline_code.unwrap_or_else(|| build_v8_user_code(&guest_entrypoint, &request.env))
-        } else if use_module_mode {
-            if let Some(inline_code) = inline_code {
-                format!("{inline_code}\n//# sourceURL={guest_entrypoint}")
-            } else {
-                strip_javascript_hashbang(&fs::read_to_string(&host_entrypoint).map_err(
-                    |error| {
-                        JavascriptExecutionError::PrepareImportCache(std::io::Error::new(
-                            error.kind(),
-                            format!(
-                                "failed to read JavaScript entrypoint {}: {error}",
-                                host_entrypoint.display()
-                            ),
-                        ))
-                    },
-                )?)
-            }
-        } else {
-            build_v8_user_code(&guest_entrypoint, &request.env)
-        };
-        let user_code = prepend_v8_runtime_shim(
-            user_code,
-            &guest_entrypoint,
-            &process_argv,
-            translator.guest_cwd(),
-            &request.env,
-            heap_limit_mb,
-            &request.guest_runtime,
-        );
-        record_js_start_phase("js_start_build_user_code", phase_start.elapsed());
-
-        let phase_start = Instant::now();
-        // Create session handle for sending bridge responses
-        let v8_session = v8_host.session_handle(session_id.clone());
-
-        // Start the event bridge before execution so early sync bridge calls
-        // made during module instantiation/evaluation cannot deadlock waiting
-        // for a response while no host thread is draining session frames yet.
-        let pending_sync_rpc = Arc::new(Mutex::new(None));
-        let kernel_stdin = Arc::new(LocalKernelStdinBridge::default());
-        let standalone_translator = translator.clone();
-        // default + in-place assign: LocalBridgeState is Drop, so `..Default::default()`
-        // (E0509) is not allowed.
-        let mut local_bridge = LocalBridgeState::default();
-        local_bridge.translator = translator;
-        local_bridge.kernel_stdin = kernel_stdin.clone();
-        local_bridge.v8_session = Some(v8_session.clone());
-        local_bridge.module_reader = module_reader;
-        local_bridge.module_resolution = GuestModuleResolution::from_env(&request.env);
-        local_bridge.forward_kernel_stdin_rpc = request
-            .env
-            .get(FORWARD_KERNEL_STDIN_RPC_ENV)
-            .is_some_and(|value| value == "1" || value.eq_ignore_ascii_case("true"));
-        let events = spawn_v8_event_bridge(
-            frame_receiver,
-            pending_sync_rpc.clone(),
-            sync_rpc_timeout,
-            v8_session.clone(),
-            local_bridge,
-            self.event_notify.clone(),
-        );
-        record_js_start_phase("js_start_event_bridge", phase_start.elapsed());
-
-        let phase_start = Instant::now();
-        // Install the direct module reader on the session thread BEFORE the Execute
-        // frame so the SetModuleReader command (routed through the same dispatch
-        // queue) arrives first; module loads then read source directly on the V8
-        // thread instead of round-tripping the bridge.
-        if let Some(guest_reader) = guest_reader {
-            v8_session
-                .set_module_reader(guest_reader)
-                .map_err(JavascriptExecutionError::Spawn)?;
-        }
-        record_js_start_phase("js_start_install_module_reader", phase_start.elapsed());
-
-        let phase_start = Instant::now();
-        // Execute bridge code + user code in the V8 isolate
-        v8_session
-            .execute(
-                if use_module_mode { 1 } else { 0 },
-                guest_entrypoint.clone(),
-                V8RuntimeHost::bridge_code().to_owned(),
-                String::new(),
-                snapshot_userland_code,
-                request.guest_runtime.high_resolution_time,
-                user_code,
-                request.wasm_module_bytes.clone(),
-            )
-            .map_err(JavascriptExecutionError::Spawn)?;
-        registration_guard.disarm();
-        record_js_start_phase("js_start_send_execute", phase_start.elapsed());
-
-        Ok(JavascriptExecution {
-            execution_id,
-            child_pid: v8_host.child_pid(),
-            events: tokio::sync::Mutex::new(events),
-            pending_sync_rpc,
-            kernel_stdin,
-            _import_cache_guard: import_cache_guard,
-            v8_session,
-            module_resolution: Mutex::new((
-                standalone_translator,
-                LocalModuleResolutionCache::default(),
-            )),
-        })
-    }
-
-    pub fn dispose_vm(&mut self, vm_id: &str) {
-        self.contexts.retain(|_, context| context.vm_id != vm_id);
-        self.import_caches.remove(vm_id);
-    }
-
-    #[doc(hidden)]
-    #[allow(dead_code)]
-    pub fn materialize_import_cache_for_vm(
-        &mut self,
-        vm_id: &str,
-    ) -> Result<&std::path::Path, std::io::Error> {
-        let import_cache = self.import_caches.entry(vm_id.to_owned()).or_default();
-        import_cache.ensure_materialized()?;
-        Ok(import_cache.cache_path())
-    }
-
-    #[doc(hidden)]
-    #[allow(dead_code)]
-    pub fn import_cache_path_for_vm(&self, vm_id: &str) -> Option<&std::path::Path> {
-        self.import_caches
-            .get(vm_id)
-            .map(NodeImportCache::cache_path)
-    }
-}
-
-fn set_pending_sync_rpc_state(
-    pending_sync_rpc: &Arc<Mutex<Option<PendingSyncRpcState>>>,
-    id: u64,
-) -> Result<(), JavascriptExecutionError> {
-    let mut pending = pending_sync_rpc.lock().map_err(|_| {
-        JavascriptExecutionError::RpcResponse(String::from(
-            "sync RPC pending-request state lock poisoned",
-        ))
-    })?;
-    *pending = Some(PendingSyncRpcState::Pending(id));
-    Ok(())
-}
-
-fn resolve_node_import_compile_cache_dir(root_dir: PathBuf) -> PathBuf {
-    root_dir.join(format!(
-        "node-imports-v{NODE_IMPORT_COMPILE_CACHE_NAMESPACE_VERSION}-{:016x}",
-        stable_compile_cache_namespace_hash()
-    ))
-}
-
-fn stable_compile_cache_namespace_hash() -> u64 {
-    stable_hash64(
-        [
-            env!("CARGO_PKG_NAME"),
-            env!("CARGO_PKG_VERSION"),
-            NODE_ENTRYPOINT_ENV,
-            NODE_BOOTSTRAP_ENV,
-            NODE_GUEST_ARGV_ENV,
-            NODE_PREWARM_IMPORTS_ENV,
-            NODE_WARMUP_MARKER_VERSION,
-        ]
-        .into_iter()
-        .chain(NODE_WARMUP_SPECIFIERS.iter().copied())
-        .collect::<Vec<_>>()
-        .join("\n")
-        .as_bytes(),
-    )
-}
-
-fn javascript_sync_rpc_timeout(request: &StartJavascriptExecutionRequest) -> Duration {
-    let timeout_ms = request
-        .limits
-        .sync_rpc_wait_timeout_ms
-        .filter(|value| *value > 0)
-        .unwrap_or(NODE_SYNC_RPC_DEFAULT_WAIT_TIMEOUT_MS);
-    Duration::from_millis(timeout_ms)
-}
-
-fn javascript_heap_limit_mb(request: &StartJavascriptExecutionRequest) -> u32 {
-    request
-        .limits
-        .v8_heap_limit_mb
-        .filter(|value| *value > 0)
-        .unwrap_or(0)
-}
-
-fn javascript_import_cache_materialize_timeout(
-    request: &StartJavascriptExecutionRequest,
-) -> Duration {
-    let timeout_ms = request
-        .limits
-        .import_cache_materialize_timeout_ms
-        .filter(|value| *value > 0)
-        .unwrap_or(DEFAULT_NODE_IMPORT_CACHE_MATERIALIZE_TIMEOUT_MS);
-    Duration::from_millis(timeout_ms)
-}
-
-/// Resolve the TRUE CPU-time budget (ms) for a JavaScript execution.
-///
-/// Read from typed `limits.jsRuntime.cpuTimeLimitMs`, falling back to a bounded
-/// default when unset. `0` remains an explicit trusted opt-out and is normalized
-/// to `None` by the V8 session.
-fn javascript_cpu_time_limit_ms(request: &StartJavascriptExecutionRequest) -> u32 {
-    request
-        .limits
-        .cpu_time_limit_ms
-        // Generous active-CPU budget: long-lived adapters are still not capped
-        // on wall-clock, but CPU-bound runaways no longer pin a core forever by
-        // default.
-        .unwrap_or(DEFAULT_V8_CPU_TIME_LIMIT_MS)
-}
-
-/// Resolve the opt-in WALL-CLOCK backstop (ms) for a JavaScript execution.
-///
-/// Read from typed `limits.jsRuntime.wallClockLimitMs`, falling back to `0` (no
-/// limit). `0` is normalized to `None` by the V8 session, so the wall-clock
-/// `TimeoutGuard` is NOT armed and the guest runs without a wall-clock limit.
-/// This is INDEPENDENT of the CPU-time budget: setting only one arms only that
-/// guard.
-fn javascript_wall_clock_limit_ms(request: &StartJavascriptExecutionRequest) -> u32 {
-    request
-        .limits
-        .wall_clock_limit_ms
-        .unwrap_or(DEFAULT_V8_WALL_CLOCK_LIMIT_MS)
-}
-
-fn spawn_javascript_sync_rpc_timeout(
-    id: u64,
-    timeout: Duration,
-    pending_state: Arc<Mutex<Option<PendingSyncRpcState>>>,
-    responses: Option<JavascriptSyncRpcResponseWriter>,
-) {
-    let Some(responses) = responses else {
-        return;
-    };
-
-    thread::spawn(move || {
-        thread::sleep(timeout);
-
-        let should_timeout = match pending_state.lock() {
-            Ok(mut guard) if *guard == Some(PendingSyncRpcState::Pending(id)) => {
-                *guard = Some(PendingSyncRpcState::TimedOut(id));
-                true
-            }
-            Ok(_) => false,
-            Err(_) => false,
-        };
-
-        if !should_timeout {
-            return;
-        }
-
-        let _ = write_javascript_sync_rpc_response(
-            &responses,
-            json!({
-                "id": id,
-                "ok": false,
-                "error": {
-                    "code": "ERR_AGENTOS_NODE_SYNC_RPC_TIMEOUT",
-                    "message": format!(
-                        "guest JavaScript sync RPC request {id} timed out after {}ms",
-                        timeout.as_millis()
-                    ),
-                },
-            }),
-        );
-    });
-}
-
-fn spawn_javascript_sync_rpc_reader(
-    reader: File,
-    sender: mpsc::Sender<JavascriptProcessEvent>,
-) -> std::thread::JoinHandle<()> {
-    std::thread::spawn(move || {
-        let mut reader = BufReader::new(reader);
-        let mut line = String::new();
-
-        loop {
-            line.clear();
-            match reader.read_line(&mut line) {
-                Ok(0) => return,
-                Ok(_) => {
-                    let trimmed = line.trim();
-                    if trimmed.is_empty() {
-                        continue;
-                    }
-
-                    match parse_javascript_sync_rpc_request(trimmed) {
-                        Ok(request) => {
-                            if sender
-                                .send(JavascriptProcessEvent::SyncRpcRequest(request))
-                                .is_err()
-                            {
-                                return;
-                            }
-                        }
-                        Err(message) => {
-                            if sender
-                                .send(JavascriptProcessEvent::RawStderr(
-                                    format!("{message}\n").into_bytes(),
-                                ))
-                                .is_err()
-                            {
-                                return;
-                            }
-                        }
-                    }
-                }
-                Err(error) => {
-                    let _ = sender.send(JavascriptProcessEvent::RawStderr(
-                        format!("failed to read JavaScript sync RPC request: {error}\n")
-                            .into_bytes(),
-                    ));
-                    return;
-                }
-            }
-        }
-    })
-}
-
-fn parse_javascript_sync_rpc_request(line: &str) -> Result<JavascriptSyncRpcRequest, String> {
-    let wire: JavascriptSyncRpcRequestWire =
-        serde_json::from_str(line).map_err(|error| error.to_string())?;
-    Ok(JavascriptSyncRpcRequest {
-        id: wire.id,
-        method: wire.method,
-        args: wire.args,
-        raw_bytes_args: HashMap::new(),
-    })
-}
-
-fn write_javascript_sync_rpc_response(
-    writer: &JavascriptSyncRpcResponseWriter,
-    response: Value,
-) -> Result<(), JavascriptExecutionError> {
-    let mut payload = serde_json::to_vec(&response)
-        .map_err(|error| JavascriptExecutionError::RpcResponse(error.to_string()))?;
-    payload.push(b'\n');
-    writer.send(payload)
-}
-
-fn spawn_javascript_sync_rpc_response_writer(
-    writer: File,
-    receiver: Receiver<Vec<u8>>,
-) -> thread::JoinHandle<()> {
-    thread::spawn(move || {
-        let mut writer = BufWriter::new(writer);
-        while let Ok(payload) = receiver.recv() {
-            if writer
-                .write_all(&payload)
-                .and_then(|()| writer.flush())
-                .is_err()
-            {
-                return;
-            }
-        }
-    })
-}
-
-/// Build the user code wrapper for V8 execution.
-/// This wraps the entrypoint in a way that the V8 bridge can execute it.
-fn build_v8_user_code(entrypoint: &str, env: &BTreeMap<String, String>) -> String {
-    // The bridge code (polyfills) sets up the module system and globals.
-    // User code is executed after the bridge completes.
-    // For file-based entrypoints, we load and execute them through the module system.
-    // For inline code (-e flag), we execute directly.
-    if entrypoint == "-e" || entrypoint == "--eval" {
-        // Inline code from NODE_EVAL or similar
-        env.get("AGENTOS_NODE_EVAL").cloned().unwrap_or_default()
-    } else {
-        // Module entrypoint - use require to load it
-        format!(
-            "require({});\n//# sourceURL={}",
-            serde_json::to_string(entrypoint).unwrap_or_else(|_| format!("\"{}\"", entrypoint)),
-            entrypoint
-        )
-    }
-}
-
-fn host_entrypoint_uses_module_mode(entrypoint: &Path) -> bool {
-    // Agent adapters are launched via an extensionless `/opt/agentos/bin/<cmd>`
-    // symlink into the packed package's `node_modules/<name>/<entry>`. Resolve it
-    // to the real file so the extension check and the nearest-`package.json` walk
-    // reflect the package (which carries `"type": "module"`), not the symlink farm
-    // (which has neither an extension nor a package.json).
-    let resolved = fs::canonicalize(entrypoint).unwrap_or_else(|_| entrypoint.to_path_buf());
-    match resolved.extension().and_then(|ext| ext.to_str()) {
-        Some("mjs" | "mts") => true,
-        Some("js") => nearest_package_json_type(&resolved).as_deref() == Some("module"),
-        _ => false,
-    }
-}
-
-fn inline_code_uses_module_mode(source: &str) -> bool {
-    let sanitized = strip_non_code_segments(source);
-    let tokens = tokenize_inline_module_source(&sanitized);
-    let has_commonjs_signal = tokens.windows(3).any(|window| {
-        matches!(
-            window,
-            [
-                InlineModuleToken::Identifier("module"),
-                InlineModuleToken::Punct('.'),
-                InlineModuleToken::Identifier("exports")
-            ]
-        )
-    }) || tokens.windows(2).any(|window| {
-        matches!(
-            window,
-            [
-                InlineModuleToken::Identifier("exports"),
-                InlineModuleToken::Punct('.' | '[')
-            ] | [
-                InlineModuleToken::Identifier("require"),
-                InlineModuleToken::Punct('(')
-            ]
-        )
-    });
-
-    if has_commonjs_signal {
-        return false;
-    }
-
-    tokens.windows(2).any(|window| match window {
-        [InlineModuleToken::Identifier("import"), InlineModuleToken::Punct('.')] => true,
-        [InlineModuleToken::Identifier("import"), InlineModuleToken::Punct('(' | ':')] => false,
-        [InlineModuleToken::Identifier("import"), InlineModuleToken::Identifier(_)
-        | InlineModuleToken::Punct('{')
-        | InlineModuleToken::Punct('*')
-        | InlineModuleToken::StringLiteral] => true,
-        [InlineModuleToken::Identifier("export"), InlineModuleToken::Identifier(
-            "default" | "const" | "let" | "var" | "function" | "class" | "async" | "enum" | "type"
-            | "interface",
-        )
-        | InlineModuleToken::Punct('{')
-        | InlineModuleToken::Punct('*')] => true,
-        _ => false,
-    })
-}
-
-#[derive(Clone, Copy, Debug, Eq, PartialEq)]
-enum InlineModuleToken<'a> {
-    Identifier(&'a str),
-    StringLiteral,
-    Punct(char),
-}
-
-const INLINE_MODULE_STRING_PLACEHOLDER: char = '\u{1F}';
-
-fn strip_non_code_segments(source: &str) -> String {
-    let mut sanitized = String::with_capacity(source.len());
-    let bytes = source.as_bytes();
-    let mut index = 0;
-    sanitize_javascript_code(bytes, &mut index, &mut sanitized, None);
-    sanitized
-}
-
-fn sanitize_javascript_code(
-    bytes: &[u8],
-    index: &mut usize,
-    output: &mut String,
-    until_brace_depth: Option<usize>,
-) {
-    let mut brace_depth = 0usize;
-
-    while *index < bytes.len() {
-        let current = bytes[*index];
-
-        if let Some(target_depth) = until_brace_depth {
-            match current {
-                b'{' => brace_depth += 1,
-                b'}' => {
-                    if brace_depth == target_depth {
-                        output.push(' ');
-                        *index += 1;
-                        return;
-                    }
-                    brace_depth = brace_depth.saturating_sub(1);
-                }
-                _ => {}
-            }
-        }
-
-        match current {
-            b'/' if bytes.get(*index + 1) == Some(&b'/') => {
-                output.push(' ');
-                output.push(' ');
-                *index += 2;
-                while *index < bytes.len() {
-                    let comment_byte = bytes[*index];
-                    *index += 1;
-                    if comment_byte == b'\n' {
-                        output.push('\n');
-                        break;
-                    }
-                    output.push(' ');
-                }
-            }
-            b'/' if bytes.get(*index + 1) == Some(&b'*') => {
-                output.push(' ');
-                output.push(' ');
-                *index += 2;
-                while *index < bytes.len() {
-                    let comment_byte = bytes[*index];
-                    if comment_byte == b'*' && bytes.get(*index + 1) == Some(&b'/') {
-                        output.push(' ');
-                        output.push(' ');
-                        *index += 2;
-                        break;
-                    }
-                    output.push(if comment_byte == b'\n' { '\n' } else { ' ' });
-                    *index += 1;
-                }
-            }
-            b'\'' | b'"' => sanitize_string_literal(bytes, index, output, current),
-            b'`' => sanitize_template_literal(bytes, index, output),
-            _ => {
-                output.push(char::from(current));
-                *index += 1;
-            }
-        }
-    }
-}
-
-fn sanitize_string_literal(bytes: &[u8], index: &mut usize, output: &mut String, quote: u8) {
-    output.push(INLINE_MODULE_STRING_PLACEHOLDER);
-    *index += 1;
-
-    while *index < bytes.len() {
-        let current = bytes[*index];
-        *index += 1;
-        match current {
-            b'\\' => {
-                if *index < bytes.len() {
-                    *index += 1;
-                }
-            }
-            c if c == quote => break,
-            _ => {}
-        }
-    }
-}
-
-fn sanitize_template_literal(bytes: &[u8], index: &mut usize, output: &mut String) {
-    output.push(INLINE_MODULE_STRING_PLACEHOLDER);
-    *index += 1;
-
-    while *index < bytes.len() {
-        let current = bytes[*index];
-        match current {
-            b'\\' => {
-                *index += 1;
-                if *index < bytes.len() {
-                    *index += 1;
-                }
-            }
-            b'`' => {
-                *index += 1;
-                break;
-            }
-            b'$' if bytes.get(*index + 1) == Some(&b'{') => {
-                output.push(' ');
-                output.push(' ');
-                *index += 2;
-                sanitize_javascript_code(bytes, index, output, Some(0));
-                output.push(INLINE_MODULE_STRING_PLACEHOLDER);
-            }
-            b'\n' => {
-                output.push('\n');
-                *index += 1;
-            }
-            _ => {
-                *index += 1;
-            }
-        }
-    }
-}
-
-fn tokenize_inline_module_source(source: &str) -> Vec<InlineModuleToken<'_>> {
-    let mut tokens = Vec::new();
-    let bytes = source.as_bytes();
-    let mut index = 0;
-
-    while index < bytes.len() {
-        let current = bytes[index];
-        match current {
-            b if b.is_ascii_whitespace() => index += 1,
-            b if char::from(b) == INLINE_MODULE_STRING_PLACEHOLDER => {
-                tokens.push(InlineModuleToken::StringLiteral);
-                index += 1;
-            }
-            b'a'..=b'z' | b'A'..=b'Z' | b'_' | b'$' => {
-                let start = index;
-                index += 1;
-                while index < bytes.len()
-                    && matches!(bytes[index], b'a'..=b'z' | b'A'..=b'Z' | b'0'..=b'9' | b'_' | b'$')
-                {
-                    index += 1;
-                }
-                tokens.push(InlineModuleToken::Identifier(&source[start..index]));
-            }
-            _ => {
-                tokens.push(InlineModuleToken::Punct(char::from(current)));
-                index += 1;
-            }
-        }
-    }
-
-    tokens
-}
-
-fn nearest_package_json_type(entrypoint: &Path) -> Option<String> {
-    let mut current = entrypoint.parent();
-    while let Some(dir) = current {
-        let package_json = dir.join("package.json");
-        if let Ok(contents) = fs::read_to_string(&package_json) {
-            if let Ok(pkg) = serde_json::from_str::<LocalPackageJson>(&contents) {
-                return pkg.package_type;
-            }
-        }
-        current = dir.parent();
-    }
-    None
-}
-
-fn resolve_v8_entrypoint(cwd: &Path, entrypoint: &str) -> String {
-    if entrypoint == "-e" || entrypoint == "--eval" {
-        return entrypoint.to_owned();
-    }
-
-    let path = Path::new(entrypoint);
-    let resolved = if path.is_absolute() {
-        path.to_path_buf()
-    } else {
-        cwd.join(path)
-    };
-    resolved.to_string_lossy().into_owned()
-}
-
-fn prepend_v8_runtime_shim(
-    user_code: String,
-    entrypoint: &str,
-    argv: &[String],
-    cwd: &str,
-    env: &BTreeMap<String, String>,
-    // V8 heap cap in MB (`0` = engine default). Threaded from the typed wire
-    // limit and interpolated into the shim so guest heap-stats reporting no
-    // longer depends on an `AGENTOS_V8_HEAP_LIMIT_MB` env var.
-    heap_limit_mb: u32,
-    // Typed guest-runtime identity, interpolated into the shim so virtual
-    // `process.*` identity no longer rides `AGENTOS_VIRTUAL_PROCESS_*` env vars.
-    guest_runtime: &GuestRuntimeConfig,
-) -> String {
-    let argv_json = serde_json::to_string(argv).unwrap_or_else(|_| String::from("[\"node\"]"));
-    let entry_json =
-        serde_json::to_string(entrypoint).unwrap_or_else(|_| String::from("\"/<entry>\""));
-    let cwd_json = serde_json::to_string(cwd).unwrap_or_else(|_| String::from("\"/\""));
-    let env_json = serde_json::to_string(env).unwrap_or_else(|_| String::from("{}"));
-    // Virtual process identity object. `Option` fields serialize to `null`, which
-    // the shim treats as "unset" (leaving the V8-baked default) — matching the
-    // prior behavior when the env var was absent.
-    let identity_json = serde_json::json!({
-        "pid": guest_runtime.virtual_pid,
-        "ppid": guest_runtime.virtual_ppid,
-        "uid": guest_runtime.virtual_uid,
-        "gid": guest_runtime.virtual_gid,
-        "execPath": guest_runtime.virtual_exec_path,
-    })
-    .to_string();
-    // Virtual OS identity (os.cpus/totalmem/freemem/homedir/userInfo/...). Read
-    // by the bridge + node-import-cache os polyfill from the `__agentOSVirtualOs`
-    // global instead of `AGENTOS_VIRTUAL_OS_*` env vars. Absent fields stay
-    // `null`, so the consumers fall back to their built-in defaults.
-    let virtual_os_json = serde_json::json!({
-        "cpuCount": guest_runtime.os_cpu_count,
-        "totalmem": guest_runtime.os_totalmem,
-        "freemem": guest_runtime.os_freemem,
-        "homedir": guest_runtime.os_homedir,
-        "hostname": guest_runtime.os_hostname,
-        "tmpdir": guest_runtime.os_tmpdir,
-        "type": guest_runtime.os_type,
-        "release": guest_runtime.os_release,
-        "version": guest_runtime.os_version,
-        "machine": guest_runtime.os_machine,
-        "shell": guest_runtime.os_shell,
-        "user": guest_runtime.os_user,
-    })
-    .to_string();
-    let high_resolution_time = guest_runtime.high_resolution_time;
-
-    format!(
-        r#"(function () {{
-  const __guestIdentity = {identity_json};
-  Object.defineProperty(globalThis, "__agentOSVirtualOs", {{
-    configurable: true,
-    enumerable: false,
-    value: {virtual_os_json},
-    writable: true,
-  }});
-  const nextArgv = {argv_json};
-  const entryFile = {entry_json};
-  const nextCwd = {cwd_json};
-  const nextEnv = {env_json};
-  const nextHighResolutionTime = {high_resolution_time};
-  try {{
-    const previousProcessConfig =
-      typeof globalThis._processConfig === "object" && globalThis._processConfig !== null
-        ? globalThis._processConfig
-        : {{}};
-    Object.defineProperty(globalThis, "_processConfig", {{
-      configurable: true,
-      enumerable: false,
-      value: Object.freeze({{
-        ...previousProcessConfig,
-        cwd: nextCwd,
-        env: nextEnv,
-        argv: nextArgv,
-        high_resolution_time: nextHighResolutionTime,
-      }}),
-      writable: false,
-    }});
-  }} catch (_e) {{}}
-  Object.defineProperty(globalThis, "__agentOSProcessConfigEnv", {{
-    configurable: true,
-    enumerable: false,
-    value: nextEnv,
-    writable: true,
-  }});
-  const visibleEnv = Object.fromEntries(
-    Object.entries(nextEnv).filter(([key]) => !key.startsWith("AGENTOS_"))
-  );
-
-  if (typeof process !== "undefined") {{
-    process.argv = nextArgv;
-    process.argv0 = nextArgv[0] || "node";
-    process.env = {{
-      ...(process.env || {{}}),
-      ...visibleEnv,
-    }};
-    const configuredHeapLimitMb = {heap_limit_mb};
-    if (Number.isFinite(configuredHeapLimitMb) && configuredHeapLimitMb > 0) {{
-      Object.defineProperty(globalThis, "__agentOSV8HeapLimitBytes", {{
-        configurable: true,
-        enumerable: false,
-        value: configuredHeapLimitMb * 1024 * 1024,
-        writable: true,
-      }});
-    }}
-    if (nextEnv.AGENTOS_ALLOW_PROCESS_BINDINGS === "1" && typeof process.binding === "function") {{
-      const originalProcessBinding = process.binding.bind(process);
-      process.binding = (name) => {{
-        const bindingName = String(name);
-        if (
-          bindingName === "constants" &&
-          typeof __agentOSConstantsBinding !== "undefined"
-        ) {{
-          const constantsBinding =
-            __agentOSConstantsBinding.default ?? __agentOSConstantsBinding;
-          return {{
-            fs: constantsBinding,
-            crypto: constantsBinding,
-            zlib: constantsBinding,
-            trace: constantsBinding,
-            internal: constantsBinding,
-            os: {{
-              UV_UDP_REUSEADDR: constantsBinding.UV_UDP_REUSEADDR,
-              dlopen: constantsBinding.dlopen,
-              errno: constantsBinding.errno,
-              signals: constantsBinding.signals,
-              priority: constantsBinding.priority,
-            }},
-          }};
-        }}
-        try {{
-          return originalProcessBinding(name);
-        }} catch (error) {{
-          const originalMessage =
-            error && typeof error === "object" && typeof error.message === "string"
-              ? error.message
-              : String(error);
-          throw new Error(
-            `process.binding(${{bindingName}}) failed: ${{originalMessage}}`
-          );
-        }}
-      }};
-    }}
-    const nextPid = Number(__guestIdentity.pid);
-    if (Number.isFinite(nextPid) && nextPid > 0) {{
-      process.pid = nextPid;
-    }}
-    const nextPpid = Number(__guestIdentity.ppid);
-    if (Number.isFinite(nextPpid) && nextPpid >= 0) {{
-      process.ppid = nextPpid;
-    }}
-    const nextUid = Number(__guestIdentity.uid);
-    if (Number.isFinite(nextUid) && nextUid >= 0) {{
-      process.uid = nextUid;
-      process.euid = nextUid;
-    }}
-    const nextGid = Number(__guestIdentity.gid);
-    if (Number.isFinite(nextGid) && nextGid >= 0) {{
-      process.gid = nextGid;
-      process.egid = nextGid;
-      process.groups = [nextGid];
-    }}
-    if (typeof __guestIdentity.execPath === "string" && __guestIdentity.execPath.length > 0) {{
-      process.execPath = __guestIdentity.execPath;
-    }}
-    if (nextEnv.AGENTOS_NODE_IPC === "1" && typeof __runtimeInstallProcessIpcBridge === "function") {{
-      process.connected = true;
-      __runtimeInstallProcessIpcBridge();
-    }}
-    process.cwd = () => nextCwd;
-    process._cwd = nextCwd;
-    if (typeof process.getBuiltinModule !== "function") {{
-      process.getBuiltinModule = function(specifier) {{
-        return globalThis.require ? globalThis.require(specifier) : undefined;
-      }};
-    }}
-  }}
-
-  globalThis.__runtimeStreamStdin = nextEnv.SECURE_EXEC_KEEP_STDIN_OPEN === "1";
-
-  if (
-    typeof globalThis.WebAssembly === "object" &&
-    globalThis.WebAssembly !== null &&
-    typeof globalThis.WebAssembly.instantiateStreaming !== "function"
-  ) {{
-    globalThis.WebAssembly.instantiateStreaming = async function instantiateStreaming(source, imports) {{
-      const response = await source;
-      if (response == null || typeof response.arrayBuffer !== "function") {{
-        throw new TypeError(
-          "WebAssembly.instantiateStreaming requires a Response or promise for one",
-        );
-      }}
-      const bytes = new Uint8Array(await response.arrayBuffer());
-      return globalThis.WebAssembly.instantiate(bytes, imports);
-    }};
-  }}
-
-  if (
-    typeof globalThis.require === "undefined" &&
-    typeof globalThis._moduleModule?.createRequire === "function"
-  ) {{
-    const requireEntryFile =
-      entryFile === "-e" || entryFile === "--eval"
-        ? nextCwd === "/"
-          ? "/__agentos_eval__.js"
-          : `${{nextCwd.replace(/\/+$/, "")}}/__agentos_eval__.js`
-        : entryFile;
-    globalThis.require =
-      globalThis._moduleModule.createRequire(requireEntryFile);
-  }}
-
-  // jsRuntime platform tiering: the guest JS host surface is baked into the
-  // shared V8 snapshot, so non-node platforms are produced by subtractively
-  // scrubbing baked globals here, per execution.
-  const __jsPlatform = nextEnv.AGENTOS_JS_PLATFORM || "node";
-  // Install the builtin allow-list gate consulted by the bridge's
-  // rejectRestrictedBuiltinRequest (covers require + ESM builtin loads). Present
-  // for non-node platforms (empty => deny all) and node + explicit allow-list;
-  // absent => unrestricted (node default).
-  {{
-    const __builtinAllowRaw = nextEnv.AGENTOS_JS_BUILTIN_ALLOWLIST;
-    if (typeof __builtinAllowRaw === "string") {{
-      let __allowList = [];
-      try {{ __allowList = JSON.parse(__builtinAllowRaw); }} catch (_e) {{ __allowList = []; }}
-      if (typeof globalThis.__agentOSInitJsRuntime === "function") {{
-        globalThis.__agentOSInitJsRuntime(Array.isArray(__allowList) ? __allowList : []);
-      }}
-      try {{ delete globalThis.__agentOSInitJsRuntime; }} catch (_e) {{}}
-    }}
-  }}
-  if (__jsPlatform !== "node") {{
-    const __dropGlobal = (name) => {{
-      try {{ delete globalThis[name]; }} catch (_e) {{}}
-      if (
-        Object.prototype.hasOwnProperty.call(globalThis, name) ||
-        typeof globalThis[name] !== "undefined"
-      ) {{
-        try {{ globalThis[name] = undefined; }} catch (_e) {{}}
-        try {{
-          Object.defineProperty(globalThis, name, {{
-            value: undefined,
-            configurable: true,
-            writable: true,
-          }});
-        }} catch (_e) {{}}
-        try {{ delete globalThis[name]; }} catch (_e) {{}}
-      }}
-    }};
-    // Node host surface + identity channels — removed on every non-node platform.
-    [
-      "process", "Buffer", "require", "module", "exports",
-      "__dirname", "__filename", "global",
-      "_processConfig", "__agentOSProcessConfigEnv", "__agentOSVirtualOs",
-    ].forEach(__dropGlobal);
-    if (__jsPlatform === "browser") {{
-      // Narrow `crypto` from the full node:crypto module to the WebCrypto object
-      // (drops randomBytes/createHash/... while keeping subtle/getRandomValues).
-      try {{
-        const __wc = globalThis.crypto && globalThis.crypto.webcrypto;
-        if (__wc) {{ globalThis.crypto = __wc; }}
-      }} catch (_e) {{}}
-    }}
-    if (__jsPlatform === "neutral" || __jsPlatform === "bare") {{
-      // Web-platform globals removed at neutral and below.
-      [
-        "fetch", "Headers", "Request", "Response", "FormData",
-        "URL", "URLSearchParams", "Blob", "File", "crypto",
-        "atob", "btoa", "structuredClone", "performance",
-        "AbortController", "AbortSignal", "Event", "EventTarget",
-        "MessageChannel", "MessagePort", "MessageEvent",
-        "ReadableStream", "WritableStream", "TransformStream",
-      ].forEach(__dropGlobal);
-    }}
-    if (__jsPlatform === "bare") {{
-      // Universal host primitives removed only at the language-only tier.
-      [
-        "console", "queueMicrotask",
-        "setTimeout", "clearTimeout", "setInterval", "clearInterval",
-        "setImmediate", "clearImmediate",
-      ].forEach(__dropGlobal);
-    }}
-  }}
-}})();
-{user_code}"#
-    )
-}
-
-/// Spawn a V8 event bridge thread that converts V8 BinaryFrame messages
-/// into JavascriptExecutionEvent for the sidecar event loop.
-///
-/// Internal bridge calls (module loading, logging, timers) are handled locally
-/// by the event bridge. Kernel operations (fs, net, child_process, dns) are
-/// forwarded to the sidecar via SyncRpcRequest events.
-fn spawn_v8_event_bridge(
-    frame_receiver: TrackedReceiver<BinaryFrame>,
-    pending_sync_rpc: Arc<Mutex<Option<PendingSyncRpcState>>>,
-    _sync_rpc_timeout: Duration,
-    v8_session: V8SessionHandle,
-    mut local_bridge: LocalBridgeState,
-    event_notify: Option<Arc<Notify>>,
-) -> TokioReceiver<JavascriptExecutionEvent> {
-    let (sender, receiver) = channel(JAVASCRIPT_EVENT_CHANNEL_CAPACITY);
-    let event_gauge = register_queue(
-        TrackedLimit::JavascriptEventChannel,
-        JAVASCRIPT_EVENT_CHANNEL_CAPACITY,
-    );
-
-    thread::spawn(move || {
-        let mut emitted_exit = false;
-        loop {
-            let frame_recv_start = Instant::now();
-            let Ok(frame) = frame_receiver.recv() else {
-                break;
-            };
-            let frame_recv_wait = frame_recv_start.elapsed();
-            let mut exit_frame_start = None;
-            let event = match frame {
-                BinaryFrame::BridgeCall {
-                    call_id,
-                    method,
-                    payload,
-                    ..
-                } => {
-                    // Convert CBOR payload to JSON args
-                    let phase_start = Instant::now();
-                    let args = v8_runtime::cbor_payload_to_json_args(&payload).unwrap_or_default();
-                    record_sync_bridge_phase(&method, "event_decode_args", phase_start.elapsed());
-
-                    // Module resolution / loading must read the mounted
-                    // `node_modules` VFS, not host files directly. When the
-                    // sidecar supplied a read-only VFS module reader, resolve
-                    // these inline on this bridge thread (off the service loop) so
-                    // a large cold-start module graph runs concurrently with — and
-                    // never serializes behind / starves — the ACP bootstrap that
-                    // is itself awaiting the adapter's `session/new` response on
-                    // the single service-loop thread. Without a reader (no mount),
-                    // they flow to the service loop as SyncRpcRequests (mapped to
-                    // `__resolve_module` / `__load_file` / `__module_format` /
-                    // `__batch_resolve_modules`) and resolve against `vm.kernel`.
-                    let is_module_method = matches!(
-                        method.as_str(),
-                        "_resolveModule"
-                            | "_resolveModuleSync"
-                            | "_loadFile"
-                            | "_loadFileSync"
-                            | "_moduleFormat"
-                            | "_batchResolveModules"
-                    );
-                    let resolve_on_service_loop =
-                        is_module_method && !local_bridge.has_module_reader();
-
-                    // Check if this is an internal bridge call we handle locally
-                    if !resolve_on_service_loop {
-                        if let Some(response) =
-                            local_bridge.handle_internal_bridge_call(call_id, &method, &args)
-                        {
-                            if let LocalBridgeCallResult::Immediate(response) = response {
-                                let cbor_payload =
-                                    v8_runtime::json_to_cbor_payload(&response).unwrap_or_default();
-                                let _ = v8_session.send_bridge_response(call_id, 0, cbor_payload);
-                            }
-                            continue;
-                        }
-                    }
-
-                    // Handle logging locally (produce stdout/stderr events)
-                    if method == "_log" || method == "_error" {
-                        let output = decode_bridge_output_args(&args);
-                        // Respond to the bridge call
-                        let _ = v8_session.send_bridge_response(
-                            call_id,
-                            0,
-                            v8_runtime::json_to_cbor_payload(&Value::Null).unwrap_or_default(),
-                        );
-                        if method == "_log" {
-                            if !send_javascript_event(
-                                &sender,
-                                &v8_session,
-                                &event_gauge,
-                                event_notify.as_deref(),
-                                JavascriptExecutionEvent::Stdout(output),
-                            ) {
-                                break;
-                            }
-                        } else {
-                            if !send_javascript_event(
-                                &sender,
-                                &v8_session,
-                                &event_gauge,
-                                event_notify.as_deref(),
-                                JavascriptExecutionEvent::Stderr(output),
-                            ) {
-                                break;
-                            }
-                        }
-                        continue;
-                    }
-
-                    // Map the bridge method name to the sidecar sync RPC method name
-                    let phase_start = Instant::now();
-                    let (sidecar_method, _needs_translation) =
-                        v8_runtime::map_bridge_method(&method);
-                    record_sync_bridge_phase(&method, "event_map_method", phase_start.elapsed());
-
-                    // Track pending sync RPC
-                    let phase_start = Instant::now();
-                    if let Ok(mut pending) = pending_sync_rpc.lock() {
-                        *pending = Some(PendingSyncRpcState::Pending(call_id));
-                    }
-                    record_sync_bridge_phase(&method, "event_mark_pending", phase_start.elapsed());
-
-                    let phase_start = Instant::now();
-                    let request_args = translate_request_args_for_legacy(sidecar_method, &args);
-                    let mut raw_bytes_args = HashMap::new();
-                    if sidecar_method == "net.write"
-                        || sidecar_method == "fs.writeSync"
-                        || sidecar_method == "fs.writevSync"
-                        || sidecar_method == "fs.writeFileSync"
-                    {
-                        if let Ok(Some(bytes)) = v8_runtime::cbor_payload_raw_byte_arg(&payload, 1)
-                        {
-                            raw_bytes_args.insert(1, bytes);
-                        }
-                    }
-                    if method == "_fsReadRaw" {
-                        raw_bytes_args.insert(usize::MAX, Vec::new());
-                    }
-                    record_sync_bridge_phase(
-                        &method,
-                        "event_translate_args",
-                        phase_start.elapsed(),
-                    );
-                    Some(JavascriptExecutionEvent::SyncRpcRequest(
-                        JavascriptSyncRpcRequest {
-                            id: call_id,
-                            method: sidecar_method.to_owned(),
-                            args: request_args,
-                            raw_bytes_args,
-                        },
-                    ))
-                }
-                BinaryFrame::Log {
-                    channel, message, ..
-                } => {
-                    if channel == 0 {
-                        Some(JavascriptExecutionEvent::Stdout(message.into_bytes()))
-                    } else {
-                        Some(JavascriptExecutionEvent::Stderr(message.into_bytes()))
-                    }
-                }
-                BinaryFrame::ExecutionResult {
-                    exit_code, error, ..
-                } => {
-                    let phase_start = Instant::now();
-                    exit_frame_start = Some(phase_start);
-                    record_js_event_phase("js_exit_frame_recv_wait", frame_recv_wait);
-                    let is_process_exit_error = error.as_ref().is_some_and(|err| {
-                        err.error_type == "ProcessExitError"
-                            || err.message.starts_with("process.exit(")
-                    });
-                    let resolved_exit_code = error
-                        .as_ref()
-                        .and_then(|err| {
-                            if is_process_exit_error {
-                                parse_process_exit_code_message(&err.message)
-                            } else {
-                                None
-                            }
-                        })
-                        .unwrap_or(exit_code);
-                    let should_emit_error = error.is_some() && !is_process_exit_error;
-                    if should_emit_error {
-                        let err = error.as_ref().expect("checked above");
-                        let error_msg = if err.stack.is_empty() {
-                            format!("{}: {}\n", err.error_type, err.message)
-                        } else {
-                            format!("{}\n", err.stack)
-                        };
-                        if !send_javascript_event(
-                            &sender,
-                            &v8_session,
-                            &event_gauge,
-                            event_notify.as_deref(),
-                            JavascriptExecutionEvent::Stderr(error_msg.into_bytes()),
-                        ) {
-                            break;
-                        }
-                    }
-                    emitted_exit = true;
-                    record_js_event_phase(
-                        "js_exit_frame_to_event_construct",
-                        phase_start.elapsed(),
-                    );
-                    Some(JavascriptExecutionEvent::Exited(resolved_exit_code))
-                }
-                BinaryFrame::StreamCallback { .. } => None,
-                _ => None,
-            };
-
-            if let Some(event) = event {
-                let sync_rpc = match &event {
-                    JavascriptExecutionEvent::SyncRpcRequest(request) => {
-                        Some((request.id, request.method.clone()))
-                    }
-                    _ => None,
-                };
-                if let Some((call_id, method)) = sync_rpc.as_ref() {
-                    record_sync_bridge_request_enqueued(*call_id, method);
-                }
-                let phase_start = sync_rpc.as_ref().map(|_| Instant::now());
-                let exit_send_start = if matches!(&event, JavascriptExecutionEvent::Exited(_)) {
-                    Some(Instant::now())
-                } else {
-                    None
-                };
-                if !send_javascript_event(
-                    &sender,
-                    &v8_session,
-                    &event_gauge,
-                    event_notify.as_deref(),
-                    event,
-                ) {
-                    break;
-                }
-                if let (Some((_, method)), Some(start)) = (sync_rpc, phase_start) {
-                    record_sync_bridge_phase(&method, "event_enqueue", start.elapsed());
-                }
-                if let Some(start) = exit_send_start {
-                    record_js_event_phase("js_exit_event_send", start.elapsed());
-                }
-                if let Some(start) = exit_frame_start {
-                    record_js_event_phase("js_exit_frame_to_event_sent", start.elapsed());
-                }
-            }
-        }
-
-        if !emitted_exit {
-            let phase_start = Instant::now();
-            let sent = send_javascript_event(
-                &sender,
-                &v8_session,
-                &event_gauge,
-                event_notify.as_deref(),
-                JavascriptExecutionEvent::Exited(1),
-            );
-            if sent {
-                record_js_event_phase("js_exit_fallback_event_send", phase_start.elapsed());
-            }
-        }
-    });
-
-    receiver
-}
-
-fn send_javascript_event(
-    sender: &tokio::sync::mpsc::Sender<JavascriptExecutionEvent>,
-    v8_session: &V8SessionHandle,
-    gauge: &secure_exec_bridge::queue_tracker::QueueGauge,
-    notify: Option<&Notify>,
-    event: JavascriptExecutionEvent,
-) -> bool {
-    if javascript_event_payload_len(&event) > JAVASCRIPT_EVENT_PAYLOAD_LIMIT_BYTES {
-        let _ = v8_session.destroy();
-        return false;
-    }
-
-    // Apply backpressure instead of self-destructing when the host consumer is
-    // slow. A burst of guest events that briefly outpaces the host draining this
-    // channel is normal; previously a single `try_send` returning `Full` tore the
-    // whole session down (`destroy()` -> Shutdown -> `Exited(1)`), turning a
-    // transient backlog into a fatal crash. This bridge runs on its own dedicated
-    // OS thread (never a Tokio runtime worker), so a blocking send is safe: it
-    // parks this thread — and, in turn, the guest producing into it — until the
-    // host drains capacity. The only terminal condition is the receiver being
-    // dropped (host gone for good), which surfaces as `Closed` and stops the loop.
-    match sender.blocking_send(event) {
-        Ok(()) => {
-            // Sample the live channel depth so the centralized queue tracker can
-            // warn before the host consumer falls far enough behind to stall the
-            // session (and surface the high-water mark for debugging).
-            gauge.observe_depth(sender.max_capacity().saturating_sub(sender.capacity()));
-            if let Some(notify) = notify {
-                notify.notify_one();
-            }
-            true
-        }
-        Err(_closed) => false,
-    }
-}
-
-fn javascript_event_payload_len(event: &JavascriptExecutionEvent) -> usize {
-    match event {
-        JavascriptExecutionEvent::Stdout(chunk) | JavascriptExecutionEvent::Stderr(chunk) => {
-            chunk.len()
-        }
-        JavascriptExecutionEvent::SyncRpcRequest(_)
-        | JavascriptExecutionEvent::SignalState { .. }
-        | JavascriptExecutionEvent::Exited(_) => 0,
-    }
-}
-
-/// Handle internal bridge calls that don't need to go to the sidecar.
-/// Returns Some(response) if handled locally, None if it should be forwarded.
-impl LocalBridgeState {
-    fn handle_internal_bridge_call(
-        &mut self,
-        call_id: u64,
-        method: &str,
-        args: &[Value],
-    ) -> Option<LocalBridgeCallResult> {
-        match method {
-            "_resolveModule" | "_resolveModuleSync" => {
-                let specifier = args.first().and_then(Value::as_str).unwrap_or("");
-                let parent = args.get(1).and_then(Value::as_str).unwrap_or("/");
-                let mode = match args.get(2).and_then(Value::as_str) {
-                    Some("import") => ModuleResolveMode::Import,
-                    Some("require") => ModuleResolveMode::Require,
-                    _ if method == "_resolveModule" => ModuleResolveMode::Import,
-                    _ => ModuleResolveMode::Require,
-                };
-                if self.js_runtime_denies_specifier(specifier) {
-                    return Some(LocalBridgeCallResult::Immediate(Value::Null));
-                }
-                let resolved = self.with_module_resolver(|resolver| {
-                    resolver.resolve_module(specifier, parent, mode)
-                });
-                if resolved.is_none() && self.has_module_reader() {
-                    return None;
-                }
-                Some(LocalBridgeCallResult::Immediate(
-                    resolved.map(Value::String).unwrap_or(Value::Null),
-                ))
-            }
-            "_moduleFormat" => {
-                let format = self.module_format(args.first().and_then(Value::as_str).unwrap_or(""));
-                if format.is_none() && self.has_module_reader() {
-                    return None;
-                }
-                Some(LocalBridgeCallResult::Immediate(
-                    format
-                        .map(|format| Value::String(String::from(format.as_str())))
-                        .unwrap_or(Value::Null),
-                ))
-            }
-            "_loadFile" | "_loadFileSync" => {
-                let source = self.load_file(args.first().and_then(Value::as_str).unwrap_or(""));
-                if source.is_none() && self.has_module_reader() {
-                    return None;
-                }
-                Some(LocalBridgeCallResult::Immediate(
-                    source.map(Value::String).unwrap_or(Value::Null),
-                ))
-            }
-            "_batchResolveModules" => {
-                let resolved = self.batch_resolve_modules(args);
-                if self.has_module_reader()
-                    && resolved
-                        .as_array()
-                        .is_some_and(|items| items.iter().any(Value::is_null))
-                {
-                    return None;
-                }
-                Some(LocalBridgeCallResult::Immediate(resolved))
-            }
-            "_loadPolyfill" => Some(LocalBridgeCallResult::Immediate(
-                self.handle_polyfill_dispatch(args),
-            )),
-            "_cryptoRandomFill" => {
-                let size = args.first().and_then(Value::as_u64).unwrap_or(16) as usize;
-                let mut bytes = vec![0u8; size];
-                if getrandom(&mut bytes).is_err() {
-                    return Some(LocalBridgeCallResult::Immediate(Value::Null));
-                }
-                Some(LocalBridgeCallResult::Immediate(Value::String(
-                    v8_runtime::base64_encode_pub(&bytes),
-                )))
-            }
-            "_cryptoRandomUUID" => {
-                let mut bytes = [0u8; 16];
-                if getrandom(&mut bytes).is_err() {
-                    return Some(LocalBridgeCallResult::Immediate(Value::Null));
-                }
-                bytes[6] = (bytes[6] & 0x0f) | 0x40;
-                bytes[8] = (bytes[8] & 0x3f) | 0x80;
-
-                Some(LocalBridgeCallResult::Immediate(Value::String(format!(
-                    "{:02x}{:02x}{:02x}{:02x}-{:02x}{:02x}-{:02x}{:02x}-{:02x}{:02x}-{:02x}{:02x}{:02x}{:02x}{:02x}{:02x}",
-                    bytes[0],
-                    bytes[1],
-                    bytes[2],
-                    bytes[3],
-                    bytes[4],
-                    bytes[5],
-                    bytes[6],
-                    bytes[7],
-                    bytes[8],
-                    bytes[9],
-                    bytes[10],
-                    bytes[11],
-                    bytes[12],
-                    bytes[13],
-                    bytes[14],
-                    bytes[15],
-                ))))
-            }
-            "_kernelStdinRead" | "_kernelStdinReadRaw" if self.forward_kernel_stdin_rpc => None,
-            "_kernelStdinRead" | "_kernelStdinReadRaw" => Some(LocalBridgeCallResult::Immediate(
-                self.kernel_stdin.read(args),
-            )),
-            "_pythonStdinRead" => Some(LocalBridgeCallResult::Immediate(
-                self.kernel_stdin.read_python_raw(args),
-            )),
-            "_scheduleTimer" => {
-                self.schedule_bridge_timer_response(call_id, timer_delay_ms(args.first()));
-                Some(LocalBridgeCallResult::Deferred)
-            }
-            _ => None,
-        }
-    }
-
-    fn handle_polyfill_dispatch(&mut self, args: &[Value]) -> Value {
-        let Some(dispatch) = args.first().and_then(Value::as_str) else {
-            return Value::Null;
-        };
-        if !dispatch.starts_with("__bd:") {
-            return polyfill_expression(dispatch)
-                .map(Value::String)
-                .unwrap_or(Value::Null);
-        }
-        let (dispatch_method, payload_json) = dispatch
-            .strip_prefix("__bd:")
-            .and_then(|value| value.split_once(':'))
-            .unwrap_or(("", "[]"));
-        let payload = serde_json::from_str::<Value>(payload_json).unwrap_or_else(|_| json!([]));
-        let args = payload.as_array().cloned().unwrap_or_default();
-        let result = match dispatch_method {
-            "kernelHandleRegister" => {
-                if let (Some(id), Some(description)) = (
-                    args.first().and_then(Value::as_str),
-                    args.get(1).and_then(Value::as_str),
-                ) {
-                    self.handle_descriptions
-                        .insert(id.to_owned(), description.to_owned());
-                }
-                Value::Null
-            }
-            "kernelHandleUnregister" => {
-                if let Some(id) = args.first().and_then(Value::as_str) {
-                    self.handle_descriptions.remove(id);
-                }
-                Value::Null
-            }
-            "kernelHandleList" => Value::Array(
-                self.handle_descriptions
-                    .iter()
-                    .map(|(id, description)| {
-                        json!({
-                            "id": id,
-                            "description": description,
-                        })
-                    })
-                    .collect(),
-            ),
-            "kernelTimerCreate" => {
-                let delay_ms = timer_delay_ms(args.first());
-                let repeat = args.get(1).and_then(Value::as_bool).unwrap_or(false);
-                json!(self.create_kernel_timer(delay_ms, repeat))
-            }
-            "kernelTimerArm" => {
-                if let Some(timer_id) = args.first().and_then(Value::as_u64) {
-                    self.arm_kernel_timer(timer_id);
-                }
-                Value::Null
-            }
-            "kernelTimerClear" => {
-                if let Some(timer_id) = args.first().and_then(Value::as_u64) {
-                    self.clear_kernel_timer(timer_id);
-                }
-                Value::Null
-            }
-            _ => json!({
-                "__bd_error": {
-                    "name": "Error",
-                    "message": format!("No handler: {dispatch_method}"),
-                }
-            }),
-        };
-
-        if dispatch_method.starts_with("kernel") {
-            Value::String(
-                serde_json::to_string(&json!({ "__bd_result": result }))
-                    .unwrap_or_else(|_| String::from("{\"__bd_result\":null}")),
-            )
-        } else {
-            Value::String(
-                serde_json::to_string(&json!({
-                    "__bd_error": {
-                        "name": "Error",
-                        "message": format!("No handler: {dispatch_method}"),
-                    }
-                }))
-                .unwrap_or_else(|_| {
-                    String::from(
-                        "{\"__bd_error\":{\"name\":\"Error\",\"message\":\"dispatch failed\"}}",
-                    )
-                }),
-            )
-        }
-    }
-
-    fn create_kernel_timer(&mut self, delay_ms: u64, repeat: bool) -> u64 {
-        self.next_timer_id += 1;
-        if let Ok(mut timers) = self.timers.lock() {
-            timers.insert(
-                self.next_timer_id,
-                LocalTimerEntry {
-                    delay_ms,
-                    generation: 0,
-                    repeat,
-                },
-            );
-        }
-        self.next_timer_id
-    }
-
-    /// Allocate a fresh timer id and register a one-shot (`repeat == false`)
-    /// tracking entry at generation 0. Used by the bridge-timer path so the
-    /// queued wheel action can be cancelled (its entry removed) on `clear`/teardown.
-    fn register_oneshot_timer(&mut self, delay_ms: u64) -> u64 {
-        self.next_timer_id += 1;
-        let timer_id = self.next_timer_id;
-        if let Ok(mut timers) = self.timers.lock() {
-            timers.insert(
-                timer_id,
-                LocalTimerEntry {
-                    delay_ms,
-                    generation: 0,
-                    repeat: false,
-                },
-            );
-        }
-        timer_id
-    }
-
-    fn arm_kernel_timer(&self, timer_id: u64) {
-        let Some(session) = self.v8_session.clone() else {
-            return;
-        };
-
-        let Some((delay_ms, generation, timers)) =
-            self.timers.lock().ok().and_then(|mut timers| {
-                let entry = timers.get_mut(&timer_id)?;
-                entry.generation = entry.generation.wrapping_add(1);
-                Some((entry.delay_ms, entry.generation, self.timers.clone()))
-            })
-        else {
-            return;
-        };
-
-        TimerWheel::get().schedule(
-            delay_ms,
-            TimerAction::StreamEvent {
-                session,
-                timer_id,
-                generation,
-                timers,
-            },
-        );
-    }
-
-    fn clear_kernel_timer(&self, timer_id: u64) {
-        if let Ok(mut timers) = self.timers.lock() {
-            timers.remove(&timer_id);
-        }
-    }
-
-    fn schedule_bridge_timer_response(&mut self, call_id: u64, delay_ms: u64) {
-        let Some(session) = self.v8_session.clone() else {
-            return;
-        };
-
-        // Register the bridge timer in the shared `timers` map with a generation,
-        // mirroring the kernel-timer cancellation path. Tracking it means that
-        // when `LocalBridgeState` is dropped on session teardown (which clears the
-        // map) or the entry is otherwise removed, the timer wheel observes the
-        // missing/mismatched generation via `timer_should_fire` and suppresses the
-        // response instead of touching the torn-down session.
-        let timer_id = self.register_oneshot_timer(delay_ms);
-        let generation = 0;
-        let timers = self.timers.clone();
-
-        TimerWheel::get().schedule(
-            delay_ms,
-            TimerAction::BridgeResponse {
-                session,
-                call_id,
-                timer_id,
-                generation,
-                timers,
-            },
-        );
-    }
-
-    fn has_module_reader(&self) -> bool {
-        self.module_reader.is_some()
-    }
-
-    fn batch_resolve_modules(&mut self, args: &[Value]) -> Value {
-        self.with_module_resolver(|resolver| resolver.batch_resolve_modules(args))
-    }
-
-    fn resolve_module(
-        &mut self,
-        specifier: &str,
-        from_dir: &str,
-        mode: ModuleResolveMode,
-    ) -> Option<String> {
-        if self.js_runtime_denies_specifier(specifier) {
-            return None;
-        }
-        self.with_module_resolver(|resolver| resolver.resolve_module(specifier, from_dir, mode))
-    }
-
-    /// jsRuntime resolution gate. Denies builtin and bare/relative imports per the
-    /// configured `moduleResolution` and builtin allow-list, before the resolver
-    /// touches the VFS. This is the authoritative chokepoint for the live
-    /// shared-V8 path (both `import`/`import()` and `require`/`createRequire`
-    /// route through `_resolveModule` -> here).
-    fn js_runtime_denies_specifier(&self, specifier: &str) -> bool {
-        let is_local = specifier.starts_with("./")
-            || specifier.starts_with("../")
-            || specifier == "."
-            || specifier == ".."
-            || specifier.starts_with('/')
-            || specifier.starts_with("file:");
-        match self.module_resolution {
-            GuestModuleResolution::Node => false,
-            // Relative permits local files only; bare specifiers and package
-            // imports (`#...`) do not resolve.
-            GuestModuleResolution::Relative => !is_local,
-            // None denies every specifier, local included.
-            GuestModuleResolution::None => true,
-        }
-    }
-
-    fn module_format(&mut self, path: &str) -> Option<LocalResolvedModuleFormat> {
-        self.with_module_resolver(|resolver| resolver.module_format(path))
-    }
-
-    fn load_file(&mut self, path: &str) -> Option<String> {
-        self.with_module_resolver(|resolver| resolver.load_file(path))
-    }
-
-    /// Run `f` against a resolver bound to this bridge's resolution cache, reading
-    /// through the supplied VFS `module_reader` when present (the live VM path:
-    /// resolution executes here on the bridge thread, reading the mounted
-    /// `node_modules` filesystem in parallel with the service loop), or through
-    /// the host-backed path translator otherwise (the legacy host-direct path
-    /// used by `handle_internal_bridge_call_from_host_context`).
-    fn with_module_resolver<T>(
-        &mut self,
-        f: impl FnOnce(&mut ModuleResolver<'_, &mut dyn ModuleFsReader>) -> T,
-    ) -> T {
-        let cache = &mut self.resolution_cache;
-        if let Some(reader) = self.module_reader.as_deref_mut() {
-            let reader: &mut dyn ModuleFsReader = reader;
-            let mut resolver = ModuleResolver { reader, cache };
-            f(&mut resolver)
-        } else {
-            let mut translator = &mut self.translator;
-            let reader: &mut dyn ModuleFsReader = &mut translator;
-            let mut resolver = ModuleResolver { reader, cache };
-            f(&mut resolver)
-        }
-    }
-}
-
-impl ModuleFsReader for &mut dyn ModuleFsReader {
-    fn canonical_guest_path(&mut self, guest_path: &str) -> Option<String> {
-        (**self).canonical_guest_path(guest_path)
-    }
-
-    fn read_to_string(&mut self, guest_path: &str) -> Option<String> {
-        (**self).read_to_string(guest_path)
-    }
-
-    fn path_is_dir(&mut self, guest_path: &str) -> Option<bool> {
-        (**self).path_is_dir(guest_path)
-    }
-
-    fn path_exists(&mut self, guest_path: &str) -> bool {
-        (**self).path_exists(guest_path)
-    }
-}
-
-impl ModuleFsReader for &mut GuestPathTranslator {
-    fn canonical_guest_path(&mut self, guest_path: &str) -> Option<String> {
-        GuestPathTranslator::canonical_guest_path(self, guest_path)
-    }
-
-    fn read_to_string(&mut self, guest_path: &str) -> Option<String> {
-        let host_path = self.guest_to_host(guest_path)?;
-        fs::read_to_string(host_path).ok()
-    }
-
-    fn path_is_dir(&mut self, guest_path: &str) -> Option<bool> {
-        self.guest_to_host(guest_path)
-            .and_then(|host_path| fs::metadata(host_path).ok())
-            .map(|metadata| metadata.is_dir())
-    }
-
-    fn path_exists(&mut self, guest_path: &str) -> bool {
-        self.guest_to_host(guest_path)
-            .map(|host_path| host_path.exists())
-            .unwrap_or(false)
-    }
-}
-
-/// Standard Node module resolution executed as pure path algebra over a
-/// [`ModuleFsReader`]. The same algorithm backs both the legacy host-direct
-/// path (reader = host path translator) and the live VM path (reader = kernel
-/// VFS), guaranteeing they resolve identically.
-pub struct ModuleResolver<'a, R: ModuleFsReader> {
-    reader: R,
-    cache: &'a mut LocalModuleResolutionCache,
-}
-
-impl<'a, R: ModuleFsReader> ModuleResolver<'a, R> {
-    /// Construct a resolver over `reader`, reusing `cache` across calls. The
-    /// cache must be persisted per-VM so cold-start resolution does not rebuild
-    /// it on every dispatch.
-    pub fn new(reader: R, cache: &'a mut LocalModuleResolutionCache) -> Self {
-        Self { reader, cache }
-    }
-
-    pub fn batch_resolve_modules(&mut self, args: &[Value]) -> Value {
-        let requests = args
-            .first()
-            .and_then(Value::as_array)
-            .cloned()
-            .unwrap_or_default();
-        Value::Array(
-            requests
-                .into_iter()
-                .map(|request| {
-                    let pair = request.as_array().cloned().unwrap_or_default();
-                    let specifier = pair.first().and_then(Value::as_str).unwrap_or("");
-                    let referrer = pair.get(1).and_then(Value::as_str).unwrap_or("/");
-                    self.resolve_module(specifier, referrer, ModuleResolveMode::Import)
-                        .and_then(|resolved| {
-                            self.load_file(&resolved).map(|source| {
-                                json!({
-                                    "resolved": resolved,
-                                    "source": source,
-                                })
-                            })
-                        })
-                        .unwrap_or(Value::Null)
-                })
-                .collect(),
-        )
-    }
-
-    pub fn resolve_module(
-        &mut self,
-        specifier: &str,
-        from_dir: &str,
-        mode: ModuleResolveMode,
-    ) -> Option<String> {
-        let normalized_from_path = self
-            .reader
-            .canonical_guest_path(from_dir)
-            .unwrap_or_else(|| normalize_guest_path(from_dir));
-        let normalized_from = if self.cached_stat(&normalized_from_path) == Some(false) {
-            dirname_guest_path(&normalized_from_path)
-        } else {
-            normalize_module_resolve_context(&normalized_from_path)
-        };
-        let cache_key = (specifier.to_owned(), normalized_from.clone(), mode);
-        if let Some(cached) = self.cache.resolve_results.get(&cache_key) {
-            return cached.clone();
-        }
-
-        let resolved = if let Some(builtin) = normalize_builtin_specifier(specifier) {
-            Some(builtin)
-        } else if specifier.starts_with("file:") {
-            guest_path_from_file_url(specifier)
-                .and_then(|file_path| self.resolve_path(&file_path, mode))
-        } else if specifier.starts_with('/') {
-            self.resolve_path(specifier, mode)
-        } else if specifier.starts_with("./")
-            || specifier.starts_with("../")
-            || specifier == "."
-            || specifier == ".."
-        {
-            self.resolve_path(&join_guest_path(&normalized_from, specifier), mode)
-        } else if specifier.starts_with('#') {
-            self.resolve_package_imports(specifier, &normalized_from, mode)
-        } else {
-            self.resolve_package_self_reference(specifier, &normalized_from, mode)
-                .or_else(|| self.resolve_node_modules(specifier, &normalized_from, mode))
-        };
-
-        if resolved.is_some() || module_resolution_miss_is_stable(&normalized_from) {
-            self.cache
-                .resolve_results
-                .insert(cache_key, resolved.clone());
-        }
-        resolved
-    }
-
-    pub fn load_file(&mut self, path: &str) -> Option<String> {
-        let bare = path.trim_start_matches("node:");
-        if is_builtin_specifier(path) {
-            return Some(build_builtin_module_wrapper(bare));
-        }
-
-        let source = self.reader.read_to_string(path)?;
-        Some(
-            if matches!(
-                Path::new(path).extension().and_then(|ext| ext.to_str()),
-                Some("js" | "mjs" | "cjs")
-            ) {
-                strip_javascript_hashbang(&source)
-            } else {
-                source
-            },
-        )
-    }
-
-    pub fn module_format(&mut self, path: &str) -> Option<LocalResolvedModuleFormat> {
-        if let Some(cached) = self.cache.module_format_results.get(path) {
-            return *cached;
-        }
-
-        let format = self.detect_module_format(path);
-        self.cache
-            .module_format_results
-            .insert(path.to_owned(), format);
-        format
-    }
-
-    fn detect_module_format(&mut self, path: &str) -> Option<LocalResolvedModuleFormat> {
-        if is_builtin_specifier(path) {
-            return Some(LocalResolvedModuleFormat::Module);
-        }
-
-        let normalized = normalize_guest_path(path);
-        match Path::new(&normalized)
-            .extension()
-            .and_then(|ext| ext.to_str())
-        {
-            Some("mjs" | "mts") => Some(LocalResolvedModuleFormat::Module),
-            Some("cjs" | "cts") => Some(LocalResolvedModuleFormat::Commonjs),
-            Some("json") => Some(LocalResolvedModuleFormat::Json),
-            Some("js") => Some(
-                if self
-                    .nearest_package_json_type_for_guest_path(&normalized)
-                    .as_deref()
-                    == Some("module")
-                {
-                    LocalResolvedModuleFormat::Module
-                } else {
-                    LocalResolvedModuleFormat::Commonjs
-                },
-            ),
-            _ => None,
-        }
-    }
-
-    fn nearest_package_json_type_for_guest_path(&mut self, guest_path: &str) -> Option<String> {
-        let mut dir = dirname_guest_path(guest_path);
-        loop {
-            let package_json_path = join_guest_path(&dir, "package.json");
-            if let Some(package_json) = self.read_package_json(&package_json_path) {
-                return package_json.package_type;
-            }
-            if dir == "/" {
-                break;
-            }
-            dir = dirname_guest_path(&dir);
-        }
-        None
-    }
-
-    fn resolve_package_imports(
-        &mut self,
-        request: &str,
-        from_dir: &str,
-        mode: ModuleResolveMode,
-    ) -> Option<String> {
-        let mut dir = normalize_guest_path(from_dir);
-        loop {
-            let pkg_json_path = join_guest_path(&dir, "package.json");
-            if let Some(pkg_json) = self.read_package_json(&pkg_json_path) {
-                if let Some(imports) = &pkg_json.imports {
-                    if let Some(target) = resolve_imports_target(imports, request, mode) {
-                        let target_path = if target.starts_with('/') {
-                            target
-                        } else {
-                            join_guest_path(&dir, &target)
-                        };
-                        return self.resolve_path(&target_path, mode);
-                    }
-                    return None;
-                }
-            }
-            if dir == "/" {
-                break;
-            }
-            dir = dirname_guest_path(&dir);
-        }
-        None
-    }
-
-    fn resolve_package_self_reference(
-        &mut self,
-        request: &str,
-        from_dir: &str,
-        mode: ModuleResolveMode,
-    ) -> Option<String> {
-        let (package_name, subpath) = split_package_request(request)?;
-        let mut dir = normalize_guest_path(from_dir);
-        loop {
-            let pkg_json_path = join_guest_path(&dir, "package.json");
-            if let Some(pkg_json) = self.read_package_json(&pkg_json_path) {
-                if pkg_json.name.as_deref() == Some(package_name) {
-                    return self.resolve_package_entry_from_dir(&dir, subpath, mode);
-                }
-            }
-            if dir == "/" {
-                break;
-            }
-            dir = dirname_guest_path(&dir);
-        }
-        None
-    }
-
-    fn resolve_node_modules(
-        &mut self,
-        request: &str,
-        from_dir: &str,
-        mode: ModuleResolveMode,
-    ) -> Option<String> {
-        let (package_name, subpath) = split_package_request(request)?;
-
-        // Standard Node resolution over the faithful VFS: walk ancestor
-        // `node_modules` directories (following symlinks via the importer's
-        // realpath). pnpm/yarn layouts resolve because the VFS exposes their
-        // symlinks, not because the resolver understands package-manager
-        // internals (see CLAUDE.md npm Compatibility).
-        let mut dir = normalize_guest_path(from_dir);
-        loop {
-            for package_dir in node_modules_direct_candidate_dirs(&dir, package_name) {
-                if let Some(entry) =
-                    self.resolve_package_entry_from_dir(&package_dir, subpath, mode)
-                {
-                    return Some(entry);
-                }
-            }
-            if dir == "/" {
-                break;
-            }
-            dir = dirname_guest_path(&dir);
-        }
-
-        ["/root/node_modules", "/node_modules"]
-            .into_iter()
-            .find_map(|root| {
-                self.resolve_package_entry_from_dir(
-                    &join_guest_path(root, package_name),
-                    subpath,
-                    mode,
-                )
-            })
-    }
-
-    fn resolve_package_entry_from_dir(
-        &mut self,
-        package_dir: &str,
-        subpath: &str,
-        mode: ModuleResolveMode,
-    ) -> Option<String> {
-        let package_json_path = join_guest_path(package_dir, "package.json");
-        let pkg_json = self.read_package_json(&package_json_path);
-        if pkg_json.is_none() && !self.cached_exists(package_dir) {
-            return None;
-        }
-
-        if let Some(pkg_json) = pkg_json.as_ref() {
-            if let Some(exports) = &pkg_json.exports {
-                let exports_subpath = if subpath.is_empty() {
-                    String::from(".")
-                } else {
-                    format!("./{subpath}")
-                };
-                let exports_target = resolve_exports_target(exports, &exports_subpath, mode)?;
-                let target_path = join_guest_path(package_dir, &exports_target);
-                return self.resolve_path(&target_path, mode).or(Some(target_path));
-            }
-        }
-
-        if !subpath.is_empty() {
-            return self.resolve_path(&join_guest_path(package_dir, subpath), mode);
-        }
-
-        let entry_field = pkg_json
-            .as_ref()
-            .and_then(|pkg_json| pkg_json.main.as_deref())
-            .unwrap_or("index.js");
-        let entry_path = join_guest_path(package_dir, entry_field);
-        self.resolve_path(&entry_path, mode)
-            .or_else(|| self.resolve_path(&join_guest_path(package_dir, "index"), mode))
-    }
-
-    fn resolve_path(&mut self, base_path: &str, mode: ModuleResolveMode) -> Option<String> {
-        if self.cached_stat(base_path) == Some(false) {
-            return Some(normalize_guest_path(base_path));
-        }
-
-        for extension in [".js", ".json", ".mjs", ".cjs"] {
-            let candidate = format!("{}{}", normalize_guest_path(base_path), extension);
-            if self.cached_exists(&candidate) {
-                return Some(candidate);
-            }
-        }
-
-        if self.cached_stat(base_path) == Some(true) {
-            let pkg_json_path = join_guest_path(base_path, "package.json");
-            if let Some(pkg_json) = self.read_package_json(&pkg_json_path) {
-                if let Some(main) = pkg_json.main.as_deref() {
-                    let entry_path = join_guest_path(base_path, main);
-                    if entry_path != normalize_guest_path(base_path) {
-                        if let Some(entry) = self.resolve_path(&entry_path, mode) {
-                            return Some(entry);
-                        }
-                    }
-                }
-                if mode == ModuleResolveMode::Import
-                    && pkg_json.package_type.as_deref() == Some("module")
-                    && self.cached_exists(&join_guest_path(base_path, "index.js"))
-                {
-                    return Some(join_guest_path(base_path, "index.js"));
-                }
-            }
-
-            for extension in [".js", ".json", ".mjs", ".cjs"] {
-                let index_path = join_guest_path(base_path, &format!("index{extension}"));
-                if self.cached_exists(&index_path) {
-                    return Some(index_path);
-                }
-            }
-        }
-
-        None
-    }
-
-    fn read_package_json(&mut self, guest_path: &str) -> Option<LocalPackageJson> {
-        if let Some(cached) = self.cache.package_json_results.get(guest_path).cloned() {
-            return cached;
-        }
-
-        let parsed = self
-            .reader
-            .read_to_string(guest_path)
-            .and_then(|contents| serde_json::from_str::<LocalPackageJson>(&contents).ok());
-        if parsed.is_some() || module_path_miss_is_stable(guest_path) {
-            self.cache
-                .package_json_results
-                .insert(guest_path.to_owned(), parsed.clone());
-        }
-        parsed
-    }
-
-    fn cached_exists(&mut self, guest_path: &str) -> bool {
-        if let Some(cached) = self.cache.exists_results.get(guest_path) {
-            return *cached;
-        }
-        let exists = self.reader.path_exists(guest_path);
-        if exists || module_path_miss_is_stable(guest_path) {
-            self.cache
-                .exists_results
-                .insert(guest_path.to_owned(), exists);
-        }
-        exists
-    }
-
-    fn cached_stat(&mut self, guest_path: &str) -> Option<bool> {
-        if let Some(cached) = self.cache.stat_results.get(guest_path) {
-            return *cached;
-        }
-        let result = self.reader.path_is_dir(guest_path);
-        if result.is_some() || module_path_miss_is_stable(guest_path) {
-            self.cache
-                .stat_results
-                .insert(guest_path.to_owned(), result);
-        }
-        result
-    }
-}
-
-fn module_resolution_miss_is_stable(from_dir: &str) -> bool {
-    module_path_miss_is_stable(from_dir)
-}
-
-fn module_path_miss_is_stable(guest_path: &str) -> bool {
-    guest_path == "/node_modules"
-        || guest_path.ends_with("/node_modules")
-        || guest_path.contains("/node_modules/")
-}
-
-fn guest_path_from_file_url(specifier: &str) -> Option<String> {
-    if !specifier.starts_with("file:") {
-        return None;
-    }
-
-    let mut pathname = if let Some(stripped) = specifier.strip_prefix("file://") {
-        stripped
-    } else {
-        specifier.strip_prefix("file:")?
-    };
-
-    if let Some(terminator_index) = pathname.find(['?', '#']) {
-        pathname = &pathname[..terminator_index];
-    }
-
-    if !pathname.starts_with('/') {
-        let slash_index = pathname.find('/')?;
-        let host = &pathname[..slash_index];
-        if !host.is_empty() && host != "localhost" {
-            return None;
-        }
-        pathname = &pathname[slash_index..];
-    }
-
-    Some(normalize_guest_path(&percent_decode(pathname)?))
-}
-
-fn percent_decode(raw: &str) -> Option<String> {
-    let bytes = raw.as_bytes();
-    let mut index = 0;
-    let mut decoded = Vec::with_capacity(bytes.len());
-    while index < bytes.len() {
-        match bytes[index] {
-            b'%' if index + 2 < bytes.len() => {
-                if let (Some(high), Some(low)) =
-                    (hex_digit(bytes[index + 1]), hex_digit(bytes[index + 2]))
-                {
-                    let value = (high << 4) | low;
-                    decoded.push(value);
-                    index += 3;
-                } else {
-                    decoded.push(bytes[index]);
-                    index += 1;
-                }
-            }
-            byte => {
-                decoded.push(byte);
-                index += 1;
-            }
-        }
-    }
-    String::from_utf8(decoded).ok()
-}
-
-fn hex_digit(byte: u8) -> Option<u8> {
-    match byte {
-        b'0'..=b'9' => Some(byte - b'0'),
-        b'a'..=b'f' => Some(byte - b'a' + 10),
-        b'A'..=b'F' => Some(byte - b'A' + 10),
-        _ => None,
-    }
-}
-
-impl LocalKernelStdinBridge {
-    fn write(&self, chunk: &[u8]) -> Result<(), JavascriptExecutionError> {
-        let mut state = self.state.lock().expect("kernel stdin state poisoned");
-        if state.closed {
-            return Err(JavascriptExecutionError::StdinClosed);
-        }
-        let next_len = state.bytes.len().checked_add(chunk.len()).ok_or_else(|| {
-            JavascriptExecutionError::Stdin(std::io::Error::new(
-                std::io::ErrorKind::InvalidData,
-                format!("guest stdin buffer exceeded {KERNEL_STDIN_BUFFER_LIMIT_BYTES} bytes"),
-            ))
-        })?;
-        if next_len > KERNEL_STDIN_BUFFER_LIMIT_BYTES {
-            return Err(JavascriptExecutionError::Stdin(std::io::Error::new(
-                std::io::ErrorKind::InvalidData,
-                format!("guest stdin buffer exceeded {KERNEL_STDIN_BUFFER_LIMIT_BYTES} bytes"),
-            )));
-        }
-
-        state.bytes.extend(chunk.iter().copied());
-        self.ready.notify_all();
-        Ok(())
-    }
-
-    fn close(&self) {
-        let mut state = self.state.lock().expect("kernel stdin state poisoned");
-        state.closed = true;
-        self.ready.notify_all();
-    }
-
-    fn read(&self, args: &[Value]) -> Value {
-        let max_bytes = args
-            .first()
-            .and_then(Value::as_u64)
-            .map(|value| value.clamp(1, 64 * 1024) as usize)
-            .unwrap_or(64 * 1024);
-        let timeout = Duration::from_millis(args.get(1).and_then(Value::as_u64).unwrap_or(100));
-        let deadline = Instant::now() + timeout;
-        let mut state = self.state.lock().expect("kernel stdin state poisoned");
-
-        while state.bytes.is_empty() && !state.closed {
-            let remaining = deadline.saturating_duration_since(Instant::now());
-            if remaining.is_zero() {
-                return Value::Null;
-            }
-            let (next_state, wait_result) = self
-                .ready
-                .wait_timeout(state, remaining)
-                .expect("kernel stdin wait poisoned");
-            state = next_state;
-            if wait_result.timed_out() && state.bytes.is_empty() && !state.closed {
-                return Value::Null;
-            }
-        }
-
-        if !state.bytes.is_empty() {
-            let read_len = state.bytes.len().min(max_bytes);
-            let bytes = state.bytes.drain(..read_len).collect::<Vec<_>>();
-            return json!({
-                "dataBase64": v8_runtime::base64_encode_pub(&bytes),
-            });
-        }
-
-        json!({
-            "done": true,
-        })
-    }
-
-    fn read_python_raw(&self, args: &[Value]) -> Value {
-        const PYTHON_STDIN_DONE_SENTINEL: &str = "__AGENTOS_PYTHON_STDIN_DONE__";
-
-        let max_bytes = args
-            .first()
-            .and_then(Value::as_u64)
-            .map(|value| value.clamp(1, 64 * 1024) as usize)
-            .unwrap_or(64 * 1024);
-        let timeout = Duration::from_millis(args.get(1).and_then(Value::as_u64).unwrap_or(100));
-        let deadline = Instant::now() + timeout;
-        let mut state = self.state.lock().expect("kernel stdin state poisoned");
-
-        while state.bytes.is_empty() && !state.closed {
-            let remaining = deadline.saturating_duration_since(Instant::now());
-            if remaining.is_zero() {
-                return Value::Null;
-            }
-            let (next_state, wait_result) = self
-                .ready
-                .wait_timeout(state, remaining)
-                .expect("kernel stdin wait poisoned");
-            state = next_state;
-            if wait_result.timed_out() && state.bytes.is_empty() && !state.closed {
-                return Value::Null;
-            }
-        }
-
-        if !state.bytes.is_empty() {
-            let read_len = state.bytes.len().min(max_bytes);
-            let bytes = state.bytes.drain(..read_len).collect::<Vec<_>>();
-            return Value::String(v8_runtime::base64_encode_pub(&bytes));
-        }
-
-        Value::String(String::from(PYTHON_STDIN_DONE_SENTINEL))
-    }
-}
-
-fn normalize_module_resolve_context(path: &str) -> String {
-    let normalized = normalize_guest_path(path);
-    if normalized.ends_with(".js")
-        || normalized.ends_with(".mjs")
-        || normalized.ends_with(".cjs")
-        || normalized.ends_with(".json")
-        || normalized.ends_with(".ts")
-        || normalized.ends_with(".mts")
-        || normalized.ends_with(".cts")
-    {
-        dirname_guest_path(&normalized)
-    } else {
-        normalized
-    }
-}
-
-fn strip_javascript_hashbang(source: &str) -> String {
-    if let Some(stripped) = source.strip_prefix("#!") {
-        match stripped.find('\n') {
-            Some(index) => format!("\n{}", &stripped[index + 1..]),
-            None => String::new(),
-        }
-    } else {
-        source.to_owned()
-    }
-}
-
-fn parse_process_exit_code_message(message: &str) -> Option<i32> {
-    let code = message.strip_prefix("process.exit(")?.strip_suffix(')')?;
-    code.parse::<i32>().ok()
-}
-
-fn dirname_guest_path(path: &str) -> String {
-    let normalized = normalize_guest_path(path);
-    if normalized == "/" {
-        return normalized;
-    }
-    normalized
-        .rsplit_once('/')
-        .map(|(parent, _)| {
-            if parent.is_empty() {
-                String::from("/")
-            } else {
-                parent.to_owned()
-            }
-        })
-        .unwrap_or_else(|| String::from("/"))
-}
-
-fn normalize_builtin_specifier(specifier: &str) -> Option<String> {
-    let bare = specifier.trim_start_matches("node:");
-    match bare {
-        "assert"
-        | "async_hooks"
-        | "buffer"
-        | "child_process"
-        | "cluster"
-        | "console"
-        | "constants"
-        | "crypto"
-        | "dgram"
-        | "diagnostics_channel"
-        | "dns"
-        | "dns/promises"
-        | "events"
-        | "fs"
-        | "fs/promises"
-        | "http"
-        | "http2"
-        | "https"
-        | "inspector"
-        | "module"
-        | "net"
-        | "os"
-        | "path"
-        | "path/posix"
-        | "path/win32"
-        | "perf_hooks"
-        | "process"
-        | "punycode"
-        | "querystring"
-        | "readline"
-        | "repl"
-        | "sqlite"
-        | "stream"
-        | "stream/consumers"
-        | "stream/promises"
-        | "stream/web"
-        | "string_decoder"
-        | "sys"
-        | "timers"
-        | "tls"
-        | "timers/promises"
-        | "trace_events"
-        | "tty"
-        | "url"
-        | "util"
-        | "util/types"
-        | "domain"
-        | "vm"
-        | "v8"
-        | "wasi"
-        | "worker_threads"
-        | "zlib" => Some(format!("node:{bare}")),
-        _ => None,
-    }
-}
-
-fn is_builtin_specifier(specifier: &str) -> bool {
-    normalize_builtin_specifier(specifier).is_some()
-}
-
-fn polyfill_expression(request: &str) -> Option<String> {
-    let normalized = request.trim_start_matches("node:");
-    let entry = polyfill_registry()
-        .groups
-        .iter()
-        .find(|group| group.names.iter().any(|name| name == normalized))?;
-
-    Some(match entry.source {
-        PolyfillSourceKind::NodeStdlibBrowser | PolyfillSourceKind::CustomBridge => format!(
-            "globalThis._requireFrom({}, \"/\")",
-            serde_json::to_string(&format!("node:{normalized}"))
-                .unwrap_or_else(|_| format!("\"node:{normalized}\""))
-        ),
-        PolyfillSourceKind::Denied => {
-            let error_code = entry.error_code.as_deref().unwrap_or("ERR_ACCESS_DENIED");
-            format!(
-                "(() => {{ const error = new Error({message}); error.code = {code}; throw error; }})()",
-                message = serde_json::to_string(&format!(
-                    "node:{normalized} is not available in the secure-exec guest runtime"
-                ))
-                .unwrap_or_else(|_| format!(
-                    "\"node:{normalized} is not available in the secure-exec guest runtime\""
-                )),
-                code = serde_json::to_string(error_code)
-                    .unwrap_or_else(|_| "\"ERR_ACCESS_DENIED\"".to_owned())
-            )
-        }
-    })
-}
-
-fn build_builtin_module_wrapper(module_name: &str) -> String {
-    if module_name == "assert" {
-        return String::from(
-            r#"class AssertionError extends Error {
-  constructor(message = "Assertion failed") {
-    super(message);
-    this.name = "AssertionError";
-  }
-}
-
-function fail(message) {
-  throw new AssertionError(message);
-}
-
-function ok(value, message) {
-  if (!value) fail(message);
-}
-
-function equal(actual, expected, message) {
-  if (actual != expected) fail(message ?? `Expected ${actual} == ${expected}`);
-}
-
-function notEqual(actual, expected, message) {
-  if (actual == expected) fail(message ?? `Expected ${actual} != ${expected}`);
-}
-
-function strictEqual(actual, expected, message) {
-  if (actual !== expected) fail(message ?? `Expected ${actual} === ${expected}`);
-}
-
-function notStrictEqual(actual, expected, message) {
-  if (actual === expected) fail(message ?? `Expected ${actual} !== ${expected}`);
-}
-
-function serialize(value) {
-  return JSON.stringify(value);
-}
-
-function deepEqual(actual, expected, message) {
-  if (serialize(actual) !== serialize(expected)) {
-    fail(message ?? "Expected values to be deeply equal");
-  }
-}
-
-function deepStrictEqual(actual, expected, message) {
-  return deepEqual(actual, expected, message);
-}
-
-function match(actual, expected, message) {
-  if (!(expected instanceof RegExp) || !expected.test(String(actual))) {
-    fail(message ?? `Expected ${actual} to match ${expected}`);
-  }
-}
-
-function matchesExpectedError(error, expected) {
-  if (expected == null) return true;
-  if (expected instanceof RegExp) {
-    return expected.test(String(error?.message ?? error));
-  }
-  if (typeof expected === "function") {
-    if (error instanceof expected) return true;
-    return expected(error) === true;
-  }
-  if (typeof expected === "object") {
-    return Object.entries(expected).every(([key, value]) => serialize(error?.[key]) === serialize(value));
-  }
-  return false;
-}
-
-function throws(fn, expected, message) {
-  if (typeof fn !== "function") {
-    fail(message ?? "assert.throws requires a function");
-  }
-
-  try {
-    fn();
-  } catch (error) {
-    if (!matchesExpectedError(error, expected)) {
-      throw error;
-    }
-    return error;
-  }
-
-  fail(message ?? "Missing expected exception");
-}
-
-async function rejects(promiseOrFn, expected, message) {
-  let promise;
-  if (typeof promiseOrFn === "function") {
-    promise = promiseOrFn();
-  } else {
-    promise = promiseOrFn;
-  }
-
-  try {
-    await promise;
-  } catch (error) {
-    if (!matchesExpectedError(error, expected)) {
-      throw error;
-    }
-    return error;
-  }
-
-  fail(message ?? "Missing expected rejection");
-}
-
-function ifError(error) {
-  if (error != null) {
-    throw error;
-  }
-}
-
-function assert(value, message) {
-  ok(value, message);
-}
-
-Object.assign(assert, {
-  AssertionError,
-  deepEqual,
-  deepStrictEqual,
-  equal,
-  fail,
-  ifError,
-  match,
-  notEqual,
-  notStrictEqual,
-  ok,
-  rejects,
-  strict: assert,
-  strictEqual,
-  throws,
-});
-
-export {
-  AssertionError,
-  assert as default,
-  deepEqual,
-  deepStrictEqual,
-  equal,
-  fail,
-  ifError,
-  match,
-  notEqual,
-  notStrictEqual,
-  ok,
-  rejects,
-  assert as strict,
-  strictEqual,
-  throws,
-};
-"#,
-        );
-    }
-
-    if module_name == "path" || module_name == "path/posix" || module_name == "path/win32" {
-        return String::from(
-            r#"const sep = "/";
-const delimiter = ":";
-
-function normalizeSegments(parts) {
-  const output = [];
-  for (const part of parts) {
-    if (!part || part === ".") continue;
-    if (part === "..") {
-      if (output.length > 0) output.pop();
-      continue;
-    }
-    output.push(part);
-  }
-  return output;
-}
-
-function isAbsolute(path) {
-  return String(path || "").startsWith(sep);
-}
-
-function join(...parts) {
-  const absolute = parts.some((part, index) => index === 0 && isAbsolute(part));
-  const normalized = normalizeSegments(parts.flatMap((part) => String(part || "").split(sep)));
-  const joined = normalized.join(sep);
-  if (!joined) return absolute ? sep : ".";
-  return absolute ? `${sep}${joined}` : joined;
-}
-
-function dirname(path) {
-  const normalized = String(path || "");
-  if (!normalized || normalized === sep) return sep;
-  const parts = normalizeSegments(normalized.split(sep));
-  if (parts.length <= 1) return isAbsolute(normalized) ? sep : ".";
-  const dir = parts.slice(0, -1).join(sep);
-  return isAbsolute(normalized) ? `${sep}${dir}` : dir;
-}
-
-function basename(path) {
-  const normalized = normalizeSegments(String(path || "").split(sep));
-  return normalized.length === 0 ? "" : normalized[normalized.length - 1];
-}
-
-function extname(path) {
-  const base = basename(path);
-  const index = base.lastIndexOf(".");
-  if (index <= 0) return "";
-  return base.slice(index);
-}
-
-function resolve(...parts) {
-  const absoluteParts = [];
-  for (let index = parts.length - 1; index >= 0; index -= 1) {
-    const part = String(parts[index] || "");
-    if (!part) continue;
-    absoluteParts.unshift(part);
-    if (isAbsolute(part)) break;
-  }
-  if (absoluteParts.length === 0 || !isAbsolute(absoluteParts[0])) {
-    absoluteParts.unshift(typeof process?.cwd === "function" ? process.cwd() : sep);
-  }
-  return join(...absoluteParts);
-}
-
-function relative(from, to) {
-  const fromResolved = resolve(from);
-  const toResolved = resolve(to);
-  if (fromResolved === toResolved) return "";
-
-  const fromParts = normalizeSegments(fromResolved.split(sep));
-  const toParts = normalizeSegments(toResolved.split(sep));
-  let shared = 0;
-  while (
-    shared < fromParts.length &&
-    shared < toParts.length &&
-    fromParts[shared] === toParts[shared]
-  ) {
-    shared += 1;
-  }
-
-  const up = new Array(fromParts.length - shared).fill("..");
-  const down = toParts.slice(shared);
-  const result = [...up, ...down].join(sep);
-  return result || ".";
-}
-
-function parse(path) {
-  const root = isAbsolute(path) ? sep : "";
-  const dir = dirname(path);
-  const base = basename(path);
-  const ext = extname(path);
-  const name = ext ? base.slice(0, -ext.length) : base;
-  return { root, dir, base, ext, name };
-}
-
-function format(pathObject = {}) {
-  const dir = pathObject.dir || pathObject.root || "";
-  const base =
-    pathObject.base ||
-    `${pathObject.name || ""}${pathObject.ext || ""}`;
-  if (!dir) return base;
-  if (!base) return dir;
-  return dir.endsWith(sep) ? `${dir}${base}` : `${dir}${sep}${base}`;
-}
-
-function normalize(path) {
-  return join(String(path || ""));
-}
-
-const pathModule = {
-  basename,
-  delimiter,
-  dirname,
-  extname,
-  format,
-  isAbsolute,
-  join,
-  normalize,
-  parse,
-  relative,
-  resolve,
-  sep,
-};
-const posix = pathModule;
-const win32 = pathModule;
-pathModule.posix = posix;
-pathModule.win32 = win32;
-
-export { basename, delimiter, dirname, extname, format, isAbsolute, join, normalize, parse, posix, relative, resolve, sep, win32 };
-export default pathModule;
-"#,
-        );
-    }
-
-    if module_name == "url" {
-        return String::from(
-            r#"const NativeURL = globalThis.URL;
-
-function normalizeFilePath(value) {
-  const path = String(value ?? "");
-  if (path.length === 0) {
-    return "/";
-  }
-  return path.startsWith("/") ? path : `/${path}`;
-}
-
-function encodeFilePath(path) {
-  return path
-    .split("/")
-    .map((segment, index) =>
-      index === 0
-        ? ""
-        : encodeURIComponent(segment).replace(/[!'()*]/g, (char) =>
-            `%${char.charCodeAt(0).toString(16).toUpperCase()}`
-          )
-    )
-    .join("/");
-}
-
-function buildFileUrlRecord(href, pathname) {
-  const searchParams = new URLSearchParams();
-  return {
-    href,
-    origin: "null",
-    protocol: "file:",
-    username: "",
-    password: "",
-    host: "",
-    hostname: "",
-    port: "",
-    pathname,
-    search: "",
-    searchParams,
-    hash: "",
-    toString() {
-      return href;
-    },
-    toJSON() {
-      return href;
-    },
-    valueOf() {
-      return href;
-    },
-    [Symbol.toPrimitive]() {
-      return href;
-    },
-  };
-}
-
-function fileURLToPath(value) {
-  const raw =
-    typeof value === "string"
-      ? value
-      : value && typeof value.href === "string"
-        ? value.href
-        : String(value ?? "");
-  if (raw.startsWith("/")) {
-    return raw;
-  }
-  if (raw.startsWith("file:")) {
-    let pathname = raw.startsWith("file://")
-      ? raw.slice("file://".length)
-      : raw.slice("file:".length);
-    const terminatorIndex = pathname.search(/[?#]/);
-    if (terminatorIndex >= 0) {
-      pathname = pathname.slice(0, terminatorIndex);
-    }
-    if (!pathname.startsWith("/")) {
-      const slashIndex = pathname.indexOf("/");
-      if (slashIndex === -1) {
-        return "/";
-      }
-      const host = pathname.slice(0, slashIndex);
-      if (host && host !== "localhost") {
-        throw new Error(`Expected file URL with an empty host, received ${host}`);
-      }
-      pathname = pathname.slice(slashIndex);
-    }
-    return decodeURIComponent(pathname || "/");
-  }
-  const url = value instanceof NativeURL ? value : new NativeURL(raw);
-  if (url.protocol !== "file:") {
-    throw new Error(`Expected file URL, received ${url.protocol}`);
-  }
-  return decodeURIComponent(url.pathname);
-}
-
-function pathToFileURL(path) {
-  const absolute = normalizeFilePath(path);
-  const pathname = encodeFilePath(absolute);
-  const href = `file://${pathname}`;
-
-  try {
-    return new NativeURL(href);
-  } catch {}
-
-  return buildFileUrlRecord(href, pathname);
-}
-
-function parse(input, parseQueryString = false) {
-  const parsed = new NativeURL(String(input ?? ""));
-  const queryString = parsed.search.length > 0 ? parsed.search.slice(1) : null;
-  const auth =
-    parsed.username || parsed.password
-      ? `${decodeURIComponent(parsed.username)}${parsed.password ? `:${decodeURIComponent(parsed.password)}` : ""}`
-      : null;
-  return {
-    href: parsed.href,
-    protocol: parsed.protocol,
-    slashes: true,
-    auth,
-    host: parsed.host,
-    port: parsed.port || null,
-    hostname: parsed.hostname,
-    hash: parsed.hash || null,
-    search: parsed.search || null,
-    query: parseQueryString ? Object.fromEntries(parsed.searchParams.entries()) : queryString,
-    pathname: parsed.pathname,
-    path: `${parsed.pathname}${parsed.search}`,
-  };
-}
-
-function format(value) {
-  if (value == null) return "";
-  if (typeof value === "string") return value;
-  if (typeof value.href === "string") return value.href;
-
-  const protocol = typeof value.protocol === "string" ? value.protocol : "http:";
-  const slashes = value.slashes === false ? "" : "//";
-  const auth =
-    typeof value.auth === "string" && value.auth.length > 0 ? `${value.auth}@` : "";
-  const host =
-    typeof value.host === "string" && value.host.length > 0
-      ? value.host
-      : `${value.hostname || ""}${value.port ? `:${value.port}` : ""}`;
-  const pathname =
-    typeof value.pathname === "string"
-      ? value.pathname
-      : typeof value.path === "string"
-        ? value.path
-        : "";
-
-  let search = "";
-  if (typeof value.search === "string") {
-    search = value.search;
-  } else if (typeof value.query === "string" && value.query.length > 0) {
-    search = value.query.startsWith("?") ? value.query : `?${value.query}`;
-  } else if (value.query && typeof value.query === "object") {
-    const params = new URLSearchParams();
-    for (const [key, entry] of Object.entries(value.query)) {
-      if (Array.isArray(entry)) {
-        for (const item of entry) {
-          params.append(key, String(item));
-        }
-      } else if (entry != null) {
-        params.append(key, String(entry));
-      }
-    }
-    const encoded = params.toString();
-    search = encoded ? `?${encoded}` : "";
-  }
-
-  const hash = typeof value.hash === "string" ? value.hash : "";
-  return `${protocol}${slashes}${auth}${host}${pathname}${search}${hash}`;
-}
-
-export { NativeURL as URL, fileURLToPath, format, parse, pathToFileURL };
-export default { URL: NativeURL, fileURLToPath, format, parse, pathToFileURL };
-"#,
-        );
-    }
-
-    if module_name == "readline" {
-        return String::from(
-            r#"class MiniEmitter {
-  constructor() {
-    this.listeners = new Map();
-  }
-
-  on(event, listener) {
-    const listeners = this.listeners.get(event) ?? [];
-    listeners.push(listener);
-    this.listeners.set(event, listeners);
-    return this;
-  }
-
-  addListener(event, listener) {
-    return this.on(event, listener);
-  }
-
-  once(event, listener) {
-    const wrapped = (...args) => {
-      this.off(event, wrapped);
-      listener(...args);
-    };
-    return this.on(event, wrapped);
-  }
-
-  off(event, listener) {
-    const listeners = this.listeners.get(event) ?? [];
-    this.listeners.set(
-      event,
-      listeners.filter((candidate) => candidate !== listener),
-    );
-    return this;
-  }
-
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-
-  emit(event, ...args) {
-    const listeners = this.listeners.get(event) ?? [];
-    for (const listener of listeners) {
-      listener(...args);
-    }
-    return listeners.length > 0;
-  }
-}
-
-export function createInterface(options = {}) {
-  const input = options.input ?? null;
-  const output = options.output ?? null;
-  const emitter = new MiniEmitter();
-  let buffer = "";
-  let closed = false;
-  let ended = false;
-  const queuedLines = [];
-  let pendingResolve = null;
-  const pendingQuestionResolves = [];
-
-  const enqueueLine = (line) => {
-    if (pendingQuestionResolves.length > 0) {
-      const resolve = pendingQuestionResolves.shift();
-      resolve(line);
-      return;
-    }
-    if (pendingResolve) {
-      const resolve = pendingResolve;
-      pendingResolve = null;
-      resolve({ done: false, value: line });
-      return;
-    }
-    queuedLines.push(line);
-  };
-
-  const flush = () => {
-    if (buffer.length > 0) {
-      emitter.emit("line", buffer);
-      enqueueLine(buffer);
-      buffer = "";
-    }
-  };
-
-  const onData = (chunk) => {
-    buffer += typeof chunk === "string" ? chunk : Buffer.from(chunk).toString("utf8");
-    while (true) {
-      const index = buffer.indexOf("\n");
-      if (index < 0) break;
-      const line = buffer.slice(0, index).replace(/\r$/, "");
-      buffer = buffer.slice(index + 1);
-      emitter.emit("line", line);
-      enqueueLine(line);
-    }
-  };
-
-  const onEnd = () => {
-    if (ended) return;
-    ended = true;
-    flush();
-    emitter.emit("close");
-    while (pendingQuestionResolves.length > 0) {
-      const resolve = pendingQuestionResolves.shift();
-      resolve("");
-    }
-    if (pendingResolve) {
-      const resolve = pendingResolve;
-      pendingResolve = null;
-      resolve({ done: true, value: void 0 });
-    }
-  };
-
-  if (input && typeof input.on === "function") {
-    input.on("data", onData);
-    input.on("end", onEnd);
-    if (typeof input.resume === "function") {
-      input.resume();
-    }
-  }
-
-  emitter.close = () => {
-    if (closed) return;
-    closed = true;
-    if (input && typeof input.off === "function") {
-      input.off("data", onData);
-      input.off("end", onEnd);
-    }
-    flush();
-    emitter.emit("close");
-    while (pendingQuestionResolves.length > 0) {
-      const resolve = pendingQuestionResolves.shift();
-      resolve("");
-    }
-    if (pendingResolve) {
-      const resolve = pendingResolve;
-      pendingResolve = null;
-      resolve({ done: true, value: void 0 });
-    }
-  };
-
-  emitter.question = (prompt, callback) => {
-    if (output && typeof output.write === "function" && prompt) {
-      output.write(String(prompt));
-    }
-    const readLine = () => {
-      if (queuedLines.length > 0) {
-        return Promise.resolve(queuedLines.shift());
-      }
-      if (closed || ended) {
-        return Promise.resolve("");
-      }
-      return new Promise((resolve) => {
-        pendingQuestionResolves.push(resolve);
-      });
-    };
-    if (typeof callback === "function") {
-      void readLine().then((line) => {
-        callback(line);
-      });
-      return;
-    }
-    return readLine();
-  };
-
-  emitter[Symbol.asyncIterator] = () => ({
-    next() {
-      if (queuedLines.length > 0) {
-        return Promise.resolve({ done: false, value: queuedLines.shift() });
-      }
-      if (closed || ended) {
-        return Promise.resolve({ done: true, value: void 0 });
-      }
-      return new Promise((resolve) => {
-        pendingResolve = resolve;
-      });
-    },
-    return() {
-      emitter.close();
-      return Promise.resolve({ done: true, value: void 0 });
-    },
-    [Symbol.asyncIterator]() {
-      return this;
-    },
-  });
-
-  return emitter;
-}
-
-export default { createInterface };
-"#,
-        );
-    }
-
-    if module_name == "stream" {
-        return String::from(
-            r#"class MiniEmitter {
-  constructor() {
-    this._listeners = new Map();
-    this._onceListeners = new Map();
-  }
-
-  on(event, listener) {
-    const listeners = this._listeners.get(event) ?? [];
-    listeners.push(listener);
-    this._listeners.set(event, listeners);
-    return this;
-  }
-
-  once(event, listener) {
-    const listeners = this._onceListeners.get(event) ?? [];
-    listeners.push(listener);
-    this._onceListeners.set(event, listeners);
-    return this;
-  }
-
-  off(event, listener) {
-    for (const map of [this._listeners, this._onceListeners]) {
-      const listeners = map.get(event) ?? [];
-      map.set(
-        event,
-        listeners.filter((candidate) => candidate !== listener),
-      );
-    }
-    return this;
-  }
-
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-
-  emit(event, ...args) {
-    const persistent = [...(this._listeners.get(event) ?? [])];
-    const once = [...(this._onceListeners.get(event) ?? [])];
-    this._onceListeners.delete(event);
-    for (const listener of persistent) {
-      listener(...args);
-    }
-    for (const listener of once) {
-      listener(...args);
-    }
-    return persistent.length + once.length > 0;
-  }
-}
-
-function getCallback(encodingOrCallback, callback) {
-  if (typeof encodingOrCallback === "function") return encodingOrCallback;
-  if (typeof callback === "function") return callback;
-  return null;
-}
-
-function queueResult(callback, error = null) {
-  if (typeof callback !== "function") return;
-  queueMicrotask(() => callback(error));
-}
-
-function createReadableAsyncIterator(stream) {
-  const queuedChunks = [];
-  let pendingResolve = null;
-  let pendingReject = null;
-  let done = stream?.readableEnded === true;
-  let error = stream?.errored ?? null;
-
-  const cleanup = () => {
-    stream?.off?.("data", onData);
-    stream?.off?.("end", onEnd);
-    stream?.off?.("close", onEnd);
-    stream?.off?.("error", onError);
-  };
-
-  const settlePending = (result) => {
-    if (pendingResolve) {
-      const resolve = pendingResolve;
-      pendingResolve = null;
-      pendingReject = null;
-      resolve(result);
-    }
-  };
-
-  const rejectPending = (reason) => {
-    if (pendingReject) {
-      const reject = pendingReject;
-      pendingResolve = null;
-      pendingReject = null;
-      reject(reason);
-    }
-  };
-
-  const onData = (chunk) => {
-    if (pendingResolve) {
-      settlePending({ done: false, value: chunk });
-      return;
-    }
-    queuedChunks.push(chunk);
-  };
-
-  const onEnd = () => {
-    if (done) return;
-    done = true;
-    cleanup();
-    settlePending({ done: true, value: void 0 });
-  };
-
-  const onError = (reason) => {
-    error = reason;
-    done = true;
-    cleanup();
-    rejectPending(reason);
-  };
-
-  const pull = () => {
-    if (done || typeof stream?._read !== "function") {
-      return;
-    }
-    try {
-      stream._read();
-    } catch (reason) {
-      stream.errored = reason;
-      onError(reason);
-    }
-  };
-
-  stream?.on?.("data", onData);
-  stream?.on?.("end", onEnd);
-  stream?.on?.("close", onEnd);
-  stream?.on?.("error", onError);
-
-  return {
-    next() {
-      if (error) {
-        return Promise.reject(error);
-      }
-      if (queuedChunks.length > 0) {
-        return Promise.resolve({ done: false, value: queuedChunks.shift() });
-      }
-      if (done) {
-        return Promise.resolve({ done: true, value: void 0 });
-      }
-      pull();
-      if (queuedChunks.length > 0) {
-        return Promise.resolve({ done: false, value: queuedChunks.shift() });
-      }
-      if (done) {
-        return Promise.resolve({ done: true, value: void 0 });
-      }
-      return new Promise((resolve, reject) => {
-        pendingResolve = resolve;
-        pendingReject = reject;
-      });
-    },
-    return() {
-      done = true;
-      cleanup();
-      stream?.destroy?.();
-      return Promise.resolve({ done: true, value: void 0 });
-    },
-    [Symbol.asyncIterator]() {
-      return this;
-    },
-  };
-}
-
-class Stream extends MiniEmitter {
-  pipe(destination) {
-    this.on("data", (chunk) => destination.write(chunk));
-    this.once("end", () => destination.end());
-    return destination;
-  }
-
-  destroy(error) {
-    if (this.destroyed) return this;
-    this.destroyed = true;
-    if (error) {
-      this.errored = error;
-      queueMicrotask(() => this.emit("error", error));
-    }
-    queueMicrotask(() => this.emit("close"));
-    return this;
-  }
-}
-
-class Readable extends Stream {
-  constructor() {
-    super();
-    this.readable = true;
-    this.readableEnded = false;
-    this.destroyed = false;
-  }
-
-  push(chunk) {
-    if (chunk === null) {
-      if (!this.readableEnded) {
-        this.readableEnded = true;
-        queueMicrotask(() => {
-          this.emit("end");
-          this.emit("close");
-        });
-      }
-      return false;
-    }
-    this.emit("data", Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk ?? []));
-    return true;
-  }
-
-  static fromWeb(stream) {
-    if (!stream || typeof stream.getReader !== "function") {
-      throw new TypeError("Readable.fromWeb expects a WHATWG ReadableStream");
-    }
-    return {
-      async *[Symbol.asyncIterator]() {
-        const reader = stream.getReader();
-        try {
-          while (true) {
-            const { value, done } = await reader.read();
-            if (done) break;
-            yield Buffer.from(value ?? []);
-          }
-        } finally {
-          reader.releaseLock?.();
-        }
-      },
-    };
-  }
-
-  [Symbol.asyncIterator]() {
-    return createReadableAsyncIterator(this);
-  }
-}
-
-class Writable extends Stream {
-  constructor(options = undefined) {
-    super();
-    this.writable = true;
-    this.writableEnded = false;
-    this.destroyed = false;
-    this._writeOption =
-      options && typeof options.write === "function" ? options.write : null;
-    this._destroyOption =
-      options && typeof options.destroy === "function" ? options.destroy : null;
-  }
-
-  write(chunk, encodingOrCallback, callback) {
-    if (this.writableEnded) {
-      const error = new Error("write after end");
-      queueResult(getCallback(encodingOrCallback, callback), error);
-      this.emit("error", error);
-      return false;
-    }
-    const done = getCallback(encodingOrCallback, callback);
-    this._write(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk ?? []), done);
-    return true;
-  }
-
-  _write(_chunk, callback) {
-    if (!this._writeOption) {
-      queueResult(callback);
-      return;
-    }
-    try {
-      this._writeOption.call(this, _chunk, "buffer", callback);
-    } catch (error) {
-      queueResult(callback, error);
-    }
-  }
-
-  _destroy(error, callback) {
-    if (!this._destroyOption) {
-      queueResult(callback, error);
-      return;
-    }
-    try {
-      this._destroyOption.call(this, error ?? null, callback);
-    } catch (destroyError) {
-      queueResult(callback, destroyError);
-    }
-  }
-
-  destroy(error) {
-    if (this.destroyed) return this;
-    this.destroyed = true;
-    this._destroy(error ?? null, (destroyError) => {
-      const finalError = destroyError ?? error;
-      if (finalError) {
-        this.errored = finalError;
-        this.emit("error", finalError);
-      }
-      this.emit("close");
-    });
-    return this;
-  }
-
-  end(chunk, encodingOrCallback, callback) {
-    if (chunk !== undefined && chunk !== null) {
-      this.write(chunk, encodingOrCallback);
-    }
-    if (this.writableEnded) {
-      queueResult(getCallback(encodingOrCallback, callback));
-      return this;
-    }
-    this.writableEnded = true;
-    const done = getCallback(encodingOrCallback, callback);
-    queueMicrotask(() => {
-      queueResult(done);
-      this.emit("finish");
-      this.destroy();
-    });
-    return this;
-  }
-}
-
-class Duplex extends Readable {
-  constructor() {
-    super();
-    this.writable = true;
-    this.writableEnded = false;
-  }
-
-  write(chunk, encodingOrCallback, callback) {
-    return Writable.prototype.write.call(this, chunk, encodingOrCallback, callback);
-  }
-
-  _write(chunk, callback) {
-    queueResult(callback);
-  }
-
-  end(chunk, encodingOrCallback, callback) {
-    return Writable.prototype.end.call(this, chunk, encodingOrCallback, callback);
-  }
-}
-
-class Transform extends Duplex {
-  _write(chunk, callback) {
-    try {
-      this._transform(chunk, "buffer", (error, output) => {
-        if (!error && output !== undefined && output !== null) {
-          this.push(output);
-        }
-        queueResult(callback, error ?? null);
-      });
-    } catch (error) {
-      queueResult(callback, error);
-      this.emit("error", error);
-    }
-  }
-
-  _transform(chunk, _encoding, callback) {
-    callback(null, chunk);
-  }
-
-  end(chunk, encodingOrCallback, callback) {
-    Writable.prototype.end.call(this, chunk, encodingOrCallback, callback);
-    this.push(null);
-    return this;
-  }
-}
-
-class PassThrough extends Transform {}
-
-function finished(stream, callback) {
-  const done = (error = null) => {
-    cleanup();
-    if (typeof callback === "function") callback(error);
-  };
-  const onFinish = () => done();
-  const onEnd = () => done();
-  const onClose = () => done();
-  const onError = (error) => done(error);
-  const cleanup = () => {
-    stream?.off?.("finish", onFinish);
-    stream?.off?.("end", onEnd);
-    stream?.off?.("close", onClose);
-    stream?.off?.("error", onError);
-  };
-  stream?.once?.("finish", onFinish);
-  stream?.once?.("end", onEnd);
-  stream?.once?.("close", onClose);
-  stream?.once?.("error", onError);
-  return cleanup;
-}
-
-function pipeline(...streams) {
-  const callback =
-    streams.length > 0 && typeof streams[streams.length - 1] === "function"
-      ? streams.pop()
-      : null;
-  if (streams.length < 2) {
-    const error = new TypeError("pipeline requires at least two streams");
-    callback?.(error);
-    throw error;
-  }
-  for (let index = 0; index < streams.length - 1; index += 1) {
-    streams[index].pipe(streams[index + 1]);
-  }
-  if (callback) {
-    finished(streams[streams.length - 1], callback);
-  }
-  return streams[streams.length - 1];
-}
-
-function compose(...streams) {
-  return pipeline(...streams);
-}
-
-function addAbortSignal(signal, stream) {
-  if (signal?.aborted) {
-    stream?.destroy?.(signal.reason);
-    return stream;
-  }
-  signal?.addEventListener?.("abort", () => stream?.destroy?.(signal.reason), {
-    once: true,
-  });
-  return stream;
-}
-
-function isReadable(stream) {
-  return Boolean(stream && stream.readable && !stream.destroyed);
-}
-
-function isWritable(stream) {
-  return Boolean(stream && stream.writable && !stream.destroyed);
-}
-
-function isErrored(stream) {
-  return Boolean(stream && stream.errored);
-}
-
-function isDisturbed(stream) {
-  return Boolean(
-    stream && (stream.disturbed === true || stream.locked || stream.readableDidRead === true),
-  );
-}
-
-const streamModule = Stream;
-Object.assign(streamModule, {
-  Duplex,
-  PassThrough,
-  Readable,
-  Stream,
-  Transform,
-  Writable,
-  addAbortSignal,
-  compose,
-  finished,
-  isDisturbed,
-  isErrored,
-  isReadable,
-  isWritable,
-  pipeline,
-});
-
-export {
-  Duplex,
-  PassThrough,
-  Readable,
-  Stream,
-  Transform,
-  Writable,
-  addAbortSignal,
-  compose,
-  finished,
-  isDisturbed,
-  isErrored,
-  isReadable,
-  isWritable,
-  pipeline,
-};
-export default streamModule;
-"#,
-        );
-    }
-
-    if module_name == "stream/promises" {
-        return String::from(
-            r#"const _m = globalThis._requireFrom("node:stream/promises", "/");
-
-export default _m;
-export const finished = _m.finished;
-export const pipeline = _m.pipeline;
-"#,
-        );
-    }
-
-    if module_name == "zlib" {
-        return String::from(
-            r#"const _m = globalThis._requireFrom("node:zlib", "/");
-const zlibConstants =
-  typeof _m.constants === "object" && _m.constants !== null
-    ? _m.constants
-    : Object.fromEntries(
-        Object.entries(_m).filter(
-          ([key, value]) => /^[A-Z0-9_]+$/.test(key) && typeof value === "number",
-        ),
-      );
-
-if (typeof _m.constants === "undefined") {
-  Object.defineProperty(_m, "constants", {
-    configurable: true,
-    enumerable: true,
-    value: zlibConstants,
-    writable: true,
-  });
-}
-
-export default _m;
-export const constants = _m.constants;
-export const BrotliCompress = _m.BrotliCompress;
-export const BrotliDecompress = _m.BrotliDecompress;
-export const Deflate = _m.Deflate;
-export const DeflateRaw = _m.DeflateRaw;
-export const Gunzip = _m.Gunzip;
-export const Gzip = _m.Gzip;
-export const Inflate = _m.Inflate;
-export const InflateRaw = _m.InflateRaw;
-export const Unzip = _m.Unzip;
-export const brotliCompress = _m.brotliCompress;
-export const brotliCompressSync = _m.brotliCompressSync;
-export const brotliDecompress = _m.brotliDecompress;
-export const brotliDecompressSync = _m.brotliDecompressSync;
-export const createBrotliCompress = _m.createBrotliCompress;
-export const createBrotliDecompress = _m.createBrotliDecompress;
-export const createDeflate = _m.createDeflate;
-export const createDeflateRaw = _m.createDeflateRaw;
-export const createGunzip = _m.createGunzip;
-export const createGzip = _m.createGzip;
-export const createInflate = _m.createInflate;
-export const createInflateRaw = _m.createInflateRaw;
-export const createUnzip = _m.createUnzip;
-export const deflate = _m.deflate;
-export const deflateRaw = _m.deflateRaw;
-export const deflateRawSync = _m.deflateRawSync;
-export const deflateSync = _m.deflateSync;
-export const gunzip = _m.gunzip;
-export const gunzipSync = _m.gunzipSync;
-export const gzip = _m.gzip;
-export const gzipSync = _m.gzipSync;
-export const inflate = _m.inflate;
-export const inflateRaw = _m.inflateRaw;
-export const inflateRawSync = _m.inflateRawSync;
-export const inflateSync = _m.inflateSync;
-export const unzip = _m.unzip;
-export const unzipSync = _m.unzipSync;
-"#,
-        );
-    }
-
-    if module_name == "stream/web" {
-        return String::from(
-            r#"export const ReadableStream = globalThis.ReadableStream;
-export const WritableStream = globalThis.WritableStream;
-export const TransformStream = globalThis.TransformStream;
-export const TextEncoderStream = globalThis.TextEncoderStream;
-export const TextDecoderStream = globalThis.TextDecoderStream;
-export const CompressionStream = globalThis.CompressionStream;
-export const DecompressionStream = globalThis.DecompressionStream;
-export default {
-  ReadableStream,
-  WritableStream,
-  TransformStream,
-  TextEncoderStream,
-  TextDecoderStream,
-  CompressionStream,
-  DecompressionStream,
-};
-"#,
-        );
-    }
-
-    if module_name == "fs/promises" {
-        return String::from(
-            r#"const fsModule = globalThis._requireFrom("node:fs", "/");
-const _m = fsModule.promises;
-
-export default _m;
-export const constants = fsModule.constants;
-export const FileHandle = _m.FileHandle;
-export const access = _m.access;
-export const appendFile = _m.appendFile;
-export const chmod = _m.chmod;
-export const chown = _m.chown;
-export const copyFile = _m.copyFile;
-export const cp = _m.cp;
-export const lchmod = _m.lchmod;
-export const lchown = _m.lchown;
-export const link = _m.link;
-export const lstat = _m.lstat;
-export const lutimes = _m.lutimes;
-export const mkdir = _m.mkdir;
-export const mkdtemp = _m.mkdtemp;
-export const open = _m.open;
-export const opendir = _m.opendir;
-export const readFile = _m.readFile;
-export const readdir = _m.readdir;
-export const readlink = _m.readlink;
-export const realpath = _m.realpath;
-export const rename = _m.rename;
-export const rm = _m.rm;
-export const rmdir = _m.rmdir;
-export const stat = _m.stat;
-export const statfs = _m.statfs;
-export const symlink = _m.symlink;
-export const truncate = _m.truncate;
-export const unlink = _m.unlink;
-export const utimes = _m.utimes;
-export const watch = _m.watch;
-export const writeFile = _m.writeFile;
-"#,
-        );
-    }
-
-    if module_name == "readline" {
-        return String::from(
-            r#"const _m = globalThis._requireFrom("node:readline", "/");
-
-function createInterface(...args) {
-  const interfaceValue = _m.createInterface(...args);
-  if (interfaceValue && typeof interfaceValue === "object") {
-    if (interfaceValue.__agentOSReadlineWrapped === true) {
-      return interfaceValue;
-    }
-    Object.defineProperty(interfaceValue, "__agentOSReadlineWrapped", {
-      value: true,
-      configurable: true,
-      enumerable: false,
-      writable: false,
-    });
-    const options = args[0] && typeof args[0] === "object" ? args[0] : {};
-    const output = options.output ?? null;
-    const originalOn = typeof interfaceValue.on === "function"
-      ? interfaceValue.on.bind(interfaceValue)
-      : null;
-    const originalOff = typeof interfaceValue.off === "function"
-      ? interfaceValue.off.bind(interfaceValue)
-      : typeof interfaceValue.removeListener === "function"
-        ? interfaceValue.removeListener.bind(interfaceValue)
-        : null;
-    const originalClose = typeof interfaceValue.close === "function"
-      ? interfaceValue.close.bind(interfaceValue)
-      : null;
-    const queued = [];
-    const pendingQuestionResolves = [];
-    let pendingResolve = null;
-    let done = false;
-    const enqueue = (line) => {
-      if (pendingQuestionResolves.length > 0) {
-        const resolve = pendingQuestionResolves.shift();
-        resolve(line);
-        return;
-      }
-      if (pendingResolve) {
-        const resolve = pendingResolve;
-        pendingResolve = null;
-        resolve({ done: false, value: line });
-        return;
-      }
-      queued.push(line);
-    };
-    const finish = () => {
-      if (done) {
-        return;
-      }
-      done = true;
-      while (pendingQuestionResolves.length > 0) {
-        const resolve = pendingQuestionResolves.shift();
-        resolve("");
-      }
-      if (pendingResolve) {
-        const resolve = pendingResolve;
-        pendingResolve = null;
-        resolve({ done: true, value: void 0 });
-      }
-    };
-    const readLine = () => {
-      if (queued.length > 0) {
-        return Promise.resolve(queued.shift());
-      }
-      if (done) {
-        return Promise.resolve("");
-      }
-      return new Promise((resolve) => {
-        pendingQuestionResolves.push(resolve);
-      });
-    };
-    originalOn?.("line", enqueue);
-    originalOn?.("close", finish);
-    interfaceValue.question = (prompt, callback) => {
-      if (output && typeof output.write === "function" && prompt) {
-        output.write(String(prompt));
-      }
-      if (typeof callback === "function") {
-        void readLine().then((line) => {
-          callback(line);
-        });
-        return;
-      }
-      return readLine();
-    };
-    interfaceValue[Symbol.asyncIterator] = () => ({
-      next() {
-        if (queued.length > 0) {
-          return Promise.resolve({ done: false, value: queued.shift() });
-        }
-        if (done) {
-          return Promise.resolve({ done: true, value: void 0 });
-        }
-        return new Promise((resolve) => {
-          pendingResolve = resolve;
-        });
-      },
-      return() {
-        originalOff?.("line", enqueue);
-        originalOff?.("close", finish);
-        originalClose?.();
-        finish();
-        return Promise.resolve({ done: true, value: void 0 });
-      },
-      [Symbol.asyncIterator]() {
-        return this;
-      },
-    });
-  }
-  return interfaceValue;
-}
-
-export default _m;
-export { createInterface };
-"#,
-        );
-    }
-
-    if module_name == "string_decoder" {
-        return String::from(
-            r#"class StringDecoder {
-  constructor(encoding = "utf8") {
-    this.encoding = encoding;
-    this.decoder = new TextDecoder(encoding, { fatal: false });
-  }
-
-  write(input) {
-    const buffer =
-      typeof input === "string"
-        ? Buffer.from(input, this.encoding)
-        : Buffer.isBuffer(input)
-          ? input
-          : Buffer.from(input ?? []);
-    return this.decoder.decode(buffer, { stream: true });
-  }
-
-  end(input) {
-    let output = "";
-    if (input !== undefined) {
-      output += this.write(input);
-    }
-    output += this.decoder.decode();
-    return output;
-  }
-}
-
-export { StringDecoder };
-export default { StringDecoder };
-"#,
-        );
-    }
-
-    if module_name == "v8" {
-        return String::from(
-            r#"function serialize(value) {
-  return Buffer.from(JSON.stringify(value ?? null), "utf8");
-}
-
-function deserialize(value) {
-  const buffer = Buffer.isBuffer(value) ? value : Buffer.from(value ?? []);
-  return JSON.parse(buffer.toString("utf8"));
-}
-
-class Serializer {
-  constructor() {
-    this._value = null;
-  }
-
-  writeHeader() {}
-
-  writeValue(value) {
-    this._value = value;
-  }
-
-  releaseBuffer() {
-    return serialize(this._value);
-  }
-
-  transferArrayBuffer() {}
-}
-
-class Deserializer {
-  constructor(buffer) {
-    this._buffer = buffer;
-  }
-
-  readHeader() {}
-
-  readValue() {
-    return deserialize(this._buffer);
-  }
-
-  transferArrayBuffer() {}
-}
-
-function cachedDataVersionTag() {
-  return 0;
-}
-
-function getCppHeapStatistics() {
-  return {
-    committed_size_bytes: 0,
-    resident_size_bytes: 0,
-    used_size_bytes: 0,
-    space_statistics: [],
-  };
-}
-
-function getHeapCodeStatistics() {
-  return {
-    code_and_metadata_size: 0,
-    bytecode_and_metadata_size: 0,
-    external_script_source_size: 0,
-    cpu_profiler_metadata_size: 0,
-  };
-}
-
-function configuredHeapLimitBytes() {
-  const configured = Number(globalThis.__agentOSV8HeapLimitBytes);
-  if (!Number.isFinite(configured) || configured <= 0) {
-    return 0;
-  }
-  return configured;
-}
-
-function getHeapStatistics() {
-  const heapLimit = configuredHeapLimitBytes();
-  return {
-    total_heap_size: 0,
-    total_heap_size_executable: 0,
-    total_physical_size: 0,
-    total_available_size: 0,
-    used_heap_size: 0,
-    heap_size_limit: heapLimit,
-    malloced_memory: 0,
-    peak_malloced_memory: 0,
-    does_zap_garbage: 0,
-    number_of_native_contexts: 0,
-    number_of_detached_contexts: 0,
-    total_global_handles_size: 0,
-    used_global_handles_size: 0,
-    external_memory: 0,
-  };
-}
-
-function getHeapSpaceStatistics() {
-  return [];
-}
-
-function getHeapSnapshot() {
-  return Readable.fromWeb(
-    new ReadableStream({
-      start(controller) {
-        controller.enqueue(Buffer.from("{}"));
-        controller.close();
-      },
-    }),
-  );
-}
-
-function isStringOneByteRepresentation(value) {
-  return typeof value === "string" && !/[^\x00-\xff]/.test(value);
-}
-
-function queryObjects() {
-  return [];
-}
-
-function setFlagsFromString() {}
-
-function setHeapSnapshotNearHeapLimit() {
-  return [];
-}
-
-function startCpuProfile() {
-  return {
-    stop() {
-      return {};
-    },
-  };
-}
-
-function stopCoverage() {
-  return [];
-}
-
-function takeCoverage() {
-  return [];
-}
-
-function writeHeapSnapshot() {
-  return "";
-}
-
-class GCProfiler {
-  start() {}
-
-  stop() {
-    return [];
-  }
-}
-
-const promiseHooks = {};
-const startupSnapshot = {};
-
-export {
-  GCProfiler,
-  cachedDataVersionTag,
-  Deserializer,
-  deserialize,
-  getCppHeapStatistics,
-  getHeapCodeStatistics,
-  getHeapSnapshot,
-  getHeapSpaceStatistics,
-  getHeapStatistics,
-  isStringOneByteRepresentation,
-  promiseHooks,
-  queryObjects,
-  serialize,
-  Serializer,
-  setFlagsFromString,
-  setHeapSnapshotNearHeapLimit,
-  startCpuProfile,
-  startupSnapshot,
-  stopCoverage,
-  takeCoverage,
-  writeHeapSnapshot,
-};
-export {
-  Deserializer as DefaultDeserializer,
-  Serializer as DefaultSerializer,
-};
-export default {
-  GCProfiler,
-  cachedDataVersionTag,
-  DefaultDeserializer: Deserializer,
-  DefaultSerializer: Serializer,
-  Deserializer,
-  deserialize,
-  getCppHeapStatistics,
-  getHeapCodeStatistics,
-  getHeapSnapshot,
-  getHeapSpaceStatistics,
-  getHeapStatistics,
-  isStringOneByteRepresentation,
-  promiseHooks,
-  queryObjects,
-  serialize,
-  Serializer,
-  setFlagsFromString,
-  setHeapSnapshotNearHeapLimit,
-  startCpuProfile,
-  startupSnapshot,
-  stopCoverage,
-  takeCoverage,
-  writeHeapSnapshot,
-};
-"#,
-        );
-    }
-
-    if module_name == "vm" {
-        return String::from(
-            r#"const VM_CONTEXT_TAG = typeof Symbol === "function" ? Symbol.for("secure-exec.vm.context") : "__secure_exec_vm_context__";
-const VM_CONTEXT_ID = typeof Symbol === "function" ? Symbol.for("secure-exec.vm.context.id") : "__secure_exec_vm_context_id__";
-
-function createVmNotImplementedError(feature) {
-  const error = new Error(`node:vm ${feature} is not implemented in the secure-exec guest runtime`);
-  error.code = "ERR_NOT_IMPLEMENTED";
-  return error;
-}
-
-function isVmContextCandidate(value) {
-  return value !== null && (typeof value === "object" || typeof value === "function");
-}
-
-function normalizeVmOptions(options = undefined) {
-  if (typeof options === "string") {
-    return { filename: options };
-  }
-  if (!options || typeof options !== "object") {
-    return {};
-  }
-  const normalized = {};
-  if (typeof options.filename === "string") {
-    normalized.filename = options.filename;
-  }
-  if (Number.isInteger(options.lineOffset)) {
-    normalized.lineOffset = options.lineOffset;
-  }
-  if (Number.isInteger(options.columnOffset)) {
-    normalized.columnOffset = options.columnOffset;
-  }
-  if (Number.isInteger(options.timeout) && options.timeout > 0) {
-    normalized.timeout = options.timeout;
-  }
-  if (options.cachedData !== undefined) {
-    normalized.cachedData = options.cachedData;
-  }
-  if (options.produceCachedData === true) {
-    normalized.produceCachedData = true;
-  }
-  return normalized;
-}
-
-function mergeVmOptions(baseOptions, overrideOptions) {
-  return { ...normalizeVmOptions(baseOptions), ...normalizeVmOptions(overrideOptions) };
-}
-
-function createContext(context = {}) {
-  if (!isVmContextCandidate(context)) {
-    throw new TypeError('The "object" argument must be of type object.');
-  }
-  if (context[VM_CONTEXT_TAG] === true && Number.isInteger(context[VM_CONTEXT_ID])) {
-    return context;
-  }
-  const contextId = globalThis._vmCreateContext(context);
-  Object.defineProperty(context, VM_CONTEXT_TAG, {
-    value: true,
-    configurable: true,
-    enumerable: false,
-    writable: false,
-  });
-  Object.defineProperty(context, VM_CONTEXT_ID, {
-    value: contextId,
-    configurable: false,
-    enumerable: false,
-    writable: false,
-  });
-  return context;
-}
-
-function isContext(context) {
-  return isVmContextCandidate(context) && context[VM_CONTEXT_TAG] === true && Number.isInteger(context[VM_CONTEXT_ID]);
-}
-
-function assertContext(context) {
-  if (!isContext(context)) {
-    throw new TypeError('The "contextifiedObject" argument must be a vm context.');
-  }
-  return context;
-}
-
-function runInThisContext(code, options = undefined) {
-  return globalThis._vmRunInThisContext(String(code), normalizeVmOptions(options));
-}
-
-function runInContext(code, contextifiedObject, options = undefined) {
-  const context = assertContext(contextifiedObject);
-  return globalThis._vmRunInContext(context[VM_CONTEXT_ID], String(code), normalizeVmOptions(options), context);
-}
-
-function runInNewContext(code, contextOrOptions = {}, maybeOptions = undefined) {
-  const hasExplicitContext = isVmContextCandidate(contextOrOptions);
-  const context = hasExplicitContext ? contextOrOptions : {};
-  const options = hasExplicitContext ? maybeOptions : contextOrOptions;
-  return runInContext(code, createContext(context), options);
-}
-
-class Script {
-  constructor(code, options = undefined) {
-    this.code = String(code);
-    this.options = normalizeVmOptions(options);
-    this.filename = this.options.filename ?? "evalmachine.<anonymous>";
-    this.lineOffset = this.options.lineOffset ?? 0;
-    this.columnOffset = this.options.columnOffset ?? 0;
-    this.cachedData = this.options.cachedData;
-    this.cachedDataProduced = false;
-    this.cachedDataRejected = false;
-  }
-
-  createCachedData() {
-    return typeof Buffer === "function" ? Buffer.alloc(0) : new Uint8Array(0);
-  }
-
-  runInThisContext(options = undefined) {
-    return runInThisContext(this.code, mergeVmOptions(this.options, options));
-  }
-
-  runInContext(contextifiedObject, options = undefined) {
-    return runInContext(this.code, contextifiedObject, mergeVmOptions(this.options, options));
-  }
-
-  runInNewContext(context = {}, options = undefined) {
-    return runInNewContext(this.code, context, mergeVmOptions(this.options, options));
-  }
-}
-
-function compileFunction() {
-  throw createVmNotImplementedError("compileFunction");
-}
-
-function measureMemory() {
-  throw createVmNotImplementedError("measureMemory");
-}
-
-export { Script, compileFunction, createContext, isContext, measureMemory, runInContext, runInNewContext, runInThisContext };
-export default { Script, compileFunction, createContext, isContext, measureMemory, runInContext, runInNewContext, runInThisContext };
-"#,
-        );
-    }
-
-    if module_name == "worker_threads" {
-        return String::from(
-            r#"function createNotImplementedError(feature) {
-  const error = new Error(`node:worker_threads ${feature} is not available in the secure-exec guest runtime`);
-  error.code = "ERR_NOT_IMPLEMENTED";
-  return error;
-}
-
-class MessagePort {
-  postMessage() {}
-  start() {}
-  close() {}
-  unref() {
-    return this;
-  }
-  ref() {
-    return this;
-  }
-}
-
-class MessageChannel {
-  constructor() {
-    this.port1 = new MessagePort();
-    this.port2 = new MessagePort();
-  }
-}
-
-class Worker {
-  constructor() {
-    throw createNotImplementedError("Worker");
-  }
-}
-
-function getEnvironmentData() {
-  return undefined;
-}
-
-function markAsUncloneable() {}
-
-function markAsUntransferable() {}
-
-function moveMessagePortToContext() {
-  throw createNotImplementedError("moveMessagePortToContext");
-}
-
-function postMessageToThread() {
-  throw createNotImplementedError("postMessageToThread");
-}
-
-function receiveMessageOnPort() {
-  return undefined;
-}
-
-function setEnvironmentData() {}
-
-export const BroadcastChannel = globalThis.BroadcastChannel;
-export { MessageChannel, MessagePort, Worker, getEnvironmentData, markAsUncloneable, markAsUntransferable, moveMessagePortToContext, postMessageToThread, receiveMessageOnPort, setEnvironmentData };
-export const SHARE_ENV = Symbol.for("secure-exec.worker_threads.SHARE_ENV");
-export const isMainThread = true;
-export const parentPort = null;
-export const resourceLimits = {};
-export const threadId = 0;
-export const workerData = null;
-export default {
-  BroadcastChannel: globalThis.BroadcastChannel,
-  MessageChannel,
-  MessagePort,
-  SHARE_ENV,
-  Worker,
-  getEnvironmentData,
-  isMainThread,
-  markAsUncloneable,
-  markAsUntransferable,
-  moveMessagePortToContext,
-  parentPort,
-  postMessageToThread,
-  receiveMessageOnPort,
-  resourceLimits,
-  setEnvironmentData,
-  threadId,
-  workerData,
-};
-"#,
-        );
-    }
-
-    let default_target = format!(
-        "globalThis._requireFrom({}, \"/\")",
-        serde_json::to_string(&format!("node:{module_name}"))
-            .unwrap_or_else(|_| format!("\"node:{module_name}\""))
-    );
-    let mut exports = builtin_named_exports(module_name)
-        .iter()
-        .collect::<HashSet<_>>()
-        .into_iter()
-        .collect::<Vec<_>>();
-    exports.sort_unstable();
-
-    let mut source = format!("const _m = {default_target};\nexport default _m;\n");
-    for name in exports {
-        source.push_str(&format!("export const {name} = _m[\"{name}\"];\n"));
-    }
-    source
-}
-
-fn builtin_named_exports(module_name: &str) -> &'static [&'static str] {
-    match module_name {
-        "async_hooks" => &[
-            "AsyncLocalStorage",
-            "AsyncResource",
-            "createHook",
-            "executionAsyncId",
-            "triggerAsyncId",
-        ],
-        "buffer" => &[
-            "Blob",
-            "Buffer",
-            "File",
-            "INSPECT_MAX_BYTES",
-            "SlowBuffer",
-            "isUtf8",
-        ],
-        "child_process" => &[
-            "ChildProcess",
-            "exec",
-            "execFile",
-            "execFileSync",
-            "execSync",
-            "fork",
-            "spawn",
-            "spawnSync",
-        ],
-        "console" => &[
-            "Console",
-            "assert",
-            "clear",
-            "context",
-            "count",
-            "countReset",
-            "createTask",
-            "debug",
-            "dir",
-            "dirxml",
-            "error",
-            "group",
-            "groupCollapsed",
-            "groupEnd",
-            "info",
-            "log",
-            "profile",
-            "profileEnd",
-            "table",
-            "time",
-            "timeEnd",
-            "timeLog",
-            "timeStamp",
-            "trace",
-            "warn",
-        ],
-        "crypto" => &[
-            "createHash",
-            "createPrivateKey",
-            "getHashes",
-            "getRandomValues",
-            "randomBytes",
-            "randomFillSync",
-            "randomUUID",
-            "subtle",
-        ],
-        "diagnostics_channel" => &[
-            "Channel",
-            "channel",
-            "hasSubscribers",
-            "subscribe",
-            "tracingChannel",
-            "unsubscribe",
-        ],
-        "events" => &[
-            "EventEmitter",
-            "addAbortListener",
-            "defaultMaxListeners",
-            "errorMonitor",
-            "getEventListeners",
-            "getMaxListeners",
-            "on",
-            "once",
-            "setMaxListeners",
-        ],
-        "dns" => &[
-            "Resolver",
-            "getServers",
-            "lookup",
-            "promises",
-            "resolve",
-            "resolve4",
-            "resolve6",
-            "setServers",
-        ],
-        "dns/promises" => &[
-            "Resolver",
-            "lookup",
-            "resolve",
-            "resolve4",
-            "resolve6",
-            "resolveAny",
-            "resolveMx",
-            "resolveTxt",
-            "resolveSrv",
-            "resolveCname",
-            "resolvePtr",
-            "resolveNs",
-            "resolveSoa",
-            "resolveNaptr",
-            "resolveCaa",
-        ],
-        "fs" => &[
-            "access",
-            "accessSync",
-            "appendFile",
-            "appendFileSync",
-            "chmod",
-            "chmodSync",
-            "closeSync",
-            "constants",
-            "createReadStream",
-            "createWriteStream",
-            "existsSync",
-            "fstat",
-            "fstatSync",
-            "fsyncSync",
-            "lstat",
-            "lstatSync",
-            "mkdir",
-            "mkdirSync",
-            "openSync",
-            "readFile",
-            "promises",
-            "readFileSync",
-            "readdir",
-            "readSync",
-            "readdirSync",
-            "readlink",
-            "realpathSync",
-            "rename",
-            "readlinkSync",
-            "renameSync",
-            "rm",
-            "rmSync",
-            "stat",
-            "statSync",
-            "unlink",
-            "unlinkSync",
-            "watch",
-            "watchFile",
-            "unwatchFile",
-            "writeFile",
-            "writeFileSync",
-            "writeSync",
-        ],
-        "fs/promises" => &[
-            "access",
-            "appendFile",
-            "chmod",
-            "chown",
-            "constants",
-            "copyFile",
-            "cp",
-            "glob",
-            "lchown",
-            "link",
-            "lstat",
-            "mkdir",
-            "mkdtemp",
-            "open",
-            "opendir",
-            "readFile",
-            "readdir",
-            "readlink",
-            "realpath",
-            "rename",
-            "rm",
-            "rmdir",
-            "stat",
-            "statfs",
-            "symlink",
-            "truncate",
-            "unlink",
-            "utimes",
-            "writeFile",
-        ],
-        "http" => &[
-            "Agent",
-            "ClientRequest",
-            "IncomingMessage",
-            "METHODS",
-            "Server",
-            "ServerResponse",
-            "STATUS_CODES",
-            "_checkInvalidHeaderChar",
-            "_checkIsHttpToken",
-            "createServer",
-            "get",
-            "globalAgent",
-            "maxHeaderSize",
-            "request",
-            "validateHeaderName",
-            "validateHeaderValue",
-        ],
-        "http2" => &["connect", "createServer", "createSecureServer"],
-        "https" => &[
-            "Agent",
-            "ClientRequest",
-            "IncomingMessage",
-            "Server",
-            "ServerResponse",
-            "_checkInvalidHeaderChar",
-            "_checkIsHttpToken",
-            "createServer",
-            "get",
-            "globalAgent",
-            "maxHeaderSize",
-            "request",
-            "validateHeaderName",
-            "validateHeaderValue",
-        ],
-        "module" => &[
-            "Module",
-            "_cache",
-            "_extensions",
-            "_resolveFilename",
-            "builtinModules",
-            "createRequire",
-            "findSourceMap",
-            "isBuiltin",
-            "syncBuiltinESMExports",
-            "wrap",
-        ],
-        "net" => &[
-            "BlockList",
-            "Socket",
-            "SocketAddress",
-            "Server",
-            "Stream",
-            "connect",
-            "createConnection",
-            "createServer",
-            "getDefaultAutoSelectFamily",
-            "getDefaultAutoSelectFamilyAttemptTimeout",
-            "isIP",
-            "isIPv4",
-            "isIPv6",
-            "setDefaultAutoSelectFamily",
-            "setDefaultAutoSelectFamilyAttemptTimeout",
-        ],
-        "os" => &[
-            "EOL",
-            "arch",
-            "availableParallelism",
-            "constants",
-            "cpus",
-            "endianness",
-            "freemem",
-            "homedir",
-            "hostname",
-            "networkInterfaces",
-            "platform",
-            "release",
-            "totalmem",
-            "tmpdir",
-            "type",
-            "userInfo",
-            "version",
-        ],
-        "path" | "path/posix" | "path/win32" => &[
-            "basename",
-            "delimiter",
-            "dirname",
-            "extname",
-            "format",
-            "isAbsolute",
-            "join",
-            "normalize",
-            "parse",
-            "posix",
-            "relative",
-            "resolve",
-            "sep",
-            "win32",
-        ],
-        "process" => &[
-            "arch", "argv", "argv0", "cwd", "env", "execPath", "exit", "pid", "platform", "ppid",
-            "stderr", "stdin", "stdout", "umask", "version", "versions",
-        ],
-        "perf_hooks" => &[
-            "PerformanceObserver",
-            "constants",
-            "createHistogram",
-            "performance",
-        ],
-        "readline" => &["createInterface"],
-        "sqlite" => &["DatabaseSync", "StatementSync", "constants"],
-        "stream" => &[
-            "Duplex",
-            "PassThrough",
-            "Readable",
-            "Stream",
-            "Transform",
-            "Writable",
-            "addAbortSignal",
-            "compose",
-            "finished",
-            "isDisturbed",
-            "isErrored",
-            "isReadable",
-            "pipeline",
-        ],
-        "stream/consumers" => &["arrayBuffer", "blob", "buffer", "json", "text"],
-        "sys" => &[
-            "MIMEType",
-            "MIMEParams",
-            "TextDecoder",
-            "TextEncoder",
-            "callbackify",
-            "debug",
-            "debuglog",
-            "deprecate",
-            "format",
-            "formatWithOptions",
-            "inherits",
-            "inspect",
-            "parseArgs",
-            "promisify",
-            "stripVTControlCharacters",
-            "types",
-        ],
-        "timers" => &[
-            "clearImmediate",
-            "clearInterval",
-            "clearTimeout",
-            "setImmediate",
-            "setInterval",
-            "setTimeout",
-        ],
-        "tty" => &["ReadStream", "WriteStream", "isatty"],
-        "tls" => &[
-            "TLSSocket",
-            "Server",
-            "connect",
-            "createSecureContext",
-            "createServer",
-            "getCiphers",
-        ],
-        "stream/promises" => &["finished", "pipeline"],
-        "timers/promises" => &["scheduler", "setImmediate", "setInterval", "setTimeout"],
-        "url" => &["URL", "fileURLToPath", "format", "parse", "pathToFileURL"],
-        "util" => &[
-            "MIMEType",
-            "MIMEParams",
-            "TextDecoder",
-            "TextEncoder",
-            "callbackify",
-            "debug",
-            "debuglog",
-            "deprecate",
-            "format",
-            "formatWithOptions",
-            "inherits",
-            "inspect",
-            "isDeepStrictEqual",
-            "parseArgs",
-            "promisify",
-            "stripVTControlCharacters",
-            "types",
-        ],
-        "util/types" => &[
-            "isAnyArrayBuffer",
-            "isArgumentsObject",
-            "isArrayBuffer",
-            "isArrayBufferView",
-            "isAsyncFunction",
-            "isBigInt64Array",
-            "isBigIntObject",
-            "isBigUint64Array",
-            "isBooleanObject",
-            "isBoxedPrimitive",
-            "isCryptoKey",
-            "isDataView",
-            "isDate",
-            "isExternal",
-            "isFloat16Array",
-            "isFloat32Array",
-            "isFloat64Array",
-            "isGeneratorFunction",
-            "isGeneratorObject",
-            "isInt16Array",
-            "isInt32Array",
-            "isInt8Array",
-            "isKeyObject",
-            "isMap",
-            "isMapIterator",
-            "isModuleNamespaceObject",
-            "isNativeError",
-            "isNumberObject",
-            "isPromise",
-            "isProxy",
-            "isRegExp",
-            "isSet",
-            "isSetIterator",
-            "isSharedArrayBuffer",
-            "isStringObject",
-            "isSymbolObject",
-            "isTypedArray",
-            "isUint16Array",
-            "isUint32Array",
-            "isUint8Array",
-            "isUint8ClampedArray",
-            "isWeakMap",
-            "isWeakSet",
-        ],
-        "vm" => &[
-            "Script",
-            "compileFunction",
-            "createContext",
-            "isContext",
-            "measureMemory",
-            "runInContext",
-            "runInNewContext",
-            "runInThisContext",
-        ],
-        "v8" => &[
-            "cachedDataVersionTag",
-            "DefaultDeserializer",
-            "DefaultSerializer",
-            "Deserializer",
-            "GCProfiler",
-            "Serializer",
-            "deserialize",
-            "getCppHeapStatistics",
-            "getHeapCodeStatistics",
-            "getHeapSnapshot",
-            "getHeapSpaceStatistics",
-            "getHeapStatistics",
-            "isStringOneByteRepresentation",
-            "promiseHooks",
-            "queryObjects",
-            "serialize",
-            "setFlagsFromString",
-            "setHeapSnapshotNearHeapLimit",
-            "startCpuProfile",
-            "startupSnapshot",
-            "stopCoverage",
-            "takeCoverage",
-            "writeHeapSnapshot",
-        ],
-        "worker_threads" => &[
-            "MessageChannel",
-            "MessagePort",
-            "Worker",
-            "isMainThread",
-            "parentPort",
-            "workerData",
-        ],
-        "zlib" => &[
-            "BrotliCompress",
-            "BrotliDecompress",
-            "Deflate",
-            "DeflateRaw",
-            "Gunzip",
-            "Gzip",
-            "Inflate",
-            "InflateRaw",
-            "Unzip",
-            "brotliCompress",
-            "brotliCompressSync",
-            "brotliDecompress",
-            "brotliDecompressSync",
-            "constants",
-            "createBrotliCompress",
-            "createBrotliDecompress",
-            "createDeflate",
-            "createDeflateRaw",
-            "createGunzip",
-            "createGzip",
-            "createInflate",
-            "createInflateRaw",
-            "createUnzip",
-            "deflate",
-            "deflateRaw",
-            "deflateRawSync",
-            "deflateSync",
-            "gunzip",
-            "gunzipSync",
-            "gzip",
-            "gzipSync",
-            "inflate",
-            "inflateRaw",
-            "inflateRawSync",
-            "inflateSync",
-            "unzip",
-            "unzipSync",
-        ],
-        _ => &[],
-    }
-}
-
-fn split_package_request(request: &str) -> Option<(&str, &str)> {
-    if request.starts_with('@') {
-        let mut parts = request.splitn(3, '/');
-        let scope = parts.next()?;
-        let name = parts.next()?;
-        let package_name = &request[..scope.len() + 1 + name.len()];
-        let subpath = parts.next().unwrap_or("");
-        Some((package_name, subpath))
-    } else {
-        request.split_once('/').or(Some((request, "")))
-    }
-}
-
-fn node_modules_direct_candidate_dirs(dir: &str, package_name: &str) -> Vec<String> {
-    let mut candidates = HashSet::new();
-    candidates.insert(join_guest_path(
-        dir,
-        &format!("node_modules/{package_name}"),
-    ));
-    if dir == "/node_modules" || dir.ends_with("/node_modules") {
-        candidates.insert(join_guest_path(dir, package_name));
-    }
-    let mut candidates = candidates.into_iter().collect::<Vec<_>>();
-    candidates.sort();
-    candidates
-}
-
-fn resolve_exports_target(
-    exports_field: &Value,
-    subpath: &str,
-    mode: ModuleResolveMode,
-) -> Option<String> {
-    match exports_field {
-        Value::String(value) => (subpath == ".").then(|| value.clone()),
-        Value::Array(values) => values
-            .iter()
-            .find_map(|value| resolve_exports_target(value, subpath, mode)),
-        Value::Object(record) => {
-            if subpath == "."
-                && !record.contains_key(".")
-                && !record.keys().any(|key| key.starts_with("./"))
-            {
-                return resolve_conditional_target(record, mode);
-            }
-            if let Some(value) = record.get(subpath) {
-                return resolve_exports_target(value, ".", mode);
-            }
-            for (key, value) in record {
-                if let Some((prefix, suffix)) = key.split_once('*') {
-                    if subpath.starts_with(prefix) && subpath.ends_with(suffix) {
-                        let wildcard = &subpath[prefix.len()..subpath.len() - suffix.len()];
-                        let resolved = resolve_exports_target(value, ".", mode)?;
-                        return Some(resolved.replace('*', wildcard));
-                    }
-                }
-            }
-            if subpath == "." {
-                record
-                    .get(".")
-                    .and_then(|value| resolve_exports_target(value, ".", mode))
-            } else {
-                None
-            }
-        }
-        _ => None,
-    }
-}
-
-fn resolve_conditional_target(
-    record: &serde_json::Map<String, Value>,
-    mode: ModuleResolveMode,
-) -> Option<String> {
-    let order: &[&str] = match mode {
-        ModuleResolveMode::Import => &["import", "node", "module", "default", "require"],
-        ModuleResolveMode::Require => &["require", "node", "default", "import", "module"],
-    };
-    for key in order {
-        if let Some(value) = record.get(*key) {
-            if let Some(resolved) = resolve_exports_target(value, ".", mode) {
-                return Some(resolved);
-            }
-        }
-    }
-    None
-}
-
-fn resolve_imports_target(
-    imports_field: &Value,
-    specifier: &str,
-    mode: ModuleResolveMode,
-) -> Option<String> {
-    match imports_field {
-        Value::String(value) => Some(value.clone()),
-        Value::Array(values) => values
-            .iter()
-            .find_map(|value| resolve_imports_target(value, specifier, mode)),
-        Value::Object(record) => {
-            if let Some(value) = record.get(specifier) {
-                return resolve_exports_target(value, ".", mode);
-            }
-            for (key, value) in record {
-                if let Some((prefix, suffix)) = key.split_once('*') {
-                    if specifier.starts_with(prefix) && specifier.ends_with(suffix) {
-                        let wildcard = &specifier[prefix.len()..specifier.len() - suffix.len()];
-                        let resolved = resolve_exports_target(value, ".", mode)?;
-                        return Some(resolved.replace('*', wildcard));
-                    }
-                }
-            }
-            None
-        }
-        _ => None,
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use nix::fcntl::OFlag;
-    use nix::unistd::pipe2;
-    use serde_json::Value;
-    use std::io::BufRead;
-    use std::time::{SystemTime, UNIX_EPOCH};
-    use tempfile::tempdir;
-
-    #[test]
-    fn javascript_limits_are_read_from_typed_fields_and_env_is_inert() {
-        // Misleading env values: a reader that still consulted `AGENTOS_*` would
-        // observe these instead of the typed wire limits.
-        let env = std::collections::BTreeMap::from([
-            (
-                String::from("AGENTOS_V8_HEAP_LIMIT_MB"),
-                String::from("999999"),
-            ),
-            (
-                String::from("AGENTOS_V8_CPU_TIME_LIMIT_MS"),
-                String::from("999999"),
-            ),
-            (
-                String::from("AGENTOS_V8_WALL_CLOCK_LIMIT_MS"),
-                String::from("999999"),
-            ),
-            (
-                String::from("AGENTOS_NODE_IMPORT_CACHE_MATERIALIZE_TIMEOUT_MS"),
-                String::from("999999"),
-            ),
-            (
-                String::from(NODE_SYNC_RPC_WAIT_TIMEOUT_MS_ENV),
-                String::from("999999"),
-            ),
-        ]);
-        let request = StartJavascriptExecutionRequest {
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: String::from("ctx-js"),
-            argv: vec![String::from("/entry.mjs")],
-            env,
-            cwd: std::path::PathBuf::from("/tmp"),
-            limits: JavascriptExecutionLimits {
-                v8_heap_limit_mb: Some(64),
-                sync_rpc_wait_timeout_ms: Some(2_000),
-                cpu_time_limit_ms: Some(750),
-                wall_clock_limit_ms: Some(500),
-                import_cache_materialize_timeout_ms: Some(125),
-            },
-            wasm_module_bytes: None,
-            inline_code: None,
-        };
-
-        assert_eq!(
-            javascript_heap_limit_mb(&request),
-            64,
-            "heap must come from the typed wire limit, not AGENTOS_V8_HEAP_LIMIT_MB"
-        );
-        assert_eq!(
-            javascript_sync_rpc_timeout(&request),
-            std::time::Duration::from_millis(2_000),
-            "sync-rpc wait must come from the typed wire limit, not env"
-        );
-        assert_eq!(
-            javascript_cpu_time_limit_ms(&request),
-            750,
-            "CPU budget must come from the typed wire limit, not env"
-        );
-        assert_eq!(
-            javascript_wall_clock_limit_ms(&request),
-            500,
-            "wall-clock budget must come from the typed wire limit, not env"
-        );
-        assert_eq!(
-            javascript_import_cache_materialize_timeout(&request),
-            std::time::Duration::from_millis(125),
-            "import-cache timeout must come from the typed wire limit, not env"
-        );
-    }
-
-    #[test]
-    fn javascript_limits_fall_back_to_defaults_when_unset() {
-        let request = StartJavascriptExecutionRequest {
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: String::from("ctx-js"),
-            argv: vec![String::from("/entry.mjs")],
-            env: std::collections::BTreeMap::new(),
-            cwd: std::path::PathBuf::from("/tmp"),
-            limits: JavascriptExecutionLimits::default(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        };
-
-        assert_eq!(
-            javascript_heap_limit_mb(&request),
-            0,
-            "0 selects the engine default heap"
-        );
-        assert_eq!(
-            javascript_sync_rpc_timeout(&request),
-            std::time::Duration::from_millis(NODE_SYNC_RPC_DEFAULT_WAIT_TIMEOUT_MS),
-        );
-        assert_eq!(
-            javascript_cpu_time_limit_ms(&request),
-            DEFAULT_V8_CPU_TIME_LIMIT_MS
-        );
-        assert_eq!(
-            javascript_wall_clock_limit_ms(&request),
-            DEFAULT_V8_WALL_CLOCK_LIMIT_MS
-        );
-        assert_eq!(
-            javascript_import_cache_materialize_timeout(&request),
-            std::time::Duration::from_millis(DEFAULT_NODE_IMPORT_CACHE_MATERIALIZE_TIMEOUT_MS)
-        );
-    }
-
-    #[test]
-    fn inline_code_module_detection_prefers_commonjs_when_import_only_appears_in_comment() {
-        let source = "// import { x } from 'y';\nmodule.exports = { foo: 1 };";
-        assert!(!inline_code_uses_module_mode(source));
-    }
-
-    #[test]
-    fn inline_code_module_detection_ignores_import_inside_string_literal() {
-        let source = "const msg = \"run: import x from 'y'\";\nmodule.exports.msg = msg;";
-        assert!(!inline_code_uses_module_mode(source));
-    }
-
-    #[test]
-    fn inline_code_module_detection_accepts_multiline_import_statements() {
-        let source = "import\n  { default as foo }\nfrom 'bar';\nconsole.log(foo);";
-        assert!(inline_code_uses_module_mode(source));
-    }
-
-    #[test]
-    fn inline_code_module_detection_accepts_real_esm_source() {
-        let source = "import { foo } from 'bar';\nexport const baz = 1;\nconsole.log(foo, baz);";
-        assert!(inline_code_uses_module_mode(source));
-    }
-
-    #[test]
-    fn inline_code_module_detection_is_deterministic_for_empty_comment_only_and_template_cases() {
-        assert!(!inline_code_uses_module_mode(""));
-        assert!(!inline_code_uses_module_mode(
-            "// import x from 'y';\n/* export const z = 1; */"
-        ));
-        assert!(!inline_code_uses_module_mode(
-            "const msg = `export const nope = 1;`;"
-        ));
-    }
-
-    #[test]
-    fn javascript_sync_rpc_timeout_writes_clear_error_response() {
-        let (reader_fd, writer_fd) = pipe2(OFlag::O_CLOEXEC).expect("create pipe");
-        let reader = File::from(reader_fd);
-        let writer = File::from(writer_fd);
-        let response_writer =
-            JavascriptSyncRpcResponseWriter::new(writer, Duration::from_millis(50));
-        let pending = Arc::new(Mutex::new(Some(PendingSyncRpcState::Pending(7))));
-
-        spawn_javascript_sync_rpc_timeout(
-            7,
-            Duration::from_millis(20),
-            pending.clone(),
-            Some(response_writer),
-        );
-
-        let mut line = String::new();
-        let mut reader = BufReader::new(reader);
-        reader.read_line(&mut line).expect("read timeout response");
-
-        let response: Value = serde_json::from_str(line.trim()).expect("parse timeout response");
-        assert_eq!(response["id"], Value::from(7));
-        assert_eq!(response["ok"], Value::from(false));
-        assert_eq!(
-            response["error"]["code"],
-            Value::String(String::from("ERR_AGENTOS_NODE_SYNC_RPC_TIMEOUT"))
-        );
-        assert!(response["error"]["message"]
-            .as_str()
-            .expect("timeout message")
-            .contains("timed out after 20ms"));
-        assert_eq!(
-            *pending.lock().expect("pending state lock"),
-            Some(PendingSyncRpcState::TimedOut(7))
-        );
-    }
-
-    #[test]
-    fn javascript_sync_rpc_response_writer_times_out_when_queue_is_full() {
-        let (sender, _receiver) = mpsc::sync_channel(1);
-        let writer = JavascriptSyncRpcResponseWriter {
-            sender,
-            timeout: Duration::from_millis(30),
-        };
-
-        writer
-            .send(b"first\n".to_vec())
-            .expect("queue first response");
-
-        let started = Instant::now();
-        let error = writer
-            .send(b"second\n".to_vec())
-            .expect_err("full queue should time out");
-        assert!(
-            started.elapsed() >= Duration::from_millis(30),
-            "send should wait for the configured timeout"
-        );
-        assert!(error
-            .to_string()
-            .contains("timed out after 30ms while queueing JavaScript sync RPC response"));
-    }
-
-    #[test]
-    fn javascript_wait_capture_rejects_output_over_limit() {
-        let mut stdout = vec![b'x'; JAVASCRIPT_CAPTURED_OUTPUT_LIMIT_BYTES - 1];
-        append_captured_output(&mut stdout, vec![b'y'], "stdout").expect("fill to limit");
-        assert_eq!(stdout.len(), JAVASCRIPT_CAPTURED_OUTPUT_LIMIT_BYTES);
-
-        let error = append_captured_output(&mut stdout, vec![b'z'], "stdout")
-            .expect_err("captured output over limit should fail");
-        assert!(matches!(
-            error,
-            JavascriptExecutionError::OutputBufferExceeded {
-                stream: "stdout",
-                limit: JAVASCRIPT_CAPTURED_OUTPUT_LIMIT_BYTES,
-            }
-        ));
-    }
-
-    #[test]
-    fn kernel_stdin_bridge_rejects_buffer_over_limit_and_closed_writes() {
-        let bridge = LocalKernelStdinBridge::default();
-        bridge
-            .write(&vec![b'x'; KERNEL_STDIN_BUFFER_LIMIT_BYTES])
-            .expect("fill stdin buffer to limit");
-
-        let error = bridge
-            .write(b"y")
-            .expect_err("stdin buffer over limit should fail");
-        assert!(matches!(error, JavascriptExecutionError::Stdin(_)));
-
-        let bridge = LocalKernelStdinBridge::default();
-        bridge.close();
-        let error = bridge
-            .write(b"x")
-            .expect_err("write after stdin close should fail");
-        assert!(matches!(error, JavascriptExecutionError::StdinClosed));
-    }
-
-    #[test]
-    fn javascript_event_sender_reports_closed_receiver() {
-        let (sender, receiver) = channel(1);
-        drop(receiver);
-        let host = V8RuntimeHost::spawn().expect("spawn V8 runtime host");
-        let session = host.session_handle(String::from("closed-event-sender-test"));
-        let gauge = register_queue(TrackedLimit::JavascriptEventChannel, 1);
-        assert!(!send_javascript_event(
-            &sender,
-            &session,
-            &gauge,
-            None,
-            JavascriptExecutionEvent::Exited(1)
-        ));
-    }
-
-    // Regression: a full event channel must apply backpressure, not destroy the
-    // session. The old code called `v8_session.destroy()` on the first `Full`,
-    // truncating the stream and tearing the session down.
-    #[test]
-    fn javascript_event_sender_backpressures_instead_of_destroying_when_full() {
-        let host = V8RuntimeHost::spawn().expect("spawn V8 runtime host");
-        let session_id = format!(
-            "event-overflow-{}",
-            SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("system time")
-                .as_nanos()
-        );
-        let _session_receiver = host
-            .register_session(&session_id)
-            .expect("register event overflow session");
-        let session = host.session_handle(session_id.clone());
-        let gauge = register_queue(TrackedLimit::JavascriptEventChannel, 1);
-        let (sender, mut event_receiver) = channel(1);
-
-        // Drain slowly on another thread so the producer is forced onto the
-        // blocking-backpressure path the old destroy-on-full code never reached.
-        let drainer = std::thread::spawn(move || {
-            let mut drained = 0usize;
-            while event_receiver.blocking_recv().is_some() {
-                drained += 1;
-                std::thread::sleep(std::time::Duration::from_millis(1));
-            }
-            drained
-        });
-
-        // Far more events than the 1-slot channel holds; every send must succeed.
-        const SENDS: usize = 16;
-        for _ in 0..SENDS {
-            assert!(send_javascript_event(
-                &sender,
-                &session,
-                &gauge,
-                None,
-                JavascriptExecutionEvent::Stdout(Vec::new())
-            ));
-        }
-        drop(sender);
-        let drained = drainer.join().expect("drainer thread panicked");
-        assert_eq!(drained, SENDS, "every event must survive backpressure");
-
-        // The session must NOT have been destroyed: it is still registered, so a
-        // re-registration attempt fails.
-        host.register_session(&session_id)
-            .expect_err("session must survive backpressure (not be destroyed)");
-        host.unregister_session(&session_id);
-    }
-
-    #[test]
-    fn javascript_event_sender_destroys_session_when_event_is_oversized() {
-        let host = V8RuntimeHost::spawn().expect("spawn V8 runtime host");
-        let session_id = format!(
-            "event-oversized-{}",
-            SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("system time")
-                .as_nanos()
-        );
-        let receiver = host
-            .register_session(&session_id)
-            .expect("register oversized event session");
-        let session = host.session_handle(session_id.clone());
-        let (sender, _event_receiver) = channel(JAVASCRIPT_EVENT_CHANNEL_CAPACITY);
-        let gauge = register_queue(
-            TrackedLimit::JavascriptEventChannel,
-            JAVASCRIPT_EVENT_CHANNEL_CAPACITY,
-        );
-
-        assert!(!send_javascript_event(
-            &sender,
-            &session,
-            &gauge,
-            None,
-            JavascriptExecutionEvent::Stdout(vec![0; JAVASCRIPT_EVENT_PAYLOAD_LIMIT_BYTES + 1])
-        ));
-
-        drop(receiver);
-        let recovered = host
-            .register_session(&session_id)
-            .expect("oversized event should destroy and deregister the session");
-        drop(recovered);
-        host.unregister_session(&session_id);
-    }
-
-    #[test]
-    fn internal_bridge_host_context_resolves_relative_module_path() {
-        let unique = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("system time")
-            .as_nanos();
-        let root = std::env::temp_dir().join(format!(
-            "secure-exec-module-bridge-{}-{unique}",
-            std::process::id()
-        ));
-        let bin_dir = root.join("node_modules/next/dist/bin");
-        let cli_dir = root.join("node_modules/next/dist/cli");
-        fs::create_dir_all(&bin_dir).expect("create bin dir");
-        fs::create_dir_all(&cli_dir).expect("create cli dir");
-        fs::write(
-            root.join("node_modules/next/package.json"),
-            r#"{"name":"next"}"#,
-        )
-        .expect("write package.json");
-        fs::write(bin_dir.join("next"), "#!/usr/bin/env node\n").expect("write next bin");
-        fs::write(cli_dir.join("next-build.js"), "module.exports = 1;\n")
-            .expect("write next-build.js");
-
-        let env = BTreeMap::new();
-        let result = handle_internal_bridge_call_from_host_context(
-            &root,
-            "/",
-            &env,
-            "_resolveModule",
-            &[
-                Value::String(String::from("../cli/next-build.js")),
-                Value::String(String::from("/node_modules/next/dist/bin/next")),
-                Value::String(String::from("import")),
-            ],
-        );
-
-        assert_eq!(
-            result,
-            Some(Value::String(String::from(
-                "/node_modules/next/dist/cli/next-build.js"
-            )))
-        );
-
-        fs::remove_dir_all(&root).expect("remove temp module tree");
-    }
-
-    #[test]
-    fn register_v8_session_deregisters_on_create_session_failure() {
-        let host = V8RuntimeHost::spawn().expect("spawn V8 runtime host");
-        let session_id = format!(
-            "v8-register-failure-{}",
-            SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("system time")
-                .as_nanos()
-        );
-
-        let error =
-            match register_v8_session(&host, session_id.clone(), 0, 0, 0, None, |_command| {
-                Err(std::io::Error::new(
-                    std::io::ErrorKind::BrokenPipe,
-                    "simulated CreateSession send failure",
-                ))
-            }) {
-                Ok(_) => panic!("register_v8_session should surface create-session send failures"),
-                Err(error) => error,
-            };
-
-        match error {
-            JavascriptExecutionError::Spawn(inner) => {
-                assert_eq!(inner.kind(), std::io::ErrorKind::BrokenPipe);
-            }
-            other => panic!("unexpected error: {other:?}"),
-        }
-        let receiver = host
-            .register_session(&session_id)
-            .expect("failed registration should not leak the session output receiver");
-        drop(receiver);
-        host.unregister_session(&session_id);
-    }
-
-    #[test]
-    fn javascript_cpu_time_limit_defaults_to_bounded_value() {
-        let request = StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js-default-cpu"),
-            context_id: String::from("ctx-js-default-cpu"),
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: std::path::PathBuf::from("/tmp"),
-            wasm_module_bytes: None,
-            inline_code: None,
-        };
-
-        assert_eq!(
-            javascript_cpu_time_limit_ms(&request),
-            30_000,
-            "unset JavaScript CPU budget must be bounded by default"
-        );
-    }
-
-    #[test]
-    fn javascript_execution_drop_keeps_normal_v8_session_cleanup() {
-        let temp = tempdir().expect("create temp dir");
-        let mut engine = JavascriptExecutionEngine::default();
-        let context = engine.create_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-drop-cleanup"),
-            bootstrap_module: None,
-            compile_cache_root: None,
-        });
-
-        let execution = engine
-            .start_execution(StartJavascriptExecutionRequest {
-                limits: Default::default(),
-                guest_runtime: Default::default(),
-                vm_id: String::from("vm-drop-cleanup"),
-                context_id: context.context_id,
-                argv: vec![String::from("./entry.mjs")],
-                env: BTreeMap::new(),
-                cwd: temp.path().to_path_buf(),
-                wasm_module_bytes: None,
-                inline_code: Some(String::from("globalThis.__agentOSDropCleanup = true;")),
-            })
-            .expect("start JavaScript execution");
-        let session_id = execution.v8_session.session_id().to_owned();
-        let host = engine.v8_host.as_ref().expect("shared V8 runtime host");
-
-        drop(execution);
-
-        let receiver = host
-            .register_session(&session_id)
-            .expect("execution drop should still destroy and deregister the session");
-        drop(receiver);
-        host.unregister_session(&session_id);
-    }
-
-    // --- Timer cancellation / cap regression tests (U4: H2 bridge timers, M3
-    // kernel timers). These assert the *safeguards firing* (delay clamped, timer
-    // entry reclaimed, callback suppressed) and never spawn unbounded threads. ---
-
-    #[test]
-    fn timer_delay_is_clamped_to_the_cap() {
-        // A guest can pass an arbitrarily large delay (up to u64::MAX ms); without
-        // a cap the timer wheel could retain a session Arc behind a deadline that
-        // is effectively forever away. The cap bounds that lifetime.
-        assert_eq!(
-            timer_delay_ms(Some(&json!(u64::MAX))),
-            MAX_TIMER_DELAY_MS,
-            "a u64::MAX delay must be clamped to MAX_TIMER_DELAY_MS"
-        );
-        assert_eq!(
-            timer_delay_ms(Some(&json!(1.0e308_f64))),
-            MAX_TIMER_DELAY_MS,
-            "an enormous float delay must be clamped to the cap"
-        );
-        assert_eq!(
-            timer_delay_ms(Some(&json!(MAX_TIMER_DELAY_MS + 1))),
-            MAX_TIMER_DELAY_MS,
-            "a delay one past the cap must clamp down to the cap"
-        );
-        // Below-cap values pass through unchanged so normal timers are unaffected.
-        assert_eq!(timer_delay_ms(Some(&json!(250))), 250);
-        assert_eq!(timer_delay_ms(Some(&json!(0))), 0);
-    }
-
-    #[test]
-    fn cleared_timer_is_suppressed_and_entry_reclaimed() {
-        // Mirrors what a woken bridge/kernel timer action does after waiting: it
-        // consults the shared map via `timer_should_fire`. When the entry has been
-        // removed (clear or session teardown), the callback must be suppressed.
-        let timers: Arc<Mutex<HashMap<u64, LocalTimerEntry>>> =
-            Arc::new(Mutex::new(HashMap::new()));
-        timers.lock().unwrap().insert(
-            7,
-            LocalTimerEntry {
-                delay_ms: 1_000,
-                generation: 0,
-                repeat: false,
-            },
-        );
-
-        // Simulate `kernelTimerClear` / teardown removing the entry before the
-        // action wakes.
-        timers.lock().unwrap().remove(&7);
-
-        assert!(
-            !timer_should_fire(&timers, 7, 0),
-            "a cleared timer must not fire"
-        );
-        assert!(
-            timers.lock().unwrap().is_empty(),
-            "tracking map stays empty after a cleared timer is evaluated"
-        );
-    }
-
-    #[test]
-    fn rearmed_timer_generation_mismatch_suppresses_stale_action() {
-        // The bridge/kernel timer action captures the generation at schedule time.
-        // If the timer is re-armed (generation bumped) before the stale action
-        // wakes, the stale action must observe the mismatch and suppress, while the
-        // entry survives for the live generation.
-        let timers: Arc<Mutex<HashMap<u64, LocalTimerEntry>>> =
-            Arc::new(Mutex::new(HashMap::new()));
-        timers.lock().unwrap().insert(
-            3,
-            LocalTimerEntry {
-                delay_ms: 10,
-                generation: 1,
-                repeat: false,
-            },
-        );
-
-        // Stale action captured generation 0; current entry is at generation 1.
-        assert!(
-            !timer_should_fire(&timers, 3, 0),
-            "a stale generation must be suppressed"
-        );
-        assert!(
-            timers.lock().unwrap().contains_key(&3),
-            "the live entry must survive a stale-generation evaluation"
-        );
-
-        // The matching (current) generation fires and reclaims the one-shot entry.
-        assert!(
-            timer_should_fire(&timers, 3, 1),
-            "the current generation must fire"
-        );
-        assert!(
-            timers.lock().unwrap().is_empty(),
-            "a fired one-shot timer must reclaim its id from the map"
-        );
-    }
-
-    #[test]
-    fn bridge_timer_registration_is_tracked_and_drop_clears_timers() {
-        // H2: the bridge-timer path must register its timer (so it is cancellable)
-        // before queuing a wheel action, and session teardown
-        // (dropping LocalBridgeState) must wipe the tracking map so in-flight timer
-        // actions are cancelled.
-        let mut state = LocalBridgeState::default();
-        // Observe the same map the queued actions would consult.
-        let timers = state.timers.clone();
-
-        let id_a = state.register_oneshot_timer(MAX_TIMER_DELAY_MS);
-        let id_b = state.register_oneshot_timer(500);
-        assert_ne!(id_a, id_b, "each bridge timer gets a fresh id");
-        assert_eq!(
-            timers.lock().unwrap().len(),
-            2,
-            "registered bridge timers are tracked in the shared map"
-        );
-        // A registered timer would fire for its captured generation (proving the
-        // entry is real and consultable) ...
-        assert!(timer_should_fire(&timers, id_a, 0));
-        // ... and seeding a still-pending one before teardown:
-        let id_c = state.register_oneshot_timer(1_000);
-
-        // Session teardown: dropping the bridge state must clear every timer so any
-        // queued action wakes to a missing entry and suppresses its callback.
-        drop(state);
-
-        assert!(
-            timers.lock().unwrap().is_empty(),
-            "dropping LocalBridgeState must clear the timers map on teardown"
-        );
-        assert!(
-            !timer_should_fire(&timers, id_c, 0),
-            "a pending bridge timer is suppressed after teardown"
-        );
-    }
-}
diff --git a/crates/execution/src/lib.rs b/crates/execution/src/lib.rs
index e06e240ca..1cd76b51c 100644
--- a/crates/execution/src/lib.rs
+++ b/crates/execution/src/lib.rs
@@ -1,62 +1,3 @@
-#![forbid(unsafe_code)]
+//! Compatibility shim for `agentos-execution`.
 
-//! Native execution plane scaffold for the secure-exec runtime migration.
-
-mod common;
-mod host_node;
-mod node_import_cache;
-mod runtime_support;
-mod signal;
-pub mod v8_host;
-pub mod v8_ipc;
-pub mod v8_runtime;
-
-pub mod benchmark;
-#[allow(dead_code, unused_imports)]
-pub mod javascript;
-pub mod python;
-pub mod wasm;
-
-pub use javascript::{
-    record_sync_bridge_request_enqueued, record_sync_bridge_request_observed,
-    CreateJavascriptContextRequest, GuestRuntimeConfig, JavascriptContext, JavascriptExecution,
-    JavascriptExecutionEngine, JavascriptExecutionError, JavascriptExecutionEvent,
-    JavascriptExecutionLimits, JavascriptExecutionResult, JavascriptSyncRpcRequest,
-    LocalModuleResolutionCache, LocalResolvedModuleFormat, ModuleFsReader, ModuleResolveMode,
-    ModuleResolver, StartJavascriptExecutionRequest,
-};
-pub use python::{
-    CreatePythonContextRequest, PythonContext, PythonExecution, PythonExecutionEngine,
-    PythonExecutionError, PythonExecutionEvent, PythonExecutionLimits, PythonExecutionResult,
-    PythonVfsRpcMethod, PythonVfsRpcRequest, PythonVfsRpcResponsePayload, PythonVfsRpcStat,
-    StartPythonExecutionRequest,
-};
-pub use secure_exec_bridge::GuestRuntime;
-pub use secure_exec_v8_runtime::execution::GuestModuleReader;
-pub use signal::{NodeSignalDispositionAction, NodeSignalHandlerRegistration};
-pub use wasm::{
-    CreateWasmContextRequest, NativeBinaryFormat, StartWasmExecutionRequest, WasmContext,
-    WasmExecution, WasmExecutionEngine, WasmExecutionError, WasmExecutionEvent,
-    WasmExecutionLimits, WasmExecutionResult, WasmPermissionTier,
-};
-
-pub trait NativeExecutionBridge: secure_exec_bridge::ExecutionBridge {}
-
-impl<T> NativeExecutionBridge for T where T: secure_exec_bridge::ExecutionBridge {}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct ExecutionScaffold {
-    pub package_name: &'static str,
-    pub kernel_package: &'static str,
-    pub target: &'static str,
-    pub planned_guest_runtimes: [GuestRuntime; 2],
-}
-
-pub fn scaffold() -> ExecutionScaffold {
-    ExecutionScaffold {
-        package_name: env!("CARGO_PKG_NAME"),
-        kernel_package: "secure-exec-kernel",
-        target: "native",
-        planned_guest_runtimes: [GuestRuntime::JavaScript, GuestRuntime::WebAssembly],
-    }
-}
+pub use agentos_execution::*;
diff --git a/crates/execution/src/node_import_cache.rs b/crates/execution/src/node_import_cache.rs
deleted file mode 100644
index 434deec40..000000000
--- a/crates/execution/src/node_import_cache.rs
+++ /dev/null
@@ -1,11394 +0,0 @@
-use std::collections::BTreeSet;
-use std::env;
-use std::fs;
-use std::io;
-use std::path::{Path, PathBuf};
-use std::sync::atomic::{AtomicBool, AtomicU64, Ordering};
-use std::sync::{Arc, Mutex, OnceLock};
-use std::time::Duration;
-
-pub(crate) const NODE_IMPORT_CACHE_DEBUG_ENV: &str = "AGENTOS_NODE_IMPORT_CACHE_DEBUG";
-pub(crate) const NODE_IMPORT_CACHE_METRICS_PREFIX: &str = "__AGENTOS_NODE_IMPORT_CACHE_METRICS__:";
-pub(crate) const NODE_IMPORT_CACHE_ASSET_ROOT_ENV: &str = "AGENTOS_NODE_IMPORT_CACHE_ASSET_ROOT";
-
-const NODE_IMPORT_CACHE_PATH_ENV: &str = "AGENTOS_NODE_IMPORT_CACHE_PATH";
-const NODE_IMPORT_CACHE_LOADER_PATH_ENV: &str = "AGENTOS_NODE_IMPORT_CACHE_LOADER_PATH";
-const NODE_IMPORT_CACHE_SCHEMA_VERSION: &str = "1";
-const NODE_IMPORT_CACHE_LOADER_VERSION: &str = "8";
-const NODE_IMPORT_CACHE_ASSET_VERSION: &str = "85";
-const NODE_IMPORT_CACHE_DIR_PREFIX: &str = "agentos-node-import-cache";
-const DEFAULT_NODE_IMPORT_CACHE_MATERIALIZE_TIMEOUT: Duration = Duration::from_secs(30);
-const PYODIDE_DIST_DIR: &str = "pyodide-dist";
-const SECURE_EXEC_BUILTIN_SPECIFIER_PREFIX: &str = "secure-exec:builtin/";
-const SECURE_EXEC_POLYFILL_SPECIFIER_PREFIX: &str = "secure-exec:polyfill/";
-const BUNDLED_PYODIDE_MJS: &[u8] = include_bytes!("../assets/pyodide/pyodide.mjs");
-// Large Pyodide assets are excluded from the published crate and staged into
-// OUT_DIR by build.rs (copied from `assets/pyodide/` in-tree, or downloaded
-// from the release CDN when building the published crate).
-const BUNDLED_PYODIDE_ASM_JS: &[u8] =
-    include_bytes!(concat!(env!("OUT_DIR"), "/pyodide/pyodide.asm.js"));
-const BUNDLED_PYODIDE_ASM_WASM: &[u8] =
-    include_bytes!(concat!(env!("OUT_DIR"), "/pyodide/pyodide.asm.wasm"));
-const BUNDLED_PYODIDE_LOCK: &[u8] = include_bytes!("../assets/pyodide/pyodide-lock.json");
-const BUNDLED_PYTHON_STDLIB_ZIP: &[u8] =
-    include_bytes!(concat!(env!("OUT_DIR"), "/pyodide/python_stdlib.zip"));
-const BUNDLED_NUMPY_WHL: &[u8] = include_bytes!(concat!(
-    env!("OUT_DIR"),
-    "/pyodide/numpy-2.2.5-cp313-cp313-pyodide_2025_0_wasm32.whl"
-));
-const BUNDLED_PANDAS_WHL: &[u8] = include_bytes!(concat!(
-    env!("OUT_DIR"),
-    "/pyodide/pandas-2.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl"
-));
-const BUNDLED_PYTHON_DATEUTIL_WHL: &[u8] =
-    include_bytes!("../assets/pyodide/python_dateutil-2.9.0.post0-py2.py3-none-any.whl");
-const BUNDLED_PYTZ_WHL: &[u8] =
-    include_bytes!("../assets/pyodide/pytz-2025.2-py2.py3-none-any.whl");
-const BUNDLED_SIX_WHL: &[u8] = include_bytes!("../assets/pyodide/six-1.17.0-py2.py3-none-any.whl");
-const BUNDLED_MICROPIP_WHL: &[u8] =
-    include_bytes!("../assets/pyodide/micropip-0.11.0-py3-none-any.whl");
-const BUNDLED_CLICK_WHL: &[u8] = include_bytes!("../assets/pyodide/click-8.3.1-py3-none-any.whl");
-const NODE_PYTHON_RUNNER_SOURCE: &str = include_str!("../assets/runners/python-runner.mjs");
-
-static CLEANED_NODE_IMPORT_CACHE_ROOTS: OnceLock<Mutex<BTreeSet<PathBuf>>> = OnceLock::new();
-#[cfg(test)]
-static NODE_IMPORT_CACHE_TEST_MATERIALIZE_DELAY_MS: AtomicU64 = AtomicU64::new(0);
-
-#[derive(Clone, Copy)]
-struct BundledPyodidePackageAsset {
-    file_name: &'static str,
-    bytes: &'static [u8],
-}
-
-const BUNDLED_PYODIDE_PACKAGE_ASSETS: &[BundledPyodidePackageAsset] = &[
-    BundledPyodidePackageAsset {
-        file_name: "numpy-2.2.5-cp313-cp313-pyodide_2025_0_wasm32.whl",
-        bytes: BUNDLED_NUMPY_WHL,
-    },
-    BundledPyodidePackageAsset {
-        file_name: "pandas-2.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl",
-        bytes: BUNDLED_PANDAS_WHL,
-    },
-    BundledPyodidePackageAsset {
-        file_name: "python_dateutil-2.9.0.post0-py2.py3-none-any.whl",
-        bytes: BUNDLED_PYTHON_DATEUTIL_WHL,
-    },
-    BundledPyodidePackageAsset {
-        file_name: "pytz-2025.2-py2.py3-none-any.whl",
-        bytes: BUNDLED_PYTZ_WHL,
-    },
-    BundledPyodidePackageAsset {
-        file_name: "six-1.17.0-py2.py3-none-any.whl",
-        bytes: BUNDLED_SIX_WHL,
-    },
-    BundledPyodidePackageAsset {
-        file_name: "micropip-0.11.0-py3-none-any.whl",
-        bytes: BUNDLED_MICROPIP_WHL,
-    },
-    BundledPyodidePackageAsset {
-        file_name: "click-8.3.1-py3-none-any.whl",
-        bytes: BUNDLED_CLICK_WHL,
-    },
-];
-const NODE_IMPORT_CACHE_LOADER_TEMPLATE: &str = r#"
-import crypto from 'node:crypto';
-import fs from 'node:fs';
-import path from 'node:path';
-import { fileURLToPath, pathToFileURL } from 'node:url';
-
-const GUEST_PATH_MAPPINGS = parseGuestPathMappings(process.env.AGENTOS_GUEST_PATH_MAPPINGS);
-const ALLOWED_BUILTINS = new Set(parseJsonArray(process.env.AGENTOS_ALLOWED_NODE_BUILTINS));
-const CACHE_PATH = process.env.__NODE_IMPORT_CACHE_PATH_ENV__;
-const CACHE_ROOT = CACHE_PATH ? path.dirname(CACHE_PATH) : null;
-const GUEST_INTERNAL_CACHE_ROOT = '/.agentos/node-import-cache';
-const HOST_CWD = process.cwd();
-const DEFAULT_GUEST_CWD =
-  typeof process.env.PWD === 'string' &&
-  process.env.PWD.startsWith('/')
-    ? path.posix.normalize(process.env.PWD)
-    : typeof (globalThis.__agentOSVirtualOs||{}).homedir === 'string' &&
-        (globalThis.__agentOSVirtualOs||{}).homedir.startsWith('/')
-      ? path.posix.normalize((globalThis.__agentOSVirtualOs||{}).homedir)
-    : '/root';
-const UNMAPPED_GUEST_PATH = '/unknown';
-const PROJECTED_SOURCE_CACHE_ROOT = CACHE_PATH
-  ? path.join(path.dirname(CACHE_PATH), 'projected-sources')
-  : null;
-const ASSET_ROOT = process.env.__NODE_IMPORT_CACHE_ASSET_ROOT_ENV__;
-const DEBUG_ENABLED = process.env.__NODE_IMPORT_CACHE_DEBUG_ENV__ === '1';
-const CONTROL_PIPE_FD = parseControlPipeFd(process.env.AGENTOS_CONTROL_PIPE_FD);
-const SCHEMA_VERSION = '__NODE_IMPORT_CACHE_SCHEMA_VERSION__';
-const LOADER_VERSION = '__NODE_IMPORT_CACHE_LOADER_VERSION__';
-const ASSET_VERSION = '__NODE_IMPORT_CACHE_ASSET_VERSION__';
-const MAX_CACHE_RECORD_ENTRIES = 512;
-const MAX_CACHE_KEY_BYTES = 4096;
-const MAX_CACHE_VALUE_BYTES = 16 * 1024;
-const MAX_CACHE_STATE_BYTES = 4 * 1024 * 1024;
-const BUILTIN_PREFIX = '__SECURE_EXEC_BUILTIN_SPECIFIER_PREFIX__';
-const POLYFILL_PREFIX = '__SECURE_EXEC_POLYFILL_SPECIFIER_PREFIX__';
-const FS_ASSET_SPECIFIER = `${BUILTIN_PREFIX}fs`;
-const FS_PROMISES_ASSET_SPECIFIER = `${BUILTIN_PREFIX}fs-promises`;
-const CHILD_PROCESS_ASSET_SPECIFIER = `${BUILTIN_PREFIX}child-process`;
-const NET_ASSET_SPECIFIER = `${BUILTIN_PREFIX}net`;
-const DGRAM_ASSET_SPECIFIER = `${BUILTIN_PREFIX}dgram`;
-const DNS_ASSET_SPECIFIER = `${BUILTIN_PREFIX}dns`;
-const DNS_PROMISES_ASSET_SPECIFIER = `${BUILTIN_PREFIX}dns-promises`;
-const HTTP_ASSET_SPECIFIER = `${BUILTIN_PREFIX}http`;
-const HTTP2_ASSET_SPECIFIER = `${BUILTIN_PREFIX}http2`;
-const HTTPS_ASSET_SPECIFIER = `${BUILTIN_PREFIX}https`;
-const TLS_ASSET_SPECIFIER = `${BUILTIN_PREFIX}tls`;
-const OS_ASSET_SPECIFIER = `${BUILTIN_PREFIX}os`;
-const DENIED_BUILTINS = new Set([
-  'child_process',
-  'cluster',
-  'dgram',
-  'dns',
-  'dns/promises',
-  'http',
-  'http2',
-  'https',
-  'inspector',
-  'module',
-  'net',
-  'tls',
-  'trace_events',
-  'v8',
-  'vm',
-  'worker_threads',
-].filter((name) => !ALLOWED_BUILTINS.has(name)));
-
-let cacheState = loadCacheState();
-let dirty = false;
-let cacheWriteError = null;
-const metrics = {
-  resolveHits: 0,
-  resolveMisses: 0,
-  packageTypeHits: 0,
-  packageTypeMisses: 0,
-  moduleFormatHits: 0,
-  moduleFormatMisses: 0,
-  sourceHits: 0,
-  sourceMisses: 0,
-};
-
-export async function resolve(specifier, context, nextResolve) {
-  const guestResolvedPath = resolveGuestSpecifier(specifier, context);
-  if (guestResolvedPath) {
-    const guestUrl = pathToFileURL(guestResolvedPath).href;
-    const format = lookupModuleFormat(guestUrl);
-    flushCacheState();
-    emitMetrics();
-    return {
-      shortCircuit: true,
-      url: guestUrl,
-      ...(format && format !== 'builtin' ? { format } : {}),
-    };
-  }
-
-  const key = createResolutionKey(specifier, context);
-  const cached = cacheState.resolutions[key];
-
-  if (cached && validateResolutionEntry(cached)) {
-    metrics.resolveHits += 1;
-    const response = {
-      shortCircuit: true,
-      url: cached.resolvedUrl,
-    };
-
-    if (cached.format) {
-      response.format = cached.format;
-    }
-
-    flushCacheState();
-    emitMetrics();
-    return response;
-  }
-
-  metrics.resolveMisses += 1;
-
-  const asset = resolveSecureExecAsset(specifier);
-  if (asset) {
-    cacheState.resolutions[key] = {
-      kind: 'explicit-file',
-      resolvedUrl: asset.url,
-      format: 'module',
-      resolvedFilePath: asset.filePath,
-    };
-    dirty = true;
-    flushCacheState();
-    emitMetrics();
-    return {
-      shortCircuit: true,
-      url: asset.url,
-      format: 'module',
-    };
-  }
-
-  const builtinAsset = resolveBuiltinAsset(specifier, context);
-  if (builtinAsset) {
-    cacheState.resolutions[key] = {
-      kind: 'explicit-file',
-      resolvedUrl: builtinAsset.url,
-      format: 'module',
-      resolvedFilePath: builtinAsset.filePath,
-    };
-    dirty = true;
-    flushCacheState();
-    emitMetrics();
-    return {
-      shortCircuit: true,
-      url: builtinAsset.url,
-      format: 'module',
-    };
-  }
-
-  const deniedBuiltin = resolveDeniedBuiltin(specifier);
-  if (deniedBuiltin) {
-    cacheState.resolutions[key] = {
-      kind: 'explicit-file',
-      resolvedUrl: deniedBuiltin.url,
-      format: 'module',
-      resolvedFilePath: deniedBuiltin.filePath,
-    };
-    dirty = true;
-    flushCacheState();
-    emitMetrics();
-    return {
-      shortCircuit: true,
-      url: deniedBuiltin.url,
-      format: 'module',
-    };
-  }
-
-  const translatedContext = translateContextParentUrl(context);
-  let resolved;
-  try {
-    resolved = await nextResolve(specifier, translatedContext);
-  } catch (error) {
-    flushCacheState();
-    emitMetrics();
-    throw translateErrorToGuest(error);
-  }
-  const translatedUrl = translateResolvedUrlToGuest(resolved.url);
-  const translatedResolved =
-    translatedUrl === resolved.url ? resolved : { ...resolved, url: translatedUrl };
-  const entry = buildResolutionEntry(specifier, context, translatedResolved);
-  if (entry) {
-    cacheState.resolutions[key] = entry;
-    dirty = true;
-  }
-
-  if (entry && entry.format && resolved.format == null) {
-    flushCacheState();
-    emitMetrics();
-    return {
-      ...translatedResolved,
-      format: entry.format,
-    };
-  }
-
-  flushCacheState();
-  emitMetrics();
-  return translatedResolved;
-}
-
-export async function load(url, context, nextLoad) {
-  try {
-    const filePath = filePathFromUrl(url);
-    const format = lookupModuleFormat(url) ?? context.format;
-
-    if (!filePath || !format || format === 'builtin') {
-      return await nextLoad(url, context);
-    }
-
-    const projectedPackageSource = loadProjectedPackageSource(url, filePath, format);
-    if (projectedPackageSource != null) {
-      flushCacheState();
-      emitMetrics();
-      return {
-        shortCircuit: true,
-        format,
-        source: projectedPackageSource,
-      };
-    }
-
-    const source =
-      format === 'wasm'
-        ? fs.readFileSync(filePath)
-        : rewriteBuiltinImports(fs.readFileSync(filePath, 'utf8'), filePath);
-
-    return {
-      shortCircuit: true,
-      format,
-      source,
-    };
-  } catch (error) {
-    flushCacheState();
-    emitMetrics();
-    throw translateErrorToGuest(error);
-  }
-}
-
-function loadCacheState() {
-  if (!CACHE_PATH) {
-    return emptyCacheState();
-  }
-
-  try {
-    const stat = fs.statSync(CACHE_PATH);
-    if (!stat.isFile() || stat.size > MAX_CACHE_STATE_BYTES) {
-      return emptyCacheState();
-    }
-    const parsed = JSON.parse(fs.readFileSync(CACHE_PATH, 'utf8'));
-    if (!isCompatibleCacheState(parsed)) {
-      return emptyCacheState();
-    }
-
-    return normalizeCacheState(parsed);
-  } catch {
-    return emptyCacheState();
-  }
-}
-
-function flushCacheState() {
-  if (!CACHE_PATH || !dirty) {
-    return;
-  }
-
-  try {
-    fs.mkdirSync(path.dirname(CACHE_PATH), { recursive: true });
-
-    let merged = cacheState;
-    try {
-      const existingStat = fs.statSync(CACHE_PATH);
-      if (existingStat.isFile() && existingStat.size <= MAX_CACHE_STATE_BYTES) {
-        const existing = JSON.parse(fs.readFileSync(CACHE_PATH, 'utf8'));
-        if (isCompatibleCacheState(existing)) {
-          merged = mergeCacheStates(normalizeCacheState(existing), cacheState);
-        }
-      }
-    } catch {
-      // Ignore missing or unreadable prior state and replace it with the in-memory view.
-    }
-
-    merged = pruneCacheState(merged);
-    let serialized = JSON.stringify(merged);
-    if (byteLengthUtf8(serialized) > MAX_CACHE_STATE_BYTES) {
-      merged = pruneCacheState(merged, Math.floor(MAX_CACHE_RECORD_ENTRIES / 4));
-      serialized = JSON.stringify(merged);
-    }
-    if (byteLengthUtf8(serialized) > MAX_CACHE_STATE_BYTES) {
-      merged = emptyCacheState();
-      serialized = JSON.stringify(merged);
-    }
-
-    const tempPath = `${CACHE_PATH}.${process.pid}.${Date.now()}.tmp`;
-    fs.writeFileSync(tempPath, serialized);
-    fs.renameSync(tempPath, CACHE_PATH);
-    cacheState = merged;
-    pruneProjectedSourceFiles();
-    dirty = false;
-  } catch (error) {
-    cacheWriteError = error instanceof Error ? error.message : String(error);
-  }
-}
-
-function emitMetrics() {
-  if (!DEBUG_ENABLED) {
-    return;
-  }
-
-  const payload = cacheWriteError
-    ? { ...metrics, cacheWriteError }
-    : metrics;
-
-  emitControlMessage({ type: 'node_import_cache_metrics', metrics: payload });
-}
-
-function parseControlPipeFd(value) {
-  if (typeof value !== 'string' || value.trim() === '') {
-    return null;
-  }
-
-  const parsed = Number.parseInt(value, 10);
-  return Number.isInteger(parsed) && parsed >= 3 ? parsed : null;
-}
-
-function emitControlMessage(message) {
-  if (CONTROL_PIPE_FD == null) {
-    if (
-      message?.type === 'signal_state' &&
-      typeof process?.stdout?.write === 'function'
-    ) {
-      try {
-        process.stdout.write(`__AGENTOS_WASM_SIGNAL_STATE__:${JSON.stringify(message)}\n`);
-      } catch {
-        // Ignore control-channel fallback failures during teardown.
-      }
-    }
-    return;
-  }
-
-  try {
-    fs.writeSync(CONTROL_PIPE_FD, `${JSON.stringify(message)}\n`);
-  } catch {
-    if (
-      message?.type === 'signal_state' &&
-      typeof process?.stdout?.write === 'function'
-    ) {
-      try {
-        process.stdout.write(`__AGENTOS_WASM_SIGNAL_STATE__:${JSON.stringify(message)}\n`);
-      } catch {
-        // Ignore control-channel fallback failures during teardown.
-      }
-    }
-  }
-}
-
-function emptyCacheState() {
-  return {
-    schemaVersion: SCHEMA_VERSION,
-    loaderVersion: LOADER_VERSION,
-    assetVersion: ASSET_VERSION,
-    nodeVersion: process.version,
-    resolutions: {},
-    packageTypes: {},
-    moduleFormats: {},
-    projectedSources: {},
-  };
-}
-
-function isCompatibleCacheState(value) {
-  return (
-    isRecord(value) &&
-    value.schemaVersion === SCHEMA_VERSION &&
-    value.loaderVersion === LOADER_VERSION &&
-    value.assetVersion === ASSET_VERSION &&
-    value.nodeVersion === process.version
-  );
-}
-
-function normalizeCacheState(value) {
-  return pruneCacheState({
-    ...emptyCacheState(),
-    ...value,
-    resolutions: isRecord(value.resolutions) ? value.resolutions : {},
-    packageTypes: isRecord(value.packageTypes) ? value.packageTypes : {},
-    moduleFormats: isRecord(value.moduleFormats) ? value.moduleFormats : {},
-    projectedSources: isRecord(value.projectedSources) ? value.projectedSources : {},
-  });
-}
-
-function mergeCacheStates(base, current) {
-  return pruneCacheState({
-    ...emptyCacheState(),
-    resolutions: {
-      ...base.resolutions,
-      ...current.resolutions,
-    },
-    packageTypes: {
-      ...base.packageTypes,
-      ...current.packageTypes,
-    },
-    moduleFormats: {
-      ...base.moduleFormats,
-      ...current.moduleFormats,
-    },
-    projectedSources: {
-      ...base.projectedSources,
-      ...current.projectedSources,
-    },
-  });
-}
-
-function pruneCacheState(state, maxEntries = MAX_CACHE_RECORD_ENTRIES) {
-  return {
-    ...emptyCacheState(),
-    ...state,
-    resolutions: pruneCacheRecord(state.resolutions, maxEntries),
-    packageTypes: pruneCacheRecord(state.packageTypes, maxEntries),
-    moduleFormats: pruneCacheRecord(state.moduleFormats, maxEntries),
-    projectedSources: pruneCacheRecord(state.projectedSources, maxEntries),
-  };
-}
-
-function pruneCacheRecord(record, maxEntries) {
-  if (!isRecord(record)) {
-    return {};
-  }
-
-  const entries = [];
-  for (const [key, value] of Object.entries(record)) {
-    if (
-      byteLengthUtf8(key) <= MAX_CACHE_KEY_BYTES &&
-      cacheValueLength(value) <= MAX_CACHE_VALUE_BYTES
-    ) {
-      entries.push([key, value]);
-    }
-  }
-
-  return Object.fromEntries(entries.slice(-maxEntries));
-}
-
-function cacheValueLength(value) {
-  try {
-    return byteLengthUtf8(JSON.stringify(value));
-  } catch {
-    return MAX_CACHE_VALUE_BYTES + 1;
-  }
-}
-
-function byteLengthUtf8(value) {
-  return Buffer.byteLength(String(value), 'utf8');
-}
-
-function pruneProjectedSourceFiles() {
-  if (!PROJECTED_SOURCE_CACHE_ROOT) {
-    return;
-  }
-
-  const retained = new Set();
-  for (const entry of Object.values(cacheState.projectedSources)) {
-    if (
-      isRecord(entry) &&
-      typeof entry.cachedPath === 'string' &&
-      path.dirname(entry.cachedPath) === PROJECTED_SOURCE_CACHE_ROOT
-    ) {
-      retained.add(path.resolve(entry.cachedPath));
-    }
-  }
-
-  let entries;
-  try {
-    entries = fs.readdirSync(PROJECTED_SOURCE_CACHE_ROOT, { withFileTypes: true });
-  } catch {
-    return;
-  }
-
-  for (const entry of entries) {
-    if (!entry.isFile()) {
-      continue;
-    }
-    const filePath = path.resolve(PROJECTED_SOURCE_CACHE_ROOT, entry.name);
-    if (!retained.has(filePath)) {
-      try {
-        fs.unlinkSync(filePath);
-      } catch {
-        // Best-effort cleanup. A failed unlink should not break module loading.
-      }
-    }
-  }
-}
-
-function loadProjectedPackageSource(url, filePath, format) {
-  if (
-    format === 'wasm' ||
-    !isProjectedPackageSource(filePath) ||
-    !PROJECTED_SOURCE_CACHE_ROOT
-  ) {
-    return null;
-  }
-
-  const cached = cacheState.projectedSources[url];
-  if (cached && validateProjectedSourceEntry(cached, filePath, format)) {
-    metrics.sourceHits += 1;
-    return fs.readFileSync(cached.cachedPath, 'utf8');
-  }
-
-  metrics.sourceMisses += 1;
-
-  const stat = statForPath(filePath);
-  if (!stat) {
-    return null;
-  }
-
-  const source = rewriteBuiltinImports(fs.readFileSync(filePath, 'utf8'), filePath);
-  const cacheKey = hashString(
-    JSON.stringify({
-      url,
-      format,
-      size: stat.size,
-      mtimeMs: stat.mtimeMs,
-    }),
-  );
-  const extension = path.extname(filePath) || '.js';
-  const cachedPath = path.join(
-    PROJECTED_SOURCE_CACHE_ROOT,
-    `${cacheKey}${extension}.cached`,
-  );
-  fs.mkdirSync(path.dirname(cachedPath), { recursive: true });
-  fs.writeFileSync(cachedPath, source);
-
-  cacheState.projectedSources[url] = {
-    kind: 'text',
-    filePath,
-    format,
-    cachedPath,
-    size: stat.size,
-    mtimeMs: stat.mtimeMs,
-  };
-  dirty = true;
-  return source;
-}
-
-function resolveSecureExecAsset(specifier) {
-  if (typeof specifier !== 'string' || !ASSET_ROOT) {
-    return null;
-  }
-
-  if (specifier.startsWith(BUILTIN_PREFIX)) {
-    return assetModuleDescriptor(
-      path.join(
-        ASSET_ROOT,
-        'builtins',
-        `${sanitizeAssetName(specifier.slice(BUILTIN_PREFIX.length))}.mjs`,
-      ),
-    );
-  }
-
-  if (specifier.startsWith(POLYFILL_PREFIX)) {
-    return assetModuleDescriptor(
-      path.join(
-        ASSET_ROOT,
-        'polyfills',
-        `${sanitizeAssetName(specifier.slice(POLYFILL_PREFIX.length))}.mjs`,
-      ),
-    );
-  }
-
-  return null;
-}
-
-function rewriteBuiltinImports(source, filePath) {
-  if (typeof source !== 'string' || isAssetPath(filePath)) {
-    return source;
-  }
-
-  let rewritten = source;
-
-  for (const specifier of ['node:fs/promises', 'fs/promises']) {
-    rewritten = replaceBuiltinImportSpecifier(
-      rewritten,
-      specifier,
-      FS_PROMISES_ASSET_SPECIFIER,
-    );
-    rewritten = replaceBuiltinDynamicImportSpecifier(
-      rewritten,
-      specifier,
-      FS_PROMISES_ASSET_SPECIFIER,
-    );
-  }
-
-  for (const specifier of ['node:fs', 'fs']) {
-    rewritten = replaceBuiltinImportSpecifier(
-      rewritten,
-      specifier,
-      FS_ASSET_SPECIFIER,
-    );
-    rewritten = replaceBuiltinDynamicImportSpecifier(
-      rewritten,
-      specifier,
-      FS_ASSET_SPECIFIER,
-    );
-  }
-
-  if (ALLOWED_BUILTINS.has('child_process')) {
-    for (const specifier of ['node:child_process', 'child_process']) {
-      rewritten = replaceBuiltinImportSpecifier(
-        rewritten,
-        specifier,
-        CHILD_PROCESS_ASSET_SPECIFIER,
-      );
-      rewritten = replaceBuiltinDynamicImportSpecifier(
-        rewritten,
-        specifier,
-        CHILD_PROCESS_ASSET_SPECIFIER,
-      );
-    }
-  }
-
-  if (ALLOWED_BUILTINS.has('net')) {
-    for (const specifier of ['node:net', 'net']) {
-      rewritten = replaceBuiltinImportSpecifier(
-        rewritten,
-        specifier,
-        NET_ASSET_SPECIFIER,
-      );
-      rewritten = replaceBuiltinDynamicImportSpecifier(
-        rewritten,
-        specifier,
-        NET_ASSET_SPECIFIER,
-      );
-    }
-  }
-
-  if (ALLOWED_BUILTINS.has('dgram')) {
-    for (const specifier of ['node:dgram', 'dgram']) {
-      rewritten = replaceBuiltinImportSpecifier(
-        rewritten,
-        specifier,
-        DGRAM_ASSET_SPECIFIER,
-      );
-      rewritten = replaceBuiltinDynamicImportSpecifier(
-        rewritten,
-        specifier,
-        DGRAM_ASSET_SPECIFIER,
-      );
-    }
-  }
-
-  if (ALLOWED_BUILTINS.has('dns')) {
-    for (const specifier of ['node:dns/promises', 'dns/promises']) {
-      rewritten = replaceBuiltinImportSpecifier(
-        rewritten,
-        specifier,
-        DNS_PROMISES_ASSET_SPECIFIER,
-      );
-      rewritten = replaceBuiltinDynamicImportSpecifier(
-        rewritten,
-        specifier,
-        DNS_PROMISES_ASSET_SPECIFIER,
-      );
-    }
-    for (const specifier of ['node:dns', 'dns']) {
-      rewritten = replaceBuiltinImportSpecifier(
-        rewritten,
-        specifier,
-        DNS_ASSET_SPECIFIER,
-      );
-      rewritten = replaceBuiltinDynamicImportSpecifier(
-        rewritten,
-        specifier,
-        DNS_ASSET_SPECIFIER,
-      );
-    }
-  }
-
-  if (ALLOWED_BUILTINS.has('http')) {
-    for (const specifier of ['node:http', 'http']) {
-      rewritten = replaceBuiltinImportSpecifier(
-        rewritten,
-        specifier,
-        HTTP_ASSET_SPECIFIER,
-      );
-      rewritten = replaceBuiltinDynamicImportSpecifier(
-        rewritten,
-        specifier,
-        HTTP_ASSET_SPECIFIER,
-      );
-    }
-  }
-
-  if (ALLOWED_BUILTINS.has('http2')) {
-    for (const specifier of ['node:http2', 'http2']) {
-      rewritten = replaceBuiltinImportSpecifier(
-        rewritten,
-        specifier,
-        HTTP2_ASSET_SPECIFIER,
-      );
-      rewritten = replaceBuiltinDynamicImportSpecifier(
-        rewritten,
-        specifier,
-        HTTP2_ASSET_SPECIFIER,
-      );
-    }
-  }
-
-  if (ALLOWED_BUILTINS.has('https')) {
-    for (const specifier of ['node:https', 'https']) {
-      rewritten = replaceBuiltinImportSpecifier(
-        rewritten,
-        specifier,
-        HTTPS_ASSET_SPECIFIER,
-      );
-      rewritten = replaceBuiltinDynamicImportSpecifier(
-        rewritten,
-        specifier,
-        HTTPS_ASSET_SPECIFIER,
-      );
-    }
-  }
-
-  if (ALLOWED_BUILTINS.has('tls')) {
-    for (const specifier of ['node:tls', 'tls']) {
-      rewritten = replaceBuiltinImportSpecifier(
-        rewritten,
-        specifier,
-        TLS_ASSET_SPECIFIER,
-      );
-      rewritten = replaceBuiltinDynamicImportSpecifier(
-        rewritten,
-        specifier,
-        TLS_ASSET_SPECIFIER,
-      );
-    }
-  }
-
-  if (ALLOWED_BUILTINS.has('os')) {
-    for (const specifier of ['node:os', 'os']) {
-      rewritten = replaceBuiltinImportSpecifier(
-        rewritten,
-        specifier,
-        OS_ASSET_SPECIFIER,
-      );
-      rewritten = replaceBuiltinDynamicImportSpecifier(
-        rewritten,
-        specifier,
-        OS_ASSET_SPECIFIER,
-      );
-    }
-  }
-
-  return rewritten;
-}
-
-function replaceBuiltinImportSpecifier(source, specifier, replacement) {
-  const pattern = new RegExp(
-    `(\\bfrom\\s*)(['"])${escapeRegExp(specifier)}\\2`,
-    'g',
-  );
-  return source.replace(pattern, `$1$2${replacement}$2`);
-}
-
-function replaceBuiltinDynamicImportSpecifier(source, specifier, replacement) {
-  const pattern = new RegExp(
-    `(\\bimport\\s*\\(\\s*)(['"])${escapeRegExp(specifier)}\\2(\\s*\\))`,
-    'g',
-  );
-  return source.replace(pattern, `$1$2${replacement}$2$3`);
-}
-
-function isAssetPath(filePath) {
-  return (
-    typeof filePath === 'string' &&
-    typeof ASSET_ROOT === 'string' &&
-    (filePath === ASSET_ROOT || filePath.startsWith(`${ASSET_ROOT}${path.sep}`))
-  );
-}
-
-function resolveDeniedBuiltin(specifier) {
-  if (typeof specifier !== 'string' || !ASSET_ROOT) {
-    return null;
-  }
-
-  const normalized =
-    specifier.startsWith('node:') ? specifier.slice('node:'.length) : specifier;
-  if (!DENIED_BUILTINS.has(normalized)) {
-    return null;
-  }
-
-  return assetModuleDescriptor(
-    path.join(ASSET_ROOT, 'denied', `${sanitizeAssetName(normalized)}.mjs`),
-  );
-}
-
-function resolveBuiltinAsset(specifier, context) {
-  if (
-    typeof specifier !== 'string' ||
-    !ASSET_ROOT ||
-    !specifier.startsWith('node:')
-  ) {
-    return null;
-  }
-
-  if (
-    typeof context?.parentURL === 'string' &&
-    (context.parentURL.startsWith(BUILTIN_PREFIX) ||
-      context.parentURL.startsWith(POLYFILL_PREFIX))
-  ) {
-    return null;
-  }
-
-  const parentPath = filePathFromUrl(context?.parentURL);
-  if (parentPath && isAssetPath(parentPath)) {
-    return null;
-  }
-
-  const normalized = specifier.slice('node:'.length);
-  switch (normalized) {
-    case 'fs':
-      return assetModuleDescriptor(path.join(ASSET_ROOT, 'builtins', 'fs.mjs'));
-    case 'fs/promises':
-      return assetModuleDescriptor(
-        path.join(ASSET_ROOT, 'builtins', 'fs-promises.mjs'),
-      );
-    case 'async_hooks':
-      return assetModuleDescriptor(
-        path.join(ASSET_ROOT, 'builtins', 'async-hooks.mjs'),
-      );
-    case 'child_process':
-      return ALLOWED_BUILTINS.has('child_process')
-        ? assetModuleDescriptor(path.join(ASSET_ROOT, 'builtins', 'child-process.mjs'))
-        : null;
-    case 'diagnostics_channel':
-      return assetModuleDescriptor(
-        path.join(ASSET_ROOT, 'builtins', 'diagnostics-channel.mjs'),
-      );
-    case 'net':
-      return ALLOWED_BUILTINS.has('net')
-        ? assetModuleDescriptor(path.join(ASSET_ROOT, 'builtins', 'net.mjs'))
-        : null;
-    case 'dgram':
-      return ALLOWED_BUILTINS.has('dgram')
-        ? assetModuleDescriptor(path.join(ASSET_ROOT, 'builtins', 'dgram.mjs'))
-        : null;
-    case 'dns':
-      return ALLOWED_BUILTINS.has('dns')
-        ? assetModuleDescriptor(path.join(ASSET_ROOT, 'builtins', 'dns.mjs'))
-        : null;
-    case 'dns/promises':
-      return ALLOWED_BUILTINS.has('dns')
-        ? assetModuleDescriptor(path.join(ASSET_ROOT, 'builtins', 'dns-promises.mjs'))
-        : null;
-    case 'http':
-      return ALLOWED_BUILTINS.has('http')
-        ? assetModuleDescriptor(path.join(ASSET_ROOT, 'builtins', 'http.mjs'))
-        : null;
-    case 'http2':
-      return ALLOWED_BUILTINS.has('http2')
-        ? assetModuleDescriptor(path.join(ASSET_ROOT, 'builtins', 'http2.mjs'))
-        : null;
-    case 'https':
-      return ALLOWED_BUILTINS.has('https')
-        ? assetModuleDescriptor(path.join(ASSET_ROOT, 'builtins', 'https.mjs'))
-        : null;
-    case 'tls':
-      return ALLOWED_BUILTINS.has('tls')
-        ? assetModuleDescriptor(path.join(ASSET_ROOT, 'builtins', 'tls.mjs'))
-        : null;
-    case 'os':
-      return ALLOWED_BUILTINS.has('os')
-        ? assetModuleDescriptor(path.join(ASSET_ROOT, 'builtins', 'os.mjs'))
-        : null;
-    default:
-      return null;
-  }
-}
-
-function assetModuleDescriptor(filePath) {
-  if (!statForPath(filePath)) {
-    return null;
-  }
-
-  return {
-    filePath,
-    url: pathToFileURL(filePath).href,
-  };
-}
-
-function sanitizeAssetName(name) {
-  return String(name).replace(/[^A-Za-z0-9_.-]+/g, '-');
-}
-
-function escapeRegExp(value) {
-  return String(value).replace(/[.*+?^${}()|[\]\\]/g, '\\$&');
-}
-
-function buildResolutionEntry(specifier, context, resolved) {
-  const format = lookupModuleFormat(resolved.url) ?? resolved.format;
-
-  if (resolved.url.startsWith('node:')) {
-    return {
-      kind: 'builtin',
-      resolvedUrl: resolved.url,
-      format,
-    };
-  }
-
-  if (isBareSpecifier(specifier)) {
-    const packageName = barePackageName(specifier);
-    if (!packageName) {
-      return null;
-    }
-
-    const candidatePackageJsonPaths = barePackageJsonCandidates(
-      context.parentURL,
-      packageName,
-    );
-    const selectedPackageJsonPath = firstExistingPath(candidatePackageJsonPaths);
-    return {
-      kind: 'bare',
-      resolvedUrl: resolved.url,
-      format,
-      candidatePackageJsonPaths,
-      selectedPackageJsonPath,
-      selectedPackageJsonFingerprint: selectedPackageJsonPath
-        ? fileFingerprint(selectedPackageJsonPath)
-        : null,
-    };
-  }
-
-  if (isExplicitFileLikeSpecifier(specifier)) {
-    return {
-      kind: 'explicit-file',
-      resolvedUrl: resolved.url,
-      format,
-      resolvedFilePath: filePathFromUrl(resolved.url),
-    };
-  }
-
-  return null;
-}
-
-function isProjectedPackageSource(filePath) {
-  if (typeof filePath !== 'string' || isAssetPath(filePath)) {
-    return false;
-  }
-
-  const guestPath = guestPathFromHostPath(filePath);
-  return typeof guestPath === 'string' && guestPath.includes('/node_modules/');
-}
-
-function validateResolutionEntry(entry) {
-  if (!isRecord(entry) || typeof entry.kind !== 'string') {
-    return false;
-  }
-
-  switch (entry.kind) {
-    case 'builtin':
-      return true;
-    case 'bare': {
-      if (!Array.isArray(entry.candidatePackageJsonPaths)) {
-        return false;
-      }
-
-      const currentPackageJsonPath = firstExistingPath(
-        entry.candidatePackageJsonPaths,
-      );
-      if (currentPackageJsonPath !== entry.selectedPackageJsonPath) {
-        return false;
-      }
-
-      if (
-        currentPackageJsonPath &&
-        !fingerprintMatches(
-          currentPackageJsonPath,
-          entry.selectedPackageJsonFingerprint,
-        )
-      ) {
-        return false;
-      }
-
-      return formatMatches(entry.resolvedUrl, entry.format);
-    }
-    case 'explicit-file':
-      if (
-        typeof entry.resolvedFilePath !== 'string' ||
-        !fs.existsSync(entry.resolvedFilePath)
-      ) {
-        return false;
-      }
-
-      return formatMatches(entry.resolvedUrl, entry.format);
-    default:
-      return false;
-  }
-}
-
-function formatMatches(url, expectedFormat) {
-  if (expectedFormat == null) {
-    return true;
-  }
-
-  return lookupModuleFormat(url) === expectedFormat;
-}
-
-function lookupModuleFormat(url) {
-  const cached = cacheState.moduleFormats[url];
-  if (cached && validateModuleFormatEntry(cached)) {
-    metrics.moduleFormatHits += 1;
-    return cached.format;
-  }
-
-  metrics.moduleFormatMisses += 1;
-  const entry = buildModuleFormatEntry(url);
-  if (!entry) {
-    return null;
-  }
-
-  cacheState.moduleFormats[url] = entry;
-  dirty = true;
-  return entry.format;
-}
-
-function buildModuleFormatEntry(url) {
-  if (url.startsWith('node:')) {
-    return {
-      kind: 'builtin',
-      url,
-      format: 'builtin',
-    };
-  }
-
-  const filePath = filePathFromUrl(url);
-  if (!filePath) {
-    return null;
-  }
-
-  const stat = statForPath(filePath);
-  if (!stat) {
-    return null;
-  }
-
-  const extension = path.extname(filePath);
-  if (extension === '.mjs') {
-    return createFileFormatEntry(url, filePath, stat, 'module', false);
-  }
-  if (extension === '.cjs') {
-    return createFileFormatEntry(url, filePath, stat, 'commonjs', false);
-  }
-  if (extension === '.json') {
-    return createFileFormatEntry(url, filePath, stat, 'json', false);
-  }
-  if (extension === '.wasm') {
-    return createFileFormatEntry(url, filePath, stat, 'wasm', false);
-  }
-  if (extension === '.js' || extension === '') {
-    const packageType = lookupPackageType(filePath);
-    return createFileFormatEntry(
-      url,
-      filePath,
-      stat,
-      packageType === 'module' ? 'module' : 'commonjs',
-      true,
-    );
-  }
-
-  return null;
-}
-
-function createFileFormatEntry(url, filePath, stat, format, usesPackageType) {
-  return {
-    kind: 'file',
-    url,
-    filePath,
-    format,
-    usesPackageType,
-    size: stat.size,
-    mtimeMs: stat.mtimeMs,
-  };
-}
-
-function validateModuleFormatEntry(entry) {
-  if (!isRecord(entry) || typeof entry.kind !== 'string') {
-    return false;
-  }
-
-  if (entry.kind === 'builtin') {
-    return true;
-  }
-
-  if (entry.kind !== 'file' || typeof entry.filePath !== 'string') {
-    return false;
-  }
-
-  const stat = statForPath(entry.filePath);
-  if (!stat || stat.size !== entry.size || stat.mtimeMs !== entry.mtimeMs) {
-    return false;
-  }
-
-  if (entry.usesPackageType) {
-    const packageType = lookupPackageType(entry.filePath);
-    const expectedFormat = packageType === 'module' ? 'module' : 'commonjs';
-    return entry.format === expectedFormat;
-  }
-
-  return true;
-}
-
-function validateProjectedSourceEntry(entry, filePath, format) {
-  if (
-    !isRecord(entry) ||
-    entry.kind !== 'text' ||
-    typeof entry.filePath !== 'string' ||
-    typeof entry.cachedPath !== 'string' ||
-    typeof entry.format !== 'string'
-  ) {
-    return false;
-  }
-
-  if (entry.filePath !== filePath || entry.format !== format) {
-    return false;
-  }
-
-  const stat = statForPath(filePath);
-  if (!stat || stat.size !== entry.size || stat.mtimeMs !== entry.mtimeMs) {
-    return false;
-  }
-
-  return statForPath(entry.cachedPath)?.isFile() ?? false;
-}
-
-function lookupPackageType(filePath) {
-  let directory = path.dirname(filePath);
-
-  while (true) {
-    const packageJsonPath = path.join(directory, 'package.json');
-    const cached = cacheState.packageTypes[packageJsonPath];
-    if (cached && validatePackageTypeEntry(cached)) {
-      metrics.packageTypeHits += 1;
-      if (cached.kind === 'present') {
-        return cached.packageType;
-      }
-    } else {
-      metrics.packageTypeMisses += 1;
-      const entry = buildPackageTypeEntry(packageJsonPath);
-      cacheState.packageTypes[packageJsonPath] = entry;
-      dirty = true;
-      if (entry.kind === 'present') {
-        return entry.packageType;
-      }
-    }
-
-    const parent = path.dirname(directory);
-    if (parent === directory) {
-      break;
-    }
-    directory = parent;
-  }
-
-  return 'commonjs';
-}
-
-function buildPackageTypeEntry(packageJsonPath) {
-  const stat = statForPath(packageJsonPath);
-  if (!stat) {
-    return {
-      kind: 'missing',
-      packageJsonPath,
-    };
-  }
-
-  const contents = fs.readFileSync(packageJsonPath, 'utf8');
-  let packageType = 'commonjs';
-  try {
-    const parsed = JSON.parse(contents);
-    if (parsed && parsed.type === 'module') {
-      packageType = 'module';
-    }
-  } catch {
-    packageType = 'commonjs';
-  }
-
-  return {
-    kind: 'present',
-    packageJsonPath,
-    packageType,
-    size: stat.size,
-    mtimeMs: stat.mtimeMs,
-    hash: hashString(contents),
-  };
-}
-
-function validatePackageTypeEntry(entry) {
-  if (!isRecord(entry) || typeof entry.kind !== 'string') {
-    return false;
-  }
-
-  if (entry.kind === 'missing') {
-    return statForPath(entry.packageJsonPath) == null;
-  }
-
-  if (entry.kind !== 'present') {
-    return false;
-  }
-
-  const stat = statForPath(entry.packageJsonPath);
-  if (!stat) {
-    return false;
-  }
-
-  if (stat.size !== entry.size || stat.mtimeMs !== entry.mtimeMs) {
-    return false;
-  }
-
-  const contents = fs.readFileSync(entry.packageJsonPath, 'utf8');
-  return hashString(contents) === entry.hash;
-}
-
-function fileFingerprint(filePath) {
-  const stat = statForPath(filePath);
-  if (!stat) {
-    return null;
-  }
-
-  const contents = fs.readFileSync(filePath, 'utf8');
-  return {
-    size: stat.size,
-    mtimeMs: stat.mtimeMs,
-    hash: hashString(contents),
-  };
-}
-
-function fingerprintMatches(filePath, expectedFingerprint) {
-  if (!isRecord(expectedFingerprint)) {
-    return false;
-  }
-
-  const stat = statForPath(filePath);
-  if (!stat) {
-    return false;
-  }
-
-  if (
-    stat.size !== expectedFingerprint.size ||
-    stat.mtimeMs !== expectedFingerprint.mtimeMs
-  ) {
-    return false;
-  }
-
-  const contents = fs.readFileSync(filePath, 'utf8');
-  return hashString(contents) === expectedFingerprint.hash;
-}
-
-function barePackageJsonCandidates(parentURL, packageName) {
-  const parentPath = filePathFromUrl(parentURL);
-  if (!parentPath) {
-    return [];
-  }
-
-  let directory = path.dirname(parentPath);
-  const candidates = [];
-
-  while (true) {
-    candidates.push(path.join(directory, 'node_modules', packageName, 'package.json'));
-    const parent = path.dirname(directory);
-    if (parent === directory) {
-      break;
-    }
-    directory = parent;
-  }
-
-  return candidates;
-}
-
-function firstExistingPath(paths) {
-  for (const candidate of paths) {
-    if (statForPath(candidate)) {
-      return candidate;
-    }
-  }
-
-  return null;
-}
-
-function statForPath(filePath) {
-  try {
-    return fs.statSync(filePath);
-  } catch {
-    return null;
-  }
-}
-
-function createResolutionKey(specifier, context) {
-  return JSON.stringify({
-    specifier,
-    parentURL: context.parentURL ?? null,
-    conditions: Array.isArray(context.conditions)
-      ? [...context.conditions].sort()
-      : [],
-    importAttributes: sortObject(context.importAttributes ?? {}),
-  });
-}
-
-function sortObject(value) {
-  if (Array.isArray(value)) {
-    return value.map((item) => sortObject(item));
-  }
-
-  if (isRecord(value)) {
-    return Object.fromEntries(
-      Object.keys(value)
-        .sort()
-        .map((key) => [key, sortObject(value[key])]),
-    );
-  }
-
-  return value;
-}
-
-function isExplicitFileLikeSpecifier(specifier) {
-  if (typeof specifier !== 'string') {
-    return false;
-  }
-
-  if (specifier.startsWith('file:')) {
-    const filePath = filePathFromUrl(specifier);
-    return Boolean(filePath && path.extname(filePath));
-  }
-
-  if (
-    specifier.startsWith('./') ||
-    specifier.startsWith('../') ||
-    specifier.startsWith('/')
-  ) {
-    return Boolean(path.extname(specifier));
-  }
-
-  return false;
-}
-
-function isBareSpecifier(specifier) {
-  if (typeof specifier !== 'string') {
-    return false;
-  }
-
-  if (
-    specifier.startsWith('./') ||
-    specifier.startsWith('../') ||
-    specifier.startsWith('/') ||
-    specifier.startsWith('file:') ||
-    specifier.startsWith('node:')
-  ) {
-    return false;
-  }
-
-  return !/^[A-Za-z][A-Za-z0-9+.-]*:/.test(specifier);
-}
-
-function barePackageName(specifier) {
-  if (!isBareSpecifier(specifier)) {
-    return null;
-  }
-
-  const parts = specifier.split('/');
-  if (specifier.startsWith('@')) {
-    return parts.length >= 2 ? `${parts[0]}/${parts[1]}` : null;
-  }
-
-  return parts[0] ?? null;
-}
-
-function resolveGuestSpecifier(specifier, context) {
-  if (typeof specifier !== 'string') {
-    return null;
-  }
-
-  if (specifier.startsWith('file:')) {
-    const filePath = guestFilePathFromUrl(specifier);
-    if (!filePath) {
-      return null;
-    }
-    if (isInternalImportCachePath(filePath)) {
-      return null;
-    }
-    if (pathExists(filePath) && !guestPathFromHostPath(filePath)) {
-      return null;
-    }
-    return filePath;
-  }
-
-  if (specifier.startsWith('/')) {
-    if (isInternalImportCachePath(specifier)) {
-      return null;
-    }
-    if (pathExists(specifier)) {
-      return null;
-    }
-    return path.posix.normalize(specifier);
-  }
-
-  if (!specifier.startsWith('./') && !specifier.startsWith('../')) {
-    return null;
-  }
-
-  const parentPath = guestFilePathFromUrl(context.parentURL);
-  if (!parentPath) {
-    return null;
-  }
-
-  return path.posix.normalize(
-    path.posix.join(path.posix.dirname(parentPath), specifier),
-  );
-}
-
-function translateContextParentUrl(context) {
-  if (!context || typeof context.parentURL !== 'string') {
-    return context;
-  }
-
-  const hostParentUrl = translateResolvedUrlToHost(context.parentURL);
-  const hostParentPath = guestFilePathFromUrl(hostParentUrl);
-  const realParentPath =
-    hostParentPath && pathExists(hostParentPath) ? safeRealpath(hostParentPath) : null;
-  const normalizedParentUrl = realParentPath
-    ? pathToFileURL(realParentPath).href
-    : hostParentUrl;
-
-  if (normalizedParentUrl === context.parentURL) {
-    return context;
-  }
-
-  return {
-    ...context,
-    parentURL: normalizedParentUrl,
-  };
-}
-
-function translateResolvedUrlToGuest(url) {
-  const hostPath = guestFilePathFromUrl(url);
-  if (!hostPath) {
-    return url;
-  }
-
-  return pathToFileURL(guestVisiblePathFromHostPath(hostPath)).href;
-}
-
-function translateResolvedUrlToHost(url) {
-  const guestPath = guestFilePathFromUrl(url);
-  if (!guestPath) {
-    return url;
-  }
-
-  if (pathExists(guestPath) && !guestPathFromHostPath(guestPath)) {
-    return url;
-  }
-
-  const hostPath = hostPathFromGuestPath(guestPath);
-  return hostPath ? pathToFileURL(hostPath).href : url;
-}
-
-function filePathFromUrl(url) {
-  const guestPath = guestFilePathFromUrl(url);
-  if (!guestPath) {
-    return null;
-  }
-
-  if (pathExists(guestPath)) {
-    return guestPath;
-  }
-
-  return hostPathFromGuestPath(guestPath) ?? guestPath;
-}
-
-function guestFilePathFromUrl(url) {
-  if (typeof url !== 'string' || !url.startsWith('file:')) {
-    return null;
-  }
-
-  try {
-    return fileURLToPath(url);
-  } catch {
-    return null;
-  }
-}
-
-function hostPathFromGuestPath(guestPath) {
-  if (typeof guestPath !== 'string') {
-    return null;
-  }
-
-  const normalized = path.posix.normalize(guestPath);
-  if (
-    CACHE_ROOT &&
-    (normalized === GUEST_INTERNAL_CACHE_ROOT ||
-      normalized.startsWith(`${GUEST_INTERNAL_CACHE_ROOT}/`))
-  ) {
-    const suffix =
-      normalized === GUEST_INTERNAL_CACHE_ROOT
-        ? ''
-        : normalized.slice(GUEST_INTERNAL_CACHE_ROOT.length + 1);
-    return suffix ? path.join(CACHE_ROOT, ...suffix.split('/')) : CACHE_ROOT;
-  }
-
-  for (const mapping of GUEST_PATH_MAPPINGS) {
-    if (mapping.guestPath === '/') {
-      const suffix = normalized.replace(/^\/+/, '');
-      return suffix ? path.join(mapping.hostPath, suffix) : mapping.hostPath;
-    }
-
-    if (
-      normalized !== mapping.guestPath &&
-      !normalized.startsWith(`${mapping.guestPath}/`)
-    ) {
-      continue;
-    }
-
-    const suffix =
-      normalized === mapping.guestPath
-        ? ''
-        : normalized.slice(mapping.guestPath.length + 1);
-    return suffix ? path.join(mapping.hostPath, suffix) : mapping.hostPath;
-  }
-
-  if (
-    normalized === DEFAULT_GUEST_CWD ||
-    normalized.startsWith(`${DEFAULT_GUEST_CWD}/`)
-  ) {
-    const suffix =
-      normalized === DEFAULT_GUEST_CWD
-        ? ''
-        : normalized.slice(DEFAULT_GUEST_CWD.length + 1);
-    return suffix ? path.join(HOST_CWD, ...suffix.split('/')) : HOST_CWD;
-  }
-
-  return null;
-}
-
-function guestPathFromHostPath(hostPath) {
-  if (typeof hostPath !== 'string') {
-    return null;
-  }
-
-  const normalized = path.resolve(hostPath);
-  if (isInternalImportCachePath(normalized)) {
-    return null;
-  }
-  for (const mapping of GUEST_PATH_MAPPINGS) {
-    const hostRoot = path.resolve(mapping.hostPath);
-    if (
-      normalized !== hostRoot &&
-      !normalized.startsWith(`${hostRoot}${path.sep}`)
-    ) {
-      continue;
-    }
-
-    const suffix =
-      normalized === hostRoot
-        ? ''
-        : normalized.slice(hostRoot.length + path.sep.length);
-    return suffix
-      ? path.posix.join(mapping.guestPath, suffix.split(path.sep).join('/'))
-      : mapping.guestPath;
-  }
-
-  return null;
-}
-
-function guestCwdPathFromHostPath(hostPath) {
-  if (typeof hostPath !== 'string') {
-    return null;
-  }
-
-  const normalized = path.resolve(hostPath);
-  const hostRoot = path.resolve(HOST_CWD);
-  if (
-    normalized !== hostRoot &&
-    !normalized.startsWith(`${hostRoot}${path.sep}`)
-  ) {
-    return null;
-  }
-
-  const suffix =
-    normalized === hostRoot
-      ? ''
-      : normalized.slice(hostRoot.length + path.sep.length);
-  return suffix
-    ? path.posix.join(DEFAULT_GUEST_CWD, suffix.split(path.sep).join('/'))
-    : DEFAULT_GUEST_CWD;
-}
-
-function guestInternalPathFromHostPath(hostPath) {
-  if (typeof hostPath !== 'string' || !CACHE_ROOT) {
-    return null;
-  }
-
-  const normalized = path.resolve(hostPath);
-  const hostRoot = path.resolve(CACHE_ROOT);
-  if (
-    normalized !== hostRoot &&
-    !normalized.startsWith(`${hostRoot}${path.sep}`)
-  ) {
-    return null;
-  }
-
-  const suffix =
-    normalized === hostRoot
-      ? ''
-      : normalized.slice(hostRoot.length + path.sep.length);
-  return suffix
-    ? path.posix.join(GUEST_INTERNAL_CACHE_ROOT, suffix.split(path.sep).join('/'))
-    : GUEST_INTERNAL_CACHE_ROOT;
-}
-
-function guestVisiblePathFromHostPath(hostPath) {
-  return (
-    guestPathFromHostPath(hostPath) ??
-    guestInternalPathFromHostPath(hostPath) ??
-    guestCwdPathFromHostPath(hostPath) ??
-    UNMAPPED_GUEST_PATH
-  );
-}
-
-function isGuestVisiblePath(value) {
-  if (typeof value !== 'string' || !path.posix.isAbsolute(value)) {
-    return false;
-  }
-
-  const normalized = path.posix.normalize(value);
-  return (
-    normalized === UNMAPPED_GUEST_PATH ||
-    normalized === GUEST_INTERNAL_CACHE_ROOT ||
-    normalized.startsWith(`${GUEST_INTERNAL_CACHE_ROOT}/`) ||
-    normalized === DEFAULT_GUEST_CWD ||
-    normalized.startsWith(`${DEFAULT_GUEST_CWD}/`) ||
-    hostPathFromGuestPath(normalized) != null
-  );
-}
-
-function translatePathStringToGuest(value) {
-  if (typeof value !== 'string') {
-    return value;
-  }
-
-  if (value.startsWith('file:')) {
-    const hostPath = guestFilePathFromUrl(value);
-    if (!hostPath) {
-      return value;
-    }
-
-    const guestPath = isGuestVisiblePath(hostPath)
-      ? path.posix.normalize(hostPath)
-      : guestVisiblePathFromHostPath(hostPath);
-    return pathToFileURL(guestPath).href;
-  }
-
-  if (!path.isAbsolute(value)) {
-    return value;
-  }
-
-  return isGuestVisiblePath(value)
-    ? path.posix.normalize(value)
-    : guestVisiblePathFromHostPath(value);
-}
-
-function buildHostToGuestTextReplacements() {
-  const replacements = new Map();
-  const addReplacement = (hostValue, guestValue) => {
-    if (
-      typeof hostValue !== 'string' ||
-      hostValue.length === 0 ||
-      typeof guestValue !== 'string' ||
-      guestValue.length === 0
-    ) {
-      return;
-    }
-
-    replacements.set(hostValue, guestValue);
-  };
-
-  for (const mapping of GUEST_PATH_MAPPINGS) {
-    const hostRoot = path.resolve(mapping.hostPath);
-    addReplacement(hostRoot, mapping.guestPath);
-    addReplacement(pathToFileURL(hostRoot).href, pathToFileURL(mapping.guestPath).href);
-    const forwardSlashHostRoot = hostRoot.split(path.sep).join('/');
-    if (forwardSlashHostRoot !== hostRoot) {
-      addReplacement(forwardSlashHostRoot, mapping.guestPath);
-    }
-  }
-
-  if (CACHE_ROOT) {
-    const hostRoot = path.resolve(CACHE_ROOT);
-    addReplacement(hostRoot, GUEST_INTERNAL_CACHE_ROOT);
-    addReplacement(
-      pathToFileURL(hostRoot).href,
-      pathToFileURL(GUEST_INTERNAL_CACHE_ROOT).href,
-    );
-    const forwardSlashHostRoot = hostRoot.split(path.sep).join('/');
-    if (forwardSlashHostRoot !== hostRoot) {
-      addReplacement(forwardSlashHostRoot, GUEST_INTERNAL_CACHE_ROOT);
-    }
-  }
-
-  if (!guestPathFromHostPath(HOST_CWD)) {
-    const hostRoot = path.resolve(HOST_CWD);
-    addReplacement(hostRoot, DEFAULT_GUEST_CWD);
-    addReplacement(pathToFileURL(hostRoot).href, pathToFileURL(DEFAULT_GUEST_CWD).href);
-    const forwardSlashHostRoot = hostRoot.split(path.sep).join('/');
-    if (forwardSlashHostRoot !== hostRoot) {
-      addReplacement(forwardSlashHostRoot, DEFAULT_GUEST_CWD);
-    }
-  }
-
-  return [...replacements.entries()].sort((left, right) => right[0].length - left[0].length);
-}
-
-function splitPathLocationSuffix(value) {
-  if (typeof value !== 'string') {
-    return { pathLike: value, suffix: '' };
-  }
-
-  const match = /^(.*?)(:\d+(?::\d+)?)$/.exec(value);
-  return match
-    ? { pathLike: match[1], suffix: match[2] }
-    : { pathLike: value, suffix: '' };
-}
-
-function translateTextTokenToGuest(token) {
-  if (typeof token !== 'string' || token.length === 0) {
-    return token;
-  }
-
-  const leading = token.match(/^[("'`[{<]+/)?.[0] ?? '';
-  const trailing = token.match(/[)"'`\]}>.,;!?]+$/)?.[0] ?? '';
-  const coreEnd = token.length - trailing.length;
-  const core = token.slice(leading.length, coreEnd);
-  if (core.length === 0) {
-    return token;
-  }
-
-  const { pathLike, suffix } = splitPathLocationSuffix(core);
-  if (
-    typeof pathLike !== 'string' ||
-    (!pathLike.startsWith('file:') && !path.isAbsolute(pathLike))
-  ) {
-    return token;
-  }
-
-  return `${leading}${translatePathStringToGuest(pathLike)}${suffix}${trailing}`;
-}
-
-function translateTextToGuest(value) {
-  if (typeof value !== 'string' || value.length === 0) {
-    return value;
-  }
-
-  let translated = value;
-  for (const [hostValue, guestValue] of buildHostToGuestTextReplacements()) {
-    translated = translated.split(hostValue).join(guestValue);
-  }
-
-  return translated
-    .split(/(\s+)/)
-    .map((token) => (/^\s+$/.test(token) ? token : translateTextTokenToGuest(token)))
-    .join('');
-}
-
-function translateErrorToGuest(error) {
-  if (error == null || typeof error !== 'object') {
-    return error;
-  }
-
-  if (typeof error.message === 'string') {
-    try {
-      error.message = translateTextToGuest(error.message);
-    } catch {
-      // Ignore readonly message bindings.
-    }
-  }
-
-  if (typeof error.stack === 'string') {
-    try {
-      error.stack = translateTextToGuest(error.stack);
-    } catch {
-      // Ignore readonly stack bindings.
-    }
-  }
-
-  if (typeof error.path === 'string') {
-    try {
-      error.path = translatePathStringToGuest(error.path);
-    } catch {
-      // Ignore readonly path bindings.
-    }
-  }
-
-  if (typeof error.filename === 'string') {
-    try {
-      error.filename = translatePathStringToGuest(error.filename);
-    } catch {
-      // Ignore readonly filename bindings.
-    }
-  }
-
-  if (typeof error.url === 'string') {
-    try {
-      error.url = translatePathStringToGuest(error.url);
-    } catch {
-      // Ignore readonly url bindings.
-    }
-  }
-
-  if (Array.isArray(error.requireStack)) {
-    try {
-      error.requireStack = error.requireStack.map((entry) => translatePathStringToGuest(entry));
-    } catch {
-      // Ignore readonly requireStack bindings.
-    }
-  }
-
-  return error;
-}
-
-function pathExists(targetPath) {
-  try {
-    return fs.existsSync(targetPath);
-  } catch {
-    return false;
-  }
-}
-
-function safeRealpath(targetPath) {
-  try {
-    return fs.realpathSync.native(targetPath);
-  } catch {
-    return null;
-  }
-}
-
-function parseJsonArray(value) {
-  if (!value) {
-    return [];
-  }
-
-  try {
-    const parsed = JSON.parse(value);
-    return Array.isArray(parsed) ? parsed.filter((entry) => typeof entry === 'string') : [];
-  } catch {
-    return [];
-  }
-}
-
-function isInternalImportCachePath(filePath) {
-  return typeof filePath === 'string' && filePath.includes(`${path.sep}agentos-node-import-cache-`);
-}
-
-function parseGuestPathMappings(value) {
-  const parsed = parseJsonArrayLikeObjects(value);
-  return parsed
-    .map((entry) => {
-      const guestPath =
-        typeof entry.guestPath === 'string'
-          ? path.posix.normalize(entry.guestPath)
-          : null;
-      const hostPath =
-        typeof entry.hostPath === 'string' ? path.resolve(entry.hostPath) : null;
-      return guestPath && hostPath ? { guestPath, hostPath } : null;
-    })
-    .filter(Boolean)
-    .sort((left, right) => {
-      if (right.guestPath.length !== left.guestPath.length) {
-        return right.guestPath.length - left.guestPath.length;
-      }
-      return right.hostPath.length - left.hostPath.length;
-    });
-}
-
-function parseJsonArrayLikeObjects(value) {
-  if (!value) {
-    return [];
-  }
-
-  try {
-    const parsed = JSON.parse(value);
-    return Array.isArray(parsed) ? parsed.filter(isRecord) : [];
-  } catch {
-    return [];
-  }
-}
-
-function hashString(contents) {
-  return crypto.createHash('sha256').update(contents).digest('hex');
-}
-
-function isRecord(value) {
-  return value != null && typeof value === 'object' && !Array.isArray(value);
-}
-"#;
-
-const NODE_IMPORT_CACHE_REGISTER_SOURCE: &str = r#"
-import { register } from 'node:module';
-
-const loaderPath = process.env.__NODE_IMPORT_CACHE_LOADER_PATH_ENV__;
-
-if (!loaderPath) {
-  throw new Error('__NODE_IMPORT_CACHE_LOADER_PATH_ENV__ is required');
-}
-
-register(loaderPath, import.meta.url);
-"#;
-
-const NODE_EXECUTION_RUNNER_SOURCE: &str = r#"
-const fs = process.getBuiltinModule?.('node:fs');
-const path = process.getBuiltinModule?.('node:path');
-const { pathToFileURL } = process.getBuiltinModule?.('node:url') ?? {};
-
-if (!fs || !path || typeof pathToFileURL !== 'function') {
-  throw new Error('node builtin access is required for the secure-exec guest runtime');
-}
-
-const HOST_PROCESS_ENV = { ...process.env };
-const ALLOW_PROCESS_BINDINGS = HOST_PROCESS_ENV.AGENTOS_ALLOW_PROCESS_BINDINGS === '1';
-const Module =
-  typeof process.getBuiltinModule === 'function'
-    ? process.getBuiltinModule('node:module')
-    : null;
-const syncBuiltinESMExports =
-  typeof Module?.syncBuiltinESMExports === 'function'
-    ? Module.syncBuiltinESMExports.bind(Module)
-    : () => {};
-const GUEST_PATH_MAPPINGS = parseGuestPathMappings(HOST_PROCESS_ENV.AGENTOS_GUEST_PATH_MAPPINGS);
-const ALLOWED_BUILTINS = new Set(parseJsonArray(HOST_PROCESS_ENV.AGENTOS_ALLOWED_NODE_BUILTINS));
-const LOOPBACK_EXEMPT_PORTS = new Set(parseJsonArray(HOST_PROCESS_ENV.AGENTOS_LOOPBACK_EXEMPT_PORTS));
-const DENIED_BUILTINS = new Set([
-  'child_process',
-  'cluster',
-  'dgram',
-  'dns',
-  'http',
-  'http2',
-  'https',
-  'inspector',
-  'module',
-  'net',
-  'tls',
-  'trace_events',
-  'v8',
-  'vm',
-  'worker_threads',
-].filter((name) => !ALLOWED_BUILTINS.has(name)));
-const originalGetBuiltinModule =
-  typeof process.getBuiltinModule === 'function'
-    ? process.getBuiltinModule.bind(process)
-    : null;
-const originalModuleResolveFilename =
-  typeof Module?._resolveFilename === 'function'
-    ? Module._resolveFilename.bind(Module)
-    : null;
-const originalModuleLoad =
-  typeof Module?._load === 'function' ? Module._load.bind(Module) : null;
-const originalModuleCache =
-  Module?._cache && typeof Module._cache === 'object' ? Module._cache : null;
-const originalFetch =
-  typeof globalThis.fetch === 'function'
-    ? globalThis.fetch.bind(globalThis)
-    : null;
-const HOST_CWD = process.cwd();
-const HOST_EXEC_PATH = process.execPath;
-const HOST_EXEC_DIR = path.dirname(HOST_EXEC_PATH);
-if (!Module || typeof Module.createRequire !== 'function') {
-  throw new Error('node:module builtin access is required for the secure-exec guest runtime');
-}
-const hostRequire = Module.createRequire(import.meta.url);
-const hostOs = hostRequire('node:os');
-const hostNet = hostRequire('node:net');
-const hostDgram = hostRequire('node:dgram');
-const hostDns = hostRequire('node:dns');
-const hostDnsPromises = hostRequire('node:dns/promises');
-const hostHttp = hostRequire('node:http');
-const hostHttp2 = hostRequire('node:http2');
-const hostHttps = hostRequire('node:https');
-const hostTls = hostRequire('node:tls');
-const { EventEmitter } = hostRequire('node:events');
-const { Duplex, Readable, Writable } = hostRequire('node:stream');
-const NODE_SYNC_RPC_ENABLE = HOST_PROCESS_ENV.AGENTOS_NODE_SYNC_RPC_ENABLE === '1';
-const hostWorkerThreads = NODE_SYNC_RPC_ENABLE ? hostRequire('node:worker_threads') : null;
-const SIGNAL_EVENTS = new Set(
-  Object.keys(hostOs.constants?.signals ?? {}).filter((name) =>
-    name.startsWith('SIG'),
-  ),
-);
-const TRACKED_PROCESS_SIGNAL_EVENTS = new Set(['SIGCHLD']);
-const guestEntryPoint =
-  HOST_PROCESS_ENV.AGENTOS_GUEST_ENTRYPOINT ?? HOST_PROCESS_ENV.AGENTOS_ENTRYPOINT;
-const DEFAULT_VIRTUAL_EXEC_PATH = '/usr/bin/node';
-const DEFAULT_VIRTUAL_PID = 1;
-const DEFAULT_VIRTUAL_PPID = 0;
-const DEFAULT_VIRTUAL_UID = 0;
-const DEFAULT_VIRTUAL_GID = 0;
-const DEFAULT_VIRTUAL_OS_HOSTNAME = 'secure-exec';
-const DEFAULT_VIRTUAL_OS_TYPE = 'Linux';
-const DEFAULT_VIRTUAL_OS_PLATFORM = 'linux';
-const DEFAULT_VIRTUAL_OS_RELEASE = '6.8.0-secure-exec';
-const DEFAULT_VIRTUAL_OS_VERSION = '#1 SMP PREEMPT_DYNAMIC secure-exec';
-const DEFAULT_VIRTUAL_OS_ARCH = 'x64';
-const DEFAULT_VIRTUAL_OS_MACHINE = 'x86_64';
-const DEFAULT_VIRTUAL_OS_CPU_MODEL = 'secure-exec Virtual CPU';
-const DEFAULT_VIRTUAL_OS_CPU_COUNT = 1;
-const DEFAULT_VIRTUAL_OS_TOTALMEM = 1024 * 1024 * 1024;
-const DEFAULT_VIRTUAL_OS_FREEMEM = 768 * 1024 * 1024;
-const DEFAULT_VIRTUAL_OS_USER = 'root';
-const DEFAULT_VIRTUAL_OS_HOMEDIR = '/root';
-const DEFAULT_VIRTUAL_OS_SHELL = '/bin/sh';
-const DEFAULT_VIRTUAL_OS_TMPDIR = '/tmp';
-const NODE_SYNC_RPC_REQUEST_FD = parseOptionalFd(HOST_PROCESS_ENV.AGENTOS_NODE_SYNC_RPC_REQUEST_FD);
-const NODE_SYNC_RPC_RESPONSE_FD = parseOptionalFd(HOST_PROCESS_ENV.AGENTOS_NODE_SYNC_RPC_RESPONSE_FD);
-const NODE_SYNC_RPC_DATA_BYTES = parsePositiveInt(
-  HOST_PROCESS_ENV.AGENTOS_NODE_SYNC_RPC_DATA_BYTES,
-  4 * 1024 * 1024,
-);
-const NODE_SYNC_RPC_WAIT_TIMEOUT_MS = parsePositiveInt(
-  HOST_PROCESS_ENV.AGENTOS_NODE_SYNC_RPC_WAIT_TIMEOUT_MS,
-  30_000,
-);
-const NODE_IMPORT_CACHE_PATH = HOST_PROCESS_ENV.AGENTOS_NODE_IMPORT_CACHE_PATH ?? null;
-const NODE_IMPORT_CACHE_ROOT =
-  typeof NODE_IMPORT_CACHE_PATH === 'string' && NODE_IMPORT_CACHE_PATH.length > 0
-    ? path.dirname(NODE_IMPORT_CACHE_PATH)
-    : null;
-const CONTROL_PIPE_FD = parseOptionalFd(HOST_PROCESS_ENV.AGENTOS_CONTROL_PIPE_FD);
-const GUEST_INTERNAL_NODE_IMPORT_CACHE_ROOT = '/.agentos/node-import-cache';
-const UNMAPPED_GUEST_PATH = '/unknown';
-const VIRTUAL_EXEC_PATH = parseVirtualProcessString(
-  HOST_PROCESS_ENV.AGENTOS_VIRTUAL_PROCESS_EXEC_PATH,
-  DEFAULT_VIRTUAL_EXEC_PATH,
-);
-const VIRTUAL_PID = parseVirtualProcessNumber(
-  HOST_PROCESS_ENV.AGENTOS_VIRTUAL_PROCESS_PID,
-  DEFAULT_VIRTUAL_PID,
-);
-const VIRTUAL_PPID = parseVirtualProcessNumber(
-  HOST_PROCESS_ENV.AGENTOS_VIRTUAL_PROCESS_PPID,
-  DEFAULT_VIRTUAL_PPID,
-);
-const VIRTUAL_UID = parseVirtualProcessNumber(
-  HOST_PROCESS_ENV.AGENTOS_VIRTUAL_PROCESS_UID,
-  DEFAULT_VIRTUAL_UID,
-);
-const VIRTUAL_GID = parseVirtualProcessNumber(
-  HOST_PROCESS_ENV.AGENTOS_VIRTUAL_PROCESS_GID,
-  DEFAULT_VIRTUAL_GID,
-);
-const DEFAULT_GUEST_CWD = resolveVirtualPath(
-  (globalThis.__agentOSVirtualOs||{}).homedir,
-  DEFAULT_VIRTUAL_OS_HOMEDIR,
-);
-const VIRTUAL_OS_USER = parseVirtualProcessString(
-  (globalThis.__agentOSVirtualOs||{}).user,
-  DEFAULT_VIRTUAL_OS_USER,
-);
-const VIRTUAL_OS_HOMEDIR = resolveVirtualPath(
-  (globalThis.__agentOSVirtualOs||{}).homedir,
-  DEFAULT_VIRTUAL_OS_HOMEDIR,
-);
-const VIRTUAL_OS_SHELL = resolveVirtualPath(
-  (globalThis.__agentOSVirtualOs||{}).shell,
-  DEFAULT_VIRTUAL_OS_SHELL,
-);
-
-function isPathLike(specifier) {
-  return specifier.startsWith('.') || specifier.startsWith('/') || specifier.startsWith('file:');
-}
-
-function toImportSpecifier(specifier) {
-  if (specifier.startsWith('file:')) {
-    return translatePathStringToGuest(specifier);
-  }
-  if (isPathLike(specifier)) {
-    if (specifier.startsWith('/')) {
-      return pathToFileURL(
-        translatePathStringToGuest(
-          pathExists(specifier) ? path.resolve(specifier) : path.posix.normalize(specifier),
-        ),
-      ).href;
-    }
-    return pathToFileURL(translatePathStringToGuest(path.resolve(HOST_CWD, specifier))).href;
-  }
-  return specifier;
-}
-
-function accessDenied(subject) {
-  const error = new Error(`${subject} is not available in the secure-exec guest runtime`);
-  error.code = 'ERR_ACCESS_DENIED';
-  return error;
-}
-
-function normalizeBuiltin(specifier) {
-  return specifier.startsWith('node:') ? specifier.slice('node:'.length) : specifier;
-}
-
-function isBareSpecifier(specifier) {
-  if (typeof specifier !== 'string') {
-    return false;
-  }
-
-  if (
-    specifier.startsWith('./') ||
-    specifier.startsWith('../') ||
-    specifier.startsWith('/') ||
-    specifier.startsWith('file:') ||
-    specifier.startsWith('node:')
-  ) {
-    return false;
-  }
-
-  return !/^[A-Za-z][A-Za-z0-9+.-]*:/.test(specifier);
-}
-
-function pathExists(targetPath) {
-  try {
-    return fs.existsSync(targetPath);
-  } catch {
-    return false;
-  }
-}
-
-function parseJsonArray(value) {
-  if (!value) {
-    return [];
-  }
-
-  try {
-    const parsed = JSON.parse(value);
-    return Array.isArray(parsed) ? parsed.filter((entry) => typeof entry === 'string') : [];
-  } catch {
-    return [];
-  }
-}
-
-function parseOptionalFd(value) {
-  if (value == null || value === '') {
-    return null;
-  }
-
-  const parsed = Number.parseInt(value, 10);
-  return Number.isInteger(parsed) && parsed >= 0 ? parsed : null;
-}
-
-function parsePositiveInt(value, fallback) {
-  if (value == null || value === '') {
-    return fallback;
-  }
-
-  const parsed = Number(value);
-  return Number.isInteger(parsed) && parsed > 0 ? parsed : fallback;
-}
-
-function parseVirtualProcessNumber(value, fallback) {
-  if (value == null || value === '') {
-    return fallback;
-  }
-
-  const parsed = Number(value);
-  return Number.isInteger(parsed) && parsed >= 0 ? parsed : fallback;
-}
-
-function parseVirtualProcessString(value, fallback) {
-  return typeof value === 'string' && value.length > 0 ? value : fallback;
-}
-
-function isInternalProcessEnvKey(key) {
-  return typeof key === 'string' && key.startsWith('AGENTOS_');
-}
-
-function createGuestProcessEnv(env) {
-  const guestEnv = {};
-
-  for (const [key, value] of Object.entries(env ?? {})) {
-    if (typeof value !== 'string' || isInternalProcessEnvKey(key)) {
-      continue;
-    }
-    guestEnv[key] = value;
-  }
-
-  return new Proxy(guestEnv, {
-    defineProperty(target, key, descriptor) {
-      if (typeof key === 'string' && isInternalProcessEnvKey(key)) {
-        return true;
-      }
-
-      const normalized = { ...descriptor };
-      if ('value' in normalized) {
-        normalized.value = String(normalized.value);
-      }
-      return Reflect.defineProperty(target, key, normalized);
-    },
-    deleteProperty(target, key) {
-      if (typeof key === 'string' && isInternalProcessEnvKey(key)) {
-        return true;
-      }
-      return Reflect.deleteProperty(target, key);
-    },
-    get(target, key, receiver) {
-      if (typeof key === 'string' && isInternalProcessEnvKey(key)) {
-        return undefined;
-      }
-      return Reflect.get(target, key, receiver);
-    },
-    getOwnPropertyDescriptor(target, key) {
-      if (typeof key === 'string' && isInternalProcessEnvKey(key)) {
-        return undefined;
-      }
-      return Reflect.getOwnPropertyDescriptor(target, key);
-    },
-    has(target, key) {
-      if (typeof key === 'string' && isInternalProcessEnvKey(key)) {
-        return false;
-      }
-      return Reflect.has(target, key);
-    },
-    ownKeys(target) {
-      return Reflect.ownKeys(target).filter(
-        (key) => typeof key !== 'string' || !isInternalProcessEnvKey(key),
-      );
-    },
-    set(target, key, value, receiver) {
-      if (typeof key === 'string' && isInternalProcessEnvKey(key)) {
-        return true;
-      }
-      return Reflect.set(target, key, String(value), receiver);
-    },
-  });
-}
-
-function parseGuestPathMappings(value) {
-  if (!value) {
-    return [];
-  }
-
-  try {
-    const parsed = JSON.parse(value);
-    if (!Array.isArray(parsed)) {
-      return [];
-    }
-
-    return parsed
-      .map((entry) => {
-        const guestPath =
-          entry && typeof entry.guestPath === 'string'
-            ? path.posix.normalize(entry.guestPath)
-            : null;
-        const hostPath =
-          entry && typeof entry.hostPath === 'string'
-            ? path.resolve(entry.hostPath)
-            : null;
-        return guestPath && hostPath
-          ? { guestPath, hostPath, readOnly: entry.readOnly === true }
-          : null;
-      })
-      .filter(Boolean)
-      .sort((left, right) => right.guestPath.length - left.guestPath.length);
-  } catch {
-    return [];
-  }
-}
-
-function hostPathFromGuestPath(guestPath) {
-  if (typeof guestPath !== 'string') {
-    return null;
-  }
-
-  const normalized = path.posix.normalize(guestPath);
-  if (
-    NODE_IMPORT_CACHE_ROOT &&
-    (normalized === GUEST_INTERNAL_NODE_IMPORT_CACHE_ROOT ||
-      normalized.startsWith(`${GUEST_INTERNAL_NODE_IMPORT_CACHE_ROOT}/`))
-  ) {
-    const suffix =
-      normalized === GUEST_INTERNAL_NODE_IMPORT_CACHE_ROOT
-        ? ''
-        : normalized.slice(GUEST_INTERNAL_NODE_IMPORT_CACHE_ROOT.length + 1);
-    return suffix
-      ? path.join(NODE_IMPORT_CACHE_ROOT, ...suffix.split('/'))
-      : NODE_IMPORT_CACHE_ROOT;
-  }
-
-  for (const mapping of GUEST_PATH_MAPPINGS) {
-    if (mapping.guestPath === '/') {
-      const suffix = normalized.replace(/^\/+/, '');
-      return suffix ? path.join(mapping.hostPath, suffix) : mapping.hostPath;
-    }
-
-    if (
-      normalized !== mapping.guestPath &&
-      !normalized.startsWith(`${mapping.guestPath}/`)
-    ) {
-      continue;
-    }
-
-    const suffix =
-      normalized === mapping.guestPath
-        ? ''
-        : normalized.slice(mapping.guestPath.length + 1);
-    return suffix ? path.join(mapping.hostPath, suffix) : mapping.hostPath;
-  }
-
-  if (
-    normalized === DEFAULT_GUEST_CWD ||
-    normalized.startsWith(`${DEFAULT_GUEST_CWD}/`)
-  ) {
-    const suffix =
-      normalized === DEFAULT_GUEST_CWD
-        ? ''
-        : normalized.slice(DEFAULT_GUEST_CWD.length + 1);
-    return suffix ? path.join(HOST_CWD, ...suffix.split('/')) : HOST_CWD;
-  }
-
-  return null;
-}
-
-function guestPathFromHostPath(hostPath) {
-  if (typeof hostPath !== 'string') {
-    return null;
-  }
-
-  const normalized = path.resolve(hostPath);
-  for (const mapping of GUEST_PATH_MAPPINGS) {
-    const hostRoot = path.resolve(mapping.hostPath);
-    if (
-      normalized !== hostRoot &&
-      !normalized.startsWith(`${hostRoot}${path.sep}`)
-    ) {
-      continue;
-    }
-
-    const suffix =
-      normalized === hostRoot
-        ? ''
-        : normalized.slice(hostRoot.length + path.sep.length);
-    return suffix
-      ? path.posix.join(mapping.guestPath, suffix.split(path.sep).join('/'))
-      : mapping.guestPath;
-  }
-
-  return null;
-}
-
-function guestCwdPathFromHostPath(hostPath) {
-  if (typeof hostPath !== 'string') {
-    return null;
-  }
-
-  const normalized = path.resolve(hostPath);
-  const hostRoot = path.resolve(HOST_CWD);
-  if (
-    normalized !== hostRoot &&
-    !normalized.startsWith(`${hostRoot}${path.sep}`)
-  ) {
-    return null;
-  }
-
-  const suffix =
-    normalized === hostRoot
-      ? ''
-      : normalized.slice(hostRoot.length + path.sep.length);
-  return suffix
-    ? path.posix.join(INITIAL_GUEST_CWD, suffix.split(path.sep).join('/'))
-    : INITIAL_GUEST_CWD;
-}
-
-function guestInternalPathFromHostPath(hostPath) {
-  if (typeof hostPath !== 'string' || !NODE_IMPORT_CACHE_ROOT) {
-    return null;
-  }
-
-  const normalized = path.resolve(hostPath);
-  const hostRoot = path.resolve(NODE_IMPORT_CACHE_ROOT);
-  if (
-    normalized !== hostRoot &&
-    !normalized.startsWith(`${hostRoot}${path.sep}`)
-  ) {
-    return null;
-  }
-
-  const suffix =
-    normalized === hostRoot
-      ? ''
-      : normalized.slice(hostRoot.length + path.sep.length);
-  return suffix
-    ? path.posix.join(
-        GUEST_INTERNAL_NODE_IMPORT_CACHE_ROOT,
-        suffix.split(path.sep).join('/'),
-      )
-    : GUEST_INTERNAL_NODE_IMPORT_CACHE_ROOT;
-}
-
-function guestVisiblePathFromHostPath(hostPath) {
-  return (
-    guestPathFromHostPath(hostPath) ??
-    guestInternalPathFromHostPath(hostPath) ??
-    guestCwdPathFromHostPath(hostPath) ??
-    UNMAPPED_GUEST_PATH
-  );
-}
-
-function isGuestVisiblePath(value) {
-  if (typeof value !== 'string' || !path.posix.isAbsolute(value)) {
-    return false;
-  }
-
-  const normalized = path.posix.normalize(value);
-  return (
-    normalized === UNMAPPED_GUEST_PATH ||
-    normalized === GUEST_INTERNAL_NODE_IMPORT_CACHE_ROOT ||
-    normalized.startsWith(`${GUEST_INTERNAL_NODE_IMPORT_CACHE_ROOT}/`) ||
-    normalized === INITIAL_GUEST_CWD ||
-    normalized.startsWith(`${INITIAL_GUEST_CWD}/`) ||
-    hostPathFromGuestPath(normalized) != null
-  );
-}
-
-function translatePathStringToGuest(value) {
-  if (typeof value !== 'string') {
-    return value;
-  }
-
-  if (value.startsWith('file:')) {
-    try {
-      const hostPath = new URL(value).pathname;
-      const guestPath = isGuestVisiblePath(hostPath)
-        ? path.posix.normalize(hostPath)
-        : guestVisiblePathFromHostPath(hostPath);
-      return pathToFileURL(guestPath).href;
-    } catch {
-      return value;
-    }
-  }
-
-  if (!path.isAbsolute(value)) {
-    return value;
-  }
-
-  return isGuestVisiblePath(value)
-    ? path.posix.normalize(value)
-    : guestVisiblePathFromHostPath(value);
-}
-
-function buildHostToGuestTextReplacements() {
-  const replacements = new Map();
-  const addReplacement = (hostValue, guestValue) => {
-    if (
-      typeof hostValue !== 'string' ||
-      hostValue.length === 0 ||
-      typeof guestValue !== 'string' ||
-      guestValue.length === 0
-    ) {
-      return;
-    }
-
-    replacements.set(hostValue, guestValue);
-  };
-
-  for (const mapping of GUEST_PATH_MAPPINGS) {
-    const hostRoot = path.resolve(mapping.hostPath);
-    addReplacement(hostRoot, mapping.guestPath);
-    addReplacement(pathToFileURL(hostRoot).href, pathToFileURL(mapping.guestPath).href);
-    const forwardSlashHostRoot = hostRoot.split(path.sep).join('/');
-    if (forwardSlashHostRoot !== hostRoot) {
-      addReplacement(forwardSlashHostRoot, mapping.guestPath);
-    }
-  }
-
-  if (NODE_IMPORT_CACHE_ROOT) {
-    const hostRoot = path.resolve(NODE_IMPORT_CACHE_ROOT);
-    addReplacement(hostRoot, GUEST_INTERNAL_NODE_IMPORT_CACHE_ROOT);
-    addReplacement(
-      pathToFileURL(hostRoot).href,
-      pathToFileURL(GUEST_INTERNAL_NODE_IMPORT_CACHE_ROOT).href,
-    );
-    const forwardSlashHostRoot = hostRoot.split(path.sep).join('/');
-    if (forwardSlashHostRoot !== hostRoot) {
-      addReplacement(forwardSlashHostRoot, GUEST_INTERNAL_NODE_IMPORT_CACHE_ROOT);
-    }
-  }
-
-  if (!guestPathFromHostPath(HOST_CWD)) {
-    const hostRoot = path.resolve(HOST_CWD);
-    addReplacement(hostRoot, INITIAL_GUEST_CWD);
-    addReplacement(pathToFileURL(hostRoot).href, pathToFileURL(INITIAL_GUEST_CWD).href);
-    const forwardSlashHostRoot = hostRoot.split(path.sep).join('/');
-    if (forwardSlashHostRoot !== hostRoot) {
-      addReplacement(forwardSlashHostRoot, INITIAL_GUEST_CWD);
-    }
-  }
-
-  return [...replacements.entries()].sort((left, right) => right[0].length - left[0].length);
-}
-
-function splitPathLocationSuffix(value) {
-  if (typeof value !== 'string') {
-    return { pathLike: value, suffix: '' };
-  }
-
-  const match = /^(.*?)(:\d+(?::\d+)?)$/.exec(value);
-  return match
-    ? { pathLike: match[1], suffix: match[2] }
-    : { pathLike: value, suffix: '' };
-}
-
-function translateTextTokenToGuest(token) {
-  if (typeof token !== 'string' || token.length === 0) {
-    return token;
-  }
-
-  const leading = token.match(/^[("'`[{<]+/)?.[0] ?? '';
-  const trailing = token.match(/[)"'`\]}>.,;!?]+$/)?.[0] ?? '';
-  const coreEnd = token.length - trailing.length;
-  const core = token.slice(leading.length, coreEnd);
-  if (core.length === 0) {
-    return token;
-  }
-
-  const { pathLike, suffix } = splitPathLocationSuffix(core);
-  if (
-    typeof pathLike !== 'string' ||
-    (!pathLike.startsWith('file:') && !path.isAbsolute(pathLike))
-  ) {
-    return token;
-  }
-
-  return `${leading}${translatePathStringToGuest(pathLike)}${suffix}${trailing}`;
-}
-
-function translateTextToGuest(value) {
-  if (typeof value !== 'string' || value.length === 0) {
-    return value;
-  }
-
-  let translated = value;
-  for (const [hostValue, guestValue] of buildHostToGuestTextReplacements()) {
-    translated = translated.split(hostValue).join(guestValue);
-  }
-
-  return translated
-    .split(/(\s+)/)
-    .map((token) => (/^\s+$/.test(token) ? token : translateTextTokenToGuest(token)))
-    .join('');
-}
-
-function translateErrorToGuest(error) {
-  if (error == null || typeof error !== 'object') {
-    return error;
-  }
-
-  if (typeof error.message === 'string') {
-    try {
-      error.message = translateTextToGuest(error.message);
-    } catch {
-      // Ignore readonly message bindings.
-    }
-  }
-
-  if (typeof error.stack === 'string') {
-    try {
-      error.stack = translateTextToGuest(error.stack);
-    } catch {
-      // Ignore readonly stack bindings.
-    }
-  }
-
-  if (typeof error.path === 'string') {
-    try {
-      error.path = translatePathStringToGuest(error.path);
-    } catch {
-      // Ignore readonly path bindings.
-    }
-  }
-
-  if (typeof error.filename === 'string') {
-    try {
-      error.filename = translatePathStringToGuest(error.filename);
-    } catch {
-      // Ignore readonly filename bindings.
-    }
-  }
-
-  if (typeof error.url === 'string') {
-    try {
-      error.url = translatePathStringToGuest(error.url);
-    } catch {
-      // Ignore readonly url bindings.
-    }
-  }
-
-  if (Array.isArray(error.requireStack)) {
-    try {
-      error.requireStack = error.requireStack.map((entry) => translatePathStringToGuest(entry));
-    } catch {
-      // Ignore readonly requireStack bindings.
-    }
-  }
-
-  return error;
-}
-
-function hostPathForSpecifier(specifier, fromGuestDir) {
-  if (typeof specifier !== 'string') {
-    return null;
-  }
-
-  if (specifier.startsWith('file:')) {
-    try {
-      return hostPathFromGuestPath(new URL(specifier).pathname);
-    } catch {
-      return null;
-    }
-  }
-
-  if (specifier.startsWith('/')) {
-    return hostPathFromGuestPath(specifier);
-  }
-
-  if (specifier.startsWith('./') || specifier.startsWith('../')) {
-    return hostPathFromGuestPath(
-      path.posix.normalize(path.posix.join(fromGuestDir, specifier)),
-    );
-  }
-
-  return null;
-}
-
-function translateGuestPath(value, fromGuestDir = '/') {
-  if (typeof value !== 'string') {
-    return value;
-  }
-
-  const translated = hostPathForSpecifier(value, fromGuestDir);
-  return translated ?? value;
-}
-
-function resolveGuestFsPath(value, fromGuestDir = '/') {
-  if (typeof value !== 'string') {
-    return value;
-  }
-
-  if (value.startsWith('file:')) {
-    try {
-      return path.posix.normalize(new URL(value).pathname);
-    } catch {
-      return value;
-    }
-  }
-
-  if (value.startsWith('/')) {
-    return path.posix.normalize(value);
-  }
-
-  if (value.startsWith('./') || value.startsWith('../')) {
-    return path.posix.normalize(path.posix.join(fromGuestDir, value));
-  }
-
-  return value;
-}
-
-function normalizeFsReadOptions(options) {
-  return typeof options === 'string' ? { encoding: options } : options;
-}
-
-function normalizeFsWriteContents(contents, options) {
-  if (typeof contents !== 'string') {
-    return contents;
-  }
-
-  const encoding =
-    typeof options === 'string'
-      ? options
-      : options && typeof options === 'object'
-        ? options.encoding
-        : undefined;
-  if (typeof encoding === 'string' && encoding !== 'utf8' && encoding !== 'utf-8') {
-    return Buffer.from(contents, encoding);
-  }
-
-  return contents;
-}
-
-function normalizeFsTimeValue(value) {
-  if (value instanceof Date) {
-    return value.getTime();
-  }
-
-  return value;
-}
-
-function createGuestFsStats(stat) {
-  if (stat == null || typeof stat !== 'object') {
-    return stat;
-  }
-
-  const flags = {
-    isDirectory: Boolean(stat.isDirectory),
-    isSymbolicLink: Boolean(stat.isSymbolicLink),
-  };
-  const target = { ...stat };
-
-  return new Proxy(target, {
-    get(source, key, receiver) {
-      switch (key) {
-        case 'isBlockDevice':
-        case 'isCharacterDevice':
-        case 'isFIFO':
-        case 'isSocket':
-          return () => false;
-        case 'isDirectory':
-          return () => flags.isDirectory;
-        case 'isFile':
-          return () => !flags.isDirectory && !flags.isSymbolicLink;
-        case 'isSymbolicLink':
-          return () => flags.isSymbolicLink;
-        case 'toJSON':
-          return () => ({ ...source, ...flags });
-        default:
-          return Reflect.get(source, key, receiver);
-      }
-    },
-  });
-}
-
-function requireSecureExecSyncRpcBridge() {
-  const bridge = globalThis.__agentOSSyncRpc;
-  if (
-    bridge &&
-    typeof bridge.call === 'function' &&
-    typeof bridge.callSync === 'function'
-  ) {
-    return bridge;
-  }
-
-  const error = new Error('secure-exec sync RPC bridge is unavailable');
-  error.code = 'ERR_AGENTOS_NODE_SYNC_RPC_UNAVAILABLE';
-  throw error;
-}
-
-function requireFsSyncRpcBridge() {
-  return requireSecureExecSyncRpcBridge();
-}
-
-function isPythonWarmupDebugEnabled() {
-  return process.env.AGENTOS_PYTHON_WARMUP_DEBUG === '1';
-}
-
-function emitPythonWarmupFsDebug(message) {
-  if (!isPythonWarmupDebugEnabled()) {
-    return;
-  }
-
-  try {
-    process.stderr.write(`__AGENTOS_PYTHON_FS_DEBUG__:${message}\n`);
-  } catch {
-    // Ignore debug logging failures.
-  }
-}
-
-function formatPythonWarmupFsDebugError(error) {
-  if (!error || typeof error !== 'object') {
-    return String(error);
-  }
-
-  if (typeof error.code === 'string' && error.code.length > 0) {
-    return error.code;
-  }
-
-  if (typeof error.message === 'string' && error.message.length > 0) {
-    return error.message;
-  }
-
-  return 'unknown';
-}
-
-function callFsRpc(method, args = []) {
-  emitPythonWarmupFsDebug(`${method}:start`);
-  return requireFsSyncRpcBridge()
-    .call(method, args)
-    .then(
-      (result) => {
-        emitPythonWarmupFsDebug(`${method}:ok`);
-        return result;
-      },
-      (error) => {
-        emitPythonWarmupFsDebug(
-          `${method}:error:${formatPythonWarmupFsDebugError(error)}`,
-        );
-        throw error;
-      },
-    );
-}
-
-function callFsRpcSync(method, args = []) {
-  emitPythonWarmupFsDebug(`${method}:start`);
-  try {
-    const result = requireFsSyncRpcBridge().callSync(method, args);
-    emitPythonWarmupFsDebug(`${method}:ok`);
-    return result;
-  } catch (error) {
-    emitPythonWarmupFsDebug(
-      `${method}:error:${formatPythonWarmupFsDebugError(error)}`,
-    );
-    throw error;
-  }
-}
-
-function guestProcessUmask(mask) {
-  const bridge = requireSecureExecSyncRpcBridge();
-  if (mask == null) {
-    return bridge.callSync('process.umask', []);
-  }
-  return bridge.callSync('process.umask', [normalizeFsMode(mask) ?? 0]);
-}
-
-function createRpcBackedFsPromises(fromGuestDir = '/') {
-  const call = (method, args = []) => callFsRpc(method, args);
-
-  return {
-    access: async (target, mode) => {
-      await call('fs.promises.access', [
-        resolveGuestFsPath(target, fromGuestDir),
-        mode,
-      ]);
-    },
-    chmod: async (target, mode) =>
-      call('fs.promises.chmod', [
-        resolveGuestFsPath(target, fromGuestDir),
-        mode,
-      ]),
-    chown: async (target, uid, gid) =>
-      call('fs.promises.chown', [
-        resolveGuestFsPath(target, fromGuestDir),
-        uid,
-        gid,
-      ]),
-    copyFile: async (source, destination, mode) =>
-      call('fs.promises.copyFile', [
-        resolveGuestFsPath(source, fromGuestDir),
-        resolveGuestFsPath(destination, fromGuestDir),
-        mode,
-      ]),
-    lstat: async (target) =>
-      createGuestFsStats(
-        await call('fs.promises.lstat', [resolveGuestFsPath(target, fromGuestDir)]),
-      ),
-    mkdir: async (target, options) =>
-      call('fs.promises.mkdir', [
-        resolveGuestFsPath(target, fromGuestDir),
-        options,
-      ]),
-    readFile: async (target, options) =>
-      call('fs.promises.readFile', [
-        resolveGuestFsPath(target, fromGuestDir),
-        normalizeFsReadOptions(options),
-      ]),
-    readdir: async (target, options) =>
-      call('fs.promises.readdir', [
-        resolveGuestFsPath(target, fromGuestDir),
-        options,
-      ]),
-    rename: async (source, destination) =>
-      call('fs.promises.rename', [
-        resolveGuestFsPath(source, fromGuestDir),
-        resolveGuestFsPath(destination, fromGuestDir),
-      ]),
-    rmdir: async (target, options) =>
-      call('fs.promises.rmdir', [
-        resolveGuestFsPath(target, fromGuestDir),
-        options,
-      ]),
-    stat: async (target) =>
-      createGuestFsStats(
-        await call('fs.promises.stat', [resolveGuestFsPath(target, fromGuestDir)]),
-      ),
-    unlink: async (target) =>
-      call('fs.promises.unlink', [resolveGuestFsPath(target, fromGuestDir)]),
-    utimes: async (target, atime, mtime) =>
-      call('fs.promises.utimes', [
-        resolveGuestFsPath(target, fromGuestDir),
-        normalizeFsTimeValue(atime),
-        normalizeFsTimeValue(mtime),
-      ]),
-    writeFile: async (target, contents, options) =>
-      call('fs.promises.writeFile', [
-        resolveGuestFsPath(target, fromGuestDir),
-        normalizeFsWriteContents(contents, options),
-        normalizeFsReadOptions(options),
-      ]),
-  };
-}
-
-function resolveGuestSymlinkTarget(value, fromGuestDir = '/') {
-  if (typeof value !== 'string') {
-    return value;
-  }
-
-  if (value.startsWith('file:') || value.startsWith('/')) {
-    return resolveGuestFsPath(value, fromGuestDir);
-  }
-
-  return value;
-}
-
-const INITIAL_GUEST_CWD = guestPathFromHostPath(HOST_CWD) ?? DEFAULT_GUEST_CWD;
-
-function guestMappedChildNames(guestDir) {
-  if (typeof guestDir !== 'string') {
-    return [];
-  }
-
-  const normalized = path.posix.normalize(guestDir);
-  const prefix = normalized === '/' ? '/' : `${normalized}/`;
-  const children = new Set();
-
-  for (const mapping of GUEST_PATH_MAPPINGS) {
-    if (!mapping.guestPath.startsWith(prefix)) {
-      continue;
-    }
-    const remainder = mapping.guestPath.slice(prefix.length);
-    const childName = remainder.split('/')[0];
-    if (childName) {
-      children.add(childName);
-    }
-  }
-
-  return [...children].sort();
-}
-
-function createSyntheticDirent(name) {
-  return {
-    name,
-    isBlockDevice: () => false,
-    isCharacterDevice: () => false,
-    isDirectory: () => true,
-    isFIFO: () => false,
-    isFile: () => false,
-    isSocket: () => false,
-    isSymbolicLink: () => false,
-  };
-}
-
-function createGuestDirent(name, stat) {
-  return {
-    name,
-    isBlockDevice: stat.isBlockDevice,
-    isCharacterDevice: stat.isCharacterDevice,
-    isDirectory: stat.isDirectory,
-    isFIFO: stat.isFIFO,
-    isFile: stat.isFile,
-    isSocket: stat.isSocket,
-    isSymbolicLink: stat.isSymbolicLink,
-  };
-}
-
-const GUEST_FS_O_RDONLY = 0;
-const GUEST_FS_O_WRONLY = 1;
-const GUEST_FS_O_RDWR = 2;
-const GUEST_FS_O_CREAT = 0o100;
-const GUEST_FS_O_EXCL = 0o200;
-const GUEST_FS_O_TRUNC = 0o1000;
-const GUEST_FS_O_APPEND = 0o2000;
-const GUEST_FS_DEFAULT_STREAM_HWM = 64 * 1024;
-
-function normalizeFsInteger(value, label) {
-  const numeric =
-    typeof value === 'number'
-      ? value
-      : typeof value === 'bigint'
-        ? Number(value)
-        : Number.NaN;
-  if (!Number.isFinite(numeric) || !Number.isInteger(numeric) || numeric < 0) {
-    throw new TypeError(`secure-exec ${label} must be a non-negative integer`);
-  }
-  return numeric;
-}
-
-function normalizeFsFd(value) {
-  return normalizeFsInteger(value, 'fd');
-}
-
-function isStdioFd(fd) {
-  return fd === 0 || fd === 1 || fd === 2;
-}
-
-function writeToStdioFd(fd, value) {
-  const stream =
-    fd === 1 ? process.stdout : fd === 2 ? process.stderr : null;
-  if (!stream || typeof stream.write !== 'function') {
-    throw new Error(`secure-exec cannot write stdio fd ${fd}`);
-  }
-  stream.write(value);
-  return typeof value === 'string' ? Buffer.byteLength(value) : value.byteLength;
-}
-
-function normalizeFsMode(mode) {
-  if (mode == null) {
-    return null;
-  }
-  if (typeof mode === 'string') {
-    const parsed = Number.parseInt(mode, 8);
-    if (!Number.isNaN(parsed)) {
-      return parsed;
-    }
-  }
-  return normalizeFsInteger(mode, 'mode');
-}
-
-function normalizeFsPosition(position) {
-  if (position == null) {
-    return null;
-  }
-  return normalizeFsInteger(position, 'position');
-}
-
-function normalizeFsOpenFlags(flags = 'r') {
-  if (typeof flags === 'number') {
-    return flags;
-  }
-
-  switch (flags) {
-    case 'r':
-    case 'rs':
-    case 'sr':
-      return GUEST_FS_O_RDONLY;
-    case 'r+':
-    case 'rs+':
-    case 'sr+':
-      return GUEST_FS_O_RDWR;
-    case 'w':
-      return GUEST_FS_O_WRONLY | GUEST_FS_O_CREAT | GUEST_FS_O_TRUNC;
-    case 'wx':
-    case 'xw':
-      return GUEST_FS_O_WRONLY | GUEST_FS_O_CREAT | GUEST_FS_O_TRUNC | GUEST_FS_O_EXCL;
-    case 'w+':
-      return GUEST_FS_O_RDWR | GUEST_FS_O_CREAT | GUEST_FS_O_TRUNC;
-    case 'wx+':
-    case 'xw+':
-      return GUEST_FS_O_RDWR | GUEST_FS_O_CREAT | GUEST_FS_O_TRUNC | GUEST_FS_O_EXCL;
-    case 'a':
-      return GUEST_FS_O_WRONLY | GUEST_FS_O_CREAT | GUEST_FS_O_APPEND;
-    case 'ax':
-    case 'xa':
-      return GUEST_FS_O_WRONLY | GUEST_FS_O_CREAT | GUEST_FS_O_APPEND | GUEST_FS_O_EXCL;
-    case 'a+':
-      return GUEST_FS_O_RDWR | GUEST_FS_O_CREAT | GUEST_FS_O_APPEND;
-    case 'ax+':
-    case 'xa+':
-      return GUEST_FS_O_RDWR | GUEST_FS_O_CREAT | GUEST_FS_O_APPEND | GUEST_FS_O_EXCL;
-    default:
-      throw new TypeError(`secure-exec does not support fs open flag ${String(flags)}`);
-  }
-}
-
-function toGuestBufferView(value, label) {
-  if (Buffer.isBuffer(value)) {
-    return value;
-  }
-  if (ArrayBuffer.isView(value)) {
-    return Buffer.from(value.buffer, value.byteOffset, value.byteLength);
-  }
-  throw new TypeError(`secure-exec ${label} must be a Buffer, TypedArray, or DataView`);
-}
-
-function decodeFsBytesPayload(value, label) {
-  const decodeByteArray = (bytes) => {
-    const denseBytes = Array.from(bytes);
-    if (denseBytes.length !== bytes.length) {
-      throw new TypeError(`secure-exec ${label} contains sparse byte values`);
-    }
-    if (
-      !denseBytes.every(
-        (byte) => typeof byte === 'number' && Number.isInteger(byte) && byte >= 0 && byte <= 255,
-      )
-    ) {
-      throw new TypeError(`secure-exec ${label} contains an invalid byte value`);
-    }
-    return Buffer.from(denseBytes);
-  };
-
-  if (Buffer.isBuffer(value)) {
-    return value;
-  }
-  if (ArrayBuffer.isView(value)) {
-    return Buffer.from(value.buffer, value.byteOffset, value.byteLength);
-  }
-  if (typeof value === 'string') {
-    return Buffer.from(value);
-  }
-  if (Array.isArray(value)) {
-    return decodeByteArray(value);
-  }
-  if (
-    value &&
-    typeof value === 'object' &&
-    Array.isArray(value.data)
-  ) {
-    return decodeByteArray(value.data);
-  }
-  if (value && typeof value === 'object') {
-    const entries = Object.entries(value);
-    if (
-      entries.length > 0 &&
-      entries.every(
-        ([key, byte]) =>
-          /^\d+$/.test(key) && typeof byte === 'number' && Number.isInteger(byte),
-      )
-    ) {
-      const bytes = [];
-      for (const [key, byte] of entries) {
-        const index = Number(key);
-        if (index < 0 || index >= entries.length || bytes[index] !== undefined) {
-          throw new TypeError(`secure-exec ${label} contains non-contiguous byte keys`);
-        }
-        bytes[index] = byte;
-      }
-      if (bytes.length !== entries.length || bytes.some((byte) => byte === undefined)) {
-        throw new TypeError(`secure-exec ${label} contains sparse byte keys`);
-      }
-      return decodeByteArray(bytes);
-    }
-  }
-  if (
-    value &&
-    typeof value === 'object' &&
-    typeof value.data === 'string'
-  ) {
-    return Buffer.from(value.data, 'base64');
-  }
-
-  const base64Value =
-    value &&
-    typeof value === 'object' &&
-    typeof (value.base64 ?? value.dataBase64) === 'string'
-      ? (value.base64 ?? value.dataBase64)
-      : null;
-  if (base64Value == null) {
-    throw new TypeError(`secure-exec ${label} must be an encoded bytes payload`);
-  }
-  return Buffer.from(base64Value, 'base64');
-}
-
-function normalizeFsReadTarget(buffer, offset, length) {
-  const target = toGuestBufferView(buffer, 'read buffer');
-  const normalizedOffset = offset == null ? 0 : normalizeFsInteger(offset, 'read offset');
-  const available = target.byteLength - normalizedOffset;
-  if (normalizedOffset > target.byteLength) {
-    throw new RangeError('secure-exec read offset is out of range');
-  }
-  const normalizedLength =
-    length == null ? available : normalizeFsInteger(length, 'read length');
-  if (normalizedLength > available) {
-    throw new RangeError('secure-exec read length is out of range');
-  }
-  return { target, offset: normalizedOffset, length: normalizedLength };
-}
-
-function normalizeFsWriteOperation(value, offsetOrPosition, lengthOrEncoding, position) {
-  if (typeof value === 'string') {
-    const normalizedPosition = normalizeFsPosition(offsetOrPosition);
-    const encoding =
-      typeof lengthOrEncoding === 'string' ? lengthOrEncoding : 'utf8';
-    return {
-      payload: normalizeFsWriteContents(value, { encoding }),
-      position: normalizedPosition,
-      result: value,
-    };
-  }
-
-  const source = toGuestBufferView(value, 'write buffer');
-  const normalizedOffset =
-    offsetOrPosition == null ? 0 : normalizeFsInteger(offsetOrPosition, 'write offset');
-  const available = source.byteLength - normalizedOffset;
-  if (normalizedOffset > source.byteLength) {
-    throw new RangeError('secure-exec write offset is out of range');
-  }
-  const normalizedLength =
-    lengthOrEncoding == null
-      ? available
-      : normalizeFsInteger(lengthOrEncoding, 'write length');
-  if (normalizedLength > available) {
-    throw new RangeError('secure-exec write length is out of range');
-  }
-
-  return {
-    payload: source.subarray(normalizedOffset, normalizedOffset + normalizedLength),
-    position: normalizeFsPosition(position),
-    result: value,
-  };
-}
-
-function normalizeFsBytesResult(value, label) {
-  const numeric =
-    typeof value === 'number'
-      ? value
-      : typeof value === 'bigint'
-        ? Number(value)
-        : Number.NaN;
-  if (!Number.isFinite(numeric) || numeric < 0) {
-    throw new TypeError(`secure-exec ${label} must be numeric`);
-  }
-  return Math.trunc(numeric);
-}
-
-function requireFsCallback(callback, methodName) {
-  if (typeof callback !== 'function') {
-    throw new TypeError(`secure-exec ${methodName} requires a callback`);
-  }
-  return callback;
-}
-
-function invokeFsCallback(callback, error, ...results) {
-  queueMicrotask(() => callback(error, ...results));
-}
-
-function readKernelStdinForFs(target, buffer, callback) {
-  if (target.length === 0) {
-    invokeFsCallback(callback, null, 0, buffer);
-    return;
-  }
-
-  let idleDelayMs = 1;
-  const attempt = () => {
-    requireFsSyncRpcBridge()
-      .call('__kernel_stdin_read', [target.length, 5])
-      .then(
-        (payload) => {
-          if (payload == null) {
-            const nextDelayMs = idleDelayMs;
-            idleDelayMs = Math.min(idleDelayMs * 2, 25);
-            setTimeout(attempt, nextDelayMs);
-            return;
-          }
-          if (payload && payload.done === true) {
-            invokeFsCallback(callback, null, 0, buffer);
-            return;
-          }
-          const dataBase64 =
-            payload &&
-            typeof payload === 'object' &&
-            typeof payload.dataBase64 === 'string'
-              ? payload.dataBase64
-              : '';
-          if (!dataBase64) {
-            const nextDelayMs = idleDelayMs;
-            idleDelayMs = Math.min(idleDelayMs * 2, 25);
-            setTimeout(attempt, nextDelayMs);
-            return;
-          }
-          idleDelayMs = 1;
-          const chunk = Buffer.from(dataBase64, 'base64');
-          const bytesRead = Math.min(target.length, chunk.byteLength);
-          chunk.copy(target.target, target.offset, 0, bytesRead);
-          invokeFsCallback(callback, null, bytesRead, buffer);
-        },
-        (error) => invokeFsCallback(callback, error),
-      );
-  };
-  attempt();
-}
-
-function createFsWatchUnavailableError(methodName) {
-  const error = new Error(
-    `secure-exec ${methodName} is unavailable because the kernel has no file-watching API`,
-  );
-  error.code = 'ERR_AGENTOS_FS_WATCH_UNAVAILABLE';
-  return error;
-}
-
-function createRpcBackedFsCallbacks(fromGuestDir = '/') {
-  const call = (method, args = []) => requireFsSyncRpcBridge().call(method, args);
-
-  return {
-    close: (fd, callback) => {
-      const done = requireFsCallback(callback, 'fs.close');
-      call('fs.close', [normalizeFsFd(fd)]).then(
-        () => invokeFsCallback(done, null),
-        (error) => invokeFsCallback(done, error),
-      );
-    },
-    fstat: (fd, options, callback) => {
-      const done = requireFsCallback(
-        typeof options === 'function' ? options : callback,
-        'fs.fstat',
-      );
-      call('fs.fstat', [normalizeFsFd(fd)]).then(
-        (stat) => invokeFsCallback(done, null, createGuestFsStats(stat)),
-        (error) => invokeFsCallback(done, error),
-      );
-    },
-    open: (target, flags, mode, callback) => {
-      if (typeof flags === 'function') {
-        callback = flags;
-        flags = undefined;
-        mode = undefined;
-      } else if (typeof mode === 'function') {
-        callback = mode;
-        mode = undefined;
-      }
-
-      const done = requireFsCallback(callback, 'fs.open');
-      call('fs.open', [
-        resolveGuestFsPath(target, fromGuestDir),
-        normalizeFsOpenFlags(flags ?? 'r'),
-        normalizeFsMode(mode),
-      ]).then(
-        (fd) => invokeFsCallback(done, null, normalizeFsFd(fd)),
-        (error) => invokeFsCallback(done, error),
-      );
-    },
-    read: (fd, buffer, offset, length, position, callback) => {
-      if (typeof offset === 'function') {
-        callback = offset;
-        offset = undefined;
-        length = undefined;
-        position = undefined;
-      } else if (typeof length === 'function') {
-        callback = length;
-        length = undefined;
-        position = undefined;
-      } else if (typeof position === 'function') {
-        callback = position;
-        position = undefined;
-      }
-
-      const done = requireFsCallback(callback, 'fs.read');
-      const target = normalizeFsReadTarget(buffer, offset, length);
-      const normalizedFd = normalizeFsFd(fd);
-      const normalizedPosition = normalizeFsPosition(position);
-      if (normalizedFd === 0 && normalizedPosition == null) {
-        readKernelStdinForFs(target, buffer, done);
-        return;
-      }
-      call('fs.read', [
-        normalizedFd,
-        target.length,
-        normalizedPosition,
-      ]).then(
-        (payload) => {
-          const chunk = decodeFsBytesPayload(payload, 'fs.read result');
-          const bytesRead = Math.min(target.length, chunk.byteLength);
-          chunk.copy(target.target, target.offset, 0, bytesRead);
-          invokeFsCallback(done, null, bytesRead, buffer);
-        },
-        (error) => invokeFsCallback(done, error),
-      );
-    },
-    write: (fd, value, offsetOrPosition, lengthOrEncoding, position, callback) => {
-      if (typeof offsetOrPosition === 'function') {
-        callback = offsetOrPosition;
-        offsetOrPosition = undefined;
-        lengthOrEncoding = undefined;
-        position = undefined;
-      } else if (typeof lengthOrEncoding === 'function') {
-        callback = lengthOrEncoding;
-        lengthOrEncoding = undefined;
-        position = undefined;
-      } else if (typeof position === 'function') {
-        callback = position;
-        position = undefined;
-      }
-
-      const done = requireFsCallback(callback, 'fs.write');
-      const write = normalizeFsWriteOperation(
-        value,
-        offsetOrPosition,
-        lengthOrEncoding,
-        position,
-      );
-      const normalizedFd = normalizeFsFd(fd);
-      if (isStdioFd(normalizedFd)) {
-        try {
-          const bytesWritten = writeToStdioFd(normalizedFd, write.payload);
-          invokeFsCallback(done, null, bytesWritten, write.result);
-        } catch (error) {
-          invokeFsCallback(done, error);
-        }
-        return;
-      }
-      call('fs.write', [normalizedFd, write.payload, write.position]).then(
-        (bytesWritten) =>
-          invokeFsCallback(
-            done,
-            null,
-            normalizeFsBytesResult(bytesWritten, 'fs.write result'),
-            write.result,
-          ),
-        (error) => invokeFsCallback(done, error),
-      );
-    },
-  };
-}
-
-function createRpcBackedFsSync(fromGuestDir = '/') {
-  const callSync = (method, args = []) => callFsRpcSync(method, args);
-
-  return {
-    accessSync: (target, mode) =>
-      callSync('fs.accessSync', [resolveGuestFsPath(target, fromGuestDir), mode]),
-    chmodSync: (target, mode) =>
-      callSync('fs.chmodSync', [resolveGuestFsPath(target, fromGuestDir), mode]),
-    chownSync: (target, uid, gid) =>
-      callSync('fs.chownSync', [resolveGuestFsPath(target, fromGuestDir), uid, gid]),
-    closeSync: (fd) => {
-      const normalizedFd = normalizeFsFd(fd);
-      if (isStdioFd(normalizedFd)) {
-        return undefined;
-      }
-      return callSync('fs.closeSync', [normalizedFd]);
-    },
-    copyFileSync: (source, destination, mode) =>
-      callSync('fs.copyFileSync', [
-        resolveGuestFsPath(source, fromGuestDir),
-        resolveGuestFsPath(destination, fromGuestDir),
-        mode,
-      ]),
-    existsSync: (target) => {
-      try {
-        return Boolean(callSync('fs.existsSync', [resolveGuestFsPath(target, fromGuestDir)]));
-      } catch {
-        return false;
-      }
-    },
-    fstatSync: (fd) => {
-      const normalizedFd = normalizeFsFd(fd);
-      if (isStdioFd(normalizedFd)) {
-        return hostFs.fstatSync(normalizedFd);
-      }
-      return createGuestFsStats(callSync('fs.fstatSync', [normalizedFd]));
-    },
-    ftruncateSync: (fd, len) => {
-      const normalizedFd = normalizeFsFd(fd);
-      if (isStdioFd(normalizedFd)) {
-        return hostFs.ftruncateSync(normalizedFd, len);
-      }
-      return callSync('fs.ftruncateSync', [normalizedFd, normalizeFsInteger(len ?? 0, 'length')]);
-    },
-    linkSync: (existingPath, newPath) =>
-      callSync('fs.linkSync', [
-        resolveGuestFsPath(existingPath, fromGuestDir),
-        resolveGuestFsPath(newPath, fromGuestDir),
-      ]),
-    lstatSync: (target) =>
-      createGuestFsStats(callSync('fs.lstatSync', [resolveGuestFsPath(target, fromGuestDir)])),
-    mkdirSync: (target, options) =>
-      callSync('fs.mkdirSync', [resolveGuestFsPath(target, fromGuestDir), options]),
-    openSync: (target, flags, mode) =>
-      normalizeFsFd(
-        callSync('fs.openSync', [
-          resolveGuestFsPath(target, fromGuestDir),
-          normalizeFsOpenFlags(flags ?? 'r'),
-          normalizeFsMode(mode),
-        ]),
-      ),
-    readFileSync: (target, options) =>
-      callSync('fs.readFileSync', [
-        resolveGuestFsPath(target, fromGuestDir),
-        normalizeFsReadOptions(options),
-      ]),
-    readSync: (fd, buffer, offset, length, position) => {
-      const normalizedFd = normalizeFsFd(fd);
-      const target = normalizeFsReadTarget(buffer, offset, length);
-      if (isStdioFd(normalizedFd)) {
-        return hostFs.readSync(
-          normalizedFd,
-          target.target,
-          target.offset,
-          target.length,
-          position,
-        );
-      }
-      const chunk = decodeFsBytesPayload(
-        callSync('fs.readSync', [
-          normalizedFd,
-          target.length,
-          normalizeFsPosition(position),
-        ]),
-        'fs.readSync result',
-      );
-      const bytesRead = Math.min(target.length, chunk.byteLength);
-      chunk.copy(target.target, target.offset, 0, bytesRead);
-      return bytesRead;
-    },
-    readdirSync: (target, options) => {
-      const guestPath = resolveGuestFsPath(target, fromGuestDir);
-      const entries = callSync('fs.readdirSync', [guestPath, options]);
-      if (!options || typeof options !== 'object' || !options.withFileTypes) {
-        return entries;
-      }
-
-      return entries.map((name) =>
-        createGuestDirent(
-          name,
-          createGuestFsStats(callSync('fs.lstatSync', [path.posix.join(guestPath, name)])),
-        ),
-      );
-    },
-    readlinkSync: (target) =>
-      callSync('fs.readlinkSync', [resolveGuestFsPath(target, fromGuestDir)]),
-    renameSync: (source, destination) =>
-      callSync('fs.renameSync', [
-        resolveGuestFsPath(source, fromGuestDir),
-        resolveGuestFsPath(destination, fromGuestDir),
-      ]),
-    rmdirSync: (target, options) =>
-      callSync('fs.rmdirSync', [resolveGuestFsPath(target, fromGuestDir), options]),
-    statSync: (target) =>
-      createGuestFsStats(callSync('fs.statSync', [resolveGuestFsPath(target, fromGuestDir)])),
-    symlinkSync: (target, linkPath, type) =>
-      callSync('fs.symlinkSync', [
-        resolveGuestSymlinkTarget(target, fromGuestDir),
-        resolveGuestFsPath(linkPath, fromGuestDir),
-        type,
-      ]),
-    truncateSync: (target, len) =>
-      callSync('fs.truncateSync', [
-        resolveGuestFsPath(target, fromGuestDir),
-        normalizeFsInteger(len ?? 0, 'length'),
-      ]),
-    unlinkSync: (target) =>
-      callSync('fs.unlinkSync', [resolveGuestFsPath(target, fromGuestDir)]),
-    utimesSync: (target, atime, mtime) =>
-      callSync('fs.utimesSync', [
-        resolveGuestFsPath(target, fromGuestDir),
-        normalizeFsTimeValue(atime),
-        normalizeFsTimeValue(mtime),
-      ]),
-    writeSync: (fd, value, offsetOrPosition, lengthOrEncoding, position) => {
-      const normalizedFd = normalizeFsFd(fd);
-      const write = normalizeFsWriteOperation(
-        value,
-        offsetOrPosition,
-        lengthOrEncoding,
-        position,
-      );
-      if (isStdioFd(normalizedFd)) {
-        return writeToStdioFd(normalizedFd, write.payload);
-      }
-      return normalizeFsBytesResult(
-        callSync('fs.writeSync', [normalizedFd, write.payload, write.position]),
-        'fs.writeSync result',
-      );
-    },
-    writeFileSync: (target, contents, options) =>
-      callSync('fs.writeFileSync', [
-        resolveGuestFsPath(target, fromGuestDir),
-        normalizeFsWriteContents(contents, options),
-        normalizeFsReadOptions(options),
-      ]),
-  };
-}
-
-function createGuestReadStreamClass(fromGuestDir = '/') {
-  const call = (method, args = []) => requireFsSyncRpcBridge().call(method, args);
-
-  return class SecureExecReadStream extends Readable {
-    constructor(target, options = {}) {
-      super({
-        autoDestroy: options.autoClose !== false,
-        emitClose: options.emitClose !== false,
-        highWaterMark: options.highWaterMark,
-      });
-
-      this.path = target;
-      this.fd = typeof options.fd === 'number' ? options.fd : null;
-      this.flags = options.flags ?? 'r';
-      this.mode = options.mode;
-      this.autoClose = options.autoClose !== false;
-      this.start = options.start;
-      this.end = options.end;
-      this.bytesRead = 0;
-      this.pending = false;
-      this.position =
-        options.start == null ? null : normalizeFsInteger(options.start, 'stream start');
-      this.guestDir = fromGuestDir;
-
-      if (options.end != null) {
-        this.end = normalizeFsInteger(options.end, 'stream end');
-        if (this.position != null && this.end < this.position) {
-          throw new RangeError('secure-exec read stream end must be >= start');
-        }
-      }
-
-      if (options.encoding) {
-        this.setEncoding(options.encoding);
-      }
-    }
-
-    _construct(callback) {
-      if (typeof this.fd === 'number') {
-        this.emit('open', this.fd);
-        this.emit('ready');
-        callback();
-        return;
-      }
-
-      call('fs.open', [
-        resolveGuestFsPath(this.path, this.guestDir),
-        normalizeFsOpenFlags(this.flags),
-        normalizeFsMode(this.mode),
-      ]).then(
-        (fd) => {
-          this.fd = normalizeFsFd(fd);
-          this.emit('open', this.fd);
-          this.emit('ready');
-          callback();
-        },
-        (error) => callback(error),
-      );
-    }
-
-    _read(size) {
-      if (this.pending || typeof this.fd !== 'number') {
-        return;
-      }
-
-      let length = size > 0 ? size : this.readableHighWaterMark ?? GUEST_FS_DEFAULT_STREAM_HWM;
-      if (this.position != null && this.end != null) {
-        const remaining = this.end - this.position + 1;
-        if (remaining <= 0) {
-          this.push(null);
-          return;
-        }
-        length = Math.min(length, remaining);
-      }
-
-      this.pending = true;
-      call('fs.read', [this.fd, length, this.position]).then(
-        (payload) => {
-          this.pending = false;
-          const chunk = decodeFsBytesPayload(payload, 'fs.createReadStream chunk');
-          if (this.position != null) {
-            this.position += chunk.byteLength;
-          }
-          this.bytesRead += chunk.byteLength;
-          if (chunk.byteLength === 0) {
-            this.push(null);
-            return;
-          }
-          this.push(chunk);
-        },
-        (error) => {
-          this.pending = false;
-          this.destroy(error);
-        },
-      );
-    }
-
-    _destroy(error, callback) {
-      if (!this.autoClose || typeof this.fd !== 'number') {
-        callback(error);
-        return;
-      }
-
-      const fd = this.fd;
-      this.fd = null;
-      call('fs.close', [fd]).then(
-        () => callback(error),
-        (closeError) => callback(error ?? closeError),
-      );
-    }
-  };
-}
-
-function createGuestWriteStreamClass(fromGuestDir = '/') {
-  const call = (method, args = []) => requireFsSyncRpcBridge().call(method, args);
-
-  return class SecureExecWriteStream extends Writable {
-    constructor(target, options = {}) {
-      super({
-        autoDestroy: options.autoClose !== false,
-        defaultEncoding: options.defaultEncoding,
-        decodeStrings: options.decodeStrings !== false,
-        emitClose: options.emitClose !== false,
-        highWaterMark: options.highWaterMark,
-      });
-
-      this.path = target;
-      this.fd = typeof options.fd === 'number' ? options.fd : null;
-      this.flags = options.flags ?? 'w';
-      this.mode = options.mode;
-      this.autoClose = options.autoClose !== false;
-      this.bytesWritten = 0;
-      this.position =
-        options.start == null ? null : normalizeFsInteger(options.start, 'stream start');
-      this.guestDir = fromGuestDir;
-    }
-
-    _construct(callback) {
-      if (typeof this.fd === 'number') {
-        this.emit('open', this.fd);
-        this.emit('ready');
-        callback();
-        return;
-      }
-
-      call('fs.open', [
-        resolveGuestFsPath(this.path, this.guestDir),
-        normalizeFsOpenFlags(this.flags),
-        normalizeFsMode(this.mode),
-      ]).then(
-        (fd) => {
-          this.fd = normalizeFsFd(fd);
-          this.emit('open', this.fd);
-          this.emit('ready');
-          callback();
-        },
-        (error) => callback(error),
-      );
-    }
-
-    _write(chunk, encoding, callback) {
-      const write = normalizeFsWriteOperation(chunk, 0, chunk.length, this.position);
-      call('fs.write', [normalizeFsFd(this.fd), write.payload, write.position]).then(
-        (bytesWritten) => {
-          const normalized = normalizeFsBytesResult(
-            bytesWritten,
-            'fs.createWriteStream result',
-          );
-          this.bytesWritten += normalized;
-          if (this.position != null) {
-            this.position += normalized;
-          }
-          callback();
-        },
-        (error) => callback(error),
-      );
-    }
-
-    _destroy(error, callback) {
-      if (!this.autoClose || typeof this.fd !== 'number') {
-        callback(error);
-        return;
-      }
-
-      const fd = this.fd;
-      this.fd = null;
-      call('fs.close', [fd]).then(
-        () => callback(error),
-        (closeError) => callback(error ?? closeError),
-      );
-    }
-  };
-}
-
-function wrapFsModule(fsModule, fromGuestDir = '/') {
-  const wrapPathFirst = (methodName) => {
-    const fn = fsModule[methodName];
-    return (...args) =>
-      fn(translateGuestPath(args[0], fromGuestDir), ...args.slice(1));
-  };
-  const wrapRenameLike = (methodName) => {
-    const fn = fsModule[methodName];
-    return (...args) =>
-      fn(
-        translateGuestPath(args[0], fromGuestDir),
-        translateGuestPath(args[1], fromGuestDir),
-        ...args.slice(2),
-      );
-  };
-  const existsSync = fsModule.existsSync.bind(fsModule);
-  const readdirSync = fsModule.readdirSync.bind(fsModule);
-  const ReadStream = createGuestReadStreamClass(fromGuestDir);
-  const WriteStream = createGuestWriteStreamClass(fromGuestDir);
-
-  const wrapped = {
-    ...fsModule,
-    ReadStream,
-    WriteStream,
-    accessSync: wrapPathFirst('accessSync'),
-    appendFileSync: wrapPathFirst('appendFileSync'),
-    chmodSync: wrapPathFirst('chmodSync'),
-    chownSync: wrapPathFirst('chownSync'),
-    createReadStream: (target, options) => new ReadStream(target, options),
-    createWriteStream: (target, options) => new WriteStream(target, options),
-    existsSync: (target) => {
-      const translated = translateGuestPath(target, fromGuestDir);
-      return existsSync(translated) || guestMappedChildNames(target).length > 0;
-    },
-    lstatSync: wrapPathFirst('lstatSync'),
-    mkdirSync: wrapPathFirst('mkdirSync'),
-    readFileSync: wrapPathFirst('readFileSync'),
-    readdirSync: (target, options) => {
-      const translated = translateGuestPath(target, fromGuestDir);
-      if (existsSync(translated)) {
-        return readdirSync(translated, options);
-      }
-
-      const synthetic = guestMappedChildNames(target);
-      if (synthetic.length > 0) {
-        return options && typeof options === 'object' && options.withFileTypes
-          ? synthetic.map((name) => createSyntheticDirent(name))
-          : synthetic;
-      }
-
-      return readdirSync(translated, options);
-    },
-    readlinkSync: wrapPathFirst('readlinkSync'),
-    realpathSync: wrapPathFirst('realpathSync'),
-    renameSync: wrapRenameLike('renameSync'),
-    rmSync: wrapPathFirst('rmSync'),
-    rmdirSync: wrapPathFirst('rmdirSync'),
-    statSync: wrapPathFirst('statSync'),
-    symlinkSync: wrapRenameLike('symlinkSync'),
-    unlinkSync: wrapPathFirst('unlinkSync'),
-    unwatchFile: () => {},
-    utimesSync: wrapPathFirst('utimesSync'),
-    watch: () => {
-      throw createFsWatchUnavailableError('fs.watch');
-    },
-    watchFile: () => {
-      throw createFsWatchUnavailableError('fs.watchFile');
-    },
-    writeFileSync: wrapPathFirst('writeFileSync'),
-  };
-
-  if (fsModule.promises) {
-    wrapped.promises = {
-      ...fsModule.promises,
-      access: wrapPathFirstAsync(fsModule.promises.access, fromGuestDir),
-      appendFile: wrapPathFirstAsync(fsModule.promises.appendFile, fromGuestDir),
-      chmod: wrapPathFirstAsync(fsModule.promises.chmod, fromGuestDir),
-      chown: wrapPathFirstAsync(fsModule.promises.chown, fromGuestDir),
-      lstat: wrapPathFirstAsync(fsModule.promises.lstat, fromGuestDir),
-      mkdir: wrapPathFirstAsync(fsModule.promises.mkdir, fromGuestDir),
-      open: wrapPathFirstAsync(fsModule.promises.open, fromGuestDir),
-      readFile: wrapPathFirstAsync(fsModule.promises.readFile, fromGuestDir),
-      readdir: wrapPathFirstAsync(fsModule.promises.readdir, fromGuestDir),
-      readlink: wrapPathFirstAsync(fsModule.promises.readlink, fromGuestDir),
-      realpath: wrapPathFirstAsync(fsModule.promises.realpath, fromGuestDir),
-      rename: wrapRenameLikeAsync(fsModule.promises.rename, fromGuestDir),
-      rm: wrapPathFirstAsync(fsModule.promises.rm, fromGuestDir),
-      rmdir: wrapPathFirstAsync(fsModule.promises.rmdir, fromGuestDir),
-      stat: wrapPathFirstAsync(fsModule.promises.stat, fromGuestDir),
-      symlink: wrapRenameLikeAsync(fsModule.promises.symlink, fromGuestDir),
-      unlink: wrapPathFirstAsync(fsModule.promises.unlink, fromGuestDir),
-      utimes: wrapPathFirstAsync(fsModule.promises.utimes, fromGuestDir),
-      writeFile: wrapPathFirstAsync(fsModule.promises.writeFile, fromGuestDir),
-    };
-    Object.assign(wrapped.promises, createRpcBackedFsPromises(fromGuestDir));
-  }
-
-  Object.assign(wrapped, createRpcBackedFsCallbacks(fromGuestDir));
-  Object.assign(wrapped, createRpcBackedFsSync(fromGuestDir));
-
-  return wrapped;
-}
-
-function wrapPathFirstAsync(fn, fromGuestDir) {
-  return (...args) =>
-    fn(translateGuestPath(args[0], fromGuestDir), ...args.slice(1));
-}
-
-function wrapRenameLikeAsync(fn, fromGuestDir) {
-  return (...args) =>
-    fn(
-      translateGuestPath(args[0], fromGuestDir),
-      translateGuestPath(args[1], fromGuestDir),
-      ...args.slice(2),
-    );
-}
-
-function createRpcBackedChildProcessModule(fromGuestDir = '/') {
-  const RPC_POLL_WAIT_MS = 50;
-  const RPC_IDLE_POLL_DELAY_MS = 10;
-  const INTERNAL_BOOTSTRAP_ENV_KEYS = [
-    'AGENTOS_ALLOWED_NODE_BUILTINS',
-    'AGENTOS_GUEST_PATH_MAPPINGS',
-    'AGENTOS_LOOPBACK_EXEMPT_PORTS',
-    'AGENTOS_VIRTUAL_PROCESS_EXEC_PATH',
-    'AGENTOS_VIRTUAL_PROCESS_UID',
-    'AGENTOS_VIRTUAL_PROCESS_GID',
-    'AGENTOS_VIRTUAL_PROCESS_VERSION',
-  ];
-
-  const bridge = () => requireSecureExecSyncRpcBridge();
-  const createUnsupportedChildProcessError = (subject) => {
-    const error = new Error(`${subject} is not supported by the secure-exec child_process polyfill`);
-    error.code = 'ERR_AGENTOS_CHILD_PROCESS_UNSUPPORTED';
-    return error;
-  };
-  const normalizeSpawnInvocation = (args, options) => {
-    if (!Array.isArray(args)) {
-      return {
-        args: [],
-        options: args && typeof args === 'object' ? args : options,
-      };
-    }
-
-    return {
-      args,
-      options,
-    };
-  };
-  const normalizeExecInvocation = (options, callback) =>
-    typeof options === 'function'
-      ? { options: undefined, callback: options }
-      : { options, callback };
-  const normalizeExecFileInvocation = (args, options, callback) => {
-    if (typeof args === 'function') {
-      return { args: [], options: undefined, callback: args };
-    }
-    if (!Array.isArray(args)) {
-      return {
-        args: [],
-        options: args,
-        callback: typeof options === 'function' ? options : callback,
-      };
-    }
-    if (typeof options === 'function') {
-      return { args, options: undefined, callback: options };
-    }
-    return { args, options, callback };
-  };
-  const normalizeChildProcessSignal = (value) =>
-    typeof value === 'string' && value.length > 0 ? value : 'SIGTERM';
-  const normalizeChildProcessEncoding = (options) =>
-    typeof options?.encoding === 'string' ? options.encoding : null;
-  const normalizeChildProcessTimeout = (options) =>
-    Number.isInteger(options?.timeout) && options.timeout > 0 ? options.timeout : null;
-  const normalizeChildProcessEnv = (env) => {
-    const source = env && typeof env === 'object' ? env : {};
-    const merged = {
-      ...Object.fromEntries(
-        Object.entries(process.env).filter(
-          ([key, value]) => typeof value === 'string' && !isInternalProcessEnvKey(key),
-        ),
-      ),
-      ...Object.fromEntries(
-        Object.entries(source).filter(
-          ([key, value]) => value != null && !isInternalProcessEnvKey(key),
-        ),
-      ),
-    };
-    delete merged.NODE_OPTIONS;
-
-    return Object.fromEntries(
-      Object.entries(merged).map(([key, value]) => [key, String(value)]),
-    );
-  };
-  const createChildProcessInternalBootstrapEnv = () => {
-    const bootstrapEnv = {};
-
-    for (const key of INTERNAL_BOOTSTRAP_ENV_KEYS) {
-      if (typeof HOST_PROCESS_ENV[key] === 'string') {
-        bootstrapEnv[key] = HOST_PROCESS_ENV[key];
-      }
-    }
-    // Virtual OS identity is no longer carried as `AGENTOS_VIRTUAL_OS_*` env;
-    // nested child executions receive it via the typed `guest_runtime` →
-    // `__agentOSVirtualOs` global like every other guest execution.
-
-    return bootstrapEnv;
-  };
-  const normalizeChildProcessStdioEntry = (value, index) => {
-    if (value == null) {
-      return 'pipe';
-    }
-    if (value === 'pipe' || value === 'ignore' || value === 'inherit') {
-      return value;
-    }
-    if (value === 'ipc') {
-      throw createUnsupportedChildProcessError('child_process IPC stdio');
-    }
-    if (value === null && index === 0) {
-      return 'pipe';
-    }
-    throw createUnsupportedChildProcessError(`child_process stdio=${String(value)}`);
-  };
-  const normalizeChildProcessStdio = (stdio) => {
-    if (stdio == null) {
-      return ['pipe', 'pipe', 'pipe'];
-    }
-    if (typeof stdio === 'string') {
-      return [
-        normalizeChildProcessStdioEntry(stdio, 0),
-        normalizeChildProcessStdioEntry(stdio, 1),
-        normalizeChildProcessStdioEntry(stdio, 2),
-      ];
-    }
-    if (!Array.isArray(stdio)) {
-      throw createUnsupportedChildProcessError('child_process stdio configuration');
-    }
-    return [0, 1, 2].map((index) =>
-      normalizeChildProcessStdioEntry(stdio[index], index),
-    );
-  };
-  const normalizeChildProcessOptions = (options, shell = false) => {
-    if (options != null && typeof options !== 'object') {
-      throw new TypeError('child_process options must be an object');
-    }
-    if (options?.detached) {
-      throw createUnsupportedChildProcessError('child_process detached');
-    }
-
-    return {
-      cwd:
-        typeof options?.cwd === 'string'
-          ? resolveGuestFsPath(options.cwd, fromGuestDir)
-          : fromGuestDir,
-      env: normalizeChildProcessEnv(options?.env),
-      internalBootstrapEnv: createChildProcessInternalBootstrapEnv(),
-      shell:
-        shell ||
-        options?.shell === true ||
-        typeof options?.shell === 'string',
-      stdio: normalizeChildProcessStdio(options?.stdio),
-      timeout: normalizeChildProcessTimeout(options),
-      killSignal: normalizeChildProcessSignal(options?.killSignal),
-    };
-  };
-  const createRpcSpawnRequest = (command, args, options, shell = false) => ({
-    command: String(command),
-    args: Array.isArray(args) ? args.map((arg) => String(arg)) : [],
-    options: normalizeChildProcessOptions(options, shell),
-  });
-  const callSpawn = (command, args, options, shell = false) =>
-    bridge().callSync('child_process.spawn', [
-      createRpcSpawnRequest(command, args, options, shell),
-    ]);
-  const callPoll = (childId, waitMs = 0) =>
-    bridge().callSync('child_process.poll', [childId, waitMs]);
-  const callKill = (childId, signal) =>
-    bridge().callSync('child_process.kill', [childId, normalizeChildProcessSignal(signal)]);
-  const callWriteStdin = (childId, chunk) =>
-    bridge().callSync('child_process.write_stdin', [childId, toGuestBufferView(chunk, 'stdin chunk')]);
-  const callCloseStdin = (childId) =>
-    bridge().callSync('child_process.close_stdin', [childId]);
-  const encodeChildProcessOutput = (buffer, encoding) =>
-    encoding ? buffer.toString(encoding) : buffer;
-  const createChildProcessExecError = (subject, exitCode, signal, stdout, stderr) => {
-    const error = new Error(
-      signal == null
-        ? `${subject} exited with code ${exitCode ?? 'unknown'}`
-        : `${subject} terminated by signal ${signal}`,
-    );
-    error.code = signal == null ? 'ERR_AGENTOS_CHILD_PROCESS_EXIT' : signal;
-    error.killed = signal != null;
-    error.signal = signal;
-    error.stdout = stdout;
-    error.stderr = stderr;
-    if (typeof exitCode === 'number') {
-      error.status = exitCode;
-    }
-    return error;
-  };
-  const createSpawnSyncTimeoutError = (command) => {
-    const error = new Error(`spawnSync ${command} ETIMEDOUT`);
-    error.code = 'ETIMEDOUT';
-    return error;
-  };
-  const createSpawnSyncResult = (pid, stdout, stderr, exitCode, signal, error, encoding) => {
-    const encodedStdout = encodeChildProcessOutput(stdout, encoding);
-    const encodedStderr = encodeChildProcessOutput(stderr, encoding);
-    return {
-      pid,
-      output: [null, encodedStdout, encodedStderr],
-      stdout: encodedStdout,
-      stderr: encodedStderr,
-      status: typeof exitCode === 'number' ? exitCode : null,
-      signal: signal ?? null,
-      error,
-    };
-  };
-  const runChildProcessSync = (command, args, options, shell = false) => {
-    const normalizedOptions = normalizeChildProcessOptions(options, shell);
-    const encoding = normalizeChildProcessEncoding(options);
-    const stdout = [];
-    const stderr = [];
-    let child;
-    try {
-      child = callSpawn(command, args, options, shell);
-    } catch (error) {
-      if (
-        error &&
-        typeof error === 'object' &&
-        error.code == null &&
-        /ERR_NATIVE_BINARY_NOT_SUPPORTED\b/i.test(String(error.message ?? error))
-      ) {
-        error.code = 'ERR_NATIVE_BINARY_NOT_SUPPORTED';
-      }
-      return createSpawnSyncResult(
-        0,
-        Buffer.alloc(0),
-        Buffer.from(error instanceof Error ? error.message : String(error)),
-        null,
-        null,
-        error,
-        encoding,
-      );
-    }
-
-    const startedAt = Date.now();
-    let exitCode = null;
-    let signal = null;
-    let error = null;
-    while (exitCode == null && signal == null) {
-      if (
-        normalizedOptions.timeout != null &&
-        Date.now() - startedAt > normalizedOptions.timeout
-      ) {
-        callKill(child.childId, normalizedOptions.killSignal);
-        signal = normalizedOptions.killSignal;
-        error = createSpawnSyncTimeoutError(command);
-        break;
-      }
-
-      const event = callPoll(child.childId, RPC_POLL_WAIT_MS);
-      if (!event) {
-        continue;
-      }
-
-      if (event.type === 'stdout') {
-        stdout.push(decodeFsBytesPayload(event.data, 'child_process.spawnSync stdout'));
-      } else if (event.type === 'stderr') {
-        stderr.push(decodeFsBytesPayload(event.data, 'child_process.spawnSync stderr'));
-      } else if (event.type === 'exit') {
-        exitCode =
-          typeof event.exitCode === 'number' ? Math.trunc(event.exitCode) : null;
-        signal = typeof event.signal === 'string' ? event.signal : null;
-      }
-    }
-
-    const stdoutBuffer = Buffer.concat(stdout);
-    const stderrBuffer = Buffer.concat(stderr);
-    return createSpawnSyncResult(
-      Number(child.pid) || 0,
-      stdoutBuffer,
-      stderrBuffer,
-      exitCode,
-      signal,
-      error,
-      encoding,
-    );
-  };
-
-  class SecureExecChildReadable extends Readable {
-    _read() {}
-  }
-
-  class SecureExecChildWritable extends Writable {
-    constructor(childId) {
-      super();
-      this.childId = childId;
-    }
-
-    _write(chunk, encoding, callback) {
-      try {
-        callWriteStdin(this.childId, chunk);
-        callback();
-      } catch (error) {
-        callback(error);
-      }
-    }
-
-    _final(callback) {
-      try {
-        callCloseStdin(this.childId);
-        callback();
-      } catch (error) {
-        callback(error);
-      }
-    }
-  }
-
-  const finalizeChildStream = (stream) => {
-    if (!stream || stream.destroyed) {
-      return;
-    }
-    stream.push(null);
-  };
-  const emitChildLifecycleEvents = (child) => {
-    queueMicrotask(() => {
-      child.emit('exit', child.exitCode, child.signalCode);
-      child.emit('close', child.exitCode, child.signalCode);
-    });
-  };
-  const deliverChildOutput = (child, channel, payload) => {
-    const chunk = decodeFsBytesPayload(payload, `child_process.${channel}`);
-    const mode = channel === 'stdout' ? child._stdio[1] : child._stdio[2];
-    if (mode === 'ignore') {
-      return;
-    }
-    if (mode === 'inherit') {
-      (channel === 'stdout' ? process.stdout : process.stderr).write(chunk);
-      return;
-    }
-
-    const stream = channel === 'stdout' ? child.stdout : child.stderr;
-    stream?.push(chunk);
-  };
-  const closeSyntheticChild = (child, exitCode, signalCode) => {
-    if (child._closed) {
-      return;
-    }
-    child._closed = true;
-    child.exitCode = exitCode;
-    child.signalCode = signalCode;
-    finalizeChildStream(child.stdout);
-    finalizeChildStream(child.stderr);
-    if (child.stdin && !child.stdin.destroyed) {
-      child.stdin.destroy();
-    }
-    emitChildLifecycleEvents(child);
-  };
-  const scheduleSyntheticChildPoll = (child, delayMs) => {
-    if (child._closed || child._pollTimer != null) {
-      return;
-    }
-    child._pollTimer = setTimeout(() => {
-      child._pollTimer = null;
-      if (child._closed) {
-        return;
-      }
-
-      let event;
-      try {
-        event = callPoll(child._childId, RPC_POLL_WAIT_MS);
-      } catch (error) {
-        child._closed = true;
-        finalizeChildStream(child.stdout);
-        finalizeChildStream(child.stderr);
-        queueMicrotask(() => child.emit('error', error));
-        return;
-      }
-
-      if (!event) {
-        scheduleSyntheticChildPoll(child, RPC_IDLE_POLL_DELAY_MS);
-        return;
-      }
-
-      if (event.type === 'stdout' || event.type === 'stderr') {
-        deliverChildOutput(child, event.type, event.data);
-        scheduleSyntheticChildPoll(child, 0);
-        return;
-      }
-
-      if (event.type === 'exit') {
-        closeSyntheticChild(
-          child,
-          typeof event.exitCode === 'number' ? Math.trunc(event.exitCode) : null,
-          typeof event.signal === 'string' ? event.signal : null,
-        );
-        return;
-      }
-
-      scheduleSyntheticChildPoll(child, 0);
-    }, delayMs);
-    if (!child._refed) {
-      child._pollTimer.unref?.();
-    }
-  };
-  const createSyntheticChildProcess = (spawnResult, options) => {
-    const child = Object.create(EventEmitter.prototype);
-    EventEmitter.call(child);
-    child._childId = spawnResult.childId;
-    child._closed = false;
-    child._pollTimer = null;
-    child._refed = true;
-    child._stdio = options.stdio;
-    child.pid = Math.trunc(Number(spawnResult.pid) || 0);
-    child.exitCode = null;
-    child.signalCode = null;
-    child.spawnfile = String(spawnResult.command ?? '');
-    child.spawnargs = [
-      child.spawnfile,
-      ...(Array.isArray(spawnResult.args) ? spawnResult.args.map(String) : []),
-    ];
-    child.stdin = options.stdio[0] === 'pipe' ? new SecureExecChildWritable(child._childId) : null;
-    child.stdout = options.stdio[1] === 'pipe' ? new SecureExecChildReadable() : null;
-    child.stderr = options.stdio[2] === 'pipe' ? new SecureExecChildReadable() : null;
-    child.killed = false;
-    child.connected = false;
-    child.kill = (signal = 'SIGTERM') => {
-      try {
-        callKill(child._childId, signal);
-        child.killed = true;
-        return true;
-      } catch (error) {
-        if (error && typeof error === 'object' && error.code === 'ESRCH') {
-          return false;
-        }
-        throw error;
-      }
-    };
-    child.ref = () => {
-      child._refed = true;
-      child._pollTimer?.ref?.();
-      return child;
-    };
-    child.unref = () => {
-      child._refed = false;
-      child._pollTimer?.unref?.();
-      return child;
-    };
-    child.disconnect = () => {
-      throw createUnsupportedChildProcessError('child_process.disconnect');
-    };
-    child.send = () => {
-      throw createUnsupportedChildProcessError('child_process.send');
-    };
-    queueMicrotask(() => child.emit('spawn'));
-    scheduleSyntheticChildPoll(child, 0);
-    return child;
-  };
-  const collectSyntheticChildOutput = (child, options, callback) => {
-    const encoding = normalizeChildProcessEncoding(options) ?? 'utf8';
-    const stdoutChunks = [];
-    const stderrChunks = [];
-    const timeout = normalizeChildProcessTimeout(options);
-    const killSignal = normalizeChildProcessSignal(options?.killSignal);
-    let timer = null;
-
-    if (child.stdout) {
-      child.stdout.on('data', (chunk) => {
-        stdoutChunks.push(Buffer.from(chunk));
-      });
-    }
-    if (child.stderr) {
-      child.stderr.on('data', (chunk) => {
-        stderrChunks.push(Buffer.from(chunk));
-      });
-    }
-
-    const promise = new Promise((resolve, reject) => {
-      if (timeout != null) {
-        timer = setTimeout(() => {
-          try {
-            child.kill(killSignal);
-          } catch {}
-        }, timeout);
-        timer.unref?.();
-      }
-
-      child.once('error', reject);
-      child.once('close', (exitCode, signalCode) => {
-        if (timer) {
-          clearTimeout(timer);
-        }
-        const stdout = encodeChildProcessOutput(Buffer.concat(stdoutChunks), encoding);
-        const stderr = encodeChildProcessOutput(Buffer.concat(stderrChunks), encoding);
-        if (exitCode === 0 && signalCode == null) {
-          resolve({ stdout, stderr, exitCode, signalCode });
-          return;
-        }
-        reject(createChildProcessExecError('child_process', exitCode, signalCode, stdout, stderr));
-      });
-    });
-
-    if (typeof callback === 'function') {
-      promise.then(
-        ({ stdout, stderr }) => callback(null, stdout, stderr),
-        (error) => callback(error, error.stdout, error.stderr),
-      );
-    }
-
-    return promise;
-  };
-
-  const module = {
-    ChildProcess: EventEmitter,
-    spawn(command, args, options) {
-      const invocation = normalizeSpawnInvocation(args, options);
-      const normalizedOptions = normalizeChildProcessOptions(invocation.options);
-      let spawnResult;
-      try {
-        spawnResult = callSpawn(command, invocation.args, invocation.options);
-      } catch (error) {
-        const spawnError = error instanceof Error ? error : new Error(String(error));
-        if (
-          spawnError.code == null &&
-          /command not found:/i.test(String(spawnError.message ?? ''))
-        ) {
-          spawnError.code = 'ENOENT';
-        } else if (
-          spawnError.code == null &&
-          /ERR_NATIVE_BINARY_NOT_SUPPORTED\b/i.test(String(spawnError.message ?? ''))
-        ) {
-          spawnError.code = 'ERR_NATIVE_BINARY_NOT_SUPPORTED';
-        }
-        const child = Object.create(EventEmitter.prototype);
-        EventEmitter.call(child);
-        child.spawnfile = String(command);
-        child.spawnargs = [String(command), ...invocation.args.map(String)];
-        child.stdin = null;
-        child.stdout = null;
-        child.stderr = null;
-        child.stdio = [null, null, null];
-        child.pid = 0;
-        child.exitCode = null;
-        child.signalCode = null;
-        child.killed = false;
-        child.connected = false;
-        child.kill = () => false;
-        child.ref = () => child;
-        child.unref = () => child;
-        child.disconnect = () => {
-          throw createUnsupportedChildProcessError('child_process.disconnect');
-        };
-        child.send = () => {
-          throw createUnsupportedChildProcessError('child_process.send');
-        };
-        queueMicrotask(() => child.emit('error', spawnError));
-        return child;
-      }
-      const child = createSyntheticChildProcess(spawnResult, normalizedOptions);
-      return child;
-    },
-    spawnSync(command, args, options) {
-      const invocation = normalizeSpawnInvocation(args, options);
-      return runChildProcessSync(command, invocation.args, invocation.options);
-    },
-    exec(command, options, callback) {
-      const invocation = normalizeExecInvocation(options, callback);
-      const child = module.spawn(command, [], {
-        ...invocation.options,
-        stdio: ['pipe', 'pipe', 'pipe'],
-        shell: true,
-      });
-      collectSyntheticChildOutput(child, invocation.options, invocation.callback);
-      return child;
-    },
-    execSync(command, options) {
-      const result = runChildProcessSync(command, [], {
-        ...options,
-        stdio: ['pipe', 'pipe', 'pipe'],
-      }, true);
-      if (result.error) {
-        throw result.error;
-      }
-      if (result.status !== 0 || result.signal != null) {
-        throw createChildProcessExecError(
-          'child_process.execSync',
-          result.status,
-          result.signal,
-          result.stdout,
-          result.stderr,
-        );
-      }
-      return result.stdout;
-    },
-    execFile(file, args, options, callback) {
-      const invocation = normalizeExecFileInvocation(args, options, callback);
-      const child = module.spawn(file, invocation.args, {
-        ...invocation.options,
-        stdio: ['pipe', 'pipe', 'pipe'],
-      });
-      collectSyntheticChildOutput(child, invocation.options, invocation.callback);
-      return child;
-    },
-    execFileSync(file, args, options) {
-      const invocation = normalizeExecFileInvocation(args, options);
-      const result = runChildProcessSync(file, invocation.args, {
-        ...invocation.options,
-        stdio: ['pipe', 'pipe', 'pipe'],
-      });
-      if (result.error) {
-        throw result.error;
-      }
-      if (result.status !== 0 || result.signal != null) {
-        throw createChildProcessExecError(
-          'child_process.execFileSync',
-          result.status,
-          result.signal,
-          result.stdout,
-          result.stderr,
-        );
-      }
-      return result.stdout;
-    },
-    fork(modulePath, args, options) {
-      const invocation = normalizeSpawnInvocation(args, options);
-      return module.spawn('node', [modulePath, ...invocation.args], {
-        ...invocation.options,
-        stdio: invocation.options?.stdio ?? ['pipe', 'pipe', 'pipe'],
-      });
-    },
-  };
-
-  return module;
-}
-
-function createRpcBackedNetModule(netModule, fromGuestDir = '/') {
-  const RPC_POLL_WAIT_MS = 50;
-  const RPC_IDLE_POLL_DELAY_MS = 10;
-  const bridge = () => requireSecureExecSyncRpcBridge();
-  let defaultAutoSelectFamily =
-    typeof netModule?.getDefaultAutoSelectFamily === 'function'
-      ? netModule.getDefaultAutoSelectFamily()
-      : true;
-  let defaultAutoSelectFamilyAttemptTimeout =
-    typeof netModule?.getDefaultAutoSelectFamilyAttemptTimeout === 'function'
-      ? netModule.getDefaultAutoSelectFamilyAttemptTimeout()
-      : 250;
-  const createUnsupportedNetError = (subject) => {
-    const error = new Error(`${subject} is not supported by the secure-exec net polyfill yet`);
-    error.code = 'ERR_AGENTOS_NET_UNSUPPORTED';
-    return error;
-  };
-  const normalizeNetPort = (value) => {
-    const numeric =
-      typeof value === 'number'
-        ? value
-        : typeof value === 'string' && value.length > 0
-          ? Number(value)
-          : Number.NaN;
-    if (!Number.isInteger(numeric) || numeric < 0 || numeric > 65535) {
-      throw new RangeError(`secure-exec net port must be an integer between 0 and 65535`);
-    }
-    return numeric;
-  };
-  const normalizeNetBacklog = (value) => {
-    const numeric =
-      typeof value === 'number'
-        ? value
-        : typeof value === 'string' && value.length > 0
-          ? Number(value)
-          : Number.NaN;
-    if (!Number.isInteger(numeric) || numeric < 0) {
-      throw new RangeError(`secure-exec net backlog must be a non-negative integer`);
-    }
-    return numeric;
-  };
-  const normalizeNetConnectInvocation = (args) => {
-    const values = [...args];
-    const callback =
-      typeof values[values.length - 1] === 'function' ? values.pop() : undefined;
-
-    let options;
-    if (values[0] != null && typeof values[0] === 'object') {
-      options = { ...values[0] };
-    } else {
-      options = { port: values[0] };
-      if (typeof values[1] === 'string') {
-        options.host = values[1];
-      }
-    }
-
-    if (options?.lookup != null) {
-      throw createUnsupportedNetError('net.connect({ lookup })');
-    }
-
-    if (typeof options?.path === 'string' && options.path.length > 0) {
-      return {
-        callback,
-        options: {
-          allowHalfOpen: options?.allowHalfOpen === true,
-          path: resolveGuestFsPath(options.path, fromGuestDir),
-        },
-      };
-    }
-
-    return {
-      callback,
-      options: {
-        allowHalfOpen: options?.allowHalfOpen === true,
-        host:
-          typeof options?.host === 'string' && options.host.length > 0
-            ? options.host
-            : 'localhost',
-        port: normalizeNetPort(options?.port),
-      },
-    };
-  };
-  const normalizeNetServerCreation = (args) => {
-    let options = {};
-    let connectionListener;
-
-    if (typeof args[0] === 'function') {
-      connectionListener = args[0];
-    } else {
-      if (args[0] != null) {
-        if (typeof args[0] !== 'object') {
-          throw new TypeError('net.createServer options must be an object');
-        }
-        options = { ...args[0] };
-      }
-      if (typeof args[1] === 'function') {
-        connectionListener = args[1];
-      }
-    }
-
-    return {
-      connectionListener,
-      options: {
-        allowHalfOpen: options.allowHalfOpen === true,
-        pauseOnConnect: options.pauseOnConnect === true,
-      },
-    };
-  };
-  const normalizeNetListenInvocation = (args) => {
-    const values = [...args];
-    const callback =
-      typeof values[values.length - 1] === 'function' ? values.pop() : undefined;
-
-    let backlog;
-    if (typeof values[values.length - 1] === 'number') {
-      backlog = normalizeNetBacklog(values.pop());
-    }
-
-    let options;
-    if (values[0] != null && typeof values[0] === 'object') {
-      options = { ...values[0] };
-    } else {
-      options = { port: values[0] };
-      if (typeof values[1] === 'string') {
-        options.host = values[1];
-      }
-    }
-
-    if (options?.signal != null) {
-      throw createUnsupportedNetError('net.Server.listen({ signal })');
-    }
-
-    if (typeof options?.path === 'string' && options.path.length > 0) {
-      return {
-        callback,
-        options: {
-          backlog:
-            options?.backlog != null
-              ? normalizeNetBacklog(options.backlog)
-              : backlog,
-          path: resolveGuestFsPath(options.path, fromGuestDir),
-        },
-      };
-    }
-
-    return {
-      callback,
-      options: {
-        backlog:
-          options?.backlog != null
-            ? normalizeNetBacklog(options.backlog)
-            : backlog,
-        host:
-          typeof options?.host === 'string' && options.host.length > 0
-            ? options.host
-            : '127.0.0.1',
-        port: normalizeNetPort(options?.port ?? 0),
-      },
-    };
-  };
-  const socketFamilyForAddress = (value) => {
-    if (typeof value !== 'string') {
-      return undefined;
-    }
-    return value.includes(':') ? 'IPv6' : 'IPv4';
-  };
-  const callConnect = (options) => bridge().callSync('net.connect', [options]);
-  const callListen = (options) => bridge().callSync('net.listen', [options]);
-  const callPoll = (socketId, waitMs = 0) => bridge().callSync('net.poll', [socketId, waitMs]);
-  const callServerPoll = (serverId, waitMs = 0) =>
-    bridge().callSync('net.server_poll', [serverId, waitMs]);
-  const callServerConnections = (serverId) =>
-    bridge().callSync('net.server_connections', [serverId]);
-  const callWrite = (socketId, chunk) =>
-    bridge().call('net.write', [socketId, toGuestBufferView(chunk, 'net.write chunk')]);
-  const callShutdown = (socketId) => bridge().call('net.shutdown', [socketId]);
-  const callDestroy = (socketId) => bridge().call('net.destroy', [socketId]);
-  const callServerClose = (serverId) => bridge().call('net.server_close', [serverId]);
-
-  const releaseSocketBridge = (socket) => {
-    if (socket._agentOSBridgeReleased || socket._agentOSSocketId == null) {
-      return Promise.resolve();
-    }
-    const socketId = socket._agentOSSocketId;
-    socket._agentOSBridgeReleased = true;
-    return callDestroy(socketId).catch(() => {});
-  };
-
-  const finalizeSocketClose = (socket, hadError = false) => {
-    if (socket._agentOSClosed) {
-      return;
-    }
-    void releaseSocketBridge(socket);
-    socket._agentOSClosed = true;
-    socket._agentOSCloseHadError = hadError === true;
-    socket._agentOSSocketId = null;
-    socket.connecting = false;
-    socket.pending = false;
-    socket._pollTimer && clearTimeout(socket._pollTimer);
-    socket._pollTimer = null;
-    if (!socket.readableEnded) {
-      socket.push(null);
-    }
-    queueMicrotask(() => socket.emit('close', hadError));
-  };
-  const finalizeSocketCloseAfterReadableEnd = (socket, hadError = false) => {
-    if (socket._agentOSClosed) {
-      return;
-    }
-    if (socket.readableEnded) {
-      finalizeSocketClose(socket, hadError);
-      return;
-    }
-    socket.once('end', () => finalizeSocketClose(socket, hadError));
-  };
-
-  const scheduleSocketPoll = (socket, delayMs) => {
-    if (socket._agentOSClosed || socket._agentOSSocketId == null || socket._pollTimer != null) {
-      return;
-    }
-
-    socket._pollTimer = setTimeout(() => {
-      socket._pollTimer = null;
-      if (socket._agentOSClosed || socket._agentOSSocketId == null) {
-        return;
-      }
-
-      let event;
-      try {
-        event = callPoll(socket._agentOSSocketId, RPC_POLL_WAIT_MS);
-      } catch (error) {
-        socket.destroy(error);
-        return;
-      }
-
-      if (!event) {
-        scheduleSocketPoll(socket, RPC_IDLE_POLL_DELAY_MS);
-        return;
-      }
-
-      if (event.type === 'data') {
-        const chunk = decodeFsBytesPayload(event.data, 'net.data');
-        socket.bytesRead += chunk.length;
-        socket.push(chunk);
-        scheduleSocketPoll(socket, 0);
-        return;
-      }
-
-      if (event.type === 'end') {
-        socket._agentOSRemoteEnded = true;
-        finalizeSocketCloseAfterReadableEnd(socket, false);
-        socket.push(null);
-        if (!socket._agentOSAllowHalfOpen && !socket.writableEnded) {
-          socket.end();
-        }
-        scheduleSocketPoll(socket, 0);
-        return;
-      }
-
-      if (event.type === 'error') {
-        const error = new Error(
-          typeof event.message === 'string' ? event.message : 'secure-exec net socket error',
-        );
-        if (typeof event.code === 'string' && event.code.length > 0) {
-          error.code = event.code;
-        }
-        socket.emit('error', error);
-        scheduleSocketPoll(socket, 0);
-        return;
-      }
-
-      if (event.type === 'close') {
-        finalizeSocketClose(socket, event.hadError === true);
-        return;
-      }
-
-      scheduleSocketPoll(socket, 0);
-    }, delayMs);
-
-    if (!socket._agentOSRefed) {
-      socket._pollTimer.unref?.();
-    }
-  };
-  const attachSocketState = (socket, result, options = {}, emitConnect = false) => {
-    socket._agentOSAllowHalfOpen = options.allowHalfOpen === true;
-    socket._agentOSSocketId = String(result.socketId);
-    socket.localPath =
-      typeof result.localPath === 'string'
-        ? result.localPath
-        : typeof result.path === 'string'
-          ? result.path
-          : undefined;
-    socket.remotePath =
-      typeof result.remotePath === 'string'
-        ? result.remotePath
-        : typeof result.path === 'string'
-          ? result.path
-          : undefined;
-    socket.localAddress =
-      socket.localPath ?? result.localAddress;
-    socket.localPort = result.localPort;
-    socket.remoteAddress =
-      socket.remotePath ?? result.remoteAddress;
-    socket.remotePort = result.remotePort;
-    socket.remoteFamily =
-      socket.remotePath != null
-        ? undefined
-        : result.remoteFamily ?? socketFamilyForAddress(socket.remoteAddress);
-    socket.connecting = false;
-    socket.pending = false;
-    socket._agentOSClosed = false;
-    socket._agentOSRemoteEnded = false;
-    socket._agentOSBridgeReleased = false;
-    if (emitConnect) {
-      queueMicrotask(() => {
-        if (socket._agentOSClosed) {
-          return;
-        }
-        socket.emit('connect');
-        socket.emit('ready');
-      });
-    }
-    scheduleSocketPoll(socket, 0);
-  };
-
-  class SecureExecSocket extends Duplex {
-    constructor(options = undefined) {
-      super(options);
-      this._agentOSAllowHalfOpen = options?.allowHalfOpen === true;
-      this._agentOSClosed = false;
-      this._agentOSCloseHadError = false;
-      this._agentOSExplicitDestroy = false;
-      this._agentOSRemoteEnded = false;
-      this._agentOSBridgeReleased = false;
-      this._agentOSRefed = true;
-      this._agentOSSocketId = null;
-      this._pollTimer = null;
-      this.bytesRead = 0;
-      this.bytesWritten = 0;
-      this.connecting = false;
-      this.pending = false;
-      this.localAddress = undefined;
-      this.localPort = undefined;
-      this.localPath = undefined;
-      this.remoteAddress = undefined;
-      this.remoteFamily = undefined;
-      this.remotePort = undefined;
-      this.remotePath = undefined;
-      this.emit = (eventName, ...eventArgs) => {
-        if (eventName === 'close' && eventArgs.length === 0 && this._agentOSClosed) {
-          eventArgs = [this._agentOSCloseHadError === true];
-        }
-        return Duplex.prototype.emit.call(this, eventName, ...eventArgs);
-      };
-      this.destroy = (error) => {
-        this._agentOSExplicitDestroy = true;
-        return Duplex.prototype.destroy.call(this, error);
-      };
-    }
-
-    _read() {}
-
-    _write(chunk, encoding, callback) {
-      if (this._agentOSSocketId == null) {
-        callback(new Error('secure-exec net socket is not connected'));
-        return;
-      }
-      const payload =
-        typeof chunk === 'string' ? Buffer.from(chunk, encoding) : Buffer.from(chunk);
-      callWrite(this._agentOSSocketId, payload).then(
-        (written) => {
-          if (typeof written === 'number') {
-            this.bytesWritten += written;
-          } else {
-            this.bytesWritten += payload.length;
-          }
-          callback();
-        },
-        (error) => callback(error),
-      );
-    }
-
-    _final(callback) {
-      if (this._agentOSSocketId == null || this._agentOSClosed) {
-        callback();
-        return;
-      }
-      callShutdown(this._agentOSSocketId).then(
-        () => {
-          if (this._agentOSRemoteEnded) {
-            finalizeSocketCloseAfterReadableEnd(this, false);
-          }
-          callback();
-        },
-        (error) => callback(error),
-      );
-    }
-
-    _destroy(error, callback) {
-      const socketId = this._agentOSSocketId;
-      this._agentOSSocketId = null;
-      const finishDestroy = () => {
-        finalizeSocketClose(this, Boolean(error));
-        callback(error);
-      };
-      if (
-        socketId == null ||
-        this._agentOSClosed
-      ) {
-        finishDestroy();
-        return;
-      }
-      this._agentOSSocketId = socketId;
-      releaseSocketBridge(this).then(finishDestroy, () => finishDestroy());
-    }
-
-    address() {
-      if (typeof this.localPath === 'string') {
-        return this.localPath;
-      }
-      if (typeof this.localAddress !== 'string' || typeof this.localPort !== 'number') {
-        return null;
-      }
-      return {
-        address: this.localAddress,
-        family: socketFamilyForAddress(this.localAddress),
-        port: this.localPort,
-      };
-    }
-
-    connect(...args) {
-      const { callback, options } = normalizeNetConnectInvocation(args);
-      if (typeof callback === 'function') {
-        this.once('connect', callback);
-      }
-      if (this._agentOSSocketId != null || this.connecting) {
-        throw new Error('secure-exec net socket is already connected');
-      }
-
-      this._agentOSAllowHalfOpen = options.allowHalfOpen;
-      this.connecting = true;
-      this.pending = true;
-
-      try {
-        const result = callConnect(options);
-        attachSocketState(
-          this,
-          {
-            ...result,
-            remotePath: result.remotePath ?? options.path,
-            remoteAddress: result.remoteAddress ?? options.host,
-            remotePort: result.remotePort ?? options.port,
-          },
-          options,
-          true,
-        );
-      } catch (error) {
-        this.connecting = false;
-        this.pending = false;
-        this.destroy(error);
-      }
-
-      return this;
-    }
-
-    ref() {
-      this._agentOSRefed = true;
-      this._pollTimer?.ref?.();
-      return this;
-    }
-
-    unref() {
-      this._agentOSRefed = false;
-      this._pollTimer?.unref?.();
-      return this;
-    }
-
-    setKeepAlive() {
-      return this;
-    }
-
-    setNoDelay() {
-      return this;
-    }
-
-    setTimeout(timeout, callback) {
-      if (typeof callback === 'function') {
-        if (Number(timeout) > 0) {
-          setTimeout(() => {
-            if (!this._agentOSClosed) {
-              this.emit('timeout');
-              callback();
-            }
-          }, Number(timeout)).unref?.();
-        } else {
-          queueMicrotask(() => callback());
-        }
-      }
-      return this;
-    }
-  }
-
-  const finalizeServerClose = (server) => {
-    if (server._agentOSClosed) {
-      return;
-    }
-    server._agentOSClosed = true;
-    server.listening = false;
-    server._agentOSServerId = null;
-    server._pollTimer && clearTimeout(server._pollTimer);
-    server._pollTimer = null;
-    queueMicrotask(() => server.emit('close'));
-  };
-  const scheduleServerPoll = (server, delayMs) => {
-    if (server._agentOSClosed || server._agentOSServerId == null || server._pollTimer != null) {
-      return;
-    }
-
-    server._pollTimer = setTimeout(() => {
-      server._pollTimer = null;
-      if (server._agentOSClosed || server._agentOSServerId == null) {
-        return;
-      }
-
-      let event;
-      try {
-        event = callServerPoll(server._agentOSServerId, RPC_POLL_WAIT_MS);
-      } catch (error) {
-        server.emit('error', error);
-        finalizeServerClose(server);
-        return;
-      }
-
-      if (!event) {
-        scheduleServerPoll(server, RPC_IDLE_POLL_DELAY_MS);
-        return;
-      }
-
-      if (event.type === 'connection') {
-        const socket = new SecureExecSocket({ allowHalfOpen: server.allowHalfOpen });
-        attachSocketState(socket, event, { allowHalfOpen: server.allowHalfOpen });
-        if (server.pauseOnConnect) {
-          socket.pause();
-        }
-        server.emit('connection', socket);
-        scheduleServerPoll(server, 0);
-        return;
-      }
-
-      if (event.type === 'error') {
-        const error = new Error(
-          typeof event.message === 'string' ? event.message : 'secure-exec net server error',
-        );
-        if (typeof event.code === 'string' && event.code.length > 0) {
-          error.code = event.code;
-        }
-        server.emit('error', error);
-        scheduleServerPoll(server, 0);
-        return;
-      }
-
-      if (event.type === 'close') {
-        finalizeServerClose(server);
-        return;
-      }
-
-      scheduleServerPoll(server, 0);
-    }, delayMs);
-
-    if (!server._agentOSRefed) {
-      server._pollTimer.unref?.();
-    }
-  };
-
-  class SecureExecServer extends EventEmitter {
-    constructor(options = {}, connectionListener = undefined) {
-      super();
-      this.allowHalfOpen = options.allowHalfOpen === true;
-      this.pauseOnConnect = options.pauseOnConnect === true;
-      this.listening = false;
-      this.maxConnections = undefined;
-      this._agentOSClosed = false;
-      this._agentOSRefed = true;
-      this._agentOSServerId = null;
-      this._pollTimer = null;
-      this._address = null;
-      if (typeof connectionListener === 'function') {
-        this.on('connection', connectionListener);
-      }
-    }
-
-    address() {
-      return this._address;
-    }
-
-    close(callback) {
-      if (this._agentOSServerId == null || this._agentOSClosed) {
-        const error = new Error('secure-exec net server is not running');
-        error.code = 'ERR_SERVER_NOT_RUNNING';
-        if (typeof callback === 'function') {
-          queueMicrotask(() => callback(error));
-          return this;
-        }
-        throw error;
-      }
-
-      if (typeof callback === 'function') {
-        this.once('close', callback);
-      }
-      const serverId = this._agentOSServerId;
-      callServerClose(serverId).then(
-        () => finalizeServerClose(this),
-        (error) => this.emit('error', error),
-      );
-      return this;
-    }
-
-    getConnections(callback) {
-      if (this._agentOSServerId == null || this._agentOSClosed) {
-        const error = new Error('secure-exec net server is not running');
-        error.code = 'ERR_SERVER_NOT_RUNNING';
-        if (typeof callback === 'function') {
-          queueMicrotask(() => callback(error));
-          return this;
-        }
-        throw error;
-      }
-
-      try {
-        const count = callServerConnections(this._agentOSServerId);
-        if (typeof callback === 'function') {
-          queueMicrotask(() => callback(null, count));
-        }
-      } catch (error) {
-        if (typeof callback === 'function') {
-          queueMicrotask(() => callback(error));
-          return this;
-        }
-        throw error;
-      }
-
-      return this;
-    }
-
-    listen(...args) {
-      const { callback, options } = normalizeNetListenInvocation(args);
-      if (typeof callback === 'function') {
-        this.once('listening', callback);
-      }
-      if (this._agentOSServerId != null || this.listening) {
-        throw new Error('secure-exec net server is already listening');
-      }
-
-      this._agentOSClosed = false;
-      try {
-        const result = callListen(options);
-        this._agentOSServerId = String(result.serverId);
-        this._address =
-          typeof result.path === 'string'
-            ? result.path
-            : {
-                address: result.localAddress,
-                family: result.family ?? socketFamilyForAddress(result.localAddress),
-                port: result.localPort,
-              };
-        this.listening = true;
-        queueMicrotask(() => {
-          if (this._agentOSClosed) {
-            return;
-          }
-          this.emit('listening');
-        });
-        scheduleServerPoll(this, 0);
-      } catch (error) {
-        this._agentOSServerId = null;
-        this._address = null;
-        this.listening = false;
-        throw error;
-      }
-
-      return this;
-    }
-
-    ref() {
-      this._agentOSRefed = true;
-      this._pollTimer?.ref?.();
-      return this;
-    }
-
-    unref() {
-      this._agentOSRefed = false;
-      this._pollTimer?.unref?.();
-      return this;
-    }
-  }
-
-  const connect = (...args) => new SecureExecSocket().connect(...args);
-  const createServer = (...args) => {
-    const { connectionListener, options } = normalizeNetServerCreation(args);
-    return new SecureExecServer(options, connectionListener);
-  };
-  const module = Object.assign(Object.create(netModule ?? null), {
-    BlockList:
-      typeof netModule?.BlockList === 'function'
-        ? netModule.BlockList
-        : class BlockList {
-            addAddress() {
-              return this;
-            }
-
-            addRange() {
-              return this;
-            }
-
-            addSubnet() {
-              return this;
-            }
-
-            check() {
-              return false;
-            }
-
-            rules() {
-              return [];
-            }
-
-            toJSON() {
-              return [];
-            }
-          },
-    Server: SecureExecServer,
-    Socket: SecureExecSocket,
-    SocketAddress: netModule?.SocketAddress,
-    Stream: SecureExecSocket,
-    connect,
-    createConnection: connect,
-    createServer,
-    getDefaultAutoSelectFamily() {
-      return defaultAutoSelectFamily;
-    },
-    getDefaultAutoSelectFamilyAttemptTimeout() {
-      return defaultAutoSelectFamilyAttemptTimeout;
-    },
-    isIP: netModule?.isIP?.bind(netModule) ?? hostNet.isIP.bind(hostNet),
-    isIPv4: netModule?.isIPv4?.bind(netModule) ?? hostNet.isIPv4.bind(hostNet),
-    isIPv6: netModule?.isIPv6?.bind(netModule) ?? hostNet.isIPv6.bind(hostNet),
-    setDefaultAutoSelectFamily(value) {
-      defaultAutoSelectFamily = value !== false;
-      netModule?.setDefaultAutoSelectFamily?.(defaultAutoSelectFamily);
-    },
-    setDefaultAutoSelectFamilyAttemptTimeout(value) {
-      const numeric = Number(value);
-      if (!Number.isFinite(numeric) || numeric < 0) {
-        throw new RangeError(`Invalid auto-select family attempt timeout: ${value}`);
-      }
-      defaultAutoSelectFamilyAttemptTimeout = Math.trunc(numeric);
-      netModule?.setDefaultAutoSelectFamilyAttemptTimeout?.(
-        defaultAutoSelectFamilyAttemptTimeout,
-      );
-    },
-  });
-
-  return module;
-}
-
-function createRpcBackedTlsModule(tlsModule, netModule) {
-  const createUnsupportedTlsError = (subject) => {
-    const error = new Error(`${subject} is not supported by the secure-exec tls polyfill yet`);
-    error.code = 'ERR_AGENTOS_TLS_UNSUPPORTED';
-    return error;
-  };
-  const defineSocketMetadataPassthrough = (tlsSocket, rawSocket) => {
-    if (tlsSocket === rawSocket) {
-      return;
-    }
-    for (const key of ['localAddress', 'localPort', 'remoteAddress', 'remotePort', 'remoteFamily']) {
-      try {
-        Object.defineProperty(tlsSocket, key, {
-          configurable: true,
-          enumerable: true,
-          get() {
-            return rawSocket[key];
-          },
-          set(value) {
-            rawSocket[key] = value;
-          },
-        });
-      } catch {
-        // Ignore non-configurable host properties.
-      }
-    }
-  };
-  const normalizeTlsPort = (value) => {
-    const numeric =
-      typeof value === 'number'
-        ? value
-        : typeof value === 'string' && value.length > 0
-          ? Number(value)
-          : Number.NaN;
-    if (!Number.isInteger(numeric) || numeric < 0 || numeric > 65535) {
-      throw new RangeError('secure-exec tls port must be between 0 and 65535');
-    }
-    return numeric;
-  };
-  const normalizeTlsConnectInvocation = (args) => {
-    const values = [...args];
-    const callback =
-      typeof values[values.length - 1] === 'function' ? values.pop() : undefined;
-
-    let options;
-    if (values[0] != null && typeof values[0] === 'object') {
-      options = { ...values[0] };
-    } else {
-      const positional = {};
-      if (values.length > 0) {
-        positional.port = values.shift();
-      }
-      if (typeof values[0] === 'string') {
-        positional.host = values.shift();
-      }
-      const providedOptions =
-        values[0] != null && typeof values[0] === 'object' ? { ...values[0] } : {};
-      options = { ...providedOptions, ...positional };
-    }
-
-    if (typeof options?.path === 'string') {
-      throw createUnsupportedTlsError('tls.connect({ path })');
-    }
-    if (options?.lookup != null) {
-      throw createUnsupportedTlsError('tls.connect({ lookup })');
-    }
-
-    const transportSocket = options?.socket ?? null;
-    const host =
-      typeof options?.host === 'string' && options.host.length > 0
-        ? options.host
-        : 'localhost';
-    const tlsOptions = { ...options };
-    delete tlsOptions.allowHalfOpen;
-    delete tlsOptions.host;
-    delete tlsOptions.lookup;
-    delete tlsOptions.path;
-    delete tlsOptions.port;
-    delete tlsOptions.socket;
-    if (
-      typeof tlsOptions.servername !== 'string' &&
-      typeof host === 'string' &&
-      host.length > 0 &&
-      hostNet.isIP(host) === 0
-    ) {
-      tlsOptions.servername = host;
-    }
-    if (tlsOptions.ALPNProtocols == null) {
-      tlsOptions.ALPNProtocols = ['http/1.1'];
-    }
-
-    return {
-      callback,
-      transportOptions:
-        transportSocket == null
-          ? {
-              allowHalfOpen: options?.allowHalfOpen === true,
-              host,
-              port: normalizeTlsPort(options?.port),
-            }
-          : null,
-      transportSocket,
-      tlsOptions,
-    };
-  };
-  const normalizeTlsServerCreation = (args) => {
-    let options = {};
-    let secureConnectionListener;
-
-    if (typeof args[0] === 'function') {
-      secureConnectionListener = args[0];
-    } else {
-      if (args[0] != null) {
-        if (typeof args[0] !== 'object') {
-          throw new TypeError('tls.createServer options must be an object');
-        }
-        options = { ...args[0] };
-      }
-      if (typeof args[1] === 'function') {
-        secureConnectionListener = args[1];
-      }
-    }
-
-    return {
-      secureConnectionListener,
-      options,
-    };
-  };
-  const createServerSecureContext = (options) =>
-    options?.secureContext ?? tlsModule.createSecureContext(options ?? {});
-  const createClientTlsSocket = (rawSocket, tlsOptions) => {
-    const tlsSocket = tlsModule.connect({
-      ...tlsOptions,
-      socket: rawSocket,
-    });
-    defineSocketMetadataPassthrough(tlsSocket, rawSocket);
-    return tlsSocket;
-  };
-  const createServerTlsSocket = (rawSocket, options, secureContext) => {
-    const tlsSocket = new tlsModule.TLSSocket(rawSocket, {
-      ...options,
-      isServer: true,
-      secureContext,
-    });
-    defineSocketMetadataPassthrough(tlsSocket, rawSocket);
-    return tlsSocket;
-  };
-
-  class SecureExecTlsServer extends EventEmitter {
-    constructor(options = {}, secureConnectionListener = undefined) {
-      super();
-      this._tlsOptions = { ...options };
-      this._secureContext = createServerSecureContext(this._tlsOptions);
-      this._netServer = netModule.createServer(
-        {
-          allowHalfOpen: options.allowHalfOpen === true,
-          pauseOnConnect: options.pauseOnConnect === true,
-        },
-        (socket) => {
-          const tlsSocket = createServerTlsSocket(socket, this._tlsOptions, this._secureContext);
-          tlsSocket.on('secure', () => {
-            this.emit('secureConnection', tlsSocket);
-          });
-          tlsSocket.on('error', (error) => {
-            this.emit('tlsClientError', error, tlsSocket);
-          });
-        },
-      );
-      if (typeof secureConnectionListener === 'function') {
-        this.on('secureConnection', secureConnectionListener);
-      }
-      this._netServer.on('close', () => this.emit('close'));
-      this._netServer.on('error', (error) => this.emit('error', error));
-      this._netServer.on('listening', () => this.emit('listening'));
-
-      Object.defineProperties(this, {
-        listening: {
-          enumerable: true,
-          get: () => this._netServer.listening,
-        },
-        maxConnections: {
-          enumerable: true,
-          get: () => this._netServer.maxConnections,
-          set: (value) => {
-            this._netServer.maxConnections = value;
-          },
-        },
-      });
-    }
-
-    address() {
-      return this._netServer.address();
-    }
-
-    close(callback) {
-      this._netServer.close(callback);
-      return this;
-    }
-
-    getConnections(callback) {
-      return this._netServer.getConnections(callback);
-    }
-
-    listen(...args) {
-      this._netServer.listen(...args);
-      return this;
-    }
-
-    ref() {
-      this._netServer.ref();
-      return this;
-    }
-
-    setSecureContext(options) {
-      if (options == null || typeof options !== 'object') {
-        throw new TypeError('tls.Server.setSecureContext options must be an object');
-      }
-      this._tlsOptions = { ...options };
-      this._secureContext = createServerSecureContext(this._tlsOptions);
-      return this;
-    }
-
-    unref() {
-      this._netServer.unref();
-      return this;
-    }
-  }
-
-  const connect = (...args) => {
-    const { callback, transportOptions, transportSocket, tlsOptions } =
-      normalizeTlsConnectInvocation(args);
-    const rawSocket =
-      transportSocket ??
-      netModule.connect({
-        allowHalfOpen: transportOptions.allowHalfOpen,
-        host: transportOptions.host,
-        port: transportOptions.port,
-      });
-    const tlsSocket = createClientTlsSocket(rawSocket, tlsOptions);
-    if (typeof callback === 'function') {
-      tlsSocket.once('secureConnect', callback);
-    }
-    return tlsSocket;
-  };
-  const createServer = (...args) => {
-    const { options, secureConnectionListener } = normalizeTlsServerCreation(args);
-    return new SecureExecTlsServer(options, secureConnectionListener);
-  };
-  const module = Object.assign(Object.create(tlsModule ?? null), {
-    Server: SecureExecTlsServer,
-    TLSSocket: tlsModule.TLSSocket,
-    connect,
-    createConnection: connect,
-    createServer,
-  });
-
-  return module;
-}
-
-function createTransportBackedServer(
-  hostServer,
-  transportServer,
-  connectionEventName,
-  forwardedEvents = [],
-) {
-  const forward = (sourceEvent, targetEvent = sourceEvent) => {
-    transportServer.on(sourceEvent, (...args) => {
-      hostServer.emit(targetEvent, ...args);
-    });
-  };
-
-  forward(connectionEventName);
-  forward('close');
-  forward('error');
-  forward('listening');
-  for (const entry of forwardedEvents) {
-    if (Array.isArray(entry)) {
-      forward(entry[0], entry[1] ?? entry[0]);
-    } else {
-      forward(entry);
-    }
-  }
-
-  const definePassthroughProperty = (property, getter, setter = undefined) => {
-    try {
-      Object.defineProperty(hostServer, property, {
-        configurable: true,
-        enumerable: true,
-        get: getter,
-        set: setter,
-      });
-    } catch {
-      // Ignore host properties that reject redefinition.
-    }
-  };
-
-  hostServer.address = () => transportServer.address();
-  hostServer.close = (callback) => {
-    transportServer.close(callback);
-    return hostServer;
-  };
-  hostServer.getConnections = (callback) => transportServer.getConnections(callback);
-  hostServer.listen = (...args) => {
-    transportServer.listen(...args);
-    return hostServer;
-  };
-  hostServer.ref = () => {
-    transportServer.ref();
-    return hostServer;
-  };
-  hostServer.unref = () => {
-    transportServer.unref();
-    return hostServer;
-  };
-
-  definePassthroughProperty('listening', () => transportServer.listening);
-  definePassthroughProperty(
-    'maxConnections',
-    () => transportServer.maxConnections,
-    (value) => {
-      transportServer.maxConnections = value;
-    },
-  );
-
-  return hostServer;
-}
-
-function normalizeHttpPort(value, subject = 'secure-exec http port') {
-  const numeric =
-    typeof value === 'number'
-      ? value
-      : typeof value === 'string' && value.length > 0
-        ? Number(value)
-        : Number.NaN;
-  if (!Number.isInteger(numeric) || numeric < 0 || numeric > 65535) {
-    throw new RangeError(`${subject} must be an integer between 0 and 65535`);
-  }
-  return numeric;
-}
-
-function defaultPortForProtocol(protocol) {
-  switch (protocol) {
-    case 'https:':
-      return 443;
-    case 'http2:':
-    case 'http:':
-    default:
-      return 80;
-  }
-}
-
-function parseRequestTargetFromHostOption(value, protocol) {
-  if (typeof value !== 'string' || value.length === 0) {
-    return null;
-  }
-  if (hostNet.isIP(value) !== 0) {
-    return {
-      hostname: value,
-      port: null,
-    };
-  }
-
-  const looksLikeHostPort =
-    value.startsWith('[') || /^[^:]+:\d+$/.test(value);
-  if (!looksLikeHostPort) {
-    return {
-      hostname: value,
-      port: null,
-    };
-  }
-
-  try {
-    const parsed = new URL(`${protocol}//${value}`);
-    return {
-      hostname: parsed.hostname || 'localhost',
-      port:
-        parsed.port.length > 0 ? normalizeHttpPort(parsed.port) : null,
-    };
-  } catch {
-    return {
-      hostname: value,
-      port: null,
-    };
-  }
-}
-
-function parseRequestTargetFromUrl(value, defaultProtocol) {
-  if (!(value instanceof URL) && typeof value !== 'string') {
-    return null;
-  }
-
-  const parsed = value instanceof URL ? value : new URL(String(value));
-  const protocol =
-    typeof parsed.protocol === 'string' && parsed.protocol.length > 0
-      ? parsed.protocol
-      : defaultProtocol;
-  const auth =
-    parsed.username.length > 0 || parsed.password.length > 0
-      ? `${decodeURIComponent(parsed.username)}:${decodeURIComponent(parsed.password)}`
-      : undefined;
-  return {
-    protocol,
-    hostname: parsed.hostname || 'localhost',
-    port:
-      parsed.port.length > 0
-        ? normalizeHttpPort(parsed.port)
-        : defaultPortForProtocol(protocol),
-    path: `${parsed.pathname || '/'}${parsed.search || ''}`,
-    auth,
-  };
-}
-
-function createRpcBackedHttpModule(httpModule, transportModule, defaultProtocol = 'http:') {
-  const debugHttpLog = (...args) => {
-    console.error('[agentos http polyfill]', ...args);
-  };
-  const createUnsupportedHttpError = (subject) => {
-    const error = new Error(`${subject} is not supported by the secure-exec http polyfill yet`);
-    error.code = 'ERR_AGENTOS_HTTP_UNSUPPORTED';
-    return error;
-  };
-  const normalizeRequestInvocation = (args) => {
-    const values = [...args];
-    const callback =
-      typeof values[values.length - 1] === 'function' ? values.pop() : undefined;
-
-    let options = {};
-    if (values[0] instanceof URL || typeof values[0] === 'string') {
-      options = {
-        ...options,
-        ...parseRequestTargetFromUrl(values.shift(), defaultProtocol),
-      };
-    }
-    if (values[0] != null) {
-      if (typeof values[0] !== 'object') {
-        throw new TypeError('secure-exec http request options must be an object');
-      }
-      options = {
-        ...options,
-        ...values[0],
-      };
-    }
-
-    if (typeof options.socketPath === 'string') {
-      throw createUnsupportedHttpError('http request socketPath');
-    }
-    if (options.lookup != null) {
-      throw createUnsupportedHttpError('http request lookup');
-    }
-
-    const protocol =
-      typeof options.protocol === 'string' && options.protocol.length > 0
-        ? options.protocol
-        : defaultProtocol;
-    const hostTarget = parseRequestTargetFromHostOption(options.host, protocol);
-    const hostname =
-      typeof options.hostname === 'string' && options.hostname.length > 0
-        ? options.hostname
-        : hostTarget?.hostname ?? 'localhost';
-    const port =
-      options.port != null
-        ? normalizeHttpPort(options.port)
-        : hostTarget?.port ?? defaultPortForProtocol(protocol);
-    const path =
-      typeof options.path === 'string' && options.path.length > 0
-        ? options.path
-        : '/';
-    const requestOptions = {
-      ...options,
-      protocol,
-      hostname,
-      port,
-      path,
-      agent: false,
-    };
-    delete requestOptions.agent;
-    delete requestOptions.createConnection;
-    delete requestOptions.host;
-    delete requestOptions.lookup;
-    delete requestOptions.socketPath;
-
-    return {
-      callback,
-      requestOptions,
-      connectionOptions: {
-        allowHalfOpen: options.allowHalfOpen === true,
-        family: options.family,
-        host: hostname,
-        localAddress: options.localAddress,
-        port,
-      },
-    };
-  };
-  const createRequest = (options, callback) => {
-    class SecureExecHttpAgent extends httpModule.Agent {
-      createConnection() {
-        return transportModule.connect(options.connectionOptions);
-      }
-    }
-
-    const agent = new SecureExecHttpAgent({ keepAlive: false });
-    const request = httpModule.request(
-      {
-        ...options.requestOptions,
-        agent,
-      },
-      callback,
-    );
-    debugHttpLog('http.request', JSON.stringify(options.requestOptions));
-    request.on('socket', (socket) => {
-      debugHttpLog('http.socket');
-      socket?.once?.('connect', () => debugHttpLog('http.socket.connect'));
-      socket?.once?.('secureConnect', () => debugHttpLog('http.socket.secureConnect'));
-      socket?.once?.('error', (error) =>
-        debugHttpLog('http.socket.error', error?.code ?? '', error?.message ?? String(error)),
-      );
-      socket?.once?.('close', () => debugHttpLog('http.socket.close'));
-    });
-    request.once('response', (response) =>
-      debugHttpLog('http.response', response?.statusCode ?? '<none>'),
-    );
-    request.once('error', (error) =>
-      debugHttpLog('http.error', error?.code ?? '', error?.message ?? String(error)),
-    );
-    request.once('close', () => debugHttpLog('http.close'));
-    request.once('close', () => agent.destroy());
-    return request;
-  };
-  const normalizeServerCreation = (args) => {
-    let options = {};
-    let requestListener;
-
-    if (typeof args[0] === 'function') {
-      requestListener = args[0];
-    } else {
-      if (args[0] != null) {
-        if (typeof args[0] !== 'object') {
-          throw new TypeError('http.createServer options must be an object');
-        }
-        options = { ...args[0] };
-      }
-      if (typeof args[1] === 'function') {
-        requestListener = args[1];
-      }
-    }
-
-    return {
-      options,
-      requestListener,
-      transportOptions: {
-        allowHalfOpen: options.allowHalfOpen === true,
-        pauseOnConnect: options.pauseOnConnect === true,
-      },
-    };
-  };
-
-  const request = (...args) => {
-    const normalized = normalizeRequestInvocation(args);
-    return createRequest(normalized, normalized.callback);
-  };
-  const get = (...args) => {
-    const req = request(...args);
-    req.end();
-    return req;
-  };
-  const createServer = (...args) => {
-    const { options, requestListener, transportOptions } =
-      normalizeServerCreation(args);
-    const server = httpModule.createServer(options, requestListener);
-    const transportServer = transportModule.createServer(transportOptions);
-    return createTransportBackedServer(server, transportServer, 'connection');
-  };
-  const module = Object.assign(Object.create(httpModule ?? null), {
-    Agent: httpModule.Agent,
-    globalAgent: httpModule.globalAgent,
-    get,
-    request,
-    createServer,
-  });
-
-  return module;
-}
-
-function createRpcBackedHttpsModule(httpsModule, tlsModule) {
-  const debugHttpLog = (...args) => {
-    console.error('[agentos http polyfill]', ...args);
-  };
-  const createUnsupportedHttpsError = (subject) => {
-    const error = new Error(`${subject} is not supported by the secure-exec https polyfill yet`);
-    error.code = 'ERR_AGENTOS_HTTPS_UNSUPPORTED';
-    return error;
-  };
-  const normalizeRequestInvocation = (args) => {
-    const values = [...args];
-    const callback =
-      typeof values[values.length - 1] === 'function' ? values.pop() : undefined;
-
-    let options = {};
-    if (values[0] instanceof URL || typeof values[0] === 'string') {
-      options = {
-        ...options,
-        ...parseRequestTargetFromUrl(values.shift(), 'https:'),
-      };
-    }
-    if (values[0] != null) {
-      if (typeof values[0] !== 'object') {
-        throw new TypeError('secure-exec https request options must be an object');
-      }
-      options = {
-        ...options,
-        ...values[0],
-      };
-    }
-
-    if (typeof options.socketPath === 'string') {
-      throw createUnsupportedHttpsError('https request socketPath');
-    }
-    if (options.lookup != null) {
-      throw createUnsupportedHttpsError('https request lookup');
-    }
-
-    const hostTarget = parseRequestTargetFromHostOption(options.host, 'https:');
-    const hostname =
-      typeof options.hostname === 'string' && options.hostname.length > 0
-        ? options.hostname
-        : hostTarget?.hostname ?? 'localhost';
-    const port =
-      options.port != null
-        ? normalizeHttpPort(options.port)
-        : hostTarget?.port ?? 443;
-    const path =
-      typeof options.path === 'string' && options.path.length > 0
-        ? options.path
-        : '/';
-    const requestOptions = {
-      ...options,
-      protocol: 'https:',
-      hostname,
-      port,
-      path,
-      agent: false,
-    };
-    delete requestOptions.agent;
-    delete requestOptions.createConnection;
-    delete requestOptions.host;
-    delete requestOptions.lookup;
-    delete requestOptions.socketPath;
-
-    const tlsConnectOptions = {
-      allowHalfOpen: options.allowHalfOpen === true,
-      ALPNProtocols: options.ALPNProtocols,
-      ca: options.ca,
-      cert: options.cert,
-      ciphers: options.ciphers,
-      crl: options.crl,
-      ecdhCurve: options.ecdhCurve,
-      family: options.family,
-      host: hostname,
-      key: options.key,
-      localAddress: options.localAddress,
-      maxVersion: options.maxVersion,
-      minVersion: options.minVersion,
-      passphrase: options.passphrase,
-      pfx: options.pfx,
-      port,
-      rejectUnauthorized: options.rejectUnauthorized,
-      secureContext: options.secureContext,
-      servername: options.servername,
-      session: options.session,
-      sigalgs: options.sigalgs,
-    };
-
-    return {
-      callback,
-      requestOptions,
-      tlsConnectOptions,
-    };
-  };
-  const normalizeServerCreation = (args) => {
-    let options = {};
-    let requestListener;
-
-    if (typeof args[0] === 'function') {
-      requestListener = args[0];
-    } else {
-      if (args[0] != null) {
-        if (typeof args[0] !== 'object') {
-          throw new TypeError('https.createServer options must be an object');
-        }
-        options = { ...args[0] };
-      }
-      if (typeof args[1] === 'function') {
-        requestListener = args[1];
-      }
-    }
-
-    return {
-      options,
-      requestListener,
-    };
-  };
-
-  const request = (...args) => {
-    const normalized = normalizeRequestInvocation(args);
-    class SecureExecHttpsAgent extends httpsModule.Agent {
-      createConnection() {
-        return tlsModule.connect(normalized.tlsConnectOptions);
-      }
-    }
-
-    const agent = new SecureExecHttpsAgent({ keepAlive: false });
-    const request = httpsModule.request(
-      {
-        ...normalized.requestOptions,
-        agent,
-      },
-      normalized.callback,
-    );
-    debugHttpLog('https.request', JSON.stringify(normalized.requestOptions));
-    request.on('socket', (socket) => {
-      debugHttpLog('https.socket');
-      socket?.once?.('connect', () => debugHttpLog('https.socket.connect'));
-      socket?.once?.('secureConnect', () => debugHttpLog('https.socket.secureConnect'));
-      socket?.once?.('error', (error) =>
-        debugHttpLog('https.socket.error', error?.code ?? '', error?.message ?? String(error)),
-      );
-      socket?.once?.('close', () => debugHttpLog('https.socket.close'));
-    });
-    request.once('response', (response) =>
-      debugHttpLog('https.response', response?.statusCode ?? '<none>'),
-    );
-    request.once('error', (error) =>
-      debugHttpLog('https.error', error?.code ?? '', error?.message ?? String(error)),
-    );
-    request.once('close', () => debugHttpLog('https.close'));
-    request.once('close', () => agent.destroy());
-    return request;
-  };
-  const get = (...args) => {
-    const req = request(...args);
-    req.end();
-    return req;
-  };
-  const createServer = (...args) => {
-    const { options, requestListener } = normalizeServerCreation(args);
-    const server = httpsModule.createServer(options, requestListener);
-    const transportServer = tlsModule.createServer(options);
-    return createTransportBackedServer(server, transportServer, 'secureConnection', [
-      'tlsClientError',
-    ]);
-  };
-  const module = Object.assign(Object.create(httpsModule ?? null), {
-    Agent: httpsModule.Agent,
-    globalAgent: httpsModule.globalAgent,
-    get,
-    request,
-    createServer,
-  });
-
-  return module;
-}
-
-function createRpcBackedHttp2Module(http2Module, netModule, tlsModule) {
-  const createUnsupportedHttp2Error = (subject) => {
-    const error = new Error(`${subject} is not supported by the secure-exec http2 polyfill yet`);
-    error.code = 'ERR_AGENTOS_HTTP2_UNSUPPORTED';
-    return error;
-  };
-  const normalizeConnectInvocation = (args) => {
-    const values = [...args];
-    const authority =
-      values[0] instanceof URL || typeof values[0] === 'string'
-        ? values.shift()
-        : 'http://localhost';
-    const authorityTarget = parseRequestTargetFromUrl(authority, 'http:');
-    const callback =
-      typeof values[values.length - 1] === 'function' ? values.pop() : undefined;
-    const options =
-      values[0] != null && typeof values[0] === 'object' ? { ...values[0] } : {};
-
-    if (typeof options.socketPath === 'string') {
-      throw createUnsupportedHttp2Error('http2.connect socketPath');
-    }
-    if (options.lookup != null) {
-      throw createUnsupportedHttp2Error('http2.connect lookup');
-    }
-
-    const connectOptions = { ...options };
-    delete connectOptions.createConnection;
-    delete connectOptions.host;
-    delete connectOptions.hostname;
-    delete connectOptions.lookup;
-    delete connectOptions.port;
-    delete connectOptions.socketPath;
-
-    const isSecure = authorityTarget.protocol === 'https:';
-    return {
-      authority,
-      callback,
-      connectOptions,
-      createConnection: () =>
-        isSecure
-          ? tlsModule.connect({
-              ALPNProtocols: options.ALPNProtocols ?? ['h2'],
-              ca: options.ca,
-              cert: options.cert,
-              ciphers: options.ciphers,
-              family: options.family,
-              host: authorityTarget.hostname,
-              key: options.key,
-              localAddress: options.localAddress,
-              passphrase: options.passphrase,
-              pfx: options.pfx,
-              port: authorityTarget.port,
-              rejectUnauthorized: options.rejectUnauthorized,
-              secureContext: options.secureContext,
-              servername: options.servername,
-              session: options.session,
-            })
-          : netModule.connect({
-              allowHalfOpen: options.allowHalfOpen === true,
-              family: options.family,
-              host: authorityTarget.hostname,
-              localAddress: options.localAddress,
-              port: authorityTarget.port,
-            }),
-    };
-  };
-  const normalizeServerCreation = (args, secure) => {
-    let options = {};
-    let onStream;
-
-    if (typeof args[0] === 'function') {
-      onStream = args[0];
-    } else {
-      if (args[0] != null) {
-        if (typeof args[0] !== 'object') {
-          throw new TypeError(
-            `http2.${secure ? 'createSecureServer' : 'createServer'} options must be an object`,
-          );
-        }
-        options = { ...args[0] };
-      }
-      if (typeof args[1] === 'function') {
-        onStream = args[1];
-      }
-    }
-
-    return {
-      onStream,
-      options,
-    };
-  };
-
-  const connect = (...args) => {
-    const normalized = normalizeConnectInvocation(args);
-    return http2Module.connect(
-      normalized.authority,
-      {
-        ...normalized.connectOptions,
-        createConnection: normalized.createConnection,
-      },
-      normalized.callback,
-    );
-  };
-  const createServer = (...args) => {
-    const { onStream, options } = normalizeServerCreation(args, false);
-    const server = http2Module.createServer(options, onStream);
-    const transportServer = netModule.createServer({
-      allowHalfOpen: options.allowHalfOpen === true,
-      pauseOnConnect: options.pauseOnConnect === true,
-    });
-    return createTransportBackedServer(server, transportServer, 'connection');
-  };
-  const createSecureServer = (...args) => {
-    const { onStream, options } = normalizeServerCreation(args, true);
-    const server = http2Module.createSecureServer(options, onStream);
-    const transportServer = tlsModule.createServer(
-      {
-        ...options,
-        ALPNProtocols: options.ALPNProtocols ?? ['h2'],
-      },
-    );
-    return createTransportBackedServer(server, transportServer, 'secureConnection', [
-      'tlsClientError',
-    ]);
-  };
-  const module = Object.assign(Object.create(http2Module ?? null), {
-    connect,
-    createServer,
-    createSecureServer,
-  });
-
-  return module;
-}
-
-function createRpcBackedDgramModule(dgramModule, fromGuestDir = '/') {
-  const RPC_POLL_WAIT_MS = 50;
-  const RPC_IDLE_POLL_DELAY_MS = 10;
-  const bridge = () => requireSecureExecSyncRpcBridge();
-  const createUnsupportedDgramError = (subject) => {
-    const error = new Error(`${subject} is not supported by the secure-exec dgram polyfill yet`);
-    error.code = 'ERR_AGENTOS_DGRAM_UNSUPPORTED';
-    return error;
-  };
-  const normalizeDgramInteger = (value, label) => {
-    const numeric =
-      typeof value === 'number'
-        ? value
-        : typeof value === 'string' && value.length > 0
-          ? Number(value)
-          : Number.NaN;
-    if (!Number.isInteger(numeric) || numeric < 0) {
-      throw new RangeError(`secure-exec ${label} must be a non-negative integer`);
-    }
-    return numeric;
-  };
-  const normalizeDgramPort = (value) => {
-    const numeric = normalizeDgramInteger(value, 'dgram port');
-    if (numeric > 65535) {
-      throw new RangeError(`secure-exec dgram port must be between 0 and 65535`);
-    }
-    return numeric;
-  };
-  const socketFamilyForAddress = (value) => {
-    if (typeof value !== 'string') {
-      return undefined;
-    }
-    return value.includes(':') ? 'IPv6' : 'IPv4';
-  };
-  const normalizeDgramType = (value) => {
-    if (value === 'udp4' || value === 'udp6') {
-      return value;
-    }
-    throw new TypeError(`secure-exec dgram socket type must be udp4 or udp6`);
-  };
-  const normalizeDgramCreateSocketInvocation = (args) => {
-    const values = [...args];
-    const callback =
-      typeof values[values.length - 1] === 'function' ? values.pop() : undefined;
-
-    let options;
-    if (typeof values[0] === 'string') {
-      options = { type: values[0] };
-    } else if (values[0] != null && typeof values[0] === 'object') {
-      options = { ...values[0] };
-    } else {
-      throw new TypeError('dgram.createSocket requires a socket type or options object');
-    }
-
-    if (options?.recvBufferSize != null || options?.sendBufferSize != null) {
-      throw createUnsupportedDgramError('dgram.createSocket({ recvBufferSize/sendBufferSize })');
-    }
-
-    return {
-      callback,
-      options: {
-        type: normalizeDgramType(options.type),
-      },
-    };
-  };
-  const normalizeDgramBindInvocation = (args, socketType) => {
-    const values = [...args];
-    const callback =
-      typeof values[values.length - 1] === 'function' ? values.pop() : undefined;
-
-    let options;
-    if (values[0] != null && typeof values[0] === 'object') {
-      options = { ...values[0] };
-    } else {
-      options = { port: values[0] };
-      if (typeof values[1] === 'string') {
-        options.address = values[1];
-      }
-    }
-
-    if (options?.exclusive != null || options?.fd != null || options?.signal != null) {
-      throw createUnsupportedDgramError('dgram.Socket.bind advanced options');
-    }
-
-    return {
-      callback,
-      options: {
-        port: normalizeDgramPort(options?.port ?? 0),
-        address:
-          typeof options?.address === 'string' && options.address.length > 0
-            ? options.address
-            : socketType === 'udp6'
-              ? '::1'
-              : '127.0.0.1',
-      },
-    };
-  };
-  const normalizeDgramMessageBuffer = (value) => {
-    if (typeof value === 'string') {
-      return Buffer.from(value);
-    }
-    if (Array.isArray(value)) {
-      return Buffer.concat(value.map((entry) => normalizeDgramMessageBuffer(entry)));
-    }
-    return Buffer.from(toGuestBufferView(value, 'dgram payload'));
-  };
-  const normalizeDgramSendInvocation = (args) => {
-    const values = [...args];
-    const callback =
-      typeof values[values.length - 1] === 'function' ? values.pop() : undefined;
-    if (values.length === 0) {
-      throw new TypeError('dgram.Socket.send requires a payload');
-    }
-
-    let payload = normalizeDgramMessageBuffer(values.shift());
-    let port;
-    let address;
-
-    if (
-      values.length >= 3 &&
-      typeof values[0] === 'number' &&
-      typeof values[1] === 'number'
-    ) {
-      const offset = normalizeDgramInteger(values.shift(), 'dgram send offset');
-      const length = normalizeDgramInteger(values.shift(), 'dgram send length');
-      if (offset > payload.length || offset + length > payload.length) {
-        throw new RangeError('secure-exec dgram send offset/length is out of range');
-      }
-      payload = payload.subarray(offset, offset + length);
-      port = normalizeDgramPort(values.shift());
-      if (typeof values[0] === 'string') {
-        address = values.shift();
-      }
-    } else if (values[0] != null && typeof values[0] === 'object') {
-      const options = { ...values.shift() };
-      port = normalizeDgramPort(options.port);
-      address = options.address;
-    } else {
-      port = normalizeDgramPort(values.shift());
-      if (typeof values[0] === 'string') {
-        address = values.shift();
-      }
-    }
-
-    return {
-      callback,
-      options: {
-        port,
-        address: typeof address === 'string' && address.length > 0 ? address : 'localhost',
-      },
-      payload,
-    };
-  };
-  const callCreateSocket = (options) => bridge().callSync('dgram.createSocket', [options]);
-  const callBind = (socketId, options) => bridge().callSync('dgram.bind', [socketId, options]);
-  const callSend = (socketId, payload, options) =>
-    bridge().call('dgram.send', [socketId, toGuestBufferView(payload, 'dgram.send payload'), options]);
-  const callPoll = (socketId, waitMs = 0) => bridge().callSync('dgram.poll', [socketId, waitMs]);
-  const callClose = (socketId) => bridge().call('dgram.close', [socketId]);
-
-  const finalizeDatagramClose = (socket) => {
-    if (socket._agentOSClosed) {
-      return;
-    }
-    socket._agentOSClosed = true;
-    socket._agentOSBound = false;
-    socket._agentOSPollTimer && clearTimeout(socket._agentOSPollTimer);
-    socket._agentOSPollTimer = null;
-    queueMicrotask(() => socket.emit('close'));
-  };
-  const attachDatagramBindState = (socket, result, emitListening = false) => {
-    const alreadyBound = socket._agentOSBound;
-    socket._agentOSBound = true;
-    socket._address = {
-      address: result.localAddress,
-      family: result.family ?? socketFamilyForAddress(result.localAddress),
-      port: result.localPort,
-    };
-    if (emitListening && !alreadyBound) {
-      queueMicrotask(() => {
-        if (!socket._agentOSClosed) {
-          socket.emit('listening');
-        }
-      });
-    }
-    scheduleDatagramPoll(socket, 0);
-  };
-  const scheduleDatagramPoll = (socket, delayMs) => {
-    if (
-      socket._agentOSClosed ||
-      socket._agentOSSocketId == null ||
-      !socket._agentOSBound ||
-      socket._agentOSPollTimer != null
-    ) {
-      return;
-    }
-
-    socket._agentOSPollTimer = setTimeout(() => {
-      socket._agentOSPollTimer = null;
-      if (
-        socket._agentOSClosed ||
-        socket._agentOSSocketId == null ||
-        !socket._agentOSBound
-      ) {
-        return;
-      }
-
-      let event;
-      try {
-        event = callPoll(socket._agentOSSocketId, RPC_POLL_WAIT_MS);
-      } catch (error) {
-        socket.emit('error', error);
-        scheduleDatagramPoll(socket, 0);
-        return;
-      }
-
-      if (!event) {
-        scheduleDatagramPoll(socket, RPC_IDLE_POLL_DELAY_MS);
-        return;
-      }
-
-      if (event.type === 'message') {
-        socket.emit(
-          'message',
-          decodeFsBytesPayload(event.data, 'dgram.message'),
-          {
-            address: event.remoteAddress,
-            family: event.remoteFamily ?? socketFamilyForAddress(event.remoteAddress),
-            port: event.remotePort,
-            size: decodeFsBytesPayload(event.data, 'dgram.message').length,
-          },
-        );
-        scheduleDatagramPoll(socket, 0);
-        return;
-      }
-
-      if (event.type === 'error') {
-        const error = new Error(
-          typeof event.message === 'string' ? event.message : 'secure-exec dgram socket error',
-        );
-        if (typeof event.code === 'string' && event.code.length > 0) {
-          error.code = event.code;
-        }
-        socket.emit('error', error);
-        scheduleDatagramPoll(socket, 0);
-        return;
-      }
-
-      scheduleDatagramPoll(socket, 0);
-    }, delayMs);
-
-    if (!socket._agentOSRefed) {
-      socket._agentOSPollTimer.unref?.();
-    }
-  };
-
-  class SecureExecDatagramSocket extends EventEmitter {
-    constructor(options = {}, messageListener = undefined) {
-      super();
-      this.type = options.type;
-      this._agentOSClosed = false;
-      this._agentOSRefed = true;
-      this._agentOSBound = false;
-      this._agentOSSocketId = null;
-      this._agentOSPollTimer = null;
-      this._address = null;
-      if (typeof messageListener === 'function') {
-        this.on('message', messageListener);
-      }
-      const result = callCreateSocket(options);
-      this._agentOSSocketId = String(result.socketId);
-    }
-
-    address() {
-      return this._address;
-    }
-
-    bind(...args) {
-      const { callback, options } = normalizeDgramBindInvocation(args, this.type);
-      if (typeof callback === 'function') {
-        this.once('listening', callback);
-      }
-      if (this._agentOSClosed) {
-        throw new Error('secure-exec dgram socket is closed');
-      }
-      attachDatagramBindState(this, callBind(this._agentOSSocketId, options), true);
-      return this;
-    }
-
-    close(callback) {
-      if (typeof callback === 'function') {
-        this.once('close', callback);
-      }
-      if (this._agentOSClosed || this._agentOSSocketId == null) {
-        queueMicrotask(() => finalizeDatagramClose(this));
-        return this;
-      }
-      this._agentOSBound = false;
-      this._agentOSPollTimer && clearTimeout(this._agentOSPollTimer);
-      this._agentOSPollTimer = null;
-      const socketId = this._agentOSSocketId;
-      this._agentOSSocketId = null;
-      callClose(socketId).then(
-        () => finalizeDatagramClose(this),
-        (error) => this.emit('error', error),
-      );
-      return this;
-    }
-
-    send(...args) {
-      if (this._agentOSClosed || this._agentOSSocketId == null) {
-        const error = new Error('secure-exec dgram socket is closed');
-        const callback =
-          typeof args[args.length - 1] === 'function' ? args[args.length - 1] : null;
-        if (callback) {
-          queueMicrotask(() => callback(error));
-          return;
-        }
-        throw error;
-      }
-
-      const { callback, options, payload } = normalizeDgramSendInvocation(args);
-      callSend(this._agentOSSocketId, payload, options).then(
-        (result) => {
-          attachDatagramBindState(this, result, true);
-          if (typeof callback === 'function') {
-            callback(null, typeof result?.bytes === 'number' ? result.bytes : payload.length);
-          }
-        },
-        (error) => {
-          if (typeof callback === 'function') {
-            callback(error);
-            return;
-          }
-          this.emit('error', error);
-        },
-      );
-    }
-
-    ref() {
-      this._agentOSRefed = true;
-      this._agentOSPollTimer?.ref?.();
-      return this;
-    }
-
-    unref() {
-      this._agentOSRefed = false;
-      this._agentOSPollTimer?.unref?.();
-      return this;
-    }
-
-    setBroadcast() {
-      return this;
-    }
-
-    setMulticastInterface() {
-      return this;
-    }
-
-    setMulticastLoopback() {
-      return this;
-    }
-
-    setMulticastTTL() {
-      return this;
-    }
-
-    setRecvBufferSize() {
-      return this;
-    }
-
-    setSendBufferSize() {
-      return this;
-    }
-
-    setTTL() {
-      return this;
-    }
-
-    addMembership() {
-      throw createUnsupportedDgramError('dgram.Socket.addMembership');
-    }
-
-    connect() {
-      throw createUnsupportedDgramError('dgram.Socket.connect');
-    }
-
-    disconnect() {
-      throw createUnsupportedDgramError('dgram.Socket.disconnect');
-    }
-
-    dropMembership() {
-      throw createUnsupportedDgramError('dgram.Socket.dropMembership');
-    }
-
-    getRecvBufferSize() {
-      return 0;
-    }
-
-    getSendBufferSize() {
-      return 0;
-    }
-
-    remoteAddress() {
-      throw createUnsupportedDgramError('dgram.Socket.remoteAddress');
-    }
-  }
-
-  const createSocket = (...args) => {
-    const { callback, options } = normalizeDgramCreateSocketInvocation(args);
-    return new SecureExecDatagramSocket(options, callback);
-  };
-  const module = Object.assign(Object.create(dgramModule ?? null), {
-    Socket: SecureExecDatagramSocket,
-    createSocket,
-  });
-
-  return module;
-}
-
-function createRpcBackedDnsModule(dnsModule) {
-  const bridge = () => requireSecureExecSyncRpcBridge();
-  const dnsConstants = Object.freeze({ ...(dnsModule?.constants ?? {}) });
-  let defaultResultOrder = 'verbatim';
-
-  const createUnsupportedDnsError = (subject) => {
-    const error = new Error(`${subject} is not supported by the secure-exec dns polyfill yet`);
-    error.code = 'ERR_NOT_IMPLEMENTED';
-    return error;
-  };
-
-  const normalizeDnsHostname = (hostname, methodName) => {
-    if (typeof hostname !== 'string' || hostname.length === 0) {
-      throw new TypeError(`secure-exec ${methodName} hostname must be a non-empty string`);
-    }
-    return hostname;
-  };
-
-  const normalizeDnsFamily = (value, label, allowAny = true) => {
-    if (value == null) {
-      return allowAny ? 0 : 4;
-    }
-    const numeric =
-      typeof value === 'number'
-        ? value
-        : typeof value === 'string' && value.length > 0
-          ? Number(value)
-          : Number.NaN;
-    if (
-      !Number.isInteger(numeric) ||
-      (!allowAny && numeric !== 4 && numeric !== 6) ||
-      (allowAny && numeric !== 0 && numeric !== 4 && numeric !== 6)
-    ) {
-      throw new TypeError(
-        `secure-exec ${label} must be ${allowAny ? '0, 4, or 6' : '4 or 6'}`,
-      );
-    }
-    return numeric;
-  };
-
-  const normalizeDnsResultOrder = (value) => {
-    const normalized = value == null ? defaultResultOrder : String(value);
-    if (
-      normalized !== 'verbatim' &&
-      normalized !== 'ipv4first' &&
-      normalized !== 'ipv6first'
-    ) {
-      throw new TypeError(
-        'secure-exec dns result order must be one of verbatim, ipv4first, or ipv6first',
-      );
-    }
-    return normalized;
-  };
-
-  const sortLookupAddresses = (records, order) => {
-    if (!Array.isArray(records) || order === 'verbatim') {
-      return [...records];
-    }
-    const rankFamily = (family) => {
-      if (order === 'ipv4first') {
-        return family === 4 ? 0 : family === 6 ? 1 : 2;
-      }
-      return family === 6 ? 0 : family === 4 ? 1 : 2;
-    };
-    return [...records].sort((left, right) => rankFamily(left.family) - rankFamily(right.family));
-  };
-
-  const normalizeLookupInvocation = (hostname, options, callback) => {
-    let normalizedOptions = {};
-    let done = callback;
-
-    if (typeof options === 'function') {
-      done = options;
-    } else if (typeof options === 'number') {
-      normalizedOptions = { family: options };
-    } else if (options == null) {
-      normalizedOptions = {};
-    } else if (typeof options === 'object') {
-      normalizedOptions = { ...options };
-    } else {
-      throw new TypeError('secure-exec dns.lookup options must be a number, object, or callback');
-    }
-
-    return {
-      callback: done,
-      options: {
-        hostname: normalizeDnsHostname(hostname, 'dns.lookup'),
-        family: normalizeDnsFamily(normalizedOptions.family, 'dns.lookup family'),
-        all: normalizedOptions.all === true,
-        order: normalizeDnsResultOrder(
-          normalizedOptions.order ??
-            (normalizedOptions.verbatim === false ? 'ipv4first' : undefined),
-        ),
-      },
-    };
-  };
-
-  const normalizeResolveInvocation = (methodName, hostname, rrtype, callback) => {
-    let type = rrtype;
-    let done = callback;
-    if (typeof rrtype === 'function') {
-      done = rrtype;
-      type = undefined;
-    }
-    if (type == null) {
-      type = 'A';
-    }
-    const normalizedType = String(type).toUpperCase();
-    if (
-      normalizedType !== 'A' &&
-      normalizedType !== 'AAAA' &&
-      normalizedType !== 'MX' &&
-      normalizedType !== 'TXT' &&
-      normalizedType !== 'SRV' &&
-      normalizedType !== 'CNAME' &&
-      normalizedType !== 'PTR' &&
-      normalizedType !== 'NS' &&
-      normalizedType !== 'SOA' &&
-      normalizedType !== 'NAPTR' &&
-      normalizedType !== 'CAA' &&
-      normalizedType !== 'ANY'
-    ) {
-      throw createUnsupportedDnsError(`${methodName}(${normalizedType})`);
-    }
-    return {
-      callback: done,
-      options: {
-        hostname: normalizeDnsHostname(hostname, methodName),
-        rrtype: normalizedType,
-      },
-    };
-  };
-
-  const resolveRecords = (method, options) => bridge().callSync(method, [options]);
-  const lookupRecords = (options) => bridge().callSync('dns.lookup', [options]);
-
-  const lookup = (hostname, options, callback) => {
-    const invocation = normalizeLookupInvocation(hostname, options, callback);
-    const records = sortLookupAddresses(lookupRecords(invocation.options), invocation.options.order);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => {
-        if (invocation.options.all) {
-          invocation.callback(null, records);
-        } else {
-          const first = records[0] ?? { address: null, family: invocation.options.family || 0 };
-          invocation.callback(null, first.address, first.family);
-        }
-      });
-    }
-    return invocation.options.all
-      ? records
-      : {
-          address: records[0]?.address ?? null,
-          family: records[0]?.family ?? (invocation.options.family || 0),
-        };
-  };
-
-  const resolve = (hostname, rrtype, callback) => {
-    const invocation = normalizeResolveInvocation('dns.resolve', hostname, rrtype, callback);
-    const records = resolveRecords('dns.resolve', invocation.options);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  };
-
-  const resolve4 = (hostname, callback) => {
-    const invocation = normalizeResolveInvocation('dns.resolve4', hostname, 'A', callback);
-    const records = resolveRecords('dns.resolve4', invocation.options);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  };
-
-  const resolve6 = (hostname, callback) => {
-    const invocation = normalizeResolveInvocation('dns.resolve6', hostname, 'AAAA', callback);
-    const records = resolveRecords('dns.resolve6', invocation.options);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  };
-
-  const resolveAny = (hostname, callback) => {
-    const invocation = normalizeResolveInvocation('dns.resolveAny', hostname, 'ANY', callback);
-    const records = resolveRecords('dns.resolve', invocation.options);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  };
-
-  const resolveMx = (hostname, callback) => {
-    const invocation = normalizeResolveInvocation('dns.resolveMx', hostname, 'MX', callback);
-    const records = resolveRecords('dns.resolve', invocation.options);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  };
-
-  const resolveTxt = (hostname, callback) => {
-    const invocation = normalizeResolveInvocation('dns.resolveTxt', hostname, 'TXT', callback);
-    const records = resolveRecords('dns.resolve', invocation.options);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  };
-
-  const resolveSrv = (hostname, callback) => {
-    const invocation = normalizeResolveInvocation('dns.resolveSrv', hostname, 'SRV', callback);
-    const records = resolveRecords('dns.resolve', invocation.options);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  };
-
-  const resolveCname = (hostname, callback) => {
-    const invocation = normalizeResolveInvocation('dns.resolveCname', hostname, 'CNAME', callback);
-    const records = resolveRecords('dns.resolve', invocation.options);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  };
-
-  const resolvePtr = (hostname, callback) => {
-    const invocation = normalizeResolveInvocation('dns.resolvePtr', hostname, 'PTR', callback);
-    const records = resolveRecords('dns.resolve', invocation.options);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  };
-
-  const resolveNs = (hostname, callback) => {
-    const invocation = normalizeResolveInvocation('dns.resolveNs', hostname, 'NS', callback);
-    const records = resolveRecords('dns.resolve', invocation.options);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  };
-
-  const resolveSoa = (hostname, callback) => {
-    const invocation = normalizeResolveInvocation('dns.resolveSoa', hostname, 'SOA', callback);
-    const records = resolveRecords('dns.resolve', invocation.options);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  };
-
-  const resolveNaptr = (hostname, callback) => {
-    const invocation = normalizeResolveInvocation('dns.resolveNaptr', hostname, 'NAPTR', callback);
-    const records = resolveRecords('dns.resolve', invocation.options);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  };
-
-  const resolveCaa = (hostname, callback) => {
-    const invocation = normalizeResolveInvocation('dns.resolveCaa', hostname, 'CAA', callback);
-    const records = resolveRecords('dns.resolve', invocation.options);
-    if (typeof invocation.callback === 'function') {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  };
-
-  const createInvalidDnsServersError = (subject) => {
-    const error = new TypeError(
-      `${subject} expects an array of non-empty server strings`,
-    );
-    error.code = 'ERR_INVALID_ARG_TYPE';
-    return error;
-  };
-
-  const normalizeDnsServers = (subject, servers) => {
-    if (!Array.isArray(servers)) {
-      throw createInvalidDnsServersError(subject);
-    }
-
-    return servers.map((server) => {
-      if (typeof server !== 'string' || server.length === 0) {
-        throw createInvalidDnsServersError(subject);
-      }
-      return server;
-    });
-  };
-
-  // Resolver instances keep guest-owned server lists for API compatibility.
-  // Queries still use the VM-wide kernel resolver until the sync RPC grows
-  // per-request nameserver overrides.
-  class SecureExecResolver {
-    constructor() {
-      this._servers = [];
-    }
-
-    cancel() {}
-
-    getServers() {
-      return this._servers.slice();
-    }
-
-    lookup(hostname, options, callback) {
-      return lookup(hostname, options, callback);
-    }
-
-    resolve(hostname, rrtype, callback) {
-      return resolve(hostname, rrtype, callback);
-    }
-
-    resolve4(hostname, callback) {
-      return resolve4(hostname, callback);
-    }
-
-    resolve6(hostname, callback) {
-      return resolve6(hostname, callback);
-    }
-
-    resolveAny(hostname, callback) {
-      return resolveAny(hostname, callback);
-    }
-
-    resolveMx(hostname, callback) {
-      return resolveMx(hostname, callback);
-    }
-
-    resolveTxt(hostname, callback) {
-      return resolveTxt(hostname, callback);
-    }
-
-    resolveSrv(hostname, callback) {
-      return resolveSrv(hostname, callback);
-    }
-
-    resolveCname(hostname, callback) {
-      return resolveCname(hostname, callback);
-    }
-
-    resolvePtr(hostname, callback) {
-      return resolvePtr(hostname, callback);
-    }
-
-    resolveNs(hostname, callback) {
-      return resolveNs(hostname, callback);
-    }
-
-    resolveSoa(hostname, callback) {
-      return resolveSoa(hostname, callback);
-    }
-
-    resolveNaptr(hostname, callback) {
-      return resolveNaptr(hostname, callback);
-    }
-
-    resolveCaa(hostname, callback) {
-      return resolveCaa(hostname, callback);
-    }
-
-    setServers(servers) {
-      this._servers = normalizeDnsServers('dns.Resolver.setServers', servers);
-    }
-  }
-
-  class SecureExecPromisesResolver {
-    constructor() {
-      this._servers = [];
-    }
-
-    cancel() {}
-
-    getServers() {
-      return this._servers.slice();
-    }
-
-    lookup(hostname, options) {
-      return Promise.resolve(lookup(hostname, options));
-    }
-
-    resolve(hostname, rrtype) {
-      return Promise.resolve(resolve(hostname, rrtype));
-    }
-
-    resolve4(hostname) {
-      return Promise.resolve(resolve4(hostname));
-    }
-
-    resolve6(hostname) {
-      return Promise.resolve(resolve6(hostname));
-    }
-
-    resolveAny(hostname) {
-      return Promise.resolve(resolveAny(hostname));
-    }
-
-    resolveMx(hostname) {
-      return Promise.resolve(resolveMx(hostname));
-    }
-
-    resolveTxt(hostname) {
-      return Promise.resolve(resolveTxt(hostname));
-    }
-
-    resolveSrv(hostname) {
-      return Promise.resolve(resolveSrv(hostname));
-    }
-
-    resolveCname(hostname) {
-      return Promise.resolve(resolveCname(hostname));
-    }
-
-    resolvePtr(hostname) {
-      return Promise.resolve(resolvePtr(hostname));
-    }
-
-    resolveNs(hostname) {
-      return Promise.resolve(resolveNs(hostname));
-    }
-
-    resolveSoa(hostname) {
-      return Promise.resolve(resolveSoa(hostname));
-    }
-
-    resolveNaptr(hostname) {
-      return Promise.resolve(resolveNaptr(hostname));
-    }
-
-    resolveCaa(hostname) {
-      return Promise.resolve(resolveCaa(hostname));
-    }
-
-    setServers(servers) {
-      this._servers = normalizeDnsServers(
-        'dns.promises.Resolver.setServers',
-        servers,
-      );
-    }
-  }
-
-  const promises = Object.freeze({
-    Resolver: SecureExecPromisesResolver,
-    lookup(hostname, options) {
-      return Promise.resolve(lookup(hostname, options));
-    },
-    resolve(hostname, rrtype) {
-      return Promise.resolve(resolve(hostname, rrtype));
-    },
-    resolve4(hostname) {
-      return Promise.resolve(resolve4(hostname));
-    },
-    resolve6(hostname) {
-      return Promise.resolve(resolve6(hostname));
-    },
-    resolveAny(hostname) {
-      return Promise.resolve(resolveAny(hostname));
-    },
-    resolveMx(hostname) {
-      return Promise.resolve(resolveMx(hostname));
-    },
-    resolveTxt(hostname) {
-      return Promise.resolve(resolveTxt(hostname));
-    },
-    resolveSrv(hostname) {
-      return Promise.resolve(resolveSrv(hostname));
-    },
-    resolveCname(hostname) {
-      return Promise.resolve(resolveCname(hostname));
-    },
-    resolvePtr(hostname) {
-      return Promise.resolve(resolvePtr(hostname));
-    },
-    resolveNs(hostname) {
-      return Promise.resolve(resolveNs(hostname));
-    },
-    resolveSoa(hostname) {
-      return Promise.resolve(resolveSoa(hostname));
-    },
-    resolveNaptr(hostname) {
-      return Promise.resolve(resolveNaptr(hostname));
-    },
-    resolveCaa(hostname) {
-      return Promise.resolve(resolveCaa(hostname));
-    },
-  });
-
-  const module = {
-    ADDRCONFIG: dnsConstants.ADDRCONFIG,
-    ALL: dnsConstants.ALL,
-    V4MAPPED: dnsConstants.V4MAPPED,
-    Resolver: SecureExecResolver,
-    constants: dnsConstants,
-    getDefaultResultOrder() {
-      return defaultResultOrder;
-    },
-    getServers() {
-      return [];
-    },
-    lookup,
-    lookupService() {
-      throw createUnsupportedDnsError('dns.lookupService');
-    },
-    promises,
-    resolve,
-    resolve4,
-    resolve6,
-    resolveAny,
-    resolveMx,
-    resolveTxt,
-    resolveSrv,
-    resolveCname,
-    resolvePtr,
-    resolveNs,
-    resolveSoa,
-    resolveNaptr,
-    resolveCaa,
-    reverse() {
-      throw createUnsupportedDnsError('dns.reverse');
-    },
-    setDefaultResultOrder(order) {
-      defaultResultOrder = normalizeDnsResultOrder(order);
-    },
-    setServers() {
-      throw createUnsupportedDnsError('dns.setServers');
-    },
-  };
-
-  return module;
-}
-
-const guestRequireCache = new Map();
-let rootGuestRequire = null;
-const hostFs = fs;
-const hostFsPromises = fs.promises;
-const hostFsWriteSync = fs.writeSync.bind(fs);
-const hostFsCloseSync = fs.closeSync.bind(fs);
-const guestFs = wrapFsModule(hostFs);
-globalThis.__agentOSGuestFs = guestFs;
-const guestChildProcess = createRpcBackedChildProcessModule(INITIAL_GUEST_CWD);
-const guestNet = createRpcBackedNetModule(hostNet, INITIAL_GUEST_CWD);
-const guestDgram = createRpcBackedDgramModule(hostDgram, INITIAL_GUEST_CWD);
-const guestDns = createRpcBackedDnsModule(hostDns);
-const guestTls = createRpcBackedTlsModule(hostTls, guestNet);
-const guestHttp = createRpcBackedHttpModule(hostHttp, guestNet);
-const guestHttps = createRpcBackedHttpsModule(hostHttps, guestTls);
-const guestHttp2 = createRpcBackedHttp2Module(hostHttp2, guestNet, guestTls);
-const guestGetUid = () => VIRTUAL_UID;
-const guestGetGid = () => VIRTUAL_GID;
-const guestMonotonicNow =
-  globalThis.performance && typeof globalThis.performance.now === 'function'
-    ? globalThis.performance.now.bind(globalThis.performance)
-    : Date.now;
-// Virtual OS identity is carried as the typed `__agentOSVirtualOs` structured
-// global (populated by the runtime shim from `guest_runtime`), not
-// `AGENTOS_VIRTUAL_OS_*` env vars. Absent fields are `undefined` and fall back
-// to the defaults below.
-const VIRTUAL_OS = globalThis.__agentOSVirtualOs || {};
-const VIRTUAL_OS_HOSTNAME = parseVirtualProcessString(
-  VIRTUAL_OS.hostname,
-  DEFAULT_VIRTUAL_OS_HOSTNAME,
-);
-const VIRTUAL_OS_TYPE = parseVirtualProcessString(
-  VIRTUAL_OS.type,
-  DEFAULT_VIRTUAL_OS_TYPE,
-);
-const VIRTUAL_OS_PLATFORM = parseVirtualProcessString(
-  VIRTUAL_OS.platform,
-  DEFAULT_VIRTUAL_OS_PLATFORM,
-);
-const VIRTUAL_OS_RELEASE = parseVirtualProcessString(
-  VIRTUAL_OS.release,
-  DEFAULT_VIRTUAL_OS_RELEASE,
-);
-const VIRTUAL_OS_VERSION = parseVirtualProcessString(
-  VIRTUAL_OS.version,
-  DEFAULT_VIRTUAL_OS_VERSION,
-);
-const VIRTUAL_OS_ARCH = parseVirtualProcessString(
-  VIRTUAL_OS.arch,
-  DEFAULT_VIRTUAL_OS_ARCH,
-);
-const VIRTUAL_OS_MACHINE = parseVirtualProcessString(
-  VIRTUAL_OS.machine,
-  DEFAULT_VIRTUAL_OS_MACHINE,
-);
-const VIRTUAL_OS_CPU_MODEL = parseVirtualProcessString(
-  VIRTUAL_OS.cpuModel,
-  DEFAULT_VIRTUAL_OS_CPU_MODEL,
-);
-const VIRTUAL_OS_CPU_COUNT = parsePositiveInt(
-  VIRTUAL_OS.cpuCount,
-  DEFAULT_VIRTUAL_OS_CPU_COUNT,
-);
-const VIRTUAL_OS_TOTALMEM = parsePositiveInt(
-  VIRTUAL_OS.totalmem,
-  DEFAULT_VIRTUAL_OS_TOTALMEM,
-);
-const VIRTUAL_OS_FREEMEM = Math.min(
-  parsePositiveInt(VIRTUAL_OS.freemem, DEFAULT_VIRTUAL_OS_FREEMEM),
-  VIRTUAL_OS_TOTALMEM,
-);
-const DEFAULT_VIRTUAL_PROCESS_VERSION = 'v24.0.0';
-const VIRTUAL_PROCESS_VERSION = parseVirtualProcessString(
-  HOST_PROCESS_ENV.AGENTOS_VIRTUAL_PROCESS_VERSION,
-  DEFAULT_VIRTUAL_PROCESS_VERSION,
-);
-const VIRTUAL_PROCESS_RELEASE = deepFreezeObject({
-  name: 'node',
-  lts: 'secure-exec',
-});
-const VIRTUAL_PROCESS_CONFIG = deepFreezeObject({
-  target_defaults: {},
-  variables: {
-    host_arch: VIRTUAL_OS_ARCH,
-    node_shared: false,
-    node_use_openssl: false,
-  },
-});
-const VIRTUAL_PROCESS_VERSIONS = deepFreezeObject({
-  node: VIRTUAL_PROCESS_VERSION.replace(/^v/, ''),
-  modules: '0',
-  napi: '0',
-  uv: '0.0.0',
-  zlib: '0.0.0',
-  openssl: '0.0.0',
-  v8: '0.0',
-});
-const VIRTUAL_PROCESS_START_TIME_MS = guestMonotonicNow();
-let guestProcess = process;
-
-function syncBuiltinModuleExports(hostModule, wrappedModule) {
-  if (
-    hostModule == null ||
-    wrappedModule == null ||
-    typeof hostModule !== 'object' ||
-    typeof wrappedModule !== 'object'
-  ) {
-    return;
-  }
-
-  for (const [key, value] of Object.entries(wrappedModule)) {
-    try {
-      hostModule[key] = value;
-    } catch {
-      // Ignore immutable bindings and keep the original builtin export.
-    }
-  }
-}
-
-function cloneFsModule(fsModule) {
-  if (fsModule == null || typeof fsModule !== 'object') {
-    return fsModule;
-  }
-
-  const cloned = { ...fsModule };
-  if (fsModule.promises && typeof fsModule.promises === 'object') {
-    cloned.promises = { ...fsModule.promises };
-  }
-  return cloned;
-}
-
-function resolveVirtualPath(value, fallback) {
-  if (typeof value !== 'string' || value.length === 0) {
-    return fallback;
-  }
-
-  if (path.posix.isAbsolute(value)) {
-    return path.posix.normalize(value);
-  }
-
-  return translatePathStringToGuest(value);
-}
-
-function cloneVirtualCpuInfo(cpu) {
-  return {
-    ...cpu,
-    times: { ...cpu.times },
-  };
-}
-
-function cloneVirtualNetworkInterfaces(networkInterfaces) {
-  return Object.fromEntries(
-    Object.entries(networkInterfaces).map(([name, entries]) => [
-      name,
-      entries.map((entry) => ({ ...entry })),
-    ]),
-  );
-}
-
-function encodeUserInfoValue(value, encoding) {
-  return encoding === 'buffer' ? Buffer.from(String(value)) : String(value);
-}
-
-function deepFreezeObject(value) {
-  if (
-    value == null ||
-    (typeof value !== 'object' && typeof value !== 'function') ||
-    Object.isFrozen(value)
-  ) {
-    return value;
-  }
-
-  for (const nestedValue of Object.values(value)) {
-    deepFreezeObject(nestedValue);
-  }
-
-  return Object.freeze(value);
-}
-
-function createVirtualProcessMemoryUsageSnapshot() {
-  const rss = Math.max(
-    1,
-    Math.min(
-      VIRTUAL_OS_TOTALMEM,
-      Math.max(VIRTUAL_OS_TOTALMEM - VIRTUAL_OS_FREEMEM, Math.floor(VIRTUAL_OS_TOTALMEM / 4)),
-    ),
-  );
-  const heapTotal = Math.max(1, Math.min(rss, Math.floor(rss / 2)));
-  const heapUsed = Math.max(1, Math.min(heapTotal, Math.floor(heapTotal / 2)));
-  const external = Math.max(0, Math.min(rss - heapUsed, Math.floor(rss / 8)));
-  const arrayBuffers = Math.max(0, Math.min(external, Math.floor(external / 2)));
-
-  return {
-    rss,
-    heapTotal,
-    heapUsed,
-    external,
-    arrayBuffers,
-  };
-}
-
-function createGuestMemoryUsage() {
-  const memoryUsage = () => createVirtualProcessMemoryUsageSnapshot();
-  hardenProperty(memoryUsage, 'rss', () => createVirtualProcessMemoryUsageSnapshot().rss);
-  return memoryUsage;
-}
-
-function createGuestProcessUptime() {
-  return () => Math.max(0, (guestMonotonicNow() - VIRTUAL_PROCESS_START_TIME_MS) / 1000);
-}
-
-function createGuestOsModule(osModule) {
-  const virtualHomeDir = resolveVirtualPath(
-    (globalThis.__agentOSVirtualOs||{}).homedir,
-    DEFAULT_VIRTUAL_OS_HOMEDIR,
-  );
-  const virtualTmpDir = resolveVirtualPath(
-    (globalThis.__agentOSVirtualOs||{}).tmpdir,
-    DEFAULT_VIRTUAL_OS_TMPDIR,
-  );
-  const virtualUserName = parseVirtualProcessString(
-    (globalThis.__agentOSVirtualOs||{}).user,
-    DEFAULT_VIRTUAL_OS_USER,
-  );
-  const virtualShell = resolveVirtualPath(
-    (globalThis.__agentOSVirtualOs||{}).shell,
-    DEFAULT_VIRTUAL_OS_SHELL,
-  );
-  const virtualCpuInfo = Object.freeze(
-    Array.from({ length: VIRTUAL_OS_CPU_COUNT }, () =>
-      Object.freeze({
-        model: VIRTUAL_OS_CPU_MODEL,
-        speed: 0,
-        times: Object.freeze({
-          user: 0,
-          nice: 0,
-          sys: 0,
-          idle: 0,
-          irq: 0,
-        }),
-      }),
-    ),
-  );
-  const virtualNetworkInterfaces = Object.freeze({
-    lo: Object.freeze([
-      Object.freeze({
-        address: '127.0.0.1',
-        netmask: '255.0.0.0',
-        family: 'IPv4',
-        mac: '00:00:00:00:00:00',
-        internal: true,
-        cidr: '127.0.0.1/8',
-      }),
-      Object.freeze({
-        address: '::1',
-        netmask: 'ffff:ffff:ffff:ffff:ffff:ffff:ffff:ffff',
-        family: 'IPv6',
-        mac: '00:00:00:00:00:00',
-        internal: true,
-        cidr: '::1/128',
-        scopeid: 0,
-      }),
-    ]),
-  });
-
-  return Object.assign(Object.create(osModule ?? null), {
-    arch: () => VIRTUAL_OS_ARCH,
-    availableParallelism: () => VIRTUAL_OS_CPU_COUNT,
-    cpus: () => virtualCpuInfo.map((cpu) => cloneVirtualCpuInfo(cpu)),
-    freemem: () => VIRTUAL_OS_FREEMEM,
-    getPriority: () => 0,
-    homedir: () => virtualHomeDir,
-    hostname: () => VIRTUAL_OS_HOSTNAME,
-    loadavg: () => [0, 0, 0],
-    machine: () => VIRTUAL_OS_MACHINE,
-    networkInterfaces: () => cloneVirtualNetworkInterfaces(virtualNetworkInterfaces),
-    platform: () => VIRTUAL_OS_PLATFORM,
-    release: () => VIRTUAL_OS_RELEASE,
-    setPriority: () => {
-      throw accessDenied('os.setPriority');
-    },
-    tmpdir: () => virtualTmpDir,
-    totalmem: () => VIRTUAL_OS_TOTALMEM,
-    type: () => VIRTUAL_OS_TYPE,
-    uptime: () => 0,
-    userInfo: (options = undefined) => {
-      const encoding =
-        options && typeof options === 'object' ? options.encoding : undefined;
-      return {
-        username: encodeUserInfoValue(virtualUserName, encoding),
-        uid: VIRTUAL_UID,
-        gid: VIRTUAL_GID,
-        shell: encodeUserInfoValue(virtualShell, encoding),
-        homedir: encodeUserInfoValue(virtualHomeDir, encoding),
-      };
-    },
-    version: () => VIRTUAL_OS_VERSION,
-  });
-}
-
-const guestOs = createGuestOsModule(hostOs);
-const guestMemoryUsage = createGuestMemoryUsage();
-const guestProcessUptime = createGuestProcessUptime();
-
-function isProcessSignalEventName(eventName) {
-  return typeof eventName === 'string' && SIGNAL_EVENTS.has(eventName);
-}
-
-function emitControlMessage(message) {
-  if (CONTROL_PIPE_FD == null) {
-    if (
-      message?.type === 'signal_state' &&
-      typeof process?.stdout?.write === 'function'
-    ) {
-      try {
-        process.stdout.write(`__AGENTOS_WASM_SIGNAL_STATE__:${JSON.stringify(message)}\n`);
-      } catch {
-        // Ignore signal-state bridge failures during teardown.
-      }
-    }
-    return;
-  }
-
-  try {
-    hostFsWriteSync(CONTROL_PIPE_FD, `${JSON.stringify(message)}\n`);
-  } catch {
-    // Ignore control-channel write failures during teardown.
-  }
-}
-
-function isTrackedProcessSignalEventName(eventName) {
-  return typeof eventName === 'string' && TRACKED_PROCESS_SIGNAL_EVENTS.has(eventName);
-}
-
-function signalEventsAffectedByProcessMethod(methodName, eventName) {
-  if (methodName === 'removeAllListeners' && eventName == null) {
-    return [...TRACKED_PROCESS_SIGNAL_EVENTS];
-  }
-
-  return isTrackedProcessSignalEventName(eventName) ? [eventName] : [];
-}
-
-function emitGuestProcessSignalState(eventName) {
-  if (!isTrackedProcessSignalEventName(eventName)) {
-    return;
-  }
-
-  const signal = hostOs.constants?.signals?.[eventName];
-  if (typeof signal !== 'number') {
-    return;
-  }
-
-  const listenerCount =
-    typeof process.listenerCount === 'function' ? process.listenerCount(eventName) : 0;
-  emitControlMessage({
-    type: 'signal_state',
-    signal: Number(signal) >>> 0,
-    registration: {
-      action: listenerCount > 0 ? 'user' : 'default',
-      mask: [],
-      flags: 0,
-    },
-  });
-}
-
-function createBlockedProcessSignalMethod(methodName) {
-  const target = process;
-  const method =
-    typeof target[methodName] === 'function' ? target[methodName].bind(target) : null;
-  if (!method) {
-    return null;
-  }
-
-  return (...args) => {
-    const [eventName] = args;
-    const affectedSignals = signalEventsAffectedByProcessMethod(methodName, eventName);
-    if (isProcessSignalEventName(eventName) && affectedSignals.length === 0) {
-      throw accessDenied(`process.${methodName}(${eventName})`);
-    }
-
-    const result = method(...args);
-    for (const signalName of affectedSignals) {
-      emitGuestProcessSignalState(signalName);
-    }
-    return result === target ? guestProcess : result;
-  };
-}
-
-function createGuestProcessProxy(target) {
-  let proxy = null;
-  proxy = new Proxy(target, {
-    get(source, key) {
-      return Reflect.get(source, key, proxy);
-    },
-  });
-  return proxy;
-}
-
-function normalizeGuestRequireDir(fromGuestDir) {
-  if (typeof fromGuestDir !== 'string' || fromGuestDir.length === 0) {
-    return INITIAL_GUEST_CWD;
-  }
-
-  if (fromGuestDir.startsWith('file:')) {
-    try {
-      return path.posix.normalize(new URL(fromGuestDir).pathname);
-    } catch {
-      return INITIAL_GUEST_CWD;
-    }
-  }
-
-  if (path.posix.isAbsolute(fromGuestDir)) {
-    return path.posix.normalize(fromGuestDir);
-  }
-
-  return path.posix.normalize(path.posix.join(INITIAL_GUEST_CWD, fromGuestDir));
-}
-
-function isPathWithinRoot(candidatePath, rootPath) {
-  if (typeof candidatePath !== 'string' || typeof rootPath !== 'string') {
-    return false;
-  }
-
-  const normalizedCandidate = path.resolve(candidatePath);
-  const normalizedRoot = path.resolve(rootPath);
-  return (
-    normalizedCandidate === normalizedRoot ||
-    normalizedCandidate.startsWith(`${normalizedRoot}${path.sep}`)
-  );
-}
-
-function runtimeHostPathFromGuestPath(guestPath) {
-  if (typeof guestPath !== 'string') {
-    return null;
-  }
-
-  const translated = hostPathFromGuestPath(guestPath);
-  if (translated) {
-    return translated;
-  }
-
-  const cwdGuestPath = guestPathFromHostPath(HOST_CWD);
-  if (
-    typeof cwdGuestPath !== 'string' ||
-    !path.posix.isAbsolute(guestPath) ||
-    !path.posix.isAbsolute(cwdGuestPath)
-  ) {
-    return null;
-  }
-
-  const relative = path.posix.relative(cwdGuestPath, path.posix.normalize(guestPath));
-  if (
-    relative.startsWith('..') ||
-    relative === '..' ||
-    path.posix.isAbsolute(relative)
-  ) {
-    return null;
-  }
-
-  return relative ? path.join(HOST_CWD, ...relative.split('/')) : HOST_CWD;
-}
-
-function translateModuleResolutionPath(value) {
-  if (typeof value !== 'string') {
-    return value;
-  }
-
-  if (value.startsWith('file:')) {
-    try {
-      const guestPath = path.posix.normalize(new URL(value).pathname);
-      const hostPath = runtimeHostPathFromGuestPath(guestPath);
-      return hostPath ? pathToFileURL(hostPath).href : value;
-    } catch {
-      return value;
-    }
-  }
-
-  if (path.posix.isAbsolute(value)) {
-    return runtimeHostPathFromGuestPath(value) ?? value;
-  }
-
-  return value;
-}
-
-function translateModuleResolutionParent(parent) {
-  if (!parent || typeof parent !== 'object') {
-    return parent;
-  }
-
-  let nextParent = parent;
-  let changed = false;
-
-  if (typeof parent.filename === 'string') {
-    const translatedFilename = translateModuleResolutionPath(parent.filename);
-    if (translatedFilename !== parent.filename) {
-      nextParent = { ...nextParent, filename: translatedFilename };
-      changed = true;
-    }
-  }
-
-  if (Array.isArray(parent.paths)) {
-    const translatedPaths = parent.paths.map((entry) =>
-      translateModuleResolutionPath(entry),
-    );
-    if (translatedPaths.some((entry, index) => entry !== parent.paths[index])) {
-      nextParent = { ...nextParent, paths: translatedPaths };
-      changed = true;
-    }
-  }
-
-  return changed ? nextParent : parent;
-}
-
-function translateModuleResolutionOptions(options) {
-  if (Array.isArray(options)) {
-    return options.map((entry) => translateModuleResolutionPath(entry));
-  }
-
-  if (!options || typeof options !== 'object' || !Array.isArray(options.paths)) {
-    return options;
-  }
-
-  const translatedPaths = options.paths.map((entry) =>
-    translateModuleResolutionPath(entry),
-  );
-  if (translatedPaths.every((entry, index) => entry === options.paths[index])) {
-    return options;
-  }
-
-  return {
-    ...options,
-    paths: translatedPaths,
-  };
-}
-
-function ensureGuestVisibleModuleResolution(specifier, resolved, parent) {
-  if (typeof resolved !== 'string' || !path.isAbsolute(resolved)) {
-    return resolved;
-  }
-
-  if (
-    guestVisiblePathFromHostPath(resolved) ||
-    isPathWithinRoot(resolved, HOST_CWD)
-  ) {
-    return resolved;
-  }
-
-  const error = new Error(`Cannot find module '${specifier}'`);
-  error.code = 'MODULE_NOT_FOUND';
-  if (typeof parent?.filename === 'string') {
-    error.requireStack = [translatePathStringToGuest(parent.filename)];
-  }
-  throw translateErrorToGuest(error);
-}
-
-function createGuestModuleCacheProxy(moduleCache) {
-  if (!moduleCache || typeof moduleCache !== 'object') {
-    return moduleCache;
-  }
-
-  const toHostKey = (key) =>
-    typeof key === 'string' ? translateModuleResolutionPath(key) : key;
-  const toGuestKey = (key) =>
-    typeof key === 'string' ? translatePathStringToGuest(key) : key;
-
-  return new Proxy(moduleCache, {
-    defineProperty(target, key, descriptor) {
-      return Reflect.defineProperty(target, toHostKey(key), descriptor);
-    },
-    deleteProperty(target, key) {
-      return Reflect.deleteProperty(target, toHostKey(key));
-    },
-    get(target, key, receiver) {
-      return Reflect.get(target, toHostKey(key), receiver);
-    },
-    getOwnPropertyDescriptor(target, key) {
-      const descriptor = Reflect.getOwnPropertyDescriptor(target, toHostKey(key));
-      if (!descriptor) {
-        return descriptor;
-      }
-      return {
-        ...descriptor,
-        configurable: true,
-      };
-    },
-    has(target, key) {
-      return Reflect.has(target, toHostKey(key));
-    },
-    ownKeys(target) {
-      return Reflect.ownKeys(target).map((key) => toGuestKey(key));
-    },
-    set(target, key, value, receiver) {
-      return Reflect.set(target, toHostKey(key), value, receiver);
-    },
-  });
-}
-
-const guestModuleCache = createGuestModuleCacheProxy(originalModuleCache);
-
-function createGuestRequire(fromGuestDir) {
-  const normalizedGuestDir = normalizeGuestRequireDir(fromGuestDir);
-  const cached = guestRequireCache.get(normalizedGuestDir);
-  if (cached) {
-    return cached;
-  }
-
-  const baseRequire = Module.createRequire(
-    pathToFileURL(path.posix.join(normalizedGuestDir, '__agentos_require__.cjs')),
-  );
-
-  const guestRequire = function(specifier) {
-    const translated = hostPathForSpecifier(specifier, normalizedGuestDir);
-    try {
-      if (translated) {
-        return baseRequire(translated);
-      }
-
-      return baseRequire(specifier);
-    } catch (error) {
-      if (rootGuestRequire && rootGuestRequire !== guestRequire && isBareSpecifier(specifier)) {
-        return rootGuestRequire(specifier);
-      }
-      throw translateErrorToGuest(error);
-    }
-  };
-
-  guestRequire.resolve = (specifier, options) => {
-    const translated = hostPathForSpecifier(specifier, normalizedGuestDir);
-    try {
-      if (translated) {
-        return translatePathStringToGuest(baseRequire.resolve(translated, options));
-      }
-
-      return translatePathStringToGuest(baseRequire.resolve(specifier, options));
-    } catch (error) {
-      if (rootGuestRequire && rootGuestRequire !== guestRequire && isBareSpecifier(specifier)) {
-        return rootGuestRequire.resolve(specifier, options);
-      }
-      throw translateErrorToGuest(error);
-    }
-  };
-
-  guestRequire.cache = guestModuleCache;
-
-  guestRequireCache.set(normalizedGuestDir, guestRequire);
-  return guestRequire;
-}
-
-function hardenProperty(target, key, value) {
-  try {
-    Object.defineProperty(target, key, {
-      value,
-      writable: false,
-      configurable: false,
-    });
-  } catch (error) {
-    throw new Error(`Failed to harden property ${String(key)}`, { cause: error });
-  }
-}
-
-function encodeSyncRpcValue(value) {
-  if (value == null || typeof value === 'string' || typeof value === 'number' || typeof value === 'boolean') {
-    return value;
-  }
-
-  if (typeof Buffer === 'function' && Buffer.isBuffer(value)) {
-    return {
-      __agentOSType: 'bytes',
-      base64: value.toString('base64'),
-    };
-  }
-
-  if (ArrayBuffer.isView(value)) {
-    return {
-      __agentOSType: 'bytes',
-      base64: Buffer.from(value.buffer, value.byteOffset, value.byteLength).toString('base64'),
-    };
-  }
-
-  if (value instanceof ArrayBuffer) {
-    return {
-      __agentOSType: 'bytes',
-      base64: Buffer.from(value).toString('base64'),
-    };
-  }
-
-  if (Array.isArray(value)) {
-    return value.map((entry) => encodeSyncRpcValue(entry));
-  }
-
-  if (typeof value === 'object') {
-    return Object.fromEntries(
-      Object.entries(value).map(([key, entry]) => [key, encodeSyncRpcValue(entry)]),
-    );
-  }
-
-  return String(value);
-}
-
-function decodeSyncRpcValue(value) {
-  if (Array.isArray(value)) {
-    return value.map((entry) => decodeSyncRpcValue(entry));
-  }
-
-  if (Buffer.isBuffer(value)) {
-    return value;
-  }
-
-  if (ArrayBuffer.isView(value)) {
-    return Buffer.from(value.buffer, value.byteOffset, value.byteLength);
-  }
-
-  if (value && typeof value === 'object') {
-    if (value.__type === 'Buffer' && typeof value.data === 'string') {
-      return Buffer.from(value.data, 'base64');
-    }
-
-    if (value.__agentOSType === 'bytes' && typeof value.base64 === 'string') {
-      return Buffer.from(value.base64, 'base64');
-    }
-
-    return Object.fromEntries(
-      Object.entries(value).map(([key, entry]) => [key, decodeSyncRpcValue(entry)]),
-    );
-  }
-
-  return value;
-}
-
-function formatSyncRpcError(error) {
-  if (error instanceof Error) {
-    return {
-      message: error.message,
-      code: typeof error.code === 'string' ? error.code : undefined,
-    };
-  }
-
-  return {
-    message: String(error),
-  };
-}
-
-function createNodeSyncRpcBridge() {
-  if (!NODE_SYNC_RPC_ENABLE) {
-    return null;
-  }
-
-  if (NODE_SYNC_RPC_REQUEST_FD == null || NODE_SYNC_RPC_RESPONSE_FD == null) {
-    throw new Error('secure-exec Node sync RPC requires request and response file descriptors');
-  }
-
-  const Worker = hostWorkerThreads?.Worker;
-  if (typeof Worker !== 'function') {
-    throw new Error('secure-exec Node sync RPC requires node:worker_threads support');
-  }
-
-  const STATE_INDEX = 0;
-  const STATUS_INDEX = 1;
-  const KIND_INDEX = 2;
-  const REQUEST_LENGTH_INDEX = 3;
-  const RESPONSE_LENGTH_INDEX = 4;
-  const STATE_IDLE = 0;
-  const STATE_REQUEST_READY = 1;
-  const STATE_RESPONSE_READY = 2;
-  const STATE_SHUTDOWN = 3;
-  const STATUS_OK = 0;
-  const STATUS_ERROR = 1;
-  const KIND_JSON = 3;
-  const signalBuffer = new SharedArrayBuffer(5 * Int32Array.BYTES_PER_ELEMENT);
-  const dataBuffer = new SharedArrayBuffer(NODE_SYNC_RPC_DATA_BYTES);
-  const signal = new Int32Array(signalBuffer);
-  const data = new Uint8Array(dataBuffer);
-  const encoder = new TextEncoder();
-  const decoder = new TextDecoder();
-  let nextRequestId = 1;
-  let disposed = false;
-
-  const workerSource = `
-    const { parentPort, workerData } = require('node:worker_threads');
-    const { readSync, writeSync, closeSync } = require('node:fs');
-    const STATE_INDEX = 0;
-    const STATUS_INDEX = 1;
-    const KIND_INDEX = 2;
-    const REQUEST_LENGTH_INDEX = 3;
-    const RESPONSE_LENGTH_INDEX = 4;
-    const STATE_IDLE = 0;
-    const STATE_REQUEST_READY = 1;
-    const STATE_RESPONSE_READY = 2;
-    const STATE_SHUTDOWN = 3;
-    const STATUS_OK = 0;
-    const STATUS_ERROR = 1;
-    const KIND_JSON = 3;
-    const signal = new Int32Array(workerData.signalBuffer);
-    const data = new Uint8Array(workerData.dataBuffer);
-    const responseFd = workerData.responseFd;
-    const encoder = new TextEncoder();
-    const decoder = new TextDecoder();
-    let responseBuffer = '';
-
-    function setResponse(status, bytes) {
-      let payload = bytes;
-      let nextStatus = status;
-      if (payload.byteLength > data.byteLength) {
-        payload = encoder.encode(JSON.stringify({
-          message: 'secure-exec Node sync RPC payload exceeded shared buffer capacity',
-          code: 'ERR_AGENTOS_NODE_SYNC_RPC_PAYLOAD_TOO_LARGE',
-        }));
-        nextStatus = STATUS_ERROR;
-      }
-
-      data.fill(0);
-      data.set(payload, 0);
-      Atomics.store(signal, STATUS_INDEX, nextStatus);
-      Atomics.store(signal, KIND_INDEX, KIND_JSON);
-      Atomics.store(signal, RESPONSE_LENGTH_INDEX, payload.byteLength);
-      Atomics.store(signal, STATE_INDEX, STATE_RESPONSE_READY);
-      Atomics.notify(signal, STATE_INDEX, 1);
-    }
-
-    function readResponseLineSync() {
-      while (true) {
-        const newlineIndex = responseBuffer.indexOf('\\n');
-        if (newlineIndex >= 0) {
-          const line = responseBuffer.slice(0, newlineIndex);
-          responseBuffer = responseBuffer.slice(newlineIndex + 1);
-          return line;
-        }
-
-        const chunk = Buffer.alloc(4096);
-        const bytesRead = readSync(responseFd, chunk, 0, chunk.length, null);
-        if (bytesRead === 0) {
-          throw new Error('secure-exec Node sync RPC response channel closed unexpectedly');
-        }
-        responseBuffer += chunk.subarray(0, bytesRead).toString('utf8');
-      }
-    }
-
-    function waitForRequest() {
-      while (true) {
-        const state = Atomics.load(signal, STATE_INDEX);
-        if (state === STATE_REQUEST_READY || state === STATE_SHUTDOWN) {
-          return state;
-        }
-
-        Atomics.wait(signal, STATE_INDEX, state);
-      }
-    }
-
-    try {
-      while (true) {
-        const state = waitForRequest();
-        if (state === STATE_SHUTDOWN) {
-          break;
-        }
-
-        try {
-          const responseLine = readResponseLineSync();
-          setResponse(STATUS_OK, encoder.encode(responseLine));
-        } catch (error) {
-          setResponse(
-            STATUS_ERROR,
-            encoder.encode(JSON.stringify({
-              message: error instanceof Error ? error.message : String(error),
-              code: typeof error?.code === 'string' ? error.code : 'ERR_AGENTOS_NODE_SYNC_RPC',
-            })),
-          );
-        }
-      }
-    } finally {
-      try {
-        closeSync(responseFd);
-      } catch {}
-    }
-  `;
-
-  const worker = new Worker(workerSource, {
-    eval: true,
-    workerData: {
-      signalBuffer,
-      dataBuffer,
-      responseFd: NODE_SYNC_RPC_RESPONSE_FD,
-    },
-  });
-  worker.unref?.();
-
-  const readBytes = (length) => {
-    if (length <= 0) {
-      return new Uint8Array(0);
-    }
-    return data.slice(0, length);
-  };
-
-  const resetSignal = () => {
-    Atomics.store(signal, STATUS_INDEX, STATUS_OK);
-    Atomics.store(signal, KIND_INDEX, KIND_JSON);
-    Atomics.store(signal, REQUEST_LENGTH_INDEX, 0);
-    Atomics.store(signal, RESPONSE_LENGTH_INDEX, 0);
-    Atomics.store(signal, STATE_INDEX, STATE_IDLE);
-    Atomics.notify(signal, STATE_INDEX, 1);
-  };
-
-  const requestRaw = (method, args = []) => {
-    if (disposed) {
-      throw new Error('secure-exec Node sync RPC bridge is already disposed');
-    }
-
-    const payload = encoder.encode(
-      JSON.stringify({
-        id: nextRequestId++,
-        method,
-        args: encodeSyncRpcValue(args),
-      }),
-    );
-    if (payload.byteLength > data.byteLength) {
-      const error = new Error('secure-exec Node sync RPC request exceeded shared buffer capacity');
-      error.code = 'ERR_AGENTOS_NODE_SYNC_RPC_PAYLOAD_TOO_LARGE';
-      throw error;
-    }
-
-    data.fill(0);
-    data.set(payload, 0);
-    hostFsWriteSync(
-      NODE_SYNC_RPC_REQUEST_FD,
-      `${decoder.decode(data.subarray(0, payload.byteLength))}\n`,
-    );
-    Atomics.store(signal, STATUS_INDEX, STATUS_OK);
-    Atomics.store(signal, KIND_INDEX, KIND_JSON);
-    Atomics.store(signal, REQUEST_LENGTH_INDEX, payload.byteLength);
-    Atomics.store(signal, RESPONSE_LENGTH_INDEX, 0);
-    Atomics.store(signal, STATE_INDEX, STATE_REQUEST_READY);
-    Atomics.notify(signal, STATE_INDEX, 1);
-
-    while (true) {
-      const result = Atomics.wait(
-        signal,
-        STATE_INDEX,
-        STATE_REQUEST_READY,
-        NODE_SYNC_RPC_WAIT_TIMEOUT_MS,
-      );
-      if (result !== 'timed-out') {
-        break;
-      }
-      throw new Error(`secure-exec Node sync RPC timed out while handling ${method}`);
-    }
-
-    const status = Atomics.load(signal, STATUS_INDEX);
-    const kind = Atomics.load(signal, KIND_INDEX);
-    const length = Atomics.load(signal, RESPONSE_LENGTH_INDEX);
-    const bytes = readBytes(length);
-    resetSignal();
-
-    if (kind !== KIND_JSON) {
-      throw new Error(`secure-exec Node sync RPC returned unsupported payload kind ${kind}`);
-    }
-
-    if (status === STATUS_ERROR) {
-      const payload = JSON.parse(decoder.decode(bytes));
-      const error = new Error(payload?.message || `secure-exec Node sync RPC ${method} failed`);
-      if (typeof payload?.code === 'string') {
-        error.code = payload.code;
-      }
-      throw error;
-    }
-
-    return JSON.parse(decoder.decode(bytes));
-  };
-
-  return {
-    callSync(method, args = []) {
-      const response = requestRaw(method, args);
-      if (response?.ok) {
-        return decodeSyncRpcValue(response.result);
-      }
-
-      const error = new Error(
-        response?.error?.message || `secure-exec Node sync RPC ${method} failed`,
-      );
-      if (typeof response?.error?.code === 'string') {
-        error.code = response.error.code;
-      }
-      throw error;
-    },
-    async call(method, args = []) {
-      return this.callSync(method, args);
-    },
-    dispose() {
-      if (disposed) {
-        return;
-      }
-      disposed = true;
-      Atomics.store(signal, STATE_INDEX, STATE_SHUTDOWN);
-      Atomics.notify(signal, STATE_INDEX, 1);
-      try {
-        hostFsCloseSync(NODE_SYNC_RPC_REQUEST_FD);
-      } catch {}
-      worker.terminate().catch(() => {});
-    },
-  };
-}
-
-function installGuestHardening() {
-  hardenProperty(process, 'env', createGuestProcessEnv(HOST_PROCESS_ENV));
-  hardenProperty(process, 'cwd', () => INITIAL_GUEST_CWD);
-  hardenProperty(process, 'chdir', () => {
-    throw accessDenied('process.chdir');
-  });
-  syncBuiltinModuleExports(hostFs, guestFs);
-  syncBuiltinModuleExports(hostFsPromises, guestFs.promises);
-  if (ALLOWED_BUILTINS.has('os')) {
-    syncBuiltinModuleExports(hostOs, guestOs);
-  }
-  if (ALLOWED_BUILTINS.has('net')) {
-    syncBuiltinModuleExports(hostNet, guestNet);
-  }
-  if (ALLOWED_BUILTINS.has('dgram')) {
-    syncBuiltinModuleExports(hostDgram, guestDgram);
-  }
-  if (ALLOWED_BUILTINS.has('dns')) {
-    syncBuiltinModuleExports(hostDns, guestDns);
-    syncBuiltinModuleExports(hostDnsPromises, guestDns.promises);
-  }
-  if (ALLOWED_BUILTINS.has('http')) {
-    syncBuiltinModuleExports(hostHttp, guestHttp);
-  }
-  if (ALLOWED_BUILTINS.has('http2')) {
-    syncBuiltinModuleExports(hostHttp2, guestHttp2);
-  }
-  if (ALLOWED_BUILTINS.has('https')) {
-    syncBuiltinModuleExports(hostHttps, guestHttps);
-  }
-  if (ALLOWED_BUILTINS.has('tls')) {
-    syncBuiltinModuleExports(hostTls, guestTls);
-  }
-  try {
-    syncBuiltinESMExports();
-  } catch {
-    // Ignore runtimes that reject syncing builtin ESM exports.
-  }
-
-  hardenProperty(process, 'execPath', VIRTUAL_EXEC_PATH);
-  hardenProperty(process, 'pid', VIRTUAL_PID);
-  hardenProperty(process, 'ppid', VIRTUAL_PPID);
-  hardenProperty(process, 'version', VIRTUAL_PROCESS_VERSION);
-  hardenProperty(process, 'versions', VIRTUAL_PROCESS_VERSIONS);
-  hardenProperty(process, 'release', VIRTUAL_PROCESS_RELEASE);
-  hardenProperty(process, 'config', VIRTUAL_PROCESS_CONFIG);
-  hardenProperty(process, 'platform', VIRTUAL_OS_PLATFORM);
-  hardenProperty(process, 'arch', VIRTUAL_OS_ARCH);
-  hardenProperty(process, 'memoryUsage', guestMemoryUsage);
-  hardenProperty(process, 'uptime', guestProcessUptime);
-  hardenProperty(process, 'getuid', guestGetUid);
-  hardenProperty(process, 'getgid', guestGetGid);
-  hardenProperty(process, 'umask', guestProcessUmask);
-
-  if (!ALLOW_PROCESS_BINDINGS) {
-    hardenProperty(process, 'binding', () => {
-      throw accessDenied('process.binding');
-    });
-    hardenProperty(process, '_linkedBinding', () => {
-      throw accessDenied('process._linkedBinding');
-    });
-    hardenProperty(process, 'dlopen', () => {
-      throw accessDenied('process.dlopen');
-    });
-  }
-  for (const methodName of [
-    'addListener',
-    'on',
-    'once',
-    'removeAllListeners',
-    'removeListener',
-    'off',
-    'prependListener',
-    'prependOnceListener',
-  ]) {
-    const blockedMethod = createBlockedProcessSignalMethod(methodName);
-    if (blockedMethod) {
-      hardenProperty(process, methodName, blockedMethod);
-    }
-  }
-  if (Module?._extensions && typeof Module._extensions === 'object') {
-    hardenProperty(Module._extensions, '.node', () => {
-      throw accessDenied('native addon loading');
-    });
-  }
-  if (originalGetBuiltinModule) {
-    hardenProperty(process, 'getBuiltinModule', (specifier) => {
-      const normalized =
-        typeof specifier === 'string' ? normalizeBuiltin(specifier) : null;
-      if (normalized === 'process') {
-        return guestProcess;
-      }
-      if (normalized === 'fs') {
-        return cloneFsModule(guestFs);
-      }
-      if (normalized === 'os' && ALLOWED_BUILTINS.has('os')) {
-        return guestOs;
-      }
-      if (normalized === 'net' && ALLOWED_BUILTINS.has('net')) {
-        return guestNet;
-      }
-      if (normalized === 'dgram' && ALLOWED_BUILTINS.has('dgram')) {
-        return guestDgram;
-      }
-      if (normalized === 'dns' && ALLOWED_BUILTINS.has('dns')) {
-        return guestDns;
-      }
-      if (normalized === 'dns/promises' && ALLOWED_BUILTINS.has('dns')) {
-        return guestDns.promises;
-      }
-      if (normalized === 'http' && ALLOWED_BUILTINS.has('http')) {
-        return guestHttp;
-      }
-      if (normalized === 'http2' && ALLOWED_BUILTINS.has('http2')) {
-        return guestHttp2;
-      }
-      if (normalized === 'https' && ALLOWED_BUILTINS.has('https')) {
-        return guestHttps;
-      }
-      if (normalized === 'tls' && ALLOWED_BUILTINS.has('tls')) {
-        return guestTls;
-      }
-      if (normalized === 'child_process' && ALLOWED_BUILTINS.has('child_process')) {
-        return guestChildProcess;
-      }
-      if (normalized && DENIED_BUILTINS.has(normalized)) {
-        throw accessDenied(`node:${normalized}`);
-      }
-      return originalGetBuiltinModule(specifier);
-    });
-  }
-
-  if (originalModuleLoad) {
-    Module._load = function(request, parent, isMain) {
-      const normalized =
-        typeof request === 'string' ? normalizeBuiltin(request) : null;
-      if (normalized === 'process') {
-        return guestProcess;
-      }
-      if (normalized === 'fs') {
-        return cloneFsModule(guestFs);
-      }
-      if (normalized === 'os' && ALLOWED_BUILTINS.has('os')) {
-        return guestOs;
-      }
-      if (normalized === 'net' && ALLOWED_BUILTINS.has('net')) {
-        return guestNet;
-      }
-      if (normalized === 'dgram' && ALLOWED_BUILTINS.has('dgram')) {
-        return guestDgram;
-      }
-      if (normalized === 'dns' && ALLOWED_BUILTINS.has('dns')) {
-        return guestDns;
-      }
-      if (normalized === 'dns/promises' && ALLOWED_BUILTINS.has('dns')) {
-        return guestDns.promises;
-      }
-      if (normalized === 'http' && ALLOWED_BUILTINS.has('http')) {
-        return guestHttp;
-      }
-      if (normalized === 'http2' && ALLOWED_BUILTINS.has('http2')) {
-        return guestHttp2;
-      }
-      if (normalized === 'https' && ALLOWED_BUILTINS.has('https')) {
-        return guestHttps;
-      }
-      if (normalized === 'tls' && ALLOWED_BUILTINS.has('tls')) {
-        return guestTls;
-      }
-      if (normalized === 'child_process' && ALLOWED_BUILTINS.has('child_process')) {
-        return guestChildProcess;
-      }
-      if (normalized && DENIED_BUILTINS.has(normalized)) {
-        throw accessDenied(`node:${normalized}`);
-      }
-
-      return originalModuleLoad(request, parent, isMain);
-    };
-  }
-
-  if (originalModuleResolveFilename) {
-    Module._resolveFilename = function(request, parent, isMain, options) {
-      const translatedRequest = translateModuleResolutionPath(request);
-      const translatedParent = translateModuleResolutionParent(parent);
-      const translatedOptions = translateModuleResolutionOptions(options);
-      const resolved = originalModuleResolveFilename(
-        translatedRequest,
-        translatedParent,
-        isMain,
-        translatedOptions,
-      );
-      return ensureGuestVisibleModuleResolution(
-        request,
-        resolved,
-        translatedParent,
-      );
-    };
-  }
-
-  if (guestModuleCache) {
-    hardenProperty(Module, '_cache', guestModuleCache);
-  }
-
-  if (originalFetch) {
-    const restrictedFetch = async (resource, init) => {
-      const candidate =
-        typeof resource === 'string'
-          ? resource
-          : resource instanceof URL
-            ? resource.href
-            : resource?.url;
-
-      let url;
-      try {
-        url = new URL(String(candidate ?? ''));
-      } catch {
-        throw accessDenied('network access');
-      }
-
-      if (url.protocol !== 'data:') {
-        const normalizedPort =
-          url.port || (url.protocol === 'https:' ? '443' : url.protocol === 'http:' ? '80' : '');
-        const loopbackHost =
-          url.hostname === '127.0.0.1' ||
-          url.hostname === 'localhost' ||
-          url.hostname === '::1' ||
-          url.hostname === '[::1]';
-        const loopbackAllowed =
-          loopbackHost &&
-          (url.protocol === 'http:' || url.protocol === 'https:') &&
-          LOOPBACK_EXEMPT_PORTS.has(normalizedPort);
-
-        if (!loopbackAllowed) {
-          throw accessDenied(`network access to ${url.protocol}`);
-        }
-      }
-
-      return originalFetch(resource, init);
-    };
-
-    hardenProperty(globalThis, 'fetch', restrictedFetch);
-  }
-}
-
-const entrypoint = HOST_PROCESS_ENV.AGENTOS_ENTRYPOINT;
-if (!entrypoint) {
-  throw new Error('AGENTOS_ENTRYPOINT is required');
-}
-
-const guestSyncRpc = createNodeSyncRpcBridge();
-installGuestHardening();
-rootGuestRequire = createGuestRequire('/root/node_modules');
-if (ALLOWED_BUILTINS.has('child_process')) {
-  hardenProperty(globalThis, '__agentOSBuiltinChildProcess', guestChildProcess);
-}
-hardenProperty(globalThis, '__agentOSBuiltinFs', guestFs);
-if (ALLOWED_BUILTINS.has('net')) {
-  hardenProperty(globalThis, '__agentOSBuiltinNet', guestNet);
-}
-if (ALLOWED_BUILTINS.has('dgram')) {
-  hardenProperty(globalThis, '__agentOSBuiltinDgram', guestDgram);
-}
-if (ALLOWED_BUILTINS.has('dns')) {
-  hardenProperty(globalThis, '__agentOSBuiltinDns', guestDns);
-}
-if (ALLOWED_BUILTINS.has('http')) {
-  hardenProperty(globalThis, '__agentOSBuiltinHttp', guestHttp);
-}
-if (ALLOWED_BUILTINS.has('http2')) {
-  hardenProperty(globalThis, '__agentOSBuiltinHttp2', guestHttp2);
-}
-if (ALLOWED_BUILTINS.has('https')) {
-  hardenProperty(globalThis, '__agentOSBuiltinHttps', guestHttps);
-}
-if (ALLOWED_BUILTINS.has('tls')) {
-  hardenProperty(globalThis, '__agentOSBuiltinTls', guestTls);
-}
-if (ALLOWED_BUILTINS.has('os')) {
-  hardenProperty(globalThis, '__agentOSBuiltinOs', guestOs);
-}
-if (guestSyncRpc) {
-  hardenProperty(globalThis, '__agentOSSyncRpc', guestSyncRpc);
-}
-hardenProperty(globalThis, '_requireFrom', (specifier, fromDir = '/') =>
-  createGuestRequire(fromDir)(specifier),
-);
-hardenProperty(
-  globalThis,
-  'require',
-  createGuestRequire(path.posix.dirname(guestEntryPoint ?? entrypoint)),
-);
-
-if (HOST_PROCESS_ENV.SECURE_EXEC_KEEP_STDIN_OPEN === '1') {
-  let stdinKeepalive = setInterval(() => {}, 1_000_000);
-  const releaseStdinKeepalive = () => {
-    if (stdinKeepalive !== null) {
-      clearInterval(stdinKeepalive);
-      stdinKeepalive = null;
-    }
-  };
-
-  process.stdin.resume();
-  process.stdin.once('end', releaseStdinKeepalive);
-  process.stdin.once('close', releaseStdinKeepalive);
-  process.stdin.once('error', releaseStdinKeepalive);
-}
-
-const guestArgv = JSON.parse(HOST_PROCESS_ENV.AGENTOS_GUEST_ARGV ?? '[]');
-const bootstrapModule = HOST_PROCESS_ENV.AGENTOS_BOOTSTRAP_MODULE;
-const entrypointPath = isPathLike(entrypoint)
-  ? path.resolve(process.cwd(), entrypoint)
-  : entrypoint;
-
-process.argv = [VIRTUAL_EXEC_PATH, guestEntryPoint ?? entrypointPath, ...guestArgv];
-guestProcess = createGuestProcessProxy(process);
-hardenProperty(globalThis, 'process', guestProcess);
-
-try {
-  if (bootstrapModule) {
-    await import(toImportSpecifier(bootstrapModule));
-  }
-
-  await import(toImportSpecifier(entrypoint));
-} catch (error) {
-  throw translateErrorToGuest(error);
-} finally {
-  guestSyncRpc?.dispose?.();
-}
-"#;
-
-const NODE_TIMING_BOOTSTRAP_SOURCE: &str = r#"
-const frozenTimeValue = Number(process.env.AGENTOS_FROZEN_TIME_MS);
-const frozenTimeMs = Number.isFinite(frozenTimeValue) ? Math.trunc(frozenTimeValue) : Date.now();
-const frozenDateNow = () => frozenTimeMs;
-const OriginalDate = Date;
-
-function FrozenDate(...args) {
-  if (new.target) {
-    if (args.length === 0) {
-      return new OriginalDate(frozenTimeMs);
-    }
-    return new OriginalDate(...args);
-  }
-  return new OriginalDate(frozenTimeMs).toString();
-}
-
-Object.setPrototypeOf(FrozenDate, OriginalDate);
-Object.defineProperty(FrozenDate, 'prototype', {
-  value: OriginalDate.prototype,
-  writable: false,
-  configurable: false,
-});
-FrozenDate.parse = OriginalDate.parse;
-FrozenDate.UTC = OriginalDate.UTC;
-Object.defineProperty(FrozenDate, 'now', {
-  value: frozenDateNow,
-  writable: false,
-  configurable: false,
-});
-
-try {
-  Object.defineProperty(globalThis, 'Date', {
-    value: FrozenDate,
-    writable: false,
-    configurable: false,
-  });
-} catch {
-  globalThis.Date = FrozenDate;
-}
-
-const originalPerformance = globalThis.performance;
-const frozenPerformance = Object.create(null);
-if (typeof originalPerformance !== 'undefined' && originalPerformance !== null) {
-  const performanceSource =
-    Object.getPrototypeOf(originalPerformance) ?? originalPerformance;
-  for (const key of Object.getOwnPropertyNames(performanceSource)) {
-    if (key === 'now') {
-      continue;
-    }
-    try {
-      const value = originalPerformance[key];
-      frozenPerformance[key] =
-        typeof value === 'function' ? value.bind(originalPerformance) : value;
-    } catch {
-      // Ignore properties that throw during access.
-    }
-  }
-}
-Object.defineProperty(frozenPerformance, 'now', {
-  value: () => 0,
-  writable: false,
-  configurable: false,
-});
-Object.freeze(frozenPerformance);
-
-try {
-  Object.defineProperty(globalThis, 'performance', {
-    value: frozenPerformance,
-    writable: false,
-    configurable: false,
-  });
-} catch {
-  globalThis.performance = frozenPerformance;
-}
-
-const frozenHrtimeBigint = BigInt(frozenTimeMs) * 1000000n;
-const frozenHrtime = (previous) => {
-  const seconds = Math.trunc(frozenTimeMs / 1000);
-  const nanoseconds = Math.trunc((frozenTimeMs % 1000) * 1000000);
-
-  if (!Array.isArray(previous) || previous.length < 2) {
-    return [seconds, nanoseconds];
-  }
-
-  let deltaSeconds = seconds - Number(previous[0]);
-  let deltaNanoseconds = nanoseconds - Number(previous[1]);
-  if (deltaNanoseconds < 0) {
-    deltaSeconds -= 1;
-    deltaNanoseconds += 1000000000;
-  }
-  return [deltaSeconds, deltaNanoseconds];
-};
-frozenHrtime.bigint = () => frozenHrtimeBigint;
-
-try {
-  process.hrtime = frozenHrtime;
-} catch {
-  // Ignore runtimes that expose a non-writable process.hrtime binding.
-}
-"#;
-
-const NODE_PREWARM_SOURCE: &str = r#"
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-
-function isPathLike(specifier) {
-  return specifier.startsWith('.') || specifier.startsWith('/') || specifier.startsWith('file:');
-}
-
-function toImportSpecifier(specifier) {
-  if (specifier.startsWith('file:')) {
-    return specifier;
-  }
-  if (isPathLike(specifier)) {
-    return pathToFileURL(path.resolve(process.cwd(), specifier)).href;
-  }
-  return specifier;
-}
-
-const imports = JSON.parse(process.env.AGENTOS_NODE_PREWARM_IMPORTS ?? '[]');
-for (const specifier of imports) {
-  await import(toImportSpecifier(specifier));
-}
-"#;
-
-const NODE_WASM_RUNNER_SOURCE: &str = include_str!("../assets/runners/wasm-runner.mjs");
-
-static NEXT_NODE_IMPORT_CACHE_ID: AtomicU64 = AtomicU64::new(1);
-
-#[derive(Clone, Copy)]
-struct BuiltinAsset {
-    name: &'static str,
-    module_specifier: &'static str,
-    init_counter_key: &'static str,
-}
-
-#[derive(Clone, Copy)]
-struct DeniedBuiltinAsset {
-    name: &'static str,
-    module_specifier: &'static str,
-}
-
-const BUILTIN_ASSETS: &[BuiltinAsset] = &[
-    BuiltinAsset {
-        name: "async-hooks",
-        module_specifier: "node:async_hooks",
-        init_counter_key: "__agentOSBuiltinAsyncHooksInitCount",
-    },
-    BuiltinAsset {
-        name: "assert",
-        module_specifier: "node:assert",
-        init_counter_key: "__agentOSBuiltinAssertInitCount",
-    },
-    BuiltinAsset {
-        name: "buffer",
-        module_specifier: "node:buffer",
-        init_counter_key: "__agentOSBuiltinBufferInitCount",
-    },
-    BuiltinAsset {
-        name: "constants",
-        module_specifier: "node:constants",
-        init_counter_key: "__agentOSBuiltinConstantsInitCount",
-    },
-    BuiltinAsset {
-        name: "events",
-        module_specifier: "node:events",
-        init_counter_key: "__agentOSBuiltinEventsInitCount",
-    },
-    BuiltinAsset {
-        name: "fs",
-        module_specifier: "node:fs",
-        init_counter_key: "__agentOSBuiltinFsInitCount",
-    },
-    BuiltinAsset {
-        name: "path",
-        module_specifier: "node:path",
-        init_counter_key: "__agentOSBuiltinPathInitCount",
-    },
-    BuiltinAsset {
-        name: "url",
-        module_specifier: "node:url",
-        init_counter_key: "__agentOSBuiltinUrlInitCount",
-    },
-    BuiltinAsset {
-        name: "fs-promises",
-        module_specifier: "node:fs/promises",
-        init_counter_key: "__agentOSBuiltinFsPromisesInitCount",
-    },
-    BuiltinAsset {
-        name: "child-process",
-        module_specifier: "node:child_process",
-        init_counter_key: "__agentOSBuiltinChildProcessInitCount",
-    },
-    BuiltinAsset {
-        name: "net",
-        module_specifier: "node:net",
-        init_counter_key: "__agentOSBuiltinNetInitCount",
-    },
-    BuiltinAsset {
-        name: "dgram",
-        module_specifier: "node:dgram",
-        init_counter_key: "__agentOSBuiltinDgramInitCount",
-    },
-    BuiltinAsset {
-        name: "diagnostics-channel",
-        module_specifier: "node:diagnostics_channel",
-        init_counter_key: "__agentOSBuiltinDiagnosticsChannelInitCount",
-    },
-    BuiltinAsset {
-        name: "dns",
-        module_specifier: "node:dns",
-        init_counter_key: "__agentOSBuiltinDnsInitCount",
-    },
-    BuiltinAsset {
-        name: "dns-promises",
-        module_specifier: "node:dns/promises",
-        init_counter_key: "__agentOSBuiltinDnsPromisesInitCount",
-    },
-    BuiltinAsset {
-        name: "http",
-        module_specifier: "node:http",
-        init_counter_key: "__agentOSBuiltinHttpInitCount",
-    },
-    BuiltinAsset {
-        name: "http2",
-        module_specifier: "node:http2",
-        init_counter_key: "__agentOSBuiltinHttp2InitCount",
-    },
-    BuiltinAsset {
-        name: "https",
-        module_specifier: "node:https",
-        init_counter_key: "__agentOSBuiltinHttpsInitCount",
-    },
-    BuiltinAsset {
-        name: "tls",
-        module_specifier: "node:tls",
-        init_counter_key: "__agentOSBuiltinTlsInitCount",
-    },
-    BuiltinAsset {
-        name: "os",
-        module_specifier: "node:os",
-        init_counter_key: "__agentOSBuiltinOsInitCount",
-    },
-    BuiltinAsset {
-        name: "punycode",
-        module_specifier: "node:punycode",
-        init_counter_key: "__agentOSBuiltinPunycodeInitCount",
-    },
-    BuiltinAsset {
-        name: "querystring",
-        module_specifier: "node:querystring",
-        init_counter_key: "__agentOSBuiltinQuerystringInitCount",
-    },
-    BuiltinAsset {
-        name: "stream",
-        module_specifier: "node:stream",
-        init_counter_key: "__agentOSBuiltinStreamInitCount",
-    },
-    BuiltinAsset {
-        name: "string-decoder",
-        module_specifier: "node:string_decoder",
-        init_counter_key: "__agentOSBuiltinStringDecoderInitCount",
-    },
-    BuiltinAsset {
-        name: "util",
-        module_specifier: "node:util",
-        init_counter_key: "__agentOSBuiltinUtilInitCount",
-    },
-    BuiltinAsset {
-        name: "v8",
-        module_specifier: "node:v8",
-        init_counter_key: "__agentOSBuiltinV8InitCount",
-    },
-    BuiltinAsset {
-        name: "vm",
-        module_specifier: "node:vm",
-        init_counter_key: "__agentOSBuiltinVmInitCount",
-    },
-    BuiltinAsset {
-        name: "worker-threads",
-        module_specifier: "node:worker_threads",
-        init_counter_key: "__agentOSBuiltinWorkerThreadsInitCount",
-    },
-    BuiltinAsset {
-        name: "zlib",
-        module_specifier: "node:zlib",
-        init_counter_key: "__agentOSBuiltinZlibInitCount",
-    },
-];
-
-const DENIED_BUILTIN_ASSETS: &[DeniedBuiltinAsset] = &[
-    DeniedBuiltinAsset {
-        name: "child_process",
-        module_specifier: "node:child_process",
-    },
-    DeniedBuiltinAsset {
-        name: "cluster",
-        module_specifier: "node:cluster",
-    },
-    DeniedBuiltinAsset {
-        name: "dgram",
-        module_specifier: "node:dgram",
-    },
-    DeniedBuiltinAsset {
-        name: "http",
-        module_specifier: "node:http",
-    },
-    DeniedBuiltinAsset {
-        name: "http2",
-        module_specifier: "node:http2",
-    },
-    DeniedBuiltinAsset {
-        name: "https",
-        module_specifier: "node:https",
-    },
-    DeniedBuiltinAsset {
-        name: "inspector",
-        module_specifier: "node:inspector",
-    },
-    DeniedBuiltinAsset {
-        name: "module",
-        module_specifier: "node:module",
-    },
-    DeniedBuiltinAsset {
-        name: "net",
-        module_specifier: "node:net",
-    },
-    DeniedBuiltinAsset {
-        name: "trace_events",
-        module_specifier: "node:trace_events",
-    },
-];
-
-const PATH_POLYFILL_ASSET_NAME: &str = "path";
-const PATH_POLYFILL_INIT_COUNTER_KEY: &str = "__agentOSPolyfillPathInitCount";
-
-#[derive(Debug)]
-pub(crate) struct NodeImportCache {
-    root_dir: PathBuf,
-    cleanup: Arc<NodeImportCacheCleanup>,
-    materialized: AtomicBool,
-    cache_path: PathBuf,
-    loader_path: PathBuf,
-    register_path: PathBuf,
-    runner_path: PathBuf,
-    python_runner_path: PathBuf,
-    timing_bootstrap_path: PathBuf,
-    prewarm_path: PathBuf,
-    wasm_runner_path: PathBuf,
-    asset_root: PathBuf,
-    pyodide_dist_path: PathBuf,
-    prewarm_marker_dir: PathBuf,
-}
-
-#[derive(Debug)]
-pub(crate) struct NodeImportCacheCleanup {
-    root_dir: PathBuf,
-}
-
-#[derive(Debug, Clone)]
-struct NodeImportCacheMaterialization {
-    root_dir: PathBuf,
-    loader_path: PathBuf,
-    register_path: PathBuf,
-    runner_path: PathBuf,
-    python_runner_path: PathBuf,
-    timing_bootstrap_path: PathBuf,
-    prewarm_path: PathBuf,
-    wasm_runner_path: PathBuf,
-    asset_root: PathBuf,
-    pyodide_dist_path: PathBuf,
-    prewarm_marker_dir: PathBuf,
-}
-
-impl Default for NodeImportCache {
-    fn default() -> Self {
-        Self::new_in(default_node_import_cache_base_dir())
-    }
-}
-
-fn default_node_import_cache_base_dir() -> PathBuf {
-    env::temp_dir().join(format!(
-        "{NODE_IMPORT_CACHE_DIR_PREFIX}-roots-{}",
-        std::process::id()
-    ))
-}
-
-fn cleanup_stale_node_import_caches_once(base_dir: &Path) {
-    let cleaned_roots = CLEANED_NODE_IMPORT_CACHE_ROOTS.get_or_init(|| Mutex::new(BTreeSet::new()));
-    let should_cleanup = cleaned_roots
-        .lock()
-        .map(|mut roots| roots.insert(base_dir.to_path_buf()))
-        .unwrap_or(true);
-
-    if should_cleanup {
-        cleanup_stale_node_import_caches(base_dir);
-    }
-}
-
-fn cleanup_stale_node_import_caches(base_dir: &Path) {
-    let entries = match fs::read_dir(base_dir) {
-        Ok(entries) => entries,
-        Err(error) if error.kind() == io::ErrorKind::NotFound => return,
-        Err(error) => {
-            eprintln!(
-                "agentos: failed to scan node import cache root {}: {error}",
-                base_dir.display()
-            );
-            return;
-        }
-    };
-
-    for entry in entries.flatten() {
-        let file_type = match entry.file_type() {
-            Ok(file_type) => file_type,
-            Err(_) => continue,
-        };
-        if !file_type.is_dir() {
-            continue;
-        }
-
-        let name = entry.file_name();
-        if !name
-            .to_str()
-            .is_some_and(|name| name.starts_with(NODE_IMPORT_CACHE_DIR_PREFIX))
-        {
-            continue;
-        }
-
-        let path = entry.path();
-        if let Err(error) = fs::remove_dir_all(&path) {
-            if error.kind() != io::ErrorKind::NotFound {
-                eprintln!(
-                    "agentos: failed to clean up stale node import cache {}: {error}",
-                    path.display()
-                );
-            }
-        }
-    }
-}
-
-impl NodeImportCache {
-    pub(crate) fn new_in(base_dir: PathBuf) -> Self {
-        cleanup_stale_node_import_caches_once(&base_dir);
-        let cache_id = NEXT_NODE_IMPORT_CACHE_ID.fetch_add(1, Ordering::Relaxed);
-        let root_dir = base_dir.join(format!(
-            "{NODE_IMPORT_CACHE_DIR_PREFIX}-{}-{cache_id}",
-            std::process::id()
-        ));
-
-        Self {
-            root_dir: root_dir.clone(),
-            cleanup: Arc::new(NodeImportCacheCleanup {
-                root_dir: root_dir.clone(),
-            }),
-            materialized: AtomicBool::new(false),
-            cache_path: root_dir.join("state.json"),
-            loader_path: root_dir.join("loader.mjs"),
-            register_path: root_dir.join("register.mjs"),
-            runner_path: root_dir.join("runner.mjs"),
-            python_runner_path: root_dir.join("python-runner.mjs"),
-            timing_bootstrap_path: root_dir.join("timing-bootstrap.mjs"),
-            prewarm_path: root_dir.join("prewarm.mjs"),
-            wasm_runner_path: root_dir.join("wasm-runner.mjs"),
-            asset_root: root_dir.join("assets"),
-            pyodide_dist_path: root_dir.join("assets").join(PYODIDE_DIST_DIR),
-            prewarm_marker_dir: root_dir.join("warmup"),
-        }
-    }
-}
-
-impl Drop for NodeImportCacheCleanup {
-    fn drop(&mut self) {
-        if let Err(error) = fs::remove_dir_all(&self.root_dir) {
-            if error.kind() != io::ErrorKind::NotFound {
-                eprintln!(
-                    "agentos: failed to clean up node import cache {}: {error}",
-                    self.root_dir.display()
-                );
-            }
-        }
-    }
-}
-
-impl NodeImportCache {
-    pub(crate) fn cache_path(&self) -> &Path {
-        &self.cache_path
-    }
-
-    pub(crate) fn cleanup_guard(&self) -> Arc<NodeImportCacheCleanup> {
-        Arc::clone(&self.cleanup)
-    }
-
-    #[cfg_attr(not(test), allow(dead_code))]
-    pub(crate) fn python_runner_path(&self) -> &Path {
-        &self.python_runner_path
-    }
-
-    #[cfg(test)]
-    pub(crate) fn timing_bootstrap_path(&self) -> &Path {
-        &self.timing_bootstrap_path
-    }
-
-    pub(crate) fn wasm_runner_path(&self) -> &Path {
-        &self.wasm_runner_path
-    }
-
-    pub(crate) fn asset_root(&self) -> &Path {
-        &self.asset_root
-    }
-
-    pub(crate) fn pyodide_dist_path(&self) -> &Path {
-        &self.pyodide_dist_path
-    }
-
-    pub(crate) fn prewarm_marker_dir(&self) -> &Path {
-        &self.prewarm_marker_dir
-    }
-
-    pub(crate) fn shared_compile_cache_dir(&self) -> PathBuf {
-        self.root_dir.join("compile-cache")
-    }
-
-    pub(crate) fn ensure_materialized(&self) -> Result<(), io::Error> {
-        self.ensure_materialized_with_timeout(DEFAULT_NODE_IMPORT_CACHE_MATERIALIZE_TIMEOUT)
-    }
-
-    pub(crate) fn ensure_materialized_with_timeout(
-        &self,
-        timeout: Duration,
-    ) -> Result<(), io::Error> {
-        if self.materialized.load(Ordering::Acquire) {
-            return Ok(());
-        }
-
-        let materialization = NodeImportCacheMaterialization::from(self);
-        let (sender, receiver) = std::sync::mpsc::channel();
-        std::thread::spawn(move || {
-            let _ = sender.send(materialization.materialize());
-        });
-
-        match receiver.recv_timeout(timeout) {
-            Ok(result) => {
-                result?;
-                self.materialized.store(true, Ordering::Release);
-                Ok(())
-            }
-            Err(std::sync::mpsc::RecvTimeoutError::Timeout) => Err(io::Error::new(
-                io::ErrorKind::TimedOut,
-                format!(
-                    "timed out materializing node import cache after {} ms",
-                    timeout.as_millis()
-                ),
-            )),
-            Err(std::sync::mpsc::RecvTimeoutError::Disconnected) => Err(io::Error::other(
-                "node import cache materialization thread exited unexpectedly",
-            )),
-        }
-    }
-}
-
-impl From<&NodeImportCache> for NodeImportCacheMaterialization {
-    fn from(cache: &NodeImportCache) -> Self {
-        Self {
-            root_dir: cache.root_dir.clone(),
-            loader_path: cache.loader_path.clone(),
-            register_path: cache.register_path.clone(),
-            runner_path: cache.runner_path.clone(),
-            python_runner_path: cache.python_runner_path.clone(),
-            timing_bootstrap_path: cache.timing_bootstrap_path.clone(),
-            prewarm_path: cache.prewarm_path.clone(),
-            wasm_runner_path: cache.wasm_runner_path.clone(),
-            asset_root: cache.asset_root.clone(),
-            pyodide_dist_path: cache.pyodide_dist_path.clone(),
-            prewarm_marker_dir: cache.prewarm_marker_dir.clone(),
-        }
-    }
-}
-
-impl NodeImportCacheMaterialization {
-    fn materialize(self) -> Result<(), io::Error> {
-        #[cfg(test)]
-        {
-            let delay_ms = NODE_IMPORT_CACHE_TEST_MATERIALIZE_DELAY_MS.load(Ordering::Relaxed);
-            if delay_ms > 0 {
-                std::thread::sleep(Duration::from_millis(delay_ms));
-            }
-        }
-
-        fs::create_dir_all(&self.root_dir)?;
-        fs::create_dir_all(self.asset_root.join("builtins"))?;
-        fs::create_dir_all(self.asset_root.join("denied"))?;
-        fs::create_dir_all(self.asset_root.join("polyfills"))?;
-        fs::create_dir_all(&self.pyodide_dist_path)?;
-        fs::create_dir_all(&self.prewarm_marker_dir)?;
-
-        write_file_if_changed(&self.loader_path, &render_loader_source())?;
-        write_file_if_changed(&self.register_path, &render_register_source())?;
-        write_file_if_changed(&self.runner_path, NODE_EXECUTION_RUNNER_SOURCE)?;
-        write_file_if_changed(&self.python_runner_path, NODE_PYTHON_RUNNER_SOURCE)?;
-        write_file_if_changed(&self.timing_bootstrap_path, NODE_TIMING_BOOTSTRAP_SOURCE)?;
-        write_file_if_changed(&self.prewarm_path, NODE_PREWARM_SOURCE)?;
-        write_file_if_changed(&self.wasm_runner_path, NODE_WASM_RUNNER_SOURCE)?;
-
-        for asset in BUILTIN_ASSETS {
-            write_file_if_changed(
-                &self
-                    .asset_root
-                    .join("builtins")
-                    .join(format!("{}.mjs", asset.name)),
-                &render_builtin_asset_source(asset),
-            )?;
-        }
-
-        for asset in DENIED_BUILTIN_ASSETS {
-            write_file_if_changed(
-                &self
-                    .asset_root
-                    .join("denied")
-                    .join(format!("{}.mjs", asset.name)),
-                &render_denied_asset_source(asset.module_specifier),
-            )?;
-        }
-
-        write_file_if_changed(
-            &self
-                .asset_root
-                .join("polyfills")
-                .join(format!("{PATH_POLYFILL_ASSET_NAME}.mjs")),
-            &render_path_polyfill_source(),
-        )?;
-        write_file_if_changed(
-            &self.pyodide_dist_path.join("pyodide.mjs"),
-            &render_patched_pyodide_mjs(),
-        )?;
-        write_bytes_if_changed(
-            &self.pyodide_dist_path.join("pyodide.asm.js"),
-            BUNDLED_PYODIDE_ASM_JS,
-        )?;
-        write_bytes_if_changed(
-            &self.pyodide_dist_path.join("pyodide.asm.wasm"),
-            BUNDLED_PYODIDE_ASM_WASM,
-        )?;
-        write_bytes_if_changed(
-            &self.pyodide_dist_path.join("pyodide-lock.json"),
-            BUNDLED_PYODIDE_LOCK,
-        )?;
-        write_bytes_if_changed(
-            &self.pyodide_dist_path.join("python_stdlib.zip"),
-            BUNDLED_PYTHON_STDLIB_ZIP,
-        )?;
-        for asset in BUNDLED_PYODIDE_PACKAGE_ASSETS {
-            write_bytes_if_changed(&self.pyodide_dist_path.join(asset.file_name), asset.bytes)?;
-        }
-        Ok(())
-    }
-}
-
-fn render_loader_source() -> String {
-    NODE_IMPORT_CACHE_LOADER_TEMPLATE
-        .replace("__NODE_IMPORT_CACHE_PATH_ENV__", NODE_IMPORT_CACHE_PATH_ENV)
-        .replace(
-            "__NODE_IMPORT_CACHE_ASSET_ROOT_ENV__",
-            NODE_IMPORT_CACHE_ASSET_ROOT_ENV,
-        )
-        .replace(
-            "__NODE_IMPORT_CACHE_DEBUG_ENV__",
-            NODE_IMPORT_CACHE_DEBUG_ENV,
-        )
-        .replace(
-            "__NODE_IMPORT_CACHE_METRICS_PREFIX__",
-            NODE_IMPORT_CACHE_METRICS_PREFIX,
-        )
-        .replace(
-            "__NODE_IMPORT_CACHE_SCHEMA_VERSION__",
-            NODE_IMPORT_CACHE_SCHEMA_VERSION,
-        )
-        .replace(
-            "__NODE_IMPORT_CACHE_LOADER_VERSION__",
-            NODE_IMPORT_CACHE_LOADER_VERSION,
-        )
-        .replace(
-            "__NODE_IMPORT_CACHE_ASSET_VERSION__",
-            NODE_IMPORT_CACHE_ASSET_VERSION,
-        )
-        .replace(
-            "__SECURE_EXEC_BUILTIN_SPECIFIER_PREFIX__",
-            SECURE_EXEC_BUILTIN_SPECIFIER_PREFIX,
-        )
-        .replace(
-            "__SECURE_EXEC_POLYFILL_SPECIFIER_PREFIX__",
-            SECURE_EXEC_POLYFILL_SPECIFIER_PREFIX,
-        )
-}
-
-fn render_patched_pyodide_mjs() -> String {
-    let source = String::from_utf8_lossy(BUNDLED_PYODIDE_MJS);
-    source
-        .replace(
-            r#"H=(await import("node:vm")).default,"#,
-            "",
-        )
-        .replace(
-            r#"async function fe(e){e.startsWith("file://")&&(e=e.slice(7)),e.includes("://")?H.runInThisContext(await(await fetch(e)).text()):await import(e.startsWith("/" )?e:$.pathToFileURL(e).href)}o(fe,"nodeLoadScript");"#,
-            r#"async function fe(e){if(e.startsWith("file://")&&(e=e.slice(7)),e.includes("://")){let t=await(await fetch(e)).text();await import(`data:text/javascript;base64,${$e(t)}`);return}await import(e.startsWith("/")?e:$.pathToFileURL(e).href)}o(fe,"nodeLoadScript");"#,
-        )
-        .replace(
-            r#"function Ne(e){if(typeof WasmOffsetConverter<"u")return;let{binary:t,response:n}=R(e+"pyodide.asm.wasm"),i=K();return function(s,r){return async function(){s.sentinel=await i;try{let a;if(n){a=await WebAssembly.instantiateStreaming(n,s);}else{let l=await t;a=await WebAssembly.instantiate(l,s);}let{instance:l,module:c}=a;r(l,c);}catch(a){console.warn("wasm instantiation failed!"),console.warn(a)}}(),{}}}o(Ne,"getInstantiateWasmFunc");"#,
-            r#"function Ne(e){if(typeof WasmOffsetConverter<"u")return;let{binary:t,response:n}=R(e+"pyodide.asm.wasm"),i=K();return function(s,r){return async function(){s.sentinel=await i;try{let a;if(n){a=await WebAssembly.instantiateStreaming(n,s);}else{let l=await t;a=await WebAssembly.instantiate(l,s);}let{instance:l,module:c}=a;r(l,c);}catch(a){console.warn("wasm instantiation failed!"),console.warn(a);throw a}}(),{}}}o(Ne,"getInstantiateWasmFunc");"#,
-        )
-}
-
-fn render_register_source() -> String {
-    NODE_IMPORT_CACHE_REGISTER_SOURCE.replace(
-        "__NODE_IMPORT_CACHE_LOADER_PATH_ENV__",
-        NODE_IMPORT_CACHE_LOADER_PATH_ENV,
-    )
-}
-
-fn render_builtin_asset_source(asset: &BuiltinAsset) -> String {
-    match asset.name {
-        "async-hooks" => render_async_hooks_builtin_asset_source(asset.init_counter_key),
-        "fs" => render_fs_builtin_asset_source(asset.init_counter_key),
-        "fs-promises" => render_fs_promises_builtin_asset_source(asset.init_counter_key),
-        "child-process" => render_child_process_builtin_asset_source(asset.init_counter_key),
-        "net" => render_net_builtin_asset_source(asset.init_counter_key),
-        "dgram" => render_dgram_builtin_asset_source(asset.init_counter_key),
-        "diagnostics-channel" => {
-            render_diagnostics_channel_builtin_asset_source(asset.init_counter_key)
-        }
-        "dns" => render_dns_builtin_asset_source(asset.init_counter_key),
-        "dns-promises" => render_dns_promises_builtin_asset_source(asset.init_counter_key),
-        "http" => render_http_builtin_asset_source(asset.init_counter_key),
-        "http2" => render_http2_builtin_asset_source(asset.init_counter_key),
-        "https" => render_https_builtin_asset_source(asset.init_counter_key),
-        "tls" => render_tls_builtin_asset_source(asset.init_counter_key),
-        "os" => render_os_builtin_asset_source(asset.init_counter_key),
-        "util" => render_util_builtin_asset_source(asset.init_counter_key),
-        "v8" => render_v8_builtin_asset_source(asset.init_counter_key),
-        "vm" => render_vm_builtin_asset_source(asset.init_counter_key),
-        "worker-threads" => render_worker_threads_builtin_asset_source(asset.init_counter_key),
-        _ => {
-            render_passthrough_builtin_asset_source(asset.module_specifier, asset.init_counter_key)
-        }
-    }
-}
-
-fn render_passthrough_builtin_asset_source(
-    module_specifier: &str,
-    init_counter_key: &str,
-) -> String {
-    let module_specifier = format!("{module_specifier:?}");
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "import * as namespace from {module_specifier};\n\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-const builtin = namespace.default ?? namespace;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default builtin;\n\
-export * from {module_specifier};\n"
-    )
-}
-
-fn render_util_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "import * as namespace from \"node:util\";\n\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-const builtin = namespace.default ?? namespace;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default builtin;\n\
-export const formatWithOptions = builtin.formatWithOptions;\n\
-export * from \"node:util\";\n"
-    )
-}
-
-fn render_fs_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-const mod = globalThis.__agentOSBuiltinFs ?? globalThis.__agentOSGuestFs ?? process.getBuiltinModule?.(\"node:fs\");\n\
-if (!mod) {{\n\
-  throw new Error('secure-exec guest fs polyfill was not initialized');\n\
-}}\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const Dir = mod.Dir;\n\
-export const Dirent = mod.Dirent;\n\
-export const ReadStream = mod.ReadStream;\n\
-export const Stats = mod.Stats;\n\
-export const WriteStream = mod.WriteStream;\n\
-export const constants = mod.constants;\n\
-export const promises = mod.promises;\n\
-export const access = mod.access;\n\
-export const accessSync = mod.accessSync;\n\
-export const appendFile = mod.appendFile;\n\
-export const appendFileSync = mod.appendFileSync;\n\
-export const chmod = mod.chmod;\n\
-export const chmodSync = mod.chmodSync;\n\
-export const chown = mod.chown;\n\
-export const chownSync = mod.chownSync;\n\
-export const close = mod.close;\n\
-export const closeSync = mod.closeSync;\n\
-export const copyFile = mod.copyFile;\n\
-export const copyFileSync = mod.copyFileSync;\n\
-export const cp = mod.cp;\n\
-export const cpSync = mod.cpSync;\n\
-export const createReadStream = mod.createReadStream;\n\
-export const createWriteStream = mod.createWriteStream;\n\
-export const exists = mod.exists;\n\
-export const existsSync = mod.existsSync;\n\
-export const lchmod = mod.lchmod;\n\
-export const lchmodSync = mod.lchmodSync;\n\
-export const lchown = mod.lchown;\n\
-export const lchownSync = mod.lchownSync;\n\
-export const link = mod.link;\n\
-export const linkSync = mod.linkSync;\n\
-export const lstat = mod.lstat;\n\
-export const lstatSync = mod.lstatSync;\n\
-export const lutimes = mod.lutimes;\n\
-export const lutimesSync = mod.lutimesSync;\n\
-export const mkdir = mod.mkdir;\n\
-export const mkdirSync = mod.mkdirSync;\n\
-export const mkdtemp = mod.mkdtemp;\n\
-export const mkdtempSync = mod.mkdtempSync;\n\
-export const open = mod.open;\n\
-export const openSync = mod.openSync;\n\
-export const opendir = mod.opendir;\n\
-export const opendirSync = mod.opendirSync;\n\
-export const read = mod.read;\n\
-export const readFile = mod.readFile;\n\
-export const readFileSync = mod.readFileSync;\n\
-export const readSync = mod.readSync;\n\
-export const readdir = mod.readdir;\n\
-export const readdirSync = mod.readdirSync;\n\
-export const readlink = mod.readlink;\n\
-export const readlinkSync = mod.readlinkSync;\n\
-export const realpath = mod.realpath;\n\
-export const realpathSync = mod.realpathSync;\n\
-export const rename = mod.rename;\n\
-export const renameSync = mod.renameSync;\n\
-export const rm = mod.rm;\n\
-export const rmSync = mod.rmSync;\n\
-export const rmdir = mod.rmdir;\n\
-export const rmdirSync = mod.rmdirSync;\n\
-export const stat = mod.stat;\n\
-export const statSync = mod.statSync;\n\
-export const statfs = mod.statfs;\n\
-export const statfsSync = mod.statfsSync;\n\
-export const symlink = mod.symlink;\n\
-export const symlinkSync = mod.symlinkSync;\n\
-export const truncate = mod.truncate;\n\
-export const truncateSync = mod.truncateSync;\n\
-export const unlink = mod.unlink;\n\
-export const unlinkSync = mod.unlinkSync;\n\
-export const unwatchFile = mod.unwatchFile;\n\
-export const utimes = mod.utimes;\n\
-export const utimesSync = mod.utimesSync;\n\
-export const watch = mod.watch;\n\
-export const watchFile = mod.watchFile;\n\
-export const write = mod.write;\n\
-export const writeFile = mod.writeFile;\n\
-export const writeFileSync = mod.writeFileSync;\n\
-export const writeSync = mod.writeSync;\n"
-    )
-}
-
-fn render_fs_promises_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "import fsModule from \"secure-exec:builtin/fs\";\n\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-const mod = fsModule.promises;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const constants = fsModule.constants;\n\
-export const FileHandle = mod.FileHandle;\n\
-export const access = mod.access;\n\
-export const appendFile = mod.appendFile;\n\
-export const chmod = mod.chmod;\n\
-export const chown = mod.chown;\n\
-export const copyFile = mod.copyFile;\n\
-export const cp = mod.cp;\n\
-export const lchmod = mod.lchmod;\n\
-export const lchown = mod.lchown;\n\
-export const link = mod.link;\n\
-export const lstat = mod.lstat;\n\
-export const lutimes = mod.lutimes;\n\
-export const mkdir = mod.mkdir;\n\
-export const mkdtemp = mod.mkdtemp;\n\
-export const open = mod.open;\n\
-export const opendir = mod.opendir;\n\
-export const readFile = mod.readFile;\n\
-export const readdir = mod.readdir;\n\
-export const readlink = mod.readlink;\n\
-export const realpath = mod.realpath;\n\
-export const rename = mod.rename;\n\
-export const rm = mod.rm;\n\
-export const rmdir = mod.rmdir;\n\
-export const stat = mod.stat;\n\
-export const statfs = mod.statfs;\n\
-export const symlink = mod.symlink;\n\
-export const truncate = mod.truncate;\n\
-export const unlink = mod.unlink;\n\
-export const utimes = mod.utimes;\n\
-export const watch = mod.watch;\n\
-export const writeFile = mod.writeFile;\n"
-    )
-}
-
-fn render_async_hooks_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-\n\
-class AsyncLocalStorage {{\n\
-  constructor() {{\n\
-    this._store = undefined;\n\
-  }}\n\
-  disable() {{\n\
-    this._store = undefined;\n\
-  }}\n\
-  enterWith(store) {{\n\
-    this._store = store;\n\
-  }}\n\
-  exit(callback, ...args) {{\n\
-    return callback(...args);\n\
-  }}\n\
-  getStore() {{\n\
-    return this._store;\n\
-  }}\n\
-  run(store, callback, ...args) {{\n\
-    const previous = this._store;\n\
-    this._store = store;\n\
-    try {{\n\
-      return callback(...args);\n\
-    }} finally {{\n\
-      this._store = previous;\n\
-    }}\n\
-  }}\n\
-}}\n\
-\n\
-class AsyncResource {{\n\
-  constructor(type = 'SecureExecAsyncResource') {{\n\
-    this.type = type;\n\
-  }}\n\
-  emitBefore() {{}}\n\
-  emitAfter() {{}}\n\
-  emitDestroy() {{}}\n\
-  asyncId() {{\n\
-    return 0;\n\
-  }}\n\
-  triggerAsyncId() {{\n\
-    return 0;\n\
-  }}\n\
-  runInAsyncScope(callback, thisArg, ...args) {{\n\
-    return callback.apply(thisArg, args);\n\
-  }}\n\
-}}\n\
-\n\
-function createHook() {{\n\
-  return {{\n\
-    enable() {{\n\
-      return this;\n\
-    }},\n\
-    disable() {{\n\
-      return this;\n\
-    }},\n\
-  }};\n\
-}}\n\
-\n\
-function executionAsyncId() {{\n\
-  return 0;\n\
-}}\n\
-\n\
-function triggerAsyncId() {{\n\
-  return 0;\n\
-}}\n\
-\n\
-const mod = {{\n\
-  AsyncLocalStorage,\n\
-  AsyncResource,\n\
-  createHook,\n\
-  executionAsyncId,\n\
-  triggerAsyncId,\n\
-}};\n\
-\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export {{ AsyncLocalStorage, AsyncResource, createHook, executionAsyncId, triggerAsyncId }};\n"
-    )
-}
-
-fn render_child_process_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const ACCESS_DENIED_CODE = \"ERR_ACCESS_DENIED\";\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-if (!globalThis.__agentOSBuiltinChildProcess) {{\n\
-  const error = new Error(\"node:child_process is not available in the secure-exec guest runtime\");\n\
-  error.code = ACCESS_DENIED_CODE;\n\
-  throw error;\n\
-}}\n\n\
-const mod = globalThis.__agentOSBuiltinChildProcess;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const ChildProcess = mod.ChildProcess;\n\
-export const _forkChild = mod._forkChild;\n\
-export const exec = mod.exec;\n\
-export const execFile = mod.execFile;\n\
-export const execFileSync = mod.execFileSync;\n\
-export const execSync = mod.execSync;\n\
-export const fork = mod.fork;\n\
-export const spawn = mod.spawn;\n\
-export const spawnSync = mod.spawnSync;\n"
-    )
-}
-
-fn render_net_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const ACCESS_DENIED_CODE = \"ERR_ACCESS_DENIED\";\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-if (!globalThis.__agentOSBuiltinNet) {{\n\
-  const error = new Error(\"node:net is not available in the secure-exec guest runtime\");\n\
-  error.code = ACCESS_DENIED_CODE;\n\
-  throw error;\n\
-}}\n\n\
-const mod = globalThis.__agentOSBuiltinNet;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const BlockList = mod.BlockList;\n\
-export const Server = mod.Server;\n\
-export const Socket = mod.Socket;\n\
-export const SocketAddress = mod.SocketAddress;\n\
-export const Stream = mod.Stream;\n\
-export const connect = mod.connect;\n\
-export const createConnection = mod.createConnection;\n\
-export const createServer = mod.createServer;\n\
-export const getDefaultAutoSelectFamily = mod.getDefaultAutoSelectFamily;\n\
-export const getDefaultAutoSelectFamilyAttemptTimeout = mod.getDefaultAutoSelectFamilyAttemptTimeout;\n\
-export const isIP = mod.isIP;\n\
-export const isIPv4 = mod.isIPv4;\n\
-export const isIPv6 = mod.isIPv6;\n\
-export const setDefaultAutoSelectFamily = mod.setDefaultAutoSelectFamily;\n\
-export const setDefaultAutoSelectFamilyAttemptTimeout = mod.setDefaultAutoSelectFamilyAttemptTimeout;\n"
-    )
-}
-
-fn render_dgram_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const ACCESS_DENIED_CODE = \"ERR_ACCESS_DENIED\";\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-if (!globalThis.__agentOSBuiltinDgram) {{\n\
-  const error = new Error(\"node:dgram is not available in the secure-exec guest runtime\");\n\
-  error.code = ACCESS_DENIED_CODE;\n\
-  throw error;\n\
-}}\n\n\
-const mod = globalThis.__agentOSBuiltinDgram;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const Socket = mod.Socket;\n\
-export const createSocket = mod.createSocket;\n"
-    )
-}
-
-fn render_diagnostics_channel_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        r#"const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;
-globalThis[{init_counter_key}] = initCount;
-
-class Channel {{
-  constructor(name = '') {{
-    this.name = String(name);
-    this._subscribers = new Set();
-  }}
-
-  get hasSubscribers() {{
-    return this._subscribers.size > 0;
-  }}
-
-  publish(message) {{
-    for (const subscriber of Array.from(this._subscribers)) {{
-      subscriber(message, this.name);
-    }}
-  }}
-
-  subscribe(subscriber) {{
-    if (typeof subscriber === 'function') {{
-      this._subscribers.add(subscriber);
-    }}
-  }}
-
-  unsubscribe(subscriber) {{
-    return this._subscribers.delete(subscriber);
-  }}
-
-  runStores(context, callback, thisArg, ...args) {{
-    if (typeof callback !== 'function') {{
-      return callback;
-    }}
-    return callback.apply(thisArg, args);
-  }}
-}}
-
-const channelCache = new Map();
-
-function channel(name = '') {{
-  const channelName = String(name);
-  let existing = channelCache.get(channelName);
-  if (!existing) {{
-    existing = new Channel(channelName);
-    channelCache.set(channelName, existing);
-  }}
-  return existing;
-}}
-
-function hasSubscribers(name = '') {{
-  return channel(name).hasSubscribers;
-}}
-
-function subscribe(name = '', subscriber) {{
-  return channel(name).subscribe(subscriber);
-}}
-
-function unsubscribe(name = '', subscriber) {{
-  return channel(name).unsubscribe(subscriber);
-}}
-
-function tracingChannel(name = '') {{
-  const channelName = String(name);
-  const tracing = {{
-    start: channel(`tracing:${{channelName}}:start`),
-    end: channel(`tracing:${{channelName}}:end`),
-    asyncStart: channel(`tracing:${{channelName}}:asyncStart`),
-    asyncEnd: channel(`tracing:${{channelName}}:asyncEnd`),
-    error: channel(`tracing:${{channelName}}:error`),
-    subscribe() {{}},
-    unsubscribe() {{
-      return true;
-    }},
-    traceSync(fn, context, thisArg, ...args) {{
-      if (typeof fn !== 'function') {{
-        return fn;
-      }}
-      return fn.apply(thisArg, args);
-    }},
-    tracePromise(fn, context, thisArg, ...args) {{
-      if (typeof fn !== 'function') {{
-        return Promise.resolve(fn);
-      }}
-      return Promise.resolve(fn.apply(thisArg, args));
-    }},
-    traceCallback(fn, position, context, thisArg, ...args) {{
-      if (typeof fn !== 'function') {{
-        return fn;
-      }}
-      return fn.apply(thisArg, args);
-    }},
-  }};
-  Object.defineProperty(tracing, 'hasSubscribers', {{
-    get() {{
-      return (
-        tracing.start.hasSubscribers ||
-        tracing.end.hasSubscribers ||
-        tracing.asyncStart.hasSubscribers ||
-        tracing.asyncEnd.hasSubscribers ||
-        tracing.error.hasSubscribers
-      );
-    }},
-    enumerable: false,
-    configurable: true,
-  }});
-  return tracing;
-}}
-
-const mod = {{ Channel, channel, hasSubscribers, subscribe, tracingChannel, unsubscribe }};
-
-export const __agentOSInitCount = initCount;
-export default mod;
-export {{ Channel, channel, hasSubscribers, subscribe, tracingChannel, unsubscribe }};
-"#
-    )
-}
-
-fn render_dns_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const ACCESS_DENIED_CODE = \"ERR_ACCESS_DENIED\";\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-if (!globalThis.__agentOSBuiltinDns) {{\n\
-  const error = new Error(\"node:dns is not available in the secure-exec guest runtime\");\n\
-  error.code = ACCESS_DENIED_CODE;\n\
-  throw error;\n\
-}}\n\n\
-const mod = globalThis.__agentOSBuiltinDns;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const ADDRCONFIG = mod.ADDRCONFIG;\n\
-export const ALL = mod.ALL;\n\
-export const Resolver = mod.Resolver;\n\
-export const V4MAPPED = mod.V4MAPPED;\n\
-export const constants = mod.constants;\n\
-export const getDefaultResultOrder = mod.getDefaultResultOrder;\n\
-export const getServers = mod.getServers;\n\
-export const lookup = mod.lookup;\n\
-export const lookupService = mod.lookupService;\n\
-export const promises = mod.promises;\n\
-export const resolve = mod.resolve;\n\
-export const resolve4 = mod.resolve4;\n\
-export const resolve6 = mod.resolve6;\n\
-export const reverse = mod.reverse;\n\
-export const setDefaultResultOrder = mod.setDefaultResultOrder;\n\
-export const setServers = mod.setServers;\n"
-    )
-}
-
-fn render_dns_promises_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const ACCESS_DENIED_CODE = \"ERR_ACCESS_DENIED\";\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-if (!globalThis.__agentOSBuiltinDns) {{\n\
-  const error = new Error(\"node:dns/promises is not available in the secure-exec guest runtime\");\n\
-  error.code = ACCESS_DENIED_CODE;\n\
-  throw error;\n\
-}}\n\n\
-const mod = globalThis.__agentOSBuiltinDns.promises;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const Resolver = mod.Resolver;\n\
-export const lookup = mod.lookup;\n\
-export const resolve = mod.resolve;\n\
-export const resolve4 = mod.resolve4;\n\
-export const resolve6 = mod.resolve6;\n\
-export const resolveAny = mod.resolveAny;\n\
-export const resolveMx = mod.resolveMx;\n\
-export const resolveTxt = mod.resolveTxt;\n\
-export const resolveSrv = mod.resolveSrv;\n\
-export const resolveCname = mod.resolveCname;\n\
-export const resolvePtr = mod.resolvePtr;\n\
-export const resolveNs = mod.resolveNs;\n\
-export const resolveSoa = mod.resolveSoa;\n\
-export const resolveNaptr = mod.resolveNaptr;\n\
-export const resolveCaa = mod.resolveCaa;\n"
-    )
-}
-
-fn render_http_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const ACCESS_DENIED_CODE = \"ERR_ACCESS_DENIED\";\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-if (!globalThis.__agentOSBuiltinHttp) {{\n\
-  const error = new Error(\"node:http is not available in the secure-exec guest runtime\");\n\
-  error.code = ACCESS_DENIED_CODE;\n\
-  throw error;\n\
-}}\n\n\
-const mod = globalThis.__agentOSBuiltinHttp;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const Agent = mod.Agent;\n\
-export const ClientRequest = mod.ClientRequest;\n\
-export const IncomingMessage = mod.IncomingMessage;\n\
-export const METHODS = mod.METHODS;\n\
-export const OutgoingMessage = mod.OutgoingMessage;\n\
-export const STATUS_CODES = mod.STATUS_CODES;\n\
-export const Server = mod.Server;\n\
-export const ServerResponse = mod.ServerResponse;\n\
-export const createServer = mod.createServer;\n\
-export const get = mod.get;\n\
-export const globalAgent = mod.globalAgent;\n\
-export const maxHeaderSize = mod.maxHeaderSize;\n\
-export const request = mod.request;\n\
-export const setMaxIdleHTTPParsers = mod.setMaxIdleHTTPParsers;\n\
-export const validateHeaderName = mod.validateHeaderName;\n\
-export const validateHeaderValue = mod.validateHeaderValue;\n"
-    )
-}
-
-fn render_http2_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const ACCESS_DENIED_CODE = \"ERR_ACCESS_DENIED\";\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-if (!globalThis.__agentOSBuiltinHttp2) {{\n\
-  const error = new Error(\"node:http2 is not available in the secure-exec guest runtime\");\n\
-  error.code = ACCESS_DENIED_CODE;\n\
-  throw error;\n\
-}}\n\n\
-const mod = globalThis.__agentOSBuiltinHttp2;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const Http2ServerRequest = mod.Http2ServerRequest;\n\
-export const Http2ServerResponse = mod.Http2ServerResponse;\n\
-export const Http2Session = mod.Http2Session;\n\
-export const Http2Stream = mod.Http2Stream;\n\
-export const constants = mod.constants;\n\
-export const connect = mod.connect;\n\
-export const createServer = mod.createServer;\n\
-export const createSecureServer = mod.createSecureServer;\n\
-export const getDefaultSettings = mod.getDefaultSettings;\n\
-export const getPackedSettings = mod.getPackedSettings;\n\
-export const getUnpackedSettings = mod.getUnpackedSettings;\n\
-export const sensitiveHeaders = mod.sensitiveHeaders;\n"
-    )
-}
-
-fn render_https_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const ACCESS_DENIED_CODE = \"ERR_ACCESS_DENIED\";\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-if (!globalThis.__agentOSBuiltinHttps) {{\n\
-  const error = new Error(\"node:https is not available in the secure-exec guest runtime\");\n\
-  error.code = ACCESS_DENIED_CODE;\n\
-  throw error;\n\
-}}\n\n\
-const mod = globalThis.__agentOSBuiltinHttps;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const Agent = mod.Agent;\n\
-export const Server = mod.Server;\n\
-export const createServer = mod.createServer;\n\
-export const get = mod.get;\n\
-export const globalAgent = mod.globalAgent;\n\
-export const request = mod.request;\n"
-    )
-}
-
-fn render_tls_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const ACCESS_DENIED_CODE = \"ERR_ACCESS_DENIED\";\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-if (!globalThis.__agentOSBuiltinTls) {{\n\
-  const error = new Error(\"node:tls is not available in the secure-exec guest runtime\");\n\
-  error.code = ACCESS_DENIED_CODE;\n\
-  throw error;\n\
-}}\n\n\
-const mod = globalThis.__agentOSBuiltinTls;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const CLIENT_RENEG_LIMIT = mod.CLIENT_RENEG_LIMIT;\n\
-export const CLIENT_RENEG_WINDOW = mod.CLIENT_RENEG_WINDOW;\n\
-export const DEFAULT_CIPHERS = mod.DEFAULT_CIPHERS;\n\
-export const DEFAULT_ECDH_CURVE = mod.DEFAULT_ECDH_CURVE;\n\
-export const DEFAULT_MAX_VERSION = mod.DEFAULT_MAX_VERSION;\n\
-export const DEFAULT_MIN_VERSION = mod.DEFAULT_MIN_VERSION;\n\
-export const SecureContext = mod.SecureContext;\n\
-export const Server = mod.Server;\n\
-export const TLSSocket = mod.TLSSocket;\n\
-export const checkServerIdentity = mod.checkServerIdentity;\n\
-export const connect = mod.connect;\n\
-export const createConnection = mod.createConnection;\n\
-export const createSecureContext = mod.createSecureContext;\n\
-export const createSecurePair = mod.createSecurePair;\n\
-export const createServer = mod.createServer;\n\
-export const getCiphers = mod.getCiphers;\n\
-export const rootCertificates = mod.rootCertificates;\n"
-    )
-}
-
-fn render_os_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const ACCESS_DENIED_CODE = \"ERR_ACCESS_DENIED\";\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-if (!globalThis.__agentOSBuiltinOs) {{\n\
-  const error = new Error(\"node:os is not available in the secure-exec guest runtime\");\n\
-  error.code = ACCESS_DENIED_CODE;\n\
-  throw error;\n\
-}}\n\n\
-const mod = globalThis.__agentOSBuiltinOs;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const EOL = mod.EOL;\n\
-export const arch = mod.arch;\n\
-export const availableParallelism = mod.availableParallelism;\n\
-export const constants = mod.constants;\n\
-export const cpus = mod.cpus;\n\
-export const devNull = mod.devNull;\n\
-export const endianness = mod.endianness;\n\
-export const freemem = mod.freemem;\n\
-export const getPriority = mod.getPriority;\n\
-export const homedir = mod.homedir;\n\
-export const hostname = mod.hostname;\n\
-export const loadavg = mod.loadavg;\n\
-export const machine = mod.machine;\n\
-export const networkInterfaces = mod.networkInterfaces;\n\
-export const platform = mod.platform;\n\
-export const release = mod.release;\n\
-export const setPriority = mod.setPriority;\n\
-export const tmpdir = mod.tmpdir;\n\
-export const totalmem = mod.totalmem;\n\
-export const type = mod.type;\n\
-export const uptime = mod.uptime;\n\
-export const userInfo = mod.userInfo;\n\
-export const version = mod.version;\n"
-    )
-}
-
-fn render_v8_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-const mod = process.getBuiltinModule?.(\"node:v8\");\n\
-if (!mod) {{\n\
-  throw new Error(\"secure-exec guest v8 compatibility module was not initialized\");\n\
-}}\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const GCProfiler = mod.GCProfiler;\n\
-export const Deserializer = mod.Deserializer;\n\
-export const Serializer = mod.Serializer;\n\
-export const cachedDataVersionTag = mod.cachedDataVersionTag;\n\
-export const deserialize = mod.deserialize;\n\
-export const getCppHeapStatistics = mod.getCppHeapStatistics;\n\
-export const getHeapCodeStatistics = mod.getHeapCodeStatistics;\n\
-export const getHeapSnapshot = mod.getHeapSnapshot;\n\
-export const getHeapSpaceStatistics = mod.getHeapSpaceStatistics;\n\
-export const getHeapStatistics = mod.getHeapStatistics;\n\
-export const isStringOneByteRepresentation = mod.isStringOneByteRepresentation;\n\
-export const promiseHooks = mod.promiseHooks;\n\
-export const queryObjects = mod.queryObjects;\n\
-export const serialize = mod.serialize;\n\
-export const setFlagsFromString = mod.setFlagsFromString;\n\
-export const setHeapSnapshotNearHeapLimit = mod.setHeapSnapshotNearHeapLimit;\n\
-export const startCpuProfile = mod.startCpuProfile;\n\
-export const startupSnapshot = mod.startupSnapshot;\n\
-export const stopCoverage = mod.stopCoverage;\n\
-export const takeCoverage = mod.takeCoverage;\n\
-export const writeHeapSnapshot = mod.writeHeapSnapshot;\n"
-    )
-}
-
-fn render_vm_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-const mod = process.getBuiltinModule?.(\"node:vm\");\n\
-if (!mod) {{\n\
-  throw new Error(\"secure-exec guest vm compatibility module was not initialized\");\n\
-}}\n\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const Script = mod.Script;\n\
-export const createContext = mod.createContext;\n\
-export const isContext = mod.isContext;\n\
-export const runInNewContext = mod.runInNewContext;\n\
-export const runInThisContext = mod.runInThisContext;\n"
-    )
-}
-
-fn render_worker_threads_builtin_asset_source(init_counter_key: &str) -> String {
-    let init_counter_key = format!("{init_counter_key:?}");
-
-    format!(
-        "const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\
-\n\
-function createNotImplementedError(feature) {{\n\
-  const error = new Error(`node:worker_threads ${{feature}} is not available in the secure-exec guest runtime`);\n\
-  error.code = \"ERR_NOT_IMPLEMENTED\";\n\
-  return error;\n\
-}}\n\
-\n\
-class MessagePort {{\n\
-  postMessage() {{}}\n\
-  start() {{}}\n\
-  close() {{}}\n\
-  unref() {{\n\
-    return this;\n\
-  }}\n\
-  ref() {{\n\
-    return this;\n\
-  }}\n\
-}}\n\
-\n\
-class MessageChannel {{\n\
-  constructor() {{\n\
-    this.port1 = new MessagePort();\n\
-    this.port2 = new MessagePort();\n\
-  }}\n\
-}}\n\
-\n\
-class Worker {{\n\
-  constructor() {{\n\
-    throw createNotImplementedError(\"Worker\");\n\
-  }}\n\
-}}\n\
-\n\
-function getEnvironmentData() {{\n\
-  return undefined;\n\
-}}\n\
-\n\
-function markAsUncloneable() {{}}\n\
-\n\
-function markAsUntransferable() {{}}\n\
-\n\
-function moveMessagePortToContext() {{\n\
-  throw createNotImplementedError(\"moveMessagePortToContext\");\n\
-}}\n\
-\n\
-function postMessageToThread() {{\n\
-  throw createNotImplementedError(\"postMessageToThread\");\n\
-}}\n\
-\n\
-function receiveMessageOnPort() {{\n\
-  return undefined;\n\
-}}\n\
-\n\
-function setEnvironmentData() {{}}\n\
-\n\
-const mod = {{\n\
-  BroadcastChannel: globalThis.BroadcastChannel,\n\
-  MessageChannel,\n\
-  MessagePort,\n\
-  SHARE_ENV: Symbol.for(\"secure-exec.worker_threads.SHARE_ENV\"),\n\
-  Worker,\n\
-  getEnvironmentData,\n\
-  isMainThread: true,\n\
-  markAsUncloneable,\n\
-  markAsUntransferable,\n\
-  moveMessagePortToContext,\n\
-  parentPort: null,\n\
-  postMessageToThread,\n\
-  receiveMessageOnPort,\n\
-  resourceLimits: {{}},\n\
-  setEnvironmentData,\n\
-  threadId: 0,\n\
-  workerData: null,\n\
-}};\n\
-\n\
-export const __agentOSInitCount = initCount;\n\
-export default mod;\n\
-export const BroadcastChannel = mod.BroadcastChannel;\n\
-export const MessageChannel = mod.MessageChannel;\n\
-export const MessagePort = mod.MessagePort;\n\
-export const SHARE_ENV = mod.SHARE_ENV;\n\
-export const Worker = mod.Worker;\n\
-export const getEnvironmentData = mod.getEnvironmentData;\n\
-export const isMainThread = mod.isMainThread;\n\
-export const markAsUncloneable = mod.markAsUncloneable;\n\
-export const markAsUntransferable = mod.markAsUntransferable;\n\
-export const moveMessagePortToContext = mod.moveMessagePortToContext;\n\
-export const parentPort = mod.parentPort;\n\
-export const postMessageToThread = mod.postMessageToThread;\n\
-export const receiveMessageOnPort = mod.receiveMessageOnPort;\n\
-export const resourceLimits = mod.resourceLimits;\n\
-export const setEnvironmentData = mod.setEnvironmentData;\n\
-export const threadId = mod.threadId;\n\
-export const workerData = mod.workerData;\n"
-    )
-}
-
-fn render_denied_asset_source(module_specifier: &str) -> String {
-    let message = format!("{module_specifier} is not available in the secure-exec guest runtime");
-    format!(
-        "const error = new Error({message:?});\nerror.code = \"ERR_ACCESS_DENIED\";\nthrow error;\n"
-    )
-}
-
-fn render_path_polyfill_source() -> String {
-    let init_counter_key = format!("{PATH_POLYFILL_INIT_COUNTER_KEY:?}");
-
-    format!(
-        "import path from \"node:path\";\n\n\
-const initCount = (globalThis[{init_counter_key}] ?? 0) + 1;\n\
-globalThis[{init_counter_key}] = initCount;\n\n\
-export const __agentOSInitCount = initCount;\n\
-export const basename = (...args) => path.basename(...args);\n\
-export const dirname = (...args) => path.dirname(...args);\n\
-export const join = (...args) => path.join(...args);\n\
-export const resolve = (...args) => path.resolve(...args);\n\
-export const sep = path.sep;\n\
-export default path;\n"
-    )
-}
-
-fn write_bytes_if_changed(path: &Path, contents: &[u8]) -> Result<(), io::Error> {
-    match fs::read(path) {
-        Ok(existing) if existing == contents => return Ok(()),
-        Ok(_) | Err(_) => {}
-    }
-
-    fs::write(path, contents)
-}
-
-fn write_file_if_changed(path: &Path, contents: &str) -> Result<(), io::Error> {
-    write_bytes_if_changed(path, contents.as_bytes())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::{
-        NodeImportCache, NODE_IMPORT_CACHE_TEST_MATERIALIZE_DELAY_MS, NODE_WASM_RUNNER_SOURCE,
-    };
-    use crate::host_node::node_binary;
-    use serde_json::Value;
-    use std::collections::BTreeSet;
-    use std::fs;
-    use std::io::Write;
-    use std::path::Path;
-    use std::process::{Command, Output, Stdio};
-    use std::sync::atomic::Ordering;
-    use std::time::Duration;
-    use tempfile::tempdir;
-
-    fn assert_node_available() {
-        let output = Command::new(node_binary())
-            .arg("--version")
-            .output()
-            .expect("spawn node --version");
-        assert!(output.status.success(), "node --version failed");
-    }
-
-    fn write_fixture(path: &Path, contents: &str) {
-        fs::write(path, contents).expect("write fixture");
-    }
-
-    fn run_python_runner(
-        import_cache: &NodeImportCache,
-        pyodide_index_url: &Path,
-        code: &str,
-    ) -> Output {
-        run_python_runner_with_env(import_cache, pyodide_index_url, code, &[])
-    }
-
-    fn run_python_runner_with_env(
-        import_cache: &NodeImportCache,
-        pyodide_index_url: &Path,
-        code: &str,
-        env: &[(&str, &str)],
-    ) -> Output {
-        let mut command = Command::new(node_binary());
-        command
-            .arg("--import")
-            .arg(import_cache.timing_bootstrap_path())
-            .arg(import_cache.python_runner_path())
-            .env("AGENTOS_PYODIDE_INDEX_URL", pyodide_index_url)
-            .env(
-                "AGENTOS_PYODIDE_PACKAGE_CACHE_DIR",
-                pyodide_index_url.join("pyodide-package-cache"),
-            )
-            .env("AGENTOS_PYTHON_CODE", code);
-
-        for (key, value) in env {
-            command.env(key, value);
-        }
-
-        command.output().expect("run python runner")
-    }
-
-    fn run_python_runner_prewarm(
-        import_cache: &NodeImportCache,
-        pyodide_index_url: &Path,
-        env: &[(&str, &str)],
-    ) -> Output {
-        let mut command = Command::new(node_binary());
-        command
-            .arg("--import")
-            .arg(import_cache.timing_bootstrap_path())
-            .arg(import_cache.python_runner_path())
-            .env("AGENTOS_PYODIDE_INDEX_URL", pyodide_index_url)
-            .env(
-                "AGENTOS_PYODIDE_PACKAGE_CACHE_DIR",
-                pyodide_index_url.join("pyodide-package-cache"),
-            )
-            .env("AGENTOS_PYTHON_PREWARM_ONLY", "1");
-
-        for (key, value) in env {
-            command.env(key, value);
-        }
-
-        command.output().expect("run python runner prewarm")
-    }
-
-    fn run_python_runner_with_env_and_stdin(
-        import_cache: &NodeImportCache,
-        pyodide_index_url: &Path,
-        code: &str,
-        env: &[(&str, &str)],
-        stdin_chunks: &[&[u8]],
-    ) -> Output {
-        let mut command = Command::new(node_binary());
-        command
-            .arg("--import")
-            .arg(import_cache.timing_bootstrap_path())
-            .arg(import_cache.python_runner_path())
-            .env("AGENTOS_PYODIDE_INDEX_URL", pyodide_index_url)
-            .env(
-                "AGENTOS_PYODIDE_PACKAGE_CACHE_DIR",
-                pyodide_index_url.join("pyodide-package-cache"),
-            )
-            .env("AGENTOS_PYTHON_CODE", code)
-            .stdin(Stdio::piped())
-            .stdout(Stdio::piped())
-            .stderr(Stdio::piped());
-
-        for (key, value) in env {
-            command.env(key, value);
-        }
-
-        let mut child = command.spawn().expect("spawn python runner");
-        {
-            let mut stdin = child.stdin.take().expect("python runner stdin");
-            for chunk in stdin_chunks {
-                stdin
-                    .write_all(chunk)
-                    .expect("write python runner stdin chunk");
-            }
-        }
-
-        child.wait_with_output().expect("wait for python runner")
-    }
-
-    #[test]
-    fn materialized_python_runner_hardens_builtin_access_before_load_pyodide() {
-        assert_node_available();
-
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let pyodide_dir = tempdir().expect("create pyodide fixture dir");
-        write_fixture(
-            &pyodide_dir.path().join("pyodide.mjs"),
-            r#"
-export async function loadPyodide(options) {
-  const capturedFetch = globalThis.fetch;
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync() {
-      try {
-        await capturedFetch('http://127.0.0.1:1/');
-        options.stdout('unexpected');
-      } catch (error) {
-        options.stdout(JSON.stringify({
-          code: error.code ?? null,
-          message: error.message,
-        }));
-      }
-    },
-  };
-}
-"#,
-        );
-        write_fixture(
-            &pyodide_dir.path().join("pyodide-lock.json"),
-            "{\"packages\":[]}\n",
-        );
-
-        let output = run_python_runner(&import_cache, pyodide_dir.path(), "print('hello')");
-        let stdout = String::from_utf8_lossy(&output.stdout);
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse hardening JSON");
-
-        assert_eq!(output.status.code(), Some(0), "stderr: {stderr}");
-        assert_eq!(
-            parsed["code"],
-            Value::String(String::from("ERR_ACCESS_DENIED"))
-        );
-        assert!(
-            parsed["message"]
-                .as_str()
-                .expect("fetch denial message")
-                .contains("network access"),
-            "unexpected stdout: {stdout}"
-        );
-    }
-
-    #[test]
-    fn materialized_python_runner_executes_python_code_via_pyodide_callbacks() {
-        assert_node_available();
-
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let pyodide_dir = tempdir().expect("create pyodide fixture dir");
-        write_fixture(
-            &pyodide_dir.path().join("pyodide.mjs"),
-            r#"
-export async function loadPyodide(options) {
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync(code) {
-      options.stdout(`stdout:${code}`);
-      options.stderr(`stderr:${options.indexURL}:${options.lockFileContents}`);
-    },
-  };
-}
-"#,
-        );
-        write_fixture(
-            &pyodide_dir.path().join("pyodide-lock.json"),
-            "{\"packages\":[]}\n",
-        );
-
-        let output = run_python_runner(&import_cache, pyodide_dir.path(), "print('hello')");
-        let stdout = String::from_utf8_lossy(&output.stdout);
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        let expected_index_path = format!(
-            "stderr:{}{}",
-            pyodide_dir.path().display(),
-            std::path::MAIN_SEPARATOR
-        );
-
-        assert_eq!(output.status.code(), Some(0));
-        assert_eq!(stdout, "stdout:print('hello')\n");
-        assert!(
-            stderr.starts_with(&expected_index_path),
-            "unexpected stderr: {stderr}"
-        );
-        assert!(
-            stderr.contains("{\"packages\":[]}"),
-            "lock file contents should be passed to loadPyodide: {stderr}"
-        );
-    }
-
-    #[test]
-    fn materialized_python_runner_prefers_python_file_over_inline_code() {
-        assert_node_available();
-
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let pyodide_dir = tempdir().expect("create pyodide fixture dir");
-        write_fixture(
-            &pyodide_dir.path().join("pyodide.mjs"),
-            r#"
-export async function loadPyodide(options) {
-  return {
-    FS: {
-      readFile(path, config = {}) {
-        options.stderr(`file:${path}:${config.encoding ?? 'binary'}`);
-        return "print('from file')";
-      },
-    },
-    setStdin(_stdin) {},
-    async runPythonAsync(code) {
-      options.stdout(`stdout:${code}`);
-    },
-  };
-}
-"#,
-        );
-        write_fixture(
-            &pyodide_dir.path().join("pyodide-lock.json"),
-            "{\"packages\":[]}\n",
-        );
-
-        let output = run_python_runner_with_env(
-            &import_cache,
-            pyodide_dir.path(),
-            "print('ignored')",
-            &[("AGENTOS_PYTHON_FILE", "/workspace/script.py")],
-        );
-        let stdout = String::from_utf8_lossy(&output.stdout);
-        let stderr = String::from_utf8_lossy(&output.stderr);
-
-        assert_eq!(output.status.code(), Some(0), "stderr: {stderr}");
-        assert_eq!(stdout, "stdout:print('from file')\n");
-        assert!(
-            stderr.contains("file:/workspace/script.py:utf8"),
-            "unexpected stderr: {stderr}"
-        );
-    }
-
-    #[test]
-    fn materialized_python_runner_prewarm_validates_assets_without_running_guest_code() {
-        assert_node_available();
-
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let pyodide_dir = tempdir().expect("create pyodide fixture dir");
-        write_fixture(
-            &pyodide_dir.path().join("pyodide.mjs"),
-            r#"
-export async function loadPyodide(options) {
-  options.stderr(`prewarm:${options.indexURL}`);
-  return {
-    setStdin() {
-      throw new Error('setStdin should not run during prewarm');
-    },
-    async runPythonAsync() {
-      throw new Error('runPythonAsync should not run during prewarm');
-    },
-  };
-}
-"#,
-        );
-        write_fixture(
-            &pyodide_dir.path().join("pyodide-lock.json"),
-            "{\"packages\":[]}\n",
-        );
-        fs::write(pyodide_dir.path().join("python_stdlib.zip"), b"stub-stdlib")
-            .expect("write stdlib fixture");
-        fs::write(pyodide_dir.path().join("pyodide.asm.wasm"), b"stub-wasm")
-            .expect("write wasm fixture");
-
-        let output = run_python_runner_prewarm(
-            &import_cache,
-            pyodide_dir.path(),
-            &[("AGENTOS_PYTHON_CODE", "print('ignored')")],
-        );
-        let stdout = String::from_utf8_lossy(&output.stdout);
-        let stderr = String::from_utf8_lossy(&output.stderr);
-
-        assert_eq!(output.status.code(), Some(0), "stderr: {stderr}");
-        assert!(stdout.is_empty(), "unexpected stdout: {stdout}");
-        assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-        assert!(
-            !stderr.contains("setStdin should not run during prewarm"),
-            "unexpected stderr: {stderr}"
-        );
-        assert!(
-            !stderr.contains("runPythonAsync should not run during prewarm"),
-            "unexpected stderr: {stderr}"
-        );
-    }
-
-    #[test]
-    fn materialized_python_runner_reports_syntax_errors_to_stderr_and_exits_nonzero() {
-        assert_node_available();
-
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let pyodide_dir = tempdir().expect("create pyodide fixture dir");
-        write_fixture(
-            &pyodide_dir.path().join("pyodide.mjs"),
-            r#"
-export async function loadPyodide() {
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync(code) {
-      throw new Error(`SyntaxError: invalid syntax near ${code}`);
-    },
-  };
-}
-"#,
-        );
-        write_fixture(
-            &pyodide_dir.path().join("pyodide-lock.json"),
-            "{\"packages\":[]}\n",
-        );
-
-        let output = run_python_runner(&import_cache, pyodide_dir.path(), "print(");
-        let stderr = String::from_utf8_lossy(&output.stderr);
-
-        assert_eq!(output.status.code(), Some(1));
-        assert!(
-            stderr.contains("SyntaxError: invalid syntax near print("),
-            "unexpected stderr: {stderr}"
-        );
-    }
-
-    #[test]
-    fn materialized_python_runner_blocks_pyodide_js_escape_modules() {
-        assert_node_available();
-
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let output = run_python_runner(
-            &import_cache,
-            import_cache.pyodide_dist_path(),
-            r#"
-import json
-import js
-import pyodide_js
-
-def capture(action):
-    try:
-        action()
-        return {"ok": True}
-    except Exception as error:
-        return {
-            "ok": False,
-            "type": type(error).__name__,
-            "message": str(error),
-        }
-
-print(json.dumps({
-    "js_process_env": capture(lambda: js.process.env),
-    "js_require": capture(lambda: js.require),
-    "js_process_exit": capture(lambda: js.process.exit),
-    "js_process_kill": capture(lambda: js.process.kill),
-    "js_child_process_builtin": capture(
-        lambda: js.process.getBuiltinModule("node:child_process")
-    ),
-    "js_vm_builtin": capture(
-        lambda: js.process.getBuiltinModule("node:vm")
-    ),
-    "pyodide_js_eval_code": capture(lambda: pyodide_js.eval_code),
-}))
-"#,
-        );
-
-        let stdout = String::from_utf8_lossy(&output.stdout);
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        let parsed: Value =
-            serde_json::from_str(stdout.trim()).expect("parse Python hardening JSON");
-
-        assert_eq!(output.status.code(), Some(0), "stderr: {stderr}");
-
-        for key in [
-            "js_process_env",
-            "js_require",
-            "js_process_exit",
-            "js_process_kill",
-            "js_child_process_builtin",
-            "js_vm_builtin",
-        ] {
-            assert_eq!(parsed[key]["ok"], Value::Bool(false), "stdout: {stdout}");
-            assert_eq!(
-                parsed[key]["type"],
-                Value::String(String::from("RuntimeError"))
-            );
-            assert!(
-                parsed[key]["message"]
-                    .as_str()
-                    .expect("js hardening message")
-                    .contains("js is not available"),
-                "stdout: {stdout}"
-            );
-        }
-
-        assert_eq!(
-            parsed["pyodide_js_eval_code"]["ok"],
-            Value::Bool(false),
-            "stdout: {stdout}"
-        );
-        assert_eq!(
-            parsed["pyodide_js_eval_code"]["type"],
-            Value::String(String::from("RuntimeError"))
-        );
-        assert!(
-            parsed["pyodide_js_eval_code"]["message"]
-                .as_str()
-                .expect("pyodide_js hardening message")
-                .contains("pyodide_js is not available"),
-            "stdout: {stdout}"
-        );
-    }
-
-    #[test]
-    fn materialized_python_runner_exposes_frozen_time_to_python() {
-        assert_node_available();
-
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let frozen_time_ms = 1_704_067_200_123_u64;
-        let output = run_python_runner_with_env(
-            &import_cache,
-            import_cache.pyodide_dist_path(),
-            r#"
-import datetime
-import json
-import time
-
-first_ns = time.time_ns()
-second_ns = time.time_ns()
-utc_now = datetime.datetime.now(datetime.timezone.utc)
-
-print(json.dumps({
-    "first_ns": first_ns,
-    "second_ns": second_ns,
-    "iso": utc_now.isoformat(timespec="milliseconds"),
-}))
-"#,
-            &[("AGENTOS_FROZEN_TIME_MS", "1704067200123")],
-        );
-
-        let stdout = String::from_utf8_lossy(&output.stdout);
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse frozen-time JSON");
-
-        assert_eq!(output.status.code(), Some(0), "stderr: {stderr}");
-        assert_eq!(parsed["first_ns"], parsed["second_ns"], "stdout: {stdout}");
-        let first_ns = parsed["first_ns"]
-            .as_u64()
-            .expect("frozen time.time_ns() value");
-        assert_eq!(first_ns / 1_000_000, frozen_time_ms, "stdout: {stdout}");
-        assert_eq!(
-            parsed["iso"],
-            Value::String(String::from("2024-01-01T00:00:00.123+00:00")),
-            "stdout: {stdout}"
-        );
-    }
-
-    #[test]
-    fn materialized_python_runner_preloads_bundled_packages_from_local_disk() {
-        assert_node_available();
-
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let pyodide_dir = tempdir().expect("create pyodide fixture dir");
-        write_fixture(
-            &pyodide_dir.path().join("pyodide.mjs"),
-            r#"
-export async function loadPyodide(options) {
-  return {
-    setStdin(_stdin) {},
-    async loadPackage(packages) {
-      options.stdout(`packages:${packages.join(',')}`);
-      options.stderr(`base:${options.packageBaseUrl}`);
-    },
-    async runPythonAsync(code) {
-      options.stdout(`code:${code}`);
-    },
-  };
-}
-"#,
-        );
-        write_fixture(
-            &pyodide_dir.path().join("pyodide-lock.json"),
-            "{\"packages\":[]}\n",
-        );
-
-        let output = run_python_runner_with_env(
-            &import_cache,
-            pyodide_dir.path(),
-            "print('hello')",
-            &[("AGENTOS_PYTHON_PRELOAD_PACKAGES", "[\"numpy\",\"pandas\"]")],
-        );
-        let stdout = String::from_utf8_lossy(&output.stdout);
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        let expected_package_base = format!(
-            "base:{}{}",
-            pyodide_dir.path().display(),
-            std::path::MAIN_SEPARATOR
-        );
-
-        assert_eq!(output.status.code(), Some(0));
-        assert_eq!(
-            stdout,
-            "packages:micropip\npackages:numpy,pandas\ncode:print('hello')\n"
-        );
-        assert!(
-            stderr.contains(&expected_package_base),
-            "expected local package base path in stderr, got: {stderr}"
-        );
-    }
-
-    #[test]
-    fn materialized_python_runner_rejects_unknown_preload_packages() {
-        assert_node_available();
-
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let pyodide_dir = tempdir().expect("create pyodide fixture dir");
-        write_fixture(
-            &pyodide_dir.path().join("pyodide.mjs"),
-            r#"
-export async function loadPyodide() {
-  return {
-    setStdin(_stdin) {},
-    async loadPackage() {
-      throw new Error('loadPackage should not be called');
-    },
-    async runPythonAsync(_code) {},
-  };
-}
-"#,
-        );
-        write_fixture(
-            &pyodide_dir.path().join("pyodide-lock.json"),
-            "{\"packages\":[]}\n",
-        );
-
-        let output = run_python_runner_with_env(
-            &import_cache,
-            pyodide_dir.path(),
-            "print('hello')",
-            &[("AGENTOS_PYTHON_PRELOAD_PACKAGES", "[\"requests\"]")],
-        );
-        let stderr = String::from_utf8_lossy(&output.stderr);
-
-        assert_eq!(output.status.code(), Some(1));
-        assert!(
-            stderr.contains("Unsupported bundled Python package \"requests\""),
-            "unexpected stderr: {stderr}"
-        );
-        assert!(
-            stderr.contains("Available packages: numpy, pandas"),
-            "unexpected stderr: {stderr}"
-        );
-        assert!(
-            !stderr.contains("loadPackage should not be called"),
-            "runner should validate packages before calling loadPackage: {stderr}"
-        );
-    }
-
-    #[test]
-    fn materialized_python_runner_streams_multiple_stdin_reads_through_pyodide() {
-        assert_node_available();
-
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let pyodide_dir = tempdir().expect("create pyodide fixture dir");
-        write_fixture(
-            &pyodide_dir.path().join("pyodide.mjs"),
-            r#"
-const decoder = new TextDecoder();
-
-export async function loadPyodide(options) {
-  let stdin = null;
-
-  function createInputReader() {
-    let buffered = '';
-
-    return () => {
-      while (true) {
-        const newlineIndex = buffered.indexOf('\n');
-        if (newlineIndex >= 0) {
-          const line = buffered.slice(0, newlineIndex);
-          buffered = buffered.slice(newlineIndex + 1);
-          return line;
-        }
-
-        const chunk = new Uint8Array(64);
-        const bytesRead = stdin.read(chunk);
-        if (bytesRead === 0) {
-          const tail = buffered;
-          buffered = '';
-          return tail;
-        }
-
-        buffered += decoder.decode(chunk.subarray(0, bytesRead));
-      }
-    };
-  }
-
-  return {
-    setStdin(config) {
-      stdin = config;
-    },
-    async runPythonAsync(code) {
-      const input = createInputReader();
-      options.stdout(`first:${input()}`);
-      options.stdout(`second:${input()}`);
-      options.stdout(`tail:${JSON.stringify(input())}`);
-      options.stdout(`code:${code}`);
-    },
-  };
-}
-"#,
-        );
-        write_fixture(
-            &pyodide_dir.path().join("pyodide-lock.json"),
-            "{\"packages\":[]}\n",
-        );
-
-        let output = run_python_runner_with_env_and_stdin(
-            &import_cache,
-            pyodide_dir.path(),
-            "print('interactive')",
-            &[],
-            &[b"first line\n", b"second line\n"],
-        );
-        let stdout = String::from_utf8_lossy(&output.stdout);
-        let stderr = String::from_utf8_lossy(&output.stderr);
-
-        assert_eq!(output.status.code(), Some(0), "stderr: {stderr}");
-        assert!(
-            stdout.contains("first:first line\n"),
-            "unexpected stdout: {stdout}"
-        );
-        assert!(
-            stdout.contains("second:second line\n"),
-            "unexpected stdout: {stdout}"
-        );
-        assert!(stdout.contains("tail:\"\""), "unexpected stdout: {stdout}");
-        assert!(
-            stdout.contains("code:print('interactive')"),
-            "unexpected stdout: {stdout}"
-        );
-    }
-
-    #[test]
-    fn ensure_materialized_writes_bundled_pyodide_distribution_assets() {
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        for file_name in [
-            "pyodide.mjs",
-            "pyodide.asm.js",
-            "pyodide.asm.wasm",
-            "pyodide-lock.json",
-            "python_stdlib.zip",
-            "numpy-2.2.5-cp313-cp313-pyodide_2025_0_wasm32.whl",
-            "pandas-2.3.3-cp313-cp313-pyodide_2025_0_wasm32.whl",
-            "python_dateutil-2.9.0.post0-py2.py3-none-any.whl",
-            "pytz-2025.2-py2.py3-none-any.whl",
-            "six-1.17.0-py2.py3-none-any.whl",
-        ] {
-            assert!(
-                import_cache.pyodide_dist_path().join(file_name).is_file(),
-                "expected bundled Pyodide asset {file_name} to be materialized"
-            );
-        }
-    }
-
-    #[test]
-    fn ensure_materialized_honors_configured_timeout() {
-        let temp_root = tempdir().expect("create node import cache temp root");
-        let import_cache = NodeImportCache::new_in(temp_root.path().to_path_buf());
-
-        NODE_IMPORT_CACHE_TEST_MATERIALIZE_DELAY_MS.store(50, Ordering::Relaxed);
-        let error = import_cache
-            .ensure_materialized_with_timeout(Duration::from_millis(5))
-            .expect_err("materialization should time out");
-        NODE_IMPORT_CACHE_TEST_MATERIALIZE_DELAY_MS.store(0, Ordering::Relaxed);
-
-        assert_eq!(error.kind(), std::io::ErrorKind::TimedOut);
-        assert!(
-            error
-                .to_string()
-                .contains("timed out materializing node import cache"),
-            "unexpected error: {error}"
-        );
-
-        std::thread::sleep(Duration::from_millis(75));
-    }
-
-    #[test]
-    fn ensure_materialized_skips_repeated_materialization_after_success() {
-        let temp_root = tempdir().expect("create node import cache temp root");
-        let import_cache = NodeImportCache::new_in(temp_root.path().to_path_buf());
-
-        import_cache
-            .ensure_materialized()
-            .expect("initial materialization should succeed");
-
-        NODE_IMPORT_CACHE_TEST_MATERIALIZE_DELAY_MS.store(50, Ordering::Relaxed);
-        let result = import_cache.ensure_materialized_with_timeout(Duration::from_millis(5));
-        NODE_IMPORT_CACHE_TEST_MATERIALIZE_DELAY_MS.store(0, Ordering::Relaxed);
-        result.expect("second materialization should use memoized success");
-    }
-
-    #[test]
-    fn new_in_cleans_stale_temp_roots_without_touching_unrelated_entries() {
-        let temp_root = tempdir().expect("create node import cache temp root");
-        let stale_cache_dir = temp_root
-            .path()
-            .join("agentos-node-import-cache-stale-test");
-        let unrelated_dir = temp_root.path().join("keep-me");
-        fs::create_dir_all(&stale_cache_dir).expect("create stale cache dir");
-        fs::create_dir_all(&unrelated_dir).expect("create unrelated dir");
-        fs::write(stale_cache_dir.join("state.json"), b"stale").expect("seed stale cache");
-
-        let import_cache = NodeImportCache::new_in(temp_root.path().to_path_buf());
-
-        assert!(
-            !stale_cache_dir.exists(),
-            "expected stale cache dir to be removed"
-        );
-        assert!(unrelated_dir.exists(), "expected unrelated dir to remain");
-        assert!(
-            import_cache.root_dir.starts_with(temp_root.path()),
-            "expected import cache root to stay inside the configured temp root"
-        );
-    }
-
-    #[test]
-    fn materialized_loader_prunes_persisted_resolution_cache_state() {
-        assert_node_available();
-
-        let temp_root = tempdir().expect("create node import cache temp root");
-        let workspace = tempdir().expect("create loader test workspace");
-        let import_cache = NodeImportCache::new_in(temp_root.path().to_path_buf());
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let driver_path = workspace.path().join("drive-loader-cache.mjs");
-        write_fixture(
-            &driver_path,
-            r#"
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-
-const [loaderPath, workspaceRoot] = process.argv.slice(2);
-const loader = await import(`${pathToFileURL(loaderPath).href}?case=${process.pid}-${Date.now()}`);
-const parentURL = pathToFileURL(path.join(workspaceRoot, 'entry.mjs')).href;
-
-for (let index = 0; index < 600; index += 1) {
-  const specifier = `pkg-${index}`;
-  const resolvedPath = path.join(workspaceRoot, 'node_modules', specifier, 'index.mjs');
-  await loader.resolve(specifier, { parentURL }, async () => ({
-    url: pathToFileURL(resolvedPath).href,
-    format: 'module',
-  }));
-}
-"#,
-        );
-
-        let output = Command::new(node_binary())
-            .arg(&driver_path)
-            .arg(&import_cache.loader_path)
-            .arg(workspace.path())
-            .env("AGENTOS_NODE_IMPORT_CACHE_PATH", import_cache.cache_path())
-            .env(
-                "AGENTOS_NODE_IMPORT_CACHE_ASSET_ROOT",
-                import_cache.asset_root(),
-            )
-            .output()
-            .expect("run loader cache driver");
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        assert_eq!(output.status.code(), Some(0), "stderr: {stderr}");
-
-        let state: Value = serde_json::from_str(
-            &fs::read_to_string(import_cache.cache_path()).expect("read cache state"),
-        )
-        .expect("parse cache state");
-        let resolutions = state["resolutions"]
-            .as_object()
-            .expect("resolution cache object");
-
-        assert_eq!(resolutions.len(), 512);
-        assert!(
-            resolutions.keys().any(|key| key.contains("pkg-599")),
-            "newest resolution should be retained"
-        );
-        assert!(
-            !resolutions.keys().any(|key| key.contains("pkg-0\"")),
-            "oldest resolution should be pruned"
-        );
-    }
-
-    #[test]
-    fn materialized_loader_ignores_oversized_state_during_flush_merge() {
-        assert_node_available();
-
-        let temp_root = tempdir().expect("create node import cache temp root");
-        let workspace = tempdir().expect("create loader test workspace");
-        let import_cache = NodeImportCache::new_in(temp_root.path().to_path_buf());
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-        fs::create_dir_all(import_cache.cache_path().parent().expect("cache parent"))
-            .expect("create cache parent");
-        fs::write(import_cache.cache_path(), vec![b' '; 5 * 1024 * 1024])
-            .expect("seed oversized cache state");
-
-        let driver_path = workspace.path().join("drive-oversized-state.mjs");
-        write_fixture(
-            &driver_path,
-            r#"
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-
-const [loaderPath, workspaceRoot] = process.argv.slice(2);
-const loader = await import(`${pathToFileURL(loaderPath).href}?case=oversized-${process.pid}-${Date.now()}`);
-const parentURL = pathToFileURL(path.join(workspaceRoot, 'entry.mjs')).href;
-await loader.resolve('pkg-fresh', { parentURL }, async () => ({
-  url: pathToFileURL(path.join(workspaceRoot, 'node_modules/pkg-fresh/index.mjs')).href,
-  format: 'module',
-}));
-"#,
-        );
-
-        let output = Command::new(node_binary())
-            .arg(&driver_path)
-            .arg(&import_cache.loader_path)
-            .arg(workspace.path())
-            .env("AGENTOS_NODE_IMPORT_CACHE_PATH", import_cache.cache_path())
-            .env(
-                "AGENTOS_NODE_IMPORT_CACHE_ASSET_ROOT",
-                import_cache.asset_root(),
-            )
-            .output()
-            .expect("run oversized state driver");
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        assert_eq!(output.status.code(), Some(0), "stderr: {stderr}");
-
-        let state_contents =
-            fs::read_to_string(import_cache.cache_path()).expect("read rewritten cache state");
-        assert!(
-            state_contents.len() < 4 * 1024 * 1024,
-            "cache state should be rewritten below the hard limit"
-        );
-        let state: Value = serde_json::from_str(&state_contents).expect("parse cache state");
-        assert_eq!(
-            state["resolutions"]
-                .as_object()
-                .expect("resolution cache object")
-                .len(),
-            1
-        );
-    }
-
-    #[test]
-    fn materialized_loader_prunes_unreferenced_projected_source_files() {
-        assert_node_available();
-
-        let temp_root = tempdir().expect("create node import cache temp root");
-        let workspace = tempdir().expect("create loader test workspace");
-        let import_cache = NodeImportCache::new_in(temp_root.path().to_path_buf());
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-        let node_modules = workspace.path().join("node_modules");
-        fs::create_dir_all(&node_modules).expect("create node_modules");
-        for index in 0..520 {
-            let package_dir = node_modules.join(format!("pkg-{index}"));
-            fs::create_dir_all(&package_dir).expect("create package dir");
-            fs::write(
-                package_dir.join("index.mjs"),
-                format!("import fs from 'node:fs';\nexport const value = {index};\n"),
-            )
-            .expect("write package source");
-        }
-
-        let driver_path = workspace.path().join("drive-projected-source-cache.mjs");
-        write_fixture(
-            &driver_path,
-            r#"
-import path from 'node:path';
-import { pathToFileURL } from 'node:url';
-
-const [loaderPath, workspaceRoot] = process.argv.slice(2);
-const loader = await import(`${pathToFileURL(loaderPath).href}?case=projected-${process.pid}-${Date.now()}`);
-
-for (let index = 0; index < 520; index += 1) {
-  const filePath = path.join(workspaceRoot, 'node_modules', `pkg-${index}`, 'index.mjs');
-  await loader.load(pathToFileURL(filePath).href, { format: 'module' }, async () => {
-    throw new Error('nextLoad should not run for projected package sources');
-  });
-}
-"#,
-        );
-
-        let guest_path_mappings = format!(
-            r#"[{{"guestPath":"/root/node_modules","hostPath":"{}"}}]"#,
-            node_modules.display()
-        );
-        let output = Command::new(node_binary())
-            .arg(&driver_path)
-            .arg(&import_cache.loader_path)
-            .arg(workspace.path())
-            .env("AGENTOS_NODE_IMPORT_CACHE_PATH", import_cache.cache_path())
-            .env(
-                "AGENTOS_NODE_IMPORT_CACHE_ASSET_ROOT",
-                import_cache.asset_root(),
-            )
-            .env("AGENTOS_GUEST_PATH_MAPPINGS", guest_path_mappings)
-            .output()
-            .expect("run projected source cache driver");
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        assert_eq!(output.status.code(), Some(0), "stderr: {stderr}");
-
-        let projected_source_root = import_cache
-            .cache_path()
-            .parent()
-            .expect("cache parent")
-            .join("projected-sources");
-        let cached_file_count = fs::read_dir(&projected_source_root)
-            .expect("read projected source cache")
-            .count();
-        assert_eq!(cached_file_count, 512);
-    }
-
-    #[test]
-    fn ensure_materialized_writes_denied_builtin_assets_for_hardened_modules() {
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let denied_root = import_cache.asset_root().join("denied");
-        let actual = fs::read_dir(&denied_root)
-            .expect("read denied builtin assets")
-            .map(|entry| {
-                entry
-                    .expect("denied builtin asset entry")
-                    .path()
-                    .file_stem()
-                    .expect("denied builtin asset file stem")
-                    .to_string_lossy()
-                    .into_owned()
-            })
-            .collect::<BTreeSet<_>>();
-        let expected = BTreeSet::from([
-            String::from("child_process"),
-            String::from("cluster"),
-            String::from("dgram"),
-            String::from("http"),
-            String::from("http2"),
-            String::from("https"),
-            String::from("inspector"),
-            String::from("module"),
-            String::from("net"),
-            String::from("trace_events"),
-        ]);
-
-        assert_eq!(actual, expected);
-
-        let module_asset =
-            fs::read_to_string(denied_root.join("module.mjs")).expect("read module denied asset");
-        let trace_events_asset = fs::read_to_string(denied_root.join("trace_events.mjs"))
-            .expect("read trace_events denied asset");
-
-        assert!(module_asset.contains("node:module is not available"));
-        assert!(trace_events_asset.contains("ERR_ACCESS_DENIED"));
-    }
-
-    #[test]
-    fn ensure_materialized_writes_v8_vm_and_worker_threads_builtin_assets() {
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let builtins_root = import_cache.asset_root().join("builtins");
-        let v8_asset =
-            fs::read_to_string(builtins_root.join("v8.mjs")).expect("read v8 builtin asset");
-        let vm_asset =
-            fs::read_to_string(builtins_root.join("vm.mjs")).expect("read vm builtin asset");
-        let worker_threads_asset = fs::read_to_string(builtins_root.join("worker-threads.mjs"))
-            .expect("read worker_threads builtin asset");
-
-        assert!(v8_asset.contains("process.getBuiltinModule?.(\"node:v8\")"));
-        assert!(v8_asset.contains("export const cachedDataVersionTag = mod.cachedDataVersionTag;"));
-        assert!(vm_asset.contains("process.getBuiltinModule?.(\"node:vm\")"));
-        assert!(vm_asset.contains("export const runInThisContext = mod.runInThisContext;"));
-        assert!(worker_threads_asset.contains("class Worker"));
-        assert!(worker_threads_asset.contains("export const isMainThread = mod.isMainThread;"));
-    }
-
-    #[test]
-    fn ensure_materialized_writes_async_and_diagnostics_builtin_assets() {
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let builtins_root = import_cache.asset_root().join("builtins");
-        let async_hooks_asset = fs::read_to_string(builtins_root.join("async-hooks.mjs"))
-            .expect("read async_hooks builtin asset");
-        let diagnostics_asset = fs::read_to_string(builtins_root.join("diagnostics-channel.mjs"))
-            .expect("read diagnostics_channel builtin asset");
-
-        assert!(async_hooks_asset.contains("class AsyncLocalStorage"));
-        assert!(async_hooks_asset.contains("function createHook()"));
-        assert!(diagnostics_asset.contains("function channel(name = '')"));
-        assert!(diagnostics_asset.contains("class Channel"));
-        assert!(diagnostics_asset.contains("function tracingChannel(name = '')"));
-    }
-
-    #[test]
-    fn ensure_materialized_writes_os_builtin_asset() {
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let os_asset =
-            fs::read_to_string(import_cache.asset_root().join("builtins").join("os.mjs"))
-                .expect("read os builtin asset");
-
-        assert!(os_asset.contains("__agentOSBuiltinOs"));
-        assert!(os_asset.contains("export const hostname = mod.hostname"));
-        assert!(os_asset.contains("export const userInfo = mod.userInfo"));
-    }
-
-    #[test]
-    fn ensure_materialized_writes_http_builtin_assets() {
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let builtins_root = import_cache.asset_root().join("builtins");
-        let http_asset =
-            fs::read_to_string(builtins_root.join("http.mjs")).expect("read http builtin asset");
-        let http2_asset =
-            fs::read_to_string(builtins_root.join("http2.mjs")).expect("read http2 builtin asset");
-        let https_asset =
-            fs::read_to_string(builtins_root.join("https.mjs")).expect("read https builtin asset");
-
-        assert!(http_asset.contains("__agentOSBuiltinHttp"));
-        assert!(http_asset.contains("export const request = mod.request"));
-        assert!(http2_asset.contains("__agentOSBuiltinHttp2"));
-        assert!(http2_asset.contains("export const connect = mod.connect"));
-        assert!(https_asset.contains("__agentOSBuiltinHttps"));
-        assert!(https_asset.contains("export const createServer = mod.createServer"));
-    }
-
-    #[test]
-    fn ensure_materialized_writes_net_builtin_asset() {
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let net_asset =
-            fs::read_to_string(import_cache.asset_root().join("builtins").join("net.mjs"))
-                .expect("read net builtin asset");
-
-        assert!(net_asset.contains("__agentOSBuiltinNet"));
-        assert!(net_asset.contains("export const connect = mod.connect"));
-        assert!(net_asset.contains("export const createServer = mod.createServer"));
-    }
-
-    #[test]
-    fn ensure_materialized_writes_dgram_builtin_asset() {
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let dgram_asset =
-            fs::read_to_string(import_cache.asset_root().join("builtins").join("dgram.mjs"))
-                .expect("read dgram builtin asset");
-
-        assert!(dgram_asset.contains("__agentOSBuiltinDgram"));
-        assert!(dgram_asset.contains("export const Socket = mod.Socket"));
-        assert!(dgram_asset.contains("export const createSocket = mod.createSocket"));
-    }
-
-    #[test]
-    fn ensure_materialized_writes_dns_builtin_asset() {
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let dns_asset =
-            fs::read_to_string(import_cache.asset_root().join("builtins").join("dns.mjs"))
-                .expect("read dns builtin asset");
-
-        assert!(dns_asset.contains("__agentOSBuiltinDns"));
-        assert!(dns_asset.contains("export const Resolver = mod.Resolver"));
-        assert!(dns_asset.contains("export const lookup = mod.lookup"));
-        assert!(dns_asset.contains("export const resolve4 = mod.resolve4"));
-    }
-
-    #[test]
-    fn ensure_materialized_writes_dns_promises_builtin_asset() {
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let dns_promises_asset = fs::read_to_string(
-            import_cache
-                .asset_root()
-                .join("builtins")
-                .join("dns-promises.mjs"),
-        )
-        .expect("read dns promises builtin asset");
-
-        assert!(dns_promises_asset.contains("__agentOSBuiltinDns.promises"));
-        assert!(dns_promises_asset.contains("export const Resolver = mod.Resolver"));
-        assert!(dns_promises_asset.contains("export const resolve4 = mod.resolve4"));
-    }
-
-    #[test]
-    fn wasm_runner_preopens_guest_cwd_before_root() {
-        let cwd_index = NODE_WASM_RUNNER_SOURCE
-            .find("preopens[cwdMount] = createPreopen(HOST_CWD, cwdReadOnly);")
-            .expect("runner should preopen the guest cwd");
-        let root_index = NODE_WASM_RUNNER_SOURCE
-            .find("preopens['/'] = createPreopen(rootMapping.hostPath, rootMapping.readOnly);")
-            .expect("runner should preopen the guest root");
-
-        assert!(cwd_index < root_index);
-    }
-
-    #[test]
-    fn wasm_runner_preserves_read_only_mappings_in_preopens() {
-        assert!(NODE_WASM_RUNNER_SOURCE
-            .contains("? { guestPath, hostPath, readOnly: entry.readOnly === true }"));
-        assert!(NODE_WASM_RUNNER_SOURCE.contains("readOnly: readOnly === true,"));
-        assert!(NODE_WASM_RUNNER_SOURCE.contains("resolveModuleGuestPathToHostMapping"));
-        assert!(NODE_WASM_RUNNER_SOURCE.contains("rightsBase: READ_ONLY_PREOPEN_RIGHTS_BASE,"));
-        assert!(NODE_WASM_RUNNER_SOURCE
-            .contains("preopens[guestPath] = createPreopen(mapping.hostPath, mapping.readOnly);"));
-        assert!(NODE_WASM_RUNNER_SOURCE.contains("const cwdReadOnly = readOnlyForCwd(guestCwd);"));
-        assert!(NODE_WASM_RUNNER_SOURCE
-            .contains("preopens[cwdMount] = createPreopen(HOST_CWD, cwdReadOnly);"));
-        assert!(
-            NODE_WASM_RUNNER_SOURCE.contains("if (mapping.readOnly) {\n        return 1;\n      }")
-        );
-        assert!(NODE_WASM_RUNNER_SOURCE.contains("readOnly: preopenSpec?.readOnly === true,"));
-        assert!(NODE_WASM_RUNNER_SOURCE
-            .contains("resolveModuleGuestPathToHostMapping(guestPath)?.readOnly === true"));
-        assert!(NODE_WASM_RUNNER_SOURCE
-            .contains("if (handle.readOnly === true) {\n      return WASI_ERRNO_ROFS;\n    }"));
-    }
-
-    #[test]
-    fn ensure_materialized_writes_tls_builtin_asset() {
-        let import_cache = NodeImportCache::default();
-        import_cache
-            .ensure_materialized()
-            .expect("materialize node import cache");
-
-        let tls_asset =
-            fs::read_to_string(import_cache.asset_root().join("builtins").join("tls.mjs"))
-                .expect("read tls builtin asset");
-
-        assert!(tls_asset.contains("__agentOSBuiltinTls"));
-        assert!(tls_asset.contains("export const connect = mod.connect"));
-        assert!(tls_asset.contains("export const createServer = mod.createServer"));
-    }
-}
diff --git a/crates/execution/src/python.rs b/crates/execution/src/python.rs
deleted file mode 100644
index b25a1353b..000000000
--- a/crates/execution/src/python.rs
+++ /dev/null
@@ -1,2194 +0,0 @@
-use crate::common::{encode_json_string, frozen_time_ms};
-use crate::javascript::{
-    CreateJavascriptContextRequest, GuestRuntimeConfig, JavascriptExecution,
-    JavascriptExecutionEngine, JavascriptExecutionError, JavascriptExecutionEvent,
-    JavascriptExecutionLimits, JavascriptSyncRpcRequest, StartJavascriptExecutionRequest,
-};
-use crate::node_import_cache::{NodeImportCache, NODE_IMPORT_CACHE_ASSET_ROOT_ENV};
-use crate::runtime_support::{
-    env_flag_enabled, file_fingerprint, resolve_execution_path, warmup_marker_path,
-    NODE_DISABLE_COMPILE_CACHE_ENV, NODE_FROZEN_TIME_ENV,
-};
-use crate::v8_runtime;
-use base64::Engine as _;
-use serde::{Deserialize, Serialize};
-use serde_json::{json, Value};
-use std::collections::BTreeMap;
-use std::fmt;
-use std::fs;
-use std::os::unix::fs::MetadataExt;
-use std::path::{Component, Path, PathBuf};
-use std::sync::{Arc, Mutex};
-use std::thread;
-use std::time::{Duration, Instant};
-const NODE_ALLOW_PROCESS_BINDINGS_ENV: &str = "AGENTOS_ALLOW_PROCESS_BINDINGS";
-const NODE_GUEST_PATH_MAPPINGS_ENV: &str = "AGENTOS_GUEST_PATH_MAPPINGS";
-const NODE_SYNC_RPC_DATA_BYTES_ENV: &str = "AGENTOS_NODE_SYNC_RPC_DATA_BYTES";
-const PYODIDE_INDEX_URL_ENV: &str = "AGENTOS_PYODIDE_INDEX_URL";
-const PYODIDE_PACKAGE_BASE_URL_ENV: &str = "AGENTOS_PYODIDE_PACKAGE_BASE_URL";
-const PYODIDE_PACKAGE_CACHE_DIR_ENV: &str = "AGENTOS_PYODIDE_PACKAGE_CACHE_DIR";
-const PYODIDE_GUEST_ROOT: &str = "/__agentos_pyodide";
-const PYODIDE_CACHE_GUEST_ROOT: &str = "/__agentos_pyodide_cache";
-const PYTHON_CODE_ENV: &str = "AGENTOS_PYTHON_CODE";
-const PYTHON_FILE_ENV: &str = "AGENTOS_PYTHON_FILE";
-const PYTHON_PREWARM_ONLY_ENV: &str = "AGENTOS_PYTHON_PREWARM_ONLY";
-const PYTHON_WARMUP_DEBUG_ENV: &str = "AGENTOS_PYTHON_WARMUP_DEBUG";
-const PYTHON_WARMUP_METRICS_PREFIX: &str = "__AGENTOS_PYTHON_WARMUP_METRICS__:";
-const PYTHON_WARMUP_MARKER_VERSION: &str = "2";
-const DEFAULT_PYTHON_OUTPUT_BUFFER_MAX_BYTES: usize = 1024 * 1024;
-const DEFAULT_PYTHON_EXECUTION_TIMEOUT_MS: u64 = 5 * 60 * 1000;
-const DEFAULT_PYTHON_MAX_OLD_SPACE_MB: usize = 0;
-const DEFAULT_PYTHON_VFS_RPC_TIMEOUT_MS: u64 = 30_000;
-const PYTHON_SYNC_RPC_DATA_BYTES: usize = 20 * 1024 * 1024;
-const PYTHON_SYNC_RPC_WAIT_TIMEOUT_MS: u64 = 120_000;
-const PYTHON_PREWARM_TIMEOUT: Duration = Duration::from_secs(120);
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum PythonVfsRpcMethod {
-    Read,
-    Write,
-    Stat,
-    Lstat,
-    ReadDir,
-    Mkdir,
-    Unlink,
-    Rmdir,
-    Rename,
-    Symlink,
-    ReadLink,
-    Setattr,
-    HttpRequest,
-    DnsLookup,
-    SubprocessRun,
-    SocketConnect,
-    SocketSend,
-    SocketRecv,
-    SocketClose,
-    UdpCreate,
-    UdpSendto,
-    UdpRecvfrom,
-}
-
-impl PythonVfsRpcMethod {
-    fn from_wire(value: &str) -> Option<Self> {
-        match value {
-            "fsRead" => Some(Self::Read),
-            "fsWrite" => Some(Self::Write),
-            "fsStat" => Some(Self::Stat),
-            "fsLstat" => Some(Self::Lstat),
-            "fsReaddir" => Some(Self::ReadDir),
-            "fsMkdir" => Some(Self::Mkdir),
-            "fsUnlink" => Some(Self::Unlink),
-            "fsRmdir" => Some(Self::Rmdir),
-            "fsRename" => Some(Self::Rename),
-            "fsSymlink" => Some(Self::Symlink),
-            "fsReadlink" => Some(Self::ReadLink),
-            "fsSetattr" => Some(Self::Setattr),
-            "httpRequest" => Some(Self::HttpRequest),
-            "dnsLookup" => Some(Self::DnsLookup),
-            "subprocessRun" => Some(Self::SubprocessRun),
-            "socketConnect" => Some(Self::SocketConnect),
-            "socketSend" => Some(Self::SocketSend),
-            "socketRecv" => Some(Self::SocketRecv),
-            "socketClose" => Some(Self::SocketClose),
-            "udpCreate" => Some(Self::UdpCreate),
-            "udpSendto" => Some(Self::UdpSendto),
-            "udpRecvfrom" => Some(Self::UdpRecvfrom),
-            _ => None,
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PythonVfsRpcRequest {
-    pub id: u64,
-    pub method: PythonVfsRpcMethod,
-    pub path: String,
-    /// Second path for `Rename` (the destination); `None` for other methods.
-    pub destination: Option<String>,
-    /// Symlink target (the path the link points at), for `Symlink`.
-    pub target: Option<String>,
-    /// `Setattr` metadata fields (each applied only when present).
-    pub mode: Option<u32>,
-    pub uid: Option<u32>,
-    pub gid: Option<u32>,
-    pub atime_ms: Option<u64>,
-    pub mtime_ms: Option<u64>,
-    pub content_base64: Option<String>,
-    pub recursive: bool,
-    pub url: Option<String>,
-    pub http_method: Option<String>,
-    pub headers: BTreeMap<String, String>,
-    pub body_base64: Option<String>,
-    pub hostname: Option<String>,
-    pub family: Option<u8>,
-    /// Port for socket connect/sendto.
-    pub port: Option<u16>,
-    /// Socket handle for send/recv/close/sendto/recvfrom.
-    pub socket_id: Option<u64>,
-    pub command: Option<String>,
-    pub args: Vec<String>,
-    pub cwd: Option<String>,
-    pub env: BTreeMap<String, String>,
-    pub shell: bool,
-    pub max_buffer: Option<usize>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PythonVfsRpcStat {
-    pub mode: u32,
-    pub size: u64,
-    pub is_directory: bool,
-    pub is_symbolic_link: bool,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum PythonVfsRpcResponsePayload {
-    Empty,
-    Read {
-        content_base64: String,
-    },
-    Stat {
-        stat: PythonVfsRpcStat,
-    },
-    ReadDir {
-        entries: Vec<String>,
-    },
-    Http {
-        status: u16,
-        reason: String,
-        url: String,
-        headers: BTreeMap<String, Vec<String>>,
-        body_base64: String,
-    },
-    DnsLookup {
-        addresses: Vec<String>,
-    },
-    SubprocessRun {
-        exit_code: i32,
-        stdout: String,
-        stderr: String,
-        max_buffer_exceeded: bool,
-    },
-    SocketCreated {
-        socket_id: u64,
-    },
-    SocketSent {
-        bytes_sent: usize,
-    },
-    SocketReceived {
-        data_base64: String,
-        closed: bool,
-        timed_out: bool,
-    },
-    UdpReceived {
-        data_base64: String,
-        host: String,
-        port: u16,
-        timed_out: bool,
-    },
-    SymlinkTarget {
-        target: String,
-    },
-}
-
-#[derive(Debug, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct PythonVfsBridgeRequestWire {
-    method: String,
-    #[serde(default)]
-    path: String,
-    #[serde(default)]
-    destination: Option<String>,
-    #[serde(default)]
-    target: Option<String>,
-    // JS numbers cross the bridge as f64; accept that and narrow below.
-    #[serde(default)]
-    mode: Option<f64>,
-    #[serde(default)]
-    uid: Option<f64>,
-    #[serde(default)]
-    gid: Option<f64>,
-    #[serde(default, rename = "atimeMs")]
-    atime_ms: Option<f64>,
-    #[serde(default, rename = "mtimeMs")]
-    mtime_ms: Option<f64>,
-    #[serde(default)]
-    content_base64: Option<String>,
-    #[serde(default)]
-    recursive: bool,
-    #[serde(default)]
-    url: Option<String>,
-    #[serde(default, rename = "httpMethod")]
-    http_method: Option<String>,
-    #[serde(default)]
-    headers: BTreeMap<String, String>,
-    #[serde(default, rename = "bodyBase64")]
-    body_base64: Option<String>,
-    #[serde(default)]
-    hostname: Option<String>,
-    #[serde(default)]
-    family: Option<u8>,
-    #[serde(default)]
-    port: Option<u16>,
-    #[serde(default, rename = "socketId")]
-    socket_id: Option<u64>,
-    #[serde(default)]
-    command: Option<String>,
-    #[serde(default)]
-    args: Vec<String>,
-    #[serde(default)]
-    cwd: Option<String>,
-    #[serde(default)]
-    env: BTreeMap<String, String>,
-    #[serde(default)]
-    shell: bool,
-    #[serde(default, rename = "maxBuffer")]
-    max_buffer: Option<usize>,
-}
-
-#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
-#[serde(rename_all = "camelCase")]
-struct PythonGuestPathMappingWire {
-    guest_path: String,
-    host_path: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct CreatePythonContextRequest {
-    pub vm_id: String,
-    pub pyodide_dist_path: PathBuf,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PythonContext {
-    pub context_id: String,
-    pub vm_id: String,
-    pub pyodide_dist_path: PathBuf,
-}
-
-/// Per-execution Python runtime limits, carried as typed fields rather than
-/// `AGENTOS_*` env vars. Populated by the sidecar from the per-VM `VmLimits`
-/// (originating from `CreateVmConfig` on the BARE wire); `None` selects the
-/// engine default. See the env-vs-wire rule in `crates/sidecar/CLAUDE.md`.
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct PythonExecutionLimits {
-    /// Captured-output buffer cap in bytes. `None` keeps the engine default.
-    pub output_buffer_max_bytes: Option<usize>,
-    /// Execution wall-clock cap in ms. `None` keeps the engine default;
-    /// `Some(0)` disables the timeout.
-    pub execution_timeout_ms: Option<u64>,
-    /// Pyodide V8 old-space cap in MB (`0` keeps the V8 default). `None` keeps
-    /// the engine default.
-    pub max_old_space_mb: Option<usize>,
-    /// VFS sync-RPC wait ceiling in ms. `None` keeps the engine default.
-    pub vfs_rpc_timeout_ms: Option<u64>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct StartPythonExecutionRequest {
-    pub vm_id: String,
-    pub context_id: String,
-    pub code: String,
-    pub file_path: Option<PathBuf>,
-    pub env: BTreeMap<String, String>,
-    pub cwd: PathBuf,
-    /// Per-execution runtime limits (see [`PythonExecutionLimits`]).
-    pub limits: PythonExecutionLimits,
-    /// Per-execution guest-runtime config, forwarded to the Pyodide runner's JS
-    /// execution (see [`GuestRuntimeConfig`]).
-    pub guest_runtime: GuestRuntimeConfig,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum PythonExecutionEvent {
-    Stdout(Vec<u8>),
-    Stderr(Vec<u8>),
-    JavascriptSyncRpcRequest(JavascriptSyncRpcRequest),
-    VfsRpcRequest(Box<PythonVfsRpcRequest>),
-    Exited(i32),
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PythonExecutionResult {
-    pub execution_id: String,
-    pub exit_code: i32,
-    pub stdout: Vec<u8>,
-    pub stderr: Vec<u8>,
-}
-
-#[derive(Debug)]
-pub enum PythonExecutionError {
-    MissingContext(String),
-    VmMismatch {
-        expected: String,
-        found: String,
-    },
-    /// Guest Python is unavailable because this build was compiled without the
-    /// bundled Pyodide runtime assets (the published crate excludes them).
-    RuntimeUnavailable,
-    PrepareRuntime(std::io::Error),
-    PrepareWarmPath(std::io::Error),
-    WarmupFailed {
-        exit_code: i32,
-        stderr: String,
-    },
-    Spawn(std::io::Error),
-    StdinClosed,
-    Stdin(std::io::Error),
-    Kill(std::io::Error),
-    TimedOut(Duration),
-    PendingVfsRpcRequest(u64),
-    RpcResponse(String),
-    OutputBufferExceeded {
-        stream: &'static str,
-        limit: usize,
-    },
-    EventChannelClosed,
-}
-
-impl fmt::Display for PythonExecutionError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::MissingContext(context_id) => {
-                write!(f, "unknown guest Python context: {context_id}")
-            }
-            Self::VmMismatch { expected, found } => {
-                write!(
-                    f,
-                    "guest Python context belongs to vm {expected}, not {found}"
-                )
-            }
-            Self::RuntimeUnavailable => write!(
-                f,
-                "guest Python execution is unavailable: this build of secure-exec-execution \
-                 was compiled without the bundled Pyodide runtime assets"
-            ),
-            Self::PrepareRuntime(err) => {
-                write!(f, "failed to prepare guest Python runtime assets: {err}")
-            }
-            Self::PrepareWarmPath(err) => {
-                write!(f, "failed to prepare guest Python warm path: {err}")
-            }
-            Self::WarmupFailed { exit_code, stderr } => {
-                if stderr.trim().is_empty() {
-                    write!(f, "guest Python warmup exited with status {exit_code}")
-                } else {
-                    write!(
-                        f,
-                        "guest Python warmup exited with status {exit_code}: {}",
-                        stderr.trim()
-                    )
-                }
-            }
-            Self::Spawn(err) => write!(f, "failed to start guest Python runtime: {err}"),
-            Self::StdinClosed => f.write_str("guest Python stdin is already closed"),
-            Self::Stdin(err) => write!(f, "failed to write guest stdin: {err}"),
-            Self::Kill(err) => write!(f, "failed to kill guest Python runtime: {err}"),
-            Self::TimedOut(timeout) => write!(
-                f,
-                "guest Python runtime timed out after {}ms",
-                timeout.as_millis()
-            ),
-            Self::PendingVfsRpcRequest(id) => {
-                write!(
-                    f,
-                    "guest Python execution requires servicing pending VFS RPC request {id}"
-                )
-            }
-            Self::RpcResponse(message) => {
-                write!(
-                    f,
-                    "failed to reply to guest Python VFS RPC request: {message}"
-                )
-            }
-            Self::OutputBufferExceeded { stream, limit } => {
-                write!(
-                    f,
-                    "guest Python {stream} exceeded the captured output limit of {limit} bytes"
-                )
-            }
-            Self::EventChannelClosed => {
-                f.write_str("guest Python event channel closed unexpectedly")
-            }
-        }
-    }
-}
-
-impl std::error::Error for PythonExecutionError {}
-
-/// Returns an error when this build was compiled without the bundled Pyodide
-/// runtime assets (the published crate excludes them; see `build.rs`). In the
-/// workspace build the in-tree assets are present and this is a no-op.
-fn ensure_pyodide_available() -> Result<(), PythonExecutionError> {
-    #[cfg(secure_exec_pyodide_unavailable)]
-    {
-        return Err(PythonExecutionError::RuntimeUnavailable);
-    }
-    #[cfg(not(secure_exec_pyodide_unavailable))]
-    {
-        Ok(())
-    }
-}
-
-#[derive(Debug)]
-pub struct PythonExecution {
-    execution_id: String,
-    child_pid: u32,
-    inner: JavascriptExecution,
-    pyodide_dist_path: PathBuf,
-    pending_vfs_rpc: Arc<Mutex<Option<PendingVfsRpcState>>>,
-    v8_session: crate::v8_host::V8SessionHandle,
-    output_buffer_max_bytes: usize,
-    execution_timeout: Option<Duration>,
-    vfs_rpc_timeout: Duration,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum PendingVfsRpcState {
-    Pending(u64),
-    TimedOut(u64),
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum PendingVfsRpcResolution {
-    Pending,
-    TimedOut,
-    Missing,
-}
-
-impl PythonExecution {
-    pub fn execution_id(&self) -> &str {
-        &self.execution_id
-    }
-
-    pub fn child_pid(&self) -> u32 {
-        self.child_pid
-    }
-
-    pub fn uses_shared_v8_runtime(&self) -> bool {
-        self.inner.uses_shared_v8_runtime()
-    }
-
-    pub fn write_stdin(&mut self, chunk: &[u8]) -> Result<(), PythonExecutionError> {
-        self.inner
-            .write_kernel_stdin_only(chunk)
-            .map_err(map_javascript_error)
-    }
-
-    pub fn close_stdin(&mut self) -> Result<(), PythonExecutionError> {
-        self.inner.close_kernel_stdin_only();
-        Ok(())
-    }
-
-    pub fn cancel(&mut self) -> Result<(), PythonExecutionError> {
-        self.kill()
-    }
-
-    pub fn kill(&mut self) -> Result<(), PythonExecutionError> {
-        self.close_stdin()?;
-        self.inner.terminate().map_err(map_javascript_error)
-    }
-
-    pub fn respond_vfs_rpc_success(
-        &mut self,
-        id: u64,
-        payload: PythonVfsRpcResponsePayload,
-    ) -> Result<(), PythonExecutionError> {
-        match self.clear_pending_vfs_rpc(id)? {
-            PendingVfsRpcResolution::Pending => {}
-            PendingVfsRpcResolution::TimedOut => {
-                return Err(PythonExecutionError::RpcResponse(format!(
-                    "VFS RPC request {id} is no longer pending"
-                )));
-            }
-            PendingVfsRpcResolution::Missing => {}
-        }
-
-        let result = match payload {
-            PythonVfsRpcResponsePayload::Empty => json!({}),
-            PythonVfsRpcResponsePayload::Read { content_base64 } => {
-                json!({ "contentBase64": content_base64 })
-            }
-            PythonVfsRpcResponsePayload::Stat { stat } => json!({
-                "stat": {
-                    "mode": stat.mode,
-                    "size": stat.size,
-                    "isDirectory": stat.is_directory,
-                    "isSymbolicLink": stat.is_symbolic_link,
-                }
-            }),
-            PythonVfsRpcResponsePayload::ReadDir { entries } => {
-                json!({ "entries": entries })
-            }
-            PythonVfsRpcResponsePayload::Http {
-                status,
-                reason,
-                url,
-                headers,
-                body_base64,
-            } => json!({
-                "status": status,
-                "reason": reason,
-                "url": url,
-                "headers": headers,
-                "bodyBase64": body_base64,
-            }),
-            PythonVfsRpcResponsePayload::DnsLookup { addresses } => {
-                json!({ "addresses": addresses })
-            }
-            PythonVfsRpcResponsePayload::SubprocessRun {
-                exit_code,
-                stdout,
-                stderr,
-                max_buffer_exceeded,
-            } => json!({
-                "exitCode": exit_code,
-                "stdout": stdout,
-                "stderr": stderr,
-                "maxBufferExceeded": max_buffer_exceeded,
-            }),
-            PythonVfsRpcResponsePayload::SocketCreated { socket_id } => json!({
-                "socketId": socket_id,
-            }),
-            PythonVfsRpcResponsePayload::SocketSent { bytes_sent } => json!({
-                "bytesSent": bytes_sent,
-            }),
-            PythonVfsRpcResponsePayload::SocketReceived {
-                data_base64,
-                closed,
-                timed_out,
-            } => json!({
-                "dataBase64": data_base64,
-                "closed": closed,
-                "timedOut": timed_out,
-            }),
-            PythonVfsRpcResponsePayload::UdpReceived {
-                data_base64,
-                host,
-                port,
-                timed_out,
-            } => json!({
-                "dataBase64": data_base64,
-                "host": host,
-                "port": port,
-                "timedOut": timed_out,
-            }),
-            PythonVfsRpcResponsePayload::SymlinkTarget { target } => json!({
-                "target": target,
-            }),
-        };
-
-        self.inner
-            .respond_sync_rpc_success(id, result)
-            .map_err(map_javascript_error)
-    }
-
-    pub fn respond_vfs_rpc_error(
-        &mut self,
-        id: u64,
-        code: impl Into<String>,
-        message: impl Into<String>,
-    ) -> Result<(), PythonExecutionError> {
-        match self.clear_pending_vfs_rpc(id)? {
-            PendingVfsRpcResolution::Pending => {}
-            PendingVfsRpcResolution::TimedOut => {
-                return Err(PythonExecutionError::RpcResponse(format!(
-                    "VFS RPC request {id} is no longer pending"
-                )));
-            }
-            PendingVfsRpcResolution::Missing => {}
-        }
-
-        self.inner
-            .respond_sync_rpc_error(id, code, message)
-            .map_err(map_javascript_error)
-    }
-
-    pub fn respond_javascript_sync_rpc_success(
-        &mut self,
-        id: u64,
-        result: Value,
-    ) -> Result<(), PythonExecutionError> {
-        self.inner
-            .respond_sync_rpc_success(id, result)
-            .map_err(map_javascript_error)
-    }
-
-    pub fn respond_javascript_sync_rpc_error(
-        &mut self,
-        id: u64,
-        code: impl Into<String>,
-        message: impl Into<String>,
-    ) -> Result<(), PythonExecutionError> {
-        self.inner
-            .respond_sync_rpc_error(id, code, message)
-            .map_err(map_javascript_error)
-    }
-
-    pub async fn poll_event(
-        &mut self,
-        timeout: Duration,
-    ) -> Result<Option<PythonExecutionEvent>, PythonExecutionError> {
-        let started = Instant::now();
-        loop {
-            let remaining = if timeout.is_zero() {
-                Duration::ZERO
-            } else {
-                timeout.saturating_sub(started.elapsed())
-            };
-            match self
-                .inner
-                .poll_event(remaining)
-                .await
-                .map_err(map_javascript_error)?
-            {
-                Some(event) => {
-                    if let Some(event) = self.translate_javascript_event(event)? {
-                        return Ok(Some(event));
-                    }
-                }
-                None => return Ok(None),
-            }
-        }
-    }
-
-    /// Service a module-resolution JS sync RPC host-directly via the underlying
-    /// JS execution's translator. For consumers driving `poll_event_blocking`
-    /// manually without a kernel/service loop.
-    pub fn try_service_standalone_module_sync_rpc(
-        &mut self,
-        request: &JavascriptSyncRpcRequest,
-    ) -> Result<bool, PythonExecutionError> {
-        self.inner
-            .try_service_standalone_module_sync_rpc(request)
-            .map_err(map_javascript_error)
-    }
-
-    pub fn poll_event_blocking(
-        &mut self,
-        timeout: Duration,
-    ) -> Result<Option<PythonExecutionEvent>, PythonExecutionError> {
-        let deadline = Instant::now() + timeout;
-        loop {
-            let remaining = deadline.saturating_duration_since(Instant::now());
-            match self
-                .inner
-                .poll_event_blocking(remaining)
-                .map_err(map_javascript_error)?
-            {
-                Some(event) => {
-                    if let Some(event) = self.translate_javascript_event(event)? {
-                        return Ok(Some(event));
-                    }
-                }
-                None => {
-                    if Instant::now() >= deadline {
-                        return Ok(None);
-                    }
-                }
-            }
-        }
-    }
-
-    pub fn wait(
-        mut self,
-        timeout: Option<Duration>,
-    ) -> Result<PythonExecutionResult, PythonExecutionError> {
-        self.close_stdin()?;
-
-        let mut stdout = PythonOutputBuffer::new(self.output_buffer_max_bytes);
-        let mut stderr = PythonOutputBuffer::new(self.output_buffer_max_bytes);
-        let started = Instant::now();
-        let timeout = match (timeout, self.execution_timeout) {
-            (Some(requested), Some(configured)) => Some(requested.min(configured)),
-            (Some(requested), None) => Some(requested),
-            (None, Some(configured)) => Some(configured),
-            (None, None) => None,
-        };
-        let runtime = tokio::runtime::Builder::new_current_thread()
-            .enable_all()
-            .build()
-            .expect("python wait runtime");
-
-        loop {
-            let poll_timeout = timeout
-                .map(|limit| {
-                    let elapsed = started.elapsed();
-                    if elapsed >= limit {
-                        Duration::ZERO
-                    } else {
-                        limit.saturating_sub(elapsed).min(Duration::from_millis(50))
-                    }
-                })
-                .unwrap_or_else(|| Duration::from_millis(50));
-
-            let event = runtime.block_on(self.poll_event(poll_timeout))?;
-
-            match event {
-                Some(PythonExecutionEvent::Stdout(chunk)) => stdout.extend(&chunk),
-                Some(PythonExecutionEvent::Stderr(chunk)) => stderr.extend(&chunk),
-                Some(PythonExecutionEvent::JavascriptSyncRpcRequest(request)) => {
-                    // Module-resolution sync RPCs are serviced host-directly via
-                    // the JS execution's own translator (the standalone Python
-                    // wait loop runs without a kernel/service loop).
-                    if self
-                        .inner
-                        .try_service_standalone_module_sync_rpc(&request)
-                        .map_err(map_javascript_error)?
-                    {
-                        continue;
-                    }
-                    if let Some((code, message)) = python_javascript_sync_rpc_error(&request) {
-                        self.inner
-                            .respond_sync_rpc_error(request.id, code, message)
-                            .map_err(map_javascript_error)?;
-                        continue;
-                    }
-                    return Err(PythonExecutionError::RpcResponse(format!(
-                        "guest Python execution requires servicing pending JavaScript sync RPC request {} {} {:?}",
-                        request.id, request.method, request.args
-                    )));
-                }
-                Some(PythonExecutionEvent::VfsRpcRequest(request)) => {
-                    return Err(PythonExecutionError::PendingVfsRpcRequest(request.id));
-                }
-                Some(PythonExecutionEvent::Exited(exit_code)) => {
-                    return Ok(PythonExecutionResult {
-                        execution_id: self.execution_id.clone(),
-                        exit_code,
-                        stdout: stdout.into_inner(),
-                        stderr: stderr.into_inner(),
-                    });
-                }
-                None => {}
-            }
-
-            if let Some(limit) = timeout {
-                if started.elapsed() >= limit {
-                    self.kill()?;
-                    return Err(PythonExecutionError::TimedOut(limit));
-                }
-            }
-        }
-    }
-
-    fn clear_pending_vfs_rpc(
-        &self,
-        id: u64,
-    ) -> Result<PendingVfsRpcResolution, PythonExecutionError> {
-        let mut pending = self
-            .pending_vfs_rpc
-            .lock()
-            .map_err(|_| PythonExecutionError::EventChannelClosed)?;
-        match *pending {
-            Some(PendingVfsRpcState::Pending(current)) if current == id => {
-                *pending = None;
-                Ok(PendingVfsRpcResolution::Pending)
-            }
-            Some(PendingVfsRpcState::TimedOut(current)) if current == id => {
-                Ok(PendingVfsRpcResolution::TimedOut)
-            }
-            _ => Ok(PendingVfsRpcResolution::Missing),
-        }
-    }
-
-    fn translate_javascript_event(
-        &mut self,
-        event: JavascriptExecutionEvent,
-    ) -> Result<Option<PythonExecutionEvent>, PythonExecutionError> {
-        match event {
-            JavascriptExecutionEvent::Stdout(chunk) => {
-                Ok(Some(PythonExecutionEvent::Stdout(chunk)))
-            }
-            JavascriptExecutionEvent::Stderr(chunk) => {
-                Ok(Some(PythonExecutionEvent::Stderr(chunk)))
-            }
-            JavascriptExecutionEvent::Exited(code) => Ok(Some(PythonExecutionEvent::Exited(code))),
-            JavascriptExecutionEvent::SignalState { .. } => Ok(None),
-            JavascriptExecutionEvent::SyncRpcRequest(request) => {
-                if request.method == "_pythonRpc" {
-                    let request = parse_python_bridge_sync_rpc_request(&request)?;
-                    set_pending_vfs_rpc_state(&self.pending_vfs_rpc, request.id)?;
-                    spawn_python_vfs_rpc_timeout(
-                        request.id,
-                        self.vfs_rpc_timeout,
-                        self.pending_vfs_rpc.clone(),
-                        self.v8_session.clone(),
-                    );
-                    Ok(Some(PythonExecutionEvent::VfsRpcRequest(Box::new(request))))
-                } else {
-                    if self.try_service_standalone_module_sync_rpc(&request)? {
-                        return Ok(None);
-                    }
-                    if let Some(action) =
-                        python_javascript_sync_rpc_action(&self.pyodide_dist_path, &request)?
-                    {
-                        respond_python_javascript_sync_rpc_action(
-                            &mut self.inner,
-                            request.id,
-                            action,
-                        )?;
-                        Ok(None)
-                    } else {
-                        Ok(Some(PythonExecutionEvent::JavascriptSyncRpcRequest(
-                            request,
-                        )))
-                    }
-                }
-            }
-        }
-    }
-}
-
-impl Drop for PythonExecution {
-    fn drop(&mut self) {
-        let _ = self.close_stdin();
-        let _ = self.inner.terminate();
-    }
-}
-
-#[derive(Debug, Default)]
-pub struct PythonExecutionEngine {
-    next_context_id: usize,
-    next_execution_id: usize,
-    contexts: BTreeMap<String, PythonContext>,
-    import_caches: BTreeMap<String, NodeImportCache>,
-    javascript_context_ids: BTreeMap<String, String>,
-    javascript_engine: JavascriptExecutionEngine,
-}
-
-impl PythonExecutionEngine {
-    pub fn bundled_pyodide_dist_path_for_vm(
-        &mut self,
-        vm_id: &str,
-    ) -> Result<PathBuf, PythonExecutionError> {
-        ensure_pyodide_available()?;
-        let import_cache = self.import_caches.entry(vm_id.to_owned()).or_default();
-        import_cache
-            .ensure_materialized()
-            .map_err(PythonExecutionError::PrepareRuntime)?;
-        Ok(import_cache.pyodide_dist_path().to_path_buf())
-    }
-
-    pub fn create_context(&mut self, request: CreatePythonContextRequest) -> PythonContext {
-        self.next_context_id += 1;
-        self.import_caches.entry(request.vm_id.clone()).or_default();
-        let javascript_context =
-            self.javascript_engine
-                .create_context(CreateJavascriptContextRequest {
-                    vm_id: request.vm_id.clone(),
-                    bootstrap_module: None,
-                    compile_cache_root: None,
-                });
-
-        let context = PythonContext {
-            context_id: format!("python-ctx-{}", self.next_context_id),
-            vm_id: request.vm_id,
-            pyodide_dist_path: request.pyodide_dist_path,
-        };
-        self.javascript_context_ids
-            .insert(context.context_id.clone(), javascript_context.context_id);
-        self.contexts
-            .insert(context.context_id.clone(), context.clone());
-        context
-    }
-
-    pub fn start_execution(
-        &mut self,
-        request: StartPythonExecutionRequest,
-    ) -> Result<PythonExecution, PythonExecutionError> {
-        ensure_pyodide_available()?;
-        let context = self
-            .contexts
-            .get(&request.context_id)
-            .cloned()
-            .ok_or_else(|| PythonExecutionError::MissingContext(request.context_id.clone()))?;
-
-        if context.vm_id != request.vm_id {
-            return Err(PythonExecutionError::VmMismatch {
-                expected: context.vm_id,
-                found: request.vm_id,
-            });
-        }
-
-        let frozen_time_ms = frozen_time_ms();
-        let javascript_context =
-            self.javascript_engine
-                .create_context(CreateJavascriptContextRequest {
-                    vm_id: request.vm_id.clone(),
-                    bootstrap_module: None,
-                    compile_cache_root: None,
-                });
-        let javascript_context_id = javascript_context.context_id.clone();
-        self.javascript_context_ids
-            .insert(context.context_id.clone(), javascript_context_id.clone());
-        let warmup_metrics = {
-            let import_cache = self.import_caches.entry(context.vm_id.clone()).or_default();
-            import_cache
-                .ensure_materialized()
-                .map_err(PythonExecutionError::PrepareRuntime)?;
-            prewarm_python_path(
-                import_cache,
-                &mut self.javascript_engine,
-                &javascript_context_id,
-                &context,
-                &request,
-                frozen_time_ms,
-            )?
-        };
-
-        self.next_execution_id += 1;
-        let execution_id = format!("exec-{}", self.next_execution_id);
-        let import_cache = self
-            .import_caches
-            .get(&context.vm_id)
-            .expect("vm import cache should exist after materialization");
-        let pyodide_dist_path =
-            resolved_pyodide_dist_path(&context.pyodide_dist_path, &request.cwd);
-        let javascript_execution = start_python_javascript_execution(
-            &mut self.javascript_engine,
-            import_cache,
-            &javascript_context_id,
-            &context,
-            &request,
-            PythonJavascriptExecutionOptions {
-                frozen_time_ms,
-                prewarm_only: false,
-                warmup_metrics: warmup_metrics.as_deref(),
-            },
-        )?;
-        let pending_vfs_rpc = Arc::new(Mutex::new(None));
-        let vfs_rpc_timeout = python_vfs_rpc_timeout(&request);
-
-        Ok(PythonExecution {
-            execution_id,
-            child_pid: javascript_execution.child_pid(),
-            v8_session: javascript_execution.v8_session_handle(),
-            inner: javascript_execution,
-            pyodide_dist_path,
-            pending_vfs_rpc,
-            output_buffer_max_bytes: python_output_buffer_max_bytes(&request),
-            execution_timeout: python_execution_timeout(&request),
-            vfs_rpc_timeout,
-        })
-    }
-
-    pub fn dispose_vm(&mut self, vm_id: &str) {
-        self.contexts.retain(|_, context| context.vm_id != vm_id);
-        self.javascript_context_ids
-            .retain(|python_context_id, _| self.contexts.contains_key(python_context_id));
-        self.import_caches.remove(vm_id);
-        self.javascript_engine.dispose_vm(vm_id);
-    }
-}
-
-fn set_pending_vfs_rpc_state(
-    pending_vfs_rpc: &Arc<Mutex<Option<PendingVfsRpcState>>>,
-    id: u64,
-) -> Result<(), PythonExecutionError> {
-    let mut pending = pending_vfs_rpc
-        .lock()
-        .map_err(|_| PythonExecutionError::EventChannelClosed)?;
-    *pending = Some(PendingVfsRpcState::Pending(id));
-    Ok(())
-}
-
-fn map_javascript_error(error: JavascriptExecutionError) -> PythonExecutionError {
-    match error {
-        JavascriptExecutionError::EmptyArgv => PythonExecutionError::Spawn(std::io::Error::new(
-            std::io::ErrorKind::InvalidInput,
-            "guest Python bootstrap requires a JavaScript entrypoint",
-        )),
-        JavascriptExecutionError::MissingContext(context_id) => {
-            PythonExecutionError::MissingContext(context_id)
-        }
-        JavascriptExecutionError::VmMismatch { expected, found } => {
-            PythonExecutionError::VmMismatch { expected, found }
-        }
-        JavascriptExecutionError::PrepareImportCache(error) => {
-            PythonExecutionError::PrepareRuntime(error)
-        }
-        JavascriptExecutionError::Spawn(error) => PythonExecutionError::Spawn(error),
-        JavascriptExecutionError::PendingSyncRpcRequest(id) => {
-            PythonExecutionError::PendingVfsRpcRequest(id)
-        }
-        JavascriptExecutionError::ExpiredSyncRpcRequest(id) => {
-            PythonExecutionError::RpcResponse(format!("VFS RPC request {id} is no longer pending"))
-        }
-        JavascriptExecutionError::RpcResponse(message) => {
-            PythonExecutionError::RpcResponse(message)
-        }
-        JavascriptExecutionError::Terminate(error) => PythonExecutionError::Kill(error),
-        JavascriptExecutionError::StdinClosed => PythonExecutionError::StdinClosed,
-        JavascriptExecutionError::Stdin(error) => PythonExecutionError::Stdin(error),
-        JavascriptExecutionError::OutputBufferExceeded { stream, limit } => {
-            PythonExecutionError::OutputBufferExceeded { stream, limit }
-        }
-        JavascriptExecutionError::EventChannelClosed => PythonExecutionError::EventChannelClosed,
-    }
-}
-
-struct PythonJavascriptExecutionOptions<'a> {
-    frozen_time_ms: u128,
-    prewarm_only: bool,
-    warmup_metrics: Option<&'a [u8]>,
-}
-
-fn start_python_javascript_execution(
-    javascript_engine: &mut JavascriptExecutionEngine,
-    import_cache: &NodeImportCache,
-    javascript_context_id: &str,
-    context: &PythonContext,
-    request: &StartPythonExecutionRequest,
-    options: PythonJavascriptExecutionOptions<'_>,
-) -> Result<JavascriptExecution, PythonExecutionError> {
-    let internal_env = build_python_internal_env(
-        import_cache,
-        context,
-        request,
-        options.frozen_time_ms,
-        options.prewarm_only,
-    );
-    let inline_code =
-        build_python_runner_module_source(import_cache, &internal_env, options.warmup_metrics)?;
-    let mut env = request.env.clone();
-    env.extend(internal_env);
-
-    // The Pyodide runner is itself a V8 execution. Its heap cap (the Python
-    // `maxOldSpaceMb` knob) and sync-RPC wait ceiling ride the typed runner
-    // limits, not env — the JS engine reads them from `limits`, not `AGENTOS_*`.
-    let max_old_space_mb = python_max_old_space_mb(request);
-    let runner_limits = JavascriptExecutionLimits {
-        v8_heap_limit_mb: (max_old_space_mb > 0).then_some(max_old_space_mb as u32),
-        sync_rpc_wait_timeout_ms: Some(PYTHON_SYNC_RPC_WAIT_TIMEOUT_MS),
-        ..JavascriptExecutionLimits::default()
-    };
-
-    javascript_engine
-        .start_execution(StartJavascriptExecutionRequest {
-            vm_id: request.vm_id.clone(),
-            context_id: javascript_context_id.to_owned(),
-            argv: vec![import_cache.python_runner_path().display().to_string()],
-            env,
-            cwd: request.cwd.clone(),
-            limits: runner_limits,
-            // Forward the guest-runtime identity so the runner's shim sets
-            // process.* from typed config rather than env.
-            guest_runtime: request.guest_runtime.clone(),
-            wasm_module_bytes: None,
-            inline_code: Some(inline_code),
-        })
-        .map_err(map_javascript_error)
-}
-
-fn build_python_internal_env(
-    import_cache: &NodeImportCache,
-    context: &PythonContext,
-    request: &StartPythonExecutionRequest,
-    frozen_time_ms: u128,
-    prewarm_only: bool,
-) -> BTreeMap<String, String> {
-    let mut internal_env = request
-        .env
-        .iter()
-        .filter(|(key, _)| key.starts_with("AGENTOS_"))
-        .map(|(key, value)| (key.clone(), value.clone()))
-        .collect::<BTreeMap<_, _>>();
-    let pyodide_dist_path = resolved_pyodide_dist_path(&context.pyodide_dist_path, &request.cwd);
-
-    add_python_guest_path_mapping(&mut internal_env, &pyodide_dist_path);
-
-    internal_env.insert(
-        PYODIDE_INDEX_URL_ENV.to_string(),
-        String::from(PYODIDE_GUEST_ROOT),
-    );
-    internal_env.insert(
-        PYODIDE_PACKAGE_BASE_URL_ENV.to_string(),
-        request
-            .env
-            .get(PYODIDE_PACKAGE_BASE_URL_ENV)
-            .cloned()
-            .unwrap_or_else(|| String::from(PYODIDE_GUEST_ROOT)),
-    );
-    internal_env.insert(
-        PYODIDE_PACKAGE_CACHE_DIR_ENV.to_string(),
-        String::from(PYODIDE_CACHE_GUEST_ROOT),
-    );
-    internal_env.insert(
-        NODE_IMPORT_CACHE_ASSET_ROOT_ENV.to_string(),
-        import_cache.asset_root().display().to_string(),
-    );
-    internal_env.insert(
-        NODE_ALLOW_PROCESS_BINDINGS_ENV.to_string(),
-        String::from("1"),
-    );
-    internal_env.insert(
-        NODE_SYNC_RPC_DATA_BYTES_ENV.to_string(),
-        PYTHON_SYNC_RPC_DATA_BYTES.to_string(),
-    );
-    internal_env.insert(
-        NODE_DISABLE_COMPILE_CACHE_ENV.to_string(),
-        String::from("1"),
-    );
-    // The runner's V8 heap cap and sync-RPC wait timeout are carried as typed
-    // `JavascriptExecutionLimits` on the runner request (see the launch site),
-    // not as `AGENTOS_V8_HEAP_LIMIT_MB` / `AGENTOS_NODE_SYNC_RPC_WAIT_TIMEOUT_MS`
-    // env knobs, which the JS engine no longer reads.
-    internal_env.insert(PYTHON_CODE_ENV.to_string(), request.code.clone());
-    internal_env.insert(NODE_FROZEN_TIME_ENV.to_string(), frozen_time_ms.to_string());
-    if prewarm_only {
-        internal_env.insert(PYTHON_PREWARM_ONLY_ENV.to_string(), String::from("1"));
-    } else {
-        internal_env.insert(
-            String::from("SECURE_EXEC_KEEP_STDIN_OPEN"),
-            String::from("1"),
-        );
-        internal_env.remove(PYTHON_PREWARM_ONLY_ENV);
-    }
-    if let Some(file_path) = &request.file_path {
-        internal_env.insert(PYTHON_FILE_ENV.to_string(), file_path.display().to_string());
-    } else {
-        internal_env.remove(PYTHON_FILE_ENV);
-    }
-
-    internal_env
-}
-
-fn add_python_guest_path_mapping(
-    internal_env: &mut BTreeMap<String, String>,
-    pyodide_dist_path: &Path,
-) {
-    let pyodide_cache_path = pyodide_cache_path(pyodide_dist_path);
-    let mut mappings = internal_env
-        .get(NODE_GUEST_PATH_MAPPINGS_ENV)
-        .and_then(|value| serde_json::from_str::<Vec<PythonGuestPathMappingWire>>(value).ok())
-        .unwrap_or_default();
-
-    mappings.retain(|mapping| {
-        mapping.guest_path != PYODIDE_GUEST_ROOT && mapping.guest_path != PYODIDE_CACHE_GUEST_ROOT
-    });
-    mappings.push(PythonGuestPathMappingWire {
-        guest_path: String::from(PYODIDE_GUEST_ROOT),
-        host_path: pyodide_dist_path.display().to_string(),
-    });
-    mappings.push(PythonGuestPathMappingWire {
-        guest_path: String::from(PYODIDE_CACHE_GUEST_ROOT),
-        host_path: pyodide_cache_path.display().to_string(),
-    });
-
-    let serialized = serde_json::to_string(&mappings).unwrap_or_else(|_| String::from("[]"));
-    internal_env.insert(String::from(NODE_GUEST_PATH_MAPPINGS_ENV), serialized);
-}
-
-fn pyodide_cache_path(pyodide_dist_path: &Path) -> PathBuf {
-    let base = pyodide_dist_path
-        .parent()
-        .and_then(|parent| {
-            if parent.file_name().is_some_and(|name| name == "assets") {
-                parent.parent()
-            } else {
-                Some(parent)
-            }
-        })
-        .unwrap_or(pyodide_dist_path);
-
-    base.join("pyodide-package-cache")
-}
-
-fn build_python_runner_module_source(
-    import_cache: &NodeImportCache,
-    internal_env: &BTreeMap<String, String>,
-    warmup_metrics: Option<&[u8]>,
-) -> Result<String, PythonExecutionError> {
-    let runner_source = fs::read_to_string(import_cache.python_runner_path())
-        .map_err(PythonExecutionError::PrepareRuntime)?;
-    let runner_source =
-        format!("import * as __agentOSConstantsBinding from 'node:constants';\n{runner_source}");
-    let bootstrap = build_python_runner_bootstrap(internal_env, warmup_metrics);
-    Ok(insert_python_runner_bootstrap(&runner_source, &bootstrap))
-}
-
-fn build_python_runner_bootstrap(
-    internal_env: &BTreeMap<String, String>,
-    warmup_metrics: Option<&[u8]>,
-) -> String {
-    let internal_env_json =
-        serde_json::to_string(internal_env).unwrap_or_else(|_| String::from("{}"));
-    let warmup_metrics_json = warmup_metrics.map(|bytes| {
-        serde_json::to_string(&String::from_utf8_lossy(bytes).to_string())
-            .unwrap_or_else(|_| String::from("\"\""))
-    });
-
-    match warmup_metrics_json {
-        Some(warmup_metrics_json) => format!(
-            "globalThis.__agentOSPythonInternalEnv = {internal_env_json};\n\
-if (typeof process !== 'undefined') {{\n  process.env = {{ ...(process.env || {{}}), ...globalThis.__agentOSPythonInternalEnv }};\n}}\n\
-if (typeof process?.stderr?.write === 'function') {{\n  process.stderr.write({warmup_metrics_json});\n}}\n"
-        ),
-        None => format!(
-            "globalThis.__agentOSPythonInternalEnv = {internal_env_json};\n\
-if (typeof process !== 'undefined') {{\n  process.env = {{ ...(process.env || {{}}), ...globalThis.__agentOSPythonInternalEnv }};\n}}\n"
-        ),
-    }
-}
-
-fn insert_python_runner_bootstrap(source: &str, bootstrap: &str) -> String {
-    let mut insert_at = 0usize;
-    let mut saw_import = false;
-    for line in source.split_inclusive('\n') {
-        let trimmed = line.trim_start();
-        if trimmed.starts_with("import ") || (saw_import && trimmed.is_empty()) {
-            insert_at += line.len();
-            saw_import = saw_import || trimmed.starts_with("import ");
-            continue;
-        }
-        break;
-    }
-
-    format!(
-        "{}{}{}",
-        &source[..insert_at],
-        bootstrap,
-        &source[insert_at..]
-    )
-}
-
-fn parse_python_bridge_sync_rpc_request(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<PythonVfsRpcRequest, PythonExecutionError> {
-    if request.method != "_pythonRpc" {
-        return Err(PythonExecutionError::RpcResponse(format!(
-            "unexpected JavaScript sync RPC method for guest Python runtime: {}",
-            request.method
-        )));
-    }
-
-    let payload = request.args.first().ok_or_else(|| {
-        PythonExecutionError::RpcResponse(String::from(
-            "guest Python bridge call did not include a request payload",
-        ))
-    })?;
-
-    let wire: PythonVfsBridgeRequestWire =
-        serde_json::from_value(payload.clone()).map_err(|error| {
-            PythonExecutionError::RpcResponse(format!(
-                "invalid guest Python bridge request payload: {error}"
-            ))
-        })?;
-
-    let method = PythonVfsRpcMethod::from_wire(&wire.method).ok_or_else(|| {
-        PythonExecutionError::RpcResponse(format!(
-            "unsupported agentos python rpc method {} for {}",
-            wire.method, request.id
-        ))
-    })?;
-
-    Ok(PythonVfsRpcRequest {
-        id: request.id,
-        method,
-        path: wire.path,
-        destination: wire.destination,
-        target: wire.target,
-        mode: wire.mode.map(|value| value as u32),
-        uid: wire.uid.map(|value| value as u32),
-        gid: wire.gid.map(|value| value as u32),
-        atime_ms: wire.atime_ms.map(|value| value as u64),
-        mtime_ms: wire.mtime_ms.map(|value| value as u64),
-        content_base64: wire.content_base64,
-        recursive: wire.recursive,
-        url: wire.url,
-        http_method: wire.http_method,
-        headers: wire.headers,
-        body_base64: wire.body_base64,
-        hostname: wire.hostname,
-        family: wire.family,
-        port: wire.port,
-        socket_id: wire.socket_id,
-        command: wire.command,
-        args: wire.args,
-        cwd: wire.cwd,
-        env: wire.env,
-        shell: wire.shell,
-        max_buffer: wire.max_buffer,
-    })
-}
-
-#[derive(Debug)]
-struct PythonOutputBuffer {
-    bytes: Vec<u8>,
-    max_bytes: usize,
-}
-
-impl PythonOutputBuffer {
-    fn new(max_bytes: usize) -> Self {
-        Self {
-            bytes: Vec::new(),
-            max_bytes,
-        }
-    }
-
-    fn extend(&mut self, chunk: &[u8]) {
-        if self.bytes.len() >= self.max_bytes {
-            return;
-        }
-
-        let remaining = self.max_bytes - self.bytes.len();
-        let take = remaining.min(chunk.len());
-        self.bytes.extend_from_slice(&chunk[..take]);
-    }
-
-    fn into_inner(self) -> Vec<u8> {
-        self.bytes
-    }
-}
-
-fn python_output_buffer_max_bytes(request: &StartPythonExecutionRequest) -> usize {
-    request
-        .limits
-        .output_buffer_max_bytes
-        .unwrap_or(DEFAULT_PYTHON_OUTPUT_BUFFER_MAX_BYTES)
-}
-
-fn python_execution_timeout(request: &StartPythonExecutionRequest) -> Option<Duration> {
-    match request.limits.execution_timeout_ms {
-        // `Some(0)` explicitly disables the timeout.
-        Some(0) => None,
-        Some(value) => Some(Duration::from_millis(value)),
-        None => Some(Duration::from_millis(DEFAULT_PYTHON_EXECUTION_TIMEOUT_MS)),
-    }
-}
-
-fn python_max_old_space_mb(request: &StartPythonExecutionRequest) -> usize {
-    request
-        .limits
-        .max_old_space_mb
-        .filter(|value| *value > 0)
-        .unwrap_or(DEFAULT_PYTHON_MAX_OLD_SPACE_MB)
-}
-
-fn python_vfs_rpc_timeout(request: &StartPythonExecutionRequest) -> Duration {
-    Duration::from_millis(
-        request
-            .limits
-            .vfs_rpc_timeout_ms
-            .filter(|value| *value > 0)
-            .unwrap_or(DEFAULT_PYTHON_VFS_RPC_TIMEOUT_MS),
-    )
-}
-
-fn spawn_python_vfs_rpc_timeout(
-    id: u64,
-    timeout: Duration,
-    pending: Arc<Mutex<Option<PendingVfsRpcState>>>,
-    v8_session: crate::v8_host::V8SessionHandle,
-) {
-    thread::spawn(move || {
-        thread::sleep(timeout);
-        let should_timeout = match pending.lock() {
-            Ok(mut guard) if *guard == Some(PendingVfsRpcState::Pending(id)) => {
-                *guard = Some(PendingVfsRpcState::TimedOut(id));
-                true
-            }
-            Ok(_) => false,
-            Err(_) => false,
-        };
-
-        if !should_timeout {
-            return;
-        }
-
-        let _ = v8_session.send_bridge_response(
-            id,
-            1,
-            format!(
-                "ERR_AGENTOS_PYTHON_VFS_RPC_TIMEOUT: guest Python VFS RPC request {id} timed out after {}ms",
-                timeout.as_millis()
-            )
-            .into_bytes(),
-        );
-    });
-}
-
-fn resolved_pyodide_dist_path(path: &Path, cwd: &Path) -> PathBuf {
-    resolve_execution_path(path, cwd)
-}
-
-fn prewarm_python_path(
-    import_cache: &NodeImportCache,
-    javascript_engine: &mut JavascriptExecutionEngine,
-    javascript_context_id: &str,
-    context: &PythonContext,
-    request: &StartPythonExecutionRequest,
-    frozen_time_ms: u128,
-) -> Result<Option<Vec<u8>>, PythonExecutionError> {
-    let debug_enabled = python_warmup_metrics_enabled(request);
-    let marker_contents = warmup_marker_contents(import_cache, context, request);
-    let marker_path = warmup_marker_path(
-        import_cache.prewarm_marker_dir(),
-        "python-runner-prewarm",
-        PYTHON_WARMUP_MARKER_VERSION,
-        &marker_contents,
-    );
-    let marker_exists = marker_path.exists();
-
-    let started = Instant::now();
-    let mut prewarm_execution = start_python_javascript_execution(
-        javascript_engine,
-        import_cache,
-        javascript_context_id,
-        context,
-        request,
-        PythonJavascriptExecutionOptions {
-            frozen_time_ms,
-            prewarm_only: true,
-            warmup_metrics: None,
-        },
-    )?;
-    let mut stdout = Vec::new();
-    let mut stderr = Vec::new();
-    let mut sync_rpc_log = Vec::new();
-    let result = loop {
-        match prewarm_execution
-            .poll_event_blocking(PYTHON_PREWARM_TIMEOUT)
-            .map_err(map_javascript_error)?
-        {
-            Some(JavascriptExecutionEvent::Stdout(chunk)) => stdout.extend(chunk),
-            Some(JavascriptExecutionEvent::Stderr(chunk)) => stderr.extend(chunk),
-            Some(JavascriptExecutionEvent::Exited(exit_code)) => {
-                break PythonExecutionResult {
-                    execution_id: String::from("python-prewarm"),
-                    exit_code,
-                    stdout,
-                    stderr,
-                };
-            }
-            Some(JavascriptExecutionEvent::SignalState { .. }) => {}
-            Some(JavascriptExecutionEvent::SyncRpcRequest(sync_request)) => {
-                sync_rpc_log.push(format!(
-                    "{} {} {:?}",
-                    sync_request.id, sync_request.method, sync_request.args
-                ));
-                // The Python runner module imports node builtins and the pyodide
-                // ESM entry; module-resolution sync RPCs are now serviced
-                // host-directly here (the prewarm has no kernel/service loop),
-                // using the execution's own translator (with pyodide path
-                // mappings) so the runner module loader resolves correctly.
-                if prewarm_execution
-                    .try_service_standalone_module_sync_rpc(&sync_request)
-                    .map_err(map_javascript_error)?
-                {
-                    sync_rpc_log.push(format!("responded {} (module)", sync_request.id));
-                    continue;
-                }
-                let pyodide_dist_path =
-                    resolved_pyodide_dist_path(&context.pyodide_dist_path, &request.cwd);
-                if let Some(action) =
-                    python_javascript_sync_rpc_action(&pyodide_dist_path, &sync_request)?
-                {
-                    respond_python_javascript_sync_rpc_action(
-                        &mut prewarm_execution,
-                        sync_request.id,
-                        action,
-                    )?;
-                    sync_rpc_log.push(format!("responded {}", sync_request.id));
-                    continue;
-                }
-                if let Some((code, message)) = python_javascript_sync_rpc_error(&sync_request) {
-                    prewarm_execution
-                        .respond_sync_rpc_error(sync_request.id, code, message)
-                        .map_err(map_javascript_error)?;
-                    sync_rpc_log.push(format!("errored {}", sync_request.id));
-                    continue;
-                }
-                if sync_request.method == "_pythonRpc" {
-                    let request = parse_python_bridge_sync_rpc_request(&sync_request)?;
-                    return Err(PythonExecutionError::WarmupFailed {
-                        exit_code: 1,
-                        stderr: format!(
-                            "unexpected Python prewarm VFS RPC request {} {} {:?}",
-                            request.id, request.path, request.method
-                        ),
-                    });
-                }
-                return Err(PythonExecutionError::WarmupFailed {
-                    exit_code: 1,
-                    stderr: format!(
-                        "unexpected Python prewarm JavaScript sync RPC request {} {} {:?}",
-                        sync_request.id, sync_request.method, sync_request.args
-                    ),
-                });
-            }
-            None => {
-                return Err(PythonExecutionError::WarmupFailed {
-                    exit_code: 1,
-                    stderr: format!(
-                        "python prewarm timed out after {}s\nstdout:\n{}\nstderr:\n{}\nsync rpc:\n{}",
-                        PYTHON_PREWARM_TIMEOUT.as_secs(),
-                        String::from_utf8_lossy(&stdout),
-                        String::from_utf8_lossy(&stderr),
-                        sync_rpc_log.join("\n"),
-                    ),
-                });
-            }
-        }
-    };
-    let duration_ms = started.elapsed().as_secs_f64() * 1000.0;
-
-    if result.exit_code != 0 {
-        return Err(PythonExecutionError::WarmupFailed {
-            exit_code: result.exit_code,
-            stderr: String::from_utf8_lossy(&result.stderr).into_owned(),
-        });
-    }
-
-    if marker_exists {
-        return Ok(warmup_metrics_line(
-            debug_enabled,
-            false,
-            "cached",
-            0.0,
-            import_cache,
-            context,
-            request,
-        ));
-    }
-
-    fs::write(&marker_path, marker_contents).map_err(PythonExecutionError::PrepareWarmPath)?;
-    Ok(warmup_metrics_line(
-        debug_enabled,
-        true,
-        "executed",
-        duration_ms,
-        import_cache,
-        context,
-        request,
-    ))
-}
-
-enum PythonJavascriptSyncRpcAction {
-    Success(Value),
-    Error { code: &'static str, message: String },
-}
-
-fn python_javascript_sync_rpc_action(
-    pyodide_dist_path: &Path,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Option<PythonJavascriptSyncRpcAction>, PythonExecutionError> {
-    let Some(path) = request.args.first().and_then(Value::as_str) else {
-        return Ok(None);
-    };
-    let path_kind = python_managed_path_kind(pyodide_dist_path, path);
-    let Some(host_path) = path_kind.host_path() else {
-        return Ok(None);
-    };
-
-    Ok(Some(match request.method.as_str() {
-        "fs.promises.readFile" | "fs.readFileSync" => {
-            let bytes = match fs::read(&host_path) {
-                Ok(bytes) => bytes,
-                Err(error) => {
-                    return python_sync_rpc_fs_action_error(path, "open", error).map(Some);
-                }
-            };
-            let encoding = python_prewarm_sync_rpc_encoding(&request.args);
-            match encoding.as_deref() {
-                Some("utf8") | Some("utf-8") => PythonJavascriptSyncRpcAction::Success(
-                    Value::String(String::from_utf8_lossy(&bytes).into_owned()),
-                ),
-                _ => PythonJavascriptSyncRpcAction::Success(json!({
-                    "__agentOSType": "bytes",
-                    "base64": v8_runtime::base64_encode_pub(&bytes),
-                })),
-            }
-        }
-        "fs.statSync" | "fs.promises.stat" => match fs::metadata(&host_path) {
-            Ok(metadata) => {
-                PythonJavascriptSyncRpcAction::Success(python_host_stat_value(&metadata))
-            }
-            Err(error) => return python_sync_rpc_fs_action_error(path, "stat", error).map(Some),
-        },
-        "fs.lstatSync" | "fs.promises.lstat" => match fs::symlink_metadata(&host_path) {
-            Ok(metadata) => {
-                PythonJavascriptSyncRpcAction::Success(python_host_stat_value(&metadata))
-            }
-            Err(error) => return python_sync_rpc_fs_action_error(path, "lstat", error).map(Some),
-        },
-        "fs.existsSync" => PythonJavascriptSyncRpcAction::Success(Value::Bool(host_path.exists())),
-        "fs.accessSync" | "fs.promises.access" => match fs::metadata(&host_path) {
-            Ok(_) => PythonJavascriptSyncRpcAction::Success(Value::Null),
-            Err(error) => return python_sync_rpc_fs_action_error(path, "access", error).map(Some),
-        },
-        "fs.readdirSync" | "fs.promises.readdir" => match fs::read_dir(&host_path) {
-            Ok(entries) => PythonJavascriptSyncRpcAction::Success(python_readdir_value(
-                entries
-                    .filter_map(|entry| entry.ok())
-                    .filter_map(|entry| entry.file_name().into_string().ok())
-                    .collect(),
-            )),
-            Err(error) => return python_sync_rpc_fs_action_error(path, "scandir", error).map(Some),
-        },
-        "fs.mkdirSync" | "fs.promises.mkdir" => {
-            let recursive = python_sync_rpc_recursive_flag(&request.args);
-            if recursive {
-                fs::create_dir_all(&host_path).map_err(PythonExecutionError::PrepareRuntime)?;
-            } else {
-                match fs::create_dir(&host_path) {
-                    Ok(()) => {}
-                    Err(error) => {
-                        return python_sync_rpc_fs_action_error(path, "mkdir", error).map(Some);
-                    }
-                }
-            }
-            PythonJavascriptSyncRpcAction::Success(Value::Null)
-        }
-        "fs.writeFileSync" | "fs.promises.writeFile" => {
-            let contents = python_sync_rpc_bytes_arg(&request.args, 1)?;
-            if let Some(parent) = host_path.parent() {
-                fs::create_dir_all(parent).map_err(PythonExecutionError::PrepareRuntime)?;
-            }
-            fs::write(&host_path, contents).map_err(PythonExecutionError::PrepareRuntime)?;
-            PythonJavascriptSyncRpcAction::Success(Value::Null)
-        }
-        "fs.realpathSync" | "fs.realpathSync.native" => match fs::canonicalize(&host_path) {
-            Ok(canonical) => PythonJavascriptSyncRpcAction::Success(Value::String(
-                path_kind.render_path(pyodide_dist_path, &canonical, path),
-            )),
-            Err(error) => {
-                return python_sync_rpc_fs_action_error(path, "realpath", error).map(Some);
-            }
-        },
-        _ => return Ok(None),
-    }))
-}
-
-fn python_sync_rpc_fs_action_error(
-    path: &str,
-    syscall: &str,
-    error: std::io::Error,
-) -> Result<PythonJavascriptSyncRpcAction, PythonExecutionError> {
-    let action = match error.kind() {
-        std::io::ErrorKind::NotFound => PythonJavascriptSyncRpcAction::Error {
-            code: "ENOENT",
-            message: format!("ENOENT: no such file or directory, {syscall} '{path}'"),
-        },
-        std::io::ErrorKind::AlreadyExists => PythonJavascriptSyncRpcAction::Error {
-            code: "EEXIST",
-            message: format!("EEXIST: file already exists, {syscall} '{path}'"),
-        },
-        std::io::ErrorKind::PermissionDenied => PythonJavascriptSyncRpcAction::Error {
-            code: "EACCES",
-            message: format!("EACCES: permission denied, {syscall} '{path}'"),
-        },
-        _ => {
-            return Err(PythonExecutionError::PrepareRuntime(std::io::Error::new(
-                error.kind(),
-                error.to_string(),
-            )));
-        }
-    };
-    Ok(action)
-}
-
-fn respond_python_javascript_sync_rpc_action(
-    execution: &mut JavascriptExecution,
-    id: u64,
-    action: PythonJavascriptSyncRpcAction,
-) -> Result<(), PythonExecutionError> {
-    match action {
-        PythonJavascriptSyncRpcAction::Success(value) => execution
-            .respond_sync_rpc_success(id, value)
-            .map_err(map_javascript_error),
-        PythonJavascriptSyncRpcAction::Error { code, message } => execution
-            .respond_sync_rpc_error(id, code, message)
-            .map_err(map_javascript_error),
-    }
-}
-
-#[derive(Debug, Clone)]
-enum PythonManagedPathKind {
-    GuestPyodide,
-    GuestCache,
-    HostManaged,
-    Unmanaged,
-}
-
-impl PythonManagedPathKind {
-    fn render_path(&self, pyodide_dist_path: &Path, canonical: &Path, original: &str) -> String {
-        match self {
-            Self::GuestPyodide | Self::GuestCache => {
-                python_host_path_to_guest(pyodide_dist_path, canonical)
-                    .unwrap_or_else(|| original.to_owned())
-            }
-            Self::HostManaged => canonical.display().to_string(),
-            Self::Unmanaged => original.to_owned(),
-        }
-    }
-}
-
-fn python_managed_path_kind(pyodide_dist_path: &Path, path: &str) -> PythonManagedResolvedPath {
-    let cache_path = pyodide_cache_path(pyodide_dist_path);
-
-    if let Some(normalized) = strip_guest_managed_root(path, PYODIDE_GUEST_ROOT) {
-        let root = canonicalize_existing_or_self(pyodide_dist_path);
-        let relative = normalize_relative_guest_suffix(normalized);
-        let host_path = if relative.as_os_str().is_empty() {
-            root.clone()
-        } else {
-            root.join(relative)
-        };
-        if confined_managed_path(&host_path, &root) {
-            return PythonManagedResolvedPath {
-                kind: PythonManagedPathKind::GuestPyodide,
-                host_path: Some(host_path),
-            };
-        }
-        return PythonManagedResolvedPath {
-            kind: PythonManagedPathKind::Unmanaged,
-            host_path: None,
-        };
-    }
-
-    if let Some(normalized) = strip_guest_managed_root(path, PYODIDE_CACHE_GUEST_ROOT) {
-        let root = canonicalize_existing_or_self(&cache_path);
-        let relative = normalize_relative_guest_suffix(normalized);
-        let host_path = if relative.as_os_str().is_empty() {
-            root.clone()
-        } else {
-            root.join(relative)
-        };
-        if confined_managed_path(&host_path, &root) {
-            return PythonManagedResolvedPath {
-                kind: PythonManagedPathKind::GuestCache,
-                host_path: Some(host_path),
-            };
-        }
-        return PythonManagedResolvedPath {
-            kind: PythonManagedPathKind::Unmanaged,
-            host_path: None,
-        };
-    }
-
-    let candidate = PathBuf::from(path);
-    let pyodide_root = canonicalize_existing_or_self(pyodide_dist_path);
-    let cache_root = canonicalize_existing_or_self(&cache_path);
-    if candidate.is_absolute()
-        && !path_has_parent_or_prefix_component(&candidate)
-        && confined_managed_path(&candidate, &pyodide_root)
-    {
-        return PythonManagedResolvedPath {
-            kind: PythonManagedPathKind::HostManaged,
-            host_path: Some(candidate),
-        };
-    }
-    if candidate.is_absolute()
-        && !path_has_parent_or_prefix_component(&candidate)
-        && confined_managed_path(&candidate, &cache_root)
-    {
-        return PythonManagedResolvedPath {
-            kind: PythonManagedPathKind::HostManaged,
-            host_path: Some(candidate),
-        };
-    }
-
-    PythonManagedResolvedPath {
-        kind: PythonManagedPathKind::Unmanaged,
-        host_path: None,
-    }
-}
-
-#[derive(Debug, Clone)]
-struct PythonManagedResolvedPath {
-    kind: PythonManagedPathKind,
-    host_path: Option<PathBuf>,
-}
-
-impl PythonManagedResolvedPath {
-    fn host_path(&self) -> Option<PathBuf> {
-        self.host_path.clone()
-    }
-
-    fn render_path(&self, pyodide_dist_path: &Path, canonical: &Path, original: &str) -> String {
-        self.kind
-            .render_path(pyodide_dist_path, canonical, original)
-    }
-}
-
-fn strip_guest_managed_root<'a>(path: &'a str, root: &str) -> Option<&'a str> {
-    if path == root {
-        return Some("");
-    }
-    path.strip_prefix(root)?.strip_prefix('/')
-}
-
-fn normalize_relative_guest_suffix(suffix: &str) -> PathBuf {
-    let mut normalized = PathBuf::new();
-    for segment in suffix.trim_start_matches('/').split('/') {
-        if segment.is_empty() || segment == "." {
-            continue;
-        }
-        if segment == ".." {
-            normalized.pop();
-        } else {
-            normalized.push(segment);
-        }
-    }
-    normalized
-}
-
-fn path_has_parent_or_prefix_component(path: &Path) -> bool {
-    path.components()
-        .any(|component| matches!(component, Component::ParentDir | Component::Prefix(_)))
-}
-
-fn canonicalize_existing_or_self(path: &Path) -> PathBuf {
-    fs::canonicalize(path).unwrap_or_else(|_| path.to_path_buf())
-}
-
-fn confined_managed_path(path: &Path, root: &Path) -> bool {
-    let canonical_root = canonicalize_existing_or_self(root);
-    let Some(canonical_path) = canonicalize_managed_candidate(path) else {
-        return false;
-    };
-
-    canonical_path == canonical_root || canonical_path.starts_with(canonical_root)
-}
-
-fn canonicalize_managed_candidate(path: &Path) -> Option<PathBuf> {
-    let mut missing_components = Vec::new();
-    let mut current = path;
-    loop {
-        match fs::canonicalize(current) {
-            Ok(mut canonical) => {
-                for component in missing_components.iter().rev() {
-                    canonical.push(component);
-                }
-                return Some(canonical);
-            }
-            Err(_) => {
-                let file_name = current.file_name()?.to_owned();
-                if Path::new(&file_name)
-                    .components()
-                    .any(|component| !matches!(component, Component::Normal(_)))
-                {
-                    return None;
-                }
-                missing_components.push(file_name);
-                current = current.parent()?;
-            }
-        }
-    }
-}
-
-fn python_host_path_to_guest(pyodide_dist_path: &Path, host_path: &Path) -> Option<String> {
-    if let Ok(relative) = host_path.strip_prefix(pyodide_dist_path) {
-        let suffix = relative.to_string_lossy().replace('\\', "/");
-        return Some(if suffix.is_empty() {
-            String::from(PYODIDE_GUEST_ROOT)
-        } else {
-            format!("{PYODIDE_GUEST_ROOT}/{suffix}")
-        });
-    }
-
-    let cache_path = pyodide_cache_path(pyodide_dist_path);
-    let relative = host_path.strip_prefix(cache_path).ok()?;
-    let suffix = relative.to_string_lossy().replace('\\', "/");
-    Some(if suffix.is_empty() {
-        String::from(PYODIDE_CACHE_GUEST_ROOT)
-    } else {
-        format!("{PYODIDE_CACHE_GUEST_ROOT}/{suffix}")
-    })
-}
-
-fn python_host_stat_value(metadata: &fs::Metadata) -> Value {
-    json!({
-        "mode": metadata.mode(),
-        "size": metadata.size(),
-        "blocks": metadata.blocks(),
-        "dev": metadata.dev(),
-        "rdev": metadata.rdev(),
-        "isDirectory": metadata.is_dir(),
-        "isSymbolicLink": metadata.file_type().is_symlink(),
-        "atimeMs": metadata.atime() * 1000 + (metadata.atime_nsec() / 1_000_000),
-        "mtimeMs": metadata.mtime() * 1000 + (metadata.mtime_nsec() / 1_000_000),
-        "ctimeMs": metadata.ctime() * 1000 + (metadata.ctime_nsec() / 1_000_000),
-        "birthtimeMs": metadata.ctime() * 1000 + (metadata.ctime_nsec() / 1_000_000),
-        "ino": metadata.ino(),
-        "nlink": metadata.nlink(),
-        "uid": metadata.uid(),
-        "gid": metadata.gid(),
-    })
-}
-
-fn python_readdir_value(entries: Vec<String>) -> Value {
-    json!(entries
-        .into_iter()
-        .filter(|entry| entry != "." && entry != "..")
-        .collect::<Vec<_>>())
-}
-
-fn python_sync_rpc_recursive_flag(args: &[Value]) -> bool {
-    args.get(1)
-        .and_then(|value| {
-            value
-                .as_bool()
-                .or_else(|| value.get("recursive").and_then(Value::as_bool))
-        })
-        .unwrap_or(false)
-}
-
-fn python_sync_rpc_bytes_arg(
-    args: &[Value],
-    index: usize,
-) -> Result<Vec<u8>, PythonExecutionError> {
-    let Some(value) = args.get(index) else {
-        return Err(PythonExecutionError::RpcResponse(format!(
-            "sync RPC argument {index} is required"
-        )));
-    };
-
-    if let Some(text) = value.as_str() {
-        return Ok(text.as_bytes().to_vec());
-    }
-
-    let Some(base64_value) = value
-        .get("__agentOSType")
-        .and_then(Value::as_str)
-        .filter(|kind| *kind == "bytes")
-        .and_then(|_| value.get("base64"))
-        .and_then(Value::as_str)
-    else {
-        return Err(PythonExecutionError::RpcResponse(format!(
-            "sync RPC argument {index} must be a string or encoded bytes payload"
-        )));
-    };
-
-    base64::engine::general_purpose::STANDARD
-        .decode(base64_value)
-        .map_err(|error| {
-            PythonExecutionError::RpcResponse(format!(
-                "sync RPC argument {index} contains invalid base64: {error}"
-            ))
-        })
-}
-
-fn python_prewarm_sync_rpc_encoding(args: &[Value]) -> Option<String> {
-    args.get(1).and_then(|value| {
-        value.as_str().map(str::to_owned).or_else(|| {
-            value
-                .get("encoding")
-                .and_then(Value::as_str)
-                .map(str::to_owned)
-        })
-    })
-}
-
-fn python_javascript_sync_rpc_error(
-    request: &JavascriptSyncRpcRequest,
-) -> Option<(&'static str, String)> {
-    if matches!(
-        request.method.as_str(),
-        "net.connect"
-            | "net.createConnection"
-            | "dns.lookup"
-            | "dns.resolve"
-            | "dns.resolve4"
-            | "dns.resolve6"
-            | "dns.reverse"
-            | "dgram.send"
-            | "http.request"
-            | "https.request"
-            | "tls.connect"
-    ) {
-        return Some((
-            "ERR_ACCESS_DENIED",
-            String::from(
-                "network access is not available during standalone guest Python execution",
-            ),
-        ));
-    }
-
-    None
-}
-
-fn warmup_marker_contents(
-    import_cache: &NodeImportCache,
-    context: &PythonContext,
-    request: &StartPythonExecutionRequest,
-) -> String {
-    let pyodide_dist_path = resolved_pyodide_dist_path(&context.pyodide_dist_path, &request.cwd);
-    let compile_cache_dir = import_cache.shared_compile_cache_dir();
-
-    [
-        env!("CARGO_PKG_NAME").to_string(),
-        env!("CARGO_PKG_VERSION").to_string(),
-        PYTHON_WARMUP_MARKER_VERSION.to_string(),
-        String::from("secure-exec-v8"),
-        python_max_old_space_mb(request).to_string(),
-        compile_cache_dir.display().to_string(),
-        pyodide_dist_path.display().to_string(),
-        file_fingerprint(&pyodide_dist_path.join("pyodide.mjs")),
-        file_fingerprint(&pyodide_dist_path.join("pyodide-lock.json")),
-        file_fingerprint(&pyodide_dist_path.join("pyodide.asm.js")),
-        file_fingerprint(&pyodide_dist_path.join("pyodide.asm.wasm")),
-        file_fingerprint(&pyodide_dist_path.join("python_stdlib.zip")),
-    ]
-    .join("\n")
-}
-
-fn python_warmup_metrics_enabled(request: &StartPythonExecutionRequest) -> bool {
-    env_flag_enabled(&request.env, PYTHON_WARMUP_DEBUG_ENV)
-}
-
-fn warmup_metrics_line(
-    debug_enabled: bool,
-    executed: bool,
-    reason: &str,
-    duration_ms: f64,
-    import_cache: &NodeImportCache,
-    context: &PythonContext,
-    request: &StartPythonExecutionRequest,
-) -> Option<Vec<u8>> {
-    if !debug_enabled {
-        return None;
-    }
-
-    let compile_cache_dir = import_cache.shared_compile_cache_dir();
-    let pyodide_dist_path = resolved_pyodide_dist_path(&context.pyodide_dist_path, &request.cwd);
-
-    Some(
-        format!(
-            "{PYTHON_WARMUP_METRICS_PREFIX}{{\"phase\":\"prewarm\",\"executed\":{},\"reason\":{},\"durationMs\":{duration_ms:.3},\"heapLimitMb\":{},\"compileCacheDir\":{},\"pyodideDistPath\":{}}}\n",
-            if executed { "true" } else { "false" },
-            encode_json_string(reason),
-            python_max_old_space_mb(request),
-            encode_json_string(&compile_cache_dir.display().to_string()),
-            encode_json_string(&pyodide_dist_path.display().to_string()),
-        )
-        .into_bytes(),
-    )
-}
-
-#[cfg(test)]
-mod tests {
-    use super::{
-        python_managed_path_kind, PythonManagedPathKind, PYODIDE_CACHE_GUEST_ROOT,
-        PYODIDE_GUEST_ROOT,
-    };
-    use std::fs;
-    #[cfg(unix)]
-    use std::os::unix::fs::symlink;
-    use tempfile::tempdir;
-
-    #[test]
-    fn python_managed_guest_paths_normalize_dot_dot_inside_root() {
-        let temp = tempdir().expect("create temp dir");
-        let pyodide = temp.path().join("pyodide");
-        fs::create_dir_all(pyodide.join("lib")).expect("create pyodide lib");
-
-        let resolved = python_managed_path_kind(
-            &pyodide,
-            &format!("{PYODIDE_GUEST_ROOT}/lib/../pyodide.mjs"),
-        );
-
-        assert!(matches!(resolved.kind, PythonManagedPathKind::GuestPyodide));
-        assert_eq!(
-            resolved.host_path().expect("host path"),
-            pyodide.join("pyodide.mjs")
-        );
-    }
-
-    #[test]
-    fn python_managed_guest_paths_clamp_dot_dot_escape_to_root() {
-        let temp = tempdir().expect("create temp dir");
-        let pyodide = temp.path().join("pyodide");
-        fs::create_dir_all(&pyodide).expect("create pyodide root");
-
-        let resolved =
-            python_managed_path_kind(&pyodide, &format!("{PYODIDE_GUEST_ROOT}/../../outside.txt"));
-
-        assert!(matches!(resolved.kind, PythonManagedPathKind::GuestPyodide));
-        assert_eq!(
-            resolved.host_path().expect("host path"),
-            pyodide.join("outside.txt")
-        );
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn python_managed_guest_paths_reject_symlink_escape() {
-        let temp = tempdir().expect("create temp dir");
-        let pyodide = temp.path().join("pyodide");
-        let outside = temp.path().join("outside");
-        fs::create_dir_all(&pyodide).expect("create pyodide root");
-        fs::create_dir_all(&outside).expect("create outside dir");
-        symlink(&outside, pyodide.join("escape")).expect("create escape symlink");
-
-        let resolved =
-            python_managed_path_kind(&pyodide, &format!("{PYODIDE_GUEST_ROOT}/escape/file.txt"));
-
-        assert!(matches!(resolved.kind, PythonManagedPathKind::Unmanaged));
-        assert!(resolved.host_path().is_none());
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn python_managed_guest_paths_reject_symlink_escape_to_missing_descendant() {
-        let temp = tempdir().expect("create temp dir");
-        let pyodide = temp.path().join("pyodide");
-        let outside = temp.path().join("outside");
-        fs::create_dir_all(&pyodide).expect("create pyodide root");
-        fs::create_dir_all(&outside).expect("create outside dir");
-        symlink(&outside, pyodide.join("escape")).expect("create escape symlink");
-
-        let resolved = python_managed_path_kind(
-            &pyodide,
-            &format!("{PYODIDE_GUEST_ROOT}/escape/missing/file.txt"),
-        );
-
-        assert!(matches!(resolved.kind, PythonManagedPathKind::Unmanaged));
-        assert!(resolved.host_path().is_none());
-    }
-
-    #[test]
-    fn python_managed_host_paths_accept_canonical_root_descendants() {
-        let temp = tempdir().expect("create temp dir");
-        let pyodide = temp.path().join("pyodide");
-        fs::create_dir_all(pyodide.join("pkg")).expect("create pyodide package dir");
-        let candidate = pyodide.join("pkg/module.py");
-
-        let resolved = python_managed_path_kind(&pyodide, &candidate.display().to_string());
-
-        assert!(matches!(resolved.kind, PythonManagedPathKind::HostManaged));
-        assert_eq!(resolved.host_path().expect("host path"), candidate);
-    }
-
-    #[test]
-    fn python_managed_host_paths_reject_unresolved_dot_dot_escape() {
-        let temp = tempdir().expect("create temp dir");
-        let pyodide = temp.path().join("pyodide");
-        fs::create_dir_all(&pyodide).expect("create pyodide root");
-        let candidate = pyodide.join("missing/../../outside.txt");
-
-        let resolved = python_managed_path_kind(&pyodide, &candidate.display().to_string());
-
-        assert!(matches!(resolved.kind, PythonManagedPathKind::Unmanaged));
-        assert!(resolved.host_path().is_none());
-    }
-
-    #[test]
-    fn python_managed_cache_guest_paths_resolve_inside_cache_root() {
-        let temp = tempdir().expect("create temp dir");
-        let pyodide = temp.path().join("pyodide");
-        fs::create_dir_all(&pyodide).expect("create pyodide root");
-
-        let resolved = python_managed_path_kind(
-            &pyodide,
-            &format!("{PYODIDE_CACHE_GUEST_ROOT}/wheels/pkg.whl"),
-        );
-        let host_path = resolved.host_path().expect("host path");
-
-        assert!(matches!(resolved.kind, PythonManagedPathKind::GuestCache));
-        assert!(host_path.ends_with("pyodide-package-cache/wheels/pkg.whl"));
-    }
-}
diff --git a/crates/execution/src/runtime_support.rs b/crates/execution/src/runtime_support.rs
deleted file mode 100644
index cf9ea2fd6..000000000
--- a/crates/execution/src/runtime_support.rs
+++ /dev/null
@@ -1,87 +0,0 @@
-use crate::common::stable_hash64;
-use std::collections::BTreeMap;
-use std::fs;
-use std::os::unix::fs::MetadataExt;
-use std::path::{Path, PathBuf};
-
-pub(crate) const NODE_COMPILE_CACHE_ENV: &str = "NODE_COMPILE_CACHE";
-pub(crate) const NODE_DISABLE_COMPILE_CACHE_ENV: &str = "NODE_DISABLE_COMPILE_CACHE";
-pub(crate) const NODE_FROZEN_TIME_ENV: &str = "AGENTOS_FROZEN_TIME_MS";
-pub(crate) const NODE_SANDBOX_ROOT_ENV: &str = "AGENTOS_SANDBOX_ROOT";
-
-pub(crate) fn env_flag_enabled(env: &BTreeMap<String, String>, key: &str) -> bool {
-    env.get(key).is_some_and(|value| value == "1")
-}
-
-pub(crate) fn resolve_execution_path(path: &Path, cwd: &Path) -> PathBuf {
-    if path.is_absolute() {
-        path.to_path_buf()
-    } else {
-        cwd.join(path)
-    }
-}
-
-pub(crate) fn warmup_marker_path(
-    marker_dir: &Path,
-    prefix: &str,
-    version: &str,
-    contents: &str,
-) -> PathBuf {
-    marker_dir.join(format!(
-        "{prefix}-v{version}-{:016x}.stamp",
-        stable_hash64(contents.as_bytes())
-    ))
-}
-
-pub(crate) fn file_fingerprint(path: &Path) -> String {
-    match fs::metadata(path) {
-        Ok(metadata) => format!(
-            "{}:{}:{}:{}:{}",
-            metadata.dev(),
-            metadata.ino(),
-            metadata.size(),
-            metadata.mtime(),
-            metadata.mtime_nsec(),
-        ),
-        Err(_) => String::from("missing"),
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::file_fingerprint;
-    use std::fs;
-    use std::os::unix::fs::MetadataExt;
-    use tempfile::tempdir;
-
-    #[test]
-    fn file_fingerprint_tracks_inode_and_mutation_time() {
-        let temp = tempdir().expect("create temp dir");
-        let path = temp.path().join("module.wasm");
-
-        fs::write(&path, b"first").expect("write wasm file");
-        let metadata = fs::metadata(&path).expect("stat wasm file");
-        let first = file_fingerprint(&path);
-
-        assert_eq!(
-            first,
-            format!(
-                "{}:{}:{}:{}:{}",
-                metadata.dev(),
-                metadata.ino(),
-                metadata.size(),
-                metadata.mtime(),
-                metadata.mtime_nsec(),
-            )
-        );
-
-        std::thread::sleep(std::time::Duration::from_millis(25));
-        fs::write(&path, b"second").expect("overwrite wasm file");
-
-        assert_ne!(
-            file_fingerprint(&path),
-            first,
-            "rewriting a tracked asset in place must invalidate warmup markers"
-        );
-    }
-}
diff --git a/crates/execution/src/signal.rs b/crates/execution/src/signal.rs
deleted file mode 100644
index 4a739f674..000000000
--- a/crates/execution/src/signal.rs
+++ /dev/null
@@ -1,17 +0,0 @@
-use serde::{Deserialize, Serialize};
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
-#[serde(rename_all = "snake_case")]
-pub enum NodeSignalDispositionAction {
-    Default,
-    Ignore,
-    User,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-#[serde(rename_all = "camelCase")]
-pub struct NodeSignalHandlerRegistration {
-    pub action: NodeSignalDispositionAction,
-    pub mask: Vec<u32>,
-    pub flags: u32,
-}
diff --git a/crates/execution/src/v8_host.rs b/crates/execution/src/v8_host.rs
deleted file mode 100644
index 40934bed6..000000000
--- a/crates/execution/src/v8_host.rs
+++ /dev/null
@@ -1,502 +0,0 @@
-//! V8 runtime host — manages a shared embedded V8 runtime with session multiplexing.
-
-use crate::v8_ipc::{self, BinaryFrame};
-use secure_exec_bridge::queue_tracker::{tracked_sync_channel, TrackedLimit, TrackedReceiver};
-use secure_exec_v8_runtime::embedded_runtime::{
-    shared_embedded_runtime, EmbeddedV8Runtime, EmbeddedV8SessionHandle,
-};
-use secure_exec_v8_runtime::runtime_protocol::{RuntimeCommand, RuntimeEvent, WarmSessionHint};
-use std::io::{self, Cursor};
-use std::sync::{Arc, OnceLock};
-use std::thread;
-
-const V8_SESSION_FRAME_CHANNEL_CAPACITY: usize = 1024;
-
-/// V8 polyfill bridge code generated by `build.rs`.
-const V8_BRIDGE_CODE: &str = concat!(
-    include_str!(concat!(env!("OUT_DIR"), "/v8-bridge.js")),
-    "\n",
-    include_str!(concat!(env!("OUT_DIR"), "/v8-bridge-zlib.js"))
-);
-
-/// Manages an embedded V8 runtime with session multiplexing.
-pub struct V8RuntimeHost {
-    shared: Arc<SharedEmbeddedRuntimeClient>,
-}
-
-struct SharedEmbeddedRuntimeClient {
-    runtime: Arc<EmbeddedV8Runtime>,
-}
-
-impl V8RuntimeHost {
-    /// Connect to the process-global embedded V8 runtime client.
-    pub fn spawn() -> io::Result<Self> {
-        Ok(V8RuntimeHost {
-            shared: shared_embedded_runtime_client()?,
-        })
-    }
-
-    /// Register a session and return a receiver for its frames.
-    pub fn register_session(&self, session_id: &str) -> io::Result<TrackedReceiver<BinaryFrame>> {
-        let (runtime_receiver, registration) = self
-            .shared
-            .runtime
-            .register_session_with_output_registration(session_id)?;
-        let (sender, receiver) = tracked_sync_channel(
-            TrackedLimit::V8SessionFrames,
-            V8_SESSION_FRAME_CHANNEL_CAPACITY,
-        );
-        let thread_name = format!("secure-exec-v8-session-{session_id}");
-        let runtime = Arc::clone(&self.shared.runtime);
-        let runtime_for_thread = Arc::clone(&runtime);
-
-        let spawn_result = thread::Builder::new().name(thread_name).spawn(move || {
-            while let Ok(frame) = runtime_receiver.recv() {
-                // Apply backpressure instead of destroying the session when
-                // the downstream consumer is slow. This thread is dedicated
-                // to one session, so a blocking send safely parks it — and,
-                // in turn, backpressures the V8 runtime — until a slot frees.
-                // Previously a `try_send` that hit the full channel called
-                // destroy_session_if_output_current(), tearing the session
-                // down on a transient backlog (the same anti-pattern fixed
-                // for the event/stdout queues). Only a dropped receiver
-                // (the consumer is gone for good) is terminal.
-                if sender.send(from_runtime_event(frame)).is_err() {
-                    let _ = runtime_for_thread.destroy_session_if_output_current(&registration);
-                    break;
-                }
-            }
-        });
-        if let Err(error) = spawn_result {
-            runtime.unregister_session(session_id);
-            return Err(error);
-        }
-
-        Ok(receiver)
-    }
-
-    /// Unregister a session.
-    pub fn unregister_session(&self, session_id: &str) {
-        self.shared.runtime.unregister_session(session_id);
-    }
-
-    pub fn create_session(
-        &self,
-        session_id: String,
-        heap_limit_mb: u32,
-        cpu_time_limit_ms: u32,
-        wall_clock_limit_ms: u32,
-        warm_hint: Option<WarmSessionHint>,
-    ) -> io::Result<()> {
-        self.shared.runtime.dispatch(RuntimeCommand::CreateSession {
-            session_id,
-            heap_limit_mb: non_zero_option(heap_limit_mb),
-            cpu_time_limit_ms: non_zero_option(cpu_time_limit_ms),
-            wall_clock_limit_ms: non_zero_option(wall_clock_limit_ms),
-            warm_hint,
-        })
-    }
-
-    pub fn create_session_from_command(&self, command: RuntimeCommand) -> io::Result<()> {
-        self.shared.runtime.dispatch(command)
-    }
-
-    /// Send a frame to the V8 runtime.
-    pub fn send_frame(&self, frame: &BinaryFrame) -> io::Result<()> {
-        self.shared.runtime.dispatch(to_runtime_command(frame)?)
-    }
-
-    /// Get the pre-bundled bridge code (polyfills).
-    pub fn bridge_code() -> &'static str {
-        V8_BRIDGE_CODE
-    }
-
-    /// Pre-build the per-sidecar snapshot for an agent-SDK `userland_code` bundle
-    /// into the process-wide cache, so the FIRST session that uses it is already
-    /// warm (no cold-build penalty on the session-create path). Blocks until the
-    /// snapshot is built; idempotent (a cache hit returns immediately). A no-op for
-    /// empty `userland_code`.
-    pub fn pre_warm_snapshot(&self, userland_code: &str) -> io::Result<()> {
-        if userland_code.is_empty() {
-            return Ok(());
-        }
-        self.shared.runtime.dispatch(RuntimeCommand::WarmSnapshot {
-            bridge_code: Self::bridge_code().to_owned(),
-            userland_code: userland_code.to_owned(),
-        })
-    }
-
-    pub fn pre_warm_workers(&self, userland_code: &str, heap_limit_mb: u32, count: usize) {
-        self.shared.runtime.pre_warm_workers(
-            Self::bridge_code().to_owned(),
-            userland_code.to_owned(),
-            non_zero_option(heap_limit_mb),
-            count,
-        );
-    }
-
-    pub fn seed_default_warm_workers_async(&self) {
-        static DEFAULT_WARM_STARTED: OnceLock<()> = OnceLock::new();
-        let runtime = Arc::clone(&self.shared.runtime);
-        let _ = DEFAULT_WARM_STARTED.get_or_init(|| {
-            let _ = thread::Builder::new()
-                .name(String::from("secure-exec-v8-default-warm"))
-                .spawn(move || {
-                    runtime.pre_warm_workers(
-                        V8_BRIDGE_CODE.to_owned(),
-                        String::new(),
-                        None,
-                        warm_worker_count(),
-                    );
-                });
-        });
-    }
-
-    /// True when the process-wide snapshot cache already has this userland
-    /// bundle. This is a lookup only; it never creates a snapshot.
-    pub fn snapshot_ready(&self, userland_code: &str) -> bool {
-        self.shared
-            .runtime
-            .snapshot_ready(Self::bridge_code(), userland_code)
-    }
-
-    /// Kick a process-wide async warm for the wasm runner snapshot. At most one
-    /// warm thread is spawned per process; blocking callers should use
-    /// [`pre_warm_snapshot`](Self::pre_warm_snapshot).
-    pub fn warm_snapshot_async(userland_code: String) {
-        if userland_code.is_empty() {
-            return;
-        }
-        static WASM_RUNNER_WARM_STARTED: OnceLock<()> = OnceLock::new();
-        let _ = WASM_RUNNER_WARM_STARTED.get_or_init(|| {
-            let _ = thread::Builder::new()
-                .name(String::from("secure-exec-wasm-snapshot-warm"))
-                .spawn(move || {
-                    let Ok(host) = V8RuntimeHost::spawn() else {
-                        return;
-                    };
-                    if let Err(error) = host.pre_warm_snapshot(&userland_code) {
-                        eprintln!(
-                            "secure-exec-v8-runtime: wasm runner snapshot warm failed: {error}"
-                        );
-                    }
-                });
-        });
-    }
-
-    /// Create a session handle for sending session-scoped frames and cleanup.
-    pub fn session_handle(&self, session_id: String) -> V8SessionHandle {
-        V8SessionHandle::new(session_id, Arc::clone(&self.shared.runtime))
-    }
-
-    pub fn child_pid(&self) -> u32 {
-        0
-    }
-
-    pub fn is_alive(&mut self) -> io::Result<bool> {
-        Ok(self.shared.runtime.is_alive())
-    }
-
-    #[cfg(test)]
-    fn runtime_ptr(&self) -> usize {
-        Arc::as_ptr(&self.shared.runtime) as usize
-    }
-}
-
-fn non_zero_option(value: u32) -> Option<u32> {
-    (value > 0).then_some(value)
-}
-
-fn warm_worker_count() -> usize {
-    std::env::var("AGENTOS_V8_WARM_ISOLATES")
-        .ok()
-        .and_then(|value| value.parse::<usize>().ok())
-        .unwrap_or(2)
-}
-
-/// A handle to a single V8 session within the shared runtime.
-/// Provides methods for sending frames specific to this session.
-pub struct V8SessionHandle {
-    inner: EmbeddedV8SessionHandle,
-}
-
-impl std::fmt::Debug for V8SessionHandle {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        f.debug_struct("V8SessionHandle")
-            .field("session_id", &self.inner.session_id())
-            .finish()
-    }
-}
-
-impl V8SessionHandle {
-    pub fn new(session_id: String, runtime: Arc<EmbeddedV8Runtime>) -> Self {
-        Self {
-            inner: runtime.session_handle(session_id),
-        }
-    }
-
-    /// Send a bridge response back to the V8 isolate.
-    pub fn send_bridge_response(
-        &self,
-        call_id: u64,
-        status: u8,
-        payload: Vec<u8>,
-    ) -> io::Result<()> {
-        self.inner.send_bridge_response(call_id, status, payload)
-    }
-
-    /// Send a stream event to the V8 isolate (stdin data, timer, etc.).
-    pub fn send_stream_event(&self, event_type: &str, payload: Vec<u8>) -> io::Result<()> {
-        self.inner.send_stream_event(event_type, payload)
-    }
-
-    /// Install a direct module-source reader on this session's V8 thread so module
-    /// loads read source directly instead of round-tripping the bridge.
-    pub fn set_module_reader(
-        &self,
-        reader: Box<dyn secure_exec_v8_runtime::execution::GuestModuleReader>,
-    ) -> io::Result<()> {
-        self.inner.set_module_reader(reader)
-    }
-
-    /// Execute bridge code + user code in this V8 session without routing through
-    /// the legacy binary frame encode/decode path.
-    #[allow(clippy::too_many_arguments)] // mirrors the CreateSession frame
-    pub fn execute(
-        &self,
-        mode: u8,
-        file_path: String,
-        bridge_code: String,
-        post_restore_script: String,
-        userland_code: String,
-        high_resolution_time: bool,
-        user_code: String,
-        wasm_module_bytes: Option<Arc<Vec<u8>>>,
-    ) -> io::Result<()> {
-        self.inner.execute(
-            mode,
-            file_path,
-            bridge_code,
-            post_restore_script,
-            userland_code,
-            high_resolution_time,
-            user_code,
-            wasm_module_bytes,
-        )
-    }
-
-    /// Terminate execution in this session.
-    pub fn terminate(&self) -> io::Result<()> {
-        self.inner.terminate()
-    }
-
-    /// Destroy this session in the embedded runtime and remove its receiver.
-    pub fn destroy(&self) -> io::Result<()> {
-        let _ = self.inner.terminate();
-        self.inner.destroy()
-    }
-
-    pub fn session_id(&self) -> &str {
-        self.inner.session_id()
-    }
-}
-
-impl Clone for V8SessionHandle {
-    fn clone(&self) -> Self {
-        Self {
-            inner: self.inner.clone(),
-        }
-    }
-}
-
-/// Pre-build the per-sidecar snapshot for an agent-SDK `userland_code` bundle into
-/// the process-wide cache, so the FIRST session that uses it is already warm. Uses
-/// the shared embedded runtime directly (no per-call host lifecycle). Blocks until
-/// built; idempotent (cache hit returns immediately); no-op for empty input.
-/// Eagerly initialize the process-wide embedded V8 runtime (and the V8 platform)
-/// on the calling thread. Call this once on a long-lived thread (the sidecar main
-/// thread) at startup so V8 is NOT first initialized on a transient worker thread
-/// (e.g. a VM-create pre-warm thread that then exits, which corrupts the platform).
-pub fn ensure_runtime_initialized() -> io::Result<()> {
-    shared_embedded_runtime_client().map(|_| ())
-}
-
-pub fn pre_warm_agent_snapshot(userland_code: &str) -> io::Result<()> {
-    if userland_code.is_empty() {
-        return Ok(());
-    }
-    let userland = userland_code.to_owned();
-    // Build the SnapshotCreator on a dedicated, fully-joined std::thread rather than
-    // the caller's (tokio blocking-pool) thread. V8 SnapshotCreator isolates are
-    // thread-sensitive; a reused pool thread leaves per-thread V8 state that corrupts
-    // later isolate creation. A spawned+joined thread tears down cleanly, mirroring
-    // how per-session snapshot builds run on their own dedicated session threads.
-    let handle = std::thread::Builder::new()
-        .name("agentos-snapshot-prewarm".to_owned())
-        .spawn(move || -> io::Result<()> {
-            let client = shared_embedded_runtime_client()?;
-            client.runtime.dispatch(RuntimeCommand::WarmSnapshot {
-                bridge_code: V8_BRIDGE_CODE.to_owned(),
-                userland_code: userland,
-            })
-        })?;
-    handle
-        .join()
-        .map_err(|_| io::Error::other("snapshot pre-warm thread panicked"))?
-}
-
-fn shared_embedded_runtime_client() -> io::Result<Arc<SharedEmbeddedRuntimeClient>> {
-    static SHARED_RUNTIME: OnceLock<Arc<SharedEmbeddedRuntimeClient>> = OnceLock::new();
-    static SHARED_RUNTIME_INIT_LOCK: std::sync::Mutex<()> = std::sync::Mutex::new(());
-
-    if let Some(shared) = SHARED_RUNTIME.get() {
-        return Ok(Arc::clone(shared));
-    }
-
-    let _guard = SHARED_RUNTIME_INIT_LOCK
-        .lock()
-        .expect("shared embedded runtime init lock poisoned");
-    if let Some(shared) = SHARED_RUNTIME.get() {
-        return Ok(Arc::clone(shared));
-    }
-
-    let shared = Arc::new(SharedEmbeddedRuntimeClient {
-        runtime: shared_embedded_runtime()?,
-    });
-    let _ = SHARED_RUNTIME.set(Arc::clone(&shared));
-    Ok(shared)
-}
-
-fn to_runtime_command(frame: &BinaryFrame) -> io::Result<RuntimeCommand> {
-    let bytes = v8_ipc::encode_frame(frame)?;
-    let runtime_frame = secure_exec_v8_runtime::ipc_binary::read_frame(&mut Cursor::new(bytes))?;
-    RuntimeCommand::try_from(runtime_frame)
-}
-
-fn from_runtime_event(event: RuntimeEvent) -> BinaryFrame {
-    match event {
-        RuntimeEvent::BridgeCall {
-            session_id,
-            call_id,
-            method,
-            payload,
-        } => BinaryFrame::BridgeCall {
-            session_id,
-            call_id,
-            method,
-            payload,
-        },
-        RuntimeEvent::ExecutionResult {
-            session_id,
-            exit_code,
-            exports,
-            error,
-        } => BinaryFrame::ExecutionResult {
-            session_id,
-            exit_code,
-            exports,
-            error: error.map(from_runtime_execution_error),
-        },
-        RuntimeEvent::Log {
-            session_id,
-            channel,
-            message,
-        } => BinaryFrame::Log {
-            session_id,
-            channel,
-            message,
-        },
-        RuntimeEvent::StreamCallback {
-            session_id,
-            callback_type,
-            payload,
-        } => BinaryFrame::StreamCallback {
-            session_id,
-            callback_type,
-            payload,
-        },
-    }
-}
-
-fn from_runtime_execution_error(
-    error: secure_exec_v8_runtime::ipc_binary::ExecutionErrorBin,
-) -> v8_ipc::ExecutionErrorBin {
-    v8_ipc::ExecutionErrorBin {
-        error_type: error.error_type,
-        message: error.message,
-        stack: error.stack,
-        code: error.code,
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::sync::atomic::{AtomicU64, Ordering};
-
-    static NEXT_TEST_SESSION_ID: AtomicU64 = AtomicU64::new(1);
-
-    fn next_session_id() -> String {
-        format!(
-            "embedded-runtime-host-{}",
-            NEXT_TEST_SESSION_ID.fetch_add(1, Ordering::Relaxed)
-        )
-    }
-
-    #[test]
-    fn embedded_runtime_host_reuses_shared_runtime_service() {
-        let first = V8RuntimeHost::spawn().expect("spawn V8 runtime host");
-        let second = V8RuntimeHost::spawn().expect("spawn V8 runtime host");
-        assert_eq!(
-            first.runtime_ptr(),
-            second.runtime_ptr(),
-            "V8 runtime hosts should reuse the same embedded runtime service"
-        );
-    }
-
-    #[test]
-    fn embedded_runtime_host_create_destroy_recycles_session_ids() {
-        let host = V8RuntimeHost::spawn().expect("spawn V8 runtime host");
-        let session_id = next_session_id();
-
-        let _first_receiver = host
-            .register_session(&session_id)
-            .expect("register session output");
-        host.send_frame(&BinaryFrame::CreateSession {
-            session_id: session_id.clone(),
-            heap_limit_mb: 0,
-            cpu_time_limit_ms: 0,
-            wall_clock_limit_ms: 0,
-        })
-        .expect("create embedded runtime session");
-
-        let duplicate_error = host
-            .send_frame(&BinaryFrame::CreateSession {
-                session_id: session_id.clone(),
-                heap_limit_mb: 0,
-                cpu_time_limit_ms: 0,
-                wall_clock_limit_ms: 0,
-            })
-            .expect_err("duplicate session ids should be rejected");
-        assert_eq!(duplicate_error.kind(), io::ErrorKind::Other);
-
-        host.session_handle(session_id.clone())
-            .destroy()
-            .expect("destroy embedded runtime session");
-
-        let _second_receiver = host
-            .register_session(&session_id)
-            .expect("re-register session output");
-        host.send_frame(&BinaryFrame::CreateSession {
-            session_id: session_id.clone(),
-            heap_limit_mb: 0,
-            cpu_time_limit_ms: 0,
-            wall_clock_limit_ms: 0,
-        })
-        .expect("recreate embedded runtime session");
-
-        host.session_handle(session_id)
-            .destroy()
-            .expect("destroy recreated session");
-    }
-}
diff --git a/crates/execution/src/v8_ipc.rs b/crates/execution/src/v8_ipc.rs
deleted file mode 100644
index c9999d357..000000000
--- a/crates/execution/src/v8_ipc.rs
+++ /dev/null
@@ -1,613 +0,0 @@
-//! Binary IPC framing for communication with the secure-exec-v8 runtime process.
-//!
-//! Wire format per frame:
-//!   [4B total_len (u32 BE, excludes self)]
-//!   [1B msg_type]
-//!   [1B sid_len (N)]
-//!   [N bytes session_id (UTF-8)]
-//!   [... type-specific fixed fields ...]
-//!   [M bytes payload (rest of frame)]
-
-use std::io;
-
-/// Maximum frame payload: 64 MB.
-const MAX_FRAME_SIZE: u32 = 64 * 1024 * 1024;
-
-// Host → V8 message type codes
-const MSG_AUTHENTICATE: u8 = 0x01;
-const MSG_CREATE_SESSION: u8 = 0x02;
-const MSG_DESTROY_SESSION: u8 = 0x03;
-const MSG_INJECT_GLOBALS: u8 = 0x04;
-const MSG_EXECUTE: u8 = 0x05;
-const MSG_BRIDGE_RESPONSE: u8 = 0x06;
-const MSG_STREAM_EVENT: u8 = 0x07;
-const MSG_TERMINATE_EXECUTION: u8 = 0x08;
-
-// V8 → Host message type codes
-const MSG_BRIDGE_CALL: u8 = 0x81;
-const MSG_EXECUTION_RESULT: u8 = 0x82;
-const MSG_LOG: u8 = 0x83;
-const MSG_STREAM_CALLBACK: u8 = 0x84;
-
-// ExecutionResult flags
-const FLAG_HAS_EXPORTS: u8 = 0x01;
-const FLAG_HAS_ERROR: u8 = 0x02;
-
-/// A decoded binary frame.
-#[derive(Debug, Clone, PartialEq)]
-pub enum BinaryFrame {
-    // Host → V8
-    Authenticate {
-        token: String,
-    },
-    CreateSession {
-        session_id: String,
-        heap_limit_mb: u32,
-        cpu_time_limit_ms: u32,
-        wall_clock_limit_ms: u32,
-    },
-    DestroySession {
-        session_id: String,
-    },
-    InjectGlobals {
-        session_id: String,
-        payload: Vec<u8>,
-    },
-    Execute {
-        session_id: String,
-        mode: u8, // 0 = exec (CJS), 1 = run (ESM)
-        file_path: String,
-        bridge_code: String,
-        post_restore_script: String,
-        // Optional agent-SDK bundle evaluated into the per-sidecar snapshot
-        // alongside the bridge (empty = bridge-only snapshot). Must stay
-        // wire-compatible with v8-runtime's ipc_binary BinaryFrame::Execute.
-        userland_code: String,
-        high_resolution_time: bool,
-        user_code: String,
-    },
-    BridgeResponse {
-        session_id: String,
-        call_id: u64,
-        status: u8, // 0 = success, 1 = error, 2 = raw binary
-        payload: Vec<u8>,
-    },
-    StreamEvent {
-        session_id: String,
-        event_type: String,
-        payload: Vec<u8>,
-    },
-    TerminateExecution {
-        session_id: String,
-    },
-
-    // V8 → Host
-    BridgeCall {
-        session_id: String,
-        call_id: u64,
-        method: String,
-        payload: Vec<u8>,
-    },
-    ExecutionResult {
-        session_id: String,
-        exit_code: i32,
-        exports: Option<Vec<u8>>,
-        error: Option<ExecutionErrorBin>,
-    },
-    Log {
-        session_id: String,
-        channel: u8, // 0 = stdout, 1 = stderr
-        message: String,
-    },
-    StreamCallback {
-        session_id: String,
-        callback_type: String,
-        payload: Vec<u8>,
-    },
-}
-
-/// Structured error from V8 execution.
-#[derive(Debug, Clone, PartialEq)]
-pub struct ExecutionErrorBin {
-    pub error_type: String,
-    pub message: String,
-    pub stack: String,
-    pub code: String,
-}
-
-/// Encode a frame into a byte buffer (length prefix + body).
-pub fn encode_frame(frame: &BinaryFrame) -> io::Result<Vec<u8>> {
-    let mut buf = Vec::new();
-    // Reserve 4 bytes for length prefix
-    buf.extend_from_slice(&[0, 0, 0, 0]);
-    encode_body(&mut buf, frame)?;
-    let total_len = buf.len() - 4;
-    if total_len > MAX_FRAME_SIZE as usize {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            format!("frame size {total_len} exceeds maximum {MAX_FRAME_SIZE}"),
-        ));
-    }
-    buf[..4].copy_from_slice(&(total_len as u32).to_be_bytes());
-    Ok(buf)
-}
-
-/// Decode a frame from raw bytes (after the 4-byte length prefix has been read).
-pub fn decode_frame(buf: &[u8]) -> io::Result<BinaryFrame> {
-    if buf.is_empty() {
-        return Err(io::Error::new(io::ErrorKind::InvalidData, "empty frame"));
-    }
-    if buf.len() > MAX_FRAME_SIZE as usize {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            format!("frame size {} exceeds maximum {MAX_FRAME_SIZE}", buf.len()),
-        ));
-    }
-
-    let msg_type = buf[0];
-    let mut pos = 1;
-
-    let sid_len = read_u8(buf, &mut pos)? as usize;
-    let session_id = read_utf8(buf, &mut pos, sid_len)?;
-
-    match msg_type {
-        MSG_AUTHENTICATE => {
-            let remaining = buf.len() - pos;
-            let token = read_utf8(buf, &mut pos, remaining)?;
-            Ok(BinaryFrame::Authenticate { token })
-        }
-        MSG_CREATE_SESSION => {
-            let heap_limit_mb = read_u32(buf, &mut pos)?;
-            let cpu_time_limit_ms = read_u32(buf, &mut pos)?;
-            let wall_clock_limit_ms = read_u32(buf, &mut pos)?;
-            Ok(BinaryFrame::CreateSession {
-                session_id,
-                heap_limit_mb,
-                cpu_time_limit_ms,
-                wall_clock_limit_ms,
-            })
-        }
-        MSG_DESTROY_SESSION => Ok(BinaryFrame::DestroySession { session_id }),
-        MSG_INJECT_GLOBALS => {
-            let payload = buf[pos..].to_vec();
-            Ok(BinaryFrame::InjectGlobals {
-                session_id,
-                payload,
-            })
-        }
-        MSG_EXECUTE => {
-            let mode = read_u8(buf, &mut pos)?;
-            let fp_len = read_u16(buf, &mut pos)? as usize;
-            let file_path = read_utf8(buf, &mut pos, fp_len)?;
-            let bc_len = read_u32(buf, &mut pos)? as usize;
-            let bridge_code = read_utf8(buf, &mut pos, bc_len)?;
-            let prs_len = read_u32(buf, &mut pos)? as usize;
-            let post_restore_script = read_utf8(buf, &mut pos, prs_len)?;
-            let ul_len = read_u32(buf, &mut pos)? as usize;
-            let userland_code = read_utf8(buf, &mut pos, ul_len)?;
-            let high_resolution_time = read_u8(buf, &mut pos)? != 0;
-            let remaining = buf.len() - pos;
-            let user_code = read_utf8(buf, &mut pos, remaining)?;
-            Ok(BinaryFrame::Execute {
-                session_id,
-                mode,
-                file_path,
-                bridge_code,
-                post_restore_script,
-                userland_code,
-                high_resolution_time,
-                user_code,
-            })
-        }
-        MSG_BRIDGE_RESPONSE => {
-            let call_id = read_u64(buf, &mut pos)?;
-            let status = read_u8(buf, &mut pos)?;
-            let payload = buf[pos..].to_vec();
-            Ok(BinaryFrame::BridgeResponse {
-                session_id,
-                call_id,
-                status,
-                payload,
-            })
-        }
-        MSG_STREAM_EVENT => {
-            let et_len = read_u16(buf, &mut pos)? as usize;
-            let event_type = read_utf8(buf, &mut pos, et_len)?;
-            let payload = buf[pos..].to_vec();
-            Ok(BinaryFrame::StreamEvent {
-                session_id,
-                event_type,
-                payload,
-            })
-        }
-        MSG_TERMINATE_EXECUTION => Ok(BinaryFrame::TerminateExecution { session_id }),
-        MSG_BRIDGE_CALL => {
-            let call_id = read_u64(buf, &mut pos)?;
-            let m_len = read_u16(buf, &mut pos)? as usize;
-            let method = read_utf8(buf, &mut pos, m_len)?;
-            let payload = buf[pos..].to_vec();
-            Ok(BinaryFrame::BridgeCall {
-                session_id,
-                call_id,
-                method,
-                payload,
-            })
-        }
-        MSG_EXECUTION_RESULT => {
-            let exit_code = read_i32(buf, &mut pos)?;
-            let flags = read_u8(buf, &mut pos)?;
-            let exports = if flags & FLAG_HAS_EXPORTS != 0 {
-                let exp_len = read_u32(buf, &mut pos)? as usize;
-                let data = read_bytes(buf, &mut pos, exp_len)?;
-                Some(data)
-            } else {
-                None
-            };
-            let error = if flags & FLAG_HAS_ERROR != 0 {
-                let error_type = read_len_prefixed_u16(buf, &mut pos)?;
-                let message = read_len_prefixed_u16(buf, &mut pos)?;
-                let stack = read_len_prefixed_u16(buf, &mut pos)?;
-                let code = read_len_prefixed_u16(buf, &mut pos)?;
-                Some(ExecutionErrorBin {
-                    error_type,
-                    message,
-                    stack,
-                    code,
-                })
-            } else {
-                None
-            };
-            Ok(BinaryFrame::ExecutionResult {
-                session_id,
-                exit_code,
-                exports,
-                error,
-            })
-        }
-        MSG_LOG => {
-            let channel = read_u8(buf, &mut pos)?;
-            let remaining = buf.len() - pos;
-            let message = read_utf8(buf, &mut pos, remaining)?;
-            Ok(BinaryFrame::Log {
-                session_id,
-                channel,
-                message,
-            })
-        }
-        MSG_STREAM_CALLBACK => {
-            let ct_len = read_u16(buf, &mut pos)? as usize;
-            let callback_type = read_utf8(buf, &mut pos, ct_len)?;
-            let payload = buf[pos..].to_vec();
-            Ok(BinaryFrame::StreamCallback {
-                session_id,
-                callback_type,
-                payload,
-            })
-        }
-        _ => Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            format!("unknown message type: 0x{msg_type:02x}"),
-        )),
-    }
-}
-
-// -- Encode body --
-
-fn encode_body(buf: &mut Vec<u8>, frame: &BinaryFrame) -> io::Result<()> {
-    match frame {
-        BinaryFrame::Authenticate { token } => {
-            buf.push(MSG_AUTHENTICATE);
-            buf.push(0); // no session_id
-            buf.extend_from_slice(token.as_bytes());
-        }
-        BinaryFrame::CreateSession {
-            session_id,
-            heap_limit_mb,
-            cpu_time_limit_ms,
-            wall_clock_limit_ms,
-        } => {
-            buf.push(MSG_CREATE_SESSION);
-            write_session_id(buf, session_id)?;
-            buf.extend_from_slice(&heap_limit_mb.to_be_bytes());
-            buf.extend_from_slice(&cpu_time_limit_ms.to_be_bytes());
-            buf.extend_from_slice(&wall_clock_limit_ms.to_be_bytes());
-        }
-        BinaryFrame::DestroySession { session_id } => {
-            buf.push(MSG_DESTROY_SESSION);
-            write_session_id(buf, session_id)?;
-        }
-        BinaryFrame::InjectGlobals {
-            session_id,
-            payload,
-        } => {
-            buf.push(MSG_INJECT_GLOBALS);
-            write_session_id(buf, session_id)?;
-            buf.extend_from_slice(payload);
-        }
-        BinaryFrame::Execute {
-            session_id,
-            mode,
-            file_path,
-            bridge_code,
-            post_restore_script,
-            userland_code,
-            high_resolution_time,
-            user_code,
-        } => {
-            buf.push(MSG_EXECUTE);
-            write_session_id(buf, session_id)?;
-            buf.push(*mode);
-            write_len_prefixed_u16(buf, file_path)?;
-            let bc_bytes = bridge_code.as_bytes();
-            buf.extend_from_slice(&(bc_bytes.len() as u32).to_be_bytes());
-            buf.extend_from_slice(bc_bytes);
-            let prs_bytes = post_restore_script.as_bytes();
-            buf.extend_from_slice(&(prs_bytes.len() as u32).to_be_bytes());
-            buf.extend_from_slice(prs_bytes);
-            let ul_bytes = userland_code.as_bytes();
-            buf.extend_from_slice(&(ul_bytes.len() as u32).to_be_bytes());
-            buf.extend_from_slice(ul_bytes);
-            buf.push(u8::from(*high_resolution_time));
-            buf.extend_from_slice(user_code.as_bytes());
-        }
-        BinaryFrame::BridgeResponse {
-            session_id,
-            call_id,
-            status,
-            payload,
-        } => {
-            buf.push(MSG_BRIDGE_RESPONSE);
-            write_session_id(buf, session_id)?;
-            buf.extend_from_slice(&call_id.to_be_bytes());
-            buf.push(*status);
-            buf.extend_from_slice(payload);
-        }
-        BinaryFrame::StreamEvent {
-            session_id,
-            event_type,
-            payload,
-        } => {
-            buf.push(MSG_STREAM_EVENT);
-            write_session_id(buf, session_id)?;
-            write_len_prefixed_u16(buf, event_type)?;
-            buf.extend_from_slice(payload);
-        }
-        BinaryFrame::TerminateExecution { session_id } => {
-            buf.push(MSG_TERMINATE_EXECUTION);
-            write_session_id(buf, session_id)?;
-        }
-        // V8→Host frames: include encoding for completeness/testing
-        BinaryFrame::BridgeCall {
-            session_id,
-            call_id,
-            method,
-            payload,
-        } => {
-            buf.push(MSG_BRIDGE_CALL);
-            write_session_id(buf, session_id)?;
-            buf.extend_from_slice(&call_id.to_be_bytes());
-            write_len_prefixed_u16(buf, method)?;
-            buf.extend_from_slice(payload);
-        }
-        BinaryFrame::ExecutionResult {
-            session_id,
-            exit_code,
-            exports,
-            error,
-        } => {
-            buf.push(MSG_EXECUTION_RESULT);
-            write_session_id(buf, session_id)?;
-            buf.extend_from_slice(&exit_code.to_be_bytes());
-            let mut flags: u8 = 0;
-            if exports.is_some() {
-                flags |= FLAG_HAS_EXPORTS;
-            }
-            if error.is_some() {
-                flags |= FLAG_HAS_ERROR;
-            }
-            buf.push(flags);
-            if let Some(exp) = exports {
-                buf.extend_from_slice(&(exp.len() as u32).to_be_bytes());
-                buf.extend_from_slice(exp);
-            }
-            if let Some(err) = error {
-                write_len_prefixed_u16(buf, &err.error_type)?;
-                write_len_prefixed_u16(buf, &err.message)?;
-                write_len_prefixed_u16(buf, &err.stack)?;
-                write_len_prefixed_u16(buf, &err.code)?;
-            }
-        }
-        BinaryFrame::Log {
-            session_id,
-            channel,
-            message,
-        } => {
-            buf.push(MSG_LOG);
-            write_session_id(buf, session_id)?;
-            buf.push(*channel);
-            buf.extend_from_slice(message.as_bytes());
-        }
-        BinaryFrame::StreamCallback {
-            session_id,
-            callback_type,
-            payload,
-        } => {
-            buf.push(MSG_STREAM_CALLBACK);
-            write_session_id(buf, session_id)?;
-            write_len_prefixed_u16(buf, callback_type)?;
-            buf.extend_from_slice(payload);
-        }
-    }
-    Ok(())
-}
-
-// -- Primitive helpers --
-
-fn write_session_id(buf: &mut Vec<u8>, sid: &str) -> io::Result<()> {
-    let bytes = sid.as_bytes();
-    if bytes.len() > 255 {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            format!("session ID byte length {} exceeds u8 max 255", bytes.len()),
-        ));
-    }
-    buf.push(bytes.len() as u8);
-    buf.extend_from_slice(bytes);
-    Ok(())
-}
-
-fn write_len_prefixed_u16(buf: &mut Vec<u8>, s: &str) -> io::Result<()> {
-    let bytes = s.as_bytes();
-    if bytes.len() > 0xFFFF {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            format!("string byte length {} exceeds u16 max 65535", bytes.len()),
-        ));
-    }
-    buf.extend_from_slice(&(bytes.len() as u16).to_be_bytes());
-    buf.extend_from_slice(bytes);
-    Ok(())
-}
-
-fn read_u8(buf: &[u8], pos: &mut usize) -> io::Result<u8> {
-    if *pos >= buf.len() {
-        return Err(eof());
-    }
-    let v = buf[*pos];
-    *pos += 1;
-    Ok(v)
-}
-
-fn read_u16(buf: &[u8], pos: &mut usize) -> io::Result<u16> {
-    if *pos + 2 > buf.len() {
-        return Err(eof());
-    }
-    let v = u16::from_be_bytes([buf[*pos], buf[*pos + 1]]);
-    *pos += 2;
-    Ok(v)
-}
-
-fn read_u32(buf: &[u8], pos: &mut usize) -> io::Result<u32> {
-    if *pos + 4 > buf.len() {
-        return Err(eof());
-    }
-    let v = u32::from_be_bytes([buf[*pos], buf[*pos + 1], buf[*pos + 2], buf[*pos + 3]]);
-    *pos += 4;
-    Ok(v)
-}
-
-fn read_i32(buf: &[u8], pos: &mut usize) -> io::Result<i32> {
-    if *pos + 4 > buf.len() {
-        return Err(eof());
-    }
-    let v = i32::from_be_bytes([buf[*pos], buf[*pos + 1], buf[*pos + 2], buf[*pos + 3]]);
-    *pos += 4;
-    Ok(v)
-}
-
-fn read_u64(buf: &[u8], pos: &mut usize) -> io::Result<u64> {
-    if *pos + 8 > buf.len() {
-        return Err(eof());
-    }
-    let mut bytes = [0u8; 8];
-    bytes.copy_from_slice(&buf[*pos..*pos + 8]);
-    *pos += 8;
-    Ok(u64::from_be_bytes(bytes))
-}
-
-fn read_utf8(buf: &[u8], pos: &mut usize, len: usize) -> io::Result<String> {
-    if *pos + len > buf.len() {
-        return Err(eof());
-    }
-    let s = std::str::from_utf8(&buf[*pos..*pos + len])
-        .map_err(|e| io::Error::new(io::ErrorKind::InvalidData, e))?;
-    *pos += len;
-    Ok(s.to_owned())
-}
-
-fn read_bytes(buf: &[u8], pos: &mut usize, len: usize) -> io::Result<Vec<u8>> {
-    if *pos + len > buf.len() {
-        return Err(eof());
-    }
-    let data = buf[*pos..*pos + len].to_vec();
-    *pos += len;
-    Ok(data)
-}
-
-fn read_len_prefixed_u16(buf: &[u8], pos: &mut usize) -> io::Result<String> {
-    let len = read_u16(buf, pos)? as usize;
-    read_utf8(buf, pos, len)
-}
-
-fn eof() -> io::Error {
-    io::Error::new(io::ErrorKind::UnexpectedEof, "unexpected end of frame")
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn roundtrip_authenticate() {
-        let frame = BinaryFrame::Authenticate {
-            token: "secret123".into(),
-        };
-        let bytes = encode_frame(&frame).unwrap();
-        let decoded = decode_frame(&bytes[4..]).unwrap();
-        assert_eq!(frame, decoded);
-    }
-
-    #[test]
-    fn roundtrip_create_session() {
-        let frame = BinaryFrame::CreateSession {
-            session_id: "sess-1".into(),
-            heap_limit_mb: 256,
-            cpu_time_limit_ms: 30000,
-            wall_clock_limit_ms: 45000,
-        };
-        let bytes = encode_frame(&frame).unwrap();
-        let decoded = decode_frame(&bytes[4..]).unwrap();
-        assert_eq!(frame, decoded);
-    }
-
-    #[test]
-    fn roundtrip_bridge_call() {
-        let frame = BinaryFrame::BridgeCall {
-            session_id: "sess-1".into(),
-            call_id: 42,
-            method: "_fsReadFile".into(),
-            payload: vec![1, 2, 3],
-        };
-        let bytes = encode_frame(&frame).unwrap();
-        let decoded = decode_frame(&bytes[4..]).unwrap();
-        assert_eq!(frame, decoded);
-    }
-
-    #[test]
-    fn roundtrip_execution_result_with_error() {
-        let frame = BinaryFrame::ExecutionResult {
-            session_id: "sess-1".into(),
-            exit_code: 1,
-            exports: None,
-            error: Some(ExecutionErrorBin {
-                error_type: "Error".into(),
-                message: "something failed".into(),
-                stack: "at foo:1:1".into(),
-                code: "ERR_TEST".into(),
-            }),
-        };
-        let bytes = encode_frame(&frame).unwrap();
-        let decoded = decode_frame(&bytes[4..]).unwrap();
-        assert_eq!(frame, decoded);
-    }
-
-    #[test]
-    fn decode_frame_rejects_oversized_body() {
-        let oversized = vec![0u8; MAX_FRAME_SIZE as usize + 1];
-        let result = decode_frame(&oversized);
-        assert!(result.is_err());
-        let err = result.unwrap_err();
-        assert_eq!(err.kind(), io::ErrorKind::InvalidData);
-        assert!(err.to_string().contains("exceeds maximum"));
-    }
-}
diff --git a/crates/execution/src/v8_runtime.rs b/crates/execution/src/v8_runtime.rs
deleted file mode 100644
index 9050ee105..000000000
--- a/crates/execution/src/v8_runtime.rs
+++ /dev/null
@@ -1,434 +0,0 @@
-//! V8 isolate runtime manager backed by the embedded V8 runtime.
-
-use crate::v8_ipc::{self, BinaryFrame};
-use secure_exec_v8_runtime::embedded_runtime::{spawn_embedded_runtime_ipc, EmbeddedRuntimeHandle};
-use serde_json::Value;
-use std::io::{self, BufReader, Read, Write};
-use std::os::unix::net::UnixStream;
-use std::sync::{Arc, Mutex};
-
-/// Manages an embedded V8 runtime and its IPC connection.
-pub struct V8Runtime {
-    runtime: EmbeddedRuntimeHandle,
-    reader: BufReader<UnixStream>,
-    writer: UnixStream,
-}
-
-impl V8Runtime {
-    /// Spawn the embedded V8 runtime and connect over IPC.
-    pub fn spawn() -> io::Result<Self> {
-        let (stream, runtime) = spawn_embedded_runtime_ipc(None)?;
-        let writer = stream.try_clone()?;
-        let reader = BufReader::new(stream);
-
-        Ok(V8Runtime {
-            runtime,
-            reader,
-            writer,
-        })
-    }
-
-    /// Create a new V8 isolate session.
-    pub fn create_session(
-        &mut self,
-        session_id: &str,
-        heap_limit_mb: u32,
-        cpu_time_limit_ms: u32,
-        wall_clock_limit_ms: u32,
-    ) -> io::Result<()> {
-        self.send_frame(&BinaryFrame::CreateSession {
-            session_id: session_id.to_owned(),
-            heap_limit_mb,
-            cpu_time_limit_ms,
-            wall_clock_limit_ms,
-        })
-    }
-
-    /// Inject per-session globals (processConfig, osConfig) as CBOR payload.
-    pub fn inject_globals(&mut self, session_id: &str, payload: Vec<u8>) -> io::Result<()> {
-        self.send_frame(&BinaryFrame::InjectGlobals {
-            session_id: session_id.to_owned(),
-            payload,
-        })
-    }
-
-    /// Execute bridge code + user code in a session.
-    pub fn execute(
-        &mut self,
-        session_id: &str,
-        mode: u8,
-        file_path: &str,
-        bridge_code: &str,
-        user_code: &str,
-    ) -> io::Result<()> {
-        self.send_frame(&BinaryFrame::Execute {
-            session_id: session_id.to_owned(),
-            mode,
-            file_path: file_path.to_owned(),
-            bridge_code: bridge_code.to_owned(),
-            post_restore_script: String::new(),
-            userland_code: String::new(),
-            high_resolution_time: false,
-            user_code: user_code.to_owned(),
-        })
-    }
-
-    /// Send a bridge response back to the V8 isolate.
-    pub fn send_bridge_response(
-        &mut self,
-        session_id: &str,
-        call_id: u64,
-        status: u8,
-        payload: Vec<u8>,
-    ) -> io::Result<()> {
-        self.send_frame(&BinaryFrame::BridgeResponse {
-            session_id: session_id.to_owned(),
-            call_id,
-            status,
-            payload,
-        })
-    }
-
-    /// Send a stream event to the V8 isolate (stdin data, timer, child process events).
-    pub fn send_stream_event(
-        &mut self,
-        session_id: &str,
-        event_type: &str,
-        payload: Vec<u8>,
-    ) -> io::Result<()> {
-        self.send_frame(&BinaryFrame::StreamEvent {
-            session_id: session_id.to_owned(),
-            event_type: event_type.to_owned(),
-            payload,
-        })
-    }
-
-    /// Terminate execution in a session.
-    pub fn terminate_execution(&mut self, session_id: &str) -> io::Result<()> {
-        self.send_frame(&BinaryFrame::TerminateExecution {
-            session_id: session_id.to_owned(),
-        })
-    }
-
-    /// Destroy a session.
-    pub fn destroy_session(&mut self, session_id: &str) -> io::Result<()> {
-        self.send_frame(&BinaryFrame::DestroySession {
-            session_id: session_id.to_owned(),
-        })
-    }
-
-    /// Read the next frame from the V8 runtime.
-    pub fn read_frame(&mut self) -> io::Result<BinaryFrame> {
-        let mut len_buf = [0u8; 4];
-        self.reader.read_exact(&mut len_buf)?;
-        let total_len = u32::from_be_bytes(len_buf);
-
-        if total_len > 64 * 1024 * 1024 {
-            return Err(io::Error::new(
-                io::ErrorKind::InvalidData,
-                format!("frame size {total_len} exceeds maximum"),
-            ));
-        }
-
-        let mut buf = vec![0u8; total_len as usize];
-        self.reader.read_exact(&mut buf)?;
-        v8_ipc::decode_frame(&buf)
-    }
-
-    fn send_frame(&mut self, frame: &BinaryFrame) -> io::Result<()> {
-        let bytes = v8_ipc::encode_frame(frame)?;
-        self.writer.write_all(&bytes)?;
-        self.writer.flush()
-    }
-}
-
-impl Drop for V8Runtime {
-    fn drop(&mut self) {
-        self.runtime.shutdown();
-    }
-}
-
-/// Thread-safe wrapper for V8Runtime that allows sending from multiple threads.
-pub struct SharedV8Runtime {
-    inner: Arc<Mutex<V8Runtime>>,
-}
-
-impl SharedV8Runtime {
-    pub fn new(runtime: V8Runtime) -> Self {
-        Self {
-            inner: Arc::new(Mutex::new(runtime)),
-        }
-    }
-
-    pub fn lock(&self) -> std::sync::MutexGuard<'_, V8Runtime> {
-        self.inner.lock().expect("V8 runtime lock poisoned")
-    }
-}
-
-impl Clone for SharedV8Runtime {
-    fn clone(&self) -> Self {
-        Self {
-            inner: self.inner.clone(),
-        }
-    }
-}
-
-/// Bridge call method name mapping from V8 polyfill names to sidecar sync RPC names.
-/// The V8 polyfills use underscore-prefixed camelCase names while the sidecar
-/// uses dot-separated category.method names. The mapping lives in
-/// `bridge-contract.json` so bridge installation and dispatch drift together.
-pub fn map_bridge_method(method: &str) -> (&str, bool) {
-    if let Some(target) = secure_exec_bridge::bridge_contract().dispatch.get(method) {
-        (target.method.as_str(), target.translate_args)
-    } else {
-        (method, false)
-    }
-}
-
-/// Deserialize a CBOR payload into a JSON array of arguments.
-/// The V8 bridge serializes bridge call args as a CBOR array.
-pub fn cbor_payload_to_json_args(payload: &[u8]) -> io::Result<Vec<Value>> {
-    if payload.is_empty() {
-        return Ok(vec![]);
-    }
-    let cbor_value: ciborium::value::Value = ciborium::de::from_reader(payload).map_err(|e| {
-        io::Error::new(
-            io::ErrorKind::InvalidData,
-            format!("failed to deserialize CBOR bridge call payload: {e}"),
-        )
-    })?;
-    match cbor_to_json(cbor_value) {
-        Value::Array(arr) => Ok(arr),
-        single => Ok(vec![single]),
-    }
-}
-
-pub fn cbor_payload_raw_byte_arg(payload: &[u8], index: usize) -> io::Result<Option<Vec<u8>>> {
-    if payload.is_empty() {
-        return Ok(None);
-    }
-    let cbor_value: ciborium::value::Value = ciborium::de::from_reader(payload).map_err(|e| {
-        io::Error::new(
-            io::ErrorKind::InvalidData,
-            format!("failed to deserialize CBOR bridge call payload: {e}"),
-        )
-    })?;
-    let Some(value) = cbor_array_arg(&cbor_value, index) else {
-        return Ok(None);
-    };
-    Ok(cbor_raw_bytes(value).map(ToOwned::to_owned))
-}
-
-/// Serialize a JSON value to CBOR bytes for bridge responses.
-pub fn json_to_cbor_payload(value: &Value) -> io::Result<Vec<u8>> {
-    let cbor_value = json_to_cbor(value);
-    let mut buf = Vec::new();
-    ciborium::ser::into_writer(&cbor_value, &mut buf).map_err(|e| {
-        io::Error::new(
-            io::ErrorKind::InvalidData,
-            format!("failed to serialize CBOR bridge response: {e}"),
-        )
-    })?;
-    Ok(buf)
-}
-
-fn cbor_array_arg(value: &ciborium::value::Value, index: usize) -> Option<&ciborium::value::Value> {
-    match value {
-        ciborium::value::Value::Array(values) => values.get(index),
-        value if index == 0 => Some(value),
-        _ => None,
-    }
-}
-
-fn cbor_raw_bytes(value: &ciborium::value::Value) -> Option<&[u8]> {
-    match value {
-        ciborium::value::Value::Bytes(bytes) => Some(bytes),
-        ciborium::value::Value::Tag(_, inner) => cbor_raw_bytes(inner),
-        _ => None,
-    }
-}
-
-fn cbor_to_json(value: ciborium::value::Value) -> Value {
-    use ciborium::value::Value as Cbor;
-    match value {
-        Cbor::Null => Value::Null,
-        Cbor::Bool(b) => Value::Bool(b),
-        Cbor::Integer(i) => {
-            let n: i128 = i.into();
-            if let Ok(n) = i64::try_from(n) {
-                Value::Number(n.into())
-            } else if let Ok(n) = u64::try_from(n) {
-                Value::Number(n.into())
-            } else {
-                Value::Number(serde_json::Number::from_f64(n as f64).unwrap_or(0.into()))
-            }
-        }
-        Cbor::Float(f) => serde_json::Number::from_f64(f)
-            .map(Value::Number)
-            .unwrap_or(Value::Null),
-        Cbor::Text(s) => Value::String(s),
-        Cbor::Bytes(b) => {
-            use serde_json::json;
-            // Encode binary data as base64 with a type marker
-            json!({ "__type": "Buffer", "data": base64_encode(&b) })
-        }
-        Cbor::Array(arr) => Value::Array(arr.into_iter().map(cbor_to_json).collect()),
-        Cbor::Map(map) => {
-            let mut obj = serde_json::Map::new();
-            for (k, v) in map {
-                let key = match k {
-                    Cbor::Text(s) => s,
-                    Cbor::Integer(i) => {
-                        let n: i128 = i.into();
-                        n.to_string()
-                    }
-                    other => format!("{other:?}"),
-                };
-                obj.insert(key, cbor_to_json(v));
-            }
-            Value::Object(obj)
-        }
-        Cbor::Tag(_, inner) => cbor_to_json(*inner),
-        _ => Value::Null,
-    }
-}
-
-fn json_to_cbor(value: &Value) -> ciborium::value::Value {
-    use ciborium::value::Value as Cbor;
-    match value {
-        Value::Null => Cbor::Null,
-        Value::Bool(b) => Cbor::Bool(*b),
-        Value::Number(n) => {
-            if let Some(i) = n.as_i64() {
-                Cbor::Integer(i.into())
-            } else if let Some(u) = n.as_u64() {
-                Cbor::Integer(u.into())
-            } else if let Some(f) = n.as_f64() {
-                Cbor::Float(f)
-            } else {
-                Cbor::Null
-            }
-        }
-        Value::String(s) => Cbor::Text(s.clone()),
-        Value::Array(arr) => Cbor::Array(arr.iter().map(json_to_cbor).collect()),
-        Value::Object(map) => {
-            // Check for Buffer type marker
-            if map.get("__type").and_then(Value::as_str) == Some("Buffer") {
-                if let Some(data) = map.get("data").and_then(Value::as_str) {
-                    if let Ok(bytes) = base64_decode(data) {
-                        return Cbor::Bytes(bytes);
-                    }
-                }
-            }
-            Cbor::Map(
-                map.iter()
-                    .map(|(k, v)| (Cbor::Text(k.clone()), json_to_cbor(v)))
-                    .collect(),
-            )
-        }
-    }
-}
-
-/// Public base64 encode for use in bridge call handlers.
-pub fn base64_encode_pub(data: &[u8]) -> String {
-    base64_encode(data)
-}
-
-pub fn base64_decode_pub(input: &str) -> Option<Vec<u8>> {
-    base64_decode(input).ok()
-}
-
-fn base64_encode(data: &[u8]) -> String {
-    const CHARS: &[u8] = b"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-    let mut result = String::with_capacity(data.len().div_ceil(3) * 4);
-    for chunk in data.chunks(3) {
-        let b0 = chunk[0] as u32;
-        let b1 = chunk.get(1).copied().unwrap_or(0) as u32;
-        let b2 = chunk.get(2).copied().unwrap_or(0) as u32;
-        let triple = (b0 << 16) | (b1 << 8) | b2;
-        result.push(CHARS[((triple >> 18) & 0x3F) as usize] as char);
-        result.push(CHARS[((triple >> 12) & 0x3F) as usize] as char);
-        if chunk.len() > 1 {
-            result.push(CHARS[((triple >> 6) & 0x3F) as usize] as char);
-        } else {
-            result.push('=');
-        }
-        if chunk.len() > 2 {
-            result.push(CHARS[(triple & 0x3F) as usize] as char);
-        } else {
-            result.push('=');
-        }
-    }
-    result
-}
-
-fn base64_decode(input: &str) -> Result<Vec<u8>, ()> {
-    fn decode_char(c: u8) -> Result<u8, ()> {
-        match c {
-            b'A'..=b'Z' => Ok(c - b'A'),
-            b'a'..=b'z' => Ok(c - b'a' + 26),
-            b'0'..=b'9' => Ok(c - b'0' + 52),
-            b'+' => Ok(62),
-            b'/' => Ok(63),
-            b'=' => Ok(0),
-            _ => Err(()),
-        }
-    }
-    let bytes = input.as_bytes();
-    let mut result = Vec::with_capacity(bytes.len() * 3 / 4);
-    for chunk in bytes.chunks(4) {
-        if chunk.len() < 4 {
-            return Err(());
-        }
-        let a = decode_char(chunk[0])?;
-        let b = decode_char(chunk[1])?;
-        let c = decode_char(chunk[2])?;
-        let d = decode_char(chunk[3])?;
-        let triple = ((a as u32) << 18) | ((b as u32) << 12) | ((c as u32) << 6) | (d as u32);
-        result.push((triple >> 16) as u8);
-        if chunk[2] != b'=' {
-            result.push((triple >> 8) as u8);
-        }
-        if chunk[3] != b'=' {
-            result.push(triple as u8);
-        }
-    }
-    Ok(result)
-}
-
-#[cfg(test)]
-mod tests {
-    use super::map_bridge_method;
-
-    #[test]
-    fn audited_bridge_methods_map_to_named_handlers() {
-        for method in [
-            "_cryptoHashDigest",
-            "_cryptoSubtle",
-            "_networkHttp2ServerListenRaw",
-            "_networkHttpServerRequestRaw",
-            "_networkHttp2SessionConnectRaw",
-            "_networkHttp2StreamRespondRaw",
-            "_upgradeSocketWriteRaw",
-            "_netSocketSetNoDelayRaw",
-            "_kernelStdioWriteRaw",
-            "_kernelPollRaw",
-            "_kernelTtySizeRaw",
-            "_netSocketUpgradeTlsRaw",
-            "_tlsGetCiphersRaw",
-            "_dgramSocketAddressRaw",
-            "_dgramSocketSetBufferSizeRaw",
-        ] {
-            let (mapped, _) = map_bridge_method(method);
-            assert_ne!(mapped, method, "missing bridge-method mapping for {method}");
-        }
-    }
-
-    #[test]
-    fn http_request_bridge_shortcut_is_not_mapped() {
-        assert_eq!(
-            map_bridge_method("_networkHttpRequestRaw"),
-            ("_networkHttpRequestRaw", false)
-        );
-    }
-}
diff --git a/crates/execution/src/wasm.rs b/crates/execution/src/wasm.rs
deleted file mode 100644
index 7021288b1..000000000
--- a/crates/execution/src/wasm.rs
+++ /dev/null
@@ -1,4823 +0,0 @@
-use crate::common::{
-    encode_json_string, encode_json_string_array, encode_json_string_map, frozen_time_ms,
-};
-use crate::javascript::{
-    CreateJavascriptContextRequest, GuestRuntimeConfig, JavascriptExecution,
-    JavascriptExecutionEngine, JavascriptExecutionError, JavascriptExecutionEvent,
-    JavascriptExecutionLimits, JavascriptSyncRpcRequest, StartJavascriptExecutionRequest,
-};
-use crate::node_import_cache::NodeImportCache;
-use crate::runtime_support::{env_flag_enabled, file_fingerprint, warmup_marker_path};
-use crate::signal::{NodeSignalDispositionAction, NodeSignalHandlerRegistration};
-use crate::v8_host::{V8RuntimeHost, V8SessionHandle};
-use crate::v8_runtime;
-use base64::Engine as _;
-use secure_exec_bridge::queue_tracker::{
-    register_limit, warn_limit_exhausted, QueueGauge, TrackedLimit,
-};
-use serde_json::{json, Value};
-use std::collections::{BTreeMap, HashMap, VecDeque};
-use std::fmt;
-use std::fs;
-use std::fs::OpenOptions;
-use std::io::{Read, Write};
-use std::os::unix::fs::{FileExt, MetadataExt, PermissionsExt};
-use std::path::{Path, PathBuf};
-use std::sync::{Arc, Mutex, OnceLock};
-use std::time::{Duration, Instant};
-
-const WASM_MODULE_PATH_ENV: &str = "AGENTOS_WASM_MODULE_PATH";
-const WASM_GUEST_ARGV_ENV: &str = "AGENTOS_GUEST_ARGV";
-const WASM_GUEST_ENV_ENV: &str = "AGENTOS_GUEST_ENV";
-const WASM_PERMISSION_TIER_ENV: &str = "AGENTOS_WASM_PERMISSION_TIER";
-const WASM_PREWARM_ONLY_ENV: &str = "AGENTOS_WASM_PREWARM_ONLY";
-const WASM_HOST_CWD_ENV: &str = "AGENTOS_WASM_HOST_CWD";
-const WASM_SANDBOX_ROOT_ENV: &str = "AGENTOS_SANDBOX_ROOT";
-const WASM_WARMUP_DEBUG_ENV: &str = "AGENTOS_WASM_WARMUP_DEBUG";
-pub const WASM_MAX_FUEL_ENV: &str = "AGENTOS_WASM_MAX_FUEL";
-pub const WASM_MAX_MEMORY_BYTES_ENV: &str = "AGENTOS_WASM_MAX_MEMORY_BYTES";
-pub const WASM_MAX_STACK_BYTES_ENV: &str = "AGENTOS_WASM_MAX_STACK_BYTES";
-const WASM_WARMUP_METRICS_PREFIX: &str = "__AGENTOS_WASM_WARMUP_METRICS__:";
-const WASM_SIGNAL_STATE_PREFIX: &str = "__AGENTOS_WASM_SIGNAL_STATE__:";
-const WASM_WARMUP_MARKER_VERSION: &str = "1";
-const WASM_PAGE_BYTES: u64 = 65_536;
-const WASM_TIMEOUT_EXIT_CODE: i32 = 124;
-const MAX_WASM_MODULE_FILE_BYTES: u64 = 256 * 1024 * 1024;
-const MAX_WASM_IMPORT_SECTION_ENTRIES: usize = 16_384;
-const MAX_WASM_MEMORY_SECTION_ENTRIES: usize = 1_024;
-const MAX_WASM_VARUINT_BYTES: usize = 10;
-const DEFAULT_WASM_GUEST_HOME: &str = "/root";
-const DEFAULT_WASM_GUEST_USER: &str = "root";
-const DEFAULT_WASM_GUEST_SHELL: &str = "/bin/sh";
-const DEFAULT_WASM_GUEST_PATH: &str =
-    "/usr/local/sbin:/usr/local/bin:/opt/agentos/bin:/usr/sbin:/usr/bin:/sbin:/bin";
-// Warmup is a best-effort compile-cache optimization; fall back to a cold start
-// instead of burning minutes on a stalled prewarm session.
-const DEFAULT_WASM_PREWARM_TIMEOUT_MS: u64 = 30_000;
-/// Default V8 heap cap (MB) for the wasm *runner* isolate.
-///
-/// The runner is trusted sidecar infrastructure: it compiles the WASI runtime +
-/// the guest's wasm module (e.g. `bash.wasm`) into its own isolate before the
-/// guest runs. That compilation routinely needs far more than the 128 MiB
-/// per-*guest*-isolate budget (`isolate::DEFAULT_HEAP_LIMIT_MB`); leaving the
-/// runner on that default makes warmup OOM mid-compile, terminating the isolate
-/// with an uncatchable (message-less) exception that surfaces as the opaque
-/// `WebAssembly warmup exited with status 1 (Error: null)`. Raising the runner
-/// heap does NOT weaken guest isolation — the guest module's memory/fuel/stack are
-/// bounded separately, Rust-side, from `request.limits`. The value is a ceiling
-/// (`heap_limits(0, cap)`), committed only as used, and operators may tune it via
-/// typed `limits.wasm.runnerHeapLimitMb`.
-///
-/// Note the ceiling is reachable by guest-driven work: the runner compiles the
-/// guest's wasm module, so a large/hostile module can push the runner heap toward
-/// this cap. That is contained per-isolate (the near-heap-limit guard terminates
-/// the offending isolate, never the shared process), but operators running many
-/// concurrent wasm commands on memory-constrained hosts may want to lower it.
-const DEFAULT_WASM_RUNNER_HEAP_LIMIT_MB: u32 = 2048;
-// The whole point of the runner heap default is to exceed the 128 MiB per-guest
-// isolate budget that OOMs warmup; enforce that invariant at compile time.
-const _: () = assert!(DEFAULT_WASM_RUNNER_HEAP_LIMIT_MB > 128);
-const MAX_SYNC_WASM_PREWARM_MODULE_BYTES: u64 = 16 * 1024 * 1024;
-const WASM_CAPTURED_OUTPUT_LIMIT_BYTES: usize = 16 * 1024 * 1024;
-const WASM_SYNC_READ_LIMIT_BYTES: usize = 16 * 1024 * 1024;
-const WASM_INLINE_RUNNER_ENTRYPOINT: &str = "./__agentos_wasm_runner__.mjs";
-const WASM_SNAPSHOT_RUNNER_ENV: &str = "AGENTOS_WASM_SNAPSHOT_RUNNER";
-const WASM_RUNNER_NO_CACHE_ENV: &str = "AGENTOS_WASM_RUNNER_NO_CACHE";
-const WASM_MODULE_BYTES_CACHE_CAPACITY: usize = 64;
-const NODE_WASI_MODULE_SOURCE: &str = include_str!("../assets/runners/wasi-module.js");
-const WASM_SIDECAR_ROUTED_FS_SYNC_METHODS: &[&str] = &[
-    "fs.accessSync",
-    "fs.chmodSync",
-    "fs.closeSync",
-    "fs.existsSync",
-    "fs.fdatasyncSync",
-    "fs.fstatSync",
-    "fs.fsyncSync",
-    "fs.ftruncateSync",
-    "fs.linkSync",
-    "fs.lstatSync",
-    "fs.mkdirSync",
-    "fs.openSync",
-    "fs.readFileSync",
-    "fs.readSync",
-    "fs.readdirSync",
-    "fs.readlinkSync",
-    "fs.renameSync",
-    "fs.rmdirSync",
-    "fs.statSync",
-    "fs.symlinkSync",
-    "fs.unlinkSync",
-    "fs.writeFileSync",
-    "fs.writeSync",
-];
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum WasmSignalDispositionAction {
-    Default,
-    Ignore,
-    User,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, serde::Serialize, serde::Deserialize)]
-#[serde(rename_all = "kebab-case")]
-pub enum WasmPermissionTier {
-    Full,
-    ReadWrite,
-    ReadOnly,
-    Isolated,
-}
-
-impl WasmPermissionTier {
-    fn as_env_value(self) -> &'static str {
-        match self {
-            Self::Full => "full",
-            Self::ReadWrite => "read-write",
-            Self::ReadOnly => "read-only",
-            Self::Isolated => "isolated",
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct WasmSignalHandlerRegistration {
-    pub action: WasmSignalDispositionAction,
-    pub mask: Vec<u32>,
-    pub flags: u32,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct CreateWasmContextRequest {
-    pub vm_id: String,
-    pub module_path: Option<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct WasmContext {
-    pub context_id: String,
-    pub vm_id: String,
-    pub module_path: Option<String>,
-}
-
-/// Per-execution WebAssembly runtime limits, carried as typed fields rather
-/// than `AGENTOS_WASM_*` env vars. Populated by the sidecar from the per-VM
-/// kernel `ResourceLimits` (originating from `CreateVmConfig` on the BARE wire);
-/// `None` selects "unlimited / engine default". See the env-vs-wire rule in
-/// `crates/sidecar/CLAUDE.md`.
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct WasmExecutionLimits {
-    /// Fuel budget, enforced as a wall-clock timeout (ms) by the WASI runtime.
-    pub max_fuel: Option<u64>,
-    /// Linear-memory cap in bytes, validated against the module's declared
-    /// initial/maximum memory before execution.
-    pub max_memory_bytes: Option<u64>,
-    /// Stack cap in bytes. Validated from the typed wire value so bad config
-    /// fails closed; runtime V8 stack-limit enforcement is a follow-up — see
-    /// [`resolve_wasm_stack_limit_bytes`].
-    pub max_stack_bytes: Option<u64>,
-    /// Best-effort warmup/compile-cache timeout in ms.
-    pub prewarm_timeout_ms: Option<u64>,
-    /// V8 heap cap for the trusted JS runner isolate that hosts WASI/WASM.
-    pub runner_heap_limit_mb: Option<u32>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct StartWasmExecutionRequest {
-    pub vm_id: String,
-    pub context_id: String,
-    pub argv: Vec<String>,
-    pub env: BTreeMap<String, String>,
-    pub cwd: PathBuf,
-    pub permission_tier: WasmPermissionTier,
-    /// Per-execution runtime limits (see [`WasmExecutionLimits`]).
-    pub limits: WasmExecutionLimits,
-    /// Per-execution guest-runtime config, forwarded to the WASI runner's JS
-    /// execution (see [`JavascriptExecutionLimits`]'s sibling
-    /// [`crate::javascript::GuestRuntimeConfig`]).
-    pub guest_runtime: GuestRuntimeConfig,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum WasmExecutionEvent {
-    Stdout(Vec<u8>),
-    Stderr(Vec<u8>),
-    SyncRpcRequest(JavascriptSyncRpcRequest),
-    SignalState {
-        signal: u32,
-        registration: WasmSignalHandlerRegistration,
-    },
-    Exited(i32),
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct WasmExecutionResult {
-    pub execution_id: String,
-    pub exit_code: i32,
-    pub stdout: Vec<u8>,
-    pub stderr: Vec<u8>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-struct ResolvedWasmModule {
-    specifier: String,
-    resolved_path: PathBuf,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum NativeBinaryFormat {
-    Elf,
-    MachO,
-    PeCoff,
-}
-
-impl NativeBinaryFormat {
-    fn display_name(self) -> &'static str {
-        match self {
-            Self::Elf => "ELF",
-            Self::MachO => "Mach-O",
-            Self::PeCoff => "PE/COFF",
-        }
-    }
-}
-
-#[derive(Debug)]
-pub enum WasmExecutionError {
-    MissingContext(String),
-    VmMismatch {
-        expected: String,
-        found: String,
-    },
-    MissingModulePath,
-    InvalidLimit(String),
-    InvalidModule(String),
-    NativeBinaryNotSupported {
-        path: PathBuf,
-        header: Vec<u8>,
-        format: NativeBinaryFormat,
-    },
-    NonWasmBinary {
-        path: PathBuf,
-        header: Vec<u8>,
-        shell_shim: bool,
-    },
-    PrepareWarmPath(std::io::Error),
-    WarmupSpawn(std::io::Error),
-    WarmupTimeout(Duration),
-    WarmupFailed {
-        exit_code: i32,
-        stderr: String,
-    },
-    Spawn(std::io::Error),
-    RpcResponse(String),
-    StdinClosed,
-    Stdin(std::io::Error),
-    OutputBufferExceeded {
-        stream: &'static str,
-        limit: usize,
-    },
-    EventChannelClosed,
-}
-
-impl fmt::Display for WasmExecutionError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::MissingContext(context_id) => {
-                write!(f, "unknown guest WebAssembly context: {context_id}")
-            }
-            Self::VmMismatch { expected, found } => {
-                write!(
-                    f,
-                    "guest WebAssembly context belongs to vm {expected}, not {found}"
-                )
-            }
-            Self::MissingModulePath => {
-                f.write_str("guest WebAssembly execution requires a module path")
-            }
-            Self::InvalidLimit(message) => write!(f, "invalid WebAssembly limit: {message}"),
-            Self::InvalidModule(message) => write!(f, "invalid WebAssembly module: {message}"),
-            Self::NativeBinaryNotSupported {
-                path,
-                header,
-                format,
-            } => {
-                let header_hex = header
-                    .iter()
-                    .map(|byte| format!("{byte:02x}"))
-                    .collect::<Vec<_>>()
-                    .join(" ");
-                write!(
-                    f,
-                    "ERR_NATIVE_BINARY_NOT_SUPPORTED: refused to execute native {} guest binary at {} inside the VM; only WebAssembly binaries are runnable there (header bytes: [{header_hex}])",
-                    format.display_name(),
-                    path.display()
-                )
-            }
-            Self::NonWasmBinary {
-                path,
-                header,
-                shell_shim,
-            } => {
-                let header_hex = header
-                    .iter()
-                    .map(|byte| format!("{byte:02x}"))
-                    .collect::<Vec<_>>()
-                    .join(" ");
-                if *shell_shim {
-                    write!(
-                        f,
-                        "refused to compile guest WebAssembly module at {}: file is a shell-shim script (starts with \"#!\", header bytes: [{header_hex}]) instead of a \"\\0asm\" WebAssembly binary",
-                        path.display()
-                    )
-                } else {
-                    write!(
-                        f,
-                        "refused to compile guest WebAssembly module at {}: first {} byte(s) [{header_hex}] do not match the \"\\0asm\" WebAssembly magic word",
-                        path.display(),
-                        header.len()
-                    )
-                }
-            }
-            Self::PrepareWarmPath(err) => {
-                write!(f, "failed to prepare shared WebAssembly warm path: {err}")
-            }
-            Self::WarmupSpawn(err) => {
-                write!(f, "failed to start WebAssembly warmup runtime: {err}")
-            }
-            Self::WarmupTimeout(timeout) => {
-                write!(
-                    f,
-                    "WebAssembly warmup exceeded the configured timeout after {} ms",
-                    timeout.as_millis()
-                )
-            }
-            Self::WarmupFailed { exit_code, stderr } => {
-                if stderr.trim().is_empty() {
-                    write!(f, "WebAssembly warmup exited with status {exit_code}")
-                } else {
-                    write!(
-                        f,
-                        "WebAssembly warmup exited with status {exit_code}: {}",
-                        stderr.trim()
-                    )
-                }
-            }
-            Self::Spawn(err) => write!(f, "failed to start guest WebAssembly runtime: {err}"),
-            Self::RpcResponse(message) => {
-                write!(
-                    f,
-                    "failed to write guest WebAssembly sync RPC response: {message}"
-                )
-            }
-            Self::StdinClosed => f.write_str("guest WebAssembly stdin is already closed"),
-            Self::Stdin(err) => write!(f, "failed to write guest stdin: {err}"),
-            Self::OutputBufferExceeded { stream, limit } => {
-                write!(
-                    f,
-                    "guest WebAssembly {stream} exceeded the captured output limit of {limit} bytes"
-                )
-            }
-            Self::EventChannelClosed => {
-                f.write_str("guest WebAssembly event channel closed unexpectedly")
-            }
-        }
-    }
-}
-
-impl std::error::Error for WasmExecutionError {}
-
-#[derive(Debug)]
-pub struct WasmExecution {
-    execution_id: String,
-    child_pid: u32,
-    inner: JavascriptExecution,
-    execution_timeout: Option<Duration>,
-    execution_started_at: Instant,
-    timeout_reported: bool,
-    fuel_gauge: Option<Arc<QueueGauge>>,
-    internal_sync_rpc: WasmInternalSyncRpc,
-    pending_events: VecDeque<WasmExecutionEvent>,
-    stdout_stream_buffer: Vec<u8>,
-    stderr_stream_buffer: Vec<u8>,
-}
-
-#[derive(Debug)]
-struct WasmInternalSyncRpc {
-    module_guest_paths: Vec<String>,
-    module_host_path: PathBuf,
-    guest_cwd: String,
-    host_cwd: PathBuf,
-    sandbox_root: Option<PathBuf>,
-    guest_path_mappings: Vec<WasmGuestPathMapping>,
-    route_fs_through_sidecar: bool,
-    next_fd: u32,
-    open_files: BTreeMap<u32, fs::File>,
-    pending_events: VecDeque<WasmExecutionEvent>,
-}
-
-#[derive(Debug, Clone)]
-struct WasmGuestPathMapping {
-    guest_path: String,
-    host_path: PathBuf,
-    read_only: bool,
-}
-
-impl WasmExecution {
-    pub fn execution_id(&self) -> &str {
-        &self.execution_id
-    }
-
-    pub fn child_pid(&self) -> u32 {
-        self.child_pid
-    }
-
-    pub fn v8_session_handle(&self) -> V8SessionHandle {
-        self.inner.v8_session_handle()
-    }
-
-    pub fn uses_shared_v8_runtime(&self) -> bool {
-        self.inner.uses_shared_v8_runtime()
-    }
-
-    pub fn write_stdin(&mut self, chunk: &[u8]) -> Result<(), WasmExecutionError> {
-        self.inner.write_stdin(chunk).map_err(map_javascript_error)
-    }
-
-    /// Feed stdin WITHOUT emitting a `stdin` stream event to the V8 session.
-    /// Sidecar-managed wasm always reads stdin through the kernel
-    /// (`__kernel_stdin_read`); the stream event is never consumed there, and
-    /// while the guest thread is blocked in a sync bridge call every
-    /// unconsumed event lands in the session's bounded deferred-message queue
-    /// — one dead event per keystroke until the queue limit kills the session.
-    pub fn write_stdin_kernel_only(&mut self, chunk: &[u8]) -> Result<(), WasmExecutionError> {
-        self.inner
-            .write_kernel_stdin_only(chunk)
-            .map_err(map_javascript_error)
-    }
-
-    pub fn close_stdin(&mut self) -> Result<(), WasmExecutionError> {
-        self.inner.close_stdin().map_err(map_javascript_error)
-    }
-
-    pub fn send_stream_event(
-        &self,
-        event_type: &str,
-        payload: Value,
-    ) -> Result<(), WasmExecutionError> {
-        self.inner
-            .send_stream_event(event_type, payload)
-            .map_err(map_javascript_error)
-    }
-
-    pub fn terminate(&self) -> Result<(), WasmExecutionError> {
-        self.inner.terminate().map_err(map_javascript_error)
-    }
-
-    pub fn respond_sync_rpc_success(
-        &mut self,
-        id: u64,
-        result: Value,
-    ) -> Result<(), WasmExecutionError> {
-        self.inner
-            .respond_sync_rpc_success(id, result)
-            .map_err(map_javascript_error)
-    }
-
-    pub fn respond_sync_rpc_raw_success(
-        &mut self,
-        id: u64,
-        payload: Vec<u8>,
-    ) -> Result<(), WasmExecutionError> {
-        self.inner
-            .respond_sync_rpc_raw_success(id, payload)
-            .map_err(map_javascript_error)
-    }
-
-    pub fn respond_sync_rpc_error(
-        &mut self,
-        id: u64,
-        code: impl Into<String>,
-        message: impl Into<String>,
-    ) -> Result<(), WasmExecutionError> {
-        self.inner
-            .respond_sync_rpc_error(id, code, message)
-            .map_err(map_javascript_error)
-    }
-
-    pub async fn poll_event(
-        &mut self,
-        timeout: Duration,
-    ) -> Result<Option<WasmExecutionEvent>, WasmExecutionError> {
-        loop {
-            if let Some(event) = self.pending_events.pop_front() {
-                return Ok(Some(event));
-            }
-            if let Some(event) = self.internal_sync_rpc.pending_events.pop_front() {
-                self.enqueue_wasm_event(event)?;
-                continue;
-            }
-            if let Some(event) = self.timeout_event_if_expired()? {
-                return Ok(Some(event));
-            }
-            let poll_timeout = self.deadline_capped_timeout(timeout);
-            match self
-                .inner
-                .poll_event(poll_timeout)
-                .await
-                .map_err(map_javascript_error)?
-            {
-                Some(event) => {
-                    if let JavascriptExecutionEvent::SyncRpcRequest(request) = &event {
-                        if self.handle_internal_sync_rpc(request)? {
-                            continue;
-                        }
-                        if let Some(signal_state) = self.handle_signal_state_sync_rpc(request)? {
-                            return Ok(Some(signal_state));
-                        }
-                    }
-                    self.enqueue_javascript_event(event)?;
-                }
-                None if poll_timeout < timeout => continue,
-                None => return Ok(None),
-            }
-        }
-    }
-
-    pub fn poll_event_blocking(
-        &mut self,
-        timeout: Duration,
-    ) -> Result<Option<WasmExecutionEvent>, WasmExecutionError> {
-        loop {
-            if let Some(event) = self.pending_events.pop_front() {
-                return Ok(Some(event));
-            }
-            if let Some(event) = self.internal_sync_rpc.pending_events.pop_front() {
-                self.enqueue_wasm_event(event)?;
-                continue;
-            }
-            if let Some(event) = self.timeout_event_if_expired()? {
-                return Ok(Some(event));
-            }
-            let poll_timeout = self.deadline_capped_timeout(timeout);
-            match self
-                .inner
-                .poll_event_blocking(poll_timeout)
-                .map_err(map_javascript_error)?
-            {
-                Some(event) => {
-                    if let JavascriptExecutionEvent::SyncRpcRequest(request) = &event {
-                        if self.handle_internal_sync_rpc(request)? {
-                            continue;
-                        }
-                        if let Some(signal_state) = self.handle_signal_state_sync_rpc(request)? {
-                            return Ok(Some(signal_state));
-                        }
-                    }
-                    self.enqueue_javascript_event(event)?;
-                }
-                None if poll_timeout < timeout => continue,
-                None => return Ok(None),
-            }
-        }
-    }
-
-    pub fn wait(mut self) -> Result<WasmExecutionResult, WasmExecutionError> {
-        self.close_stdin()?;
-        let mut stdout = Vec::new();
-        let mut stderr = Vec::new();
-
-        loop {
-            match self.poll_event_blocking(Duration::from_millis(50))? {
-                Some(WasmExecutionEvent::Stdout(chunk)) => {
-                    append_wasm_captured_output(&mut stdout, &chunk, "stdout")?;
-                }
-                Some(WasmExecutionEvent::Stderr(chunk)) => {
-                    append_wasm_captured_output(&mut stderr, &chunk, "stderr")?;
-                }
-                Some(WasmExecutionEvent::SyncRpcRequest(request)) => {
-                    if self.handle_wait_sync_rpc_request(&request, &mut stdout, &mut stderr)? {
-                        continue;
-                    }
-                    return Err(WasmExecutionError::RpcResponse(format!(
-                        "unexpected guest WebAssembly sync RPC request {} while waiting",
-                        request.method
-                    )));
-                }
-                Some(WasmExecutionEvent::SignalState { .. }) => {}
-                Some(WasmExecutionEvent::Exited(exit_code)) => {
-                    return Ok(WasmExecutionResult {
-                        execution_id: self.execution_id,
-                        exit_code,
-                        stdout,
-                        stderr,
-                    });
-                }
-                None => {}
-            }
-        }
-    }
-
-    fn deadline_capped_timeout(&self, timeout: Duration) -> Duration {
-        self.execution_timeout
-            .map(|limit| {
-                let elapsed = self.execution_started_at.elapsed();
-                if elapsed >= limit {
-                    Duration::ZERO
-                } else {
-                    timeout.min(limit.saturating_sub(elapsed))
-                }
-            })
-            .unwrap_or(timeout)
-    }
-
-    fn timeout_event_if_expired(
-        &mut self,
-    ) -> Result<Option<WasmExecutionEvent>, WasmExecutionError> {
-        if self.timeout_reported {
-            return Ok(None);
-        }
-        let Some(limit) = self.execution_timeout else {
-            return Ok(None);
-        };
-        let elapsed = self.execution_started_at.elapsed();
-        // Sample elapsed budget each poll so the gauge fires its edge-triggered
-        // ~80% approach warning before the terminal exhaustion below.
-        if let Some(gauge) = &self.fuel_gauge {
-            gauge.observe_depth(duration_millis_saturating_usize(elapsed));
-        }
-        if elapsed < limit {
-            return Ok(None);
-        }
-
-        let _ = self.inner.terminate();
-        self.timeout_reported = true;
-        let capacity = duration_millis_saturating_usize(limit);
-        warn_limit_exhausted(TrackedLimit::WasmFuelMs, capacity, capacity);
-        self.enqueue_wasm_event(WasmExecutionEvent::Stderr(
-            b"WebAssembly fuel budget exhausted\n".to_vec(),
-        ))?;
-        self.enqueue_wasm_event(WasmExecutionEvent::Exited(WASM_TIMEOUT_EXIT_CODE))?;
-        Ok(self.pending_events.pop_front())
-    }
-
-    fn handle_internal_sync_rpc(
-        &mut self,
-        request: &JavascriptSyncRpcRequest,
-    ) -> Result<bool, WasmExecutionError> {
-        handle_internal_wasm_sync_rpc_request(&mut self.inner, &mut self.internal_sync_rpc, request)
-    }
-
-    fn handle_signal_state_sync_rpc(
-        &mut self,
-        request: &JavascriptSyncRpcRequest,
-    ) -> Result<Option<WasmExecutionEvent>, WasmExecutionError> {
-        translate_wasm_signal_state_sync_rpc_request(&mut self.inner, request)
-    }
-
-    fn enqueue_javascript_event(
-        &mut self,
-        event: JavascriptExecutionEvent,
-    ) -> Result<(), WasmExecutionError> {
-        match event {
-            JavascriptExecutionEvent::Stdout(chunk) => {
-                self.enqueue_stream_chunk(StreamChannel::Stdout, chunk)?
-            }
-            JavascriptExecutionEvent::Stderr(chunk) => {
-                self.enqueue_stream_chunk(StreamChannel::Stderr, chunk)?
-            }
-            JavascriptExecutionEvent::SyncRpcRequest(request) => {
-                self.pending_events
-                    .push_back(WasmExecutionEvent::SyncRpcRequest(request));
-            }
-            JavascriptExecutionEvent::SignalState {
-                signal,
-                registration,
-            } => {
-                self.pending_events
-                    .push_back(WasmExecutionEvent::SignalState {
-                        signal,
-                        registration: registration.into(),
-                    });
-            }
-            JavascriptExecutionEvent::Exited(code) => {
-                self.flush_stream_buffers();
-                self.pending_events
-                    .push_back(WasmExecutionEvent::Exited(code));
-            }
-        }
-        Ok(())
-    }
-
-    fn enqueue_wasm_event(&mut self, event: WasmExecutionEvent) -> Result<(), WasmExecutionError> {
-        match event {
-            WasmExecutionEvent::Stdout(chunk) => {
-                self.enqueue_stream_chunk(StreamChannel::Stdout, chunk)?
-            }
-            WasmExecutionEvent::Stderr(chunk) => {
-                self.enqueue_stream_chunk(StreamChannel::Stderr, chunk)?
-            }
-            WasmExecutionEvent::Exited(code) => {
-                self.flush_stream_buffers();
-                self.pending_events
-                    .push_back(WasmExecutionEvent::Exited(code));
-            }
-            other => self.pending_events.push_back(other),
-        }
-        Ok(())
-    }
-
-    fn enqueue_stream_chunk(
-        &mut self,
-        channel: StreamChannel,
-        chunk: Vec<u8>,
-    ) -> Result<(), WasmExecutionError> {
-        let buffer = match channel {
-            StreamChannel::Stdout => &mut self.stdout_stream_buffer,
-            StreamChannel::Stderr => &mut self.stderr_stream_buffer,
-        };
-        let stream = match channel {
-            StreamChannel::Stdout => "stdout",
-            StreamChannel::Stderr => "stderr",
-        };
-        ensure_wasm_output_capacity(buffer.len(), chunk.len(), stream)?;
-        buffer.extend_from_slice(&chunk);
-
-        let mut pending_stream_chunk = Vec::new();
-        while let Some(newline_index) = buffer.iter().position(|byte| *byte == b'\n') {
-            let line = buffer.drain(..=newline_index).collect::<Vec<_>>();
-            if let Some(signal_state) = parse_wasm_signal_state_line(&line)? {
-                if !pending_stream_chunk.is_empty() {
-                    self.pending_events.push_back(match channel {
-                        StreamChannel::Stdout => {
-                            WasmExecutionEvent::Stdout(std::mem::take(&mut pending_stream_chunk))
-                        }
-                        StreamChannel::Stderr => {
-                            WasmExecutionEvent::Stderr(std::mem::take(&mut pending_stream_chunk))
-                        }
-                    });
-                }
-                self.pending_events.push_back(signal_state);
-                continue;
-            }
-            pending_stream_chunk.extend_from_slice(&line);
-        }
-        if !pending_stream_chunk.is_empty() {
-            self.pending_events.push_back(match channel {
-                StreamChannel::Stdout => WasmExecutionEvent::Stdout(pending_stream_chunk),
-                StreamChannel::Stderr => WasmExecutionEvent::Stderr(pending_stream_chunk),
-            });
-        }
-
-        Ok(())
-    }
-
-    fn flush_stream_buffers(&mut self) {
-        if !self.stdout_stream_buffer.is_empty() {
-            self.pending_events
-                .push_back(WasmExecutionEvent::Stdout(std::mem::take(
-                    &mut self.stdout_stream_buffer,
-                )));
-        }
-        if !self.stderr_stream_buffer.is_empty() {
-            self.pending_events
-                .push_back(WasmExecutionEvent::Stderr(std::mem::take(
-                    &mut self.stderr_stream_buffer,
-                )));
-        }
-    }
-
-    fn handle_wait_sync_rpc_request(
-        &mut self,
-        request: &JavascriptSyncRpcRequest,
-        stdout: &mut Vec<u8>,
-        stderr: &mut Vec<u8>,
-    ) -> Result<bool, WasmExecutionError> {
-        if self
-            .inner
-            .handle_kernel_stdin_sync_rpc(request)
-            .map_err(map_javascript_error)?
-        {
-            return Ok(true);
-        }
-
-        if request.method != "__kernel_stdio_write" {
-            return Ok(false);
-        }
-
-        let Some(descriptor) = request.args.first().and_then(Value::as_u64) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing __kernel_stdio_write descriptor",
-            )));
-        };
-        let bytes = decode_wasm_bytes_arg(
-            request.args.get(1),
-            "__kernel_stdio_write payload bytes",
-            WASM_CAPTURED_OUTPUT_LIMIT_BYTES,
-        )?;
-
-        match descriptor {
-            1 => append_wasm_captured_output(stdout, &bytes, "stdout")?,
-            2 => append_wasm_captured_output(stderr, &bytes, "stderr")?,
-            other => {
-                return Err(WasmExecutionError::RpcResponse(format!(
-                    "unsupported __kernel_stdio_write descriptor {other}",
-                )));
-            }
-        }
-
-        self.respond_sync_rpc_success(request.id, json!(bytes.len()))?;
-        Ok(true)
-    }
-}
-
-#[derive(Clone, Copy)]
-enum StreamChannel {
-    Stdout,
-    Stderr,
-}
-
-#[derive(Debug, Default)]
-pub struct WasmExecutionEngine {
-    next_context_id: usize,
-    next_execution_id: usize,
-    contexts: BTreeMap<String, WasmContext>,
-    import_caches: BTreeMap<String, NodeImportCache>,
-    javascript_context_ids: BTreeMap<String, String>,
-    javascript_engine: JavascriptExecutionEngine,
-}
-
-impl WasmExecutionEngine {
-    pub fn create_context(&mut self, request: CreateWasmContextRequest) -> WasmContext {
-        self.next_context_id += 1;
-        self.import_caches.entry(request.vm_id.clone()).or_default();
-        let javascript_context =
-            self.javascript_engine
-                .create_context(CreateJavascriptContextRequest {
-                    vm_id: request.vm_id.clone(),
-                    bootstrap_module: None,
-                    compile_cache_root: None,
-                });
-
-        let context = WasmContext {
-            context_id: format!("wasm-ctx-{}", self.next_context_id),
-            vm_id: request.vm_id,
-            module_path: request.module_path,
-        };
-        self.javascript_context_ids
-            .insert(context.context_id.clone(), javascript_context.context_id);
-        self.contexts
-            .insert(context.context_id.clone(), context.clone());
-        context
-    }
-
-    pub fn start_execution(
-        &mut self,
-        request: StartWasmExecutionRequest,
-    ) -> Result<WasmExecution, WasmExecutionError> {
-        let context = self
-            .contexts
-            .get(&request.context_id)
-            .cloned()
-            .ok_or_else(|| WasmExecutionError::MissingContext(request.context_id.clone()))?;
-
-        if context.vm_id != request.vm_id {
-            return Err(WasmExecutionError::VmMismatch {
-                expected: context.vm_id,
-                found: request.vm_id,
-            });
-        }
-
-        let resolved_module = resolve_wasm_module(&context, &request)?;
-        verify_wasm_module_header(&resolved_module)?;
-        let prewarm_timeout = resolve_wasm_prewarm_timeout(&request)?;
-        let javascript_context_id = self
-            .javascript_context_ids
-            .get(&context.context_id)
-            .cloned()
-            .ok_or_else(|| WasmExecutionError::MissingContext(context.context_id.clone()))?;
-        {
-            let import_cache = self.import_caches.entry(context.vm_id.clone()).or_default();
-            import_cache
-                .ensure_materialized_with_timeout(prewarm_timeout)
-                .map_err(WasmExecutionError::PrepareWarmPath)?;
-        }
-        let frozen_time_ms = frozen_time_ms();
-        validate_module_limits(&resolved_module, &request)?;
-        // Surfaces a typed error for a malformed stack byte budget instead of
-        // silently dropping it. Runtime V8 stack-limit enforcement is tracked
-        // separately; for now this validation prevents accepting an invalid cap.
-        wasm_stack_limit_bytes(&request)?;
-        let execution_timeout = resolve_wasm_execution_timeout(&request)?;
-        let import_cache = self
-            .import_caches
-            .get(&context.vm_id)
-            .expect("vm import cache should exist after materialization");
-        let warmup_metrics = match prewarm_wasm_path(
-            import_cache,
-            &mut self.javascript_engine,
-            &javascript_context_id,
-            &resolved_module,
-            &request,
-            frozen_time_ms,
-            prewarm_timeout,
-        ) {
-            Ok(metrics) => metrics,
-            Err(WasmExecutionError::WarmupTimeout(_)) => None,
-            Err(error) => return Err(error),
-        };
-
-        self.next_execution_id += 1;
-        let execution_id = format!("exec-{}", self.next_execution_id);
-        let javascript_execution = start_wasm_javascript_execution(
-            &mut self.javascript_engine,
-            import_cache,
-            &javascript_context_id,
-            &resolved_module,
-            &request,
-            WasmJavascriptExecutionOptions {
-                frozen_time_ms,
-                prewarm_only: false,
-                warmup_metrics: warmup_metrics.as_deref(),
-            },
-        )?;
-        let child_pid = javascript_execution.child_pid();
-        let sandbox_root = wasm_sandbox_root(&request.env);
-        let guest_path_mappings = wasm_guest_path_mappings(&request);
-
-        Ok(WasmExecution {
-            execution_id,
-            child_pid,
-            inner: javascript_execution,
-            execution_timeout,
-            execution_started_at: Instant::now(),
-            timeout_reported: false,
-            // Approach-warn (~80%) before the WASM execution budget is exhausted;
-            // only registered when a timeout is actually set.
-            fuel_gauge: execution_timeout.map(|limit| {
-                register_limit(
-                    TrackedLimit::WasmFuelMs,
-                    duration_millis_saturating_usize(limit),
-                )
-            }),
-            pending_events: VecDeque::new(),
-            stdout_stream_buffer: Vec::new(),
-            stderr_stream_buffer: Vec::new(),
-            internal_sync_rpc: WasmInternalSyncRpc {
-                module_guest_paths: wasm_guest_module_paths(
-                    &resolved_module.specifier,
-                    &request.env,
-                ),
-                module_host_path: resolved_module.resolved_path.clone(),
-                guest_cwd: wasm_guest_cwd(&request.env),
-                host_cwd: request.cwd.clone(),
-                sandbox_root: sandbox_root.clone(),
-                guest_path_mappings,
-                route_fs_through_sidecar: sandbox_root.is_some(),
-                next_fd: 64,
-                open_files: BTreeMap::new(),
-                pending_events: VecDeque::new(),
-            },
-        })
-    }
-
-    pub fn dispose_vm(&mut self, vm_id: &str) {
-        self.contexts.retain(|_, context| context.vm_id != vm_id);
-        self.javascript_context_ids
-            .retain(|wasm_context_id, _| self.contexts.contains_key(wasm_context_id));
-        self.import_caches.remove(vm_id);
-        self.javascript_engine.dispose_vm(vm_id);
-    }
-}
-
-fn map_javascript_error(error: JavascriptExecutionError) -> WasmExecutionError {
-    match error {
-        JavascriptExecutionError::EmptyArgv => WasmExecutionError::Spawn(std::io::Error::new(
-            std::io::ErrorKind::InvalidInput,
-            "guest WebAssembly bootstrap requires a JavaScript entrypoint",
-        )),
-        JavascriptExecutionError::MissingContext(context_id) => {
-            WasmExecutionError::MissingContext(context_id)
-        }
-        JavascriptExecutionError::VmMismatch { expected, found } => {
-            WasmExecutionError::VmMismatch { expected, found }
-        }
-        JavascriptExecutionError::PrepareImportCache(error) => {
-            WasmExecutionError::PrepareWarmPath(error)
-        }
-        JavascriptExecutionError::Spawn(error) => WasmExecutionError::Spawn(error),
-        JavascriptExecutionError::PendingSyncRpcRequest(id) => WasmExecutionError::RpcResponse(
-            format!("guest WebAssembly sync RPC request {id} is still pending"),
-        ),
-        JavascriptExecutionError::ExpiredSyncRpcRequest(id) => WasmExecutionError::RpcResponse(
-            format!("guest WebAssembly sync RPC request {id} is no longer pending"),
-        ),
-        JavascriptExecutionError::RpcResponse(message) => WasmExecutionError::RpcResponse(message),
-        JavascriptExecutionError::Terminate(error) => WasmExecutionError::Spawn(error),
-        JavascriptExecutionError::StdinClosed => WasmExecutionError::StdinClosed,
-        JavascriptExecutionError::Stdin(error) => WasmExecutionError::Stdin(error),
-        JavascriptExecutionError::OutputBufferExceeded { stream, limit } => {
-            WasmExecutionError::OutputBufferExceeded { stream, limit }
-        }
-        JavascriptExecutionError::EventChannelClosed => WasmExecutionError::EventChannelClosed,
-    }
-}
-
-fn handle_internal_wasm_sync_rpc_request(
-    execution: &mut JavascriptExecution,
-    internal_sync_rpc: &mut WasmInternalSyncRpc,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<bool, WasmExecutionError> {
-    // Module-resolution sync RPCs (the wasm runner imports node builtins +
-    // its own ESM) are serviced host-directly via the execution's own
-    // translator; the prewarm has no kernel/service loop.
-    if execution
-        .try_service_standalone_module_sync_rpc(request)
-        .map_err(map_javascript_error)?
-    {
-        return Ok(true);
-    }
-
-    if matches!(
-        request.method.as_str(),
-        "fs.promises.readFile" | "fs.readFileSync"
-    ) && request
-        .args
-        .first()
-        .and_then(Value::as_str)
-        .is_some_and(|path| {
-            internal_sync_rpc
-                .module_guest_paths
-                .iter()
-                .any(|candidate| candidate == path)
-        })
-    {
-        let module_bytes =
-            fs::read(&internal_sync_rpc.module_host_path).map_err(WasmExecutionError::Spawn)?;
-        execution
-            .respond_sync_rpc_success(
-                request.id,
-                Value::String(v8_runtime::base64_encode_pub(&module_bytes)),
-            )
-            .map_err(map_javascript_error)?;
-        return Ok(true);
-    }
-
-    if wasm_sync_rpc_method_routes_through_sidecar_kernel(request, internal_sync_rpc) {
-        return Ok(false);
-    }
-
-    if request.method == "__kernel_isatty" {
-        execution
-            .respond_sync_rpc_success(request.id, Value::Bool(false))
-            .map_err(map_javascript_error)?;
-        return Ok(true);
-    }
-
-    if request.method == "__kernel_tty_size" {
-        execution
-            .respond_sync_rpc_success(request.id, json!([80, 24]))
-            .map_err(map_javascript_error)?;
-        return Ok(true);
-    }
-
-    if request.method == "fs.openSync" {
-        let Some(path) = request.args.first().and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.openSync path",
-            )));
-        };
-        let Some(host_path) = translate_wasm_guest_path(path, internal_sync_rpc) else {
-            return Ok(false);
-        };
-        let flags = request.args.get(1).unwrap_or(&Value::Null);
-        if wasm_open_flags_require_write(flags)
-            && wasm_host_path_is_read_only(&host_path, internal_sync_rpc)
-        {
-            return respond_wasm_sync_rpc_value(
-                execution,
-                request,
-                path,
-                Err(wasm_read_only_filesystem_error(path)),
-            )
-            .map(|()| true);
-        }
-        let file = match open_wasm_guest_file(&host_path, flags) {
-            Ok(file) => file,
-            Err(error) => {
-                return respond_wasm_sync_rpc_value(execution, request, path, Err(error))
-                    .map(|()| true);
-            }
-        };
-        let fd = internal_sync_rpc.next_fd;
-        internal_sync_rpc.next_fd += 1;
-        internal_sync_rpc.open_files.insert(fd, file);
-        execution
-            .respond_sync_rpc_success(request.id, json!(fd))
-            .map_err(map_javascript_error)?;
-        return Ok(true);
-    }
-
-    if matches!(request.method.as_str(), "fs.statSync" | "fs.lstatSync") {
-        let Some(path) = request.args.first().and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(format!(
-                "missing {} path",
-                request.method
-            )));
-        };
-        let Some(host_path) = translate_wasm_guest_path(path, internal_sync_rpc) else {
-            return Ok(false);
-        };
-        let metadata = if request.method == "fs.lstatSync" {
-            fs::symlink_metadata(&host_path)
-        } else {
-            fs::metadata(&host_path)
-        };
-        return respond_wasm_sync_rpc_metadata(execution, request, path, metadata).map(|()| true);
-    }
-
-    if request.method == "fs.fstatSync" {
-        let Some(fd) = request.args.first().and_then(Value::as_u64) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.fstatSync fd",
-            )));
-        };
-        let Some(file) = internal_sync_rpc.open_files.get(&(fd as u32)) else {
-            return Ok(false);
-        };
-        return respond_wasm_sync_rpc_metadata(
-            execution,
-            request,
-            &fd.to_string(),
-            file.metadata(),
-        )
-        .map(|()| true);
-    }
-
-    if request.method == "fs.ftruncateSync" {
-        let Some(fd) = request.args.first().and_then(Value::as_u64) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.ftruncateSync fd",
-            )));
-        };
-        let length = request.args.get(1).and_then(Value::as_u64).unwrap_or(0);
-        let Some(file) = internal_sync_rpc.open_files.get_mut(&(fd as u32)) else {
-            return Ok(false);
-        };
-        let result = file.set_len(length);
-        return respond_wasm_sync_rpc_unit(execution, request, &fd.to_string(), result)
-            .map(|()| true);
-    }
-
-    if request.method == "fs.closeSync" {
-        let Some(fd) = request.args.first().and_then(Value::as_u64) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.closeSync fd",
-            )));
-        };
-        if internal_sync_rpc.open_files.remove(&(fd as u32)).is_none() {
-            return Ok(false);
-        }
-        execution
-            .respond_sync_rpc_success(request.id, Value::Null)
-            .map_err(map_javascript_error)?;
-        return Ok(true);
-    }
-
-    if request.method == "fs.chmodSync" {
-        let Some(path) = request.args.first().and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.chmodSync path",
-            )));
-        };
-        let Some(host_path) = translate_wasm_guest_path(path, internal_sync_rpc) else {
-            return Ok(false);
-        };
-        if wasm_host_path_is_read_only(&host_path, internal_sync_rpc) {
-            return respond_wasm_sync_rpc_unit(
-                execution,
-                request,
-                path,
-                Err(wasm_read_only_filesystem_error(path)),
-            )
-            .map(|()| true);
-        }
-        let mode = request.args.get(1).and_then(Value::as_u64).unwrap_or(0) as u32;
-        let result = (|| -> Result<(), std::io::Error> {
-            let mut permissions = fs::metadata(&host_path)?.permissions();
-            permissions.set_mode(mode);
-            fs::set_permissions(&host_path, permissions)
-        })();
-        return respond_wasm_sync_rpc_unit(execution, request, path, result).map(|()| true);
-    }
-
-    if request.method == "fs.mkdirSync" {
-        let Some(path) = request.args.first().and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.mkdirSync path",
-            )));
-        };
-        let Some(host_path) = translate_wasm_guest_path(path, internal_sync_rpc) else {
-            return Ok(false);
-        };
-        if wasm_host_path_is_read_only(&host_path, internal_sync_rpc) {
-            return respond_wasm_sync_rpc_unit(
-                execution,
-                request,
-                path,
-                Err(wasm_read_only_filesystem_error(path)),
-            )
-            .map(|()| true);
-        }
-        let recursive = request
-            .args
-            .get(1)
-            .map(|value| match value {
-                Value::Bool(flag) => *flag,
-                Value::Object(options) => options
-                    .get("recursive")
-                    .and_then(Value::as_bool)
-                    .unwrap_or(false),
-                _ => false,
-            })
-            .unwrap_or(false);
-        let result = if recursive {
-            fs::create_dir_all(&host_path)
-        } else {
-            fs::create_dir(&host_path)
-        };
-        return respond_wasm_sync_rpc_unit(execution, request, path, result).map(|()| true);
-    }
-
-    if request.method == "fs.rmdirSync" {
-        let Some(path) = request.args.first().and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.rmdirSync path",
-            )));
-        };
-        let Some(host_path) = translate_wasm_guest_path(path, internal_sync_rpc) else {
-            return Ok(false);
-        };
-        if wasm_host_path_is_read_only(&host_path, internal_sync_rpc) {
-            return respond_wasm_sync_rpc_unit(
-                execution,
-                request,
-                path,
-                Err(wasm_read_only_filesystem_error(path)),
-            )
-            .map(|()| true);
-        }
-        return respond_wasm_sync_rpc_unit(execution, request, path, fs::remove_dir(&host_path))
-            .map(|()| true);
-    }
-
-    if request.method == "fs.unlinkSync" {
-        let Some(path) = request.args.first().and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.unlinkSync path",
-            )));
-        };
-        let Some(host_path) = translate_wasm_guest_path(path, internal_sync_rpc) else {
-            return Ok(false);
-        };
-        if wasm_host_path_is_read_only(&host_path, internal_sync_rpc) {
-            return respond_wasm_sync_rpc_unit(
-                execution,
-                request,
-                path,
-                Err(wasm_read_only_filesystem_error(path)),
-            )
-            .map(|()| true);
-        }
-        return respond_wasm_sync_rpc_unit(execution, request, path, fs::remove_file(&host_path))
-            .map(|()| true);
-    }
-
-    if request.method == "fs.renameSync" {
-        let Some(source) = request.args.first().and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.renameSync source",
-            )));
-        };
-        let Some(destination) = request.args.get(1).and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.renameSync destination",
-            )));
-        };
-        let Some(host_source) = translate_wasm_guest_path(source, internal_sync_rpc) else {
-            return Ok(false);
-        };
-        let Some(host_destination) = translate_wasm_guest_path(destination, internal_sync_rpc)
-        else {
-            return Ok(false);
-        };
-        if wasm_mutation_touches_read_only_mapping(
-            &host_source,
-            &host_destination,
-            internal_sync_rpc,
-        ) {
-            return respond_wasm_sync_rpc_unit(
-                execution,
-                request,
-                source,
-                Err(wasm_read_only_filesystem_error(source)),
-            )
-            .map(|()| true);
-        }
-        return respond_wasm_sync_rpc_unit(
-            execution,
-            request,
-            source,
-            fs::rename(&host_source, &host_destination),
-        )
-        .map(|()| true);
-    }
-
-    if request.method == "fs.linkSync" {
-        let Some(source) = request.args.first().and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.linkSync source",
-            )));
-        };
-        let Some(destination) = request.args.get(1).and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.linkSync destination",
-            )));
-        };
-        let Some(host_source) = translate_wasm_guest_path(source, internal_sync_rpc) else {
-            return Ok(false);
-        };
-        let Some(host_destination) = translate_wasm_guest_path(destination, internal_sync_rpc)
-        else {
-            return Ok(false);
-        };
-        if wasm_host_path_is_read_only(&host_source, internal_sync_rpc)
-            || wasm_host_path_is_read_only(&host_destination, internal_sync_rpc)
-        {
-            return respond_wasm_sync_rpc_unit(
-                execution,
-                request,
-                source,
-                Err(wasm_read_only_filesystem_error(source)),
-            )
-            .map(|()| true);
-        }
-        return respond_wasm_sync_rpc_unit(
-            execution,
-            request,
-            source,
-            fs::hard_link(&host_source, &host_destination),
-        )
-        .map(|()| true);
-    }
-
-    if request.method == "fs.symlinkSync" {
-        let Some(target) = request.args.first().and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.symlinkSync target",
-            )));
-        };
-        let Some(link_path) = request.args.get(1).and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.symlinkSync path",
-            )));
-        };
-        let target_path = if target.starts_with('/') {
-            let Some(path) = translate_wasm_guest_path(target, internal_sync_rpc) else {
-                return Ok(false);
-            };
-            path
-        } else {
-            PathBuf::from(target)
-        };
-        let Some(host_link_path) = translate_wasm_guest_path(link_path, internal_sync_rpc) else {
-            return Ok(false);
-        };
-        if wasm_host_path_is_read_only(&host_link_path, internal_sync_rpc) {
-            return respond_wasm_sync_rpc_unit(
-                execution,
-                request,
-                link_path,
-                Err(wasm_read_only_filesystem_error(link_path)),
-            )
-            .map(|()| true);
-        }
-        return respond_wasm_sync_rpc_unit(
-            execution,
-            request,
-            link_path,
-            std::os::unix::fs::symlink(&target_path, &host_link_path),
-        )
-        .map(|()| true);
-    }
-
-    if request.method == "fs.readdirSync" {
-        let Some(path) = request.args.first().and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.readdirSync path",
-            )));
-        };
-        let Some(host_path) = translate_wasm_guest_path(path, internal_sync_rpc) else {
-            return Ok(false);
-        };
-        let entries = fs::read_dir(&host_path)
-            .and_then(|entries| {
-                entries
-                    .map(|entry| {
-                        entry.map(|value| value.file_name().to_string_lossy().into_owned())
-                    })
-                    .collect::<Result<Vec<_>, _>>()
-            })
-            .map(|entries| json!(entries));
-        return respond_wasm_sync_rpc_value(execution, request, path, entries).map(|()| true);
-    }
-
-    if request.method == "fs.readlinkSync" {
-        let Some(path) = request.args.first().and_then(Value::as_str) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.readlinkSync path",
-            )));
-        };
-        let Some(host_path) = translate_wasm_guest_path(path, internal_sync_rpc) else {
-            return Ok(false);
-        };
-        let target = fs::read_link(&host_path).map(|target| {
-            Value::String(
-                translate_wasm_host_symlink_target(&target, internal_sync_rpc)
-                    .unwrap_or_else(|| target.to_string_lossy().into_owned()),
-            )
-        });
-        return respond_wasm_sync_rpc_value(execution, request, path, target).map(|()| true);
-    }
-
-    if request.method == "fs.writeSync" {
-        let Some(fd) = request.args.first().and_then(Value::as_u64) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.writeSync fd",
-            )));
-        };
-        let bytes = decode_wasm_bytes_arg(
-            request.args.get(1),
-            "fs.writeSync bytes",
-            WASM_CAPTURED_OUTPUT_LIMIT_BYTES,
-        )?;
-        if fd == 1 || fd == 2 {
-            let bytes_len = bytes.len();
-            internal_sync_rpc.pending_events.push_back(if fd == 1 {
-                WasmExecutionEvent::Stdout(bytes)
-            } else {
-                WasmExecutionEvent::Stderr(bytes)
-            });
-            execution
-                .respond_sync_rpc_success(request.id, json!(bytes_len))
-                .map_err(map_javascript_error)?;
-            return Ok(true);
-        }
-        let position = request.args.get(2).and_then(Value::as_u64);
-        let Some(file) = internal_sync_rpc.open_files.get_mut(&(fd as u32)) else {
-            return Ok(false);
-        };
-        let written = if let Some(position) = position {
-            file.write_at(&bytes, position)
-                .map_err(WasmExecutionError::Spawn)?
-        } else {
-            file.write(&bytes).map_err(WasmExecutionError::Spawn)?
-        };
-        execution
-            .respond_sync_rpc_success(request.id, json!(written))
-            .map_err(map_javascript_error)?;
-        return Ok(true);
-    }
-
-    if request.method == "fs.readSync" {
-        let Some(fd) = request.args.first().and_then(Value::as_u64) else {
-            return Err(WasmExecutionError::RpcResponse(String::from(
-                "missing fs.readSync fd",
-            )));
-        };
-        let length = wasm_sync_read_length(request.args.get(1).and_then(Value::as_u64))?;
-        let position = request.args.get(2).and_then(Value::as_u64);
-        let Some(file) = internal_sync_rpc.open_files.get_mut(&(fd as u32)) else {
-            return Ok(false);
-        };
-        let mut buffer = vec![0u8; length];
-        let bytes_read = if let Some(position) = position {
-            file.read_at(&mut buffer, position)
-                .map_err(WasmExecutionError::Spawn)?
-        } else {
-            file.read(&mut buffer).map_err(WasmExecutionError::Spawn)?
-        };
-        buffer.truncate(bytes_read);
-        execution
-            .respond_sync_rpc_success(
-                request.id,
-                json!({
-                    "__agentOSType": "bytes",
-                    "base64": v8_runtime::base64_encode_pub(&buffer),
-                }),
-            )
-            .map_err(map_javascript_error)?;
-        return Ok(true);
-    }
-
-    Ok(false)
-}
-
-fn wasm_sync_rpc_method_routes_through_sidecar_kernel(
-    request: &JavascriptSyncRpcRequest,
-    internal_sync_rpc: &WasmInternalSyncRpc,
-) -> bool {
-    internal_sync_rpc.route_fs_through_sidecar
-        && WASM_SIDECAR_ROUTED_FS_SYNC_METHODS.contains(&request.method.as_str())
-}
-
-fn translate_wasm_guest_path(
-    path: &str,
-    internal_sync_rpc: &WasmInternalSyncRpc,
-) -> Option<PathBuf> {
-    if let Some(host_path) = translate_wasm_host_runtime_path(path, internal_sync_rpc) {
-        return confine_wasm_host_path(host_path, internal_sync_rpc);
-    }
-
-    let normalized_path = if path.starts_with('/') {
-        normalize_guest_path(path)
-    } else {
-        join_guest_path(&internal_sync_rpc.guest_cwd, path)
-    };
-
-    if normalized_path == internal_sync_rpc.module_host_path.to_string_lossy() {
-        return Some(internal_sync_rpc.module_host_path.clone());
-    }
-    if internal_sync_rpc
-        .module_guest_paths
-        .iter()
-        .any(|candidate| candidate == &normalized_path)
-    {
-        return Some(internal_sync_rpc.module_host_path.clone());
-    }
-    for mapping in &internal_sync_rpc.guest_path_mappings {
-        if let Some(suffix) = strip_guest_prefix(&normalized_path, &mapping.guest_path) {
-            return confine_wasm_host_path(
-                join_host_path(&mapping.host_path, &suffix),
-                internal_sync_rpc,
-            );
-        }
-    }
-    if let Some(suffix) = strip_guest_prefix(&normalized_path, &internal_sync_rpc.guest_cwd) {
-        return confine_wasm_host_path(
-            join_host_path(&internal_sync_rpc.host_cwd, &suffix),
-            internal_sync_rpc,
-        );
-    }
-    if normalized_path.starts_with('/') {
-        let root_candidate = internal_sync_rpc
-            .sandbox_root
-            .as_ref()
-            .map(|root| join_host_path(root, normalized_path.trim_start_matches('/')));
-        if let Some(candidate) = root_candidate.as_ref() {
-            if candidate.exists() {
-                return confine_wasm_host_path(candidate.clone(), internal_sync_rpc);
-            }
-        }
-
-        // Some shipped WASI command binaries still collapse guest-cwd-relative paths like
-        // `note.txt` into `/note.txt` before they reach the host bridge. Prefer the true root
-        // path when it exists, but fall back to the current guest cwd when only that target exists.
-        if internal_sync_rpc.guest_cwd != "/" {
-            let cwd_relative_guest_path = join_guest_path(
-                &internal_sync_rpc.guest_cwd,
-                normalized_path.trim_start_matches('/'),
-            );
-            for mapping in &internal_sync_rpc.guest_path_mappings {
-                if let Some(suffix) =
-                    strip_guest_prefix(&cwd_relative_guest_path, &mapping.guest_path)
-                {
-                    let candidate = join_host_path(&mapping.host_path, &suffix);
-                    if candidate.exists() {
-                        return confine_wasm_host_path(candidate, internal_sync_rpc);
-                    }
-                }
-            }
-            if let Some(suffix) =
-                strip_guest_prefix(&cwd_relative_guest_path, &internal_sync_rpc.guest_cwd)
-            {
-                let candidate = join_host_path(&internal_sync_rpc.host_cwd, &suffix);
-                if candidate.exists() {
-                    return confine_wasm_host_path(candidate, internal_sync_rpc);
-                }
-            }
-        }
-
-        return root_candidate.and_then(|path| confine_wasm_host_path(path, internal_sync_rpc));
-    }
-    None
-}
-
-fn confine_wasm_host_path(
-    host_path: PathBuf,
-    internal_sync_rpc: &WasmInternalSyncRpc,
-) -> Option<PathBuf> {
-    if host_path == internal_sync_rpc.module_host_path {
-        return Some(host_path);
-    }
-
-    let allowed_roots = wasm_allowed_host_roots(internal_sync_rpc);
-    if allowed_roots.is_empty() {
-        return None;
-    }
-
-    if let Ok(canonical_path) = fs::canonicalize(&host_path) {
-        return wasm_canonical_path_is_allowed(&canonical_path, &allowed_roots)
-            .then_some(host_path);
-    }
-
-    let existing_ancestor = nearest_existing_wasm_host_ancestor(&host_path)?;
-    let canonical_ancestor = fs::canonicalize(existing_ancestor).ok()?;
-    wasm_canonical_path_is_allowed(&canonical_ancestor, &allowed_roots).then_some(host_path)
-}
-
-fn wasm_allowed_host_roots(internal_sync_rpc: &WasmInternalSyncRpc) -> Vec<PathBuf> {
-    let mut roots = Vec::new();
-    for root in internal_sync_rpc
-        .guest_path_mappings
-        .iter()
-        .map(|mapping| mapping.host_path.as_path())
-        .chain(std::iter::once(internal_sync_rpc.host_cwd.as_path()))
-        .chain(internal_sync_rpc.sandbox_root.as_deref())
-    {
-        if let Ok(canonical_root) = fs::canonicalize(root) {
-            if !roots.iter().any(|existing| existing == &canonical_root) {
-                roots.push(canonical_root);
-            }
-        }
-    }
-    roots
-}
-
-fn wasm_canonical_path_is_allowed(path: &Path, allowed_roots: &[PathBuf]) -> bool {
-    allowed_roots
-        .iter()
-        .any(|root| path == root || path.starts_with(root))
-}
-
-fn nearest_existing_wasm_host_ancestor(path: &Path) -> Option<&Path> {
-    let mut candidate = Some(path);
-    while let Some(current) = candidate {
-        if fs::symlink_metadata(current).is_ok() {
-            return Some(current);
-        }
-        candidate = current.parent();
-    }
-    None
-}
-
-fn translate_wasm_host_runtime_path(
-    path: &str,
-    internal_sync_rpc: &WasmInternalSyncRpc,
-) -> Option<PathBuf> {
-    let candidate = Path::new(path);
-    if !candidate.is_absolute() {
-        return None;
-    }
-
-    if candidate == internal_sync_rpc.module_host_path {
-        return Some(candidate.to_path_buf());
-    }
-
-    let mapped_host_root = internal_sync_rpc
-        .guest_path_mappings
-        .iter()
-        .map(|mapping| mapping.host_path.as_path())
-        .find(|root| candidate == *root || candidate.starts_with(root));
-    if let Some(root) = mapped_host_root {
-        let _ = root;
-        return Some(candidate.to_path_buf());
-    }
-
-    if candidate == internal_sync_rpc.host_cwd || candidate.starts_with(&internal_sync_rpc.host_cwd)
-    {
-        return Some(candidate.to_path_buf());
-    }
-
-    if let Some(sandbox_root) = internal_sync_rpc.sandbox_root.as_ref() {
-        if candidate == sandbox_root || candidate.starts_with(sandbox_root) {
-            return Some(candidate.to_path_buf());
-        }
-    }
-
-    None
-}
-
-fn translate_wasm_host_symlink_target(
-    target: &Path,
-    internal_sync_rpc: &WasmInternalSyncRpc,
-) -> Option<String> {
-    if !target.is_absolute() {
-        return None;
-    }
-
-    for mapping in &internal_sync_rpc.guest_path_mappings {
-        if let Ok(suffix) = target.strip_prefix(&mapping.host_path) {
-            return Some(join_guest_path(
-                &mapping.guest_path,
-                &suffix.to_string_lossy().replace('\\', "/"),
-            ));
-        }
-    }
-
-    if let Some(suffix) = target
-        .strip_prefix(&internal_sync_rpc.host_cwd)
-        .ok()
-        .filter(|_| internal_sync_rpc.guest_cwd.starts_with('/'))
-    {
-        return Some(join_guest_path(
-            &internal_sync_rpc.guest_cwd,
-            &suffix.to_string_lossy().replace('\\', "/"),
-        ));
-    }
-
-    if let Some(sandbox_root) = internal_sync_rpc.sandbox_root.as_ref() {
-        if let Ok(suffix) = target.strip_prefix(sandbox_root) {
-            return Some(join_guest_path(
-                "/",
-                &suffix.to_string_lossy().replace('\\', "/"),
-            ));
-        }
-    }
-
-    None
-}
-
-fn wasm_host_path_is_read_only(host_path: &Path, internal_sync_rpc: &WasmInternalSyncRpc) -> bool {
-    let canonical_path = fs::canonicalize(host_path)
-        .ok()
-        .or_else(|| {
-            nearest_existing_wasm_host_ancestor(host_path)
-                .and_then(|ancestor| fs::canonicalize(ancestor).ok())
-        })
-        .unwrap_or_else(|| host_path.to_path_buf());
-
-    internal_sync_rpc
-        .guest_path_mappings
-        .iter()
-        .filter_map(|mapping| {
-            let root = fs::canonicalize(&mapping.host_path).ok()?;
-            (canonical_path == root || canonical_path.starts_with(&root))
-                .then_some((root.components().count(), mapping.read_only))
-        })
-        .max_by_key(|(depth, _)| *depth)
-        .is_some_and(|(_, read_only)| read_only)
-}
-
-fn wasm_mutation_touches_read_only_mapping(
-    source: &Path,
-    destination: &Path,
-    internal_sync_rpc: &WasmInternalSyncRpc,
-) -> bool {
-    wasm_host_path_is_read_only(source, internal_sync_rpc)
-        || wasm_host_path_is_read_only(destination, internal_sync_rpc)
-}
-
-fn wasm_open_flags_require_write(flags: &Value) -> bool {
-    match flags.as_str() {
-        Some(value) => value.contains('w') || value.contains('a') || value.contains('+'),
-        None if flags.as_u64().unwrap_or(0) == 0 => false,
-        _ => {
-            let numeric = flags.as_u64().unwrap_or(0);
-            (numeric & 0o1) != 0
-                || (numeric & 0o2) != 0
-                || (numeric & 0o100) != 0
-                || (numeric & 0o1000) != 0
-                || (numeric & 0o2000) != 0
-        }
-    }
-}
-
-fn wasm_read_only_filesystem_error(path: &str) -> std::io::Error {
-    let _ = path;
-    std::io::Error::from_raw_os_error(30)
-}
-
-fn respond_wasm_sync_rpc_metadata(
-    execution: &mut JavascriptExecution,
-    request: &JavascriptSyncRpcRequest,
-    label: &str,
-    metadata: Result<fs::Metadata, std::io::Error>,
-) -> Result<(), WasmExecutionError> {
-    respond_wasm_sync_rpc_value(
-        execution,
-        request,
-        label,
-        metadata.map(|value| wasm_host_stat_value(&value)),
-    )
-}
-
-fn respond_wasm_sync_rpc_unit(
-    execution: &mut JavascriptExecution,
-    request: &JavascriptSyncRpcRequest,
-    label: &str,
-    result: Result<(), std::io::Error>,
-) -> Result<(), WasmExecutionError> {
-    respond_wasm_sync_rpc_value(execution, request, label, result.map(|()| Value::Null))
-}
-
-fn respond_wasm_sync_rpc_value(
-    execution: &mut JavascriptExecution,
-    request: &JavascriptSyncRpcRequest,
-    label: &str,
-    result: Result<Value, std::io::Error>,
-) -> Result<(), WasmExecutionError> {
-    match result {
-        Ok(value) => execution
-            .respond_sync_rpc_success(request.id, value)
-            .map_err(map_javascript_error),
-        Err(error) => execution
-            .respond_sync_rpc_error(
-                request.id,
-                wasm_sync_rpc_error_code(&error),
-                format!("{} {} failed: {error}", request.method, label),
-            )
-            .map_err(map_javascript_error),
-    }
-}
-
-fn wasm_sync_rpc_error_code(error: &std::io::Error) -> &'static str {
-    use std::io::ErrorKind;
-
-    if error.raw_os_error() == Some(30) {
-        return "EROFS";
-    }
-
-    match error.kind() {
-        ErrorKind::NotFound => "ENOENT",
-        ErrorKind::PermissionDenied => "EACCES",
-        ErrorKind::AlreadyExists => "EEXIST",
-        ErrorKind::InvalidInput => "EINVAL",
-        ErrorKind::IsADirectory => "EISDIR",
-        ErrorKind::NotADirectory => "ENOTDIR",
-        _ => "EIO",
-    }
-}
-
-fn wasm_host_stat_value(metadata: &fs::Metadata) -> Value {
-    json!({
-        "mode": metadata.mode(),
-        "size": metadata.size(),
-        "blocks": metadata.blocks(),
-        "dev": metadata.dev(),
-        "rdev": metadata.rdev(),
-        "isDirectory": metadata.is_dir(),
-        "isSymbolicLink": metadata.file_type().is_symlink(),
-        "atimeMs": metadata.atime() * 1000 + (metadata.atime_nsec() / 1_000_000),
-        "mtimeMs": metadata.mtime() * 1000 + (metadata.mtime_nsec() / 1_000_000),
-        "ctimeMs": metadata.ctime() * 1000 + (metadata.ctime_nsec() / 1_000_000),
-        "birthtimeMs": metadata.ctime() * 1000 + (metadata.ctime_nsec() / 1_000_000),
-        "ino": metadata.ino(),
-        "nlink": metadata.nlink(),
-        "uid": metadata.uid(),
-        "gid": metadata.gid(),
-    })
-}
-
-fn strip_guest_prefix(path: &str, prefix: &str) -> Option<String> {
-    let normalized_path = normalize_guest_path(path);
-    let normalized_prefix = normalize_guest_path(prefix);
-    if normalized_path == normalized_prefix {
-        return Some(String::new());
-    }
-    normalized_path
-        .strip_prefix(&(normalized_prefix + "/"))
-        .map(str::to_owned)
-}
-
-fn join_host_path(base: &Path, suffix: &str) -> PathBuf {
-    if suffix.is_empty() {
-        return base.to_path_buf();
-    }
-    suffix
-        .split('/')
-        .filter(|segment| !segment.is_empty())
-        .fold(base.to_path_buf(), |path, segment| path.join(segment))
-}
-
-fn decode_wasm_bytes_arg(
-    value: Option<&Value>,
-    label: &'static str,
-    limit: usize,
-) -> Result<Vec<u8>, WasmExecutionError> {
-    let base64 = value
-        .and_then(Value::as_object)
-        .and_then(|value| value.get("base64"))
-        .and_then(Value::as_str)
-        .ok_or_else(|| WasmExecutionError::RpcResponse(format!("missing {label}")))?;
-    let decoded_len = base64_decoded_len(base64)
-        .ok_or_else(|| WasmExecutionError::RpcResponse(format!("invalid {label} base64")))?;
-    if decoded_len > limit {
-        return Err(WasmExecutionError::OutputBufferExceeded {
-            stream: label,
-            limit,
-        });
-    }
-    base64::engine::general_purpose::STANDARD
-        .decode(base64)
-        .map_err(|_| WasmExecutionError::RpcResponse(format!("invalid {label} base64")))
-}
-
-fn base64_decoded_len(base64: &str) -> Option<usize> {
-    let len = base64.len();
-    let padding = base64
-        .as_bytes()
-        .iter()
-        .rev()
-        .take_while(|byte| **byte == b'=')
-        .take(2)
-        .count();
-    let full_quads = len / 4;
-    let remainder = len % 4;
-    let base_len = full_quads.checked_mul(3)?.checked_sub(padding)?;
-    match remainder {
-        0 => Some(base_len),
-        1 => None,
-        2 => base_len.checked_add(1),
-        3 => base_len.checked_add(2),
-        _ => None,
-    }
-}
-
-fn append_wasm_captured_output(
-    buffer: &mut Vec<u8>,
-    chunk: &[u8],
-    stream: &'static str,
-) -> Result<(), WasmExecutionError> {
-    ensure_wasm_output_capacity(buffer.len(), chunk.len(), stream)?;
-    buffer.extend_from_slice(chunk);
-    Ok(())
-}
-
-fn ensure_wasm_output_capacity(
-    current_len: usize,
-    chunk_len: usize,
-    stream: &'static str,
-) -> Result<(), WasmExecutionError> {
-    let Some(next_len) = current_len.checked_add(chunk_len) else {
-        return Err(WasmExecutionError::OutputBufferExceeded {
-            stream,
-            limit: WASM_CAPTURED_OUTPUT_LIMIT_BYTES,
-        });
-    };
-    if next_len > WASM_CAPTURED_OUTPUT_LIMIT_BYTES {
-        return Err(WasmExecutionError::OutputBufferExceeded {
-            stream,
-            limit: WASM_CAPTURED_OUTPUT_LIMIT_BYTES,
-        });
-    }
-    Ok(())
-}
-
-fn wasm_sync_read_length(length: Option<u64>) -> Result<usize, WasmExecutionError> {
-    let length = length.unwrap_or(0);
-    let length = usize::try_from(length).map_err(|_| {
-        WasmExecutionError::InvalidLimit(format!("fs.readSync length {length} exceeds host usize"))
-    })?;
-    if length > WASM_SYNC_READ_LIMIT_BYTES {
-        return Err(WasmExecutionError::InvalidLimit(format!(
-            "fs.readSync length {length} exceeds maximum {WASM_SYNC_READ_LIMIT_BYTES}"
-        )));
-    }
-    Ok(length)
-}
-
-fn open_wasm_guest_file(path: &Path, flags: &Value) -> std::io::Result<fs::File> {
-    let mut options = OpenOptions::new();
-    let flags_label = flags.to_string();
-
-    match flags.as_str() {
-        Some("r") | None if flags.as_u64().unwrap_or(0) == 0 => {
-            options.read(true);
-        }
-        Some("r+") => {
-            options.read(true).write(true);
-        }
-        Some("w") => {
-            options.write(true).create(true).truncate(true);
-        }
-        Some("w+") => {
-            options.read(true).write(true).create(true).truncate(true);
-        }
-        Some("a") => {
-            options.append(true).create(true);
-        }
-        Some("a+") => {
-            options.read(true).append(true).create(true);
-        }
-        _ => {
-            let numeric = flags.as_u64().ok_or_else(|| {
-                std::io::Error::new(
-                    std::io::ErrorKind::InvalidInput,
-                    format!("unsupported fs.openSync flags: {flags_label}"),
-                )
-            })?;
-            let write_only = (numeric & 0o1) != 0;
-            let read_write = (numeric & 0o2) != 0;
-            let create = (numeric & 0o100) != 0;
-            let truncate = (numeric & 0o1000) != 0;
-            let append = (numeric & 0o2000) != 0;
-
-            if read_write {
-                options.read(true).write(true);
-            } else if write_only {
-                options.write(true);
-            } else {
-                options.read(true);
-            }
-            if create {
-                options.create(true);
-            }
-            if truncate {
-                options.truncate(true);
-            }
-            if append {
-                options.append(true);
-            }
-        }
-    }
-
-    options.open(path).map_err(|error| {
-        std::io::Error::new(
-            error.kind(),
-            format!(
-                "failed to open guest file {} with flags {}: {error}",
-                path.display(),
-                flags_label
-            ),
-        )
-    })
-}
-
-fn translate_wasm_signal_state_sync_rpc_request(
-    execution: &mut JavascriptExecution,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Option<WasmExecutionEvent>, WasmExecutionError> {
-    if request.method != "process.signal_state" {
-        return Ok(None);
-    }
-
-    let signal = request
-        .args
-        .first()
-        .and_then(Value::as_u64)
-        .ok_or_else(|| WasmExecutionError::RpcResponse(String::from("missing signal number")))?;
-    let action = match request
-        .args
-        .get(1)
-        .and_then(Value::as_str)
-        .unwrap_or("default")
-    {
-        "ignore" => WasmSignalDispositionAction::Ignore,
-        "user" => WasmSignalDispositionAction::User,
-        _ => WasmSignalDispositionAction::Default,
-    };
-    let mask = request
-        .args
-        .get(2)
-        .and_then(Value::as_str)
-        .map(serde_json::from_str::<Vec<u32>>)
-        .transpose()
-        .map_err(|error| WasmExecutionError::RpcResponse(error.to_string()))?
-        .unwrap_or_default();
-    let flags = request
-        .args
-        .get(3)
-        .and_then(Value::as_u64)
-        .unwrap_or_default() as u32;
-
-    execution
-        .respond_sync_rpc_success(request.id, Value::Null)
-        .map_err(map_javascript_error)?;
-
-    Ok(Some(WasmExecutionEvent::SignalState {
-        signal: signal as u32,
-        registration: WasmSignalHandlerRegistration {
-            action,
-            mask,
-            flags,
-        },
-    }))
-}
-
-fn parse_wasm_signal_state_line(
-    line: &[u8],
-) -> Result<Option<WasmExecutionEvent>, WasmExecutionError> {
-    let line = line.strip_suffix(b"\n").unwrap_or(line);
-    let line = line.strip_suffix(b"\r").unwrap_or(line);
-    let payload = match line.strip_prefix(WASM_SIGNAL_STATE_PREFIX.as_bytes()) {
-        Some(payload) => payload,
-        None => return Ok(None),
-    };
-    let payload = std::str::from_utf8(payload)
-        .map_err(|error| WasmExecutionError::RpcResponse(error.to_string()))?;
-    let message: Value = serde_json::from_str(payload)
-        .map_err(|error| WasmExecutionError::RpcResponse(error.to_string()))?;
-    let signal = message
-        .get("signal")
-        .and_then(Value::as_u64)
-        .ok_or_else(|| WasmExecutionError::RpcResponse(String::from("missing signal number")))?;
-    let registration = message
-        .get("registration")
-        .and_then(Value::as_object)
-        .ok_or_else(|| {
-            WasmExecutionError::RpcResponse(String::from("missing signal registration"))
-        })?;
-    let action = match registration
-        .get("action")
-        .and_then(Value::as_str)
-        .unwrap_or("default")
-    {
-        "ignore" => WasmSignalDispositionAction::Ignore,
-        "user" => WasmSignalDispositionAction::User,
-        _ => WasmSignalDispositionAction::Default,
-    };
-    let mask = registration
-        .get("mask")
-        .and_then(Value::as_array)
-        .map(|entries| {
-            entries
-                .iter()
-                .filter_map(Value::as_u64)
-                .map(|value| value as u32)
-                .collect::<Vec<_>>()
-        })
-        .unwrap_or_default();
-    let flags = registration
-        .get("flags")
-        .and_then(Value::as_u64)
-        .unwrap_or_default() as u32;
-
-    Ok(Some(WasmExecutionEvent::SignalState {
-        signal: signal as u32,
-        registration: WasmSignalHandlerRegistration {
-            action,
-            mask,
-            flags,
-        },
-    }))
-}
-
-struct WasmJavascriptExecutionOptions<'a> {
-    frozen_time_ms: u128,
-    prewarm_only: bool,
-    warmup_metrics: Option<&'a [u8]>,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum WasmSnapshotRunnerMode {
-    Auto,
-    Block,
-    Off,
-}
-
-fn wasm_snapshot_runner_mode() -> WasmSnapshotRunnerMode {
-    match std::env::var(WASM_SNAPSHOT_RUNNER_ENV) {
-        Ok(value) if value.eq_ignore_ascii_case("block") => WasmSnapshotRunnerMode::Block,
-        Ok(value) if value.eq_ignore_ascii_case("off") => WasmSnapshotRunnerMode::Off,
-        Ok(value) if value.eq_ignore_ascii_case("auto") => WasmSnapshotRunnerMode::Auto,
-        Ok(value) => {
-            tracing::warn!(
-                value,
-                "{WASM_SNAPSHOT_RUNNER_ENV} must be auto, block, or off; using auto"
-            );
-            WasmSnapshotRunnerMode::Auto
-        }
-        Err(_) => WasmSnapshotRunnerMode::Auto,
-    }
-}
-
-fn start_wasm_javascript_execution(
-    javascript_engine: &mut JavascriptExecutionEngine,
-    import_cache: &NodeImportCache,
-    javascript_context_id: &str,
-    resolved_module: &ResolvedWasmModule,
-    request: &StartWasmExecutionRequest,
-    options: WasmJavascriptExecutionOptions<'_>,
-) -> Result<JavascriptExecution, WasmExecutionError> {
-    let wasm_module_bytes = cached_wasm_module_bytes(&resolved_module.resolved_path)?;
-    let internal_env = build_wasm_internal_env(
-        resolved_module,
-        request,
-        options.frozen_time_ms,
-        options.prewarm_only,
-    )?;
-    let snapshot_mode = wasm_snapshot_runner_mode();
-    let mut env = wasm_runner_base_env(request);
-    let mut guest_runtime = request.guest_runtime.clone();
-
-    let inline_code = match snapshot_mode {
-        WasmSnapshotRunnerMode::Off => {
-            env.extend(
-                internal_env
-                    .iter()
-                    .map(|(key, value)| (key.clone(), value.clone())),
-            );
-            build_wasm_runner_module_source(import_cache, &internal_env, options.warmup_metrics)?
-        }
-        WasmSnapshotRunnerMode::Auto | WasmSnapshotRunnerMode::Block => {
-            let userland_bundle = build_wasm_runner_userland_bundle(import_cache)?;
-            let runner_heap_limit_mb = wasm_runner_heap_limit_mb(request);
-            V8RuntimeHost::warm_snapshot_async(userland_bundle.clone());
-            let use_snapshot = match snapshot_mode {
-                WasmSnapshotRunnerMode::Block => {
-                    if !javascript_engine
-                        .snapshot_userland_ready(&userland_bundle)
-                        .map_err(map_javascript_error)?
-                    {
-                        javascript_engine
-                            .pre_warm_snapshot(&userland_bundle)
-                            .map_err(map_javascript_error)?;
-                    }
-                    javascript_engine
-                        .pre_warm_workers(
-                            &userland_bundle,
-                            runner_heap_limit_mb,
-                            v8_warm_worker_count(),
-                        )
-                        .map_err(map_javascript_error)?;
-                    javascript_engine
-                        .pre_warm_workers("", 0, v8_warm_worker_count())
-                        .map_err(map_javascript_error)?;
-                    true
-                }
-                WasmSnapshotRunnerMode::Auto => javascript_engine
-                    .snapshot_userland_ready(&userland_bundle)
-                    .unwrap_or(false),
-                WasmSnapshotRunnerMode::Off => false,
-            };
-
-            if use_snapshot {
-                env = wasm_snapshot_runner_base_env(request);
-                env.extend(
-                    internal_env
-                        .iter()
-                        .map(|(key, value)| (key.clone(), value.clone())),
-                );
-                guest_runtime.snapshot_userland_code = Some(userland_bundle);
-                build_wasm_snapshot_runner_inline_code(options.warmup_metrics)
-            } else {
-                env.extend(
-                    internal_env
-                        .iter()
-                        .map(|(key, value)| (key.clone(), value.clone())),
-                );
-                build_wasm_runner_module_source(
-                    import_cache,
-                    &internal_env,
-                    options.warmup_metrics,
-                )?
-            }
-        }
-    };
-
-    javascript_engine
-        .start_execution(StartJavascriptExecutionRequest {
-            vm_id: request.vm_id.clone(),
-            context_id: javascript_context_id.to_owned(),
-            argv: vec![String::from(WASM_INLINE_RUNNER_ENTRYPOINT)],
-            env,
-            cwd: request.cwd.clone(),
-            // Guest WASM fuel/memory caps are enforced from `request.limits`,
-            // and stack caps are validated there until runtime stack enforcement
-            // lands. These are separate from the runner's V8 heap: the trusted
-            // runner still has to compile the WASI runtime + guest module into
-            // its own isolate, which can overflow the 128 MiB per-guest default,
-            // so size the runner heap explicitly (operator-tunable).
-            limits: JavascriptExecutionLimits {
-                v8_heap_limit_mb: Some(wasm_runner_heap_limit_mb(request)),
-                ..JavascriptExecutionLimits::default()
-            },
-            // Forward the guest-runtime identity so the runner's shim sets
-            // process.* from typed config rather than env.
-            guest_runtime,
-            inline_code: Some(inline_code),
-            wasm_module_bytes: Some(wasm_module_bytes),
-        })
-        .map_err(map_javascript_error)
-}
-
-struct WasmModuleBytesCache {
-    entries: HashMap<PathBuf, (String, Arc<Vec<u8>>)>,
-}
-
-fn wasm_module_bytes_cache() -> &'static Mutex<WasmModuleBytesCache> {
-    static CACHE: OnceLock<Mutex<WasmModuleBytesCache>> = OnceLock::new();
-    CACHE.get_or_init(|| {
-        Mutex::new(WasmModuleBytesCache {
-            entries: HashMap::new(),
-        })
-    })
-}
-
-fn cached_wasm_module_bytes(path: &Path) -> Result<Arc<Vec<u8>>, WasmExecutionError> {
-    let current_fingerprint = file_fingerprint(path);
-    {
-        let cache = wasm_module_bytes_cache()
-            .lock()
-            .expect("wasm module bytes cache lock poisoned");
-        if let Some((fingerprint, bytes)) = cache.entries.get(path) {
-            if fingerprint == &current_fingerprint {
-                return Ok(Arc::clone(bytes));
-            }
-        }
-    }
-
-    let module_bytes = Arc::new(fs::read(path).map_err(WasmExecutionError::PrepareWarmPath)?);
-    let fingerprint = file_fingerprint(path);
-    let mut cache = wasm_module_bytes_cache()
-        .lock()
-        .expect("wasm module bytes cache lock poisoned");
-    if !cache.entries.contains_key(path) && cache.entries.len() >= WASM_MODULE_BYTES_CACHE_CAPACITY
-    {
-        if let Some(evicted_path) = cache.entries.keys().next().cloned() {
-            cache.entries.remove(&evicted_path);
-            tracing::warn!(
-                path = %evicted_path.display(),
-                "evicting cached wasm module bytes entry"
-            );
-        }
-    }
-    cache
-        .entries
-        .insert(path.to_path_buf(), (fingerprint, Arc::clone(&module_bytes)));
-    let cumulative_bytes: usize = cache.entries.values().map(|(_, bytes)| bytes.len()).sum();
-    tracing::debug!(
-        path = %path.display(),
-        raw_bytes = module_bytes.len(),
-        cumulative_bytes,
-        "cached wasm module bytes entry"
-    );
-    Ok(module_bytes)
-}
-
-fn build_wasm_internal_env(
-    resolved_module: &ResolvedWasmModule,
-    request: &StartWasmExecutionRequest,
-    frozen_time_ms: u128,
-    prewarm_only: bool,
-) -> Result<BTreeMap<String, String>, WasmExecutionError> {
-    let guest_path_mappings = wasm_guest_path_mappings(request);
-    let mut internal_env = request
-        .env
-        .iter()
-        .filter(|(key, _)| key.starts_with("AGENTOS_"))
-        .map(|(key, value)| (key.clone(), value.clone()))
-        .collect::<BTreeMap<_, _>>();
-    if let Some(value) = request.env.get("SECURE_EXEC_KEEP_STDIN_OPEN") {
-        internal_env.insert(String::from("SECURE_EXEC_KEEP_STDIN_OPEN"), value.clone());
-    }
-    scrub_migrated_wasm_limit_env(&mut internal_env);
-    insert_optional_u64_env(
-        &mut internal_env,
-        WASM_MAX_MEMORY_BYTES_ENV,
-        request.limits.max_memory_bytes,
-    );
-    internal_env.insert(
-        WASM_MODULE_PATH_ENV.to_string(),
-        resolved_module.specifier.clone(),
-    );
-    internal_env.insert(
-        String::from("AGENTOS_FORWARD_KERNEL_STDIN_RPC"),
-        String::from("1"),
-    );
-    internal_env.insert(
-        WASM_GUEST_ARGV_ENV.to_string(),
-        encode_json_string_array(&warmup_guest_argv(resolved_module, request)),
-    );
-    internal_env.insert(
-        WASM_GUEST_ENV_ENV.to_string(),
-        encode_json_string_map(&guest_visible_wasm_env(&request.env)),
-    );
-    insert_wasm_runner_identity_env(&mut internal_env, &request.guest_runtime);
-    internal_env.insert(
-        WASM_HOST_CWD_ENV.to_string(),
-        request.cwd.to_string_lossy().into_owned(),
-    );
-    internal_env.insert(
-        String::from("AGENTOS_GUEST_PATH_MAPPINGS"),
-        encode_wasm_guest_path_mappings(&guest_path_mappings),
-    );
-    internal_env.insert(
-        WASM_PERMISSION_TIER_ENV.to_string(),
-        request.permission_tier.as_env_value().to_string(),
-    );
-    internal_env.insert(
-        String::from("AGENTOS_FROZEN_TIME_MS"),
-        frozen_time_ms.to_string(),
-    );
-
-    if prewarm_only {
-        internal_env.insert(WASM_PREWARM_ONLY_ENV.to_string(), String::from("1"));
-    } else {
-        internal_env.remove(WASM_PREWARM_ONLY_ENV);
-    }
-    Ok(internal_env)
-}
-
-fn wasm_runner_base_env(request: &StartWasmExecutionRequest) -> BTreeMap<String, String> {
-    let mut env = request.env.clone();
-    scrub_migrated_wasm_limit_env(&mut env);
-    env
-}
-
-fn wasm_snapshot_runner_base_env(request: &StartWasmExecutionRequest) -> BTreeMap<String, String> {
-    let mut env = request
-        .env
-        .iter()
-        .filter(|(key, _)| !is_internal_wasm_guest_env_key(key))
-        .map(|(key, value)| (key.clone(), value.clone()))
-        .collect::<BTreeMap<_, _>>();
-    scrub_migrated_wasm_limit_env(&mut env);
-    env
-}
-
-fn scrub_migrated_wasm_limit_env(env: &mut BTreeMap<String, String>) {
-    for key in [
-        WASM_MAX_FUEL_ENV,
-        WASM_MAX_MEMORY_BYTES_ENV,
-        WASM_MAX_STACK_BYTES_ENV,
-        "AGENTOS_WASM_PREWARM_TIMEOUT_MS",
-        "AGENTOS_WASM_RUNNER_HEAP_LIMIT_MB",
-    ] {
-        env.remove(key);
-    }
-}
-
-fn insert_optional_u64_env(env: &mut BTreeMap<String, String>, key: &str, value: Option<u64>) {
-    if let Some(value) = value {
-        env.insert(key.to_string(), value.to_string());
-    } else {
-        env.remove(key);
-    }
-}
-
-fn insert_wasm_runner_identity_env(
-    env: &mut BTreeMap<String, String>,
-    guest_runtime: &GuestRuntimeConfig,
-) {
-    insert_optional_u64_env(
-        env,
-        "AGENTOS_VIRTUAL_PROCESS_UID",
-        guest_runtime.virtual_uid,
-    );
-    insert_optional_u64_env(
-        env,
-        "AGENTOS_VIRTUAL_PROCESS_GID",
-        guest_runtime.virtual_gid,
-    );
-    insert_optional_u64_env(
-        env,
-        "AGENTOS_VIRTUAL_PROCESS_PID",
-        guest_runtime.virtual_pid,
-    );
-    insert_optional_u64_env(
-        env,
-        "AGENTOS_VIRTUAL_PROCESS_PPID",
-        guest_runtime.virtual_ppid,
-    );
-}
-
-fn build_wasm_runner_module_source(
-    import_cache: &NodeImportCache,
-    internal_env: &BTreeMap<String, String>,
-    warmup_metrics: Option<&[u8]>,
-) -> Result<String, WasmExecutionError> {
-    let runner_source = transformed_wasm_runner_source(import_cache)?;
-    let bootstrap = build_wasm_runner_bootstrap(internal_env, warmup_metrics);
-    Ok(insert_wasm_runner_bootstrap(&runner_source, &bootstrap))
-}
-
-fn transformed_wasm_runner_source(
-    import_cache: &NodeImportCache,
-) -> Result<String, WasmExecutionError> {
-    if std::env::var(WASM_RUNNER_NO_CACHE_ENV).as_deref() == Ok("1") {
-        return read_transformed_wasm_runner_source(import_cache);
-    }
-
-    static RUNNER_SOURCE: OnceLock<Result<Arc<str>, Arc<str>>> = OnceLock::new();
-    RUNNER_SOURCE
-        .get_or_init(|| {
-            read_transformed_wasm_runner_source(import_cache)
-                .map(Arc::<str>::from)
-                .map_err(|error| Arc::<str>::from(error.to_string()))
-        })
-        .as_ref()
-        .map(|source| source.to_string())
-        .map_err(|message| {
-            WasmExecutionError::PrepareWarmPath(std::io::Error::other(message.to_string()))
-        })
-}
-
-fn read_transformed_wasm_runner_source(
-    import_cache: &NodeImportCache,
-) -> Result<String, WasmExecutionError> {
-    let runner_source = fs::read_to_string(import_cache.wasm_runner_path())
-        .map_err(WasmExecutionError::PrepareWarmPath)?;
-    Ok(runner_source.replace(
-        "import { WASI } from 'node:wasi';\n",
-        "const { WASI } = globalThis.__agentOSWasiModule;\n",
-    ))
-}
-
-fn build_wasm_runner_userland_bundle(
-    import_cache: &NodeImportCache,
-) -> Result<String, WasmExecutionError> {
-    if std::env::var(WASM_RUNNER_NO_CACHE_ENV).as_deref() == Ok("1") {
-        return build_wasm_runner_userland_bundle_uncached(import_cache);
-    }
-
-    static USERLAND_BUNDLE: OnceLock<Result<Arc<str>, Arc<str>>> = OnceLock::new();
-    USERLAND_BUNDLE
-        .get_or_init(|| {
-            build_wasm_runner_userland_bundle_uncached(import_cache)
-                .map(Arc::<str>::from)
-                .map_err(|error| Arc::<str>::from(error.to_string()))
-        })
-        .as_ref()
-        .map(|bundle| bundle.to_string())
-        .map_err(|message| {
-            WasmExecutionError::PrepareWarmPath(std::io::Error::other(message.to_string()))
-        })
-}
-
-fn build_wasm_runner_userland_bundle_uncached(
-    import_cache: &NodeImportCache,
-) -> Result<String, WasmExecutionError> {
-    let runner_source = transformed_wasm_runner_source(import_cache)?;
-    if runner_source
-        .lines()
-        .any(|line| line.trim_start().starts_with("import "))
-    {
-        return Err(WasmExecutionError::PrepareWarmPath(std::io::Error::other(
-            "transformed wasm runner still contains an ESM import statement",
-        )));
-    }
-
-    let mut bundle = build_wasm_runner_snapshot_prelude();
-    bundle.push_str("\nglobalThis.__agentOSWasmRunnerRun = async function () {\n");
-    bundle.push_str(&runner_source);
-    bundle.push_str("\n};\n");
-    Ok(bundle)
-}
-
-fn build_wasm_runner_snapshot_prelude() -> String {
-    let bootstrap = build_wasm_runner_bootstrap(&BTreeMap::new(), None);
-    let bootstrap = bootstrap
-        .strip_prefix("const __agentOSWasmInternalEnv = {};\n")
-        .unwrap_or(&bootstrap);
-    bootstrap.replace(wasm_internal_env_merge_source(), "")
-}
-
-fn build_wasm_snapshot_runner_inline_code(warmup_metrics: Option<&[u8]>) -> String {
-    let warmup_emit = wasm_warmup_metrics_emit_source(warmup_metrics);
-    format!(
-        r#"{warmup_emit}if (typeof process !== "undefined" && typeof globalThis.__agentOSProcessConfigEnv === "object") {{
-  process.env = {{ ...(process.env || {{}}), ...globalThis.__agentOSProcessConfigEnv }};
-}}
-await globalThis.__agentOSWasmRunnerRun();"#
-    )
-}
-
-fn build_wasm_runner_bootstrap(
-    internal_env: &BTreeMap<String, String>,
-    warmup_metrics: Option<&[u8]>,
-) -> String {
-    let internal_env_json =
-        serde_json::to_string(internal_env).unwrap_or_else(|_| String::from("{}"));
-    let warmup_emit = wasm_warmup_metrics_emit_source(warmup_metrics);
-    let wasi_module_source = render_native_wasi_module_source();
-    let env_merge_source = wasm_internal_env_merge_source();
-
-    format!(
-        r#"const __agentOSWasmInternalEnv = {internal_env_json};
-const __agentOSRequireBuiltin = (specifier) => {{
-  if (typeof globalThis.require === "function") {{
-    return globalThis.require(specifier);
-  }}
-  if (typeof process?.getBuiltinModule === "function") {{
-    return process.getBuiltinModule(specifier);
-  }}
-  throw new Error(`secure-exec WASM bootstrap cannot load ${{specifier}}`);
-}};
-{wasi_module_source}
-{env_merge_source}
-if (typeof globalThis !== "undefined") {{
-  const __agentOSNormalizeBytes = (value) => {{
-    if (value == null) {{
-      return value;
-    }}
-    if (typeof Buffer !== "undefined" && Buffer.isBuffer(value)) {{
-      return value;
-    }}
-    if (value instanceof Uint8Array) {{
-      return Buffer.from(value);
-    }}
-    if (ArrayBuffer.isView(value)) {{
-      return Buffer.from(value.buffer, value.byteOffset, value.byteLength);
-    }}
-    if (value instanceof ArrayBuffer) {{
-      return Buffer.from(value);
-    }}
-    if (
-      value &&
-      typeof value === "object" &&
-      value.__agentOSType === "bytes" &&
-      typeof value.base64 === "string"
-    ) {{
-      return Buffer.from(value.base64, "base64");
-    }}
-    return value;
-  }};
-  const __agentOSWasmSyncRpc = {{
-    callSync(method, args = []) {{
-      switch (method) {{
-        case "fs.fstatSync":
-          return __agentOSRequireBuiltin("node:fs").fstatSync(...args);
-        case "fs.lstatSync":
-          return __agentOSRequireBuiltin("node:fs").lstatSync(...args);
-        case "fs.statSync":
-          return __agentOSRequireBuiltin("node:fs").statSync(...args);
-        case "fs.chmodSync":
-          return __agentOSRequireBuiltin("node:fs").chmodSync(...args);
-        case "__kernel_stdio_write":
-          if (typeof _kernelStdioWriteRaw === "undefined") {{
-            throw new Error("secure-exec WASM kernel stdio bridge is unavailable");
-          }}
-          return _kernelStdioWriteRaw.applySync(void 0, args);
-        case "__kernel_stdin_read":
-          if (typeof _kernelStdinReadRaw === "undefined") {{
-            throw new Error("secure-exec WASM kernel stdin bridge is unavailable");
-          }}
-          return _kernelStdinReadRaw.applySync(void 0, args);
-        case "__kernel_poll":
-          if (typeof _kernelPollRaw === "undefined") {{
-            throw new Error("secure-exec WASM kernel poll bridge is unavailable");
-          }}
-          return _kernelPollRaw.applySync(void 0, args);
-        case "__kernel_isatty":
-          if (typeof _kernelIsattyRaw === "undefined") {{
-            throw new Error("secure-exec WASM kernel isatty bridge is unavailable");
-          }}
-          return _kernelIsattyRaw.applySync(void 0, args);
-        case "__kernel_tty_size":
-          if (typeof _kernelTtySizeRaw === "undefined") {{
-            throw new Error("secure-exec WASM kernel tty size bridge is unavailable");
-          }}
-          return _kernelTtySizeRaw.applySync(void 0, args);
-        case "__pty_set_raw_mode":
-          if (typeof _ptySetRawMode === "undefined") {{
-            throw new Error("secure-exec WASM PTY raw-mode bridge is unavailable");
-          }}
-          return _ptySetRawMode.applySync(void 0, args);
-        case "child_process.spawn": {{
-          if (typeof _childProcessSpawnStart === "undefined") {{
-            throw new Error("secure-exec WASM child_process bridge is unavailable");
-          }}
-          const [request] = args;
-          return _childProcessSpawnStart.applySync(void 0, [
-            request?.command ?? "",
-            JSON.stringify(request?.args ?? []),
-            JSON.stringify(request?.options ?? {{}}),
-          ]);
-        }}
-        case "child_process.poll":
-          if (typeof _childProcessPoll === "undefined") {{
-            throw new Error("secure-exec WASM child_process poll bridge is unavailable");
-          }}
-          return _childProcessPoll.applySync(void 0, args);
-        case "child_process.kill":
-          if (typeof _childProcessKill === "undefined") {{
-            throw new Error("secure-exec WASM child_process kill bridge is unavailable");
-          }}
-          return _childProcessKill.applySync(void 0, args);
-        case "process.kill":
-          if (typeof _processKill === "undefined") {{
-            throw new Error("secure-exec WASM process kill bridge is unavailable");
-          }}
-          return _processKill.applySync(void 0, args);
-        case "child_process.write_stdin": {{
-          if (typeof _childProcessStdinWrite === "undefined") {{
-            throw new Error("secure-exec WASM child_process stdin bridge is unavailable");
-          }}
-          const [childId, chunk] = args;
-          return _childProcessStdinWrite.applySync(void 0, [
-            childId,
-            __agentOSNormalizeBytes(chunk),
-          ]);
-        }}
-        case "child_process.close_stdin":
-          if (typeof _childProcessStdinClose === "undefined") {{
-            throw new Error("secure-exec WASM child_process stdin-close bridge is unavailable");
-          }}
-          return _childProcessStdinClose.applySync(void 0, args);
-        case "net.connect":
-          if (typeof _netSocketConnectRaw === "undefined") {{
-            throw new Error("secure-exec WASM net.connect bridge is unavailable");
-          }}
-          return _netSocketConnectRaw.applySync(void 0, args);
-        case "net.reserve_tcp_port":
-          if (typeof _netReserveTcpPortRaw === "undefined") {{
-            throw new Error("secure-exec WASM net.reserve_tcp_port bridge is unavailable");
-          }}
-          return _netReserveTcpPortRaw.applySync(void 0, args);
-        case "net.release_tcp_port":
-          if (typeof _netReleaseTcpPortRaw === "undefined") {{
-            throw new Error("secure-exec WASM net.release_tcp_port bridge is unavailable");
-          }}
-          return _netReleaseTcpPortRaw.applySync(void 0, args);
-        case "net.listen":
-          if (typeof _netServerListenRaw === "undefined") {{
-            throw new Error("secure-exec WASM net.listen bridge is unavailable");
-          }}
-          return _netServerListenRaw.applySync(void 0, args);
-        case "net.server_accept":
-          if (typeof _netServerAcceptRaw === "undefined") {{
-            throw new Error("secure-exec WASM net.server_accept bridge is unavailable");
-          }}
-          return _netServerAcceptRaw.applySync(void 0, args);
-        case "net.poll":
-          if (typeof _netSocketPollRaw === "undefined") {{
-            throw new Error("secure-exec WASM net.poll bridge is unavailable");
-          }}
-          return _netSocketPollRaw.applySync(void 0, args);
-        case "net.write":
-          if (typeof _netSocketWriteRaw === "undefined") {{
-            throw new Error("secure-exec WASM net.write bridge is unavailable");
-          }}
-          return _netSocketWriteRaw.applySync(void 0, args);
-        case "net.destroy":
-          if (typeof _netSocketDestroyRaw === "undefined") {{
-            throw new Error("secure-exec WASM net.destroy bridge is unavailable");
-          }}
-          return _netSocketDestroyRaw.applySync(void 0, args);
-        case "net.socket_upgrade_tls":
-          if (typeof _netSocketUpgradeTlsRaw === "undefined") {{
-            throw new Error("secure-exec WASM TLS-upgrade bridge is unavailable");
-          }}
-          return _netSocketUpgradeTlsRaw.applySync(void 0, args);
-        case "dgram.createSocket":
-          if (typeof _dgramSocketCreateRaw === "undefined") {{
-            throw new Error("secure-exec WASM dgram.createSocket bridge is unavailable");
-          }}
-          return _dgramSocketCreateRaw.applySync(void 0, args);
-        case "dgram.bind":
-          if (typeof _dgramSocketBindRaw === "undefined") {{
-            throw new Error("secure-exec WASM dgram.bind bridge is unavailable");
-          }}
-          return _dgramSocketBindRaw.applySync(void 0, args);
-        case "dgram.send": {{
-          if (typeof _dgramSocketSendRaw === "undefined") {{
-            throw new Error("secure-exec WASM dgram.send bridge is unavailable");
-          }}
-          const [socketId, chunk, options = {{}}] = args;
-          return _dgramSocketSendRaw.applySync(void 0, [
-            socketId,
-            __agentOSNormalizeBytes(chunk),
-            options,
-          ]);
-        }}
-        case "dgram.poll":
-          if (typeof _dgramSocketRecvRaw === "undefined") {{
-            throw new Error("secure-exec WASM dgram.poll bridge is unavailable");
-          }}
-          const event = _dgramSocketRecvRaw.applySync(void 0, args);
-          if (event && event.type === "message") {{
-            const data = __agentOSNormalizeBytes(event.data);
-            if (typeof Buffer !== "undefined" && Buffer.isBuffer(data)) {{
-              return {{
-                ...event,
-                data: {{ base64: data.toString("base64") }},
-              }};
-            }}
-          }}
-          if (
-            event &&
-            event.type === "message" &&
-            event.data &&
-            typeof event.data === "object" &&
-            typeof event.data.base64 === "string"
-          ) {{
-            return {{
-              ...event,
-              data: {{ base64: event.data.base64 }},
-            }};
-          }}
-          return event;
-        case "dgram.close":
-          if (typeof _dgramSocketCloseRaw === "undefined") {{
-            throw new Error("secure-exec WASM dgram.close bridge is unavailable");
-          }}
-          return _dgramSocketCloseRaw.applySync(void 0, args);
-        case "dgram.address":
-          if (typeof _dgramSocketAddressRaw === "undefined") {{
-            throw new Error("secure-exec WASM dgram.address bridge is unavailable");
-          }}
-          return _dgramSocketAddressRaw.applySync(void 0, args);
-        case "dgram.setBufferSize":
-          if (typeof _dgramSocketSetBufferSizeRaw === "undefined") {{
-            throw new Error("secure-exec WASM dgram.setBufferSize bridge is unavailable");
-          }}
-          return _dgramSocketSetBufferSizeRaw.applySync(void 0, args);
-        case "dgram.getBufferSize":
-          if (typeof _dgramSocketGetBufferSizeRaw === "undefined") {{
-            throw new Error("secure-exec WASM dgram.getBufferSize bridge is unavailable");
-          }}
-          return _dgramSocketGetBufferSizeRaw.applySync(void 0, args);
-        case "dns.lookup":
-          if (typeof _networkDnsLookupSyncRaw === "undefined") {{
-            throw new Error("secure-exec WASM dns.lookup bridge is unavailable");
-          }}
-          return _networkDnsLookupSyncRaw.applySync(void 0, args);
-        case "process.signal_state": {{
-          if (typeof _processSignalState === "undefined") {{
-            throw new Error("secure-exec WASM signal-state bridge is unavailable");
-          }}
-          const [signal, action = "default", maskJson = "[]", flags = 0] = args;
-          return _processSignalState.applySyncPromise(void 0, [
-            signal,
-            action,
-            maskJson,
-            flags,
-          ]);
-        }}
-        default:
-          throw new Error(`secure-exec WASM sync RPC method not implemented in V8 runtime: ${{method}}`);
-      }}
-    }},
-    async call(method, args = []) {{
-      return this.callSync(method, args);
-    }},
-  }};
-  Object.defineProperty(globalThis, "__agentOSSyncRpc", {{
-    configurable: true,
-    enumerable: false,
-    value: __agentOSWasmSyncRpc,
-    writable: true,
-  }});
-}}
-{warmup_emit}"#
-    )
-}
-
-fn wasm_warmup_metrics_emit_source(warmup_metrics: Option<&[u8]>) -> String {
-    let warmup_metrics_json = warmup_metrics.map(|bytes| {
-        serde_json::to_string(&String::from_utf8_lossy(bytes).to_string())
-            .unwrap_or_else(|_| String::from("\"\""))
-    });
-    warmup_metrics_json
-        .map(|metrics| {
-            format!(
-                "if (typeof process?.stderr?.write === \"function\") {{\n  process.stderr.write({metrics});\n}}\n"
-            )
-        })
-        .unwrap_or_default()
-}
-
-fn wasm_internal_env_merge_source() -> &'static str {
-    r#"if (typeof process !== "undefined") {
-  process.env = { ...(process.env || {}), ...__agentOSWasmInternalEnv };
-}
-"#
-}
-
-fn render_native_wasi_module_source() -> &'static str {
-    static SOURCE: OnceLock<String> = OnceLock::new();
-    SOURCE.get_or_init(|| {
-        NODE_WASI_MODULE_SOURCE.replace(
-            "__SECURE_EXEC_WASM_SYNC_READ_LIMIT_BYTES__",
-            &WASM_SYNC_READ_LIMIT_BYTES.to_string(),
-        )
-    })
-}
-
-fn insert_wasm_runner_bootstrap(source: &str, bootstrap: &str) -> String {
-    let mut insert_at = 0usize;
-    let mut saw_import = false;
-    for line in source.split_inclusive('\n') {
-        let trimmed = line.trim_start();
-        if trimmed.starts_with("import ") || (saw_import && trimmed.is_empty()) {
-            insert_at += line.len();
-            saw_import = saw_import || trimmed.starts_with("import ");
-            continue;
-        }
-        break;
-    }
-
-    format!(
-        "{}{}{}",
-        &source[..insert_at],
-        bootstrap,
-        &source[insert_at..]
-    )
-}
-
-fn prewarm_wasm_path(
-    import_cache: &NodeImportCache,
-    javascript_engine: &mut JavascriptExecutionEngine,
-    javascript_context_id: &str,
-    resolved_module: &ResolvedWasmModule,
-    request: &StartWasmExecutionRequest,
-    frozen_time_ms: u128,
-    prewarm_timeout: Duration,
-) -> Result<Option<Vec<u8>>, WasmExecutionError> {
-    let debug_enabled = env_flag_enabled(&request.env, WASM_WARMUP_DEBUG_ENV);
-    let marker_contents = warmup_marker_contents(resolved_module);
-    let marker_path = warmup_marker_path(
-        import_cache.prewarm_marker_dir(),
-        "wasm-runner-prewarm",
-        WASM_WARMUP_MARKER_VERSION,
-        &marker_contents,
-    );
-
-    if let Ok(metadata) = fs::metadata(&resolved_module.resolved_path) {
-        if metadata.len() > MAX_SYNC_WASM_PREWARM_MODULE_BYTES {
-            return Ok(warmup_metrics_line(
-                debug_enabled,
-                false,
-                "skipped-large-module",
-                import_cache,
-                &resolved_module.specifier,
-            ));
-        }
-    }
-
-    if marker_path.exists() {
-        return Ok(warmup_metrics_line(
-            debug_enabled,
-            false,
-            "cached",
-            import_cache,
-            &resolved_module.specifier,
-        ));
-    }
-
-    let mut prewarm_execution = start_wasm_javascript_execution(
-        javascript_engine,
-        import_cache,
-        javascript_context_id,
-        resolved_module,
-        request,
-        WasmJavascriptExecutionOptions {
-            frozen_time_ms,
-            prewarm_only: true,
-            warmup_metrics: None,
-        },
-    )
-    .map_err(|error| match error {
-        WasmExecutionError::Spawn(err) => WasmExecutionError::WarmupSpawn(err),
-        other => other,
-    })?;
-    let mut internal_sync_rpc = WasmInternalSyncRpc {
-        module_guest_paths: wasm_guest_module_paths(&resolved_module.specifier, &request.env),
-        module_host_path: resolved_module.resolved_path.clone(),
-        guest_cwd: wasm_guest_cwd(&request.env),
-        host_cwd: request.cwd.clone(),
-        sandbox_root: wasm_sandbox_root(&request.env),
-        guest_path_mappings: wasm_guest_path_mappings(request),
-        route_fs_through_sidecar: false,
-        next_fd: 64,
-        open_files: BTreeMap::new(),
-        pending_events: VecDeque::new(),
-    };
-    let mut stdout = Vec::new();
-    let mut stderr = Vec::new();
-    let started = Instant::now();
-
-    loop {
-        let poll_timeout = prewarm_timeout.saturating_sub(started.elapsed());
-        if poll_timeout.is_zero() {
-            let _ = prewarm_execution.terminate();
-            return Err(WasmExecutionError::WarmupTimeout(prewarm_timeout));
-        }
-
-        match prewarm_execution
-            .poll_event_blocking(poll_timeout)
-            .map_err(map_javascript_error)?
-        {
-            Some(JavascriptExecutionEvent::Stdout(chunk)) => {
-                append_wasm_captured_output(&mut stdout, &chunk, "stdout")?;
-            }
-            Some(JavascriptExecutionEvent::Stderr(chunk)) => {
-                append_wasm_captured_output(&mut stderr, &chunk, "stderr")?;
-            }
-            Some(JavascriptExecutionEvent::Exited(exit_code)) => {
-                if exit_code != 0 {
-                    return Err(WasmExecutionError::WarmupFailed {
-                        exit_code,
-                        stderr: String::from_utf8_lossy(&stderr).into_owned(),
-                    });
-                }
-                break;
-            }
-            Some(JavascriptExecutionEvent::SyncRpcRequest(sync_request)) => {
-                let handled = handle_internal_wasm_sync_rpc_request(
-                    &mut prewarm_execution,
-                    &mut internal_sync_rpc,
-                    &sync_request,
-                )?;
-                if !handled {
-                    return Err(WasmExecutionError::WarmupFailed {
-                        exit_code: 1,
-                        stderr: format!(
-                            "unexpected WebAssembly prewarm sync RPC request {} {} {:?}",
-                            sync_request.id, sync_request.method, sync_request.args
-                        ),
-                    });
-                }
-            }
-            Some(JavascriptExecutionEvent::SignalState { .. }) => {}
-            None => {
-                let _ = prewarm_execution.terminate();
-                return Err(WasmExecutionError::WarmupTimeout(prewarm_timeout));
-            }
-        }
-    }
-
-    let _ = stdout;
-    fs::write(&marker_path, marker_contents).map_err(WasmExecutionError::PrepareWarmPath)?;
-    Ok(warmup_metrics_line(
-        debug_enabled,
-        true,
-        "executed",
-        import_cache,
-        &resolved_module.specifier,
-    ))
-}
-
-fn wasm_guest_module_paths(specifier: &str, env: &BTreeMap<String, String>) -> Vec<String> {
-    let mut candidates = Vec::new();
-    candidates.push(specifier.to_owned());
-
-    if specifier.starts_with('/') {
-        candidates.push(normalize_guest_path(specifier));
-        candidates.extend(mapped_guest_paths_for_host_path(Path::new(specifier), env));
-    } else if !specifier.starts_with("file:") {
-        let guest_cwd = wasm_guest_cwd(env);
-        candidates.push(join_guest_path(&guest_cwd, specifier));
-    }
-
-    candidates.sort();
-    candidates.dedup();
-    candidates
-}
-
-fn wasm_guest_cwd(env: &BTreeMap<String, String>) -> String {
-    env.get("PWD")
-        .filter(|value| value.starts_with('/'))
-        .cloned()
-        .or_else(|| {
-            env.get("HOME")
-                .filter(|value| value.starts_with('/'))
-                .cloned()
-        })
-        .unwrap_or_else(|| String::from(DEFAULT_WASM_GUEST_HOME))
-}
-
-fn mapped_guest_paths_for_host_path(
-    host_path: &Path,
-    env: &BTreeMap<String, String>,
-) -> Vec<String> {
-    if !host_path.is_absolute() {
-        return Vec::new();
-    }
-
-    let mappings = env
-        .get("AGENTOS_GUEST_PATH_MAPPINGS")
-        .and_then(|value| serde_json::from_str::<Vec<Value>>(value).ok())
-        .unwrap_or_default();
-
-    let mut candidates = Vec::new();
-    for mapping in mappings {
-        let Some(guest_root) = mapping.get("guestPath").and_then(Value::as_str) else {
-            continue;
-        };
-        let Some(host_root) = mapping.get("hostPath").and_then(Value::as_str) else {
-            continue;
-        };
-        let host_root = Path::new(host_root);
-
-        if let Ok(suffix) = host_path.strip_prefix(host_root) {
-            candidates.push(join_guest_path(
-                guest_root,
-                &suffix.to_string_lossy().replace('\\', "/"),
-            ));
-            continue;
-        }
-
-        let Ok(real_host_root) = host_root.canonicalize() else {
-            continue;
-        };
-        if let Ok(suffix) = host_path.strip_prefix(&real_host_root) {
-            candidates.push(join_guest_path(
-                guest_root,
-                &suffix.to_string_lossy().replace('\\', "/"),
-            ));
-        }
-    }
-
-    candidates
-}
-
-fn normalize_guest_path(path: &str) -> String {
-    join_guest_path("/", path)
-}
-
-fn join_guest_path(base: &str, suffix: &str) -> String {
-    let mut segments = Vec::new();
-    let mut absolute = false;
-    for part in [base, suffix] {
-        if part.starts_with('/') {
-            absolute = true;
-        }
-        for segment in part.split('/') {
-            match segment {
-                "" | "." => {}
-                ".." => {
-                    let _ = segments.pop();
-                }
-                value => segments.push(value),
-            }
-        }
-    }
-
-    let joined = segments.join("/");
-    if absolute {
-        if joined.is_empty() {
-            String::from("/")
-        } else {
-            format!("/{joined}")
-        }
-    } else if joined.is_empty() {
-        String::from(".")
-    } else {
-        joined
-    }
-}
-
-fn module_path(
-    context: &WasmContext,
-    request: &StartWasmExecutionRequest,
-) -> Result<String, WasmExecutionError> {
-    match context.module_path.as_deref() {
-        Some(module_path) => Ok(module_path.to_owned()),
-        None => request
-            .argv
-            .first()
-            .cloned()
-            .ok_or(WasmExecutionError::MissingModulePath),
-    }
-}
-
-fn guest_visible_wasm_env(env: &BTreeMap<String, String>) -> BTreeMap<String, String> {
-    let mut guest_env = env
-        .iter()
-        .filter(|(key, _)| !is_internal_wasm_guest_env_key(key))
-        .map(|(key, value)| (key.clone(), value.clone()))
-        .collect::<BTreeMap<_, _>>();
-    let guest_cwd = wasm_guest_cwd(env);
-    let guest_home = guest_env
-        .get("HOME")
-        .filter(|value| value.starts_with('/'))
-        .cloned()
-        .unwrap_or_else(|| guest_cwd.clone());
-
-    guest_env
-        .entry(String::from("HOME"))
-        .or_insert_with(|| guest_home.clone());
-    guest_env
-        .entry(String::from("PWD"))
-        .or_insert_with(|| guest_cwd);
-    guest_env
-        .entry(String::from("USER"))
-        .or_insert_with(|| String::from(DEFAULT_WASM_GUEST_USER));
-    guest_env
-        .entry(String::from("LOGNAME"))
-        .or_insert_with(|| String::from(DEFAULT_WASM_GUEST_USER));
-    guest_env
-        .entry(String::from("SHELL"))
-        .or_insert_with(|| String::from(DEFAULT_WASM_GUEST_SHELL));
-    guest_env
-        .entry(String::from("PATH"))
-        .or_insert_with(|| String::from(DEFAULT_WASM_GUEST_PATH));
-    guest_env
-        .entry(String::from("TMPDIR"))
-        .or_insert_with(|| String::from("/tmp"));
-    guest_env
-}
-
-fn wasm_guest_path_mappings(request: &StartWasmExecutionRequest) -> Vec<WasmGuestPathMapping> {
-    let guest_cwd = wasm_guest_cwd(&request.env);
-    let mut mappings = request
-        .env
-        .get("AGENTOS_GUEST_PATH_MAPPINGS")
-        .and_then(|value| serde_json::from_str::<Vec<Value>>(value).ok())
-        .unwrap_or_default()
-        .into_iter()
-        .filter_map(|mapping| {
-            Some(WasmGuestPathMapping {
-                guest_path: mapping.get("guestPath")?.as_str()?.to_owned(),
-                host_path: PathBuf::from(mapping.get("hostPath")?.as_str()?),
-                read_only: mapping
-                    .get("readOnly")
-                    .and_then(Value::as_bool)
-                    .unwrap_or(false),
-            })
-        })
-        .collect::<Vec<_>>();
-
-    if let Some(sandbox_root) = wasm_sandbox_root(&request.env) {
-        push_wasm_guest_path_mapping(&mut mappings, String::from("/"), sandbox_root);
-    }
-    push_wasm_guest_path_mapping(&mut mappings, guest_cwd, request.cwd.clone());
-    push_wasm_guest_path_mapping(
-        &mut mappings,
-        String::from("/workspace"),
-        request.cwd.clone(),
-    );
-    mappings.sort_by_key(|mapping| std::cmp::Reverse(mapping.guest_path.len()));
-    mappings
-}
-
-fn wasm_sandbox_root(env: &BTreeMap<String, String>) -> Option<PathBuf> {
-    env.get(WASM_SANDBOX_ROOT_ENV)
-        .filter(|value| Path::new(value.as_str()).is_absolute())
-        .map(PathBuf::from)
-}
-
-fn push_wasm_guest_path_mapping(
-    mappings: &mut Vec<WasmGuestPathMapping>,
-    guest_path: String,
-    host_path: PathBuf,
-) {
-    if guest_path.is_empty() || !guest_path.starts_with('/') {
-        return;
-    }
-    if mappings
-        .iter()
-        .any(|mapping| mapping.guest_path == guest_path)
-    {
-        return;
-    }
-    mappings.push(WasmGuestPathMapping {
-        guest_path,
-        host_path,
-        read_only: false,
-    });
-}
-
-fn encode_wasm_guest_path_mappings(mappings: &[WasmGuestPathMapping]) -> String {
-    serde_json::to_string(
-        &mappings
-            .iter()
-            .map(|mapping| {
-                json!({
-                    "guestPath": mapping.guest_path,
-                    "hostPath": mapping.host_path.to_string_lossy(),
-                    "readOnly": mapping.read_only,
-                })
-            })
-            .collect::<Vec<_>>(),
-    )
-    .unwrap_or_else(|_| String::from("[]"))
-}
-
-fn is_internal_wasm_guest_env_key(key: &str) -> bool {
-    key.starts_with("AGENTOS_") || key.starts_with("NODE_SYNC_RPC_")
-}
-
-fn warmup_marker_contents(resolved_module: &ResolvedWasmModule) -> String {
-    let module_fingerprint = file_fingerprint(&resolved_module.resolved_path);
-
-    [
-        env!("CARGO_PKG_NAME").to_string(),
-        env!("CARGO_PKG_VERSION").to_string(),
-        WASM_WARMUP_MARKER_VERSION.to_string(),
-        resolved_module.specifier.clone(),
-        resolved_module.resolved_path.display().to_string(),
-        module_fingerprint,
-    ]
-    .join("\n")
-}
-
-fn warmup_metrics_line(
-    debug_enabled: bool,
-    executed: bool,
-    reason: &str,
-    import_cache: &NodeImportCache,
-    module_specifier: &str,
-) -> Option<Vec<u8>> {
-    if !debug_enabled {
-        return None;
-    }
-
-    Some(
-        format!(
-            "{WASM_WARMUP_METRICS_PREFIX}{{\"executed\":{},\"reason\":{},\"modulePath\":{},\"compileCacheDir\":{}}}\n",
-            if executed { "true" } else { "false" },
-            encode_json_string(reason),
-            encode_json_string(module_specifier),
-            encode_json_string(&import_cache.shared_compile_cache_dir().display().to_string()),
-        )
-        .into_bytes(),
-    )
-}
-
-fn resolve_wasm_execution_timeout(
-    request: &StartWasmExecutionRequest,
-) -> Result<Option<Duration>, WasmExecutionError> {
-    // Node's WASI runtime does not expose per-instruction fuel metering, so an
-    // EXPLICITLY configured "fuel" budget is enforced as a tight wall-clock
-    // timeout. The value rides the typed `limits.max_fuel` (from the BARE-wire
-    // resource limits), not an `AGENTOS_WASM_MAX_FUEL` env var.
-    //
-    // With no explicit fuel budget there is NO default wall-clock timeout —
-    // matching the JS execution philosophy (wall-clock backstop is opt-in).
-    // The guest stays bounded by default anyway: the wasm module executes on
-    // the runner isolate's thread, whose TRUE-CPU budget (the V8 CPU-time
-    // watchdog, default 30s ACTIVE CPU) terminates an infinite-loop module
-    // while letting an idle interactive guest (vim blocked in a kernel input
-    // wait) live indefinitely, exactly like native Linux.
-    Ok(request.limits.max_fuel.map(Duration::from_millis))
-}
-
-/// Resolve and validate the per-execution WASM stack cap from the typed wire
-/// limit. Runtime V8 stack-limit enforcement still needs a stack lever on the
-/// V8 session and is tracked as a follow-up; for now an out-of-range value is
-/// rejected up front so a misconfiguration surfaces instead of being silently
-/// dropped.
-fn resolve_wasm_stack_limit_bytes(
-    request: &StartWasmExecutionRequest,
-) -> Result<Option<u64>, WasmExecutionError> {
-    match request.limits.max_stack_bytes {
-        Some(0) => Err(WasmExecutionError::InvalidLimit(String::from(
-            "wasm max stack bytes must be greater than zero",
-        ))),
-        other => Ok(other),
-    }
-}
-
-fn resolve_wasm_prewarm_timeout(
-    request: &StartWasmExecutionRequest,
-) -> Result<Duration, WasmExecutionError> {
-    Ok(Duration::from_millis(
-        request
-            .limits
-            .prewarm_timeout_ms
-            .filter(|value| *value > 0)
-            .unwrap_or(DEFAULT_WASM_PREWARM_TIMEOUT_MS),
-    ))
-}
-
-fn resolve_wasm_module(
-    context: &WasmContext,
-    request: &StartWasmExecutionRequest,
-) -> Result<ResolvedWasmModule, WasmExecutionError> {
-    let specifier = module_path(context, request)?;
-    let resolved_path = resolved_module_path(&specifier, &request.cwd);
-    Ok(ResolvedWasmModule {
-        specifier,
-        resolved_path,
-    })
-}
-
-fn resolved_module_path(specifier: &str, cwd: &Path) -> PathBuf {
-    resolve_path_like_specifier(cwd, specifier)
-        .map(|path| path.canonicalize().unwrap_or(path))
-        .unwrap_or_else(|| PathBuf::from(specifier))
-}
-
-/// Sniff the first bytes of a resolved WebAssembly module and refuse to hand
-/// non-`\0asm` content (such as `#!/bin/sh` shell shims) to `WebAssembly.compile`.
-///
-/// Without this guard, resolving a `node_modules/.bin/<cmd>` shell shim against
-/// the WASM path produces an opaque `CompileError: WebAssembly.Module(): expected
-/// magic word 00 61 73 6d, found 23 21 2f 62 @+0` during prewarm. That error
-/// cascades through hundreds of downstream tests as `ERR_AGENTOS_NODE_SYNC_RPC:
-/// WebAssembly warmup exited with status 1: CompileError`, which hides the real
-/// command-resolution bug that fed the shim to the WASM engine in the first
-/// place. A typed [`WasmExecutionError::NonWasmBinary`] instead names the resolved
-/// path and preserves the header bytes so callers can route through the Node
-/// dispatch path or surface a clear error.
-fn verify_wasm_module_header(
-    resolved_module: &ResolvedWasmModule,
-) -> Result<(), WasmExecutionError> {
-    let resolved_path = &resolved_module.resolved_path;
-    let metadata = fs::metadata(resolved_path).map_err(|error| {
-        WasmExecutionError::InvalidModule(format!(
-            "failed to stat {}: {error}",
-            resolved_path.display()
-        ))
-    })?;
-    if metadata.len() > MAX_WASM_MODULE_FILE_BYTES {
-        return Err(WasmExecutionError::InvalidModule(format!(
-            "module file size of {} bytes exceeds the configured parser cap of {} bytes",
-            metadata.len(),
-            MAX_WASM_MODULE_FILE_BYTES
-        )));
-    }
-
-    let mut file = fs::File::open(resolved_path).map_err(|error| {
-        WasmExecutionError::InvalidModule(format!(
-            "failed to open {}: {error}",
-            resolved_path.display()
-        ))
-    })?;
-    let mut header = [0u8; 4];
-    let bytes_read = file.read(&mut header).map_err(|error| {
-        WasmExecutionError::InvalidModule(format!(
-            "failed to read header of {}: {error}",
-            resolved_path.display()
-        ))
-    })?;
-    let header = &header[..bytes_read];
-    if header == b"\0asm" {
-        return Ok(());
-    }
-
-    let shell_shim = header.len() >= 2 && &header[..2] == b"#!";
-    if let Some(format) = detect_native_binary_format(header) {
-        return Err(WasmExecutionError::NativeBinaryNotSupported {
-            path: resolved_path.clone(),
-            header: header.to_vec(),
-            format,
-        });
-    }
-
-    Err(WasmExecutionError::NonWasmBinary {
-        path: resolved_path.clone(),
-        header: header.to_vec(),
-        shell_shim,
-    })
-}
-
-fn detect_native_binary_format(header: &[u8]) -> Option<NativeBinaryFormat> {
-    if header.len() >= 4 && &header[..4] == b"\x7fELF" {
-        return Some(NativeBinaryFormat::Elf);
-    }
-
-    if header.starts_with(b"MZ") {
-        return Some(NativeBinaryFormat::PeCoff);
-    }
-
-    const MACH_O_MAGICS: [&[u8; 4]; 6] = [
-        b"\xfe\xed\xfa\xce",
-        b"\xce\xfa\xed\xfe",
-        b"\xfe\xed\xfa\xcf",
-        b"\xcf\xfa\xed\xfe",
-        b"\xca\xfe\xba\xbe",
-        b"\xbe\xba\xfe\xca",
-    ];
-    if header.len() >= 4 && MACH_O_MAGICS.iter().any(|magic| header[..4] == magic[..]) {
-        return Some(NativeBinaryFormat::MachO);
-    }
-
-    None
-}
-
-fn warmup_guest_argv(
-    resolved_module: &ResolvedWasmModule,
-    request: &StartWasmExecutionRequest,
-) -> Vec<String> {
-    if !request.argv.is_empty() {
-        return request.argv.clone();
-    }
-
-    vec![resolved_module.specifier.clone()]
-}
-
-fn wasm_memory_limit_bytes(
-    request: &StartWasmExecutionRequest,
-) -> Result<Option<u64>, WasmExecutionError> {
-    Ok(request.limits.max_memory_bytes)
-}
-
-fn wasm_stack_limit_bytes(
-    request: &StartWasmExecutionRequest,
-) -> Result<Option<u64>, WasmExecutionError> {
-    resolve_wasm_stack_limit_bytes(request)
-}
-
-#[cfg(test)]
-fn wasm_memory_limit_pages(memory_limit_bytes: u64) -> Result<u32, WasmExecutionError> {
-    let pages = memory_limit_bytes / WASM_PAGE_BYTES;
-    u32::try_from(pages).map_err(|_| {
-        WasmExecutionError::InvalidLimit(format!(
-            "{WASM_MAX_MEMORY_BYTES_ENV}={memory_limit_bytes}: exceeds V8's wasm page limit range"
-        ))
-    })
-}
-
-/// Resolve the wasm runner isolate's V8 heap cap (MB): the typed per-VM limit if
-/// set to a positive value, else the bounded default.
-fn wasm_runner_heap_limit_mb(request: &StartWasmExecutionRequest) -> u32 {
-    request
-        .limits
-        .runner_heap_limit_mb
-        .filter(|value| *value > 0)
-        .unwrap_or(DEFAULT_WASM_RUNNER_HEAP_LIMIT_MB)
-}
-
-fn v8_warm_worker_count() -> usize {
-    std::env::var("AGENTOS_V8_WARM_ISOLATES")
-        .ok()
-        .and_then(|value| value.parse::<usize>().ok())
-        .unwrap_or(2)
-}
-
-fn validate_module_limits(
-    resolved_module: &ResolvedWasmModule,
-    request: &StartWasmExecutionRequest,
-) -> Result<(), WasmExecutionError> {
-    // Read and validate the wire stack cap on every execution. Runtime stack
-    // enforcement is a follow-up, but a bad value still fails closed instead of
-    // being written to an env var.
-    let _stack_limit = resolve_wasm_stack_limit_bytes(request)?;
-
-    let Some(memory_limit) = wasm_memory_limit_bytes(request)? else {
-        return Ok(());
-    };
-
-    let resolved_path = &resolved_module.resolved_path;
-    let metadata = fs::metadata(resolved_path).map_err(|error| {
-        WasmExecutionError::InvalidModule(format!(
-            "failed to stat {}: {error}",
-            resolved_path.display()
-        ))
-    })?;
-    if metadata.len() > MAX_WASM_MODULE_FILE_BYTES {
-        return Err(WasmExecutionError::InvalidModule(format!(
-            "module file size of {} bytes exceeds the configured parser cap of {} bytes",
-            metadata.len(),
-            MAX_WASM_MODULE_FILE_BYTES
-        )));
-    }
-    let bytes = fs::read(resolved_path).map_err(|error| {
-        WasmExecutionError::InvalidModule(format!(
-            "failed to read {}: {error}",
-            resolved_path.display()
-        ))
-    })?;
-    let module_limits = extract_wasm_module_limits(&bytes)?;
-
-    if module_limits.imports_memory {
-        return Err(WasmExecutionError::InvalidModule(String::from(
-            "configured WebAssembly memory limit does not support imported memories yet",
-        )));
-    }
-
-    if let Some(initial_bytes) = module_limits.initial_memory_bytes {
-        if initial_bytes > memory_limit {
-            warn_limit_exhausted(
-                TrackedLimit::WasmMemoryBytes,
-                usize_saturating_from_u64(initial_bytes),
-                usize_saturating_from_u64(memory_limit),
-            );
-            return Err(WasmExecutionError::InvalidModule(format!(
-                "initial WebAssembly memory of {initial_bytes} bytes exceeds the configured limit of {memory_limit} bytes"
-            )));
-        }
-    }
-
-    match module_limits.maximum_memory_bytes {
-        Some(maximum_bytes) if maximum_bytes > memory_limit => {
-            warn_limit_exhausted(
-                TrackedLimit::WasmMemoryBytes,
-                usize_saturating_from_u64(maximum_bytes),
-                usize_saturating_from_u64(memory_limit),
-            );
-            Err(WasmExecutionError::InvalidModule(format!(
-                "WebAssembly memory maximum of {maximum_bytes} bytes exceeds the configured limit of {memory_limit} bytes"
-            )))
-        }
-        Some(_) => Ok(()),
-        None => Ok(()),
-    }
-}
-
-fn duration_millis_saturating_usize(duration: Duration) -> usize {
-    usize::try_from(duration.as_millis()).unwrap_or(usize::MAX)
-}
-
-fn usize_saturating_from_u64(value: u64) -> usize {
-    usize::try_from(value).unwrap_or(usize::MAX)
-}
-
-#[derive(Debug, Default)]
-struct WasmModuleLimits {
-    imports_memory: bool,
-    initial_memory_bytes: Option<u64>,
-    maximum_memory_bytes: Option<u64>,
-}
-
-fn extract_wasm_module_limits(bytes: &[u8]) -> Result<WasmModuleLimits, WasmExecutionError> {
-    if bytes.len() < 8 || &bytes[..4] != b"\0asm" {
-        return Err(WasmExecutionError::InvalidModule(String::from(
-            "module is not a valid WebAssembly binary",
-        )));
-    }
-
-    let mut offset = 8;
-    let mut limits = WasmModuleLimits::default();
-
-    while offset < bytes.len() {
-        let section_id = bytes[offset];
-        offset += 1;
-        let section_size = read_varuint_usize(bytes, &mut offset, "section size")?;
-        let section_end = offset.checked_add(section_size).ok_or_else(|| {
-            WasmExecutionError::InvalidModule(String::from("section size overflow"))
-        })?;
-        if section_end > bytes.len() {
-            return Err(WasmExecutionError::InvalidModule(String::from(
-                "section extends past end of module",
-            )));
-        }
-
-        match section_id {
-            2 => {
-                let mut cursor = offset;
-                let import_count = read_varuint_usize(bytes, &mut cursor, "import count")?;
-                if import_count > MAX_WASM_IMPORT_SECTION_ENTRIES {
-                    return Err(WasmExecutionError::InvalidModule(format!(
-                        "import section contains {import_count} entries, which exceeds the parser cap of {MAX_WASM_IMPORT_SECTION_ENTRIES}"
-                    )));
-                }
-                for _ in 0..import_count {
-                    skip_name(bytes, &mut cursor)?;
-                    skip_name(bytes, &mut cursor)?;
-                    let kind = read_byte(bytes, &mut cursor)?;
-                    match kind {
-                        0x02 => {
-                            let _ = read_memory_limits(bytes, &mut cursor)?;
-                            limits.imports_memory = true;
-                        }
-                        0x00 => {
-                            let _ = read_varuint(bytes, &mut cursor)?;
-                        }
-                        0x01 => {
-                            skip_table_type(bytes, &mut cursor)?;
-                        }
-                        0x03 => {
-                            let _ = read_byte(bytes, &mut cursor)?;
-                            let _ = read_byte(bytes, &mut cursor)?;
-                        }
-                        other => {
-                            return Err(WasmExecutionError::InvalidModule(format!(
-                                "unsupported import kind {other}"
-                            )));
-                        }
-                    }
-                }
-            }
-            5 => {
-                let mut cursor = offset;
-                let memory_count = read_varuint_usize(bytes, &mut cursor, "memory count")?;
-                if memory_count > MAX_WASM_MEMORY_SECTION_ENTRIES {
-                    return Err(WasmExecutionError::InvalidModule(format!(
-                        "memory section contains {memory_count} entries, which exceeds the parser cap of {MAX_WASM_MEMORY_SECTION_ENTRIES}"
-                    )));
-                }
-                if memory_count > 0 {
-                    let (initial_pages, maximum_pages) = read_memory_limits(bytes, &mut cursor)?;
-                    limits.initial_memory_bytes =
-                        Some(initial_pages.saturating_mul(WASM_PAGE_BYTES));
-                    limits.maximum_memory_bytes =
-                        maximum_pages.map(|pages| pages.saturating_mul(WASM_PAGE_BYTES));
-                }
-            }
-            _ => {}
-        }
-
-        offset = section_end;
-    }
-
-    Ok(limits)
-}
-
-fn read_memory_limits(
-    bytes: &[u8],
-    offset: &mut usize,
-) -> Result<(u64, Option<u64>), WasmExecutionError> {
-    let flags = read_varuint(bytes, offset)?;
-    let initial = read_varuint(bytes, offset)?;
-    let maximum = if flags & 0x01 != 0 {
-        Some(read_varuint(bytes, offset)?)
-    } else {
-        None
-    };
-    Ok((initial, maximum))
-}
-
-fn skip_name(bytes: &[u8], offset: &mut usize) -> Result<(), WasmExecutionError> {
-    let length = read_varuint_usize(bytes, offset, "name length")?;
-    let end = offset
-        .checked_add(length)
-        .ok_or_else(|| WasmExecutionError::InvalidModule(String::from("name length overflow")))?;
-    if end > bytes.len() {
-        return Err(WasmExecutionError::InvalidModule(String::from(
-            "name extends past end of module",
-        )));
-    }
-    *offset = end;
-    Ok(())
-}
-
-fn skip_table_type(bytes: &[u8], offset: &mut usize) -> Result<(), WasmExecutionError> {
-    let _ = read_byte(bytes, offset)?;
-    let flags = read_varuint(bytes, offset)?;
-    let _ = read_varuint(bytes, offset)?;
-    if flags & 0x01 != 0 {
-        let _ = read_varuint(bytes, offset)?;
-    }
-    Ok(())
-}
-
-fn read_byte(bytes: &[u8], offset: &mut usize) -> Result<u8, WasmExecutionError> {
-    let Some(byte) = bytes.get(*offset).copied() else {
-        return Err(WasmExecutionError::InvalidModule(String::from(
-            "unexpected end of module",
-        )));
-    };
-    *offset += 1;
-    Ok(byte)
-}
-
-fn read_varuint(bytes: &[u8], offset: &mut usize) -> Result<u64, WasmExecutionError> {
-    let mut shift = 0_u32;
-    let mut value = 0_u64;
-    let mut encoded_bytes = 0_usize;
-
-    loop {
-        let byte = read_byte(bytes, offset)?;
-        encoded_bytes += 1;
-        if encoded_bytes > MAX_WASM_VARUINT_BYTES {
-            return Err(WasmExecutionError::InvalidModule(format!(
-                "varuint exceeds the parser cap of {MAX_WASM_VARUINT_BYTES} bytes"
-            )));
-        }
-        value |= u64::from(byte & 0x7f) << shift;
-        if byte & 0x80 == 0 {
-            return Ok(value);
-        }
-        if encoded_bytes == MAX_WASM_VARUINT_BYTES {
-            return Err(WasmExecutionError::InvalidModule(format!(
-                "varuint exceeds the parser cap of {MAX_WASM_VARUINT_BYTES} bytes"
-            )));
-        }
-        shift = shift.saturating_add(7);
-        if shift >= 64 {
-            return Err(WasmExecutionError::InvalidModule(String::from(
-                "varuint is too large",
-            )));
-        }
-    }
-}
-
-fn read_varuint_usize(
-    bytes: &[u8],
-    offset: &mut usize,
-    label: &str,
-) -> Result<usize, WasmExecutionError> {
-    let value = read_varuint(bytes, offset)?;
-    usize::try_from(value).map_err(|_| {
-        WasmExecutionError::InvalidModule(format!(
-            "{label} of {value} exceeds platform usize range"
-        ))
-    })
-}
-
-impl From<NodeSignalDispositionAction> for WasmSignalDispositionAction {
-    fn from(value: NodeSignalDispositionAction) -> Self {
-        match value {
-            NodeSignalDispositionAction::Default => Self::Default,
-            NodeSignalDispositionAction::Ignore => Self::Ignore,
-            NodeSignalDispositionAction::User => Self::User,
-        }
-    }
-}
-
-impl From<NodeSignalHandlerRegistration> for WasmSignalHandlerRegistration {
-    fn from(value: NodeSignalHandlerRegistration) -> Self {
-        Self {
-            action: value.action.into(),
-            mask: value.mask,
-            flags: value.flags,
-        }
-    }
-}
-
-fn resolve_path_like_specifier(cwd: &Path, specifier: &str) -> Option<PathBuf> {
-    if specifier.starts_with("file://") {
-        return Some(PathBuf::from(specifier.trim_start_matches("file://")));
-    }
-    if specifier.starts_with("file:") {
-        return Some(PathBuf::from(specifier.trim_start_matches("file:")));
-    }
-    if specifier.starts_with('/') {
-        return Some(PathBuf::from(specifier));
-    }
-    if specifier.starts_with("./") || specifier.starts_with("../") {
-        return Some(cwd.join(specifier));
-    }
-
-    None
-}
-
-#[cfg(test)]
-mod tests {
-    use super::{
-        build_wasm_internal_env, build_wasm_runner_bootstrap, open_wasm_guest_file,
-        resolve_wasm_execution_timeout, resolve_wasm_prewarm_timeout,
-        resolve_wasm_stack_limit_bytes, resolved_module_path, translate_wasm_guest_path,
-        translate_wasm_host_symlink_target, wasm_guest_module_paths, wasm_host_path_is_read_only,
-        wasm_memory_limit_bytes, wasm_memory_limit_pages, wasm_mutation_touches_read_only_mapping,
-        wasm_read_only_filesystem_error, wasm_runner_base_env, wasm_runner_heap_limit_mb,
-        wasm_sandbox_root, wasm_snapshot_runner_base_env, wasm_sync_read_length,
-        wasm_sync_rpc_error_code, wasm_sync_rpc_method_routes_through_sidecar_kernel,
-        GuestRuntimeConfig, JavascriptSyncRpcRequest, ResolvedWasmModule,
-        StartWasmExecutionRequest, Value, WasmExecutionError, WasmExecutionLimits,
-        WasmInternalSyncRpc, WasmPermissionTier, DEFAULT_WASM_PREWARM_TIMEOUT_MS,
-        DEFAULT_WASM_RUNNER_HEAP_LIMIT_MB, NODE_WASI_MODULE_SOURCE,
-        WASM_CAPTURED_OUTPUT_LIMIT_BYTES, WASM_MAX_FUEL_ENV, WASM_MAX_MEMORY_BYTES_ENV,
-        WASM_MAX_STACK_BYTES_ENV, WASM_PAGE_BYTES, WASM_SANDBOX_ROOT_ENV,
-        WASM_SIDECAR_ROUTED_FS_SYNC_METHODS, WASM_SYNC_READ_LIMIT_BYTES,
-    };
-    use std::collections::{BTreeMap, BTreeSet, VecDeque};
-    use std::fs;
-    use std::os::unix::fs::symlink;
-    use std::path::{Path, PathBuf};
-    use std::time::Duration;
-    use tempfile::tempdir;
-
-    fn request_with_env(cwd: &Path, env: BTreeMap<String, String>) -> StartWasmExecutionRequest {
-        // Translate the legacy `AGENTOS_WASM_*` limit env keys these tests still
-        // express into the typed limits the engine now reads (mirrors the
-        // sidecar's config→limits flow).
-        let parse = |key: &str| env.get(key).and_then(|value| value.parse::<u64>().ok());
-        let limits = WasmExecutionLimits {
-            max_fuel: parse(WASM_MAX_FUEL_ENV),
-            max_memory_bytes: parse(WASM_MAX_MEMORY_BYTES_ENV),
-            max_stack_bytes: parse(WASM_MAX_STACK_BYTES_ENV),
-            prewarm_timeout_ms: None,
-            runner_heap_limit_mb: None,
-        };
-        StartWasmExecutionRequest {
-            limits,
-            guest_runtime: GuestRuntimeConfig::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id: String::from("ctx-wasm"),
-            argv: Vec::new(),
-            env,
-            cwd: cwd.to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        }
-    }
-
-    fn wasi_imports_from_source(source: &str) -> BTreeSet<String> {
-        let table_start = source
-            .find("this.wasiImport = {")
-            .expect("WASI source should define a wasiImport table");
-        let table_body = &source[table_start + "this.wasiImport = {".len()..];
-        let table_end = table_body
-            .find("\n      };")
-            .expect("WASI source should close the wasiImport table");
-
-        table_body[..table_end]
-            .lines()
-            .filter_map(|line| {
-                let (name, _) = line.trim_start().split_once(':')?;
-                name.chars()
-                    .all(|ch| ch.is_ascii_lowercase() || ch.is_ascii_digit() || ch == '_')
-                    .then(|| name.to_string())
-            })
-            .collect()
-    }
-
-    fn wasm_sync_rpc_request(method: &str) -> JavascriptSyncRpcRequest {
-        JavascriptSyncRpcRequest {
-            id: 1,
-            method: method.to_string(),
-            args: Vec::new(),
-            raw_bytes_args: Default::default(),
-        }
-    }
-
-    /// Build a request whose typed limits and `AGENTOS_WASM_*` env disagree, so a
-    /// reader that still consulted env would observe the (wrong) env value.
-    fn request_with_typed_limits_and_misleading_env(
-        limits: WasmExecutionLimits,
-    ) -> StartWasmExecutionRequest {
-        StartWasmExecutionRequest {
-            limits,
-            guest_runtime: GuestRuntimeConfig::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id: String::from("ctx-wasm"),
-            argv: Vec::new(),
-            // Deliberately huge env values: if any limit were still sourced from
-            // env, the assertions below would observe these instead.
-            env: BTreeMap::from([
-                (String::from(WASM_MAX_FUEL_ENV), String::from("999999")),
-                (
-                    String::from(WASM_MAX_MEMORY_BYTES_ENV),
-                    String::from("999999"),
-                ),
-                (
-                    String::from(WASM_MAX_STACK_BYTES_ENV),
-                    String::from("999999"),
-                ),
-                (
-                    String::from("AGENTOS_WASM_PREWARM_TIMEOUT_MS"),
-                    String::from("999999"),
-                ),
-                (
-                    String::from("AGENTOS_WASM_RUNNER_HEAP_LIMIT_MB"),
-                    String::from("999999"),
-                ),
-            ]),
-            cwd: PathBuf::from("/tmp"),
-            permission_tier: WasmPermissionTier::Full,
-        }
-    }
-
-    #[test]
-    fn wasm_limits_are_read_from_typed_fields_and_env_is_inert() {
-        let request = request_with_typed_limits_and_misleading_env(WasmExecutionLimits {
-            max_fuel: Some(25),
-            max_memory_bytes: Some(65_536),
-            max_stack_bytes: Some(131_072),
-            prewarm_timeout_ms: Some(750),
-            runner_heap_limit_mb: Some(512),
-        });
-
-        assert_eq!(
-            resolve_wasm_execution_timeout(&request).expect("fuel timeout"),
-            Some(Duration::from_millis(25)),
-            "fuel must come from the typed wire limit, not AGENTOS_WASM_MAX_FUEL"
-        );
-        assert_eq!(
-            wasm_memory_limit_bytes(&request).expect("memory limit"),
-            Some(65_536),
-            "memory must come from the typed wire limit, not AGENTOS_WASM_MAX_MEMORY_BYTES"
-        );
-        assert_eq!(
-            resolve_wasm_stack_limit_bytes(&request).expect("stack limit"),
-            Some(131_072),
-            "stack must come from the typed wire limit (retiring the dead AGENTOS_WASM_MAX_STACK_BYTES knob)"
-        );
-        assert_eq!(
-            resolve_wasm_prewarm_timeout(&request).expect("prewarm timeout"),
-            Duration::from_millis(750),
-            "prewarm timeout must come from the typed wire limit, not AGENTOS_WASM_PREWARM_TIMEOUT_MS"
-        );
-        assert_eq!(
-            wasm_runner_heap_limit_mb(&request),
-            512,
-            "runner heap must come from the typed wire limit, not AGENTOS_WASM_RUNNER_HEAP_LIMIT_MB"
-        );
-    }
-
-    #[test]
-    fn wasm_limits_default_to_bounded_timeout_when_unset_even_with_env_present() {
-        // Same misleading env, but no typed limits: no wall-clock fuel timeout
-        // (the runner's V8 TRUE-CPU budget bounds runaways), and memory and
-        // stack limits remain absent.
-        let request = request_with_typed_limits_and_misleading_env(WasmExecutionLimits::default());
-
-        assert_eq!(
-            resolve_wasm_execution_timeout(&request).expect("fuel"),
-            None
-        );
-        assert_eq!(wasm_memory_limit_bytes(&request).expect("memory"), None);
-        assert_eq!(
-            resolve_wasm_stack_limit_bytes(&request).expect("stack"),
-            None
-        );
-        assert_eq!(
-            resolve_wasm_prewarm_timeout(&request).expect("prewarm"),
-            Duration::from_millis(DEFAULT_WASM_PREWARM_TIMEOUT_MS)
-        );
-        assert_eq!(
-            wasm_runner_heap_limit_mb(&request),
-            DEFAULT_WASM_RUNNER_HEAP_LIMIT_MB
-        );
-    }
-
-    #[test]
-    fn wasm_internal_env_scrubs_migrated_limit_env_keys() {
-        let request = request_with_typed_limits_and_misleading_env(WasmExecutionLimits {
-            max_fuel: Some(25),
-            max_memory_bytes: Some(65_536),
-            max_stack_bytes: Some(131_072),
-            prewarm_timeout_ms: Some(750),
-            runner_heap_limit_mb: Some(512),
-        });
-        let resolved_module = ResolvedWasmModule {
-            specifier: String::from("./guest.wasm"),
-            resolved_path: PathBuf::from("/tmp/guest.wasm"),
-        };
-
-        let internal_env =
-            build_wasm_internal_env(&resolved_module, &request, 1_234, false).expect("env");
-
-        assert_eq!(
-            internal_env.get(WASM_MAX_MEMORY_BYTES_ENV),
-            Some(&String::from("65536"))
-        );
-        assert!(!internal_env.contains_key(WASM_MAX_STACK_BYTES_ENV));
-        assert!(!internal_env.contains_key(WASM_MAX_FUEL_ENV));
-        assert!(!internal_env.contains_key("AGENTOS_WASM_PREWARM_TIMEOUT_MS"));
-        assert!(!internal_env.contains_key("AGENTOS_WASM_RUNNER_HEAP_LIMIT_MB"));
-    }
-
-    #[test]
-    fn wasm_runner_base_env_scrubs_migrated_limit_env_keys() {
-        let mut request = request_with_typed_limits_and_misleading_env(WasmExecutionLimits {
-            max_fuel: Some(25),
-            max_memory_bytes: Some(65_536),
-            max_stack_bytes: Some(131_072),
-            prewarm_timeout_ms: Some(750),
-            runner_heap_limit_mb: Some(512),
-        });
-        request
-            .env
-            .insert(String::from("USER_VISIBLE"), String::from("kept"));
-        request
-            .env
-            .insert(String::from("AGENTOS_TRACE_ID"), String::from("kept"));
-
-        let env = wasm_runner_base_env(&request);
-
-        assert_eq!(env.get("USER_VISIBLE"), Some(&String::from("kept")));
-        assert_eq!(env.get("AGENTOS_TRACE_ID"), Some(&String::from("kept")));
-        assert!(!env.contains_key(WASM_MAX_FUEL_ENV));
-        assert!(!env.contains_key(WASM_MAX_MEMORY_BYTES_ENV));
-        assert!(!env.contains_key(WASM_MAX_STACK_BYTES_ENV));
-        assert!(!env.contains_key("AGENTOS_WASM_PREWARM_TIMEOUT_MS"));
-        assert!(!env.contains_key("AGENTOS_WASM_RUNNER_HEAP_LIMIT_MB"));
-    }
-
-    #[test]
-    fn wasm_snapshot_runner_base_env_scrubs_internal_and_migrated_limit_env_keys() {
-        let mut request = request_with_typed_limits_and_misleading_env(WasmExecutionLimits {
-            max_fuel: Some(25),
-            max_memory_bytes: Some(65_536),
-            max_stack_bytes: Some(131_072),
-            prewarm_timeout_ms: Some(750),
-            runner_heap_limit_mb: Some(512),
-        });
-        request
-            .env
-            .insert(String::from("USER_VISIBLE"), String::from("kept"));
-        request.env.insert(
-            String::from("NODE_SYNC_RPC_WAIT_TIMEOUT_MS"),
-            String::from("999"),
-        );
-
-        let env = wasm_snapshot_runner_base_env(&request);
-
-        assert_eq!(env.get("USER_VISIBLE"), Some(&String::from("kept")));
-        assert!(!env.contains_key("NODE_SYNC_RPC_WAIT_TIMEOUT_MS"));
-        assert!(!env.contains_key(WASM_MAX_FUEL_ENV));
-        assert!(!env.contains_key(WASM_MAX_MEMORY_BYTES_ENV));
-        assert!(!env.contains_key(WASM_MAX_STACK_BYTES_ENV));
-        assert!(!env.contains_key("AGENTOS_WASM_PREWARM_TIMEOUT_MS"));
-        assert!(!env.contains_key("AGENTOS_WASM_RUNNER_HEAP_LIMIT_MB"));
-    }
-
-    #[test]
-    fn wasm_stack_limit_of_zero_is_rejected() {
-        let request = request_with_typed_limits_and_misleading_env(WasmExecutionLimits {
-            max_stack_bytes: Some(0),
-            ..WasmExecutionLimits::default()
-        });
-
-        assert!(
-            resolve_wasm_stack_limit_bytes(&request).is_err(),
-            "a zero stack cap must fail closed rather than be silently dropped"
-        );
-    }
-
-    #[test]
-    fn resolved_module_path_canonicalizes_path_like_specifiers() {
-        let temp = tempdir().expect("create temp dir");
-        let real = temp.path().join("real.wasm");
-        let alias = temp.path().join("alias.wasm");
-        fs::write(&real, b"\0asm\x01\0\0\0").expect("write wasm file");
-        symlink(&real, &alias).expect("create wasm symlink");
-
-        let resolved = resolved_module_path("./alias.wasm", temp.path());
-
-        assert_eq!(
-            resolved,
-            real.canonicalize().expect("canonicalize wasm target")
-        );
-    }
-
-    #[test]
-    fn wasm_prewarm_timeout_is_separate_from_execution_timeout() {
-        let temp = tempdir().expect("create temp dir");
-        let mut request = request_with_env(
-            temp.path(),
-            BTreeMap::from([(String::from(WASM_MAX_FUEL_ENV), String::from("25"))]),
-        );
-        request.limits.prewarm_timeout_ms = Some(750);
-
-        assert_eq!(
-            resolve_wasm_execution_timeout(&request).expect("execution timeout"),
-            Some(Duration::from_millis(25))
-        );
-        assert_eq!(
-            resolve_wasm_prewarm_timeout(&request).expect("prewarm timeout"),
-            Duration::from_millis(750)
-        );
-    }
-
-    // No explicit fuel budget means no wasm-specific wall-clock timeout. Runaway
-    // wasm stays bounded by the runner isolate's active-CPU watchdog, so idle
-    // interactive guests are not killed on wall time.
-    #[test]
-    fn wasm_execution_timeout_is_unset_without_fuel_budget() {
-        let temp = tempdir().expect("create temp dir");
-        let request = request_with_env(temp.path(), BTreeMap::new());
-
-        let timeout = resolve_wasm_execution_timeout(&request)
-            .expect("execution timeout resolves without fuel env");
-
-        assert_eq!(
-            timeout, None,
-            "no explicit fuel budget means no wall-clock timeout; the runner \
-             isolate's TRUE-CPU budget (default 30s active CPU) is the bound \
-             that terminates an infinite-loop module (F-004), so an idle \
-             interactive guest is not killed on wall time"
-        );
-    }
-
-    #[test]
-    fn wasm_captured_output_rejects_output_over_limit() {
-        let mut stdout = vec![b'x'; WASM_CAPTURED_OUTPUT_LIMIT_BYTES - 1];
-        super::append_wasm_captured_output(&mut stdout, b"y", "stdout").expect("fill to limit");
-        assert_eq!(stdout.len(), WASM_CAPTURED_OUTPUT_LIMIT_BYTES);
-
-        let error = super::append_wasm_captured_output(&mut stdout, b"z", "stdout")
-            .expect_err("captured output over limit should fail");
-        assert!(matches!(
-            error,
-            WasmExecutionError::OutputBufferExceeded {
-                stream: "stdout",
-                limit: WASM_CAPTURED_OUTPUT_LIMIT_BYTES,
-            }
-        ));
-    }
-
-    #[test]
-    fn wasm_sync_read_length_rejects_oversized_guest_lengths() {
-        assert_eq!(
-            wasm_sync_read_length(Some(WASM_SYNC_READ_LIMIT_BYTES as u64))
-                .expect("max read length should be accepted"),
-            WASM_SYNC_READ_LIMIT_BYTES
-        );
-
-        let error = wasm_sync_read_length(Some(WASM_SYNC_READ_LIMIT_BYTES as u64 + 1))
-            .expect_err("oversized read length should fail before allocation");
-        assert!(
-            matches!(error, WasmExecutionError::InvalidLimit(message) if message.contains("fs.readSync length"))
-        );
-    }
-
-    #[test]
-    fn wasm_bytes_arg_rejects_payloads_over_limit_before_decode() {
-        let mut payload = serde_json::Map::new();
-        payload.insert(
-            String::from("base64"),
-            Value::String(String::from("YWJjZA==")),
-        );
-
-        let error =
-            super::decode_wasm_bytes_arg(Some(&Value::Object(payload)), "fs.writeSync bytes", 3)
-                .expect_err("decoded bytes over limit should fail before allocation");
-
-        assert!(matches!(
-            error,
-            WasmExecutionError::OutputBufferExceeded {
-                stream: "fs.writeSync bytes",
-                limit: 3,
-            }
-        ));
-    }
-
-    #[test]
-    fn wasm_runner_bootstrap_caps_wasi_iov_lengths_before_allocation() {
-        let bootstrap = build_wasm_runner_bootstrap(&BTreeMap::new(), None);
-
-        // The read cap now comes from the per-backend host seam, with the native
-        // build-substituted constant as the fallback; assert the constant is
-        // defined and the placeholder was substituted to the value.
-        assert!(bootstrap.contains("const __agentOSWasmSyncReadLimitBytes ="));
-        assert!(bootstrap.contains(&format!(": {WASM_SYNC_READ_LIMIT_BYTES};")));
-        assert!(!bootstrap.contains("__SECURE_EXEC_WASM_SYNC_READ_LIMIT_BYTES__"));
-        assert!(bootstrap.contains("_boundedIovLength(iovs, iovsLen)"));
-        assert!(bootstrap.contains("const totalLength = this._boundedIovLength(iovs, iovsLen);\n      const view = this._memoryView();"));
-        assert!(bootstrap.contains("return Buffer.concat(chunks, totalLength);"));
-        assert!(bootstrap.contains("const totalLength = this._boundedIovLength(iovs, iovsLen);"));
-        assert!(!bootstrap.contains("const totalLength = (() => {"));
-    }
-
-    #[test]
-    fn wasi_preview1_import_manifest_matches_native_runner() {
-        let expected: BTreeSet<String> = serde_json::from_str::<Vec<String>>(include_str!(
-            "../assets/wasi-preview1-imports.json"
-        ))
-        .expect("parse WASI preview1 import manifest")
-        .into_iter()
-        .collect();
-
-        assert_eq!(expected, wasi_imports_from_source(NODE_WASI_MODULE_SOURCE));
-    }
-
-    #[test]
-    fn wasm_guest_module_paths_include_mapped_guest_paths_for_host_specifiers() {
-        let temp = tempdir().expect("create temp dir");
-        let command_root = temp.path().join("commands");
-        let module = command_root.join("hello");
-        fs::create_dir_all(&command_root).expect("create command root");
-        fs::write(&module, b"\0asm\x01\0\0\0").expect("write wasm file");
-
-        let candidates = wasm_guest_module_paths(
-            module.to_string_lossy().as_ref(),
-            &BTreeMap::from([(
-                String::from("AGENTOS_GUEST_PATH_MAPPINGS"),
-                format!(
-                    "[{{\"guestPath\":\"/__secure_exec/commands/0\",\"hostPath\":\"{}\"}}]",
-                    command_root.display()
-                ),
-            )]),
-        );
-
-        assert!(candidates.contains(&module.to_string_lossy().into_owned()));
-        assert!(candidates.contains(&String::from("/__secure_exec/commands/0/hello")));
-    }
-
-    #[test]
-    fn translate_wasm_guest_path_uses_sandbox_root_for_absolute_paths() {
-        let temp = tempdir().expect("create temp dir");
-        let sandbox_root = temp.path().join("shadow-root");
-        let cwd = sandbox_root.join("workspace");
-        fs::create_dir_all(cwd.join("project")).expect("create host cwd");
-
-        let internal_sync_rpc = WasmInternalSyncRpc {
-            module_guest_paths: Vec::new(),
-            module_host_path: sandbox_root.join("module.wasm"),
-            guest_cwd: String::from("/workspace"),
-            host_cwd: cwd.clone(),
-            sandbox_root: Some(sandbox_root.clone()),
-            guest_path_mappings: Vec::new(),
-            route_fs_through_sidecar: false,
-            next_fd: 64,
-            open_files: Default::default(),
-            pending_events: VecDeque::new(),
-        };
-
-        assert_eq!(
-            translate_wasm_guest_path("/tmp/redir.txt", &internal_sync_rpc),
-            Some(sandbox_root.join("tmp/redir.txt"))
-        );
-        assert_eq!(
-            translate_wasm_guest_path("project/output.txt", &internal_sync_rpc),
-            Some(cwd.join("project/output.txt"))
-        );
-    }
-
-    #[test]
-    fn translate_wasm_host_symlink_target_returns_guest_path_for_mapped_targets() {
-        let temp = tempdir().expect("create temp dir");
-        let sandbox_root = temp.path().join("shadow-root");
-        let cwd = sandbox_root.join("workspace");
-        fs::create_dir_all(cwd.join("project")).expect("create host cwd");
-
-        let internal_sync_rpc = WasmInternalSyncRpc {
-            module_guest_paths: Vec::new(),
-            module_host_path: sandbox_root.join("module.wasm"),
-            guest_cwd: String::from("/workspace"),
-            host_cwd: cwd.clone(),
-            sandbox_root: Some(sandbox_root.clone()),
-            guest_path_mappings: vec![super::WasmGuestPathMapping {
-                guest_path: String::from("/"),
-                host_path: sandbox_root.clone(),
-                read_only: false,
-            }],
-            route_fs_through_sidecar: false,
-            next_fd: 64,
-            open_files: Default::default(),
-            pending_events: VecDeque::new(),
-        };
-
-        assert_eq!(
-            translate_wasm_host_symlink_target(
-                &sandbox_root.join("tmp/sc/pdir/r.txt"),
-                &internal_sync_rpc
-            ),
-            Some(String::from("/tmp/sc/pdir/r.txt"))
-        );
-        assert_eq!(
-            translate_wasm_host_symlink_target(Path::new("relative-target"), &internal_sync_rpc),
-            None
-        );
-    }
-
-    #[test]
-    fn translate_wasm_guest_path_recovers_root_collapsed_relative_paths_from_guest_cwd() {
-        let temp = tempdir().expect("create temp dir");
-        let sandbox_root = temp.path().join("shadow-root");
-        let cwd = temp.path().join("mounted-workspace");
-        fs::create_dir_all(&sandbox_root).expect("create sandbox root");
-        fs::create_dir_all(&cwd).expect("create mounted workspace");
-        fs::write(cwd.join("note.txt"), b"hello").expect("write mounted file");
-
-        let internal_sync_rpc = WasmInternalSyncRpc {
-            module_guest_paths: Vec::new(),
-            module_host_path: sandbox_root.join("module.wasm"),
-            guest_cwd: String::from("/workspace"),
-            host_cwd: cwd.clone(),
-            sandbox_root: Some(sandbox_root.clone()),
-            guest_path_mappings: vec![super::WasmGuestPathMapping {
-                guest_path: String::from("/workspace"),
-                host_path: cwd.clone(),
-                read_only: false,
-            }],
-            route_fs_through_sidecar: false,
-            next_fd: 64,
-            open_files: Default::default(),
-            pending_events: VecDeque::new(),
-        };
-
-        assert_eq!(
-            translate_wasm_guest_path("/note.txt", &internal_sync_rpc),
-            Some(cwd.join("note.txt"))
-        );
-    }
-
-    #[test]
-    fn translate_wasm_guest_path_accepts_host_absolute_paths_within_known_roots() {
-        let temp = tempdir().expect("create temp dir");
-        let sandbox_root = temp.path().join("shadow-root");
-        let cwd = temp.path().join("mounted-workspace");
-        let mapped_root = temp.path().join("mounted-commands");
-        fs::create_dir_all(&sandbox_root).expect("create sandbox root");
-        fs::create_dir_all(cwd.join("subdir")).expect("create cwd");
-        fs::create_dir_all(&mapped_root).expect("create mapped root");
-
-        let internal_sync_rpc = WasmInternalSyncRpc {
-            module_guest_paths: vec![String::from("/workspace/guest.wasm")],
-            module_host_path: cwd.join("guest.wasm"),
-            guest_cwd: String::from("/workspace"),
-            host_cwd: cwd.clone(),
-            sandbox_root: Some(sandbox_root.clone()),
-            guest_path_mappings: vec![
-                super::WasmGuestPathMapping {
-                    guest_path: String::from("/workspace"),
-                    host_path: cwd.clone(),
-                    read_only: false,
-                },
-                super::WasmGuestPathMapping {
-                    guest_path: String::from("/__secure_exec/commands/0"),
-                    host_path: mapped_root.clone(),
-                    read_only: false,
-                },
-            ],
-            route_fs_through_sidecar: false,
-            next_fd: 64,
-            open_files: Default::default(),
-            pending_events: VecDeque::new(),
-        };
-
-        assert_eq!(
-            translate_wasm_guest_path(cwd.to_string_lossy().as_ref(), &internal_sync_rpc),
-            Some(cwd.clone())
-        );
-        assert_eq!(
-            translate_wasm_guest_path(
-                cwd.join("subdir/output.txt").to_string_lossy().as_ref(),
-                &internal_sync_rpc
-            ),
-            Some(cwd.join("subdir/output.txt"))
-        );
-        assert_eq!(
-            translate_wasm_guest_path(
-                mapped_root.join("tool.wasm").to_string_lossy().as_ref(),
-                &internal_sync_rpc
-            ),
-            Some(mapped_root.join("tool.wasm"))
-        );
-        assert_eq!(
-            translate_wasm_guest_path(
-                sandbox_root
-                    .join("tmp/runtime.sock")
-                    .to_string_lossy()
-                    .as_ref(),
-                &internal_sync_rpc
-            ),
-            Some(sandbox_root.join("tmp/runtime.sock"))
-        );
-    }
-
-    #[test]
-    fn translate_wasm_guest_path_rejects_symlink_escape_from_sandbox_root() {
-        let temp = tempdir().expect("create temp dir");
-        let sandbox_root = temp.path().join("shadow-root");
-        let outside = temp.path().join("outside");
-        fs::create_dir_all(&sandbox_root).expect("create sandbox root");
-        fs::create_dir_all(&outside).expect("create outside root");
-        fs::write(outside.join("secret.txt"), b"host secret").expect("write outside file");
-        symlink(&outside, sandbox_root.join("escape")).expect("create escape symlink");
-
-        let internal_sync_rpc = WasmInternalSyncRpc {
-            module_guest_paths: Vec::new(),
-            module_host_path: sandbox_root.join("module.wasm"),
-            guest_cwd: String::from("/"),
-            host_cwd: sandbox_root.clone(),
-            sandbox_root: Some(sandbox_root.clone()),
-            guest_path_mappings: vec![super::WasmGuestPathMapping {
-                guest_path: String::from("/"),
-                host_path: sandbox_root,
-                read_only: false,
-            }],
-            route_fs_through_sidecar: false,
-            next_fd: 64,
-            open_files: Default::default(),
-            pending_events: VecDeque::new(),
-        };
-
-        assert_eq!(
-            translate_wasm_guest_path("/escape/secret.txt", &internal_sync_rpc),
-            None
-        );
-        assert_eq!(
-            translate_wasm_guest_path("/escape/new.txt", &internal_sync_rpc),
-            None
-        );
-    }
-
-    #[test]
-    fn wasm_read_only_mapping_blocks_mutating_host_paths() {
-        let temp = tempdir().expect("create temp dir");
-        let sandbox_root = temp.path().join("shadow-root");
-        let readonly_root = temp.path().join("readonly");
-        fs::create_dir_all(&sandbox_root).expect("create sandbox root");
-        fs::create_dir_all(&readonly_root).expect("create readonly root");
-        fs::write(readonly_root.join("package.json"), b"{}").expect("write readonly file");
-
-        let internal_sync_rpc = WasmInternalSyncRpc {
-            module_guest_paths: Vec::new(),
-            module_host_path: sandbox_root.join("module.wasm"),
-            guest_cwd: String::from("/workspace"),
-            host_cwd: sandbox_root.clone(),
-            sandbox_root: Some(sandbox_root),
-            guest_path_mappings: vec![super::WasmGuestPathMapping {
-                guest_path: String::from("/node_modules"),
-                host_path: readonly_root.clone(),
-                read_only: true,
-            }],
-            route_fs_through_sidecar: false,
-            next_fd: 64,
-            open_files: Default::default(),
-            pending_events: VecDeque::new(),
-        };
-
-        let host_path = translate_wasm_guest_path("/node_modules/package.json", &internal_sync_rpc)
-            .expect("read path should resolve");
-        assert_eq!(host_path, readonly_root.join("package.json"));
-        assert!(wasm_host_path_is_read_only(&host_path, &internal_sync_rpc));
-        assert!(wasm_host_path_is_read_only(
-            &readonly_root.join("new-package.json"),
-            &internal_sync_rpc
-        ));
-        assert_eq!(
-            wasm_sync_rpc_error_code(&wasm_read_only_filesystem_error("/node_modules")),
-            "EROFS"
-        );
-    }
-
-    #[test]
-    fn wasm_open_guest_file_errors_remain_sync_rpc_errors() {
-        let temp = tempdir().expect("create temp dir");
-        let missing_path = temp.path().join("missing.txt");
-
-        let error = open_wasm_guest_file(&missing_path, &Value::from(0))
-            .expect_err("missing file should return an open error");
-
-        assert_eq!(wasm_sync_rpc_error_code(&error), "ENOENT");
-    }
-
-    #[test]
-    fn wasm_hard_links_are_rejected_when_either_side_is_read_only() {
-        let temp = tempdir().expect("create temp dir");
-        let readonly_root = temp.path().join("readonly");
-        let writable_root = temp.path().join("writable");
-        fs::create_dir_all(&readonly_root).expect("create readonly root");
-        fs::create_dir_all(&writable_root).expect("create writable root");
-        let readonly_file = readonly_root.join("package.json");
-        let writable_file = writable_root.join("source.txt");
-        fs::write(&readonly_file, b"readonly").expect("write readonly source");
-        fs::write(&writable_file, b"writable").expect("write writable source");
-
-        let internal_sync_rpc = WasmInternalSyncRpc {
-            module_guest_paths: Vec::new(),
-            module_host_path: writable_root.join("module.wasm"),
-            guest_cwd: String::from("/workspace"),
-            host_cwd: writable_root.clone(),
-            sandbox_root: Some(writable_root.clone()),
-            guest_path_mappings: vec![
-                super::WasmGuestPathMapping {
-                    guest_path: String::from("/node_modules"),
-                    host_path: readonly_root.clone(),
-                    read_only: true,
-                },
-                super::WasmGuestPathMapping {
-                    guest_path: String::from("/workspace"),
-                    host_path: writable_root.clone(),
-                    read_only: false,
-                },
-            ],
-            route_fs_through_sidecar: false,
-            next_fd: 64,
-            open_files: Default::default(),
-            pending_events: VecDeque::new(),
-        };
-
-        assert!(wasm_mutation_touches_read_only_mapping(
-            &readonly_file,
-            &writable_root.join("alias-from-readonly.json"),
-            &internal_sync_rpc
-        ));
-        assert!(wasm_mutation_touches_read_only_mapping(
-            &writable_file,
-            &readonly_root.join("alias-into-readonly.txt"),
-            &internal_sync_rpc
-        ));
-        assert!(!wasm_mutation_touches_read_only_mapping(
-            &writable_file,
-            &writable_root.join("alias.txt"),
-            &internal_sync_rpc
-        ));
-
-        let raw_alias = writable_root.join("raw-alias.json");
-        fs::hard_link(&readonly_file, &raw_alias).expect("host hard link would otherwise succeed");
-        fs::write(&raw_alias, b"mutated").expect("write through host hard link alias");
-        assert_eq!(
-            fs::read(&readonly_file).expect("read readonly source"),
-            b"mutated"
-        );
-    }
-
-    #[test]
-    fn translate_wasm_guest_path_preserves_real_root_paths_before_guest_cwd_fallback() {
-        let temp = tempdir().expect("create temp dir");
-        let sandbox_root = temp.path().join("shadow-root");
-        let cwd = temp.path().join("mounted-workspace");
-        fs::create_dir_all(&sandbox_root).expect("create sandbox root");
-        fs::create_dir_all(&cwd).expect("create mounted workspace");
-        fs::write(sandbox_root.join("note.txt"), b"root").expect("write root file");
-        fs::write(cwd.join("note.txt"), b"cwd").expect("write cwd file");
-
-        let internal_sync_rpc = WasmInternalSyncRpc {
-            module_guest_paths: Vec::new(),
-            module_host_path: sandbox_root.join("module.wasm"),
-            guest_cwd: String::from("/workspace"),
-            host_cwd: cwd.clone(),
-            sandbox_root: Some(sandbox_root.clone()),
-            guest_path_mappings: vec![super::WasmGuestPathMapping {
-                guest_path: String::from("/workspace"),
-                host_path: cwd,
-                read_only: false,
-            }],
-            route_fs_through_sidecar: false,
-            next_fd: 64,
-            open_files: Default::default(),
-            pending_events: VecDeque::new(),
-        };
-
-        assert_eq!(
-            translate_wasm_guest_path("/note.txt", &internal_sync_rpc),
-            Some(sandbox_root.join("note.txt"))
-        );
-    }
-
-    #[test]
-    fn wasm_sandbox_root_reads_absolute_env_only() {
-        let sandbox_root = wasm_sandbox_root(&BTreeMap::from([(
-            String::from(WASM_SANDBOX_ROOT_ENV),
-            String::from("/tmp/secure-exec-shadow"),
-        )]));
-        assert_eq!(sandbox_root, Some(PathBuf::from("/tmp/secure-exec-shadow")));
-
-        let relative = wasm_sandbox_root(&BTreeMap::from([(
-            String::from(WASM_SANDBOX_ROOT_ENV),
-            String::from("relative/shadow"),
-        )]));
-        assert_eq!(relative, None);
-    }
-
-    #[test]
-    fn wasm_sidecar_managed_fs_methods_route_to_kernel_sync_rpc() {
-        let mut standalone = WasmInternalSyncRpc {
-            module_guest_paths: Vec::new(),
-            module_host_path: PathBuf::from("/tmp/module.wasm"),
-            guest_cwd: String::from("/"),
-            host_cwd: PathBuf::from("/tmp"),
-            sandbox_root: None,
-            guest_path_mappings: Vec::new(),
-            route_fs_through_sidecar: false,
-            next_fd: 64,
-            open_files: Default::default(),
-            pending_events: VecDeque::new(),
-        };
-        let sidecar_managed = WasmInternalSyncRpc {
-            module_guest_paths: Vec::new(),
-            module_host_path: PathBuf::from("/tmp/module.wasm"),
-            guest_cwd: String::from("/"),
-            host_cwd: PathBuf::from("/tmp"),
-            sandbox_root: Some(PathBuf::from("/tmp/secure-exec-shadow")),
-            guest_path_mappings: Vec::new(),
-            route_fs_through_sidecar: true,
-            next_fd: 64,
-            open_files: Default::default(),
-            pending_events: VecDeque::new(),
-        };
-
-        for method in WASM_SIDECAR_ROUTED_FS_SYNC_METHODS {
-            let request = wasm_sync_rpc_request(method);
-            assert!(
-                wasm_sync_rpc_method_routes_through_sidecar_kernel(&request, &sidecar_managed),
-                "{method} should route through the sidecar kernel for managed WASI executions"
-            );
-            assert!(
-                !wasm_sync_rpc_method_routes_through_sidecar_kernel(&request, &standalone),
-                "{method} should stay host-direct for standalone/prewarm WASI execution"
-            );
-        }
-
-        standalone.route_fs_through_sidecar = true;
-        let non_fs_request = wasm_sync_rpc_request("child_process.spawn");
-        assert!(!wasm_sync_rpc_method_routes_through_sidecar_kernel(
-            &non_fs_request,
-            &standalone
-        ));
-    }
-
-    #[test]
-    fn wasm_guest_path_mappings_mount_root_to_sandbox_root() {
-        let temp = tempdir().expect("create temp dir");
-        let sandbox_root = temp.path().join("shadow-root");
-        let host_cwd = sandbox_root.join("workspace");
-        fs::create_dir_all(&host_cwd).expect("create host cwd");
-
-        let mappings = super::wasm_guest_path_mappings(&request_with_env(
-            &host_cwd,
-            BTreeMap::from([
-                (String::from("PWD"), String::from("/workspace")),
-                (
-                    String::from(WASM_SANDBOX_ROOT_ENV),
-                    sandbox_root.to_string_lossy().into_owned(),
-                ),
-            ]),
-        ));
-
-        assert!(mappings
-            .iter()
-            .any(|mapping| { mapping.guest_path == "/" && mapping.host_path == sandbox_root }));
-        assert!(mappings.iter().any(|mapping| {
-            mapping.guest_path == "/workspace" && mapping.host_path == host_cwd
-        }));
-    }
-
-    #[test]
-    fn wasm_runner_bootstrap_keeps_root_preopens_rooted() {
-        let bootstrap = build_wasm_runner_bootstrap(&BTreeMap::new(), None);
-
-        assert!(bootstrap.contains("if (guestPath === \".\") {"));
-        assert!(!bootstrap.contains("if (guestPath === \".\" || guestPath === \"/\") {"));
-    }
-
-    #[test]
-    fn wasm_runner_bootstrap_reports_dot_preopen_to_wasi() {
-        let bootstrap = build_wasm_runner_bootstrap(&BTreeMap::new(), None);
-
-        // The dot preopen must resolve through the guest cwd, never surface as a
-        // literal "." (restructured into _currentGuestCwd/_descriptorPreopenName
-        // by the wasi-shim stat-path rework).
-        assert!(bootstrap.contains("_currentGuestCwd()"));
-        assert!(!bootstrap.contains("preopens['.'] = createPreopen(HOST_CWD, cwdReadOnly);"));
-        assert!(bootstrap.contains("_descriptorPreopenName(entry)"));
-        assert!(bootstrap.contains(
-            "if (guestPath === \".\") {\n        return this._descriptorGuestPath(entry);"
-        ));
-        assert!(bootstrap.contains("const guestPath = this._descriptorPreopenName(entry);"));
-    }
-
-    #[test]
-    fn wasm_runner_path_open_uses_guest_mapping_for_absolute_paths() {
-        let bootstrap = build_wasm_runner_bootstrap(&BTreeMap::new(), None);
-
-        assert!(bootstrap
-            .contains("const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen, {"));
-        assert!(
-            !bootstrap.contains("const hostPath = __agentOSPath().resolve(baseHostPath, target);")
-        );
-    }
-
-    #[test]
-    fn wasm_runner_root_preopen_relative_paths_preserve_cwd_fallback() {
-        let bootstrap = build_wasm_runner_bootstrap(&BTreeMap::new(), None);
-
-        assert!(bootstrap
-            .contains("const rootGuestPath = __agentOSPath().posix.resolve(\"/\", target);"));
-        assert!(bootstrap.contains(
-            "const cwdGuestTarget = __agentOSPath().posix.resolve(cwdGuestPath, target);"
-        ));
-        assert!(bootstrap.contains("_rootRelativeTargetPrefersCwd(target)"));
-        assert!(bootstrap.contains("_rootRelativeTargetMatchesAbsoluteArg(target)"));
-        assert!(bootstrap.contains("__agentOSPath().posix.normalize(arg) === rootGuestPath"));
-        assert!(bootstrap.contains("_createParentExists(guestPath, hostPath)"));
-        assert!(bootstrap.contains(
-            "preferCreateParent &&\n              !this._rootRelativeTargetIsWithinAbsoluteArg(target)"
-        ));
-        assert!(bootstrap.contains("this._createParentExists(cwdGuestTarget, cwdHostTarget)"));
-    }
-
-    #[test]
-    fn wasm_runner_readdir_uses_guest_preopen_path_in_sidecar() {
-        let bootstrap = build_wasm_runner_bootstrap(&BTreeMap::new(), None);
-
-        assert!(bootstrap.contains("const fsPath = this._descriptorDirectoryFsPath(entry);"));
-        assert!(
-            bootstrap.contains("(entry?.kind === \"preopen\" || entry?.kind === \"directory\")")
-        );
-    }
-
-    #[test]
-    fn wasm_runner_blocks_read_only_fd_write_paths() {
-        let bootstrap = build_wasm_runner_bootstrap(&BTreeMap::new(), None);
-
-        assert!(bootstrap.contains("readOnly: entry.readOnly === true,"));
-        assert!(bootstrap.contains(
-            "if (handle.readOnly === true) {\n            return __agentOSWasiErrnoRofs;\n          }"
-        ));
-        assert!(bootstrap.contains(
-            "if (entry.readOnly === true) {\n          return __agentOSWasiErrnoRofs;\n        }\n        const written = __agentOSFs().writeSync("
-        ));
-    }
-
-    #[test]
-    fn wasm_memory_limit_pages_floor_to_whole_wasm_pages() {
-        assert_eq!(
-            wasm_memory_limit_pages(WASM_PAGE_BYTES + 123).expect("page limit"),
-            1
-        );
-        assert_eq!(
-            wasm_memory_limit_pages(2 * WASM_PAGE_BYTES).expect("page limit"),
-            2
-        );
-    }
-
-    #[test]
-    fn wasm_memory_limit_no_longer_requires_declared_module_maximum() {
-        let temp = tempdir().expect("create temp dir");
-        let request = request_with_env(
-            temp.path(),
-            BTreeMap::from([(
-                String::from(WASM_MAX_MEMORY_BYTES_ENV),
-                (2 * WASM_PAGE_BYTES).to_string(),
-            )]),
-        );
-
-        assert!(
-            super::validate_module_limits(
-                &super::ResolvedWasmModule {
-                    specifier: String::from("./guest.wasm"),
-                    resolved_path: {
-                        let path = temp.path().join("guest.wasm");
-                        fs::write(
-                            &path,
-                            wat::parse_str(
-                                r#"
-(module
-  (memory (export "memory") 1)
-  (func (export "_start"))
-)
-"#,
-                            )
-                            .expect("compile wasm fixture"),
-                        )
-                        .expect("write wasm fixture");
-                        path
-                    },
-                },
-                &request,
-            )
-            .is_ok(),
-            "runtime memory cap should allow modules without a declared maximum"
-        );
-    }
-}
diff --git a/crates/execution/tests/benchmark.rs b/crates/execution/tests/benchmark.rs
deleted file mode 100644
index e1ba11344..000000000
--- a/crates/execution/tests/benchmark.rs
+++ /dev/null
@@ -1,1134 +0,0 @@
-use secure_exec_execution::benchmark::{
-    BenchmarkDistributionStats, BenchmarkHost, BenchmarkResourceUsage, BenchmarkScenarioPhases,
-    BenchmarkScenarioReport, BenchmarkStats, BenchmarkTransportRttReport,
-    JavascriptBenchmarkConfig, JavascriptBenchmarkReport,
-};
-use serde_json::Value;
-use std::fs;
-use std::path::PathBuf;
-use tempfile::tempdir;
-
-fn stats(
-    mean_ms: f64,
-    p50_ms: f64,
-    p95_ms: f64,
-    min_ms: f64,
-    max_ms: f64,
-    stddev_ms: f64,
-) -> BenchmarkStats {
-    BenchmarkStats {
-        mean_ms,
-        p50_ms,
-        p95_ms,
-        min_ms,
-        max_ms,
-        stddev_ms,
-    }
-}
-
-fn phase_samples(
-    context_setup_ms: Vec<f64>,
-    startup_ms: Vec<f64>,
-    guest_execution_ms: Option<Vec<f64>>,
-    completion_ms: Vec<f64>,
-) -> BenchmarkScenarioPhases<Vec<f64>> {
-    BenchmarkScenarioPhases {
-        context_setup_ms,
-        startup_ms,
-        guest_execution_ms,
-        completion_ms,
-    }
-}
-
-fn phase_stats(
-    context_setup_ms: BenchmarkStats,
-    startup_ms: BenchmarkStats,
-    guest_execution_ms: Option<BenchmarkStats>,
-    completion_ms: BenchmarkStats,
-) -> BenchmarkScenarioPhases<BenchmarkStats> {
-    BenchmarkScenarioPhases {
-        context_setup_ms,
-        startup_ms,
-        guest_execution_ms,
-        completion_ms,
-    }
-}
-
-fn transport_rtt(
-    payload_bytes: usize,
-    samples_ms: Vec<f64>,
-    stats: BenchmarkStats,
-) -> BenchmarkTransportRttReport {
-    BenchmarkTransportRttReport {
-        channel: "execution-stdio-echo",
-        payload_bytes,
-        samples_ms,
-        stats,
-    }
-}
-
-fn distribution_stats(
-    mean: f64,
-    p50: f64,
-    p95: f64,
-    min: f64,
-    max: f64,
-    stddev: f64,
-) -> BenchmarkDistributionStats {
-    BenchmarkDistributionStats {
-        mean,
-        p50,
-        p95,
-        min,
-        max,
-        stddev,
-    }
-}
-
-fn resource_samples(
-    rss_bytes: Option<Vec<f64>>,
-    heap_used_bytes: Option<Vec<f64>>,
-    cpu_total_us: Option<Vec<f64>>,
-) -> BenchmarkResourceUsage<Vec<f64>> {
-    BenchmarkResourceUsage {
-        rss_bytes,
-        heap_used_bytes,
-        cpu_user_us: None,
-        cpu_system_us: None,
-        cpu_total_us,
-    }
-}
-
-fn resource_stats(
-    rss_bytes: Option<BenchmarkDistributionStats>,
-    heap_used_bytes: Option<BenchmarkDistributionStats>,
-    cpu_total_us: Option<BenchmarkDistributionStats>,
-) -> BenchmarkResourceUsage<BenchmarkDistributionStats> {
-    BenchmarkResourceUsage {
-        rss_bytes,
-        heap_used_bytes,
-        cpu_user_us: None,
-        cpu_system_us: None,
-        cpu_total_us,
-    }
-}
-
-/*
-Deleted in US-040 because this harness asserted the old startup-path benchmark
-marker behavior instead of the current V8 runtime contract.
-fn javascript_benchmark_harness_covers_required_startup_and_import_scenarios() {
-    let report = run_javascript_benchmarks(&JavascriptBenchmarkConfig {
-        iterations: 1,
-        warmup_iterations: 0,
-    })
-    .expect("run execution benchmark harness");
-
-    let scenario_ids = report
-        .scenarios
-        .iter()
-        .map(|scenario| scenario.id)
-        .collect::<Vec<_>>();
-    assert_eq!(
-        scenario_ids,
-        vec![
-            "isolate-startup",
-            "prewarmed-isolate-startup",
-            "cold-local-import",
-            "warm-local-import",
-            "same-context-local-import",
-            "prewarmed-local-import",
-            "host-local-import",
-            "builtin-import",
-            "hot-builtin-stream-import",
-            "hot-builtin-stream-web-import",
-            "hot-builtin-crypto-import",
-            "hot-builtin-zlib-import",
-            "hot-builtin-assert-import",
-            "hot-builtin-url-import",
-            "hot-projected-package-file-import",
-            "large-package-import",
-            "projected-package-import",
-            "pdf-lib-startup",
-            "jszip-startup",
-            "jszip-end-to-end",
-            "jszip-repeated-session-compressed",
-        ]
-    );
-
-    for scenario in &report.scenarios {
-        assert_eq!(scenario.wall_samples_ms.len(), 1);
-        assert!(scenario.wall_stats.mean_ms >= 0.0);
-    }
-
-    let warm = report
-        .scenarios
-        .iter()
-        .find(|scenario| scenario.id == "warm-local-import")
-        .expect("warm-local-import scenario");
-    assert_eq!(warm.compile_cache, "primed");
-    assert_eq!(
-        warm.guest_import_samples_ms
-            .as_ref()
-            .expect("warm import samples")
-            .len(),
-        1
-    );
-    assert_eq!(
-        warm.startup_overhead_samples_ms
-            .as_ref()
-            .expect("warm startup samples")
-            .len(),
-        1
-    );
-    assert_eq!(warm.workload, "local-import");
-    assert_eq!(warm.runtime, "native-execution");
-    assert_eq!(warm.mode, "new-session-replay");
-
-    let same_context = report
-        .scenarios
-        .iter()
-        .find(|scenario| scenario.id == "same-context-local-import")
-        .expect("same-context-local-import scenario");
-    assert_eq!(same_context.compile_cache, "primed");
-    assert_eq!(same_context.workload, "local-import");
-    assert_eq!(same_context.runtime, "native-execution");
-    assert_eq!(same_context.mode, "same-session-replay");
-    assert_eq!(same_context.wall_samples_ms.len(), 1);
-
-    let prewarmed = report
-        .scenarios
-        .iter()
-        .find(|scenario| scenario.id == "prewarmed-local-import")
-        .expect("prewarmed-local-import scenario");
-    assert_eq!(prewarmed.compile_cache, "primed");
-    assert_eq!(
-        prewarmed
-            .guest_import_samples_ms
-            .as_ref()
-            .expect("prewarmed import samples")
-            .len(),
-        1
-    );
-    assert_eq!(
-        prewarmed
-            .startup_overhead_samples_ms
-            .as_ref()
-            .expect("prewarmed startup samples")
-            .len(),
-        1
-    );
-    assert_eq!(prewarmed.mode, "same-engine-replay");
-
-    let host = report
-        .scenarios
-        .iter()
-        .find(|scenario| scenario.id == "host-local-import")
-        .expect("host-local-import scenario");
-    assert_eq!(host.workload, "local-import");
-    assert_eq!(host.runtime, "host-node");
-    assert_eq!(host.mode, "host-control");
-    assert_eq!(
-        host.guest_import_samples_ms
-            .as_ref()
-            .expect("host import samples")
-            .len(),
-        1
-    );
-
-    let prewarmed_isolate = report
-        .scenarios
-        .iter()
-        .find(|scenario| scenario.id == "prewarmed-isolate-startup")
-        .expect("prewarmed-isolate-startup scenario");
-    assert_eq!(prewarmed_isolate.workload, "startup-floor");
-    assert_eq!(prewarmed_isolate.mode, "same-engine-replay");
-    assert_eq!(prewarmed_isolate.compile_cache, "primed");
-    assert!(prewarmed_isolate.guest_import_samples_ms.is_none());
-
-    let hot_builtin = report
-        .scenarios
-        .iter()
-        .find(|scenario| scenario.id == "hot-builtin-crypto-import")
-        .expect("hot-builtin-crypto-import scenario");
-    assert_eq!(hot_builtin.workload, "builtin-hot-import");
-    assert_eq!(hot_builtin.mode, "same-engine-replay");
-    assert_eq!(hot_builtin.compile_cache, "primed");
-    assert_eq!(
-        hot_builtin
-            .guest_import_samples_ms
-            .as_ref()
-            .expect("hot builtin import samples")
-            .len(),
-        1
-    );
-
-    let hot_projected = report
-        .scenarios
-        .iter()
-        .find(|scenario| scenario.id == "hot-projected-package-file-import")
-        .expect("hot-projected-package-file-import scenario");
-    assert_eq!(hot_projected.workload, "projected-package-hot-import");
-    assert_eq!(hot_projected.mode, "same-engine-replay");
-    assert_eq!(hot_projected.compile_cache, "primed");
-    assert_eq!(
-        hot_projected
-            .guest_import_samples_ms
-            .as_ref()
-            .expect("hot projected import samples")
-            .len(),
-        1
-    );
-
-    let rendered = report.render_markdown();
-    assert!(rendered.contains("ARC-021C"));
-    assert!(rendered.contains("ARC-021D"));
-    assert!(rendered.contains("ARC-022"));
-    assert!(rendered.contains("current import-cache materialization and builtin/polyfill prewarm"));
-    assert!(rendered.contains("typescript"));
-    assert!(rendered.contains("projected TypeScript guest-path import"));
-    assert!(rendered.contains("projected-package-import"));
-    assert!(rendered.contains("pdf-lib document creation"));
-    assert!(rendered.contains("jszip archive staging"));
-    assert!(rendered.contains("jszip end-to-end archive roundtrip"));
-    assert!(rendered.contains("jszip compressed archive roundtrip"));
-    assert!(rendered.contains("prewarmed-isolate-startup"));
-    assert!(rendered.contains("prewarmed-local-import"));
-    assert!(rendered.contains("same-context-local-import"));
-    assert!(rendered.contains("host-local-import"));
-    assert!(rendered.contains("node:path + node:url + node:fs/promises"));
-    assert!(rendered.contains("node:stream/web"));
-    assert!(rendered.contains("node:crypto"));
-    assert!(rendered.contains("projected TypeScript compiler file"));
-    assert!(rendered.contains("hot-projected-package-file-import"));
-    assert!(rendered.contains("## Transport RTT"));
-    assert!(rendered.contains("## Control Matrix"));
-    assert!(rendered.contains("## Ranked Hotspots"));
-    assert!(rendered.contains("### Wall Time (`time`, `ms`)"));
-    assert!(rendered.contains("### Startup Share Of Wall (`share`, `pct`)"));
-    assert!(rendered.contains("Mean context (ms)"));
-    assert!(rendered.contains("same-session-replay"));
-    assert!(rendered.contains("host-control"));
-
-    let json = report.render_json().expect("render benchmark json");
-    let parsed: Value = serde_json::from_str(&json).expect("parse benchmark json");
-    assert_eq!(parsed["artifact_version"], 5);
-    assert_eq!(parsed["summary"]["scenario_count"], 21);
-    assert_eq!(parsed["summary"]["recorded_samples_per_scenario"], 1);
-    assert_eq!(
-        parsed["transport_rtt"]
-            .as_array()
-            .expect("transport rtt array")
-            .len(),
-        3
-    );
-    let scenarios = parsed["scenarios"]
-        .as_array()
-        .expect("json scenarios array");
-    assert_eq!(scenarios.len(), 21);
-    assert!(
-        parsed["summary"]["slowest_wall_scenario"]["id"].is_string(),
-        "expected a summarized slowest wall scenario: {json}"
-    );
-    let startup_floor_matrix = parsed["summary"]["control_matrix"]
-        .as_array()
-        .expect("control matrix array")
-        .iter()
-        .find(|row| row["workload"] == "startup-floor")
-        .expect("startup-floor control matrix row");
-    assert_eq!(
-        startup_floor_matrix["modes"].as_array().map(Vec::len),
-        Some(2)
-    );
-    let local_import_matrix = parsed["summary"]["control_matrix"]
-        .as_array()
-        .expect("control matrix array")
-        .iter()
-        .find(|row| row["workload"] == "local-import")
-        .expect("local-import control matrix row");
-    assert_eq!(
-        local_import_matrix["modes"].as_array().map(Vec::len),
-        Some(5)
-    );
-    assert_eq!(
-        local_import_matrix["runtimes"].as_array().map(Vec::len),
-        Some(2)
-    );
-    let builtin_hot_matrix = parsed["summary"]["control_matrix"]
-        .as_array()
-        .expect("control matrix array")
-        .iter()
-        .find(|row| row["workload"] == "builtin-hot-import")
-        .expect("builtin-hot-import control matrix row");
-    assert_eq!(
-        builtin_hot_matrix["scenario_ids"].as_array().map(Vec::len),
-        Some(6)
-    );
-    let hotspot_rankings = parsed["summary"]["hotspot_rankings"]
-        .as_array()
-        .expect("hotspot rankings array");
-    assert_eq!(hotspot_rankings.len(), 13);
-    assert_eq!(hotspot_rankings[0]["metric"], "wall_mean_ms");
-    assert_eq!(hotspot_rankings[1]["metric"], "wall_stddev_ms");
-    assert_eq!(hotspot_rankings[1]["dimension"], "stability");
-    assert_eq!(hotspot_rankings[0]["unit"], "ms");
-    assert!(scenarios
-        .iter()
-        .all(|scenario| scenario["wall_stats"]["stddev_ms"].is_number()));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["id"] == "prewarmed-isolate-startup"
-            && scenario["workload"] == "startup-floor"
-            && scenario["mode"] == "same-engine-replay"
-            && scenario["compile_cache"] == "primed"
-            && scenario["guest_import_stats"].is_null()
-    }));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["id"] == "same-context-local-import"
-            && scenario["workload"] == "local-import"
-            && scenario["runtime"] == "native-execution"
-            && scenario["mode"] == "same-session-replay"
-            && scenario["compile_cache"] == "primed"
-    }));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["id"] == "host-local-import"
-            && scenario["workload"] == "local-import"
-            && scenario["runtime"] == "host-node"
-            && scenario["mode"] == "host-control"
-            && scenario["guest_import_stats"]["mean_ms"].is_number()
-    }));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["id"] == "hot-builtin-stream-web-import"
-            && scenario["fixture"] == "node:stream/web"
-            && scenario["compile_cache"] == "primed"
-            && scenario["guest_import_stats"]["mean_ms"].is_number()
-    }));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["id"] == "hot-builtin-crypto-import"
-            && scenario["fixture"] == "node:crypto"
-            && scenario["compile_cache"] == "primed"
-            && scenario["guest_import_stats"]["mean_ms"].is_number()
-    }));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["id"] == "hot-projected-package-file-import"
-            && scenario["fixture"] == "projected TypeScript compiler file"
-            && scenario["compile_cache"] == "primed"
-            && scenario["guest_import_stats"]["mean_ms"].is_number()
-    }));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["id"] == "pdf-lib-startup"
-            && scenario["fixture"] == "pdf-lib document creation"
-            && scenario["guest_import_stats"]["mean_ms"].is_number()
-    }));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["id"] == "large-package-import"
-            && scenario["fixture"] == "typescript"
-            && scenario["compile_cache"] == "disabled"
-            && scenario["guest_import_stats"]["mean_ms"].is_number()
-    }));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["id"] == "jszip-startup"
-            && scenario["fixture"] == "jszip archive staging"
-            && scenario["guest_import_stats"]["mean_ms"].is_number()
-    }));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["id"] == "jszip-end-to-end"
-            && scenario["fixture"] == "jszip end-to-end archive roundtrip"
-            && scenario["compile_cache"] == "disabled"
-            && scenario["guest_import_stats"]["mean_ms"].is_number()
-    }));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["id"] == "jszip-repeated-session-compressed"
-            && scenario["fixture"] == "jszip compressed archive roundtrip"
-            && scenario["compile_cache"] == "primed"
-            && scenario["guest_import_stats"]["mean_ms"].is_number()
-    }));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["id"] == "prewarmed-local-import"
-            && scenario["fixture"] == "24-module local ESM graph"
-            && scenario["compile_cache"] == "primed"
-            && scenario["guest_import_stats"]["mean_ms"].is_number()
-    }));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["id"] == "projected-package-import"
-            && scenario["fixture"] == "projected TypeScript guest-path import"
-            && scenario["compile_cache"] == "primed"
-            && scenario["guest_import_stats"]["mean_ms"].is_number()
-    }));
-    assert!(scenarios.iter().any(|scenario| {
-        scenario["guest_import_samples_ms"].is_array()
-            && scenario["startup_overhead_samples_ms"].is_array()
-            && scenario["mean_startup_share_pct"].is_number()
-            && scenario["phase_stats"]["startup_ms"]["mean_ms"].is_number()
-            && scenario["phase_samples_ms"]["completion_ms"].is_array()
-            && scenario["resource_usage_stats"]["rss_bytes"]["mean"].is_number()
-            && scenario["resource_usage_stats"]["cpu_total_us"]["mean"].is_number()
-            && scenario["resource_usage_samples"]["heap_used_bytes"].is_array()
-    }));
-}
-*/
-
-#[test]
-fn javascript_benchmark_json_artifact_stays_stable_for_summary_and_samples() {
-    let report = JavascriptBenchmarkReport {
-        generated_at_unix_ms: 42,
-        config: JavascriptBenchmarkConfig {
-            iterations: 2,
-            warmup_iterations: 1,
-        },
-        host: BenchmarkHost {
-            node_binary: String::from("node"),
-            node_version: String::from("v22.0.0"),
-            os: "linux",
-            arch: "x86_64",
-            logical_cpus: 8,
-        },
-        repo_root: PathBuf::from("/repo"),
-        transport_rtt: vec![
-            transport_rtt(32, vec![0.4, 0.6], stats(0.5, 0.4, 0.6, 0.4, 0.6, 0.1)),
-            transport_rtt(4096, vec![0.9, 1.1], stats(1.0, 0.9, 1.1, 0.9, 1.1, 0.1)),
-            transport_rtt(65536, vec![2.6, 3.0], stats(2.8, 2.6, 3.0, 2.6, 3.0, 0.2)),
-        ],
-        scenarios: vec![
-            BenchmarkScenarioReport {
-                id: "fast-scenario",
-                workload: "fixture-a",
-                runtime: "native-execution",
-                mode: "true-cold-start",
-                description: "Faster benchmark path",
-                fixture: "fixture-a",
-                compile_cache: "disabled",
-                wall_samples_ms: vec![10.0, 14.0],
-                wall_stats: stats(12.0, 10.0, 14.0, 10.0, 14.0, 2.0),
-                guest_import_samples_ms: Some(vec![4.0, 6.0]),
-                guest_import_stats: Some(stats(5.0, 4.0, 6.0, 4.0, 6.0, 1.0)),
-                startup_overhead_samples_ms: Some(vec![6.0, 8.0]),
-                startup_overhead_stats: Some(stats(7.0, 6.0, 8.0, 6.0, 8.0, 1.0)),
-                phase_samples_ms: phase_samples(
-                    vec![1.0, 2.0],
-                    vec![2.0, 3.0],
-                    Some(vec![4.0, 6.0]),
-                    vec![3.0, 3.0],
-                ),
-                phase_stats: phase_stats(
-                    stats(1.5, 1.0, 2.0, 1.0, 2.0, 0.5),
-                    stats(2.5, 2.0, 3.0, 2.0, 3.0, 0.5),
-                    Some(stats(5.0, 4.0, 6.0, 4.0, 6.0, 1.0)),
-                    stats(3.0, 3.0, 3.0, 3.0, 3.0, 0.0),
-                ),
-                resource_usage_samples: Some(resource_samples(
-                    Some(vec![32.0 * 1024.0 * 1024.0, 36.0 * 1024.0 * 1024.0]),
-                    Some(vec![8.0 * 1024.0 * 1024.0, 10.0 * 1024.0 * 1024.0]),
-                    Some(vec![4000.0, 6000.0]),
-                )),
-                resource_usage_stats: Some(resource_stats(
-                    Some(distribution_stats(
-                        34.0 * 1024.0 * 1024.0,
-                        32.0 * 1024.0 * 1024.0,
-                        36.0 * 1024.0 * 1024.0,
-                        32.0 * 1024.0 * 1024.0,
-                        36.0 * 1024.0 * 1024.0,
-                        2.0 * 1024.0 * 1024.0,
-                    )),
-                    Some(distribution_stats(
-                        9.0 * 1024.0 * 1024.0,
-                        8.0 * 1024.0 * 1024.0,
-                        10.0 * 1024.0 * 1024.0,
-                        8.0 * 1024.0 * 1024.0,
-                        10.0 * 1024.0 * 1024.0,
-                        1.0 * 1024.0 * 1024.0,
-                    )),
-                    Some(distribution_stats(
-                        5000.0, 4000.0, 6000.0, 4000.0, 6000.0, 1000.0,
-                    )),
-                )),
-            },
-            BenchmarkScenarioReport {
-                id: "slow-scenario",
-                workload: "fixture-b",
-                runtime: "host-node",
-                mode: "host-control",
-                description: "Slower benchmark path",
-                fixture: "fixture-b",
-                compile_cache: "primed",
-                wall_samples_ms: vec![30.0, 34.0],
-                wall_stats: stats(32.0, 30.0, 34.0, 30.0, 34.0, 2.0),
-                guest_import_samples_ms: Some(vec![12.0, 14.0]),
-                guest_import_stats: Some(stats(13.0, 12.0, 14.0, 12.0, 14.0, 1.0)),
-                startup_overhead_samples_ms: Some(vec![18.0, 20.0]),
-                startup_overhead_stats: Some(stats(19.0, 18.0, 20.0, 18.0, 20.0, 1.0)),
-                phase_samples_ms: phase_samples(
-                    vec![4.0, 4.0],
-                    vec![5.0, 6.0],
-                    Some(vec![12.0, 14.0]),
-                    vec![9.0, 10.0],
-                ),
-                phase_stats: phase_stats(
-                    stats(4.0, 4.0, 4.0, 4.0, 4.0, 0.0),
-                    stats(5.5, 5.0, 6.0, 5.0, 6.0, 0.5),
-                    Some(stats(13.0, 12.0, 14.0, 12.0, 14.0, 1.0)),
-                    stats(9.5, 9.0, 10.0, 9.0, 10.0, 0.5),
-                ),
-                resource_usage_samples: Some(resource_samples(
-                    Some(vec![64.0 * 1024.0 * 1024.0, 72.0 * 1024.0 * 1024.0]),
-                    Some(vec![14.0 * 1024.0 * 1024.0, 18.0 * 1024.0 * 1024.0]),
-                    Some(vec![9000.0, 11000.0]),
-                )),
-                resource_usage_stats: Some(resource_stats(
-                    Some(distribution_stats(
-                        68.0 * 1024.0 * 1024.0,
-                        64.0 * 1024.0 * 1024.0,
-                        72.0 * 1024.0 * 1024.0,
-                        64.0 * 1024.0 * 1024.0,
-                        72.0 * 1024.0 * 1024.0,
-                        4.0 * 1024.0 * 1024.0,
-                    )),
-                    Some(distribution_stats(
-                        16.0 * 1024.0 * 1024.0,
-                        14.0 * 1024.0 * 1024.0,
-                        18.0 * 1024.0 * 1024.0,
-                        14.0 * 1024.0 * 1024.0,
-                        18.0 * 1024.0 * 1024.0,
-                        2.0 * 1024.0 * 1024.0,
-                    )),
-                    Some(distribution_stats(
-                        10000.0, 9000.0, 11000.0, 9000.0, 11000.0, 1000.0,
-                    )),
-                )),
-            },
-        ],
-    };
-
-    let json = report.render_json().expect("render json");
-    let parsed: Value = serde_json::from_str(&json).expect("parse json");
-
-    assert_eq!(parsed["artifact_version"], 5);
-    assert_eq!(parsed["generated_at_unix_ms"], 42);
-    assert_eq!(
-        parsed["command"].as_str(),
-        Some(
-            "cargo run -p secure-exec-execution --bin node-import-bench -- --iterations 2 --warmup-iterations 1"
-        )
-    );
-    assert_eq!(parsed["summary"]["scenario_count"], 2);
-    assert_eq!(parsed["summary"]["recorded_samples_per_scenario"], 2);
-    assert_eq!(
-        parsed["summary"]["control_matrix"][0]["workload"].as_str(),
-        Some("fixture-a")
-    );
-    assert_eq!(
-        parsed["summary"]["control_matrix"][1]["runtimes"][0].as_str(),
-        Some("host-node")
-    );
-    assert_eq!(
-        parsed["transport_rtt"][2]["payload_bytes"].as_u64(),
-        Some(65536)
-    );
-    assert_eq!(parsed["transport_rtt"][2]["stats"]["mean_ms"], 2.8);
-    assert_eq!(
-        parsed["summary"]["slowest_wall_scenario"]["id"].as_str(),
-        Some("slow-scenario")
-    );
-    assert_eq!(
-        parsed["summary"]["slowest_guest_import_scenario"]["id"].as_str(),
-        Some("slow-scenario")
-    );
-    assert_eq!(
-        parsed["summary"]["highest_startup_share_scenario"]["id"].as_str(),
-        Some("slow-scenario")
-    );
-    let hotspot_rankings = parsed["summary"]["hotspot_rankings"]
-        .as_array()
-        .expect("hotspot rankings array");
-    assert_eq!(hotspot_rankings.len(), 13);
-    assert_eq!(hotspot_rankings[0]["metric"], "wall_mean_ms");
-    assert_eq!(hotspot_rankings[0]["label"], "Wall Time");
-    assert_eq!(
-        hotspot_rankings[0]["ranked_scenarios"][0]["id"].as_str(),
-        Some("slow-scenario")
-    );
-    assert_eq!(hotspot_rankings[0]["ranked_scenarios"][0]["rank"], 1);
-    assert_eq!(hotspot_rankings[3]["metric"], "guest_import_mean_ms");
-    assert_eq!(
-        hotspot_rankings[3]["ranked_scenarios"][0]["value"].as_f64(),
-        Some(13.0)
-    );
-    assert_eq!(hotspot_rankings[9]["metric"], "startup_share_pct");
-    assert_eq!(hotspot_rankings[9]["unit"], "pct");
-    assert_eq!(hotspot_rankings[10]["metric"], "rss_mean_mib");
-    assert_eq!(hotspot_rankings[12]["metric"], "cpu_total_mean_ms");
-
-    let scenarios = parsed["scenarios"].as_array().expect("scenario array");
-    assert_eq!(scenarios.len(), 2);
-    assert_eq!(scenarios[0]["workload"], "fixture-a");
-    assert_eq!(scenarios[0]["runtime"], "native-execution");
-    assert_eq!(scenarios[0]["mode"], "true-cold-start");
-    assert_eq!(scenarios[0]["wall_stats"]["stddev_ms"], 2.0);
-    assert_eq!(scenarios[0]["mean_startup_share_pct"], 58.333333333333336);
-    assert_eq!(
-        scenarios[0]["resource_usage_stats"]["rss_bytes"]["mean"],
-        35651584.0
-    );
-    assert_eq!(
-        scenarios[0]["resource_usage_stats"]["cpu_total_us"]["mean"],
-        5000.0
-    );
-    assert_eq!(
-        scenarios[0]["phase_stats"]["context_setup_ms"]["mean_ms"],
-        1.5
-    );
-    assert_eq!(scenarios[0]["phase_stats"]["completion_ms"]["mean_ms"], 3.0);
-    assert_eq!(scenarios[1]["mean_startup_share_pct"], 59.375);
-    assert_eq!(scenarios[1]["phase_stats"]["startup_ms"]["mean_ms"], 5.5);
-    assert_eq!(
-        scenarios[1]["resource_usage_stats"]["heap_used_bytes"]["mean"],
-        16777216.0
-    );
-}
-
-#[test]
-fn javascript_benchmark_hotspot_rankings_handle_missing_metrics() {
-    let report = JavascriptBenchmarkReport {
-        generated_at_unix_ms: 42,
-        config: JavascriptBenchmarkConfig {
-            iterations: 2,
-            warmup_iterations: 1,
-        },
-        host: BenchmarkHost {
-            node_binary: String::from("node"),
-            node_version: String::from("v22.0.0"),
-            os: "linux",
-            arch: "x86_64",
-            logical_cpus: 8,
-        },
-        repo_root: PathBuf::from("/repo"),
-        transport_rtt: vec![],
-        scenarios: vec![
-            BenchmarkScenarioReport {
-                id: "alpha",
-                workload: "fixture-a",
-                runtime: "native-execution",
-                mode: "true-cold-start",
-                description: "Alpha path",
-                fixture: "fixture-a",
-                compile_cache: "disabled",
-                wall_samples_ms: vec![15.0, 17.0],
-                wall_stats: stats(16.0, 15.0, 17.0, 15.0, 17.0, 1.0),
-                guest_import_samples_ms: Some(vec![7.0, 9.0]),
-                guest_import_stats: Some(stats(8.0, 7.0, 9.0, 7.0, 9.0, 1.0)),
-                startup_overhead_samples_ms: Some(vec![8.0, 8.0]),
-                startup_overhead_stats: Some(stats(8.0, 8.0, 8.0, 8.0, 8.0, 0.0)),
-                phase_samples_ms: phase_samples(
-                    vec![2.0, 2.0],
-                    vec![3.0, 3.0],
-                    Some(vec![7.0, 9.0]),
-                    vec![3.0, 3.0],
-                ),
-                phase_stats: phase_stats(
-                    stats(2.0, 2.0, 2.0, 2.0, 2.0, 0.0),
-                    stats(3.0, 3.0, 3.0, 3.0, 3.0, 0.0),
-                    Some(stats(8.0, 7.0, 9.0, 7.0, 9.0, 1.0)),
-                    stats(3.0, 3.0, 3.0, 3.0, 3.0, 0.0),
-                ),
-                resource_usage_samples: Some(resource_samples(
-                    Some(vec![40.0 * 1024.0 * 1024.0, 44.0 * 1024.0 * 1024.0]),
-                    None,
-                    Some(vec![6000.0, 8000.0]),
-                )),
-                resource_usage_stats: Some(resource_stats(
-                    Some(distribution_stats(
-                        42.0 * 1024.0 * 1024.0,
-                        40.0 * 1024.0 * 1024.0,
-                        44.0 * 1024.0 * 1024.0,
-                        40.0 * 1024.0 * 1024.0,
-                        44.0 * 1024.0 * 1024.0,
-                        2.0 * 1024.0 * 1024.0,
-                    )),
-                    None,
-                    Some(distribution_stats(
-                        7000.0, 6000.0, 8000.0, 6000.0, 8000.0, 1000.0,
-                    )),
-                )),
-            },
-            BenchmarkScenarioReport {
-                id: "beta",
-                workload: "fixture-b",
-                runtime: "host-node",
-                mode: "host-control",
-                description: "Beta path",
-                fixture: "fixture-b",
-                compile_cache: "primed",
-                wall_samples_ms: vec![20.0, 24.0],
-                wall_stats: stats(22.0, 20.0, 24.0, 20.0, 24.0, 2.0),
-                guest_import_samples_ms: Some(vec![10.0, 12.0]),
-                guest_import_stats: Some(stats(11.0, 10.0, 12.0, 10.0, 12.0, 1.0)),
-                startup_overhead_samples_ms: Some(vec![9.0, 11.0]),
-                startup_overhead_stats: Some(stats(10.0, 9.0, 11.0, 9.0, 11.0, 1.0)),
-                phase_samples_ms: phase_samples(
-                    vec![3.0, 3.0],
-                    vec![4.0, 4.0],
-                    Some(vec![10.0, 12.0]),
-                    vec![5.0, 5.0],
-                ),
-                phase_stats: phase_stats(
-                    stats(3.0, 3.0, 3.0, 3.0, 3.0, 0.0),
-                    stats(4.0, 4.0, 4.0, 4.0, 4.0, 0.0),
-                    Some(stats(11.0, 10.0, 12.0, 10.0, 12.0, 1.0)),
-                    stats(5.0, 5.0, 5.0, 5.0, 5.0, 0.0),
-                ),
-                resource_usage_samples: Some(resource_samples(
-                    Some(vec![60.0 * 1024.0 * 1024.0, 68.0 * 1024.0 * 1024.0]),
-                    Some(vec![12.0 * 1024.0 * 1024.0, 14.0 * 1024.0 * 1024.0]),
-                    Some(vec![9000.0, 12000.0]),
-                )),
-                resource_usage_stats: Some(resource_stats(
-                    Some(distribution_stats(
-                        64.0 * 1024.0 * 1024.0,
-                        60.0 * 1024.0 * 1024.0,
-                        68.0 * 1024.0 * 1024.0,
-                        60.0 * 1024.0 * 1024.0,
-                        68.0 * 1024.0 * 1024.0,
-                        4.0 * 1024.0 * 1024.0,
-                    )),
-                    Some(distribution_stats(
-                        13.0 * 1024.0 * 1024.0,
-                        12.0 * 1024.0 * 1024.0,
-                        14.0 * 1024.0 * 1024.0,
-                        12.0 * 1024.0 * 1024.0,
-                        14.0 * 1024.0 * 1024.0,
-                        1.0 * 1024.0 * 1024.0,
-                    )),
-                    Some(distribution_stats(
-                        10500.0, 9000.0, 12000.0, 9000.0, 12000.0, 1500.0,
-                    )),
-                )),
-            },
-            BenchmarkScenarioReport {
-                id: "gamma",
-                workload: "fixture-c",
-                runtime: "native-execution",
-                mode: "baseline-control",
-                description: "Gamma path",
-                fixture: "fixture-c",
-                compile_cache: "disabled",
-                wall_samples_ms: vec![12.0, 14.0],
-                wall_stats: stats(13.0, 12.0, 14.0, 12.0, 14.0, 1.0),
-                guest_import_samples_ms: None,
-                guest_import_stats: None,
-                startup_overhead_samples_ms: None,
-                startup_overhead_stats: None,
-                phase_samples_ms: phase_samples(
-                    vec![1.0, 1.0],
-                    vec![2.0, 2.0],
-                    None,
-                    vec![4.0, 4.0],
-                ),
-                phase_stats: phase_stats(
-                    stats(1.0, 1.0, 1.0, 1.0, 1.0, 0.0),
-                    stats(2.0, 2.0, 2.0, 2.0, 2.0, 0.0),
-                    None,
-                    stats(4.0, 4.0, 4.0, 4.0, 4.0, 0.0),
-                ),
-                resource_usage_samples: Some(resource_samples(
-                    Some(vec![24.0 * 1024.0 * 1024.0, 28.0 * 1024.0 * 1024.0]),
-                    None,
-                    None,
-                )),
-                resource_usage_stats: Some(resource_stats(
-                    Some(distribution_stats(
-                        26.0 * 1024.0 * 1024.0,
-                        24.0 * 1024.0 * 1024.0,
-                        28.0 * 1024.0 * 1024.0,
-                        24.0 * 1024.0 * 1024.0,
-                        28.0 * 1024.0 * 1024.0,
-                        2.0 * 1024.0 * 1024.0,
-                    )),
-                    None,
-                    None,
-                )),
-            },
-        ],
-    };
-
-    let json = report.render_json().expect("render json");
-    let parsed: Value = serde_json::from_str(&json).expect("parse json");
-    let hotspot_rankings = parsed["summary"]["hotspot_rankings"]
-        .as_array()
-        .expect("hotspot rankings array");
-    let wall_ranking = hotspot_rankings
-        .iter()
-        .find(|ranking| ranking["metric"] == "wall_mean_ms")
-        .expect("wall ranking");
-    assert_eq!(wall_ranking["ranked_scenarios"][0]["id"], "beta");
-    assert_eq!(wall_ranking["ranked_scenarios"][1]["id"], "alpha");
-    assert_eq!(wall_ranking["ranked_scenarios"][2]["id"], "gamma");
-
-    let guest_execution_ranking = hotspot_rankings
-        .iter()
-        .find(|ranking| ranking["metric"] == "guest_execution_mean_ms")
-        .expect("guest execution ranking");
-    assert_eq!(guest_execution_ranking["ranked_scenarios"][0]["id"], "beta");
-    assert_eq!(
-        guest_execution_ranking["ranked_scenarios"][1]["id"],
-        "alpha"
-    );
-    assert_eq!(
-        guest_execution_ranking["scenarios_without_metric"][0].as_str(),
-        Some("gamma")
-    );
-    let rss_ranking = hotspot_rankings
-        .iter()
-        .find(|ranking| ranking["metric"] == "rss_mean_mib")
-        .expect("rss ranking");
-    assert_eq!(rss_ranking["ranked_scenarios"][0]["id"], "beta");
-    let cpu_ranking = hotspot_rankings
-        .iter()
-        .find(|ranking| ranking["metric"] == "cpu_total_mean_ms")
-        .expect("cpu ranking");
-    assert_eq!(cpu_ranking["scenarios_without_metric"][0], "gamma");
-
-    let markdown = report.render_markdown();
-    assert!(markdown.contains("## Ranked Hotspots"));
-    assert!(markdown.contains("## Stability And Resource Summary"));
-    assert!(markdown.contains("### Guest Execution Phase (`time`, `ms`)"));
-    assert!(markdown.contains("### RSS (`memory`, `MiB`)"));
-    assert!(markdown.contains("Missing metric for: `gamma`"));
-}
-
-#[test]
-fn javascript_benchmark_comparison_artifact_stays_stable_for_deltas() {
-    let report = JavascriptBenchmarkReport {
-        generated_at_unix_ms: 42,
-        config: JavascriptBenchmarkConfig {
-            iterations: 2,
-            warmup_iterations: 1,
-        },
-        host: BenchmarkHost {
-            node_binary: String::from("node"),
-            node_version: String::from("v22.0.0"),
-            os: "linux",
-            arch: "x86_64",
-            logical_cpus: 8,
-        },
-        repo_root: PathBuf::from("/repo"),
-        transport_rtt: vec![
-            transport_rtt(32, vec![0.4, 0.6], stats(0.5, 0.4, 0.6, 0.4, 0.6, 0.1)),
-            transport_rtt(4096, vec![0.9, 1.1], stats(1.0, 0.9, 1.1, 0.9, 1.1, 0.1)),
-            transport_rtt(65536, vec![2.6, 3.0], stats(2.8, 2.6, 3.0, 2.6, 3.0, 0.2)),
-        ],
-        scenarios: vec![
-            BenchmarkScenarioReport {
-                id: "fast-scenario",
-                workload: "fixture-a",
-                runtime: "native-execution",
-                mode: "true-cold-start",
-                description: "Faster benchmark path",
-                fixture: "fixture-a",
-                compile_cache: "disabled",
-                wall_samples_ms: vec![10.0, 14.0],
-                wall_stats: stats(12.0, 10.0, 14.0, 10.0, 14.0, 2.0),
-                guest_import_samples_ms: Some(vec![4.0, 6.0]),
-                guest_import_stats: Some(stats(5.0, 4.0, 6.0, 4.0, 6.0, 1.0)),
-                startup_overhead_samples_ms: Some(vec![6.0, 8.0]),
-                startup_overhead_stats: Some(stats(7.0, 6.0, 8.0, 6.0, 8.0, 1.0)),
-                phase_samples_ms: phase_samples(
-                    vec![1.0, 2.0],
-                    vec![2.0, 3.0],
-                    Some(vec![4.0, 6.0]),
-                    vec![3.0, 3.0],
-                ),
-                phase_stats: phase_stats(
-                    stats(1.5, 1.0, 2.0, 1.0, 2.0, 0.5),
-                    stats(2.5, 2.0, 3.0, 2.0, 3.0, 0.5),
-                    Some(stats(5.0, 4.0, 6.0, 4.0, 6.0, 1.0)),
-                    stats(3.0, 3.0, 3.0, 3.0, 3.0, 0.0),
-                ),
-                resource_usage_samples: None,
-                resource_usage_stats: None,
-            },
-            BenchmarkScenarioReport {
-                id: "slow-scenario",
-                workload: "fixture-b",
-                runtime: "native-execution",
-                mode: "new-session-replay",
-                description: "Slower benchmark path",
-                fixture: "fixture-b",
-                compile_cache: "primed",
-                wall_samples_ms: vec![30.0, 34.0],
-                wall_stats: stats(32.0, 30.0, 34.0, 30.0, 34.0, 2.0),
-                guest_import_samples_ms: Some(vec![12.0, 14.0]),
-                guest_import_stats: Some(stats(13.0, 12.0, 14.0, 12.0, 14.0, 1.0)),
-                startup_overhead_samples_ms: Some(vec![18.0, 20.0]),
-                startup_overhead_stats: Some(stats(19.0, 18.0, 20.0, 18.0, 20.0, 1.0)),
-                phase_samples_ms: phase_samples(
-                    vec![4.0, 4.0],
-                    vec![5.0, 6.0],
-                    Some(vec![12.0, 14.0]),
-                    vec![9.0, 10.0],
-                ),
-                phase_stats: phase_stats(
-                    stats(4.0, 4.0, 4.0, 4.0, 4.0, 0.0),
-                    stats(5.5, 5.0, 6.0, 5.0, 6.0, 0.5),
-                    Some(stats(13.0, 12.0, 14.0, 12.0, 14.0, 1.0)),
-                    stats(9.5, 9.0, 10.0, 9.0, 10.0, 0.5),
-                ),
-                resource_usage_samples: None,
-                resource_usage_stats: None,
-            },
-            BenchmarkScenarioReport {
-                id: "current-only",
-                workload: "fixture-c",
-                runtime: "host-node",
-                mode: "host-control",
-                description: "Current-only scenario",
-                fixture: "fixture-c",
-                compile_cache: "disabled",
-                wall_samples_ms: vec![8.0, 10.0],
-                wall_stats: stats(9.0, 8.0, 10.0, 8.0, 10.0, 1.0),
-                guest_import_samples_ms: None,
-                guest_import_stats: None,
-                startup_overhead_samples_ms: None,
-                startup_overhead_stats: None,
-                phase_samples_ms: phase_samples(
-                    vec![1.0, 1.0],
-                    vec![2.0, 3.0],
-                    None,
-                    vec![5.0, 6.0],
-                ),
-                phase_stats: phase_stats(
-                    stats(1.0, 1.0, 1.0, 1.0, 1.0, 0.0),
-                    stats(2.5, 2.0, 3.0, 2.0, 3.0, 0.5),
-                    None,
-                    stats(5.5, 5.0, 6.0, 5.0, 6.0, 0.5),
-                ),
-                resource_usage_samples: None,
-                resource_usage_stats: None,
-            },
-        ],
-    };
-
-    let tempdir = tempdir().expect("create tempdir");
-    let baseline_path = tempdir.path().join("baseline.json");
-    fs::write(
-        &baseline_path,
-        r#"{
-  "artifact_version": 1,
-  "generated_at_unix_ms": 24,
-  "scenarios": [
-    {
-      "id": "fast-scenario",
-      "wall_stats": {
-        "mean_ms": 15.0,
-        "p50_ms": 15.0,
-        "p95_ms": 15.0,
-        "min_ms": 15.0,
-        "max_ms": 15.0,
-        "stddev_ms": 0.0
-      },
-      "guest_import_stats": {
-        "mean_ms": 6.0,
-        "p50_ms": 6.0,
-        "p95_ms": 6.0,
-        "min_ms": 6.0,
-        "max_ms": 6.0,
-        "stddev_ms": 0.0
-      },
-      "startup_overhead_stats": {
-        "mean_ms": 9.0,
-        "p50_ms": 9.0,
-        "p95_ms": 9.0,
-        "min_ms": 9.0,
-        "max_ms": 9.0,
-        "stddev_ms": 0.0
-      }
-    },
-    {
-      "id": "slow-scenario",
-      "wall_stats": {
-        "mean_ms": 28.0,
-        "p50_ms": 28.0,
-        "p95_ms": 28.0,
-        "min_ms": 28.0,
-        "max_ms": 28.0,
-        "stddev_ms": 0.0
-      },
-      "guest_import_stats": {
-        "mean_ms": 11.0,
-        "p50_ms": 11.0,
-        "p95_ms": 11.0,
-        "min_ms": 11.0,
-        "max_ms": 11.0,
-        "stddev_ms": 0.0
-      },
-      "startup_overhead_stats": {
-        "mean_ms": 17.0,
-        "p50_ms": 17.0,
-        "p95_ms": 17.0,
-        "min_ms": 17.0,
-        "max_ms": 17.0,
-        "stddev_ms": 0.0
-      }
-    },
-    {
-      "id": "baseline-only",
-      "wall_stats": {
-        "mean_ms": 5.0,
-        "p50_ms": 5.0,
-        "p95_ms": 5.0,
-        "min_ms": 5.0,
-        "max_ms": 5.0,
-        "stddev_ms": 0.0
-      }
-    }
-  ]
-}"#,
-    )
-    .expect("write baseline report");
-
-    let comparison = report
-        .compare_to_baseline_path(&baseline_path)
-        .expect("load comparison");
-    let json = report
-        .render_json_with_comparison(Some(&comparison))
-        .expect("render comparison json");
-    let parsed: Value = serde_json::from_str(&json).expect("parse comparison json");
-
-    assert_eq!(
-        parsed["comparison"]["summary"]["compared_scenario_count"],
-        2
-    );
-    assert_eq!(
-        parsed["comparison"]["summary"]["largest_wall_improvement"]["id"].as_str(),
-        Some("fast-scenario")
-    );
-    assert_eq!(
-        parsed["comparison"]["summary"]["largest_wall_regression"]["id"].as_str(),
-        Some("slow-scenario")
-    );
-    assert_eq!(
-        parsed["comparison"]["scenario_deltas"][0]["wall_mean_ms"]["delta_ms"],
-        -3.0
-    );
-    assert_eq!(
-        parsed["comparison"]["scenario_deltas"][1]["wall_mean_ms"]["delta_ms"],
-        4.0
-    );
-    assert!(
-        parsed["comparison"]["scenario_deltas"][0]["phase_mean_ms"].is_null(),
-        "phase deltas should stay absent when the baseline artifact has no phase data"
-    );
-    assert_eq!(
-        parsed["comparison"]["scenarios_missing_from_baseline"][0].as_str(),
-        Some("current-only")
-    );
-    assert_eq!(
-        parsed["comparison"]["baseline_only_scenarios"][0].as_str(),
-        Some("baseline-only")
-    );
-
-    let markdown = report.render_markdown_with_comparison(Some(&comparison));
-    assert!(markdown.contains("## Baseline Comparison"));
-    assert!(markdown.contains("Context delta (ms)"));
-    assert!(markdown.contains("Largest wall-time improvement: `fast-scenario`"));
-    assert!(markdown.contains("Largest wall-time regression: `slow-scenario`"));
-    assert!(markdown.contains("Scenarios missing from baseline: current-only"));
-    assert!(markdown.contains("Baseline-only scenarios: baseline-only"));
-}
diff --git a/crates/execution/tests/bridge.rs b/crates/execution/tests/bridge.rs
deleted file mode 100644
index 4aa52868f..000000000
--- a/crates/execution/tests/bridge.rs
+++ /dev/null
@@ -1,90 +0,0 @@
-#[path = "../../bridge/tests/support.rs"]
-mod bridge_support;
-
-use bridge_support::RecordingBridge;
-use secure_exec_bridge::{
-    BridgeTypes, CreateJavascriptContextRequest, CreateWasmContextRequest, ExecutionEvent,
-    ExecutionHandleRequest, ExecutionSignal, GuestKernelCall, GuestRuntime, KillExecutionRequest,
-    PollExecutionEventRequest, StartExecutionRequest, WriteExecutionStdinRequest,
-};
-use secure_exec_execution::NativeExecutionBridge;
-use std::collections::BTreeMap;
-use std::fmt::Debug;
-
-fn assert_native_execution_bridge<B>(bridge: &mut B)
-where
-    B: NativeExecutionBridge,
-    <B as BridgeTypes>::Error: Debug,
-{
-    let js = bridge
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-1"),
-            bootstrap_module: None,
-        })
-        .expect("create js context");
-    let wasm = bridge
-        .create_wasm_context(CreateWasmContextRequest {
-            vm_id: String::from("vm-1"),
-            module_path: Some(String::from("/workspace/module.wasm")),
-        })
-        .expect("create wasm context");
-
-    assert_eq!(js.runtime, GuestRuntime::JavaScript);
-    assert_eq!(wasm.runtime, GuestRuntime::WebAssembly);
-
-    let execution = bridge
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-1"),
-            context_id: js.context_id,
-            argv: vec![String::from("index.js")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect("start execution");
-
-    bridge
-        .write_stdin(WriteExecutionStdinRequest {
-            vm_id: String::from("vm-1"),
-            execution_id: execution.execution_id.clone(),
-            chunk: b"stdin".to_vec(),
-        })
-        .expect("write stdin");
-    bridge
-        .close_stdin(ExecutionHandleRequest {
-            vm_id: String::from("vm-1"),
-            execution_id: execution.execution_id.clone(),
-        })
-        .expect("close stdin");
-    bridge
-        .kill_execution(KillExecutionRequest {
-            vm_id: String::from("vm-1"),
-            execution_id: execution.execution_id,
-            signal: ExecutionSignal::Interrupt,
-        })
-        .expect("kill execution");
-
-    match bridge
-        .poll_execution_event(PollExecutionEventRequest {
-            vm_id: String::from("vm-1"),
-        })
-        .expect("poll event")
-    {
-        Some(ExecutionEvent::GuestRequest(event)) => {
-            assert_eq!(event.operation, "stdio.flush");
-        }
-        other => panic!("unexpected execution event: {other:?}"),
-    }
-}
-
-#[test]
-fn execution_crate_compiles_against_method_oriented_execution_bridge() {
-    let mut bridge = RecordingBridge::default();
-    bridge.push_execution_event(ExecutionEvent::GuestRequest(GuestKernelCall {
-        vm_id: String::from("vm-1"),
-        execution_id: String::from("exec-queued"),
-        operation: String::from("stdio.flush"),
-        payload: Vec::new(),
-    }));
-
-    assert_native_execution_bridge(&mut bridge);
-}
diff --git a/crates/execution/tests/cjs_esm_interop.rs b/crates/execution/tests/cjs_esm_interop.rs
deleted file mode 100644
index 13e51e7e6..000000000
--- a/crates/execution/tests/cjs_esm_interop.rs
+++ /dev/null
@@ -1,1314 +0,0 @@
-use secure_exec_execution::{
-    javascript::ModuleResolutionTestHarness, CreateJavascriptContextRequest,
-    JavascriptExecutionEngine, JavascriptExecutionResult, StartJavascriptExecutionRequest,
-};
-use serde_json::{json, Value};
-use std::collections::BTreeMap;
-use std::fs;
-use std::path::{Path, PathBuf};
-use tempfile::TempDir;
-
-struct Fixture {
-    temp: TempDir,
-}
-
-impl Fixture {
-    fn new() -> Self {
-        Self {
-            temp: TempDir::new().expect("create temp dir"),
-        }
-    }
-
-    fn root(&self) -> &Path {
-        self.temp.path()
-    }
-
-    fn host_path(&self, relative: &str) -> PathBuf {
-        self.root().join(relative)
-    }
-
-    fn write(&self, relative: &str, contents: &str) {
-        let path = self.host_path(relative);
-        if let Some(parent) = path.parent() {
-            fs::create_dir_all(parent).expect("create parent dirs");
-        }
-        fs::write(path, contents).expect("write fixture");
-    }
-
-    fn write_json(&self, relative: &str, value: Value) {
-        self.write(
-            relative,
-            &serde_json::to_string_pretty(&value).expect("serialize JSON"),
-        );
-    }
-
-    fn resolver(&self) -> ModuleResolutionTestHarness {
-        ModuleResolutionTestHarness::new(self.root())
-    }
-}
-
-fn assert_import(fixture: &Fixture, specifier: &str, from_path: &str, expected: &str) {
-    let mut resolver = fixture.resolver();
-    assert_eq!(
-        resolver.resolve_import(specifier, from_path),
-        Some(String::from(expected))
-    );
-}
-
-fn assert_require(fixture: &Fixture, specifier: &str, from_path: &str, expected: &str) {
-    let mut resolver = fixture.resolver();
-    assert_eq!(
-        resolver.resolve_require(specifier, from_path),
-        Some(String::from(expected))
-    );
-}
-
-fn run_guest_result(
-    fixture: &Fixture,
-    entrypoint: &str,
-    env: BTreeMap<String, String>,
-) -> JavascriptExecutionResult {
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from(entrypoint)],
-            env,
-            cwd: fixture.root().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    execution.wait().expect("wait for JavaScript execution")
-}
-
-fn assert_guest_success(result: &JavascriptExecutionResult) {
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(
-        result.exit_code, 0,
-        "guest exited with {}\nstdout:\n{}\nstderr:\n{}",
-        result.exit_code, stdout, stderr
-    );
-    assert!(result.stderr.is_empty(), "unexpected stderr: {}", stderr);
-}
-
-fn run_guest_json(fixture: &Fixture, entrypoint: &str) -> Value {
-    let result = run_guest_result(fixture, entrypoint, BTreeMap::new());
-    assert_guest_success(&result);
-    serde_json::from_slice(&result.stdout).expect("parse guest stdout as JSON")
-}
-
-fn resolution_nested_exports_conditions_recurse_three_levels() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        json!({
-            "exports": {
-                ".": {
-                    "import": {
-                        "node": {
-                            "default": "./dist/node-default.mjs"
-                        },
-                        "default": "./dist/import-default.mjs"
-                    },
-                    "default": "./dist/fallback.mjs"
-                }
-            }
-        }),
-    );
-    fixture.write(
-        "node_modules/pkg/dist/node-default.mjs",
-        "export default 'node';",
-    );
-    fixture.write(
-        "node_modules/pkg/dist/import-default.mjs",
-        "export default 'import-default';",
-    );
-    fixture.write(
-        "node_modules/pkg/dist/fallback.mjs",
-        "export default 'fallback';",
-    );
-
-    assert_import(
-        &fixture,
-        "pkg",
-        "/root/project/index.mjs",
-        "/root/node_modules/pkg/dist/node-default.mjs",
-    );
-}
-
-fn resolution_exports_array_and_condition_nesting_uses_first_valid_target() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        json!({
-            "exports": {
-                ".": [
-                    { "browser": "./dist/browser.mjs" },
-                    {
-                        "import": {
-                            "node": {
-                                "default": "./dist/node.mjs"
-                            }
-                        }
-                    },
-                    "./dist/fallback.mjs"
-                ]
-            }
-        }),
-    );
-    fixture.write("node_modules/pkg/dist/node.mjs", "export default 'node';");
-    fixture.write(
-        "node_modules/pkg/dist/fallback.mjs",
-        "export default 'fallback';",
-    );
-
-    assert_import(
-        &fixture,
-        "pkg",
-        "/root/project/index.mjs",
-        "/root/node_modules/pkg/dist/node.mjs",
-    );
-}
-
-fn resolution_require_prefers_cjs_entry_for_dual_packages() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        json!({
-            "exports": {
-                ".": {
-                    "import": "./dist/index.mjs",
-                    "require": "./dist/index.cjs",
-                    "default": "./dist/index.mjs"
-                }
-            }
-        }),
-    );
-    fixture.write("node_modules/pkg/dist/index.mjs", "export default 'esm';");
-    fixture.write("node_modules/pkg/dist/index.cjs", "module.exports = 'cjs';");
-
-    assert_require(
-        &fixture,
-        "pkg",
-        "/root/project/index.cjs",
-        "/root/node_modules/pkg/dist/index.cjs",
-    );
-}
-
-fn resolution_invalid_utf8_file_url_specifiers_are_rejected() {
-    let fixture = Fixture::new();
-    fixture.write("entry.mjs", "export default 1;");
-    fixture.write("node_modules/file:/%FF.js", "export default 'fallback';");
-
-    let mut resolver = fixture.resolver();
-    assert_eq!(
-        resolver.resolve_import("file:///%FF", "/root/project/index.mjs"),
-        None
-    );
-    assert_eq!(
-        resolver.resolve_import("file:///%Fé", "/root/project/index.mjs"),
-        None
-    );
-}
-
-fn runtime_exports_dot_named_exports_are_available_to_esm_imports() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "dep.cjs",
-        "exports.answer = 42;\nexports.label = 'ok';\nmodule.exports.extra = true;\n",
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import dep, { answer, label, extra } from "./dep.cjs";
-console.log(JSON.stringify({ answer, label, extra, defaultAnswer: dep.answer }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(
-        output,
-        json!({
-            "answer": 42,
-            "label": "ok",
-            "extra": true,
-            "defaultAnswer": 42
-        })
-    );
-}
-
-fn runtime_minified_type_module_js_is_not_misclassified_as_cjs() {
-    let fixture = Fixture::new();
-    fixture.write_json("package.json", json!({ "type": "module" }));
-    fixture.write(
-        "cli.js",
-        r#"import{createRequire as H}from"node:module";const require=H(import.meta.url);console.log(JSON.stringify({argv:process.argv.slice(1),fsType:typeof require("node:fs").readFileSync}))"#,
-    );
-
-    let output = run_guest_json(&fixture, "./cli.js");
-    assert_eq!(
-        output,
-        json!({
-            "argv": ["/root/cli.js"],
-            "fsType": "function"
-        })
-    );
-}
-
-fn runtime_object_define_property_exports_are_available_to_esm_imports() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "dep.cjs",
-        r#"
-Object.defineProperty(exports, "answer", { enumerable: true, value: 42 });
-Object.defineProperty(exports, "label", { enumerable: true, value: "ok" });
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import dep, { answer, label } from "./dep.cjs";
-console.log(JSON.stringify({ answer, label, defaultLabel: dep.label }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(
-        output,
-        json!({
-            "answer": 42,
-            "label": "ok",
-            "defaultLabel": "ok"
-        })
-    );
-}
-
-fn runtime_computed_property_cjs_modules_still_work_via_default_import() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "dep.cjs",
-        r#"
-const key = "dynamic";
-module.exports = { [key]: 7, plain: 1 };
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import dep from "./dep.cjs";
-console.log(JSON.stringify(dep));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(output, json!({ "dynamic": 7, "plain": 1 }));
-}
-
-fn runtime_exports_bracket_assignment_preserves_default_export_shape() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "dep.cjs",
-        r#"
-const name = "alpha";
-exports[name] = 1;
-module.exports.beta = 2;
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import dep, { beta } from "./dep.cjs";
-console.log(JSON.stringify({ alpha: dep.alpha, beta, defaultBeta: dep.beta }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(
-        output,
-        json!({
-            "alpha": 1,
-            "beta": 2,
-            "defaultBeta": 2
-        })
-    );
-}
-
-fn runtime_object_assign_module_exports_exposes_named_esm_imports_via_runtime_fallback() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "dep.cjs",
-        r#"
-Object.assign(module.exports, { answer: 42, label: "ok" });
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import dep, { answer, label } from "./dep.cjs";
-console.log(JSON.stringify({ answer, label, defaultAnswer: dep.answer }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(
-        output,
-        json!({ "answer": 42, "label": "ok", "defaultAnswer": 42 })
-    );
-}
-
-fn runtime_spread_based_module_exports_still_exposes_the_default_export_shape() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "dep.cjs",
-        r#"
-const shared = { alpha: 1 };
-module.exports = { ...shared, beta: 2 };
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import dep from "./dep.cjs";
-console.log(JSON.stringify(dep));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(output, json!({ "alpha": 1, "beta": 2 }));
-}
-
-fn runtime_object_create_descriptor_exports_expose_named_esm_imports_via_runtime_fallback() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "dep.cjs",
-        r#"
-const proto = { inherited: 99 };
-module.exports = Object.create(proto, {
-  x: { value: 1, enumerable: true },
-  hidden: { value: 2, enumerable: false }
-});
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import dep, { x } from "./dep.cjs";
-console.log(JSON.stringify({
-  x,
-  defaultX: dep.x,
-  inherited: dep.inherited,
-  hasHidden: Object.prototype.hasOwnProperty.call(dep, "hidden")
-}));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(
-        output,
-        json!({ "x": 1, "defaultX": 1, "inherited": 99, "hasHidden": true })
-    );
-}
-
-fn runtime_cjs_reexport_preserves_named_esm_imports_via_runtime_fallback() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "other.cjs",
-        r#"
-Object.assign(module.exports, { alpha: 1, beta: 2 });
-"#,
-    );
-    fixture.write(
-        "dep.cjs",
-        r#"
-module.exports = require("./other.cjs");
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import dep, { alpha, beta } from "./dep.cjs";
-console.log(JSON.stringify({ alpha, beta, defaultAlpha: dep.alpha }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(output, json!({ "alpha": 1, "beta": 2, "defaultAlpha": 1 }));
-}
-
-fn runtime_require_of_esm_only_packages_either_loads_or_throws_clearly() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        json!({
-            "type": "module",
-            "exports": "./index.mjs"
-        }),
-    );
-    fixture.write(
-        "node_modules/pkg/index.mjs",
-        "export default { value: 42 };",
-    );
-    fixture.write(
-        "entry.cjs",
-        r#"
-try {
-  const value = require("pkg");
-  console.log(JSON.stringify({
-    mode: "loaded",
-    value: value && value.default ? value.default.value : value.value
-  }));
-} catch (error) {
-  console.log(JSON.stringify({
-    mode: "error",
-    code: error && error.code ? error.code : null,
-    message: String(error && error.message ? error.message : error)
-  }));
-}
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    match output.get("mode").and_then(Value::as_str) {
-        Some("loaded") => {
-            assert_eq!(output.get("value"), Some(&json!(42)));
-        }
-        Some("error") => {
-            let message = output
-                .get("message")
-                .and_then(Value::as_str)
-                .expect("error message");
-            assert!(!message.is_empty(), "expected a non-empty error message");
-        }
-        other => panic!("unexpected require(pkg) mode: {other:?}"),
-    }
-}
-
-fn runtime_require_type_module_js_main_throws_require_esm() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        json!({
-            "type": "module",
-            "main": "./dist/index.js"
-        }),
-    );
-    fixture.write("node_modules/pkg/dist/index.js", "export const value = 42;");
-    fixture.write(
-        "entry.cjs",
-        r#"
-try {
-  require("pkg");
-  console.log(JSON.stringify({ mode: "loaded" }));
-} catch (error) {
-  console.log(JSON.stringify({
-    mode: "error",
-    code: error && error.code ? error.code : null,
-    message: String(error && error.message ? error.message : error)
-  }));
-}
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    assert_eq!(output.get("mode"), Some(&json!("error")));
-    assert_eq!(output.get("code"), Some(&json!("ERR_REQUIRE_ESM")));
-    let message = output
-        .get("message")
-        .and_then(Value::as_str)
-        .expect("error message");
-    assert!(message.contains("require() of ES Module"));
-}
-
-fn runtime_require_fails_closed_when_module_format_bridge_is_missing() {
-    let fixture = Fixture::new();
-    fixture.write("dep.js", "module.exports = { value: 42 };\n");
-    fixture.write(
-        "entry.cjs",
-        r#"
-let bridgeOverride = "not-attempted";
-try {
-  Object.defineProperty(globalThis, "_moduleFormat", {
-    configurable: true,
-    writable: true,
-    value: undefined
-  });
-  bridgeOverride = "defined";
-} catch (error) {
-  bridgeOverride = `define-failed:${error && error.message ? error.message : error}`;
-}
-
-try {
-  require("./dep.js");
-  console.log(JSON.stringify({ mode: "loaded", bridgeOverride }));
-} catch (error) {
-  console.log(JSON.stringify({
-    mode: "error",
-    bridgeOverride,
-    code: error && error.code ? error.code : null,
-    message: String(error && error.message ? error.message : error)
-  }));
-}
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    assert_eq!(output.get("bridgeOverride"), Some(&json!("defined")));
-    assert_eq!(output.get("mode"), Some(&json!("error")));
-    assert_eq!(
-        output.get("code"),
-        Some(&json!("ERR_AGENTOS_MODULE_FORMAT_BRIDGE_MISSING"))
-    );
-    let message = output
-        .get("message")
-        .and_then(Value::as_str)
-        .expect("error message");
-    assert!(
-        message.contains("module format bridge is not registered"),
-        "unexpected missing bridge error message: {message}"
-    );
-}
-
-fn runtime_import_module_condition_js_target_uses_esm_syntax() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        json!({
-            "exports": {
-                ".": {
-                    "module": "./build/esm/index.js",
-                    "default": "./build/src/index.js"
-                }
-            }
-        }),
-    );
-    fixture.write(
-        "node_modules/pkg/build/esm/index.js",
-        "export { answer } from './status';",
-    );
-    fixture.write(
-        "node_modules/pkg/build/esm/status.js",
-        "export const answer = 42;",
-    );
-    fixture.write("node_modules/pkg/build/src/index.js", "exports.answer = 7;");
-    fixture.write(
-        "entry.mjs",
-        r#"
-import { answer } from "pkg";
-console.log(JSON.stringify({ answer }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(output.get("answer"), Some(&json!(42)));
-}
-
-fn runtime_type_module_export_subpaths_keep_js_files_in_esm_mode() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        json!({
-            "type": "module",
-            "exports": {
-                "./runtime": "./dist/runtime.js"
-            }
-        }),
-    );
-    fixture.write(
-        "node_modules/pkg/dist/runtime.js",
-        r#"
-globalThis.__pkgRuntimeUrl = import.meta.url;
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import "pkg/runtime";
-console.log(JSON.stringify({
-  isFileUrl:
-    typeof globalThis.__pkgRuntimeUrl === "string" &&
-    globalThis.__pkgRuntimeUrl.startsWith("file:///root/node_modules/pkg/dist/runtime.js")
-}));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(output, json!({ "isFileUrl": true }));
-}
-
-fn runtime_require_of_dual_packages_uses_the_cjs_entrypoint() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        json!({
-            "exports": {
-                ".": {
-                    "import": "./dist/index.mjs",
-                    "require": "./dist/index.cjs",
-                    "default": "./dist/index.mjs"
-                }
-            }
-        }),
-    );
-    fixture.write(
-        "node_modules/pkg/dist/index.mjs",
-        "export default { kind: 'esm' };",
-    );
-    fixture.write(
-        "node_modules/pkg/dist/index.cjs",
-        "module.exports = { kind: 'cjs' };",
-    );
-    fixture.write(
-        "entry.cjs",
-        r#"console.log(JSON.stringify(require("pkg")));"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    assert_eq!(output, json!({ "kind": "cjs" }));
-}
-
-fn runtime_two_module_circular_require_exposes_partial_exports() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "a.cjs",
-        r#"
-exports.name = "a";
-const b = require("./b.cjs");
-exports.fromB = b.name;
-exports.seesBReady = Boolean(b.ready);
-exports.ready = true;
-"#,
-    );
-    fixture.write(
-        "b.cjs",
-        r#"
-exports.name = "b";
-const a = require("./a.cjs");
-exports.fromA = a.name;
-exports.seesAReady = Boolean(a.ready);
-exports.ready = true;
-"#,
-    );
-    fixture.write(
-        "entry.cjs",
-        r#"
-const a = require("./a.cjs");
-const b = require("./b.cjs");
-console.log(JSON.stringify({ a, b }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    assert_eq!(
-        output,
-        json!({
-            "a": {
-                "name": "a",
-                "fromB": "b",
-                "seesBReady": true,
-                "ready": true
-            },
-            "b": {
-                "name": "b",
-                "fromA": "a",
-                "seesAReady": false,
-                "ready": true
-            }
-        })
-    );
-}
-
-fn runtime_three_module_circular_chains_complete_without_hanging() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "a.cjs",
-        r#"
-exports.name = "a";
-const b = require("./b.cjs");
-exports.chain = (b.chain || []).concat("a");
-"#,
-    );
-    fixture.write(
-        "b.cjs",
-        r#"
-exports.name = "b";
-const c = require("./c.cjs");
-exports.chain = (c.chain || []).concat("b");
-"#,
-    );
-    fixture.write(
-        "c.cjs",
-        r#"
-exports.name = "c";
-const a = require("./a.cjs");
-exports.chain = [a.name || "missing", "c"];
-"#,
-    );
-    fixture.write(
-        "entry.cjs",
-        r#"
-const a = require("./a.cjs");
-const b = require("./b.cjs");
-const c = require("./c.cjs");
-console.log(JSON.stringify({ a: a.chain, b: b.chain, c: c.chain }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    assert_eq!(
-        output,
-        json!({
-            "a": ["a", "c", "b", "a"],
-            "b": ["a", "c", "b"],
-            "c": ["a", "c"]
-        })
-    );
-}
-
-fn runtime_circular_requires_use_cache_instead_of_re_evaluating_modules() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "a.cjs",
-        r#"
-globalThis.__aLoads = (globalThis.__aLoads || 0) + 1;
-exports.name = "a";
-exports.fromB = require("./b.cjs").name;
-"#,
-    );
-    fixture.write(
-        "b.cjs",
-        r#"
-globalThis.__bLoads = (globalThis.__bLoads || 0) + 1;
-exports.name = "b";
-exports.fromA = require("./a.cjs").name;
-"#,
-    );
-    fixture.write(
-        "entry.cjs",
-        r#"
-const first = require("./a.cjs");
-const second = require("./a.cjs");
-console.log(JSON.stringify({
-  sameInstance: first === second,
-  aLoads: globalThis.__aLoads,
-  bLoads: globalThis.__bLoads,
-  first,
-  second
-}));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    assert_eq!(output.get("sameInstance"), Some(&json!(true)));
-    assert_eq!(output.get("aLoads"), Some(&json!(1)));
-    assert_eq!(output.get("bLoads"), Some(&json!(1)));
-    assert_eq!(
-        output.get("first"),
-        Some(&json!({ "name": "a", "fromB": "b" }))
-    );
-    assert_eq!(
-        output.get("second"),
-        Some(&json!({ "name": "a", "fromB": "b" }))
-    );
-}
-
-fn runtime_require_json_returns_the_parsed_object() {
-    let fixture = Fixture::new();
-    fixture.write("data.json", r#"{ "name": "agentos", "ok": true }"#);
-    fixture.write(
-        "entry.cjs",
-        r#"console.log(JSON.stringify(require("./data.json")));"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    assert_eq!(output, json!({ "name": "agentos", "ok": true }));
-}
-
-fn runtime_require_invalid_json_surfaces_a_parse_error() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "data.json",
-        "{\n  // comments are not valid JSON\n  \"ok\": true,\n}\n",
-    );
-    fixture.write(
-        "entry.cjs",
-        r#"
-try {
-  require("./data.json");
-  throw new Error("require should have failed");
-} catch (error) {
-  console.log(JSON.stringify({
-    message: String(error && error.message ? error.message : error)
-  }));
-}
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    let message = output
-        .get("message")
-        .and_then(Value::as_str)
-        .expect("error message");
-    assert!(
-        message.contains("Unexpected") || message.contains("JSON"),
-        "unexpected invalid JSON error: {message}"
-    );
-}
-
-fn runtime_esm_entrypoints_can_use_require_via_the_runtime_prelude() {
-    let fixture = Fixture::new();
-    fixture.write("dep.cjs", "module.exports = { answer: 42 };");
-    fixture.write(
-        "entry.mjs",
-        r#"
-const dep = require("./dep.cjs");
-console.log(JSON.stringify(dep));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(output, json!({ "answer": 42 }));
-}
-
-fn runtime_esm_default_import_of_cjs_uses_module_exports_value() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "dep.cjs",
-        r#"
-module.exports = function greet(name) {
-  return `hello ${name}`;
-};
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import greet from "./dep.cjs";
-console.log(JSON.stringify({ greeting: greet("agent") }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(output, json!({ "greeting": "hello agent" }));
-}
-
-fn runtime_esm_named_imports_of_cjs_use_the_extracted_names() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "dep.cjs",
-        r#"
-exports.answer = 42;
-exports.label = "ok";
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import { answer, label } from "./dep.cjs";
-console.log(JSON.stringify({ answer, label }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(output, json!({ "answer": 42, "label": "ok" }));
-}
-
-fn runtime_builtin_assert_exposes_deep_strict_equal() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "entry.cjs",
-        r#"
-const assert = require("node:assert");
-assert.deepStrictEqual({ nested: ["ok"] }, { nested: ["ok"] });
-console.log(JSON.stringify({
-  deepStrictEqual: typeof assert.deepStrictEqual
-}));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    assert_eq!(output, json!({ "deepStrictEqual": "function" }));
-}
-
-fn runtime_builtin_assert_exposes_throws() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "entry.cjs",
-        r#"
-const assert = require("node:assert");
-assert.throws(() => {
-  throw new Error("boom");
-}, /boom/);
-console.log(JSON.stringify({ throws: typeof assert.throws }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    assert_eq!(output, json!({ "throws": "function" }));
-}
-
-fn runtime_builtin_path_normalize_matches_expected_edge_cases() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "entry.cjs",
-        r#"
-const path = require("node:path");
-console.log(JSON.stringify({
-  dot: path.normalize("."),
-  dotDot: path.normalize("foo/../bar"),
-  trailing: path.normalize("/tmp/demo/"),
-  repeated: path.normalize("/tmp//demo//../file")
-}));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    assert_eq!(
-        output,
-        json!({
-            "dot": ".",
-            "dotDot": "bar",
-            "trailing": "/tmp/demo",
-            "repeated": "/tmp/file"
-        })
-    );
-}
-
-fn runtime_builtin_path_resolve_and_relative_match_expected_values() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "entry.cjs",
-        r#"
-const path = require("node:path");
-console.log(JSON.stringify({
-  resolve: path.resolve("alpha", "..", "beta", "file.txt"),
-  relative: path.relative("/root/project/src", "/root/project/tests/spec"),
-  same: path.relative("/root/project", "/root/project")
-}));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    assert_eq!(
-        output,
-        json!({
-            "resolve": "/root/beta/file.txt",
-            "relative": "../tests/spec",
-            "same": ""
-        })
-    );
-}
-
-fn runtime_object_assign_module_exports_named_exports_are_visible_to_esm_imports() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "dep.cjs",
-        r#"
-Object.assign(module.exports, { answer: 42, label: "ok" });
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import { answer, label } from "./dep.cjs";
-console.log(JSON.stringify({ answer, label }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(output, json!({ "answer": 42, "label": "ok" }));
-}
-
-fn runtime_spread_based_module_exports_named_exports_are_visible_to_esm_imports() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "dep.cjs",
-        r#"
-const shared = { alpha: 1 };
-module.exports = { ...shared, beta: 2 };
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import { alpha, beta } from "./dep.cjs";
-console.log(JSON.stringify({ alpha, beta }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(output, json!({ "alpha": 1, "beta": 2 }));
-}
-
-fn runtime_object_define_properties_reexports_are_visible_to_esm_imports() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "dep.cjs",
-        r#"
-Object.defineProperties(module.exports, {
-  answer: { enumerable: true, value: 42 },
-  label: { enumerable: true, value: "ok" }
-});
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import { answer, label } from "./dep.cjs";
-console.log(JSON.stringify({ answer, label }));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(output, json!({ "answer": 42, "label": "ok" }));
-}
-
-fn runtime_esm_json_imports_return_the_parsed_object() {
-    let fixture = Fixture::new();
-    fixture.write("data.json", r#"{ "name": "agentos", "ok": true }"#);
-    fixture.write(
-        "entry.mjs",
-        r#"
-import data from "./data.json";
-console.log(JSON.stringify(data));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(output, json!({ "name": "agentos", "ok": true }));
-}
-
-fn runtime_intl_datetime_format_does_not_crash() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "entry.mjs",
-        r#"
-console.log(JSON.stringify({
-  formatted: new Intl.DateTimeFormat("en-US").format(new Date("2024-01-02T03:04:05Z"))
-}));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(output, json!({ "formatted": "2024-01-02" }));
-}
-
-fn runtime_buffer_base64url_encoding_matches_node_behavior() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "entry.mjs",
-        r#"
-const encoded = Buffer.from("hello").toString("base64url");
-const decoded = Buffer.from(encoded, "base64url").toString("utf8");
-console.log(JSON.stringify({
-  isEncoding: Buffer.isEncoding("base64url"),
-  encoded,
-  decoded,
-  byteLength: Buffer.byteLength(encoded, "base64url")
-}));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(
-        output,
-        json!({
-            "isEncoding": true,
-            "encoded": "aGVsbG8",
-            "decoded": "hello",
-            "byteLength": 5
-        })
-    );
-}
-
-fn runtime_relative_file_urls_preserve_directory_trailing_slashes() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "entry.mjs",
-        r#"
-const base = "file:///node_modules/.pnpm/pkg/node_modules/pkg/dist/content/utils.js";
-const pkgBase = new URL("../../", base);
-console.log(JSON.stringify({
-  pkgBase: String(pkgBase),
-  template: String(new URL("templates/content/types.d.ts", pkgBase))
-}));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(
-        output,
-        json!({
-            "pkgBase": "file:///node_modules/.pnpm/pkg/node_modules/pkg/",
-            "template": "file:///node_modules/.pnpm/pkg/node_modules/pkg/templates/content/types.d.ts"
-        })
-    );
-}
-
-fn runtime_require_module_returns_the_module_constructor_shape() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "entry.cjs",
-        r#"
-const mod = require("module");
-console.log(JSON.stringify({
-  hasPrototypeRequire: typeof mod.prototype?.require === "function",
-  sameConstructor: mod.Module === mod,
-  hasCreateRequire: typeof mod.createRequire === "function"
-}));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    assert_eq!(
-        output,
-        json!({
-            "hasPrototypeRequire": true,
-            "sameConstructor": true,
-            "hasCreateRequire": true
-        })
-    );
-}
-
-fn runtime_cjs_entrypoints_can_use_dynamic_import() {
-    let fixture = Fixture::new();
-    fixture.write("dep.mjs", "export const answer = 42;\n");
-    fixture.write(
-        "entry.cjs",
-        r#"
-(async () => {
-  const mod = await import("./dep.mjs");
-  console.log(JSON.stringify({ answer: mod.answer }));
-})().catch((error) => {
-  console.error(String(error && error.stack ? error.stack : error));
-  process.exit(1);
-});
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.cjs");
-    assert_eq!(output, json!({ "answer": 42 }));
-}
-
-fn runtime_export_star_reexport_with_own_static_exports_exposes_all_named_esm_imports() {
-    // Reproduces `@sinclair/typebox/compiler`: a tsc-compiled barrel that BOTH assigns its own
-    // export statically (`exports.ValueErrorType = ...`, which static extraction finds, so the set
-    // is non-empty) AND re-exports a submodule's names at runtime via `__exportStar` (which static
-    // extraction cannot see). Before the fix, a non-empty static set skipped the runtime fallback,
-    // so `TypeCompiler` was dropped and `import { TypeCompiler }` threw
-    // "does not provide an export named 'TypeCompiler'".
-    let fixture = Fixture::new();
-    fixture.write(
-        "sub.cjs",
-        r#"
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.TypeCompiler = void 0;
-exports.TypeCompiler = "compiler";
-"#,
-    );
-    fixture.write(
-        "barrel.cjs",
-        r#"
-var __createBinding = (this && this.__createBinding) || (Object.create ? (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    var desc = Object.getOwnPropertyDescriptor(m, k);
-    if (!desc || ("get" in desc ? !m.__esModule : desc.writable || desc.configurable)) {
-      desc = { enumerable: true, get: function() { return m[k]; } };
-    }
-    Object.defineProperty(o, k2, desc);
-}) : (function(o, m, k, k2) {
-    if (k2 === undefined) k2 = k;
-    o[k2] = m[k];
-}));
-var __exportStar = (this && this.__exportStar) || function(m, exports) {
-    for (var p in m) if (p !== "default" && !Object.prototype.hasOwnProperty.call(exports, p)) __createBinding(exports, m, p);
-};
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.ValueErrorType = void 0;
-exports.ValueErrorType = 7;
-__exportStar(require("./sub.cjs"), exports);
-"#,
-    );
-    fixture.write(
-        "entry.mjs",
-        r#"
-import barrel, { ValueErrorType, TypeCompiler } from "./barrel.cjs";
-console.log(JSON.stringify({
-  ValueErrorType,
-  TypeCompiler,
-  defaultValueErrorType: barrel.ValueErrorType,
-  defaultTypeCompiler: barrel.TypeCompiler,
-}));
-"#,
-    );
-
-    let output = run_guest_json(&fixture, "./entry.mjs");
-    assert_eq!(
-        output,
-        json!({
-            "ValueErrorType": 7,
-            "TypeCompiler": "compiler",
-            "defaultValueErrorType": 7,
-            "defaultTypeCompiler": "compiler"
-        })
-    );
-}
-
-#[test]
-fn cjs_esm_interop_suite() {
-    // Keep V8-backed integration coverage inside one top-level libtest case.
-    // Running these guest-runtime cases as separate tests in the same binary
-    // still trips a V8 teardown/init boundary crash between cases.
-    resolution_nested_exports_conditions_recurse_three_levels();
-    resolution_exports_array_and_condition_nesting_uses_first_valid_target();
-    resolution_require_prefers_cjs_entry_for_dual_packages();
-    resolution_invalid_utf8_file_url_specifiers_are_rejected();
-    runtime_exports_dot_named_exports_are_available_to_esm_imports();
-    runtime_minified_type_module_js_is_not_misclassified_as_cjs();
-    runtime_object_define_property_exports_are_available_to_esm_imports();
-    runtime_computed_property_cjs_modules_still_work_via_default_import();
-    runtime_exports_bracket_assignment_preserves_default_export_shape();
-    runtime_object_assign_module_exports_exposes_named_esm_imports_via_runtime_fallback();
-    runtime_spread_based_module_exports_still_exposes_the_default_export_shape();
-    runtime_object_create_descriptor_exports_expose_named_esm_imports_via_runtime_fallback();
-    runtime_cjs_reexport_preserves_named_esm_imports_via_runtime_fallback();
-    runtime_export_star_reexport_with_own_static_exports_exposes_all_named_esm_imports();
-    runtime_require_of_esm_only_packages_either_loads_or_throws_clearly();
-    runtime_require_type_module_js_main_throws_require_esm();
-    runtime_require_fails_closed_when_module_format_bridge_is_missing();
-    runtime_import_module_condition_js_target_uses_esm_syntax();
-    runtime_type_module_export_subpaths_keep_js_files_in_esm_mode();
-    runtime_require_of_dual_packages_uses_the_cjs_entrypoint();
-    runtime_two_module_circular_require_exposes_partial_exports();
-    runtime_three_module_circular_chains_complete_without_hanging();
-    runtime_circular_requires_use_cache_instead_of_re_evaluating_modules();
-    runtime_require_json_returns_the_parsed_object();
-    runtime_require_invalid_json_surfaces_a_parse_error();
-    runtime_esm_entrypoints_can_use_require_via_the_runtime_prelude();
-    runtime_esm_default_import_of_cjs_uses_module_exports_value();
-    runtime_esm_named_imports_of_cjs_use_the_extracted_names();
-    runtime_builtin_assert_exposes_deep_strict_equal();
-    runtime_builtin_assert_exposes_throws();
-    runtime_builtin_path_normalize_matches_expected_edge_cases();
-    runtime_builtin_path_resolve_and_relative_match_expected_values();
-    runtime_object_assign_module_exports_named_exports_are_visible_to_esm_imports();
-    runtime_spread_based_module_exports_named_exports_are_visible_to_esm_imports();
-    runtime_object_define_properties_reexports_are_visible_to_esm_imports();
-    runtime_esm_json_imports_return_the_parsed_object();
-    runtime_intl_datetime_format_does_not_crash();
-    runtime_buffer_base64url_encoding_matches_node_behavior();
-    runtime_relative_file_urls_preserve_directory_trailing_slashes();
-    runtime_require_module_returns_the_module_constructor_shape();
-    runtime_cjs_entrypoints_can_use_dynamic_import();
-}
diff --git a/crates/execution/tests/javascript_v8.rs b/crates/execution/tests/javascript_v8.rs
deleted file mode 100644
index e6568852d..000000000
--- a/crates/execution/tests/javascript_v8.rs
+++ /dev/null
@@ -1,6033 +0,0 @@
-use base64::Engine;
-use secure_exec_execution::{
-    v8_runtime::map_bridge_method, CreateJavascriptContextRequest, GuestRuntimeConfig,
-    JavascriptExecution, JavascriptExecutionEngine, JavascriptExecutionEvent,
-    JavascriptExecutionLimits, JavascriptExecutionResult, JavascriptSyncRpcRequest,
-    StartJavascriptExecutionRequest,
-};
-use serde::Deserialize;
-use serde_json::{json, Value};
-use std::collections::{BTreeMap, VecDeque};
-use std::fs;
-use std::io::{Read, Write};
-use std::os::unix::fs::symlink;
-use std::os::unix::fs::PermissionsExt;
-use std::path::Path;
-use std::process::{Child, ChildStdin, Command, Stdio};
-use std::sync::mpsc::{self, Receiver, Sender, TryRecvError};
-use std::thread;
-use std::time::{Duration, Instant};
-use tempfile::tempdir;
-
-/*
-US-040 execution-test audit
-
-Deleted coverage:
-- `tests/javascript.rs`: removed because the file only exercised the old
-  `legacy-js-tests` host-Node guest path (`loader.mjs`, `runner.mjs`,
-  import-cache mutation, and `Command::new("node")` process behavior). The V8
-  isolate path no longer uses that guest execution model.
-- `permission_flags::node_permission_flags_do_not_expose_workspace_root_or_entrypoint_parent_writes`:
-  removed because its JavaScript assertions depended on host-Node permission
-  flags emitted for guest JS launches. V8 guest JS now stays in-process, while
-  the remaining permission-flag tests still cover the real host-Node launches
-  that remain for Python and WASM.
-- `benchmark::javascript_benchmark_harness_covers_required_startup_and_import_scenarios`:
-  removed because it depended on pre-V8 benchmark marker behavior from the old
-  startup harness instead of validating the current V8 execution path. The
-  stable artifact and markdown benchmark tests remain.
-*/
-
-// Timing-sensitive assertions flake under the CPU contention of a parallel test
-// run (see CLAUDE.md > Testing). Gated off by default; the nightly timing lane
-// sets SECURE_EXEC_RUN_TIMING_TESTS=1 to enforce them.
-fn run_timing_sensitive_tests() -> bool {
-    std::env::var_os("SECURE_EXEC_RUN_TIMING_TESTS").is_some()
-}
-
-fn write_fixture(path: &Path, contents: &str) {
-    if let Some(parent) = path.parent() {
-        fs::create_dir_all(parent).expect("create fixture parent dirs");
-    }
-    fs::write(path, contents).expect("write fixture");
-}
-
-fn run_host_node_json(cwd: &Path, entrypoint: &Path) -> Value {
-    let output = Command::new("node")
-        .arg(entrypoint)
-        .current_dir(cwd)
-        .output()
-        .expect("run host node");
-
-    assert!(
-        output.status.success(),
-        "host node failed with status {:?}\nstdout:\n{}\nstderr:\n{}",
-        output.status.code(),
-        String::from_utf8_lossy(&output.stdout),
-        String::from_utf8_lossy(&output.stderr)
-    );
-
-    serde_json::from_slice(&output.stdout).expect("parse host JSON")
-}
-
-fn write_fake_node_binary(path: &Path, log_path: &Path) {
-    let script = format!(
-        "#!/bin/sh\nset -eu\nprintf 'guest-node-invoked\\n' >> \"{}\"\nexit 99\n",
-        log_path.display()
-    );
-    fs::write(path, script).expect("write fake node binary");
-    let mut permissions = fs::metadata(path)
-        .expect("fake node metadata")
-        .permissions();
-    permissions.set_mode(0o755);
-    fs::set_permissions(path, permissions).expect("chmod fake node binary");
-}
-
-#[derive(Debug, Deserialize, Default)]
-#[serde(rename_all = "camelCase")]
-struct TestJavascriptChildProcessSpawnOptions {
-    #[serde(default)]
-    cwd: Option<String>,
-    #[serde(default)]
-    env: BTreeMap<String, String>,
-    #[serde(default)]
-    internal_bootstrap_env: BTreeMap<String, String>,
-    #[serde(default)]
-    shell: bool,
-    #[serde(default)]
-    timeout: Option<u64>,
-    #[serde(default, rename = "killSignal")]
-    kill_signal: Option<String>,
-}
-
-#[derive(Debug, Deserialize)]
-struct TestJavascriptChildProcessSpawnRequest {
-    command: String,
-    #[serde(default)]
-    args: Vec<String>,
-    #[serde(default)]
-    options: TestJavascriptChildProcessSpawnOptions,
-}
-
-type TestJavascriptChildProcessSpawnSyncRequest = (
-    TestJavascriptChildProcessSpawnRequest,
-    Option<usize>,
-    Option<Vec<u8>>,
-);
-
-#[derive(Debug, Deserialize, Default)]
-#[serde(rename_all = "camelCase")]
-struct TestLegacyJavascriptChildProcessSpawnOptions {
-    #[serde(default)]
-    cwd: Option<String>,
-    #[serde(default)]
-    env: BTreeMap<String, String>,
-    #[serde(default)]
-    input: Option<Value>,
-    #[serde(default)]
-    shell: bool,
-    #[serde(default, rename = "maxBuffer")]
-    max_buffer: Option<usize>,
-    #[serde(default)]
-    timeout: Option<u64>,
-    #[serde(default, rename = "killSignal")]
-    kill_signal: Option<String>,
-}
-
-enum HostChildOutputEvent {
-    Stdout(Vec<u8>),
-    Stderr(Vec<u8>),
-    StreamClosed,
-}
-
-struct HostChildRecord {
-    child: Child,
-    stdin: Option<ChildStdin>,
-    output_events: Receiver<HostChildOutputEvent>,
-    pending_events: VecDeque<Value>,
-    exit_status: Option<i32>,
-    open_streams: usize,
-}
-
-#[derive(Default)]
-struct HostChildProcessHarness {
-    next_child_id: usize,
-    children: BTreeMap<String, HostChildRecord>,
-}
-
-impl HostChildProcessHarness {
-    fn handle_request(
-        &mut self,
-        host_cwd: &Path,
-        request: JavascriptSyncRpcRequest,
-    ) -> Result<Value, String> {
-        match request.method.as_str() {
-            "child_process.spawn" => self.spawn(host_cwd, &request.args),
-            "child_process.spawn_sync" => self.spawn_sync(host_cwd, &request.args),
-            "child_process.poll" => self.poll(&request.args),
-            "child_process.write_stdin" => self.write_stdin(&request.args),
-            "child_process.close_stdin" => self.close_stdin(&request.args),
-            "child_process.kill" => self.kill(&request.args),
-            "fs.writeFileSync" => self.write_file(host_cwd, &request.args),
-            other => Err(format!("unsupported sync RPC method: {other}")),
-        }
-    }
-
-    fn spawn(&mut self, host_cwd: &Path, args: &[Value]) -> Result<Value, String> {
-        let request = parse_test_child_process_spawn_request(args)?;
-
-        let child_id = {
-            self.next_child_id += 1;
-            format!("child-{}", self.next_child_id)
-        };
-
-        let mut command = if request.options.shell {
-            let mut command = Command::new("/bin/sh");
-            command.arg("-c").arg(&request.command);
-            command.args(&request.args);
-            command
-        } else {
-            let mut command = Command::new(self.map_guest_path(host_cwd, &request.command));
-            command.args(
-                request
-                    .args
-                    .iter()
-                    .map(|arg| self.map_guest_path(host_cwd, arg)),
-            );
-            command
-        };
-
-        let child_cwd = request
-            .options
-            .cwd
-            .as_deref()
-            .map(|cwd| std::path::PathBuf::from(self.map_guest_path(host_cwd, cwd)))
-            .unwrap_or_else(|| host_cwd.to_path_buf());
-
-        command
-            .current_dir(child_cwd)
-            .stdin(Stdio::piped())
-            .stdout(Stdio::piped())
-            .stderr(Stdio::piped())
-            .env_clear()
-            .envs(&request.options.env)
-            .envs(&request.options.internal_bootstrap_env);
-
-        let mut child = command
-            .spawn()
-            .map_err(|error| format!("spawn {} failed: {error}", request.command))?;
-
-        let stdin = child.stdin.take();
-        let stdout = child
-            .stdout
-            .take()
-            .ok_or_else(|| String::from("spawned child stdout pipe missing"))?;
-        let stderr = child
-            .stderr
-            .take()
-            .ok_or_else(|| String::from("spawned child stderr pipe missing"))?;
-        let (output_sender, output_events) = mpsc::channel();
-        spawn_output_reader(stdout, output_sender.clone(), true);
-        spawn_output_reader(stderr, output_sender, false);
-
-        let pid = child.id();
-        self.children.insert(
-            child_id.clone(),
-            HostChildRecord {
-                child,
-                stdin,
-                output_events,
-                pending_events: VecDeque::new(),
-                exit_status: None,
-                open_streams: 2,
-            },
-        );
-
-        Ok(json!({
-            "childId": child_id,
-            "pid": pid,
-            "command": request.command,
-            "args": request.args,
-        }))
-    }
-
-    fn poll(&mut self, args: &[Value]) -> Result<Value, String> {
-        let child_id = args
-            .first()
-            .and_then(Value::as_str)
-            .ok_or_else(|| String::from("child_process.poll missing child id"))?;
-        let wait_ms = args.get(1).and_then(Value::as_u64).unwrap_or_default();
-        let child = self
-            .children
-            .get_mut(child_id)
-            .ok_or_else(|| format!("unknown child process {child_id}"))?;
-
-        let deadline = std::time::Instant::now() + Duration::from_millis(wait_ms);
-        loop {
-            drain_child_output(child);
-            if let Some(event) = child.pending_events.pop_front() {
-                return Ok(event);
-            }
-
-            if child.exit_status.is_none() {
-                if let Some(status) = child
-                    .child
-                    .try_wait()
-                    .map_err(|error| format!("try_wait {child_id} failed: {error}"))?
-                {
-                    child.exit_status = Some(status.code().unwrap_or(1));
-                }
-            }
-
-            if let Some(exit_code) = child.exit_status {
-                if child.pending_events.is_empty() && child.open_streams == 0 {
-                    self.children.remove(child_id);
-                    return Ok(json!({
-                        "type": "exit",
-                        "exitCode": exit_code,
-                    }));
-                }
-            }
-
-            if std::time::Instant::now() >= deadline {
-                return Ok(Value::Null);
-            }
-
-            thread::sleep(Duration::from_millis(5));
-        }
-    }
-
-    fn spawn_sync(&mut self, host_cwd: &Path, args: &[Value]) -> Result<Value, String> {
-        let (request, max_buffer, input) = parse_test_child_process_spawn_sync_request(args)?;
-        let mut command = if request.options.shell {
-            let mut command = Command::new("/bin/sh");
-            command.arg("-c").arg(&request.command);
-            command.args(&request.args);
-            command
-        } else {
-            let mut command = Command::new(self.map_guest_path(host_cwd, &request.command));
-            command.args(
-                request
-                    .args
-                    .iter()
-                    .map(|arg| self.map_guest_path(host_cwd, arg)),
-            );
-            command
-        };
-
-        let child_cwd = request
-            .options
-            .cwd
-            .as_deref()
-            .map(|cwd| std::path::PathBuf::from(self.map_guest_path(host_cwd, cwd)))
-            .unwrap_or_else(|| host_cwd.to_path_buf());
-
-        command
-            .current_dir(child_cwd)
-            .stdin(Stdio::piped())
-            .stdout(Stdio::piped())
-            .stderr(Stdio::piped())
-            .env_clear()
-            .envs(&request.options.env)
-            .envs(&request.options.internal_bootstrap_env);
-
-        let mut child = command
-            .spawn()
-            .map_err(|error| format!("spawnSync {} failed: {error}", request.command))?;
-        if let Some(input) = input.as_deref() {
-            let stdin = child
-                .stdin
-                .as_mut()
-                .ok_or_else(|| String::from("spawnSync child stdin pipe missing"))?;
-            stdin
-                .write_all(input)
-                .map_err(|error| format!("write spawnSync stdin failed: {error}"))?;
-        }
-        child.stdin.take();
-
-        if let Some(timeout_ms) = request.options.timeout {
-            let deadline = Instant::now() + Duration::from_millis(timeout_ms);
-            loop {
-                match child
-                    .try_wait()
-                    .map_err(|error| format!("try_wait for {} failed: {error}", request.command))?
-                {
-                    Some(_) => break,
-                    None if Instant::now() >= deadline => {
-                        let _ = child.kill();
-                        let _ = child.wait();
-                        let signal = request
-                            .options
-                            .kill_signal
-                            .clone()
-                            .unwrap_or_else(|| String::from("SIGTERM"));
-                        return Ok(json!({
-                            "stdout": "",
-                            "stderr": "",
-                            "code": 1,
-                            "signal": signal,
-                            "timedOut": true,
-                            "maxBufferExceeded": false,
-                        }));
-                    }
-                    None => thread::sleep(Duration::from_millis(5)),
-                }
-            }
-        }
-
-        let output = child
-            .wait_with_output()
-            .map_err(|error| format!("wait_with_output for {} failed: {error}", request.command))?;
-
-        let stdout = String::from_utf8_lossy(&output.stdout).into_owned();
-        let stderr = String::from_utf8_lossy(&output.stderr).into_owned();
-        let max_buffer = max_buffer.unwrap_or(1024 * 1024);
-        let max_buffer_exceeded =
-            output.stdout.len() > max_buffer || output.stderr.len() > max_buffer;
-
-        Ok(json!({
-            "stdout": stdout,
-            "stderr": stderr,
-            "code": output.status.code().unwrap_or(1),
-            "signal": Value::Null,
-            "timedOut": false,
-            "maxBufferExceeded": max_buffer_exceeded,
-        }))
-    }
-
-    fn write_stdin(&mut self, args: &[Value]) -> Result<Value, String> {
-        let child_id = args
-            .first()
-            .and_then(Value::as_str)
-            .ok_or_else(|| String::from("child_process.write_stdin missing child id"))?;
-        let chunk = decode_guest_bytes(
-            args.get(1)
-                .ok_or_else(|| String::from("child_process.write_stdin missing chunk"))?,
-        )?;
-        let child = self
-            .children
-            .get_mut(child_id)
-            .ok_or_else(|| format!("unknown child process {child_id}"))?;
-        if let Some(stdin) = child.stdin.as_mut() {
-            stdin
-                .write_all(&chunk)
-                .map_err(|error| format!("write stdin for {child_id} failed: {error}"))?;
-        }
-        Ok(Value::Null)
-    }
-
-    fn close_stdin(&mut self, args: &[Value]) -> Result<Value, String> {
-        let child_id = args
-            .first()
-            .and_then(Value::as_str)
-            .ok_or_else(|| String::from("child_process.close_stdin missing child id"))?;
-        let child = self
-            .children
-            .get_mut(child_id)
-            .ok_or_else(|| format!("unknown child process {child_id}"))?;
-        child.stdin.take();
-        Ok(Value::Null)
-    }
-
-    fn kill(&mut self, args: &[Value]) -> Result<Value, String> {
-        let child_id = args
-            .first()
-            .and_then(Value::as_str)
-            .ok_or_else(|| String::from("child_process.kill missing child id"))?;
-        let child = self
-            .children
-            .get_mut(child_id)
-            .ok_or_else(|| format!("unknown child process {child_id}"))?;
-        child
-            .child
-            .kill()
-            .map_err(|error| format!("kill {child_id} failed: {error}"))?;
-        Ok(Value::Null)
-    }
-
-    fn write_file(&mut self, host_cwd: &Path, args: &[Value]) -> Result<Value, String> {
-        let path = args
-            .first()
-            .and_then(Value::as_str)
-            .ok_or_else(|| String::from("fs.writeFileSync missing path"))?;
-        let contents = decode_guest_bytes(
-            args.get(1)
-                .ok_or_else(|| String::from("fs.writeFileSync missing contents"))?,
-        )?;
-        let mapped_path = std::path::PathBuf::from(self.map_guest_path(host_cwd, path));
-        if let Some(parent) = mapped_path.parent() {
-            fs::create_dir_all(parent)
-                .map_err(|error| format!("create parent dirs for {} failed: {error}", path))?;
-        }
-        fs::write(&mapped_path, contents)
-            .map_err(|error| format!("write guest file {} failed: {error}", path))?;
-        Ok(Value::Null)
-    }
-
-    fn map_guest_path(&self, host_cwd: &Path, candidate: &str) -> String {
-        if !candidate.starts_with('/') {
-            return String::from(candidate);
-        }
-
-        for prefix in ["/root", "/workspace"] {
-            if candidate == prefix {
-                return host_cwd.to_string_lossy().into_owned();
-            }
-            if let Some(relative) = candidate.strip_prefix(&format!("{prefix}/")) {
-                return host_cwd.join(relative).to_string_lossy().into_owned();
-            }
-        }
-
-        String::from(candidate)
-    }
-}
-
-impl Drop for HostChildProcessHarness {
-    fn drop(&mut self) {
-        for child in self.children.values_mut() {
-            let _ = child.child.kill();
-            let _ = child.child.wait();
-        }
-    }
-}
-
-fn spawn_output_reader(
-    mut reader: impl Read + Send + 'static,
-    sender: Sender<HostChildOutputEvent>,
-    stdout: bool,
-) {
-    thread::spawn(move || {
-        let mut buffer = [0_u8; 8192];
-        loop {
-            match reader.read(&mut buffer) {
-                Ok(0) => {
-                    let _ = sender.send(HostChildOutputEvent::StreamClosed);
-                    break;
-                }
-                Ok(read) => {
-                    let event = if stdout {
-                        HostChildOutputEvent::Stdout(buffer[..read].to_vec())
-                    } else {
-                        HostChildOutputEvent::Stderr(buffer[..read].to_vec())
-                    };
-                    if sender.send(event).is_err() {
-                        break;
-                    }
-                }
-                Err(_) => {
-                    let _ = sender.send(HostChildOutputEvent::StreamClosed);
-                    break;
-                }
-            }
-        }
-    });
-}
-
-fn drain_child_output(child: &mut HostChildRecord) {
-    loop {
-        match child.output_events.try_recv() {
-            Ok(HostChildOutputEvent::Stdout(chunk)) => {
-                child.pending_events.push_back(json!({
-                    "type": "stdout",
-                    "data": encode_guest_bytes(&chunk),
-                }));
-            }
-            Ok(HostChildOutputEvent::Stderr(chunk)) => {
-                child.pending_events.push_back(json!({
-                    "type": "stderr",
-                    "data": encode_guest_bytes(&chunk),
-                }));
-            }
-            Ok(HostChildOutputEvent::StreamClosed) => {
-                child.open_streams = child.open_streams.saturating_sub(1);
-            }
-            Err(TryRecvError::Empty | TryRecvError::Disconnected) => break,
-        }
-    }
-}
-
-fn encode_guest_bytes(bytes: &[u8]) -> Value {
-    json!({
-        "__agentOSType": "bytes",
-        "base64": base64::engine::general_purpose::STANDARD.encode(bytes),
-    })
-}
-
-fn decode_guest_bytes(value: &Value) -> Result<Vec<u8>, String> {
-    let encoded = value
-        .as_object()
-        .ok_or_else(|| String::from("expected bytes payload object"))?;
-    let base64 = encoded
-        .get("base64")
-        .and_then(Value::as_str)
-        .ok_or_else(|| String::from("bytes payload missing base64"))?;
-    base64::engine::general_purpose::STANDARD
-        .decode(base64)
-        .map_err(|error| format!("invalid base64 bytes payload: {error}"))
-}
-
-fn parse_test_child_process_spawn_request(
-    args: &[Value],
-) -> Result<TestJavascriptChildProcessSpawnRequest, String> {
-    if let Some(value) = args.first().cloned() {
-        if let Ok(request) = serde_json::from_value::<TestJavascriptChildProcessSpawnRequest>(value)
-        {
-            return Ok(request);
-        }
-    }
-
-    let command = args
-        .first()
-        .and_then(Value::as_str)
-        .ok_or_else(|| String::from("child_process.spawn missing command"))?;
-    let parsed_args = args
-        .get(1)
-        .and_then(Value::as_str)
-        .ok_or_else(|| String::from("child_process.spawn missing args payload"))
-        .and_then(|value| {
-            serde_json::from_str::<Vec<String>>(value)
-                .map_err(|error| format!("invalid child_process.spawn args payload: {error}"))
-        })?;
-    let parsed_options = args
-        .get(2)
-        .and_then(Value::as_str)
-        .ok_or_else(|| String::from("child_process.spawn missing options payload"))
-        .and_then(|value| {
-            serde_json::from_str::<TestLegacyJavascriptChildProcessSpawnOptions>(value)
-                .map_err(|error| format!("invalid child_process.spawn options payload: {error}"))
-        })?;
-
-    Ok(TestJavascriptChildProcessSpawnRequest {
-        command: String::from(command),
-        args: parsed_args,
-        options: TestJavascriptChildProcessSpawnOptions {
-            cwd: parsed_options.cwd,
-            env: parsed_options.env,
-            internal_bootstrap_env: BTreeMap::new(),
-            shell: parsed_options.shell,
-            timeout: parsed_options.timeout,
-            kill_signal: parsed_options.kill_signal,
-        },
-    })
-}
-
-fn parse_test_child_process_spawn_sync_request(
-    args: &[Value],
-) -> Result<TestJavascriptChildProcessSpawnSyncRequest, String> {
-    let request = parse_test_child_process_spawn_request(args)?;
-    let parsed_options = args
-        .get(2)
-        .and_then(Value::as_str)
-        .ok_or_else(|| String::from("child_process.spawn_sync missing options payload"))
-        .and_then(|value| {
-            serde_json::from_str::<TestLegacyJavascriptChildProcessSpawnOptions>(value).map_err(
-                |error| format!("invalid child_process.spawn_sync options payload: {error}"),
-            )
-        })?;
-
-    let input = parsed_options
-        .input
-        .as_ref()
-        .map(decode_guest_or_string_bytes)
-        .transpose()?;
-
-    Ok((request, parsed_options.max_buffer, input))
-}
-
-fn decode_guest_or_string_bytes(value: &Value) -> Result<Vec<u8>, String> {
-    match value {
-        Value::String(text) => Ok(text.as_bytes().to_vec()),
-        other => decode_guest_bytes(other),
-    }
-}
-
-/// Poll for the next sync RPC, servicing (host-directly) any module-resolution
-/// sync RPCs that surface during module loading. Module resolution now flows as
-/// sync RPCs (`__resolve_module` / `__batch_resolve_modules` / `__load_file` /
-/// `__module_format`); these tests assert on the *next* non-module sync RPC.
-fn expect_next_sync_rpc(
-    execution: &mut JavascriptExecution,
-    what: &str,
-) -> JavascriptSyncRpcRequest {
-    loop {
-        match execution
-            .poll_event_blocking(Duration::from_secs(5))
-            .unwrap_or_else(|error| panic!("poll {what}: {error:?}"))
-        {
-            Some(JavascriptExecutionEvent::SyncRpcRequest(request)) => {
-                if execution
-                    .try_service_standalone_module_sync_rpc(&request)
-                    .expect("service module sync RPC")
-                {
-                    continue;
-                }
-                return request;
-            }
-            other => panic!("expected {what}, got {other:?}"),
-        }
-    }
-}
-
-fn wait_with_host_child_process_bridge(
-    mut execution: JavascriptExecution,
-    host_cwd: &Path,
-) -> JavascriptExecutionResult {
-    execution.close_stdin().expect("close JavaScript stdin");
-    let mut harness = HostChildProcessHarness::default();
-    let mut stdout = Vec::new();
-    let mut stderr = Vec::new();
-
-    loop {
-        match execution
-            .poll_event_blocking(Duration::from_secs(5))
-            .expect("poll JavaScript execution event")
-        {
-            Some(JavascriptExecutionEvent::Stdout(chunk)) => stdout.extend(chunk),
-            Some(JavascriptExecutionEvent::Stderr(chunk)) => stderr.extend(chunk),
-            Some(JavascriptExecutionEvent::SignalState { .. }) => {}
-            Some(JavascriptExecutionEvent::SyncRpcRequest(request)) => {
-                if execution
-                    .try_service_standalone_module_sync_rpc(&request)
-                    .expect("service module sync RPC")
-                {
-                    continue;
-                }
-                let request_id = request.id;
-                match harness.handle_request(host_cwd, request) {
-                    Ok(result) => execution
-                        .respond_sync_rpc_success(request_id, result)
-                        .expect("respond to child_process sync RPC"),
-                    Err(message) => execution
-                        .respond_sync_rpc_error(request_id, "ERR_TEST_CHILD_PROCESS_RPC", message)
-                        .expect("respond to child_process sync RPC error"),
-                }
-            }
-            Some(JavascriptExecutionEvent::Exited(exit_code)) => {
-                return JavascriptExecutionResult {
-                    execution_id: String::new(),
-                    exit_code,
-                    stdout,
-                    stderr,
-                };
-            }
-            None => panic!("JavaScript execution timed out while awaiting exit"),
-        }
-    }
-}
-
-struct EnvVarGuard {
-    key: &'static str,
-    previous: Option<String>,
-}
-
-impl EnvVarGuard {
-    fn set_path(key: &'static str, value: &Path) -> Self {
-        let previous = std::env::var(key).ok();
-        unsafe {
-            std::env::set_var(key, value);
-        }
-        Self { key, previous }
-    }
-
-    fn set_value(key: &'static str, value: &str) -> Self {
-        let previous = std::env::var(key).ok();
-        unsafe {
-            std::env::set_var(key, value);
-        }
-        Self { key, previous }
-    }
-}
-
-impl Drop for EnvVarGuard {
-    fn drop(&mut self) {
-        match &self.previous {
-            Some(value) => unsafe {
-                std::env::set_var(self.key, value);
-            },
-            None => unsafe {
-                std::env::remove_var(self.key);
-            },
-        }
-    }
-}
-
-fn javascript_contexts_preserve_vm_and_bootstrap_configuration() {
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: Some(String::from("./bootstrap.mjs")),
-        compile_cache_root: None,
-    });
-
-    assert_eq!(context.context_id, "js-ctx-1");
-    assert_eq!(context.vm_id, "vm-js");
-    assert_eq!(context.bootstrap_module.as_deref(), Some("./bootstrap.mjs"));
-    assert_eq!(context.compile_cache_dir, None);
-}
-
-fn javascript_execution_uses_v8_runtime_without_spawning_guest_node_binary() {
-    let temp = tempdir().expect("create temp dir");
-    let fake_node_path = temp.path().join("fake-node.sh");
-    let log_path = temp.path().join("node.log");
-    write_fake_node_binary(&fake_node_path, &log_path);
-    let _node_binary = EnvVarGuard::set_path("AGENTOS_NODE_BINARY", &fake_node_path);
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from("globalThis.__secureExecRanInV8 = true;")),
-        })
-        .expect("start JavaScript execution");
-
-    assert!(
-        execution.uses_shared_v8_runtime(),
-        "guest JS should run inside the shared V8 runtime"
-    );
-    assert_eq!(
-        execution.child_pid(),
-        0,
-        "shared V8 runtime executions should keep the embedded host pid internal"
-    );
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    assert!(
-        !log_path.exists(),
-        "guest JavaScript execution should not invoke the host node binary"
-    );
-}
-
-fn javascript_execution_virtual_os_identity_comes_from_guest_runtime_not_env() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            // os.* identity rides the typed guest_runtime; the env carries
-            // contradictory values to prove the AGENTOS_VIRTUAL_OS_* knobs are
-            // inert.
-            guest_runtime: secure_exec_execution::GuestRuntimeConfig {
-                os_cpu_count: Some(7),
-                os_totalmem: Some(8_000_000_000),
-                os_freemem: Some(4_000_000_000),
-                os_hostname: Some(String::from("vm-hostname")),
-                os_tmpdir: Some(String::from("/vm-tmp")),
-                os_type: Some(String::from("VMType")),
-                os_release: Some(String::from("1.2.3-vm")),
-                os_version: Some(String::from("VM secure-exec build 42")),
-                os_machine: Some(String::from("vm64")),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::from([
-                (
-                    String::from("AGENTOS_VIRTUAL_OS_CPU_COUNT"),
-                    String::from("99"),
-                ),
-                (
-                    String::from("AGENTOS_VIRTUAL_OS_TOTALMEM"),
-                    String::from("123"),
-                ),
-            ]),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-import os from "node:os";
-if (os.cpus().length !== 7) throw new Error(`cpus=${os.cpus().length}`);
-if (os.totalmem() !== 8000000000) throw new Error(`totalmem=${os.totalmem()}`);
-if (os.freemem() !== 4000000000) throw new Error(`freemem=${os.freemem()}`);
-if (os.hostname() !== "vm-hostname") throw new Error(`hostname=${os.hostname()}`);
-if (os.tmpdir() !== "/vm-tmp") throw new Error(`tmpdir=${os.tmpdir()}`);
-if (os.type() !== "VMType") throw new Error(`type=${os.type()}`);
-if (os.release() !== "1.2.3-vm") throw new Error(`release=${os.release()}`);
-if (os.version() !== "VM secure-exec build 42") throw new Error(`version=${os.version()}`);
-if (os.machine() !== "vm64") throw new Error(`machine=${os.machine()}`);
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(result.exit_code, 0, "stderr:\n{stderr}");
-    assert!(result.stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_virtualizes_process_metadata_for_inline_v8_code() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            // Identity rides the typed guest_runtime; the env carries different
-            // values to prove the `AGENTOS_VIRTUAL_PROCESS_*` knobs are inert.
-            guest_runtime: secure_exec_execution::GuestRuntimeConfig {
-                virtual_pid: Some(4242),
-                virtual_ppid: Some(41),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs"), String::from("alpha")],
-            env: BTreeMap::from([
-                (
-                    String::from("AGENTOS_VIRTUAL_PROCESS_PID"),
-                    String::from("1"),
-                ),
-                (
-                    String::from("AGENTOS_VIRTUAL_PROCESS_PPID"),
-                    String::from("2"),
-                ),
-            ]),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-if (process.argv[1] !== "/root/entry.mjs") throw new Error(`argv=${process.argv[1]}`);
-if (process.argv[2] !== "alpha") throw new Error(`arg2=${process.argv[2]}`);
-if (process.cwd() !== "/root") throw new Error(`cwd=${process.cwd()}`);
-if (process.pid !== 4242) throw new Error(`pid=${process.pid}`);
-if (process.ppid !== 41) throw new Error(`ppid=${process.ppid}`);
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(result.stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_process_kill_rejects_invalid_pid_in_guest_js() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-try {
-  process.kill(Number.NaN, "SIGTERM");
-  console.log(JSON.stringify({ caught: false }));
-} catch (error) {
-  console.log(JSON.stringify({
-    caught: true,
-    name: error && error.name,
-    message: error && error.message,
-  }));
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(result.stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let output: Value = serde_json::from_slice(&result.stdout).expect("parse stdout JSON");
-    assert_eq!(output.get("caught"), Some(&json!(true)));
-    assert_eq!(output.get("name"), Some(&json!("TypeError")));
-    assert!(
-        output
-            .get("message")
-            .and_then(Value::as_str)
-            .is_some_and(|message| message.contains("\"pid\" argument")),
-        "unexpected process.kill error output: {output}"
-    );
-}
-
-fn javascript_execution_preserves_binary_process_stdio_writes() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-process.stdout.write(Buffer.from([0x00, 0xbc, 0xff, 0x41]));
-process.stderr.write(Buffer.from([0xfe, 0x00, 0x42]));
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    assert_eq!(result.stdout, vec![0x00, 0xbc, 0xff, 0x41]);
-    assert_eq!(result.stderr, vec![0xfe, 0x00, 0x42]);
-}
-
-fn javascript_execution_intl_number_format_does_not_require_host_icu() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-const formatter = new Intl.NumberFormat("en", {
-  maximumFractionDigits: 2,
-  minimumFractionDigits: 2,
-});
-console.log(formatter.format(1234.5));
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert_eq!(stdout, "1,234.50\n");
-}
-
-// Regression for #70: `Date#toLocaleDateString` with a non-default locale,
-// formatting options, and an explicit IANA time zone used to crash the embedded
-// V8 isolate with SIGTRAP. ICU's `DateTimePatternGeneratorCache::CreateGenerator`
-// hit a fatal abort under the near-heap-limit path; the OOM guard in
-// `crates/v8-runtime/src/isolate.rs` now converts that fatal abort into clean
-// termination, and ICU is bundled, so the exact repro runs and returns a string.
-fn javascript_execution_to_locale_date_string_does_not_crash_embedded_v8() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-const formatted = new Date(Date.UTC(2020, 0, 15)).toLocaleDateString("en-GB", {
-  day: "2-digit",
-  month: "2-digit",
-  year: "numeric",
-  timeZone: "Europe/Warsaw",
-});
-console.log(JSON.stringify({ formatted }));
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(
-        result.exit_code, 0,
-        "guest process must not crash (e.g. SIGTRAP); stdout:\n{stdout}\nstderr:\n{stderr}"
-    );
-
-    let output: Value = serde_json::from_slice(&result.stdout).expect("parse guest stdout as JSON");
-    let formatted = output
-        .get("formatted")
-        .and_then(Value::as_str)
-        .expect("formatted date string present");
-    assert!(
-        !formatted.is_empty(),
-        "toLocaleDateString returned an empty string: {output}"
-    );
-}
-
-#[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above
-fn javascript_execution_stream_consumers_text_reads_live_stdin() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let mut execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::from([(
-                String::from("SECURE_EXEC_KEEP_STDIN_OPEN"),
-                String::from("1"),
-            )]),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-import { text } from "node:stream/consumers";
-
-const body = await text(process.stdin);
-console.log(JSON.stringify({ body }));
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    execution
-        .write_stdin(b"alpha\nbeta\n")
-        .expect("write JavaScript stdin");
-    execution.close_stdin().expect("close JavaScript stdin");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(result.stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let output: Value = serde_json::from_slice(&result.stdout).expect("parse guest stdout as JSON");
-    assert_eq!(output, json!({ "body": "alpha\nbeta\n" }));
-}
-
-#[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above
-fn javascript_execution_process_stdin_async_iterator_finishes_with_live_stdin() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let mut execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::from([(
-                String::from("SECURE_EXEC_KEEP_STDIN_OPEN"),
-                String::from("1"),
-            )]),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-let body = "";
-for await (const chunk of process.stdin) {
-  body += chunk;
-}
-console.log(JSON.stringify({ body }));
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    execution
-        .write_stdin(b"{\"request_id\":\"init1\"}\n")
-        .expect("write JavaScript stdin");
-    execution.close_stdin().expect("close JavaScript stdin");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(result.stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let output: Value = serde_json::from_slice(&result.stdout).expect("parse guest stdout as JSON");
-    assert_eq!(output, json!({ "body": "{\"request_id\":\"init1\"}\n" }));
-}
-
-#[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above
-fn javascript_execution_process_exit_from_live_stdin_listener_exits_without_waiting_for_eof() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let mut execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::from([(
-                String::from("SECURE_EXEC_KEEP_STDIN_OPEN"),
-                String::from("1"),
-            )]),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-process.stdin.setEncoding("utf8");
-process.stdin.once("data", (chunk) => {
-  process.stdout.write(`stdout:${chunk}`);
-  process.stderr.write(`stderr:${chunk}`);
-  process.exit(0);
-});
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    execution
-        .write_stdin(b"hello-live-stdin\n")
-        .expect("write JavaScript stdin");
-
-    let mut stdout = Vec::new();
-    let mut stderr = Vec::new();
-    let exit_code = loop {
-        match execution
-            .poll_event_blocking(Duration::from_secs(5))
-            .expect("poll JavaScript execution event")
-        {
-            Some(JavascriptExecutionEvent::Stdout(chunk)) => stdout.extend(chunk),
-            Some(JavascriptExecutionEvent::Stderr(chunk)) => stderr.extend(chunk),
-            Some(JavascriptExecutionEvent::SignalState { .. }) => {}
-            Some(JavascriptExecutionEvent::SyncRpcRequest(request)) => {
-                panic!("unexpected pending sync RPC request: {}", request.id);
-            }
-            Some(JavascriptExecutionEvent::Exited(code)) => break code,
-            None => panic!("JavaScript execution timed out while awaiting exit"),
-        }
-    };
-
-    let stdout = String::from_utf8_lossy(&stdout);
-    let stderr = String::from_utf8_lossy(&stderr);
-    assert_eq!(exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(
-        stdout.contains("stdout:hello-live-stdin"),
-        "stdout:\n{stdout}"
-    );
-    assert!(
-        stderr.contains("stderr:hello-live-stdin"),
-        "stderr:\n{stderr}"
-    );
-}
-
-fn javascript_execution_process_exit_ignores_live_interval_handles() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-process.stdout.write("before exit\n");
-setInterval(() => {
-  process.stdout.write("interval tick\n");
-}, 1000);
-process.exit(7);
-process.stdout.write("after exit\n");
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let mut stdout = Vec::new();
-    let exit_code = loop {
-        match execution
-            .poll_event_blocking(Duration::from_secs(5))
-            .expect("poll JavaScript execution event")
-        {
-            Some(JavascriptExecutionEvent::Stdout(chunk)) => stdout.extend(chunk),
-            Some(JavascriptExecutionEvent::Stderr(chunk)) => {
-                panic!("unexpected stderr: {}", String::from_utf8_lossy(&chunk));
-            }
-            Some(JavascriptExecutionEvent::SignalState { .. }) => {}
-            Some(JavascriptExecutionEvent::SyncRpcRequest(request)) => {
-                panic!("unexpected pending sync RPC request: {}", request.id);
-            }
-            Some(JavascriptExecutionEvent::Exited(code)) => break code,
-            None => panic!("JavaScript execution timed out while awaiting process.exit"),
-        }
-    };
-
-    let stdout = String::from_utf8_lossy(&stdout);
-    assert_eq!(exit_code, 7, "stdout:\n{stdout}");
-    assert!(stdout.contains("before exit"), "stdout:\n{stdout}");
-    assert!(!stdout.contains("after exit"), "stdout:\n{stdout}");
-}
-
-fn javascript_execution_process_exit_bypasses_promise_catch_handlers() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-Promise.resolve()
-  .then(() => {
-    process.stdout.write("before exit\n");
-    process.exit(7);
-  })
-  .catch(() => {
-    process.stdout.write("catch handler ran\n");
-    process.exit(2);
-  });
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(result.exit_code, 7, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(stdout.contains("before exit"), "stdout:\n{stdout}");
-    assert!(!stdout.contains("catch handler ran"), "stdout:\n{stdout}");
-}
-
-#[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above
-fn javascript_execution_live_stdin_replays_end_after_late_listener_registration() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let mut execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::from([(
-                String::from("SECURE_EXEC_KEEP_STDIN_OPEN"),
-                String::from("1"),
-            )]),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-setTimeout(() => {
-  process.stdin.setEncoding("utf8");
-  let body = "";
-  process.stdin.on("data", (chunk) => {
-    body += chunk;
-  });
-  process.stdin.on("end", () => {
-    console.log(JSON.stringify({ body }));
-  });
-  process.stdin.resume();
-}, 50);
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    execution
-        .write_stdin(b"hello-delayed\n")
-        .expect("write JavaScript stdin");
-    execution.close_stdin().expect("close JavaScript stdin");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(result.stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let output: Value = serde_json::from_slice(&result.stdout).expect("parse guest stdout as JSON");
-    assert_eq!(output, json!({ "body": "hello-delayed\n" }));
-}
-
-fn javascript_execution_file_url_to_path_accepts_guest_absolute_paths() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-import { fileURLToPath } from "node:url";
-
-const guestPath = "/root/node_modules/@mariozechner/pi-coding-agent/dist/config.js";
-if (fileURLToPath(guestPath) !== guestPath) {
-  throw new Error(`plain path mismatch: ${fileURLToPath(guestPath)}`);
-}
-
-const href = "file:///root/node_modules/@mariozechner/pi-coding-agent/dist/config.js";
-if (fileURLToPath(href) !== guestPath) {
-  throw new Error(`file url mismatch: ${fileURLToPath(href)}`);
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(result.stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_imports_node_events_without_hanging() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-import { EventEmitter, once } from "node:events";
-
-const emitter = new EventEmitter();
-const pending = once(emitter, "ready");
-emitter.emit("ready", "ok");
-const [value] = await pending;
-
-if (value !== "ok") {
-  throw new Error(`unexpected once payload: ${value}`);
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    assert!(
-        result.stderr.is_empty(),
-        "unexpected stderr: {:?}",
-        result.stderr
-    );
-}
-
-fn javascript_execution_imports_node_process_without_hanging() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-import process from "node:process";
-
-if (!process || typeof process.cwd !== "function") {
-  throw new Error("node:process did not export the guest process object");
-}
-
-if (typeof process.pid !== "number" || process.pid <= 0) {
-  throw new Error(`unexpected pid: ${process.pid}`);
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    assert!(
-        result.stderr.is_empty(),
-        "unexpected stderr: {:?}",
-        result.stderr
-    );
-}
-
-fn javascript_execution_imports_node_fs_promises_without_hanging() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-import fs from "node:fs/promises";
-
-if (typeof fs.access !== "function") {
-  throw new Error("node:fs/promises did not expose access()");
-}
-if (typeof fs.readFile !== "function") {
-  throw new Error("node:fs/promises did not expose readFile()");
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    assert!(
-        result.stderr.is_empty(),
-        "unexpected stderr: {:?}",
-        result.stderr
-    );
-}
-
-fn javascript_execution_imports_node_perf_hooks_without_hanging() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-import { performance } from "node:perf_hooks";
-
-if (typeof performance?.now !== "function") {
-  throw new Error("node:perf_hooks did not expose performance.now()");
-}
-const replacementPerformance = {
-  now() {
-    const [seconds, nanoseconds] = process.hrtime();
-    return seconds * 1000 + nanoseconds / 1e6;
-  },
-};
-globalThis.performance = replacementPerformance;
-
-const elapsed = process.hrtime(process.hrtime());
-if (!Array.isArray(elapsed) || elapsed.length !== 2) {
-  throw new Error("process.hrtime returned an invalid delta");
-}
-if (typeof process.hrtime.bigint() !== "bigint") {
-  throw new Error("process.hrtime.bigint did not return a bigint");
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    assert!(
-        result.stderr.is_empty(),
-        "unexpected stderr: {:?}",
-        result.stderr
-    );
-}
-
-fn javascript_execution_high_resolution_time_opt_in_enables_sub_ms_hrtime() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js-high-res-on"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: GuestRuntimeConfig {
-                high_resolution_time: true,
-                ..Default::default()
-            },
-            vm_id: String::from("vm-js-high-res-on"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-if (typeof __secureExecHrNowUs !== "function") {
-  throw new Error("high-resolution host clock was not installed");
-}
-let sawSubMs = false;
-for (let attempt = 0; attempt < 80 && !sawSubMs; attempt++) {
-  const start = process.hrtime.bigint();
-  const until = __secureExecHrNowUs() + 200;
-  while (__secureExecHrNowUs() < until) {}
-  const delta = process.hrtime.bigint() - start;
-  if (delta > 0n && delta < 1000000n) {
-    sawSubMs = true;
-  }
-}
-if (!sawSubMs) {
-  throw new Error("process.hrtime.bigint did not observe a sub-ms delta");
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-}
-
-fn javascript_execution_high_resolution_time_default_off_keeps_coarse_clock() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js-high-res-off"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js-high-res-off"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-if (typeof __secureExecHrNowUs !== "undefined") {
-  throw new Error("high-resolution host clock exists without opt-in");
-}
-for (let attempt = 0; attempt < 20; attempt++) {
-  const now = process.hrtime.bigint();
-  if (now % 1000000n !== 0n) {
-    throw new Error("process.hrtime.bigint was not millisecond aligned: " + now);
-  }
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-}
-
-fn javascript_execution_exposes_compatibility_shims_and_denies_escape_builtins() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const vm = require("node:vm");
-if (typeof vm.runInThisContext !== "function") {
-  throw new Error("node:vm compatibility shim missing runInThisContext");
-}
-
-const v8 = require("node:v8");
-if (typeof v8.cachedDataVersionTag !== "function") {
-  throw new Error("node:v8 compatibility shim missing cachedDataVersionTag");
-}
-const heapStats = v8.getHeapStatistics?.();
-if (!heapStats || typeof heapStats.heap_size_limit !== "number" || heapStats.heap_size_limit <= 0) {
-  throw new Error("node:v8 compatibility shim missing positive heap_size_limit");
-}
-
-const workerThreads = require("node:worker_threads");
-if (workerThreads.isMainThread !== true) {
-  throw new Error("node:worker_threads compatibility shim missing isMainThread");
-}
-
-let workerDenied = false;
-try {
-  new workerThreads.Worker(new URL("data:text/javascript,0"));
-} catch (error) {
-  workerDenied = error?.code === "ERR_NOT_IMPLEMENTED";
-}
-if (!workerDenied) {
-  throw new Error("node:worker_threads Worker should stay unavailable");
-}
-
-for (const builtin of ["inspector", "cluster"]) {
-  let denied = false;
-  try {
-    require(`node:${builtin}`);
-  } catch (error) {
-    denied =
-      error?.code === "ERR_ACCESS_DENIED" &&
-      String(error?.message ?? "").includes(`node:${builtin}`);
-  }
-  if (!denied) {
-    throw new Error(`node:${builtin} was not denied`);
-  }
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    assert!(
-        result.stderr.is_empty(),
-        "unexpected stderr: {:?}",
-        result.stderr
-    );
-}
-
-fn javascript_execution_v8_util_format_with_options_matches_node() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("entry.mjs"),
-        r#"
-import { createRequire } from "node:module";
-import { formatWithOptions as namedFormatWithOptions } from "node:util";
-
-const require = createRequire(import.meta.url);
-const util = require("node:util");
-const circular = {};
-circular.self = circular;
-
-console.log(JSON.stringify({
-  type: typeof util.formatWithOptions,
-  namedType: typeof namedFormatWithOptions,
-  basic: util.formatWithOptions({}, "hello %s %d %j %%", "world", 4, { ok: true }),
-  extra: util.formatWithOptions({ colors: false }, "value", { alpha: 1 }, "tail"),
-  object: util.formatWithOptions({ colors: false, depth: 1 }, "%O", { nested: { value: 1 } }),
-  circular: util.formatWithOptions({}, "%j", circular),
-}));
-"#,
-    );
-
-    let host = run_host_node_json(temp.path(), &temp.path().join("entry.mjs"));
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let guest: Value = serde_json::from_slice(&result.stdout).expect("parse stdout JSON");
-    assert_eq!(guest, host);
-}
-
-fn javascript_execution_provides_async_hooks_and_diagnostics_channel_stubs() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-import { createRequire } from "node:module";
-import { Channel, tracingChannel as importedTracingChannel } from "node:diagnostics_channel";
-
-const require = createRequire(import.meta.url);
-const asyncHooks = require("node:async_hooks");
-const diagnosticsChannel = require("node:diagnostics_channel");
-
-const hook = asyncHooks.createHook({});
-if (hook.enable() !== hook || hook.disable() !== hook) {
-  throw new Error("node:async_hooks createHook() did not return a no-op hook");
-}
-if (asyncHooks.executionAsyncId() !== 0 || asyncHooks.triggerAsyncId() !== 0) {
-  throw new Error("node:async_hooks ids should default to 0");
-}
-
-const storage = new asyncHooks.AsyncLocalStorage();
-const result = storage.run("token", () => storage.getStore());
-if (result !== "token") {
-  throw new Error(`node:async_hooks AsyncLocalStorage lost store: ${String(result)}`);
-}
-
-const channel = diagnosticsChannel.channel("undici:request:create");
-if (channel.name !== "undici:request:create") {
-  throw new Error(`unexpected channel name: ${String(channel.name)}`);
-}
-if (channel.hasSubscribers !== false) {
-  throw new Error("diagnostics channel should report no subscribers");
-}
-if (diagnosticsChannel.hasSubscribers("undici:request:create") !== false) {
-  throw new Error("diagnostics_channel.hasSubscribers should be false");
-}
-if (typeof diagnosticsChannel.tracingChannel !== "function") {
-  throw new Error("diagnostics_channel.tracingChannel is missing");
-}
-if (typeof importedTracingChannel !== "function") {
-  throw new Error("diagnostics_channel ESM tracingChannel export is missing");
-}
-if (typeof Channel !== "function") {
-  throw new Error("diagnostics_channel ESM Channel export is missing");
-}
-
-const constructedChannel = new Channel("constructed");
-if (constructedChannel.name !== "constructed" || constructedChannel.hasSubscribers !== false) {
-  throw new Error("diagnostics_channel Channel constructor returned unexpected state");
-}
-
-const tracing = diagnosticsChannel.tracingChannel("agent.test");
-if (tracing.hasSubscribers !== false || tracing.start.hasSubscribers !== false) {
-  throw new Error("diagnostics tracing channel should start without subscribers");
-}
-if (tracing.start.name !== "tracing:agent.test:start") {
-  throw new Error(`unexpected tracing start channel name: ${String(tracing.start.name)}`);
-}
-const runStoresResult = tracing.start.runStores({ token: 1 }, (left, right) => `${left}:${right}`, undefined, "ok", 42);
-if (runStoresResult !== "ok:42") {
-  throw new Error(`diagnostics tracing channel runStores returned ${String(runStoresResult)}`);
-}
-
-let published = null;
-function onPublish(message, name) {
-  published = { message, name };
-}
-tracing.start.subscribe(onPublish);
-if (tracing.hasSubscribers !== true || tracing.start.hasSubscribers !== true) {
-  throw new Error("diagnostics tracing channel did not track subscribers");
-}
-tracing.start.publish({ value: 7 });
-if (published?.name !== "tracing:agent.test:start" || published?.message?.value !== 7) {
-  throw new Error("diagnostics tracing channel did not publish to subscribers");
-}
-if (tracing.start.unsubscribe(onPublish) !== true || tracing.hasSubscribers !== false) {
-  throw new Error("diagnostics tracing channel did not unsubscribe");
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    assert!(
-        result.stderr.is_empty(),
-        "unexpected stderr: {:?}",
-        result.stderr
-    );
-}
-
-fn javascript_execution_supports_require_resolve_for_guest_code() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("local-file.js"),
-        "module.exports = 'local';\n",
-    );
-    write_fixture(
-        &temp.path().join("nested/check.cjs"),
-        r#"
-const localResolved = require.resolve("../local-file.js");
-if (localResolved !== "/root/local-file.js") {
-  throw new Error(`unexpected local resolution: ${String(localResolved)}`);
-}
-
-const packageResolved = require.resolve("some-package");
-if (packageResolved !== "/root/node_modules/some-package/index.js") {
-  throw new Error(`unexpected package resolution: ${String(packageResolved)}`);
-}
-
-const searchPaths = require.resolve.paths("some-package");
-const expectedPaths = [
-  "/root/nested/node_modules",
-  "/root/node_modules",
-  "/node_modules",
-];
-if (JSON.stringify(searchPaths) !== JSON.stringify(expectedPaths)) {
-  throw new Error(`unexpected search paths: ${JSON.stringify(searchPaths)}`);
-}
-"#,
-    );
-    write_fixture(
-        &temp.path().join("node_modules/some-package/package.json"),
-        r#"{"main":"./index.js"}"#,
-    );
-    write_fixture(
-        &temp.path().join("node_modules/some-package/index.js"),
-        "module.exports = 'pkg';\n",
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-if (require.resolve("fs") !== "node:fs") {
-  throw new Error(`builtin resolution failed: ${String(require.resolve("fs"))}`);
-}
-
-if (require.resolve("./local-file.js") !== "/root/local-file.js") {
-  throw new Error(`local resolution failed: ${String(require.resolve("./local-file.js"))}`);
-}
-
-if (require.resolve("some-package") !== "/root/node_modules/some-package/index.js") {
-  throw new Error(`package resolution failed: ${String(require.resolve("some-package"))}`);
-}
-
-const builtinPaths = require.resolve.paths("fs");
-if (builtinPaths !== null) {
-  throw new Error(`builtin paths should be null, got ${JSON.stringify(builtinPaths)}`);
-}
-
-const packagePaths = require.resolve.paths("some-package");
-const expectedPackagePaths = ["/root/node_modules", "/node_modules"];
-if (JSON.stringify(packagePaths) !== JSON.stringify(expectedPackagePaths)) {
-  throw new Error(`unexpected top-level search paths: ${JSON.stringify(packagePaths)}`);
-}
-
-let missingCode = null;
-try {
-  require.resolve("nonexistent");
-} catch (error) {
-  missingCode = error?.code ?? null;
-}
-if (missingCode !== "MODULE_NOT_FOUND") {
-  throw new Error(`unexpected missing-module code: ${String(missingCode)}`);
-}
-
-require("./nested/check.cjs");
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    assert!(
-        result.stderr.is_empty(),
-        "unexpected stderr: {:?}",
-        result.stderr
-    );
-}
-
-fn javascript_execution_rejects_native_node_addons() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(&temp.path().join("addon.node"), "not a native addon\n");
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.js")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-let rejected = false;
-try {
-  require("./addon.node");
-} catch (error) {
-  rejected =
-    String(error?.message ?? "").includes(".node extensions are not supported") ||
-    String(error?.message ?? "").includes("native addon loading");
-}
-if (!rejected) {
-  throw new Error("native .node addon should be rejected");
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    assert!(
-        result.stderr.is_empty(),
-        "unexpected stderr: {:?}",
-        result.stderr
-    );
-}
-
-fn javascript_execution_surfaces_sync_rpc_requests_from_v8_modules() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("entry.mjs"),
-        r#"
-import fs from "node:fs";
-fs.statSync("/workspace/note.txt");
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let mut execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let request = expect_next_sync_rpc(&mut execution, "poll execution event");
-
-    assert_eq!(request.method, "fs.statSync");
-    assert_eq!(request.args, vec![json!("/workspace/note.txt")]);
-
-    execution
-        .respond_sync_rpc_success(
-            request.id,
-            json!({
-                "mode": 0o100644,
-                "size": 11,
-                "isDirectory": false,
-                "isSymbolicLink": false,
-            }),
-        )
-        .expect("respond to fs.statSync");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-}
-
-fn javascript_execution_v8_dgram_bridge_matches_sidecar_rpc_shapes() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("entry.mjs"),
-        r#"
-import dgram from "node:dgram";
-
-const summary = await new Promise((resolve, reject) => {
-  const socket = dgram.createSocket("udp4");
-  socket.on("error", reject);
-  socket.on("message", (message, rinfo) => {
-    const address = socket.address();
-    socket.close(() => {
-      resolve({
-        address,
-        message: message.toString("utf8"),
-        rinfo,
-      });
-    });
-  });
-  socket.bind(0, "127.0.0.1", () => {
-    socket.send("ping", 7, "127.0.0.1");
-  });
-});
-
-if (summary.message !== "pong") {
-  throw new Error(`unexpected udp message: ${summary.message}`);
-}
-if (summary.address.address !== "127.0.0.1" || summary.address.port !== 45454) {
-  throw new Error(`unexpected socket address: ${JSON.stringify(summary.address)}`);
-}
-if (summary.rinfo.address !== "127.0.0.1" || summary.rinfo.port !== 7) {
-  throw new Error(`unexpected remote info: ${JSON.stringify(summary.rinfo)}`);
-}
-"#,
-    );
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let mut execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::from([(
-                String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                String::from("[\"dgram\"]"),
-            )]),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let request = expect_next_sync_rpc(&mut execution, "poll dgram.createSocket request");
-    assert_eq!(request.method, "dgram.createSocket");
-    assert_eq!(request.args, vec![json!({ "type": "udp4" })]);
-    execution
-        .respond_sync_rpc_success(request.id, json!({ "socketId": "udp-1", "type": "udp4" }))
-        .expect("respond to dgram.createSocket");
-
-    let request = expect_next_sync_rpc(&mut execution, "poll dgram.bind request");
-    assert_eq!(request.method, "dgram.bind");
-    assert_eq!(
-        request.args,
-        vec![json!("udp-1"), json!({ "address": "127.0.0.1", "port": 0 })]
-    );
-    execution
-        .respond_sync_rpc_success(
-            request.id,
-            json!({
-                "localAddress": "127.0.0.1",
-                "localPort": 45454,
-                "family": "IPv4",
-            }),
-        )
-        .expect("respond to dgram.bind");
-
-    let request = expect_next_sync_rpc(&mut execution, "poll dgram.poll request");
-    assert_eq!(request.method, "dgram.poll");
-    assert_eq!(request.args, vec![json!("udp-1"), json!(0)]);
-    execution
-        .respond_sync_rpc_success(request.id, json!(null))
-        .expect("respond to initial dgram.poll");
-
-    let request = expect_next_sync_rpc(&mut execution, "poll dgram.send request");
-    assert_eq!(request.method, "dgram.send");
-    assert_eq!(
-        request.args,
-        vec![
-            json!("udp-1"),
-            json!({
-                "__agentOSType": "bytes",
-                "base64": "cGluZw==",
-            }),
-            json!({
-                "address": "127.0.0.1",
-                "port": 7,
-            }),
-        ]
-    );
-    execution
-        .respond_sync_rpc_success(
-            request.id,
-            json!({
-                "bytes": 4,
-                "localAddress": "127.0.0.1",
-                "localPort": 45454,
-                "family": "IPv4",
-            }),
-        )
-        .expect("respond to dgram.send");
-
-    let request = expect_next_sync_rpc(&mut execution, "poll message dgram.poll request");
-    assert_eq!(request.method, "dgram.poll");
-    assert_eq!(request.args, vec![json!("udp-1"), json!(10)]);
-    execution
-        .respond_sync_rpc_success(
-            request.id,
-            json!({
-                "type": "message",
-                "data": {
-                    "__agentOSType": "bytes",
-                    "base64": "cG9uZw==",
-                },
-                "remoteAddress": "127.0.0.1",
-                "remotePort": 7,
-                "remoteFamily": "IPv4",
-            }),
-        )
-        .expect("respond to message dgram.poll");
-
-    let request = expect_next_sync_rpc(&mut execution, "poll dgram.address request");
-    assert_eq!(request.method, "dgram.address");
-    assert_eq!(request.args, vec![json!("udp-1")]);
-    execution
-        .respond_sync_rpc_success(
-            request.id,
-            json!("{\"address\":\"127.0.0.1\",\"port\":45454,\"family\":\"IPv4\"}"),
-        )
-        .expect("respond to dgram.address");
-
-    let request = expect_next_sync_rpc(&mut execution, "poll dgram.close request");
-    assert_eq!(request.method, "dgram.close");
-    assert_eq!(request.args, vec![json!("udp-1")]);
-    execution
-        .respond_sync_rpc_success(request.id, json!(null))
-        .expect("respond to dgram.close");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_strips_hashbang_from_module_entrypoints() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(&temp.path().join("package.json"), r#"{"type":"module"}"#);
-    write_fixture(
-        &temp.path().join("index.js"),
-        "#!/usr/bin/env node\nimport fs from \"node:fs\";\nfs.statSync(\"/workspace/hashbang.txt\");\n",
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let mut execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./index.js")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let request = expect_next_sync_rpc(&mut execution, "poll execution event");
-
-    assert_eq!(request.method, "fs.statSync");
-    assert_eq!(request.args, vec![json!("/workspace/hashbang.txt")]);
-
-    execution
-        .respond_sync_rpc_success(
-            request.id,
-            json!({
-                "mode": 0o100644,
-                "size": 9,
-                "isDirectory": false,
-                "isSymbolicLink": false,
-            }),
-        )
-        .expect("respond to fs.statSync");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_resolves_pnpm_store_dependencies_from_symlinked_entrypoints() {
-    let temp = tempdir().expect("create temp dir");
-    let node_modules = temp.path().join("node_modules");
-    let store_root = node_modules.join(".pnpm/pkg@1.0.0/node_modules");
-    let pkg_dir = store_root.join("pkg");
-    let dep_dir = store_root.join("@scope/dep");
-
-    fs::create_dir_all(pkg_dir.join("dist")).expect("create package dist");
-    fs::create_dir_all(&dep_dir).expect("create dependency dir");
-    fs::create_dir_all(node_modules.join("@scope")).expect("create scope dir");
-
-    write_fixture(&pkg_dir.join("package.json"), r#"{"type":"module"}"#);
-    write_fixture(
-        &pkg_dir.join("dist/index.js"),
-        "import dep from \"@scope/dep\";\ndep();\n",
-    );
-    write_fixture(
-        &dep_dir.join("package.json"),
-        r#"{"type":"module","exports":"./index.js"}"#,
-    );
-    write_fixture(
-        &dep_dir.join("index.js"),
-        "import fs from \"node:fs\";\nexport default function dep() { fs.statSync(\"/workspace/pnpm.txt\"); }\n",
-    );
-
-    symlink(".pnpm/pkg@1.0.0/node_modules/pkg", node_modules.join("pkg"))
-        .expect("symlink package into node_modules");
-
-    let guest_mappings = serde_json::to_string(&vec![json!({
-        "guestPath": "/root/node_modules",
-        "hostPath": node_modules.display().to_string(),
-    })])
-    .expect("serialize guest mappings");
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let mut execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("/root/node_modules/pkg/dist/index.js")],
-            env: BTreeMap::from([(String::from("AGENTOS_GUEST_PATH_MAPPINGS"), guest_mappings)]),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let request = expect_next_sync_rpc(&mut execution, "poll execution event");
-
-    assert_eq!(request.method, "fs.statSync");
-    assert_eq!(request.args, vec![json!("/workspace/pnpm.txt")]);
-
-    execution
-        .respond_sync_rpc_success(
-            request.id,
-            json!({
-                "mode": 0o100644,
-                "size": 8,
-                "isDirectory": false,
-                "isSymbolicLink": false,
-            }),
-        )
-        .expect("respond to fs.statSync");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_resolves_dependencies_from_package_specific_symlink_mounts() {
-    let temp = tempdir().expect("create temp dir");
-    let mounts_root = temp.path().join("mounts");
-    let node_modules_root = temp.path().join("node_modules");
-    let store_root = node_modules_root.join(".pnpm/pkg@1.0.0/node_modules");
-    let pkg_dir = store_root.join("pkg");
-    let dep_dir = store_root.join("@scope/dep");
-    let mounted_pkg = mounts_root.join("pkg");
-
-    fs::create_dir_all(pkg_dir.join("dist")).expect("create package dist");
-    fs::create_dir_all(&dep_dir).expect("create dependency dir");
-    fs::create_dir_all(&mounts_root).expect("create mounts root");
-
-    write_fixture(&pkg_dir.join("package.json"), r#"{"type":"module"}"#);
-    write_fixture(
-        &pkg_dir.join("dist/index.js"),
-        "import dep from \"@scope/dep\";\ndep();\n",
-    );
-    write_fixture(
-        &dep_dir.join("package.json"),
-        r#"{"type":"module","exports":"./index.js"}"#,
-    );
-    write_fixture(
-        &dep_dir.join("index.js"),
-        "import fs from \"node:fs\";\nexport default function dep() { fs.statSync(\"/workspace/pkg-mount.txt\"); }\n",
-    );
-
-    symlink(&pkg_dir, &mounted_pkg).expect("symlink mounted package to pnpm store");
-
-    let guest_mappings = serde_json::to_string(&vec![json!({
-        "guestPath": "/root/node_modules/pkg",
-        "hostPath": mounted_pkg.display().to_string(),
-    })])
-    .expect("serialize guest mappings");
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let mut execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("/root/node_modules/pkg/dist/index.js")],
-            env: BTreeMap::from([(String::from("AGENTOS_GUEST_PATH_MAPPINGS"), guest_mappings)]),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let request = expect_next_sync_rpc(&mut execution, "poll execution event");
-
-    assert_eq!(request.method, "fs.statSync");
-    assert_eq!(request.args, vec![json!("/workspace/pkg-mount.txt")]);
-
-    execution
-        .respond_sync_rpc_success(
-            request.id,
-            json!({
-                "mode": 0o100644,
-                "size": 13,
-                "isDirectory": false,
-                "isSymbolicLink": false,
-            }),
-        )
-        .expect("respond to fs.statSync");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8(result.stdout.clone()).expect("stdout utf8");
-    let stderr = String::from_utf8(result.stderr.clone()).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_timer_callbacks_fire_and_clear_correctly() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id.clone(),
-            argv: vec![String::from("./entry.js")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-(async () => {
-  const clearedTimeout = setTimeout(() => {
-    throw new Error("cleared timeout fired");
-  }, 10);
-  clearTimeout(clearedTimeout);
-
-  await new Promise((resolve) => setTimeout(resolve, 25));
-
-  let intervalTicks = 0;
-  await new Promise((resolve, reject) => {
-    const interval = setInterval(() => {
-      intervalTicks += 1;
-      if (intervalTicks === 2) {
-        clearInterval(interval);
-        resolve();
-      } else if (intervalTicks > 2) {
-        reject(new Error(`interval fired too many times: ${intervalTicks}`));
-      }
-    }, 10);
-
-    setTimeout(() => reject(new Error(`interval timeout: ${intervalTicks}`)), 250);
-  });
-
-  if (intervalTicks !== 2) {
-    throw new Error(`interval tick count mismatch: ${intervalTicks}`);
-  }
-
-  let immediateFired = false;
-  await new Promise((resolve) => {
-    setImmediate(() => {
-      immediateFired = true;
-      resolve();
-    });
-  });
-  if (!immediateFired) {
-    throw new Error("setImmediate callback did not fire");
-  }
-
-  const order = [];
-  setImmediate(() => order.push("immediate"));
-  queueMicrotask(() => order.push("microtask"));
-  await new Promise((resolve) => setImmediate(resolve));
-  if (order.join(",") !== "microtask,immediate") {
-    throw new Error(`unexpected immediate order: ${order.join(",")}`);
-  }
-
-  for (let i = 0; i < 100; i += 1) {
-    await new Promise((resolve) => setImmediate(resolve));
-  }
-
-  let clearedImmediateFired = false;
-  const clearedImmediate = setImmediate(() => {
-    clearedImmediateFired = true;
-  });
-  clearImmediate(clearedImmediate);
-  await new Promise((resolve) => setImmediate(resolve));
-  if (clearedImmediateFired) {
-    throw new Error("cleared immediate fired");
-  }
-
-  const { setImmediate: promiseImmediate } = await import("node:timers/promises");
-  const promiseImmediateValue = await promiseImmediate("promise-value");
-  if (promiseImmediateValue !== "promise-value") {
-    throw new Error(`timers/promises setImmediate mismatch: ${promiseImmediateValue}`);
-  }
-
-  const t0 = Date.now();
-  let chainCount = 0;
-  const immediateChainMs = await new Promise((resolve) => {
-    function tick() {
-      if (++chainCount < 1000) {
-        setImmediate(tick);
-      } else {
-        resolve(Date.now() - t0);
-      }
-    }
-    setImmediate(tick);
-  });
-  // The upper-bound check on the chain latency lives host-side in Rust so it can
-  // be gated to the nightly timing lane (see run_timing_sensitive_tests); the
-  // guest only reports the measurement.
-  console.log(`setImmediate-chain-ms=${immediateChainMs}`);
-})().catch((error) => {
-  process.exitCode = 1;
-  throw error;
-});
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8(result.stdout.clone()).expect("stdout utf8");
-    let stderr = String::from_utf8(result.stderr.clone()).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-    let chain_ms_line = stdout
-        .lines()
-        .find(|line| line.starts_with("setImmediate-chain-ms="))
-        .expect("setImmediate timing line");
-    let chain_ms: u64 = chain_ms_line
-        .trim_start_matches("setImmediate-chain-ms=")
-        .parse()
-        .expect("parse setImmediate timing");
-    println!("setImmediate 1000-chain elapsed ms: {chain_ms}");
-    if run_timing_sensitive_tests() {
-        assert!(
-            chain_ms < 500,
-            "setImmediate 1000-chain elapsed too high: {chain_ms}ms"
-        );
-    }
-
-    let only_immediate_execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id.clone(),
-            argv: vec![String::from("./entry.js")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-setImmediate(() => {
-  console.log("only-immediate-fired");
-});
-"#,
-            )),
-        })
-        .expect("start only-immediate JavaScript execution");
-
-    let only_immediate_result = only_immediate_execution
-        .wait()
-        .expect("wait for only-immediate JavaScript execution");
-    let only_immediate_stdout =
-        String::from_utf8(only_immediate_result.stdout.clone()).expect("stdout utf8");
-    let only_immediate_stderr =
-        String::from_utf8(only_immediate_result.stderr.clone()).expect("stderr utf8");
-    assert_eq!(
-        only_immediate_result.exit_code, 0,
-        "stdout:\n{only_immediate_stdout}\nstderr:\n{only_immediate_stderr}"
-    );
-    assert!(
-        only_immediate_stdout.contains("only-immediate-fired"),
-        "only pending setImmediate did not fire; stdout:\n{only_immediate_stdout}"
-    );
-    assert!(
-        only_immediate_stderr.is_empty(),
-        "unexpected stderr: {only_immediate_stderr}"
-    );
-}
-
-fn javascript_execution_v8_readline_polyfill_emits_lines() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-import { EventEmitter } from "node:events";
-import { createInterface } from "node:readline";
-
-const input = new EventEmitter();
-const seen = [];
-const rl = createInterface({ input });
-rl.on("line", (line) => seen.push(line));
-input.emit("data", "alpha\nbeta\r\ngamma");
-input.emit("end");
-
-if (seen.length !== 3) {
-  throw new Error(`expected 3 lines, got ${JSON.stringify(seen)}`);
-}
-if (seen[0] !== "alpha" || seen[1] !== "beta" || seen[2] !== "gamma") {
-  throw new Error(`unexpected lines: ${JSON.stringify(seen)}`);
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_builtin_wrappers_expose_common_named_exports() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-import { spawn, spawnSync } from "node:child_process";
-import { closeSync, existsSync, mkdirSync, openSync, readFileSync, readSync, readdirSync, realpathSync, statSync, writeFileSync } from "node:fs";
-import { homedir, platform } from "node:os";
-import { basename, dirname, isAbsolute, join, resolve } from "node:path";
-
-if (typeof spawn !== "function" || typeof spawnSync !== "function") throw new Error("child_process exports missing");
-if (typeof closeSync !== "function" || typeof existsSync !== "function" || typeof mkdirSync !== "function") throw new Error("fs exports missing");
-if (typeof openSync !== "function" || typeof readFileSync !== "function" || typeof readSync !== "function") throw new Error("fs exports missing");
-if (typeof readdirSync !== "function" || typeof realpathSync !== "function" || typeof statSync !== "function" || typeof writeFileSync !== "function") throw new Error("fs exports missing");
-if (typeof homedir !== "function" || typeof platform !== "function") throw new Error("os exports missing");
-if (typeof basename !== "function" || typeof dirname !== "function" || typeof isAbsolute !== "function" || typeof join !== "function" || typeof resolve !== "function") throw new Error("path exports missing");
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_child_process_conformance_matches_host_node() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("entry.mjs"),
-        r#"
-import childProcess from "node:child_process";
-import fs from "node:fs";
-
-fs.writeFileSync("async-out.txt", Buffer.from("async:beta-async\n", "utf8"));
-
-const syncPiped = childProcess.spawnSync("/bin/cat", [], {
-  input: Buffer.from("alpha-sync"),
-});
-const syncError = childProcess.spawnSync("/bin/cat", ["definitely-missing-agentos-file"]);
-const syncTimeout = childProcess.spawnSync("/bin/sh", ["-c", "sleep 2"], {
-  timeout: 50,
-  killSignal: "SIGTERM",
-  encoding: "utf8",
-});
-const stdinDestroyChild = childProcess.spawn("/bin/cat", [], {
-  stdio: ["pipe", "pipe", "pipe"],
-});
-if (typeof stdinDestroyChild.stdin.destroy !== "function") {
-  throw new Error("child stdin did not expose destroy()");
-}
-if (
-  typeof stdinDestroyChild.stdout?.destroy !== "function" ||
-  typeof stdinDestroyChild.stderr?.destroy !== "function"
-) {
-  throw new Error("child output streams did not expose destroy()");
-}
-const stdinDestroyStatus = await new Promise((resolve, reject) => {
-  stdinDestroyChild.on("error", reject);
-  stdinDestroyChild.on("close", (code) => resolve(code));
-  stdinDestroyChild.stdin.destroy();
-  if (stdinDestroyChild.stdin.destroyed !== true) {
-    reject(new Error("child stdin destroy() did not mark the stream destroyed"));
-  }
-});
-
-const stdinCallbackResult = await new Promise((resolve, reject) => {
-  const child = childProcess.spawn("/bin/cat", [], {
-    stdio: ["pipe", "pipe", "pipe"],
-  });
-  const timer = setTimeout(() => {
-    reject(new Error("spawn(/bin/cat) stdin callback probe did not close within 2s"));
-  }, 2000);
-  const stdout = [];
-  const stderr = [];
-  let writeCallbackError = null;
-  let writeCallbackCalled = false;
-  let endCallbackCalled = false;
-  child.stdout.on("data", (chunk) => {
-    stdout.push(Buffer.from(chunk));
-  });
-  child.stderr.on("data", (chunk) => {
-    stderr.push(Buffer.from(chunk));
-  });
-  child.on("error", reject);
-  child.on("close", (code, signal) => {
-    clearTimeout(timer);
-    resolve({
-      code,
-      signal,
-      writeCallbackCalled,
-      writeCallbackError,
-      endCallbackCalled,
-      stdoutBase64: Buffer.concat(stdout).toString("base64"),
-      stderrBase64: Buffer.concat(stderr).toString("base64"),
-    });
-  });
-  child.stdin.write(Buffer.from("callback:gamma"), (error) => {
-    writeCallbackCalled = true;
-    writeCallbackError = error ? String(error?.message ?? error) : null;
-    child.stdin.end(() => {
-      endCallbackCalled = true;
-    });
-  });
-});
-
-const asyncResult = await new Promise((resolve, reject) => {
-  const child = childProcess.spawn("/bin/cat", ["async-out.txt"], {
-    stdio: ["ignore", "pipe", "pipe"],
-  });
-  const timer = setTimeout(() => {
-    reject(new Error("spawn(/bin/cat async-out.txt) did not close within 2s"));
-  }, 2000);
-  const stdout = [];
-  const stderr = [];
-  child.stdout.on("data", (chunk) => {
-    stdout.push(Buffer.from(chunk));
-  });
-  child.stderr.on("data", (chunk) => {
-    stderr.push(Buffer.from(chunk));
-  });
-  child.on("error", reject);
-  child.on("close", (code, signal) => {
-    clearTimeout(timer);
-    resolve({
-      code,
-      signal,
-      stdoutBase64: Buffer.concat(stdout).toString("base64"),
-      stderrBase64: Buffer.concat(stderr).toString("base64"),
-    });
-  });
-});
-
-const asyncErrorResult = await new Promise((resolve, reject) => {
-  const child = childProcess.spawn("/bin/cat", ["definitely-missing-agentos-file"], {
-    stdio: ["ignore", "pipe", "pipe"],
-  });
-  const timer = setTimeout(() => {
-    reject(new Error("spawn(/bin/cat missing-file) did not close within 2s"));
-  }, 2000);
-  const stdout = [];
-  const stderr = [];
-  child.stdout.on("data", (chunk) => {
-    stdout.push(Buffer.from(chunk));
-  });
-  child.stderr.on("data", (chunk) => {
-    stderr.push(Buffer.from(chunk));
-  });
-  child.on("error", reject);
-  child.on("close", (code, signal) => {
-    clearTimeout(timer);
-    resolve({
-      code,
-      signal,
-      stdoutBase64: Buffer.concat(stdout).toString("base64"),
-      stderrBase64: Buffer.concat(stderr).toString("base64"),
-    });
-  });
-});
-
-console.log(JSON.stringify({
-  syncPipedStatus: syncPiped.status,
-  syncPipedStdoutBase64: Buffer.from(syncPiped.stdout ?? []).toString("base64"),
-  syncPipedStderrBase64: Buffer.from(syncPiped.stderr ?? []).toString("base64"),
-  syncErrorStatus: syncError.status,
-  syncErrorStdoutBase64: Buffer.from(syncError.stdout ?? []).toString("base64"),
-  syncErrorStderrBase64: Buffer.from(syncError.stderr ?? []).toString("base64"),
-  syncTimeoutStatus: syncTimeout.status,
-  syncTimeoutSignal: syncTimeout.signal,
-  syncTimeoutErrorCode: syncTimeout.error?.code,
-  syncTimeoutErrorMessage: syncTimeout.error?.message,
-  syncTimeoutStdout: syncTimeout.stdout,
-  syncTimeoutStderr: syncTimeout.stderr,
-  stdinDestroyStatus,
-  stdinCallbackCode: stdinCallbackResult.code,
-  stdinCallbackSignal: stdinCallbackResult.signal,
-  stdinCallbackWriteCallbackCalled: stdinCallbackResult.writeCallbackCalled,
-  stdinCallbackWriteCallbackError: stdinCallbackResult.writeCallbackError,
-  stdinCallbackEndCallbackCalled: stdinCallbackResult.endCallbackCalled,
-  stdinCallbackStdoutBase64: stdinCallbackResult.stdoutBase64,
-  stdinCallbackStderrBase64: stdinCallbackResult.stderrBase64,
-  asyncCode: asyncResult.code,
-  asyncSignal: asyncResult.signal,
-  asyncStdoutBase64: asyncResult.stdoutBase64,
-  asyncStderrBase64: asyncResult.stderrBase64,
-  asyncErrorCode: asyncErrorResult.code,
-  asyncErrorSignal: asyncErrorResult.signal,
-  asyncErrorStdoutBase64: asyncErrorResult.stdoutBase64,
-  asyncErrorStderrBase64: asyncErrorResult.stderrBase64,
-}));
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let host = run_host_node_json(temp.path(), &temp.path().join("entry.mjs"));
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let result = wait_with_host_child_process_bridge(execution, temp.path());
-    let stdout = String::from_utf8(result.stdout).expect("stdout utf8");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let guest: Value = serde_json::from_str(stdout.trim()).expect("parse guest JSON");
-    assert_eq!(
-        guest,
-        host,
-        "guest child_process result diverged from host Node\nhost: {}\nguest: {}",
-        serde_json::to_string_pretty(&host).expect("pretty host JSON"),
-        serde_json::to_string_pretty(&guest).expect("pretty guest JSON")
-    );
-}
-
-fn javascript_execution_v8_web_stream_globals_support_basic_io() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-const writes = [];
-const writable = new WritableStream({
-  write(chunk) {
-    writes.push(new TextDecoder().decode(chunk));
-  },
-});
-const writer = writable.getWriter();
-await writer.write(new TextEncoder().encode("hello"));
-writer.releaseLock();
-
-const readable = new ReadableStream({
-  start(controller) {
-    controller.enqueue("alpha");
-    controller.close();
-  },
-});
-const reader = readable.getReader();
-const first = await reader.read();
-const second = await reader.read();
-reader.releaseLock();
-
-if (writes.length !== 1 || writes[0] !== "hello") {
-  throw new Error(`unexpected writes: ${JSON.stringify(writes)}`);
-}
-if (first.value !== "alpha" || first.done !== false || second.done !== true) {
-  throw new Error(`unexpected reads: ${JSON.stringify({ first, second })}`);
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_text_codec_streams_support_pipe_through() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-const {
-  TextEncoderStream: ModuleTextEncoderStream,
-  TextDecoderStream: ModuleTextDecoderStream,
-} = await import("node:stream/web");
-
-if (ModuleTextEncoderStream !== TextEncoderStream) {
-  throw new Error("node:stream/web TextEncoderStream export diverged from global");
-}
-if (ModuleTextDecoderStream !== TextDecoderStream) {
-  throw new Error("node:stream/web TextDecoderStream export diverged from global");
-}
-
-if (new TextEncoderStream().encoding !== "utf-8") {
-  throw new Error("unexpected TextEncoderStream encoding");
-}
-
-const decoder = new ReadableStream({
-  start(controller) {
-    controller.enqueue(new Uint8Array([0xe2, 0x82]));
-    controller.enqueue(new Uint8Array([0xac, 0x21]));
-    controller.close();
-  },
-}).pipeThrough(new TextDecoderStream());
-
-const decoderReader = decoder.getReader();
-const decoded = [];
-for (;;) {
-  const { done, value } = await decoderReader.read();
-  if (done) break;
-  decoded.push(value);
-}
-decoderReader.releaseLock();
-
-if (decoded.join("") !== "€!") {
-  throw new Error(`unexpected decoded output: ${JSON.stringify(decoded)}`);
-}
-
-const encoded = new ReadableStream({
-  start(controller) {
-    controller.enqueue("hello");
-    controller.enqueue(" world");
-    controller.close();
-  },
-}).pipeThrough(new TextEncoderStream());
-
-const encodedReader = encoded.getReader();
-const bytes = [];
-for (;;) {
-  const { done, value } = await encodedReader.read();
-  if (done) break;
-  bytes.push(...value);
-}
-encodedReader.releaseLock();
-
-const roundTrip = new TextDecoder().decode(new Uint8Array(bytes));
-if (roundTrip !== "hello world") {
-  throw new Error(`unexpected encoded output: ${roundTrip}`);
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_abort_controller_dispatches_abort() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-const controller = new AbortController();
-let seenAbort = false;
-controller.signal.addEventListener("abort", () => {
-  seenAbort = true;
-});
-controller.abort("stop");
-if (!controller.signal.aborted || controller.signal.reason !== "stop" || !seenAbort) {
-  throw new Error("abort controller did not update signal state");
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_request_accepts_abort_signal() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-const controller = new AbortController();
-const request = new Request("http://example.com/test", {
-  method: "POST",
-  body: JSON.stringify({ ok: true }),
-  duplex: "half",
-  signal: controller.signal,
-  headers: { "content-type": "application/json" },
-});
-if (!(request.signal instanceof AbortSignal)) {
-  throw new Error("request signal was not preserved");
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_abort_signal_static_helpers_work() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-if (typeof AbortSignal.timeout !== "function") {
-  throw new Error("AbortSignal.timeout missing");
-}
-if (typeof AbortSignal.any !== "function") {
-  throw new Error("AbortSignal.any missing");
-}
-
-const timeoutSignal = AbortSignal.timeout(25);
-let timeoutEventCount = 0;
-timeoutSignal.addEventListener("abort", () => {
-  timeoutEventCount += 1;
-});
-await new Promise((resolve) => setTimeout(resolve, 60));
-if (!timeoutSignal.aborted) {
-  throw new Error("AbortSignal.timeout did not abort");
-}
-if (timeoutEventCount !== 1) {
-  throw new Error(`unexpected timeout event count: ${timeoutEventCount}`);
-}
-if (!timeoutSignal.reason || timeoutSignal.reason.name !== "AbortError") {
-  throw new Error(`unexpected timeout reason: ${String(timeoutSignal.reason?.name ?? timeoutSignal.reason)}`);
-}
-
-const controller = new AbortController();
-const sibling = new AbortController();
-const composite = AbortSignal.any([sibling.signal, controller.signal]);
-let compositeReason;
-composite.addEventListener("abort", () => {
-  compositeReason = composite.reason;
-});
-controller.abort("manual-stop");
-await new Promise((resolve) => setTimeout(resolve, 0));
-if (!composite.aborted) {
-  throw new Error("AbortSignal.any did not abort");
-}
-if (compositeReason !== "manual-stop" || composite.reason !== "manual-stop") {
-  throw new Error(`unexpected composite reason: ${String(composite.reason)}`);
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8(result.stdout.clone()).expect("stdout utf8");
-    let stderr = String::from_utf8(result.stderr.clone()).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_schedule_timer_bridge_resolves() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.js")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-(async () => {
-  let resolved = false;
-  await _scheduleTimer.apply(undefined, [15]).then(() => {
-    resolved = true;
-  });
-  if (!resolved) {
-    throw new Error("_scheduleTimer did not resolve");
-  }
-})().catch((error) => {
-  process.exitCode = 1;
-  throw error;
-});
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_kernel_poll_bridge_requests_multiple_fds() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let mut execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.js")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-const result = globalThis._kernelPollRaw.applySyncPromise(undefined, [[
-  { fd: 0, events: 1 },
-  { fd: 1, events: 1 },
-], 250]);
-if (result.readyCount !== 1) {
-  throw new Error(`readyCount=${result.readyCount}`);
-}
-if (result.fds[0]?.revents !== 1 || result.fds[1]?.revents !== 0) {
-  throw new Error(`revents=${JSON.stringify(result.fds)}`);
-}
-console.log(JSON.stringify(result));
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let request = expect_next_sync_rpc(&mut execution, "poll execution event");
-
-    assert_eq!(request.method, "__kernel_poll");
-    assert_eq!(
-        request.args,
-        vec![
-            json!([
-                { "fd": 0, "events": 1 },
-                { "fd": 1, "events": 1 }
-            ]),
-            json!(250),
-        ]
-    );
-
-    execution
-        .respond_sync_rpc_success(
-            request.id,
-            json!({
-                "readyCount": 1,
-                "fds": [
-                    { "fd": 0, "events": 1, "revents": 1 },
-                    { "fd": 1, "events": 1, "revents": 0 }
-                ]
-            }),
-        )
-        .expect("respond to __kernel_poll");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let stdout: Value = serde_json::from_slice(&result.stdout).expect("parse guest stdout JSON");
-    assert_eq!(
-        stdout,
-        json!({
-            "readyCount": 1,
-            "fds": [
-                { "fd": 0, "events": 1, "revents": 1 },
-                { "fd": 1, "events": 1, "revents": 0 }
-            ]
-        })
-    );
-}
-
-fn javascript_execution_v8_crypto_random_sources_use_local_secure_bridge() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.js")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-const first = new Uint8Array(32);
-const second = new Uint8Array(32);
-globalThis.crypto.getRandomValues(first);
-globalThis.crypto.getRandomValues(second);
-
-if (first.every((value) => value === 0)) {
-  throw new Error("first random buffer was all zero");
-}
-if (second.every((value) => value === 0)) {
-  throw new Error("second random buffer was all zero");
-}
-const buffersMatch = first.length === second.length &&
-  first.every((value, index) => value === second[index]);
-if (buffersMatch) {
-  throw new Error("random buffers repeated");
-}
-
-const uuid = globalThis.crypto.randomUUID();
-if (!/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(uuid)) {
-  throw new Error(`invalid uuid: ${uuid}`);
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8(result.stdout.clone()).expect("stdout utf8");
-    let stderr = String::from_utf8(result.stderr.clone()).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-#[test]
-fn javascript_execution_v8_crypto_basic_operations_emit_expected_sync_rpcs() {
-    assert_eq!(
-        map_bridge_method("_cryptoHashDigest"),
-        ("crypto.hashDigest", false)
-    );
-    assert_eq!(
-        map_bridge_method("_cryptoHmacDigest"),
-        ("crypto.hmacDigest", false)
-    );
-    assert_eq!(map_bridge_method("_cryptoPbkdf2"), ("crypto.pbkdf2", false));
-    assert_eq!(map_bridge_method("_cryptoScrypt"), ("crypto.scrypt", false));
-    assert_eq!(
-        map_bridge_method("_netSocketConnectRaw"),
-        ("net.connect", false)
-    );
-    assert_eq!(
-        map_bridge_method("_networkDnsLookupSyncRaw"),
-        ("dns.lookup", false)
-    );
-    assert_eq!(map_bridge_method("_netSocketPollRaw"), ("net.poll", false));
-}
-
-fn javascript_execution_v8_load_polyfill_returns_runtime_module_expressions() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-const pathExpr = _loadPolyfill.applySyncPromise(undefined, ["path"]);
-if (typeof pathExpr !== "string" || !pathExpr.includes("node:path")) {
-  throw new Error(`unexpected path polyfill expression: ${String(pathExpr)}`);
-}
-
-const pathModule = Function('"use strict"; return (' + pathExpr + ');')();
-if (pathModule.join("alpha", "beta") !== "alpha/beta") {
-  throw new Error("path polyfill expression did not resolve the runtime module");
-}
-
-const deniedExpr = _loadPolyfill.applySyncPromise(undefined, ["inspector"]);
-if (typeof deniedExpr !== "string" || !deniedExpr.includes("ERR_ACCESS_DENIED")) {
-  throw new Error(`unexpected denied polyfill expression: ${String(deniedExpr)}`);
-}
-
-let denied = false;
-try {
-  Function('"use strict"; return (' + deniedExpr + ');')();
-} catch (error) {
-  denied = error?.code === "ERR_ACCESS_DENIED";
-}
-if (!denied) {
-  throw new Error("denied polyfill expression did not raise ERR_ACCESS_DENIED");
-}
-
-if (_loadPolyfill.applySyncPromise(undefined, ["not-a-real-builtin"]) !== null) {
-  throw new Error("unknown polyfill name should return null");
-}
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8(result.stdout.clone()).expect("stdout utf8");
-    let stderr = String::from_utf8(result.stderr.clone()).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_stream_wrapper_exports_common_node_classes() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("entry.mjs"),
-        r#"
-import {
-  Duplex,
-  PassThrough,
-  Readable,
-  Transform,
-  Writable,
-  isReadable,
-  isWritable,
-} from "node:stream";
-import { createRequire } from "node:module";
-
-for (const [name, value] of Object.entries({ Duplex, PassThrough, Readable, Transform, Writable })) {
-  if (typeof value !== "function") {
-    throw new Error(`${name} was not exported as a constructor`);
-  }
-}
-
-const require = createRequire(import.meta.url);
-const cjsStream = require("stream");
-if (typeof cjsStream !== "function") {
-  throw new Error("require('stream') should return the legacy Stream constructor");
-}
-if (cjsStream !== cjsStream.Stream) {
-  throw new Error("require('stream').Stream should alias the CommonJS export");
-}
-if (typeof cjsStream.Readable !== "function") {
-  throw new Error("require('stream').Readable should stay available on the constructor export");
-}
-
-const pass = new PassThrough();
-let output = "";
-pass.on("data", (chunk) => {
-  output += Buffer.from(chunk).toString("utf8");
-});
-if (!isReadable(pass) || !isWritable(pass)) {
-  throw new Error("stream helpers misreported passthrough readability");
-}
-pass.end("hello");
-await new Promise((resolve, reject) => {
-  pass.once("close", resolve);
-  pass.once("error", reject);
-});
-
-if (output !== "hello") {
-  throw new Error(`unexpected passthrough output: ${output}`);
-}
-
-const lifecycle = [];
-let writableOutput = "";
-const writable = new Writable({
-  write(chunk, _encoding, callback) {
-    lifecycle.push("write");
-    writableOutput += Buffer.from(chunk).toString("utf8");
-    callback();
-  },
-  destroy(_error, callback) {
-    lifecycle.push("destroy");
-    callback();
-  },
-});
-writable.on("finish", () => lifecycle.push("finish"));
-writable.end("hi");
-await new Promise((resolve, reject) => {
-  writable.once("close", resolve);
-  writable.once("error", reject);
-});
-
-if (writableOutput !== "hi") {
-  throw new Error(`unexpected writable output: ${writableOutput}`);
-}
-if (lifecycle.join(",") !== "write,finish,destroy") {
-  throw new Error(`unexpected writable lifecycle: ${lifecycle.join(",")}`);
-}
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_buffer_wrapper_exposes_commonjs_constants() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("entry.mjs"),
-        r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const bufferModule = require("buffer");
-
-if (typeof bufferModule.constants !== "object" || bufferModule.constants === null) {
-  throw new Error("require('buffer').constants was not exported");
-}
-if (typeof bufferModule.constants.MAX_STRING_LENGTH !== "number") {
-  throw new Error("require('buffer').constants.MAX_STRING_LENGTH was not exported");
-}
-if (typeof bufferModule.kMaxLength !== "number") {
-  throw new Error("require('buffer').kMaxLength was not exported");
-}
-if (bufferModule.Buffer?.constants?.MAX_STRING_LENGTH !== bufferModule.constants.MAX_STRING_LENGTH) {
-  throw new Error("buffer module constants diverged from Buffer.constants");
-}
-if (typeof bufferModule.Blob !== "function") {
-  throw new Error("require('buffer').Blob was not exported");
-}
-if (typeof bufferModule.File !== "function") {
-  throw new Error("require('buffer').File was not exported");
-}
-const file = new bufferModule.File(["hello"], "hello.txt", { type: "text/plain" });
-if (!(file instanceof bufferModule.Blob)) {
-  throw new Error("buffer module File did not extend Blob");
-}
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-#[allow(dead_code)] // quarantined: see the live-stdin/tty harness note above
-fn javascript_execution_v8_tty_module_is_backed_by_live_process() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("entry.mjs"),
-        r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const tty = require("tty");
-
-// tty.isatty / ReadStream / WriteStream read process.std{in,out,err}. When the
-// bridge tty stub captured the `process` object at module-load time it snapshotted
-// `undefined` (process.ts initializes far later in the bundle's module-cycle order),
-// so these threw "Cannot read properties of undefined". Reading the live binding at
-// call time fixes it; this test guards against that regression class.
-if (typeof tty.isatty !== "function") {
-  throw new Error("require('tty').isatty was not exported");
-}
-for (const fd of [0, 1, 2]) {
-  if (typeof tty.isatty(fd) !== "boolean") {
-    throw new Error(`tty.isatty(${fd}) did not return a boolean`);
-  }
-}
-if (typeof tty.ReadStream !== "function" || typeof tty.WriteStream !== "function") {
-  throw new Error("require('tty') stream classes were not exported");
-}
-// Constructing the streams exercises the process-backed stdio getters.
-new tty.ReadStream(0);
-new tty.WriteStream(1);
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_sqlite_module_resolves_via_global_install() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("entry.mjs"),
-        r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-// require("sqlite") routes through the `_sqliteModule` global. That install was
-// dropped once during the network-module split (it fell off the end of the slice),
-// making this throw "ReferenceError: _sqliteModule is not defined". Guard it.
-const sqlite = require("node:sqlite");
-if (typeof sqlite.DatabaseSync !== "function") {
-  throw new Error("require('node:sqlite').DatabaseSync was not exported");
-}
-if (typeof sqlite.StatementSync !== "function") {
-  throw new Error("require('node:sqlite').StatementSync was not exported");
-}
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_commonjs_stack_frames_preserve_module_paths() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("entry.mjs"),
-        r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-require("./probe.cjs");
-"#,
-    );
-    write_fixture(
-        &temp.path().join("probe.cjs"),
-        r#"
-const previousPrepare = Error.prepareStackTrace;
-try {
-  Error.prepareStackTrace = (_error, stack) => stack;
-  const stack = new Error("probe").stack ?? [];
-  const frame = stack.find((callsite) => {
-    const path =
-      callsite.getFileName?.() ?? callsite.getScriptNameOrSourceURL?.();
-    return typeof path === "string" && path.endsWith("/probe.cjs");
-  });
-  if (!frame) {
-    const summary = stack.map((callsite) => ({
-      fileName: callsite.getFileName?.() ?? null,
-      scriptName: callsite.getScriptNameOrSourceURL?.() ?? null,
-      text: String(callsite),
-    }));
-    throw new Error(
-      "CommonJS stack frames did not preserve the module path: " +
-        JSON.stringify(summary),
-    );
-  }
-} finally {
-  Error.prepareStackTrace = previousPrepare;
-}
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_commonjs_main_entrypoints_preserve_entrypoint_paths() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("entry.cjs"),
-        r#"
-const EVAL_FRAMES = new Set(["[eval]", "[eval]-wrapper"]);
-const INTERNAL_FRAME_NAMES = new Set([
-  "readCallsites",
-  "resolveCallerFilePath",
-  "getCurrentFilePath",
-]);
-
-function readCallsites() {
-  const previousPrepare = Error.prepareStackTrace;
-  try {
-    Error.prepareStackTrace = (_error, stack) => stack;
-    return new Error("probe").stack ?? [];
-  } finally {
-    Error.prepareStackTrace = previousPrepare;
-  }
-}
-
-function readCallsitePath(callsite) {
-  const rawPath =
-    callsite.getFileName?.() ?? callsite.getScriptNameOrSourceURL?.();
-  if (!rawPath || rawPath.startsWith("node:") || EVAL_FRAMES.has(rawPath)) {
-    return null;
-  }
-  return rawPath;
-}
-
-function isInternalCallsite(callsite) {
-  const functionName = callsite.getFunctionName?.();
-  if (functionName && INTERNAL_FRAME_NAMES.has(functionName)) {
-    return true;
-  }
-  const methodName = callsite.getMethodName?.();
-  if (methodName && INTERNAL_FRAME_NAMES.has(methodName)) {
-    return true;
-  }
-  const callsiteString = String(callsite);
-  for (const frameName of INTERNAL_FRAME_NAMES) {
-    if (
-      callsiteString.includes(`${frameName} (`) ||
-      callsiteString.includes(`.${frameName} (`)
-    ) {
-      return true;
-    }
-  }
-  return false;
-}
-
-function resolveCallerFilePath() {
-  for (const callsite of readCallsites()) {
-    const filePath = readCallsitePath(callsite);
-    if (!filePath || isInternalCallsite(callsite)) {
-      continue;
-    }
-    return filePath;
-  }
-  throw new Error("Unable to resolve caller file path.");
-}
-
-const resolved = resolveCallerFilePath();
-if (!resolved.endsWith("/entry.cjs")) {
-  throw new Error(`resolved ${resolved} instead of /entry.cjs`);
-}
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.cjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_inline_commonjs_entrypoints_preserve_entrypoint_paths() {
-    let temp = tempdir().expect("create temp dir");
-    let source = String::from(
-        r#"
-const EVAL_FRAMES = new Set(["[eval]", "[eval]-wrapper"]);
-const INTERNAL_FRAME_NAMES = new Set([
-  "readCallsites",
-  "resolveCallerFilePath",
-  "getCurrentFilePath",
-]);
-
-function readCallsites() {
-  const previousPrepare = Error.prepareStackTrace;
-  try {
-    Error.prepareStackTrace = (_error, stack) => stack;
-    return new Error("probe").stack ?? [];
-  } finally {
-    Error.prepareStackTrace = previousPrepare;
-  }
-}
-
-function readCallsitePath(callsite) {
-  const rawPath =
-    callsite.getFileName?.() ?? callsite.getScriptNameOrSourceURL?.();
-  if (!rawPath || rawPath.startsWith("node:") || EVAL_FRAMES.has(rawPath)) {
-    return null;
-  }
-  return rawPath;
-}
-
-function isInternalCallsite(callsite) {
-  const functionName = callsite.getFunctionName?.();
-  if (functionName && INTERNAL_FRAME_NAMES.has(functionName)) {
-    return true;
-  }
-  const methodName = callsite.getMethodName?.();
-  if (methodName && INTERNAL_FRAME_NAMES.has(methodName)) {
-    return true;
-  }
-  const callsiteString = String(callsite);
-  for (const frameName of INTERNAL_FRAME_NAMES) {
-    if (
-      callsiteString.includes(`${frameName} (`) ||
-      callsiteString.includes(`.${frameName} (`)
-    ) {
-      return true;
-    }
-  }
-  return false;
-}
-
-function resolveCallerFilePath() {
-  for (const callsite of readCallsites()) {
-    const filePath = readCallsitePath(callsite);
-    if (!filePath || isInternalCallsite(callsite)) {
-      continue;
-    }
-    return filePath;
-  }
-  throw new Error("Unable to resolve caller file path.");
-}
-
-const resolved = resolveCallerFilePath();
-if (!resolved.endsWith("/entry.cjs")) {
-  throw new Error(`resolved ${resolved} instead of /entry.cjs`);
-}
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.cjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(source),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_inline_commonjs_entrypoints_preserve_commonjs_globals() {
-    let temp = tempdir().expect("create temp dir");
-    let source = String::from(
-        r#"
-console.log(
-  JSON.stringify({
-    filename: __filename,
-    dirname: __dirname,
-    cwd: process.cwd(),
-  }),
-);
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.cjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(source),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let output: Value = serde_json::from_slice(&result.stdout).expect("parse stdout JSON");
-    assert_eq!(
-        output,
-        json!({
-            "filename": "/root/entry.cjs",
-            "dirname": "/root",
-            "cwd": "/root",
-        })
-    );
-}
-
-fn javascript_execution_v8_commonjs_require_exposes_node_metadata() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("dep.cjs"),
-        r#"
-const hadSelfBeforeDelete = Object.prototype.hasOwnProperty.call(
-  require.cache,
-  __filename,
-);
-delete require.cache[__filename];
-module.exports = {
-  cacheType: typeof require.cache,
-  hadSelfBeforeDelete,
-  hasSelfAfterDelete: Object.prototype.hasOwnProperty.call(require.cache, __filename),
-  extensionsType: typeof require.extensions,
-};
-"#,
-    );
-    write_fixture(
-        &temp.path().join("entry.cjs"),
-        r#"
-const dep = require("./dep.cjs");
-console.log(JSON.stringify(dep));
-"#,
-    );
-
-    let mut host = run_host_node_json(temp.path(), &temp.path().join("entry.cjs"));
-    host["hadSelfBeforeDelete"] = json!(true);
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.cjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let guest: Value = serde_json::from_slice(&result.stdout).expect("parse stdout JSON");
-    assert_eq!(
-        guest, host,
-        "guest CommonJS require metadata diverged from host"
-    );
-}
-
-fn javascript_execution_v8_https_agents_expose_options_objects() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("entry.mjs"),
-        r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const http = require("http");
-const https = require("https");
-
-for (const [name, module] of Object.entries({ http, https })) {
-  if (!module.globalAgent || typeof module.globalAgent.options !== "object") {
-    throw new Error(`${name}.globalAgent.options was not initialized`);
-  }
-  const agent = new module.Agent({ keepAlive: true });
-  if (!agent.options || agent.options.keepAlive !== true) {
-    throw new Error(`${name}.Agent did not preserve constructor options`);
-  }
-}
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn javascript_execution_v8_net_socket_readable_state_tracks_ssh2_writable_shape() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("entry.mjs"),
-        r#"
-import net from "node:net";
-
-const isWritable = (stream) =>
-  Boolean(stream?.writable && stream?._readableState?.ended === false);
-
-const socket = new net.Socket();
-if (socket._readableState?.ended !== false) {
-  throw new Error(`expected open socket ended=false, got ${String(socket._readableState?.ended)}`);
-}
-if (!isWritable(socket)) {
-  throw new Error("ssh2 writable probe should accept an open socket");
-}
-
-socket.destroy();
-
-if (socket._readableState?.ended !== true) {
-  throw new Error(`expected destroyed socket ended=true, got ${String(socket._readableState?.ended)}`);
-}
-if (isWritable(socket)) {
-  throw new Error("ssh2 writable probe should reject a destroyed socket");
-}
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-// Regression: when the host briefly stops draining the V8 -> host event channel
-// (capacity = JAVASCRIPT_EVENT_CHANNEL_CAPACITY = 512), a burst of guest events
-// must apply backpressure, not tear the session down. The original code called
-// `v8_session.destroy()` the instant `try_send` returned `Full`, turning a
-// transient backlog into `Exited(1)` with a truncated event stream.
-//
-// The guest synchronously logs far more lines than the event channel holds. The
-// host deliberately does not drain for a window, forcing the bridge onto the
-// formerly fatal full path, then drains everything. With backpressure every line
-// survives and the session exits cleanly; with the destroy-on-full bug the stream
-// is truncated and the session never reaches a clean exit.
-//
-// Note: this exercises the V8->host event channel (JAVASCRIPT_EVENT_CHANNEL_CAPACITY).
-// The upstream per-session v8_session_frames channel does NOT overflow here because
-// each guest `console.log` is a synchronous `applySync` that blocks until the bridge
-// drains it — so the guest cannot run ahead and only ~1 frame is ever in flight. That
-// channel's backpressure (v8_host.rs) only engages under async runtime frame bursts;
-// it shares the same TrackedSyncSender blocking-send mechanism covered by the bridge
-// queue_tracker unit tests.
-fn javascript_execution_v8_event_channel_backpressures_instead_of_destroying_session() {
-    const LINE_COUNT: usize = 1000;
-    let temp = tempdir().expect("create temp dir");
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let mut execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            // Inline code avoids host-serviced module-resolution RPCs, so the
-            // guest runs autonomously and fills the event channel during the
-            // no-drain window below without the host's involvement.
-            wasm_module_bytes: None,
-            inline_code: Some(format!(
-                "for (let i = 0; i < {LINE_COUNT}; i++) {{ console.log('LINE:' + i); }}\n"
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    // Stop draining long enough for the guest burst to overrun the 512-slot
-    // channel and exercise the full path.
-    std::thread::sleep(Duration::from_millis(500));
-
-    let mut stdout = Vec::new();
-    let mut stderr = Vec::new();
-    let mut exit_code = None;
-    // A poll error (e.g. EventChannelClosed) means the session was torn down
-    // out from under us — exactly the destroy-on-full regression — so stop and
-    // let the assertions below report the truncation rather than panicking.
-    while let Ok(event) = execution.poll_event_blocking(Duration::from_secs(10)) {
-        match event {
-            Some(JavascriptExecutionEvent::Stdout(chunk)) => stdout.extend(chunk),
-            Some(JavascriptExecutionEvent::Stderr(chunk)) => stderr.extend(chunk),
-            Some(JavascriptExecutionEvent::SignalState { .. }) => {}
-            Some(JavascriptExecutionEvent::SyncRpcRequest(request)) => {
-                // No host RPCs are expected on this path; service module RPCs if
-                // any surface and answer anything else with null so a stray RPC
-                // cannot wedge the guest.
-                if execution
-                    .try_service_standalone_module_sync_rpc(&request)
-                    .expect("service module sync RPC")
-                {
-                    continue;
-                }
-                execution
-                    .respond_sync_rpc_success(request.id, Value::Null)
-                    .expect("respond to unexpected sync RPC");
-            }
-            Some(JavascriptExecutionEvent::Exited(code)) => {
-                exit_code = Some(code);
-                break;
-            }
-            None => break,
-        }
-    }
-
-    let stdout = String::from_utf8_lossy(&stdout);
-    let stderr = String::from_utf8_lossy(&stderr);
-    let lines = stdout.matches("LINE:").count();
-    assert_eq!(
-        exit_code,
-        Some(0),
-        "session must exit cleanly under backpressure (destroy-on-full regression?); \
-         lines={lines}/{LINE_COUNT}, stderr: {stderr}"
-    );
-    assert_eq!(
-        lines, LINE_COUNT,
-        "every event must survive backpressure with no truncation; stderr: {stderr}"
-    );
-}
-
-// Regression: the in-VM bridge socket read loop (`_pumpBridgeReads`) must yield
-// a macrotask between delivering successive socket chunks instead of draining an
-// entire response synchronously in one burst.
-//
-// `_netSocketReadRaw` is synchronous, so the original loop read every available
-// byte and emitted `readable`/`data` for the whole HTTP response inside a single
-// synchronous stack. That collapses the event-loop turn boundaries that undici's
-// keep-alive socket recycling depends on: it resolves the caller's `fetch`
-// synchronously and only defers reuse with `setImmediate(client[kResume])`, so
-// the caller's microtask dispatches the next request while every pooled Client is
-// still `kNeedDrain`. The pool then allocates a fresh Client + socket per request,
-// each registering EventEmitter listeners until the guest dies
-// (MaxListenersExceededWarning + unbounded memory / OOM).
-//
-// This reproduces the timing deterministically with two scripted socket chunks.
-// A `setImmediate` is scheduled the moment the first chunk is delivered (standing
-// in for `setImmediate(kResume)`); it MUST get a turn before the second chunk
-// surfaces. With the synchronous-burst bug both chunks arrive before the macrotask
-// runs and the guest throws; with the per-chunk macrotask yield the macrotask
-// interleaves between the chunks and the guest prints `ORDER_OK`.
-fn javascript_execution_v8_net_socket_read_loop_yields_macrotask_between_chunks() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("entry.mjs"),
-        r#"
-import net from "node:net";
-
-const order = [];
-let scheduledImmediate = false;
-
-const socket = net.connect({ host: "127.0.0.1", port: 80 });
-
-socket.on("data", (chunk) => {
-  order.push("data:" + chunk.toString());
-  if (!scheduledImmediate) {
-    scheduledImmediate = true;
-    // Stand-in for undici's setImmediate(client[kResume]) keep-alive recycle:
-    // a macrotask scheduled the instant the first socket chunk lands. It must
-    // get a turn before the next chunk is delivered.
-    setImmediate(() => { order.push("immediate"); });
-  }
-});
-
-await new Promise((resolve, reject) => {
-  socket.once("end", resolve);
-  socket.once("close", resolve);
-  socket.once("error", reject);
-});
-
-// Flush any macrotask still pending after the stream ends.
-await new Promise((resolve) => setImmediate(resolve));
-
-const trace = order.join(",");
-const immediateIdx = order.indexOf("immediate");
-const secondChunkIdx = order.indexOf("data:chunk-2");
-if (immediateIdx === -1) {
-  throw new Error("macrotask never ran: " + trace);
-}
-if (secondChunkIdx === -1) {
-  throw new Error("second chunk never delivered: " + trace);
-}
-if (immediateIdx > secondChunkIdx) {
-  throw new Error(
-    "bridge delivered the response in one synchronous burst; the keep-alive " +
-    "macrotask never interleaved between chunks: " + trace,
-  );
-}
-console.log("ORDER_OK:" + trace);
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let mut execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let chunk1 = base64::engine::general_purpose::STANDARD.encode("chunk-1");
-    let chunk2 = base64::engine::general_purpose::STANDARD.encode("chunk-2");
-    let mut socket_reads = 0usize;
-    let mut stdout = Vec::new();
-    let mut stderr = Vec::new();
-
-    let exit_code = loop {
-        match execution
-            .poll_event_blocking(Duration::from_secs(5))
-            .expect("poll net socket bridge event")
-        {
-            Some(JavascriptExecutionEvent::Stdout(chunk)) => stdout.extend(chunk),
-            Some(JavascriptExecutionEvent::Stderr(chunk)) => stderr.extend(chunk),
-            Some(JavascriptExecutionEvent::SignalState { .. }) => {}
-            Some(JavascriptExecutionEvent::SyncRpcRequest(request)) => {
-                if execution
-                    .try_service_standalone_module_sync_rpc(&request)
-                    .expect("service module sync RPC")
-                {
-                    continue;
-                }
-                let request_id = request.id;
-                let response = match request.method.as_str() {
-                    "net.connect" => json!({
-                        "socketId": 1,
-                        "localAddress": "127.0.0.1",
-                        "localPort": 12345,
-                        "localFamily": "IPv4",
-                        "remoteAddress": "127.0.0.1",
-                        "remotePort": 80,
-                        "remoteFamily": "IPv4",
-                    }),
-                    "net.socket_wait_connect" => json!(
-                        "{\"localAddress\":\"127.0.0.1\",\"localPort\":12345,\
-                         \"remoteAddress\":\"127.0.0.1\",\"remotePort\":80}"
-                    ),
-                    // First read -> chunk 1, second read -> chunk 2, then EOF (null).
-                    "net.socket_read" => {
-                        socket_reads += 1;
-                        match socket_reads {
-                            1 => json!(chunk1),
-                            2 => json!(chunk2),
-                            _ => Value::Null,
-                        }
-                    }
-                    // Any incidental socket RPC (set_no_delay, poll, shutdown,
-                    // destroy, ...) gets a benign null so the flow proceeds.
-                    _ => Value::Null,
-                };
-                execution
-                    .respond_sync_rpc_success(request_id, response)
-                    .expect("respond to net socket bridge RPC");
-            }
-            Some(JavascriptExecutionEvent::Exited(exit_code)) => break exit_code,
-            None => panic!("net socket bridge execution timed out while awaiting exit"),
-        }
-    };
-
-    let stdout = String::from_utf8(stdout).expect("stdout utf8");
-    let stderr = String::from_utf8(stderr).expect("stderr utf8");
-    assert_eq!(
-        exit_code, 0,
-        "guest exited non-zero (synchronous-burst regression?)\nstdout: {stdout}\nstderr: {stderr}"
-    );
-    assert!(
-        stdout.contains("ORDER_OK:data:chunk-1,immediate,data:chunk-2"),
-        "expected macrotask to interleave between chunks; stdout: {stdout}\nstderr: {stderr}"
-    );
-    assert_eq!(
-        socket_reads, 3,
-        "expected exactly chunk1, chunk2, EOF reads"
-    );
-}
-
-fn javascript_execution_v8_dynamic_import_accepts_file_urls() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("dep.mjs"),
-        r#"
-export default { value: "ok" };
-"#,
-    );
-    write_fixture(
-        &temp.path().join("entry.mjs"),
-        r#"
-const href = new URL("./dep.mjs", import.meta.url).href;
-const module = await import(href);
-console.log(JSON.stringify({ href, value: module.default.value }));
-"#,
-    );
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "unexpected stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let output: Value = serde_json::from_slice(&result.stdout).expect("parse stdout JSON");
-    assert_eq!(
-        output,
-        json!({
-            "href": "file:///root/dep.mjs",
-            "value": "ok",
-        })
-    );
-}
-
-fn javascript_execution_v8_wasm_instantiate_streaming_never_hangs() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-const bytes = new Uint8Array([
-  0,97,115,109,1,0,0,0,1,5,1,96,0,1,127,3,2,1,0,7,12,1,8,102,111,114,116,121,84,119,111,0,0,10,6,1,4,0,65,42,11,
-]);
-const response = new Response(bytes, {
-  headers: { "content-type": "application/wasm" },
-});
-
-let outcome = "pending";
-try {
-  const result = await WebAssembly.instantiateStreaming(Promise.resolve(response), {});
-  if (typeof result?.instance?.exports?.fortyTwo !== "function") {
-    throw new Error("instantiateStreaming() did not return an exported function");
-  }
-  if (result.instance.exports.fortyTwo() !== 42) {
-    throw new Error(`unexpected wasm export value: ${result.instance.exports.fortyTwo()}`);
-  }
-  outcome = "ok";
-} catch (error) {
-  if (error?.code !== "ERR_NOT_IMPLEMENTED") {
-    throw error;
-  }
-  outcome = error.code;
-}
-
-console.log(outcome);
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8(result.stdout).expect("stdout utf8");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-    let outcome = stdout.trim();
-    assert!(
-        outcome == "ok" || outcome == "ERR_NOT_IMPLEMENTED",
-        "unexpected instantiateStreaming outcome: {outcome}"
-    );
-}
-
-fn javascript_execution_v8_structured_clone_rebinds_to_sandbox_realm() {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-const source = new Uint8Array([1, 2, 3, 4]);
-const typed = structuredClone(source, { transfer: [source.buffer] });
-const map = structuredClone(new Map([["a", 1]]));
-const date = structuredClone(new Date(0));
-const regexSource = /agent/gi;
-regexSource.lastIndex = 2;
-const regex = structuredClone(regexSource);
-const dataView = structuredClone(new DataView(new Uint8Array([9, 8, 7, 6]).buffer, 1, 2));
-const circular = { label: "loop" };
-circular.self = circular;
-const circularClone = structuredClone(circular);
-const nested = structuredClone({
-  list: [new Uint16Array([5, 6])],
-  set: new Set(["x"]),
-});
-let functionErrorName = null;
-try {
-  structuredClone(() => {});
-} catch (error) {
-  functionErrorName = error?.name ?? String(error);
-}
-console.log(JSON.stringify({
-  typed: {
-    instanceof: typed instanceof Uint8Array,
-    sameConstructor: typed.constructor === Uint8Array,
-    constructorName: typed.constructor?.name,
-    length: typed.length,
-    first: typed[0],
-  },
-  map: {
-    instanceof: map instanceof Map,
-    value: map.get("a"),
-  },
-  date: {
-    instanceof: date instanceof Date,
-    value: date.valueOf(),
-  },
-  regex: {
-    instanceof: regex instanceof RegExp,
-    source: regex.source,
-    flags: regex.flags,
-    lastIndex: regex.lastIndex,
-  },
-  dataView: {
-    instanceof: dataView instanceof DataView,
-    byteLength: dataView.byteLength,
-    first: dataView.getUint8(0),
-  },
-  circular: circularClone !== circular && circularClone.self === circularClone,
-  nested: {
-    typedArrayInstanceof: nested.list[0] instanceof Uint16Array,
-    setInstanceof: nested.set instanceof Set,
-    setValue: nested.set.has("x"),
-  },
-  functionErrorName,
-}));
-"#,
-            )),
-        })
-        .expect("start JavaScript execution");
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(result.exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(result.stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let output: Value = serde_json::from_slice(&result.stdout).expect("parse stdout JSON");
-    assert_eq!(
-        output,
-        json!({
-            "typed": {
-                "instanceof": true,
-                "sameConstructor": true,
-                "constructorName": "Uint8Array",
-                "length": 4,
-                "first": 1,
-            },
-            "map": {
-                "instanceof": true,
-                "value": 1,
-            },
-            "date": {
-                "instanceof": true,
-                "value": 0,
-            },
-            "regex": {
-                "instanceof": true,
-                "source": "agent",
-                "flags": "gi",
-                "lastIndex": 2,
-            },
-            "dataView": {
-                "instanceof": true,
-                "byteLength": 2,
-                "first": 8,
-            },
-            "circular": true,
-            "nested": {
-                "typedArrayInstanceof": true,
-                "setInstanceof": true,
-                "setValue": true,
-            },
-            "functionErrorName": "DataCloneError",
-        })
-    );
-}
-
-// ---------------------------------------------------------------------------
-// jsRuntime platform / module-resolution coverage
-// ---------------------------------------------------------------------------
-
-fn js_runtime_env(pairs: &[(&str, &str)]) -> BTreeMap<String, String> {
-    pairs
-        .iter()
-        .map(|(key, value)| (String::from(*key), String::from(*value)))
-        .collect()
-}
-
-fn run_js_runtime_guest(
-    env: BTreeMap<String, String>,
-    inline_code: &str,
-) -> JavascriptExecutionResult {
-    let temp = tempdir().expect("create temp dir");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env,
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(inline_code.to_owned()),
-        })
-        .expect("start JavaScript execution");
-    assert!(
-        execution.uses_shared_v8_runtime(),
-        "guest JS must run inside the shared V8 runtime"
-    );
-    execution.wait().expect("wait for JavaScript execution")
-}
-
-/// Run guest code that throws on any policy violation; a clean exit means every
-/// assertion held. (Lower tiers have no `console`, so guest code signals failure
-/// by throwing, not by printing.)
-fn assert_js_runtime_guest_ok(env: BTreeMap<String, String>, inline_code: &str) {
-    let result = run_js_runtime_guest(env, inline_code);
-    let stdout = String::from_utf8_lossy(&result.stdout);
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(
-        result.exit_code, 0,
-        "guest jsRuntime assertion failed\nstdout:\n{stdout}\nstderr:\n{stderr}"
-    );
-}
-
-fn js_runtime_node_platform_keeps_full_node_surface() {
-    // No jsRuntime env == node platform: the full Node surface stays intact and
-    // builtins remain importable (positive control for the scrub tests below).
-    assert_js_runtime_guest_ok(
-        BTreeMap::new(),
-        r#"
-        if (typeof process === "undefined") throw new Error("process missing");
-        if (typeof Buffer === "undefined") throw new Error("Buffer missing");
-        if (typeof require === "undefined") throw new Error("require missing");
-        if (typeof fetch === "undefined") throw new Error("fetch missing");
-        const fs = await import("node:fs");
-        if (typeof fs.readFileSync !== "function") throw new Error("node:fs not usable");
-        "#,
-    );
-}
-
-fn js_runtime_bare_platform_strips_all_host_globals() {
-    // Pentest: nothing host-provided survives, and it cannot be reconstructed via
-    // constructors / property-name tricks. Language + WebAssembly remain.
-    assert_js_runtime_guest_ok(
-        js_runtime_env(&[
-            ("AGENTOS_JS_PLATFORM", "bare"),
-            ("AGENTOS_JS_BUILTIN_ALLOWLIST", "[]"),
-        ]),
-        r#"
-        const banned = [
-          "process","Buffer","require","module","exports","__dirname","__filename","global",
-          "fetch","Headers","Request","Response","URL","URLSearchParams","crypto","structuredClone",
-          "console","setTimeout","setInterval","setImmediate","queueMicrotask",
-          "_processConfig","__agentOSProcessConfigEnv",
-        ];
-        for (const name of banned) {
-          if (typeof globalThis[name] !== "undefined") throw new Error("leaked global: " + name);
-          if (Object.prototype.hasOwnProperty.call(globalThis, name) && globalThis[name] !== undefined) {
-            throw new Error("leaked own prop: " + name);
-          }
-        }
-        // process must not be reachable through the Function constructor either.
-        try {
-          const f = (function(){}).constructor("return typeof process")();
-          if (f !== "undefined") throw new Error("process reachable via Function ctor");
-        } catch (e) { if (String(e).includes("reachable")) throw e; }
-        for (const g of ["JSON","Math","Promise","WebAssembly","Object","Array","Reflect"]) {
-          if (typeof globalThis[g] === "undefined") throw new Error("language global missing: " + g);
-        }
-        // The allow-list plumbing must leave no reachable global: the shim calls the
-        // one-shot init fn and deletes it, and the old reachable allow-list is gone.
-        if (typeof globalThis.__agentOSBuiltinAllowlist !== "undefined") {
-          throw new Error("__agentOSBuiltinAllowlist is still reachable");
-        }
-        if (typeof globalThis.__agentOSInitJsRuntime !== "undefined") {
-          throw new Error("__agentOSInitJsRuntime is still reachable");
-        }
-        "#,
-    );
-}
-
-fn js_runtime_browser_platform_exposes_web_without_node() {
-    assert_js_runtime_guest_ok(
-        js_runtime_env(&[
-            ("AGENTOS_JS_PLATFORM", "browser"),
-            ("AGENTOS_JS_BUILTIN_ALLOWLIST", "[]"),
-        ]),
-        r#"
-        for (const name of ["process","Buffer","require","module","_processConfig","__agentOSProcessConfigEnv"]) {
-          if (typeof globalThis[name] !== "undefined") throw new Error("node global leaked: " + name);
-        }
-        for (const name of ["fetch","URL","TextEncoder","TextDecoder","structuredClone","console","setTimeout"]) {
-          if (typeof globalThis[name] === "undefined") throw new Error("web/universal global missing: " + name);
-        }
-        if (typeof crypto === "undefined" || typeof crypto.subtle === "undefined") {
-          throw new Error("WebCrypto missing");
-        }
-        // crypto must be WebCrypto, not the node:crypto module.
-        if (typeof crypto.randomBytes === "function" || typeof crypto.createHash === "function") {
-          throw new Error("node:crypto leaked through globalThis.crypto");
-        }
-        // node:* builtins are denied under browser by the bridge gate, which throws
-        // an error with code === "ERR_ACCESS_DENIED".
-        let code = null;
-        try { await import("node:fs"); } catch (e) { code = e && e.code; }
-        if (code !== "ERR_ACCESS_DENIED") {
-          throw new Error("expected ERR_ACCESS_DENIED, got " + code);
-        }
-        "#,
-    );
-}
-
-fn js_runtime_neutral_platform_drops_web_keeps_universal() {
-    assert_js_runtime_guest_ok(
-        js_runtime_env(&[
-            ("AGENTOS_JS_PLATFORM", "neutral"),
-            ("AGENTOS_JS_BUILTIN_ALLOWLIST", "[]"),
-        ]),
-        r#"
-        for (const name of ["process","Buffer","require","fetch","URL","crypto","structuredClone"]) {
-          if (typeof globalThis[name] !== "undefined") throw new Error("global leaked at neutral: " + name);
-        }
-        for (const name of ["console","setTimeout","queueMicrotask","TextEncoder","WebAssembly"]) {
-          if (typeof globalThis[name] === "undefined") throw new Error("universal global missing: " + name);
-        }
-        "#,
-    );
-}
-
-fn js_runtime_module_resolution_none_denies_all_imports() {
-    // AGENTOS_JS_BUILTIN_ALLOWLIST=[] denies builtins; moduleResolution=none denies
-    // bare AND relative specifiers via static import, dynamic import, and require.
-    assert_js_runtime_guest_ok(
-        js_runtime_env(&[
-            ("AGENTOS_JS_MODULE_RESOLUTION", "none"),
-            ("AGENTOS_JS_BUILTIN_ALLOWLIST", "[]"),
-        ]),
-        r#"
-        let n = 0;
-        try { await import("node:fs"); } catch { n++; }
-        try { await import("lodash"); } catch { n++; }
-        try { await import("./local.mjs"); } catch { n++; }
-        if (n !== 3) throw new Error("expected all imports denied, denied=" + n);
-        "#,
-    );
-}
-
-fn js_runtime_module_resolution_relative_allows_local_denies_bare() {
-    // Write a local module into the guest cwd, then assert relative resolves while
-    // bare + builtin do not.
-    let temp = tempdir().expect("create temp dir");
-    std::fs::write(temp.path().join("local.mjs"), "export const ok = 42;\n")
-        .expect("write local module");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: js_runtime_env(&[
-                ("AGENTOS_JS_MODULE_RESOLUTION", "relative"),
-                ("AGENTOS_JS_BUILTIN_ALLOWLIST", "[]"),
-            ]),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-                const local = await import("./local.mjs");
-                if (local.ok !== 42) throw new Error("relative import failed");
-                let bareDenied = false;
-                try { await import("lodash"); } catch { bareDenied = true; }
-                if (!bareDenied) throw new Error("bare specifier was not denied under relative");
-                let builtinDenied = false;
-                try { await import("node:fs"); } catch { builtinDenied = true; }
-                if (!builtinDenied) throw new Error("node:fs was not denied under relative");
-                "#,
-            )),
-        })
-        .expect("start JavaScript execution");
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(
-        result.exit_code, 0,
-        "relative-resolution test failed\nstderr:\n{stderr}"
-    );
-}
-
-fn js_runtime_node_platform_allow_list_restricts_builtins() {
-    // platform=node with an explicit allow-list of just "path": node:path resolves,
-    // node:fs is denied.
-    assert_js_runtime_guest_ok(
-        js_runtime_env(&[("AGENTOS_JS_BUILTIN_ALLOWLIST", "[\"path\"]")]),
-        r#"
-        const path = await import("node:path");
-        if (typeof path.join !== "function") throw new Error("node:path should be allowed");
-        let denied = false;
-        try { await import("node:fs"); } catch { denied = true; }
-        if (!denied) throw new Error("node:fs should be denied when not in the allow-list");
-        "#,
-    );
-}
-
-fn js_runtime_browser_loads_cjs_npm_package() {
-    // Regression guard: the per-execution shim must NOT scrub the internal CJS
-    // helpers under browser, so an npm CommonJS package still loads via the
-    // ESM->CJS interop path. node resolution is the browser default (do not set
-    // AGENTOS_JS_MODULE_RESOLUTION).
-    let temp = tempdir().expect("create temp dir");
-    let pkg_dir = temp.path().join("node_modules").join("demo-pkg");
-    std::fs::create_dir_all(&pkg_dir).expect("create demo-pkg dir");
-    std::fs::write(
-        pkg_dir.join("package.json"),
-        r#"{"name":"demo-pkg","version":"1.0.0","main":"index.js"}"#,
-    )
-    .expect("write package.json");
-    std::fs::write(
-        pkg_dir.join("index.js"),
-        "module.exports = { answer: 42 };\n",
-    )
-    .expect("write index.js");
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: js_runtime_env(&[
-                ("AGENTOS_JS_PLATFORM", "browser"),
-                ("AGENTOS_JS_BUILTIN_ALLOWLIST", "[]"),
-            ]),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-                const pkg = await import("demo-pkg");
-                const v = pkg.answer ?? pkg.default?.answer;
-                if (v !== 42) throw new Error("npm CJS import failed: " + JSON.stringify(v));
-                "#,
-            )),
-        })
-        .expect("start JavaScript execution");
-    let result = execution.wait().expect("wait for JavaScript execution");
-    let stderr = String::from_utf8_lossy(&result.stderr);
-    assert_eq!(
-        result.exit_code, 0,
-        "browser npm CJS load test failed\nstderr:\n{stderr}"
-    );
-}
-
-fn js_runtime_browser_fetch_is_callable() {
-    // fetch must survive the browser scrub and be wired to the kernel socket
-    // table: calling it returns a thenable that rejects on an unreachable host
-    // rather than throwing synchronously or being undefined.
-    assert_js_runtime_guest_ok(
-        js_runtime_env(&[
-            ("AGENTOS_JS_PLATFORM", "browser"),
-            ("AGENTOS_JS_BUILTIN_ALLOWLIST", "[]"),
-        ]),
-        r#"
-        if (typeof fetch !== "function") throw new Error("fetch missing");
-        let threwSync = false, settled = "none";
-        let p;
-        try { p = fetch("http://127.0.0.1:1/"); } catch { threwSync = true; }
-        if (threwSync) throw new Error("fetch threw synchronously");
-        if (!p || typeof p.then !== "function") throw new Error("fetch did not return a promise");
-        try { await p; settled = "resolved"; } catch { settled = "rejected"; }
-        if (settled !== "rejected") {
-          throw new Error("expected fetch to reject on unreachable host, got " + settled);
-        }
-        "#,
-    );
-}
-
-// SE-EXEC-04 (B.2 / F-001): with an OPT-IN CPU-time budget set, a CPU-bound
-// `while (true) {}` guest must be terminated by the TRUE CPU-time watchdog
-// instead of pinning a core on the shared, slot-bounded V8 runtime and starving
-// peers. The watchdog samples the execution thread's per-thread CPU clock, so a
-// tight busy loop burns its budget quickly and is killed.
-//
-// This is the BOUNDED variant: it sets a small explicit CPU budget via typed
-// `limits.jsRuntime.cpuTimeLimitMs` so the watchdog fires fast. The guest run is
-// fenced behind a worker thread + recv timeout so a regression surfaces as a
-// clear failure instead of a CI hang.
-fn javascript_infinite_loop_is_terminated_by_cpu_watchdog() {
-    let (tx, rx) = mpsc::channel::<(i32, String, String)>();
-    thread::spawn(move || {
-        let temp = match tempdir() {
-            Ok(temp) => temp,
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("tempdir failed: {error}")));
-                return;
-            }
-        };
-        let mut engine = JavascriptExecutionEngine::default();
-        let context = engine.create_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-js"),
-            bootstrap_module: None,
-            compile_cache_root: None,
-        });
-
-        let execution = engine.start_execution(StartJavascriptExecutionRequest {
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            // Small bounded budget so the watchdog terminates the runaway fast.
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from("while (true) {}\n")),
-            limits: JavascriptExecutionLimits {
-                cpu_time_limit_ms: Some(750),
-                ..Default::default()
-            },
-            guest_runtime: Default::default(),
-        });
-
-        match execution {
-            Ok(execution) => match execution.wait() {
-                Ok(result) => {
-                    let stdout = String::from_utf8_lossy(&result.stdout).into_owned();
-                    let stderr = String::from_utf8_lossy(&result.stderr).into_owned();
-                    let _ = tx.send((result.exit_code, stdout, stderr));
-                }
-                Err(error) => {
-                    let _ = tx.send((-1, String::new(), format!("wait failed: {error}")));
-                }
-            },
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("start failed: {error}")));
-            }
-        }
-    });
-
-    match rx.recv_timeout(Duration::from_secs(20)) {
-        Ok((exit_code, stdout, stderr)) => {
-            // The watchdog must terminate the loop with a nonzero exit code.
-            assert_ne!(
-                exit_code, 0,
-                "infinite loop returned a clean exit instead of being terminated by the CPU watchdog: stdout={stdout} stderr={stderr}"
-            );
-            // And it must be attributed to the CPU-time budget specifically.
-            assert!(
-                stderr.contains("ERR_SCRIPT_CPU_BUDGET_EXCEEDED")
-                    || stderr.contains("CPU-time budget"),
-                "termination was not attributed to the CPU-time budget: stdout={stdout} stderr={stderr}"
-            );
-        }
-        Err(_) => {
-            // No result within the budget => the watchdog never armed/fired and the
-            // CPU-bound guest ran unbounded. This is exactly the F-001 break.
-            panic!(
-                "infinite-loop guest was NOT terminated by the CPU watchdog \
-                 (wait() never returned within the bounded test budget => unbounded CPU runaway)"
-            );
-        }
-    }
-}
-
-// SE-EXEC-04 (F-001) CRITICAL NEGATIVE: with a CPU-time budget set, a guest that
-// mostly AWAITS (timers / idle) past the budget window must NOT be killed. The
-// watchdog measures TRUE active-JS CPU time (per-thread CPU clock), which does not
-// advance while the thread is parked awaiting a timer, so idle/await is excluded.
-//
-// The guest sleeps for ~1.5s of wall time while the CPU budget is only 300ms. A
-// wall-clock timer would have killed it; the CPU-time budget must not, because the
-// guest burns almost no CPU. This is what proves I/O/idle wait is excluded.
-fn javascript_awaiting_guest_is_not_killed_by_cpu_budget() {
-    let (tx, rx) = mpsc::channel::<(i32, String, String)>();
-    thread::spawn(move || {
-        let temp = match tempdir() {
-            Ok(temp) => temp,
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("tempdir failed: {error}")));
-                return;
-            }
-        };
-        let mut engine = JavascriptExecutionEngine::default();
-        let context = engine.create_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-js-await"),
-            bootstrap_module: None,
-            compile_cache_root: None,
-        });
-
-        let execution = engine.start_execution(StartJavascriptExecutionRequest {
-            vm_id: String::from("vm-js-await"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            // CPU budget (300ms) much SMALLER than the wall time the guest spends
-            // awaiting (~1.5s). A correct CPU-time budget excludes the idle wait.
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                "await new Promise((resolve) => setTimeout(resolve, 1500));\n\
-                 console.log('awaited-ok');\n",
-            )),
-            limits: JavascriptExecutionLimits {
-                cpu_time_limit_ms: Some(300),
-                ..Default::default()
-            },
-            guest_runtime: Default::default(),
-        });
-
-        match execution {
-            Ok(execution) => match execution.wait() {
-                Ok(result) => {
-                    let stdout = String::from_utf8_lossy(&result.stdout).into_owned();
-                    let stderr = String::from_utf8_lossy(&result.stderr).into_owned();
-                    let _ = tx.send((result.exit_code, stdout, stderr));
-                }
-                Err(error) => {
-                    let _ = tx.send((-1, String::new(), format!("wait failed: {error}")));
-                }
-            },
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("start failed: {error}")));
-            }
-        }
-    });
-
-    match rx.recv_timeout(Duration::from_secs(20)) {
-        Ok((exit_code, stdout, stderr)) => {
-            assert!(
-                !stderr.contains("ERR_SCRIPT_CPU_BUDGET_EXCEEDED")
-                    && !stderr.contains("CPU-time budget"),
-                "an awaiting (low-CPU) guest was wrongly killed by the CPU budget; idle/await \
-                 must be excluded: exit_code={exit_code} stdout={stdout} stderr={stderr}"
-            );
-            assert_eq!(
-                exit_code, 0,
-                "awaiting guest should complete cleanly (idle excluded from CPU budget): \
-                 stdout={stdout} stderr={stderr}"
-            );
-            assert!(
-                stdout.contains("awaited-ok"),
-                "awaiting guest did not run to completion: stdout={stdout} stderr={stderr}"
-            );
-        }
-        Err(_) => {
-            panic!(
-                "awaiting guest never produced a result within the bounded test window \
-                 (unexpected hang)"
-            );
-        }
-    }
-}
-
-// SE-EXEC-04 (F-001): with no explicit `limits.jsRuntime.cpuTimeLimitMs`, the
-// CPU-budget watchdog uses the bounded default. A short CPU-bound guest still
-// runs to completion because it stays below that generous active-CPU budget. We
-// deliberately use a SHORT, self-terminating busy loop (not an infinite one) so
-// the test cannot hang if the guard regresses.
-fn javascript_default_cpu_budget_allows_short_cpu_work() {
-    let (tx, rx) = mpsc::channel::<(i32, String, String)>();
-    thread::spawn(move || {
-        let temp = match tempdir() {
-            Ok(temp) => temp,
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("tempdir failed: {error}")));
-                return;
-            }
-        };
-        let mut engine = JavascriptExecutionEngine::default();
-        let context = engine.create_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-js-nolimit"),
-            bootstrap_module: None,
-            compile_cache_root: None,
-        });
-
-        let execution = engine.start_execution(StartJavascriptExecutionRequest {
-            vm_id: String::from("vm-js-nolimit"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            // No CPU-limit env: the watchdog uses the bounded default.
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            // ~600ms busy loop: long enough to have tripped the old 30s default's
-            // removal is irrelevant, but short enough to always finish; importantly
-            // it self-terminates so the test never hangs.
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                "const end = Date.now() + 600;\n\
-                 let n = 0;\n\
-                 while (Date.now() < end) { n++; }\n\
-                 console.log('busy-done', n > 0);\n",
-            )),
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-        });
-
-        match execution {
-            Ok(execution) => match execution.wait() {
-                Ok(result) => {
-                    let stdout = String::from_utf8_lossy(&result.stdout).into_owned();
-                    let stderr = String::from_utf8_lossy(&result.stderr).into_owned();
-                    let _ = tx.send((result.exit_code, stdout, stderr));
-                }
-                Err(error) => {
-                    let _ = tx.send((-1, String::new(), format!("wait failed: {error}")));
-                }
-            },
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("start failed: {error}")));
-            }
-        }
-    });
-
-    match rx.recv_timeout(Duration::from_secs(20)) {
-        Ok((exit_code, stdout, stderr)) => {
-            assert!(
-                !stderr.contains("ERR_SCRIPT_CPU_BUDGET_EXCEEDED")
-                    && !stderr.contains("CPU-time budget"),
-                "guest was CPU-limited despite staying below the default CPU budget: \
-                 exit_code={exit_code} stdout={stdout} stderr={stderr}"
-            );
-            assert_eq!(
-                exit_code, 0,
-                "short busy loop should exit cleanly under the default CPU budget: \
-                 stdout={stdout} stderr={stderr}"
-            );
-            assert!(
-                stdout.contains("busy-done true"),
-                "busy loop did not run to completion under the default CPU budget: \
-                 stdout={stdout} stderr={stderr}"
-            );
-        }
-        Err(_) => {
-            panic!(
-                "no-limit guest never produced a result within the bounded test window \
-                 (unexpected hang)"
-            );
-        }
-    }
-}
-
-// WALL-CLOCK BACKSTOP (opt-in, complements the CPU-time budget): with
-// typed `limits.jsRuntime.wallClockLimitMs` set, a guest that exceeds the wall-clock limit
-// must be terminated and the result attributed to the WALL-CLOCK reason. Crucially,
-// the wall-clock limit counts elapsed REAL time INCLUDING idle/await, so a guest
-// that merely AWAITS past the limit (burning almost no CPU) is still killed — this
-// is exactly what the CPU-time budget does NOT do. The guest awaits ~1.5s while the
-// wall-clock limit is only 300ms, and NO CPU budget is set, so only the wall-clock
-// guard can fire.
-//
-// BOUNDED variant: small explicit wall-clock limit so the backstop fires fast; the
-// run is fenced behind a worker thread + recv timeout so a regression surfaces as a
-// clear failure instead of a CI hang.
-fn javascript_awaiting_guest_is_terminated_by_wall_clock_backstop() {
-    let (tx, rx) = mpsc::channel::<(i32, String, String)>();
-    thread::spawn(move || {
-        let temp = match tempdir() {
-            Ok(temp) => temp,
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("tempdir failed: {error}")));
-                return;
-            }
-        };
-        let mut engine = JavascriptExecutionEngine::default();
-        let context = engine.create_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-js-wallclock"),
-            bootstrap_module: None,
-            compile_cache_root: None,
-        });
-
-        let execution = engine.start_execution(StartJavascriptExecutionRequest {
-            vm_id: String::from("vm-js-wallclock"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            // Wall-clock limit (300ms) much SMALLER than the wall time the guest
-            // spends awaiting (~1.5s). The wall-clock backstop counts idle/await, so
-            // it must terminate the guest even though it burns almost no CPU. No CPU
-            // budget is set, proving the two knobs are independent.
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                "await new Promise((resolve) => setTimeout(resolve, 1500));\n\
-                 console.log('awaited-ok');\n",
-            )),
-            limits: JavascriptExecutionLimits {
-                wall_clock_limit_ms: Some(300),
-                ..Default::default()
-            },
-            guest_runtime: Default::default(),
-        });
-
-        match execution {
-            Ok(execution) => match execution.wait() {
-                Ok(result) => {
-                    let stdout = String::from_utf8_lossy(&result.stdout).into_owned();
-                    let stderr = String::from_utf8_lossy(&result.stderr).into_owned();
-                    let _ = tx.send((result.exit_code, stdout, stderr));
-                }
-                Err(error) => {
-                    let _ = tx.send((-1, String::new(), format!("wait failed: {error}")));
-                }
-            },
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("start failed: {error}")));
-            }
-        }
-    });
-
-    match rx.recv_timeout(Duration::from_secs(20)) {
-        Ok((exit_code, stdout, stderr)) => {
-            assert_ne!(
-                exit_code, 0,
-                "awaiting guest returned a clean exit instead of being terminated by the \
-                 wall-clock backstop: stdout={stdout} stderr={stderr}"
-            );
-            // Must be attributed to the WALL-CLOCK reason specifically (not CPU budget).
-            assert!(
-                stderr.contains("ERR_SCRIPT_WALL_CLOCK_EXCEEDED")
-                    || stderr.contains("wall-clock limit"),
-                "termination was not attributed to the wall-clock backstop: \
-                 stdout={stdout} stderr={stderr}"
-            );
-            assert!(
-                !stderr.contains("ERR_SCRIPT_CPU_BUDGET_EXCEEDED")
-                    && !stderr.contains("CPU-time budget"),
-                "wall-clock termination was wrongly attributed to the CPU budget: \
-                 stdout={stdout} stderr={stderr}"
-            );
-            assert!(
-                !stdout.contains("awaited-ok"),
-                "guest ran to completion despite exceeding the wall-clock limit: \
-                 stdout={stdout} stderr={stderr}"
-            );
-        }
-        Err(_) => {
-            panic!(
-                "awaiting guest was NOT terminated by the wall-clock backstop \
-                 (wait() never returned within the bounded test window => backstop never fired)"
-            );
-        }
-    }
-}
-
-// WALL-CLOCK / CPU-BUDGET INDEPENDENCE: setting ONLY the CPU budget must NOT impose
-// any wall-clock limit. A guest that awaits past a window which the wall-clock limit
-// (if it were armed) would have killed, but burns almost no CPU, must run to
-// completion when only `limits.jsRuntime.cpuTimeLimitMs` is set. This confirms the CPU
-// budget does not secretly behave like a wall-clock timer and that the knobs are
-// independent.
-fn javascript_cpu_budget_only_does_not_impose_wall_clock_limit() {
-    let (tx, rx) = mpsc::channel::<(i32, String, String)>();
-    thread::spawn(move || {
-        let temp = match tempdir() {
-            Ok(temp) => temp,
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("tempdir failed: {error}")));
-                return;
-            }
-        };
-        let mut engine = JavascriptExecutionEngine::default();
-        let context = engine.create_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-js-cpu-only"),
-            bootstrap_module: None,
-            compile_cache_root: None,
-        });
-
-        let execution = engine.start_execution(StartJavascriptExecutionRequest {
-            vm_id: String::from("vm-js-cpu-only"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            // Only the CPU budget is set (300ms). The guest awaits ~1.2s of wall
-            // time but burns no CPU, so neither guard should fire — proving the CPU
-            // budget alone does NOT arm a wall-clock limit.
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                "await new Promise((resolve) => setTimeout(resolve, 1200));\n\
-                 console.log('cpu-only-ok');\n",
-            )),
-            limits: JavascriptExecutionLimits {
-                cpu_time_limit_ms: Some(300),
-                ..Default::default()
-            },
-            guest_runtime: Default::default(),
-        });
-
-        match execution {
-            Ok(execution) => match execution.wait() {
-                Ok(result) => {
-                    let stdout = String::from_utf8_lossy(&result.stdout).into_owned();
-                    let stderr = String::from_utf8_lossy(&result.stderr).into_owned();
-                    let _ = tx.send((result.exit_code, stdout, stderr));
-                }
-                Err(error) => {
-                    let _ = tx.send((-1, String::new(), format!("wait failed: {error}")));
-                }
-            },
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("start failed: {error}")));
-            }
-        }
-    });
-
-    match rx.recv_timeout(Duration::from_secs(20)) {
-        Ok((exit_code, stdout, stderr)) => {
-            assert!(
-                !stderr.contains("ERR_SCRIPT_WALL_CLOCK_EXCEEDED")
-                    && !stderr.contains("wall-clock limit"),
-                "a wall-clock limit fired despite only the CPU budget being set; the knobs \
-                 must be independent: exit_code={exit_code} stdout={stdout} stderr={stderr}"
-            );
-            assert_eq!(
-                exit_code, 0,
-                "awaiting guest should complete cleanly with only a CPU budget set \
-                 (idle excluded, no wall-clock limit): stdout={stdout} stderr={stderr}"
-            );
-            assert!(
-                stdout.contains("cpu-only-ok"),
-                "guest did not run to completion with only a CPU budget set: \
-                 stdout={stdout} stderr={stderr}"
-            );
-        }
-        Err(_) => {
-            panic!(
-                "cpu-budget-only guest never produced a result within the bounded test window \
-                 (unexpected hang)"
-            );
-        }
-    }
-}
-
-// WALL-CLOCK OPT-IN: with no explicit `limits.jsRuntime.wallClockLimitMs`, there is no
-// wall-clock limit. A guest that awaits well past any default a former
-// wall-clock timer might have imposed must run to completion. This guards the
-// requirement that long-lived ACP adapters (which run indefinitely on
-// wall-clock) are never killed by a wall-clock default. The default CPU budget
-// remains armed but excludes idle/await time.
-fn javascript_no_time_limit_when_neither_env_set() {
-    let (tx, rx) = mpsc::channel::<(i32, String, String)>();
-    thread::spawn(move || {
-        let temp = match tempdir() {
-            Ok(temp) => temp,
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("tempdir failed: {error}")));
-                return;
-            }
-        };
-        let mut engine = JavascriptExecutionEngine::default();
-        let context = engine.create_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-js-notimelimit"),
-            bootstrap_module: None,
-            compile_cache_root: None,
-        });
-
-        let execution = engine.start_execution(StartJavascriptExecutionRequest {
-            vm_id: String::from("vm-js-notimelimit"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            // No wall-clock env: no wall-clock guard is armed. The default CPU
-            // budget excludes this idle await.
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            // Awaits ~1.2s, then exits cleanly. Self-terminating so the test cannot
-            // hang even if (incorrectly) no limit were enforced.
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                "await new Promise((resolve) => setTimeout(resolve, 1200));\n\
-                 console.log('no-limit-ok');\n",
-            )),
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-        });
-
-        match execution {
-            Ok(execution) => match execution.wait() {
-                Ok(result) => {
-                    let stdout = String::from_utf8_lossy(&result.stdout).into_owned();
-                    let stderr = String::from_utf8_lossy(&result.stderr).into_owned();
-                    let _ = tx.send((result.exit_code, stdout, stderr));
-                }
-                Err(error) => {
-                    let _ = tx.send((-1, String::new(), format!("wait failed: {error}")));
-                }
-            },
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("start failed: {error}")));
-            }
-        }
-    });
-
-    match rx.recv_timeout(Duration::from_secs(20)) {
-        Ok((exit_code, stdout, stderr)) => {
-            assert!(
-                !stderr.contains("ERR_SCRIPT_WALL_CLOCK_EXCEEDED")
-                    && !stderr.contains("wall-clock limit")
-                    && !stderr.contains("ERR_SCRIPT_CPU_BUDGET_EXCEEDED")
-                    && !stderr.contains("CPU-time budget"),
-                "a wall-clock or CPU limit fired despite this idle await staying below the default CPU budget: \
-                 exit_code={exit_code} stdout={stdout} stderr={stderr}"
-            );
-            assert_eq!(
-                exit_code, 0,
-                "awaiting guest should complete cleanly when no wall-clock limit is set: \
-                 stdout={stdout} stderr={stderr}"
-            );
-            assert!(
-                stdout.contains("no-limit-ok"),
-                "guest did not run to completion with no wall-clock limit set: \
-                 stdout={stdout} stderr={stderr}"
-            );
-        }
-        Err(_) => {
-            panic!(
-                "no-limit guest never produced a result within the bounded test window \
-                 (unexpected hang)"
-            );
-        }
-    }
-}
-
-// SE-EXEC-06 (M.1 / F-003): a heap-allocation bomb must be capped by terminating
-// the offending isolate, NOT by letting V8 fatal-abort (SIGTRAP) the process-global
-// runtime and take down every concurrent tenant. Before the fix, no
-// near-heap-limit/OOM callback was registered, so reaching the operator-configured
-// `AGENTOS_V8_HEAP_LIMIT_MB` cap triggered V8's default fatal-OOM abort.
-//
-// BOUNDED safeguard variant: with a small heap cap the guard fires fast, terminates
-// the isolate, and the run returns a nonzero exit WITHOUT aborting the process. The
-// guest run is fenced behind a wall-clock watchdog on a worker thread so a regression
-// surfaces as a clear failure rather than a CI hang or a SIGTRAP that kills the whole
-// test binary.
-fn javascript_heap_allocation_bomb_is_capped_by_oom_guard() {
-    let (tx, rx) = mpsc::channel::<(i32, String, String)>();
-    thread::spawn(move || {
-        let temp = match tempdir() {
-            Ok(temp) => temp,
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("tempdir failed: {error}")));
-                return;
-            }
-        };
-        let mut engine = JavascriptExecutionEngine::default();
-        let context = engine.create_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-js"),
-            bootstrap_module: None,
-            compile_cache_root: None,
-        });
-
-        let execution = engine.start_execution(StartJavascriptExecutionRequest {
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            // Small bounded heap cap so the OOM guard fires quickly. The cap now
-            // rides the typed `limits` field (migrated off the dead
-            // `AGENTOS_V8_HEAP_LIMIT_MB` env knob).
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from(
-                r#"
-// Grow unbounded; with a 32MB heap cap the OOM guard must terminate the isolate
-// well before this completes. If it ever completes, the cap did not bound it.
-const sink = [];
-for (let i = 0; i < 1_000_000; i += 1) {
-  sink.push(new Array(100_000).fill(i));
-}
-console.log("BOMB_COMPLETED_WITHOUT_CAP");
-"#,
-            )),
-            limits: JavascriptExecutionLimits {
-                v8_heap_limit_mb: Some(32),
-                ..Default::default()
-            },
-            guest_runtime: Default::default(),
-        });
-
-        match execution {
-            Ok(execution) => match execution.wait() {
-                Ok(result) => {
-                    let stdout = String::from_utf8_lossy(&result.stdout).into_owned();
-                    let stderr = String::from_utf8_lossy(&result.stderr).into_owned();
-                    let _ = tx.send((result.exit_code, stdout, stderr));
-                }
-                Err(error) => {
-                    let _ = tx.send((-1, String::new(), format!("wait failed: {error}")));
-                }
-            },
-            Err(error) => {
-                let _ = tx.send((-1, String::new(), format!("start failed: {error}")));
-            }
-        }
-    });
-
-    match rx.recv_timeout(Duration::from_secs(30)) {
-        Ok((exit_code, stdout, stderr)) => {
-            // The bad actor wins if the bomb runs to completion.
-            assert!(
-                !stdout.contains("BOMB_COMPLETED_WITHOUT_CAP"),
-                "heap bomb completed despite configured heap limit: stdout={stdout} stderr={stderr}"
-            );
-            // Enforcement must be a clean per-isolate termination (nonzero exit),
-            // not a process-wide abort.
-            assert_ne!(
-                exit_code, 0,
-                "heap bomb returned a clean exit instead of being terminated by the OOM guard: stdout={stdout} stderr={stderr}"
-            );
-        }
-        Err(_) => {
-            panic!(
-                "heap-bomb guest was NOT bounded by the OOM guard \
-                 (wait() never returned within the bounded test budget)"
-            );
-        }
-    }
-}
-
-// Adversarial coverage for the builtin allow/deny desync (VECTORS.md A.2).
-// A denied builtin must stay denied on EVERY guest resolution path. The most
-// likely desync is a sub-path specifier (`dns/promises`) leaking on one path
-// while its root (`dns`) is denied on another. The live guest-JS path is the
-// shared V8 runtime, whose single `loadBuiltinModule` funnel gates by root
-// name (`split('/')[0]`) for require / createRequire / process.getBuiltinModule
-// / dynamic import alike. With an allow-list that excludes `dns`, every path
-// must reject both `dns` and `dns/promises`.
-fn javascript_execution_denies_dns_and_subpaths_on_every_resolution_path() {
-    assert_js_runtime_guest_ok(
-        // node platform, allow-list excludes `dns` (only `path`/`module`).
-        js_runtime_env(&[("AGENTOS_JS_BUILTIN_ALLOWLIST", "[\"path\",\"module\"]")]),
-        r#"
-        import { createRequire } from "node:module";
-        const require = createRequire(import.meta.url);
-
-        function assertDeniedSync(label, fn) {
-          let denied = false;
-          let detail = "no error";
-          try {
-            const mod = fn();
-            const keys = mod && typeof mod === "object" ? Object.keys(mod).slice(0, 4).join(",") : typeof mod;
-            detail = "resolved to " + keys;
-          } catch (error) {
-            detail = String(error && error.message);
-            denied = !!error;
-          }
-          if (!denied) throw new Error(label + " was not denied: " + detail);
-        }
-
-        async function assertDeniedAsync(label, promise) {
-          let denied = false;
-          let detail = "no error";
-          try { await promise; detail = "import resolved"; }
-          catch (error) { detail = String(error && error.message); denied = !!error; }
-          if (!denied) throw new Error(label + " was not denied: " + detail);
-        }
-
-        // Positive control: an allowed builtin still resolves.
-        const path = await import("node:path");
-        if (typeof path.join !== "function") throw new Error("node:path should be allowed");
-
-        for (const specifier of ["dns", "node:dns", "dns/promises", "node:dns/promises"]) {
-          assertDeniedSync("require(" + specifier + ")", () => require(specifier));
-          assertDeniedSync(
-            "createRequire(" + specifier + ")",
-            () => createRequire(import.meta.url)(specifier),
-          );
-          if (typeof process.getBuiltinModule === "function") {
-            assertDeniedSync(
-              "process.getBuiltinModule(" + specifier + ")",
-              () => process.getBuiltinModule(specifier),
-            );
-          }
-          await assertDeniedAsync("import(" + specifier + ")", import(specifier));
-        }
-        "#,
-    );
-}
-
-#[test]
-fn javascript_v8_suite() {
-    // Keep V8-backed integration coverage inside one top-level libtest case.
-    // Running these guest-runtime cases as separate tests in the same binary
-    // still trips a V8 teardown/init boundary crash between cases.
-    //
-    // Warm-worker pooling stays OFF here: this harness services guest sync
-    // RPCs inline on the test thread, and a claimed (pre-created) session
-    // shifts kernel-stdin RPC timing so the harness sees a pending request
-    // at wait() (PendingSyncRpcRequest). Production routes these through the
-    // sidecar service loop and is unaffected (verified: stdin round-trips
-    // 5/5 through pooled sessions in a live VM).
-    let _no_warm_workers = EnvVarGuard::set_value("AGENTOS_V8_WARM_ISOLATES", "0");
-    javascript_contexts_preserve_vm_and_bootstrap_configuration();
-    javascript_execution_virtual_os_identity_comes_from_guest_runtime_not_env();
-    javascript_execution_uses_v8_runtime_without_spawning_guest_node_binary();
-    javascript_execution_virtualizes_process_metadata_for_inline_v8_code();
-    javascript_execution_process_kill_rejects_invalid_pid_in_guest_js();
-    javascript_execution_preserves_binary_process_stdio_writes();
-    javascript_execution_intl_number_format_does_not_require_host_icu();
-    javascript_execution_to_locale_date_string_does_not_crash_embedded_v8();
-    // QUARANTINED (2026-07-02, pre-existing on trunk 5367209b — verified by
-    // bisect): stream-consumers live-stdin fails with PendingSyncRpcRequest in
-    // THIS harness, which services guest sync RPCs inline on the test thread;
-    // production stdin round-trips verified 5/5 through the real sidecar.
-    // Tracked in the perf-backlog spec (0.5 burn-down) — re-enable when the
-    // harness services pending stdin RPCs during wait().
-    // javascript_execution_stream_consumers_text_reads_live_stdin();
-    // QUARANTINED with the live-stdin class above (same harness limitation).
-    // javascript_execution_process_stdin_async_iterator_finishes_with_live_stdin();
-    // QUARANTINED with the live-stdin class above (same harness limitation).
-    // javascript_execution_process_exit_from_live_stdin_listener_exits_without_waiting_for_eof();
-    javascript_execution_process_exit_ignores_live_interval_handles();
-    javascript_execution_process_exit_bypasses_promise_catch_handlers();
-    // QUARANTINED with the live-stdin class above (same harness limitation).
-    // javascript_execution_live_stdin_replays_end_after_late_listener_registration();
-    javascript_execution_file_url_to_path_accepts_guest_absolute_paths();
-    javascript_execution_imports_node_events_without_hanging();
-    javascript_execution_imports_node_process_without_hanging();
-    javascript_execution_imports_node_fs_promises_without_hanging();
-    javascript_execution_imports_node_perf_hooks_without_hanging();
-    javascript_execution_high_resolution_time_opt_in_enables_sub_ms_hrtime();
-    javascript_execution_high_resolution_time_default_off_keeps_coarse_clock();
-    javascript_execution_exposes_compatibility_shims_and_denies_escape_builtins();
-    javascript_execution_denies_dns_and_subpaths_on_every_resolution_path();
-    javascript_execution_v8_util_format_with_options_matches_node();
-    javascript_execution_provides_async_hooks_and_diagnostics_channel_stubs();
-    javascript_execution_supports_require_resolve_for_guest_code();
-    javascript_execution_rejects_native_node_addons();
-    javascript_execution_surfaces_sync_rpc_requests_from_v8_modules();
-    javascript_execution_v8_dgram_bridge_matches_sidecar_rpc_shapes();
-    javascript_execution_strips_hashbang_from_module_entrypoints();
-    javascript_execution_resolves_pnpm_store_dependencies_from_symlinked_entrypoints();
-    javascript_execution_resolves_dependencies_from_package_specific_symlink_mounts();
-    javascript_execution_v8_timer_callbacks_fire_and_clear_correctly();
-    javascript_execution_v8_readline_polyfill_emits_lines();
-    javascript_execution_v8_builtin_wrappers_expose_common_named_exports();
-    javascript_execution_v8_child_process_conformance_matches_host_node();
-    javascript_execution_v8_web_stream_globals_support_basic_io();
-    javascript_execution_v8_text_codec_streams_support_pipe_through();
-    javascript_execution_v8_abort_controller_dispatches_abort();
-    javascript_execution_v8_request_accepts_abort_signal();
-    javascript_execution_v8_abort_signal_static_helpers_work();
-    javascript_execution_v8_schedule_timer_bridge_resolves();
-    javascript_execution_v8_kernel_poll_bridge_requests_multiple_fds();
-    javascript_execution_v8_crypto_random_sources_use_local_secure_bridge();
-    javascript_execution_v8_crypto_basic_operations_emit_expected_sync_rpcs();
-    javascript_execution_v8_load_polyfill_returns_runtime_module_expressions();
-    javascript_execution_v8_stream_wrapper_exports_common_node_classes();
-    javascript_execution_v8_buffer_wrapper_exposes_commonjs_constants();
-    // QUARANTINED with the live-stdin class (standalone harness services only
-    // module-resolution RPCs; tty RPCs are kernel-backed).
-    // javascript_execution_v8_tty_module_is_backed_by_live_process();
-    javascript_execution_v8_sqlite_module_resolves_via_global_install();
-    javascript_execution_v8_commonjs_stack_frames_preserve_module_paths();
-    javascript_execution_v8_commonjs_main_entrypoints_preserve_entrypoint_paths();
-    javascript_execution_v8_inline_commonjs_entrypoints_preserve_entrypoint_paths();
-    javascript_execution_v8_inline_commonjs_entrypoints_preserve_commonjs_globals();
-    javascript_execution_v8_commonjs_require_exposes_node_metadata();
-    javascript_execution_v8_https_agents_expose_options_objects();
-    javascript_execution_v8_net_socket_readable_state_tracks_ssh2_writable_shape();
-    javascript_execution_v8_event_channel_backpressures_instead_of_destroying_session();
-    javascript_execution_v8_net_socket_read_loop_yields_macrotask_between_chunks();
-    javascript_execution_v8_dynamic_import_accepts_file_urls();
-    javascript_execution_v8_wasm_instantiate_streaming_never_hangs();
-    javascript_execution_v8_structured_clone_rebinds_to_sandbox_realm();
-    js_runtime_node_platform_keeps_full_node_surface();
-    js_runtime_bare_platform_strips_all_host_globals();
-    js_runtime_browser_platform_exposes_web_without_node();
-    js_runtime_neutral_platform_drops_web_keeps_universal();
-    js_runtime_module_resolution_none_denies_all_imports();
-    js_runtime_module_resolution_relative_allows_local_denies_bare();
-    js_runtime_node_platform_allow_list_restricts_builtins();
-    js_runtime_browser_loads_cjs_npm_package();
-    js_runtime_browser_fetch_is_callable();
-
-    // SE-EXEC-06 (F-003): OOM guard terminates a heap-allocation bomb instead of
-    // letting V8 fatal-abort the process. Runs before the CPU case; both are fenced
-    // behind worker-thread wall-clock watchdogs.
-    javascript_heap_allocation_bomb_is_capped_by_oom_guard();
-
-    // SE-EXEC-04 (F-001): TRUE CPU-time budget. These run LAST because a
-    // regression in the tight-loop case could leak a CPU-bound worker thread.
-    //   1. budget SET  => tight busy loop terminated (cpu-budget reason)
-    //   2. budget SET  => awaiting/idle guest NOT killed (idle excluded)  [critical negative]
-    //   3. budget UNSET => default watchdog allows short CPU work
-    javascript_infinite_loop_is_terminated_by_cpu_watchdog();
-    javascript_awaiting_guest_is_not_killed_by_cpu_budget();
-    javascript_default_cpu_budget_allows_short_cpu_work();
-
-    // WALL-CLOCK BACKSTOP (opt-in, complements the CPU-time budget):
-    //   1. wall-clock SET  => awaiting guest terminated (wall-clock reason; idle counted)
-    //   2. CPU budget only => no wall-clock limit imposed (knobs independent)
-    //   3. wall-clock unset => idle await completes; default CPU budget excludes idle
-    javascript_awaiting_guest_is_terminated_by_wall_clock_backstop();
-    javascript_cpu_budget_only_does_not_impose_wall_clock_limit();
-    javascript_no_time_limit_when_neither_env_set();
-}
diff --git a/crates/execution/tests/module_resolution.rs b/crates/execution/tests/module_resolution.rs
deleted file mode 100644
index 7b6d2d9ce..000000000
--- a/crates/execution/tests/module_resolution.rs
+++ /dev/null
@@ -1,947 +0,0 @@
-use secure_exec_execution::javascript::ModuleResolutionTestHarness;
-use serde::Deserialize;
-use serde_json::Value;
-use std::fs;
-use std::os::unix::fs::symlink;
-use std::path::PathBuf;
-use tempfile::TempDir;
-
-struct Fixture {
-    temp: TempDir,
-}
-
-impl Fixture {
-    fn new() -> Self {
-        Self {
-            temp: TempDir::new().expect("create temp dir"),
-        }
-    }
-
-    fn host_path(&self, relative: &str) -> PathBuf {
-        self.temp.path().join(relative)
-    }
-
-    fn write(&self, relative: &str, contents: &str) {
-        let path = self.host_path(relative);
-        if let Some(parent) = path.parent() {
-            fs::create_dir_all(parent).expect("create parent dirs");
-        }
-        fs::write(path, contents).expect("write fixture file");
-    }
-
-    fn write_json(&self, relative: &str, value: Value) {
-        self.write(
-            relative,
-            &serde_json::to_string_pretty(&value).expect("serialize json"),
-        );
-    }
-
-    fn mkdir(&self, relative: &str) {
-        fs::create_dir_all(self.host_path(relative)).expect("create fixture dir");
-    }
-
-    fn symlink_dir(&self, target_relative: &str, link_relative: &str) {
-        let target = self.host_path(target_relative);
-        let link = self.host_path(link_relative);
-        if let Some(parent) = link.parent() {
-            fs::create_dir_all(parent).expect("create symlink parent");
-        }
-        symlink(target, link).expect("create directory symlink");
-    }
-
-    fn resolver(&self) -> ModuleResolutionTestHarness {
-        ModuleResolutionTestHarness::new(self.temp.path())
-    }
-}
-
-fn assert_import(fixture: &Fixture, specifier: &str, from_path: &str, expected: &str) {
-    let mut resolver = fixture.resolver();
-    assert_eq!(
-        resolver.resolve_import(specifier, from_path),
-        Some(String::from(expected))
-    );
-}
-
-fn assert_require(fixture: &Fixture, specifier: &str, from_path: &str, expected: &str) {
-    let mut resolver = fixture.resolver();
-    assert_eq!(
-        resolver.resolve_require(specifier, from_path),
-        Some(String::from(expected))
-    );
-}
-
-fn assert_require_missing(fixture: &Fixture, specifier: &str, from_path: &str) {
-    let mut resolver = fixture.resolver();
-    assert_eq!(resolver.resolve_require(specifier, from_path), None);
-}
-
-#[derive(Debug, Deserialize)]
-struct SharedModuleResolutionFixture {
-    cases: Vec<SharedModuleResolutionCase>,
-    formats: Vec<SharedModuleFormatCase>,
-}
-
-#[derive(Debug, Deserialize)]
-struct SharedModuleResolutionCase {
-    name: String,
-    files: std::collections::BTreeMap<String, String>,
-    resolves: Vec<SharedModuleResolutionExpectation>,
-}
-
-#[derive(Debug, Deserialize)]
-struct SharedModuleResolutionExpectation {
-    specifier: String,
-    from: String,
-    mode: String,
-    expected: Option<String>,
-}
-
-#[derive(Debug, Deserialize)]
-struct SharedModuleFormatCase {
-    name: String,
-    files: std::collections::BTreeMap<String, String>,
-    path: String,
-    expected: Option<String>,
-}
-
-#[test]
-fn matches_shared_native_browser_conformance_fixture() {
-    let fixture: SharedModuleResolutionFixture = serde_json::from_str(include_str!(
-        "../../../tests/fixtures/module-resolution-conformance.json"
-    ))
-    .expect("parse shared module resolution fixture");
-
-    for test_case in fixture.cases {
-        let fs_fixture = Fixture::new();
-        for (path, contents) in &test_case.files {
-            fs_fixture.write(path, contents);
-        }
-
-        for resolution in &test_case.resolves {
-            let mut resolver = fs_fixture.resolver();
-            let actual = match resolution.mode.as_str() {
-                "import" => resolver.resolve_import(&resolution.specifier, &resolution.from),
-                "require" => resolver.resolve_require(&resolution.specifier, &resolution.from),
-                other => panic!("unsupported shared fixture mode {other}"),
-            };
-            assert_eq!(
-                actual, resolution.expected,
-                "{}: {} from {} in {} mode",
-                test_case.name, resolution.specifier, resolution.from, resolution.mode
-            );
-        }
-    }
-
-    for format_case in fixture.formats {
-        let fs_fixture = Fixture::new();
-        for (path, contents) in &format_case.files {
-            fs_fixture.write(path, contents);
-        }
-
-        let mut resolver = fs_fixture.resolver();
-        let actual = resolver.module_format(&format_case.path).map(String::from);
-        assert_eq!(
-            actual, format_case.expected,
-            "{}: format for {}",
-            format_case.name, format_case.path
-        );
-    }
-}
-
-#[test]
-fn builtin_bare_fs_normalizes_to_node_prefix() {
-    let fixture = Fixture::new();
-    assert_import(&fixture, "fs", "/root/project/index.js", "node:fs");
-}
-
-#[test]
-fn builtin_node_prefix_is_preserved_for_require() {
-    let fixture = Fixture::new();
-    assert_require(&fixture, "node:path", "/root/project/index.js", "node:path");
-}
-
-#[test]
-fn builtin_subpath_normalizes_to_node_prefix() {
-    let fixture = Fixture::new();
-    assert_import(
-        &fixture,
-        "fs/promises",
-        "/root/project/index.js",
-        "node:fs/promises",
-    );
-}
-
-#[test]
-fn relative_import_probes_js_extension() {
-    let fixture = Fixture::new();
-    fixture.write("project/src/foo.js", "export default 1;");
-    assert_import(
-        &fixture,
-        "./foo",
-        "/root/project/src/index.js",
-        "/root/project/src/foo.js",
-    );
-}
-
-#[test]
-fn relative_parent_import_probes_json_extension() {
-    let fixture = Fixture::new();
-    fixture.write("project/data/config.json", r#"{"ok":true}"#);
-    assert_import(
-        &fixture,
-        "../data/config",
-        "/root/project/src/index.js",
-        "/root/project/data/config.json",
-    );
-}
-
-#[test]
-fn absolute_import_resolves_from_guest_root() {
-    let fixture = Fixture::new();
-    fixture.write("shared/util.mjs", "export const ok = true;");
-    assert_import(
-        &fixture,
-        "/root/shared/util",
-        "/root/project/src/index.js",
-        "/root/shared/util.mjs",
-    );
-}
-
-#[test]
-fn directory_import_uses_package_main_field() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "project/pkg/package.json",
-        serde_json::json!({ "main": "./dist/main.cjs" }),
-    );
-    fixture.write("project/pkg/dist/main.cjs", "module.exports = 1;");
-    assert_require(
-        &fixture,
-        "./pkg",
-        "/root/project/index.js",
-        "/root/project/pkg/dist/main.cjs",
-    );
-}
-
-#[test]
-fn bare_package_main_only_type_module_resolves() {
-    // Regression guard: a bare ESM package whose package.json has `main` but NO
-    // `exports` map (e.g. @agentclientprotocol/sdk@0.16.1) must still resolve via
-    // the `main` fallback. `exports` and `main` are separate code paths; this case
-    // exercises the latter for a scoped package looked up through node_modules.
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/@scope/pkg/package.json",
-        serde_json::json!({ "type": "module", "main": "dist/acp.js" }),
-    );
-    fixture.write("node_modules/@scope/pkg/dist/acp.js", "export default 1;");
-    assert_import(
-        &fixture,
-        "@scope/pkg",
-        "/root/project/src/adapter.js",
-        "/root/node_modules/@scope/pkg/dist/acp.js",
-    );
-}
-
-#[test]
-fn directory_import_falls_back_to_index_file() {
-    let fixture = Fixture::new();
-    fixture.write("project/lib/index.cjs", "module.exports = 1;");
-    assert_require(
-        &fixture,
-        "./lib",
-        "/root/project/index.js",
-        "/root/project/lib/index.cjs",
-    );
-}
-
-#[test]
-fn extension_probe_finds_existing_js_file_directly() {
-    let fixture = Fixture::new();
-    fixture.write("project/src/direct.js", "export default 1;");
-    assert_import(
-        &fixture,
-        "./direct.js",
-        "/root/project/src/index.js",
-        "/root/project/src/direct.js",
-    );
-}
-
-#[test]
-fn extension_probe_finds_mjs_file() {
-    let fixture = Fixture::new();
-    fixture.write("project/src/mod.mjs", "export default 1;");
-    assert_import(
-        &fixture,
-        "./mod",
-        "/root/project/src/index.js",
-        "/root/project/src/mod.mjs",
-    );
-}
-
-#[test]
-fn extension_probe_finds_cjs_file() {
-    let fixture = Fixture::new();
-    fixture.write("project/src/common.cjs", "module.exports = 1;");
-    assert_require(
-        &fixture,
-        "./common",
-        "/root/project/src/index.js",
-        "/root/project/src/common.cjs",
-    );
-}
-
-#[test]
-fn extension_probe_finds_json_file() {
-    let fixture = Fixture::new();
-    fixture.write("project/src/data.json", r#"{"name":"fixture"}"#);
-    assert_require(
-        &fixture,
-        "./data",
-        "/root/project/src/index.js",
-        "/root/project/src/data.json",
-    );
-}
-
-#[test]
-fn dot_specifier_resolves_current_package_directory() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "project/pkg/package.json",
-        serde_json::json!({ "main": "./entry.js" }),
-    );
-    fixture.write("project/pkg/entry.js", "module.exports = 1;");
-    assert_require(
-        &fixture,
-        ".",
-        "/root/project/pkg/index.js",
-        "/root/project/pkg/entry.js",
-    );
-}
-
-#[test]
-fn exports_string_shorthand_resolves_package_root() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        serde_json::json!({ "exports": "./dist/index.js" }),
-    );
-    fixture.write("node_modules/pkg/dist/index.js", "export default 1;");
-    assert_import(
-        &fixture,
-        "pkg",
-        "/root/project/src/index.js",
-        "/root/node_modules/pkg/dist/index.js",
-    );
-}
-
-#[test]
-fn exports_conditions_prefer_import_for_esm_resolution() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        serde_json::json!({
-            "exports": {
-                ".": {
-                    "import": "./dist/import.mjs",
-                    "require": "./dist/require.cjs",
-                    "default": "./dist/default.js"
-                }
-            }
-        }),
-    );
-    fixture.write("node_modules/pkg/dist/import.mjs", "export default 1;");
-    fixture.write("node_modules/pkg/dist/require.cjs", "module.exports = 1;");
-    fixture.write("node_modules/pkg/dist/default.js", "export default 1;");
-    assert_import(
-        &fixture,
-        "pkg",
-        "/root/project/src/index.js",
-        "/root/node_modules/pkg/dist/import.mjs",
-    );
-}
-
-#[test]
-fn exports_conditions_prefer_require_for_cjs_resolution() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        serde_json::json!({
-            "exports": {
-                ".": {
-                    "import": "./dist/import.mjs",
-                    "require": "./dist/require.cjs",
-                    "default": "./dist/default.js"
-                }
-            }
-        }),
-    );
-    fixture.write("node_modules/pkg/dist/import.mjs", "export default 1;");
-    fixture.write("node_modules/pkg/dist/require.cjs", "module.exports = 1;");
-    fixture.write("node_modules/pkg/dist/default.js", "export default 1;");
-    assert_require(
-        &fixture,
-        "pkg",
-        "/root/project/src/index.js",
-        "/root/node_modules/pkg/dist/require.cjs",
-    );
-}
-
-#[test]
-fn exports_nested_conditions_recurse_for_import_mode() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        serde_json::json!({
-            "exports": {
-                ".": {
-                    "import": {
-                        "node": "./dist/node.mjs",
-                        "default": "./dist/default.mjs"
-                    },
-                    "default": "./dist/fallback.js"
-                }
-            }
-        }),
-    );
-    fixture.write("node_modules/pkg/dist/node.mjs", "export default 1;");
-    fixture.write("node_modules/pkg/dist/default.mjs", "export default 1;");
-    fixture.write("node_modules/pkg/dist/fallback.js", "export default 1;");
-    assert_import(
-        &fixture,
-        "pkg",
-        "/root/project/src/index.js",
-        "/root/node_modules/pkg/dist/node.mjs",
-    );
-}
-
-#[test]
-fn exports_wildcard_subpaths_expand_requested_segment() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        serde_json::json!({
-            "exports": {
-                "./features/*": "./dist/features/*.mjs"
-            }
-        }),
-    );
-    fixture.write(
-        "node_modules/pkg/dist/features/alpha.mjs",
-        "export default 1;",
-    );
-    assert_import(
-        &fixture,
-        "pkg/features/alpha",
-        "/root/project/src/index.js",
-        "/root/node_modules/pkg/dist/features/alpha.mjs",
-    );
-}
-
-#[test]
-fn exports_explicit_subpath_resolves_direct_mapping() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        serde_json::json!({
-            "exports": {
-                "./feature": "./dist/feature.js"
-            }
-        }),
-    );
-    fixture.write("node_modules/pkg/dist/feature.js", "export default 1;");
-    assert_import(
-        &fixture,
-        "pkg/feature",
-        "/root/project/src/index.js",
-        "/root/node_modules/pkg/dist/feature.js",
-    );
-}
-
-#[test]
-fn exports_array_fallback_uses_first_resolvable_target() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        serde_json::json!({
-            "exports": [
-                null,
-                "./dist/index.js"
-            ]
-        }),
-    );
-    fixture.write("node_modules/pkg/dist/index.js", "export default 1;");
-    assert_import(
-        &fixture,
-        "pkg",
-        "/root/project/src/index.js",
-        "/root/node_modules/pkg/dist/index.js",
-    );
-}
-
-#[test]
-fn imports_exact_alias_resolves_relative_target() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "project/package.json",
-        serde_json::json!({
-            "imports": {
-                "#alias": "./src/alias.js"
-            }
-        }),
-    );
-    fixture.write("project/src/alias.js", "export default 1;");
-    assert_import(
-        &fixture,
-        "#alias",
-        "/root/project/src/index.js",
-        "/root/project/src/alias.js",
-    );
-}
-
-#[test]
-fn imports_condition_object_supports_require_mode() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "project/package.json",
-        serde_json::json!({
-            "imports": {
-                "#config": {
-                    "import": "./src/config.mjs",
-                    "require": "./src/config.cjs"
-                }
-            }
-        }),
-    );
-    fixture.write("project/src/config.mjs", "export default 1;");
-    fixture.write("project/src/config.cjs", "module.exports = 1;");
-    assert_require(
-        &fixture,
-        "#config",
-        "/root/project/src/index.js",
-        "/root/project/src/config.cjs",
-    );
-}
-
-#[test]
-fn imports_wildcard_subpaths_expand_requested_segment() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "project/package.json",
-        serde_json::json!({
-            "imports": {
-                "#utils/*": "./src/utils/*.js"
-            }
-        }),
-    );
-    fixture.write("project/src/utils/math.js", "export default 1;");
-    assert_import(
-        &fixture,
-        "#utils/math",
-        "/root/project/src/index.js",
-        "/root/project/src/utils/math.js",
-    );
-}
-
-#[test]
-fn imports_walk_up_to_nearest_package_json() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "project/package.json",
-        serde_json::json!({
-            "imports": {
-                "#shared": "./src/shared.js"
-            }
-        }),
-    );
-    fixture.write("project/src/shared.js", "export default 1;");
-    assert_import(
-        &fixture,
-        "#shared",
-        "/root/project/src/nested/deeper/index.js",
-        "/root/project/src/shared.js",
-    );
-}
-
-#[test]
-fn exports_take_priority_over_main_field() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        serde_json::json!({
-            "main": "./legacy.js",
-            "exports": "./modern.js"
-        }),
-    );
-    fixture.write("node_modules/pkg/legacy.js", "module.exports = 1;");
-    fixture.write("node_modules/pkg/modern.js", "export default 1;");
-    assert_import(
-        &fixture,
-        "pkg",
-        "/root/project/src/index.js",
-        "/root/node_modules/pkg/modern.js",
-    );
-}
-
-#[test]
-fn type_module_directory_import_uses_index_js_for_import_mode() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "project/esm-dir/package.json",
-        serde_json::json!({
-            "type": "module"
-        }),
-    );
-    fixture.write("project/esm-dir/index.js", "export default 1;");
-    assert_import(
-        &fixture,
-        "./esm-dir",
-        "/root/project/index.js",
-        "/root/project/esm-dir/index.js",
-    );
-}
-
-#[test]
-fn main_field_still_beats_nonstandard_module_field() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/pkg/package.json",
-        serde_json::json!({
-            "main": "./main.cjs",
-            "module": "./module.mjs"
-        }),
-    );
-    fixture.write("node_modules/pkg/main.cjs", "module.exports = 1;");
-    fixture.write("node_modules/pkg/module.mjs", "export default 1;");
-    assert_require(
-        &fixture,
-        "pkg",
-        "/root/project/src/index.js",
-        "/root/node_modules/pkg/main.cjs",
-    );
-}
-
-#[test]
-fn pnpm_store_dir_is_not_checked_without_flattened_package_symlink() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "project/node_modules/.pnpm/node_modules/pkg/package.json",
-        serde_json::json!({ "main": "./index.js" }),
-    );
-    fixture.write(
-        "project/node_modules/.pnpm/node_modules/pkg/index.js",
-        "module.exports = 1;",
-    );
-    assert_require_missing(&fixture, "pkg", "/root/project/src/index.js");
-}
-
-#[test]
-fn symlinked_package_escape_is_not_resolved() {
-    let fixture = Fixture::new();
-    let outside = TempDir::new().expect("create outside temp dir");
-    fs::write(
-        outside.path().join("secret.js"),
-        "module.exports = 'secret';",
-    )
-    .expect("write outside file");
-    fixture.mkdir("node_modules");
-    symlink(outside.path(), fixture.host_path("node_modules/escape"))
-        .expect("create escape symlink");
-
-    let mut resolver = fixture.resolver();
-    assert_eq!(
-        resolver.resolve_require("escape/secret", "/root/project/index.js"),
-        None
-    );
-}
-
-#[test]
-fn absolute_host_path_fallback_is_not_resolved() {
-    let fixture = Fixture::new();
-    let outside = TempDir::new().expect("create outside temp dir");
-    let outside_module = outside.path().join("secret.js");
-    fs::write(&outside_module, "module.exports = 'secret';").expect("write outside file");
-
-    let mut resolver = fixture.resolver();
-    assert_eq!(
-        resolver.resolve_require(
-            outside_module.to_string_lossy().as_ref(),
-            "/root/project/index.js",
-        ),
-        None
-    );
-}
-
-#[test]
-fn pnpm_symlinked_referrer_can_resolve_sibling_dependency() {
-    let fixture = Fixture::new();
-    fixture.write(
-        "node_modules/.pnpm/pkg-a@1.0.0/node_modules/pkg-a/index.js",
-        "module.exports = require('pkg-b');",
-    );
-    fixture.write_json(
-        "node_modules/.pnpm/pkg-a@1.0.0/node_modules/pkg-a/package.json",
-        serde_json::json!({ "main": "./index.js" }),
-    );
-    fixture.write(
-        "node_modules/.pnpm/pkg-a@1.0.0/node_modules/pkg-b/index.js",
-        "module.exports = 1;",
-    );
-    fixture.write_json(
-        "node_modules/.pnpm/pkg-a@1.0.0/node_modules/pkg-b/package.json",
-        serde_json::json!({ "main": "./index.js" }),
-    );
-    fixture.symlink_dir(
-        "node_modules/.pnpm/pkg-a@1.0.0/node_modules/pkg-a",
-        "node_modules/pkg-a",
-    );
-
-    assert_require(
-        &fixture,
-        "pkg-b",
-        "/root/node_modules/pkg-a/index.js",
-        "/root/node_modules/.pnpm/pkg-a@1.0.0/node_modules/pkg-b/index.js",
-    );
-}
-
-#[test]
-fn pnpm_symlinked_referrer_prefers_package_store_dependency_over_generic_hoist() {
-    let fixture = Fixture::new();
-    fixture.write_json(
-        "node_modules/.pnpm/node_modules/dep/package.json",
-        serde_json::json!({ "main": "./index.js" }),
-    );
-    fixture.write(
-        "node_modules/.pnpm/node_modules/dep/index.js",
-        "module.exports = 'generic';",
-    );
-    fixture.write(
-        "node_modules/.pnpm/pkg-a@1.0.0/node_modules/pkg-a/index.js",
-        "import { named } from 'dep';\nexport default named;\n",
-    );
-    fixture.write_json(
-        "node_modules/.pnpm/pkg-a@1.0.0/node_modules/pkg-a/package.json",
-        serde_json::json!({ "type": "module" }),
-    );
-    fixture.write(
-        "node_modules/.pnpm/pkg-a@1.0.0/node_modules/dep/index.js",
-        "export const named = 1;",
-    );
-    fixture.write_json(
-        "node_modules/.pnpm/pkg-a@1.0.0/node_modules/dep/package.json",
-        serde_json::json!({
-            "type": "module",
-            "exports": "./index.js",
-        }),
-    );
-    fixture.symlink_dir(
-        "node_modules/.pnpm/pkg-a@1.0.0/node_modules/pkg-a",
-        "node_modules/pkg-a",
-    );
-
-    assert_import(
-        &fixture,
-        "dep",
-        "/root/node_modules/pkg-a/index.js",
-        "/root/node_modules/.pnpm/pkg-a@1.0.0/node_modules/dep/index.js",
-    );
-}
-
-#[test]
-fn root_node_modules_fallback_is_checked_last() {
-    let fixture = Fixture::new();
-    fixture.mkdir("project/src");
-    fixture.write_json(
-        "node_modules/shared-pkg/package.json",
-        serde_json::json!({ "main": "./index.js" }),
-    );
-    fixture.write("node_modules/shared-pkg/index.js", "module.exports = 1;");
-    assert_require(
-        &fixture,
-        "shared-pkg",
-        "/root/project/src/index.js",
-        "/root/node_modules/shared-pkg/index.js",
-    );
-}
-
-// Reproduces the ~/r6 conflict: minimatch@10 (ESM) imports `brace-expansion`.
-// Its OWN nested node_modules has the compatible brace-expansion@5 (named ESM
-// `expand`), while a hoisted top-level brace-expansion@1 (CJS, no named export)
-// exists too. Real Node resolves the nested @5; the VM must do the same.
-#[test]
-fn nested_dep_wins_over_hoisted_incompatible_version() {
-    let fixture = Fixture::new();
-
-    // minimatch@10: ESM package whose esm entry imports brace-expansion.
-    fixture.write_json(
-        "node_modules/minimatch/package.json",
-        serde_json::json!({
-            "version": "10.2.5",
-            "type": "module",
-            "main": "./dist/commonjs/index.js",
-            "module": "./dist/esm/index.js",
-            "exports": {
-                ".": {
-                    "import": "./dist/esm/index.js",
-                    "require": "./dist/commonjs/index.js"
-                }
-            }
-        }),
-    );
-    fixture.write(
-        "node_modules/minimatch/dist/esm/index.js",
-        "import { expand } from 'brace-expansion';\nexport const minimatch = () => {};",
-    );
-
-    // minimatch's OWN nested brace-expansion@5 (compatible, real ESM).
-    fixture.write_json(
-        "node_modules/minimatch/node_modules/brace-expansion/package.json",
-        serde_json::json!({
-            "version": "5.0.5",
-            "type": "module",
-            "main": "./dist/commonjs/index.js",
-            "module": "./dist/esm/index.js",
-            "exports": {
-                ".": {
-                    "import": "./dist/esm/index.js",
-                    "require": "./dist/commonjs/index.js"
-                }
-            }
-        }),
-    );
-    fixture.write(
-        "node_modules/minimatch/node_modules/brace-expansion/dist/esm/index.js",
-        "export function expand() {}",
-    );
-
-    // Hoisted top-level brace-expansion@1 (incompatible CJS).
-    fixture.write_json(
-        "node_modules/brace-expansion/package.json",
-        serde_json::json!({ "version": "1.1.12", "main": "index.js" }),
-    );
-    fixture.write(
-        "node_modules/brace-expansion/index.js",
-        "module.exports = function () {};",
-    );
-
-    assert_import(
-        &fixture,
-        "brace-expansion",
-        "/root/node_modules/minimatch/dist/esm/index.js",
-        "/root/node_modules/minimatch/node_modules/brace-expansion/dist/esm/index.js",
-    );
-}
-
-// Regression for the pnpm virtual-store scan shadowing hoisted resolution: a
-// consumer imports `dep`; the correct version is hoisted at the top level, but
-// an alphabetically-earlier `.pnpm/<other>@ver/node_modules/dep` holds an
-// incompatible version. The standard ancestor walk (which finds the hoisted
-// copy) must win over the store scan, matching real Node. Before the fix the
-// scan ran while walking and returned the wrong store entry first.
-#[test]
-fn hoisted_dependency_wins_over_alphabetically_earlier_pnpm_store_entry() {
-    let fixture = Fixture::new();
-
-    // Consumer is hoisted at the top level (not under .pnpm).
-    fixture.write(
-        "node_modules/consumer/index.js",
-        "import { wanted } from 'dep';\nexport default wanted;",
-    );
-    fixture.write_json(
-        "node_modules/consumer/package.json",
-        serde_json::json!({ "type": "module" }),
-    );
-
-    // Correct hoisted dep: real ESM with the named export.
-    fixture.write_json(
-        "node_modules/dep/package.json",
-        serde_json::json!({
-            "type": "module",
-            "exports": { ".": { "import": "./index.mjs" } }
-        }),
-    );
-    fixture.write("node_modules/dep/index.mjs", "export const wanted = 1;");
-
-    // Incompatible dep nested in the pnpm store under an alphabetically-earlier
-    // key (`aaa-pkg` sorts before any real consumer key). No named export.
-    fixture.write_json(
-        "node_modules/.pnpm/aaa-pkg@1.0.0/node_modules/dep/package.json",
-        serde_json::json!({ "version": "0.0.1", "main": "index.js" }),
-    );
-    fixture.write(
-        "node_modules/.pnpm/aaa-pkg@1.0.0/node_modules/dep/index.js",
-        "module.exports = 1;",
-    );
-
-    assert_import(
-        &fixture,
-        "dep",
-        "/root/node_modules/consumer/index.js",
-        "/root/node_modules/dep/index.mjs",
-    );
-}
-
-// Faithful pnpm layout (what pnpm + real Node actually rely on): every package
-// lives in its own `.pnpm/<pkg>@<ver>/node_modules/<pkg>` entry, and a
-// consumer's dependency is a *symlink* sibling inside the consumer's store dir
-// pointing at the dep's own entry. Top-level `node_modules/<pkg>` is a symlink
-// to the store entry. Resolution must work purely by realpath + the standard
-// ancestor walk (Docker-style VFS), with NO `.pnpm` store scanning — and must
-// pick the version the symlink points at, not an alphabetically-earlier entry.
-#[test]
-fn faithful_pnpm_symlink_layout_resolves_via_realpath_walk() {
-    let fixture = Fixture::new();
-
-    // consumer@1.0.0 in its store entry; imports `dep`.
-    fixture.write(
-        "node_modules/.pnpm/consumer@1.0.0/node_modules/consumer/index.mjs",
-        "import { wanted } from 'dep';\nexport default wanted;",
-    );
-    fixture.write_json(
-        "node_modules/.pnpm/consumer@1.0.0/node_modules/consumer/package.json",
-        serde_json::json!({ "version": "1.0.0", "type": "module", "exports": { ".": "./index.mjs" } }),
-    );
-
-    // dep@2.0.0 — the correct version — in its own store entry.
-    fixture.write(
-        "node_modules/.pnpm/dep@2.0.0/node_modules/dep/index.mjs",
-        "export const wanted = 2;",
-    );
-    fixture.write_json(
-        "node_modules/.pnpm/dep@2.0.0/node_modules/dep/package.json",
-        serde_json::json!({ "version": "2.0.0", "type": "module", "exports": { ".": "./index.mjs" } }),
-    );
-
-    // Decoy: an alphabetically-earlier store entry holding an incompatible dep@1.
-    fixture.write(
-        "node_modules/.pnpm/aaa-other@1.0.0/node_modules/dep/index.js",
-        "module.exports = 1;",
-    );
-    fixture.write_json(
-        "node_modules/.pnpm/aaa-other@1.0.0/node_modules/dep/package.json",
-        serde_json::json!({ "version": "1.0.0", "main": "index.js" }),
-    );
-
-    // pnpm's sibling symlink: consumer's `dep` -> dep@2.0.0's store entry.
-    fixture.symlink_dir(
-        "node_modules/.pnpm/dep@2.0.0/node_modules/dep",
-        "node_modules/.pnpm/consumer@1.0.0/node_modules/dep",
-    );
-    // Top-level symlink: node_modules/consumer -> consumer's store entry.
-    fixture.symlink_dir(
-        "node_modules/.pnpm/consumer@1.0.0/node_modules/consumer",
-        "node_modules/consumer",
-    );
-
-    // Importer is the top-level symlink path. The standard ancestor walk finds
-    // `dep` via pnpm's sibling symlink in consumer's store dir (which points at
-    // dep@2.0.0) — no `.pnpm` store scan involved. The resolver returns that
-    // symlink path; its realpath is dep@2.0.0's entry (the correct version, not
-    // the alphabetically-earlier aaa-other dep@1).
-    assert_import(
-        &fixture,
-        "dep",
-        "/root/node_modules/consumer/index.mjs",
-        "/root/node_modules/.pnpm/consumer@1.0.0/node_modules/dep/index.mjs",
-    );
-}
diff --git a/crates/execution/tests/permission_flags.rs b/crates/execution/tests/permission_flags.rs
deleted file mode 100644
index ab0a48579..000000000
--- a/crates/execution/tests/permission_flags.rs
+++ /dev/null
@@ -1,421 +0,0 @@
-#![cfg(unix)]
-
-use secure_exec_execution::{
-    CreateJavascriptContextRequest, CreatePythonContextRequest, CreateWasmContextRequest,
-    JavascriptExecutionEngine, PythonExecutionEngine, PythonExecutionEvent, PythonExecutionLimits,
-    StartJavascriptExecutionRequest, StartPythonExecutionRequest, StartWasmExecutionRequest,
-    WasmExecutionEngine, WasmExecutionLimits, WasmPermissionTier,
-};
-use serde_json::Value;
-use std::collections::BTreeMap;
-use std::fs;
-use std::os::unix::fs::PermissionsExt;
-use std::path::Path;
-use std::time::Duration;
-use tempfile::tempdir;
-
-struct EnvVarGuard {
-    key: &'static str,
-    previous: Option<String>,
-}
-
-impl EnvVarGuard {
-    fn set(key: &'static str, value: &Path) -> Self {
-        let previous = std::env::var(key).ok();
-        // SAFETY: This test binary controls its own process environment and uses a
-        // single test to avoid concurrent environment mutation within the process.
-        unsafe {
-            std::env::set_var(key, value);
-        }
-        Self { key, previous }
-    }
-}
-
-impl Drop for EnvVarGuard {
-    fn drop(&mut self) {
-        match &self.previous {
-            Some(value) => {
-                // SAFETY: See EnvVarGuard::set; restoring the test process env is
-                // limited to this single-threaded test scope.
-                unsafe {
-                    std::env::set_var(self.key, value);
-                }
-            }
-            None => {
-                // SAFETY: See EnvVarGuard::set; restoring the test process env is
-                // limited to this single-threaded test scope.
-                unsafe {
-                    std::env::remove_var(self.key);
-                }
-            }
-        }
-    }
-}
-
-fn write_fake_node_binary(path: &Path, log_path: &Path) {
-    let script = format!(
-        "#!/bin/sh\nset -eu\nprintf 'host-node-invoked\\n' >> \"{}\"\nexit 1\n",
-        log_path.display(),
-    );
-    fs::write(path, script).expect("write fake node binary");
-    let mut permissions = fs::metadata(path)
-        .expect("fake node metadata")
-        .permissions();
-    permissions.set_mode(0o755);
-    fs::set_permissions(path, permissions).expect("chmod fake node binary");
-}
-
-fn wasm_noop_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (memory (export "memory") 1)
-  (func (export "_start"))
-)
-"#,
-    )
-    .expect("compile noop wasm fixture")
-}
-
-fn node_permission_flags_allow_workers_for_internal_javascript_loader_runtime() {
-    let temp = tempdir().expect("create temp dir");
-    let fake_node_path = temp.path().join("fake-node.sh");
-    let log_path = temp.path().join("node-args.log");
-    write_fake_node_binary(&fake_node_path, &log_path);
-    let _node_binary = EnvVarGuard::set("AGENTOS_NODE_BINARY", &fake_node_path);
-
-    let js_cwd = temp.path().join("js-project");
-    fs::create_dir_all(&js_cwd).expect("create js cwd");
-    fs::write(js_cwd.join("entry.mjs"), "console.log('ignored');").expect("write js entry");
-
-    let mut js_engine = JavascriptExecutionEngine::default();
-    let context = js_engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let default_result = js_engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id.clone(),
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: js_cwd.clone(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start javascript execution without workers")
-        .wait()
-        .expect("wait for javascript execution without workers");
-    assert_eq!(default_result.exit_code, 0);
-
-    let worker_result = js_engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::from([(
-                String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                String::from("[\"worker_threads\"]"),
-            )]),
-            cwd: js_cwd,
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start javascript execution with workers")
-        .wait()
-        .expect("wait for javascript execution with workers");
-    assert_eq!(worker_result.exit_code, 0);
-
-    assert!(
-        !log_path.exists(),
-        "javascript execution should stay inside the V8 runtime, not spawn the host node binary"
-    );
-}
-
-fn node_permission_flags_only_propagate_nested_child_capabilities_when_parent_explicitly_allows_them(
-) {
-    let temp = tempdir().expect("create temp dir");
-    let fake_node_path = temp.path().join("fake-node.sh");
-    let log_path = temp.path().join("node-args.log");
-    write_fake_node_binary(&fake_node_path, &log_path);
-    let _node_binary = EnvVarGuard::set("AGENTOS_NODE_BINARY", &fake_node_path);
-
-    let js_cwd = temp.path().join("js-project");
-    fs::create_dir_all(&js_cwd).expect("create js cwd");
-    fs::write(js_cwd.join("entry.mjs"), "console.log('ignored');").expect("write js entry");
-
-    let mut js_engine = JavascriptExecutionEngine::default();
-    let context = js_engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let nested_env = |allow_child_process: &str, allow_worker: &str| {
-        BTreeMap::from([
-            (
-                String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                String::from("[\"child_process\",\"worker_threads\"]"),
-            ),
-            (
-                String::from("AGENTOS_PARENT_NODE_ALLOW_CHILD_PROCESS"),
-                allow_child_process.to_owned(),
-            ),
-            (
-                String::from("AGENTOS_PARENT_NODE_ALLOW_WORKER"),
-                allow_worker.to_owned(),
-            ),
-        ])
-    };
-
-    let denied_result = js_engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id.clone(),
-            argv: vec![String::from("./entry.mjs")],
-            env: nested_env("0", "0"),
-            cwd: js_cwd.clone(),
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start nested javascript execution without inherited permissions")
-        .wait()
-        .expect("wait for nested javascript execution without inherited permissions");
-    assert_eq!(denied_result.exit_code, 0);
-
-    let allowed_result = js_engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: nested_env("1", "1"),
-            cwd: js_cwd,
-            wasm_module_bytes: None,
-            inline_code: None,
-        })
-        .expect("start nested javascript execution with inherited permissions")
-        .wait()
-        .expect("wait for nested javascript execution with inherited permissions");
-    assert_eq!(allowed_result.exit_code, 0);
-
-    assert!(
-        !log_path.exists(),
-        "nested javascript execution should stay inside the V8 runtime regardless of inherited node flags"
-    );
-}
-
-fn python_execution_applies_configured_heap_limit_to_v8_runtime() {
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide-dist");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dist dir");
-    fs::write(
-        pyodide_dir.join("pyodide.mjs"),
-        r#"
-export async function loadPyodide() {
-  const v8 = await import("node:v8");
-  const heapLimit = v8.getHeapStatistics().heap_size_limit;
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync() {
-      console.log(String(heapLimit));
-    },
-  };
-}
-"#,
-    )
-    .expect("write pyodide fixture");
-    fs::write(pyodide_dir.join("pyodide-lock.json"), "{\"packages\":[]}\n")
-        .expect("write pyodide lock fixture");
-    for asset in ["pyodide.asm.js", "pyodide.asm.wasm", "python_stdlib.zip"] {
-        fs::write(pyodide_dir.join(asset), []).expect("write pyodide runtime fixture");
-    }
-
-    let mut python_engine = PythonExecutionEngine::default();
-    let context = python_engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir,
-    });
-
-    let mut execution = python_engine
-        .start_execution(StartPythonExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: PythonExecutionLimits {
-                max_old_space_mb: Some(64),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-python"),
-            context_id: context.context_id,
-            code: String::from("print('heap limit')"),
-            file_path: None,
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-        })
-        .expect("start python execution");
-
-    let mut stdout = Vec::new();
-    let mut stderr = Vec::new();
-    let mut exit_code = None;
-
-    while exit_code.is_none() {
-        match execution
-            .poll_event_blocking(Duration::from_secs(5))
-            .expect("poll python event")
-        {
-            Some(PythonExecutionEvent::Stdout(chunk)) => stdout.extend(chunk),
-            Some(PythonExecutionEvent::Stderr(chunk)) => stderr.extend(chunk),
-            Some(PythonExecutionEvent::JavascriptSyncRpcRequest(request)) => {
-                // Module-resolution sync RPCs surface during startup; service
-                // them host-directly, then expect the pyodide cache mkdir.
-                if execution
-                    .try_service_standalone_module_sync_rpc(&request)
-                    .expect("service module sync RPC")
-                {
-                    continue;
-                }
-                let cache_path = request.args.first().and_then(Value::as_str);
-                assert_eq!(request.method, "fs.mkdirSync");
-                assert!(
-                    cache_path.is_some_and(|path| path.ends_with("pyodide-package-cache")),
-                    "unexpected JS sync RPC request: {request:?}"
-                );
-                execution
-                    .respond_javascript_sync_rpc_success(request.id, Value::Null)
-                    .expect("acknowledge pyodide cache mkdir");
-            }
-            Some(PythonExecutionEvent::VfsRpcRequest(request)) => {
-                panic!("unexpected Python VFS RPC request: {request:?}");
-            }
-            Some(PythonExecutionEvent::Exited(code)) => exit_code = Some(code),
-            None => panic!("timed out waiting for Python execution"),
-        }
-    }
-
-    let stderr = String::from_utf8(stderr).expect("stderr utf8");
-    assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-    let heap_limit = String::from_utf8(stdout)
-        .expect("stdout utf8")
-        .trim()
-        .parse::<u64>()
-        .expect("parse heap limit");
-    assert!(
-        (16 * 1024 * 1024..256 * 1024 * 1024).contains(&heap_limit),
-        "expected configured Python heap limit to shape the V8 isolate, got {heap_limit} bytes",
-    );
-}
-
-fn wasm_execution_applies_runtime_memory_and_fuel_limits_inside_v8_runtime() {
-    let temp = tempdir().expect("create temp dir");
-    let fake_node_path = temp.path().join("fake-node.sh");
-    let log_path = temp.path().join("node-args.log");
-    write_fake_node_binary(&fake_node_path, &log_path);
-    let _node_binary = EnvVarGuard::set("AGENTOS_NODE_BINARY", &fake_node_path);
-
-    let wasm_cwd = temp.path().join("wasm-project");
-    fs::create_dir_all(&wasm_cwd).expect("create wasm cwd");
-    fs::write(wasm_cwd.join("guest.wasm"), wasm_noop_module()).expect("write wasm module");
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let result = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: WasmExecutionLimits {
-                max_fuel: Some(250_000),
-                max_memory_bytes: Some(131_072),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: vec![String::from("./guest.wasm")],
-            env: BTreeMap::new(),
-            cwd: wasm_cwd,
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect("start wasm execution")
-        .wait()
-        .expect("wait for wasm execution");
-    assert_eq!(result.exit_code, 0);
-    assert!(
-        !log_path.exists(),
-        "wasm execution should apply runtime limits inside the shared V8 runtime, not launch the host node binary"
-    );
-}
-
-fn wasm_permission_tiers_do_not_fall_back_to_host_node_binary() {
-    let temp = tempdir().expect("create temp dir");
-    let fake_node_path = temp.path().join("fake-node.sh");
-    let log_path = temp.path().join("node-args.log");
-    write_fake_node_binary(&fake_node_path, &log_path);
-    let _node_binary = EnvVarGuard::set("AGENTOS_NODE_BINARY", &fake_node_path);
-
-    let mut engine = WasmExecutionEngine::default();
-    let tiers = [
-        WasmPermissionTier::Isolated,
-        WasmPermissionTier::ReadOnly,
-        WasmPermissionTier::ReadWrite,
-        WasmPermissionTier::Full,
-    ];
-
-    for tier in tiers {
-        let tier_name = match tier {
-            WasmPermissionTier::Isolated => "isolated",
-            WasmPermissionTier::ReadOnly => "read-only",
-            WasmPermissionTier::ReadWrite => "read-write",
-            WasmPermissionTier::Full => "full",
-        };
-        let wasm_cwd = temp.path().join(format!("wasm-{tier_name}"));
-        fs::create_dir_all(&wasm_cwd).expect("create tier-specific wasm cwd");
-        fs::write(wasm_cwd.join("guest.wasm"), wasm_noop_module()).expect("write wasm module");
-
-        let context = engine.create_context(CreateWasmContextRequest {
-            vm_id: String::from("vm-wasm"),
-            module_path: Some(String::from("./guest.wasm")),
-        });
-
-        let result = engine
-            .start_execution(StartWasmExecutionRequest {
-                guest_runtime: Default::default(),
-                limits: Default::default(),
-                vm_id: String::from("vm-wasm"),
-                context_id: context.context_id,
-                argv: vec![String::from("./guest.wasm")],
-                env: BTreeMap::new(),
-                cwd: wasm_cwd,
-                permission_tier: tier,
-            })
-            .expect("start wasm execution")
-            .wait()
-            .expect("wait for wasm execution");
-        assert_eq!(result.exit_code, 0);
-    }
-    assert!(
-        !log_path.exists(),
-        "wasm permission tiers should stay inside the V8 runtime rather than falling back to the host node binary"
-    );
-}
-
-#[test]
-fn permission_flags_suite() {
-    // Keep V8-backed integration coverage inside one top-level libtest case.
-    // Running these guest-runtime cases as separate tests in the same binary
-    // still trips a V8 teardown/init boundary crash between cases.
-    node_permission_flags_allow_workers_for_internal_javascript_loader_runtime();
-    node_permission_flags_only_propagate_nested_child_capabilities_when_parent_explicitly_allows_them();
-    python_execution_applies_configured_heap_limit_to_v8_runtime();
-    wasm_execution_applies_runtime_memory_and_fuel_limits_inside_v8_runtime();
-    wasm_permission_tiers_do_not_fall_back_to_host_node_binary();
-}
diff --git a/crates/execution/tests/process.rs b/crates/execution/tests/process.rs
deleted file mode 100644
index 9b8bbf073..000000000
--- a/crates/execution/tests/process.rs
+++ /dev/null
@@ -1,238 +0,0 @@
-use secure_exec_execution::{
-    CreateJavascriptContextRequest, CreatePythonContextRequest, CreateWasmContextRequest,
-    JavascriptExecutionEngine, PythonExecutionEngine, PythonExecutionEvent,
-    StartJavascriptExecutionRequest, StartPythonExecutionRequest, StartWasmExecutionRequest,
-    WasmExecutionEngine, WasmPermissionTier,
-};
-use std::collections::BTreeMap;
-use std::fs;
-use std::path::Path;
-use std::process::Command;
-use std::time::{Duration, Instant};
-use tempfile::tempdir;
-
-fn assert_node_available() {
-    let binary = std::env::var("AGENTOS_NODE_BINARY").unwrap_or_else(|_| String::from("node"));
-    let output = Command::new(binary)
-        .arg("--version")
-        .output()
-        .expect("spawn node --version");
-    assert!(output.status.success(), "node --version failed");
-}
-
-fn write_fixture(path: &Path, contents: &str) {
-    fs::write(path, contents).expect("write fixture");
-}
-
-fn write_pyodide_lock_fixture(path: &Path) {
-    write_fixture(path, "{\"packages\":[]}\n");
-    let pyodide_dir = path.parent().expect("pyodide fixture parent");
-    for asset in ["pyodide.asm.js", "pyodide.asm.wasm", "python_stdlib.zip"] {
-        let asset_path = pyodide_dir.join(asset);
-        if !asset_path.exists() {
-            fs::write(&asset_path, []).expect("write pyodide runtime fixture");
-        }
-    }
-}
-
-fn embedded_runtime_process_keeps_host_pid_internal_for_javascript() {
-    let temp = tempdir().expect("create temp dir");
-
-    let mut engine = JavascriptExecutionEngine::default();
-    let context = engine.create_context(CreateJavascriptContextRequest {
-        vm_id: String::from("vm-js"),
-        bootstrap_module: None,
-        compile_cache_root: None,
-    });
-
-    let execution = engine
-        .start_execution(StartJavascriptExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-js"),
-            context_id: context.context_id,
-            argv: vec![String::from("./entry.mjs")],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            wasm_module_bytes: None,
-            inline_code: Some(String::from("globalThis.__secureExecRanInV8 = true;")),
-        })
-        .expect("start JavaScript execution");
-
-    assert!(execution.uses_shared_v8_runtime());
-    assert_eq!(execution.child_pid(), 0);
-
-    let result = execution.wait().expect("wait for JavaScript execution");
-    assert_eq!(result.exit_code, 0);
-}
-
-fn embedded_runtime_process_keeps_host_pid_internal_for_wasm() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let module_path = temp.path().join("guest.wasm");
-    let module = wat::parse_str(
-        r#"(module
-          (func (export "_start"))
-        )"#,
-    )
-    .expect("compile wasm fixture");
-    fs::write(&module_path, module).expect("write wasm fixture");
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(module_path.to_string_lossy().into_owned()),
-    });
-
-    let execution = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: vec![module_path.to_string_lossy().into_owned()],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::ReadWrite,
-        })
-        .expect("start wasm execution");
-
-    assert!(execution.uses_shared_v8_runtime());
-    assert_eq!(execution.child_pid(), 0);
-
-    let result = execution.wait().expect("wait for wasm execution");
-    assert_eq!(
-        result.exit_code,
-        0,
-        "stderr: {}",
-        String::from_utf8_lossy(&result.stderr)
-    );
-}
-
-fn embedded_runtime_process_uses_session_control_for_python_kill() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dir");
-    write_fixture(
-        &pyodide_dir.join("pyodide.mjs"),
-        r#"
-export async function loadPyodide(options) {
-  options.stdout("ready\n");
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync() {
-      await new Promise(() => setInterval(() => {}, 1000));
-    },
-  };
-}
-"#,
-    );
-    write_pyodide_lock_fixture(&pyodide_dir.join("pyodide-lock.json"));
-
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir,
-    });
-
-    let mut execution = engine
-        .start_execution(StartPythonExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-python"),
-            context_id: context.context_id,
-            code: String::from("print('hang')"),
-            file_path: None,
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-        })
-        .expect("start Python execution");
-
-    assert!(execution.uses_shared_v8_runtime());
-    assert_eq!(execution.child_pid(), 0);
-
-    let ready_deadline = Instant::now() + Duration::from_secs(5);
-    let mut saw_ready = false;
-    while !saw_ready {
-        if Instant::now() >= ready_deadline {
-            panic!("timed out waiting for Python execution readiness");
-        }
-        match execution
-            .poll_event_blocking(
-                ready_deadline
-                    .saturating_duration_since(Instant::now())
-                    .min(Duration::from_millis(100)),
-            )
-            .expect("poll Python event before kill")
-        {
-            Some(PythonExecutionEvent::Stdout(chunk)) => {
-                saw_ready = String::from_utf8(chunk)
-                    .expect("stdout utf8")
-                    .contains("ready");
-            }
-            Some(PythonExecutionEvent::Exited(code)) => {
-                panic!("execution exited unexpectedly before kill with code {code}");
-            }
-            Some(PythonExecutionEvent::Stderr(chunk)) => {
-                panic!("unexpected stderr: {}", String::from_utf8_lossy(&chunk));
-            }
-            Some(PythonExecutionEvent::VfsRpcRequest(request)) => {
-                panic!("unexpected VFS RPC request during kill test: {request:?}");
-            }
-            Some(PythonExecutionEvent::JavascriptSyncRpcRequest(request)) => {
-                assert!(
-                    execution
-                        .try_service_standalone_module_sync_rpc(&request)
-                        .expect("service module sync RPC"),
-                    "unexpected JS sync RPC request during kill test: {request:?}"
-                );
-            }
-            None => panic!("timed out waiting for Python execution readiness"),
-        }
-    }
-
-    execution.kill().expect("kill hanging Python execution");
-
-    let kill_deadline = Instant::now() + Duration::from_secs(5);
-    let mut exit_code = None;
-    while exit_code.is_none() {
-        if Instant::now() >= kill_deadline {
-            panic!("timed out waiting for killed Python execution to exit");
-        }
-        match execution
-            .poll_event_blocking(
-                kill_deadline
-                    .saturating_duration_since(Instant::now())
-                    .min(Duration::from_millis(100)),
-            )
-            .expect("poll Python event after kill")
-        {
-            Some(PythonExecutionEvent::Exited(code)) => exit_code = Some(code),
-            Some(PythonExecutionEvent::Stdout(_)) | Some(PythonExecutionEvent::Stderr(_)) => {}
-            Some(PythonExecutionEvent::VfsRpcRequest(request)) => {
-                panic!("unexpected VFS RPC request after kill: {request:?}");
-            }
-            Some(PythonExecutionEvent::JavascriptSyncRpcRequest(request)) => {
-                assert!(
-                    execution
-                        .try_service_standalone_module_sync_rpc(&request)
-                        .expect("service module sync RPC"),
-                    "unexpected JS sync RPC request after kill: {request:?}"
-                );
-            }
-            None => {}
-        }
-    }
-
-    assert_eq!(exit_code, Some(1));
-}
-
-#[test]
-fn embedded_runtime_process_suite() {
-    embedded_runtime_process_keeps_host_pid_internal_for_javascript();
-    embedded_runtime_process_keeps_host_pid_internal_for_wasm();
-    embedded_runtime_process_uses_session_control_for_python_kill();
-}
diff --git a/crates/execution/tests/python.rs b/crates/execution/tests/python.rs
deleted file mode 100644
index a56e875d9..000000000
--- a/crates/execution/tests/python.rs
+++ /dev/null
@@ -1,1280 +0,0 @@
-use secure_exec_execution::{
-    CreatePythonContextRequest, PythonExecutionEngine, PythonExecutionEvent, PythonExecutionLimits,
-    PythonVfsRpcMethod, PythonVfsRpcResponsePayload, PythonVfsRpcStat, StartPythonExecutionRequest,
-};
-use std::collections::BTreeMap;
-use std::fs;
-use std::path::{Path, PathBuf};
-use std::process::{Command, Stdio};
-use std::thread;
-use std::time::{Duration, Instant};
-use tempfile::tempdir;
-
-const PYTHON_WARMUP_METRICS_PREFIX: &str = "__AGENTOS_PYTHON_WARMUP_METRICS__:";
-const PYTHON_EXECUTION_TIMEOUT_MS_ENV: &str = "AGENTOS_PYTHON_EXECUTION_TIMEOUT_MS";
-const PYTHON_MAX_OLD_SPACE_MB_ENV: &str = "AGENTOS_PYTHON_MAX_OLD_SPACE_MB";
-const PYTHON_OUTPUT_BUFFER_MAX_BYTES_ENV: &str = "AGENTOS_PYTHON_OUTPUT_BUFFER_MAX_BYTES";
-const PYTHON_VFS_RPC_TIMEOUT_MS_ENV: &str = "AGENTOS_PYTHON_VFS_RPC_TIMEOUT_MS";
-
-#[derive(Debug, Clone, PartialEq)]
-struct PythonPrewarmMetrics {
-    executed: bool,
-    reason: String,
-    duration_ms: f64,
-    compile_cache_dir: String,
-    pyodide_dist_path: String,
-}
-
-#[derive(Debug, Clone, PartialEq)]
-struct PythonStartupMetrics {
-    prewarm_only: bool,
-    startup_ms: f64,
-    load_pyodide_ms: f64,
-    package_load_ms: f64,
-    package_count: usize,
-    source: String,
-}
-
-fn assert_node_available() {
-    let binary = std::env::var("AGENTOS_NODE_BINARY").unwrap_or_else(|_| String::from("node"));
-    let output = Command::new(binary)
-        .arg("--version")
-        .output()
-        .expect("spawn node --version");
-    assert!(output.status.success(), "node --version failed");
-}
-
-fn write_fixture(path: &Path, contents: &str) {
-    fs::write(path, contents).expect("write fixture");
-}
-
-fn write_pyodide_lock_fixture(path: &Path) {
-    write_fixture(path, "{\"packages\":[]}\n");
-    let pyodide_dir = path.parent().expect("pyodide fixture parent");
-    for asset in ["pyodide.asm.js", "pyodide.asm.wasm", "python_stdlib.zip"] {
-        let asset_path = pyodide_dir.join(asset);
-        if !asset_path.exists() {
-            fs::write(&asset_path, []).expect("write pyodide runtime fixture");
-        }
-    }
-}
-
-fn parse_metrics_line<'a>(stderr: &'a str, phase: &str) -> &'a str {
-    stderr
-        .lines()
-        .filter_map(|line| line.strip_prefix(PYTHON_WARMUP_METRICS_PREFIX))
-        .find(|line| parse_string_metric(line, "phase") == phase)
-        .unwrap_or_else(|| panic!("missing {phase} metrics line in stderr: {stderr}"))
-}
-
-fn parse_prewarm_metrics(stderr: &str) -> PythonPrewarmMetrics {
-    let metrics_line = parse_metrics_line(stderr, "prewarm");
-    PythonPrewarmMetrics {
-        executed: parse_boolean_metric(metrics_line, "executed"),
-        reason: parse_string_metric(metrics_line, "reason"),
-        duration_ms: parse_float_metric(metrics_line, "durationMs"),
-        compile_cache_dir: parse_string_metric(metrics_line, "compileCacheDir"),
-        pyodide_dist_path: parse_string_metric(metrics_line, "pyodideDistPath"),
-    }
-}
-
-fn parse_startup_metrics(stderr: &str) -> PythonStartupMetrics {
-    let metrics_line = parse_metrics_line(stderr, "startup");
-    PythonStartupMetrics {
-        prewarm_only: parse_boolean_metric(metrics_line, "prewarmOnly"),
-        startup_ms: parse_float_metric(metrics_line, "startupMs"),
-        load_pyodide_ms: parse_float_metric(metrics_line, "loadPyodideMs"),
-        package_load_ms: parse_float_metric(metrics_line, "packageLoadMs"),
-        package_count: parse_metric_value(metrics_line, "packageCount"),
-        source: parse_string_metric(metrics_line, "source"),
-    }
-}
-
-fn parse_metric_value(metrics_line: &str, key: &str) -> usize {
-    parse_float_metric(metrics_line, key) as usize
-}
-
-fn parse_float_metric(metrics_line: &str, key: &str) -> f64 {
-    let marker = format!("\"{key}\":");
-    let start = metrics_line.find(&marker).expect("metric key") + marker.len();
-    let digits: String = metrics_line[start..]
-        .chars()
-        .skip_while(|ch| !ch.is_ascii_digit() && *ch != '-')
-        .take_while(|ch| ch.is_ascii_digit() || matches!(ch, '.' | '-' | 'e' | 'E' | '+'))
-        .collect();
-
-    digits.parse().expect("float metric value")
-}
-
-fn parse_boolean_metric(metrics_line: &str, key: &str) -> bool {
-    let marker = format!("\"{key}\":");
-    let start = metrics_line.find(&marker).expect("metric key") + marker.len();
-    let remaining = &metrics_line[start..];
-
-    if remaining.starts_with("true") {
-        true
-    } else if remaining.starts_with("false") {
-        false
-    } else {
-        panic!("invalid boolean metric for {key}: {metrics_line}");
-    }
-}
-
-fn parse_string_metric(metrics_line: &str, key: &str) -> String {
-    let marker = format!("\"{key}\":\"");
-    let start = metrics_line.find(&marker).expect("metric key") + marker.len();
-    let mut value = String::new();
-    let mut escaped = false;
-
-    for ch in metrics_line[start..].chars() {
-        if escaped {
-            value.push(match ch {
-                'n' => '\n',
-                'r' => '\r',
-                't' => '\t',
-                '"' => '"',
-                '\\' => '\\',
-                other => other,
-            });
-            escaped = false;
-            continue;
-        }
-
-        match ch {
-            '\\' => escaped = true,
-            '"' => return value,
-            other => value.push(other),
-        }
-    }
-
-    panic!("unterminated string metric for {key}: {metrics_line}");
-}
-
-fn run_python_execution(
-    engine: &mut PythonExecutionEngine,
-    context_id: String,
-    cwd: &Path,
-    code: &str,
-    env: BTreeMap<String, String>,
-) -> (String, String, i32) {
-    let execution = engine
-        .start_execution(StartPythonExecutionRequest {
-            limits: Default::default(),
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-python"),
-            context_id,
-            code: String::from(code),
-            file_path: None,
-            env,
-            cwd: cwd.to_path_buf(),
-        })
-        .expect("start Python execution");
-
-    let result = execution.wait(None).expect("wait for Python execution");
-    let stdout = String::from_utf8(result.stdout).expect("stdout utf8");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-
-    (stdout, stderr, result.exit_code)
-}
-
-fn assert_process_exits(pid: u32) {
-    for _ in 0..20 {
-        let status = Command::new("kill")
-            .arg("-0")
-            .arg(pid.to_string())
-            .stdout(Stdio::null())
-            .stderr(Stdio::null())
-            .status()
-            .expect("probe process with kill -0");
-        if !status.success() {
-            return;
-        }
-        thread::sleep(Duration::from_millis(25));
-    }
-
-    panic!("process {pid} was still alive after waiting for cleanup");
-}
-
-fn python_contexts_preserve_vm_and_pyodide_configuration() {
-    let pyodide_dist_path = PathBuf::from("/tmp/pyodide");
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dist_path.clone(),
-    });
-
-    assert_eq!(context.context_id, "python-ctx-1");
-    assert_eq!(context.vm_id, "vm-python");
-    assert_eq!(context.pyodide_dist_path, pyodide_dist_path);
-}
-
-fn python_execution_runs_code_and_streams_stdio() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dir");
-    write_fixture(
-        &pyodide_dir.join("pyodide.mjs"),
-        r#"
-export async function loadPyodide(options) {
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync(code) {
-      options.stdout(`stdout:${code}`);
-      options.stderr(`stderr:${options.indexURL}`);
-    },
-  };
-}
-"#,
-    );
-    write_pyodide_lock_fixture(&pyodide_dir.join("pyodide-lock.json"));
-
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir.clone(),
-    });
-
-    let (stdout, stderr, exit_code) = run_python_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        "print('hello')",
-        BTreeMap::new(),
-    );
-    assert_eq!(exit_code, 0);
-    assert_eq!(stdout, "stdout:print('hello')\n");
-    assert!(
-        stderr.starts_with("stderr:/__agentos_pyodide/"),
-        "unexpected stderr: {stderr}"
-    );
-}
-
-fn python_execution_wait_bounds_output_buffers() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dir");
-    write_fixture(
-        &pyodide_dir.join("pyodide.mjs"),
-        r#"
-export async function loadPyodide(options) {
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync() {
-      options.stdout('x'.repeat(80));
-      options.stderr('y'.repeat(80));
-    },
-  };
-}
-"#,
-    );
-    write_pyodide_lock_fixture(&pyodide_dir.join("pyodide-lock.json"));
-
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir,
-    });
-
-    let result = engine
-        .start_execution(StartPythonExecutionRequest {
-            guest_runtime: Default::default(),
-            // The cap is enforced from the typed wire limit. The env knob carries
-            // a much larger value to prove it is inert: if it were still read the
-            // buffer would not cap at 32.
-            limits: PythonExecutionLimits {
-                output_buffer_max_bytes: Some(32),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-python"),
-            context_id: context.context_id,
-            code: String::from("print('ignored')"),
-            file_path: None,
-            env: BTreeMap::from([(
-                String::from(PYTHON_OUTPUT_BUFFER_MAX_BYTES_ENV),
-                String::from("999999"),
-            )]),
-            cwd: temp.path().to_path_buf(),
-        })
-        .expect("start Python execution")
-        .wait(None)
-        .expect("wait for Python execution");
-
-    assert_eq!(result.exit_code, 0);
-    assert_eq!(result.stdout.len(), 32, "stdout should be capped");
-    assert_eq!(result.stderr.len(), 32, "stderr should be capped");
-    assert!(result.stdout.iter().all(|byte| *byte == b'x'));
-    assert!(result.stderr.iter().all(|byte| *byte == b'y'));
-}
-
-fn python_execution_emits_stdout_before_exit() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dir");
-    write_fixture(
-        &pyodide_dir.join("pyodide.mjs"),
-        r#"
-export async function loadPyodide(options) {
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync(code) {
-      options.stdout(`stdout:${code}`);
-    },
-  };
-}
-"#,
-    );
-    write_pyodide_lock_fixture(&pyodide_dir.join("pyodide-lock.json"));
-
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir,
-    });
-
-    let mut execution = engine
-        .start_execution(StartPythonExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-python"),
-            context_id: context.context_id,
-            code: String::from("print('streamed')"),
-            file_path: None,
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-        })
-        .expect("start Python execution");
-
-    let mut saw_stdout = false;
-    let mut saw_exit = false;
-
-    while !saw_exit {
-        match execution
-            .poll_event_blocking(Duration::from_secs(5))
-            .expect("poll Python event")
-        {
-            Some(PythonExecutionEvent::Stdout(chunk)) => {
-                saw_stdout = String::from_utf8(chunk)
-                    .expect("stdout utf8")
-                    .contains("stdout:print('streamed')");
-            }
-            Some(PythonExecutionEvent::Exited(code)) => {
-                assert_eq!(code, 0);
-                saw_exit = true;
-            }
-            Some(PythonExecutionEvent::VfsRpcRequest(request)) => {
-                panic!("unexpected VFS RPC request during stdout test: {request:?}");
-            }
-            Some(PythonExecutionEvent::JavascriptSyncRpcRequest(request)) => {
-                // Module-resolution sync RPCs now surface here (the runner
-                // module imports node builtins); service them host-directly.
-                let serviced = execution
-                    .try_service_standalone_module_sync_rpc(&request)
-                    .expect("service module sync RPC");
-                assert!(
-                    serviced,
-                    "unexpected JS sync RPC request during stdout test: {request:?}"
-                );
-            }
-            Some(PythonExecutionEvent::Stderr(chunk)) => {
-                panic!("unexpected stderr: {}", String::from_utf8_lossy(&chunk));
-            }
-            None => panic!("timed out waiting for Python execution event"),
-        }
-    }
-
-    assert!(saw_stdout, "expected stdout event before exit");
-}
-
-fn python_execution_reports_prewarm_and_startup_metrics_when_debug_enabled() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dir");
-    write_fixture(
-        &pyodide_dir.join("pyodide.mjs"),
-        r#"
-export async function loadPyodide() {
-  await new Promise((resolve) => setTimeout(resolve, 20));
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync(code) {
-      console.log(`ran:${code}`);
-    },
-  };
-}
-"#,
-    );
-    write_pyodide_lock_fixture(&pyodide_dir.join("pyodide-lock.json"));
-
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir.clone(),
-    });
-    let debug_env = BTreeMap::from([(
-        String::from("AGENTOS_PYTHON_WARMUP_DEBUG"),
-        String::from("1"),
-    )]);
-
-    let (first_stdout, first_stderr, first_exit_code) = run_python_execution(
-        &mut engine,
-        context.context_id.clone(),
-        temp.path(),
-        "print('first')",
-        debug_env.clone(),
-    );
-    let first_prewarm = parse_prewarm_metrics(&first_stderr);
-    let first_startup = parse_startup_metrics(&first_stderr);
-
-    assert_eq!(first_exit_code, 0);
-    assert!(first_stdout.contains("ran:print('first')"));
-    assert!(
-        first_prewarm.executed,
-        "first prewarm metrics: {first_prewarm:?}"
-    );
-    assert_eq!(first_prewarm.reason, "executed");
-    assert!(first_prewarm.duration_ms >= 0.0);
-    assert!(
-        first_prewarm.compile_cache_dir.contains("compile-cache"),
-        "unexpected prewarm metrics: {first_prewarm:?}"
-    );
-    assert_eq!(
-        PathBuf::from(&first_prewarm.pyodide_dist_path),
-        pyodide_dir,
-        "unexpected prewarm metrics: {first_prewarm:?}"
-    );
-    assert!(!first_startup.prewarm_only);
-    assert!(first_startup.startup_ms > 0.0);
-    assert!(first_startup.load_pyodide_ms > 0.0);
-    assert_eq!(first_startup.package_load_ms, 0.0);
-    assert_eq!(first_startup.package_count, 0);
-    assert_eq!(first_startup.source, "inline");
-
-    let (_second_stdout, second_stderr, second_exit_code) = run_python_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        "print('second')",
-        debug_env,
-    );
-    let second_prewarm = parse_prewarm_metrics(&second_stderr);
-    let second_startup = parse_startup_metrics(&second_stderr);
-
-    assert_eq!(second_exit_code, 0);
-    assert!(
-        !second_prewarm.executed,
-        "second prewarm metrics: {second_prewarm:?}"
-    );
-    assert_eq!(second_prewarm.reason, "cached");
-    assert_eq!(second_prewarm.duration_ms, 0.0);
-    assert!(!second_startup.prewarm_only);
-    assert!(second_startup.startup_ms > 0.0);
-    assert!(second_startup.load_pyodide_ms > 0.0);
-    assert_eq!(second_startup.source, "inline");
-}
-
-fn python_execution_keeps_streaming_stdin_sessions_alive_until_closed() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dir");
-    write_fixture(
-        &pyodide_dir.join("pyodide.mjs"),
-        r#"
-const decoder = new TextDecoder();
-
-export async function loadPyodide(options) {
-  let stdin = null;
-  return {
-    setStdin(config) {
-      stdin = config;
-    },
-    async runPythonAsync(code) {
-      const chunk = new Uint8Array(8192);
-      const bytesRead = stdin.read(chunk);
-      const text = decoder.decode(chunk.subarray(0, bytesRead));
-      options.stdout(`stdin:${text}`);
-      options.stdout(`code:${code}`);
-    },
-  };
-}
-"#,
-    );
-    write_pyodide_lock_fixture(&pyodide_dir.join("pyodide-lock.json"));
-
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir,
-    });
-
-    let mut execution = engine
-        .start_execution(StartPythonExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-python"),
-            context_id: context.context_id,
-            code: String::from("print('streaming')"),
-            file_path: None,
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-        })
-        .expect("start Python execution");
-
-    // Module-resolution sync RPCs surface during startup (the runner module
-    // imports node builtins); service them, then confirm the execution then
-    // stays idle (no other event) until stdin closes.
-    let idle_deadline = Instant::now() + Duration::from_millis(400);
-    loop {
-        match execution
-            .poll_event_blocking(Duration::from_millis(50))
-            .expect("poll Python event before stdin write")
-        {
-            None => {
-                if Instant::now() >= idle_deadline {
-                    break;
-                }
-            }
-            Some(PythonExecutionEvent::JavascriptSyncRpcRequest(request)) => {
-                assert!(
-                    execution
-                        .try_service_standalone_module_sync_rpc(&request)
-                        .expect("service module sync RPC"),
-                    "unexpected JS sync RPC before stdin write: {request:?}"
-                );
-            }
-            other => panic!(
-                "streaming-stdin execution should stay alive until stdin closes, got {other:?}"
-            ),
-        }
-    }
-
-    execution
-        .write_stdin(b"still-open")
-        .expect("write stdin after idle period");
-    execution.close_stdin().expect("close stdin");
-
-    let mut stdout = Vec::new();
-    let mut exit_code = None;
-
-    while exit_code.is_none() {
-        match execution
-            .poll_event_blocking(Duration::from_secs(5))
-            .expect("poll Python event")
-        {
-            Some(PythonExecutionEvent::Stdout(chunk)) => stdout.extend(chunk),
-            Some(PythonExecutionEvent::VfsRpcRequest(request)) => {
-                panic!("unexpected VFS RPC request during stdin test: {request:?}");
-            }
-            Some(PythonExecutionEvent::JavascriptSyncRpcRequest(request)) => {
-                assert!(
-                    execution
-                        .try_service_standalone_module_sync_rpc(&request)
-                        .expect("service module sync RPC"),
-                    "unexpected JS sync RPC request during stdin test: {request:?}"
-                );
-            }
-            Some(PythonExecutionEvent::Stderr(chunk)) => {
-                panic!("unexpected stderr: {}", String::from_utf8_lossy(&chunk));
-            }
-            Some(PythonExecutionEvent::Exited(code)) => exit_code = Some(code),
-            None => panic!("timed out waiting for Python execution event"),
-        }
-    }
-
-    assert_eq!(exit_code, Some(0));
-    let stdout = String::from_utf8(stdout).expect("stdout utf8");
-    assert!(
-        stdout.contains("stdin:still-open"),
-        "unexpected stdout: {stdout}"
-    );
-    assert!(
-        stdout.contains("code:print('streaming')"),
-        "unexpected stdout: {stdout}"
-    );
-}
-
-fn python_execution_surfaces_vfs_rpc_requests_and_resumes_after_responses() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dir");
-    write_fixture(
-        &pyodide_dir.join("pyodide.mjs"),
-        r#"
-export async function loadPyodide(options) {
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync(code) {
-      const rpc = globalThis.__agentOSPythonVfsRpc;
-      await rpc.fsMkdir('/workspace', { recursive: true });
-      await rpc.fsWrite(
-        '/workspace/note.txt',
-        Buffer.from('hello from rpc', 'utf8').toString('base64'),
-      );
-      const content = Buffer.from(
-        await rpc.fsRead('/workspace/note.txt'),
-        'base64',
-      ).toString('utf8');
-      const stat = await rpc.fsStat('/workspace/note.txt');
-      const entries = await rpc.fsReaddir('/workspace');
-      options.stdout(JSON.stringify({ code, content, stat, entries }));
-    },
-  };
-}
-"#,
-    );
-    write_pyodide_lock_fixture(&pyodide_dir.join("pyodide-lock.json"));
-
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir,
-    });
-
-    let mut execution = engine
-        .start_execution(StartPythonExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-python"),
-            context_id: context.context_id,
-            code: String::from("print('rpc bridge')"),
-            file_path: None,
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-        })
-        .expect("start Python execution");
-
-    let mut stdout = Vec::new();
-    let mut exit_code = None;
-    let mut saw_requests = Vec::new();
-
-    while exit_code.is_none() {
-        match execution
-            .poll_event_blocking(Duration::from_secs(5))
-            .expect("poll Python event")
-        {
-            Some(PythonExecutionEvent::Stdout(chunk)) => stdout.extend(chunk),
-            Some(PythonExecutionEvent::Stderr(chunk)) => {
-                panic!("unexpected stderr: {}", String::from_utf8_lossy(&chunk));
-            }
-            Some(PythonExecutionEvent::VfsRpcRequest(request)) => {
-                saw_requests.push((request.method, request.path.clone()));
-                match request.method {
-                    PythonVfsRpcMethod::Mkdir => execution
-                        .respond_vfs_rpc_success(request.id, PythonVfsRpcResponsePayload::Empty)
-                        .expect("respond to mkdir"),
-                    PythonVfsRpcMethod::Write => {
-                        assert_eq!(request.path, "/workspace/note.txt");
-                        assert_eq!(
-                            request.content_base64.as_deref(),
-                            Some("aGVsbG8gZnJvbSBycGM=")
-                        );
-                        execution
-                            .respond_vfs_rpc_success(request.id, PythonVfsRpcResponsePayload::Empty)
-                            .expect("respond to write");
-                    }
-                    PythonVfsRpcMethod::Read => execution
-                        .respond_vfs_rpc_success(
-                            request.id,
-                            PythonVfsRpcResponsePayload::Read {
-                                content_base64: String::from("aGVsbG8gZnJvbSBycGM="),
-                            },
-                        )
-                        .expect("respond to read"),
-                    PythonVfsRpcMethod::Stat => execution
-                        .respond_vfs_rpc_success(
-                            request.id,
-                            PythonVfsRpcResponsePayload::Stat {
-                                stat: PythonVfsRpcStat {
-                                    mode: 0o100644,
-                                    size: 14,
-                                    is_directory: false,
-                                    is_symbolic_link: false,
-                                },
-                            },
-                        )
-                        .expect("respond to stat"),
-                    PythonVfsRpcMethod::ReadDir => execution
-                        .respond_vfs_rpc_success(
-                            request.id,
-                            PythonVfsRpcResponsePayload::ReadDir {
-                                entries: vec![String::from("note.txt")],
-                            },
-                        )
-                        .expect("respond to read_dir"),
-                    PythonVfsRpcMethod::Unlink
-                    | PythonVfsRpcMethod::Rmdir
-                    | PythonVfsRpcMethod::Rename => {
-                        panic!(
-                            "unexpected mutating-FS Python RPC in this test: {:?}",
-                            request.method
-                        )
-                    }
-                    PythonVfsRpcMethod::HttpRequest
-                    | PythonVfsRpcMethod::DnsLookup
-                    | PythonVfsRpcMethod::SubprocessRun => {
-                        panic!("unexpected non-filesystem Python RPC: {:?}", request.method)
-                    }
-                    other => {
-                        panic!(
-                            "unexpected Python VFS RPC method in this test: {other:?} for {}",
-                            request.path
-                        )
-                    }
-                }
-            }
-            Some(PythonExecutionEvent::JavascriptSyncRpcRequest(request)) => {
-                assert!(
-                    execution
-                        .try_service_standalone_module_sync_rpc(&request)
-                        .expect("service module sync RPC"),
-                    "unexpected JS sync RPC request during VFS RPC test: {request:?}"
-                );
-            }
-            Some(PythonExecutionEvent::Exited(code)) => exit_code = Some(code),
-            None => panic!("timed out waiting for Python execution event"),
-        }
-    }
-
-    assert_eq!(exit_code, Some(0));
-    assert_eq!(
-        saw_requests,
-        vec![
-            (PythonVfsRpcMethod::Mkdir, String::from("/workspace")),
-            (
-                PythonVfsRpcMethod::Write,
-                String::from("/workspace/note.txt")
-            ),
-            (
-                PythonVfsRpcMethod::Read,
-                String::from("/workspace/note.txt")
-            ),
-            (
-                PythonVfsRpcMethod::Stat,
-                String::from("/workspace/note.txt")
-            ),
-            (PythonVfsRpcMethod::ReadDir, String::from("/workspace")),
-        ]
-    );
-
-    let stdout = String::from_utf8(stdout).expect("stdout utf8");
-    assert!(
-        stdout.contains("\"content\":\"hello from rpc\""),
-        "unexpected stdout: {stdout}"
-    );
-    assert!(
-        stdout.contains("\"entries\":[\"note.txt\"]"),
-        "unexpected stdout: {stdout}"
-    );
-    assert!(
-        stdout.contains("\"size\":14"),
-        "unexpected stdout: {stdout}"
-    );
-}
-
-fn python_execution_wait_timeout_cleans_up_hanging_child() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dir");
-    write_fixture(
-        &pyodide_dir.join("pyodide.mjs"),
-        r#"
-export async function loadPyodide() {
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync() {
-      await new Promise(() => setInterval(() => {}, 1000));
-    },
-  };
-}
-"#,
-    );
-    write_pyodide_lock_fixture(&pyodide_dir.join("pyodide-lock.json"));
-
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir,
-    });
-
-    let execution = engine
-        .start_execution(StartPythonExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-python"),
-            context_id: context.context_id,
-            code: String::from("print('hang')"),
-            file_path: None,
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-        })
-        .expect("start Python execution");
-    let child_pid = execution.child_pid();
-    let uses_shared_v8_runtime = execution.uses_shared_v8_runtime();
-
-    let error = execution
-        .wait(Some(Duration::from_millis(100)))
-        .expect_err("timed out wait");
-    match error {
-        secure_exec_execution::PythonExecutionError::TimedOut(timeout) => {
-            assert_eq!(timeout, Duration::from_millis(100));
-        }
-        other => panic!("expected timeout error, got {other:?}"),
-    }
-
-    if !uses_shared_v8_runtime {
-        assert_process_exits(child_pid);
-    }
-}
-
-fn python_execution_uses_configured_default_timeout_when_wait_timeout_not_provided() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dir");
-    write_fixture(
-        &pyodide_dir.join("pyodide.mjs"),
-        r#"
-export async function loadPyodide() {
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync() {
-      await new Promise(() => setInterval(() => {}, 1000));
-    },
-  };
-}
-"#,
-    );
-    write_pyodide_lock_fixture(&pyodide_dir.join("pyodide-lock.json"));
-
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir,
-    });
-
-    let execution = engine
-        .start_execution(StartPythonExecutionRequest {
-            guest_runtime: Default::default(),
-            // Enforced from the typed wire limit. The env knob is set to "0"
-            // (which would *disable* the timeout if it were still read) to prove
-            // it is inert.
-            limits: PythonExecutionLimits {
-                execution_timeout_ms: Some(75),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-python"),
-            context_id: context.context_id,
-            code: String::from("print('hang')"),
-            file_path: None,
-            env: BTreeMap::from([(
-                String::from(PYTHON_EXECUTION_TIMEOUT_MS_ENV),
-                String::from("0"),
-            )]),
-            cwd: temp.path().to_path_buf(),
-        })
-        .expect("start Python execution");
-    let child_pid = execution.child_pid();
-    let uses_shared_v8_runtime = execution.uses_shared_v8_runtime();
-
-    let error = execution
-        .wait(None)
-        .expect_err("configured timeout should fire");
-    match error {
-        secure_exec_execution::PythonExecutionError::TimedOut(timeout) => {
-            assert_eq!(timeout, Duration::from_millis(75));
-        }
-        other => panic!("expected timeout error, got {other:?}"),
-    }
-
-    if !uses_shared_v8_runtime {
-        assert_process_exits(child_pid);
-    }
-}
-
-fn python_vfs_rpc_bridge_times_out_when_sidecar_never_responds() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dir");
-    write_fixture(
-        &pyodide_dir.join("pyodide.mjs"),
-        r#"
-export async function loadPyodide() {
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync() {
-      globalThis.__agentOSPythonVfsRpc.fsReadSync('/workspace/never.txt');
-    },
-  };
-}
-"#,
-    );
-    write_pyodide_lock_fixture(&pyodide_dir.join("pyodide-lock.json"));
-
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir,
-    });
-
-    let mut execution = engine
-        .start_execution(StartPythonExecutionRequest {
-            guest_runtime: Default::default(),
-            // Enforced from the typed wire limit; the env knob carries a much
-            // larger value to prove it is inert.
-            limits: PythonExecutionLimits {
-                vfs_rpc_timeout_ms: Some(50),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-python"),
-            context_id: context.context_id,
-            code: String::from("print('rpc timeout')"),
-            file_path: None,
-            env: BTreeMap::from([(
-                String::from(PYTHON_VFS_RPC_TIMEOUT_MS_ENV),
-                String::from("600000"),
-            )]),
-            cwd: temp.path().to_path_buf(),
-        })
-        .expect("start Python execution");
-    let child_pid = execution.child_pid();
-    let uses_shared_v8_runtime = execution.uses_shared_v8_runtime();
-
-    let mut saw_request = false;
-    let mut stderr = Vec::new();
-    let mut exit_code = None;
-
-    for _ in 0..40 {
-        match execution
-            .poll_event_blocking(Duration::from_millis(250))
-            .expect("poll Python event")
-        {
-            Some(PythonExecutionEvent::VfsRpcRequest(request)) => {
-                saw_request = true;
-                assert_eq!(request.method, PythonVfsRpcMethod::Read);
-                assert_eq!(request.path, "/workspace/never.txt");
-            }
-            Some(PythonExecutionEvent::JavascriptSyncRpcRequest(request)) => {
-                assert!(
-                    execution
-                        .try_service_standalone_module_sync_rpc(&request)
-                        .expect("service module sync RPC"),
-                    "unexpected JS sync RPC request during timeout test: {request:?}"
-                );
-            }
-            Some(PythonExecutionEvent::Stderr(chunk)) => stderr.extend(chunk),
-            Some(PythonExecutionEvent::Exited(code)) => {
-                exit_code = Some(code);
-                break;
-            }
-            Some(PythonExecutionEvent::Stdout(chunk)) => {
-                panic!("unexpected stdout: {}", String::from_utf8_lossy(&chunk));
-            }
-            None => {}
-        }
-    }
-
-    assert!(saw_request, "expected a VFS RPC request before timeout");
-    assert_eq!(
-        exit_code,
-        Some(1),
-        "stderr: {}",
-        String::from_utf8_lossy(&stderr)
-    );
-
-    let stderr = String::from_utf8(stderr).expect("stderr utf8");
-    assert!(
-        stderr.contains("ERR_AGENTOS_PYTHON_VFS_RPC_TIMEOUT")
-            || stderr.contains("timed out waiting for a response")
-            || stderr.contains("timed out after 50ms"),
-        "unexpected stderr: {stderr}"
-    );
-    if !uses_shared_v8_runtime {
-        assert_process_exits(child_pid);
-    }
-}
-
-fn python_execution_surfaces_runtime_stderr() {
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dir");
-    write_fixture(
-        &pyodide_dir.join("pyodide.mjs"),
-        r#"
-export async function loadPyodide() {
-  console.error("runtime stderr before failure");
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync() {
-      throw new Error("simulated runtime failure");
-    },
-  };
-}
-"#,
-    );
-    write_pyodide_lock_fixture(&pyodide_dir.join("pyodide-lock.json"));
-
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir,
-    });
-
-    let result = engine
-        .start_execution(StartPythonExecutionRequest {
-            guest_runtime: Default::default(),
-            // Enforced from the typed wire limit. The env knob is set to "0"
-            // (which would mean "use the V8 default / unlimited" if it were still
-            // read) to prove it is inert.
-            limits: PythonExecutionLimits {
-                max_old_space_mb: Some(64),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-python"),
-            context_id: context.context_id,
-            code: String::from("print('oom')"),
-            file_path: None,
-            env: BTreeMap::from([(String::from(PYTHON_MAX_OLD_SPACE_MB_ENV), String::from("0"))]),
-            cwd: temp.path().to_path_buf(),
-        })
-        .expect("start Python execution")
-        .wait(None)
-        .expect("wait for Python execution");
-
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 1, "stderr: {stderr}");
-    assert!(
-        stderr.contains("runtime stderr before failure")
-            && stderr.contains("simulated runtime failure"),
-        "unexpected stderr: {stderr}"
-    );
-}
-
-fn python_execution_kill_stops_inflight_process_and_emits_exit() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dir");
-    write_fixture(
-        &pyodide_dir.join("pyodide.mjs"),
-        r#"
-export async function loadPyodide(options) {
-  options.stdout("ready\n");
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync() {
-      await new Promise(() => setInterval(() => {}, 1000));
-    },
-  };
-}
-"#,
-    );
-    write_pyodide_lock_fixture(&pyodide_dir.join("pyodide-lock.json"));
-
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir,
-    });
-
-    let mut execution = engine
-        .start_execution(StartPythonExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-python"),
-            context_id: context.context_id,
-            code: String::from("print('hang')"),
-            file_path: None,
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-        })
-        .expect("start Python execution");
-    let child_pid = execution.child_pid();
-    let uses_shared_v8_runtime = execution.uses_shared_v8_runtime();
-
-    let ready_deadline = Instant::now() + Duration::from_secs(5);
-    let mut saw_ready = false;
-    while !saw_ready {
-        if Instant::now() >= ready_deadline {
-            panic!("timed out waiting for Python execution readiness");
-        }
-        match execution
-            .poll_event_blocking(
-                ready_deadline
-                    .saturating_duration_since(Instant::now())
-                    .min(Duration::from_millis(100)),
-            )
-            .expect("poll Python event before kill")
-        {
-            Some(PythonExecutionEvent::Stdout(chunk)) => {
-                saw_ready = String::from_utf8(chunk)
-                    .expect("stdout utf8")
-                    .contains("ready");
-            }
-            Some(PythonExecutionEvent::Stderr(chunk)) => {
-                panic!("unexpected stderr: {}", String::from_utf8_lossy(&chunk));
-            }
-            Some(PythonExecutionEvent::VfsRpcRequest(request)) => {
-                panic!("unexpected VFS RPC request during kill test: {request:?}");
-            }
-            Some(PythonExecutionEvent::JavascriptSyncRpcRequest(request)) => {
-                assert!(
-                    execution
-                        .try_service_standalone_module_sync_rpc(&request)
-                        .expect("service module sync RPC"),
-                    "unexpected JS sync RPC request during kill test: {request:?}"
-                );
-            }
-            Some(PythonExecutionEvent::Exited(code)) => {
-                panic!("execution exited unexpectedly before kill with code {code}");
-            }
-            None => panic!("timed out waiting for Python execution readiness"),
-        }
-    }
-
-    execution.kill().expect("kill hanging Python execution");
-
-    let kill_deadline = Instant::now() + Duration::from_secs(5);
-    let mut exit_code = None;
-    while exit_code.is_none() {
-        if Instant::now() >= kill_deadline {
-            panic!("timed out waiting for killed Python execution to exit");
-        }
-        match execution
-            .poll_event_blocking(
-                kill_deadline
-                    .saturating_duration_since(Instant::now())
-                    .min(Duration::from_millis(100)),
-            )
-            .expect("poll Python event after kill")
-        {
-            Some(PythonExecutionEvent::Exited(code)) => exit_code = Some(code),
-            Some(PythonExecutionEvent::Stdout(_)) | Some(PythonExecutionEvent::Stderr(_)) => {}
-            Some(PythonExecutionEvent::VfsRpcRequest(request)) => {
-                panic!("unexpected VFS RPC request after kill: {request:?}");
-            }
-            Some(PythonExecutionEvent::JavascriptSyncRpcRequest(request)) => {
-                assert!(
-                    execution
-                        .try_service_standalone_module_sync_rpc(&request)
-                        .expect("service module sync RPC"),
-                    "unexpected JS sync RPC request after kill: {request:?}"
-                );
-            }
-            None => {}
-        }
-    }
-
-    assert_eq!(exit_code, Some(1));
-    if !uses_shared_v8_runtime {
-        assert_process_exits(child_pid);
-    }
-}
-
-fn python_execution_blocks_network_requests_during_pyodide_init() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let pyodide_dir = temp.path().join("pyodide");
-    fs::create_dir_all(&pyodide_dir).expect("create pyodide dir");
-    write_fixture(
-        &pyodide_dir.join("pyodide.mjs"),
-        r#"
-export async function loadPyodide() {
-  let initResult;
-  try {
-    await fetch('https://example.com/pyodide-init-check');
-    initResult = { ok: true };
-  } catch (error) {
-    initResult = {
-      ok: false,
-      code: error.code ?? null,
-      message: error.message,
-    };
-  }
-
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync() {
-      console.log(JSON.stringify(initResult));
-    },
-  };
-}
-
-"#,
-    );
-    write_pyodide_lock_fixture(&pyodide_dir.join("pyodide-lock.json"));
-
-    let mut engine = PythonExecutionEngine::default();
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir,
-    });
-
-    let (stdout, stderr, exit_code) = run_python_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        "print('ignored')",
-        BTreeMap::new(),
-    );
-
-    assert_eq!(exit_code, 0, "stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let parsed: serde_json::Value =
-        serde_json::from_str(stdout.trim()).expect("parse init network JSON");
-    assert_eq!(parsed["ok"], serde_json::Value::Bool(false));
-    assert!(
-        parsed["code"].is_null()
-            || parsed["code"] == serde_json::Value::String(String::from("ERR_ACCESS_DENIED")),
-        "unexpected network denial payload: {stdout}"
-    );
-    let message = parsed["message"].as_str().expect("network denial message");
-    if parsed["code"].is_null() {
-        assert!(
-            message.contains("fetch failed"),
-            "unexpected stdout: {stdout}"
-        );
-    } else {
-        assert!(
-            message.contains("network access"),
-            "unexpected stdout: {stdout}"
-        );
-    }
-}
-
-// Separate libtest cases in this binary still trip a V8 teardown/init crash, so
-// keep the Python runtime coverage in one top-level suite until that boundary is fixed.
-#[test]
-fn python_suite() {
-    python_contexts_preserve_vm_and_pyodide_configuration();
-    python_execution_runs_code_and_streams_stdio();
-    python_execution_wait_bounds_output_buffers();
-    python_execution_emits_stdout_before_exit();
-    python_execution_reports_prewarm_and_startup_metrics_when_debug_enabled();
-    python_execution_keeps_streaming_stdin_sessions_alive_until_closed();
-    python_execution_surfaces_vfs_rpc_requests_and_resumes_after_responses();
-    python_execution_wait_timeout_cleans_up_hanging_child();
-    python_execution_uses_configured_default_timeout_when_wait_timeout_not_provided();
-    python_vfs_rpc_bridge_times_out_when_sidecar_never_responds();
-    python_execution_surfaces_runtime_stderr();
-    python_execution_kill_stops_inflight_process_and_emits_exit();
-    python_execution_blocks_network_requests_during_pyodide_init();
-}
diff --git a/crates/execution/tests/python_prewarm.rs b/crates/execution/tests/python_prewarm.rs
deleted file mode 100644
index 103351998..000000000
--- a/crates/execution/tests/python_prewarm.rs
+++ /dev/null
@@ -1,192 +0,0 @@
-use secure_exec_execution::{
-    CreatePythonContextRequest, PythonExecutionEngine, PythonExecutionEvent,
-    StartPythonExecutionRequest,
-};
-use serde_json::Value;
-use std::collections::BTreeMap;
-use std::fs;
-use std::path::{Path, PathBuf};
-use std::time::Duration;
-use tempfile::tempdir;
-
-const PYTHON_WARMUP_METRICS_PREFIX: &str = "__AGENTOS_PYTHON_WARMUP_METRICS__:";
-
-fn setup_engine() -> (PythonExecutionEngine, String, PathBuf) {
-    let mut engine = PythonExecutionEngine::default();
-    let pyodide_dir = engine
-        .bundled_pyodide_dist_path_for_vm("vm-python")
-        .expect("materialize bundled pyodide");
-    let context = engine.create_context(CreatePythonContextRequest {
-        vm_id: String::from("vm-python"),
-        pyodide_dist_path: pyodide_dir.clone(),
-    });
-    (engine, context.context_id, pyodide_dir)
-}
-
-fn run_python_execution(
-    engine: &mut PythonExecutionEngine,
-    context_id: &str,
-    cwd: &Path,
-    code: &str,
-) -> (String, String, i32) {
-    let mut execution = engine
-        .start_execution(StartPythonExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-python"),
-            context_id: context_id.to_string(),
-            code: code.to_string(),
-            file_path: None,
-            env: BTreeMap::from([(
-                String::from("AGENTOS_PYTHON_WARMUP_DEBUG"),
-                String::from("1"),
-            )]),
-            cwd: cwd.to_path_buf(),
-        })
-        .expect("start Python execution");
-
-    // Drive the event loop directly instead of `.wait()`: the Pyodide runner
-    // now sets up a kernel-VFS-backed site-packages on boot, which emits VFS
-    // RPCs. This prewarm test has no VFS backend, so reject those RPCs and let
-    // the runner's best-effort site-packages setup degrade. Module-resolution
-    // sync RPCs are serviced host-directly.
-    let mut stdout = Vec::new();
-    let mut stderr = Vec::new();
-    loop {
-        match execution
-            .poll_event_blocking(Duration::from_secs(60))
-            .expect("poll Python event")
-        {
-            Some(PythonExecutionEvent::Stdout(chunk)) => stdout.extend(chunk),
-            Some(PythonExecutionEvent::Stderr(chunk)) => stderr.extend(chunk),
-            Some(PythonExecutionEvent::JavascriptSyncRpcRequest(request)) => {
-                let serviced = execution
-                    .try_service_standalone_module_sync_rpc(&request)
-                    .expect("service module sync RPC");
-                assert!(serviced, "unexpected JS sync RPC request: {request:?}");
-            }
-            Some(PythonExecutionEvent::VfsRpcRequest(request)) => {
-                execution
-                    .respond_vfs_rpc_error(request.id, "ENOSYS", "no VFS backend in prewarm test")
-                    .expect("respond to VFS RPC");
-            }
-            Some(PythonExecutionEvent::Exited(exit_code)) => {
-                return (
-                    String::from_utf8(stdout).expect("stdout utf8"),
-                    String::from_utf8(stderr).expect("stderr utf8"),
-                    exit_code,
-                );
-            }
-            None => panic!("timed out waiting for Python execution event"),
-        }
-    }
-}
-
-fn parse_metrics(stderr: &str, phase: &str) -> Value {
-    let payload = stderr
-        .lines()
-        .filter_map(|line| line.strip_prefix(PYTHON_WARMUP_METRICS_PREFIX))
-        .map(|line| serde_json::from_str::<Value>(line).expect("parse metrics json"))
-        .find(|value| value.get("phase").and_then(Value::as_str) == Some(phase))
-        .unwrap_or_else(|| panic!("missing {phase} metrics in stderr: {stderr}"));
-    payload
-}
-
-fn python_execution_prewarms_once_when_compile_cache_is_ready() {
-    let temp = tempdir().expect("create temp dir");
-    let (mut engine, context_id, _pyodide_dir) = setup_engine();
-    let (first_stdout, first_stderr, first_exit_code) =
-        run_python_execution(&mut engine, &context_id, temp.path(), "print('first')");
-    let (second_stdout, second_stderr, second_exit_code) =
-        run_python_execution(&mut engine, &context_id, temp.path(), "print('second')");
-
-    assert_eq!(first_exit_code, 0, "stderr: {first_stderr}");
-    assert_eq!(second_exit_code, 0, "stderr: {second_stderr}");
-    assert_eq!(first_stdout, "first\n");
-    assert_eq!(second_stdout, "second\n");
-
-    let first_prewarm = parse_metrics(&first_stderr, "prewarm");
-    let second_prewarm = parse_metrics(&second_stderr, "prewarm");
-
-    assert_eq!(first_prewarm["executed"], true);
-    assert_eq!(first_prewarm["reason"], "executed");
-    assert_eq!(second_prewarm["executed"], false);
-    assert_eq!(second_prewarm["reason"], "cached");
-}
-
-fn python_execution_invalidates_prewarm_stamp_when_pyodide_bundle_changes() {
-    let temp = tempdir().expect("create temp dir");
-    let (mut engine, context_id, pyodide_dir) = setup_engine();
-    let pyodide_mjs = pyodide_dir.join("pyodide.mjs");
-    let (_first_stdout, first_stderr, first_exit_code) =
-        run_python_execution(&mut engine, &context_id, temp.path(), "print('first')");
-    assert_eq!(first_exit_code, 0, "stderr: {first_stderr}");
-    assert_eq!(
-        parse_metrics(&first_stderr, "prewarm")["reason"],
-        "executed"
-    );
-
-    let original = fs::read_to_string(&pyodide_mjs).expect("read pyodide module");
-    fs::write(
-        &pyodide_mjs,
-        format!("{original}\n// prewarm invalidation test\n"),
-    )
-    .expect("mutate pyodide module");
-
-    let (second_stdout, second_stderr, second_exit_code) =
-        run_python_execution(&mut engine, &context_id, temp.path(), "print('second')");
-    assert_eq!(second_exit_code, 0, "stderr: {second_stderr}");
-    assert_eq!(second_stdout, "second\n");
-    assert_eq!(
-        parse_metrics(&second_stderr, "prewarm")["reason"],
-        "executed"
-    );
-}
-
-// Separate libtest cases in this binary still trip a V8 teardown/init crash, so
-// keep the prewarm coverage in one top-level suite until that boundary is fixed.
-//
-// cargo-nextest runs every `#[test]` in its OWN process, so that crash cannot
-// occur there — `mod python_prewarm_split` below exposes each case as a separate
-// test that nextest runs in parallel across cores. Skip the collapsed run under
-// nextest so the work isn't done twice; the split cases skip themselves under
-// `cargo test`. nextest sets `NEXTEST=1` in each test process; libtest/`cargo
-// test` does not.
-#[test]
-fn python_prewarm_suite() {
-    if std::env::var_os("NEXTEST").is_some() {
-        return;
-    }
-    python_execution_prewarms_once_when_compile_cache_is_ready();
-    python_execution_invalidates_prewarm_stamp_when_pyodide_bundle_changes();
-}
-
-/// Per-case split of `python_prewarm_suite` for cargo-nextest (process-per-test).
-///
-/// Each `#[test]` here runs exactly one Pyodide prewarm case in its own process,
-/// so the shared-process V8/Pyodide teardown/init crash that forces the collapsed
-/// `python_prewarm_suite` above does not apply, and the cases run in parallel
-/// across cores instead of serially. Each case skips itself under plain `cargo
-/// test` (where `NEXTEST` is unset) so the collapsed suite owns the run there; the
-/// collapsed suite likewise skips under nextest so the work isn't duplicated.
-mod python_prewarm_split {
-    macro_rules! nextest_cases {
-        ($($case:ident),+ $(,)?) => {
-            $(
-                #[test]
-                fn $case() {
-                    // Covered by the collapsed `super::python_prewarm_suite` under `cargo test`.
-                    if std::env::var_os("NEXTEST").is_none() {
-                        return;
-                    }
-                    super::$case();
-                }
-            )+
-        };
-    }
-
-    nextest_cases!(
-        python_execution_prewarms_once_when_compile_cache_is_ready,
-        python_execution_invalidates_prewarm_stamp_when_pyodide_bundle_changes,
-    );
-}
diff --git a/crates/execution/tests/smoke.rs b/crates/execution/tests/smoke.rs
deleted file mode 100644
index be35c6bc3..000000000
--- a/crates/execution/tests/smoke.rs
+++ /dev/null
@@ -1,14 +0,0 @@
-use secure_exec_execution::{scaffold, GuestRuntime};
-
-#[test]
-fn execution_scaffold_is_native_and_depends_on_kernel() {
-    let scaffold = scaffold();
-
-    assert_eq!(scaffold.package_name, "secure-exec-execution");
-    assert_eq!(scaffold.kernel_package, "secure-exec-kernel");
-    assert_eq!(scaffold.target, "native");
-    assert_eq!(
-        scaffold.planned_guest_runtimes,
-        [GuestRuntime::JavaScript, GuestRuntime::WebAssembly]
-    );
-}
diff --git a/crates/execution/tests/wasi_path_open_read_not_blocked.rs b/crates/execution/tests/wasi_path_open_read_not_blocked.rs
deleted file mode 100644
index b63b132a7..000000000
--- a/crates/execution/tests/wasi_path_open_read_not_blocked.rs
+++ /dev/null
@@ -1,98 +0,0 @@
-//! Regression test for issue #1:
-//! "WASI fdOpen permission check typo (read blocked as write)".
-//!
-//! The original bug computed write-intent from the READ rights bit
-//! (`rightsBase & 2n`, where `2n` == WASI_RIGHT_FD_READ == `1n << 1n`).
-//! That meant a pure read open (which sets RIGHT_FD_READ) was treated as a
-//! write and rejected with EACCES/EROFS on read-only or isolated tiers.
-//!
-//! The fix is that write-intent is derived from RIGHT_FD_WRITE
-//! (`1n << 6n` == 64n) instead. The WASI module JS that performs `path_open`
-//! lives in `crates/execution/assets/runners/wasi-module.js`, and the delegated
-//! runner path lives in `crates/execution/assets/runners/wasm-runner.mjs`.
-//!
-//! `build_wasm_runner_bootstrap` is a private function, so rather than execute
-//! it we pin the source-level invariant: write-intent MUST be checked against
-//! the WRITE bit and MUST NOT be checked against the READ bit. This locks out
-//! reintroducing the typo. If the buggy `& 2n` / READ-bit write check ever
-//! returns, this test fails.
-
-use std::fs;
-use std::path::PathBuf;
-
-fn read_source(rel: &str) -> String {
-    let path = PathBuf::from(env!("CARGO_MANIFEST_DIR")).join(rel);
-    fs::read_to_string(&path)
-        .unwrap_or_else(|err| panic!("failed to read {}: {err}", path.display()))
-}
-
-/// Returns the body of the `_hasWriteRights` JS method in the WASI module asset,
-/// or `None` if the method cannot be located.
-fn extract_has_write_rights_body(source: &str) -> Option<&str> {
-    let start = source.find("_hasWriteRights(rights)")?;
-    let rest = &source[start..];
-    // Grab a generous window covering the small method body.
-    let end = rest.find("_writeUint32").unwrap_or(rest.len().min(800));
-    Some(&rest[..end])
-}
-
-#[test]
-fn wasm_runner_write_intent_uses_write_bit_not_read_bit() {
-    let wasm_src = read_source("assets/runners/wasi-module.js");
-
-    // The WRITE right constant must be defined as bit 6 (64n), not the read bit.
-    assert!(
-        wasm_src.contains("const __agentOSWasiRightFdWrite = 1n << 6n;"),
-        "expected RIGHT_FD_WRITE to be defined as `1n << 6n` (64n) in wasi-module.js; \
-         the write-intent constant is the foundation of the read-vs-write distinction"
-    );
-
-    let body = extract_has_write_rights_body(&wasm_src)
-        .expect("expected to find `_hasWriteRights(rights)` method in wasi-module.js");
-
-    // Write-intent must be masked against the WRITE bit.
-    assert!(
-        body.contains("(BigInt(rights) & __agentOSWasiRightFdWrite) !== 0n"),
-        "_hasWriteRights must check write-intent against RIGHT_FD_WRITE \
-         (__agentOSWasiRightFdWrite); found body: {body}"
-    );
-
-    // Guard against reintroducing the original typo: write-intent must NOT be
-    // derived from the READ bit. `2n` and `1n << 1n` are RIGHT_FD_READ.
-    assert!(
-        !body.contains("& 2n"),
-        "_hasWriteRights must NOT mask against `2n` (RIGHT_FD_READ) — that was \
-         the original typo that blocked reads as writes; found body: {body}"
-    );
-    assert!(
-        !body.contains("1n << 1n"),
-        "_hasWriteRights must NOT mask against the read bit `1n << 1n`; \
-         found body: {body}"
-    );
-    assert!(
-        !body.contains("RightFdRead"),
-        "_hasWriteRights must NOT reference the READ rights constant for \
-         write-intent; found body: {body}"
-    );
-}
-
-#[test]
-fn wasm_runner_path_open_gates_write_access_on_write_rights() {
-    let wasm_src = read_source("assets/runners/wasi-module.js");
-
-    // path_open derives requestedWriteAccess from create/truncate flags OR the
-    // WRITE rights bit (via _hasWriteRights), never from the read bit. A pure
-    // read (RIGHT_FD_READ only, no CREAT/TRUNC) therefore yields
-    // requestedWriteAccess === false and is not denied on read-only tiers.
-    assert!(
-        wasm_src.contains("createOrTruncate || this._hasWriteRights(requestedRightsBase)"),
-        "path_open must compute write-intent from create/truncate flags or \
-         _hasWriteRights(requestedRightsBase), so pure reads are not flagged as writes"
-    );
-
-    // EROFS / EACCES must only fire when write access is actually requested.
-    assert!(
-        wasm_src.contains("if (requestedWriteAccess && resolved.readOnly) {"),
-        "read-only EROFS must be gated behind requestedWriteAccess so reads succeed"
-    );
-}
diff --git a/crates/execution/tests/wasm.rs b/crates/execution/tests/wasm.rs
deleted file mode 100644
index 2da1f567b..000000000
--- a/crates/execution/tests/wasm.rs
+++ /dev/null
@@ -1,2868 +0,0 @@
-use base64::Engine;
-use secure_exec_execution::wasm::{
-    NativeBinaryFormat, WASM_MAX_FUEL_ENV, WASM_MAX_MEMORY_BYTES_ENV, WASM_MAX_STACK_BYTES_ENV,
-};
-use secure_exec_execution::{
-    CreateWasmContextRequest, StartWasmExecutionRequest, WasmExecutionEngine, WasmExecutionError,
-    WasmExecutionEvent, WasmExecutionLimits, WasmPermissionTier,
-};
-use serde_json::json;
-use std::collections::BTreeMap;
-use std::fs;
-use std::os::unix::fs::symlink;
-use std::path::Path;
-use std::process::Command;
-use std::sync::mpsc;
-use std::sync::{Mutex, MutexGuard, OnceLock};
-use std::thread;
-use std::time::Duration;
-use tempfile::tempdir;
-
-const WASM_WARMUP_METRICS_PREFIX: &str = "__AGENTOS_WASM_WARMUP_METRICS__:";
-
-fn node_binary_env_lock() -> &'static Mutex<()> {
-    static LOCK: OnceLock<Mutex<()>> = OnceLock::new();
-    LOCK.get_or_init(|| Mutex::new(()))
-}
-
-fn lock_node_binary_env() -> MutexGuard<'static, ()> {
-    node_binary_env_lock()
-        .lock()
-        .expect("lock AGENTOS_NODE_BINARY test guard")
-}
-
-struct EnvVarGuard {
-    key: &'static str,
-    previous: Option<String>,
-}
-
-impl EnvVarGuard {
-    fn set(key: &'static str, value: &Path) -> Self {
-        let previous = std::env::var(key).ok();
-        // SAFETY: These tests mutate process env only within this scoped guard.
-        unsafe {
-            std::env::set_var(key, value);
-        }
-        Self { key, previous }
-    }
-
-    fn set_value(key: &'static str, value: &str) -> Self {
-        let previous = std::env::var(key).ok();
-        // SAFETY: The wasm suite runs these env-sensitive cases serially inside
-        // one libtest entry.
-        unsafe {
-            std::env::set_var(key, value);
-        }
-        Self { key, previous }
-    }
-}
-
-impl Drop for EnvVarGuard {
-    fn drop(&mut self) {
-        match &self.previous {
-            Some(value) => {
-                // SAFETY: Restores the env key owned by this scoped guard.
-                unsafe {
-                    std::env::set_var(self.key, value);
-                }
-            }
-            None => {
-                // SAFETY: Restores the env key owned by this scoped guard.
-                unsafe {
-                    std::env::remove_var(self.key);
-                }
-            }
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-struct WasmWarmupMetrics {
-    executed: bool,
-    reason: String,
-    module_path: String,
-    compile_cache_dir: String,
-}
-
-fn assert_node_available() {
-    let _guard = lock_node_binary_env();
-    let binary = std::env::var("AGENTOS_NODE_BINARY").unwrap_or_else(|_| String::from("node"));
-    let output = Command::new(binary)
-        .arg("--version")
-        .output()
-        .expect("spawn node --version");
-    assert!(output.status.success(), "node --version failed");
-}
-
-fn write_fixture(path: &Path, contents: &[u8]) {
-    fs::write(path, contents).expect("write fixture");
-}
-
-fn decode_sync_rpc_bytes(value: &serde_json::Value) -> Vec<u8> {
-    let base64 = value
-        .get("__agentOSType")
-        .and_then(serde_json::Value::as_str)
-        .is_some_and(|kind| kind == "bytes")
-        .then(|| value.get("base64").and_then(serde_json::Value::as_str))
-        .flatten()
-        .expect("sync rpc bytes payload");
-    base64::engine::general_purpose::STANDARD
-        .decode(base64)
-        .expect("decode sync rpc bytes")
-}
-
-fn write_fake_node_binary(path: &Path, log_path: &Path) {
-    let script = format!(
-        "#!/bin/sh\nset -eu\nprintf 'host-node-invoked\\n' >> \"{}\"\nexit 1\n",
-        log_path.display(),
-    );
-    fs::write(path, script).expect("write fake node binary");
-    let mut permissions = fs::metadata(path)
-        .expect("fake node metadata")
-        .permissions();
-    use std::os::unix::fs::PermissionsExt;
-    permissions.set_mode(0o755);
-    fs::set_permissions(path, permissions).expect("chmod fake node binary");
-}
-
-fn parse_warmup_metrics(stderr: &str) -> WasmWarmupMetrics {
-    let metrics_line = stderr
-        .lines()
-        .filter_map(|line| line.strip_prefix(WASM_WARMUP_METRICS_PREFIX))
-        .next_back()
-        .expect("warmup metrics line");
-
-    WasmWarmupMetrics {
-        executed: parse_boolean_metric(metrics_line, "executed"),
-        reason: parse_string_metric(metrics_line, "reason"),
-        module_path: parse_string_metric(metrics_line, "modulePath"),
-        compile_cache_dir: parse_string_metric(metrics_line, "compileCacheDir"),
-    }
-}
-
-fn parse_boolean_metric(metrics_line: &str, key: &str) -> bool {
-    let marker = format!("\"{key}\":");
-    let start = metrics_line.find(&marker).expect("metric key") + marker.len();
-    let remaining = &metrics_line[start..];
-
-    if remaining.starts_with("true") {
-        true
-    } else if remaining.starts_with("false") {
-        false
-    } else {
-        panic!("invalid boolean metric for {key}: {metrics_line}");
-    }
-}
-
-fn parse_string_metric(metrics_line: &str, key: &str) -> String {
-    let marker = format!("\"{key}\":\"");
-    let start = metrics_line.find(&marker).expect("metric key") + marker.len();
-    let mut value = String::new();
-    let mut chars = metrics_line[start..].chars();
-
-    while let Some(ch) = chars.next() {
-        match ch {
-            '\\' => value.push(parse_escaped_char(&mut chars)),
-            '"' => return value,
-            other => value.push(other),
-        }
-    }
-
-    panic!("unterminated string metric for {key}: {metrics_line}");
-}
-
-fn parse_escaped_char(chars: &mut std::str::Chars<'_>) -> char {
-    match chars.next().expect("escaped character") {
-        'n' => '\n',
-        'r' => '\r',
-        't' => '\t',
-        '"' => '"',
-        '\\' => '\\',
-        'u' => parse_unicode_escape(chars),
-        other => other,
-    }
-}
-
-fn parse_unicode_escape(chars: &mut std::str::Chars<'_>) -> char {
-    let high = parse_unicode_escape_unit(chars);
-    if !(0xD800..=0xDBFF).contains(&high) {
-        return char::from_u32(u32::from(high)).expect("basic multilingual plane char");
-    }
-
-    assert_eq!(chars.next(), Some('\\'), "expected low surrogate escape");
-    assert_eq!(chars.next(), Some('u'), "expected low surrogate marker");
-    let low = parse_unicode_escape_unit(chars);
-    let codepoint = 0x10000 + (((u32::from(high) - 0xD800) << 10) | (u32::from(low) - 0xDC00));
-    char::from_u32(codepoint).expect("supplementary plane char")
-}
-
-fn parse_unicode_escape_unit(chars: &mut std::str::Chars<'_>) -> u16 {
-    let hex: String = chars.take(4).collect();
-    assert_eq!(hex.len(), 4, "expected four hex digits in unicode escape");
-    u16::from_str_radix(&hex, 16).expect("unicode escape value")
-}
-
-/// Mirror the sidecar's config→limits flow for tests that still express WASM
-/// limits via the historical `AGENTOS_WASM_*` env keys: translate them into the
-/// typed `WasmExecutionLimits` the engine now reads. Production sources these
-/// from the BARE-wire resource limits, never env.
-fn wasm_limits_from_env(env: &BTreeMap<String, String>) -> WasmExecutionLimits {
-    let parse = |key: &str| env.get(key).and_then(|value| value.parse::<u64>().ok());
-    WasmExecutionLimits {
-        max_fuel: parse(WASM_MAX_FUEL_ENV),
-        max_memory_bytes: parse(WASM_MAX_MEMORY_BYTES_ENV),
-        max_stack_bytes: parse(WASM_MAX_STACK_BYTES_ENV),
-        prewarm_timeout_ms: None,
-        runner_heap_limit_mb: None,
-    }
-}
-
-fn run_wasm_execution(
-    engine: &mut WasmExecutionEngine,
-    context_id: String,
-    cwd: &Path,
-    argv: Vec<String>,
-    env: BTreeMap<String, String>,
-    permission_tier: WasmPermissionTier,
-) -> (String, String, i32) {
-    let limits = wasm_limits_from_env(&env);
-    let execution = engine
-        .start_execution(StartWasmExecutionRequest {
-            limits,
-            guest_runtime: Default::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id,
-            argv,
-            env,
-            cwd: cwd.to_path_buf(),
-            permission_tier,
-        })
-        .expect("start wasm execution");
-
-    let result = execution.wait().expect("wait for wasm execution");
-    let stdout = String::from_utf8(result.stdout).expect("stdout utf8");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-
-    (stdout, stderr, result.exit_code)
-}
-
-fn wasm_stdout_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 16) "stdout:wasm-smoke\n")
-  (func $_start (export "_start")
-    (i32.store (i32.const 0) (i32.const 16))
-    (i32.store (i32.const 4) (i32.const 18))
-    (drop
-      (call $fd_write
-        (i32.const 1)
-        (i32.const 0)
-        (i32.const 1)
-        (i32.const 40)
-      )
-    )
-  )
-)
-"#,
-    )
-    .expect("compile wasm fixture")
-}
-
-fn wasm_stdin_echo_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (type $fd_read_t (func (param i32 i32 i32 i32) (result i32)))
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "fd_read" (func $fd_read (type $fd_read_t)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (memory (export "memory") 1)
-  (func $_start (export "_start")
-    (i32.store (i32.const 0) (i32.const 32))
-    (i32.store (i32.const 4) (i32.const 64))
-    (drop
-      (call $fd_read
-        (i32.const 0)
-        (i32.const 0)
-        (i32.const 1)
-        (i32.const 8)
-      )
-    )
-    (i32.store (i32.const 16) (i32.const 32))
-    (i32.store (i32.const 20) (i32.load (i32.const 8)))
-    (drop
-      (call $fd_write
-        (i32.const 1)
-        (i32.const 16)
-        (i32.const 1)
-        (i32.const 24)
-      )
-    )
-  )
-)
-"#,
-    )
-    .expect("compile stdin echo wasm fixture")
-}
-
-fn wasm_fdstat_set_flags_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (type $fd_fdstat_get_t (func (param i32 i32) (result i32)))
-  (type $fd_fdstat_set_flags_t (func (param i32 i32) (result i32)))
-  (type $proc_exit_t (func (param i32)))
-  (import "wasi_snapshot_preview1" "fd_fdstat_get" (func $fd_fdstat_get (type $fd_fdstat_get_t)))
-  (import "wasi_snapshot_preview1" "fd_fdstat_set_flags" (func $fd_fdstat_set_flags (type $fd_fdstat_set_flags_t)))
-  (import "wasi_snapshot_preview1" "proc_exit" (func $proc_exit (type $proc_exit_t)))
-  (memory (export "memory") 1)
-  (func $_start (export "_start")
-    (if
-      (i32.ne
-        (call $fd_fdstat_set_flags (i32.const 1) (i32.const 4))
-        (i32.const 0)
-      )
-      (then (call $proc_exit (i32.const 41)))
-    )
-    (if
-      (i32.ne
-        (call $fd_fdstat_get (i32.const 1) (i32.const 0))
-        (i32.const 0)
-      )
-      (then (call $proc_exit (i32.const 42)))
-    )
-    (if
-      (i32.ne
-        (i32.load16_u offset=2 (i32.const 0))
-        (i32.const 4)
-      )
-      (then (call $proc_exit (i32.const 43)))
-    )
-  )
-)
-"#,
-    )
-    .expect("compile fdstat flags wasm fixture")
-}
-
-fn wasm_override_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 16) "stdout:evil-smoke\n")
-  (func $_start (export "_start")
-    (i32.store (i32.const 0) (i32.const 16))
-    (i32.store (i32.const 4) (i32.const 18))
-    (drop
-      (call $fd_write
-        (i32.const 1)
-        (i32.const 0)
-        (i32.const 1)
-        (i32.const 40)
-      )
-    )
-  )
-)
-"#,
-    )
-    .expect("compile wasm fixture")
-}
-
-fn wasm_timing_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (type $clock_time_get_t (func (param i32 i64 i32) (result i32)))
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "clock_time_get" (func $clock_time_get (type $clock_time_get_t)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 32) "timing:frozen\n")
-  (func $_start (export "_start")
-    (local $counter i32)
-    (drop (call $clock_time_get (i32.const 0) (i64.const 1) (i32.const 0)))
-    (loop $spin
-      local.get $counter
-      i32.const 1
-      i32.add
-      local.tee $counter
-      i32.const 20000000
-      i32.lt_u
-      br_if $spin
-    )
-    (drop (call $clock_time_get (i32.const 0) (i64.const 1) (i32.const 8)))
-    (if
-      (i64.ne (i64.load (i32.const 0)) (i64.load (i32.const 8)))
-      (then unreachable)
-    )
-    (i32.store (i32.const 16) (i32.const 32))
-    (i32.store (i32.const 20) (i32.const 14))
-    (drop
-      (call $fd_write
-        (i32.const 1)
-        (i32.const 16)
-        (i32.const 1)
-        (i32.const 24)
-      )
-    )
-  )
-)
-"#,
-    )
-    .expect("compile timing wasm fixture")
-}
-
-fn wasm_signal_state_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (type $proc_sigaction_t (func (param i32 i32 i32 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (import "host_process" "proc_sigaction" (func $proc_sigaction (type $proc_sigaction_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 32) "signal:ready\n")
-  (func $_start (export "_start")
-    (drop
-      (call $proc_sigaction
-        (i32.const 2)
-        (i32.const 2)
-        (i32.const 16384)
-        (i32.const 0)
-        (i32.const 4660)
-      )
-    )
-    (i32.store (i32.const 0) (i32.const 32))
-    (i32.store (i32.const 4) (i32.const 13))
-    (drop
-      (call $fd_write
-        (i32.const 1)
-        (i32.const 0)
-        (i32.const 1)
-        (i32.const 24)
-      )
-    )
-  )
-)
-"#,
-    )
-    .expect("compile signal wasm fixture")
-}
-
-fn wat_escape_ascii(input: &str) -> String {
-    let mut escaped = String::new();
-    for ch in input.chars() {
-        match ch {
-            '\\' => escaped.push_str("\\\\"),
-            '"' => escaped.push_str("\\\""),
-            '\n' => escaped.push_str("\\n"),
-            '\r' => escaped.push_str("\\0d"),
-            _ => escaped.push(ch),
-        }
-    }
-    escaped
-}
-
-fn wasm_stdout_chunks_module(chunks: &[&str]) -> Vec<u8> {
-    let mut data_offset = 64u32;
-    let mut data_segments = String::new();
-    let mut writes = String::new();
-
-    for (index, chunk) in chunks.iter().enumerate() {
-        let escaped = wat_escape_ascii(chunk);
-        let chunk_len = chunk.len();
-        let iovec_offset = (index as u32) * 8;
-        data_segments.push_str(&format!(
-            "  (data (i32.const {data_offset}) \"{escaped}\")\n"
-        ));
-        writes.push_str(&format!(
-            "    (i32.store (i32.const {iovec_offset}) (i32.const {data_offset}))\n    (i32.store (i32.const {}) (i32.const {chunk_len}))\n    (drop\n      (call $fd_write\n        (i32.const 1)\n        (i32.const {iovec_offset})\n        (i32.const 1)\n        (i32.const 40)\n      )\n    )\n",
-            iovec_offset + 4
-        ));
-        data_offset += chunk_len as u32;
-    }
-
-    wat::parse_str(format!(
-        r#"
-(module
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (memory (export "memory") 1)
-{data_segments}  (func $_start (export "_start")
-{writes}  )
-)
-"#
-    ))
-    .expect("compile stdout-chunks wasm fixture")
-}
-
-fn wasm_signal_state_line_stdout_module() -> Vec<u8> {
-    wasm_stdout_chunks_module(&[
-        "hello\n__AGENTOS_WASM_SIGNAL_STATE__:{\"signal\":2,\"registration\":{\"action\":\"user\",\"mask\":[15],\"flags\":4660}}\n",
-    ])
-}
-
-fn wasm_split_signal_state_line_stdout_module() -> Vec<u8> {
-    wasm_stdout_chunks_module(&[
-        "__AGENTOS_WASM_SIGNAL_STATE__:",
-        "{\"signal\":2,\"registration\":{\"action\":\"user\",\"mask\":[15],\"flags\":4660}}\n",
-    ])
-}
-
-fn wasm_write_file_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (type $path_open_t (func (param i32 i32 i32 i32 i32 i64 i64 i32 i32) (result i32)))
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (type $fd_close_t (func (param i32) (result i32)))
-  (import "wasi_snapshot_preview1" "path_open" (func $path_open (type $path_open_t)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (import "wasi_snapshot_preview1" "fd_close" (func $fd_close (type $fd_close_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 64) "output.txt")
-  (data (i32.const 80) "tiered-write\n")
-  (func $_start (export "_start")
-    (if
-      (i32.ne
-        (call $path_open
-          (i32.const 3)
-          (i32.const 0)
-          (i32.const 64)
-          (i32.const 10)
-          (i32.const 9)
-          (i64.const 64)
-          (i64.const 64)
-          (i32.const 0)
-          (i32.const 8)
-        )
-        (i32.const 0)
-      )
-      (then unreachable)
-    )
-    (i32.store (i32.const 0) (i32.const 80))
-    (i32.store (i32.const 4) (i32.const 13))
-    (if
-      (i32.ne
-        (call $fd_write
-          (i32.load (i32.const 8))
-          (i32.const 0)
-          (i32.const 1)
-          (i32.const 12)
-        )
-        (i32.const 0)
-      )
-      (then unreachable)
-    )
-    (drop (call $fd_close (i32.load (i32.const 8))))
-  )
-)
-"#,
-    )
-    .expect("compile write-file wasm fixture")
-}
-
-fn wasm_write_nested_file_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (type $path_open_t (func (param i32 i32 i32 i32 i32 i64 i64 i32 i32) (result i32)))
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (type $fd_close_t (func (param i32) (result i32)))
-  (import "wasi_snapshot_preview1" "path_open" (func $path_open (type $path_open_t)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (import "wasi_snapshot_preview1" "fd_close" (func $fd_close (type $fd_close_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 64) "nested/output.txt")
-  (data (i32.const 96) "nested-write\n")
-  (func $_start (export "_start")
-    (if
-      (i32.ne
-        (call $path_open
-          (i32.const 3)
-          (i32.const 0)
-          (i32.const 64)
-          (i32.const 17)
-          (i32.const 9)
-          (i64.const 64)
-          (i64.const 64)
-          (i32.const 0)
-          (i32.const 8)
-        )
-        (i32.const 0)
-      )
-      (then unreachable)
-    )
-    (i32.store (i32.const 0) (i32.const 96))
-    (i32.store (i32.const 4) (i32.const 13))
-    (if
-      (i32.ne
-        (call $fd_write
-          (i32.load (i32.const 8))
-          (i32.const 0)
-          (i32.const 1)
-          (i32.const 12)
-        )
-        (i32.const 0)
-      )
-      (then unreachable)
-    )
-    (drop (call $fd_close (i32.load (i32.const 8))))
-  )
-)
-"#,
-    )
-    .expect("compile nested write-file wasm fixture")
-}
-
-fn wasm_expect_write_open_errno_module(expected_errno: u32) -> Vec<u8> {
-    wat::parse_str(format!(
-        r#"
-(module
-  (type $path_open_t (func (param i32 i32 i32 i32 i32 i64 i64 i32 i32) (result i32)))
-  (type $fd_close_t (func (param i32) (result i32)))
-  (import "wasi_snapshot_preview1" "path_open" (func $path_open (type $path_open_t)))
-  (import "wasi_snapshot_preview1" "fd_close" (func $fd_close (type $fd_close_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 64) "output.txt")
-  (func $_start (export "_start")
-    (local $errno i32)
-    (local.set $errno
-      (call $path_open
-        (i32.const 3)
-        (i32.const 0)
-        (i32.const 64)
-        (i32.const 10)
-        (i32.const 9)
-        (i64.const 64)
-        (i64.const 64)
-        (i32.const 0)
-        (i32.const 8)
-      )
-    )
-    (if
-      (i32.ne
-        (local.get $errno)
-        (i32.const {expected_errno})
-      )
-      (then unreachable)
-    )
-    (if
-      (i32.eq (local.get $errno) (i32.const 0))
-      (then
-        (drop (call $fd_close (i32.load (i32.const 8))))
-      )
-    )
-  )
-)
-"#
-    ))
-    .expect("compile expected-errno wasm fixture")
-}
-
-fn wasm_escape_preopen_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (type $path_open_t (func (param i32 i32 i32 i32 i32 i64 i64 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "path_open" (func $path_open (type $path_open_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 64) "../../../../etc/passwd")
-  (func $_start (export "_start")
-    (if
-      (i32.ne
-        (call $path_open
-          (i32.const 3)
-          (i32.const 0)
-          (i32.const 64)
-          (i32.const 22)
-          (i32.const 0)
-          (i64.const 0)
-          (i64.const 0)
-          (i32.const 0)
-          (i32.const 8)
-        )
-        (i32.const 44)
-      )
-      (then unreachable)
-    )
-  )
-)
-"#,
-    )
-    .expect("compile preopen-escape wasm fixture")
-}
-
-fn wasm_poll_oneoff_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (type $poll_oneoff_t (func (param i32 i32 i32 i32) (result i32)))
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "poll_oneoff" (func $poll_oneoff (type $poll_oneoff_t)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 176) "poll-ready\n")
-  (func $_start (export "_start")
-    (i64.store (i32.const 0) (i64.const 1))
-    (i32.store8 (i32.const 8) (i32.const 1))
-    (i32.store (i32.const 16) (i32.const 0))
-
-    (i64.store (i32.const 48) (i64.const 2))
-    (i32.store8 (i32.const 56) (i32.const 1))
-    (i32.store (i32.const 64) (i32.const 1))
-
-    (if
-      (i32.ne
-        (call $poll_oneoff
-          (i32.const 0)
-          (i32.const 96)
-          (i32.const 2)
-          (i32.const 160)
-        )
-        (i32.const 0)
-      )
-      (then unreachable)
-    )
-
-    (if (i32.ne (i32.load (i32.const 160)) (i32.const 1)) (then unreachable))
-    (if (i64.ne (i64.load (i32.const 96)) (i64.const 1)) (then unreachable))
-    (if (i32.ne (i32.load8_u (i32.const 106)) (i32.const 1)) (then unreachable))
-
-    (i32.store (i32.const 168) (i32.const 176))
-    (i32.store (i32.const 172) (i32.const 11))
-    (drop
-      (call $fd_write
-        (i32.const 1)
-        (i32.const 168)
-        (i32.const 1)
-        (i32.const 164)
-      )
-    )
-  )
-)
-"#,
-    )
-    .expect("compile poll_oneoff wasm fixture")
-}
-
-fn wasm_infinite_loop_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (memory (export "memory") 1)
-  (func $_start (export "_start")
-    (loop $spin
-      br $spin
-    )
-  )
-)
-"#,
-    )
-    .expect("compile infinite-loop wasm fixture")
-}
-
-fn wasm_memory_capped_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (memory (export "memory") 1 3)
-  (func $_start (export "_start"))
-)
-"#,
-    )
-    .expect("compile memory-capped wasm fixture")
-}
-
-fn wasm_memory_grow_until_runtime_limit_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 32) "memory-grow-limited\n")
-  (func $_start (export "_start")
-    (if
-      (i32.ne
-        (memory.grow (i32.const 1))
-        (i32.const 1)
-      )
-      (then unreachable)
-    )
-    (if
-      (i32.ne
-        (memory.grow (i32.const 1))
-        (i32.const -1)
-      )
-      (then unreachable)
-    )
-    (i32.store (i32.const 0) (i32.const 32))
-    (i32.store (i32.const 4) (i32.const 20))
-    (drop
-      (call $fd_write
-        (i32.const 1)
-        (i32.const 0)
-        (i32.const 1)
-        (i32.const 24)
-      )
-    )
-  )
-)
-"#,
-    )
-    .expect("compile runtime memory-limit wasm fixture")
-}
-
-fn raw_wasm_module(section_id: u8, section_contents: &[u8]) -> Vec<u8> {
-    let mut bytes = Vec::from(*b"\0asm");
-    bytes.extend_from_slice(&[0x01, 0x00, 0x00, 0x00]);
-    bytes.push(section_id);
-    bytes.extend(encode_varuint(section_contents.len() as u64));
-    bytes.extend_from_slice(section_contents);
-    bytes
-}
-
-fn encode_varuint(mut value: u64) -> Vec<u8> {
-    let mut encoded = Vec::new();
-    loop {
-        let mut byte = (value & 0x7f) as u8;
-        value >>= 7;
-        if value != 0 {
-            byte |= 0x80;
-        }
-        encoded.push(byte);
-        if value == 0 {
-            return encoded;
-        }
-    }
-}
-
-fn wasm_contexts_preserve_vm_and_module_configuration() {
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    assert_eq!(context.context_id, "wasm-ctx-1");
-    assert_eq!(context.vm_id, "vm-wasm");
-    assert_eq!(context.module_path.as_deref(), Some("./guest.wasm"));
-}
-
-fn wasm_execution_stays_inside_v8_runtime_without_host_node_launches() {
-    let _guard = lock_node_binary_env();
-    let temp = tempdir().expect("create temp dir");
-    let fake_node_path = temp.path().join("fake-node.sh");
-    let log_path = temp.path().join("node-invocations.log");
-    write_fake_node_binary(&fake_node_path, &log_path);
-    let _node_binary = EnvVarGuard::set("AGENTOS_NODE_BINARY", &fake_node_path);
-
-    write_fixture(&temp.path().join("guest.wasm"), &wasm_stdout_module());
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::from([(
-            String::from(WASM_MAX_MEMORY_BYTES_ENV),
-            (2 * 65_536).to_string(),
-        )]),
-        WasmPermissionTier::Full,
-    );
-
-    assert_eq!(exit_code, 0, "stdout={stdout} stderr={stderr}");
-    assert!(stdout.contains("stdout:wasm-smoke"), "stdout={stdout}");
-    assert!(
-        !log_path.exists(),
-        "WASM prewarm/execution should stay inside the shared V8 runtime, not launch AGENTOS_NODE_BINARY",
-    );
-}
-
-fn wasm_execution_runs_guest_module_through_v8() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(&temp.path().join("guest.wasm"), &wasm_stdout_module());
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let execution = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: vec![String::from("guest.wasm")],
-            env: BTreeMap::from([(String::from("IGNORED_FOR_NOW"), String::from("ok"))]),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect("start wasm execution");
-
-    assert_eq!(execution.execution_id(), "exec-1");
-
-    let result = execution.wait().expect("wait for wasm execution");
-    assert_eq!(result.exit_code, 0);
-    assert!(
-        result.stderr.is_empty(),
-        "unexpected stderr: {:?}",
-        result.stderr
-    );
-
-    let stdout = String::from_utf8(result.stdout).expect("stdout utf8");
-    assert!(stdout.contains("stdout:wasm-smoke"));
-}
-
-fn wasm_snapshot_runner_block_round_trips_twice() {
-    assert_node_available();
-    let _mode = EnvVarGuard::set_value("AGENTOS_WASM_SNAPSHOT_RUNNER", "block");
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_stdout_chunks_module(&["hello\n"]),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (first_stdout, first_stderr, first_exit) = run_wasm_execution(
-        &mut engine,
-        context.context_id.clone(),
-        temp.path(),
-        Vec::new(),
-        BTreeMap::from([(String::from("AGENTOS_WASM_WARMUP_DEBUG"), String::from("1"))]),
-        WasmPermissionTier::Full,
-    );
-    assert_eq!(first_exit, 0, "stderr={first_stderr}");
-    assert_eq!(first_stdout, "hello\n");
-    assert!(
-        !first_stderr.contains("decodeBase64ToUint8Array"),
-        "raw module bytes path should not base64-decode: {first_stderr}"
-    );
-
-    let (second_stdout, second_stderr, second_exit) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::from([(String::from("AGENTOS_WASM_WARMUP_DEBUG"), String::from("1"))]),
-        WasmPermissionTier::Full,
-    );
-    assert_eq!(second_exit, 0, "stderr={second_stderr}");
-    assert_eq!(second_stdout, "hello\n");
-    assert!(
-        !second_stderr.contains("decodeBase64ToUint8Array"),
-        "raw module bytes path should not base64-decode: {second_stderr}"
-    );
-}
-
-fn phase_calls(path: &Path, stage: &str) -> u64 {
-    let contents = fs::read_to_string(path).unwrap_or_default();
-    contents
-        .lines()
-        .find(|line| line.starts_with(&format!("stage={stage} ")))
-        .and_then(|line| {
-            line.split_whitespace()
-                .find_map(|field| field.strip_prefix("calls="))
-        })
-        .and_then(|value| value.parse::<u64>().ok())
-        .unwrap_or(0)
-}
-
-fn wasm_snapshot_runner_warm_worker_pool_hits() {
-    assert_node_available();
-    let _mode = EnvVarGuard::set_value("AGENTOS_WASM_SNAPSHOT_RUNNER", "block");
-    let _warm = EnvVarGuard::set_value("AGENTOS_V8_WARM_ISOLATES", "2");
-    let _phases = EnvVarGuard::set_value("AGENTOS_V8_SESSION_PHASES", "1");
-    let phases_dir = tempdir().expect("create phases temp dir");
-    let phases_file = phases_dir.path().join("v8-phases.txt");
-    let _phases_file = EnvVarGuard::set("AGENTOS_V8_SESSION_PHASES_FILE", &phases_file);
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_stdout_chunks_module(&["pool-hit\n"]),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    for _ in 0..2 {
-        let (stdout, stderr, exit_code) = run_wasm_execution(
-            &mut engine,
-            context.context_id.clone(),
-            temp.path(),
-            Vec::new(),
-            BTreeMap::new(),
-            WasmPermissionTier::Full,
-        );
-        assert_eq!(exit_code, 0, "stderr={stderr}");
-        assert_eq!(stdout, "pool-hit\n");
-    }
-
-    assert!(
-        phase_calls(&phases_file, "warm_worker_hit") >= 1,
-        "expected at least one warm worker pool hit; phases={}",
-        fs::read_to_string(&phases_file).unwrap_or_default()
-    );
-}
-
-fn wasm_snapshot_runner_warm_worker_pool_disabled_falls_back() {
-    assert_node_available();
-    let _mode = EnvVarGuard::set_value("AGENTOS_WASM_SNAPSHOT_RUNNER", "block");
-    let _warm = EnvVarGuard::set_value("AGENTOS_V8_WARM_ISOLATES", "0");
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_stdout_chunks_module(&["pool-disabled\n"]),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-    let (stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::new(),
-        WasmPermissionTier::Full,
-    );
-
-    assert_eq!(exit_code, 0, "stderr={stderr}");
-    assert_eq!(stdout, "pool-disabled\n");
-}
-
-fn wasm_snapshot_runner_warm_hint_mismatch_falls_back() {
-    assert_node_available();
-    let _warm = EnvVarGuard::set_value("AGENTOS_V8_WARM_ISOLATES", "2");
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_stdout_chunks_module(&["mismatch\n"]),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    {
-        let _mode = EnvVarGuard::set_value("AGENTOS_WASM_SNAPSHOT_RUNNER", "block");
-        let (stdout, stderr, exit_code) = run_wasm_execution(
-            &mut engine,
-            context.context_id.clone(),
-            temp.path(),
-            Vec::new(),
-            BTreeMap::new(),
-            WasmPermissionTier::Full,
-        );
-        assert_eq!(exit_code, 0, "stderr={stderr}");
-        assert_eq!(stdout, "mismatch\n");
-    }
-
-    let _mode = EnvVarGuard::set_value("AGENTOS_WASM_SNAPSHOT_RUNNER", "off");
-    let (stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::new(),
-        WasmPermissionTier::Full,
-    );
-    assert_eq!(exit_code, 0, "stderr={stderr}");
-    assert_eq!(stdout, "mismatch\n");
-}
-
-fn wasm_snapshot_runner_off_fallback_matches_inline() {
-    assert_node_available();
-    let _mode = EnvVarGuard::set_value("AGENTOS_WASM_SNAPSHOT_RUNNER", "off");
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_stdout_chunks_module(&["hello\n"]),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::from([(String::from("AGENTOS_WASM_WARMUP_DEBUG"), String::from("1"))]),
-        WasmPermissionTier::Full,
-    );
-
-    assert_eq!(exit_code, 0, "stderr={stderr}");
-    assert_eq!(stdout, "hello\n");
-    assert!(
-        !stderr.contains("decodeBase64ToUint8Array"),
-        "raw module bytes path should not base64-decode: {stderr}"
-    );
-}
-
-fn wasm_module_bytes_cache_invalidates_when_file_changes() {
-    assert_node_available();
-    let _mode = EnvVarGuard::set_value("AGENTOS_WASM_SNAPSHOT_RUNNER", "block");
-
-    let temp = tempdir().expect("create temp dir");
-    let module_path = temp.path().join("guest.wasm");
-    write_fixture(&module_path, &wasm_stdout_chunks_module(&["first\n"]));
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (first_stdout, first_stderr, first_exit) = run_wasm_execution(
-        &mut engine,
-        context.context_id.clone(),
-        temp.path(),
-        Vec::new(),
-        BTreeMap::new(),
-        WasmPermissionTier::Full,
-    );
-    assert_eq!(first_exit, 0, "stderr={first_stderr}");
-    assert_eq!(first_stdout, "first\n");
-
-    write_fixture(
-        &module_path,
-        &wasm_stdout_chunks_module(&["second-output\n"]),
-    );
-
-    let (second_stdout, second_stderr, second_exit) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::new(),
-        WasmPermissionTier::Full,
-    );
-    assert_eq!(second_exit, 0, "stderr={second_stderr}");
-    assert_eq!(second_stdout, "second-output\n");
-}
-
-fn wasm_execution_supports_fd_fdstat_set_flags() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_fdstat_set_flags_module(),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (_stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::new(),
-        WasmPermissionTier::Full,
-    );
-
-    assert_eq!(exit_code, 0, "stderr: {stderr}");
-    assert!(
-        !stderr.contains("fd_fdstat_set_flags"),
-        "missing WASI fd_fdstat_set_flags import should not leak into stderr: {stderr}"
-    );
-    assert!(
-        !stderr.contains("LinkError"),
-        "WASI import gaps should not break module instantiation: {stderr}"
-    );
-}
-
-fn wasm_execution_ignores_guest_overrides_for_internal_node_env() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(&temp.path().join("guest.wasm"), &wasm_stdout_module());
-    write_fixture(&temp.path().join("evil.wasm"), &wasm_override_module());
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::from([
-            (
-                String::from("AGENTOS_WASM_MODULE_PATH"),
-                String::from("./evil.wasm"),
-            ),
-            (String::from("AGENTOS_WASM_PREWARM_ONLY"), String::from("1")),
-            (String::from("NODE_OPTIONS"), String::from("--no-warnings")),
-        ]),
-        WasmPermissionTier::Full,
-    );
-
-    assert_eq!(exit_code, 0, "stderr: {stderr}");
-    assert_eq!(stdout, "stdout:wasm-smoke\n");
-    assert!(!stdout.contains("evil-smoke"));
-}
-
-fn wasm_execution_freezes_wasi_clock_time() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(&temp.path().join("guest.wasm"), &wasm_timing_module());
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::new(),
-        WasmPermissionTier::Full,
-    );
-
-    assert_eq!(exit_code, 0);
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-    assert!(stdout.contains("timing:frozen"), "stdout: {stdout}");
-}
-
-fn wasm_execution_rejects_vm_mismatch() {
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let error = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-other"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: Path::new("/tmp").to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect_err("vm mismatch should fail");
-
-    assert!(error
-        .to_string()
-        .contains("guest WebAssembly context belongs to vm vm-wasm, not vm-other"));
-}
-
-fn wasm_execution_streams_exit_event() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(&temp.path().join("guest.wasm"), &wasm_stdout_module());
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let mut execution = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect("start wasm execution");
-
-    let mut saw_stdout = false;
-    let mut saw_exit = false;
-
-    while !saw_exit {
-        match execution
-            .poll_event_blocking(Duration::from_secs(5))
-            .expect("poll wasm event")
-        {
-            Some(WasmExecutionEvent::Stdout(chunk)) => {
-                saw_stdout = String::from_utf8(chunk)
-                    .expect("stdout utf8")
-                    .contains("stdout:wasm-smoke");
-            }
-            Some(WasmExecutionEvent::Exited(code)) => {
-                assert_eq!(code, 0);
-                saw_exit = true;
-            }
-            Some(WasmExecutionEvent::Stderr(chunk)) => {
-                panic!("unexpected stderr: {}", String::from_utf8_lossy(&chunk));
-            }
-            Some(WasmExecutionEvent::SyncRpcRequest(_)) => {}
-            Some(WasmExecutionEvent::SignalState { .. }) => {}
-            None => panic!("timed out waiting for wasm execution event"),
-        }
-    }
-
-    assert!(saw_stdout, "expected stdout event before exit");
-}
-
-fn wasm_execution_can_route_stdio_through_kernel_sync_rpc() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(&temp.path().join("guest.wasm"), &wasm_stdout_module());
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let mut execution = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::from([(
-                String::from("AGENTOS_WASI_STDIO_SYNC_RPC"),
-                String::from("1"),
-            )]),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect("start wasm execution");
-
-    let request = match execution
-        .poll_event_blocking(Duration::from_secs(5))
-        .expect("poll wasm event")
-    {
-        Some(WasmExecutionEvent::SyncRpcRequest(request)) => request,
-        other => panic!("expected kernel stdio sync RPC request, got {other:?}"),
-    };
-
-    assert_eq!(request.method, "__kernel_stdio_write");
-    assert_eq!(request.args.first(), Some(&json!(1)));
-    assert_eq!(
-        String::from_utf8(decode_sync_rpc_bytes(&request.args[1])).expect("stdout utf8"),
-        "stdout:wasm-smoke\n"
-    );
-
-    execution
-        .respond_sync_rpc_success(request.id, json!(18))
-        .expect("respond to __kernel_stdio_write");
-
-    let result = execution.wait().expect("wait for wasm execution");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "stderr={stderr}");
-    assert!(
-        result.stdout.is_empty(),
-        "stdout should be kernel-routed in this mode"
-    );
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn wasm_execution_reads_streaming_stdin_via_kernel_bridge() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(&temp.path().join("guest.wasm"), &wasm_stdin_echo_module());
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let mut execution = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::from([(
-                String::from("AGENTOS_WASI_STDIO_SYNC_RPC"),
-                String::from("1"),
-            )]),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect("start wasm execution");
-
-    execution
-        .write_stdin(b"stdin-echo\n")
-        .expect("write wasm stdin");
-    execution.close_stdin().expect("close wasm stdin");
-
-    let result = execution.wait().expect("wait for wasm execution");
-    let stdout = String::from_utf8(result.stdout).expect("stdout utf8");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-
-    assert_eq!(result.exit_code, 0, "stderr={stderr}");
-    assert_eq!(stdout, "stdin-echo\n");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-}
-
-fn wasm_execution_poll_oneoff_uses_kernel_poll_for_multiple_fds() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(&temp.path().join("guest.wasm"), &wasm_poll_oneoff_module());
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let mut execution = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect("start wasm execution");
-
-    let request = match execution
-        .poll_event_blocking(Duration::from_secs(5))
-        .expect("poll wasm event")
-    {
-        Some(WasmExecutionEvent::SyncRpcRequest(request)) => request,
-        other => panic!("expected sync RPC request, got {other:?}"),
-    };
-
-    assert_eq!(request.method, "__kernel_poll");
-    assert_eq!(
-        request.args,
-        vec![
-            json!([
-                { "fd": 0, "events": 1 },
-                { "fd": 1, "events": 1 }
-            ]),
-            json!(10),
-        ]
-    );
-
-    execution
-        .respond_sync_rpc_success(
-            request.id,
-            json!({
-                "readyCount": 1,
-                "fds": [
-                    { "fd": 0, "events": 1, "revents": 1 },
-                    { "fd": 1, "events": 1, "revents": 0 }
-                ]
-            }),
-        )
-        .expect("respond to __kernel_poll");
-
-    let result = execution.wait().expect("wait for wasm execution");
-    let stdout = String::from_utf8(result.stdout).expect("stdout utf8");
-    let stderr = String::from_utf8(result.stderr).expect("stderr utf8");
-    assert_eq!(result.exit_code, 0, "stdout={stdout} stderr={stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-    assert_eq!(stdout, "poll-ready\n");
-}
-
-fn wasm_execution_emits_signal_state_from_control_channel() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(&temp.path().join("guest.wasm"), &wasm_signal_state_module());
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let mut execution = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect("start wasm execution");
-
-    let mut saw_stdout = false;
-    let mut saw_signal = false;
-    let mut saw_exit = false;
-
-    while !saw_exit {
-        match execution
-            .poll_event_blocking(Duration::from_secs(5))
-            .expect("poll wasm event")
-        {
-            Some(WasmExecutionEvent::Stdout(chunk)) => {
-                saw_stdout = String::from_utf8(chunk)
-                    .expect("stdout utf8")
-                    .contains("signal:ready");
-            }
-            Some(WasmExecutionEvent::SignalState {
-                signal,
-                registration,
-            }) => {
-                assert_eq!(signal, 2);
-                assert_eq!(
-                    registration.action,
-                    secure_exec_execution::wasm::WasmSignalDispositionAction::User
-                );
-                assert_eq!(registration.mask, vec![15]);
-                assert_eq!(registration.flags, 0x1234);
-                saw_signal = true;
-            }
-            Some(WasmExecutionEvent::Exited(code)) => {
-                assert_eq!(code, 0);
-                saw_exit = true;
-            }
-            Some(WasmExecutionEvent::Stderr(chunk)) => {
-                panic!("unexpected stderr: {}", String::from_utf8_lossy(&chunk));
-            }
-            Some(WasmExecutionEvent::SyncRpcRequest(_)) => {}
-            None => panic!("timed out waiting for wasm execution event"),
-        }
-    }
-
-    assert!(saw_stdout, "expected stdout event before exit");
-    assert!(saw_signal, "expected signal-state event before exit");
-}
-
-fn wasm_execution_preserves_stdout_when_signal_state_marker_shares_stdout_chunk() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_signal_state_line_stdout_module(),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let mut execution = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::ReadWrite,
-        })
-        .expect("start wasm execution");
-
-    let mut stdout = Vec::new();
-    let mut saw_signal = false;
-    let mut saw_exit = false;
-
-    while !saw_exit {
-        match execution
-            .poll_event_blocking(Duration::from_secs(5))
-            .expect("poll wasm event")
-        {
-            Some(WasmExecutionEvent::Stdout(chunk)) => stdout.push(chunk),
-            Some(WasmExecutionEvent::SignalState {
-                signal,
-                registration,
-            }) => {
-                assert_eq!(signal, 2);
-                assert_eq!(
-                    registration.action,
-                    secure_exec_execution::wasm::WasmSignalDispositionAction::User
-                );
-                assert_eq!(registration.mask, vec![15]);
-                assert_eq!(registration.flags, 0x1234);
-                saw_signal = true;
-            }
-            Some(WasmExecutionEvent::Exited(code)) => {
-                assert_eq!(code, 0);
-                saw_exit = true;
-            }
-            Some(WasmExecutionEvent::Stderr(chunk)) => {
-                panic!("unexpected stderr: {}", String::from_utf8_lossy(&chunk));
-            }
-            Some(WasmExecutionEvent::SyncRpcRequest(_)) => {}
-            None => panic!("timed out waiting for wasm execution event"),
-        }
-    }
-
-    assert_eq!(stdout, vec![b"hello\n".to_vec()]);
-    assert!(saw_signal, "expected signal-state event before exit");
-}
-
-fn wasm_execution_reassembles_split_signal_state_marker_across_stdout_chunks() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_split_signal_state_line_stdout_module(),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let mut execution = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::ReadWrite,
-        })
-        .expect("start wasm execution");
-
-    let mut saw_signal = false;
-    let mut saw_exit = false;
-    let mut stdout = Vec::new();
-
-    while !saw_exit {
-        match execution
-            .poll_event_blocking(Duration::from_secs(5))
-            .expect("poll wasm event")
-        {
-            Some(WasmExecutionEvent::Stdout(chunk)) => stdout.push(chunk),
-            Some(WasmExecutionEvent::SignalState {
-                signal,
-                registration,
-            }) => {
-                assert_eq!(signal, 2);
-                assert_eq!(
-                    registration.action,
-                    secure_exec_execution::wasm::WasmSignalDispositionAction::User
-                );
-                assert_eq!(registration.mask, vec![15]);
-                assert_eq!(registration.flags, 0x1234);
-                saw_signal = true;
-            }
-            Some(WasmExecutionEvent::Exited(code)) => {
-                assert_eq!(code, 0);
-                saw_exit = true;
-            }
-            Some(WasmExecutionEvent::Stderr(chunk)) => {
-                panic!("unexpected stderr: {}", String::from_utf8_lossy(&chunk));
-            }
-            Some(WasmExecutionEvent::SyncRpcRequest(_)) => {}
-            None => panic!("timed out waiting for wasm execution event"),
-        }
-    }
-
-    assert!(stdout.is_empty(), "split marker should not leak to stdout");
-    assert!(
-        saw_signal,
-        "expected reassembled signal-state event before exit"
-    );
-}
-
-fn wasm_read_only_tier_blocks_workspace_writes_but_read_write_allows_them() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(&temp.path().join("guest.wasm"), &wasm_write_file_module());
-
-    let mut engine = WasmExecutionEngine::default();
-    let read_only_context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-    let read_write_context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (read_only_stdout, read_only_stderr, read_only_exit) = run_wasm_execution(
-        &mut engine,
-        read_only_context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::new(),
-        WasmPermissionTier::ReadOnly,
-    );
-
-    assert_ne!(
-        read_only_exit, 0,
-        "read-only tier unexpectedly wrote to workspace: stdout={read_only_stdout} stderr={read_only_stderr}"
-    );
-    assert!(
-        !temp.path().join("output.txt").exists(),
-        "read-only tier should not create workspace files"
-    );
-
-    let (read_write_stdout, read_write_stderr, read_write_exit) = run_wasm_execution(
-        &mut engine,
-        read_write_context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::new(),
-        WasmPermissionTier::ReadWrite,
-    );
-
-    assert_eq!(
-        read_write_exit, 0,
-        "read-write tier should allow workspace writes: stdout={read_write_stdout} stderr={read_write_stderr}"
-    );
-    assert_eq!(
-        fs::read_to_string(temp.path().join("output.txt")).expect("read output"),
-        "tiered-write\n"
-    );
-}
-
-fn wasm_read_only_tier_returns_rofs_for_write_open() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_expect_write_open_errno_module(69),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::new(),
-        WasmPermissionTier::ReadOnly,
-    );
-
-    assert_eq!(exit_code, 0, "stdout={stdout} stderr={stderr}");
-    assert!(stdout.is_empty(), "stdout={stdout}");
-    assert!(stderr.is_empty(), "stderr={stderr}");
-    assert!(
-        !temp.path().join("output.txt").exists(),
-        "read-only tier should reject write-open before creating the target"
-    );
-}
-
-fn wasm_execution_rejects_path_open_escape_outside_preopen() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_escape_preopen_module(),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::new(),
-        WasmPermissionTier::Full,
-    );
-
-    assert_eq!(exit_code, 0, "stdout={stdout} stderr={stderr}");
-    assert!(stdout.is_empty(), "stdout={stdout}");
-    assert!(stderr.is_empty(), "stderr={stderr}");
-}
-
-fn wasm_execution_allows_path_open_for_nested_paths_inside_preopen() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    fs::create_dir_all(temp.path().join("nested")).expect("create nested dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_write_nested_file_module(),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::new(),
-        WasmPermissionTier::ReadWrite,
-    );
-
-    assert_eq!(exit_code, 0, "stdout={stdout} stderr={stderr}");
-    assert!(stdout.is_empty(), "stdout={stdout}");
-    assert!(stderr.is_empty(), "stderr={stderr}");
-    assert_eq!(
-        fs::read_to_string(temp.path().join("nested/output.txt")).expect("read nested output"),
-        "nested-write\n"
-    );
-}
-
-fn wasm_full_tier_exposes_host_process_imports_but_read_write_does_not() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(&temp.path().join("guest.wasm"), &wasm_signal_state_module());
-
-    let mut engine = WasmExecutionEngine::default();
-    let full_context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-    let read_write_context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (full_stdout, full_stderr, full_exit) = run_wasm_execution(
-        &mut engine,
-        full_context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::new(),
-        WasmPermissionTier::Full,
-    );
-
-    assert_eq!(full_exit, 0, "stderr: {full_stderr}");
-    assert!(full_stdout.contains("signal:ready"));
-
-    let (_stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        read_write_context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::new(),
-        WasmPermissionTier::ReadWrite,
-    );
-
-    assert_ne!(
-        exit_code, 0,
-        "read-write tier should deny host_process imports"
-    );
-    assert!(
-        stderr.contains("host_process") || stderr.contains("proc_sigaction"),
-        "unexpected stderr for denied host_process import: {stderr}"
-    );
-}
-
-fn wasm_execution_reuses_shared_warmup_path_across_contexts() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(&temp.path().join("guest.wasm"), &wasm_stdout_module());
-
-    let mut engine = WasmExecutionEngine::default();
-    let first_context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-    let second_context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-    let debug_env =
-        BTreeMap::from([(String::from("AGENTOS_WASM_WARMUP_DEBUG"), String::from("1"))]);
-
-    let (first_stdout, first_stderr, first_exit) = run_wasm_execution(
-        &mut engine,
-        first_context.context_id,
-        temp.path(),
-        Vec::new(),
-        debug_env.clone(),
-        WasmPermissionTier::Full,
-    );
-    let first_warmup = parse_warmup_metrics(&first_stderr);
-
-    assert_eq!(first_exit, 0);
-    assert!(first_stdout.contains("stdout:wasm-smoke"));
-    assert!(first_warmup.executed);
-    assert_eq!(first_warmup.reason, "executed");
-    assert_eq!(first_warmup.module_path, "./guest.wasm");
-    assert!(
-        !first_warmup.compile_cache_dir.is_empty(),
-        "expected shared compile cache dir in metrics"
-    );
-
-    let (second_stdout, second_stderr, second_exit) = run_wasm_execution(
-        &mut engine,
-        second_context.context_id,
-        temp.path(),
-        Vec::new(),
-        debug_env,
-        WasmPermissionTier::Full,
-    );
-    let second_warmup = parse_warmup_metrics(&second_stderr);
-
-    assert_eq!(second_exit, 0);
-    assert!(second_stdout.contains("stdout:wasm-smoke"));
-    assert!(!second_warmup.executed);
-    assert_eq!(second_warmup.reason, "cached");
-    assert_eq!(
-        second_warmup.compile_cache_dir,
-        first_warmup.compile_cache_dir
-    );
-}
-
-fn wasm_execution_rewarms_when_symlink_target_changes_with_same_size_module() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let stable_link = temp.path().join("guest.wasm");
-    write_fixture(&temp.path().join("good.wasm"), &wasm_stdout_module());
-    write_fixture(&temp.path().join("evil.wasm"), &wasm_override_module());
-    symlink("./good.wasm", &stable_link).expect("create initial wasm symlink");
-
-    let mut engine = WasmExecutionEngine::default();
-    let first_context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-    let second_context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-    let debug_env =
-        BTreeMap::from([(String::from("AGENTOS_WASM_WARMUP_DEBUG"), String::from("1"))]);
-
-    let (first_stdout, first_stderr, first_exit) = run_wasm_execution(
-        &mut engine,
-        first_context.context_id,
-        temp.path(),
-        Vec::new(),
-        debug_env.clone(),
-        WasmPermissionTier::Full,
-    );
-    let first_warmup = parse_warmup_metrics(&first_stderr);
-
-    assert_eq!(first_exit, 0, "stderr: {first_stderr}");
-    assert!(first_stdout.contains("stdout:wasm-smoke"));
-    assert!(first_warmup.executed, "stderr: {first_stderr}");
-
-    fs::remove_file(&stable_link).expect("remove wasm symlink");
-    symlink("./evil.wasm", &stable_link).expect("retarget wasm symlink");
-
-    let (second_stdout, second_stderr, second_exit) = run_wasm_execution(
-        &mut engine,
-        second_context.context_id,
-        temp.path(),
-        Vec::new(),
-        debug_env,
-        WasmPermissionTier::Full,
-    );
-    let second_warmup = parse_warmup_metrics(&second_stderr);
-
-    assert_eq!(second_exit, 0, "stderr: {second_stderr}");
-    assert!(second_stdout.contains("stdout:evil-smoke"));
-    assert!(second_warmup.executed, "stderr: {second_stderr}");
-    assert_eq!(second_warmup.reason, "executed");
-}
-
-fn wasm_warmup_metrics_encode_emoji_module_paths_as_json() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    let module_name = "guest-😀.wasm";
-    write_fixture(&temp.path().join(module_name), &wasm_stdout_module());
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(format!("./{module_name}")),
-    });
-
-    let (stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::from([(String::from("AGENTOS_WASM_WARMUP_DEBUG"), String::from("1"))]),
-        WasmPermissionTier::Full,
-    );
-    let warmup = parse_warmup_metrics(&stderr);
-
-    assert_eq!(exit_code, 0, "stderr: {stderr}");
-    assert!(stdout.contains("stdout:wasm-smoke"));
-    assert!(warmup.executed, "stderr: {stderr}");
-    assert_eq!(warmup.module_path, format!("./{module_name}"));
-    assert!(stderr.contains("\\ud83d\\ude00"), "stderr: {stderr}");
-}
-
-fn wasm_execution_times_out_when_fuel_budget_is_exhausted() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_infinite_loop_module(),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::from([(String::from(WASM_MAX_FUEL_ENV), String::from("25"))]),
-        WasmPermissionTier::Full,
-    );
-
-    assert_eq!(exit_code, 124, "stdout={stdout} stderr={stderr}");
-    assert!(stdout.is_empty(), "stdout={stdout}");
-    assert!(
-        stderr.contains("fuel budget exhausted"),
-        "stderr should mention the exhausted fuel budget: {stderr}"
-    );
-}
-
-fn wasm_execution_poll_path_times_out_when_fuel_budget_is_exhausted() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_infinite_loop_module(),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let mut execution = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: WasmExecutionLimits {
-                max_fuel: Some(25),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect("start wasm execution");
-
-    let mut stderr = String::new();
-    let mut exit_code = None;
-    let deadline = std::time::Instant::now() + Duration::from_secs(5);
-    while exit_code.is_none() {
-        let remaining = deadline
-            .checked_duration_since(std::time::Instant::now())
-            .expect("poll path did not time out within the bounded test window");
-        match execution
-            .poll_event_blocking(remaining.min(Duration::from_millis(250)))
-            .expect("poll wasm event")
-        {
-            Some(WasmExecutionEvent::Stderr(chunk)) => {
-                stderr.push_str(&String::from_utf8_lossy(&chunk));
-            }
-            Some(WasmExecutionEvent::Exited(code)) => {
-                exit_code = Some(code);
-            }
-            Some(WasmExecutionEvent::Stdout(_))
-            | Some(WasmExecutionEvent::SyncRpcRequest(_))
-            | Some(WasmExecutionEvent::SignalState { .. })
-            | None => {}
-        }
-    }
-
-    assert_eq!(exit_code, Some(124), "stderr={stderr}");
-    assert!(
-        stderr.contains("fuel budget exhausted"),
-        "stderr should mention the exhausted fuel budget: {stderr}"
-    );
-}
-
-fn wasm_execution_allows_prewarm_timeout_to_differ_from_execution_timeout() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_infinite_loop_module(),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::from([(String::from(WASM_MAX_FUEL_ENV), String::from("25"))]),
-        WasmPermissionTier::Full,
-    );
-
-    assert_eq!(exit_code, 124, "stdout={stdout} stderr={stderr}");
-    assert!(stdout.is_empty(), "stdout={stdout}");
-    assert!(
-        stderr.contains("fuel budget exhausted"),
-        "stderr should mention the exhausted fuel budget: {stderr}"
-    );
-}
-
-fn wasm_execution_rejects_modules_whose_memory_cap_exceeds_limit() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_memory_capped_module(),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let error = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            // Enforced from the typed wire limit, not an env knob.
-            limits: WasmExecutionLimits {
-                max_memory_bytes: Some(2 * 65_536),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect_err("memory limit should reject oversized module maximum");
-
-    assert!(
-        error.to_string().contains("memory maximum"),
-        "unexpected error: {error}"
-    );
-}
-
-fn wasm_execution_enforces_runtime_memory_growth_limit_for_modules_without_declared_maximum() {
-    assert_node_available();
-
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &wasm_memory_grow_until_runtime_limit_module(),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let (stdout, stderr, exit_code) = run_wasm_execution(
-        &mut engine,
-        context.context_id,
-        temp.path(),
-        Vec::new(),
-        BTreeMap::from([(
-            String::from(WASM_MAX_MEMORY_BYTES_ENV),
-            (2 * 65_536_u64).to_string(),
-        )]),
-        WasmPermissionTier::Full,
-    );
-
-    assert_eq!(exit_code, 0, "stdout={stdout} stderr={stderr}");
-    assert!(stderr.is_empty(), "stderr={stderr}");
-    assert!(
-        stdout.contains("memory-grow-limited"),
-        "stdout should confirm runtime memory.grow enforcement: {stdout}"
-    );
-}
-
-fn wasm_execution_rejects_modules_that_exceed_parser_file_size_cap() {
-    let temp = tempdir().expect("create temp dir");
-    let module_path = temp.path().join("guest.wasm");
-    let file = fs::File::create(&module_path).expect("create oversize wasm file");
-    file.set_len(256_u64 * 1024 * 1024 + 1)
-        .expect("sparsely size oversize wasm file");
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let error = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            // The memory cap (which gates module-structure validation) is enforced
-            // from the typed wire limit, not the `AGENTOS_WASM_MAX_MEMORY_BYTES`
-            // env knob.
-            limits: WasmExecutionLimits {
-                max_memory_bytes: Some(65_536),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect_err("oversized module should be rejected before read");
-
-    assert!(
-        error
-            .to_string()
-            .contains("module file size of 268435457 bytes exceeds the configured parser cap"),
-        "unexpected error: {error}"
-    );
-}
-
-fn wasm_execution_rejects_modules_with_too_many_import_entries() {
-    let temp = tempdir().expect("create temp dir");
-    let mut import_section = encode_varuint(16_385);
-    import_section.extend_from_slice(&[0x00, 0x00]);
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &raw_wasm_module(2, &import_section),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let error = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            // The memory cap (which gates module-structure validation) is enforced
-            // from the typed wire limit, not the `AGENTOS_WASM_MAX_MEMORY_BYTES`
-            // env knob.
-            limits: WasmExecutionLimits {
-                max_memory_bytes: Some(65_536),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect_err("import cap should reject oversized import section");
-
-    assert!(
-        error
-            .to_string()
-            .contains("import section contains 16385 entries"),
-        "unexpected error: {error}"
-    );
-}
-
-fn wasm_execution_rejects_modules_with_too_many_memory_entries() {
-    let temp = tempdir().expect("create temp dir");
-    write_fixture(
-        &temp.path().join("guest.wasm"),
-        &raw_wasm_module(5, &encode_varuint(1_025)),
-    );
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let error = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            // The memory cap (which gates module-structure validation) is enforced
-            // from the typed wire limit, not the `AGENTOS_WASM_MAX_MEMORY_BYTES`
-            // env knob.
-            limits: WasmExecutionLimits {
-                max_memory_bytes: Some(65_536),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect_err("memory cap should reject oversized memory section");
-
-    assert!(
-        error
-            .to_string()
-            .contains("memory section contains 1025 entries"),
-        "unexpected error: {error}"
-    );
-}
-
-fn wasm_execution_rejects_varuints_that_exceed_parser_iteration_cap() {
-    let temp = tempdir().expect("create temp dir");
-    let mut bytes = Vec::from(*b"\0asm");
-    bytes.extend_from_slice(&[0x01, 0x00, 0x00, 0x00]);
-    bytes.push(5);
-    bytes.extend_from_slice(&[0x80; 11]);
-    bytes.push(0x00);
-    write_fixture(&temp.path().join("guest.wasm"), &bytes);
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./guest.wasm")),
-    });
-
-    let error = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            // The memory cap (which gates module-structure validation) is enforced
-            // from the typed wire limit, not the `AGENTOS_WASM_MAX_MEMORY_BYTES`
-            // env knob.
-            limits: WasmExecutionLimits {
-                max_memory_bytes: Some(65_536),
-                ..Default::default()
-            },
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect_err("varuint cap should reject oversized encodings");
-
-    assert!(
-        error
-            .to_string()
-            .contains("varuint exceeds the parser cap of 10 bytes"),
-        "unexpected error: {error}"
-    );
-}
-
-// Regression for US-090: a resolved WebAssembly module that turns out to be a
-// `node_modules/.bin/<cmd>` shell-shim script must be rejected by the WASM
-// engine with a typed `NonWasmBinary` error BEFORE V8 ever sees the bytes. The
-// pre-fix behavior was to base64-encode the `#!/bin/sh` bytes into the prewarm
-// env and hand them to `WebAssembly.compile()`, which failed with the opaque
-// `CompileError: WebAssembly.Module(): expected magic word 00 61 73 6d, found
-// 23 21 2f 62 @+0` cascade that blocked US-088. See
-// `.agent/specs/us-090-wasm-warmup-shebang-fix.md` for the full story.
-fn wasm_execution_rejects_shell_shim_before_handing_bytes_to_v8() {
-    let temp = tempdir().expect("create temp dir");
-    let node_modules_bin = temp.path().join("node_modules").join(".bin");
-    fs::create_dir_all(&node_modules_bin).expect("create node_modules/.bin");
-    let shim_path = node_modules_bin.join("fake-shim");
-    let shim_script = "#!/bin/sh\n\
-basedir=$(dirname \"$(echo \"$0\" | sed -e 's,\\\\,/,g')\")\n\
-\n\
-case `uname` in\n\
-    *CYGWIN*|*MINGW*|*MSYS*) basedir=`cygpath -w \"$basedir\"`;;\n\
-esac\n\
-\n\
-if [ -x \"$basedir/node\" ]; then\n\
-  exec \"$basedir/node\"  \"$basedir/../fake/dist/cli.js\" \"$@\"\n\
-else\n\
-  exec node  \"$basedir/../fake/dist/cli.js\" \"$@\"\n\
-fi\n";
-    fs::write(&shim_path, shim_script).expect("write shell-shim fixture");
-    use std::os::unix::fs::PermissionsExt;
-    let mut permissions = fs::metadata(&shim_path)
-        .expect("shim metadata")
-        .permissions();
-    permissions.set_mode(0o755);
-    fs::set_permissions(&shim_path, permissions).expect("chmod shell-shim");
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(shim_path.to_string_lossy().into_owned()),
-    });
-
-    let error = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: vec![shim_path.to_string_lossy().into_owned()],
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect_err("shell shim should be rejected before prewarm/V8");
-
-    match &error {
-        secure_exec_execution::WasmExecutionError::NonWasmBinary {
-            path,
-            header,
-            shell_shim,
-        } => {
-            assert!(
-                *shell_shim,
-                "expected shell_shim=true for shebang header, got header {header:?}"
-            );
-            assert!(
-                header.starts_with(b"#!"),
-                "expected header to begin with '#!', got {header:?}"
-            );
-            assert!(
-                path.ends_with("node_modules/.bin/fake-shim"),
-                "expected rejected path to name the shim, got {path:?}"
-            );
-        }
-        other => panic!("expected NonWasmBinary typed error, got {other:?}"),
-    }
-
-    let rendered = error.to_string();
-    assert!(
-        !rendered.contains("CompileError"),
-        "rendered error must not mention CompileError (got: {rendered})"
-    );
-    assert!(
-        !rendered.contains("WebAssembly.Module()"),
-        "rendered error must not mention WebAssembly.Module() (got: {rendered})"
-    );
-    assert!(
-        rendered.contains("node_modules/.bin/fake-shim"),
-        "rendered error must name the resolved shim path (got: {rendered})"
-    );
-    assert!(
-        rendered.contains("shell-shim"),
-        "rendered error must describe the shell-shim classification (got: {rendered})"
-    );
-}
-
-fn wasm_execution_rejects_random_non_wasm_bytes_with_typed_error() {
-    let temp = tempdir().expect("create temp dir");
-    let module_path = temp.path().join("not-really.wasm");
-    fs::write(&module_path, b"hello world, definitely not wasm\n").expect("write non-wasm fixture");
-
-    let mut engine = WasmExecutionEngine::default();
-    let context = engine.create_context(CreateWasmContextRequest {
-        vm_id: String::from("vm-wasm"),
-        module_path: Some(String::from("./not-really.wasm")),
-    });
-
-    let error = engine
-        .start_execution(StartWasmExecutionRequest {
-            guest_runtime: Default::default(),
-            limits: Default::default(),
-            vm_id: String::from("vm-wasm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: temp.path().to_path_buf(),
-            permission_tier: WasmPermissionTier::Full,
-        })
-        .expect_err("non-wasm file should be rejected before prewarm/V8");
-
-    match &error {
-        secure_exec_execution::WasmExecutionError::NonWasmBinary {
-            header, shell_shim, ..
-        } => {
-            assert!(
-                !*shell_shim,
-                "expected shell_shim=false for non-#! header, got header {header:?}"
-            );
-            assert_eq!(
-                header.as_slice(),
-                b"hell",
-                "expected first 4 bytes of the fixture, got {header:?}"
-            );
-        }
-        other => panic!("expected NonWasmBinary typed error, got {other:?}"),
-    }
-
-    let rendered = error.to_string();
-    assert!(
-        !rendered.contains("CompileError"),
-        "rendered error must not mention CompileError (got: {rendered})"
-    );
-}
-
-fn wasm_execution_rejects_native_binary_headers_with_explicit_error() {
-    for (file_name, header, expected_format) in [
-        (
-            "fake-elf.wasm",
-            b"\x7fELF\x02\x01\x01\x00".as_slice(),
-            NativeBinaryFormat::Elf,
-        ),
-        (
-            "fake-macho.wasm",
-            b"\xfe\xed\xfa\xcf\x00\x00\x00\x00".as_slice(),
-            NativeBinaryFormat::MachO,
-        ),
-        (
-            "fake-pe.wasm",
-            b"MZ\x90\x00\x03\x00\x00\x00".as_slice(),
-            NativeBinaryFormat::PeCoff,
-        ),
-    ] {
-        let temp = tempdir().expect("create temp dir");
-        let module_path = temp.path().join(file_name);
-        fs::write(&module_path, header).expect("write native-binary fixture");
-
-        let mut engine = WasmExecutionEngine::default();
-        let context = engine.create_context(CreateWasmContextRequest {
-            vm_id: String::from("vm-wasm"),
-            module_path: Some(format!("./{file_name}")),
-        });
-
-        let error = engine
-            .start_execution(StartWasmExecutionRequest {
-                guest_runtime: Default::default(),
-                limits: Default::default(),
-                vm_id: String::from("vm-wasm"),
-                context_id: context.context_id,
-                argv: Vec::new(),
-                env: BTreeMap::new(),
-                cwd: temp.path().to_path_buf(),
-                permission_tier: WasmPermissionTier::Full,
-            })
-            .expect_err("native binary should be rejected before prewarm/V8");
-
-        match &error {
-            WasmExecutionError::NativeBinaryNotSupported {
-                header: observed_header,
-                format,
-                ..
-            } => {
-                assert_eq!(*format, expected_format);
-                assert_eq!(
-                    observed_header.as_slice(),
-                    &header[..4],
-                    "expected rejected header bytes for {file_name}"
-                );
-            }
-            other => panic!("expected NativeBinaryNotSupported typed error, got {other:?}"),
-        }
-
-        let rendered = error.to_string();
-        assert!(
-            rendered.contains("ERR_NATIVE_BINARY_NOT_SUPPORTED"),
-            "rendered error must expose the explicit native-binary code (got: {rendered})"
-        );
-        assert!(
-            rendered.contains(expected_format_display(expected_format)),
-            "rendered error must name the detected binary format (got: {rendered})"
-        );
-        assert!(
-            !rendered.contains("CompileError"),
-            "rendered error must not mention CompileError (got: {rendered})"
-        );
-    }
-}
-
-fn expected_format_display(format: NativeBinaryFormat) -> &'static str {
-    match format {
-        NativeBinaryFormat::Elf => "ELF",
-        NativeBinaryFormat::MachO => "Mach-O",
-        NativeBinaryFormat::PeCoff => "PE/COFF",
-    }
-}
-
-// SE-EXEC-05 (B.1 / F-002): never-returning self-recursion. Under a real
-// configured stack byte cap (`AGENTOS_WASM_MAX_STACK_BYTES`) this must be bounded
-// deterministically and attributed to THAT budget rather than silently ignored.
-fn wasm_unbounded_recursion_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (memory (export "memory") 1)
-  (func $recurse (param $depth i32) (result i32)
-    (call $recurse (i32.add (local.get $depth) (i32.const 1)))
-  )
-  (func $_start (export "_start")
-    (drop (call $recurse (i32.const 0)))
-  )
-)
-"#,
-    )
-    .expect("compile unbounded-recursion wasm fixture")
-}
-
-// Watchdog runner for WASM cases that may run unbounded. The whole execution
-// (engine + context + wait) happens on a spawned thread, so a guest that the
-// engine never terminates cannot hang the test binary: the test thread reclaims
-// control after `wall_clock_budget` and reports `None`.
-fn run_wasm_execution_with_watchdog(
-    module_bytes: Vec<u8>,
-    env: BTreeMap<String, String>,
-    wall_clock_budget: Duration,
-) -> Option<(String, String, i32)> {
-    let (tx, rx) = mpsc::channel::<(String, String, i32)>();
-    thread::spawn(move || {
-        let temp = match tempdir() {
-            Ok(temp) => temp,
-            Err(_) => return,
-        };
-        write_fixture(&temp.path().join("guest.wasm"), &module_bytes);
-
-        let mut engine = WasmExecutionEngine::default();
-        let context = engine.create_context(CreateWasmContextRequest {
-            vm_id: String::from("vm-wasm"),
-            module_path: Some(String::from("./guest.wasm")),
-        });
-
-        let result = run_wasm_execution(
-            &mut engine,
-            context.context_id,
-            temp.path(),
-            Vec::new(),
-            env,
-            WasmPermissionTier::Full,
-        );
-        let _ = tx.send(result);
-    });
-
-    rx.recv_timeout(wall_clock_budget).ok()
-}
-
-// SE-EXEC-05 (B.1) SAFEGUARD [x-ref FAILURES.md#F-002]: with
-// `AGENTOS_WASM_MAX_STACK_BYTES` configured, never-returning recursion must be
-// terminated nonzero AND the failure must cite the operator-configured stack
-// byte budget instead of the engine's generic default-guard message. Before the
-// fix the env was never read by the engine (dead cap), so the guest trapped on
-// V8's default `RangeError` with a generic message. The run is watchdog-bound so
-// it cannot hang CI, and the configured cap makes it terminate fast.
-fn wasm_deep_recursion_respects_configured_stack_byte_limit() {
-    assert_node_available();
-
-    let env = BTreeMap::from([(
-        String::from(WASM_MAX_STACK_BYTES_ENV),
-        String::from("65536"),
-    )]);
-    let outcome = run_wasm_execution_with_watchdog(
-        wasm_unbounded_recursion_module(),
-        env,
-        Duration::from_secs(45),
-    );
-
-    let (stdout, stderr, exit_code) =
-        outcome.expect("deep recursion run did not finish within the watchdog budget");
-
-    assert_ne!(
-        exit_code, 0,
-        "deep recursion should be terminated, not run unbounded: stdout={stdout} stderr={stderr}"
-    );
-    assert!(
-        stderr.contains("65536") || stderr.to_lowercase().contains("configured"),
-        "termination should cite the configured stack byte limit, not a generic default guard: stderr={stderr}"
-    );
-}
-
-// Separate libtest cases in this binary still trip a V8 teardown/init crash, so
-// keep the WASM runtime coverage in one top-level suite until that boundary is fixed.
-//
-// NOT split for cargo-nextest (unlike `python_suite`/`kill_cleanup_suite`): three
-// cases here run an infinite-loop guest module (`wasm_execution_times_out_when_
-// fuel_budget_is_exhausted`, `..._poll_path_times_out_...`, `..._allows_prewarm_
-// timeout_to_differ_...`). In this collapsed run they are cheap because earlier
-// cases warmed the process-global V8 state, but in a COLD nextest process the
-// infinite loop is bounded only by the ~30s V8 CPU-time watchdog, so each costs
-// ~30s in isolation and grouping only those three SIGSEGVs (the very shared-
-// process teardown crash this suite guards against). Splitting therefore makes
-// the binary's wall WORSE (33-92s vs this ~20s collapsed run) and is unsafe, so
-// the coverage stays collapsed here.
-#[test]
-fn wasm_suite() {
-    wasm_contexts_preserve_vm_and_module_configuration();
-    wasm_execution_stays_inside_v8_runtime_without_host_node_launches();
-    wasm_execution_runs_guest_module_through_v8();
-    wasm_snapshot_runner_block_round_trips_twice();
-    wasm_snapshot_runner_warm_worker_pool_hits();
-    wasm_snapshot_runner_warm_worker_pool_disabled_falls_back();
-    wasm_snapshot_runner_warm_hint_mismatch_falls_back();
-    wasm_snapshot_runner_off_fallback_matches_inline();
-    wasm_module_bytes_cache_invalidates_when_file_changes();
-    wasm_execution_supports_fd_fdstat_set_flags();
-    wasm_execution_ignores_guest_overrides_for_internal_node_env();
-    wasm_execution_freezes_wasi_clock_time();
-    wasm_execution_rejects_vm_mismatch();
-    wasm_execution_streams_exit_event();
-    wasm_execution_can_route_stdio_through_kernel_sync_rpc();
-    wasm_execution_reads_streaming_stdin_via_kernel_bridge();
-    wasm_execution_poll_oneoff_uses_kernel_poll_for_multiple_fds();
-    wasm_execution_emits_signal_state_from_control_channel();
-    wasm_execution_preserves_stdout_when_signal_state_marker_shares_stdout_chunk();
-    wasm_execution_reassembles_split_signal_state_marker_across_stdout_chunks();
-    wasm_read_only_tier_blocks_workspace_writes_but_read_write_allows_them();
-    wasm_read_only_tier_returns_rofs_for_write_open();
-    wasm_execution_rejects_path_open_escape_outside_preopen();
-    wasm_execution_allows_path_open_for_nested_paths_inside_preopen();
-    wasm_full_tier_exposes_host_process_imports_but_read_write_does_not();
-    wasm_execution_reuses_shared_warmup_path_across_contexts();
-    wasm_execution_rewarms_when_symlink_target_changes_with_same_size_module();
-    wasm_warmup_metrics_encode_emoji_module_paths_as_json();
-    wasm_execution_times_out_when_fuel_budget_is_exhausted();
-    wasm_execution_poll_path_times_out_when_fuel_budget_is_exhausted();
-    wasm_execution_allows_prewarm_timeout_to_differ_from_execution_timeout();
-    wasm_execution_rejects_modules_whose_memory_cap_exceeds_limit();
-    wasm_execution_enforces_runtime_memory_growth_limit_for_modules_without_declared_maximum();
-    wasm_execution_rejects_modules_that_exceed_parser_file_size_cap();
-    wasm_execution_rejects_modules_with_too_many_import_entries();
-    wasm_execution_rejects_modules_with_too_many_memory_entries();
-    wasm_execution_rejects_varuints_that_exceed_parser_iteration_cap();
-    wasm_execution_rejects_shell_shim_before_handing_bytes_to_v8();
-    wasm_execution_rejects_random_non_wasm_bytes_with_typed_error();
-    wasm_execution_rejects_native_binary_headers_with_explicit_error();
-
-    // SE-EXEC-05 (B.1) SAFEGUARD [x-ref FAILURES.md#F-002]: the configured WASM
-    // stack byte cap must now bound runaway recursion and attribute the failure.
-    wasm_deep_recursion_respects_configured_stack_byte_limit();
-
-    // Convergence item C: the official WASI preview1 conformance subset runs on
-    // the native backend of the SINGLE shared runner (same manifest the browser
-    // backend runs in packages/browser/tests/browser/wasi-testsuite.spec.ts).
-    wasi_testsuite_subset_runs_on_native_shared_runner();
-}
-
-fn wasi_testsuite_subset_runs_on_native_shared_runner() {
-    assert_node_available();
-
-    let manifest_source = include_str!(concat!(
-        env!("CARGO_MANIFEST_DIR"),
-        "/../../tests/fixtures/wasi-testsuite-subset.json"
-    ));
-    let manifest: serde_json::Value =
-        serde_json::from_str(manifest_source).expect("parse wasi-testsuite manifest");
-    let cases = manifest
-        .get("cases")
-        .and_then(serde_json::Value::as_array)
-        .expect("wasi-testsuite manifest cases");
-    assert!(!cases.is_empty(), "wasi-testsuite subset must not be empty");
-
-    for case in cases {
-        let name = case
-            .get("name")
-            .and_then(serde_json::Value::as_str)
-            .expect("case name");
-        let expected_exit = case
-            .get("exitCode")
-            .and_then(serde_json::Value::as_i64)
-            .expect("case exitCode") as i32;
-        let expected_stdout = case.get("stdout").and_then(serde_json::Value::as_str);
-        let wasm = base64::engine::general_purpose::STANDARD
-            .decode(
-                case.get("wasmBase64")
-                    .and_then(serde_json::Value::as_str)
-                    .expect("case wasmBase64"),
-            )
-            .expect("decode case wasm");
-
-        let temp = tempdir().expect("create temp dir");
-        write_fixture(&temp.path().join("guest.wasm"), &wasm);
-
-        let mut engine = WasmExecutionEngine::default();
-        let context = engine.create_context(CreateWasmContextRequest {
-            vm_id: String::from("vm-wasm"),
-            module_path: Some(String::from("./guest.wasm")),
-        });
-
-        let (stdout, stderr, exit_code) = run_wasm_execution(
-            &mut engine,
-            context.context_id,
-            temp.path(),
-            Vec::new(),
-            BTreeMap::new(),
-            WasmPermissionTier::Full,
-        );
-
-        assert_eq!(
-            exit_code, expected_exit,
-            "wasi-testsuite {name}: exit {exit_code} != {expected_exit} (stdout={stdout} stderr={stderr})"
-        );
-        if let Some(expected) = expected_stdout {
-            assert!(
-                stdout.contains(expected),
-                "wasi-testsuite {name}: stdout {stdout:?} missing {expected:?} (stderr={stderr})"
-            );
-        }
-    }
-}
diff --git a/crates/kernel/AGENTS.md b/crates/kernel/AGENTS.md
deleted file mode 120000
index 681311eb9..000000000
--- a/crates/kernel/AGENTS.md
+++ /dev/null
@@ -1 +0,0 @@
-CLAUDE.md
\ No newline at end of file
diff --git a/crates/kernel/CLAUDE.md b/crates/kernel/CLAUDE.md
deleted file mode 100644
index 6490451e4..000000000
--- a/crates/kernel/CLAUDE.md
+++ /dev/null
@@ -1,69 +0,0 @@
-# Kernel
-
-The kernel provides a POSIX-like userspace environment. The goal is that a program written for Linux should run inside the VM without modification, subject to the execution runtimes available (Node.js, WASM, Python).
-
-## Linux Compatibility
-
-- **Correct errno values.** Every kernel operation that fails must return the correct POSIX errno (`ENOENT`, `EACCES`, `EEXIST`, `EISDIR`, `ENOTDIR`, `EXDEV`, `EBADF`, `EPERM`, `ENOSYS`, etc.). Agents check errno values to decide control flow -- wrong errnos cause cascading failures.
-- **Standard `/proc` layout.** `/proc/self/`, `/proc/[pid]/`, `/proc/[pid]/fd/`, `/proc/[pid]/environ`, `/proc/[pid]/cwd`, `/proc/[pid]/cmdline` should contain the expected content.
-- **Extend procfs surfaces together.** When adding a new `/proc` entry in `crates/kernel/src/kernel.rs`, update path resolution, `read_dir`, read-bytes helpers, stat/lstat sizing, filetype/inode/canonical-path switches, and the focused `crates/kernel/tests/identity.rs` truth suite in the same change so the synthetic proc layer stays internally consistent.
-- **Synthetic procfs paths use guest-visible permission subjects.** Permission checks for procfs access should authorize the guest-visible proc path directly rather than resolving through the backing VFS realpath.
-- **Hard-link permission checks use different resolvers for source vs destination.** In `crates/kernel/src/permissions.rs`, the existing link source must authorize through `resolved_existing_path(...)` so symlink leaf sources resolve to their real target, while the new link path should still use `resolved_destination_path(...)` for parent-chain authorization.
-- **Standard `/dev` devices.** `/dev/null`, `/dev/zero`, `/dev/urandom`, `/dev/stdin`, `/dev/stdout`, `/dev/stderr`, `/dev/fd/*`, `/dev/pts/*` must exist and behave correctly. `/dev/urandom` must return cryptographically random bytes, not deterministic values.
-- **Stream-device byte counts belong on length-aware read paths.** For unbounded devices such as `/dev/zero` and `/dev/urandom`, exact Linux-style byte-count assertions should target `pread` / `fd_read` in `device_layer.rs` and kernel FD tests; `read_file()` has no byte-count parameter.
-- **Correct signal semantics.** `SIGCHLD` on child exit. `SIGPIPE` on write to broken pipe. `SIGWINCH` on terminal resize. Signal delivery must respect process groups and sessions.
-- **Kernel-generated signals must use the mask-aware process-table helpers.** In `crates/kernel/src/process_table.rs`, route `SIGCHLD`/`SIGHUP`/`SIGCONT` and similar internal notifications through the shared queue-or-deliver helpers instead of calling `driver.kill(...)` directly, so blocked signals stay pending until `sigprocmask` unblocks them.
-- **Virtual processes should stay on the normal FD table.** For tool-backed child processes, create a regular kernel process entry, wire stdio through fd `0`/`1`/`2` with pipes or PTYs, and use the owner-checked kernel helpers to read stdin, write stdout/stderr, and mark exit instead of introducing side buffers.
-- **Kernel `fcntl` state is split between shared descriptions and per-fd entries.** Keep `O_APPEND` on the shared `FileDescription` so dup/fork handles observe the same append mode, but keep `O_NONBLOCK` and `FD_CLOEXEC` on `FdEntry` because they are descriptor-local in the current kernel model.
-- **`cleanup_process_resources()` must snapshot and close under one fd-table lock.** If cleanup drops the `fd_tables` lock between collecting descriptors and removing them, a concurrent `dup2` can keep pipe/PTY/socket descriptions alive long enough to skip special-resource teardown and leak the underlying kernel object.
-- **`KernelVm` drop-path teardown is easiest to prove in `kernel.rs` unit tests.** When verifying `Drop` or panic-unwind cleanup, clone the private manager handles (`fd_tables`, `pipes`, `ptys`, `sockets`, `driver_pids`) before releasing the VM and assert those clones are empty afterward; external integration tests cannot inspect those counters once the VM is gone.
-- **Kernel-owned networking should start in `socket_table.rs`.** Track per-process socket/listener/connection lifecycle there and let `cleanup_process_resources()` reclaim those records on process exit instead of adding ad hoc side counters elsewhere.
-- **Kernel socket lifecycle tests should go through `KernelVm` wrappers.** Use `socket_bind_inet`, `socket_listen`, `socket_accept`, and `socket_get` in tests so driver ownership, resource checks, and socket-table state stay exercised together instead of mutating `SocketTable` directly.
-- **Kernel TCP data-plane tests should connect peers through `socket_connect_pair()`.** Until listener-routing stories land, build connected stream fixtures with `socket_connect_pair()` and exercise reads, writes, shutdown, and close through the `KernelVm` socket wrappers instead of wiring `SocketTable` peers directly in tests.
-- **Kernel loopback-routing coverage should use the explicit loopback wrappers.** Use `socket_connect_inet_loopback()` for guest listener routing and `socket_send_to_inet_loopback()` plus `socket_recv_datagram()` for UDP delivery so tests stay on the in-kernel address-routing path rather than manual pending-connection scaffolds.
-- **Loopback stream bind conflicts must stay symmetric with wildcard listeners.** In `crates/kernel/src/socket_table.rs`, binding `127.0.0.1:N` and `0.0.0.0:N` (or `::1:N` and `::N`) on TCP sockets must conflict in either order with `EADDRINUSE`, while distinct specific addresses like `127.0.0.1` vs `127.0.0.2` may still coexist.
-- **Kernel UDP tests should assert datagram-boundary truncation.** When a receive buffer is smaller than the payload, `socket_recv_datagram()` should return the truncated payload for that one datagram and leave later queued datagrams untouched; do not test UDP reads like stream partials.
-- **Kernel UDP socket-option coverage should stay on the `KernelVm` wrapper surface.** Use `socket_set_datagram_option()`, `socket_add_membership()`, `socket_drop_membership()`, and `socket_get()` in `crates/kernel/tests/udp_datagram.rs` so ownership checks, notifier wiring, and socket-table state all stay exercised together.
-- **Kernel Unix-socket tests should use the Unix socket wrappers.** Bind listener and client paths through `socket_bind_unix()`, connect with `socket_connect_unix()`, and accept via `socket_accept()` so path normalization, backlog handling, accepted-socket creation, and stream lifecycle state all stay on the kernel-owned path.
-- **Kernel DNS lookups should go through `KernelVm::resolve_dns()`.** Keep hostname normalization, VM overrides, nameserver state, and resolver delegation in `crates/kernel/src/dns.rs`, and have sidecar/runtime callers use `DnsLookupPolicy::CheckPermissions` only for explicit guest DNS APIs. TCP/UDP/HTTP helpers that already gate egress separately should use `SkipPermissions` so the DNS migration does not add a second permission requirement by accident.
-- **Mixed readiness tests should use `KernelVm::poll_targets()`.** Build shared poll coverage with `PollTargetEntry::fd(...)` for FD-backed pipes/PTYS and `PollTargetEntry::socket(...)` for socket-table entries so one notifier-driven wait path is exercised across all kernel-managed I/O types.
-- **Pipe waiters must retain their requested read length.** In `crates/kernel/src/pipe_manager.rs`, direct writer-to-waiter handoff still has to honor the blocked reader's original `read(fd, len)` byte count; split the payload at that length and buffer any remainder instead of bypassing POSIX `read(2)` semantics.
-- **Per-process identity belongs in kernel process metadata, not ad hoc env parsing.** Put uid/gid/euid/egid/group state on `ProcessContext` / `ProcessInfo`, and keep passwd/group rendering in `crates/kernel/src/user.rs` so guest identity syscalls can read kernel-owned values without depending on `/etc/*` or injected env vars.
-- **Unknown passwd/group lookups must fail closed.** In `crates/kernel/src/user.rs`, only render entries for the configured guest user and its known group memberships; unknown `getpwuid` / `getgrgid` lookups should map to `ENOENT` instead of synthesizing fake `user123` / `group123` records.
-- **FD growth must preserve the global-vs-process errno split.** Any kernel path that allocates a new descriptor slot (`fd_open`, `/dev/fd/*`, proc-backed opens, `dup`, `dup2` when targeting a free slot, `fcntl(F_DUPFD)`) must check the VM-wide open-fd budget before mutating the per-process table so VM exhaustion reports `ENFILE` and per-process exhaustion still reports `EMFILE`.
-- **Standard filesystem paths.** `/tmp` must be writable. `/etc/hostname`, `/etc/resolv.conf`, `/etc/passwd`, `/etc/group` should contain valid content. `/usr/bin/env` should exist for shebangs. Shell (`/bin/sh`, `/bin/bash`) must be available.
-- **Direct script exec should resolve registered stubs before reparsing files.** When the kernel executes a path under `/bin/` or `/usr/bin/` that corresponds to a registered command driver, dispatch that driver directly before falling back to shebang parsing.
-- **Environment variable conventions.** `HOME`, `USER`, `PATH`, `SHELL`, `TERM`, `HOSTNAME`, `PWD`, `LANG` must be set to reasonable values. `PATH` must include standard directories where commands are found.
-- **Document deviations in the friction log** at `~/.agents/notes/vm-friction.md`.
-
-## Virtual Filesystem Design Reference
-
-- The VFS chunking and metadata architecture is modeled after **JuiceFS** (https://juicefs.com/docs/community/architecture/). Reference JuiceFS docs when designing chunk/block storage, metadata engine separation, or read/write data paths.
-- Key JuiceFS concepts that apply: three-tier data model (Chunk/Slice/Block), pluggable metadata engines (SQLite, Redis, PostgreSQL), fixed-size block storage in object stores (S3), and metadata-data separation.
-- For detailed design analysis: https://juicefs.com/en/blog/engineering/design-metadata-data-storage
-
-### Agent-OS filesystem packages
-
-- The old `fs-sqlite` and `fs-postgres` packages were deleted. They are replaced by the Agent OS `SqliteMetadataStore` and the `ChunkedVFS` composition layer.
-- File system drivers live in `registry/file-system/`. Prefer their declarative mount helpers when available; the legacy custom-`VirtualFileSystem` path is only for arbitrary caller-supplied filesystems and compatibility fallbacks.
-- The Rivet actor integration currently uses `ChunkedVFS(InMemoryMetadataStore + InMemoryBlockStore)` as legacy temporary infrastructure. This must move to durable metadata and block storage.
-
-## Filesystem Conventions
-
-- **OS-level content uses mounts, not post-boot writes.** If agentOS needs custom directories in the VM (e.g., `/etc/agentos/`), mount a pre-populated filesystem at boot -- don't create the kernel and then write files into it afterward.
-- **Filesystem semantics must be durable.** Any state that changes filesystem behavior -- including overlay deletes, whiteouts, tombstones, copy-up state, directory entries, inode metadata, or file contents -- must be represented in durable filesystem or metadata storage. No in-memory side tables or transient hacks.
-- **Overlay metadata must stay out-of-band from the merged tree.** Store whiteouts or opaque-directory markers under a reserved hidden metadata root and filter that root out of user-visible results.
-- **Overlay mutating ops need raw-layer checks plus upper-layer moves.** Once copy-up marks directories opaque, merged `read_dir()` no longer tells you whether lower layers still hold children, so `rmdir`-style emptiness checks must inspect raw upper and lower entries directly. For identity-preserving ops like `rename`, stage the source into the writable upper first and then call the upper filesystem's native `rename`.
-- **Overlay raw emptiness scans still need whiteout filtering.** When raw-layer checks walk upper and lower directory entries for `rmdir`, filter each candidate through the upper whiteout markers before deciding the merged directory is non-empty; otherwise a lower-only child that has been whiteouted still forces a false `ENOTEMPTY`.
-- **Overlay filesystem behavior must match Linux OverlayFS as closely as possible, including mount-boundary semantics.** Treat the kernel OverlayFS docs as normative. OverlayFS overlays directory trees, not the mount table. Mounted filesystems remain separate mount boundaries, and cross-mount operations must keep normal mount semantics (`EXDEV`, separate identity, separate read-only rules).
-- **MountTable unmounts must reject busy parent mounts.** If `/a/b` is still mounted, `MountTable::unmount("/a")` should fail with `EBUSY` instead of removing the parent registration and leaving the child mount dangling.
-- **User-facing filesystem APIs should distinguish mounts from layers.** Mounts are separate mounted filesystems presented to the kernel VFS. Layers are overlay-building blocks. Do not collapse those into one generic concept.
-- **Middle layers in a Docker-like stack should be frozen layers, not extra writable uppers.** Linux OverlayFS supports one writable upper per overlay mount. Additional stacked layers should be immutable snapshot/materialized lower layers.
-- **Layer precedence is highest-first in `lowers`, with bootstrap entries as the writable upper.** When constructing `RootFilesystemDescriptor`, order explicit lower snapshots from highest to lowest precedence, let the bundled base layer fall to the end, and treat `bootstrap_entries` as the single writable upper that overrides the merged lowers.
-- **Root filesystem bootstrap must not materialize kernel-owned pseudo-filesystems.** Suppress bootstrap entries under `/dev`, `/proc`, and `/sys` so VM roots do not persist fake storage for paths the kernel owns synthetically.
-- **Snapshot-backed VFS invariance tests are the easiest way to prove failed path validation is side-effect free.** In `crates/kernel/tests/vfs.rs`, take a `MemoryFileSystem::snapshot()`, run the invalid-path operation against `MemoryFileSystem::from_snapshot(...)`, and compare the post-op snapshot so rejected paths cannot silently mutate inode metadata or the path index.
-- **readdir returns `.` and `..` entries** -- always filter them when iterating children to avoid infinite recursion.
-- **`VirtualStat` additions must be propagated end-to-end.** When stat grows new fields, update kernel-backed storage stats, synthetic `/proc` and `/dev` stats, sidecar mount/plugin conversions, sidecar protocol serialization, and the TypeScript `VirtualStat` / `GuestFilesystemStat` adapters together.
-- **Creation-mode-sensitive mounts should use the VFS `*_with_mode` hooks.** If a mounted filesystem needs the guest's requested file or directory mode at create time (for example host-backed mounts), thread it through `write_file_with_mode`, `create_file_exclusive_with_mode`, `create_dir_with_mode`, and `mkdir_with_mode` instead of hardcoding defaults and hoping a later chmod is enough.
-- **Never interfere with the user's filesystem or code.** Don't write config files, instruction files, or metadata into the user's working directory. Use dedicated OS paths or CLI flags instead.
-- **Agent prompt injection must be non-destructive.** Preserve existing user-provided instructions, append rather than replace, and always provide `skipOsInstructions` opt-out.
diff --git a/crates/kernel/Cargo.toml b/crates/kernel/Cargo.toml
index 0ff6e82d4..eb162ca94 100644
--- a/crates/kernel/Cargo.toml
+++ b/crates/kernel/Cargo.toml
@@ -4,23 +4,10 @@ version.workspace = true
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
-description = "Shared kernel plane for secure-exec native and browser sidecars"
+description = "secure-exec-kernel compatibility shim for agentos-kernel"
 
-[dependencies]
-secure-exec-bridge = { workspace = true }
-vfs = { workspace = true }
-base64 = "0.22"
-hickory-proto = { version = "0.26.0-beta.3", default-features = false }
-serde = { version = "1.0", features = ["derive"] }
-serde_json = "1.0"
-# Drop-in std::time replacement that works on wasm32 (std SystemTime/Instant
-# abort there); re-exports std on native.
-web-time = "1.1"
-
-[target.'cfg(not(target_arch = "wasm32"))'.dependencies]
-getrandom = "0.2"
-hickory-resolver = "0.26.0-beta.3"
-tokio = { version = "1", features = ["rt", "rt-multi-thread"] }
+[lib]
+name = "secure_exec_kernel"
 
-[target.'cfg(target_arch = "wasm32")'.dependencies]
-getrandom = { version = "0.2", features = ["js"] }
+[dependencies]
+agentos_kernel = { package = "agentos-kernel", path = "../../../agentos/crates/kernel", version = "0.0.1" }
diff --git a/crates/kernel/src/command_registry.rs b/crates/kernel/src/command_registry.rs
deleted file mode 100644
index a2b4d1dbe..000000000
--- a/crates/kernel/src/command_registry.rs
+++ /dev/null
@@ -1,144 +0,0 @@
-use crate::vfs::{VfsError, VfsResult, VirtualFileSystem};
-use std::collections::BTreeMap;
-
-const COMMAND_STUB: &[u8] = b"#!/bin/sh\n# kernel command stub\n";
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct CommandDriver {
-    name: String,
-    commands: Vec<String>,
-}
-
-impl CommandDriver {
-    pub fn new<N, I, C>(name: N, commands: I) -> Self
-    where
-        N: Into<String>,
-        I: IntoIterator<Item = C>,
-        C: Into<String>,
-    {
-        Self {
-            name: name.into(),
-            commands: commands.into_iter().map(Into::into).collect(),
-        }
-    }
-
-    pub fn name(&self) -> &str {
-        &self.name
-    }
-
-    pub fn commands(&self) -> &[String] {
-        &self.commands
-    }
-
-    fn validate_commands(&self) -> VfsResult<()> {
-        for command in &self.commands {
-            validate_command_name(command)?;
-        }
-
-        Ok(())
-    }
-}
-
-#[derive(Debug, Default, Clone)]
-pub struct CommandRegistry {
-    commands: BTreeMap<String, CommandDriver>,
-    warnings: Vec<String>,
-}
-
-impl CommandRegistry {
-    pub fn new() -> Self {
-        Self::default()
-    }
-
-    pub fn register(&mut self, driver: CommandDriver) -> VfsResult<()> {
-        driver.validate_commands()?;
-
-        for command in &driver.commands {
-            if let Some(existing) = self.commands.get(command) {
-                self.warnings.push(format!(
-                    "command \"{command}\" overridden: {} -> {}",
-                    existing.name(),
-                    driver.name()
-                ));
-            }
-
-            self.commands.insert(command.clone(), driver.clone());
-        }
-
-        Ok(())
-    }
-
-    pub fn warnings(&self) -> &[String] {
-        &self.warnings
-    }
-
-    pub fn resolve(&self, command: &str) -> Option<&CommandDriver> {
-        self.commands.get(command)
-    }
-
-    pub fn list(&self) -> BTreeMap<String, String> {
-        self.commands
-            .iter()
-            .map(|(command, driver)| (command.clone(), driver.name().to_owned()))
-            .collect()
-    }
-
-    pub fn populate_bin<F>(&self, vfs: &mut F) -> VfsResult<()>
-    where
-        F: VirtualFileSystem,
-    {
-        self.populate_commands(vfs, self.commands.keys())
-    }
-
-    pub fn populate_driver_bin<F>(&self, vfs: &mut F, driver: &CommandDriver) -> VfsResult<()>
-    where
-        F: VirtualFileSystem,
-    {
-        self.populate_commands(vfs, driver.commands())
-    }
-
-    fn populate_commands<F, I, S>(&self, vfs: &mut F, commands: I) -> VfsResult<()>
-    where
-        F: VirtualFileSystem,
-        I: IntoIterator<Item = S>,
-        S: AsRef<str>,
-    {
-        let commands = commands
-            .into_iter()
-            .map(|command| {
-                validate_command_name(command.as_ref())?;
-                Ok(command.as_ref().to_owned())
-            })
-            .collect::<VfsResult<Vec<_>>>()?;
-
-        if !vfs.exists("/bin") {
-            vfs.mkdir("/bin", true)?;
-        }
-
-        for command in commands {
-            let path = format!("/bin/{command}");
-            if !vfs.exists(&path) {
-                vfs.write_file(&path, COMMAND_STUB.to_vec())?;
-                let _ = vfs.chmod(&path, 0o755);
-            }
-        }
-
-        Ok(())
-    }
-}
-
-fn validate_command_name(command: &str) -> VfsResult<()> {
-    if command.is_empty()
-        || command == "."
-        || command == ".."
-        || command.contains('/')
-        || command.contains('\0')
-    {
-        return Err(VfsError::new(
-            "EINVAL",
-            format!("invalid command name {command:?}"),
-        ));
-    }
-
-    Ok(())
-}
diff --git a/crates/kernel/src/device_layer.rs b/crates/kernel/src/device_layer.rs
deleted file mode 100644
index b0729f4ba..000000000
--- a/crates/kernel/src/device_layer.rs
+++ /dev/null
@@ -1,397 +0,0 @@
-use crate::vfs::{
-    VfsError, VfsResult, VirtualDirEntry, VirtualFileSystem, VirtualStat, VirtualUtimeSpec,
-};
-use getrandom::getrandom;
-use web_time::{SystemTime, UNIX_EPOCH};
-
-const DEVICE_PATHS: &[&str] = &[
-    "/dev/null",
-    "/dev/zero",
-    "/dev/stdin",
-    "/dev/stdout",
-    "/dev/stderr",
-    "/dev/urandom",
-];
-
-const DEVICE_DIRS: &[&str] = &["/dev/fd", "/dev/pts"];
-const DEFAULT_STREAM_DEVICE_READ_BYTES: usize = 4096;
-const DEV_DIR_ENTRIES: &[(&str, bool)] = &[
-    ("null", false),
-    ("zero", false),
-    ("stdin", false),
-    ("stdout", false),
-    ("stderr", false),
-    ("urandom", false),
-    ("fd", true),
-];
-
-#[derive(Debug, Clone)]
-pub struct DeviceLayer<V> {
-    inner: V,
-}
-
-pub fn create_device_layer<V>(vfs: V) -> DeviceLayer<V> {
-    DeviceLayer { inner: vfs }
-}
-
-impl<V> DeviceLayer<V> {
-    pub fn into_inner(self) -> V {
-        self.inner
-    }
-
-    pub fn inner(&self) -> &V {
-        &self.inner
-    }
-
-    pub fn inner_mut(&mut self) -> &mut V {
-        &mut self.inner
-    }
-}
-
-impl<V: VirtualFileSystem> VirtualFileSystem for DeviceLayer<V> {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        if let Some(bytes) = read_stream_device(path, DEFAULT_STREAM_DEVICE_READ_BYTES) {
-            return bytes;
-        }
-
-        self.inner.read_file(path)
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        if path == "/dev" {
-            return Ok(DEV_DIR_ENTRIES
-                .iter()
-                .map(|(name, _)| String::from(*name))
-                .collect());
-        }
-        if DEVICE_DIRS.contains(&path) {
-            return Ok(Vec::new());
-        }
-        self.inner.read_dir(path)
-    }
-
-    fn read_dir_limited(&mut self, path: &str, max_entries: usize) -> VfsResult<Vec<String>> {
-        if path == "/dev" {
-            let entries = DEV_DIR_ENTRIES
-                .iter()
-                .map(|(name, _)| String::from(*name))
-                .collect::<Vec<_>>();
-            if entries.len() > max_entries {
-                return Err(VfsError::new(
-                    "ENOMEM",
-                    format!(
-                        "directory listing for '{path}' exceeds configured limit of {max_entries} entries"
-                    ),
-                ));
-            }
-            return Ok(entries);
-        }
-        if DEVICE_DIRS.contains(&path) {
-            return Ok(Vec::new());
-        }
-        self.inner.read_dir_limited(path, max_entries)
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        if path == "/dev" {
-            return Ok(DEV_DIR_ENTRIES
-                .iter()
-                .map(|(name, is_directory)| VirtualDirEntry {
-                    name: String::from(*name),
-                    is_directory: *is_directory,
-                    is_symbolic_link: false,
-                })
-                .collect());
-        }
-        if DEVICE_DIRS.contains(&path) {
-            return Ok(Vec::new());
-        }
-        self.inner.read_dir_with_types(path)
-    }
-
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        if is_sink_device_path(path) {
-            let _ = content.into();
-            return Ok(());
-        }
-        self.inner.write_file(path, content)
-    }
-
-    fn create_file_exclusive(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        if is_device_path(path) || is_device_dir(path) {
-            let _ = content.into();
-            return Err(VfsError::new(
-                "EEXIST",
-                format!("file already exists, open '{path}'"),
-            ));
-        }
-        self.inner.create_file_exclusive(path, content)
-    }
-
-    fn append_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<u64> {
-        if is_sink_device_path(path) {
-            return Ok(content.into().len() as u64);
-        }
-        self.inner.append_file(path, content)
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        if is_device_dir(path) {
-            return Ok(());
-        }
-        self.inner.create_dir(path)
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        if is_device_dir(path) {
-            return Ok(());
-        }
-        self.inner.mkdir(path, recursive)
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        if is_device_path(path) || is_device_dir(path) {
-            return true;
-        }
-        self.inner.exists(path)
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        if is_device_path(path) {
-            return Ok(device_stat(path));
-        }
-        if is_device_dir(path) {
-            return Ok(device_dir_stat(path));
-        }
-        self.inner.stat(path)
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        if is_device_path(path) {
-            return Err(VfsError::permission_denied("unlink", path));
-        }
-        self.inner.remove_file(path)
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        if is_device_dir(path) {
-            return Err(VfsError::permission_denied("rmdir", path));
-        }
-        self.inner.remove_dir(path)
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        if is_device_path(old_path) || is_device_path(new_path) {
-            return Err(VfsError::permission_denied("rename", old_path));
-        }
-        self.inner.rename(old_path, new_path)
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        if is_device_path(path) || is_device_dir(path) {
-            return Ok(String::from(path));
-        }
-        self.inner.realpath(path)
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        self.inner.symlink(target, link_path)
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        self.inner.read_link(path)
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        if is_device_path(path) {
-            return Ok(device_stat(path));
-        }
-        if is_device_dir(path) {
-            return Ok(device_dir_stat(path));
-        }
-        self.inner.lstat(path)
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        if is_device_path(old_path) {
-            return Err(VfsError::permission_denied("link", old_path));
-        }
-        self.inner.link(old_path, new_path)
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        if is_device_path(path) {
-            return Ok(());
-        }
-        self.inner.chmod(path, mode)
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        if is_device_path(path) {
-            return Ok(());
-        }
-        self.inner.chown(path, uid, gid)
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        if is_device_path(path) {
-            return Ok(());
-        }
-        self.inner.utimes(path, atime_ms, mtime_ms)
-    }
-
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-        follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        if is_device_path(path) {
-            return Ok(());
-        }
-        self.inner.utimes_spec(path, atime, mtime, follow_symlinks)
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        if is_sink_device_path(path) {
-            let _ = length;
-            return Ok(());
-        }
-        self.inner.truncate(path, length)
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        if let Some(bytes) = read_stream_device(path, length) {
-            return bytes;
-        }
-
-        self.inner.pread(path, offset, length)
-    }
-}
-
-fn is_device_path(path: &str) -> bool {
-    DEVICE_PATHS.contains(&path) || path.starts_with("/dev/fd/") || path.starts_with("/dev/pts/")
-}
-
-/// Standard emulated character devices (`/dev/null`, `/dev/zero`, `/dev/urandom`,
-/// `/dev/std{in,out,err}`). On Linux these are world-readable/writable and have no
-/// host backing — they are pure kernel emulations whose semantics this device layer
-/// already enforces (read/write for the stream devices, `EPERM` for unlink/rename).
-/// The permission layer therefore treats them as always accessible, so guest fs ops
-/// (`readFileSync`/`existsSync`/redirects on `/dev/null`, …) behave like native Linux
-/// regardless of the VM file-permission policy. Excludes `/dev/fd` and `/dev/pts`,
-/// which carry process-specific semantics the policy may legitimately govern.
-pub fn is_standard_device_path(path: &str) -> bool {
-    DEVICE_PATHS.contains(&path)
-}
-
-fn is_sink_device_path(path: &str) -> bool {
-    matches!(
-        path,
-        "/dev/null" | "/dev/zero" | "/dev/stdout" | "/dev/stderr" | "/dev/urandom"
-    )
-}
-
-fn is_device_dir(path: &str) -> bool {
-    path == "/dev" || DEVICE_DIRS.contains(&path)
-}
-
-fn device_stat(path: &str) -> VirtualStat {
-    let now = now_ms();
-    VirtualStat {
-        mode: 0o666,
-        size: 0,
-        blocks: 0,
-        dev: 2,
-        rdev: device_rdev(path),
-        is_directory: false,
-        is_symbolic_link: false,
-        atime_ms: now,
-        atime_nsec: 0,
-        mtime_ms: now,
-        mtime_nsec: 0,
-        ctime_ms: now,
-        ctime_nsec: 0,
-        birthtime_ms: now,
-        ino: device_ino(path),
-        nlink: 1,
-        uid: 0,
-        gid: 0,
-    }
-}
-
-fn device_dir_stat(path: &str) -> VirtualStat {
-    let now = now_ms();
-    VirtualStat {
-        mode: 0o755,
-        size: 0,
-        blocks: 0,
-        dev: 2,
-        rdev: 0,
-        is_directory: true,
-        is_symbolic_link: false,
-        atime_ms: now,
-        atime_nsec: 0,
-        mtime_ms: now,
-        mtime_nsec: 0,
-        ctime_ms: now,
-        ctime_nsec: 0,
-        birthtime_ms: now,
-        ino: device_ino(path),
-        nlink: 2,
-        uid: 0,
-        gid: 0,
-    }
-}
-
-fn device_ino(path: &str) -> u64 {
-    match path {
-        "/dev/null" => 0xffff_0001,
-        "/dev/zero" => 0xffff_0002,
-        "/dev/stdin" => 0xffff_0003,
-        "/dev/stdout" => 0xffff_0004,
-        "/dev/stderr" => 0xffff_0005,
-        "/dev/urandom" => 0xffff_0006,
-        _ => 0xffff_0000,
-    }
-}
-
-fn device_rdev(path: &str) -> u64 {
-    match path {
-        "/dev/null" => encode_device_id(1, 3),
-        "/dev/zero" => encode_device_id(1, 5),
-        "/dev/stdin" => encode_device_id(5, 0),
-        "/dev/stdout" => encode_device_id(5, 1),
-        "/dev/stderr" => encode_device_id(5, 2),
-        "/dev/urandom" => encode_device_id(1, 9),
-        _ => 0,
-    }
-}
-
-fn encode_device_id(major: u64, minor: u64) -> u64 {
-    (major << 8) | minor
-}
-
-fn random_bytes(length: usize) -> VfsResult<Vec<u8>> {
-    let mut buffer = vec![0; length];
-    getrandom(&mut buffer)
-        .map_err(|error| VfsError::io(format!("failed to read system random bytes: {error}")))?;
-    Ok(buffer)
-}
-
-fn read_stream_device(path: &str, length: usize) -> Option<VfsResult<Vec<u8>>> {
-    match path {
-        "/dev/null" => Some(Ok(Vec::new())),
-        "/dev/zero" => Some(Ok(vec![0; length])),
-        "/dev/urandom" => Some(random_bytes(length)),
-        _ => None,
-    }
-}
-
-fn now_ms() -> u64 {
-    SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .unwrap_or_default()
-        .as_millis() as u64
-}
diff --git a/crates/kernel/src/dns.rs b/crates/kernel/src/dns.rs
deleted file mode 100644
index d0111835b..000000000
--- a/crates/kernel/src/dns.rs
+++ /dev/null
@@ -1,679 +0,0 @@
-use hickory_proto::rr::domain::Name;
-use hickory_proto::rr::rdata::{A, AAAA};
-use hickory_proto::rr::{RData, Record, RecordType};
-#[cfg(not(target_arch = "wasm32"))]
-use hickory_resolver::config::{NameServerConfig, ResolverConfig};
-#[cfg(not(target_arch = "wasm32"))]
-use hickory_resolver::net::runtime::TokioRuntimeProvider;
-#[cfg(not(target_arch = "wasm32"))]
-use hickory_resolver::TokioResolver;
-use std::collections::{BTreeMap, BTreeSet};
-use std::error::Error;
-use std::fmt;
-use std::net::{IpAddr, SocketAddr};
-#[cfg(not(target_arch = "wasm32"))]
-use std::net::{Ipv4Addr, Ipv6Addr};
-use std::sync::Arc;
-#[cfg(not(target_arch = "wasm32"))]
-use std::sync::{mpsc, Mutex};
-
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct DnsConfig {
-    pub name_servers: Vec<SocketAddr>,
-    pub overrides: BTreeMap<String, Vec<IpAddr>>,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum DnsLookupPolicy {
-    CheckPermissions,
-    SkipPermissions,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct DnsLookupRequest {
-    hostname: String,
-    name_servers: Vec<SocketAddr>,
-}
-
-impl DnsLookupRequest {
-    pub fn new(hostname: impl Into<String>, name_servers: Vec<SocketAddr>) -> Self {
-        Self {
-            hostname: hostname.into(),
-            name_servers,
-        }
-    }
-
-    pub fn hostname(&self) -> &str {
-        &self.hostname
-    }
-
-    pub fn name_servers(&self) -> &[SocketAddr] {
-        &self.name_servers
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct DnsRecordLookupRequest {
-    hostname: String,
-    name_servers: Vec<SocketAddr>,
-    record_type: RecordType,
-}
-
-impl DnsRecordLookupRequest {
-    pub fn new(
-        hostname: impl Into<String>,
-        name_servers: Vec<SocketAddr>,
-        record_type: RecordType,
-    ) -> Self {
-        Self {
-            hostname: hostname.into(),
-            name_servers,
-            record_type,
-        }
-    }
-
-    pub fn hostname(&self) -> &str {
-        &self.hostname
-    }
-
-    pub fn name_servers(&self) -> &[SocketAddr] {
-        &self.name_servers
-    }
-
-    pub const fn record_type(&self) -> RecordType {
-        self.record_type
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum DnsResolutionSource {
-    Literal,
-    Override,
-    Resolver,
-}
-
-impl DnsResolutionSource {
-    pub const fn as_str(self) -> &'static str {
-        match self {
-            Self::Literal => "literal",
-            Self::Override => "override",
-            Self::Resolver => "resolver",
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct DnsResolution {
-    hostname: String,
-    source: DnsResolutionSource,
-    addresses: Vec<IpAddr>,
-}
-
-impl DnsResolution {
-    pub fn new(
-        hostname: impl Into<String>,
-        source: DnsResolutionSource,
-        addresses: Vec<IpAddr>,
-    ) -> Self {
-        Self {
-            hostname: hostname.into(),
-            source,
-            addresses,
-        }
-    }
-
-    pub fn hostname(&self) -> &str {
-        &self.hostname
-    }
-
-    pub const fn source(&self) -> DnsResolutionSource {
-        self.source
-    }
-
-    pub fn addresses(&self) -> &[IpAddr] {
-        &self.addresses
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct DnsRecordResolution {
-    hostname: String,
-    source: DnsResolutionSource,
-    records: Vec<Record>,
-}
-
-impl DnsRecordResolution {
-    pub fn new(
-        hostname: impl Into<String>,
-        source: DnsResolutionSource,
-        records: Vec<Record>,
-    ) -> Self {
-        Self {
-            hostname: hostname.into(),
-            source,
-            records,
-        }
-    }
-
-    pub fn hostname(&self) -> &str {
-        &self.hostname
-    }
-
-    pub const fn source(&self) -> DnsResolutionSource {
-        self.source
-    }
-
-    pub fn records(&self) -> &[Record] {
-        &self.records
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum DnsResolverErrorKind {
-    InvalidInput,
-    LookupFailed,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct DnsResolverError {
-    kind: DnsResolverErrorKind,
-    message: String,
-}
-
-impl DnsResolverError {
-    pub fn invalid_input(message: impl Into<String>) -> Self {
-        Self {
-            kind: DnsResolverErrorKind::InvalidInput,
-            message: message.into(),
-        }
-    }
-
-    pub fn lookup_failed(message: impl Into<String>) -> Self {
-        Self {
-            kind: DnsResolverErrorKind::LookupFailed,
-            message: message.into(),
-        }
-    }
-
-    pub const fn kind(&self) -> DnsResolverErrorKind {
-        self.kind
-    }
-}
-
-impl fmt::Display for DnsResolverError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}", self.message)
-    }
-}
-
-impl Error for DnsResolverError {}
-
-pub trait DnsResolver {
-    fn lookup_ip(&self, request: &DnsLookupRequest) -> Result<Vec<IpAddr>, DnsResolverError>;
-    fn lookup_records(
-        &self,
-        request: &DnsRecordLookupRequest,
-    ) -> Result<Vec<Record>, DnsResolverError>;
-}
-
-pub type SharedDnsResolver = Arc<dyn DnsResolver + Send + Sync>;
-
-#[cfg(not(target_arch = "wasm32"))]
-pub struct HickoryDnsResolver {
-    worker: Mutex<mpsc::Sender<DnsWorkerRequest>>,
-}
-
-/// On wasm the kernel has no tokio runtime or host DNS stack, so the resolver is
-/// a unit type whose `DnsResolver` impl reports that name resolution is
-/// unavailable; guests must supply DNS overrides or literal addresses.
-#[cfg(target_arch = "wasm32")]
-pub struct HickoryDnsResolver;
-
-#[cfg(not(target_arch = "wasm32"))]
-enum DnsWorkerRequest {
-    LookupIp {
-        hostname: String,
-        name_servers: Vec<SocketAddr>,
-        response: mpsc::Sender<Result<Vec<IpAddr>, DnsResolverError>>,
-    },
-    LookupRecords {
-        hostname: String,
-        name_servers: Vec<SocketAddr>,
-        record_type: RecordType,
-        response: mpsc::Sender<Result<Vec<Record>, DnsResolverError>>,
-    },
-}
-
-#[cfg(not(target_arch = "wasm32"))]
-impl Default for HickoryDnsResolver {
-    fn default() -> Self {
-        let (sender, receiver) = mpsc::channel();
-        std::thread::Builder::new()
-            .name("secure-exec-dns-resolver".to_owned())
-            .spawn(move || run_dns_worker(receiver))
-            .expect("failed to spawn DNS resolver worker");
-        Self {
-            worker: Mutex::new(sender),
-        }
-    }
-}
-
-#[cfg(target_arch = "wasm32")]
-impl Default for HickoryDnsResolver {
-    fn default() -> Self {
-        Self
-    }
-}
-
-#[cfg(not(target_arch = "wasm32"))]
-impl HickoryDnsResolver {
-    fn send_lookup_ip(
-        &self,
-        hostname: String,
-        name_servers: Vec<SocketAddr>,
-    ) -> Result<Vec<IpAddr>, DnsResolverError> {
-        let (response, receiver) = mpsc::channel();
-        self.worker
-            .lock()
-            .unwrap_or_else(|poisoned| poisoned.into_inner())
-            .send(DnsWorkerRequest::LookupIp {
-                hostname,
-                name_servers,
-                response,
-            })
-            .map_err(|_| DnsResolverError::lookup_failed("dns resolver worker stopped"))?;
-        receiver
-            .recv()
-            .map_err(|_| DnsResolverError::lookup_failed("dns resolver worker stopped"))?
-    }
-
-    fn send_lookup_records(
-        &self,
-        hostname: String,
-        name_servers: Vec<SocketAddr>,
-        record_type: RecordType,
-    ) -> Result<Vec<Record>, DnsResolverError> {
-        let (response, receiver) = mpsc::channel();
-        self.worker
-            .lock()
-            .unwrap_or_else(|poisoned| poisoned.into_inner())
-            .send(DnsWorkerRequest::LookupRecords {
-                hostname,
-                name_servers,
-                record_type,
-                response,
-            })
-            .map_err(|_| DnsResolverError::lookup_failed("dns resolver worker stopped"))?;
-        receiver
-            .recv()
-            .map_err(|_| DnsResolverError::lookup_failed("dns resolver worker stopped"))?
-    }
-}
-
-#[cfg(not(target_arch = "wasm32"))]
-impl DnsResolver for HickoryDnsResolver {
-    fn lookup_ip(&self, request: &DnsLookupRequest) -> Result<Vec<IpAddr>, DnsResolverError> {
-        self.send_lookup_ip(
-            request.hostname().to_owned(),
-            request.name_servers().to_vec(),
-        )
-    }
-
-    fn lookup_records(
-        &self,
-        request: &DnsRecordLookupRequest,
-    ) -> Result<Vec<Record>, DnsResolverError> {
-        self.send_lookup_records(
-            request.hostname().to_owned(),
-            request.name_servers().to_vec(),
-            request.record_type(),
-        )
-    }
-}
-
-#[cfg(not(target_arch = "wasm32"))]
-fn run_dns_worker(receiver: mpsc::Receiver<DnsWorkerRequest>) {
-    let runtime = match tokio::runtime::Runtime::new() {
-        Ok(runtime) => runtime,
-        Err(error) => {
-            for request in receiver {
-                request.respond_with_error(DnsResolverError::lookup_failed(format!(
-                    "failed to create DNS runtime: {error}"
-                )));
-            }
-            return;
-        }
-    };
-    let mut resolvers = BTreeMap::new();
-    for request in receiver {
-        match request {
-            DnsWorkerRequest::LookupIp {
-                hostname,
-                name_servers,
-                response,
-            } => {
-                let result = worker_lookup_ip(&runtime, &mut resolvers, hostname, name_servers);
-                let _ = response.send(result);
-            }
-            DnsWorkerRequest::LookupRecords {
-                hostname,
-                name_servers,
-                record_type,
-                response,
-            } => {
-                let result = worker_lookup_records(
-                    &runtime,
-                    &mut resolvers,
-                    hostname,
-                    name_servers,
-                    record_type,
-                );
-                let _ = response.send(result);
-            }
-        }
-    }
-}
-
-#[cfg(not(target_arch = "wasm32"))]
-impl DnsWorkerRequest {
-    fn respond_with_error(self, error: DnsResolverError) {
-        match self {
-            Self::LookupIp { response, .. } => {
-                let _ = response.send(Err(error));
-            }
-            Self::LookupRecords { response, .. } => {
-                let _ = response.send(Err(error));
-            }
-        }
-    }
-}
-
-#[cfg(not(target_arch = "wasm32"))]
-fn worker_resolver_for(
-    resolvers: &mut BTreeMap<Vec<SocketAddr>, TokioResolver>,
-    name_servers: &[SocketAddr],
-) -> Result<TokioResolver, DnsResolverError> {
-    let key = name_servers.to_vec();
-    if let Some(resolver) = resolvers.get(&key).cloned() {
-        return Ok(resolver);
-    }
-
-    let resolver_config = resolver_config_from_name_servers(name_servers);
-    let builder = if let Some(config) = resolver_config {
-        TokioResolver::builder_with_config(config, TokioRuntimeProvider::default())
-    } else {
-        TokioResolver::builder_tokio().map_err(|error| {
-            DnsResolverError::lookup_failed(format!(
-                "failed to initialize DNS resolver from system configuration: {error}"
-            ))
-        })?
-    };
-    let resolver = builder.build().map_err(|error| {
-        DnsResolverError::lookup_failed(format!("failed to build DNS resolver: {error}"))
-    })?;
-    let resolver = resolvers.entry(key).or_insert_with(|| resolver).clone();
-    Ok(resolver)
-}
-
-#[cfg(not(target_arch = "wasm32"))]
-fn worker_lookup_ip(
-    runtime: &tokio::runtime::Runtime,
-    resolvers: &mut BTreeMap<Vec<SocketAddr>, TokioResolver>,
-    hostname: String,
-    name_servers: Vec<SocketAddr>,
-) -> Result<Vec<IpAddr>, DnsResolverError> {
-    let resolver = worker_resolver_for(resolvers, &name_servers)?;
-    runtime.block_on(async move {
-        let lookup = resolver.lookup_ip(&hostname).await.map_err(|error| {
-            DnsResolverError::lookup_failed(format!(
-                "failed to resolve DNS address {hostname}: {error}"
-            ))
-        })?;
-
-        let mut addresses = Vec::new();
-        let mut seen = BTreeSet::new();
-        for ip in lookup.iter() {
-            if seen.insert(ip) {
-                addresses.push(ip);
-            }
-        }
-
-        if addresses.is_empty() {
-            return Err(DnsResolverError::lookup_failed(format!(
-                "failed to resolve DNS address {hostname}"
-            )));
-        }
-
-        Ok(addresses)
-    })
-}
-
-#[cfg(not(target_arch = "wasm32"))]
-fn worker_lookup_records(
-    runtime: &tokio::runtime::Runtime,
-    resolvers: &mut BTreeMap<Vec<SocketAddr>, TokioResolver>,
-    hostname: String,
-    name_servers: Vec<SocketAddr>,
-    record_type: RecordType,
-) -> Result<Vec<Record>, DnsResolverError> {
-    let resolver = worker_resolver_for(resolvers, &name_servers)?;
-    runtime.block_on(async move {
-        let lookup = resolver
-            .lookup(&hostname, record_type)
-            .await
-            .map_err(|error| {
-                DnsResolverError::lookup_failed(format!(
-                    "failed to resolve DNS {record_type} record {hostname}: {error}"
-                ))
-            })?;
-        let records = lookup.answers().to_vec();
-        if records.is_empty() {
-            return Err(DnsResolverError::lookup_failed(format!(
-                "failed to resolve DNS {record_type} record {hostname}"
-            )));
-        }
-        Ok(records)
-    })
-}
-
-#[cfg(target_arch = "wasm32")]
-impl DnsResolver for HickoryDnsResolver {
-    fn lookup_ip(&self, request: &DnsLookupRequest) -> Result<Vec<IpAddr>, DnsResolverError> {
-        Err(DnsResolverError::lookup_failed(format!(
-            "browser sidecar DNS resolver is unavailable for {}; configure DNS overrides or pass a literal address",
-            request.hostname()
-        )))
-    }
-
-    fn lookup_records(
-        &self,
-        request: &DnsRecordLookupRequest,
-    ) -> Result<Vec<Record>, DnsResolverError> {
-        Err(DnsResolverError::lookup_failed(format!(
-            "browser sidecar DNS record resolver is unavailable for {}; configure DNS overrides or pass a literal address",
-            request.hostname()
-        )))
-    }
-}
-
-pub fn normalize_dns_hostname(hostname: &str) -> Result<String, DnsResolverError> {
-    let normalized = hostname.trim().trim_end_matches('.').to_ascii_lowercase();
-    if normalized.is_empty() {
-        return Err(DnsResolverError::invalid_input(
-            "DNS hostname must not be empty",
-        ));
-    }
-    Ok(normalized)
-}
-
-pub fn format_dns_resource(hostname: &str) -> Result<String, DnsResolverError> {
-    Ok(format!("dns://{}", canonical_dns_subject(hostname)?))
-}
-
-pub fn resolve_dns(
-    config: &DnsConfig,
-    resolver: &dyn DnsResolver,
-    hostname: &str,
-) -> Result<DnsResolution, DnsResolverError> {
-    let trimmed = hostname.trim();
-    if let Ok(ip_addr) = trimmed.parse::<IpAddr>() {
-        return Ok(DnsResolution::new(
-            ip_addr.to_string(),
-            DnsResolutionSource::Literal,
-            vec![ip_addr],
-        ));
-    }
-
-    let normalized_hostname = normalize_dns_hostname(trimmed)?;
-    if let Some(addresses) = config.overrides.get(&normalized_hostname) {
-        return Ok(DnsResolution::new(
-            normalized_hostname,
-            DnsResolutionSource::Override,
-            addresses.clone(),
-        ));
-    }
-
-    let request = DnsLookupRequest::new(normalized_hostname.clone(), config.name_servers.clone());
-    let addresses = resolver.lookup_ip(&request)?;
-    if addresses.is_empty() {
-        return Err(DnsResolverError::lookup_failed(format!(
-            "failed to resolve DNS address {normalized_hostname}"
-        )));
-    }
-
-    Ok(DnsResolution::new(
-        normalized_hostname,
-        DnsResolutionSource::Resolver,
-        dedupe_addresses(addresses),
-    ))
-}
-
-pub fn resolve_dns_records(
-    config: &DnsConfig,
-    resolver: &dyn DnsResolver,
-    hostname: &str,
-    record_type: RecordType,
-) -> Result<DnsRecordResolution, DnsResolverError> {
-    let trimmed = hostname.trim();
-    let normalized_hostname = normalize_dns_hostname(trimmed)?;
-    let owner_name = normalized_hostname.parse::<Name>().map_err(|error| {
-        DnsResolverError::invalid_input(format!("invalid DNS hostname: {error}"))
-    })?;
-
-    if let Some(records) = records_from_literal(trimmed, owner_name.clone(), record_type) {
-        return Ok(DnsRecordResolution::new(
-            normalized_hostname,
-            DnsResolutionSource::Literal,
-            records,
-        ));
-    }
-
-    if let Some(addresses) = config.overrides.get(&normalized_hostname) {
-        let records = records_from_addresses(owner_name.clone(), addresses, record_type);
-        if !records.is_empty() {
-            return Ok(DnsRecordResolution::new(
-                normalized_hostname,
-                DnsResolutionSource::Override,
-                records,
-            ));
-        }
-    }
-
-    let request = DnsRecordLookupRequest::new(
-        normalized_hostname.clone(),
-        config.name_servers.clone(),
-        record_type,
-    );
-    let records = resolver.lookup_records(&request)?;
-    if records.is_empty() {
-        return Err(DnsResolverError::lookup_failed(format!(
-            "failed to resolve DNS {record_type} record {normalized_hostname}"
-        )));
-    }
-
-    Ok(DnsRecordResolution::new(
-        normalized_hostname,
-        DnsResolutionSource::Resolver,
-        records,
-    ))
-}
-
-fn canonical_dns_subject(hostname: &str) -> Result<String, DnsResolverError> {
-    let trimmed = hostname.trim();
-    if let Ok(ip_addr) = trimmed.parse::<IpAddr>() {
-        return Ok(ip_addr.to_string());
-    }
-
-    normalize_dns_hostname(trimmed)
-}
-
-#[cfg(not(target_arch = "wasm32"))]
-fn resolver_config_from_name_servers(name_servers: &[SocketAddr]) -> Option<ResolverConfig> {
-    if name_servers.is_empty() {
-        return None;
-    }
-
-    let name_servers = name_servers
-        .iter()
-        .map(|server| {
-            let mut config = NameServerConfig::udp_and_tcp(server.ip());
-            for connection in &mut config.connections {
-                connection.port = server.port();
-                connection.bind_addr = Some(SocketAddr::new(
-                    if server.is_ipv6() {
-                        IpAddr::V6(Ipv6Addr::UNSPECIFIED)
-                    } else {
-                        IpAddr::V4(Ipv4Addr::UNSPECIFIED)
-                    },
-                    0,
-                ));
-            }
-            config
-        })
-        .collect();
-
-    Some(ResolverConfig::from_parts(None, vec![], name_servers))
-}
-
-fn dedupe_addresses(addresses: Vec<IpAddr>) -> Vec<IpAddr> {
-    let mut deduped = Vec::with_capacity(addresses.len());
-    let mut seen = BTreeSet::new();
-    for address in addresses {
-        if seen.insert(address) {
-            deduped.push(address);
-        }
-    }
-    deduped
-}
-
-fn records_from_literal(
-    hostname: &str,
-    owner_name: Name,
-    record_type: RecordType,
-) -> Option<Vec<Record>> {
-    let ip_addr = hostname.parse::<IpAddr>().ok()?;
-    let records = records_from_addresses(owner_name, &[ip_addr], record_type);
-    if records.is_empty() {
-        return None;
-    }
-    Some(records)
-}
-
-fn records_from_addresses(
-    owner_name: Name,
-    addresses: &[IpAddr],
-    record_type: RecordType,
-) -> Vec<Record> {
-    addresses
-        .iter()
-        .filter_map(|ip| match (record_type, ip) {
-            (RecordType::A, IpAddr::V4(ipv4)) | (RecordType::ANY, IpAddr::V4(ipv4)) => Some(
-                Record::from_rdata(owner_name.clone(), 60, RData::A(A::from(*ipv4))),
-            ),
-            (RecordType::AAAA, IpAddr::V6(ipv6)) | (RecordType::ANY, IpAddr::V6(ipv6)) => Some(
-                Record::from_rdata(owner_name.clone(), 60, RData::AAAA(AAAA::from(*ipv6))),
-            ),
-            _ => None,
-        })
-        .collect()
-}
diff --git a/crates/kernel/src/fd_table.rs b/crates/kernel/src/fd_table.rs
deleted file mode 100644
index 3e57be8ec..000000000
--- a/crates/kernel/src/fd_table.rs
+++ /dev/null
@@ -1,994 +0,0 @@
-use std::collections::{btree_map::Values, BTreeMap, BTreeSet};
-use std::error::Error;
-use std::fmt;
-use std::sync::atomic::{AtomicU32, AtomicU64, AtomicUsize, Ordering};
-use std::sync::{Arc, Condvar, Mutex, MutexGuard};
-
-pub const MAX_FDS_PER_PROCESS: usize = 256;
-
-pub const O_RDONLY: u32 = 0;
-pub const O_WRONLY: u32 = 1;
-pub const O_RDWR: u32 = 2;
-pub const O_CREAT: u32 = 0o100;
-pub const O_EXCL: u32 = 0o200;
-pub const O_TRUNC: u32 = 0o1000;
-pub const O_APPEND: u32 = 0o2000;
-pub const O_NONBLOCK: u32 = 0o4000;
-pub const F_DUPFD: u32 = 0;
-pub const F_GETFD: u32 = 1;
-pub const F_SETFD: u32 = 2;
-pub const F_GETFL: u32 = 3;
-pub const F_SETFL: u32 = 4;
-pub const FD_CLOEXEC: u32 = 1;
-pub const LOCK_SH: u32 = 1;
-pub const LOCK_EX: u32 = 2;
-pub const LOCK_NB: u32 = 4;
-pub const LOCK_UN: u32 = 8;
-
-pub const FILETYPE_UNKNOWN: u8 = 0;
-pub const FILETYPE_CHARACTER_DEVICE: u8 = 2;
-pub const FILETYPE_DIRECTORY: u8 = 3;
-pub const FILETYPE_REGULAR_FILE: u8 = 4;
-pub const FILETYPE_PIPE: u8 = 6;
-pub const FILETYPE_SYMBOLIC_LINK: u8 = 7;
-
-pub type FdResult<T> = Result<T, FdTableError>;
-pub type SharedFileDescription = Arc<FileDescription>;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct FdTableError {
-    code: &'static str,
-    message: String,
-}
-
-impl FdTableError {
-    pub fn code(&self) -> &'static str {
-        self.code
-    }
-
-    fn bad_file_descriptor(fd: u32) -> Self {
-        Self {
-            code: "EBADF",
-            message: format!("bad file descriptor {fd}"),
-        }
-    }
-
-    fn too_many_open_files() -> Self {
-        Self {
-            code: "EMFILE",
-            message: String::from("too many open files"),
-        }
-    }
-
-    fn invalid_argument(message: impl Into<String>) -> Self {
-        Self {
-            code: "EINVAL",
-            message: message.into(),
-        }
-    }
-
-    fn would_block(message: impl Into<String>) -> Self {
-        Self {
-            code: "EWOULDBLOCK",
-            message: message.into(),
-        }
-    }
-}
-
-impl fmt::Display for FdTableError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}: {}", self.code, self.message)
-    }
-}
-
-impl Error for FdTableError {}
-
-#[derive(Debug)]
-pub struct FileDescription {
-    id: u64,
-    path: String,
-    lock_target: Option<FileLockTarget>,
-    cursor: AtomicU64,
-    flags: AtomicU32,
-    ref_count: AtomicUsize,
-}
-
-impl FileDescription {
-    pub fn new(id: u64, path: impl Into<String>, flags: u32) -> Self {
-        Self::with_ref_count_and_lock(id, path, flags, 1, None)
-    }
-
-    pub fn new_with_lock(
-        id: u64,
-        path: impl Into<String>,
-        flags: u32,
-        lock_target: Option<FileLockTarget>,
-    ) -> Self {
-        Self::with_ref_count_and_lock(id, path, flags, 1, lock_target)
-    }
-
-    pub fn with_ref_count(id: u64, path: impl Into<String>, flags: u32, ref_count: usize) -> Self {
-        Self::with_ref_count_and_lock(id, path, flags, ref_count, None)
-    }
-
-    pub fn with_ref_count_and_lock(
-        id: u64,
-        path: impl Into<String>,
-        flags: u32,
-        ref_count: usize,
-        lock_target: Option<FileLockTarget>,
-    ) -> Self {
-        Self {
-            id,
-            path: path.into(),
-            lock_target,
-            cursor: AtomicU64::new(0),
-            flags: AtomicU32::new(flags),
-            ref_count: AtomicUsize::new(ref_count),
-        }
-    }
-
-    pub fn id(&self) -> u64 {
-        self.id
-    }
-
-    pub fn path(&self) -> &str {
-        &self.path
-    }
-
-    pub fn lock_target(&self) -> Option<FileLockTarget> {
-        self.lock_target
-    }
-
-    pub fn cursor(&self) -> u64 {
-        self.cursor.load(Ordering::SeqCst)
-    }
-
-    pub fn set_cursor(&self, cursor: u64) {
-        self.cursor.store(cursor, Ordering::SeqCst);
-    }
-
-    pub fn flags(&self) -> u32 {
-        self.flags.load(Ordering::SeqCst)
-    }
-
-    pub fn update_flags(&self, mask: u32, flags: u32) -> u32 {
-        let mut current = self.flags();
-        loop {
-            let next = (current & !mask) | (flags & mask);
-            match self
-                .flags
-                .compare_exchange(current, next, Ordering::SeqCst, Ordering::SeqCst)
-            {
-                Ok(_) => return next,
-                Err(observed) => current = observed,
-            }
-        }
-    }
-
-    pub fn ref_count(&self) -> usize {
-        self.ref_count.load(Ordering::SeqCst)
-    }
-
-    pub fn increment_ref_count(&self) -> usize {
-        self.ref_count.fetch_add(1, Ordering::SeqCst) + 1
-    }
-
-    pub fn decrement_ref_count(&self) -> usize {
-        let mut current = self.ref_count.load(Ordering::SeqCst);
-        loop {
-            let next = current.saturating_sub(1);
-            match self
-                .ref_count
-                .compare_exchange(current, next, Ordering::SeqCst, Ordering::SeqCst)
-            {
-                Ok(_) => return next,
-                Err(observed) => current = observed,
-            }
-        }
-    }
-}
-
-#[derive(Debug, Clone)]
-pub struct FdEntry {
-    pub fd: u32,
-    pub description: SharedFileDescription,
-    pub status_flags: u32,
-    pub fd_flags: u32,
-    pub rights: u64,
-    pub filetype: u8,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct FdStat {
-    pub filetype: u8,
-    pub flags: u32,
-    pub rights: u64,
-}
-
-#[derive(Debug, Clone)]
-pub struct StdioOverride {
-    pub description: SharedFileDescription,
-    pub filetype: u8,
-}
-
-#[derive(Debug, Clone)]
-struct DescriptionFactory {
-    next_description_id: Arc<AtomicU64>,
-}
-
-impl DescriptionFactory {
-    fn new(starting_id: u64) -> Self {
-        Self {
-            next_description_id: Arc::new(AtomicU64::new(starting_id)),
-        }
-    }
-
-    fn allocate(&self, path: &str, flags: u32) -> SharedFileDescription {
-        self.allocate_with_lock(path, flags, None)
-    }
-
-    fn allocate_with_lock(
-        &self,
-        path: &str,
-        flags: u32,
-        lock_target: Option<FileLockTarget>,
-    ) -> SharedFileDescription {
-        let next_id = self.next_description_id.fetch_add(1, Ordering::SeqCst);
-        Arc::new(FileDescription::new_with_lock(
-            next_id,
-            path,
-            flags,
-            lock_target,
-        ))
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord)]
-pub struct FileLockTarget {
-    ino: u64,
-}
-
-impl FileLockTarget {
-    pub const fn new(ino: u64) -> Self {
-        Self { ino }
-    }
-
-    pub const fn ino(self) -> u64 {
-        self.ino
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum FileLockMode {
-    Shared,
-    Exclusive,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum FlockOperation {
-    Shared { nonblocking: bool },
-    Exclusive { nonblocking: bool },
-    Unlock,
-}
-
-impl FlockOperation {
-    pub fn from_bits(operation: u32) -> FdResult<Self> {
-        let nonblocking = operation & LOCK_NB != 0;
-        match operation & !LOCK_NB {
-            LOCK_SH => Ok(Self::Shared { nonblocking }),
-            LOCK_EX => Ok(Self::Exclusive { nonblocking }),
-            LOCK_UN => Ok(Self::Unlock),
-            _ => Err(FdTableError::invalid_argument(format!(
-                "invalid flock operation {operation:#x}"
-            ))),
-        }
-    }
-}
-
-#[derive(Debug, Clone)]
-pub struct ProcessFdTable {
-    entries: BTreeMap<u32, FdEntry>,
-    next_fd: u32,
-    alloc_desc: DescriptionFactory,
-    max_fds: usize,
-}
-
-impl ProcessFdTable {
-    fn new(alloc_desc: DescriptionFactory, max_fds: usize) -> Self {
-        Self {
-            entries: BTreeMap::new(),
-            next_fd: 3,
-            alloc_desc,
-            max_fds,
-        }
-    }
-
-    pub fn max_fds(&self) -> usize {
-        self.max_fds
-    }
-
-    pub fn init_stdio(
-        &mut self,
-        stdin_desc: SharedFileDescription,
-        stdout_desc: SharedFileDescription,
-        stderr_desc: SharedFileDescription,
-    ) {
-        self.entries.insert(
-            0,
-            FdEntry {
-                fd: 0,
-                description: stdin_desc,
-                status_flags: 0,
-                fd_flags: 0,
-                rights: 0,
-                filetype: FILETYPE_CHARACTER_DEVICE,
-            },
-        );
-        self.entries.insert(
-            1,
-            FdEntry {
-                fd: 1,
-                description: stdout_desc,
-                status_flags: 0,
-                fd_flags: 0,
-                rights: 0,
-                filetype: FILETYPE_CHARACTER_DEVICE,
-            },
-        );
-        self.entries.insert(
-            2,
-            FdEntry {
-                fd: 2,
-                description: stderr_desc,
-                status_flags: 0,
-                fd_flags: 0,
-                rights: 0,
-                filetype: FILETYPE_CHARACTER_DEVICE,
-            },
-        );
-    }
-
-    pub fn init_stdio_with_types(
-        &mut self,
-        stdin_desc: SharedFileDescription,
-        stdin_type: u8,
-        stdout_desc: SharedFileDescription,
-        stdout_type: u8,
-        stderr_desc: SharedFileDescription,
-        stderr_type: u8,
-    ) {
-        stdin_desc.increment_ref_count();
-        stdout_desc.increment_ref_count();
-        stderr_desc.increment_ref_count();
-        self.entries.insert(
-            0,
-            FdEntry {
-                fd: 0,
-                description: stdin_desc,
-                status_flags: 0,
-                fd_flags: 0,
-                rights: 0,
-                filetype: stdin_type,
-            },
-        );
-        self.entries.insert(
-            1,
-            FdEntry {
-                fd: 1,
-                description: stdout_desc,
-                status_flags: 0,
-                fd_flags: 0,
-                rights: 0,
-                filetype: stdout_type,
-            },
-        );
-        self.entries.insert(
-            2,
-            FdEntry {
-                fd: 2,
-                description: stderr_desc,
-                status_flags: 0,
-                fd_flags: 0,
-                rights: 0,
-                filetype: stderr_type,
-            },
-        );
-    }
-
-    pub fn open(&mut self, path: &str, flags: u32) -> FdResult<u32> {
-        self.open_with_details(path, flags, FILETYPE_REGULAR_FILE, None)
-    }
-
-    pub fn open_with_filetype(&mut self, path: &str, flags: u32, filetype: u8) -> FdResult<u32> {
-        self.open_with_details(path, flags, filetype, None)
-    }
-
-    pub fn open_with_details(
-        &mut self,
-        path: &str,
-        flags: u32,
-        filetype: u8,
-        lock_target: Option<FileLockTarget>,
-    ) -> FdResult<u32> {
-        let fd = self.allocate_fd()?;
-        let description =
-            self.alloc_desc
-                .allocate_with_lock(path, description_flags(flags), lock_target);
-        self.entries.insert(
-            fd,
-            FdEntry {
-                fd,
-                description,
-                status_flags: status_flags(flags),
-                fd_flags: 0,
-                rights: 0,
-                filetype,
-            },
-        );
-        Ok(fd)
-    }
-
-    pub fn open_with(
-        &mut self,
-        description: SharedFileDescription,
-        filetype: u8,
-        target_fd: Option<u32>,
-    ) -> FdResult<u32> {
-        let fd = match target_fd {
-            Some(fd) => {
-                self.validate_fd_bounds(fd)?;
-                if self.entries.contains_key(&fd) {
-                    self.close(fd);
-                }
-                fd
-            }
-            None => self.allocate_fd()?,
-        };
-        description.increment_ref_count();
-        self.entries.insert(
-            fd,
-            FdEntry {
-                fd,
-                description,
-                status_flags: 0,
-                fd_flags: 0,
-                rights: 0,
-                filetype,
-            },
-        );
-        Ok(fd)
-    }
-
-    pub fn get(&self, fd: u32) -> Option<&FdEntry> {
-        self.entries.get(&fd)
-    }
-
-    pub fn close(&mut self, fd: u32) -> bool {
-        let Some(entry) = self.entries.remove(&fd) else {
-            return false;
-        };
-        entry.description.decrement_ref_count();
-        true
-    }
-
-    pub fn dup(&mut self, fd: u32) -> FdResult<u32> {
-        self.dup_with_status_flags(fd, None)
-    }
-
-    pub fn dup_with_status_flags(
-        &mut self,
-        fd: u32,
-        status_flags_override: Option<u32>,
-    ) -> FdResult<u32> {
-        let entry = self
-            .entries
-            .get(&fd)
-            .cloned()
-            .ok_or_else(|| FdTableError::bad_file_descriptor(fd))?;
-        let new_fd = self.allocate_fd()?;
-        self.duplicate_entry(
-            &entry,
-            new_fd,
-            status_flags_override.unwrap_or(entry.status_flags),
-            0,
-        )
-    }
-
-    pub fn dup2(&mut self, old_fd: u32, new_fd: u32) -> FdResult<()> {
-        let entry = self
-            .entries
-            .get(&old_fd)
-            .cloned()
-            .ok_or_else(|| FdTableError::bad_file_descriptor(old_fd))?;
-        self.validate_fd_bounds(new_fd)?;
-        if old_fd == new_fd {
-            return Ok(());
-        }
-
-        if self.entries.contains_key(&new_fd) {
-            self.close(new_fd);
-        }
-
-        self.duplicate_entry(&entry, new_fd, entry.status_flags, 0)?;
-        Ok(())
-    }
-
-    pub fn stat(&self, fd: u32) -> FdResult<FdStat> {
-        let entry = self
-            .entries
-            .get(&fd)
-            .ok_or_else(|| FdTableError::bad_file_descriptor(fd))?;
-        Ok(FdStat {
-            filetype: entry.filetype,
-            flags: visible_fd_flags(entry.description.flags(), entry.status_flags),
-            rights: entry.rights,
-        })
-    }
-
-    pub fn fcntl(&mut self, fd: u32, command: u32, arg: u32) -> FdResult<u32> {
-        match command {
-            F_DUPFD => {
-                let entry = self
-                    .entries
-                    .get(&fd)
-                    .cloned()
-                    .ok_or_else(|| FdTableError::bad_file_descriptor(fd))?;
-                let min_fd = self.validate_fcntl_dup_min(arg)?;
-                let new_fd = self.allocate_fd_from(min_fd)?;
-                self.duplicate_entry(&entry, new_fd, entry.status_flags, 0)
-            }
-            F_GETFD => {
-                let entry = self
-                    .entries
-                    .get(&fd)
-                    .ok_or_else(|| FdTableError::bad_file_descriptor(fd))?;
-                Ok(entry.fd_flags & FD_CLOEXEC)
-            }
-            F_SETFD => {
-                let entry = self
-                    .entries
-                    .get_mut(&fd)
-                    .ok_or_else(|| FdTableError::bad_file_descriptor(fd))?;
-                entry.fd_flags = arg & FD_CLOEXEC;
-                Ok(0)
-            }
-            F_GETFL => {
-                let entry = self
-                    .entries
-                    .get(&fd)
-                    .ok_or_else(|| FdTableError::bad_file_descriptor(fd))?;
-                Ok(visible_fd_flags(
-                    entry.description.flags(),
-                    entry.status_flags,
-                ))
-            }
-            F_SETFL => {
-                let entry = self
-                    .entries
-                    .get_mut(&fd)
-                    .ok_or_else(|| FdTableError::bad_file_descriptor(fd))?;
-                entry.status_flags = arg & ENTRY_STATUS_FLAG_MASK;
-                entry.description.update_flags(SHARED_STATUS_FLAG_MASK, arg);
-                Ok(0)
-            }
-            _ => Err(FdTableError::invalid_argument(format!(
-                "unsupported fcntl command {command}"
-            ))),
-        }
-    }
-
-    pub fn fork(&self) -> Self {
-        let mut child = Self::new(self.alloc_desc.clone(), self.max_fds);
-        child.next_fd = self.next_fd;
-
-        for (fd, entry) in &self.entries {
-            entry.description.increment_ref_count();
-            child.entries.insert(
-                *fd,
-                FdEntry {
-                    fd: *fd,
-                    description: Arc::clone(&entry.description),
-                    status_flags: entry.status_flags,
-                    fd_flags: entry.fd_flags,
-                    rights: entry.rights,
-                    filetype: entry.filetype,
-                },
-            );
-        }
-
-        child
-    }
-
-    pub fn close_all(&mut self) {
-        let fds: Vec<u32> = self.entries.keys().copied().collect();
-        for fd in fds {
-            self.close(fd);
-        }
-    }
-
-    pub fn len(&self) -> usize {
-        self.entries.len()
-    }
-
-    pub fn is_empty(&self) -> bool {
-        self.entries.is_empty()
-    }
-
-    pub fn iter(&self) -> Values<'_, u32, FdEntry> {
-        self.entries.values()
-    }
-
-    fn allocate_fd(&mut self) -> FdResult<u32> {
-        if self.entries.len() >= self.max_fds {
-            return Err(FdTableError::too_many_open_files());
-        }
-
-        let start = usize::try_from(self.next_fd).unwrap_or(0) % self.max_fds;
-        for offset in 0..self.max_fds {
-            let candidate = ((start + offset) % self.max_fds) as u32;
-            if !self.entries.contains_key(&candidate) {
-                self.next_fd = candidate.saturating_add(1);
-                return Ok(candidate);
-            }
-        }
-
-        Err(FdTableError::too_many_open_files())
-    }
-
-    fn allocate_fd_from(&mut self, min_fd: u32) -> FdResult<u32> {
-        if self.entries.len() >= self.max_fds {
-            return Err(FdTableError::too_many_open_files());
-        }
-
-        if min_fd as usize >= self.max_fds {
-            return Err(FdTableError::invalid_argument(format!(
-                "fd {min_fd} exceeds process fd limit"
-            )));
-        }
-
-        for candidate in min_fd..self.max_fds as u32 {
-            if !self.entries.contains_key(&candidate) {
-                self.next_fd = candidate.saturating_add(1);
-                return Ok(candidate);
-            }
-        }
-
-        Err(FdTableError::too_many_open_files())
-    }
-
-    fn duplicate_entry(
-        &mut self,
-        entry: &FdEntry,
-        new_fd: u32,
-        status_flags: u32,
-        fd_flags: u32,
-    ) -> FdResult<u32> {
-        entry.description.increment_ref_count();
-        self.entries.insert(
-            new_fd,
-            FdEntry {
-                fd: new_fd,
-                description: Arc::clone(&entry.description),
-                status_flags,
-                fd_flags,
-                rights: entry.rights,
-                filetype: entry.filetype,
-            },
-        );
-        Ok(new_fd)
-    }
-
-    fn validate_fd_bounds(&self, fd: u32) -> FdResult<()> {
-        if fd as usize >= self.max_fds {
-            return Err(FdTableError::bad_file_descriptor(fd));
-        }
-        Ok(())
-    }
-
-    fn validate_fcntl_dup_min(&self, min_fd: u32) -> FdResult<u32> {
-        if min_fd as usize >= self.max_fds {
-            return Err(FdTableError::invalid_argument(format!(
-                "fd {min_fd} exceeds process fd limit"
-            )));
-        }
-        Ok(min_fd)
-    }
-}
-
-fn description_flags(flags: u32) -> u32 {
-    flags & !status_flags(flags)
-}
-
-fn status_flags(flags: u32) -> u32 {
-    flags & ENTRY_STATUS_FLAG_MASK
-}
-
-fn visible_fd_flags(description_flags: u32, entry_status_flags: u32) -> u32 {
-    (description_flags & (0b11 | SHARED_STATUS_FLAG_MASK))
-        | (entry_status_flags & ENTRY_STATUS_FLAG_MASK)
-}
-
-const SHARED_STATUS_FLAG_MASK: u32 = O_APPEND;
-const ENTRY_STATUS_FLAG_MASK: u32 = O_NONBLOCK;
-
-impl<'a> IntoIterator for &'a ProcessFdTable {
-    type Item = &'a FdEntry;
-    type IntoIter = Values<'a, u32, FdEntry>;
-
-    fn into_iter(self) -> Self::IntoIter {
-        self.entries.values()
-    }
-}
-
-#[derive(Debug, Clone)]
-pub struct FdTableManager {
-    tables: BTreeMap<u32, ProcessFdTable>,
-    alloc_desc: DescriptionFactory,
-    max_fds: usize,
-}
-
-impl Default for FdTableManager {
-    fn default() -> Self {
-        Self {
-            tables: BTreeMap::new(),
-            alloc_desc: DescriptionFactory::new(1),
-            max_fds: MAX_FDS_PER_PROCESS,
-        }
-    }
-}
-
-impl FdTableManager {
-    pub fn new() -> Self {
-        Self::default()
-    }
-
-    pub fn with_max_fds(max_fds: usize) -> Self {
-        Self {
-            max_fds,
-            ..Self::default()
-        }
-    }
-
-    pub fn create(&mut self, pid: u32) -> &mut ProcessFdTable {
-        let mut table = ProcessFdTable::new(self.alloc_desc.clone(), self.max_fds);
-        table.init_stdio(
-            self.alloc_desc.allocate("/dev/stdin", O_RDONLY),
-            self.alloc_desc.allocate("/dev/stdout", O_WRONLY),
-            self.alloc_desc.allocate("/dev/stderr", O_WRONLY),
-        );
-        self.remove(pid);
-        self.tables.insert(pid, table);
-        self.tables
-            .get_mut(&pid)
-            .expect("newly created FD table should be stored")
-    }
-
-    pub fn create_with_stdio(
-        &mut self,
-        pid: u32,
-        stdin_override: Option<StdioOverride>,
-        stdout_override: Option<StdioOverride>,
-        stderr_override: Option<StdioOverride>,
-    ) -> &mut ProcessFdTable {
-        let mut table = ProcessFdTable::new(self.alloc_desc.clone(), self.max_fds);
-        let stdin_desc = stdin_override
-            .as_ref()
-            .map(|entry| Arc::clone(&entry.description))
-            .unwrap_or_else(|| self.alloc_desc.allocate("/dev/stdin", O_RDONLY));
-        let stdout_desc = stdout_override
-            .as_ref()
-            .map(|entry| Arc::clone(&entry.description))
-            .unwrap_or_else(|| self.alloc_desc.allocate("/dev/stdout", O_WRONLY));
-        let stderr_desc = stderr_override
-            .as_ref()
-            .map(|entry| Arc::clone(&entry.description))
-            .unwrap_or_else(|| self.alloc_desc.allocate("/dev/stderr", O_WRONLY));
-
-        table.init_stdio_with_types(
-            stdin_desc,
-            stdin_override
-                .as_ref()
-                .map(|entry| entry.filetype)
-                .unwrap_or(FILETYPE_CHARACTER_DEVICE),
-            stdout_desc,
-            stdout_override
-                .as_ref()
-                .map(|entry| entry.filetype)
-                .unwrap_or(FILETYPE_CHARACTER_DEVICE),
-            stderr_desc,
-            stderr_override
-                .as_ref()
-                .map(|entry| entry.filetype)
-                .unwrap_or(FILETYPE_CHARACTER_DEVICE),
-        );
-        self.remove(pid);
-        self.tables.insert(pid, table);
-        self.tables
-            .get_mut(&pid)
-            .expect("newly created FD table should be stored")
-    }
-
-    pub fn fork(&mut self, parent_pid: u32, child_pid: u32) -> &mut ProcessFdTable {
-        if !self.tables.contains_key(&parent_pid) {
-            return self.create(child_pid);
-        }
-
-        let child = self
-            .tables
-            .get(&parent_pid)
-            .expect("parent table presence was checked")
-            .fork();
-        self.remove(child_pid);
-        self.tables.insert(child_pid, child);
-        self.tables
-            .get_mut(&child_pid)
-            .expect("forked FD table should be stored")
-    }
-
-    pub fn get(&self, pid: u32) -> Option<&ProcessFdTable> {
-        self.tables.get(&pid)
-    }
-
-    pub fn get_mut(&mut self, pid: u32) -> Option<&mut ProcessFdTable> {
-        self.tables.get_mut(&pid)
-    }
-
-    pub fn has(&self, pid: u32) -> bool {
-        self.tables.contains_key(&pid)
-    }
-
-    pub fn len(&self) -> usize {
-        self.tables.len()
-    }
-
-    pub fn is_empty(&self) -> bool {
-        self.tables.is_empty()
-    }
-
-    pub fn total_open_fds(&self) -> usize {
-        self.tables.values().map(ProcessFdTable::len).sum()
-    }
-
-    pub fn pids(&self) -> Vec<u32> {
-        self.tables.keys().copied().collect()
-    }
-
-    pub fn remove(&mut self, pid: u32) {
-        if let Some(mut table) = self.tables.remove(&pid) {
-            table.close_all();
-        }
-    }
-}
-
-#[derive(Debug, Clone, Default)]
-pub struct FileLockManager {
-    inner: Arc<FileLockManagerInner>,
-}
-
-#[derive(Debug, Default)]
-struct FileLockManagerInner {
-    state: Mutex<FileLockState>,
-    wake: Condvar,
-}
-
-#[derive(Debug, Default)]
-struct FileLockState {
-    entries: BTreeMap<FileLockTarget, FileLockEntry>,
-}
-
-#[derive(Debug, Default)]
-struct FileLockEntry {
-    shared: BTreeSet<u64>,
-    exclusive: Option<u64>,
-}
-
-impl FileLockManager {
-    pub fn new() -> Self {
-        Self::default()
-    }
-
-    pub fn apply(
-        &self,
-        owner_id: u64,
-        target: FileLockTarget,
-        operation: FlockOperation,
-    ) -> FdResult<()> {
-        match operation {
-            FlockOperation::Shared { nonblocking } => {
-                self.acquire(owner_id, target, FileLockMode::Shared, nonblocking)
-            }
-            FlockOperation::Exclusive { nonblocking } => {
-                self.acquire(owner_id, target, FileLockMode::Exclusive, nonblocking)
-            }
-            FlockOperation::Unlock => {
-                self.release_owner(owner_id);
-                Ok(())
-            }
-        }
-    }
-
-    pub fn release_owner(&self, owner_id: u64) -> bool {
-        let mut state = lock_or_recover(&self.inner.state);
-        let mut released = false;
-        state.entries.retain(|_, entry| {
-            let entry_changed = entry.shared.remove(&owner_id) || entry.exclusive == Some(owner_id);
-            if entry.exclusive == Some(owner_id) {
-                entry.exclusive = None;
-            }
-            released |= entry_changed;
-            !entry.is_empty()
-        });
-        drop(state);
-        if released {
-            self.inner.wake.notify_all();
-        }
-        released
-    }
-
-    fn acquire(
-        &self,
-        owner_id: u64,
-        target: FileLockTarget,
-        mode: FileLockMode,
-        nonblocking: bool,
-    ) -> FdResult<()> {
-        let mut state = lock_or_recover(&self.inner.state);
-        loop {
-            let entry = state.entries.entry(target).or_default();
-            if entry.can_grant(owner_id, mode) {
-                entry.grant(owner_id, mode);
-                return Ok(());
-            }
-
-            if nonblocking {
-                return Err(FdTableError::would_block(
-                    "advisory file lock is unavailable",
-                ));
-            }
-
-            state = wait_or_recover(&self.inner.wake, state);
-        }
-    }
-}
-
-impl FileLockEntry {
-    fn can_grant(&self, owner_id: u64, mode: FileLockMode) -> bool {
-        match mode {
-            FileLockMode::Shared => self.exclusive.is_none_or(|owner| owner == owner_id),
-            FileLockMode::Exclusive => {
-                self.exclusive.is_none_or(|owner| owner == owner_id)
-                    && self.shared.iter().all(|owner| *owner == owner_id)
-            }
-        }
-    }
-
-    fn grant(&mut self, owner_id: u64, mode: FileLockMode) {
-        match mode {
-            FileLockMode::Shared => {
-                self.exclusive = None;
-                self.shared.insert(owner_id);
-            }
-            FileLockMode::Exclusive => {
-                self.shared.retain(|owner| *owner != owner_id);
-                self.exclusive = Some(owner_id);
-            }
-        }
-    }
-
-    fn is_empty(&self) -> bool {
-        self.exclusive.is_none() && self.shared.is_empty()
-    }
-}
-
-fn lock_or_recover<T>(mutex: &Mutex<T>) -> MutexGuard<'_, T> {
-    mutex
-        .lock()
-        .unwrap_or_else(|poisoned| poisoned.into_inner())
-}
-
-fn wait_or_recover<'a, T>(condvar: &Condvar, guard: MutexGuard<'a, T>) -> MutexGuard<'a, T> {
-    condvar
-        .wait(guard)
-        .unwrap_or_else(|poisoned| poisoned.into_inner())
-}
diff --git a/crates/kernel/src/kernel.rs b/crates/kernel/src/kernel.rs
deleted file mode 100644
index abb5ab248..000000000
--- a/crates/kernel/src/kernel.rs
+++ /dev/null
@@ -1,5626 +0,0 @@
-use crate::bridge::LifecycleState;
-use crate::command_registry::{CommandDriver, CommandRegistry};
-use crate::device_layer::{create_device_layer, DeviceLayer};
-use crate::dns::{
-    format_dns_resource, resolve_dns, resolve_dns_records, DnsConfig, DnsLookupPolicy,
-    DnsRecordResolution, DnsResolution, DnsResolverErrorKind, HickoryDnsResolver,
-    SharedDnsResolver,
-};
-use crate::fd_table::{
-    FdEntry, FdStat, FdTableError, FdTableManager, FileDescription, FileLockManager,
-    FileLockTarget, FlockOperation, ProcessFdTable, FILETYPE_CHARACTER_DEVICE, FILETYPE_DIRECTORY,
-    FILETYPE_PIPE, FILETYPE_REGULAR_FILE, FILETYPE_SYMBOLIC_LINK, F_DUPFD, O_APPEND, O_CREAT,
-    O_EXCL, O_NONBLOCK, O_TRUNC,
-};
-use crate::mount_table::{MountEntry, MountOptions, MountTable, MountedFileSystem};
-use crate::network_policy::format_tcp_resource;
-use crate::permissions::{
-    check_command_execution, check_network_access, FsOperation, NetworkOperation, PermissionError,
-    PermissionedFileSystem, Permissions,
-};
-use crate::pipe_manager::{PipeError, PipeManager};
-use crate::poll::{
-    PollEvents, PollFd, PollNotifier, PollResult, PollTarget, PollTargetEntry, PollTargetResult,
-    POLLERR, POLLHUP, POLLIN, POLLNVAL, POLLOUT,
-};
-use crate::process_table::{
-    DriverProcess, ProcessContext, ProcessExitCallback, ProcessInfo, ProcessStatus, ProcessTable,
-    ProcessTableError, ProcessWaitResult, SigmaskHow, SignalSet, DEFAULT_PROCESS_UMASK, SIGCONT,
-    SIGPIPE, SIGSTOP, SIGTSTP, SIGWINCH,
-};
-use crate::pty::{
-    LineDisciplineConfig, PartialTermios, PtyError, PtyManager, PtyWindowSize, Termios,
-};
-use crate::resource_accounting::{
-    measure_filesystem_usage, FileSystemUsage, ResourceAccountant, ResourceError, ResourceLimits,
-    ResourceSnapshot, DEFAULT_MAX_OPEN_FDS,
-};
-use crate::root_fs::{RootFileSystem, RootFilesystemError, RootFilesystemSnapshot};
-use crate::socket_table::{
-    DatagramSocketOption, InetSocketAddress, ReceivedDatagram, SocketId, SocketMulticastMembership,
-    SocketReadiness, SocketRecord, SocketShutdown, SocketSpec, SocketState, SocketTable,
-    SocketTableError, SocketType,
-};
-use crate::user::{ProcessIdentity, UserConfig, UserManager};
-use crate::vfs::{
-    normalize_path, VfsError, VfsResult, VirtualDirEntry, VirtualFileSystem, VirtualStat,
-    VirtualTimeSpec, VirtualUtimeSpec,
-};
-use hickory_proto::rr::RecordType;
-use std::any::Any;
-use std::collections::{BTreeMap, BTreeSet, VecDeque};
-use std::error::Error;
-use std::fmt;
-#[cfg(test)]
-use std::sync::OnceLock;
-use std::sync::{Arc, Condvar, Mutex, MutexGuard, WaitTimeoutResult};
-use std::time::Duration;
-use web_time::{Instant, SystemTime, UNIX_EPOCH};
-
-pub type KernelResult<T> = Result<T, KernelError>;
-pub use crate::process_table::{ProcessWaitEvent as WaitPidEvent, WaitPidFlags};
-
-pub const SEEK_SET: u8 = 0;
-pub const SEEK_CUR: u8 = 1;
-pub const SEEK_END: u8 = 2;
-const EXECUTABLE_PERMISSION_BITS: u32 = 0o111;
-const SHEBANG_LINE_MAX_BYTES: usize = 256;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct KernelError {
-    code: &'static str,
-    message: String,
-}
-
-impl KernelError {
-    pub fn code(&self) -> &'static str {
-        self.code
-    }
-
-    fn new(code: &'static str, message: impl Into<String>) -> Self {
-        Self {
-            code,
-            message: message.into(),
-        }
-    }
-
-    fn disposed() -> Self {
-        Self::new("EINVAL", "kernel VM is disposed")
-    }
-
-    fn no_such_process(pid: u32) -> Self {
-        Self::new("ESRCH", format!("no such process {pid}"))
-    }
-
-    fn bad_file_descriptor(fd: u32) -> Self {
-        Self::new("EBADF", format!("bad file descriptor {fd}"))
-    }
-
-    fn permission_denied(message: impl Into<String>) -> Self {
-        Self::new("EPERM", message)
-    }
-
-    fn command_not_found(command: &str) -> Self {
-        Self::new("ENOENT", format!("command not found: {command}"))
-    }
-}
-
-impl fmt::Display for KernelError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}: {}", self.code, self.message)
-    }
-}
-
-impl Error for KernelError {}
-
-#[derive(Clone)]
-pub struct KernelVmConfig {
-    pub vm_id: String,
-    pub env: BTreeMap<String, String>,
-    pub cwd: String,
-    pub user: UserConfig,
-    pub permissions: Permissions,
-    pub loopback_exempt_ports: BTreeSet<u16>,
-    pub dns: DnsConfig,
-    pub dns_resolver: SharedDnsResolver,
-    pub resources: ResourceLimits,
-    pub zombie_ttl: Duration,
-}
-
-impl KernelVmConfig {
-    pub fn new(vm_id: impl Into<String>) -> Self {
-        Self {
-            vm_id: vm_id.into(),
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-            user: UserConfig::default(),
-            permissions: Permissions::default(),
-            loopback_exempt_ports: BTreeSet::new(),
-            dns: DnsConfig::default(),
-            dns_resolver: Arc::new(HickoryDnsResolver::default()),
-            resources: ResourceLimits::default(),
-            zombie_ttl: Duration::from_secs(60),
-        }
-    }
-}
-
-#[derive(Debug, Clone, Default)]
-pub struct SpawnOptions {
-    pub requester_driver: Option<String>,
-    pub parent_pid: Option<u32>,
-    pub env: BTreeMap<String, String>,
-    pub cwd: Option<String>,
-}
-
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct VirtualProcessOptions {
-    pub parent_pid: Option<u32>,
-    pub env: BTreeMap<String, String>,
-    pub cwd: Option<String>,
-}
-
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct ExecOptions {
-    pub requester_driver: Option<String>,
-    pub parent_pid: Option<u32>,
-    pub env: BTreeMap<String, String>,
-    pub cwd: Option<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct RecursiveDirEntry {
-    pub path: String,
-    pub is_directory: bool,
-    pub is_symbolic_link: bool,
-    pub size: u64,
-}
-
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct OpenShellOptions {
-    pub requester_driver: Option<String>,
-    pub command: Option<String>,
-    pub args: Vec<String>,
-    pub env: BTreeMap<String, String>,
-    pub cwd: Option<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct WaitPidResult {
-    pub pid: u32,
-    pub status: i32,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct WaitPidEventResult {
-    pub pid: u32,
-    pub status: i32,
-    pub event: WaitPidEvent,
-}
-
-#[derive(Debug, Clone)]
-struct ResolvedSpawnCommand {
-    command: String,
-    args: Vec<String>,
-    driver: CommandDriver,
-}
-
-#[derive(Debug, Clone)]
-struct ShebangCommand {
-    interpreter: String,
-    args: Vec<String>,
-}
-
-#[derive(Clone)]
-pub struct KernelProcessHandle {
-    pid: u32,
-    driver: String,
-    process: Arc<StubDriverProcess>,
-}
-
-impl fmt::Debug for KernelProcessHandle {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        f.debug_struct("KernelProcessHandle")
-            .field("pid", &self.pid)
-            .field("driver", &self.driver)
-            .finish_non_exhaustive()
-    }
-}
-
-impl KernelProcessHandle {
-    pub fn pid(&self) -> u32 {
-        self.pid
-    }
-
-    pub fn driver(&self) -> &str {
-        &self.driver
-    }
-
-    pub fn finish(&self, exit_code: i32) {
-        self.process.finish(exit_code);
-    }
-
-    pub fn kill(&self, signal: i32) {
-        self.process.kill(signal);
-    }
-
-    pub fn wait(&self, timeout: Duration) -> Option<i32> {
-        self.process.wait(timeout)
-    }
-
-    pub fn kill_signals(&self) -> Vec<i32> {
-        self.process.kill_signals()
-    }
-}
-
-#[derive(Debug, Clone)]
-pub struct OpenShellHandle {
-    process: KernelProcessHandle,
-    master_fd: u32,
-    slave_fd: u32,
-    pty_path: String,
-}
-
-impl OpenShellHandle {
-    pub fn process(&self) -> &KernelProcessHandle {
-        &self.process
-    }
-
-    pub fn pid(&self) -> u32 {
-        self.process.pid()
-    }
-
-    pub fn master_fd(&self) -> u32 {
-        self.master_fd
-    }
-
-    pub fn slave_fd(&self) -> u32 {
-        self.slave_fd
-    }
-
-    pub fn pty_path(&self) -> &str {
-        &self.pty_path
-    }
-}
-
-pub struct KernelVm<F> {
-    vm_id: String,
-    boot_time_ms: u64,
-    boot_instant: Instant,
-    filesystem: PermissionedFileSystem<DeviceLayer<F>>,
-    permissions: Permissions,
-    loopback_exempt_ports: BTreeSet<u16>,
-    dns: DnsConfig,
-    dns_resolver: SharedDnsResolver,
-    env: BTreeMap<String, String>,
-    cwd: String,
-    commands: CommandRegistry,
-    fd_tables: Arc<Mutex<FdTableManager>>,
-    processes: ProcessTable,
-    pipes: PipeManager,
-    ptys: PtyManager,
-    sockets: SocketTable,
-    poll_notifier: PollNotifier,
-    users: UserManager,
-    resources: ResourceAccountant,
-    filesystem_usage_cache: Option<FileSystemUsage>,
-    file_locks: FileLockManager,
-    driver_pids: Arc<Mutex<BTreeMap<String, BTreeSet<u32>>>>,
-    terminated: bool,
-}
-
-fn cleanup_process_resources(
-    fd_tables: &Mutex<FdTableManager>,
-    file_locks: &FileLockManager,
-    pipes: &PipeManager,
-    ptys: &PtyManager,
-    sockets: &SocketTable,
-    driver_pids: &Mutex<BTreeMap<String, BTreeSet<u32>>>,
-    pid: u32,
-) {
-    let mut cleanup = Vec::new();
-    {
-        let mut tables = lock_or_recover(fd_tables);
-        let descriptors = tables
-            .get(pid)
-            .map(|table| {
-                table
-                    .iter()
-                    .map(|entry| (entry.fd, Arc::clone(&entry.description), entry.filetype))
-                    .collect::<Vec<_>>()
-            })
-            .unwrap_or_default();
-
-        cleanup_process_resources_test_hook();
-
-        if let Some(table) = tables.get_mut(pid) {
-            for (fd, description, filetype) in &descriptors {
-                table.close(*fd);
-                cleanup.push((Arc::clone(description), *filetype));
-            }
-        }
-        tables.remove(pid);
-    }
-
-    for (description, filetype) in cleanup {
-        close_special_resource_if_needed(file_locks, pipes, ptys, &description, filetype);
-    }
-
-    sockets.remove_all_for_pid(pid);
-
-    let mut owners = lock_or_recover(driver_pids);
-    for pids in owners.values_mut() {
-        pids.remove(&pid);
-    }
-}
-
-fn dispose_kernel_vm_resources<F>(kernel: &mut KernelVm<F>) {
-    kernel.processes.terminate_all();
-    let pids = lock_or_recover(&kernel.fd_tables).pids();
-    for pid in pids {
-        cleanup_process_resources(
-            kernel.fd_tables.as_ref(),
-            &kernel.file_locks,
-            &kernel.pipes,
-            &kernel.ptys,
-            &kernel.sockets,
-            kernel.driver_pids.as_ref(),
-            pid,
-        );
-    }
-    lock_or_recover(&kernel.driver_pids).clear();
-    kernel.terminated = true;
-}
-
-#[cfg(test)]
-type CleanupProcessResourcesHook = Arc<dyn Fn() + Send + Sync + 'static>;
-
-#[cfg(test)]
-fn cleanup_process_resources_test_hook() {
-    let hook = lock_or_recover(cleanup_process_resources_test_hook_slot()).clone();
-    if let Some(hook) = hook {
-        hook();
-    }
-}
-
-#[cfg(not(test))]
-fn cleanup_process_resources_test_hook() {}
-
-#[cfg(test)]
-fn cleanup_process_resources_test_hook_slot() -> &'static Mutex<Option<CleanupProcessResourcesHook>>
-{
-    static HOOK: OnceLock<Mutex<Option<CleanupProcessResourcesHook>>> = OnceLock::new();
-    HOOK.get_or_init(|| Mutex::new(None))
-}
-
-#[cfg(test)]
-fn set_cleanup_process_resources_test_hook(hook: Option<CleanupProcessResourcesHook>) {
-    *lock_or_recover(cleanup_process_resources_test_hook_slot()) = hook;
-}
-
-fn close_special_resource_if_needed(
-    file_locks: &FileLockManager,
-    pipes: &PipeManager,
-    ptys: &PtyManager,
-    description: &Arc<FileDescription>,
-    filetype: u8,
-) {
-    if description.ref_count() != 0 {
-        return;
-    }
-
-    file_locks.release_owner(description.id());
-
-    if filetype == FILETYPE_PIPE && pipes.is_pipe(description.id()) {
-        pipes.close(description.id());
-    }
-
-    if ptys.is_pty(description.id()) {
-        ptys.close(description.id());
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-enum ProcNode {
-    RootDir,
-    MountsFile,
-    CpuInfoFile,
-    MemInfoFile,
-    LoadAvgFile,
-    UptimeFile,
-    VersionFile,
-    SelfLink { pid: u32 },
-    PidDir { pid: u32 },
-    PidFdDir { pid: u32 },
-    PidCmdline { pid: u32 },
-    PidEnviron { pid: u32 },
-    PidCwdLink { pid: u32 },
-    PidStatFile { pid: u32 },
-    PidStatusFile { pid: u32 },
-    PidFdLink { pid: u32, fd: u32 },
-}
-
-impl<F: VirtualFileSystem + 'static> KernelVm<F> {
-    pub fn new(filesystem: F, config: KernelVmConfig) -> Self {
-        let vm_id = config.vm_id;
-        let boot_time_ms = now_ms();
-        let boot_instant = Instant::now();
-        let permissions = config.permissions.clone();
-        let users = UserManager::from_config(config.user);
-        let process_table = ProcessTable::with_zombie_ttl(config.zombie_ttl);
-        let process_table_for_pty = process_table.clone();
-        let fd_tables = Arc::new(Mutex::new(FdTableManager::with_max_fds(
-            config
-                .resources
-                .max_open_fds
-                .unwrap_or(DEFAULT_MAX_OPEN_FDS),
-        )));
-        let file_locks = FileLockManager::new();
-        let driver_pids = Arc::new(Mutex::new(BTreeMap::new()));
-        let poll_notifier = PollNotifier::default();
-        let pipes = PipeManager::with_notifier(poll_notifier.clone());
-        let ptys = PtyManager::with_signal_handler_and_notifier(
-            Arc::new(move |pgid, signal| {
-                let _ = process_table_for_pty.kill(-(pgid as i32), signal);
-            }),
-            poll_notifier.clone(),
-        );
-        let sockets = SocketTable::new();
-
-        let fd_tables_for_exit = Arc::clone(&fd_tables);
-        let file_locks_for_exit = file_locks.clone();
-        let driver_pids_for_exit = Arc::clone(&driver_pids);
-        let pipes_for_exit = pipes.clone();
-        let ptys_for_exit = ptys.clone();
-        let sockets_for_exit = sockets.clone();
-        process_table.set_on_process_exit(Some(Arc::new(move |pid| {
-            cleanup_process_resources(
-                fd_tables_for_exit.as_ref(),
-                &file_locks_for_exit,
-                &pipes_for_exit,
-                &ptys_for_exit,
-                &sockets_for_exit,
-                driver_pids_for_exit.as_ref(),
-                pid,
-            );
-        })));
-
-        let filesystem = PermissionedFileSystem::new(
-            create_device_layer(filesystem),
-            vm_id.clone(),
-            permissions.clone(),
-        );
-        // Usage accounting is kernel-internal: the cache is populated lazily by
-        // `filesystem_usage()` through the RAW filesystem so no guest-attributable
-        // permission check fires at construction (or ever) for quota bookkeeping.
-        let filesystem_usage_cache = None;
-
-        Self {
-            vm_id: vm_id.clone(),
-            boot_time_ms,
-            boot_instant,
-            filesystem,
-            permissions,
-            loopback_exempt_ports: config.loopback_exempt_ports,
-            dns: config.dns,
-            dns_resolver: config.dns_resolver,
-            env: config.env,
-            cwd: config.cwd,
-            commands: CommandRegistry::new(),
-            fd_tables,
-            processes: process_table,
-            pipes,
-            ptys,
-            sockets,
-            poll_notifier,
-            users,
-            resources: ResourceAccountant::new(config.resources),
-            filesystem_usage_cache,
-            file_locks,
-            driver_pids,
-            terminated: false,
-        }
-    }
-
-    pub fn vm_id(&self) -> &str {
-        &self.vm_id
-    }
-
-    pub fn state(&self) -> LifecycleState {
-        if self.terminated {
-            LifecycleState::Terminated
-        } else if self.processes.running_count() > 0 {
-            LifecycleState::Busy
-        } else {
-            LifecycleState::Ready
-        }
-    }
-
-    pub fn commands(&self) -> BTreeMap<String, String> {
-        self.commands.list()
-    }
-
-    pub fn filesystem(&self) -> &PermissionedFileSystem<DeviceLayer<F>> {
-        &self.filesystem
-    }
-
-    pub fn filesystem_mut(&mut self) -> &mut PermissionedFileSystem<DeviceLayer<F>> {
-        &mut self.filesystem
-    }
-
-    pub fn user_manager(&self) -> &UserManager {
-        &self.users
-    }
-
-    pub fn environment(&self) -> &BTreeMap<String, String> {
-        &self.env
-    }
-
-    pub fn process_identity(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-    ) -> KernelResult<ProcessIdentity> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        Ok(self
-            .processes
-            .get(pid)
-            .ok_or_else(|| KernelError::no_such_process(pid))?
-            .identity)
-    }
-
-    pub fn user_profile(&self) -> UserManager {
-        self.users.clone()
-    }
-
-    pub fn getuid(&self, requester_driver: &str, pid: u32) -> KernelResult<u32> {
-        Ok(self.process_identity(requester_driver, pid)?.uid)
-    }
-
-    pub fn getgid(&self, requester_driver: &str, pid: u32) -> KernelResult<u32> {
-        Ok(self.process_identity(requester_driver, pid)?.gid)
-    }
-
-    pub fn geteuid(&self, requester_driver: &str, pid: u32) -> KernelResult<u32> {
-        Ok(self.process_identity(requester_driver, pid)?.euid)
-    }
-
-    pub fn getegid(&self, requester_driver: &str, pid: u32) -> KernelResult<u32> {
-        Ok(self.process_identity(requester_driver, pid)?.egid)
-    }
-
-    pub fn getgroups(&self, requester_driver: &str, pid: u32) -> KernelResult<Vec<u32>> {
-        Ok(self
-            .process_identity(requester_driver, pid)?
-            .supplementary_gids)
-    }
-
-    pub fn getpwuid(&self, uid: u32) -> KernelResult<String> {
-        self.users
-            .getpwuid(uid)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("unknown uid {uid}")))
-    }
-
-    pub fn getgrgid(&self, gid: u32) -> KernelResult<String> {
-        self.users
-            .getgrgid(gid)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("unknown gid {gid}")))
-    }
-
-    pub fn resource_snapshot(&self) -> ResourceSnapshot {
-        let fd_tables = lock_or_recover(&self.fd_tables);
-        self.resources.snapshot(
-            &self.processes,
-            &fd_tables,
-            &self.pipes,
-            &self.ptys,
-            &self.sockets,
-        )
-    }
-
-    pub fn resource_limits(&self) -> &ResourceLimits {
-        self.resources.limits()
-    }
-
-    pub fn set_permissions(&mut self, permissions: Permissions) {
-        self.filesystem.set_permissions(permissions.clone());
-        self.permissions = permissions;
-    }
-
-    pub fn set_loopback_exempt_ports(&mut self, ports: BTreeSet<u16>) {
-        self.loopback_exempt_ports = ports;
-    }
-
-    pub fn extend_loopback_exempt_ports(&mut self, ports: impl IntoIterator<Item = u16>) {
-        self.loopback_exempt_ports.extend(ports);
-    }
-
-    pub fn resolve_dns(
-        &self,
-        hostname: &str,
-        policy: DnsLookupPolicy,
-    ) -> KernelResult<DnsResolution> {
-        self.assert_not_terminated()?;
-        if matches!(policy, DnsLookupPolicy::CheckPermissions) {
-            let resource = format_dns_resource(hostname).map_err(map_dns_resolver_error)?;
-            check_network_access(
-                &self.vm_id,
-                &self.permissions,
-                NetworkOperation::Dns,
-                &resource,
-            )?;
-        }
-
-        resolve_dns(&self.dns, self.dns_resolver.as_ref(), hostname).map_err(map_dns_resolver_error)
-    }
-
-    pub fn resolve_dns_records(
-        &self,
-        hostname: &str,
-        record_type: RecordType,
-        policy: DnsLookupPolicy,
-    ) -> KernelResult<DnsRecordResolution> {
-        self.assert_not_terminated()?;
-        if matches!(policy, DnsLookupPolicy::CheckPermissions) {
-            let resource = format_dns_resource(hostname).map_err(map_dns_resolver_error)?;
-            check_network_access(
-                &self.vm_id,
-                &self.permissions,
-                NetworkOperation::Dns,
-                &resource,
-            )?;
-        }
-
-        resolve_dns_records(&self.dns, self.dns_resolver.as_ref(), hostname, record_type)
-            .map_err(map_dns_resolver_error)
-    }
-
-    pub fn register_driver(&mut self, driver: CommandDriver) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        let driver_name = driver.name().to_owned();
-        let populate_driver = driver.clone();
-        self.commands.register(driver)?;
-        lock_or_recover(&self.driver_pids)
-            .entry(driver_name)
-            .or_default();
-        self.commands
-            .populate_driver_bin(&mut self.filesystem, &populate_driver)?;
-        Ok(())
-    }
-
-    pub fn exec(
-        &mut self,
-        command: &str,
-        options: ExecOptions,
-    ) -> KernelResult<KernelProcessHandle> {
-        self.spawn_process(
-            "sh",
-            vec![String::from("-c"), String::from(command)],
-            SpawnOptions {
-                requester_driver: options.requester_driver,
-                parent_pid: options.parent_pid,
-                env: options.env,
-                cwd: options.cwd,
-            },
-        )
-    }
-
-    pub fn open_shell(&mut self, options: OpenShellOptions) -> KernelResult<OpenShellHandle> {
-        let command = options.command.unwrap_or_else(|| String::from("sh"));
-        let requester_driver = options.requester_driver.clone();
-        let process = self.spawn_process(
-            &command,
-            options.args,
-            SpawnOptions {
-                requester_driver: requester_driver.clone(),
-                parent_pid: None,
-                env: options.env,
-                cwd: options.cwd,
-            },
-        )?;
-        let owner = requester_driver.as_deref().unwrap_or(process.driver());
-        let (master_fd, slave_fd, pty_path) = self.open_pty(owner, process.pid())?;
-        self.setpgid(owner, process.pid(), process.pid())?;
-        self.pty_set_foreground_pgid(owner, process.pid(), master_fd, process.pid())?;
-        Ok(OpenShellHandle {
-            process,
-            master_fd,
-            slave_fd,
-            pty_path,
-        })
-    }
-
-    pub fn read_file(&mut self, path: &str) -> KernelResult<Vec<u8>> {
-        self.assert_not_terminated()?;
-        self.read_file_internal(None, path)
-    }
-
-    pub fn pread_file(&mut self, path: &str, offset: u64, length: usize) -> KernelResult<Vec<u8>> {
-        self.assert_not_terminated()?;
-        self.resources.check_pread_length(length)?;
-        Ok(VirtualFileSystem::pread(
-            &mut self.filesystem,
-            path,
-            offset,
-            length,
-        )?)
-    }
-
-    pub fn read_file_for_process(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        path: &str,
-    ) -> KernelResult<Vec<u8>> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.read_file_internal(Some(pid), path)
-    }
-
-    pub fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.reject_read_only_resolved_write_path(path)?;
-        let content = content.into();
-        let new_size = content.len() as u64;
-        let existing = self.storage_stat(path)?;
-        self.check_write_file_limits_with_existing(path, existing.as_ref(), new_size)?;
-        self.filesystem.write_file(path, content)?;
-        self.update_filesystem_usage_cache_for_write(existing.as_ref(), new_size);
-        Ok(())
-    }
-
-    /// Writes `content` at `offset` within an existing file, growing (and
-    /// zero-filling) it as needed. This is the positional counterpart to
-    /// [`Self::pread_file`]: it lets a descriptor-based caller (the shared WASI
-    /// runner over the browser wire, which has no kernel fd offsets) write a
-    /// region without the lossy, non-atomic read-modify-write it would
-    /// otherwise have to do client-side. Enforcement matches `write_file`:
-    /// read-only paths are rejected and the resulting file size is charged
-    /// against the resource limits before the write.
-    pub fn pwrite_file(
-        &mut self,
-        path: &str,
-        offset: u64,
-        content: impl Into<Vec<u8>>,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.reject_read_only_resolved_write_path(path)?;
-        let content = content.into();
-        let existing = self.storage_stat(path)?;
-        let existing_size = existing.as_ref().map(|stat| stat.size).unwrap_or(0);
-        let end = offset.saturating_add(content.len() as u64);
-        self.check_write_file_limits_with_existing(
-            path,
-            existing.as_ref(),
-            existing_size.max(end),
-        )?;
-        self.filesystem.pwrite(path, content, offset)?;
-        self.update_filesystem_usage_cache_for_write(existing.as_ref(), existing_size.max(end));
-        Ok(())
-    }
-
-    pub fn write_file_for_process(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        path: &str,
-        content: impl Into<Vec<u8>>,
-        mode: Option<u32>,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existed = self.exists_internal(Some(pid), path)?;
-        let content = content.into();
-        let new_size = content.len() as u64;
-        self.reject_read_only_resolved_write_path(path)?;
-        let existing = self.storage_stat(path)?;
-        self.check_write_file_limits_with_existing(path, existing.as_ref(), new_size)?;
-        VirtualFileSystem::write_file_with_mode(&mut self.filesystem, path, content, mode)?;
-        self.update_filesystem_usage_cache_for_write(existing.as_ref(), new_size);
-        if !existed {
-            let umask = self.processes.get_umask(pid)?;
-            self.apply_creation_mode(path, mode.unwrap_or(0o666), umask)?;
-        }
-        Ok(())
-    }
-
-    pub fn create_dir(&mut self, path: &str) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.reject_read_only_entry_write_path(path)?;
-        self.check_create_dir_limits(path)?;
-        self.filesystem.create_dir(path)?;
-        self.update_filesystem_usage_cache_for_inode_create(0);
-        Ok(())
-    }
-
-    pub fn create_dir_for_process(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        path: &str,
-        mode: Option<u32>,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existed = self.exists_internal(Some(pid), path)?;
-        self.reject_read_only_entry_write_path(path)?;
-        self.check_create_dir_limits(path)?;
-        VirtualFileSystem::create_dir_with_mode(&mut self.filesystem, path, mode)?;
-        self.update_filesystem_usage_cache_for_inode_create(0);
-        if !existed {
-            let umask = self.processes.get_umask(pid)?;
-            self.apply_creation_mode(path, mode.unwrap_or(0o777), umask)?;
-        }
-        Ok(())
-    }
-
-    pub fn mkdir(&mut self, path: &str, recursive: bool) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.reject_read_only_entry_write_path(path)?;
-        let created_paths = self.missing_directory_paths(path, recursive)?;
-        self.check_mkdir_limits(path, recursive)?;
-        self.filesystem.mkdir(path, recursive)?;
-        self.update_filesystem_usage_cache_for_inode_creates(created_paths.len());
-        Ok(())
-    }
-
-    pub fn mkdir_for_process(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        path: &str,
-        recursive: bool,
-        mode: Option<u32>,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let created_paths = self.missing_directory_paths(path, recursive)?;
-        self.reject_read_only_entry_write_path(path)?;
-        self.check_mkdir_limits(path, recursive)?;
-        VirtualFileSystem::mkdir_with_mode(&mut self.filesystem, path, recursive, mode)?;
-        if !created_paths.is_empty() {
-            let umask = self.processes.get_umask(pid)?;
-            let mode = mode.unwrap_or(0o777);
-            for created_path in &created_paths {
-                self.apply_creation_mode(created_path, mode, umask)?;
-            }
-        }
-        self.update_filesystem_usage_cache_for_inode_creates(created_paths.len());
-        Ok(())
-    }
-
-    pub fn umask(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        new_mask: Option<u32>,
-    ) -> KernelResult<u32> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        match new_mask {
-            Some(mask) => Ok(self.processes.set_umask(pid, mask)?),
-            None => Ok(self.processes.get_umask(pid)?),
-        }
-    }
-
-    pub fn exists(&self, path: &str) -> KernelResult<bool> {
-        self.assert_not_terminated()?;
-        self.exists_internal(None, path)
-    }
-
-    pub fn exists_for_process(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        path: &str,
-    ) -> KernelResult<bool> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.exists_internal(Some(pid), path)
-    }
-
-    pub fn stat(&mut self, path: &str) -> KernelResult<VirtualStat> {
-        self.assert_not_terminated()?;
-        self.stat_internal(None, path)
-    }
-
-    pub fn stat_for_process(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        path: &str,
-    ) -> KernelResult<VirtualStat> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.stat_internal(Some(pid), path)
-    }
-
-    pub fn lstat(&self, path: &str) -> KernelResult<VirtualStat> {
-        self.assert_not_terminated()?;
-        self.lstat_internal(None, path)
-    }
-
-    pub fn lstat_for_process(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        path: &str,
-    ) -> KernelResult<VirtualStat> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.lstat_internal(Some(pid), path)
-    }
-
-    pub fn read_link(&self, path: &str) -> KernelResult<String> {
-        self.assert_not_terminated()?;
-        self.read_link_internal(None, path)
-    }
-
-    pub fn read_link_for_process(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        path: &str,
-    ) -> KernelResult<String> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.read_link_internal(Some(pid), path)
-    }
-
-    pub fn read_dir(&mut self, path: &str) -> KernelResult<Vec<String>> {
-        self.assert_not_terminated()?;
-        let entries = self.read_dir_internal(None, path)?;
-        self.resources.check_readdir_entries(entries.len())?;
-        Ok(entries)
-    }
-
-    pub fn read_dir_for_process(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        path: &str,
-    ) -> KernelResult<Vec<String>> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let entries = self.read_dir_internal(Some(pid), path)?;
-        self.resources.check_readdir_entries(entries.len())?;
-        Ok(entries)
-    }
-
-    pub fn read_dir_with_types_for_process(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        path: &str,
-    ) -> KernelResult<Vec<VirtualDirEntry>> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let entries = self.read_dir_with_types_internal(Some(pid), path)?;
-        self.resources.check_readdir_entries(entries.len())?;
-        Ok(entries)
-    }
-
-    /// Lists a directory with each child's file type in one call. This is the
-    /// typed counterpart to [`Self::read_dir`]: it lets a descriptor-based caller
-    /// recover Dirent kinds (`readdir({ withFileTypes })`) without an extra
-    /// `lstat` round-trip per entry. Reuses `read_dir_internal` so proc, the
-    /// readdir-entry limit, and read-permission checks behave identically; the
-    /// per-entry `lstat` is in-process (no wire hops).
-    pub fn read_dir_with_types(&mut self, path: &str) -> KernelResult<Vec<VirtualDirEntry>> {
-        self.assert_not_terminated()?;
-        let names = self.read_dir_internal(None, path)?;
-        self.resources.check_readdir_entries(names.len())?;
-        let mut entries = Vec::with_capacity(names.len());
-        for name in names {
-            let child = normalize_path(&format!("{path}/{name}"));
-            let stat = self.lstat_internal(None, &child)?;
-            entries.push(VirtualDirEntry {
-                name,
-                is_directory: stat.is_directory,
-                is_symbolic_link: stat.is_symbolic_link,
-            });
-        }
-        Ok(entries)
-    }
-
-    pub fn read_dir_recursive(
-        &mut self,
-        path: &str,
-        max_depth: Option<usize>,
-    ) -> KernelResult<Vec<RecursiveDirEntry>> {
-        self.assert_not_terminated()?;
-        let depth_limit = self.effective_recursive_fs_depth(max_depth)?;
-        let caller_limited = max_depth.is_some();
-        let mut entries = Vec::new();
-        let mut queue = VecDeque::from([(normalize_path(path), 0usize)]);
-
-        while let Some((dir_path, depth)) = queue.pop_front() {
-            self.resources.check_recursive_fs_depth(depth)?;
-            let names = self.read_dir_internal(None, &dir_path)?;
-            self.resources.check_readdir_entries(names.len())?;
-
-            for name in names {
-                if matches!(name.as_str(), "." | "..") {
-                    continue;
-                }
-                let child = join_child_path(&dir_path, &name);
-                let stat = self.lstat_internal(None, &child)?;
-                let entry = RecursiveDirEntry {
-                    path: child.clone(),
-                    is_directory: stat.is_directory,
-                    is_symbolic_link: stat.is_symbolic_link,
-                    size: stat.size,
-                };
-                entries.push(entry);
-                self.resources.check_recursive_fs_entries(entries.len())?;
-
-                if stat.is_directory && !stat.is_symbolic_link {
-                    let child_depth = depth.saturating_add(1);
-                    if child_depth <= depth_limit {
-                        queue.push_back((child, child_depth));
-                    } else if !caller_limited {
-                        self.resources.check_recursive_fs_depth(child_depth)?;
-                    }
-                }
-            }
-        }
-
-        Ok(entries)
-    }
-
-    pub fn copy_path(&mut self, from: &str, to: &str, recursive: bool) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        let mut entries = 0usize;
-        self.copy_path_inner(from, to, recursive, 0, &mut entries)?;
-        Ok(())
-    }
-
-    pub fn remove_path(&mut self, path: &str, recursive: bool) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        let mut entries = 0usize;
-        self.remove_path_inner(path, recursive, 0, &mut entries)
-    }
-
-    pub fn move_path(&mut self, from: &str, to: &str) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        match self.rename(from, to) {
-            Ok(()) => Ok(()),
-            Err(error) if error.code() == "EXDEV" => {
-                self.copy_path(from, to, true)?;
-                self.remove_path(from, true)
-            }
-            Err(error) => Err(error),
-        }
-    }
-
-    pub fn remove_file(&mut self, path: &str) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.reject_read_only_entry_write_path(path)?;
-        let removed = self.storage_lstat(path)?;
-        self.filesystem.remove_file(path)?;
-        self.update_filesystem_usage_cache_for_remove(removed.as_ref());
-        Ok(())
-    }
-
-    pub fn remove_dir(&mut self, path: &str) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.reject_read_only_entry_write_path(path)?;
-        let removed = self.storage_lstat(path)?;
-        self.filesystem.remove_dir(path)?;
-        if removed.as_ref().is_some_and(|stat| stat.is_directory) {
-            self.update_filesystem_usage_cache_for_inode_delete(0);
-        }
-        Ok(())
-    }
-
-    pub fn rename(&mut self, old_path: &str, new_path: &str) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.reject_read_only_entry_write_path(old_path)?;
-        self.reject_read_only_entry_write_path(new_path)?;
-        self.check_rename_copy_up_limits(old_path, new_path)?;
-        self.filesystem.rename(old_path, new_path)?;
-        // Rename can be a pure metadata move, a destination replacement, or an
-        // overlay copy-up/removal with hard-link aliasing. Drop the cached root
-        // usage because the local byte/inode delta is not knowable here.
-        self.invalidate_filesystem_usage_cache();
-        Ok(())
-    }
-
-    pub fn realpath(&self, path: &str) -> KernelResult<String> {
-        self.assert_not_terminated()?;
-        self.realpath_internal(None, path)
-    }
-
-    pub fn realpath_for_process(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        path: &str,
-    ) -> KernelResult<String> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.realpath_internal(Some(pid), path)
-    }
-
-    pub fn symlink(&mut self, target: &str, link_path: &str) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        if is_proc_path(target) {
-            self.filesystem
-                .check_virtual_path(FsOperation::Write, link_path)
-                .map_err(KernelError::from)?;
-            return Err(read_only_filesystem_error(link_path));
-        }
-        self.reject_read_only_entry_write_path(link_path)?;
-        self.check_symlink_limits(target, link_path)?;
-        self.filesystem.symlink(target, link_path)?;
-        self.update_filesystem_usage_cache_for_inode_create(target.len() as u64);
-        Ok(())
-    }
-
-    pub fn chmod(&mut self, path: &str, mode: u32) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.reject_read_only_resolved_write_path(path)?;
-        Ok(self.filesystem.chmod(path, mode)?)
-    }
-
-    pub fn link(&mut self, old_path: &str, new_path: &str) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        if is_proc_path(old_path) {
-            self.filesystem
-                .check_virtual_path(FsOperation::Write, new_path)
-                .map_err(KernelError::from)?;
-            return Err(read_only_filesystem_error(new_path));
-        }
-        self.reject_read_only_resolved_write_path(old_path)?;
-        self.reject_read_only_entry_write_path(new_path)?;
-        self.filesystem.link(old_path, new_path)?;
-        // Hard-link creation makes another directory entry for an already
-        // reachable inode, so measured root usage is unchanged.
-        Ok(())
-    }
-
-    pub fn chown(&mut self, path: &str, uid: u32, gid: u32) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.reject_read_only_resolved_write_path(path)?;
-        Ok(self.filesystem.chown(path, uid, gid)?)
-    }
-
-    pub fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> KernelResult<()> {
-        self.utimes_spec(
-            path,
-            VirtualUtimeSpec::Set(VirtualTimeSpec::from_millis(atime_ms)),
-            VirtualUtimeSpec::Set(VirtualTimeSpec::from_millis(mtime_ms)),
-        )
-    }
-
-    pub fn utimes_spec(
-        &mut self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.reject_read_only_resolved_write_path(path)?;
-        Ok(self.filesystem.utimes_spec(path, atime, mtime, true)?)
-    }
-
-    pub fn lutimes(
-        &mut self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.reject_read_only_entry_write_path(path)?;
-        Ok(self.filesystem.utimes_spec(path, atime, mtime, false)?)
-    }
-
-    pub fn futimes(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        let path = self
-            .description_for_fd(requester_driver, pid, fd)?
-            .path()
-            .to_owned();
-        self.reject_read_only_resolved_write_path(&path)?;
-        Ok(self.filesystem.utimes_spec(&path, atime, mtime, true)?)
-    }
-
-    pub fn truncate(&mut self, path: &str, length: u64) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.reject_read_only_resolved_write_path(path)?;
-        let existing = self.storage_stat(path)?;
-        self.check_truncate_limits_with_existing(path, existing.as_ref(), length)?;
-        self.filesystem.truncate(path, length)?;
-        self.update_filesystem_usage_cache_for_write(existing.as_ref(), length);
-        Ok(())
-    }
-
-    pub fn list_processes(&self) -> BTreeMap<u32, ProcessInfo> {
-        self.processes.list_processes()
-    }
-
-    pub fn zombie_timer_count(&self) -> usize {
-        self.processes.zombie_timer_count()
-    }
-
-    pub fn spawn_process(
-        &mut self,
-        command: &str,
-        args: Vec<String>,
-        options: SpawnOptions,
-    ) -> KernelResult<KernelProcessHandle> {
-        self.assert_not_terminated()?;
-        if let (Some(requester), Some(parent_pid)) =
-            (options.requester_driver.as_deref(), options.parent_pid)
-        {
-            self.assert_driver_owns(requester, parent_pid)?;
-        }
-
-        let cwd = options.cwd.clone().unwrap_or_else(|| self.cwd.clone());
-        let resolved = self.resolve_spawn_command(command, &args, &cwd)?;
-
-        self.resources
-            .check_process_argv_bytes(&resolved.command, &resolved.args)?;
-        self.resources
-            .check_process_env_bytes(&self.env, &options.env)?;
-
-        let mut env = self.env.clone();
-        env.extend(options.env.clone());
-        check_command_execution(
-            &self.vm_id,
-            &self.permissions,
-            &resolved.command,
-            &resolved.args,
-            Some(&cwd),
-            &env,
-        )?;
-
-        let inherited_fds = {
-            let tables = lock_or_recover(&self.fd_tables);
-            options
-                .parent_pid
-                .and_then(|pid| tables.get(pid).map(ProcessFdTable::len))
-                .unwrap_or(3)
-        };
-        self.resources
-            .check_process_spawn(&self.resource_snapshot(), inherited_fds)?;
-
-        self.register_process(
-            resolved.driver.name().to_owned(),
-            resolved.command,
-            resolved.args,
-            ProcessContext {
-                pid: 0,
-                ppid: options.parent_pid.unwrap_or(0),
-                env,
-                cwd,
-                umask: DEFAULT_PROCESS_UMASK,
-                fds: Default::default(),
-                identity: self.users.identity(),
-                blocked_signals: SignalSet::empty(),
-                pending_signals: SignalSet::empty(),
-            },
-            options.requester_driver.as_deref(),
-        )
-    }
-
-    pub fn create_virtual_process(
-        &mut self,
-        requester_driver: &str,
-        driver: &str,
-        command: &str,
-        args: Vec<String>,
-        options: VirtualProcessOptions,
-    ) -> KernelResult<KernelProcessHandle> {
-        self.assert_not_terminated()?;
-        if let Some(parent_pid) = options.parent_pid {
-            self.assert_driver_owns(requester_driver, parent_pid)?;
-        }
-
-        let cwd = options.cwd.clone().unwrap_or_else(|| self.cwd.clone());
-        self.resources.check_process_argv_bytes(command, &args)?;
-        self.resources
-            .check_process_env_bytes(&self.env, &options.env)?;
-
-        let mut env = self.env.clone();
-        env.extend(options.env.clone());
-        check_command_execution(
-            &self.vm_id,
-            &self.permissions,
-            command,
-            &args,
-            Some(&cwd),
-            &env,
-        )?;
-
-        let inherited_fds = {
-            let tables = lock_or_recover(&self.fd_tables);
-            options
-                .parent_pid
-                .and_then(|pid| tables.get(pid).map(ProcessFdTable::len))
-                .unwrap_or(3)
-        };
-        self.resources
-            .check_process_spawn(&self.resource_snapshot(), inherited_fds)?;
-
-        self.register_process(
-            String::from(driver),
-            String::from(command),
-            args,
-            ProcessContext {
-                pid: 0,
-                ppid: options.parent_pid.unwrap_or(0),
-                env,
-                cwd,
-                umask: DEFAULT_PROCESS_UMASK,
-                fds: Default::default(),
-                identity: self.users.identity(),
-                blocked_signals: SignalSet::empty(),
-                pending_signals: SignalSet::empty(),
-            },
-            Some(requester_driver),
-        )
-    }
-
-    pub fn read_process_stdin(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        length: usize,
-        timeout: Option<Duration>,
-    ) -> KernelResult<Option<Vec<u8>>> {
-        self.fd_read_with_timeout_result(requester_driver, pid, 0, length, timeout)
-    }
-
-    pub fn write_process_stdout(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        data: &[u8],
-    ) -> KernelResult<usize> {
-        self.fd_write(requester_driver, pid, 1, data)
-    }
-
-    pub fn write_process_stderr(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        data: &[u8],
-    ) -> KernelResult<usize> {
-        self.fd_write(requester_driver, pid, 2, data)
-    }
-
-    pub fn exit_process(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        exit_code: i32,
-    ) -> KernelResult<()> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.processes.mark_exited(pid, exit_code);
-        Ok(())
-    }
-
-    fn register_process(
-        &mut self,
-        driver_name: String,
-        command: String,
-        args: Vec<String>,
-        mut ctx: ProcessContext,
-        requester_driver: Option<&str>,
-    ) -> KernelResult<KernelProcessHandle> {
-        let pid = self.processes.allocate_pid()?;
-        ctx.pid = pid;
-
-        {
-            let mut tables = lock_or_recover(&self.fd_tables);
-            if ctx.ppid != 0 {
-                let parent_pid = ctx.ppid;
-                tables.fork(parent_pid, pid);
-            } else {
-                tables.create(pid);
-            }
-        }
-
-        let process = Arc::new(StubDriverProcess::default());
-        self.processes.register(
-            pid,
-            driver_name.clone(),
-            command,
-            args,
-            ctx,
-            process.clone(),
-        );
-
-        let mut owners = lock_or_recover(&self.driver_pids);
-        owners.entry(driver_name.clone()).or_default().insert(pid);
-        if let Some(requester) = requester_driver {
-            owners
-                .entry(String::from(requester))
-                .or_default()
-                .insert(pid);
-        }
-
-        Ok(KernelProcessHandle {
-            pid,
-            driver: driver_name,
-            process,
-        })
-    }
-
-    pub fn waitpid(&mut self, pid: u32) -> KernelResult<WaitPidResult> {
-        let (pid, status) = self.processes.waitpid(pid)?;
-        self.cleanup_process_resources(pid);
-        Ok(WaitPidResult { pid, status })
-    }
-
-    pub fn waitpid_with_options(
-        &mut self,
-        requester_driver: &str,
-        waiter_pid: u32,
-        pid: i32,
-        flags: WaitPidFlags,
-    ) -> KernelResult<Option<WaitPidEventResult>> {
-        self.assert_driver_owns(requester_driver, waiter_pid)?;
-        let result = self.processes.waitpid_for(waiter_pid, pid, flags)?;
-        Ok(result.map(|result| self.finish_waitpid_event(result)))
-    }
-
-    pub fn wait_and_reap(&mut self, pid: u32) -> KernelResult<(u32, i32)> {
-        let result = self.waitpid(pid)?;
-        Ok((result.pid, result.status))
-    }
-
-    pub fn open_pipe(&mut self, requester_driver: &str, pid: u32) -> KernelResult<(u32, u32)> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.resources
-            .check_pipe_allocation(&self.resource_snapshot())?;
-        let mut tables = lock_or_recover(&self.fd_tables);
-        let table = tables
-            .get_mut(pid)
-            .ok_or_else(|| KernelError::no_such_process(pid))?;
-        Ok(self.pipes.create_pipe_fds(table)?)
-    }
-
-    pub fn open_pty(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-    ) -> KernelResult<(u32, u32, String)> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.resources
-            .check_pty_allocation(&self.resource_snapshot())?;
-        let mut tables = lock_or_recover(&self.fd_tables);
-        let table = tables
-            .get_mut(pid)
-            .ok_or_else(|| KernelError::no_such_process(pid))?;
-        Ok(self.ptys.create_pty_fds(table)?)
-    }
-
-    pub fn socket_create(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        spec: SocketSpec,
-    ) -> KernelResult<SocketId> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.resources
-            .check_socket_allocation(&self.resource_snapshot())?;
-        Ok(self.sockets.allocate(pid, spec).id())
-    }
-
-    pub fn set_socket_readiness_sink<S>(&mut self, sink: Option<S>)
-    where
-        S: Fn(SocketReadiness) + Send + Sync + 'static,
-    {
-        self.sockets.set_readiness_sink(sink);
-    }
-
-    pub fn socket_get(&self, socket_id: SocketId) -> Option<SocketRecord> {
-        self.sockets.get(socket_id)
-    }
-
-    pub fn socket_records_for_pid(&self, pid: u32) -> Vec<SocketRecord> {
-        self.sockets.records_for_owner(pid)
-    }
-
-    pub fn socket_bind_inet(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        address: InetSocketAddress,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-        check_network_access(
-            &self.vm_id,
-            &self.permissions,
-            NetworkOperation::Listen,
-            &format_tcp_resource(address.host(), address.port()),
-        )?;
-
-        self.sockets.bind_inet(socket_id, address)?;
-        self.poll_notifier.notify();
-        Ok(())
-    }
-
-    pub fn socket_bind_unix(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        path: impl Into<String>,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-
-        self.sockets
-            .bind_unix(socket_id, normalize_path(&path.into()))?;
-        self.poll_notifier.notify();
-        Ok(())
-    }
-
-    pub fn socket_listen(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        backlog: usize,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-        if let Some(address) = existing.local_address() {
-            check_network_access(
-                &self.vm_id,
-                &self.permissions,
-                NetworkOperation::Listen,
-                &format_tcp_resource(address.host(), address.port()),
-            )?;
-        }
-
-        self.sockets.listen(socket_id, backlog)?;
-        self.poll_notifier.notify();
-        Ok(())
-    }
-
-    pub fn socket_queue_incoming_tcp_connection(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        listener_socket_id: SocketId,
-        peer_address: InetSocketAddress,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self.sockets.get(listener_socket_id).ok_or_else(|| {
-            KernelError::new("ENOENT", format!("no such socket {listener_socket_id}"))
-        })?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {listener_socket_id}"
-            )));
-        }
-
-        self.sockets
-            .enqueue_incoming_tcp_connection(listener_socket_id, peer_address)?;
-        self.poll_notifier.notify();
-        Ok(())
-    }
-
-    pub fn socket_accept(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        listener_socket_id: SocketId,
-    ) -> KernelResult<SocketId> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self.sockets.get(listener_socket_id).ok_or_else(|| {
-            KernelError::new("ENOENT", format!("no such socket {listener_socket_id}"))
-        })?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {listener_socket_id}"
-            )));
-        }
-
-        let snapshot = self.resource_snapshot();
-        self.resources.check_socket_allocation(&snapshot)?;
-        self.resources.check_socket_state_transition(
-            &snapshot,
-            SocketState::Created,
-            SocketState::Connected,
-        )?;
-
-        let socket_id = self.sockets.accept(listener_socket_id)?.id();
-        self.poll_notifier.notify();
-        Ok(socket_id)
-    }
-
-    pub fn socket_connect_pair(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        peer_socket_id: SocketId,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-
-        let peer = self.sockets.get(peer_socket_id).ok_or_else(|| {
-            KernelError::new("ENOENT", format!("no such socket {peer_socket_id}"))
-        })?;
-        self.assert_driver_owns(requester_driver, peer.owner_pid())?;
-
-        let mut snapshot = self.resource_snapshot();
-        for current_state in [existing.state(), peer.state()] {
-            self.resources.check_socket_state_transition(
-                &snapshot,
-                current_state,
-                SocketState::Connected,
-            )?;
-            if !current_state.counts_as_connection() {
-                snapshot.socket_connections = snapshot.socket_connections.saturating_add(1);
-            }
-        }
-
-        self.sockets.connect_pair(socket_id, peer_socket_id)?;
-        self.poll_notifier.notify();
-        Ok(())
-    }
-
-    pub fn socket_connect_unix(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        target_path: impl Into<String>,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-
-        let target_path = normalize_path(&target_path.into());
-        self.sockets
-            .find_bound_unix_socket(&target_path)
-            .ok_or_else(|| {
-                KernelError::new(
-                    "ECONNREFUSED",
-                    format!("no listening socket bound at path {target_path}"),
-                )
-            })?;
-
-        let mut snapshot = self.resource_snapshot();
-        self.resources.check_socket_allocation(&snapshot)?;
-        for current_state in [existing.state(), SocketState::Created] {
-            self.resources.check_socket_state_transition(
-                &snapshot,
-                current_state,
-                SocketState::Connected,
-            )?;
-            if !current_state.counts_as_connection() {
-                snapshot.socket_connections = snapshot.socket_connections.saturating_add(1);
-            }
-        }
-
-        self.sockets
-            .connect_to_bound_unix_stream(socket_id, target_path)?;
-        self.poll_notifier.notify();
-        Ok(())
-    }
-
-    pub fn socket_connect_inet_loopback(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        target_address: InetSocketAddress,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-        check_network_access(
-            &self.vm_id,
-            &self.permissions,
-            NetworkOperation::Http,
-            &format_tcp_resource(target_address.host(), target_address.port()),
-        )?;
-        self.check_loopback_port_allowed(
-            SocketSpec::tcp(),
-            &target_address,
-            "TCP loopback connect",
-        )?;
-
-        self.sockets
-            .find_bound_inet_socket(SocketSpec::tcp(), &target_address)
-            .ok_or_else(|| {
-                KernelError::new(
-                    "ECONNREFUSED",
-                    format!(
-                        "no listening socket bound at {}:{}",
-                        target_address.host(),
-                        target_address.port()
-                    ),
-                )
-            })?;
-
-        let mut snapshot = self.resource_snapshot();
-        self.resources.check_socket_allocation(&snapshot)?;
-        for current_state in [existing.state(), SocketState::Created] {
-            self.resources.check_socket_state_transition(
-                &snapshot,
-                current_state,
-                SocketState::Connected,
-            )?;
-            if !current_state.counts_as_connection() {
-                snapshot.socket_connections = snapshot.socket_connections.saturating_add(1);
-            }
-        }
-
-        self.sockets
-            .connect_to_bound_inet_stream(socket_id, target_address)?;
-        self.poll_notifier.notify();
-        Ok(())
-    }
-
-    pub fn socket_send_to_inet_loopback(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        target_address: InetSocketAddress,
-        data: &[u8],
-    ) -> KernelResult<usize> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-        if existing.spec() != SocketSpec::udp()
-            || existing.state() != SocketState::Bound
-            || existing.local_address().is_none()
-        {
-            self.sockets
-                .check_send_to_bound_udp_socket(socket_id, target_address.clone())?;
-        }
-        check_network_access(
-            &self.vm_id,
-            &self.permissions,
-            NetworkOperation::Http,
-            &format_tcp_resource(target_address.host(), target_address.port()),
-        )?;
-        self.check_loopback_port_allowed(SocketSpec::udp(), &target_address, "UDP loopback send")?;
-
-        self.sockets
-            .check_send_to_bound_udp_socket(socket_id, target_address.clone())?;
-        self.resources
-            .check_socket_datagram_enqueue(&self.resource_snapshot(), data.len())?;
-        let written = self
-            .sockets
-            .send_to_bound_udp_socket(socket_id, target_address, data)?;
-        if written > 0 {
-            self.poll_notifier.notify();
-        }
-        Ok(written)
-    }
-
-    fn check_loopback_port_allowed(
-        &self,
-        spec: SocketSpec,
-        target_address: &InetSocketAddress,
-        operation: &str,
-    ) -> KernelResult<()> {
-        if self
-            .sockets
-            .find_bound_inet_socket(spec, target_address)
-            .is_some()
-            || self.loopback_exempt_ports.contains(&target_address.port())
-        {
-            return Ok(());
-        }
-
-        Err(KernelError::permission_denied(format!(
-            "{operation} to {}:{} is not owned by this VM and is not loopback-exempt",
-            target_address.host(),
-            target_address.port()
-        )))
-    }
-
-    pub fn socket_recv_datagram(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        max_bytes: usize,
-    ) -> KernelResult<Option<ReceivedDatagram>> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-
-        let result = self.sockets.recv_datagram(socket_id, max_bytes)?;
-        if result.is_some() {
-            self.poll_notifier.notify();
-        }
-        Ok(result)
-    }
-
-    pub fn socket_set_datagram_option(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        option: DatagramSocketOption,
-        enabled: bool,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-
-        self.sockets
-            .set_datagram_socket_option(socket_id, option, enabled)?;
-        self.poll_notifier.notify();
-        Ok(())
-    }
-
-    pub fn socket_add_membership(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        membership: SocketMulticastMembership,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-
-        self.sockets
-            .add_multicast_membership(socket_id, membership)?;
-        self.poll_notifier.notify();
-        Ok(())
-    }
-
-    pub fn socket_drop_membership(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        membership: SocketMulticastMembership,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-
-        self.sockets
-            .drop_multicast_membership(socket_id, membership)?;
-        self.poll_notifier.notify();
-        Ok(())
-    }
-
-    pub fn socket_set_state(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        state: SocketState,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-
-        self.resources.check_socket_state_transition(
-            &self.resource_snapshot(),
-            existing.state(),
-            state,
-        )?;
-        self.sockets.update_state(socket_id, state)?;
-        self.poll_notifier.notify();
-        Ok(())
-    }
-
-    pub fn socket_write(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        data: &[u8],
-    ) -> KernelResult<usize> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-
-        self.sockets.check_write(socket_id)?;
-        self.resources
-            .check_socket_buffer_growth(&self.resource_snapshot(), data.len())?;
-        let written = self.sockets.write(socket_id, data)?;
-        if written > 0 {
-            self.poll_notifier.notify();
-        }
-        Ok(written)
-    }
-
-    pub fn socket_read(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        max_bytes: usize,
-    ) -> KernelResult<Option<Vec<u8>>> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-
-        let result = self.sockets.read(socket_id, max_bytes)?;
-        if result.is_some() {
-            self.poll_notifier.notify();
-        }
-        Ok(result)
-    }
-
-    pub fn socket_shutdown(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-        how: SocketShutdown,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-
-        self.sockets.shutdown(socket_id, how)?;
-        self.poll_notifier.notify();
-        Ok(())
-    }
-
-    pub fn socket_close(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        socket_id: SocketId,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        let existing = self
-            .sockets
-            .get(socket_id)
-            .ok_or_else(|| KernelError::new("ENOENT", format!("no such socket {socket_id}")))?;
-        if existing.owner_pid() != pid {
-            return Err(KernelError::permission_denied(format!(
-                "process {pid} does not own socket {socket_id}"
-            )));
-        }
-
-        self.sockets.remove(socket_id)?;
-        self.poll_notifier.notify();
-        Ok(())
-    }
-
-    pub fn fd_open(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        path: &str,
-        flags: u32,
-        mode: Option<u32>,
-    ) -> KernelResult<u32> {
-        self.assert_not_terminated()?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        if let Some(existing_fd) = parse_dev_fd_path(path)? {
-            {
-                let tables = lock_or_recover(&self.fd_tables);
-                let table = tables
-                    .get(pid)
-                    .ok_or_else(|| KernelError::no_such_process(pid))?;
-                table
-                    .get(existing_fd)
-                    .ok_or_else(|| KernelError::bad_file_descriptor(existing_fd))?;
-            }
-            self.resources
-                .check_fd_allocation(&self.resource_snapshot(), 1)?;
-            let mut tables = lock_or_recover(&self.fd_tables);
-            let table = tables
-                .get_mut(pid)
-                .ok_or_else(|| KernelError::no_such_process(pid))?;
-            let entry = table
-                .get(existing_fd)
-                .cloned()
-                .ok_or_else(|| KernelError::bad_file_descriptor(existing_fd))?;
-            return Ok(table.dup_with_status_flags(
-                existing_fd,
-                Some(entry.status_flags | (flags & O_NONBLOCK)),
-            )?);
-        }
-
-        if let Some(proc_node) = self.resolve_proc_node(path, Some(pid))? {
-            if open_requires_write_access(flags) {
-                self.filesystem
-                    .check_virtual_path(FsOperation::Write, path)
-                    .map_err(KernelError::from)?;
-                return Err(read_only_filesystem_error(path));
-            }
-
-            if matches!(
-                proc_node,
-                ProcNode::SelfLink { .. }
-                    | ProcNode::PidCwdLink { .. }
-                    | ProcNode::PidFdLink { .. }
-            ) {
-                let target = self.proc_symlink_target(&proc_node)?;
-                return self.fd_open(requester_driver, pid, &target, flags, mode);
-            }
-
-            self.filesystem
-                .check_virtual_path(FsOperation::Read, path)
-                .map_err(KernelError::from)?;
-            self.resources
-                .check_fd_allocation(&self.resource_snapshot(), 1)?;
-            let mut tables = lock_or_recover(&self.fd_tables);
-            let table = tables
-                .get_mut(pid)
-                .ok_or_else(|| KernelError::no_such_process(pid))?;
-            return Ok(table.open_with_details(
-                &self.proc_canonical_path(&proc_node),
-                flags,
-                proc_filetype(&proc_node),
-                None,
-            )?);
-        }
-
-        if open_requires_write_access(flags) {
-            self.reject_read_only_resolved_write_path(path)?;
-        }
-        let existed = if flags & O_CREAT != 0 {
-            self.exists_internal(Some(pid), path)?
-        } else {
-            false
-        };
-        let (filetype, lock_target) = self.prepare_fd_open(path, flags, mode)?;
-        if flags & O_CREAT != 0 && !existed {
-            let umask = self.processes.get_umask(pid)?;
-            self.apply_creation_mode(path, mode.unwrap_or(0o666), umask)?;
-        }
-        self.resources
-            .check_fd_allocation(&self.resource_snapshot(), 1)?;
-        let mut tables = lock_or_recover(&self.fd_tables);
-        let table = tables
-            .get_mut(pid)
-            .ok_or_else(|| KernelError::no_such_process(pid))?;
-        Ok(table.open_with_details(path, flags, filetype, lock_target)?)
-    }
-
-    pub fn fd_read(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-        length: usize,
-    ) -> KernelResult<Vec<u8>> {
-        Ok(self
-            .fd_read_with_timeout_result(requester_driver, pid, fd, length, None)?
-            .unwrap_or_default())
-    }
-
-    pub fn fd_read_with_timeout_result(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-        length: usize,
-        timeout: Option<Duration>,
-    ) -> KernelResult<Option<Vec<u8>>> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        let entry = {
-            let tables = lock_or_recover(&self.fd_tables);
-            tables
-                .get(pid)
-                .and_then(|table| table.get(fd))
-                .cloned()
-                .ok_or_else(|| KernelError::bad_file_descriptor(fd))?
-        };
-
-        if self.pipes.is_pipe(entry.description.id()) {
-            return Ok(self.pipes.read_with_timeout(
-                entry.description.id(),
-                length,
-                if entry.status_flags & O_NONBLOCK != 0 {
-                    Some(Duration::ZERO)
-                } else {
-                    timeout.or_else(|| self.blocking_read_timeout())
-                },
-            )?);
-        }
-
-        if self.ptys.is_pty(entry.description.id()) {
-            return Ok(self.ptys.read_with_timeout(
-                entry.description.id(),
-                length,
-                if entry.status_flags & O_NONBLOCK != 0 {
-                    Some(Duration::ZERO)
-                } else {
-                    timeout.or_else(|| self.blocking_read_timeout())
-                },
-            )?);
-        }
-
-        self.resources.check_pread_length(length)?;
-
-        if is_proc_path(entry.description.path()) {
-            let bytes = self.proc_read_file_from_open_path(Some(pid), entry.description.path())?;
-            let start = entry.description.cursor() as usize;
-            let end = start.saturating_add(length).min(bytes.len());
-            let chunk = if start >= bytes.len() {
-                Vec::new()
-            } else {
-                bytes[start..end].to_vec()
-            };
-            entry.description.set_cursor(
-                entry
-                    .description
-                    .cursor()
-                    .saturating_add(chunk.len() as u64),
-            );
-            return Ok(Some(chunk));
-        }
-
-        let cursor = entry.description.cursor();
-        let bytes = VirtualFileSystem::pread(
-            &mut self.filesystem,
-            entry.description.path(),
-            cursor,
-            length,
-        )?;
-        entry
-            .description
-            .set_cursor(cursor.saturating_add(bytes.len() as u64));
-        Ok(Some(bytes))
-    }
-
-    pub fn fd_write(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-        data: &[u8],
-    ) -> KernelResult<usize> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.resources.check_fd_write_size(data.len())?;
-        let entry = {
-            let tables = lock_or_recover(&self.fd_tables);
-            tables
-                .get(pid)
-                .and_then(|table| table.get(fd))
-                .cloned()
-                .ok_or_else(|| KernelError::bad_file_descriptor(fd))?
-        };
-
-        if self.pipes.is_pipe(entry.description.id()) {
-            return match self.pipes.write_with_mode(
-                entry.description.id(),
-                data,
-                entry.status_flags & O_NONBLOCK != 0,
-            ) {
-                Ok(bytes) => Ok(bytes),
-                Err(error) => {
-                    if error.code() == "EPIPE" {
-                        self.processes.kill(pid as i32, SIGPIPE)?;
-                    }
-                    Err(error.into())
-                }
-            };
-        }
-
-        if self.ptys.is_pty(entry.description.id()) {
-            return Ok(self.ptys.write(entry.description.id(), data)?);
-        }
-
-        self.reject_read_only_resolved_write_path(entry.description.path())?;
-
-        let path = entry.description.path().to_owned();
-        if is_virtual_device_storage_path(&path) {
-            VirtualFileSystem::write_file(&mut self.filesystem, &path, data.to_vec())?;
-            let cursor = entry.description.cursor();
-            entry
-                .description
-                .set_cursor(cursor.saturating_add(data.len() as u64));
-            return Ok(data.len());
-        }
-        let current_size = self.current_storage_file_size(&path)?;
-        let cursor = entry.description.cursor();
-        if entry.description.flags() & O_APPEND != 0 {
-            let required_size = current_size.max(checked_write_end(current_size, data.len())?);
-            self.check_path_resize_limits(&path, required_size)?;
-            let new_len = VirtualFileSystem::append_file(&mut self.filesystem, &path, data)?;
-            self.update_filesystem_usage_cache_for_resize(current_size, new_len);
-            entry.description.set_cursor(new_len);
-            return Ok(data.len());
-        }
-
-        let required_size = current_size.max(checked_write_end(cursor, data.len())?);
-        self.check_path_resize_limits(&path, required_size)?;
-        VirtualFileSystem::pwrite(&mut self.filesystem, &path, data, cursor)?;
-        self.update_filesystem_usage_cache_for_resize(current_size, required_size);
-        entry
-            .description
-            .set_cursor(cursor.saturating_add(data.len() as u64));
-        Ok(data.len())
-    }
-
-    pub fn poll_fds(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        fds: Vec<PollFd>,
-        timeout_ms: i32,
-    ) -> KernelResult<PollResult> {
-        let targets = fds
-            .into_iter()
-            .map(|poll_fd| PollTargetEntry::fd(poll_fd.fd, poll_fd.events))
-            .collect::<Vec<_>>();
-        let result = self.poll_targets(requester_driver, pid, targets, timeout_ms)?;
-        Ok(PollResult {
-            ready_count: result.ready_count,
-            fds: result
-                .targets
-                .into_iter()
-                .map(|target| match target.target {
-                    PollTarget::Fd(fd) => PollFd {
-                        fd,
-                        events: target.events,
-                        revents: target.revents,
-                    },
-                    PollTarget::Socket(_) => unreachable!("fd poll should only include fd targets"),
-                })
-                .collect(),
-        })
-    }
-
-    /// A cloneable, Send handle for waiting on kernel poll-state changes off
-    /// the kernel owner's thread. Pair with a zero-timeout `poll_fds` /
-    /// `fd_read_with_timeout_result` re-check on the owning thread.
-    pub fn poll_wait_handle(&self) -> crate::poll::PollWaitHandle {
-        crate::poll::PollWaitHandle::new(self.poll_notifier.clone())
-    }
-
-    pub fn poll_targets(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        mut targets: Vec<PollTargetEntry>,
-        timeout_ms: i32,
-    ) -> KernelResult<PollTargetResult> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        if timeout_ms < -1 {
-            return Err(KernelError::new(
-                "EINVAL",
-                format!("invalid poll timeout {timeout_ms}"),
-            ));
-        }
-
-        let timeout = if timeout_ms < 0 {
-            None
-        } else {
-            Some(Duration::from_millis(timeout_ms as u64))
-        };
-        let deadline = timeout.map(|duration| Instant::now() + duration);
-
-        loop {
-            let observed_generation = self.poll_notifier.snapshot();
-            let ready_count = self.populate_poll_target_revents(pid, &mut targets)?;
-            if ready_count > 0 || matches!(timeout, Some(duration) if duration.is_zero()) {
-                return Ok(PollTargetResult {
-                    ready_count,
-                    targets,
-                });
-            }
-
-            let remaining = deadline.map(|target| target.saturating_duration_since(Instant::now()));
-            if matches!(remaining, Some(duration) if duration.is_zero()) {
-                return Ok(PollTargetResult {
-                    ready_count,
-                    targets,
-                });
-            }
-
-            if !self
-                .poll_notifier
-                .wait_for_change(observed_generation, remaining)
-            {
-                return Ok(PollTargetResult {
-                    ready_count,
-                    targets,
-                });
-            }
-        }
-    }
-
-    pub fn fd_seek(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-        offset: i64,
-        whence: u8,
-    ) -> KernelResult<u64> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        let entry = {
-            let tables = lock_or_recover(&self.fd_tables);
-            tables
-                .get(pid)
-                .and_then(|table| table.get(fd))
-                .cloned()
-                .ok_or_else(|| KernelError::bad_file_descriptor(fd))?
-        };
-
-        if self.pipes.is_pipe(entry.description.id()) || self.ptys.is_pty(entry.description.id()) {
-            return Err(KernelError::new("ESPIPE", "illegal seek"));
-        }
-
-        let base = match whence {
-            SEEK_SET => 0_i128,
-            SEEK_CUR => i128::from(entry.description.cursor()),
-            SEEK_END => {
-                let size = if is_proc_path(entry.description.path()) {
-                    self.proc_stat_from_open_path(Some(pid), entry.description.path())?
-                        .size
-                } else {
-                    self.filesystem.stat(entry.description.path())?.size
-                };
-                i128::from(size)
-            }
-            _ => {
-                return Err(KernelError::new(
-                    "EINVAL",
-                    format!("invalid whence {whence}"),
-                ));
-            }
-        };
-        let next = base + i128::from(offset);
-        if next < 0 {
-            return Err(KernelError::new("EINVAL", "negative seek position"));
-        }
-        let next = u64::try_from(next)
-            .map_err(|_| KernelError::new("EINVAL", "seek position out of range"))?;
-        entry.description.set_cursor(next);
-        Ok(next)
-    }
-
-    pub fn fd_pread(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-        length: usize,
-        offset: u64,
-    ) -> KernelResult<Vec<u8>> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.resources.check_pread_length(length)?;
-        let entry = {
-            let tables = lock_or_recover(&self.fd_tables);
-            tables
-                .get(pid)
-                .and_then(|table| table.get(fd))
-                .cloned()
-                .ok_or_else(|| KernelError::bad_file_descriptor(fd))?
-        };
-
-        if self.pipes.is_pipe(entry.description.id()) || self.ptys.is_pty(entry.description.id()) {
-            return Err(KernelError::new("ESPIPE", "illegal seek"));
-        }
-
-        if is_proc_path(entry.description.path()) {
-            let bytes = self.proc_read_file_from_open_path(Some(pid), entry.description.path())?;
-            let start = usize::try_from(offset)
-                .map_err(|_| KernelError::new("EINVAL", "pread offset out of range"))?;
-            let end = start.saturating_add(length).min(bytes.len());
-            return Ok(if start >= bytes.len() {
-                Vec::new()
-            } else {
-                bytes[start..end].to_vec()
-            });
-        }
-
-        Ok(VirtualFileSystem::pread(
-            &mut self.filesystem,
-            entry.description.path(),
-            offset,
-            length,
-        )?)
-    }
-
-    pub fn fd_pwrite(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-        data: &[u8],
-        offset: u64,
-    ) -> KernelResult<usize> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.resources.check_fd_write_size(data.len())?;
-        let entry = {
-            let tables = lock_or_recover(&self.fd_tables);
-            tables
-                .get(pid)
-                .and_then(|table| table.get(fd))
-                .cloned()
-                .ok_or_else(|| KernelError::bad_file_descriptor(fd))?
-        };
-
-        if self.pipes.is_pipe(entry.description.id()) || self.ptys.is_pty(entry.description.id()) {
-            return Err(KernelError::new("ESPIPE", "illegal seek"));
-        }
-
-        self.reject_read_only_resolved_write_path(entry.description.path())?;
-
-        let current_size = self.current_storage_file_size(entry.description.path())?;
-        let required_size = current_size.max(checked_write_end(offset, data.len())?);
-        self.check_path_resize_limits(entry.description.path(), required_size)?;
-        VirtualFileSystem::pwrite(
-            &mut self.filesystem,
-            entry.description.path(),
-            data.to_vec(),
-            offset,
-        )?;
-        self.update_filesystem_usage_cache_for_resize(current_size, required_size);
-        Ok(data.len())
-    }
-
-    pub fn fd_dup(&mut self, requester_driver: &str, pid: u32, fd: u32) -> KernelResult<u32> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        {
-            let tables = lock_or_recover(&self.fd_tables);
-            let table = tables
-                .get(pid)
-                .ok_or_else(|| KernelError::no_such_process(pid))?;
-            table
-                .get(fd)
-                .ok_or_else(|| KernelError::bad_file_descriptor(fd))?;
-        }
-        self.resources
-            .check_fd_allocation(&self.resource_snapshot(), 1)?;
-        let mut tables = lock_or_recover(&self.fd_tables);
-        let table = tables
-            .get_mut(pid)
-            .ok_or_else(|| KernelError::no_such_process(pid))?;
-        Ok(table.dup(fd)?)
-    }
-
-    pub fn fd_dup2(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        old_fd: u32,
-        new_fd: u32,
-    ) -> KernelResult<()> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        let (replaced, needs_fd_growth) = {
-            let tables = lock_or_recover(&self.fd_tables);
-            let table = tables
-                .get(pid)
-                .ok_or_else(|| KernelError::no_such_process(pid))?;
-            table
-                .get(old_fd)
-                .ok_or_else(|| KernelError::bad_file_descriptor(old_fd))?;
-            let replaced = if old_fd == new_fd {
-                None
-            } else {
-                table.get(new_fd).cloned()
-            };
-            if new_fd as usize >= table.max_fds() {
-                return Err(KernelError::bad_file_descriptor(new_fd));
-            }
-            let needs_fd_growth = old_fd != new_fd && replaced.is_none();
-            (replaced, needs_fd_growth)
-        };
-        if needs_fd_growth {
-            self.resources
-                .check_fd_allocation(&self.resource_snapshot(), 1)?;
-        }
-        {
-            let mut tables = lock_or_recover(&self.fd_tables);
-            let table = tables
-                .get_mut(pid)
-                .ok_or_else(|| KernelError::no_such_process(pid))?;
-            table.dup2(old_fd, new_fd)?;
-        }
-
-        if let Some(entry) = replaced {
-            self.close_special_resource_if_needed(&entry.description, entry.filetype);
-        }
-        Ok(())
-    }
-
-    pub fn fd_close(&mut self, requester_driver: &str, pid: u32, fd: u32) -> KernelResult<()> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        let (description, filetype) = {
-            let mut tables = lock_or_recover(&self.fd_tables);
-            let table = tables
-                .get_mut(pid)
-                .ok_or_else(|| KernelError::no_such_process(pid))?;
-            let entry = table
-                .get(fd)
-                .cloned()
-                .ok_or_else(|| KernelError::bad_file_descriptor(fd))?;
-            table.close(fd);
-            (entry.description, entry.filetype)
-        };
-        self.close_special_resource_if_needed(&description, filetype);
-        Ok(())
-    }
-
-    pub fn fd_fcntl(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-        command: u32,
-        arg: u32,
-    ) -> KernelResult<u32> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        if command == F_DUPFD {
-            {
-                let tables = lock_or_recover(&self.fd_tables);
-                let table = tables
-                    .get(pid)
-                    .ok_or_else(|| KernelError::no_such_process(pid))?;
-                table
-                    .get(fd)
-                    .ok_or_else(|| KernelError::bad_file_descriptor(fd))?;
-                if arg as usize >= table.max_fds() {
-                    return Err(KernelError::new(
-                        "EINVAL",
-                        format!("fd {arg} exceeds process fd limit"),
-                    ));
-                }
-            }
-            self.resources
-                .check_fd_allocation(&self.resource_snapshot(), 1)?;
-        }
-        let mut tables = lock_or_recover(&self.fd_tables);
-        let table = tables
-            .get_mut(pid)
-            .ok_or_else(|| KernelError::no_such_process(pid))?;
-        let result = table.fcntl(fd, command, arg)?;
-        if command == F_DUPFD {
-            self.poll_notifier.notify();
-        }
-        Ok(result)
-    }
-
-    pub fn fd_flock(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-        operation: u32,
-    ) -> KernelResult<()> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        let entry = {
-            let tables = lock_or_recover(&self.fd_tables);
-            tables
-                .get(pid)
-                .and_then(|table| table.get(fd))
-                .cloned()
-                .ok_or_else(|| KernelError::bad_file_descriptor(fd))?
-        };
-
-        if entry.filetype != FILETYPE_REGULAR_FILE {
-            return Err(KernelError::new(
-                "EBADF",
-                format!("file descriptor {fd} does not support advisory locking"),
-            ));
-        }
-
-        let target = entry.description.lock_target().ok_or_else(|| {
-            KernelError::new(
-                "EBADF",
-                format!("file descriptor {fd} is missing advisory lock metadata"),
-            )
-        })?;
-        let operation = FlockOperation::from_bits(operation)?;
-        self.file_locks
-            .apply(entry.description.id(), target, operation)?;
-        Ok(())
-    }
-
-    pub fn fd_stat(&self, requester_driver: &str, pid: u32, fd: u32) -> KernelResult<FdStat> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        let tables = lock_or_recover(&self.fd_tables);
-        Ok(tables
-            .get(pid)
-            .ok_or_else(|| KernelError::no_such_process(pid))?
-            .stat(fd)?)
-    }
-
-    pub fn fd_path(&self, requester_driver: &str, pid: u32, fd: u32) -> KernelResult<String> {
-        let description = self.description_for_fd(requester_driver, pid, fd)?;
-        Ok(description.path().to_owned())
-    }
-
-    pub fn isatty(&self, requester_driver: &str, pid: u32, fd: u32) -> KernelResult<bool> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        let entry = {
-            let tables = lock_or_recover(&self.fd_tables);
-            tables
-                .get(pid)
-                .and_then(|table| table.get(fd))
-                .cloned()
-                .ok_or_else(|| KernelError::bad_file_descriptor(fd))?
-        };
-        Ok(self.ptys.is_slave(entry.description.id()))
-    }
-
-    pub fn pty_window_size(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-    ) -> KernelResult<PtyWindowSize> {
-        let description = self.description_for_fd(requester_driver, pid, fd)?;
-        Ok(self.ptys.window_size(description.id())?)
-    }
-
-    pub fn pty_set_discipline(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-        config: LineDisciplineConfig,
-    ) -> KernelResult<()> {
-        let description = self.description_for_fd(requester_driver, pid, fd)?;
-        self.ptys.set_discipline(description.id(), config)?;
-        Ok(())
-    }
-
-    pub fn pty_set_foreground_pgid(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-        pgid: u32,
-    ) -> KernelResult<()> {
-        let description = self.description_for_fd(requester_driver, pid, fd)?;
-        let requester_sid = self.processes.getsid(pid)?;
-        let group = self
-            .processes
-            .list_processes()
-            .into_values()
-            .find(|process| process.pgid == pgid && process.status != ProcessStatus::Exited)
-            .ok_or_else(|| KernelError::new("ESRCH", format!("no such process group {pgid}")))?;
-        if group.sid != requester_sid {
-            return Err(KernelError::permission_denied(
-                "cannot set foreground process group in different session",
-            ));
-        }
-        self.ptys.set_foreground_pgid(description.id(), pgid)?;
-        Ok(())
-    }
-
-    pub fn tcgetattr(&self, requester_driver: &str, pid: u32, fd: u32) -> KernelResult<Termios> {
-        let description = self.description_for_fd(requester_driver, pid, fd)?;
-        Ok(self.ptys.get_termios(description.id())?)
-    }
-
-    pub fn tcsetattr(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-        termios: PartialTermios,
-    ) -> KernelResult<()> {
-        let description = self.description_for_fd(requester_driver, pid, fd)?;
-        self.ptys.set_termios(description.id(), termios)?;
-        Ok(())
-    }
-
-    pub fn tcgetpgrp(&self, requester_driver: &str, pid: u32, fd: u32) -> KernelResult<u32> {
-        let description = self.description_for_fd(requester_driver, pid, fd)?;
-        Ok(self.ptys.get_foreground_pgid(description.id())?)
-    }
-
-    pub fn pty_resize(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-        cols: u16,
-        rows: u16,
-    ) -> KernelResult<()> {
-        let description = self.description_for_fd(requester_driver, pid, fd)?;
-        let target_pgid = self.ptys.resize(description.id(), cols, rows)?;
-        if let Some(pgid) = target_pgid {
-            match self.processes.kill(-(pgid as i32), SIGWINCH) {
-                Ok(()) => {}
-                Err(error) if error.code() == "ESRCH" => {}
-                Err(error) => return Err(error.into()),
-            }
-        }
-        Ok(())
-    }
-
-    pub fn signal_process(
-        &self,
-        requester_driver: &str,
-        pid: i32,
-        signal: i32,
-    ) -> KernelResult<()> {
-        if pid < 0 {
-            let pgid = pid.unsigned_abs();
-            let members = self
-                .processes
-                .list_processes()
-                .into_values()
-                .filter(|process| process.pgid == pgid && process.status != ProcessStatus::Exited)
-                .collect::<Vec<_>>();
-            if members.is_empty() {
-                self.processes.kill(pid, signal)?;
-                return Ok(());
-            }
-            if let Some(process) = members
-                .iter()
-                .find(|process| process.driver != requester_driver)
-            {
-                return Err(KernelError::permission_denied(format!(
-                    "driver \"{requester_driver}\" does not own process group {pgid} containing PID {}",
-                    process.pid
-                )));
-            }
-            self.processes.kill(pid, signal)?;
-            return Ok(());
-        }
-
-        let pid = u32::try_from(pid)
-            .map_err(|_| KernelError::new("EINVAL", format!("invalid pid {pid}")))?;
-        self.assert_driver_owns(requester_driver, pid)?;
-        self.processes.kill(pid as i32, signal)?;
-        Ok(())
-    }
-
-    pub fn kill_process(&self, requester_driver: &str, pid: u32, signal: i32) -> KernelResult<()> {
-        let pid = i32::try_from(pid)
-            .map_err(|_| KernelError::new("EINVAL", format!("pid {pid} exceeds i32::MAX")))?;
-        self.signal_process(requester_driver, pid, signal)
-    }
-
-    pub fn setpgid(&self, requester_driver: &str, pid: u32, pgid: u32) -> KernelResult<()> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        let target_pgid = if pgid == 0 { pid } else { pgid };
-        if target_pgid != pid {
-            if let Some(group_owner) =
-                self.processes
-                    .list_processes()
-                    .into_values()
-                    .find(|process| {
-                        process.pgid == target_pgid && process.status == ProcessStatus::Running
-                    })
-            {
-                if group_owner.driver != requester_driver {
-                    return Err(KernelError::permission_denied(format!(
-                        "driver \"{requester_driver}\" cannot join process group {target_pgid} owned by \"{}\"",
-                        group_owner.driver
-                    )));
-                }
-            }
-        }
-        self.processes.setpgid(pid, pgid)?;
-        Ok(())
-    }
-
-    pub fn getpgid(&self, requester_driver: &str, pid: u32) -> KernelResult<u32> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        Ok(self.processes.getpgid(pid)?)
-    }
-
-    pub fn getpid(&self, requester_driver: &str, pid: u32) -> KernelResult<u32> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        Ok(pid)
-    }
-
-    pub fn sigprocmask(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        how: SigmaskHow,
-        set: SignalSet,
-    ) -> KernelResult<SignalSet> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        Ok(self.processes.sigprocmask(pid, how, set)?)
-    }
-
-    pub fn sigpending(&self, requester_driver: &str, pid: u32) -> KernelResult<SignalSet> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        Ok(self.processes.sigpending(pid)?)
-    }
-
-    pub fn getppid(&self, requester_driver: &str, pid: u32) -> KernelResult<u32> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        Ok(self.processes.getppid(pid)?)
-    }
-
-    pub fn setsid(&self, requester_driver: &str, pid: u32) -> KernelResult<u32> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        Ok(self.processes.setsid(pid)?)
-    }
-
-    pub fn getsid(&self, requester_driver: &str, pid: u32) -> KernelResult<u32> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        Ok(self.processes.getsid(pid)?)
-    }
-
-    pub fn dev_fd_read_dir(&self, requester_driver: &str, pid: u32) -> KernelResult<Vec<String>> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        let tables = lock_or_recover(&self.fd_tables);
-        let table = tables
-            .get(pid)
-            .ok_or_else(|| KernelError::no_such_process(pid))?;
-        let entry_count = table.len();
-        self.resources.check_readdir_entries(entry_count)?;
-        Ok(table.iter().map(|entry| entry.fd.to_string()).collect())
-    }
-
-    pub fn dev_fd_stat(
-        &mut self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-    ) -> KernelResult<VirtualStat> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        let entry = {
-            let tables = lock_or_recover(&self.fd_tables);
-            tables
-                .get(pid)
-                .and_then(|table| table.get(fd))
-                .cloned()
-                .ok_or_else(|| KernelError::bad_file_descriptor(fd))?
-        };
-
-        if self.pipes.is_pipe(entry.description.id()) || self.ptys.is_pty(entry.description.id()) {
-            return Ok(synthetic_character_device_stat(entry.description.id()));
-        }
-
-        if is_proc_path(entry.description.path()) {
-            return self.proc_stat_from_open_path(Some(pid), entry.description.path());
-        }
-
-        Ok(self.filesystem.stat(entry.description.path())?)
-    }
-
-    pub fn dispose(&mut self) -> KernelResult<()> {
-        if self.terminated {
-            return Ok(());
-        }
-
-        dispose_kernel_vm_resources(self);
-        Ok(())
-    }
-
-    fn prepare_fd_open(
-        &mut self,
-        path: &str,
-        flags: u32,
-        mode: Option<u32>,
-    ) -> KernelResult<(u8, Option<FileLockTarget>)> {
-        if open_requires_write_access(flags) {
-            self.reject_read_only_resolved_write_path(path)?;
-        }
-
-        if flags & O_CREAT != 0 && flags & O_EXCL != 0 {
-            self.check_write_file_limits(path, 0)?;
-            VirtualFileSystem::create_file_exclusive_with_mode(
-                &mut self.filesystem,
-                path,
-                Vec::new(),
-                mode,
-            )?;
-            self.update_filesystem_usage_cache_for_inode_create(0);
-            let stat = VirtualFileSystem::stat(&mut self.filesystem, path)?;
-            return Ok((
-                filetype_for_path(path, &stat),
-                Some(FileLockTarget::new(stat.ino)),
-            ));
-        }
-
-        let exists = self.filesystem.exists(path)?;
-        if exists {
-            if flags & O_TRUNC != 0 {
-                let existing_size = self.current_storage_file_size(path)?;
-                self.check_path_resize_limits_with_existing(existing_size, 0)?;
-                VirtualFileSystem::truncate(&mut self.filesystem, path, 0)?;
-                self.update_filesystem_usage_cache_for_resize(existing_size, 0);
-            }
-        } else if flags & O_CREAT != 0 {
-            self.check_write_file_limits(path, 0)?;
-            VirtualFileSystem::write_file_with_mode(&mut self.filesystem, path, Vec::new(), mode)?;
-            self.update_filesystem_usage_cache_for_inode_create(0);
-        } else {
-            let _ = VirtualFileSystem::stat(&mut self.filesystem, path)?;
-            unreachable!("stat should return an error when opening a missing path");
-        }
-
-        let stat = VirtualFileSystem::stat(&mut self.filesystem, path)?;
-        Ok((
-            filetype_for_path(path, &stat),
-            Some(FileLockTarget::new(stat.ino)),
-        ))
-    }
-
-    fn reject_read_only_write_path(&mut self, path: &str) -> KernelResult<()> {
-        if is_proc_path(path) {
-            self.filesystem
-                .check_virtual_path(FsOperation::Write, path)
-                .map_err(KernelError::from)?;
-            return Err(read_only_filesystem_error(path));
-        }
-
-        if is_agentos_path(path) {
-            return Err(read_only_filesystem_error(path));
-        }
-
-        Ok(())
-    }
-
-    fn reject_read_only_resolved_write_path(&mut self, path: &str) -> KernelResult<()> {
-        self.reject_read_only_write_path(path)?;
-
-        if let Some(resolved) = self.resolve_write_guard_path(path, true)? {
-            if is_agentos_path(&resolved) {
-                return Err(read_only_filesystem_error(&resolved));
-            }
-            if self.has_agentos_hardlink_alias(&resolved)? {
-                return Err(read_only_filesystem_error(&resolved));
-            }
-        }
-        if self.has_agentos_hardlink_alias(path)? {
-            return Err(read_only_filesystem_error(path));
-        }
-
-        Ok(())
-    }
-
-    fn reject_read_only_entry_write_path(&mut self, path: &str) -> KernelResult<()> {
-        self.reject_read_only_write_path(path)?;
-
-        if let Some(resolved) = self.resolve_write_guard_path(path, false)? {
-            if is_agentos_path(&resolved) {
-                return Err(read_only_filesystem_error(&resolved));
-            }
-            if self.has_agentos_hardlink_alias(&resolved)? {
-                return Err(read_only_filesystem_error(&resolved));
-            }
-        }
-        if self.has_agentos_hardlink_alias(path)? {
-            return Err(read_only_filesystem_error(path));
-        }
-
-        Ok(())
-    }
-
-    fn has_agentos_hardlink_alias(&mut self, path: &str) -> KernelResult<bool> {
-        let Some(target) = self.storage_lstat(path)? else {
-            return Ok(false);
-        };
-        if target.is_directory || target.is_symbolic_link {
-            return Ok(false);
-        }
-
-        self.agentos_subtree_contains_inode("/etc/agentos", target.dev, target.ino)
-    }
-
-    fn agentos_subtree_contains_inode(
-        &mut self,
-        path: &str,
-        target_dev: u64,
-        target_ino: u64,
-    ) -> KernelResult<bool> {
-        let Some(stat) = self.storage_lstat(path)? else {
-            return Ok(false);
-        };
-        if !stat.is_directory && !stat.is_symbolic_link {
-            return Ok(stat.dev == target_dev && stat.ino == target_ino);
-        }
-        if !stat.is_directory {
-            return Ok(false);
-        }
-
-        let children = self.raw_filesystem_mut().read_dir_with_types(path)?;
-        for child in children {
-            if child.name == "." || child.name == ".." {
-                continue;
-            }
-            let child_path = join_absolute_path(path, &child.name);
-            if self.agentos_subtree_contains_inode(&child_path, target_dev, target_ino)? {
-                return Ok(true);
-            }
-        }
-
-        Ok(false)
-    }
-
-    fn resolve_write_guard_path(
-        &mut self,
-        path: &str,
-        follow_final_symlink: bool,
-    ) -> KernelResult<Option<String>> {
-        let normalized = normalize_path(path);
-        if normalized == "/" {
-            return Ok(Some(normalized));
-        }
-
-        if follow_final_symlink {
-            if let Ok(resolved) = self.filesystem.realpath(&normalized) {
-                return Ok(Some(resolved));
-            }
-        }
-
-        let components: Vec<&str> = normalized
-            .split('/')
-            .filter(|component| !component.is_empty())
-            .collect();
-        let mut resolved_prefix = String::from("/");
-        let mut raw_prefix = String::from("/");
-
-        for (index, component) in components.iter().enumerate() {
-            let is_final = index + 1 == components.len();
-            if is_final && !follow_final_symlink {
-                return Ok(Some(join_absolute_path(&resolved_prefix, component)));
-            }
-
-            raw_prefix = join_absolute_path(&raw_prefix, component);
-            match self.filesystem.realpath(&raw_prefix) {
-                Ok(resolved) => {
-                    resolved_prefix = resolved;
-                }
-                Err(error) if error.code() == "ENOENT" => {
-                    let mut resolved = resolved_prefix;
-                    for remaining in &components[index..] {
-                        resolved = join_absolute_path(&resolved, remaining);
-                    }
-                    return Ok(Some(resolved));
-                }
-                Err(error) => return Err(error.into()),
-            }
-        }
-
-        Ok(Some(resolved_prefix))
-    }
-
-    fn populate_poll_target_revents(
-        &self,
-        pid: u32,
-        targets: &mut [PollTargetEntry],
-    ) -> KernelResult<usize> {
-        let mut ready_count = 0;
-        for target in targets.iter_mut() {
-            target.revents = self.poll_target_entry(pid, target.target, target.events)?;
-            if !target.revents.is_empty() {
-                ready_count += 1;
-            }
-        }
-
-        Ok(ready_count)
-    }
-
-    fn poll_target_entry(
-        &self,
-        pid: u32,
-        target: PollTarget,
-        requested: PollEvents,
-    ) -> KernelResult<PollEvents> {
-        match target {
-            PollTarget::Fd(fd) => {
-                let entry = {
-                    let tables = lock_or_recover(&self.fd_tables);
-                    tables
-                        .get(pid)
-                        .ok_or_else(|| KernelError::no_such_process(pid))?
-                        .get(fd)
-                        .cloned()
-                };
-                if let Some(entry) = entry {
-                    self.poll_entry(&entry, requested)
-                } else {
-                    Ok(POLLNVAL)
-                }
-            }
-            PollTarget::Socket(socket_id) => {
-                let socket = self.sockets.get(socket_id);
-                if let Some(socket) = socket {
-                    if socket.owner_pid() != pid {
-                        return Err(KernelError::permission_denied(format!(
-                            "process {pid} does not own socket {socket_id}"
-                        )));
-                    }
-                    let mut events = self.sockets.poll(socket_id, requested)?;
-                    if events.intersects(POLLOUT)
-                        && !self.socket_pollout_has_resource_capacity(&socket)
-                    {
-                        events = PollEvents::from_bits(events.bits() & !POLLOUT.bits());
-                    }
-                    Ok(events)
-                } else {
-                    Ok(POLLNVAL)
-                }
-            }
-        }
-    }
-
-    fn socket_pollout_has_resource_capacity(&self, socket: &SocketRecord) -> bool {
-        let snapshot = self.resource_snapshot();
-        if self
-            .resources
-            .limits()
-            .max_socket_buffered_bytes
-            .is_some_and(|limit| snapshot.socket_buffered_bytes >= limit)
-        {
-            return false;
-        }
-
-        if socket.spec().socket_type == SocketType::Datagram
-            && self
-                .resources
-                .limits()
-                .max_socket_datagram_queue_len
-                .is_some_and(|limit| snapshot.socket_datagram_queue_len >= limit)
-        {
-            return false;
-        }
-
-        true
-    }
-
-    fn poll_entry(
-        &self,
-        entry: &crate::fd_table::FdEntry,
-        requested: PollEvents,
-    ) -> KernelResult<PollEvents> {
-        if self.pipes.is_pipe(entry.description.id()) {
-            return Ok(self.pipes.poll(entry.description.id(), requested)?);
-        }
-
-        if self.ptys.is_pty(entry.description.id()) {
-            return Ok(self.ptys.poll(entry.description.id(), requested)?);
-        }
-
-        let access_mode = entry.description.flags() & 0b11;
-        let mut events = PollEvents::empty();
-        if requested.intersects(POLLIN) && access_mode != crate::fd_table::O_WRONLY {
-            events |= POLLIN;
-        }
-        if requested.intersects(POLLOUT) && access_mode != crate::fd_table::O_RDONLY {
-            events |= POLLOUT;
-        }
-        if entry.filetype == FILETYPE_DIRECTORY && requested.intersects(POLLOUT) {
-            events |= POLLERR;
-        }
-        if self.terminated {
-            events |= POLLHUP;
-        }
-        Ok(events)
-    }
-
-    fn description_for_fd(
-        &self,
-        requester_driver: &str,
-        pid: u32,
-        fd: u32,
-    ) -> KernelResult<Arc<FileDescription>> {
-        self.assert_driver_owns(requester_driver, pid)?;
-        lock_or_recover(&self.fd_tables)
-            .get(pid)
-            .and_then(|table| table.get(fd))
-            .map(|entry| Arc::clone(&entry.description))
-            .ok_or_else(|| KernelError::bad_file_descriptor(fd))
-    }
-
-    fn assert_not_terminated(&self) -> KernelResult<()> {
-        if self.terminated {
-            Err(KernelError::disposed())
-        } else {
-            Ok(())
-        }
-    }
-
-    fn assert_driver_owns(&self, requester_driver: &str, pid: u32) -> KernelResult<()> {
-        let driver_pids = lock_or_recover(&self.driver_pids);
-        if driver_pids
-            .get(requester_driver)
-            .map(|pids| pids.contains(&pid))
-            .unwrap_or(false)
-        {
-            return Ok(());
-        }
-
-        if driver_pids.values().any(|pids| pids.contains(&pid)) {
-            return Err(KernelError::permission_denied(format!(
-                "driver \"{requester_driver}\" does not own PID {pid}"
-            )));
-        }
-
-        Err(KernelError::no_such_process(pid))
-    }
-
-    fn cleanup_process_resources(&self, pid: u32) {
-        cleanup_process_resources(
-            self.fd_tables.as_ref(),
-            &self.file_locks,
-            &self.pipes,
-            &self.ptys,
-            &self.sockets,
-            self.driver_pids.as_ref(),
-            pid,
-        );
-    }
-
-    fn resolve_spawn_command(
-        &mut self,
-        command: &str,
-        args: &[String],
-        cwd: &str,
-    ) -> KernelResult<ResolvedSpawnCommand> {
-        if let Some(driver) = self.commands.resolve(command).cloned() {
-            return Ok(ResolvedSpawnCommand {
-                command: command.to_owned(),
-                args: args.to_vec(),
-                driver,
-            });
-        }
-
-        let Some(path) = self.resolve_executable_path(command, cwd)? else {
-            return Err(KernelError::command_not_found(command));
-        };
-
-        if let Some(registered_command) = self.resolve_registered_command_path(&path) {
-            let driver = self
-                .commands
-                .resolve(&registered_command)
-                .cloned()
-                .ok_or_else(|| KernelError::command_not_found(&registered_command))?;
-            return Ok(ResolvedSpawnCommand {
-                command: registered_command,
-                args: args.to_vec(),
-                driver,
-            });
-        }
-
-        let shebang = self
-            .parse_shebang_command(&path)?
-            .ok_or_else(|| KernelError::new("ENOEXEC", format!("exec format error: {path}")))?;
-        self.resolve_shebang_command(&path, args, shebang)
-    }
-
-    fn resolve_executable_path(
-        &mut self,
-        command: &str,
-        cwd: &str,
-    ) -> KernelResult<Option<String>> {
-        if !command.contains('/') {
-            return Ok(None);
-        }
-
-        let path = if command.starts_with('/') {
-            normalize_path(command)
-        } else {
-            normalize_path(&format!("{cwd}/{command}"))
-        };
-        // exec(2) follows symlinks, and a symlink target may live in a different
-        // mount (e.g. `/opt/agentos/bin/<cmd>` is its own single-symlink mount
-        // pointing into a package tar mount). Resolve the real path before
-        // stat-ing / reading the executable so cross-mount symlinked commands
-        // exec their real target instead of failing to read the symlink node.
-        let path = self.filesystem.realpath(&path).unwrap_or(path);
-        let stat = self.filesystem.stat(&path)?;
-        if stat.is_directory {
-            return Err(KernelError::new(
-                "EACCES",
-                format!("permission denied, execute '{path}'"),
-            ));
-        }
-        if stat.mode & EXECUTABLE_PERMISSION_BITS == 0 {
-            return Err(KernelError::new(
-                "EACCES",
-                format!("permission denied, execute '{path}'"),
-            ));
-        }
-        Ok(Some(path))
-    }
-
-    fn resolve_registered_command_path(&self, path: &str) -> Option<String> {
-        let normalized = normalize_path(path);
-        for prefix in ["/bin/", "/usr/bin/", "/usr/local/bin/"] {
-            let Some(name) = normalized.strip_prefix(prefix) else {
-                continue;
-            };
-            if !name.is_empty() && !name.contains('/') && self.commands.resolve(name).is_some() {
-                return Some(name.to_owned());
-            }
-        }
-
-        if let Some(name) = normalized
-            .strip_prefix("/__secure_exec/commands/")
-            .and_then(|suffix| suffix.rsplit('/').next())
-        {
-            if !name.is_empty() && !name.contains('/') && self.commands.resolve(name).is_some() {
-                return Some(name.to_owned());
-            }
-        }
-
-        None
-    }
-
-    fn parse_shebang_command(&mut self, path: &str) -> KernelResult<Option<ShebangCommand>> {
-        let header = self.filesystem.pread(path, 0, SHEBANG_LINE_MAX_BYTES + 1)?;
-        if !header.starts_with(b"#!") {
-            return Ok(None);
-        }
-
-        let line_end = match header.iter().position(|byte| *byte == b'\n') {
-            Some(index) => index,
-            None if header.len() <= SHEBANG_LINE_MAX_BYTES => header.len(),
-            None => {
-                return Err(KernelError::new(
-                    "ENOEXEC",
-                    format!("shebang line exceeds {SHEBANG_LINE_MAX_BYTES} bytes: {path}"),
-                ));
-            }
-        };
-        let line = header[2..line_end]
-            .strip_suffix(b"\r")
-            .unwrap_or(&header[2..line_end]);
-        let text = std::str::from_utf8(line)
-            .map_err(|_| KernelError::new("ENOEXEC", format!("invalid shebang line: {path}")))?;
-        let mut parts = text.split_ascii_whitespace();
-        let interpreter = parts
-            .next()
-            .ok_or_else(|| KernelError::new("ENOEXEC", format!("invalid shebang line: {path}")))?;
-        Ok(Some(ShebangCommand {
-            interpreter: interpreter.to_owned(),
-            args: parts.map(ToOwned::to_owned).collect(),
-        }))
-    }
-
-    fn resolve_shebang_command(
-        &self,
-        path: &str,
-        args: &[String],
-        shebang: ShebangCommand,
-    ) -> KernelResult<ResolvedSpawnCommand> {
-        let mut interpreter_args = shebang.args;
-        let interpreter = normalize_path(&shebang.interpreter);
-        let command = if interpreter == "/usr/bin/env" || interpreter == "/bin/env" {
-            if interpreter_args.is_empty() {
-                return Err(KernelError::new(
-                    "ENOENT",
-                    format!("missing interpreter after /usr/bin/env in shebang: {path}"),
-                ));
-            }
-            interpreter_args.remove(0)
-        } else if let Some(command) = self.resolve_registered_command_path(&interpreter) {
-            command
-        } else if self.commands.resolve(&shebang.interpreter).is_some() {
-            shebang.interpreter
-        } else {
-            return Err(KernelError::command_not_found(&shebang.interpreter));
-        };
-
-        let driver = self
-            .commands
-            .resolve(&command)
-            .cloned()
-            .ok_or_else(|| KernelError::command_not_found(&command))?;
-        let mut resolved_args = interpreter_args;
-        resolved_args.push(path.to_owned());
-        resolved_args.extend(args.iter().cloned());
-        Ok(ResolvedSpawnCommand {
-            command,
-            args: resolved_args,
-            driver,
-        })
-    }
-
-    fn finish_waitpid_event(&mut self, result: ProcessWaitResult) -> WaitPidEventResult {
-        if result.event == WaitPidEvent::Exited {
-            self.cleanup_process_resources(result.pid);
-        }
-        WaitPidEventResult {
-            pid: result.pid,
-            status: result.status,
-            event: result.event,
-        }
-    }
-
-    fn raw_filesystem_mut(&mut self) -> &mut F {
-        self.filesystem.inner_mut().inner_mut()
-    }
-
-    fn read_file_internal(
-        &mut self,
-        current_pid: Option<u32>,
-        path: &str,
-    ) -> KernelResult<Vec<u8>> {
-        if let Some(proc_node) = self.resolve_proc_node(path, current_pid)? {
-            self.filesystem
-                .check_virtual_path(FsOperation::Read, path)
-                .map_err(KernelError::from)?;
-            return self.proc_read_file(current_pid, &proc_node);
-        }
-
-        Ok(self.filesystem.read_file(path)?)
-    }
-
-    fn effective_recursive_fs_depth(
-        &self,
-        requested_max_depth: Option<usize>,
-    ) -> KernelResult<usize> {
-        match (requested_max_depth, self.resources.max_recursive_fs_depth()) {
-            (Some(requested), Some(limit)) if requested > limit => Err(KernelError::new(
-                "EINVAL",
-                format!(
-                    "requested recursive filesystem max depth {requested} exceeds configured limit {limit}"
-                ),
-            )),
-            (Some(requested), _) => Ok(requested),
-            (None, Some(limit)) => Ok(limit),
-            (None, None) => Ok(usize::MAX),
-        }
-    }
-
-    fn copy_path_inner(
-        &mut self,
-        from: &str,
-        to: &str,
-        recursive: bool,
-        depth: usize,
-        entries: &mut usize,
-    ) -> KernelResult<()> {
-        self.resources.check_recursive_fs_depth(depth)?;
-        *entries = entries.saturating_add(1);
-        self.resources.check_recursive_fs_entries(*entries)?;
-        let source_stat = self.lstat_internal(None, from)?;
-
-        if source_stat.is_symbolic_link {
-            let target = self.read_link_internal(None, from)?;
-            self.symlink(&target, to)?;
-            return Ok(());
-        }
-
-        if source_stat.is_directory {
-            if !recursive {
-                return Err(KernelError::new(
-                    "EISDIR",
-                    format!("illegal operation on a directory, copy '{from}'"),
-                ));
-            }
-
-            let source_root = normalize_path(from);
-            let destination_root = normalize_path(to);
-            if destination_root.starts_with(&(source_root.clone() + "/")) {
-                return Err(KernelError::new(
-                    "EINVAL",
-                    format!("cannot copy '{from}' into its own descendant '{to}'"),
-                ));
-            }
-
-            self.mkdir(&parent_path(&destination_root), true)?;
-            if !self.exists_internal(None, &destination_root)? {
-                self.create_dir(&destination_root)?;
-            }
-            self.chmod(&destination_root, source_stat.mode)?;
-            self.chown(&destination_root, source_stat.uid, source_stat.gid)?;
-
-            let names = self.read_dir_internal(None, from)?;
-            self.resources.check_readdir_entries(names.len())?;
-            for name in names {
-                if matches!(name.as_str(), "." | "..") {
-                    continue;
-                }
-                let child_from = join_child_path(from, &name);
-                let child_to = join_child_path(to, &name);
-                self.copy_path_inner(
-                    &child_from,
-                    &child_to,
-                    true,
-                    depth.saturating_add(1),
-                    entries,
-                )?;
-            }
-            return Ok(());
-        }
-
-        let content = self.read_file_internal(None, from)?;
-        self.write_file(to, content)?;
-        self.chmod(to, source_stat.mode)?;
-        self.chown(to, source_stat.uid, source_stat.gid)
-    }
-
-    fn remove_path_inner(
-        &mut self,
-        path: &str,
-        recursive: bool,
-        depth: usize,
-        entries: &mut usize,
-    ) -> KernelResult<()> {
-        self.resources.check_recursive_fs_depth(depth)?;
-        *entries = entries.saturating_add(1);
-        self.resources.check_recursive_fs_entries(*entries)?;
-        let stat = self.lstat_internal(None, path)?;
-        if stat.is_directory && !stat.is_symbolic_link {
-            if recursive {
-                let names = self.read_dir_internal(None, path)?;
-                self.resources.check_readdir_entries(names.len())?;
-                for name in names {
-                    if matches!(name.as_str(), "." | "..") {
-                        continue;
-                    }
-                    let child = join_child_path(path, &name);
-                    self.remove_path_inner(&child, true, depth.saturating_add(1), entries)?;
-                }
-            }
-            return self.remove_dir(path);
-        }
-
-        self.remove_file(path)
-    }
-
-    fn exists_internal(&self, current_pid: Option<u32>, path: &str) -> KernelResult<bool> {
-        match self.resolve_proc_node(path, current_pid) {
-            Ok(Some(_)) => {
-                self.filesystem
-                    .check_virtual_path(FsOperation::Read, path)
-                    .map_err(KernelError::from)?;
-                Ok(true)
-            }
-            Ok(None) => Ok(self.filesystem.exists(path)?),
-            Err(error) if error.code() == "ENOENT" => Ok(false),
-            Err(error) => Err(error),
-        }
-    }
-
-    fn stat_internal(&mut self, current_pid: Option<u32>, path: &str) -> KernelResult<VirtualStat> {
-        if let Some(proc_node) = self.resolve_proc_node(path, current_pid)? {
-            self.filesystem
-                .check_virtual_path(FsOperation::Read, path)
-                .map_err(KernelError::from)?;
-            return self.proc_stat(current_pid, &proc_node);
-        }
-
-        Ok(self.filesystem.stat(path)?)
-    }
-
-    fn lstat_internal(&self, current_pid: Option<u32>, path: &str) -> KernelResult<VirtualStat> {
-        if let Some(proc_node) = self.resolve_proc_node(path, current_pid)? {
-            self.filesystem
-                .check_virtual_path(FsOperation::Read, path)
-                .map_err(KernelError::from)?;
-            return self.proc_lstat(&proc_node);
-        }
-
-        Ok(self.filesystem.lstat(path)?)
-    }
-
-    fn read_link_internal(&self, current_pid: Option<u32>, path: &str) -> KernelResult<String> {
-        if let Some(proc_node) = self.resolve_proc_node(path, current_pid)? {
-            self.filesystem
-                .check_virtual_path(FsOperation::Read, path)
-                .map_err(KernelError::from)?;
-            return self.proc_read_link(&proc_node);
-        }
-
-        Ok(self.filesystem.read_link(path)?)
-    }
-
-    fn read_dir_internal(
-        &mut self,
-        current_pid: Option<u32>,
-        path: &str,
-    ) -> KernelResult<Vec<String>> {
-        if let Some(proc_node) = self.resolve_proc_node(path, current_pid)? {
-            self.filesystem
-                .check_virtual_path(FsOperation::Read, path)
-                .map_err(KernelError::from)?;
-            return self.proc_read_dir(current_pid, &proc_node);
-        }
-
-        if let Some(limit) = self.resources.max_readdir_entries() {
-            Ok(self.filesystem.read_dir_limited(path, limit)?)
-        } else {
-            Ok(self.filesystem.read_dir(path)?)
-        }
-    }
-
-    fn read_dir_with_types_internal(
-        &mut self,
-        current_pid: Option<u32>,
-        path: &str,
-    ) -> KernelResult<Vec<VirtualDirEntry>> {
-        if let Some(proc_node) = self.resolve_proc_node(path, current_pid)? {
-            self.filesystem
-                .check_virtual_path(FsOperation::Read, path)
-                .map_err(KernelError::from)?;
-            return Ok(self
-                .proc_read_dir(current_pid, &proc_node)?
-                .into_iter()
-                .map(|name| VirtualDirEntry {
-                    name,
-                    is_directory: false,
-                    is_symbolic_link: false,
-                })
-                .collect());
-        }
-
-        Ok(self.filesystem.read_dir_with_types(path)?)
-    }
-
-    fn realpath_internal(&self, current_pid: Option<u32>, path: &str) -> KernelResult<String> {
-        if let Some(proc_node) = self.resolve_proc_node(path, current_pid)? {
-            self.filesystem
-                .check_virtual_path(FsOperation::Read, path)
-                .map_err(KernelError::from)?;
-            return self.proc_realpath(current_pid, &proc_node);
-        }
-
-        Ok(self.filesystem.realpath(path)?)
-    }
-
-    fn resolve_proc_node(
-        &self,
-        path: &str,
-        current_pid: Option<u32>,
-    ) -> KernelResult<Option<ProcNode>> {
-        let normalized = normalize_path(path);
-        if !is_proc_path(&normalized) {
-            return Ok(None);
-        }
-
-        if normalized == "/proc" {
-            return Ok(Some(ProcNode::RootDir));
-        }
-
-        let suffix = normalized
-            .strip_prefix("/proc/")
-            .expect("proc path should have /proc prefix");
-        let parts = suffix.split('/').collect::<Vec<_>>();
-        if parts.is_empty() {
-            return Ok(Some(ProcNode::RootDir));
-        }
-
-        let root_node = match parts.as_slice() {
-            ["mounts"] => Some(ProcNode::MountsFile),
-            ["cpuinfo"] => Some(ProcNode::CpuInfoFile),
-            ["meminfo"] => Some(ProcNode::MemInfoFile),
-            ["loadavg"] => Some(ProcNode::LoadAvgFile),
-            ["uptime"] => Some(ProcNode::UptimeFile),
-            ["version"] => Some(ProcNode::VersionFile),
-            _ => None,
-        };
-        if let Some(node) = root_node {
-            return Ok(Some(node));
-        }
-
-        let pid = match parts[0] {
-            "self" => current_pid.ok_or_else(|| proc_not_found_error(&normalized))?,
-            raw => raw
-                .parse::<u32>()
-                .map_err(|_| proc_not_found_error(&normalized))?,
-        };
-        self.proc_entry(pid)?;
-
-        let node = match parts.as_slice() {
-            ["self"] => ProcNode::SelfLink { pid },
-            [_pid] => ProcNode::PidDir { pid },
-            [_pid, "fd"] => ProcNode::PidFdDir { pid },
-            [_pid, "cmdline"] => ProcNode::PidCmdline { pid },
-            [_pid, "environ"] => ProcNode::PidEnviron { pid },
-            [_pid, "cwd"] => ProcNode::PidCwdLink { pid },
-            [_pid, "stat"] => ProcNode::PidStatFile { pid },
-            [_pid, "status"] => ProcNode::PidStatusFile { pid },
-            [_pid, "fd", fd] => {
-                let fd = fd
-                    .parse::<u32>()
-                    .map_err(|_| proc_not_found_error(&normalized))?;
-                self.proc_fd_entry(pid, fd)?;
-                ProcNode::PidFdLink { pid, fd }
-            }
-            _ => return Err(proc_not_found_error(&normalized)),
-        };
-
-        Ok(Some(node))
-    }
-
-    fn proc_entry(&self, pid: u32) -> KernelResult<crate::process_table::ProcessEntry> {
-        self.processes
-            .get(pid)
-            .ok_or_else(|| proc_not_found_error(&format!("/proc/{pid}")))
-    }
-
-    fn proc_fd_entry(&self, pid: u32, fd: u32) -> KernelResult<FdEntry> {
-        lock_or_recover(&self.fd_tables)
-            .get(pid)
-            .and_then(|table| table.get(fd))
-            .cloned()
-            .ok_or_else(|| proc_not_found_error(&format!("/proc/{pid}/fd/{fd}")))
-    }
-
-    fn proc_read_file(
-        &mut self,
-        current_pid: Option<u32>,
-        node: &ProcNode,
-    ) -> KernelResult<Vec<u8>> {
-        match node {
-            ProcNode::SelfLink { .. }
-            | ProcNode::PidCwdLink { .. }
-            | ProcNode::PidFdLink { .. } => {
-                let target = self.proc_symlink_target(node)?;
-                self.read_file_internal(current_pid, &target)
-            }
-            ProcNode::MountsFile => Ok(self.proc_mounts_bytes()),
-            ProcNode::CpuInfoFile => Ok(self.proc_cpuinfo_bytes()),
-            ProcNode::MemInfoFile => Ok(self.proc_meminfo_bytes()),
-            ProcNode::LoadAvgFile => Ok(self.proc_loadavg_bytes()),
-            ProcNode::UptimeFile => Ok(self.proc_uptime_bytes()),
-            ProcNode::VersionFile => Ok(self.proc_version_bytes()),
-            ProcNode::PidCmdline { pid } => Ok(self.proc_cmdline_bytes(*pid)),
-            ProcNode::PidEnviron { pid } => Ok(self.proc_environ_bytes(*pid)),
-            ProcNode::PidStatFile { pid } => Ok(self.proc_stat_bytes(*pid)),
-            ProcNode::PidStatusFile { pid } => Ok(self.proc_status_bytes(*pid)),
-            ProcNode::RootDir | ProcNode::PidDir { .. } | ProcNode::PidFdDir { .. } => {
-                Err(KernelError::new(
-                    "EISDIR",
-                    format!(
-                        "illegal operation on a directory, read '{}'",
-                        self.proc_canonical_path(node)
-                    ),
-                ))
-            }
-        }
-    }
-
-    fn proc_stat(
-        &mut self,
-        current_pid: Option<u32>,
-        node: &ProcNode,
-    ) -> KernelResult<VirtualStat> {
-        match node {
-            ProcNode::SelfLink { .. }
-            | ProcNode::PidCwdLink { .. }
-            | ProcNode::PidFdLink { .. } => {
-                let target = self.proc_symlink_target(node)?;
-                self.stat_internal(current_pid, &target)
-            }
-            _ => self.proc_lstat(node),
-        }
-    }
-
-    fn proc_lstat(&self, node: &ProcNode) -> KernelResult<VirtualStat> {
-        match node {
-            ProcNode::RootDir | ProcNode::PidDir { .. } | ProcNode::PidFdDir { .. } => {
-                Ok(proc_dir_stat(proc_inode(node)))
-            }
-            ProcNode::MountsFile => Ok(proc_file_stat(
-                proc_inode(node),
-                self.proc_mounts_bytes().len() as u64,
-            )),
-            ProcNode::CpuInfoFile => Ok(proc_file_stat(
-                proc_inode(node),
-                self.proc_cpuinfo_bytes().len() as u64,
-            )),
-            ProcNode::MemInfoFile => Ok(proc_file_stat(
-                proc_inode(node),
-                self.proc_meminfo_bytes().len() as u64,
-            )),
-            ProcNode::LoadAvgFile => Ok(proc_file_stat(
-                proc_inode(node),
-                self.proc_loadavg_bytes().len() as u64,
-            )),
-            ProcNode::UptimeFile => Ok(proc_file_stat(
-                proc_inode(node),
-                self.proc_uptime_bytes().len() as u64,
-            )),
-            ProcNode::VersionFile => Ok(proc_file_stat(
-                proc_inode(node),
-                self.proc_version_bytes().len() as u64,
-            )),
-            ProcNode::PidCmdline { pid } => Ok(proc_file_stat(
-                proc_inode(node),
-                self.proc_cmdline_bytes(*pid).len() as u64,
-            )),
-            ProcNode::PidEnviron { pid } => Ok(proc_file_stat(
-                proc_inode(node),
-                self.proc_environ_bytes(*pid).len() as u64,
-            )),
-            ProcNode::PidStatFile { pid } => Ok(proc_file_stat(
-                proc_inode(node),
-                self.proc_stat_bytes(*pid).len() as u64,
-            )),
-            ProcNode::PidStatusFile { pid } => Ok(proc_file_stat(
-                proc_inode(node),
-                self.proc_status_bytes(*pid).len() as u64,
-            )),
-            ProcNode::SelfLink { .. }
-            | ProcNode::PidCwdLink { .. }
-            | ProcNode::PidFdLink { .. } => Ok(proc_symlink_stat(
-                proc_inode(node),
-                self.proc_read_link(node)?.len() as u64,
-            )),
-        }
-    }
-
-    fn proc_read_link(&self, node: &ProcNode) -> KernelResult<String> {
-        match node {
-            ProcNode::SelfLink { .. }
-            | ProcNode::PidCwdLink { .. }
-            | ProcNode::PidFdLink { .. } => self.proc_symlink_target(node),
-            _ => Err(KernelError::new(
-                "EINVAL",
-                format!(
-                    "invalid argument, readlink '{}'",
-                    self.proc_canonical_path(node)
-                ),
-            )),
-        }
-    }
-
-    fn proc_read_dir(
-        &mut self,
-        current_pid: Option<u32>,
-        node: &ProcNode,
-    ) -> KernelResult<Vec<String>> {
-        match node {
-            ProcNode::SelfLink { .. }
-            | ProcNode::PidCwdLink { .. }
-            | ProcNode::PidFdLink { .. } => {
-                let target = self.proc_symlink_target(node)?;
-                self.read_dir_internal(current_pid, &target)
-            }
-            ProcNode::RootDir => {
-                let mut entries = self
-                    .processes
-                    .list_processes()
-                    .keys()
-                    .map(|pid| pid.to_string())
-                    .collect::<Vec<_>>();
-                entries.push(String::from("cpuinfo"));
-                entries.push(String::from("loadavg"));
-                entries.push(String::from("meminfo"));
-                entries.push(String::from("mounts"));
-                entries.push(String::from("self"));
-                entries.push(String::from("uptime"));
-                entries.push(String::from("version"));
-                entries.sort();
-                Ok(entries)
-            }
-            ProcNode::PidDir { .. } => Ok(vec![
-                String::from("cmdline"),
-                String::from("cwd"),
-                String::from("environ"),
-                String::from("fd"),
-                String::from("stat"),
-                String::from("status"),
-            ]),
-            ProcNode::PidFdDir { pid } => {
-                let tables = lock_or_recover(&self.fd_tables);
-                let table = tables
-                    .get(*pid)
-                    .ok_or_else(|| proc_not_found_error(&format!("/proc/{pid}/fd")))?;
-                Ok(table.iter().map(|entry| entry.fd.to_string()).collect())
-            }
-            _ => Err(KernelError::new(
-                "ENOTDIR",
-                format!(
-                    "not a directory, scandir '{}'",
-                    self.proc_canonical_path(node)
-                ),
-            )),
-        }
-    }
-
-    fn proc_realpath(&self, current_pid: Option<u32>, node: &ProcNode) -> KernelResult<String> {
-        match node {
-            ProcNode::SelfLink { .. }
-            | ProcNode::PidCwdLink { .. }
-            | ProcNode::PidFdLink { .. } => {
-                let target = self.proc_symlink_target(node)?;
-                self.realpath_internal(current_pid, &target)
-            }
-            _ => Ok(self.proc_canonical_path(node)),
-        }
-    }
-
-    fn proc_symlink_target(&self, node: &ProcNode) -> KernelResult<String> {
-        match node {
-            ProcNode::SelfLink { pid } => Ok(format!("/proc/{pid}")),
-            ProcNode::PidCwdLink { pid } => Ok(self.proc_entry(*pid)?.cwd),
-            ProcNode::PidFdLink { pid, fd } => {
-                Ok(self.proc_fd_entry(*pid, *fd)?.description.path().to_owned())
-            }
-            _ => Err(KernelError::new(
-                "EINVAL",
-                format!(
-                    "'{}' is not a symbolic link",
-                    self.proc_canonical_path(node)
-                ),
-            )),
-        }
-    }
-
-    fn proc_canonical_path(&self, node: &ProcNode) -> String {
-        match node {
-            ProcNode::RootDir => String::from("/proc"),
-            ProcNode::MountsFile => String::from("/proc/mounts"),
-            ProcNode::CpuInfoFile => String::from("/proc/cpuinfo"),
-            ProcNode::MemInfoFile => String::from("/proc/meminfo"),
-            ProcNode::LoadAvgFile => String::from("/proc/loadavg"),
-            ProcNode::UptimeFile => String::from("/proc/uptime"),
-            ProcNode::VersionFile => String::from("/proc/version"),
-            ProcNode::SelfLink { pid } => format!("/proc/{pid}"),
-            ProcNode::PidDir { pid } => format!("/proc/{pid}"),
-            ProcNode::PidFdDir { pid } => format!("/proc/{pid}/fd"),
-            ProcNode::PidCmdline { pid } => format!("/proc/{pid}/cmdline"),
-            ProcNode::PidEnviron { pid } => format!("/proc/{pid}/environ"),
-            ProcNode::PidCwdLink { pid } => format!("/proc/{pid}/cwd"),
-            ProcNode::PidStatFile { pid } => format!("/proc/{pid}/stat"),
-            ProcNode::PidStatusFile { pid } => format!("/proc/{pid}/status"),
-            ProcNode::PidFdLink { pid, fd } => format!("/proc/{pid}/fd/{fd}"),
-        }
-    }
-
-    fn proc_cmdline_bytes(&self, pid: u32) -> Vec<u8> {
-        let entry = self
-            .processes
-            .get(pid)
-            .expect("process must exist while procfs path is resolved");
-        let mut argv = vec![entry.command];
-        argv.extend(entry.args);
-        null_separated_bytes(argv)
-    }
-
-    fn proc_environ_bytes(&self, pid: u32) -> Vec<u8> {
-        let entry = self
-            .processes
-            .get(pid)
-            .expect("process must exist while procfs path is resolved");
-        null_separated_bytes(
-            entry
-                .env
-                .into_iter()
-                .map(|(key, value)| format!("{key}={value}"))
-                .collect(),
-        )
-    }
-
-    fn proc_stat_bytes(&self, pid: u32) -> Vec<u8> {
-        let entry = self
-            .processes
-            .get(pid)
-            .expect("process must exist while procfs path is resolved");
-        let command = entry.command.replace(')', "]");
-        let state = match entry.status {
-            ProcessStatus::Running => 'R',
-            ProcessStatus::Stopped => 'T',
-            ProcessStatus::Exited => 'Z',
-        };
-        format!(
-            "{pid} ({command}) {state} {ppid} {pgid} {sid} 0 0 0 0 0 0 0 0 0 0 20 0 1 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0 0",
-            ppid = entry.ppid,
-            pgid = entry.pgid,
-            sid = entry.sid,
-        )
-        .into_bytes()
-    }
-
-    fn proc_mounts_bytes(&self) -> Vec<u8> {
-        let mounts = if let Some(table) =
-            (self.filesystem.inner().inner() as &dyn Any).downcast_ref::<MountTable>()
-        {
-            table.get_mounts()
-        } else {
-            vec![MountEntry {
-                path: String::from("/"),
-                plugin_id: String::from("root"),
-                read_only: false,
-            }]
-        };
-
-        mounts
-            .into_iter()
-            .map(|mount| {
-                let options = if mount.read_only { "ro" } else { "rw" };
-                format!(
-                    "{source} {target} {fstype} {options} 0 0\n",
-                    source = mount.plugin_id,
-                    target = mount.path,
-                    fstype = mount.plugin_id,
-                )
-            })
-            .collect::<String>()
-            .into_bytes()
-    }
-
-    fn proc_cpu_count(&self) -> usize {
-        self.resource_limits().virtual_cpu_count.unwrap_or(1)
-    }
-
-    fn proc_cpuinfo_bytes(&self) -> Vec<u8> {
-        let mut body = String::new();
-        for processor in 0..self.proc_cpu_count() {
-            body.push_str(&format!(
-                "processor\t: {processor}\nmodel name\t: secure-exec Virtual CPU\ncpu MHz\t\t: 1000.000\nsiblings\t: 1\ncpu cores\t: 1\n\n"
-            ));
-        }
-        body.into_bytes()
-    }
-
-    fn proc_mem_total_bytes(&self) -> u64 {
-        self.resource_limits()
-            .max_wasm_memory_bytes
-            .or(self.resource_limits().max_filesystem_bytes)
-            .unwrap_or(DEFAULT_MAX_OPEN_FDS as u64 * 1024 * 1024)
-    }
-
-    fn proc_meminfo_bytes(&self) -> Vec<u8> {
-        let total_kb = self.proc_mem_total_bytes().div_ceil(1024);
-        let zero_kb = 0;
-        format!(
-            "MemTotal:{total_kb:>8} kB\nMemFree:{total_kb:>9} kB\nMemAvailable:{total_kb:>4} kB\nBuffers:{zero_kb:>9} kB\nCached:{zero_kb:>10} kB\n"
-        )
-        .into_bytes()
-    }
-
-    fn proc_loadavg_bytes(&self) -> Vec<u8> {
-        let processes = self.processes.list_processes();
-        let running = processes
-            .values()
-            .filter(|process| process.status == ProcessStatus::Running)
-            .count();
-        let total = processes.len().max(1);
-        let last_pid = processes.keys().next_back().copied().unwrap_or(0);
-        format!("0.00 0.00 0.00 {running}/{total} {last_pid}\n").into_bytes()
-    }
-
-    fn proc_uptime_bytes(&self) -> Vec<u8> {
-        let uptime = self.boot_instant.elapsed().as_secs_f64();
-        format!("{uptime:.2} {uptime:.2}\n").into_bytes()
-    }
-
-    fn proc_version_bytes(&self) -> Vec<u8> {
-        format!(
-            "Linux version 6.8.0-agentos (agentos@localhost) #1 SMP boot={}\n",
-            self.boot_time_ms
-        )
-        .into_bytes()
-    }
-
-    fn proc_status_bytes(&self, pid: u32) -> Vec<u8> {
-        let entry = self
-            .processes
-            .get(pid)
-            .expect("process must exist while procfs path is resolved");
-        let (state_code, state_name) = match entry.status {
-            ProcessStatus::Running => ('R', "running"),
-            ProcessStatus::Stopped => ('T', "stopped"),
-            ProcessStatus::Exited => ('Z', "zombie"),
-        };
-        format!(
-            "Name:\t{name}\nState:\t{state_code} ({state_name})\nPid:\t{pid}\nPPid:\t{ppid}\nUid:\t{uid}\t{euid}\t{euid}\t{euid}\nGid:\t{gid}\t{egid}\t{egid}\t{egid}\nVmSize:\t{:>8} kB\nVmRSS:\t{:>9} kB\nThreads:\t1\n",
-            0,
-            0,
-            name = entry.command,
-            ppid = entry.ppid,
-            uid = entry.identity.uid,
-            euid = entry.identity.euid,
-            gid = entry.identity.gid,
-            egid = entry.identity.egid,
-        )
-        .into_bytes()
-    }
-
-    fn proc_read_file_from_open_path(
-        &mut self,
-        current_pid: Option<u32>,
-        path: &str,
-    ) -> KernelResult<Vec<u8>> {
-        let node = self
-            .resolve_proc_node(path, current_pid)?
-            .ok_or_else(|| proc_not_found_error(path))?;
-        self.proc_read_file(current_pid, &node)
-    }
-
-    fn proc_stat_from_open_path(
-        &mut self,
-        current_pid: Option<u32>,
-        path: &str,
-    ) -> KernelResult<VirtualStat> {
-        let node = self
-            .resolve_proc_node(path, current_pid)?
-            .ok_or_else(|| proc_not_found_error(path))?;
-        self.proc_stat(current_pid, &node)
-    }
-
-    fn filesystem_usage(&mut self) -> KernelResult<FileSystemUsage> {
-        if let Some(usage) = self.filesystem_usage_cache.clone() {
-            return Ok(usage);
-        }
-        let filesystem = self.raw_filesystem_mut();
-        let filesystem_any = filesystem as &mut dyn Any;
-        let usage = if let Some(mount_table) = filesystem_any.downcast_mut::<MountTable>() {
-            mount_table.root_usage()?
-        } else {
-            measure_filesystem_usage(filesystem)?
-        };
-        self.filesystem_usage_cache = Some(usage.clone());
-        Ok(usage)
-    }
-
-    fn invalidate_filesystem_usage_cache(&mut self) {
-        self.filesystem_usage_cache = None;
-    }
-
-    fn update_filesystem_usage_cache_for_resize(&mut self, old_size: u64, new_size: u64) {
-        if let Some(usage) = self.filesystem_usage_cache.as_mut() {
-            usage.total_bytes = usage
-                .total_bytes
-                .saturating_sub(old_size)
-                .saturating_add(new_size);
-        }
-    }
-
-    fn update_filesystem_usage_cache_for_write(
-        &mut self,
-        existing: Option<&VirtualStat>,
-        new_size: u64,
-    ) {
-        if is_storage_directory(existing) {
-            return;
-        }
-
-        if let Some(stat) = existing {
-            self.update_filesystem_usage_cache_for_resize(stat.size, new_size);
-        } else {
-            self.update_filesystem_usage_cache_for_inode_create(new_size);
-        }
-    }
-
-    fn update_filesystem_usage_cache_for_inode_create(&mut self, size: u64) {
-        if let Some(usage) = self.filesystem_usage_cache.as_mut() {
-            usage.total_bytes = usage.total_bytes.saturating_add(size);
-            usage.inode_count = usage.inode_count.saturating_add(1);
-        }
-    }
-
-    fn update_filesystem_usage_cache_for_inode_creates(&mut self, count: usize) {
-        if count == 0 {
-            return;
-        }
-        if let Some(usage) = self.filesystem_usage_cache.as_mut() {
-            usage.inode_count = usage.inode_count.saturating_add(count);
-        }
-    }
-
-    fn update_filesystem_usage_cache_for_inode_delete(&mut self, size: u64) {
-        if let Some(usage) = self.filesystem_usage_cache.as_mut() {
-            usage.total_bytes = usage.total_bytes.saturating_sub(size);
-            usage.inode_count = usage.inode_count.saturating_sub(1);
-        }
-    }
-
-    fn update_filesystem_usage_cache_for_remove(&mut self, removed: Option<&VirtualStat>) {
-        let Some(stat) = removed else {
-            return;
-        };
-        if stat.is_directory || stat.nlink > 1 {
-            return;
-        }
-        self.update_filesystem_usage_cache_for_inode_delete(stat.size);
-    }
-
-    fn storage_stat(&mut self, path: &str) -> KernelResult<Option<VirtualStat>> {
-        if is_virtual_device_storage_path(path) {
-            return Ok(None);
-        }
-
-        match self.raw_filesystem_mut().stat(path) {
-            Ok(stat) => Ok(Some(stat)),
-            Err(error) if error.code() == "ENOENT" => Ok(None),
-            Err(error) => Err(error.into()),
-        }
-    }
-
-    fn storage_lstat(&mut self, path: &str) -> KernelResult<Option<VirtualStat>> {
-        if is_virtual_device_storage_path(path) {
-            return Ok(None);
-        }
-
-        match self.raw_filesystem_mut().lstat(path) {
-            Ok(stat) => Ok(Some(stat)),
-            Err(error) if error.code() == "ENOENT" => Ok(None),
-            Err(error) => Err(error.into()),
-        }
-    }
-
-    fn current_storage_file_size(&mut self, path: &str) -> KernelResult<u64> {
-        Ok(self
-            .storage_stat(path)?
-            .filter(|stat| !stat.is_directory)
-            .map(|stat| stat.size)
-            .unwrap_or(0))
-    }
-
-    fn apply_creation_mode(&mut self, path: &str, mode: u32, umask: u32) -> KernelResult<()> {
-        let masked_mode = (mode & !0o777) | ((mode & 0o777) & !(umask & 0o777));
-        Ok(self.filesystem.chmod(path, masked_mode)?)
-    }
-
-    fn missing_directory_paths(
-        &mut self,
-        path: &str,
-        recursive: bool,
-    ) -> KernelResult<Vec<String>> {
-        let normalized = normalize_path(path);
-        if normalized == "/" {
-            return Ok(Vec::new());
-        }
-
-        if !recursive {
-            return Ok(if self.storage_lstat(&normalized)?.is_none() {
-                vec![normalized]
-            } else {
-                Vec::new()
-            });
-        }
-
-        let mut created = Vec::new();
-        let mut current = String::from("/");
-        for component in normalized
-            .split('/')
-            .filter(|component| !component.is_empty())
-        {
-            current = if current == "/" {
-                format!("/{component}")
-            } else {
-                format!("{current}/{component}")
-            };
-            if self.storage_lstat(&current)?.is_none() {
-                created.push(current.clone());
-            }
-        }
-        Ok(created)
-    }
-
-    fn check_write_file_limits(&mut self, path: &str, new_size: u64) -> KernelResult<()> {
-        let existing = self.storage_stat(path)?;
-        self.check_write_file_limits_with_existing(path, existing.as_ref(), new_size)
-    }
-
-    fn check_write_file_limits_with_existing(
-        &mut self,
-        path: &str,
-        existing: Option<&VirtualStat>,
-        new_size: u64,
-    ) -> KernelResult<()> {
-        if is_virtual_device_storage_path(path) {
-            return Ok(());
-        }
-
-        if let Some(existing) = existing {
-            if is_storage_directory(Some(existing)) {
-                return Ok(());
-            }
-            if new_size <= existing.size {
-                return Ok(());
-            }
-
-            let usage = self.filesystem_usage()?;
-            self.resources.check_filesystem_usage(
-                &usage,
-                usage
-                    .total_bytes
-                    .saturating_sub(existing.size)
-                    .saturating_add(new_size),
-                usage.inode_count,
-            )?;
-            return Ok(());
-        }
-
-        let usage = self.filesystem_usage()?;
-        self.resources.check_filesystem_usage(
-            &usage,
-            usage.total_bytes.saturating_add(new_size),
-            usage.inode_count.saturating_add(1),
-        )?;
-        Ok(())
-    }
-
-    fn check_create_dir_limits(&mut self, path: &str) -> KernelResult<()> {
-        if is_virtual_device_storage_path(path) || self.storage_lstat(path)?.is_some() {
-            return Ok(());
-        }
-
-        let parent = parent_path(path);
-        let Some(parent_stat) = self.storage_stat(&parent)? else {
-            return Ok(());
-        };
-        if !parent_stat.is_directory {
-            return Ok(());
-        }
-
-        let usage = self.filesystem_usage()?;
-        self.resources.check_filesystem_usage(
-            &usage,
-            usage.total_bytes,
-            usage.inode_count.saturating_add(1),
-        )?;
-        Ok(())
-    }
-
-    fn check_mkdir_limits(&mut self, path: &str, recursive: bool) -> KernelResult<()> {
-        if is_virtual_device_storage_path(path) {
-            return Ok(());
-        }
-
-        if !recursive {
-            return self.check_create_dir_limits(path);
-        }
-
-        let usage = self.filesystem_usage()?;
-        let new_inodes = count_missing_directory_components(self.raw_filesystem_mut(), path, true)?;
-        self.resources.check_filesystem_usage(
-            &usage,
-            usage.total_bytes,
-            usage.inode_count.saturating_add(new_inodes),
-        )?;
-        Ok(())
-    }
-
-    fn check_symlink_limits(&mut self, target: &str, link_path: &str) -> KernelResult<()> {
-        if is_virtual_device_storage_path(link_path) || self.storage_lstat(link_path)?.is_some() {
-            return Ok(());
-        }
-
-        let parent = parent_path(link_path);
-        let Some(parent_stat) = self.storage_stat(&parent)? else {
-            return Ok(());
-        };
-        if !parent_stat.is_directory {
-            return Ok(());
-        }
-
-        let usage = self.filesystem_usage()?;
-        self.resources.check_filesystem_usage(
-            &usage,
-            usage.total_bytes.saturating_add(target.len() as u64),
-            usage.inode_count.saturating_add(1),
-        )?;
-        Ok(())
-    }
-
-    fn check_truncate_limits_with_existing(
-        &mut self,
-        path: &str,
-        existing: Option<&VirtualStat>,
-        length: u64,
-    ) -> KernelResult<()> {
-        if is_virtual_device_storage_path(path) {
-            return Ok(());
-        }
-
-        let Some(existing) = existing else {
-            return Ok(());
-        };
-        if is_storage_directory(Some(existing)) {
-            return Ok(());
-        }
-        self.check_path_resize_limits_with_existing(existing.size, length)
-    }
-
-    fn check_rename_copy_up_limits(&mut self, old_path: &str, new_path: &str) -> KernelResult<()> {
-        let max_bytes = self.resource_limits().max_filesystem_bytes;
-        let max_inodes = self.resource_limits().max_inode_count;
-        let filesystem_any = self.raw_filesystem_mut() as &mut dyn Any;
-
-        if let Some(root) = filesystem_any.downcast_mut::<RootFileSystem>() {
-            root.check_rename_copy_up_limits(old_path, new_path, max_bytes, max_inodes)?;
-            return Ok(());
-        }
-
-        if let Some(mount_table) = filesystem_any.downcast_mut::<MountTable>() {
-            mount_table.check_rename_copy_up_limits(old_path, new_path, max_bytes, max_inodes)?;
-        }
-
-        Ok(())
-    }
-
-    fn check_path_resize_limits(&mut self, path: &str, new_size: u64) -> KernelResult<()> {
-        if is_virtual_device_storage_path(path) {
-            return Ok(());
-        }
-
-        let Some(existing) = self.storage_stat(path)? else {
-            return Ok(());
-        };
-        if existing.is_directory {
-            return Ok(());
-        }
-        self.check_path_resize_limits_with_existing(existing.size, new_size)
-    }
-
-    fn check_path_resize_limits_with_existing(
-        &mut self,
-        existing_size: u64,
-        new_size: u64,
-    ) -> KernelResult<()> {
-        if new_size <= existing_size {
-            return Ok(());
-        }
-
-        let usage = self.filesystem_usage()?;
-        self.resources.check_filesystem_usage(
-            &usage,
-            usage
-                .total_bytes
-                .saturating_sub(existing_size)
-                .saturating_add(new_size),
-            usage.inode_count,
-        )?;
-        Ok(())
-    }
-
-    fn blocking_read_timeout(&self) -> Option<Duration> {
-        self.resources
-            .limits()
-            .max_blocking_read_ms
-            .map(Duration::from_millis)
-    }
-
-    fn close_special_resource_if_needed(&self, description: &Arc<FileDescription>, filetype: u8) {
-        close_special_resource_if_needed(
-            &self.file_locks,
-            &self.pipes,
-            &self.ptys,
-            description,
-            filetype,
-        );
-    }
-}
-
-impl KernelVm<MountTable> {
-    fn check_mount_permissions(&self, path: &str) -> KernelResult<()> {
-        self.filesystem
-            .check_path(FsOperation::Write, path)
-            .map_err(KernelError::from)?;
-        if is_sensitive_mount_path(path) {
-            self.filesystem
-                .check_path(FsOperation::MountSensitive, path)
-                .map_err(KernelError::from)?;
-        }
-        Ok(())
-    }
-
-    pub fn mount_filesystem(
-        &mut self,
-        path: &str,
-        filesystem: impl VirtualFileSystem + 'static,
-        options: MountOptions,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.check_mount_permissions(path)?;
-        self.filesystem
-            .inner_mut()
-            .inner_mut()
-            .mount(path, filesystem, options)
-            .map_err(KernelError::from)
-    }
-
-    pub fn mount_boxed_filesystem(
-        &mut self,
-        path: &str,
-        filesystem: Box<dyn MountedFileSystem>,
-        options: MountOptions,
-    ) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.check_mount_permissions(path)?;
-        self.filesystem
-            .inner_mut()
-            .inner_mut()
-            .mount_boxed(path, filesystem, options)
-            .map_err(KernelError::from)
-    }
-
-    pub fn unmount_filesystem(&mut self, path: &str) -> KernelResult<()> {
-        self.assert_not_terminated()?;
-        self.check_mount_permissions(path)?;
-        self.filesystem
-            .inner_mut()
-            .inner_mut()
-            .unmount(path)
-            .map_err(KernelError::from)
-    }
-
-    pub fn mounted_filesystems(&self) -> Vec<MountEntry> {
-        self.filesystem.inner().inner().get_mounts()
-    }
-
-    pub fn root_filesystem_mut(&mut self) -> Option<&mut RootFileSystem> {
-        self.filesystem
-            .inner_mut()
-            .inner_mut()
-            .root_virtual_filesystem_mut::<RootFileSystem>()
-    }
-
-    pub fn snapshot_root_filesystem(&mut self) -> KernelResult<RootFilesystemSnapshot> {
-        let usage = self.filesystem_usage()?;
-        self.resources
-            .check_filesystem_usage(&usage, usage.total_bytes, usage.inode_count)?;
-        let root = self
-            .root_filesystem_mut()
-            .ok_or_else(|| KernelError::new("EINVAL", "native root filesystem is not available"))?;
-        root.snapshot().map_err(KernelError::from)
-    }
-}
-
-#[derive(Default)]
-struct StubDriverState {
-    exit_code: Option<i32>,
-    on_exit: Option<ProcessExitCallback>,
-    kill_signals: Vec<i32>,
-}
-
-#[derive(Default)]
-struct StubDriverProcess {
-    state: Mutex<StubDriverState>,
-    waiters: Condvar,
-}
-
-impl StubDriverProcess {
-    fn finish(&self, exit_code: i32) {
-        let callback = {
-            let mut state = lock_or_recover(&self.state);
-            if state.exit_code.is_some() {
-                return;
-            }
-            state.exit_code = Some(exit_code);
-            self.waiters.notify_all();
-            state.on_exit.clone()
-        };
-
-        if let Some(callback) = callback {
-            callback(exit_code);
-        }
-    }
-
-    fn kill_signals(&self) -> Vec<i32> {
-        lock_or_recover(&self.state).kill_signals.clone()
-    }
-}
-
-impl DriverProcess for StubDriverProcess {
-    fn kill(&self, signal: i32) {
-        {
-            let mut state = lock_or_recover(&self.state);
-            state.kill_signals.push(signal);
-        }
-        if matches!(
-            signal,
-            crate::process_table::SIGCHLD | SIGCONT | SIGSTOP | SIGTSTP | SIGWINCH
-        ) {
-            return;
-        }
-        self.finish(128 + signal);
-    }
-
-    fn wait(&self, timeout: Duration) -> Option<i32> {
-        let state = lock_or_recover(&self.state);
-        if let Some(code) = state.exit_code {
-            return Some(code);
-        }
-
-        let (state, _) = wait_timeout_or_recover(&self.waiters, state, timeout);
-        state.exit_code
-    }
-
-    fn set_on_exit(&self, callback: ProcessExitCallback) {
-        let maybe_exit = {
-            let mut state = lock_or_recover(&self.state);
-            state.on_exit = Some(callback.clone());
-            state.exit_code
-        };
-
-        if let Some(code) = maybe_exit {
-            callback(code);
-        }
-    }
-}
-
-impl From<VfsError> for KernelError {
-    fn from(error: VfsError) -> Self {
-        map_error(error.code(), error.to_string())
-    }
-}
-
-fn lock_or_recover<'a, T>(mutex: &'a Mutex<T>) -> MutexGuard<'a, T> {
-    match mutex.lock() {
-        Ok(guard) => guard,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
-
-fn wait_timeout_or_recover<'a, T>(
-    condvar: &Condvar,
-    guard: MutexGuard<'a, T>,
-    timeout: Duration,
-) -> (MutexGuard<'a, T>, WaitTimeoutResult) {
-    match condvar.wait_timeout(guard, timeout) {
-        Ok(result) => result,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
-
-fn is_sensitive_mount_path(path: &str) -> bool {
-    let normalized = crate::vfs::normalize_path(path);
-    normalized == "/"
-        || normalized == "/etc"
-        || normalized.starts_with("/etc/")
-        || normalized == "/proc"
-        || normalized.starts_with("/proc/")
-}
-
-impl From<FdTableError> for KernelError {
-    fn from(error: FdTableError) -> Self {
-        map_error(error.code(), error.to_string())
-    }
-}
-
-impl From<PipeError> for KernelError {
-    fn from(error: PipeError) -> Self {
-        map_error(error.code(), error.to_string())
-    }
-}
-
-impl From<PtyError> for KernelError {
-    fn from(error: PtyError) -> Self {
-        map_error(error.code(), error.to_string())
-    }
-}
-
-impl From<ProcessTableError> for KernelError {
-    fn from(error: ProcessTableError) -> Self {
-        map_error(error.code(), error.to_string())
-    }
-}
-
-impl From<PermissionError> for KernelError {
-    fn from(error: PermissionError) -> Self {
-        map_error(error.code(), error.to_string())
-    }
-}
-
-impl From<ResourceError> for KernelError {
-    fn from(error: ResourceError) -> Self {
-        map_error(error.code(), error.to_string())
-    }
-}
-
-impl From<SocketTableError> for KernelError {
-    fn from(error: SocketTableError) -> Self {
-        map_error(error.code(), error.to_string())
-    }
-}
-
-impl From<RootFilesystemError> for KernelError {
-    fn from(error: RootFilesystemError) -> Self {
-        map_error("EINVAL", error.to_string())
-    }
-}
-
-fn map_dns_resolver_error(error: crate::dns::DnsResolverError) -> KernelError {
-    let code = match error.kind() {
-        DnsResolverErrorKind::InvalidInput => "EINVAL",
-        DnsResolverErrorKind::LookupFailed => "EHOSTUNREACH",
-    };
-    map_error(code, error.to_string())
-}
-
-fn map_error(code: &'static str, message: String) -> KernelError {
-    let trimmed = strip_error_prefix(code, &message)
-        .map(ToOwned::to_owned)
-        .unwrap_or(message);
-    KernelError::new(code, trimmed)
-}
-
-fn strip_error_prefix<'a>(code: &str, message: &'a str) -> Option<&'a str> {
-    let prefix = format!("{code}: ");
-    message.strip_prefix(&prefix)
-}
-
-fn parse_dev_fd_path(path: &str) -> KernelResult<Option<u32>> {
-    let Some(raw_fd) = path.strip_prefix("/dev/fd/") else {
-        return Ok(None);
-    };
-    if raw_fd.is_empty() {
-        return Err(KernelError::new(
-            "EBADF",
-            format!("bad file descriptor: {path}"),
-        ));
-    }
-    let fd = raw_fd
-        .parse::<u32>()
-        .map_err(|_| KernelError::new("EBADF", format!("bad file descriptor: {path}")))?;
-    Ok(Some(fd))
-}
-
-fn count_missing_directory_components<F: VirtualFileSystem>(
-    filesystem: &mut F,
-    path: &str,
-    include_final: bool,
-) -> VfsResult<usize> {
-    let normalized = normalize_path(path);
-    let parts = normalized
-        .split('/')
-        .filter(|part| !part.is_empty())
-        .collect::<Vec<_>>();
-    let limit = if include_final {
-        parts.len()
-    } else {
-        parts.len().saturating_sub(1)
-    };
-
-    let mut current = String::from("/");
-    for (index, part) in parts.iter().take(limit).enumerate() {
-        let candidate = if current == "/" {
-            format!("/{}", part)
-        } else {
-            format!("{current}/{}", part)
-        };
-
-        match filesystem.stat(&candidate) {
-            Ok(stat) => {
-                if !stat.is_directory {
-                    return Err(VfsError::new(
-                        "ENOTDIR",
-                        format!("not a directory, mkdir '{candidate}'"),
-                    ));
-                }
-                current = candidate;
-            }
-            Err(error) if error.code() == "ENOENT" => {
-                return Ok(limit.saturating_sub(index));
-            }
-            Err(error) => return Err(error),
-        }
-    }
-
-    Ok(0)
-}
-
-fn parent_path(path: &str) -> String {
-    let normalized = normalize_path(path);
-    let Some((head, _)) = normalized.rsplit_once('/') else {
-        return String::from("/");
-    };
-
-    if head.is_empty() {
-        String::from("/")
-    } else {
-        String::from(head)
-    }
-}
-
-fn join_absolute_path(parent: &str, child: &str) -> String {
-    if parent == "/" {
-        format!("/{child}")
-    } else {
-        format!("{parent}/{child}")
-    }
-}
-
-fn join_child_path(parent: &str, child: &str) -> String {
-    normalize_path(&join_absolute_path(parent, child))
-}
-
-fn is_virtual_device_storage_path(path: &str) -> bool {
-    matches!(
-        path,
-        "/dev/null" | "/dev/zero" | "/dev/stdin" | "/dev/stdout" | "/dev/stderr" | "/dev/urandom"
-    ) || path == "/dev"
-        || path == "/dev/fd"
-        || path == "/dev/pts"
-        || path.starts_with("/dev/fd/")
-        || path.starts_with("/dev/pts/")
-}
-
-fn is_storage_directory(stat: Option<&VirtualStat>) -> bool {
-    stat.is_some_and(|stat| stat.is_directory && !stat.is_symbolic_link)
-}
-
-fn is_proc_path(path: &str) -> bool {
-    let normalized = normalize_path(path);
-    normalized == "/proc" || normalized.starts_with("/proc/")
-}
-
-fn is_agentos_path(path: &str) -> bool {
-    let normalized = normalize_path(path);
-    normalized == "/etc/agentos" || normalized.starts_with("/etc/agentos/")
-}
-
-fn open_requires_write_access(flags: u32) -> bool {
-    flags & (O_CREAT | O_EXCL | O_TRUNC) != 0 || (flags & 0b11) != crate::fd_table::O_RDONLY
-}
-
-fn checked_write_end(offset: u64, len: usize) -> KernelResult<u64> {
-    offset
-        .checked_add(len as u64)
-        .ok_or_else(|| KernelError::new("EINVAL", "write offset out of range"))
-}
-
-fn filetype_for_path(path: &str, stat: &VirtualStat) -> u8 {
-    if stat.is_directory {
-        FILETYPE_DIRECTORY
-    } else if path.starts_with("/dev/") {
-        FILETYPE_CHARACTER_DEVICE
-    } else if stat.is_symbolic_link {
-        FILETYPE_SYMBOLIC_LINK
-    } else {
-        FILETYPE_REGULAR_FILE
-    }
-}
-
-fn synthetic_character_device_stat(ino: u64) -> VirtualStat {
-    let now = now_ms();
-    VirtualStat {
-        mode: 0o666,
-        size: 0,
-        blocks: 0,
-        dev: 2,
-        rdev: 0,
-        is_directory: false,
-        is_symbolic_link: false,
-        atime_ms: now,
-        atime_nsec: 0,
-        mtime_ms: now,
-        mtime_nsec: 0,
-        ctime_ms: now,
-        ctime_nsec: 0,
-        birthtime_ms: now,
-        ino,
-        nlink: 1,
-        uid: 0,
-        gid: 0,
-    }
-}
-
-fn proc_dir_stat(ino: u64) -> VirtualStat {
-    let now = now_ms();
-    VirtualStat {
-        mode: 0o555,
-        size: 0,
-        blocks: 0,
-        dev: 3,
-        rdev: 0,
-        is_directory: true,
-        is_symbolic_link: false,
-        atime_ms: now,
-        atime_nsec: 0,
-        mtime_ms: now,
-        mtime_nsec: 0,
-        ctime_ms: now,
-        ctime_nsec: 0,
-        birthtime_ms: now,
-        ino,
-        nlink: 2,
-        uid: 0,
-        gid: 0,
-    }
-}
-
-fn proc_file_stat(ino: u64, size: u64) -> VirtualStat {
-    let now = now_ms();
-    VirtualStat {
-        mode: 0o444,
-        size,
-        blocks: if size == 0 { 0 } else { size.div_ceil(512) },
-        dev: 3,
-        rdev: 0,
-        is_directory: false,
-        is_symbolic_link: false,
-        atime_ms: now,
-        atime_nsec: 0,
-        mtime_ms: now,
-        mtime_nsec: 0,
-        ctime_ms: now,
-        ctime_nsec: 0,
-        birthtime_ms: now,
-        ino,
-        nlink: 1,
-        uid: 0,
-        gid: 0,
-    }
-}
-
-fn proc_symlink_stat(ino: u64, size: u64) -> VirtualStat {
-    let now = now_ms();
-    VirtualStat {
-        mode: 0o777,
-        size,
-        blocks: if size == 0 { 0 } else { size.div_ceil(512) },
-        dev: 3,
-        rdev: 0,
-        is_directory: false,
-        is_symbolic_link: true,
-        atime_ms: now,
-        atime_nsec: 0,
-        mtime_ms: now,
-        mtime_nsec: 0,
-        ctime_ms: now,
-        ctime_nsec: 0,
-        birthtime_ms: now,
-        ino,
-        nlink: 1,
-        uid: 0,
-        gid: 0,
-    }
-}
-
-fn proc_filetype(node: &ProcNode) -> u8 {
-    match node {
-        ProcNode::RootDir | ProcNode::PidDir { .. } | ProcNode::PidFdDir { .. } => {
-            FILETYPE_DIRECTORY
-        }
-        ProcNode::SelfLink { .. } | ProcNode::PidCwdLink { .. } | ProcNode::PidFdLink { .. } => {
-            FILETYPE_SYMBOLIC_LINK
-        }
-        ProcNode::MountsFile
-        | ProcNode::CpuInfoFile
-        | ProcNode::MemInfoFile
-        | ProcNode::LoadAvgFile
-        | ProcNode::UptimeFile
-        | ProcNode::VersionFile
-        | ProcNode::PidCmdline { .. }
-        | ProcNode::PidEnviron { .. }
-        | ProcNode::PidStatFile { .. }
-        | ProcNode::PidStatusFile { .. } => FILETYPE_REGULAR_FILE,
-    }
-}
-
-fn proc_inode(node: &ProcNode) -> u64 {
-    match node {
-        ProcNode::RootDir => 0xfffe_0001,
-        ProcNode::MountsFile => 0xfffe_0002,
-        ProcNode::CpuInfoFile => 0xfffe_0003,
-        ProcNode::MemInfoFile => 0xfffe_0004,
-        ProcNode::LoadAvgFile => 0xfffe_0005,
-        ProcNode::UptimeFile => 0xfffe_0006,
-        ProcNode::VersionFile => 0xfffe_0007,
-        ProcNode::SelfLink { pid } => 0xfffe_1000 + u64::from(*pid),
-        ProcNode::PidDir { pid } => 0xfffe_2000 + u64::from(*pid),
-        ProcNode::PidFdDir { pid } => 0xfffe_3000 + u64::from(*pid),
-        ProcNode::PidCmdline { pid } => 0xfffe_4000 + u64::from(*pid),
-        ProcNode::PidEnviron { pid } => 0xfffe_5000 + u64::from(*pid),
-        ProcNode::PidCwdLink { pid } => 0xfffe_6000 + u64::from(*pid),
-        ProcNode::PidStatFile { pid } => 0xfffe_7000 + u64::from(*pid),
-        ProcNode::PidStatusFile { pid } => 0xfffe_8000 + u64::from(*pid),
-        ProcNode::PidFdLink { pid, fd } => 0xffff_0000 + ((u64::from(*pid)) << 8) + u64::from(*fd),
-    }
-}
-
-fn null_separated_bytes(parts: Vec<String>) -> Vec<u8> {
-    if parts.is_empty() {
-        return Vec::new();
-    }
-
-    let mut bytes = parts.join("\0").into_bytes();
-    bytes.push(0);
-    bytes
-}
-
-fn proc_not_found_error(path: &str) -> KernelError {
-    KernelError::new(
-        "ENOENT",
-        format!("no such file or directory, stat '{path}'"),
-    )
-}
-
-fn read_only_filesystem_error(path: &str) -> KernelError {
-    KernelError::new("EROFS", format!("read-only filesystem: {path}"))
-}
-
-fn now_ms() -> u64 {
-    SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .unwrap_or_default()
-        .as_millis() as u64
-}
-
-impl<F> Drop for KernelVm<F> {
-    fn drop(&mut self) {
-        if !self.terminated {
-            dispose_kernel_vm_resources(self);
-        }
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use crate::vfs::MemoryFileSystem;
-    use std::panic::{catch_unwind, AssertUnwindSafe};
-    use std::thread;
-
-    struct RetainedKernelResources {
-        process: KernelProcessHandle,
-        fd_tables: Arc<Mutex<FdTableManager>>,
-        pipes: PipeManager,
-        ptys: PtyManager,
-        sockets: SocketTable,
-        driver_pids: Arc<Mutex<BTreeMap<String, BTreeSet<u32>>>>,
-    }
-
-    fn kernel_with_live_resources() -> (KernelVm<MemoryFileSystem>, RetainedKernelResources) {
-        let mut config = KernelVmConfig::new("vm-drop-resources");
-        config.permissions = Permissions::allow_all();
-        let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-        kernel
-            .register_driver(CommandDriver::new("shell", ["sh"]))
-            .expect("register shell");
-
-        let process = kernel
-            .spawn_process(
-                "sh",
-                Vec::new(),
-                SpawnOptions {
-                    requester_driver: Some(String::from("shell")),
-                    ..SpawnOptions::default()
-                },
-            )
-            .expect("spawn shell");
-        let _ = kernel.open_pipe("shell", process.pid()).expect("open pipe");
-        let _ = kernel.open_pty("shell", process.pid()).expect("open pty");
-        let socket = kernel
-            .socket_create("shell", process.pid(), SocketSpec::tcp())
-            .expect("create socket");
-        kernel
-            .socket_set_state("shell", process.pid(), socket, SocketState::Listening)
-            .expect("mark listener");
-
-        let retained = RetainedKernelResources {
-            process: process.clone(),
-            fd_tables: Arc::clone(&kernel.fd_tables),
-            pipes: kernel.pipes.clone(),
-            ptys: kernel.ptys.clone(),
-            sockets: kernel.sockets.clone(),
-            driver_pids: Arc::clone(&kernel.driver_pids),
-        };
-
-        assert_eq!(lock_or_recover(retained.fd_tables.as_ref()).len(), 1);
-        assert_eq!(retained.pipes.pipe_count(), 1);
-        assert_eq!(retained.ptys.pty_count(), 1);
-        assert_eq!(retained.sockets.snapshot().sockets, 1);
-
-        (kernel, retained)
-    }
-
-    fn recursive_fs_kernel() -> KernelVm<MemoryFileSystem> {
-        let mut config = KernelVmConfig::new("vm-recursive-fs");
-        config.permissions = Permissions::allow_all();
-        KernelVm::new(MemoryFileSystem::new(), config)
-    }
-
-    #[test]
-    fn recursive_copy_preserves_tree_metadata_and_symlinks() {
-        let mut kernel = recursive_fs_kernel();
-        kernel
-            .mkdir("/src/nested", true)
-            .expect("create source dirs");
-        kernel
-            .write_file("/src/nested/file.txt", b"hello".to_vec())
-            .expect("write source file");
-        kernel
-            .chmod("/src/nested/file.txt", 0o640)
-            .expect("chmod source file");
-        kernel
-            .chown("/src/nested/file.txt", 42, 43)
-            .expect("chown source file");
-        kernel
-            .symlink("../nested/file.txt", "/src/link")
-            .expect("create source symlink");
-
-        kernel
-            .copy_path("/src", "/dst", true)
-            .expect("recursive copy");
-
-        assert_eq!(
-            kernel
-                .read_file("/dst/nested/file.txt")
-                .expect("read copied"),
-            b"hello".to_vec()
-        );
-        let copied = kernel.lstat("/dst/nested/file.txt").expect("stat copied");
-        assert_eq!(copied.mode & 0o777, 0o640);
-        assert_eq!((copied.uid, copied.gid), (42, 43));
-        let link = kernel.lstat("/dst/link").expect("lstat copied link");
-        assert!(link.is_symbolic_link);
-        assert_eq!(
-            kernel.read_link("/dst/link").expect("read copied link"),
-            "../nested/file.txt"
-        );
-    }
-
-    #[test]
-    fn recursive_remove_deletes_subtree_but_does_not_follow_symlinks() {
-        let mut kernel = recursive_fs_kernel();
-        kernel.mkdir("/tree/dir", true).expect("create tree");
-        kernel
-            .write_file("/tree/dir/file.txt", b"tree".to_vec())
-            .expect("write tree file");
-        kernel
-            .write_file("/outside.txt", b"outside".to_vec())
-            .expect("write outside file");
-        kernel
-            .symlink("/outside.txt", "/tree/link-out")
-            .expect("create symlink out of tree");
-
-        kernel.remove_path("/tree", true).expect("recursive remove");
-
-        assert!(!kernel.exists("/tree").expect("tree existence"));
-        assert_eq!(
-            kernel.read_file("/outside.txt").expect("outside survives"),
-            b"outside".to_vec()
-        );
-    }
-
-    #[test]
-    fn read_dir_recursive_respects_user_depth_and_reports_types() {
-        let mut kernel = recursive_fs_kernel();
-        kernel.mkdir("/root/a/b", true).expect("create deep tree");
-        kernel
-            .write_file("/root/a/file.txt", b"x".to_vec())
-            .expect("write file");
-        kernel
-            .symlink("a/file.txt", "/root/link")
-            .expect("create link");
-
-        let entries = kernel
-            .read_dir_recursive("/root", Some(0))
-            .expect("recursive listing");
-        assert_eq!(entries.len(), 2);
-        assert!(entries
-            .iter()
-            .any(|entry| entry.path == "/root/a" && entry.is_directory));
-        assert!(entries
-            .iter()
-            .any(|entry| entry.path == "/root/link" && entry.is_symbolic_link));
-        assert!(!entries.iter().any(|entry| entry.path == "/root/a/file.txt"));
-    }
-
-    #[test]
-    fn recursive_ops_enforce_depth_and_entry_bounds() {
-        let mut depth_config = KernelVmConfig::new("vm-recursive-depth-limit");
-        depth_config.permissions = Permissions::allow_all();
-        depth_config.resources = ResourceLimits {
-            max_recursive_fs_depth: Some(1),
-            ..ResourceLimits::default()
-        };
-        let mut depth_kernel = KernelVm::new(MemoryFileSystem::new(), depth_config);
-        depth_kernel
-            .mkdir("/root/a/b", true)
-            .expect("create deep tree");
-
-        let error = depth_kernel
-            .copy_path("/root", "/copy", true)
-            .expect_err("copy should hit depth limit");
-        assert_eq!(error.code(), "ENOMEM");
-        assert!(error.to_string().contains("depth 2"));
-
-        let mut entry_config = KernelVmConfig::new("vm-recursive-entry-limit");
-        entry_config.permissions = Permissions::allow_all();
-        entry_config.resources = ResourceLimits {
-            max_recursive_fs_entries: Some(2),
-            ..ResourceLimits::default()
-        };
-        let mut entry_kernel = KernelVm::new(MemoryFileSystem::new(), entry_config);
-        entry_kernel.mkdir("/root", true).expect("create root");
-        entry_kernel
-            .write_file("/root/a.txt", b"a".to_vec())
-            .expect("write a");
-        entry_kernel
-            .write_file("/root/b.txt", b"b".to_vec())
-            .expect("write b");
-        entry_kernel
-            .write_file("/root/c.txt", b"c".to_vec())
-            .expect("write c");
-
-        let error = entry_kernel
-            .read_dir_recursive("/root", None)
-            .expect_err("listing should hit entry limit");
-        assert_eq!(error.code(), "ENOMEM");
-        assert!(error.to_string().contains("3 entries"));
-    }
-
-    fn assert_kernel_drop_released_resources(retained: &RetainedKernelResources) {
-        assert_eq!(retained.process.wait(Duration::from_millis(50)), Some(143));
-        assert_eq!(retained.process.kill_signals(), vec![15]);
-        assert!(
-            lock_or_recover(retained.fd_tables.as_ref()).is_empty(),
-            "kernel drop should remove fd tables"
-        );
-        assert_eq!(
-            retained.pipes.pipe_count(),
-            0,
-            "kernel drop should close pipes"
-        );
-        assert_eq!(
-            retained.ptys.pty_count(),
-            0,
-            "kernel drop should close PTYs"
-        );
-        assert_eq!(
-            retained.sockets.snapshot().sockets,
-            0,
-            "kernel drop should reclaim sockets"
-        );
-        assert!(
-            lock_or_recover(retained.driver_pids.as_ref()).is_empty(),
-            "kernel drop should clear driver-owned pid tracking"
-        );
-    }
-
-    #[test]
-    fn setpgid_rejects_joining_a_process_group_owned_by_another_driver() {
-        let kernel = KernelVm::new(MemoryFileSystem::new(), KernelVmConfig::new("vm-setpgid"));
-
-        let leader_pid = kernel.processes.allocate_pid().expect("allocate pid");
-        kernel.processes.register(
-            leader_pid,
-            String::from("driver-a"),
-            String::from("sh"),
-            Vec::new(),
-            ProcessContext {
-                pid: leader_pid,
-                ppid: 0,
-                env: BTreeMap::new(),
-                cwd: String::from("/"),
-                umask: DEFAULT_PROCESS_UMASK,
-                fds: Default::default(),
-                identity: ProcessIdentity::default(),
-                blocked_signals: SignalSet::empty(),
-                pending_signals: SignalSet::empty(),
-            },
-            Arc::new(StubDriverProcess::default()),
-        );
-
-        let peer_pid = kernel.processes.allocate_pid().expect("allocate pid");
-        kernel.processes.register(
-            peer_pid,
-            String::from("driver-b"),
-            String::from("sh"),
-            Vec::new(),
-            ProcessContext {
-                pid: peer_pid,
-                ppid: leader_pid,
-                env: BTreeMap::new(),
-                cwd: String::from("/"),
-                umask: DEFAULT_PROCESS_UMASK,
-                fds: Default::default(),
-                identity: ProcessIdentity::default(),
-                blocked_signals: SignalSet::empty(),
-                pending_signals: SignalSet::empty(),
-            },
-            Arc::new(StubDriverProcess::default()),
-        );
-
-        lock_or_recover(&kernel.driver_pids)
-            .entry(String::from("driver-a"))
-            .or_default()
-            .insert(leader_pid);
-        lock_or_recover(&kernel.driver_pids)
-            .entry(String::from("driver-b"))
-            .or_default()
-            .insert(peer_pid);
-
-        let error = kernel
-            .setpgid("driver-b", peer_pid, leader_pid)
-            .expect_err("cross-driver process-group join should be denied");
-        assert_eq!(error.code(), "EPERM");
-    }
-
-    #[test]
-    fn sigprocmask_and_sigpending_require_process_ownership() {
-        let mut kernel = KernelVm::new(MemoryFileSystem::new(), KernelVmConfig::new("vm-sigmask"));
-        let process = kernel
-            .register_process(
-                String::from("driver-a"),
-                String::from("sleep"),
-                Vec::new(),
-                ProcessContext {
-                    pid: 0,
-                    ppid: 0,
-                    env: BTreeMap::new(),
-                    cwd: String::from("/"),
-                    umask: DEFAULT_PROCESS_UMASK,
-                    fds: Default::default(),
-                    identity: ProcessIdentity::default(),
-                    blocked_signals: SignalSet::empty(),
-                    pending_signals: SignalSet::empty(),
-                },
-                None,
-            )
-            .expect("create virtual process");
-        let mask =
-            SignalSet::from_signal(crate::process_table::SIGCHLD).expect("SIGCHLD should be valid");
-
-        let previous = kernel
-            .sigprocmask("driver-a", process.pid(), SigmaskHow::Block, mask)
-            .expect("owner should update signal mask");
-        assert_eq!(previous, SignalSet::empty());
-        assert_eq!(
-            kernel
-                .sigpending("driver-a", process.pid())
-                .expect("owner should read pending signals"),
-            SignalSet::empty()
-        );
-
-        let error = kernel
-            .sigprocmask("driver-b", process.pid(), SigmaskHow::Block, mask)
-            .expect_err("foreign driver should be rejected");
-        assert_eq!(error.code(), "EPERM");
-        let error = kernel
-            .sigpending("driver-b", process.pid())
-            .expect_err("foreign driver should be rejected");
-        assert_eq!(error.code(), "EPERM");
-    }
-
-    #[test]
-    fn cleanup_process_resources_blocks_concurrent_dup2_until_pipe_cleanup_finishes() {
-        let fd_tables = Arc::new(Mutex::new(FdTableManager::new()));
-        let file_locks = FileLockManager::new();
-        let pipes = PipeManager::new();
-        let ptys = PtyManager::new();
-        let sockets = SocketTable::new();
-        let driver_pids = Arc::new(Mutex::new(BTreeMap::from([(
-            String::from("driver"),
-            BTreeSet::from([41]),
-        )])));
-        let pipe = pipes.create_pipe();
-
-        {
-            let mut tables = lock_or_recover(fd_tables.as_ref());
-            let table = tables.create(41);
-            table
-                .open_with(
-                    Arc::clone(&pipe.read.description),
-                    pipe.read.filetype,
-                    Some(10),
-                )
-                .expect("open pipe read end");
-            table
-                .open_with(
-                    Arc::clone(&pipe.write.description),
-                    pipe.write.filetype,
-                    Some(11),
-                )
-                .expect("open pipe write end");
-        }
-
-        let hook_state = Arc::new((Mutex::new((false, false)), Condvar::new()));
-        let hook_state_for_cleanup = Arc::clone(&hook_state);
-        set_cleanup_process_resources_test_hook(Some(Arc::new(move || {
-            let (state, wake) = &*hook_state_for_cleanup;
-            let mut state = lock_or_recover(state);
-            state.0 = true;
-            wake.notify_all();
-            while !state.1 {
-                state = wake.wait(state).expect("wait for cleanup release");
-            }
-        })));
-
-        let fd_tables_for_cleanup = Arc::clone(&fd_tables);
-        let pipes_for_cleanup = pipes.clone();
-        let driver_pids_for_cleanup = Arc::clone(&driver_pids);
-        let cleanup_thread = thread::spawn(move || {
-            cleanup_process_resources(
-                fd_tables_for_cleanup.as_ref(),
-                &file_locks,
-                &pipes_for_cleanup,
-                &ptys,
-                &sockets,
-                driver_pids_for_cleanup.as_ref(),
-                41,
-            );
-        });
-
-        {
-            let (state, wake) = &*hook_state;
-            let mut state = lock_or_recover(state);
-            while !state.0 {
-                state = wake.wait(state).expect("wait for cleanup hook");
-            }
-        }
-
-        let fd_tables_for_dup = Arc::clone(&fd_tables);
-        let dup_thread = thread::spawn(move || {
-            let mut tables = lock_or_recover(fd_tables_for_dup.as_ref());
-            let Some(table) = tables.get_mut(41) else {
-                return Err(String::from("ESRCH"));
-            };
-            table.dup2(10, 12).map_err(|error| error.code().to_string())
-        });
-
-        {
-            let (state, wake) = &*hook_state;
-            let mut state = lock_or_recover(state);
-            state.1 = true;
-            wake.notify_all();
-        }
-
-        cleanup_thread.join().expect("cleanup thread should finish");
-        let dup_result = dup_thread.join().expect("dup thread should finish");
-        set_cleanup_process_resources_test_hook(None);
-
-        assert_eq!(dup_result, Err(String::from("ESRCH")));
-        assert!(
-            lock_or_recover(fd_tables.as_ref()).get(41).is_none(),
-            "cleanup should remove the process FD table"
-        );
-        assert_eq!(pipes.pipe_count(), 0, "pipe cleanup should not leak");
-        assert!(
-            lock_or_recover(driver_pids.as_ref())
-                .get("driver")
-                .is_none_or(|pids| pids.is_empty()),
-            "driver ownership should be cleared"
-        );
-    }
-
-    #[test]
-    fn drop_disposes_live_kernel_vm_resources() {
-        let (kernel, retained) = kernel_with_live_resources();
-        drop(kernel);
-        assert_kernel_drop_released_resources(&retained);
-    }
-
-    #[test]
-    fn drop_during_panic_still_disposes_live_kernel_vm_resources() {
-        let retained = Arc::new(Mutex::new(None::<RetainedKernelResources>));
-        let retained_for_panic = Arc::clone(&retained);
-
-        let panic_result = catch_unwind(AssertUnwindSafe(move || {
-            let (kernel, resources) = kernel_with_live_resources();
-            *lock_or_recover(retained_for_panic.as_ref()) = Some(resources);
-            let _kernel = kernel;
-            panic!("intentional panic to exercise KernelVm::drop");
-        }));
-
-        assert!(panic_result.is_err(), "panic should be observed");
-        let retained = lock_or_recover(retained.as_ref())
-            .take()
-            .expect("panic path should retain resources for assertions");
-        assert_kernel_drop_released_resources(&retained);
-    }
-}
diff --git a/crates/kernel/src/lib.rs b/crates/kernel/src/lib.rs
index 63778e094..0fd317339 100644
--- a/crates/kernel/src/lib.rs
+++ b/crates/kernel/src/lib.rs
@@ -1,52 +1,3 @@
-#![forbid(unsafe_code)]
+//! Compatibility shim for `agentos-kernel`.
 
-//! Shared per-VM kernel plane for the secure-exec runtime migration.
-
-pub use secure_exec_bridge as bridge;
-pub mod command_registry;
-pub mod device_layer;
-pub mod dns;
-pub mod fd_table;
-pub mod kernel;
-pub mod network_policy;
-pub mod permissions;
-pub mod pipe_manager;
-pub mod poll;
-pub mod process_table;
-pub mod pty;
-pub mod resource_accounting;
-pub mod socket_table;
-pub mod user;
-
-pub use ::vfs::posix as vfs;
-
-pub mod mount_plugin {
-    pub use ::vfs::posix::mount_plugin::*;
-}
-
-pub mod mount_table {
-    pub use ::vfs::posix::mount_table::*;
-}
-
-pub mod overlay_fs {
-    pub use ::vfs::posix::overlay_fs::*;
-}
-
-pub mod root_fs {
-    pub use ::vfs::posix::root_fs::*;
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct KernelScaffold {
-    pub package_name: &'static str,
-    pub supports_native_sidecar: bool,
-    pub supports_browser_sidecar: bool,
-}
-
-pub fn scaffold() -> KernelScaffold {
-    KernelScaffold {
-        package_name: env!("CARGO_PKG_NAME"),
-        supports_native_sidecar: true,
-        supports_browser_sidecar: true,
-    }
-}
+pub use agentos_kernel::*;
diff --git a/crates/kernel/src/network_policy.rs b/crates/kernel/src/network_policy.rs
deleted file mode 100644
index acdeb0043..000000000
--- a/crates/kernel/src/network_policy.rs
+++ /dev/null
@@ -1,188 +0,0 @@
-use std::net::{IpAddr, Ipv4Addr, Ipv6Addr};
-
-pub fn is_loopback_ip(ip: IpAddr) -> bool {
-    match ip {
-        IpAddr::V4(ip) => ip.is_loopback(),
-        IpAddr::V6(ip) => {
-            ip.is_loopback()
-                || ip
-                    .to_ipv4_mapped()
-                    .is_some_and(|mapped| mapped.is_loopback())
-        }
-    }
-}
-
-pub fn loopback_cidr(ip: IpAddr) -> &'static str {
-    match ip {
-        IpAddr::V4(ip) if ip.is_loopback() => "127.0.0.0/8",
-        IpAddr::V6(ip)
-            if ip
-                .to_ipv4_mapped()
-                .is_some_and(|mapped| mapped.is_loopback()) =>
-        {
-            "127.0.0.0/8"
-        }
-        IpAddr::V6(_) => "::1/128",
-        IpAddr::V4(_) => "127.0.0.0/8",
-    }
-}
-
-pub fn format_tcp_resource(host: &str, port: u16) -> String {
-    format!("tcp://{host}:{port}")
-}
-
-pub fn restricted_non_loopback_ip_range(ip: IpAddr) -> Option<(&'static str, &'static str)> {
-    match ip {
-        IpAddr::V4(ip) => {
-            if ip.is_unspecified() {
-                return Some(("0.0.0.0/32", "unspecified"));
-            }
-            let [first, second, ..] = ip.octets();
-            match (first, second) {
-                (10, _) => Some(("10.0.0.0/8", "private")),
-                (100, 64..=127) => Some(("100.64.0.0/10", "carrier-grade-nat")),
-                (172, 16..=31) => Some(("172.16.0.0/12", "private")),
-                (192, 168) => Some(("192.168.0.0/16", "private")),
-                (169, 254) => Some(("169.254.0.0/16", "link-local")),
-                (224..=239, _) => Some(("224.0.0.0/4", "multicast")),
-                (240..=255, _) => Some(("240.0.0.0/4", "reserved")),
-                _ => None,
-            }
-        }
-        IpAddr::V6(ip) => {
-            if let Some(mapped) = ip.to_ipv4_mapped() {
-                return restricted_non_loopback_ip_range(IpAddr::V4(mapped));
-            }
-            if let Some(compat) = ipv4_compatible_embedded(ip) {
-                return restricted_non_loopback_ip_range(IpAddr::V4(compat));
-            }
-            if ip.is_unspecified() {
-                return Some(("::/128", "unspecified"));
-            }
-
-            let segments = ip.segments();
-            if (segments[0] & 0xfe00) == 0xfc00 {
-                return Some(("fc00::/7", "unique-local"));
-            }
-            if (segments[0] & 0xffc0) == 0xfe80 {
-                return Some(("fe80::/10", "link-local"));
-            }
-            None
-        }
-    }
-}
-
-fn ipv4_compatible_embedded(ip: Ipv6Addr) -> Option<Ipv4Addr> {
-    let segments = ip.segments();
-    if segments[0..6].iter().any(|&s| s != 0) {
-        return None;
-    }
-    let embedded = (u32::from(segments[6]) << 16) | u32::from(segments[7]);
-    if embedded == 0 || embedded == 1 {
-        return None;
-    }
-    Some(Ipv4Addr::from(embedded))
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    fn assert_restricted(ip: IpAddr, expected_label: &str) {
-        let classification = restricted_non_loopback_ip_range(ip);
-        assert!(
-            classification.is_some(),
-            "{ip} must be classified as a restricted egress target"
-        );
-        let (_cidr, label) = classification.unwrap();
-        assert_eq!(
-            label, expected_label,
-            "{ip} should be labelled {expected_label}, got {label}"
-        );
-    }
-
-    #[test]
-    fn classifier_denies_unspecified_and_cgnat_targets() {
-        assert_restricted(IpAddr::V4(Ipv4Addr::UNSPECIFIED), "unspecified");
-        assert_restricted(IpAddr::V6(Ipv6Addr::UNSPECIFIED), "unspecified");
-        assert_restricted(
-            IpAddr::V4(Ipv4Addr::new(100, 64, 0, 1)),
-            "carrier-grade-nat",
-        );
-        assert_restricted(
-            IpAddr::V4(Ipv4Addr::new(100, 127, 255, 254)),
-            "carrier-grade-nat",
-        );
-        assert!(
-            restricted_non_loopback_ip_range(IpAddr::V4(Ipv4Addr::new(100, 63, 255, 255,)))
-                .is_none()
-        );
-        assert!(
-            restricted_non_loopback_ip_range(IpAddr::V4(Ipv4Addr::new(100, 128, 0, 0))).is_none()
-        );
-    }
-
-    #[test]
-    fn classifier_denies_ipv6_spelled_metadata_addresses() {
-        assert_restricted(
-            IpAddr::V6("::ffff:169.254.169.254".parse::<Ipv6Addr>().unwrap()),
-            "link-local",
-        );
-        assert_restricted(
-            IpAddr::V6("::169.254.169.254".parse::<Ipv6Addr>().unwrap()),
-            "link-local",
-        );
-        assert_restricted(
-            IpAddr::V6("::10.0.0.1".parse::<Ipv6Addr>().unwrap()),
-            "private",
-        );
-        assert_restricted(
-            IpAddr::V6("::100.64.0.1".parse::<Ipv6Addr>().unwrap()),
-            "carrier-grade-nat",
-        );
-        assert_eq!(
-            restricted_non_loopback_ip_range(IpAddr::V6(Ipv6Addr::UNSPECIFIED)),
-            Some(("::/128", "unspecified"))
-        );
-        assert!(
-            restricted_non_loopback_ip_range(IpAddr::V6(Ipv6Addr::LOCALHOST)).is_none()
-                || is_loopback_ip(IpAddr::V6(Ipv6Addr::LOCALHOST))
-        );
-        assert!(restricted_non_loopback_ip_range(IpAddr::V6(
-            "::8.8.8.8".parse::<Ipv6Addr>().unwrap()
-        ))
-        .is_none());
-    }
-
-    #[test]
-    fn classifier_denies_reserved_and_multicast_targets() {
-        assert_restricted(IpAddr::V4(Ipv4Addr::new(224, 0, 0, 1)), "multicast");
-        assert_restricted(IpAddr::V4(Ipv4Addr::new(239, 255, 255, 255)), "multicast");
-        assert_restricted(IpAddr::V4(Ipv4Addr::new(240, 0, 0, 1)), "reserved");
-        assert_restricted(IpAddr::V4(Ipv4Addr::BROADCAST), "reserved");
-        assert_restricted(
-            IpAddr::V6("::224.0.0.1".parse::<Ipv6Addr>().unwrap()),
-            "multicast",
-        );
-        assert_restricted(
-            IpAddr::V6("::240.0.0.1".parse::<Ipv6Addr>().unwrap()),
-            "reserved",
-        );
-        assert!(
-            restricted_non_loopback_ip_range(IpAddr::V4(Ipv4Addr::new(223, 255, 255, 255)))
-                .is_none()
-        );
-    }
-
-    #[test]
-    fn tcp_resource_format_matches_permission_resources() {
-        assert_eq!(
-            format_tcp_resource("127.0.0.1", 8080),
-            "tcp://127.0.0.1:8080"
-        );
-        assert_eq!(
-            format_tcp_resource("example.test", 443),
-            "tcp://example.test:443"
-        );
-    }
-}
diff --git a/crates/kernel/src/permissions.rs b/crates/kernel/src/permissions.rs
deleted file mode 100644
index 9dd2a389a..000000000
--- a/crates/kernel/src/permissions.rs
+++ /dev/null
@@ -1,662 +0,0 @@
-use crate::vfs::{
-    validate_path, VfsError, VfsResult, VirtualDirEntry, VirtualFileSystem, VirtualStat,
-    VirtualUtimeSpec,
-};
-use std::collections::{BTreeMap, HashMap};
-use std::error::Error;
-use std::fmt;
-use std::path::Path;
-use std::sync::Arc;
-
-pub type FsPermissionCheck = Arc<dyn Fn(&FsAccessRequest) -> PermissionDecision + Send + Sync>;
-pub type NetworkPermissionCheck =
-    Arc<dyn Fn(&NetworkAccessRequest) -> PermissionDecision + Send + Sync>;
-pub type CommandPermissionCheck =
-    Arc<dyn Fn(&CommandAccessRequest) -> PermissionDecision + Send + Sync>;
-pub type EnvironmentPermissionCheck =
-    Arc<dyn Fn(&EnvAccessRequest) -> PermissionDecision + Send + Sync>;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PermissionDecision {
-    pub allow: bool,
-    pub reason: Option<String>,
-}
-
-impl PermissionDecision {
-    pub fn allow() -> Self {
-        Self {
-            allow: true,
-            reason: None,
-        }
-    }
-
-    pub fn deny(reason: impl Into<String>) -> Self {
-        Self {
-            allow: false,
-            reason: Some(reason.into()),
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PermissionError {
-    code: &'static str,
-    message: String,
-}
-
-impl PermissionError {
-    pub fn code(&self) -> &'static str {
-        self.code
-    }
-
-    fn access_denied(subject: impl Into<String>, reason: Option<&str>) -> Self {
-        let subject = subject.into();
-        let message = match reason {
-            Some(reason) => format!("permission denied, {subject}: {reason}"),
-            None => format!("permission denied, {subject}"),
-        };
-
-        Self {
-            code: "EACCES",
-            message,
-        }
-    }
-}
-
-impl fmt::Display for PermissionError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}: {}", self.code, self.message)
-    }
-}
-
-impl Error for PermissionError {}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum FsOperation {
-    Read,
-    Write,
-    Mkdir,
-    CreateDir,
-    ReadDir,
-    Stat,
-    Remove,
-    Rename,
-    Exists,
-    Symlink,
-    ReadLink,
-    Link,
-    Chmod,
-    Chown,
-    Utimes,
-    Truncate,
-    MountSensitive,
-}
-
-impl FsOperation {
-    fn as_str(self) -> &'static str {
-        match self {
-            Self::Read => "read",
-            Self::Write => "write",
-            Self::Mkdir => "mkdir",
-            Self::CreateDir => "createDir",
-            Self::ReadDir => "readdir",
-            Self::Stat => "stat",
-            Self::Remove => "rm",
-            Self::Rename => "rename",
-            Self::Exists => "exists",
-            Self::Symlink => "symlink",
-            Self::ReadLink => "readlink",
-            Self::Link => "link",
-            Self::Chmod => "chmod",
-            Self::Chown => "chown",
-            Self::Utimes => "utimes",
-            Self::Truncate => "truncate",
-            Self::MountSensitive => "mount",
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct FsAccessRequest {
-    pub vm_id: String,
-    pub op: FsOperation,
-    pub path: String,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum NetworkOperation {
-    Fetch,
-    Http,
-    Dns,
-    Listen,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct NetworkAccessRequest {
-    pub vm_id: String,
-    pub op: NetworkOperation,
-    pub resource: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct CommandAccessRequest {
-    pub vm_id: String,
-    pub command: String,
-    pub args: Vec<String>,
-    pub cwd: Option<String>,
-    pub env: BTreeMap<String, String>,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum EnvironmentOperation {
-    Read,
-    Write,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct EnvAccessRequest {
-    pub vm_id: String,
-    pub op: EnvironmentOperation,
-    pub key: String,
-    pub value: Option<String>,
-}
-
-#[derive(Clone, Default)]
-pub struct Permissions {
-    pub filesystem: Option<FsPermissionCheck>,
-    pub network: Option<NetworkPermissionCheck>,
-    pub child_process: Option<CommandPermissionCheck>,
-    pub environment: Option<EnvironmentPermissionCheck>,
-}
-
-impl Permissions {
-    pub fn allow_all() -> Self {
-        Self {
-            filesystem: Some(Arc::new(|_: &FsAccessRequest| PermissionDecision::allow())),
-            network: Some(Arc::new(|_: &NetworkAccessRequest| {
-                PermissionDecision::allow()
-            })),
-            child_process: Some(Arc::new(|_: &CommandAccessRequest| {
-                PermissionDecision::allow()
-            })),
-            environment: Some(Arc::new(|_: &EnvAccessRequest| PermissionDecision::allow())),
-        }
-    }
-}
-
-pub fn permission_glob_matches(pattern: &str, value: &str) -> bool {
-    fn matches(
-        pattern: &[u8],
-        value: &[u8],
-        pattern_index: usize,
-        value_index: usize,
-        memo: &mut HashMap<(usize, usize), bool>,
-    ) -> bool {
-        if let Some(result) = memo.get(&(pattern_index, value_index)) {
-            return *result;
-        }
-
-        let result = if pattern_index == pattern.len() {
-            value_index == value.len()
-        } else {
-            match pattern[pattern_index] {
-                b'?' => {
-                    value_index < value.len()
-                        && value[value_index] != b'/'
-                        && matches(pattern, value, pattern_index + 1, value_index + 1, memo)
-                }
-                b'*' => {
-                    let mut next_pattern_index = pattern_index;
-                    while next_pattern_index < pattern.len() && pattern[next_pattern_index] == b'*'
-                    {
-                        next_pattern_index += 1;
-                    }
-
-                    if matches(pattern, value, next_pattern_index, value_index, memo) {
-                        true
-                    } else {
-                        let crosses_separators = next_pattern_index - pattern_index > 1;
-                        let mut next_value_index = value_index;
-                        while next_value_index < value.len()
-                            && (crosses_separators || value[next_value_index] != b'/')
-                        {
-                            next_value_index += 1;
-                            if matches(pattern, value, next_pattern_index, next_value_index, memo) {
-                                return true;
-                            }
-                        }
-                        false
-                    }
-                }
-                expected => {
-                    value_index < value.len()
-                        && expected == value[value_index]
-                        && matches(pattern, value, pattern_index + 1, value_index + 1, memo)
-                }
-            }
-        };
-
-        memo.insert((pattern_index, value_index), result);
-        result
-    }
-
-    matches(
-        pattern.as_bytes(),
-        value.as_bytes(),
-        0,
-        0,
-        &mut HashMap::new(),
-    )
-}
-
-pub fn filter_env(
-    vm_id: &str,
-    env: &BTreeMap<String, String>,
-    permissions: &Permissions,
-) -> BTreeMap<String, String> {
-    let Some(check) = permissions.environment.as_ref() else {
-        return BTreeMap::new();
-    };
-
-    env.iter()
-        .filter_map(|(key, value)| {
-            let request = EnvAccessRequest {
-                vm_id: vm_id.to_owned(),
-                op: EnvironmentOperation::Read,
-                key: key.clone(),
-                value: Some(value.clone()),
-            };
-            let decision = check(&request);
-            decision.allow.then(|| (key.clone(), value.clone()))
-        })
-        .collect()
-}
-
-pub fn check_command_execution(
-    vm_id: &str,
-    permissions: &Permissions,
-    command: &str,
-    args: &[String],
-    cwd: Option<&str>,
-    env: &BTreeMap<String, String>,
-) -> Result<(), PermissionError> {
-    let Some(check) = permissions.child_process.as_ref() else {
-        return Err(PermissionError::access_denied(
-            format!("spawn '{command}'"),
-            None,
-        ));
-    };
-
-    let request = CommandAccessRequest {
-        vm_id: vm_id.to_owned(),
-        command: command.to_owned(),
-        args: args.to_vec(),
-        cwd: cwd.map(ToOwned::to_owned),
-        env: env.clone(),
-    };
-    let decision = check(&request);
-    if decision.allow {
-        Ok(())
-    } else {
-        Err(PermissionError::access_denied(
-            format!("spawn '{command}'"),
-            decision.reason.as_deref(),
-        ))
-    }
-}
-
-pub fn check_network_access(
-    vm_id: &str,
-    permissions: &Permissions,
-    op: NetworkOperation,
-    resource: &str,
-) -> Result<(), PermissionError> {
-    let Some(check) = permissions.network.as_ref() else {
-        return Err(PermissionError::access_denied(resource, None));
-    };
-
-    let request = NetworkAccessRequest {
-        vm_id: vm_id.to_owned(),
-        op,
-        resource: resource.to_owned(),
-    };
-    let decision = check(&request);
-    if decision.allow {
-        Ok(())
-    } else {
-        Err(PermissionError::access_denied(
-            resource,
-            decision.reason.as_deref(),
-        ))
-    }
-}
-
-#[derive(Clone)]
-pub struct PermissionedFileSystem<F> {
-    inner: F,
-    vm_id: String,
-    permissions: Permissions,
-}
-
-impl<F> PermissionedFileSystem<F> {
-    pub fn new(inner: F, vm_id: impl Into<String>, permissions: Permissions) -> Self {
-        Self {
-            inner,
-            vm_id: vm_id.into(),
-            permissions,
-        }
-    }
-
-    pub fn into_inner(self) -> F {
-        self.inner
-    }
-
-    pub fn inner(&self) -> &F {
-        &self.inner
-    }
-
-    pub fn inner_mut(&mut self) -> &mut F {
-        &mut self.inner
-    }
-
-    pub fn set_permissions(&mut self, permissions: Permissions) {
-        self.permissions = permissions;
-    }
-
-    fn check(&self, op: FsOperation, path: &str) -> VfsResult<()> {
-        validate_path(path)?;
-        // Standard emulated character devices (/dev/null, /dev/zero, /dev/urandom,
-        // /dev/std{in,out,err}) are world-accessible on Linux and have no host
-        // backing; the device layer enforces their fixed semantics. Exempt them from
-        // the VM file-permission policy so guest fs ops on them (readFileSync /
-        // existsSync / redirects) behave like native Linux regardless of policy.
-        if crate::device_layer::is_standard_device_path(path) {
-            return Ok(());
-        }
-        let Some(check) = self.permissions.filesystem.as_ref() else {
-            return Err(VfsError::access_denied(op.as_str(), path, None));
-        };
-
-        let request = FsAccessRequest {
-            vm_id: self.vm_id.clone(),
-            op,
-            path: path.to_owned(),
-        };
-        let decision = check(&request);
-        if decision.allow {
-            Ok(())
-        } else {
-            Err(VfsError::access_denied(
-                op.as_str(),
-                path,
-                decision.reason.as_deref(),
-            ))
-        }
-    }
-}
-
-impl<F: VirtualFileSystem> PermissionedFileSystem<F> {
-    fn resolved_existing_path(&self, path: &str) -> VfsResult<String> {
-        self.inner.realpath(path)
-    }
-
-    fn resolved_destination_path(&self, path: &str) -> VfsResult<String> {
-        let normalized = crate::vfs::normalize_path(path);
-        if normalized == "/" {
-            return Ok(normalized);
-        }
-
-        let parent = Path::new(&normalized)
-            .parent()
-            .unwrap_or_else(|| Path::new("/"))
-            .to_string_lossy()
-            .into_owned();
-        let basename = Path::new(&normalized)
-            .file_name()
-            .map(|value| value.to_string_lossy().into_owned())
-            .unwrap_or_default();
-
-        let mut candidate = parent;
-        let mut unresolved_segments = Vec::new();
-
-        let resolved_parent = loop {
-            match self.inner.realpath(&candidate) {
-                Ok(resolved) => break resolved,
-                Err(error) if matches!(error.code(), "ENOENT" | "ENOTDIR") => {
-                    if candidate == "/" {
-                        break String::from("/");
-                    }
-                    let candidate_path = Path::new(&candidate);
-                    if let Some(segment) = candidate_path.file_name() {
-                        unresolved_segments.push(segment.to_string_lossy().into_owned());
-                    }
-                    candidate = candidate_path
-                        .parent()
-                        .unwrap_or_else(|| Path::new("/"))
-                        .to_string_lossy()
-                        .into_owned();
-                }
-                Err(error) => return Err(error),
-            }
-        };
-
-        let mut resolved = resolved_parent;
-        for segment in unresolved_segments.iter().rev() {
-            if resolved == "/" {
-                resolved = format!("/{segment}");
-            } else {
-                resolved = format!("{resolved}/{segment}");
-            }
-        }
-
-        if resolved == "/" {
-            Ok(format!("/{basename}"))
-        } else {
-            Ok(format!("{resolved}/{basename}"))
-        }
-    }
-
-    fn permission_subject(&self, op: FsOperation, path: &str) -> VfsResult<String> {
-        validate_path(path)?;
-        match op {
-            FsOperation::Read
-            | FsOperation::ReadDir
-            | FsOperation::Stat
-            | FsOperation::ReadLink
-            | FsOperation::Chmod
-            | FsOperation::Chown
-            | FsOperation::Utimes
-            | FsOperation::Truncate => self.resolved_existing_path(path),
-            FsOperation::Exists | FsOperation::Write => self
-                .resolved_existing_path(path)
-                .or_else(|_| self.resolved_destination_path(path)),
-            FsOperation::Mkdir
-            | FsOperation::CreateDir
-            | FsOperation::Rename
-            | FsOperation::Symlink
-            | FsOperation::Link
-            | FsOperation::MountSensitive
-            | FsOperation::Remove => self.resolved_destination_path(path),
-        }
-    }
-
-    fn check_subject(&self, op: FsOperation, path: &str) -> VfsResult<()> {
-        let subject = self.permission_subject(op, path)?;
-        self.check(op, &subject)
-    }
-
-    fn check_existing_subject(&self, op: FsOperation, path: &str) -> VfsResult<()> {
-        validate_path(path)?;
-        let subject = self.resolved_existing_path(path)?;
-        self.check(op, &subject)
-    }
-
-    fn check_destination_subject(&self, op: FsOperation, path: &str) -> VfsResult<()> {
-        validate_path(path)?;
-        let subject = self.resolved_destination_path(path)?;
-        self.check(op, &subject)
-    }
-
-    pub fn check_path(&self, op: FsOperation, path: &str) -> VfsResult<()> {
-        self.check_subject(op, path)
-    }
-
-    pub fn check_virtual_path(&self, op: FsOperation, path: &str) -> VfsResult<()> {
-        self.check(op, path)
-    }
-
-    pub fn exists(&self, path: &str) -> VfsResult<bool> {
-        if let Err(error) = self.check_subject(FsOperation::Exists, path) {
-            if matches!(error.code(), "EACCES" | "ENOENT" | "ENOTDIR" | "ELOOP") {
-                return Ok(false);
-            }
-            return Err(error);
-        }
-        Ok(self.inner.exists(path))
-    }
-}
-
-impl<F: VirtualFileSystem> VirtualFileSystem for PermissionedFileSystem<F> {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        self.check_subject(FsOperation::Read, path)?;
-        self.inner.read_file(path)
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        self.check_subject(FsOperation::ReadDir, path)?;
-        self.inner.read_dir(path)
-    }
-
-    fn read_dir_limited(&mut self, path: &str, max_entries: usize) -> VfsResult<Vec<String>> {
-        self.check_subject(FsOperation::ReadDir, path)?;
-        self.inner.read_dir_limited(path, max_entries)
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        self.check_subject(FsOperation::ReadDir, path)?;
-        self.inner.read_dir_with_types(path)
-    }
-
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        self.check_subject(FsOperation::Write, path)?;
-        self.inner.write_file(path, content)
-    }
-
-    fn create_file_exclusive(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        self.check_subject(FsOperation::Write, path)?;
-        self.inner.create_file_exclusive(path, content)
-    }
-
-    fn append_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<u64> {
-        self.check_subject(FsOperation::Write, path)?;
-        self.inner.append_file(path, content)
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.check_subject(FsOperation::CreateDir, path)?;
-        self.inner.create_dir(path)
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        self.check_subject(FsOperation::Mkdir, path)?;
-        self.inner.mkdir(path, recursive)
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        PermissionedFileSystem::exists(self, path).unwrap_or(false)
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        self.check_subject(FsOperation::Stat, path)?;
-        self.inner.stat(path)
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        self.check_subject(FsOperation::Remove, path)?;
-        self.inner.remove_file(path)
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.check_subject(FsOperation::Remove, path)?;
-        self.inner.remove_dir(path)
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        self.check_subject(FsOperation::Rename, old_path)?;
-        self.check_subject(FsOperation::Rename, new_path)?;
-        self.inner.rename(old_path, new_path)
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        self.check_subject(FsOperation::Read, path)?;
-        self.inner.realpath(path)
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        self.check_subject(FsOperation::Symlink, link_path)?;
-        self.inner.symlink(target, link_path)
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        // Authorize the parent-symlink-resolved path (without following the
-        // final component, matching `lstat`/`readlink` semantics). A lexical
-        // check would let a symlink whose parent resolves into a denied prefix
-        // disclose link targets of permission-denied paths.
-        validate_path(path)?;
-        let subject = self.resolved_destination_path(path)?;
-        self.check(FsOperation::ReadLink, &subject)?;
-        self.inner.read_link(path)
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        // Authorize the parent-symlink-resolved path (see `read_link`); a
-        // lexical check would leak metadata (size/mode/mtime/inode) of files
-        // under a permission-denied prefix reached via a symlinked parent.
-        validate_path(path)?;
-        let subject = self.resolved_destination_path(path)?;
-        self.check(FsOperation::Stat, &subject)?;
-        self.inner.lstat(path)
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        self.check_existing_subject(FsOperation::Link, old_path)?;
-        self.check_destination_subject(FsOperation::Link, new_path)?;
-        self.inner.link(old_path, new_path)
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        self.check_subject(FsOperation::Chmod, path)?;
-        self.inner.chmod(path, mode)
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        self.check_subject(FsOperation::Chown, path)?;
-        self.inner.chown(path, uid, gid)
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        self.check_subject(FsOperation::Utimes, path)?;
-        self.inner.utimes(path, atime_ms, mtime_ms)
-    }
-
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-        follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        self.check_subject(FsOperation::Utimes, path)?;
-        self.inner.utimes_spec(path, atime, mtime, follow_symlinks)
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        self.check_subject(FsOperation::Truncate, path)?;
-        self.inner.truncate(path, length)
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        self.check_subject(FsOperation::Read, path)?;
-        self.inner.pread(path, offset, length)
-    }
-}
diff --git a/crates/kernel/src/pipe_manager.rs b/crates/kernel/src/pipe_manager.rs
deleted file mode 100644
index 3a59b861a..000000000
--- a/crates/kernel/src/pipe_manager.rs
+++ /dev/null
@@ -1,624 +0,0 @@
-use crate::fd_table::{
-    FdResult, FileDescription, ProcessFdTable, SharedFileDescription, FILETYPE_PIPE, O_RDONLY,
-    O_WRONLY,
-};
-use crate::poll::{PollEvents, PollNotifier, POLLERR, POLLHUP, POLLIN, POLLOUT};
-use std::collections::{BTreeMap, VecDeque};
-use std::error::Error;
-use std::fmt;
-use std::sync::{Arc, Condvar, Mutex, MutexGuard};
-use std::time::Duration;
-use web_time::Instant;
-
-pub const MAX_PIPE_BUFFER_BYTES: usize = 65_536;
-pub const PIPE_BUF_BYTES: usize = 4_096;
-
-pub type PipeResult<T> = Result<T, PipeError>;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PipeError {
-    code: &'static str,
-    message: String,
-}
-
-impl PipeError {
-    pub fn code(&self) -> &'static str {
-        self.code
-    }
-
-    fn bad_file_descriptor(message: impl Into<String>) -> Self {
-        Self {
-            code: "EBADF",
-            message: message.into(),
-        }
-    }
-
-    fn broken_pipe(message: impl Into<String>) -> Self {
-        Self {
-            code: "EPIPE",
-            message: message.into(),
-        }
-    }
-
-    fn would_block(message: impl Into<String>) -> Self {
-        Self {
-            code: "EAGAIN",
-            message: message.into(),
-        }
-    }
-}
-
-impl fmt::Display for PipeError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}: {}", self.code, self.message)
-    }
-}
-
-impl Error for PipeError {}
-
-#[derive(Debug, Clone)]
-pub struct PipeEnd {
-    pub description: SharedFileDescription,
-    pub filetype: u8,
-}
-
-#[derive(Debug, Clone)]
-pub struct PipePair {
-    pub read: PipeEnd,
-    pub write: PipeEnd,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-struct PipeRef {
-    pipe_id: u64,
-    end: PipeSide,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum PipeSide {
-    Read,
-    Write,
-}
-
-#[derive(Debug, Default)]
-struct PendingRead {
-    length: usize,
-    result: Option<Option<Vec<u8>>>,
-}
-
-#[derive(Debug, Default)]
-struct PipeState {
-    buffer: VecDeque<Vec<u8>>,
-    closed_read: bool,
-    closed_write: bool,
-    waiting_reads: VecDeque<u64>,
-}
-
-#[derive(Debug)]
-struct PipeManagerState {
-    pipes: BTreeMap<u64, PipeState>,
-    desc_to_pipe: BTreeMap<u64, PipeRef>,
-    waiters: BTreeMap<u64, PendingRead>,
-    next_pipe_id: u64,
-    next_desc_id: u64,
-    next_waiter_id: u64,
-}
-
-impl Default for PipeManagerState {
-    fn default() -> Self {
-        Self {
-            pipes: BTreeMap::new(),
-            desc_to_pipe: BTreeMap::new(),
-            waiters: BTreeMap::new(),
-            next_pipe_id: 1,
-            next_desc_id: 100_000,
-            next_waiter_id: 1,
-        }
-    }
-}
-
-#[derive(Debug)]
-struct PipeManagerInner {
-    state: Mutex<PipeManagerState>,
-    waiters: Condvar,
-}
-
-#[derive(Debug, Clone)]
-pub struct PipeManager {
-    inner: Arc<PipeManagerInner>,
-    notifier: Option<PollNotifier>,
-}
-
-impl Default for PipeManager {
-    fn default() -> Self {
-        Self {
-            inner: Arc::new(PipeManagerInner {
-                state: Mutex::new(PipeManagerState::default()),
-                waiters: Condvar::new(),
-            }),
-            notifier: None,
-        }
-    }
-}
-
-impl PipeManager {
-    pub fn new() -> Self {
-        Self::default()
-    }
-
-    pub(crate) fn with_notifier(notifier: PollNotifier) -> Self {
-        Self {
-            notifier: Some(notifier),
-            ..Self::default()
-        }
-    }
-
-    pub fn create_pipe(&self) -> PipePair {
-        let mut state = lock_or_recover(&self.inner.state);
-        let pipe_id = state.next_pipe_id;
-        state.next_pipe_id += 1;
-
-        let read_id = state.next_desc_id;
-        state.next_desc_id += 1;
-        let write_id = state.next_desc_id;
-        state.next_desc_id += 1;
-
-        state.pipes.insert(pipe_id, PipeState::default());
-        state.desc_to_pipe.insert(
-            read_id,
-            PipeRef {
-                pipe_id,
-                end: PipeSide::Read,
-            },
-        );
-        state.desc_to_pipe.insert(
-            write_id,
-            PipeRef {
-                pipe_id,
-                end: PipeSide::Write,
-            },
-        );
-        drop(state);
-
-        PipePair {
-            read: PipeEnd {
-                description: Arc::new(FileDescription::with_ref_count(
-                    read_id,
-                    format!("pipe:{pipe_id}:read"),
-                    O_RDONLY,
-                    0,
-                )),
-                filetype: FILETYPE_PIPE,
-            },
-            write: PipeEnd {
-                description: Arc::new(FileDescription::with_ref_count(
-                    write_id,
-                    format!("pipe:{pipe_id}:write"),
-                    O_WRONLY,
-                    0,
-                )),
-                filetype: FILETYPE_PIPE,
-            },
-        }
-    }
-
-    pub fn poll(&self, description_id: u64, requested: PollEvents) -> PipeResult<PollEvents> {
-        let state = lock_or_recover(&self.inner.state);
-        let pipe_ref = state
-            .desc_to_pipe
-            .get(&description_id)
-            .copied()
-            .ok_or_else(|| PipeError::bad_file_descriptor("not a pipe end"))?;
-        let pipe = state
-            .pipes
-            .get(&pipe_ref.pipe_id)
-            .ok_or_else(|| PipeError::bad_file_descriptor("pipe not found"))?;
-
-        let mut events = PollEvents::empty();
-        match pipe_ref.end {
-            PipeSide::Read => {
-                if requested.intersects(POLLIN) && !pipe.buffer.is_empty() {
-                    events |= POLLIN;
-                }
-                if pipe.closed_write {
-                    events |= POLLHUP;
-                }
-            }
-            PipeSide::Write => {
-                if pipe.closed_read {
-                    events |= POLLERR;
-                } else if requested.intersects(POLLOUT)
-                    && (available_capacity(pipe) > 0 || !pipe.waiting_reads.is_empty())
-                {
-                    events |= POLLOUT;
-                }
-            }
-        }
-
-        Ok(events)
-    }
-
-    pub fn write(&self, description_id: u64, data: impl AsRef<[u8]>) -> PipeResult<usize> {
-        self.write_with_mode(description_id, data, true)
-    }
-
-    pub fn write_blocking(&self, description_id: u64, data: impl AsRef<[u8]>) -> PipeResult<usize> {
-        self.write_with_mode(description_id, data, false)
-    }
-
-    pub fn write_with_mode(
-        &self,
-        description_id: u64,
-        data: impl AsRef<[u8]>,
-        nonblocking: bool,
-    ) -> PipeResult<usize> {
-        let payload = data.as_ref();
-        let mut state = lock_or_recover(&self.inner.state);
-        let pipe_ref = state
-            .desc_to_pipe
-            .get(&description_id)
-            .copied()
-            .ok_or_else(|| PipeError::bad_file_descriptor("not a pipe write end"))?;
-        if pipe_ref.end != PipeSide::Write {
-            return Err(PipeError::bad_file_descriptor("not a pipe write end"));
-        }
-
-        loop {
-            let waiter_id = {
-                let pipe = state
-                    .pipes
-                    .get_mut(&pipe_ref.pipe_id)
-                    .ok_or_else(|| PipeError::bad_file_descriptor("pipe not found"))?;
-                if pipe.closed_write {
-                    return Err(PipeError::broken_pipe("write end closed"));
-                }
-                if pipe.closed_read {
-                    return Err(PipeError::broken_pipe("read end closed"));
-                }
-                pipe.waiting_reads.pop_front()
-            };
-
-            if let Some(waiter_id) = waiter_id {
-                let waiter_length = match state.waiters.get(&waiter_id) {
-                    Some(waiter) => waiter.length,
-                    None => continue,
-                };
-                let delivered_len = waiter_length.min(payload.len());
-                let delivered = payload[..delivered_len].to_vec();
-                let remainder = &payload[delivered_len..];
-
-                if !remainder.is_empty() {
-                    let pipe = state
-                        .pipes
-                        .get_mut(&pipe_ref.pipe_id)
-                        .ok_or_else(|| PipeError::bad_file_descriptor("pipe not found"))?;
-                    pipe.buffer.push_back(remainder.to_vec());
-                }
-
-                if let Some(waiter) = state.waiters.get_mut(&waiter_id) {
-                    waiter.result = Some(Some(delivered));
-                    self.notify_waiters_and_pollers();
-                    return Ok(payload.len());
-                }
-                continue;
-            }
-
-            let current_buffer_size = {
-                let pipe = state
-                    .pipes
-                    .get(&pipe_ref.pipe_id)
-                    .ok_or_else(|| PipeError::bad_file_descriptor("pipe not found"))?;
-                buffer_size(&pipe.buffer)
-            };
-            let available = MAX_PIPE_BUFFER_BYTES.saturating_sub(current_buffer_size);
-
-            if payload.len() <= PIPE_BUF_BYTES {
-                if available >= payload.len() {
-                    let pipe = state
-                        .pipes
-                        .get_mut(&pipe_ref.pipe_id)
-                        .ok_or_else(|| PipeError::bad_file_descriptor("pipe not found"))?;
-                    pipe.buffer.push_back(payload.to_vec());
-                    self.notify_waiters_and_pollers();
-                    return Ok(payload.len());
-                }
-            } else if available > 0 {
-                let chunk_len = available.min(payload.len());
-                let pipe = state
-                    .pipes
-                    .get_mut(&pipe_ref.pipe_id)
-                    .ok_or_else(|| PipeError::bad_file_descriptor("pipe not found"))?;
-                pipe.buffer.push_back(payload[..chunk_len].to_vec());
-                self.notify_waiters_and_pollers();
-                return Ok(chunk_len);
-            }
-
-            if nonblocking {
-                return Err(PipeError::would_block("pipe buffer full"));
-            }
-
-            state = wait_or_recover(&self.inner.waiters, state);
-        }
-    }
-
-    pub fn read(&self, description_id: u64, length: usize) -> PipeResult<Option<Vec<u8>>> {
-        self.read_with_timeout(description_id, length, None)
-    }
-
-    pub fn read_with_timeout(
-        &self,
-        description_id: u64,
-        length: usize,
-        timeout: Option<Duration>,
-    ) -> PipeResult<Option<Vec<u8>>> {
-        let mut state = lock_or_recover(&self.inner.state);
-        let pipe_ref = state
-            .desc_to_pipe
-            .get(&description_id)
-            .copied()
-            .ok_or_else(|| PipeError::bad_file_descriptor("not a pipe read end"))?;
-        if pipe_ref.end != PipeSide::Read {
-            return Err(PipeError::bad_file_descriptor("not a pipe read end"));
-        }
-
-        let mut waiter_id = None;
-        let deadline = timeout.map(|duration| Instant::now() + duration);
-
-        loop {
-            if let Some(id) = waiter_id {
-                if let Some(waiter) = state.waiters.get_mut(&id) {
-                    if let Some(result) = waiter.result.take() {
-                        state.waiters.remove(&id);
-                        return Ok(result);
-                    }
-                }
-            }
-
-            {
-                let pipe = state
-                    .pipes
-                    .get_mut(&pipe_ref.pipe_id)
-                    .ok_or_else(|| PipeError::bad_file_descriptor("pipe not found"))?;
-
-                if !pipe.buffer.is_empty() {
-                    let result = drain_buffer(&mut pipe.buffer, length);
-                    self.notify_waiters_and_pollers();
-                    return Ok(Some(result));
-                }
-
-                if pipe.closed_write {
-                    if let Some(id) = waiter_id {
-                        state.waiters.remove(&id);
-                    }
-                    return Ok(None);
-                }
-            }
-
-            let id = if let Some(id) = waiter_id {
-                id
-            } else {
-                let next = state.next_waiter_id;
-                state.next_waiter_id += 1;
-                state.waiters.insert(
-                    next,
-                    PendingRead {
-                        length,
-                        result: None,
-                    },
-                );
-                let Some(pipe) = state.pipes.get_mut(&pipe_ref.pipe_id) else {
-                    state.waiters.remove(&next);
-                    return Err(PipeError::bad_file_descriptor("pipe not found"));
-                };
-                pipe.waiting_reads.push_back(next);
-                self.notify_waiters_and_pollers();
-                waiter_id = Some(next);
-                next
-            };
-
-            let Some(deadline) = deadline else {
-                state = wait_or_recover(&self.inner.waiters, state);
-                if !state.waiters.contains_key(&id) {
-                    waiter_id = None;
-                }
-                continue;
-            };
-
-            let now = Instant::now();
-            if now >= deadline {
-                if let Some(id) = waiter_id.take() {
-                    state.waiters.remove(&id);
-                    if let Some(pipe) = state.pipes.get_mut(&pipe_ref.pipe_id) {
-                        pipe.waiting_reads.retain(|queued| *queued != id);
-                    }
-                    self.notify_waiters_and_pollers();
-                }
-                return Err(PipeError::would_block("pipe read timed out"));
-            }
-
-            let remaining = deadline.saturating_duration_since(now);
-            let (next_state, wait_result) =
-                wait_timeout_or_recover(&self.inner.waiters, state, remaining);
-            state = next_state;
-            if !state.waiters.contains_key(&id) {
-                waiter_id = None;
-            }
-            if wait_result.timed_out() {
-                if let Some(id) = waiter_id.take() {
-                    state.waiters.remove(&id);
-                    if let Some(pipe) = state.pipes.get_mut(&pipe_ref.pipe_id) {
-                        pipe.waiting_reads.retain(|queued| *queued != id);
-                    }
-                    self.notify_waiters_and_pollers();
-                }
-                return Err(PipeError::would_block("pipe read timed out"));
-            }
-        }
-    }
-
-    pub fn close(&self, description_id: u64) {
-        let mut state = lock_or_recover(&self.inner.state);
-        let Some(pipe_ref) = state.desc_to_pipe.remove(&description_id) else {
-            return;
-        };
-
-        let (waiter_ids, remove_pipe, should_notify) =
-            if let Some(pipe) = state.pipes.get_mut(&pipe_ref.pipe_id) {
-                match pipe_ref.end {
-                    PipeSide::Read => {
-                        pipe.closed_read = true;
-                        (Vec::new(), pipe.closed_read && pipe.closed_write, true)
-                    }
-                    PipeSide::Write => {
-                        pipe.closed_write = true;
-                        let waiter_ids = pipe.waiting_reads.drain(..).collect::<Vec<_>>();
-                        (waiter_ids, pipe.closed_read && pipe.closed_write, true)
-                    }
-                }
-            } else {
-                (Vec::new(), false, false)
-            };
-
-        for waiter_id in waiter_ids {
-            if let Some(waiter) = state.waiters.get_mut(&waiter_id) {
-                waiter.result = Some(None);
-            }
-        }
-
-        if remove_pipe {
-            state.pipes.remove(&pipe_ref.pipe_id);
-        }
-        if should_notify {
-            self.notify_waiters_and_pollers();
-        }
-    }
-
-    pub fn is_pipe(&self, description_id: u64) -> bool {
-        lock_or_recover(&self.inner.state)
-            .desc_to_pipe
-            .contains_key(&description_id)
-    }
-
-    pub fn pipe_id_for(&self, description_id: u64) -> Option<u64> {
-        lock_or_recover(&self.inner.state)
-            .desc_to_pipe
-            .get(&description_id)
-            .map(|pipe_ref| pipe_ref.pipe_id)
-    }
-
-    pub fn pipe_count(&self) -> usize {
-        lock_or_recover(&self.inner.state).pipes.len()
-    }
-
-    pub fn buffered_bytes(&self) -> usize {
-        lock_or_recover(&self.inner.state)
-            .pipes
-            .values()
-            .map(|pipe| buffer_size(&pipe.buffer))
-            .sum()
-    }
-
-    pub fn waiting_reader_count(&self, description_id: u64) -> PipeResult<usize> {
-        let state = lock_or_recover(&self.inner.state);
-        let pipe_ref = state
-            .desc_to_pipe
-            .get(&description_id)
-            .copied()
-            .ok_or_else(|| PipeError::bad_file_descriptor("not a pipe end"))?;
-        let pipe = state
-            .pipes
-            .get(&pipe_ref.pipe_id)
-            .ok_or_else(|| PipeError::bad_file_descriptor("pipe not found"))?;
-        Ok(pipe.waiting_reads.len())
-    }
-
-    pub fn pending_read_waiter_count(&self) -> usize {
-        lock_or_recover(&self.inner.state).waiters.len()
-    }
-
-    pub fn create_pipe_fds(&self, fd_table: &mut ProcessFdTable) -> FdResult<(u32, u32)> {
-        let pipe = self.create_pipe();
-        let read_fd =
-            fd_table.open_with(Arc::clone(&pipe.read.description), FILETYPE_PIPE, None)?;
-        match fd_table.open_with(Arc::clone(&pipe.write.description), FILETYPE_PIPE, None) {
-            Ok(write_fd) => Ok((read_fd, write_fd)),
-            Err(error) => {
-                fd_table.close(read_fd);
-                self.close(pipe.read.description.id());
-                self.close(pipe.write.description.id());
-                Err(error)
-            }
-        }
-    }
-
-    fn notify_waiters_and_pollers(&self) {
-        self.inner.waiters.notify_all();
-        if let Some(notifier) = &self.notifier {
-            notifier.notify();
-        }
-    }
-}
-
-fn buffer_size(buffer: &VecDeque<Vec<u8>>) -> usize {
-    buffer.iter().map(Vec::len).sum()
-}
-
-fn available_capacity(pipe: &PipeState) -> usize {
-    MAX_PIPE_BUFFER_BYTES.saturating_sub(buffer_size(&pipe.buffer))
-}
-
-fn drain_buffer(buffer: &mut VecDeque<Vec<u8>>, length: usize) -> Vec<u8> {
-    let mut chunks = Vec::new();
-    let mut remaining = length;
-
-    while remaining > 0 {
-        let Some(chunk) = buffer.pop_front() else {
-            break;
-        };
-        if chunk.len() <= remaining {
-            remaining -= chunk.len();
-            chunks.push(chunk);
-        } else {
-            let (head, tail) = chunk.split_at(remaining);
-            chunks.push(head.to_vec());
-            buffer.push_front(tail.to_vec());
-            remaining = 0;
-        }
-    }
-
-    if chunks.len() == 1 {
-        return chunks.pop().expect("single chunk should exist");
-    }
-
-    let total = chunks.iter().map(Vec::len).sum();
-    let mut result = Vec::with_capacity(total);
-    for chunk in chunks {
-        result.extend_from_slice(&chunk);
-    }
-    result
-}
-
-fn lock_or_recover<'a, T>(mutex: &'a Mutex<T>) -> MutexGuard<'a, T> {
-    match mutex.lock() {
-        Ok(guard) => guard,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
-
-fn wait_or_recover<'a, T>(condvar: &Condvar, guard: MutexGuard<'a, T>) -> MutexGuard<'a, T> {
-    match condvar.wait(guard) {
-        Ok(guard) => guard,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
-
-fn wait_timeout_or_recover<'a, T>(
-    condvar: &Condvar,
-    guard: MutexGuard<'a, T>,
-    timeout: Duration,
-) -> (MutexGuard<'a, T>, std::sync::WaitTimeoutResult) {
-    match condvar.wait_timeout(guard, timeout) {
-        Ok(result) => result,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
diff --git a/crates/kernel/src/poll.rs b/crates/kernel/src/poll.rs
deleted file mode 100644
index 2566e914d..000000000
--- a/crates/kernel/src/poll.rs
+++ /dev/null
@@ -1,293 +0,0 @@
-use crate::socket_table::SocketId;
-use std::ops::{BitOr, BitOrAssign};
-use std::sync::{Arc, Condvar, Mutex, MutexGuard};
-use std::time::Duration;
-use web_time::Instant;
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
-pub struct PollEvents(u16);
-
-impl PollEvents {
-    pub const fn empty() -> Self {
-        Self(0)
-    }
-
-    pub const fn from_bits(bits: u16) -> Self {
-        Self(bits)
-    }
-
-    pub const fn bits(self) -> u16 {
-        self.0
-    }
-
-    pub const fn is_empty(self) -> bool {
-        self.0 == 0
-    }
-
-    pub const fn contains(self, other: Self) -> bool {
-        self.0 & other.0 == other.0
-    }
-
-    pub const fn intersects(self, other: Self) -> bool {
-        self.0 & other.0 != 0
-    }
-}
-
-impl BitOr for PollEvents {
-    type Output = Self;
-
-    fn bitor(self, rhs: Self) -> Self::Output {
-        Self(self.0 | rhs.0)
-    }
-}
-
-impl BitOrAssign for PollEvents {
-    fn bitor_assign(&mut self, rhs: Self) {
-        self.0 |= rhs.0;
-    }
-}
-
-pub const POLLIN: PollEvents = PollEvents(0x0001);
-pub const POLLOUT: PollEvents = PollEvents(0x0004);
-pub const POLLERR: PollEvents = PollEvents(0x0008);
-pub const POLLHUP: PollEvents = PollEvents(0x0010);
-pub const POLLNVAL: PollEvents = PollEvents(0x0020);
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct PollFd {
-    pub fd: u32,
-    pub events: PollEvents,
-    pub revents: PollEvents,
-}
-
-impl PollFd {
-    pub const fn new(fd: u32, events: PollEvents) -> Self {
-        Self {
-            fd,
-            events,
-            revents: PollEvents::empty(),
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PollResult {
-    pub ready_count: usize,
-    pub fds: Vec<PollFd>,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum PollTarget {
-    Fd(u32),
-    Socket(SocketId),
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct PollTargetEntry {
-    pub target: PollTarget,
-    pub events: PollEvents,
-    pub revents: PollEvents,
-}
-
-impl PollTargetEntry {
-    pub const fn new(target: PollTarget, events: PollEvents) -> Self {
-        Self {
-            target,
-            events,
-            revents: PollEvents::empty(),
-        }
-    }
-
-    pub const fn fd(fd: u32, events: PollEvents) -> Self {
-        Self::new(PollTarget::Fd(fd), events)
-    }
-
-    pub const fn socket(socket_id: SocketId, events: PollEvents) -> Self {
-        Self::new(PollTarget::Socket(socket_id), events)
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PollTargetResult {
-    pub ready_count: usize,
-    pub targets: Vec<PollTargetEntry>,
-}
-
-/// Cloneable, Send handle onto the kernel's poll notifier so a caller can wait
-/// for "some poll-visible state changed" OFF the thread that owns the kernel
-/// (deferred readiness servicing), then re-check readiness with a zero-timeout
-/// poll on the owning thread. Take `snapshot()` BEFORE the readiness check it
-/// guards so a change landing between the check and the wait wakes immediately
-/// instead of being lost.
-#[derive(Debug, Clone)]
-pub struct PollWaitHandle {
-    notifier: PollNotifier,
-}
-
-impl PollWaitHandle {
-    pub(crate) fn new(notifier: PollNotifier) -> Self {
-        Self { notifier }
-    }
-
-    /// Snapshot the current change generation.
-    pub fn snapshot(&self) -> u64 {
-        self.notifier.snapshot()
-    }
-
-    /// Block until the generation moves past `observed` or `timeout` elapses
-    /// (`None` = wait forever). Returns true when a change was observed.
-    pub fn wait_for_change(&self, observed: u64, timeout: Option<Duration>) -> bool {
-        self.notifier.wait_for_change(observed, timeout)
-    }
-}
-
-#[derive(Debug, Clone, Default)]
-pub(crate) struct PollNotifier {
-    inner: Arc<PollNotifierInner>,
-}
-
-#[derive(Debug, Default)]
-struct PollNotifierInner {
-    generation: Mutex<u64>,
-    waiters: Condvar,
-}
-
-impl PollNotifier {
-    pub(crate) fn notify(&self) {
-        let mut generation = lock_or_recover(&self.inner.generation);
-        *generation = generation.wrapping_add(1);
-        self.inner.waiters.notify_all();
-    }
-
-    pub(crate) fn snapshot(&self) -> u64 {
-        *lock_or_recover(&self.inner.generation)
-    }
-
-    pub(crate) fn wait_for_change(&self, observed: u64, timeout: Option<Duration>) -> bool {
-        let mut generation = lock_or_recover(&self.inner.generation);
-        if *generation != observed {
-            return true;
-        }
-
-        let Some(timeout) = timeout else {
-            while *generation == observed {
-                generation = wait_or_recover(&self.inner.waiters, generation);
-            }
-            return true;
-        };
-
-        if timeout.is_zero() {
-            return *generation != observed;
-        }
-
-        let deadline = Instant::now() + timeout;
-        loop {
-            let now = Instant::now();
-            if now >= deadline {
-                return *generation != observed;
-            }
-
-            let remaining = deadline.saturating_duration_since(now);
-            let (next_generation, wait_result) =
-                wait_timeout_or_recover(&self.inner.waiters, generation, remaining);
-            generation = next_generation;
-            if *generation != observed {
-                return true;
-            }
-            if wait_result.timed_out() {
-                return false;
-            }
-        }
-    }
-}
-
-fn lock_or_recover<'a, T>(mutex: &'a Mutex<T>) -> MutexGuard<'a, T> {
-    match mutex.lock() {
-        Ok(guard) => guard,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
-
-fn wait_or_recover<'a, T>(condvar: &Condvar, guard: MutexGuard<'a, T>) -> MutexGuard<'a, T> {
-    match condvar.wait(guard) {
-        Ok(guard) => guard,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
-
-fn wait_timeout_or_recover<'a, T>(
-    condvar: &Condvar,
-    guard: MutexGuard<'a, T>,
-    timeout: Duration,
-) -> (MutexGuard<'a, T>, std::sync::WaitTimeoutResult) {
-    match condvar.wait_timeout(guard, timeout) {
-        Ok(result) => result,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::PollNotifier;
-    use std::sync::mpsc;
-    use std::thread;
-    use std::time::Duration;
-
-    #[test]
-    fn infinite_wait_returns_after_notification_without_waiter_storage() {
-        let notifier = PollNotifier::default();
-        let observed = notifier.snapshot();
-        let waiter = notifier.clone();
-        let (started_tx, started_rx) = mpsc::channel();
-        let (done_tx, done_rx) = mpsc::channel();
-
-        let handle = thread::spawn(move || {
-            started_tx.send(()).expect("signal waiter start");
-            let changed = waiter.wait_for_change(observed, None);
-            done_tx.send(changed).expect("signal waiter result");
-        });
-
-        started_rx.recv().expect("waiter should start");
-        assert!(
-            done_rx.recv_timeout(Duration::from_millis(25)).is_err(),
-            "waiter should stay blocked before notification"
-        );
-
-        notifier.notify();
-        assert!(done_rx
-            .recv_timeout(Duration::from_secs(1))
-            .expect("waiter should wake after notification"));
-        handle.join().expect("waiter thread should finish");
-    }
-
-    #[test]
-    fn saturated_generation_still_notifies_waiters() {
-        let notifier = PollNotifier::default();
-        {
-            let mut generation = super::lock_or_recover(&notifier.inner.generation);
-            *generation = u64::MAX;
-        }
-
-        let observed = notifier.snapshot();
-        let waiter = notifier.clone();
-        let (started_tx, started_rx) = mpsc::channel();
-        let (done_tx, done_rx) = mpsc::channel();
-
-        let handle = thread::spawn(move || {
-            started_tx.send(()).expect("signal waiter start");
-            let changed = waiter.wait_for_change(observed, Some(Duration::from_secs(1)));
-            done_tx.send(changed).expect("signal waiter result");
-        });
-
-        started_rx.recv().expect("waiter should start");
-        notifier.notify();
-
-        assert!(
-            done_rx
-                .recv_timeout(Duration::from_secs(2))
-                .expect("waiter should return after saturated notify"),
-            "saturated notify should still wake the waiter"
-        );
-        handle.join().expect("waiter thread should finish");
-    }
-}
diff --git a/crates/kernel/src/process_table.rs b/crates/kernel/src/process_table.rs
deleted file mode 100644
index a0459973e..000000000
--- a/crates/kernel/src/process_table.rs
+++ /dev/null
@@ -1,1578 +0,0 @@
-use crate::user::ProcessIdentity;
-use std::collections::{BTreeMap, BTreeSet, VecDeque};
-use std::error::Error;
-use std::fmt;
-use std::ops::{BitOr, BitOrAssign};
-use std::sync::atomic::{AtomicUsize, Ordering};
-#[cfg(not(target_arch = "wasm32"))]
-use std::sync::WaitTimeoutResult;
-use std::sync::{Arc, Condvar, Mutex, MutexGuard, Weak};
-#[cfg(not(target_arch = "wasm32"))]
-use std::thread;
-use std::time::Duration;
-use web_time::{Instant, SystemTime, UNIX_EPOCH};
-
-const ZOMBIE_TTL: Duration = Duration::from_secs(60);
-const INIT_PID: u32 = 1;
-const MAX_ALLOCATED_PID: u32 = i32::MAX as u32;
-pub const DEFAULT_PROCESS_UMASK: u32 = 0o022;
-pub const SIGHUP: i32 = 1;
-pub const SIGCHLD: i32 = 17;
-pub const SIGCONT: i32 = 18;
-pub const SIGSTOP: i32 = 19;
-pub const SIGTSTP: i32 = 20;
-pub const SIGTERM: i32 = 15;
-pub const SIGKILL: i32 = 9;
-pub const SIGPIPE: i32 = 13;
-pub const SIGWINCH: i32 = 28;
-const MAX_SIGNAL: i32 = 64;
-
-pub type ProcessResult<T> = Result<T, ProcessTableError>;
-pub type ProcessExitCallback = Arc<dyn Fn(i32) + Send + Sync + 'static>;
-
-pub trait DriverProcess: Send + Sync {
-    fn kill(&self, signal: i32);
-    fn wait(&self, timeout: Duration) -> Option<i32>;
-    fn set_on_exit(&self, callback: ProcessExitCallback);
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ProcessTableError {
-    code: &'static str,
-    message: String,
-}
-
-impl ProcessTableError {
-    pub fn code(&self) -> &'static str {
-        self.code
-    }
-
-    fn invalid_signal(signal: i32) -> Self {
-        Self {
-            code: "EINVAL",
-            message: format!("invalid signal {signal}"),
-        }
-    }
-
-    fn no_such_process(pid: u32) -> Self {
-        Self {
-            code: "ESRCH",
-            message: format!("no such process {pid}"),
-        }
-    }
-
-    fn no_such_process_group(pgid: u32) -> Self {
-        Self {
-            code: "ESRCH",
-            message: format!("no such process group {pgid}"),
-        }
-    }
-
-    fn no_matching_child(waiter_pid: u32, pid: i32) -> Self {
-        Self {
-            code: "ECHILD",
-            message: format!("process {waiter_pid} has no matching child for waitpid({pid})"),
-        }
-    }
-
-    fn pid_space_exhausted() -> Self {
-        Self {
-            code: "EAGAIN",
-            message: String::from("process id space exhausted"),
-        }
-    }
-
-    fn permission_denied(message: impl Into<String>) -> Self {
-        Self {
-            code: "EPERM",
-            message: message.into(),
-        }
-    }
-}
-
-impl fmt::Display for ProcessTableError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}: {}", self.code, self.message)
-    }
-}
-
-impl Error for ProcessTableError {}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum ProcessStatus {
-    Running,
-    Stopped,
-    Exited,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
-pub struct SignalSet {
-    bits: u64,
-}
-
-impl SignalSet {
-    pub const fn empty() -> Self {
-        Self { bits: 0 }
-    }
-
-    pub const fn is_empty(self) -> bool {
-        self.bits == 0
-    }
-
-    pub fn from_signal(signal: i32) -> ProcessResult<Self> {
-        Ok(Self {
-            bits: signal_bit(signal)?,
-        })
-    }
-
-    pub fn from_signals(signals: impl IntoIterator<Item = i32>) -> ProcessResult<Self> {
-        let mut set = Self::empty();
-        for signal in signals {
-            set.insert(signal)?;
-        }
-        Ok(set)
-    }
-
-    pub fn contains(self, signal: i32) -> bool {
-        signal_bit(signal)
-            .map(|bit| self.bits & bit != 0)
-            .unwrap_or(false)
-    }
-
-    pub fn insert(&mut self, signal: i32) -> ProcessResult<()> {
-        self.bits |= signal_bit(signal)?;
-        Ok(())
-    }
-
-    pub fn remove(&mut self, signal: i32) -> ProcessResult<()> {
-        self.bits &= !signal_bit(signal)?;
-        Ok(())
-    }
-
-    pub fn union(self, other: Self) -> Self {
-        Self {
-            bits: self.bits | other.bits,
-        }
-    }
-
-    pub fn difference(self, other: Self) -> Self {
-        Self {
-            bits: self.bits & !other.bits,
-        }
-    }
-
-    pub fn signals(self) -> Vec<i32> {
-        let mut signals = Vec::new();
-        for signal in 1..=MAX_SIGNAL {
-            if self.contains(signal) {
-                signals.push(signal);
-            }
-        }
-        signals
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum SigmaskHow {
-    Block,
-    Unblock,
-    SetMask,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct WaitPidFlags {
-    bits: u32,
-}
-
-impl WaitPidFlags {
-    pub const WNOHANG: Self = Self { bits: 1 << 0 };
-    pub const WUNTRACED: Self = Self { bits: 1 << 1 };
-    pub const WCONTINUED: Self = Self { bits: 1 << 2 };
-
-    pub const fn empty() -> Self {
-        Self { bits: 0 }
-    }
-
-    pub const fn contains(self, other: Self) -> bool {
-        (self.bits & other.bits) == other.bits
-    }
-}
-
-impl Default for WaitPidFlags {
-    fn default() -> Self {
-        Self::empty()
-    }
-}
-
-impl BitOr for WaitPidFlags {
-    type Output = Self;
-
-    fn bitor(self, rhs: Self) -> Self::Output {
-        Self {
-            bits: self.bits | rhs.bits,
-        }
-    }
-}
-
-impl BitOrAssign for WaitPidFlags {
-    fn bitor_assign(&mut self, rhs: Self) {
-        self.bits |= rhs.bits;
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum ProcessWaitEvent {
-    Exited,
-    Stopped,
-    Continued,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ProcessWaitResult {
-    pub pid: u32,
-    pub status: i32,
-    pub event: ProcessWaitEvent,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ProcessFileDescriptors {
-    pub stdin: u32,
-    pub stdout: u32,
-    pub stderr: u32,
-}
-
-impl Default for ProcessFileDescriptors {
-    fn default() -> Self {
-        Self {
-            stdin: 0,
-            stdout: 1,
-            stderr: 2,
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ProcessContext {
-    pub pid: u32,
-    pub ppid: u32,
-    pub env: BTreeMap<String, String>,
-    pub cwd: String,
-    pub umask: u32,
-    pub fds: ProcessFileDescriptors,
-    pub identity: ProcessIdentity,
-    pub blocked_signals: SignalSet,
-    pub pending_signals: SignalSet,
-}
-
-impl Default for ProcessContext {
-    fn default() -> Self {
-        Self {
-            pid: 0,
-            ppid: 0,
-            env: BTreeMap::new(),
-            cwd: String::from("/"),
-            umask: DEFAULT_PROCESS_UMASK,
-            fds: ProcessFileDescriptors::default(),
-            identity: ProcessIdentity::default(),
-            blocked_signals: SignalSet::empty(),
-            pending_signals: SignalSet::empty(),
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ProcessEntry {
-    pub pid: u32,
-    pub ppid: u32,
-    pub pgid: u32,
-    pub sid: u32,
-    pub driver: String,
-    pub command: String,
-    pub args: Vec<String>,
-    pub status: ProcessStatus,
-    pub exit_code: Option<i32>,
-    pub exit_time_ms: Option<u64>,
-    pub env: BTreeMap<String, String>,
-    pub cwd: String,
-    pub umask: u32,
-    pub identity: ProcessIdentity,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ProcessInfo {
-    pub pid: u32,
-    pub ppid: u32,
-    pub pgid: u32,
-    pub sid: u32,
-    pub driver: String,
-    pub command: String,
-    pub status: ProcessStatus,
-    pub exit_code: Option<i32>,
-    pub identity: ProcessIdentity,
-}
-
-#[derive(Clone)]
-pub struct ProcessTable {
-    inner: Arc<ProcessTableInner>,
-}
-
-struct ProcessTableInner {
-    state: Mutex<ProcessTableState>,
-    waiters: Condvar,
-    reaper: Arc<ZombieReaper>,
-}
-
-struct ProcessRecord {
-    entry: ProcessEntry,
-    driver_process: Arc<dyn DriverProcess>,
-    pending_wait_events: VecDeque<PendingWaitEvent>,
-    blocked_signals: SignalSet,
-    pending_signals: SignalSet,
-}
-
-struct ScheduledSignalDelivery {
-    pid: u32,
-    signal: i32,
-    status: ProcessStatus,
-    driver_process: Arc<dyn DriverProcess>,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-struct PendingWaitEvent {
-    status: i32,
-    event: ProcessWaitEvent,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum WaitSelector {
-    AnyChild,
-    ChildPid(u32),
-    ProcessGroup(u32),
-}
-
-struct ZombieReaper {
-    state: Mutex<ZombieReaperState>,
-    wake: Condvar,
-    thread_spawns: AtomicUsize,
-}
-
-#[derive(Default)]
-struct ZombieReaperState {
-    deadlines: BTreeMap<u32, Instant>,
-    shutdown: bool,
-}
-
-struct ProcessTableState {
-    entries: BTreeMap<u32, ProcessRecord>,
-    next_pid: u32,
-    zombie_ttl: Duration,
-    on_process_exit: Option<Arc<dyn Fn(u32) + Send + Sync + 'static>>,
-    terminating_all: bool,
-}
-
-impl Default for ProcessTableState {
-    fn default() -> Self {
-        Self {
-            entries: BTreeMap::new(),
-            next_pid: 1,
-            zombie_ttl: ZOMBIE_TTL,
-            on_process_exit: None,
-            terminating_all: false,
-        }
-    }
-}
-
-impl Default for ProcessTable {
-    fn default() -> Self {
-        let reaper = Arc::new(ZombieReaper::default());
-        Self {
-            inner: {
-                let inner = Arc::new(ProcessTableInner {
-                    state: Mutex::new(ProcessTableState::default()),
-                    waiters: Condvar::new(),
-                    reaper,
-                });
-                start_zombie_reaper(Arc::downgrade(&inner), Arc::clone(&inner.reaper));
-                inner
-            },
-        }
-    }
-}
-
-impl ProcessTable {
-    pub fn new() -> Self {
-        Self::default()
-    }
-
-    pub fn with_zombie_ttl(zombie_ttl: Duration) -> Self {
-        let table = Self::new();
-        table.inner.lock_state().zombie_ttl = zombie_ttl;
-        table
-    }
-
-    pub fn allocate_pid(&self) -> ProcessResult<u32> {
-        let mut state = self.inner.lock_state();
-        let start = normalize_next_pid(state.next_pid);
-        let mut pid = start;
-
-        loop {
-            if !state.entries.contains_key(&pid) {
-                state.next_pid = next_allocated_pid_after(pid);
-                return Ok(pid);
-            }
-
-            pid = next_allocated_pid_after(pid);
-            if pid == start {
-                return Err(ProcessTableError::pid_space_exhausted());
-            }
-        }
-    }
-
-    pub fn set_on_process_exit(&self, callback: Option<Arc<dyn Fn(u32) + Send + Sync + 'static>>) {
-        self.inner.lock_state().on_process_exit = callback;
-    }
-
-    pub fn register(
-        &self,
-        pid: u32,
-        driver: impl Into<String>,
-        command: impl Into<String>,
-        args: Vec<String>,
-        ctx: ProcessContext,
-        driver_process: Arc<dyn DriverProcess>,
-    ) -> ProcessEntry {
-        let (pgid, sid) = {
-            let state = self.inner.lock_state();
-            match state.entries.get(&ctx.ppid) {
-                Some(parent) => (parent.entry.pgid, parent.entry.sid),
-                None => (pid, pid),
-            }
-        };
-
-        let entry = ProcessEntry {
-            pid,
-            ppid: ctx.ppid,
-            pgid,
-            sid,
-            driver: driver.into(),
-            command: command.into(),
-            args,
-            status: ProcessStatus::Running,
-            exit_code: None,
-            exit_time_ms: None,
-            env: ctx.env,
-            cwd: ctx.cwd,
-            umask: ctx.umask & 0o777,
-            identity: ctx.identity,
-        };
-
-        let weak = Arc::downgrade(&self.inner);
-        driver_process.set_on_exit(Arc::new(move |code| {
-            if let Some(inner) = weak.upgrade() {
-                mark_exited_inner(&inner, pid, code);
-            }
-        }));
-
-        let mut state = self.inner.lock_state();
-        state.next_pid = next_pid_after_registered(state.next_pid, pid);
-        state.entries.insert(
-            pid,
-            ProcessRecord {
-                entry: entry.clone(),
-                driver_process,
-                pending_wait_events: VecDeque::new(),
-                blocked_signals: ctx.blocked_signals,
-                pending_signals: ctx.pending_signals,
-            },
-        );
-
-        entry
-    }
-
-    pub fn get(&self, pid: u32) -> Option<ProcessEntry> {
-        self.inner
-            .lock_state()
-            .entries
-            .get(&pid)
-            .map(|record| record.entry.clone())
-    }
-
-    pub fn zombie_timer_count(&self) -> usize {
-        self.reap_due_zombies();
-        self.inner.reaper.scheduled_count()
-    }
-
-    /// Cooperatively reap any zombies whose TTL deadline has elapsed.
-    ///
-    /// On native this is a cheap no-op fast path (the background thread does the
-    /// reaping); on wasm32 there is no reaper thread, so process-table
-    /// operations drive reaping through this instead.
-    pub fn reap_due_zombies(&self) {
-        while let Some(pid) = self.inner.reaper.take_due_pid_now() {
-            reap_due_pid(&self.inner, &self.inner.reaper, pid);
-        }
-    }
-
-    pub fn zombie_reaper_thread_spawn_count(&self) -> usize {
-        self.inner.reaper.thread_spawn_count()
-    }
-
-    pub fn running_count(&self) -> usize {
-        self.inner
-            .lock_state()
-            .entries
-            .values()
-            .filter(|record| record.entry.status == ProcessStatus::Running)
-            .count()
-    }
-
-    pub fn mark_exited(&self, pid: u32, exit_code: i32) {
-        mark_exited_inner(&self.inner, pid, exit_code);
-    }
-
-    pub fn mark_stopped(&self, pid: u32, signal: i32) {
-        mark_wait_event_inner(
-            &self.inner,
-            pid,
-            ProcessStatus::Stopped,
-            PendingWaitEvent {
-                status: signal,
-                event: ProcessWaitEvent::Stopped,
-            },
-        );
-    }
-
-    pub fn mark_continued(&self, pid: u32) {
-        mark_wait_event_inner(
-            &self.inner,
-            pid,
-            ProcessStatus::Running,
-            PendingWaitEvent {
-                status: SIGCONT,
-                event: ProcessWaitEvent::Continued,
-            },
-        );
-    }
-
-    pub fn waitpid(&self, pid: u32) -> ProcessResult<(u32, i32)> {
-        let mut state = self.inner.lock_state();
-        loop {
-            let Some(record) = state.entries.get(&pid) else {
-                return Err(ProcessTableError::no_such_process(pid));
-            };
-
-            if record.entry.status == ProcessStatus::Exited {
-                let status = record.entry.exit_code.unwrap_or_default();
-                state.entries.remove(&pid);
-                drop(state);
-                self.inner.reaper.cancel(pid);
-                self.inner.waiters.notify_all();
-                return Ok((pid, status));
-            }
-
-            state = self.inner.wait_for_state(state);
-        }
-    }
-
-    pub fn waitpid_for(
-        &self,
-        waiter_pid: u32,
-        pid: i32,
-        flags: WaitPidFlags,
-    ) -> ProcessResult<Option<ProcessWaitResult>> {
-        let mut state = self.inner.lock_state();
-        loop {
-            let selector = resolve_wait_selector(&state, waiter_pid, pid)?;
-            let matching_children = matching_child_pids(&state, waiter_pid, selector);
-            if matching_children.is_empty() {
-                return Err(ProcessTableError::no_matching_child(waiter_pid, pid));
-            }
-
-            if let Some(result) = take_waitable_event(&mut state, &matching_children, flags) {
-                let should_reap = result.event == ProcessWaitEvent::Exited;
-                drop(state);
-                if should_reap {
-                    self.inner.reaper.cancel(result.pid);
-                    self.inner.waiters.notify_all();
-                }
-                return Ok(Some(result));
-            }
-
-            if flags.contains(WaitPidFlags::WNOHANG) {
-                return Ok(None);
-            }
-
-            state = self.inner.wait_for_state(state);
-        }
-    }
-
-    pub fn kill(&self, pid: i32, signal: i32) -> ProcessResult<()> {
-        if !(0..=MAX_SIGNAL).contains(&signal) {
-            return Err(ProcessTableError::invalid_signal(signal));
-        }
-
-        let deliveries = {
-            let mut state = self.inner.lock_state();
-            if pid < 0 {
-                let pgid = pid.unsigned_abs();
-                let grouped = state
-                    .entries
-                    .values()
-                    .filter(|record| record.entry.pgid == pgid)
-                    .map(|record| record.entry.pid)
-                    .collect::<Vec<_>>();
-                if grouped.is_empty() {
-                    return Err(ProcessTableError::no_such_process_group(pgid));
-                }
-                if signal == 0 {
-                    return Ok(());
-                }
-                collect_signal_deliveries(&mut state, &grouped, signal)?
-            } else {
-                let pid = pid as u32;
-                let Some(record) = state.entries.get(&pid) else {
-                    return Err(ProcessTableError::no_such_process(pid));
-                };
-                if record.entry.status == ProcessStatus::Exited || signal == 0 {
-                    return Ok(());
-                }
-                collect_signal_deliveries(&mut state, &[pid], signal)?
-            }
-        };
-
-        if signal == 0 {
-            return Ok(());
-        }
-
-        deliver_signals(&self.inner, deliveries);
-        Ok(())
-    }
-
-    pub fn setpgid(&self, pid: u32, pgid: u32) -> ProcessResult<()> {
-        let mut state = self.inner.lock_state();
-        let (current_sid, target_pgid) = {
-            let Some(record) = state.entries.get(&pid) else {
-                return Err(ProcessTableError::no_such_process(pid));
-            };
-            (record.entry.sid, if pgid == 0 { pid } else { pgid })
-        };
-
-        if target_pgid != pid {
-            let mut group_exists = false;
-            for record in state.entries.values() {
-                if record.entry.pgid != target_pgid || record.entry.status == ProcessStatus::Exited
-                {
-                    continue;
-                }
-                if record.entry.sid != current_sid {
-                    return Err(ProcessTableError::permission_denied(
-                        "cannot join process group in different session",
-                    ));
-                }
-                group_exists = true;
-                break;
-            }
-            if !group_exists {
-                return Err(ProcessTableError::permission_denied(format!(
-                    "no such process group {target_pgid}"
-                )));
-            }
-        }
-
-        if let Some(record) = state.entries.get_mut(&pid) {
-            record.entry.pgid = target_pgid;
-        }
-        Ok(())
-    }
-
-    pub fn getpgid(&self, pid: u32) -> ProcessResult<u32> {
-        self.get(pid)
-            .map(|entry| entry.pgid)
-            .ok_or_else(|| ProcessTableError::no_such_process(pid))
-    }
-
-    pub fn setsid(&self, pid: u32) -> ProcessResult<u32> {
-        let mut state = self.inner.lock_state();
-        let Some(record) = state.entries.get_mut(&pid) else {
-            return Err(ProcessTableError::no_such_process(pid));
-        };
-
-        if record.entry.pgid == pid {
-            return Err(ProcessTableError::permission_denied(format!(
-                "process {pid} is already a process group leader"
-            )));
-        }
-
-        record.entry.sid = pid;
-        record.entry.pgid = pid;
-        Ok(pid)
-    }
-
-    pub fn getsid(&self, pid: u32) -> ProcessResult<u32> {
-        self.get(pid)
-            .map(|entry| entry.sid)
-            .ok_or_else(|| ProcessTableError::no_such_process(pid))
-    }
-
-    pub fn getppid(&self, pid: u32) -> ProcessResult<u32> {
-        self.get(pid)
-            .map(|entry| entry.ppid)
-            .ok_or_else(|| ProcessTableError::no_such_process(pid))
-    }
-
-    pub fn get_umask(&self, pid: u32) -> ProcessResult<u32> {
-        self.get(pid)
-            .map(|entry| entry.umask)
-            .ok_or_else(|| ProcessTableError::no_such_process(pid))
-    }
-
-    pub fn set_umask(&self, pid: u32, umask: u32) -> ProcessResult<u32> {
-        let mut state = self.inner.lock_state();
-        let record = state
-            .entries
-            .get_mut(&pid)
-            .ok_or_else(|| ProcessTableError::no_such_process(pid))?;
-        let previous = record.entry.umask;
-        record.entry.umask = umask & 0o777;
-        Ok(previous)
-    }
-
-    pub fn has_process_group(&self, pgid: u32) -> bool {
-        self.inner
-            .lock_state()
-            .entries
-            .values()
-            .any(|record| record.entry.pgid == pgid && record.entry.status != ProcessStatus::Exited)
-    }
-
-    pub fn list_processes(&self) -> BTreeMap<u32, ProcessInfo> {
-        self.inner
-            .lock_state()
-            .entries
-            .values()
-            .map(|record| (record.entry.pid, to_process_info(&record.entry)))
-            .collect()
-    }
-
-    pub fn terminate_all(&self) {
-        let running = {
-            let mut state = self.inner.lock_state();
-            state.terminating_all = true;
-            self.inner.reaper.clear();
-            state
-                .entries
-                .values()
-                .filter(|record| record.entry.status == ProcessStatus::Running)
-                .map(|record| (record.entry.pid, Arc::clone(&record.driver_process)))
-                .collect::<Vec<_>>()
-        };
-
-        for (_, driver) in &running {
-            driver.kill(SIGTERM);
-        }
-        for (pid, driver) in &running {
-            if let Some(exit_code) = driver.wait(Duration::from_secs(1)) {
-                self.mark_exited(*pid, exit_code);
-            }
-        }
-
-        let survivors = {
-            let state = self.inner.lock_state();
-            running
-                .iter()
-                .filter(|(pid, _)| {
-                    state
-                        .entries
-                        .get(pid)
-                        .map(|record| record.entry.status == ProcessStatus::Running)
-                        .unwrap_or(false)
-                })
-                .cloned()
-                .collect::<Vec<_>>()
-        };
-
-        for (_, driver) in &survivors {
-            driver.kill(SIGKILL);
-        }
-        for (pid, driver) in &survivors {
-            if let Some(exit_code) = driver.wait(Duration::from_millis(500)) {
-                self.mark_exited(*pid, exit_code);
-            }
-        }
-
-        self.inner.lock_state().terminating_all = false;
-    }
-
-    pub fn sigprocmask(
-        &self,
-        pid: u32,
-        how: SigmaskHow,
-        set: SignalSet,
-    ) -> ProcessResult<SignalSet> {
-        let (previous, deliveries) = {
-            let mut state = self.inner.lock_state();
-            let record = state
-                .entries
-                .get_mut(&pid)
-                .ok_or_else(|| ProcessTableError::no_such_process(pid))?;
-            let previous = record.blocked_signals;
-            record.blocked_signals = match how {
-                SigmaskHow::Block => previous.union(set),
-                SigmaskHow::Unblock => previous.difference(set),
-                SigmaskHow::SetMask => set,
-            };
-
-            let unblocked_pending = record.pending_signals.difference(record.blocked_signals);
-            let deliveries = collect_pending_signal_deliveries(record, unblocked_pending)?;
-            (previous, deliveries)
-        };
-
-        deliver_signals(&self.inner, deliveries);
-        Ok(previous)
-    }
-
-    pub fn sigpending(&self, pid: u32) -> ProcessResult<SignalSet> {
-        self.inner
-            .lock_state()
-            .entries
-            .get(&pid)
-            .map(|record| record.pending_signals)
-            .ok_or_else(|| ProcessTableError::no_such_process(pid))
-    }
-}
-
-fn to_process_info(entry: &ProcessEntry) -> ProcessInfo {
-    ProcessInfo {
-        pid: entry.pid,
-        ppid: entry.ppid,
-        pgid: entry.pgid,
-        sid: entry.sid,
-        driver: entry.driver.clone(),
-        command: entry.command.clone(),
-        status: entry.status,
-        exit_code: entry.exit_code,
-        identity: entry.identity.clone(),
-    }
-}
-
-fn mark_exited_inner(inner: &Arc<ProcessTableInner>, pid: u32, exit_code: i32) {
-    let (callback, zombie_ttl, should_schedule, deliveries) = {
-        let mut state = inner.lock_state();
-        let (ppid, pgid) = {
-            let Some(record) = state.entries.get_mut(&pid) else {
-                return;
-            };
-
-            if record.entry.status == ProcessStatus::Exited {
-                return;
-            }
-
-            record.entry.status = ProcessStatus::Exited;
-            record.entry.exit_code = Some(exit_code);
-            record.entry.exit_time_ms = Some(now_ms());
-            let ppid = record.entry.ppid;
-            let pgid = record.entry.pgid;
-            (ppid, pgid)
-        };
-        let mut affected_pgids = BTreeSet::from([pgid]);
-        reparent_children_to_init(&mut state, pid, &mut affected_pgids);
-
-        let orphaned_group_targets = collect_orphaned_group_signal_targets(&state, &affected_pgids);
-
-        let should_schedule = !state.terminating_all;
-        let mut deliveries = Vec::new();
-        if should_schedule {
-            if let Some(parent) = state
-                .entries
-                .get_mut(&ppid)
-                .filter(|parent| parent.entry.status == ProcessStatus::Running)
-            {
-                if let Some(delivery) =
-                    queue_or_schedule_signal(parent, SIGCHLD).expect("SIGCHLD should be valid")
-                {
-                    deliveries.push(delivery);
-                }
-            }
-        }
-
-        for target_pid in orphaned_group_targets {
-            if let Some(record) = state.entries.get_mut(&target_pid) {
-                if let Some(delivery) =
-                    queue_or_schedule_signal(record, SIGHUP).expect("SIGHUP should be valid")
-                {
-                    deliveries.push(delivery);
-                }
-                if let Some(delivery) =
-                    queue_or_schedule_signal(record, SIGCONT).expect("SIGCONT should be valid")
-                {
-                    deliveries.push(delivery);
-                }
-            }
-        }
-
-        (
-            state.on_process_exit.clone(),
-            state.zombie_ttl,
-            should_schedule,
-            deliveries,
-        )
-    };
-
-    if should_schedule {
-        inner.reaper.schedule(pid, zombie_ttl);
-    } else {
-        inner.reaper.cancel(pid);
-    }
-
-    deliver_signals(inner, deliveries);
-
-    if let Some(on_process_exit) = callback {
-        on_process_exit(pid);
-    }
-
-    inner.waiters.notify_all();
-}
-
-fn reparent_children_to_init(
-    state: &mut ProcessTableState,
-    exiting_pid: u32,
-    affected_pgids: &mut BTreeSet<u32>,
-) {
-    let new_parent = reparent_target_pid(state, exiting_pid);
-    for record in state.entries.values_mut() {
-        if record.entry.ppid != exiting_pid {
-            continue;
-        }
-        record.entry.ppid = new_parent;
-        affected_pgids.insert(record.entry.pgid);
-    }
-}
-
-fn reparent_target_pid(state: &ProcessTableState, exiting_pid: u32) -> u32 {
-    if exiting_pid != INIT_PID
-        && state
-            .entries
-            .get(&INIT_PID)
-            .map(|record| record.entry.status != ProcessStatus::Exited)
-            .unwrap_or(false)
-    {
-        INIT_PID
-    } else {
-        0
-    }
-}
-
-fn collect_orphaned_group_signal_targets(
-    state: &ProcessTableState,
-    candidate_pgids: &BTreeSet<u32>,
-) -> Vec<u32> {
-    let mut targets = Vec::new();
-    for &pgid in candidate_pgids {
-        if !process_group_is_orphaned(state, pgid) || !process_group_has_stopped_member(state, pgid)
-        {
-            continue;
-        }
-
-        for record in state.entries.values() {
-            if record.entry.pgid == pgid && record.entry.status != ProcessStatus::Exited {
-                targets.push(record.entry.pid);
-            }
-        }
-    }
-    targets
-}
-
-fn process_group_is_orphaned(state: &ProcessTableState, pgid: u32) -> bool {
-    let mut has_member = false;
-    for record in state.entries.values() {
-        if record.entry.pgid != pgid || record.entry.status == ProcessStatus::Exited {
-            continue;
-        }
-        has_member = true;
-        if has_parent_outside_group_in_same_session(state, &record.entry) {
-            return false;
-        }
-    }
-
-    has_member
-}
-
-fn has_parent_outside_group_in_same_session(
-    state: &ProcessTableState,
-    entry: &ProcessEntry,
-) -> bool {
-    match entry.ppid {
-        0 | INIT_PID => false,
-        ppid => state
-            .entries
-            .get(&ppid)
-            .map(|parent| {
-                parent.entry.status != ProcessStatus::Exited
-                    && parent.entry.sid == entry.sid
-                    && parent.entry.pgid != entry.pgid
-            })
-            .unwrap_or(false),
-    }
-}
-
-fn process_group_has_stopped_member(state: &ProcessTableState, pgid: u32) -> bool {
-    state
-        .entries
-        .values()
-        .any(|record| record.entry.pgid == pgid && record.entry.status == ProcessStatus::Stopped)
-}
-
-fn mark_wait_event_inner(
-    inner: &Arc<ProcessTableInner>,
-    pid: u32,
-    next_status: ProcessStatus,
-    event: PendingWaitEvent,
-) {
-    let deliveries = {
-        let mut state = inner.lock_state();
-        let ppid = {
-            let Some(record) = state.entries.get_mut(&pid) else {
-                return;
-            };
-
-            if record.entry.status == ProcessStatus::Exited || record.entry.status == next_status {
-                return;
-            }
-
-            record.entry.status = next_status;
-            record.pending_wait_events.push_back(event);
-            record.entry.ppid
-        };
-
-        state
-            .entries
-            .get_mut(&ppid)
-            .filter(|parent| parent.entry.status == ProcessStatus::Running)
-            .and_then(|parent| {
-                queue_or_schedule_signal(parent, SIGCHLD)
-                    .expect("SIGCHLD should be valid")
-                    .into_iter()
-                    .next()
-            })
-            .into_iter()
-            .collect::<Vec<_>>()
-    };
-
-    deliver_signals(inner, deliveries);
-
-    inner.waiters.notify_all();
-}
-
-fn signal_bit(signal: i32) -> ProcessResult<u64> {
-    if !(1..=MAX_SIGNAL).contains(&signal) {
-        return Err(ProcessTableError::invalid_signal(signal));
-    }
-    Ok(1u64 << (signal - 1))
-}
-
-fn normalize_next_pid(pid: u32) -> u32 {
-    if (INIT_PID..=MAX_ALLOCATED_PID).contains(&pid) {
-        pid
-    } else {
-        INIT_PID
-    }
-}
-
-fn next_allocated_pid_after(pid: u32) -> u32 {
-    if pid >= MAX_ALLOCATED_PID {
-        INIT_PID
-    } else {
-        pid + 1
-    }
-}
-
-fn next_pid_after_registered(current: u32, registered: u32) -> u32 {
-    let current = normalize_next_pid(current);
-    if !(INIT_PID..=MAX_ALLOCATED_PID).contains(&registered) {
-        return current;
-    }
-
-    if current <= registered {
-        next_allocated_pid_after(registered)
-    } else {
-        current
-    }
-}
-
-fn signal_can_be_blocked(signal: i32) -> bool {
-    !matches!(signal, SIGKILL | SIGSTOP | SIGCONT)
-}
-
-fn queue_or_schedule_signal(
-    record: &mut ProcessRecord,
-    signal: i32,
-) -> ProcessResult<Option<ScheduledSignalDelivery>> {
-    if signal_can_be_blocked(signal) && record.blocked_signals.contains(signal) {
-        record.pending_signals.insert(signal)?;
-        return Ok(None);
-    }
-
-    Ok(Some(ScheduledSignalDelivery {
-        pid: record.entry.pid,
-        signal,
-        status: record.entry.status,
-        driver_process: Arc::clone(&record.driver_process),
-    }))
-}
-
-fn collect_signal_deliveries(
-    state: &mut ProcessTableState,
-    target_pids: &[u32],
-    signal: i32,
-) -> ProcessResult<Vec<ScheduledSignalDelivery>> {
-    let mut deliveries = Vec::new();
-    for pid in target_pids {
-        let Some(record) = state.entries.get_mut(pid) else {
-            continue;
-        };
-        if let Some(delivery) = queue_or_schedule_signal(record, signal)? {
-            deliveries.push(delivery);
-        }
-    }
-    Ok(deliveries)
-}
-
-fn collect_pending_signal_deliveries(
-    record: &mut ProcessRecord,
-    signals: SignalSet,
-) -> ProcessResult<Vec<ScheduledSignalDelivery>> {
-    let mut deliveries = Vec::new();
-    for signal in signals.signals() {
-        record.pending_signals.remove(signal)?;
-        deliveries.push(ScheduledSignalDelivery {
-            pid: record.entry.pid,
-            signal,
-            status: record.entry.status,
-            driver_process: Arc::clone(&record.driver_process),
-        });
-    }
-    Ok(deliveries)
-}
-
-fn deliver_signals(inner: &Arc<ProcessTableInner>, deliveries: Vec<ScheduledSignalDelivery>) {
-    let mut stopped = Vec::new();
-    let mut continued = Vec::new();
-
-    for delivery in &deliveries {
-        match delivery.signal {
-            SIGSTOP | SIGTSTP if delivery.status == ProcessStatus::Running => {
-                stopped.push((delivery.pid, delivery.signal))
-            }
-            SIGCONT if delivery.status == ProcessStatus::Stopped => continued.push(delivery.pid),
-            _ => {}
-        }
-        delivery.driver_process.kill(delivery.signal);
-    }
-
-    for (pid, signal) in stopped {
-        mark_wait_event_inner(
-            inner,
-            pid,
-            ProcessStatus::Stopped,
-            PendingWaitEvent {
-                status: signal,
-                event: ProcessWaitEvent::Stopped,
-            },
-        );
-    }
-    for pid in continued {
-        mark_wait_event_inner(
-            inner,
-            pid,
-            ProcessStatus::Running,
-            PendingWaitEvent {
-                status: SIGCONT,
-                event: ProcessWaitEvent::Continued,
-            },
-        );
-    }
-}
-
-fn resolve_wait_selector(
-    state: &ProcessTableState,
-    waiter_pid: u32,
-    pid: i32,
-) -> ProcessResult<WaitSelector> {
-    let waiter = state
-        .entries
-        .get(&waiter_pid)
-        .ok_or_else(|| ProcessTableError::no_such_process(waiter_pid))?;
-
-    Ok(match pid {
-        -1 => WaitSelector::AnyChild,
-        0 => WaitSelector::ProcessGroup(waiter.entry.pgid),
-        p if p < -1 => WaitSelector::ProcessGroup(p.unsigned_abs()),
-        p => WaitSelector::ChildPid(p as u32),
-    })
-}
-
-fn matching_child_pids(
-    state: &ProcessTableState,
-    waiter_pid: u32,
-    selector: WaitSelector,
-) -> Vec<u32> {
-    state
-        .entries
-        .values()
-        .filter(|record| record.entry.ppid == waiter_pid)
-        .filter(|record| match selector {
-            WaitSelector::AnyChild => true,
-            WaitSelector::ChildPid(pid) => record.entry.pid == pid,
-            WaitSelector::ProcessGroup(pgid) => record.entry.pgid == pgid,
-        })
-        .map(|record| record.entry.pid)
-        .collect()
-}
-
-fn take_waitable_event(
-    state: &mut ProcessTableState,
-    matching_children: &[u32],
-    flags: WaitPidFlags,
-) -> Option<ProcessWaitResult> {
-    for child_pid in matching_children {
-        let mut non_exit_result = None;
-        let mut should_reap = false;
-        {
-            let record = state.entries.get_mut(child_pid)?;
-            if let Some(index) = record
-                .pending_wait_events
-                .iter()
-                .position(|event| is_waitable_event(event.event, flags))
-            {
-                let event = record
-                    .pending_wait_events
-                    .remove(index)
-                    .expect("pending wait event should exist");
-                non_exit_result = Some(ProcessWaitResult {
-                    pid: *child_pid,
-                    status: event.status,
-                    event: event.event,
-                });
-            } else if record.entry.status == ProcessStatus::Exited {
-                should_reap = true;
-            }
-        }
-
-        if let Some(result) = non_exit_result {
-            return Some(result);
-        }
-
-        if should_reap {
-            let record = state
-                .entries
-                .remove(child_pid)
-                .expect("exited child should still exist");
-            return Some(ProcessWaitResult {
-                pid: *child_pid,
-                status: record.entry.exit_code.unwrap_or_default(),
-                event: ProcessWaitEvent::Exited,
-            });
-        }
-    }
-
-    None
-}
-
-fn is_waitable_event(event: ProcessWaitEvent, flags: WaitPidFlags) -> bool {
-    match event {
-        ProcessWaitEvent::Exited => true,
-        ProcessWaitEvent::Stopped => flags.contains(WaitPidFlags::WUNTRACED),
-        ProcessWaitEvent::Continued => flags.contains(WaitPidFlags::WCONTINUED),
-    }
-}
-
-// On native, the zombie reaper runs on a background thread that blocks on a
-// condvar until the next TTL deadline. wasm32 is single-threaded with no
-// blocking primitives, so there the reaper is driven cooperatively via
-// `ProcessTable::reap_due_zombies` from process-table operations instead.
-#[cfg(not(target_arch = "wasm32"))]
-fn start_zombie_reaper(inner: Weak<ProcessTableInner>, reaper: Arc<ZombieReaper>) {
-    reaper.thread_spawns.fetch_add(1, Ordering::SeqCst);
-    thread::spawn(move || loop {
-        let Some(pid) = reaper.take_next_due_pid() else {
-            return;
-        };
-
-        let Some(inner) = inner.upgrade() else {
-            return;
-        };
-
-        reap_due_pid(&inner, &reaper, pid);
-    });
-}
-
-#[cfg(target_arch = "wasm32")]
-fn start_zombie_reaper(_inner: Weak<ProcessTableInner>, _reaper: Arc<ZombieReaper>) {}
-
-/// Reap a single due zombie pid (shared by the native reaper thread and the
-/// cooperative wasm drain). Removes the entry if it is an unparented zombie,
-/// otherwise reschedules it for a later TTL pass.
-fn reap_due_pid(inner: &ProcessTableInner, reaper: &ZombieReaper, pid: u32) {
-    let mut state = inner.lock_state();
-    let should_reap = state
-        .entries
-        .get(&pid)
-        .map(|record| {
-            record.entry.status == ProcessStatus::Exited
-                && !has_living_parent(&state, record.entry.ppid)
-        })
-        .unwrap_or(false);
-    if should_reap {
-        state.entries.remove(&pid);
-    } else if state
-        .entries
-        .get(&pid)
-        .map(|record| record.entry.status == ProcessStatus::Exited)
-        .unwrap_or(false)
-    {
-        reaper.schedule(pid, state.zombie_ttl);
-    }
-    drop(state);
-    inner.waiters.notify_all();
-}
-
-fn has_living_parent(state: &ProcessTableState, ppid: u32) -> bool {
-    ppid != 0
-        && state
-            .entries
-            .get(&ppid)
-            .map(|record| record.entry.status != ProcessStatus::Exited)
-            .unwrap_or(false)
-}
-
-impl ProcessTableInner {
-    fn lock_state(&self) -> MutexGuard<'_, ProcessTableState> {
-        lock_or_recover(&self.state)
-    }
-
-    fn wait_for_state<'a>(
-        &self,
-        guard: MutexGuard<'a, ProcessTableState>,
-    ) -> MutexGuard<'a, ProcessTableState> {
-        wait_or_recover(&self.waiters, guard)
-    }
-}
-
-fn now_ms() -> u64 {
-    SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .unwrap_or_default()
-        .as_millis() as u64
-}
-
-impl Default for ZombieReaper {
-    fn default() -> Self {
-        Self {
-            state: Mutex::new(ZombieReaperState::default()),
-            wake: Condvar::new(),
-            thread_spawns: AtomicUsize::new(0),
-        }
-    }
-}
-
-impl ZombieReaper {
-    fn schedule(&self, pid: u32, ttl: Duration) {
-        let mut state = lock_or_recover(&self.state);
-        state.deadlines.insert(pid, Instant::now() + ttl);
-        drop(state);
-        self.wake.notify_all();
-    }
-
-    fn cancel(&self, pid: u32) {
-        let mut state = lock_or_recover(&self.state);
-        let removed = state.deadlines.remove(&pid).is_some();
-        drop(state);
-        if removed {
-            self.wake.notify_all();
-        }
-    }
-
-    fn clear(&self) {
-        let mut state = lock_or_recover(&self.state);
-        let changed = !state.deadlines.is_empty();
-        state.deadlines.clear();
-        drop(state);
-        if changed {
-            self.wake.notify_all();
-        }
-    }
-
-    fn shutdown(&self) {
-        let mut state = lock_or_recover(&self.state);
-        state.shutdown = true;
-        drop(state);
-        self.wake.notify_all();
-    }
-
-    fn scheduled_count(&self) -> usize {
-        lock_or_recover(&self.state).deadlines.len()
-    }
-
-    fn thread_spawn_count(&self) -> usize {
-        self.thread_spawns.load(Ordering::SeqCst)
-    }
-
-    // Blocking variant used only by the native reaper thread.
-    #[cfg(not(target_arch = "wasm32"))]
-    fn take_next_due_pid(&self) -> Option<u32> {
-        let mut state = lock_or_recover(&self.state);
-        loop {
-            if state.shutdown {
-                return None;
-            }
-
-            let Some((pid, deadline)) = state
-                .deadlines
-                .iter()
-                .min_by_key(|(_, deadline)| **deadline)
-                .map(|(&pid, &deadline)| (pid, deadline))
-            else {
-                state = wait_or_recover(&self.wake, state);
-                continue;
-            };
-
-            let now = Instant::now();
-            if deadline <= now {
-                state.deadlines.remove(&pid);
-                return Some(pid);
-            }
-
-            let timeout = deadline.saturating_duration_since(now);
-            let (next_state, _) = wait_timeout_or_recover(&self.wake, state, timeout);
-            state = next_state;
-        }
-    }
-
-    /// Non-blocking variant of [`take_next_due_pid`]: returns a pid whose TTL
-    /// deadline has already elapsed, or `None` immediately. Used by the
-    /// cooperative wasm reaper, which cannot block.
-    fn take_due_pid_now(&self) -> Option<u32> {
-        let mut state = lock_or_recover(&self.state);
-        if state.shutdown {
-            return None;
-        }
-        let now = Instant::now();
-        let due = state
-            .deadlines
-            .iter()
-            .filter(|(_, deadline)| **deadline <= now)
-            .min_by_key(|(_, deadline)| **deadline)
-            .map(|(&pid, _)| pid);
-        if let Some(pid) = due {
-            state.deadlines.remove(&pid);
-        }
-        due
-    }
-}
-
-impl Drop for ProcessTableInner {
-    fn drop(&mut self) {
-        self.reaper.shutdown();
-    }
-}
-
-fn lock_or_recover<'a, T>(mutex: &'a Mutex<T>) -> MutexGuard<'a, T> {
-    match mutex.lock() {
-        Ok(guard) => guard,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
-
-fn wait_or_recover<'a, T>(condvar: &Condvar, guard: MutexGuard<'a, T>) -> MutexGuard<'a, T> {
-    match condvar.wait(guard) {
-        Ok(guard) => guard,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
-
-#[cfg(not(target_arch = "wasm32"))]
-fn wait_timeout_or_recover<'a, T>(
-    condvar: &Condvar,
-    guard: MutexGuard<'a, T>,
-    timeout: Duration,
-) -> (MutexGuard<'a, T>, WaitTimeoutResult) {
-    match condvar.wait_timeout(guard, timeout) {
-        Ok(result) => result,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[derive(Default)]
-    struct TestDriverProcess {
-        on_exit: Mutex<Option<ProcessExitCallback>>,
-    }
-
-    impl TestDriverProcess {
-        fn exit(&self, exit_code: i32) {
-            let callback = self
-                .on_exit
-                .lock()
-                .expect("test driver lock poisoned")
-                .clone();
-            if let Some(callback) = callback {
-                callback(exit_code);
-            }
-        }
-    }
-
-    impl DriverProcess for TestDriverProcess {
-        fn kill(&self, _signal: i32) {}
-
-        fn wait(&self, _timeout: Duration) -> Option<i32> {
-            None
-        }
-
-        fn set_on_exit(&self, callback: ProcessExitCallback) {
-            *self.on_exit.lock().expect("test driver lock poisoned") = Some(callback);
-        }
-    }
-
-    fn context(ppid: u32) -> ProcessContext {
-        ProcessContext {
-            ppid,
-            ..ProcessContext::default()
-        }
-    }
-
-    #[test]
-    fn allocate_pid_wraps_without_reusing_live_or_zombie_processes() {
-        let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-        let live_high = Arc::new(TestDriverProcess::default());
-        let zombie_high = Arc::new(TestDriverProcess::default());
-        let live_one = Arc::new(TestDriverProcess::default());
-        let max_pid = MAX_ALLOCATED_PID;
-
-        table.register(
-            max_pid - 1,
-            "test",
-            "live-high",
-            Vec::new(),
-            context(0),
-            live_high,
-        );
-        table.register(
-            max_pid,
-            "test",
-            "zombie-high",
-            Vec::new(),
-            context(0),
-            zombie_high.clone(),
-        );
-        table.register(1, "test", "live-one", Vec::new(), context(0), live_one);
-        zombie_high.exit(0);
-
-        table.inner.lock_state().next_pid = max_pid - 1;
-
-        assert_eq!(table.allocate_pid().expect("allocate pid"), 2);
-        assert_eq!(table.allocate_pid().expect("allocate pid"), 3);
-    }
-}
diff --git a/crates/kernel/src/pty.rs b/crates/kernel/src/pty.rs
deleted file mode 100644
index 7d9071207..000000000
--- a/crates/kernel/src/pty.rs
+++ /dev/null
@@ -1,1271 +0,0 @@
-use crate::fd_table::{
-    FdResult, FileDescription, ProcessFdTable, SharedFileDescription, FILETYPE_CHARACTER_DEVICE,
-    O_RDWR,
-};
-use crate::poll::{PollEvents, PollNotifier, POLLHUP, POLLIN, POLLOUT};
-use std::collections::{BTreeMap, VecDeque};
-use std::error::Error;
-use std::fmt;
-use std::sync::{Arc, Condvar, Mutex, MutexGuard};
-use std::time::Duration;
-use web_time::Instant;
-
-pub const MAX_PTY_BUFFER_BYTES: usize = 65_536;
-pub const MAX_CANON: usize = 4_096;
-pub const SIGINT: i32 = 2;
-pub const SIGQUIT: i32 = 3;
-pub const SIGTSTP: i32 = 20;
-const DEFAULT_PTY_COLUMNS: u16 = 80;
-const DEFAULT_PTY_ROWS: u16 = 24;
-
-pub type PtyResult<T> = Result<T, PtyError>;
-pub type SignalHandler = Arc<dyn Fn(u32, i32) + Send + Sync>;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PtyError {
-    code: &'static str,
-    message: String,
-}
-
-impl PtyError {
-    pub fn code(&self) -> &'static str {
-        self.code
-    }
-
-    fn bad_file_descriptor(message: impl Into<String>) -> Self {
-        Self {
-            code: "EBADF",
-            message: message.into(),
-        }
-    }
-
-    fn io(message: impl Into<String>) -> Self {
-        Self {
-            code: "EIO",
-            message: message.into(),
-        }
-    }
-
-    fn would_block(message: impl Into<String>) -> Self {
-        Self {
-            code: "EAGAIN",
-            message: message.into(),
-        }
-    }
-}
-
-impl fmt::Display for PtyError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}: {}", self.code, self.message)
-    }
-}
-
-impl Error for PtyError {}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
-pub struct LineDisciplineConfig {
-    pub canonical: Option<bool>,
-    pub echo: Option<bool>,
-    pub isig: Option<bool>,
-    pub opost: Option<bool>,
-    pub onlcr: Option<bool>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct Termios {
-    pub icrnl: bool,
-    pub opost: bool,
-    pub onlcr: bool,
-    pub icanon: bool,
-    pub echo: bool,
-    pub isig: bool,
-    pub cc: TermiosControlChars,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
-pub struct PartialTermios {
-    pub icrnl: Option<bool>,
-    pub opost: Option<bool>,
-    pub onlcr: Option<bool>,
-    pub icanon: Option<bool>,
-    pub echo: Option<bool>,
-    pub isig: Option<bool>,
-    pub cc: Option<PartialTermiosControlChars>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct TermiosControlChars {
-    pub vintr: u8,
-    pub vquit: u8,
-    pub vsusp: u8,
-    pub veof: u8,
-    pub verase: u8,
-    pub vkill: u8,
-    pub vwerase: u8,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
-pub struct PartialTermiosControlChars {
-    pub vintr: Option<u8>,
-    pub vquit: Option<u8>,
-    pub vsusp: Option<u8>,
-    pub veof: Option<u8>,
-    pub verase: Option<u8>,
-    pub vkill: Option<u8>,
-    pub vwerase: Option<u8>,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct PtyWindowSize {
-    pub cols: u16,
-    pub rows: u16,
-}
-
-impl Default for PtyWindowSize {
-    fn default() -> Self {
-        Self {
-            cols: DEFAULT_PTY_COLUMNS,
-            rows: DEFAULT_PTY_ROWS,
-        }
-    }
-}
-
-impl Default for Termios {
-    fn default() -> Self {
-        Self {
-            icrnl: true,
-            opost: true,
-            onlcr: true,
-            icanon: true,
-            echo: true,
-            isig: true,
-            cc: TermiosControlChars {
-                vintr: 0x03,
-                vquit: 0x1c,
-                vsusp: 0x1a,
-                veof: 0x04,
-                verase: 0x7f,
-                vkill: 0x15,
-                vwerase: 0x17,
-            },
-        }
-    }
-}
-
-impl Termios {
-    fn merge(&mut self, update: PartialTermios) {
-        if let Some(icrnl) = update.icrnl {
-            self.icrnl = icrnl;
-        }
-        if let Some(opost) = update.opost {
-            self.opost = opost;
-        }
-        if let Some(onlcr) = update.onlcr {
-            self.onlcr = onlcr;
-        }
-        if let Some(icanon) = update.icanon {
-            self.icanon = icanon;
-        }
-        if let Some(echo) = update.echo {
-            self.echo = echo;
-        }
-        if let Some(isig) = update.isig {
-            self.isig = isig;
-        }
-        if let Some(cc) = update.cc {
-            self.cc.merge(cc);
-        }
-    }
-}
-
-impl TermiosControlChars {
-    fn merge(&mut self, update: PartialTermiosControlChars) {
-        if let Some(vintr) = update.vintr {
-            self.vintr = vintr;
-        }
-        if let Some(vquit) = update.vquit {
-            self.vquit = vquit;
-        }
-        if let Some(vsusp) = update.vsusp {
-            self.vsusp = vsusp;
-        }
-        if let Some(veof) = update.veof {
-            self.veof = veof;
-        }
-        if let Some(verase) = update.verase {
-            self.verase = verase;
-        }
-        if let Some(vkill) = update.vkill {
-            self.vkill = vkill;
-        }
-        if let Some(vwerase) = update.vwerase {
-            self.vwerase = vwerase;
-        }
-    }
-}
-
-#[derive(Debug, Clone)]
-pub struct PtyEnd {
-    pub description: SharedFileDescription,
-    pub filetype: u8,
-}
-
-#[derive(Debug, Clone)]
-pub struct PtyPair {
-    pub master: PtyEnd,
-    pub slave: PtyEnd,
-    pub path: String,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-struct PtyRef {
-    pty_id: u64,
-    end: PtyEndKind,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum PtyEndKind {
-    Master,
-    Slave,
-}
-
-#[derive(Debug, Default)]
-struct PendingRead {
-    length: usize,
-    result: Option<Option<Vec<u8>>>,
-}
-
-#[derive(Debug, Clone, Default)]
-struct PtyState {
-    path: String,
-    input_buffer: VecDeque<Vec<u8>>,
-    output_buffer: VecDeque<Vec<u8>>,
-    input_eof_pending: bool,
-    closed_master: bool,
-    closed_slave: bool,
-    waiting_input_reads: VecDeque<u64>,
-    waiting_output_reads: VecDeque<u64>,
-    termios: Termios,
-    line_buffer: Vec<u8>,
-    foreground_pgid: u32,
-    window_size: PtyWindowSize,
-}
-
-#[derive(Debug)]
-struct PtyManagerState {
-    ptys: BTreeMap<u64, PtyState>,
-    desc_to_pty: BTreeMap<u64, PtyRef>,
-    waiters: BTreeMap<u64, PendingRead>,
-    next_pty_id: u64,
-    next_desc_id: u64,
-    next_waiter_id: u64,
-}
-
-impl Default for PtyManagerState {
-    fn default() -> Self {
-        Self {
-            ptys: BTreeMap::new(),
-            desc_to_pty: BTreeMap::new(),
-            waiters: BTreeMap::new(),
-            next_pty_id: 0,
-            next_desc_id: 200_000,
-            next_waiter_id: 1,
-        }
-    }
-}
-
-#[derive(Debug)]
-struct PtyManagerInner {
-    state: Mutex<PtyManagerState>,
-    waiters: Condvar,
-}
-
-#[derive(Clone)]
-pub struct PtyManager {
-    inner: Arc<PtyManagerInner>,
-    on_signal: Option<SignalHandler>,
-    notifier: Option<PollNotifier>,
-}
-
-impl Default for PtyManager {
-    fn default() -> Self {
-        Self {
-            inner: Arc::new(PtyManagerInner {
-                state: Mutex::new(PtyManagerState::default()),
-                waiters: Condvar::new(),
-            }),
-            on_signal: None,
-            notifier: None,
-        }
-    }
-}
-
-impl PtyManager {
-    pub fn new() -> Self {
-        Self::default()
-    }
-
-    pub fn with_signal_handler(on_signal: SignalHandler) -> Self {
-        let mut manager = Self::new();
-        manager.on_signal = Some(on_signal);
-        manager
-    }
-
-    pub(crate) fn with_signal_handler_and_notifier(
-        on_signal: SignalHandler,
-        notifier: PollNotifier,
-    ) -> Self {
-        let mut manager = Self::with_notifier(notifier);
-        manager.on_signal = Some(on_signal);
-        manager
-    }
-
-    pub(crate) fn with_notifier(notifier: PollNotifier) -> Self {
-        Self {
-            notifier: Some(notifier),
-            ..Self::default()
-        }
-    }
-
-    pub fn create_pty(&self) -> PtyPair {
-        let mut state = lock_or_recover(&self.inner.state);
-        let pty_id = state.next_pty_id;
-        state.next_pty_id += 1;
-
-        let master_id = state.next_desc_id;
-        state.next_desc_id += 1;
-        let slave_id = state.next_desc_id;
-        state.next_desc_id += 1;
-
-        let path = format!("/dev/pts/{pty_id}");
-        state.ptys.insert(
-            pty_id,
-            PtyState {
-                path: path.clone(),
-                termios: Termios::default(),
-                window_size: PtyWindowSize::default(),
-                ..PtyState::default()
-            },
-        );
-        state.desc_to_pty.insert(
-            master_id,
-            PtyRef {
-                pty_id,
-                end: PtyEndKind::Master,
-            },
-        );
-        state.desc_to_pty.insert(
-            slave_id,
-            PtyRef {
-                pty_id,
-                end: PtyEndKind::Slave,
-            },
-        );
-        drop(state);
-
-        PtyPair {
-            master: PtyEnd {
-                description: Arc::new(FileDescription::with_ref_count(
-                    master_id,
-                    format!("pty:{pty_id}:master"),
-                    O_RDWR,
-                    0,
-                )),
-                filetype: FILETYPE_CHARACTER_DEVICE,
-            },
-            slave: PtyEnd {
-                description: Arc::new(FileDescription::with_ref_count(
-                    slave_id,
-                    path.clone(),
-                    O_RDWR,
-                    0,
-                )),
-                filetype: FILETYPE_CHARACTER_DEVICE,
-            },
-            path,
-        }
-    }
-
-    pub fn create_pty_fds(&self, fd_table: &mut ProcessFdTable) -> FdResult<(u32, u32, String)> {
-        let pty = self.create_pty();
-        let master_fd = fd_table.open_with(
-            Arc::clone(&pty.master.description),
-            FILETYPE_CHARACTER_DEVICE,
-            None,
-        )?;
-        match fd_table.open_with(
-            Arc::clone(&pty.slave.description),
-            FILETYPE_CHARACTER_DEVICE,
-            None,
-        ) {
-            Ok(slave_fd) => Ok((master_fd, slave_fd, pty.path)),
-            Err(error) => {
-                fd_table.close(master_fd);
-                self.close(pty.master.description.id());
-                self.close(pty.slave.description.id());
-                Err(error)
-            }
-        }
-    }
-
-    pub fn poll(&self, description_id: u64, requested: PollEvents) -> PtyResult<PollEvents> {
-        let state = lock_or_recover(&self.inner.state);
-        let pty_ref = state
-            .desc_to_pty
-            .get(&description_id)
-            .copied()
-            .ok_or_else(|| PtyError::bad_file_descriptor("not a PTY end"))?;
-        let pty = state
-            .ptys
-            .get(&pty_ref.pty_id)
-            .ok_or_else(|| PtyError::bad_file_descriptor("PTY not found"))?;
-
-        let mut events = PollEvents::empty();
-        match pty_ref.end {
-            PtyEndKind::Master => {
-                if requested.intersects(POLLIN) && !pty.output_buffer.is_empty() {
-                    events |= POLLIN;
-                }
-                if pty.closed_slave {
-                    events |= POLLHUP;
-                } else if requested.intersects(POLLOUT)
-                    && (available_capacity(&pty.input_buffer) > 0
-                        || !pty.waiting_input_reads.is_empty())
-                {
-                    events |= POLLOUT;
-                }
-            }
-            PtyEndKind::Slave => {
-                if requested.intersects(POLLIN)
-                    && (pty.input_eof_pending || !pty.input_buffer.is_empty())
-                {
-                    events |= POLLIN;
-                }
-                if pty.closed_master {
-                    events |= POLLHUP;
-                } else if requested.intersects(POLLOUT)
-                    && (available_capacity(&pty.output_buffer) > 0
-                        || !pty.waiting_output_reads.is_empty())
-                {
-                    events |= POLLOUT;
-                }
-            }
-        }
-
-        Ok(events)
-    }
-
-    pub fn write(&self, description_id: u64, data: impl AsRef<[u8]>) -> PtyResult<usize> {
-        let payload = data.as_ref();
-        let mut signals = Vec::new();
-
-        {
-            let mut state = lock_or_recover(&self.inner.state);
-            let pty_ref = state
-                .desc_to_pty
-                .get(&description_id)
-                .copied()
-                .ok_or_else(|| PtyError::bad_file_descriptor("not a PTY end"))?;
-            let PtyManagerState { ptys, waiters, .. } = &mut *state;
-            let pty = ptys
-                .get_mut(&pty_ref.pty_id)
-                .ok_or_else(|| PtyError::bad_file_descriptor("PTY not found"))?;
-
-            match pty_ref.end {
-                PtyEndKind::Master => {
-                    if pty.closed_master {
-                        return Err(PtyError::io("master closed"));
-                    }
-                    if pty.closed_slave {
-                        return Err(PtyError::io("slave closed"));
-                    }
-                    process_input(pty, waiters, payload, &mut signals)?;
-                }
-                PtyEndKind::Slave => {
-                    if pty.closed_slave {
-                        return Err(PtyError::io("slave closed"));
-                    }
-                    if pty.closed_master {
-                        return Err(PtyError::io("master closed"));
-                    }
-
-                    let processed = process_output(&pty.termios, payload);
-                    deliver_output(pty, waiters, &processed, false)?;
-                    // Terminal emulation: answer a Device Status Report cursor-position
-                    // query (ESC[6n) with a cursor report (ESC[row;colR) on the slave's
-                    // input. A real terminal emulator on the master side does this; the
-                    // converged PTY may have no such emulator, so crossterm/reedline guests
-                    // that probe the cursor at startup would otherwise stall and abort.
-                    if contains_dsr_cursor_query(payload) {
-                        deliver_input(pty, waiters, b"\x1b[1;1R")?;
-                    }
-                }
-            }
-        }
-
-        self.notify_waiters_and_pollers();
-        if let Some(on_signal) = &self.on_signal {
-            for (pgid, signal) in signals {
-                if pgid > 0 {
-                    on_signal(pgid, signal);
-                }
-            }
-        }
-
-        Ok(payload.len())
-    }
-
-    pub fn read(&self, description_id: u64, length: usize) -> PtyResult<Option<Vec<u8>>> {
-        self.read_with_timeout(description_id, length, None)
-    }
-
-    pub fn read_with_timeout(
-        &self,
-        description_id: u64,
-        length: usize,
-        timeout: Option<Duration>,
-    ) -> PtyResult<Option<Vec<u8>>> {
-        let mut state = lock_or_recover(&self.inner.state);
-        let pty_ref = state
-            .desc_to_pty
-            .get(&description_id)
-            .copied()
-            .ok_or_else(|| PtyError::bad_file_descriptor("not a PTY end"))?;
-        let mut waiter_id = None;
-        let deadline = timeout.map(|duration| Instant::now() + duration);
-
-        loop {
-            if let Some(id) = waiter_id {
-                if let Some(waiter) = state.waiters.get_mut(&id) {
-                    if let Some(result) = waiter.result.take() {
-                        state.waiters.remove(&id);
-                        return Ok(result);
-                    }
-                }
-            }
-
-            {
-                let pty = state
-                    .ptys
-                    .get_mut(&pty_ref.pty_id)
-                    .ok_or_else(|| PtyError::bad_file_descriptor("PTY not found"))?;
-
-                match pty_ref.end {
-                    PtyEndKind::Master => {
-                        if pty.closed_master {
-                            if let Some(id) = waiter_id {
-                                state.waiters.remove(&id);
-                            }
-                            return Err(PtyError::io("master closed"));
-                        }
-
-                        if !pty.output_buffer.is_empty() {
-                            let result = drain_buffer(&mut pty.output_buffer, length);
-                            // This reader consumed buffered data directly, so its queued waiter
-                            // entry must be removed or a later delivery will assign data to an
-                            // orphan.
-                            if let Some(id) = waiter_id.take() {
-                                pty.waiting_input_reads.retain(|queued| *queued != id);
-                                pty.waiting_output_reads.retain(|queued| *queued != id);
-                                state.waiters.remove(&id);
-                            }
-                            self.notify_waiters_and_pollers();
-                            return Ok(Some(result));
-                        }
-
-                        if pty.closed_slave {
-                            if let Some(id) = waiter_id {
-                                state.waiters.remove(&id);
-                            }
-                            return Ok(None);
-                        }
-                    }
-                    PtyEndKind::Slave => {
-                        if pty.closed_slave {
-                            if let Some(id) = waiter_id {
-                                state.waiters.remove(&id);
-                            }
-                            return Err(PtyError::io("slave closed"));
-                        }
-
-                        if !pty.input_buffer.is_empty() {
-                            let result = drain_buffer(&mut pty.input_buffer, length);
-                            // This reader consumed buffered data directly, so its queued waiter
-                            // entry must be removed or a later delivery will assign data to an
-                            // orphan.
-                            if let Some(id) = waiter_id.take() {
-                                pty.waiting_input_reads.retain(|queued| *queued != id);
-                                pty.waiting_output_reads.retain(|queued| *queued != id);
-                                state.waiters.remove(&id);
-                            }
-                            self.notify_waiters_and_pollers();
-                            return Ok(Some(result));
-                        }
-
-                        if pty.input_eof_pending {
-                            pty.input_eof_pending = false;
-                            if let Some(id) = waiter_id {
-                                state.waiters.remove(&id);
-                            }
-                            self.notify_waiters_and_pollers();
-                            return Ok(None);
-                        }
-
-                        if pty.closed_master {
-                            if let Some(id) = waiter_id {
-                                state.waiters.remove(&id);
-                            }
-                            return Ok(None);
-                        }
-                    }
-                }
-            }
-
-            let id = if let Some(id) = waiter_id {
-                id
-            } else {
-                let next = state.next_waiter_id;
-                state.next_waiter_id += 1;
-                state.waiters.insert(
-                    next,
-                    PendingRead {
-                        length,
-                        result: None,
-                    },
-                );
-                let Some(pty) = state.ptys.get_mut(&pty_ref.pty_id) else {
-                    state.waiters.remove(&next);
-                    return Err(PtyError::bad_file_descriptor("PTY not found"));
-                };
-                match pty_ref.end {
-                    PtyEndKind::Master => pty.waiting_output_reads.push_back(next),
-                    PtyEndKind::Slave => pty.waiting_input_reads.push_back(next),
-                }
-                self.notify_waiters_and_pollers();
-                waiter_id = Some(next);
-                next
-            };
-
-            let Some(deadline) = deadline else {
-                state = wait_or_recover(&self.inner.waiters, state);
-                if !state.waiters.contains_key(&id) {
-                    waiter_id = None;
-                }
-                continue;
-            };
-
-            let now = Instant::now();
-            if now >= deadline {
-                if let Some(id) = waiter_id.take() {
-                    state.waiters.remove(&id);
-                    if let Some(pty) = state.ptys.get_mut(&pty_ref.pty_id) {
-                        pty.waiting_input_reads.retain(|queued| *queued != id);
-                        pty.waiting_output_reads.retain(|queued| *queued != id);
-                    }
-                    self.notify_waiters_and_pollers();
-                }
-                return Err(PtyError::would_block("PTY read timed out"));
-            }
-
-            let remaining = deadline.saturating_duration_since(now);
-            let (next_state, wait_result) =
-                wait_timeout_or_recover(&self.inner.waiters, state, remaining);
-            state = next_state;
-            if !state.waiters.contains_key(&id) {
-                waiter_id = None;
-            }
-            if wait_result.timed_out() {
-                if let Some(id) = waiter_id.take() {
-                    state.waiters.remove(&id);
-                    if let Some(pty) = state.ptys.get_mut(&pty_ref.pty_id) {
-                        pty.waiting_input_reads.retain(|queued| *queued != id);
-                        pty.waiting_output_reads.retain(|queued| *queued != id);
-                    }
-                    self.notify_waiters_and_pollers();
-                }
-                return Err(PtyError::would_block("PTY read timed out"));
-            }
-        }
-    }
-
-    pub fn close(&self, description_id: u64) {
-        let mut state = lock_or_recover(&self.inner.state);
-        let Some(pty_ref) = state.desc_to_pty.remove(&description_id) else {
-            return;
-        };
-
-        let (waiter_ids, remove_pty) = if let Some(pty) = state.ptys.get_mut(&pty_ref.pty_id) {
-            match pty_ref.end {
-                PtyEndKind::Master => {
-                    pty.closed_master = true;
-                    let mut waiters = pty.waiting_input_reads.drain(..).collect::<Vec<_>>();
-                    waiters.extend(pty.waiting_output_reads.drain(..));
-                    (waiters, pty.closed_master && pty.closed_slave)
-                }
-                PtyEndKind::Slave => {
-                    pty.closed_slave = true;
-                    let mut waiters = pty.waiting_output_reads.drain(..).collect::<Vec<_>>();
-                    waiters.extend(pty.waiting_input_reads.drain(..));
-                    (waiters, pty.closed_master && pty.closed_slave)
-                }
-            }
-        } else {
-            (Vec::new(), false)
-        };
-
-        for waiter_id in waiter_ids {
-            if let Some(waiter) = state.waiters.get_mut(&waiter_id) {
-                waiter.result = Some(None);
-            }
-        }
-
-        if remove_pty {
-            state.ptys.remove(&pty_ref.pty_id);
-        }
-        self.notify_waiters_and_pollers();
-    }
-
-    pub fn is_pty(&self, description_id: u64) -> bool {
-        lock_or_recover(&self.inner.state)
-            .desc_to_pty
-            .contains_key(&description_id)
-    }
-
-    pub fn is_slave(&self, description_id: u64) -> bool {
-        lock_or_recover(&self.inner.state)
-            .desc_to_pty
-            .get(&description_id)
-            .map(|pty_ref| pty_ref.end == PtyEndKind::Slave)
-            .unwrap_or(false)
-    }
-
-    pub fn set_discipline(
-        &self,
-        description_id: u64,
-        config: LineDisciplineConfig,
-    ) -> PtyResult<()> {
-        let mut state = lock_or_recover(&self.inner.state);
-        let pty_ref = state
-            .desc_to_pty
-            .get(&description_id)
-            .copied()
-            .ok_or_else(|| PtyError::bad_file_descriptor("not a PTY end"))?;
-        let pty = state
-            .ptys
-            .get_mut(&pty_ref.pty_id)
-            .ok_or_else(|| PtyError::bad_file_descriptor("PTY not found"))?;
-        if let Some(canonical) = config.canonical {
-            pty.termios.icanon = canonical;
-        }
-        if let Some(echo) = config.echo {
-            pty.termios.echo = echo;
-        }
-        if let Some(isig) = config.isig {
-            pty.termios.isig = isig;
-        }
-        if let Some(opost) = config.opost {
-            pty.termios.opost = opost;
-        }
-        if let Some(onlcr) = config.onlcr {
-            pty.termios.onlcr = onlcr;
-        }
-        Ok(())
-    }
-
-    pub fn get_termios(&self, description_id: u64) -> PtyResult<Termios> {
-        let state = lock_or_recover(&self.inner.state);
-        let pty_ref = state
-            .desc_to_pty
-            .get(&description_id)
-            .copied()
-            .ok_or_else(|| PtyError::bad_file_descriptor("not a PTY end"))?;
-        state
-            .ptys
-            .get(&pty_ref.pty_id)
-            .cloned()
-            .map(|pty| pty.termios)
-            .ok_or_else(|| PtyError::bad_file_descriptor("PTY not found"))
-    }
-
-    pub fn set_termios(&self, description_id: u64, termios: PartialTermios) -> PtyResult<()> {
-        let mut state = lock_or_recover(&self.inner.state);
-        let pty_ref = state
-            .desc_to_pty
-            .get(&description_id)
-            .copied()
-            .ok_or_else(|| PtyError::bad_file_descriptor("not a PTY end"))?;
-        let pty = state
-            .ptys
-            .get_mut(&pty_ref.pty_id)
-            .ok_or_else(|| PtyError::bad_file_descriptor("PTY not found"))?;
-        pty.termios.merge(termios);
-        Ok(())
-    }
-
-    pub fn set_foreground_pgid(&self, description_id: u64, pgid: u32) -> PtyResult<()> {
-        let mut state = lock_or_recover(&self.inner.state);
-        let pty_ref = state
-            .desc_to_pty
-            .get(&description_id)
-            .copied()
-            .ok_or_else(|| PtyError::bad_file_descriptor("not a PTY end"))?;
-        let pty = state
-            .ptys
-            .get_mut(&pty_ref.pty_id)
-            .ok_or_else(|| PtyError::bad_file_descriptor("PTY not found"))?;
-        pty.foreground_pgid = pgid;
-        Ok(())
-    }
-
-    pub fn get_foreground_pgid(&self, description_id: u64) -> PtyResult<u32> {
-        let state = lock_or_recover(&self.inner.state);
-        let pty_ref = state
-            .desc_to_pty
-            .get(&description_id)
-            .copied()
-            .ok_or_else(|| PtyError::bad_file_descriptor("not a PTY end"))?;
-        state
-            .ptys
-            .get(&pty_ref.pty_id)
-            .map(|pty| pty.foreground_pgid)
-            .ok_or_else(|| PtyError::bad_file_descriptor("PTY not found"))
-    }
-
-    pub fn window_size(&self, description_id: u64) -> PtyResult<PtyWindowSize> {
-        let state = lock_or_recover(&self.inner.state);
-        let pty_ref = state
-            .desc_to_pty
-            .get(&description_id)
-            .copied()
-            .ok_or_else(|| PtyError::bad_file_descriptor("not a PTY end"))?;
-        state
-            .ptys
-            .get(&pty_ref.pty_id)
-            .map(|pty| pty.window_size)
-            .ok_or_else(|| PtyError::bad_file_descriptor("PTY not found"))
-    }
-
-    pub fn resize(&self, description_id: u64, cols: u16, rows: u16) -> PtyResult<Option<u32>> {
-        let mut state = lock_or_recover(&self.inner.state);
-        let pty_ref = state
-            .desc_to_pty
-            .get(&description_id)
-            .copied()
-            .ok_or_else(|| PtyError::bad_file_descriptor("not a PTY end"))?;
-        let pty = state
-            .ptys
-            .get_mut(&pty_ref.pty_id)
-            .ok_or_else(|| PtyError::bad_file_descriptor("PTY not found"))?;
-        let next_size = PtyWindowSize { cols, rows };
-        if pty.window_size == next_size {
-            return Ok(None);
-        }
-        pty.window_size = next_size;
-        Ok((pty.foreground_pgid > 0).then_some(pty.foreground_pgid))
-    }
-
-    pub fn pty_count(&self) -> usize {
-        lock_or_recover(&self.inner.state).ptys.len()
-    }
-
-    pub fn buffered_input_bytes(&self) -> usize {
-        lock_or_recover(&self.inner.state)
-            .ptys
-            .values()
-            .map(|pty| buffer_size(&pty.input_buffer))
-            .sum()
-    }
-
-    pub fn buffered_output_bytes(&self) -> usize {
-        lock_or_recover(&self.inner.state)
-            .ptys
-            .values()
-            .map(|pty| buffer_size(&pty.output_buffer))
-            .sum()
-    }
-
-    pub fn pending_read_waiter_count(&self) -> usize {
-        lock_or_recover(&self.inner.state).waiters.len()
-    }
-
-    pub fn queued_read_waiter_count(&self) -> usize {
-        lock_or_recover(&self.inner.state)
-            .ptys
-            .values()
-            .map(|pty| pty.waiting_input_reads.len() + pty.waiting_output_reads.len())
-            .sum()
-    }
-
-    pub fn path_for(&self, description_id: u64) -> Option<String> {
-        let state = lock_or_recover(&self.inner.state);
-        let pty_ref = state.desc_to_pty.get(&description_id)?;
-        state.ptys.get(&pty_ref.pty_id).map(|pty| pty.path.clone())
-    }
-
-    fn notify_waiters_and_pollers(&self) {
-        self.inner.waiters.notify_all();
-        if let Some(notifier) = &self.notifier {
-            notifier.notify();
-        }
-    }
-}
-
-/// True if `data` contains a Device Status Report cursor-position query
-/// (`ESC [ 6 n`). Used to drive the converged PTY's terminal-style auto-reply.
-fn contains_dsr_cursor_query(data: &[u8]) -> bool {
-    const QUERY: &[u8] = b"\x1b[6n";
-    data.windows(QUERY.len()).any(|window| window == QUERY)
-}
-
-fn process_output(termios: &Termios, data: &[u8]) -> Vec<u8> {
-    if !termios.opost || !termios.onlcr || !data.contains(&b'\n') {
-        return data.to_vec();
-    }
-
-    let extra_crs = data
-        .iter()
-        .enumerate()
-        .filter(|(index, byte)| **byte == b'\n' && (*index == 0 || data[*index - 1] != b'\r'))
-        .count();
-    if extra_crs == 0 {
-        return data.to_vec();
-    }
-
-    let mut result = Vec::with_capacity(data.len() + extra_crs);
-    for (index, byte) in data.iter().enumerate() {
-        if *byte == b'\n' && (index == 0 || data[index - 1] != b'\r') {
-            result.push(b'\r');
-        }
-        result.push(*byte);
-    }
-    result
-}
-
-fn process_input(
-    pty: &mut PtyState,
-    waiters: &mut BTreeMap<u64, PendingRead>,
-    data: &[u8],
-    signals: &mut Vec<(u32, i32)>,
-) -> PtyResult<()> {
-    if !pty.termios.icanon && !pty.termios.echo && !pty.termios.isig {
-        let translated = translate_input(&pty.termios, data);
-        deliver_input(pty, waiters, &translated)?;
-        return Ok(());
-    }
-
-    for mut byte in data.iter().copied() {
-        if pty.termios.icrnl && byte == b'\r' {
-            byte = b'\n';
-        }
-
-        if pty.termios.isig {
-            if let Some(signal) = signal_for_byte(&pty.termios, byte) {
-                if pty.termios.icanon {
-                    pty.line_buffer.clear();
-                }
-                let has_foreground_process_group = pty.foreground_pgid > 0;
-                // Only echo the signal-generating control char (e.g. "^C") as a
-                // line-editor fallback when there is NO foreground process group
-                // to receive the signal. With a foreground process group the
-                // signal is delivered to it and the char is not echoed, matching
-                // the integration suite's VINTR/VSUSP/VQUIT expectations.
-                if pty.termios.echo && !has_foreground_process_group {
-                    deliver_output(pty, waiters, &echo_control_byte(byte), true)?;
-                    if pty.termios.icanon {
-                        deliver_output(pty, waiters, b"\r\n", true)?;
-                    }
-                }
-                if has_foreground_process_group {
-                    signals.push((pty.foreground_pgid, signal));
-                } else if pty.termios.icanon {
-                    deliver_input(pty, waiters, b"\n")?;
-                }
-                continue;
-            }
-        }
-
-        if pty.termios.icanon {
-            if byte == pty.termios.cc.veof {
-                if pty.line_buffer.is_empty() {
-                    deliver_input_eof(pty, waiters);
-                } else {
-                    let line = pty.line_buffer.clone();
-                    deliver_input(pty, waiters, &line)?;
-                    pty.line_buffer.clear();
-                }
-                continue;
-            }
-
-            if byte == pty.termios.cc.verase || byte == 0x08 {
-                if let Some(&erased) = pty.line_buffer.last() {
-                    if pty.termios.echo {
-                        deliver_output(pty, waiters, &erase_sequence(erased), true)?;
-                    }
-                    pty.line_buffer.pop();
-                }
-                continue;
-            }
-
-            if byte == pty.termios.cc.vkill {
-                if !pty.line_buffer.is_empty() {
-                    if pty.termios.echo {
-                        let erase: Vec<u8> = pty
-                            .line_buffer
-                            .iter()
-                            .flat_map(|b| erase_sequence(*b))
-                            .collect();
-                        deliver_output(pty, waiters, &erase, true)?;
-                    }
-                    pty.line_buffer.clear();
-                }
-                continue;
-            }
-
-            if byte == pty.termios.cc.vwerase {
-                let mut erased: Vec<u8> = Vec::new();
-                while matches!(pty.line_buffer.last(), Some(b' ') | Some(b'\t')) {
-                    if let Some(b) = pty.line_buffer.pop() {
-                        erased.push(b);
-                    }
-                }
-                while let Some(&b) = pty.line_buffer.last() {
-                    if b == b' ' || b == b'\t' {
-                        break;
-                    }
-                    pty.line_buffer.pop();
-                    erased.push(b);
-                }
-                if pty.termios.echo && !erased.is_empty() {
-                    let sequence: Vec<u8> =
-                        erased.iter().flat_map(|b| erase_sequence(*b)).collect();
-                    deliver_output(pty, waiters, &sequence, true)?;
-                }
-                continue;
-            }
-
-            if byte == b'\n' {
-                let mut line = pty.line_buffer.clone();
-                line.push(b'\n');
-                if pty.termios.echo {
-                    deliver_output(pty, waiters, b"\r\n", true)?;
-                }
-                deliver_input(pty, waiters, &line)?;
-                pty.line_buffer.clear();
-                continue;
-            }
-
-            if pty.line_buffer.len() >= MAX_CANON {
-                continue;
-            }
-            if pty.termios.echo {
-                // ECHOCTL: echo control chars in caret form (e.g. 0x01 -> "^A")
-                // so they are visible; printable bytes echo verbatim.
-                deliver_output(pty, waiters, &echo_control_byte(byte), true)?;
-            }
-            pty.line_buffer.push(byte);
-        } else {
-            if pty.termios.echo {
-                deliver_output(pty, waiters, &[byte], true)?;
-            }
-            deliver_input(pty, waiters, &[byte])?;
-        }
-    }
-
-    Ok(())
-}
-
-fn translate_input(termios: &Termios, data: &[u8]) -> Vec<u8> {
-    if !termios.icrnl || !data.contains(&b'\r') {
-        return data.to_vec();
-    }
-
-    data.iter()
-        .map(|byte| if *byte == b'\r' { b'\n' } else { *byte })
-        .collect()
-}
-
-fn deliver_input(
-    pty: &mut PtyState,
-    waiters: &mut BTreeMap<u64, PendingRead>,
-    data: &[u8],
-) -> PtyResult<()> {
-    if let Some(waiter_id) = pty.waiting_input_reads.pop_front() {
-        if let Some(waiter) = waiters.get_mut(&waiter_id) {
-            if data.len() <= waiter.length {
-                waiter.result = Some(Some(data.to_vec()));
-            } else {
-                // The waiter consumes `waiter.length` bytes directly; only the
-                // tail is buffered, so the buffer cap must be enforced on the
-                // tail. Otherwise a single large write past a pending reader
-                // bypasses MAX_PTY_BUFFER_BYTES entirely.
-                let tail_len = data.len() - waiter.length;
-                if tail_len > available_capacity(&pty.input_buffer) {
-                    pty.waiting_input_reads.push_front(waiter_id);
-                    return Err(PtyError::would_block("PTY input buffer full"));
-                }
-                let (head, tail) = data.split_at(waiter.length);
-                waiter.result = Some(Some(head.to_vec()));
-                pty.input_buffer.push_front(tail.to_vec());
-            }
-            return Ok(());
-        }
-    }
-
-    if buffer_size(&pty.input_buffer).saturating_add(data.len()) > MAX_PTY_BUFFER_BYTES {
-        return Err(PtyError::would_block("PTY input buffer full"));
-    }
-
-    pty.input_buffer.push_back(data.to_vec());
-    Ok(())
-}
-
-fn deliver_input_eof(pty: &mut PtyState, waiters: &mut BTreeMap<u64, PendingRead>) {
-    if let Some(waiter_id) = pty.waiting_input_reads.pop_front() {
-        if let Some(waiter) = waiters.get_mut(&waiter_id) {
-            waiter.result = Some(None);
-            return;
-        }
-    }
-
-    pty.input_eof_pending = true;
-}
-
-fn deliver_output(
-    pty: &mut PtyState,
-    waiters: &mut BTreeMap<u64, PendingRead>,
-    data: &[u8],
-    echo: bool,
-) -> PtyResult<()> {
-    if let Some(waiter_id) = pty.waiting_output_reads.pop_front() {
-        if let Some(waiter) = waiters.get_mut(&waiter_id) {
-            if data.len() <= waiter.length {
-                waiter.result = Some(Some(data.to_vec()));
-            } else {
-                // Enforce the buffer cap on the tail (see deliver_input).
-                let tail_len = data.len() - waiter.length;
-                if tail_len > available_capacity(&pty.output_buffer) {
-                    pty.waiting_output_reads.push_front(waiter_id);
-                    let message = if echo {
-                        "PTY output buffer full (echo backpressure)"
-                    } else {
-                        "PTY output buffer full"
-                    };
-                    return Err(PtyError::would_block(message));
-                }
-                let (head, tail) = data.split_at(waiter.length);
-                waiter.result = Some(Some(head.to_vec()));
-                pty.output_buffer.push_front(tail.to_vec());
-            }
-            return Ok(());
-        }
-    }
-
-    if buffer_size(&pty.output_buffer).saturating_add(data.len()) > MAX_PTY_BUFFER_BYTES {
-        let message = if echo {
-            "PTY output buffer full (echo backpressure)"
-        } else {
-            "PTY output buffer full"
-        };
-        return Err(PtyError::would_block(message));
-    }
-
-    pty.output_buffer.push_back(data.to_vec());
-    Ok(())
-}
-
-fn signal_for_byte(termios: &Termios, byte: u8) -> Option<i32> {
-    if byte == termios.cc.vintr {
-        return Some(SIGINT);
-    }
-    if byte == termios.cc.vquit {
-        return Some(SIGQUIT);
-    }
-    if byte == termios.cc.vsusp {
-        return Some(SIGTSTP);
-    }
-    None
-}
-
-fn echo_control_byte(byte: u8) -> Vec<u8> {
-    if byte < 0x20 {
-        vec![b'^', byte + 0x40]
-    } else if byte == 0x7f {
-        b"^?".to_vec()
-    } else {
-        vec![byte]
-    }
-}
-
-/// Backspace-erase sequence for a single buffered input byte, accounting for how
-/// wide it was echoed: a control char echoed in caret form (`^X`, ECHOCTL)
-/// occupies two columns and needs two `BS SP BS` triples, while a printable byte
-/// occupies one. Used by VERASE / VKILL / VWERASE erase echo so the erased echo
-/// width matches the displayed width.
-fn erase_sequence(byte: u8) -> Vec<u8> {
-    let columns = echo_control_byte(byte).len();
-    (0..columns).flat_map(|_| [0x08, 0x20, 0x08]).collect()
-}
-
-fn buffer_size(buffer: &VecDeque<Vec<u8>>) -> usize {
-    buffer.iter().map(Vec::len).sum()
-}
-
-fn available_capacity(buffer: &VecDeque<Vec<u8>>) -> usize {
-    MAX_PTY_BUFFER_BYTES.saturating_sub(buffer_size(buffer))
-}
-
-fn drain_buffer(buffer: &mut VecDeque<Vec<u8>>, length: usize) -> Vec<u8> {
-    let mut chunks = Vec::new();
-    let mut remaining = length;
-
-    while remaining > 0 {
-        let Some(chunk) = buffer.pop_front() else {
-            break;
-        };
-        if chunk.len() <= remaining {
-            remaining -= chunk.len();
-            chunks.push(chunk);
-        } else {
-            let (head, tail) = chunk.split_at(remaining);
-            chunks.push(head.to_vec());
-            buffer.push_front(tail.to_vec());
-            remaining = 0;
-        }
-    }
-
-    if chunks.len() == 1 {
-        return chunks.pop().expect("single chunk should exist");
-    }
-
-    let total = chunks.iter().map(Vec::len).sum();
-    let mut result = Vec::with_capacity(total);
-    for chunk in chunks {
-        result.extend_from_slice(&chunk);
-    }
-    result
-}
-
-fn lock_or_recover<'a, T>(mutex: &'a Mutex<T>) -> MutexGuard<'a, T> {
-    match mutex.lock() {
-        Ok(guard) => guard,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
-
-fn wait_or_recover<'a, T>(condvar: &Condvar, guard: MutexGuard<'a, T>) -> MutexGuard<'a, T> {
-    match condvar.wait(guard) {
-        Ok(guard) => guard,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
-
-fn wait_timeout_or_recover<'a, T>(
-    condvar: &Condvar,
-    guard: MutexGuard<'a, T>,
-    timeout: Duration,
-) -> (MutexGuard<'a, T>, std::sync::WaitTimeoutResult) {
-    match condvar.wait_timeout(guard, timeout) {
-        Ok(result) => result,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
diff --git a/crates/kernel/src/resource_accounting.rs b/crates/kernel/src/resource_accounting.rs
deleted file mode 100644
index d189fd941..000000000
--- a/crates/kernel/src/resource_accounting.rs
+++ /dev/null
@@ -1,736 +0,0 @@
-use crate::fd_table::FdTableManager;
-use crate::pipe_manager::PipeManager;
-use crate::process_table::{ProcessStatus, ProcessTable};
-use crate::pty::PtyManager;
-use crate::socket_table::{SocketState, SocketTable};
-use secure_exec_bridge::queue_tracker::{register_limit, QueueGauge, TrackedLimit};
-use std::collections::BTreeMap;
-use std::error::Error;
-use std::fmt;
-use std::sync::Arc;
-use vfs::posix::usage::RootFilesystemResourceLimits;
-
-pub use vfs::posix::usage::{
-    measure_filesystem_usage, FileSystemUsage, DEFAULT_MAX_FILESYSTEM_BYTES,
-    DEFAULT_MAX_INODE_COUNT,
-};
-
-pub const DEFAULT_MAX_PROCESSES: usize = 256;
-pub const DEFAULT_MAX_OPEN_FDS: usize = 256;
-pub const DEFAULT_MAX_PIPES: usize = 128;
-pub const DEFAULT_MAX_PTYS: usize = 128;
-pub const DEFAULT_MAX_SOCKETS: usize = 256;
-pub const DEFAULT_MAX_CONNECTIONS: usize = 256;
-pub const DEFAULT_MAX_SOCKET_BUFFERED_BYTES: usize = 4 * 1024 * 1024;
-pub const DEFAULT_MAX_SOCKET_DATAGRAM_QUEUE_LEN: usize = 1_024;
-pub const DEFAULT_BLOCKING_READ_TIMEOUT_MS: u64 = 5_000;
-pub const DEFAULT_MAX_PREAD_BYTES: usize = 64 * 1024 * 1024;
-pub const DEFAULT_MAX_FD_WRITE_BYTES: usize = 64 * 1024 * 1024;
-pub const DEFAULT_MAX_PROCESS_ARGV_BYTES: usize = 1024 * 1024;
-pub const DEFAULT_MAX_PROCESS_ENV_BYTES: usize = 1024 * 1024;
-pub const DEFAULT_MAX_READDIR_ENTRIES: usize = 4_096;
-pub const DEFAULT_MAX_RECURSIVE_FS_DEPTH: usize = 128;
-pub const DEFAULT_MAX_RECURSIVE_FS_ENTRIES: usize = 65_536;
-pub const DEFAULT_VIRTUAL_CPU_COUNT: usize = 1;
-pub const DEFAULT_MAX_WASM_MEMORY_BYTES: u64 = 128 * 1024 * 1024;
-
-#[derive(Debug, Clone, PartialEq, Eq, Default)]
-pub struct ResourceSnapshot {
-    pub running_processes: usize,
-    pub exited_processes: usize,
-    pub fd_tables: usize,
-    pub open_fds: usize,
-    pub pipes: usize,
-    pub pipe_buffered_bytes: usize,
-    pub ptys: usize,
-    pub pty_buffered_input_bytes: usize,
-    pub pty_buffered_output_bytes: usize,
-    pub sockets: usize,
-    pub socket_listeners: usize,
-    pub socket_connections: usize,
-    pub socket_buffered_bytes: usize,
-    pub socket_datagram_queue_len: usize,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ResourceLimits {
-    pub virtual_cpu_count: Option<usize>,
-    pub max_processes: Option<usize>,
-    pub max_open_fds: Option<usize>,
-    pub max_pipes: Option<usize>,
-    pub max_ptys: Option<usize>,
-    pub max_sockets: Option<usize>,
-    pub max_connections: Option<usize>,
-    pub max_socket_buffered_bytes: Option<usize>,
-    pub max_socket_datagram_queue_len: Option<usize>,
-    pub max_filesystem_bytes: Option<u64>,
-    pub max_inode_count: Option<usize>,
-    pub max_blocking_read_ms: Option<u64>,
-    pub max_pread_bytes: Option<usize>,
-    pub max_fd_write_bytes: Option<usize>,
-    pub max_process_argv_bytes: Option<usize>,
-    pub max_process_env_bytes: Option<usize>,
-    pub max_readdir_entries: Option<usize>,
-    pub max_recursive_fs_depth: Option<usize>,
-    pub max_recursive_fs_entries: Option<usize>,
-    pub max_wasm_fuel: Option<u64>,
-    pub max_wasm_memory_bytes: Option<u64>,
-    pub max_wasm_stack_bytes: Option<usize>,
-}
-
-impl Default for ResourceLimits {
-    fn default() -> Self {
-        Self {
-            virtual_cpu_count: Some(DEFAULT_VIRTUAL_CPU_COUNT),
-            max_processes: Some(DEFAULT_MAX_PROCESSES),
-            max_open_fds: Some(DEFAULT_MAX_OPEN_FDS),
-            max_pipes: Some(DEFAULT_MAX_PIPES),
-            max_ptys: Some(DEFAULT_MAX_PTYS),
-            max_sockets: Some(DEFAULT_MAX_SOCKETS),
-            max_connections: Some(DEFAULT_MAX_CONNECTIONS),
-            max_socket_buffered_bytes: Some(DEFAULT_MAX_SOCKET_BUFFERED_BYTES),
-            max_socket_datagram_queue_len: Some(DEFAULT_MAX_SOCKET_DATAGRAM_QUEUE_LEN),
-            max_filesystem_bytes: Some(DEFAULT_MAX_FILESYSTEM_BYTES),
-            max_inode_count: Some(DEFAULT_MAX_INODE_COUNT),
-            max_blocking_read_ms: Some(DEFAULT_BLOCKING_READ_TIMEOUT_MS),
-            max_pread_bytes: Some(DEFAULT_MAX_PREAD_BYTES),
-            max_fd_write_bytes: Some(DEFAULT_MAX_FD_WRITE_BYTES),
-            max_process_argv_bytes: Some(DEFAULT_MAX_PROCESS_ARGV_BYTES),
-            max_process_env_bytes: Some(DEFAULT_MAX_PROCESS_ENV_BYTES),
-            max_readdir_entries: Some(DEFAULT_MAX_READDIR_ENTRIES),
-            max_recursive_fs_depth: Some(DEFAULT_MAX_RECURSIVE_FS_DEPTH),
-            max_recursive_fs_entries: Some(DEFAULT_MAX_RECURSIVE_FS_ENTRIES),
-            max_wasm_fuel: None,
-            // Match the Workers-style default memory envelope where sensible:
-            // guests are bounded unless the trusted VM config raises the cap.
-            max_wasm_memory_bytes: Some(DEFAULT_MAX_WASM_MEMORY_BYTES),
-            max_wasm_stack_bytes: None,
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ResourceError {
-    code: &'static str,
-    message: String,
-}
-
-impl RootFilesystemResourceLimits for ResourceLimits {
-    fn max_filesystem_bytes(&self) -> Option<u64> {
-        self.max_filesystem_bytes
-    }
-
-    fn max_inode_count(&self) -> Option<usize> {
-        self.max_inode_count
-    }
-}
-
-impl ResourceError {
-    pub fn code(&self) -> &'static str {
-        self.code
-    }
-
-    fn exhausted(message: impl Into<String>) -> Self {
-        Self {
-            code: "EAGAIN",
-            message: message.into(),
-        }
-    }
-
-    fn file_table_full(message: impl Into<String>) -> Self {
-        Self {
-            code: "ENFILE",
-            message: message.into(),
-        }
-    }
-
-    fn filesystem_full(message: impl Into<String>) -> Self {
-        Self {
-            code: "ENOSPC",
-            message: message.into(),
-        }
-    }
-
-    fn invalid_input(message: impl Into<String>) -> Self {
-        Self {
-            code: "EINVAL",
-            message: message.into(),
-        }
-    }
-
-    fn out_of_memory(message: impl Into<String>) -> Self {
-        Self {
-            code: "ENOMEM",
-            message: message.into(),
-        }
-    }
-}
-
-impl fmt::Display for ResourceError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}: {}", self.code, self.message)
-    }
-}
-
-impl Error for ResourceError {}
-
-#[derive(Debug, Clone, Default)]
-/// Per-VM gauges for the saturating resource limits, registered with the central
-/// limit registry so their usage is inspectable and they emit an edge-triggered
-/// approach warning (~80%) before the guest hits the hard cap. Only limits that
-/// are actually set get a gauge; unbounded (`None`) limits are skipped.
-struct ResourceGauges {
-    processes: Option<Arc<QueueGauge>>,
-    open_fds: Option<Arc<QueueGauge>>,
-    pipes: Option<Arc<QueueGauge>>,
-    ptys: Option<Arc<QueueGauge>>,
-    sockets: Option<Arc<QueueGauge>>,
-    connections: Option<Arc<QueueGauge>>,
-    socket_buffered_bytes: Option<Arc<QueueGauge>>,
-    socket_datagram_queue_len: Option<Arc<QueueGauge>>,
-    filesystem_bytes: Option<Arc<QueueGauge>>,
-    inodes: Option<Arc<QueueGauge>>,
-    recursive_fs_depth: Option<Arc<QueueGauge>>,
-    recursive_fs_entries: Option<Arc<QueueGauge>>,
-}
-
-fn register_resource_gauge(name: TrackedLimit, limit: Option<usize>) -> Option<Arc<QueueGauge>> {
-    limit.map(|capacity| register_limit(name, capacity))
-}
-
-fn register_resource_gauge_u64(name: TrackedLimit, limit: Option<u64>) -> Option<Arc<QueueGauge>> {
-    limit.map(|capacity| register_limit(name, usize_saturating_from_u64(capacity)))
-}
-
-fn usize_saturating_from_u64(value: u64) -> usize {
-    usize::try_from(value).unwrap_or(usize::MAX)
-}
-
-impl ResourceGauges {
-    fn new(limits: &ResourceLimits) -> Self {
-        Self {
-            processes: register_resource_gauge(TrackedLimit::VmProcesses, limits.max_processes),
-            open_fds: register_resource_gauge(TrackedLimit::VmOpenFds, limits.max_open_fds),
-            pipes: register_resource_gauge(TrackedLimit::VmPipes, limits.max_pipes),
-            ptys: register_resource_gauge(TrackedLimit::VmPtys, limits.max_ptys),
-            sockets: register_resource_gauge(TrackedLimit::VmSockets, limits.max_sockets),
-            connections: register_resource_gauge(
-                TrackedLimit::VmConnections,
-                limits.max_connections,
-            ),
-            socket_buffered_bytes: register_resource_gauge(
-                TrackedLimit::VmSocketBufferedBytes,
-                limits.max_socket_buffered_bytes,
-            ),
-            socket_datagram_queue_len: register_resource_gauge(
-                TrackedLimit::VmSocketDatagramQueueLen,
-                limits.max_socket_datagram_queue_len,
-            ),
-            filesystem_bytes: register_resource_gauge_u64(
-                TrackedLimit::VmFilesystemBytes,
-                limits.max_filesystem_bytes,
-            ),
-            inodes: register_resource_gauge(TrackedLimit::VmInodes, limits.max_inode_count),
-            recursive_fs_depth: register_resource_gauge(
-                TrackedLimit::VmRecursiveFsDepth,
-                limits.max_recursive_fs_depth,
-            ),
-            recursive_fs_entries: register_resource_gauge(
-                TrackedLimit::VmRecursiveFsEntries,
-                limits.max_recursive_fs_entries,
-            ),
-        }
-    }
-}
-
-pub struct ResourceAccountant {
-    limits: ResourceLimits,
-    gauges: ResourceGauges,
-}
-
-impl ResourceAccountant {
-    pub fn new(limits: ResourceLimits) -> Self {
-        let gauges = ResourceGauges::new(&limits);
-        Self { limits, gauges }
-    }
-
-    /// Sample the saturating-resource gauges from a fresh snapshot so the central
-    /// registry tracks usage and warns before any cap is reached.
-    fn observe_resource_gauges(&self, snapshot: &ResourceSnapshot) {
-        if let Some(gauge) = &self.gauges.processes {
-            gauge.observe_depth(snapshot.running_processes + snapshot.exited_processes);
-        }
-        if let Some(gauge) = &self.gauges.open_fds {
-            gauge.observe_depth(snapshot.open_fds);
-        }
-        if let Some(gauge) = &self.gauges.pipes {
-            gauge.observe_depth(snapshot.pipes);
-        }
-        if let Some(gauge) = &self.gauges.ptys {
-            gauge.observe_depth(snapshot.ptys);
-        }
-        if let Some(gauge) = &self.gauges.sockets {
-            gauge.observe_depth(snapshot.sockets);
-        }
-        if let Some(gauge) = &self.gauges.connections {
-            gauge.observe_depth(snapshot.socket_connections);
-        }
-        if let Some(gauge) = &self.gauges.socket_buffered_bytes {
-            gauge.observe_depth(snapshot.socket_buffered_bytes);
-        }
-        if let Some(gauge) = &self.gauges.socket_datagram_queue_len {
-            gauge.observe_depth(snapshot.socket_datagram_queue_len);
-        }
-    }
-
-    pub fn limits(&self) -> &ResourceLimits {
-        &self.limits
-    }
-
-    pub fn snapshot(
-        &self,
-        processes: &ProcessTable,
-        fd_tables: &FdTableManager,
-        pipes: &PipeManager,
-        ptys: &PtyManager,
-        sockets: &SocketTable,
-    ) -> ResourceSnapshot {
-        let process_list = processes.list_processes();
-        let running_processes = process_list
-            .values()
-            .filter(|process| process.status == ProcessStatus::Running)
-            .count();
-        let exited_processes = process_list
-            .values()
-            .filter(|process| process.status == ProcessStatus::Exited)
-            .count();
-        let socket_snapshot = sockets.snapshot();
-
-        let snapshot = ResourceSnapshot {
-            running_processes,
-            exited_processes,
-            fd_tables: fd_tables.len(),
-            open_fds: fd_tables.total_open_fds(),
-            pipes: pipes.pipe_count(),
-            pipe_buffered_bytes: pipes.buffered_bytes(),
-            ptys: ptys.pty_count(),
-            pty_buffered_input_bytes: ptys.buffered_input_bytes(),
-            pty_buffered_output_bytes: ptys.buffered_output_bytes(),
-            sockets: socket_snapshot.sockets,
-            socket_listeners: socket_snapshot.listeners,
-            socket_connections: socket_snapshot.connections,
-            socket_buffered_bytes: socket_snapshot.buffered_bytes,
-            socket_datagram_queue_len: socket_snapshot.datagram_queue_len,
-        };
-        self.observe_resource_gauges(&snapshot);
-        snapshot
-    }
-
-    pub fn check_process_spawn(
-        &self,
-        snapshot: &ResourceSnapshot,
-        additional_fds: usize,
-    ) -> Result<(), ResourceError> {
-        if let Some(limit) = self.limits.max_processes {
-            if snapshot.running_processes + snapshot.exited_processes >= limit {
-                return Err(ResourceError::exhausted("maximum process limit reached"));
-            }
-        }
-
-        self.check_open_fds(snapshot, additional_fds)
-    }
-
-    pub fn check_process_argv_bytes(
-        &self,
-        command: &str,
-        args: &[String],
-    ) -> Result<(), ResourceError> {
-        if let Some(limit) = self.limits.max_process_argv_bytes {
-            let total = argv_payload_bytes(command, args);
-            if total > limit {
-                return Err(ResourceError::invalid_input(format!(
-                    "process argv payload {total} bytes exceeds configured limit {limit}"
-                )));
-            }
-        }
-
-        Ok(())
-    }
-
-    pub fn check_process_env_bytes(
-        &self,
-        inherited_env: &BTreeMap<String, String>,
-        overrides: &BTreeMap<String, String>,
-    ) -> Result<(), ResourceError> {
-        if let Some(limit) = self.limits.max_process_env_bytes {
-            let total = merged_env_payload_bytes(inherited_env, overrides);
-            if total > limit {
-                return Err(ResourceError::invalid_input(format!(
-                    "process environment payload {total} bytes exceeds configured limit {limit}"
-                )));
-            }
-        }
-
-        Ok(())
-    }
-
-    pub fn check_pipe_allocation(&self, snapshot: &ResourceSnapshot) -> Result<(), ResourceError> {
-        if let Some(limit) = self.limits.max_pipes {
-            if snapshot.pipes >= limit {
-                return Err(ResourceError::exhausted("maximum pipe count reached"));
-            }
-        }
-
-        self.check_open_fds(snapshot, 2)
-    }
-
-    pub fn check_pty_allocation(&self, snapshot: &ResourceSnapshot) -> Result<(), ResourceError> {
-        if let Some(limit) = self.limits.max_ptys {
-            if snapshot.ptys >= limit {
-                return Err(ResourceError::exhausted("maximum PTY count reached"));
-            }
-        }
-
-        self.check_open_fds(snapshot, 2)
-    }
-
-    pub fn check_socket_allocation(
-        &self,
-        snapshot: &ResourceSnapshot,
-    ) -> Result<(), ResourceError> {
-        if let Some(limit) = self.limits.max_sockets {
-            if snapshot.sockets >= limit {
-                return Err(ResourceError::exhausted("maximum socket count reached"));
-            }
-        }
-
-        Ok(())
-    }
-
-    pub fn check_socket_state_transition(
-        &self,
-        snapshot: &ResourceSnapshot,
-        current: SocketState,
-        next: SocketState,
-    ) -> Result<(), ResourceError> {
-        if !current.counts_as_connection() && next.counts_as_connection() {
-            if let Some(limit) = self.limits.max_connections {
-                if snapshot.socket_connections >= limit {
-                    return Err(ResourceError::exhausted("maximum connection count reached"));
-                }
-            }
-        }
-
-        Ok(())
-    }
-
-    pub fn check_socket_buffer_growth(
-        &self,
-        snapshot: &ResourceSnapshot,
-        additional_bytes: usize,
-    ) -> Result<(), ResourceError> {
-        if let Some(limit) = self.limits.max_socket_buffered_bytes {
-            if snapshot
-                .socket_buffered_bytes
-                .saturating_add(additional_bytes)
-                > limit
-            {
-                return Err(ResourceError::exhausted(
-                    "maximum socket buffered byte limit reached",
-                ));
-            }
-        }
-
-        Ok(())
-    }
-
-    pub fn check_socket_datagram_enqueue(
-        &self,
-        snapshot: &ResourceSnapshot,
-        additional_bytes: usize,
-    ) -> Result<(), ResourceError> {
-        self.check_socket_buffer_growth(snapshot, additional_bytes)?;
-        if let Some(limit) = self.limits.max_socket_datagram_queue_len {
-            if snapshot.socket_datagram_queue_len.saturating_add(1) > limit {
-                return Err(ResourceError::exhausted(
-                    "maximum socket datagram queue length reached",
-                ));
-            }
-        }
-
-        Ok(())
-    }
-
-    pub fn check_pread_length(&self, length: usize) -> Result<(), ResourceError> {
-        if let Some(limit) = self.limits.max_pread_bytes {
-            if length > limit {
-                return Err(ResourceError::invalid_input(format!(
-                    "pread length {length} exceeds configured limit {limit}"
-                )));
-            }
-        }
-
-        Ok(())
-    }
-
-    pub fn check_fd_write_size(&self, size: usize) -> Result<(), ResourceError> {
-        if let Some(limit) = self.limits.max_fd_write_bytes {
-            if size > limit {
-                return Err(ResourceError::invalid_input(format!(
-                    "write size {size} exceeds configured limit {limit}"
-                )));
-            }
-        }
-
-        Ok(())
-    }
-
-    pub fn check_fd_allocation(
-        &self,
-        snapshot: &ResourceSnapshot,
-        additional_fds: usize,
-    ) -> Result<(), ResourceError> {
-        self.check_open_fds(snapshot, additional_fds)
-    }
-
-    pub fn max_readdir_entries(&self) -> Option<usize> {
-        self.limits.max_readdir_entries
-    }
-
-    pub fn max_recursive_fs_depth(&self) -> Option<usize> {
-        self.limits.max_recursive_fs_depth
-    }
-
-    pub fn max_recursive_fs_entries(&self) -> Option<usize> {
-        self.limits.max_recursive_fs_entries
-    }
-
-    pub fn check_readdir_entries(&self, entries: usize) -> Result<(), ResourceError> {
-        if let Some(limit) = self.limits.max_readdir_entries {
-            if entries > limit {
-                return Err(ResourceError::out_of_memory(format!(
-                    "directory listing with {entries} entries exceeds configured limit {limit}"
-                )));
-            }
-        }
-
-        Ok(())
-    }
-
-    pub fn check_recursive_fs_depth(&self, depth: usize) -> Result<(), ResourceError> {
-        if let Some(gauge) = self.gauges.recursive_fs_depth.as_ref() {
-            gauge.observe_depth(depth);
-        }
-        if let Some(limit) = self.limits.max_recursive_fs_depth {
-            if depth > limit {
-                return Err(ResourceError::out_of_memory(format!(
-                    "recursive filesystem operation depth {depth} exceeds configured limit {limit}"
-                )));
-            }
-        }
-
-        Ok(())
-    }
-
-    pub fn check_recursive_fs_entries(&self, entries: usize) -> Result<(), ResourceError> {
-        if let Some(gauge) = self.gauges.recursive_fs_entries.as_ref() {
-            gauge.observe_depth(entries);
-        }
-        if let Some(limit) = self.limits.max_recursive_fs_entries {
-            if entries > limit {
-                return Err(ResourceError::out_of_memory(format!(
-                    "recursive filesystem operation with {entries} entries exceeds configured limit {limit}"
-                )));
-            }
-        }
-
-        Ok(())
-    }
-
-    fn check_open_fds(
-        &self,
-        snapshot: &ResourceSnapshot,
-        additional_fds: usize,
-    ) -> Result<(), ResourceError> {
-        if let Some(limit) = self.limits.max_open_fds {
-            if snapshot.open_fds.saturating_add(additional_fds) > limit {
-                return Err(ResourceError::file_table_full(
-                    "maximum open file descriptor limit reached",
-                ));
-            }
-        }
-
-        Ok(())
-    }
-
-    pub fn check_filesystem_usage(
-        &self,
-        _usage: &FileSystemUsage,
-        resulting_bytes: u64,
-        resulting_inodes: usize,
-    ) -> Result<(), ResourceError> {
-        if let Some(limit) = self.limits.max_filesystem_bytes {
-            if resulting_bytes > limit {
-                return Err(ResourceError::filesystem_full(
-                    "maximum filesystem size limit reached",
-                ));
-            }
-        }
-
-        if let Some(limit) = self.limits.max_inode_count {
-            if resulting_inodes > limit {
-                return Err(ResourceError::filesystem_full(
-                    "maximum inode count limit reached",
-                ));
-            }
-        }
-
-        // Sample the gauges only on the success path: observing the *projected*
-        // value before the bounds check would latch a spurious near/at-capacity
-        // warning for a write that is then rejected and never actually applied.
-        if let Some(gauge) = &self.gauges.filesystem_bytes {
-            gauge.observe_depth(usize_saturating_from_u64(resulting_bytes));
-        }
-        if let Some(gauge) = &self.gauges.inodes {
-            gauge.observe_depth(resulting_inodes);
-        }
-        Ok(())
-    }
-}
-
-fn argv_payload_bytes(command: &str, args: &[String]) -> usize {
-    let command_bytes = command.len().saturating_add(1);
-    command_bytes.saturating_add(
-        args.iter()
-            .map(|arg| arg.len().saturating_add(1))
-            .sum::<usize>(),
-    )
-}
-
-fn env_entry_payload_bytes(key: &str, value: &str) -> usize {
-    key.len()
-        .saturating_add(1)
-        .saturating_add(value.len())
-        .saturating_add(1)
-}
-
-fn merged_env_payload_bytes(
-    inherited_env: &BTreeMap<String, String>,
-    overrides: &BTreeMap<String, String>,
-) -> usize {
-    let mut total = inherited_env
-        .iter()
-        .map(|(key, value)| env_entry_payload_bytes(key, value))
-        .sum::<usize>();
-
-    for (key, value) in overrides {
-        if let Some(previous) = inherited_env.get(key) {
-            total = total.saturating_sub(env_entry_payload_bytes(key, previous));
-        }
-        total = total.saturating_add(env_entry_payload_bytes(key, value));
-    }
-
-    total
-}
-
-#[cfg(test)]
-mod gauge_tests {
-    use super::*;
-    use secure_exec_bridge::queue_tracker::{
-        set_limit_warning_handler, LimitWarning, TrackedLimit,
-    };
-    use std::sync::{Arc, Mutex};
-
-    #[test]
-    fn resource_gauges_track_usage_and_warn_on_approach() {
-        let captured: Arc<Mutex<Vec<LimitWarning>>> = Arc::new(Mutex::new(Vec::new()));
-        let sink = Arc::clone(&captured);
-        // Filter by name so a gauge from a concurrently-running test can't pollute.
-        set_limit_warning_handler(Box::new(move |warning| {
-            if warning.name == TrackedLimit::VmOpenFds {
-                sink.lock().expect("sink mutex").push(warning.clone());
-            }
-        }));
-
-        let limits = ResourceLimits {
-            max_open_fds: Some(10),
-            ..ResourceLimits::default()
-        };
-        let accountant = ResourceAccountant::new(limits);
-        let snapshot = ResourceSnapshot {
-            open_fds: 9, // 90% of the cap
-            ..ResourceSnapshot::default()
-        };
-        accountant.observe_resource_gauges(&snapshot);
-
-        // The gauge reflects the sampled usage...
-        let gauge = accountant
-            .gauges
-            .open_fds
-            .as_ref()
-            .expect("open_fds gauge registered when the limit is set");
-        assert_eq!(gauge.depth(), 9);
-        assert_eq!(gauge.capacity(), 10);
-        assert_eq!(gauge.high_water(), 9);
-
-        // ...and crossing ~80% emits the approach warning to the host sink.
-        assert!(
-            captured
-                .lock()
-                .unwrap()
-                .iter()
-                .any(|warning| warning.name == TrackedLimit::VmOpenFds),
-            "open_fds at 90% of cap must emit an approach warning"
-        );
-    }
-
-    #[test]
-    fn unset_limit_registers_no_gauge() {
-        let limits = ResourceLimits {
-            max_ptys: None,
-            ..ResourceLimits::default()
-        };
-        let accountant = ResourceAccountant::new(limits);
-        assert!(
-            accountant.gauges.ptys.is_none(),
-            "an unbounded (None) limit must not register a gauge"
-        );
-    }
-
-    #[test]
-    fn filesystem_gauge_not_latched_by_rejected_write() {
-        let limits = ResourceLimits {
-            max_filesystem_bytes: Some(1000),
-            max_inode_count: Some(100),
-            ..ResourceLimits::default()
-        };
-        let accountant = ResourceAccountant::new(limits);
-        let usage = FileSystemUsage::default();
-
-        // A write that would exceed the byte cap is rejected and must NOT latch
-        // the gauge to the projected (never-applied) value.
-        let rejected = accountant.check_filesystem_usage(&usage, 2000, 0);
-        assert!(rejected.is_err());
-        let bytes_gauge = accountant
-            .gauges
-            .filesystem_bytes
-            .as_ref()
-            .expect("filesystem_bytes gauge registered");
-        assert_eq!(
-            bytes_gauge.depth(),
-            0,
-            "a rejected over-limit write must not bump the gauge"
-        );
-
-        // A successful write does update it.
-        accountant
-            .check_filesystem_usage(&usage, 500, 7)
-            .expect("under-limit write is accepted");
-        assert_eq!(bytes_gauge.depth(), 500);
-        assert_eq!(
-            accountant.gauges.inodes.as_ref().unwrap().depth(),
-            7,
-            "inode gauge tracks the accepted value"
-        );
-    }
-}
diff --git a/crates/kernel/src/socket_table.rs b/crates/kernel/src/socket_table.rs
deleted file mode 100644
index 6f958aca3..000000000
--- a/crates/kernel/src/socket_table.rs
+++ /dev/null
@@ -1,2395 +0,0 @@
-use crate::poll::{PollEvents, POLLERR, POLLHUP, POLLIN, POLLOUT};
-use crate::vfs::normalize_path;
-use std::collections::{BTreeMap, BTreeSet, VecDeque};
-use std::error::Error;
-use std::fmt;
-use std::net::{Ipv4Addr, Ipv6Addr};
-use std::sync::atomic::{AtomicBool, AtomicU64, Ordering};
-use std::sync::{Arc, Mutex, MutexGuard};
-use std::time::Instant;
-
-pub type SocketId = u64;
-pub type SocketResult<T> = Result<T, SocketTableError>;
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum SocketReadinessKind {
-    Data,
-    Accept,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct SocketReadiness {
-    pub socket_id: SocketId,
-    pub kind: SocketReadinessKind,
-}
-
-type SocketReadinessSink = Arc<dyn Fn(SocketReadiness) + Send + Sync + 'static>;
-
-#[derive(Debug, Clone, Copy, Default, PartialEq, Eq)]
-pub struct SocketReadTraceSnapshot {
-    pub socket_record_clone_calls: u64,
-    pub socket_record_clone_us: u64,
-    pub read_recv_calls: u64,
-    pub read_recv_bytes: u64,
-    pub read_recv_chunks: u64,
-    pub read_recv_copy_us: u64,
-}
-
-struct SocketReadTraceCounters {
-    socket_record_clone_calls: AtomicU64,
-    socket_record_clone_us: AtomicU64,
-    read_recv_calls: AtomicU64,
-    read_recv_bytes: AtomicU64,
-    read_recv_chunks: AtomicU64,
-    read_recv_copy_us: AtomicU64,
-}
-
-impl SocketReadTraceCounters {
-    const fn new() -> Self {
-        Self {
-            socket_record_clone_calls: AtomicU64::new(0),
-            socket_record_clone_us: AtomicU64::new(0),
-            read_recv_calls: AtomicU64::new(0),
-            read_recv_bytes: AtomicU64::new(0),
-            read_recv_chunks: AtomicU64::new(0),
-            read_recv_copy_us: AtomicU64::new(0),
-        }
-    }
-}
-
-static SOCKET_READ_TRACE_ENABLED: AtomicBool = AtomicBool::new(false);
-static SOCKET_READ_TRACE_COUNTERS: SocketReadTraceCounters = SocketReadTraceCounters::new();
-
-pub fn set_socket_read_trace_enabled(enabled: bool) {
-    SOCKET_READ_TRACE_ENABLED.store(enabled, Ordering::Relaxed);
-}
-
-pub fn reset_socket_read_trace() {
-    for counter in [
-        &SOCKET_READ_TRACE_COUNTERS.socket_record_clone_calls,
-        &SOCKET_READ_TRACE_COUNTERS.socket_record_clone_us,
-        &SOCKET_READ_TRACE_COUNTERS.read_recv_calls,
-        &SOCKET_READ_TRACE_COUNTERS.read_recv_bytes,
-        &SOCKET_READ_TRACE_COUNTERS.read_recv_chunks,
-        &SOCKET_READ_TRACE_COUNTERS.read_recv_copy_us,
-    ] {
-        counter.store(0, Ordering::Relaxed);
-    }
-}
-
-pub fn socket_read_trace_snapshot() -> SocketReadTraceSnapshot {
-    SocketReadTraceSnapshot {
-        socket_record_clone_calls: SOCKET_READ_TRACE_COUNTERS
-            .socket_record_clone_calls
-            .load(Ordering::Relaxed),
-        socket_record_clone_us: SOCKET_READ_TRACE_COUNTERS
-            .socket_record_clone_us
-            .load(Ordering::Relaxed),
-        read_recv_calls: SOCKET_READ_TRACE_COUNTERS
-            .read_recv_calls
-            .load(Ordering::Relaxed),
-        read_recv_bytes: SOCKET_READ_TRACE_COUNTERS
-            .read_recv_bytes
-            .load(Ordering::Relaxed),
-        read_recv_chunks: SOCKET_READ_TRACE_COUNTERS
-            .read_recv_chunks
-            .load(Ordering::Relaxed),
-        read_recv_copy_us: SOCKET_READ_TRACE_COUNTERS
-            .read_recv_copy_us
-            .load(Ordering::Relaxed),
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, PartialOrd, Ord)]
-pub struct InetSocketAddress {
-    host: String,
-    port: u16,
-}
-
-impl InetSocketAddress {
-    pub fn new(host: impl Into<String>, port: u16) -> Self {
-        Self {
-            host: host.into(),
-            port,
-        }
-    }
-
-    pub fn host(&self) -> &str {
-        &self.host
-    }
-
-    pub const fn port(&self) -> u16 {
-        self.port
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord)]
-pub enum SocketDomain {
-    Inet,
-    Inet6,
-    Unix,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord)]
-pub enum SocketType {
-    Stream,
-    Datagram,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord)]
-pub enum SocketState {
-    Created,
-    Bound,
-    Listening,
-    Connected,
-}
-
-impl SocketState {
-    pub const fn counts_as_listener(self) -> bool {
-        matches!(self, Self::Listening)
-    }
-
-    pub const fn counts_as_connection(self) -> bool {
-        matches!(self, Self::Connected)
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum SocketShutdown {
-    Read,
-    Write,
-    Both,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum DatagramSocketOption {
-    ReuseAddr,
-    ReusePort,
-    Broadcast,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct SocketSpec {
-    pub domain: SocketDomain,
-    pub socket_type: SocketType,
-}
-
-impl SocketSpec {
-    pub const fn new(domain: SocketDomain, socket_type: SocketType) -> Self {
-        Self {
-            domain,
-            socket_type,
-        }
-    }
-
-    pub const fn tcp() -> Self {
-        Self::new(SocketDomain::Inet, SocketType::Stream)
-    }
-
-    pub const fn udp() -> Self {
-        Self::new(SocketDomain::Inet, SocketType::Datagram)
-    }
-
-    pub const fn unix_stream() -> Self {
-        Self::new(SocketDomain::Unix, SocketType::Stream)
-    }
-
-    pub const fn unix_datagram() -> Self {
-        Self::new(SocketDomain::Unix, SocketType::Datagram)
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct SocketRecord {
-    id: SocketId,
-    owner_pid: u32,
-    spec: SocketSpec,
-    state: SocketState,
-    local_address: Option<InetSocketAddress>,
-    peer_address: Option<InetSocketAddress>,
-    local_unix_path: Option<String>,
-    peer_unix_path: Option<String>,
-    listener_state: Option<ListenerState>,
-    connection_state: Option<ConnectionState>,
-    datagram_state: Option<DatagramState>,
-}
-
-impl SocketRecord {
-    pub const fn id(&self) -> SocketId {
-        self.id
-    }
-
-    pub const fn owner_pid(&self) -> u32 {
-        self.owner_pid
-    }
-
-    pub const fn spec(&self) -> SocketSpec {
-        self.spec
-    }
-
-    pub const fn state(&self) -> SocketState {
-        self.state
-    }
-
-    pub fn local_address(&self) -> Option<&InetSocketAddress> {
-        self.local_address.as_ref()
-    }
-
-    pub fn peer_address(&self) -> Option<&InetSocketAddress> {
-        self.peer_address.as_ref()
-    }
-
-    pub fn local_unix_path(&self) -> Option<&str> {
-        self.local_unix_path.as_deref()
-    }
-
-    pub fn peer_unix_path(&self) -> Option<&str> {
-        self.peer_unix_path.as_deref()
-    }
-
-    pub fn listen_backlog(&self) -> Option<usize> {
-        self.listener_state.as_ref().map(|state| state.backlog)
-    }
-
-    pub fn pending_accept_count(&self) -> usize {
-        self.listener_state
-            .as_ref()
-            .map(|state| state.pending_accepts.len())
-            .unwrap_or(0)
-    }
-
-    pub fn peer_socket_id(&self) -> Option<SocketId> {
-        self.connection_state
-            .as_ref()
-            .and_then(|state| state.peer_socket_id)
-    }
-
-    pub fn buffered_read_bytes(&self) -> usize {
-        self.connection_state
-            .as_ref()
-            .map(ConnectionState::buffered_len)
-            .unwrap_or(0)
-    }
-
-    pub fn read_shutdown(&self) -> bool {
-        self.connection_state
-            .as_ref()
-            .map(|state| state.read_shutdown)
-            .unwrap_or(false)
-    }
-
-    pub fn write_shutdown(&self) -> bool {
-        self.connection_state
-            .as_ref()
-            .map(|state| state.write_shutdown)
-            .unwrap_or(false)
-    }
-
-    pub fn peer_write_shutdown(&self) -> bool {
-        self.connection_state
-            .as_ref()
-            .map(|state| state.peer_write_shutdown)
-            .unwrap_or(false)
-    }
-
-    pub fn queued_datagrams(&self) -> usize {
-        self.datagram_state
-            .as_ref()
-            .map(|state| state.recv_queue.len())
-            .unwrap_or(0)
-    }
-
-    pub fn queued_datagram_bytes(&self) -> usize {
-        self.datagram_state
-            .as_ref()
-            .map(|state| datagram_queue_bytes(&state.recv_queue))
-            .unwrap_or(0)
-    }
-
-    pub fn reuse_address(&self) -> bool {
-        self.datagram_state
-            .as_ref()
-            .map(|state| state.reuse_addr)
-            .unwrap_or(false)
-    }
-
-    pub fn reuse_port(&self) -> bool {
-        self.datagram_state
-            .as_ref()
-            .map(|state| state.reuse_port)
-            .unwrap_or(false)
-    }
-
-    pub fn broadcast_enabled(&self) -> bool {
-        self.datagram_state
-            .as_ref()
-            .map(|state| state.broadcast)
-            .unwrap_or(false)
-    }
-
-    pub fn multicast_membership_count(&self) -> usize {
-        self.datagram_state
-            .as_ref()
-            .map(|state| state.multicast_memberships.len())
-            .unwrap_or(0)
-    }
-
-    pub fn has_multicast_membership(&self, membership: &SocketMulticastMembership) -> bool {
-        self.datagram_state
-            .as_ref()
-            .map(|state| state.multicast_memberships.contains(membership))
-            .unwrap_or(false)
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ReceivedDatagram {
-    source_address: Option<InetSocketAddress>,
-    payload: Vec<u8>,
-}
-
-impl ReceivedDatagram {
-    pub fn source_address(&self) -> Option<&InetSocketAddress> {
-        self.source_address.as_ref()
-    }
-
-    pub fn payload(&self) -> &[u8] {
-        &self.payload
-    }
-
-    pub fn into_parts(self) -> (Option<InetSocketAddress>, Vec<u8>) {
-        (self.source_address, self.payload)
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
-pub struct SocketTableSnapshot {
-    pub sockets: usize,
-    pub listeners: usize,
-    pub connections: usize,
-    pub buffered_bytes: usize,
-    pub datagram_queue_len: usize,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, PartialOrd, Ord)]
-pub struct SocketMulticastMembership {
-    group_address: String,
-    interface_address: Option<String>,
-}
-
-impl SocketMulticastMembership {
-    pub fn new(group_address: impl Into<String>, interface_address: Option<String>) -> Self {
-        Self {
-            group_address: group_address.into(),
-            interface_address,
-        }
-    }
-
-    pub fn group_address(&self) -> &str {
-        &self.group_address
-    }
-
-    pub fn interface_address(&self) -> Option<&str> {
-        self.interface_address.as_deref()
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct SocketTableError {
-    code: &'static str,
-    message: String,
-}
-
-impl SocketTableError {
-    pub fn code(&self) -> &'static str {
-        self.code
-    }
-
-    fn not_found(socket_id: SocketId) -> Self {
-        Self {
-            code: "ENOENT",
-            message: format!("no such socket {socket_id}"),
-        }
-    }
-
-    fn invalid_argument(message: impl Into<String>) -> Self {
-        Self {
-            code: "EINVAL",
-            message: message.into(),
-        }
-    }
-
-    fn address_in_use(message: impl Into<String>) -> Self {
-        Self {
-            code: "EADDRINUSE",
-            message: message.into(),
-        }
-    }
-
-    fn address_not_available(message: impl Into<String>) -> Self {
-        Self {
-            code: "EADDRNOTAVAIL",
-            message: message.into(),
-        }
-    }
-
-    fn not_found_address(message: impl Into<String>) -> Self {
-        Self {
-            code: "ECONNREFUSED",
-            message: message.into(),
-        }
-    }
-
-    fn would_block(message: impl Into<String>) -> Self {
-        Self {
-            code: "EAGAIN",
-            message: message.into(),
-        }
-    }
-
-    fn not_connected(message: impl Into<String>) -> Self {
-        Self {
-            code: "ENOTCONN",
-            message: message.into(),
-        }
-    }
-
-    fn broken_pipe(message: impl Into<String>) -> Self {
-        Self {
-            code: "EPIPE",
-            message: message.into(),
-        }
-    }
-}
-
-impl fmt::Display for SocketTableError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}: {}", self.code, self.message)
-    }
-}
-
-impl Error for SocketTableError {}
-
-#[derive(Debug, Default)]
-struct SocketTableState {
-    sockets: BTreeMap<SocketId, SocketRecord>,
-    by_owner: BTreeMap<u32, BTreeSet<SocketId>>,
-    bound_inet_streams: BTreeMap<InetSocketAddress, SocketId>,
-    bound_inet_datagrams: BTreeMap<InetSocketAddress, BTreeSet<SocketId>>,
-    bound_unix_streams: BTreeMap<String, SocketId>,
-    multicast_groups: BTreeMap<SocketMulticastMembership, BTreeSet<SocketId>>,
-    next_socket_id: SocketId,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-struct ListenerState {
-    backlog: usize,
-    pending_accepts: VecDeque<PendingConnection>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Default)]
-struct ConnectionState {
-    peer_socket_id: Option<SocketId>,
-    recv_buffer: VecDeque<Vec<u8>>,
-    recv_buffer_len: usize,
-    read_shutdown: bool,
-    write_shutdown: bool,
-    peer_write_shutdown: bool,
-}
-
-impl ConnectionState {
-    fn buffered_len(&self) -> usize {
-        self.recv_buffer_len
-    }
-
-    fn has_buffered_data(&self) -> bool {
-        self.recv_buffer_len > 0
-    }
-
-    fn push_recv(&mut self, data: &[u8]) {
-        if data.is_empty() {
-            return;
-        }
-        self.recv_buffer.push_back(data.to_vec());
-        self.recv_buffer_len = self.recv_buffer_len.saturating_add(data.len());
-    }
-
-    fn read_recv(&mut self, max_bytes: usize) -> Option<Vec<u8>> {
-        if max_bytes == 0 {
-            return Some(Vec::new());
-        }
-        if self.recv_buffer_len == 0 {
-            return None;
-        }
-
-        let read_len = self.recv_buffer_len.min(max_bytes);
-        self.recv_buffer_len -= read_len;
-
-        let mut remaining = read_len;
-        let mut chunks = 0usize;
-        let trace_started = SOCKET_READ_TRACE_ENABLED
-            .load(Ordering::Relaxed)
-            .then(Instant::now);
-        let mut out = Vec::with_capacity(read_len);
-        while remaining > 0 {
-            let mut chunk = self.recv_buffer.pop_front()?;
-            chunks += 1;
-            if chunk.len() <= remaining {
-                remaining -= chunk.len();
-                out.extend_from_slice(&chunk);
-                continue;
-            }
-
-            let tail = chunk.split_off(remaining);
-            out.extend_from_slice(&chunk);
-            self.recv_buffer.push_front(tail);
-            remaining = 0;
-        }
-        if let Some(started) = trace_started {
-            SOCKET_READ_TRACE_COUNTERS
-                .read_recv_calls
-                .fetch_add(1, Ordering::Relaxed);
-            SOCKET_READ_TRACE_COUNTERS.read_recv_bytes.fetch_add(
-                u64::try_from(read_len).unwrap_or(u64::MAX),
-                Ordering::Relaxed,
-            );
-            SOCKET_READ_TRACE_COUNTERS
-                .read_recv_chunks
-                .fetch_add(u64::try_from(chunks).unwrap_or(u64::MAX), Ordering::Relaxed);
-            SOCKET_READ_TRACE_COUNTERS.read_recv_copy_us.fetch_add(
-                u64::try_from(started.elapsed().as_micros()).unwrap_or(u64::MAX),
-                Ordering::Relaxed,
-            );
-        }
-        Some(out)
-    }
-
-    fn clear_recv(&mut self) {
-        self.recv_buffer.clear();
-        self.recv_buffer_len = 0;
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-struct PendingConnection {
-    peer_address: Option<InetSocketAddress>,
-    peer_unix_path: Option<String>,
-    accepted_socket_id: Option<SocketId>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Default)]
-struct DatagramState {
-    recv_queue: VecDeque<QueuedDatagram>,
-    reuse_addr: bool,
-    reuse_port: bool,
-    broadcast: bool,
-    multicast_memberships: BTreeSet<SocketMulticastMembership>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-struct QueuedDatagram {
-    source_address: Option<InetSocketAddress>,
-    payload: Vec<u8>,
-}
-
-struct SocketTableInner {
-    state: Mutex<SocketTableState>,
-    readiness_sink: Mutex<Option<SocketReadinessSink>>,
-}
-
-impl Default for SocketTableInner {
-    fn default() -> Self {
-        Self {
-            state: Mutex::new(SocketTableState::default()),
-            readiness_sink: Mutex::new(None),
-        }
-    }
-}
-
-impl fmt::Debug for SocketTableInner {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        f.debug_struct("SocketTableInner")
-            .field("state", &self.state)
-            .finish_non_exhaustive()
-    }
-}
-
-#[derive(Debug, Clone, Default)]
-pub struct SocketTable {
-    inner: Arc<SocketTableInner>,
-}
-
-impl SocketTable {
-    pub fn new() -> Self {
-        Self::default()
-    }
-
-    pub fn set_readiness_sink<F>(&self, sink: Option<F>)
-    where
-        F: Fn(SocketReadiness) + Send + Sync + 'static,
-    {
-        let mut target = lock_or_recover(&self.inner.readiness_sink);
-        *target = sink.map(|sink| Arc::new(sink) as SocketReadinessSink);
-    }
-
-    fn emit_readiness(&self, readiness: Option<SocketReadiness>) {
-        let Some(readiness) = readiness else {
-            return;
-        };
-        let sink = lock_or_recover(&self.inner.readiness_sink).clone();
-        if let Some(sink) = sink {
-            sink(readiness);
-        }
-    }
-
-    pub fn allocate(&self, owner_pid: u32, spec: SocketSpec) -> SocketRecord {
-        self.allocate_with_state(owner_pid, spec, SocketState::Created)
-    }
-
-    pub fn allocate_with_state(
-        &self,
-        owner_pid: u32,
-        spec: SocketSpec,
-        state: SocketState,
-    ) -> SocketRecord {
-        let mut table = lock_or_recover(&self.inner.state);
-        let socket_id = next_socket_id(&mut table);
-        let record = SocketRecord {
-            id: socket_id,
-            owner_pid,
-            spec,
-            state,
-            local_address: None,
-            peer_address: None,
-            local_unix_path: None,
-            peer_unix_path: None,
-            listener_state: None,
-            connection_state: default_connection_state(spec, state),
-            datagram_state: default_datagram_state(spec),
-        };
-        table.sockets.insert(socket_id, record.clone());
-        table
-            .by_owner
-            .entry(owner_pid)
-            .or_default()
-            .insert(socket_id);
-        record
-    }
-
-    pub fn get(&self, socket_id: SocketId) -> Option<SocketRecord> {
-        lock_or_recover(&self.inner.state)
-            .sockets
-            .get(&socket_id)
-            .cloned()
-    }
-
-    pub fn records_for_owner(&self, owner_pid: u32) -> Vec<SocketRecord> {
-        let table = lock_or_recover(&self.inner.state);
-        let Some(socket_ids) = table.by_owner.get(&owner_pid) else {
-            return Vec::new();
-        };
-        socket_ids
-            .iter()
-            .filter_map(|socket_id| table.sockets.get(socket_id).cloned())
-            .collect()
-    }
-
-    pub fn update_state(
-        &self,
-        socket_id: SocketId,
-        new_state: SocketState,
-    ) -> SocketResult<SocketRecord> {
-        let mut table = lock_or_recover(&self.inner.state);
-        let record = table
-            .sockets
-            .get_mut(&socket_id)
-            .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-        validate_state_transition(record.state, new_state)?;
-        record.state = new_state;
-        if new_state != SocketState::Listening {
-            record.listener_state = None;
-        }
-        if new_state == SocketState::Connected && supports_connection_lifecycle(record.spec) {
-            record
-                .connection_state
-                .get_or_insert_with(ConnectionState::default);
-        } else if new_state != SocketState::Connected {
-            record.connection_state = None;
-        }
-        Ok(record.clone())
-    }
-
-    pub fn bind_inet(
-        &self,
-        socket_id: SocketId,
-        address: InetSocketAddress,
-    ) -> SocketResult<SocketRecord> {
-        let mut address = normalize_inet_address(address);
-        let mut table = lock_or_recover(&self.inner.state);
-        let existing = table
-            .sockets
-            .get(&socket_id)
-            .cloned()
-            .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-        if !supports_inet_bind(existing.spec) {
-            return Err(SocketTableError::invalid_argument(format!(
-                "socket {socket_id} is not an INET socket"
-            )));
-        }
-        // POSIX bind(port=0) assigns a free ephemeral port (kernel-owned, so the
-        // converged browser path does not need a host port allocator).
-        if address.port() == 0 {
-            let port = assign_ephemeral_inet_port(&table, existing.spec, address.host())?;
-            address = normalize_inet_address(InetSocketAddress::new(address.host(), port));
-        }
-        let conflicting_ids =
-            lookup_conflicting_bound_inet_socket_ids(&table, existing.spec, &address);
-        if has_incompatible_inet_bind_conflict(&table, &existing, &conflicting_ids) {
-            return Err(SocketTableError::address_in_use(format!(
-                "address {}:{} is already bound",
-                address.host(),
-                address.port()
-            )));
-        }
-        let cloned = {
-            let record = table
-                .sockets
-                .get_mut(&socket_id)
-                .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-
-            match record.state {
-                SocketState::Created => {}
-                SocketState::Bound if record.local_address.as_ref() == Some(&address) => {
-                    return Ok(record.clone());
-                }
-                SocketState::Bound | SocketState::Listening | SocketState::Connected => {
-                    return Err(SocketTableError::invalid_argument(format!(
-                        "socket {socket_id} cannot bind in state {:?}",
-                        record.state
-                    )));
-                }
-            }
-
-            record.local_address = Some(address.clone());
-            record.peer_address = None;
-            record.local_unix_path = None;
-            record.peer_unix_path = None;
-            record.listener_state = None;
-            record.connection_state = None;
-            record.state = SocketState::Bound;
-            record.clone()
-        };
-        register_bound_inet_socket(&mut table, cloned.spec, address, socket_id);
-        Ok(cloned)
-    }
-
-    pub fn set_datagram_socket_option(
-        &self,
-        socket_id: SocketId,
-        option: DatagramSocketOption,
-        enabled: bool,
-    ) -> SocketResult<SocketRecord> {
-        let mut table = lock_or_recover(&self.inner.state);
-        let record = table
-            .sockets
-            .get_mut(&socket_id)
-            .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-        let datagram_state = datagram_state_mut(record)?;
-
-        match option {
-            DatagramSocketOption::ReuseAddr => datagram_state.reuse_addr = enabled,
-            DatagramSocketOption::ReusePort => datagram_state.reuse_port = enabled,
-            DatagramSocketOption::Broadcast => datagram_state.broadcast = enabled,
-        }
-
-        Ok(record.clone())
-    }
-
-    pub fn add_multicast_membership(
-        &self,
-        socket_id: SocketId,
-        membership: SocketMulticastMembership,
-    ) -> SocketResult<SocketRecord> {
-        let mut table = lock_or_recover(&self.inner.state);
-        let normalized_membership = {
-            let record = table
-                .sockets
-                .get(&socket_id)
-                .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-            validate_multicast_socket(record)?;
-            normalize_multicast_membership(record.spec, membership)?
-        };
-
-        let cloned = {
-            let record = table
-                .sockets
-                .get_mut(&socket_id)
-                .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-            let datagram_state = datagram_state_mut(record)?;
-            datagram_state
-                .multicast_memberships
-                .insert(normalized_membership.clone());
-            record.clone()
-        };
-
-        table
-            .multicast_groups
-            .entry(normalized_membership)
-            .or_default()
-            .insert(socket_id);
-        Ok(cloned)
-    }
-
-    pub fn drop_multicast_membership(
-        &self,
-        socket_id: SocketId,
-        membership: SocketMulticastMembership,
-    ) -> SocketResult<SocketRecord> {
-        let mut table = lock_or_recover(&self.inner.state);
-        let normalized_membership = {
-            let record = table
-                .sockets
-                .get(&socket_id)
-                .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-            validate_multicast_socket(record)?;
-            normalize_multicast_membership(record.spec, membership)?
-        };
-
-        let cloned = {
-            let record = table
-                .sockets
-                .get_mut(&socket_id)
-                .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-            let datagram_state = datagram_state_mut(record)?;
-            if !datagram_state
-                .multicast_memberships
-                .remove(&normalized_membership)
-            {
-                return Err(SocketTableError::address_not_available(format!(
-                    "socket {socket_id} has not joined multicast group {}",
-                    normalized_membership.group_address()
-                )));
-            }
-            record.clone()
-        };
-
-        if let Some(members) = table.multicast_groups.get_mut(&normalized_membership) {
-            members.remove(&socket_id);
-            if members.is_empty() {
-                table.multicast_groups.remove(&normalized_membership);
-            }
-        }
-
-        Ok(cloned)
-    }
-
-    pub fn bind_unix(
-        &self,
-        socket_id: SocketId,
-        path: impl Into<String>,
-    ) -> SocketResult<SocketRecord> {
-        let path = normalize_unix_socket_path(path.into())?;
-        let mut table = lock_or_recover(&self.inner.state);
-        let existing = table
-            .sockets
-            .get(&socket_id)
-            .cloned()
-            .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-        if !supports_unix_stream_lifecycle(existing.spec) {
-            return Err(SocketTableError::invalid_argument(format!(
-                "socket {socket_id} is not a Unix stream socket"
-            )));
-        }
-        let existing_id = table.bound_unix_streams.get(&path).copied();
-        let cloned = {
-            let record = table
-                .sockets
-                .get_mut(&socket_id)
-                .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-
-            if let Some(bound_socket_id) = existing_id {
-                if bound_socket_id != socket_id {
-                    return Err(SocketTableError::address_in_use(format!(
-                        "path {path} is already bound"
-                    )));
-                }
-            }
-
-            match record.state {
-                SocketState::Created => {}
-                SocketState::Bound if record.local_unix_path.as_deref() == Some(path.as_str()) => {
-                    return Ok(record.clone());
-                }
-                SocketState::Bound | SocketState::Listening | SocketState::Connected => {
-                    return Err(SocketTableError::invalid_argument(format!(
-                        "socket {socket_id} cannot bind in state {:?}",
-                        record.state
-                    )));
-                }
-            }
-
-            record.local_address = None;
-            record.peer_address = None;
-            record.local_unix_path = Some(path.clone());
-            record.peer_unix_path = None;
-            record.listener_state = None;
-            record.connection_state = None;
-            record.state = SocketState::Bound;
-            record.clone()
-        };
-        table.bound_unix_streams.insert(path, socket_id);
-        Ok(cloned)
-    }
-
-    pub fn listen(&self, socket_id: SocketId, backlog: usize) -> SocketResult<SocketRecord> {
-        if backlog == 0 {
-            return Err(SocketTableError::invalid_argument(
-                "listener backlog must be greater than zero",
-            ));
-        }
-
-        let mut table = lock_or_recover(&self.inner.state);
-        let record = table
-            .sockets
-            .get_mut(&socket_id)
-            .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-
-        if !supports_listener_lifecycle(record.spec) {
-            return Err(SocketTableError::invalid_argument(format!(
-                "socket {socket_id} is not a stream socket"
-            )));
-        }
-        if record.state != SocketState::Bound || !has_bound_endpoint(record) {
-            return Err(SocketTableError::invalid_argument(format!(
-                "socket {socket_id} must be bound before listen"
-            )));
-        }
-
-        record.state = SocketState::Listening;
-        record.listener_state = Some(ListenerState {
-            backlog,
-            pending_accepts: VecDeque::new(),
-        });
-        Ok(record.clone())
-    }
-
-    pub fn enqueue_incoming_tcp_connection(
-        &self,
-        listener_socket_id: SocketId,
-        peer_address: InetSocketAddress,
-    ) -> SocketResult<()> {
-        let readiness = {
-            let mut table = lock_or_recover(&self.inner.state);
-            let record = table
-                .sockets
-                .get_mut(&listener_socket_id)
-                .ok_or_else(|| SocketTableError::not_found(listener_socket_id))?;
-
-            if record.state != SocketState::Listening {
-                return Err(SocketTableError::invalid_argument(format!(
-                    "socket {listener_socket_id} is not listening"
-                )));
-            }
-
-            let listener_state = record.listener_state.as_mut().ok_or_else(|| {
-                SocketTableError::invalid_argument(format!(
-                    "socket {listener_socket_id} has no listener state"
-                ))
-            })?;
-
-            if listener_state.pending_accepts.len() >= listener_state.backlog {
-                return Err(SocketTableError::would_block(format!(
-                    "listener {listener_socket_id} backlog is full"
-                )));
-            }
-
-            let was_empty = listener_state.pending_accepts.is_empty();
-            listener_state.pending_accepts.push_back(PendingConnection {
-                peer_address: Some(peer_address),
-                peer_unix_path: None,
-                accepted_socket_id: None,
-            });
-            was_empty.then_some(SocketReadiness {
-                socket_id: listener_socket_id,
-                kind: SocketReadinessKind::Accept,
-            })
-        };
-        self.emit_readiness(readiness);
-        Ok(())
-    }
-
-    pub fn accept(&self, listener_socket_id: SocketId) -> SocketResult<SocketRecord> {
-        let mut table = lock_or_recover(&self.inner.state);
-        let (owner_pid, spec, local_address, local_unix_path, pending) = {
-            let record = table
-                .sockets
-                .get_mut(&listener_socket_id)
-                .ok_or_else(|| SocketTableError::not_found(listener_socket_id))?;
-
-            if record.state != SocketState::Listening {
-                return Err(SocketTableError::invalid_argument(format!(
-                    "socket {listener_socket_id} is not listening"
-                )));
-            }
-
-            let listener_state = record.listener_state.as_mut().ok_or_else(|| {
-                SocketTableError::invalid_argument(format!(
-                    "socket {listener_socket_id} has no listener state"
-                ))
-            })?;
-            let pending = listener_state.pending_accepts.pop_front().ok_or_else(|| {
-                SocketTableError::would_block(format!(
-                    "listener {listener_socket_id} has no pending connections"
-                ))
-            })?;
-
-            (
-                record.owner_pid,
-                record.spec,
-                record.local_address.clone(),
-                record.local_unix_path.clone(),
-                pending,
-            )
-        };
-
-        if let Some(accepted_socket_id) = pending.accepted_socket_id {
-            return table
-                .sockets
-                .get(&accepted_socket_id)
-                .cloned()
-                .ok_or_else(|| SocketTableError::not_found(accepted_socket_id));
-        }
-
-        let socket_id = next_socket_id(&mut table);
-        let record = SocketRecord {
-            id: socket_id,
-            owner_pid,
-            spec,
-            state: SocketState::Connected,
-            local_address,
-            peer_address: pending.peer_address,
-            local_unix_path,
-            peer_unix_path: pending.peer_unix_path,
-            listener_state: None,
-            connection_state: default_connection_state(spec, SocketState::Connected),
-            datagram_state: default_datagram_state(spec),
-        };
-        table.sockets.insert(socket_id, record.clone());
-        table
-            .by_owner
-            .entry(owner_pid)
-            .or_default()
-            .insert(socket_id);
-        Ok(record)
-    }
-
-    pub fn connect_pair(
-        &self,
-        socket_id: SocketId,
-        peer_socket_id: SocketId,
-    ) -> SocketResult<(SocketRecord, SocketRecord)> {
-        if socket_id == peer_socket_id {
-            return Err(SocketTableError::invalid_argument(
-                "socket cannot connect to itself",
-            ));
-        }
-
-        let mut table = lock_or_recover(&self.inner.state);
-        let mut socket = table
-            .sockets
-            .remove(&socket_id)
-            .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-        let Some(mut peer) = table.sockets.remove(&peer_socket_id) else {
-            table.sockets.insert(socket_id, socket);
-            return Err(SocketTableError::not_found(peer_socket_id));
-        };
-
-        if let Err(error) = validate_connect_pair(&socket, &peer) {
-            table.sockets.insert(socket_id, socket);
-            table.sockets.insert(peer_socket_id, peer);
-            return Err(error);
-        }
-
-        socket.state = SocketState::Connected;
-        socket.peer_address = peer.local_address.clone();
-        socket.peer_unix_path = peer.local_unix_path.clone();
-        socket.listener_state = None;
-        socket.connection_state = Some(ConnectionState {
-            peer_socket_id: Some(peer_socket_id),
-            ..ConnectionState::default()
-        });
-
-        peer.state = SocketState::Connected;
-        peer.peer_address = socket.local_address.clone();
-        peer.peer_unix_path = socket.local_unix_path.clone();
-        peer.listener_state = None;
-        peer.connection_state = Some(ConnectionState {
-            peer_socket_id: Some(socket_id),
-            ..ConnectionState::default()
-        });
-
-        let socket_clone = socket.clone();
-        let peer_clone = peer.clone();
-        table.sockets.insert(socket_id, socket);
-        table.sockets.insert(peer_socket_id, peer);
-        Ok((socket_clone, peer_clone))
-    }
-
-    pub fn find_bound_inet_socket(
-        &self,
-        spec: SocketSpec,
-        address: &InetSocketAddress,
-    ) -> Option<SocketRecord> {
-        let address = normalize_inet_address(address.clone());
-        let table = lock_or_recover(&self.inner.state);
-        let socket_id = lookup_bound_inet_socket(&table, spec, &address)?;
-        table.sockets.get(&socket_id).cloned()
-    }
-
-    pub fn connect_to_bound_inet_stream(
-        &self,
-        socket_id: SocketId,
-        target_address: InetSocketAddress,
-    ) -> SocketResult<()> {
-        let target_address = normalize_inet_address(target_address);
-        let (result, readiness) = {
-            let mut table = lock_or_recover(&self.inner.state);
-            let listener_socket_id =
-                lookup_bound_inet_socket_in_table(&table.bound_inet_streams, &target_address)
-                    .ok_or_else(|| {
-                        SocketTableError::not_found_address(format!(
-                            "no listening socket bound at {}:{}",
-                            target_address.host(),
-                            target_address.port()
-                        ))
-                    })?;
-
-            if socket_id == listener_socket_id {
-                return Err(SocketTableError::invalid_argument(
-                    "socket cannot connect to its own listening endpoint",
-                ));
-            }
-
-            let mut client = table
-                .sockets
-                .remove(&socket_id)
-                .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-            let mut accept_was_empty = false;
-            let result = (|| {
-                // Validate the listener and confirm backlog capacity BEFORE consuming a
-                // socket id. The id counter is monotonic (saturating_add) and never
-                // reclaims, so allocating an id before this check leaks one on every
-                // rejected connect (for example when the backlog is full).
-                {
-                    let listener = table
-                        .sockets
-                        .get(&listener_socket_id)
-                        .ok_or_else(|| SocketTableError::not_found(listener_socket_id))?;
-                    validate_connect_to_listener(&client, listener)?;
-
-                    let listener_state = listener.listener_state.as_ref().ok_or_else(|| {
-                        SocketTableError::invalid_argument(format!(
-                            "socket {listener_socket_id} has no listener state"
-                        ))
-                    })?;
-                    if listener_state.pending_accepts.len() >= listener_state.backlog {
-                        return Err(SocketTableError::would_block(format!(
-                            "listener {listener_socket_id} backlog is full"
-                        )));
-                    }
-                }
-
-                // Capacity confirmed: only now is it safe to consume a socket id.
-                let accepted_socket_id = next_socket_id(&mut table);
-                let listener = table
-                    .sockets
-                    .get_mut(&listener_socket_id)
-                    .ok_or_else(|| SocketTableError::not_found(listener_socket_id))?;
-                let listener_state = listener.listener_state.as_mut().ok_or_else(|| {
-                    SocketTableError::invalid_argument(format!(
-                        "socket {listener_socket_id} has no listener state"
-                    ))
-                })?;
-
-                let accepted = SocketRecord {
-                    id: accepted_socket_id,
-                    owner_pid: listener.owner_pid,
-                    spec: listener.spec,
-                    state: SocketState::Connected,
-                    local_address: listener.local_address.clone(),
-                    peer_address: client.local_address.clone(),
-                    local_unix_path: None,
-                    peer_unix_path: None,
-                    listener_state: None,
-                    connection_state: Some(ConnectionState {
-                        peer_socket_id: Some(socket_id),
-                        ..ConnectionState::default()
-                    }),
-                    datagram_state: default_datagram_state(listener.spec),
-                };
-
-                accept_was_empty = listener_state.pending_accepts.is_empty();
-                listener_state.pending_accepts.push_back(PendingConnection {
-                    peer_address: client.local_address.clone(),
-                    peer_unix_path: None,
-                    accepted_socket_id: Some(accepted_socket_id),
-                });
-
-                client.state = SocketState::Connected;
-                client.peer_address = listener.local_address.clone();
-                client.peer_unix_path = None;
-                client.listener_state = None;
-                client.connection_state = Some(ConnectionState {
-                    peer_socket_id: Some(accepted_socket_id),
-                    ..ConnectionState::default()
-                });
-
-                Ok(accepted)
-            })();
-
-            let result = match result {
-                Ok(accepted) => {
-                    let accepted_socket_id = accepted.id;
-                    table.sockets.insert(socket_id, client);
-                    table.sockets.insert(accepted_socket_id, accepted.clone());
-                    table
-                        .by_owner
-                        .entry(accepted.owner_pid)
-                        .or_default()
-                        .insert(accepted_socket_id);
-                    Ok(())
-                }
-                Err(error) => {
-                    table.sockets.insert(socket_id, client);
-                    Err(error)
-                }
-            };
-            let readiness = result.is_ok().then_some(()).and_then(|()| {
-                accept_was_empty.then_some(SocketReadiness {
-                    socket_id: listener_socket_id,
-                    kind: SocketReadinessKind::Accept,
-                })
-            });
-            (result, readiness)
-        };
-        self.emit_readiness(readiness);
-        result
-    }
-
-    pub fn find_bound_unix_socket(&self, path: &str) -> Option<SocketRecord> {
-        let path = normalize_unix_socket_path(path).ok()?;
-        let table = lock_or_recover(&self.inner.state);
-        let socket_id = table.bound_unix_streams.get(&path).copied()?;
-        table.sockets.get(&socket_id).cloned()
-    }
-
-    pub fn connect_to_bound_unix_stream(
-        &self,
-        socket_id: SocketId,
-        target_path: impl Into<String>,
-    ) -> SocketResult<()> {
-        let target_path = normalize_unix_socket_path(target_path.into())?;
-        let (result, readiness) = {
-            let mut table = lock_or_recover(&self.inner.state);
-            let listener_socket_id = table
-                .bound_unix_streams
-                .get(&target_path)
-                .copied()
-                .ok_or_else(|| {
-                    SocketTableError::not_found_address(format!(
-                        "no listening socket bound at path {target_path}"
-                    ))
-                })?;
-
-            if socket_id == listener_socket_id {
-                return Err(SocketTableError::invalid_argument(
-                    "socket cannot connect to its own listening endpoint",
-                ));
-            }
-
-            let mut client = table
-                .sockets
-                .remove(&socket_id)
-                .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-            let mut accept_was_empty = false;
-            let result = (|| {
-                // Validate the listener and confirm backlog capacity BEFORE consuming a
-                // socket id. The id counter is monotonic (saturating_add) and never
-                // reclaims, so allocating an id before this check leaks one on every
-                // rejected connect (for example when the backlog is full).
-                {
-                    let listener = table
-                        .sockets
-                        .get(&listener_socket_id)
-                        .ok_or_else(|| SocketTableError::not_found(listener_socket_id))?;
-                    validate_connect_to_listener(&client, listener)?;
-
-                    let listener_state = listener.listener_state.as_ref().ok_or_else(|| {
-                        SocketTableError::invalid_argument(format!(
-                            "socket {listener_socket_id} has no listener state"
-                        ))
-                    })?;
-                    if listener_state.pending_accepts.len() >= listener_state.backlog {
-                        return Err(SocketTableError::would_block(format!(
-                            "listener {listener_socket_id} backlog is full"
-                        )));
-                    }
-                }
-
-                // Capacity confirmed: only now is it safe to consume a socket id.
-                let accepted_socket_id = next_socket_id(&mut table);
-                let listener = table
-                    .sockets
-                    .get_mut(&listener_socket_id)
-                    .ok_or_else(|| SocketTableError::not_found(listener_socket_id))?;
-                let listener_state = listener.listener_state.as_mut().ok_or_else(|| {
-                    SocketTableError::invalid_argument(format!(
-                        "socket {listener_socket_id} has no listener state"
-                    ))
-                })?;
-
-                let accepted = SocketRecord {
-                    id: accepted_socket_id,
-                    owner_pid: listener.owner_pid,
-                    spec: listener.spec,
-                    state: SocketState::Connected,
-                    local_address: None,
-                    peer_address: None,
-                    local_unix_path: listener.local_unix_path.clone(),
-                    peer_unix_path: client.local_unix_path.clone(),
-                    listener_state: None,
-                    connection_state: Some(ConnectionState {
-                        peer_socket_id: Some(socket_id),
-                        ..ConnectionState::default()
-                    }),
-                    datagram_state: default_datagram_state(listener.spec),
-                };
-
-                accept_was_empty = listener_state.pending_accepts.is_empty();
-                listener_state.pending_accepts.push_back(PendingConnection {
-                    peer_address: None,
-                    peer_unix_path: client.local_unix_path.clone(),
-                    accepted_socket_id: Some(accepted_socket_id),
-                });
-
-                client.state = SocketState::Connected;
-                client.peer_address = None;
-                client.peer_unix_path = listener.local_unix_path.clone();
-                client.listener_state = None;
-                client.connection_state = Some(ConnectionState {
-                    peer_socket_id: Some(accepted_socket_id),
-                    ..ConnectionState::default()
-                });
-
-                Ok(accepted)
-            })();
-
-            let result = match result {
-                Ok(accepted) => {
-                    let accepted_socket_id = accepted.id;
-                    table.sockets.insert(socket_id, client);
-                    table.sockets.insert(accepted_socket_id, accepted.clone());
-                    table
-                        .by_owner
-                        .entry(accepted.owner_pid)
-                        .or_default()
-                        .insert(accepted_socket_id);
-                    Ok(())
-                }
-                Err(error) => {
-                    table.sockets.insert(socket_id, client);
-                    Err(error)
-                }
-            };
-            let readiness = result.is_ok().then_some(()).and_then(|()| {
-                accept_was_empty.then_some(SocketReadiness {
-                    socket_id: listener_socket_id,
-                    kind: SocketReadinessKind::Accept,
-                })
-            });
-            (result, readiness)
-        };
-        self.emit_readiness(readiness);
-        result
-    }
-
-    pub fn send_to_bound_udp_socket(
-        &self,
-        socket_id: SocketId,
-        target_address: InetSocketAddress,
-        data: &[u8],
-    ) -> SocketResult<usize> {
-        let target_address = normalize_inet_address(target_address);
-        let readiness = {
-            let mut table = lock_or_recover(&self.inner.state);
-            let sender = table
-                .sockets
-                .get(&socket_id)
-                .cloned()
-                .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-            validate_bound_udp_sender(&sender)?;
-
-            let receiver_socket_id = lookup_bound_inet_datagram_socket_in_table(
-                &table.bound_inet_datagrams,
-                &target_address,
-            )
-            .ok_or_else(|| {
-                SocketTableError::not_found_address(format!(
-                    "no UDP socket bound at {}:{}",
-                    target_address.host(),
-                    target_address.port()
-                ))
-            })?;
-            let receiver = table
-                .sockets
-                .get_mut(&receiver_socket_id)
-                .ok_or_else(|| SocketTableError::not_found(receiver_socket_id))?;
-            validate_bound_udp_receiver(receiver)?;
-
-            let datagram_state = receiver.datagram_state.as_mut().ok_or_else(|| {
-                SocketTableError::invalid_argument(format!(
-                    "socket {receiver_socket_id} does not support datagrams"
-                ))
-            })?;
-            let was_empty = datagram_state.recv_queue.is_empty();
-            datagram_state.recv_queue.push_back(QueuedDatagram {
-                source_address: sender.local_address.clone(),
-                payload: data.to_vec(),
-            });
-            was_empty.then_some(SocketReadiness {
-                socket_id: receiver_socket_id,
-                kind: SocketReadinessKind::Data,
-            })
-        };
-        self.emit_readiness(readiness);
-        Ok(data.len())
-    }
-
-    pub fn check_send_to_bound_udp_socket(
-        &self,
-        socket_id: SocketId,
-        target_address: InetSocketAddress,
-    ) -> SocketResult<()> {
-        let target_address = normalize_inet_address(target_address);
-        let table = lock_or_recover(&self.inner.state);
-        let sender = table
-            .sockets
-            .get(&socket_id)
-            .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-        validate_bound_udp_sender(sender)?;
-
-        let receiver_socket_id = lookup_bound_inet_datagram_socket_in_table(
-            &table.bound_inet_datagrams,
-            &target_address,
-        )
-        .ok_or_else(|| {
-            SocketTableError::not_found_address(format!(
-                "no UDP socket bound at {}:{}",
-                target_address.host(),
-                target_address.port()
-            ))
-        })?;
-        let receiver = table
-            .sockets
-            .get(&receiver_socket_id)
-            .ok_or_else(|| SocketTableError::not_found(receiver_socket_id))?;
-        validate_bound_udp_receiver(receiver)?;
-        Ok(())
-    }
-
-    pub fn recv_datagram(
-        &self,
-        socket_id: SocketId,
-        max_bytes: usize,
-    ) -> SocketResult<Option<ReceivedDatagram>> {
-        let mut table = lock_or_recover(&self.inner.state);
-        let record = table
-            .sockets
-            .get_mut(&socket_id)
-            .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-        validate_bound_udp_receiver(record)?;
-
-        let datagram_state = record.datagram_state.as_mut().ok_or_else(|| {
-            SocketTableError::invalid_argument(format!(
-                "socket {socket_id} does not support datagrams"
-            ))
-        })?;
-        let Some(datagram) = datagram_state.recv_queue.pop_front() else {
-            return Err(SocketTableError::would_block(format!(
-                "socket {socket_id} has no queued datagrams"
-            )));
-        };
-
-        let payload = if datagram.payload.len() > max_bytes {
-            datagram.payload[..max_bytes].to_vec()
-        } else {
-            datagram.payload
-        };
-        Ok(Some(ReceivedDatagram {
-            source_address: datagram.source_address,
-            payload,
-        }))
-    }
-
-    pub fn poll(&self, socket_id: SocketId, requested: PollEvents) -> SocketResult<PollEvents> {
-        let table = lock_or_recover(&self.inner.state);
-        let record = table
-            .sockets
-            .get(&socket_id)
-            .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-
-        let mut events = PollEvents::empty();
-        match record.state {
-            SocketState::Listening => {
-                if requested.intersects(POLLIN) && record.pending_accept_count() > 0 {
-                    events |= POLLIN;
-                }
-            }
-            SocketState::Connected => {
-                let connection = record.connection_state.as_ref().ok_or_else(|| {
-                    SocketTableError::not_connected(format!("socket {socket_id} is not connected"))
-                })?;
-                let peer = connection
-                    .peer_socket_id
-                    .and_then(|peer_socket_id| table.sockets.get(&peer_socket_id));
-
-                if requested.intersects(POLLIN) && connection.has_buffered_data() {
-                    events |= POLLIN;
-                }
-                if connection.peer_write_shutdown || peer.is_none() {
-                    events |= POLLHUP;
-                }
-
-                if requested.intersects(POLLOUT) && !connection.write_shutdown {
-                    if peer
-                        .and_then(|peer| peer.connection_state.as_ref())
-                        .map(|peer_connection| peer_connection.read_shutdown)
-                        .unwrap_or(true)
-                    {
-                        events |= POLLERR;
-                    } else {
-                        events |= POLLOUT;
-                    }
-                }
-            }
-            SocketState::Bound if supports_inet_datagram_lifecycle(record.spec) => {
-                let datagram_state = record.datagram_state.as_ref().ok_or_else(|| {
-                    SocketTableError::invalid_argument(format!(
-                        "socket {socket_id} does not support datagrams"
-                    ))
-                })?;
-                if requested.intersects(POLLIN) && !datagram_state.recv_queue.is_empty() {
-                    events |= POLLIN;
-                }
-                if requested.intersects(POLLOUT) {
-                    events |= POLLOUT;
-                }
-            }
-            SocketState::Created | SocketState::Bound => {}
-        }
-
-        Ok(events)
-    }
-
-    pub fn write(&self, socket_id: SocketId, data: &[u8]) -> SocketResult<usize> {
-        let readiness = {
-            let mut table = lock_or_recover(&self.inner.state);
-            let record = table
-                .sockets
-                .get(&socket_id)
-                .cloned()
-                .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-            let connection = record.connection_state.as_ref().ok_or_else(|| {
-                SocketTableError::not_connected(format!("socket {socket_id} is not connected"))
-            })?;
-            if record.state != SocketState::Connected {
-                return Err(SocketTableError::not_connected(format!(
-                    "socket {socket_id} is not connected"
-                )));
-            }
-            if connection.write_shutdown {
-                return Err(SocketTableError::broken_pipe(format!(
-                    "socket {socket_id} write side is shut down"
-                )));
-            }
-
-            let peer_socket_id = connection.peer_socket_id.ok_or_else(|| {
-                SocketTableError::broken_pipe(format!("socket {socket_id} peer is closed"))
-            })?;
-            let peer = table.sockets.get_mut(&peer_socket_id).ok_or_else(|| {
-                SocketTableError::broken_pipe(format!("socket {socket_id} peer is closed"))
-            })?;
-            let peer_connection = peer.connection_state.as_mut().ok_or_else(|| {
-                SocketTableError::broken_pipe(format!("socket {socket_id} peer is closed"))
-            })?;
-            if peer_connection.read_shutdown {
-                return Err(SocketTableError::broken_pipe(format!(
-                    "socket {peer_socket_id} read side is shut down"
-                )));
-            }
-
-            let was_empty = !peer_connection.has_buffered_data();
-            peer_connection.push_recv(data);
-            (was_empty && !data.is_empty()).then_some(SocketReadiness {
-                socket_id: peer_socket_id,
-                kind: SocketReadinessKind::Data,
-            })
-        };
-        self.emit_readiness(readiness);
-        Ok(data.len())
-    }
-
-    pub fn check_write(&self, socket_id: SocketId) -> SocketResult<()> {
-        let table = lock_or_recover(&self.inner.state);
-        let record = table
-            .sockets
-            .get(&socket_id)
-            .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-        let connection = record.connection_state.as_ref().ok_or_else(|| {
-            SocketTableError::not_connected(format!("socket {socket_id} is not connected"))
-        })?;
-        if record.state != SocketState::Connected {
-            return Err(SocketTableError::not_connected(format!(
-                "socket {socket_id} is not connected"
-            )));
-        }
-        if connection.write_shutdown {
-            return Err(SocketTableError::broken_pipe(format!(
-                "socket {socket_id} write side is shut down"
-            )));
-        }
-
-        let peer_socket_id = connection.peer_socket_id.ok_or_else(|| {
-            SocketTableError::broken_pipe(format!("socket {socket_id} peer is closed"))
-        })?;
-        let peer = table.sockets.get(&peer_socket_id).ok_or_else(|| {
-            SocketTableError::broken_pipe(format!("socket {socket_id} peer is closed"))
-        })?;
-        let peer_connection = peer.connection_state.as_ref().ok_or_else(|| {
-            SocketTableError::broken_pipe(format!("socket {socket_id} peer is closed"))
-        })?;
-        if peer_connection.read_shutdown {
-            return Err(SocketTableError::broken_pipe(format!(
-                "socket {peer_socket_id} read side is shut down"
-            )));
-        }
-
-        Ok(())
-    }
-
-    pub fn read(&self, socket_id: SocketId, max_bytes: usize) -> SocketResult<Option<Vec<u8>>> {
-        if max_bytes == 0 {
-            return Ok(Some(Vec::new()));
-        }
-
-        let mut table = lock_or_recover(&self.inner.state);
-        let record_ref = table
-            .sockets
-            .get(&socket_id)
-            .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-        let clone_started = SOCKET_READ_TRACE_ENABLED
-            .load(Ordering::Relaxed)
-            .then(Instant::now);
-        let record = record_ref.clone();
-        if let Some(started) = clone_started {
-            SOCKET_READ_TRACE_COUNTERS
-                .socket_record_clone_calls
-                .fetch_add(1, Ordering::Relaxed);
-            SOCKET_READ_TRACE_COUNTERS.socket_record_clone_us.fetch_add(
-                u64::try_from(started.elapsed().as_micros()).unwrap_or(u64::MAX),
-                Ordering::Relaxed,
-            );
-        }
-        if record.state != SocketState::Connected {
-            return Err(SocketTableError::not_connected(format!(
-                "socket {socket_id} is not connected"
-            )));
-        }
-
-        let connection = record.connection_state.as_ref().ok_or_else(|| {
-            SocketTableError::not_connected(format!("socket {socket_id} is not connected"))
-        })?;
-        if connection.read_shutdown {
-            return Ok(None);
-        }
-        if connection.has_buffered_data() {
-            let record = table
-                .sockets
-                .get_mut(&socket_id)
-                .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-            let connection = record.connection_state.as_mut().ok_or_else(|| {
-                SocketTableError::not_connected(format!("socket {socket_id} is not connected"))
-            })?;
-            return Ok(connection.read_recv(max_bytes));
-        }
-
-        let peer_open = connection
-            .peer_socket_id
-            .map(|peer_socket_id| table.sockets.contains_key(&peer_socket_id))
-            .unwrap_or(false);
-        if connection.peer_write_shutdown || !peer_open {
-            return Ok(None);
-        }
-
-        Err(SocketTableError::would_block(format!(
-            "socket {socket_id} has no readable data"
-        )))
-    }
-
-    pub fn shutdown(&self, socket_id: SocketId, how: SocketShutdown) -> SocketResult<SocketRecord> {
-        let mut table = lock_or_recover(&self.inner.state);
-        let record = table
-            .sockets
-            .remove(&socket_id)
-            .ok_or_else(|| SocketTableError::not_found(socket_id))?;
-
-        if record.state != SocketState::Connected {
-            table.sockets.insert(socket_id, record);
-            return Err(SocketTableError::not_connected(format!(
-                "socket {socket_id} is not connected"
-            )));
-        }
-
-        let Some(mut connection) = record.connection_state.clone() else {
-            table.sockets.insert(socket_id, record);
-            return Err(SocketTableError::not_connected(format!(
-                "socket {socket_id} is not connected"
-            )));
-        };
-
-        if matches!(how, SocketShutdown::Read | SocketShutdown::Both) {
-            connection.clear_recv();
-            connection.read_shutdown = true;
-        }
-        if matches!(how, SocketShutdown::Write | SocketShutdown::Both) {
-            connection.write_shutdown = true;
-            if let Some(peer_socket_id) = connection.peer_socket_id {
-                if let Some(peer) = table.sockets.get_mut(&peer_socket_id) {
-                    if let Some(peer_connection) = peer.connection_state.as_mut() {
-                        peer_connection.peer_write_shutdown = true;
-                    }
-                }
-            }
-        }
-
-        let mut record = record;
-        record.connection_state = Some(connection);
-        let cloned = record.clone();
-        table.sockets.insert(socket_id, record);
-        Ok(cloned)
-    }
-
-    pub fn remove(&self, socket_id: SocketId) -> SocketResult<SocketRecord> {
-        let mut table = lock_or_recover(&self.inner.state);
-        remove_socket(&mut table, socket_id).ok_or_else(|| SocketTableError::not_found(socket_id))
-    }
-
-    pub fn remove_all_for_pid(&self, owner_pid: u32) -> Vec<SocketRecord> {
-        let mut table = lock_or_recover(&self.inner.state);
-        let Some(socket_ids) = table.by_owner.remove(&owner_pid) else {
-            return Vec::new();
-        };
-
-        socket_ids
-            .into_iter()
-            .filter_map(|socket_id| remove_socket(&mut table, socket_id))
-            .collect()
-    }
-
-    pub fn snapshot(&self) -> SocketTableSnapshot {
-        let table = lock_or_recover(&self.inner.state);
-        let mut snapshot = SocketTableSnapshot {
-            sockets: table.sockets.len(),
-            ..SocketTableSnapshot::default()
-        };
-        for record in table.sockets.values() {
-            if record.state.counts_as_listener() {
-                snapshot.listeners += 1;
-            }
-            if record.state.counts_as_connection() {
-                snapshot.connections += 1;
-            }
-            if let Some(connection) = &record.connection_state {
-                snapshot.buffered_bytes = snapshot
-                    .buffered_bytes
-                    .saturating_add(connection.buffered_len());
-            }
-            if let Some(datagram_state) = &record.datagram_state {
-                snapshot.datagram_queue_len = snapshot
-                    .datagram_queue_len
-                    .saturating_add(datagram_state.recv_queue.len());
-                snapshot.buffered_bytes = snapshot
-                    .buffered_bytes
-                    .saturating_add(datagram_queue_bytes(&datagram_state.recv_queue));
-            }
-        }
-        snapshot
-    }
-}
-
-fn datagram_queue_bytes(queue: &VecDeque<QueuedDatagram>) -> usize {
-    queue
-        .iter()
-        .map(|datagram| datagram.payload.len())
-        .sum::<usize>()
-}
-
-fn next_socket_id(table: &mut SocketTableState) -> SocketId {
-    if table.next_socket_id == 0 {
-        table.next_socket_id = 1;
-    }
-    let socket_id = table.next_socket_id;
-    table.next_socket_id = table.next_socket_id.saturating_add(1);
-    socket_id
-}
-
-fn validate_state_transition(current: SocketState, next: SocketState) -> SocketResult<()> {
-    if current == SocketState::Connected && next != SocketState::Connected {
-        return Err(SocketTableError::invalid_argument(format!(
-            "invalid socket state transition from {current:?} to {next:?}"
-        )));
-    }
-    Ok(())
-}
-
-fn validate_connect_pair(socket: &SocketRecord, peer: &SocketRecord) -> SocketResult<()> {
-    if !supports_connection_lifecycle(socket.spec) {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} does not support stream connections",
-            socket.id
-        )));
-    }
-    if !supports_connection_lifecycle(peer.spec) {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} does not support stream connections",
-            peer.id
-        )));
-    }
-    if !matches!(socket.state, SocketState::Created | SocketState::Bound) {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} cannot connect in state {:?}",
-            socket.id, socket.state
-        )));
-    }
-    if !matches!(peer.state, SocketState::Created | SocketState::Bound) {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} cannot connect in state {:?}",
-            peer.id, peer.state
-        )));
-    }
-    Ok(())
-}
-
-fn default_connection_state(spec: SocketSpec, state: SocketState) -> Option<ConnectionState> {
-    if state == SocketState::Connected && supports_connection_lifecycle(spec) {
-        Some(ConnectionState::default())
-    } else {
-        None
-    }
-}
-
-fn default_datagram_state(spec: SocketSpec) -> Option<DatagramState> {
-    if supports_inet_datagram_lifecycle(spec) {
-        Some(DatagramState::default())
-    } else {
-        None
-    }
-}
-
-fn supports_connection_lifecycle(spec: SocketSpec) -> bool {
-    matches!(spec.socket_type, SocketType::Stream)
-}
-
-fn supports_listener_lifecycle(spec: SocketSpec) -> bool {
-    matches!(spec.socket_type, SocketType::Stream)
-        && matches!(
-            spec.domain,
-            SocketDomain::Inet | SocketDomain::Inet6 | SocketDomain::Unix
-        )
-}
-
-fn supports_inet_bind(spec: SocketSpec) -> bool {
-    matches!(spec.domain, SocketDomain::Inet | SocketDomain::Inet6)
-        && matches!(spec.socket_type, SocketType::Stream | SocketType::Datagram)
-}
-
-fn supports_unix_stream_lifecycle(spec: SocketSpec) -> bool {
-    matches!(spec.socket_type, SocketType::Stream) && matches!(spec.domain, SocketDomain::Unix)
-}
-
-fn supports_inet_stream_lifecycle(spec: SocketSpec) -> bool {
-    matches!(spec.socket_type, SocketType::Stream)
-        && matches!(spec.domain, SocketDomain::Inet | SocketDomain::Inet6)
-}
-
-fn supports_inet_datagram_lifecycle(spec: SocketSpec) -> bool {
-    matches!(spec.socket_type, SocketType::Datagram)
-        && matches!(spec.domain, SocketDomain::Inet | SocketDomain::Inet6)
-}
-
-/// Pick a free ephemeral port for `bind(port=0)`, scanning the IANA dynamic
-/// range and skipping any already in conflict for `spec`/`host`.
-fn assign_ephemeral_inet_port(
-    table: &SocketTableState,
-    spec: SocketSpec,
-    host: &str,
-) -> SocketResult<u16> {
-    const EPHEMERAL_START: u16 = 49152;
-    const EPHEMERAL_END: u16 = 65535;
-    for port in EPHEMERAL_START..=EPHEMERAL_END {
-        let candidate = normalize_inet_address(InetSocketAddress::new(host, port));
-        if lookup_conflicting_bound_inet_socket_ids(table, spec, &candidate).is_empty() {
-            return Ok(port);
-        }
-    }
-    Err(SocketTableError::address_in_use(
-        "no free ephemeral port available",
-    ))
-}
-
-fn lookup_conflicting_bound_inet_socket_ids(
-    table: &SocketTableState,
-    spec: SocketSpec,
-    address: &InetSocketAddress,
-) -> Vec<SocketId> {
-    if supports_inet_stream_lifecycle(spec) {
-        table
-            .bound_inet_streams
-            .iter()
-            .find_map(|(bound_address, socket_id)| {
-                inet_stream_bind_addresses_overlap(bound_address, address).then_some(*socket_id)
-            })
-            .into_iter()
-            .collect()
-    } else if supports_inet_datagram_lifecycle(spec) {
-        table
-            .bound_inet_datagrams
-            .iter()
-            .filter(|(bound_address, _)| inet_stream_bind_addresses_overlap(bound_address, address))
-            .flat_map(|(_, socket_ids)| socket_ids.iter().copied())
-            .collect()
-    } else {
-        Vec::new()
-    }
-}
-
-fn lookup_bound_inet_socket(
-    table: &SocketTableState,
-    spec: SocketSpec,
-    address: &InetSocketAddress,
-) -> Option<SocketId> {
-    if supports_inet_stream_lifecycle(spec) {
-        lookup_bound_inet_socket_in_table(&table.bound_inet_streams, address)
-    } else if supports_inet_datagram_lifecycle(spec) {
-        lookup_bound_inet_datagram_socket_in_table(&table.bound_inet_datagrams, address)
-    } else {
-        None
-    }
-}
-
-fn inet_stream_bind_addresses_overlap(
-    existing: &InetSocketAddress,
-    requested: &InetSocketAddress,
-) -> bool {
-    if existing == requested {
-        return true;
-    }
-
-    wildcard_inet_address(existing).as_ref() == Some(requested)
-        || wildcard_inet_address(requested).as_ref() == Some(existing)
-}
-
-fn lookup_bound_inet_socket_in_table(
-    sockets: &BTreeMap<InetSocketAddress, SocketId>,
-    address: &InetSocketAddress,
-) -> Option<SocketId> {
-    sockets.get(address).copied().or_else(|| {
-        wildcard_inet_address(address).and_then(|wildcard| sockets.get(&wildcard).copied())
-    })
-}
-
-fn lookup_bound_inet_datagram_socket_in_table(
-    sockets: &BTreeMap<InetSocketAddress, BTreeSet<SocketId>>,
-    address: &InetSocketAddress,
-) -> Option<SocketId> {
-    sockets
-        .get(address)
-        .and_then(|socket_ids| socket_ids.first().copied())
-        .or_else(|| {
-            wildcard_inet_address(address).and_then(|wildcard| {
-                sockets
-                    .get(&wildcard)
-                    .and_then(|socket_ids| socket_ids.first().copied())
-            })
-        })
-}
-
-fn register_bound_inet_socket(
-    table: &mut SocketTableState,
-    spec: SocketSpec,
-    address: InetSocketAddress,
-    socket_id: SocketId,
-) {
-    if supports_inet_stream_lifecycle(spec) {
-        table.bound_inet_streams.insert(address, socket_id);
-    } else if supports_inet_datagram_lifecycle(spec) {
-        table
-            .bound_inet_datagrams
-            .entry(address)
-            .or_default()
-            .insert(socket_id);
-    }
-}
-
-fn validate_connect_to_listener(
-    client: &SocketRecord,
-    listener: &SocketRecord,
-) -> SocketResult<()> {
-    if !supports_connection_lifecycle(client.spec) {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} does not support stream connections",
-            client.id
-        )));
-    }
-    if !supports_listener_lifecycle(listener.spec) {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} is not a stream listener",
-            listener.id
-        )));
-    }
-    if !matches!(client.state, SocketState::Created | SocketState::Bound) {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} cannot connect in state {:?}",
-            client.id, client.state
-        )));
-    }
-    if listener.state != SocketState::Listening {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} is not listening",
-            listener.id
-        )));
-    }
-    Ok(())
-}
-
-fn has_bound_endpoint(record: &SocketRecord) -> bool {
-    record.local_address.is_some() || record.local_unix_path.is_some()
-}
-
-fn validate_bound_udp_sender(sender: &SocketRecord) -> SocketResult<()> {
-    if !supports_inet_datagram_lifecycle(sender.spec) {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} is not an INET datagram socket",
-            sender.id
-        )));
-    }
-    if sender.state != SocketState::Bound || sender.local_address.is_none() {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} must be bound before sending datagrams",
-            sender.id
-        )));
-    }
-    Ok(())
-}
-
-fn validate_bound_udp_receiver(receiver: &SocketRecord) -> SocketResult<()> {
-    if !supports_inet_datagram_lifecycle(receiver.spec) {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} is not an INET datagram socket",
-            receiver.id
-        )));
-    }
-    if receiver.state != SocketState::Bound || receiver.local_address.is_none() {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} must be bound to receive datagrams",
-            receiver.id
-        )));
-    }
-    Ok(())
-}
-
-fn datagram_state_mut(record: &mut SocketRecord) -> SocketResult<&mut DatagramState> {
-    if !supports_inet_datagram_lifecycle(record.spec) {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} is not an INET datagram socket",
-            record.id
-        )));
-    }
-    record.datagram_state.as_mut().ok_or_else(|| {
-        SocketTableError::invalid_argument(format!(
-            "socket {} does not support datagrams",
-            record.id
-        ))
-    })
-}
-
-fn validate_multicast_socket(record: &SocketRecord) -> SocketResult<()> {
-    validate_bound_udp_receiver(record)?;
-    if record.spec.domain != SocketDomain::Inet {
-        return Err(SocketTableError::invalid_argument(format!(
-            "socket {} multicast membership is only implemented for IPv4 datagrams",
-            record.id
-        )));
-    }
-    Ok(())
-}
-
-fn normalize_multicast_membership(
-    spec: SocketSpec,
-    membership: SocketMulticastMembership,
-) -> SocketResult<SocketMulticastMembership> {
-    let group_address = membership.group_address.trim().to_ascii_lowercase();
-    let interface_address = membership
-        .interface_address
-        .map(|value| value.trim().to_ascii_lowercase())
-        .filter(|value| !value.is_empty());
-
-    match spec.domain {
-        SocketDomain::Inet => {
-            let parsed = group_address.parse::<Ipv4Addr>().map_err(|_| {
-                SocketTableError::invalid_argument(format!(
-                    "invalid IPv4 multicast address {group_address}"
-                ))
-            })?;
-            if !parsed.is_multicast() {
-                return Err(SocketTableError::invalid_argument(format!(
-                    "address {group_address} is not an IPv4 multicast group"
-                )));
-            }
-        }
-        SocketDomain::Inet6 => {
-            let parsed = group_address.parse::<Ipv6Addr>().map_err(|_| {
-                SocketTableError::invalid_argument(format!(
-                    "invalid IPv6 multicast address {group_address}"
-                ))
-            })?;
-            if !parsed.is_multicast() {
-                return Err(SocketTableError::invalid_argument(format!(
-                    "address {group_address} is not an IPv6 multicast group"
-                )));
-            }
-        }
-        SocketDomain::Unix => {
-            return Err(SocketTableError::invalid_argument(
-                "unix sockets do not support multicast membership",
-            ));
-        }
-    }
-
-    Ok(SocketMulticastMembership::new(
-        group_address,
-        interface_address,
-    ))
-}
-
-fn has_incompatible_inet_bind_conflict(
-    table: &SocketTableState,
-    record: &SocketRecord,
-    conflicting_ids: &[SocketId],
-) -> bool {
-    conflicting_ids.iter().any(|conflicting_id| {
-        if *conflicting_id == record.id {
-            return false;
-        }
-
-        let Some(existing) = table.sockets.get(conflicting_id) else {
-            return false;
-        };
-
-        if supports_inet_datagram_lifecycle(record.spec) {
-            !inet_datagram_bind_shares_port(record, existing)
-        } else {
-            true
-        }
-    })
-}
-
-fn inet_datagram_bind_shares_port(requested: &SocketRecord, existing: &SocketRecord) -> bool {
-    (requested.reuse_port() && existing.reuse_port())
-        || (requested.reuse_address() && existing.reuse_address())
-}
-
-fn remove_socket(table: &mut SocketTableState, socket_id: SocketId) -> Option<SocketRecord> {
-    let record = table.sockets.remove(&socket_id)?;
-    unregister_bound_socket(table, &record);
-    unregister_multicast_memberships(table, &record);
-    if let Some(listener_state) = record.listener_state.as_ref() {
-        let pending_socket_ids = listener_state
-            .pending_accepts
-            .iter()
-            .filter_map(|pending| pending.accepted_socket_id)
-            .collect::<Vec<_>>();
-        for pending_socket_id in pending_socket_ids {
-            let _ = remove_socket(table, pending_socket_id);
-        }
-    }
-    if let Some(connection) = record.connection_state.as_ref() {
-        if let Some(peer_socket_id) = connection.peer_socket_id {
-            if let Some(peer) = table.sockets.get_mut(&peer_socket_id) {
-                if let Some(peer_connection) = peer.connection_state.as_mut() {
-                    if peer_connection.peer_socket_id == Some(socket_id) {
-                        peer_connection.peer_socket_id = None;
-                    }
-                    peer_connection.peer_write_shutdown = true;
-                }
-            }
-        }
-    }
-    if let Some(owner_sockets) = table.by_owner.get_mut(&record.owner_pid) {
-        owner_sockets.remove(&socket_id);
-        if owner_sockets.is_empty() {
-            table.by_owner.remove(&record.owner_pid);
-        }
-    }
-    Some(record)
-}
-
-fn unregister_bound_socket(table: &mut SocketTableState, record: &SocketRecord) {
-    let Some(address) = record.local_address.as_ref() else {
-        if supports_unix_stream_lifecycle(record.spec) {
-            if let Some(path) = record.local_unix_path.as_ref() {
-                if table.bound_unix_streams.get(path).copied() == Some(record.id) {
-                    table.bound_unix_streams.remove(path);
-                }
-            }
-        }
-        return;
-    };
-    if supports_inet_stream_lifecycle(record.spec)
-        && table.bound_inet_streams.get(address).copied() == Some(record.id)
-    {
-        table.bound_inet_streams.remove(address);
-    }
-    if supports_inet_datagram_lifecycle(record.spec) {
-        if let Some(socket_ids) = table.bound_inet_datagrams.get_mut(address) {
-            socket_ids.remove(&record.id);
-            if socket_ids.is_empty() {
-                table.bound_inet_datagrams.remove(address);
-            }
-        }
-    }
-}
-
-fn unregister_multicast_memberships(table: &mut SocketTableState, record: &SocketRecord) {
-    let Some(datagram_state) = record.datagram_state.as_ref() else {
-        return;
-    };
-
-    for membership in &datagram_state.multicast_memberships {
-        if let Some(socket_ids) = table.multicast_groups.get_mut(membership) {
-            socket_ids.remove(&record.id);
-            if socket_ids.is_empty() {
-                table.multicast_groups.remove(membership);
-            }
-        }
-    }
-}
-
-fn normalize_inet_address(address: InetSocketAddress) -> InetSocketAddress {
-    match address.host().to_ascii_lowercase().as_str() {
-        "localhost" => InetSocketAddress::new("127.0.0.1", address.port()),
-        _ => address,
-    }
-}
-
-fn wildcard_inet_address(address: &InetSocketAddress) -> Option<InetSocketAddress> {
-    match address.host() {
-        "127.0.0.1" => Some(InetSocketAddress::new("0.0.0.0", address.port())),
-        "::1" => Some(InetSocketAddress::new("::", address.port())),
-        _ => None,
-    }
-}
-
-fn normalize_unix_socket_path(path: impl AsRef<str>) -> SocketResult<String> {
-    let normalized = normalize_path(path.as_ref());
-    if normalized == "/" {
-        return Err(SocketTableError::invalid_argument(
-            "unix socket path must not be empty or root",
-        ));
-    }
-    Ok(normalized)
-}
-
-fn lock_or_recover<'a, T>(mutex: &'a Mutex<T>) -> MutexGuard<'a, T> {
-    match mutex.lock() {
-        Ok(guard) => guard,
-        Err(poisoned) => poisoned.into_inner(),
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    /// Reads the monotonic socket-id counter without advancing it, so a test can
-    /// observe whether a code path consumed an id.
-    fn peek_next_socket_id(table: &SocketTable) -> SocketId {
-        lock_or_recover(&table.inner.state).next_socket_id
-    }
-
-    #[test]
-    fn full_backlog_unix_connect_does_not_consume_socket_id() {
-        let table = SocketTable::new();
-        let path = "/tmp/leak-test/server.sock";
-
-        let listener = table.allocate(1, SocketSpec::unix_stream());
-        table
-            .bind_unix(listener.id, path)
-            .expect("bind unix listener");
-        table.listen(listener.id, 1).expect("listen with backlog 1");
-
-        // Fill the only backlog slot with one pending connection.
-        let first = table.allocate(2, SocketSpec::unix_stream());
-        table
-            .connect_to_bound_unix_stream(first.id, path)
-            .expect("first connect fills the backlog");
-
-        // A second connect must be rejected because the backlog is full, and it
-        // must NOT consume a socket id (the counter is monotonic and never reclaims).
-        let second = table.allocate(2, SocketSpec::unix_stream());
-        let before = peek_next_socket_id(&table);
-        let error = table
-            .connect_to_bound_unix_stream(second.id, path)
-            .expect_err("full-backlog connect must fail");
-        assert_eq!(error.code(), "EAGAIN");
-        let after = peek_next_socket_id(&table);
-
-        assert_eq!(
-            before, after,
-            "full-backlog unix connect leaked a socket id (counter advanced from {before} to {after})"
-        );
-    }
-
-    #[test]
-    fn full_backlog_inet_connect_does_not_consume_socket_id() {
-        let table = SocketTable::new();
-        let target = InetSocketAddress::new("127.0.0.1", 49222);
-
-        let listener = table.allocate(1, SocketSpec::tcp());
-        table
-            .bind_inet(listener.id, target.clone())
-            .expect("bind inet listener");
-        table.listen(listener.id, 1).expect("listen with backlog 1");
-
-        // Fill the only backlog slot with one pending connection.
-        let first = table.allocate(2, SocketSpec::tcp());
-        table
-            .connect_to_bound_inet_stream(first.id, target.clone())
-            .expect("first connect fills the backlog");
-
-        // A second connect must be rejected because the backlog is full, and it
-        // must NOT consume a socket id (the counter is monotonic and never reclaims).
-        let second = table.allocate(2, SocketSpec::tcp());
-        let before = peek_next_socket_id(&table);
-        let error = table
-            .connect_to_bound_inet_stream(second.id, target)
-            .expect_err("full-backlog connect must fail");
-        assert_eq!(error.code(), "EAGAIN");
-        let after = peek_next_socket_id(&table);
-
-        assert_eq!(
-            before, after,
-            "full-backlog inet connect leaked a socket id (counter advanced from {before} to {after})"
-        );
-    }
-}
diff --git a/crates/kernel/src/user.rs b/crates/kernel/src/user.rs
deleted file mode 100644
index bb5518764..000000000
--- a/crates/kernel/src/user.rs
+++ /dev/null
@@ -1,138 +0,0 @@
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ProcessIdentity {
-    pub uid: u32,
-    pub gid: u32,
-    pub euid: u32,
-    pub egid: u32,
-    pub supplementary_gids: Vec<u32>,
-}
-
-impl Default for ProcessIdentity {
-    fn default() -> Self {
-        Self {
-            uid: 1000,
-            gid: 1000,
-            euid: 1000,
-            egid: 1000,
-            supplementary_gids: vec![1000],
-        }
-    }
-}
-
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct UserConfig {
-    pub uid: Option<u32>,
-    pub gid: Option<u32>,
-    pub euid: Option<u32>,
-    pub egid: Option<u32>,
-    pub username: Option<String>,
-    pub homedir: Option<String>,
-    pub shell: Option<String>,
-    pub gecos: Option<String>,
-    pub group_name: Option<String>,
-    /// Supplementary groups are VM configuration, not guest-mutable state.
-    /// The primary gid is always injected and duplicate gids are dropped.
-    pub supplementary_gids: Vec<u32>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct UserManager {
-    pub uid: u32,
-    pub gid: u32,
-    pub euid: u32,
-    pub egid: u32,
-    pub username: String,
-    pub homedir: String,
-    pub shell: String,
-    pub gecos: String,
-    pub group_name: String,
-    pub supplementary_gids: Vec<u32>,
-}
-
-impl Default for UserManager {
-    fn default() -> Self {
-        Self::from_config(UserConfig::default())
-    }
-}
-
-impl UserManager {
-    pub fn new() -> Self {
-        Self::default()
-    }
-
-    pub fn from_config(config: UserConfig) -> Self {
-        let uid = config.uid.unwrap_or(1000);
-        let gid = config.gid.unwrap_or(1000);
-        let username = config.username.unwrap_or_else(|| String::from("agentos"));
-        let supplementary_gids = normalize_supplementary_gids(gid, config.supplementary_gids);
-
-        Self {
-            uid,
-            gid,
-            euid: config.euid.unwrap_or(uid),
-            egid: config.egid.unwrap_or(gid),
-            username: username.clone(),
-            homedir: config
-                .homedir
-                .unwrap_or_else(|| String::from("/home/agentos")),
-            shell: config.shell.unwrap_or_else(|| String::from("/bin/sh")),
-            gecos: config.gecos.unwrap_or_default(),
-            group_name: config.group_name.unwrap_or(username),
-            supplementary_gids,
-        }
-    }
-
-    pub fn identity(&self) -> ProcessIdentity {
-        ProcessIdentity {
-            uid: self.uid,
-            gid: self.gid,
-            euid: self.euid,
-            egid: self.egid,
-            supplementary_gids: self.supplementary_gids.clone(),
-        }
-    }
-
-    pub fn getgroups(&self) -> Vec<u32> {
-        self.supplementary_gids.clone()
-    }
-
-    pub fn getpwuid(&self, uid: u32) -> Option<String> {
-        if uid == self.uid {
-            return Some(format!(
-                "{}:x:{}:{}:{}:{}:{}",
-                self.username, self.uid, self.gid, self.gecos, self.homedir, self.shell
-            ));
-        }
-
-        None
-    }
-
-    pub fn getgrgid(&self, gid: u32) -> Option<String> {
-        if gid == self.gid {
-            return Some(format!(
-                "{}:x:{}:{}",
-                self.group_name, self.gid, self.username
-            ));
-        }
-
-        if self.supplementary_gids.contains(&gid) {
-            // Supplementary group names are synthetic because only numeric
-            // secondary group ids are configured for the VM.
-            let group_name = format!("group{gid}");
-            return Some(format!("{group_name}:x:{gid}:{}", self.username));
-        }
-
-        None
-    }
-}
-
-fn normalize_supplementary_gids(primary_gid: u32, supplementary_gids: Vec<u32>) -> Vec<u32> {
-    let mut normalized = Vec::with_capacity(supplementary_gids.len() + 1);
-    normalized.push(primary_gid);
-    for gid in supplementary_gids {
-        if !normalized.contains(&gid) {
-            normalized.push(gid);
-        }
-    }
-    normalized
-}
diff --git a/crates/kernel/tests/agentos_read_only.rs b/crates/kernel/tests/agentos_read_only.rs
deleted file mode 100644
index a9971de24..000000000
--- a/crates/kernel/tests/agentos_read_only.rs
+++ /dev/null
@@ -1,343 +0,0 @@
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::fd_table::{O_CREAT, O_RDONLY, O_TRUNC, O_WRONLY};
-use secure_exec_kernel::kernel::{
-    KernelError, KernelResult, KernelVm, KernelVmConfig, SpawnOptions,
-};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::root_fs::{
-    FilesystemEntry, RootFileSystem, RootFilesystemDescriptor, RootFilesystemMode,
-    RootFilesystemSnapshot,
-};
-use secure_exec_kernel::vfs::{
-    MemoryFileSystem, VirtualFileSystem, VirtualTimeSpec, VirtualUtimeSpec,
-};
-use std::fmt::Debug;
-
-const DRIVER: &str = "shell";
-const INSTRUCTIONS: &str = "/etc/agentos/instructions.md";
-
-fn assert_erofs<T: Debug>(result: KernelResult<T>) {
-    let error = result.expect_err("operation should fail on read-only agentos path");
-    assert_eq!(error.code(), "EROFS");
-}
-
-fn seeded_kernel() -> KernelVm<MemoryFileSystem> {
-    let mut filesystem = MemoryFileSystem::new();
-    filesystem
-        .write_file(INSTRUCTIONS, b"original instructions".to_vec())
-        .expect("seed instructions before kernel starts");
-    filesystem.mkdir("/tmp", true).expect("seed tmp directory");
-
-    let mut config = KernelVmConfig::new("vm-agentos-read-only");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(filesystem, config);
-    kernel
-        .register_driver(CommandDriver::new(DRIVER, ["sh"]))
-        .expect("register shell driver");
-    kernel
-}
-
-fn seeded_kernel_with_hardlink_alias() -> KernelVm<MemoryFileSystem> {
-    let mut filesystem = MemoryFileSystem::new();
-    filesystem
-        .write_file(INSTRUCTIONS, b"original instructions".to_vec())
-        .expect("seed instructions before kernel starts");
-    filesystem.mkdir("/tmp", true).expect("seed tmp directory");
-    filesystem
-        .link(INSTRUCTIONS, "/tmp/instructions-hardlink.md")
-        .expect("seed hardlink alias before kernel starts");
-
-    let mut config = KernelVmConfig::new("vm-agentos-hardlink-read-only");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(filesystem, config);
-    kernel
-        .register_driver(CommandDriver::new(DRIVER, ["sh"]))
-        .expect("register shell driver");
-    kernel
-}
-
-fn spawn_shell(kernel: &mut KernelVm<MemoryFileSystem>) -> u32 {
-    kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from(DRIVER)),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell")
-        .pid()
-}
-
-fn read_instructions(kernel: &mut KernelVm<MemoryFileSystem>) -> Result<String, KernelError> {
-    let bytes = kernel.read_file(INSTRUCTIONS)?;
-    Ok(String::from_utf8(bytes).expect("instructions should be utf8"))
-}
-
-#[test]
-fn agentos_instructions_are_readable_but_not_writable() {
-    let mut kernel = seeded_kernel();
-    let pid = spawn_shell(&mut kernel);
-
-    assert_eq!(
-        read_instructions(&mut kernel).expect("read instructions"),
-        "original instructions"
-    );
-
-    assert_erofs(kernel.write_file(INSTRUCTIONS, "tampered"));
-    assert_erofs(kernel.write_file_for_process(DRIVER, pid, INSTRUCTIONS, "tampered", Some(0o644)));
-    assert_erofs(kernel.remove_file(INSTRUCTIONS));
-    assert_erofs(kernel.rename(INSTRUCTIONS, "/tmp/instructions.md"));
-    assert_erofs(kernel.rename("/tmp/replacement.md", INSTRUCTIONS));
-    assert_erofs(kernel.chmod(INSTRUCTIONS, 0o777));
-    assert_erofs(kernel.link(INSTRUCTIONS, "/tmp/instructions-link.md"));
-
-    let fd = kernel
-        .fd_open(DRIVER, pid, INSTRUCTIONS, O_RDONLY, None)
-        .expect("open instructions read-only");
-    let contents = kernel
-        .fd_read(DRIVER, pid, fd, 64)
-        .expect("read instructions fd");
-    assert_eq!(
-        String::from_utf8(contents).expect("instructions should be utf8"),
-        "original instructions"
-    );
-
-    assert_erofs(kernel.fd_open(DRIVER, pid, INSTRUCTIONS, O_WRONLY, None));
-    assert_erofs(kernel.fd_open(DRIVER, pid, INSTRUCTIONS, O_TRUNC, None));
-    assert_erofs(kernel.fd_open(
-        DRIVER,
-        pid,
-        "/etc/agentos/generated.md",
-        O_CREAT | O_WRONLY,
-        Some(0o644),
-    ));
-    assert_erofs(kernel.fd_write(DRIVER, pid, fd, b"tampered"));
-    assert_erofs(kernel.fd_pwrite(DRIVER, pid, fd, b"tampered", 0));
-
-    assert_eq!(
-        read_instructions(&mut kernel).expect("read instructions after failed writes"),
-        "original instructions"
-    );
-}
-
-#[test]
-fn agentos_directory_rejects_new_children_and_metadata_updates() {
-    let mut kernel = seeded_kernel();
-    let pid = spawn_shell(&mut kernel);
-
-    assert_erofs(kernel.create_dir("/etc/agentos/nested"));
-    assert_erofs(kernel.create_dir_for_process(DRIVER, pid, "/etc/agentos/nested", Some(0o755)));
-    assert_erofs(kernel.mkdir("/etc/agentos/nested/deeper", true));
-    assert_erofs(kernel.mkdir_for_process(
-        DRIVER,
-        pid,
-        "/etc/agentos/nested/deeper",
-        true,
-        Some(0o755),
-    ));
-    assert_erofs(kernel.symlink("/tmp/source", "/etc/agentos/source-link"));
-    assert_erofs(kernel.chown("/etc/agentos", 1000, 1000));
-    assert_erofs(kernel.utimes("/etc/agentos", 1, 1));
-    assert_erofs(kernel.truncate(INSTRUCTIONS, 0));
-
-    assert_eq!(
-        read_instructions(&mut kernel).expect("read instructions after failed metadata updates"),
-        "original instructions"
-    );
-}
-
-#[test]
-fn agentos_protection_follows_symlink_aliases() {
-    let mut kernel = seeded_kernel();
-    let pid = spawn_shell(&mut kernel);
-
-    kernel
-        .symlink(INSTRUCTIONS, "/tmp/instructions-alias")
-        .expect("create writable-path symlink to instructions");
-    assert_erofs(kernel.write_file("/tmp/instructions-alias", "tampered"));
-    assert_erofs(kernel.write_file_for_process(
-        DRIVER,
-        pid,
-        "/tmp/instructions-alias",
-        "tampered",
-        Some(0o644),
-    ));
-    assert_erofs(kernel.truncate("/tmp/instructions-alias", 0));
-    assert_erofs(kernel.chmod("/tmp/instructions-alias", 0o777));
-    assert_erofs(kernel.chown("/tmp/instructions-alias", 1000, 1000));
-    assert_erofs(kernel.utimes("/tmp/instructions-alias", 1, 1));
-    assert_erofs(kernel.link("/tmp/instructions-alias", "/tmp/instructions-hardlink"));
-
-    let fd = kernel
-        .fd_open(DRIVER, pid, "/tmp/instructions-alias", O_RDONLY, None)
-        .expect("open instructions alias read-only");
-    assert_erofs(kernel.fd_write(DRIVER, pid, fd, b"tampered"));
-    assert_erofs(kernel.fd_pwrite(DRIVER, pid, fd, b"tampered", 0));
-    assert_erofs(kernel.fd_open(DRIVER, pid, "/tmp/instructions-alias", O_WRONLY, None));
-    assert_erofs(kernel.futimes(
-        DRIVER,
-        pid,
-        fd,
-        VirtualUtimeSpec::Set(VirtualTimeSpec::from_millis(1)),
-        VirtualUtimeSpec::Set(VirtualTimeSpec::from_millis(1)),
-    ));
-
-    assert_eq!(
-        read_instructions(&mut kernel).expect("read instructions after failed alias writes"),
-        "original instructions"
-    );
-
-    kernel
-        .remove_file("/tmp/instructions-alias")
-        .expect("outside symlink alias should remain removable");
-    assert_eq!(
-        read_instructions(&mut kernel).expect("read instructions after removing alias"),
-        "original instructions"
-    );
-}
-
-#[test]
-fn agentos_protection_rejects_preexisting_hardlink_aliases() {
-    let mut kernel = seeded_kernel_with_hardlink_alias();
-    let pid = spawn_shell(&mut kernel);
-    let alias = "/tmp/instructions-hardlink.md";
-    let symlink_alias = "/tmp/instructions-symlink-to-hardlink.md";
-
-    assert_eq!(
-        kernel
-            .read_file(alias)
-            .expect("read hardlink alias to instructions"),
-        b"original instructions".to_vec()
-    );
-    assert_erofs(kernel.write_file(alias, "tampered"));
-    assert_erofs(kernel.write_file_for_process(DRIVER, pid, alias, "tampered", Some(0o644)));
-    assert_erofs(kernel.truncate(alias, 0));
-    assert_erofs(kernel.chmod(alias, 0o777));
-    assert_erofs(kernel.chown(alias, 1000, 1000));
-    assert_erofs(kernel.utimes(alias, 1, 1));
-    assert_erofs(kernel.remove_file(alias));
-    assert_erofs(kernel.rename(alias, "/tmp/moved-hardlink.md"));
-
-    let fd = kernel
-        .fd_open(DRIVER, pid, alias, O_RDONLY, None)
-        .expect("open hardlink alias read-only");
-    assert_erofs(kernel.fd_write(DRIVER, pid, fd, b"tampered"));
-    assert_erofs(kernel.fd_pwrite(DRIVER, pid, fd, b"tampered", 0));
-    assert_erofs(kernel.fd_open(DRIVER, pid, alias, O_WRONLY, None));
-    assert_erofs(kernel.futimes(
-        DRIVER,
-        pid,
-        fd,
-        VirtualUtimeSpec::Set(VirtualTimeSpec::from_millis(1)),
-        VirtualUtimeSpec::Set(VirtualTimeSpec::from_millis(1)),
-    ));
-
-    kernel
-        .symlink(alias, symlink_alias)
-        .expect("create symlink to hardlink alias");
-    assert_erofs(kernel.write_file(symlink_alias, "tampered"));
-    assert_erofs(kernel.truncate(symlink_alias, 0));
-    assert_erofs(kernel.fd_open(DRIVER, pid, symlink_alias, O_WRONLY, None));
-
-    assert_eq!(
-        read_instructions(&mut kernel).expect("read instructions after hardlink writes"),
-        "original instructions"
-    );
-    assert_eq!(
-        kernel
-            .read_file(alias)
-            .expect("hardlink alias should still exist"),
-        b"original instructions".to_vec()
-    );
-}
-
-#[test]
-fn agentos_protection_ignores_unrelated_files_in_other_overlay_layers() {
-    // Regression coverage for layered roots: the protected instructions file
-    // lives in a lower snapshot layer while new files land in the writable
-    // upper. Inode numbers overlap across layer filesystems, so the hardlink
-    // alias check must compare per-instance device ids instead of treating
-    // every equal inode number as an alias of the protected file.
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/etc/agentos"),
-                FilesystemEntry::file(
-                    "/etc/agentos/instructions.md",
-                    b"original instructions".to_vec(),
-                ),
-                FilesystemEntry::directory("/bin"),
-                FilesystemEntry::directory("/tmp"),
-            ],
-        }],
-        bootstrap_entries: vec![],
-    })
-    .expect("create layered root filesystem");
-
-    let mut config = KernelVmConfig::new("vm-agentos-layered-alias");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(root, config);
-
-    // Write enough files for the upper layer's inode counter to sweep past
-    // the lower layer's inode numbers, then verify metadata updates on every
-    // unrelated file still succeed.
-    for index in 0..8 {
-        let path = format!("/tmp/unrelated-{index}.txt");
-        kernel
-            .write_file(&path, "unrelated")
-            .expect("write unrelated file in upper layer");
-        kernel
-            .chmod(&path, 0o755)
-            .expect("chmod unrelated upper-layer file must not trip agentos protection");
-    }
-
-    assert_erofs(kernel.chmod("/etc/agentos/instructions.md", 0o777));
-    assert_erofs(kernel.write_file("/etc/agentos/instructions.md", "tampered"));
-    assert_eq!(
-        kernel
-            .read_file("/etc/agentos/instructions.md")
-            .expect("read instructions"),
-        b"original instructions".to_vec()
-    );
-}
-
-#[test]
-fn agentos_protection_rejects_creates_through_symlinked_parent() {
-    let mut kernel = seeded_kernel();
-    let pid = spawn_shell(&mut kernel);
-
-    kernel
-        .symlink("/etc/agentos", "/tmp/agentos-alias")
-        .expect("create writable-path symlink to agentos directory");
-
-    assert_erofs(kernel.write_file("/tmp/agentos-alias/generated.md", "tampered"));
-    assert_erofs(kernel.create_dir("/tmp/agentos-alias/nested"));
-    assert_erofs(kernel.mkdir("/tmp/agentos-alias/nested/deeper", true));
-    assert_erofs(kernel.remove_file("/tmp/agentos-alias/instructions.md"));
-    assert_erofs(kernel.rename(
-        "/tmp/agentos-alias/instructions.md",
-        "/tmp/moved-instructions.md",
-    ));
-    kernel
-        .write_file("/tmp/replacement.md", "replacement")
-        .expect("write replacement outside protected tree");
-    assert_erofs(kernel.rename("/tmp/replacement.md", "/tmp/agentos-alias/replacement.md"));
-    assert_erofs(kernel.symlink("/tmp/source", "/tmp/agentos-alias/source-link"));
-    assert_erofs(kernel.fd_open(
-        DRIVER,
-        pid,
-        "/tmp/agentos-alias/generated.md",
-        O_CREAT | O_WRONLY,
-        Some(0o644),
-    ));
-
-    assert_eq!(
-        read_instructions(&mut kernel)
-            .expect("read instructions after failed symlinked-parent creates"),
-        "original instructions"
-    );
-}
diff --git a/crates/kernel/tests/api_surface.rs b/crates/kernel/tests/api_surface.rs
deleted file mode 100644
index b35a856ae..000000000
--- a/crates/kernel/tests/api_surface.rs
+++ /dev/null
@@ -1,1293 +0,0 @@
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::fd_table::{
-    FD_CLOEXEC, F_DUPFD, F_GETFD, F_GETFL, F_SETFD, F_SETFL, LOCK_EX, LOCK_NB, LOCK_SH, LOCK_UN,
-    O_APPEND, O_CREAT, O_EXCL, O_NONBLOCK, O_RDWR,
-};
-use secure_exec_kernel::kernel::{
-    ExecOptions, KernelVm, KernelVmConfig, OpenShellOptions, SpawnOptions, WaitPidFlags,
-    WaitPidResult, SEEK_SET,
-};
-use secure_exec_kernel::mount_table::{MountOptions, MountTable};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::pipe_manager::MAX_PIPE_BUFFER_BYTES;
-use secure_exec_kernel::process_table::{ProcessWaitEvent, SIGWINCH};
-use secure_exec_kernel::vfs::{
-    MemoryFileSystem, VfsResult, VirtualDirEntry, VirtualFileSystem, VirtualStat, MAX_PATH_LENGTH,
-};
-use std::cell::{Cell, RefCell};
-
-fn assert_kernel_error_code<T: std::fmt::Debug>(
-    result: secure_exec_kernel::kernel::KernelResult<T>,
-    expected: &str,
-) {
-    let error = result.expect_err("operation should fail");
-    assert_eq!(error.code(), expected);
-}
-
-fn spawn_shell(
-    kernel: &mut KernelVm<MemoryFileSystem>,
-) -> secure_exec_kernel::kernel::KernelProcessHandle {
-    kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell")
-}
-
-fn spawn_shell_in<F: VirtualFileSystem + 'static>(
-    kernel: &mut KernelVm<F>,
-) -> secure_exec_kernel::kernel::KernelProcessHandle {
-    kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell")
-}
-
-fn assert_not_trivial_pattern(bytes: &[u8]) {
-    assert!(bytes.iter().any(|byte| *byte != 0));
-    assert!(
-        bytes.windows(2).any(|window| window[0] != window[1]),
-        "random data should not collapse to a repeated byte"
-    );
-}
-
-struct AtomicityProbeFileSystem {
-    inner: RefCell<MemoryFileSystem>,
-    exclusive_race_pending: Cell<bool>,
-    append_race_pending: Cell<bool>,
-    target_path: &'static str,
-}
-
-impl AtomicityProbeFileSystem {
-    fn new(target_path: &'static str) -> Self {
-        let mut inner = MemoryFileSystem::new();
-        inner
-            .write_file(target_path, Vec::new())
-            .expect("seed append target");
-        Self {
-            inner: RefCell::new(inner),
-            exclusive_race_pending: Cell::new(false),
-            append_race_pending: Cell::new(false),
-            target_path,
-        }
-    }
-
-    fn trigger_exclusive_race(&self) {
-        self.inner
-            .borrow_mut()
-            .remove_file(self.target_path)
-            .expect("clear target before exclusive race");
-        self.exclusive_race_pending.set(true);
-    }
-
-    fn trigger_append_race(&self) {
-        self.inner
-            .borrow_mut()
-            .write_file(self.target_path, Vec::new())
-            .expect("reset target before append race");
-        self.append_race_pending.set(true);
-    }
-}
-
-impl VirtualFileSystem for AtomicityProbeFileSystem {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        self.inner.borrow_mut().read_file(path)
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        self.inner.borrow_mut().read_dir(path)
-    }
-
-    fn read_dir_limited(&mut self, path: &str, max_entries: usize) -> VfsResult<Vec<String>> {
-        self.inner.borrow_mut().read_dir_limited(path, max_entries)
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        self.inner.borrow_mut().read_dir_with_types(path)
-    }
-
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        let content = content.into();
-        if path == self.target_path {
-            if self.exclusive_race_pending.replace(false) {
-                self.inner
-                    .borrow_mut()
-                    .write_file(path, b"winner".to_vec())
-                    .expect("inject competing exclusive creator");
-            }
-            if self.append_race_pending.replace(false) {
-                self.inner
-                    .borrow_mut()
-                    .write_file(path, b"RACE".to_vec())
-                    .expect("inject competing append writer");
-            }
-        }
-        self.inner.borrow_mut().write_file(path, content)
-    }
-
-    fn create_file_exclusive(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        if path == self.target_path && self.exclusive_race_pending.replace(false) {
-            self.inner
-                .borrow_mut()
-                .write_file(path, b"winner".to_vec())
-                .expect("inject competing exclusive creator");
-            return Err(secure_exec_kernel::vfs::VfsError::new(
-                "EEXIST",
-                format!("file already exists, open '{path}'"),
-            ));
-        }
-        self.inner.borrow_mut().create_file_exclusive(path, content)
-    }
-
-    fn append_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<u64> {
-        if path == self.target_path && self.append_race_pending.replace(false) {
-            self.inner
-                .borrow_mut()
-                .append_file(path, b"RACE".to_vec())
-                .expect("inject competing append writer");
-        }
-        self.inner.borrow_mut().append_file(path, content)
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.inner.borrow_mut().create_dir(path)
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        self.inner.borrow_mut().mkdir(path, recursive)
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        if path == self.target_path && self.exclusive_race_pending.get() {
-            return false;
-        }
-        self.inner.borrow().exists(path)
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        self.inner.borrow_mut().stat(path)
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        self.inner.borrow_mut().remove_file(path)
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.inner.borrow_mut().remove_dir(path)
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        self.inner.borrow_mut().rename(old_path, new_path)
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        self.inner.borrow().realpath(path)
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        self.inner.borrow_mut().symlink(target, link_path)
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        self.inner.borrow().read_link(path)
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        self.inner.borrow().lstat(path)
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        self.inner.borrow_mut().link(old_path, new_path)
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        self.inner.borrow_mut().chmod(path, mode)
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        self.inner.borrow_mut().chown(path, uid, gid)
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        self.inner.borrow_mut().utimes(path, atime_ms, mtime_ms)
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        self.inner.borrow_mut().truncate(path, length)
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        self.inner.borrow_mut().pread(path, offset, length)
-    }
-}
-
-#[test]
-fn kernel_fd_surface_supports_open_seek_positional_io_dup_and_dev_fd_views() {
-    let mut config = KernelVmConfig::new("vm-api-fd");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-        .filesystem_mut()
-        .write_file("/tmp/data.txt", b"hello".to_vec())
-        .expect("seed file");
-
-    let process = spawn_shell(&mut kernel);
-    let fd = kernel
-        .fd_open("shell", process.pid(), "/tmp/data.txt", O_RDWR, None)
-        .expect("open existing file");
-    let created_fd = kernel
-        .fd_open(
-            "shell",
-            process.pid(),
-            "/tmp/created.txt",
-            O_CREAT | O_RDWR,
-            None,
-        )
-        .expect("open created file");
-    kernel
-        .fd_write("shell", process.pid(), created_fd, b"created")
-        .expect("write created file");
-    assert_eq!(
-        kernel
-            .filesystem_mut()
-            .read_file("/tmp/created.txt")
-            .expect("read created file"),
-        b"created".to_vec()
-    );
-
-    let entries = kernel
-        .dev_fd_read_dir("shell", process.pid())
-        .expect("list /dev/fd");
-    assert!(entries.contains(&String::from("0")));
-    assert!(entries.contains(&String::from("1")));
-    assert!(entries.contains(&fd.to_string()));
-    assert!(entries.contains(&created_fd.to_string()));
-
-    let pread = kernel
-        .fd_pread("shell", process.pid(), fd, 2, 1)
-        .expect("pread from offset");
-    assert_eq!(pread, b"el".to_vec());
-    assert_eq!(
-        kernel
-            .fd_seek("shell", process.pid(), fd, 4, SEEK_SET)
-            .expect("seek to byte 4"),
-        4
-    );
-
-    let dup_fd = kernel
-        .fd_dup("shell", process.pid(), fd)
-        .expect("duplicate fd");
-    let dup_read = kernel
-        .fd_read("shell", process.pid(), dup_fd, 1)
-        .expect("read through dup");
-    assert_eq!(dup_read, b"o".to_vec());
-
-    kernel
-        .fd_dup2("shell", process.pid(), fd, 20)
-        .expect("dup2 onto target fd");
-    kernel
-        .fd_seek("shell", process.pid(), 20, 0, SEEK_SET)
-        .expect("seek dup2 target to start");
-    let full = kernel
-        .fd_read("shell", process.pid(), fd, 5)
-        .expect("read full file");
-    assert_eq!(full, b"hello".to_vec());
-
-    kernel
-        .fd_pwrite("shell", process.pid(), fd, b"X", 1)
-        .expect("pwrite at offset");
-    assert_eq!(
-        kernel
-            .filesystem_mut()
-            .read_file("/tmp/data.txt")
-            .expect("read updated file"),
-        b"hXllo".to_vec()
-    );
-
-    let file_stat = kernel
-        .dev_fd_stat("shell", process.pid(), fd)
-        .expect("stat regular file fd");
-    assert_eq!(file_stat.size, 5);
-    assert_eq!(file_stat.blocks, 1);
-    // Device ids are unique per filesystem instance; assert the fd stat
-    // reports the same device as a direct path stat on the same filesystem.
-    assert_eq!(
-        file_stat.dev,
-        kernel
-            .filesystem_mut()
-            .stat("/tmp/data.txt")
-            .expect("stat updated file")
-            .dev
-    );
-    assert_eq!(file_stat.rdev, 0);
-    assert!(!file_stat.is_directory);
-
-    let (read_fd, write_fd) = kernel.open_pipe("shell", process.pid()).expect("open pipe");
-    kernel
-        .fd_write("shell", process.pid(), write_fd, b"pipe-data")
-        .expect("write pipe");
-    let dev_dup = kernel
-        .fd_open(
-            "shell",
-            process.pid(),
-            &format!("/dev/fd/{read_fd}"),
-            0,
-            None,
-        )
-        .expect("duplicate through /dev/fd");
-    let pipe_bytes = kernel
-        .fd_read("shell", process.pid(), dev_dup, 32)
-        .expect("read duplicated pipe fd");
-    assert_eq!(pipe_bytes, b"pipe-data".to_vec());
-
-    let pipe_stat = kernel
-        .dev_fd_stat("shell", process.pid(), read_fd)
-        .expect("stat pipe fd");
-    assert_eq!(pipe_stat.mode, 0o666);
-    assert_eq!(pipe_stat.size, 0);
-    assert_eq!(pipe_stat.blocks, 0);
-    assert_eq!(pipe_stat.dev, 2);
-    assert!(!pipe_stat.is_directory);
-
-    process.finish(0);
-    kernel.waitpid(process.pid()).expect("wait for shell");
-}
-
-#[test]
-fn kernel_process_umask_applies_to_created_files_and_directories() {
-    let mut config = KernelVmConfig::new("vm-api-umask");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = spawn_shell(&mut kernel);
-    assert_eq!(
-        kernel
-            .umask("shell", process.pid(), None)
-            .expect("read default umask"),
-        0o022
-    );
-    assert_eq!(
-        kernel
-            .umask("shell", process.pid(), Some(0o027))
-            .expect("set umask"),
-        0o022
-    );
-
-    let created_fd = kernel
-        .fd_open(
-            "shell",
-            process.pid(),
-            "/tmp/umask-file.txt",
-            O_CREAT | O_RDWR,
-            Some(0o666),
-        )
-        .expect("create file with umask");
-    kernel
-        .fd_close("shell", process.pid(), created_fd)
-        .expect("close created fd");
-    let file_stat = kernel.stat("/tmp/umask-file.txt").expect("stat umask file");
-    assert_eq!(file_stat.mode & 0o777, 0o640);
-
-    kernel
-        .mkdir_for_process(
-            "shell",
-            process.pid(),
-            "/tmp/private-dir",
-            false,
-            Some(0o777),
-        )
-        .expect("create directory with umask");
-    let dir_stat = kernel.stat("/tmp/private-dir").expect("stat private dir");
-    assert_eq!(dir_stat.mode & 0o777, 0o750);
-
-    process.finish(0);
-    kernel.waitpid(process.pid()).expect("wait for shell");
-}
-
-#[test]
-fn read_dir_with_types_for_process_reports_entries_and_enforces_driver_ownership() {
-    let mut config = KernelVmConfig::new("vm-api-readdir-types");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-        .register_driver(CommandDriver::new("other", ["other"]))
-        .expect("register other driver");
-    kernel
-        .filesystem_mut()
-        .write_file("/tmp/typed-file.txt", b"hello".to_vec())
-        .expect("seed typed file");
-    kernel
-        .filesystem_mut()
-        .mkdir("/tmp/typed-dir", true)
-        .expect("seed typed dir");
-
-    let process = spawn_shell(&mut kernel);
-    let entries = kernel
-        .read_dir_with_types_for_process("shell", process.pid(), "/tmp")
-        .expect("read typed entries");
-
-    let file_entry = entries
-        .iter()
-        .find(|entry| entry.name == "typed-file.txt")
-        .expect("typed file entry");
-    assert!(!file_entry.is_directory);
-    assert!(!file_entry.is_symbolic_link);
-
-    let dir_entry = entries
-        .iter()
-        .find(|entry| entry.name == "typed-dir")
-        .expect("typed dir entry");
-    assert!(dir_entry.is_directory);
-    assert!(!dir_entry.is_symbolic_link);
-
-    assert_kernel_error_code(
-        kernel.read_dir_with_types_for_process("other", process.pid(), "/tmp"),
-        "EPERM",
-    );
-
-    process.finish(0);
-    kernel.waitpid(process.pid()).expect("wait for shell");
-}
-
-#[test]
-fn kernel_fd_surface_reads_exact_byte_counts_from_device_nodes() {
-    let mut config = KernelVmConfig::new("vm-api-fd-devices");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = spawn_shell(&mut kernel);
-
-    let zero_fd = kernel
-        .fd_open("shell", process.pid(), "/dev/zero", O_RDWR, None)
-        .expect("open /dev/zero");
-    let zeroes = kernel
-        .fd_read("shell", process.pid(), zero_fd, 5)
-        .expect("read 5 bytes from /dev/zero");
-    assert_eq!(zeroes.len(), 5);
-    assert!(zeroes.iter().all(|byte| *byte == 0));
-
-    let random_fd = kernel
-        .fd_open("shell", process.pid(), "/dev/urandom", O_RDWR, None)
-        .expect("open /dev/urandom");
-    let random = kernel
-        .fd_read("shell", process.pid(), random_fd, 1024 * 1024)
-        .expect("read 1MiB from /dev/urandom");
-    assert_eq!(random.len(), 1024 * 1024);
-    assert_not_trivial_pattern(&random[..1024]);
-
-    process.finish(0);
-    kernel.waitpid(process.pid()).expect("wait for shell");
-}
-
-#[test]
-fn kernel_fd_surface_supports_nonblocking_pipe_duplicates_via_dev_fd() {
-    let mut config = KernelVmConfig::new("vm-api-fd-nonblock");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = spawn_shell(&mut kernel);
-    let (read_fd, write_fd) = kernel.open_pipe("shell", process.pid()).expect("open pipe");
-    let nonblocking_read_fd = kernel
-        .fd_open(
-            "shell",
-            process.pid(),
-            &format!("/dev/fd/{read_fd}"),
-            O_NONBLOCK,
-            None,
-        )
-        .expect("duplicate read end with O_NONBLOCK");
-    let nonblocking_write_fd = kernel
-        .fd_open(
-            "shell",
-            process.pid(),
-            &format!("/dev/fd/{write_fd}"),
-            O_NONBLOCK,
-            None,
-        )
-        .expect("duplicate write end with O_NONBLOCK");
-
-    assert_eq!(
-        kernel
-            .fd_stat("shell", process.pid(), read_fd)
-            .expect("stat blocking read fd")
-            .flags
-            & O_NONBLOCK,
-        0
-    );
-    assert_ne!(
-        kernel
-            .fd_stat("shell", process.pid(), nonblocking_read_fd)
-            .expect("stat nonblocking read fd")
-            .flags
-            & O_NONBLOCK,
-        0
-    );
-    assert_ne!(
-        kernel
-            .fd_stat("shell", process.pid(), nonblocking_write_fd)
-            .expect("stat nonblocking write fd")
-            .flags
-            & O_NONBLOCK,
-        0
-    );
-
-    assert_kernel_error_code(
-        kernel.fd_read("shell", process.pid(), nonblocking_read_fd, 1),
-        "EAGAIN",
-    );
-
-    kernel
-        .fd_write(
-            "shell",
-            process.pid(),
-            write_fd,
-            &vec![7; MAX_PIPE_BUFFER_BYTES],
-        )
-        .expect("fill pipe buffer");
-    assert_kernel_error_code(
-        kernel.fd_write("shell", process.pid(), nonblocking_write_fd, &[8]),
-        "EAGAIN",
-    );
-
-    process.finish(0);
-    kernel.waitpid(process.pid()).expect("wait for shell");
-}
-
-#[test]
-fn kernel_fd_surface_supports_fcntl_status_and_descriptor_flags() {
-    let mut config = KernelVmConfig::new("vm-api-fcntl");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = spawn_shell(&mut kernel);
-    let (read_fd, _write_fd) = kernel.open_pipe("shell", process.pid()).expect("open pipe");
-
-    assert_eq!(
-        kernel
-            .fd_fcntl("shell", process.pid(), read_fd, F_GETFL, 0)
-            .expect("initial F_GETFL"),
-        0
-    );
-    kernel
-        .fd_fcntl("shell", process.pid(), read_fd, F_SETFL, O_NONBLOCK)
-        .expect("set O_NONBLOCK");
-    assert_eq!(
-        kernel
-            .fd_fcntl("shell", process.pid(), read_fd, F_GETFL, 0)
-            .expect("updated F_GETFL")
-            & O_NONBLOCK,
-        O_NONBLOCK
-    );
-    assert_kernel_error_code(kernel.fd_read("shell", process.pid(), read_fd, 1), "EAGAIN");
-
-    kernel
-        .fd_fcntl("shell", process.pid(), read_fd, F_SETFD, FD_CLOEXEC)
-        .expect("set cloexec");
-    assert_eq!(
-        kernel
-            .fd_fcntl("shell", process.pid(), read_fd, F_GETFD, 0)
-            .expect("read cloexec"),
-        FD_CLOEXEC
-    );
-
-    let dup_fd = kernel
-        .fd_fcntl("shell", process.pid(), read_fd, F_DUPFD, 10)
-        .expect("duplicate with minimum fd");
-    assert_eq!(dup_fd, 10);
-    assert_eq!(
-        kernel
-            .fd_fcntl("shell", process.pid(), dup_fd, F_GETFD, 0)
-            .expect("dup cloexec should be clear"),
-        0
-    );
-    assert_eq!(
-        kernel
-            .fd_fcntl("shell", process.pid(), dup_fd, F_GETFL, 0)
-            .expect("dup status flags")
-            & O_NONBLOCK,
-        O_NONBLOCK
-    );
-
-    process.finish(0);
-    kernel.waitpid(process.pid()).expect("wait for shell");
-}
-
-#[test]
-fn kernel_fd_surface_uses_atomic_exclusive_create() {
-    let target = "/tmp/race.txt";
-    let filesystem = AtomicityProbeFileSystem::new(target);
-    filesystem.trigger_exclusive_race();
-
-    let mut config = KernelVmConfig::new("vm-api-exclusive-create");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(filesystem, config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = spawn_shell_in(&mut kernel);
-    assert_kernel_error_code(
-        kernel.fd_open(
-            "shell",
-            process.pid(),
-            target,
-            O_CREAT | O_EXCL | O_RDWR,
-            None,
-        ),
-        "EEXIST",
-    );
-    assert_eq!(
-        kernel
-            .filesystem_mut()
-            .read_file(target)
-            .expect("winner should remain visible"),
-        b"winner".to_vec()
-    );
-
-    process.finish(0);
-    kernel.waitpid(process.pid()).expect("wait shell");
-}
-
-#[test]
-fn kernel_fd_surface_uses_atomic_append_writes() {
-    let target = "/tmp/race.txt";
-    let filesystem = AtomicityProbeFileSystem::new(target);
-    filesystem.trigger_append_race();
-
-    let mut config = KernelVmConfig::new("vm-api-append-write");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(filesystem, config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = spawn_shell_in(&mut kernel);
-    let fd = kernel
-        .fd_open("shell", process.pid(), target, O_APPEND | O_RDWR, None)
-        .expect("open append target");
-    assert_eq!(
-        kernel
-            .fd_write("shell", process.pid(), fd, b"mine")
-            .expect("append write"),
-        4
-    );
-    assert_eq!(
-        kernel
-            .filesystem_mut()
-            .read_file(target)
-            .expect("read appended file"),
-        b"RACEmine".to_vec()
-    );
-
-    process.finish(0);
-    kernel.waitpid(process.pid()).expect("wait shell");
-}
-
-#[test]
-fn kernel_fd_surface_supports_advisory_locks_and_releases_on_last_close() {
-    let mut config = KernelVmConfig::new("vm-api-flock-close");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-        .filesystem_mut()
-        .write_file("/tmp/lock.txt", b"lock".to_vec())
-        .expect("seed file");
-
-    let owner = spawn_shell(&mut kernel);
-    let contender = spawn_shell(&mut kernel);
-    let owner_fd = kernel
-        .fd_open("shell", owner.pid(), "/tmp/lock.txt", O_RDWR, None)
-        .expect("owner opens lock file");
-    let owner_dup = kernel
-        .fd_dup("shell", owner.pid(), owner_fd)
-        .expect("duplicate owner fd");
-    let contender_fd = kernel
-        .fd_open("shell", contender.pid(), "/tmp/lock.txt", O_RDWR, None)
-        .expect("contender opens lock file");
-
-    kernel
-        .fd_flock("shell", owner.pid(), owner_fd, LOCK_EX)
-        .expect("owner acquires exclusive lock");
-    kernel
-        .fd_flock("shell", owner.pid(), owner_dup, LOCK_EX | LOCK_NB)
-        .expect("duplicate shares exclusive lock");
-    assert_kernel_error_code(
-        kernel.fd_flock("shell", contender.pid(), contender_fd, LOCK_SH | LOCK_NB),
-        "EWOULDBLOCK",
-    );
-
-    kernel
-        .fd_close("shell", owner.pid(), owner_fd)
-        .expect("close original owner fd");
-    assert_kernel_error_code(
-        kernel.fd_flock("shell", contender.pid(), contender_fd, LOCK_SH | LOCK_NB),
-        "EWOULDBLOCK",
-    );
-
-    kernel
-        .fd_close("shell", owner.pid(), owner_dup)
-        .expect("close duplicate owner fd");
-    kernel
-        .fd_flock("shell", contender.pid(), contender_fd, LOCK_SH | LOCK_NB)
-        .expect("lock released on last close");
-    kernel
-        .fd_flock("shell", contender.pid(), contender_fd, LOCK_UN)
-        .expect("unlock contender");
-
-    owner.finish(0);
-    contender.finish(0);
-    kernel.waitpid(owner.pid()).expect("wait owner");
-    kernel.waitpid(contender.pid()).expect("wait contender");
-}
-
-#[test]
-fn kernel_fd_surface_supports_shared_locks_and_nonblocking_upgrade_conflicts() {
-    let mut config = KernelVmConfig::new("vm-api-flock-shared");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-        .filesystem_mut()
-        .write_file("/tmp/shared-lock.txt", b"shared".to_vec())
-        .expect("seed file");
-
-    let first = spawn_shell(&mut kernel);
-    let second = spawn_shell(&mut kernel);
-    let first_fd = kernel
-        .fd_open("shell", first.pid(), "/tmp/shared-lock.txt", O_RDWR, None)
-        .expect("first opens file");
-    let second_fd = kernel
-        .fd_open("shell", second.pid(), "/tmp/shared-lock.txt", O_RDWR, None)
-        .expect("second opens file");
-
-    kernel
-        .fd_flock("shell", first.pid(), first_fd, LOCK_SH)
-        .expect("first shared lock");
-    kernel
-        .fd_flock("shell", second.pid(), second_fd, LOCK_SH)
-        .expect("second shared lock");
-    assert_kernel_error_code(
-        kernel.fd_flock("shell", first.pid(), first_fd, LOCK_EX | LOCK_NB),
-        "EWOULDBLOCK",
-    );
-
-    kernel
-        .fd_flock("shell", second.pid(), second_fd, LOCK_UN)
-        .expect("unlock second shared lock");
-    kernel
-        .fd_flock("shell", first.pid(), first_fd, LOCK_EX | LOCK_NB)
-        .expect("first upgrades to exclusive once peer unlocks");
-
-    first.finish(0);
-    second.finish(0);
-    kernel.waitpid(first.pid()).expect("wait first");
-    kernel.waitpid(second.pid()).expect("wait second");
-}
-
-#[test]
-fn kernel_fd_surface_shares_advisory_locks_across_fork_inherited_fds() {
-    let mut config = KernelVmConfig::new("vm-api-flock-fork");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-        .filesystem_mut()
-        .write_file("/tmp/fork-lock.txt", b"fork".to_vec())
-        .expect("seed file");
-
-    let parent = spawn_shell(&mut kernel);
-    let inherited_fd = kernel
-        .fd_open("shell", parent.pid(), "/tmp/fork-lock.txt", O_RDWR, None)
-        .expect("parent opens file");
-    kernel
-        .fd_flock("shell", parent.pid(), inherited_fd, LOCK_EX)
-        .expect("parent acquires exclusive lock");
-
-    let child = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                parent_pid: Some(parent.pid()),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn child with inherited fds");
-    let contender = spawn_shell(&mut kernel);
-    let contender_fd = kernel
-        .fd_open("shell", contender.pid(), "/tmp/fork-lock.txt", O_RDWR, None)
-        .expect("contender opens file");
-
-    kernel
-        .fd_flock("shell", child.pid(), inherited_fd, LOCK_EX | LOCK_NB)
-        .expect("child sees the inherited open-file-description lock");
-    assert_kernel_error_code(
-        kernel.fd_flock("shell", contender.pid(), contender_fd, LOCK_SH | LOCK_NB),
-        "EWOULDBLOCK",
-    );
-
-    parent.finish(0);
-    child.finish(0);
-    contender.finish(0);
-    kernel.waitpid(parent.pid()).expect("wait parent");
-    kernel.waitpid(child.pid()).expect("wait child");
-    kernel.waitpid(contender.pid()).expect("wait contender");
-}
-
-#[test]
-fn waitpid_returns_structured_result_and_process_introspection_works() {
-    let mut config = KernelVmConfig::new("vm-api-proc");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let parent = spawn_shell(&mut kernel);
-    let child = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                parent_pid: Some(parent.pid()),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn child");
-
-    assert_eq!(
-        kernel.getpid("shell", child.pid()).expect("getpid"),
-        child.pid()
-    );
-    assert_eq!(
-        kernel.getppid("shell", child.pid()).expect("getppid"),
-        parent.pid()
-    );
-    assert_eq!(
-        kernel.getsid("shell", child.pid()).expect("inherited sid"),
-        parent.pid()
-    );
-    assert_eq!(
-        kernel.setsid("shell", child.pid()).expect("setsid"),
-        child.pid()
-    );
-    assert_eq!(
-        kernel.getsid("shell", child.pid()).expect("new sid"),
-        child.pid()
-    );
-
-    let processes = kernel.list_processes();
-    assert_eq!(
-        processes.get(&parent.pid()).expect("parent info").command,
-        "sh"
-    );
-    assert_eq!(
-        processes.get(&child.pid()).expect("child info").ppid,
-        parent.pid()
-    );
-
-    child.finish(23);
-    assert_eq!(
-        kernel.waitpid(child.pid()).expect("wait child"),
-        WaitPidResult {
-            pid: child.pid(),
-            status: 23,
-        }
-    );
-
-    parent.finish(0);
-    kernel.waitpid(parent.pid()).expect("wait parent");
-}
-
-#[test]
-fn waitpid_with_options_supports_wnohang_and_any_child_waits() {
-    let mut config = KernelVmConfig::new("vm-api-waitpid-flags");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let parent = spawn_shell(&mut kernel);
-    let child = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                parent_pid: Some(parent.pid()),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn child");
-
-    assert_eq!(
-        kernel
-            .waitpid_with_options("shell", parent.pid(), -1, WaitPidFlags::WNOHANG)
-            .expect("wnohang wait should succeed"),
-        None
-    );
-
-    child.finish(9);
-    let waited = kernel
-        .waitpid_with_options("shell", parent.pid(), -1, WaitPidFlags::empty())
-        .expect("wait for any child should succeed")
-        .expect("child exit should be reported");
-    assert_eq!(waited.pid, child.pid());
-    assert_eq!(waited.status, 9);
-    assert_eq!(waited.event, ProcessWaitEvent::Exited);
-    assert_eq!(
-        kernel.list_processes().get(&child.pid()),
-        None,
-        "exited child should be reaped after wait"
-    );
-
-    parent.finish(0);
-    kernel.waitpid(parent.pid()).expect("wait parent");
-}
-
-#[test]
-fn proc_filesystem_exposes_live_process_metadata_and_fd_symlinks() {
-    let mut config = KernelVmConfig::new("vm-api-procfs");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-        .filesystem_mut()
-        .write_file("/tmp/data.txt", b"hello".to_vec())
-        .expect("seed procfs data file");
-
-    let process = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                cwd: Some(String::from("/tmp")),
-                env: std::collections::BTreeMap::from([(
-                    String::from("VISIBLE_MARKER"),
-                    String::from("present"),
-                )]),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn procfs shell");
-    let fd = kernel
-        .fd_open("shell", process.pid(), "/tmp/data.txt", O_RDWR, None)
-        .expect("open procfs data file");
-
-    let proc_entries = kernel
-        .read_dir_for_process("shell", process.pid(), "/proc")
-        .expect("read /proc");
-    assert!(proc_entries.contains(&String::from("self")));
-    assert!(proc_entries.contains(&String::from("mounts")));
-    assert!(proc_entries.contains(&process.pid().to_string()));
-
-    assert_eq!(
-        kernel
-            .read_link_for_process("shell", process.pid(), "/proc/self")
-            .expect("read /proc/self link"),
-        format!("/proc/{}", process.pid())
-    );
-    assert_eq!(
-        kernel
-            .realpath_for_process("shell", process.pid(), "/proc/self")
-            .expect("realpath /proc/self"),
-        format!("/proc/{}", process.pid())
-    );
-
-    let self_lstat = kernel
-        .lstat_for_process("shell", process.pid(), "/proc/self")
-        .expect("lstat /proc/self");
-    assert!(self_lstat.is_symbolic_link);
-    let self_stat = kernel
-        .stat_for_process("shell", process.pid(), "/proc/self")
-        .expect("stat /proc/self");
-    assert!(self_stat.is_directory);
-
-    let fd_entries = kernel
-        .read_dir_for_process("shell", process.pid(), "/proc/self/fd")
-        .expect("read /proc/self/fd");
-    assert!(fd_entries.contains(&String::from("0")));
-    assert!(fd_entries.contains(&fd.to_string()));
-    assert_eq!(
-        kernel
-            .read_link_for_process("shell", process.pid(), &format!("/proc/self/fd/{fd}"),)
-            .expect("read proc fd link"),
-        String::from("/tmp/data.txt")
-    );
-
-    assert_eq!(
-        kernel
-            .read_link_for_process("shell", process.pid(), "/proc/self/cwd")
-            .expect("read cwd link"),
-        String::from("/tmp")
-    );
-    assert_eq!(
-        kernel
-            .read_file_for_process("shell", process.pid(), "/proc/self/cmdline")
-            .expect("read cmdline"),
-        b"sh\0".to_vec()
-    );
-
-    let environ = String::from_utf8(
-        kernel
-            .read_file_for_process("shell", process.pid(), "/proc/self/environ")
-            .expect("read environ"),
-    )
-    .expect("proc environ should be utf8");
-    assert!(environ.contains("VISIBLE_MARKER=present"));
-
-    let stat_text = String::from_utf8(
-        kernel
-            .read_file_for_process("shell", process.pid(), "/proc/self/stat")
-            .expect("read stat"),
-    )
-    .expect("proc stat should be utf8");
-    assert!(stat_text.starts_with(&format!("{} (sh) R ", process.pid())));
-
-    let error = kernel
-        .write_file("/proc/mounts", b"blocked".to_vec())
-        .expect_err("procfs should be read-only");
-    assert_eq!(error.code(), "EROFS");
-
-    process.finish(0);
-    kernel.waitpid(process.pid()).expect("wait procfs shell");
-}
-
-#[test]
-fn proc_mounts_lists_root_and_active_mounts() {
-    let mut config = KernelVmConfig::new("vm-api-proc-mounts");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MountTable::new(MemoryFileSystem::new()), config);
-    kernel
-        .mount_filesystem(
-            "/data",
-            MemoryFileSystem::new(),
-            MountOptions::new("memory").read_only(true),
-        )
-        .expect("mount memory filesystem");
-
-    let mounts = String::from_utf8(kernel.read_file("/proc/mounts").expect("read proc mounts"))
-        .expect("proc mounts should be utf8");
-    assert!(mounts.contains("root / root rw 0 0"));
-    assert!(mounts.contains("memory /data memory ro 0 0"));
-}
-
-#[test]
-fn filesystem_operations_return_linux_errno_values_for_common_failures() {
-    let mut config = KernelVmConfig::new("vm-api-errno");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MountTable::new(MemoryFileSystem::new()), config);
-
-    kernel.create_dir("/dir").expect("create dir");
-    assert_kernel_error_code(kernel.write_file("/dir", b"blocked".to_vec()), "EISDIR");
-
-    kernel
-        .write_file("/file", b"parent".to_vec())
-        .expect("write file parent");
-    assert_kernel_error_code(kernel.stat("/file/child"), "ENOTDIR");
-
-    let long_path = format!("/{}", "a".repeat(MAX_PATH_LENGTH));
-    assert_kernel_error_code(kernel.stat(&long_path), "ENAMETOOLONG");
-
-    kernel
-        .mount_filesystem(
-            "/readonly",
-            MemoryFileSystem::new(),
-            MountOptions::new("memory").read_only(true),
-        )
-        .expect("mount readonly fs");
-    assert_kernel_error_code(
-        kernel.write_file("/readonly/blocked.txt", b"blocked".to_vec()),
-        "EROFS",
-    );
-}
-
-#[test]
-fn open_shell_configures_pty_and_exec_uses_shell_driver() {
-    let mut config = KernelVmConfig::new("vm-api-shell");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let shell = kernel
-        .open_shell(OpenShellOptions {
-            requester_driver: Some(String::from("shell")),
-            ..OpenShellOptions::default()
-        })
-        .expect("open shell");
-    assert!(shell.pty_path().starts_with("/dev/pts/"));
-    assert_eq!(
-        kernel.getpgid("shell", shell.pid()).expect("shell pgid"),
-        shell.pid()
-    );
-    assert_eq!(
-        kernel
-            .tcgetpgrp("shell", shell.pid(), shell.master_fd())
-            .expect("foreground pgid"),
-        shell.pid()
-    );
-
-    shell.process().finish(0);
-    kernel.waitpid(shell.pid()).expect("wait shell");
-
-    let exec = kernel
-        .exec(
-            "echo hello",
-            ExecOptions {
-                requester_driver: Some(String::from("shell")),
-                ..ExecOptions::default()
-            },
-        )
-        .expect("exec through shell");
-    assert_eq!(exec.driver(), "shell");
-    assert_eq!(
-        kernel
-            .list_processes()
-            .get(&exec.pid())
-            .expect("exec process")
-            .command,
-        "sh"
-    );
-
-    exec.finish(0);
-    kernel.waitpid(exec.pid()).expect("wait exec");
-}
-
-#[test]
-fn pty_resize_delivers_sigwinch_to_the_foreground_process_group() {
-    let mut config = KernelVmConfig::new("vm-api-shell");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let shell = kernel
-        .open_shell(OpenShellOptions {
-            requester_driver: Some(String::from("shell")),
-            ..OpenShellOptions::default()
-        })
-        .expect("open shell");
-
-    kernel
-        .pty_resize("shell", shell.pid(), shell.master_fd(), 120, 40)
-        .expect("resize shell pty");
-    kernel
-        .pty_resize("shell", shell.pid(), shell.master_fd(), 120, 40)
-        .expect("repeat shell pty resize");
-
-    assert_eq!(shell.process().kill_signals(), vec![SIGWINCH]);
-
-    shell.process().finish(0);
-    kernel.waitpid(shell.pid()).expect("wait shell");
-}
-
-#[test]
-fn shell_foreground_process_group_must_stay_in_the_same_session() {
-    let mut config = KernelVmConfig::new("vm-api-shell");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let shell = kernel
-        .open_shell(OpenShellOptions {
-            requester_driver: Some(String::from("shell")),
-            ..OpenShellOptions::default()
-        })
-        .expect("open shell");
-    let peer = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                parent_pid: Some(shell.pid()),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn peer");
-
-    assert_eq!(
-        kernel.getsid("shell", peer.pid()).expect("peer sid"),
-        shell.pid()
-    );
-    assert_eq!(
-        kernel.setsid("shell", peer.pid()).expect("setsid"),
-        peer.pid()
-    );
-
-    let error = kernel
-        .pty_set_foreground_pgid("shell", shell.pid(), shell.master_fd(), peer.pid())
-        .expect_err("different-session process group should be rejected");
-    assert_eq!(error.code(), "EPERM");
-    assert!(error.to_string().contains("different session"));
-
-    peer.finish(0);
-    kernel.waitpid(peer.pid()).expect("wait peer");
-    shell.process().finish(0);
-    kernel.waitpid(shell.pid()).expect("wait shell");
-}
-
-#[test]
-fn virtual_filesystem_default_pwrite_zero_fills_missing_bytes() {
-    let mut filesystem = MemoryFileSystem::new();
-    filesystem
-        .write_file("/tmp/pwrite.txt", b"AB".to_vec())
-        .expect("seed file");
-
-    VirtualFileSystem::pwrite(&mut filesystem, "/tmp/pwrite.txt", b"CD".to_vec(), 5)
-        .expect("default pwrite");
-
-    assert_eq!(
-        filesystem
-            .read_file("/tmp/pwrite.txt")
-            .expect("read back pwrite result"),
-        vec![b'A', b'B', 0, 0, 0, b'C', b'D']
-    );
-}
diff --git a/crates/kernel/tests/bridge.rs b/crates/kernel/tests/bridge.rs
deleted file mode 100644
index 9756bc433..000000000
--- a/crates/kernel/tests/bridge.rs
+++ /dev/null
@@ -1,338 +0,0 @@
-mod bridge_support;
-
-use bridge_support::RecordingBridge;
-use secure_exec_kernel::bridge::{
-    ClockRequest, CommandPermissionRequest, CreateDirRequest, CreateJavascriptContextRequest,
-    CreateWasmContextRequest, DiagnosticRecord, DirectoryEntry, EnvironmentAccess,
-    EnvironmentPermissionRequest, ExecutionEvent, ExecutionHandleRequest, ExecutionSignal,
-    FilesystemAccess, FilesystemPermissionRequest, FilesystemSnapshot, FlushFilesystemStateRequest,
-    GuestKernelCall, GuestRuntime, HostBridge, LifecycleEventRecord, LifecycleState,
-    LoadFilesystemStateRequest, LogLevel, LogRecord, NetworkAccess, NetworkPermissionRequest,
-    PathRequest, PollExecutionEventRequest, RandomBytesRequest, ReadDirRequest, ReadFileRequest,
-    RenameRequest, ScheduleTimerRequest, StructuredEventRecord, SymlinkRequest, TruncateRequest,
-    WriteExecutionStdinRequest, WriteFileRequest,
-};
-use std::collections::BTreeMap;
-use std::fmt::Debug;
-use std::time::{Duration, SystemTime};
-
-fn assert_host_bridge<B>(bridge: &mut B)
-where
-    B: HostBridge,
-    <B as secure_exec_kernel::bridge::BridgeTypes>::Error: Debug,
-{
-    let contents = bridge
-        .read_file(ReadFileRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace/input.txt"),
-        })
-        .expect("read file");
-    assert_eq!(contents, b"hello".to_vec());
-
-    bridge
-        .write_file(WriteFileRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace/output.txt"),
-            contents: b"world".to_vec(),
-        })
-        .expect("write file");
-    assert!(bridge
-        .exists(PathRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace/output.txt"),
-        })
-        .expect("exists after write"));
-
-    let directory = bridge
-        .read_dir(ReadDirRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace"),
-        })
-        .expect("read dir");
-    assert_eq!(directory.len(), 1);
-
-    let metadata = bridge
-        .stat(PathRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace/input.txt"),
-        })
-        .expect("stat");
-    assert_eq!(metadata.kind, secure_exec_kernel::bridge::FileKind::File);
-    assert_eq!(metadata.size, 5);
-
-    bridge
-        .create_dir(CreateDirRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/tmp"),
-            recursive: true,
-        })
-        .expect("create dir");
-    bridge
-        .rename(RenameRequest {
-            vm_id: String::from("vm-1"),
-            from_path: String::from("/workspace/output.txt"),
-            to_path: String::from("/workspace/output-renamed.txt"),
-        })
-        .expect("rename");
-    bridge
-        .symlink(SymlinkRequest {
-            vm_id: String::from("vm-1"),
-            target_path: String::from("/workspace/input.txt"),
-            link_path: String::from("/workspace/input-link.txt"),
-        })
-        .expect("symlink");
-    assert_eq!(
-        bridge
-            .read_link(PathRequest {
-                vm_id: String::from("vm-1"),
-                path: String::from("/workspace/input-link.txt"),
-            })
-            .expect("readlink"),
-        "/workspace/input.txt"
-    );
-    bridge
-        .truncate(TruncateRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace/input.txt"),
-            len: 2,
-        })
-        .expect("truncate");
-    assert_eq!(
-        bridge
-            .read_file(ReadFileRequest {
-                vm_id: String::from("vm-1"),
-                path: String::from("/workspace/input.txt"),
-            })
-            .expect("read after truncate"),
-        b"he".to_vec()
-    );
-
-    assert_eq!(
-        bridge
-            .check_filesystem_access(FilesystemPermissionRequest {
-                vm_id: String::from("vm-1"),
-                path: String::from("/workspace/input.txt"),
-                access: FilesystemAccess::Read,
-            })
-            .expect("filesystem permission"),
-        secure_exec_kernel::bridge::PermissionDecision::allow()
-    );
-    assert_eq!(
-        bridge
-            .check_network_access(NetworkPermissionRequest {
-                vm_id: String::from("vm-1"),
-                access: NetworkAccess::Fetch,
-                resource: String::from("https://example.test"),
-            })
-            .expect("network permission"),
-        secure_exec_kernel::bridge::PermissionDecision::allow()
-    );
-    assert_eq!(
-        bridge
-            .check_command_execution(CommandPermissionRequest {
-                vm_id: String::from("vm-1"),
-                command: String::from("node"),
-                args: vec![String::from("--version")],
-                cwd: Some(String::from("/workspace")),
-                env: BTreeMap::new(),
-            })
-            .expect("command permission"),
-        secure_exec_kernel::bridge::PermissionDecision::allow()
-    );
-    assert_eq!(
-        bridge
-            .check_environment_access(EnvironmentPermissionRequest {
-                vm_id: String::from("vm-1"),
-                access: EnvironmentAccess::Read,
-                key: String::from("PATH"),
-                value: None,
-            })
-            .expect("env permission"),
-        secure_exec_kernel::bridge::PermissionDecision::allow()
-    );
-
-    assert_eq!(
-        bridge
-            .load_filesystem_state(LoadFilesystemStateRequest {
-                vm_id: String::from("vm-1"),
-            })
-            .expect("load snapshot")
-            .expect("snapshot present")
-            .format,
-        "tar"
-    );
-    bridge
-        .flush_filesystem_state(FlushFilesystemStateRequest {
-            vm_id: String::from("vm-2"),
-            snapshot: FilesystemSnapshot {
-                format: String::from("tar"),
-                bytes: vec![9, 9, 9],
-            },
-        })
-        .expect("flush snapshot");
-    assert_eq!(
-        bridge
-            .load_filesystem_state(LoadFilesystemStateRequest {
-                vm_id: String::from("vm-2"),
-            })
-            .expect("load flushed snapshot")
-            .expect("flushed snapshot present")
-            .bytes,
-        vec![9, 9, 9]
-    );
-
-    assert_eq!(
-        bridge
-            .wall_clock(ClockRequest {
-                vm_id: String::from("vm-1"),
-            })
-            .expect("wall clock"),
-        SystemTime::UNIX_EPOCH + Duration::from_secs(1_710_000_000)
-    );
-    assert_eq!(
-        bridge
-            .monotonic_clock(ClockRequest {
-                vm_id: String::from("vm-1"),
-            })
-            .expect("monotonic clock"),
-        Duration::from_millis(42)
-    );
-    assert_eq!(
-        bridge
-            .schedule_timer(ScheduleTimerRequest {
-                vm_id: String::from("vm-1"),
-                delay: Duration::from_millis(5),
-            })
-            .expect("schedule timer")
-            .timer_id,
-        "timer-1"
-    );
-    assert_eq!(
-        bridge
-            .fill_random_bytes(RandomBytesRequest {
-                vm_id: String::from("vm-1"),
-                len: 4,
-            })
-            .expect("random bytes"),
-        vec![0xA5; 4]
-    );
-
-    bridge
-        .emit_log(LogRecord {
-            vm_id: String::from("vm-1"),
-            level: LogLevel::Info,
-            message: String::from("started"),
-        })
-        .expect("emit log");
-    bridge
-        .emit_diagnostic(DiagnosticRecord {
-            vm_id: String::from("vm-1"),
-            message: String::from("healthy"),
-            fields: BTreeMap::from([(String::from("uptime_ms"), String::from("10"))]),
-        })
-        .expect("emit diagnostic");
-    bridge
-        .emit_structured_event(StructuredEventRecord {
-            vm_id: String::from("vm-1"),
-            name: String::from("process.stdout"),
-            fields: BTreeMap::from([(String::from("fd"), String::from("1"))]),
-        })
-        .expect("emit structured event");
-    bridge
-        .emit_lifecycle(LifecycleEventRecord {
-            vm_id: String::from("vm-1"),
-            state: LifecycleState::Ready,
-            detail: Some(String::from("booted")),
-        })
-        .expect("emit lifecycle");
-
-    let js_context = bridge
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-1"),
-            bootstrap_module: Some(String::from("@secure-exec/bootstrap")),
-        })
-        .expect("create js context");
-    assert_eq!(js_context.runtime, GuestRuntime::JavaScript);
-
-    let wasm_context = bridge
-        .create_wasm_context(CreateWasmContextRequest {
-            vm_id: String::from("vm-1"),
-            module_path: Some(String::from("/workspace/module.wasm")),
-        })
-        .expect("create wasm context");
-    assert_eq!(wasm_context.runtime, GuestRuntime::WebAssembly);
-
-    let execution = bridge
-        .start_execution(secure_exec_kernel::bridge::StartExecutionRequest {
-            vm_id: String::from("vm-1"),
-            context_id: js_context.context_id,
-            argv: vec![String::from("index.js")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect("start execution");
-    assert_eq!(execution.execution_id, "exec-1");
-
-    bridge
-        .write_stdin(WriteExecutionStdinRequest {
-            vm_id: String::from("vm-1"),
-            execution_id: execution.execution_id.clone(),
-            chunk: b"input".to_vec(),
-        })
-        .expect("write stdin");
-    bridge
-        .close_stdin(ExecutionHandleRequest {
-            vm_id: String::from("vm-1"),
-            execution_id: execution.execution_id.clone(),
-        })
-        .expect("close stdin");
-    bridge
-        .kill_execution(secure_exec_kernel::bridge::KillExecutionRequest {
-            vm_id: String::from("vm-1"),
-            execution_id: execution.execution_id,
-            signal: ExecutionSignal::Terminate,
-        })
-        .expect("kill execution");
-
-    match bridge
-        .poll_execution_event(PollExecutionEventRequest {
-            vm_id: String::from("vm-1"),
-        })
-        .expect("poll execution event")
-    {
-        Some(ExecutionEvent::GuestRequest(event)) => {
-            assert_eq!(event.operation, "fs.read");
-        }
-        other => panic!("unexpected execution event: {other:?}"),
-    }
-
-    let _ = wasm_context;
-}
-
-#[test]
-fn host_bridge_traits_are_method_oriented_and_composable() {
-    let mut bridge = RecordingBridge::default();
-    bridge.seed_file("/workspace/input.txt", b"hello".to_vec());
-    bridge.seed_directory(
-        "/workspace",
-        vec![DirectoryEntry {
-            name: String::from("input.txt"),
-            kind: secure_exec_kernel::bridge::FileKind::File,
-        }],
-    );
-    bridge.seed_snapshot(
-        "vm-1",
-        FilesystemSnapshot {
-            format: String::from("tar"),
-            bytes: vec![1, 2, 3],
-        },
-    );
-    bridge.push_execution_event(ExecutionEvent::GuestRequest(GuestKernelCall {
-        vm_id: String::from("vm-1"),
-        execution_id: String::from("exec-seeded"),
-        operation: String::from("fs.read"),
-        payload: b"{}".to_vec(),
-    }));
-
-    assert_host_bridge(&mut bridge);
-}
diff --git a/crates/kernel/tests/bridge_support.rs b/crates/kernel/tests/bridge_support.rs
deleted file mode 100644
index d03ffca4d..000000000
--- a/crates/kernel/tests/bridge_support.rs
+++ /dev/null
@@ -1,447 +0,0 @@
-use secure_exec_kernel::bridge::{
-    BridgeTypes, ChmodRequest, ClockBridge, ClockRequest, CommandPermissionRequest,
-    CreateDirRequest, CreateJavascriptContextRequest, CreateWasmContextRequest, DiagnosticRecord,
-    DirectoryEntry, EnvironmentPermissionRequest, EventBridge, ExecutionBridge, ExecutionEvent,
-    ExecutionHandleRequest, FileKind, FileMetadata, FilesystemBridge, FilesystemPermissionRequest,
-    FilesystemSnapshot, FlushFilesystemStateRequest, GuestContextHandle, GuestRuntime,
-    KillExecutionRequest, LifecycleEventRecord, LoadFilesystemStateRequest, LogRecord,
-    NetworkPermissionRequest, PathRequest, PermissionBridge, PermissionDecision, PersistenceBridge,
-    PollExecutionEventRequest, RandomBridge, RandomBytesRequest, ReadDirRequest, ReadFileRequest,
-    RenameRequest, ScheduleTimerRequest, ScheduledTimer, StartExecutionRequest, StartedExecution,
-    StructuredEventRecord, SymlinkRequest, TruncateRequest, WriteExecutionStdinRequest,
-    WriteFileRequest,
-};
-use std::collections::{BTreeMap, BTreeSet, VecDeque};
-use std::time::{Duration, SystemTime};
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct StubError {
-    message: String,
-}
-
-impl StubError {
-    fn missing(kind: &'static str, key: &str) -> Self {
-        Self {
-            message: format!("missing {kind}: {key}"),
-        }
-    }
-
-    fn invalid(kind: &'static str, key: &str) -> Self {
-        Self {
-            message: format!("invalid {kind}: {key}"),
-        }
-    }
-}
-
-#[derive(Debug)]
-pub struct RecordingBridge {
-    next_context_id: usize,
-    next_execution_id: usize,
-    next_timer_id: usize,
-    files: BTreeMap<String, Vec<u8>>,
-    directories: BTreeMap<String, Vec<DirectoryEntry>>,
-    symlinks: BTreeMap<String, String>,
-    snapshots: BTreeMap<String, FilesystemSnapshot>,
-    execution_events: VecDeque<ExecutionEvent>,
-    pub permission_checks: Vec<String>,
-    pub log_events: Vec<LogRecord>,
-    pub diagnostic_events: Vec<DiagnosticRecord>,
-    pub structured_events: Vec<StructuredEventRecord>,
-    pub lifecycle_events: Vec<LifecycleEventRecord>,
-    pub scheduled_timers: Vec<ScheduleTimerRequest>,
-    pub stdin_writes: Vec<WriteExecutionStdinRequest>,
-    pub closed_executions: Vec<ExecutionHandleRequest>,
-    pub killed_executions: Vec<KillExecutionRequest>,
-}
-
-impl Default for RecordingBridge {
-    fn default() -> Self {
-        let mut directories = BTreeMap::new();
-        directories.insert(String::from("/"), Vec::new());
-
-        Self {
-            next_context_id: 1,
-            next_execution_id: 1,
-            next_timer_id: 1,
-            files: BTreeMap::new(),
-            directories,
-            symlinks: BTreeMap::new(),
-            snapshots: BTreeMap::new(),
-            execution_events: VecDeque::new(),
-            permission_checks: Vec::new(),
-            log_events: Vec::new(),
-            diagnostic_events: Vec::new(),
-            structured_events: Vec::new(),
-            lifecycle_events: Vec::new(),
-            scheduled_timers: Vec::new(),
-            stdin_writes: Vec::new(),
-            closed_executions: Vec::new(),
-            killed_executions: Vec::new(),
-        }
-    }
-}
-
-#[allow(dead_code)]
-impl RecordingBridge {
-    pub fn seed_file(&mut self, path: impl Into<String>, contents: impl Into<Vec<u8>>) {
-        self.files.insert(path.into(), contents.into());
-    }
-
-    pub fn seed_directory(&mut self, path: impl Into<String>, entries: Vec<DirectoryEntry>) {
-        self.directories.insert(path.into(), entries);
-    }
-
-    pub fn seed_snapshot(&mut self, vm_id: impl Into<String>, snapshot: FilesystemSnapshot) {
-        self.snapshots.insert(vm_id.into(), snapshot);
-    }
-
-    pub fn push_execution_event(&mut self, event: ExecutionEvent) {
-        self.execution_events.push_back(event);
-    }
-
-    fn metadata_for_path(&self, path: &str, follow_links: bool) -> Result<FileMetadata, StubError> {
-        let mut current_path = path.to_owned();
-        let mut seen_links = BTreeSet::new();
-
-        if follow_links {
-            while let Some(target) = self.symlinks.get(&current_path) {
-                if !seen_links.insert(current_path.clone()) {
-                    return Err(StubError::invalid("symlink cycle", &current_path));
-                }
-                current_path = target.clone();
-            }
-        } else if self.symlinks.contains_key(&current_path) {
-            return Ok(FileMetadata {
-                mode: 0o777,
-                size: 0,
-                kind: FileKind::SymbolicLink,
-            });
-        }
-
-        if let Some(bytes) = self.files.get(&current_path) {
-            return Ok(FileMetadata {
-                mode: 0o644,
-                size: bytes.len() as u64,
-                kind: FileKind::File,
-            });
-        }
-
-        if let Some(entries) = self.directories.get(&current_path) {
-            return Ok(FileMetadata {
-                mode: 0o755,
-                size: entries.len() as u64,
-                kind: FileKind::Directory,
-            });
-        }
-
-        Err(StubError::missing("path", &current_path))
-    }
-}
-
-impl BridgeTypes for RecordingBridge {
-    type Error = StubError;
-}
-
-impl FilesystemBridge for RecordingBridge {
-    fn read_file(&mut self, request: ReadFileRequest) -> Result<Vec<u8>, Self::Error> {
-        self.files
-            .get(&request.path)
-            .cloned()
-            .ok_or_else(|| StubError::missing("file", &request.path))
-    }
-
-    fn write_file(&mut self, request: WriteFileRequest) -> Result<(), Self::Error> {
-        self.files.insert(request.path, request.contents);
-        Ok(())
-    }
-
-    fn stat(&mut self, request: PathRequest) -> Result<FileMetadata, Self::Error> {
-        self.metadata_for_path(&request.path, true)
-    }
-
-    fn lstat(&mut self, request: PathRequest) -> Result<FileMetadata, Self::Error> {
-        self.metadata_for_path(&request.path, false)
-    }
-
-    fn read_dir(&mut self, request: ReadDirRequest) -> Result<Vec<DirectoryEntry>, Self::Error> {
-        Ok(self
-            .directories
-            .get(&request.path)
-            .cloned()
-            .unwrap_or_default())
-    }
-
-    fn create_dir(&mut self, request: CreateDirRequest) -> Result<(), Self::Error> {
-        self.directories.entry(request.path).or_default();
-        Ok(())
-    }
-
-    fn remove_file(&mut self, request: PathRequest) -> Result<(), Self::Error> {
-        self.files.remove(&request.path);
-        Ok(())
-    }
-
-    fn remove_dir(&mut self, request: PathRequest) -> Result<(), Self::Error> {
-        self.directories.remove(&request.path);
-        Ok(())
-    }
-
-    fn rename(&mut self, request: RenameRequest) -> Result<(), Self::Error> {
-        if let Some(bytes) = self.files.remove(&request.from_path) {
-            self.files.insert(request.to_path, bytes);
-            return Ok(());
-        }
-
-        if let Some(target) = self.symlinks.remove(&request.from_path) {
-            self.symlinks.insert(request.to_path, target);
-            return Ok(());
-        }
-
-        if let Some(entries) = self.directories.remove(&request.from_path) {
-            self.directories.insert(request.to_path, entries);
-            return Ok(());
-        }
-
-        Err(StubError::missing("rename source", &request.from_path))
-    }
-
-    fn symlink(&mut self, request: SymlinkRequest) -> Result<(), Self::Error> {
-        self.symlinks.insert(request.link_path, request.target_path);
-        Ok(())
-    }
-
-    fn read_link(&mut self, request: PathRequest) -> Result<String, Self::Error> {
-        self.symlinks
-            .get(&request.path)
-            .cloned()
-            .ok_or_else(|| StubError::missing("symlink", &request.path))
-    }
-
-    fn chmod(&mut self, _request: ChmodRequest) -> Result<(), Self::Error> {
-        Ok(())
-    }
-
-    fn truncate(&mut self, request: TruncateRequest) -> Result<(), Self::Error> {
-        let Some(bytes) = self.files.get_mut(&request.path) else {
-            return Err(StubError::missing("file", &request.path));
-        };
-
-        bytes.resize(request.len as usize, 0);
-        Ok(())
-    }
-
-    fn exists(&mut self, request: PathRequest) -> Result<bool, Self::Error> {
-        Ok(self.files.contains_key(&request.path)
-            || self.directories.contains_key(&request.path)
-            || self.symlinks.contains_key(&request.path))
-    }
-}
-
-impl PermissionBridge for RecordingBridge {
-    fn check_filesystem_access(
-        &mut self,
-        request: FilesystemPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        self.permission_checks
-            .push(format!("fs:{}:{}", request.vm_id, request.path));
-        Ok(PermissionDecision::allow())
-    }
-
-    fn check_network_access(
-        &mut self,
-        request: NetworkPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        self.permission_checks
-            .push(format!("net:{}:{}", request.vm_id, request.resource));
-        Ok(PermissionDecision::allow())
-    }
-
-    fn check_command_execution(
-        &mut self,
-        request: CommandPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        self.permission_checks
-            .push(format!("cmd:{}:{}", request.vm_id, request.command));
-        Ok(PermissionDecision::allow())
-    }
-
-    fn check_environment_access(
-        &mut self,
-        request: EnvironmentPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        self.permission_checks
-            .push(format!("env:{}:{}", request.vm_id, request.key));
-        Ok(PermissionDecision::allow())
-    }
-}
-
-impl PersistenceBridge for RecordingBridge {
-    fn load_filesystem_state(
-        &mut self,
-        request: LoadFilesystemStateRequest,
-    ) -> Result<Option<FilesystemSnapshot>, Self::Error> {
-        Ok(self.snapshots.get(&request.vm_id).cloned())
-    }
-
-    fn flush_filesystem_state(
-        &mut self,
-        request: FlushFilesystemStateRequest,
-    ) -> Result<(), Self::Error> {
-        self.snapshots.insert(request.vm_id, request.snapshot);
-        Ok(())
-    }
-}
-
-impl ClockBridge for RecordingBridge {
-    fn wall_clock(&mut self, _request: ClockRequest) -> Result<SystemTime, Self::Error> {
-        Ok(SystemTime::UNIX_EPOCH + Duration::from_secs(1_710_000_000))
-    }
-
-    fn monotonic_clock(&mut self, _request: ClockRequest) -> Result<Duration, Self::Error> {
-        Ok(Duration::from_millis(42))
-    }
-
-    fn schedule_timer(
-        &mut self,
-        request: ScheduleTimerRequest,
-    ) -> Result<ScheduledTimer, Self::Error> {
-        self.scheduled_timers.push(request.clone());
-
-        let timer = ScheduledTimer {
-            timer_id: format!("timer-{}", self.next_timer_id),
-            delay: request.delay,
-        };
-        self.next_timer_id += 1;
-
-        Ok(timer)
-    }
-}
-
-impl RandomBridge for RecordingBridge {
-    fn fill_random_bytes(&mut self, request: RandomBytesRequest) -> Result<Vec<u8>, Self::Error> {
-        Ok(vec![0xA5; request.len])
-    }
-}
-
-impl EventBridge for RecordingBridge {
-    fn emit_structured_event(&mut self, event: StructuredEventRecord) -> Result<(), Self::Error> {
-        self.structured_events.push(event);
-        Ok(())
-    }
-
-    fn emit_diagnostic(&mut self, event: DiagnosticRecord) -> Result<(), Self::Error> {
-        self.diagnostic_events.push(event);
-        Ok(())
-    }
-
-    fn emit_log(&mut self, event: LogRecord) -> Result<(), Self::Error> {
-        self.log_events.push(event);
-        Ok(())
-    }
-
-    fn emit_lifecycle(&mut self, event: LifecycleEventRecord) -> Result<(), Self::Error> {
-        self.lifecycle_events.push(event);
-        Ok(())
-    }
-}
-
-impl ExecutionBridge for RecordingBridge {
-    fn create_javascript_context(
-        &mut self,
-        _request: CreateJavascriptContextRequest,
-    ) -> Result<GuestContextHandle, Self::Error> {
-        let handle = GuestContextHandle {
-            context_id: format!("js-context-{}", self.next_context_id),
-            runtime: GuestRuntime::JavaScript,
-        };
-        self.next_context_id += 1;
-        Ok(handle)
-    }
-
-    fn create_wasm_context(
-        &mut self,
-        _request: CreateWasmContextRequest,
-    ) -> Result<GuestContextHandle, Self::Error> {
-        let handle = GuestContextHandle {
-            context_id: format!("wasm-context-{}", self.next_context_id),
-            runtime: GuestRuntime::WebAssembly,
-        };
-        self.next_context_id += 1;
-        Ok(handle)
-    }
-
-    fn start_execution(
-        &mut self,
-        _request: StartExecutionRequest,
-    ) -> Result<StartedExecution, Self::Error> {
-        let execution = StartedExecution {
-            execution_id: format!("exec-{}", self.next_execution_id),
-        };
-        self.next_execution_id += 1;
-        Ok(execution)
-    }
-
-    fn write_stdin(&mut self, request: WriteExecutionStdinRequest) -> Result<(), Self::Error> {
-        self.stdin_writes.push(request);
-        Ok(())
-    }
-
-    fn close_stdin(&mut self, request: ExecutionHandleRequest) -> Result<(), Self::Error> {
-        self.closed_executions.push(request);
-        Ok(())
-    }
-
-    fn kill_execution(&mut self, request: KillExecutionRequest) -> Result<(), Self::Error> {
-        self.killed_executions.push(request);
-        Ok(())
-    }
-
-    fn poll_execution_event(
-        &mut self,
-        _request: PollExecutionEventRequest,
-    ) -> Result<Option<ExecutionEvent>, Self::Error> {
-        Ok(self.execution_events.pop_front())
-    }
-}
-
-#[test]
-fn recording_bridge_rejects_symlink_cycles_when_following_metadata() {
-    let mut bridge = RecordingBridge::default();
-    bridge
-        .symlink(SymlinkRequest {
-            vm_id: String::from("vm-1"),
-            target_path: String::from("/b"),
-            link_path: String::from("/a"),
-        })
-        .expect("create first symlink");
-    bridge
-        .symlink(SymlinkRequest {
-            vm_id: String::from("vm-1"),
-            target_path: String::from("/a"),
-            link_path: String::from("/b"),
-        })
-        .expect("create second symlink");
-
-    let error = bridge
-        .stat(PathRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/a"),
-        })
-        .expect_err("cyclic symlink metadata should fail");
-    assert_eq!(
-        error,
-        StubError {
-            message: String::from("invalid symlink cycle: /a"),
-        }
-    );
-    assert_eq!(
-        bridge
-            .lstat(PathRequest {
-                vm_id: String::from("vm-1"),
-                path: String::from("/a"),
-            })
-            .expect("lstat should not follow cyclic symlink")
-            .kind,
-        FileKind::SymbolicLink
-    );
-}
diff --git a/crates/kernel/tests/command_registry.rs b/crates/kernel/tests/command_registry.rs
deleted file mode 100644
index e50d69f4d..000000000
--- a/crates/kernel/tests/command_registry.rs
+++ /dev/null
@@ -1,196 +0,0 @@
-use secure_exec_kernel::command_registry::{CommandDriver, CommandRegistry};
-use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig, SpawnOptions};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::vfs::{MemoryFileSystem, VirtualFileSystem};
-
-#[test]
-fn registers_and_resolves_commands() {
-    let mut registry = CommandRegistry::new();
-    let driver = CommandDriver::new("wasmvm", ["grep", "sed", "cat"]);
-
-    registry
-        .register(driver.clone())
-        .expect("register commands");
-
-    assert_eq!(registry.resolve("grep"), Some(&driver));
-    assert_eq!(registry.resolve("sed"), Some(&driver));
-    assert_eq!(registry.resolve("cat"), Some(&driver));
-}
-
-#[test]
-fn returns_none_for_unknown_commands() {
-    let registry = CommandRegistry::new();
-
-    assert!(registry.resolve("nonexistent").is_none());
-}
-
-#[test]
-fn last_registered_driver_wins_on_conflict() {
-    let mut registry = CommandRegistry::new();
-    registry
-        .register(CommandDriver::new("wasmvm", ["node"]))
-        .expect("register wasm driver");
-    registry
-        .register(CommandDriver::new("node", ["node"]))
-        .expect("register node driver");
-
-    assert_eq!(
-        registry
-            .resolve("node")
-            .expect("node should resolve")
-            .name(),
-        "node"
-    );
-}
-
-#[test]
-fn list_returns_command_to_driver_name_mapping() {
-    let mut registry = CommandRegistry::new();
-    registry
-        .register(CommandDriver::new("wasmvm", ["grep", "cat"]))
-        .expect("register wasm driver");
-    registry
-        .register(CommandDriver::new("node", ["node", "npm"]))
-        .expect("register node driver");
-
-    let commands = registry.list();
-    assert_eq!(commands.get("grep"), Some(&String::from("wasmvm")));
-    assert_eq!(commands.get("node"), Some(&String::from("node")));
-    assert_eq!(commands.len(), 4);
-}
-
-#[test]
-fn records_warning_when_overriding_existing_command() {
-    let mut registry = CommandRegistry::new();
-    registry
-        .register(CommandDriver::new("wasmvm", ["sh", "grep"]))
-        .expect("register wasm driver");
-    registry
-        .register(CommandDriver::new("node", ["sh"]))
-        .expect("register node driver");
-
-    let warnings = registry.warnings();
-    assert_eq!(warnings.len(), 1);
-    assert!(warnings[0].contains("sh"));
-    assert!(warnings[0].contains("wasmvm"));
-    assert!(warnings[0].contains("node"));
-}
-
-#[test]
-fn populate_bin_creates_stub_entries() {
-    let mut vfs = MemoryFileSystem::new();
-    let mut registry = CommandRegistry::new();
-    registry
-        .register(CommandDriver::new("wasmvm", ["grep", "cat"]))
-        .expect("register commands");
-
-    registry.populate_bin(&mut vfs).expect("populate /bin");
-
-    assert!(vfs.exists("/bin/grep"));
-    assert!(vfs.exists("/bin/cat"));
-    assert_eq!(
-        vfs.read_text_file("/bin/grep").expect("read stub"),
-        "#!/bin/sh\n# kernel command stub\n"
-    );
-    assert_eq!(
-        vfs.stat("/bin/grep").expect("stat stub").mode & 0o777,
-        0o755
-    );
-}
-
-#[test]
-fn rejects_command_names_that_escape_bin_stub_paths() {
-    for command in ["", ".", "..", "../escape", "nested/escape", "nul\0byte"] {
-        let mut registry = CommandRegistry::new();
-        let error = registry
-            .register(CommandDriver::new("wasmvm", [command]))
-            .expect_err("invalid command name should be rejected");
-
-        assert_eq!(error.code(), "EINVAL");
-        assert!(
-            error.message().contains("invalid command name"),
-            "unexpected error: {error}"
-        );
-        assert!(registry.list().is_empty());
-    }
-}
-
-#[test]
-fn populate_bin_rejects_invalid_names_before_writing_any_stubs() {
-    let mut vfs = MemoryFileSystem::new();
-    let driver = CommandDriver::new("wasmvm", ["good", "../escape"]);
-    let registry = CommandRegistry::new();
-
-    let error = registry
-        .populate_driver_bin(&mut vfs, &driver)
-        .expect_err("invalid command name should reject population");
-
-    assert_eq!(error.code(), "EINVAL");
-    assert!(
-        error.message().contains("invalid command name"),
-        "unexpected error: {error}"
-    );
-    assert!(!vfs.exists("/bin"));
-    assert!(!vfs.exists("/bin/good"));
-    assert!(!vfs.exists("/escape"));
-}
-
-#[test]
-fn kernel_driver_registration_rejects_command_path_names_without_writing_stubs() {
-    let mut config = KernelVmConfig::new("vm-invalid-command-path");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-
-    let error = kernel
-        .register_driver(CommandDriver::new("wasmvm", ["../escape"]))
-        .expect_err("invalid command should reject driver registration");
-
-    assert_eq!(error.code(), "EINVAL");
-    assert!(
-        error.to_string().contains("invalid command name"),
-        "unexpected error: {error}"
-    );
-    assert!(!kernel.exists("/escape").expect("check escaped path"));
-    assert!(!kernel
-        .exists("/bin/../escape")
-        .expect("check normalized escaped path"));
-}
-
-#[test]
-fn mounted_agentos_command_paths_resolve_to_registered_drivers() {
-    let mut config = KernelVmConfig::new("vm-mounted-command-path");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("wasmvm", ["sh", "xu"]))
-        .expect("register drivers");
-
-    kernel
-        .mkdir("/__secure_exec/commands/0", true)
-        .expect("create mounted command root");
-    kernel
-        .write_file(
-            "/__secure_exec/commands/0/xu",
-            b"#!/bin/sh\n# kernel command stub\n".to_vec(),
-        )
-        .expect("write mounted command stub");
-    kernel
-        .chmod("/__secure_exec/commands/0/xu", 0o755)
-        .expect("chmod mounted command stub");
-
-    let process = kernel
-        .spawn_process(
-            "/__secure_exec/commands/0/xu",
-            vec![String::from("hello-agentos")],
-            SpawnOptions::default(),
-        )
-        .expect("spawn mounted command path");
-
-    let info = kernel
-        .list_processes()
-        .get(&process.pid())
-        .cloned()
-        .expect("process info");
-    assert_eq!(info.command, "xu");
-    assert_eq!(info.driver, "wasmvm");
-}
diff --git a/crates/kernel/tests/default_deny_guards.rs b/crates/kernel/tests/default_deny_guards.rs
deleted file mode 100644
index 773efed8c..000000000
--- a/crates/kernel/tests/default_deny_guards.rs
+++ /dev/null
@@ -1,300 +0,0 @@
-//! Default-deny / fail-closed guards (CI hardening, item #5).
-//!
-//! These tests pin down the secure-exec security posture so a refactor cannot
-//! silently weaken it:
-//!
-//!   1. Default-deny: with no policy configured (`Permissions::default()`),
-//!      every guarded capability -- filesystem, network, child-process spawn,
-//!      and environment reads -- is DENIED / fails closed.
-//!
-//!   2. Fail-closed on new variants: adding a new `FsOperation`,
-//!      `NetworkOperation`, or `EnvironmentOperation` variant must force a
-//!      compile error here (via exhaustive `match` with no wildcard arm) so a
-//!      new capability cannot be added without consciously deciding how the
-//!      default-deny path treats it. A runtime test additionally confirms each
-//!      enumerated variant is denied under the empty policy.
-//!
-//!   3. Safe defaults: every safety-critical NON-TIME resource limit
-//!      (processes, open fds, sockets, connections, pipes, ptys, filesystem
-//!      bytes, inodes, and the socket buffer/queue caps) is bounded by default
-//!      -- i.e. `Some(_)`, never silently unbounded. Time budgets (CPU /
-//!      wall-clock) are intentionally OPT-IN and are deliberately NOT asserted
-//!      here.
-
-use secure_exec_kernel::permissions::{
-    check_command_execution, check_network_access, filter_env, EnvAccessRequest,
-    EnvironmentOperation, FsAccessRequest, FsOperation, NetworkAccessRequest, NetworkOperation,
-    PermissionedFileSystem, Permissions,
-};
-use secure_exec_kernel::resource_accounting::ResourceLimits;
-use secure_exec_kernel::vfs::{MemoryFileSystem, VfsResult, VirtualFileSystem};
-use std::collections::BTreeMap;
-use std::fmt::Debug;
-
-// ---------------------------------------------------------------------------
-// Exhaustive variant enumerations.
-//
-// These functions list EVERY variant of each capability enum without a `_`
-// wildcard arm. If a new variant is added, these stop compiling, forcing the
-// author to revisit the default-deny tests. This is the compile-time half of
-// "new unmatched permission/FsOperation variant fails closed".
-// ---------------------------------------------------------------------------
-
-fn all_fs_operations() -> Vec<FsOperation> {
-    use FsOperation::*;
-    // Exhaustive match (no wildcard) so a new variant breaks the build here.
-    let exhaustiveness_witness = |op: FsOperation| match op {
-        Read | Write | Mkdir | CreateDir | ReadDir | Stat | Remove | Rename | Exists | Symlink
-        | ReadLink | Link | Chmod | Chown | Utimes | Truncate | MountSensitive => (),
-    };
-    let all = vec![
-        Read,
-        Write,
-        Mkdir,
-        CreateDir,
-        ReadDir,
-        Stat,
-        Remove,
-        Rename,
-        Exists,
-        Symlink,
-        ReadLink,
-        Link,
-        Chmod,
-        Chown,
-        Utimes,
-        Truncate,
-        MountSensitive,
-    ];
-    for op in &all {
-        exhaustiveness_witness(*op);
-    }
-    all
-}
-
-fn all_network_operations() -> Vec<NetworkOperation> {
-    use NetworkOperation::*;
-    let exhaustiveness_witness = |op: NetworkOperation| match op {
-        Fetch | Http | Dns | Listen => (),
-    };
-    let all = vec![Fetch, Http, Dns, Listen];
-    for op in &all {
-        exhaustiveness_witness(*op);
-    }
-    all
-}
-
-fn all_environment_operations() -> Vec<EnvironmentOperation> {
-    use EnvironmentOperation::*;
-    let exhaustiveness_witness = |op: EnvironmentOperation| match op {
-        Read | Write => (),
-    };
-    let all = vec![Read, Write];
-    for op in &all {
-        exhaustiveness_witness(*op);
-    }
-    all
-}
-
-// ---------------------------------------------------------------------------
-// 1 + 2: default-deny / fail-closed for every capability and variant.
-// ---------------------------------------------------------------------------
-
-fn assert_fs_denied<T: Debug>(result: VfsResult<T>) {
-    let error = result.expect_err("filesystem op must be denied under empty policy");
-    assert_eq!(
-        error.code(),
-        "EACCES",
-        "fs denial should be EACCES, got {error:?}"
-    );
-}
-
-#[test]
-fn default_permissions_have_no_policy() {
-    // The derived Default leaves every capability unset (None), which is what
-    // forces the fail-closed branch in each checker.
-    let permissions = Permissions::default();
-    assert!(permissions.filesystem.is_none(), "fs default must be None");
-    assert!(permissions.network.is_none(), "net default must be None");
-    assert!(
-        permissions.child_process.is_none(),
-        "child_process default must be None"
-    );
-    assert!(
-        permissions.environment.is_none(),
-        "environment default must be None"
-    );
-}
-
-#[test]
-fn default_policy_denies_all_filesystem_operations() {
-    let permissions = Permissions::default();
-    // Seed a real file so the permission gate -- not a missing-path ENOENT --
-    // is what rejects the request.
-    let mut backing = MemoryFileSystem::new();
-    backing
-        .write_file("/secret.txt", b"top secret".to_vec())
-        .expect("seed file");
-    backing.mkdir("/dir", false).expect("seed dir");
-    let fs = PermissionedFileSystem::new(backing, "vm-default-deny", permissions);
-
-    // `check_virtual_path` is the pure permission gate (no path resolution),
-    // so every enumerated FsOperation must be denied with EACCES. Using the
-    // enumerated list keeps coverage in lock-step with the enum.
-    for op in all_fs_operations() {
-        assert_fs_denied(fs.check_virtual_path(op, "/secret.txt"));
-    }
-    // `check_path` (which resolves the path first) must also deny for an
-    // existing path -- proving denial isn't an artifact of a missing file.
-    assert_fs_denied(fs.check_path(FsOperation::Read, "/secret.txt"));
-    assert_fs_denied(fs.check_path(FsOperation::Write, "/secret.txt"));
-
-    // And the concrete VFS operations fail closed as well.
-    let mut fs = fs;
-    assert_fs_denied(fs.read_file("/secret.txt"));
-    assert_fs_denied(fs.write_file("/secret.txt", b"x".to_vec()));
-    assert_fs_denied(fs.read_dir("/dir"));
-    assert_fs_denied(fs.stat("/secret.txt"));
-    assert_fs_denied(fs.remove_file("/secret.txt"));
-}
-
-#[test]
-fn default_policy_denies_all_network_operations() {
-    let permissions = Permissions::default();
-    for op in all_network_operations() {
-        let result = check_network_access(
-            "vm-default-deny",
-            &permissions,
-            op,
-            "https://example.com:443",
-        );
-        let error = result.expect_err("network op must be denied under empty policy");
-        assert_eq!(error.code(), "EACCES", "net denial should be EACCES");
-    }
-}
-
-#[test]
-fn default_policy_denies_child_process_spawn() {
-    let permissions = Permissions::default();
-    let result = check_command_execution(
-        "vm-default-deny",
-        &permissions,
-        "/bin/sh",
-        &["-c".to_string(), "echo hi".to_string()],
-        None,
-        &BTreeMap::new(),
-    );
-    let error = result.expect_err("spawn must be denied under empty policy");
-    assert_eq!(error.code(), "EACCES", "spawn denial should be EACCES");
-}
-
-#[test]
-fn default_policy_denies_all_environment_reads() {
-    let permissions = Permissions::default();
-
-    // filter_env with no environment policy must scrub everything.
-    let mut env = BTreeMap::new();
-    env.insert("SECRET_TOKEN".to_string(), "abc123".to_string());
-    env.insert("PATH".to_string(), "/usr/bin".to_string());
-    let filtered = filter_env("vm-default-deny", &env, &permissions);
-    assert!(
-        filtered.is_empty(),
-        "empty env policy must deny ALL env vars, leaked: {filtered:?}"
-    );
-
-    // The variant enumeration also drives a sanity check that EnvAccessRequest
-    // can be built for every op (keeps coverage in lock-step with the enum).
-    for op in all_environment_operations() {
-        let _request = EnvAccessRequest {
-            vm_id: "vm-default-deny".to_string(),
-            op,
-            key: "SECRET_TOKEN".to_string(),
-            value: Some("abc123".to_string()),
-        };
-    }
-
-    // Sanity: a NetworkAccessRequest / FsAccessRequest can likewise be built
-    // (guards against signature drift breaking the deny paths above).
-    let _ = NetworkAccessRequest {
-        vm_id: "vm".to_string(),
-        op: NetworkOperation::Fetch,
-        resource: "https://x".to_string(),
-    };
-    let _ = FsAccessRequest {
-        vm_id: "vm".to_string(),
-        op: FsOperation::Read,
-        path: "/x".to_string(),
-    };
-}
-
-// ---------------------------------------------------------------------------
-// 3: safe defaults -- no safety-critical NON-TIME resource limit is silently
-// unbounded.
-// ---------------------------------------------------------------------------
-
-#[test]
-fn safety_critical_resource_limits_are_bounded_by_default() {
-    let limits = ResourceLimits::default();
-
-    // Each of these is a safety-critical, NON-TIME limit. None of them may be
-    // silently unbounded (i.e. they must be `Some(_)`). The closure takes the
-    // human-readable name so a failure points at the exact limit.
-    let bounded: &[(&str, bool)] = &[
-        ("max_processes", limits.max_processes.is_some()),
-        ("max_open_fds", limits.max_open_fds.is_some()),
-        ("max_pipes", limits.max_pipes.is_some()),
-        ("max_ptys", limits.max_ptys.is_some()),
-        ("max_sockets", limits.max_sockets.is_some()),
-        ("max_connections", limits.max_connections.is_some()),
-        (
-            "max_socket_buffered_bytes",
-            limits.max_socket_buffered_bytes.is_some(),
-        ),
-        (
-            "max_socket_datagram_queue_len",
-            limits.max_socket_datagram_queue_len.is_some(),
-        ),
-        (
-            "max_filesystem_bytes",
-            limits.max_filesystem_bytes.is_some(),
-        ),
-        ("max_inode_count", limits.max_inode_count.is_some()),
-    ];
-
-    let unbounded: Vec<&str> = bounded
-        .iter()
-        .filter(|(_, is_bounded)| !is_bounded)
-        .map(|(name, _)| *name)
-        .collect();
-
-    assert!(
-        unbounded.is_empty(),
-        "safety-critical NON-TIME resource limit(s) are silently unbounded by \
-default (must be Some(_)): {unbounded:?}. If a limit is intentionally being \
-made opt-in, that is a security-policy change -- review it before relaxing \
-this guard."
-    );
-
-    // Defaults must also be non-zero (a 0 cap would be unusable, and a refactor
-    // that zeroed them out would be just as broken as leaving them unbounded).
-    assert!(limits.max_processes.unwrap() > 0);
-    assert!(limits.max_open_fds.unwrap() > 0);
-    assert!(limits.max_sockets.unwrap() > 0);
-    assert!(limits.max_filesystem_bytes.unwrap() > 0);
-    assert!(limits.max_inode_count.unwrap() > 0);
-}
-
-#[test]
-fn time_budgets_remain_opt_in() {
-    // Documents the intentional posture: CPU / wall-clock budgets are opt-in,
-    // so there is no default time cap to assert. `max_blocking_read_ms` is a
-    // per-syscall blocking-read timeout (a safety backstop for hung reads),
-    // NOT a CPU/wall-clock execution budget, so we leave it untouched here.
-    //
-    // This test exists so that if someone later adds a *default* CPU/wall-clock
-    // cap they are reminded to reconcile it with the "time budgets are opt-in"
-    // decision rather than this test silently passing on stale assumptions.
-    let limits = ResourceLimits::default();
-    // No assertion that a CPU/wall budget is set: that is correct today.
-    let _ = limits.max_blocking_read_ms;
-}
diff --git a/crates/kernel/tests/device_layer.rs b/crates/kernel/tests/device_layer.rs
deleted file mode 100644
index 772d3ebbd..000000000
--- a/crates/kernel/tests/device_layer.rs
+++ /dev/null
@@ -1,207 +0,0 @@
-use secure_exec_kernel::device_layer::create_device_layer;
-use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::resource_accounting::ResourceLimits;
-use secure_exec_kernel::vfs::{MemoryFileSystem, VfsResult, VirtualFileSystem};
-use std::fmt::Debug;
-
-fn assert_error_code<T: Debug>(result: VfsResult<T>, expected: &str) {
-    let error = result.expect_err("operation should fail");
-    assert_eq!(error.code(), expected);
-}
-
-fn create_test_vfs() -> impl VirtualFileSystem {
-    create_device_layer(MemoryFileSystem::new())
-}
-
-fn assert_not_trivial_pattern(bytes: &[u8]) {
-    assert!(bytes.iter().any(|byte| *byte != 0));
-    assert!(
-        bytes.windows(2).any(|window| window[0] != window[1]),
-        "random data should not collapse to a repeated byte"
-    );
-
-    let first_step = bytes[1].wrapping_sub(bytes[0]);
-    assert!(
-        bytes
-            .windows(2)
-            .any(|window| window[1].wrapping_sub(window[0]) != first_step),
-        "random data should not look like a simple arithmetic progression"
-    );
-}
-
-#[test]
-fn special_devices_expose_expected_read_and_write_behavior() {
-    let mut filesystem = create_test_vfs();
-
-    assert_eq!(
-        filesystem
-            .read_file("/dev/null")
-            .expect("read /dev/null")
-            .len(),
-        0
-    );
-
-    filesystem
-        .write_file("/dev/zero", "ignored")
-        .expect("write /dev/zero");
-    let zeroes = filesystem
-        .pread("/dev/zero", 0, 5)
-        .expect("pread 5 bytes from /dev/zero");
-    assert_eq!(zeroes.len(), 5);
-    assert!(zeroes.iter().all(|byte| *byte == 0));
-
-    let first = filesystem
-        .pread("/dev/urandom", 0, 1024)
-        .expect("pread /dev/urandom");
-    let second = filesystem
-        .pread("/dev/urandom", 0, 1024 * 1024)
-        .expect("pread 1MiB from /dev/urandom");
-    assert_eq!(first.len(), 1024);
-    assert_eq!(second.len(), 1024 * 1024);
-    assert_not_trivial_pattern(&first);
-    assert_not_trivial_pattern(&second[..1024]);
-    assert_ne!(first, second);
-}
-
-#[test]
-fn kernel_direct_device_pread_obeys_resource_limits_before_allocation() {
-    let mut config = KernelVmConfig::new("vm-device-pread-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_pread_bytes: Some(4),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-
-    let error = kernel
-        .pread_file("/dev/zero", 0, 5)
-        .expect_err("oversized direct device pread should be rejected");
-    assert_eq!(error.code(), "EINVAL");
-    assert!(
-        error.to_string().contains("pread length 5"),
-        "unexpected error: {error}"
-    );
-
-    assert_eq!(
-        kernel
-            .pread_file("/dev/zero", 0, 4)
-            .expect("bounded direct device pread should succeed"),
-        vec![0; 4]
-    );
-}
-
-#[test]
-fn device_paths_exist_and_stat_as_devices() {
-    let mut filesystem = create_test_vfs();
-
-    for path in [
-        "/dev/null",
-        "/dev/zero",
-        "/dev/stdin",
-        "/dev/stdout",
-        "/dev/stderr",
-        "/dev/urandom",
-        "/dev",
-    ] {
-        assert!(filesystem.exists(path), "{path} should exist");
-    }
-
-    let device_stat = filesystem.stat("/dev/null").expect("stat /dev/null");
-    assert!(!device_stat.is_directory);
-    assert_eq!(device_stat.mode, 0o666);
-
-    let dir_stat = filesystem.stat("/dev").expect("stat /dev");
-    assert!(dir_stat.is_directory);
-    assert_eq!(dir_stat.mode, 0o755);
-}
-
-#[test]
-fn readdir_lists_known_device_entries() {
-    let mut filesystem = create_test_vfs();
-    let entries = filesystem.read_dir("/dev").expect("read /dev");
-
-    assert!(entries.contains(&String::from("null")));
-    assert!(entries.contains(&String::from("zero")));
-    assert!(entries.contains(&String::from("stdin")));
-    assert!(entries.contains(&String::from("fd")));
-}
-
-#[test]
-fn stdio_devices_behave_like_write_sinks_without_backing_vfs_state() {
-    let mut filesystem = create_test_vfs();
-
-    assert_error_code(filesystem.read_file("/dev/stdin"), "ENOENT");
-    assert_error_code(filesystem.read_file("/dev/stdout"), "ENOENT");
-    assert_error_code(filesystem.read_file("/dev/stderr"), "ENOENT");
-
-    filesystem
-        .write_file("/dev/stdout", "output")
-        .expect("write /dev/stdout");
-    filesystem
-        .write_file("/dev/stderr", "error output")
-        .expect("write /dev/stderr");
-    assert_eq!(
-        filesystem
-            .append_file("/dev/stdout", "more output")
-            .expect("append /dev/stdout"),
-        "more output".len() as u64
-    );
-    filesystem
-        .truncate("/dev/stderr", 0)
-        .expect("truncate /dev/stderr");
-
-    assert_error_code(filesystem.read_file("/dev/stdout"), "ENOENT");
-    assert_error_code(filesystem.read_file("/dev/stderr"), "ENOENT");
-}
-
-#[test]
-fn mutating_device_paths_fails_closed_or_noops_like_the_legacy_layer() {
-    let mut filesystem = create_test_vfs();
-    filesystem
-        .write_file("/tmp/a.txt", "data")
-        .expect("write regular file");
-
-    assert_error_code(filesystem.remove_file("/dev/null"), "EPERM");
-    assert_error_code(filesystem.rename("/dev/null", "/tmp/x"), "EPERM");
-    assert_error_code(filesystem.rename("/tmp/a.txt", "/dev/null"), "EPERM");
-    assert_error_code(filesystem.link("/dev/null", "/tmp/devlink"), "EPERM");
-
-    filesystem
-        .truncate("/dev/null", 0)
-        .expect("truncate /dev/null");
-    assert_eq!(
-        filesystem
-            .read_file("/dev/null")
-            .expect("read /dev/null")
-            .len(),
-        0
-    );
-}
-
-#[test]
-fn realpath_and_non_device_passthrough_match_legacy_behavior() {
-    let mut filesystem = create_test_vfs();
-
-    assert_eq!(
-        filesystem
-            .realpath("/dev/null")
-            .expect("realpath /dev/null"),
-        "/dev/null"
-    );
-    assert_eq!(
-        filesystem.realpath("/dev/fd").expect("realpath /dev/fd"),
-        "/dev/fd"
-    );
-
-    filesystem
-        .write_file("/tmp/test.txt", "hello")
-        .expect("write regular file");
-    assert_eq!(
-        filesystem
-            .read_text_file("/tmp/test.txt")
-            .expect("read regular file"),
-        "hello"
-    );
-}
diff --git a/crates/kernel/tests/dns_resolution.rs b/crates/kernel/tests/dns_resolution.rs
deleted file mode 100644
index c56a28220..000000000
--- a/crates/kernel/tests/dns_resolution.rs
+++ /dev/null
@@ -1,207 +0,0 @@
-use hickory_resolver::proto::rr::{Record, RecordType};
-use secure_exec_kernel::dns::{
-    DnsConfig, DnsLookupPolicy, DnsLookupRequest, DnsRecordLookupRequest, DnsResolver,
-    DnsResolverError,
-};
-use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig};
-use secure_exec_kernel::permissions::{
-    NetworkAccessRequest, NetworkOperation, PermissionDecision, Permissions,
-};
-use secure_exec_kernel::vfs::MemoryFileSystem;
-use std::net::{IpAddr, Ipv4Addr, SocketAddr};
-use std::sync::{Arc, Mutex};
-
-#[derive(Debug, Clone)]
-struct MockDnsResolver {
-    requests: Arc<Mutex<Vec<DnsLookupRequest>>>,
-    record_requests: Arc<Mutex<Vec<DnsRecordLookupRequest>>>,
-    response: Vec<IpAddr>,
-}
-
-impl MockDnsResolver {
-    fn new(response: Vec<IpAddr>) -> Self {
-        Self {
-            requests: Arc::new(Mutex::new(Vec::new())),
-            record_requests: Arc::new(Mutex::new(Vec::new())),
-            response,
-        }
-    }
-
-    fn requests(&self) -> Vec<DnsLookupRequest> {
-        self.requests.lock().expect("mock requests").clone()
-    }
-
-    fn record_requests(&self) -> Vec<DnsRecordLookupRequest> {
-        self.record_requests
-            .lock()
-            .expect("mock record requests")
-            .clone()
-    }
-}
-
-impl DnsResolver for MockDnsResolver {
-    fn lookup_ip(&self, request: &DnsLookupRequest) -> Result<Vec<IpAddr>, DnsResolverError> {
-        self.requests
-            .lock()
-            .expect("mock requests")
-            .push(request.clone());
-        Ok(self.response.clone())
-    }
-
-    fn lookup_records(
-        &self,
-        request: &DnsRecordLookupRequest,
-    ) -> Result<Vec<Record>, DnsResolverError> {
-        self.record_requests
-            .lock()
-            .expect("mock record requests")
-            .push(request.clone());
-        Ok(Vec::new())
-    }
-}
-
-fn new_kernel(config: KernelVmConfig) -> KernelVm<MemoryFileSystem> {
-    KernelVm::new(MemoryFileSystem::new(), config)
-}
-
-#[test]
-fn kernel_dns_resolution_prefers_overrides_before_the_resolver() {
-    let resolver = MockDnsResolver::new(vec![IpAddr::V4(Ipv4Addr::new(198, 51, 100, 44))]);
-    let mut config = KernelVmConfig::new("vm-dns-override");
-    config.permissions = Permissions::allow_all();
-    config.dns = DnsConfig {
-        name_servers: vec!["203.0.113.53:5353"
-            .parse::<SocketAddr>()
-            .expect("nameserver")],
-        overrides: std::iter::once((
-            String::from("example.test"),
-            vec![IpAddr::V4(Ipv4Addr::new(127, 0, 0, 1))],
-        ))
-        .collect(),
-    };
-    config.dns_resolver = Arc::new(resolver.clone());
-    let kernel = new_kernel(config);
-
-    let resolution = kernel
-        .resolve_dns(" Example.Test. ", DnsLookupPolicy::CheckPermissions)
-        .expect("resolve override hostname");
-
-    assert_eq!(resolution.hostname(), "example.test");
-    assert_eq!(resolution.source().as_str(), "override");
-    assert_eq!(
-        resolution.addresses(),
-        &[IpAddr::V4(Ipv4Addr::new(127, 0, 0, 1))]
-    );
-    assert!(
-        resolver.requests().is_empty(),
-        "override lookup should not reach the resolver"
-    );
-}
-
-#[test]
-fn kernel_dns_resolution_passes_vm_nameservers_into_the_resolver() {
-    let resolver = MockDnsResolver::new(vec![
-        IpAddr::V4(Ipv4Addr::new(198, 51, 100, 7)),
-        IpAddr::V4(Ipv4Addr::new(198, 51, 100, 7)),
-    ]);
-    let mut config = KernelVmConfig::new("vm-dns-resolver");
-    config.permissions = Permissions::allow_all();
-    config.dns = DnsConfig {
-        name_servers: vec!["203.0.113.53:5353"
-            .parse::<SocketAddr>()
-            .expect("nameserver")],
-        overrides: Default::default(),
-    };
-    config.dns_resolver = Arc::new(resolver.clone());
-    let kernel = new_kernel(config);
-
-    let resolution = kernel
-        .resolve_dns("resolver.example.test", DnsLookupPolicy::CheckPermissions)
-        .expect("resolve via mock resolver");
-
-    assert_eq!(resolution.source().as_str(), "resolver");
-    assert_eq!(
-        resolution.addresses(),
-        &[IpAddr::V4(Ipv4Addr::new(198, 51, 100, 7))]
-    );
-
-    let requests = resolver.requests();
-    assert_eq!(requests.len(), 1);
-    assert_eq!(requests[0].hostname(), "resolver.example.test");
-    assert_eq!(
-        requests[0].name_servers(),
-        &["203.0.113.53:5353"
-            .parse::<SocketAddr>()
-            .expect("nameserver")]
-    );
-}
-
-#[test]
-fn kernel_dns_resolution_checks_network_permissions_when_requested() {
-    let permission_requests = Arc::new(Mutex::new(Vec::<NetworkAccessRequest>::new()));
-    let permission_requests_for_check = Arc::clone(&permission_requests);
-    let resolver = MockDnsResolver::new(vec![IpAddr::V4(Ipv4Addr::new(127, 0, 0, 1))]);
-    let mut config = KernelVmConfig::new("vm-dns-permissions");
-    config.permissions = Permissions {
-        network: Some(Arc::new(move |request: &NetworkAccessRequest| {
-            permission_requests_for_check
-                .lock()
-                .expect("permission requests")
-                .push(request.clone());
-            PermissionDecision::deny("dns denied")
-        })),
-        ..Permissions::allow_all()
-    };
-    config.dns_resolver = Arc::new(resolver);
-    let kernel = new_kernel(config);
-
-    let error = kernel
-        .resolve_dns("example.test", DnsLookupPolicy::CheckPermissions)
-        .expect_err("dns permission should deny lookup");
-    assert_eq!(error.code(), "EACCES");
-
-    let requests = permission_requests.lock().expect("permission requests");
-    assert_eq!(requests.len(), 1);
-    assert_eq!(requests[0].vm_id, "vm-dns-permissions");
-    assert_eq!(requests[0].op, NetworkOperation::Dns);
-    assert_eq!(requests[0].resource, "dns://example.test");
-}
-
-#[test]
-fn kernel_dns_resolution_denies_by_default_before_resolver_lookup() {
-    let resolver = MockDnsResolver::new(vec![IpAddr::V4(Ipv4Addr::new(127, 0, 0, 1))]);
-    let mut config = KernelVmConfig::new("vm-dns-default-deny");
-    config.dns_resolver = Arc::new(resolver.clone());
-    let kernel = new_kernel(config);
-
-    let lookup_error = kernel
-        .resolve_dns("example.test", DnsLookupPolicy::CheckPermissions)
-        .expect_err("missing network hook should deny address lookup");
-    assert_eq!(lookup_error.code(), "EACCES");
-    assert!(
-        lookup_error.to_string().contains("dns://example.test"),
-        "unexpected error: {lookup_error}"
-    );
-
-    let record_error = kernel
-        .resolve_dns_records(
-            "example.test",
-            RecordType::A,
-            DnsLookupPolicy::CheckPermissions,
-        )
-        .expect_err("missing network hook should deny record lookup");
-    assert_eq!(record_error.code(), "EACCES");
-    assert!(
-        record_error.to_string().contains("dns://example.test"),
-        "unexpected error: {record_error}"
-    );
-
-    assert!(
-        resolver.requests().is_empty(),
-        "permission denial should happen before address resolver lookup"
-    );
-    assert!(
-        resolver.record_requests().is_empty(),
-        "permission denial should happen before record resolver lookup"
-    );
-}
diff --git a/crates/kernel/tests/fd_table.rs b/crates/kernel/tests/fd_table.rs
deleted file mode 100644
index cbd9d95b1..000000000
--- a/crates/kernel/tests/fd_table.rs
+++ /dev/null
@@ -1,462 +0,0 @@
-use secure_exec_kernel::fd_table::{
-    FdResult, FdTableManager, FileDescription, FileLockManager, FileLockTarget, FlockOperation,
-    FD_CLOEXEC, FILETYPE_CHARACTER_DEVICE, FILETYPE_REGULAR_FILE, F_DUPFD, F_GETFD, F_GETFL,
-    F_SETFD, F_SETFL, LOCK_EX, LOCK_NB, LOCK_SH, LOCK_UN, MAX_FDS_PER_PROCESS, O_APPEND,
-    O_NONBLOCK, O_RDONLY, O_WRONLY,
-};
-use std::fmt::Debug;
-use std::sync::Arc;
-
-fn assert_error_code<T: Debug>(result: FdResult<T>, expected: &str) {
-    let error = result.expect_err("operation should fail");
-    assert_eq!(error.code(), expected);
-}
-
-#[test]
-fn preallocates_stdio_fds_0_1_2() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let table = manager.get(1).expect("FD table should exist");
-    let stdin = table.get(0).expect("stdin entry");
-    let stdout = table.get(1).expect("stdout entry");
-    let stderr = table.get(2).expect("stderr entry");
-
-    assert_eq!(stdin.filetype, FILETYPE_CHARACTER_DEVICE);
-    assert_eq!(stdout.filetype, FILETYPE_CHARACTER_DEVICE);
-    assert_eq!(stderr.filetype, FILETYPE_CHARACTER_DEVICE);
-
-    assert_eq!(stdin.description.flags(), O_RDONLY);
-    assert_eq!(stdout.description.flags(), O_WRONLY);
-    assert_eq!(stderr.description.flags(), O_WRONLY);
-}
-
-#[test]
-fn opens_new_fds_starting_at_three() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let fd = manager
-        .get_mut(1)
-        .expect("FD table should exist")
-        .open("/tmp/test.txt", O_RDONLY)
-        .expect("open regular file");
-
-    assert_eq!(fd, 3);
-}
-
-#[test]
-fn dup_shares_the_same_file_description() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let table = manager.get_mut(1).expect("FD table should exist");
-    let fd = table
-        .open("/tmp/test.txt", O_RDONLY)
-        .expect("open source FD");
-    let dup_fd = table.dup(fd).expect("duplicate FD");
-
-    let original = Arc::clone(&table.get(fd).expect("source entry").description);
-    let duplicated = Arc::clone(&table.get(dup_fd).expect("dup entry").description);
-
-    assert_ne!(dup_fd, fd);
-    assert!(Arc::ptr_eq(&original, &duplicated));
-}
-
-#[test]
-fn dup2_replaces_the_target_fd() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let table = manager.get_mut(1).expect("FD table should exist");
-    let fd = table
-        .open("/tmp/test.txt", O_RDONLY)
-        .expect("open source FD");
-    table.dup2(fd, 10).expect("dup2 into target FD");
-
-    let source = Arc::clone(&table.get(fd).expect("source entry").description);
-    let target = Arc::clone(&table.get(10).expect("target entry").description);
-
-    assert!(Arc::ptr_eq(&source, &target));
-}
-
-#[test]
-fn dup2_rejects_target_fds_past_the_process_limit() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let table = manager.get_mut(1).expect("FD table should exist");
-    let fd = table
-        .open("/tmp/test.txt", O_RDONLY)
-        .expect("open source FD");
-    let result = table.dup2(fd, MAX_FDS_PER_PROCESS as u32);
-
-    assert_error_code(result, "EBADF");
-}
-
-#[test]
-fn open_with_rejects_target_fds_past_the_process_limit() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let table = manager.get_mut(1).expect("FD table should exist");
-    let description = Arc::new(FileDescription::new(999, "/tmp/test.txt", O_RDONLY));
-    let result = table.open_with(
-        description,
-        FILETYPE_REGULAR_FILE,
-        Some(MAX_FDS_PER_PROCESS as u32),
-    );
-
-    assert_error_code(result, "EBADF");
-}
-
-#[test]
-fn open_with_replaces_target_fd_and_releases_previous_entry() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let table = manager.get_mut(1).expect("FD table should exist");
-    let target_fd = table
-        .open("/tmp/old.txt", O_RDONLY)
-        .expect("open target FD");
-    let previous = Arc::clone(&table.get(target_fd).expect("target entry").description);
-    let replacement = Arc::new(FileDescription::new(999, "/tmp/new.txt", O_RDONLY));
-
-    assert_eq!(previous.ref_count(), 1);
-
-    let opened = table
-        .open_with(
-            Arc::clone(&replacement),
-            FILETYPE_REGULAR_FILE,
-            Some(target_fd),
-        )
-        .expect("replace target FD");
-
-    assert_eq!(opened, target_fd);
-    assert_eq!(previous.ref_count(), 0);
-    assert_eq!(replacement.ref_count(), 2);
-    assert!(Arc::ptr_eq(
-        &table.get(target_fd).expect("replacement entry").description,
-        &replacement
-    ));
-}
-
-#[test]
-fn configurable_process_fd_limit_returns_emfile() {
-    let mut manager = FdTableManager::with_max_fds(5);
-    manager.create(1);
-
-    let table = manager.get_mut(1).expect("FD table should exist");
-    table
-        .open("/tmp/test-1.txt", O_RDONLY)
-        .expect("first non-stdio FD should open");
-    table
-        .open("/tmp/test-2.txt", O_RDONLY)
-        .expect("second non-stdio FD should open");
-
-    let result = table.open("/tmp/test-3.txt", O_RDONLY);
-    assert_error_code(result, "EMFILE");
-}
-
-#[test]
-fn close_decrements_refcount() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let table = manager.get_mut(1).expect("FD table should exist");
-    let fd = table
-        .open("/tmp/test.txt", O_RDONLY)
-        .expect("open source FD");
-    let dup_fd = table.dup(fd).expect("duplicate FD");
-    let description = Arc::clone(&table.get(fd).expect("source entry").description);
-
-    assert_eq!(description.ref_count(), 2);
-    assert!(table.close(dup_fd));
-    assert_eq!(description.ref_count(), 1);
-}
-
-#[test]
-fn fork_creates_an_independent_table_with_shared_descriptions() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-    let fd = manager
-        .get_mut(1)
-        .expect("parent table should exist")
-        .open("/tmp/test.txt", O_RDONLY)
-        .expect("open source FD");
-
-    manager.fork(1, 2);
-
-    let parent_description = Arc::clone(
-        &manager
-            .get(1)
-            .expect("parent table should exist")
-            .get(fd)
-            .expect("parent FD entry")
-            .description,
-    );
-    let child_description = {
-        let child = manager.get_mut(2).expect("child table should exist");
-        let description = Arc::clone(&child.get(fd).expect("child FD entry").description);
-        assert!(child.close(fd));
-        description
-    };
-
-    assert!(Arc::ptr_eq(&parent_description, &child_description));
-    assert!(manager
-        .get(1)
-        .expect("parent table should still exist")
-        .get(fd)
-        .is_some());
-}
-
-#[test]
-fn stat_returns_fd_metadata() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let fd = manager
-        .get_mut(1)
-        .expect("FD table should exist")
-        .open_with_filetype("/tmp/test.txt", O_WRONLY, FILETYPE_REGULAR_FILE)
-        .expect("open regular file");
-    let stat = manager
-        .get(1)
-        .expect("FD table should exist")
-        .stat(fd)
-        .expect("stat FD");
-
-    assert_eq!(stat.filetype, FILETYPE_REGULAR_FILE);
-    assert_eq!(stat.flags, O_WRONLY);
-}
-
-#[test]
-fn nonblocking_status_flags_are_tracked_per_fd_entry() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let table = manager.get_mut(1).expect("FD table should exist");
-    let fd = table
-        .open_with_filetype(
-            "/tmp/test.txt",
-            O_WRONLY | O_NONBLOCK,
-            FILETYPE_REGULAR_FILE,
-        )
-        .expect("open regular file");
-    let dup_fd = table
-        .dup_with_status_flags(fd, Some(0))
-        .expect("duplicate regular file without nonblocking");
-
-    let original = table.stat(fd).expect("stat original FD");
-    let duplicated = table.stat(dup_fd).expect("stat duplicate FD");
-
-    assert_eq!(original.flags, O_WRONLY | O_NONBLOCK);
-    assert_eq!(duplicated.flags, O_WRONLY);
-    assert_eq!(
-        table.get(fd).expect("original entry").description.flags(),
-        O_WRONLY
-    );
-    assert_eq!(
-        table
-            .get(dup_fd)
-            .expect("duplicate entry")
-            .description
-            .flags(),
-        O_WRONLY
-    );
-}
-
-#[test]
-fn fcntl_getfl_and_setfl_report_visible_status_flags() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let table = manager.get_mut(1).expect("FD table should exist");
-    let fd = table
-        .open_with_filetype("/tmp/test.txt", O_WRONLY | O_APPEND, FILETYPE_REGULAR_FILE)
-        .expect("open append file");
-
-    assert_eq!(
-        table.fcntl(fd, F_GETFL, 0).expect("initial F_GETFL"),
-        O_WRONLY | O_APPEND
-    );
-
-    table
-        .fcntl(fd, F_SETFL, O_APPEND | O_NONBLOCK)
-        .expect("set append and nonblocking");
-
-    assert_eq!(
-        table.fcntl(fd, F_GETFL, 0).expect("updated F_GETFL"),
-        O_WRONLY | O_APPEND | O_NONBLOCK
-    );
-    assert_eq!(
-        table.stat(fd).expect("stat after F_SETFL").flags,
-        O_WRONLY | O_APPEND | O_NONBLOCK
-    );
-}
-
-#[test]
-fn fcntl_fd_flags_are_per_descriptor() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let table = manager.get_mut(1).expect("FD table should exist");
-    let fd = table
-        .open("/tmp/test.txt", O_RDONLY)
-        .expect("open source FD");
-    let dup_fd = table.dup(fd).expect("duplicate FD");
-
-    table
-        .fcntl(fd, F_SETFD, FD_CLOEXEC)
-        .expect("set cloexec on source");
-
-    assert_eq!(
-        table.fcntl(fd, F_GETFD, 0).expect("read source FD flags"),
-        FD_CLOEXEC
-    );
-    assert_eq!(
-        table
-            .fcntl(dup_fd, F_GETFD, 0)
-            .expect("read duplicate FD flags"),
-        0
-    );
-}
-
-#[test]
-fn fcntl_dupfd_uses_lowest_available_fd_at_or_above_minimum() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let table = manager.get_mut(1).expect("FD table should exist");
-    let fd = table
-        .open("/tmp/test.txt", O_RDONLY)
-        .expect("open source FD");
-    let filler_a = table.open("/tmp/a.txt", O_RDONLY).expect("open filler a");
-    let filler_b = table.open("/tmp/b.txt", O_RDONLY).expect("open filler b");
-    let filler_c = table.open("/tmp/c.txt", O_RDONLY).expect("open filler c");
-    assert_eq!((fd, filler_a, filler_b, filler_c), (3, 4, 5, 6));
-
-    assert!(table.close(5), "fd 5 should be available for F_DUPFD reuse");
-
-    let duplicated = table
-        .fcntl(fd, F_DUPFD, 5)
-        .expect("duplicate into lowest fd >= 5");
-
-    assert_eq!(duplicated, 5);
-    assert_eq!(
-        table
-            .fcntl(duplicated, F_GETFD, 0)
-            .expect("new duplicate should clear FD flags"),
-        0
-    );
-}
-
-#[test]
-fn fcntl_dupfd_rejects_minimum_fd_past_the_process_limit() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let table = manager.get_mut(1).expect("FD table should exist");
-    let fd = table
-        .open("/tmp/test.txt", O_RDONLY)
-        .expect("open source FD");
-
-    assert_error_code(
-        table.fcntl(fd, F_DUPFD, MAX_FDS_PER_PROCESS as u32),
-        "EINVAL",
-    );
-}
-
-#[test]
-fn stat_reports_ebadf_for_invalid_fd() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let result = manager.get(1).expect("FD table should exist").stat(999);
-
-    assert_error_code(result, "EBADF");
-}
-
-#[test]
-fn open_reuses_a_freed_fd_after_next_fd_moves_past_the_limit() {
-    let mut manager = FdTableManager::new();
-    manager.create(1);
-
-    let table = manager.get_mut(1).expect("FD table should exist");
-    let mut opened = Vec::new();
-    for _ in 3..MAX_FDS_PER_PROCESS {
-        opened.push(
-            table
-                .open("/tmp/test.txt", O_RDONLY)
-                .expect("open should fill remaining slots"),
-        );
-    }
-
-    assert!(table.close(5), "fd 5 should be open before reuse");
-
-    let reused = table
-        .open("/tmp/reused.txt", O_RDONLY)
-        .expect("open should wrap and reuse a freed fd");
-    assert_eq!(reused, 5);
-}
-
-#[test]
-fn flock_operation_parser_accepts_supported_modes() {
-    assert_eq!(
-        FlockOperation::from_bits(LOCK_SH).expect("shared operation"),
-        FlockOperation::Shared { nonblocking: false }
-    );
-    assert_eq!(
-        FlockOperation::from_bits(LOCK_EX | LOCK_NB).expect("exclusive nonblocking operation"),
-        FlockOperation::Exclusive { nonblocking: true }
-    );
-    assert_eq!(
-        FlockOperation::from_bits(LOCK_UN).expect("unlock operation"),
-        FlockOperation::Unlock
-    );
-}
-
-#[test]
-fn flock_manager_enforces_shared_and_exclusive_conflicts() {
-    let locks = FileLockManager::new();
-    let target = FileLockTarget::new(42);
-
-    locks
-        .apply(1, target, FlockOperation::Shared { nonblocking: false })
-        .expect("first shared lock");
-    locks
-        .apply(2, target, FlockOperation::Shared { nonblocking: false })
-        .expect("second shared lock");
-
-    let blocked = locks.apply(3, target, FlockOperation::Exclusive { nonblocking: true });
-    assert_error_code(blocked, "EWOULDBLOCK");
-
-    locks
-        .apply(1, target, FlockOperation::Unlock)
-        .expect("unlock first shared lock");
-    locks
-        .apply(2, target, FlockOperation::Unlock)
-        .expect("unlock second shared lock");
-    locks
-        .apply(3, target, FlockOperation::Exclusive { nonblocking: true })
-        .expect("exclusive lock becomes available");
-}
-
-#[test]
-fn flock_manager_treats_reacquire_on_same_description_as_non_conflicting() {
-    let locks = FileLockManager::new();
-    let target = FileLockTarget::new(7);
-
-    locks
-        .apply(99, target, FlockOperation::Exclusive { nonblocking: false })
-        .expect("initial exclusive lock");
-    locks
-        .apply(99, target, FlockOperation::Exclusive { nonblocking: true })
-        .expect("same description can reacquire exclusive lock");
-    locks
-        .apply(99, target, FlockOperation::Shared { nonblocking: true })
-        .expect("same description can downgrade to shared lock");
-
-    let shared = locks.apply(100, target, FlockOperation::Shared { nonblocking: true });
-    shared.expect("downgrade should allow other shared holders");
-}
diff --git a/crates/kernel/tests/identity.rs b/crates/kernel/tests/identity.rs
deleted file mode 100644
index 4c5cb9ca1..000000000
--- a/crates/kernel/tests/identity.rs
+++ /dev/null
@@ -1,216 +0,0 @@
-use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig, VirtualProcessOptions};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::resource_accounting::ResourceLimits;
-use secure_exec_kernel::user::UserConfig;
-use secure_exec_kernel::vfs::MemoryFileSystem;
-use std::collections::BTreeMap;
-use std::thread;
-use std::time::Duration;
-
-fn configured_kernel() -> KernelVm<MemoryFileSystem> {
-    let mut config = KernelVmConfig::new("vm-identity");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_wasm_memory_bytes: Some(256 * 1024 * 1024),
-        ..ResourceLimits::default()
-    };
-    config.user = UserConfig {
-        uid: Some(501),
-        gid: Some(502),
-        euid: Some(700),
-        egid: Some(701),
-        username: Some(String::from("deploy")),
-        homedir: Some(String::from("/srv/deploy")),
-        shell: Some(String::from("/bin/bash")),
-        gecos: Some(String::from("Deploy User")),
-        group_name: Some(String::from("deployers")),
-        supplementary_gids: vec![44, 502, 900],
-    };
-    KernelVm::new(MemoryFileSystem::new(), config)
-}
-
-fn read_utf8(kernel: &mut KernelVm<MemoryFileSystem>, path: &str) -> String {
-    String::from_utf8(kernel.read_file(path).expect("read proc file")).expect("utf8 proc file")
-}
-
-fn read_utf8_for_process(
-    kernel: &mut KernelVm<MemoryFileSystem>,
-    requester_driver: &str,
-    pid: u32,
-    path: &str,
-) -> String {
-    String::from_utf8(
-        kernel
-            .read_file_for_process(requester_driver, pid, path)
-            .expect("read proc file for process"),
-    )
-    .expect("utf8 proc file")
-}
-
-fn parse_status_fields(body: &str) -> BTreeMap<&str, &str> {
-    body.lines()
-        .filter_map(|line| line.split_once(':'))
-        .map(|(key, value)| (key, value.trim()))
-        .collect()
-}
-
-#[test]
-fn identity_syscalls_and_process_metadata_use_kernel_managed_values() {
-    let mut kernel = configured_kernel();
-
-    let process = kernel
-        .create_virtual_process(
-            "identity-driver",
-            "identity-driver",
-            "identity-check",
-            Vec::new(),
-            VirtualProcessOptions::default(),
-        )
-        .expect("create identity process");
-    let pid = process.pid();
-
-    assert_eq!(
-        kernel
-            .process_identity("identity-driver", pid)
-            .expect("read process identity")
-            .supplementary_gids,
-        vec![502, 44, 900]
-    );
-    assert_eq!(kernel.getuid("identity-driver", pid).expect("getuid"), 501);
-    assert_eq!(kernel.getgid("identity-driver", pid).expect("getgid"), 502);
-    assert_eq!(
-        kernel.geteuid("identity-driver", pid).expect("geteuid"),
-        700
-    );
-    assert_eq!(
-        kernel.getegid("identity-driver", pid).expect("getegid"),
-        701
-    );
-    assert_eq!(
-        kernel.getgroups("identity-driver", pid).expect("getgroups"),
-        vec![502, 44, 900]
-    );
-
-    let process_info = kernel
-        .list_processes()
-        .get(&pid)
-        .expect("process info")
-        .clone();
-    assert_eq!(process_info.identity.uid, 501);
-    assert_eq!(process_info.identity.gid, 502);
-    assert_eq!(process_info.identity.euid, 700);
-    assert_eq!(process_info.identity.egid, 701);
-    assert_eq!(process_info.identity.supplementary_gids, vec![502, 44, 900]);
-
-    assert_eq!(
-        kernel.getpwuid(501).expect("primary uid lookup"),
-        "deploy:x:501:502:Deploy User:/srv/deploy:/bin/bash"
-    );
-    let unknown_uid = kernel.getpwuid(77).expect_err("unknown uid should fail");
-    assert_eq!(unknown_uid.code(), "ENOENT");
-    assert_eq!(
-        kernel.getgrgid(502).expect("primary gid lookup"),
-        "deployers:x:502:deploy"
-    );
-    assert_eq!(
-        kernel.getgrgid(44).expect("supplementary gid lookup"),
-        "group44:x:44:deploy"
-    );
-    let unknown_gid = kernel.getgrgid(77).expect_err("unknown gid should fail");
-    assert_eq!(unknown_gid.code(), "ENOENT");
-}
-
-#[test]
-fn identity_queries_require_process_ownership() {
-    let mut kernel = configured_kernel();
-    let process = kernel
-        .create_virtual_process(
-            "identity-driver",
-            "identity-driver",
-            "identity-check",
-            Vec::new(),
-            VirtualProcessOptions::default(),
-        )
-        .expect("create identity process");
-
-    let error = kernel
-        .getuid("other-driver", process.pid())
-        .expect_err("foreign driver should be rejected");
-    assert_eq!(error.code(), "EPERM");
-}
-
-#[test]
-fn procfs_exposes_linux_like_identity_and_system_files() {
-    let mut kernel = configured_kernel();
-    let process = kernel
-        .create_virtual_process(
-            "identity-driver",
-            "identity-driver",
-            "identity-check",
-            Vec::new(),
-            VirtualProcessOptions::default(),
-        )
-        .expect("create identity process");
-    let pid = process.pid();
-
-    let proc_entries = kernel.read_dir("/proc").expect("read /proc");
-    assert!(proc_entries.contains(&String::from("cpuinfo")));
-    assert!(proc_entries.contains(&String::from("loadavg")));
-    assert!(proc_entries.contains(&String::from("meminfo")));
-    assert!(proc_entries.contains(&String::from("mounts")));
-    assert!(proc_entries.contains(&String::from("self")));
-    assert!(proc_entries.contains(&String::from("uptime")));
-    assert!(proc_entries.contains(&String::from("version")));
-    assert!(proc_entries.contains(&pid.to_string()));
-
-    let pid_entries = kernel
-        .read_dir(&format!("/proc/{pid}"))
-        .expect("read /proc/<pid>");
-    assert!(pid_entries.contains(&String::from("status")));
-
-    let status = read_utf8(&mut kernel, &format!("/proc/{pid}/status"));
-    let self_status =
-        read_utf8_for_process(&mut kernel, "identity-driver", pid, "/proc/self/status");
-    assert_eq!(status, self_status);
-
-    let status_fields = parse_status_fields(&status);
-    assert_eq!(status_fields["Name"], "identity-check");
-    assert_eq!(status_fields["State"], "R (running)");
-    assert_eq!(status_fields["Pid"], pid.to_string());
-    assert_eq!(status_fields["PPid"], "0");
-    assert_eq!(status_fields["Uid"], "501\t700\t700\t700");
-    assert_eq!(status_fields["Gid"], "502\t701\t701\t701");
-    assert_eq!(status_fields["VmSize"], "0 kB");
-    assert_eq!(status_fields["VmRSS"], "0 kB");
-    assert_eq!(status_fields["Threads"], "1");
-
-    let cpuinfo = read_utf8(&mut kernel, "/proc/cpuinfo");
-    assert!(cpuinfo.contains("processor\t: 0"));
-    assert!(cpuinfo.contains("model name\t: secure-exec Virtual CPU"));
-
-    let meminfo = read_utf8(&mut kernel, "/proc/meminfo");
-    assert!(meminfo.contains("MemTotal:  262144 kB"));
-    assert!(meminfo.contains("MemFree:   262144 kB"));
-    assert!(meminfo.contains("MemAvailable:262144 kB"));
-
-    let loadavg = read_utf8(&mut kernel, "/proc/loadavg");
-    assert!(loadavg.starts_with("0.00 0.00 0.00 1/1 "));
-    assert!(loadavg.ends_with('\n'));
-
-    thread::sleep(Duration::from_millis(20));
-    let uptime = read_utf8(&mut kernel, "/proc/uptime");
-    let uptime_parts = uptime.split_whitespace().collect::<Vec<_>>();
-    assert_eq!(uptime_parts.len(), 2);
-    let uptime_seconds = uptime_parts[0].parse::<f64>().expect("uptime seconds");
-    let idle_seconds = uptime_parts[1].parse::<f64>().expect("idle seconds");
-    assert!(uptime_seconds > 0.0);
-    assert!(idle_seconds >= uptime_seconds);
-
-    let version = read_utf8(&mut kernel, "/proc/version");
-    assert!(version.starts_with("Linux version 6.8.0-agentos"));
-
-    let status_stat = kernel
-        .stat(&format!("/proc/{pid}/status"))
-        .expect("stat proc status");
-    assert_eq!(status_stat.size, status.len() as u64);
-}
diff --git a/crates/kernel/tests/kernel_integration.rs b/crates/kernel/tests/kernel_integration.rs
deleted file mode 100644
index df4a1b1b5..000000000
--- a/crates/kernel/tests/kernel_integration.rs
+++ /dev/null
@@ -1,347 +0,0 @@
-use secure_exec_kernel::bridge::LifecycleState;
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig, SpawnOptions};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::process_table::SIGPIPE;
-use secure_exec_kernel::pty::LineDisciplineConfig;
-use secure_exec_kernel::vfs::MemoryFileSystem;
-use std::time::Duration;
-
-#[test]
-fn minimal_vm_lifecycle_transitions_between_ready_busy_and_terminated() {
-    let mut config = KernelVmConfig::new("vm-kernel");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    assert_eq!(kernel.state(), LifecycleState::Ready);
-
-    let process = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell");
-    assert_eq!(kernel.state(), LifecycleState::Busy);
-
-    let (master_fd, slave_fd, path) = kernel.open_pty("shell", process.pid()).expect("open pty");
-    assert!(path.starts_with("/dev/pts/"));
-    kernel
-        .pty_set_discipline(
-            "shell",
-            process.pid(),
-            master_fd,
-            LineDisciplineConfig {
-                canonical: Some(false),
-                echo: Some(false),
-                isig: Some(false),
-                ..Default::default()
-            },
-        )
-        .expect("set raw mode");
-
-    kernel
-        .fd_write("shell", process.pid(), master_fd, b"kernel-ready")
-        .expect("write PTY input");
-    let data = kernel
-        .fd_read("shell", process.pid(), slave_fd, 64)
-        .expect("read PTY slave");
-    assert_eq!(String::from_utf8(data).expect("valid utf8"), "kernel-ready");
-
-    process.finish(0);
-    let (_, exit_code) = kernel.wait_and_reap(process.pid()).expect("reap shell");
-    assert_eq!(exit_code, 0);
-    assert_eq!(kernel.state(), LifecycleState::Ready);
-    assert_eq!(kernel.resource_snapshot().fd_tables, 0);
-    assert_eq!(kernel.resource_snapshot().open_fds, 0);
-
-    kernel.dispose().expect("dispose kernel");
-    assert_eq!(kernel.state(), LifecycleState::Terminated);
-}
-
-#[test]
-fn dispose_kills_running_processes_and_cleans_special_resources() {
-    let mut config = KernelVmConfig::new("vm-dispose");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell");
-    let _ = kernel.open_pipe("shell", process.pid()).expect("open pipe");
-    let _ = kernel.open_pty("shell", process.pid()).expect("open pty");
-
-    kernel.dispose().expect("dispose kernel");
-    assert_eq!(kernel.state(), LifecycleState::Terminated);
-    assert_eq!(process.wait(Duration::from_millis(50)), Some(143));
-    assert_eq!(process.kill_signals(), vec![15]);
-
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.fd_tables, 0);
-    assert_eq!(snapshot.open_fds, 0);
-    assert_eq!(snapshot.pipes, 0);
-    assert_eq!(snapshot.ptys, 0);
-}
-
-#[test]
-fn process_exit_cleanup_closes_pipe_writers_and_returns_eof_to_readers() {
-    let mut config = KernelVmConfig::new("vm-process-exit-pipe");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let writer = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn writer");
-    let (read_fd, write_fd) = kernel
-        .open_pipe("shell", writer.pid())
-        .expect("open writer pipe");
-    let reader = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                parent_pid: Some(writer.pid()),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn reader");
-
-    kernel
-        .fd_close("shell", reader.pid(), write_fd)
-        .expect("close inherited write end");
-    kernel
-        .fd_write("shell", writer.pid(), write_fd, b"before-exit")
-        .expect("write pipe contents");
-    let bytes = kernel
-        .fd_read("shell", reader.pid(), read_fd, 64)
-        .expect("read pipe contents");
-    assert_eq!(String::from_utf8(bytes).expect("valid utf8"), "before-exit");
-
-    writer.finish(0);
-    assert_eq!(
-        kernel
-            .open_pipe("shell", writer.pid())
-            .expect_err("exited writer should lose PID ownership")
-            .code(),
-        "ESRCH"
-    );
-
-    let eof = kernel
-        .fd_read("shell", reader.pid(), read_fd, 64)
-        .expect("read EOF after writer exit");
-    assert!(eof.is_empty());
-}
-
-#[test]
-fn broken_pipe_writes_deliver_sigpipe_and_return_epipe() {
-    let mut config = KernelVmConfig::new("vm-broken-pipe-sigpipe");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let writer = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn writer");
-    let (read_fd, write_fd) = kernel
-        .open_pipe("shell", writer.pid())
-        .expect("open writer pipe");
-
-    kernel
-        .fd_close("shell", writer.pid(), read_fd)
-        .expect("close inherited read end");
-
-    let error = kernel
-        .fd_write("shell", writer.pid(), write_fd, b"fail")
-        .expect_err("broken pipe writes should fail");
-    assert_eq!(error.code(), "EPIPE");
-    assert_eq!(writer.kill_signals(), vec![SIGPIPE]);
-    assert_eq!(writer.wait(Duration::from_millis(50)), Some(128 + SIGPIPE));
-}
-
-#[test]
-fn process_exit_cleanup_removes_fd_tables_before_and_after_reap() {
-    let mut config = KernelVmConfig::new("vm-process-exit-fds");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn process");
-    let _ = kernel.open_pipe("shell", process.pid()).expect("open pipe");
-    let _ = kernel.open_pty("shell", process.pid()).expect("open pty");
-
-    process.finish(0);
-
-    let snapshot_after_exit = kernel.resource_snapshot();
-    assert_eq!(snapshot_after_exit.fd_tables, 0);
-    assert_eq!(snapshot_after_exit.open_fds, 0);
-    assert_eq!(snapshot_after_exit.pipes, 0);
-    assert_eq!(snapshot_after_exit.ptys, 0);
-
-    let (_, exit_code) = kernel
-        .wait_and_reap(process.pid())
-        .expect("wait and reap exited process");
-    assert_eq!(exit_code, 0);
-
-    let snapshot_after_reap = kernel.resource_snapshot();
-    assert_eq!(snapshot_after_reap.fd_tables, 0);
-    assert_eq!(snapshot_after_reap.open_fds, 0);
-    assert_eq!(
-        kernel
-            .fd_stat("shell", process.pid(), 0)
-            .expect_err("reaped process should not keep FD entries")
-            .code(),
-        "ESRCH"
-    );
-}
-
-#[test]
-fn spawn_process_executes_shebang_scripts_with_registered_interpreters() {
-    let mut config = KernelVmConfig::new("vm-shebang");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-        .register_driver(CommandDriver::new("node", ["node"]))
-        .expect("register node");
-
-    kernel
-        .write_file("/tmp/script.sh", b"#!/bin/sh -eu\necho shell\n".to_vec())
-        .expect("write shell script");
-    kernel
-        .chmod("/tmp/script.sh", 0o755)
-        .expect("chmod shell script");
-    let shell_process = kernel
-        .spawn_process(
-            "/tmp/script.sh",
-            vec![String::from("arg")],
-            SpawnOptions::default(),
-        )
-        .expect("spawn shell script");
-    assert_eq!(
-        kernel
-            .read_file(&format!("/proc/{}/cmdline", shell_process.pid()))
-            .expect("read shell cmdline"),
-        b"sh\0-eu\0/tmp/script.sh\0arg\0".to_vec()
-    );
-
-    kernel
-        .write_file(
-            "/tmp/script.mjs",
-            b"#!/usr/bin/env node --trace-warnings\nconsole.log('node');\n".to_vec(),
-        )
-        .expect("write node script");
-    kernel
-        .chmod("/tmp/script.mjs", 0o755)
-        .expect("chmod node script");
-    let node_process = kernel
-        .spawn_process("/tmp/script.mjs", Vec::new(), SpawnOptions::default())
-        .expect("spawn node script");
-    assert_eq!(
-        kernel
-            .read_file(&format!("/proc/{}/cmdline", node_process.pid()))
-            .expect("read node cmdline"),
-        b"node\0--trace-warnings\0/tmp/script.mjs\0".to_vec()
-    );
-}
-
-#[test]
-fn spawn_process_rejects_invalid_shebang_scripts() {
-    let mut config = KernelVmConfig::new("vm-shebang-errors");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    kernel
-        .write_file("/tmp/missing.sh", b"#!/missing/interpreter\n".to_vec())
-        .expect("write missing-interpreter script");
-    kernel
-        .chmod("/tmp/missing.sh", 0o755)
-        .expect("chmod missing-interpreter script");
-    let missing = kernel
-        .spawn_process("/tmp/missing.sh", Vec::new(), SpawnOptions::default())
-        .expect_err("missing interpreter should fail");
-    assert_eq!(missing.code(), "ENOENT");
-
-    let long_shebang = format!("#!/{0}\n", "a".repeat(256));
-    kernel
-        .write_file("/tmp/long.sh", long_shebang.into_bytes())
-        .expect("write long-shebang script");
-    kernel
-        .chmod("/tmp/long.sh", 0o755)
-        .expect("chmod long-shebang script");
-    let long_error = kernel
-        .spawn_process("/tmp/long.sh", Vec::new(), SpawnOptions::default())
-        .expect_err("overlong shebang should fail");
-    assert_eq!(long_error.code(), "ENOEXEC");
-}
-
-#[test]
-fn driver_registration_rejects_command_names_that_escape_bin_stubs() {
-    let mut config = KernelVmConfig::new("vm-command-registry-traversal");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-
-    let error = kernel
-        .register_driver(CommandDriver::new("malicious", ["safe", "../escape"]))
-        .expect_err("path-like command names should be rejected");
-
-    assert_eq!(error.code(), "EINVAL");
-    assert!(
-        error.to_string().contains("invalid command name"),
-        "unexpected error: {error}"
-    );
-    assert!(!kernel.exists("/bin").expect("check /bin"));
-    assert!(!kernel.exists("/bin/safe").expect("check safe stub"));
-    assert!(!kernel.exists("/escape").expect("check escaped stub"));
-}
diff --git a/crates/kernel/tests/loopback_routing.rs b/crates/kernel/tests/loopback_routing.rs
deleted file mode 100644
index 9dc9acf5d..000000000
--- a/crates/kernel/tests/loopback_routing.rs
+++ /dev/null
@@ -1,707 +0,0 @@
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::kernel::{KernelProcessHandle, KernelVm, KernelVmConfig, SpawnOptions};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::resource_accounting::ResourceLimits;
-use secure_exec_kernel::socket_table::{
-    InetSocketAddress, SocketReadiness, SocketReadinessKind, SocketSpec, SocketState,
-};
-use secure_exec_kernel::vfs::MemoryFileSystem;
-use std::sync::{Arc, Mutex};
-
-fn spawn_shell(kernel: &mut KernelVm<MemoryFileSystem>) -> KernelProcessHandle {
-    kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell")
-}
-
-fn new_kernel(vm_id: &str) -> KernelVm<MemoryFileSystem> {
-    let mut config = KernelVmConfig::new(vm_id);
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-}
-
-fn take_readiness_events(events: &Arc<Mutex<Vec<SocketReadiness>>>) -> Vec<SocketReadiness> {
-    let mut events = events.lock().expect("readiness events lock");
-    std::mem::take(&mut *events)
-}
-
-#[test]
-fn kernel_loopback_connect_routes_into_guest_listener_and_accepts_connected_socket() {
-    let mut kernel = new_kernel("vm-loopback-tcp");
-    let server = spawn_shell(&mut kernel);
-    let client = spawn_shell(&mut kernel);
-
-    let listener = kernel
-        .socket_create("shell", server.pid(), SocketSpec::tcp())
-        .expect("create listener");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            server.pid(),
-            listener,
-            InetSocketAddress::new("127.0.0.1", 43131),
-        )
-        .expect("bind listener");
-    kernel
-        .socket_listen("shell", server.pid(), listener, 1)
-        .expect("listen");
-
-    let client_socket = kernel
-        .socket_create("shell", client.pid(), SocketSpec::tcp())
-        .expect("create client socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            client.pid(),
-            client_socket,
-            InetSocketAddress::new("127.0.0.1", 54031),
-        )
-        .expect("bind client");
-
-    kernel
-        .socket_connect_inet_loopback(
-            "shell",
-            client.pid(),
-            client_socket,
-            InetSocketAddress::new("localhost", 43131),
-        )
-        .expect("route loopback connect");
-
-    let listener_record = kernel.socket_get(listener).expect("listener record");
-    assert_eq!(listener_record.state(), SocketState::Listening);
-    assert_eq!(listener_record.pending_accept_count(), 1);
-
-    let client_record = kernel.socket_get(client_socket).expect("client record");
-    assert_eq!(client_record.state(), SocketState::Connected);
-    assert_eq!(
-        client_record.peer_address(),
-        Some(&InetSocketAddress::new("127.0.0.1", 43131))
-    );
-
-    let accepted = kernel
-        .socket_accept("shell", server.pid(), listener)
-        .expect("accept loopback connection");
-    let accepted_record = kernel.socket_get(accepted).expect("accepted record");
-    assert_eq!(accepted_record.state(), SocketState::Connected);
-    assert_eq!(accepted_record.peer_socket_id(), Some(client_socket));
-    assert_eq!(
-        accepted_record.peer_address(),
-        Some(&InetSocketAddress::new("127.0.0.1", 54031))
-    );
-
-    let client_after_accept = kernel
-        .socket_get(client_socket)
-        .expect("client after accept");
-    assert_eq!(client_after_accept.peer_socket_id(), Some(accepted));
-
-    kernel
-        .socket_write("shell", client.pid(), client_socket, b"ping")
-        .expect("client write");
-    let payload = kernel
-        .socket_read("shell", server.pid(), accepted, 16)
-        .expect("accepted read")
-        .expect("accepted payload");
-    assert_eq!(payload, b"ping");
-
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.socket_listeners, 1);
-    assert_eq!(snapshot.socket_connections, 2);
-}
-
-#[test]
-fn kernel_loopback_readiness_events_are_edge_triggered() {
-    let mut kernel = new_kernel("vm-loopback-readiness-edge");
-    let events = Arc::new(Mutex::new(Vec::new()));
-    let captured_events = Arc::clone(&events);
-    kernel.set_socket_readiness_sink(Some(move |readiness| {
-        captured_events
-            .lock()
-            .expect("readiness events lock")
-            .push(readiness);
-    }));
-
-    let server = spawn_shell(&mut kernel);
-    let client = spawn_shell(&mut kernel);
-
-    let listener = kernel
-        .socket_create("shell", server.pid(), SocketSpec::tcp())
-        .expect("create listener");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            server.pid(),
-            listener,
-            InetSocketAddress::new("127.0.0.1", 43141),
-        )
-        .expect("bind listener");
-    kernel
-        .socket_listen("shell", server.pid(), listener, 4)
-        .expect("listen");
-
-    let client_socket = kernel
-        .socket_create("shell", client.pid(), SocketSpec::tcp())
-        .expect("create client socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            client.pid(),
-            client_socket,
-            InetSocketAddress::new("127.0.0.1", 54041),
-        )
-        .expect("bind client");
-    kernel
-        .socket_connect_inet_loopback(
-            "shell",
-            client.pid(),
-            client_socket,
-            InetSocketAddress::new("127.0.0.1", 43141),
-        )
-        .expect("connect loopback client");
-    assert_eq!(
-        take_readiness_events(&events),
-        vec![SocketReadiness {
-            socket_id: listener,
-            kind: SocketReadinessKind::Accept,
-        }]
-    );
-
-    let second_client_socket = kernel
-        .socket_create("shell", client.pid(), SocketSpec::tcp())
-        .expect("create second client socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            client.pid(),
-            second_client_socket,
-            InetSocketAddress::new("127.0.0.1", 54042),
-        )
-        .expect("bind second client");
-    kernel
-        .socket_connect_inet_loopback(
-            "shell",
-            client.pid(),
-            second_client_socket,
-            InetSocketAddress::new("127.0.0.1", 43141),
-        )
-        .expect("connect second loopback client");
-    assert!(
-        take_readiness_events(&events).is_empty(),
-        "second pending accept should not emit another readiness edge"
-    );
-
-    let accepted = kernel
-        .socket_accept("shell", server.pid(), listener)
-        .expect("accept first connection");
-    let _second_accepted = kernel
-        .socket_accept("shell", server.pid(), listener)
-        .expect("accept second connection");
-    assert!(take_readiness_events(&events).is_empty());
-
-    kernel
-        .socket_write("shell", client.pid(), client_socket, b"A")
-        .expect("write first byte");
-    kernel
-        .socket_write("shell", client.pid(), client_socket, b"B")
-        .expect("write second byte while peer buffer is nonempty");
-    assert_eq!(
-        take_readiness_events(&events),
-        vec![SocketReadiness {
-            socket_id: accepted,
-            kind: SocketReadinessKind::Data,
-        }]
-    );
-
-    assert_eq!(
-        kernel
-            .socket_read("shell", server.pid(), accepted, 1)
-            .expect("partial read")
-            .expect("partial payload"),
-        b"A"
-    );
-    kernel
-        .socket_write("shell", client.pid(), client_socket, b"C")
-        .expect("write while peer buffer still has data");
-    assert!(
-        take_readiness_events(&events).is_empty(),
-        "write while nonempty should not emit another data edge"
-    );
-    assert_eq!(
-        kernel
-            .socket_read("shell", server.pid(), accepted, 8)
-            .expect("drain read")
-            .expect("drained payload"),
-        b"BC"
-    );
-    kernel
-        .socket_write("shell", client.pid(), client_socket, b"D")
-        .expect("write after full drain");
-    assert_eq!(
-        take_readiness_events(&events),
-        vec![SocketReadiness {
-            socket_id: accepted,
-            kind: SocketReadinessKind::Data,
-        }]
-    );
-
-    let udp_sender = kernel
-        .socket_create("shell", client.pid(), SocketSpec::udp())
-        .expect("create udp sender");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            client.pid(),
-            udp_sender,
-            InetSocketAddress::new("127.0.0.1", 54043),
-        )
-        .expect("bind udp sender");
-    let udp_receiver = kernel
-        .socket_create("shell", server.pid(), SocketSpec::udp())
-        .expect("create udp receiver");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            server.pid(),
-            udp_receiver,
-            InetSocketAddress::new("127.0.0.1", 43143),
-        )
-        .expect("bind udp receiver");
-    take_readiness_events(&events);
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            client.pid(),
-            udp_sender,
-            InetSocketAddress::new("127.0.0.1", 43143),
-            b"one",
-        )
-        .expect("send first datagram");
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            client.pid(),
-            udp_sender,
-            InetSocketAddress::new("127.0.0.1", 43143),
-            b"two",
-        )
-        .expect("send second datagram while queue is nonempty");
-    assert_eq!(
-        take_readiness_events(&events),
-        vec![SocketReadiness {
-            socket_id: udp_receiver,
-            kind: SocketReadinessKind::Data,
-        }]
-    );
-    kernel
-        .socket_recv_datagram("shell", server.pid(), udp_receiver, 16)
-        .expect("receive first datagram");
-    kernel
-        .socket_recv_datagram("shell", server.pid(), udp_receiver, 16)
-        .expect("receive second datagram");
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            client.pid(),
-            udp_sender,
-            InetSocketAddress::new("127.0.0.1", 43143),
-            b"three",
-        )
-        .expect("send datagram after drain");
-    assert_eq!(
-        take_readiness_events(&events),
-        vec![SocketReadiness {
-            socket_id: udp_receiver,
-            kind: SocketReadinessKind::Data,
-        }]
-    );
-}
-
-#[test]
-fn kernel_loopback_connect_matches_wildcard_listener_bindings() {
-    let mut kernel = new_kernel("vm-loopback-tcp-wildcard");
-    let server = spawn_shell(&mut kernel);
-    let client = spawn_shell(&mut kernel);
-
-    let listener = kernel
-        .socket_create("shell", server.pid(), SocketSpec::tcp())
-        .expect("create listener");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            server.pid(),
-            listener,
-            InetSocketAddress::new("0.0.0.0", 43132),
-        )
-        .expect("bind wildcard listener");
-    kernel
-        .socket_listen("shell", server.pid(), listener, 1)
-        .expect("listen");
-
-    let client_socket = kernel
-        .socket_create("shell", client.pid(), SocketSpec::tcp())
-        .expect("create client socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            client.pid(),
-            client_socket,
-            InetSocketAddress::new("127.0.0.1", 54032),
-        )
-        .expect("bind client");
-
-    kernel
-        .socket_connect_inet_loopback(
-            "shell",
-            client.pid(),
-            client_socket,
-            InetSocketAddress::new("127.0.0.1", 43132),
-        )
-        .expect("route loopback connect to wildcard listener");
-
-    let accepted = kernel
-        .socket_accept("shell", server.pid(), listener)
-        .expect("accept wildcard loopback connection");
-    let accepted_record = kernel.socket_get(accepted).expect("accepted record");
-    assert_eq!(accepted_record.state(), SocketState::Connected);
-    assert_eq!(accepted_record.peer_socket_id(), Some(client_socket));
-
-    kernel
-        .socket_write("shell", client.pid(), client_socket, b"ping")
-        .expect("client write");
-    let payload = kernel
-        .socket_read("shell", server.pid(), accepted, 16)
-        .expect("accepted read")
-        .expect("accepted payload");
-    assert_eq!(payload, b"ping");
-}
-
-#[test]
-fn kernel_loopback_tcp_delivery_respects_receive_buffer_limit() {
-    let mut config = KernelVmConfig::new("vm-loopback-tcp-buffer-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_socket_buffered_bytes: Some(5),
-        ..ResourceLimits::default()
-    };
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    let server = spawn_shell(&mut kernel);
-    let client = spawn_shell(&mut kernel);
-
-    let listener = kernel
-        .socket_create("shell", server.pid(), SocketSpec::tcp())
-        .expect("create listener");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            server.pid(),
-            listener,
-            InetSocketAddress::new("127.0.0.1", 43136),
-        )
-        .expect("bind listener");
-    kernel
-        .socket_listen("shell", server.pid(), listener, 1)
-        .expect("listen");
-
-    let client_socket = kernel
-        .socket_create("shell", client.pid(), SocketSpec::tcp())
-        .expect("create client socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            client.pid(),
-            client_socket,
-            InetSocketAddress::new("127.0.0.1", 54036),
-        )
-        .expect("bind client");
-    kernel
-        .socket_connect_inet_loopback(
-            "shell",
-            client.pid(),
-            client_socket,
-            InetSocketAddress::new("127.0.0.1", 43136),
-        )
-        .expect("connect loopback client");
-    let accepted = kernel
-        .socket_accept("shell", server.pid(), listener)
-        .expect("accept loopback connection");
-
-    kernel
-        .socket_write("shell", client.pid(), client_socket, b"12345")
-        .expect("fill receive buffer");
-    let error = kernel
-        .socket_write("shell", client.pid(), client_socket, b"6")
-        .expect_err("extra stream byte should exceed receive buffer limit");
-    assert_eq!(error.code(), "EAGAIN");
-    assert_eq!(
-        kernel
-            .socket_get(accepted)
-            .expect("accepted stream")
-            .buffered_read_bytes(),
-        5
-    );
-
-    let drained = kernel
-        .socket_read("shell", server.pid(), accepted, 5)
-        .expect("drain receive buffer")
-        .expect("stream payload");
-    assert_eq!(drained, b"12345");
-    kernel
-        .socket_write("shell", client.pid(), client_socket, b"6")
-        .expect("write succeeds after draining receive buffer");
-}
-
-#[test]
-fn kernel_loopback_stream_bind_rejects_wildcard_after_loopback_specific() {
-    let mut kernel = new_kernel("vm-loopback-bind-specific-first");
-    let server = spawn_shell(&mut kernel);
-    let wildcard = spawn_shell(&mut kernel);
-
-    let specific_listener = kernel
-        .socket_create("shell", server.pid(), SocketSpec::tcp())
-        .expect("create specific listener");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            server.pid(),
-            specific_listener,
-            InetSocketAddress::new("127.0.0.1", 43133),
-        )
-        .expect("bind specific listener");
-
-    let wildcard_listener = kernel
-        .socket_create("shell", wildcard.pid(), SocketSpec::tcp())
-        .expect("create wildcard listener");
-    let error = kernel
-        .socket_bind_inet(
-            "shell",
-            wildcard.pid(),
-            wildcard_listener,
-            InetSocketAddress::new("0.0.0.0", 43133),
-        )
-        .expect_err("wildcard bind should conflict with loopback listener");
-    assert_eq!(error.code(), "EADDRINUSE");
-}
-
-#[test]
-fn kernel_loopback_stream_bind_rejects_loopback_specific_after_wildcard() {
-    let mut kernel = new_kernel("vm-loopback-bind-wildcard-first");
-    let server = spawn_shell(&mut kernel);
-    let loopback = spawn_shell(&mut kernel);
-
-    let wildcard_listener = kernel
-        .socket_create("shell", server.pid(), SocketSpec::tcp())
-        .expect("create wildcard listener");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            server.pid(),
-            wildcard_listener,
-            InetSocketAddress::new("0.0.0.0", 43134),
-        )
-        .expect("bind wildcard listener");
-
-    let loopback_listener = kernel
-        .socket_create("shell", loopback.pid(), SocketSpec::tcp())
-        .expect("create loopback listener");
-    let error = kernel
-        .socket_bind_inet(
-            "shell",
-            loopback.pid(),
-            loopback_listener,
-            InetSocketAddress::new("127.0.0.1", 43134),
-        )
-        .expect_err("loopback bind should conflict with wildcard listener");
-    assert_eq!(error.code(), "EADDRINUSE");
-}
-
-#[test]
-fn kernel_loopback_stream_bind_allows_non_overlapping_specific_addresses() {
-    let mut kernel = new_kernel("vm-loopback-bind-non-overlap");
-    let first = spawn_shell(&mut kernel);
-    let second = spawn_shell(&mut kernel);
-
-    let first_listener = kernel
-        .socket_create("shell", first.pid(), SocketSpec::tcp())
-        .expect("create first listener");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            first.pid(),
-            first_listener,
-            InetSocketAddress::new("127.0.0.1", 43135),
-        )
-        .expect("bind first listener");
-
-    let second_listener = kernel
-        .socket_create("shell", second.pid(), SocketSpec::tcp())
-        .expect("create second listener");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            second.pid(),
-            second_listener,
-            InetSocketAddress::new("127.0.0.2", 43135),
-        )
-        .expect("bind second listener");
-}
-
-#[test]
-fn kernel_loopback_udp_delivery_stays_within_socket_table() {
-    let mut kernel = new_kernel("vm-loopback-udp");
-    let sender = spawn_shell(&mut kernel);
-    let receiver = spawn_shell(&mut kernel);
-
-    let sender_socket = kernel
-        .socket_create("shell", sender.pid(), SocketSpec::udp())
-        .expect("create sender socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 54041),
-        )
-        .expect("bind sender");
-
-    let receiver_socket = kernel
-        .socket_create("shell", receiver.pid(), SocketSpec::udp())
-        .expect("create receiver socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            receiver.pid(),
-            receiver_socket,
-            InetSocketAddress::new("127.0.0.1", 43141),
-        )
-        .expect("bind receiver");
-
-    let written = kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("localhost", 43141),
-            b"ping-udp",
-        )
-        .expect("send udp payload");
-    assert_eq!(written, b"ping-udp".len());
-    assert_eq!(
-        kernel
-            .socket_get(receiver_socket)
-            .expect("receiver record")
-            .queued_datagrams(),
-        1
-    );
-
-    let datagram = kernel
-        .socket_recv_datagram("shell", receiver.pid(), receiver_socket, 64)
-        .expect("receive datagram")
-        .expect("datagram payload");
-    assert_eq!(
-        datagram.source_address(),
-        Some(&InetSocketAddress::new("127.0.0.1", 54041))
-    );
-    assert_eq!(datagram.payload(), b"ping-udp");
-    assert_eq!(
-        kernel
-            .socket_get(receiver_socket)
-            .expect("receiver after read")
-            .queued_datagrams(),
-        0
-    );
-}
-
-#[test]
-fn kernel_loopback_udp_delivery_respects_datagram_queue_limit() {
-    let mut config = KernelVmConfig::new("vm-loopback-udp-queue-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_socket_datagram_queue_len: Some(1),
-        ..ResourceLimits::default()
-    };
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    let sender = spawn_shell(&mut kernel);
-    let receiver = spawn_shell(&mut kernel);
-
-    let sender_socket = kernel
-        .socket_create("shell", sender.pid(), SocketSpec::udp())
-        .expect("create sender socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 54042),
-        )
-        .expect("bind sender");
-
-    let receiver_socket = kernel
-        .socket_create("shell", receiver.pid(), SocketSpec::udp())
-        .expect("create receiver socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            receiver.pid(),
-            receiver_socket,
-            InetSocketAddress::new("127.0.0.1", 43142),
-        )
-        .expect("bind receiver");
-
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43142),
-            b"one",
-        )
-        .expect("send first datagram");
-    let error = kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43142),
-            b"two",
-        )
-        .expect_err("second datagram should exceed queue limit");
-    assert_eq!(error.code(), "EAGAIN");
-    assert_eq!(
-        kernel
-            .socket_get(receiver_socket)
-            .expect("receiver socket")
-            .queued_datagrams(),
-        1
-    );
-
-    let datagram = kernel
-        .socket_recv_datagram("shell", receiver.pid(), receiver_socket, 16)
-        .expect("receive datagram")
-        .expect("datagram payload");
-    assert_eq!(datagram.payload(), b"one");
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43142),
-            b"two",
-        )
-        .expect("send succeeds after draining datagram queue");
-}
diff --git a/crates/kernel/tests/permissions.rs b/crates/kernel/tests/permissions.rs
deleted file mode 100644
index de08858e4..000000000
--- a/crates/kernel/tests/permissions.rs
+++ /dev/null
@@ -1,685 +0,0 @@
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig, SpawnOptions};
-use secure_exec_kernel::mount_table::{MountOptions, MountTable};
-use secure_exec_kernel::permissions::{
-    check_command_execution, check_network_access, filter_env, permission_glob_matches,
-    EnvAccessRequest, FsAccessRequest, NetworkOperation, PermissionDecision,
-    PermissionedFileSystem, Permissions,
-};
-use secure_exec_kernel::vfs::{MemoryFileSystem, VfsResult, VirtualFileSystem};
-use std::collections::BTreeMap;
-use std::fmt::Debug;
-use std::sync::{Arc, Mutex};
-
-fn filesystem_fixture() -> MemoryFileSystem {
-    let mut filesystem = MemoryFileSystem::new();
-    filesystem
-        .write_file("/existing.txt", b"hello".to_vec())
-        .expect("seed existing file");
-    filesystem
-        .mkdir("/existing-dir", false)
-        .expect("seed existing directory");
-    filesystem
-        .write_file("/existing-dir/nested.txt", b"nested".to_vec())
-        .expect("seed nested file");
-    filesystem
-}
-
-fn wrap_filesystem(permissions: Permissions) -> PermissionedFileSystem<MemoryFileSystem> {
-    PermissionedFileSystem::new(filesystem_fixture(), "vm-permissions", permissions)
-}
-
-fn assert_fs_access_denied<T: Debug>(result: VfsResult<T>) {
-    let error = result.expect_err("filesystem operation should be denied");
-    assert_eq!(error.code(), "EACCES");
-}
-
-#[test]
-fn permission_wrapped_filesystem_denies_write_with_reason() {
-    let permissions = Permissions {
-        filesystem: Some(Arc::new(|request: &FsAccessRequest| {
-            if request.path.starts_with("/tmp") {
-                PermissionDecision::allow()
-            } else {
-                PermissionDecision::deny("tmp-only sandbox")
-            }
-        })),
-        ..Permissions::default()
-    };
-
-    let mut filesystem =
-        PermissionedFileSystem::new(MemoryFileSystem::new(), "vm-permissions", permissions);
-
-    let error = filesystem
-        .write_file("/etc/secret.txt", b"nope".to_vec())
-        .expect_err("non-/tmp writes should be denied");
-    assert_eq!(error.code(), "EACCES");
-    assert!(error.to_string().contains("tmp-only sandbox"));
-}
-
-#[test]
-fn permission_wrapped_filesystem_denies_access_by_default() {
-    let mut filesystem = wrap_filesystem(Permissions::default());
-
-    assert!(filesystem.inner().exists("/existing.txt"));
-    assert_fs_access_denied(filesystem.read_file("/existing.txt"));
-    assert_fs_access_denied(filesystem.write_file("/new.txt", b"hello".to_vec()));
-    assert_fs_access_denied(filesystem.stat("/existing.txt"));
-    assert!(
-        !PermissionedFileSystem::exists(&filesystem, "/existing.txt")
-            .expect("permissioned exists should fail closed")
-    );
-    assert_fs_access_denied(filesystem.mkdir("/created-dir", false));
-    assert_fs_access_denied(filesystem.read_dir("/"));
-    assert_fs_access_denied(filesystem.remove_file("/existing.txt"));
-}
-
-#[test]
-fn permission_wrapped_filesystem_allows_access_with_explicit_allow_all_callback() {
-    let permissions = Permissions {
-        filesystem: Some(Arc::new(|_: &FsAccessRequest| PermissionDecision::allow())),
-        ..Permissions::default()
-    };
-    let mut filesystem = wrap_filesystem(permissions);
-
-    assert_eq!(
-        filesystem
-            .read_file("/existing.txt")
-            .expect("read existing file"),
-        b"hello".to_vec()
-    );
-    filesystem
-        .write_file("/new.txt", b"world".to_vec())
-        .expect("write new file");
-    assert!(filesystem
-        .exists("/existing.txt")
-        .expect("existing file should be visible"));
-    assert!(filesystem.stat("/existing.txt").is_ok());
-    filesystem
-        .mkdir("/created-dir", false)
-        .expect("create directory");
-    let root_entries = filesystem.read_dir("/").expect("read root directory");
-    assert!(root_entries.iter().any(|entry| entry == "existing.txt"));
-    assert!(root_entries.iter().any(|entry| entry == "existing-dir"));
-    assert!(root_entries.iter().any(|entry| entry == "new.txt"));
-    assert!(root_entries.iter().any(|entry| entry == "created-dir"));
-    filesystem
-        .remove_file("/existing.txt")
-        .expect("remove existing file");
-    assert!(!filesystem.inner().exists("/existing.txt"));
-}
-
-#[test]
-fn permission_wrapped_filesystem_resolves_symlinks_before_permission_checks() {
-    let mut inner = MemoryFileSystem::new();
-    inner.mkdir("/allowed", true).expect("seed allowed dir");
-    inner.mkdir("/private", true).expect("seed private dir");
-    inner
-        .write_file("/private/secret.txt", b"secret".to_vec())
-        .expect("seed secret file");
-    inner
-        .symlink("/private/secret.txt", "/allowed/alias.txt")
-        .expect("seed symlink");
-
-    let checked_paths = Arc::new(Mutex::new(Vec::new()));
-    let checked_paths_for_permission = Arc::clone(&checked_paths);
-    let permissions = Permissions {
-        filesystem: Some(Arc::new(move |request: &FsAccessRequest| {
-            checked_paths_for_permission
-                .lock()
-                .expect("permission path lock poisoned")
-                .push(request.path.clone());
-            if request.path.starts_with("/allowed") {
-                PermissionDecision::allow()
-            } else {
-                PermissionDecision::deny("allowed-only")
-            }
-        })),
-        ..Permissions::default()
-    };
-
-    let mut filesystem = PermissionedFileSystem::new(inner, "vm-permissions", permissions);
-
-    let error = filesystem
-        .read_file("/allowed/alias.txt")
-        .expect_err("symlink read should use resolved target path");
-    assert_eq!(error.code(), "EACCES");
-    assert_eq!(
-        checked_paths
-            .lock()
-            .expect("permission path lock poisoned")
-            .as_slice(),
-        [String::from("/private/secret.txt")].as_slice()
-    );
-}
-
-#[test]
-fn permission_wrapped_filesystem_link_checks_source_and_destination_permissions() {
-    let mut inner = MemoryFileSystem::new();
-    inner.mkdir("/allowed", true).expect("seed allowed dir");
-    inner.mkdir("/private", true).expect("seed private dir");
-    inner
-        .write_file("/private/source.txt", b"source".to_vec())
-        .expect("seed source file");
-
-    let checked_paths = Arc::new(Mutex::new(Vec::new()));
-    let checked_paths_for_permission = Arc::clone(&checked_paths);
-    let permissions = Permissions {
-        filesystem: Some(Arc::new(move |request: &FsAccessRequest| {
-            checked_paths_for_permission
-                .lock()
-                .expect("permission path lock poisoned")
-                .push(request.path.clone());
-            PermissionDecision::allow()
-        })),
-        ..Permissions::default()
-    };
-
-    let mut filesystem = PermissionedFileSystem::new(inner, "vm-permissions", permissions);
-    filesystem
-        .link("/private/source.txt", "/allowed/linked.txt")
-        .expect("hardlink should succeed");
-
-    assert_eq!(
-        checked_paths
-            .lock()
-            .expect("permission path lock poisoned")
-            .as_slice(),
-        [
-            String::from("/private/source.txt"),
-            String::from("/allowed/linked.txt"),
-        ]
-        .as_slice()
-    );
-}
-
-#[test]
-fn permission_wrapped_filesystem_link_resolves_source_as_existing_path() {
-    let mut inner = MemoryFileSystem::new();
-    inner.mkdir("/allowed", true).expect("seed allowed dir");
-    inner.mkdir("/private", true).expect("seed private dir");
-    inner
-        .write_file("/private/source.txt", b"source".to_vec())
-        .expect("seed source file");
-    inner
-        .symlink("/private/source.txt", "/allowed/source-link")
-        .expect("seed source symlink");
-
-    let checked_paths = Arc::new(Mutex::new(Vec::new()));
-    let checked_paths_for_permission = Arc::clone(&checked_paths);
-    let permissions = Permissions {
-        filesystem: Some(Arc::new(move |request: &FsAccessRequest| {
-            checked_paths_for_permission
-                .lock()
-                .expect("permission path lock poisoned")
-                .push(request.path.clone());
-            if request.path.starts_with("/allowed") {
-                PermissionDecision::allow()
-            } else {
-                PermissionDecision::deny("allowed-only")
-            }
-        })),
-        ..Permissions::default()
-    };
-
-    let mut filesystem = PermissionedFileSystem::new(inner, "vm-permissions", permissions);
-    let error = filesystem
-        .link("/allowed/source-link", "/allowed/linked.txt")
-        .expect_err("hardlink source should resolve through the existing target path");
-    assert_eq!(error.code(), "EACCES");
-    assert_eq!(
-        checked_paths
-            .lock()
-            .expect("permission path lock poisoned")
-            .as_slice(),
-        [String::from("/private/source.txt")].as_slice()
-    );
-}
-
-#[test]
-fn permission_wrapped_filesystem_remove_checks_resolved_destination_path() {
-    let mut inner = MemoryFileSystem::new();
-    inner.mkdir("/allowed", true).expect("seed allowed dir");
-    inner.mkdir("/private", true).expect("seed private dir");
-    inner
-        .write_file("/private/secret.txt", b"secret".to_vec())
-        .expect("seed secret file");
-    inner
-        .symlink("/private", "/allowed/private-link")
-        .expect("seed directory symlink");
-
-    let checked_paths = Arc::new(Mutex::new(Vec::new()));
-    let checked_paths_for_permission = Arc::clone(&checked_paths);
-    let permissions = Permissions {
-        filesystem: Some(Arc::new(move |request: &FsAccessRequest| {
-            checked_paths_for_permission
-                .lock()
-                .expect("permission path lock poisoned")
-                .push(request.path.clone());
-            if request.path.starts_with("/allowed") {
-                PermissionDecision::allow()
-            } else {
-                PermissionDecision::deny("allowed-only")
-            }
-        })),
-        ..Permissions::default()
-    };
-
-    let mut filesystem = PermissionedFileSystem::new(inner, "vm-permissions", permissions);
-    let error = filesystem
-        .remove_file("/allowed/private-link/secret.txt")
-        .expect_err("remove should resolve symlinked parent before permission check");
-    assert_eq!(error.code(), "EACCES");
-    assert_eq!(
-        checked_paths
-            .lock()
-            .expect("permission path lock poisoned")
-            .as_slice(),
-        [String::from("/private/secret.txt")].as_slice()
-    );
-}
-
-#[test]
-fn permission_wrapped_filesystem_exists_fails_closed_on_permission_denied() {
-    let permissions = Permissions {
-        filesystem: Some(Arc::new(|_: &FsAccessRequest| {
-            PermissionDecision::deny("hidden")
-        })),
-        ..Permissions::default()
-    };
-    let filesystem = wrap_filesystem(permissions);
-
-    assert!(
-        !PermissionedFileSystem::exists(&filesystem, "/existing.txt")
-            .expect("permissioned exists should fail closed")
-    );
-    assert!(!VirtualFileSystem::exists(&filesystem, "/existing.txt"));
-}
-
-#[test]
-fn filter_env_only_keeps_allowed_keys() {
-    let permissions = Permissions {
-        environment: Some(Arc::new(|request: &EnvAccessRequest| PermissionDecision {
-            allow: request.key != "SECRET_KEY",
-            reason: None,
-        })),
-        ..Permissions::default()
-    };
-
-    let env = BTreeMap::from([
-        (String::from("HOME"), String::from("/home/agentos")),
-        (String::from("PATH"), String::from("/usr/bin")),
-        (String::from("SECRET_KEY"), String::from("hidden")),
-    ]);
-
-    let filtered = filter_env("vm-permissions", &env, &permissions);
-    assert_eq!(filtered.get("HOME"), Some(&String::from("/home/agentos")));
-    assert_eq!(filtered.get("PATH"), Some(&String::from("/usr/bin")));
-    assert!(!filtered.contains_key("SECRET_KEY"));
-}
-
-#[test]
-fn command_permissions_deny_when_callback_is_absent() {
-    let error = check_command_execution(
-        "vm-permissions",
-        &Permissions::default(),
-        "sh",
-        &[],
-        Some("/workspace"),
-        &BTreeMap::new(),
-    )
-    .expect_err("missing command permission hook should fail closed");
-
-    assert_eq!(error.code(), "EACCES");
-    assert!(error.to_string().contains("spawn 'sh'"));
-}
-
-#[test]
-fn network_permissions_deny_when_callback_is_absent() {
-    let error = check_network_access(
-        "vm-permissions",
-        &Permissions::default(),
-        NetworkOperation::Dns,
-        "example.test",
-    )
-    .expect_err("missing network permission hook should fail closed");
-
-    assert_eq!(error.code(), "EACCES");
-    assert!(error.to_string().contains("example.test"));
-}
-
-#[test]
-fn child_process_permissions_block_spawn() {
-    let mut config = KernelVmConfig::new("vm-permissions");
-    config.permissions = Permissions {
-        child_process: Some(Arc::new(|request| {
-            if request.command == "blocked" {
-                PermissionDecision::deny("blocked by policy")
-            } else {
-                PermissionDecision::allow()
-            }
-        })),
-        ..Permissions::allow_all()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("alpha", ["blocked"]))
-        .expect("register driver");
-
-    let error = kernel
-        .spawn_process("blocked", Vec::new(), SpawnOptions::default())
-        .expect_err("spawn should be denied");
-    assert_eq!(error.code(), "EACCES");
-    assert!(error.to_string().contains("blocked by policy"));
-}
-
-#[test]
-fn permission_glob_single_star_does_not_cross_path_separators() {
-    assert!(permission_glob_matches("network/*", "network/foo"));
-    assert!(!permission_glob_matches("network/*", "network/foo/bar"));
-    assert!(permission_glob_matches(
-        "/workspace/*",
-        "/workspace/file.txt"
-    ));
-    assert!(!permission_glob_matches(
-        "/workspace/*",
-        "/workspace/nested/file.txt",
-    ));
-}
-
-#[test]
-fn permission_glob_double_star_still_matches_nested_paths() {
-    assert!(permission_glob_matches(
-        "/workspace/**",
-        "/workspace/nested/file.txt",
-    ));
-    assert!(permission_glob_matches("tcp://**", "tcp://127.0.0.1:43111"));
-}
-
-#[test]
-fn kernel_vm_config_defaults_to_deny_all_permissions() {
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), KernelVmConfig::new("vm-defaults"));
-
-    let error = kernel
-        .write_file("/tmp/denied.txt", b"nope".to_vec())
-        .expect_err("default config should deny filesystem writes");
-    assert_eq!(error.code(), "EACCES");
-}
-
-#[test]
-fn kernel_default_spawn_cwd_matches_workspace() {
-    let captured_cwd = Arc::new(Mutex::new(None));
-    let captured_cwd_for_permission = Arc::clone(&captured_cwd);
-
-    let mut config = KernelVmConfig::new("vm-default-cwd");
-    config.permissions = Permissions {
-        child_process: Some(Arc::new(move |request| {
-            *captured_cwd_for_permission
-                .lock()
-                .expect("captured cwd lock poisoned") = request.cwd.clone();
-            PermissionDecision::allow()
-        })),
-        ..Permissions::allow_all()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("alpha", ["echo"]))
-        .expect("register driver");
-
-    let process = kernel
-        .spawn_process("echo", Vec::new(), SpawnOptions::default())
-        .expect("spawn should succeed");
-
-    assert_eq!(
-        captured_cwd
-            .lock()
-            .expect("captured cwd lock poisoned")
-            .as_deref(),
-        Some("/workspace")
-    );
-
-    process.finish(0);
-    kernel.wait_and_reap(process.pid()).expect("reap process");
-}
-
-#[test]
-fn driver_pid_ownership_is_enforced_across_kernel_operations() {
-    let mut config = KernelVmConfig::new("vm-auth");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("alpha", ["alpha-cmd"]))
-        .expect("register alpha");
-    kernel
-        .register_driver(CommandDriver::new("beta", ["beta-cmd"]))
-        .expect("register beta");
-
-    let alpha = kernel
-        .spawn_process(
-            "alpha-cmd",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("alpha")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn alpha");
-    let beta = kernel
-        .spawn_process(
-            "beta-cmd",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("beta")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn beta");
-
-    let error = kernel
-        .open_pipe("alpha", beta.pid())
-        .expect_err("alpha should not open a pipe for beta");
-    assert_eq!(error.code(), "EPERM");
-    assert!(error.to_string().contains("does not own PID"));
-
-    let error = kernel
-        .kill_process("beta", alpha.pid(), 15)
-        .expect_err("beta should not kill alpha");
-    assert_eq!(error.code(), "EPERM");
-
-    alpha.finish(0);
-    beta.finish(0);
-    kernel.wait_and_reap(alpha.pid()).expect("reap alpha");
-    kernel.wait_and_reap(beta.pid()).expect("reap beta");
-}
-
-#[test]
-fn kernel_mounts_require_write_permission_on_the_mount_path() {
-    let checked = Arc::new(Mutex::new(Vec::new()));
-    let checked_for_permission = Arc::clone(&checked);
-    let mut config = KernelVmConfig::new("vm-mount-permissions");
-    config.permissions = Permissions {
-        filesystem: Some(Arc::new(move |request: &FsAccessRequest| {
-            checked_for_permission
-                .lock()
-                .expect("checked mount paths lock poisoned")
-                .push((request.op, request.path.clone()));
-            PermissionDecision::deny("mounts disabled")
-        })),
-        ..Permissions::default()
-    };
-
-    let mut kernel = KernelVm::new(MountTable::new(MemoryFileSystem::new()), config);
-    let error = kernel
-        .mount_filesystem(
-            "/workspace",
-            MemoryFileSystem::new(),
-            MountOptions::new("memory"),
-        )
-        .expect_err("mount should be denied");
-    assert_eq!(error.code(), "EACCES");
-    assert!(error.to_string().contains("mounts disabled"));
-    assert_eq!(
-        checked
-            .lock()
-            .expect("checked mount paths lock poisoned")
-            .as_slice(),
-        [(
-            secure_exec_kernel::permissions::FsOperation::Write,
-            String::from("/workspace")
-        )]
-        .as_slice()
-    );
-}
-
-#[test]
-fn kernel_sensitive_mounts_require_explicit_sensitive_permission() {
-    let checked = Arc::new(Mutex::new(Vec::new()));
-    let checked_for_permission = Arc::clone(&checked);
-    let mut config = KernelVmConfig::new("vm-sensitive-mounts");
-    config.permissions = Permissions {
-        filesystem: Some(Arc::new(move |request: &FsAccessRequest| {
-            checked_for_permission
-                .lock()
-                .expect("checked mount paths lock poisoned")
-                .push((request.op, request.path.clone()));
-            match request.op {
-                secure_exec_kernel::permissions::FsOperation::Write => PermissionDecision::allow(),
-                secure_exec_kernel::permissions::FsOperation::MountSensitive => {
-                    PermissionDecision::deny("sensitive mounts require elevation")
-                }
-                other => panic!("unexpected filesystem permission probe: {other:?}"),
-            }
-        })),
-        ..Permissions::default()
-    };
-
-    let mut kernel = KernelVm::new(MountTable::new(MemoryFileSystem::new()), config);
-    let error = kernel
-        .mount_filesystem("/etc", MemoryFileSystem::new(), MountOptions::new("memory"))
-        .expect_err("sensitive mount should be denied");
-    assert_eq!(error.code(), "EACCES");
-    assert!(error
-        .to_string()
-        .contains("sensitive mounts require elevation"));
-    assert_eq!(
-        checked
-            .lock()
-            .expect("checked mount paths lock poisoned")
-            .as_slice(),
-        [
-            (
-                secure_exec_kernel::permissions::FsOperation::Write,
-                String::from("/etc"),
-            ),
-            (
-                secure_exec_kernel::permissions::FsOperation::MountSensitive,
-                String::from("/etc"),
-            ),
-        ]
-        .as_slice()
-    );
-}
-
-#[test]
-fn kernel_unmounts_require_write_permission_on_the_mount_path() {
-    let checked = Arc::new(Mutex::new(Vec::new()));
-    let checked_for_permission = Arc::clone(&checked);
-    let mut config = KernelVmConfig::new("vm-unmount-permissions");
-    config.permissions = Permissions {
-        filesystem: Some(Arc::new(move |request: &FsAccessRequest| {
-            checked_for_permission
-                .lock()
-                .expect("checked unmount paths lock poisoned")
-                .push((request.op, request.path.clone()));
-            PermissionDecision::deny("unmounts disabled")
-        })),
-        ..Permissions::default()
-    };
-
-    let mut kernel = KernelVm::new(MountTable::new(MemoryFileSystem::new()), config);
-    kernel
-        .filesystem_mut()
-        .inner_mut()
-        .inner_mut()
-        .mount(
-            "/workspace",
-            MemoryFileSystem::new(),
-            MountOptions::new("memory"),
-        )
-        .expect("seed mount");
-
-    let error = kernel
-        .unmount_filesystem("/workspace")
-        .expect_err("unmount should be denied");
-    assert_eq!(error.code(), "EACCES");
-    assert!(error.to_string().contains("unmounts disabled"));
-    assert_eq!(
-        checked
-            .lock()
-            .expect("checked unmount paths lock poisoned")
-            .as_slice(),
-        [(
-            secure_exec_kernel::permissions::FsOperation::Write,
-            String::from("/workspace")
-        )]
-        .as_slice()
-    );
-}
-
-#[test]
-fn kernel_sensitive_unmounts_require_explicit_sensitive_permission() {
-    let checked = Arc::new(Mutex::new(Vec::new()));
-    let checked_for_permission = Arc::clone(&checked);
-    let mut config = KernelVmConfig::new("vm-sensitive-unmounts");
-    config.permissions = Permissions {
-        filesystem: Some(Arc::new(move |request: &FsAccessRequest| {
-            checked_for_permission
-                .lock()
-                .expect("checked sensitive unmount paths lock poisoned")
-                .push((request.op, request.path.clone()));
-            match request.op {
-                secure_exec_kernel::permissions::FsOperation::Write => PermissionDecision::allow(),
-                secure_exec_kernel::permissions::FsOperation::MountSensitive => {
-                    PermissionDecision::deny("sensitive mounts require elevation")
-                }
-                other => panic!("unexpected filesystem permission probe: {other:?}"),
-            }
-        })),
-        ..Permissions::default()
-    };
-
-    let mut kernel = KernelVm::new(MountTable::new(MemoryFileSystem::new()), config);
-    kernel
-        .filesystem_mut()
-        .inner_mut()
-        .inner_mut()
-        .mount("/etc", MemoryFileSystem::new(), MountOptions::new("memory"))
-        .expect("seed sensitive mount");
-
-    let error = kernel
-        .unmount_filesystem("/etc")
-        .expect_err("sensitive unmount should be denied");
-    assert_eq!(error.code(), "EACCES");
-    assert!(error
-        .to_string()
-        .contains("sensitive mounts require elevation"));
-    assert_eq!(
-        checked
-            .lock()
-            .expect("checked sensitive unmount paths lock poisoned")
-            .as_slice(),
-        [
-            (
-                secure_exec_kernel::permissions::FsOperation::Write,
-                String::from("/etc"),
-            ),
-            (
-                secure_exec_kernel::permissions::FsOperation::MountSensitive,
-                String::from("/etc"),
-            ),
-        ]
-        .as_slice()
-    );
-}
diff --git a/crates/kernel/tests/pipe_manager.rs b/crates/kernel/tests/pipe_manager.rs
deleted file mode 100644
index 55dc93c7a..000000000
--- a/crates/kernel/tests/pipe_manager.rs
+++ /dev/null
@@ -1,379 +0,0 @@
-use secure_exec_kernel::fd_table::{FdResult, FdTableManager, FILETYPE_PIPE};
-use secure_exec_kernel::pipe_manager::{
-    PipeManager, PipeResult, MAX_PIPE_BUFFER_BYTES, PIPE_BUF_BYTES,
-};
-use std::fmt::Debug;
-use std::sync::atomic::{AtomicBool, Ordering};
-use std::sync::Arc;
-use std::thread;
-use std::time::{Duration, Instant};
-
-fn assert_pipe_error<T: Debug>(result: PipeResult<T>, expected: &str) {
-    let error = result.expect_err("operation should fail");
-    assert_eq!(error.code(), expected);
-}
-
-fn assert_fd_error<T: Debug>(result: FdResult<T>, expected: &str) {
-    let error = result.expect_err("operation should fail");
-    assert_eq!(error.code(), expected);
-}
-
-fn wait_for_waiting_reader(manager: &PipeManager, description_id: u64) {
-    wait_for_waiting_readers(manager, description_id, 1);
-}
-
-fn wait_for_waiting_readers(manager: &PipeManager, description_id: u64, expected: usize) {
-    let deadline = Instant::now() + Duration::from_secs(1);
-    loop {
-        let count = manager
-            .waiting_reader_count(description_id)
-            .expect("pipe should still exist");
-        if count >= expected {
-            return;
-        }
-        assert!(
-            Instant::now() < deadline,
-            "expected {expected} waiting readers on pipe description {description_id}, got {count}"
-        );
-        thread::sleep(Duration::from_millis(1));
-    }
-}
-
-#[test]
-fn create_pipe_returns_distinct_read_and_write_descriptions() {
-    let manager = PipeManager::new();
-    let pipe = manager.create_pipe();
-
-    assert_ne!(pipe.read.description.id(), pipe.write.description.id());
-    assert!(manager.is_pipe(pipe.read.description.id()));
-    assert!(manager.is_pipe(pipe.write.description.id()));
-}
-
-#[test]
-fn buffered_writes_are_read_back_and_partial_reads_preserve_remainder() {
-    let manager = PipeManager::new();
-    let pipe = manager.create_pipe();
-
-    manager
-        .write(pipe.write.description.id(), b"hello world")
-        .expect("write pipe contents");
-
-    let first = manager
-        .read(pipe.read.description.id(), 5)
-        .expect("read first slice")
-        .expect("first slice should contain data");
-    let second = manager
-        .read(pipe.read.description.id(), 1024)
-        .expect("read remainder")
-        .expect("remainder should contain data");
-
-    assert_eq!(String::from_utf8(first).expect("utf8"), "hello");
-    assert_eq!(String::from_utf8(second).expect("utf8"), " world");
-}
-
-#[test]
-fn read_blocks_until_a_writer_delivers_data() {
-    let manager = PipeManager::new();
-    let pipe = manager.create_pipe();
-    let read_id = pipe.read.description.id();
-    let write_id = pipe.write.description.id();
-    let reader = manager.clone();
-
-    let handle = thread::spawn(move || {
-        reader
-            .read(read_id, 1024)
-            .expect("blocking read should succeed")
-            .expect("blocking read should produce data")
-    });
-
-    thread::sleep(Duration::from_millis(10));
-    manager
-        .write(write_id, b"delayed")
-        .expect("write delayed payload");
-
-    assert_eq!(
-        String::from_utf8(handle.join().expect("reader thread should finish")).expect("utf8"),
-        "delayed"
-    );
-}
-
-#[test]
-fn closing_the_write_end_delivers_eof_to_waiting_readers() {
-    let manager = PipeManager::new();
-    let pipe = manager.create_pipe();
-    let read_id = pipe.read.description.id();
-    let write_id = pipe.write.description.id();
-    let reader = manager.clone();
-
-    let handle = thread::spawn(move || reader.read(read_id, 1024).expect("blocking read"));
-    wait_for_waiting_reader(&manager, read_id);
-    manager.close(write_id);
-
-    assert_eq!(handle.join().expect("reader thread should finish"), None);
-}
-
-#[test]
-fn closing_the_read_end_does_not_wake_waiting_readers() {
-    let manager = PipeManager::new();
-    let pipe = manager.create_pipe();
-    let read_id = pipe.read.description.id();
-    let write_id = pipe.write.description.id();
-    let reader = manager.clone();
-    let completed = Arc::new(AtomicBool::new(false));
-    let completed_for_thread = Arc::clone(&completed);
-
-    let handle = thread::spawn(move || {
-        let result = reader.read(read_id, 1024).expect("blocking read");
-        completed_for_thread.store(true, Ordering::SeqCst);
-        result
-    });
-
-    wait_for_waiting_reader(&manager, read_id);
-    manager.close(read_id);
-    thread::sleep(Duration::from_millis(25));
-    assert!(!completed.load(Ordering::SeqCst));
-
-    manager.close(write_id);
-    assert_eq!(handle.join().expect("reader thread should finish"), None);
-}
-
-#[test]
-fn buffer_limit_is_enforced_until_the_reader_drains_the_pipe() {
-    let manager = PipeManager::new();
-    let pipe = manager.create_pipe();
-
-    manager
-        .write(pipe.write.description.id(), vec![0; MAX_PIPE_BUFFER_BYTES])
-        .expect("fill pipe buffer");
-    assert_pipe_error(manager.write(pipe.write.description.id(), [1]), "EAGAIN");
-
-    let drained = manager
-        .read(pipe.read.description.id(), MAX_PIPE_BUFFER_BYTES)
-        .expect("drain buffer")
-        .expect("buffer should contain data");
-    assert_eq!(drained.len(), MAX_PIPE_BUFFER_BYTES);
-
-    manager
-        .write(pipe.write.description.id(), vec![2; 1024])
-        .expect("write after draining");
-}
-
-#[test]
-fn blocking_small_writes_wait_for_full_pipe_buf_capacity() {
-    let manager = PipeManager::new();
-    let pipe = manager.create_pipe();
-    let read_id = pipe.read.description.id();
-    let write_id = pipe.write.description.id();
-    let writer = manager.clone();
-
-    manager
-        .write(
-            write_id,
-            vec![0; MAX_PIPE_BUFFER_BYTES - (PIPE_BUF_BYTES - 1)],
-        )
-        .expect("fill pipe to one byte below PIPE_BUF headroom");
-
-    let handle = thread::spawn(move || {
-        writer
-            .write_blocking(write_id, vec![1; PIPE_BUF_BYTES])
-            .expect("small blocking write should eventually succeed")
-    });
-
-    thread::sleep(Duration::from_millis(25));
-    assert!(
-        !handle.is_finished(),
-        "PIPE_BUF-sized write should wait until the full chunk fits"
-    );
-
-    let first = manager
-        .read(read_id, 1)
-        .expect("drain one byte")
-        .expect("byte should be present");
-    assert_eq!(first, vec![0]);
-
-    assert_eq!(
-        handle.join().expect("writer thread should finish"),
-        PIPE_BUF_BYTES
-    );
-
-    let drained = manager
-        .read(read_id, MAX_PIPE_BUFFER_BYTES)
-        .expect("drain remainder")
-        .expect("remainder should be present");
-    assert_eq!(drained.len(), MAX_PIPE_BUFFER_BYTES);
-    assert!(drained[..drained.len() - PIPE_BUF_BYTES]
-        .iter()
-        .all(|byte| *byte == 0));
-    assert!(drained[drained.len() - PIPE_BUF_BYTES..]
-        .iter()
-        .all(|byte| *byte == 1));
-}
-
-#[test]
-fn waiting_reader_receives_large_writes_without_hitting_the_buffer_limit() {
-    let manager = PipeManager::new();
-    let pipe = manager.create_pipe();
-    let read_id = pipe.read.description.id();
-    let write_id = pipe.write.description.id();
-    let reader = manager.clone();
-
-    let handle = thread::spawn(move || {
-        reader
-            .read(read_id, MAX_PIPE_BUFFER_BYTES + 1024)
-            .expect("blocking read should succeed")
-            .expect("blocking read should receive data")
-            .len()
-    });
-
-    wait_for_waiting_reader(&manager, read_id);
-    manager
-        .write(write_id, vec![7; MAX_PIPE_BUFFER_BYTES + 1024])
-        .expect("large direct write should bypass buffering");
-
-    assert_eq!(
-        handle.join().expect("reader thread should finish"),
-        MAX_PIPE_BUFFER_BYTES + 1024
-    );
-}
-
-#[test]
-fn direct_handoff_honors_waiting_reader_length_and_buffers_the_remainder() {
-    let manager = PipeManager::new();
-    let pipe = manager.create_pipe();
-    let read_id = pipe.read.description.id();
-    let write_id = pipe.write.description.id();
-    let reader = manager.clone();
-
-    let handle = thread::spawn(move || {
-        reader
-            .read(read_id, 10)
-            .expect("blocking read should succeed")
-            .expect("blocking read should receive data")
-    });
-
-    wait_for_waiting_reader(&manager, read_id);
-    manager
-        .write(write_id, vec![7; 1024])
-        .expect("direct handoff write should succeed");
-
-    let first = handle.join().expect("reader thread should finish");
-    let second = manager
-        .read(read_id, 2048)
-        .expect("remainder read should succeed")
-        .expect("remainder should stay buffered");
-
-    assert_eq!(first, vec![7; 10]);
-    assert_eq!(second.len(), 1014);
-    assert!(second.iter().all(|byte| *byte == 7));
-}
-
-#[test]
-fn many_waiting_readers_are_cleaned_up_when_the_write_end_closes() {
-    let manager = PipeManager::new();
-    let pipe = manager.create_pipe();
-    let read_id = pipe.read.description.id();
-    let write_id = pipe.write.description.id();
-    let mut handles = Vec::new();
-
-    for _ in 0..32 {
-        let reader = manager.clone();
-        handles.push(thread::spawn(move || {
-            reader.read(read_id, 1024).expect("blocking read")
-        }));
-    }
-
-    wait_for_waiting_readers(&manager, read_id, handles.len());
-    manager.close(write_id);
-
-    for handle in handles {
-        assert_eq!(handle.join().expect("reader thread should finish"), None);
-    }
-    assert_eq!(manager.pending_read_waiter_count(), 0);
-    assert_eq!(
-        manager
-            .waiting_reader_count(read_id)
-            .expect("pipe should remain until read end closes"),
-        0
-    );
-}
-
-#[test]
-fn many_timed_out_readers_are_removed_from_the_waiting_queue() {
-    let manager = PipeManager::new();
-    let pipe = manager.create_pipe();
-    let read_id = pipe.read.description.id();
-    let mut handles = Vec::new();
-
-    for _ in 0..32 {
-        let reader = manager.clone();
-        handles.push(thread::spawn(move || {
-            reader
-                .read_with_timeout(read_id, 1024, Some(Duration::from_secs(2)))
-                .expect_err("read should time out")
-                .code()
-                .to_owned()
-        }));
-    }
-
-    wait_for_waiting_readers(&manager, read_id, handles.len());
-    for handle in handles {
-        assert_eq!(
-            handle.join().expect("reader thread should finish"),
-            "EAGAIN"
-        );
-    }
-    assert_eq!(manager.pending_read_waiter_count(), 0);
-    assert_eq!(
-        manager
-            .waiting_reader_count(read_id)
-            .expect("pipe should remain open"),
-        0
-    );
-}
-
-#[test]
-fn writing_after_the_read_end_closes_returns_epipe() {
-    let manager = PipeManager::new();
-    let pipe = manager.create_pipe();
-
-    manager.close(pipe.read.description.id());
-    assert_pipe_error(manager.write(pipe.write.description.id(), b"fail"), "EPIPE");
-}
-
-#[test]
-fn create_pipe_fds_allocates_pipe_entries_in_the_fd_table() {
-    let manager = PipeManager::new();
-    let mut tables = FdTableManager::new();
-    tables.create(1);
-
-    let (read_fd, write_fd) = manager
-        .create_pipe_fds(tables.get_mut(1).expect("FD table should exist"))
-        .expect("create pipe FDs");
-    let table = tables.get(1).expect("FD table should exist");
-
-    assert_eq!(read_fd, 3);
-    assert_eq!(write_fd, 4);
-    assert_eq!(
-        table.get(read_fd).expect("read entry").filetype,
-        FILETYPE_PIPE
-    );
-    assert_eq!(
-        table.get(write_fd).expect("write entry").filetype,
-        FILETYPE_PIPE
-    );
-}
-
-#[test]
-fn create_pipe_fds_propagates_fd_allocation_failures() {
-    let manager = PipeManager::new();
-    let mut tables = FdTableManager::new();
-    let table = tables.create(1);
-
-    for index in 0..253 {
-        table
-            .open(&format!("/tmp/file-{index}"), 0)
-            .expect("fill remaining FD slots");
-    }
-
-    assert_fd_error(manager.create_pipe_fds(table), "EMFILE");
-}
diff --git a/crates/kernel/tests/poll.rs b/crates/kernel/tests/poll.rs
deleted file mode 100644
index 5c050ff9f..000000000
--- a/crates/kernel/tests/poll.rs
+++ /dev/null
@@ -1,422 +0,0 @@
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig, SpawnOptions};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::poll::{PollFd, PollTargetEntry, POLLERR, POLLHUP, POLLIN, POLLOUT};
-use secure_exec_kernel::resource_accounting::ResourceLimits;
-use secure_exec_kernel::socket_table::{InetSocketAddress, SocketShutdown, SocketSpec};
-use secure_exec_kernel::vfs::MemoryFileSystem;
-use std::time::{Duration, Instant};
-
-fn kernel_vm(vm_id: &str) -> KernelVm<MemoryFileSystem> {
-    let mut config = KernelVmConfig::new(vm_id);
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell driver");
-    kernel
-}
-
-fn spawn_shell(kernel: &mut KernelVm<MemoryFileSystem>) -> u32 {
-    kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell")
-        .pid()
-}
-
-fn bind_udp_socket(kernel: &mut KernelVm<MemoryFileSystem>, pid: u32, port: u16) -> u64 {
-    let socket_id = kernel
-        .socket_create("shell", pid, SocketSpec::udp())
-        .expect("create UDP socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            pid,
-            socket_id,
-            InetSocketAddress::new("127.0.0.1", port),
-        )
-        .expect("bind UDP socket");
-    socket_id
-}
-
-#[test]
-fn poll_reports_pipe_readiness_and_hangup() {
-    let mut kernel = kernel_vm("vm-poll-pipe");
-    let pid = spawn_shell(&mut kernel);
-    let (read_fd, write_fd) = kernel.open_pipe("shell", pid).expect("open pipe");
-
-    let initial = kernel
-        .poll_fds(
-            "shell",
-            pid,
-            vec![PollFd::new(read_fd, POLLIN), PollFd::new(write_fd, POLLOUT)],
-            0,
-        )
-        .expect("poll initial pipe state");
-    assert_eq!(initial.ready_count, 1);
-    assert_eq!(initial.fds[0].revents.bits(), 0);
-    assert_eq!(initial.fds[1].revents, POLLOUT);
-
-    kernel
-        .fd_write("shell", pid, write_fd, b"hello")
-        .expect("write pipe payload");
-    kernel
-        .fd_close("shell", pid, write_fd)
-        .expect("close pipe writer");
-
-    let ready = kernel
-        .poll_fds("shell", pid, vec![PollFd::new(read_fd, POLLIN)], 0)
-        .expect("poll readable pipe");
-    assert_eq!(ready.ready_count, 1);
-    assert!(ready.fds[0].revents.contains(POLLIN));
-    assert!(ready.fds[0].revents.contains(POLLHUP));
-}
-
-#[test]
-fn poll_reports_pipe_peer_close_as_pollerr_on_writer() {
-    let mut kernel = kernel_vm("vm-poll-pipe-err");
-    let pid = spawn_shell(&mut kernel);
-    let (read_fd, write_fd) = kernel.open_pipe("shell", pid).expect("open pipe");
-
-    kernel
-        .fd_close("shell", pid, read_fd)
-        .expect("close pipe reader");
-
-    let ready = kernel
-        .poll_fds("shell", pid, vec![PollFd::new(write_fd, POLLOUT)], 0)
-        .expect("poll closed writer peer");
-    assert_eq!(ready.ready_count, 1);
-    assert!(ready.fds[0].revents.contains(POLLERR));
-    assert!(!ready.fds[0].revents.contains(POLLOUT));
-}
-
-#[test]
-fn poll_targets_report_socket_stream_readiness_and_hangup() {
-    let mut kernel = kernel_vm("vm-poll-socket-stream");
-    let client_pid = spawn_shell(&mut kernel);
-    let server_pid = spawn_shell(&mut kernel);
-
-    let client_socket = kernel
-        .socket_create("shell", client_pid, SocketSpec::tcp())
-        .expect("create client socket");
-    let server_socket = kernel
-        .socket_create("shell", server_pid, SocketSpec::tcp())
-        .expect("create server socket");
-    kernel
-        .socket_connect_pair("shell", client_pid, client_socket, server_socket)
-        .expect("connect socket pair");
-
-    let initial = kernel
-        .poll_targets(
-            "shell",
-            client_pid,
-            vec![PollTargetEntry::socket(client_socket, POLLOUT)],
-            0,
-        )
-        .expect("poll writable client socket");
-    assert_eq!(initial.ready_count, 1);
-    assert_eq!(initial.targets[0].revents, POLLOUT);
-
-    kernel
-        .socket_write("shell", client_pid, client_socket, b"socket-ready")
-        .expect("write client payload");
-    let readable = kernel
-        .poll_targets(
-            "shell",
-            server_pid,
-            vec![PollTargetEntry::socket(server_socket, POLLIN)],
-            0,
-        )
-        .expect("poll readable server socket");
-    assert_eq!(readable.ready_count, 1);
-    assert_eq!(readable.targets[0].revents, POLLIN);
-
-    kernel
-        .socket_shutdown("shell", client_pid, client_socket, SocketShutdown::Write)
-        .expect("shutdown client write side");
-    let hung_up = kernel
-        .poll_targets(
-            "shell",
-            server_pid,
-            vec![PollTargetEntry::socket(server_socket, POLLIN | POLLOUT)],
-            0,
-        )
-        .expect("poll server after peer shutdown");
-    assert_eq!(hung_up.ready_count, 1);
-    assert!(hung_up.targets[0].revents.contains(POLLIN));
-    assert!(hung_up.targets[0].revents.contains(POLLHUP));
-    assert!(hung_up.targets[0].revents.contains(POLLOUT));
-}
-
-#[test]
-fn poll_targets_suppress_stream_pollout_when_socket_buffer_limit_is_full() {
-    let mut config = KernelVmConfig::new("vm-poll-socket-buffer-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_socket_buffered_bytes: Some(3),
-        ..ResourceLimits::default()
-    };
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell driver");
-    let client_pid = spawn_shell(&mut kernel);
-    let server_pid = spawn_shell(&mut kernel);
-
-    let client_socket = kernel
-        .socket_create("shell", client_pid, SocketSpec::tcp())
-        .expect("create client socket");
-    let server_socket = kernel
-        .socket_create("shell", server_pid, SocketSpec::tcp())
-        .expect("create server socket");
-    kernel
-        .socket_connect_pair("shell", client_pid, client_socket, server_socket)
-        .expect("connect socket pair");
-
-    let writable = kernel
-        .poll_targets(
-            "shell",
-            client_pid,
-            vec![PollTargetEntry::socket(client_socket, POLLOUT)],
-            0,
-        )
-        .expect("poll initially writable client socket");
-    assert_eq!(writable.ready_count, 1);
-    assert_eq!(writable.targets[0].revents, POLLOUT);
-
-    kernel
-        .socket_write("shell", client_pid, client_socket, b"abc")
-        .expect("fill stream receive buffer budget");
-    let blocked = kernel
-        .poll_targets(
-            "shell",
-            client_pid,
-            vec![PollTargetEntry::socket(client_socket, POLLOUT)],
-            0,
-        )
-        .expect("poll client socket at buffer limit");
-    assert_eq!(blocked.ready_count, 0);
-    assert_eq!(
-        blocked.targets[0].revents,
-        secure_exec_kernel::poll::PollEvents::empty()
-    );
-
-    let _ = kernel
-        .socket_read("shell", server_pid, server_socket, 3)
-        .expect("drain stream receive buffer");
-    let writable_again = kernel
-        .poll_targets(
-            "shell",
-            client_pid,
-            vec![PollTargetEntry::socket(client_socket, POLLOUT)],
-            0,
-        )
-        .expect("poll client socket after draining buffer");
-    assert_eq!(writable_again.ready_count, 1);
-    assert_eq!(writable_again.targets[0].revents, POLLOUT);
-}
-
-#[test]
-fn poll_targets_suppress_udp_pollout_when_datagram_queue_limit_is_full() {
-    let mut config = KernelVmConfig::new("vm-poll-udp-queue-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_socket_datagram_queue_len: Some(1),
-        ..ResourceLimits::default()
-    };
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell driver");
-    let sender_pid = spawn_shell(&mut kernel);
-    let receiver_pid = spawn_shell(&mut kernel);
-    let sender_socket = bind_udp_socket(&mut kernel, sender_pid, 54161);
-    let receiver_socket = bind_udp_socket(&mut kernel, receiver_pid, 43162);
-
-    let writable = kernel
-        .poll_targets(
-            "shell",
-            sender_pid,
-            vec![PollTargetEntry::socket(sender_socket, POLLOUT)],
-            0,
-        )
-        .expect("poll initially writable UDP socket");
-    assert_eq!(writable.ready_count, 1);
-    assert_eq!(writable.targets[0].revents, POLLOUT);
-
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender_pid,
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43162),
-            b"queued",
-        )
-        .expect("fill UDP datagram queue budget");
-    let blocked = kernel
-        .poll_targets(
-            "shell",
-            sender_pid,
-            vec![PollTargetEntry::socket(sender_socket, POLLOUT)],
-            0,
-        )
-        .expect("poll UDP socket at queue limit");
-    assert_eq!(blocked.ready_count, 0);
-    assert_eq!(
-        blocked.targets[0].revents,
-        secure_exec_kernel::poll::PollEvents::empty()
-    );
-
-    let _ = kernel
-        .socket_recv_datagram("shell", receiver_pid, receiver_socket, 16)
-        .expect("drain UDP datagram queue");
-    let writable_again = kernel
-        .poll_targets(
-            "shell",
-            sender_pid,
-            vec![PollTargetEntry::socket(sender_socket, POLLOUT)],
-            0,
-        )
-        .expect("poll UDP socket after draining queue");
-    assert_eq!(writable_again.ready_count, 1);
-    assert_eq!(writable_again.targets[0].revents, POLLOUT);
-}
-
-#[test]
-fn poll_targets_support_mixed_fd_and_socket_sets() {
-    let mut kernel = kernel_vm("vm-poll-mixed");
-    let pid = spawn_shell(&mut kernel);
-    let sender_pid = spawn_shell(&mut kernel);
-    let (pipe_read_fd, _pipe_write_fd) = kernel.open_pipe("shell", pid).expect("open pipe");
-    let (master_fd, slave_fd, _path) = kernel.open_pty("shell", pid).expect("open pty");
-    let receiver_socket = bind_udp_socket(&mut kernel, pid, 43161);
-    let sender_socket = bind_udp_socket(&mut kernel, sender_pid, 54061);
-
-    kernel
-        .fd_write("shell", pid, slave_fd, b"tty-ready")
-        .expect("write pty output");
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender_pid,
-            sender_socket,
-            InetSocketAddress::new("localhost", 43161),
-            b"udp-ready",
-        )
-        .expect("send UDP payload");
-
-    let ready = kernel
-        .poll_targets(
-            "shell",
-            pid,
-            vec![
-                PollTargetEntry::fd(pipe_read_fd, POLLIN),
-                PollTargetEntry::fd(master_fd, POLLIN),
-                PollTargetEntry::socket(receiver_socket, POLLIN),
-            ],
-            -1,
-        )
-        .expect("poll mixed target set");
-    assert_eq!(ready.ready_count, 2);
-    assert_eq!(ready.targets[0].revents.bits(), 0);
-    assert_eq!(ready.targets[1].revents, POLLIN);
-    assert_eq!(ready.targets[2].revents, POLLIN);
-}
-
-#[test]
-fn poll_targets_respect_finite_timeouts_across_fd_and_socket_sets() {
-    let mut kernel = kernel_vm("vm-poll-timeout");
-    let pid = spawn_shell(&mut kernel);
-    let _peer_pid = spawn_shell(&mut kernel);
-    let (read_fd, _write_fd) = kernel.open_pipe("shell", pid).expect("open pipe");
-    let listener = kernel
-        .socket_create("shell", pid, SocketSpec::tcp())
-        .expect("create listener socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            pid,
-            listener,
-            InetSocketAddress::new("127.0.0.1", 43162),
-        )
-        .expect("bind listener");
-    kernel
-        .socket_listen("shell", pid, listener, 1)
-        .expect("listen");
-
-    let start = Instant::now();
-    let ready = kernel
-        .poll_targets(
-            "shell",
-            pid,
-            vec![
-                PollTargetEntry::fd(read_fd, POLLIN),
-                PollTargetEntry::socket(listener, POLLIN),
-            ],
-            30,
-        )
-        .expect("poll timeout");
-    let elapsed = start.elapsed();
-
-    assert_eq!(ready.ready_count, 0);
-    assert_eq!(ready.targets[0].revents.bits(), 0);
-    assert_eq!(ready.targets[1].revents.bits(), 0);
-    assert!(
-        elapsed >= Duration::from_millis(20),
-        "expected poll to wait, observed {elapsed:?}"
-    );
-}
-
-#[test]
-fn poll_fds_rejects_requester_that_does_not_own_process() {
-    let mut kernel = kernel_vm("vm-poll-requester-owner");
-    let pid = spawn_shell(&mut kernel);
-    let (read_fd, _write_fd) = kernel.open_pipe("shell", pid).expect("open pipe");
-    kernel
-        .register_driver(CommandDriver::new("other-driver", ["other-sh"]))
-        .expect("register other driver");
-    kernel
-        .spawn_process(
-            "other-sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("other-driver")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn other driver process");
-
-    let error = kernel
-        .poll_fds("other-driver", pid, vec![PollFd::new(read_fd, POLLIN)], 0)
-        .expect_err("foreign driver should not poll shell-owned process");
-
-    assert_eq!(error.code(), "EPERM");
-}
-
-#[test]
-fn poll_targets_rejects_socket_owned_by_another_process() {
-    let mut kernel = kernel_vm("vm-poll-socket-owner");
-    let socket_owner_pid = spawn_shell(&mut kernel);
-    let polling_pid = spawn_shell(&mut kernel);
-    let socket_id = kernel
-        .socket_create("shell", socket_owner_pid, SocketSpec::tcp())
-        .expect("create socket");
-
-    let error = kernel
-        .poll_targets(
-            "shell",
-            polling_pid,
-            vec![PollTargetEntry::socket(socket_id, POLLIN)],
-            0,
-        )
-        .expect_err("process should not poll a socket it does not own");
-
-    assert_eq!(error.code(), "EPERM");
-}
diff --git a/crates/kernel/tests/process_table.rs b/crates/kernel/tests/process_table.rs
deleted file mode 100644
index 56609da51..000000000
--- a/crates/kernel/tests/process_table.rs
+++ /dev/null
@@ -1,1393 +0,0 @@
-use secure_exec_kernel::process_table::{
-    DriverProcess, ProcessContext, ProcessExitCallback, ProcessResult, ProcessStatus, ProcessTable,
-    ProcessWaitEvent, SigmaskHow, SignalSet, WaitPidFlags, SIGCHLD, SIGCONT, SIGHUP, SIGSTOP,
-    SIGTERM, SIGTSTP,
-};
-use std::collections::BTreeMap;
-use std::fmt::Debug;
-use std::sync::{mpsc, Arc, Condvar, Mutex};
-use std::thread;
-use std::time::{Duration, Instant};
-
-fn assert_error_code<T: Debug>(result: ProcessResult<T>, expected: &str) {
-    let error = result.expect_err("operation should fail");
-    assert_eq!(error.code(), expected);
-}
-
-#[derive(Default)]
-struct MockProcessState {
-    kills: Vec<i32>,
-    exit_code: Option<i32>,
-    on_exit: Option<ProcessExitCallback>,
-    ignore_sigterm: bool,
-}
-
-#[derive(Default)]
-struct MockDriverProcess {
-    state: Mutex<MockProcessState>,
-    exited: Condvar,
-}
-
-impl MockDriverProcess {
-    fn new() -> Arc<Self> {
-        Arc::new(Self::default())
-    }
-
-    fn stubborn() -> Arc<Self> {
-        Arc::new(Self {
-            state: Mutex::new(MockProcessState {
-                ignore_sigterm: true,
-                ..MockProcessState::default()
-            }),
-            exited: Condvar::new(),
-        })
-    }
-
-    fn schedule_exit(self: &Arc<Self>, delay: Duration, exit_code: i32) {
-        let process = Arc::clone(self);
-        thread::spawn(move || {
-            thread::sleep(delay);
-            process.exit(exit_code);
-        });
-    }
-
-    fn exit(&self, exit_code: i32) {
-        let callback = {
-            let mut state = self.state.lock().expect("mock process lock poisoned");
-            if state.exit_code.is_some() {
-                return;
-            }
-            state.exit_code = Some(exit_code);
-            self.exited.notify_all();
-            state.on_exit.clone()
-        };
-
-        if let Some(callback) = callback {
-            callback(exit_code);
-        }
-    }
-
-    fn kills(&self) -> Vec<i32> {
-        self.state
-            .lock()
-            .expect("mock process lock poisoned")
-            .kills
-            .clone()
-    }
-}
-
-impl DriverProcess for MockDriverProcess {
-    fn kill(&self, signal: i32) {
-        let should_exit = {
-            let mut state = self.state.lock().expect("mock process lock poisoned");
-            state.kills.push(signal);
-            signal == 9 || (signal == 15 && !state.ignore_sigterm)
-        };
-
-        if should_exit {
-            self.exit(128 + signal);
-        }
-    }
-
-    fn wait(&self, timeout: Duration) -> Option<i32> {
-        let state = self.state.lock().expect("mock process lock poisoned");
-        if state.exit_code.is_some() {
-            return state.exit_code;
-        }
-
-        let (state, _) = self
-            .exited
-            .wait_timeout(state, timeout)
-            .expect("mock process wait lock poisoned");
-        state.exit_code
-    }
-
-    fn set_on_exit(&self, callback: ProcessExitCallback) {
-        self.state
-            .lock()
-            .expect("mock process lock poisoned")
-            .on_exit = Some(callback);
-    }
-}
-
-fn create_context(ppid: u32) -> ProcessContext {
-    ProcessContext {
-        pid: 0,
-        ppid,
-        env: BTreeMap::new(),
-        cwd: String::from("/"),
-        ..ProcessContext::default()
-    }
-}
-
-fn allocate_pid(table: &ProcessTable) -> u32 {
-    table.allocate_pid().expect("allocate pid")
-}
-
-fn wait_for(predicate: impl Fn() -> bool, timeout: Duration) {
-    let deadline = Instant::now() + timeout;
-    while Instant::now() < deadline {
-        if predicate() {
-            return;
-        }
-        thread::sleep(Duration::from_millis(10));
-    }
-
-    assert!(predicate(), "condition should become true before timeout");
-}
-
-#[test]
-fn register_allocates_expected_process_metadata_and_parent_groups() {
-    let table = ProcessTable::new();
-    let parent = MockDriverProcess::new();
-    let child = MockDriverProcess::new();
-
-    let parent_pid = allocate_pid(&table);
-    let child_pid = allocate_pid(&table);
-
-    let parent_entry = table.register(
-        parent_pid,
-        "wasmvm",
-        "grep",
-        vec![String::from("-r"), String::from("foo")],
-        create_context(0),
-        parent,
-    );
-    let child_entry = table.register(
-        child_pid,
-        "node",
-        "node",
-        vec![String::from("-e"), String::from("1+1")],
-        create_context(parent_pid),
-        child,
-    );
-
-    assert_eq!(parent_entry.pid, 1);
-    assert_eq!(child_entry.pid, 2);
-    assert_eq!(parent_entry.pgid, 1);
-    assert_eq!(parent_entry.sid, 1);
-    assert_eq!(child_entry.pgid, 1);
-    assert_eq!(child_entry.sid, 1);
-    assert_eq!(child_entry.driver, "node");
-}
-
-#[test]
-fn waitpid_resolves_for_exiting_and_already_exited_processes() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let process = MockDriverProcess::new();
-    let pid = allocate_pid(&table);
-    table.register(
-        pid,
-        "wasmvm",
-        "echo",
-        vec![String::from("hello")],
-        create_context(0),
-        process.clone(),
-    );
-
-    process.schedule_exit(Duration::from_millis(10), 0);
-    assert_eq!(
-        table.waitpid(pid).expect("waitpid should resolve"),
-        (pid, 0)
-    );
-    assert_eq!(table.zombie_timer_count(), 0);
-    assert!(
-        table.get(pid).is_none(),
-        "waitpid should reap exited processes"
-    );
-
-    let exited_pid = allocate_pid(&table);
-    table.register(
-        exited_pid,
-        "wasmvm",
-        "true",
-        Vec::new(),
-        create_context(0),
-        MockDriverProcess::new(),
-    );
-    table.mark_exited(exited_pid, 42);
-
-    assert_eq!(
-        table
-            .waitpid(exited_pid)
-            .expect("waitpid should resolve immediately"),
-        (exited_pid, 42)
-    );
-    assert_eq!(table.zombie_timer_count(), 0);
-    assert!(
-        table.get(exited_pid).is_none(),
-        "waitpid should reap already exited processes"
-    );
-}
-
-#[test]
-fn long_lived_parent_retains_zombies_until_waited_under_pressure() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let parent = MockDriverProcess::new();
-    let parent_pid = allocate_pid(&table);
-    let mut child_pids = Vec::new();
-
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(0),
-        parent,
-    );
-
-    for index in 0..100 {
-        let child = MockDriverProcess::new();
-        let child_pid = allocate_pid(&table);
-        table.register(
-            child_pid,
-            "wasmvm",
-            format!("child-{index}"),
-            Vec::new(),
-            create_context(parent_pid),
-            child.clone(),
-        );
-        child.exit(index);
-        child_pids.push((child_pid, index));
-    }
-
-    for (child_pid, _) in &child_pids {
-        assert_eq!(
-            table
-                .get(*child_pid)
-                .expect("child zombie should be retained")
-                .status,
-            ProcessStatus::Exited
-        );
-    }
-    assert_eq!(table.zombie_reaper_thread_spawn_count(), 1);
-    assert_eq!(table.zombie_timer_count(), child_pids.len());
-
-    for (child_pid, status) in child_pids {
-        assert_eq!(
-            table
-                .waitpid_for(parent_pid, -1, WaitPidFlags::empty())
-                .expect("parent wait should succeed"),
-            Some(secure_exec_kernel::process_table::ProcessWaitResult {
-                pid: child_pid,
-                status,
-                event: ProcessWaitEvent::Exited,
-            })
-        );
-    }
-    assert_eq!(table.zombie_timer_count(), 0);
-}
-
-#[test]
-fn allocate_pid_wraps_without_reusing_live_or_zombie_entries() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let max_pid = i32::MAX as u32;
-    let cursor_seed = MockDriverProcess::new();
-    let live_high = MockDriverProcess::new();
-    let zombie_high = MockDriverProcess::new();
-    let live_one = MockDriverProcess::new();
-
-    // Registering max_pid - 2 after the high PIDs moves the public allocation cursor back to max_pid - 1.
-    table.register(
-        max_pid - 1,
-        "wasmvm",
-        "live-high",
-        Vec::new(),
-        create_context(0),
-        live_high,
-    );
-    table.register(
-        max_pid,
-        "wasmvm",
-        "zombie-high",
-        Vec::new(),
-        create_context(0),
-        zombie_high.clone(),
-    );
-    table.register(
-        max_pid - 2,
-        "wasmvm",
-        "cursor-seed",
-        Vec::new(),
-        create_context(0),
-        cursor_seed,
-    );
-    table.register(
-        1,
-        "wasmvm",
-        "live-one",
-        Vec::new(),
-        create_context(0),
-        live_one,
-    );
-    zombie_high.exit(0);
-
-    assert_eq!(
-        table
-            .get(max_pid)
-            .expect("zombie high PID should remain allocated")
-            .status,
-        ProcessStatus::Exited
-    );
-
-    assert_eq!(table.allocate_pid().expect("allocate wrapped pid"), 2);
-    assert_eq!(table.allocate_pid().expect("allocate next pid"), 3);
-}
-
-#[test]
-fn waitpid_for_supports_wnohang_and_waiting_for_any_child() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let parent = MockDriverProcess::new();
-    let child_a = MockDriverProcess::new();
-    let child_b = MockDriverProcess::new();
-
-    let parent_pid = allocate_pid(&table);
-    let child_a_pid = allocate_pid(&table);
-    let child_b_pid = allocate_pid(&table);
-
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(0),
-        parent,
-    );
-    table.register(
-        child_a_pid,
-        "wasmvm",
-        "child-a",
-        Vec::new(),
-        create_context(parent_pid),
-        child_a,
-    );
-    table.register(
-        child_b_pid,
-        "wasmvm",
-        "child-b",
-        Vec::new(),
-        create_context(parent_pid),
-        child_b.clone(),
-    );
-
-    assert_eq!(
-        table
-            .waitpid_for(parent_pid, -1, WaitPidFlags::WNOHANG)
-            .expect("wnohang wait should succeed"),
-        None
-    );
-
-    child_b.exit(27);
-    assert_eq!(
-        table
-            .waitpid_for(parent_pid, -1, WaitPidFlags::empty())
-            .expect("wait for any child should succeed"),
-        Some(secure_exec_kernel::process_table::ProcessWaitResult {
-            pid: child_b_pid,
-            status: 27,
-            event: ProcessWaitEvent::Exited,
-        })
-    );
-    assert!(
-        table.get(child_b_pid).is_none(),
-        "waited child should be reaped"
-    );
-    assert!(
-        table.get(child_a_pid).is_some(),
-        "other matching children should remain"
-    );
-}
-
-#[test]
-fn on_process_exit_runs_before_waitpid_waiters_are_notified() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let process = MockDriverProcess::new();
-    let pid = allocate_pid(&table);
-    table.register(
-        pid,
-        "wasmvm",
-        "sleep",
-        vec![String::from("1")],
-        create_context(0),
-        process.clone(),
-    );
-
-    let (callback_entered_tx, callback_entered_rx) = mpsc::channel();
-    let callback_gate = Arc::new((Mutex::new(false), Condvar::new()));
-    let callback_gate_for_exit = Arc::clone(&callback_gate);
-    table.set_on_process_exit(Some(Arc::new(move |_| {
-        callback_entered_tx
-            .send(())
-            .expect("callback should report entry");
-        let (released, wake) = &*callback_gate_for_exit;
-        let mut released = released.lock().expect("callback gate lock poisoned");
-        while !*released {
-            released = wake
-                .wait(released)
-                .expect("callback gate wait lock poisoned");
-        }
-    })));
-
-    let waiter_table = table.clone();
-    let (wait_result_tx, wait_result_rx) = mpsc::channel();
-    let waiter = thread::spawn(move || {
-        let result = waiter_table.waitpid(pid).expect("waitpid should resolve");
-        wait_result_tx
-            .send(result)
-            .expect("waiter should report exit result");
-    });
-
-    thread::sleep(Duration::from_millis(10));
-    let process_for_exit = process.clone();
-    let exit_handle = thread::spawn(move || {
-        process_for_exit.exit(0);
-    });
-
-    callback_entered_rx
-        .recv_timeout(Duration::from_millis(100))
-        .expect("exit callback should run");
-    assert!(wait_result_rx.try_recv().is_err());
-
-    let (released, wake) = &*callback_gate;
-    *released.lock().expect("callback gate lock poisoned") = true;
-    wake.notify_all();
-    assert_eq!(
-        wait_result_rx
-            .recv_timeout(Duration::from_millis(100))
-            .expect("waitpid should resolve after callback"),
-        (pid, 0)
-    );
-    exit_handle.join().expect("exit thread should finish");
-    waiter.join().expect("waiter thread should finish");
-}
-
-#[test]
-fn waitpid_for_reports_stopped_and_continued_children_once() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let parent = MockDriverProcess::new();
-    let child = MockDriverProcess::new();
-
-    let parent_pid = allocate_pid(&table);
-    let child_pid = allocate_pid(&table);
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(0),
-        parent.clone(),
-    );
-    table.register(
-        child_pid,
-        "wasmvm",
-        "child",
-        Vec::new(),
-        create_context(parent_pid),
-        child,
-    );
-
-    table.mark_stopped(child_pid, SIGSTOP);
-    assert_eq!(
-        table
-            .waitpid_for(parent_pid, child_pid as i32, WaitPidFlags::WNOHANG)
-            .expect("stopped child lookup should succeed"),
-        None
-    );
-    assert_eq!(
-        table
-            .waitpid_for(
-                parent_pid,
-                child_pid as i32,
-                WaitPidFlags::WNOHANG | WaitPidFlags::WUNTRACED,
-            )
-            .expect("wuntraced wait should succeed"),
-        Some(secure_exec_kernel::process_table::ProcessWaitResult {
-            pid: child_pid,
-            status: SIGSTOP,
-            event: ProcessWaitEvent::Stopped,
-        })
-    );
-    assert_eq!(
-        table
-            .get(child_pid)
-            .expect("child remains registered")
-            .status,
-        ProcessStatus::Stopped
-    );
-
-    table.mark_continued(child_pid);
-    assert_eq!(
-        table
-            .waitpid_for(
-                parent_pid,
-                child_pid as i32,
-                WaitPidFlags::WNOHANG | WaitPidFlags::WCONTINUED,
-            )
-            .expect("wcontinued wait should succeed"),
-        Some(secure_exec_kernel::process_table::ProcessWaitResult {
-            pid: child_pid,
-            status: SIGCONT,
-            event: ProcessWaitEvent::Continued,
-        })
-    );
-    assert_eq!(
-        table
-            .get(child_pid)
-            .expect("child remains registered")
-            .status,
-        ProcessStatus::Running
-    );
-    assert_eq!(parent.kills(), vec![SIGCHLD, SIGCHLD]);
-}
-
-#[test]
-fn kill_routes_signals_and_validates_process_existence() {
-    let table = ProcessTable::new();
-    let process = MockDriverProcess::new();
-    let pid = allocate_pid(&table);
-    table.register(
-        pid,
-        "wasmvm",
-        "sleep",
-        vec![String::from("1")],
-        create_context(0),
-        process.clone(),
-    );
-
-    table
-        .kill(pid as i32, 0)
-        .expect("signal 0 is an existence check");
-    assert!(process.kills().is_empty());
-
-    table
-        .kill(pid as i32, 15)
-        .expect("signal should be delivered");
-    assert_eq!(process.kills(), vec![15]);
-
-    assert_error_code(table.kill(999, 15), "ESRCH");
-    assert_error_code(table.kill(pid as i32, -1), "EINVAL");
-    assert_error_code(table.kill(pid as i32, 100), "EINVAL");
-}
-
-#[test]
-fn kill_updates_job_control_state_for_stop_and_continue_signals() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let parent = MockDriverProcess::new();
-    let child = MockDriverProcess::new();
-
-    let parent_pid = allocate_pid(&table);
-    let child_pid = allocate_pid(&table);
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(0),
-        parent.clone(),
-    );
-    table.register(
-        child_pid,
-        "wasmvm",
-        "child",
-        Vec::new(),
-        create_context(parent_pid),
-        child.clone(),
-    );
-
-    table
-        .kill(child_pid as i32, SIGTSTP)
-        .expect("SIGTSTP should stop the child");
-    assert_eq!(child.kills(), vec![SIGTSTP]);
-    assert_eq!(
-        table
-            .get(child_pid)
-            .expect("child remains registered")
-            .status,
-        ProcessStatus::Stopped
-    );
-    assert_eq!(
-        table
-            .waitpid_for(
-                parent_pid,
-                child_pid as i32,
-                WaitPidFlags::WNOHANG | WaitPidFlags::WUNTRACED,
-            )
-            .expect("stopped child wait should succeed"),
-        Some(secure_exec_kernel::process_table::ProcessWaitResult {
-            pid: child_pid,
-            status: SIGTSTP,
-            event: ProcessWaitEvent::Stopped,
-        })
-    );
-
-    table
-        .kill(child_pid as i32, SIGCONT)
-        .expect("SIGCONT should continue the child");
-    assert_eq!(child.kills(), vec![SIGTSTP, SIGCONT]);
-    assert_eq!(
-        table
-            .get(child_pid)
-            .expect("child remains registered")
-            .status,
-        ProcessStatus::Running
-    );
-    assert_eq!(
-        table
-            .waitpid_for(
-                parent_pid,
-                child_pid as i32,
-                WaitPidFlags::WNOHANG | WaitPidFlags::WCONTINUED,
-            )
-            .expect("continued child wait should succeed"),
-        Some(secure_exec_kernel::process_table::ProcessWaitResult {
-            pid: child_pid,
-            status: SIGCONT,
-            event: ProcessWaitEvent::Continued,
-        })
-    );
-    assert_eq!(parent.kills(), vec![SIGCHLD, SIGCHLD]);
-}
-
-#[test]
-fn exiting_child_delivers_sigchld_to_living_parent() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let parent = MockDriverProcess::new();
-    let child = MockDriverProcess::new();
-    let parent_pid = allocate_pid(&table);
-    let child_pid = allocate_pid(&table);
-
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(0),
-        parent.clone(),
-    );
-    table.register(
-        child_pid,
-        "wasmvm",
-        "child",
-        Vec::new(),
-        create_context(parent_pid),
-        child.clone(),
-    );
-
-    child.exit(0);
-
-    wait_for(
-        || parent.kills() == vec![SIGCHLD],
-        Duration::from_millis(100),
-    );
-    assert_eq!(
-        table.waitpid(child_pid).expect("reap child"),
-        (child_pid, 0)
-    );
-}
-
-#[test]
-fn blocked_sigchld_is_queued_until_the_parent_unblocks_it() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let parent = MockDriverProcess::new();
-    let child = MockDriverProcess::new();
-    let parent_pid = allocate_pid(&table);
-    let child_pid = allocate_pid(&table);
-    let sigchld_mask = SignalSet::from_signal(SIGCHLD).expect("SIGCHLD should be valid");
-
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(0),
-        parent.clone(),
-    );
-    table.register(
-        child_pid,
-        "wasmvm",
-        "child",
-        Vec::new(),
-        create_context(parent_pid),
-        child.clone(),
-    );
-
-    assert_eq!(
-        table
-            .sigprocmask(parent_pid, SigmaskHow::Block, sigchld_mask)
-            .expect("block SIGCHLD"),
-        SignalSet::empty()
-    );
-
-    child.exit(0);
-
-    wait_for(
-        || {
-            table
-                .get(child_pid)
-                .is_some_and(|entry| entry.status == ProcessStatus::Exited)
-        },
-        Duration::from_millis(100),
-    );
-    assert!(parent.kills().is_empty(), "SIGCHLD should remain pending");
-    assert_eq!(
-        table.sigpending(parent_pid).expect("pending signals"),
-        sigchld_mask
-    );
-
-    table
-        .sigprocmask(parent_pid, SigmaskHow::Unblock, sigchld_mask)
-        .expect("unblock SIGCHLD");
-
-    wait_for(
-        || parent.kills() == vec![SIGCHLD],
-        Duration::from_millis(100),
-    );
-    assert_eq!(
-        table.sigpending(parent_pid).expect("pending signals"),
-        SignalSet::empty()
-    );
-}
-
-#[test]
-fn killed_child_delivers_sigchld_to_living_parent() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let parent = MockDriverProcess::new();
-    let child = MockDriverProcess::new();
-    let parent_pid = allocate_pid(&table);
-    let child_pid = allocate_pid(&table);
-
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(0),
-        parent.clone(),
-    );
-    table.register(
-        child_pid,
-        "wasmvm",
-        "child",
-        Vec::new(),
-        create_context(parent_pid),
-        child.clone(),
-    );
-
-    table
-        .kill(child_pid as i32, 15)
-        .expect("deliver SIGTERM to child");
-
-    wait_for(
-        || parent.kills() == vec![SIGCHLD],
-        Duration::from_millis(100),
-    );
-    assert_eq!(
-        table.waitpid(child_pid).expect("reap killed child"),
-        (child_pid, 143)
-    );
-}
-
-#[test]
-fn blocked_sigterm_is_delivered_when_the_process_unblocks_it() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let process = MockDriverProcess::new();
-    let pid = allocate_pid(&table);
-    let sigterm_mask = SignalSet::from_signal(SIGTERM).expect("SIGTERM should be valid");
-
-    table.register(
-        pid,
-        "wasmvm",
-        "sleep",
-        Vec::new(),
-        create_context(0),
-        process.clone(),
-    );
-
-    table
-        .sigprocmask(pid, SigmaskHow::Block, sigterm_mask)
-        .expect("block SIGTERM");
-    table
-        .kill(pid as i32, SIGTERM)
-        .expect("queue blocked SIGTERM");
-
-    assert!(
-        process.kills().is_empty(),
-        "blocked SIGTERM should not deliver"
-    );
-    assert_eq!(
-        table.sigpending(pid).expect("pending signals"),
-        sigterm_mask
-    );
-
-    table
-        .sigprocmask(pid, SigmaskHow::Unblock, sigterm_mask)
-        .expect("unblock SIGTERM");
-
-    wait_for(
-        || process.kills() == vec![SIGTERM],
-        Duration::from_millis(100),
-    );
-    assert_eq!(table.waitpid(pid).expect("reap SIGTERM exit"), (pid, 143));
-}
-
-#[test]
-fn process_groups_and_sessions_follow_legacy_rules() {
-    let table = ProcessTable::new();
-
-    let p1 = allocate_pid(&table);
-    let p2 = allocate_pid(&table);
-    let p3 = allocate_pid(&table);
-    let p4 = allocate_pid(&table);
-
-    table.register(
-        p1,
-        "wasmvm",
-        "sh",
-        Vec::new(),
-        create_context(0),
-        MockDriverProcess::new(),
-    );
-    table.register(
-        p2,
-        "wasmvm",
-        "child",
-        Vec::new(),
-        create_context(p1),
-        MockDriverProcess::new(),
-    );
-    table.register(
-        p3,
-        "wasmvm",
-        "peer",
-        Vec::new(),
-        create_context(p1),
-        MockDriverProcess::new(),
-    );
-    table.register(
-        p4,
-        "wasmvm",
-        "other",
-        Vec::new(),
-        create_context(p1),
-        MockDriverProcess::new(),
-    );
-
-    table
-        .setpgid(p2, 0)
-        .expect("process can create its own group");
-    table
-        .setpgid(p3, p2)
-        .expect("peer can join an existing group in the same session");
-    assert_eq!(table.getpgid(p2).expect("pgid"), p2);
-    assert_eq!(table.getpgid(p3).expect("pgid"), p2);
-    assert!(table.has_process_group(p2));
-
-    table.setsid(p4).expect("child can become a session leader");
-    assert_eq!(table.getsid(p4).expect("sid"), p4);
-    assert_error_code(table.setpgid(p3, p4), "EPERM");
-}
-
-#[test]
-fn negative_pid_kill_targets_entire_process_groups() {
-    let table = ProcessTable::new();
-    let leader = MockDriverProcess::new();
-    let peer = MockDriverProcess::new();
-    let pid1 = allocate_pid(&table);
-    let pid2 = allocate_pid(&table);
-
-    table.register(
-        pid1,
-        "wasmvm",
-        "leader",
-        Vec::new(),
-        create_context(0),
-        leader.clone(),
-    );
-    table.register(
-        pid2,
-        "wasmvm",
-        "peer",
-        Vec::new(),
-        create_context(pid1),
-        peer.clone(),
-    );
-    table.setpgid(pid2, pid1).expect("peer joins leader group");
-
-    table
-        .kill(-(pid1 as i32), 15)
-        .expect("group kill should succeed");
-
-    assert_eq!(leader.kills(), vec![15]);
-    assert_eq!(peer.kills(), vec![15]);
-}
-
-#[test]
-fn negative_pid_signal_zero_checks_process_group_liveness() {
-    let table = ProcessTable::new();
-    let leader = MockDriverProcess::new();
-    let peer = MockDriverProcess::new();
-    let leader_pid = allocate_pid(&table);
-    let peer_pid = allocate_pid(&table);
-
-    table.register(
-        leader_pid,
-        "wasmvm",
-        "leader",
-        Vec::new(),
-        create_context(0),
-        leader.clone(),
-    );
-    table.register(
-        peer_pid,
-        "wasmvm",
-        "peer",
-        Vec::new(),
-        create_context(leader_pid),
-        peer.clone(),
-    );
-    table
-        .setpgid(peer_pid, leader_pid)
-        .expect("peer joins leader group");
-
-    table
-        .kill(-(leader_pid as i32), 0)
-        .expect("signal 0 should check process group liveness");
-
-    assert!(leader.kills().is_empty());
-    assert!(peer.kills().is_empty());
-    assert_error_code(table.kill(-999, 0), "ESRCH");
-}
-
-#[test]
-fn negative_pid_kill_reaches_stopped_and_exited_group_members() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let init = MockDriverProcess::new();
-    let parent = MockDriverProcess::new();
-    let leader = MockDriverProcess::stubborn();
-    let stopped = MockDriverProcess::stubborn();
-    let zombie = MockDriverProcess::stubborn();
-    let init_pid = allocate_pid(&table);
-    let parent_pid = allocate_pid(&table);
-    let leader_pid = allocate_pid(&table);
-    let stopped_pid = allocate_pid(&table);
-    let zombie_pid = allocate_pid(&table);
-
-    table.register(
-        init_pid,
-        "wasmvm",
-        "init",
-        Vec::new(),
-        create_context(0),
-        init,
-    );
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(init_pid),
-        parent,
-    );
-    table.register(
-        leader_pid,
-        "wasmvm",
-        "leader",
-        Vec::new(),
-        create_context(parent_pid),
-        leader.clone(),
-    );
-    table.register(
-        stopped_pid,
-        "wasmvm",
-        "stopped",
-        Vec::new(),
-        create_context(parent_pid),
-        stopped.clone(),
-    );
-    table.register(
-        zombie_pid,
-        "wasmvm",
-        "zombie",
-        Vec::new(),
-        create_context(parent_pid),
-        zombie.clone(),
-    );
-    table
-        .setpgid(leader_pid, 0)
-        .expect("leader becomes process-group leader");
-    table
-        .setpgid(stopped_pid, leader_pid)
-        .expect("stopped peer joins leader group");
-    table
-        .setpgid(zombie_pid, leader_pid)
-        .expect("zombie peer joins leader group");
-    table.mark_stopped(stopped_pid, SIGSTOP);
-    zombie.exit(23);
-
-    table
-        .kill(-(leader_pid as i32), 15)
-        .expect("group kill should include stopped and zombie members");
-
-    assert_eq!(leader.kills(), vec![15]);
-    assert_eq!(stopped.kills(), vec![15]);
-    assert_eq!(zombie.kills(), vec![15]);
-}
-
-#[test]
-fn exiting_parent_reparents_children_to_pid_one_when_available() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let init = MockDriverProcess::new();
-    let parent = MockDriverProcess::new();
-    let child = MockDriverProcess::new();
-    let init_pid = allocate_pid(&table);
-    let parent_pid = allocate_pid(&table);
-    let child_pid = allocate_pid(&table);
-
-    table.register(
-        init_pid,
-        "wasmvm",
-        "init",
-        Vec::new(),
-        create_context(0),
-        init,
-    );
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(init_pid),
-        parent.clone(),
-    );
-    table.register(
-        child_pid,
-        "wasmvm",
-        "child",
-        Vec::new(),
-        create_context(parent_pid),
-        child,
-    );
-
-    parent.exit(0);
-
-    assert_eq!(
-        table
-            .getppid(child_pid)
-            .expect("child should be reparented"),
-        1
-    );
-}
-
-#[test]
-fn orphaned_stopped_process_groups_receive_sighup_and_sigcont() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let init = MockDriverProcess::new();
-    let parent = MockDriverProcess::new();
-    let leader = MockDriverProcess::new();
-    let stopped = MockDriverProcess::new();
-    let init_pid = allocate_pid(&table);
-    let parent_pid = allocate_pid(&table);
-    let leader_pid = allocate_pid(&table);
-    let stopped_pid = allocate_pid(&table);
-
-    table.register(
-        init_pid,
-        "wasmvm",
-        "init",
-        Vec::new(),
-        create_context(0),
-        init,
-    );
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(init_pid),
-        parent.clone(),
-    );
-    table.register(
-        leader_pid,
-        "wasmvm",
-        "leader",
-        Vec::new(),
-        create_context(parent_pid),
-        leader.clone(),
-    );
-    table.register(
-        stopped_pid,
-        "wasmvm",
-        "stopped",
-        Vec::new(),
-        create_context(parent_pid),
-        stopped.clone(),
-    );
-    table
-        .setpgid(leader_pid, 0)
-        .expect("leader becomes process-group leader");
-    table
-        .setpgid(stopped_pid, leader_pid)
-        .expect("stopped peer joins leader group");
-    table.mark_stopped(stopped_pid, SIGSTOP);
-
-    parent.exit(0);
-
-    assert_eq!(leader.kills(), vec![SIGHUP, SIGCONT]);
-    assert_eq!(stopped.kills(), vec![SIGHUP, SIGCONT]);
-}
-
-#[test]
-fn terminate_all_escalates_from_sigterm_to_sigkill_for_survivors() {
-    let table = ProcessTable::new();
-    let graceful = MockDriverProcess::new();
-    let stubborn = MockDriverProcess::stubborn();
-
-    let pid1 = allocate_pid(&table);
-    let pid2 = allocate_pid(&table);
-    table.register(
-        pid1,
-        "wasmvm",
-        "graceful",
-        Vec::new(),
-        create_context(0),
-        graceful.clone(),
-    );
-    table.register(
-        pid2,
-        "wasmvm",
-        "stubborn",
-        Vec::new(),
-        create_context(0),
-        stubborn.clone(),
-    );
-
-    table.terminate_all();
-
-    assert_eq!(graceful.kills(), vec![15]);
-    assert_eq!(stubborn.kills(), vec![15, 9]);
-    assert_eq!(
-        table
-            .get(pid1)
-            .expect("graceful process should remain as zombie")
-            .status,
-        ProcessStatus::Exited
-    );
-    assert_eq!(
-        table
-            .get(pid2)
-            .expect("stubborn process should remain as zombie")
-            .status,
-        ProcessStatus::Exited
-    );
-    assert_eq!(table.zombie_timer_count(), 0);
-}
-
-#[test]
-fn list_processes_returns_a_snapshot_of_registered_processes() {
-    let table = ProcessTable::new();
-    let pid1 = allocate_pid(&table);
-    let pid2 = allocate_pid(&table);
-
-    table.register(
-        pid1,
-        "wasmvm",
-        "ls",
-        Vec::new(),
-        create_context(0),
-        MockDriverProcess::new(),
-    );
-    table.register(
-        pid2,
-        "node",
-        "node",
-        Vec::new(),
-        create_context(0),
-        MockDriverProcess::new(),
-    );
-
-    let processes = table.list_processes();
-    assert_eq!(processes.len(), 2);
-    assert_eq!(processes.get(&pid1).expect("process info").command, "ls");
-    assert_eq!(processes.get(&pid2).expect("process info").driver, "node");
-}
-
-#[test]
-fn waitpid_rejects_unknown_processes() {
-    let table = ProcessTable::new();
-    assert_error_code(table.waitpid(9999), "ESRCH");
-}
-
-#[test]
-fn waitpid_for_supports_pid_zero_and_negative_process_group_selectors() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let parent = MockDriverProcess::new();
-    let same_group_child = MockDriverProcess::new();
-    let other_group_child = MockDriverProcess::new();
-
-    let parent_pid = allocate_pid(&table);
-    let same_group_child_pid = allocate_pid(&table);
-    let other_group_child_pid = allocate_pid(&table);
-
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(0),
-        parent,
-    );
-    table.register(
-        same_group_child_pid,
-        "wasmvm",
-        "same-group",
-        Vec::new(),
-        create_context(parent_pid),
-        same_group_child.clone(),
-    );
-    table.register(
-        other_group_child_pid,
-        "wasmvm",
-        "other-group",
-        Vec::new(),
-        create_context(parent_pid),
-        other_group_child.clone(),
-    );
-    table
-        .setpgid(other_group_child_pid, 0)
-        .expect("child should become group leader");
-
-    other_group_child.exit(13);
-    assert_eq!(
-        table
-            .waitpid_for(parent_pid, 0, WaitPidFlags::WNOHANG)
-            .expect("pid=0 wait should succeed"),
-        None
-    );
-
-    same_group_child.exit(11);
-    assert_eq!(
-        table
-            .waitpid_for(parent_pid, 0, WaitPidFlags::empty())
-            .expect("pid=0 wait should reap same-group child"),
-        Some(secure_exec_kernel::process_table::ProcessWaitResult {
-            pid: same_group_child_pid,
-            status: 11,
-            event: ProcessWaitEvent::Exited,
-        })
-    );
-    assert_eq!(
-        table
-            .waitpid_for(
-                parent_pid,
-                -(other_group_child_pid as i32),
-                WaitPidFlags::empty(),
-            )
-            .expect("negative pgid wait should reap matching child"),
-        Some(secure_exec_kernel::process_table::ProcessWaitResult {
-            pid: other_group_child_pid,
-            status: 13,
-            event: ProcessWaitEvent::Exited,
-        })
-    );
-}
-
-#[test]
-fn zombie_reaper_uses_a_single_worker_for_many_exits() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_millis(100));
-    let mut pids = Vec::new();
-
-    for index in 0..100 {
-        let process = MockDriverProcess::new();
-        let pid = allocate_pid(&table);
-        table.register(
-            pid,
-            "wasmvm",
-            format!("proc-{index}"),
-            Vec::new(),
-            create_context(0),
-            process.clone(),
-        );
-        process.exit(0);
-        pids.push(pid);
-    }
-
-    assert_eq!(table.zombie_reaper_thread_spawn_count(), 1);
-    assert_eq!(table.zombie_timer_count(), 100);
-
-    wait_for(|| table.zombie_timer_count() == 0, Duration::from_secs(2));
-
-    for pid in pids {
-        assert!(table.get(pid).is_none(), "process {pid} should be reaped");
-    }
-}
-
-#[test]
-fn zombie_reaper_preserves_child_exit_code_while_parent_is_alive() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_millis(50));
-    let parent = MockDriverProcess::new();
-    let child = MockDriverProcess::new();
-
-    let parent_pid = allocate_pid(&table);
-    let child_pid = allocate_pid(&table);
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(0),
-        parent,
-    );
-    table.register(
-        child_pid,
-        "wasmvm",
-        "child",
-        Vec::new(),
-        create_context(parent_pid),
-        child.clone(),
-    );
-
-    child.exit(41);
-    thread::sleep(Duration::from_millis(200));
-
-    assert_eq!(
-        table
-            .waitpid(child_pid)
-            .expect("child exit code should be preserved"),
-        (child_pid, 41)
-    );
-}
-
-#[test]
-fn zombie_reaper_reaps_exited_children_after_their_parent_exits() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_millis(50));
-    let parent = MockDriverProcess::new();
-    let child = MockDriverProcess::new();
-
-    let parent_pid = allocate_pid(&table);
-    let child_pid = allocate_pid(&table);
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(0),
-        parent.clone(),
-    );
-    table.register(
-        child_pid,
-        "wasmvm",
-        "child",
-        Vec::new(),
-        create_context(parent_pid),
-        child.clone(),
-    );
-
-    child.exit(17);
-    thread::sleep(Duration::from_millis(120));
-    parent.exit(0);
-
-    wait_for(
-        || table.get(parent_pid).is_none() && table.get(child_pid).is_none(),
-        Duration::from_secs(1),
-    );
-}
diff --git a/crates/kernel/tests/pty.rs b/crates/kernel/tests/pty.rs
deleted file mode 100644
index 00e85e0d5..000000000
--- a/crates/kernel/tests/pty.rs
+++ /dev/null
@@ -1,752 +0,0 @@
-use secure_exec_kernel::pty::{
-    LineDisciplineConfig, PartialTermios, PartialTermiosControlChars, PtyManager, MAX_CANON,
-    MAX_PTY_BUFFER_BYTES, SIGINT,
-};
-use std::sync::{Arc, Mutex};
-use std::time::{Duration, Instant};
-
-fn wait_for(predicate: impl Fn() -> bool, timeout: Duration) {
-    let deadline = Instant::now() + timeout;
-    while Instant::now() < deadline {
-        if predicate() {
-            return;
-        }
-        std::thread::sleep(Duration::from_millis(10));
-    }
-
-    assert!(predicate(), "condition should become true before timeout");
-}
-
-#[test]
-fn raw_mode_delivers_bytes_and_applies_icrnl_translation() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-    manager
-        .set_discipline(
-            pty.master.description.id(),
-            LineDisciplineConfig {
-                canonical: Some(false),
-                echo: Some(false),
-                isig: Some(false),
-                ..Default::default()
-            },
-        )
-        .expect("set raw mode");
-
-    manager
-        .write(pty.master.description.id(), b"hello\rworld")
-        .expect("write master");
-    let data = manager
-        .read(pty.slave.description.id(), 64)
-        .expect("read slave")
-        .expect("slave should receive data");
-
-    assert_eq!(String::from_utf8(data).expect("valid utf8"), "hello\nworld");
-}
-
-#[test]
-fn raw_mode_pending_short_read_buffers_remaining_bytes() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-    manager
-        .set_discipline(
-            pty.master.description.id(),
-            LineDisciplineConfig {
-                canonical: Some(false),
-                echo: Some(false),
-                isig: Some(false),
-                ..Default::default()
-            },
-        )
-        .expect("set raw mode");
-
-    let reader = {
-        let manager = manager.clone();
-        let slave_id = pty.slave.description.id();
-        std::thread::spawn(move || {
-            manager
-                .read_with_timeout(slave_id, 1, Some(Duration::from_secs(1)))
-                .expect("pending short read")
-                .expect("first byte should be delivered")
-        })
-    };
-
-    manager
-        .write(pty.master.description.id(), b"hello")
-        .expect("write raw input");
-
-    let first = reader.join().expect("reader thread should finish");
-    assert_eq!(first, b"h");
-
-    let remaining = manager
-        .read(pty.slave.description.id(), 64)
-        .expect("read remaining bytes")
-        .expect("remaining bytes should stay buffered");
-    assert_eq!(remaining, b"ello");
-}
-
-#[test]
-fn split_delivery_with_second_queued_reader_leaves_no_stale_waiters() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-    manager
-        .set_discipline(
-            pty.master.description.id(),
-            LineDisciplineConfig {
-                canonical: Some(false),
-                echo: Some(false),
-                isig: Some(false),
-                ..Default::default()
-            },
-        )
-        .expect("set raw mode");
-
-    let slave_id = pty.slave.description.id();
-
-    // Reader A asks for one byte and must be first in the waiter queue.
-    let reader_a = {
-        let manager = manager.clone();
-        std::thread::spawn(move || {
-            manager
-                .read_with_timeout(slave_id, 1, Some(Duration::from_secs(5)))
-                .expect("first read should succeed")
-                .expect("first read should deliver data")
-        })
-    };
-    wait_for(
-        || manager.pending_read_waiter_count() == 1,
-        Duration::from_secs(1),
-    );
-
-    // Reader B queues behind A and will pick up the buffered tail.
-    let reader_b = {
-        let manager = manager.clone();
-        std::thread::spawn(move || {
-            manager
-                .read_with_timeout(slave_id, 64, Some(Duration::from_secs(5)))
-                .expect("second read should succeed")
-                .expect("second read should deliver data")
-        })
-    };
-    wait_for(
-        || manager.pending_read_waiter_count() == 2,
-        Duration::from_secs(1),
-    );
-
-    // The split delivery hands "h" to reader A and buffers "ello", which
-    // reader B drains directly from the input buffer.
-    manager
-        .write(pty.master.description.id(), b"hello")
-        .expect("write raw input");
-
-    assert_eq!(reader_a.join().expect("reader A should finish"), b"h");
-    assert_eq!(reader_b.join().expect("reader B should finish"), b"ello");
-
-    // Reader B returned via the direct buffer-drain path, so its waiter
-    // entry and queue id must be gone.
-    assert_eq!(manager.pending_read_waiter_count(), 0);
-    assert_eq!(manager.queued_read_waiter_count(), 0);
-
-    // A stale waiter would swallow this write and the read would time out.
-    manager
-        .write(pty.master.description.id(), b"world")
-        .expect("write after split delivery");
-    let follow_up = manager
-        .read_with_timeout(slave_id, 64, Some(Duration::from_secs(1)))
-        .expect("follow-up read should succeed")
-        .expect("follow-up read should deliver data");
-    assert_eq!(follow_up, b"world");
-}
-
-#[test]
-fn split_output_delivery_with_second_queued_reader_leaves_no_stale_waiters() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-    manager
-        .set_discipline(
-            pty.master.description.id(),
-            LineDisciplineConfig {
-                canonical: Some(false),
-                echo: Some(false),
-                isig: Some(false),
-                ..Default::default()
-            },
-        )
-        .expect("set raw mode");
-
-    let master_id = pty.master.description.id();
-
-    // Reader A asks for one byte and must be first in the waiter queue.
-    let reader_a = {
-        let manager = manager.clone();
-        std::thread::spawn(move || {
-            manager
-                .read_with_timeout(master_id, 1, Some(Duration::from_secs(5)))
-                .expect("first read should succeed")
-                .expect("first read should deliver data")
-        })
-    };
-    wait_for(
-        || manager.pending_read_waiter_count() == 1,
-        Duration::from_secs(1),
-    );
-
-    // Reader B queues behind A and will pick up the buffered tail.
-    let reader_b = {
-        let manager = manager.clone();
-        std::thread::spawn(move || {
-            manager
-                .read_with_timeout(master_id, 64, Some(Duration::from_secs(5)))
-                .expect("second read should succeed")
-                .expect("second read should deliver data")
-        })
-    };
-    wait_for(
-        || manager.pending_read_waiter_count() == 2,
-        Duration::from_secs(1),
-    );
-
-    // The split delivery hands "h" to reader A and buffers "ello", which
-    // reader B drains directly from the output buffer.
-    manager
-        .write(pty.slave.description.id(), b"hello")
-        .expect("write slave output");
-
-    assert_eq!(reader_a.join().expect("reader A should finish"), b"h");
-    assert_eq!(reader_b.join().expect("reader B should finish"), b"ello");
-
-    // Reader B returned via the direct buffer-drain path, so its waiter
-    // entry and queue id must be gone.
-    assert_eq!(manager.pending_read_waiter_count(), 0);
-    assert_eq!(manager.queued_read_waiter_count(), 0);
-
-    // A stale waiter would swallow this write and the read would time out.
-    manager
-        .write(pty.slave.description.id(), b"world")
-        .expect("write after split delivery");
-    let follow_up = manager
-        .read_with_timeout(master_id, 64, Some(Duration::from_secs(1)))
-        .expect("follow-up read should succeed")
-        .expect("follow-up read should deliver data");
-    assert_eq!(follow_up, b"world");
-}
-
-#[test]
-fn canonical_mode_buffers_until_newline_and_honors_backspace() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    manager
-        .write(pty.master.description.id(), b"echo helo\x7flo\n")
-        .expect("write canonical input");
-
-    let line = manager
-        .read(pty.slave.description.id(), 64)
-        .expect("read canonical line")
-        .expect("line should be available");
-    assert_eq!(String::from_utf8(line).expect("valid utf8"), "echo hello\n");
-
-    let echo = manager
-        .read(pty.master.description.id(), 64)
-        .expect("read echo")
-        .expect("echo should be available");
-    assert_eq!(
-        String::from_utf8(echo).expect("valid utf8"),
-        "echo helo\x08 \x08lo\r\n"
-    );
-}
-
-#[test]
-fn canonical_mode_eof_on_empty_line_returns_hangup_once() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    manager
-        .write(pty.master.description.id(), [0x04])
-        .expect("write eof char");
-
-    let eof = manager
-        .read(pty.slave.description.id(), 64)
-        .expect("read eof marker");
-    assert_eq!(eof, None);
-
-    manager
-        .write(pty.master.description.id(), b"after\n")
-        .expect("write after eof marker");
-    let line = manager
-        .read(pty.slave.description.id(), 64)
-        .expect("read line after eof")
-        .expect("line should be available");
-    assert_eq!(line, b"after\n");
-}
-
-#[test]
-fn canonical_mode_eof_after_pending_text_delivers_text_without_eof_byte() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    manager
-        .write(pty.master.description.id(), b"partial\x04")
-        .expect("write partial line followed by eof");
-
-    let line = manager
-        .read(pty.slave.description.id(), 64)
-        .expect("read partial line")
-        .expect("partial line should be delivered");
-    assert_eq!(line, b"partial");
-}
-
-#[test]
-fn control_characters_signal_the_foreground_process_group() {
-    let signals = Arc::new(Mutex::new(Vec::new()));
-    let signal_log = Arc::clone(&signals);
-    let manager = PtyManager::with_signal_handler(Arc::new(move |pgid, signal| {
-        signal_log
-            .lock()
-            .expect("signal log lock poisoned")
-            .push((pgid, signal));
-    }));
-    let pty = manager.create_pty();
-
-    manager
-        .set_foreground_pgid(pty.master.description.id(), 42)
-        .expect("set foreground pgid");
-    manager
-        .write(pty.master.description.id(), [0x03])
-        .expect("write intr char");
-
-    assert_eq!(
-        *signals.lock().expect("signal log lock poisoned"),
-        vec![(42, SIGINT)]
-    );
-}
-
-#[test]
-fn window_size_reports_default_and_resize_updates() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    let initial = manager
-        .window_size(pty.slave.description.id())
-        .expect("read initial pty size");
-    assert_eq!((initial.cols, initial.rows), (80, 24));
-
-    manager
-        .resize(pty.master.description.id(), 100, 20)
-        .expect("resize pty");
-    let resized = manager
-        .window_size(pty.slave.description.id())
-        .expect("read resized pty size");
-    assert_eq!((resized.cols, resized.rows), (100, 20));
-}
-
-#[test]
-fn control_character_without_foreground_process_group_clears_canonical_line() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    manager
-        .write(pty.master.description.id(), b"partial command")
-        .expect("write partial line");
-    manager
-        .write(pty.master.description.id(), [0x03])
-        .expect("write intr char");
-
-    let line = manager
-        .read(pty.slave.description.id(), 64)
-        .expect("read canonical interrupt fallback")
-        .expect("fallback line should be available");
-    assert_eq!(line, b"\n");
-
-    let echo = manager
-        .read(pty.master.description.id(), 64)
-        .expect("read interrupt echo")
-        .expect("echo should be available");
-    assert_eq!(
-        String::from_utf8(echo).expect("valid utf8"),
-        "partial command^C\r\n"
-    );
-}
-
-#[test]
-fn peer_close_returns_hangup_instead_of_blocking() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    manager.close(pty.master.description.id());
-    let result = manager
-        .read(pty.slave.description.id(), 16)
-        .expect("read after hangup");
-
-    assert_eq!(result, None);
-}
-
-#[test]
-fn oversized_raw_write_fails_atomically() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-    manager
-        .set_discipline(
-            pty.master.description.id(),
-            LineDisciplineConfig {
-                canonical: Some(false),
-                echo: Some(false),
-                isig: Some(false),
-                ..Default::default()
-            },
-        )
-        .expect("set raw mode");
-
-    let error = manager
-        .write(
-            pty.master.description.id(),
-            vec![b'x'; MAX_PTY_BUFFER_BYTES + 1],
-        )
-        .expect_err("oversized write should fail");
-    assert_eq!(error.code(), "EAGAIN");
-
-    manager
-        .write(pty.master.description.id(), vec![b'a'; MAX_CANON.min(8)])
-        .expect("subsequent small write should still succeed");
-    let data = manager
-        .read(pty.slave.description.id(), 16)
-        .expect("read after failed write")
-        .expect("data should be buffered");
-    assert_eq!(data, vec![b'a'; MAX_CANON.min(8)]);
-}
-
-#[test]
-fn canonical_echo_backpressure_does_not_mutate_pending_line() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    manager
-        .write(pty.slave.description.id(), vec![b'x'; MAX_PTY_BUFFER_BYTES])
-        .expect("fill master output buffer");
-
-    let error = manager
-        .write(pty.master.description.id(), b"a")
-        .expect_err("echo backpressure should reject the input byte");
-    assert_eq!(error.code(), "EAGAIN");
-
-    let drained = manager
-        .read(pty.master.description.id(), MAX_PTY_BUFFER_BYTES)
-        .expect("read full echo buffer")
-        .expect("echo buffer should have data");
-    assert_eq!(drained.len(), MAX_PTY_BUFFER_BYTES);
-
-    manager
-        .write(pty.master.description.id(), b"\n")
-        .expect("newline should succeed after draining echo buffer");
-    let line = manager
-        .read(pty.slave.description.id(), 16)
-        .expect("read canonical line")
-        .expect("line should be delivered");
-
-    assert_eq!(line, b"\n");
-}
-
-#[test]
-fn many_pending_reads_are_cleaned_up_when_peer_closes() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-    let reader_count = 64;
-    let mut readers = Vec::new();
-
-    for _ in 0..reader_count {
-        let manager = manager.clone();
-        let slave_id = pty.slave.description.id();
-        readers.push(std::thread::spawn(move || {
-            manager
-                .read_with_timeout(slave_id, 1, Some(Duration::from_secs(5)))
-                .expect("read should finish on peer close")
-        }));
-    }
-
-    wait_for(
-        || manager.pending_read_waiter_count() == reader_count,
-        Duration::from_secs(1),
-    );
-
-    manager.close(pty.master.description.id());
-
-    for reader in readers {
-        assert_eq!(reader.join().expect("reader thread should finish"), None);
-    }
-    assert_eq!(manager.pending_read_waiter_count(), 0);
-    assert_eq!(manager.queued_read_waiter_count(), 0);
-}
-
-#[test]
-fn many_timed_out_reads_are_removed_from_waiter_queues() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-    let reader_count = 64;
-    let mut readers = Vec::new();
-
-    for _ in 0..reader_count {
-        let manager = manager.clone();
-        let slave_id = pty.slave.description.id();
-        readers.push(std::thread::spawn(move || {
-            manager
-                .read_with_timeout(slave_id, 1, Some(Duration::from_millis(25)))
-                .expect_err("read should time out")
-                .code()
-        }));
-    }
-
-    for reader in readers {
-        assert_eq!(
-            reader.join().expect("reader thread should finish"),
-            "EAGAIN"
-        );
-    }
-    assert_eq!(manager.pending_read_waiter_count(), 0);
-    assert_eq!(manager.queued_read_waiter_count(), 0);
-}
-
-#[test]
-fn set_discipline_only_updates_requested_fields() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    manager
-        .set_discipline(
-            pty.master.description.id(),
-            LineDisciplineConfig {
-                canonical: Some(false),
-                echo: Some(false),
-                isig: Some(false),
-                ..Default::default()
-            },
-        )
-        .expect("set initial raw mode");
-    manager
-        .set_discipline(
-            pty.master.description.id(),
-            LineDisciplineConfig {
-                echo: Some(true),
-                ..LineDisciplineConfig::default()
-            },
-        )
-        .expect("enable echo only");
-
-    let termios = manager
-        .get_termios(pty.master.description.id())
-        .expect("read merged termios");
-    assert!(!termios.icanon);
-    assert!(termios.echo);
-    assert!(!termios.isig);
-}
-
-#[test]
-fn set_termios_only_updates_requested_fields() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    manager
-        .set_termios(
-            pty.master.description.id(),
-            PartialTermios {
-                echo: Some(false),
-                cc: Some(PartialTermiosControlChars {
-                    verase: Some(0x08),
-                    ..PartialTermiosControlChars::default()
-                }),
-                ..PartialTermios::default()
-            },
-        )
-        .expect("merge termios update");
-
-    let termios = manager
-        .get_termios(pty.master.description.id())
-        .expect("read merged termios");
-    assert!(termios.icrnl);
-    assert!(termios.icanon);
-    assert!(!termios.echo);
-    assert_eq!(termios.cc.verase, 0x08);
-    assert_eq!(termios.cc.vintr, 0x03);
-}
-
-#[test]
-fn canonical_mode_kill_erases_the_whole_line() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    // Type "abc", then VKILL (Ctrl-U, 0x15) to wipe the line, then "xy\n".
-    manager
-        .write(pty.master.description.id(), b"abc\x15xy\n")
-        .expect("write canonical input with kill");
-
-    let line = manager
-        .read(pty.slave.description.id(), 64)
-        .expect("read canonical line")
-        .expect("line should be available");
-    assert_eq!(String::from_utf8(line).expect("valid utf8"), "xy\n");
-
-    let echo = manager
-        .read(pty.master.description.id(), 64)
-        .expect("read echo")
-        .expect("echo should be available");
-    // "abc" echoed, then three BS-SP-BS to erase them, then "xy", then CRLF.
-    assert_eq!(
-        String::from_utf8(echo).expect("valid utf8"),
-        "abc\x08 \x08\x08 \x08\x08 \x08xy\r\n"
-    );
-}
-
-#[test]
-fn canonical_mode_kill_on_empty_line_is_noop() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    manager
-        .write(pty.master.description.id(), b"\x15hi\n")
-        .expect("write kill on empty line");
-
-    let line = manager
-        .read(pty.slave.description.id(), 64)
-        .expect("read canonical line")
-        .expect("line should be available");
-    assert_eq!(String::from_utf8(line).expect("valid utf8"), "hi\n");
-
-    let echo = manager
-        .read(pty.master.description.id(), 64)
-        .expect("read echo")
-        .expect("echo should be available");
-    // No erase output for the empty-line kill; just the "hi" echo + CRLF.
-    assert_eq!(String::from_utf8(echo).expect("valid utf8"), "hi\r\n");
-}
-
-#[test]
-fn canonical_mode_werase_erases_preceding_word_and_trailing_space() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    // "foo bar " then VWERASE (Ctrl-W, 0x17) erases the trailing space and
-    // "bar", leaving "foo ", then "baz\n".
-    manager
-        .write(pty.master.description.id(), b"foo bar \x17baz\n")
-        .expect("write canonical input with werase");
-
-    let line = manager
-        .read(pty.slave.description.id(), 64)
-        .expect("read canonical line")
-        .expect("line should be available");
-    assert_eq!(String::from_utf8(line).expect("valid utf8"), "foo baz\n");
-
-    let echo = manager
-        .read(pty.master.description.id(), 64)
-        .expect("read echo")
-        .expect("echo should be available");
-    // "foo bar " echoed (8 chars), then 4 BS-SP-BS erases (space + "bar"),
-    // then "baz", then CRLF.
-    let mut expected = String::from("foo bar ");
-    expected.push_str(&"\x08 \x08".repeat(4));
-    expected.push_str("baz\r\n");
-    assert_eq!(String::from_utf8(echo).expect("valid utf8"), expected);
-}
-
-#[test]
-fn canonical_mode_werase_on_leading_whitespace_only_erases_it() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    // Only whitespace before VWERASE: erase all of it, nothing else.
-    manager
-        .write(pty.master.description.id(), b"   \x17done\n")
-        .expect("write whitespace then werase");
-
-    let line = manager
-        .read(pty.slave.description.id(), 64)
-        .expect("read canonical line")
-        .expect("line should be available");
-    assert_eq!(String::from_utf8(line).expect("valid utf8"), "done\n");
-}
-
-#[test]
-fn canonical_mode_echoctl_echoes_control_char_in_caret_form() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    // A control char that is neither a signal, VEOF, VERASE, VKILL, VWERASE,
-    // nor newline (0x01 = Ctrl-A) is buffered and echoed as caret form "^A".
-    manager
-        .write(pty.master.description.id(), b"a\x01b\n")
-        .expect("write control char in canonical mode");
-
-    let line = manager
-        .read(pty.slave.description.id(), 64)
-        .expect("read canonical line")
-        .expect("line should be available");
-    // The raw control byte is delivered to the slave verbatim.
-    assert_eq!(line, b"a\x01b\n");
-
-    let echo = manager
-        .read(pty.master.description.id(), 64)
-        .expect("read echo")
-        .expect("echo should be available");
-    assert_eq!(String::from_utf8(echo).expect("valid utf8"), "a^Ab\r\n");
-}
-
-#[test]
-fn canonical_mode_erase_after_echoctl_removes_both_caret_columns() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    // Type Ctrl-A (echoed "^A", two columns), then VERASE (0x7f): the erase
-    // must remove both caret columns, then "z\n".
-    manager
-        .write(pty.master.description.id(), b"\x01\x7fz\n")
-        .expect("write control char then erase");
-
-    let line = manager
-        .read(pty.slave.description.id(), 64)
-        .expect("read canonical line")
-        .expect("line should be available");
-    assert_eq!(line, b"z\n");
-
-    let echo = manager
-        .read(pty.master.description.id(), 64)
-        .expect("read echo")
-        .expect("echo should be available");
-    // "^A" echoed, then two BS-SP-BS to erase both columns, then "z", then CRLF.
-    let mut expected = String::from("^A");
-    expected.push_str(&"\x08 \x08".repeat(2));
-    expected.push_str("z\r\n");
-    assert_eq!(String::from_utf8(echo).expect("valid utf8"), expected);
-}
-
-#[test]
-fn set_termios_updates_kill_and_werase_control_chars() {
-    let manager = PtyManager::new();
-    let pty = manager.create_pty();
-
-    let termios = manager
-        .get_termios(pty.master.description.id())
-        .expect("read default termios");
-    assert_eq!(termios.cc.vkill, 0x15);
-    assert_eq!(termios.cc.vwerase, 0x17);
-
-    manager
-        .set_termios(
-            pty.master.description.id(),
-            PartialTermios {
-                cc: Some(PartialTermiosControlChars {
-                    vkill: Some(0x18),
-                    vwerase: Some(0x1a),
-                    ..PartialTermiosControlChars::default()
-                }),
-                ..PartialTermios::default()
-            },
-        )
-        .expect("merge termios update");
-
-    let termios = manager
-        .get_termios(pty.master.description.id())
-        .expect("read merged termios");
-    assert_eq!(termios.cc.vkill, 0x18);
-    assert_eq!(termios.cc.vwerase, 0x1a);
-    // Unspecified control chars keep their defaults.
-    assert_eq!(termios.cc.verase, 0x7f);
-}
diff --git a/crates/kernel/tests/resource_accounting.rs b/crates/kernel/tests/resource_accounting.rs
deleted file mode 100644
index 8462363a2..000000000
--- a/crates/kernel/tests/resource_accounting.rs
+++ /dev/null
@@ -1,1487 +0,0 @@
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::fd_table::O_RDWR;
-use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig, SpawnOptions, SEEK_SET};
-use secure_exec_kernel::mount_table::{MountOptions, MountTable};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::pty::LineDisciplineConfig;
-use secure_exec_kernel::resource_accounting::{
-    ResourceLimits, DEFAULT_MAX_CONNECTIONS, DEFAULT_MAX_OPEN_FDS, DEFAULT_MAX_PIPES,
-    DEFAULT_MAX_PROCESSES, DEFAULT_MAX_PTYS, DEFAULT_MAX_SOCKETS,
-    DEFAULT_MAX_SOCKET_BUFFERED_BYTES, DEFAULT_MAX_SOCKET_DATAGRAM_QUEUE_LEN,
-    DEFAULT_VIRTUAL_CPU_COUNT,
-};
-use secure_exec_kernel::root_fs::{
-    FilesystemEntry, RootFileSystem, RootFilesystemDescriptor, RootFilesystemMode,
-    RootFilesystemSnapshot,
-};
-use secure_exec_kernel::socket_table::{InetSocketAddress, SocketSpec};
-use secure_exec_kernel::vfs::{MemoryFileSystem, VirtualFileSystem};
-use std::collections::BTreeMap;
-use std::time::{Duration, Instant};
-
-#[test]
-fn resource_snapshot_counts_processes_fds_pipes_and_ptys() {
-    let mut config = KernelVmConfig::new("vm-resources");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell");
-    let (read_fd, write_fd) = kernel.open_pipe("shell", process.pid()).expect("open pipe");
-    let (master_fd, slave_fd, _) = kernel.open_pty("shell", process.pid()).expect("open pty");
-    kernel
-        .pty_set_discipline(
-            "shell",
-            process.pid(),
-            master_fd,
-            LineDisciplineConfig {
-                canonical: Some(false),
-                echo: Some(false),
-                isig: Some(false),
-                ..Default::default()
-            },
-        )
-        .expect("set raw pty");
-
-    kernel
-        .fd_write("shell", process.pid(), write_fd, b"pipe-data")
-        .expect("write pipe");
-    kernel
-        .fd_write("shell", process.pid(), master_fd, b"term")
-        .expect("write pty");
-
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.running_processes, 1);
-    assert_eq!(snapshot.fd_tables, 1);
-    assert_eq!(snapshot.pipes, 1);
-    assert_eq!(snapshot.ptys, 1);
-    assert_eq!(snapshot.open_fds, 7);
-    assert_eq!(snapshot.pipe_buffered_bytes, 9);
-    assert_eq!(snapshot.pty_buffered_input_bytes, 4);
-    assert_eq!(snapshot.pty_buffered_output_bytes, 0);
-
-    let _ = kernel
-        .fd_read("shell", process.pid(), read_fd, 16)
-        .expect("drain pipe");
-    let _ = kernel
-        .fd_read("shell", process.pid(), slave_fd, 16)
-        .expect("drain pty");
-    process.finish(0);
-    kernel.wait_and_reap(process.pid()).expect("reap process");
-}
-
-#[test]
-fn resource_limits_default_to_bounded_values() {
-    let limits = ResourceLimits::default();
-
-    assert_eq!(limits.virtual_cpu_count, Some(DEFAULT_VIRTUAL_CPU_COUNT));
-    assert_eq!(limits.max_processes, Some(DEFAULT_MAX_PROCESSES));
-    assert_eq!(limits.max_open_fds, Some(DEFAULT_MAX_OPEN_FDS));
-    assert_eq!(limits.max_pipes, Some(DEFAULT_MAX_PIPES));
-    assert_eq!(limits.max_ptys, Some(DEFAULT_MAX_PTYS));
-    assert_eq!(limits.max_sockets, Some(DEFAULT_MAX_SOCKETS));
-    assert_eq!(limits.max_connections, Some(DEFAULT_MAX_CONNECTIONS));
-    assert_eq!(
-        limits.max_socket_buffered_bytes,
-        Some(DEFAULT_MAX_SOCKET_BUFFERED_BYTES)
-    );
-    assert_eq!(
-        limits.max_socket_datagram_queue_len,
-        Some(DEFAULT_MAX_SOCKET_DATAGRAM_QUEUE_LEN)
-    );
-}
-
-#[test]
-fn socket_stream_buffered_bytes_count_against_resource_limits() {
-    let mut config = KernelVmConfig::new("vm-socket-buffer-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_socket_buffered_bytes: Some(5),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    let writer = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn writer");
-    let reader = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn reader");
-    let writer_socket = kernel
-        .socket_create("shell", writer.pid(), SocketSpec::tcp())
-        .expect("create writer socket");
-    let reader_socket = kernel
-        .socket_create("shell", reader.pid(), SocketSpec::tcp())
-        .expect("create reader socket");
-    kernel
-        .socket_connect_pair("shell", writer.pid(), writer_socket, reader_socket)
-        .expect("connect socket pair");
-
-    kernel
-        .socket_write("shell", writer.pid(), writer_socket, b"12345")
-        .expect("fill stream receive buffer budget");
-    assert_eq!(kernel.resource_snapshot().socket_buffered_bytes, 5);
-
-    let error = kernel
-        .socket_write("shell", writer.pid(), writer_socket, b"!")
-        .expect_err("extra byte should exceed buffered byte limit");
-    assert_eq!(error.code(), "EAGAIN");
-    assert_eq!(kernel.resource_snapshot().socket_buffered_bytes, 5);
-
-    let drained = kernel
-        .socket_read("shell", reader.pid(), reader_socket, 5)
-        .expect("drain stream receive buffer")
-        .expect("stream payload");
-    assert_eq!(drained, b"12345");
-    assert_eq!(kernel.resource_snapshot().socket_buffered_bytes, 0);
-
-    kernel
-        .socket_write("shell", writer.pid(), writer_socket, b"!")
-        .expect("write should succeed after draining stream buffer");
-    assert_eq!(kernel.resource_snapshot().socket_buffered_bytes, 1);
-}
-
-#[test]
-fn udp_datagram_queue_counts_against_resource_limits() {
-    let mut config = KernelVmConfig::new("vm-socket-datagram-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_socket_datagram_queue_len: Some(1),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    let sender = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn sender");
-    let receiver = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn receiver");
-    let sender_socket = kernel
-        .socket_create("shell", sender.pid(), SocketSpec::udp())
-        .expect("create sender socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 54196),
-        )
-        .expect("bind sender socket");
-    let receiver_socket = kernel
-        .socket_create("shell", receiver.pid(), SocketSpec::udp())
-        .expect("create receiver socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            receiver.pid(),
-            receiver_socket,
-            InetSocketAddress::new("127.0.0.1", 43196),
-        )
-        .expect("bind receiver socket");
-
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43196),
-            b"one",
-        )
-        .expect("enqueue first datagram");
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.socket_datagram_queue_len, 1);
-    assert_eq!(snapshot.socket_buffered_bytes, 3);
-
-    let error = kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43196),
-            b"two",
-        )
-        .expect_err("second datagram should exceed queue length limit");
-    assert_eq!(error.code(), "EAGAIN");
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.socket_datagram_queue_len, 1);
-    assert_eq!(snapshot.socket_buffered_bytes, 3);
-
-    let datagram = kernel
-        .socket_recv_datagram("shell", receiver.pid(), receiver_socket, 16)
-        .expect("receive datagram")
-        .expect("datagram payload");
-    assert_eq!(datagram.payload(), b"one");
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.socket_datagram_queue_len, 0);
-    assert_eq!(snapshot.socket_buffered_bytes, 0);
-
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43196),
-            b"two",
-        )
-        .expect("send should succeed after draining datagram queue");
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.socket_datagram_queue_len, 1);
-    assert_eq!(snapshot.socket_buffered_bytes, 3);
-}
-
-#[test]
-fn resource_limits_reject_extra_processes_pipes_and_ptys() {
-    let mut config = KernelVmConfig::new("vm-limits");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_processes: Some(1),
-        max_open_fds: Some(16),
-        max_pipes: Some(1),
-        max_ptys: Some(1),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn initial process");
-
-    let error = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect_err("second process should exceed process limit");
-    assert_eq!(error.code(), "EAGAIN");
-
-    kernel
-        .open_pipe("shell", process.pid())
-        .expect("first pipe should succeed");
-    let error = kernel
-        .open_pipe("shell", process.pid())
-        .expect_err("second pipe should exceed pipe limit");
-    assert_eq!(error.code(), "EAGAIN");
-
-    kernel
-        .open_pty("shell", process.pid())
-        .expect("first PTY should fit within the configured caps");
-    let error = kernel
-        .open_pty("shell", process.pid())
-        .expect_err("second PTY should exceed PTY limit");
-    assert_eq!(error.code(), "EAGAIN");
-
-    process.finish(0);
-    kernel.wait_and_reap(process.pid()).expect("reap process");
-}
-
-#[test]
-fn resource_limits_reject_global_fd_growth_with_enfile() {
-    let mut config = KernelVmConfig::new("vm-open-fd-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_open_fds: Some(8),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    kernel
-        .write_file("/tmp/a.txt", b"a".to_vec())
-        .expect("seed first file");
-    kernel
-        .write_file("/tmp/b.txt", b"b".to_vec())
-        .expect("seed second file");
-    kernel
-        .write_file("/tmp/c.txt", b"c".to_vec())
-        .expect("seed third file");
-
-    let process_a = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn first process");
-    kernel
-        .fd_open("shell", process_a.pid(), "/tmp/a.txt", 0, None)
-        .expect("first extra FD should fit");
-    kernel
-        .fd_open("shell", process_a.pid(), "/tmp/b.txt", 0, None)
-        .expect("second extra FD should fit");
-
-    let process_b = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn second process at the global FD ceiling");
-
-    let error = kernel
-        .fd_open("shell", process_b.pid(), "/tmp/c.txt", 0, None)
-        .expect_err("extra open should exceed the VM-wide FD limit");
-    assert_eq!(error.code(), "ENFILE");
-
-    process_a.finish(0);
-    kernel
-        .wait_and_reap(process_a.pid())
-        .expect("reap first process");
-    process_b.finish(0);
-    kernel
-        .wait_and_reap(process_b.pid())
-        .expect("reap second process");
-}
-
-#[test]
-fn zombie_processes_count_against_process_limits_until_reaped() {
-    let mut config = KernelVmConfig::new("vm-zombie-process-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_processes: Some(1),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn initial process");
-    process.finish(0);
-
-    let error = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect_err("zombie should still count against process limit");
-    assert_eq!(error.code(), "EAGAIN");
-
-    kernel.wait_and_reap(process.pid()).expect("reap zombie");
-    kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn should succeed after zombie is reaped");
-}
-
-#[test]
-fn filesystem_limits_reject_inode_growth_and_file_expansion() {
-    let mut config = KernelVmConfig::new("vm-filesystem-limits");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_filesystem_bytes: Some(5),
-        max_inode_count: Some(4),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .write_file("/tmp/a.txt", b"hello".to_vec())
-        .expect("seed file within byte limit");
-    kernel
-        .create_dir("/tmp/dir")
-        .expect("create directory within inode limit");
-
-    let write_error = kernel
-        .write_file("/tmp/b.txt", b"!".to_vec())
-        .expect_err("additional file should exceed inode limit");
-    assert_eq!(write_error.code(), "ENOSPC");
-
-    let truncate_error = kernel
-        .truncate("/tmp/a.txt", 6)
-        .expect_err("truncate should exceed filesystem byte limit");
-    assert_eq!(truncate_error.code(), "ENOSPC");
-    assert_eq!(
-        kernel
-            .read_file("/tmp/a.txt")
-            .expect("file should stay unchanged"),
-        b"hello".to_vec()
-    );
-}
-
-#[test]
-fn filesystem_limits_reject_fd_pwrite_before_resizing_file() {
-    let mut config = KernelVmConfig::new("vm-fd-pwrite-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_filesystem_bytes: Some(16),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-        .filesystem_mut()
-        .write_file("/tmp/data.txt", b"abc".to_vec())
-        .expect("seed file");
-
-    let process = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell");
-    let fd = kernel
-        .fd_open("shell", process.pid(), "/tmp/data.txt", 0, None)
-        .expect("open file");
-
-    let error = kernel
-        .fd_pwrite("shell", process.pid(), fd, b"z", 16)
-        .expect_err("pwrite should exceed filesystem byte limit");
-    assert_eq!(error.code(), "ENOSPC");
-    assert_eq!(
-        kernel
-            .read_file("/tmp/data.txt")
-            .expect("file should stay unchanged"),
-        b"abc".to_vec()
-    );
-
-    process.finish(0);
-    kernel.wait_and_reap(process.pid()).expect("reap shell");
-}
-
-#[test]
-fn filesystem_limits_ignore_read_only_mount_usage() {
-    let mut config = KernelVmConfig::new("vm-mounted-filesystem-limits");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_filesystem_bytes: Some(16),
-        ..ResourceLimits::default()
-    };
-
-    let mut mounted = MemoryFileSystem::new();
-    mounted
-        .write_file("/big.bin", vec![b'x'; 1024])
-        .expect("seed mounted file");
-
-    let mut kernel = KernelVm::new(MountTable::new(MemoryFileSystem::new()), config);
-    kernel
-        .filesystem_mut()
-        .inner_mut()
-        .inner_mut()
-        .mount("/mnt", mounted, MountOptions::new("memory").read_only(true))
-        .expect("mount read-only filesystem");
-
-    kernel
-        .write_file("/tmp/a.txt", b"ok".to_vec())
-        .expect("mounted files should not count against root filesystem byte limits");
-}
-
-#[test]
-fn filesystem_limits_reject_overlay_rename_copy_up_before_materializing_lower_tree() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-copy-up-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_filesystem_bytes: Some(8),
-        ..ResourceLimits::default()
-    };
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/lower"),
-                FilesystemEntry::file("/lower/big.bin", vec![b'x'; 32]),
-            ],
-        }],
-        bootstrap_entries: Vec::new(),
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    let error = kernel
-        .rename("/lower", "/moved")
-        .expect_err("copying up lower tree should exceed byte limit");
-    assert_eq!(error.code(), "ENOSPC");
-    assert_eq!(
-        kernel
-            .read_file("/lower/big.bin")
-            .expect("source tree should remain readable"),
-        vec![b'x'; 32]
-    );
-    assert!(!kernel.exists("/moved").expect("check destination"));
-}
-
-#[test]
-fn filesystem_limits_preserve_read_only_error_before_overlay_rename_copy_up_limit() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-copy-up-read-only");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_filesystem_bytes: Some(8),
-        ..ResourceLimits::default()
-    };
-
-    let mut root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::ReadOnly,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/lower"),
-                FilesystemEntry::file("/lower/big.bin", vec![b'x'; 32]),
-            ],
-        }],
-        bootstrap_entries: Vec::new(),
-    })
-    .expect("build root filesystem");
-    root.finish_bootstrap();
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    let error = kernel
-        .rename("/lower", "/moved")
-        .expect_err("read-only root should reject before copy-up accounting");
-    assert_eq!(error.code(), "EROFS");
-}
-
-#[test]
-fn filesystem_limits_preserve_missing_destination_parent_before_overlay_rename_copy_up_limit() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-copy-up-missing-parent");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_filesystem_bytes: Some(8),
-        ..ResourceLimits::default()
-    };
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/lower"),
-                FilesystemEntry::file("/lower/big.bin", vec![b'x'; 32]),
-            ],
-        }],
-        bootstrap_entries: Vec::new(),
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    let error = kernel
-        .rename("/lower", "/missing/moved")
-        .expect_err("missing destination parent should reject before copy-up accounting");
-    assert_eq!(error.code(), "ENOENT");
-}
-
-#[test]
-fn filesystem_limits_allow_overlay_rename_into_lower_only_destination_parent() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-lower-destination-parent");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_inode_count: Some(3),
-        ..ResourceLimits::default()
-    };
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/dest"),
-                FilesystemEntry::file("/dest/keep.txt", b"keep".to_vec()),
-                FilesystemEntry::file("/src.bin", b"src".to_vec()),
-            ],
-        }],
-        bootstrap_entries: Vec::new(),
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    kernel
-        .rename("/src.bin", "/dest/src.bin")
-        .expect("lower-only destination parent should be materialized first");
-    assert_eq!(
-        kernel
-            .read_file("/dest/src.bin")
-            .expect("renamed file should be readable"),
-        b"src".to_vec()
-    );
-    assert_eq!(
-        kernel
-            .read_file("/dest/keep.txt")
-            .expect("lower sibling should remain visible"),
-        b"keep".to_vec()
-    );
-    assert!(!kernel.exists("/src.bin").expect("source should be hidden"));
-}
-
-#[test]
-fn filesystem_limits_allow_overlay_rename_through_lower_symlink_destination_parent() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-symlink-destination-parent");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_inode_count: Some(5),
-        ..ResourceLimits::default()
-    };
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/real"),
-                FilesystemEntry::symlink("/link", "/real"),
-                FilesystemEntry::file("/src.bin", b"src".to_vec()),
-            ],
-        }],
-        bootstrap_entries: Vec::new(),
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    kernel
-        .rename("/src.bin", "/link/src.bin")
-        .expect("symlink destination parent should resolve to materialized target");
-    assert_eq!(
-        kernel
-            .read_file("/real/src.bin")
-            .expect("renamed file should be readable through target"),
-        b"src".to_vec()
-    );
-    assert!(!kernel.exists("/src.bin").expect("source should be hidden"));
-}
-
-#[test]
-fn filesystem_limits_allow_overlay_rename_through_lower_symlink_ancestor() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-symlink-destination-ancestor");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_inode_count: Some(5),
-        ..ResourceLimits::default()
-    };
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/real"),
-                FilesystemEntry::directory("/real/subdir"),
-                FilesystemEntry::symlink("/link", "/real"),
-                FilesystemEntry::file("/src.bin", b"src".to_vec()),
-            ],
-        }],
-        bootstrap_entries: Vec::new(),
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    kernel
-        .rename("/src.bin", "/link/subdir/src.bin")
-        .expect("symlink ancestor should resolve to materialized target");
-    assert_eq!(
-        kernel
-            .read_file("/real/subdir/src.bin")
-            .expect("renamed file should be readable through target"),
-        b"src".to_vec()
-    );
-    assert_eq!(
-        kernel
-            .read_file("/link/subdir/src.bin")
-            .expect("renamed file should be readable through symlink"),
-        b"src".to_vec()
-    );
-    assert!(!kernel.exists("/src.bin").expect("source should be hidden"));
-}
-
-#[test]
-fn filesystem_limits_allow_overlay_rename_through_chained_lower_symlink_destination_parent() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-chained-symlink-destination-parent");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_inode_count: Some(7),
-        ..ResourceLimits::default()
-    };
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/a"),
-                FilesystemEntry::directory("/real"),
-                FilesystemEntry::directory("/other"),
-                FilesystemEntry::symlink("/a/link", "/real"),
-                FilesystemEntry::symlink("/real/subdir", "/other"),
-                FilesystemEntry::file("/src.bin", b"src".to_vec()),
-            ],
-        }],
-        bootstrap_entries: Vec::new(),
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    kernel
-        .rename("/src.bin", "/a/link/subdir/src.bin")
-        .expect("chained symlink destination parent should resolve to materialized target");
-    assert_eq!(
-        kernel
-            .read_file("/other/src.bin")
-            .expect("renamed file should be readable through final target"),
-        b"src".to_vec()
-    );
-    assert_eq!(
-        kernel
-            .read_file("/a/link/subdir/src.bin")
-            .expect("renamed file should be readable through symlink chain"),
-        b"src".to_vec()
-    );
-    assert!(!kernel.exists("/src.bin").expect("source should be hidden"));
-}
-
-#[test]
-fn filesystem_limits_allow_overlay_rename_through_upper_symlink_to_lower_destination_parent() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-upper-symlink-to-lower-parent");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_inode_count: Some(5),
-        ..ResourceLimits::default()
-    };
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/real"),
-                FilesystemEntry::directory("/real/subdir"),
-                FilesystemEntry::file("/src.bin", b"src".to_vec()),
-            ],
-        }],
-        bootstrap_entries: vec![FilesystemEntry::symlink("/link", "/real")],
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    kernel
-        .rename("/src.bin", "/link/subdir/src.bin")
-        .expect("upper symlink should resolve to lower destination parent");
-    assert_eq!(
-        kernel
-            .read_file("/real/subdir/src.bin")
-            .expect("renamed file should be readable through target"),
-        b"src".to_vec()
-    );
-    assert_eq!(
-        kernel
-            .read_file("/link/subdir/src.bin")
-            .expect("renamed file should be readable through symlink"),
-        b"src".to_vec()
-    );
-    assert!(!kernel.exists("/src.bin").expect("source should be hidden"));
-}
-
-#[test]
-fn filesystem_limits_reject_overlay_rename_copy_up_against_existing_upper_usage() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-copy-up-existing-usage-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_filesystem_bytes: Some(8),
-        ..ResourceLimits::default()
-    };
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/lower"),
-                FilesystemEntry::file("/lower/small.bin", vec![b'x'; 7]),
-            ],
-        }],
-        bootstrap_entries: vec![FilesystemEntry::file("/existing.bin", vec![b'y'; 7])],
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    let error = kernel
-        .rename("/lower", "/moved")
-        .expect_err("copy-up should include current upper usage");
-    assert_eq!(error.code(), "ENOSPC");
-    assert_eq!(
-        kernel
-            .read_file("/lower/small.bin")
-            .expect("source tree should remain readable"),
-        vec![b'x'; 7]
-    );
-    assert_eq!(
-        kernel
-            .read_file("/existing.bin")
-            .expect("existing upper file should remain readable"),
-        vec![b'y'; 7]
-    );
-    assert!(!kernel.exists("/moved").expect("check destination"));
-}
-
-#[test]
-fn filesystem_limits_allow_overlay_rename_copy_up_when_replacing_upper_destination_within_limit() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-copy-up-replace-destination");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_filesystem_bytes: Some(13),
-        ..ResourceLimits::default()
-    };
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![FilesystemEntry::file("/src.bin", vec![b'x'; 7])],
-        }],
-        bootstrap_entries: vec![FilesystemEntry::file("/dst.bin", vec![b'y'; 7])],
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    kernel
-        .rename("/src.bin", "/dst.bin")
-        .expect("destination replacement should subtract removed upper usage");
-    assert_eq!(
-        kernel
-            .read_file("/dst.bin")
-            .expect("destination should contain renamed source"),
-        vec![b'x'; 7]
-    );
-    assert!(!kernel.exists("/src.bin").expect("source should be hidden"));
-}
-
-#[test]
-fn filesystem_limits_reject_overlay_rename_copy_up_when_replaced_destination_hardlink_remains() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-copy-up-hardlink-destination");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_filesystem_bytes: Some(8),
-        ..ResourceLimits::default()
-    };
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![FilesystemEntry::file("/src.bin", vec![b'x'; 7])],
-        }],
-        bootstrap_entries: vec![FilesystemEntry::file("/dst.bin", vec![b'y'; 7])],
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-    kernel
-        .link("/dst.bin", "/alias.bin")
-        .expect("create destination hardlink");
-
-    let error = kernel
-        .rename("/src.bin", "/dst.bin")
-        .expect_err("destination alias should keep old inode usage live");
-    assert_eq!(error.code(), "ENOSPC");
-    assert_eq!(
-        kernel
-            .read_file("/dst.bin")
-            .expect("destination should remain unchanged"),
-        vec![b'y'; 7]
-    );
-    assert_eq!(
-        kernel
-            .read_file("/alias.bin")
-            .expect("alias should remain readable"),
-        vec![b'y'; 7]
-    );
-}
-
-#[test]
-fn filesystem_limits_reject_overlay_rename_copy_up_against_inode_limit() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-copy-up-inode-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_inode_count: Some(2),
-        ..ResourceLimits::default()
-    };
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/lower"),
-                FilesystemEntry::directory("/lower/child"),
-            ],
-        }],
-        bootstrap_entries: Vec::new(),
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    let error = kernel
-        .rename("/lower", "/moved")
-        .expect_err("copy-up should include current upper inode usage");
-    assert_eq!(error.code(), "ENOSPC");
-    assert!(kernel.exists("/lower/child").expect("source child remains"));
-    assert!(!kernel.exists("/moved").expect("check destination"));
-}
-
-#[test]
-fn filesystem_limits_allow_upper_only_overlay_directory_rename_at_inode_limit() {
-    let mut config = KernelVmConfig::new("vm-overlay-upper-only-rename-at-inode-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_inode_count: Some(3),
-        ..ResourceLimits::default()
-    };
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: Vec::new(),
-        bootstrap_entries: vec![
-            FilesystemEntry::directory("/dir"),
-            FilesystemEntry::file("/dir/file.txt", b"upper".to_vec()),
-        ],
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    kernel
-        .rename("/dir", "/renamed")
-        .expect("upper-only rename should not allocate inodes");
-    assert_eq!(
-        kernel
-            .read_file("/renamed/file.txt")
-            .expect("renamed file should remain readable"),
-        b"upper".to_vec()
-    );
-    assert!(!kernel.exists("/dir").expect("old directory should be gone"));
-}
-
-#[test]
-fn filesystem_limits_do_not_double_count_upper_hardlinks_during_overlay_rename_preflight() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-hardlink-accounting");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_filesystem_bytes: Some(8),
-        ..ResourceLimits::default()
-    };
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: Vec::new(),
-        bootstrap_entries: vec![FilesystemEntry::file("/existing.bin", vec![b'x'; 7])],
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-    kernel
-        .link("/existing.bin", "/alias.bin")
-        .expect("create hardlink");
-
-    kernel
-        .rename("/existing.bin", "/renamed.bin")
-        .expect("hardlinked upper inode should be counted once");
-    assert_eq!(
-        kernel
-            .read_file("/renamed.bin")
-            .expect("renamed hardlink source should remain readable"),
-        vec![b'x'; 7]
-    );
-    assert_eq!(
-        kernel
-            .read_file("/alias.bin")
-            .expect("alias should remain readable"),
-        vec![b'x'; 7]
-    );
-}
-
-#[test]
-fn filesystem_limits_preserve_not_directory_errors_for_upper_files() {
-    let mut config = KernelVmConfig::new("vm-overlay-read-dir-upper-file");
-    config.permissions = Permissions::allow_all();
-
-    let root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: Vec::new(),
-        bootstrap_entries: vec![FilesystemEntry::file("/file.txt", b"upper".to_vec())],
-    })
-    .expect("build root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    let error = kernel
-        .read_dir("/file.txt")
-        .expect_err("upper file should not read as an empty directory");
-    assert_eq!(error.code(), "ENOTDIR");
-}
-
-#[test]
-fn filesystem_limits_reject_overlay_rename_copy_up_in_nested_root_mount() {
-    let mut config = KernelVmConfig::new("vm-overlay-rename-copy-up-nested-mount-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_filesystem_bytes: Some(8),
-        ..ResourceLimits::default()
-    };
-
-    let mounted_root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/lower"),
-                FilesystemEntry::file("/lower/big.bin", vec![b'x'; 32]),
-            ],
-        }],
-        bootstrap_entries: Vec::new(),
-    })
-    .expect("build mounted root filesystem");
-    let mut kernel = KernelVm::new(MountTable::new(MemoryFileSystem::new()), config);
-    kernel
-        .mount_filesystem("/mnt", mounted_root, MountOptions::new("root"))
-        .expect("mount root filesystem");
-
-    let error = kernel
-        .rename("/mnt/lower", "/mnt/moved")
-        .expect_err("nested mount copy-up should exceed byte limit");
-    assert_eq!(error.code(), "ENOSPC");
-    assert_eq!(
-        kernel
-            .read_file("/mnt/lower/big.bin")
-            .expect("source tree should remain readable"),
-        vec![b'x'; 32]
-    );
-    assert!(!kernel.exists("/mnt/moved").expect("check destination"));
-}
-
-#[test]
-fn blocking_pipe_and_pty_reads_time_out_instead_of_hanging_forever() {
-    let mut config = KernelVmConfig::new("vm-read-timeouts");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_blocking_read_ms: Some(25),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell");
-
-    let (read_fd, _write_fd) = kernel.open_pipe("shell", process.pid()).expect("open pipe");
-    let (master_fd, slave_fd, _) = kernel.open_pty("shell", process.pid()).expect("open pty");
-    kernel
-        .pty_set_discipline(
-            "shell",
-            process.pid(),
-            master_fd,
-            LineDisciplineConfig {
-                canonical: Some(false),
-                echo: Some(false),
-                isig: Some(false),
-                ..Default::default()
-            },
-        )
-        .expect("set raw pty");
-
-    let started = Instant::now();
-    let pipe_error = kernel
-        .fd_read("shell", process.pid(), read_fd, 16)
-        .expect_err("empty pipe read should time out");
-    assert_eq!(pipe_error.code(), "EAGAIN");
-    assert!(
-        started.elapsed() >= Duration::from_millis(20),
-        "pipe read timed out too early: {:?}",
-        started.elapsed()
-    );
-
-    let started = Instant::now();
-    let pty_error = kernel
-        .fd_read("shell", process.pid(), slave_fd, 16)
-        .expect_err("empty PTY read should time out");
-    assert_eq!(pty_error.code(), "EAGAIN");
-    assert!(
-        started.elapsed() >= Duration::from_millis(20),
-        "PTY read timed out too early: {:?}",
-        started.elapsed()
-    );
-
-    process.finish(0);
-    kernel.wait_and_reap(process.pid()).expect("reap shell");
-}
-
-#[test]
-fn resource_limits_reject_oversized_spawn_payloads() {
-    let mut config = KernelVmConfig::new("vm-spawn-payload-limits");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_process_argv_bytes: Some(13),
-        max_process_env_bytes: Some(15),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let argv_error = kernel
-        .spawn_process(
-            "sh",
-            vec![String::from("1234567890")],
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect_err("oversized argv should be rejected");
-    assert_eq!(argv_error.code(), "EINVAL");
-
-    let env_error = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                env: BTreeMap::from([(String::from("LONG"), String::from("1234567890"))]),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect_err("oversized environment should be rejected");
-    assert_eq!(env_error.code(), "EINVAL");
-}
-
-#[test]
-fn resource_limits_reject_oversized_pread_and_write_operations() {
-    let mut config = KernelVmConfig::new("vm-io-op-limits");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_pread_bytes: Some(4),
-        max_fd_write_bytes: Some(3),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-        .write_file("/tmp/data.txt", b"hello".to_vec())
-        .expect("seed file");
-
-    let process = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell");
-    let fd = kernel
-        .fd_open("shell", process.pid(), "/tmp/data.txt", 0, None)
-        .expect("open file");
-
-    let pread_error = kernel
-        .fd_pread("shell", process.pid(), fd, 5, 0)
-        .expect_err("oversized pread should be rejected");
-    assert_eq!(pread_error.code(), "EINVAL");
-
-    let write_error = kernel
-        .fd_write("shell", process.pid(), fd, b"four")
-        .expect_err("oversized fd_write should be rejected");
-    assert_eq!(write_error.code(), "EINVAL");
-
-    let pwrite_error = kernel
-        .fd_pwrite("shell", process.pid(), fd, b"four", 0)
-        .expect_err("oversized fd_pwrite should be rejected");
-    assert_eq!(pwrite_error.code(), "EINVAL");
-
-    assert_eq!(
-        kernel
-            .read_file("/tmp/data.txt")
-            .expect("file should remain unchanged"),
-        b"hello".to_vec()
-    );
-
-    process.finish(0);
-    kernel.wait_and_reap(process.pid()).expect("reap shell");
-}
-
-#[test]
-fn fd_write_rejects_unaddressable_sparse_offsets_without_mutating_file() {
-    let mut config = KernelVmConfig::new("vm-fd-write-huge-offset");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_filesystem_bytes: None,
-        max_fd_write_bytes: Some(8),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-        .write_file("/tmp/data.txt", b"safe".to_vec())
-        .expect("seed file");
-    let process = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell");
-    let fd = kernel
-        .fd_open("shell", process.pid(), "/tmp/data.txt", O_RDWR, None)
-        .expect("open file");
-    kernel
-        .fd_seek("shell", process.pid(), fd, i64::MAX, SEEK_SET)
-        .expect("seek to unaddressable offset");
-
-    let error = kernel
-        .fd_write("shell", process.pid(), fd, b"x")
-        .expect_err("huge sparse fd_write should be rejected");
-    assert_eq!(error.code(), "ENOMEM");
-    assert_eq!(
-        kernel
-            .read_file("/tmp/data.txt")
-            .expect("file should remain unchanged"),
-        b"safe".to_vec()
-    );
-}
-
-#[test]
-fn snapshot_root_filesystem_rejects_current_usage_over_configured_limit() {
-    let mut root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/workspace"),
-                FilesystemEntry::file("/workspace/data.txt", b"large".to_vec()),
-            ],
-        }],
-        bootstrap_entries: Vec::new(),
-    })
-    .expect("create root filesystem");
-    root.write_file("/workspace/extra.txt", b"extra".to_vec())
-        .expect("write extra data before applying kernel limit");
-
-    let mut config = KernelVmConfig::new("vm-snapshot-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_filesystem_bytes: Some(4),
-        ..ResourceLimits::default()
-    };
-    let mut kernel = KernelVm::new(MountTable::new(root), config);
-
-    let error = kernel
-        .snapshot_root_filesystem()
-        .expect_err("snapshot should be rejected before cloning root contents");
-    assert_eq!(error.code(), "ENOSPC");
-}
-
-#[test]
-fn resource_limits_reject_oversized_direct_pread_before_device_allocation() {
-    let mut config = KernelVmConfig::new("vm-direct-pread-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_pread_bytes: Some(4),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-
-    let error = kernel
-        .pread_file("/dev/zero", 0, 5)
-        .expect_err("oversized direct pread should be rejected");
-    assert_eq!(error.code(), "EINVAL");
-    assert!(
-        error.to_string().contains("pread length 5"),
-        "unexpected error: {error}"
-    );
-
-    assert_eq!(
-        kernel
-            .pread_file("/dev/zero", 0, 4)
-            .expect("bounded direct pread should succeed"),
-        vec![0; 4]
-    );
-}
-
-#[test]
-fn resource_limits_reject_oversized_fd_read_before_device_allocation() {
-    let mut config = KernelVmConfig::new("vm-fd-read-device-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_pread_bytes: Some(4),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    let process = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell");
-    let fd = kernel
-        .fd_open("shell", process.pid(), "/dev/zero", 0, None)
-        .expect("open device");
-
-    let error = kernel
-        .fd_read("shell", process.pid(), fd, 5)
-        .expect_err("oversized fd read should be rejected");
-    assert_eq!(error.code(), "EINVAL");
-    assert!(
-        error.to_string().contains("pread length 5"),
-        "unexpected error: {error}"
-    );
-
-    assert_eq!(
-        kernel
-            .fd_read("shell", process.pid(), fd, 4)
-            .expect("bounded fd read should succeed"),
-        vec![0; 4]
-    );
-
-    process.finish(0);
-    kernel.wait_and_reap(process.pid()).expect("reap shell");
-}
-
-#[test]
-fn resource_limits_reject_oversized_readdir_batches() {
-    let mut config = KernelVmConfig::new("vm-readdir-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_readdir_entries: Some(2),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel.create_dir("/tmp").expect("create tmp");
-    kernel
-        .write_file("/tmp/a.txt", b"a".to_vec())
-        .expect("write first entry");
-    kernel
-        .write_file("/tmp/b.txt", b"b".to_vec())
-        .expect("write second entry");
-    kernel
-        .write_file("/tmp/c.txt", b"c".to_vec())
-        .expect("write third entry");
-
-    let error = kernel
-        .read_dir("/tmp")
-        .expect_err("oversized readdir batch should be rejected");
-    assert_eq!(error.code(), "ENOMEM");
-}
diff --git a/crates/kernel/tests/smoke.rs b/crates/kernel/tests/smoke.rs
deleted file mode 100644
index fe6648bf3..000000000
--- a/crates/kernel/tests/smoke.rs
+++ /dev/null
@@ -1,10 +0,0 @@
-use secure_exec_kernel::scaffold;
-
-#[test]
-fn kernel_scaffold_targets_native_and_browser_sidecars() {
-    let scaffold = scaffold();
-
-    assert_eq!(scaffold.package_name, "secure-exec-kernel");
-    assert!(scaffold.supports_native_sidecar);
-    assert!(scaffold.supports_browser_sidecar);
-}
diff --git a/crates/kernel/tests/socket_permissions.rs b/crates/kernel/tests/socket_permissions.rs
deleted file mode 100644
index d60cd98ef..000000000
--- a/crates/kernel/tests/socket_permissions.rs
+++ /dev/null
@@ -1,279 +0,0 @@
-use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig, VirtualProcessOptions};
-use secure_exec_kernel::permissions::{
-    NetworkAccessRequest, NetworkOperation, PermissionDecision, Permissions,
-};
-use secure_exec_kernel::socket_table::{InetSocketAddress, SocketSpec, SocketState};
-use secure_exec_kernel::vfs::MemoryFileSystem;
-use std::collections::BTreeSet;
-use std::sync::{Arc, Mutex};
-
-fn spawn_shell(kernel: &mut KernelVm<MemoryFileSystem>) -> u32 {
-    kernel
-        .create_virtual_process(
-            "shell",
-            "shell",
-            "sh",
-            Vec::new(),
-            VirtualProcessOptions::default(),
-        )
-        .expect("spawn shell")
-        .pid()
-}
-
-fn kernel_with_network_permissions(
-    callback: impl Fn(&NetworkAccessRequest) -> PermissionDecision + Send + Sync + 'static,
-) -> KernelVm<MemoryFileSystem> {
-    let mut config = KernelVmConfig::new("vm-socket-permissions");
-    config.permissions = Permissions {
-        network: Some(Arc::new(callback)),
-        ..Permissions::allow_all()
-    };
-    KernelVm::new(MemoryFileSystem::new(), config)
-}
-
-fn kernel_with_loopback_exempt_ports(
-    ports: impl IntoIterator<Item = u16>,
-) -> KernelVm<MemoryFileSystem> {
-    let mut config = KernelVmConfig::new("vm-socket-loopback");
-    config.permissions = Permissions::allow_all();
-    config.loopback_exempt_ports = ports.into_iter().collect::<BTreeSet<_>>();
-    KernelVm::new(MemoryFileSystem::new(), config)
-}
-
-#[test]
-fn socket_bind_inet_checks_network_listen_permission_before_mutation() {
-    let requests = Arc::new(Mutex::new(Vec::new()));
-    let requests_for_callback = Arc::clone(&requests);
-    let mut kernel = kernel_with_network_permissions(move |request| {
-        requests_for_callback
-            .lock()
-            .expect("request log lock")
-            .push(request.clone());
-        PermissionDecision::deny("network disabled")
-    });
-    let pid = spawn_shell(&mut kernel);
-    let socket = kernel
-        .socket_create("shell", pid, SocketSpec::tcp())
-        .expect("create socket");
-
-    let error = kernel
-        .socket_bind_inet(
-            "shell",
-            pid,
-            socket,
-            InetSocketAddress::new("127.0.0.1", 8080),
-        )
-        .expect_err("bind should be denied by network policy");
-
-    assert_eq!(error.code(), "EACCES");
-    assert_eq!(
-        kernel.socket_get(socket).expect("socket exists").state(),
-        SocketState::Created
-    );
-    assert_eq!(
-        *requests.lock().expect("request log lock"),
-        vec![NetworkAccessRequest {
-            vm_id: String::from("vm-socket-permissions"),
-            op: NetworkOperation::Listen,
-            resource: String::from("tcp://127.0.0.1:8080"),
-        }]
-    );
-}
-
-#[test]
-fn socket_connect_inet_loopback_checks_network_http_permission_before_mutation() {
-    let requests = Arc::new(Mutex::new(Vec::new()));
-    let requests_for_callback = Arc::clone(&requests);
-    let mut kernel = kernel_with_network_permissions(move |request| {
-        requests_for_callback
-            .lock()
-            .expect("request log lock")
-            .push(request.clone());
-        match request.op {
-            NetworkOperation::Listen => PermissionDecision::allow(),
-            NetworkOperation::Http => PermissionDecision::deny("connect disabled"),
-            NetworkOperation::Fetch | NetworkOperation::Dns => PermissionDecision::allow(),
-        }
-    });
-
-    let server_pid = spawn_shell(&mut kernel);
-    let listener = kernel
-        .socket_create("shell", server_pid, SocketSpec::tcp())
-        .expect("create listener socket");
-    let target = InetSocketAddress::new("127.0.0.1", 9090);
-    kernel
-        .socket_bind_inet("shell", server_pid, listener, target.clone())
-        .expect("bind listener");
-    kernel
-        .socket_listen("shell", server_pid, listener, 1)
-        .expect("listen");
-
-    let client_pid = spawn_shell(&mut kernel);
-    let client = kernel
-        .socket_create("shell", client_pid, SocketSpec::tcp())
-        .expect("create client socket");
-    let error = kernel
-        .socket_connect_inet_loopback("shell", client_pid, client, target)
-        .expect_err("connect should be denied by network policy");
-
-    assert_eq!(error.code(), "EACCES");
-    assert_eq!(
-        kernel
-            .socket_get(client)
-            .expect("client socket exists")
-            .state(),
-        SocketState::Created
-    );
-    assert!(requests
-        .lock()
-        .expect("request log lock")
-        .iter()
-        .any(|request| request.op == NetworkOperation::Http
-            && request.resource == "tcp://127.0.0.1:9090"));
-    assert_eq!(kernel.resource_snapshot().socket_connections, 0);
-}
-
-#[test]
-fn socket_send_to_inet_loopback_checks_network_http_permission_before_mutation() {
-    let requests = Arc::new(Mutex::new(Vec::new()));
-    let requests_for_callback = Arc::clone(&requests);
-    let mut kernel = kernel_with_network_permissions(move |request| {
-        requests_for_callback
-            .lock()
-            .expect("request log lock")
-            .push(request.clone());
-        match request.op {
-            NetworkOperation::Listen => PermissionDecision::allow(),
-            NetworkOperation::Http => PermissionDecision::deny("udp send disabled"),
-            NetworkOperation::Fetch | NetworkOperation::Dns => PermissionDecision::allow(),
-        }
-    });
-
-    let receiver_pid = spawn_shell(&mut kernel);
-    let receiver = kernel
-        .socket_create("shell", receiver_pid, SocketSpec::udp())
-        .expect("create UDP receiver");
-    let target = InetSocketAddress::new("127.0.0.1", 9091);
-    kernel
-        .socket_bind_inet("shell", receiver_pid, receiver, target.clone())
-        .expect("bind UDP receiver");
-
-    let sender_pid = spawn_shell(&mut kernel);
-    let sender = kernel
-        .socket_create("shell", sender_pid, SocketSpec::udp())
-        .expect("create UDP sender");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            sender_pid,
-            sender,
-            InetSocketAddress::new("127.0.0.1", 0),
-        )
-        .expect("bind UDP sender");
-
-    let error = kernel
-        .socket_send_to_inet_loopback("shell", sender_pid, sender, target, b"blocked")
-        .expect_err("UDP send should be denied by network policy");
-
-    assert_eq!(error.code(), "EACCES");
-    assert!(requests
-        .lock()
-        .expect("request log lock")
-        .iter()
-        .any(|request| request.op == NetworkOperation::Http
-            && request.resource == "tcp://127.0.0.1:9091"));
-    let empty_queue = kernel
-        .socket_recv_datagram("shell", receiver_pid, receiver, 64)
-        .expect_err("denied UDP send must not enqueue a datagram");
-    assert_eq!(empty_queue.code(), "EAGAIN");
-}
-
-#[test]
-fn socket_connect_inet_loopback_requires_owned_or_exempt_port() {
-    let mut kernel = kernel_with_loopback_exempt_ports([]);
-    let pid = spawn_shell(&mut kernel);
-    let client = kernel
-        .socket_create("shell", pid, SocketSpec::tcp())
-        .expect("create client socket");
-    let error = kernel
-        .socket_connect_inet_loopback(
-            "shell",
-            pid,
-            client,
-            InetSocketAddress::new("127.0.0.1", 7777),
-        )
-        .expect_err("unowned non-exempt loopback port should be denied");
-
-    assert_eq!(error.code(), "EPERM");
-    assert!(error.to_string().contains("not loopback-exempt"));
-    assert_eq!(kernel.resource_snapshot().socket_connections, 0);
-}
-
-#[test]
-fn socket_connect_inet_loopback_allows_exempt_port_to_reach_connect_path() {
-    let mut kernel = kernel_with_loopback_exempt_ports([7777]);
-    let pid = spawn_shell(&mut kernel);
-    let client = kernel
-        .socket_create("shell", pid, SocketSpec::tcp())
-        .expect("create client socket");
-    let error = kernel
-        .socket_connect_inet_loopback(
-            "shell",
-            pid,
-            client,
-            InetSocketAddress::new("127.0.0.1", 7777),
-        )
-        .expect_err("exempt but unbound loopback port should fail as not listening");
-
-    assert_eq!(error.code(), "ECONNREFUSED");
-    assert_eq!(kernel.resource_snapshot().socket_connections, 0);
-}
-
-#[test]
-fn socket_send_to_inet_loopback_requires_owned_or_exempt_port() {
-    let mut kernel = kernel_with_loopback_exempt_ports([]);
-    let pid = spawn_shell(&mut kernel);
-    let socket = kernel
-        .socket_create("shell", pid, SocketSpec::udp())
-        .expect("create UDP socket");
-    kernel
-        .socket_bind_inet("shell", pid, socket, InetSocketAddress::new("127.0.0.1", 0))
-        .expect("bind UDP socket");
-
-    let error = kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            pid,
-            socket,
-            InetSocketAddress::new("127.0.0.1", 7777),
-            b"hello",
-        )
-        .expect_err("unowned non-exempt loopback UDP port should be denied");
-
-    assert_eq!(error.code(), "EPERM");
-    assert!(error.to_string().contains("not loopback-exempt"));
-}
-
-#[test]
-fn socket_send_to_inet_loopback_allows_exempt_port_to_reach_udp_path() {
-    let mut kernel = kernel_with_loopback_exempt_ports([7777]);
-    let pid = spawn_shell(&mut kernel);
-    let socket = kernel
-        .socket_create("shell", pid, SocketSpec::udp())
-        .expect("create UDP socket");
-    kernel
-        .socket_bind_inet("shell", pid, socket, InetSocketAddress::new("127.0.0.1", 0))
-        .expect("bind UDP socket");
-
-    let error = kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            pid,
-            socket,
-            InetSocketAddress::new("127.0.0.1", 7777),
-            b"hello",
-        )
-        .expect_err("exempt but unbound loopback UDP port should fail as not bound");
-
-    assert_eq!(error.code(), "ECONNREFUSED");
-}
diff --git a/crates/kernel/tests/socket_table.rs b/crates/kernel/tests/socket_table.rs
deleted file mode 100644
index 786d4bf64..000000000
--- a/crates/kernel/tests/socket_table.rs
+++ /dev/null
@@ -1,322 +0,0 @@
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::kernel::{KernelProcessHandle, KernelVm, KernelVmConfig, SpawnOptions};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::resource_accounting::ResourceLimits;
-use secure_exec_kernel::socket_table::{InetSocketAddress, SocketSpec, SocketState};
-use secure_exec_kernel::vfs::MemoryFileSystem;
-
-fn spawn_shell(kernel: &mut KernelVm<MemoryFileSystem>) -> KernelProcessHandle {
-    kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell")
-}
-
-fn new_kernel(vm_id: &str) -> KernelVm<MemoryFileSystem> {
-    let mut config = KernelVmConfig::new(vm_id);
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-}
-
-#[test]
-fn socket_resources_appear_in_kernel_resource_snapshot_and_cleanup_with_process_exit() {
-    let mut config = KernelVmConfig::new("vm-socket-resources");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = spawn_shell(&mut kernel);
-    let listener = kernel
-        .socket_create("shell", process.pid(), SocketSpec::tcp())
-        .expect("create listener socket");
-    kernel
-        .socket_set_state("shell", process.pid(), listener, SocketState::Listening)
-        .expect("mark listener");
-
-    let connected = kernel
-        .socket_create("shell", process.pid(), SocketSpec::tcp())
-        .expect("create connected socket");
-    kernel
-        .socket_set_state("shell", process.pid(), connected, SocketState::Connected)
-        .expect("mark connected");
-
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.sockets, 2);
-    assert_eq!(snapshot.socket_listeners, 1);
-    assert_eq!(snapshot.socket_connections, 1);
-
-    process.finish(0);
-
-    let snapshot_after_exit = kernel.resource_snapshot();
-    assert_eq!(snapshot_after_exit.sockets, 0);
-    assert_eq!(snapshot_after_exit.socket_listeners, 0);
-    assert_eq!(snapshot_after_exit.socket_connections, 0);
-}
-
-#[test]
-fn socket_resource_limits_reject_extra_sockets_and_connections() {
-    let mut config = KernelVmConfig::new("vm-socket-limits");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_sockets: Some(2),
-        max_connections: Some(1),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = spawn_shell(&mut kernel);
-    let listener = kernel
-        .socket_create("shell", process.pid(), SocketSpec::tcp())
-        .expect("create listener socket");
-    kernel
-        .socket_set_state("shell", process.pid(), listener, SocketState::Listening)
-        .expect("mark listener");
-
-    let first_connection = kernel
-        .socket_create("shell", process.pid(), SocketSpec::tcp())
-        .expect("create first connection socket");
-    kernel
-        .socket_set_state(
-            "shell",
-            process.pid(),
-            first_connection,
-            SocketState::Connected,
-        )
-        .expect("mark first connection");
-
-    let socket_error = kernel
-        .socket_create("shell", process.pid(), SocketSpec::tcp())
-        .expect_err("third socket should exceed max_sockets");
-    assert_eq!(socket_error.code(), "EAGAIN");
-
-    kernel
-        .socket_close("shell", process.pid(), listener)
-        .expect("close listener");
-    let second_connection = kernel
-        .socket_create("shell", process.pid(), SocketSpec::tcp())
-        .expect("create replacement socket");
-    let connection_error = kernel
-        .socket_set_state(
-            "shell",
-            process.pid(),
-            second_connection,
-            SocketState::Connected,
-        )
-        .expect_err("second connection should exceed max_connections");
-    assert_eq!(connection_error.code(), "EAGAIN");
-}
-
-#[test]
-fn socket_resource_snapshot_counts_stream_bytes_and_udp_queue_pressure() {
-    let mut kernel = new_kernel("vm-socket-buffer-snapshot");
-    let sender = spawn_shell(&mut kernel);
-    let receiver = spawn_shell(&mut kernel);
-
-    let stream_sender = kernel
-        .socket_create("shell", sender.pid(), SocketSpec::tcp())
-        .expect("create stream sender");
-    let stream_receiver = kernel
-        .socket_create("shell", receiver.pid(), SocketSpec::tcp())
-        .expect("create stream receiver");
-    kernel
-        .socket_connect_pair("shell", sender.pid(), stream_sender, stream_receiver)
-        .expect("connect stream pair");
-    kernel
-        .socket_write("shell", sender.pid(), stream_sender, b"hello")
-        .expect("write stream payload");
-
-    let datagram_sender = kernel
-        .socket_create("shell", sender.pid(), SocketSpec::udp())
-        .expect("create datagram sender");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            sender.pid(),
-            datagram_sender,
-            InetSocketAddress::new("127.0.0.1", 54071),
-        )
-        .expect("bind datagram sender");
-    let datagram_receiver = kernel
-        .socket_create("shell", receiver.pid(), SocketSpec::udp())
-        .expect("create datagram receiver");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            receiver.pid(),
-            datagram_receiver,
-            InetSocketAddress::new("127.0.0.1", 43171),
-        )
-        .expect("bind datagram receiver");
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            datagram_sender,
-            InetSocketAddress::new("127.0.0.1", 43171),
-            b"abc",
-        )
-        .expect("send first datagram");
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            datagram_sender,
-            InetSocketAddress::new("127.0.0.1", 43171),
-            b"defg",
-        )
-        .expect("send second datagram");
-
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.socket_buffered_bytes, 12);
-    assert_eq!(snapshot.socket_datagram_queue_len, 2);
-
-    let _ = kernel
-        .socket_read("shell", receiver.pid(), stream_receiver, 5)
-        .expect("read stream payload");
-    let _ = kernel
-        .socket_recv_datagram("shell", receiver.pid(), datagram_receiver, 16)
-        .expect("receive datagram");
-
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.socket_buffered_bytes, 4);
-    assert_eq!(snapshot.socket_datagram_queue_len, 1);
-}
-
-#[test]
-fn socket_resource_limits_reject_buffer_and_datagram_queue_growth() {
-    let mut config = KernelVmConfig::new("vm-socket-buffer-limits");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_socket_buffered_bytes: Some(5),
-        max_socket_datagram_queue_len: Some(1),
-        ..ResourceLimits::default()
-    };
-
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    let sender = spawn_shell(&mut kernel);
-    let receiver = spawn_shell(&mut kernel);
-
-    let stream_sender = kernel
-        .socket_create("shell", sender.pid(), SocketSpec::tcp())
-        .expect("create stream sender");
-    let stream_receiver = kernel
-        .socket_create("shell", receiver.pid(), SocketSpec::tcp())
-        .expect("create stream receiver");
-    kernel
-        .socket_connect_pair("shell", sender.pid(), stream_sender, stream_receiver)
-        .expect("connect stream pair");
-
-    kernel
-        .socket_write("shell", sender.pid(), stream_sender, b"12345")
-        .expect("write up to stream buffer limit");
-    let stream_error = kernel
-        .socket_write("shell", sender.pid(), stream_sender, b"6")
-        .expect_err("extra stream byte should exceed socket buffer limit");
-    assert_eq!(stream_error.code(), "EAGAIN");
-    assert_eq!(
-        kernel
-            .socket_get(stream_receiver)
-            .expect("stream receiver")
-            .buffered_read_bytes(),
-        5
-    );
-    let _ = kernel
-        .socket_read("shell", receiver.pid(), stream_receiver, 5)
-        .expect("drain stream buffer");
-    kernel
-        .socket_write("shell", sender.pid(), stream_sender, b"6")
-        .expect("write should succeed after draining stream buffer");
-    let _ = kernel
-        .socket_read("shell", receiver.pid(), stream_receiver, 1)
-        .expect("drain second stream write");
-
-    let datagram_sender = kernel
-        .socket_create("shell", sender.pid(), SocketSpec::udp())
-        .expect("create datagram sender");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            sender.pid(),
-            datagram_sender,
-            InetSocketAddress::new("127.0.0.1", 54072),
-        )
-        .expect("bind datagram sender");
-    let datagram_receiver = kernel
-        .socket_create("shell", receiver.pid(), SocketSpec::udp())
-        .expect("create datagram receiver");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            receiver.pid(),
-            datagram_receiver,
-            InetSocketAddress::new("127.0.0.1", 43172),
-        )
-        .expect("bind datagram receiver");
-
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            datagram_sender,
-            InetSocketAddress::new("127.0.0.1", 43172),
-            b"abc",
-        )
-        .expect("send first datagram");
-    let queue_error = kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            datagram_sender,
-            InetSocketAddress::new("127.0.0.1", 43172),
-            b"d",
-        )
-        .expect_err("second datagram should exceed queue length limit");
-    assert_eq!(queue_error.code(), "EAGAIN");
-    assert_eq!(
-        kernel
-            .socket_get(datagram_receiver)
-            .expect("datagram receiver")
-            .queued_datagrams(),
-        1
-    );
-    let _ = kernel
-        .socket_recv_datagram("shell", receiver.pid(), datagram_receiver, 16)
-        .expect("drain datagram queue");
-
-    let byte_error = kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            datagram_sender,
-            InetSocketAddress::new("127.0.0.1", 43172),
-            b"123456",
-        )
-        .expect_err("oversized datagram should exceed socket buffer byte limit");
-    assert_eq!(byte_error.code(), "EAGAIN");
-    assert_eq!(
-        kernel
-            .socket_get(datagram_receiver)
-            .expect("datagram receiver after oversized send")
-            .queued_datagrams(),
-        0
-    );
-}
diff --git a/crates/kernel/tests/stdio_devices.rs b/crates/kernel/tests/stdio_devices.rs
deleted file mode 100644
index 6871448ac..000000000
--- a/crates/kernel/tests/stdio_devices.rs
+++ /dev/null
@@ -1,53 +0,0 @@
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig, SpawnOptions};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::vfs::MemoryFileSystem;
-
-#[test]
-fn default_process_stdout_and_stderr_accept_writes_without_pipe_rewiring() {
-    let mut config = KernelVmConfig::new("vm-stdio-devices");
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-
-    let process = kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell");
-
-    assert_eq!(
-        kernel
-            .write_process_stdout("shell", process.pid(), b"stdout-data")
-            .expect("write stdout"),
-        "stdout-data".len()
-    );
-    assert_eq!(
-        kernel
-            .write_process_stderr("shell", process.pid(), b"stderr-data")
-            .expect("write stderr"),
-        "stderr-data".len()
-    );
-
-    assert_eq!(
-        kernel
-            .read_file("/dev/stdout")
-            .expect_err("stdout should not persist")
-            .code(),
-        "ENOENT"
-    );
-    assert_eq!(
-        kernel
-            .read_file("/dev/stderr")
-            .expect_err("stderr should not persist")
-            .code(),
-        "ENOENT"
-    );
-}
diff --git a/crates/kernel/tests/tcp_data_plane.rs b/crates/kernel/tests/tcp_data_plane.rs
deleted file mode 100644
index 728acd182..000000000
--- a/crates/kernel/tests/tcp_data_plane.rs
+++ /dev/null
@@ -1,246 +0,0 @@
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::kernel::{KernelProcessHandle, KernelVm, KernelVmConfig, SpawnOptions};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::resource_accounting::ResourceLimits;
-use secure_exec_kernel::socket_table::{
-    InetSocketAddress, SocketShutdown, SocketSpec, SocketState,
-};
-use secure_exec_kernel::vfs::MemoryFileSystem;
-
-fn spawn_shell(kernel: &mut KernelVm<MemoryFileSystem>) -> KernelProcessHandle {
-    kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell")
-}
-
-fn new_kernel(vm_id: &str) -> KernelVm<MemoryFileSystem> {
-    let mut config = KernelVmConfig::new(vm_id);
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-}
-
-#[test]
-fn tcp_connected_sockets_transfer_data_bidirectionally() {
-    let mut kernel = new_kernel("vm-tcp-data-plane");
-    let client = spawn_shell(&mut kernel);
-    let server = spawn_shell(&mut kernel);
-
-    let client_socket = kernel
-        .socket_create("shell", client.pid(), SocketSpec::tcp())
-        .expect("create client socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            client.pid(),
-            client_socket,
-            InetSocketAddress::new("127.0.0.1", 54011),
-        )
-        .expect("bind client socket");
-
-    let server_socket = kernel
-        .socket_create("shell", server.pid(), SocketSpec::tcp())
-        .expect("create server socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            server.pid(),
-            server_socket,
-            InetSocketAddress::new("127.0.0.1", 43121),
-        )
-        .expect("bind server socket");
-
-    kernel
-        .socket_connect_pair("shell", client.pid(), client_socket, server_socket)
-        .expect("connect pair");
-
-    let client_record = kernel.socket_get(client_socket).expect("client record");
-    assert_eq!(client_record.state(), SocketState::Connected);
-    assert_eq!(client_record.peer_socket_id(), Some(server_socket));
-    assert_eq!(
-        client_record.peer_address(),
-        Some(&InetSocketAddress::new("127.0.0.1", 43121))
-    );
-
-    let server_record = kernel.socket_get(server_socket).expect("server record");
-    assert_eq!(server_record.state(), SocketState::Connected);
-    assert_eq!(server_record.peer_socket_id(), Some(client_socket));
-    assert_eq!(
-        server_record.peer_address(),
-        Some(&InetSocketAddress::new("127.0.0.1", 54011))
-    );
-
-    let written = kernel
-        .socket_write("shell", client.pid(), client_socket, b"hello server")
-        .expect("write client payload");
-    assert_eq!(written, b"hello server".len());
-    assert_eq!(
-        kernel
-            .socket_get(server_socket)
-            .expect("server socket after write")
-            .buffered_read_bytes(),
-        b"hello server".len()
-    );
-
-    let first_read = kernel
-        .socket_read("shell", server.pid(), server_socket, 5)
-        .expect("read first chunk")
-        .expect("first chunk should be available");
-    assert_eq!(first_read, b"hello");
-
-    let second_read = kernel
-        .socket_read("shell", server.pid(), server_socket, 64)
-        .expect("read remaining bytes")
-        .expect("remaining bytes should be available");
-    assert_eq!(second_read, b" server");
-
-    kernel
-        .socket_write("shell", server.pid(), server_socket, b"ack")
-        .expect("write server reply");
-    let reply = kernel
-        .socket_read("shell", client.pid(), client_socket, 16)
-        .expect("read server reply")
-        .expect("reply should be available");
-    assert_eq!(reply, b"ack");
-
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.socket_connections, 2);
-}
-
-#[test]
-fn tcp_shutdown_and_close_propagate_eof_and_broken_pipe() {
-    let mut kernel = new_kernel("vm-tcp-shutdown-close");
-    let client = spawn_shell(&mut kernel);
-    let server = spawn_shell(&mut kernel);
-
-    let client_socket = kernel
-        .socket_create("shell", client.pid(), SocketSpec::tcp())
-        .expect("create client socket");
-    let server_socket = kernel
-        .socket_create("shell", server.pid(), SocketSpec::tcp())
-        .expect("create server socket");
-    kernel
-        .socket_connect_pair("shell", client.pid(), client_socket, server_socket)
-        .expect("connect pair");
-
-    kernel
-        .socket_shutdown("shell", server.pid(), server_socket, SocketShutdown::Write)
-        .expect("shutdown server write side");
-    assert_eq!(
-        kernel
-            .socket_read("shell", client.pid(), client_socket, 32)
-            .expect("read after peer write shutdown"),
-        None
-    );
-    assert!(kernel
-        .socket_get(client_socket)
-        .expect("client after peer write shutdown")
-        .peer_write_shutdown());
-
-    kernel
-        .socket_write("shell", client.pid(), client_socket, b"still-open")
-        .expect("client write after peer write shutdown");
-    let payload = kernel
-        .socket_read("shell", server.pid(), server_socket, 64)
-        .expect("server read after peer write shutdown")
-        .expect("server should still read");
-    assert_eq!(payload, b"still-open");
-
-    kernel
-        .socket_shutdown("shell", server.pid(), server_socket, SocketShutdown::Read)
-        .expect("shutdown server read side");
-    let write_error = kernel
-        .socket_write("shell", client.pid(), client_socket, b"no-reader")
-        .expect_err("peer read shutdown should reject writes");
-    assert_eq!(write_error.code(), "EPIPE");
-
-    kernel
-        .socket_close("shell", client.pid(), client_socket)
-        .expect("close client socket");
-    assert_eq!(
-        kernel
-            .socket_read("shell", server.pid(), server_socket, 32)
-            .expect("read after peer close"),
-        None
-    );
-    let closed_write_error = kernel
-        .socket_write("shell", server.pid(), server_socket, b"peer-gone")
-        .expect_err("peer close should reject writes");
-    assert_eq!(closed_write_error.code(), "EPIPE");
-
-    kernel
-        .socket_close("shell", server.pid(), server_socket)
-        .expect("close server socket");
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.sockets, 0);
-    assert_eq!(snapshot.socket_connections, 0);
-}
-
-#[test]
-fn tcp_writes_respect_socket_buffer_backpressure() {
-    let mut config = KernelVmConfig::new("vm-tcp-buffer-backpressure");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_socket_buffered_bytes: Some(5),
-        ..ResourceLimits::default()
-    };
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    let client = spawn_shell(&mut kernel);
-    let server = spawn_shell(&mut kernel);
-
-    let client_socket = kernel
-        .socket_create("shell", client.pid(), SocketSpec::tcp())
-        .expect("create client socket");
-    let server_socket = kernel
-        .socket_create("shell", server.pid(), SocketSpec::tcp())
-        .expect("create server socket");
-    kernel
-        .socket_connect_pair("shell", client.pid(), client_socket, server_socket)
-        .expect("connect pair");
-
-    let written = kernel
-        .socket_write("shell", client.pid(), client_socket, b"12345")
-        .expect("fill server receive buffer");
-    assert_eq!(written, 5);
-    let error = kernel
-        .socket_write("shell", client.pid(), client_socket, b"6")
-        .expect_err("extra byte should exceed socket buffer limit");
-    assert_eq!(error.code(), "EAGAIN");
-    assert_eq!(
-        kernel
-            .socket_get(server_socket)
-            .expect("server socket")
-            .buffered_read_bytes(),
-        5
-    );
-
-    let drained = kernel
-        .socket_read("shell", server.pid(), server_socket, 5)
-        .expect("read server payload")
-        .expect("payload should be available");
-    assert_eq!(drained, b"12345");
-    let written = kernel
-        .socket_write("shell", client.pid(), client_socket, b"6")
-        .expect("write should succeed after draining buffer");
-    assert_eq!(written, 1);
-    assert_eq!(
-        kernel
-            .socket_get(server_socket)
-            .expect("server socket after recovery")
-            .buffered_read_bytes(),
-        1
-    );
-}
diff --git a/crates/kernel/tests/tcp_listener.rs b/crates/kernel/tests/tcp_listener.rs
deleted file mode 100644
index 11499c00e..000000000
--- a/crates/kernel/tests/tcp_listener.rs
+++ /dev/null
@@ -1,218 +0,0 @@
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::kernel::{KernelProcessHandle, KernelVm, KernelVmConfig, SpawnOptions};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::socket_table::{InetSocketAddress, SocketSpec, SocketState};
-use secure_exec_kernel::vfs::MemoryFileSystem;
-
-fn spawn_shell(kernel: &mut KernelVm<MemoryFileSystem>) -> KernelProcessHandle {
-    kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell")
-}
-
-fn new_kernel(vm_id: &str) -> KernelVm<MemoryFileSystem> {
-    let mut config = KernelVmConfig::new(vm_id);
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-}
-
-#[test]
-fn tcp_listener_bind_listen_and_accept_preserve_listener_state() {
-    let mut kernel = new_kernel("vm-tcp-listener-accept");
-    let process = spawn_shell(&mut kernel);
-    let listener = kernel
-        .socket_create("shell", process.pid(), SocketSpec::tcp())
-        .expect("create listener socket");
-
-    kernel
-        .socket_bind_inet(
-            "shell",
-            process.pid(),
-            listener,
-            InetSocketAddress::new("127.0.0.1", 43111),
-        )
-        .expect("bind listener");
-    kernel
-        .socket_listen("shell", process.pid(), listener, 2)
-        .expect("listen");
-    kernel
-        .socket_queue_incoming_tcp_connection(
-            "shell",
-            process.pid(),
-            listener,
-            InetSocketAddress::new("127.0.0.1", 54001),
-        )
-        .expect("queue first connection");
-    kernel
-        .socket_queue_incoming_tcp_connection(
-            "shell",
-            process.pid(),
-            listener,
-            InetSocketAddress::new("127.0.0.1", 54002),
-        )
-        .expect("queue second connection");
-
-    let listener_record = kernel.socket_get(listener).expect("listener record");
-    assert_eq!(listener_record.state(), SocketState::Listening);
-    assert_eq!(listener_record.listen_backlog(), Some(2));
-    assert_eq!(listener_record.pending_accept_count(), 2);
-    assert_eq!(
-        listener_record.local_address(),
-        Some(&InetSocketAddress::new("127.0.0.1", 43111))
-    );
-
-    let first_accepted = kernel
-        .socket_accept("shell", process.pid(), listener)
-        .expect("accept first connection");
-    let first_record = kernel.socket_get(first_accepted).expect("first accepted");
-    assert_eq!(first_record.state(), SocketState::Connected);
-    assert_eq!(
-        first_record.local_address(),
-        Some(&InetSocketAddress::new("127.0.0.1", 43111))
-    );
-    assert_eq!(
-        first_record.peer_address(),
-        Some(&InetSocketAddress::new("127.0.0.1", 54001))
-    );
-
-    let listener_after_first_accept = kernel.socket_get(listener).expect("listener after accept");
-    assert_eq!(listener_after_first_accept.state(), SocketState::Listening);
-    assert_eq!(listener_after_first_accept.pending_accept_count(), 1);
-
-    let second_accepted = kernel
-        .socket_accept("shell", process.pid(), listener)
-        .expect("accept second connection");
-    let second_record = kernel.socket_get(second_accepted).expect("second accepted");
-    assert_eq!(second_record.state(), SocketState::Connected);
-    assert_eq!(
-        second_record.peer_address(),
-        Some(&InetSocketAddress::new("127.0.0.1", 54002))
-    );
-
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.socket_listeners, 1);
-    assert_eq!(snapshot.socket_connections, 2);
-
-    let accept_error = kernel
-        .socket_accept("shell", process.pid(), listener)
-        .expect_err("empty listener should not accept");
-    assert_eq!(accept_error.code(), "EAGAIN");
-}
-
-#[test]
-fn tcp_listener_requires_bind_and_enforces_backlog_capacity() {
-    let mut kernel = new_kernel("vm-tcp-listener-backlog");
-    let process = spawn_shell(&mut kernel);
-    let listener = kernel
-        .socket_create("shell", process.pid(), SocketSpec::tcp())
-        .expect("create listener socket");
-
-    let listen_error = kernel
-        .socket_listen("shell", process.pid(), listener, 1)
-        .expect_err("listen should require bind");
-    assert_eq!(listen_error.code(), "EINVAL");
-
-    kernel
-        .socket_bind_inet(
-            "shell",
-            process.pid(),
-            listener,
-            InetSocketAddress::new("127.0.0.1", 43112),
-        )
-        .expect("bind listener");
-    kernel
-        .socket_listen("shell", process.pid(), listener, 1)
-        .expect("listen");
-    kernel
-        .socket_queue_incoming_tcp_connection(
-            "shell",
-            process.pid(),
-            listener,
-            InetSocketAddress::new("127.0.0.1", 55001),
-        )
-        .expect("queue first connection");
-
-    let backlog_error = kernel
-        .socket_queue_incoming_tcp_connection(
-            "shell",
-            process.pid(),
-            listener,
-            InetSocketAddress::new("127.0.0.1", 55002),
-        )
-        .expect_err("second queued connection should exceed backlog");
-    assert_eq!(backlog_error.code(), "EAGAIN");
-}
-
-#[test]
-fn tcp_listener_close_removes_pending_accepted_socket() {
-    let mut kernel = new_kernel("vm-tcp-listener-close-pending");
-    let server = spawn_shell(&mut kernel);
-    let client = spawn_shell(&mut kernel);
-    let listener = kernel
-        .socket_create("shell", server.pid(), SocketSpec::tcp())
-        .expect("create listener socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            server.pid(),
-            listener,
-            InetSocketAddress::new("127.0.0.1", 43113),
-        )
-        .expect("bind listener");
-    kernel
-        .socket_listen("shell", server.pid(), listener, 1)
-        .expect("listen");
-
-    let client_socket = kernel
-        .socket_create("shell", client.pid(), SocketSpec::tcp())
-        .expect("create client socket");
-    kernel
-        .socket_connect_inet_loopback(
-            "shell",
-            client.pid(),
-            client_socket,
-            InetSocketAddress::new("127.0.0.1", 43113),
-        )
-        .expect("connect client to listener");
-
-    assert_eq!(
-        kernel
-            .socket_get(listener)
-            .expect("listener with pending accept")
-            .pending_accept_count(),
-        1
-    );
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.sockets, 3);
-    assert_eq!(snapshot.socket_listeners, 1);
-    assert_eq!(snapshot.socket_connections, 2);
-
-    kernel
-        .socket_close("shell", server.pid(), listener)
-        .expect("close listener");
-
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.sockets, 1);
-    assert_eq!(snapshot.socket_listeners, 0);
-    assert_eq!(snapshot.socket_connections, 1);
-    let client_record = kernel
-        .socket_get(client_socket)
-        .expect("client socket should remain");
-    assert_eq!(client_record.peer_socket_id(), None);
-    assert!(client_record.peer_write_shutdown());
-    let error = kernel
-        .socket_accept("shell", server.pid(), listener)
-        .expect_err("closed listener should not accept");
-    assert_eq!(error.code(), "ENOENT");
-}
diff --git a/crates/kernel/tests/udp_datagram.rs b/crates/kernel/tests/udp_datagram.rs
deleted file mode 100644
index 25725ce13..000000000
--- a/crates/kernel/tests/udp_datagram.rs
+++ /dev/null
@@ -1,438 +0,0 @@
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::kernel::{KernelProcessHandle, KernelVm, KernelVmConfig, SpawnOptions};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::resource_accounting::ResourceLimits;
-use secure_exec_kernel::socket_table::{
-    DatagramSocketOption, InetSocketAddress, SocketMulticastMembership, SocketSpec,
-};
-use secure_exec_kernel::vfs::MemoryFileSystem;
-
-fn spawn_shell(kernel: &mut KernelVm<MemoryFileSystem>) -> KernelProcessHandle {
-    kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell")
-}
-
-fn new_kernel(vm_id: &str) -> KernelVm<MemoryFileSystem> {
-    let mut config = KernelVmConfig::new(vm_id);
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-}
-
-#[test]
-fn udp_datagrams_preserve_boundaries_and_truncate_per_receive() {
-    let mut kernel = new_kernel("vm-udp-boundaries");
-    let sender = spawn_shell(&mut kernel);
-    let receiver = spawn_shell(&mut kernel);
-
-    let sender_socket = kernel
-        .socket_create("shell", sender.pid(), SocketSpec::udp())
-        .expect("create sender socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 54051),
-        )
-        .expect("bind sender");
-
-    let receiver_socket = kernel
-        .socket_create("shell", receiver.pid(), SocketSpec::udp())
-        .expect("create receiver socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            receiver.pid(),
-            receiver_socket,
-            InetSocketAddress::new("127.0.0.1", 43151),
-        )
-        .expect("bind receiver");
-
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43151),
-            b"first-datagram",
-        )
-        .expect("send first datagram");
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("localhost", 43151),
-            b"second",
-        )
-        .expect("send second datagram");
-
-    assert_eq!(
-        kernel
-            .socket_get(receiver_socket)
-            .expect("receiver after sends")
-            .queued_datagrams(),
-        2
-    );
-
-    let first = kernel
-        .socket_recv_datagram("shell", receiver.pid(), receiver_socket, 5)
-        .expect("receive first datagram")
-        .expect("first payload");
-    assert_eq!(
-        first.source_address(),
-        Some(&InetSocketAddress::new("127.0.0.1", 54051))
-    );
-    assert_eq!(first.payload(), b"first");
-
-    assert_eq!(
-        kernel
-            .socket_get(receiver_socket)
-            .expect("receiver after first receive")
-            .queued_datagrams(),
-        1
-    );
-
-    let second = kernel
-        .socket_recv_datagram("shell", receiver.pid(), receiver_socket, 64)
-        .expect("receive second datagram")
-        .expect("second payload");
-    assert_eq!(second.payload(), b"second");
-
-    let empty_error = kernel
-        .socket_recv_datagram("shell", receiver.pid(), receiver_socket, 64)
-        .expect_err("empty UDP queue should report would-block");
-    assert_eq!(empty_error.code(), "EAGAIN");
-}
-
-#[test]
-fn udp_loopback_send_reaches_wildcard_bound_receiver() {
-    let mut kernel = new_kernel("vm-udp-wildcard-delivery");
-    let sender = spawn_shell(&mut kernel);
-    let receiver = spawn_shell(&mut kernel);
-
-    let sender_socket = kernel
-        .socket_create("shell", sender.pid(), SocketSpec::udp())
-        .expect("create sender socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 54053),
-        )
-        .expect("bind sender");
-
-    let receiver_socket = kernel
-        .socket_create("shell", receiver.pid(), SocketSpec::udp())
-        .expect("create receiver socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            receiver.pid(),
-            receiver_socket,
-            InetSocketAddress::new("0.0.0.0", 43153),
-        )
-        .expect("bind receiver to wildcard");
-
-    let written = kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43153),
-            b"wildcard",
-        )
-        .expect("send to wildcard-bound receiver");
-    assert_eq!(written, b"wildcard".len());
-
-    let datagram = kernel
-        .socket_recv_datagram("shell", receiver.pid(), receiver_socket, 64)
-        .expect("receive datagram")
-        .expect("queued datagram");
-    assert_eq!(
-        datagram.source_address(),
-        Some(&InetSocketAddress::new("127.0.0.1", 54053))
-    );
-    assert_eq!(datagram.payload(), b"wildcard");
-}
-
-#[test]
-fn udp_send_and_receive_require_bound_sockets_and_bound_targets() {
-    let mut kernel = new_kernel("vm-udp-errors");
-    let sender = spawn_shell(&mut kernel);
-    let receiver = spawn_shell(&mut kernel);
-
-    let sender_socket = kernel
-        .socket_create("shell", sender.pid(), SocketSpec::udp())
-        .expect("create sender socket");
-    let receiver_socket = kernel
-        .socket_create("shell", receiver.pid(), SocketSpec::udp())
-        .expect("create receiver socket");
-
-    let unbound_send_error = kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43152),
-            b"payload",
-        )
-        .expect_err("unbound sender should fail");
-    assert_eq!(unbound_send_error.code(), "EINVAL");
-
-    kernel
-        .socket_bind_inet(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 54052),
-        )
-        .expect("bind sender");
-
-    let missing_target_error = kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43152),
-            b"payload",
-        )
-        .expect_err("missing receiver should fail");
-    assert_eq!(missing_target_error.code(), "EPERM");
-
-    let unbound_recv_error = kernel
-        .socket_recv_datagram("shell", receiver.pid(), receiver_socket, 64)
-        .expect_err("unbound receiver should fail");
-    assert_eq!(unbound_recv_error.code(), "EINVAL");
-}
-
-#[test]
-fn udp_datagram_queue_limit_rejects_extra_datagrams_without_mutating_queue() {
-    let mut config = KernelVmConfig::new("vm-udp-queue-limit");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_socket_datagram_queue_len: Some(1),
-        ..ResourceLimits::default()
-    };
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    let sender = spawn_shell(&mut kernel);
-    let receiver = spawn_shell(&mut kernel);
-
-    let sender_socket = kernel
-        .socket_create("shell", sender.pid(), SocketSpec::udp())
-        .expect("create sender socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 54054),
-        )
-        .expect("bind sender");
-
-    let receiver_socket = kernel
-        .socket_create("shell", receiver.pid(), SocketSpec::udp())
-        .expect("create receiver socket");
-    kernel
-        .socket_bind_inet(
-            "shell",
-            receiver.pid(),
-            receiver_socket,
-            InetSocketAddress::new("127.0.0.1", 43154),
-        )
-        .expect("bind receiver");
-
-    kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43154),
-            b"one",
-        )
-        .expect("send first datagram");
-    let queue_error = kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43154),
-            b"two",
-        )
-        .expect_err("second datagram should exceed queue length limit");
-    assert_eq!(queue_error.code(), "EAGAIN");
-    let receiver_record = kernel
-        .socket_get(receiver_socket)
-        .expect("receiver after rejected datagram");
-    assert_eq!(receiver_record.queued_datagrams(), 1);
-    assert_eq!(receiver_record.queued_datagram_bytes(), 3);
-
-    let datagram = kernel
-        .socket_recv_datagram("shell", receiver.pid(), receiver_socket, 16)
-        .expect("receive queued datagram")
-        .expect("datagram payload");
-    assert_eq!(datagram.payload(), b"one");
-    let receiver_record = kernel
-        .socket_get(receiver_socket)
-        .expect("receiver after drain");
-    assert_eq!(receiver_record.queued_datagrams(), 0);
-    assert_eq!(receiver_record.queued_datagram_bytes(), 0);
-
-    let written = kernel
-        .socket_send_to_inet_loopback(
-            "shell",
-            sender.pid(),
-            sender_socket,
-            InetSocketAddress::new("127.0.0.1", 43154),
-            b"two",
-        )
-        .expect("send should succeed after draining datagram queue");
-    assert_eq!(written, 3);
-    let receiver_record = kernel
-        .socket_get(receiver_socket)
-        .expect("receiver after resumed send");
-    assert_eq!(receiver_record.queued_datagrams(), 1);
-    assert_eq!(receiver_record.queued_datagram_bytes(), 3);
-    let datagram = kernel
-        .socket_recv_datagram("shell", receiver.pid(), receiver_socket, 16)
-        .expect("receive resumed datagram")
-        .expect("resumed datagram payload");
-    assert_eq!(datagram.payload(), b"two");
-}
-
-#[test]
-fn udp_reuseport_allows_two_sockets_to_bind_the_same_port() {
-    let mut kernel = new_kernel("vm-udp-reuseport");
-    let first = spawn_shell(&mut kernel);
-    let second = spawn_shell(&mut kernel);
-
-    let first_socket = kernel
-        .socket_create("shell", first.pid(), SocketSpec::udp())
-        .expect("create first UDP socket");
-    kernel
-        .socket_set_datagram_option(
-            "shell",
-            first.pid(),
-            first_socket,
-            DatagramSocketOption::ReusePort,
-            true,
-        )
-        .expect("enable REUSEPORT on first socket");
-
-    let second_socket = kernel
-        .socket_create("shell", second.pid(), SocketSpec::udp())
-        .expect("create second UDP socket");
-    kernel
-        .socket_set_datagram_option(
-            "shell",
-            second.pid(),
-            second_socket,
-            DatagramSocketOption::ReusePort,
-            true,
-        )
-        .expect("enable REUSEPORT on second socket");
-
-    let shared_address = InetSocketAddress::new("127.0.0.1", 43153);
-    kernel
-        .socket_bind_inet("shell", first.pid(), first_socket, shared_address.clone())
-        .expect("bind first socket");
-    kernel
-        .socket_bind_inet("shell", second.pid(), second_socket, shared_address)
-        .expect("bind second socket to the same port");
-
-    assert!(kernel
-        .socket_get(first_socket)
-        .expect("first socket state")
-        .reuse_port());
-    assert!(kernel
-        .socket_get(second_socket)
-        .expect("second socket state")
-        .reuse_port());
-}
-
-#[test]
-fn udp_broadcast_option_is_tracked_in_kernel_socket_state() {
-    let mut kernel = new_kernel("vm-udp-broadcast");
-    let process = spawn_shell(&mut kernel);
-    let socket_id = kernel
-        .socket_create("shell", process.pid(), SocketSpec::udp())
-        .expect("create UDP socket");
-
-    kernel
-        .socket_bind_inet(
-            "shell",
-            process.pid(),
-            socket_id,
-            InetSocketAddress::new("0.0.0.0", 43154),
-        )
-        .expect("bind UDP socket");
-    kernel
-        .socket_set_datagram_option(
-            "shell",
-            process.pid(),
-            socket_id,
-            DatagramSocketOption::Broadcast,
-            true,
-        )
-        .expect("enable broadcast");
-
-    assert!(kernel
-        .socket_get(socket_id)
-        .expect("socket state after broadcast enable")
-        .broadcast_enabled());
-}
-
-#[test]
-fn udp_multicast_memberships_are_added_and_removed_from_socket_state() {
-    let mut kernel = new_kernel("vm-udp-multicast-membership");
-    let process = spawn_shell(&mut kernel);
-    let socket_id = kernel
-        .socket_create("shell", process.pid(), SocketSpec::udp())
-        .expect("create UDP socket");
-
-    kernel
-        .socket_bind_inet(
-            "shell",
-            process.pid(),
-            socket_id,
-            InetSocketAddress::new("0.0.0.0", 43155),
-        )
-        .expect("bind UDP socket");
-
-    let membership = SocketMulticastMembership::new("239.1.2.3", None);
-    kernel
-        .socket_add_membership("shell", process.pid(), socket_id, membership.clone())
-        .expect("join multicast group");
-
-    let joined = kernel
-        .socket_get(socket_id)
-        .expect("socket state after join");
-    assert_eq!(joined.multicast_membership_count(), 1);
-    assert!(joined.has_multicast_membership(&membership));
-
-    kernel
-        .socket_drop_membership("shell", process.pid(), socket_id, membership.clone())
-        .expect("leave multicast group");
-
-    let left = kernel
-        .socket_get(socket_id)
-        .expect("socket state after leave");
-    assert_eq!(left.multicast_membership_count(), 0);
-    assert!(!left.has_multicast_membership(&membership));
-}
diff --git a/crates/kernel/tests/unix_domain_socket.rs b/crates/kernel/tests/unix_domain_socket.rs
deleted file mode 100644
index 11f5c99a2..000000000
--- a/crates/kernel/tests/unix_domain_socket.rs
+++ /dev/null
@@ -1,195 +0,0 @@
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::kernel::{KernelProcessHandle, KernelVm, KernelVmConfig, SpawnOptions};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::socket_table::{SocketShutdown, SocketSpec, SocketState};
-use secure_exec_kernel::vfs::MemoryFileSystem;
-
-fn spawn_shell(kernel: &mut KernelVm<MemoryFileSystem>) -> KernelProcessHandle {
-    kernel
-        .spawn_process(
-            "sh",
-            Vec::new(),
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell")
-}
-
-fn new_kernel(vm_id: &str) -> KernelVm<MemoryFileSystem> {
-    let mut config = KernelVmConfig::new(vm_id);
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell");
-    kernel
-}
-
-#[test]
-fn unix_domain_sockets_bind_connect_accept_and_transfer_data() {
-    let mut kernel = new_kernel("vm-unix-domain-flow");
-    let server = spawn_shell(&mut kernel);
-    let client = spawn_shell(&mut kernel);
-
-    let listener = kernel
-        .socket_create("shell", server.pid(), SocketSpec::unix_stream())
-        .expect("create unix listener");
-    kernel
-        .socket_bind_unix("shell", server.pid(), listener, "/tmp/kernel/server.sock")
-        .expect("bind unix listener");
-    kernel
-        .socket_listen("shell", server.pid(), listener, 1)
-        .expect("listen on unix listener");
-
-    let client_socket = kernel
-        .socket_create("shell", client.pid(), SocketSpec::unix_stream())
-        .expect("create unix client");
-    kernel
-        .socket_bind_unix(
-            "shell",
-            client.pid(),
-            client_socket,
-            "/tmp/kernel/client.sock",
-        )
-        .expect("bind unix client");
-    kernel
-        .socket_connect_unix(
-            "shell",
-            client.pid(),
-            client_socket,
-            "/tmp/kernel/server.sock",
-        )
-        .expect("connect unix client");
-
-    let listener_record = kernel.socket_get(listener).expect("listener record");
-    assert_eq!(listener_record.state(), SocketState::Listening);
-    assert_eq!(
-        listener_record.local_unix_path(),
-        Some("/tmp/kernel/server.sock")
-    );
-    assert_eq!(listener_record.pending_accept_count(), 1);
-
-    let client_record = kernel.socket_get(client_socket).expect("client record");
-    assert_eq!(client_record.state(), SocketState::Connected);
-    assert_eq!(
-        client_record.local_unix_path(),
-        Some("/tmp/kernel/client.sock")
-    );
-    assert_eq!(
-        client_record.peer_unix_path(),
-        Some("/tmp/kernel/server.sock")
-    );
-
-    let accepted = kernel
-        .socket_accept("shell", server.pid(), listener)
-        .expect("accept unix client");
-    let accepted_record = kernel.socket_get(accepted).expect("accepted record");
-    assert_eq!(accepted_record.state(), SocketState::Connected);
-    assert_eq!(
-        accepted_record.local_unix_path(),
-        Some("/tmp/kernel/server.sock")
-    );
-    assert_eq!(
-        accepted_record.peer_unix_path(),
-        Some("/tmp/kernel/client.sock")
-    );
-    assert_eq!(accepted_record.peer_socket_id(), Some(client_socket));
-
-    kernel
-        .socket_write("shell", client.pid(), client_socket, b"ping-unix")
-        .expect("write unix payload");
-    let payload = kernel
-        .socket_read("shell", server.pid(), accepted, 64)
-        .expect("read unix payload")
-        .expect("unix payload");
-    assert_eq!(payload, b"ping-unix");
-
-    kernel
-        .socket_shutdown("shell", server.pid(), accepted, SocketShutdown::Write)
-        .expect("shutdown accepted write side");
-    assert_eq!(
-        kernel
-            .socket_read("shell", client.pid(), client_socket, 16)
-            .expect("read unix eof"),
-        None
-    );
-
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.socket_listeners, 1);
-    assert_eq!(snapshot.socket_connections, 2);
-}
-
-#[test]
-fn unix_domain_sockets_require_bound_listener_paths_and_backlog_capacity() {
-    let mut kernel = new_kernel("vm-unix-domain-errors");
-    let server = spawn_shell(&mut kernel);
-    let client = spawn_shell(&mut kernel);
-
-    let listener = kernel
-        .socket_create("shell", server.pid(), SocketSpec::unix_stream())
-        .expect("create unix listener");
-    let listen_error = kernel
-        .socket_listen("shell", server.pid(), listener, 1)
-        .expect_err("unix listen should require bind");
-    assert_eq!(listen_error.code(), "EINVAL");
-
-    let missing_target = kernel
-        .socket_create("shell", client.pid(), SocketSpec::unix_stream())
-        .expect("create missing-target client");
-    let connect_error = kernel
-        .socket_connect_unix(
-            "shell",
-            client.pid(),
-            missing_target,
-            "/tmp/kernel/missing.sock",
-        )
-        .expect_err("missing unix listener should fail");
-    assert_eq!(connect_error.code(), "ECONNREFUSED");
-
-    kernel
-        .socket_bind_unix("shell", server.pid(), listener, "/tmp/kernel/listener.sock")
-        .expect("bind unix listener");
-    kernel
-        .socket_listen("shell", server.pid(), listener, 1)
-        .expect("listen on bound unix listener");
-
-    let duplicate_listener = kernel
-        .socket_create("shell", server.pid(), SocketSpec::unix_stream())
-        .expect("create duplicate listener");
-    let duplicate_bind_error = kernel
-        .socket_bind_unix(
-            "shell",
-            server.pid(),
-            duplicate_listener,
-            "/tmp/kernel/listener.sock",
-        )
-        .expect_err("duplicate unix path should fail");
-    assert_eq!(duplicate_bind_error.code(), "EADDRINUSE");
-
-    let first_client = kernel
-        .socket_create("shell", client.pid(), SocketSpec::unix_stream())
-        .expect("create first client");
-    kernel
-        .socket_connect_unix(
-            "shell",
-            client.pid(),
-            first_client,
-            "/tmp/kernel/listener.sock",
-        )
-        .expect("connect first client");
-
-    let second_client = kernel
-        .socket_create("shell", client.pid(), SocketSpec::unix_stream())
-        .expect("create second client");
-    let backlog_error = kernel
-        .socket_connect_unix(
-            "shell",
-            client.pid(),
-            second_client,
-            "/tmp/kernel/listener.sock",
-        )
-        .expect_err("second connect should exceed backlog");
-    assert_eq!(backlog_error.code(), "EAGAIN");
-}
diff --git a/crates/kernel/tests/user.rs b/crates/kernel/tests/user.rs
deleted file mode 100644
index f9fdf0faf..000000000
--- a/crates/kernel/tests/user.rs
+++ /dev/null
@@ -1,167 +0,0 @@
-use secure_exec_kernel::user::{UserConfig, UserManager};
-
-#[test]
-fn uses_sensible_defaults_when_not_configured() {
-    let user = UserManager::new();
-
-    assert_eq!(user.uid, 1000);
-    assert_eq!(user.gid, 1000);
-    assert_eq!(user.euid, 1000);
-    assert_eq!(user.egid, 1000);
-    assert_eq!(user.username, "agentos");
-    assert_eq!(user.homedir, "/home/agentos");
-    assert_eq!(user.shell, "/bin/sh");
-    assert_eq!(user.gecos, "");
-}
-
-#[test]
-fn empty_config_uses_the_same_defaults() {
-    let user = UserManager::from_config(UserConfig::default());
-
-    assert_eq!(user.uid, 1000);
-    assert_eq!(user.gid, 1000);
-    assert_eq!(user.username, "agentos");
-}
-
-#[test]
-fn effective_ids_default_to_real_ids() {
-    let with_uid = UserManager::from_config(UserConfig {
-        uid: Some(500),
-        ..UserConfig::default()
-    });
-    let with_gid = UserManager::from_config(UserConfig {
-        gid: Some(500),
-        ..UserConfig::default()
-    });
-
-    assert_eq!(with_uid.euid, 500);
-    assert_eq!(with_gid.egid, 500);
-}
-
-#[test]
-fn accepts_custom_configuration() {
-    let user = UserManager::from_config(UserConfig {
-        uid: Some(501),
-        gid: Some(502),
-        euid: Some(0),
-        egid: Some(0),
-        username: Some(String::from("admin")),
-        homedir: Some(String::from("/home/admin")),
-        shell: Some(String::from("/bin/bash")),
-        gecos: Some(String::from("Admin User")),
-        ..UserConfig::default()
-    });
-
-    assert_eq!(user.uid, 501);
-    assert_eq!(user.gid, 502);
-    assert_eq!(user.euid, 0);
-    assert_eq!(user.egid, 0);
-    assert_eq!(user.username, "admin");
-    assert_eq!(user.homedir, "/home/admin");
-    assert_eq!(user.shell, "/bin/bash");
-    assert_eq!(user.gecos, "Admin User");
-}
-
-#[test]
-fn supports_root_configuration() {
-    let user = UserManager::from_config(UserConfig {
-        uid: Some(0),
-        gid: Some(0),
-        username: Some(String::from("root")),
-        homedir: Some(String::from("/root")),
-        ..UserConfig::default()
-    });
-
-    assert_eq!(user.uid, 0);
-    assert_eq!(user.gid, 0);
-    assert_eq!(user.euid, 0);
-    assert_eq!(user.egid, 0);
-    assert_eq!(user.username, "root");
-    assert_eq!(user.homedir, "/root");
-}
-
-#[test]
-fn getpwuid_returns_configured_entry_for_the_active_user() {
-    let user = UserManager::new();
-
-    assert_eq!(
-        user.getpwuid(1000),
-        Some(String::from("agentos:x:1000:1000::/home/agentos:/bin/sh"))
-    );
-
-    let with_gecos = UserManager::from_config(UserConfig {
-        gecos: Some(String::from("Test User")),
-        ..UserConfig::default()
-    });
-    assert_eq!(
-        with_gecos.getpwuid(1000),
-        Some(String::from(
-            "agentos:x:1000:1000:Test User:/home/agentos:/bin/sh"
-        ))
-    );
-}
-
-#[test]
-fn getpwuid_returns_custom_entry_and_rejects_unknown_uids() {
-    let deploy = UserManager::from_config(UserConfig {
-        uid: Some(501),
-        gid: Some(502),
-        username: Some(String::from("deploy")),
-        homedir: Some(String::from("/opt/deploy")),
-        shell: Some(String::from("/bin/bash")),
-        gecos: Some(String::from("Deploy User")),
-        ..UserConfig::default()
-    });
-
-    assert_eq!(
-        deploy.getpwuid(501),
-        Some(String::from(
-            "deploy:x:501:502:Deploy User:/opt/deploy:/bin/bash"
-        ))
-    );
-    assert_eq!(deploy.getpwuid(9999), None);
-}
-
-#[test]
-fn getpwuid_handles_root_uid_for_root_and_non_root_configs() {
-    let user = UserManager::new();
-    assert_eq!(user.getpwuid(0), None);
-
-    let root = UserManager::from_config(UserConfig {
-        uid: Some(0),
-        gid: Some(0),
-        username: Some(String::from("root")),
-        homedir: Some(String::from("/root")),
-        ..UserConfig::default()
-    });
-    assert_eq!(
-        root.getpwuid(0),
-        Some(String::from("root:x:0:0::/root:/bin/sh"))
-    );
-}
-
-#[test]
-fn getgroups_and_getgrgid_use_kernel_managed_group_state() {
-    let user = UserManager::from_config(UserConfig {
-        gid: Some(123),
-        username: Some(String::from("deploy")),
-        group_name: Some(String::from("deployers")),
-        supplementary_gids: vec![456, 123, 456, 789],
-        ..UserConfig::default()
-    });
-
-    assert_eq!(user.getgroups(), vec![123, 456, 789]);
-    assert_eq!(
-        user.getgrgid(123),
-        Some(String::from("deployers:x:123:deploy"))
-    );
-    assert_eq!(
-        user.getgrgid(456),
-        Some(String::from("group456:x:456:deploy"))
-    );
-    assert_eq!(
-        user.getgrgid(789),
-        Some(String::from("group789:x:789:deploy"))
-    );
-    assert_eq!(user.getgrgid(999), None);
-}
diff --git a/crates/kernel/tests/virtual_process.rs b/crates/kernel/tests/virtual_process.rs
deleted file mode 100644
index 749e8a567..000000000
--- a/crates/kernel/tests/virtual_process.rs
+++ /dev/null
@@ -1,240 +0,0 @@
-use secure_exec_kernel::kernel::{
-    KernelVm, KernelVmConfig, VirtualProcessOptions, WaitPidEvent, WaitPidFlags,
-};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::socket_table::{InetSocketAddress, SocketSpec};
-use secure_exec_kernel::vfs::MemoryFileSystem;
-use std::time::Duration;
-
-fn assert_kernel_error_code<T: std::fmt::Debug>(
-    result: secure_exec_kernel::kernel::KernelResult<T>,
-    expected: &str,
-) {
-    let error = result.expect_err("operation should fail");
-    assert_eq!(error.code(), expected);
-}
-
-fn new_kernel(vm_id: &str) -> KernelVm<MemoryFileSystem> {
-    let mut config = KernelVmConfig::new(vm_id);
-    config.permissions = Permissions::allow_all();
-    KernelVm::new(MemoryFileSystem::new(), config)
-}
-
-#[test]
-fn virtual_processes_appear_in_process_listings_and_wait_like_children() {
-    let mut kernel = new_kernel("vm-virtual-process-tree");
-
-    let parent = kernel
-        .create_virtual_process(
-            "tool-dispatch",
-            "tool",
-            "agentos-toolkit",
-            vec![String::from("parent")],
-            VirtualProcessOptions::default(),
-        )
-        .expect("create virtual parent");
-    let child = kernel
-        .create_virtual_process(
-            "tool-dispatch",
-            "tool",
-            "agentos-toolkit",
-            vec![String::from("child")],
-            VirtualProcessOptions {
-                parent_pid: Some(parent.pid()),
-                ..VirtualProcessOptions::default()
-            },
-        )
-        .expect("create virtual child");
-
-    let processes = kernel.list_processes();
-    assert_eq!(processes.get(&parent.pid()).expect("parent info").ppid, 0);
-    let child_info = processes.get(&child.pid()).expect("child info");
-    assert_eq!(child_info.ppid, parent.pid());
-    assert_eq!(child_info.driver, "tool");
-    assert_eq!(child_info.command, "agentos-toolkit");
-
-    kernel
-        .exit_process("tool-dispatch", child.pid(), 23)
-        .expect("exit virtual child");
-    let waited = kernel
-        .waitpid_with_options(
-            "tool-dispatch",
-            parent.pid(),
-            child.pid() as i32,
-            WaitPidFlags::empty(),
-        )
-        .expect("wait child event")
-        .expect("child exit event");
-    assert_eq!(waited.pid, child.pid());
-    assert_eq!(waited.status, 23);
-    assert_eq!(waited.event, WaitPidEvent::Exited);
-    assert!(
-        !kernel.list_processes().contains_key(&child.pid()),
-        "waited child should be reaped"
-    );
-
-    kernel
-        .exit_process("tool-dispatch", parent.pid(), 0)
-        .expect("exit virtual parent");
-    assert_eq!(
-        kernel.waitpid(parent.pid()).expect("wait parent"),
-        secure_exec_kernel::kernel::WaitPidResult {
-            pid: parent.pid(),
-            status: 0,
-        }
-    );
-}
-
-#[test]
-fn virtual_process_stdio_uses_standard_fd_helpers_and_owner_checks() {
-    let mut kernel = new_kernel("vm-virtual-process-stdio");
-    let process = kernel
-        .create_virtual_process(
-            "tool-dispatch",
-            "tool",
-            "agentos-toolkit",
-            vec![String::from("echo")],
-            VirtualProcessOptions::default(),
-        )
-        .expect("create virtual process");
-
-    let (stdin_read_fd, stdin_write_fd) = kernel
-        .open_pipe("tool-dispatch", process.pid())
-        .expect("open stdin pipe");
-    kernel
-        .fd_dup2("tool-dispatch", process.pid(), stdin_read_fd, 0)
-        .expect("wire stdin pipe");
-    kernel
-        .fd_write("tool-dispatch", process.pid(), stdin_write_fd, b"input")
-        .expect("write stdin payload");
-    assert_eq!(
-        kernel
-            .read_process_stdin(
-                "tool-dispatch",
-                process.pid(),
-                32,
-                Some(Duration::from_millis(5))
-            )
-            .expect("read virtual stdin")
-            .expect("stdin bytes"),
-        b"input".to_vec()
-    );
-
-    let (stdout_read_fd, stdout_write_fd) = kernel
-        .open_pipe("tool-dispatch", process.pid())
-        .expect("open stdout pipe");
-    kernel
-        .fd_dup2("tool-dispatch", process.pid(), stdout_write_fd, 1)
-        .expect("wire stdout pipe");
-    kernel
-        .write_process_stdout("tool-dispatch", process.pid(), b"stdout-data")
-        .expect("write virtual stdout");
-    assert_eq!(
-        kernel
-            .fd_read("tool-dispatch", process.pid(), stdout_read_fd, 64)
-            .expect("read stdout pipe"),
-        b"stdout-data".to_vec()
-    );
-
-    let (stderr_read_fd, stderr_write_fd) = kernel
-        .open_pipe("tool-dispatch", process.pid())
-        .expect("open stderr pipe");
-    kernel
-        .fd_dup2("tool-dispatch", process.pid(), stderr_write_fd, 2)
-        .expect("wire stderr pipe");
-    kernel
-        .write_process_stderr("tool-dispatch", process.pid(), b"stderr-data")
-        .expect("write virtual stderr");
-    assert_eq!(
-        kernel
-            .fd_read("tool-dispatch", process.pid(), stderr_read_fd, 64)
-            .expect("read stderr pipe"),
-        b"stderr-data".to_vec()
-    );
-
-    assert_kernel_error_code(
-        kernel.write_process_stdout("other-driver", process.pid(), b"denied"),
-        "EPERM",
-    );
-
-    kernel
-        .exit_process("tool-dispatch", process.pid(), 9)
-        .expect("exit virtual process");
-    assert_eq!(
-        kernel.waitpid(process.pid()).expect("wait virtual process"),
-        secure_exec_kernel::kernel::WaitPidResult {
-            pid: process.pid(),
-            status: 9,
-        }
-    );
-}
-
-#[test]
-fn virtual_process_exit_reclaims_owned_sockets() {
-    let mut kernel = new_kernel("vm-virtual-process-socket-cleanup");
-    let process = kernel
-        .create_virtual_process(
-            "tool-dispatch",
-            "tool",
-            "agentos-toolkit",
-            Vec::new(),
-            VirtualProcessOptions::default(),
-        )
-        .expect("create virtual process");
-    let socket = kernel
-        .socket_create("tool-dispatch", process.pid(), SocketSpec::tcp())
-        .expect("create virtual-process socket");
-    kernel
-        .socket_bind_inet(
-            "tool-dispatch",
-            process.pid(),
-            socket,
-            InetSocketAddress::new("127.0.0.1", 43107),
-        )
-        .expect("bind virtual-process socket");
-    kernel
-        .socket_listen("tool-dispatch", process.pid(), socket, 1)
-        .expect("listen on virtual-process socket");
-
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.sockets, 1);
-    assert_eq!(snapshot.socket_listeners, 1);
-
-    kernel
-        .exit_process("tool-dispatch", process.pid(), 0)
-        .expect("exit virtual process");
-
-    assert!(kernel.socket_get(socket).is_none());
-    let snapshot = kernel.resource_snapshot();
-    assert_eq!(snapshot.sockets, 0);
-    assert_eq!(snapshot.socket_listeners, 0);
-
-    let replacement = kernel
-        .create_virtual_process(
-            "tool-dispatch",
-            "tool",
-            "agentos-toolkit",
-            Vec::new(),
-            VirtualProcessOptions::default(),
-        )
-        .expect("create replacement virtual process");
-    let replacement_socket = kernel
-        .socket_create("tool-dispatch", replacement.pid(), SocketSpec::tcp())
-        .expect("create replacement socket");
-    kernel
-        .socket_bind_inet(
-            "tool-dispatch",
-            replacement.pid(),
-            replacement_socket,
-            InetSocketAddress::new("127.0.0.1", 43107),
-        )
-        .expect("rebind address after virtual process exit cleanup");
-
-    assert_eq!(
-        kernel.waitpid(process.pid()).expect("wait virtual process"),
-        secure_exec_kernel::kernel::WaitPidResult {
-            pid: process.pid(),
-            status: 0,
-        }
-    );
-}
diff --git a/crates/native-baseline/Cargo.toml b/crates/native-baseline/Cargo.toml
deleted file mode 100644
index a28bd4e5b..000000000
--- a/crates/native-baseline/Cargo.toml
+++ /dev/null
@@ -1,16 +0,0 @@
-[package]
-name = "native-baseline"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-publish = false
-
-# Native floor for the differential perf harness. std-only on purpose: this is the
-# glibc fork/posix_spawn + execve baseline that the agent-os "emulation tax" divides
-# against. No secure-exec deps — it must measure the host, not the emulator.
-
-[[bin]]
-name = "native-baseline"
-path = "src/main.rs"
-
-[dependencies]
diff --git a/crates/native-baseline/README.md b/crates/native-baseline/README.md
deleted file mode 100644
index e06b6d67f..000000000
--- a/crates/native-baseline/README.md
+++ /dev/null
@@ -1,17 +0,0 @@
-# native-baseline
-
-Native floor binary for the differential benchmark matrix.
-
-Build the host lane:
-
-```sh
-cargo build --release -p native-baseline
-```
-
-Build the WASI lane used by the VM WASM executor:
-
-```sh
-cargo build --release --target wasm32-wasip1 -p native-baseline
-```
-
-The wasm artifact is written to `target/wasm32-wasip1/release/native-baseline.wasm`.
diff --git a/crates/native-baseline/src/main.rs b/crates/native-baseline/src/main.rs
deleted file mode 100644
index a6af9a665..000000000
--- a/crates/native-baseline/src/main.rs
+++ /dev/null
@@ -1,1018 +0,0 @@
-//! Native floor for the differential perf harness.
-//!
-//! Runs one logical op many times, timing each with a monotonic clock, and emits
-//! the raw per-iteration sample array (nanoseconds) as JSON to stdout. The TypeScript
-//! harness reduces these samples with the SAME `stats()` it applies to the node and
-//! guest layers, so the percentile math is identical across all three layers and the
-//! "emulation tax" ratio is honest.
-//!
-//! Ops (held byte-identical to the node + guest layers):
-//!   spawn_exit    -> /bin/sh -c 'exit 0'      (fork/posix_spawn + execve + reap)
-//!   exec_capture  -> /bin/sh -c 'printf hi'   (same, plus stdout capture)
-//!   fs_stat       -> stat a small host file
-//!   fs_write      -> overwrite a small host file
-//!   fs_read       -> read a 64 KiB host file
-//!   dns_lookup    -> resolve localhost
-//!   tcp_connect   -> localhost TCP connect+close
-//!   tcp_echo      -> localhost TCP connect+echo
-//!   pipe_echo     -> shell pipe echo through cat
-//!   cpu_loop      -> bounded integer loop
-//!   alloc_free    -> allocate/drop a 64 KiB Vec
-//!
-//! Usage: native-baseline --op spawn_exit|exec_capture --iters N --warmup W
-
-use std::fs::File;
-use std::io::{Read, Write};
-#[cfg(not(target_family = "wasm"))]
-use std::net::{TcpListener, TcpStream, ToSocketAddrs, UdpSocket};
-#[cfg(all(unix, not(target_family = "wasm")))]
-use std::os::unix::net::{UnixListener, UnixStream};
-use std::path::Path;
-#[cfg(not(target_family = "wasm"))]
-use std::process::{Command, Stdio};
-#[cfg(not(target_family = "wasm"))]
-use std::thread;
-#[cfg(target_family = "wasm")]
-use std::time::SystemTime;
-use std::time::{Duration, Instant};
-
-#[derive(Clone, Copy)]
-enum Op {
-    SpawnExit,
-    ExecCapture,
-    NodeStdoutDiscard2b,
-    NodeStdoutCapture2b,
-    NodeStdoutListenerOnly2b,
-    NodeExit,
-    NodeFanout,
-    NodeReapStorm,
-    NodeStdinRoundtrip,
-    PipeChain,
-    FsStat,
-    FsStatX32,
-    FsWrite,
-    FsRead,
-    StreamCopy,
-    FsOpenClose,
-    FsMkdirRmdir,
-    FsRename,
-    FsReaddir,
-    FsFsync,
-    DnsLookup,
-    DnsLookupX2,
-    DnsConcurrent,
-    TcpConnect,
-    TcpEcho,
-    UnixConnect,
-    UnixEcho,
-    HttpLoopbackGet,
-    TcpConcurrent,
-    TcpThroughput,
-    TcpTinyWrites,
-    UdpEcho,
-    PipeEcho,
-    PipeThroughput,
-    PipeBackpressure,
-    StdioWriteSync,
-    CpuLoop,
-    SleepTimer,
-    YieldLoop,
-    AllocFree,
-}
-
-struct BenchConfig {
-    size_bytes: Option<usize>,
-    entry_count: Option<usize>,
-    timer_count: Option<usize>,
-    sleep_ns: Option<u64>,
-    chunk_count: Option<usize>,
-}
-
-const OP_NAMES: &[&str] = &[
-    "spawn_exit",
-    "exec_capture",
-    "node_stdout_discard_2b",
-    "node_stdout_capture_2b",
-    "node_stdout_listener_only_2b",
-    "node_exit",
-    "node_fanout",
-    "node_reap_storm",
-    "node_stdin_roundtrip",
-    "pipe_chain",
-    "fs_stat",
-    "fs_stat_x32",
-    "fs_write",
-    "fs_read",
-    "stream_copy",
-    "fs_open_close",
-    "fs_mkdir_rmdir",
-    "fs_rename",
-    "fs_readdir",
-    "fs_fsync",
-    "dns_lookup",
-    "dns_lookup_x2",
-    "dns_concurrent",
-    "tcp_connect",
-    "tcp_echo",
-    "unix_connect",
-    "unix_echo",
-    "http_loopback_get",
-    "tcp_concurrent",
-    "tcp_throughput",
-    "tcp_tiny_writes",
-    "udp_echo",
-    "pipe_echo",
-    "pipe_throughput",
-    "pipe_backpressure",
-    "stdio_write_sync",
-    "cpu_loop",
-    "sleep_timer",
-    "yield_loop",
-    "alloc_free",
-];
-
-impl Op {
-    #[cfg(target_family = "wasm")]
-    fn supported_on_wasm(self) -> bool {
-        matches!(
-            self,
-            Op::FsStat
-                | Op::FsStatX32
-                | Op::FsWrite
-                | Op::FsRead
-                | Op::StreamCopy
-                | Op::FsOpenClose
-                | Op::FsMkdirRmdir
-                | Op::FsRename
-                | Op::FsReaddir
-                | Op::FsFsync
-                | Op::CpuLoop
-                | Op::SleepTimer
-                | Op::YieldLoop
-                | Op::AllocFree
-        )
-    }
-}
-
-fn parse_op(name: &str) -> Option<Op> {
-    Some(match name {
-        "spawn_exit" => Op::SpawnExit,
-        "exec_capture" => Op::ExecCapture,
-        "node_stdout_discard_2b" => Op::NodeStdoutDiscard2b,
-        "node_stdout_capture_2b" => Op::NodeStdoutCapture2b,
-        "node_stdout_listener_only_2b" => Op::NodeStdoutListenerOnly2b,
-        "node_exit" => Op::NodeExit,
-        "node_fanout" => Op::NodeFanout,
-        "node_reap_storm" => Op::NodeReapStorm,
-        "node_stdin_roundtrip" => Op::NodeStdinRoundtrip,
-        "pipe_chain" => Op::PipeChain,
-        "fs_stat" => Op::FsStat,
-        "fs_stat_x32" => Op::FsStatX32,
-        "fs_write" => Op::FsWrite,
-        "fs_read" => Op::FsRead,
-        "stream_copy" => Op::StreamCopy,
-        "fs_open_close" => Op::FsOpenClose,
-        "fs_mkdir_rmdir" => Op::FsMkdirRmdir,
-        "fs_rename" => Op::FsRename,
-        "fs_readdir" => Op::FsReaddir,
-        "fs_fsync" => Op::FsFsync,
-        "dns_lookup" => Op::DnsLookup,
-        "dns_lookup_x2" => Op::DnsLookupX2,
-        "dns_concurrent" => Op::DnsConcurrent,
-        "tcp_connect" => Op::TcpConnect,
-        "tcp_echo" => Op::TcpEcho,
-        "unix_connect" => Op::UnixConnect,
-        "unix_echo" => Op::UnixEcho,
-        "http_loopback_get" => Op::HttpLoopbackGet,
-        "tcp_concurrent" => Op::TcpConcurrent,
-        "tcp_throughput" => Op::TcpThroughput,
-        "tcp_tiny_writes" => Op::TcpTinyWrites,
-        "udp_echo" => Op::UdpEcho,
-        "pipe_echo" => Op::PipeEcho,
-        "pipe_throughput" => Op::PipeThroughput,
-        "pipe_backpressure" => Op::PipeBackpressure,
-        "stdio_write_sync" => Op::StdioWriteSync,
-        "cpu_loop" => Op::CpuLoop,
-        "sleep_timer" => Op::SleepTimer,
-        "yield_loop" => Op::YieldLoop,
-        "alloc_free" => Op::AllocFree,
-        _ => return None,
-    })
-}
-
-fn op_name(op: Op) -> &'static str {
-    match op {
-        Op::SpawnExit => "spawn_exit",
-        Op::ExecCapture => "exec_capture",
-        Op::NodeStdoutDiscard2b => "node_stdout_discard_2b",
-        Op::NodeStdoutCapture2b => "node_stdout_capture_2b",
-        Op::NodeStdoutListenerOnly2b => "node_stdout_listener_only_2b",
-        Op::NodeExit => "node_exit",
-        Op::NodeFanout => "node_fanout",
-        Op::NodeReapStorm => "node_reap_storm",
-        Op::NodeStdinRoundtrip => "node_stdin_roundtrip",
-        Op::PipeChain => "pipe_chain",
-        Op::FsStat => "fs_stat",
-        Op::FsStatX32 => "fs_stat_x32",
-        Op::FsWrite => "fs_write",
-        Op::FsRead => "fs_read",
-        Op::StreamCopy => "stream_copy",
-        Op::FsOpenClose => "fs_open_close",
-        Op::FsMkdirRmdir => "fs_mkdir_rmdir",
-        Op::FsRename => "fs_rename",
-        Op::FsReaddir => "fs_readdir",
-        Op::FsFsync => "fs_fsync",
-        Op::DnsLookup => "dns_lookup",
-        Op::DnsLookupX2 => "dns_lookup_x2",
-        Op::DnsConcurrent => "dns_concurrent",
-        Op::TcpConnect => "tcp_connect",
-        Op::TcpEcho => "tcp_echo",
-        Op::UnixConnect => "unix_connect",
-        Op::UnixEcho => "unix_echo",
-        Op::HttpLoopbackGet => "http_loopback_get",
-        Op::TcpConcurrent => "tcp_concurrent",
-        Op::TcpThroughput => "tcp_throughput",
-        Op::TcpTinyWrites => "tcp_tiny_writes",
-        Op::UdpEcho => "udp_echo",
-        Op::PipeEcho => "pipe_echo",
-        Op::PipeThroughput => "pipe_throughput",
-        Op::PipeBackpressure => "pipe_backpressure",
-        Op::StdioWriteSync => "stdio_write_sync",
-        Op::CpuLoop => "cpu_loop",
-        Op::SleepTimer => "sleep_timer",
-        Op::YieldLoop => "yield_loop",
-        Op::AllocFree => "alloc_free",
-    }
-}
-
-#[cfg(not(target_family = "wasm"))]
-type Timer = Instant;
-
-#[cfg(not(target_family = "wasm"))]
-fn timer_start() -> Timer {
-    Instant::now()
-}
-
-#[cfg(not(target_family = "wasm"))]
-fn elapsed_ns(timer: Timer) -> u128 {
-    timer.elapsed().as_nanos()
-}
-
-#[cfg(target_family = "wasm")]
-struct Timer {
-    instant: Option<Instant>,
-    system: SystemTime,
-}
-
-#[cfg(target_family = "wasm")]
-fn timer_start() -> Timer {
-    Timer {
-        instant: std::panic::catch_unwind(Instant::now).ok(),
-        system: SystemTime::now(),
-    }
-}
-
-#[cfg(target_family = "wasm")]
-fn elapsed_ns(timer: Timer) -> u128 {
-    if let Some(instant) = timer.instant {
-        if let Ok(elapsed) = std::panic::catch_unwind(|| instant.elapsed()) {
-            return elapsed.as_nanos();
-        }
-    }
-    timer.system.elapsed().map(|d| d.as_nanos()).unwrap_or(0)
-}
-
-fn run_once(op: Op, iter: usize, base_dir: &Path, config: &BenchConfig) {
-    match op {
-        #[cfg(not(target_family = "wasm"))]
-        Op::SpawnExit => {
-            let status = Command::new("/bin/sh")
-                .args(["-c", "exit 0"])
-                .status()
-                .expect("spawn /bin/sh failed");
-            assert!(status.success(), "expected exit 0, got {status:?}");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::ExecCapture => {
-            let out = Command::new("/bin/sh")
-                .args(["-c", "printf hi"])
-                .output()
-                .expect("spawn /bin/sh failed");
-            assert_eq!(out.stdout, b"hi", "unexpected stdout");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::NodeStdoutDiscard2b => {
-            let size_bytes = config.size_bytes.unwrap_or(2);
-            let script = format!("process.stdout.write(Buffer.alloc({size_bytes}, 55))");
-            let status = Command::new("node")
-                .arg("-e")
-                .arg(&script)
-                .stdout(Stdio::null())
-                .stderr(Stdio::null())
-                .status()
-                .expect("spawn node failed");
-            assert!(status.success(), "expected exit 0, got {status:?}");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::NodeStdoutCapture2b => {
-            let size_bytes = config.size_bytes.unwrap_or(2);
-            let script = format!("process.stdout.write(Buffer.alloc({size_bytes}, 55))");
-            let out = Command::new("node")
-                .arg("-e")
-                .arg(&script)
-                .output()
-                .expect("spawn node failed");
-            assert!(
-                out.status.success(),
-                "expected exit 0, got {:?}",
-                out.status
-            );
-            assert_eq!(out.stdout.len(), size_bytes, "unexpected stdout byte count");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::NodeStdoutListenerOnly2b => {
-            let size_bytes = config.size_bytes.unwrap_or(2);
-            let script = format!("process.stdout.write(Buffer.alloc({size_bytes}, 55))");
-            let mut child = Command::new("node")
-                .arg("-e")
-                .arg(&script)
-                .stdout(Stdio::piped())
-                .stderr(Stdio::null())
-                .spawn()
-                .expect("spawn node failed");
-            let mut stdout = child.stdout.take().expect("stdout pipe");
-            let mut bytes = Vec::new();
-            stdout.read_to_end(&mut bytes).expect("read stdout");
-            let status = child.wait().expect("wait node child");
-            assert!(status.success(), "expected exit 0, got {status:?}");
-            assert_eq!(bytes.len(), size_bytes, "unexpected stdout byte count");
-        }
-        // Real host node process that immediately exits. This is the apples-to-apples
-        // floor for the guest layer, where the same logical op spins a V8 isolate.
-        #[cfg(not(target_family = "wasm"))]
-        Op::NodeExit => {
-            let status = Command::new("node")
-                .args(["-e", "process.exit(0)"])
-                .status()
-                .expect("spawn node failed");
-            assert!(status.success(), "expected exit 0, got {status:?}");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::NodeFanout | Op::NodeReapStorm => {
-            let mut children = Vec::new();
-            for _ in 0..8 {
-                children.push(
-                    Command::new("node")
-                        .args(["-e", "process.exit(0)"])
-                        .spawn()
-                        .expect("spawn node failed"),
-                );
-            }
-            for mut child in children {
-                let status = child.wait().expect("wait node child");
-                assert!(status.success(), "expected exit 0, got {status:?}");
-            }
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::NodeStdinRoundtrip => {
-            let size_bytes = config.size_bytes.unwrap_or(4096);
-            let payload = vec![9_u8; size_bytes];
-            let mut child = Command::new("node")
-                .args([
-                    "-e",
-                    "process.stdin.on('data', (chunk) => process.stdout.write(chunk)); process.stdin.on('end', () => process.exit(0));",
-                ])
-                .stdin(Stdio::piped())
-                .stdout(Stdio::piped())
-                .stderr(Stdio::null())
-                .spawn()
-                .expect("spawn node failed");
-            child
-                .stdin
-                .take()
-                .expect("child stdin")
-                .write_all(&payload)
-                .expect("write child stdin");
-            let out = child.wait_with_output().expect("wait node child");
-            assert!(
-                out.status.success(),
-                "expected exit 0, got {:?}",
-                out.status
-            );
-            assert_eq!(out.stdout, payload, "stdin roundtrip mismatch");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::PipeChain => {
-            let out = Command::new("/bin/sh")
-                .args(["-c", "printf hello | cat | cat >/dev/null"])
-                .output()
-                .expect("run pipe chain");
-            assert!(out.status.success(), "pipe chain failed: {out:?}");
-        }
-        Op::FsStat => {
-            let path = base_dir.join("secure-exec-native-fs-stat.txt");
-            std::fs::write(&path, b"hi").expect("write stat fixture");
-            let meta = std::fs::metadata(&path).expect("stat fixture");
-            assert!(meta.len() >= 2);
-        }
-        Op::FsStatX32 => {
-            let path = base_dir.join("secure-exec-native-fs-stat-x32.txt");
-            if !path.exists() {
-                std::fs::write(&path, b"hi").expect("write stat fixture");
-            }
-            // Every lane must measure the SAME work (32 stats): under wasm the
-            // post-quota-fix batch runs faster than the guest clock granularity,
-            // so samples may read 0-1ms quantized — that is the truthful value;
-            // never batch one lane harder than the others.
-            let batches = config.chunk_count.unwrap_or(1);
-            for _ in 0..batches {
-                for _ in 0..32 {
-                    let meta = std::fs::metadata(&path).expect("stat fixture");
-                    assert!(meta.len() >= 2);
-                }
-            }
-        }
-        Op::FsWrite => {
-            let path = base_dir.join("secure-exec-native-fs-write.txt");
-            if let Some(size_bytes) = config.size_bytes {
-                std::fs::write(path, vec![(iter & 255) as u8; size_bytes]).expect("write fixture");
-            } else {
-                std::fs::write(path, format!("hello-{iter:08}")).expect("write fixture");
-            }
-        }
-        Op::FsRead => {
-            let size_bytes = config.size_bytes.unwrap_or(64 * 1024);
-            let path = base_dir.join("secure-exec-native-fs-read.bin");
-            let rewrite = std::fs::metadata(&path)
-                .map(|meta| meta.len() != size_bytes as u64)
-                .unwrap_or(true);
-            if rewrite {
-                std::fs::write(&path, vec![7_u8; size_bytes]).expect("write read fixture");
-            }
-            let data = std::fs::read(path).expect("read fixture");
-            assert_eq!(data.len(), size_bytes);
-        }
-        Op::StreamCopy => {
-            let size_bytes = config.size_bytes.unwrap_or(64 * 1024);
-            let src = base_dir.join(format!(
-                "secure-exec-native-stream-copy-src-{size_bytes}.bin"
-            ));
-            let dst = base_dir.join(format!(
-                "secure-exec-native-stream-copy-dst-{size_bytes}-{iter}.bin"
-            ));
-            let rewrite = std::fs::metadata(&src)
-                .map(|meta| meta.len() != size_bytes as u64)
-                .unwrap_or(true);
-            if rewrite {
-                std::fs::write(&src, vec![7_u8; size_bytes]).expect("write stream source");
-            }
-            let mut input = File::open(&src).expect("open stream source");
-            let mut output = File::create(&dst).expect("create stream destination");
-            let mut copied = 0_usize;
-            let mut buf = vec![0_u8; 16 * 1024];
-            loop {
-                let n = input.read(&mut buf).expect("read stream source");
-                if n == 0 {
-                    break;
-                }
-                output
-                    .write_all(&buf[..n])
-                    .expect("write stream destination");
-                copied += n;
-            }
-            drop(output);
-            let meta = std::fs::metadata(&dst).expect("stat stream destination");
-            std::fs::remove_file(&dst).expect("remove stream destination");
-            assert_eq!(copied, size_bytes);
-            assert_eq!(meta.len(), size_bytes as u64);
-        }
-        Op::FsOpenClose => {
-            let path = base_dir.join("secure-exec-native-fs-open-close.txt");
-            std::fs::write(&path, b"hi").expect("write open fixture");
-            let file = File::open(path).expect("open fixture");
-            drop(file);
-        }
-        Op::FsMkdirRmdir => {
-            let path = base_dir.join(format!("secure-exec-native-dir-{iter}"));
-            std::fs::create_dir(&path).expect("create dir");
-            std::fs::remove_dir(&path).expect("remove dir");
-        }
-        Op::FsRename => {
-            let from = base_dir.join(format!("secure-exec-native-rename-{iter}.a"));
-            let to = base_dir.join(format!("secure-exec-native-rename-{iter}.b"));
-            std::fs::write(&from, b"hi").expect("write rename fixture");
-            std::fs::rename(&from, &to).expect("rename fixture");
-            std::fs::remove_file(&to).expect("remove rename fixture");
-        }
-        Op::FsReaddir => {
-            let entry_count = config.entry_count.unwrap_or(32);
-            let dir = base_dir.join("secure-exec-native-readdir");
-            std::fs::create_dir_all(&dir).expect("create readdir dir");
-            let marker = dir.join(format!(".fixture-ready-{entry_count}"));
-            if !marker.exists() {
-                for i in 0..entry_count {
-                    let path = dir.join(format!("{i}.txt"));
-                    if !path.exists() {
-                        std::fs::write(&path, b"hi").expect("write readdir fixture");
-                    }
-                }
-                std::fs::write(&marker, b"ready").expect("write readdir fixture marker");
-            }
-            let count = std::fs::read_dir(dir).expect("read dir").count();
-            assert!(count > entry_count);
-        }
-        Op::FsFsync => {
-            let path = base_dir.join("secure-exec-native-fsync.txt");
-            let mut file = File::create(path).expect("create fsync fixture");
-            file.write_all(b"hello").expect("write fsync fixture");
-            file.sync_all().expect("fsync fixture");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::DnsLookup => {
-            let addrs: Vec<_> = ("localhost", 80)
-                .to_socket_addrs()
-                .expect("resolve localhost")
-                .collect();
-            assert!(!addrs.is_empty());
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::DnsLookupX2 => {
-            for _ in 0..2 {
-                let addrs: Vec<_> = ("localhost", 80)
-                    .to_socket_addrs()
-                    .expect("resolve localhost")
-                    .collect();
-                assert!(!addrs.is_empty());
-            }
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::DnsConcurrent => {
-            let threads: Vec<_> = (0..4)
-                .map(|_| {
-                    thread::spawn(|| {
-                        let addrs: Vec<_> = ("localhost", 80)
-                            .to_socket_addrs()
-                            .expect("resolve localhost")
-                            .collect();
-                        assert!(!addrs.is_empty());
-                    })
-                })
-                .collect();
-            for handle in threads {
-                handle.join().expect("join resolver");
-            }
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::TcpConnect => {
-            let listener = TcpListener::bind("127.0.0.1:0").expect("bind tcp listener");
-            let addr = listener.local_addr().expect("listener addr");
-            let server = thread::spawn(move || {
-                let _ = listener.accept().expect("accept tcp connect");
-            });
-            let _stream = TcpStream::connect(addr).expect("connect tcp listener");
-            server.join().expect("join tcp server");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::TcpEcho => {
-            let payload = vec![7_u8; config.size_bytes.unwrap_or(5)];
-            let listener = TcpListener::bind("127.0.0.1:0").expect("bind tcp listener");
-            let addr = listener.local_addr().expect("listener addr");
-            let expected_len = payload.len();
-            let server = thread::spawn(move || {
-                let (mut stream, _) = listener.accept().expect("accept tcp echo");
-                let mut buf = vec![0_u8; expected_len];
-                stream.read_exact(&mut buf).expect("read tcp echo");
-                stream.write_all(&buf).expect("write tcp echo");
-            });
-            let mut stream = TcpStream::connect(addr).expect("connect tcp echo");
-            stream.write_all(&payload).expect("write client echo");
-            let mut buf = vec![0_u8; payload.len()];
-            stream.read_exact(&mut buf).expect("read client echo");
-            assert_eq!(buf, payload);
-            server.join().expect("join tcp server");
-        }
-        #[cfg(all(unix, not(target_family = "wasm")))]
-        Op::UnixConnect => {
-            let sock = base_dir.join(format!("secure-exec-native-unix-connect-{iter}.sock"));
-            let _ = std::fs::remove_file(&sock);
-            let listener = UnixListener::bind(&sock).expect("bind unix listener");
-            let server = thread::spawn(move || {
-                let (_stream, _) = listener.accept().expect("accept unix connect");
-            });
-            let stream = UnixStream::connect(&sock).expect("connect unix listener");
-            drop(stream);
-            server.join().expect("join unix server");
-            let _ = std::fs::remove_file(&sock);
-        }
-        #[cfg(all(unix, not(target_family = "wasm")))]
-        Op::UnixEcho => {
-            let payload = vec![7_u8; config.size_bytes.unwrap_or(16)];
-            let sock = base_dir.join(format!("secure-exec-native-unix-echo-{iter}.sock"));
-            let _ = std::fs::remove_file(&sock);
-            let listener = UnixListener::bind(&sock).expect("bind unix listener");
-            let expected_len = payload.len();
-            let server = thread::spawn(move || {
-                let (mut stream, _) = listener.accept().expect("accept unix echo");
-                let mut buf = vec![0_u8; expected_len];
-                stream.read_exact(&mut buf).expect("read unix echo");
-                stream.write_all(&buf).expect("write unix echo");
-            });
-            let mut stream = UnixStream::connect(&sock).expect("connect unix echo");
-            stream.write_all(&payload).expect("write client unix echo");
-            let mut buf = vec![0_u8; payload.len()];
-            stream.read_exact(&mut buf).expect("read client unix echo");
-            assert_eq!(buf, payload);
-            server.join().expect("join unix server");
-            let _ = std::fs::remove_file(&sock);
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::HttpLoopbackGet => {
-            let listener = TcpListener::bind("127.0.0.1:0").expect("bind http listener");
-            let addr = listener.local_addr().expect("listener addr");
-            let server = thread::spawn(move || {
-                let (mut stream, _) = listener.accept().expect("accept http");
-                let mut request = Vec::new();
-                let mut byte = [0_u8; 1];
-                while !request.ends_with(b"\r\n\r\n") {
-                    stream.read_exact(&mut byte).expect("read http request");
-                    request.push(byte[0]);
-                }
-                assert!(
-                    request.starts_with(b"GET / HTTP/1.1\r\n"),
-                    "unexpected HTTP request"
-                );
-                stream
-                    .write_all(
-                        b"HTTP/1.1 200 OK\r\nContent-Length: 2\r\nConnection: close\r\n\r\nok",
-                    )
-                    .expect("write http response");
-            });
-            let mut stream = TcpStream::connect(addr).expect("connect http listener");
-            stream
-                .write_all(b"GET / HTTP/1.1\r\nHost: 127.0.0.1\r\nConnection: close\r\n\r\n")
-                .expect("write http request");
-            let mut response = Vec::new();
-            stream
-                .read_to_end(&mut response)
-                .expect("read http response");
-            assert!(
-                response.ends_with(b"\r\n\r\nok"),
-                "unexpected HTTP response body"
-            );
-            server.join().expect("join http server");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::TcpConcurrent => {
-            let listener = TcpListener::bind("127.0.0.1:0").expect("bind tcp listener");
-            let addr = listener.local_addr().expect("listener addr");
-            let server = thread::spawn(move || {
-                for _ in 0..4 {
-                    let (mut stream, _) = listener.accept().expect("accept tcp connect");
-                    let mut buf = [0_u8; 1];
-                    let _ = stream.read(&mut buf);
-                }
-            });
-            let mut clients = Vec::new();
-            for _ in 0..4 {
-                clients.push(TcpStream::connect(addr).expect("connect tcp listener"));
-            }
-            for mut client in clients {
-                client.write_all(b"x").expect("write connect byte");
-            }
-            server.join().expect("join tcp server");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::TcpThroughput => {
-            let payload = vec![7_u8; config.size_bytes.unwrap_or(64 * 1024)];
-            let listener = TcpListener::bind("127.0.0.1:0").expect("bind tcp listener");
-            let addr = listener.local_addr().expect("listener addr");
-            let server = thread::spawn(move || {
-                let (mut stream, _) = listener.accept().expect("accept tcp throughput");
-                let mut buf = vec![0_u8; 64 * 1024];
-                stream.read_exact(&mut buf).expect("read tcp throughput");
-                stream.write_all(&buf).expect("write tcp throughput");
-            });
-            let mut stream = TcpStream::connect(addr).expect("connect tcp throughput");
-            stream.write_all(&payload).expect("write client throughput");
-            let mut out = vec![0_u8; payload.len()];
-            stream.read_exact(&mut out).expect("read client throughput");
-            assert_eq!(out.len(), payload.len());
-            server.join().expect("join tcp server");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::TcpTinyWrites => {
-            let listener = TcpListener::bind("127.0.0.1:0").expect("bind tcp listener");
-            let addr = listener.local_addr().expect("listener addr");
-            let server = thread::spawn(move || {
-                let (mut stream, _) = listener.accept().expect("accept tcp tiny");
-                let mut buf = [0_u8; 16];
-                stream.read_exact(&mut buf).expect("read tcp tiny");
-                stream.write_all(&buf).expect("write tcp tiny");
-            });
-            let mut stream = TcpStream::connect(addr).expect("connect tcp tiny");
-            for _ in 0..16 {
-                stream.write_all(b"x").expect("write tiny byte");
-            }
-            let mut out = [0_u8; 16];
-            stream.read_exact(&mut out).expect("read tiny echo");
-            server.join().expect("join tcp server");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::UdpEcho => {
-            let payload = vec![7_u8; config.size_bytes.unwrap_or(5)];
-            let server = UdpSocket::bind("127.0.0.1:0").expect("bind udp server");
-            let addr = server.local_addr().expect("udp addr");
-            let expected_len = payload.len();
-            let handle = thread::spawn(move || {
-                let mut buf = vec![0_u8; expected_len];
-                let (n, peer) = server.recv_from(&mut buf).expect("recv udp");
-                server.send_to(&buf[..n], peer).expect("send udp");
-            });
-            let client = UdpSocket::bind("127.0.0.1:0").expect("bind udp client");
-            client.send_to(&payload, addr).expect("send udp client");
-            let mut buf = vec![0_u8; payload.len()];
-            let (n, _) = client.recv_from(&mut buf).expect("recv udp client");
-            assert_eq!(n, payload.len());
-            assert_eq!(buf, payload);
-            handle.join().expect("join udp server");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::PipeEcho => {
-            let out = Command::new("/bin/sh")
-                .args(["-c", "printf hello | cat >/dev/null"])
-                .output()
-                .expect("run pipe echo");
-            assert!(out.status.success(), "pipe command failed: {out:?}");
-        }
-        #[cfg(not(target_family = "wasm"))]
-        Op::PipeThroughput | Op::PipeBackpressure => {
-            #[cfg(unix)]
-            {
-                let (mut left, mut right) = UnixStream::pair().expect("unix stream pair");
-                let payload = vec![9_u8; config.size_bytes.unwrap_or(64 * 1024)];
-                let expected_len = payload.len();
-                let reader = thread::spawn(move || {
-                    let mut out = vec![0_u8; expected_len];
-                    right.read_exact(&mut out).expect("pipe read");
-                    out
-                });
-                left.write_all(&payload).expect("pipe write");
-                let out = reader.join().expect("join pipe reader");
-                assert_eq!(out.len(), payload.len());
-            }
-            #[cfg(not(unix))]
-            {
-                let out = Command::new("/bin/sh")
-                    .args(["-c", "printf hello | cat >/dev/null"])
-                    .output()
-                    .expect("run pipe fallback");
-                assert!(out.status.success(), "pipe fallback failed: {out:?}");
-            }
-        }
-        Op::StdioWriteSync => {
-            let size_bytes = config.size_bytes.unwrap_or(64 * 1024);
-            let chunk_count = config.chunk_count.unwrap_or(8);
-            let payload = vec![7_u8; size_bytes];
-            #[cfg(not(target_family = "wasm"))]
-            let mut sink: Box<dyn Write> = Box::new(
-                std::fs::OpenOptions::new()
-                    .write(true)
-                    .open("/dev/null")
-                    .expect("open /dev/null"),
-            );
-            #[cfg(target_family = "wasm")]
-            let mut sink: Box<dyn Write> = Box::new(std::io::sink());
-            for _ in 0..chunk_count {
-                sink.write_all(&payload).expect("write stdio payload");
-            }
-            sink.flush().expect("flush stdio payload");
-        }
-        Op::CpuLoop => {
-            let mut acc = 0_u64;
-            for i in 0..2_000_000_u64 {
-                acc = acc.wrapping_add(i ^ (acc.rotate_left(7)));
-            }
-            std::hint::black_box(acc);
-        }
-        Op::SleepTimer => {
-            let count = config.timer_count.unwrap_or(50);
-            let sleep_ns = config.sleep_ns.unwrap_or(1_000_000);
-            let duration = Duration::from_nanos(sleep_ns);
-            for _ in 0..count {
-                std::thread::sleep(duration);
-            }
-        }
-        Op::YieldLoop => {
-            let count = config.timer_count.unwrap_or(1000);
-            for _ in 0..count {
-                // This is the closest native analogue to setImmediate cadence: it
-                // yields scheduler turn-taking, but it does not model JS task queues.
-                std::thread::yield_now();
-            }
-        }
-        Op::AllocFree => {
-            let mut data = vec![0_u8; 4 * 1024 * 1024];
-            for (i, byte) in data.iter_mut().enumerate() {
-                *byte = (i % 251) as u8;
-            }
-            std::hint::black_box(data);
-        }
-        #[cfg(target_family = "wasm")]
-        _ => unreachable!("unsupported wasm op checked before execution"),
-    }
-}
-
-fn arg_value(args: &[String], flag: &str) -> Option<String> {
-    args.iter()
-        .position(|a| a == flag)
-        .and_then(|i| args.get(i + 1).cloned())
-}
-
-#[cfg(not(target_family = "wasm"))]
-fn run_node_exit_phases() -> Vec<(&'static str, u128)> {
-    let total_start = timer_start();
-    let spawn_start = timer_start();
-    let mut child = Command::new("node")
-        .args(["-e", "process.exit(0)"])
-        .spawn()
-        .expect("spawn node failed");
-    let spawn_ns = elapsed_ns(spawn_start);
-
-    let wait_start = timer_start();
-    let status = child.wait().expect("wait node child");
-    let wait_ns = elapsed_ns(wait_start);
-    assert!(status.success(), "expected exit 0, got {status:?}");
-
-    vec![
-        ("total", elapsed_ns(total_start)),
-        ("spawn", spawn_ns),
-        ("wait_reap", wait_ns),
-    ]
-}
-
-#[cfg(not(target_family = "wasm"))]
-fn run_node_fanout_phases() -> Vec<(&'static str, u128)> {
-    let total_start = timer_start();
-    let spawn_start = timer_start();
-    let mut children = Vec::new();
-    for _ in 0..8 {
-        children.push(
-            Command::new("node")
-                .args(["-e", "process.exit(0)"])
-                .spawn()
-                .expect("spawn node failed"),
-        );
-    }
-    let spawn_ns = elapsed_ns(spawn_start);
-
-    let wait_start = timer_start();
-    for mut child in children {
-        let status = child.wait().expect("wait node child");
-        assert!(status.success(), "expected exit 0, got {status:?}");
-    }
-    let wait_ns = elapsed_ns(wait_start);
-
-    vec![
-        ("total", elapsed_ns(total_start)),
-        ("spawn_batch", spawn_ns),
-        ("wait_reap_batch", wait_ns),
-    ]
-}
-
-#[cfg(not(target_family = "wasm"))]
-fn run_phases_once(op: Op) -> Option<Vec<(&'static str, u128)>> {
-    match op {
-        Op::NodeExit => Some(run_node_exit_phases()),
-        Op::NodeFanout | Op::NodeReapStorm => Some(run_node_fanout_phases()),
-        _ => None,
-    }
-}
-
-#[cfg(target_family = "wasm")]
-fn run_phases_once(_op: Op) -> Option<Vec<(&'static str, u128)>> {
-    None
-}
-
-fn write_phase_json(op_name: &str, samples: &[(String, Vec<u128>)]) {
-    let mut out = String::with_capacity(1024);
-    out.push_str("{\"layer\":\"native\",\"op\":\"");
-    out.push_str(op_name);
-    out.push_str("\",\"unit\":\"ns\",\"phases\":{");
-    for (phase_index, (phase, values)) in samples.iter().enumerate() {
-        if phase_index > 0 {
-            out.push(',');
-        }
-        out.push('"');
-        out.push_str(phase);
-        out.push_str("\":[");
-        for (sample_index, value) in values.iter().enumerate() {
-            if sample_index > 0 {
-                out.push(',');
-            }
-            out.push_str(&value.to_string());
-        }
-        out.push(']');
-    }
-    out.push_str("}}");
-    println!("{out}");
-}
-
-fn main() {
-    let args: Vec<String> = std::env::args().skip(1).collect();
-
-    if args.iter().any(|arg| arg == "--list-ops") {
-        for name in OP_NAMES {
-            println!("{name}");
-        }
-        return;
-    }
-
-    let op_arg = arg_value(&args, "--op");
-    let op = match op_arg.as_deref().and_then(parse_op) {
-        Some(op) => op,
-        None => {
-            eprintln!("unknown --op {:?}", op_arg.as_deref());
-            std::process::exit(2);
-        }
-    };
-    let op_name = op_name(op);
-    #[cfg(target_family = "wasm")]
-    if !op.supported_on_wasm() {
-        println!("{{\"unsupported\":true,\"op\":\"{op_name}\"}}");
-        return;
-    }
-    let iters: usize = arg_value(&args, "--iters")
-        .and_then(|s| s.parse().ok())
-        .unwrap_or(300);
-    let warmup: usize = arg_value(&args, "--warmup")
-        .and_then(|s| s.parse().ok())
-        .unwrap_or(30);
-    let base_dir = if let Some(path) = arg_value(&args, "--base-dir") {
-        let path = std::path::PathBuf::from(path);
-        if !path.exists() {
-            std::fs::create_dir_all(&path).expect("create base dir");
-        }
-        path
-    } else {
-        std::env::temp_dir()
-    };
-    let config = BenchConfig {
-        size_bytes: arg_value(&args, "--size-bytes").and_then(|s| s.parse().ok()),
-        entry_count: arg_value(&args, "--entry-count").and_then(|s| s.parse().ok()),
-        timer_count: arg_value(&args, "--timer-count").and_then(|s| s.parse().ok()),
-        sleep_ns: arg_value(&args, "--sleep-ns").and_then(|s| s.parse().ok()),
-        chunk_count: arg_value(&args, "--chunk-count").and_then(|s| s.parse().ok()),
-    };
-    let phases = args.iter().any(|arg| arg == "--phases");
-
-    let total = warmup + iters;
-    if phases {
-        let Some(first) = run_phases_once(op) else {
-            eprintln!("--phases is not supported for --op {op_name}");
-            std::process::exit(2);
-        };
-        let mut phase_samples = first
-            .into_iter()
-            .map(|(name, _)| (name.to_string(), Vec::with_capacity(iters)))
-            .collect::<Vec<_>>();
-        for i in 0..total {
-            let phase_values = run_phases_once(op).expect("checked phase support");
-            if i >= warmup {
-                for (phase_name, value) in phase_values {
-                    if let Some((_, values)) = phase_samples
-                        .iter_mut()
-                        .find(|(name, _)| name == phase_name)
-                    {
-                        values.push(value);
-                    }
-                }
-            }
-        }
-        write_phase_json(op_name, &phase_samples);
-        return;
-    }
-
-    let mut samples: Vec<u128> = Vec::with_capacity(iters);
-    for i in 0..total {
-        let t = timer_start();
-        run_once(op, i, &base_dir, &config);
-        let ns = elapsed_ns(t);
-        if i >= warmup {
-            samples.push(ns);
-        }
-    }
-
-    // Hand-built JSON (no serde dep): {"layer":"native","op":..,"unit":"ns","samples":[..]}
-    let mut out = String::with_capacity(samples.len() * 8 + 64);
-    out.push_str("{\"layer\":\"native\",\"op\":\"");
-    out.push_str(op_name);
-    out.push_str("\",\"unit\":\"ns\",\"samples\":[");
-    for (i, s) in samples.iter().enumerate() {
-        if i > 0 {
-            out.push(',');
-        }
-        out.push_str(&s.to_string());
-    }
-    out.push_str("]}");
-    println!("{out}");
-}
diff --git a/crates/secure-exec-client/AGENTS.md b/crates/secure-exec-client/AGENTS.md
deleted file mode 120000
index 681311eb9..000000000
--- a/crates/secure-exec-client/AGENTS.md
+++ /dev/null
@@ -1 +0,0 @@
-CLAUDE.md
\ No newline at end of file
diff --git a/crates/secure-exec-client/CLAUDE.md b/crates/secure-exec-client/CLAUDE.md
deleted file mode 100644
index c2e1c0e6d..000000000
--- a/crates/secure-exec-client/CLAUDE.md
+++ /dev/null
@@ -1,7 +0,0 @@
-See `../CLAUDE.md` for crate-wide runtime and testing rules.
-
-## Local Patterns
-
-- Keep this crate Agent OS-agnostic: no `agentos-protocol`, `agentos-client`, `agentos-sidecar`, ACP, agents, sessions, or toolkit semantics.
-- The generic transport resolves `SECURE_EXEC_SIDECAR_BIN` / `secure-exec-sidecar`; product wrappers such as Agent OS must resolve their own wrapper binary and pass it explicitly.
-- Expose raw secure-exec wire types and transport primitives only; ergonomic product facades belong in product-specific client crates.
diff --git a/crates/secure-exec-client/Cargo.toml b/crates/secure-exec-client/Cargo.toml
deleted file mode 100644
index ec0d1cf2e..000000000
--- a/crates/secure-exec-client/Cargo.toml
+++ /dev/null
@@ -1,17 +0,0 @@
-[package]
-name = "secure-exec-client"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-repository.workspace = true
-description = "Rust client transport for the Secure Exec native sidecar"
-
-[dependencies]
-secure-exec-sidecar-protocol = { workspace = true }
-
-futures = "0.3"
-parking_lot = "0.12"
-scc = "2"
-thiserror = "2"
-tokio = { version = "1", features = ["io-util", "macros", "process", "rt", "sync"] }
-tracing = "0.1"
diff --git a/crates/secure-exec-client/src/error.rs b/crates/secure-exec-client/src/error.rs
deleted file mode 100644
index ae061ae26..000000000
--- a/crates/secure-exec-client/src/error.rs
+++ /dev/null
@@ -1,16 +0,0 @@
-pub use secure_exec_sidecar_protocol::wire::ProtocolCodecError;
-
-/// Errors produced by the low-level sidecar transport.
-#[derive(thiserror::Error, Debug)]
-pub enum TransportError {
-    /// A framing or BARE codec failure on the sidecar transport.
-    #[error("transport error: {0}")]
-    Protocol(#[from] ProtocolCodecError),
-
-    /// A sidecar process, stdin/stdout, or connection failure with context.
-    #[error("sidecar error: {0}")]
-    Sidecar(String),
-}
-
-/// Convenience alias for sidecar transport results.
-pub type TransportResult<T> = std::result::Result<T, TransportError>;
diff --git a/crates/secure-exec-client/src/lib.rs b/crates/secure-exec-client/src/lib.rs
deleted file mode 100644
index 4da4ab71f..000000000
--- a/crates/secure-exec-client/src/lib.rs
+++ /dev/null
@@ -1,14 +0,0 @@
-#![forbid(unsafe_code)]
-
-//! Low-level Rust client transport for the Secure Exec native sidecar.
-//!
-//! This crate owns the framed stdio transport and exposes the generated Secure Exec wire protocol.
-//! Higher level products layer their own authentication, extension payloads, and
-//! typed API surfaces on top of this transport.
-
-pub mod error;
-pub mod transport;
-pub mod wire;
-
-pub use error::{ProtocolCodecError, TransportError, TransportResult};
-pub use transport::{SidecarTransport, WireSidecarCallback};
diff --git a/crates/secure-exec-client/src/transport.rs b/crates/secure-exec-client/src/transport.rs
deleted file mode 100644
index d9e9da320..000000000
--- a/crates/secure-exec-client/src/transport.rs
+++ /dev/null
@@ -1,688 +0,0 @@
-//! `SidecarTransport`: spawns a native sidecar binary and speaks the existing framed
-//! BARE protocol over its stdio.
-//!
-//! This mirrors the TypeScript `Sidecar`. Generated wire payloads are the native
-//! transport path.
-//!
-//! Request-id direction is load-bearing: host-initiated `Request`/`Response` frames use positive ids
-//! allocated by this transport, while sidecar-initiated `SidecarRequest`/`SidecarResponse` callbacks
-//! echo the id allocated by the sidecar.
-
-use std::process::Stdio;
-use std::sync::atomic::{AtomicI64, AtomicUsize, Ordering};
-use std::sync::{Arc, Weak};
-
-use scc::HashMap as SccHashMap;
-use tokio::io::{AsyncReadExt, AsyncWrite, AsyncWriteExt};
-use tokio::process::{Child, ChildStdout, Command};
-use tokio::sync::{broadcast, mpsc, oneshot};
-
-use crate::wire::{self, WireFrameCodec};
-use crate::TransportError;
-
-/// Broadcast capacity for the structured/lifecycle/process event fan-out.
-const EVENT_CHANNEL_CAPACITY: usize = 4096;
-
-/// Maximum outbound frames buffered while the writer task drains to sidecar stdin.
-const REQUEST_FRAME_QUEUE_CAPACITY: usize = 4096;
-
-/// Maximum callback/control response frames buffered ahead of regular host requests.
-const CONTROL_FRAME_QUEUE_CAPACITY: usize = 1024;
-
-/// Maximum in-flight host-initiated sidecar requests per transport.
-const PENDING_REQUEST_LIMIT: usize = 4096;
-
-/// Env var that overrides the sidecar binary path. Defaults to `secure-exec-sidecar` on `PATH`.
-/// Product clients can pass an explicit binary path to [`SidecarTransport::spawn`].
-const SIDECAR_BIN_ENV: &str = "SECURE_EXEC_SIDECAR_BIN";
-
-/// A registered callback that answers a sidecar-initiated request using generated wire types.
-pub type WireSidecarCallback = Arc<
-    dyn Fn(
-            wire::SidecarRequestPayload,
-            wire::OwnershipScope,
-        ) -> futures::future::BoxFuture<
-            'static,
-            Result<wire::SidecarResponsePayload, TransportError>,
-        > + Send
-        + Sync,
->;
-
-/// Owns the spawned sidecar child, the framed BARE stdio I/O tasks, the pending-response map, the
-/// event fan-out, and the callback dispatch table.
-pub struct SidecarTransport {
-    /// The spawned sidecar process (stdout/stdin taken by the I/O tasks; kept for kill on drop).
-    child: parking_lot::Mutex<Option<Child>>,
-    /// Pending host-initiated requests, keyed by positive `RequestId`.
-    pending: SccHashMap<wire::RequestId, oneshot::Sender<wire::ResponsePayload>>,
-    pending_request_lock: parking_lot::Mutex<()>,
-    /// Host request-id counter (positive, starts at 1).
-    request_counter: AtomicI64,
-    /// Negotiated max frame size.
-    max_frame_bytes: AtomicUsize,
-    /// Structured-event fan-out for `Event` frames.
-    event_tx: broadcast::Sender<(wire::OwnershipScope, wire::EventPayload)>,
-    /// Registered host callbacks for `SidecarRequest` frames.
-    callbacks: SccHashMap<&'static str, WireSidecarCallback>,
-    /// Outbound host request frames drained by the writer task into the child's stdin.
-    request_writer_tx: mpsc::Sender<Vec<u8>>,
-    /// Outbound callback/control response frames. The writer drains this before regular requests.
-    control_writer_tx: mpsc::Sender<Vec<u8>>,
-}
-
-impl SidecarTransport {
-    /// Spawn the native sidecar binary and start the stdio I/O tasks.
-    ///
-    /// Does NOT run the handshake. Product clients drive Authenticate and any follow-up setup using
-    /// [`request_wire`](Self::request_wire) once the transport is live.
-    pub async fn spawn(binary_path: Option<String>) -> Result<Arc<Self>, TransportError> {
-        let bin = resolve_sidecar_binary_path(binary_path);
-        let mut child = Command::new(&bin)
-            .stdin(Stdio::piped())
-            .stdout(Stdio::piped())
-            .stderr(Stdio::inherit())
-            .kill_on_drop(true)
-            .spawn()
-            .map_err(|error| {
-                TransportError::Sidecar(format!("failed to spawn sidecar '{bin}': {error}"))
-            })?;
-
-        let stdin = child
-            .stdin
-            .take()
-            .ok_or_else(|| TransportError::Sidecar("sidecar stdin was not piped".to_string()))?;
-        let stdout = child
-            .stdout
-            .take()
-            .ok_or_else(|| TransportError::Sidecar("sidecar stdout was not piped".to_string()))?;
-
-        let (request_writer_tx, request_writer_rx) = mpsc::channel(REQUEST_FRAME_QUEUE_CAPACITY);
-        let (control_writer_tx, control_writer_rx) = mpsc::channel(CONTROL_FRAME_QUEUE_CAPACITY);
-        let (event_tx, _) = broadcast::channel(EVENT_CHANNEL_CAPACITY);
-
-        let transport = Arc::new(Self {
-            child: parking_lot::Mutex::new(Some(child)),
-            pending: SccHashMap::new(),
-            pending_request_lock: parking_lot::Mutex::new(()),
-            request_counter: AtomicI64::new(1),
-            max_frame_bytes: AtomicUsize::new(wire::DEFAULT_MAX_FRAME_BYTES),
-            event_tx,
-            callbacks: SccHashMap::new(),
-            request_writer_tx,
-            control_writer_tx,
-        });
-
-        tokio::spawn(run_writer(stdin, control_writer_rx, request_writer_rx));
-        tokio::spawn(run_reader(Arc::downgrade(&transport), stdout));
-
-        Ok(transport)
-    }
-
-    /// Allocate the next positive host request id.
-    pub fn next_request_id(&self) -> wire::RequestId {
-        self.request_counter.fetch_add(1, Ordering::SeqCst)
-    }
-
-    /// Issue a host request using generated wire protocol types and await a generated response.
-    pub async fn request_wire(
-        &self,
-        ownership: wire::OwnershipScope,
-        payload: wire::RequestPayload,
-    ) -> Result<wire::ResponsePayload, TransportError> {
-        self.request_wire_with_frame_limit(ownership, payload, None)
-            .await
-    }
-
-    /// Issue a host request using generated wire protocol types with a caller-specific frame limit.
-    pub async fn request_wire_bounded(
-        &self,
-        ownership: wire::OwnershipScope,
-        payload: wire::RequestPayload,
-        max_frame_bytes: usize,
-    ) -> Result<wire::ResponsePayload, TransportError> {
-        self.request_wire_with_frame_limit(ownership, payload, Some(max_frame_bytes))
-            .await
-    }
-
-    async fn request_wire_with_frame_limit(
-        &self,
-        ownership: wire::OwnershipScope,
-        payload: wire::RequestPayload,
-        max_frame_bytes: Option<usize>,
-    ) -> Result<wire::ResponsePayload, TransportError> {
-        let request_id = self.next_request_id();
-        let frame = wire::ProtocolFrame::RequestFrame(wire::RequestFrame {
-            schema: wire::protocol_schema(),
-            request_id,
-            ownership,
-            payload,
-        });
-        let bytes = self.encode_wire_frame(&frame, max_frame_bytes)?;
-
-        let (tx, rx) = oneshot::channel();
-        self.register_pending_request(request_id, tx)?;
-        let _pending_guard = PendingRequestGuard::new(self, request_id);
-
-        if self.request_writer_tx.send(bytes).await.is_err() {
-            self.pending.remove(&request_id);
-            return Err(TransportError::Sidecar(
-                "sidecar transport closed".to_string(),
-            ));
-        }
-
-        rx.await
-            .map_err(|_| TransportError::Sidecar("sidecar transport disconnected".to_string()))
-    }
-
-    /// Subscribe to structured/lifecycle/process events using generated wire protocol types.
-    pub fn subscribe_wire_events(
-        &self,
-    ) -> broadcast::Receiver<(wire::OwnershipScope, wire::EventPayload)> {
-        self.event_tx.subscribe()
-    }
-
-    /// Register a callback that answers a class of sidecar-initiated requests using generated wire
-    /// protocol types.
-    pub fn register_wire_callback(&self, key: &'static str, callback: WireSidecarCallback) {
-        let _ = self.callbacks.insert(key, callback);
-    }
-
-    /// Return the currently negotiated max frame size.
-    pub fn max_frame_bytes(&self) -> usize {
-        self.max_frame_bytes.load(Ordering::Relaxed)
-    }
-
-    /// Update the negotiated max frame size after authentication.
-    pub fn set_max_frame_bytes(&self, max_frame_bytes: usize) {
-        self.max_frame_bytes
-            .store(max_frame_bytes, Ordering::SeqCst);
-    }
-
-    /// Kill the child sidecar process if this transport still owns one.
-    pub fn kill_child(&self) {
-        if let Some(mut child) = self.child.lock().take() {
-            let _ = child.start_kill();
-        }
-    }
-
-    fn encode_wire_frame(
-        &self,
-        frame: &wire::ProtocolFrame,
-        max_frame_bytes: Option<usize>,
-    ) -> Result<Vec<u8>, TransportError> {
-        let transport_limit = self.max_frame_bytes.load(Ordering::Relaxed);
-        let max_frame_bytes = max_frame_bytes
-            .map(|limit| limit.min(transport_limit))
-            .unwrap_or(transport_limit);
-        let codec = WireFrameCodec::new(max_frame_bytes);
-        Ok(codec.encode(frame)?)
-    }
-
-    /// Route a decoded inbound frame. Host transports only legitimately receive `Response`, `Event`,
-    /// and `SidecarRequest` frames.
-    async fn handle_wire_frame(self: &Arc<Self>, frame: wire::ProtocolFrame) {
-        match frame {
-            wire::ProtocolFrame::ResponseFrame(response) => {
-                match self.pending.remove(&response.request_id) {
-                    Some((_, tx)) => {
-                        let _ = tx.send(response.payload);
-                    }
-                    None => {
-                        tracing::warn!(
-                            request_id = response.request_id,
-                            "response for unknown request id"
-                        )
-                    }
-                }
-            }
-            wire::ProtocolFrame::EventFrame(event) => {
-                let _ = self.event_tx.send((event.ownership, event.payload));
-            }
-            wire::ProtocolFrame::SidecarRequestFrame(request) => {
-                self.dispatch_sidecar_request(request).await
-            }
-            wire::ProtocolFrame::SidecarResponseFrame(_) | wire::ProtocolFrame::RequestFrame(_) => {
-                tracing::warn!("unexpected inbound frame on host transport")
-            }
-        }
-    }
-
-    /// Dispatch a sidecar-initiated request to its registered callback. The callback runs in a
-    /// spawned task so long-running host callbacks (tool execution, permission prompts) cannot stall
-    /// the reader loop, which must keep draining responses for any requests the callback itself
-    /// issues through this transport.
-    async fn dispatch_sidecar_request(self: &Arc<Self>, frame: wire::SidecarRequestFrame) {
-        let key = sidecar_request_key(&frame.payload);
-        let callback = self.callbacks.read(&key, |_, value| value.clone());
-        match callback {
-            Some(callback) => {
-                let transport = Arc::downgrade(self);
-                tokio::spawn(async move {
-                    match callback(frame.payload, frame.ownership.clone()).await {
-                        Ok(payload) => {
-                            let response = wire::ProtocolFrame::SidecarResponseFrame(
-                                wire::SidecarResponseFrame {
-                                    schema: wire::protocol_schema(),
-                                    request_id: frame.request_id,
-                                    ownership: frame.ownership,
-                                    payload,
-                                },
-                            );
-                            // If the transport is gone, the child is being killed; drop the reply.
-                            let Some(transport) = transport.upgrade() else {
-                                return;
-                            };
-                            if let Ok(bytes) = transport.encode_wire_frame(&response, None) {
-                                let _ = transport.control_writer_tx.send(bytes).await;
-                            }
-                        }
-                        Err(error) => tracing::warn!(?error, key, "sidecar callback failed"),
-                    }
-                });
-            }
-            None => tracing::warn!(key, "no callback registered for sidecar request"),
-        }
-    }
-
-    /// Reject every in-flight request after the transport disconnects.
-    fn fail_all_pending(&self) {
-        self.pending.clear();
-    }
-
-    fn register_pending_request(
-        &self,
-        request_id: wire::RequestId,
-        tx: oneshot::Sender<wire::ResponsePayload>,
-    ) -> Result<(), TransportError> {
-        let _guard = self.pending_request_lock.lock();
-        if pending_request_count(self) >= PENDING_REQUEST_LIMIT {
-            return Err(TransportError::Sidecar(format!(
-                "sidecar pending request limit exceeded: at most {PENDING_REQUEST_LIMIT} requests can be in flight"
-            )));
-        }
-        let _ = self.pending.insert(request_id, tx);
-        Ok(())
-    }
-}
-
-struct PendingRequestGuard<'a> {
-    transport: &'a SidecarTransport,
-    request_id: wire::RequestId,
-}
-
-impl<'a> PendingRequestGuard<'a> {
-    fn new(transport: &'a SidecarTransport, request_id: wire::RequestId) -> Self {
-        Self {
-            transport,
-            request_id,
-        }
-    }
-}
-
-impl Drop for PendingRequestGuard<'_> {
-    fn drop(&mut self) {
-        let _ = self.transport.pending.remove(&self.request_id);
-    }
-}
-
-fn pending_request_count(transport: &SidecarTransport) -> usize {
-    let mut count = 0;
-    transport.pending.scan(|_, _| {
-        count += 1;
-    });
-    count
-}
-
-/// Map a sidecar-request payload to the callback registry key.
-fn sidecar_request_key(payload: &wire::SidecarRequestPayload) -> &'static str {
-    match payload {
-        wire::SidecarRequestPayload::HostCallbackRequest(_) => "host_callback",
-        wire::SidecarRequestPayload::JsBridgeCallRequest(_) => "js_bridge_call",
-        wire::SidecarRequestPayload::ExtEnvelope(_) => "ext",
-    }
-}
-
-/// Drain outbound channels into the child's stdin. Control responses are preferred so a full request
-/// queue cannot starve sidecar-request replies.
-async fn run_writer<W>(
-    mut stdin: W,
-    mut control_rx: mpsc::Receiver<Vec<u8>>,
-    mut request_rx: mpsc::Receiver<Vec<u8>>,
-) where
-    W: AsyncWrite + Unpin,
-{
-    let mut prefer_control = true;
-    loop {
-        let (bytes, wrote_control) = if prefer_control {
-            tokio::select! {
-                biased;
-                bytes = control_rx.recv() => match bytes {
-                    Some(bytes) => (bytes, true),
-                    None => match request_rx.recv().await {
-                        Some(bytes) => (bytes, false),
-                        None => break,
-                    },
-                },
-                bytes = request_rx.recv() => match bytes {
-                    Some(bytes) => (bytes, false),
-                    None => match control_rx.recv().await {
-                        Some(bytes) => (bytes, true),
-                        None => break,
-                    },
-                },
-            }
-        } else {
-            tokio::select! {
-                biased;
-                bytes = request_rx.recv() => match bytes {
-                    Some(bytes) => (bytes, false),
-                    None => match control_rx.recv().await {
-                        Some(bytes) => (bytes, true),
-                        None => break,
-                    },
-                },
-                bytes = control_rx.recv() => match bytes {
-                    Some(bytes) => (bytes, true),
-                    None => match request_rx.recv().await {
-                        Some(bytes) => (bytes, false),
-                        None => break,
-                    },
-                },
-            }
-        };
-        if stdin.write_all(&bytes).await.is_err() {
-            break;
-        }
-        if stdin.flush().await.is_err() {
-            break;
-        }
-        prefer_control = !wrote_control;
-    }
-}
-
-/// Read length-prefixed BARE frames from the child's stdout and route them. Holds a `Weak` so the
-/// transport can drop (and `kill_on_drop` the child) independently; exits on EOF/read error or once
-/// the transport is gone.
-async fn run_reader(transport: Weak<SidecarTransport>, mut stdout: ChildStdout) {
-    loop {
-        let mut length_buf = [0u8; 4];
-        if stdout.read_exact(&mut length_buf).await.is_err() {
-            break;
-        }
-        let length = u32::from_be_bytes(length_buf) as usize;
-
-        let Some(transport) = transport.upgrade() else {
-            break;
-        };
-        let max_frame_bytes = transport.max_frame_bytes.load(Ordering::Relaxed);
-        if frame_length_exceeds_limit(length, max_frame_bytes) {
-            tracing::warn!(
-                size = length,
-                max = max_frame_bytes,
-                "sidecar frame exceeds negotiated limit"
-            );
-            break;
-        }
-
-        let mut frame_bytes = vec![0u8; 4 + length];
-        frame_bytes[..4].copy_from_slice(&length_buf);
-        if stdout.read_exact(&mut frame_bytes[4..]).await.is_err() {
-            break;
-        }
-
-        let codec = WireFrameCodec::new(max_frame_bytes);
-        match codec.decode(&frame_bytes) {
-            Ok(frame) => transport.handle_wire_frame(frame).await,
-            Err(error) => tracing::warn!(?error, "failed to decode sidecar frame"),
-        }
-    }
-
-    if let Some(transport) = transport.upgrade() {
-        transport.fail_all_pending();
-    }
-}
-
-fn frame_length_exceeds_limit(length: usize, max_frame_bytes: usize) -> bool {
-    length > max_frame_bytes
-}
-
-fn resolve_sidecar_binary_path(binary_path: Option<String>) -> String {
-    binary_path
-        .or_else(|| std::env::var(SIDECAR_BIN_ENV).ok())
-        .unwrap_or_else(|| "secure-exec-sidecar".to_string())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::sync::Mutex;
-
-    static ENV_LOCK: Mutex<()> = Mutex::new(());
-
-    fn test_transport() -> SidecarTransport {
-        let (request_writer_tx, _request_writer_rx) = mpsc::channel(REQUEST_FRAME_QUEUE_CAPACITY);
-        let (control_writer_tx, _control_writer_rx) = mpsc::channel(CONTROL_FRAME_QUEUE_CAPACITY);
-        let (event_tx, _) = broadcast::channel(EVENT_CHANNEL_CAPACITY);
-        SidecarTransport {
-            child: parking_lot::Mutex::new(None),
-            pending: SccHashMap::new(),
-            pending_request_lock: parking_lot::Mutex::new(()),
-            request_counter: AtomicI64::new(1),
-            max_frame_bytes: AtomicUsize::new(wire::DEFAULT_MAX_FRAME_BYTES),
-            event_tx,
-            callbacks: SccHashMap::new(),
-            request_writer_tx,
-            control_writer_tx,
-        }
-    }
-
-    #[test]
-    fn binary_path_prefers_explicit_path_over_env() {
-        let _guard = ENV_LOCK.lock().expect("env lock");
-        let previous = std::env::var(SIDECAR_BIN_ENV).ok();
-        std::env::set_var(SIDECAR_BIN_ENV, "/tmp/from-env");
-
-        assert_eq!(
-            resolve_sidecar_binary_path(Some("/tmp/from-config".to_string())),
-            "/tmp/from-config"
-        );
-
-        restore_env(SIDECAR_BIN_ENV, previous);
-    }
-
-    #[test]
-    fn binary_path_uses_secure_exec_env_fallback() {
-        let _guard = ENV_LOCK.lock().expect("env lock");
-        let previous = std::env::var(SIDECAR_BIN_ENV).ok();
-        std::env::set_var(SIDECAR_BIN_ENV, "/tmp/secure-exec-sidecar");
-
-        assert_eq!(
-            resolve_sidecar_binary_path(None),
-            "/tmp/secure-exec-sidecar"
-        );
-
-        restore_env(SIDECAR_BIN_ENV, previous);
-    }
-
-    #[test]
-    fn binary_path_defaults_to_secure_exec_sidecar() {
-        let _guard = ENV_LOCK.lock().expect("env lock");
-        let previous = std::env::var(SIDECAR_BIN_ENV).ok();
-        std::env::remove_var(SIDECAR_BIN_ENV);
-
-        assert_eq!(resolve_sidecar_binary_path(None), "secure-exec-sidecar");
-
-        restore_env(SIDECAR_BIN_ENV, previous);
-    }
-
-    fn restore_env(key: &str, value: Option<String>) {
-        match value {
-            Some(value) => std::env::set_var(key, value),
-            None => std::env::remove_var(key),
-        }
-    }
-
-    #[test]
-    fn frame_length_limit_rejects_oversized_declared_length() {
-        assert!(!frame_length_exceeds_limit(1024, 1024));
-        assert!(frame_length_exceeds_limit(1025, 1024));
-    }
-
-    #[test]
-    fn transport_encodes_requests_with_generated_wire_codec() {
-        let transport = test_transport();
-        let frame = wire::ProtocolFrame::RequestFrame(wire::RequestFrame {
-            schema: wire::protocol_schema(),
-            request_id: 7,
-            ownership: wire::OwnershipScope::ConnectionOwnership(wire::ConnectionOwnership {
-                connection_id: "conn-1".to_string(),
-            }),
-            payload: wire::RequestPayload::AuthenticateRequest(wire::AuthenticateRequest {
-                client_name: "transport-test".to_string(),
-                auth_token: "token".to_string(),
-                protocol_version: wire::PROTOCOL_VERSION,
-                bridge_version: 1,
-            }),
-        });
-
-        let encoded = transport
-            .encode_wire_frame(&frame, None)
-            .expect("encode transport frame");
-        let decoded = WireFrameCodec::default()
-            .decode(&encoded)
-            .expect("decode generated wire frame");
-
-        assert!(matches!(
-            decoded,
-            wire::ProtocolFrame::RequestFrame(wire::RequestFrame {
-                payload: wire::RequestPayload::AuthenticateRequest(_),
-                ..
-            })
-        ));
-    }
-
-    #[tokio::test]
-    async fn transport_fans_out_generated_wire_events() {
-        let transport = Arc::new(test_transport());
-        let mut wire_events = transport.subscribe_wire_events();
-
-        transport
-            .handle_wire_frame(wire::ProtocolFrame::EventFrame(wire::EventFrame {
-                schema: wire::protocol_schema(),
-                ownership: wire::OwnershipScope::VmOwnership(wire::VmOwnership {
-                    connection_id: "conn-1".to_string(),
-                    session_id: "session-1".to_string(),
-                    vm_id: "vm-1".to_string(),
-                }),
-                payload: wire::EventPayload::ProcessOutputEvent(wire::ProcessOutputEvent {
-                    process_id: "proc-1".to_string(),
-                    channel: wire::StreamChannel::Stdout,
-                    chunk: b"hello".to_vec(),
-                }),
-            }))
-            .await;
-
-        let (ownership, payload) = wire_events.recv().await.expect("wire event");
-        assert!(matches!(
-            ownership,
-            wire::OwnershipScope::VmOwnership(wire::VmOwnership {
-                connection_id,
-                session_id,
-                vm_id,
-            }) if connection_id == "conn-1" && session_id == "session-1" && vm_id == "vm-1"
-        ));
-        assert!(matches!(
-            payload,
-            wire::EventPayload::ProcessOutputEvent(wire::ProcessOutputEvent {
-                process_id,
-                channel: wire::StreamChannel::Stdout,
-                chunk,
-            }) if process_id == "proc-1" && chunk == b"hello".to_vec()
-        ));
-    }
-
-    #[test]
-    fn pending_request_guard_removes_registered_slot_on_drop() {
-        let transport = test_transport();
-        let (tx, _rx) = oneshot::channel();
-        transport
-            .register_pending_request(1, tx)
-            .expect("register pending request");
-
-        {
-            let _guard = PendingRequestGuard::new(&transport, 1);
-            assert_eq!(pending_request_count(&transport), 1);
-        }
-
-        assert_eq!(pending_request_count(&transport), 0);
-    }
-
-    #[test]
-    fn pending_request_limit_rejects_full_transport() {
-        let transport = test_transport();
-        for request_id in 1..=PENDING_REQUEST_LIMIT as wire::RequestId {
-            let (tx, _rx) = oneshot::channel();
-            transport
-                .register_pending_request(request_id, tx)
-                .expect("register pending request");
-        }
-        let (tx, _rx) = oneshot::channel();
-        let error = transport
-            .register_pending_request((PENDING_REQUEST_LIMIT + 1) as wire::RequestId, tx)
-            .expect_err("full pending map should reject");
-
-        assert!(
-            error
-                .to_string()
-                .contains("sidecar pending request limit exceeded"),
-            "unexpected error: {error}"
-        );
-    }
-
-    #[tokio::test]
-    async fn writer_prioritizes_control_frames_over_request_backlog() {
-        let (client, mut server) = tokio::io::duplex(64);
-        let (control_tx, control_rx) = mpsc::channel(CONTROL_FRAME_QUEUE_CAPACITY);
-        let (request_tx, request_rx) = mpsc::channel(REQUEST_FRAME_QUEUE_CAPACITY);
-        request_tx
-            .send(vec![b'r'])
-            .await
-            .expect("send request frame");
-        control_tx
-            .send(vec![b'c'])
-            .await
-            .expect("send control frame");
-        drop(control_tx);
-        drop(request_tx);
-
-        let writer = tokio::spawn(run_writer(client, control_rx, request_rx));
-        let mut first = [0u8; 1];
-        server
-            .read_exact(&mut first)
-            .await
-            .expect("read first byte");
-        writer.await.expect("writer task");
-
-        assert_eq!(first, [b'c']);
-    }
-
-    #[tokio::test]
-    async fn writer_alternates_when_control_and_request_are_ready() {
-        let (client, mut server) = tokio::io::duplex(64);
-        let (control_tx, control_rx) = mpsc::channel(CONTROL_FRAME_QUEUE_CAPACITY);
-        let (request_tx, request_rx) = mpsc::channel(REQUEST_FRAME_QUEUE_CAPACITY);
-        control_tx.send(vec![b'c']).await.expect("control one");
-        control_tx.send(vec![b'C']).await.expect("control two");
-        request_tx.send(vec![b'r']).await.expect("request one");
-        request_tx.send(vec![b'R']).await.expect("request two");
-        drop(control_tx);
-        drop(request_tx);
-
-        let writer = tokio::spawn(run_writer(client, control_rx, request_rx));
-        let mut output = [0u8; 4];
-        server.read_exact(&mut output).await.expect("read output");
-        writer.await.expect("writer task");
-
-        assert_eq!(output, [b'c', b'r', b'C', b'R']);
-    }
-}
diff --git a/crates/secure-exec-client/src/wire.rs b/crates/secure-exec-client/src/wire.rs
deleted file mode 100644
index 6f0577807..000000000
--- a/crates/secure-exec-client/src/wire.rs
+++ /dev/null
@@ -1,3 +0,0 @@
-//! Raw generated Secure Exec sidecar protocol types and BARE frame helpers.
-
-pub use secure_exec_sidecar_protocol::wire::*;
diff --git a/crates/secure-exec-client/tests/wire_protocol.rs b/crates/secure-exec-client/tests/wire_protocol.rs
deleted file mode 100644
index 0054fddd3..000000000
--- a/crates/secure-exec-client/tests/wire_protocol.rs
+++ /dev/null
@@ -1,66 +0,0 @@
-use secure_exec_client::wire::{
-    self, AuthenticateRequest, ConnectionOwnership, OwnershipScope, ProtocolFrame, RequestFrame,
-    RequestPayload, WireFrameCodec,
-};
-use secure_exec_client::ProtocolCodecError;
-
-#[test]
-fn generated_wire_frame_codec_round_trips_authenticate() {
-    let frame = authenticate_frame();
-    let codec = WireFrameCodec::default();
-
-    let encoded = codec.encode(&frame).expect("encode generated wire frame");
-    let declared = u32::from_be_bytes(encoded[..4].try_into().expect("length prefix"));
-    assert_eq!(declared as usize, encoded.len() - 4);
-
-    let decoded = codec.decode(&encoded).expect("decode generated wire frame");
-
-    assert_eq!(decoded, frame);
-}
-
-#[test]
-fn generated_wire_frame_codec_rejects_oversized_payloads() {
-    let frame = authenticate_frame();
-    let codec = WireFrameCodec::new(8);
-
-    let error = codec.encode(&frame).expect_err("oversized frame must fail");
-
-    assert!(matches!(
-        error,
-        ProtocolCodecError::FrameTooLarge { size, max: 8 } if size > 8
-    ));
-}
-
-#[test]
-fn generated_wire_frame_codec_rejects_schema_mismatches() {
-    let mut frame = authenticate_frame();
-    let ProtocolFrame::RequestFrame(request) = &mut frame else {
-        unreachable!("authenticate frame is a request")
-    };
-    request.schema.version = wire::PROTOCOL_VERSION + 1;
-
-    let error = WireFrameCodec::default()
-        .encode(&frame)
-        .expect_err("schema mismatch must fail");
-
-    assert!(matches!(
-        error,
-        ProtocolCodecError::UnsupportedSchema { version, .. } if version == wire::PROTOCOL_VERSION + 1
-    ));
-}
-
-fn authenticate_frame() -> ProtocolFrame {
-    ProtocolFrame::RequestFrame(RequestFrame {
-        schema: wire::protocol_schema(),
-        request_id: 1,
-        ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-            connection_id: "conn-1".to_string(),
-        }),
-        payload: RequestPayload::AuthenticateRequest(AuthenticateRequest {
-            client_name: "secure-exec-client-test".to_string(),
-            auth_token: "token".to_string(),
-            protocol_version: wire::PROTOCOL_VERSION,
-            bridge_version: 1,
-        }),
-    })
-}
diff --git a/crates/secure-exec-vfs/AGENTS.md b/crates/secure-exec-vfs/AGENTS.md
deleted file mode 120000
index 681311eb9..000000000
--- a/crates/secure-exec-vfs/AGENTS.md
+++ /dev/null
@@ -1 +0,0 @@
-CLAUDE.md
\ No newline at end of file
diff --git a/crates/secure-exec-vfs/CLAUDE.md b/crates/secure-exec-vfs/CLAUDE.md
deleted file mode 100644
index ffc47d114..000000000
--- a/crates/secure-exec-vfs/CLAUDE.md
+++ /dev/null
@@ -1,5 +0,0 @@
-# secure-exec-vfs
-
-- `secure-exec-vfs` contains concrete backend adapters for secure-exec deployments: S3, host-disk metadata/block stores, and bridge/callback-backed stores.
-- Keep policy decisions, trusted configuration validation, mount descriptor parsing, and sidecar lifecycle wiring in the sidecar plugin layer.
-- Generic filesystem algorithms and in-memory stores belong in `vfs`.
diff --git a/crates/secure-exec-vfs/Cargo.toml b/crates/secure-exec-vfs/Cargo.toml
deleted file mode 100644
index 71fa222c5..000000000
--- a/crates/secure-exec-vfs/Cargo.toml
+++ /dev/null
@@ -1,21 +0,0 @@
-[package]
-name = "secure-exec-vfs"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-repository.workspace = true
-description = "Secure Exec virtual filesystem backends"
-
-[dependencies]
-async-trait = "0.1"
-aws-sdk-s3 = "1"
-rusqlite = { version = "0.32", features = ["bundled"] }
-serde = { version = "1.0", features = ["derive"] }
-serde_json = "1.0"
-vfs = { workspace = true }
-
-[dev-dependencies]
-aws-config = "1"
-aws-credential-types = "1"
-tempfile = "3"
-tokio = { version = "1", features = ["macros", "rt", "rt-multi-thread"] }
diff --git a/crates/secure-exec-vfs/src/callback_store.rs b/crates/secure-exec-vfs/src/callback_store.rs
deleted file mode 100644
index 7f0d0a505..000000000
--- a/crates/secure-exec-vfs/src/callback_store.rs
+++ /dev/null
@@ -1,588 +0,0 @@
-use async_trait::async_trait;
-use serde::{Deserialize, Serialize};
-use std::fmt;
-use std::time::Duration;
-use vfs::engine::{
-    BlockKey, ChunkEdit, ChunkRange, ChunkRef, CreateInodeAttrs, DentryStat, InodeMeta, InodePatch,
-    MetadataStore, SnapshotId, VfsError, VfsResult,
-};
-
-pub const VFS_METADATA_EXT_NAMESPACE: &str = "secure-exec.vfs.metadata.v1";
-const CALLBACK_METADATA_TIMEOUT: Duration = Duration::from_secs(30);
-
-pub trait CallbackMetadataClient: Clone + Send + Sync + 'static {
-    type Ownership: Clone + Send + Sync + 'static;
-    type Error: fmt::Display;
-
-    fn invoke_metadata_callback(
-        &self,
-        ownership: Self::Ownership,
-        namespace: &str,
-        payload: Vec<u8>,
-        timeout: Duration,
-    ) -> Result<(String, Vec<u8>), Self::Error>;
-}
-
-#[derive(Clone)]
-pub struct CallbackMetadataStore<C>
-where
-    C: CallbackMetadataClient,
-{
-    requests: C,
-    ownership: C::Ownership,
-    mount_id: String,
-}
-
-impl<C> CallbackMetadataStore<C>
-where
-    C: CallbackMetadataClient,
-{
-    pub fn new(requests: C, ownership: C::Ownership, mount_id: String) -> Self {
-        Self {
-            requests,
-            ownership,
-            mount_id,
-        }
-    }
-
-    fn invoke(&self, method: MetadataCallbackMethod) -> VfsResult<MetadataCallbackResponse> {
-        let request = MetadataCallbackRequest {
-            mount_id: self.mount_id.clone(),
-            method,
-        };
-        let payload = serde_json::to_vec(&request).map_err(|error| {
-            VfsError::eio(format!(
-                "encode vfs metadata callback request for mount '{}': {error}",
-                self.mount_id
-            ))
-        })?;
-        let (namespace, payload) = self
-            .requests
-            .invoke_metadata_callback(
-                self.ownership.clone(),
-                VFS_METADATA_EXT_NAMESPACE,
-                payload,
-                CALLBACK_METADATA_TIMEOUT,
-            )
-            .map_err(Self::sidecar_error_to_vfs)?;
-        if namespace != VFS_METADATA_EXT_NAMESPACE {
-            return Err(VfsError::eio(format!(
-                "unexpected vfs metadata callback namespace '{namespace}'"
-            )));
-        }
-        let response: MetadataCallbackResponse =
-            serde_json::from_slice(&payload).map_err(|error| {
-                VfsError::eio(format!(
-                    "decode vfs metadata callback response for mount '{}': {error}",
-                    self.mount_id
-                ))
-            })?;
-        if let MetadataCallbackResponse::Err { code, message } = &response {
-            return Err(VfsError::new(code_from_string(code), message.clone()));
-        }
-        Ok(response)
-    }
-
-    fn sidecar_error_to_vfs(error: C::Error) -> VfsError {
-        VfsError::eio(error.to_string())
-    }
-}
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-#[serde(rename_all = "camelCase")]
-pub struct MetadataCallbackRequest {
-    pub mount_id: String,
-    pub method: MetadataCallbackMethod,
-}
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-#[serde(tag = "type", rename_all = "camelCase")]
-pub enum MetadataCallbackMethod {
-    Resolve {
-        path: String,
-    },
-    ResolveParent {
-        path: String,
-    },
-    Lstat {
-        path: String,
-    },
-    ListDir {
-        ino: u64,
-    },
-    Create {
-        parent: u64,
-        name: String,
-        attrs: CreateInodeAttrs,
-    },
-    Link {
-        parent: u64,
-        name: String,
-        target: u64,
-    },
-    Remove {
-        parent: u64,
-        name: String,
-    },
-    Rename {
-        src_parent: u64,
-        src: String,
-        dst_parent: u64,
-        dst: String,
-    },
-    SetAttr {
-        ino: u64,
-        patch: InodePatch,
-    },
-    CommitWrite {
-        ino: u64,
-        edits: Vec<ChunkEdit>,
-        new_size: u64,
-    },
-    GetChunks {
-        ino: u64,
-        range: ChunkRange,
-    },
-    Snapshot {
-        root: u64,
-    },
-    Fork {
-        snap: SnapshotId,
-    },
-    Gc,
-}
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-#[serde(tag = "type", rename_all = "camelCase")]
-pub enum MetadataCallbackResponse {
-    InodeMeta { meta: InodeMeta },
-    ResolveParent { parent: InodeMeta, name: String },
-    DentryStats { entries: Vec<DentryStat> },
-    Unit,
-    BlockKeys { keys: Vec<BlockKey> },
-    ChunkRefs { chunks: Vec<ChunkRef> },
-    Snapshot { id: SnapshotId },
-    Inode { ino: u64 },
-    Err { code: String, message: String },
-}
-
-#[async_trait]
-impl<C> MetadataStore for CallbackMetadataStore<C>
-where
-    C: CallbackMetadataClient,
-{
-    async fn resolve(&self, path: &str) -> VfsResult<InodeMeta> {
-        match self.invoke(MetadataCallbackMethod::Resolve {
-            path: path.to_owned(),
-        })? {
-            MetadataCallbackResponse::InodeMeta { meta } => Ok(meta),
-            other => Err(unexpected_response("resolve", other)),
-        }
-    }
-
-    async fn resolve_parent(&self, path: &str) -> VfsResult<(InodeMeta, String)> {
-        match self.invoke(MetadataCallbackMethod::ResolveParent {
-            path: path.to_owned(),
-        })? {
-            MetadataCallbackResponse::ResolveParent { parent, name } => Ok((parent, name)),
-            other => Err(unexpected_response("resolveParent", other)),
-        }
-    }
-
-    async fn lstat(&self, path: &str) -> VfsResult<InodeMeta> {
-        match self.invoke(MetadataCallbackMethod::Lstat {
-            path: path.to_owned(),
-        })? {
-            MetadataCallbackResponse::InodeMeta { meta } => Ok(meta),
-            other => Err(unexpected_response("lstat", other)),
-        }
-    }
-
-    async fn list_dir(&self, ino: u64) -> VfsResult<Vec<DentryStat>> {
-        match self.invoke(MetadataCallbackMethod::ListDir { ino })? {
-            MetadataCallbackResponse::DentryStats { entries } => Ok(entries),
-            other => Err(unexpected_response("listDir", other)),
-        }
-    }
-
-    async fn create(
-        &self,
-        parent: u64,
-        name: &str,
-        attrs: CreateInodeAttrs,
-    ) -> VfsResult<InodeMeta> {
-        match self.invoke(MetadataCallbackMethod::Create {
-            parent,
-            name: name.to_owned(),
-            attrs,
-        })? {
-            MetadataCallbackResponse::InodeMeta { meta } => Ok(meta),
-            other => Err(unexpected_response("create", other)),
-        }
-    }
-
-    async fn link(&self, parent: u64, name: &str, target: u64) -> VfsResult<()> {
-        match self.invoke(MetadataCallbackMethod::Link {
-            parent,
-            name: name.to_owned(),
-            target,
-        })? {
-            MetadataCallbackResponse::Unit => Ok(()),
-            other => Err(unexpected_response("link", other)),
-        }
-    }
-
-    async fn remove(&self, parent: u64, name: &str) -> VfsResult<Vec<BlockKey>> {
-        match self.invoke(MetadataCallbackMethod::Remove {
-            parent,
-            name: name.to_owned(),
-        })? {
-            MetadataCallbackResponse::BlockKeys { keys } => Ok(keys),
-            other => Err(unexpected_response("remove", other)),
-        }
-    }
-
-    async fn rename(
-        &self,
-        src_parent: u64,
-        src: &str,
-        dst_parent: u64,
-        dst: &str,
-    ) -> VfsResult<Vec<BlockKey>> {
-        match self.invoke(MetadataCallbackMethod::Rename {
-            src_parent,
-            src: src.to_owned(),
-            dst_parent,
-            dst: dst.to_owned(),
-        })? {
-            MetadataCallbackResponse::BlockKeys { keys } => Ok(keys),
-            other => Err(unexpected_response("rename", other)),
-        }
-    }
-
-    async fn set_attr(&self, ino: u64, patch: InodePatch) -> VfsResult<Vec<BlockKey>> {
-        match self.invoke(MetadataCallbackMethod::SetAttr { ino, patch })? {
-            MetadataCallbackResponse::BlockKeys { keys } => Ok(keys),
-            other => Err(unexpected_response("setAttr", other)),
-        }
-    }
-
-    async fn commit_write(
-        &self,
-        ino: u64,
-        edits: Vec<ChunkEdit>,
-        new_size: u64,
-    ) -> VfsResult<Vec<BlockKey>> {
-        match self.invoke(MetadataCallbackMethod::CommitWrite {
-            ino,
-            edits,
-            new_size,
-        })? {
-            MetadataCallbackResponse::BlockKeys { keys } => Ok(keys),
-            other => Err(unexpected_response("commitWrite", other)),
-        }
-    }
-
-    async fn get_chunks(&self, ino: u64, range: ChunkRange) -> VfsResult<Vec<ChunkRef>> {
-        match self.invoke(MetadataCallbackMethod::GetChunks { ino, range })? {
-            MetadataCallbackResponse::ChunkRefs { chunks } => Ok(chunks),
-            other => Err(unexpected_response("getChunks", other)),
-        }
-    }
-
-    async fn snapshot(&self, root: u64) -> VfsResult<SnapshotId> {
-        match self.invoke(MetadataCallbackMethod::Snapshot { root })? {
-            MetadataCallbackResponse::Snapshot { id } => Ok(id),
-            other => Err(unexpected_response("snapshot", other)),
-        }
-    }
-
-    async fn fork(&self, snap: SnapshotId) -> VfsResult<u64> {
-        match self.invoke(MetadataCallbackMethod::Fork { snap })? {
-            MetadataCallbackResponse::Inode { ino } => Ok(ino),
-            other => Err(unexpected_response("fork", other)),
-        }
-    }
-
-    async fn gc(&self) -> VfsResult<Vec<BlockKey>> {
-        match self.invoke(MetadataCallbackMethod::Gc)? {
-            MetadataCallbackResponse::BlockKeys { keys } => Ok(keys),
-            other => Err(unexpected_response("gc", other)),
-        }
-    }
-}
-
-fn unexpected_response(method: &str, response: MetadataCallbackResponse) -> VfsError {
-    VfsError::eio(format!(
-        "unexpected vfs metadata callback response for {method}: {response:?}"
-    ))
-}
-
-fn code_from_string(code: &str) -> &'static str {
-    match code {
-        "ENOENT" => "ENOENT",
-        "EEXIST" => "EEXIST",
-        "ENOTDIR" => "ENOTDIR",
-        "EISDIR" => "EISDIR",
-        "ELOOP" => "ELOOP",
-        "ENAMETOOLONG" => "ENAMETOOLONG",
-        "ENOTEMPTY" => "ENOTEMPTY",
-        "EOPNOTSUPP" => "EOPNOTSUPP",
-        "EROFS" => "EROFS",
-        "EINVAL" => "EINVAL",
-        "EACCES" => "EACCES",
-        "EPERM" => "EPERM",
-        "ENOSYS" => "ENOSYS",
-        _ => "EIO",
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::sync::{Arc, Mutex};
-    use vfs::engine::engines::{ChunkedFs, ChunkedFsOptions};
-    use vfs::engine::mem::{InMemoryMetadataStore, MemoryBlockStore};
-    use vfs::engine::{InodeType, MetadataStore, Storage, Timespec, VirtualFileSystem};
-
-    #[derive(Default)]
-    struct RecordingMetadataTransport {
-        requests: Mutex<Vec<MetadataCallbackRequest>>,
-    }
-
-    impl CallbackMetadataClient for Arc<RecordingMetadataTransport> {
-        type Ownership = String;
-        type Error = String;
-
-        fn invoke_metadata_callback(
-            &self,
-            _ownership: Self::Ownership,
-            namespace: &str,
-            payload: Vec<u8>,
-            _timeout: Duration,
-        ) -> Result<(String, Vec<u8>), Self::Error> {
-            assert_eq!(namespace, VFS_METADATA_EXT_NAMESPACE);
-            let callback_request: MetadataCallbackRequest =
-                serde_json::from_slice(&payload).expect("decode metadata callback");
-            self.requests
-                .lock()
-                .expect("lock request log")
-                .push(callback_request);
-
-            let now = Timespec { sec: 1, nsec: 2 };
-            let response = MetadataCallbackResponse::InodeMeta {
-                meta: InodeMeta {
-                    ino: 7,
-                    kind: InodeType::File,
-                    mode: 0o644,
-                    uid: 1000,
-                    gid: 1000,
-                    size: 5,
-                    nlink: 1,
-                    atime: now,
-                    mtime: now,
-                    ctime: now,
-                    birthtime: now,
-                    storage: Storage::Inline(b"hello".to_vec()),
-                    symlink_target: None,
-                },
-            };
-            let payload = serde_json::to_vec(&response).expect("encode metadata callback response");
-            Ok((VFS_METADATA_EXT_NAMESPACE.to_string(), payload))
-        }
-    }
-
-    #[tokio::test]
-    async fn callback_metadata_store_sends_typed_ext_requests() {
-        let transport = Arc::new(RecordingMetadataTransport::default());
-        let store = CallbackMetadataStore::new(
-            transport.clone(),
-            "vm-owner".to_string(),
-            "mount-a".to_string(),
-        );
-
-        let meta = store
-            .resolve("/file.txt")
-            .await
-            .expect("resolve via callback");
-        assert_eq!(meta.ino, 7);
-        assert_eq!(meta.storage, Storage::Inline(b"hello".to_vec()));
-
-        let requests = transport.requests.lock().expect("lock request log");
-        assert_eq!(requests.len(), 1);
-        assert_eq!(requests[0].mount_id, "mount-a");
-        match &requests[0].method {
-            MetadataCallbackMethod::Resolve { path } => assert_eq!(path, "/file.txt"),
-            other => panic!("unexpected method: {other:?}"),
-        }
-    }
-
-    #[derive(Default)]
-    struct DelegatingMetadataTransport {
-        inner: InMemoryMetadataStore,
-        methods: Mutex<Vec<&'static str>>,
-    }
-
-    impl CallbackMetadataClient for Arc<DelegatingMetadataTransport> {
-        type Ownership = String;
-        type Error = String;
-
-        fn invoke_metadata_callback(
-            &self,
-            _ownership: Self::Ownership,
-            namespace: &str,
-            payload: Vec<u8>,
-            _timeout: Duration,
-        ) -> Result<(String, Vec<u8>), Self::Error> {
-            assert_eq!(namespace, VFS_METADATA_EXT_NAMESPACE);
-            let request: MetadataCallbackRequest =
-                serde_json::from_slice(&payload).map_err(|err| err.to_string())?;
-            let inner = self.inner.clone();
-            let response = std::thread::spawn(move || {
-                let runtime = tokio::runtime::Builder::new_current_thread()
-                    .enable_all()
-                    .build()
-                    .map_err(|err| err.to_string())?;
-                runtime.block_on(handle_metadata_callback(inner, request.method))
-            })
-            .join()
-            .map_err(|_| "metadata callback thread panicked".to_string())??;
-            self.methods
-                .lock()
-                .expect("lock method log")
-                .push(method_name(&response));
-            let payload = serde_json::to_vec(&response).map_err(|err| err.to_string())?;
-            Ok((VFS_METADATA_EXT_NAMESPACE.to_string(), payload))
-        }
-    }
-
-    async fn handle_metadata_callback(
-        inner: InMemoryMetadataStore,
-        method: MetadataCallbackMethod,
-    ) -> Result<MetadataCallbackResponse, String> {
-        let result = match method {
-            MetadataCallbackMethod::Resolve { path } => inner
-                .resolve(&path)
-                .await
-                .map(|meta| MetadataCallbackResponse::InodeMeta { meta }),
-            MetadataCallbackMethod::ResolveParent { path } => inner
-                .resolve_parent(&path)
-                .await
-                .map(|(parent, name)| MetadataCallbackResponse::ResolveParent { parent, name }),
-            MetadataCallbackMethod::Lstat { path } => inner
-                .lstat(&path)
-                .await
-                .map(|meta| MetadataCallbackResponse::InodeMeta { meta }),
-            MetadataCallbackMethod::ListDir { ino } => inner
-                .list_dir(ino)
-                .await
-                .map(|entries| MetadataCallbackResponse::DentryStats { entries }),
-            MetadataCallbackMethod::Create {
-                parent,
-                name,
-                attrs,
-            } => inner
-                .create(parent, &name, attrs)
-                .await
-                .map(|meta| MetadataCallbackResponse::InodeMeta { meta }),
-            MetadataCallbackMethod::Link {
-                parent,
-                name,
-                target,
-            } => inner
-                .link(parent, &name, target)
-                .await
-                .map(|()| MetadataCallbackResponse::Unit),
-            MetadataCallbackMethod::Remove { parent, name } => inner
-                .remove(parent, &name)
-                .await
-                .map(|keys| MetadataCallbackResponse::BlockKeys { keys }),
-            MetadataCallbackMethod::Rename {
-                src_parent,
-                src,
-                dst_parent,
-                dst,
-            } => inner
-                .rename(src_parent, &src, dst_parent, &dst)
-                .await
-                .map(|keys| MetadataCallbackResponse::BlockKeys { keys }),
-            MetadataCallbackMethod::SetAttr { ino, patch } => inner
-                .set_attr(ino, patch)
-                .await
-                .map(|keys| MetadataCallbackResponse::BlockKeys { keys }),
-            MetadataCallbackMethod::CommitWrite {
-                ino,
-                edits,
-                new_size,
-            } => inner
-                .commit_write(ino, edits, new_size)
-                .await
-                .map(|keys| MetadataCallbackResponse::BlockKeys { keys }),
-            MetadataCallbackMethod::GetChunks { ino, range } => inner
-                .get_chunks(ino, range)
-                .await
-                .map(|chunks| MetadataCallbackResponse::ChunkRefs { chunks }),
-            MetadataCallbackMethod::Snapshot { root } => inner
-                .snapshot(root)
-                .await
-                .map(|id| MetadataCallbackResponse::Snapshot { id }),
-            MetadataCallbackMethod::Fork { snap } => inner
-                .fork(snap)
-                .await
-                .map(|ino| MetadataCallbackResponse::Inode { ino }),
-            MetadataCallbackMethod::Gc => inner
-                .gc()
-                .await
-                .map(|keys| MetadataCallbackResponse::BlockKeys { keys }),
-        };
-        Ok(
-            result.unwrap_or_else(|error| MetadataCallbackResponse::Err {
-                code: error.code().to_string(),
-                message: error.message().to_string(),
-            }),
-        )
-    }
-
-    fn method_name(response: &MetadataCallbackResponse) -> &'static str {
-        match response {
-            MetadataCallbackResponse::InodeMeta { .. } => "inodeMeta",
-            MetadataCallbackResponse::ResolveParent { .. } => "resolveParent",
-            MetadataCallbackResponse::DentryStats { .. } => "dentryStats",
-            MetadataCallbackResponse::Unit => "unit",
-            MetadataCallbackResponse::BlockKeys { .. } => "blockKeys",
-            MetadataCallbackResponse::ChunkRefs { .. } => "chunkRefs",
-            MetadataCallbackResponse::Snapshot { .. } => "snapshot",
-            MetadataCallbackResponse::Inode { .. } => "inode",
-            MetadataCallbackResponse::Err { .. } => "err",
-        }
-    }
-
-    #[tokio::test]
-    async fn callback_metadata_store_drives_chunked_filesystem_round_trip() {
-        let transport = Arc::new(DelegatingMetadataTransport::default());
-        let metadata = CallbackMetadataStore::new(
-            transport.clone(),
-            "vm-owner".to_string(),
-            "mount-a".to_string(),
-        );
-        let fs = ChunkedFs::with_options(
-            metadata,
-            MemoryBlockStore::new(),
-            ChunkedFsOptions {
-                inline_threshold: 1,
-                chunk_size: 4,
-                ..ChunkedFsOptions::default()
-            },
-        );
-
-        fs.write_file("/file.txt", b"abcdefgh").await.unwrap();
-        fs.pwrite("/file.txt", b"YY", 2).await.unwrap();
-        assert_eq!(fs.read_file("/file.txt").await.unwrap(), b"abYYefgh");
-        fs.truncate("/file.txt", 5).await.unwrap();
-        assert_eq!(fs.read_file("/file.txt").await.unwrap(), b"abYYe");
-
-        let methods = transport.methods.lock().expect("lock method log");
-        assert!(methods.contains(&"blockKeys"));
-        assert!(methods.contains(&"chunkRefs"));
-    }
-}
diff --git a/crates/secure-exec-vfs/src/lib.rs b/crates/secure-exec-vfs/src/lib.rs
deleted file mode 100644
index ccf59b99b..000000000
--- a/crates/secure-exec-vfs/src/lib.rs
+++ /dev/null
@@ -1,9 +0,0 @@
-#![forbid(unsafe_code)]
-
-pub mod callback_store;
-pub mod local;
-pub mod s3;
-
-pub use callback_store::{CallbackMetadataClient, CallbackMetadataStore};
-pub use local::{FileBlockStore, SqliteMetadataStore};
-pub use s3::{S3BlockStore, S3BlockStoreOptions, S3ObjectBackend, S3ObjectBackendOptions};
diff --git a/crates/secure-exec-vfs/src/local/file_block_store.rs b/crates/secure-exec-vfs/src/local/file_block_store.rs
deleted file mode 100644
index b4296c3c5..000000000
--- a/crates/secure-exec-vfs/src/local/file_block_store.rs
+++ /dev/null
@@ -1,109 +0,0 @@
-use async_trait::async_trait;
-use std::fs;
-use std::path::{Path, PathBuf};
-use vfs::engine::block::BlockStore;
-use vfs::engine::error::{VfsError, VfsResult};
-use vfs::engine::types::BlockKey;
-
-#[derive(Debug, Clone)]
-pub struct FileBlockStore {
-    root: PathBuf,
-}
-
-impl FileBlockStore {
-    pub fn new(root: impl Into<PathBuf>) -> VfsResult<Self> {
-        let root = root.into();
-        fs::create_dir_all(&root)
-            .map_err(|err| VfsError::eio(format!("create block root {}: {err}", root.display())))?;
-        Ok(Self { root })
-    }
-
-    fn path_for(&self, key: &BlockKey) -> PathBuf {
-        let (prefix, suffix) = key.0.split_at(key.0.len().min(2));
-        self.root.join(prefix).join(suffix)
-    }
-
-    fn ensure_safe_key(key: &BlockKey) -> VfsResult<()> {
-        if key.0.contains('/') || key.0.contains('\\') || key.0 == "." || key.0 == ".." {
-            return Err(VfsError::einval(format!("unsafe block key: {}", key.0)));
-        }
-        Ok(())
-    }
-
-    pub fn root(&self) -> &Path {
-        &self.root
-    }
-}
-
-#[async_trait]
-impl BlockStore for FileBlockStore {
-    async fn get(&self, key: &BlockKey) -> VfsResult<Vec<u8>> {
-        Self::ensure_safe_key(key)?;
-        let path = self.path_for(key);
-        fs::read(&path).map_err(|err| {
-            if err.kind() == std::io::ErrorKind::NotFound {
-                VfsError::enoent(&key.0)
-            } else {
-                VfsError::eio(format!("read block {}: {err}", path.display()))
-            }
-        })
-    }
-
-    async fn get_range(&self, key: &BlockKey, off: u64, len: u64) -> VfsResult<Vec<u8>> {
-        let data = self.get(key).await?;
-        let start = usize::try_from(off)
-            .map_err(|_| VfsError::einval(format!("range offset is too large: {off}")))?;
-        let len = usize::try_from(len)
-            .map_err(|_| VfsError::einval(format!("range length is too large: {len}")))?;
-        if start >= data.len() {
-            return Ok(Vec::new());
-        }
-        let end = start.saturating_add(len).min(data.len());
-        Ok(data[start..end].to_vec())
-    }
-
-    async fn put(&self, key: &BlockKey, data: &[u8]) -> VfsResult<()> {
-        Self::ensure_safe_key(key)?;
-        let path = self.path_for(key);
-        if let Some(parent) = path.parent() {
-            fs::create_dir_all(parent)
-                .map_err(|err| VfsError::eio(format!("create block dir: {err}")))?;
-        }
-        fs::write(&path, data)
-            .map_err(|err| VfsError::eio(format!("write block {}: {err}", path.display())))
-    }
-
-    async fn exists(&self, key: &BlockKey) -> VfsResult<bool> {
-        Self::ensure_safe_key(key)?;
-        Ok(self.path_for(key).exists())
-    }
-
-    async fn delete_many(&self, keys: &[BlockKey]) -> VfsResult<()> {
-        let mut errors = Vec::new();
-        for key in keys {
-            if let Err(error) = Self::ensure_safe_key(key) {
-                errors.push(error.to_string());
-                continue;
-            }
-            match fs::remove_file(self.path_for(key)) {
-                Ok(()) => {}
-                Err(err) if err.kind() == std::io::ErrorKind::NotFound => {}
-                Err(err) => errors.push(format!("delete block {}: {err}", key.0)),
-            }
-        }
-        if errors.is_empty() {
-            Ok(())
-        } else {
-            Err(VfsError::eio(format!(
-                "delete {} local blocks failed: {}",
-                errors.len(),
-                errors.join("; ")
-            )))
-        }
-    }
-
-    async fn copy(&self, src: &BlockKey, dst: &BlockKey) -> VfsResult<()> {
-        let data = self.get(src).await?;
-        self.put(dst, &data).await
-    }
-}
diff --git a/crates/secure-exec-vfs/src/local/mod.rs b/crates/secure-exec-vfs/src/local/mod.rs
deleted file mode 100644
index 869cdf405..000000000
--- a/crates/secure-exec-vfs/src/local/mod.rs
+++ /dev/null
@@ -1,5 +0,0 @@
-mod file_block_store;
-mod sqlite_metadata_store;
-
-pub use file_block_store::FileBlockStore;
-pub use sqlite_metadata_store::SqliteMetadataStore;
diff --git a/crates/secure-exec-vfs/src/local/sqlite_metadata_store.rs b/crates/secure-exec-vfs/src/local/sqlite_metadata_store.rs
deleted file mode 100644
index 64e1eae9b..000000000
--- a/crates/secure-exec-vfs/src/local/sqlite_metadata_store.rs
+++ /dev/null
@@ -1,438 +0,0 @@
-use async_trait::async_trait;
-use rusqlite::{params, Connection};
-use std::collections::BTreeMap;
-use std::path::Path;
-use std::sync::Mutex;
-use vfs::engine::error::{VfsError, VfsResult};
-use vfs::engine::mem::metadata_store::MetadataDump;
-use vfs::engine::mem::InMemoryMetadataStore;
-use vfs::engine::metadata::MetadataStore;
-use vfs::engine::types::{
-    BlockKey, ChunkEdit, ChunkRange, ChunkRef, CreateInodeAttrs, DentryStat, InodeMeta, InodePatch,
-    InodeType, SnapshotId, Storage, Timespec, DEFAULT_CHUNK_SIZE,
-};
-
-pub struct SqliteMetadataStore {
-    connection: Mutex<Connection>,
-    inner: InMemoryMetadataStore,
-}
-
-impl SqliteMetadataStore {
-    pub fn open(path: impl AsRef<Path>) -> VfsResult<Self> {
-        let connection = Connection::open(path)
-            .map_err(|err| VfsError::eio(format!("open SQLite metadata store: {err}")))?;
-        Self::from_connection(connection)
-    }
-
-    pub fn in_memory() -> VfsResult<Self> {
-        let connection = Connection::open_in_memory()
-            .map_err(|err| VfsError::eio(format!("open in-memory SQLite metadata store: {err}")))?;
-        Self::from_connection(connection)
-    }
-
-    fn from_connection(mut connection: Connection) -> VfsResult<Self> {
-        install_schema(&connection)?;
-        let dump = load_dump(&connection)?;
-        let inner = dump
-            .map(InMemoryMetadataStore::from_dump)
-            .unwrap_or_default();
-        if load_dump(&connection)?.is_none() {
-            persist_dump(&mut connection, &inner.dump())?;
-        }
-        Ok(Self {
-            connection: Mutex::new(connection),
-            inner,
-        })
-    }
-
-    pub fn has_schema(&self) -> VfsResult<bool> {
-        let connection = self.connection.lock().expect("sqlite mutex poisoned");
-        let count: i64 = connection
-            .query_row(
-                "SELECT COUNT(*) FROM sqlite_master WHERE type = 'table' AND name IN ('inodes', 'dentries', 'chunks', 'block_refs', 'snapshots')",
-                [],
-                |row| row.get(0),
-            )
-            .map_err(|err| VfsError::eio(format!("inspect SQLite schema: {err}")))?;
-        Ok(count == 5)
-    }
-
-    fn persist(&self) -> VfsResult<()> {
-        let dump = self.inner.dump();
-        let mut connection = self.connection.lock().expect("sqlite mutex poisoned");
-        persist_dump(&mut connection, &dump)
-    }
-}
-
-fn install_schema(connection: &Connection) -> VfsResult<()> {
-    connection
-        .execute_batch(
-            "
-            CREATE TABLE IF NOT EXISTS inodes (
-              ino INTEGER PRIMARY KEY,
-              kind INTEGER NOT NULL,
-              mode INTEGER NOT NULL,
-              uid INTEGER NOT NULL,
-              gid INTEGER NOT NULL,
-              size INTEGER NOT NULL,
-              nlink INTEGER NOT NULL,
-              atime_ns INTEGER NOT NULL, mtime_ns INTEGER NOT NULL,
-              ctime_ns INTEGER NOT NULL, birthtime_ns INTEGER NOT NULL,
-              storage_mode INTEGER NOT NULL,
-              storage_chunk_size INTEGER,
-              inline_content BLOB,
-              symlink_target TEXT
-            );
-            CREATE TABLE IF NOT EXISTS dentries (
-              parent_ino INTEGER NOT NULL,
-              name TEXT NOT NULL,
-              child_ino INTEGER NOT NULL,
-              kind INTEGER NOT NULL,
-              PRIMARY KEY (parent_ino, name)
-            );
-            CREATE INDEX IF NOT EXISTS dentries_parent ON dentries(parent_ino);
-            CREATE TABLE IF NOT EXISTS chunks (
-              ino INTEGER NOT NULL,
-              chunk_index INTEGER NOT NULL,
-              block_key TEXT NOT NULL,
-              len INTEGER NOT NULL,
-              PRIMARY KEY (ino, chunk_index)
-            );
-            CREATE TABLE IF NOT EXISTS block_refs (
-              block_key TEXT PRIMARY KEY,
-              refcount INTEGER NOT NULL
-            );
-            CREATE TABLE IF NOT EXISTS snapshots (
-              snapshot_id INTEGER PRIMARY KEY,
-              root_ino INTEGER NOT NULL,
-              created_ns INTEGER NOT NULL
-            );
-            ",
-        )
-        .map_err(|err| VfsError::eio(format!("install SQLite metadata schema: {err}")))
-}
-
-fn load_dump(connection: &Connection) -> VfsResult<Option<MetadataDump>> {
-    let inode_count: i64 = connection
-        .query_row("SELECT COUNT(*) FROM inodes", [], |row| row.get(0))
-        .map_err(|err| VfsError::eio(format!("count SQLite inodes: {err}")))?;
-    if inode_count == 0 {
-        return Ok(None);
-    }
-
-    let mut inodes = BTreeMap::new();
-    let mut next_ino = 1;
-    let mut statement = connection
-        .prepare(
-            "SELECT ino, kind, mode, uid, gid, size, nlink, atime_ns, mtime_ns, ctime_ns,
-                    birthtime_ns, storage_mode, storage_chunk_size, inline_content, symlink_target
-             FROM inodes",
-        )
-        .map_err(|err| VfsError::eio(format!("prepare inode load: {err}")))?;
-    let rows = statement
-        .query_map([], |row| {
-            let ino: u64 = row.get(0)?;
-            let kind_id: i64 = row.get(1)?;
-            let storage_id: i64 = row.get(11)?;
-            let chunk_size: Option<u32> = row.get(12)?;
-            let inline_content: Option<Vec<u8>> = row.get(13)?;
-            let symlink_target: Option<String> = row.get(14)?;
-            let kind = match kind_id {
-                0 => InodeType::File,
-                1 => InodeType::Directory,
-                _ => InodeType::Symlink,
-            };
-            let storage = match storage_id {
-                1 => Storage::Inline(inline_content.unwrap_or_default()),
-                2 => Storage::Chunked {
-                    chunk_size: chunk_size.unwrap_or(DEFAULT_CHUNK_SIZE),
-                },
-                _ => Storage::None,
-            };
-            Ok(InodeMeta {
-                ino,
-                kind,
-                mode: row.get(2)?,
-                uid: row.get(3)?,
-                gid: row.get(4)?,
-                size: row.get(5)?,
-                nlink: row.get(6)?,
-                atime: ns_to_timespec(row.get(7)?),
-                mtime: ns_to_timespec(row.get(8)?),
-                ctime: ns_to_timespec(row.get(9)?),
-                birthtime: ns_to_timespec(row.get(10)?),
-                storage,
-                symlink_target,
-            })
-        })
-        .map_err(|err| VfsError::eio(format!("load SQLite inodes: {err}")))?;
-    for row in rows {
-        let meta = row.map_err(|err| VfsError::eio(format!("load SQLite inode row: {err}")))?;
-        next_ino = next_ino.max(meta.ino + 1);
-        inodes.insert(meta.ino, meta);
-    }
-
-    let mut dentries = BTreeMap::new();
-    let mut statement = connection
-        .prepare("SELECT parent_ino, name, child_ino FROM dentries")
-        .map_err(|err| VfsError::eio(format!("prepare dentry load: {err}")))?;
-    let rows = statement
-        .query_map([], |row| {
-            Ok((
-                (row.get::<_, u64>(0)?, row.get::<_, String>(1)?),
-                row.get::<_, u64>(2)?,
-            ))
-        })
-        .map_err(|err| VfsError::eio(format!("load SQLite dentries: {err}")))?;
-    for row in rows {
-        let (key, value) =
-            row.map_err(|err| VfsError::eio(format!("load SQLite dentry row: {err}")))?;
-        dentries.insert(key, value);
-    }
-
-    let mut chunks = BTreeMap::new();
-    let mut statement = connection
-        .prepare("SELECT ino, chunk_index, block_key, len FROM chunks")
-        .map_err(|err| VfsError::eio(format!("prepare chunk load: {err}")))?;
-    let rows = statement
-        .query_map([], |row| {
-            let index = row.get::<_, u64>(1)?;
-            Ok((
-                (row.get::<_, u64>(0)?, index),
-                ChunkRef {
-                    index,
-                    key: BlockKey(row.get(2)?),
-                    len: row.get(3)?,
-                },
-            ))
-        })
-        .map_err(|err| VfsError::eio(format!("load SQLite chunks: {err}")))?;
-    for row in rows {
-        let (key, value) =
-            row.map_err(|err| VfsError::eio(format!("load SQLite chunk row: {err}")))?;
-        chunks.insert(key, value);
-    }
-
-    let mut block_refs = BTreeMap::new();
-    let mut statement = connection
-        .prepare("SELECT block_key, refcount FROM block_refs")
-        .map_err(|err| VfsError::eio(format!("prepare block ref load: {err}")))?;
-    let rows = statement
-        .query_map([], |row| Ok((BlockKey(row.get(0)?), row.get::<_, u64>(1)?)))
-        .map_err(|err| VfsError::eio(format!("load SQLite block refs: {err}")))?;
-    for row in rows {
-        let (key, value) =
-            row.map_err(|err| VfsError::eio(format!("load SQLite block ref row: {err}")))?;
-        block_refs.insert(key, value);
-    }
-
-    Ok(Some(MetadataDump {
-        next_ino,
-        inodes,
-        dentries,
-        chunks,
-        block_refs,
-    }))
-}
-
-fn persist_dump(connection: &mut Connection, dump: &MetadataDump) -> VfsResult<()> {
-    let tx = connection
-        .transaction()
-        .map_err(|err| VfsError::eio(format!("begin SQLite metadata transaction: {err}")))?;
-    tx.execute_batch(
-        "
-        DELETE FROM snapshots;
-        DELETE FROM block_refs;
-        DELETE FROM chunks;
-        DELETE FROM dentries;
-        DELETE FROM inodes;
-        ",
-    )
-    .map_err(|err| VfsError::eio(format!("clear SQLite metadata tables: {err}")))?;
-
-    for meta in dump.inodes.values() {
-        let (storage_mode, storage_chunk_size, inline_content) = match &meta.storage {
-            Storage::None => (0, None, None),
-            Storage::Inline(data) => (1, None, Some(data.as_slice())),
-            Storage::Chunked { chunk_size } => (2, Some(*chunk_size), None),
-        };
-        tx.execute(
-            "INSERT INTO inodes
-             (ino, kind, mode, uid, gid, size, nlink, atime_ns, mtime_ns, ctime_ns, birthtime_ns,
-              storage_mode, storage_chunk_size, inline_content, symlink_target)
-             VALUES (?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?, ?)",
-            params![
-                meta.ino,
-                kind_id(meta.kind),
-                meta.mode,
-                meta.uid,
-                meta.gid,
-                meta.size,
-                meta.nlink,
-                timespec_to_ns(meta.atime),
-                timespec_to_ns(meta.mtime),
-                timespec_to_ns(meta.ctime),
-                timespec_to_ns(meta.birthtime),
-                storage_mode,
-                storage_chunk_size,
-                inline_content,
-                meta.symlink_target,
-            ],
-        )
-        .map_err(|err| VfsError::eio(format!("persist SQLite inode {}: {err}", meta.ino)))?;
-    }
-
-    for ((parent, name), child) in &dump.dentries {
-        let kind = dump
-            .inodes
-            .get(child)
-            .map(|meta| meta.kind)
-            .ok_or_else(|| VfsError::eio(format!("dentry points to missing inode {child}")))?;
-        tx.execute(
-            "INSERT INTO dentries (parent_ino, name, child_ino, kind) VALUES (?, ?, ?, ?)",
-            params![parent, name, child, kind_id(kind)],
-        )
-        .map_err(|err| VfsError::eio(format!("persist SQLite dentry {name}: {err}")))?;
-    }
-
-    for ((ino, index), chunk) in &dump.chunks {
-        tx.execute(
-            "INSERT INTO chunks (ino, chunk_index, block_key, len) VALUES (?, ?, ?, ?)",
-            params![ino, index, chunk.key.0, chunk.len],
-        )
-        .map_err(|err| VfsError::eio(format!("persist SQLite chunk {ino}/{index}: {err}")))?;
-    }
-
-    for (key, refcount) in &dump.block_refs {
-        tx.execute(
-            "INSERT INTO block_refs (block_key, refcount) VALUES (?, ?)",
-            params![key.0, refcount],
-        )
-        .map_err(|err| VfsError::eio(format!("persist SQLite block ref {}: {err}", key.0)))?;
-    }
-
-    tx.commit()
-        .map_err(|err| VfsError::eio(format!("commit SQLite metadata transaction: {err}")))
-}
-
-fn kind_id(kind: InodeType) -> i64 {
-    match kind {
-        InodeType::File => 0,
-        InodeType::Directory => 1,
-        InodeType::Symlink => 2,
-    }
-}
-
-fn timespec_to_ns(time: Timespec) -> i64 {
-    time.sec.saturating_mul(1_000_000_000) + i64::from(time.nsec)
-}
-
-fn ns_to_timespec(ns: i64) -> Timespec {
-    Timespec {
-        sec: ns / 1_000_000_000,
-        nsec: ns.rem_euclid(1_000_000_000) as u32,
-    }
-}
-
-#[async_trait]
-impl MetadataStore for SqliteMetadataStore {
-    async fn resolve(&self, path: &str) -> VfsResult<InodeMeta> {
-        self.inner.resolve(path).await
-    }
-
-    async fn resolve_parent(&self, path: &str) -> VfsResult<(InodeMeta, String)> {
-        self.inner.resolve_parent(path).await
-    }
-
-    async fn lstat(&self, path: &str) -> VfsResult<InodeMeta> {
-        self.inner.lstat(path).await
-    }
-
-    async fn list_dir(&self, ino: u64) -> VfsResult<Vec<DentryStat>> {
-        self.inner.list_dir(ino).await
-    }
-
-    async fn create(
-        &self,
-        parent: u64,
-        name: &str,
-        attrs: CreateInodeAttrs,
-    ) -> VfsResult<InodeMeta> {
-        let result = self.inner.create(parent, name, attrs).await;
-        if result.is_ok() {
-            self.persist()?;
-        }
-        result
-    }
-
-    async fn link(&self, parent: u64, name: &str, target: u64) -> VfsResult<()> {
-        let result = self.inner.link(parent, name, target).await;
-        if result.is_ok() {
-            self.persist()?;
-        }
-        result
-    }
-
-    async fn remove(&self, parent: u64, name: &str) -> VfsResult<Vec<BlockKey>> {
-        let result = self.inner.remove(parent, name).await;
-        if result.is_ok() {
-            self.persist()?;
-        }
-        result
-    }
-
-    async fn rename(
-        &self,
-        src_parent: u64,
-        src: &str,
-        dst_parent: u64,
-        dst: &str,
-    ) -> VfsResult<Vec<BlockKey>> {
-        let result = self.inner.rename(src_parent, src, dst_parent, dst).await;
-        if result.is_ok() {
-            self.persist()?;
-        }
-        result
-    }
-
-    async fn set_attr(&self, ino: u64, patch: InodePatch) -> VfsResult<Vec<BlockKey>> {
-        let result = self.inner.set_attr(ino, patch).await;
-        if result.is_ok() {
-            self.persist()?;
-        }
-        result
-    }
-
-    async fn commit_write(
-        &self,
-        ino: u64,
-        edits: Vec<ChunkEdit>,
-        new_size: u64,
-    ) -> VfsResult<Vec<BlockKey>> {
-        let result = self.inner.commit_write(ino, edits, new_size).await;
-        if result.is_ok() {
-            self.persist()?;
-        }
-        result
-    }
-
-    async fn get_chunks(&self, ino: u64, range: ChunkRange) -> VfsResult<Vec<ChunkRef>> {
-        self.inner.get_chunks(ino, range).await
-    }
-
-    async fn snapshot(&self, root: u64) -> VfsResult<SnapshotId> {
-        self.inner.snapshot(root).await
-    }
-
-    async fn fork(&self, snap: SnapshotId) -> VfsResult<u64> {
-        let result = self.inner.fork(snap).await;
-        if result.is_ok() {
-            self.persist()?;
-        }
-        result
-    }
-
-    async fn gc(&self) -> VfsResult<Vec<BlockKey>> {
-        self.inner.gc().await
-    }
-}
diff --git a/crates/secure-exec-vfs/src/s3/block_store.rs b/crates/secure-exec-vfs/src/s3/block_store.rs
deleted file mode 100644
index 56b096a91..000000000
--- a/crates/secure-exec-vfs/src/s3/block_store.rs
+++ /dev/null
@@ -1,195 +0,0 @@
-use async_trait::async_trait;
-use aws_sdk_s3::primitives::{ByteStream, ByteStreamError};
-use aws_sdk_s3::types::{Delete, ObjectIdentifier};
-use aws_sdk_s3::Client;
-use vfs::engine::{BlockKey, BlockStore, VfsError, VfsResult};
-
-#[derive(Debug, Clone, Default)]
-pub struct S3BlockStoreOptions {
-    pub prefix: String,
-}
-
-#[derive(Debug, Clone)]
-pub struct S3BlockStore {
-    client: Client,
-    bucket: String,
-    options: S3BlockStoreOptions,
-}
-
-impl S3BlockStore {
-    pub fn new(client: Client, bucket: impl Into<String>) -> Self {
-        Self::with_options(client, bucket, S3BlockStoreOptions::default())
-    }
-
-    pub fn with_options(
-        client: Client,
-        bucket: impl Into<String>,
-        options: S3BlockStoreOptions,
-    ) -> Self {
-        Self {
-            client,
-            bucket: bucket.into(),
-            options,
-        }
-    }
-
-    fn key_for(&self, key: &BlockKey) -> String {
-        format!("{}{}", self.options.prefix, key.0)
-    }
-}
-
-#[async_trait]
-impl BlockStore for S3BlockStore {
-    async fn get(&self, key: &BlockKey) -> VfsResult<Vec<u8>> {
-        let object_key = self.key_for(key);
-        let response = self
-            .client
-            .get_object()
-            .bucket(&self.bucket)
-            .key(&object_key)
-            .send()
-            .await
-            .map_err(|err| s3_error(format!("get s3 block '{object_key}': {err}")))?;
-        collect_body(response.body, &object_key).await
-    }
-
-    async fn get_range(&self, key: &BlockKey, off: u64, len: u64) -> VfsResult<Vec<u8>> {
-        if len == 0 {
-            return Ok(Vec::new());
-        }
-        let object_key = self.key_for(key);
-        let end = off
-            .checked_add(len)
-            .and_then(|value| value.checked_sub(1))
-            .ok_or_else(|| VfsError::einval("invalid S3 byte range"))?;
-        let response = self
-            .client
-            .get_object()
-            .bucket(&self.bucket)
-            .key(&object_key)
-            .range(format!("bytes={off}-{end}"))
-            .send()
-            .await
-            .map_err(|err| s3_error(format!("get s3 block range '{object_key}': {err}")))?;
-        collect_body(response.body, &object_key).await
-    }
-
-    async fn put(&self, key: &BlockKey, data: &[u8]) -> VfsResult<()> {
-        let object_key = self.key_for(key);
-        self.client
-            .put_object()
-            .bucket(&self.bucket)
-            .key(&object_key)
-            .body(ByteStream::from(data.to_vec()))
-            .send()
-            .await
-            .map_err(|err| s3_error(format!("put s3 block '{object_key}': {err}")))?;
-        Ok(())
-    }
-
-    async fn exists(&self, key: &BlockKey) -> VfsResult<bool> {
-        let object_key = self.key_for(key);
-        match self
-            .client
-            .head_object()
-            .bucket(&self.bucket)
-            .key(&object_key)
-            .send()
-            .await
-        {
-            Ok(_) => Ok(true),
-            Err(err)
-                if err.as_service_error().is_some_and(|err| {
-                    err.is_not_found()
-                        || matches!(err.meta().code(), Some("NotFound" | "NoSuchKey"))
-                }) =>
-            {
-                Ok(false)
-            }
-            Err(err) => Err(s3_error(format!("head s3 block '{object_key}': {err}"))),
-        }
-    }
-
-    async fn delete_many(&self, keys: &[BlockKey]) -> VfsResult<()> {
-        let mut errors = Vec::new();
-        for chunk in keys.chunks(1000) {
-            let mut object_keys = Vec::with_capacity(chunk.len());
-            let mut objects = Vec::with_capacity(chunk.len());
-            for key in chunk {
-                let object_key = self.key_for(key);
-                let object = ObjectIdentifier::builder()
-                    .key(&object_key)
-                    .build()
-                    .map_err(|err| {
-                        s3_error(format!("build s3 delete key '{object_key}': {err}"))
-                    })?;
-                object_keys.push(object_key);
-                objects.push(object);
-            }
-            let delete = Delete::builder()
-                .set_objects(Some(objects))
-                .quiet(true)
-                .build()
-                .map_err(|err| s3_error(format!("build s3 delete batch: {err}")))?;
-            match self
-                .client
-                .delete_objects()
-                .bucket(&self.bucket)
-                .delete(delete)
-                .send()
-                .await
-            {
-                Ok(response) => {
-                    for error in response.errors() {
-                        let key = error.key().unwrap_or("<unknown>");
-                        let code = error.code().unwrap_or("unknown");
-                        let message = error.message().unwrap_or("unknown error");
-                        errors.push(format!("delete s3 block '{key}': {code}: {message}"));
-                    }
-                }
-                Err(err) => errors.push(format!(
-                    "delete s3 block batch [{}]: {err}",
-                    object_keys.join(", ")
-                )),
-            }
-        }
-        if errors.is_empty() {
-            Ok(())
-        } else {
-            Err(s3_error(format!(
-                "delete {} s3 blocks failed: {}",
-                errors.len(),
-                errors.join("; ")
-            )))
-        }
-    }
-
-    async fn copy(&self, src: &BlockKey, dst: &BlockKey) -> VfsResult<()> {
-        let src_key = self.key_for(src);
-        let dst_key = self.key_for(dst);
-        self.client
-            .copy_object()
-            .bucket(&self.bucket)
-            .copy_source(format!("{}/{}", self.bucket, src_key))
-            .key(&dst_key)
-            .send()
-            .await
-            .map_err(|err| s3_error(format!("copy s3 block '{src_key}' to '{dst_key}': {err}")))?;
-        Ok(())
-    }
-}
-
-pub(crate) async fn collect_body(body: ByteStream, key: &str) -> VfsResult<Vec<u8>> {
-    body.collect()
-        .await
-        .map_err(|err| body_error(key, err))
-        .map(|bytes| bytes.into_bytes().to_vec())
-}
-
-pub(crate) fn s3_error(message: impl Into<String>) -> VfsError {
-    VfsError::eio(message)
-}
-
-fn body_error(key: &str, err: ByteStreamError) -> VfsError {
-    VfsError::eio(format!("read s3 object '{key}': {err}"))
-}
diff --git a/crates/secure-exec-vfs/src/s3/mod.rs b/crates/secure-exec-vfs/src/s3/mod.rs
deleted file mode 100644
index 68b9f5bf4..000000000
--- a/crates/secure-exec-vfs/src/s3/mod.rs
+++ /dev/null
@@ -1,5 +0,0 @@
-mod block_store;
-mod object_backend;
-
-pub use block_store::{S3BlockStore, S3BlockStoreOptions};
-pub use object_backend::{S3ObjectBackend, S3ObjectBackendOptions};
diff --git a/crates/secure-exec-vfs/src/s3/object_backend.rs b/crates/secure-exec-vfs/src/s3/object_backend.rs
deleted file mode 100644
index 86d215dd6..000000000
--- a/crates/secure-exec-vfs/src/s3/object_backend.rs
+++ /dev/null
@@ -1,238 +0,0 @@
-use super::block_store::{collect_body, s3_error};
-use async_trait::async_trait;
-use aws_sdk_s3::primitives::ByteStream;
-use aws_sdk_s3::Client;
-use std::collections::HashMap;
-use vfs::engine::{InodeType, ObjectBackend, ObjectEntry, ObjectMeta, Timespec, VfsResult};
-
-#[derive(Debug, Clone, Default)]
-pub struct S3ObjectBackendOptions {
-    pub prefix: String,
-}
-
-#[derive(Debug, Clone)]
-pub struct S3ObjectBackend {
-    client: Client,
-    bucket: String,
-    options: S3ObjectBackendOptions,
-}
-
-impl S3ObjectBackend {
-    pub fn new(client: Client, bucket: impl Into<String>) -> Self {
-        Self::with_options(client, bucket, S3ObjectBackendOptions::default())
-    }
-
-    pub fn with_options(
-        client: Client,
-        bucket: impl Into<String>,
-        options: S3ObjectBackendOptions,
-    ) -> Self {
-        Self {
-            client,
-            bucket: bucket.into(),
-            options,
-        }
-    }
-
-    fn key_for(&self, key: &str) -> String {
-        format!("{}{}", self.options.prefix, key)
-    }
-
-    fn strip_prefix<'a>(&self, key: &'a str) -> &'a str {
-        key.strip_prefix(&self.options.prefix).unwrap_or(key)
-    }
-}
-
-#[async_trait]
-impl ObjectBackend for S3ObjectBackend {
-    async fn list(&self, prefix: &str) -> VfsResult<Vec<ObjectEntry>> {
-        let s3_prefix = self.key_for(prefix);
-        let mut continuation = None;
-        let mut entries = Vec::new();
-        loop {
-            let response = self
-                .client
-                .list_objects_v2()
-                .bucket(&self.bucket)
-                .prefix(&s3_prefix)
-                .delimiter("/")
-                .set_continuation_token(continuation)
-                .send()
-                .await
-                .map_err(|err| s3_error(format!("list s3 prefix '{s3_prefix}': {err}")))?;
-
-            for object in response.contents() {
-                let Some(key) = object.key() else {
-                    continue;
-                };
-                entries.push(ObjectEntry {
-                    name: self.strip_prefix(key).to_string(),
-                    size: object.size().unwrap_or(0).max(0) as u64,
-                    mtime: object
-                        .last_modified()
-                        .map(timespec_from_smithy)
-                        .unwrap_or_else(Timespec::now),
-                    is_prefix: false,
-                });
-            }
-
-            for prefix in response.common_prefixes() {
-                let Some(prefix) = prefix.prefix() else {
-                    continue;
-                };
-                entries.push(ObjectEntry {
-                    name: self.strip_prefix(prefix).to_string(),
-                    size: 0,
-                    mtime: Timespec::now(),
-                    is_prefix: true,
-                });
-            }
-
-            if response.is_truncated().unwrap_or(false) {
-                continuation = response.next_continuation_token().map(ToOwned::to_owned);
-            } else {
-                break;
-            }
-        }
-        Ok(entries)
-    }
-
-    async fn head(&self, key: &str) -> VfsResult<Option<ObjectMeta>> {
-        let s3_key = self.key_for(key);
-        let response = match self
-            .client
-            .head_object()
-            .bucket(&self.bucket)
-            .key(&s3_key)
-            .send()
-            .await
-        {
-            Ok(response) => response,
-            Err(err)
-                if err.as_service_error().is_some_and(|err| {
-                    err.is_not_found()
-                        || matches!(err.meta().code(), Some("NotFound" | "NoSuchKey"))
-                }) =>
-            {
-                return Ok(None);
-            }
-            Err(err) => return Err(s3_error(format!("head s3 object '{s3_key}': {err}"))),
-        };
-
-        let metadata = response.metadata();
-        let kind = metadata
-            .and_then(|metadata| metadata.get("vfs-kind"))
-            .map(|kind| match kind.as_str() {
-                "directory" => InodeType::Directory,
-                "symlink" => InodeType::Symlink,
-                _ => InodeType::File,
-            })
-            .unwrap_or(InodeType::File);
-        Ok(Some(ObjectMeta {
-            size: response.content_length().unwrap_or(0).max(0) as u64,
-            mtime: response
-                .last_modified()
-                .map(timespec_from_smithy)
-                .unwrap_or_else(Timespec::now),
-            mode: metadata
-                .and_then(|metadata| metadata.get("vfs-mode"))
-                .and_then(|mode| u32::from_str_radix(mode, 8).ok())
-                .unwrap_or(0o644),
-            uid: metadata
-                .and_then(|metadata| metadata.get("vfs-uid"))
-                .and_then(|uid| uid.parse().ok())
-                .unwrap_or(0),
-            gid: metadata
-                .and_then(|metadata| metadata.get("vfs-gid"))
-                .and_then(|gid| gid.parse().ok())
-                .unwrap_or(0),
-            kind,
-            symlink_target: metadata
-                .and_then(|metadata| metadata.get("vfs-symlink-target").cloned()),
-        }))
-    }
-
-    async fn get_range(&self, key: &str, off: u64, len: u64) -> VfsResult<Vec<u8>> {
-        if len == 0 {
-            return Ok(Vec::new());
-        }
-        let s3_key = self.key_for(key);
-        let end = off
-            .checked_add(len)
-            .and_then(|value| value.checked_sub(1))
-            .ok_or_else(|| vfs::engine::VfsError::einval("invalid S3 byte range"))?;
-        let response = self
-            .client
-            .get_object()
-            .bucket(&self.bucket)
-            .key(&s3_key)
-            .range(format!("bytes={off}-{end}"))
-            .send()
-            .await
-            .map_err(|err| s3_error(format!("get s3 object range '{s3_key}': {err}")))?;
-        collect_body(response.body, &s3_key).await
-    }
-
-    async fn put(&self, key: &str, data: &[u8], meta: ObjectMeta) -> VfsResult<()> {
-        let s3_key = self.key_for(key);
-        let mut metadata = HashMap::new();
-        metadata.insert("vfs-kind".to_string(), kind_name(meta.kind).to_string());
-        metadata.insert("vfs-mode".to_string(), format!("{:o}", meta.mode));
-        metadata.insert("vfs-uid".to_string(), meta.uid.to_string());
-        metadata.insert("vfs-gid".to_string(), meta.gid.to_string());
-        if let Some(target) = meta.symlink_target {
-            metadata.insert("vfs-symlink-target".to_string(), target);
-        }
-        self.client
-            .put_object()
-            .bucket(&self.bucket)
-            .key(&s3_key)
-            .body(ByteStream::from(data.to_vec()))
-            .set_metadata(Some(metadata))
-            .send()
-            .await
-            .map_err(|err| s3_error(format!("put s3 object '{s3_key}': {err}")))?;
-        Ok(())
-    }
-
-    async fn copy(&self, src: &str, dst: &str) -> VfsResult<()> {
-        let src_key = self.key_for(src);
-        let dst_key = self.key_for(dst);
-        self.client
-            .copy_object()
-            .bucket(&self.bucket)
-            .copy_source(format!("{}/{}", self.bucket, src_key))
-            .key(&dst_key)
-            .send()
-            .await
-            .map_err(|err| s3_error(format!("copy s3 object '{src_key}' to '{dst_key}': {err}")))?;
-        Ok(())
-    }
-
-    async fn delete(&self, key: &str) -> VfsResult<()> {
-        let s3_key = self.key_for(key);
-        self.client
-            .delete_object()
-            .bucket(&self.bucket)
-            .key(&s3_key)
-            .send()
-            .await
-            .map_err(|err| s3_error(format!("delete s3 object '{s3_key}': {err}")))?;
-        Ok(())
-    }
-}
-
-fn kind_name(kind: InodeType) -> &'static str {
-    match kind {
-        InodeType::File => "file",
-        InodeType::Directory => "directory",
-        InodeType::Symlink => "symlink",
-    }
-}
-
-fn timespec_from_smithy(time: &aws_sdk_s3::primitives::DateTime) -> Timespec {
-    Timespec {
-        sec: time.secs(),
-        nsec: 0,
-    }
-}
diff --git a/crates/secure-exec-vfs/tests/local.rs b/crates/secure-exec-vfs/tests/local.rs
deleted file mode 100644
index 6c9b7ed72..000000000
--- a/crates/secure-exec-vfs/tests/local.rs
+++ /dev/null
@@ -1,97 +0,0 @@
-use secure_exec_vfs::{FileBlockStore, SqliteMetadataStore};
-use vfs::engine::engines::{ChunkedFs, ChunkedFsOptions};
-use vfs::engine::mem::MemoryBlockStore;
-use vfs::engine::{BlockKey, BlockStore, VirtualFileSystem};
-
-#[tokio::test]
-async fn file_block_store_persists_blocks() {
-    let temp = tempfile::tempdir().unwrap();
-    let store = FileBlockStore::new(temp.path()).unwrap();
-    let key = BlockKey::from_content(b"persistent");
-    store.put(&key, b"persistent").await.unwrap();
-    assert_eq!(store.get(&key).await.unwrap(), b"persistent");
-
-    let reopened = FileBlockStore::new(temp.path()).unwrap();
-    assert_eq!(reopened.get(&key).await.unwrap(), b"persistent");
-}
-
-#[tokio::test]
-async fn sqlite_store_installs_canonical_schema() {
-    let store = SqliteMetadataStore::in_memory().unwrap();
-    assert!(store.has_schema().unwrap());
-}
-
-#[tokio::test]
-async fn sqlite_store_reopens_persisted_metadata() {
-    let temp = tempfile::tempdir().unwrap();
-    let db = temp.path().join("metadata.sqlite");
-    let blocks = MemoryBlockStore::new();
-
-    {
-        let metadata = SqliteMetadataStore::open(&db).unwrap();
-        let fs = ChunkedFs::with_options(
-            metadata,
-            blocks.clone(),
-            ChunkedFsOptions {
-                inline_threshold: 1,
-                chunk_size: 4,
-                ..ChunkedFsOptions::default()
-            },
-        );
-        fs.mkdir("/dir", false).await.unwrap();
-        fs.write_file("/dir/file", b"persisted").await.unwrap();
-    }
-
-    let metadata = SqliteMetadataStore::open(&db).unwrap();
-    let fs = ChunkedFs::with_options(
-        metadata,
-        blocks,
-        ChunkedFsOptions {
-            inline_threshold: 1,
-            chunk_size: 4,
-            ..ChunkedFsOptions::default()
-        },
-    );
-    assert_eq!(fs.read_file("/dir/file").await.unwrap(), b"persisted");
-    assert_eq!(fs.read_dir("/dir").await.unwrap(), vec!["file"]);
-}
-
-#[tokio::test]
-async fn chunked_local_reopens_and_cleans_stale_blocks() {
-    let temp = tempfile::tempdir().unwrap();
-    let db = temp.path().join("metadata.sqlite");
-    let block_root = temp.path().join("blocks");
-    let stale_key = BlockKey::from_content(b"efgh");
-
-    {
-        let metadata = SqliteMetadataStore::open(&db).unwrap();
-        let blocks = FileBlockStore::new(&block_root).unwrap();
-        let fs = ChunkedFs::with_options(
-            metadata,
-            blocks,
-            ChunkedFsOptions {
-                inline_threshold: 1,
-                chunk_size: 4,
-                ..ChunkedFsOptions::default()
-            },
-        );
-        fs.write_file("/file", b"abcdefgh").await.unwrap();
-    }
-
-    let metadata = SqliteMetadataStore::open(&db).unwrap();
-    let blocks = FileBlockStore::new(&block_root).unwrap();
-    let fs = ChunkedFs::with_options(
-        metadata,
-        blocks.clone(),
-        ChunkedFsOptions {
-            inline_threshold: 1,
-            chunk_size: 4,
-            ..ChunkedFsOptions::default()
-        },
-    );
-
-    assert_eq!(fs.read_file("/file").await.unwrap(), b"abcdefgh");
-    fs.truncate("/file", 5).await.unwrap();
-    assert_eq!(fs.read_file("/file").await.unwrap(), b"abcde");
-    assert!(!blocks.exists(&stale_key).await.unwrap());
-}
diff --git a/crates/secure-exec-vfs/tests/s3.rs b/crates/secure-exec-vfs/tests/s3.rs
deleted file mode 100644
index 7859ff90c..000000000
--- a/crates/secure-exec-vfs/tests/s3.rs
+++ /dev/null
@@ -1,588 +0,0 @@
-use aws_config::BehaviorVersion;
-use aws_credential_types::Credentials;
-use aws_sdk_s3::config::Builder as S3ConfigBuilder;
-use aws_sdk_s3::Client;
-use secure_exec_vfs::{S3BlockStore, S3BlockStoreOptions, S3ObjectBackend, S3ObjectBackendOptions};
-use std::collections::{BTreeMap, BTreeSet};
-use std::io::{Read, Write};
-use std::net::{TcpListener, TcpStream};
-use std::sync::atomic::{AtomicBool, Ordering};
-use std::sync::{Arc, Mutex};
-use std::thread::{self, JoinHandle};
-use std::time::Duration;
-use vfs::engine::engines::{ChunkedFs, ChunkedFsOptions, ObjectFs};
-use vfs::engine::{BlockKey, BlockStore, VirtualFileSystem};
-
-#[tokio::test]
-async fn s3_block_store_round_trips_and_cleans_blocks() {
-    let server = MockS3Server::start();
-    let store = S3BlockStore::with_options(
-        s3_client(server.base_url()).await,
-        "test-bucket",
-        S3BlockStoreOptions {
-            prefix: "blocks/".to_string(),
-        },
-    );
-    let first = BlockKey::from_content(b"abcdef");
-    let second = BlockKey::from_content(b"ghijkl");
-
-    store.put(&first, b"abcdef").await.unwrap();
-    assert!(store.exists(&first).await.unwrap());
-    assert_eq!(store.get_range(&first, 2, 3).await.unwrap(), b"cde");
-    store.copy(&first, &second).await.unwrap();
-    assert_eq!(store.get(&second).await.unwrap(), b"abcdef");
-
-    store
-        .delete_many(&[first.clone(), second.clone()])
-        .await
-        .unwrap();
-    assert!(!store.exists(&first).await.unwrap());
-    assert!(!store.exists(&second).await.unwrap());
-    assert!(server
-        .requests()
-        .iter()
-        .any(|request| request.method == "POST"));
-}
-
-#[tokio::test]
-async fn object_s3_round_trips_native_objects() {
-    let server = MockS3Server::start();
-    let backend = S3ObjectBackend::with_options(
-        s3_client(server.base_url()).await,
-        "test-bucket",
-        S3ObjectBackendOptions {
-            prefix: "objects/".to_string(),
-        },
-    );
-    let fs = ObjectFs::new(backend);
-
-    fs.write_file("/dir/file.txt", b"hello object s3")
-        .await
-        .unwrap();
-    assert_eq!(
-        fs.read_file("/dir/file.txt").await.unwrap(),
-        b"hello object s3"
-    );
-    assert_eq!(fs.pread("/dir/file.txt", 6, 6).await.unwrap(), b"object");
-    assert!(fs.exists("/dir/file.txt").await);
-    assert_eq!(fs.read_dir("/dir").await.unwrap(), vec!["file.txt"]);
-
-    fs.rename("/dir/file.txt", "/dir/renamed.txt")
-        .await
-        .unwrap();
-    assert_eq!(
-        fs.read_file("/dir/renamed.txt").await.unwrap(),
-        b"hello object s3"
-    );
-    assert!(!fs.exists("/dir/file.txt").await);
-    assert!(server
-        .object_keys()
-        .iter()
-        .any(|key| key == "test-bucket/objects/dir/renamed.txt"));
-}
-
-#[tokio::test]
-async fn chunked_s3_reopens_metadata_and_cleans_truncated_chunks() {
-    let server = MockS3Server::start();
-    let temp = tempfile::tempdir().unwrap();
-    let db = temp.path().join("metadata.sqlite");
-    let stale_key = BlockKey::from_content(b"efgh");
-
-    {
-        let metadata = secure_exec_vfs::SqliteMetadataStore::open(&db).unwrap();
-        let blocks = S3BlockStore::with_options(
-            s3_client(server.base_url()).await,
-            "test-bucket",
-            S3BlockStoreOptions {
-                prefix: "chunked/blocks/".to_string(),
-            },
-        );
-        let fs = ChunkedFs::with_options(
-            metadata,
-            blocks,
-            ChunkedFsOptions {
-                inline_threshold: 1,
-                chunk_size: 4,
-                ..ChunkedFsOptions::default()
-            },
-        );
-        fs.write_file("/file", b"abcdefgh").await.unwrap();
-    }
-
-    let metadata = secure_exec_vfs::SqliteMetadataStore::open(&db).unwrap();
-    let blocks = S3BlockStore::with_options(
-        s3_client(server.base_url()).await,
-        "test-bucket",
-        S3BlockStoreOptions {
-            prefix: "chunked/blocks/".to_string(),
-        },
-    );
-    let fs = ChunkedFs::with_options(
-        metadata,
-        blocks,
-        ChunkedFsOptions {
-            inline_threshold: 1,
-            chunk_size: 4,
-            ..ChunkedFsOptions::default()
-        },
-    );
-
-    assert_eq!(fs.read_file("/file").await.unwrap(), b"abcdefgh");
-    fs.truncate("/file", 5).await.unwrap();
-    assert_eq!(fs.read_file("/file").await.unwrap(), b"abcde");
-    assert!(!server
-        .object_keys()
-        .iter()
-        .any(|key| { key == &format!("test-bucket/chunked/blocks/{}", stale_key.0) }));
-}
-
-async fn s3_client(endpoint: &str) -> Client {
-    let shared_config = aws_config::defaults(BehaviorVersion::latest())
-        .region(aws_sdk_s3::config::Region::new("us-east-1"))
-        .credentials_provider(Credentials::new(
-            "minioadmin",
-            "minioadmin",
-            None,
-            None,
-            "secure-exec-vfs-test",
-        ))
-        .load()
-        .await;
-    Client::from_conf(
-        S3ConfigBuilder::from(&shared_config)
-            .endpoint_url(endpoint)
-            .force_path_style(true)
-            .build(),
-    )
-}
-
-#[derive(Clone, Debug)]
-struct LoggedRequest {
-    method: String,
-}
-
-#[derive(Clone, Debug, Default)]
-struct StoredObject {
-    body: Vec<u8>,
-    metadata: BTreeMap<String, String>,
-}
-
-struct MockS3Server {
-    base_url: String,
-    shutdown: Arc<AtomicBool>,
-    objects: Arc<Mutex<BTreeMap<String, StoredObject>>>,
-    requests: Arc<Mutex<Vec<LoggedRequest>>>,
-    handle: Option<JoinHandle<()>>,
-}
-
-impl MockS3Server {
-    fn start() -> Self {
-        let listener = TcpListener::bind("127.0.0.1:0").expect("bind mock s3");
-        listener
-            .set_nonblocking(true)
-            .expect("configure mock s3 listener");
-        let address = listener.local_addr().expect("resolve mock s3 address");
-        let shutdown = Arc::new(AtomicBool::new(false));
-        let objects = Arc::new(Mutex::new(BTreeMap::new()));
-        let requests = Arc::new(Mutex::new(Vec::new()));
-        let shutdown_for_thread = Arc::clone(&shutdown);
-        let objects_for_thread = Arc::clone(&objects);
-        let requests_for_thread = Arc::clone(&requests);
-
-        let handle = thread::spawn(move || {
-            while !shutdown_for_thread.load(Ordering::SeqCst) {
-                match listener.accept() {
-                    Ok((stream, _)) => {
-                        handle_stream(stream, &objects_for_thread, &requests_for_thread)
-                    }
-                    Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                        thread::sleep(Duration::from_millis(10));
-                    }
-                    Err(_) => break,
-                }
-            }
-        });
-
-        Self {
-            base_url: format!("http://{}", address),
-            shutdown,
-            objects,
-            requests,
-            handle: Some(handle),
-        }
-    }
-
-    fn base_url(&self) -> &str {
-        &self.base_url
-    }
-
-    fn object_keys(&self) -> Vec<String> {
-        self.objects
-            .lock()
-            .expect("lock mock s3 objects")
-            .keys()
-            .cloned()
-            .collect()
-    }
-
-    fn requests(&self) -> Vec<LoggedRequest> {
-        self.requests.lock().expect("lock mock s3 requests").clone()
-    }
-}
-
-impl Drop for MockS3Server {
-    fn drop(&mut self) {
-        self.shutdown.store(true, Ordering::SeqCst);
-        if let Some(handle) = self.handle.take() {
-            handle.join().expect("join mock s3 thread");
-        }
-    }
-}
-
-fn handle_stream(
-    mut stream: TcpStream,
-    objects: &Arc<Mutex<BTreeMap<String, StoredObject>>>,
-    requests: &Arc<Mutex<Vec<LoggedRequest>>>,
-) {
-    stream
-        .set_read_timeout(Some(Duration::from_secs(2)))
-        .expect("set mock s3 read timeout");
-
-    let mut buffer = Vec::new();
-    let mut header_end = None;
-    while header_end.is_none() {
-        let mut chunk = [0; 1024];
-        match stream.read(&mut chunk) {
-            Ok(0) => return,
-            Ok(read) => {
-                buffer.extend_from_slice(&chunk[..read]);
-                header_end = find_header_end(&buffer);
-            }
-            Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => continue,
-            Err(_) => return,
-        }
-    }
-
-    let header_end = header_end.expect("parse mock s3 headers");
-    let header_text = String::from_utf8_lossy(&buffer[..header_end]).into_owned();
-    let mut lines = header_text.split("\r\n");
-    let request_line = match lines.next() {
-        Some(line) if !line.is_empty() => line,
-        _ => return,
-    };
-    let mut request_parts = request_line.split_whitespace();
-    let method = request_parts.next().unwrap_or_default().to_owned();
-    let raw_target = request_parts.next().unwrap_or_default();
-    let (raw_path, raw_query) = raw_target.split_once('?').unwrap_or((raw_target, ""));
-    let raw_query = raw_query.to_owned();
-    let path = decode_url_component(raw_path);
-
-    let mut headers = BTreeMap::new();
-    let mut content_length = 0usize;
-    for line in lines {
-        if let Some((name, value)) = line.split_once(':') {
-            let name = name.trim().to_ascii_lowercase();
-            let value = value.trim().to_owned();
-            if name == "content-length" {
-                content_length = value.parse::<usize>().unwrap_or(0);
-            }
-            headers.insert(name, value);
-        }
-    }
-
-    while buffer.len() < header_end + 4 + content_length {
-        let mut chunk = [0; 1024];
-        match stream.read(&mut chunk) {
-            Ok(0) => break,
-            Ok(read) => buffer.extend_from_slice(&chunk[..read]),
-            Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => continue,
-            Err(_) => break,
-        }
-    }
-    let body = buffer[header_end + 4..header_end + 4 + content_length].to_vec();
-    requests
-        .lock()
-        .expect("lock mock s3 request log")
-        .push(LoggedRequest {
-            method: method.clone(),
-        });
-
-    match method.as_str() {
-        "GET" if raw_query.contains("list-type=2") => {
-            let query = parse_query(&raw_query);
-            let xml = list_objects_xml(
-                &path,
-                query.get("prefix").map(String::as_str).unwrap_or_default(),
-                query.get("delimiter").map(String::as_str),
-                objects,
-            );
-            send_response(&mut stream, 200, "OK", "application/xml", xml.as_bytes());
-        }
-        "GET" => {
-            let key = path.trim_start_matches('/');
-            if let Some(object) = objects
-                .lock()
-                .expect("lock mock s3 objects")
-                .get(key)
-                .cloned()
-            {
-                let bytes = apply_range(&object.body, headers.get("range").map(String::as_str));
-                send_response(&mut stream, 200, "OK", "application/octet-stream", &bytes);
-            } else {
-                send_not_found(&mut stream);
-            }
-        }
-        "HEAD" => {
-            let key = path.trim_start_matches('/');
-            let object = objects
-                .lock()
-                .expect("lock mock s3 objects")
-                .get(key)
-                .cloned();
-            match object {
-                Some(object) => send_head_response(&mut stream, 200, "OK", &object),
-                None => send_head_response(&mut stream, 404, "Not Found", &StoredObject::default()),
-            }
-        }
-        "PUT" => {
-            let key = path.trim_start_matches('/').to_owned();
-            let object = if let Some(source) = headers.get("x-amz-copy-source") {
-                let source = decode_url_component(source)
-                    .trim_start_matches('/')
-                    .to_owned();
-                objects
-                    .lock()
-                    .expect("lock mock s3 objects")
-                    .get(&source)
-                    .cloned()
-                    .unwrap_or_default()
-            } else {
-                StoredObject {
-                    body,
-                    metadata: headers
-                        .iter()
-                        .filter_map(|(name, value)| {
-                            name.strip_prefix("x-amz-meta-")
-                                .map(|name| (name.to_string(), value.clone()))
-                        })
-                        .collect(),
-                }
-            };
-            objects
-                .lock()
-                .expect("lock mock s3 objects")
-                .insert(key, object);
-            send_response(&mut stream, 200, "OK", "application/xml", b"");
-        }
-        "DELETE" => {
-            objects
-                .lock()
-                .expect("lock mock s3 objects")
-                .remove(path.trim_start_matches('/'));
-            send_response(&mut stream, 204, "No Content", "application/xml", b"");
-        }
-        "POST" if raw_query.starts_with("delete") => {
-            let keys = parse_delete_objects_keys(&body);
-            let bucket = path.trim_matches('/');
-            let mut objects = objects.lock().expect("lock mock s3 objects");
-            if keys.is_empty() {
-                let bucket_prefix = format!("{bucket}/");
-                objects.retain(|key, _| !key.starts_with(&bucket_prefix));
-            } else {
-                for key in keys {
-                    objects.remove(&format!("{bucket}/{key}"));
-                }
-            }
-            send_response(
-                &mut stream,
-                200,
-                "OK",
-                "application/xml",
-                br#"<?xml version="1.0" encoding="UTF-8"?><DeleteResult xmlns="http://s3.amazonaws.com/doc/2006-03-01/"/>"#,
-            );
-        }
-        _ => send_response(
-            &mut stream,
-            405,
-            "Method Not Allowed",
-            "text/plain",
-            b"unsupported",
-        ),
-    }
-}
-
-fn list_objects_xml(
-    path: &str,
-    prefix: &str,
-    delimiter: Option<&str>,
-    objects: &Arc<Mutex<BTreeMap<String, StoredObject>>>,
-) -> String {
-    let bucket = path
-        .trim_start_matches('/')
-        .split('/')
-        .next()
-        .unwrap_or_default();
-    let full_prefix = format!("{bucket}/{prefix}");
-    let delimiter = delimiter.unwrap_or_default();
-    let mut contents = Vec::new();
-    let mut common_prefixes = BTreeSet::new();
-
-    for (key, object) in objects.lock().expect("lock mock s3 objects").iter() {
-        let Some(relative) = key.strip_prefix(&full_prefix) else {
-            continue;
-        };
-        if !delimiter.is_empty() {
-            if let Some((first, _)) = relative.split_once(delimiter) {
-                common_prefixes.insert(format!("{prefix}{first}{delimiter}"));
-                continue;
-            }
-        }
-        contents.push((
-            key.strip_prefix(&format!("{bucket}/"))
-                .unwrap_or(key)
-                .to_owned(),
-            object.body.len(),
-        ));
-    }
-
-    let mut xml = String::from(
-        r#"<?xml version="1.0" encoding="UTF-8"?><ListBucketResult xmlns="http://s3.amazonaws.com/doc/2006-03-01/">"#,
-    );
-    xml.push_str("<IsTruncated>false</IsTruncated>");
-    for (key, len) in contents {
-        xml.push_str("<Contents><Key>");
-        xml.push_str(&escape_xml(&key));
-        xml.push_str("</Key><Size>");
-        xml.push_str(&len.to_string());
-        xml.push_str("</Size></Contents>");
-    }
-    for prefix in common_prefixes {
-        xml.push_str("<CommonPrefixes><Prefix>");
-        xml.push_str(&escape_xml(&prefix));
-        xml.push_str("</Prefix></CommonPrefixes>");
-    }
-    xml.push_str("</ListBucketResult>");
-    xml
-}
-
-fn apply_range(bytes: &[u8], range: Option<&str>) -> Vec<u8> {
-    let Some(range) = range.and_then(|range| range.strip_prefix("bytes=")) else {
-        return bytes.to_vec();
-    };
-    let Some((start, end)) = range.split_once('-') else {
-        return bytes.to_vec();
-    };
-    let start = start.parse::<usize>().unwrap_or(0);
-    let end = end
-        .parse::<usize>()
-        .unwrap_or(bytes.len().saturating_sub(1))
-        .min(bytes.len().saturating_sub(1));
-    if start >= bytes.len() || start > end {
-        return Vec::new();
-    }
-    bytes[start..=end].to_vec()
-}
-
-fn send_not_found(stream: &mut TcpStream) {
-    send_response(
-        stream,
-        404,
-        "Not Found",
-        "application/xml",
-        br#"<Error><Code>NoSuchKey</Code><Message>missing</Message></Error>"#,
-    );
-}
-
-fn send_head_response(stream: &mut TcpStream, status: u16, reason: &str, object: &StoredObject) {
-    let mut response = format!(
-        "HTTP/1.1 {status} {reason}\r\nContent-Length: {}\r\nConnection: close\r\nx-amz-request-id: test\r\n",
-        object.body.len()
-    );
-    for (name, value) in &object.metadata {
-        response.push_str(&format!("x-amz-meta-{name}: {value}\r\n"));
-    }
-    response.push_str("\r\n");
-    stream
-        .write_all(response.as_bytes())
-        .expect("write mock s3 head response");
-    stream.flush().expect("flush mock s3 response");
-}
-
-fn send_response(
-    stream: &mut TcpStream,
-    status: u16,
-    reason: &str,
-    content_type: &str,
-    body: &[u8],
-) {
-    let response = format!(
-        "HTTP/1.1 {status} {reason}\r\nContent-Length: {}\r\nContent-Type: {content_type}\r\nConnection: close\r\nx-amz-request-id: test\r\n\r\n",
-        body.len()
-    );
-    stream
-        .write_all(response.as_bytes())
-        .expect("write mock s3 response headers");
-    stream.write_all(body).expect("write mock s3 response body");
-    stream.flush().expect("flush mock s3 response");
-}
-
-fn find_header_end(buffer: &[u8]) -> Option<usize> {
-    buffer.windows(4).position(|window| window == b"\r\n\r\n")
-}
-
-fn parse_query(raw: &str) -> BTreeMap<String, String> {
-    raw.split('&')
-        .map(|pair| {
-            let (name, value) = pair.split_once('=').unwrap_or((pair, ""));
-            (decode_url_component(name), decode_url_component(value))
-        })
-        .collect()
-}
-
-fn parse_delete_objects_keys(body: &[u8]) -> Vec<String> {
-    let text = String::from_utf8_lossy(body);
-    let mut keys = Vec::new();
-    let mut rest = text.as_ref();
-    while let Some((_, after_start)) = rest.split_once("<Key>") {
-        let Some((key, after_end)) = after_start.split_once("</Key>") else {
-            break;
-        };
-        keys.push(decode_url_component(key));
-        rest = after_end;
-    }
-    keys
-}
-
-fn decode_url_component(raw: &str) -> String {
-    let mut decoded = String::new();
-    let bytes = raw.as_bytes();
-    let mut index = 0;
-    while index < bytes.len() {
-        if bytes[index] == b'%' && index + 2 < bytes.len() {
-            let code = std::str::from_utf8(&bytes[index + 1..index + 3])
-                .ok()
-                .and_then(|hex| u8::from_str_radix(hex, 16).ok());
-            if let Some(code) = code {
-                decoded.push(code as char);
-                index += 3;
-                continue;
-            }
-        }
-        if bytes[index] == b'+' {
-            decoded.push(' ');
-        } else {
-            decoded.push(bytes[index] as char);
-        }
-        index += 1;
-    }
-    decoded
-}
-
-fn escape_xml(value: &str) -> String {
-    value
-        .replace('&', "&amp;")
-        .replace('<', "&lt;")
-        .replace('>', "&gt;")
-        .replace('"', "&quot;")
-        .replace('\'', "&apos;")
-}
diff --git a/crates/sidecar-browser/AGENTS.md b/crates/sidecar-browser/AGENTS.md
deleted file mode 120000
index 681311eb9..000000000
--- a/crates/sidecar-browser/AGENTS.md
+++ /dev/null
@@ -1 +0,0 @@
-CLAUDE.md
\ No newline at end of file
diff --git a/crates/sidecar-browser/CLAUDE.md b/crates/sidecar-browser/CLAUDE.md
deleted file mode 100644
index 91a5d062a..000000000
--- a/crates/sidecar-browser/CLAUDE.md
+++ /dev/null
@@ -1,5 +0,0 @@
-# Browser Support
-
-- Browser support is untested after the secure-exec split; only build-level validation is required during migration.
-- Provenance: moved from rivet-dev/agentos@87ed8e21e454.
-- Keep the browser sidecar separate from the native sidecar because worker transport and main-thread ownership differ from stdio/socket transport.
diff --git a/crates/sidecar-browser/Cargo.toml b/crates/sidecar-browser/Cargo.toml
index a73421927..5af67837f 100644
--- a/crates/sidecar-browser/Cargo.toml
+++ b/crates/sidecar-browser/Cargo.toml
@@ -3,21 +3,11 @@ name = "secure-exec-sidecar-browser"
 version.workspace = true
 edition.workspace = true
 license.workspace = true
-description = "Browser-side Secure Exec sidecar scaffold"
+repository.workspace = true
+description = "secure-exec-sidecar-browser compatibility shim for agentos-native-sidecar-browser"
 
 [lib]
-crate-type = ["cdylib", "rlib"]
+name = "secure_exec_sidecar_browser"
 
 [dependencies]
-secure-exec-bridge = { path = "../bridge" }
-secure-exec-kernel = { path = "../kernel" }
-secure-exec-sidecar-core = { path = "../sidecar-core" }
-secure-exec-sidecar-protocol = { path = "../sidecar-protocol" }
-secure-exec-vm-config = { path = "../vm-config" }
-base64 = "0.22"
-serde_json = "1.0"
-
-[target.'cfg(target_arch = "wasm32")'.dependencies]
-getrandom = { version = "0.2", features = ["js"] }
-js-sys = "0.3"
-wasm-bindgen = "0.2"
+agentos_native_sidecar_browser = { package = "agentos-native-sidecar-browser", path = "../../../agentos/crates/native-sidecar-browser", version = "0.0.1" }
diff --git a/crates/sidecar-browser/src/lib.rs b/crates/sidecar-browser/src/lib.rs
index b1b82c221..7b8db7a44 100644
--- a/crates/sidecar-browser/src/lib.rs
+++ b/crates/sidecar-browser/src/lib.rs
@@ -1,121 +1,3 @@
-#![forbid(unsafe_code)]
+//! Compatibility shim for `agentos-native-sidecar-browser`.
 
-//! Browser-side sidecar scaffold for the secure-exec runtime migration.
-
-mod service;
-#[cfg(target_arch = "wasm32")]
-mod wasm;
-pub mod wire_dispatch;
-
-pub use service::{
-    BrowserExecutionOptions, BrowserExtension, BrowserExtensionContext, BrowserExtensionHost,
-    BrowserExtensionRequest, BrowserExtensionResponse, BrowserSidecar, BrowserSidecarConfig,
-    BrowserSidecarError,
-};
-#[cfg(target_arch = "wasm32")]
-pub use wasm::{BrowserJsBridge, BrowserSidecarWasm};
-
-use secure_exec_bridge::{BridgeTypes, GuestRuntime, HostBridge};
-use secure_exec_sidecar_protocol::wire::WasmPermissionTier;
-use std::collections::BTreeMap;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum BrowserWorkerEntrypoint {
-    JavaScript { bootstrap_module: Option<String> },
-    WebAssembly { module_path: Option<String> },
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct BrowserWorkerSpawnRequest {
-    pub vm_id: String,
-    pub context_id: String,
-    pub execution_id: String,
-    pub runtime: GuestRuntime,
-    pub entrypoint: BrowserWorkerEntrypoint,
-    pub wasm_permission_tier: Option<WasmPermissionTier>,
-    pub process_config: BrowserWorkerProcessConfig,
-    pub os_config: BrowserWorkerOsConfig,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct BrowserWorkerProcessConfig {
-    pub cwd: String,
-    pub env: BTreeMap<String, String>,
-    pub argv: Vec<String>,
-    pub platform: String,
-    pub arch: String,
-    pub version: String,
-    pub pid: u32,
-    pub ppid: u32,
-    pub uid: u32,
-    pub gid: u32,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct BrowserWorkerOsConfig {
-    pub platform: String,
-    pub arch: String,
-    pub r#type: String,
-    pub release: String,
-    pub version: String,
-    pub cpu_count: u64,
-    pub totalmem: u64,
-    pub freemem: u64,
-    pub hostname: String,
-    pub homedir: String,
-    pub tmpdir: String,
-    pub machine: String,
-    pub user: String,
-    pub shell: String,
-    pub uid: u32,
-    pub gid: u32,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct BrowserWorkerHandle {
-    pub worker_id: String,
-    pub runtime: GuestRuntime,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct BrowserWorkerHandleRequest {
-    pub vm_id: String,
-    pub execution_id: String,
-    pub worker_id: String,
-}
-
-pub trait BrowserHostBridge: HostBridge {}
-
-impl<T> BrowserHostBridge for T where T: HostBridge {}
-
-pub trait BrowserWorkerBridge: BridgeTypes {
-    fn create_worker(
-        &mut self,
-        request: BrowserWorkerSpawnRequest,
-    ) -> Result<BrowserWorkerHandle, Self::Error>;
-
-    fn terminate_worker(&mut self, request: BrowserWorkerHandleRequest) -> Result<(), Self::Error>;
-}
-
-pub trait BrowserSidecarBridge: BrowserHostBridge + BrowserWorkerBridge {}
-
-impl<T> BrowserSidecarBridge for T where T: BrowserHostBridge + BrowserWorkerBridge {}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct BrowserSidecarScaffold {
-    pub package_name: &'static str,
-    pub kernel_package: &'static str,
-    pub execution_host_thread: &'static str,
-    pub guest_worker_owner_thread: &'static str,
-}
-
-pub fn scaffold() -> BrowserSidecarScaffold {
-    let kernel = secure_exec_kernel::scaffold();
-
-    BrowserSidecarScaffold {
-        package_name: env!("CARGO_PKG_NAME"),
-        kernel_package: kernel.package_name,
-        execution_host_thread: "main",
-        guest_worker_owner_thread: "main",
-    }
-}
+pub use agentos_native_sidecar_browser::*;
diff --git a/crates/sidecar-browser/src/service.rs b/crates/sidecar-browser/src/service.rs
deleted file mode 100644
index b2ac263b7..000000000
--- a/crates/sidecar-browser/src/service.rs
+++ /dev/null
@@ -1,2282 +0,0 @@
-use crate::{
-    BrowserSidecarBridge, BrowserWorkerEntrypoint, BrowserWorkerHandle, BrowserWorkerHandleRequest,
-    BrowserWorkerOsConfig, BrowserWorkerProcessConfig, BrowserWorkerSpawnRequest,
-};
-use secure_exec_bridge::{
-    BridgeTypes, CreateJavascriptContextRequest, CreateWasmContextRequest, ExecutionEvent,
-    ExecutionHandleRequest, GuestContextHandle, GuestRuntime, KillExecutionRequest,
-    LifecycleEventRecord, LifecycleState, PollExecutionEventRequest, SignalDispositionAction,
-    SignalHandlerRegistration, StartExecutionRequest, StartedExecution, StructuredEventRecord,
-    WriteExecutionStdinRequest,
-};
-use secure_exec_kernel::bridge::LifecycleState as KernelLifecycleState;
-use secure_exec_kernel::kernel::{KernelError, KernelVm, KernelVmConfig, VirtualProcessOptions};
-use secure_exec_kernel::mount_table::MountTable;
-use secure_exec_kernel::poll::{PollTargetEntry, POLLERR, POLLHUP, POLLIN};
-use secure_exec_kernel::process_table::ProcessStatus;
-use secure_exec_kernel::root_fs::{
-    RootFilesystemMode as KernelRootFilesystemMode, RootFilesystemSnapshot,
-};
-use secure_exec_kernel::socket_table::{
-    InetSocketAddress, SocketId, SocketSpec, SocketState, SocketType,
-};
-use secure_exec_sidecar_core::{
-    apply_process_signal_state_update, build_root_mount_table,
-    ensure_vm_fetch_raw_response_buffer_within_limit, ensure_vm_fetch_response_within_limit,
-    handle_guest_filesystem_call, handle_guest_kernel_call, parse_kernel_http_fetch_response,
-    process_snapshot_entry_from_kernel, serialize_kernel_http_fetch_request,
-    unsupported_guest_kernel_call_detail, SharedProcessSnapshotEntry, VmLayerStore,
-    VM_FETCH_BUFFER_LIMIT_BYTES,
-};
-use secure_exec_sidecar_core::{
-    ensure_command_aliases_available, ensure_toolkit_name_available,
-    ensure_toolkit_registry_capacity, registered_tool_command_names, shared_guest_runtime_identity,
-    validate_toolkit_registration,
-};
-use secure_exec_sidecar_protocol::protocol::{
-    FindBoundUdpRequest, FindListenerRequest, GuestFilesystemCallRequest,
-    GuestFilesystemResultResponse, GuestKernelCallRequest, GuestKernelResultResponse,
-    ProjectedModuleDescriptor, RegisterHostCallbacksRequest, RootFilesystemEntry,
-    SignalDispositionAction as ProtocolSignalDispositionAction,
-    SignalHandlerRegistration as ProtocolSignalHandlerRegistration, SocketStateEntry,
-    WasmPermissionTier,
-};
-use secure_exec_vm_config::RootFilesystemConfig;
-use std::collections::{BTreeMap, BTreeSet};
-use std::error::Error;
-use std::fmt;
-use std::time::{Duration, Instant};
-
-type BridgeError<B> = <B as BridgeTypes>::Error;
-type BrowserKernel = KernelVm<MountTable>;
-const BROWSER_WORKER_DRIVER: &str = "browser.worker";
-const BROWSER_VM_FETCH_TIMEOUT: Duration = Duration::from_secs(30);
-#[cfg(not(target_arch = "wasm32"))]
-const BROWSER_VM_FETCH_TIMEOUT_MS_ENV: &str = "SECURE_EXEC_TEST_BROWSER_VM_FETCH_TIMEOUT_MS";
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct BrowserSidecarConfig {
-    pub sidecar_id: String,
-}
-
-impl Default for BrowserSidecarConfig {
-    fn default() -> Self {
-        Self {
-            sidecar_id: String::from("secure-exec-sidecar-browser"),
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum BrowserSidecarError {
-    InvalidState(String),
-    Kernel(String),
-    Bridge(String),
-}
-
-impl fmt::Display for BrowserSidecarError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::InvalidState(message) | Self::Kernel(message) | Self::Bridge(message) => {
-                f.write_str(message)
-            }
-        }
-    }
-}
-
-impl Error for BrowserSidecarError {}
-
-struct VmState {
-    kernel: BrowserKernel,
-    configuration: BrowserVmConfiguration,
-    layers: VmLayerStore,
-    toolkits: BTreeMap<String, RegisterHostCallbacksRequest>,
-    signal_states: BTreeMap<String, BTreeMap<u32, ProtocolSignalHandlerRegistration>>,
-    contexts: BTreeSet<String>,
-    active_executions: BTreeSet<String>,
-}
-
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-struct BrowserVmConfiguration {
-    instructions: Vec<String>,
-    projected_modules: Vec<ProjectedModuleDescriptor>,
-    command_permissions: BTreeMap<String, WasmPermissionTier>,
-    create_loopback_exempt_ports: BTreeSet<u16>,
-    loopback_exempt_ports: Vec<u16>,
-}
-
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct BrowserExecutionOptions {
-    pub command_name: Option<String>,
-    pub wasm_permission_tier: Option<WasmPermissionTier>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-struct ContextState {
-    vm_id: String,
-    runtime: GuestRuntime,
-    entrypoint: BrowserWorkerEntrypoint,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-struct ExecutionState {
-    vm_id: String,
-    worker: BrowserWorkerHandle,
-    kernel_pid: u32,
-    stdin_write_fd: u32,
-    cwd: String,
-}
-
-pub trait BrowserExtension: Send + Sync {
-    fn namespace(&self) -> &str;
-
-    fn handle_request(
-        &self,
-        context: &mut BrowserExtensionContext<'_>,
-        payload: &[u8],
-    ) -> Result<Vec<u8>, BrowserSidecarError> {
-        let _ = context;
-        let _ = payload;
-        Err(BrowserSidecarError::InvalidState(format!(
-            "browser extension {} does not handle requests",
-            self.namespace()
-        )))
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct BrowserExtensionRequest {
-    pub namespace: String,
-    pub payload: Vec<u8>,
-    /// VM the request is scoped to (from the wire ownership scope), so extensions
-    /// that drive guest executions know which VM to target. `None` for connection/
-    /// session-scoped requests that carry no VM.
-    pub vm_id: Option<String>,
-    /// Owning connection (from the wire ownership scope), for per-connection
-    /// ownership enforcement inside extensions.
-    pub connection_id: Option<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct BrowserExtensionResponse {
-    pub namespace: String,
-    pub payload: Vec<u8>,
-}
-
-pub trait BrowserExtensionHost {
-    fn write_file(
-        &mut self,
-        vm_id: &str,
-        path: &str,
-        contents: Vec<u8>,
-    ) -> Result<(), BrowserSidecarError>;
-
-    fn read_file(&mut self, vm_id: &str, path: &str) -> Result<Vec<u8>, BrowserSidecarError>;
-
-    fn mkdir(
-        &mut self,
-        vm_id: &str,
-        path: &str,
-        recursive: bool,
-    ) -> Result<(), BrowserSidecarError>;
-
-    fn read_dir(&mut self, vm_id: &str, path: &str) -> Result<Vec<String>, BrowserSidecarError>;
-
-    fn create_javascript_context(
-        &mut self,
-        request: CreateJavascriptContextRequest,
-    ) -> Result<GuestContextHandle, BrowserSidecarError>;
-
-    fn create_wasm_context(
-        &mut self,
-        request: CreateWasmContextRequest,
-    ) -> Result<GuestContextHandle, BrowserSidecarError>;
-
-    fn start_execution(
-        &mut self,
-        request: StartExecutionRequest,
-    ) -> Result<StartedExecution, BrowserSidecarError>;
-
-    fn write_stdin(
-        &mut self,
-        request: WriteExecutionStdinRequest,
-    ) -> Result<(), BrowserSidecarError>;
-
-    fn close_stdin(&mut self, request: ExecutionHandleRequest) -> Result<(), BrowserSidecarError>;
-
-    fn kill_execution(&mut self, request: KillExecutionRequest) -> Result<(), BrowserSidecarError>;
-
-    fn poll_execution_event(
-        &mut self,
-        request: PollExecutionEventRequest,
-    ) -> Result<Option<ExecutionEvent>, BrowserSidecarError>;
-}
-
-pub struct BrowserExtensionContext<'a> {
-    host: &'a mut dyn BrowserExtensionHost,
-    vm_id: Option<String>,
-    connection_id: Option<String>,
-}
-
-impl<'a> BrowserExtensionContext<'a> {
-    pub fn new(host: &'a mut dyn BrowserExtensionHost) -> Self {
-        Self {
-            host,
-            vm_id: None,
-            connection_id: None,
-        }
-    }
-
-    /// Construct with the wire ownership scope threaded in (VM + connection), so
-    /// extensions can target the right VM and enforce per-connection ownership.
-    pub fn with_ownership(
-        host: &'a mut dyn BrowserExtensionHost,
-        vm_id: Option<String>,
-        connection_id: Option<String>,
-    ) -> Self {
-        Self {
-            host,
-            vm_id,
-            connection_id,
-        }
-    }
-
-    /// VM this request is scoped to, if any.
-    pub fn vm_id(&self) -> Option<&str> {
-        self.vm_id.as_deref()
-    }
-
-    /// Owning connection of this request, if any.
-    pub fn connection_id(&self) -> Option<&str> {
-        self.connection_id.as_deref()
-    }
-
-    pub fn write_file(
-        &mut self,
-        vm_id: &str,
-        path: &str,
-        contents: impl Into<Vec<u8>>,
-    ) -> Result<(), BrowserSidecarError> {
-        self.host.write_file(vm_id, path, contents.into())
-    }
-
-    pub fn read_file(&mut self, vm_id: &str, path: &str) -> Result<Vec<u8>, BrowserSidecarError> {
-        self.host.read_file(vm_id, path)
-    }
-
-    pub fn mkdir(
-        &mut self,
-        vm_id: &str,
-        path: &str,
-        recursive: bool,
-    ) -> Result<(), BrowserSidecarError> {
-        self.host.mkdir(vm_id, path, recursive)
-    }
-
-    pub fn read_dir(
-        &mut self,
-        vm_id: &str,
-        path: &str,
-    ) -> Result<Vec<String>, BrowserSidecarError> {
-        self.host.read_dir(vm_id, path)
-    }
-
-    pub fn create_javascript_context(
-        &mut self,
-        request: CreateJavascriptContextRequest,
-    ) -> Result<GuestContextHandle, BrowserSidecarError> {
-        self.host.create_javascript_context(request)
-    }
-
-    pub fn create_wasm_context(
-        &mut self,
-        request: CreateWasmContextRequest,
-    ) -> Result<GuestContextHandle, BrowserSidecarError> {
-        self.host.create_wasm_context(request)
-    }
-
-    pub fn start_execution(
-        &mut self,
-        request: StartExecutionRequest,
-    ) -> Result<StartedExecution, BrowserSidecarError> {
-        self.host.start_execution(request)
-    }
-
-    pub fn write_stdin(
-        &mut self,
-        request: WriteExecutionStdinRequest,
-    ) -> Result<(), BrowserSidecarError> {
-        self.host.write_stdin(request)
-    }
-
-    pub fn close_stdin(
-        &mut self,
-        request: ExecutionHandleRequest,
-    ) -> Result<(), BrowserSidecarError> {
-        self.host.close_stdin(request)
-    }
-
-    pub fn kill_execution(
-        &mut self,
-        request: KillExecutionRequest,
-    ) -> Result<(), BrowserSidecarError> {
-        self.host.kill_execution(request)
-    }
-
-    pub fn poll_execution_event(
-        &mut self,
-        request: PollExecutionEventRequest,
-    ) -> Result<Option<ExecutionEvent>, BrowserSidecarError> {
-        self.host.poll_execution_event(request)
-    }
-}
-
-pub struct BrowserSidecar<B> {
-    bridge: B,
-    config: BrowserSidecarConfig,
-    vms: BTreeMap<String, VmState>,
-    contexts: BTreeMap<String, ContextState>,
-    executions: BTreeMap<String, ExecutionState>,
-    extensions: BTreeMap<String, Box<dyn BrowserExtension>>,
-}
-
-impl<B> BrowserSidecar<B>
-where
-    B: BrowserSidecarBridge,
-    BridgeError<B>: fmt::Debug,
-{
-    pub fn new(bridge: B, config: BrowserSidecarConfig) -> Self {
-        Self::with_extensions(bridge, config, Vec::new())
-            .expect("empty browser extension registry should be valid")
-    }
-
-    pub fn with_extensions(
-        bridge: B,
-        config: BrowserSidecarConfig,
-        extensions: Vec<Box<dyn BrowserExtension>>,
-    ) -> Result<Self, BrowserSidecarError> {
-        let mut sidecar = Self {
-            bridge,
-            config,
-            vms: BTreeMap::new(),
-            contexts: BTreeMap::new(),
-            executions: BTreeMap::new(),
-            extensions: BTreeMap::new(),
-        };
-        for extension in extensions {
-            sidecar.register_extension(extension)?;
-        }
-        Ok(sidecar)
-    }
-
-    pub fn register_extension(
-        &mut self,
-        extension: Box<dyn BrowserExtension>,
-    ) -> Result<(), BrowserSidecarError> {
-        let namespace = extension.namespace();
-        if namespace.is_empty() {
-            return Err(BrowserSidecarError::InvalidState(String::from(
-                "browser extension namespace must not be empty",
-            )));
-        }
-        if self.extensions.contains_key(namespace) {
-            return Err(BrowserSidecarError::InvalidState(format!(
-                "browser extension namespace already registered: {namespace}",
-            )));
-        }
-        self.extensions.insert(namespace.to_string(), extension);
-        Ok(())
-    }
-
-    pub fn extension_count(&self) -> usize {
-        self.extensions.len()
-    }
-
-    pub fn has_extension(&self, namespace: &str) -> bool {
-        self.extensions.contains_key(namespace)
-    }
-
-    pub fn dispatch_extension_request(
-        &mut self,
-        request: BrowserExtensionRequest,
-    ) -> Result<BrowserExtensionResponse, BrowserSidecarError> {
-        let Some(extension) = self.extensions.remove(&request.namespace) else {
-            return Err(BrowserSidecarError::InvalidState(format!(
-                "no browser extension registered for namespace {}",
-                request.namespace
-            )));
-        };
-        let payload = {
-            let mut context = BrowserExtensionContext::with_ownership(
-                self,
-                request.vm_id.clone(),
-                request.connection_id.clone(),
-            );
-            extension.handle_request(&mut context, &request.payload)
-        };
-        self.extensions.insert(request.namespace.clone(), extension);
-        let payload = payload?;
-        Ok(BrowserExtensionResponse {
-            namespace: request.namespace,
-            payload,
-        })
-    }
-
-    pub fn sidecar_id(&self) -> &str {
-        &self.config.sidecar_id
-    }
-
-    pub fn bridge(&self) -> &B {
-        &self.bridge
-    }
-
-    pub fn bridge_mut(&mut self) -> &mut B {
-        &mut self.bridge
-    }
-
-    pub fn into_bridge(self) -> B {
-        self.bridge
-    }
-
-    pub fn vm_count(&self) -> usize {
-        self.vms.len()
-    }
-
-    pub fn context_count(&self, vm_id: &str) -> usize {
-        self.vms
-            .get(vm_id)
-            .map(|vm| vm.contexts.len())
-            .unwrap_or_default()
-    }
-
-    pub fn active_worker_count(&self, vm_id: &str) -> usize {
-        self.vms
-            .get(vm_id)
-            .map(|vm| vm.active_executions.len())
-            .unwrap_or_default()
-    }
-
-    pub fn create_vm(&mut self, config: KernelVmConfig) -> Result<(), BrowserSidecarError> {
-        self.create_vm_with_root_filesystem(config, RootFilesystemConfig::default())
-    }
-
-    pub fn configure_vm(
-        &mut self,
-        vm_id: &str,
-        permissions: Option<secure_exec_kernel::permissions::Permissions>,
-        instructions: Vec<String>,
-        projected_modules: Vec<ProjectedModuleDescriptor>,
-        command_permissions: BTreeMap<String, WasmPermissionTier>,
-        loopback_exempt_ports: impl IntoIterator<Item = u16>,
-    ) -> Result<(), BrowserSidecarError> {
-        let vm = self
-            .vms
-            .get_mut(vm_id)
-            .ok_or_else(|| BrowserSidecarError::InvalidState(format!("unknown VM {vm_id}")))?;
-        if let Some(permissions) = permissions {
-            vm.kernel.set_permissions(permissions);
-        }
-        let loopback_exempt_ports: Vec<u16> = loopback_exempt_ports.into_iter().collect();
-        vm.configuration.instructions = instructions;
-        vm.configuration.projected_modules = projected_modules;
-        vm.configuration.command_permissions = command_permissions;
-        vm.configuration.loopback_exempt_ports = loopback_exempt_ports.clone();
-        let mut effective_loopback_exempt_ports =
-            vm.configuration.create_loopback_exempt_ports.clone();
-        effective_loopback_exempt_ports.extend(loopback_exempt_ports);
-        vm.kernel
-            .set_loopback_exempt_ports(effective_loopback_exempt_ports);
-        Ok(())
-    }
-
-    pub fn create_vm_with_root_filesystem(
-        &mut self,
-        config: KernelVmConfig,
-        root_filesystem: RootFilesystemConfig,
-    ) -> Result<(), BrowserSidecarError> {
-        let vm_id = config.vm_id.clone();
-        if self.vms.contains_key(&vm_id) {
-            return Err(BrowserSidecarError::InvalidState(format!(
-                "browser sidecar VM already exists: {vm_id}"
-            )));
-        }
-
-        self.emit_lifecycle(
-            &vm_id,
-            LifecycleState::Starting,
-            Some(String::from(
-                "browser sidecar booting kernel on main thread",
-            )),
-        )?;
-        let create_loopback_exempt_ports = config.loopback_exempt_ports.clone();
-        self.vms.insert(
-            vm_id.clone(),
-            VmState {
-                kernel: KernelVm::new(
-                    build_root_mount_table(&root_filesystem, &config.resources)
-                        .map_err(Self::sidecar_core_error)?,
-                    config,
-                ),
-                configuration: BrowserVmConfiguration {
-                    create_loopback_exempt_ports,
-                    ..BrowserVmConfiguration::default()
-                },
-                layers: VmLayerStore::default(),
-                toolkits: BTreeMap::new(),
-                signal_states: BTreeMap::new(),
-                contexts: BTreeSet::new(),
-                active_executions: BTreeSet::new(),
-            },
-        );
-        if let Some(root) = self
-            .vms
-            .get_mut(&vm_id)
-            .and_then(|vm| vm.kernel.root_filesystem_mut())
-        {
-            root.finish_bootstrap();
-        }
-        self.emit_lifecycle(
-            &vm_id,
-            LifecycleState::Ready,
-            Some(String::from(
-                "browser sidecar kernel is ready on the main thread",
-            )),
-        )?;
-        Ok(())
-    }
-
-    pub fn write_file(
-        &mut self,
-        vm_id: &str,
-        path: &str,
-        contents: impl Into<Vec<u8>>,
-    ) -> Result<(), BrowserSidecarError> {
-        let vm = self.vm_mut(vm_id)?;
-        vm.kernel
-            .write_file(path, contents)
-            .map_err(Self::kernel_error)
-    }
-
-    pub fn read_file(&mut self, vm_id: &str, path: &str) -> Result<Vec<u8>, BrowserSidecarError> {
-        let vm = self.vm_mut(vm_id)?;
-        vm.kernel.read_file(path).map_err(Self::kernel_error)
-    }
-
-    pub fn mkdir(
-        &mut self,
-        vm_id: &str,
-        path: &str,
-        recursive: bool,
-    ) -> Result<(), BrowserSidecarError> {
-        let vm = self.vm_mut(vm_id)?;
-        vm.kernel.mkdir(path, recursive).map_err(Self::kernel_error)
-    }
-
-    pub fn read_dir(
-        &mut self,
-        vm_id: &str,
-        path: &str,
-    ) -> Result<Vec<String>, BrowserSidecarError> {
-        let vm = self.vm_mut(vm_id)?;
-        vm.kernel.read_dir(path).map_err(Self::kernel_error)
-    }
-
-    pub fn snapshot_root_filesystem(
-        &mut self,
-        vm_id: &str,
-    ) -> Result<RootFilesystemSnapshot, BrowserSidecarError> {
-        let vm = self.vm_mut(vm_id)?;
-        vm.kernel
-            .snapshot_root_filesystem()
-            .map_err(Self::kernel_error)
-    }
-
-    pub fn create_layer(&mut self, vm_id: &str) -> Result<String, BrowserSidecarError> {
-        self.vm_mut(vm_id)?
-            .layers
-            .create_writable_layer()
-            .map_err(Self::sidecar_core_error)
-    }
-
-    pub fn seal_layer(
-        &mut self,
-        vm_id: &str,
-        layer_id: &str,
-    ) -> Result<String, BrowserSidecarError> {
-        self.vm_mut(vm_id)?
-            .layers
-            .seal_layer(layer_id)
-            .map_err(Self::sidecar_core_error)
-    }
-
-    pub fn import_snapshot(
-        &mut self,
-        vm_id: &str,
-        entries: &[RootFilesystemEntry],
-    ) -> Result<String, BrowserSidecarError> {
-        let snapshot = root_snapshot_from_entries(entries)?;
-        self.vm_mut(vm_id)?
-            .layers
-            .import_snapshot(snapshot)
-            .map_err(Self::sidecar_core_error)
-    }
-
-    pub fn export_snapshot(
-        &mut self,
-        vm_id: &str,
-        layer_id: &str,
-    ) -> Result<RootFilesystemSnapshot, BrowserSidecarError> {
-        self.vm_mut(vm_id)?
-            .layers
-            .export_snapshot(layer_id)
-            .map_err(Self::sidecar_core_error)
-    }
-
-    pub fn create_overlay(
-        &mut self,
-        vm_id: &str,
-        mode: KernelRootFilesystemMode,
-        upper_layer_id: Option<String>,
-        lower_layer_ids: Vec<String>,
-    ) -> Result<String, BrowserSidecarError> {
-        self.vm_mut(vm_id)?
-            .layers
-            .create_overlay_layer(mode, upper_layer_id, lower_layer_ids)
-            .map_err(Self::sidecar_core_error)
-    }
-
-    pub fn register_host_callbacks(
-        &mut self,
-        vm_id: &str,
-        payload: RegisterHostCallbacksRequest,
-    ) -> Result<(String, u32), BrowserSidecarError> {
-        validate_toolkit_registration(&payload)
-            .map_err(|error| BrowserSidecarError::InvalidState(error.to_string()))?;
-        let vm = self.vm_mut(vm_id)?;
-        ensure_toolkit_name_available(&vm.toolkits, &payload.name)
-            .map_err(|error| BrowserSidecarError::InvalidState(error.to_string()))?;
-        ensure_command_aliases_available(&vm.toolkits, &payload)
-            .map_err(|error| BrowserSidecarError::InvalidState(error.to_string()))?;
-        ensure_toolkit_registry_capacity(&vm.toolkits, &payload)
-            .map_err(|error| BrowserSidecarError::InvalidState(error.to_string()))?;
-
-        let registration = payload.name.clone();
-        vm.toolkits.insert(registration.clone(), payload);
-        let command_count = u32::try_from(registered_tool_command_names(&vm.toolkits).len())
-            .map_err(|_| {
-                BrowserSidecarError::InvalidState(String::from(
-                    "registered host callback command count exceeds u32",
-                ))
-            })?;
-        Ok((registration, command_count))
-    }
-
-    pub fn bootstrap_root_filesystem_entries(
-        &mut self,
-        vm_id: &str,
-        entries: &[RootFilesystemEntry],
-    ) -> Result<u32, BrowserSidecarError> {
-        for entry in entries {
-            self.apply_root_filesystem_entry(vm_id, entry)?;
-        }
-        u32::try_from(entries.len()).map_err(|_| {
-            BrowserSidecarError::InvalidState(String::from(
-                "root filesystem bootstrap entry count exceeds u32",
-            ))
-        })
-    }
-
-    pub fn guest_filesystem_call(
-        &mut self,
-        vm_id: &str,
-        payload: GuestFilesystemCallRequest,
-    ) -> Result<GuestFilesystemResultResponse, BrowserSidecarError> {
-        let vm = self.vm_mut(vm_id)?;
-        handle_guest_filesystem_call(&mut vm.kernel, payload).map_err(Self::sidecar_core_error)
-    }
-
-    pub fn guest_kernel_call(
-        &mut self,
-        vm_id: &str,
-        payload: GuestKernelCallRequest,
-    ) -> Result<GuestKernelResultResponse, BrowserSidecarError> {
-        let execution = self.ensure_execution_state(vm_id, &payload.execution_id)?;
-        let kernel_pid = execution.kernel_pid;
-        let vm = self.vm_mut(vm_id)?;
-        let response = handle_guest_kernel_call(
-            &mut vm.kernel,
-            kernel_pid,
-            BROWSER_WORKER_DRIVER,
-            &payload.operation,
-            &payload.payload,
-        )
-        .map_err(Self::sidecar_core_error)?;
-        Ok(GuestKernelResultResponse { payload: response })
-    }
-
-    pub fn kernel_state(&self, vm_id: &str) -> Result<LifecycleState, BrowserSidecarError> {
-        let vm = self.vm(vm_id)?;
-        Ok(match vm.kernel.state() {
-            KernelLifecycleState::Starting => LifecycleState::Starting,
-            KernelLifecycleState::Ready => LifecycleState::Ready,
-            KernelLifecycleState::Busy => LifecycleState::Busy,
-            KernelLifecycleState::Terminated => LifecycleState::Terminated,
-        })
-    }
-
-    pub fn zombie_timer_count(&self, vm_id: &str) -> Result<u64, BrowserSidecarError> {
-        let vm = self.vm(vm_id)?;
-        Ok(vm.kernel.zombie_timer_count() as u64)
-    }
-
-    pub fn process_snapshot_entries(
-        &self,
-        vm_id: &str,
-    ) -> Result<Vec<SharedProcessSnapshotEntry>, BrowserSidecarError> {
-        let vm = self.vm(vm_id)?;
-        let process_table = vm.kernel.list_processes();
-        Ok(self
-            .executions
-            .iter()
-            .filter(|(_, execution)| execution.vm_id == vm_id)
-            .filter_map(|(execution_id, execution)| {
-                process_table.get(&execution.kernel_pid).map(|info| {
-                    process_snapshot_entry_from_kernel(
-                        execution_id,
-                        info,
-                        execution.cwd.clone(),
-                        None,
-                    )
-                })
-            })
-            .collect())
-    }
-
-    pub fn signal_state(
-        &self,
-        vm_id: &str,
-        execution_id: &str,
-    ) -> Result<BTreeMap<u32, ProtocolSignalHandlerRegistration>, BrowserSidecarError> {
-        let vm = self.vm(vm_id)?;
-        Ok(vm
-            .signal_states
-            .get(execution_id)
-            .cloned()
-            .unwrap_or_default())
-    }
-
-    pub fn find_listener(
-        &self,
-        vm_id: &str,
-        request: &FindListenerRequest,
-    ) -> Result<Option<SocketStateEntry>, BrowserSidecarError> {
-        let vm = self.vm(vm_id)?;
-        for (execution_id, execution) in &self.executions {
-            if execution.vm_id != vm_id {
-                continue;
-            }
-            for record in vm.kernel.socket_records_for_pid(execution.kernel_pid) {
-                if let Some(path) = request.path.as_deref() {
-                    if record.state() == SocketState::Listening
-                        && record.spec().socket_type == SocketType::Stream
-                        && record.local_unix_path() == Some(path)
-                    {
-                        return Ok(Some(SocketStateEntry {
-                            process_id: execution_id.clone(),
-                            host: None,
-                            port: None,
-                            path: Some(path.to_string()),
-                        }));
-                    }
-                    continue;
-                }
-
-                let Some(address) = record.local_address() else {
-                    continue;
-                };
-                if record.state() != SocketState::Listening
-                    || record.spec().socket_type != SocketType::Stream
-                    || !socket_host_matches(request.host.as_deref(), address.host())
-                    || request.port.is_some_and(|port| address.port() != port)
-                {
-                    continue;
-                }
-                return Ok(Some(SocketStateEntry {
-                    process_id: execution_id.clone(),
-                    host: Some(address.host().to_string()),
-                    port: Some(address.port()),
-                    path: None,
-                }));
-            }
-        }
-        Ok(None)
-    }
-
-    pub fn find_bound_udp(
-        &self,
-        vm_id: &str,
-        request: &FindBoundUdpRequest,
-    ) -> Result<Option<SocketStateEntry>, BrowserSidecarError> {
-        let vm = self.vm(vm_id)?;
-        for (execution_id, execution) in &self.executions {
-            if execution.vm_id != vm_id {
-                continue;
-            }
-            for record in vm.kernel.socket_records_for_pid(execution.kernel_pid) {
-                let Some(address) = record.local_address() else {
-                    continue;
-                };
-                if record.state() != SocketState::Bound
-                    || record.spec().socket_type != SocketType::Datagram
-                    || !socket_host_matches(request.host.as_deref(), address.host())
-                    || request.port.is_some_and(|port| address.port() != port)
-                {
-                    continue;
-                }
-                return Ok(Some(SocketStateEntry {
-                    process_id: execution_id.clone(),
-                    host: Some(address.host().to_string()),
-                    port: Some(address.port()),
-                    path: None,
-                }));
-            }
-        }
-        Ok(None)
-    }
-
-    pub fn vm_fetch(
-        &mut self,
-        vm_id: &str,
-        request: &secure_exec_sidecar_protocol::protocol::VmFetchRequest,
-    ) -> Result<String, BrowserSidecarError> {
-        let target_path = if request.path.starts_with('/') {
-            request.path.clone()
-        } else {
-            format!("/{}", request.path)
-        };
-        let listener = self
-            .find_listener(
-                vm_id,
-                &FindListenerRequest {
-                    host: Some(String::from("127.0.0.1")),
-                    port: Some(request.port),
-                    path: None,
-                },
-            )?
-            .ok_or_else(|| {
-                BrowserSidecarError::InvalidState(format!(
-                    "vm.fetch could not find a guest HTTP listener on port {}",
-                    request.port
-                ))
-            })?;
-        let target_execution_id = listener.process_id;
-        let target = self.ensure_execution_state(vm_id, &target_execution_id)?;
-        let request_bytes = serialize_kernel_http_fetch_request(
-            request.port,
-            &target_path,
-            &request.method,
-            &request.headers_json,
-            request.body.as_deref(),
-        )
-        .map_err(|error| BrowserSidecarError::InvalidState(error.to_string()))?;
-        let url = format!("http://127.0.0.1:{}{}", request.port, target_path);
-
-        let socket_id = {
-            let vm = self.vm_mut(vm_id)?;
-            let socket_id = vm
-                .kernel
-                .socket_create(BROWSER_WORKER_DRIVER, target.kernel_pid, SocketSpec::tcp())
-                .map_err(Self::kernel_error)?;
-            let result = vm
-                .kernel
-                .socket_connect_inet_loopback(
-                    BROWSER_WORKER_DRIVER,
-                    target.kernel_pid,
-                    socket_id,
-                    InetSocketAddress::new("127.0.0.1", request.port),
-                )
-                .map_err(Self::kernel_error)
-                .and_then(|()| {
-                    vm.kernel
-                        .socket_write(
-                            BROWSER_WORKER_DRIVER,
-                            target.kernel_pid,
-                            socket_id,
-                            &request_bytes,
-                        )
-                        .map(|_| ())
-                        .map_err(Self::kernel_error)
-                });
-            if let Err(error) = result {
-                let _ = vm
-                    .kernel
-                    .socket_close(BROWSER_WORKER_DRIVER, target.kernel_pid, socket_id);
-                return Err(error);
-            }
-            socket_id
-        };
-
-        let result = self.read_vm_fetch_response(
-            vm_id,
-            target.kernel_pid,
-            socket_id,
-            &url,
-            VM_FETCH_BUFFER_LIMIT_BYTES,
-        );
-        let close_result = {
-            let vm = self.vm_mut(vm_id)?;
-            vm.kernel
-                .socket_close(BROWSER_WORKER_DRIVER, target.kernel_pid, socket_id)
-                .map_err(Self::kernel_error)
-        };
-
-        match (result, close_result) {
-            (Ok(response), Ok(())) => Ok(response),
-            (Err(error), _) => Err(error),
-            (Ok(_), Err(error)) => Err(error),
-        }
-    }
-
-    fn read_vm_fetch_response(
-        &mut self,
-        vm_id: &str,
-        kernel_pid: u32,
-        socket_id: SocketId,
-        url: &str,
-        max_fetch_response_bytes: usize,
-    ) -> Result<String, BrowserSidecarError> {
-        let mut response_buffer = Vec::new();
-        let mut peer_closed = false;
-        let deadline = Instant::now() + browser_vm_fetch_timeout();
-
-        loop {
-            if let Some(response) =
-                parse_kernel_http_fetch_response(&response_buffer, peer_closed, url)
-                    .map_err(|error| BrowserSidecarError::InvalidState(error.to_string()))?
-            {
-                ensure_vm_fetch_response_within_limit(
-                    &response,
-                    "vm.fetch",
-                    max_fetch_response_bytes,
-                )
-                .map_err(|error| BrowserSidecarError::InvalidState(error.to_string()))?;
-                return Ok(response);
-            }
-            if Instant::now() >= deadline {
-                let preview = String::from_utf8_lossy(&response_buffer);
-                return Err(BrowserSidecarError::InvalidState(format!(
-                    "vm.fetch timed out waiting for kernel TCP HTTP response ({} buffered bytes: {:?})",
-                    response_buffer.len(),
-                    preview.chars().take(200).collect::<String>()
-                )));
-            }
-
-            let poll = {
-                let vm = self.vm_mut(vm_id)?;
-                vm.kernel
-                    .poll_targets(
-                        BROWSER_WORKER_DRIVER,
-                        kernel_pid,
-                        vec![PollTargetEntry::socket(
-                            socket_id,
-                            POLLIN | POLLHUP | POLLERR,
-                        )],
-                        5,
-                    )
-                    .map_err(Self::kernel_error)?
-            };
-            let revents = poll
-                .targets
-                .first()
-                .map(|entry| entry.revents)
-                .unwrap_or_default();
-            if revents.intersects(POLLERR) {
-                return Err(BrowserSidecarError::InvalidState(String::from(
-                    "vm.fetch kernel TCP socket reported POLLERR",
-                )));
-            }
-            if revents.intersects(POLLIN) {
-                let read_result = {
-                    let vm = self.vm_mut(vm_id)?;
-                    vm.kernel
-                        .socket_read(BROWSER_WORKER_DRIVER, kernel_pid, socket_id, 64 * 1024)
-                };
-                match read_result {
-                    Ok(Some(bytes)) if !bytes.is_empty() => {
-                        response_buffer.extend(bytes);
-                        ensure_vm_fetch_raw_response_buffer_within_limit(
-                            response_buffer.len(),
-                            "vm.fetch",
-                        )
-                        .map_err(|error| BrowserSidecarError::InvalidState(error.to_string()))?;
-                    }
-                    Ok(Some(_)) => {}
-                    Ok(None) => peer_closed = true,
-                    Err(error) if error.code() == "EAGAIN" => {}
-                    Err(error) => return Err(Self::kernel_error(error)),
-                }
-            }
-            if revents.intersects(POLLHUP) {
-                peer_closed = true;
-            }
-        }
-    }
-
-    pub fn create_kernel_tcp_listener_for_execution(
-        &mut self,
-        vm_id: &str,
-        execution_id: &str,
-        host: &str,
-        port: u16,
-        backlog: usize,
-    ) -> Result<SocketId, BrowserSidecarError> {
-        let execution = self.ensure_execution_state(vm_id, execution_id)?;
-        let vm = self.vm_mut(vm_id)?;
-        let socket_id = vm
-            .kernel
-            .socket_create(
-                BROWSER_WORKER_DRIVER,
-                execution.kernel_pid,
-                SocketSpec::tcp(),
-            )
-            .map_err(Self::kernel_error)?;
-        vm.kernel
-            .socket_bind_inet(
-                BROWSER_WORKER_DRIVER,
-                execution.kernel_pid,
-                socket_id,
-                InetSocketAddress::new(host, port),
-            )
-            .map_err(Self::kernel_error)?;
-        vm.kernel
-            .socket_listen(
-                BROWSER_WORKER_DRIVER,
-                execution.kernel_pid,
-                socket_id,
-                backlog,
-            )
-            .map_err(Self::kernel_error)?;
-        Ok(socket_id)
-    }
-
-    pub fn create_kernel_bound_udp_for_execution(
-        &mut self,
-        vm_id: &str,
-        execution_id: &str,
-        host: &str,
-        port: u16,
-    ) -> Result<SocketId, BrowserSidecarError> {
-        let execution = self.ensure_execution_state(vm_id, execution_id)?;
-        let vm = self.vm_mut(vm_id)?;
-        let socket_id = vm
-            .kernel
-            .socket_create(
-                BROWSER_WORKER_DRIVER,
-                execution.kernel_pid,
-                SocketSpec::udp(),
-            )
-            .map_err(Self::kernel_error)?;
-        vm.kernel
-            .socket_bind_inet(
-                BROWSER_WORKER_DRIVER,
-                execution.kernel_pid,
-                socket_id,
-                InetSocketAddress::new(host, port),
-            )
-            .map_err(Self::kernel_error)?;
-        Ok(socket_id)
-    }
-
-    pub fn read_execution_stdin(
-        &mut self,
-        vm_id: &str,
-        execution_id: &str,
-        length: usize,
-        timeout: Duration,
-    ) -> Result<Option<Vec<u8>>, BrowserSidecarError> {
-        let execution = self.ensure_execution_state(vm_id, execution_id)?;
-        let vm = self.vm_mut(vm_id)?;
-        vm.kernel
-            .read_process_stdin(
-                BROWSER_WORKER_DRIVER,
-                execution.kernel_pid,
-                length,
-                Some(timeout),
-            )
-            .map_err(Self::kernel_error)
-    }
-
-    pub fn dispose_vm(&mut self, vm_id: &str) -> Result<(), BrowserSidecarError> {
-        // Remove the VM bookkeeping up front and take ownership of its state, so
-        // that EVERY exit path below — including a mid-dispose `?` failure while
-        // releasing executions or emitting lifecycle events — reclaims the
-        // VmState (and the BrowserKernel it owns) instead of stranding it in the
-        // `vms` map for the process lifetime.
-        let Some(vm_state) = self.vms.remove(vm_id) else {
-            return Err(BrowserSidecarError::InvalidState(format!(
-                "unknown browser sidecar VM: {vm_id}"
-            )));
-        };
-
-        // Dropping per-context bookkeeping is infallible, so do it
-        // unconditionally; `contexts` can never retain an entry for a VM that
-        // has already been removed from `vms`.
-        for context_id in &vm_state.contexts {
-            self.contexts.remove(context_id);
-        }
-
-        // Release every execution, attempting all of them and retaining only the
-        // first error. A single worker-termination failure must not abandon the
-        // remaining executions (their `ExecutionState`s would otherwise leak),
-        // and `release_execution` already removes each entry from `executions`
-        // before doing fallible bridge work, so the maps stay drained even when
-        // the bridge reports an error.
-        let mut first_error: Option<BrowserSidecarError> = None;
-        for execution_id in &vm_state.active_executions {
-            if let Err(error) = self.release_execution(execution_id, "browser.worker.disposed") {
-                first_error.get_or_insert(error);
-            }
-        }
-
-        // Emit the terminal lifecycle event regardless of the outcome above; the
-        // VM is already gone from the registry either way.
-        let terminated = self.emit_lifecycle(
-            vm_id,
-            LifecycleState::Terminated,
-            Some(String::from(
-                "browser sidecar VM disposed on the main thread",
-            )),
-        );
-
-        match first_error {
-            Some(error) => Err(error),
-            None => terminated,
-        }
-    }
-
-    pub fn create_javascript_context(
-        &mut self,
-        request: CreateJavascriptContextRequest,
-    ) -> Result<GuestContextHandle, BrowserSidecarError> {
-        self.ensure_vm(&request.vm_id)?;
-
-        let vm_id = request.vm_id.clone();
-        let entrypoint = BrowserWorkerEntrypoint::JavaScript {
-            bootstrap_module: request.bootstrap_module.clone(),
-        };
-        let handle = self
-            .bridge
-            .create_javascript_context(request)
-            .map_err(Self::bridge_error)?;
-
-        self.register_context(vm_id, handle.clone(), entrypoint)?;
-        Ok(handle)
-    }
-
-    pub fn create_wasm_context(
-        &mut self,
-        request: CreateWasmContextRequest,
-    ) -> Result<GuestContextHandle, BrowserSidecarError> {
-        self.ensure_vm(&request.vm_id)?;
-
-        let vm_id = request.vm_id.clone();
-        let entrypoint = BrowserWorkerEntrypoint::WebAssembly {
-            module_path: request.module_path.clone(),
-        };
-        let handle = self
-            .bridge
-            .create_wasm_context(request)
-            .map_err(Self::bridge_error)?;
-
-        self.register_context(vm_id, handle.clone(), entrypoint)?;
-        Ok(handle)
-    }
-
-    pub fn start_execution(
-        &mut self,
-        request: StartExecutionRequest,
-    ) -> Result<StartedExecution, BrowserSidecarError> {
-        self.start_execution_with_options(request, BrowserExecutionOptions::default())
-    }
-
-    pub fn start_execution_with_options(
-        &mut self,
-        request: StartExecutionRequest,
-        options: BrowserExecutionOptions,
-    ) -> Result<StartedExecution, BrowserSidecarError> {
-        self.ensure_vm(&request.vm_id)?;
-
-        let context = self
-            .contexts
-            .get(&request.context_id)
-            .cloned()
-            .ok_or_else(|| {
-                BrowserSidecarError::InvalidState(format!(
-                    "unknown browser sidecar context: {}",
-                    request.context_id
-                ))
-            })?;
-
-        if context.vm_id != request.vm_id {
-            return Err(BrowserSidecarError::InvalidState(format!(
-                "browser sidecar context {} belongs to vm {}, not {}",
-                request.context_id, context.vm_id, request.vm_id
-            )));
-        }
-
-        let guest_cwd = request.cwd.clone();
-        let (kernel_pid, stdin_write_fd) = {
-            let vm = self.vm_mut(&request.vm_id)?;
-            let kernel_handle = vm
-                .kernel
-                .create_virtual_process(
-                    BROWSER_WORKER_DRIVER,
-                    BROWSER_WORKER_DRIVER,
-                    request
-                        .argv
-                        .first()
-                        .map(String::as_str)
-                        .unwrap_or("browser-worker"),
-                    request.argv.clone(),
-                    VirtualProcessOptions {
-                        env: request.env.clone(),
-                        cwd: Some(guest_cwd.clone()),
-                        ..VirtualProcessOptions::default()
-                    },
-                )
-                .map_err(Self::kernel_error)?;
-            let kernel_pid = kernel_handle.pid();
-            match Self::configure_process_stdio(&mut vm.kernel, kernel_pid) {
-                Ok(stdin_write_fd) => (kernel_pid, stdin_write_fd),
-                Err(error) => {
-                    Self::cleanup_pending_kernel_process(&mut vm.kernel, kernel_pid)?;
-                    return Err(error);
-                }
-            }
-        };
-
-        let (process_config, os_config) = {
-            let vm = self.vm(&request.vm_id)?;
-            browser_worker_identity(&vm.kernel, &request, kernel_pid)
-        };
-        let wasm_permission_tier = match context.runtime {
-            GuestRuntime::JavaScript => None,
-            GuestRuntime::WebAssembly => Some(self.resolve_wasm_permission_tier(
-                &request.vm_id,
-                options.command_name.as_deref(),
-                options.wasm_permission_tier,
-                &context.entrypoint,
-            )?),
-        };
-
-        let started = match self.bridge.start_execution(request.clone()) {
-            Ok(started) => started,
-            Err(error) => {
-                let vm = self.vm_mut(&request.vm_id)?;
-                Self::cleanup_pending_kernel_process(&mut vm.kernel, kernel_pid)?;
-                return Err(Self::bridge_error(error));
-            }
-        };
-
-        let worker = match self.bridge.create_worker(BrowserWorkerSpawnRequest {
-            vm_id: request.vm_id.clone(),
-            context_id: request.context_id.clone(),
-            execution_id: started.execution_id.clone(),
-            runtime: context.runtime,
-            entrypoint: context.entrypoint.clone(),
-            wasm_permission_tier,
-            process_config,
-            os_config,
-        }) {
-            Ok(worker) => worker,
-            Err(error) => {
-                let vm = self.vm_mut(&request.vm_id)?;
-                Self::cleanup_pending_kernel_process(&mut vm.kernel, kernel_pid)?;
-                self.bridge
-                    .kill_execution(KillExecutionRequest {
-                        vm_id: request.vm_id,
-                        execution_id: started.execution_id,
-                        signal: secure_exec_bridge::ExecutionSignal::Kill,
-                    })
-                    .map_err(Self::bridge_error)?;
-                return Err(Self::bridge_error(error));
-            }
-        };
-
-        let worker_id = worker.worker_id.clone();
-        self.executions.insert(
-            started.execution_id.clone(),
-            ExecutionState {
-                vm_id: request.vm_id.clone(),
-                worker: worker.clone(),
-                kernel_pid,
-                stdin_write_fd,
-                cwd: guest_cwd,
-            },
-        );
-        let vm_state = self
-            .vms
-            .get_mut(&request.vm_id)
-            .expect("VM should exist after validation");
-        vm_state
-            .active_executions
-            .insert(started.execution_id.clone());
-
-        self.emit_structured(
-            &request.vm_id,
-            "browser.worker.spawned",
-            BTreeMap::from([
-                (String::from("context_id"), request.context_id),
-                (String::from("execution_id"), started.execution_id.clone()),
-                (
-                    String::from("runtime"),
-                    runtime_label(context.runtime).to_string(),
-                ),
-                (String::from("worker_id"), worker_id),
-            ]),
-        )?;
-        self.emit_lifecycle(
-            &request.vm_id,
-            LifecycleState::Busy,
-            Some(String::from(
-                "browser sidecar is coordinating guest execution on the main thread",
-            )),
-        )?;
-
-        Ok(started)
-    }
-
-    fn resolve_wasm_permission_tier(
-        &self,
-        vm_id: &str,
-        command_name: Option<&str>,
-        explicit_tier: Option<WasmPermissionTier>,
-        entrypoint: &BrowserWorkerEntrypoint,
-    ) -> Result<WasmPermissionTier, BrowserSidecarError> {
-        let vm = self.vm(vm_id)?;
-        Ok(explicit_tier
-            .or_else(|| {
-                command_name
-                    .and_then(|command| vm.configuration.command_permissions.get(command).copied())
-            })
-            .or_else(|| {
-                let BrowserWorkerEntrypoint::WebAssembly {
-                    module_path: Some(module_path),
-                } = entrypoint
-                else {
-                    return None;
-                };
-                module_path
-                    .rsplit('/')
-                    .next()
-                    .and_then(|name| vm.configuration.command_permissions.get(name).copied())
-            })
-            .unwrap_or(WasmPermissionTier::Full))
-    }
-
-    fn configure_process_stdio(
-        kernel: &mut BrowserKernel,
-        kernel_pid: u32,
-    ) -> Result<u32, BrowserSidecarError> {
-        let (stdin_read_fd, stdin_write_fd) = kernel
-            .open_pipe(BROWSER_WORKER_DRIVER, kernel_pid)
-            .map_err(Self::kernel_error)?;
-        kernel
-            .fd_dup2(BROWSER_WORKER_DRIVER, kernel_pid, stdin_read_fd, 0)
-            .map_err(Self::kernel_error)?;
-        let (_stdout_read_fd, stdout_write_fd) = kernel
-            .open_pipe(BROWSER_WORKER_DRIVER, kernel_pid)
-            .map_err(Self::kernel_error)?;
-        kernel
-            .fd_dup2(BROWSER_WORKER_DRIVER, kernel_pid, stdout_write_fd, 1)
-            .map_err(Self::kernel_error)?;
-        let (_stderr_read_fd, stderr_write_fd) = kernel
-            .open_pipe(BROWSER_WORKER_DRIVER, kernel_pid)
-            .map_err(Self::kernel_error)?;
-        kernel
-            .fd_dup2(BROWSER_WORKER_DRIVER, kernel_pid, stderr_write_fd, 2)
-            .map_err(Self::kernel_error)?;
-        Ok(stdin_write_fd)
-    }
-
-    fn cleanup_pending_kernel_process(
-        kernel: &mut BrowserKernel,
-        kernel_pid: u32,
-    ) -> Result<(), BrowserSidecarError> {
-        kernel
-            .exit_process(BROWSER_WORKER_DRIVER, kernel_pid, 1)
-            .map_err(Self::kernel_error)?;
-        kernel.waitpid(kernel_pid).map_err(Self::kernel_error)?;
-        Ok(())
-    }
-
-    fn reap_execution_kernel_process(
-        &mut self,
-        vm_id: &str,
-        kernel_pid: u32,
-    ) -> Result<(), BrowserSidecarError> {
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Ok(());
-        };
-        let Some(process) = vm.kernel.list_processes().get(&kernel_pid).cloned() else {
-            return Ok(());
-        };
-
-        if process.status != ProcessStatus::Exited {
-            vm.kernel
-                .exit_process(BROWSER_WORKER_DRIVER, kernel_pid, 1)
-                .map_err(Self::kernel_error)?;
-        }
-        vm.kernel.waitpid(kernel_pid).map_err(Self::kernel_error)?;
-        Ok(())
-    }
-
-    pub fn write_stdin(
-        &mut self,
-        request: WriteExecutionStdinRequest,
-    ) -> Result<(), BrowserSidecarError> {
-        self.ensure_execution(&request.vm_id, &request.execution_id)?;
-        let execution = self.ensure_execution_state(&request.vm_id, &request.execution_id)?;
-        {
-            let vm = self.vm_mut(&request.vm_id)?;
-            vm.kernel
-                .fd_write(
-                    BROWSER_WORKER_DRIVER,
-                    execution.kernel_pid,
-                    execution.stdin_write_fd,
-                    &request.chunk,
-                )
-                .map_err(Self::kernel_error)?;
-        }
-        self.bridge.write_stdin(request).map_err(Self::bridge_error)
-    }
-
-    pub fn close_stdin(
-        &mut self,
-        request: ExecutionHandleRequest,
-    ) -> Result<(), BrowserSidecarError> {
-        self.ensure_execution(&request.vm_id, &request.execution_id)?;
-        let execution = self.ensure_execution_state(&request.vm_id, &request.execution_id)?;
-        {
-            let vm = self.vm_mut(&request.vm_id)?;
-            vm.kernel
-                .fd_close(
-                    BROWSER_WORKER_DRIVER,
-                    execution.kernel_pid,
-                    execution.stdin_write_fd,
-                )
-                .map_err(Self::kernel_error)?;
-        }
-        self.bridge.close_stdin(request).map_err(Self::bridge_error)
-    }
-
-    pub fn kill_execution(
-        &mut self,
-        request: KillExecutionRequest,
-    ) -> Result<(), BrowserSidecarError> {
-        self.ensure_execution(&request.vm_id, &request.execution_id)?;
-        self.signal_execution_kernel_process(
-            &request.vm_id,
-            &request.execution_id,
-            secure_exec_sidecar_core::execution_signal_to_kernel(request.signal),
-        )?;
-        self.bridge
-            .kill_execution(request)
-            .map_err(Self::bridge_error)
-    }
-
-    pub fn signal_execution_kernel_process(
-        &mut self,
-        vm_id: &str,
-        execution_id: &str,
-        signal: i32,
-    ) -> Result<(), BrowserSidecarError> {
-        self.ensure_execution(vm_id, execution_id)?;
-        let execution = self.ensure_execution_state(vm_id, execution_id)?;
-        {
-            let vm = self.vm_mut(vm_id)?;
-            vm.kernel
-                .kill_process(BROWSER_WORKER_DRIVER, execution.kernel_pid, signal)
-                .map_err(Self::kernel_error)?;
-        }
-        Ok(())
-    }
-
-    pub fn poll_execution_event(
-        &mut self,
-        request: PollExecutionEventRequest,
-    ) -> Result<Option<ExecutionEvent>, BrowserSidecarError> {
-        self.ensure_vm(&request.vm_id)?;
-
-        let event = self
-            .bridge
-            .poll_execution_event(request)
-            .map_err(Self::bridge_error)?;
-
-        match &event {
-            Some(ExecutionEvent::Stdout(chunk)) => {
-                let execution = self.ensure_execution_state(&chunk.vm_id, &chunk.execution_id)?;
-                let vm = self.vm_mut(&chunk.vm_id)?;
-                vm.kernel
-                    .write_process_stdout(BROWSER_WORKER_DRIVER, execution.kernel_pid, &chunk.chunk)
-                    .map_err(Self::kernel_error)?;
-            }
-            Some(ExecutionEvent::Stderr(chunk)) => {
-                let execution = self.ensure_execution_state(&chunk.vm_id, &chunk.execution_id)?;
-                let vm = self.vm_mut(&chunk.vm_id)?;
-                vm.kernel
-                    .write_process_stderr(BROWSER_WORKER_DRIVER, execution.kernel_pid, &chunk.chunk)
-                    .map_err(Self::kernel_error)?;
-            }
-            Some(ExecutionEvent::Exited(exited)) => {
-                let execution = self.ensure_execution_state(&exited.vm_id, &exited.execution_id)?;
-                {
-                    let vm = self.vm_mut(&exited.vm_id)?;
-                    vm.kernel
-                        .exit_process(
-                            BROWSER_WORKER_DRIVER,
-                            execution.kernel_pid,
-                            exited.exit_code,
-                        )
-                        .map_err(Self::kernel_error)?;
-                }
-                self.release_execution(&exited.execution_id, "browser.worker.reaped")?;
-            }
-            Some(ExecutionEvent::GuestRequest(call)) => {
-                let fields = unsupported_guest_kernel_call_detail(
-                    None,
-                    &call.execution_id,
-                    &call.operation,
-                    call.payload.len(),
-                )
-                .into_iter()
-                .collect();
-                self.emit_structured(
-                    &call.vm_id,
-                    secure_exec_sidecar_core::UNSUPPORTED_GUEST_KERNEL_CALL_EVENT,
-                    fields,
-                )?;
-            }
-            Some(ExecutionEvent::SignalState(state)) => {
-                self.ensure_execution_state(&state.vm_id, &state.execution_id)?;
-                let registration = protocol_signal_registration(&state.registration);
-                let vm = self.vm_mut(&state.vm_id)?;
-                apply_process_signal_state_update(
-                    &mut vm.signal_states,
-                    &state.execution_id,
-                    state.signal,
-                    registration,
-                );
-            }
-            None => {}
-        }
-
-        Ok(event)
-    }
-
-    fn register_context(
-        &mut self,
-        vm_id: String,
-        handle: GuestContextHandle,
-        entrypoint: BrowserWorkerEntrypoint,
-    ) -> Result<(), BrowserSidecarError> {
-        self.contexts.insert(
-            handle.context_id.clone(),
-            ContextState {
-                vm_id: vm_id.clone(),
-                runtime: handle.runtime,
-                entrypoint,
-            },
-        );
-        let vm_state = self
-            .vms
-            .get_mut(&vm_id)
-            .expect("VM should exist while registering a guest context");
-        vm_state.contexts.insert(handle.context_id.clone());
-
-        self.emit_structured(
-            &vm_id,
-            "browser.context.created",
-            BTreeMap::from([
-                (String::from("context_id"), handle.context_id),
-                (
-                    String::from("runtime"),
-                    runtime_label(handle.runtime).to_string(),
-                ),
-            ]),
-        )
-    }
-
-    fn release_execution(
-        &mut self,
-        execution_id: &str,
-        event_name: &'static str,
-    ) -> Result<(), BrowserSidecarError> {
-        let Some(execution) = self.executions.remove(execution_id) else {
-            return Ok(());
-        };
-
-        if let Some(vm_state) = self.vms.get_mut(&execution.vm_id) {
-            vm_state.active_executions.remove(execution_id);
-            vm_state.signal_states.remove(execution_id);
-        }
-
-        let vm_id = execution.vm_id;
-        self.reap_execution_kernel_process(&vm_id, execution.kernel_pid)?;
-        let runtime = execution.worker.runtime;
-        let worker_id = execution.worker.worker_id;
-        self.bridge
-            .terminate_worker(BrowserWorkerHandleRequest {
-                vm_id: vm_id.clone(),
-                execution_id: execution_id.to_string(),
-                worker_id: worker_id.clone(),
-            })
-            .map_err(Self::bridge_error)?;
-
-        self.emit_structured(
-            &vm_id,
-            event_name,
-            BTreeMap::from([
-                (String::from("execution_id"), execution_id.to_string()),
-                (String::from("runtime"), runtime_label(runtime).to_string()),
-                (String::from("worker_id"), worker_id),
-            ]),
-        )?;
-
-        let next_state = if self.active_worker_count(&vm_id) == 0 {
-            LifecycleState::Ready
-        } else {
-            LifecycleState::Busy
-        };
-        self.emit_lifecycle(
-            &vm_id,
-            next_state,
-            Some(String::from(
-                "browser sidecar worker bookkeeping was updated on the main thread",
-            )),
-        )
-    }
-
-    fn ensure_vm(&self, vm_id: &str) -> Result<(), BrowserSidecarError> {
-        if self.vms.contains_key(vm_id) {
-            Ok(())
-        } else {
-            Err(BrowserSidecarError::InvalidState(format!(
-                "unknown browser sidecar VM: {vm_id}"
-            )))
-        }
-    }
-
-    fn ensure_execution(&self, vm_id: &str, execution_id: &str) -> Result<(), BrowserSidecarError> {
-        let execution = self.executions.get(execution_id).ok_or_else(|| {
-            BrowserSidecarError::InvalidState(format!(
-                "unknown browser sidecar execution: {execution_id}"
-            ))
-        })?;
-
-        if execution.vm_id == vm_id {
-            Ok(())
-        } else {
-            Err(BrowserSidecarError::InvalidState(format!(
-                "browser sidecar execution {execution_id} belongs to vm {}, not {vm_id}",
-                execution.vm_id
-            )))
-        }
-    }
-
-    fn ensure_execution_state(
-        &self,
-        vm_id: &str,
-        execution_id: &str,
-    ) -> Result<ExecutionState, BrowserSidecarError> {
-        let execution = self.executions.get(execution_id).cloned().ok_or_else(|| {
-            BrowserSidecarError::InvalidState(format!(
-                "unknown browser sidecar execution: {execution_id}"
-            ))
-        })?;
-
-        if execution.vm_id == vm_id {
-            Ok(execution)
-        } else {
-            Err(BrowserSidecarError::InvalidState(format!(
-                "browser sidecar execution {execution_id} belongs to vm {}, not {vm_id}",
-                execution.vm_id
-            )))
-        }
-    }
-
-    fn vm(&self, vm_id: &str) -> Result<&VmState, BrowserSidecarError> {
-        self.vms.get(vm_id).ok_or_else(|| {
-            BrowserSidecarError::InvalidState(format!("unknown browser sidecar VM: {vm_id}"))
-        })
-    }
-
-    fn vm_mut(&mut self, vm_id: &str) -> Result<&mut VmState, BrowserSidecarError> {
-        self.vms.get_mut(vm_id).ok_or_else(|| {
-            BrowserSidecarError::InvalidState(format!("unknown browser sidecar VM: {vm_id}"))
-        })
-    }
-
-    fn emit_lifecycle(
-        &mut self,
-        vm_id: &str,
-        state: LifecycleState,
-        detail: Option<String>,
-    ) -> Result<(), BrowserSidecarError> {
-        self.bridge
-            .emit_lifecycle(LifecycleEventRecord {
-                vm_id: vm_id.to_string(),
-                state,
-                detail,
-            })
-            .map_err(Self::bridge_error)
-    }
-
-    fn emit_structured(
-        &mut self,
-        vm_id: &str,
-        name: &str,
-        fields: BTreeMap<String, String>,
-    ) -> Result<(), BrowserSidecarError> {
-        self.bridge
-            .emit_structured_event(StructuredEventRecord {
-                vm_id: vm_id.to_string(),
-                name: name.to_string(),
-                fields,
-            })
-            .map_err(Self::bridge_error)
-    }
-
-    fn bridge_error(error: BridgeError<B>) -> BrowserSidecarError {
-        BrowserSidecarError::Bridge(format!("{error:?}"))
-    }
-
-    fn sidecar_core_error(
-        error: secure_exec_sidecar_core::SidecarCoreError,
-    ) -> BrowserSidecarError {
-        BrowserSidecarError::InvalidState(error.to_string())
-    }
-
-    fn kernel_error(error: KernelError) -> BrowserSidecarError {
-        BrowserSidecarError::Kernel(error.to_string())
-    }
-
-    fn apply_root_filesystem_entry(
-        &mut self,
-        vm_id: &str,
-        entry: &RootFilesystemEntry,
-    ) -> Result<(), BrowserSidecarError> {
-        // Shared with native: write the bootstrap entry through the VM's filesystem
-        // (trusted, pre-guest; permissions default to allow at bootstrap time) with
-        // deterministic mode/uid/gid defaults — see sidecar-core::apply_root_filesystem_entry.
-        let filesystem = self.vm_mut(vm_id)?.kernel.filesystem_mut();
-        secure_exec_sidecar_core::apply_root_filesystem_entry(filesystem, entry)
-            .map_err(Self::sidecar_core_error)
-    }
-}
-
-fn root_snapshot_from_entries(
-    entries: &[RootFilesystemEntry],
-) -> Result<RootFilesystemSnapshot, BrowserSidecarError> {
-    // Shared with native (sidecar-core): protocol entries -> kernel snapshot.
-    secure_exec_sidecar_core::root_snapshot_from_entries(entries)
-        .map_err(|error| BrowserSidecarError::InvalidState(error.to_string()))
-}
-
-#[cfg(not(target_arch = "wasm32"))]
-fn browser_vm_fetch_timeout() -> Duration {
-    std::env::var(BROWSER_VM_FETCH_TIMEOUT_MS_ENV)
-        .ok()
-        .and_then(|value| value.parse::<u64>().ok())
-        .map(Duration::from_millis)
-        .unwrap_or(BROWSER_VM_FETCH_TIMEOUT)
-}
-
-#[cfg(target_arch = "wasm32")]
-fn browser_vm_fetch_timeout() -> Duration {
-    BROWSER_VM_FETCH_TIMEOUT
-}
-
-fn socket_host_matches(requested: Option<&str>, actual: &str) -> bool {
-    match requested {
-        None => true,
-        Some(requested) if requested == actual => true,
-        Some(requested)
-            if is_unspecified_socket_host(requested) && is_unspecified_socket_host(actual) =>
-        {
-            true
-        }
-        Some(requested) if is_unspecified_socket_host(requested) => is_loopback_socket_host(actual),
-        Some(requested) if requested.eq_ignore_ascii_case("localhost") => {
-            is_loopback_socket_host(actual)
-        }
-        _ => false,
-    }
-}
-
-fn is_unspecified_socket_host(host: &str) -> bool {
-    host == "0.0.0.0" || host == "::"
-}
-
-fn is_loopback_socket_host(host: &str) -> bool {
-    host == "127.0.0.1" || host == "::1" || host.eq_ignore_ascii_case("localhost")
-}
-
-impl<B> BrowserExtensionHost for BrowserSidecar<B>
-where
-    B: BrowserSidecarBridge,
-    BridgeError<B>: fmt::Debug,
-{
-    fn write_file(
-        &mut self,
-        vm_id: &str,
-        path: &str,
-        contents: Vec<u8>,
-    ) -> Result<(), BrowserSidecarError> {
-        BrowserSidecar::write_file(self, vm_id, path, contents)
-    }
-
-    fn read_file(&mut self, vm_id: &str, path: &str) -> Result<Vec<u8>, BrowserSidecarError> {
-        BrowserSidecar::read_file(self, vm_id, path)
-    }
-
-    fn mkdir(
-        &mut self,
-        vm_id: &str,
-        path: &str,
-        recursive: bool,
-    ) -> Result<(), BrowserSidecarError> {
-        BrowserSidecar::mkdir(self, vm_id, path, recursive)
-    }
-
-    fn read_dir(&mut self, vm_id: &str, path: &str) -> Result<Vec<String>, BrowserSidecarError> {
-        BrowserSidecar::read_dir(self, vm_id, path)
-    }
-
-    fn create_javascript_context(
-        &mut self,
-        request: CreateJavascriptContextRequest,
-    ) -> Result<GuestContextHandle, BrowserSidecarError> {
-        BrowserSidecar::create_javascript_context(self, request)
-    }
-
-    fn create_wasm_context(
-        &mut self,
-        request: CreateWasmContextRequest,
-    ) -> Result<GuestContextHandle, BrowserSidecarError> {
-        BrowserSidecar::create_wasm_context(self, request)
-    }
-
-    fn start_execution(
-        &mut self,
-        request: StartExecutionRequest,
-    ) -> Result<StartedExecution, BrowserSidecarError> {
-        BrowserSidecar::start_execution(self, request)
-    }
-
-    fn write_stdin(
-        &mut self,
-        request: WriteExecutionStdinRequest,
-    ) -> Result<(), BrowserSidecarError> {
-        BrowserSidecar::write_stdin(self, request)
-    }
-
-    fn close_stdin(&mut self, request: ExecutionHandleRequest) -> Result<(), BrowserSidecarError> {
-        BrowserSidecar::close_stdin(self, request)
-    }
-
-    fn kill_execution(&mut self, request: KillExecutionRequest) -> Result<(), BrowserSidecarError> {
-        BrowserSidecar::kill_execution(self, request)
-    }
-
-    fn poll_execution_event(
-        &mut self,
-        request: PollExecutionEventRequest,
-    ) -> Result<Option<ExecutionEvent>, BrowserSidecarError> {
-        BrowserSidecar::poll_execution_event(self, request)
-    }
-}
-
-fn runtime_label(runtime: GuestRuntime) -> &'static str {
-    match runtime {
-        GuestRuntime::JavaScript => "javascript",
-        GuestRuntime::WebAssembly => "webassembly",
-    }
-}
-
-fn protocol_signal_registration(
-    registration: &SignalHandlerRegistration,
-) -> ProtocolSignalHandlerRegistration {
-    ProtocolSignalHandlerRegistration {
-        action: match registration.action {
-            SignalDispositionAction::Default => ProtocolSignalDispositionAction::Default,
-            SignalDispositionAction::Ignore => ProtocolSignalDispositionAction::Ignore,
-            SignalDispositionAction::User => ProtocolSignalDispositionAction::User,
-        },
-        mask: registration.mask.clone(),
-        flags: registration.flags,
-    }
-}
-
-#[cfg(test)]
-impl<B> BrowserSidecar<B>
-where
-    B: BrowserSidecarBridge,
-    BridgeError<B>: fmt::Debug,
-{
-    /// Test-only: number of entries still tracked in the global `contexts` map.
-    pub(crate) fn test_total_context_count(&self) -> usize {
-        self.contexts.len()
-    }
-
-    /// Test-only: number of entries still tracked in the global `executions` map.
-    pub(crate) fn test_total_execution_count(&self) -> usize {
-        self.executions.len()
-    }
-
-    /// Test-only: inject a context directly into both the global `contexts` map
-    /// and the owning VM's context set, bypassing the bridge round-trip so a
-    /// dispose-path test can exercise cleanup at the smallest seam.
-    pub(crate) fn test_insert_context(&mut self, vm_id: &str, context_id: &str) {
-        self.contexts.insert(
-            context_id.to_string(),
-            ContextState {
-                vm_id: vm_id.to_string(),
-                runtime: GuestRuntime::JavaScript,
-                entrypoint: BrowserWorkerEntrypoint::JavaScript {
-                    bootstrap_module: None,
-                },
-            },
-        );
-        if let Some(vm) = self.vms.get_mut(vm_id) {
-            vm.contexts.insert(context_id.to_string());
-        }
-    }
-
-    /// Test-only: inject an active execution directly into both the global
-    /// `executions` map and the owning VM's active-execution set.
-    pub(crate) fn test_insert_execution(&mut self, vm_id: &str, execution_id: &str) {
-        self.executions.insert(
-            execution_id.to_string(),
-            ExecutionState {
-                vm_id: vm_id.to_string(),
-                worker: BrowserWorkerHandle {
-                    worker_id: format!("worker-{execution_id}"),
-                    runtime: GuestRuntime::JavaScript,
-                },
-                kernel_pid: 0,
-                stdin_write_fd: 0,
-                cwd: String::new(),
-            },
-        );
-        if let Some(vm) = self.vms.get_mut(vm_id) {
-            vm.active_executions.insert(execution_id.to_string());
-        }
-    }
-}
-
-#[cfg(test)]
-#[allow(clippy::items_after_test_module)] // browser_worker_identity below is shared with the worker shim
-mod tests {
-    use super::*;
-    use secure_exec_bridge::{
-        ChmodRequest, ClockRequest, CommandPermissionRequest, CreateDirRequest, DiagnosticRecord,
-        DirectoryEntry, EnvironmentPermissionRequest, ExecutionHandleRequest, FileMetadata,
-        FilesystemPermissionRequest, FilesystemSnapshot, FlushFilesystemStateRequest,
-        LoadFilesystemStateRequest, LogRecord, NetworkPermissionRequest, PathRequest,
-        PermissionDecision, RandomBytesRequest, ReadDirRequest, ReadFileRequest, RenameRequest,
-        ScheduleTimerRequest, ScheduledTimer, SymlinkRequest, TruncateRequest, WriteFileRequest,
-    };
-    use secure_exec_bridge::{
-        ClockBridge, EventBridge, ExecutionBridge, FilesystemBridge, PermissionBridge,
-        PersistenceBridge, RandomBridge,
-    };
-    use secure_exec_kernel::kernel::KernelVmConfig;
-    use std::time::SystemTime;
-
-    #[derive(Debug, Clone, PartialEq, Eq)]
-    struct TestBridgeError(String);
-
-    /// Minimal bridge whose `terminate_worker` can be forced to fail, used to
-    /// drive a mid-dispose error through `release_execution`.
-    #[derive(Default)]
-    struct TerminateFailingBridge {
-        fail_terminate: bool,
-    }
-
-    impl BridgeTypes for TerminateFailingBridge {
-        type Error = TestBridgeError;
-    }
-
-    impl FilesystemBridge for TerminateFailingBridge {
-        fn read_file(&mut self, _request: ReadFileRequest) -> Result<Vec<u8>, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn write_file(&mut self, _request: WriteFileRequest) -> Result<(), Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn stat(&mut self, _request: PathRequest) -> Result<FileMetadata, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn lstat(&mut self, _request: PathRequest) -> Result<FileMetadata, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn read_dir(
-            &mut self,
-            _request: ReadDirRequest,
-        ) -> Result<Vec<DirectoryEntry>, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn create_dir(&mut self, _request: CreateDirRequest) -> Result<(), Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn remove_file(&mut self, _request: PathRequest) -> Result<(), Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn remove_dir(&mut self, _request: PathRequest) -> Result<(), Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn rename(&mut self, _request: RenameRequest) -> Result<(), Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn symlink(&mut self, _request: SymlinkRequest) -> Result<(), Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn read_link(&mut self, _request: PathRequest) -> Result<String, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn chmod(&mut self, _request: ChmodRequest) -> Result<(), Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn truncate(&mut self, _request: TruncateRequest) -> Result<(), Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn exists(&mut self, _request: PathRequest) -> Result<bool, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-    }
-
-    impl PermissionBridge for TerminateFailingBridge {
-        fn check_filesystem_access(
-            &mut self,
-            _request: FilesystemPermissionRequest,
-        ) -> Result<PermissionDecision, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn check_network_access(
-            &mut self,
-            _request: NetworkPermissionRequest,
-        ) -> Result<PermissionDecision, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn check_command_execution(
-            &mut self,
-            _request: CommandPermissionRequest,
-        ) -> Result<PermissionDecision, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn check_environment_access(
-            &mut self,
-            _request: EnvironmentPermissionRequest,
-        ) -> Result<PermissionDecision, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-    }
-
-    impl PersistenceBridge for TerminateFailingBridge {
-        fn load_filesystem_state(
-            &mut self,
-            _request: LoadFilesystemStateRequest,
-        ) -> Result<Option<FilesystemSnapshot>, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn flush_filesystem_state(
-            &mut self,
-            _request: FlushFilesystemStateRequest,
-        ) -> Result<(), Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-    }
-
-    impl ClockBridge for TerminateFailingBridge {
-        fn wall_clock(&mut self, _request: ClockRequest) -> Result<SystemTime, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn monotonic_clock(&mut self, _request: ClockRequest) -> Result<Duration, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn schedule_timer(
-            &mut self,
-            _request: ScheduleTimerRequest,
-        ) -> Result<ScheduledTimer, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-    }
-
-    impl RandomBridge for TerminateFailingBridge {
-        fn fill_random_bytes(
-            &mut self,
-            _request: RandomBytesRequest,
-        ) -> Result<Vec<u8>, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-    }
-
-    impl EventBridge for TerminateFailingBridge {
-        fn emit_structured_event(
-            &mut self,
-            _event: StructuredEventRecord,
-        ) -> Result<(), Self::Error> {
-            Ok(())
-        }
-        fn emit_diagnostic(&mut self, _event: DiagnosticRecord) -> Result<(), Self::Error> {
-            Ok(())
-        }
-        fn emit_log(&mut self, _event: LogRecord) -> Result<(), Self::Error> {
-            Ok(())
-        }
-        fn emit_lifecycle(&mut self, _event: LifecycleEventRecord) -> Result<(), Self::Error> {
-            Ok(())
-        }
-    }
-
-    impl ExecutionBridge for TerminateFailingBridge {
-        fn create_javascript_context(
-            &mut self,
-            _request: CreateJavascriptContextRequest,
-        ) -> Result<GuestContextHandle, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn create_wasm_context(
-            &mut self,
-            _request: CreateWasmContextRequest,
-        ) -> Result<GuestContextHandle, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn start_execution(
-            &mut self,
-            _request: StartExecutionRequest,
-        ) -> Result<StartedExecution, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn write_stdin(&mut self, _request: WriteExecutionStdinRequest) -> Result<(), Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn close_stdin(&mut self, _request: ExecutionHandleRequest) -> Result<(), Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn kill_execution(&mut self, _request: KillExecutionRequest) -> Result<(), Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-        fn poll_execution_event(
-            &mut self,
-            _request: PollExecutionEventRequest,
-        ) -> Result<Option<ExecutionEvent>, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-    }
-
-    impl crate::BrowserWorkerBridge for TerminateFailingBridge {
-        fn create_worker(
-            &mut self,
-            _request: BrowserWorkerSpawnRequest,
-        ) -> Result<BrowserWorkerHandle, Self::Error> {
-            unimplemented!("not exercised by dispose test")
-        }
-
-        fn terminate_worker(
-            &mut self,
-            _request: BrowserWorkerHandleRequest,
-        ) -> Result<(), Self::Error> {
-            if self.fail_terminate {
-                Err(TestBridgeError(String::from("forced terminate failure")))
-            } else {
-                Ok(())
-            }
-        }
-    }
-
-    // A mid-dispose worker-termination failure must still drain the VM, context,
-    // and execution bookkeeping for that id — otherwise the VmState (holding a
-    // BrowserKernel) and ContextState leak for the process lifetime.
-    #[test]
-    fn dispose_vm_drains_maps_even_when_worker_termination_fails() {
-        let bridge = TerminateFailingBridge {
-            fail_terminate: true,
-        };
-        let mut sidecar = BrowserSidecar::new(bridge, BrowserSidecarConfig::default());
-
-        sidecar
-            .create_vm(KernelVmConfig::new("vm-leak"))
-            .expect("create vm");
-        sidecar.test_insert_context("vm-leak", "ctx-leak");
-        sidecar.test_insert_execution("vm-leak", "exec-leak");
-
-        assert_eq!(sidecar.vm_count(), 1);
-        assert_eq!(sidecar.test_total_context_count(), 1);
-        assert_eq!(sidecar.test_total_execution_count(), 1);
-
-        // The forced terminate_worker failure surfaces as an error, but the
-        // dispose must still have reclaimed every entry for `vm-leak`.
-        let result = sidecar.dispose_vm("vm-leak");
-        assert!(result.is_err(), "forced terminate failure should surface");
-
-        assert_eq!(sidecar.vm_count(), 0, "VmState leaked after failed dispose");
-        assert_eq!(
-            sidecar.test_total_context_count(),
-            0,
-            "ContextState leaked after failed dispose"
-        );
-        assert_eq!(
-            sidecar.test_total_execution_count(),
-            0,
-            "ExecutionState leaked after failed dispose"
-        );
-    }
-}
-
-fn browser_worker_identity(
-    kernel: &BrowserKernel,
-    request: &StartExecutionRequest,
-    kernel_pid: u32,
-) -> (BrowserWorkerProcessConfig, BrowserWorkerOsConfig) {
-    let mut env = kernel.environment().clone();
-    env.extend(request.env.clone());
-    let user = kernel.user_profile();
-    let resource_limits = kernel.resource_limits();
-    let identity =
-        shared_guest_runtime_identity(&user, resource_limits, Some(u64::from(kernel_pid)), Some(0));
-
-    (
-        BrowserWorkerProcessConfig {
-            cwd: request.cwd.clone(),
-            env,
-            argv: request.argv.clone(),
-            platform: identity.process_platform.clone(),
-            arch: identity.process_arch.clone(),
-            version: String::from("v22.0.0"),
-            pid: kernel_pid,
-            ppid: 0,
-            uid: identity.virtual_uid as u32,
-            gid: identity.virtual_gid as u32,
-        },
-        BrowserWorkerOsConfig {
-            platform: identity.process_platform,
-            arch: identity.process_arch.clone(),
-            r#type: identity.os_type,
-            release: identity.os_release,
-            version: identity.os_version,
-            cpu_count: identity.os_cpu_count,
-            totalmem: identity.os_totalmem,
-            freemem: identity.os_freemem,
-            hostname: identity.os_hostname,
-            homedir: identity.os_homedir,
-            tmpdir: identity.os_tmpdir,
-            machine: identity.os_machine,
-            user: identity.os_user,
-            shell: identity.os_shell,
-            uid: identity.virtual_uid as u32,
-            gid: identity.virtual_gid as u32,
-        },
-    )
-}
diff --git a/crates/sidecar-browser/src/wasm.rs b/crates/sidecar-browser/src/wasm.rs
deleted file mode 100644
index 634491a9d..000000000
--- a/crates/sidecar-browser/src/wasm.rs
+++ /dev/null
@@ -1,924 +0,0 @@
-use crate::wire_dispatch::{BrowserWireDispatcher, BROWSER_SIDECAR_ID};
-use crate::{
-    BrowserWorkerBridge, BrowserWorkerEntrypoint, BrowserWorkerHandle, BrowserWorkerHandleRequest,
-    BrowserWorkerOsConfig, BrowserWorkerProcessConfig, BrowserWorkerSpawnRequest,
-};
-use base64::Engine;
-use js_sys::{Error as JsError, Function, Reflect, Uint8Array, JSON};
-use secure_exec_bridge::{
-    BridgeTypes, ChmodRequest, ClockBridge, ClockRequest, CommandPermissionRequest,
-    CreateDirRequest, CreateJavascriptContextRequest, CreateWasmContextRequest, DiagnosticRecord,
-    DirectoryEntry, EnvironmentAccess, EnvironmentPermissionRequest, EventBridge, ExecutionBridge,
-    ExecutionEvent, ExecutionExited, ExecutionHandleRequest, ExecutionSignal, ExecutionSignalState,
-    FileKind, FileMetadata, FilesystemAccess, FilesystemBridge, FilesystemPermissionRequest,
-    FilesystemSnapshot, FlushFilesystemStateRequest, GuestContextHandle, GuestKernelCall,
-    GuestRuntime, KillExecutionRequest, LifecycleEventRecord, LoadFilesystemStateRequest, LogLevel,
-    LogRecord, NetworkAccess, NetworkPermissionRequest, OutputChunk, PathRequest, PermissionBridge,
-    PermissionDecision, PermissionVerdict, PersistenceBridge, PollExecutionEventRequest,
-    RandomBridge, RandomBytesRequest, ReadDirRequest, ReadFileRequest, RenameRequest,
-    ScheduleTimerRequest, ScheduledTimer, SignalDispositionAction, SignalHandlerRegistration,
-    StartExecutionRequest, StartedExecution, StructuredEventRecord, SymlinkRequest,
-    TruncateRequest, WriteExecutionStdinRequest, WriteFileRequest,
-};
-use secure_exec_sidecar_protocol::wire::WasmPermissionTier;
-use serde_json::{json, Value};
-use std::collections::BTreeMap;
-use std::time::{Duration, SystemTime, UNIX_EPOCH};
-use wasm_bindgen::prelude::*;
-use wasm_bindgen::JsCast;
-
-#[wasm_bindgen]
-pub struct BrowserSidecarWasm {
-    dispatcher: BrowserWireDispatcher<BrowserJsBridge>,
-}
-
-#[wasm_bindgen]
-impl BrowserSidecarWasm {
-    #[wasm_bindgen(constructor)]
-    pub fn new(host_bridge: Option<JsValue>) -> Self {
-        Self {
-            dispatcher: BrowserWireDispatcher::new(BrowserJsBridge::new(host_bridge)),
-        }
-    }
-
-    #[wasm_bindgen(getter, js_name = sidecarId)]
-    pub fn sidecar_id(&self) -> String {
-        String::from(BROWSER_SIDECAR_ID)
-    }
-
-    #[wasm_bindgen(js_name = pushFrame)]
-    pub fn push_frame(&mut self, frame: Uint8Array) -> Result<JsValue, JsValue> {
-        let bytes = frame.to_vec();
-        let response = self
-            .dispatcher
-            .handle_request_bytes(&bytes)
-            .map_err(js_error)?;
-        Ok(Uint8Array::from(response.as_slice()).into())
-    }
-
-    #[wasm_bindgen(js_name = pollEvent)]
-    pub fn poll_event(&mut self) -> Result<JsValue, JsValue> {
-        match self.dispatcher.poll_event_bytes().map_err(js_error)? {
-            Some(event) => Ok(Uint8Array::from(event.as_slice()).into()),
-            None => Ok(JsValue::NULL),
-        }
-    }
-}
-
-impl Default for BrowserSidecarWasm {
-    fn default() -> Self {
-        Self::new(None)
-    }
-}
-
-fn js_error(error: impl ToString) -> JsValue {
-    JsError::new(&error.to_string()).into()
-}
-
-/// The wasm-side host bridge: marshals every kernel/host operation to the JS host
-/// object installed in the Worker. Exported so wrapper crates (e.g. Agent OS) can
-/// build their own `#[wasm_bindgen]` entry over `BrowserWireDispatcher` while
-/// registering their own `BrowserExtension`s, instead of re-implementing the bridge.
-#[derive(Clone, Debug)]
-pub struct BrowserJsBridge {
-    host: Option<JsValue>,
-    next_timer: u64,
-}
-
-impl BrowserJsBridge {
-    pub fn new(host: Option<JsValue>) -> Self {
-        Self {
-            host: host.filter(|value| !value.is_null() && !value.is_undefined()),
-            next_timer: 0,
-        }
-    }
-
-    fn unsupported<T>(&self, operation: &str) -> Result<T, String> {
-        Err(format!(
-            "{operation} is not available because no browser sidecar host bridge method is installed"
-        ))
-    }
-
-    fn call(&self, method: &str, request: Value) -> Result<JsValue, String> {
-        let Some(host) = &self.host else {
-            return self.unsupported(method);
-        };
-        let function = Reflect::get(host, &JsValue::from_str(method))
-            .map_err(format_js_error)?
-            .dyn_into::<Function>()
-            .map_err(|_| {
-                format!("browser sidecar host bridge method {method} is not a function")
-            })?;
-        let request = serde_json::to_string(&request)
-            .map_err(|error| format!("serialize {method} request: {error}"))?;
-        function
-            .call1(host, &JsValue::from_str(&request))
-            .map_err(format_js_error)
-    }
-
-    fn call_void(&self, method: &str, request: Value) -> Result<(), String> {
-        let _ = self.call(method, request)?;
-        Ok(())
-    }
-
-    fn call_json(&self, method: &str, request: Value) -> Result<Value, String> {
-        js_value_to_json(self.call(method, request)?)
-    }
-
-    fn call_bytes(&self, method: &str, request: Value) -> Result<Vec<u8>, String> {
-        let value = self.call(method, request)?;
-        if value.is_null() || value.is_undefined() {
-            return Ok(Vec::new());
-        }
-        if value.is_instance_of::<Uint8Array>() {
-            return Ok(Uint8Array::new(&value).to_vec());
-        }
-        if let Some(encoded) = value.as_string() {
-            return base64::engine::general_purpose::STANDARD
-                .decode(encoded)
-                .map_err(|error| format!("{method} returned invalid base64: {error}"));
-        }
-        Err(format!(
-            "{method} must return Uint8Array, base64 string, null, or undefined"
-        ))
-    }
-}
-
-fn format_js_error(error: JsValue) -> String {
-    if let Some(message) = Reflect::get(&error, &JsValue::from_str("message"))
-        .ok()
-        .and_then(|value| value.as_string())
-    {
-        return message;
-    }
-    error
-        .as_string()
-        .unwrap_or_else(|| String::from("JavaScript error"))
-}
-
-fn js_value_to_json(value: JsValue) -> Result<Value, String> {
-    if value.is_undefined() || value.is_null() {
-        return Ok(Value::Null);
-    }
-    if let Some(text) = value.as_string() {
-        return serde_json::from_str(&text).map_err(|error| format!("parse JSON string: {error}"));
-    }
-    let text = JSON::stringify(&value)
-        .map_err(format_js_error)?
-        .as_string()
-        .ok_or_else(|| String::from("JSON.stringify returned a non-string value"))?;
-    serde_json::from_str(&text).map_err(|error| format!("parse JSON value: {error}"))
-}
-
-fn get_string(value: &Value, key: &str) -> Result<String, String> {
-    value
-        .get(key)
-        .and_then(Value::as_str)
-        .map(ToOwned::to_owned)
-        .ok_or_else(|| format!("missing string field '{key}'"))
-}
-
-fn get_optional_string(value: &Value, key: &str) -> Option<String> {
-    value
-        .get(key)
-        .and_then(Value::as_str)
-        .map(ToOwned::to_owned)
-}
-
-fn get_u64(value: &Value, key: &str) -> Result<u64, String> {
-    value
-        .get(key)
-        .and_then(Value::as_u64)
-        .ok_or_else(|| format!("missing u64 field '{key}'"))
-}
-
-fn get_i32(value: &Value, key: &str) -> Result<i32, String> {
-    value
-        .get(key)
-        .and_then(Value::as_i64)
-        .and_then(|number| i32::try_from(number).ok())
-        .ok_or_else(|| format!("missing i32 field '{key}'"))
-}
-
-fn base_request(vm_id: impl Into<String>) -> Value {
-    json!({ "vmId": vm_id.into() })
-}
-
-fn path_request(request: PathRequest) -> Value {
-    json!({ "vmId": request.vm_id, "path": request.path })
-}
-
-fn file_kind_from_json(value: &Value) -> Result<FileKind, String> {
-    match value.as_str().unwrap_or("other") {
-        "file" => Ok(FileKind::File),
-        "directory" => Ok(FileKind::Directory),
-        "symbolicLink" | "symlink" => Ok(FileKind::SymbolicLink),
-        "other" => Ok(FileKind::Other),
-        kind => Err(format!("unknown file kind '{kind}'")),
-    }
-}
-
-fn metadata_from_json(value: Value) -> Result<FileMetadata, String> {
-    Ok(FileMetadata {
-        mode: u32::try_from(get_u64(&value, "mode")?)
-            .map_err(|_| String::from("metadata mode exceeds u32"))?,
-        size: get_u64(&value, "size")?,
-        kind: file_kind_from_json(value.get("kind").unwrap_or(&Value::Null))?,
-    })
-}
-
-fn directory_entries_from_json(value: Value) -> Result<Vec<DirectoryEntry>, String> {
-    let entries = value
-        .as_array()
-        .ok_or_else(|| String::from("readDir response must be an array"))?;
-    entries
-        .iter()
-        .map(|entry| {
-            Ok(DirectoryEntry {
-                name: get_string(entry, "name")?,
-                kind: file_kind_from_json(entry.get("kind").unwrap_or(&Value::Null))?,
-            })
-        })
-        .collect()
-}
-
-fn permission_decision_from_json(value: Value) -> Result<PermissionDecision, String> {
-    let verdict = match value
-        .get("verdict")
-        .and_then(Value::as_str)
-        .unwrap_or("deny")
-    {
-        "allow" => PermissionVerdict::Allow,
-        "deny" => PermissionVerdict::Deny,
-        "prompt" => PermissionVerdict::Prompt,
-        verdict => return Err(format!("unknown permission verdict '{verdict}'")),
-    };
-    Ok(PermissionDecision {
-        verdict,
-        reason: get_optional_string(&value, "reason"),
-    })
-}
-
-fn filesystem_access_to_json(access: FilesystemAccess) -> &'static str {
-    match access {
-        FilesystemAccess::Read => "read",
-        FilesystemAccess::Write => "write",
-        FilesystemAccess::Stat => "stat",
-        FilesystemAccess::ReadDir => "readDir",
-        FilesystemAccess::CreateDir => "createDir",
-        FilesystemAccess::Remove => "remove",
-        FilesystemAccess::Rename => "rename",
-        FilesystemAccess::Symlink => "symlink",
-        FilesystemAccess::ReadLink => "readLink",
-        FilesystemAccess::Chmod => "chmod",
-        FilesystemAccess::Truncate => "truncate",
-    }
-}
-
-fn network_access_to_json(access: NetworkAccess) -> &'static str {
-    match access {
-        NetworkAccess::Fetch => "fetch",
-        NetworkAccess::Http => "http",
-        NetworkAccess::Dns => "dns",
-        NetworkAccess::Listen => "listen",
-    }
-}
-
-fn environment_access_to_json(access: EnvironmentAccess) -> &'static str {
-    match access {
-        EnvironmentAccess::Read => "read",
-        EnvironmentAccess::Write => "write",
-    }
-}
-
-fn log_level_to_json(level: LogLevel) -> &'static str {
-    match level {
-        LogLevel::Trace => "trace",
-        LogLevel::Debug => "debug",
-        LogLevel::Info => "info",
-        LogLevel::Warn => "warn",
-        LogLevel::Error => "error",
-    }
-}
-
-fn guest_runtime_to_json(runtime: GuestRuntime) -> &'static str {
-    match runtime {
-        GuestRuntime::JavaScript => "javascript",
-        GuestRuntime::WebAssembly => "webassembly",
-    }
-}
-
-fn guest_runtime_from_json(value: &Value) -> Result<GuestRuntime, String> {
-    match value.as_str().unwrap_or("javascript") {
-        "javascript" | "js" => Ok(GuestRuntime::JavaScript),
-        "webassembly" | "wasm" => Ok(GuestRuntime::WebAssembly),
-        runtime => Err(format!("unknown guest runtime '{runtime}'")),
-    }
-}
-
-fn signal_to_json(signal: ExecutionSignal) -> &'static str {
-    match signal {
-        ExecutionSignal::Terminate => "terminate",
-        ExecutionSignal::Interrupt => "interrupt",
-        ExecutionSignal::Kill => "kill",
-    }
-}
-
-fn signal_action_from_json(value: &Value) -> Result<SignalDispositionAction, String> {
-    match value.as_str().unwrap_or("default") {
-        "default" => Ok(SignalDispositionAction::Default),
-        "ignore" => Ok(SignalDispositionAction::Ignore),
-        "user" => Ok(SignalDispositionAction::User),
-        action => Err(format!("unknown signal disposition action '{action}'")),
-    }
-}
-
-fn signal_registration_from_json(value: &Value) -> Result<SignalHandlerRegistration, String> {
-    let mask = value
-        .get("mask")
-        .and_then(Value::as_array)
-        .map(|entries| {
-            entries
-                .iter()
-                .map(|entry| {
-                    entry
-                        .as_u64()
-                        .and_then(|number| u32::try_from(number).ok())
-                        .ok_or_else(|| String::from("invalid signal mask entry"))
-                })
-                .collect::<Result<Vec<_>, _>>()
-        })
-        .transpose()?
-        .unwrap_or_default();
-    Ok(SignalHandlerRegistration {
-        action: signal_action_from_json(value.get("action").unwrap_or(&Value::Null))?,
-        mask,
-        flags: value
-            .get("flags")
-            .and_then(Value::as_u64)
-            .and_then(|number| u32::try_from(number).ok())
-            .unwrap_or(0),
-    })
-}
-
-fn system_time_from_ms(ms: u64) -> SystemTime {
-    UNIX_EPOCH + Duration::from_millis(ms)
-}
-
-fn map_to_json(map: BTreeMap<String, String>) -> Value {
-    Value::Object(
-        map.into_iter()
-            .map(|(key, value)| (key, Value::String(value)))
-            .collect(),
-    )
-}
-
-fn snapshot_to_json(snapshot: FilesystemSnapshot) -> Value {
-    json!({
-        "format": snapshot.format,
-        "bytesBase64": base64::engine::general_purpose::STANDARD.encode(snapshot.bytes),
-    })
-}
-
-fn snapshot_from_json(value: &Value) -> Result<FilesystemSnapshot, String> {
-    Ok(FilesystemSnapshot {
-        format: get_string(value, "format")?,
-        bytes: base64::engine::general_purpose::STANDARD
-            .decode(get_string(value, "bytesBase64")?)
-            .map_err(|error| format!("invalid filesystem snapshot bytes: {error}"))?,
-    })
-}
-
-fn output_chunk_from_json(value: &Value) -> Result<OutputChunk, String> {
-    Ok(OutputChunk {
-        vm_id: get_string(value, "vmId")?,
-        execution_id: get_string(value, "executionId")?,
-        chunk: base64::engine::general_purpose::STANDARD
-            .decode(get_string(value, "chunkBase64")?)
-            .map_err(|error| format!("invalid output chunk bytes: {error}"))?,
-    })
-}
-
-fn execution_event_from_json(value: Value) -> Result<Option<ExecutionEvent>, String> {
-    if value.is_null() {
-        return Ok(None);
-    }
-    match value.get("type").and_then(Value::as_str).unwrap_or("") {
-        "stdout" => Ok(Some(ExecutionEvent::Stdout(output_chunk_from_json(
-            &value,
-        )?))),
-        "stderr" => Ok(Some(ExecutionEvent::Stderr(output_chunk_from_json(
-            &value,
-        )?))),
-        "exited" => Ok(Some(ExecutionEvent::Exited(ExecutionExited {
-            vm_id: get_string(&value, "vmId")?,
-            execution_id: get_string(&value, "executionId")?,
-            exit_code: get_i32(&value, "exitCode")?,
-        }))),
-        "guestRequest" => Ok(Some(ExecutionEvent::GuestRequest(GuestKernelCall {
-            vm_id: get_string(&value, "vmId")?,
-            execution_id: get_string(&value, "executionId")?,
-            operation: get_string(&value, "operation")?,
-            payload: base64::engine::general_purpose::STANDARD
-                .decode(get_string(&value, "payloadBase64")?)
-                .map_err(|error| format!("invalid guest request payload: {error}"))?,
-        }))),
-        "signalState" => Ok(Some(ExecutionEvent::SignalState(ExecutionSignalState {
-            vm_id: get_string(&value, "vmId")?,
-            execution_id: get_string(&value, "executionId")?,
-            signal: u32::try_from(get_u64(&value, "signal")?)
-                .map_err(|_| String::from("signal exceeds u32"))?,
-            registration: signal_registration_from_json(
-                value.get("registration").unwrap_or(&Value::Null),
-            )?,
-        }))),
-        event_type => Err(format!("unknown execution event type '{event_type}'")),
-    }
-}
-
-fn worker_entrypoint_to_json(entrypoint: BrowserWorkerEntrypoint) -> Value {
-    match entrypoint {
-        BrowserWorkerEntrypoint::JavaScript { bootstrap_module } => {
-            json!({ "kind": "javascript", "bootstrapModule": bootstrap_module })
-        }
-        BrowserWorkerEntrypoint::WebAssembly { module_path } => {
-            json!({ "kind": "webassembly", "modulePath": module_path })
-        }
-    }
-}
-
-fn process_config_to_json(config: BrowserWorkerProcessConfig) -> Value {
-    json!({
-        "cwd": config.cwd,
-        "env": map_to_json(config.env),
-        "argv": config.argv,
-        "platform": config.platform,
-        "arch": config.arch,
-        "version": config.version,
-        "pid": config.pid,
-        "ppid": config.ppid,
-        "uid": config.uid,
-        "gid": config.gid,
-    })
-}
-
-fn os_config_to_json(config: BrowserWorkerOsConfig) -> Value {
-    json!({
-        "platform": config.platform,
-        "arch": config.arch,
-        "type": config.r#type,
-        "release": config.release,
-        "version": config.version,
-        "cpuCount": config.cpu_count,
-        "totalmem": config.totalmem,
-        "freemem": config.freemem,
-        "hostname": config.hostname,
-        "homedir": config.homedir,
-        "tmpdir": config.tmpdir,
-        "machine": config.machine,
-        "user": config.user,
-        "shell": config.shell,
-        "uid": config.uid,
-        "gid": config.gid,
-    })
-}
-
-fn wasm_permission_tier_to_json(tier: Option<WasmPermissionTier>) -> Value {
-    tier.map(|tier| Value::String(format!("{tier:?}").to_ascii_lowercase()))
-        .unwrap_or(Value::Null)
-}
-
-impl BridgeTypes for BrowserJsBridge {
-    type Error = String;
-}
-
-impl FilesystemBridge for BrowserJsBridge {
-    fn read_file(&mut self, request: ReadFileRequest) -> Result<Vec<u8>, Self::Error> {
-        self.call_bytes(
-            "readFile",
-            json!({ "vmId": request.vm_id, "path": request.path }),
-        )
-    }
-
-    fn write_file(&mut self, request: WriteFileRequest) -> Result<(), Self::Error> {
-        self.call_void(
-            "writeFile",
-            json!({
-                "vmId": request.vm_id,
-                "path": request.path,
-                "contentsBase64": base64::engine::general_purpose::STANDARD.encode(request.contents),
-            }),
-        )
-    }
-
-    fn stat(&mut self, request: PathRequest) -> Result<FileMetadata, Self::Error> {
-        metadata_from_json(self.call_json("stat", path_request(request))?)
-    }
-
-    fn lstat(&mut self, request: PathRequest) -> Result<FileMetadata, Self::Error> {
-        metadata_from_json(self.call_json("lstat", path_request(request))?)
-    }
-
-    fn read_dir(&mut self, request: ReadDirRequest) -> Result<Vec<DirectoryEntry>, Self::Error> {
-        directory_entries_from_json(self.call_json(
-            "readDir",
-            json!({ "vmId": request.vm_id, "path": request.path }),
-        )?)
-    }
-
-    fn create_dir(&mut self, request: CreateDirRequest) -> Result<(), Self::Error> {
-        self.call_void(
-            "createDir",
-            json!({ "vmId": request.vm_id, "path": request.path, "recursive": request.recursive }),
-        )
-    }
-
-    fn remove_file(&mut self, request: PathRequest) -> Result<(), Self::Error> {
-        self.call_void("removeFile", path_request(request))
-    }
-
-    fn remove_dir(&mut self, request: PathRequest) -> Result<(), Self::Error> {
-        self.call_void("removeDir", path_request(request))
-    }
-
-    fn rename(&mut self, request: RenameRequest) -> Result<(), Self::Error> {
-        self.call_void(
-            "rename",
-            json!({
-                "vmId": request.vm_id,
-                "fromPath": request.from_path,
-                "toPath": request.to_path,
-            }),
-        )
-    }
-
-    fn symlink(&mut self, request: SymlinkRequest) -> Result<(), Self::Error> {
-        self.call_void(
-            "symlink",
-            json!({
-                "vmId": request.vm_id,
-                "targetPath": request.target_path,
-                "linkPath": request.link_path,
-            }),
-        )
-    }
-
-    fn read_link(&mut self, request: PathRequest) -> Result<String, Self::Error> {
-        get_string(
-            &self.call_json("readLink", path_request(request))?,
-            "targetPath",
-        )
-    }
-
-    fn chmod(&mut self, request: ChmodRequest) -> Result<(), Self::Error> {
-        self.call_void(
-            "chmod",
-            json!({ "vmId": request.vm_id, "path": request.path, "mode": request.mode }),
-        )
-    }
-
-    fn truncate(&mut self, request: TruncateRequest) -> Result<(), Self::Error> {
-        self.call_void(
-            "truncate",
-            json!({ "vmId": request.vm_id, "path": request.path, "len": request.len }),
-        )
-    }
-
-    fn exists(&mut self, request: PathRequest) -> Result<bool, Self::Error> {
-        self.call_json("exists", path_request(request))?
-            .as_bool()
-            .ok_or_else(|| String::from("exists response must be boolean"))
-    }
-}
-
-impl PermissionBridge for BrowserJsBridge {
-    fn check_filesystem_access(
-        &mut self,
-        request: FilesystemPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        permission_decision_from_json(self.call_json(
-            "checkFilesystemAccess",
-            json!({
-                "vmId": request.vm_id,
-                "path": request.path,
-                "access": filesystem_access_to_json(request.access),
-            }),
-        )?)
-    }
-
-    fn check_network_access(
-        &mut self,
-        request: NetworkPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        permission_decision_from_json(self.call_json(
-            "checkNetworkAccess",
-            json!({
-                "vmId": request.vm_id,
-                "access": network_access_to_json(request.access),
-                "resource": request.resource,
-            }),
-        )?)
-    }
-
-    fn check_command_execution(
-        &mut self,
-        request: CommandPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        permission_decision_from_json(self.call_json(
-            "checkCommandExecution",
-            json!({
-                "vmId": request.vm_id,
-                "command": request.command,
-                "args": request.args,
-                "cwd": request.cwd,
-                "env": map_to_json(request.env),
-            }),
-        )?)
-    }
-
-    fn check_environment_access(
-        &mut self,
-        request: EnvironmentPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        permission_decision_from_json(self.call_json(
-            "checkEnvironmentAccess",
-            json!({
-                "vmId": request.vm_id,
-                "access": environment_access_to_json(request.access),
-                "key": request.key,
-                "value": request.value,
-            }),
-        )?)
-    }
-}
-
-impl PersistenceBridge for BrowserJsBridge {
-    fn load_filesystem_state(
-        &mut self,
-        request: LoadFilesystemStateRequest,
-    ) -> Result<Option<FilesystemSnapshot>, Self::Error> {
-        let value = self.call_json("loadFilesystemState", json!({ "vmId": request.vm_id }))?;
-        if value.is_null() {
-            return Ok(None);
-        }
-        snapshot_from_json(&value).map(Some)
-    }
-
-    fn flush_filesystem_state(
-        &mut self,
-        request: FlushFilesystemStateRequest,
-    ) -> Result<(), Self::Error> {
-        self.call_void(
-            "flushFilesystemState",
-            json!({
-                "vmId": request.vm_id,
-                "snapshot": snapshot_to_json(request.snapshot),
-            }),
-        )
-    }
-}
-
-impl ClockBridge for BrowserJsBridge {
-    fn wall_clock(&mut self, request: ClockRequest) -> Result<SystemTime, Self::Error> {
-        if self.host.is_none() {
-            return Ok(SystemTime::now());
-        }
-        let value = self.call_json("wallClock", base_request(request.vm_id))?;
-        Ok(system_time_from_ms(get_u64(&value, "unixTimeMs")?))
-    }
-
-    fn monotonic_clock(&mut self, request: ClockRequest) -> Result<Duration, Self::Error> {
-        if self.host.is_none() {
-            return Ok(Duration::ZERO);
-        }
-        let value = self.call_json("monotonicClock", base_request(request.vm_id))?;
-        Ok(Duration::from_millis(get_u64(&value, "elapsedMs")?))
-    }
-
-    fn schedule_timer(
-        &mut self,
-        request: ScheduleTimerRequest,
-    ) -> Result<ScheduledTimer, Self::Error> {
-        if self.host.is_none() {
-            self.next_timer += 1;
-            return Ok(ScheduledTimer {
-                timer_id: format!("browser-sidecar-wasm-timer-{}", self.next_timer),
-                delay: request.delay,
-            });
-        }
-        let value = self.call_json(
-            "scheduleTimer",
-            json!({
-                "vmId": request.vm_id,
-                "delayMs": request.delay.as_millis() as u64,
-            }),
-        )?;
-        Ok(ScheduledTimer {
-            timer_id: get_string(&value, "timerId")?,
-            delay: Duration::from_millis(get_u64(&value, "delayMs")?),
-        })
-    }
-}
-
-impl RandomBridge for BrowserJsBridge {
-    fn fill_random_bytes(&mut self, request: RandomBytesRequest) -> Result<Vec<u8>, Self::Error> {
-        if self.host.is_some() {
-            return self.call_bytes(
-                "fillRandomBytes",
-                json!({ "vmId": request.vm_id, "len": request.len }),
-            );
-        }
-        let mut bytes = vec![0; request.len];
-        getrandom::getrandom(&mut bytes)
-            .map_err(|error| format!("fill_random_bytes failed: {error}"))?;
-        Ok(bytes)
-    }
-}
-
-impl EventBridge for BrowserJsBridge {
-    fn emit_structured_event(&mut self, event: StructuredEventRecord) -> Result<(), Self::Error> {
-        if self.host.is_none() {
-            return Ok(());
-        }
-        self.call_void(
-            "emitStructuredEvent",
-            json!({ "vmId": event.vm_id, "name": event.name, "fields": map_to_json(event.fields) }),
-        )
-    }
-
-    fn emit_diagnostic(&mut self, event: DiagnosticRecord) -> Result<(), Self::Error> {
-        if self.host.is_none() {
-            return Ok(());
-        }
-        self.call_void(
-            "emitDiagnostic",
-            json!({ "vmId": event.vm_id, "message": event.message, "fields": map_to_json(event.fields) }),
-        )
-    }
-
-    fn emit_log(&mut self, event: LogRecord) -> Result<(), Self::Error> {
-        if self.host.is_none() {
-            return Ok(());
-        }
-        self.call_void(
-            "emitLog",
-            json!({
-                "vmId": event.vm_id,
-                "level": log_level_to_json(event.level),
-                "message": event.message,
-            }),
-        )
-    }
-
-    fn emit_lifecycle(&mut self, event: LifecycleEventRecord) -> Result<(), Self::Error> {
-        if self.host.is_none() {
-            return Ok(());
-        }
-        self.call_void(
-            "emitLifecycle",
-            json!({
-                "vmId": event.vm_id,
-                "state": format!("{:?}", event.state).to_ascii_lowercase(),
-                "detail": event.detail,
-            }),
-        )
-    }
-}
-
-impl ExecutionBridge for BrowserJsBridge {
-    fn create_javascript_context(
-        &mut self,
-        request: CreateJavascriptContextRequest,
-    ) -> Result<GuestContextHandle, Self::Error> {
-        let value = self.call_json(
-            "createJavascriptContext",
-            json!({
-                "vmId": request.vm_id,
-                "bootstrapModule": request.bootstrap_module,
-            }),
-        )?;
-        Ok(GuestContextHandle {
-            context_id: get_string(&value, "contextId")?,
-            runtime: get_optional_string(&value, "runtime")
-                .map(|runtime| guest_runtime_from_json(&Value::String(runtime)))
-                .transpose()?
-                .unwrap_or(GuestRuntime::JavaScript),
-        })
-    }
-
-    fn create_wasm_context(
-        &mut self,
-        request: CreateWasmContextRequest,
-    ) -> Result<GuestContextHandle, Self::Error> {
-        let value = self.call_json(
-            "createWasmContext",
-            json!({ "vmId": request.vm_id, "modulePath": request.module_path }),
-        )?;
-        Ok(GuestContextHandle {
-            context_id: get_string(&value, "contextId")?,
-            runtime: get_optional_string(&value, "runtime")
-                .map(|runtime| guest_runtime_from_json(&Value::String(runtime)))
-                .transpose()?
-                .unwrap_or(GuestRuntime::WebAssembly),
-        })
-    }
-
-    fn start_execution(
-        &mut self,
-        request: StartExecutionRequest,
-    ) -> Result<StartedExecution, Self::Error> {
-        let value = self.call_json(
-            "startExecution",
-            json!({
-                "vmId": request.vm_id,
-                "contextId": request.context_id,
-                "argv": request.argv,
-                "env": map_to_json(request.env),
-                "cwd": request.cwd,
-            }),
-        )?;
-        Ok(StartedExecution {
-            execution_id: get_string(&value, "executionId")?,
-        })
-    }
-
-    fn write_stdin(&mut self, request: WriteExecutionStdinRequest) -> Result<(), Self::Error> {
-        self.call_void(
-            "writeExecutionStdin",
-            json!({
-                "vmId": request.vm_id,
-                "executionId": request.execution_id,
-                "chunkBase64": base64::engine::general_purpose::STANDARD.encode(request.chunk),
-            }),
-        )
-    }
-
-    fn close_stdin(&mut self, request: ExecutionHandleRequest) -> Result<(), Self::Error> {
-        self.call_void(
-            "closeExecutionStdin",
-            json!({ "vmId": request.vm_id, "executionId": request.execution_id }),
-        )
-    }
-
-    fn kill_execution(&mut self, request: KillExecutionRequest) -> Result<(), Self::Error> {
-        self.call_void(
-            "killExecution",
-            json!({
-                "vmId": request.vm_id,
-                "executionId": request.execution_id,
-                "signal": signal_to_json(request.signal),
-            }),
-        )
-    }
-
-    fn poll_execution_event(
-        &mut self,
-        request: PollExecutionEventRequest,
-    ) -> Result<Option<ExecutionEvent>, Self::Error> {
-        execution_event_from_json(
-            self.call_json("pollExecutionEvent", json!({ "vmId": request.vm_id }))?,
-        )
-    }
-}
-
-impl BrowserWorkerBridge for BrowserJsBridge {
-    fn create_worker(
-        &mut self,
-        request: BrowserWorkerSpawnRequest,
-    ) -> Result<BrowserWorkerHandle, Self::Error> {
-        let value = self.call_json(
-            "createWorker",
-            json!({
-                "vmId": request.vm_id,
-                "contextId": request.context_id,
-                "executionId": request.execution_id,
-                "runtime": guest_runtime_to_json(request.runtime),
-                "entrypoint": worker_entrypoint_to_json(request.entrypoint),
-                "wasmPermissionTier": wasm_permission_tier_to_json(request.wasm_permission_tier),
-                "process": process_config_to_json(request.process_config),
-                "os": os_config_to_json(request.os_config),
-            }),
-        )?;
-        Ok(BrowserWorkerHandle {
-            worker_id: get_string(&value, "workerId")?,
-            runtime: get_optional_string(&value, "runtime")
-                .map(|runtime| guest_runtime_from_json(&Value::String(runtime)))
-                .transpose()?
-                .unwrap_or(request.runtime),
-        })
-    }
-
-    fn terminate_worker(&mut self, request: BrowserWorkerHandleRequest) -> Result<(), Self::Error> {
-        if self.host.is_none() {
-            return Ok(());
-        }
-        self.call_void(
-            "terminateWorker",
-            json!({
-                "vmId": request.vm_id,
-                "executionId": request.execution_id,
-                "workerId": request.worker_id,
-            }),
-        )
-    }
-}
diff --git a/crates/sidecar-browser/src/wire_dispatch.rs b/crates/sidecar-browser/src/wire_dispatch.rs
deleted file mode 100644
index 4cd8e79d2..000000000
--- a/crates/sidecar-browser/src/wire_dispatch.rs
+++ /dev/null
@@ -1,1132 +0,0 @@
-use crate::{
-    BrowserExecutionOptions, BrowserExtensionRequest, BrowserSidecar, BrowserSidecarBridge,
-    BrowserSidecarConfig,
-};
-use secure_exec_bridge::{
-    CreateJavascriptContextRequest, CreateWasmContextRequest, ExecutionEvent,
-    ExecutionHandleRequest, GuestRuntime, KillExecutionRequest, PollExecutionEventRequest,
-    StartExecutionRequest, WriteExecutionStdinRequest,
-};
-use secure_exec_kernel::kernel::KernelVmConfig;
-use secure_exec_sidecar_core::{
-    authenticated_response, bound_udp_snapshot_response, connection_id_of,
-    execution_signal_from_number, layer_created_response, layer_sealed_response,
-    listener_snapshot_response, overlay_created_response, permissions_from_policy,
-    process_exited_event, process_killed_response, process_output_event, process_snapshot_response,
-    process_started_response, protocol_process_snapshot_entry, protocol_root_filesystem_mode,
-    reject, respond, root_filesystem_bootstrapped_response, root_filesystem_snapshot_response,
-    root_snapshot_entry, route_request_payload, session_opened_response, session_scope_of,
-    signal_state_response, snapshot_exported_response, snapshot_imported_response,
-    stdin_closed_response, stdin_written_response, unsupported_guest_kernel_call_event,
-    unsupported_host_callback_direction_dispatch, validate_authenticate_versions,
-    vm_configured_response, vm_created_response, vm_disposed_response, vm_id_of,
-    vm_lifecycle_event, zombie_timer_count_response, DispatchResult, RequestRoute,
-};
-use secure_exec_sidecar_protocol::protocol::{
-    AuthenticateRequest, BootstrapRootFilesystemRequest, CloseStdinRequest, ConfigureVmRequest,
-    CreateLayerRequest, CreateOverlayRequest, CreateVmRequest, DisposeVmRequest, EventFrame,
-    ExecuteRequest, ExportSnapshotRequest, ExtEnvelope, FindBoundUdpRequest, FindListenerRequest,
-    GetProcessSnapshotRequest, GetSignalStateRequest, GetZombieTimerCountRequest, GuestRuntimeKind,
-    HostCallbacksRegisteredResponse, ImportSnapshotRequest, KillProcessRequest, OpenSessionRequest,
-    OwnershipScope, RegisterHostCallbacksRequest, RequestFrame, ResponsePayload, SealLayerRequest,
-    SnapshotRootFilesystemRequest, SocketStateEntry, StreamChannel, VmFetchRequest,
-    VmFetchResponse, VmLifecycleState, WriteStdinRequest,
-};
-use secure_exec_sidecar_protocol::wire::{
-    request_frame_to_compat, CompatDispatchResult, ProtocolCodecError, ProtocolFrame,
-    WireFrameCodec,
-};
-use secure_exec_vm_config::CreateVmConfig;
-use std::collections::{BTreeMap, BTreeSet, VecDeque};
-use std::fmt;
-
-pub const BROWSER_SIDECAR_ID: &str = "secure-exec-sidecar-browser";
-pub const BROWSER_MAX_FRAME_BYTES: usize = 64 * 1024 * 1024;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-struct ExecutionRecord {
-    vm_id: String,
-    process_id: String,
-    ownership: OwnershipScope,
-}
-
-type ProcessExecutionKey = (String, String);
-
-pub struct BrowserWireDispatcher<B: BrowserSidecarBridge> {
-    codec: WireFrameCodec,
-    sidecar: BrowserSidecar<B>,
-    next_connection: usize,
-    next_session: usize,
-    next_vm: usize,
-    active_vms: BTreeSet<String>,
-    executions: BTreeMap<String, ExecutionRecord>,
-    process_executions: BTreeMap<ProcessExecutionKey, String>,
-    pending_events: VecDeque<EventFrame>,
-}
-
-impl<B> BrowserWireDispatcher<B>
-where
-    B: BrowserSidecarBridge,
-    <B as secure_exec_bridge::BridgeTypes>::Error: fmt::Debug,
-{
-    pub fn new(bridge: B) -> Self {
-        Self {
-            codec: WireFrameCodec::new(BROWSER_MAX_FRAME_BYTES),
-            sidecar: BrowserSidecar::new(bridge, BrowserSidecarConfig::default()),
-            next_connection: 0,
-            next_session: 0,
-            next_vm: 0,
-            active_vms: BTreeSet::new(),
-            executions: BTreeMap::new(),
-            process_executions: BTreeMap::new(),
-            pending_events: VecDeque::new(),
-        }
-    }
-
-    pub fn vm_count(&self) -> usize {
-        self.sidecar.vm_count()
-    }
-
-    pub fn sidecar_mut(&mut self) -> &mut BrowserSidecar<B> {
-        &mut self.sidecar
-    }
-
-    pub fn handle_request_bytes(&mut self, bytes: &[u8]) -> Result<Vec<u8>, ProtocolCodecError> {
-        let generated_request = match self.codec.decode_message(bytes)? {
-            ProtocolFrame::RequestFrame(request) => request,
-            _ => {
-                return Err(ProtocolCodecError::SerializeFailure(String::from(
-                    "browser sidecar expected a request frame",
-                )));
-            }
-        };
-        let request = request_frame_to_compat(generated_request)?;
-        let dispatch = self.dispatch(request);
-        for event in dispatch.events.iter().cloned() {
-            self.pending_events.push_back(event);
-        }
-        let generated = secure_exec_sidecar_protocol::wire::dispatch_result_from_compat(
-            CompatDispatchResult {
-                response: dispatch.response,
-                events: Vec::new(),
-            },
-        )?;
-        self.codec
-            .encode_message(&ProtocolFrame::ResponseFrame(generated.response))
-    }
-
-    pub fn poll_event_bytes(&mut self) -> Result<Option<Vec<u8>>, ProtocolCodecError> {
-        if self.pending_events.is_empty() {
-            self.pump_execution_events();
-        }
-        let Some(event) = self.pending_events.pop_front() else {
-            return Ok(None);
-        };
-        let generated = secure_exec_sidecar_protocol::wire::event_frame_from_compat(event)?;
-        self.codec
-            .encode_message(&ProtocolFrame::EventFrame(generated))
-            .map(Some)
-    }
-
-    fn dispatch(&mut self, request: RequestFrame) -> DispatchResult {
-        match route_request_payload(&request) {
-            RequestRoute::Authenticate(payload) => self.authenticate(&request, payload),
-            RequestRoute::OpenSession(payload) => self.open_session(&request, payload),
-            RequestRoute::CreateVm(payload) => self.create_vm(&request, payload),
-            RequestRoute::DisposeVm(payload) => self.dispose_vm(&request, payload),
-            RequestRoute::BootstrapRootFilesystem(payload) => {
-                self.bootstrap_root_filesystem(&request, payload)
-            }
-            RequestRoute::ConfigureVm(payload) => self.configure_vm(&request, payload),
-            RequestRoute::RegisterHostCallbacks(payload) => {
-                self.register_host_callbacks(&request, payload)
-            }
-            RequestRoute::CreateLayer(payload) => self.create_layer(&request, payload),
-            RequestRoute::SealLayer(payload) => self.seal_layer(&request, payload),
-            RequestRoute::ImportSnapshot(payload) => self.import_snapshot(&request, payload),
-            RequestRoute::ExportSnapshot(payload) => self.export_snapshot(&request, payload),
-            RequestRoute::CreateOverlay(payload) => self.create_overlay(&request, payload),
-            RequestRoute::GuestFilesystemCall(payload) => {
-                self.guest_filesystem_call(&request, payload)
-            }
-            RequestRoute::GuestKernelCall(payload) => self.guest_kernel_call(&request, payload),
-            RequestRoute::SnapshotRootFilesystem(payload) => {
-                self.snapshot_root_filesystem(&request, payload)
-            }
-            RequestRoute::GetProcessSnapshot(payload) => {
-                self.get_process_snapshot(&request, payload)
-            }
-            RequestRoute::GetResourceSnapshot(payload) => {
-                // Resource snapshots surface the native sidecar's queue/limit
-                // trackers, which the converged browser runtime does not run.
-                let _ = payload;
-                rejected(
-                    &request,
-                    "unsupported",
-                    "get_resource_snapshot is not available in the converged browser runtime",
-                )
-            }
-            RequestRoute::GetSignalState(payload) => self.get_signal_state(&request, payload),
-            RequestRoute::GetZombieTimerCount(payload) => {
-                self.get_zombie_timer_count(&request, payload)
-            }
-            RequestRoute::Execute(payload) => self.execute(&request, payload),
-            RequestRoute::WriteStdin(payload) => self.write_stdin(&request, payload),
-            RequestRoute::ResizePty(payload) => {
-                // The converged browser path resizes the PTY through the driver's
-                // master-side resize, not via a native wire ResizePty op, so this
-                // route is not exercised by the in-browser terminal.
-                let _ = payload;
-                rejected(
-                    &request,
-                    "unsupported",
-                    "resize_pty is handled by the converged browser driver, not the native wire op",
-                )
-            }
-            RequestRoute::CloseStdin(payload) => self.close_stdin(&request, payload),
-            RequestRoute::KillProcess(payload) => self.kill_process(&request, payload),
-            RequestRoute::FindListener(payload) => self.find_listener(&request, payload),
-            RequestRoute::FindBoundUdp(payload) => self.find_bound_udp(&request, payload),
-            RequestRoute::VmFetch(payload) => self.vm_fetch(&request, payload),
-            RequestRoute::Ext(payload) => self.ext(&request, payload),
-            RequestRoute::LinkPackage(payload) => {
-                // Package linking projects host-filesystem package trees into the
-                // VM, which the converged browser runtime does not provide.
-                let _ = payload;
-                rejected(
-                    &request,
-                    "unsupported",
-                    "link_package is not available in the converged browser runtime",
-                )
-            }
-            RequestRoute::ProvidedCommands(payload) => {
-                // Provided command metadata is retained by the native sidecar's
-                // host-backed package projection, which the converged browser
-                // runtime does not provide.
-                let _ = payload;
-                rejected(
-                    &request,
-                    "unsupported",
-                    "provided_commands is not available in the converged browser runtime",
-                )
-            }
-            RequestRoute::UnsupportedHostCallbackDirection => {
-                unsupported_host_callback_direction_dispatch(&request)
-            }
-        }
-    }
-
-    fn bootstrap_root_filesystem(
-        &mut self,
-        request: &RequestFrame,
-        payload: BootstrapRootFilesystemRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "bootstrap_root_filesystem requires VM ownership",
-            );
-        };
-        let entry_count = match self
-            .sidecar
-            .bootstrap_root_filesystem_entries(&vm_id, &payload.entries)
-        {
-            Ok(entry_count) => entry_count,
-            Err(error) => return rejected(request, "bootstrap_root_failed", &error.to_string()),
-        };
-        DispatchResult {
-            response: root_filesystem_bootstrapped_response(request, entry_count),
-            events: Vec::new(),
-        }
-    }
-
-    fn configure_vm(
-        &mut self,
-        request: &RequestFrame,
-        payload: ConfigureVmRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "configure_vm requires VM ownership",
-            );
-        };
-        if !payload.mounts.is_empty()
-            || !payload.software.is_empty()
-            || payload.module_access_cwd.is_some()
-        {
-            return rejected(
-                request,
-                "unsupported_request",
-                "browser ConfigureVm does not support host mounts, software installs, or moduleAccessCwd",
-            );
-        }
-
-        let permissions = match payload.permissions {
-            Some(policy) => {
-                let policy =
-                    secure_exec_sidecar_protocol::wire::permissions_policy_config_from_wire(policy);
-                if let Err(error) = secure_exec_sidecar_core::validate_permissions_policy(&policy) {
-                    return rejected(request, "invalid_config", &error.to_string());
-                }
-                Some(permissions_from_policy(policy))
-            }
-            None => None,
-        };
-        if let Err(error) = self.sidecar.configure_vm(
-            &vm_id,
-            permissions,
-            payload.instructions,
-            payload.projected_modules,
-            payload.command_permissions.into_iter().collect(),
-            payload.loopback_exempt_ports,
-        ) {
-            return rejected(request, "configure_vm_failed", &error.to_string());
-        }
-        DispatchResult {
-            response: vm_configured_response(request, 0, 0, Vec::new()),
-            events: Vec::new(),
-        }
-    }
-
-    fn register_host_callbacks(
-        &mut self,
-        request: &RequestFrame,
-        payload: RegisterHostCallbacksRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "register_host_callbacks requires VM ownership",
-            );
-        };
-        let (registration, command_count) =
-            match self.sidecar.register_host_callbacks(&vm_id, payload) {
-                Ok(result) => result,
-                Err(error) => {
-                    return rejected(
-                        request,
-                        "register_host_callbacks_failed",
-                        &error.to_string(),
-                    )
-                }
-            };
-        DispatchResult {
-            response: respond(
-                request,
-                ResponsePayload::HostCallbacksRegistered(HostCallbacksRegisteredResponse {
-                    registration,
-                    command_count,
-                }),
-            ),
-            events: Vec::new(),
-        }
-    }
-
-    fn guest_filesystem_call(
-        &mut self,
-        request: &RequestFrame,
-        payload: secure_exec_sidecar_protocol::protocol::GuestFilesystemCallRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "guest_filesystem_call requires VM ownership",
-            );
-        };
-        let result = match self.sidecar.guest_filesystem_call(&vm_id, payload) {
-            Ok(result) => result,
-            Err(error) => return rejected(request, "guest_filesystem_failed", &error.to_string()),
-        };
-        DispatchResult {
-            response: respond(request, ResponsePayload::GuestFilesystemResult(result)),
-            events: Vec::new(),
-        }
-    }
-
-    fn guest_kernel_call(
-        &mut self,
-        request: &RequestFrame,
-        payload: secure_exec_sidecar_protocol::protocol::GuestKernelCallRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "guest_kernel_call requires VM ownership",
-            );
-        };
-        let result = match self.sidecar.guest_kernel_call(&vm_id, payload) {
-            Ok(result) => result,
-            Err(error) => return rejected(request, "guest_kernel_failed", &error.to_string()),
-        };
-        DispatchResult {
-            response: respond(request, ResponsePayload::GuestKernelResult(result)),
-            events: Vec::new(),
-        }
-    }
-
-    fn create_layer(
-        &mut self,
-        request: &RequestFrame,
-        _payload: CreateLayerRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "create_layer requires VM ownership",
-            );
-        };
-        let layer_id = match self.sidecar.create_layer(&vm_id) {
-            Ok(layer_id) => layer_id,
-            Err(error) => return rejected(request, "create_layer_failed", &error.to_string()),
-        };
-        DispatchResult {
-            response: layer_created_response(request, layer_id),
-            events: Vec::new(),
-        }
-    }
-
-    fn seal_layer(&mut self, request: &RequestFrame, payload: SealLayerRequest) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "seal_layer requires VM ownership",
-            );
-        };
-        let layer_id = match self.sidecar.seal_layer(&vm_id, &payload.layer_id) {
-            Ok(layer_id) => layer_id,
-            Err(error) => return rejected(request, "seal_layer_failed", &error.to_string()),
-        };
-        DispatchResult {
-            response: layer_sealed_response(request, layer_id),
-            events: Vec::new(),
-        }
-    }
-
-    fn import_snapshot(
-        &mut self,
-        request: &RequestFrame,
-        payload: ImportSnapshotRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "import_snapshot requires VM ownership",
-            );
-        };
-        let layer_id = match self.sidecar.import_snapshot(&vm_id, &payload.entries) {
-            Ok(layer_id) => layer_id,
-            Err(error) => return rejected(request, "import_snapshot_failed", &error.to_string()),
-        };
-        DispatchResult {
-            response: snapshot_imported_response(request, layer_id),
-            events: Vec::new(),
-        }
-    }
-
-    fn export_snapshot(
-        &mut self,
-        request: &RequestFrame,
-        payload: ExportSnapshotRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "export_snapshot requires VM ownership",
-            );
-        };
-        let snapshot = match self.sidecar.export_snapshot(&vm_id, &payload.layer_id) {
-            Ok(snapshot) => snapshot,
-            Err(error) => return rejected(request, "export_snapshot_failed", &error.to_string()),
-        };
-        DispatchResult {
-            response: snapshot_exported_response(
-                request,
-                payload.layer_id,
-                snapshot.entries.iter().map(root_snapshot_entry).collect(),
-            ),
-            events: Vec::new(),
-        }
-    }
-
-    fn create_overlay(
-        &mut self,
-        request: &RequestFrame,
-        payload: CreateOverlayRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "create_overlay requires VM ownership",
-            );
-        };
-        let mode = protocol_root_filesystem_mode(payload.mode);
-        let layer_id = match self.sidecar.create_overlay(
-            &vm_id,
-            mode,
-            payload.upper_layer_id,
-            payload.lower_layer_ids,
-        ) {
-            Ok(layer_id) => layer_id,
-            Err(error) => return rejected(request, "create_overlay_failed", &error.to_string()),
-        };
-        DispatchResult {
-            response: overlay_created_response(request, layer_id),
-            events: Vec::new(),
-        }
-    }
-
-    fn snapshot_root_filesystem(
-        &mut self,
-        request: &RequestFrame,
-        _payload: SnapshotRootFilesystemRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "snapshot_root_filesystem requires VM ownership",
-            );
-        };
-        let snapshot = match self.sidecar.snapshot_root_filesystem(&vm_id) {
-            Ok(snapshot) => snapshot,
-            Err(error) => return rejected(request, "snapshot_root_failed", &error.to_string()),
-        };
-        DispatchResult {
-            response: root_filesystem_snapshot_response(
-                request,
-                snapshot.entries.iter().map(root_snapshot_entry).collect(),
-            ),
-            events: Vec::new(),
-        }
-    }
-
-    fn get_process_snapshot(
-        &mut self,
-        request: &RequestFrame,
-        _payload: GetProcessSnapshotRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "get_process_snapshot requires VM ownership",
-            );
-        };
-        let mut processes = match self.sidecar.process_snapshot_entries(&vm_id) {
-            Ok(processes) => processes,
-            Err(error) => return rejected(request, "process_snapshot_failed", &error.to_string()),
-        };
-        for process in &mut processes {
-            if let Some(record) = self.executions.get(&process.process_id) {
-                process.process_id = record.process_id.clone();
-            }
-        }
-        DispatchResult {
-            response: process_snapshot_response(
-                request,
-                processes
-                    .into_iter()
-                    .map(protocol_process_snapshot_entry)
-                    .collect(),
-            ),
-            events: Vec::new(),
-        }
-    }
-
-    fn get_signal_state(
-        &mut self,
-        request: &RequestFrame,
-        payload: GetSignalStateRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "get_signal_state requires VM ownership",
-            );
-        };
-        let Some(execution_id) = self.execution_id_for(&vm_id, &payload.process_id) else {
-            return rejected(
-                request,
-                "unknown_process",
-                "get_signal_state process is not active",
-            );
-        };
-        let handlers = match self.sidecar.signal_state(&vm_id, &execution_id) {
-            Ok(handlers) => handlers,
-            Err(error) => return rejected(request, "signal_state_failed", &error.to_string()),
-        };
-        DispatchResult {
-            response: signal_state_response(request, payload.process_id, handlers),
-            events: Vec::new(),
-        }
-    }
-
-    fn get_zombie_timer_count(
-        &mut self,
-        request: &RequestFrame,
-        _payload: GetZombieTimerCountRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "get_zombie_timer_count requires VM ownership",
-            );
-        };
-        let count = match self.sidecar.zombie_timer_count(&vm_id) {
-            Ok(count) => count,
-            Err(error) => {
-                return rejected(request, "zombie_timer_count_failed", &error.to_string())
-            }
-        };
-        DispatchResult {
-            response: zombie_timer_count_response(request, count),
-            events: Vec::new(),
-        }
-    }
-
-    fn find_listener(
-        &mut self,
-        request: &RequestFrame,
-        payload: FindListenerRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "find_listener requires VM ownership",
-            );
-        };
-        let listener = match self.sidecar.find_listener(&vm_id, &payload) {
-            Ok(listener) => listener,
-            Err(error) => return rejected(request, "find_listener_failed", &error.to_string()),
-        }
-        .map(|entry| self.client_socket_state_entry(entry));
-        DispatchResult {
-            response: listener_snapshot_response(request, listener),
-            events: Vec::new(),
-        }
-    }
-
-    fn find_bound_udp(
-        &mut self,
-        request: &RequestFrame,
-        payload: FindBoundUdpRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "find_bound_udp requires VM ownership",
-            );
-        };
-        let socket = match self.sidecar.find_bound_udp(&vm_id, &payload) {
-            Ok(socket) => socket,
-            Err(error) => return rejected(request, "find_bound_udp_failed", &error.to_string()),
-        }
-        .map(|entry| self.client_socket_state_entry(entry));
-        DispatchResult {
-            response: bound_udp_snapshot_response(request, socket),
-            events: Vec::new(),
-        }
-    }
-
-    fn vm_fetch(&mut self, request: &RequestFrame, payload: VmFetchRequest) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "vm.fetch requires VM ownership",
-            );
-        };
-        if let Err(error) = serde_json::from_str::<serde_json::Value>(&payload.headers_json) {
-            return rejected(
-                request,
-                "invalid_request",
-                &format!("vm.fetch headers_json must be valid JSON: {error}"),
-            );
-        }
-
-        let response_json = match self.sidecar.vm_fetch(&vm_id, &payload) {
-            Ok(response_json) => response_json,
-            Err(error) => return rejected(request, "vm_fetch_failed", &error.to_string()),
-        };
-        DispatchResult {
-            response: respond(
-                request,
-                ResponsePayload::VmFetchResult(VmFetchResponse { response_json }),
-            ),
-            events: Vec::new(),
-        }
-    }
-
-    fn authenticate(
-        &mut self,
-        request: &RequestFrame,
-        payload: AuthenticateRequest,
-    ) -> DispatchResult {
-        if let Err(error) = validate_authenticate_versions(&payload) {
-            return rejected(request, error.code(), error.message());
-        }
-
-        self.next_connection += 1;
-        let connection_id = format!("browser-connection-{}", self.next_connection);
-        DispatchResult {
-            response: authenticated_response(
-                request.request_id,
-                BROWSER_SIDECAR_ID,
-                connection_id,
-                BROWSER_MAX_FRAME_BYTES as u32,
-            ),
-            events: Vec::new(),
-        }
-    }
-
-    fn client_socket_state_entry(&self, mut entry: SocketStateEntry) -> SocketStateEntry {
-        if let Some(record) = self.executions.get(&entry.process_id) {
-            entry.process_id = record.process_id.clone();
-        }
-        entry
-    }
-
-    fn open_session(
-        &mut self,
-        request: &RequestFrame,
-        _payload: OpenSessionRequest,
-    ) -> DispatchResult {
-        let Some(connection_id) = connection_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "open_session requires connection ownership",
-            );
-        };
-        self.next_session += 1;
-        let session_id = format!("browser-session-{}", self.next_session);
-        DispatchResult {
-            response: session_opened_response(request.request_id, connection_id, session_id),
-            events: Vec::new(),
-        }
-    }
-
-    fn create_vm(&mut self, request: &RequestFrame, payload: CreateVmRequest) -> DispatchResult {
-        let Some((connection_id, session_id)) = session_scope_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "create_vm requires session ownership",
-            );
-        };
-        let create_config: CreateVmConfig = match serde_json::from_str(&payload.config) {
-            Ok(config) => config,
-            Err(error) => {
-                return rejected(
-                    request,
-                    "invalid_config",
-                    &format!("invalid create VM config JSON: {error}"),
-                );
-            }
-        };
-        if let Err(error) = create_config.validate(BROWSER_MAX_FRAME_BYTES) {
-            return rejected(
-                request,
-                "invalid_config",
-                &format!("invalid create VM config: {error}"),
-            );
-        }
-
-        self.next_vm += 1;
-        let vm_id = format!("vm-{}", self.next_vm);
-        let mut kernel_config = KernelVmConfig::new(vm_id.clone());
-        kernel_config.env = create_config.env.clone();
-        if let Some(cwd) = create_config.cwd.clone() {
-            kernel_config.cwd = cwd;
-        }
-        kernel_config.loopback_exempt_ports = create_config
-            .loopback_exempt_ports
-            .iter()
-            .copied()
-            .collect();
-        let limits = match secure_exec_sidecar_core::vm_limits_from_config(
-            create_config.limits.as_ref(),
-            BROWSER_MAX_FRAME_BYTES,
-        ) {
-            Ok(limits) => limits,
-            Err(error) => {
-                return rejected(request, "invalid_config", &error.to_string());
-            }
-        };
-        kernel_config.resources = limits.resources;
-        let permissions = create_config
-            .permissions
-            .clone()
-            .unwrap_or_else(secure_exec_sidecar_core::deny_all_policy);
-        if let Err(error) = secure_exec_sidecar_core::validate_permissions_policy(&permissions) {
-            return rejected(request, "invalid_config", &error.to_string());
-        }
-        kernel_config.permissions = permissions_from_policy(permissions);
-
-        if let Err(error) = self
-            .sidecar
-            .create_vm_with_root_filesystem(kernel_config, create_config.root_filesystem)
-        {
-            return rejected(request, "create_vm_failed", &error.to_string());
-        }
-        self.active_vms.insert(vm_id.clone());
-
-        let ownership = OwnershipScope::vm(&connection_id, &session_id, &vm_id);
-        DispatchResult {
-            response: vm_created_response(request, vm_id.clone()),
-            events: vec![
-                vm_lifecycle_event(
-                    &connection_id,
-                    &session_id,
-                    &vm_id,
-                    VmLifecycleState::Creating,
-                ),
-                EventFrame::new(
-                    ownership,
-                    secure_exec_sidecar_protocol::protocol::EventPayload::VmLifecycle(
-                        secure_exec_sidecar_protocol::protocol::VmLifecycleEvent {
-                            state: VmLifecycleState::Ready,
-                        },
-                    ),
-                ),
-            ],
-        }
-    }
-
-    fn dispose_vm(&mut self, request: &RequestFrame, _payload: DisposeVmRequest) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "dispose_vm requires VM ownership",
-            );
-        };
-        if let Err(error) = self.sidecar.dispose_vm(&vm_id) {
-            return rejected(request, "dispose_vm_failed", &error.to_string());
-        }
-        self.active_vms.remove(&vm_id);
-        self.executions.retain(|_, record| record.vm_id != vm_id);
-        self.process_executions
-            .retain(|(process_vm_id, _), _| process_vm_id != &vm_id);
-        DispatchResult {
-            response: vm_disposed_response(request, vm_id),
-            events: Vec::new(),
-        }
-    }
-
-    fn ext(&mut self, request: &RequestFrame, payload: ExtEnvelope) -> DispatchResult {
-        let response = match self
-            .sidecar
-            .dispatch_extension_request(BrowserExtensionRequest {
-                namespace: payload.namespace,
-                payload: payload.payload,
-                vm_id: vm_id_of(&request.ownership),
-                connection_id: connection_id_of(&request.ownership),
-            }) {
-            Ok(response) => response,
-            Err(error) => return rejected(request, "extension_failed", &error.to_string()),
-        };
-        DispatchResult {
-            response: respond(
-                request,
-                ResponsePayload::ExtResult(ExtEnvelope {
-                    namespace: response.namespace,
-                    payload: response.payload,
-                }),
-            ),
-            events: Vec::new(),
-        }
-    }
-
-    fn execute(&mut self, request: &RequestFrame, payload: ExecuteRequest) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "execute requires VM ownership",
-            );
-        };
-        let process_key = (vm_id.clone(), payload.process_id.clone());
-        if self.process_executions.contains_key(&process_key) {
-            return rejected(
-                request,
-                "process_already_active",
-                "process_id is already active",
-            );
-        }
-        let runtime = match payload
-            .runtime
-            .clone()
-            .unwrap_or(GuestRuntimeKind::JavaScript)
-        {
-            GuestRuntimeKind::JavaScript | GuestRuntimeKind::Python => GuestRuntime::JavaScript,
-            GuestRuntimeKind::WebAssembly => GuestRuntime::WebAssembly,
-        };
-        let context = match runtime {
-            GuestRuntime::JavaScript => {
-                self.sidecar
-                    .create_javascript_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.clone(),
-                        bootstrap_module: payload.entrypoint.clone(),
-                    })
-            }
-            GuestRuntime::WebAssembly => {
-                self.sidecar.create_wasm_context(CreateWasmContextRequest {
-                    vm_id: vm_id.clone(),
-                    module_path: payload.entrypoint.clone(),
-                })
-            }
-        };
-        let context = match context {
-            Ok(context) => context,
-            Err(error) => return rejected(request, "execute_failed", &error.to_string()),
-        };
-
-        let mut argv = Vec::new();
-        if let Some(command) = payload.command.clone() {
-            argv.push(command);
-        }
-        argv.extend(payload.args.clone());
-        let started = match self.sidecar.start_execution_with_options(
-            StartExecutionRequest {
-                vm_id: vm_id.clone(),
-                context_id: context.context_id,
-                argv,
-                env: payload.env.clone().into_iter().collect(),
-                cwd: payload.cwd.clone().unwrap_or_else(|| String::from("/")),
-            },
-            BrowserExecutionOptions {
-                command_name: payload.command.clone(),
-                wasm_permission_tier: payload.wasm_permission_tier,
-            },
-        ) {
-            Ok(started) => started,
-            Err(error) => return rejected(request, "execute_failed", &error.to_string()),
-        };
-
-        self.executions.insert(
-            started.execution_id.clone(),
-            ExecutionRecord {
-                vm_id: vm_id.clone(),
-                process_id: payload.process_id.clone(),
-                ownership: request.ownership.clone(),
-            },
-        );
-        self.process_executions
-            .insert(process_key, started.execution_id.clone());
-        DispatchResult {
-            response: process_started_response(request, payload.process_id, None),
-            events: Vec::new(),
-        }
-    }
-
-    fn write_stdin(
-        &mut self,
-        request: &RequestFrame,
-        payload: WriteStdinRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "write_stdin requires VM ownership",
-            );
-        };
-        let Some(execution_id) = self.execution_id_for(&vm_id, &payload.process_id) else {
-            return rejected(
-                request,
-                "unknown_process",
-                "write_stdin process is not active",
-            );
-        };
-        let accepted_bytes = payload.chunk.len() as u64;
-        if let Err(error) = self.sidecar.write_stdin(WriteExecutionStdinRequest {
-            vm_id,
-            execution_id,
-            chunk: payload.chunk,
-        }) {
-            return rejected(request, "write_stdin_failed", &error.to_string());
-        }
-        DispatchResult {
-            response: stdin_written_response(request, payload.process_id, accepted_bytes),
-            events: Vec::new(),
-        }
-    }
-
-    fn close_stdin(
-        &mut self,
-        request: &RequestFrame,
-        payload: CloseStdinRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "close_stdin requires VM ownership",
-            );
-        };
-        let Some(execution_id) = self.execution_id_for(&vm_id, &payload.process_id) else {
-            return rejected(
-                request,
-                "unknown_process",
-                "close_stdin process is not active",
-            );
-        };
-        if let Err(error) = self.sidecar.close_stdin(ExecutionHandleRequest {
-            vm_id,
-            execution_id,
-        }) {
-            return rejected(request, "close_stdin_failed", &error.to_string());
-        }
-        DispatchResult {
-            response: stdin_closed_response(request, payload.process_id),
-            events: Vec::new(),
-        }
-    }
-
-    fn kill_process(
-        &mut self,
-        request: &RequestFrame,
-        payload: KillProcessRequest,
-    ) -> DispatchResult {
-        let Some(vm_id) = vm_id_of(&request.ownership) else {
-            return rejected(
-                request,
-                "invalid_ownership",
-                "kill_process requires VM ownership",
-            );
-        };
-        let Some(execution_id) = self.execution_id_for(&vm_id, &payload.process_id) else {
-            return DispatchResult {
-                response: process_killed_response(request, payload.process_id),
-                events: Vec::new(),
-            };
-        };
-        let signal = match secure_exec_sidecar_core::parse_posix_signal(&payload.signal) {
-            Some(signal) => signal,
-            None => {
-                return rejected(
-                    request,
-                    "kill_process_failed",
-                    &format!("unsupported kill_process signal {}", payload.signal),
-                );
-            }
-        };
-        if signal == 0 {
-            return DispatchResult {
-                response: process_killed_response(request, payload.process_id),
-                events: Vec::new(),
-            };
-        }
-        if let Err(error) =
-            self.sidecar
-                .signal_execution_kernel_process(&vm_id, &execution_id, signal)
-        {
-            return rejected(request, "kill_process_failed", &error.to_string());
-        }
-        if let Some(bridge_signal) = execution_signal_from_number(signal) {
-            if let Err(error) = self
-                .sidecar
-                .bridge_mut()
-                .kill_execution(KillExecutionRequest {
-                    vm_id,
-                    execution_id,
-                    signal: bridge_signal,
-                })
-            {
-                return rejected(request, "kill_process_failed", &format!("{error:?}"));
-            }
-        }
-        DispatchResult {
-            response: process_killed_response(request, payload.process_id),
-            events: Vec::new(),
-        }
-    }
-
-    fn pump_execution_events(&mut self) {
-        for vm_id in self.active_vms.iter().cloned().collect::<Vec<_>>() {
-            while let Ok(Some(event)) =
-                self.sidecar
-                    .poll_execution_event(PollExecutionEventRequest {
-                        vm_id: vm_id.clone(),
-                    })
-            {
-                if let Some(frame) = self.execution_event_to_frame(event) {
-                    self.pending_events.push_back(frame);
-                }
-            }
-        }
-    }
-
-    fn execution_event_to_frame(&mut self, event: ExecutionEvent) -> Option<EventFrame> {
-        match event {
-            ExecutionEvent::Stdout(chunk) => {
-                let record = self.executions.get(&chunk.execution_id)?;
-                Some(process_output_event(
-                    record.ownership.clone(),
-                    &record.process_id,
-                    StreamChannel::Stdout,
-                    chunk.chunk,
-                ))
-            }
-            ExecutionEvent::Stderr(chunk) => {
-                let record = self.executions.get(&chunk.execution_id)?;
-                Some(process_output_event(
-                    record.ownership.clone(),
-                    &record.process_id,
-                    StreamChannel::Stderr,
-                    chunk.chunk,
-                ))
-            }
-            ExecutionEvent::Exited(exited) => {
-                let record = self.executions.remove(&exited.execution_id)?;
-                self.process_executions
-                    .remove(&(record.vm_id.clone(), record.process_id.clone()));
-                Some(process_exited_event(
-                    record.ownership,
-                    &record.process_id,
-                    exited.exit_code,
-                ))
-            }
-            ExecutionEvent::GuestRequest(call) => {
-                let record = self.executions.get(&call.execution_id)?;
-                Some(unsupported_guest_kernel_call_event(
-                    record.ownership.clone(),
-                    &record.process_id,
-                    &call.execution_id,
-                    &call.operation,
-                    call.payload.len(),
-                ))
-            }
-            ExecutionEvent::SignalState(_) => None,
-        }
-    }
-
-    fn execution_id_for(&self, vm_id: &str, process_id: &str) -> Option<String> {
-        self.process_executions
-            .get(&(vm_id.to_string(), process_id.to_string()))
-            .cloned()
-    }
-}
-
-fn rejected(request: &RequestFrame, code: &str, message: &str) -> DispatchResult {
-    DispatchResult {
-        response: reject(request, code, message),
-        events: Vec::new(),
-    }
-}
diff --git a/crates/sidecar-browser/tests/bridge.rs b/crates/sidecar-browser/tests/bridge.rs
deleted file mode 100644
index 45d21078c..000000000
--- a/crates/sidecar-browser/tests/bridge.rs
+++ /dev/null
@@ -1,148 +0,0 @@
-#[path = "../../bridge/tests/support.rs"]
-mod bridge_support;
-
-use bridge_support::RecordingBridge;
-use secure_exec_bridge::{
-    BridgeTypes, ClockRequest, CreateJavascriptContextRequest, CreateWasmContextRequest,
-    DiagnosticRecord, ExecutionEvent, ExecutionSignal, GuestKernelCall, GuestRuntime,
-    KillExecutionRequest, LifecycleEventRecord, LifecycleState, LogLevel, LogRecord,
-    PollExecutionEventRequest, RandomBytesRequest, ScheduleTimerRequest, StructuredEventRecord,
-};
-use secure_exec_sidecar_browser::{
-    BrowserSidecarBridge, BrowserWorkerBridge, BrowserWorkerHandle, BrowserWorkerHandleRequest,
-    BrowserWorkerSpawnRequest,
-};
-use std::collections::BTreeMap;
-use std::fmt::Debug;
-use std::time::Duration;
-
-impl BrowserWorkerBridge for RecordingBridge {
-    fn create_worker(
-        &mut self,
-        request: BrowserWorkerSpawnRequest,
-    ) -> Result<BrowserWorkerHandle, Self::Error> {
-        Ok(BrowserWorkerHandle {
-            worker_id: format!("bridge-worker-{}", request.context_id),
-            runtime: request.runtime,
-        })
-    }
-
-    fn terminate_worker(
-        &mut self,
-        _request: BrowserWorkerHandleRequest,
-    ) -> Result<(), Self::Error> {
-        Ok(())
-    }
-}
-
-fn assert_browser_sidecar_bridge<B>(bridge: &mut B)
-where
-    B: BrowserSidecarBridge,
-    <B as BridgeTypes>::Error: Debug,
-{
-    assert_eq!(
-        bridge
-            .monotonic_clock(ClockRequest {
-                vm_id: String::from("vm-browser"),
-            })
-            .expect("monotonic clock"),
-        Duration::from_millis(42)
-    );
-    assert_eq!(
-        bridge
-            .fill_random_bytes(RandomBytesRequest {
-                vm_id: String::from("vm-browser"),
-                len: 3,
-            })
-            .expect("random bytes"),
-        vec![0xA5; 3]
-    );
-    assert_eq!(
-        bridge
-            .schedule_timer(ScheduleTimerRequest {
-                vm_id: String::from("vm-browser"),
-                delay: Duration::from_millis(8),
-            })
-            .expect("schedule timer")
-            .timer_id,
-        "timer-1"
-    );
-
-    let js = bridge
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-browser"),
-            bootstrap_module: Some(String::from("@secure-exec/browser")),
-        })
-        .expect("create js context");
-    let wasm = bridge
-        .create_wasm_context(CreateWasmContextRequest {
-            vm_id: String::from("vm-browser"),
-            module_path: Some(String::from("/workspace/main.wasm")),
-        })
-        .expect("create wasm context");
-
-    assert_eq!(js.runtime, GuestRuntime::JavaScript);
-    assert_eq!(wasm.runtime, GuestRuntime::WebAssembly);
-
-    bridge
-        .emit_log(LogRecord {
-            vm_id: String::from("vm-browser"),
-            level: LogLevel::Debug,
-            message: String::from("worker online"),
-        })
-        .expect("emit log");
-    bridge
-        .emit_diagnostic(DiagnosticRecord {
-            vm_id: String::from("vm-browser"),
-            message: String::from("worker created"),
-            fields: BTreeMap::new(),
-        })
-        .expect("emit diagnostic");
-    bridge
-        .emit_structured_event(StructuredEventRecord {
-            vm_id: String::from("vm-browser"),
-            name: String::from("worker.message"),
-            fields: BTreeMap::from([(String::from("kind"), String::from("ready"))]),
-        })
-        .expect("emit structured event");
-    bridge
-        .emit_lifecycle(LifecycleEventRecord {
-            vm_id: String::from("vm-browser"),
-            state: LifecycleState::Starting,
-            detail: Some(String::from("bootstrapping worker")),
-        })
-        .expect("emit lifecycle");
-
-    bridge
-        .kill_execution(KillExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            execution_id: String::from("exec-browser"),
-            signal: ExecutionSignal::Kill,
-        })
-        .expect("kill execution");
-
-    match bridge
-        .poll_execution_event(PollExecutionEventRequest {
-            vm_id: String::from("vm-browser"),
-        })
-        .expect("poll event")
-    {
-        Some(ExecutionEvent::GuestRequest(event)) => {
-            assert_eq!(event.operation, "module.load");
-        }
-        other => panic!("unexpected execution event: {other:?}"),
-    }
-}
-
-#[test]
-fn browser_sidecar_crate_compiles_against_composed_host_bridge() {
-    let mut bridge = RecordingBridge::default();
-    bridge.push_execution_event(ExecutionEvent::GuestRequest(GuestKernelCall {
-        vm_id: String::from("vm-browser"),
-        execution_id: String::from("exec-browser"),
-        operation: String::from("module.load"),
-        payload: Vec::new(),
-    }));
-
-    assert_browser_sidecar_bridge(&mut bridge);
-}
diff --git a/crates/sidecar-browser/tests/service.rs b/crates/sidecar-browser/tests/service.rs
deleted file mode 100644
index 0bf907c78..000000000
--- a/crates/sidecar-browser/tests/service.rs
+++ /dev/null
@@ -1,1393 +0,0 @@
-#[path = "../../bridge/tests/support.rs"]
-mod bridge_support;
-
-use bridge_support::RecordingBridge;
-use secure_exec_bridge::{
-    CreateJavascriptContextRequest, CreateWasmContextRequest, ExecutionEvent, ExecutionExited,
-    ExecutionSignal, ExecutionSignalState, GuestKernelCall, GuestRuntime, KillExecutionRequest,
-    LifecycleState, PollExecutionEventRequest, SignalDispositionAction, SignalHandlerRegistration,
-    StartExecutionRequest,
-};
-use secure_exec_kernel::kernel::KernelVmConfig;
-use secure_exec_kernel::permissions::{
-    NetworkAccessRequest, NetworkOperation, PermissionDecision, Permissions,
-};
-use secure_exec_kernel::resource_accounting::ResourceLimits;
-use secure_exec_kernel::root_fs::FilesystemEntryKind;
-use secure_exec_sidecar_browser::{
-    BrowserSidecar, BrowserSidecarConfig, BrowserWorkerBridge, BrowserWorkerEntrypoint,
-    BrowserWorkerHandle, BrowserWorkerHandleRequest, BrowserWorkerOsConfig,
-    BrowserWorkerProcessConfig, BrowserWorkerSpawnRequest,
-};
-use secure_exec_sidecar_protocol::wire::{
-    FindBoundUdpRequest, FindListenerRequest, GuestKernelCallRequest, WasmPermissionTier,
-};
-use secure_exec_vm_config::{
-    RootFilesystemConfig, RootFilesystemEntry, RootFilesystemEntryEncoding,
-    RootFilesystemEntryKind, RootFilesystemLowerDescriptor, RootFilesystemMode,
-};
-use std::collections::BTreeMap;
-use std::sync::{Arc, Mutex};
-use std::time::Duration;
-
-impl BrowserWorkerBridge for RecordingBridge {
-    fn create_worker(
-        &mut self,
-        request: BrowserWorkerSpawnRequest,
-    ) -> Result<BrowserWorkerHandle, Self::Error> {
-        if let Some(error) = self.next_worker_create_error() {
-            return Err(error);
-        }
-
-        let kind = match request.runtime {
-            GuestRuntime::JavaScript => "js",
-            GuestRuntime::WebAssembly => "wasm",
-        };
-        self.browser_worker_spawns.push(BTreeMap::from([
-            (String::from("vm_id"), request.vm_id.clone()),
-            (String::from("context_id"), request.context_id.clone()),
-            (String::from("execution_id"), request.execution_id.clone()),
-            (
-                String::from("process_platform"),
-                request.process_config.platform.clone(),
-            ),
-            (
-                String::from("process_arch"),
-                request.process_config.arch.clone(),
-            ),
-            (
-                String::from("process_cwd"),
-                request.process_config.cwd.clone(),
-            ),
-            (
-                String::from("process_pid"),
-                request.process_config.pid.to_string(),
-            ),
-            (
-                String::from("process_uid"),
-                request.process_config.uid.to_string(),
-            ),
-            (
-                String::from("process_gid"),
-                request.process_config.gid.to_string(),
-            ),
-            (
-                String::from("process_env_base"),
-                request
-                    .process_config
-                    .env
-                    .get("BASE_ENV")
-                    .cloned()
-                    .unwrap_or_default(),
-            ),
-            (
-                String::from("process_env_exec"),
-                request
-                    .process_config
-                    .env
-                    .get("EXEC_ENV")
-                    .cloned()
-                    .unwrap_or_default(),
-            ),
-            (
-                String::from("os_platform"),
-                request.os_config.platform.clone(),
-            ),
-            (
-                String::from("os_cpu_count"),
-                request.os_config.cpu_count.to_string(),
-            ),
-            (
-                String::from("os_totalmem"),
-                request.os_config.totalmem.to_string(),
-            ),
-            (
-                String::from("os_freemem"),
-                request.os_config.freemem.to_string(),
-            ),
-            (String::from("os_user"), request.os_config.user.clone()),
-            (String::from("os_uid"), request.os_config.uid.to_string()),
-            (String::from("os_gid"), request.os_config.gid.to_string()),
-            (
-                String::from("os_homedir"),
-                request.os_config.homedir.clone(),
-            ),
-            (
-                String::from("os_hostname"),
-                request.os_config.hostname.clone(),
-            ),
-            (String::from("os_type"), request.os_config.r#type.clone()),
-            (
-                String::from("os_release"),
-                request.os_config.release.clone(),
-            ),
-            (
-                String::from("os_version"),
-                request.os_config.version.clone(),
-            ),
-            (String::from("os_tmpdir"), request.os_config.tmpdir.clone()),
-            (
-                String::from("os_machine"),
-                request.os_config.machine.clone(),
-            ),
-            (
-                String::from("wasm_permission_tier"),
-                request
-                    .wasm_permission_tier
-                    .map(|tier| format!("{tier:?}"))
-                    .unwrap_or_default(),
-            ),
-        ]));
-
-        Ok(BrowserWorkerHandle {
-            worker_id: format!("{kind}-worker-{}", request.context_id),
-            runtime: request.runtime,
-        })
-    }
-
-    fn terminate_worker(&mut self, request: BrowserWorkerHandleRequest) -> Result<(), Self::Error> {
-        self.terminated_workers
-            .push((request.vm_id, request.execution_id, request.worker_id));
-        Ok(())
-    }
-}
-
-fn permissive_config(vm_id: &str) -> KernelVmConfig {
-    let mut config = KernelVmConfig::new(vm_id);
-    config.permissions = Permissions::allow_all();
-    config
-}
-
-fn test_process_config() -> BrowserWorkerProcessConfig {
-    BrowserWorkerProcessConfig {
-        cwd: String::from("/workspace"),
-        env: BTreeMap::new(),
-        argv: vec![String::from("node")],
-        platform: String::from("linux"),
-        arch: String::from("x64"),
-        version: String::from("v22.0.0"),
-        pid: 1,
-        ppid: 0,
-        uid: 1000,
-        gid: 1000,
-    }
-}
-
-fn test_os_config() -> BrowserWorkerOsConfig {
-    BrowserWorkerOsConfig {
-        platform: String::from("linux"),
-        arch: String::from("x64"),
-        r#type: String::from("Linux"),
-        release: String::from("6.8.0-secure-exec"),
-        version: String::from("#1 SMP PREEMPT_DYNAMIC secure-exec"),
-        cpu_count: 1,
-        totalmem: 1024 * 1024 * 1024,
-        freemem: 512 * 1024 * 1024,
-        hostname: String::from("secure-exec"),
-        homedir: String::from("/home/user"),
-        tmpdir: String::from("/tmp"),
-        machine: String::from("x86_64"),
-        user: String::from("user"),
-        shell: String::from("/bin/sh"),
-        uid: 1000,
-        gid: 1000,
-    }
-}
-
-#[test]
-fn browser_sidecar_runs_guest_javascript_from_main_thread_workers() {
-    let mut sidecar =
-        BrowserSidecar::new(RecordingBridge::default(), BrowserSidecarConfig::default());
-    sidecar
-        .create_vm(permissive_config("vm-browser"))
-        .expect("create vm");
-
-    let context = sidecar
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-browser"),
-            bootstrap_module: Some(String::from("@secure-exec/browser")),
-        })
-        .expect("create JavaScript context");
-    let started = sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id.clone(),
-            argv: vec![String::from("node"), String::from("script.js")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect("start JavaScript execution");
-
-    assert_eq!(sidecar.sidecar_id(), "secure-exec-sidecar-browser");
-    assert_eq!(sidecar.vm_count(), 1);
-    assert_eq!(sidecar.context_count("vm-browser"), 1);
-    assert_eq!(sidecar.active_worker_count("vm-browser"), 1);
-
-    sidecar
-        .bridge_mut()
-        .push_execution_event(ExecutionEvent::Exited(ExecutionExited {
-            vm_id: String::from("vm-browser"),
-            execution_id: started.execution_id.clone(),
-            exit_code: 0,
-        }));
-    let event = sidecar
-        .poll_execution_event(PollExecutionEventRequest {
-            vm_id: String::from("vm-browser"),
-        })
-        .expect("poll execution event");
-
-    assert!(matches!(
-        event,
-        Some(ExecutionEvent::Exited(ExecutionExited {
-            execution_id,
-            exit_code: 0,
-            ..
-        })) if execution_id == started.execution_id
-    ));
-    assert_eq!(sidecar.active_worker_count("vm-browser"), 0);
-
-    let bridge = sidecar.into_bridge();
-    let states = bridge
-        .lifecycle_events
-        .iter()
-        .map(|event| event.state)
-        .collect::<Vec<_>>();
-    assert_eq!(
-        states,
-        vec![
-            LifecycleState::Starting,
-            LifecycleState::Ready,
-            LifecycleState::Busy,
-            LifecycleState::Ready,
-        ]
-    );
-    let structured_names = bridge
-        .structured_events
-        .iter()
-        .map(|event| event.name.as_str())
-        .collect::<Vec<_>>();
-    assert_eq!(
-        structured_names,
-        vec![
-            "browser.context.created",
-            "browser.worker.spawned",
-            "browser.worker.reaped",
-        ]
-    );
-}
-
-#[test]
-fn browser_worker_spawn_receives_virtual_identity_config() {
-    let mut sidecar =
-        BrowserSidecar::new(RecordingBridge::default(), BrowserSidecarConfig::default());
-    let mut config = permissive_config("vm-browser");
-    config
-        .env
-        .insert(String::from("BASE_ENV"), String::from("base"));
-    config.user.username = Some(String::from("runner"));
-    config.user.uid = Some(501);
-    config.user.gid = Some(20);
-    config.user.homedir = Some(String::from("/home/runner"));
-    config.user.shell = Some(String::from("/bin/bash"));
-    config.resources = ResourceLimits {
-        virtual_cpu_count: Some(4),
-        max_wasm_memory_bytes: Some(256 * 1024 * 1024),
-        ..ResourceLimits::default()
-    };
-    sidecar.create_vm(config).expect("create vm");
-
-    let context = sidecar
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-browser"),
-            bootstrap_module: None,
-        })
-        .expect("create JavaScript context");
-    sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id,
-            argv: vec![String::from("node"), String::from("identity.js")],
-            env: BTreeMap::from([(String::from("EXEC_ENV"), String::from("exec"))]),
-            cwd: String::from("/workspace"),
-        })
-        .expect("start execution");
-
-    let bridge = sidecar.into_bridge();
-    let spawn = bridge
-        .browser_worker_spawns
-        .last()
-        .expect("worker spawn should be recorded");
-    assert_eq!(
-        spawn.get("process_platform").map(String::as_str),
-        Some("linux")
-    );
-    assert_eq!(spawn.get("process_arch").map(String::as_str), Some("x64"));
-    assert_eq!(
-        spawn.get("process_cwd").map(String::as_str),
-        Some("/workspace")
-    );
-    assert_eq!(
-        spawn.get("execution_id").map(String::as_str),
-        Some("exec-1")
-    );
-    assert_eq!(
-        spawn.get("process_env_base").map(String::as_str),
-        Some("base")
-    );
-    assert_eq!(
-        spawn.get("process_env_exec").map(String::as_str),
-        Some("exec")
-    );
-    assert_eq!(spawn.get("os_platform").map(String::as_str), Some("linux"));
-    assert_eq!(spawn.get("os_cpu_count").map(String::as_str), Some("4"));
-    assert_eq!(
-        spawn.get("os_totalmem").map(String::as_str),
-        Some("268435456")
-    );
-    assert_eq!(
-        spawn.get("os_freemem").map(String::as_str),
-        Some("268435456")
-    );
-    assert_eq!(spawn.get("os_user").map(String::as_str), Some("runner"));
-    assert_eq!(
-        spawn.get("os_homedir").map(String::as_str),
-        Some("/home/runner")
-    );
-    assert_eq!(
-        spawn.get("os_hostname").map(String::as_str),
-        Some("secure-exec")
-    );
-    assert_eq!(spawn.get("os_type").map(String::as_str), Some("Linux"));
-    assert_eq!(
-        spawn.get("os_release").map(String::as_str),
-        Some("6.8.0-secure-exec")
-    );
-    assert_eq!(
-        spawn.get("os_version").map(String::as_str),
-        Some("#1 SMP PREEMPT_DYNAMIC secure-exec")
-    );
-    assert_eq!(spawn.get("os_tmpdir").map(String::as_str), Some("/tmp"));
-    assert_eq!(spawn.get("os_machine").map(String::as_str), Some("x86_64"));
-    assert!(
-        spawn
-            .get("process_pid")
-            .and_then(|pid| pid.parse::<u32>().ok())
-            .is_some_and(|pid| pid > 0),
-        "worker process pid should come from the kernel"
-    );
-    assert_eq!(spawn.get("process_uid").map(String::as_str), Some("501"));
-    assert_eq!(spawn.get("process_gid").map(String::as_str), Some("20"));
-    assert_eq!(spawn.get("os_uid").map(String::as_str), Some("501"));
-    assert_eq!(spawn.get("os_gid").map(String::as_str), Some("20"));
-}
-
-#[test]
-fn browser_sidecar_runs_guest_wasm_from_main_thread_workers() {
-    let mut sidecar =
-        BrowserSidecar::new(RecordingBridge::default(), BrowserSidecarConfig::default());
-    sidecar
-        .create_vm(permissive_config("vm-browser"))
-        .expect("create vm");
-
-    let context = sidecar
-        .create_wasm_context(CreateWasmContextRequest {
-            vm_id: String::from("vm-browser"),
-            module_path: Some(String::from("/workspace/app.wasm")),
-        })
-        .expect("create WebAssembly context");
-    let started = sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id.clone(),
-            argv: vec![String::from("wasm"), String::from("/workspace/app.wasm")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect("start WebAssembly execution");
-
-    assert_eq!(sidecar.context_count("vm-browser"), 1);
-    assert_eq!(sidecar.active_worker_count("vm-browser"), 1);
-
-    sidecar
-        .kill_execution(KillExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            execution_id: started.execution_id,
-            signal: ExecutionSignal::Kill,
-        })
-        .expect("kill execution");
-    sidecar.dispose_vm("vm-browser").expect("dispose vm");
-
-    assert_eq!(sidecar.vm_count(), 0);
-
-    let bridge = sidecar.into_bridge();
-    assert_eq!(bridge.killed_executions.len(), 1);
-    assert_eq!(
-        bridge
-            .browser_worker_spawns
-            .first()
-            .and_then(|spawn| spawn.get("wasm_permission_tier"))
-            .map(String::as_str),
-        Some("Full")
-    );
-    assert_eq!(
-        bridge
-            .lifecycle_events
-            .last()
-            .expect("final lifecycle event")
-            .state,
-        LifecycleState::Terminated
-    );
-    assert!(bridge.structured_events.iter().any(|event| {
-        event.name == "browser.worker.spawned"
-            && event.fields.get("runtime") == Some(&String::from("webassembly"))
-    }));
-}
-
-#[test]
-fn browser_worker_spawn_requests_preserve_browser_entrypoints() {
-    let javascript = BrowserWorkerSpawnRequest {
-        vm_id: String::from("vm-browser"),
-        context_id: String::from("ctx-js"),
-        execution_id: String::from("exec-js"),
-        runtime: GuestRuntime::JavaScript,
-        entrypoint: BrowserWorkerEntrypoint::JavaScript {
-            bootstrap_module: Some(String::from("@secure-exec/browser")),
-        },
-        wasm_permission_tier: None,
-        process_config: test_process_config(),
-        os_config: test_os_config(),
-    };
-    let wasm = BrowserWorkerSpawnRequest {
-        vm_id: String::from("vm-browser"),
-        context_id: String::from("ctx-wasm"),
-        execution_id: String::from("exec-wasm"),
-        runtime: GuestRuntime::WebAssembly,
-        entrypoint: BrowserWorkerEntrypoint::WebAssembly {
-            module_path: Some(String::from("/workspace/app.wasm")),
-        },
-        wasm_permission_tier: Some(WasmPermissionTier::ReadOnly),
-        process_config: test_process_config(),
-        os_config: test_os_config(),
-    };
-
-    assert!(matches!(
-        javascript.entrypoint,
-        BrowserWorkerEntrypoint::JavaScript {
-            bootstrap_module: Some(_)
-        }
-    ));
-    assert!(matches!(
-        wasm.entrypoint,
-        BrowserWorkerEntrypoint::WebAssembly {
-            module_path: Some(_)
-        }
-    ));
-}
-
-#[test]
-fn browser_sidecar_routes_kernel_filesystem_and_execution_state_through_vm_state() {
-    let mut sidecar =
-        BrowserSidecar::new(RecordingBridge::default(), BrowserSidecarConfig::default());
-    sidecar
-        .create_vm(permissive_config("vm-browser"))
-        .expect("create vm");
-
-    assert_eq!(
-        sidecar.kernel_state("vm-browser").expect("kernel ready"),
-        LifecycleState::Ready
-    );
-
-    sidecar
-        .mkdir("vm-browser", "/workspace", true)
-        .expect("create workspace");
-    sidecar
-        .write_file("vm-browser", "/workspace/hello.txt", b"hello".to_vec())
-        .expect("write kernel file");
-    assert_eq!(
-        sidecar
-            .read_file("vm-browser", "/workspace/hello.txt")
-            .expect("read kernel file"),
-        b"hello".to_vec()
-    );
-    assert_eq!(
-        sidecar
-            .read_dir("vm-browser", "/workspace")
-            .expect("read workspace"),
-        vec![String::from("hello.txt")]
-    );
-
-    let context = sidecar
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-browser"),
-            bootstrap_module: Some(String::from("@secure-exec/browser")),
-        })
-        .expect("create JavaScript context");
-    let started = sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id,
-            argv: vec![String::from("node"), String::from("script.js")],
-            env: BTreeMap::from([(String::from("MODE"), String::from("browser"))]),
-            cwd: String::from("/workspace"),
-        })
-        .expect("start execution");
-
-    assert_eq!(
-        sidecar.kernel_state("vm-browser").expect("kernel busy"),
-        LifecycleState::Busy
-    );
-
-    sidecar
-        .write_stdin(secure_exec_bridge::WriteExecutionStdinRequest {
-            vm_id: String::from("vm-browser"),
-            execution_id: started.execution_id.clone(),
-            chunk: b"input".to_vec(),
-        })
-        .expect("write stdin");
-    assert_eq!(
-        sidecar
-            .read_execution_stdin(
-                "vm-browser",
-                &started.execution_id,
-                16,
-                Duration::from_millis(5),
-            )
-            .expect("read stdin"),
-        Some(b"input".to_vec())
-    );
-
-    sidecar
-        .bridge_mut()
-        .push_execution_event(ExecutionEvent::GuestRequest(GuestKernelCall {
-            vm_id: String::from("vm-browser"),
-            execution_id: started.execution_id.clone(),
-            operation: String::from("fs.read"),
-            payload: b"{\"path\":\"/workspace/input.txt\"}".to_vec(),
-        }));
-    sidecar
-        .poll_execution_event(PollExecutionEventRequest {
-            vm_id: String::from("vm-browser"),
-        })
-        .expect("poll guest kernel call");
-    let guest_call_events = sidecar
-        .bridge()
-        .structured_events
-        .iter()
-        .filter(|event| event.name == "guest.kernel_call.unsupported")
-        .collect::<Vec<_>>();
-    assert_eq!(guest_call_events.len(), 1);
-    assert_eq!(
-        guest_call_events[0].fields["execution_id"],
-        started.execution_id
-    );
-    assert_eq!(guest_call_events[0].fields["operation"], "fs.read");
-    assert_eq!(
-        guest_call_events[0].fields["payload_size_bytes"],
-        b"{\"path\":\"/workspace/input.txt\"}".len().to_string()
-    );
-
-    sidecar
-        .bridge_mut()
-        .push_execution_event(ExecutionEvent::SignalState(ExecutionSignalState {
-            vm_id: String::from("vm-browser"),
-            execution_id: started.execution_id.clone(),
-            signal: 15,
-            registration: SignalHandlerRegistration {
-                action: SignalDispositionAction::User,
-                mask: vec![2],
-                flags: 0,
-            },
-        }));
-    sidecar
-        .poll_execution_event(PollExecutionEventRequest {
-            vm_id: String::from("vm-browser"),
-        })
-        .expect("poll signal state");
-    let signal_state = sidecar
-        .signal_state("vm-browser", &started.execution_id)
-        .expect("signal state");
-    let sigterm = signal_state.get(&15).expect("SIGTERM handler");
-    assert_eq!(
-        sigterm.action,
-        secure_exec_sidecar_protocol::wire::SignalDispositionAction::User
-    );
-    assert_eq!(sigterm.mask, vec![2]);
-
-    sidecar
-        .create_kernel_tcp_listener_for_execution(
-            "vm-browser",
-            &started.execution_id,
-            "127.0.0.1",
-            34567,
-            16,
-        )
-        .expect("create listener owned by execution");
-    sidecar
-        .create_kernel_bound_udp_for_execution(
-            "vm-browser",
-            &started.execution_id,
-            "127.0.0.1",
-            34568,
-        )
-        .expect("create UDP binding owned by execution");
-    assert!(sidecar
-        .find_listener(
-            "vm-browser",
-            &FindListenerRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(34567),
-                path: None,
-            },
-        )
-        .expect("find listener before exit")
-        .is_some());
-    assert!(sidecar
-        .find_bound_udp(
-            "vm-browser",
-            &FindBoundUdpRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(34568),
-            },
-        )
-        .expect("find UDP binding before exit")
-        .is_some());
-
-    sidecar
-        .bridge_mut()
-        .push_execution_event(ExecutionEvent::Exited(ExecutionExited {
-            vm_id: String::from("vm-browser"),
-            execution_id: started.execution_id.clone(),
-            exit_code: 0,
-        }));
-    sidecar
-        .poll_execution_event(PollExecutionEventRequest {
-            vm_id: String::from("vm-browser"),
-        })
-        .expect("poll exit");
-
-    assert_eq!(
-        sidecar
-            .kernel_state("vm-browser")
-            .expect("kernel ready after exit"),
-        LifecycleState::Ready
-    );
-    assert!(sidecar
-        .signal_state("vm-browser", &started.execution_id)
-        .expect("signal state after exit")
-        .is_empty());
-    assert!(sidecar
-        .find_listener(
-            "vm-browser",
-            &FindListenerRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(34567),
-                path: None,
-            },
-        )
-        .expect("find listener after exit")
-        .is_none());
-    assert!(sidecar
-        .find_bound_udp(
-            "vm-browser",
-            &FindBoundUdpRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(34568),
-            },
-        )
-        .expect("find UDP binding after exit")
-        .is_none());
-}
-
-#[test]
-fn browser_sidecar_routes_guest_kernel_call_net_loopback_through_vm_state() {
-    let mut sidecar =
-        BrowserSidecar::new(RecordingBridge::default(), BrowserSidecarConfig::default());
-    sidecar
-        .create_vm(permissive_config("vm-browser"))
-        .expect("create vm");
-    let context = sidecar
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-browser"),
-            bootstrap_module: Some(String::from("@secure-exec/browser")),
-        })
-        .expect("create JavaScript context");
-    let started = sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id,
-            argv: vec![String::from("node"), String::from("script.js")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect("start execution");
-
-    // The synchronous guest kernel-call path (`GuestKernelCallRequest` ->
-    // shared `handle_guest_kernel_call` -> kernel sockets) is the converged
-    // replacement for the fire-and-forget `GuestRequest` bail. Drive a full
-    // loopback TCP exchange through it to prove the wiring end to end.
-    let call = |sidecar: &mut BrowserSidecar<RecordingBridge>,
-                operation: &str,
-                request: serde_json::Value|
-     -> serde_json::Value {
-        let result = sidecar
-            .guest_kernel_call(
-                "vm-browser",
-                GuestKernelCallRequest {
-                    execution_id: started.execution_id.clone(),
-                    operation: String::from(operation),
-                    payload: serde_json::to_vec(&request).expect("encode request"),
-                },
-            )
-            .expect("guest kernel call");
-        serde_json::from_slice(&result.payload).expect("decode response")
-    };
-
-    let listener = call(
-        &mut sidecar,
-        "net.listen",
-        serde_json::json!({ "host": "127.0.0.1", "port": 39221 }),
-    );
-    let listener_id = listener["socketId"].as_u64().expect("listener socket id");
-
-    let client = call(
-        &mut sidecar,
-        "net.connect",
-        serde_json::json!({ "host": "127.0.0.1", "port": 39221 }),
-    );
-    let client_id = client["socketId"].as_u64().expect("client socket id");
-
-    let accepted = call(
-        &mut sidecar,
-        "net.accept",
-        serde_json::json!({ "socketId": listener_id }),
-    );
-    let accepted_id = accepted["socketId"].as_u64().expect("accepted socket id");
-
-    // base64("hello") == "aGVsbG8=" (asserted directly so no decode is needed).
-    let write = call(
-        &mut sidecar,
-        "net.write",
-        serde_json::json!({ "socketId": client_id, "data": "aGVsbG8=" }),
-    );
-    assert_eq!(write["written"].as_u64(), Some(5));
-
-    let read = call(
-        &mut sidecar,
-        "net.read",
-        serde_json::json!({ "socketId": accepted_id }),
-    );
-    assert_eq!(read["closed"].as_bool(), Some(false));
-    assert_eq!(read["data"].as_str(), Some("aGVsbG8="));
-
-    // Unknown operations surface as a rejected guest kernel call rather than a
-    // silent fail-open.
-    let error = sidecar
-        .guest_kernel_call(
-            "vm-browser",
-            GuestKernelCallRequest {
-                execution_id: started.execution_id.clone(),
-                operation: String::from("net.teleport"),
-                payload: b"{}".to_vec(),
-            },
-        )
-        .expect_err("unsupported operation rejected");
-    assert!(error
-        .to_string()
-        .contains("unsupported guest kernel call operation: net.teleport"));
-}
-
-#[test]
-fn browser_sidecar_keeps_kernel_sockets_scoped_per_execution() {
-    let mut sidecar =
-        BrowserSidecar::new(RecordingBridge::default(), BrowserSidecarConfig::default());
-    sidecar
-        .create_vm(permissive_config("vm-browser"))
-        .expect("create vm");
-
-    let context = sidecar
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-browser"),
-            bootstrap_module: Some(String::from("@secure-exec/browser")),
-        })
-        .expect("create JavaScript context");
-
-    let first = sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id.clone(),
-            argv: vec![String::from("node"), String::from("first.js")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect("start first execution");
-    let second = sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id,
-            argv: vec![String::from("node"), String::from("second.js")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect("start second execution");
-
-    sidecar
-        .create_kernel_tcp_listener_for_execution(
-            "vm-browser",
-            &first.execution_id,
-            "127.0.0.1",
-            34601,
-            16,
-        )
-        .expect("create first listener");
-    sidecar
-        .create_kernel_tcp_listener_for_execution(
-            "vm-browser",
-            &second.execution_id,
-            "127.0.0.1",
-            34602,
-            16,
-        )
-        .expect("create second listener");
-    sidecar
-        .create_kernel_bound_udp_for_execution(
-            "vm-browser",
-            &first.execution_id,
-            "127.0.0.1",
-            34611,
-        )
-        .expect("create first UDP binding");
-    sidecar
-        .create_kernel_bound_udp_for_execution(
-            "vm-browser",
-            &second.execution_id,
-            "127.0.0.1",
-            34612,
-        )
-        .expect("create second UDP binding");
-
-    let second_listener = sidecar
-        .find_listener(
-            "vm-browser",
-            &FindListenerRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(34602),
-                path: None,
-            },
-        )
-        .expect("find second listener before exit")
-        .expect("second listener exists");
-    assert_eq!(second_listener.process_id, second.execution_id);
-
-    sidecar
-        .bridge_mut()
-        .push_execution_event(ExecutionEvent::Exited(ExecutionExited {
-            vm_id: String::from("vm-browser"),
-            execution_id: first.execution_id.clone(),
-            exit_code: 0,
-        }));
-    sidecar
-        .poll_execution_event(PollExecutionEventRequest {
-            vm_id: String::from("vm-browser"),
-        })
-        .expect("poll first exit");
-
-    assert!(sidecar
-        .find_listener(
-            "vm-browser",
-            &FindListenerRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(34601),
-                path: None,
-            },
-        )
-        .expect("find first listener after exit")
-        .is_none());
-    assert!(sidecar
-        .find_bound_udp(
-            "vm-browser",
-            &FindBoundUdpRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(34611),
-            },
-        )
-        .expect("find first UDP binding after exit")
-        .is_none());
-
-    let second_listener = sidecar
-        .find_listener(
-            "vm-browser",
-            &FindListenerRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(34602),
-                path: None,
-            },
-        )
-        .expect("find second listener after first exit")
-        .expect("second listener remains");
-    assert_eq!(second_listener.process_id, second.execution_id);
-    let second_udp = sidecar
-        .find_bound_udp(
-            "vm-browser",
-            &FindBoundUdpRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(34612),
-            },
-        )
-        .expect("find second UDP binding after first exit")
-        .expect("second UDP binding remains");
-    assert_eq!(second_udp.process_id, second.execution_id);
-    assert_eq!(
-        sidecar.kernel_state("vm-browser").expect("kernel state"),
-        LifecycleState::Busy
-    );
-}
-
-#[test]
-fn browser_sidecar_kernel_tcp_listener_obeys_vm_network_policy() {
-    let requests = Arc::new(Mutex::new(Vec::new()));
-    let requests_for_callback = Arc::clone(&requests);
-    let mut config = KernelVmConfig::new("vm-browser");
-    config.permissions = Permissions {
-        network: Some(Arc::new(move |request: &NetworkAccessRequest| {
-            requests_for_callback
-                .lock()
-                .expect("request log lock")
-                .push(request.clone());
-            PermissionDecision::deny("network disabled")
-        })),
-        ..Permissions::allow_all()
-    };
-
-    let mut sidecar =
-        BrowserSidecar::new(RecordingBridge::default(), BrowserSidecarConfig::default());
-    sidecar.create_vm(config).expect("create vm");
-
-    let context = sidecar
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-browser"),
-            bootstrap_module: Some(String::from("@secure-exec/browser")),
-        })
-        .expect("create JavaScript context");
-    let started = sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id,
-            argv: vec![String::from("node"), String::from("server.js")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect("start execution");
-
-    let error = sidecar
-        .create_kernel_tcp_listener_for_execution(
-            "vm-browser",
-            &started.execution_id,
-            "127.0.0.1",
-            34621,
-            16,
-        )
-        .expect_err("TCP listener should be denied by network policy");
-
-    assert!(
-        error.to_string().contains("EACCES"),
-        "unexpected error: {error}"
-    );
-    assert!(sidecar
-        .find_listener(
-            "vm-browser",
-            &FindListenerRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(34621),
-                path: None,
-            },
-        )
-        .expect("find listener after denied bind")
-        .is_none());
-    assert_eq!(
-        *requests.lock().expect("request log lock"),
-        vec![NetworkAccessRequest {
-            vm_id: String::from("vm-browser"),
-            op: NetworkOperation::Listen,
-            resource: String::from("tcp://127.0.0.1:34621"),
-        }]
-    );
-}
-
-#[test]
-fn browser_sidecar_reaps_kernel_process_after_normal_execution_exit() {
-    let mut sidecar =
-        BrowserSidecar::new(RecordingBridge::default(), BrowserSidecarConfig::default());
-    let mut config = KernelVmConfig::new("vm-browser");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_processes: Some(1),
-        ..ResourceLimits::default()
-    };
-    sidecar.create_vm(config).expect("create vm");
-
-    let context = sidecar
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-browser"),
-            bootstrap_module: Some(String::from("@secure-exec/browser")),
-        })
-        .expect("create JavaScript context");
-
-    let started = sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id.clone(),
-            argv: vec![String::from("node"), String::from("script.js")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect("start first execution");
-
-    sidecar
-        .bridge_mut()
-        .push_execution_event(ExecutionEvent::Exited(ExecutionExited {
-            vm_id: String::from("vm-browser"),
-            execution_id: started.execution_id,
-            exit_code: 0,
-        }));
-    sidecar
-        .poll_execution_event(PollExecutionEventRequest {
-            vm_id: String::from("vm-browser"),
-        })
-        .expect("poll exit");
-
-    sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id,
-            argv: vec![String::from("node"), String::from("script.js")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect("completed execution should not leak the one-process limit");
-}
-
-#[test]
-fn browser_sidecar_preserves_default_deny_kernel_permissions() {
-    let mut sidecar =
-        BrowserSidecar::new(RecordingBridge::default(), BrowserSidecarConfig::default());
-    sidecar
-        .create_vm(KernelVmConfig::new("vm-browser"))
-        .expect("create vm");
-
-    let error = sidecar
-        .write_file("vm-browser", "/workspace/denied.txt", b"denied".to_vec())
-        .expect_err("default permissions should deny filesystem writes");
-
-    // Under default deny-all the write's parent-directory resolution is the
-    // first denied operation, so the error reports the read denial on the
-    // parent; the write itself never proceeds.
-    assert_eq!(
-        error.to_string(),
-        "EACCES: permission denied, read '/workspace'"
-    );
-}
-
-#[test]
-fn browser_sidecar_builds_mount_table_root_from_root_filesystem_config() {
-    let mut sidecar =
-        BrowserSidecar::new(RecordingBridge::default(), BrowserSidecarConfig::default());
-    sidecar
-        .create_vm_with_root_filesystem(
-            permissive_config("vm-browser"),
-            RootFilesystemConfig {
-                disable_default_base_layer: true,
-                lowers: vec![
-                    RootFilesystemLowerDescriptor::Snapshot {
-                        entries: vec![
-                            RootFilesystemEntry {
-                                path: String::from("/workspace/shared.txt"),
-                                kind: RootFilesystemEntryKind::File,
-                                mode: None,
-                                uid: None,
-                                gid: None,
-                                content: Some(String::from("higher")),
-                                encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                                target: None,
-                                executable: false,
-                            },
-                            RootFilesystemEntry {
-                                path: String::from("/workspace/higher-only.txt"),
-                                kind: RootFilesystemEntryKind::File,
-                                mode: None,
-                                uid: None,
-                                gid: None,
-                                content: Some(String::from("higher-only")),
-                                encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                                target: None,
-                                executable: false,
-                            },
-                        ],
-                    },
-                    RootFilesystemLowerDescriptor::Snapshot {
-                        entries: vec![
-                            RootFilesystemEntry {
-                                path: String::from("/workspace/shared.txt"),
-                                kind: RootFilesystemEntryKind::File,
-                                mode: None,
-                                uid: None,
-                                gid: None,
-                                content: Some(String::from("lower")),
-                                encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                                target: None,
-                                executable: false,
-                            },
-                            RootFilesystemEntry {
-                                path: String::from("/workspace/lower-only.txt"),
-                                kind: RootFilesystemEntryKind::File,
-                                mode: None,
-                                uid: None,
-                                gid: None,
-                                content: Some(String::from("lower-only")),
-                                encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                                target: None,
-                                executable: false,
-                            },
-                        ],
-                    },
-                ],
-                bootstrap_entries: vec![
-                    RootFilesystemEntry {
-                        path: String::from("/workspace/shared.txt"),
-                        kind: RootFilesystemEntryKind::File,
-                        mode: None,
-                        uid: None,
-                        gid: None,
-                        content: Some(String::from("upper")),
-                        encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                        target: None,
-                        executable: false,
-                    },
-                    RootFilesystemEntry {
-                        path: String::from("/workspace/upper-only.txt"),
-                        kind: RootFilesystemEntryKind::File,
-                        mode: None,
-                        uid: None,
-                        gid: None,
-                        content: Some(String::from("upper-only")),
-                        encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                        target: None,
-                        executable: false,
-                    },
-                ],
-                ..RootFilesystemConfig::default()
-            },
-        )
-        .expect("create vm with root filesystem config");
-
-    for (path, expected) in [
-        ("/workspace/shared.txt", b"upper".as_slice()),
-        ("/workspace/higher-only.txt", b"higher-only".as_slice()),
-        ("/workspace/lower-only.txt", b"lower-only".as_slice()),
-        ("/workspace/upper-only.txt", b"upper-only".as_slice()),
-    ] {
-        assert_eq!(
-            sidecar
-                .read_file("vm-browser", path)
-                .unwrap_or_else(|error| panic!("read {path}: {error}")),
-            expected.to_vec()
-        );
-    }
-    sidecar
-        .write_file("vm-browser", "/workspace/new.txt", b"new-upper".to_vec())
-        .expect("write upper entry");
-
-    let snapshot = sidecar
-        .snapshot_root_filesystem("vm-browser")
-        .expect("snapshot root filesystem");
-    assert!(snapshot.entries.iter().any(|entry| {
-        entry.path == "/workspace/new.txt"
-            && entry.kind == FilesystemEntryKind::File
-            && entry.content.as_deref() == Some(b"new-upper".as_slice())
-    }));
-}
-
-#[test]
-fn browser_sidecar_locks_read_only_root_after_bootstrap() {
-    let mut sidecar =
-        BrowserSidecar::new(RecordingBridge::default(), BrowserSidecarConfig::default());
-    sidecar
-        .create_vm_with_root_filesystem(
-            permissive_config("vm-browser"),
-            RootFilesystemConfig {
-                mode: RootFilesystemMode::ReadOnly,
-                disable_default_base_layer: true,
-                bootstrap_entries: vec![RootFilesystemEntry {
-                    path: String::from("/workspace/bootstrap.txt"),
-                    kind: RootFilesystemEntryKind::File,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    content: Some(String::from("bootstrapped")),
-                    encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                    target: None,
-                    executable: false,
-                }],
-                ..RootFilesystemConfig::default()
-            },
-        )
-        .expect("create read-only VM with bootstrap entries");
-
-    assert_eq!(
-        sidecar
-            .read_file("vm-browser", "/workspace/bootstrap.txt")
-            .expect("read bootstrap entry"),
-        b"bootstrapped".to_vec()
-    );
-
-    let error = sidecar
-        .write_file("vm-browser", "/workspace/new.txt", b"new".to_vec())
-        .expect_err("read-only root should reject writes after bootstrap");
-    assert_eq!(
-        error.to_string(),
-        "EROFS: read-only filesystem: /workspace/new.txt"
-    );
-}
-
-#[test]
-fn browser_sidecar_reaps_pending_kernel_process_when_worker_startup_fails() {
-    let mut bridge = RecordingBridge::default();
-    bridge.push_worker_create_error("worker startup failed");
-
-    let mut sidecar = BrowserSidecar::new(bridge, BrowserSidecarConfig::default());
-    let mut config = KernelVmConfig::new("vm-browser");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_processes: Some(1),
-        ..ResourceLimits::default()
-    };
-    sidecar.create_vm(config).expect("create vm");
-
-    let context = sidecar
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-browser"),
-            bootstrap_module: Some(String::from("@secure-exec/browser")),
-        })
-        .expect("create JavaScript context");
-
-    let failed = sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id.clone(),
-            argv: vec![String::from("node"), String::from("script.js")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect_err("worker creation should fail");
-
-    assert!(failed.to_string().contains("worker startup failed"));
-    assert_eq!(sidecar.active_worker_count("vm-browser"), 0);
-    assert_eq!(sidecar.bridge().killed_executions.len(), 1);
-    assert_eq!(sidecar.bridge().killed_executions[0].execution_id, "exec-1");
-    assert_eq!(
-        sidecar.kernel_state("vm-browser").expect("kernel ready"),
-        LifecycleState::Ready
-    );
-
-    let started = sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id,
-            argv: vec![String::from("node"), String::from("script.js")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect("leaked pending process would exhaust the one-process limit");
-
-    assert_eq!(started.execution_id, "exec-2");
-    assert_eq!(sidecar.active_worker_count("vm-browser"), 1);
-}
-
-#[test]
-fn browser_sidecar_reaps_pending_kernel_process_when_stdio_setup_fails() {
-    let mut sidecar =
-        BrowserSidecar::new(RecordingBridge::default(), BrowserSidecarConfig::default());
-    let mut config = KernelVmConfig::new("vm-browser");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_processes: Some(1),
-        max_pipes: Some(0),
-        ..ResourceLimits::default()
-    };
-    sidecar.create_vm(config).expect("create vm");
-
-    let context = sidecar
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-browser"),
-            bootstrap_module: Some(String::from("@secure-exec/browser")),
-        })
-        .expect("create JavaScript context");
-
-    for _ in 0..2 {
-        let failed = sidecar
-            .start_execution(StartExecutionRequest {
-                vm_id: String::from("vm-browser"),
-                context_id: context.context_id.clone(),
-                argv: vec![String::from("node"), String::from("script.js")],
-                env: BTreeMap::new(),
-                cwd: String::from("/workspace"),
-            })
-            .expect_err("stdio setup should fail before worker creation");
-
-        assert!(failed.to_string().contains("maximum pipe count reached"));
-        assert_eq!(sidecar.active_worker_count("vm-browser"), 0);
-        assert_eq!(
-            sidecar.kernel_state("vm-browser").expect("kernel ready"),
-            LifecycleState::Ready
-        );
-    }
-}
-
-#[test]
-fn browser_sidecar_reaps_pending_kernel_process_when_bridge_execution_start_fails() {
-    let mut bridge = RecordingBridge::default();
-    bridge.push_execution_start_error("execution start failed");
-
-    let mut sidecar = BrowserSidecar::new(bridge, BrowserSidecarConfig::default());
-    let mut config = KernelVmConfig::new("vm-browser");
-    config.permissions = Permissions::allow_all();
-    config.resources = ResourceLimits {
-        max_processes: Some(1),
-        ..ResourceLimits::default()
-    };
-    sidecar.create_vm(config).expect("create vm");
-
-    let context = sidecar
-        .create_wasm_context(CreateWasmContextRequest {
-            vm_id: String::from("vm-browser"),
-            module_path: Some(String::from("/workspace/app.wasm")),
-        })
-        .expect("create WebAssembly context");
-
-    let failed = sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id.clone(),
-            argv: vec![String::from("wasm"), String::from("/workspace/app.wasm")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect_err("execution start should fail");
-
-    assert!(failed.to_string().contains("execution start failed"));
-    assert_eq!(sidecar.active_worker_count("vm-browser"), 0);
-    assert_eq!(
-        sidecar.kernel_state("vm-browser").expect("kernel ready"),
-        LifecycleState::Ready
-    );
-    assert!(sidecar.bridge().terminated_workers.is_empty());
-
-    sidecar
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm-browser"),
-            context_id: context.context_id,
-            argv: vec![String::from("wasm"), String::from("/workspace/app.wasm")],
-            env: BTreeMap::new(),
-            cwd: String::from("/workspace"),
-        })
-        .expect("leaked pending process would exhaust the one-process limit");
-}
diff --git a/crates/sidecar-browser/tests/smoke.rs b/crates/sidecar-browser/tests/smoke.rs
deleted file mode 100644
index 3b84767a0..000000000
--- a/crates/sidecar-browser/tests/smoke.rs
+++ /dev/null
@@ -1,147 +0,0 @@
-#[path = "../../bridge/tests/support.rs"]
-mod bridge_support;
-
-use bridge_support::RecordingBridge;
-use secure_exec_kernel::kernel::KernelVmConfig;
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_sidecar_browser::{
-    scaffold, BrowserExtension, BrowserExtensionContext, BrowserExtensionRequest, BrowserSidecar,
-    BrowserSidecarConfig, BrowserWorkerBridge, BrowserWorkerHandle, BrowserWorkerHandleRequest,
-    BrowserWorkerSpawnRequest,
-};
-
-struct SmokeExtension(&'static str);
-
-impl BrowserExtension for SmokeExtension {
-    fn namespace(&self) -> &str {
-        self.0
-    }
-
-    fn handle_request(
-        &self,
-        context: &mut BrowserExtensionContext<'_>,
-        payload: &[u8],
-    ) -> Result<Vec<u8>, secure_exec_sidecar_browser::BrowserSidecarError> {
-        if payload == b"context-fs" {
-            context.mkdir("vm-ext", "/workspace", true)?;
-            context.write_file("vm-ext", "/workspace/context.txt", b"from-context")?;
-            return context.read_file("vm-ext", "/workspace/context.txt");
-        }
-        let mut response = self.0.as_bytes().to_vec();
-        response.push(b':');
-        response.extend_from_slice(payload);
-        Ok(response)
-    }
-}
-
-impl BrowserWorkerBridge for RecordingBridge {
-    fn create_worker(
-        &mut self,
-        request: BrowserWorkerSpawnRequest,
-    ) -> Result<BrowserWorkerHandle, Self::Error> {
-        Ok(BrowserWorkerHandle {
-            worker_id: format!("smoke-worker-{}", request.context_id),
-            runtime: request.runtime,
-        })
-    }
-
-    fn terminate_worker(
-        &mut self,
-        _request: BrowserWorkerHandleRequest,
-    ) -> Result<(), Self::Error> {
-        Ok(())
-    }
-}
-
-fn permissive_config(vm_id: &str) -> KernelVmConfig {
-    let mut config = KernelVmConfig::new(vm_id);
-    config.permissions = Permissions::allow_all();
-    config
-}
-
-#[test]
-fn browser_sidecar_scaffold_stays_on_main_thread_with_shared_kernel() {
-    let scaffold = scaffold();
-
-    assert_eq!(scaffold.package_name, "secure-exec-sidecar-browser");
-    assert_eq!(scaffold.kernel_package, "secure-exec-kernel");
-    assert_eq!(scaffold.execution_host_thread, "main");
-    assert_eq!(scaffold.guest_worker_owner_thread, "main");
-}
-
-#[test]
-fn browser_sidecar_accepts_extension_signature() {
-    let mut sidecar = BrowserSidecar::with_extensions(
-        RecordingBridge::default(),
-        BrowserSidecarConfig::default(),
-        vec![Box::new(SmokeExtension("dev.rivet.agentos.browser-smoke"))],
-    )
-    .expect("construct browser sidecar with extension");
-
-    assert_eq!(sidecar.extension_count(), 1);
-    assert!(sidecar.has_extension("dev.rivet.agentos.browser-smoke"));
-
-    let error = sidecar
-        .register_extension(Box::new(SmokeExtension("dev.rivet.agentos.browser-smoke")))
-        .expect_err("duplicate extension namespace should fail");
-    assert!(error
-        .to_string()
-        .contains("browser extension namespace already registered"));
-}
-
-#[test]
-fn browser_sidecar_dispatches_extension_requests_by_namespace() {
-    let mut sidecar = BrowserSidecar::with_extensions(
-        RecordingBridge::default(),
-        BrowserSidecarConfig::default(),
-        vec![Box::new(SmokeExtension("dev.rivet.agentos.browser-smoke"))],
-    )
-    .expect("construct browser sidecar with extension");
-
-    let response = sidecar
-        .dispatch_extension_request(BrowserExtensionRequest {
-            namespace: String::from("dev.rivet.agentos.browser-smoke"),
-            payload: b"ping".to_vec(),
-            vm_id: None,
-            connection_id: None,
-        })
-        .expect("dispatch extension request");
-    assert_eq!(response.namespace, "dev.rivet.agentos.browser-smoke");
-    assert_eq!(response.payload, b"dev.rivet.agentos.browser-smoke:ping");
-
-    let error = sidecar
-        .dispatch_extension_request(BrowserExtensionRequest {
-            namespace: String::from("missing"),
-            payload: Vec::new(),
-            vm_id: None,
-            connection_id: None,
-        })
-        .expect_err("unknown extension namespace should fail");
-    assert!(error
-        .to_string()
-        .contains("no browser extension registered for namespace missing"));
-}
-
-#[test]
-fn browser_extension_context_exposes_vm_filesystem_primitives() {
-    let mut sidecar = BrowserSidecar::with_extensions(
-        RecordingBridge::default(),
-        BrowserSidecarConfig::default(),
-        vec![Box::new(SmokeExtension("dev.rivet.agentos.browser-smoke"))],
-    )
-    .expect("construct browser sidecar with extension");
-    sidecar
-        .create_vm(permissive_config("vm-ext"))
-        .expect("create vm for extension context");
-
-    let response = sidecar
-        .dispatch_extension_request(BrowserExtensionRequest {
-            namespace: String::from("dev.rivet.agentos.browser-smoke"),
-            payload: b"context-fs".to_vec(),
-            vm_id: Some(String::from("vm-ext")),
-            connection_id: Some(String::from("conn-ext")),
-        })
-        .expect("dispatch extension request through context");
-
-    assert_eq!(response.payload, b"from-context");
-}
diff --git a/crates/sidecar-browser/tests/wire_dispatch.rs b/crates/sidecar-browser/tests/wire_dispatch.rs
deleted file mode 100644
index 6e1c9b0f6..000000000
--- a/crates/sidecar-browser/tests/wire_dispatch.rs
+++ /dev/null
@@ -1,1745 +0,0 @@
-#[path = "../../bridge/tests/support.rs"]
-mod bridge_support;
-
-use bridge_support::RecordingBridge;
-use secure_exec_bridge::{
-    CreateJavascriptContextRequest, ExecutionEvent, ExecutionSignal, ExecutionSignalState,
-    GuestKernelCall, OutputChunk, SignalDispositionAction, SignalHandlerRegistration,
-    StartExecutionRequest,
-};
-use secure_exec_kernel::kernel::KernelVmConfig;
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_sidecar_browser::{
-    wire_dispatch::BrowserWireDispatcher, BrowserExtension, BrowserExtensionContext,
-    BrowserSidecarError, BrowserWorkerBridge, BrowserWorkerHandle, BrowserWorkerHandleRequest,
-    BrowserWorkerSpawnRequest,
-};
-use secure_exec_sidecar_protocol::wire::{
-    protocol_schema, AuthenticateRequest, BootstrapRootFilesystemRequest, ConfigureVmRequest,
-    ConnectionOwnership, CreateOverlayRequest, CreateVmRequest, ExecuteRequest,
-    ExportSnapshotRequest, ExtEnvelope, FilesystemOperation, FindBoundUdpRequest,
-    FindListenerRequest, GetSignalStateRequest, GuestFilesystemCallRequest,
-    GuestFilesystemOperation, GuestRuntimeKind, HostFilesystemCallRequest, ImportSnapshotRequest,
-    KillProcessRequest, OpenSessionRequest, OwnershipScope, PermissionsPolicy,
-    PersistenceFlushRequest, PersistenceLoadRequest, ProtocolFrame, RegisterHostCallbacksRequest,
-    RegisteredHostCallbackDefinition, RequestFrame, RequestPayload, ResponsePayload,
-    RootFilesystemEntry, RootFilesystemEntryEncoding, RootFilesystemEntryKind, RootFilesystemMode,
-    SealLayerRequest, SidecarPlacement, SidecarPlacementShared, VmFetchRequest, VmOwnership,
-    WasmPermissionTier, WireFrameCodec, PROTOCOL_VERSION,
-};
-use std::collections::{BTreeMap, HashMap};
-
-struct WireExtension;
-
-impl BrowserExtension for WireExtension {
-    fn namespace(&self) -> &str {
-        "dev.rivet.secure-exec.browser-wire-test"
-    }
-
-    fn handle_request(
-        &self,
-        _context: &mut BrowserExtensionContext<'_>,
-        payload: &[u8],
-    ) -> Result<Vec<u8>, BrowserSidecarError> {
-        let mut response = b"wire-ext:".to_vec();
-        response.extend_from_slice(payload);
-        Ok(response)
-    }
-}
-
-impl BrowserWorkerBridge for RecordingBridge {
-    fn create_worker(
-        &mut self,
-        request: BrowserWorkerSpawnRequest,
-    ) -> Result<BrowserWorkerHandle, Self::Error> {
-        self.browser_worker_spawns.push(BTreeMap::from([(
-            String::from("wasm_permission_tier"),
-            request
-                .wasm_permission_tier
-                .map(|tier| format!("{tier:?}"))
-                .unwrap_or_default(),
-        )]));
-        Ok(BrowserWorkerHandle {
-            worker_id: format!("wire-worker-{}", request.context_id),
-            runtime: request.runtime,
-        })
-    }
-
-    fn terminate_worker(
-        &mut self,
-        _request: BrowserWorkerHandleRequest,
-    ) -> Result<(), Self::Error> {
-        Ok(())
-    }
-}
-
-fn create_wire_vm(
-    codec: &WireFrameCodec,
-    dispatcher: &mut BrowserWireDispatcher<RecordingBridge>,
-) -> (String, OwnershipScope) {
-    let auth = dispatch(
-        codec,
-        dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-                connection_id: String::from("client"),
-            }),
-            payload: RequestPayload::AuthenticateRequest(AuthenticateRequest {
-                client_name: String::from("browser-wire-test"),
-                auth_token: String::from("test-token"),
-                protocol_version: PROTOCOL_VERSION,
-                bridge_version: secure_exec_bridge::bridge_contract().version,
-            }),
-        },
-    );
-    let ResponsePayload::AuthenticatedResponse(authenticated) = auth.payload else {
-        panic!("unexpected auth response: {:?}", auth.payload);
-    };
-    let connection = OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-        connection_id: authenticated.connection_id.clone(),
-    });
-    let session = dispatch(
-        codec,
-        dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 2,
-            ownership: connection,
-            payload: RequestPayload::OpenSessionRequest(OpenSessionRequest {
-                placement: SidecarPlacement::SidecarPlacementShared(SidecarPlacementShared {
-                    pool: None,
-                }),
-                metadata: Default::default(),
-            }),
-        },
-    );
-    let ResponsePayload::SessionOpenedResponse(opened) = session.payload else {
-        panic!("unexpected session response: {:?}", session.payload);
-    };
-    let config = secure_exec_vm_config::CreateVmConfig {
-        cwd: Some(String::from("/workspace")),
-        permissions: Some(secure_exec_sidecar_core::allow_all_policy()),
-        ..Default::default()
-    };
-    let created = dispatch(
-        codec,
-        dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 3,
-            ownership: OwnershipScope::SessionOwnership(
-                secure_exec_sidecar_protocol::wire::SessionOwnership {
-                    connection_id: authenticated.connection_id.clone(),
-                    session_id: opened.session_id.clone(),
-                },
-            ),
-            payload: RequestPayload::CreateVmRequest(CreateVmRequest::json_config(
-                GuestRuntimeKind::JavaScript,
-                config,
-            )),
-        },
-    );
-    let ResponsePayload::VmCreatedResponse(created) = created.payload else {
-        panic!("unexpected create VM response: {:?}", created.payload);
-    };
-    let ownership = OwnershipScope::VmOwnership(VmOwnership {
-        connection_id: authenticated.connection_id,
-        session_id: opened.session_id,
-        vm_id: created.vm_id.clone(),
-    });
-    (created.vm_id, ownership)
-}
-
-fn execute_wire_process(
-    codec: &WireFrameCodec,
-    dispatcher: &mut BrowserWireDispatcher<RecordingBridge>,
-    ownership: OwnershipScope,
-    request_id: i64,
-    process_id: &str,
-) -> ResponsePayload {
-    dispatch(
-        codec,
-        dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id,
-            ownership,
-            payload: RequestPayload::ExecuteRequest(ExecuteRequest {
-                process_id: process_id.to_string(),
-                command: Some(String::from("node")),
-                runtime: Some(GuestRuntimeKind::JavaScript),
-                entrypoint: Some(String::from("/workspace/main.js")),
-                args: vec![String::from("main.js")],
-                env: Default::default(),
-                cwd: Some(String::from("/workspace")),
-                wasm_permission_tier: None,
-            }),
-        },
-    )
-    .payload
-}
-
-#[test]
-fn browser_wire_dispatcher_handles_lifecycle_and_execution_frames() {
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-
-    let auth = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-                connection_id: String::from("client"),
-            }),
-            payload: RequestPayload::AuthenticateRequest(AuthenticateRequest {
-                client_name: String::from("browser-wire-test"),
-                auth_token: String::from("test-token"),
-                protocol_version: PROTOCOL_VERSION,
-                bridge_version: secure_exec_bridge::bridge_contract().version,
-            }),
-        },
-    );
-    let ResponsePayload::AuthenticatedResponse(authenticated) = auth.payload else {
-        panic!("unexpected auth response: {:?}", auth.payload);
-    };
-    assert_eq!(authenticated.sidecar_id, "secure-exec-sidecar-browser");
-
-    let session = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 2,
-            ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-                connection_id: authenticated.connection_id.clone(),
-            }),
-            payload: RequestPayload::OpenSessionRequest(OpenSessionRequest {
-                placement: SidecarPlacement::SidecarPlacementShared(SidecarPlacementShared {
-                    pool: None,
-                }),
-                metadata: Default::default(),
-            }),
-        },
-    );
-    let ResponsePayload::SessionOpenedResponse(opened) = session.payload else {
-        panic!("unexpected session response: {:?}", session.payload);
-    };
-
-    let mut config = secure_exec_vm_config::CreateVmConfig {
-        cwd: Some(String::from("/workspace")),
-        permissions: Some(secure_exec_sidecar_core::allow_all_policy()),
-        ..Default::default()
-    };
-    config
-        .env
-        .insert(String::from("BASE_ENV"), String::from("base"));
-    let create = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 3,
-            ownership: OwnershipScope::SessionOwnership(
-                secure_exec_sidecar_protocol::wire::SessionOwnership {
-                    connection_id: authenticated.connection_id.clone(),
-                    session_id: opened.session_id.clone(),
-                },
-            ),
-            payload: RequestPayload::CreateVmRequest(CreateVmRequest::json_config(
-                GuestRuntimeKind::JavaScript,
-                config,
-            )),
-        },
-    );
-    let ResponsePayload::VmCreatedResponse(created) = create.payload else {
-        panic!("unexpected create response: {:?}", create.payload);
-    };
-    assert_eq!(dispatcher.vm_count(), 1);
-
-    let ownership = OwnershipScope::VmOwnership(VmOwnership {
-        connection_id: authenticated.connection_id,
-        session_id: opened.session_id,
-        vm_id: created.vm_id.clone(),
-    });
-
-    let bootstrap = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 4,
-            ownership: ownership.clone(),
-            payload: RequestPayload::BootstrapRootFilesystemRequest(
-                BootstrapRootFilesystemRequest {
-                    entries: vec![RootFilesystemEntry {
-                        path: String::from("/workspace/wire.txt"),
-                        kind: RootFilesystemEntryKind::File,
-                        mode: Some(0o644),
-                        uid: Some(1000),
-                        gid: Some(1000),
-                        content: Some(String::from("aGVsbG8gd2lyZQ==")),
-                        encoding: Some(RootFilesystemEntryEncoding::Base64),
-                        target: None,
-                        executable: false,
-                    }],
-                },
-            ),
-        },
-    );
-    assert!(matches!(
-        bootstrap.payload,
-        ResponsePayload::RootFilesystemBootstrappedResponse(_)
-    ));
-
-    let read_file = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 5,
-            ownership: ownership.clone(),
-            payload: RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::ReadFile,
-                path: String::from("/workspace/wire.txt"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        },
-    );
-    let ResponsePayload::GuestFilesystemResultResponse(result) = read_file.payload else {
-        panic!("unexpected read_file response: {:?}", read_file.payload);
-    };
-    assert_eq!(result.content.as_deref(), Some("hello wire"));
-    assert_eq!(result.encoding, Some(RootFilesystemEntryEncoding::Utf8));
-
-    let snapshot = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 6,
-            ownership: ownership.clone(),
-            payload: RequestPayload::SnapshotRootFilesystemRequest,
-        },
-    );
-    let ResponsePayload::RootFilesystemSnapshotResponse(snapshot) = snapshot.payload else {
-        panic!("unexpected snapshot response: {:?}", snapshot.payload);
-    };
-    assert!(snapshot
-        .entries
-        .iter()
-        .any(|entry| entry.path == "/workspace/wire.txt"
-            && entry.content.as_deref() == Some("hello wire")));
-
-    let execute = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 7,
-            ownership: ownership.clone(),
-            payload: RequestPayload::ExecuteRequest(ExecuteRequest {
-                process_id: String::from("proc-1"),
-                command: Some(String::from("node")),
-                runtime: Some(GuestRuntimeKind::JavaScript),
-                entrypoint: Some(String::from("/workspace/main.js")),
-                args: vec![String::from("main.js")],
-                env: Default::default(),
-                cwd: Some(String::from("/workspace")),
-                wasm_permission_tier: None,
-            }),
-        },
-    );
-    assert!(matches!(
-        execute.payload,
-        ResponsePayload::ProcessStartedResponse(_)
-    ));
-
-    dispatcher
-        .sidecar_mut()
-        .create_kernel_tcp_listener_for_execution(&created.vm_id, "exec-1", "127.0.0.1", 34567, 16)
-        .expect("create kernel listener");
-    dispatcher
-        .sidecar_mut()
-        .create_kernel_bound_udp_for_execution(&created.vm_id, "exec-1", "127.0.0.1", 34568)
-        .expect("create kernel UDP socket");
-
-    let listener = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 71,
-            ownership: ownership.clone(),
-            payload: RequestPayload::FindListenerRequest(FindListenerRequest {
-                host: Some(String::from("localhost")),
-                port: Some(34567),
-                path: None,
-            }),
-        },
-    );
-    let ResponsePayload::ListenerSnapshotResponse(listener) = listener.payload else {
-        panic!("unexpected listener response: {:?}", listener.payload);
-    };
-    let listener = listener.listener.expect("listener should be found");
-    assert_eq!(listener.process_id, "proc-1");
-    assert_eq!(listener.host.as_deref(), Some("127.0.0.1"));
-    assert_eq!(listener.port, Some(34567));
-
-    let udp = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 72,
-            ownership: ownership.clone(),
-            payload: RequestPayload::FindBoundUdpRequest(FindBoundUdpRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(34568),
-            }),
-        },
-    );
-    let ResponsePayload::BoundUdpSnapshotResponse(udp) = udp.payload else {
-        panic!("unexpected UDP response: {:?}", udp.payload);
-    };
-    let udp = udp.socket.expect("UDP socket should be found");
-    assert_eq!(udp.process_id, "proc-1");
-    assert_eq!(udp.host.as_deref(), Some("127.0.0.1"));
-    assert_eq!(udp.port, Some(34568));
-
-    let snapshot = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 8,
-            ownership: ownership.clone(),
-            payload: RequestPayload::GetProcessSnapshotRequest,
-        },
-    );
-    let ResponsePayload::ProcessSnapshotResponse(snapshot) = snapshot.payload else {
-        panic!(
-            "unexpected process snapshot response: {:?}",
-            snapshot.payload
-        );
-    };
-    let process = snapshot
-        .processes
-        .iter()
-        .find(|process| process.process_id == "proc-1")
-        .expect("client process should be represented in snapshot");
-    assert!(process.pid > 0);
-    assert_eq!(process.cwd, "/workspace");
-
-    dispatcher
-        .sidecar_mut()
-        .bridge_mut()
-        .push_execution_event(ExecutionEvent::SignalState(ExecutionSignalState {
-            vm_id: created.vm_id.clone(),
-            execution_id: String::from("exec-1"),
-            signal: 15,
-            registration: SignalHandlerRegistration {
-                action: SignalDispositionAction::User,
-                mask: vec![2],
-                flags: 0,
-            },
-        }));
-    while dispatcher
-        .poll_event_bytes()
-        .expect("pump signal state")
-        .is_some()
-    {}
-
-    let signal_state = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 9,
-            ownership: ownership.clone(),
-            payload: RequestPayload::GetSignalStateRequest(GetSignalStateRequest {
-                process_id: String::from("proc-1"),
-            }),
-        },
-    );
-    let ResponsePayload::SignalStateResponse(signal_state) = signal_state.payload else {
-        panic!(
-            "unexpected signal state response: {:?}",
-            signal_state.payload
-        );
-    };
-    assert_eq!(signal_state.process_id, "proc-1");
-    let sigterm = signal_state.handlers.get(&15).expect("SIGTERM handler");
-    assert_eq!(
-        sigterm.action,
-        secure_exec_sidecar_protocol::wire::SignalDispositionAction::User
-    );
-    assert_eq!(sigterm.mask, vec![2]);
-
-    let invalid_signal = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 91,
-            ownership: ownership.clone(),
-            payload: RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("proc-1"),
-                signal: String::from("SIGBOGUS"),
-            }),
-        },
-    );
-    let ResponsePayload::RejectedResponse(rejected) = invalid_signal.payload else {
-        panic!(
-            "unexpected invalid signal response: {:?}",
-            invalid_signal.payload
-        );
-    };
-    assert_eq!(rejected.code, "kill_process_failed");
-    assert!(rejected
-        .message
-        .contains("unsupported kill_process signal SIGBOGUS"));
-    assert!(dispatcher
-        .sidecar_mut()
-        .bridge()
-        .killed_executions
-        .is_empty());
-
-    let signal_zero = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 92,
-            ownership: ownership.clone(),
-            payload: RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("proc-1"),
-                signal: String::from("0"),
-            }),
-        },
-    );
-    assert!(matches!(
-        signal_zero.payload,
-        ResponsePayload::ProcessKilledResponse(_)
-    ));
-    assert!(dispatcher
-        .sidecar_mut()
-        .bridge()
-        .killed_executions
-        .is_empty());
-
-    let continue_signal = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 94,
-            ownership: ownership.clone(),
-            payload: RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("proc-1"),
-                signal: String::from("SIGCONT"),
-            }),
-        },
-    );
-    assert!(matches!(
-        continue_signal.payload,
-        ResponsePayload::ProcessKilledResponse(_)
-    ));
-    assert!(dispatcher
-        .sidecar_mut()
-        .bridge()
-        .killed_executions
-        .is_empty());
-
-    let zombie_count = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 10,
-            ownership: ownership.clone(),
-            payload: RequestPayload::GetZombieTimerCountRequest,
-        },
-    );
-    let ResponsePayload::ZombieTimerCountResponse(zombie_count) = zombie_count.payload else {
-        panic!(
-            "unexpected zombie count response: {:?}",
-            zombie_count.payload
-        );
-    };
-    assert_eq!(zombie_count.count, 0);
-
-    dispatcher
-        .sidecar_mut()
-        .bridge_mut()
-        .push_execution_event(ExecutionEvent::Stdout(OutputChunk {
-            vm_id: created.vm_id,
-            execution_id: String::from("exec-1"),
-            chunk: b"hello\n".to_vec(),
-        }));
-    let output = loop {
-        let event = dispatcher
-            .poll_event_bytes()
-            .expect("poll event")
-            .expect("event should be encoded");
-        let ProtocolFrame::EventFrame(event) = codec.decode_message(&event).expect("decode event")
-        else {
-            panic!("expected event frame");
-        };
-        if let secure_exec_sidecar_protocol::wire::EventPayload::ProcessOutputEvent(output) =
-            event.payload
-        {
-            break output;
-        }
-    };
-    assert_eq!(output.process_id, "proc-1");
-    assert_eq!(output.chunk, b"hello\n");
-
-    dispatcher
-        .sidecar_mut()
-        .bridge_mut()
-        .push_execution_event(ExecutionEvent::GuestRequest(GuestKernelCall {
-            vm_id: String::from("vm-1"),
-            execution_id: String::from("exec-1"),
-            operation: String::from("fs.read"),
-            payload: b"{\"path\":\"/workspace/input.txt\"}".to_vec(),
-        }));
-    let guest_request_event = loop {
-        let event = dispatcher
-            .poll_event_bytes()
-            .expect("poll guest request event")
-            .expect("guest request event should be encoded");
-        let ProtocolFrame::EventFrame(event) = codec.decode_message(&event).expect("decode event")
-        else {
-            panic!("expected event frame");
-        };
-        if let secure_exec_sidecar_protocol::wire::EventPayload::StructuredEvent(event) =
-            event.payload
-        {
-            if event.name == "guest.kernel_call.unsupported" {
-                break event;
-            }
-        }
-    };
-    assert_eq!(guest_request_event.detail["process_id"], "proc-1");
-    assert_eq!(guest_request_event.detail["execution_id"], "exec-1");
-    assert_eq!(guest_request_event.detail["operation"], "fs.read");
-    assert_eq!(
-        guest_request_event.detail["payload_size_bytes"],
-        b"{\"path\":\"/workspace/input.txt\"}".len().to_string()
-    );
-
-    let interrupt = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 93,
-            ownership,
-            payload: RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("proc-1"),
-                signal: String::from("SIGINT"),
-            }),
-        },
-    );
-    assert!(matches!(
-        interrupt.payload,
-        ResponsePayload::ProcessKilledResponse(_)
-    ));
-    let killed = &dispatcher.sidecar_mut().bridge().killed_executions;
-    assert_eq!(killed.len(), 1);
-    assert_eq!(killed[0].signal, ExecutionSignal::Interrupt);
-}
-
-#[test]
-fn browser_wire_dispatcher_rejects_duplicate_active_process_ids() {
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-    let (_, ownership) = create_wire_vm(&codec, &mut dispatcher);
-
-    let first = execute_wire_process(&codec, &mut dispatcher, ownership.clone(), 10, "proc-1");
-    assert!(matches!(first, ResponsePayload::ProcessStartedResponse(_)));
-
-    let duplicate = execute_wire_process(&codec, &mut dispatcher, ownership, 11, "proc-1");
-    let ResponsePayload::RejectedResponse(rejected) = duplicate else {
-        panic!("unexpected duplicate process response: {:?}", duplicate);
-    };
-    assert_eq!(rejected.code, "process_already_active");
-    assert_eq!(
-        dispatcher
-            .sidecar_mut()
-            .bridge()
-            .browser_worker_spawns
-            .len(),
-        1
-    );
-}
-
-#[test]
-fn browser_wire_dispatcher_rejects_protocol_version_mismatch() {
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-
-    let response = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-                connection_id: String::from("client"),
-            }),
-            payload: RequestPayload::AuthenticateRequest(AuthenticateRequest {
-                client_name: String::from("browser-wire-test"),
-                auth_token: String::from("test-token"),
-                protocol_version: PROTOCOL_VERSION + 1,
-                bridge_version: secure_exec_bridge::bridge_contract().version,
-            }),
-        },
-    );
-
-    let ResponsePayload::RejectedResponse(rejected) = response.payload else {
-        panic!("unexpected auth mismatch response: {:?}", response.payload);
-    };
-    assert_eq!(rejected.code, "protocol_version_mismatch");
-    assert!(rejected
-        .message
-        .contains("sidecar protocol version mismatch"));
-}
-
-#[test]
-fn browser_wire_dispatcher_rejects_bridge_contract_version_mismatch() {
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-
-    let response = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-                connection_id: String::from("client"),
-            }),
-            payload: RequestPayload::AuthenticateRequest(AuthenticateRequest {
-                client_name: String::from("browser-wire-test"),
-                auth_token: String::from("test-token"),
-                protocol_version: PROTOCOL_VERSION,
-                bridge_version: secure_exec_bridge::bridge_contract().version + 1,
-            }),
-        },
-    );
-
-    let ResponsePayload::RejectedResponse(rejected) = response.payload else {
-        panic!(
-            "unexpected bridge mismatch response: {:?}",
-            response.payload
-        );
-    };
-    assert_eq!(rejected.code, "bridge_version_mismatch");
-    assert!(rejected
-        .message
-        .contains("bridge contract version mismatch"));
-}
-
-#[test]
-fn browser_wire_dispatcher_routes_extension_frames() {
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-    dispatcher
-        .sidecar_mut()
-        .register_extension(Box::new(WireExtension))
-        .expect("register wire extension");
-
-    let response = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-                connection_id: String::from("client"),
-            }),
-            payload: RequestPayload::ExtEnvelope(ExtEnvelope {
-                namespace: String::from("dev.rivet.secure-exec.browser-wire-test"),
-                payload: b"ping".to_vec(),
-            }),
-        },
-    );
-
-    let ResponsePayload::ExtEnvelope(envelope) = response.payload else {
-        panic!("unexpected extension response: {:?}", response.payload);
-    };
-    assert_eq!(
-        envelope.namespace,
-        "dev.rivet.secure-exec.browser-wire-test"
-    );
-    assert_eq!(envelope.payload, b"wire-ext:ping");
-}
-
-#[test]
-fn browser_wire_dispatcher_configures_vm_permissions() {
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-    let mut config = KernelVmConfig::new("vm-config");
-    config.permissions = Permissions::allow_all();
-    dispatcher
-        .sidecar_mut()
-        .create_vm(config)
-        .expect("create configurable vm");
-    let ownership = OwnershipScope::VmOwnership(VmOwnership {
-        connection_id: String::from("conn"),
-        session_id: String::from("session"),
-        vm_id: String::from("vm-config"),
-    });
-
-    let bootstrap = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: ownership.clone(),
-            payload: RequestPayload::BootstrapRootFilesystemRequest(
-                BootstrapRootFilesystemRequest {
-                    entries: vec![RootFilesystemEntry {
-                        path: String::from("/workspace/config.txt"),
-                        kind: RootFilesystemEntryKind::File,
-                        mode: None,
-                        uid: None,
-                        gid: None,
-                        content: Some(String::from("before")),
-                        encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                        target: None,
-                        executable: false,
-                    }],
-                },
-            ),
-        },
-    );
-    assert!(matches!(
-        bootstrap.payload,
-        ResponsePayload::RootFilesystemBootstrappedResponse(_)
-    ));
-
-    let configured = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 2,
-            ownership: ownership.clone(),
-            payload: RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: Vec::new(),
-                software: Vec::new(),
-                permissions: Some(PermissionsPolicy::deny_all()),
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: Default::default(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            }),
-        },
-    );
-    let ResponsePayload::VmConfiguredResponse(configured) = configured.payload else {
-        panic!("unexpected configure response: {:?}", configured.payload);
-    };
-    assert_eq!(configured.applied_mounts, 0);
-    assert_eq!(configured.applied_software, 0);
-
-    let read_after_deny = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 3,
-            ownership,
-            payload: RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::ReadFile,
-                path: String::from("/workspace/config.txt"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        },
-    );
-    let ResponsePayload::RejectedResponse(rejected) = read_after_deny.payload else {
-        panic!(
-            "unexpected read-after-configure response: {:?}",
-            read_after_deny.payload
-        );
-    };
-    assert_eq!(rejected.code, "guest_filesystem_failed");
-}
-
-#[test]
-fn browser_wire_create_vm_without_permissions_defaults_to_deny_all() {
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-
-    let auth = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-                connection_id: String::from("client"),
-            }),
-            payload: RequestPayload::AuthenticateRequest(AuthenticateRequest {
-                client_name: String::from("browser-wire-test"),
-                auth_token: String::from("test-token"),
-                protocol_version: PROTOCOL_VERSION,
-                bridge_version: secure_exec_bridge::bridge_contract().version,
-            }),
-        },
-    );
-    let ResponsePayload::AuthenticatedResponse(authenticated) = auth.payload else {
-        panic!("unexpected auth response: {:?}", auth.payload);
-    };
-    let session = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 2,
-            ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-                connection_id: authenticated.connection_id.clone(),
-            }),
-            payload: RequestPayload::OpenSessionRequest(OpenSessionRequest {
-                placement: SidecarPlacement::SidecarPlacementShared(SidecarPlacementShared {
-                    pool: None,
-                }),
-                metadata: Default::default(),
-            }),
-        },
-    );
-    let ResponsePayload::SessionOpenedResponse(opened) = session.payload else {
-        panic!("unexpected session response: {:?}", session.payload);
-    };
-
-    let config = secure_exec_vm_config::CreateVmConfig {
-        cwd: Some(String::from("/workspace")),
-        permissions: None,
-        root_filesystem: secure_exec_vm_config::RootFilesystemConfig {
-            bootstrap_entries: vec![secure_exec_vm_config::RootFilesystemEntry {
-                path: String::from("/workspace/default-deny.txt"),
-                kind: secure_exec_vm_config::RootFilesystemEntryKind::File,
-                mode: None,
-                uid: None,
-                gid: None,
-                content: Some(String::from("secret")),
-                encoding: Some(secure_exec_vm_config::RootFilesystemEntryEncoding::Utf8),
-                target: None,
-                executable: false,
-            }],
-            ..Default::default()
-        },
-        ..Default::default()
-    };
-    let create = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 3,
-            ownership: OwnershipScope::SessionOwnership(
-                secure_exec_sidecar_protocol::wire::SessionOwnership {
-                    connection_id: authenticated.connection_id.clone(),
-                    session_id: opened.session_id.clone(),
-                },
-            ),
-            payload: RequestPayload::CreateVmRequest(CreateVmRequest::json_config(
-                GuestRuntimeKind::JavaScript,
-                config,
-            )),
-        },
-    );
-    let ResponsePayload::VmCreatedResponse(created) = create.payload else {
-        panic!("unexpected create response: {:?}", create.payload);
-    };
-
-    let read = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 4,
-            ownership: OwnershipScope::VmOwnership(VmOwnership {
-                connection_id: authenticated.connection_id,
-                session_id: opened.session_id,
-                vm_id: created.vm_id,
-            }),
-            payload: RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::ReadFile,
-                path: String::from("/workspace/default-deny.txt"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        },
-    );
-    let ResponsePayload::RejectedResponse(rejected) = read.payload else {
-        panic!("unexpected default-deny read response: {:?}", read.payload);
-    };
-    assert_eq!(rejected.code, "guest_filesystem_failed");
-}
-
-#[test]
-fn browser_wire_create_vm_applies_read_only_root_filesystem_config() {
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-
-    let auth = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-                connection_id: String::from("client"),
-            }),
-            payload: RequestPayload::AuthenticateRequest(AuthenticateRequest {
-                client_name: String::from("browser-wire-test"),
-                auth_token: String::from("test-token"),
-                protocol_version: PROTOCOL_VERSION,
-                bridge_version: secure_exec_bridge::bridge_contract().version,
-            }),
-        },
-    );
-    let ResponsePayload::AuthenticatedResponse(authenticated) = auth.payload else {
-        panic!("unexpected auth response: {:?}", auth.payload);
-    };
-    let session = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 2,
-            ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-                connection_id: authenticated.connection_id.clone(),
-            }),
-            payload: RequestPayload::OpenSessionRequest(OpenSessionRequest {
-                placement: SidecarPlacement::SidecarPlacementShared(SidecarPlacementShared {
-                    pool: None,
-                }),
-                metadata: Default::default(),
-            }),
-        },
-    );
-    let ResponsePayload::SessionOpenedResponse(opened) = session.payload else {
-        panic!("unexpected session response: {:?}", session.payload);
-    };
-
-    let config = secure_exec_vm_config::CreateVmConfig {
-        cwd: Some(String::from("/workspace")),
-        permissions: Some(secure_exec_sidecar_core::allow_all_policy()),
-        root_filesystem: secure_exec_vm_config::RootFilesystemConfig {
-            mode: secure_exec_vm_config::RootFilesystemMode::ReadOnly,
-            disable_default_base_layer: true,
-            bootstrap_entries: vec![secure_exec_vm_config::RootFilesystemEntry {
-                path: String::from("/workspace/bootstrap.txt"),
-                kind: secure_exec_vm_config::RootFilesystemEntryKind::File,
-                mode: None,
-                uid: None,
-                gid: None,
-                content: Some(String::from("bootstrapped")),
-                encoding: Some(secure_exec_vm_config::RootFilesystemEntryEncoding::Utf8),
-                target: None,
-                executable: false,
-            }],
-            ..Default::default()
-        },
-        ..Default::default()
-    };
-    let create = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 3,
-            ownership: OwnershipScope::SessionOwnership(
-                secure_exec_sidecar_protocol::wire::SessionOwnership {
-                    connection_id: authenticated.connection_id.clone(),
-                    session_id: opened.session_id.clone(),
-                },
-            ),
-            payload: RequestPayload::CreateVmRequest(CreateVmRequest::json_config(
-                GuestRuntimeKind::JavaScript,
-                config,
-            )),
-        },
-    );
-    let ResponsePayload::VmCreatedResponse(created) = create.payload else {
-        panic!("unexpected create response: {:?}", create.payload);
-    };
-    let ownership = OwnershipScope::VmOwnership(VmOwnership {
-        connection_id: authenticated.connection_id,
-        session_id: opened.session_id,
-        vm_id: created.vm_id,
-    });
-
-    let read = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 4,
-            ownership: ownership.clone(),
-            payload: RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::ReadFile,
-                path: String::from("/workspace/bootstrap.txt"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        },
-    );
-    let ResponsePayload::GuestFilesystemResultResponse(read) = read.payload else {
-        panic!("unexpected read response: {:?}", read.payload);
-    };
-    assert_eq!(read.content.as_deref(), Some("bootstrapped"));
-
-    let write = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 5,
-            ownership,
-            payload: RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::WriteFile,
-                path: String::from("/workspace/new.txt"),
-                destination_path: None,
-                target: None,
-                content: Some(String::from("new")),
-                encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                recursive: false,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        },
-    );
-    let ResponsePayload::RejectedResponse(rejected) = write.payload else {
-        panic!("unexpected write response: {:?}", write.payload);
-    };
-    assert_eq!(rejected.code, "guest_filesystem_failed");
-    assert_eq!(
-        rejected.message,
-        "EROFS: read-only filesystem: /workspace/new.txt"
-    );
-}
-
-#[test]
-fn browser_wire_dispatcher_configures_wasm_command_permissions() {
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-    let mut config = KernelVmConfig::new("vm-wasm-perms");
-    config.permissions = Permissions::allow_all();
-    dispatcher
-        .sidecar_mut()
-        .create_vm(config)
-        .expect("create wasm permissions vm");
-    let ownership = OwnershipScope::VmOwnership(VmOwnership {
-        connection_id: String::from("conn"),
-        session_id: String::from("session"),
-        vm_id: String::from("vm-wasm-perms"),
-    });
-
-    let configured = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: ownership.clone(),
-            payload: RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: Vec::new(),
-                software: Vec::new(),
-                permissions: None,
-                module_access_cwd: None,
-                instructions: vec![String::from("keep wasm read-only")],
-                projected_modules: Vec::new(),
-                command_permissions: HashMap::from([(
-                    String::from("wasm"),
-                    WasmPermissionTier::ReadOnly,
-                )]),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            }),
-        },
-    );
-    assert!(matches!(
-        configured.payload,
-        ResponsePayload::VmConfiguredResponse(_)
-    ));
-
-    let executed = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 2,
-            ownership: ownership.clone(),
-            payload: RequestPayload::ExecuteRequest(ExecuteRequest {
-                process_id: String::from("proc-wasm"),
-                command: Some(String::from("wasm")),
-                runtime: Some(GuestRuntimeKind::WebAssembly),
-                entrypoint: Some(String::from("/workspace/app.wasm")),
-                args: vec![String::from("/workspace/app.wasm")],
-                env: Default::default(),
-                cwd: Some(String::from("/workspace")),
-                wasm_permission_tier: None,
-            }),
-        },
-    );
-    assert!(matches!(
-        executed.payload,
-        ResponsePayload::ProcessStartedResponse(_)
-    ));
-    assert_eq!(
-        dispatcher
-            .sidecar_mut()
-            .bridge()
-            .browser_worker_spawns
-            .first()
-            .and_then(|spawn| spawn.get("wasm_permission_tier"))
-            .map(String::as_str),
-        Some("ReadOnly")
-    );
-
-    let explicit = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 3,
-            ownership,
-            payload: RequestPayload::ExecuteRequest(ExecuteRequest {
-                process_id: String::from("proc-wasm-explicit"),
-                command: Some(String::from("wasm")),
-                runtime: Some(GuestRuntimeKind::WebAssembly),
-                entrypoint: Some(String::from("/workspace/app.wasm")),
-                args: vec![String::from("/workspace/app.wasm")],
-                env: Default::default(),
-                cwd: Some(String::from("/workspace")),
-                wasm_permission_tier: Some(WasmPermissionTier::ReadWrite),
-            }),
-        },
-    );
-    assert!(matches!(
-        explicit.payload,
-        ResponsePayload::ProcessStartedResponse(_)
-    ));
-    assert_eq!(
-        dispatcher
-            .sidecar_mut()
-            .bridge()
-            .browser_worker_spawns
-            .get(1)
-            .and_then(|spawn| spawn.get("wasm_permission_tier"))
-            .map(String::as_str),
-        Some("ReadWrite")
-    );
-}
-
-#[test]
-fn browser_wire_dispatcher_registers_host_callbacks() {
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-    let mut config = KernelVmConfig::new("vm-tools");
-    config.permissions = Permissions::allow_all();
-    dispatcher
-        .sidecar_mut()
-        .create_vm(config)
-        .expect("create tools vm");
-    let ownership = OwnershipScope::VmOwnership(VmOwnership {
-        connection_id: String::from("conn"),
-        session_id: String::from("session"),
-        vm_id: String::from("vm-tools"),
-    });
-
-    let response = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: ownership.clone(),
-            payload: RequestPayload::RegisterHostCallbacksRequest(test_toolkit_payload(
-                "browser",
-                "agentos-browser",
-            )),
-        },
-    );
-    let ResponsePayload::HostCallbacksRegisteredResponse(registered) = response.payload else {
-        panic!("unexpected register response: {:?}", response.payload);
-    };
-    assert_eq!(registered.registration, "browser");
-    assert_eq!(registered.command_count, 2);
-
-    let duplicate = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 2,
-            ownership,
-            payload: RequestPayload::RegisterHostCallbacksRequest(test_toolkit_payload(
-                "browser",
-                "agentos-browser-2",
-            )),
-        },
-    );
-    let ResponsePayload::RejectedResponse(rejected) = duplicate.payload else {
-        panic!("unexpected duplicate response: {:?}", duplicate.payload);
-    };
-    assert_eq!(rejected.code, "register_host_callbacks_failed");
-    assert!(rejected.message.contains("toolkit already registered"));
-}
-
-#[test]
-fn browser_wire_dispatcher_manages_snapshot_layers() {
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-    let mut config = KernelVmConfig::new("vm-layers");
-    config.permissions = Permissions::allow_all();
-    dispatcher
-        .sidecar_mut()
-        .create_vm(config)
-        .expect("create layer vm");
-    let ownership = OwnershipScope::VmOwnership(VmOwnership {
-        connection_id: String::from("conn"),
-        session_id: String::from("session"),
-        vm_id: String::from("vm-layers"),
-    });
-
-    let lower_layer = import_snapshot_layer(
-        &codec,
-        &mut dispatcher,
-        ownership.clone(),
-        1,
-        &[
-            ("/workspace/lower.txt", "lower"),
-            ("/workspace/shared.txt", "lower"),
-        ],
-    );
-    let upper_layer = import_snapshot_layer(
-        &codec,
-        &mut dispatcher,
-        ownership.clone(),
-        2,
-        &[
-            ("/workspace/upper.txt", "upper"),
-            ("/workspace/shared.txt", "upper"),
-        ],
-    );
-
-    let overlay = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 3,
-            ownership: ownership.clone(),
-            payload: RequestPayload::CreateOverlayRequest(CreateOverlayRequest {
-                mode: RootFilesystemMode::Ephemeral,
-                upper_layer_id: Some(upper_layer),
-                lower_layer_ids: vec![lower_layer],
-            }),
-        },
-    );
-    let ResponsePayload::OverlayCreatedResponse(overlay) = overlay.payload else {
-        panic!("unexpected overlay response: {:?}", overlay.payload);
-    };
-
-    let exported = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 4,
-            ownership: ownership.clone(),
-            payload: RequestPayload::ExportSnapshotRequest(ExportSnapshotRequest {
-                layer_id: overlay.layer_id,
-            }),
-        },
-    );
-    let ResponsePayload::SnapshotExportedResponse(exported) = exported.payload else {
-        panic!("unexpected export response: {:?}", exported.payload);
-    };
-    assert!(exported
-        .entries
-        .iter()
-        .any(|entry| entry.path == "/workspace/lower.txt"
-            && entry.content.as_deref() == Some("lower")));
-    assert!(exported
-        .entries
-        .iter()
-        .any(|entry| entry.path == "/workspace/upper.txt"
-            && entry.content.as_deref() == Some("upper")));
-    assert!(exported
-        .entries
-        .iter()
-        .any(|entry| entry.path == "/workspace/shared.txt"
-            && entry.content.as_deref() == Some("upper")));
-
-    let created = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 5,
-            ownership: ownership.clone(),
-            payload: RequestPayload::CreateLayerRequest,
-        },
-    );
-    let ResponsePayload::LayerCreatedResponse(created) = created.payload else {
-        panic!("unexpected create layer response: {:?}", created.payload);
-    };
-    let sealed = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 6,
-            ownership,
-            payload: RequestPayload::SealLayerRequest(SealLayerRequest {
-                layer_id: created.layer_id,
-            }),
-        },
-    );
-    assert!(matches!(
-        sealed.payload,
-        ResponsePayload::LayerSealedResponse(_)
-    ));
-}
-
-#[test]
-fn browser_wire_dispatcher_rejects_reverse_host_callback_requests() {
-    let codec = WireFrameCodec::default();
-    for payload in [
-        RequestPayload::HostFilesystemCallRequest(HostFilesystemCallRequest {
-            operation: FilesystemOperation::Read,
-            path: String::from("/state"),
-            payload_size_bytes: 0,
-        }),
-        RequestPayload::PersistenceLoadRequest(PersistenceLoadRequest {
-            key: String::from("state"),
-        }),
-        RequestPayload::PersistenceFlushRequest(PersistenceFlushRequest {
-            key: String::from("state"),
-            payload_size_bytes: 0,
-        }),
-    ] {
-        let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-
-        let response = dispatch(
-            &codec,
-            &mut dispatcher,
-            RequestFrame {
-                schema: protocol_schema(),
-                request_id: 1,
-                ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-                    connection_id: String::from("client"),
-                }),
-                payload,
-            },
-        );
-
-        let ResponsePayload::RejectedResponse(rejected) = response.payload else {
-            panic!("unexpected rejection response: {:?}", response.payload);
-        };
-        assert_eq!(rejected.code, "unsupported_direction");
-    }
-}
-
-#[test]
-fn browser_wire_dispatcher_rejects_vm_fetch_when_guest_listener_is_missing() {
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-    let mut config = KernelVmConfig::new("vm");
-    config.permissions = Permissions::allow_all();
-    dispatcher
-        .sidecar_mut()
-        .create_vm(config)
-        .expect("create vm for vm.fetch");
-    let response = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: OwnershipScope::VmOwnership(VmOwnership {
-                connection_id: String::from("conn"),
-                session_id: String::from("session"),
-                vm_id: String::from("vm"),
-            }),
-            payload: RequestPayload::VmFetchRequest(VmFetchRequest {
-                port: 3000,
-                method: String::from("GET"),
-                path: String::from("/"),
-                headers_json: String::from("{}"),
-                body: None,
-            }),
-        },
-    );
-
-    let ResponsePayload::RejectedResponse(rejected) = response.payload else {
-        panic!("unexpected vm.fetch response: {:?}", response.payload);
-    };
-    assert_eq!(rejected.code, "vm_fetch_failed");
-    assert!(
-        rejected
-            .message
-            .contains("could not find a guest HTTP listener on port 3000"),
-        "unexpected vm.fetch rejection: {}",
-        rejected.message
-    );
-}
-
-#[test]
-fn browser_wire_dispatcher_rejects_vm_fetch_with_invalid_headers_json() {
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-    let mut config = KernelVmConfig::new("vm");
-    config.permissions = Permissions::allow_all();
-    dispatcher
-        .sidecar_mut()
-        .create_vm(config)
-        .expect("create vm for vm.fetch");
-    let response = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: OwnershipScope::VmOwnership(VmOwnership {
-                connection_id: String::from("conn"),
-                session_id: String::from("session"),
-                vm_id: String::from("vm"),
-            }),
-            payload: RequestPayload::VmFetchRequest(VmFetchRequest {
-                port: 3000,
-                method: String::from("GET"),
-                path: String::from("/"),
-                headers_json: String::from("{not-json"),
-                body: None,
-            }),
-        },
-    );
-
-    let ResponsePayload::RejectedResponse(rejected) = response.payload else {
-        panic!("unexpected vm.fetch response: {:?}", response.payload);
-    };
-    assert_eq!(rejected.code, "invalid_request");
-    assert!(
-        rejected.message.contains("headers_json must be valid JSON"),
-        "unexpected vm.fetch rejection: {}",
-        rejected.message
-    );
-}
-
-#[test]
-fn browser_wire_dispatcher_vm_fetch_enters_kernel_loopback_when_listener_exists() {
-    std::env::set_var("SECURE_EXEC_TEST_BROWSER_VM_FETCH_TIMEOUT_MS", "5");
-    let codec = WireFrameCodec::default();
-    let mut dispatcher = BrowserWireDispatcher::new(RecordingBridge::default());
-    let mut config = KernelVmConfig::new("vm");
-    config.permissions = Permissions::allow_all();
-    dispatcher
-        .sidecar_mut()
-        .create_vm(config)
-        .expect("create vm for vm.fetch");
-    let context = dispatcher
-        .sidecar_mut()
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm"),
-            bootstrap_module: None,
-        })
-        .expect("create context");
-    let started = dispatcher
-        .sidecar_mut()
-        .start_execution(StartExecutionRequest {
-            vm_id: String::from("vm"),
-            context_id: context.context_id,
-            argv: Vec::new(),
-            env: BTreeMap::new(),
-            cwd: String::from("/"),
-        })
-        .expect("start execution");
-    dispatcher
-        .sidecar_mut()
-        .create_kernel_tcp_listener_for_execution(
-            "vm",
-            &started.execution_id,
-            "127.0.0.1",
-            3000,
-            16,
-        )
-        .expect("create listener");
-
-    let response = dispatch(
-        &codec,
-        &mut dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: OwnershipScope::VmOwnership(VmOwnership {
-                connection_id: String::from("conn"),
-                session_id: String::from("session"),
-                vm_id: String::from("vm"),
-            }),
-            payload: RequestPayload::VmFetchRequest(VmFetchRequest {
-                port: 3000,
-                method: String::from("GET"),
-                path: String::from("/health"),
-                headers_json: String::from("{}"),
-                body: None,
-            }),
-        },
-    );
-    std::env::remove_var("SECURE_EXEC_TEST_BROWSER_VM_FETCH_TIMEOUT_MS");
-
-    let ResponsePayload::RejectedResponse(rejected) = response.payload else {
-        panic!("unexpected vm.fetch response: {:?}", response.payload);
-    };
-    assert_eq!(rejected.code, "vm_fetch_failed");
-    assert!(
-        rejected
-            .message
-            .contains("timed out waiting for kernel TCP HTTP response"),
-        "unexpected vm.fetch rejection: {}",
-        rejected.message
-    );
-    assert!(
-        !rejected.message.contains("not implemented"),
-        "vm.fetch should no longer stop at the unsupported platform branch"
-    );
-}
-
-fn test_toolkit_payload(name: &str, alias: &str) -> RegisterHostCallbacksRequest {
-    RegisterHostCallbacksRequest {
-        name: name.to_string(),
-        description: format!("{name} automation"),
-        command_aliases: vec![alias.to_string()],
-        registry_command_aliases: vec![String::from("agentos")],
-        callbacks: std::collections::HashMap::from([(
-            String::from("screenshot"),
-            RegisteredHostCallbackDefinition {
-                description: String::from("Take a screenshot"),
-                input_schema: String::from(
-                    r#"{"type":"object","properties":{},"additionalProperties":false}"#,
-                ),
-                timeout_ms: None,
-                examples: Vec::new(),
-            },
-        )]),
-    }
-}
-
-fn import_snapshot_layer(
-    codec: &WireFrameCodec,
-    dispatcher: &mut BrowserWireDispatcher<RecordingBridge>,
-    ownership: OwnershipScope,
-    request_id: i64,
-    files: &[(&str, &str)],
-) -> String {
-    let response = dispatch(
-        codec,
-        dispatcher,
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id,
-            ownership,
-            payload: RequestPayload::ImportSnapshotRequest(ImportSnapshotRequest {
-                entries: files
-                    .iter()
-                    .map(|(path, content)| RootFilesystemEntry {
-                        path: path.to_string(),
-                        kind: RootFilesystemEntryKind::File,
-                        mode: None,
-                        uid: None,
-                        gid: None,
-                        content: Some(content.to_string()),
-                        encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                        target: None,
-                        executable: false,
-                    })
-                    .collect(),
-            }),
-        },
-    );
-    let ResponsePayload::SnapshotImportedResponse(imported) = response.payload else {
-        panic!("unexpected import response: {:?}", response.payload);
-    };
-    imported.layer_id
-}
-
-fn dispatch(
-    codec: &WireFrameCodec,
-    dispatcher: &mut BrowserWireDispatcher<RecordingBridge>,
-    request: RequestFrame,
-) -> secure_exec_sidecar_protocol::wire::ResponseFrame {
-    let request = codec
-        .encode_message(&ProtocolFrame::RequestFrame(request))
-        .expect("encode request");
-    let response = dispatcher
-        .handle_request_bytes(&request)
-        .expect("dispatch request");
-    let ProtocolFrame::ResponseFrame(response) =
-        codec.decode_message(&response).expect("decode response")
-    else {
-        panic!("expected response frame");
-    };
-    response
-}
diff --git a/crates/sidecar-core/Cargo.toml b/crates/sidecar-core/Cargo.toml
index 03a5c99ab..c7bdc7d3e 100644
--- a/crates/sidecar-core/Cargo.toml
+++ b/crates/sidecar-core/Cargo.toml
@@ -4,13 +4,10 @@ version.workspace = true
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
-description = "Shared Secure Exec sidecar logic for native and browser shells"
+description = "secure-exec-sidecar-core compatibility shim for agentos-native-sidecar-core"
+
+[lib]
+name = "secure_exec_sidecar_core"
 
 [dependencies]
-secure-exec-bridge = { workspace = true }
-secure-exec-kernel = { workspace = true }
-secure-exec-sidecar-protocol = { workspace = true }
-secure-exec-vm-config = { workspace = true }
-base64 = "0.22"
-serde_json = "1.0"
-vfs = { workspace = true }
+agentos_native_sidecar_core = { package = "agentos-native-sidecar-core", path = "../../../agentos/crates/native-sidecar-core", version = "0.0.1" }
diff --git a/crates/sidecar-core/src/bridge_bytes.rs b/crates/sidecar-core/src/bridge_bytes.rs
deleted file mode 100644
index dd9a6a6cc..000000000
--- a/crates/sidecar-core/src/bridge_bytes.rs
+++ /dev/null
@@ -1,85 +0,0 @@
-use base64::Engine;
-use serde_json::{json, Value};
-
-pub fn encoded_bytes_value(bytes: &[u8]) -> Value {
-    json!({
-        "__agentOSType": "bytes",
-        "base64": base64::engine::general_purpose::STANDARD.encode(bytes),
-    })
-}
-
-pub fn decode_encoded_bytes_value(value: &Value) -> Result<Vec<u8>, String> {
-    let Some(base64_value) = value
-        .get("__agentOSType")
-        .and_then(Value::as_str)
-        .filter(|kind| *kind == "bytes")
-        .and_then(|_| value.get("base64"))
-        .and_then(Value::as_str)
-    else {
-        return Err(String::from("must be a string or encoded bytes payload"));
-    };
-
-    decode_base64(base64_value)
-}
-
-pub fn bridge_buffer_value(bytes: &[u8]) -> Value {
-    json!({
-        "__type": "buffer",
-        "value": base64::engine::general_purpose::STANDARD.encode(bytes),
-    })
-}
-
-pub fn decode_bridge_buffer_value(value: &Value) -> Result<Vec<u8>, String> {
-    let base64_value = value
-        .as_object()
-        .filter(|object| object.get("__type").and_then(Value::as_str) == Some("buffer"))
-        .and_then(|object| object.get("value"))
-        .and_then(Value::as_str)
-        .ok_or_else(|| String::from("must be a serialized bridge buffer"))?;
-
-    decode_base64(base64_value)
-}
-
-pub fn decode_base64(value: &str) -> Result<Vec<u8>, String> {
-    base64::engine::general_purpose::STANDARD
-        .decode(value)
-        .map_err(|error| format!("contains invalid base64: {error}"))
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn round_trips_encoded_bytes_payload() {
-        let value = encoded_bytes_value(b"hello");
-
-        assert_eq!(decode_encoded_bytes_value(&value), Ok(b"hello".to_vec()));
-    }
-
-    #[test]
-    fn round_trips_bridge_buffer_payload() {
-        let value = bridge_buffer_value(b"secret");
-
-        assert_eq!(decode_bridge_buffer_value(&value), Ok(b"secret".to_vec()));
-    }
-
-    #[test]
-    fn rejects_wrong_payload_shapes() {
-        assert_eq!(
-            decode_encoded_bytes_value(&json!({ "__agentOSType": "text", "base64": "aGk=" })),
-            Err(String::from("must be a string or encoded bytes payload"))
-        );
-        assert_eq!(
-            decode_bridge_buffer_value(&json!({ "__type": "bytes", "value": "aGk=" })),
-            Err(String::from("must be a serialized bridge buffer"))
-        );
-    }
-
-    #[test]
-    fn labels_invalid_base64() {
-        assert!(decode_base64("not base64!")
-            .expect_err("invalid base64 should fail")
-            .starts_with("contains invalid base64:"));
-    }
-}
diff --git a/crates/sidecar-core/src/diagnostics.rs b/crates/sidecar-core/src/diagnostics.rs
deleted file mode 100644
index 7416015b0..000000000
--- a/crates/sidecar-core/src/diagnostics.rs
+++ /dev/null
@@ -1,172 +0,0 @@
-use secure_exec_kernel::process_table::{ProcessInfo, ProcessStatus};
-use secure_exec_sidecar_protocol::protocol::{ProcessSnapshotEntry, ProcessSnapshotStatus};
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum SharedProcessSnapshotStatus {
-    Running,
-    Stopped,
-    Exited,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct SharedProcessSnapshotEntry {
-    pub process_id: String,
-    pub pid: u32,
-    pub ppid: u32,
-    pub pgid: u32,
-    pub sid: u32,
-    pub driver: String,
-    pub command: String,
-    pub args: Vec<String>,
-    pub cwd: String,
-    pub status: SharedProcessSnapshotStatus,
-    pub exit_code: Option<i32>,
-}
-
-pub fn process_status_from_kernel(status: ProcessStatus) -> SharedProcessSnapshotStatus {
-    match status {
-        ProcessStatus::Running => SharedProcessSnapshotStatus::Running,
-        ProcessStatus::Stopped => SharedProcessSnapshotStatus::Stopped,
-        ProcessStatus::Exited => SharedProcessSnapshotStatus::Exited,
-    }
-}
-
-pub fn process_snapshot_entry_from_kernel(
-    process_id: &str,
-    info: &ProcessInfo,
-    cwd: impl Into<String>,
-    exit_code: Option<i32>,
-) -> SharedProcessSnapshotEntry {
-    SharedProcessSnapshotEntry {
-        process_id: process_id.to_owned(),
-        pid: info.pid,
-        ppid: info.ppid,
-        pgid: info.pgid,
-        sid: info.sid,
-        driver: info.driver.clone(),
-        command: info.command.clone(),
-        args: Vec::new(),
-        cwd: cwd.into(),
-        status: if exit_code.is_some() {
-            SharedProcessSnapshotStatus::Exited
-        } else {
-            process_status_from_kernel(info.status)
-        },
-        exit_code: exit_code.or(info.exit_code),
-    }
-}
-
-pub fn protocol_process_snapshot_entry(entry: SharedProcessSnapshotEntry) -> ProcessSnapshotEntry {
-    ProcessSnapshotEntry {
-        process_id: entry.process_id,
-        pid: entry.pid,
-        ppid: entry.ppid,
-        pgid: entry.pgid,
-        sid: entry.sid,
-        driver: entry.driver,
-        command: entry.command,
-        args: entry.args,
-        cwd: entry.cwd,
-        status: match entry.status {
-            SharedProcessSnapshotStatus::Running => ProcessSnapshotStatus::Running,
-            SharedProcessSnapshotStatus::Stopped => ProcessSnapshotStatus::Stopped,
-            SharedProcessSnapshotStatus::Exited => ProcessSnapshotStatus::Exited,
-        },
-        exit_code: entry.exit_code,
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use secure_exec_kernel::user::ProcessIdentity;
-
-    fn process_info(status: ProcessStatus, exit_code: Option<i32>) -> ProcessInfo {
-        ProcessInfo {
-            pid: 42,
-            ppid: 1,
-            pgid: 42,
-            sid: 42,
-            driver: "javascript".to_owned(),
-            command: "node".to_owned(),
-            status,
-            exit_code,
-            identity: ProcessIdentity::default(),
-        }
-    }
-
-    #[test]
-    fn maps_kernel_process_statuses() {
-        assert_eq!(
-            process_status_from_kernel(ProcessStatus::Running),
-            SharedProcessSnapshotStatus::Running
-        );
-        assert_eq!(
-            process_status_from_kernel(ProcessStatus::Stopped),
-            SharedProcessSnapshotStatus::Stopped
-        );
-        assert_eq!(
-            process_status_from_kernel(ProcessStatus::Exited),
-            SharedProcessSnapshotStatus::Exited
-        );
-    }
-
-    #[test]
-    fn builds_process_snapshot_from_kernel_info() {
-        let entry = process_snapshot_entry_from_kernel(
-            "exec-1",
-            &process_info(ProcessStatus::Running, None),
-            "/workspace",
-            None,
-        );
-
-        assert_eq!(entry.process_id, "exec-1");
-        assert_eq!(entry.pid, 42);
-        assert_eq!(entry.ppid, 1);
-        assert_eq!(entry.pgid, 42);
-        assert_eq!(entry.sid, 42);
-        assert_eq!(entry.driver, "javascript");
-        assert_eq!(entry.command, "node");
-        assert_eq!(entry.args, Vec::<String>::new());
-        assert_eq!(entry.cwd, "/workspace");
-        assert_eq!(entry.status, SharedProcessSnapshotStatus::Running);
-        assert_eq!(entry.exit_code, None);
-    }
-
-    #[test]
-    fn explicit_exit_code_marks_snapshot_exited() {
-        let entry = process_snapshot_entry_from_kernel(
-            "exec-1",
-            &process_info(ProcessStatus::Running, Some(9)),
-            "/workspace",
-            Some(7),
-        );
-
-        assert_eq!(entry.status, SharedProcessSnapshotStatus::Exited);
-        assert_eq!(entry.exit_code, Some(7));
-    }
-
-    #[test]
-    fn maps_shared_process_snapshot_to_protocol_entry() {
-        let entry = protocol_process_snapshot_entry(SharedProcessSnapshotEntry {
-            process_id: String::from("proc-1"),
-            pid: 42,
-            ppid: 1,
-            pgid: 42,
-            sid: 42,
-            driver: String::from("javascript"),
-            command: String::from("node"),
-            args: vec![String::from("app.js")],
-            cwd: String::from("/workspace"),
-            status: SharedProcessSnapshotStatus::Stopped,
-            exit_code: None,
-        });
-
-        assert_eq!(entry.process_id, "proc-1");
-        assert_eq!(entry.pid, 42);
-        assert_eq!(entry.args, vec![String::from("app.js")]);
-        assert_eq!(entry.cwd, "/workspace");
-        assert_eq!(entry.status, ProcessSnapshotStatus::Stopped);
-        assert_eq!(entry.exit_code, None);
-    }
-}
diff --git a/crates/sidecar-core/src/frames.rs b/crates/sidecar-core/src/frames.rs
deleted file mode 100644
index 66b5d55f1..000000000
--- a/crates/sidecar-core/src/frames.rs
+++ /dev/null
@@ -1,693 +0,0 @@
-use secure_exec_sidecar_protocol::protocol::{
-    AgentosProjectedAgent, AuthenticateRequest, AuthenticatedResponse, BoundUdpSnapshotResponse,
-    EventFrame, EventPayload, LayerCreatedResponse, LayerSealedResponse, ListenerSnapshotResponse,
-    OverlayCreatedResponse, OwnershipScope, PackageCommands, PackageLinkedResponse,
-    ProcessExitedEvent, ProcessKilledResponse, ProcessOutputEvent, ProcessSnapshotEntry,
-    ProcessSnapshotResponse, ProcessStartedResponse, ProjectedCommand, ProtocolSchema,
-    ProvidedCommandsResponse, RejectedResponse, RequestFrame, RequestId, ResponseFrame,
-    ResponsePayload, RootFilesystemBootstrappedResponse, RootFilesystemEntry,
-    RootFilesystemSnapshotResponse, SessionOpenedResponse, SignalHandlerRegistration,
-    SignalStateResponse, SnapshotExportedResponse, SnapshotImportedResponse, SocketStateEntry,
-    StdinClosedResponse, StdinWrittenResponse, StreamChannel, StructuredEvent,
-    VmConfiguredResponse, VmCreatedResponse, VmDisposedResponse, VmLifecycleEvent,
-    VmLifecycleState, ZombieTimerCountResponse, PROTOCOL_VERSION,
-};
-use std::collections::HashMap;
-
-pub const UNSUPPORTED_GUEST_KERNEL_CALL_EVENT: &str = "guest.kernel_call.unsupported";
-
-#[derive(Debug, Clone)]
-pub struct DispatchResult {
-    pub response: ResponseFrame,
-    pub events: Vec<EventFrame>,
-}
-
-pub fn response_with_ownership(
-    request_id: RequestId,
-    ownership: OwnershipScope,
-    payload: ResponsePayload,
-) -> ResponseFrame {
-    ResponseFrame {
-        schema: ProtocolSchema::current(),
-        request_id,
-        ownership,
-        payload,
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum AuthenticateVersionError {
-    ProtocolVersionMismatch(String),
-    BridgeVersionMismatch(String),
-}
-
-impl AuthenticateVersionError {
-    pub fn code(&self) -> &'static str {
-        match self {
-            Self::ProtocolVersionMismatch(_) => "protocol_version_mismatch",
-            Self::BridgeVersionMismatch(_) => "bridge_version_mismatch",
-        }
-    }
-
-    pub fn message(&self) -> &str {
-        match self {
-            Self::ProtocolVersionMismatch(message) | Self::BridgeVersionMismatch(message) => {
-                message
-            }
-        }
-    }
-}
-
-pub fn validate_authenticate_versions(
-    payload: &AuthenticateRequest,
-) -> Result<(), AuthenticateVersionError> {
-    if payload.protocol_version != PROTOCOL_VERSION {
-        return Err(AuthenticateVersionError::ProtocolVersionMismatch(format!(
-            "sidecar protocol version mismatch: expected {}, got {}",
-            PROTOCOL_VERSION, payload.protocol_version
-        )));
-    }
-
-    let expected_bridge_version = secure_exec_bridge::bridge_contract().version;
-    if payload.bridge_version != expected_bridge_version {
-        return Err(AuthenticateVersionError::BridgeVersionMismatch(format!(
-            "bridge contract version mismatch: expected {expected_bridge_version}, got {}",
-            payload.bridge_version
-        )));
-    }
-
-    Ok(())
-}
-
-pub fn authenticated_response(
-    request_id: RequestId,
-    sidecar_id: impl Into<String>,
-    connection_id: String,
-    max_frame_bytes: u32,
-) -> ResponseFrame {
-    response_with_ownership(
-        request_id,
-        OwnershipScope::connection(&connection_id),
-        ResponsePayload::Authenticated(AuthenticatedResponse {
-            sidecar_id: sidecar_id.into(),
-            connection_id,
-            max_frame_bytes,
-        }),
-    )
-}
-
-pub fn session_opened_response(
-    request_id: RequestId,
-    owner_connection_id: String,
-    session_id: String,
-) -> ResponseFrame {
-    response_with_ownership(
-        request_id,
-        OwnershipScope::session(&owner_connection_id, &session_id),
-        ResponsePayload::SessionOpened(SessionOpenedResponse {
-            session_id,
-            owner_connection_id,
-        }),
-    )
-}
-
-pub fn respond(request: &RequestFrame, payload: ResponsePayload) -> ResponseFrame {
-    response_with_ownership(request.request_id, request.ownership.clone(), payload)
-}
-
-pub fn reject(request: &RequestFrame, code: &str, message: &str) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::Rejected(RejectedResponse {
-            code: code.to_owned(),
-            message: message.to_owned(),
-        }),
-    )
-}
-
-pub fn vm_created_response(request: &RequestFrame, vm_id: String) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::VmCreated(VmCreatedResponse { vm_id }),
-    )
-}
-
-pub fn vm_disposed_response(request: &RequestFrame, vm_id: String) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::VmDisposed(VmDisposedResponse { vm_id }),
-    )
-}
-
-pub fn root_filesystem_bootstrapped_response(
-    request: &RequestFrame,
-    entry_count: u32,
-) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::RootFilesystemBootstrapped(RootFilesystemBootstrappedResponse {
-            entry_count,
-        }),
-    )
-}
-
-pub fn vm_configured_response(
-    request: &RequestFrame,
-    applied_mounts: u32,
-    applied_software: u32,
-    projected_commands: Vec<ProjectedCommand>,
-    agents: Vec<AgentosProjectedAgent>,
-) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::VmConfigured(VmConfiguredResponse {
-            applied_mounts,
-            applied_software,
-            projected_commands,
-            agents,
-        }),
-    )
-}
-
-pub fn package_linked_response(
-    request: &RequestFrame,
-    projected_commands: Vec<ProjectedCommand>,
-    agents: Vec<AgentosProjectedAgent>,
-) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::PackageLinked(PackageLinkedResponse {
-            projected_commands,
-            agents,
-        }),
-    )
-}
-
-pub fn provided_commands_response(
-    request: &RequestFrame,
-    packages: Vec<PackageCommands>,
-) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::ProvidedCommands(ProvidedCommandsResponse { packages }),
-    )
-}
-
-pub fn layer_created_response(request: &RequestFrame, layer_id: String) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::LayerCreated(LayerCreatedResponse { layer_id }),
-    )
-}
-
-pub fn layer_sealed_response(request: &RequestFrame, layer_id: String) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::LayerSealed(LayerSealedResponse { layer_id }),
-    )
-}
-
-pub fn snapshot_imported_response(request: &RequestFrame, layer_id: String) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::SnapshotImported(SnapshotImportedResponse { layer_id }),
-    )
-}
-
-pub fn snapshot_exported_response(
-    request: &RequestFrame,
-    layer_id: String,
-    entries: Vec<RootFilesystemEntry>,
-) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::SnapshotExported(SnapshotExportedResponse { layer_id, entries }),
-    )
-}
-
-pub fn overlay_created_response(request: &RequestFrame, layer_id: String) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::OverlayCreated(OverlayCreatedResponse { layer_id }),
-    )
-}
-
-pub fn root_filesystem_snapshot_response(
-    request: &RequestFrame,
-    entries: Vec<RootFilesystemEntry>,
-) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::RootFilesystemSnapshot(RootFilesystemSnapshotResponse { entries }),
-    )
-}
-
-pub fn process_started_response(
-    request: &RequestFrame,
-    process_id: String,
-    pid: Option<u32>,
-) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::ProcessStarted(ProcessStartedResponse { process_id, pid }),
-    )
-}
-
-pub fn stdin_written_response(
-    request: &RequestFrame,
-    process_id: String,
-    accepted_bytes: u64,
-) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::StdinWritten(StdinWrittenResponse {
-            process_id,
-            accepted_bytes,
-        }),
-    )
-}
-
-pub fn stdin_closed_response(request: &RequestFrame, process_id: String) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::StdinClosed(StdinClosedResponse { process_id }),
-    )
-}
-
-pub fn process_killed_response(request: &RequestFrame, process_id: String) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::ProcessKilled(ProcessKilledResponse { process_id }),
-    )
-}
-
-pub fn process_snapshot_response(
-    request: &RequestFrame,
-    processes: Vec<ProcessSnapshotEntry>,
-) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::ProcessSnapshot(ProcessSnapshotResponse { processes }),
-    )
-}
-
-pub fn listener_snapshot_response(
-    request: &RequestFrame,
-    listener: Option<SocketStateEntry>,
-) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::ListenerSnapshot(ListenerSnapshotResponse { listener }),
-    )
-}
-
-pub fn bound_udp_snapshot_response(
-    request: &RequestFrame,
-    socket: Option<SocketStateEntry>,
-) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::BoundUdpSnapshot(BoundUdpSnapshotResponse { socket }),
-    )
-}
-
-pub fn signal_state_response(
-    request: &RequestFrame,
-    process_id: String,
-    handlers: impl IntoIterator<Item = (u32, SignalHandlerRegistration)>,
-) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::SignalState(SignalStateResponse {
-            process_id,
-            handlers: handlers.into_iter().collect(),
-        }),
-    )
-}
-
-pub fn zombie_timer_count_response(request: &RequestFrame, count: u64) -> ResponseFrame {
-    respond(
-        request,
-        ResponsePayload::ZombieTimerCount(ZombieTimerCountResponse { count }),
-    )
-}
-
-pub fn event(ownership: OwnershipScope, payload: EventPayload) -> EventFrame {
-    EventFrame::new(ownership, payload)
-}
-
-pub fn vm_lifecycle_event(
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    state: VmLifecycleState,
-) -> EventFrame {
-    event(
-        OwnershipScope::vm(connection_id, session_id, vm_id),
-        EventPayload::VmLifecycle(VmLifecycleEvent { state }),
-    )
-}
-
-pub fn process_output_event(
-    ownership: OwnershipScope,
-    process_id: &str,
-    channel: StreamChannel,
-    chunk: Vec<u8>,
-) -> EventFrame {
-    event(
-        ownership,
-        EventPayload::ProcessOutput(ProcessOutputEvent {
-            process_id: process_id.to_owned(),
-            channel,
-            chunk,
-        }),
-    )
-}
-
-pub fn process_exited_event(
-    ownership: OwnershipScope,
-    process_id: &str,
-    exit_code: i32,
-) -> EventFrame {
-    event(
-        ownership,
-        EventPayload::ProcessExited(ProcessExitedEvent {
-            process_id: process_id.to_owned(),
-            exit_code,
-        }),
-    )
-}
-
-pub fn unsupported_guest_kernel_call_event(
-    ownership: OwnershipScope,
-    process_id: &str,
-    execution_id: &str,
-    operation: &str,
-    payload_size_bytes: usize,
-) -> EventFrame {
-    event(
-        ownership,
-        EventPayload::Structured(StructuredEvent {
-            name: String::from(UNSUPPORTED_GUEST_KERNEL_CALL_EVENT),
-            detail: unsupported_guest_kernel_call_detail(
-                Some(process_id),
-                execution_id,
-                operation,
-                payload_size_bytes,
-            ),
-        }),
-    )
-}
-
-pub fn unsupported_guest_kernel_call_detail(
-    process_id: Option<&str>,
-    execution_id: &str,
-    operation: &str,
-    payload_size_bytes: usize,
-) -> HashMap<String, String> {
-    let mut detail = HashMap::from([
-        (String::from("execution_id"), execution_id.to_owned()),
-        (String::from("operation"), operation.to_owned()),
-        (
-            String::from("payload_size_bytes"),
-            payload_size_bytes.to_string(),
-        ),
-    ]);
-    if let Some(process_id) = process_id {
-        detail.insert(String::from("process_id"), process_id.to_owned());
-    }
-    detail
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use secure_exec_sidecar_protocol::protocol::RequestPayload;
-
-    fn authenticate_request() -> AuthenticateRequest {
-        AuthenticateRequest {
-            client_name: String::from("test"),
-            auth_token: String::from("token"),
-            protocol_version: secure_exec_sidecar_protocol::protocol::PROTOCOL_VERSION,
-            bridge_version: secure_exec_bridge::bridge_contract().version,
-        }
-    }
-
-    #[test]
-    fn reject_preserves_request_identity_and_ownership() {
-        let request = RequestFrame::new(
-            42,
-            OwnershipScope::connection("conn-1"),
-            RequestPayload::Authenticate(authenticate_request()),
-        );
-
-        let response = reject(&request, "bad_request", "nope");
-
-        assert_eq!(response.request_id, request.request_id);
-        assert_eq!(response.ownership, request.ownership);
-        match response.payload {
-            ResponsePayload::Rejected(rejected) => {
-                assert_eq!(rejected.code, "bad_request");
-                assert_eq!(rejected.message, "nope");
-            }
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-    }
-
-    #[test]
-    fn validates_authenticate_versions() {
-        validate_authenticate_versions(&authenticate_request()).expect("current versions");
-
-        let mut stale_protocol = authenticate_request();
-        stale_protocol.protocol_version = stale_protocol.protocol_version.saturating_sub(1);
-        let error = validate_authenticate_versions(&stale_protocol).expect_err("protocol mismatch");
-        assert_eq!(error.code(), "protocol_version_mismatch");
-        assert!(error
-            .message()
-            .contains("sidecar protocol version mismatch"));
-
-        let mut stale_bridge = authenticate_request();
-        stale_bridge.bridge_version = stale_bridge.bridge_version.saturating_sub(1);
-        let error = validate_authenticate_versions(&stale_bridge).expect_err("bridge mismatch");
-        assert_eq!(error.code(), "bridge_version_mismatch");
-        assert!(error.message().contains("bridge contract version mismatch"));
-    }
-
-    #[test]
-    fn authenticated_response_sets_connection_ownership() {
-        let response =
-            authenticated_response(7, "secure-exec-test", String::from("conn-test"), 1024);
-
-        assert_eq!(response.request_id, 7);
-        assert_eq!(response.ownership, OwnershipScope::connection("conn-test"));
-        match response.payload {
-            ResponsePayload::Authenticated(authenticated) => {
-                assert_eq!(authenticated.sidecar_id, "secure-exec-test");
-                assert_eq!(authenticated.connection_id, "conn-test");
-                assert_eq!(authenticated.max_frame_bytes, 1024);
-            }
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-    }
-
-    #[test]
-    fn session_opened_response_sets_session_ownership() {
-        let response =
-            session_opened_response(8, String::from("conn-1"), String::from("session-1"));
-
-        assert_eq!(response.request_id, 8);
-        assert_eq!(
-            response.ownership,
-            OwnershipScope::session("conn-1", "session-1")
-        );
-        match response.payload {
-            ResponsePayload::SessionOpened(opened) => {
-                assert_eq!(opened.owner_connection_id, "conn-1");
-                assert_eq!(opened.session_id, "session-1");
-            }
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-    }
-
-    #[test]
-    fn lifecycle_response_helpers_preserve_request_ownership() {
-        let request = RequestFrame::new(
-            43,
-            OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-            RequestPayload::Authenticate(authenticate_request()),
-        );
-
-        let created = vm_created_response(&request, String::from("vm-1"));
-        assert_eq!(created.request_id, request.request_id);
-        assert_eq!(created.ownership, request.ownership);
-        match created.payload {
-            ResponsePayload::VmCreated(created) => assert_eq!(created.vm_id, "vm-1"),
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-
-        let bootstrapped = root_filesystem_bootstrapped_response(&request, 3);
-        assert_eq!(bootstrapped.request_id, request.request_id);
-        assert_eq!(bootstrapped.ownership, request.ownership);
-        match bootstrapped.payload {
-            ResponsePayload::RootFilesystemBootstrapped(bootstrapped) => {
-                assert_eq!(bootstrapped.entry_count, 3);
-            }
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-
-        let disposed = vm_disposed_response(&request, String::from("vm-1"));
-        assert_eq!(disposed.request_id, request.request_id);
-        assert_eq!(disposed.ownership, request.ownership);
-        match disposed.payload {
-            ResponsePayload::VmDisposed(disposed) => assert_eq!(disposed.vm_id, "vm-1"),
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-    }
-
-    #[test]
-    fn process_started_response_preserves_pid() {
-        let request = RequestFrame::new(
-            44,
-            OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-            RequestPayload::Authenticate(authenticate_request()),
-        );
-
-        let started = process_started_response(&request, String::from("proc-1"), Some(123));
-        assert_eq!(started.request_id, request.request_id);
-        assert_eq!(started.ownership, request.ownership);
-        match started.payload {
-            ResponsePayload::ProcessStarted(started) => {
-                assert_eq!(started.process_id, "proc-1");
-                assert_eq!(started.pid, Some(123));
-            }
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-
-        let started_without_pid = process_started_response(&request, String::from("proc-2"), None);
-        match started_without_pid.payload {
-            ResponsePayload::ProcessStarted(started) => {
-                assert_eq!(started.process_id, "proc-2");
-                assert_eq!(started.pid, None);
-            }
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-    }
-
-    #[test]
-    fn shared_response_helpers_preserve_payloads() {
-        let request = RequestFrame::new(
-            45,
-            OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-            RequestPayload::Authenticate(authenticate_request()),
-        );
-
-        match vm_configured_response(&request, 2, 3, Vec::new()).payload {
-            ResponsePayload::VmConfigured(configured) => {
-                assert_eq!(configured.applied_mounts, 2);
-                assert_eq!(configured.applied_software, 3);
-                assert!(configured.projected_commands.is_empty());
-            }
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-
-        match snapshot_exported_response(&request, String::from("layer-1"), Vec::new()).payload {
-            ResponsePayload::SnapshotExported(exported) => {
-                assert_eq!(exported.layer_id, "layer-1");
-                assert!(exported.entries.is_empty());
-            }
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-
-        match stdin_written_response(&request, String::from("proc-1"), 9).payload {
-            ResponsePayload::StdinWritten(written) => {
-                assert_eq!(written.process_id, "proc-1");
-                assert_eq!(written.accepted_bytes, 9);
-            }
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-
-        match process_killed_response(&request, String::from("proc-1")).payload {
-            ResponsePayload::ProcessKilled(killed) => {
-                assert_eq!(killed.process_id, "proc-1");
-            }
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-
-        match signal_state_response(&request, String::from("proc-1"), []).payload {
-            ResponsePayload::SignalState(state) => {
-                assert_eq!(state.process_id, "proc-1");
-                assert!(state.handlers.is_empty());
-            }
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-
-        match zombie_timer_count_response(&request, 4).payload {
-            ResponsePayload::ZombieTimerCount(count) => assert_eq!(count.count, 4),
-            other => panic!("unexpected response payload: {other:?}"),
-        }
-    }
-
-    #[test]
-    fn process_event_helpers_build_vm_owned_events() {
-        let ownership = OwnershipScope::vm("conn-1", "session-1", "vm-1");
-
-        let output = process_output_event(
-            ownership.clone(),
-            "proc-1",
-            StreamChannel::Stdout,
-            b"hello".to_vec(),
-        );
-        assert_eq!(output.ownership, ownership);
-        match output.payload {
-            EventPayload::ProcessOutput(event) => {
-                assert_eq!(event.process_id, "proc-1");
-                assert_eq!(event.channel, StreamChannel::Stdout);
-                assert_eq!(event.chunk, b"hello");
-            }
-            other => panic!("unexpected event payload: {other:?}"),
-        }
-
-        let exited = process_exited_event(output.ownership, "proc-1", 7);
-        match exited.payload {
-            EventPayload::ProcessExited(event) => {
-                assert_eq!(event.process_id, "proc-1");
-                assert_eq!(event.exit_code, 7);
-            }
-            other => panic!("unexpected event payload: {other:?}"),
-        }
-    }
-
-    #[test]
-    fn unsupported_guest_kernel_call_event_preserves_execution_identity() {
-        let ownership = OwnershipScope::vm("conn-1", "session-1", "vm-1");
-        let event = unsupported_guest_kernel_call_event(
-            ownership.clone(),
-            "proc-1",
-            "exec-1",
-            "fs.read",
-            17,
-        );
-
-        assert_eq!(event.ownership, ownership);
-        match event.payload {
-            EventPayload::Structured(event) => {
-                assert_eq!(event.name, "guest.kernel_call.unsupported");
-                assert_eq!(event.detail["process_id"], "proc-1");
-                assert_eq!(event.detail["execution_id"], "exec-1");
-                assert_eq!(event.detail["operation"], "fs.read");
-                assert_eq!(event.detail["payload_size_bytes"], "17");
-            }
-            other => panic!("unexpected event payload: {other:?}"),
-        }
-    }
-
-    #[test]
-    fn unsupported_guest_kernel_call_detail_can_omit_process_identity() {
-        let detail = unsupported_guest_kernel_call_detail(None, "exec-1", "fs.read", 17);
-
-        assert_eq!(detail["execution_id"], "exec-1");
-        assert_eq!(detail["operation"], "fs.read");
-        assert_eq!(detail["payload_size_bytes"], "17");
-        assert!(!detail.contains_key("process_id"));
-    }
-}
diff --git a/crates/sidecar-core/src/guest_fs.rs b/crates/sidecar-core/src/guest_fs.rs
deleted file mode 100644
index 2e2603658..000000000
--- a/crates/sidecar-core/src/guest_fs.rs
+++ /dev/null
@@ -1,556 +0,0 @@
-use crate::SidecarCoreError;
-use base64::Engine;
-use secure_exec_kernel::kernel::KernelVm;
-use secure_exec_kernel::vfs::{VirtualFileSystem, VirtualStat};
-use secure_exec_sidecar_protocol::protocol::{
-    GuestDirEntry, GuestFilesystemCallRequest, GuestFilesystemOperation,
-    GuestFilesystemResultResponse, GuestFilesystemStat, RootFilesystemEntryEncoding,
-};
-
-pub fn handle_guest_filesystem_call<F>(
-    kernel: &mut KernelVm<F>,
-    payload: GuestFilesystemCallRequest,
-) -> Result<GuestFilesystemResultResponse, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let response = match payload.operation {
-        GuestFilesystemOperation::ReadFile => {
-            let bytes = kernel.read_file(&payload.path).map_err(kernel_error)?;
-            let (content, encoding) = encode_guest_filesystem_content(bytes);
-            GuestFilesystemResultResponse {
-                operation: payload.operation,
-                path: payload.path,
-                content: Some(content),
-                encoding: Some(encoding),
-                entries: None,
-                stat: None,
-                exists: None,
-                target: None,
-            }
-        }
-        GuestFilesystemOperation::Pread => {
-            let offset = payload
-                .offset
-                .ok_or_else(|| SidecarCoreError::new("guest filesystem pread requires offset"))?;
-            let len = payload
-                .len
-                .ok_or_else(|| SidecarCoreError::new("guest filesystem pread requires len"))?;
-            let length = usize::try_from(len).map_err(|_| {
-                SidecarCoreError::new("guest filesystem pread len must fit within usize")
-            })?;
-            let bytes = kernel
-                .pread_file(&payload.path, offset, length)
-                .map_err(kernel_error)?;
-            let (content, encoding) = encode_guest_filesystem_content(bytes);
-            GuestFilesystemResultResponse {
-                operation: payload.operation,
-                path: payload.path,
-                content: Some(content),
-                encoding: Some(encoding),
-                entries: None,
-                stat: None,
-                exists: None,
-                target: None,
-            }
-        }
-        GuestFilesystemOperation::WriteFile => {
-            let bytes = decode_guest_filesystem_content(
-                &payload.path,
-                payload.content.as_deref(),
-                payload.encoding,
-            )?;
-            kernel
-                .write_file(&payload.path, bytes)
-                .map_err(kernel_error)?;
-            empty_guest_filesystem_response(payload.operation, payload.path)
-        }
-        GuestFilesystemOperation::Pwrite => {
-            let offset = payload
-                .offset
-                .ok_or_else(|| SidecarCoreError::new("guest filesystem pwrite requires offset"))?;
-            let bytes = decode_guest_filesystem_content(
-                &payload.path,
-                payload.content.as_deref(),
-                payload.encoding,
-            )?;
-            kernel
-                .pwrite_file(&payload.path, offset, bytes)
-                .map_err(kernel_error)?;
-            empty_guest_filesystem_response(payload.operation, payload.path)
-        }
-        GuestFilesystemOperation::CreateDir => {
-            kernel.create_dir(&payload.path).map_err(kernel_error)?;
-            empty_guest_filesystem_response(payload.operation, payload.path)
-        }
-        GuestFilesystemOperation::Mkdir => {
-            kernel
-                .mkdir(&payload.path, payload.recursive)
-                .map_err(kernel_error)?;
-            empty_guest_filesystem_response(payload.operation, payload.path)
-        }
-        GuestFilesystemOperation::Exists => GuestFilesystemResultResponse {
-            operation: payload.operation,
-            path: payload.path.clone(),
-            content: None,
-            encoding: None,
-            entries: None,
-            stat: None,
-            exists: Some(kernel.exists(&payload.path).map_err(kernel_error)?),
-            target: None,
-        },
-        GuestFilesystemOperation::Stat => GuestFilesystemResultResponse {
-            operation: payload.operation,
-            path: payload.path.clone(),
-            content: None,
-            encoding: None,
-            entries: None,
-            stat: Some(guest_filesystem_stat(
-                kernel.stat(&payload.path).map_err(kernel_error)?,
-            )),
-            exists: None,
-            target: None,
-        },
-        GuestFilesystemOperation::Lstat => GuestFilesystemResultResponse {
-            operation: payload.operation,
-            path: payload.path.clone(),
-            content: None,
-            encoding: None,
-            entries: None,
-            stat: Some(guest_filesystem_stat(
-                kernel.lstat(&payload.path).map_err(kernel_error)?,
-            )),
-            exists: None,
-            target: None,
-        },
-        GuestFilesystemOperation::ReadDir => GuestFilesystemResultResponse {
-            operation: payload.operation,
-            path: payload.path.clone(),
-            content: None,
-            encoding: None,
-            entries: Some(
-                kernel
-                    .read_dir_with_types(&payload.path)
-                    .map_err(kernel_error)?
-                    .into_iter()
-                    .map(|entry| GuestDirEntry {
-                        path: if payload.path == "/" {
-                            format!("/{}", entry.name)
-                        } else {
-                            format!("{}/{}", payload.path, entry.name)
-                        },
-                        name: entry.name,
-                        is_directory: entry.is_directory,
-                        is_symbolic_link: entry.is_symbolic_link,
-                        size: 0,
-                    })
-                    .collect(),
-            ),
-            stat: None,
-            exists: None,
-            target: None,
-        },
-        GuestFilesystemOperation::ReadDirRecursive => {
-            let max_depth = payload
-                .max_depth
-                .map(|depth| {
-                    usize::try_from(depth).map_err(|_| {
-                        SidecarCoreError::new(
-                            "guest filesystem read_dir_recursive max_depth must fit within usize",
-                        )
-                    })
-                })
-                .transpose()?;
-            GuestFilesystemResultResponse {
-                operation: payload.operation,
-                path: payload.path.clone(),
-                content: None,
-                encoding: None,
-                entries: Some(
-                    kernel
-                        .read_dir_recursive(&payload.path, max_depth)
-                        .map_err(kernel_error)?
-                        .into_iter()
-                        .map(|entry| GuestDirEntry {
-                            name: entry
-                                .path
-                                .rsplit('/')
-                                .next()
-                                .unwrap_or(entry.path.as_str())
-                                .to_owned(),
-                            path: entry.path,
-                            is_directory: entry.is_directory,
-                            is_symbolic_link: entry.is_symbolic_link,
-                            size: entry.size,
-                        })
-                        .collect(),
-                ),
-                stat: None,
-                exists: None,
-                target: None,
-            }
-        }
-        GuestFilesystemOperation::RemoveFile => {
-            kernel.remove_file(&payload.path).map_err(kernel_error)?;
-            empty_guest_filesystem_response(payload.operation, payload.path)
-        }
-        GuestFilesystemOperation::RemoveDir => {
-            kernel.remove_dir(&payload.path).map_err(kernel_error)?;
-            empty_guest_filesystem_response(payload.operation, payload.path)
-        }
-        GuestFilesystemOperation::Remove => {
-            kernel
-                .remove_path(&payload.path, payload.recursive)
-                .map_err(kernel_error)?;
-            empty_guest_filesystem_response(payload.operation, payload.path)
-        }
-        GuestFilesystemOperation::Copy => {
-            let destination = payload.destination_path.ok_or_else(|| {
-                SidecarCoreError::new("guest filesystem copy requires a destination_path")
-            })?;
-            kernel
-                .copy_path(&payload.path, &destination, payload.recursive)
-                .map_err(kernel_error)?;
-            targeted_guest_filesystem_response(payload.operation, payload.path, destination)
-        }
-        GuestFilesystemOperation::Move => {
-            let destination = payload.destination_path.ok_or_else(|| {
-                SidecarCoreError::new("guest filesystem move requires a destination_path")
-            })?;
-            kernel
-                .move_path(&payload.path, &destination)
-                .map_err(kernel_error)?;
-            targeted_guest_filesystem_response(payload.operation, payload.path, destination)
-        }
-        GuestFilesystemOperation::Rename => {
-            let destination = payload.destination_path.ok_or_else(|| {
-                SidecarCoreError::new("guest filesystem rename requires a destination_path")
-            })?;
-            kernel
-                .rename(&payload.path, &destination)
-                .map_err(kernel_error)?;
-            targeted_guest_filesystem_response(payload.operation, payload.path, destination)
-        }
-        GuestFilesystemOperation::Realpath => targeted_guest_filesystem_response(
-            payload.operation,
-            payload.path.clone(),
-            kernel.realpath(&payload.path).map_err(kernel_error)?,
-        ),
-        GuestFilesystemOperation::Symlink => {
-            let target = payload.target.ok_or_else(|| {
-                SidecarCoreError::new("guest filesystem symlink requires a target")
-            })?;
-            kernel
-                .symlink(&target, &payload.path)
-                .map_err(kernel_error)?;
-            targeted_guest_filesystem_response(payload.operation, payload.path, target)
-        }
-        GuestFilesystemOperation::ReadLink => targeted_guest_filesystem_response(
-            payload.operation,
-            payload.path.clone(),
-            kernel.read_link(&payload.path).map_err(kernel_error)?,
-        ),
-        GuestFilesystemOperation::Link => {
-            let destination = payload.destination_path.ok_or_else(|| {
-                SidecarCoreError::new("guest filesystem link requires a destination_path")
-            })?;
-            kernel
-                .link(&payload.path, &destination)
-                .map_err(kernel_error)?;
-            targeted_guest_filesystem_response(payload.operation, payload.path, destination)
-        }
-        GuestFilesystemOperation::Chmod => {
-            let mode = payload
-                .mode
-                .ok_or_else(|| SidecarCoreError::new("guest filesystem chmod requires a mode"))?;
-            kernel.chmod(&payload.path, mode).map_err(kernel_error)?;
-            empty_guest_filesystem_response(payload.operation, payload.path)
-        }
-        GuestFilesystemOperation::Chown => {
-            let uid = payload
-                .uid
-                .ok_or_else(|| SidecarCoreError::new("guest filesystem chown requires a uid"))?;
-            let gid = payload
-                .gid
-                .ok_or_else(|| SidecarCoreError::new("guest filesystem chown requires a gid"))?;
-            kernel
-                .chown(&payload.path, uid, gid)
-                .map_err(kernel_error)?;
-            empty_guest_filesystem_response(payload.operation, payload.path)
-        }
-        GuestFilesystemOperation::Utimes => {
-            let atime_ms = payload.atime_ms.ok_or_else(|| {
-                SidecarCoreError::new("guest filesystem utimes requires atime_ms")
-            })?;
-            let mtime_ms = payload.mtime_ms.ok_or_else(|| {
-                SidecarCoreError::new("guest filesystem utimes requires mtime_ms")
-            })?;
-            kernel
-                .utimes(&payload.path, atime_ms, mtime_ms)
-                .map_err(kernel_error)?;
-            empty_guest_filesystem_response(payload.operation, payload.path)
-        }
-        GuestFilesystemOperation::Truncate => {
-            let len = payload
-                .len
-                .ok_or_else(|| SidecarCoreError::new("guest filesystem truncate requires len"))?;
-            kernel.truncate(&payload.path, len).map_err(kernel_error)?;
-            empty_guest_filesystem_response(payload.operation, payload.path)
-        }
-    };
-
-    Ok(response)
-}
-
-pub fn empty_guest_filesystem_response(
-    operation: GuestFilesystemOperation,
-    path: String,
-) -> GuestFilesystemResultResponse {
-    GuestFilesystemResultResponse {
-        operation,
-        path,
-        content: None,
-        encoding: None,
-        entries: None,
-        stat: None,
-        exists: None,
-        target: None,
-    }
-}
-
-pub fn targeted_guest_filesystem_response(
-    operation: GuestFilesystemOperation,
-    path: String,
-    target: String,
-) -> GuestFilesystemResultResponse {
-    GuestFilesystemResultResponse {
-        target: Some(target),
-        ..empty_guest_filesystem_response(operation, path)
-    }
-}
-
-pub fn encode_guest_filesystem_content(content: Vec<u8>) -> (String, RootFilesystemEntryEncoding) {
-    match String::from_utf8(content) {
-        Ok(text) => (text, RootFilesystemEntryEncoding::Utf8),
-        Err(error) => (
-            base64::engine::general_purpose::STANDARD.encode(error.into_bytes()),
-            RootFilesystemEntryEncoding::Base64,
-        ),
-    }
-}
-
-pub fn decode_guest_filesystem_content(
-    path: &str,
-    content: Option<&str>,
-    encoding: Option<RootFilesystemEntryEncoding>,
-) -> Result<Vec<u8>, SidecarCoreError> {
-    let content = content.ok_or_else(|| {
-        SidecarCoreError::new(format!(
-            "guest filesystem write_file for {path} requires content"
-        ))
-    })?;
-
-    match encoding.unwrap_or(RootFilesystemEntryEncoding::Utf8) {
-        RootFilesystemEntryEncoding::Utf8 => Ok(content.as_bytes().to_vec()),
-        RootFilesystemEntryEncoding::Base64 => base64::engine::general_purpose::STANDARD
-            .decode(content)
-            .map_err(|error| {
-                SidecarCoreError::new(format!(
-                    "invalid base64 guest filesystem content for {path}: {error}"
-                ))
-            }),
-    }
-}
-
-pub fn guest_filesystem_stat(stat: VirtualStat) -> GuestFilesystemStat {
-    GuestFilesystemStat {
-        mode: stat.mode,
-        size: stat.size,
-        blocks: stat.blocks,
-        dev: stat.dev,
-        rdev: stat.rdev,
-        is_directory: stat.is_directory,
-        is_symbolic_link: stat.is_symbolic_link,
-        atime_ms: stat.atime_ms,
-        mtime_ms: stat.mtime_ms,
-        ctime_ms: stat.ctime_ms,
-        birthtime_ms: stat.birthtime_ms,
-        ino: stat.ino,
-        nlink: stat.nlink,
-        uid: stat.uid,
-        gid: stat.gid,
-    }
-}
-
-fn kernel_error(error: secure_exec_kernel::kernel::KernelError) -> SidecarCoreError {
-    SidecarCoreError::new(error.to_string())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig};
-    use secure_exec_kernel::permissions::Permissions;
-    use secure_exec_kernel::vfs::MemoryFileSystem;
-
-    fn test_kernel() -> KernelVm<MemoryFileSystem> {
-        let mut config = KernelVmConfig::new("guest-fs-test");
-        config.permissions = Permissions::allow_all();
-        KernelVm::new(MemoryFileSystem::new(), config)
-    }
-
-    fn request(operation: GuestFilesystemOperation, path: &str) -> GuestFilesystemCallRequest {
-        GuestFilesystemCallRequest {
-            operation,
-            path: path.to_string(),
-            destination_path: None,
-            target: None,
-            content: None,
-            encoding: None,
-            recursive: false,
-            max_depth: None,
-            mode: None,
-            uid: None,
-            gid: None,
-            atime_ms: None,
-            mtime_ms: None,
-            len: None,
-            offset: None,
-        }
-    }
-
-    #[test]
-    fn handles_kernel_backed_guest_filesystem_round_trip() {
-        let mut kernel = test_kernel();
-        let mut mkdir = request(GuestFilesystemOperation::Mkdir, "/tmp");
-        mkdir.recursive = true;
-        handle_guest_filesystem_call(&mut kernel, mkdir).unwrap();
-
-        let mut write = request(GuestFilesystemOperation::WriteFile, "/tmp/blob.bin");
-        write.content = Some(String::from("//4A"));
-        write.encoding = Some(RootFilesystemEntryEncoding::Base64);
-        handle_guest_filesystem_call(&mut kernel, write).unwrap();
-
-        let read = handle_guest_filesystem_call(
-            &mut kernel,
-            request(GuestFilesystemOperation::ReadFile, "/tmp/blob.bin"),
-        )
-        .unwrap();
-        assert_eq!(read.content.as_deref(), Some("//4A"));
-        assert_eq!(read.encoding, Some(RootFilesystemEntryEncoding::Base64));
-
-        let stat = handle_guest_filesystem_call(
-            &mut kernel,
-            request(GuestFilesystemOperation::Stat, "/tmp/blob.bin"),
-        )
-        .unwrap();
-        let stat = stat.stat.expect("stat response");
-        assert_eq!(stat.size, 3);
-        assert!(!stat.is_directory);
-    }
-
-    #[test]
-    fn reports_required_guest_filesystem_fields() {
-        let mut kernel = test_kernel();
-        let error = handle_guest_filesystem_call(
-            &mut kernel,
-            request(GuestFilesystemOperation::Pread, "/missing"),
-        )
-        .unwrap_err();
-        assert_eq!(error.to_string(), "guest filesystem pread requires offset");
-
-        let error = handle_guest_filesystem_call(
-            &mut kernel,
-            request(GuestFilesystemOperation::Pwrite, "/missing"),
-        )
-        .unwrap_err();
-        assert_eq!(error.to_string(), "guest filesystem pwrite requires offset");
-    }
-
-    #[test]
-    fn pwrite_overwrites_in_place_without_truncating_the_file() {
-        let mut kernel = test_kernel();
-        let mut write = request(GuestFilesystemOperation::WriteFile, "/seek.txt");
-        write.content = Some(String::from("abcd"));
-        write.encoding = Some(RootFilesystemEntryEncoding::Utf8);
-        handle_guest_filesystem_call(&mut kernel, write).unwrap();
-
-        // Overwrite "cd" with "XY" at offset 2; the rest of the file ("ab")
-        // must survive. The lossy client-side read-modify-write this replaces
-        // would have discarded "ab" whenever the readback failed.
-        let mut pwrite = request(GuestFilesystemOperation::Pwrite, "/seek.txt");
-        pwrite.content = Some(String::from("XY"));
-        pwrite.encoding = Some(RootFilesystemEntryEncoding::Utf8);
-        pwrite.offset = Some(2);
-        handle_guest_filesystem_call(&mut kernel, pwrite).unwrap();
-
-        let read = handle_guest_filesystem_call(
-            &mut kernel,
-            request(GuestFilesystemOperation::ReadFile, "/seek.txt"),
-        )
-        .unwrap();
-        assert_eq!(read.content.as_deref(), Some("abXY"));
-    }
-
-    #[test]
-    fn pwrite_past_end_grows_and_zero_fills_the_hole() {
-        let mut kernel = test_kernel();
-        let mut write = request(GuestFilesystemOperation::WriteFile, "/hole.bin");
-        write.content = Some(String::from("ab"));
-        write.encoding = Some(RootFilesystemEntryEncoding::Utf8);
-        handle_guest_filesystem_call(&mut kernel, write).unwrap();
-
-        let mut pwrite = request(GuestFilesystemOperation::Pwrite, "/hole.bin");
-        pwrite.content = Some(String::from("Z"));
-        pwrite.encoding = Some(RootFilesystemEntryEncoding::Utf8);
-        pwrite.offset = Some(4);
-        handle_guest_filesystem_call(&mut kernel, pwrite).unwrap();
-
-        let read = handle_guest_filesystem_call(
-            &mut kernel,
-            request(GuestFilesystemOperation::ReadFile, "/hole.bin"),
-        )
-        .unwrap();
-        // "ab" + zero-fill(2) + "Z" -> bytes [97,98,0,0,90].
-        let decoded =
-            decode_guest_filesystem_content("/hole.bin", read.content.as_deref(), read.encoding)
-                .unwrap();
-        assert_eq!(decoded, vec![97u8, 98, 0, 0, 90]);
-    }
-
-    #[test]
-    fn read_dir_returns_typed_entries_in_one_call() {
-        let mut kernel = test_kernel();
-        let mut mkdir = request(GuestFilesystemOperation::Mkdir, "/d");
-        mkdir.recursive = true;
-        handle_guest_filesystem_call(&mut kernel, mkdir).unwrap();
-        let mut subdir = request(GuestFilesystemOperation::Mkdir, "/d/sub");
-        subdir.recursive = true;
-        handle_guest_filesystem_call(&mut kernel, subdir).unwrap();
-        let mut write = request(GuestFilesystemOperation::WriteFile, "/d/file.txt");
-        write.content = Some(String::from("hi"));
-        write.encoding = Some(RootFilesystemEntryEncoding::Utf8);
-        handle_guest_filesystem_call(&mut kernel, write).unwrap();
-        let mut link = request(GuestFilesystemOperation::Symlink, "/d/link");
-        link.target = Some(String::from("file.txt"));
-        handle_guest_filesystem_call(&mut kernel, link).unwrap();
-
-        // One ReadDir carries every child's type; no per-entry lstat needed.
-        let result = handle_guest_filesystem_call(
-            &mut kernel,
-            request(GuestFilesystemOperation::ReadDir, "/d"),
-        )
-        .unwrap();
-        let entries = result.entries.expect("entries");
-        assert_eq!(entries.len(), 3);
-        let by = |name: &str| {
-            entries
-                .iter()
-                .find(|entry| entry.name == name)
-                .unwrap_or_else(|| panic!("missing {name}"))
-        };
-        assert!(by("sub").is_directory && !by("sub").is_symbolic_link);
-        assert!(!by("file.txt").is_directory && !by("file.txt").is_symbolic_link);
-        assert!(by("link").is_symbolic_link);
-    }
-}
diff --git a/crates/sidecar-core/src/guest_net.rs b/crates/sidecar-core/src/guest_net.rs
deleted file mode 100644
index 87177b224..000000000
--- a/crates/sidecar-core/src/guest_net.rs
+++ /dev/null
@@ -1,875 +0,0 @@
-//! Shared synchronous guest kernel-call dispatcher.
-//!
-//! Guest networking, and (later) spawn/WASI, syscalls flow through a single
-//! generic synchronous wire payload (`GuestKernelCallRequest` ->
-//! `GuestKernelResultResponse`) carrying an `operation` string plus a JSON
-//! `payload`, mirroring the native `service_javascript_sync_rpc` design. This
-//! module is the backend-agnostic dispatcher that decodes the operation and
-//! routes it into the kernel, exactly as `guest_fs::handle_guest_filesystem_call`
-//! does for the filesystem family. It is unit-tested without an executor.
-
-use crate::SidecarCoreError;
-use base64::Engine;
-use secure_exec_kernel::dns::DnsLookupPolicy;
-use secure_exec_kernel::kernel::{KernelError, KernelVm};
-use secure_exec_kernel::poll::{
-    PollEvents, PollTargetEntry, POLLERR, POLLHUP, POLLIN, POLLNVAL, POLLOUT,
-};
-use secure_exec_kernel::socket_table::{InetSocketAddress, SocketId, SocketShutdown, SocketSpec};
-use secure_exec_kernel::vfs::VirtualFileSystem;
-use serde_json::{json, Value};
-
-const DEFAULT_LOOPBACK_HOST: &str = "127.0.0.1";
-const DEFAULT_LISTEN_BACKLOG: usize = 128;
-const DEFAULT_READ_MAX_BYTES: usize = 64 * 1024;
-/// Guest `net.poll` waits run on the sidecar's synchronous request path, so the
-/// caller-requested timeout is clamped to a small ceiling: the executor blocks
-/// on its own sync-bridge and re-polls rather than parking the sidecar. Mirrors
-/// the native `clamp_javascript_net_poll_wait` 50 ms ceiling.
-const MAX_POLL_WAIT_MS: i64 = 50;
-
-/// Dispatch a single synchronous guest kernel call into the kernel.
-///
-/// `payload` is the JSON request body for `operation`; the returned bytes are
-/// the JSON response body. Errors map kernel failures (including POSIX errno
-/// codes) into [`SidecarCoreError`] so both backends surface identical messages.
-pub fn handle_guest_kernel_call<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    requester_driver: &str,
-    operation: &str,
-    payload: &[u8],
-) -> Result<Vec<u8>, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let request = decode_request(payload)?;
-
-    let response = match operation {
-        "net.connect" => net_connect(kernel, pid, requester_driver, &request)?,
-        "net.listen" => net_listen(kernel, pid, requester_driver, &request)?,
-        "net.accept" => net_accept(kernel, pid, requester_driver, &request)?,
-        "net.write" => net_write(kernel, pid, requester_driver, &request)?,
-        "net.read" => net_read(kernel, pid, requester_driver, &request)?,
-        "net.poll" => net_poll(kernel, pid, requester_driver, &request)?,
-        "net.shutdown" => net_shutdown(kernel, pid, requester_driver, &request)?,
-        "net.close" => net_close(kernel, pid, requester_driver, &request)?,
-        "net.udp_bind" => net_udp_bind(kernel, pid, requester_driver, &request)?,
-        "net.send_to" => net_send_to(kernel, pid, requester_driver, &request)?,
-        "net.recv_from" => net_recv_from(kernel, pid, requester_driver, &request)?,
-        "dgram.create" => dgram_create(kernel, pid, requester_driver, &request)?,
-        "dgram.bind" => dgram_bind(kernel, pid, requester_driver, &request)?,
-        "dgram.send" => dgram_send(kernel, pid, requester_driver, &request)?,
-        "dgram.recv" => dgram_recv(kernel, pid, requester_driver, &request)?,
-        "dgram.close" => net_close(kernel, pid, requester_driver, &request)?,
-        "dgram.address" => dgram_address(kernel, &request)?,
-        "dns.lookup" => dns_lookup(kernel, &request)?,
-        other if crate::guest_pty::is_pty_operation(other) => {
-            crate::guest_pty::dispatch_pty_operation(
-                kernel,
-                pid,
-                requester_driver,
-                other,
-                &request,
-            )?
-        }
-        other => {
-            return Err(SidecarCoreError::new(format!(
-                "unsupported guest kernel call operation: {other}"
-            )))
-        }
-    };
-
-    serde_json::to_vec(&response).map_err(|error| {
-        SidecarCoreError::new(format!(
-            "failed to encode guest kernel call response: {error}"
-        ))
-    })
-}
-
-fn net_connect<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let host = optional_str(request, "host").unwrap_or(DEFAULT_LOOPBACK_HOST);
-    let port = require_port(request, "port")?;
-    let socket_id = kernel
-        .socket_create(driver, pid, SocketSpec::tcp())
-        .map_err(kernel_error)?;
-    if let Err(error) = kernel.socket_connect_inet_loopback(
-        driver,
-        pid,
-        socket_id,
-        InetSocketAddress::new(host, port),
-    ) {
-        let _ = kernel.socket_close(driver, pid, socket_id);
-        return Err(kernel_error(error));
-    }
-    let record = kernel.socket_get(socket_id);
-    let local = record.as_ref().and_then(|record| record.local_address());
-    Ok(json!({
-        "socketId": socket_id,
-        "localAddress": local.map(InetSocketAddress::host),
-        "localPort": local.map(InetSocketAddress::port),
-        "remoteAddress": host,
-        "remotePort": port,
-    }))
-}
-
-fn net_listen<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let host = optional_str(request, "host").unwrap_or(DEFAULT_LOOPBACK_HOST);
-    let port = require_port(request, "port")?;
-    let backlog = optional_u64(request, "backlog")
-        .map(|value| value as usize)
-        .unwrap_or(DEFAULT_LISTEN_BACKLOG);
-    let socket_id = kernel
-        .socket_create(driver, pid, SocketSpec::tcp())
-        .map_err(kernel_error)?;
-    let result = kernel
-        .socket_bind_inet(driver, pid, socket_id, InetSocketAddress::new(host, port))
-        .and_then(|()| kernel.socket_listen(driver, pid, socket_id, backlog));
-    if let Err(error) = result {
-        let _ = kernel.socket_close(driver, pid, socket_id);
-        return Err(kernel_error(error));
-    }
-    let record = kernel.socket_get(socket_id);
-    let local = record.as_ref().and_then(|record| record.local_address());
-    Ok(json!({
-        "socketId": socket_id,
-        "localAddress": local.map(InetSocketAddress::host),
-        "localPort": local.map(InetSocketAddress::port),
-    }))
-}
-
-fn net_accept<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let listener = require_socket_id(request)?;
-    match kernel.socket_accept(driver, pid, listener) {
-        Ok(socket_id) => {
-            let record = kernel.socket_get(socket_id);
-            let peer = record.as_ref().and_then(|record| record.peer_address());
-            Ok(json!({
-                "socketId": socket_id,
-                "remoteAddress": peer.map(InetSocketAddress::host),
-                "remotePort": peer.map(InetSocketAddress::port),
-            }))
-        }
-        Err(error) if would_block(&error) => Ok(json!({ "socketId": Value::Null })),
-        Err(error) => Err(kernel_error(error)),
-    }
-}
-
-fn net_write<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let socket_id = require_socket_id(request)?;
-    let data = decode_data(request)?;
-    let written = kernel
-        .socket_write(driver, pid, socket_id, &data)
-        .map_err(kernel_error)?;
-    Ok(json!({ "written": written }))
-}
-
-fn net_read<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let socket_id = require_socket_id(request)?;
-    let max_bytes = optional_u64(request, "maxBytes")
-        .map(|value| value as usize)
-        .unwrap_or(DEFAULT_READ_MAX_BYTES);
-    match kernel.socket_read(driver, pid, socket_id, max_bytes) {
-        Ok(Some(bytes)) => Ok(json!({ "data": encode_data(&bytes), "closed": false })),
-        Ok(None) => Ok(json!({ "data": Value::Null, "closed": true })),
-        Err(error) if would_block(&error) => Ok(json!({ "data": Value::Null, "closed": false })),
-        Err(error) => Err(kernel_error(error)),
-    }
-}
-
-fn net_poll<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let socket_id = require_socket_id(request)?;
-    let events = optional_u64(request, "events")
-        .map(|bits| PollEvents::from_bits(bits as u16))
-        .unwrap_or(POLLIN | POLLOUT | POLLHUP | POLLERR);
-    let timeout_ms = optional_u64(request, "timeoutMs")
-        .map(|value| value as i64)
-        .unwrap_or(0)
-        .clamp(0, MAX_POLL_WAIT_MS) as i32;
-    let result = kernel
-        .poll_targets(
-            driver,
-            pid,
-            vec![PollTargetEntry::socket(socket_id, events)],
-            timeout_ms,
-        )
-        .map_err(kernel_error)?;
-    let revents = result
-        .targets
-        .first()
-        .map(|entry| entry.revents)
-        .unwrap_or_else(PollEvents::empty);
-    Ok(json!({
-        "revents": revents.bits(),
-        "readable": revents.intersects(POLLIN),
-        "writable": revents.intersects(POLLOUT),
-        "hangup": revents.intersects(POLLHUP),
-        "error": revents.intersects(POLLERR | POLLNVAL),
-    }))
-}
-
-fn net_udp_bind<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let host = optional_str(request, "host").unwrap_or(DEFAULT_LOOPBACK_HOST);
-    let port = require_port(request, "port")?;
-    let socket_id = kernel
-        .socket_create(driver, pid, SocketSpec::udp())
-        .map_err(kernel_error)?;
-    if let Err(error) =
-        kernel.socket_bind_inet(driver, pid, socket_id, InetSocketAddress::new(host, port))
-    {
-        let _ = kernel.socket_close(driver, pid, socket_id);
-        return Err(kernel_error(error));
-    }
-    let record = kernel.socket_get(socket_id);
-    let local = record.as_ref().and_then(|record| record.local_address());
-    Ok(json!({
-        "socketId": socket_id,
-        "localAddress": local.map(InetSocketAddress::host),
-        "localPort": local.map(InetSocketAddress::port),
-    }))
-}
-
-fn net_send_to<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let socket_id = require_socket_id(request)?;
-    let host = optional_str(request, "host").unwrap_or(DEFAULT_LOOPBACK_HOST);
-    let port = require_port(request, "port")?;
-    let data = decode_data(request)?;
-    let written = kernel
-        .socket_send_to_inet_loopback(
-            driver,
-            pid,
-            socket_id,
-            InetSocketAddress::new(host, port),
-            &data,
-        )
-        .map_err(kernel_error)?;
-    Ok(json!({ "written": written }))
-}
-
-fn net_recv_from<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let socket_id = require_socket_id(request)?;
-    let max_bytes = optional_u64(request, "maxBytes")
-        .map(|value| value as usize)
-        .unwrap_or(DEFAULT_READ_MAX_BYTES);
-    match kernel.socket_recv_datagram(driver, pid, socket_id, max_bytes) {
-        Ok(Some(datagram)) => {
-            let source = datagram.source_address();
-            Ok(json!({
-                "data": encode_data(datagram.payload()),
-                "remoteAddress": source.map(InetSocketAddress::host),
-                "remotePort": source.map(InetSocketAddress::port),
-            }))
-        }
-        Ok(None) => Ok(json!({ "data": Value::Null })),
-        Err(error) if would_block(&error) => Ok(json!({ "data": Value::Null })),
-        Err(error) => Err(kernel_error(error)),
-    }
-}
-
-fn dgram_create<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    _request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let socket_id = kernel
-        .socket_create(driver, pid, SocketSpec::udp())
-        .map_err(kernel_error)?;
-    Ok(json!({ "socketId": socket_id }))
-}
-
-fn dgram_bind<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let socket_id = require_socket_id(request)?;
-    let host = optional_str(request, "host").unwrap_or(DEFAULT_LOOPBACK_HOST);
-    let port = optional_u64(request, "port")
-        .map(|value| u16::try_from(value).unwrap_or(0))
-        .unwrap_or(0);
-    kernel
-        .socket_bind_inet(driver, pid, socket_id, InetSocketAddress::new(host, port))
-        .map_err(kernel_error)?;
-    let record = kernel.socket_get(socket_id);
-    let local = record.as_ref().and_then(|record| record.local_address());
-    Ok(json!({
-        "host": local.map(InetSocketAddress::host),
-        "port": local.map(InetSocketAddress::port),
-    }))
-}
-
-fn dgram_send<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let socket_id = require_socket_id(request)?;
-    // Auto-bind an unbound datagram socket to an ephemeral port, as Node does on
-    // the first send.
-    let needs_bind = kernel
-        .socket_get(socket_id)
-        .map(|record| record.local_address().is_none())
-        .unwrap_or(false);
-    if needs_bind {
-        // Auto-bind to loopback (not 0.0.0.0) so the receiver sees a 127.0.0.1
-        // source for loopback delivery, matching POSIX/Node semantics.
-        kernel
-            .socket_bind_inet(
-                driver,
-                pid,
-                socket_id,
-                InetSocketAddress::new("127.0.0.1", 0),
-            )
-            .map_err(kernel_error)?;
-    }
-    let host = optional_str(request, "host").unwrap_or(DEFAULT_LOOPBACK_HOST);
-    let port = require_port(request, "port")?;
-    let data = decode_data(request)?;
-    let written = kernel
-        .socket_send_to_inet_loopback(
-            driver,
-            pid,
-            socket_id,
-            InetSocketAddress::new(host, port),
-            &data,
-        )
-        .map_err(kernel_error)?;
-    Ok(json!({ "bytes": written }))
-}
-
-fn dgram_recv<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let socket_id = require_socket_id(request)?;
-    let max_bytes = optional_u64(request, "maxBytes")
-        .map(|value| value as usize)
-        .unwrap_or(DEFAULT_READ_MAX_BYTES);
-    match kernel.socket_recv_datagram(driver, pid, socket_id, max_bytes) {
-        Ok(Some(datagram)) => {
-            let source = datagram.source_address();
-            Ok(json!({
-                "data": encode_data(datagram.payload()),
-                "remoteAddress": source.map(InetSocketAddress::host),
-                "remotePort": source.map(InetSocketAddress::port),
-            }))
-        }
-        Ok(None) => Ok(json!({ "data": Value::Null })),
-        Err(error) if would_block(&error) => Ok(json!({ "data": Value::Null })),
-        Err(error) => Err(kernel_error(error)),
-    }
-}
-
-fn dgram_address<F>(kernel: &KernelVm<F>, request: &Value) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let socket_id = require_socket_id(request)?;
-    let record = kernel.socket_get(socket_id);
-    let local = record.as_ref().and_then(|record| record.local_address());
-    Ok(json!({
-        "host": local.map(InetSocketAddress::host),
-        "port": local.map(InetSocketAddress::port),
-    }))
-}
-
-fn dns_lookup<F>(kernel: &KernelVm<F>, request: &Value) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let hostname = optional_str(request, "hostname").ok_or_else(|| {
-        SidecarCoreError::new("guest dns.lookup requires string field `hostname`")
-    })?;
-    let resolution = kernel
-        .resolve_dns(hostname, DnsLookupPolicy::CheckPermissions)
-        .map_err(kernel_error)?;
-    let addresses = resolution
-        .addresses()
-        .iter()
-        .map(|address| {
-            json!({
-                "address": address.to_string(),
-                "family": if address.is_ipv6() { 6 } else { 4 },
-            })
-        })
-        .collect::<Vec<_>>();
-    Ok(json!({
-        "hostname": resolution.hostname(),
-        "addresses": addresses,
-    }))
-}
-
-fn net_shutdown<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let socket_id = require_socket_id(request)?;
-    let how = match optional_str(request, "how").unwrap_or("both") {
-        "read" => SocketShutdown::Read,
-        "write" => SocketShutdown::Write,
-        "both" => SocketShutdown::Both,
-        other => {
-            return Err(SidecarCoreError::new(format!(
-                "guest net.shutdown received unsupported `how` value: {other}"
-            )))
-        }
-    };
-    kernel
-        .socket_shutdown(driver, pid, socket_id, how)
-        .map_err(kernel_error)?;
-    Ok(json!({}))
-}
-
-fn net_close<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let socket_id = require_socket_id(request)?;
-    kernel
-        .socket_close(driver, pid, socket_id)
-        .map_err(kernel_error)?;
-    Ok(json!({}))
-}
-
-fn decode_request(payload: &[u8]) -> Result<Value, SidecarCoreError> {
-    if payload.is_empty() {
-        return Ok(Value::Null);
-    }
-    serde_json::from_slice(payload).map_err(|error| {
-        SidecarCoreError::new(format!("invalid guest kernel call payload: {error}"))
-    })
-}
-
-fn optional_str<'a>(request: &'a Value, key: &str) -> Option<&'a str> {
-    request.get(key).and_then(Value::as_str)
-}
-
-fn optional_u64(request: &Value, key: &str) -> Option<u64> {
-    request.get(key).and_then(Value::as_u64)
-}
-
-fn require_port(request: &Value, key: &str) -> Result<u16, SidecarCoreError> {
-    let value = optional_u64(request, key).ok_or_else(|| {
-        SidecarCoreError::new(format!("guest kernel call requires numeric field `{key}`"))
-    })?;
-    u16::try_from(value).map_err(|_| {
-        SidecarCoreError::new(format!(
-            "guest kernel call field `{key}` must be a valid port"
-        ))
-    })
-}
-
-fn require_socket_id(request: &Value) -> Result<SocketId, SidecarCoreError> {
-    optional_u64(request, "socketId")
-        .ok_or_else(|| SidecarCoreError::new("guest kernel call requires numeric field `socketId`"))
-}
-
-fn decode_data(request: &Value) -> Result<Vec<u8>, SidecarCoreError> {
-    let data = optional_str(request, "data")
-        .ok_or_else(|| SidecarCoreError::new("guest kernel call requires string field `data`"))?;
-    base64::engine::general_purpose::STANDARD
-        .decode(data)
-        .map_err(|error| {
-            SidecarCoreError::new(format!("invalid base64 guest socket data: {error}"))
-        })
-}
-
-fn encode_data(bytes: &[u8]) -> String {
-    base64::engine::general_purpose::STANDARD.encode(bytes)
-}
-
-fn would_block(error: &KernelError) -> bool {
-    matches!(error.code(), "EAGAIN" | "EWOULDBLOCK")
-}
-
-fn kernel_error(error: KernelError) -> SidecarCoreError {
-    SidecarCoreError::new(error.to_string())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig, VirtualProcessOptions};
-    use secure_exec_kernel::permissions::Permissions;
-    use secure_exec_kernel::vfs::MemoryFileSystem;
-
-    fn test_kernel() -> KernelVm<MemoryFileSystem> {
-        let mut config = KernelVmConfig::new("guest-net-test");
-        config.permissions = Permissions::allow_all();
-        KernelVm::new(MemoryFileSystem::new(), config)
-    }
-
-    fn guest_pid(kernel: &mut KernelVm<MemoryFileSystem>) -> u32 {
-        kernel
-            .create_virtual_process(
-                "shell",
-                "shell",
-                "sh",
-                Vec::new(),
-                VirtualProcessOptions::default(),
-            )
-            .expect("spawn guest process")
-            .pid()
-    }
-
-    fn call(
-        kernel: &mut KernelVm<MemoryFileSystem>,
-        pid: u32,
-        operation: &str,
-        request: Value,
-    ) -> Value {
-        let payload = serde_json::to_vec(&request).expect("encode request");
-        let bytes =
-            handle_guest_kernel_call(kernel, pid, "shell", operation, &payload).expect("dispatch");
-        serde_json::from_slice(&bytes).expect("decode response")
-    }
-
-    #[test]
-    fn loopback_tcp_round_trip_through_kernel() {
-        let mut kernel = test_kernel();
-        let pid = guest_pid(&mut kernel);
-
-        let listener = call(
-            &mut kernel,
-            pid,
-            "net.listen",
-            json!({ "host": "127.0.0.1", "port": 44551 }),
-        );
-        let listener_id = listener["socketId"].as_u64().expect("listener socket id");
-
-        let client = call(
-            &mut kernel,
-            pid,
-            "net.connect",
-            json!({ "host": "127.0.0.1", "port": 44551 }),
-        );
-        let client_id = client["socketId"].as_u64().expect("client socket id");
-
-        let accepted = call(
-            &mut kernel,
-            pid,
-            "net.accept",
-            json!({ "socketId": listener_id }),
-        );
-        let accepted_id = accepted["socketId"].as_u64().expect("accepted socket id");
-
-        let payload = b"hello kernel loopback";
-        let write = call(
-            &mut kernel,
-            pid,
-            "net.write",
-            json!({ "socketId": client_id, "data": encode_data(payload) }),
-        );
-        assert_eq!(write["written"].as_u64(), Some(payload.len() as u64));
-
-        let read = call(
-            &mut kernel,
-            pid,
-            "net.read",
-            json!({ "socketId": accepted_id }),
-        );
-        assert_eq!(read["closed"].as_bool(), Some(false));
-        let decoded = base64::engine::general_purpose::STANDARD
-            .decode(read["data"].as_str().expect("read data"))
-            .expect("decode read data");
-        assert_eq!(decoded, payload);
-
-        call(
-            &mut kernel,
-            pid,
-            "net.close",
-            json!({ "socketId": client_id }),
-        );
-        call(
-            &mut kernel,
-            pid,
-            "net.close",
-            json!({ "socketId": accepted_id }),
-        );
-        call(
-            &mut kernel,
-            pid,
-            "net.close",
-            json!({ "socketId": listener_id }),
-        );
-    }
-
-    #[test]
-    fn accept_without_pending_connection_reports_null_socket() {
-        let mut kernel = test_kernel();
-        let pid = guest_pid(&mut kernel);
-        let listener = call(
-            &mut kernel,
-            pid,
-            "net.listen",
-            json!({ "host": "127.0.0.1", "port": 44552 }),
-        );
-        let listener_id = listener["socketId"].as_u64().expect("listener socket id");
-
-        let accepted = call(
-            &mut kernel,
-            pid,
-            "net.accept",
-            json!({ "socketId": listener_id }),
-        );
-        assert!(accepted["socketId"].is_null());
-    }
-
-    #[test]
-    fn poll_reports_readability_after_loopback_write() {
-        let mut kernel = test_kernel();
-        let pid = guest_pid(&mut kernel);
-        let listener = call(
-            &mut kernel,
-            pid,
-            "net.listen",
-            json!({ "host": "127.0.0.1", "port": 44561 }),
-        );
-        let listener_id = listener["socketId"].as_u64().expect("listener socket id");
-        let client = call(
-            &mut kernel,
-            pid,
-            "net.connect",
-            json!({ "host": "127.0.0.1", "port": 44561 }),
-        );
-        let client_id = client["socketId"].as_u64().expect("client socket id");
-        let accepted = call(
-            &mut kernel,
-            pid,
-            "net.accept",
-            json!({ "socketId": listener_id }),
-        );
-        let accepted_id = accepted["socketId"].as_u64().expect("accepted socket id");
-
-        let before = call(
-            &mut kernel,
-            pid,
-            "net.poll",
-            json!({ "socketId": accepted_id }),
-        );
-        assert_eq!(before["readable"].as_bool(), Some(false));
-
-        call(
-            &mut kernel,
-            pid,
-            "net.write",
-            json!({ "socketId": client_id, "data": encode_data(b"ping") }),
-        );
-
-        let after = call(
-            &mut kernel,
-            pid,
-            "net.poll",
-            json!({ "socketId": accepted_id }),
-        );
-        assert_eq!(after["readable"].as_bool(), Some(true));
-    }
-
-    #[test]
-    fn udp_loopback_datagram_round_trip() {
-        let mut kernel = test_kernel();
-        let pid = guest_pid(&mut kernel);
-        let receiver = call(
-            &mut kernel,
-            pid,
-            "net.udp_bind",
-            json!({ "host": "127.0.0.1", "port": 45601 }),
-        );
-        let receiver_id = receiver["socketId"].as_u64().expect("receiver socket id");
-        let sender = call(
-            &mut kernel,
-            pid,
-            "net.udp_bind",
-            json!({ "host": "127.0.0.1", "port": 45602 }),
-        );
-        let sender_id = sender["socketId"].as_u64().expect("sender socket id");
-
-        let payload = b"datagram payload";
-        let sent = call(
-            &mut kernel,
-            pid,
-            "net.send_to",
-            json!({ "socketId": sender_id, "host": "127.0.0.1", "port": 45601, "data": encode_data(payload) }),
-        );
-        assert_eq!(sent["written"].as_u64(), Some(payload.len() as u64));
-
-        let received = call(
-            &mut kernel,
-            pid,
-            "net.recv_from",
-            json!({ "socketId": receiver_id }),
-        );
-        let decoded = base64::engine::general_purpose::STANDARD
-            .decode(received["data"].as_str().expect("datagram data"))
-            .expect("decode datagram");
-        assert_eq!(decoded, payload);
-        assert_eq!(received["remotePort"].as_u64(), Some(45602));
-    }
-
-    #[test]
-    fn dns_lookup_resolves_literal_addresses() {
-        let mut kernel = test_kernel();
-        let pid = guest_pid(&mut kernel);
-        let resolution = call(
-            &mut kernel,
-            pid,
-            "dns.lookup",
-            json!({ "hostname": "127.0.0.1" }),
-        );
-        assert_eq!(resolution["hostname"].as_str(), Some("127.0.0.1"));
-        let addresses = resolution["addresses"].as_array().expect("addresses array");
-        assert_eq!(addresses.len(), 1);
-        assert_eq!(addresses[0]["address"].as_str(), Some("127.0.0.1"));
-        assert_eq!(addresses[0]["family"].as_u64(), Some(4));
-    }
-
-    #[test]
-    fn dgram_loopback_round_trip_with_auto_bind_sender() {
-        let mut kernel = test_kernel();
-        let pid = guest_pid(&mut kernel);
-
-        let receiver = call(&mut kernel, pid, "dgram.create", json!({}));
-        let receiver_id = receiver["socketId"].as_u64().expect("receiver id");
-        call(
-            &mut kernel,
-            pid,
-            "dgram.bind",
-            json!({ "socketId": receiver_id, "host": "127.0.0.1", "port": 46711 }),
-        );
-
-        // Sender is never bound explicitly -> dgram.send auto-binds it.
-        let sender = call(&mut kernel, pid, "dgram.create", json!({}));
-        let sender_id = sender["socketId"].as_u64().expect("sender id");
-        let payload = b"dgram-auto-bind";
-        let sent = call(
-            &mut kernel,
-            pid,
-            "dgram.send",
-            json!({ "socketId": sender_id, "host": "127.0.0.1", "port": 46711, "data": encode_data(payload) }),
-        );
-        assert_eq!(sent["bytes"].as_u64(), Some(payload.len() as u64));
-
-        let recv = call(
-            &mut kernel,
-            pid,
-            "dgram.recv",
-            json!({ "socketId": receiver_id }),
-        );
-        let decoded = base64::engine::general_purpose::STANDARD
-            .decode(recv["data"].as_str().expect("recv data"))
-            .expect("decode");
-        assert_eq!(decoded, payload);
-        // The auto-bound sender got an ephemeral port in the dynamic range.
-        assert!(recv["remotePort"].as_u64().expect("remote port") >= 49152);
-    }
-
-    #[test]
-    fn unsupported_operation_is_reported() {
-        let mut kernel = test_kernel();
-        let pid = guest_pid(&mut kernel);
-        let error =
-            handle_guest_kernel_call(&mut kernel, pid, "shell", "net.teleport", b"{}").unwrap_err();
-        assert!(error
-            .to_string()
-            .contains("unsupported guest kernel call operation: net.teleport"));
-    }
-}
diff --git a/crates/sidecar-core/src/guest_pty.rs b/crates/sidecar-core/src/guest_pty.rs
deleted file mode 100644
index aa4af0007..000000000
--- a/crates/sidecar-core/src/guest_pty.rs
+++ /dev/null
@@ -1,468 +0,0 @@
-//! Guest PTY kernel-call dispatch.
-//!
-//! Pseudo-terminal syscalls flow through the same generic synchronous wire
-//! payload as guest networking (`GuestKernelCallRequest` ->
-//! `GuestKernelResultResponse`) carrying a `pty.*` `operation` string plus a
-//! JSON `payload`. This module is the backend-agnostic dispatcher that decodes a
-//! `pty.*` operation and routes it into the kernel's `PtyManager`, exactly as
-//! [`crate::guest_net`] does for the `net.*`/`dns.*` family. It is delegated to
-//! from `handle_guest_kernel_call` and unit-tested without an executor.
-//!
-//! The PTY is inherently fd/stream based, so unlike the path-based filesystem
-//! family the read/write operations carry a kernel fd and route through the
-//! kernel's generic by-fd read/write (which already dispatches pty fds through
-//! the line discipline). `pty.open` allocates a master/slave pair; the host
-//! drives the master while a guest's std streams bind to the slave.
-
-use crate::SidecarCoreError;
-use base64::Engine;
-use secure_exec_kernel::kernel::{KernelError, KernelVm};
-use secure_exec_kernel::pty::{PartialTermios, PartialTermiosControlChars};
-use secure_exec_kernel::vfs::VirtualFileSystem;
-use serde_json::{json, Value};
-use std::time::Duration;
-
-const DEFAULT_READ_MAX_BYTES: usize = 64 * 1024;
-/// Guest pty reads run on the sidecar's synchronous request path, so a blocking
-/// read is clamped to a small ceiling: the guest re-reads rather than parking
-/// the sidecar (mirrors the `net.poll` 50 ms ceiling in [`crate::guest_net`]).
-const MAX_PTY_READ_WAIT_MS: u64 = 50;
-
-/// True when `operation` names a `pty.*` guest kernel call.
-pub fn is_pty_operation(operation: &str) -> bool {
-    operation.starts_with("pty.")
-}
-
-/// Dispatch a single `pty.*` guest kernel call into the kernel. `request` is the
-/// already-decoded JSON request body; the returned `Value` is the JSON response
-/// body the guest sync-bridge consumes.
-pub fn dispatch_pty_operation<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    operation: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    match operation {
-        "pty.open" => pty_open(kernel, pid, driver),
-        "pty.read" => pty_read(kernel, pid, driver, request),
-        "pty.write" => pty_write(kernel, pid, driver, request),
-        "pty.close" => pty_close(kernel, pid, driver, request),
-        "pty.resize" => pty_resize(kernel, pid, driver, request),
-        "pty.setForegroundPgid" => pty_set_foreground_pgid(kernel, pid, driver, request),
-        "pty.tcgetattr" => pty_tcgetattr(kernel, pid, driver, request),
-        "pty.tcsetattr" => pty_tcsetattr(kernel, pid, driver, request),
-        other => Err(SidecarCoreError::new(format!(
-            "unsupported guest pty operation: {other}"
-        ))),
-    }
-}
-
-fn pty_open<F>(kernel: &mut KernelVm<F>, pid: u32, driver: &str) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let (master_fd, slave_fd, path) = kernel.open_pty(driver, pid).map_err(kernel_error)?;
-    Ok(json!({ "masterFd": master_fd, "slaveFd": slave_fd, "path": path }))
-}
-
-fn pty_read<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let fd = require_fd(request)?;
-    let max_bytes = optional_u64(request, "maxBytes")
-        .map(|value| value as usize)
-        .unwrap_or(DEFAULT_READ_MAX_BYTES);
-    let wait_ms = optional_u64(request, "timeoutMs")
-        .unwrap_or(MAX_PTY_READ_WAIT_MS)
-        .min(MAX_PTY_READ_WAIT_MS);
-    let timeout = Some(Duration::from_millis(wait_ms));
-    match kernel.fd_read_with_timeout_result(driver, pid, fd, max_bytes, timeout) {
-        Ok(Some(bytes)) => Ok(json!({ "data": encode_data(&bytes) })),
-        // No data within the (short) timeout. A zero/short blocking read with an empty
-        // line discipline buffer surfaces as EAGAIN; the guest polls again, so this is
-        // a no-data result (`data: null`), not an error — mirrors guest_net.net_read.
-        Ok(None) => Ok(json!({ "data": Value::Null })),
-        Err(error) if would_block(&error) => Ok(json!({ "data": Value::Null })),
-        Err(error) => Err(kernel_error(error)),
-    }
-}
-
-fn pty_write<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let fd = require_fd(request)?;
-    let data = decode_data(request)?;
-    let written = kernel
-        .fd_write(driver, pid, fd, &data)
-        .map_err(kernel_error)?;
-    Ok(json!({ "written": written }))
-}
-
-fn pty_close<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let fd = require_fd(request)?;
-    kernel.fd_close(driver, pid, fd).map_err(kernel_error)?;
-    Ok(json!({}))
-}
-
-fn pty_resize<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let fd = require_fd(request)?;
-    let cols = require_u16(request, "cols")?;
-    let rows = require_u16(request, "rows")?;
-    kernel
-        .pty_resize(driver, pid, fd, cols, rows)
-        .map_err(kernel_error)?;
-    Ok(json!({}))
-}
-
-fn pty_set_foreground_pgid<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let fd = require_fd(request)?;
-    let pgid = optional_u32(request, "pgid")?.unwrap_or(pid);
-    if pgid == pid {
-        kernel.setpgid(driver, pid, pgid).map_err(kernel_error)?;
-    }
-    kernel
-        .pty_set_foreground_pgid(driver, pid, fd, pgid)
-        .map_err(kernel_error)?;
-    Ok(json!({}))
-}
-
-fn pty_tcgetattr<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let fd = require_fd(request)?;
-    let termios = kernel.tcgetattr(driver, pid, fd).map_err(kernel_error)?;
-    Ok(json!({
-        "icrnl": termios.icrnl,
-        "opost": termios.opost,
-        "onlcr": termios.onlcr,
-        "icanon": termios.icanon,
-        "echo": termios.echo,
-        "isig": termios.isig,
-        "cc": {
-            "vintr": termios.cc.vintr,
-            "vquit": termios.cc.vquit,
-            "vsusp": termios.cc.vsusp,
-            "veof": termios.cc.veof,
-            "verase": termios.cc.verase,
-            "vkill": termios.cc.vkill,
-            "vwerase": termios.cc.vwerase,
-        },
-    }))
-}
-
-fn pty_tcsetattr<F>(
-    kernel: &mut KernelVm<F>,
-    pid: u32,
-    driver: &str,
-    request: &Value,
-) -> Result<Value, SidecarCoreError>
-where
-    F: VirtualFileSystem + 'static,
-{
-    let fd = require_fd(request)?;
-    let partial = parse_partial_termios(request);
-    kernel
-        .tcsetattr(driver, pid, fd, partial)
-        .map_err(kernel_error)?;
-    Ok(json!({}))
-}
-
-/// A `pty.tcsetattr` request supplies only the termios fields it wants changed;
-/// every field is optional so the guest can flip raw mode (icanon/echo/opost)
-/// without restating the rest.
-fn parse_partial_termios(request: &Value) -> PartialTermios {
-    let cc = request.get("cc").map(|cc| PartialTermiosControlChars {
-        vintr: optional_u8(cc, "vintr"),
-        vquit: optional_u8(cc, "vquit"),
-        vsusp: optional_u8(cc, "vsusp"),
-        veof: optional_u8(cc, "veof"),
-        verase: optional_u8(cc, "verase"),
-        vkill: optional_u8(cc, "vkill"),
-        vwerase: optional_u8(cc, "vwerase"),
-    });
-    PartialTermios {
-        icrnl: optional_bool(request, "icrnl"),
-        opost: optional_bool(request, "opost"),
-        onlcr: optional_bool(request, "onlcr"),
-        icanon: optional_bool(request, "icanon"),
-        echo: optional_bool(request, "echo"),
-        isig: optional_bool(request, "isig"),
-        cc,
-    }
-}
-
-fn require_fd(request: &Value) -> Result<u32, SidecarCoreError> {
-    let fd = optional_u64(request, "fd")
-        .ok_or_else(|| SidecarCoreError::new("guest pty call requires numeric field `fd`"))?;
-    u32::try_from(fd)
-        .map_err(|_| SidecarCoreError::new("guest pty call field `fd` must be a valid descriptor"))
-}
-
-fn require_u16(request: &Value, key: &str) -> Result<u16, SidecarCoreError> {
-    let value = optional_u64(request, key).ok_or_else(|| {
-        SidecarCoreError::new(format!("guest pty call requires numeric field `{key}`"))
-    })?;
-    u16::try_from(value)
-        .map_err(|_| SidecarCoreError::new(format!("guest pty call field `{key}` is out of range")))
-}
-
-fn optional_u32(request: &Value, key: &str) -> Result<Option<u32>, SidecarCoreError> {
-    optional_u64(request, key)
-        .map(u32::try_from)
-        .transpose()
-        .map_err(|_| SidecarCoreError::new(format!("guest pty call field `{key}` is out of range")))
-}
-
-fn optional_u64(request: &Value, key: &str) -> Option<u64> {
-    request.get(key).and_then(Value::as_u64)
-}
-
-fn optional_bool(request: &Value, key: &str) -> Option<bool> {
-    request.get(key).and_then(Value::as_bool)
-}
-
-fn optional_u8(request: &Value, key: &str) -> Option<u8> {
-    optional_u64(request, key).and_then(|value| u8::try_from(value).ok())
-}
-
-fn decode_data(request: &Value) -> Result<Vec<u8>, SidecarCoreError> {
-    let data = request
-        .get("data")
-        .and_then(Value::as_str)
-        .ok_or_else(|| SidecarCoreError::new("guest pty call requires string field `data`"))?;
-    base64::engine::general_purpose::STANDARD
-        .decode(data)
-        .map_err(|error| SidecarCoreError::new(format!("invalid base64 guest pty data: {error}")))
-}
-
-fn encode_data(bytes: &[u8]) -> String {
-    base64::engine::general_purpose::STANDARD.encode(bytes)
-}
-
-fn would_block(error: &KernelError) -> bool {
-    matches!(error.code(), "EAGAIN" | "EWOULDBLOCK")
-}
-
-fn kernel_error(error: KernelError) -> SidecarCoreError {
-    SidecarCoreError::new(error.to_string())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use crate::guest_net::handle_guest_kernel_call;
-    use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig, VirtualProcessOptions};
-    use secure_exec_kernel::permissions::Permissions;
-    use secure_exec_kernel::vfs::MemoryFileSystem;
-
-    fn test_kernel() -> KernelVm<MemoryFileSystem> {
-        let mut config = KernelVmConfig::new("guest-pty-test");
-        config.permissions = Permissions::allow_all();
-        KernelVm::new(MemoryFileSystem::new(), config)
-    }
-
-    fn guest_pid(kernel: &mut KernelVm<MemoryFileSystem>) -> u32 {
-        kernel
-            .create_virtual_process(
-                "shell",
-                "shell",
-                "sh",
-                Vec::new(),
-                VirtualProcessOptions::default(),
-            )
-            .expect("spawn guest process")
-            .pid()
-    }
-
-    /// Drive a `pty.*` call through the same public entry the wire dispatcher uses,
-    /// so the test covers the `handle_guest_kernel_call` -> `dispatch_pty_operation`
-    /// delegation, not just the inner functions.
-    fn call(
-        kernel: &mut KernelVm<MemoryFileSystem>,
-        pid: u32,
-        operation: &str,
-        request: Value,
-    ) -> Value {
-        let payload = serde_json::to_vec(&request).expect("encode request");
-        let bytes =
-            handle_guest_kernel_call(kernel, pid, "shell", operation, &payload).expect("dispatch");
-        serde_json::from_slice(&bytes).expect("decode response")
-    }
-
-    fn read_until_data(kernel: &mut KernelVm<MemoryFileSystem>, pid: u32, fd: u64) -> Vec<u8> {
-        for _ in 0..200 {
-            let response = call(kernel, pid, "pty.read", json!({ "fd": fd }));
-            if let Some(data) = response["data"].as_str() {
-                return base64::engine::general_purpose::STANDARD
-                    .decode(data)
-                    .expect("decode pty read");
-            }
-        }
-        panic!("pty.read timed out");
-    }
-
-    #[test]
-    fn loopback_pty_round_trip_through_kernel_line_discipline() {
-        let mut kernel = test_kernel();
-        let pid = guest_pid(&mut kernel);
-
-        let pair = call(&mut kernel, pid, "pty.open", json!({}));
-        let master = pair["masterFd"].as_u64().expect("master fd");
-        let slave = pair["slaveFd"].as_u64().expect("slave fd");
-        assert!(pair["path"]
-            .as_str()
-            .expect("pty path")
-            .starts_with("/dev/"));
-
-        // Raw mode so the loopback carries exactly what is written.
-        call(
-            &mut kernel,
-            pid,
-            "pty.tcsetattr",
-            json!({ "fd": slave, "icanon": false, "echo": false, "opost": false, "isig": false }),
-        );
-
-        let input = base64::engine::general_purpose::STANDARD.encode(b"ping-pty");
-        call(
-            &mut kernel,
-            pid,
-            "pty.write",
-            json!({ "fd": master, "data": input }),
-        );
-        assert_eq!(read_until_data(&mut kernel, pid, slave), b"ping-pty");
-
-        let reply = base64::engine::general_purpose::STANDARD.encode(b"ECHO:ping-pty");
-        call(
-            &mut kernel,
-            pid,
-            "pty.write",
-            json!({ "fd": slave, "data": reply }),
-        );
-        assert_eq!(read_until_data(&mut kernel, pid, master), b"ECHO:ping-pty");
-
-        call(&mut kernel, pid, "pty.close", json!({ "fd": slave }));
-        call(&mut kernel, pid, "pty.close", json!({ "fd": master }));
-    }
-
-    #[test]
-    fn tcsetattr_then_tcgetattr_reflects_raw_mode() {
-        let mut kernel = test_kernel();
-        let pid = guest_pid(&mut kernel);
-        let pair = call(&mut kernel, pid, "pty.open", json!({}));
-        let slave = pair["slaveFd"].as_u64().expect("slave fd");
-
-        // Default is canonical + echo.
-        let before = call(&mut kernel, pid, "pty.tcgetattr", json!({ "fd": slave }));
-        assert_eq!(before["icanon"].as_bool(), Some(true));
-        assert_eq!(before["echo"].as_bool(), Some(true));
-
-        call(
-            &mut kernel,
-            pid,
-            "pty.tcsetattr",
-            json!({ "fd": slave, "icanon": false, "echo": false }),
-        );
-        let after = call(&mut kernel, pid, "pty.tcgetattr", json!({ "fd": slave }));
-        assert_eq!(after["icanon"].as_bool(), Some(false));
-        assert_eq!(after["echo"].as_bool(), Some(false));
-        // isig was not in the partial update, so it is untouched.
-        assert_eq!(after["isig"].as_bool(), Some(true));
-    }
-
-    #[test]
-    fn empty_pty_read_is_null_not_error() {
-        let mut kernel = test_kernel();
-        let pid = guest_pid(&mut kernel);
-        let pair = call(&mut kernel, pid, "pty.open", json!({}));
-        let master = pair["masterFd"].as_u64().expect("master fd");
-
-        // Nothing has been written, so a zero-timeout poll must report no data rather
-        // than surfacing EAGAIN as a dispatch error (the interactive shell polls).
-        let response = call(
-            &mut kernel,
-            pid,
-            "pty.read",
-            json!({ "fd": master, "timeoutMs": 0 }),
-        );
-        assert!(response["data"].is_null());
-    }
-
-    #[test]
-    fn set_foreground_pgid_defaults_to_active_guest_process_group() {
-        let mut kernel = test_kernel();
-        let pid = guest_pid(&mut kernel);
-        let pair = call(&mut kernel, pid, "pty.open", json!({}));
-        let master = pair["masterFd"].as_u64().expect("master fd");
-
-        call(
-            &mut kernel,
-            pid,
-            "pty.setForegroundPgid",
-            json!({ "fd": master }),
-        );
-
-        assert_eq!(kernel.getpgid("shell", pid).expect("pgid"), pid);
-        assert_eq!(
-            kernel
-                .tcgetpgrp("shell", pid, master as u32)
-                .expect("foreground pgid"),
-            pid
-        );
-    }
-
-    #[test]
-    fn unsupported_pty_operation_is_rejected() {
-        let mut kernel = test_kernel();
-        let pid = guest_pid(&mut kernel);
-        let payload = serde_json::to_vec(&json!({})).unwrap();
-        let error = handle_guest_kernel_call(&mut kernel, pid, "shell", "pty.bogus", &payload)
-            .expect_err("unknown pty op rejected");
-        assert!(error.to_string().contains("pty.bogus"));
-    }
-}
diff --git a/crates/sidecar-core/src/identity.rs b/crates/sidecar-core/src/identity.rs
deleted file mode 100644
index f2474165b..000000000
--- a/crates/sidecar-core/src/identity.rs
+++ /dev/null
@@ -1,98 +0,0 @@
-use secure_exec_kernel::resource_accounting::ResourceLimits;
-use secure_exec_kernel::user::UserManager;
-
-use crate::{virtual_os_cpu_count, virtual_os_freemem_bytes, virtual_os_totalmem_bytes};
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct SharedGuestRuntimeIdentity {
-    pub virtual_pid: Option<u64>,
-    pub virtual_ppid: Option<u64>,
-    pub virtual_uid: u64,
-    pub virtual_gid: u64,
-    pub process_platform: String,
-    pub process_arch: String,
-    pub os_cpu_count: u64,
-    pub os_totalmem: u64,
-    pub os_freemem: u64,
-    pub os_homedir: String,
-    pub os_hostname: String,
-    pub os_shell: String,
-    pub os_user: String,
-    pub os_tmpdir: String,
-    pub os_type: String,
-    pub os_release: String,
-    pub os_version: String,
-    pub os_machine: String,
-}
-
-pub fn shared_guest_runtime_identity(
-    user: &UserManager,
-    resource_limits: &ResourceLimits,
-    virtual_pid: Option<u64>,
-    virtual_ppid: Option<u64>,
-) -> SharedGuestRuntimeIdentity {
-    SharedGuestRuntimeIdentity {
-        virtual_pid,
-        virtual_ppid,
-        virtual_uid: u64::from(user.uid),
-        virtual_gid: u64::from(user.gid),
-        process_platform: String::from("linux"),
-        process_arch: String::from("x64"),
-        os_cpu_count: virtual_os_cpu_count(resource_limits) as u64,
-        os_totalmem: virtual_os_totalmem_bytes(resource_limits),
-        os_freemem: virtual_os_freemem_bytes(resource_limits),
-        os_homedir: user.homedir.clone(),
-        os_hostname: String::from("secure-exec"),
-        os_shell: user.shell.clone(),
-        os_user: user.username.clone(),
-        os_tmpdir: String::from("/tmp"),
-        os_type: String::from("Linux"),
-        os_release: String::from("6.8.0-secure-exec"),
-        os_version: String::from("#1 SMP PREEMPT_DYNAMIC secure-exec"),
-        os_machine: String::from("x86_64"),
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use secure_exec_kernel::resource_accounting::ResourceLimits;
-    use secure_exec_kernel::user::{UserConfig, UserManager};
-
-    #[test]
-    fn builds_guest_identity_from_kernel_user_and_limits() {
-        let user = UserManager::from_config(UserConfig {
-            uid: Some(501),
-            gid: Some(20),
-            username: Some(String::from("runner")),
-            homedir: Some(String::from("/Users/runner")),
-            shell: Some(String::from("/bin/zsh")),
-            ..UserConfig::default()
-        });
-        let limits = ResourceLimits {
-            virtual_cpu_count: Some(6),
-            max_wasm_memory_bytes: Some(512 * 1024 * 1024),
-            ..ResourceLimits::default()
-        };
-
-        let identity = shared_guest_runtime_identity(&user, &limits, Some(42), Some(1));
-
-        assert_eq!(identity.virtual_pid, Some(42));
-        assert_eq!(identity.virtual_ppid, Some(1));
-        assert_eq!(identity.virtual_uid, 501);
-        assert_eq!(identity.virtual_gid, 20);
-        assert_eq!(identity.process_platform, "linux");
-        assert_eq!(identity.process_arch, "x64");
-        assert_eq!(identity.os_cpu_count, 6);
-        assert_eq!(identity.os_totalmem, 512 * 1024 * 1024);
-        assert_eq!(identity.os_homedir, "/Users/runner");
-        assert_eq!(identity.os_hostname, "secure-exec");
-        assert_eq!(identity.os_shell, "/bin/zsh");
-        assert_eq!(identity.os_user, "runner");
-        assert_eq!(identity.os_tmpdir, "/tmp");
-        assert_eq!(identity.os_type, "Linux");
-        assert_eq!(identity.os_release, "6.8.0-secure-exec");
-        assert_eq!(identity.os_version, "#1 SMP PREEMPT_DYNAMIC secure-exec");
-        assert_eq!(identity.os_machine, "x86_64");
-    }
-}
diff --git a/crates/sidecar-core/src/layers.rs b/crates/sidecar-core/src/layers.rs
deleted file mode 100644
index b24ef842e..000000000
--- a/crates/sidecar-core/src/layers.rs
+++ /dev/null
@@ -1,293 +0,0 @@
-use crate::SidecarCoreError;
-use secure_exec_kernel::root_fs::{
-    FilesystemEntry, FilesystemEntryKind, RootFileSystem,
-    RootFilesystemDescriptor as KernelRootFilesystemDescriptor,
-    RootFilesystemMode as KernelRootFilesystemMode, RootFilesystemSnapshot,
-};
-use std::collections::{BTreeMap, BTreeSet};
-
-pub const MAX_VM_LAYERS: usize = 256;
-
-#[derive(Debug)]
-pub struct VmLayerStore {
-    next_layer_id: u64,
-    layers: BTreeMap<String, VmLayer>,
-}
-
-impl Default for VmLayerStore {
-    fn default() -> Self {
-        Self {
-            next_layer_id: 1,
-            layers: BTreeMap::new(),
-        }
-    }
-}
-
-#[derive(Debug)]
-enum VmLayer {
-    Writable(RootFileSystem),
-    Snapshot(RootFilesystemSnapshot),
-    Overlay(VmOverlayLayer),
-}
-
-#[derive(Debug, Clone)]
-struct VmOverlayLayer {
-    mode: KernelRootFilesystemMode,
-    upper_layer_id: Option<String>,
-    lower_layer_ids: Vec<String>,
-}
-
-impl VmLayerStore {
-    pub fn layer_count(&self) -> usize {
-        self.layers.len()
-    }
-
-    pub fn create_writable_layer(&mut self) -> Result<String, SidecarCoreError> {
-        self.ensure_layer_capacity()?;
-        let filesystem = new_writable_layer()?;
-        let layer_id = self.allocate_layer_id()?;
-        self.layers
-            .insert(layer_id.clone(), VmLayer::Writable(filesystem));
-        Ok(layer_id)
-    }
-
-    pub fn seal_layer(&mut self, layer_id: &str) -> Result<String, SidecarCoreError> {
-        let snapshot = match self.layers.get_mut(layer_id) {
-            Some(VmLayer::Writable(filesystem)) => filesystem
-                .snapshot()
-                .map_err(|error| SidecarCoreError::new(format!("seal layer: {error}")))?,
-            Some(VmLayer::Snapshot(_)) | Some(VmLayer::Overlay(_)) => {
-                return Err(SidecarCoreError::new(format!(
-                    "layer {layer_id} is not writable"
-                )));
-            }
-            None => return Err(SidecarCoreError::new(format!("unknown layer: {layer_id}"))),
-        };
-        let sealed_layer_id = self.allocate_layer_id()?;
-        match self
-            .layers
-            .remove(layer_id)
-            .expect("layer should still exist after snapshot")
-        {
-            VmLayer::Writable(_) => {}
-            VmLayer::Snapshot(_) | VmLayer::Overlay(_) => {
-                return Err(SidecarCoreError::new(format!(
-                    "layer {layer_id} is not writable"
-                )));
-            }
-        }
-        self.layers
-            .insert(sealed_layer_id.clone(), VmLayer::Snapshot(snapshot));
-        Ok(sealed_layer_id)
-    }
-
-    pub fn import_snapshot(
-        &mut self,
-        snapshot: RootFilesystemSnapshot,
-    ) -> Result<String, SidecarCoreError> {
-        self.ensure_layer_capacity()?;
-        let layer_id = self.allocate_layer_id()?;
-        self.layers
-            .insert(layer_id.clone(), VmLayer::Snapshot(snapshot));
-        Ok(layer_id)
-    }
-
-    pub fn export_snapshot(
-        &mut self,
-        layer_id: &str,
-    ) -> Result<RootFilesystemSnapshot, SidecarCoreError> {
-        materialize_vm_layer_snapshot(self, layer_id)
-    }
-
-    pub fn create_overlay_layer(
-        &mut self,
-        mode: KernelRootFilesystemMode,
-        upper_layer_id: Option<String>,
-        lower_layer_ids: Vec<String>,
-    ) -> Result<String, SidecarCoreError> {
-        self.ensure_layer_capacity()?;
-        for layer_id in &lower_layer_ids {
-            if !self.layers.contains_key(layer_id) {
-                return Err(SidecarCoreError::new(format!(
-                    "unknown lower layer: {layer_id}"
-                )));
-            }
-        }
-        if let Some(layer_id) = upper_layer_id.as_ref() {
-            if !self.layers.contains_key(layer_id) {
-                return Err(SidecarCoreError::new(format!(
-                    "unknown upper layer: {layer_id}"
-                )));
-            }
-        }
-
-        let layer_id = self.allocate_layer_id()?;
-        self.layers.insert(
-            layer_id.clone(),
-            VmLayer::Overlay(VmOverlayLayer {
-                mode,
-                upper_layer_id,
-                lower_layer_ids,
-            }),
-        );
-        Ok(layer_id)
-    }
-
-    fn ensure_layer_capacity(&self) -> Result<(), SidecarCoreError> {
-        if self.layers.len() >= MAX_VM_LAYERS {
-            return Err(SidecarCoreError::new(format!(
-                "VM layer limit exceeded: limit is {MAX_VM_LAYERS}"
-            )));
-        }
-        Ok(())
-    }
-
-    fn allocate_layer_id(&mut self) -> Result<String, SidecarCoreError> {
-        let layer_id = format!("layer-{}", self.next_layer_id);
-        self.next_layer_id = self
-            .next_layer_id
-            .checked_add(1)
-            .ok_or_else(|| SidecarCoreError::new("VM layer id overflow"))?;
-        Ok(layer_id)
-    }
-}
-
-fn new_writable_layer() -> Result<RootFileSystem, SidecarCoreError> {
-    RootFileSystem::from_descriptor(KernelRootFilesystemDescriptor {
-        mode: KernelRootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: Vec::new(),
-        bootstrap_entries: Vec::new(),
-    })
-    .map_err(|error| SidecarCoreError::new(format!("create writable layer: {error}")))
-}
-
-fn materialize_vm_layer_snapshot(
-    layers: &mut VmLayerStore,
-    layer_id: &str,
-) -> Result<RootFilesystemSnapshot, SidecarCoreError> {
-    materialize_vm_layer_snapshot_inner(layers, layer_id, &mut BTreeSet::new())
-}
-
-fn materialize_vm_layer_snapshot_inner(
-    layers: &mut VmLayerStore,
-    layer_id: &str,
-    active: &mut BTreeSet<String>,
-) -> Result<RootFilesystemSnapshot, SidecarCoreError> {
-    if !active.insert(layer_id.to_owned()) {
-        return Err(SidecarCoreError::new(format!(
-            "layer graph cycle detected at {layer_id}"
-        )));
-    }
-
-    let result = if let Some(VmLayer::Snapshot(snapshot)) = layers.layers.get(layer_id) {
-        Ok(snapshot.clone())
-    } else if let Some(VmLayer::Overlay(overlay)) = layers.layers.get(layer_id) {
-        let overlay = overlay.clone();
-        let lowers = overlay
-            .lower_layer_ids
-            .iter()
-            .map(|lower_id| materialize_vm_layer_snapshot_inner(layers, lower_id, active))
-            .collect::<Result<Vec<_>, _>>()?;
-        let bootstrap_entries = match overlay.upper_layer_id.as_deref() {
-            Some(upper_layer_id) => dedupe_overlay_bootstrap_entries(
-                &lowers,
-                materialize_vm_layer_snapshot_inner(layers, upper_layer_id, active)?.entries,
-            ),
-            None => Vec::new(),
-        };
-        let mut root = RootFileSystem::from_descriptor(KernelRootFilesystemDescriptor {
-            mode: overlay.mode,
-            disable_default_base_layer: true,
-            lowers,
-            bootstrap_entries,
-        })
-        .map_err(|error| SidecarCoreError::new(format!("materialize overlay layer: {error}")))?;
-        root.snapshot()
-            .map_err(|error| SidecarCoreError::new(format!("snapshot overlay layer: {error}")))
-    } else if let Some(VmLayer::Writable(filesystem)) = layers.layers.get_mut(layer_id) {
-        filesystem
-            .snapshot()
-            .map_err(|error| SidecarCoreError::new(format!("snapshot writable layer: {error}")))
-    } else {
-        Err(SidecarCoreError::new(format!("unknown layer: {layer_id}")))
-    };
-
-    active.remove(layer_id);
-    result
-}
-
-fn dedupe_overlay_bootstrap_entries(
-    lowers: &[RootFilesystemSnapshot],
-    upper_entries: Vec<FilesystemEntry>,
-) -> Vec<FilesystemEntry> {
-    let mut lower_paths = lowers
-        .iter()
-        .flat_map(|snapshot| snapshot.entries.iter().map(|entry| entry.path.clone()))
-        .collect::<BTreeSet<_>>();
-
-    upper_entries
-        .into_iter()
-        .filter(|entry| {
-            if lower_paths.contains(&entry.path)
-                && matches!(entry.kind, FilesystemEntryKind::Directory)
-            {
-                return false;
-            }
-            lower_paths.insert(entry.path.clone());
-            true
-        })
-        .collect()
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn imports_exports_and_overlays_snapshots() {
-        let mut layers = VmLayerStore::default();
-        let lower = layers
-            .import_snapshot(RootFilesystemSnapshot {
-                entries: vec![FilesystemEntry::file("/value.txt", b"lower".to_vec())],
-            })
-            .expect("import lower");
-        let upper = layers
-            .import_snapshot(RootFilesystemSnapshot {
-                entries: vec![FilesystemEntry::file("/extra.txt", b"upper".to_vec())],
-            })
-            .expect("import upper");
-        let overlay = layers
-            .create_overlay_layer(
-                KernelRootFilesystemMode::Ephemeral,
-                Some(upper),
-                vec![lower],
-            )
-            .expect("create overlay");
-
-        let snapshot = layers.export_snapshot(&overlay).expect("export overlay");
-        assert!(snapshot
-            .entries
-            .iter()
-            .any(|entry| entry.path == "/value.txt"));
-        assert!(snapshot
-            .entries
-            .iter()
-            .any(|entry| entry.path == "/extra.txt"));
-    }
-
-    #[test]
-    fn sealing_non_writable_layer_is_rejected() {
-        let mut layers = VmLayerStore::default();
-        let layer = layers
-            .import_snapshot(RootFilesystemSnapshot {
-                entries: Vec::new(),
-            })
-            .expect("import snapshot");
-
-        let error = layers
-            .seal_layer(&layer)
-            .expect_err("snapshot layer should not seal");
-        assert!(error.to_string().contains("is not writable"));
-    }
-}
diff --git a/crates/sidecar-core/src/lib.rs b/crates/sidecar-core/src/lib.rs
index 929a33e18..201c7407d 100644
--- a/crates/sidecar-core/src/lib.rs
+++ b/crates/sidecar-core/src/lib.rs
@@ -1,98 +1,3 @@
-#![forbid(unsafe_code)]
+//! Compatibility shim for `agentos-native-sidecar-core`.
 
-//! Backend-agnostic sidecar logic shared by native and browser shells.
-
-pub mod bridge_bytes;
-pub mod diagnostics;
-pub mod frames;
-pub mod guest_fs;
-pub mod guest_net;
-pub mod guest_pty;
-pub mod identity;
-pub mod layers;
-pub mod limits;
-pub mod net;
-pub mod permissions;
-pub mod root_fs;
-pub mod router;
-pub mod signals;
-pub mod tools;
-pub mod vm_fetch;
-
-pub use bridge_bytes::{
-    bridge_buffer_value, decode_base64, decode_bridge_buffer_value, decode_encoded_bytes_value,
-    encoded_bytes_value,
-};
-pub use diagnostics::{
-    process_snapshot_entry_from_kernel, process_status_from_kernel,
-    protocol_process_snapshot_entry, SharedProcessSnapshotEntry, SharedProcessSnapshotStatus,
-};
-pub use frames::{
-    authenticated_response, bound_udp_snapshot_response, event, layer_created_response,
-    layer_sealed_response, listener_snapshot_response, overlay_created_response,
-    package_linked_response, process_exited_event, process_killed_response, process_output_event,
-    process_snapshot_response, process_started_response, provided_commands_response, reject,
-    respond, response_with_ownership, root_filesystem_bootstrapped_response,
-    root_filesystem_snapshot_response, session_opened_response, signal_state_response,
-    snapshot_exported_response, snapshot_imported_response, stdin_closed_response,
-    stdin_written_response, unsupported_guest_kernel_call_detail,
-    unsupported_guest_kernel_call_event, validate_authenticate_versions, vm_configured_response,
-    vm_created_response, vm_disposed_response, vm_lifecycle_event, zombie_timer_count_response,
-    AuthenticateVersionError, DispatchResult, UNSUPPORTED_GUEST_KERNEL_CALL_EVENT,
-};
-pub use guest_fs::{
-    decode_guest_filesystem_content, empty_guest_filesystem_response,
-    encode_guest_filesystem_content, guest_filesystem_stat, handle_guest_filesystem_call,
-    targeted_guest_filesystem_response,
-};
-pub use guest_net::handle_guest_kernel_call;
-pub use identity::{shared_guest_runtime_identity, SharedGuestRuntimeIdentity};
-pub use layers::{VmLayerStore, MAX_VM_LAYERS};
-pub use limits::{
-    validate_vm_limits, virtual_os_cpu_count, virtual_os_freemem_bytes, virtual_os_totalmem_bytes,
-    vm_limits_from_config, AcpLimits, HttpLimits, JsRuntimeLimits, PluginLimits, PythonLimits,
-    ToolLimits, VmLimits, WasmLimits,
-};
-pub use net::{
-    local_endpoint_value, remote_endpoint_value, socket_addr_family, socket_address_value,
-    tcp_socket_info_value, unix_socket_info_value,
-};
-pub use permissions::{
-    allow_all_policy, deny_all_policy, environment_permission_capability,
-    evaluate_permissions_policy, filesystem_permission_capability, fs_permission_capability,
-    network_permission_capability, permission_mode_to_kernel_decision, permissions_from_policy,
-    validate_permissions_policy,
-};
-pub use root_fs::{
-    apply_root_filesystem_entry, build_root_filesystem, build_root_filesystem_with_loaded_snapshot,
-    build_root_mount_table, build_root_mount_table_with_loaded_snapshot,
-    convert_root_filesystem_entry, protocol_root_filesystem_mode,
-    root_filesystem_descriptor_from_config, root_filesystem_mode_from_config,
-    root_filesystem_protocol_descriptor_from_config, root_snapshot_entry,
-    root_snapshot_from_entries, SidecarCoreError,
-};
-pub use router::{
-    connection_id_of, generated_wire_blocking_extension_interrupt, request_dispatch_mode,
-    request_is_unsupported_host_callback_direction, route_request_payload, session_scope_of,
-    unsupported_host_callback_direction_dispatch, vm_id_of, BlockingExtensionInterrupt,
-    RequestDispatchMode, RequestRoute, UNSUPPORTED_HOST_CALLBACK_DIRECTION_CODE,
-    UNSUPPORTED_HOST_CALLBACK_DIRECTION_MESSAGE,
-};
-pub use signals::{
-    apply_process_signal_state_update, canonical_signal_name, default_signal_exit_code,
-    execution_signal_from_number, execution_signal_to_kernel, is_valid_posix_signal_number,
-    parse_posix_signal, parse_process_signal_state_request, signal_number_from_name,
-};
-pub use tools::{
-    ensure_command_aliases_available, ensure_toolkit_name_available,
-    ensure_toolkit_registry_capacity, registered_tool_command_names, validate_toolkit_registration,
-    ToolRegistrationError, DEFAULT_TOOL_TIMEOUT_MS, MAX_REGISTERED_TOOLKITS,
-    MAX_REGISTERED_TOOLS_PER_VM, MAX_TOOLKIT_NAME_LENGTH, MAX_TOOLS_PER_TOOLKIT,
-    MAX_TOOL_DESCRIPTION_LENGTH, MAX_TOOL_EXAMPLES_PER_TOOL, MAX_TOOL_EXAMPLE_INPUT_BYTES,
-    MAX_TOOL_NAME_LENGTH, MAX_TOOL_SCHEMA_BYTES, MAX_TOOL_SCHEMA_DEPTH, MAX_TOOL_TIMEOUT_MS,
-};
-pub use vm_fetch::{
-    ensure_vm_fetch_raw_response_buffer_within_limit, ensure_vm_fetch_response_within_limit,
-    parse_kernel_http_fetch_response, serialize_kernel_http_fetch_request,
-    VM_FETCH_BUFFER_LIMIT_BYTES,
-};
+pub use agentos_native_sidecar_core::*;
diff --git a/crates/sidecar-core/src/limits.rs b/crates/sidecar-core/src/limits.rs
deleted file mode 100644
index b10bd3b02..000000000
--- a/crates/sidecar-core/src/limits.rs
+++ /dev/null
@@ -1,704 +0,0 @@
-//! Typed, operator-tunable VM-scoped runtime limits.
-//!
-//! `VmLimits` is the single home for runtime bounds that operators may tune through the typed
-//! create-VM JSON config. Every field is a concrete value (not `Option`): the `Default` impls own
-//! the numbers and they are byte-identical to the historical hardcoded constants, so behavior is
-//! unchanged unless an operator overrides a config field.
-
-use secure_exec_kernel::resource_accounting::ResourceLimits;
-use secure_exec_vm_config::{ResourceLimitsConfig, VmLimitsConfig};
-
-use crate::SidecarCoreError;
-
-/// Default cap on `vm.fetch()` buffered response bodies. Historically aliased to the wire frame
-/// cap; decoupled here but still validated to stay within the negotiated frame budget.
-pub const DEFAULT_MAX_FETCH_RESPONSE_BYTES: usize = 1024 * 1024;
-
-pub const DEFAULT_TOOL_TIMEOUT_MS: u64 = 30_000;
-pub const MAX_TOOL_TIMEOUT_MS: u64 = 300_000;
-pub const MAX_REGISTERED_TOOLKITS: usize = 64;
-pub const MAX_REGISTERED_TOOLS_PER_VM: usize = 256;
-pub const MAX_TOOLS_PER_TOOLKIT: usize = 64;
-pub const MAX_TOOL_SCHEMA_BYTES: usize = 16 * 1024;
-pub const MAX_TOOL_EXAMPLES_PER_TOOL: usize = 16;
-pub const MAX_TOOL_EXAMPLE_INPUT_BYTES: usize = 4 * 1024;
-
-pub const MAX_PERSISTED_MANIFEST_BYTES: usize = 64 * 1024 * 1024;
-pub const MAX_PERSISTED_MANIFEST_FILE_BYTES: u64 = 1024 * 1024 * 1024;
-
-pub const DEFAULT_ACP_MAX_READ_LINE_BYTES: usize = 16 * 1024 * 1024;
-pub const DEFAULT_ACP_STDOUT_BUFFER_BYTE_LIMIT: usize = 1024 * 1024;
-
-pub const DEFAULT_JS_CAPTURED_OUTPUT_LIMIT_BYTES: usize = 16 * 1024 * 1024;
-pub const DEFAULT_JS_STDIN_BUFFER_LIMIT_BYTES: usize = 16 * 1024 * 1024;
-pub const DEFAULT_JS_EVENT_PAYLOAD_LIMIT_BYTES: usize = 1024 * 1024;
-pub const DEFAULT_V8_IPC_MAX_FRAME_BYTES: u32 = 64 * 1024 * 1024;
-pub const DEFAULT_V8_HEAP_LIMIT_MB: u32 = 128;
-pub const DEFAULT_V8_CPU_TIME_LIMIT_MS: u32 = 30_000;
-pub const DEFAULT_V8_WALL_CLOCK_LIMIT_MS: u32 = 0;
-pub const DEFAULT_NODE_IMPORT_CACHE_MATERIALIZE_TIMEOUT_MS: u64 = 30_000;
-
-pub const DEFAULT_PYTHON_OUTPUT_BUFFER_MAX_BYTES: usize = 1024 * 1024;
-pub const DEFAULT_PYTHON_EXECUTION_TIMEOUT_MS: u64 = 5 * 60 * 1000;
-/// `0` keeps the Pyodide runner's V8 old-space at the engine default.
-pub const DEFAULT_PYTHON_MAX_OLD_SPACE_MB: usize = 0;
-pub const DEFAULT_PYTHON_VFS_RPC_TIMEOUT_MS: u64 = 30 * 1000;
-
-pub const DEFAULT_WASM_MAX_MODULE_FILE_BYTES: u64 = 256 * 1024 * 1024;
-pub const DEFAULT_WASM_CAPTURED_OUTPUT_LIMIT_BYTES: usize = 16 * 1024 * 1024;
-pub const DEFAULT_WASM_SYNC_READ_LIMIT_BYTES: usize = 16 * 1024 * 1024;
-pub const DEFAULT_WASM_PREWARM_TIMEOUT_MS: u64 = 30_000;
-pub const DEFAULT_WASM_RUNNER_HEAP_LIMIT_MB: u32 = 2048;
-
-/// All operator-tunable VM-scoped limits. Fields are concrete values; the `Default` impls own the
-/// numbers and equal today's hardcoded constants, so unset operator config leaves behavior
-/// unchanged.
-#[derive(Debug, Clone, PartialEq, Eq, Default)]
-pub struct VmLimits {
-    /// Kernel resource limits (existing type, existing `resource.*` keys).
-    pub resources: ResourceLimits,
-    pub http: HttpLimits,
-    pub tools: ToolLimits,
-    pub plugins: PluginLimits,
-    pub acp: AcpLimits,
-    pub js_runtime: JsRuntimeLimits,
-    pub python: PythonLimits,
-    pub wasm: WasmLimits,
-}
-
-pub fn virtual_os_cpu_count(resource_limits: &ResourceLimits) -> usize {
-    resource_limits.virtual_cpu_count.unwrap_or(1).max(1)
-}
-
-pub fn virtual_os_totalmem_bytes(resource_limits: &ResourceLimits) -> u64 {
-    resource_limits
-        .max_wasm_memory_bytes
-        .unwrap_or(1024 * 1024 * 1024)
-}
-
-pub fn virtual_os_freemem_bytes(resource_limits: &ResourceLimits) -> u64 {
-    resource_limits
-        .max_wasm_memory_bytes
-        .unwrap_or(512 * 1024 * 1024)
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct HttpLimits {
-    /// Cap on `vm.fetch()` buffered response bodies. Must be `<=` the sidecar wire frame cap.
-    pub max_fetch_response_bytes: usize,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct ToolLimits {
-    pub default_tool_timeout_ms: u64,
-    pub max_tool_timeout_ms: u64,
-    pub max_registered_toolkits: usize,
-    pub max_registered_tools_per_vm: usize,
-    pub max_tools_per_toolkit: usize,
-    pub max_tool_schema_bytes: usize,
-    pub max_tool_examples_per_tool: usize,
-    pub max_tool_example_input_bytes: usize,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PluginLimits {
-    pub max_persisted_manifest_bytes: usize,
-    pub max_persisted_manifest_file_bytes: u64,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct AcpLimits {
-    /// Maximum length of a single ACP adapter stdout line. Threaded into `AcpClientOptions`.
-    pub max_read_line_bytes: usize,
-    /// Pre-session ACP adapter stdout buffer cap.
-    pub stdout_buffer_byte_limit: usize,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct JsRuntimeLimits {
-    /// `None` keeps the V8 engine default heap. Carried as the typed
-    /// `JavascriptExecutionLimits.v8_heap_limit_mb` on the execution request
-    /// (no longer the `AGENTOS_V8_HEAP_LIMIT_MB` env knob).
-    pub v8_heap_limit_mb: Option<u32>,
-    /// Sync-RPC blocking-wait ceiling in ms. `None` keeps the engine default.
-    pub sync_rpc_wait_timeout_ms: Option<u64>,
-    /// Active JavaScript CPU-time budget in ms. `0` disables the CPU watchdog.
-    pub cpu_time_limit_ms: u32,
-    /// JavaScript wall-clock backstop in ms. `0` disables the wall-clock watchdog.
-    pub wall_clock_limit_ms: u32,
-    /// Timeout for materializing the per-VM Node import cache.
-    pub import_cache_materialize_timeout_ms: u64,
-    pub captured_output_limit_bytes: usize,
-    pub stdin_buffer_limit_bytes: usize,
-    pub event_payload_limit_bytes: usize,
-    /// V8 IPC codec frame cap. Must feed both codec sides (`crates/execution/src/v8_ipc.rs` and
-    /// `crates/v8-runtime/src/ipc_binary.rs`).
-    pub v8_ipc_max_frame_bytes: u32,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PythonLimits {
-    pub output_buffer_max_bytes: usize,
-    pub execution_timeout_ms: u64,
-    /// Pyodide V8 old-space cap in MB (`0` keeps the V8 default).
-    pub max_old_space_mb: usize,
-    pub vfs_rpc_timeout_ms: u64,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct WasmLimits {
-    pub max_module_file_bytes: u64,
-    pub captured_output_limit_bytes: usize,
-    /// WASM sync read cap. Also templated into the JS runner shim, so it must flow from one field.
-    pub sync_read_limit_bytes: usize,
-    /// Best-effort warmup/compile-cache timeout.
-    pub prewarm_timeout_ms: u64,
-    /// V8 heap cap for the trusted JS runner isolate that hosts WASI/WASM.
-    pub runner_heap_limit_mb: u32,
-}
-
-impl Default for HttpLimits {
-    fn default() -> Self {
-        Self {
-            max_fetch_response_bytes: DEFAULT_MAX_FETCH_RESPONSE_BYTES,
-        }
-    }
-}
-
-impl Default for ToolLimits {
-    fn default() -> Self {
-        Self {
-            default_tool_timeout_ms: DEFAULT_TOOL_TIMEOUT_MS,
-            max_tool_timeout_ms: MAX_TOOL_TIMEOUT_MS,
-            max_registered_toolkits: MAX_REGISTERED_TOOLKITS,
-            max_registered_tools_per_vm: MAX_REGISTERED_TOOLS_PER_VM,
-            max_tools_per_toolkit: MAX_TOOLS_PER_TOOLKIT,
-            max_tool_schema_bytes: MAX_TOOL_SCHEMA_BYTES,
-            max_tool_examples_per_tool: MAX_TOOL_EXAMPLES_PER_TOOL,
-            max_tool_example_input_bytes: MAX_TOOL_EXAMPLE_INPUT_BYTES,
-        }
-    }
-}
-
-impl Default for PluginLimits {
-    fn default() -> Self {
-        Self {
-            max_persisted_manifest_bytes: MAX_PERSISTED_MANIFEST_BYTES,
-            max_persisted_manifest_file_bytes: MAX_PERSISTED_MANIFEST_FILE_BYTES,
-        }
-    }
-}
-
-impl Default for AcpLimits {
-    fn default() -> Self {
-        Self {
-            max_read_line_bytes: DEFAULT_ACP_MAX_READ_LINE_BYTES,
-            stdout_buffer_byte_limit: DEFAULT_ACP_STDOUT_BUFFER_BYTE_LIMIT,
-        }
-    }
-}
-
-impl Default for JsRuntimeLimits {
-    fn default() -> Self {
-        Self {
-            // Workers-style 128 MiB heap cap by default. Operators can raise or
-            // clear this through trusted VM config when a VM needs more room.
-            v8_heap_limit_mb: Some(DEFAULT_V8_HEAP_LIMIT_MB),
-            sync_rpc_wait_timeout_ms: None,
-            cpu_time_limit_ms: DEFAULT_V8_CPU_TIME_LIMIT_MS,
-            wall_clock_limit_ms: DEFAULT_V8_WALL_CLOCK_LIMIT_MS,
-            import_cache_materialize_timeout_ms: DEFAULT_NODE_IMPORT_CACHE_MATERIALIZE_TIMEOUT_MS,
-            captured_output_limit_bytes: DEFAULT_JS_CAPTURED_OUTPUT_LIMIT_BYTES,
-            stdin_buffer_limit_bytes: DEFAULT_JS_STDIN_BUFFER_LIMIT_BYTES,
-            event_payload_limit_bytes: DEFAULT_JS_EVENT_PAYLOAD_LIMIT_BYTES,
-            v8_ipc_max_frame_bytes: DEFAULT_V8_IPC_MAX_FRAME_BYTES,
-        }
-    }
-}
-
-impl Default for PythonLimits {
-    fn default() -> Self {
-        Self {
-            output_buffer_max_bytes: DEFAULT_PYTHON_OUTPUT_BUFFER_MAX_BYTES,
-            execution_timeout_ms: DEFAULT_PYTHON_EXECUTION_TIMEOUT_MS,
-            max_old_space_mb: DEFAULT_PYTHON_MAX_OLD_SPACE_MB,
-            vfs_rpc_timeout_ms: DEFAULT_PYTHON_VFS_RPC_TIMEOUT_MS,
-        }
-    }
-}
-
-impl Default for WasmLimits {
-    fn default() -> Self {
-        Self {
-            max_module_file_bytes: DEFAULT_WASM_MAX_MODULE_FILE_BYTES,
-            captured_output_limit_bytes: DEFAULT_WASM_CAPTURED_OUTPUT_LIMIT_BYTES,
-            sync_read_limit_bytes: DEFAULT_WASM_SYNC_READ_LIMIT_BYTES,
-            prewarm_timeout_ms: DEFAULT_WASM_PREWARM_TIMEOUT_MS,
-            runner_heap_limit_mb: DEFAULT_WASM_RUNNER_HEAP_LIMIT_MB,
-        }
-    }
-}
-
-pub fn vm_limits_from_config(
-    config: Option<&VmLimitsConfig>,
-    sidecar_max_frame_bytes: usize,
-) -> Result<VmLimits, SidecarCoreError> {
-    let mut limits = VmLimits::default();
-    let Some(config) = config else {
-        validate_vm_limits(&limits, sidecar_max_frame_bytes)?;
-        return Ok(limits);
-    };
-
-    if let Some(resources) = config.resources.as_ref() {
-        apply_resource_limits_config(&mut limits.resources, resources)?;
-    }
-    if let Some(http) = config.http.as_ref() {
-        set_usize(
-            &mut limits.http.max_fetch_response_bytes,
-            http.max_fetch_response_bytes,
-            "limits.http.maxFetchResponseBytes",
-        )?;
-    }
-    if let Some(tools) = config.tools.as_ref() {
-        set_u64(
-            &mut limits.tools.default_tool_timeout_ms,
-            tools.default_tool_timeout_ms,
-            "limits.tools.defaultToolTimeoutMs",
-        )?;
-        set_u64(
-            &mut limits.tools.max_tool_timeout_ms,
-            tools.max_tool_timeout_ms,
-            "limits.tools.maxToolTimeoutMs",
-        )?;
-        set_usize(
-            &mut limits.tools.max_registered_toolkits,
-            tools.max_registered_toolkits,
-            "limits.tools.maxRegisteredToolkits",
-        )?;
-        set_usize(
-            &mut limits.tools.max_registered_tools_per_vm,
-            tools.max_registered_tools_per_vm,
-            "limits.tools.maxRegisteredToolsPerVm",
-        )?;
-        set_usize(
-            &mut limits.tools.max_tools_per_toolkit,
-            tools.max_tools_per_toolkit,
-            "limits.tools.maxToolsPerToolkit",
-        )?;
-        set_usize(
-            &mut limits.tools.max_tool_schema_bytes,
-            tools.max_tool_schema_bytes,
-            "limits.tools.maxToolSchemaBytes",
-        )?;
-        set_usize(
-            &mut limits.tools.max_tool_examples_per_tool,
-            tools.max_tool_examples_per_tool,
-            "limits.tools.maxToolExamplesPerTool",
-        )?;
-        set_usize(
-            &mut limits.tools.max_tool_example_input_bytes,
-            tools.max_tool_example_input_bytes,
-            "limits.tools.maxToolExampleInputBytes",
-        )?;
-    }
-    if let Some(plugins) = config.plugins.as_ref() {
-        set_usize(
-            &mut limits.plugins.max_persisted_manifest_bytes,
-            plugins.max_persisted_manifest_bytes,
-            "limits.plugins.maxPersistedManifestBytes",
-        )?;
-        set_u64(
-            &mut limits.plugins.max_persisted_manifest_file_bytes,
-            plugins.max_persisted_manifest_file_bytes,
-            "limits.plugins.maxPersistedManifestFileBytes",
-        )?;
-    }
-    if let Some(acp) = config.acp.as_ref() {
-        set_usize(
-            &mut limits.acp.max_read_line_bytes,
-            acp.max_read_line_bytes,
-            "limits.acp.maxReadLineBytes",
-        )?;
-        set_usize(
-            &mut limits.acp.stdout_buffer_byte_limit,
-            acp.stdout_buffer_byte_limit,
-            "limits.acp.stdoutBufferByteLimit",
-        )?;
-    }
-    if let Some(js_runtime) = config.js_runtime.as_ref() {
-        if let Some(value) = js_runtime.v8_heap_limit_mb {
-            limits.js_runtime.v8_heap_limit_mb = Some(
-                u32::try_from(value)
-                    .map_err(|_| integer_too_large("limits.jsRuntime.v8HeapLimitMb", value))?,
-            );
-        }
-        if let Some(value) = js_runtime.cpu_time_limit_ms {
-            limits.js_runtime.cpu_time_limit_ms = u32::try_from(value)
-                .map_err(|_| integer_too_large("limits.jsRuntime.cpuTimeLimitMs", value))?;
-        }
-        if let Some(value) = js_runtime.wall_clock_limit_ms {
-            limits.js_runtime.wall_clock_limit_ms = u32::try_from(value)
-                .map_err(|_| integer_too_large("limits.jsRuntime.wallClockLimitMs", value))?;
-        }
-        set_u64(
-            &mut limits.js_runtime.import_cache_materialize_timeout_ms,
-            js_runtime.import_cache_materialize_timeout_ms,
-            "limits.jsRuntime.importCacheMaterializeTimeoutMs",
-        )?;
-        set_usize(
-            &mut limits.js_runtime.captured_output_limit_bytes,
-            js_runtime.captured_output_limit_bytes,
-            "limits.jsRuntime.capturedOutputLimitBytes",
-        )?;
-        set_usize(
-            &mut limits.js_runtime.stdin_buffer_limit_bytes,
-            js_runtime.stdin_buffer_limit_bytes,
-            "limits.jsRuntime.stdinBufferLimitBytes",
-        )?;
-        set_usize(
-            &mut limits.js_runtime.event_payload_limit_bytes,
-            js_runtime.event_payload_limit_bytes,
-            "limits.jsRuntime.eventPayloadLimitBytes",
-        )?;
-        if let Some(value) = js_runtime.v8_ipc_max_frame_bytes {
-            limits.js_runtime.v8_ipc_max_frame_bytes = u32::try_from(value)
-                .map_err(|_| integer_too_large("limits.jsRuntime.v8IpcMaxFrameBytes", value))?;
-        }
-        if let Some(value) = js_runtime.sync_rpc_wait_timeout_ms {
-            limits.js_runtime.sync_rpc_wait_timeout_ms = Some(value);
-        }
-    }
-    if let Some(python) = config.python.as_ref() {
-        set_usize(
-            &mut limits.python.output_buffer_max_bytes,
-            python.output_buffer_max_bytes,
-            "limits.python.outputBufferMaxBytes",
-        )?;
-        set_u64(
-            &mut limits.python.execution_timeout_ms,
-            python.execution_timeout_ms,
-            "limits.python.executionTimeoutMs",
-        )?;
-        set_usize(
-            &mut limits.python.max_old_space_mb,
-            python.max_old_space_mb,
-            "limits.python.maxOldSpaceMb",
-        )?;
-        set_u64(
-            &mut limits.python.vfs_rpc_timeout_ms,
-            python.vfs_rpc_timeout_ms,
-            "limits.python.vfsRpcTimeoutMs",
-        )?;
-    }
-    if let Some(wasm) = config.wasm.as_ref() {
-        set_u64(
-            &mut limits.wasm.max_module_file_bytes,
-            wasm.max_module_file_bytes,
-            "limits.wasm.maxModuleFileBytes",
-        )?;
-        set_usize(
-            &mut limits.wasm.captured_output_limit_bytes,
-            wasm.captured_output_limit_bytes,
-            "limits.wasm.capturedOutputLimitBytes",
-        )?;
-        set_usize(
-            &mut limits.wasm.sync_read_limit_bytes,
-            wasm.sync_read_limit_bytes,
-            "limits.wasm.syncReadLimitBytes",
-        )?;
-        set_u64(
-            &mut limits.wasm.prewarm_timeout_ms,
-            wasm.prewarm_timeout_ms,
-            "limits.wasm.prewarmTimeoutMs",
-        )?;
-        if let Some(value) = wasm.runner_heap_limit_mb {
-            limits.wasm.runner_heap_limit_mb = u32::try_from(value)
-                .map_err(|_| integer_too_large("limits.wasm.runnerHeapLimitMb", value))?;
-        }
-    }
-
-    validate_vm_limits(&limits, sidecar_max_frame_bytes)?;
-    Ok(limits)
-}
-
-fn apply_resource_limits_config(
-    limits: &mut ResourceLimits,
-    config: &ResourceLimitsConfig,
-) -> Result<(), SidecarCoreError> {
-    set_optional_usize(
-        &mut limits.virtual_cpu_count,
-        config.cpu_count,
-        "limits.resources.cpuCount",
-    )?;
-    set_optional_usize(
-        &mut limits.max_processes,
-        config.max_processes,
-        "limits.resources.maxProcesses",
-    )?;
-    set_optional_usize(
-        &mut limits.max_open_fds,
-        config.max_open_fds,
-        "limits.resources.maxOpenFds",
-    )?;
-    set_optional_usize(
-        &mut limits.max_pipes,
-        config.max_pipes,
-        "limits.resources.maxPipes",
-    )?;
-    set_optional_usize(
-        &mut limits.max_ptys,
-        config.max_ptys,
-        "limits.resources.maxPtys",
-    )?;
-    set_optional_usize(
-        &mut limits.max_sockets,
-        config.max_sockets,
-        "limits.resources.maxSockets",
-    )?;
-    set_optional_usize(
-        &mut limits.max_connections,
-        config.max_connections,
-        "limits.resources.maxConnections",
-    )?;
-    set_optional_usize(
-        &mut limits.max_socket_buffered_bytes,
-        config.max_socket_buffered_bytes,
-        "limits.resources.maxSocketBufferedBytes",
-    )?;
-    set_optional_usize(
-        &mut limits.max_socket_datagram_queue_len,
-        config.max_socket_datagram_queue_len,
-        "limits.resources.maxSocketDatagramQueueLen",
-    )?;
-    set_optional_u64(
-        &mut limits.max_filesystem_bytes,
-        config.max_filesystem_bytes,
-    );
-    set_optional_usize(
-        &mut limits.max_inode_count,
-        config.max_inode_count,
-        "limits.resources.maxInodeCount",
-    )?;
-    set_optional_u64(
-        &mut limits.max_blocking_read_ms,
-        config.max_blocking_read_ms,
-    );
-    set_optional_usize(
-        &mut limits.max_pread_bytes,
-        config.max_pread_bytes,
-        "limits.resources.maxPreadBytes",
-    )?;
-    set_optional_usize(
-        &mut limits.max_fd_write_bytes,
-        config.max_fd_write_bytes,
-        "limits.resources.maxFdWriteBytes",
-    )?;
-    set_optional_usize(
-        &mut limits.max_process_argv_bytes,
-        config.max_process_argv_bytes,
-        "limits.resources.maxProcessArgvBytes",
-    )?;
-    set_optional_usize(
-        &mut limits.max_process_env_bytes,
-        config.max_process_env_bytes,
-        "limits.resources.maxProcessEnvBytes",
-    )?;
-    set_optional_usize(
-        &mut limits.max_readdir_entries,
-        config.max_readdir_entries,
-        "limits.resources.maxReaddirEntries",
-    )?;
-    set_optional_usize(
-        &mut limits.max_recursive_fs_depth,
-        config.max_recursive_fs_depth,
-        "limits.resources.maxRecursiveFsDepth",
-    )?;
-    set_optional_usize(
-        &mut limits.max_recursive_fs_entries,
-        config.max_recursive_fs_entries,
-        "limits.resources.maxRecursiveFsEntries",
-    )?;
-    set_optional_u64(&mut limits.max_wasm_fuel, config.max_wasm_fuel);
-    set_optional_u64(
-        &mut limits.max_wasm_memory_bytes,
-        config.max_wasm_memory_bytes,
-    );
-    set_optional_usize(
-        &mut limits.max_wasm_stack_bytes,
-        config.max_wasm_stack_bytes,
-        "limits.resources.maxWasmStackBytes",
-    )?;
-    Ok(())
-}
-
-fn set_usize(target: &mut usize, value: Option<u64>, key: &str) -> Result<(), SidecarCoreError> {
-    if let Some(value) = value {
-        *target = usize::try_from(value).map_err(|_| integer_too_large(key, value))?;
-    }
-    Ok(())
-}
-
-fn set_u64(target: &mut u64, value: Option<u64>, _key: &str) -> Result<(), SidecarCoreError> {
-    if let Some(value) = value {
-        *target = value;
-    }
-    Ok(())
-}
-
-fn set_optional_usize(
-    target: &mut Option<usize>,
-    value: Option<u64>,
-    key: &str,
-) -> Result<(), SidecarCoreError> {
-    if let Some(value) = value {
-        *target = Some(usize::try_from(value).map_err(|_| integer_too_large(key, value))?);
-    }
-    Ok(())
-}
-
-fn set_optional_u64(target: &mut Option<u64>, value: Option<u64>) {
-    if let Some(value) = value {
-        *target = Some(value);
-    }
-}
-
-fn integer_too_large(key: &str, value: u64) -> SidecarCoreError {
-    SidecarCoreError::new(format!("{key} value {value} does not fit this platform"))
-}
-
-/// Cross-field validation. Fail-by-default: reject any configuration that would deadlock or
-/// violate the wire frame budget with an explicit, actionable message.
-pub fn validate_vm_limits(
-    limits: &VmLimits,
-    sidecar_max_frame_bytes: usize,
-) -> Result<(), SidecarCoreError> {
-    if limits.http.max_fetch_response_bytes == 0 {
-        return Err(SidecarCoreError::new(
-            "limits.http.max_fetch_response_bytes must be greater than zero".to_string(),
-        ));
-    }
-    if limits.http.max_fetch_response_bytes > sidecar_max_frame_bytes {
-        return Err(SidecarCoreError::new(format!(
-            "limits.http.max_fetch_response_bytes ({}) must be <= the sidecar wire frame cap ({})",
-            limits.http.max_fetch_response_bytes, sidecar_max_frame_bytes
-        )));
-    }
-
-    if limits.tools.default_tool_timeout_ms > limits.tools.max_tool_timeout_ms {
-        return Err(SidecarCoreError::new(format!(
-            "limits.tools.default_tool_timeout_ms ({}) must be <= limits.tools.max_tool_timeout_ms ({})",
-            limits.tools.default_tool_timeout_ms, limits.tools.max_tool_timeout_ms
-        )));
-    }
-
-    let nonzero_usize: [(&str, usize); 13] = [
-        (
-            "limits.tools.max_registered_toolkits",
-            limits.tools.max_registered_toolkits,
-        ),
-        (
-            "limits.tools.max_registered_tools_per_vm",
-            limits.tools.max_registered_tools_per_vm,
-        ),
-        (
-            "limits.tools.max_tools_per_toolkit",
-            limits.tools.max_tools_per_toolkit,
-        ),
-        (
-            "limits.tools.max_tool_schema_bytes",
-            limits.tools.max_tool_schema_bytes,
-        ),
-        (
-            "limits.tools.max_tool_example_input_bytes",
-            limits.tools.max_tool_example_input_bytes,
-        ),
-        (
-            "limits.plugins.max_persisted_manifest_bytes",
-            limits.plugins.max_persisted_manifest_bytes,
-        ),
-        (
-            "limits.acp.max_read_line_bytes",
-            limits.acp.max_read_line_bytes,
-        ),
-        (
-            "limits.acp.stdout_buffer_byte_limit",
-            limits.acp.stdout_buffer_byte_limit,
-        ),
-        (
-            "limits.js_runtime.captured_output_limit_bytes",
-            limits.js_runtime.captured_output_limit_bytes,
-        ),
-        (
-            "limits.js_runtime.stdin_buffer_limit_bytes",
-            limits.js_runtime.stdin_buffer_limit_bytes,
-        ),
-        (
-            "limits.js_runtime.event_payload_limit_bytes",
-            limits.js_runtime.event_payload_limit_bytes,
-        ),
-        (
-            "limits.python.output_buffer_max_bytes",
-            limits.python.output_buffer_max_bytes,
-        ),
-        (
-            "limits.wasm.captured_output_limit_bytes",
-            limits.wasm.captured_output_limit_bytes,
-        ),
-    ];
-    for (key, value) in nonzero_usize {
-        if value == 0 {
-            return Err(SidecarCoreError::new(format!(
-                "{key} must be greater than zero"
-            )));
-        }
-    }
-
-    if limits.wasm.sync_read_limit_bytes == 0 {
-        return Err(SidecarCoreError::new(
-            "limits.wasm.sync_read_limit_bytes must be greater than zero".to_string(),
-        ));
-    }
-    if limits.wasm.prewarm_timeout_ms == 0 {
-        return Err(SidecarCoreError::new(
-            "limits.wasm.prewarm_timeout_ms must be greater than zero".to_string(),
-        ));
-    }
-    if limits.wasm.runner_heap_limit_mb == 0 {
-        return Err(SidecarCoreError::new(
-            "limits.wasm.runner_heap_limit_mb must be greater than zero".to_string(),
-        ));
-    }
-    if limits.wasm.max_module_file_bytes == 0 {
-        return Err(SidecarCoreError::new(
-            "limits.wasm.max_module_file_bytes must be greater than zero".to_string(),
-        ));
-    }
-    if limits.js_runtime.v8_ipc_max_frame_bytes == 0 {
-        return Err(SidecarCoreError::new(
-            "limits.js_runtime.v8_ipc_max_frame_bytes must be greater than zero".to_string(),
-        ));
-    }
-    if limits.python.execution_timeout_ms == 0 {
-        return Err(SidecarCoreError::new(
-            "limits.python.execution_timeout_ms must be greater than zero".to_string(),
-        ));
-    }
-    if limits.python.vfs_rpc_timeout_ms == 0 {
-        return Err(SidecarCoreError::new(
-            "limits.python.vfs_rpc_timeout_ms must be greater than zero".to_string(),
-        ));
-    }
-    if let Some(0) = limits.js_runtime.v8_heap_limit_mb {
-        return Err(SidecarCoreError::new(
-            "limits.js_runtime.v8_heap_limit_mb must be greater than zero".to_string(),
-        ));
-    }
-    if limits.js_runtime.import_cache_materialize_timeout_ms == 0 {
-        return Err(SidecarCoreError::new(
-            "limits.js_runtime.import_cache_materialize_timeout_ms must be greater than zero"
-                .to_string(),
-        ));
-    }
-
-    Ok(())
-}
diff --git a/crates/sidecar-core/src/net.rs b/crates/sidecar-core/src/net.rs
deleted file mode 100644
index 9eb626a4a..000000000
--- a/crates/sidecar-core/src/net.rs
+++ /dev/null
@@ -1,98 +0,0 @@
-use serde_json::{json, Value};
-use std::net::SocketAddr;
-
-pub fn socket_addr_family(addr: &SocketAddr) -> &'static str {
-    match addr {
-        SocketAddr::V4(_) => "IPv4",
-        SocketAddr::V6(_) => "IPv6",
-    }
-}
-
-pub fn socket_address_value(addr: &SocketAddr) -> Value {
-    json!({
-        "address": addr.ip().to_string(),
-        "family": socket_addr_family(addr),
-        "port": addr.port(),
-    })
-}
-
-pub fn local_endpoint_value(addr: &SocketAddr) -> Value {
-    json!({
-        "localAddress": addr.ip().to_string(),
-        "localPort": addr.port(),
-        "family": socket_addr_family(addr),
-    })
-}
-
-pub fn remote_endpoint_value(addr: &SocketAddr, port: u16) -> Value {
-    json!({
-        "remoteAddress": addr.ip().to_string(),
-        "remotePort": port,
-        "remoteFamily": socket_addr_family(addr),
-    })
-}
-
-pub fn tcp_socket_info_value(local: &SocketAddr, remote: &SocketAddr) -> Value {
-    json!({
-        "localAddress": local.ip().to_string(),
-        "localPort": local.port(),
-        "localFamily": socket_addr_family(local),
-        "remoteAddress": remote.ip().to_string(),
-        "remotePort": remote.port(),
-        "remoteFamily": socket_addr_family(remote),
-    })
-}
-
-pub fn unix_socket_info_value(local_path: Option<&str>, remote_path: Option<&str>) -> Value {
-    json!({
-        "localPath": local_path,
-        "remotePath": remote_path,
-    })
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::net::{IpAddr, Ipv4Addr, Ipv6Addr};
-
-    #[test]
-    fn formats_socket_families() {
-        assert_eq!(
-            socket_addr_family(&SocketAddr::new(IpAddr::V4(Ipv4Addr::LOCALHOST), 1)),
-            "IPv4"
-        );
-        assert_eq!(
-            socket_addr_family(&SocketAddr::new(IpAddr::V6(Ipv6Addr::LOCALHOST), 1)),
-            "IPv6"
-        );
-    }
-
-    #[test]
-    fn formats_tcp_socket_info() {
-        let local = SocketAddr::new(IpAddr::V4(Ipv4Addr::LOCALHOST), 1234);
-        let remote = SocketAddr::new(IpAddr::V4(Ipv4Addr::new(10, 0, 0, 1)), 80);
-
-        assert_eq!(
-            tcp_socket_info_value(&local, &remote),
-            json!({
-                "localAddress": "127.0.0.1",
-                "localPort": 1234,
-                "localFamily": "IPv4",
-                "remoteAddress": "10.0.0.1",
-                "remotePort": 80,
-                "remoteFamily": "IPv4",
-            })
-        );
-    }
-
-    #[test]
-    fn formats_unix_socket_info() {
-        assert_eq!(
-            unix_socket_info_value(Some("/tmp/server.sock"), Some("/tmp/client.sock")),
-            json!({
-                "localPath": "/tmp/server.sock",
-                "remotePath": "/tmp/client.sock",
-            })
-        );
-    }
-}
diff --git a/crates/sidecar-core/src/permissions.rs b/crates/sidecar-core/src/permissions.rs
deleted file mode 100644
index 6413106b2..000000000
--- a/crates/sidecar-core/src/permissions.rs
+++ /dev/null
@@ -1,636 +0,0 @@
-use crate::root_fs::SidecarCoreError;
-use secure_exec_bridge::FilesystemAccess;
-use secure_exec_kernel::permissions::{
-    permission_glob_matches, CommandAccessRequest, EnvAccessRequest, EnvironmentOperation,
-    FsAccessRequest, FsOperation, NetworkAccessRequest, NetworkOperation, PermissionDecision,
-    Permissions,
-};
-use secure_exec_vm_config as vm_config;
-use std::sync::Arc;
-
-pub fn deny_all_policy() -> vm_config::PermissionsPolicy {
-    vm_config::PermissionsPolicy {
-        fs: Some(vm_config::FsPermissionScope::Mode(
-            vm_config::PermissionMode::Deny,
-        )),
-        network: Some(vm_config::PatternPermissionScope::Mode(
-            vm_config::PermissionMode::Deny,
-        )),
-        child_process: Some(vm_config::PatternPermissionScope::Mode(
-            vm_config::PermissionMode::Deny,
-        )),
-        process: Some(vm_config::PatternPermissionScope::Mode(
-            vm_config::PermissionMode::Deny,
-        )),
-        env: Some(vm_config::PatternPermissionScope::Mode(
-            vm_config::PermissionMode::Deny,
-        )),
-        binding: Some(vm_config::PatternPermissionScope::Mode(
-            vm_config::PermissionMode::Deny,
-        )),
-    }
-}
-
-pub fn allow_all_policy() -> vm_config::PermissionsPolicy {
-    vm_config::PermissionsPolicy {
-        fs: Some(vm_config::FsPermissionScope::Mode(
-            vm_config::PermissionMode::Allow,
-        )),
-        network: Some(vm_config::PatternPermissionScope::Mode(
-            vm_config::PermissionMode::Allow,
-        )),
-        child_process: Some(vm_config::PatternPermissionScope::Mode(
-            vm_config::PermissionMode::Allow,
-        )),
-        process: Some(vm_config::PatternPermissionScope::Mode(
-            vm_config::PermissionMode::Allow,
-        )),
-        env: Some(vm_config::PatternPermissionScope::Mode(
-            vm_config::PermissionMode::Allow,
-        )),
-        binding: Some(vm_config::PatternPermissionScope::Mode(
-            vm_config::PermissionMode::Allow,
-        )),
-    }
-}
-
-pub fn evaluate_permissions_policy(
-    permissions: &vm_config::PermissionsPolicy,
-    domain: &str,
-    capability: &str,
-    resource: Option<&str>,
-) -> vm_config::PermissionMode {
-    match domain {
-        "fs" => evaluate_fs_permission_scope(
-            permissions.fs.as_ref(),
-            capability_operation(capability, domain),
-            resource,
-        ),
-        "network" => evaluate_pattern_permission_scope(
-            permissions.network.as_ref(),
-            capability_operation(capability, domain),
-            resource,
-        ),
-        "child_process" => evaluate_pattern_permission_scope(
-            permissions.child_process.as_ref(),
-            capability_operation(capability, domain),
-            resource,
-        ),
-        "process" => evaluate_pattern_permission_scope(
-            permissions.process.as_ref(),
-            capability_operation(capability, domain),
-            resource,
-        ),
-        "env" => evaluate_pattern_permission_scope(
-            permissions.env.as_ref(),
-            capability_operation(capability, domain),
-            resource,
-        ),
-        "binding" => evaluate_pattern_permission_scope(
-            permissions.binding.as_ref(),
-            capability_operation(capability, domain),
-            resource,
-        ),
-        _ => vm_config::PermissionMode::Deny,
-    }
-}
-
-fn evaluate_fs_permission_scope(
-    scope: Option<&vm_config::FsPermissionScope>,
-    operation: &str,
-    resource: Option<&str>,
-) -> vm_config::PermissionMode {
-    match scope {
-        Some(vm_config::FsPermissionScope::Mode(mode)) => *mode,
-        Some(vm_config::FsPermissionScope::Rules(rules)) => {
-            let mut mode = rules.default.unwrap_or(vm_config::PermissionMode::Deny);
-            for rule in &rules.rules {
-                if fs_rule_matches(rule, operation, resource) {
-                    mode = rule.mode;
-                }
-            }
-            mode
-        }
-        None => vm_config::PermissionMode::Deny,
-    }
-}
-
-fn evaluate_pattern_permission_scope(
-    scope: Option<&vm_config::PatternPermissionScope>,
-    operation: &str,
-    resource: Option<&str>,
-) -> vm_config::PermissionMode {
-    match scope {
-        Some(vm_config::PatternPermissionScope::Mode(mode)) => *mode,
-        Some(vm_config::PatternPermissionScope::Rules(rules)) => {
-            let mut mode = rules.default.unwrap_or(vm_config::PermissionMode::Deny);
-            for rule in &rules.rules {
-                if pattern_rule_matches(rule, operation, resource) {
-                    mode = rule.mode;
-                }
-            }
-            mode
-        }
-        None => vm_config::PermissionMode::Deny,
-    }
-}
-
-fn fs_rule_matches(
-    rule: &vm_config::FsPermissionRule,
-    operation: &str,
-    resource: Option<&str>,
-) -> bool {
-    let operations_match = permission_operation_matches(&rule.operations, operation);
-    let paths_match = permission_resource_matches(&rule.paths, resource);
-    operations_match && paths_match
-}
-
-fn pattern_rule_matches(
-    rule: &vm_config::PatternPermissionRule,
-    operation: &str,
-    resource: Option<&str>,
-) -> bool {
-    let operations_match = permission_operation_matches(&rule.operations, operation);
-    let patterns_match = permission_resource_matches(&rule.patterns, resource);
-    operations_match && patterns_match
-}
-
-fn permission_operation_matches(candidates: &[String], operation: &str) -> bool {
-    candidates
-        .iter()
-        .any(|candidate| candidate == "*" || candidate == operation)
-}
-
-fn permission_resource_matches(patterns: &[String], resource: Option<&str>) -> bool {
-    resource.is_some_and(|value| {
-        patterns
-            .iter()
-            .any(|pattern| permission_glob_matches(pattern, value))
-    })
-}
-
-pub fn validate_permissions_policy(
-    permissions: &vm_config::PermissionsPolicy,
-) -> Result<(), SidecarCoreError> {
-    if let Some(scope) = permissions.fs.as_ref() {
-        validate_fs_permission_scope("fs", scope)?;
-    }
-    if let Some(scope) = permissions.network.as_ref() {
-        validate_pattern_permission_scope("network", scope)?;
-    }
-    if let Some(scope) = permissions.child_process.as_ref() {
-        validate_pattern_permission_scope("child_process", scope)?;
-    }
-    if let Some(scope) = permissions.process.as_ref() {
-        validate_pattern_permission_scope("process", scope)?;
-    }
-    if let Some(scope) = permissions.env.as_ref() {
-        validate_pattern_permission_scope("env", scope)?;
-    }
-    if let Some(scope) = permissions.binding.as_ref() {
-        validate_pattern_permission_scope("binding", scope)?;
-    }
-    Ok(())
-}
-
-fn validate_fs_permission_scope(
-    domain: &str,
-    scope: &vm_config::FsPermissionScope,
-) -> Result<(), SidecarCoreError> {
-    let vm_config::FsPermissionScope::Rules(rule_set) = scope else {
-        return Ok(());
-    };
-
-    for (index, rule) in rule_set.rules.iter().enumerate() {
-        validate_permission_rule_field(
-            &rule.operations,
-            &format!("{domain}.rules[{index}].operations"),
-        )?;
-        validate_permission_rule_field(&rule.paths, &format!("{domain}.rules[{index}].paths"))?;
-    }
-
-    Ok(())
-}
-
-fn validate_pattern_permission_scope(
-    domain: &str,
-    scope: &vm_config::PatternPermissionScope,
-) -> Result<(), SidecarCoreError> {
-    let vm_config::PatternPermissionScope::Rules(rule_set) = scope else {
-        return Ok(());
-    };
-
-    for (index, rule) in rule_set.rules.iter().enumerate() {
-        validate_permission_rule_field(
-            &rule.operations,
-            &format!("{domain}.rules[{index}].operations"),
-        )?;
-        validate_permission_rule_field(
-            &rule.patterns,
-            &format!("{domain}.rules[{index}].patterns"),
-        )?;
-    }
-
-    Ok(())
-}
-
-fn validate_permission_rule_field(values: &[String], field: &str) -> Result<(), SidecarCoreError> {
-    if values.is_empty() {
-        return Err(SidecarCoreError::new(format!(
-            "invalid permissions policy: {field} must not be empty; use [\"*\"] for wildcard"
-        )));
-    }
-    Ok(())
-}
-
-fn capability_operation<'a>(capability: &'a str, domain: &str) -> &'a str {
-    capability
-        .strip_prefix(domain)
-        .and_then(|value| value.strip_prefix('.'))
-        .unwrap_or("")
-}
-
-pub fn permission_mode_to_kernel_decision(
-    mode: vm_config::PermissionMode,
-    capability: &str,
-) -> PermissionDecision {
-    match mode {
-        vm_config::PermissionMode::Allow => PermissionDecision::allow(),
-        vm_config::PermissionMode::Ask => {
-            PermissionDecision::deny(format!("permission prompt required for {capability}"))
-        }
-        vm_config::PermissionMode::Deny => {
-            PermissionDecision::deny(format!("blocked by {capability} policy"))
-        }
-    }
-}
-
-pub fn permissions_from_policy(policy: vm_config::PermissionsPolicy) -> Permissions {
-    let fs_policy = Arc::new(policy.clone());
-    let network_policy = Arc::new(policy.clone());
-    let child_process_policy = Arc::new(policy.clone());
-    let env_policy = Arc::new(policy);
-
-    Permissions {
-        filesystem: Some(Arc::new(move |request: &FsAccessRequest| {
-            let capability = fs_permission_capability(request.op);
-            permission_mode_to_kernel_decision(
-                evaluate_permissions_policy(&fs_policy, "fs", capability, Some(&request.path)),
-                capability,
-            )
-        })),
-        network: Some(Arc::new(move |request: &NetworkAccessRequest| {
-            let capability = network_permission_capability(request.op);
-            permission_mode_to_kernel_decision(
-                evaluate_permissions_policy(
-                    &network_policy,
-                    "network",
-                    capability,
-                    Some(&request.resource),
-                ),
-                capability,
-            )
-        })),
-        child_process: Some(Arc::new(move |request: &CommandAccessRequest| {
-            let capability = "child_process.spawn";
-            permission_mode_to_kernel_decision(
-                evaluate_permissions_policy(
-                    &child_process_policy,
-                    "child_process",
-                    capability,
-                    Some(&request.command),
-                ),
-                capability,
-            )
-        })),
-        environment: Some(Arc::new(move |request: &EnvAccessRequest| {
-            let capability = environment_permission_capability(request.op);
-            permission_mode_to_kernel_decision(
-                evaluate_permissions_policy(&env_policy, "env", capability, Some(&request.key)),
-                capability,
-            )
-        })),
-    }
-}
-
-pub fn fs_permission_capability(operation: FsOperation) -> &'static str {
-    match operation {
-        FsOperation::Read => filesystem_permission_capability(FilesystemAccess::Read),
-        FsOperation::Write => filesystem_permission_capability(FilesystemAccess::Write),
-        FsOperation::Mkdir | FsOperation::CreateDir => {
-            filesystem_permission_capability(FilesystemAccess::CreateDir)
-        }
-        FsOperation::ReadDir => filesystem_permission_capability(FilesystemAccess::ReadDir),
-        FsOperation::Stat | FsOperation::Exists => {
-            filesystem_permission_capability(FilesystemAccess::Stat)
-        }
-        FsOperation::Remove => filesystem_permission_capability(FilesystemAccess::Remove),
-        FsOperation::Rename => filesystem_permission_capability(FilesystemAccess::Rename),
-        FsOperation::Symlink => filesystem_permission_capability(FilesystemAccess::Symlink),
-        FsOperation::ReadLink => filesystem_permission_capability(FilesystemAccess::ReadLink),
-        FsOperation::Link | FsOperation::Chmod | FsOperation::Chown | FsOperation::Utimes => {
-            filesystem_permission_capability(FilesystemAccess::Write)
-        }
-        FsOperation::Truncate => filesystem_permission_capability(FilesystemAccess::Truncate),
-        FsOperation::MountSensitive => "fs.mount_sensitive",
-    }
-}
-
-pub fn filesystem_permission_capability(access: FilesystemAccess) -> &'static str {
-    match access {
-        FilesystemAccess::Read => "fs.read",
-        FilesystemAccess::Write => "fs.write",
-        FilesystemAccess::Stat => "fs.stat",
-        FilesystemAccess::ReadDir => "fs.readdir",
-        FilesystemAccess::CreateDir => "fs.create_dir",
-        FilesystemAccess::Remove => "fs.rm",
-        FilesystemAccess::Rename => "fs.rename",
-        FilesystemAccess::Symlink => "fs.symlink",
-        FilesystemAccess::ReadLink => "fs.readlink",
-        FilesystemAccess::Chmod => "fs.chmod",
-        FilesystemAccess::Truncate => "fs.truncate",
-    }
-}
-
-pub fn network_permission_capability(operation: NetworkOperation) -> &'static str {
-    match operation {
-        NetworkOperation::Fetch => "network.fetch",
-        NetworkOperation::Http => "network.http",
-        NetworkOperation::Dns => "network.dns",
-        NetworkOperation::Listen => "network.listen",
-    }
-}
-
-pub fn environment_permission_capability(operation: EnvironmentOperation) -> &'static str {
-    match operation {
-        EnvironmentOperation::Read => "env.read",
-        EnvironmentOperation::Write => "env.write",
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn permissions_default_to_deny() {
-        let policy = vm_config::PermissionsPolicy {
-            fs: None,
-            network: None,
-            child_process: None,
-            process: None,
-            env: None,
-            binding: None,
-        };
-
-        assert_eq!(
-            evaluate_permissions_policy(&policy, "fs", "fs.read", Some("/tmp/a")),
-            vm_config::PermissionMode::Deny
-        );
-    }
-
-    #[test]
-    fn permissions_default_to_deny_for_every_domain() {
-        let policy = vm_config::PermissionsPolicy {
-            fs: None,
-            network: None,
-            child_process: None,
-            process: None,
-            env: None,
-            binding: None,
-        };
-
-        for (domain, capability, resource) in [
-            ("fs", "fs.read", "/workspace/file.txt"),
-            ("network", "network.http", "example.com:443"),
-            ("child_process", "child_process.spawn", "sh"),
-            ("process", "process.kill", "123"),
-            ("env", "env.read", "TOKEN"),
-            ("binding", "binding.call", "shell"),
-        ] {
-            assert_eq!(
-                evaluate_permissions_policy(&policy, domain, capability, Some(resource)),
-                vm_config::PermissionMode::Deny,
-                "{domain} should default to deny",
-            );
-        }
-    }
-
-    #[test]
-    fn ask_permission_modes_become_kernel_denials() {
-        let decision =
-            permission_mode_to_kernel_decision(vm_config::PermissionMode::Ask, "network.http");
-
-        assert!(!decision.allow);
-        assert_eq!(
-            decision.reason.as_deref(),
-            Some("permission prompt required for network.http")
-        );
-    }
-
-    #[test]
-    fn ask_permission_modes_deny_every_policy_domain() {
-        let policy = vm_config::PermissionsPolicy {
-            fs: Some(vm_config::FsPermissionScope::Mode(
-                vm_config::PermissionMode::Ask,
-            )),
-            network: Some(vm_config::PatternPermissionScope::Mode(
-                vm_config::PermissionMode::Ask,
-            )),
-            child_process: Some(vm_config::PatternPermissionScope::Mode(
-                vm_config::PermissionMode::Ask,
-            )),
-            process: Some(vm_config::PatternPermissionScope::Mode(
-                vm_config::PermissionMode::Ask,
-            )),
-            env: Some(vm_config::PatternPermissionScope::Mode(
-                vm_config::PermissionMode::Ask,
-            )),
-            binding: Some(vm_config::PatternPermissionScope::Mode(
-                vm_config::PermissionMode::Ask,
-            )),
-        };
-
-        for (domain, capability, resource) in [
-            ("fs", "fs.read", "/workspace/file.txt"),
-            ("network", "network.http", "example.com:443"),
-            ("child_process", "child_process.spawn", "sh"),
-            ("process", "process.kill", "123"),
-            ("env", "env.read", "TOKEN"),
-            ("binding", "binding.call", "shell"),
-        ] {
-            let mode = evaluate_permissions_policy(&policy, domain, capability, Some(resource));
-            assert_eq!(
-                mode,
-                vm_config::PermissionMode::Ask,
-                "{domain} should preserve Ask until kernel-decision mapping",
-            );
-            let decision = permission_mode_to_kernel_decision(mode, capability);
-            assert!(
-                !decision.allow,
-                "{domain} Ask should map to a kernel denial",
-            );
-            assert_eq!(
-                decision.reason.as_deref(),
-                Some(format!("permission prompt required for {capability}").as_str()),
-                "{domain} Ask denial should explain the denied prompt",
-            );
-        }
-    }
-
-    #[test]
-    fn ask_permission_modes_deny_every_kernel_callback_domain() {
-        let permissions = permissions_from_policy(vm_config::PermissionsPolicy {
-            fs: Some(vm_config::FsPermissionScope::Mode(
-                vm_config::PermissionMode::Ask,
-            )),
-            network: Some(vm_config::PatternPermissionScope::Mode(
-                vm_config::PermissionMode::Ask,
-            )),
-            child_process: Some(vm_config::PatternPermissionScope::Mode(
-                vm_config::PermissionMode::Ask,
-            )),
-            process: None,
-            env: Some(vm_config::PatternPermissionScope::Mode(
-                vm_config::PermissionMode::Ask,
-            )),
-            binding: None,
-        });
-
-        assert!(
-            !permissions.filesystem.expect("filesystem callback")(&FsAccessRequest {
-                vm_id: String::from("vm"),
-                op: FsOperation::Read,
-                path: String::from("/workspace/file.txt"),
-            })
-            .allow
-        );
-        assert!(
-            !permissions.network.expect("network callback")(&NetworkAccessRequest {
-                vm_id: String::from("vm"),
-                op: NetworkOperation::Http,
-                resource: String::from("example.com:443"),
-            })
-            .allow
-        );
-        assert!(
-            !permissions.child_process.expect("child_process callback")(&CommandAccessRequest {
-                vm_id: String::from("vm"),
-                command: String::from("sh"),
-                args: Vec::new(),
-                cwd: None,
-                env: Default::default(),
-            })
-            .allow
-        );
-        assert!(
-            !permissions.environment.expect("environment callback")(&EnvAccessRequest {
-                vm_id: String::from("vm"),
-                op: EnvironmentOperation::Read,
-                key: String::from("TOKEN"),
-                value: None,
-            })
-            .allow
-        );
-    }
-
-    #[test]
-    fn permissions_from_policy_builds_kernel_callbacks() {
-        let policy = vm_config::PermissionsPolicy {
-            fs: Some(vm_config::FsPermissionScope::Rules(
-                vm_config::FsPermissionRuleSet {
-                    default: Some(vm_config::PermissionMode::Deny),
-                    rules: vec![vm_config::FsPermissionRule {
-                        mode: vm_config::PermissionMode::Allow,
-                        operations: vec![String::from("read")],
-                        paths: vec![String::from("/workspace/**")],
-                    }],
-                },
-            )),
-            network: None,
-            child_process: None,
-            process: None,
-            env: None,
-            binding: None,
-        };
-
-        let permissions = permissions_from_policy(policy);
-        let check = permissions.filesystem.expect("filesystem callback");
-
-        assert!(
-            check(&FsAccessRequest {
-                vm_id: String::from("vm"),
-                op: FsOperation::Read,
-                path: String::from("/workspace/file.txt"),
-            })
-            .allow
-        );
-        assert!(
-            !check(&FsAccessRequest {
-                vm_id: String::from("vm"),
-                op: FsOperation::Read,
-                path: String::from("/secrets/file.txt"),
-            })
-            .allow
-        );
-    }
-
-    #[test]
-    fn last_matching_rule_wins() {
-        let policy = vm_config::PermissionsPolicy {
-            fs: Some(vm_config::FsPermissionScope::Rules(
-                vm_config::FsPermissionRuleSet {
-                    default: Some(vm_config::PermissionMode::Deny),
-                    rules: vec![
-                        vm_config::FsPermissionRule {
-                            mode: vm_config::PermissionMode::Allow,
-                            operations: vec![String::from("read")],
-                            paths: vec![String::from("/workspace/**")],
-                        },
-                        vm_config::FsPermissionRule {
-                            mode: vm_config::PermissionMode::Deny,
-                            operations: vec![String::from("read")],
-                            paths: vec![String::from("/workspace/secrets/**")],
-                        },
-                    ],
-                },
-            )),
-            network: None,
-            child_process: None,
-            process: None,
-            env: None,
-            binding: None,
-        };
-
-        assert_eq!(
-            evaluate_permissions_policy(&policy, "fs", "fs.read", Some("/workspace/secrets/key")),
-            vm_config::PermissionMode::Deny
-        );
-    }
-
-    #[test]
-    fn empty_rule_fields_are_rejected() {
-        let policy = vm_config::PermissionsPolicy {
-            fs: Some(vm_config::FsPermissionScope::Rules(
-                vm_config::FsPermissionRuleSet {
-                    default: None,
-                    rules: vec![vm_config::FsPermissionRule {
-                        mode: vm_config::PermissionMode::Allow,
-                        operations: Vec::new(),
-                        paths: vec![String::from("*")],
-                    }],
-                },
-            )),
-            network: None,
-            child_process: None,
-            process: None,
-            env: None,
-            binding: None,
-        };
-
-        let error = validate_permissions_policy(&policy).expect_err("policy should be invalid");
-        assert!(error
-            .to_string()
-            .contains("fs.rules[0].operations must not be empty"));
-    }
-}
diff --git a/crates/sidecar-core/src/root_fs.rs b/crates/sidecar-core/src/root_fs.rs
deleted file mode 100644
index 680f73ddb..000000000
--- a/crates/sidecar-core/src/root_fs.rs
+++ /dev/null
@@ -1,715 +0,0 @@
-use base64::Engine;
-use secure_exec_bridge::FilesystemSnapshot;
-use secure_exec_kernel::mount_table::MountTable;
-use secure_exec_kernel::root_fs::{
-    decode_snapshot_with_import_limits, is_supported_root_filesystem_snapshot_format,
-    FilesystemEntry, FilesystemEntryKind, RootFileSystem,
-    RootFilesystemDescriptor as KernelRootFilesystemDescriptor, RootFilesystemImportLimits,
-    RootFilesystemMode as KernelRootFilesystemMode, RootFilesystemSnapshot,
-};
-use secure_exec_kernel::vfs::{normalize_path, VirtualFileSystem};
-use secure_exec_sidecar_protocol::protocol::{
-    RootFilesystemDescriptor as ProtocolRootFilesystemDescriptor,
-    RootFilesystemEntry as ProtocolRootFilesystemEntry,
-    RootFilesystemEntryEncoding as ProtocolRootFilesystemEntryEncoding,
-    RootFilesystemEntryKind as ProtocolRootFilesystemEntryKind,
-    RootFilesystemLowerDescriptor as ProtocolRootFilesystemLowerDescriptor,
-    RootFilesystemMode as ProtocolRootFilesystemMode,
-    SnapshotRootFilesystemLower as ProtocolSnapshotRootFilesystemLower,
-};
-use secure_exec_vm_config as vm_config;
-use std::error::Error;
-use std::fmt;
-use vfs::posix::usage::RootFilesystemResourceLimits;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct SidecarCoreError {
-    message: String,
-}
-
-impl SidecarCoreError {
-    pub fn new(message: impl Into<String>) -> Self {
-        Self {
-            message: message.into(),
-        }
-    }
-}
-
-impl fmt::Display for SidecarCoreError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        f.write_str(&self.message)
-    }
-}
-
-impl Error for SidecarCoreError {}
-
-pub fn root_filesystem_descriptor_from_config(
-    config: &vm_config::RootFilesystemConfig,
-) -> Result<KernelRootFilesystemDescriptor, SidecarCoreError> {
-    root_filesystem_descriptor_from_config_with_import_limits(
-        config,
-        &RootFilesystemImportLimits::default(),
-    )
-}
-
-fn root_filesystem_descriptor_from_config_with_import_limits(
-    config: &vm_config::RootFilesystemConfig,
-    import_limits: &RootFilesystemImportLimits,
-) -> Result<KernelRootFilesystemDescriptor, SidecarCoreError> {
-    Ok(KernelRootFilesystemDescriptor {
-        mode: root_filesystem_mode_from_config(config.mode),
-        disable_default_base_layer: config.disable_default_base_layer,
-        lowers: config
-            .lowers
-            .iter()
-            .map(|lower| root_filesystem_lower_from_config(lower, import_limits))
-            .collect::<Result<Vec<_>, _>>()?,
-        bootstrap_entries: config
-            .bootstrap_entries
-            .iter()
-            .map(root_filesystem_entry_from_config)
-            .collect::<Result<Vec<_>, _>>()?,
-    })
-}
-
-pub fn root_filesystem_protocol_descriptor_from_config(
-    config: &vm_config::RootFilesystemConfig,
-) -> ProtocolRootFilesystemDescriptor {
-    ProtocolRootFilesystemDescriptor {
-        mode: match config.mode {
-            vm_config::RootFilesystemMode::Ephemeral => ProtocolRootFilesystemMode::Ephemeral,
-            vm_config::RootFilesystemMode::ReadOnly => ProtocolRootFilesystemMode::ReadOnly,
-        },
-        disable_default_base_layer: config.disable_default_base_layer,
-        lowers: config
-            .lowers
-            .iter()
-            .map(root_filesystem_protocol_lower_from_config)
-            .collect(),
-        bootstrap_entries: config
-            .bootstrap_entries
-            .iter()
-            .map(root_filesystem_protocol_entry_from_config)
-            .collect(),
-    }
-}
-
-pub fn build_root_filesystem(
-    config: &vm_config::RootFilesystemConfig,
-    limits: &impl RootFilesystemResourceLimits,
-) -> Result<RootFileSystem, SidecarCoreError> {
-    build_root_filesystem_with_loaded_snapshot(config, None, limits)
-}
-
-pub fn build_root_filesystem_with_loaded_snapshot(
-    config: &vm_config::RootFilesystemConfig,
-    loaded_snapshot: Option<&FilesystemSnapshot>,
-    limits: &impl RootFilesystemResourceLimits,
-) -> Result<RootFileSystem, SidecarCoreError> {
-    let import_limits = RootFilesystemImportLimits::from_resource_limits(limits);
-    let descriptor = if let Some(restored) = supported_loaded_snapshot(loaded_snapshot) {
-        KernelRootFilesystemDescriptor {
-            mode: root_filesystem_mode_from_config(config.mode),
-            disable_default_base_layer: true,
-            lowers: vec![
-                decode_snapshot_with_import_limits(&restored.bytes, &import_limits).map_err(
-                    |error| {
-                        SidecarCoreError::new(format!("decode restored root filesystem: {error}"))
-                    },
-                )?,
-            ],
-            bootstrap_entries: config
-                .bootstrap_entries
-                .iter()
-                .map(root_filesystem_entry_from_config)
-                .collect::<Result<Vec<_>, _>>()?,
-        }
-    } else {
-        root_filesystem_descriptor_from_config_with_import_limits(config, &import_limits)?
-    };
-    RootFileSystem::from_descriptor_with_import_limits(descriptor, &import_limits)
-        .map_err(|error| SidecarCoreError::new(format!("build root filesystem: {error}")))
-}
-
-pub fn build_root_mount_table(
-    config: &vm_config::RootFilesystemConfig,
-    limits: &impl RootFilesystemResourceLimits,
-) -> Result<MountTable, SidecarCoreError> {
-    Ok(MountTable::new(build_root_filesystem(config, limits)?))
-}
-
-pub fn build_root_mount_table_with_loaded_snapshot(
-    config: &vm_config::RootFilesystemConfig,
-    loaded_snapshot: Option<&FilesystemSnapshot>,
-    limits: &impl RootFilesystemResourceLimits,
-) -> Result<MountTable, SidecarCoreError> {
-    Ok(MountTable::new(build_root_filesystem_with_loaded_snapshot(
-        config,
-        loaded_snapshot,
-        limits,
-    )?))
-}
-
-pub fn root_filesystem_mode_from_config(
-    mode: vm_config::RootFilesystemMode,
-) -> KernelRootFilesystemMode {
-    match mode {
-        vm_config::RootFilesystemMode::Ephemeral => KernelRootFilesystemMode::Ephemeral,
-        vm_config::RootFilesystemMode::ReadOnly => KernelRootFilesystemMode::ReadOnly,
-    }
-}
-
-pub fn protocol_root_filesystem_mode(mode: ProtocolRootFilesystemMode) -> KernelRootFilesystemMode {
-    match mode {
-        ProtocolRootFilesystemMode::Ephemeral => KernelRootFilesystemMode::Ephemeral,
-        ProtocolRootFilesystemMode::ReadOnly => KernelRootFilesystemMode::ReadOnly,
-    }
-}
-
-fn supported_loaded_snapshot(snapshot: Option<&FilesystemSnapshot>) -> Option<&FilesystemSnapshot> {
-    snapshot.filter(|snapshot| is_supported_root_filesystem_snapshot_format(&snapshot.format))
-}
-
-fn root_filesystem_lower_from_config(
-    lower: &vm_config::RootFilesystemLowerDescriptor,
-    import_limits: &RootFilesystemImportLimits,
-) -> Result<RootFilesystemSnapshot, SidecarCoreError> {
-    match lower {
-        vm_config::RootFilesystemLowerDescriptor::Snapshot { entries } => {
-            Ok(RootFilesystemSnapshot {
-                entries: entries
-                    .iter()
-                    .map(root_filesystem_entry_from_config)
-                    .collect::<Result<Vec<_>, _>>()?,
-            })
-        }
-        vm_config::RootFilesystemLowerDescriptor::BundledBaseFilesystem => Ok(
-            secure_exec_kernel::root_fs::load_bundled_base_snapshot_with_limits(import_limits)
-                .map_err(|error| {
-                    SidecarCoreError::new(format!("load bundled base filesystem lower: {error}"))
-                })?,
-        ),
-    }
-}
-
-fn root_filesystem_entry_from_config(
-    entry: &vm_config::RootFilesystemEntry,
-) -> Result<FilesystemEntry, SidecarCoreError> {
-    let mode = entry.mode.unwrap_or(match entry.kind {
-        vm_config::RootFilesystemEntryKind::File => {
-            if entry.executable {
-                0o755
-            } else {
-                0o644
-            }
-        }
-        vm_config::RootFilesystemEntryKind::Directory => 0o755,
-        vm_config::RootFilesystemEntryKind::Symlink => 0o777,
-    });
-
-    let content = match entry.content.as_ref() {
-        Some(content) => match entry.encoding {
-            Some(vm_config::RootFilesystemEntryEncoding::Base64) => Some(
-                base64::engine::general_purpose::STANDARD
-                    .decode(content)
-                    .map_err(|error| {
-                        SidecarCoreError::new(format!(
-                            "invalid base64 root filesystem content for {}: {error}",
-                            entry.path
-                        ))
-                    })?,
-            ),
-            Some(vm_config::RootFilesystemEntryEncoding::Utf8) | None => {
-                Some(content.as_bytes().to_vec())
-            }
-        },
-        None => None,
-    };
-
-    Ok(FilesystemEntry {
-        path: normalize_path(&entry.path),
-        kind: match entry.kind {
-            vm_config::RootFilesystemEntryKind::File => FilesystemEntryKind::File,
-            vm_config::RootFilesystemEntryKind::Directory => FilesystemEntryKind::Directory,
-            vm_config::RootFilesystemEntryKind::Symlink => FilesystemEntryKind::Symlink,
-        },
-        mode,
-        uid: entry.uid.unwrap_or(0),
-        gid: entry.gid.unwrap_or(0),
-        content,
-        target: entry.target.clone(),
-    })
-}
-
-fn root_filesystem_protocol_lower_from_config(
-    lower: &vm_config::RootFilesystemLowerDescriptor,
-) -> ProtocolRootFilesystemLowerDescriptor {
-    match lower {
-        vm_config::RootFilesystemLowerDescriptor::Snapshot { entries } => {
-            ProtocolRootFilesystemLowerDescriptor::SnapshotRootFilesystemLower(
-                ProtocolSnapshotRootFilesystemLower {
-                    entries: entries
-                        .iter()
-                        .map(root_filesystem_protocol_entry_from_config)
-                        .collect(),
-                },
-            )
-        }
-        vm_config::RootFilesystemLowerDescriptor::BundledBaseFilesystem => {
-            ProtocolRootFilesystemLowerDescriptor::BundledBaseFilesystemLower
-        }
-    }
-}
-
-fn root_filesystem_protocol_entry_from_config(
-    entry: &vm_config::RootFilesystemEntry,
-) -> ProtocolRootFilesystemEntry {
-    ProtocolRootFilesystemEntry {
-        path: entry.path.clone(),
-        kind: match entry.kind {
-            vm_config::RootFilesystemEntryKind::File => ProtocolRootFilesystemEntryKind::File,
-            vm_config::RootFilesystemEntryKind::Directory => {
-                ProtocolRootFilesystemEntryKind::Directory
-            }
-            vm_config::RootFilesystemEntryKind::Symlink => ProtocolRootFilesystemEntryKind::Symlink,
-        },
-        mode: entry.mode,
-        uid: entry.uid,
-        gid: entry.gid,
-        content: entry.content.clone(),
-        encoding: entry.encoding.map(|encoding| match encoding {
-            vm_config::RootFilesystemEntryEncoding::Utf8 => {
-                ProtocolRootFilesystemEntryEncoding::Utf8
-            }
-            vm_config::RootFilesystemEntryEncoding::Base64 => {
-                ProtocolRootFilesystemEntryEncoding::Base64
-            }
-        }),
-        target: entry.target.clone(),
-        executable: entry.executable,
-    }
-}
-
-pub fn root_snapshot_entry(entry: &FilesystemEntry) -> ProtocolRootFilesystemEntry {
-    let (content, encoding) = entry
-        .content
-        .clone()
-        .map(snapshot_entry_content)
-        .map(|(content, encoding)| (Some(content), Some(encoding)))
-        .unwrap_or((None, None));
-
-    ProtocolRootFilesystemEntry {
-        path: entry.path.clone(),
-        kind: match entry.kind {
-            FilesystemEntryKind::File => ProtocolRootFilesystemEntryKind::File,
-            FilesystemEntryKind::Directory => ProtocolRootFilesystemEntryKind::Directory,
-            FilesystemEntryKind::Symlink => ProtocolRootFilesystemEntryKind::Symlink,
-        },
-        mode: Some(entry.mode),
-        uid: Some(entry.uid),
-        gid: Some(entry.gid),
-        content,
-        encoding,
-        target: entry.target.clone(),
-        executable: entry.mode & 0o111 != 0,
-    }
-}
-
-/// Convert a protocol root-filesystem entry into a kernel `FilesystemEntry`, decoding
-/// content (utf8/base64) and applying per-kind mode defaults. Shared by native and
-/// browser bootstrap + snapshot paths.
-pub fn convert_root_filesystem_entry(
-    entry: &ProtocolRootFilesystemEntry,
-) -> Result<FilesystemEntry, SidecarCoreError> {
-    let mode = entry.mode.unwrap_or(match entry.kind {
-        ProtocolRootFilesystemEntryKind::File => {
-            if entry.executable {
-                0o755
-            } else {
-                0o644
-            }
-        }
-        ProtocolRootFilesystemEntryKind::Directory => 0o755,
-        ProtocolRootFilesystemEntryKind::Symlink => 0o777,
-    });
-
-    let content = match entry.content.as_ref() {
-        Some(content) => match entry.encoding {
-            Some(ProtocolRootFilesystemEntryEncoding::Base64) => Some(
-                base64::engine::general_purpose::STANDARD
-                    .decode(content)
-                    .map_err(|error| {
-                        SidecarCoreError::new(format!(
-                            "invalid base64 root filesystem content for {}: {error}",
-                            entry.path
-                        ))
-                    })?,
-            ),
-            Some(ProtocolRootFilesystemEntryEncoding::Utf8) | None => {
-                Some(content.as_bytes().to_vec())
-            }
-        },
-        None => None,
-    };
-
-    Ok(FilesystemEntry {
-        path: normalize_path(&entry.path),
-        kind: match entry.kind {
-            ProtocolRootFilesystemEntryKind::File => FilesystemEntryKind::File,
-            ProtocolRootFilesystemEntryKind::Directory => FilesystemEntryKind::Directory,
-            ProtocolRootFilesystemEntryKind::Symlink => FilesystemEntryKind::Symlink,
-        },
-        mode,
-        uid: entry.uid.unwrap_or(0),
-        gid: entry.gid.unwrap_or(0),
-        content,
-        target: entry.target.clone(),
-    })
-}
-
-/// Build a kernel snapshot from protocol entries (shared by native + browser).
-pub fn root_snapshot_from_entries(
-    entries: &[ProtocolRootFilesystemEntry],
-) -> Result<RootFilesystemSnapshot, SidecarCoreError> {
-    Ok(RootFilesystemSnapshot {
-        entries: entries
-            .iter()
-            .map(convert_root_filesystem_entry)
-            .collect::<Result<Vec<_>, _>>()?,
-    })
-}
-
-/// Write one root-filesystem bootstrap entry (file/dir/symlink) into a VFS, creating
-/// parent dirs and applying deterministic mode/uid/gid defaults (chmod/chown for
-/// non-symlinks). Shared by native (raw root FS) and browser (kernel `filesystem_mut`).
-pub fn apply_root_filesystem_entry<F: VirtualFileSystem>(
-    filesystem: &mut F,
-    entry: &ProtocolRootFilesystemEntry,
-) -> Result<(), SidecarCoreError> {
-    let kernel_entry = convert_root_filesystem_entry(entry)?;
-
-    let parent = parent_directory(&kernel_entry.path);
-    if parent != "/" && !filesystem.exists(&parent) {
-        filesystem.mkdir(&parent, true).map_err(vfs_err)?;
-    }
-
-    match kernel_entry.kind {
-        FilesystemEntryKind::Directory => filesystem
-            .mkdir(&kernel_entry.path, true)
-            .map_err(vfs_err)?,
-        FilesystemEntryKind::File => filesystem
-            .write_file(&kernel_entry.path, kernel_entry.content.unwrap_or_default())
-            .map_err(vfs_err)?,
-        FilesystemEntryKind::Symlink => filesystem
-            .symlink(
-                kernel_entry.target.as_deref().ok_or_else(|| {
-                    SidecarCoreError::new(format!(
-                        "root filesystem bootstrap for symlink {} requires a target",
-                        entry.path
-                    ))
-                })?,
-                &kernel_entry.path,
-            )
-            .map_err(vfs_err)?,
-    }
-
-    if !matches!(kernel_entry.kind, FilesystemEntryKind::Symlink) {
-        filesystem
-            .chmod(&kernel_entry.path, kernel_entry.mode)
-            .map_err(vfs_err)?;
-        filesystem
-            .chown(&kernel_entry.path, kernel_entry.uid, kernel_entry.gid)
-            .map_err(vfs_err)?;
-    }
-
-    Ok(())
-}
-
-fn vfs_err<E: fmt::Display>(error: E) -> SidecarCoreError {
-    SidecarCoreError::new(error.to_string())
-}
-
-fn parent_directory(path: &str) -> String {
-    match path.rfind('/') {
-        Some(0) | None => String::from("/"),
-        Some(index) => path[..index].to_string(),
-    }
-}
-
-fn snapshot_entry_content(content: Vec<u8>) -> (String, ProtocolRootFilesystemEntryEncoding) {
-    match String::from_utf8(content) {
-        Ok(text) => (text, ProtocolRootFilesystemEntryEncoding::Utf8),
-        Err(error) => (
-            base64::engine::general_purpose::STANDARD.encode(error.into_bytes()),
-            ProtocolRootFilesystemEntryEncoding::Base64,
-        ),
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use secure_exec_kernel::resource_accounting::ResourceLimits;
-    use secure_exec_kernel::vfs::VirtualFileSystem;
-
-    #[test]
-    fn builds_root_filesystem_from_snapshot_lower_and_bootstrap_upper() {
-        let mut root = build_root_filesystem(
-            &vm_config::RootFilesystemConfig {
-                disable_default_base_layer: true,
-                lowers: vec![vm_config::RootFilesystemLowerDescriptor::Snapshot {
-                    entries: vec![vm_config::RootFilesystemEntry {
-                        path: String::from("/workspace/value.txt"),
-                        kind: vm_config::RootFilesystemEntryKind::File,
-                        mode: None,
-                        uid: None,
-                        gid: None,
-                        content: Some(String::from("lower")),
-                        encoding: Some(vm_config::RootFilesystemEntryEncoding::Utf8),
-                        target: None,
-                        executable: false,
-                    }],
-                }],
-                bootstrap_entries: vec![vm_config::RootFilesystemEntry {
-                    path: String::from("/workspace/value.txt"),
-                    kind: vm_config::RootFilesystemEntryKind::File,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    content: Some(String::from("upper")),
-                    encoding: Some(vm_config::RootFilesystemEntryEncoding::Utf8),
-                    target: None,
-                    executable: false,
-                }],
-                ..vm_config::RootFilesystemConfig::default()
-            },
-            &ResourceLimits::default(),
-        )
-        .expect("build root filesystem");
-
-        assert_eq!(
-            root.read_file("/workspace/value.txt")
-                .expect("read merged value"),
-            b"upper".to_vec()
-        );
-    }
-
-    #[test]
-    fn decodes_base64_root_filesystem_entries() {
-        let mut root = build_root_filesystem(
-            &vm_config::RootFilesystemConfig {
-                disable_default_base_layer: true,
-                bootstrap_entries: vec![vm_config::RootFilesystemEntry {
-                    path: String::from("/bin/tool"),
-                    kind: vm_config::RootFilesystemEntryKind::File,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    content: Some(String::from("dG9vbA==")),
-                    encoding: Some(vm_config::RootFilesystemEntryEncoding::Base64),
-                    target: None,
-                    executable: true,
-                }],
-                ..vm_config::RootFilesystemConfig::default()
-            },
-            &ResourceLimits::default(),
-        )
-        .expect("build root filesystem");
-
-        assert_eq!(root.read_file("/bin/tool").expect("read file"), b"tool");
-        assert_eq!(
-            root.stat("/bin/tool").expect("stat file").mode & 0o777,
-            0o755
-        );
-    }
-
-    #[test]
-    fn serializes_root_snapshot_entries_as_utf8_or_base64() {
-        let text = root_snapshot_entry(&FilesystemEntry {
-            path: String::from("/workspace/text.txt"),
-            kind: FilesystemEntryKind::File,
-            mode: 0o755,
-            uid: 501,
-            gid: 20,
-            content: Some(b"hello".to_vec()),
-            target: None,
-        });
-
-        assert_eq!(text.path, "/workspace/text.txt");
-        assert_eq!(text.kind, ProtocolRootFilesystemEntryKind::File);
-        assert_eq!(text.mode, Some(0o755));
-        assert_eq!(text.uid, Some(501));
-        assert_eq!(text.gid, Some(20));
-        assert_eq!(text.content.as_deref(), Some("hello"));
-        assert_eq!(
-            text.encoding,
-            Some(ProtocolRootFilesystemEntryEncoding::Utf8)
-        );
-        assert!(text.executable);
-
-        let binary = root_snapshot_entry(&FilesystemEntry {
-            path: String::from("/workspace/binary.bin"),
-            kind: FilesystemEntryKind::File,
-            mode: 0o644,
-            uid: 0,
-            gid: 0,
-            content: Some(vec![0xff, 0x00]),
-            target: None,
-        });
-
-        assert_eq!(binary.content.as_deref(), Some("/wA="));
-        assert_eq!(
-            binary.encoding,
-            Some(ProtocolRootFilesystemEntryEncoding::Base64)
-        );
-        assert!(!binary.executable);
-    }
-
-    #[test]
-    fn builds_protocol_descriptor_from_config_without_normalizing_optional_fields() {
-        let descriptor =
-            root_filesystem_protocol_descriptor_from_config(&vm_config::RootFilesystemConfig {
-                mode: vm_config::RootFilesystemMode::ReadOnly,
-                disable_default_base_layer: true,
-                lowers: vec![
-                    vm_config::RootFilesystemLowerDescriptor::BundledBaseFilesystem,
-                    vm_config::RootFilesystemLowerDescriptor::Snapshot {
-                        entries: vec![vm_config::RootFilesystemEntry {
-                            path: String::from("relative/lower.txt"),
-                            kind: vm_config::RootFilesystemEntryKind::File,
-                            mode: None,
-                            uid: None,
-                            gid: None,
-                            content: Some(String::from("lower")),
-                            encoding: None,
-                            target: None,
-                            executable: false,
-                        }],
-                    },
-                ],
-                bootstrap_entries: vec![vm_config::RootFilesystemEntry {
-                    path: String::from("/bin/tool"),
-                    kind: vm_config::RootFilesystemEntryKind::File,
-                    mode: Some(0o700),
-                    uid: Some(1000),
-                    gid: Some(1000),
-                    content: Some(String::from("dG9vbA==")),
-                    encoding: Some(vm_config::RootFilesystemEntryEncoding::Base64),
-                    target: None,
-                    executable: true,
-                }],
-            });
-
-        assert_eq!(descriptor.mode, ProtocolRootFilesystemMode::ReadOnly);
-        assert!(descriptor.disable_default_base_layer);
-        assert_eq!(descriptor.lowers.len(), 2);
-        assert!(matches!(
-            descriptor.lowers[0],
-            ProtocolRootFilesystemLowerDescriptor::BundledBaseFilesystemLower
-        ));
-        let ProtocolRootFilesystemLowerDescriptor::SnapshotRootFilesystemLower(snapshot) =
-            &descriptor.lowers[1]
-        else {
-            panic!("expected snapshot lower");
-        };
-        assert_eq!(snapshot.entries[0].path, "relative/lower.txt");
-        assert_eq!(snapshot.entries[0].mode, None);
-        assert_eq!(snapshot.entries[0].encoding, None);
-
-        let entry = &descriptor.bootstrap_entries[0];
-        assert_eq!(entry.path, "/bin/tool");
-        assert_eq!(entry.kind, ProtocolRootFilesystemEntryKind::File);
-        assert_eq!(entry.mode, Some(0o700));
-        assert_eq!(entry.uid, Some(1000));
-        assert_eq!(entry.gid, Some(1000));
-        assert_eq!(entry.content.as_deref(), Some("dG9vbA=="));
-        assert_eq!(
-            entry.encoding,
-            Some(ProtocolRootFilesystemEntryEncoding::Base64)
-        );
-        assert!(entry.executable);
-    }
-
-    #[test]
-    fn maps_root_filesystem_modes_to_kernel_modes() {
-        assert_eq!(
-            root_filesystem_mode_from_config(vm_config::RootFilesystemMode::Ephemeral),
-            KernelRootFilesystemMode::Ephemeral
-        );
-        assert_eq!(
-            root_filesystem_mode_from_config(vm_config::RootFilesystemMode::ReadOnly),
-            KernelRootFilesystemMode::ReadOnly
-        );
-        assert_eq!(
-            protocol_root_filesystem_mode(ProtocolRootFilesystemMode::Ephemeral),
-            KernelRootFilesystemMode::Ephemeral
-        );
-        assert_eq!(
-            protocol_root_filesystem_mode(ProtocolRootFilesystemMode::ReadOnly),
-            KernelRootFilesystemMode::ReadOnly
-        );
-    }
-
-    #[test]
-    fn restored_snapshot_replaces_config_lowers_but_preserves_bootstrap_entries() {
-        let restored = RootFilesystemSnapshot {
-            entries: vec![FilesystemEntry::file(
-                "/workspace/restored.txt",
-                b"restored",
-            )],
-        };
-        let loaded_snapshot = FilesystemSnapshot {
-            format: String::from(secure_exec_kernel::root_fs::ROOT_FILESYSTEM_SNAPSHOT_FORMAT),
-            bytes: secure_exec_kernel::root_fs::encode_snapshot(&restored)
-                .expect("encode restored snapshot"),
-        };
-        let mut root = build_root_filesystem_with_loaded_snapshot(
-            &vm_config::RootFilesystemConfig {
-                disable_default_base_layer: true,
-                lowers: vec![vm_config::RootFilesystemLowerDescriptor::Snapshot {
-                    entries: vec![vm_config::RootFilesystemEntry {
-                        path: String::from("/workspace/ignored-lower.txt"),
-                        kind: vm_config::RootFilesystemEntryKind::File,
-                        mode: None,
-                        uid: None,
-                        gid: None,
-                        content: Some(String::from("ignored")),
-                        encoding: Some(vm_config::RootFilesystemEntryEncoding::Utf8),
-                        target: None,
-                        executable: false,
-                    }],
-                }],
-                bootstrap_entries: vec![vm_config::RootFilesystemEntry {
-                    path: String::from("/workspace/bootstrap.txt"),
-                    kind: vm_config::RootFilesystemEntryKind::File,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    content: Some(String::from("bootstrap")),
-                    encoding: Some(vm_config::RootFilesystemEntryEncoding::Utf8),
-                    target: None,
-                    executable: false,
-                }],
-                ..vm_config::RootFilesystemConfig::default()
-            },
-            Some(&loaded_snapshot),
-            &ResourceLimits::default(),
-        )
-        .expect("build root filesystem from restored snapshot");
-
-        assert_eq!(
-            root.read_file("/workspace/restored.txt")
-                .expect("read restored file"),
-            b"restored".to_vec()
-        );
-        assert_eq!(
-            root.read_file("/workspace/bootstrap.txt")
-                .expect("read bootstrap file"),
-            b"bootstrap".to_vec()
-        );
-        assert!(
-            root.read_file("/workspace/ignored-lower.txt").is_err(),
-            "restored snapshots should replace configured lowers"
-        );
-    }
-}
diff --git a/crates/sidecar-core/src/router.rs b/crates/sidecar-core/src/router.rs
deleted file mode 100644
index f167fc77a..000000000
--- a/crates/sidecar-core/src/router.rs
+++ /dev/null
@@ -1,457 +0,0 @@
-use crate::frames::{reject, DispatchResult};
-use secure_exec_sidecar_protocol::protocol::{
-    AuthenticateRequest, BootstrapRootFilesystemRequest, CloseStdinRequest, ConfigureVmRequest,
-    CreateLayerRequest, CreateOverlayRequest, CreateVmRequest, DisposeVmRequest, ExecuteRequest,
-    ExportSnapshotRequest, ExtEnvelope, FindBoundUdpRequest, FindListenerRequest,
-    GetProcessSnapshotRequest, GetResourceSnapshotRequest, GetSignalStateRequest,
-    GetZombieTimerCountRequest, GuestFilesystemCallRequest, GuestKernelCallRequest,
-    ImportSnapshotRequest, KillProcessRequest, LinkPackageRequest, OpenSessionRequest,
-    OwnershipScope, ProvidedCommandsRequest, RegisterHostCallbacksRequest, RequestFrame,
-    RequestPayload, ResizePtyRequest, SealLayerRequest, SnapshotRootFilesystemRequest,
-    VmFetchRequest, WriteStdinRequest,
-};
-use secure_exec_sidecar_protocol::wire as generated_wire;
-
-pub const UNSUPPORTED_HOST_CALLBACK_DIRECTION_CODE: &str = "unsupported_direction";
-pub const UNSUPPORTED_HOST_CALLBACK_DIRECTION_MESSAGE: &str =
-    "host callback request categories are sidecar-to-host only in this scaffold";
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum RequestDispatchMode {
-    Immediate,
-    Async,
-}
-
-// Request payload variants intentionally vary widely in size (small acks next
-// to bulky create/exec payloads); boxing is a wire-adjacent refactor.
-#[allow(clippy::large_enum_variant)]
-#[derive(Debug, Clone)]
-pub enum RequestRoute {
-    Authenticate(AuthenticateRequest),
-    OpenSession(OpenSessionRequest),
-    CreateVm(CreateVmRequest),
-    DisposeVm(DisposeVmRequest),
-    BootstrapRootFilesystem(BootstrapRootFilesystemRequest),
-    ConfigureVm(ConfigureVmRequest),
-    RegisterHostCallbacks(RegisterHostCallbacksRequest),
-    CreateLayer(CreateLayerRequest),
-    SealLayer(SealLayerRequest),
-    ImportSnapshot(ImportSnapshotRequest),
-    ExportSnapshot(ExportSnapshotRequest),
-    CreateOverlay(CreateOverlayRequest),
-    GuestFilesystemCall(GuestFilesystemCallRequest),
-    GuestKernelCall(GuestKernelCallRequest),
-    SnapshotRootFilesystem(SnapshotRootFilesystemRequest),
-    Execute(ExecuteRequest),
-    WriteStdin(WriteStdinRequest),
-    ResizePty(ResizePtyRequest),
-    CloseStdin(CloseStdinRequest),
-    KillProcess(KillProcessRequest),
-    GetProcessSnapshot(GetProcessSnapshotRequest),
-    GetResourceSnapshot(GetResourceSnapshotRequest),
-    FindListener(FindListenerRequest),
-    FindBoundUdp(FindBoundUdpRequest),
-    VmFetch(VmFetchRequest),
-    GetSignalState(GetSignalStateRequest),
-    GetZombieTimerCount(GetZombieTimerCountRequest),
-    LinkPackage(LinkPackageRequest),
-    ProvidedCommands(ProvidedCommandsRequest),
-    Ext(ExtEnvelope),
-    UnsupportedHostCallbackDirection,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum BlockingExtensionInterrupt<'a> {
-    ExtensionPayload(&'a [u8]),
-    KillProcess,
-}
-
-pub fn route_request_payload(request: &RequestFrame) -> RequestRoute {
-    match request.payload.clone() {
-        RequestPayload::Authenticate(payload) => RequestRoute::Authenticate(payload),
-        RequestPayload::OpenSession(payload) => RequestRoute::OpenSession(payload),
-        RequestPayload::CreateVm(payload) => RequestRoute::CreateVm(payload),
-        RequestPayload::DisposeVm(payload) => RequestRoute::DisposeVm(payload),
-        RequestPayload::BootstrapRootFilesystem(payload) => {
-            RequestRoute::BootstrapRootFilesystem(payload)
-        }
-        RequestPayload::ConfigureVm(payload) => RequestRoute::ConfigureVm(payload),
-        RequestPayload::RegisterHostCallbacks(payload) => {
-            RequestRoute::RegisterHostCallbacks(payload)
-        }
-        RequestPayload::CreateLayer(payload) => RequestRoute::CreateLayer(payload),
-        RequestPayload::SealLayer(payload) => RequestRoute::SealLayer(payload),
-        RequestPayload::ImportSnapshot(payload) => RequestRoute::ImportSnapshot(payload),
-        RequestPayload::ExportSnapshot(payload) => RequestRoute::ExportSnapshot(payload),
-        RequestPayload::CreateOverlay(payload) => RequestRoute::CreateOverlay(payload),
-        RequestPayload::GuestFilesystemCall(payload) => RequestRoute::GuestFilesystemCall(payload),
-        RequestPayload::GuestKernelCall(payload) => RequestRoute::GuestKernelCall(payload),
-        RequestPayload::SnapshotRootFilesystem(payload) => {
-            RequestRoute::SnapshotRootFilesystem(payload)
-        }
-        RequestPayload::Execute(payload) => RequestRoute::Execute(payload),
-        RequestPayload::WriteStdin(payload) => RequestRoute::WriteStdin(payload),
-        RequestPayload::ResizePty(payload) => RequestRoute::ResizePty(payload),
-        RequestPayload::CloseStdin(payload) => RequestRoute::CloseStdin(payload),
-        RequestPayload::KillProcess(payload) => RequestRoute::KillProcess(payload),
-        RequestPayload::GetProcessSnapshot(payload) => RequestRoute::GetProcessSnapshot(payload),
-        RequestPayload::GetResourceSnapshot(payload) => RequestRoute::GetResourceSnapshot(payload),
-        RequestPayload::FindListener(payload) => RequestRoute::FindListener(payload),
-        RequestPayload::FindBoundUdp(payload) => RequestRoute::FindBoundUdp(payload),
-        RequestPayload::VmFetch(payload) => RequestRoute::VmFetch(payload),
-        RequestPayload::GetSignalState(payload) => RequestRoute::GetSignalState(payload),
-        RequestPayload::GetZombieTimerCount(payload) => RequestRoute::GetZombieTimerCount(payload),
-        RequestPayload::LinkPackage(payload) => RequestRoute::LinkPackage(payload),
-        RequestPayload::ProvidedCommands(payload) => RequestRoute::ProvidedCommands(payload),
-        RequestPayload::HostFilesystemCall(_)
-        | RequestPayload::PersistenceLoad(_)
-        | RequestPayload::PersistenceFlush(_) => RequestRoute::UnsupportedHostCallbackDirection,
-        RequestPayload::Ext(payload) => RequestRoute::Ext(payload),
-    }
-}
-
-pub fn generated_wire_blocking_extension_interrupt<'a>(
-    active_request: &generated_wire::RequestFrame,
-    blocking_namespace: &str,
-    interrupting_request: &'a generated_wire::RequestFrame,
-) -> Option<BlockingExtensionInterrupt<'a>> {
-    if interrupting_request.ownership != active_request.ownership {
-        return None;
-    }
-
-    match &interrupting_request.payload {
-        generated_wire::RequestPayload::ExtEnvelope(envelope)
-            if envelope.namespace == blocking_namespace =>
-        {
-            Some(BlockingExtensionInterrupt::ExtensionPayload(
-                &envelope.payload,
-            ))
-        }
-        generated_wire::RequestPayload::ExtEnvelope(_) => None,
-        generated_wire::RequestPayload::KillProcessRequest(_) => {
-            Some(BlockingExtensionInterrupt::KillProcess)
-        }
-        _ => None,
-    }
-}
-
-pub fn request_dispatch_mode(request: &RequestFrame) -> RequestDispatchMode {
-    match request.payload {
-        RequestPayload::DisposeVm(_) | RequestPayload::Ext(_) => RequestDispatchMode::Async,
-        RequestPayload::Authenticate(_)
-        | RequestPayload::OpenSession(_)
-        | RequestPayload::CreateVm(_)
-        | RequestPayload::BootstrapRootFilesystem(_)
-        | RequestPayload::ConfigureVm(_)
-        | RequestPayload::RegisterHostCallbacks(_)
-        | RequestPayload::CreateLayer(_)
-        | RequestPayload::SealLayer(_)
-        | RequestPayload::ImportSnapshot(_)
-        | RequestPayload::ExportSnapshot(_)
-        | RequestPayload::CreateOverlay(_)
-        | RequestPayload::GuestFilesystemCall(_)
-        | RequestPayload::GuestKernelCall(_)
-        | RequestPayload::SnapshotRootFilesystem(_)
-        | RequestPayload::Execute(_)
-        | RequestPayload::WriteStdin(_)
-        | RequestPayload::ResizePty(_)
-        | RequestPayload::CloseStdin(_)
-        | RequestPayload::KillProcess(_)
-        | RequestPayload::GetProcessSnapshot(_)
-        | RequestPayload::GetResourceSnapshot(_)
-        | RequestPayload::FindListener(_)
-        | RequestPayload::FindBoundUdp(_)
-        | RequestPayload::VmFetch(_)
-        | RequestPayload::GetSignalState(_)
-        | RequestPayload::GetZombieTimerCount(_)
-        | RequestPayload::LinkPackage(_)
-        | RequestPayload::ProvidedCommands(_)
-        | RequestPayload::HostFilesystemCall(_)
-        | RequestPayload::PersistenceLoad(_)
-        | RequestPayload::PersistenceFlush(_) => RequestDispatchMode::Immediate,
-    }
-}
-
-pub fn request_is_unsupported_host_callback_direction(request: &RequestFrame) -> bool {
-    matches!(
-        request.payload,
-        RequestPayload::HostFilesystemCall(_)
-            | RequestPayload::PersistenceLoad(_)
-            | RequestPayload::PersistenceFlush(_)
-    )
-}
-
-pub fn unsupported_host_callback_direction_dispatch(request: &RequestFrame) -> DispatchResult {
-    debug_assert!(request_is_unsupported_host_callback_direction(request));
-    DispatchResult {
-        response: reject(
-            request,
-            UNSUPPORTED_HOST_CALLBACK_DIRECTION_CODE,
-            UNSUPPORTED_HOST_CALLBACK_DIRECTION_MESSAGE,
-        ),
-        events: Vec::new(),
-    }
-}
-
-pub fn connection_id_of(ownership: &OwnershipScope) -> Option<String> {
-    match ownership {
-        OwnershipScope::ConnectionOwnership(ownership) => Some(ownership.connection_id.clone()),
-        OwnershipScope::SessionOwnership(ownership) => Some(ownership.connection_id.clone()),
-        OwnershipScope::VmOwnership(ownership) => Some(ownership.connection_id.clone()),
-    }
-}
-
-pub fn session_scope_of(ownership: &OwnershipScope) -> Option<(String, String)> {
-    match ownership {
-        OwnershipScope::SessionOwnership(ownership) => Some((
-            ownership.connection_id.clone(),
-            ownership.session_id.clone(),
-        )),
-        OwnershipScope::VmOwnership(ownership) => Some((
-            ownership.connection_id.clone(),
-            ownership.session_id.clone(),
-        )),
-        OwnershipScope::ConnectionOwnership(_) => None,
-    }
-}
-
-pub fn vm_id_of(ownership: &OwnershipScope) -> Option<String> {
-    match ownership {
-        OwnershipScope::VmOwnership(ownership) => Some(ownership.vm_id.clone()),
-        OwnershipScope::ConnectionOwnership(_) | OwnershipScope::SessionOwnership(_) => None,
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use secure_exec_sidecar_protocol::protocol::{
-        AuthenticateRequest, ExtEnvelope, FilesystemOperation, HostFilesystemCallRequest,
-        OwnershipScope, PersistenceFlushRequest, PersistenceLoadRequest, ResponsePayload,
-        PROTOCOL_VERSION,
-    };
-    use secure_exec_sidecar_protocol::wire as generated_wire;
-
-    fn request(payload: RequestPayload) -> RequestFrame {
-        RequestFrame::new(7, OwnershipScope::connection("conn"), payload)
-    }
-
-    fn generated_request(
-        request_id: i64,
-        ownership: generated_wire::OwnershipScope,
-        payload: generated_wire::RequestPayload,
-    ) -> generated_wire::RequestFrame {
-        generated_wire::RequestFrame {
-            schema: generated_wire::protocol_schema(),
-            request_id,
-            ownership,
-            payload,
-        }
-    }
-
-    fn reverse_host_callback_payloads() -> Vec<RequestPayload> {
-        vec![
-            RequestPayload::HostFilesystemCall(HostFilesystemCallRequest {
-                operation: FilesystemOperation::Read,
-                path: String::from("/state"),
-                payload_size_bytes: 0,
-            }),
-            RequestPayload::PersistenceLoad(PersistenceLoadRequest {
-                key: String::from("state"),
-            }),
-            RequestPayload::PersistenceFlush(PersistenceFlushRequest {
-                key: String::from("state"),
-                payload_size_bytes: 0,
-            }),
-        ]
-    }
-
-    #[test]
-    fn dispose_and_ext_requests_are_async() {
-        let ext = request(RequestPayload::Ext(ExtEnvelope {
-            namespace: String::from("test"),
-            payload: Vec::new(),
-        }));
-        assert_eq!(request_dispatch_mode(&ext), RequestDispatchMode::Async);
-    }
-
-    #[test]
-    fn normal_requests_are_immediate() {
-        let authenticate = request(RequestPayload::Authenticate(AuthenticateRequest {
-            client_name: String::from("test"),
-            auth_token: String::from("token"),
-            protocol_version: PROTOCOL_VERSION,
-            bridge_version: 1,
-        }));
-        assert_eq!(
-            request_dispatch_mode(&authenticate),
-            RequestDispatchMode::Immediate
-        );
-    }
-
-    #[test]
-    fn host_callback_requests_are_identified_as_reverse_direction_only() {
-        for payload in reverse_host_callback_payloads() {
-            let host_call = request(payload);
-
-            assert!(request_is_unsupported_host_callback_direction(&host_call));
-            assert_eq!(
-                request_dispatch_mode(&host_call),
-                RequestDispatchMode::Immediate
-            );
-        }
-    }
-
-    #[test]
-    fn routes_protocol_payloads_through_shared_enum() {
-        let authenticate = request(RequestPayload::Authenticate(AuthenticateRequest {
-            client_name: String::from("test"),
-            auth_token: String::from("token"),
-            protocol_version: PROTOCOL_VERSION,
-            bridge_version: 1,
-        }));
-        assert!(matches!(
-            route_request_payload(&authenticate),
-            RequestRoute::Authenticate(_)
-        ));
-
-        let extension = request(RequestPayload::Ext(ExtEnvelope {
-            namespace: String::from("test"),
-            payload: vec![1, 2, 3],
-        }));
-        assert!(matches!(
-            route_request_payload(&extension),
-            RequestRoute::Ext(_)
-        ));
-
-        for payload in reverse_host_callback_payloads() {
-            let host_call = request(payload);
-            assert!(matches!(
-                route_request_payload(&host_call),
-                RequestRoute::UnsupportedHostCallbackDirection
-            ));
-        }
-    }
-
-    #[test]
-    fn unsupported_host_callback_dispatch_rejects_with_shared_code() {
-        for payload in reverse_host_callback_payloads() {
-            let host_call = request(payload);
-
-            let dispatch = unsupported_host_callback_direction_dispatch(&host_call);
-
-            assert!(dispatch.events.is_empty());
-            assert_eq!(dispatch.response.request_id, host_call.request_id);
-            assert_eq!(dispatch.response.ownership, host_call.ownership);
-            match dispatch.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, UNSUPPORTED_HOST_CALLBACK_DIRECTION_CODE);
-                    assert_eq!(
-                        rejected.message,
-                        UNSUPPORTED_HOST_CALLBACK_DIRECTION_MESSAGE
-                    );
-                }
-                other => panic!("unexpected response payload: {other:?}"),
-            }
-        }
-    }
-
-    #[test]
-    fn generated_wire_prompt_interrupt_classifier_matches_only_same_scope_interrupts() {
-        let ownership = generated_wire::OwnershipScope::VmOwnership(generated_wire::VmOwnership {
-            connection_id: String::from("conn"),
-            session_id: String::from("session"),
-            vm_id: String::from("vm"),
-        });
-        let active = generated_request(
-            1,
-            ownership.clone(),
-            generated_wire::RequestPayload::ExtEnvelope(generated_wire::ExtEnvelope {
-                namespace: String::from("prompt"),
-                payload: b"active".to_vec(),
-            }),
-        );
-
-        let same_namespace = generated_request(
-            2,
-            ownership.clone(),
-            generated_wire::RequestPayload::ExtEnvelope(generated_wire::ExtEnvelope {
-                namespace: String::from("prompt"),
-                payload: b"cancel".to_vec(),
-            }),
-        );
-        assert_eq!(
-            generated_wire_blocking_extension_interrupt(&active, "prompt", &same_namespace),
-            Some(BlockingExtensionInterrupt::ExtensionPayload(b"cancel"))
-        );
-
-        let kill = generated_request(
-            3,
-            ownership.clone(),
-            generated_wire::RequestPayload::KillProcessRequest(
-                generated_wire::KillProcessRequest {
-                    process_id: String::from("proc"),
-                    signal: String::from("SIGTERM"),
-                },
-            ),
-        );
-        assert_eq!(
-            generated_wire_blocking_extension_interrupt(&active, "prompt", &kill),
-            Some(BlockingExtensionInterrupt::KillProcess)
-        );
-
-        let other_namespace = generated_request(
-            4,
-            ownership.clone(),
-            generated_wire::RequestPayload::ExtEnvelope(generated_wire::ExtEnvelope {
-                namespace: String::from("other"),
-                payload: b"cancel".to_vec(),
-            }),
-        );
-        assert_eq!(
-            generated_wire_blocking_extension_interrupt(&active, "prompt", &other_namespace),
-            None
-        );
-
-        let other_scope = generated_request(
-            5,
-            generated_wire::OwnershipScope::VmOwnership(generated_wire::VmOwnership {
-                connection_id: String::from("conn"),
-                session_id: String::from("session"),
-                vm_id: String::from("other-vm"),
-            }),
-            generated_wire::RequestPayload::KillProcessRequest(
-                generated_wire::KillProcessRequest {
-                    process_id: String::from("proc"),
-                    signal: String::from("SIGTERM"),
-                },
-            ),
-        );
-        assert_eq!(
-            generated_wire_blocking_extension_interrupt(&active, "prompt", &other_scope),
-            None
-        );
-    }
-
-    #[test]
-    fn ownership_scope_helpers_extract_shared_ids() {
-        let connection = OwnershipScope::connection("conn-1");
-        let session = OwnershipScope::session("conn-1", "session-1");
-        let vm = OwnershipScope::vm("conn-1", "session-1", "vm-1");
-
-        assert_eq!(connection_id_of(&connection).as_deref(), Some("conn-1"));
-        assert_eq!(connection_id_of(&session).as_deref(), Some("conn-1"));
-        assert_eq!(connection_id_of(&vm).as_deref(), Some("conn-1"));
-        assert_eq!(
-            session_scope_of(&session),
-            Some((String::from("conn-1"), String::from("session-1")))
-        );
-        assert_eq!(
-            session_scope_of(&vm),
-            Some((String::from("conn-1"), String::from("session-1")))
-        );
-        assert_eq!(session_scope_of(&connection), None);
-        assert_eq!(vm_id_of(&vm).as_deref(), Some("vm-1"));
-        assert_eq!(vm_id_of(&session), None);
-    }
-}
diff --git a/crates/sidecar-core/src/signals.rs b/crates/sidecar-core/src/signals.rs
deleted file mode 100644
index ed32b4ca5..000000000
--- a/crates/sidecar-core/src/signals.rs
+++ /dev/null
@@ -1,339 +0,0 @@
-use secure_exec_bridge::ExecutionSignal;
-use secure_exec_sidecar_protocol::protocol::{SignalDispositionAction, SignalHandlerRegistration};
-use serde_json::Value;
-use std::collections::BTreeMap;
-
-pub fn execution_signal_to_kernel(signal: ExecutionSignal) -> i32 {
-    match signal {
-        ExecutionSignal::Terminate => 15,
-        ExecutionSignal::Interrupt => 2,
-        ExecutionSignal::Kill => 9,
-    }
-}
-
-pub fn execution_signal_from_number(signal: i32) -> Option<ExecutionSignal> {
-    match signal {
-        2 => Some(ExecutionSignal::Interrupt),
-        9 => Some(ExecutionSignal::Kill),
-        15 => Some(ExecutionSignal::Terminate),
-        _ => None,
-    }
-}
-
-pub fn default_signal_exit_code(signal: i32) -> Option<i32> {
-    (signal > 0).then_some(128 + signal)
-}
-
-pub fn is_valid_posix_signal_number(signal: u32) -> bool {
-    signal <= 31
-}
-
-pub fn parse_posix_signal(signal: &str) -> Option<i32> {
-    let trimmed = signal.trim();
-    if trimmed.is_empty() {
-        return None;
-    }
-
-    if let Ok(value) = trimmed.parse::<i32>() {
-        return (0..=31).contains(&value).then_some(value);
-    }
-
-    let upper = trimmed.to_ascii_uppercase();
-    let normalized = upper.strip_prefix("SIG").unwrap_or(&upper);
-    signal_number_from_name(normalized)
-}
-
-pub fn canonical_signal_name(signal: i32) -> Option<&'static str> {
-    match signal {
-        1 => Some("SIGHUP"),
-        2 => Some("SIGINT"),
-        3 => Some("SIGQUIT"),
-        4 => Some("SIGILL"),
-        5 => Some("SIGTRAP"),
-        6 => Some("SIGABRT"),
-        7 => Some("SIGBUS"),
-        8 => Some("SIGFPE"),
-        9 => Some("SIGKILL"),
-        10 => Some("SIGUSR1"),
-        11 => Some("SIGSEGV"),
-        12 => Some("SIGUSR2"),
-        13 => Some("SIGPIPE"),
-        14 => Some("SIGALRM"),
-        15 => Some("SIGTERM"),
-        16 => Some("SIGSTKFLT"),
-        17 => Some("SIGCHLD"),
-        18 => Some("SIGCONT"),
-        19 => Some("SIGSTOP"),
-        20 => Some("SIGTSTP"),
-        21 => Some("SIGTTIN"),
-        22 => Some("SIGTTOU"),
-        23 => Some("SIGURG"),
-        24 => Some("SIGXCPU"),
-        25 => Some("SIGXFSZ"),
-        26 => Some("SIGVTALRM"),
-        27 => Some("SIGPROF"),
-        28 => Some("SIGWINCH"),
-        29 => Some("SIGIO"),
-        30 => Some("SIGPWR"),
-        31 => Some("SIGSYS"),
-        _ => None,
-    }
-}
-
-pub fn signal_number_from_name(signal: &str) -> Option<i32> {
-    match signal {
-        "0" => Some(0),
-        "HUP" => Some(1),
-        "INT" => Some(2),
-        "QUIT" => Some(3),
-        "ILL" => Some(4),
-        "TRAP" => Some(5),
-        "ABRT" | "IOT" => Some(6),
-        "BUS" => Some(7),
-        "FPE" => Some(8),
-        "KILL" => Some(9),
-        "USR1" => Some(10),
-        "SEGV" => Some(11),
-        "USR2" => Some(12),
-        "PIPE" => Some(13),
-        "ALRM" => Some(14),
-        "TERM" => Some(15),
-        "STKFLT" => Some(16),
-        "CHLD" => Some(17),
-        "CONT" => Some(18),
-        "STOP" => Some(19),
-        "TSTP" => Some(20),
-        "TTIN" => Some(21),
-        "TTOU" => Some(22),
-        "URG" => Some(23),
-        "XCPU" => Some(24),
-        "XFSZ" => Some(25),
-        "VTALRM" => Some(26),
-        "PROF" => Some(27),
-        "WINCH" => Some(28),
-        "IO" | "POLL" => Some(29),
-        "PWR" => Some(30),
-        "SYS" => Some(31),
-        _ => None,
-    }
-}
-
-pub fn parse_process_signal_state_request(
-    args: &[Value],
-) -> Result<(u32, SignalHandlerRegistration), crate::SidecarCoreError> {
-    let signal = signal_state_u32_arg(args, 0, "process.signal_state signal")?;
-    validate_process_signal_number(signal, "process.signal_state signal")?;
-    let action = signal_state_str_arg(args, 1, "process.signal_state action")?;
-    let mask_json = signal_state_str_arg(args, 2, "process.signal_state mask")?;
-    let flags = signal_state_u32_arg(args, 3, "process.signal_state flags")?;
-    let mask: Vec<u32> = serde_json::from_str(mask_json).map_err(|error| {
-        crate::SidecarCoreError::new(format!(
-            "process.signal_state mask must be valid JSON: {error}"
-        ))
-    })?;
-    for signal in &mask {
-        validate_process_signal_number(*signal, "process.signal_state mask entries")?;
-    }
-    let action = match action.trim().to_ascii_lowercase().as_str() {
-        "default" => SignalDispositionAction::Default,
-        "ignore" => SignalDispositionAction::Ignore,
-        "user" => SignalDispositionAction::User,
-        other => {
-            return Err(crate::SidecarCoreError::new(format!(
-                "unsupported process.signal_state action {other}"
-            )));
-        }
-    };
-
-    Ok((
-        signal,
-        SignalHandlerRegistration {
-            action,
-            mask,
-            flags,
-        },
-    ))
-}
-
-pub fn apply_process_signal_state_update(
-    signal_states: &mut BTreeMap<String, BTreeMap<u32, SignalHandlerRegistration>>,
-    process_id: &str,
-    signal: u32,
-    registration: SignalHandlerRegistration,
-) {
-    if registration.action == SignalDispositionAction::Default
-        && registration.mask.is_empty()
-        && registration.flags == 0
-    {
-        let remove_process_entry = signal_states
-            .get_mut(process_id)
-            .map(|handlers| {
-                handlers.remove(&signal);
-                handlers.is_empty()
-            })
-            .unwrap_or(false);
-        if remove_process_entry {
-            signal_states.remove(process_id);
-        }
-        return;
-    }
-
-    signal_states
-        .entry(process_id.to_owned())
-        .or_default()
-        .insert(signal, registration);
-}
-
-fn validate_process_signal_number(signal: u32, label: &str) -> Result<(), crate::SidecarCoreError> {
-    if is_valid_posix_signal_number(signal) {
-        Ok(())
-    } else {
-        Err(crate::SidecarCoreError::new(format!(
-            "{label} must be a valid POSIX signal"
-        )))
-    }
-}
-
-fn signal_state_u32_arg(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<u32, crate::SidecarCoreError> {
-    let value = args
-        .get(index)
-        .ok_or_else(|| crate::SidecarCoreError::new(format!("{label} missing")))?;
-    if let Some(value) = value.as_u64() {
-        return u32::try_from(value)
-            .map_err(|_| crate::SidecarCoreError::new(format!("{label} must fit in u32")));
-    }
-    if let Some(value) = value.as_i64() {
-        return u32::try_from(value)
-            .map_err(|_| crate::SidecarCoreError::new(format!("{label} must fit in u32")));
-    }
-    if let Some(value) = value.as_str() {
-        return value
-            .parse::<u32>()
-            .map_err(|error| crate::SidecarCoreError::new(format!("{label}: {error}")));
-    }
-    Err(crate::SidecarCoreError::new(format!(
-        "{label} must be a u32"
-    )))
-}
-
-fn signal_state_str_arg<'a>(
-    args: &'a [Value],
-    index: usize,
-    label: &str,
-) -> Result<&'a str, crate::SidecarCoreError> {
-    args.get(index)
-        .and_then(Value::as_str)
-        .ok_or_else(|| crate::SidecarCoreError::new(format!("{label} must be a string")))
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn execution_signal_mapping_matches_posix_defaults() {
-        assert_eq!(execution_signal_to_kernel(ExecutionSignal::Interrupt), 2);
-        assert_eq!(execution_signal_to_kernel(ExecutionSignal::Kill), 9);
-        assert_eq!(execution_signal_to_kernel(ExecutionSignal::Terminate), 15);
-        assert_eq!(
-            execution_signal_from_number(2),
-            Some(ExecutionSignal::Interrupt)
-        );
-        assert_eq!(execution_signal_from_number(9), Some(ExecutionSignal::Kill));
-        assert_eq!(
-            execution_signal_from_number(15),
-            Some(ExecutionSignal::Terminate)
-        );
-        assert_eq!(execution_signal_from_number(10), None);
-    }
-
-    #[test]
-    fn default_signal_exit_code_is_128_plus_signal() {
-        assert_eq!(default_signal_exit_code(2), Some(130));
-        assert_eq!(default_signal_exit_code(9), Some(137));
-        assert_eq!(default_signal_exit_code(15), Some(143));
-        assert_eq!(default_signal_exit_code(0), None);
-    }
-
-    #[test]
-    fn validates_posix_signal_number_range() {
-        assert!(is_valid_posix_signal_number(0));
-        assert!(is_valid_posix_signal_number(31));
-        assert!(!is_valid_posix_signal_number(32));
-    }
-
-    #[test]
-    fn parses_signal_names_and_numbers() {
-        assert_eq!(parse_posix_signal("SIGTERM"), Some(15));
-        assert_eq!(parse_posix_signal("term"), Some(15));
-        assert_eq!(canonical_signal_name(16), Some("SIGSTKFLT"));
-        assert_eq!(parse_posix_signal("9"), Some(9));
-        assert_eq!(parse_posix_signal("0"), Some(0));
-        assert_eq!(parse_posix_signal("SIGBOGUS"), None);
-        assert_eq!(parse_posix_signal("32"), None);
-    }
-
-    #[test]
-    fn parses_and_applies_process_signal_state_updates() {
-        let args = vec![
-            Value::from(15),
-            Value::from("user"),
-            Value::from("[2]"),
-            Value::from(0),
-        ];
-        let (signal, registration) =
-            parse_process_signal_state_request(&args).expect("signal state");
-        assert_eq!(signal, 15);
-        assert_eq!(registration.action, SignalDispositionAction::User);
-        assert_eq!(registration.mask, vec![2]);
-
-        let mut states = BTreeMap::new();
-        apply_process_signal_state_update(&mut states, "proc-1", signal, registration);
-        assert!(states
-            .get("proc-1")
-            .is_some_and(|handlers| handlers.contains_key(&15)));
-
-        apply_process_signal_state_update(
-            &mut states,
-            "proc-1",
-            15,
-            SignalHandlerRegistration {
-                action: SignalDispositionAction::Default,
-                mask: Vec::new(),
-                flags: 0,
-            },
-        );
-        assert!(!states.contains_key("proc-1"));
-    }
-
-    #[test]
-    fn rejects_unknown_process_signal_state_values() {
-        let invalid_signal = parse_process_signal_state_request(&[
-            Value::from(32),
-            Value::from("user"),
-            Value::from("[]"),
-            Value::from(0),
-        ])
-        .expect_err("unknown signal must fail");
-        assert_eq!(
-            invalid_signal.to_string(),
-            "process.signal_state signal must be a valid POSIX signal"
-        );
-
-        let invalid_mask = parse_process_signal_state_request(&[
-            Value::from(15),
-            Value::from("user"),
-            Value::from("[32]"),
-            Value::from(0),
-        ])
-        .expect_err("unknown mask signal must fail");
-        assert_eq!(
-            invalid_mask.to_string(),
-            "process.signal_state mask entries must be a valid POSIX signal"
-        );
-    }
-}
diff --git a/crates/sidecar-core/src/tools.rs b/crates/sidecar-core/src/tools.rs
deleted file mode 100644
index a0eff79a8..000000000
--- a/crates/sidecar-core/src/tools.rs
+++ /dev/null
@@ -1,352 +0,0 @@
-use secure_exec_sidecar_protocol::protocol::RegisterHostCallbacksRequest;
-use serde_json::Value;
-use std::collections::{BTreeMap, BTreeSet};
-use std::error::Error;
-use std::fmt;
-
-pub const DEFAULT_TOOL_TIMEOUT_MS: u64 = 30_000;
-pub const MAX_TOOL_TIMEOUT_MS: u64 = 300_000;
-pub const MAX_REGISTERED_TOOLKITS: usize = 64;
-pub const MAX_REGISTERED_TOOLS_PER_VM: usize = 256;
-pub const MAX_TOOLS_PER_TOOLKIT: usize = 64;
-pub const MAX_TOOLKIT_NAME_LENGTH: usize = 64;
-pub const MAX_TOOL_NAME_LENGTH: usize = 64;
-pub const MAX_TOOL_DESCRIPTION_LENGTH: usize = 200;
-pub const MAX_TOOL_SCHEMA_BYTES: usize = 16 * 1024;
-pub const MAX_TOOL_SCHEMA_DEPTH: usize = 32;
-pub const MAX_TOOL_EXAMPLES_PER_TOOL: usize = 16;
-pub const MAX_TOOL_EXAMPLE_INPUT_BYTES: usize = 4 * 1024;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum ToolRegistrationError {
-    InvalidState(String),
-    Conflict(String),
-}
-
-impl fmt::Display for ToolRegistrationError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::InvalidState(message) | Self::Conflict(message) => f.write_str(message),
-        }
-    }
-}
-
-impl Error for ToolRegistrationError {}
-
-pub fn validate_toolkit_registration(
-    payload: &RegisterHostCallbacksRequest,
-) -> Result<(), ToolRegistrationError> {
-    validate_toolkit_name(&payload.name)?;
-    if payload.description.is_empty() {
-        return Err(ToolRegistrationError::InvalidState(format!(
-            "toolkit {} is missing a description",
-            payload.name
-        )));
-    }
-    validate_description_length(
-        &format!("Toolkit \"{}\"", payload.name),
-        &payload.description,
-    )?;
-    validate_command_aliases("command alias", &payload.command_aliases)?;
-    validate_command_aliases("registry command alias", &payload.registry_command_aliases)?;
-    for alias in &payload.command_aliases {
-        if payload.registry_command_aliases.contains(alias) {
-            return Err(ToolRegistrationError::InvalidState(format!(
-                "host callback command alias must not also be a registry command alias: {alias}"
-            )));
-        }
-    }
-    if payload.callbacks.is_empty() {
-        return Err(ToolRegistrationError::InvalidState(format!(
-            "toolkit {} must define at least one tool",
-            payload.name
-        )));
-    }
-    if payload.callbacks.len() > MAX_TOOLS_PER_TOOLKIT {
-        return Err(ToolRegistrationError::InvalidState(format!(
-            "toolkit {} defines {} tools, max is {MAX_TOOLS_PER_TOOLKIT}",
-            payload.name,
-            payload.callbacks.len()
-        )));
-    }
-    for (tool_name, tool) in &payload.callbacks {
-        validate_tool_name(tool_name)?;
-        if tool.description.is_empty() {
-            return Err(ToolRegistrationError::InvalidState(format!(
-                "tool {} in toolkit {} is missing a description",
-                tool_name, payload.name
-            )));
-        }
-        validate_description_length(
-            &format!("Tool \"{}/{}\"", payload.name, tool_name),
-            &tool.description,
-        )?;
-        let tool_input_schema: Value =
-            serde_json::from_str(&tool.input_schema).map_err(|error| {
-                ToolRegistrationError::InvalidState(format!(
-                    "Tool \"{}/{}\" input schema is invalid JSON: {error}",
-                    payload.name, tool_name
-                ))
-            })?;
-        validate_tool_schema_shape(
-            &format!("Tool \"{}/{}\" input schema", payload.name, tool_name),
-            &tool_input_schema,
-        )?;
-        if let Some(timeout_ms) = tool.timeout_ms {
-            if timeout_ms > MAX_TOOL_TIMEOUT_MS {
-                return Err(ToolRegistrationError::InvalidState(format!(
-                    "Tool \"{}/{}\" timeout is {timeout_ms}ms, max is {MAX_TOOL_TIMEOUT_MS}ms",
-                    payload.name, tool_name
-                )));
-            }
-        }
-        if tool.examples.len() > MAX_TOOL_EXAMPLES_PER_TOOL {
-            return Err(ToolRegistrationError::InvalidState(format!(
-                "Tool \"{}/{}\" defines {} examples, max is {MAX_TOOL_EXAMPLES_PER_TOOL}",
-                payload.name,
-                tool_name,
-                tool.examples.len()
-            )));
-        }
-        for (index, example) in tool.examples.iter().enumerate() {
-            validate_description_length(
-                &format!("Tool \"{}/{}\" example {index}", payload.name, tool_name),
-                &example.description,
-            )?;
-            let example_input: Value = serde_json::from_str(&example.input).map_err(|error| {
-                ToolRegistrationError::InvalidState(format!(
-                    "Tool \"{}/{}\" example {index} input is invalid JSON: {error}",
-                    payload.name, tool_name
-                ))
-            })?;
-            validate_json_byte_length(
-                &format!(
-                    "Tool \"{}/{}\" example {index} input",
-                    payload.name, tool_name
-                ),
-                &example_input,
-                MAX_TOOL_EXAMPLE_INPUT_BYTES,
-            )?;
-        }
-    }
-    Ok(())
-}
-
-pub fn ensure_toolkit_name_available(
-    toolkits: &BTreeMap<String, RegisterHostCallbacksRequest>,
-    toolkit_name: &str,
-) -> Result<(), ToolRegistrationError> {
-    if toolkits.contains_key(toolkit_name) {
-        return Err(ToolRegistrationError::Conflict(format!(
-            "toolkit already registered: {toolkit_name}"
-        )));
-    }
-    Ok(())
-}
-
-pub fn ensure_command_aliases_available(
-    toolkits: &BTreeMap<String, RegisterHostCallbacksRequest>,
-    payload: &RegisterHostCallbacksRequest,
-) -> Result<(), ToolRegistrationError> {
-    let requested_command_aliases = payload.command_aliases.iter().collect::<BTreeSet<_>>();
-    let requested_registry_aliases = payload
-        .registry_command_aliases
-        .iter()
-        .collect::<BTreeSet<_>>();
-    for toolkit in toolkits.values() {
-        for alias in &toolkit.command_aliases {
-            if requested_command_aliases.contains(alias)
-                || requested_registry_aliases.contains(alias)
-            {
-                return Err(ToolRegistrationError::Conflict(format!(
-                    "host callback command alias already registered: {alias}"
-                )));
-            }
-        }
-        for alias in &toolkit.registry_command_aliases {
-            if requested_command_aliases.contains(alias) {
-                return Err(ToolRegistrationError::Conflict(format!(
-                    "host callback command alias already registered: {alias}"
-                )));
-            }
-        }
-    }
-    Ok(())
-}
-
-pub fn ensure_toolkit_registry_capacity(
-    toolkits: &BTreeMap<String, RegisterHostCallbacksRequest>,
-    payload: &RegisterHostCallbacksRequest,
-) -> Result<(), ToolRegistrationError> {
-    if toolkits.len() >= MAX_REGISTERED_TOOLKITS {
-        return Err(ToolRegistrationError::InvalidState(format!(
-            "VM already has {} registered toolkits, max is {MAX_REGISTERED_TOOLKITS}",
-            toolkits.len()
-        )));
-    }
-
-    let registered_tools = toolkits
-        .values()
-        .map(|toolkit| toolkit.callbacks.len())
-        .sum::<usize>();
-    let total_tools = registered_tools
-        .checked_add(payload.callbacks.len())
-        .ok_or_else(|| {
-            ToolRegistrationError::InvalidState(String::from(
-                "registered host callback count overflow",
-            ))
-        })?;
-    if total_tools > MAX_REGISTERED_TOOLS_PER_VM {
-        return Err(ToolRegistrationError::InvalidState(format!(
-            "VM would have {total_tools} registered host callbacks, max is {MAX_REGISTERED_TOOLS_PER_VM}"
-        )));
-    }
-
-    Ok(())
-}
-
-pub fn registered_tool_command_names(
-    toolkits: &BTreeMap<String, RegisterHostCallbacksRequest>,
-) -> Vec<String> {
-    let mut seen = BTreeSet::new();
-    let mut commands = Vec::new();
-    for toolkit in toolkits.values() {
-        for alias in toolkit
-            .registry_command_aliases
-            .iter()
-            .chain(toolkit.command_aliases.iter())
-        {
-            if seen.insert(alias.clone()) {
-                commands.push(alias.clone());
-            }
-        }
-    }
-    commands
-}
-
-fn validate_toolkit_name(name: &str) -> Result<(), ToolRegistrationError> {
-    if name.len() > MAX_TOOLKIT_NAME_LENGTH {
-        return Err(ToolRegistrationError::InvalidState(format!(
-            "invalid toolkit name {name}; max length is {MAX_TOOLKIT_NAME_LENGTH}"
-        )));
-    }
-    if name.is_empty()
-        || !name
-            .chars()
-            .all(|ch| ch.is_ascii_lowercase() || ch.is_ascii_digit() || ch == '-')
-    {
-        return Err(ToolRegistrationError::InvalidState(format!(
-            "invalid toolkit name {name}; expected lowercase alphanumeric characters plus hyphens"
-        )));
-    }
-    Ok(())
-}
-
-fn validate_tool_name(name: &str) -> Result<(), ToolRegistrationError> {
-    if name.len() > MAX_TOOL_NAME_LENGTH {
-        return Err(ToolRegistrationError::InvalidState(format!(
-            "invalid tool name {name}; max length is {MAX_TOOL_NAME_LENGTH}"
-        )));
-    }
-    if name.is_empty()
-        || !name
-            .chars()
-            .all(|ch| ch.is_ascii_lowercase() || ch.is_ascii_digit() || ch == '-')
-    {
-        return Err(ToolRegistrationError::InvalidState(format!(
-            "invalid tool name {name}; expected lowercase alphanumeric characters plus hyphens"
-        )));
-    }
-    Ok(())
-}
-
-fn validate_command_aliases(label: &str, aliases: &[String]) -> Result<(), ToolRegistrationError> {
-    let mut seen = BTreeSet::new();
-    for alias in aliases {
-        validate_command_alias(label, alias)?;
-        if !seen.insert(alias) {
-            return Err(ToolRegistrationError::InvalidState(format!(
-                "duplicate host callback {label}: {alias}"
-            )));
-        }
-    }
-    Ok(())
-}
-
-fn validate_command_alias(label: &str, alias: &str) -> Result<(), ToolRegistrationError> {
-    if alias.is_empty()
-        || alias == "."
-        || alias == ".."
-        || alias.contains('/')
-        || alias.contains('\0')
-    {
-        return Err(ToolRegistrationError::InvalidState(format!(
-            "invalid host callback {label}: {alias:?}"
-        )));
-    }
-    Ok(())
-}
-
-fn validate_description_length(
-    label: &str,
-    description: &str,
-) -> Result<(), ToolRegistrationError> {
-    if description.len() > MAX_TOOL_DESCRIPTION_LENGTH {
-        return Err(ToolRegistrationError::InvalidState(format!(
-            "{label} description is {} characters, max is {MAX_TOOL_DESCRIPTION_LENGTH}",
-            description.len()
-        )));
-    }
-    Ok(())
-}
-
-fn validate_tool_schema_shape(label: &str, schema: &Value) -> Result<(), ToolRegistrationError> {
-    validate_json_byte_length(label, schema, MAX_TOOL_SCHEMA_BYTES)?;
-    validate_json_depth(label, schema, 0)
-}
-
-fn validate_json_byte_length(
-    label: &str,
-    value: &Value,
-    limit: usize,
-) -> Result<(), ToolRegistrationError> {
-    let length = serde_json::to_vec(value)
-        .map_err(|error| {
-            ToolRegistrationError::InvalidState(format!("{label} is invalid JSON: {error}"))
-        })?
-        .len();
-    if length > limit {
-        return Err(ToolRegistrationError::InvalidState(format!(
-            "{label} is {length} bytes, max is {limit}"
-        )));
-    }
-    Ok(())
-}
-
-fn validate_json_depth(
-    label: &str,
-    value: &Value,
-    depth: usize,
-) -> Result<(), ToolRegistrationError> {
-    if depth > MAX_TOOL_SCHEMA_DEPTH {
-        return Err(ToolRegistrationError::InvalidState(format!(
-            "{label} exceeds max JSON depth {MAX_TOOL_SCHEMA_DEPTH}"
-        )));
-    }
-
-    match value {
-        Value::Null | Value::Bool(_) | Value::Number(_) | Value::String(_) => Ok(()),
-        Value::Array(values) => {
-            for value in values {
-                validate_json_depth(label, value, depth + 1)?;
-            }
-            Ok(())
-        }
-        Value::Object(object) => {
-            for value in object.values() {
-                validate_json_depth(label, value, depth + 1)?;
-            }
-            Ok(())
-        }
-    }
-}
diff --git a/crates/sidecar-core/src/vm_fetch.rs b/crates/sidecar-core/src/vm_fetch.rs
deleted file mode 100644
index 8f2282d5d..000000000
--- a/crates/sidecar-core/src/vm_fetch.rs
+++ /dev/null
@@ -1,389 +0,0 @@
-use crate::SidecarCoreError;
-use base64::Engine as _;
-use serde_json::{json, Value};
-use std::collections::BTreeMap;
-
-// Keep raw loopback fetch buffers inside the default sidecar wire frame budget.
-pub const VM_FETCH_BUFFER_LIMIT_BYTES: usize = 1024 * 1024;
-
-pub fn parse_kernel_http_fetch_response(
-    buffer: &[u8],
-    peer_closed: bool,
-    url: &str,
-) -> Result<Option<String>, SidecarCoreError> {
-    let Some(header_end) = find_http_header_end(buffer) else {
-        return Ok(None);
-    };
-    let header_bytes = &buffer[..header_end];
-    let head = String::from_utf8_lossy(header_bytes);
-    let mut lines = head.split("\r\n");
-    let status_line = lines.next().unwrap_or_default();
-    let mut status_parts = status_line.splitn(3, ' ');
-    let version = status_parts.next().unwrap_or_default();
-    if !version.starts_with("HTTP/") {
-        return Err(SidecarCoreError::new(format!(
-            "invalid vm.fetch HTTP response status line: {status_line}"
-        )));
-    }
-    let status = status_parts
-        .next()
-        .ok_or_else(|| {
-            SidecarCoreError::new(format!(
-                "invalid vm.fetch HTTP response status line: {status_line}"
-            ))
-        })?
-        .parse::<u16>()
-        .map_err(|error| {
-            SidecarCoreError::new(format!(
-                "invalid vm.fetch HTTP response status code in {status_line:?}: {error}"
-            ))
-        })?;
-    let status_text = status_parts.next().unwrap_or_default();
-    let mut headers = Vec::new();
-    let mut raw_headers = Vec::new();
-    let mut content_length = None;
-    let mut transfer_encoding_values = Vec::new();
-    for line in lines {
-        if line.is_empty() {
-            continue;
-        }
-        let Some((name, value)) = line.split_once(':') else {
-            return Err(SidecarCoreError::new(format!(
-                "invalid vm.fetch HTTP response header line: {line}"
-            )));
-        };
-        let value = value.trim().to_owned();
-        let normalized = name.to_ascii_lowercase();
-        if normalized == "content-length" {
-            content_length = Some(value.parse::<usize>().map_err(|error| {
-                SidecarCoreError::new(format!(
-                    "invalid vm.fetch Content-Length header {value:?}: {error}"
-                ))
-            })?);
-        } else if normalized == "transfer-encoding" {
-            transfer_encoding_values.push(value.clone());
-        }
-        headers.push(json!([normalized, value.clone()]));
-        raw_headers.push(Value::String(name.to_owned()));
-        raw_headers.push(Value::String(value));
-    }
-
-    let body_start = header_end + 4;
-    let transfer_encoding = transfer_encoding_tokens(&transfer_encoding_values);
-    let is_chunked = transfer_encoding.iter().any(|token| token == "chunked");
-    let body = if is_chunked {
-        if content_length.is_some() {
-            return Err(SidecarCoreError::new(
-                "vm.fetch HTTP response cannot include both Transfer-Encoding: chunked and Content-Length",
-            ));
-        }
-        if transfer_encoding.len() != 1 {
-            return Err(SidecarCoreError::new(format!(
-                "unsupported vm.fetch Transfer-Encoding: {}",
-                transfer_encoding.join(", ")
-            )));
-        }
-        let Some(decoded) = decode_kernel_http_chunked_body(&buffer[body_start..])? else {
-            return Ok(None);
-        };
-        decoded
-    } else if !transfer_encoding.is_empty() {
-        return Err(SidecarCoreError::new(format!(
-            "unsupported vm.fetch Transfer-Encoding: {}",
-            transfer_encoding.join(", ")
-        )));
-    } else if let Some(content_length) = content_length {
-        let body_end = body_start.saturating_add(content_length);
-        if buffer.len() < body_end {
-            return Ok(None);
-        }
-        buffer[body_start..body_end].to_vec()
-    } else if peer_closed {
-        buffer[body_start..].to_vec()
-    } else {
-        return Ok(None);
-    };
-
-    serde_json::to_string(&json!({
-        "status": status,
-        "statusText": status_text,
-        "headers": headers,
-        "rawHeaders": raw_headers,
-        "body": base64::engine::general_purpose::STANDARD.encode(&body),
-        "bodyEncoding": "base64",
-        "url": url,
-    }))
-    .map(Some)
-    .map_err(|error| SidecarCoreError::new(format!("ERR_AGENTOS_NODE_SYNC_RPC: {error}")))
-}
-
-pub fn serialize_kernel_http_fetch_request(
-    port: u16,
-    path: &str,
-    method: &str,
-    headers_json: &str,
-    body: Option<&str>,
-) -> Result<Vec<u8>, SidecarCoreError> {
-    let headers = parse_vm_fetch_headers(headers_json)?;
-    let method = if method.is_empty() { "GET" } else { method };
-    let target_path = if path.starts_with('/') {
-        path.to_owned()
-    } else {
-        format!("/{path}")
-    };
-    let mut lines = vec![format!("{method} {target_path} HTTP/1.1")];
-    let mut has_host = false;
-    let mut has_connection = false;
-    let mut has_content_length = false;
-
-    for (name, values) in &headers {
-        match name.as_str() {
-            "host" => has_host = true,
-            "connection" => has_connection = true,
-            "content-length" => has_content_length = true,
-            _ => {}
-        }
-        lines.push(format!("{name}: {}", values.join(", ")));
-    }
-    if !has_host {
-        lines.push(format!("Host: 127.0.0.1:{port}"));
-    }
-    if !has_connection {
-        lines.push(String::from("Connection: close"));
-    }
-    let body = body.unwrap_or("").as_bytes();
-    if !has_content_length && !body.is_empty() {
-        lines.push(format!("Content-Length: {}", body.len()));
-    }
-    lines.push(String::new());
-    lines.push(String::new());
-
-    let mut request = lines.join("\r\n").into_bytes();
-    request.extend_from_slice(body);
-    Ok(request)
-}
-
-pub fn ensure_vm_fetch_response_within_limit(
-    response_json: &str,
-    operation: &str,
-    limit: usize,
-) -> Result<(), SidecarCoreError> {
-    let size = response_json.len();
-    if size > limit {
-        return Err(SidecarCoreError::new(format!(
-            "{operation} payload is {size} bytes, limit is {limit}"
-        )));
-    }
-    Ok(())
-}
-
-pub fn ensure_vm_fetch_raw_response_buffer_within_limit(
-    size: usize,
-    operation: &str,
-) -> Result<(), SidecarCoreError> {
-    if size > VM_FETCH_BUFFER_LIMIT_BYTES {
-        return Err(SidecarCoreError::new(format!(
-            "{operation} raw response buffer is {size} bytes, limit is {VM_FETCH_BUFFER_LIMIT_BYTES}"
-        )));
-    }
-    Ok(())
-}
-
-fn parse_vm_fetch_headers(
-    headers_json: &str,
-) -> Result<BTreeMap<String, Vec<String>>, SidecarCoreError> {
-    let headers: BTreeMap<String, Value> = serde_json::from_str(headers_json).map_err(|error| {
-        SidecarCoreError::new(format!("vm.fetch headers_json must be valid JSON: {error}"))
-    })?;
-    let mut normalized = BTreeMap::<String, Vec<String>>::new();
-    for (raw_name, value) in headers {
-        let values = match value {
-            Value::String(text) => vec![text],
-            Value::Array(values) => values
-                .into_iter()
-                .map(|entry| {
-                    entry.as_str().map(str::to_owned).ok_or_else(|| {
-                        SidecarCoreError::new(format!(
-                            "vm.fetch header {raw_name} must contain only strings"
-                        ))
-                    })
-                })
-                .collect::<Result<Vec<_>, _>>()?,
-            other => {
-                return Err(SidecarCoreError::new(format!(
-                    "vm.fetch header {raw_name} must be a string or string array, received {other}"
-                )));
-            }
-        };
-        normalized
-            .entry(raw_name.to_ascii_lowercase())
-            .or_default()
-            .extend(values);
-    }
-    Ok(normalized)
-}
-
-fn find_http_header_end(buffer: &[u8]) -> Option<usize> {
-    buffer.windows(4).position(|window| window == b"\r\n\r\n")
-}
-
-fn find_crlf(buffer: &[u8], start: usize) -> Option<usize> {
-    buffer
-        .get(start..)?
-        .windows(2)
-        .position(|window| window == b"\r\n")
-        .map(|offset| start + offset)
-}
-
-fn transfer_encoding_tokens(values: &[String]) -> Vec<String> {
-    values
-        .iter()
-        .flat_map(|value| value.split(','))
-        .map(|token| token.trim().to_ascii_lowercase())
-        .filter(|token| !token.is_empty())
-        .collect()
-}
-
-fn decode_kernel_http_chunked_body(buffer: &[u8]) -> Result<Option<Vec<u8>>, SidecarCoreError> {
-    let mut offset = 0;
-    let mut body = Vec::new();
-    loop {
-        let Some(line_end) = find_crlf(buffer, offset) else {
-            return Ok(None);
-        };
-        let size_line = std::str::from_utf8(&buffer[offset..line_end]).map_err(|error| {
-            SidecarCoreError::new(format!(
-                "invalid vm.fetch chunk size line encoding: {error}"
-            ))
-        })?;
-        let size_part = size_line.split(';').next().unwrap_or_default();
-        if size_part.is_empty() || !size_part.bytes().all(|byte| byte.is_ascii_hexdigit()) {
-            return Err(SidecarCoreError::new(format!(
-                "invalid vm.fetch chunk size line: {size_line:?}"
-            )));
-        }
-        let chunk_size = usize::from_str_radix(size_part, 16).map_err(|error| {
-            SidecarCoreError::new(format!(
-                "invalid vm.fetch chunk size {size_part:?}: {error}"
-            ))
-        })?;
-        let chunk_start = line_end + 2;
-        let chunk_end = chunk_start
-            .checked_add(chunk_size)
-            .ok_or_else(|| SidecarCoreError::new("vm.fetch chunk size overflow"))?;
-        if chunk_size > 0 {
-            let chunk_terminator_end = chunk_end
-                .checked_add(2)
-                .ok_or_else(|| SidecarCoreError::new("vm.fetch chunk terminator overflow"))?;
-            if chunk_terminator_end > buffer.len() {
-                return Ok(None);
-            }
-            if buffer.get(chunk_end..chunk_terminator_end) != Some(b"\r\n") {
-                return Err(SidecarCoreError::new("invalid vm.fetch chunk terminator"));
-            }
-            body.extend_from_slice(&buffer[chunk_start..chunk_end]);
-            offset = chunk_terminator_end;
-            continue;
-        }
-
-        if buffer.get(chunk_start..chunk_start + 2) == Some(b"\r\n") {
-            return Ok(Some(body));
-        }
-        let Some(trailer_end) = find_http_header_end(&buffer[chunk_start..]) else {
-            return Ok(None);
-        };
-        let trailer_bytes = &buffer[chunk_start..chunk_start + trailer_end];
-        let trailers = String::from_utf8_lossy(trailer_bytes);
-        for line in trailers.split("\r\n") {
-            if line.is_empty() {
-                continue;
-            }
-            if line.starts_with(' ') || line.starts_with('\t') || !line.contains(':') {
-                return Err(SidecarCoreError::new(format!(
-                    "invalid vm.fetch chunk trailer line: {line}"
-                )));
-            }
-        }
-        return Ok(Some(body));
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use serde_json::Value;
-
-    #[test]
-    fn parses_content_length_response() {
-        let response = parse_kernel_http_fetch_response(
-            b"HTTP/1.1 201 Created\r\nContent-Length: 5\r\nX-Test: ok\r\n\r\nhello",
-            false,
-            "http://127.0.0.1:8080/hello",
-        )
-        .expect("parse response")
-        .expect("complete response");
-        let value: Value = serde_json::from_str(&response).expect("response json");
-
-        assert_eq!(value["status"], 201);
-        assert_eq!(value["statusText"], "Created");
-        assert_eq!(value["body"], "aGVsbG8=");
-        assert_eq!(value["url"], "http://127.0.0.1:8080/hello");
-    }
-
-    #[test]
-    fn serializes_loopback_fetch_request() {
-        let request = serialize_kernel_http_fetch_request(
-            3000,
-            "submit",
-            "POST",
-            r#"{"x-test":["a","b"]}"#,
-            Some("hello"),
-        )
-        .expect("serialize request");
-
-        assert_eq!(
-            String::from_utf8(request).expect("utf8 request"),
-            "POST /submit HTTP/1.1\r\nx-test: a, b\r\nHost: 127.0.0.1:3000\r\nConnection: close\r\nContent-Length: 5\r\n\r\nhello"
-        );
-    }
-
-    #[test]
-    fn decodes_chunked_response_body() {
-        let response = parse_kernel_http_fetch_response(
-            b"HTTP/1.1 200 OK\r\nTransfer-Encoding: chunked\r\n\r\n5\r\nhello\r\n0\r\n\r\n",
-            false,
-            "http://127.0.0.1:8080/chunked",
-        )
-        .expect("parse response")
-        .expect("complete response");
-        let value: Value = serde_json::from_str(&response).expect("response json");
-
-        assert_eq!(value["body"], "aGVsbG8=");
-    }
-
-    #[test]
-    fn waits_for_incomplete_body() {
-        let response = parse_kernel_http_fetch_response(
-            b"HTTP/1.1 200 OK\r\nContent-Length: 5\r\n\r\nhe",
-            false,
-            "http://127.0.0.1:8080/partial",
-        )
-        .expect("parse response");
-
-        assert!(response.is_none());
-    }
-
-    #[test]
-    fn rejects_invalid_chunked_content_length_combination() {
-        let error = parse_kernel_http_fetch_response(
-            b"HTTP/1.1 200 OK\r\nContent-Length: 5\r\nTransfer-Encoding: chunked\r\n\r\n0\r\n\r\n",
-            false,
-            "http://127.0.0.1:8080/bad",
-        )
-        .expect_err("response should be invalid");
-
-        assert!(error
-            .to_string()
-            .contains("cannot include both Transfer-Encoding: chunked and Content-Length"));
-    }
-}
diff --git a/crates/sidecar-protocol/Cargo.toml b/crates/sidecar-protocol/Cargo.toml
index ec54cab67..ca82d1468 100644
--- a/crates/sidecar-protocol/Cargo.toml
+++ b/crates/sidecar-protocol/Cargo.toml
@@ -4,17 +4,10 @@ version.workspace = true
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
-description = "Shared Secure Exec sidecar wire protocol and frame helpers"
+description = "secure-exec-sidecar-protocol compatibility shim for agentos-sidecar-protocol"
 
 [lib]
 name = "secure_exec_sidecar_protocol"
 
 [dependencies]
-secure-exec-vm-config = { workspace = true }
-serde = { version = "1.0", features = ["derive"] }
-serde_bare = "0.5"
-serde_json = "1.0"
-vbare = { workspace = true }
-
-[build-dependencies]
-vbare-compiler = { workspace = true }
+agentos_sidecar_protocol = { package = "agentos-sidecar-protocol", path = "../../../agentos/crates/sidecar-protocol", version = "0.0.1" }
diff --git a/crates/sidecar-protocol/build.rs b/crates/sidecar-protocol/build.rs
deleted file mode 100644
index 1b273ca2f..000000000
--- a/crates/sidecar-protocol/build.rs
+++ /dev/null
@@ -1,27 +0,0 @@
-use std::{env, fs, path::PathBuf};
-
-fn main() {
-    let manifest_dir =
-        PathBuf::from(env::var("CARGO_MANIFEST_DIR").expect("CARGO_MANIFEST_DIR must be set"));
-    let out_dir = PathBuf::from(env::var("OUT_DIR").expect("OUT_DIR must be set"));
-    let source_schema = manifest_dir
-        .join("protocol")
-        .join("secure_exec_sidecar_v1.bare");
-
-    println!("cargo:rerun-if-changed=build.rs");
-    println!("cargo:rerun-if-changed={}", source_schema.display());
-
-    let schema_dir = out_dir.join("protocol-schema");
-    fs::create_dir_all(&schema_dir).expect("failed to create generated protocol schema dir");
-    fs::copy(&source_schema, schema_dir.join("v1.bare")).unwrap_or_else(|error| {
-        panic!(
-            "failed to stage protocol schema from {}: {}",
-            source_schema.display(),
-            error
-        )
-    });
-
-    let cfg = vbare_compiler::Config::default();
-    vbare_compiler::process_schemas_with_config(&schema_dir, &cfg)
-        .expect("failed to generate sidecar protocol from BARE schema");
-}
diff --git a/crates/sidecar-protocol/protocol/README.md b/crates/sidecar-protocol/protocol/README.md
deleted file mode 100644
index b6b747970..000000000
--- a/crates/sidecar-protocol/protocol/README.md
+++ /dev/null
@@ -1,53 +0,0 @@
-# Sidecar BARE Migration Plan
-
-`secure_exec_sidecar_v1.bare` is the canonical schema for the sidecar wire protocol value carried on native transports. It covers every current `request`, `response`, `event`, `sidecar_request`, and `sidecar_response` frame shape from [`crates/sidecar-protocol/src/protocol.rs`](../src/protocol.rs).
-
-## Framing
-
-The native sidecar transport keeps the current framing boundary during migration:
-
-- 4-byte big-endian length prefix
-- one encoded `ProtocolFrame` payload immediately after the prefix
-
-US-083 and US-084 should replace only the payload codec first. They should not redesign the outer length prefix at the same time, because the current stdio/native-process tests and bridge code already rely on that framing contract.
-
-## Compatibility Rules
-
-The migration keeps the current semantic invariants unchanged across codecs:
-
-- `ProtocolSchema.name` is `secure-exec-sidecar`
-- `ProtocolSchema.version` is `7`
-- host-originated `request_id` values stay positive
-- sidecar-originated `request_id` values stay negative
-- ownership scope rules and response-correlation rules stay exactly the same
-- `max_frame_bytes` and duplicate-response hardening stay transport-level requirements, not JSON-specific behavior
-
-## JSON Boundary
-
-The current protocol still has several fields modeled as `serde_json::Value` on the Rust side and `unknown`/structured JS values on the TypeScript side. BARE v1 represents those fields as `JsonUtf8`:
-
-- UTF-8 JSON text inside the BARE field
-- canonicalized by the codec before hashing/comparison in tests
-- intentionally temporary until later protocol work replaces them with BARE-native typed payloads
-
-This applies to fields such as session config blobs, ACP notifications, mount plugin configs, tool schemas/inputs, JS bridge arguments, and tool results.
-
-## Rollout Plan
-
-1. US-082: lock the schema and this plan in repo, with tests that fail if Rust adds a new frame payload without updating the schema.
-2. US-083: add a Rust BARE codec alongside the existing JSON codec while preserving the current 4-byte big-endian frame prefix.
-3. US-083: make the Rust decoder dual-stack by inspecting the first payload byte after the length prefix.
-   JSON frames begin with `{` today, while BARE frames begin with a union tag byte/varint, so the decoder can distinguish the two without an extra wrapper frame.
-4. US-083: once a connection's first successfully decoded frame is known, pin the connection to that codec for all later frames on that transport.
-5. US-084: teach the TypeScript native sidecar client and related bridge transports to emit and decode the BARE payload form using the same schema.
-6. US-084: keep JSON decode support only for the migration window; once both sides default to BARE and the targeted tests are green, delete JSON encoding and the dual-stack sniffing path.
-
-## Normalization Notes
-
-BARE does not have Serde's "omitted but defaults to empty list/map" behavior. The codec should therefore normalize these fields explicitly:
-
-- omitted/defaulted collection fields in JSON become empty lists/maps in BARE
-- optional fields remain explicit `optional<T>` values
-- response payloads that are currently "rejected" remain valid correlated responses, just as they do in `ResponseTracker`
-
-That normalization rule is part of schema compatibility and should be preserved in tests when the codec lands.
diff --git a/crates/sidecar-protocol/protocol/secure_exec_sidecar_v1.bare b/crates/sidecar-protocol/protocol/secure_exec_sidecar_v1.bare
deleted file mode 100644
index 99c37838d..000000000
--- a/crates/sidecar-protocol/protocol/secure_exec_sidecar_v1.bare
+++ /dev/null
@@ -1,883 +0,0 @@
-# Secure Exec sidecar protocol schema, version 1.
-# This schema is generator-ready: numeric ordinals are intentionally omitted
-# and type blocks are ordered before first use.
-
-type JsonUtf8 str
-
-type ProtocolSchema struct {
-  name: str
-  version: u16
-}
-
-type RequestId i64
-
-type ExtEnvelope struct {
-  namespace: str
-  payload: data
-}
-
-type ConnectionOwnership struct {
-  connectionId: str
-}
-
-type SessionOwnership struct {
-  connectionId: str
-  sessionId: str
-}
-
-type VmOwnership struct {
-  connectionId: str
-  sessionId: str
-  vmId: str
-}
-
-type OwnershipScope union {
-  ConnectionOwnership |
-  SessionOwnership |
-  VmOwnership
-}
-
-type AuthenticateRequest struct {
-  clientName: str
-  authToken: str
-  protocolVersion: u16
-  bridgeVersion: u32
-}
-
-type SidecarPlacementShared struct {
-  pool: optional<str>
-}
-
-type SidecarPlacementExplicit struct {
-  sidecarId: str
-}
-
-type SidecarPlacement union {
-  SidecarPlacementShared |
-  SidecarPlacementExplicit
-}
-
-type OpenSessionRequest struct {
-  placement: SidecarPlacement
-  metadata: map<str><str>
-}
-
-type GuestRuntimeKind enum {
-  JAVA_SCRIPT
-  PYTHON
-  WEB_ASSEMBLY
-}
-
-type RootFilesystemMode enum {
-  EPHEMERAL
-  READ_ONLY
-}
-
-type RootFilesystemEntryKind enum {
-  FILE
-  DIRECTORY
-  SYMLINK
-}
-
-type RootFilesystemEntryEncoding enum {
-  UTF8
-  BASE64
-}
-
-type RootFilesystemEntry struct {
-  path: str
-  kind: RootFilesystemEntryKind
-  mode: optional<u32>
-  uid: optional<u32>
-  gid: optional<u32>
-  content: optional<str>
-  encoding: optional<RootFilesystemEntryEncoding>
-  target: optional<str>
-  executable: bool
-}
-
-type SnapshotRootFilesystemLower struct {
-  entries: list<RootFilesystemEntry>
-}
-
-type BundledBaseFilesystemLower void
-
-type RootFilesystemLowerDescriptor union {
-  SnapshotRootFilesystemLower |
-  BundledBaseFilesystemLower
-}
-
-type RootFilesystemDescriptor struct {
-  mode: RootFilesystemMode
-  disableDefaultBaseLayer: bool
-  lowers: list<RootFilesystemLowerDescriptor>
-  bootstrapEntries: list<RootFilesystemEntry>
-}
-
-type PermissionMode enum {
-  ALLOW
-  ASK
-  DENY
-}
-
-type FsPermissionRule struct {
-  mode: PermissionMode
-  operations: list<str>
-  paths: list<str>
-}
-
-type FsPermissionRuleSet struct {
-  default: optional<PermissionMode>
-  rules: list<FsPermissionRule>
-}
-
-type FsPermissionScope union {
-  PermissionMode |
-  FsPermissionRuleSet
-}
-
-type PatternPermissionRule struct {
-  mode: PermissionMode
-  operations: list<str>
-  patterns: list<str>
-}
-
-type PatternPermissionRuleSet struct {
-  default: optional<PermissionMode>
-  rules: list<PatternPermissionRule>
-}
-
-type PatternPermissionScope union {
-  PermissionMode |
-  PatternPermissionRuleSet
-}
-
-type PermissionsPolicy struct {
-  fs: optional<FsPermissionScope>
-  network: optional<PatternPermissionScope>
-  childProcess: optional<PatternPermissionScope>
-  process: optional<PatternPermissionScope>
-  env: optional<PatternPermissionScope>
-  binding: optional<PatternPermissionScope>
-}
-
-type CreateVmRequest struct {
-  runtime: GuestRuntimeKind
-  config: JsonUtf8
-}
-
-type DisposeReason enum {
-  REQUESTED
-  CONNECTION_CLOSED
-  HOST_SHUTDOWN
-}
-
-type DisposeVmRequest struct {
-  reason: DisposeReason
-}
-
-type BootstrapRootFilesystemRequest struct {
-  entries: list<RootFilesystemEntry>
-}
-
-type MountPluginDescriptor struct {
-  id: str
-  config: JsonUtf8
-}
-
-type MountDescriptor struct {
-  guestPath: str
-  readOnly: bool
-  plugin: MountPluginDescriptor
-}
-
-type SoftwareDescriptor struct {
-  packageName: str
-  root: str
-}
-
-type ProjectedModuleDescriptor struct {
-  packageName: str
-  entrypoint: str
-}
-
-type WasmPermissionTier enum {
-  FULL
-  READ_WRITE
-  READ_ONLY
-  ISOLATED
-}
-
-# agentOS package descriptor. The sidecar reads `agentos-package.json`, projects
-# the self-contained package read-only under `<packagesMountAt>/<manifest.name>/<version>`,
-# and links its `bin/` commands onto $PATH. `tar`/`dir` are trusted host paths
-# (the client configures its own VM); the sidecar is the host-side TCB that builds
-# the staging tree. New clients send `tar`; `dir` remains accepted for local tests
-# and transition fixtures.
-type PackageDescriptor struct {
-  dir: optional<str>
-  tar: optional<str>
-}
-
-type AgentosProjectedAgent struct {
-  id: str
-  acpEntrypoint: str
-  adapterEntrypoint: str
-}
-
-type LinkPackageRequest struct {
-  package: PackageDescriptor
-}
-
-type PackageCommands struct {
-  packageName: str
-  commands: list<str>
-}
-
-type ProvidedCommandsRequest void
-
-type ProvidedCommandsResponse struct {
-  packages: list<PackageCommands>
-}
-
-type ProjectedCommand struct {
-  name: str
-  guestPath: str
-}
-
-type PackageLinkedResponse struct {
-  projectedCommands: list<ProjectedCommand>
-  agents: list<AgentosProjectedAgent>
-}
-
-type ConfigureVmRequest struct {
-  mounts: list<MountDescriptor>
-  software: list<SoftwareDescriptor>
-  permissions: optional<PermissionsPolicy>
-  moduleAccessCwd: optional<str>
-  instructions: list<str>
-  projectedModules: list<ProjectedModuleDescriptor>
-  commandPermissions: map<str><WasmPermissionTier>
-  loopbackExemptPorts: list<u16>
-  packages: list<PackageDescriptor>
-  packagesMountAt: str
-  bootstrapCommands: list<str>
-  toolShimCommands: list<str>
-}
-
-type RegisteredHostCallbackExample struct {
-  description: str
-  input: JsonUtf8
-}
-
-type RegisteredHostCallbackDefinition struct {
-  description: str
-  inputSchema: JsonUtf8
-  timeoutMs: optional<u64>
-  examples: list<RegisteredHostCallbackExample>
-}
-
-type RegisterHostCallbacksRequest struct {
-  name: str
-  description: str
-  commandAliases: list<str>
-  registryCommandAliases: list<str>
-  callbacks: map<str><RegisteredHostCallbackDefinition>
-}
-
-type CreateLayerRequest void
-
-type SealLayerRequest struct {
-  layerId: str
-}
-
-type ImportSnapshotRequest struct {
-  entries: list<RootFilesystemEntry>
-}
-
-type ExportSnapshotRequest struct {
-  layerId: str
-}
-
-type CreateOverlayRequest struct {
-  mode: RootFilesystemMode
-  upperLayerId: optional<str>
-  lowerLayerIds: list<str>
-}
-
-type GuestFilesystemOperation enum {
-  READ_FILE
-  WRITE_FILE
-  CREATE_DIR
-  MKDIR
-  EXISTS
-  STAT
-  LSTAT
-  READ_DIR
-  READ_DIR_RECURSIVE
-  REMOVE_FILE
-  REMOVE_DIR
-  REMOVE
-  COPY
-  MOVE
-  RENAME
-  REALPATH
-  SYMLINK
-  READ_LINK
-  LINK
-  CHMOD
-  CHOWN
-  UTIMES
-  TRUNCATE
-  PREAD
-  PWRITE
-}
-
-type GuestFilesystemCallRequest struct {
-  operation: GuestFilesystemOperation
-  path: str
-  destinationPath: optional<str>
-  target: optional<str>
-  content: optional<str>
-  encoding: optional<RootFilesystemEntryEncoding>
-  recursive: bool
-  maxDepth: optional<u32>
-  mode: optional<u32>
-  uid: optional<u32>
-  gid: optional<u32>
-  atimeMs: optional<u64>
-  mtimeMs: optional<u64>
-  len: optional<u64>
-  offset: optional<u64>
-}
-
-type GuestKernelCallRequest struct {
-  executionId: str
-  operation: str
-  payload: data
-}
-
-type SnapshotRootFilesystemRequest void
-
-type ExecuteRequest struct {
-  processId: str
-  command: optional<str>
-  runtime: optional<GuestRuntimeKind>
-  entrypoint: optional<str>
-  args: list<str>
-  env: map<str><str>
-  cwd: optional<str>
-  wasmPermissionTier: optional<WasmPermissionTier>
-}
-
-type WriteStdinRequest struct {
-  processId: str
-  chunk: data
-}
-
-type ResizePtyRequest struct {
-  processId: str
-  cols: u16
-  rows: u16
-}
-
-type CloseStdinRequest struct {
-  processId: str
-}
-
-type KillProcessRequest struct {
-  processId: str
-  signal: str
-}
-
-type GetProcessSnapshotRequest void
-
-type GetResourceSnapshotRequest void
-
-type FindListenerRequest struct {
-  host: optional<str>
-  port: optional<u16>
-  path: optional<str>
-}
-
-type FindBoundUdpRequest struct {
-  host: optional<str>
-  port: optional<u16>
-}
-
-type GetSignalStateRequest struct {
-  processId: str
-}
-
-type GetZombieTimerCountRequest void
-
-type FilesystemOperation enum {
-  READ
-  WRITE
-  STAT
-  READ_DIR
-  MKDIR
-  REMOVE
-  RENAME
-}
-
-type HostFilesystemCallRequest struct {
-  operation: FilesystemOperation
-  path: str
-  payloadSizeBytes: u64
-}
-
-type PersistenceLoadRequest struct {
-  key: str
-}
-
-type PersistenceFlushRequest struct {
-  key: str
-  payloadSizeBytes: u64
-}
-
-type VmFetchRequest struct {
-  port: u16
-  method: str
-  path: str
-  headersJson: str
-  body: optional<str>
-}
-
-type RequestPayload union {
-  AuthenticateRequest |
-  OpenSessionRequest |
-  CreateVmRequest |
-  DisposeVmRequest |
-  BootstrapRootFilesystemRequest |
-  ConfigureVmRequest |
-  RegisterHostCallbacksRequest |
-  CreateLayerRequest |
-  SealLayerRequest |
-  ImportSnapshotRequest |
-  ExportSnapshotRequest |
-  CreateOverlayRequest |
-  GuestFilesystemCallRequest |
-  SnapshotRootFilesystemRequest |
-  ExecuteRequest |
-  WriteStdinRequest |
-  CloseStdinRequest |
-  KillProcessRequest |
-  GetProcessSnapshotRequest |
-  FindListenerRequest |
-  FindBoundUdpRequest |
-  GetSignalStateRequest |
-  GetZombieTimerCountRequest |
-  HostFilesystemCallRequest |
-  PersistenceLoadRequest |
-  PersistenceFlushRequest |
-  VmFetchRequest |
-  ExtEnvelope |
-  GuestKernelCallRequest |
-  ResizePtyRequest |
-  GetResourceSnapshotRequest |
-  LinkPackageRequest |
-  ProvidedCommandsRequest
-}
-
-type RequestFrame struct {
-  schema: ProtocolSchema
-  requestId: RequestId
-  ownership: OwnershipScope
-  payload: RequestPayload
-}
-
-type AuthenticatedResponse struct {
-  sidecarId: str
-  connectionId: str
-  maxFrameBytes: u32
-}
-
-type SessionOpenedResponse struct {
-  sessionId: str
-  ownerConnectionId: str
-}
-
-type VmCreatedResponse struct {
-  vmId: str
-}
-
-type VmDisposedResponse struct {
-  vmId: str
-}
-
-type RootFilesystemBootstrappedResponse struct {
-  entryCount: u32
-}
-
-type VmConfiguredResponse struct {
-  appliedMounts: u32
-  appliedSoftware: u32
-  projectedCommands: list<ProjectedCommand>
-  agents: list<AgentosProjectedAgent>
-}
-
-type HostCallbacksRegisteredResponse struct {
-  registration: str
-  commandCount: u32
-}
-
-type LayerCreatedResponse struct {
-  layerId: str
-}
-
-type LayerSealedResponse struct {
-  layerId: str
-}
-
-type SnapshotImportedResponse struct {
-  layerId: str
-}
-
-type SnapshotExportedResponse struct {
-  layerId: str
-  entries: list<RootFilesystemEntry>
-}
-
-type OverlayCreatedResponse struct {
-  layerId: str
-}
-
-type GuestFilesystemStat struct {
-  mode: u32
-  size: u64
-  blocks: u64
-  dev: u64
-  rdev: u64
-  isDirectory: bool
-  isSymbolicLink: bool
-  atimeMs: u64
-  mtimeMs: u64
-  ctimeMs: u64
-  birthtimeMs: u64
-  ino: u64
-  nlink: u64
-  uid: u32
-  gid: u32
-}
-
-type GuestDirEntry struct {
-  name: str
-  path: str
-  isDirectory: bool
-  isSymbolicLink: bool
-  size: u64
-}
-
-type GuestFilesystemResultResponse struct {
-  operation: GuestFilesystemOperation
-  path: str
-  content: optional<str>
-  encoding: optional<RootFilesystemEntryEncoding>
-  entries: optional<list<GuestDirEntry>>
-  stat: optional<GuestFilesystemStat>
-  exists: optional<bool>
-  target: optional<str>
-}
-
-type GuestKernelResultResponse struct {
-  payload: data
-}
-
-type RootFilesystemSnapshotResponse struct {
-  entries: list<RootFilesystemEntry>
-}
-
-type ProcessStartedResponse struct {
-  processId: str
-  pid: optional<u32>
-}
-
-type StdinWrittenResponse struct {
-  processId: str
-  acceptedBytes: u64
-}
-
-type PtyResizedResponse struct {
-  processId: str
-  cols: u16
-  rows: u16
-}
-
-type StdinClosedResponse struct {
-  processId: str
-}
-
-type ProcessKilledResponse struct {
-  processId: str
-}
-
-type ProcessSnapshotStatus enum {
-  RUNNING
-  EXITED
-  STOPPED
-}
-
-type ProcessSnapshotEntry struct {
-  processId: str
-  pid: u32
-  ppid: u32
-  pgid: u32
-  sid: u32
-  driver: str
-  command: str
-  args: list<str>
-  cwd: str
-  status: ProcessSnapshotStatus
-  exitCode: optional<i32>
-}
-
-type ProcessSnapshotResponse struct {
-  processes: list<ProcessSnapshotEntry>
-}
-
-type QueueSnapshotEntry struct {
-  name: str
-  category: str
-  depth: u64
-  highWater: u64
-  capacity: u64
-  fillPercent: u64
-}
-
-type ResourceSnapshotResponse struct {
-  runningProcesses: u64
-  exitedProcesses: u64
-  fdTables: u64
-  openFds: u64
-  pipes: u64
-  pipeBufferedBytes: u64
-  ptys: u64
-  ptyBufferedInputBytes: u64
-  ptyBufferedOutputBytes: u64
-  sockets: u64
-  socketListeners: u64
-  socketConnections: u64
-  socketBufferedBytes: u64
-  socketDatagramQueueLen: u64
-  queueSnapshots: list<QueueSnapshotEntry>
-}
-
-type SocketStateEntry struct {
-  processId: str
-  host: optional<str>
-  port: optional<u16>
-  path: optional<str>
-}
-
-type ListenerSnapshotResponse struct {
-  listener: optional<SocketStateEntry>
-}
-
-type BoundUdpSnapshotResponse struct {
-  socket: optional<SocketStateEntry>
-}
-
-type SignalDispositionAction enum {
-  DEFAULT
-  IGNORE
-  USER
-}
-
-type SignalHandlerRegistration struct {
-  action: SignalDispositionAction
-  mask: list<u32>
-  flags: u32
-}
-
-type SignalStateResponse struct {
-  processId: str
-  handlers: map<u32><SignalHandlerRegistration>
-}
-
-type ZombieTimerCountResponse struct {
-  count: u64
-}
-
-type FilesystemResultResponse struct {
-  operation: FilesystemOperation
-  status: str
-  payloadSizeBytes: u64
-}
-
-type PermissionDecisionResponse struct {
-  capability: str
-  decision: PermissionMode
-}
-
-type PersistenceStateResponse struct {
-  key: str
-  found: bool
-  payloadSizeBytes: u64
-}
-
-type PersistenceFlushedResponse struct {
-  key: str
-  committedBytes: u64
-}
-
-type RejectedResponse struct {
-  code: str
-  message: str
-}
-
-type VmFetchResponse struct {
-  responseJson: str
-}
-
-type ResponsePayload union {
-  AuthenticatedResponse |
-  SessionOpenedResponse |
-  VmCreatedResponse |
-  VmDisposedResponse |
-  RootFilesystemBootstrappedResponse |
-  VmConfiguredResponse |
-  HostCallbacksRegisteredResponse |
-  LayerCreatedResponse |
-  LayerSealedResponse |
-  SnapshotImportedResponse |
-  SnapshotExportedResponse |
-  OverlayCreatedResponse |
-  GuestFilesystemResultResponse |
-  RootFilesystemSnapshotResponse |
-  ProcessStartedResponse |
-  StdinWrittenResponse |
-  StdinClosedResponse |
-  ProcessKilledResponse |
-  ProcessSnapshotResponse |
-  ListenerSnapshotResponse |
-  BoundUdpSnapshotResponse |
-  SignalStateResponse |
-  ZombieTimerCountResponse |
-  FilesystemResultResponse |
-  PermissionDecisionResponse |
-  PersistenceStateResponse |
-  PersistenceFlushedResponse |
-  RejectedResponse |
-  VmFetchResponse |
-  ExtEnvelope |
-  GuestKernelResultResponse |
-  PtyResizedResponse |
-  ResourceSnapshotResponse |
-  PackageLinkedResponse |
-  ProvidedCommandsResponse
-}
-
-type ResponseFrame struct {
-  schema: ProtocolSchema
-  requestId: RequestId
-  ownership: OwnershipScope
-  payload: ResponsePayload
-}
-
-type VmLifecycleState enum {
-  CREATING
-  READY
-  DISPOSING
-  DISPOSED
-  FAILED
-}
-
-type VmLifecycleEvent struct {
-  state: VmLifecycleState
-}
-
-type StreamChannel enum {
-  STDOUT
-  STDERR
-}
-
-type ProcessOutputEvent struct {
-  processId: str
-  channel: StreamChannel
-  chunk: data
-}
-
-type ProcessExitedEvent struct {
-  processId: str
-  exitCode: i32
-}
-
-type StructuredEvent struct {
-  name: str
-  detail: map<str><str>
-}
-
-type EventPayload union {
-  VmLifecycleEvent |
-  ProcessOutputEvent |
-  ProcessExitedEvent |
-  StructuredEvent |
-  ExtEnvelope
-}
-
-type EventFrame struct {
-  schema: ProtocolSchema
-  ownership: OwnershipScope
-  payload: EventPayload
-}
-
-type HostCallbackRequest struct {
-  invocationId: str
-  callbackKey: str
-  input: JsonUtf8
-  timeoutMs: u64
-}
-
-type JsBridgeCallRequest struct {
-  callId: str
-  mountId: str
-  operation: str
-  args: JsonUtf8
-}
-
-type SidecarRequestPayload union {
-  HostCallbackRequest |
-  JsBridgeCallRequest |
-  ExtEnvelope
-}
-
-type SidecarRequestFrame struct {
-  schema: ProtocolSchema
-  requestId: RequestId
-  ownership: OwnershipScope
-  payload: SidecarRequestPayload
-}
-
-type HostCallbackResultResponse struct {
-  invocationId: str
-  result: optional<JsonUtf8>
-  error: optional<str>
-}
-
-type JsBridgeResultResponse struct {
-  callId: str
-  result: optional<JsonUtf8>
-  error: optional<str>
-}
-
-type SidecarResponsePayload union {
-  HostCallbackResultResponse |
-  JsBridgeResultResponse |
-  ExtEnvelope
-}
-
-type SidecarResponseFrame struct {
-  schema: ProtocolSchema
-  requestId: RequestId
-  ownership: OwnershipScope
-  payload: SidecarResponsePayload
-}
-
-type ProtocolFrame union {
-  RequestFrame |
-  ResponseFrame |
-  EventFrame |
-  SidecarRequestFrame |
-  SidecarResponseFrame
-}
diff --git a/crates/sidecar-protocol/src/generated_protocol.rs b/crates/sidecar-protocol/src/generated_protocol.rs
deleted file mode 100644
index 3b0c75f39..000000000
--- a/crates/sidecar-protocol/src/generated_protocol.rs
+++ /dev/null
@@ -1,8 +0,0 @@
-// Generated protocol surface produced by `vbare_compiler` (see `build.rs`).
-// The generator emits type aliases and enum variant names verbatim from the
-// BARE schema, so some are unused here and some share a common postfix; these
-// lints are silenced for the generated code rather than editing build output.
-#![allow(dead_code)]
-#![allow(clippy::enum_variant_names)]
-
-include!(concat!(env!("OUT_DIR"), "/combined_imports.rs"));
diff --git a/crates/sidecar-protocol/src/lib.rs b/crates/sidecar-protocol/src/lib.rs
index 7929ac051..ba867c9d6 100644
--- a/crates/sidecar-protocol/src/lib.rs
+++ b/crates/sidecar-protocol/src/lib.rs
@@ -1,10 +1,3 @@
-#![forbid(unsafe_code)]
-// Wire enums intentionally have wide size variance (small acks next to bulky
-// payload variants); boxing them is a wire-adjacent refactor tracked separately.
-#![allow(clippy::large_enum_variant, clippy::result_large_err)]
+//! Compatibility shim for `agentos-sidecar-protocol`.
 
-//! Shared Secure Exec sidecar wire protocol surface.
-
-pub mod generated_protocol;
-pub mod protocol;
-pub mod wire;
+pub use agentos_sidecar_protocol::*;
diff --git a/crates/sidecar-protocol/src/protocol.rs b/crates/sidecar-protocol/src/protocol.rs
deleted file mode 100644
index a82bab77d..000000000
--- a/crates/sidecar-protocol/src/protocol.rs
+++ /dev/null
@@ -1,2774 +0,0 @@
-use crate::generated_protocol::v1 as generated_protocol;
-use serde::de::{self, SeqAccess, Visitor};
-use serde::ser::SerializeTuple;
-use serde::{Deserialize, Deserializer, Serialize, Serializer};
-use serde_json::Value;
-use std::collections::{BTreeMap, HashMap, HashSet, VecDeque};
-use std::error::Error;
-use std::fmt;
-
-pub use crate::wire::{OwnershipRequirement, ProtocolCodecError, RequestDirection};
-
-pub const PROTOCOL_NAME: &str = crate::wire::PROTOCOL_NAME;
-pub const PROTOCOL_VERSION: u16 = crate::wire::PROTOCOL_VERSION;
-pub const DEFAULT_MAX_FRAME_BYTES: usize = crate::wire::DEFAULT_MAX_FRAME_BYTES;
-pub const DEFAULT_COMPLETED_RESPONSE_CAP: usize = 10_000;
-pub type RequestId = crate::wire::RequestId;
-pub type ExtEnvelope = crate::wire::ExtEnvelope;
-
-fn serialize_bare_newtype_tag<S, T>(serializer: S, tag: u64, payload: &T) -> Result<S::Ok, S::Error>
-where
-    S: Serializer,
-    T: Serialize,
-{
-    let mut tuple = serializer.serialize_tuple(2)?;
-    tuple.serialize_element(&serde_bare::Uint(tag))?;
-    tuple.serialize_element(payload)?;
-    tuple.end()
-}
-
-/// Convert the compatibility protocol frame into the generated wire frame.
-pub fn to_generated_protocol_frame(
-    frame: &ProtocolFrame,
-) -> Result<generated_protocol::ProtocolFrame, ProtocolCodecError> {
-    Ok(match frame {
-        ProtocolFrame::Request(frame) => {
-            generated_protocol::ProtocolFrame::RequestFrame(generated_protocol::RequestFrame {
-                schema: to_generated_protocol_schema(&frame.schema),
-                request_id: frame.request_id,
-                ownership: to_generated_ownership_scope(&frame.ownership),
-                payload: to_generated_request_payload(&frame.payload)?,
-            })
-        }
-        ProtocolFrame::Response(frame) => {
-            generated_protocol::ProtocolFrame::ResponseFrame(generated_protocol::ResponseFrame {
-                schema: to_generated_protocol_schema(&frame.schema),
-                request_id: frame.request_id,
-                ownership: to_generated_ownership_scope(&frame.ownership),
-                payload: to_generated_response_payload(&frame.payload)?,
-            })
-        }
-        ProtocolFrame::Event(frame) => {
-            generated_protocol::ProtocolFrame::EventFrame(generated_protocol::EventFrame {
-                schema: to_generated_protocol_schema(&frame.schema),
-                ownership: to_generated_ownership_scope(&frame.ownership),
-                payload: to_generated_event_payload(&frame.payload),
-            })
-        }
-        ProtocolFrame::SidecarRequest(frame) => {
-            generated_protocol::ProtocolFrame::SidecarRequestFrame(
-                generated_protocol::SidecarRequestFrame {
-                    schema: to_generated_protocol_schema(&frame.schema),
-                    request_id: frame.request_id,
-                    ownership: to_generated_ownership_scope(&frame.ownership),
-                    payload: to_generated_sidecar_request_payload(&frame.payload)?,
-                },
-            )
-        }
-        ProtocolFrame::SidecarResponse(frame) => {
-            generated_protocol::ProtocolFrame::SidecarResponseFrame(
-                generated_protocol::SidecarResponseFrame {
-                    schema: to_generated_protocol_schema(&frame.schema),
-                    request_id: frame.request_id,
-                    ownership: to_generated_ownership_scope(&frame.ownership),
-                    payload: to_generated_sidecar_response_payload(&frame.payload)?,
-                },
-            )
-        }
-    })
-}
-
-/// Convert the generated wire frame into the compatibility protocol frame.
-pub fn from_generated_protocol_frame(
-    frame: generated_protocol::ProtocolFrame,
-) -> Result<ProtocolFrame, ProtocolCodecError> {
-    Ok(match frame {
-        generated_protocol::ProtocolFrame::RequestFrame(frame) => {
-            ProtocolFrame::Request(RequestFrame {
-                schema: from_generated_protocol_schema(frame.schema),
-                request_id: frame.request_id,
-                ownership: from_generated_ownership_scope(frame.ownership),
-                payload: from_generated_request_payload(frame.payload)?,
-            })
-        }
-        generated_protocol::ProtocolFrame::ResponseFrame(frame) => {
-            ProtocolFrame::Response(ResponseFrame {
-                schema: from_generated_protocol_schema(frame.schema),
-                request_id: frame.request_id,
-                ownership: from_generated_ownership_scope(frame.ownership),
-                payload: from_generated_response_payload(frame.payload)?,
-            })
-        }
-        generated_protocol::ProtocolFrame::EventFrame(frame) => ProtocolFrame::Event(EventFrame {
-            schema: from_generated_protocol_schema(frame.schema),
-            ownership: from_generated_ownership_scope(frame.ownership),
-            payload: from_generated_event_payload(frame.payload),
-        }),
-        generated_protocol::ProtocolFrame::SidecarRequestFrame(frame) => {
-            ProtocolFrame::SidecarRequest(SidecarRequestFrame {
-                schema: from_generated_protocol_schema(frame.schema),
-                request_id: frame.request_id,
-                ownership: from_generated_ownership_scope(frame.ownership),
-                payload: from_generated_sidecar_request_payload(frame.payload)?,
-            })
-        }
-        generated_protocol::ProtocolFrame::SidecarResponseFrame(frame) => {
-            ProtocolFrame::SidecarResponse(SidecarResponseFrame {
-                schema: from_generated_protocol_schema(frame.schema),
-                request_id: frame.request_id,
-                ownership: from_generated_ownership_scope(frame.ownership),
-                payload: from_generated_sidecar_response_payload(frame.payload)?,
-            })
-        }
-    })
-}
-
-fn to_generated_protocol_schema(schema: &ProtocolSchema) -> generated_protocol::ProtocolSchema {
-    schema.clone()
-}
-
-fn from_generated_protocol_schema(schema: generated_protocol::ProtocolSchema) -> ProtocolSchema {
-    schema
-}
-
-// `OwnershipScope` is now an alias for the generated `crate::wire::OwnershipScope`, so the
-// compat<->generated converters are identity functions. They are retained so the JSON-carrying
-// frame-conversion chain (still hand-written, out of scope for this pass) keeps compiling
-// without site-by-site rewiring.
-pub(crate) fn to_generated_ownership_scope(
-    ownership: &OwnershipScope,
-) -> generated_protocol::OwnershipScope {
-    ownership.clone()
-}
-
-pub(crate) fn from_generated_ownership_scope(
-    ownership: generated_protocol::OwnershipScope,
-) -> OwnershipScope {
-    ownership
-}
-
-fn to_generated_dispose_reason(reason: &DisposeReason) -> generated_protocol::DisposeReason {
-    match reason {
-        DisposeReason::Requested => generated_protocol::DisposeReason::Requested,
-        DisposeReason::ConnectionClosed => generated_protocol::DisposeReason::ConnectionClosed,
-        DisposeReason::HostShutdown => generated_protocol::DisposeReason::HostShutdown,
-    }
-}
-
-fn from_generated_dispose_reason(reason: generated_protocol::DisposeReason) -> DisposeReason {
-    match reason {
-        generated_protocol::DisposeReason::Requested => DisposeReason::Requested,
-        generated_protocol::DisposeReason::ConnectionClosed => DisposeReason::ConnectionClosed,
-        generated_protocol::DisposeReason::HostShutdown => DisposeReason::HostShutdown,
-    }
-}
-
-fn to_generated_filesystem_operation(
-    operation: &FilesystemOperation,
-) -> generated_protocol::FilesystemOperation {
-    match operation {
-        FilesystemOperation::Read => generated_protocol::FilesystemOperation::Read,
-        FilesystemOperation::Write => generated_protocol::FilesystemOperation::Write,
-        FilesystemOperation::Stat => generated_protocol::FilesystemOperation::Stat,
-        FilesystemOperation::ReadDir => generated_protocol::FilesystemOperation::ReadDir,
-        FilesystemOperation::Mkdir => generated_protocol::FilesystemOperation::Mkdir,
-        FilesystemOperation::Remove => generated_protocol::FilesystemOperation::Remove,
-        FilesystemOperation::Rename => generated_protocol::FilesystemOperation::Rename,
-    }
-}
-
-fn from_generated_filesystem_operation(
-    operation: generated_protocol::FilesystemOperation,
-) -> FilesystemOperation {
-    match operation {
-        generated_protocol::FilesystemOperation::Read => FilesystemOperation::Read,
-        generated_protocol::FilesystemOperation::Write => FilesystemOperation::Write,
-        generated_protocol::FilesystemOperation::Stat => FilesystemOperation::Stat,
-        generated_protocol::FilesystemOperation::ReadDir => FilesystemOperation::ReadDir,
-        generated_protocol::FilesystemOperation::Mkdir => FilesystemOperation::Mkdir,
-        generated_protocol::FilesystemOperation::Remove => FilesystemOperation::Remove,
-        generated_protocol::FilesystemOperation::Rename => FilesystemOperation::Rename,
-    }
-}
-
-fn to_generated_guest_filesystem_operation(
-    operation: &GuestFilesystemOperation,
-) -> generated_protocol::GuestFilesystemOperation {
-    match operation {
-        GuestFilesystemOperation::ReadFile => {
-            generated_protocol::GuestFilesystemOperation::ReadFile
-        }
-        GuestFilesystemOperation::WriteFile => {
-            generated_protocol::GuestFilesystemOperation::WriteFile
-        }
-        GuestFilesystemOperation::CreateDir => {
-            generated_protocol::GuestFilesystemOperation::CreateDir
-        }
-        GuestFilesystemOperation::Mkdir => generated_protocol::GuestFilesystemOperation::Mkdir,
-        GuestFilesystemOperation::Exists => generated_protocol::GuestFilesystemOperation::Exists,
-        GuestFilesystemOperation::Stat => generated_protocol::GuestFilesystemOperation::Stat,
-        GuestFilesystemOperation::Lstat => generated_protocol::GuestFilesystemOperation::Lstat,
-        GuestFilesystemOperation::ReadDir => generated_protocol::GuestFilesystemOperation::ReadDir,
-        GuestFilesystemOperation::ReadDirRecursive => {
-            generated_protocol::GuestFilesystemOperation::ReadDirRecursive
-        }
-        GuestFilesystemOperation::RemoveFile => {
-            generated_protocol::GuestFilesystemOperation::RemoveFile
-        }
-        GuestFilesystemOperation::RemoveDir => {
-            generated_protocol::GuestFilesystemOperation::RemoveDir
-        }
-        GuestFilesystemOperation::Remove => generated_protocol::GuestFilesystemOperation::Remove,
-        GuestFilesystemOperation::Copy => generated_protocol::GuestFilesystemOperation::Copy,
-        GuestFilesystemOperation::Move => generated_protocol::GuestFilesystemOperation::Move,
-        GuestFilesystemOperation::Rename => generated_protocol::GuestFilesystemOperation::Rename,
-        GuestFilesystemOperation::Realpath => {
-            generated_protocol::GuestFilesystemOperation::Realpath
-        }
-        GuestFilesystemOperation::Symlink => generated_protocol::GuestFilesystemOperation::Symlink,
-        GuestFilesystemOperation::ReadLink => {
-            generated_protocol::GuestFilesystemOperation::ReadLink
-        }
-        GuestFilesystemOperation::Link => generated_protocol::GuestFilesystemOperation::Link,
-        GuestFilesystemOperation::Chmod => generated_protocol::GuestFilesystemOperation::Chmod,
-        GuestFilesystemOperation::Chown => generated_protocol::GuestFilesystemOperation::Chown,
-        GuestFilesystemOperation::Utimes => generated_protocol::GuestFilesystemOperation::Utimes,
-        GuestFilesystemOperation::Truncate => {
-            generated_protocol::GuestFilesystemOperation::Truncate
-        }
-        GuestFilesystemOperation::Pread => generated_protocol::GuestFilesystemOperation::Pread,
-        GuestFilesystemOperation::Pwrite => generated_protocol::GuestFilesystemOperation::Pwrite,
-    }
-}
-
-fn from_generated_guest_filesystem_operation(
-    operation: generated_protocol::GuestFilesystemOperation,
-) -> GuestFilesystemOperation {
-    match operation {
-        generated_protocol::GuestFilesystemOperation::ReadFile => {
-            GuestFilesystemOperation::ReadFile
-        }
-        generated_protocol::GuestFilesystemOperation::WriteFile => {
-            GuestFilesystemOperation::WriteFile
-        }
-        generated_protocol::GuestFilesystemOperation::CreateDir => {
-            GuestFilesystemOperation::CreateDir
-        }
-        generated_protocol::GuestFilesystemOperation::Mkdir => GuestFilesystemOperation::Mkdir,
-        generated_protocol::GuestFilesystemOperation::Exists => GuestFilesystemOperation::Exists,
-        generated_protocol::GuestFilesystemOperation::Stat => GuestFilesystemOperation::Stat,
-        generated_protocol::GuestFilesystemOperation::Lstat => GuestFilesystemOperation::Lstat,
-        generated_protocol::GuestFilesystemOperation::ReadDir => GuestFilesystemOperation::ReadDir,
-        generated_protocol::GuestFilesystemOperation::ReadDirRecursive => {
-            GuestFilesystemOperation::ReadDirRecursive
-        }
-        generated_protocol::GuestFilesystemOperation::RemoveFile => {
-            GuestFilesystemOperation::RemoveFile
-        }
-        generated_protocol::GuestFilesystemOperation::RemoveDir => {
-            GuestFilesystemOperation::RemoveDir
-        }
-        generated_protocol::GuestFilesystemOperation::Remove => GuestFilesystemOperation::Remove,
-        generated_protocol::GuestFilesystemOperation::Copy => GuestFilesystemOperation::Copy,
-        generated_protocol::GuestFilesystemOperation::Move => GuestFilesystemOperation::Move,
-        generated_protocol::GuestFilesystemOperation::Rename => GuestFilesystemOperation::Rename,
-        generated_protocol::GuestFilesystemOperation::Realpath => {
-            GuestFilesystemOperation::Realpath
-        }
-        generated_protocol::GuestFilesystemOperation::Symlink => GuestFilesystemOperation::Symlink,
-        generated_protocol::GuestFilesystemOperation::ReadLink => {
-            GuestFilesystemOperation::ReadLink
-        }
-        generated_protocol::GuestFilesystemOperation::Link => GuestFilesystemOperation::Link,
-        generated_protocol::GuestFilesystemOperation::Chmod => GuestFilesystemOperation::Chmod,
-        generated_protocol::GuestFilesystemOperation::Chown => GuestFilesystemOperation::Chown,
-        generated_protocol::GuestFilesystemOperation::Utimes => GuestFilesystemOperation::Utimes,
-        generated_protocol::GuestFilesystemOperation::Truncate => {
-            GuestFilesystemOperation::Truncate
-        }
-        generated_protocol::GuestFilesystemOperation::Pread => GuestFilesystemOperation::Pread,
-        generated_protocol::GuestFilesystemOperation::Pwrite => GuestFilesystemOperation::Pwrite,
-    }
-}
-
-fn to_generated_permission_mode(mode: &PermissionMode) -> generated_protocol::PermissionMode {
-    mode.clone()
-}
-
-fn from_generated_permission_mode(mode: generated_protocol::PermissionMode) -> PermissionMode {
-    mode
-}
-
-fn to_generated_root_filesystem_entry_encoding(
-    encoding: &RootFilesystemEntryEncoding,
-) -> generated_protocol::RootFilesystemEntryEncoding {
-    match encoding {
-        RootFilesystemEntryEncoding::Utf8 => generated_protocol::RootFilesystemEntryEncoding::Utf8,
-        RootFilesystemEntryEncoding::Base64 => {
-            generated_protocol::RootFilesystemEntryEncoding::Base64
-        }
-    }
-}
-
-fn from_generated_root_filesystem_entry_encoding(
-    encoding: generated_protocol::RootFilesystemEntryEncoding,
-) -> RootFilesystemEntryEncoding {
-    match encoding {
-        generated_protocol::RootFilesystemEntryEncoding::Utf8 => RootFilesystemEntryEncoding::Utf8,
-        generated_protocol::RootFilesystemEntryEncoding::Base64 => {
-            RootFilesystemEntryEncoding::Base64
-        }
-    }
-}
-
-fn to_generated_stream_channel(channel: &StreamChannel) -> generated_protocol::StreamChannel {
-    match channel {
-        StreamChannel::Stdout => generated_protocol::StreamChannel::Stdout,
-        StreamChannel::Stderr => generated_protocol::StreamChannel::Stderr,
-    }
-}
-
-fn from_generated_stream_channel(channel: generated_protocol::StreamChannel) -> StreamChannel {
-    match channel {
-        generated_protocol::StreamChannel::Stdout => StreamChannel::Stdout,
-        generated_protocol::StreamChannel::Stderr => StreamChannel::Stderr,
-    }
-}
-
-fn to_generated_vm_lifecycle_state(
-    state: &VmLifecycleState,
-) -> generated_protocol::VmLifecycleState {
-    match state {
-        VmLifecycleState::Creating => generated_protocol::VmLifecycleState::Creating,
-        VmLifecycleState::Ready => generated_protocol::VmLifecycleState::Ready,
-        VmLifecycleState::Disposing => generated_protocol::VmLifecycleState::Disposing,
-        VmLifecycleState::Disposed => generated_protocol::VmLifecycleState::Disposed,
-        VmLifecycleState::Failed => generated_protocol::VmLifecycleState::Failed,
-    }
-}
-
-fn from_generated_vm_lifecycle_state(
-    state: generated_protocol::VmLifecycleState,
-) -> VmLifecycleState {
-    match state {
-        generated_protocol::VmLifecycleState::Creating => VmLifecycleState::Creating,
-        generated_protocol::VmLifecycleState::Ready => VmLifecycleState::Ready,
-        generated_protocol::VmLifecycleState::Disposing => VmLifecycleState::Disposing,
-        generated_protocol::VmLifecycleState::Disposed => VmLifecycleState::Disposed,
-        generated_protocol::VmLifecycleState::Failed => VmLifecycleState::Failed,
-    }
-}
-
-fn to_generated_guest_filesystem_stat(
-    stat: &GuestFilesystemStat,
-) -> generated_protocol::GuestFilesystemStat {
-    stat.clone()
-}
-
-fn from_generated_guest_filesystem_stat(
-    stat: generated_protocol::GuestFilesystemStat,
-) -> GuestFilesystemStat {
-    stat
-}
-
-fn to_generated_process_snapshot_entry(
-    entry: &ProcessSnapshotEntry,
-) -> generated_protocol::ProcessSnapshotEntry {
-    entry.clone()
-}
-
-fn from_generated_process_snapshot_entry(
-    entry: generated_protocol::ProcessSnapshotEntry,
-) -> ProcessSnapshotEntry {
-    entry
-}
-
-fn to_generated_ext_envelope(envelope: &ExtEnvelope) -> generated_protocol::ExtEnvelope {
-    envelope.clone()
-}
-
-fn from_generated_ext_envelope(envelope: generated_protocol::ExtEnvelope) -> ExtEnvelope {
-    envelope
-}
-
-fn to_generated_request_payload(
-    payload: &RequestPayload,
-) -> Result<generated_protocol::RequestPayload, ProtocolCodecError> {
-    Ok(match payload {
-        RequestPayload::Authenticate(inner) => {
-            generated_protocol::RequestPayload::AuthenticateRequest(inner.clone())
-        }
-        RequestPayload::OpenSession(inner) => {
-            generated_protocol::RequestPayload::OpenSessionRequest(inner.clone())
-        }
-        RequestPayload::CreateVm(inner) => {
-            generated_protocol::RequestPayload::CreateVmRequest(inner.clone())
-        }
-        RequestPayload::DisposeVm(inner) => generated_protocol::RequestPayload::DisposeVmRequest(
-            generated_protocol::DisposeVmRequest {
-                reason: to_generated_dispose_reason(&inner.reason),
-            },
-        ),
-        RequestPayload::BootstrapRootFilesystem(inner) => {
-            generated_protocol::RequestPayload::BootstrapRootFilesystemRequest(inner.clone())
-        }
-        RequestPayload::ConfigureVm(inner) => {
-            generated_protocol::RequestPayload::ConfigureVmRequest(inner.clone())
-        }
-        RequestPayload::RegisterHostCallbacks(inner) => {
-            generated_protocol::RequestPayload::RegisterHostCallbacksRequest(inner.clone())
-        }
-        RequestPayload::CreateLayer(_) => generated_protocol::RequestPayload::CreateLayerRequest,
-        RequestPayload::SealLayer(inner) => {
-            generated_protocol::RequestPayload::SealLayerRequest(inner.clone())
-        }
-        RequestPayload::ImportSnapshot(inner) => {
-            generated_protocol::RequestPayload::ImportSnapshotRequest(inner.clone())
-        }
-        RequestPayload::ExportSnapshot(inner) => {
-            generated_protocol::RequestPayload::ExportSnapshotRequest(inner.clone())
-        }
-        RequestPayload::CreateOverlay(inner) => {
-            generated_protocol::RequestPayload::CreateOverlayRequest(inner.clone())
-        }
-        RequestPayload::GuestFilesystemCall(inner) => {
-            generated_protocol::RequestPayload::GuestFilesystemCallRequest(inner.clone())
-        }
-        RequestPayload::SnapshotRootFilesystem(_) => {
-            generated_protocol::RequestPayload::SnapshotRootFilesystemRequest
-        }
-        RequestPayload::Execute(inner) => {
-            generated_protocol::RequestPayload::ExecuteRequest(inner.clone())
-        }
-        RequestPayload::WriteStdin(inner) => {
-            generated_protocol::RequestPayload::WriteStdinRequest(inner.clone())
-        }
-        RequestPayload::CloseStdin(inner) => {
-            generated_protocol::RequestPayload::CloseStdinRequest(inner.clone())
-        }
-        RequestPayload::KillProcess(inner) => {
-            generated_protocol::RequestPayload::KillProcessRequest(inner.clone())
-        }
-        RequestPayload::GetProcessSnapshot(_) => {
-            generated_protocol::RequestPayload::GetProcessSnapshotRequest
-        }
-        RequestPayload::GetResourceSnapshot(_) => {
-            generated_protocol::RequestPayload::GetResourceSnapshotRequest
-        }
-        RequestPayload::FindListener(inner) => {
-            generated_protocol::RequestPayload::FindListenerRequest(inner.clone())
-        }
-        RequestPayload::FindBoundUdp(inner) => {
-            generated_protocol::RequestPayload::FindBoundUdpRequest(inner.clone())
-        }
-        RequestPayload::VmFetch(inner) => {
-            generated_protocol::RequestPayload::VmFetchRequest(inner.clone())
-        }
-        RequestPayload::GetSignalState(inner) => {
-            generated_protocol::RequestPayload::GetSignalStateRequest(inner.clone())
-        }
-        RequestPayload::GetZombieTimerCount(_) => {
-            generated_protocol::RequestPayload::GetZombieTimerCountRequest
-        }
-        RequestPayload::HostFilesystemCall(inner) => {
-            generated_protocol::RequestPayload::HostFilesystemCallRequest(
-                generated_protocol::HostFilesystemCallRequest {
-                    operation: to_generated_filesystem_operation(&inner.operation),
-                    path: inner.path.clone(),
-                    payload_size_bytes: inner.payload_size_bytes,
-                },
-            )
-        }
-        RequestPayload::PersistenceLoad(inner) => {
-            generated_protocol::RequestPayload::PersistenceLoadRequest(inner.clone())
-        }
-        RequestPayload::PersistenceFlush(inner) => {
-            generated_protocol::RequestPayload::PersistenceFlushRequest(inner.clone())
-        }
-        RequestPayload::Ext(inner) => {
-            generated_protocol::RequestPayload::ExtEnvelope(to_generated_ext_envelope(inner))
-        }
-        RequestPayload::GuestKernelCall(inner) => {
-            generated_protocol::RequestPayload::GuestKernelCallRequest(inner.clone())
-        }
-        RequestPayload::ResizePty(inner) => {
-            generated_protocol::RequestPayload::ResizePtyRequest(inner.clone())
-        }
-        RequestPayload::LinkPackage(inner) => {
-            generated_protocol::RequestPayload::LinkPackageRequest(inner.clone())
-        }
-        RequestPayload::ProvidedCommands(_) => {
-            generated_protocol::RequestPayload::ProvidedCommandsRequest
-        }
-    })
-}
-
-fn from_generated_request_payload(
-    payload: generated_protocol::RequestPayload,
-) -> Result<RequestPayload, ProtocolCodecError> {
-    Ok(match payload {
-        generated_protocol::RequestPayload::AuthenticateRequest(inner) => {
-            RequestPayload::Authenticate(inner)
-        }
-        generated_protocol::RequestPayload::OpenSessionRequest(inner) => {
-            RequestPayload::OpenSession(inner)
-        }
-        generated_protocol::RequestPayload::CreateVmRequest(inner) => {
-            RequestPayload::CreateVm(inner)
-        }
-        generated_protocol::RequestPayload::DisposeVmRequest(inner) => {
-            RequestPayload::DisposeVm(DisposeVmRequest {
-                reason: from_generated_dispose_reason(inner.reason),
-            })
-        }
-        generated_protocol::RequestPayload::BootstrapRootFilesystemRequest(inner) => {
-            RequestPayload::BootstrapRootFilesystem(inner)
-        }
-        generated_protocol::RequestPayload::ConfigureVmRequest(inner) => {
-            RequestPayload::ConfigureVm(inner)
-        }
-        generated_protocol::RequestPayload::RegisterHostCallbacksRequest(inner) => {
-            RequestPayload::RegisterHostCallbacks(inner)
-        }
-        generated_protocol::RequestPayload::CreateLayerRequest => {
-            RequestPayload::CreateLayer(CreateLayerRequest {})
-        }
-        generated_protocol::RequestPayload::SealLayerRequest(inner) => {
-            RequestPayload::SealLayer(inner)
-        }
-        generated_protocol::RequestPayload::ImportSnapshotRequest(inner) => {
-            RequestPayload::ImportSnapshot(inner)
-        }
-        generated_protocol::RequestPayload::ExportSnapshotRequest(inner) => {
-            RequestPayload::ExportSnapshot(inner)
-        }
-        generated_protocol::RequestPayload::CreateOverlayRequest(inner) => {
-            RequestPayload::CreateOverlay(inner)
-        }
-        generated_protocol::RequestPayload::GuestFilesystemCallRequest(inner) => {
-            RequestPayload::GuestFilesystemCall(inner)
-        }
-        generated_protocol::RequestPayload::SnapshotRootFilesystemRequest => {
-            RequestPayload::SnapshotRootFilesystem(SnapshotRootFilesystemRequest {})
-        }
-        generated_protocol::RequestPayload::ExecuteRequest(inner) => RequestPayload::Execute(inner),
-        generated_protocol::RequestPayload::WriteStdinRequest(inner) => {
-            RequestPayload::WriteStdin(inner)
-        }
-        generated_protocol::RequestPayload::CloseStdinRequest(inner) => {
-            RequestPayload::CloseStdin(inner)
-        }
-        generated_protocol::RequestPayload::KillProcessRequest(inner) => {
-            RequestPayload::KillProcess(inner)
-        }
-        generated_protocol::RequestPayload::GetProcessSnapshotRequest => {
-            RequestPayload::GetProcessSnapshot(GetProcessSnapshotRequest {})
-        }
-        generated_protocol::RequestPayload::GetResourceSnapshotRequest => {
-            RequestPayload::GetResourceSnapshot(GetResourceSnapshotRequest {})
-        }
-        generated_protocol::RequestPayload::FindListenerRequest(inner) => {
-            RequestPayload::FindListener(inner)
-        }
-        generated_protocol::RequestPayload::FindBoundUdpRequest(inner) => {
-            RequestPayload::FindBoundUdp(inner)
-        }
-        generated_protocol::RequestPayload::VmFetchRequest(inner) => RequestPayload::VmFetch(inner),
-        generated_protocol::RequestPayload::GetSignalStateRequest(inner) => {
-            RequestPayload::GetSignalState(inner)
-        }
-        generated_protocol::RequestPayload::GetZombieTimerCountRequest => {
-            RequestPayload::GetZombieTimerCount(GetZombieTimerCountRequest {})
-        }
-        generated_protocol::RequestPayload::HostFilesystemCallRequest(inner) => {
-            RequestPayload::HostFilesystemCall(HostFilesystemCallRequest {
-                operation: from_generated_filesystem_operation(inner.operation),
-                path: inner.path,
-                payload_size_bytes: inner.payload_size_bytes,
-            })
-        }
-        generated_protocol::RequestPayload::PersistenceLoadRequest(inner) => {
-            RequestPayload::PersistenceLoad(inner)
-        }
-        generated_protocol::RequestPayload::PersistenceFlushRequest(inner) => {
-            RequestPayload::PersistenceFlush(inner)
-        }
-        generated_protocol::RequestPayload::ExtEnvelope(inner) => {
-            RequestPayload::Ext(from_generated_ext_envelope(inner))
-        }
-        generated_protocol::RequestPayload::GuestKernelCallRequest(inner) => {
-            RequestPayload::GuestKernelCall(inner)
-        }
-        generated_protocol::RequestPayload::ResizePtyRequest(inner) => {
-            RequestPayload::ResizePty(inner)
-        }
-        generated_protocol::RequestPayload::LinkPackageRequest(inner) => {
-            RequestPayload::LinkPackage(inner)
-        }
-        generated_protocol::RequestPayload::ProvidedCommandsRequest => {
-            RequestPayload::ProvidedCommands(ProvidedCommandsRequest {})
-        }
-    })
-}
-
-fn to_generated_response_payload(
-    payload: &ResponsePayload,
-) -> Result<generated_protocol::ResponsePayload, ProtocolCodecError> {
-    Ok(match payload {
-        ResponsePayload::Authenticated(inner) => {
-            generated_protocol::ResponsePayload::AuthenticatedResponse(inner.clone())
-        }
-        ResponsePayload::SessionOpened(inner) => {
-            generated_protocol::ResponsePayload::SessionOpenedResponse(inner.clone())
-        }
-        ResponsePayload::VmCreated(inner) => {
-            generated_protocol::ResponsePayload::VmCreatedResponse(inner.clone())
-        }
-        ResponsePayload::VmDisposed(inner) => {
-            generated_protocol::ResponsePayload::VmDisposedResponse(inner.clone())
-        }
-        ResponsePayload::RootFilesystemBootstrapped(inner) => {
-            generated_protocol::ResponsePayload::RootFilesystemBootstrappedResponse(inner.clone())
-        }
-        ResponsePayload::VmConfigured(inner) => {
-            generated_protocol::ResponsePayload::VmConfiguredResponse(inner.clone())
-        }
-        ResponsePayload::HostCallbacksRegistered(inner) => {
-            generated_protocol::ResponsePayload::HostCallbacksRegisteredResponse(inner.clone())
-        }
-        ResponsePayload::LayerCreated(inner) => {
-            generated_protocol::ResponsePayload::LayerCreatedResponse(inner.clone())
-        }
-        ResponsePayload::LayerSealed(inner) => {
-            generated_protocol::ResponsePayload::LayerSealedResponse(inner.clone())
-        }
-        ResponsePayload::SnapshotImported(inner) => {
-            generated_protocol::ResponsePayload::SnapshotImportedResponse(inner.clone())
-        }
-        ResponsePayload::SnapshotExported(inner) => {
-            generated_protocol::ResponsePayload::SnapshotExportedResponse(
-                generated_protocol::SnapshotExportedResponse {
-                    layer_id: inner.layer_id.clone(),
-                    entries: inner.entries.clone(),
-                },
-            )
-        }
-        ResponsePayload::OverlayCreated(inner) => {
-            generated_protocol::ResponsePayload::OverlayCreatedResponse(inner.clone())
-        }
-        ResponsePayload::GuestFilesystemResult(inner) => {
-            generated_protocol::ResponsePayload::GuestFilesystemResultResponse(
-                generated_protocol::GuestFilesystemResultResponse {
-                    operation: to_generated_guest_filesystem_operation(&inner.operation),
-                    path: inner.path.clone(),
-                    content: inner.content.clone(),
-                    encoding: inner
-                        .encoding
-                        .as_ref()
-                        .map(to_generated_root_filesystem_entry_encoding),
-                    entries: inner.entries.clone(),
-                    stat: inner.stat.as_ref().map(to_generated_guest_filesystem_stat),
-                    exists: inner.exists,
-                    target: inner.target.clone(),
-                },
-            )
-        }
-        ResponsePayload::RootFilesystemSnapshot(inner) => {
-            generated_protocol::ResponsePayload::RootFilesystemSnapshotResponse(
-                generated_protocol::RootFilesystemSnapshotResponse {
-                    entries: inner.entries.clone(),
-                },
-            )
-        }
-        ResponsePayload::ProcessStarted(inner) => {
-            generated_protocol::ResponsePayload::ProcessStartedResponse(inner.clone())
-        }
-        ResponsePayload::StdinWritten(inner) => {
-            generated_protocol::ResponsePayload::StdinWrittenResponse(inner.clone())
-        }
-        ResponsePayload::StdinClosed(inner) => {
-            generated_protocol::ResponsePayload::StdinClosedResponse(inner.clone())
-        }
-        ResponsePayload::ProcessKilled(inner) => {
-            generated_protocol::ResponsePayload::ProcessKilledResponse(inner.clone())
-        }
-        ResponsePayload::ProcessSnapshot(inner) => {
-            generated_protocol::ResponsePayload::ProcessSnapshotResponse(
-                generated_protocol::ProcessSnapshotResponse {
-                    processes: inner
-                        .processes
-                        .iter()
-                        .map(to_generated_process_snapshot_entry)
-                        .collect(),
-                },
-            )
-        }
-        ResponsePayload::ResourceSnapshot(inner) => {
-            generated_protocol::ResponsePayload::ResourceSnapshotResponse(inner.clone())
-        }
-        ResponsePayload::ListenerSnapshot(inner) => {
-            generated_protocol::ResponsePayload::ListenerSnapshotResponse(inner.clone())
-        }
-        ResponsePayload::BoundUdpSnapshot(inner) => {
-            generated_protocol::ResponsePayload::BoundUdpSnapshotResponse(inner.clone())
-        }
-        ResponsePayload::VmFetchResult(inner) => {
-            generated_protocol::ResponsePayload::VmFetchResponse(inner.clone())
-        }
-        ResponsePayload::SignalState(inner) => {
-            generated_protocol::ResponsePayload::SignalStateResponse(inner.clone())
-        }
-        ResponsePayload::ZombieTimerCount(inner) => {
-            generated_protocol::ResponsePayload::ZombieTimerCountResponse(inner.clone())
-        }
-        ResponsePayload::FilesystemResult(inner) => {
-            generated_protocol::ResponsePayload::FilesystemResultResponse(
-                generated_protocol::FilesystemResultResponse {
-                    operation: to_generated_filesystem_operation(&inner.operation),
-                    status: inner.status.clone(),
-                    payload_size_bytes: inner.payload_size_bytes,
-                },
-            )
-        }
-        ResponsePayload::PermissionDecision(inner) => {
-            generated_protocol::ResponsePayload::PermissionDecisionResponse(
-                generated_protocol::PermissionDecisionResponse {
-                    capability: inner.capability.clone(),
-                    decision: to_generated_permission_mode(&inner.decision),
-                },
-            )
-        }
-        ResponsePayload::PersistenceState(inner) => {
-            generated_protocol::ResponsePayload::PersistenceStateResponse(inner.clone())
-        }
-        ResponsePayload::PersistenceFlushed(inner) => {
-            generated_protocol::ResponsePayload::PersistenceFlushedResponse(inner.clone())
-        }
-        ResponsePayload::Rejected(inner) => {
-            generated_protocol::ResponsePayload::RejectedResponse(inner.clone())
-        }
-        ResponsePayload::ExtResult(inner) => {
-            generated_protocol::ResponsePayload::ExtEnvelope(to_generated_ext_envelope(inner))
-        }
-        ResponsePayload::GuestKernelResult(inner) => {
-            generated_protocol::ResponsePayload::GuestKernelResultResponse(inner.clone())
-        }
-        ResponsePayload::PtyResized(inner) => {
-            generated_protocol::ResponsePayload::PtyResizedResponse(inner.clone())
-        }
-        ResponsePayload::PackageLinked(inner) => {
-            generated_protocol::ResponsePayload::PackageLinkedResponse(inner.clone())
-        }
-        ResponsePayload::ProvidedCommands(inner) => {
-            generated_protocol::ResponsePayload::ProvidedCommandsResponse(inner.clone())
-        }
-    })
-}
-
-fn from_generated_response_payload(
-    payload: generated_protocol::ResponsePayload,
-) -> Result<ResponsePayload, ProtocolCodecError> {
-    Ok(match payload {
-        generated_protocol::ResponsePayload::AuthenticatedResponse(inner) => {
-            ResponsePayload::Authenticated(inner)
-        }
-        generated_protocol::ResponsePayload::SessionOpenedResponse(inner) => {
-            ResponsePayload::SessionOpened(inner)
-        }
-        generated_protocol::ResponsePayload::VmCreatedResponse(inner) => {
-            ResponsePayload::VmCreated(inner)
-        }
-        generated_protocol::ResponsePayload::VmDisposedResponse(inner) => {
-            ResponsePayload::VmDisposed(inner)
-        }
-        generated_protocol::ResponsePayload::RootFilesystemBootstrappedResponse(inner) => {
-            ResponsePayload::RootFilesystemBootstrapped(inner)
-        }
-        generated_protocol::ResponsePayload::VmConfiguredResponse(inner) => {
-            ResponsePayload::VmConfigured(inner)
-        }
-        generated_protocol::ResponsePayload::HostCallbacksRegisteredResponse(inner) => {
-            ResponsePayload::HostCallbacksRegistered(inner)
-        }
-        generated_protocol::ResponsePayload::LayerCreatedResponse(inner) => {
-            ResponsePayload::LayerCreated(inner)
-        }
-        generated_protocol::ResponsePayload::LayerSealedResponse(inner) => {
-            ResponsePayload::LayerSealed(inner)
-        }
-        generated_protocol::ResponsePayload::SnapshotImportedResponse(inner) => {
-            ResponsePayload::SnapshotImported(inner)
-        }
-        generated_protocol::ResponsePayload::SnapshotExportedResponse(inner) => {
-            ResponsePayload::SnapshotExported(SnapshotExportedResponse {
-                layer_id: inner.layer_id,
-                entries: inner.entries,
-            })
-        }
-        generated_protocol::ResponsePayload::OverlayCreatedResponse(inner) => {
-            ResponsePayload::OverlayCreated(inner)
-        }
-        generated_protocol::ResponsePayload::GuestFilesystemResultResponse(inner) => {
-            ResponsePayload::GuestFilesystemResult(GuestFilesystemResultResponse {
-                operation: from_generated_guest_filesystem_operation(inner.operation),
-                path: inner.path,
-                content: inner.content,
-                encoding: inner
-                    .encoding
-                    .map(from_generated_root_filesystem_entry_encoding),
-                entries: inner.entries,
-                stat: inner.stat.map(from_generated_guest_filesystem_stat),
-                exists: inner.exists,
-                target: inner.target,
-            })
-        }
-        generated_protocol::ResponsePayload::RootFilesystemSnapshotResponse(inner) => {
-            ResponsePayload::RootFilesystemSnapshot(RootFilesystemSnapshotResponse {
-                entries: inner.entries,
-            })
-        }
-        generated_protocol::ResponsePayload::ProcessStartedResponse(inner) => {
-            ResponsePayload::ProcessStarted(inner)
-        }
-        generated_protocol::ResponsePayload::StdinWrittenResponse(inner) => {
-            ResponsePayload::StdinWritten(inner)
-        }
-        generated_protocol::ResponsePayload::StdinClosedResponse(inner) => {
-            ResponsePayload::StdinClosed(inner)
-        }
-        generated_protocol::ResponsePayload::ProcessKilledResponse(inner) => {
-            ResponsePayload::ProcessKilled(inner)
-        }
-        generated_protocol::ResponsePayload::ProcessSnapshotResponse(inner) => {
-            ResponsePayload::ProcessSnapshot(ProcessSnapshotResponse {
-                processes: inner
-                    .processes
-                    .into_iter()
-                    .map(from_generated_process_snapshot_entry)
-                    .collect(),
-            })
-        }
-        generated_protocol::ResponsePayload::ResourceSnapshotResponse(inner) => {
-            ResponsePayload::ResourceSnapshot(inner)
-        }
-        generated_protocol::ResponsePayload::ListenerSnapshotResponse(inner) => {
-            ResponsePayload::ListenerSnapshot(inner)
-        }
-        generated_protocol::ResponsePayload::BoundUdpSnapshotResponse(inner) => {
-            ResponsePayload::BoundUdpSnapshot(inner)
-        }
-        generated_protocol::ResponsePayload::VmFetchResponse(inner) => {
-            ResponsePayload::VmFetchResult(inner)
-        }
-        generated_protocol::ResponsePayload::SignalStateResponse(inner) => {
-            ResponsePayload::SignalState(inner)
-        }
-        generated_protocol::ResponsePayload::ZombieTimerCountResponse(inner) => {
-            ResponsePayload::ZombieTimerCount(inner)
-        }
-        generated_protocol::ResponsePayload::FilesystemResultResponse(inner) => {
-            ResponsePayload::FilesystemResult(FilesystemResultResponse {
-                operation: from_generated_filesystem_operation(inner.operation),
-                status: inner.status,
-                payload_size_bytes: inner.payload_size_bytes,
-            })
-        }
-        generated_protocol::ResponsePayload::PermissionDecisionResponse(inner) => {
-            ResponsePayload::PermissionDecision(PermissionDecisionResponse {
-                capability: inner.capability,
-                decision: from_generated_permission_mode(inner.decision),
-            })
-        }
-        generated_protocol::ResponsePayload::PersistenceStateResponse(inner) => {
-            ResponsePayload::PersistenceState(inner)
-        }
-        generated_protocol::ResponsePayload::PersistenceFlushedResponse(inner) => {
-            ResponsePayload::PersistenceFlushed(inner)
-        }
-        generated_protocol::ResponsePayload::RejectedResponse(inner) => {
-            ResponsePayload::Rejected(inner)
-        }
-        generated_protocol::ResponsePayload::ExtEnvelope(inner) => {
-            ResponsePayload::ExtResult(from_generated_ext_envelope(inner))
-        }
-        generated_protocol::ResponsePayload::GuestKernelResultResponse(inner) => {
-            ResponsePayload::GuestKernelResult(inner)
-        }
-        generated_protocol::ResponsePayload::PtyResizedResponse(inner) => {
-            ResponsePayload::PtyResized(inner)
-        }
-        generated_protocol::ResponsePayload::PackageLinkedResponse(inner) => {
-            ResponsePayload::PackageLinked(inner)
-        }
-        generated_protocol::ResponsePayload::ProvidedCommandsResponse(inner) => {
-            ResponsePayload::ProvidedCommands(inner)
-        }
-    })
-}
-
-fn to_generated_event_payload(payload: &EventPayload) -> generated_protocol::EventPayload {
-    match payload {
-        EventPayload::VmLifecycle(inner) => generated_protocol::EventPayload::VmLifecycleEvent(
-            generated_protocol::VmLifecycleEvent {
-                state: to_generated_vm_lifecycle_state(&inner.state),
-            },
-        ),
-        EventPayload::ProcessOutput(inner) => generated_protocol::EventPayload::ProcessOutputEvent(
-            generated_protocol::ProcessOutputEvent {
-                process_id: inner.process_id.clone(),
-                channel: to_generated_stream_channel(&inner.channel),
-                chunk: inner.chunk.clone(),
-            },
-        ),
-        EventPayload::ProcessExited(inner) => {
-            generated_protocol::EventPayload::ProcessExitedEvent(inner.clone())
-        }
-        EventPayload::Structured(inner) => {
-            generated_protocol::EventPayload::StructuredEvent(inner.clone())
-        }
-        EventPayload::Ext(inner) => {
-            generated_protocol::EventPayload::ExtEnvelope(to_generated_ext_envelope(inner))
-        }
-    }
-}
-
-fn from_generated_event_payload(payload: generated_protocol::EventPayload) -> EventPayload {
-    match payload {
-        generated_protocol::EventPayload::VmLifecycleEvent(inner) => {
-            EventPayload::VmLifecycle(VmLifecycleEvent {
-                state: from_generated_vm_lifecycle_state(inner.state),
-            })
-        }
-        generated_protocol::EventPayload::ProcessOutputEvent(inner) => {
-            EventPayload::ProcessOutput(ProcessOutputEvent {
-                process_id: inner.process_id,
-                channel: from_generated_stream_channel(inner.channel),
-                chunk: inner.chunk,
-            })
-        }
-        generated_protocol::EventPayload::ProcessExitedEvent(inner) => {
-            EventPayload::ProcessExited(inner)
-        }
-        generated_protocol::EventPayload::StructuredEvent(inner) => EventPayload::Structured(inner),
-        generated_protocol::EventPayload::ExtEnvelope(inner) => {
-            EventPayload::Ext(from_generated_ext_envelope(inner))
-        }
-    }
-}
-
-fn to_generated_sidecar_request_payload(
-    payload: &SidecarRequestPayload,
-) -> Result<generated_protocol::SidecarRequestPayload, ProtocolCodecError> {
-    Ok(match payload {
-        SidecarRequestPayload::HostCallback(inner) => {
-            generated_protocol::SidecarRequestPayload::HostCallbackRequest(inner.clone())
-        }
-        SidecarRequestPayload::JsBridgeCall(inner) => {
-            generated_protocol::SidecarRequestPayload::JsBridgeCallRequest(inner.clone())
-        }
-        SidecarRequestPayload::Ext(inner) => {
-            generated_protocol::SidecarRequestPayload::ExtEnvelope(to_generated_ext_envelope(inner))
-        }
-    })
-}
-
-fn from_generated_sidecar_request_payload(
-    payload: generated_protocol::SidecarRequestPayload,
-) -> Result<SidecarRequestPayload, ProtocolCodecError> {
-    Ok(match payload {
-        generated_protocol::SidecarRequestPayload::HostCallbackRequest(inner) => {
-            SidecarRequestPayload::HostCallback(inner)
-        }
-        generated_protocol::SidecarRequestPayload::JsBridgeCallRequest(inner) => {
-            SidecarRequestPayload::JsBridgeCall(inner)
-        }
-        generated_protocol::SidecarRequestPayload::ExtEnvelope(inner) => {
-            SidecarRequestPayload::Ext(from_generated_ext_envelope(inner))
-        }
-    })
-}
-
-fn to_generated_sidecar_response_payload(
-    payload: &SidecarResponsePayload,
-) -> Result<generated_protocol::SidecarResponsePayload, ProtocolCodecError> {
-    Ok(match payload {
-        SidecarResponsePayload::HostCallbackResult(inner) => {
-            generated_protocol::SidecarResponsePayload::HostCallbackResultResponse(inner.clone())
-        }
-        SidecarResponsePayload::JsBridgeResult(inner) => {
-            generated_protocol::SidecarResponsePayload::JsBridgeResultResponse(inner.clone())
-        }
-        SidecarResponsePayload::ExtResult(inner) => {
-            generated_protocol::SidecarResponsePayload::ExtEnvelope(to_generated_ext_envelope(
-                inner,
-            ))
-        }
-    })
-}
-
-fn from_generated_sidecar_response_payload(
-    payload: generated_protocol::SidecarResponsePayload,
-) -> Result<SidecarResponsePayload, ProtocolCodecError> {
-    Ok(match payload {
-        generated_protocol::SidecarResponsePayload::HostCallbackResultResponse(inner) => {
-            SidecarResponsePayload::HostCallbackResult(inner)
-        }
-        generated_protocol::SidecarResponsePayload::JsBridgeResultResponse(inner) => {
-            SidecarResponsePayload::JsBridgeResult(inner)
-        }
-        generated_protocol::SidecarResponsePayload::ExtEnvelope(inner) => {
-            SidecarResponsePayload::ExtResult(from_generated_ext_envelope(inner))
-        }
-    })
-}
-
-macro_rules! impl_bare_newtype_union_enum {
-    (
-        $name:ident,
-        $json_name:ident,
-        $(#[$json_attr:meta])*
-        {
-            $($variant:ident($ty:ty) = $tag:literal),+ $(,)?
-        }
-    ) => {
-        #[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-        $(#[$json_attr])*
-        enum $json_name {
-            $($variant($ty)),+
-        }
-
-        impl From<&$name> for $json_name {
-            fn from(value: &$name) -> Self {
-                match value {
-                    $($name::$variant(inner) => Self::$variant(inner.clone()),)+
-                }
-            }
-        }
-
-        impl From<$json_name> for $name {
-            fn from(value: $json_name) -> Self {
-                match value {
-                    $($json_name::$variant(inner) => Self::$variant(inner),)+
-                }
-            }
-        }
-
-        impl Serialize for $name {
-            fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>
-            where
-                S: Serializer,
-            {
-                if serializer.is_human_readable() {
-                    $json_name::from(self).serialize(serializer)
-                } else {
-                    match self {
-                        $(Self::$variant(inner) => serialize_bare_newtype_tag(serializer, $tag, inner),)+
-                    }
-                }
-            }
-        }
-
-        impl<'de> Deserialize<'de> for $name {
-            fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>
-            where
-                D: Deserializer<'de>,
-            {
-                if deserializer.is_human_readable() {
-                    Ok($json_name::deserialize(deserializer)?.into())
-                } else {
-                    struct UnionVisitor;
-
-                    impl<'de> Visitor<'de> for UnionVisitor {
-                        type Value = $name;
-
-                        fn expecting(&self, formatter: &mut fmt::Formatter<'_>) -> fmt::Result {
-                            write!(formatter, "a {} BARE union", stringify!($name))
-                        }
-
-                        fn visit_seq<A>(self, mut seq: A) -> Result<Self::Value, A::Error>
-                        where
-                            A: SeqAccess<'de>,
-                        {
-                            let serde_bare::Uint(tag) = seq
-                                .next_element()?
-                                .ok_or_else(|| de::Error::custom(concat!("missing ", stringify!($name), " tag")))?;
-                            match tag {
-                                $(
-                                    $tag => {
-                                        let payload = seq.next_element::<$ty>()?.ok_or_else(|| {
-                                            de::Error::custom(format!(
-                                                "missing {} payload for tag {}",
-                                                stringify!($variant),
-                                                $tag
-                                            ))
-                                        })?;
-                                        Ok($name::$variant(payload))
-                                    }
-                                )+
-                                _ => Err(de::Error::custom(format!(
-                                    "unknown {} tag: {}",
-                                    stringify!($name),
-                                    tag
-                                ))),
-                            }
-                        }
-                    }
-
-                    deserializer.deserialize_tuple(2, UnionVisitor)
-                }
-            }
-        }
-    };
-}
-
-pub type ProtocolSchema = crate::wire::ProtocolSchema;
-
-pub type OwnershipScope = crate::wire::OwnershipScope;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum ProtocolFrame {
-    Request(RequestFrame),
-    Response(ResponseFrame),
-    Event(EventFrame),
-    SidecarRequest(SidecarRequestFrame),
-    SidecarResponse(SidecarResponseFrame),
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct RequestFrame {
-    pub schema: ProtocolSchema,
-    pub request_id: RequestId,
-    pub ownership: OwnershipScope,
-    pub payload: RequestPayload,
-}
-
-impl RequestFrame {
-    pub fn new(request_id: RequestId, ownership: OwnershipScope, payload: RequestPayload) -> Self {
-        Self {
-            schema: ProtocolSchema::current(),
-            request_id,
-            ownership,
-            payload,
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct ResponseFrame {
-    pub schema: ProtocolSchema,
-    pub request_id: RequestId,
-    pub ownership: OwnershipScope,
-    pub payload: ResponsePayload,
-}
-
-impl ResponseFrame {
-    pub fn new(request_id: RequestId, ownership: OwnershipScope, payload: ResponsePayload) -> Self {
-        Self {
-            schema: ProtocolSchema::current(),
-            request_id,
-            ownership,
-            payload,
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct SidecarRequestFrame {
-    pub schema: ProtocolSchema,
-    pub request_id: RequestId,
-    pub ownership: OwnershipScope,
-    pub payload: SidecarRequestPayload,
-}
-
-impl SidecarRequestFrame {
-    pub fn new(
-        request_id: RequestId,
-        ownership: OwnershipScope,
-        payload: SidecarRequestPayload,
-    ) -> Self {
-        Self {
-            schema: ProtocolSchema::current(),
-            request_id,
-            ownership,
-            payload,
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct SidecarResponseFrame {
-    pub schema: ProtocolSchema,
-    pub request_id: RequestId,
-    pub ownership: OwnershipScope,
-    pub payload: SidecarResponsePayload,
-}
-
-impl SidecarResponseFrame {
-    pub fn new(
-        request_id: RequestId,
-        ownership: OwnershipScope,
-        payload: SidecarResponsePayload,
-    ) -> Self {
-        Self {
-            schema: ProtocolSchema::current(),
-            request_id,
-            ownership,
-            payload,
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct EventFrame {
-    pub schema: ProtocolSchema,
-    pub ownership: OwnershipScope,
-    pub payload: EventPayload,
-}
-
-impl EventFrame {
-    pub fn new(ownership: OwnershipScope, payload: EventPayload) -> Self {
-        Self {
-            schema: ProtocolSchema::current(),
-            ownership,
-            payload,
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum RequestPayload {
-    Authenticate(AuthenticateRequest),
-    OpenSession(OpenSessionRequest),
-    CreateVm(CreateVmRequest),
-    DisposeVm(DisposeVmRequest),
-    BootstrapRootFilesystem(BootstrapRootFilesystemRequest),
-    ConfigureVm(ConfigureVmRequest),
-    RegisterHostCallbacks(RegisterHostCallbacksRequest),
-    CreateLayer(CreateLayerRequest),
-    SealLayer(SealLayerRequest),
-    ImportSnapshot(ImportSnapshotRequest),
-    ExportSnapshot(ExportSnapshotRequest),
-    CreateOverlay(CreateOverlayRequest),
-    GuestFilesystemCall(GuestFilesystemCallRequest),
-    SnapshotRootFilesystem(SnapshotRootFilesystemRequest),
-    Execute(ExecuteRequest),
-    WriteStdin(WriteStdinRequest),
-    CloseStdin(CloseStdinRequest),
-    KillProcess(KillProcessRequest),
-    GetProcessSnapshot(GetProcessSnapshotRequest),
-    FindListener(FindListenerRequest),
-    FindBoundUdp(FindBoundUdpRequest),
-    VmFetch(VmFetchRequest),
-    GetSignalState(GetSignalStateRequest),
-    GetZombieTimerCount(GetZombieTimerCountRequest),
-    HostFilesystemCall(HostFilesystemCallRequest),
-    PersistenceLoad(PersistenceLoadRequest),
-    PersistenceFlush(PersistenceFlushRequest),
-    Ext(ExtEnvelope),
-    GuestKernelCall(GuestKernelCallRequest),
-    ResizePty(ResizePtyRequest),
-    GetResourceSnapshot(GetResourceSnapshotRequest),
-    LinkPackage(LinkPackageRequest),
-    ProvidedCommands(ProvidedCommandsRequest),
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum ResponsePayload {
-    Authenticated(AuthenticatedResponse),
-    SessionOpened(SessionOpenedResponse),
-    VmCreated(VmCreatedResponse),
-    VmDisposed(VmDisposedResponse),
-    RootFilesystemBootstrapped(RootFilesystemBootstrappedResponse),
-    VmConfigured(VmConfiguredResponse),
-    HostCallbacksRegistered(HostCallbacksRegisteredResponse),
-    LayerCreated(LayerCreatedResponse),
-    LayerSealed(LayerSealedResponse),
-    SnapshotImported(SnapshotImportedResponse),
-    SnapshotExported(SnapshotExportedResponse),
-    OverlayCreated(OverlayCreatedResponse),
-    GuestFilesystemResult(GuestFilesystemResultResponse),
-    RootFilesystemSnapshot(RootFilesystemSnapshotResponse),
-    ProcessStarted(ProcessStartedResponse),
-    StdinWritten(StdinWrittenResponse),
-    StdinClosed(StdinClosedResponse),
-    ProcessKilled(ProcessKilledResponse),
-    ProcessSnapshot(ProcessSnapshotResponse),
-    ListenerSnapshot(ListenerSnapshotResponse),
-    BoundUdpSnapshot(BoundUdpSnapshotResponse),
-    VmFetchResult(VmFetchResponse),
-    SignalState(SignalStateResponse),
-    ZombieTimerCount(ZombieTimerCountResponse),
-    FilesystemResult(FilesystemResultResponse),
-    PermissionDecision(PermissionDecisionResponse),
-    PersistenceState(PersistenceStateResponse),
-    PersistenceFlushed(PersistenceFlushedResponse),
-    Rejected(RejectedResponse),
-    ExtResult(ExtEnvelope),
-    GuestKernelResult(GuestKernelResultResponse),
-    PtyResized(PtyResizedResponse),
-    ResourceSnapshot(ResourceSnapshotResponse),
-    PackageLinked(PackageLinkedResponse),
-    ProvidedCommands(ProvidedCommandsResponse),
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum SidecarRequestPayload {
-    HostCallback(HostCallbackRequest),
-    JsBridgeCall(JsBridgeCallRequest),
-    Ext(ExtEnvelope),
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum SidecarResponsePayload {
-    HostCallbackResult(HostCallbackResultResponse),
-    JsBridgeResult(JsBridgeResultResponse),
-    ExtResult(ExtEnvelope),
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum EventPayload {
-    VmLifecycle(VmLifecycleEvent),
-    ProcessOutput(ProcessOutputEvent),
-    ProcessExited(ProcessExitedEvent),
-    Structured(StructuredEvent),
-    Ext(ExtEnvelope),
-}
-
-pub type SidecarPlacement = crate::wire::SidecarPlacement;
-
-pub type SidecarPlacementShared = crate::wire::SidecarPlacementShared;
-
-pub type SidecarPlacementExplicit = crate::wire::SidecarPlacementExplicit;
-
-pub type GuestRuntimeKind = crate::wire::GuestRuntimeKind;
-
-pub type DisposeReason = crate::wire::DisposeReason;
-
-pub type FilesystemOperation = crate::wire::FilesystemOperation;
-
-pub type GuestFilesystemOperation = crate::wire::GuestFilesystemOperation;
-
-pub type PermissionMode = crate::wire::PermissionMode;
-
-pub type FsPermissionRule = crate::wire::FsPermissionRule;
-
-pub type PatternPermissionRule = crate::wire::PatternPermissionRule;
-
-pub type FsPermissionRuleSet = crate::wire::FsPermissionRuleSet;
-
-pub type PatternPermissionRuleSet = crate::wire::PatternPermissionRuleSet;
-
-pub type FsPermissionScope = crate::wire::FsPermissionScope;
-
-pub type PatternPermissionScope = crate::wire::PatternPermissionScope;
-
-pub type PermissionsPolicy = crate::wire::PermissionsPolicy;
-
-pub type RootFilesystemEntryKind = crate::wire::RootFilesystemEntryKind;
-
-pub type RootFilesystemMode = crate::wire::RootFilesystemMode;
-
-pub type RootFilesystemLowerDescriptor = crate::wire::RootFilesystemLowerDescriptor;
-
-pub type SnapshotRootFilesystemLower = crate::wire::SnapshotRootFilesystemLower;
-
-pub type StreamChannel = crate::wire::StreamChannel;
-
-pub type VmLifecycleState = crate::wire::VmLifecycleState;
-
-pub type AuthenticateRequest = crate::wire::AuthenticateRequest;
-
-pub type OpenSessionRequest = crate::wire::OpenSessionRequest;
-
-pub type CreateVmRequest = crate::wire::CreateVmRequest;
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct DisposeVmRequest {
-    pub reason: DisposeReason,
-}
-
-pub type BootstrapRootFilesystemRequest = crate::wire::BootstrapRootFilesystemRequest;
-
-pub type RootFilesystemDescriptor = crate::wire::RootFilesystemDescriptor;
-
-pub type RootFilesystemEntryEncoding = crate::wire::RootFilesystemEntryEncoding;
-
-pub type RootFilesystemEntry = crate::wire::RootFilesystemEntry;
-
-pub type ConfigureVmRequest = crate::wire::ConfigureVmRequest;
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, Default)]
-pub struct CreateLayerRequest {}
-
-pub type SealLayerRequest = crate::wire::SealLayerRequest;
-
-pub type ImportSnapshotRequest = crate::wire::ImportSnapshotRequest;
-
-pub type ExportSnapshotRequest = crate::wire::ExportSnapshotRequest;
-
-pub type CreateOverlayRequest = crate::wire::CreateOverlayRequest;
-
-pub type GuestFilesystemCallRequest = crate::wire::GuestFilesystemCallRequest;
-
-pub type GuestKernelCallRequest = crate::wire::GuestKernelCallRequest;
-pub type ResizePtyRequest = crate::wire::ResizePtyRequest;
-pub type PackageDescriptor = crate::wire::PackageDescriptor;
-pub type AgentosProjectedAgent = crate::wire::AgentosProjectedAgent;
-pub type PackageCommands = crate::wire::PackageCommands;
-pub type ProjectedCommand = crate::wire::ProjectedCommand;
-pub type LinkPackageRequest = crate::wire::LinkPackageRequest;
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, Default)]
-pub struct ProvidedCommandsRequest {}
-
-pub type GuestKernelResultResponse = crate::wire::GuestKernelResultResponse;
-pub type PtyResizedResponse = crate::wire::PtyResizedResponse;
-pub type PackageLinkedResponse = crate::wire::PackageLinkedResponse;
-pub type ProvidedCommandsResponse = crate::wire::ProvidedCommandsResponse;
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, Default)]
-pub struct SnapshotRootFilesystemRequest {}
-
-pub type MountDescriptor = crate::wire::MountDescriptor;
-
-pub type MountPluginDescriptor = crate::wire::MountPluginDescriptor;
-
-pub type SoftwareDescriptor = crate::wire::SoftwareDescriptor;
-
-pub type ProjectedModuleDescriptor = crate::wire::ProjectedModuleDescriptor;
-
-pub type WasmPermissionTier = crate::wire::WasmPermissionTier;
-
-pub type ExecuteRequest = crate::wire::ExecuteRequest;
-
-pub type WriteStdinRequest = crate::wire::WriteStdinRequest;
-
-pub type CloseStdinRequest = crate::wire::CloseStdinRequest;
-
-pub type KillProcessRequest = crate::wire::KillProcessRequest;
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, Default)]
-pub struct GetProcessSnapshotRequest {}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, Default)]
-pub struct GetResourceSnapshotRequest {}
-
-pub type FindListenerRequest = crate::wire::FindListenerRequest;
-
-pub type FindBoundUdpRequest = crate::wire::FindBoundUdpRequest;
-
-pub type VmFetchRequest = crate::wire::VmFetchRequest;
-
-pub type GetSignalStateRequest = crate::wire::GetSignalStateRequest;
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, Default)]
-pub struct GetZombieTimerCountRequest {}
-
-pub type HostFilesystemCallRequest = crate::wire::HostFilesystemCallRequest;
-
-pub type PersistenceLoadRequest = crate::wire::PersistenceLoadRequest;
-
-pub type PersistenceFlushRequest = crate::wire::PersistenceFlushRequest;
-
-pub type RegisterHostCallbacksRequest = crate::wire::RegisterHostCallbacksRequest;
-
-pub type RegisteredHostCallbackDefinition = crate::wire::RegisteredHostCallbackDefinition;
-
-pub type RegisteredHostCallbackExample = crate::wire::RegisteredHostCallbackExample;
-
-pub type HostCallbackRequest = crate::wire::HostCallbackRequest;
-
-pub type JsBridgeCallRequest = crate::wire::JsBridgeCallRequest;
-
-pub type AuthenticatedResponse = crate::wire::AuthenticatedResponse;
-
-pub type SessionOpenedResponse = crate::wire::SessionOpenedResponse;
-
-pub type VmCreatedResponse = crate::wire::VmCreatedResponse;
-
-pub type VmDisposedResponse = crate::wire::VmDisposedResponse;
-
-pub type RootFilesystemBootstrappedResponse = crate::wire::RootFilesystemBootstrappedResponse;
-
-pub type VmConfiguredResponse = crate::wire::VmConfiguredResponse;
-
-pub type HostCallbacksRegisteredResponse = crate::wire::HostCallbacksRegisteredResponse;
-
-pub type GuestFilesystemStat = crate::wire::GuestFilesystemStat;
-
-pub type GuestDirEntry = crate::wire::GuestDirEntry;
-
-pub type GuestFilesystemResultResponse = crate::wire::GuestFilesystemResultResponse;
-
-pub type RootFilesystemSnapshotResponse = crate::wire::RootFilesystemSnapshotResponse;
-
-pub type LayerCreatedResponse = crate::wire::LayerCreatedResponse;
-
-pub type LayerSealedResponse = crate::wire::LayerSealedResponse;
-
-pub type SnapshotImportedResponse = crate::wire::SnapshotImportedResponse;
-
-pub type SnapshotExportedResponse = crate::wire::SnapshotExportedResponse;
-
-pub type OverlayCreatedResponse = crate::wire::OverlayCreatedResponse;
-
-pub type ProcessStartedResponse = crate::wire::ProcessStartedResponse;
-
-pub type StdinWrittenResponse = crate::wire::StdinWrittenResponse;
-
-pub type StdinClosedResponse = crate::wire::StdinClosedResponse;
-
-pub type ProcessKilledResponse = crate::wire::ProcessKilledResponse;
-
-pub type ProcessSnapshotStatus = crate::wire::ProcessSnapshotStatus;
-
-pub type ProcessSnapshotEntry = crate::wire::ProcessSnapshotEntry;
-
-pub type ProcessSnapshotResponse = crate::wire::ProcessSnapshotResponse;
-
-pub type QueueSnapshotEntry = crate::wire::QueueSnapshotEntry;
-
-pub type ResourceSnapshotResponse = crate::wire::ResourceSnapshotResponse;
-
-pub type SocketStateEntry = crate::wire::SocketStateEntry;
-
-pub type ListenerSnapshotResponse = crate::wire::ListenerSnapshotResponse;
-
-pub type BoundUdpSnapshotResponse = crate::wire::BoundUdpSnapshotResponse;
-
-pub type VmFetchResponse = crate::wire::VmFetchResponse;
-
-pub type SignalDispositionAction = crate::wire::SignalDispositionAction;
-
-pub type SignalHandlerRegistration = crate::wire::SignalHandlerRegistration;
-
-pub type SignalStateResponse = crate::wire::SignalStateResponse;
-
-pub type ZombieTimerCountResponse = crate::wire::ZombieTimerCountResponse;
-
-pub type FilesystemResultResponse = crate::wire::FilesystemResultResponse;
-
-pub type PermissionDecisionResponse = crate::wire::PermissionDecisionResponse;
-
-pub type PersistenceStateResponse = crate::wire::PersistenceStateResponse;
-
-pub type PersistenceFlushedResponse = crate::wire::PersistenceFlushedResponse;
-
-pub type HostCallbackResultResponse = crate::wire::HostCallbackResultResponse;
-
-pub type JsBridgeResultResponse = crate::wire::JsBridgeResultResponse;
-
-pub type RejectedResponse = crate::wire::RejectedResponse;
-
-pub type VmLifecycleEvent = crate::wire::VmLifecycleEvent;
-
-pub type ProcessOutputEvent = crate::wire::ProcessOutputEvent;
-
-pub type ProcessExitedEvent = crate::wire::ProcessExitedEvent;
-
-pub type StructuredEvent = crate::wire::StructuredEvent;
-
-impl_bare_newtype_union_enum!(
-    ProtocolFrame,
-    JsonProtocolFrame,
-    #[serde(tag = "frame_type", rename_all = "snake_case")]
-    {
-        Request(RequestFrame) = 0,
-        Response(ResponseFrame) = 1,
-        Event(EventFrame) = 2,
-        SidecarRequest(SidecarRequestFrame) = 3,
-        SidecarResponse(SidecarResponseFrame) = 4,
-    }
-);
-
-impl_bare_newtype_union_enum!(
-    RequestPayload,
-    JsonRequestPayload,
-    #[serde(tag = "type", rename_all = "snake_case")]
-    {
-        Authenticate(AuthenticateRequest) = 0,
-        OpenSession(OpenSessionRequest) = 1,
-        CreateVm(CreateVmRequest) = 2,
-        DisposeVm(DisposeVmRequest) = 3,
-        BootstrapRootFilesystem(BootstrapRootFilesystemRequest) = 4,
-        ConfigureVm(ConfigureVmRequest) = 5,
-        RegisterHostCallbacks(RegisterHostCallbacksRequest) = 6,
-        CreateLayer(CreateLayerRequest) = 7,
-        SealLayer(SealLayerRequest) = 8,
-        ImportSnapshot(ImportSnapshotRequest) = 9,
-        ExportSnapshot(ExportSnapshotRequest) = 10,
-        CreateOverlay(CreateOverlayRequest) = 11,
-        GuestFilesystemCall(GuestFilesystemCallRequest) = 12,
-        SnapshotRootFilesystem(SnapshotRootFilesystemRequest) = 13,
-        Execute(ExecuteRequest) = 14,
-        WriteStdin(WriteStdinRequest) = 15,
-        CloseStdin(CloseStdinRequest) = 16,
-        KillProcess(KillProcessRequest) = 17,
-        GetProcessSnapshot(GetProcessSnapshotRequest) = 18,
-        FindListener(FindListenerRequest) = 19,
-        FindBoundUdp(FindBoundUdpRequest) = 20,
-        GetSignalState(GetSignalStateRequest) = 21,
-        GetZombieTimerCount(GetZombieTimerCountRequest) = 22,
-        HostFilesystemCall(HostFilesystemCallRequest) = 23,
-        PersistenceLoad(PersistenceLoadRequest) = 24,
-        PersistenceFlush(PersistenceFlushRequest) = 25,
-        VmFetch(VmFetchRequest) = 26,
-        Ext(ExtEnvelope) = 27,
-        GuestKernelCall(GuestKernelCallRequest) = 28,
-        ResizePty(ResizePtyRequest) = 29,
-        GetResourceSnapshot(GetResourceSnapshotRequest) = 30,
-        LinkPackage(LinkPackageRequest) = 31,
-        ProvidedCommands(ProvidedCommandsRequest) = 32,
-    }
-);
-
-impl_bare_newtype_union_enum!(
-    ResponsePayload,
-    JsonResponsePayload,
-    #[serde(tag = "type", rename_all = "snake_case")]
-    {
-        Authenticated(AuthenticatedResponse) = 0,
-        SessionOpened(SessionOpenedResponse) = 1,
-        VmCreated(VmCreatedResponse) = 2,
-        VmDisposed(VmDisposedResponse) = 3,
-        RootFilesystemBootstrapped(RootFilesystemBootstrappedResponse) = 4,
-        VmConfigured(VmConfiguredResponse) = 5,
-        HostCallbacksRegistered(HostCallbacksRegisteredResponse) = 6,
-        LayerCreated(LayerCreatedResponse) = 7,
-        LayerSealed(LayerSealedResponse) = 8,
-        SnapshotImported(SnapshotImportedResponse) = 9,
-        SnapshotExported(SnapshotExportedResponse) = 10,
-        OverlayCreated(OverlayCreatedResponse) = 11,
-        GuestFilesystemResult(GuestFilesystemResultResponse) = 12,
-        RootFilesystemSnapshot(RootFilesystemSnapshotResponse) = 13,
-        ProcessStarted(ProcessStartedResponse) = 14,
-        StdinWritten(StdinWrittenResponse) = 15,
-        StdinClosed(StdinClosedResponse) = 16,
-        ProcessKilled(ProcessKilledResponse) = 17,
-        ProcessSnapshot(ProcessSnapshotResponse) = 18,
-        ListenerSnapshot(ListenerSnapshotResponse) = 19,
-        BoundUdpSnapshot(BoundUdpSnapshotResponse) = 20,
-        SignalState(SignalStateResponse) = 21,
-        ZombieTimerCount(ZombieTimerCountResponse) = 22,
-        FilesystemResult(FilesystemResultResponse) = 23,
-        PermissionDecision(PermissionDecisionResponse) = 24,
-        PersistenceState(PersistenceStateResponse) = 25,
-        PersistenceFlushed(PersistenceFlushedResponse) = 26,
-        Rejected(RejectedResponse) = 27,
-        VmFetchResult(VmFetchResponse) = 28,
-        ExtResult(ExtEnvelope) = 29,
-        GuestKernelResult(GuestKernelResultResponse) = 30,
-        PtyResized(PtyResizedResponse) = 31,
-        ResourceSnapshot(ResourceSnapshotResponse) = 32,
-        PackageLinked(PackageLinkedResponse) = 33,
-        ProvidedCommands(ProvidedCommandsResponse) = 34,
-    }
-);
-
-impl_bare_newtype_union_enum!(
-    SidecarRequestPayload,
-    JsonSidecarRequestPayload,
-    #[serde(tag = "type", rename_all = "snake_case")]
-    {
-        HostCallback(HostCallbackRequest) = 0,
-        JsBridgeCall(JsBridgeCallRequest) = 1,
-        Ext(ExtEnvelope) = 2,
-    }
-);
-
-impl_bare_newtype_union_enum!(
-    SidecarResponsePayload,
-    JsonSidecarResponsePayload,
-    #[allow(clippy::enum_variant_names)]
-    #[serde(tag = "type", rename_all = "snake_case")]
-    {
-        HostCallbackResult(HostCallbackResultResponse) = 0,
-        JsBridgeResult(JsBridgeResultResponse) = 1,
-        ExtResult(ExtEnvelope) = 2,
-    }
-);
-
-impl_bare_newtype_union_enum!(
-    EventPayload,
-    JsonEventPayload,
-    #[serde(tag = "type", rename_all = "snake_case")]
-    {
-        VmLifecycle(VmLifecycleEvent) = 0,
-        ProcessOutput(ProcessOutputEvent) = 1,
-        ProcessExited(ProcessExitedEvent) = 2,
-        Structured(StructuredEvent) = 3,
-        Ext(ExtEnvelope) = 4,
-    }
-);
-
-fn serialize_payload(
-    frame: &ProtocolFrame,
-    payload_codec: NativePayloadCodec,
-) -> Result<Vec<u8>, ProtocolCodecError> {
-    match payload_codec {
-        NativePayloadCodec::Json => serde_json::to_vec(frame)
-            .map_err(|error| ProtocolCodecError::SerializeFailure(error.to_string())),
-        NativePayloadCodec::Bare => serde_bare::to_vec(&to_generated_protocol_frame(frame)?)
-            .map_err(|error| ProtocolCodecError::SerializeFailure(error.to_string())),
-    }
-}
-
-fn deserialize_payload(
-    payload: &[u8],
-    payload_codec: NativePayloadCodec,
-) -> Result<ProtocolFrame, ProtocolCodecError> {
-    match payload_codec {
-        NativePayloadCodec::Json => serde_json::from_slice(payload)
-            .map_err(|error| ProtocolCodecError::DeserializeFailure(error.to_string())),
-        NativePayloadCodec::Bare => {
-            let frame: generated_protocol::ProtocolFrame = serde_bare::from_slice(payload)
-                .map_err(|error| ProtocolCodecError::DeserializeFailure(error.to_string()))?;
-            from_generated_protocol_frame(frame)
-        }
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum NativePayloadCodec {
-    Json,
-    Bare,
-}
-
-impl NativePayloadCodec {
-    pub fn sniff(payload: &[u8]) -> Self {
-        match payload.first() {
-            Some(b'{') => Self::Json,
-            _ => Self::Bare,
-        }
-    }
-
-    pub fn alternate(self) -> Self {
-        match self {
-            Self::Json => Self::Bare,
-            Self::Bare => Self::Json,
-        }
-    }
-}
-
-#[derive(Debug, Clone)]
-pub struct NativeFrameCodec {
-    max_frame_bytes: usize,
-    payload_codec: NativePayloadCodec,
-}
-
-impl NativeFrameCodec {
-    pub fn new(max_frame_bytes: usize) -> Self {
-        Self::with_payload_codec(max_frame_bytes, NativePayloadCodec::Json)
-    }
-
-    pub fn with_payload_codec(max_frame_bytes: usize, payload_codec: NativePayloadCodec) -> Self {
-        Self {
-            max_frame_bytes,
-            payload_codec,
-        }
-    }
-
-    pub fn max_frame_bytes(&self) -> usize {
-        self.max_frame_bytes
-    }
-
-    pub fn payload_codec(&self) -> NativePayloadCodec {
-        self.payload_codec
-    }
-
-    pub fn encode(&self, frame: &ProtocolFrame) -> Result<Vec<u8>, ProtocolCodecError> {
-        self.encode_with_codec(frame, self.payload_codec)
-    }
-
-    pub fn encode_with_codec(
-        &self,
-        frame: &ProtocolFrame,
-        payload_codec: NativePayloadCodec,
-    ) -> Result<Vec<u8>, ProtocolCodecError> {
-        validate_frame(frame)?;
-
-        let payload = serialize_payload(frame, payload_codec)?;
-        if payload.len() > self.max_frame_bytes {
-            return Err(ProtocolCodecError::FrameTooLarge {
-                size: payload.len(),
-                max: self.max_frame_bytes,
-            });
-        }
-
-        let length =
-            u32::try_from(payload.len()).map_err(|_| ProtocolCodecError::FrameTooLarge {
-                size: payload.len(),
-                max: u32::MAX as usize,
-            })?;
-
-        let mut encoded = Vec::with_capacity(4 + payload.len());
-        encoded.extend_from_slice(&length.to_be_bytes());
-        encoded.extend_from_slice(&payload);
-        Ok(encoded)
-    }
-
-    pub fn decode(&self, bytes: &[u8]) -> Result<ProtocolFrame, ProtocolCodecError> {
-        self.decode_detected(bytes).map(|(frame, _)| frame)
-    }
-
-    pub fn decode_with_codec(
-        &self,
-        bytes: &[u8],
-        payload_codec: NativePayloadCodec,
-    ) -> Result<ProtocolFrame, ProtocolCodecError> {
-        let payload = self.checked_payload(bytes)?;
-        let frame = deserialize_payload(payload, payload_codec)?;
-        validate_frame(&frame)?;
-        Ok(frame)
-    }
-
-    pub fn decode_detected(
-        &self,
-        bytes: &[u8],
-    ) -> Result<(ProtocolFrame, NativePayloadCodec), ProtocolCodecError> {
-        let payload = self.checked_payload(bytes)?;
-        let primary = NativePayloadCodec::sniff(payload);
-
-        match deserialize_payload(payload, primary) {
-            Ok(frame) => {
-                validate_frame(&frame)?;
-                Ok((frame, primary))
-            }
-            Err(primary_error) => {
-                let alternate = primary.alternate();
-                let frame = deserialize_payload(payload, alternate).map_err(|_| primary_error)?;
-                validate_frame(&frame)?;
-                Ok((frame, alternate))
-            }
-        }
-    }
-
-    fn checked_payload<'a>(&self, bytes: &'a [u8]) -> Result<&'a [u8], ProtocolCodecError> {
-        if bytes.len() < 4 {
-            return Err(ProtocolCodecError::TruncatedFrame {
-                actual: bytes.len(),
-            });
-        }
-
-        let declared =
-            u32::from_be_bytes(bytes[..4].try_into().expect("length prefix is four bytes"))
-                as usize;
-        if declared > self.max_frame_bytes {
-            return Err(ProtocolCodecError::FrameTooLarge {
-                size: declared,
-                max: self.max_frame_bytes,
-            });
-        }
-
-        let actual = bytes.len() - 4;
-        if declared != actual {
-            return Err(ProtocolCodecError::LengthPrefixMismatch { declared, actual });
-        }
-        Ok(&bytes[4..])
-    }
-}
-
-impl Default for NativeFrameCodec {
-    fn default() -> Self {
-        Self::new(DEFAULT_MAX_FRAME_BYTES)
-    }
-}
-
-#[derive(Debug)]
-pub struct ResponseTracker {
-    pending: HashMap<RequestId, PendingRequest>,
-    completed: HashSet<RequestId>,
-    completed_order: VecDeque<RequestId>,
-    completed_cap: usize,
-}
-
-#[derive(Debug)]
-pub struct SidecarResponseTracker {
-    pending: HashMap<RequestId, PendingSidecarRequest>,
-    completed: HashSet<RequestId>,
-    completed_order: VecDeque<RequestId>,
-    completed_cap: usize,
-}
-
-impl ResponseTracker {
-    pub fn with_completed_cap(completed_cap: usize) -> Self {
-        Self {
-            pending: HashMap::new(),
-            completed: HashSet::new(),
-            completed_order: VecDeque::new(),
-            completed_cap: completed_cap.max(1),
-        }
-    }
-
-    pub fn completed_count(&self) -> usize {
-        self.completed.len()
-    }
-
-    pub fn register_request(&mut self, request: &RequestFrame) -> Result<(), ResponseTrackerError> {
-        if self.pending.contains_key(&request.request_id)
-            || self.completed.contains(&request.request_id)
-        {
-            return Err(ResponseTrackerError::DuplicateRequestId {
-                request_id: request.request_id,
-            });
-        }
-
-        self.pending.insert(
-            request.request_id,
-            PendingRequest {
-                ownership: request.ownership.clone(),
-                expected_response: request.payload.expected_response(),
-            },
-        );
-        Ok(())
-    }
-
-    pub fn accept_response(
-        &mut self,
-        response: &ResponseFrame,
-    ) -> Result<(), ResponseTrackerError> {
-        if self.completed.contains(&response.request_id) {
-            return Err(ResponseTrackerError::DuplicateResponse {
-                request_id: response.request_id,
-            });
-        }
-
-        let pending = self.pending.get(&response.request_id).ok_or(
-            ResponseTrackerError::UnmatchedResponse {
-                request_id: response.request_id,
-            },
-        )?;
-
-        if pending.ownership != response.ownership {
-            return Err(ResponseTrackerError::OwnershipMismatch {
-                request_id: response.request_id,
-                expected: Box::new(pending.ownership.clone()),
-                actual: Box::new(response.ownership.clone()),
-            });
-        }
-
-        if !pending.expected_response.matches(&response.payload) {
-            return Err(ResponseTrackerError::ResponseKindMismatch {
-                request_id: response.request_id,
-                expected: pending.expected_response.as_str().to_string(),
-                actual: response.payload.kind_name().to_string(),
-            });
-        }
-
-        self.pending
-            .remove(&response.request_id)
-            .expect("pending response should still exist after validation");
-        self.completed.insert(response.request_id);
-        self.completed_order.push_back(response.request_id);
-        while self.completed.len() > self.completed_cap {
-            if let Some(evicted) = self.completed_order.pop_front() {
-                self.completed.remove(&evicted);
-            }
-        }
-        Ok(())
-    }
-}
-
-impl Default for ResponseTracker {
-    fn default() -> Self {
-        Self::with_completed_cap(DEFAULT_COMPLETED_RESPONSE_CAP)
-    }
-}
-
-impl SidecarResponseTracker {
-    pub fn with_completed_cap(completed_cap: usize) -> Self {
-        Self {
-            pending: HashMap::new(),
-            completed: HashSet::new(),
-            completed_order: VecDeque::new(),
-            completed_cap: completed_cap.max(1),
-        }
-    }
-
-    pub fn pending_count(&self) -> usize {
-        self.pending.len()
-    }
-
-    pub fn completed_count(&self) -> usize {
-        self.completed.len()
-    }
-
-    pub fn register_request(
-        &mut self,
-        request: &SidecarRequestFrame,
-    ) -> Result<(), SidecarResponseTrackerError> {
-        if self.pending.contains_key(&request.request_id)
-            || self.completed.contains(&request.request_id)
-        {
-            return Err(SidecarResponseTrackerError::DuplicateRequestId {
-                request_id: request.request_id,
-            });
-        }
-
-        self.pending.insert(
-            request.request_id,
-            PendingSidecarRequest {
-                ownership: request.ownership.clone(),
-                expected_response: request.payload.expected_response(),
-            },
-        );
-        Ok(())
-    }
-
-    pub fn accept_response(
-        &mut self,
-        response: &SidecarResponseFrame,
-    ) -> Result<(), SidecarResponseTrackerError> {
-        if self.completed.contains(&response.request_id) {
-            return Err(SidecarResponseTrackerError::DuplicateResponse {
-                request_id: response.request_id,
-            });
-        }
-
-        let pending = self.pending.get(&response.request_id).ok_or(
-            SidecarResponseTrackerError::UnmatchedResponse {
-                request_id: response.request_id,
-            },
-        )?;
-
-        if pending.ownership != response.ownership {
-            return Err(SidecarResponseTrackerError::OwnershipMismatch {
-                request_id: response.request_id,
-                expected: Box::new(pending.ownership.clone()),
-                actual: Box::new(response.ownership.clone()),
-            });
-        }
-
-        if !pending.expected_response.matches(&response.payload) {
-            return Err(SidecarResponseTrackerError::ResponseKindMismatch {
-                request_id: response.request_id,
-                expected: pending.expected_response.as_str().to_string(),
-                actual: response.payload.kind_name().to_string(),
-            });
-        }
-
-        self.pending
-            .remove(&response.request_id)
-            .expect("pending sidecar response should still exist after validation");
-        self.completed.insert(response.request_id);
-        self.completed_order.push_back(response.request_id);
-        while self.completed.len() > self.completed_cap {
-            if let Some(evicted) = self.completed_order.pop_front() {
-                self.completed.remove(&evicted);
-            }
-        }
-        Ok(())
-    }
-}
-
-impl Default for SidecarResponseTracker {
-    fn default() -> Self {
-        Self::with_completed_cap(DEFAULT_COMPLETED_RESPONSE_CAP)
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum ResponseTrackerError {
-    DuplicateRequestId {
-        request_id: RequestId,
-    },
-    UnmatchedResponse {
-        request_id: RequestId,
-    },
-    DuplicateResponse {
-        request_id: RequestId,
-    },
-    OwnershipMismatch {
-        request_id: RequestId,
-        expected: Box<OwnershipScope>,
-        actual: Box<OwnershipScope>,
-    },
-    ResponseKindMismatch {
-        request_id: RequestId,
-        expected: String,
-        actual: String,
-    },
-}
-
-impl fmt::Display for ResponseTrackerError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::DuplicateRequestId { request_id } => {
-                write!(f, "request id {request_id} is already tracked")
-            }
-            Self::UnmatchedResponse { request_id } => {
-                write!(
-                    f,
-                    "response id {request_id} does not match any pending request"
-                )
-            }
-            Self::DuplicateResponse { request_id } => {
-                write!(f, "response id {request_id} has already been completed")
-            }
-            Self::OwnershipMismatch {
-                request_id,
-                expected,
-                actual,
-            } => write!(
-                f,
-                "response id {request_id} used ownership {:?}, expected {:?}",
-                actual, expected
-            ),
-            Self::ResponseKindMismatch {
-                request_id,
-                expected,
-                actual,
-            } => write!(
-                f,
-                "response id {request_id} carried {actual}, expected {expected}",
-            ),
-        }
-    }
-}
-
-impl Error for ResponseTrackerError {}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum SidecarResponseTrackerError {
-    DuplicateRequestId {
-        request_id: RequestId,
-    },
-    UnmatchedResponse {
-        request_id: RequestId,
-    },
-    DuplicateResponse {
-        request_id: RequestId,
-    },
-    OwnershipMismatch {
-        request_id: RequestId,
-        expected: Box<OwnershipScope>,
-        actual: Box<OwnershipScope>,
-    },
-    ResponseKindMismatch {
-        request_id: RequestId,
-        expected: String,
-        actual: String,
-    },
-}
-
-impl fmt::Display for SidecarResponseTrackerError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::DuplicateRequestId { request_id } => {
-                write!(f, "sidecar request id {request_id} is already tracked")
-            }
-            Self::UnmatchedResponse { request_id } => {
-                write!(
-                    f,
-                    "sidecar response id {request_id} does not match any pending request"
-                )
-            }
-            Self::DuplicateResponse { request_id } => {
-                write!(
-                    f,
-                    "sidecar response id {request_id} has already been completed"
-                )
-            }
-            Self::OwnershipMismatch {
-                request_id,
-                expected,
-                actual,
-            } => write!(
-                f,
-                "sidecar response id {request_id} used ownership {:?}, expected {:?}",
-                actual, expected
-            ),
-            Self::ResponseKindMismatch {
-                request_id,
-                expected,
-                actual,
-            } => write!(
-                f,
-                "sidecar response id {request_id} carried {actual}, expected {expected}",
-            ),
-        }
-    }
-}
-
-impl Error for SidecarResponseTrackerError {}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-struct PendingRequest {
-    ownership: OwnershipScope,
-    expected_response: ExpectedResponseKind,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-struct PendingSidecarRequest {
-    ownership: OwnershipScope,
-    expected_response: ExpectedSidecarResponseKind,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum ExpectedResponseKind {
-    Authenticated,
-    SessionOpened,
-    VmCreated,
-    VmDisposed,
-    RootFilesystemBootstrapped,
-    VmConfigured,
-    HostCallbacksRegistered,
-    LayerCreated,
-    LayerSealed,
-    SnapshotImported,
-    SnapshotExported,
-    OverlayCreated,
-    GuestFilesystemResult,
-    RootFilesystemSnapshot,
-    ProcessStarted,
-    StdinWritten,
-    StdinClosed,
-    ProcessKilled,
-    ProcessSnapshot,
-    ResourceSnapshot,
-    ListenerSnapshot,
-    BoundUdpSnapshot,
-    VmFetchResult,
-    SignalState,
-    ZombieTimerCount,
-    FilesystemResult,
-    // `PermissionDecision` is a sidecar-initiated callback response, so no host
-    // request maps to it in `expected_response_kind`; kept for protocol symmetry.
-    #[allow(dead_code)]
-    PermissionDecision,
-    PersistenceState,
-    PersistenceFlushed,
-    ExtResult,
-    GuestKernelResult,
-    PtyResized,
-    PackageLinked,
-    ProvidedCommands,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum ExpectedSidecarResponseKind {
-    HostCallback,
-    JsBridge,
-    Ext,
-}
-
-impl ExpectedResponseKind {
-    fn as_str(self) -> &'static str {
-        match self {
-            Self::Authenticated => "authenticated",
-            Self::SessionOpened => "session_opened",
-            Self::VmCreated => "vm_created",
-            Self::VmDisposed => "vm_disposed",
-            Self::RootFilesystemBootstrapped => "root_filesystem_bootstrapped",
-            Self::VmConfigured => "vm_configured",
-            Self::HostCallbacksRegistered => "host_callbacks_registered",
-            Self::LayerCreated => "layer_created",
-            Self::LayerSealed => "layer_sealed",
-            Self::SnapshotImported => "snapshot_imported",
-            Self::SnapshotExported => "snapshot_exported",
-            Self::OverlayCreated => "overlay_created",
-            Self::GuestFilesystemResult => "guest_filesystem_result",
-            Self::RootFilesystemSnapshot => "root_filesystem_snapshot",
-            Self::ProcessStarted => "process_started",
-            Self::StdinWritten => "stdin_written",
-            Self::StdinClosed => "stdin_closed",
-            Self::ProcessKilled => "process_killed",
-            Self::ProcessSnapshot => "process_snapshot",
-            Self::ResourceSnapshot => "resource_snapshot",
-            Self::ListenerSnapshot => "listener_snapshot",
-            Self::BoundUdpSnapshot => "bound_udp_snapshot",
-            Self::VmFetchResult => "vm_fetch_result",
-            Self::SignalState => "signal_state",
-            Self::ZombieTimerCount => "zombie_timer_count",
-            Self::FilesystemResult => "filesystem_result",
-            Self::PermissionDecision => "permission_decision",
-            Self::PersistenceState => "persistence_state",
-            Self::PersistenceFlushed => "persistence_flushed",
-            Self::ExtResult => "ext_result",
-            Self::GuestKernelResult => "guest_kernel_result",
-            Self::PtyResized => "pty_resized",
-            Self::PackageLinked => "package_linked",
-            Self::ProvidedCommands => "provided_commands_response",
-        }
-    }
-
-    fn matches(self, payload: &ResponsePayload) -> bool {
-        match payload {
-            ResponsePayload::Rejected(_) => true,
-            _ => payload.kind_name() == self.as_str(),
-        }
-    }
-}
-
-impl ExpectedSidecarResponseKind {
-    fn as_str(self) -> &'static str {
-        match self {
-            Self::HostCallback => "host_callback_result",
-            Self::JsBridge => "js_bridge_result",
-            Self::Ext => "ext_result",
-        }
-    }
-
-    fn matches(self, payload: &SidecarResponsePayload) -> bool {
-        payload.kind_name() == self.as_str()
-    }
-}
-
-impl RequestPayload {
-    fn ownership_requirement(&self) -> OwnershipRequirement {
-        match self {
-            Self::Authenticate(_) | Self::OpenSession(_) => OwnershipRequirement::Connection,
-            Self::CreateVm(_) | Self::PersistenceLoad(_) | Self::PersistenceFlush(_) => {
-                OwnershipRequirement::Session
-            }
-            Self::DisposeVm(_)
-            | Self::BootstrapRootFilesystem(_)
-            | Self::ConfigureVm(_)
-            | Self::RegisterHostCallbacks(_)
-            | Self::CreateLayer(_)
-            | Self::SealLayer(_)
-            | Self::ImportSnapshot(_)
-            | Self::ExportSnapshot(_)
-            | Self::CreateOverlay(_)
-            | Self::GuestFilesystemCall(_)
-            | Self::SnapshotRootFilesystem(_)
-            | Self::Execute(_)
-            | Self::WriteStdin(_)
-            | Self::CloseStdin(_)
-            | Self::KillProcess(_)
-            | Self::GetProcessSnapshot(_)
-            | Self::GetResourceSnapshot(_)
-            | Self::FindListener(_)
-            | Self::FindBoundUdp(_)
-            | Self::VmFetch(_)
-            | Self::GetSignalState(_)
-            | Self::GetZombieTimerCount(_)
-            | Self::GuestKernelCall(_)
-            | Self::ResizePty(_)
-            | Self::LinkPackage(_)
-            | Self::ProvidedCommands(_)
-            | Self::HostFilesystemCall(_) => OwnershipRequirement::Vm,
-            Self::Ext(_) => OwnershipRequirement::Any,
-        }
-    }
-
-    fn expected_response(&self) -> ExpectedResponseKind {
-        match self {
-            Self::Authenticate(_) => ExpectedResponseKind::Authenticated,
-            Self::OpenSession(_) => ExpectedResponseKind::SessionOpened,
-            Self::CreateVm(_) => ExpectedResponseKind::VmCreated,
-            Self::DisposeVm(_) => ExpectedResponseKind::VmDisposed,
-            Self::BootstrapRootFilesystem(_) => ExpectedResponseKind::RootFilesystemBootstrapped,
-            Self::ConfigureVm(_) => ExpectedResponseKind::VmConfigured,
-            Self::RegisterHostCallbacks(_) => ExpectedResponseKind::HostCallbacksRegistered,
-            Self::CreateLayer(_) => ExpectedResponseKind::LayerCreated,
-            Self::SealLayer(_) => ExpectedResponseKind::LayerSealed,
-            Self::ImportSnapshot(_) => ExpectedResponseKind::SnapshotImported,
-            Self::ExportSnapshot(_) => ExpectedResponseKind::SnapshotExported,
-            Self::CreateOverlay(_) => ExpectedResponseKind::OverlayCreated,
-            Self::GuestFilesystemCall(_) => ExpectedResponseKind::GuestFilesystemResult,
-            Self::SnapshotRootFilesystem(_) => ExpectedResponseKind::RootFilesystemSnapshot,
-            Self::Execute(_) => ExpectedResponseKind::ProcessStarted,
-            Self::WriteStdin(_) => ExpectedResponseKind::StdinWritten,
-            Self::CloseStdin(_) => ExpectedResponseKind::StdinClosed,
-            Self::KillProcess(_) => ExpectedResponseKind::ProcessKilled,
-            Self::GetProcessSnapshot(_) => ExpectedResponseKind::ProcessSnapshot,
-            Self::GetResourceSnapshot(_) => ExpectedResponseKind::ResourceSnapshot,
-            Self::FindListener(_) => ExpectedResponseKind::ListenerSnapshot,
-            Self::FindBoundUdp(_) => ExpectedResponseKind::BoundUdpSnapshot,
-            Self::VmFetch(_) => ExpectedResponseKind::VmFetchResult,
-            Self::GetSignalState(_) => ExpectedResponseKind::SignalState,
-            Self::GetZombieTimerCount(_) => ExpectedResponseKind::ZombieTimerCount,
-            Self::HostFilesystemCall(_) => ExpectedResponseKind::FilesystemResult,
-            Self::PersistenceLoad(_) => ExpectedResponseKind::PersistenceState,
-            Self::PersistenceFlush(_) => ExpectedResponseKind::PersistenceFlushed,
-            Self::Ext(_) => ExpectedResponseKind::ExtResult,
-            Self::GuestKernelCall(_) => ExpectedResponseKind::GuestKernelResult,
-            Self::ResizePty(_) => ExpectedResponseKind::PtyResized,
-            Self::LinkPackage(_) => ExpectedResponseKind::PackageLinked,
-            Self::ProvidedCommands(_) => ExpectedResponseKind::ProvidedCommands,
-        }
-    }
-}
-
-impl SidecarRequestPayload {
-    fn ownership_requirement(&self) -> OwnershipRequirement {
-        OwnershipRequirement::Vm
-    }
-
-    fn expected_response(&self) -> ExpectedSidecarResponseKind {
-        match self {
-            Self::HostCallback(_) => ExpectedSidecarResponseKind::HostCallback,
-            Self::JsBridgeCall(_) => ExpectedSidecarResponseKind::JsBridge,
-            Self::Ext(_) => ExpectedSidecarResponseKind::Ext,
-        }
-    }
-}
-
-impl ResponsePayload {
-    fn ownership_requirement(&self) -> OwnershipRequirement {
-        match self {
-            Self::Authenticated(_) | Self::SessionOpened(_) => OwnershipRequirement::Connection,
-            Self::VmCreated(_) | Self::PersistenceState(_) | Self::PersistenceFlushed(_) => {
-                OwnershipRequirement::Session
-            }
-            Self::Rejected(_) => OwnershipRequirement::Any,
-            Self::VmDisposed(_)
-            | Self::RootFilesystemBootstrapped(_)
-            | Self::VmConfigured(_)
-            | Self::HostCallbacksRegistered(_)
-            | Self::LayerCreated(_)
-            | Self::LayerSealed(_)
-            | Self::SnapshotImported(_)
-            | Self::SnapshotExported(_)
-            | Self::OverlayCreated(_)
-            | Self::GuestFilesystemResult(_)
-            | Self::RootFilesystemSnapshot(_)
-            | Self::ProcessStarted(_)
-            | Self::StdinWritten(_)
-            | Self::StdinClosed(_)
-            | Self::ProcessKilled(_)
-            | Self::ProcessSnapshot(_)
-            | Self::ResourceSnapshot(_)
-            | Self::ListenerSnapshot(_)
-            | Self::BoundUdpSnapshot(_)
-            | Self::VmFetchResult(_)
-            | Self::SignalState(_)
-            | Self::ZombieTimerCount(_)
-            | Self::FilesystemResult(_)
-            | Self::PermissionDecision(_)
-            | Self::GuestKernelResult(_)
-            | Self::PtyResized(_)
-            | Self::PackageLinked(_)
-            | Self::ProvidedCommands(_) => OwnershipRequirement::Vm,
-            Self::ExtResult(_) => OwnershipRequirement::Any,
-        }
-    }
-
-    fn kind_name(&self) -> &'static str {
-        match self {
-            Self::Authenticated(_) => "authenticated",
-            Self::SessionOpened(_) => "session_opened",
-            Self::VmCreated(_) => "vm_created",
-            Self::VmDisposed(_) => "vm_disposed",
-            Self::RootFilesystemBootstrapped(_) => "root_filesystem_bootstrapped",
-            Self::VmConfigured(_) => "vm_configured",
-            Self::HostCallbacksRegistered(_) => "host_callbacks_registered",
-            Self::LayerCreated(_) => "layer_created",
-            Self::LayerSealed(_) => "layer_sealed",
-            Self::SnapshotImported(_) => "snapshot_imported",
-            Self::SnapshotExported(_) => "snapshot_exported",
-            Self::OverlayCreated(_) => "overlay_created",
-            Self::GuestFilesystemResult(_) => "guest_filesystem_result",
-            Self::RootFilesystemSnapshot(_) => "root_filesystem_snapshot",
-            Self::ProcessStarted(_) => "process_started",
-            Self::StdinWritten(_) => "stdin_written",
-            Self::StdinClosed(_) => "stdin_closed",
-            Self::ProcessKilled(_) => "process_killed",
-            Self::ProcessSnapshot(_) => "process_snapshot",
-            Self::ResourceSnapshot(_) => "resource_snapshot",
-            Self::ListenerSnapshot(_) => "listener_snapshot",
-            Self::BoundUdpSnapshot(_) => "bound_udp_snapshot",
-            Self::VmFetchResult(_) => "vm_fetch_result",
-            Self::SignalState(_) => "signal_state",
-            Self::ZombieTimerCount(_) => "zombie_timer_count",
-            Self::FilesystemResult(_) => "filesystem_result",
-            Self::PermissionDecision(_) => "permission_decision",
-            Self::PersistenceState(_) => "persistence_state",
-            Self::PersistenceFlushed(_) => "persistence_flushed",
-            Self::Rejected(_) => "rejected",
-            Self::ExtResult(_) => "ext_result",
-            Self::GuestKernelResult(_) => "guest_kernel_result",
-            Self::PtyResized(_) => "pty_resized",
-            Self::PackageLinked(_) => "package_linked",
-            Self::ProvidedCommands(_) => "provided_commands_response",
-        }
-    }
-}
-
-impl SidecarResponsePayload {
-    fn ownership_requirement(&self) -> OwnershipRequirement {
-        OwnershipRequirement::Vm
-    }
-
-    fn kind_name(&self) -> &'static str {
-        match self {
-            Self::HostCallbackResult(_) => "host_callback_result",
-            Self::JsBridgeResult(_) => "js_bridge_result",
-            Self::ExtResult(_) => "ext_result",
-        }
-    }
-}
-
-impl EventPayload {
-    fn ownership_requirement(&self) -> OwnershipRequirement {
-        match self {
-            Self::Structured(_) => OwnershipRequirement::SessionOrVm,
-            Self::VmLifecycle(_) | Self::ProcessOutput(_) | Self::ProcessExited(_) => {
-                OwnershipRequirement::Vm
-            }
-            Self::Ext(_) => OwnershipRequirement::Any,
-        }
-    }
-}
-
-pub fn validate_frame(frame: &ProtocolFrame) -> Result<(), ProtocolCodecError> {
-    match frame {
-        ProtocolFrame::Request(request) => validate_request(request),
-        ProtocolFrame::Response(response) => validate_response(response),
-        ProtocolFrame::Event(event) => validate_event(event),
-        ProtocolFrame::SidecarRequest(request) => validate_sidecar_request(request),
-        ProtocolFrame::SidecarResponse(response) => validate_sidecar_response(response),
-    }
-}
-
-fn validate_request(request: &RequestFrame) -> Result<(), ProtocolCodecError> {
-    validate_schema(&request.schema)?;
-    validate_request_id_direction(request.request_id, RequestDirection::Host)?;
-
-    validate_ownership(&request.ownership)?;
-    validate_requirement(request.payload.ownership_requirement(), &request.ownership)?;
-    if let RequestPayload::Authenticate(authenticate) = &request.payload {
-        if authenticate.auth_token.is_empty() {
-            return Err(ProtocolCodecError::EmptyAuthToken);
-        }
-    }
-
-    Ok(())
-}
-
-fn validate_response(response: &ResponseFrame) -> Result<(), ProtocolCodecError> {
-    validate_schema(&response.schema)?;
-    validate_request_id_direction(response.request_id, RequestDirection::Host)?;
-
-    validate_ownership(&response.ownership)?;
-    validate_requirement(
-        response.payload.ownership_requirement(),
-        &response.ownership,
-    )?;
-    Ok(())
-}
-
-fn validate_sidecar_request(request: &SidecarRequestFrame) -> Result<(), ProtocolCodecError> {
-    validate_schema(&request.schema)?;
-    validate_request_id_direction(request.request_id, RequestDirection::Sidecar)?;
-    validate_ownership(&request.ownership)?;
-    validate_requirement(request.payload.ownership_requirement(), &request.ownership)?;
-    Ok(())
-}
-
-fn validate_sidecar_response(response: &SidecarResponseFrame) -> Result<(), ProtocolCodecError> {
-    validate_schema(&response.schema)?;
-    validate_request_id_direction(response.request_id, RequestDirection::Sidecar)?;
-    validate_ownership(&response.ownership)?;
-    validate_requirement(
-        response.payload.ownership_requirement(),
-        &response.ownership,
-    )?;
-    Ok(())
-}
-
-fn validate_event(event: &EventFrame) -> Result<(), ProtocolCodecError> {
-    validate_schema(&event.schema)?;
-    validate_ownership(&event.ownership)?;
-    validate_requirement(event.payload.ownership_requirement(), &event.ownership)?;
-    Ok(())
-}
-
-fn validate_schema(schema: &ProtocolSchema) -> Result<(), ProtocolCodecError> {
-    if schema.name != PROTOCOL_NAME || schema.version != PROTOCOL_VERSION {
-        return Err(ProtocolCodecError::UnsupportedSchema {
-            name: schema.name.clone(),
-            version: schema.version,
-        });
-    }
-
-    Ok(())
-}
-
-fn validate_ownership(ownership: &OwnershipScope) -> Result<(), ProtocolCodecError> {
-    match ownership {
-        OwnershipScope::ConnectionOwnership(inner) => {
-            validate_non_empty("connection_id", &inner.connection_id)
-        }
-        OwnershipScope::SessionOwnership(inner) => {
-            validate_non_empty("connection_id", &inner.connection_id)?;
-            validate_non_empty("session_id", &inner.session_id)
-        }
-        OwnershipScope::VmOwnership(inner) => {
-            validate_non_empty("connection_id", &inner.connection_id)?;
-            validate_non_empty("session_id", &inner.session_id)?;
-            validate_non_empty("vm_id", &inner.vm_id)
-        }
-    }
-}
-
-fn validate_non_empty(field: &'static str, value: &str) -> Result<(), ProtocolCodecError> {
-    if value.is_empty() {
-        return Err(ProtocolCodecError::EmptyOwnershipField { field });
-    }
-
-    Ok(())
-}
-
-fn validate_request_id_direction(
-    request_id: RequestId,
-    direction: RequestDirection,
-) -> Result<(), ProtocolCodecError> {
-    if request_id == 0 {
-        return Err(ProtocolCodecError::InvalidRequestId);
-    }
-
-    let matches_direction = match direction {
-        RequestDirection::Host => request_id > 0,
-        RequestDirection::Sidecar => request_id < 0,
-    };
-    if matches_direction {
-        Ok(())
-    } else {
-        Err(ProtocolCodecError::InvalidRequestDirection {
-            request_id,
-            expected: direction,
-        })
-    }
-}
-
-fn validate_requirement(
-    required: OwnershipRequirement,
-    ownership: &OwnershipScope,
-) -> Result<(), ProtocolCodecError> {
-    let actual = match ownership {
-        OwnershipScope::ConnectionOwnership(..) => OwnershipRequirement::Connection,
-        OwnershipScope::SessionOwnership(..) => OwnershipRequirement::Session,
-        OwnershipScope::VmOwnership(..) => OwnershipRequirement::Vm,
-    };
-
-    let valid = match required {
-        OwnershipRequirement::Any => true,
-        OwnershipRequirement::Connection => {
-            matches!(ownership, OwnershipScope::ConnectionOwnership(..))
-        }
-        OwnershipRequirement::Session => matches!(ownership, OwnershipScope::SessionOwnership(..)),
-        OwnershipRequirement::Vm => matches!(ownership, OwnershipScope::VmOwnership(..)),
-        OwnershipRequirement::SessionOrVm => {
-            matches!(
-                ownership,
-                OwnershipScope::SessionOwnership(..) | OwnershipScope::VmOwnership(..)
-            )
-        }
-    };
-
-    if valid {
-        Ok(())
-    } else {
-        Err(ProtocolCodecError::InvalidOwnershipScope { required, actual })
-    }
-}
-
-// ---------------------------------------------------------------------------
-// JavaScript sync-RPC request types (deserialized from guest Node.js processes)
-// ---------------------------------------------------------------------------
-
-#[derive(Debug, Deserialize, Default)]
-pub struct JavascriptChildProcessSpawnOptions {
-    #[serde(default)]
-    pub cwd: Option<String>,
-    #[serde(default)]
-    pub env: BTreeMap<String, String>,
-    #[serde(rename = "internalBootstrapEnv", default)]
-    pub internal_bootstrap_env: BTreeMap<String, String>,
-    #[serde(default)]
-    pub input: Option<Value>,
-    #[serde(default)]
-    pub shell: bool,
-    #[serde(default)]
-    pub detached: bool,
-    #[serde(default)]
-    pub stdio: Vec<String>,
-    #[serde(default)]
-    pub timeout: Option<u64>,
-    #[serde(rename = "killSignal", default)]
-    pub kill_signal: Option<String>,
-}
-
-#[derive(Debug, Deserialize)]
-pub struct JavascriptChildProcessSpawnRequest {
-    pub command: String,
-    #[serde(default)]
-    pub args: Vec<String>,
-    #[serde(default)]
-    pub options: JavascriptChildProcessSpawnOptions,
-}
-
-#[derive(Debug, Deserialize)]
-pub struct JavascriptNetConnectRequest {
-    #[serde(default)]
-    pub host: Option<String>,
-    #[serde(default)]
-    pub port: Option<u16>,
-    #[serde(default)]
-    pub path: Option<String>,
-    #[serde(rename = "localAddress", default)]
-    pub local_address: Option<String>,
-    #[serde(rename = "localPort", default)]
-    pub local_port: Option<u16>,
-    #[serde(rename = "localReservation", default)]
-    pub local_reservation: Option<String>,
-}
-
-#[derive(Debug, Deserialize)]
-pub struct JavascriptNetReserveTcpPortRequest {
-    #[serde(default)]
-    pub host: Option<String>,
-    #[serde(default)]
-    pub port: Option<u16>,
-}
-
-#[derive(Debug, Deserialize)]
-pub struct JavascriptNetListenRequest {
-    #[serde(default)]
-    pub host: Option<String>,
-    #[serde(default)]
-    pub port: Option<u16>,
-    #[serde(default)]
-    pub path: Option<String>,
-    #[serde(default)]
-    pub backlog: Option<u32>,
-    #[serde(rename = "localReservation", default)]
-    pub local_reservation: Option<String>,
-}
-
-#[derive(Debug, Deserialize)]
-pub struct JavascriptDgramCreateSocketRequest {
-    #[serde(rename = "type")]
-    pub socket_type: String,
-}
-
-#[derive(Debug, Deserialize)]
-pub struct JavascriptDgramBindRequest {
-    #[serde(default)]
-    pub address: Option<String>,
-    #[serde(default)]
-    pub port: u16,
-}
-
-#[derive(Debug, Deserialize)]
-pub struct JavascriptDgramSendRequest {
-    #[serde(default)]
-    pub address: Option<String>,
-    pub port: u16,
-}
-
-#[derive(Debug, Deserialize)]
-pub struct JavascriptDnsLookupRequest {
-    pub hostname: String,
-    #[serde(default)]
-    pub family: Option<u8>,
-}
-
-#[derive(Debug, Deserialize)]
-pub struct JavascriptDnsResolveRequest {
-    pub hostname: String,
-    #[serde(default)]
-    pub rrtype: Option<String>,
-}
diff --git a/crates/sidecar-protocol/src/wire.rs b/crates/sidecar-protocol/src/wire.rs
deleted file mode 100644
index 6ad73cf8b..000000000
--- a/crates/sidecar-protocol/src/wire.rs
+++ /dev/null
@@ -1,1269 +0,0 @@
-//! Generated Secure Exec sidecar wire protocol surface.
-//!
-//! This module is the public generated protocol entrypoint. The hand-written
-//! `protocol` module remains an internal compatibility layer while callers move
-//! to generated wire frames.
-
-use std::error::Error;
-use std::fmt;
-
-pub use crate::generated_protocol::v1::*;
-
-// The generated BARE types intentionally omit `Copy`/`Default`; restore them on the
-// crate-local generated types so the wider sidecar keeps the ergonomics it relies on
-// after the hand-written protocol types were replaced with these aliases. These live in
-// `wire` (not `protocol`) because `protocol.rs` is `#[path]`-included by integration
-// tests, where the generated types would be foreign and the impls would break the orphan rule.
-impl Copy for crate::generated_protocol::v1::GuestFilesystemOperation {}
-impl Copy for crate::generated_protocol::v1::RootFilesystemMode {}
-impl Copy for crate::generated_protocol::v1::WasmPermissionTier {}
-
-// `derive(Default)` cannot be added: these are foreign generated types, so the
-// `Default` impl must be written by hand here (orphan rule).
-#[allow(clippy::derivable_impls)]
-impl Default for crate::generated_protocol::v1::RootFilesystemEntryKind {
-    fn default() -> Self {
-        Self::File
-    }
-}
-
-impl Default for crate::generated_protocol::v1::RootFilesystemEntry {
-    fn default() -> Self {
-        Self {
-            path: String::new(),
-            kind: crate::generated_protocol::v1::RootFilesystemEntryKind::File,
-            mode: None,
-            uid: None,
-            gid: None,
-            content: None,
-            encoding: None,
-            target: None,
-            executable: false,
-        }
-    }
-}
-
-#[allow(clippy::derivable_impls)]
-impl Default for crate::generated_protocol::v1::RootFilesystemMode {
-    fn default() -> Self {
-        Self::Ephemeral
-    }
-}
-
-#[allow(clippy::derivable_impls)]
-impl Default for crate::generated_protocol::v1::RootFilesystemDescriptor {
-    fn default() -> Self {
-        Self {
-            mode: crate::generated_protocol::v1::RootFilesystemMode::default(),
-            disable_default_base_layer: false,
-            lowers: Vec::new(),
-            bootstrap_entries: Vec::new(),
-        }
-    }
-}
-
-impl crate::generated_protocol::v1::PermissionsPolicy {
-    pub fn deny_all() -> Self {
-        use crate::generated_protocol::v1::{
-            FsPermissionScope, PatternPermissionScope, PermissionMode,
-        };
-        Self {
-            fs: Some(FsPermissionScope::PermissionMode(PermissionMode::Deny)),
-            network: Some(PatternPermissionScope::PermissionMode(PermissionMode::Deny)),
-            child_process: Some(PatternPermissionScope::PermissionMode(PermissionMode::Deny)),
-            process: Some(PatternPermissionScope::PermissionMode(PermissionMode::Deny)),
-            env: Some(PatternPermissionScope::PermissionMode(PermissionMode::Deny)),
-            binding: Some(PatternPermissionScope::PermissionMode(PermissionMode::Deny)),
-        }
-    }
-
-    pub fn allow_all() -> Self {
-        use crate::generated_protocol::v1::{
-            FsPermissionScope, PatternPermissionScope, PermissionMode,
-        };
-        Self {
-            fs: Some(FsPermissionScope::PermissionMode(PermissionMode::Allow)),
-            network: Some(PatternPermissionScope::PermissionMode(
-                PermissionMode::Allow,
-            )),
-            child_process: Some(PatternPermissionScope::PermissionMode(
-                PermissionMode::Allow,
-            )),
-            process: Some(PatternPermissionScope::PermissionMode(
-                PermissionMode::Allow,
-            )),
-            env: Some(PatternPermissionScope::PermissionMode(
-                PermissionMode::Allow,
-            )),
-            binding: Some(PatternPermissionScope::PermissionMode(
-                PermissionMode::Allow,
-            )),
-        }
-    }
-}
-
-impl Default for crate::generated_protocol::v1::PermissionsPolicy {
-    fn default() -> Self {
-        Self::deny_all()
-    }
-}
-
-impl crate::generated_protocol::v1::CreateVmRequest {
-    pub fn json_config(
-        runtime: crate::generated_protocol::v1::GuestRuntimeKind,
-        config: secure_exec_vm_config::CreateVmConfig,
-    ) -> Self {
-        Self {
-            runtime,
-            config: serde_json::to_string(&config).expect("serialize create VM config"),
-        }
-    }
-
-    pub fn legacy_test_config(
-        runtime: crate::generated_protocol::v1::GuestRuntimeKind,
-        metadata: std::collections::HashMap<String, String>,
-        root_filesystem: crate::generated_protocol::v1::RootFilesystemDescriptor,
-        permissions: Option<crate::generated_protocol::v1::PermissionsPolicy>,
-    ) -> Self {
-        let metadata: std::collections::BTreeMap<_, _> = metadata.into_iter().collect();
-        let mut config = secure_exec_vm_config::CreateVmConfig {
-            cwd: metadata.get("cwd").cloned(),
-            env: legacy_env_config(&metadata),
-            root_filesystem: legacy_root_filesystem_config(root_filesystem),
-            permissions: permissions.map(permissions_policy_config_from_wire),
-            limits: legacy_limits_config(&metadata),
-            dns: legacy_dns_config(&metadata),
-            native_root: legacy_native_root_config(&metadata),
-            listen: legacy_listen_config(&metadata),
-            ..Default::default()
-        };
-        config.loopback_exempt_ports = legacy_loopback_exempt_ports(&config.env);
-        Self::json_config(runtime, config)
-    }
-}
-
-fn legacy_env_config(
-    metadata: &std::collections::BTreeMap<String, String>,
-) -> std::collections::BTreeMap<String, String> {
-    metadata
-        .iter()
-        .filter_map(|(key, value)| {
-            key.strip_prefix("env.")
-                .map(|name| (name.to_string(), value.clone()))
-        })
-        .collect()
-}
-
-fn legacy_root_filesystem_config(
-    descriptor: crate::generated_protocol::v1::RootFilesystemDescriptor,
-) -> secure_exec_vm_config::RootFilesystemConfig {
-    secure_exec_vm_config::RootFilesystemConfig {
-        mode: match descriptor.mode {
-            crate::generated_protocol::v1::RootFilesystemMode::Ephemeral => {
-                secure_exec_vm_config::RootFilesystemMode::Ephemeral
-            }
-            crate::generated_protocol::v1::RootFilesystemMode::ReadOnly => {
-                secure_exec_vm_config::RootFilesystemMode::ReadOnly
-            }
-        },
-        disable_default_base_layer: descriptor.disable_default_base_layer,
-        lowers: descriptor
-            .lowers
-            .into_iter()
-            .map(legacy_root_lower_config)
-            .collect(),
-        bootstrap_entries: descriptor
-            .bootstrap_entries
-            .into_iter()
-            .map(legacy_root_entry_config)
-            .collect(),
-    }
-}
-
-fn legacy_root_lower_config(
-    lower: crate::generated_protocol::v1::RootFilesystemLowerDescriptor,
-) -> secure_exec_vm_config::RootFilesystemLowerDescriptor {
-    match lower {
-        crate::generated_protocol::v1::RootFilesystemLowerDescriptor::SnapshotRootFilesystemLower(
-            snapshot,
-        ) => secure_exec_vm_config::RootFilesystemLowerDescriptor::Snapshot {
-            entries: snapshot
-                .entries
-                .into_iter()
-                .map(legacy_root_entry_config)
-                .collect(),
-        },
-        crate::generated_protocol::v1::RootFilesystemLowerDescriptor::BundledBaseFilesystemLower => {
-            secure_exec_vm_config::RootFilesystemLowerDescriptor::BundledBaseFilesystem
-        }
-    }
-}
-
-fn legacy_root_entry_config(
-    entry: crate::generated_protocol::v1::RootFilesystemEntry,
-) -> secure_exec_vm_config::RootFilesystemEntry {
-    secure_exec_vm_config::RootFilesystemEntry {
-        path: entry.path,
-        kind: match entry.kind {
-            crate::generated_protocol::v1::RootFilesystemEntryKind::File => {
-                secure_exec_vm_config::RootFilesystemEntryKind::File
-            }
-            crate::generated_protocol::v1::RootFilesystemEntryKind::Directory => {
-                secure_exec_vm_config::RootFilesystemEntryKind::Directory
-            }
-            crate::generated_protocol::v1::RootFilesystemEntryKind::Symlink => {
-                secure_exec_vm_config::RootFilesystemEntryKind::Symlink
-            }
-        },
-        mode: entry.mode,
-        uid: entry.uid,
-        gid: entry.gid,
-        content: entry.content,
-        encoding: entry.encoding.map(|encoding| match encoding {
-            crate::generated_protocol::v1::RootFilesystemEntryEncoding::Utf8 => {
-                secure_exec_vm_config::RootFilesystemEntryEncoding::Utf8
-            }
-            crate::generated_protocol::v1::RootFilesystemEntryEncoding::Base64 => {
-                secure_exec_vm_config::RootFilesystemEntryEncoding::Base64
-            }
-        }),
-        target: entry.target,
-        executable: entry.executable,
-    }
-}
-
-pub fn permissions_policy_config_from_wire(
-    permissions: crate::generated_protocol::v1::PermissionsPolicy,
-) -> secure_exec_vm_config::PermissionsPolicy {
-    secure_exec_vm_config::PermissionsPolicy {
-        fs: permissions.fs.map(legacy_fs_permission_scope_config),
-        network: permissions
-            .network
-            .map(legacy_pattern_permission_scope_config),
-        child_process: permissions
-            .child_process
-            .map(legacy_pattern_permission_scope_config),
-        process: permissions
-            .process
-            .map(legacy_pattern_permission_scope_config),
-        env: permissions.env.map(legacy_pattern_permission_scope_config),
-        binding: permissions
-            .binding
-            .map(legacy_pattern_permission_scope_config),
-    }
-}
-
-fn legacy_permission_mode_config(
-    mode: crate::generated_protocol::v1::PermissionMode,
-) -> secure_exec_vm_config::PermissionMode {
-    match mode {
-        crate::generated_protocol::v1::PermissionMode::Allow => {
-            secure_exec_vm_config::PermissionMode::Allow
-        }
-        crate::generated_protocol::v1::PermissionMode::Ask => {
-            secure_exec_vm_config::PermissionMode::Ask
-        }
-        crate::generated_protocol::v1::PermissionMode::Deny => {
-            secure_exec_vm_config::PermissionMode::Deny
-        }
-    }
-}
-
-fn legacy_fs_permission_scope_config(
-    scope: crate::generated_protocol::v1::FsPermissionScope,
-) -> secure_exec_vm_config::FsPermissionScope {
-    match scope {
-        crate::generated_protocol::v1::FsPermissionScope::PermissionMode(mode) => {
-            secure_exec_vm_config::FsPermissionScope::Mode(legacy_permission_mode_config(mode))
-        }
-        crate::generated_protocol::v1::FsPermissionScope::FsPermissionRuleSet(rules) => {
-            secure_exec_vm_config::FsPermissionScope::Rules(
-                secure_exec_vm_config::FsPermissionRuleSet {
-                    default: rules.default.map(legacy_permission_mode_config),
-                    rules: rules
-                        .rules
-                        .into_iter()
-                        .map(|rule| secure_exec_vm_config::FsPermissionRule {
-                            mode: legacy_permission_mode_config(rule.mode),
-                            operations: rule.operations,
-                            paths: rule.paths,
-                        })
-                        .collect(),
-                },
-            )
-        }
-    }
-}
-
-fn legacy_pattern_permission_scope_config(
-    scope: crate::generated_protocol::v1::PatternPermissionScope,
-) -> secure_exec_vm_config::PatternPermissionScope {
-    match scope {
-        crate::generated_protocol::v1::PatternPermissionScope::PermissionMode(mode) => {
-            secure_exec_vm_config::PatternPermissionScope::Mode(legacy_permission_mode_config(mode))
-        }
-        crate::generated_protocol::v1::PatternPermissionScope::PatternPermissionRuleSet(rules) => {
-            secure_exec_vm_config::PatternPermissionScope::Rules(
-                secure_exec_vm_config::PatternPermissionRuleSet {
-                    default: rules.default.map(legacy_permission_mode_config),
-                    rules: rules
-                        .rules
-                        .into_iter()
-                        .map(|rule| secure_exec_vm_config::PatternPermissionRule {
-                            mode: legacy_permission_mode_config(rule.mode),
-                            operations: rule.operations,
-                            patterns: rule.patterns,
-                        })
-                        .collect(),
-                },
-            )
-        }
-    }
-}
-
-fn legacy_dns_config(
-    metadata: &std::collections::BTreeMap<String, String>,
-) -> Option<secure_exec_vm_config::VmDnsConfig> {
-    let mut dns = secure_exec_vm_config::VmDnsConfig::default();
-    if let Some(value) = metadata.get("network.dns.servers") {
-        dns.name_servers = value
-            .split(',')
-            .map(str::trim)
-            .filter(|entry| !entry.is_empty())
-            .map(str::to_string)
-            .collect();
-    }
-    for (key, value) in metadata {
-        let Some(hostname) = key.strip_prefix("network.dns.override.") else {
-            continue;
-        };
-        dns.overrides.insert(
-            hostname.to_string(),
-            value
-                .split(',')
-                .map(str::trim)
-                .filter(|entry| !entry.is_empty())
-                .map(str::to_string)
-                .collect(),
-        );
-    }
-    if dns.name_servers.is_empty() && dns.overrides.is_empty() {
-        None
-    } else {
-        Some(dns)
-    }
-}
-
-fn legacy_native_root_config(
-    metadata: &std::collections::BTreeMap<String, String>,
-) -> Option<secure_exec_vm_config::NativeRootFilesystemConfig> {
-    let id = metadata.get("rootFilesystem.nativePlugin.id")?;
-    let config = metadata
-        .get("rootFilesystem.nativePlugin.config")
-        .map(|value| serde_json::from_str(value).expect("parse native root plugin config"))
-        .unwrap_or_else(|| serde_json::Value::Object(serde_json::Map::new()));
-    let read_only = metadata
-        .get("rootFilesystem.nativePlugin.readOnly")
-        .map(|value| value.parse::<bool>().expect("parse native root readOnly"))
-        .unwrap_or(false);
-    Some(secure_exec_vm_config::NativeRootFilesystemConfig {
-        plugin: secure_exec_vm_config::MountPluginDescriptor {
-            id: id.clone(),
-            config,
-        },
-        read_only,
-    })
-}
-
-fn legacy_listen_config(
-    metadata: &std::collections::BTreeMap<String, String>,
-) -> Option<secure_exec_vm_config::VmListenPolicyConfig> {
-    let listen = secure_exec_vm_config::VmListenPolicyConfig {
-        port_min: metadata
-            .get("network.listen.port_min")
-            .map(|value| value.parse::<u16>().expect("parse network.listen.port_min")),
-        port_max: metadata
-            .get("network.listen.port_max")
-            .map(|value| value.parse::<u16>().expect("parse network.listen.port_max")),
-        allow_privileged: metadata
-            .get("network.listen.allow_privileged")
-            .map(|value| {
-                value
-                    .parse::<bool>()
-                    .expect("parse network.listen.allow_privileged")
-            }),
-    };
-    if listen.port_min.is_none() && listen.port_max.is_none() && listen.allow_privileged.is_none() {
-        None
-    } else {
-        Some(listen)
-    }
-}
-
-fn legacy_loopback_exempt_ports(env: &std::collections::BTreeMap<String, String>) -> Vec<u16> {
-    let Some(value) = env.get("AGENTOS_LOOPBACK_EXEMPT_PORTS") else {
-        return Vec::new();
-    };
-    serde_json::from_str::<Vec<serde_json::Value>>(value)
-        .unwrap_or_default()
-        .into_iter()
-        .filter_map(|value| match value {
-            serde_json::Value::Number(number) => number.as_u64(),
-            serde_json::Value::String(value) => value.parse::<u64>().ok(),
-            _ => None,
-        })
-        .filter_map(|port| u16::try_from(port).ok())
-        .collect()
-}
-
-fn legacy_limits_config(
-    metadata: &std::collections::BTreeMap<String, String>,
-) -> Option<secure_exec_vm_config::VmLimitsConfig> {
-    let resources = secure_exec_vm_config::ResourceLimitsConfig {
-        cpu_count: legacy_u64(metadata, "resource.cpu_count"),
-        max_processes: legacy_u64(metadata, "resource.max_processes"),
-        max_open_fds: legacy_u64(metadata, "resource.max_open_fds"),
-        max_pipes: legacy_u64(metadata, "resource.max_pipes"),
-        max_ptys: legacy_u64(metadata, "resource.max_ptys"),
-        max_sockets: legacy_u64(metadata, "resource.max_sockets"),
-        max_connections: legacy_u64(metadata, "resource.max_connections"),
-        max_socket_buffered_bytes: legacy_u64(metadata, "resource.max_socket_buffered_bytes"),
-        max_socket_datagram_queue_len: legacy_u64(
-            metadata,
-            "resource.max_socket_datagram_queue_len",
-        ),
-        max_filesystem_bytes: legacy_u64(metadata, "resource.max_filesystem_bytes"),
-        max_inode_count: legacy_u64(metadata, "resource.max_inode_count"),
-        max_blocking_read_ms: legacy_u64(metadata, "resource.max_blocking_read_ms"),
-        max_pread_bytes: legacy_u64(metadata, "resource.max_pread_bytes"),
-        max_fd_write_bytes: legacy_u64(metadata, "resource.max_fd_write_bytes"),
-        max_process_argv_bytes: legacy_u64(metadata, "resource.max_process_argv_bytes"),
-        max_process_env_bytes: legacy_u64(metadata, "resource.max_process_env_bytes"),
-        max_readdir_entries: legacy_u64(metadata, "resource.max_readdir_entries"),
-        max_recursive_fs_depth: legacy_u64(metadata, "resource.max_recursive_fs_depth"),
-        max_recursive_fs_entries: legacy_u64(metadata, "resource.max_recursive_fs_entries"),
-        max_wasm_fuel: legacy_u64(metadata, "resource.max_wasm_fuel"),
-        max_wasm_memory_bytes: legacy_u64(metadata, "resource.max_wasm_memory_bytes"),
-        max_wasm_stack_bytes: legacy_u64(metadata, "resource.max_wasm_stack_bytes"),
-    };
-    let http = secure_exec_vm_config::HttpLimitsConfig {
-        max_fetch_response_bytes: legacy_u64(metadata, "limits.http.max_fetch_response_bytes"),
-    };
-    let tools = secure_exec_vm_config::ToolLimitsConfig {
-        default_tool_timeout_ms: legacy_u64(metadata, "limits.tools.default_tool_timeout_ms"),
-        max_tool_timeout_ms: legacy_u64(metadata, "limits.tools.max_tool_timeout_ms"),
-        max_registered_toolkits: legacy_u64(metadata, "limits.tools.max_registered_toolkits"),
-        max_registered_tools_per_vm: legacy_u64(
-            metadata,
-            "limits.tools.max_registered_tools_per_vm",
-        ),
-        max_tools_per_toolkit: legacy_u64(metadata, "limits.tools.max_tools_per_toolkit"),
-        max_tool_schema_bytes: legacy_u64(metadata, "limits.tools.max_tool_schema_bytes"),
-        max_tool_examples_per_tool: legacy_u64(metadata, "limits.tools.max_tool_examples_per_tool"),
-        max_tool_example_input_bytes: legacy_u64(
-            metadata,
-            "limits.tools.max_tool_example_input_bytes",
-        ),
-    };
-    let plugins = secure_exec_vm_config::PluginLimitsConfig {
-        max_persisted_manifest_bytes: legacy_u64(
-            metadata,
-            "limits.plugins.max_persisted_manifest_bytes",
-        ),
-        max_persisted_manifest_file_bytes: legacy_u64(
-            metadata,
-            "limits.plugins.max_persisted_manifest_file_bytes",
-        ),
-    };
-    let acp = secure_exec_vm_config::AcpLimitsConfig {
-        max_read_line_bytes: legacy_u64(metadata, "limits.acp.max_read_line_bytes"),
-        stdout_buffer_byte_limit: legacy_u64(metadata, "limits.acp.stdout_buffer_byte_limit"),
-    };
-    let js_runtime = secure_exec_vm_config::JsRuntimeLimitsConfig {
-        v8_heap_limit_mb: legacy_u64(metadata, "limits.js_runtime.v8_heap_limit_mb"),
-        sync_rpc_wait_timeout_ms: legacy_u64(
-            metadata,
-            "limits.js_runtime.sync_rpc_wait_timeout_ms",
-        ),
-        cpu_time_limit_ms: legacy_u64(metadata, "limits.js_runtime.cpu_time_limit_ms"),
-        wall_clock_limit_ms: legacy_u64(metadata, "limits.js_runtime.wall_clock_limit_ms"),
-        import_cache_materialize_timeout_ms: legacy_u64(
-            metadata,
-            "limits.js_runtime.import_cache_materialize_timeout_ms",
-        ),
-        captured_output_limit_bytes: legacy_u64(
-            metadata,
-            "limits.js_runtime.captured_output_limit_bytes",
-        ),
-        stdin_buffer_limit_bytes: legacy_u64(
-            metadata,
-            "limits.js_runtime.stdin_buffer_limit_bytes",
-        ),
-        event_payload_limit_bytes: legacy_u64(
-            metadata,
-            "limits.js_runtime.event_payload_limit_bytes",
-        ),
-        v8_ipc_max_frame_bytes: legacy_u64(metadata, "limits.js_runtime.v8_ipc_max_frame_bytes"),
-    };
-    let python = secure_exec_vm_config::PythonLimitsConfig {
-        output_buffer_max_bytes: legacy_u64(metadata, "limits.python.output_buffer_max_bytes"),
-        execution_timeout_ms: legacy_u64(metadata, "limits.python.execution_timeout_ms"),
-        max_old_space_mb: legacy_u64(metadata, "limits.python.max_old_space_mb"),
-        vfs_rpc_timeout_ms: legacy_u64(metadata, "limits.python.vfs_rpc_timeout_ms"),
-    };
-    let wasm = secure_exec_vm_config::WasmLimitsConfig {
-        max_module_file_bytes: legacy_u64(metadata, "limits.wasm.max_module_file_bytes"),
-        captured_output_limit_bytes: legacy_u64(
-            metadata,
-            "limits.wasm.captured_output_limit_bytes",
-        ),
-        sync_read_limit_bytes: legacy_u64(metadata, "limits.wasm.sync_read_limit_bytes"),
-        prewarm_timeout_ms: legacy_u64(metadata, "limits.wasm.prewarm_timeout_ms"),
-        runner_heap_limit_mb: legacy_u64(metadata, "limits.wasm.runner_heap_limit_mb"),
-    };
-
-    let config = secure_exec_vm_config::VmLimitsConfig {
-        resources: legacy_has_resource_limits(&resources).then_some(resources),
-        http: http.max_fetch_response_bytes.is_some().then_some(http),
-        tools: legacy_has_tool_limits(&tools).then_some(tools),
-        plugins: legacy_has_plugin_limits(&plugins).then_some(plugins),
-        acp: legacy_has_acp_limits(&acp).then_some(acp),
-        js_runtime: legacy_has_js_runtime_limits(&js_runtime).then_some(js_runtime),
-        python: legacy_has_python_limits(&python).then_some(python),
-        wasm: legacy_has_wasm_limits(&wasm).then_some(wasm),
-    };
-
-    if config.resources.is_none()
-        && config.http.is_none()
-        && config.tools.is_none()
-        && config.plugins.is_none()
-        && config.acp.is_none()
-        && config.js_runtime.is_none()
-        && config.python.is_none()
-        && config.wasm.is_none()
-    {
-        None
-    } else {
-        Some(config)
-    }
-}
-
-fn legacy_u64(metadata: &std::collections::BTreeMap<String, String>, key: &str) -> Option<u64> {
-    metadata.get(key).map(|value| {
-        value
-            .parse::<u64>()
-            .unwrap_or_else(|error| panic!("parse {key}: {error}"))
-    })
-}
-
-fn legacy_has_resource_limits(config: &secure_exec_vm_config::ResourceLimitsConfig) -> bool {
-    config.cpu_count.is_some()
-        || config.max_processes.is_some()
-        || config.max_open_fds.is_some()
-        || config.max_pipes.is_some()
-        || config.max_ptys.is_some()
-        || config.max_sockets.is_some()
-        || config.max_connections.is_some()
-        || config.max_socket_buffered_bytes.is_some()
-        || config.max_socket_datagram_queue_len.is_some()
-        || config.max_filesystem_bytes.is_some()
-        || config.max_inode_count.is_some()
-        || config.max_blocking_read_ms.is_some()
-        || config.max_pread_bytes.is_some()
-        || config.max_fd_write_bytes.is_some()
-        || config.max_process_argv_bytes.is_some()
-        || config.max_process_env_bytes.is_some()
-        || config.max_readdir_entries.is_some()
-        || config.max_wasm_fuel.is_some()
-        || config.max_wasm_memory_bytes.is_some()
-        || config.max_wasm_stack_bytes.is_some()
-}
-
-fn legacy_has_tool_limits(config: &secure_exec_vm_config::ToolLimitsConfig) -> bool {
-    config.default_tool_timeout_ms.is_some()
-        || config.max_tool_timeout_ms.is_some()
-        || config.max_registered_toolkits.is_some()
-        || config.max_registered_tools_per_vm.is_some()
-        || config.max_tools_per_toolkit.is_some()
-        || config.max_tool_schema_bytes.is_some()
-        || config.max_tool_examples_per_tool.is_some()
-        || config.max_tool_example_input_bytes.is_some()
-}
-
-fn legacy_has_plugin_limits(config: &secure_exec_vm_config::PluginLimitsConfig) -> bool {
-    config.max_persisted_manifest_bytes.is_some()
-        || config.max_persisted_manifest_file_bytes.is_some()
-}
-
-fn legacy_has_acp_limits(config: &secure_exec_vm_config::AcpLimitsConfig) -> bool {
-    config.max_read_line_bytes.is_some() || config.stdout_buffer_byte_limit.is_some()
-}
-
-fn legacy_has_js_runtime_limits(config: &secure_exec_vm_config::JsRuntimeLimitsConfig) -> bool {
-    config.v8_heap_limit_mb.is_some()
-        || config.sync_rpc_wait_timeout_ms.is_some()
-        || config.cpu_time_limit_ms.is_some()
-        || config.wall_clock_limit_ms.is_some()
-        || config.import_cache_materialize_timeout_ms.is_some()
-        || config.captured_output_limit_bytes.is_some()
-        || config.stdin_buffer_limit_bytes.is_some()
-        || config.event_payload_limit_bytes.is_some()
-        || config.v8_ipc_max_frame_bytes.is_some()
-}
-
-fn legacy_has_python_limits(config: &secure_exec_vm_config::PythonLimitsConfig) -> bool {
-    config.output_buffer_max_bytes.is_some()
-        || config.execution_timeout_ms.is_some()
-        || config.max_old_space_mb.is_some()
-        || config.vfs_rpc_timeout_ms.is_some()
-}
-
-fn legacy_has_wasm_limits(config: &secure_exec_vm_config::WasmLimitsConfig) -> bool {
-    config.max_module_file_bytes.is_some()
-        || config.captured_output_limit_bytes.is_some()
-        || config.sync_read_limit_bytes.is_some()
-        || config.prewarm_timeout_ms.is_some()
-        || config.runner_heap_limit_mb.is_some()
-}
-
-// Ownership-scope constructor ergonomics. The generated BARE union exposes only the
-// tuple-wrapped variants (`ConnectionOwnership`/`SessionOwnership`/`VmOwnership`); restore
-// the hand-written `connection`/`session`/`vm` helpers the sidecar relies on. These live in
-// `wire` (not `protocol`) for the same orphan-rule reason as the impls above: `protocol.rs`
-// is `#[path]`-included by integration tests where the generated type is foreign.
-impl crate::generated_protocol::v1::OwnershipScope {
-    pub fn connection(connection_id: impl Into<String>) -> Self {
-        Self::ConnectionOwnership(crate::generated_protocol::v1::ConnectionOwnership {
-            connection_id: connection_id.into(),
-        })
-    }
-
-    pub fn session(connection_id: impl Into<String>, session_id: impl Into<String>) -> Self {
-        Self::SessionOwnership(crate::generated_protocol::v1::SessionOwnership {
-            connection_id: connection_id.into(),
-            session_id: session_id.into(),
-        })
-    }
-
-    pub fn vm(
-        connection_id: impl Into<String>,
-        session_id: impl Into<String>,
-        vm_id: impl Into<String>,
-    ) -> Self {
-        Self::VmOwnership(crate::generated_protocol::v1::VmOwnership {
-            connection_id: connection_id.into(),
-            session_id: session_id.into(),
-            vm_id: vm_id.into(),
-        })
-    }
-}
-
-pub const PROTOCOL_NAME: &str = "secure-exec-sidecar";
-pub const PROTOCOL_VERSION: u16 = 7;
-// 16 MiB: large enough to carry a trusted-client CreateVm config that inlines an
-// entire base-filesystem snapshot, while still bounding a single frame.
-pub const DEFAULT_MAX_FRAME_BYTES: usize = 16 * 1024 * 1024;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum ProtocolCodecError {
-    TruncatedFrame {
-        actual: usize,
-    },
-    LengthPrefixMismatch {
-        declared: usize,
-        actual: usize,
-    },
-    FrameTooLarge {
-        size: usize,
-        max: usize,
-    },
-    UnsupportedSchema {
-        name: String,
-        version: u16,
-    },
-    InvalidRequestId,
-    InvalidRequestDirection {
-        request_id: RequestId,
-        expected: RequestDirection,
-    },
-    EmptyOwnershipField {
-        field: &'static str,
-    },
-    EmptyAuthToken,
-    InvalidOwnershipScope {
-        required: OwnershipRequirement,
-        actual: OwnershipRequirement,
-    },
-    SerializeFailure(String),
-    DeserializeFailure(String),
-}
-
-impl fmt::Display for ProtocolCodecError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::TruncatedFrame { actual } => {
-                write!(
-                    f,
-                    "protocol frame is truncated: only {actual} bytes provided"
-                )
-            }
-            Self::LengthPrefixMismatch { declared, actual } => write!(
-                f,
-                "protocol frame length prefix mismatch: declared {declared} bytes, got {actual}",
-            ),
-            Self::FrameTooLarge { size, max } => {
-                write!(f, "protocol frame is {size} bytes, limit is {max}")
-            }
-            Self::UnsupportedSchema { name, version } => write!(
-                f,
-                "unsupported protocol schema {name}@{version}; expected {PROTOCOL_NAME}@{PROTOCOL_VERSION}",
-            ),
-            Self::InvalidRequestId => write!(f, "protocol request identifiers must be non-zero"),
-            Self::InvalidRequestDirection {
-                request_id,
-                expected,
-            } => write!(f, "protocol request id {request_id} must be {expected}",),
-            Self::EmptyOwnershipField { field } => {
-                write!(f, "protocol ownership field `{field}` cannot be empty")
-            }
-            Self::EmptyAuthToken => {
-                write!(f, "authenticate requests require a non-empty auth token")
-            }
-            Self::InvalidOwnershipScope { required, actual } => write!(
-                f,
-                "protocol frame requires {required} ownership but carried {actual}",
-            ),
-            Self::SerializeFailure(message) => {
-                write!(f, "protocol frame serialization failed: {message}")
-            }
-            Self::DeserializeFailure(message) => {
-                write!(f, "protocol frame deserialization failed: {message}")
-            }
-        }
-    }
-}
-
-impl Error for ProtocolCodecError {}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum OwnershipRequirement {
-    Any,
-    Connection,
-    Session,
-    Vm,
-    SessionOrVm,
-}
-
-impl fmt::Display for OwnershipRequirement {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::Any => write!(f, "any"),
-            Self::Connection => write!(f, "connection"),
-            Self::Session => write!(f, "session"),
-            Self::Vm => write!(f, "vm"),
-            Self::SessionOrVm => write!(f, "session-or-vm"),
-        }
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum RequestDirection {
-    Host,
-    Sidecar,
-}
-
-impl fmt::Display for RequestDirection {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::Host => write!(f, "positive"),
-            Self::Sidecar => write!(f, "negative"),
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct WireDispatchResult {
-    pub response: ResponseFrame,
-    pub events: Vec<EventFrame>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct CompatDispatchResult {
-    pub response: crate::protocol::ResponseFrame,
-    pub events: Vec<crate::protocol::EventFrame>,
-}
-
-#[derive(Debug, Clone)]
-pub struct WireFrameCodec {
-    max_frame_bytes: usize,
-}
-
-impl WireFrameCodec {
-    pub fn new(max_frame_bytes: usize) -> Self {
-        Self { max_frame_bytes }
-    }
-
-    pub fn max_frame_bytes(&self) -> usize {
-        self.max_frame_bytes
-    }
-
-    pub fn encode(&self, frame: &ProtocolFrame) -> Result<Vec<u8>, ProtocolCodecError> {
-        validate_frame(frame)?;
-
-        let payload = serde_bare::to_vec(frame)
-            .map_err(|error| ProtocolCodecError::SerializeFailure(error.to_string()))?;
-        if payload.len() > self.max_frame_bytes {
-            return Err(ProtocolCodecError::FrameTooLarge {
-                size: payload.len(),
-                max: self.max_frame_bytes,
-            });
-        }
-
-        let length =
-            u32::try_from(payload.len()).map_err(|_| ProtocolCodecError::FrameTooLarge {
-                size: payload.len(),
-                max: u32::MAX as usize,
-            })?;
-
-        let mut encoded = Vec::with_capacity(4 + payload.len());
-        encoded.extend_from_slice(&length.to_be_bytes());
-        encoded.extend_from_slice(&payload);
-        Ok(encoded)
-    }
-
-    pub fn decode(&self, bytes: &[u8]) -> Result<ProtocolFrame, ProtocolCodecError> {
-        let payload = self.checked_payload(bytes)?;
-        let frame = serde_bare::from_slice(payload)
-            .map_err(|error| ProtocolCodecError::DeserializeFailure(error.to_string()))?;
-        validate_frame(&frame)?;
-        Ok(frame)
-    }
-
-    /// Encode a frame as a bare message WITHOUT the 4-byte length prefix.
-    ///
-    /// Stream transports (stdio) use [`encode`] so frames can be delimited in a
-    /// byte stream. Message transports where the boundary is the call itself
-    /// (the browser `pushFrame` / `postMessage` path) use this so the on-wire
-    /// bytes match the TypeScript `encodeProtocolFramePayload(frame, "bare")`,
-    /// which emits the raw bare frame with no prefix.
-    pub fn encode_message(&self, frame: &ProtocolFrame) -> Result<Vec<u8>, ProtocolCodecError> {
-        validate_frame(frame)?;
-        let payload = serde_bare::to_vec(frame)
-            .map_err(|error| ProtocolCodecError::SerializeFailure(error.to_string()))?;
-        if payload.len() > self.max_frame_bytes {
-            return Err(ProtocolCodecError::FrameTooLarge {
-                size: payload.len(),
-                max: self.max_frame_bytes,
-            });
-        }
-        Ok(payload)
-    }
-
-    /// Decode a bare message produced by [`encode_message`] (no length prefix).
-    pub fn decode_message(&self, bytes: &[u8]) -> Result<ProtocolFrame, ProtocolCodecError> {
-        if bytes.len() > self.max_frame_bytes {
-            return Err(ProtocolCodecError::FrameTooLarge {
-                size: bytes.len(),
-                max: self.max_frame_bytes,
-            });
-        }
-        let frame = serde_bare::from_slice(bytes)
-            .map_err(|error| ProtocolCodecError::DeserializeFailure(error.to_string()))?;
-        validate_frame(&frame)?;
-        Ok(frame)
-    }
-
-    fn checked_payload<'a>(&self, bytes: &'a [u8]) -> Result<&'a [u8], ProtocolCodecError> {
-        if bytes.len() < 4 {
-            return Err(ProtocolCodecError::TruncatedFrame {
-                actual: bytes.len(),
-            });
-        }
-
-        let declared =
-            u32::from_be_bytes(bytes[..4].try_into().expect("length prefix is four bytes"))
-                as usize;
-        if declared > self.max_frame_bytes {
-            return Err(ProtocolCodecError::FrameTooLarge {
-                size: declared,
-                max: self.max_frame_bytes,
-            });
-        }
-
-        let actual = bytes.len() - 4;
-        if declared != actual {
-            return Err(ProtocolCodecError::LengthPrefixMismatch { declared, actual });
-        }
-
-        Ok(&bytes[4..])
-    }
-}
-
-impl Default for WireFrameCodec {
-    fn default() -> Self {
-        Self::new(DEFAULT_MAX_FRAME_BYTES)
-    }
-}
-
-pub fn protocol_schema() -> ProtocolSchema {
-    ProtocolSchema::current()
-}
-
-impl ProtocolSchema {
-    pub fn current() -> Self {
-        Self {
-            name: PROTOCOL_NAME.to_string(),
-            version: PROTOCOL_VERSION,
-        }
-    }
-}
-
-impl Default for ProtocolSchema {
-    fn default() -> Self {
-        Self::current()
-    }
-}
-
-pub fn request_frame_to_compat(
-    request: RequestFrame,
-) -> Result<crate::protocol::RequestFrame, ProtocolCodecError> {
-    match crate::protocol::from_generated_protocol_frame(ProtocolFrame::RequestFrame(request))? {
-        crate::protocol::ProtocolFrame::Request(request) => Ok(request),
-        crate::protocol::ProtocolFrame::Response(_)
-        | crate::protocol::ProtocolFrame::Event(_)
-        | crate::protocol::ProtocolFrame::SidecarRequest(_)
-        | crate::protocol::ProtocolFrame::SidecarResponse(_) => {
-            Err(ProtocolCodecError::DeserializeFailure(String::from(
-                "wire request frame converted to non-request compatibility frame",
-            )))
-        }
-    }
-}
-
-pub fn ownership_scope_to_compat(ownership: OwnershipScope) -> crate::protocol::OwnershipScope {
-    crate::protocol::from_generated_ownership_scope(ownership)
-}
-
-pub fn request_payload_to_compat(
-    ownership: &crate::protocol::OwnershipScope,
-    payload: RequestPayload,
-) -> Result<crate::protocol::RequestPayload, ProtocolCodecError> {
-    match crate::protocol::from_generated_protocol_frame(ProtocolFrame::RequestFrame(
-        RequestFrame {
-            schema: protocol_schema(),
-            request_id: 1,
-            ownership: crate::protocol::to_generated_ownership_scope(ownership),
-            payload,
-        },
-    ))? {
-        crate::protocol::ProtocolFrame::Request(request) => Ok(request.payload),
-        crate::protocol::ProtocolFrame::Response(_)
-        | crate::protocol::ProtocolFrame::Event(_)
-        | crate::protocol::ProtocolFrame::SidecarRequest(_)
-        | crate::protocol::ProtocolFrame::SidecarResponse(_) => {
-            Err(ProtocolCodecError::DeserializeFailure(String::from(
-                "wire request payload converted to non-request compatibility frame",
-            )))
-        }
-    }
-}
-
-pub fn response_payload_from_compat(
-    ownership: &crate::protocol::OwnershipScope,
-    payload: crate::protocol::ResponsePayload,
-) -> Result<ResponsePayload, ProtocolCodecError> {
-    match crate::protocol::to_generated_protocol_frame(&crate::protocol::ProtocolFrame::Response(
-        crate::protocol::ResponseFrame::new(1, ownership.clone(), payload),
-    ))? {
-        ProtocolFrame::ResponseFrame(response) => Ok(response.payload),
-        ProtocolFrame::RequestFrame(_)
-        | ProtocolFrame::EventFrame(_)
-        | ProtocolFrame::SidecarRequestFrame(_)
-        | ProtocolFrame::SidecarResponseFrame(_) => Err(ProtocolCodecError::SerializeFailure(
-            String::from("compatibility response payload converted to non-response wire frame"),
-        )),
-    }
-}
-
-pub fn event_frame_from_compat(
-    event: crate::protocol::EventFrame,
-) -> Result<EventFrame, ProtocolCodecError> {
-    match crate::protocol::to_generated_protocol_frame(&crate::protocol::ProtocolFrame::Event(
-        event,
-    ))? {
-        ProtocolFrame::EventFrame(event) => Ok(event),
-        ProtocolFrame::RequestFrame(_)
-        | ProtocolFrame::ResponseFrame(_)
-        | ProtocolFrame::SidecarRequestFrame(_)
-        | ProtocolFrame::SidecarResponseFrame(_) => Err(ProtocolCodecError::SerializeFailure(
-            String::from("compatibility event converted to non-event wire frame"),
-        )),
-    }
-}
-
-pub fn event_frame_to_compat(
-    event: EventFrame,
-) -> Result<crate::protocol::EventFrame, ProtocolCodecError> {
-    match crate::protocol::from_generated_protocol_frame(ProtocolFrame::EventFrame(event))? {
-        crate::protocol::ProtocolFrame::Event(event) => Ok(event),
-        crate::protocol::ProtocolFrame::Request(_)
-        | crate::protocol::ProtocolFrame::Response(_)
-        | crate::protocol::ProtocolFrame::SidecarRequest(_)
-        | crate::protocol::ProtocolFrame::SidecarResponse(_) => {
-            Err(ProtocolCodecError::DeserializeFailure(String::from(
-                "wire event converted to non-event compatibility frame",
-            )))
-        }
-    }
-}
-
-pub fn sidecar_request_frame_from_compat(
-    request: crate::protocol::SidecarRequestFrame,
-) -> Result<SidecarRequestFrame, ProtocolCodecError> {
-    match crate::protocol::to_generated_protocol_frame(
-        &crate::protocol::ProtocolFrame::SidecarRequest(request),
-    )? {
-        ProtocolFrame::SidecarRequestFrame(request) => Ok(request),
-        ProtocolFrame::RequestFrame(_)
-        | ProtocolFrame::ResponseFrame(_)
-        | ProtocolFrame::EventFrame(_)
-        | ProtocolFrame::SidecarResponseFrame(_) => {
-            Err(ProtocolCodecError::SerializeFailure(String::from(
-                "compatibility sidecar request converted to non-sidecar-request wire frame",
-            )))
-        }
-    }
-}
-
-pub fn sidecar_request_payload_to_compat(
-    ownership: &crate::protocol::OwnershipScope,
-    payload: SidecarRequestPayload,
-) -> Result<crate::protocol::SidecarRequestPayload, ProtocolCodecError> {
-    match crate::protocol::from_generated_protocol_frame(ProtocolFrame::SidecarRequestFrame(
-        SidecarRequestFrame {
-            schema: protocol_schema(),
-            request_id: -1,
-            ownership: crate::protocol::to_generated_ownership_scope(ownership),
-            payload,
-        },
-    ))? {
-        crate::protocol::ProtocolFrame::SidecarRequest(request) => Ok(request.payload),
-        crate::protocol::ProtocolFrame::Request(_)
-        | crate::protocol::ProtocolFrame::Response(_)
-        | crate::protocol::ProtocolFrame::Event(_)
-        | crate::protocol::ProtocolFrame::SidecarResponse(_) => {
-            Err(ProtocolCodecError::DeserializeFailure(String::from(
-                "wire sidecar request payload converted to non-sidecar-request compatibility frame",
-            )))
-        }
-    }
-}
-
-pub fn sidecar_response_frame_to_compat(
-    response: SidecarResponseFrame,
-) -> Result<crate::protocol::SidecarResponseFrame, ProtocolCodecError> {
-    match crate::protocol::from_generated_protocol_frame(ProtocolFrame::SidecarResponseFrame(
-        response,
-    ))? {
-        crate::protocol::ProtocolFrame::SidecarResponse(response) => Ok(response),
-        crate::protocol::ProtocolFrame::Request(_)
-        | crate::protocol::ProtocolFrame::Response(_)
-        | crate::protocol::ProtocolFrame::Event(_)
-        | crate::protocol::ProtocolFrame::SidecarRequest(_) => {
-            Err(ProtocolCodecError::DeserializeFailure(String::from(
-                "wire sidecar response converted to non-sidecar-response compatibility frame",
-            )))
-        }
-    }
-}
-
-pub fn sidecar_response_frame_from_compat(
-    response: crate::protocol::SidecarResponseFrame,
-) -> Result<SidecarResponseFrame, ProtocolCodecError> {
-    match crate::protocol::to_generated_protocol_frame(
-        &crate::protocol::ProtocolFrame::SidecarResponse(response),
-    )? {
-        ProtocolFrame::SidecarResponseFrame(response) => Ok(response),
-        ProtocolFrame::RequestFrame(_)
-        | ProtocolFrame::ResponseFrame(_)
-        | ProtocolFrame::EventFrame(_)
-        | ProtocolFrame::SidecarRequestFrame(_) => {
-            Err(ProtocolCodecError::SerializeFailure(String::from(
-                "compatibility sidecar response converted to non-sidecar-response wire frame",
-            )))
-        }
-    }
-}
-
-pub fn dispatch_result_from_compat(
-    result: CompatDispatchResult,
-) -> Result<WireDispatchResult, ProtocolCodecError> {
-    let response = match crate::protocol::to_generated_protocol_frame(
-        &crate::protocol::ProtocolFrame::Response(result.response),
-    )? {
-        ProtocolFrame::ResponseFrame(response) => response,
-        ProtocolFrame::RequestFrame(_)
-        | ProtocolFrame::EventFrame(_)
-        | ProtocolFrame::SidecarRequestFrame(_)
-        | ProtocolFrame::SidecarResponseFrame(_) => {
-            return Err(ProtocolCodecError::SerializeFailure(String::from(
-                "compatibility dispatch response converted to non-response wire frame",
-            )));
-        }
-    };
-
-    let events = result
-        .events
-        .into_iter()
-        .map(|event| {
-            match crate::protocol::to_generated_protocol_frame(
-                &crate::protocol::ProtocolFrame::Event(event),
-            )? {
-                ProtocolFrame::EventFrame(event) => Ok(event),
-                ProtocolFrame::RequestFrame(_)
-                | ProtocolFrame::ResponseFrame(_)
-                | ProtocolFrame::SidecarRequestFrame(_)
-                | ProtocolFrame::SidecarResponseFrame(_) => {
-                    Err(ProtocolCodecError::SerializeFailure(String::from(
-                        "compatibility dispatch event converted to non-event wire frame",
-                    )))
-                }
-            }
-        })
-        .collect::<Result<Vec<_>, _>>()?;
-
-    Ok(WireDispatchResult { response, events })
-}
-
-fn validate_frame(frame: &ProtocolFrame) -> Result<(), ProtocolCodecError> {
-    match frame {
-        ProtocolFrame::RequestFrame(frame) => {
-            validate_schema(&frame.schema)?;
-            validate_request_id(frame.request_id)
-        }
-        ProtocolFrame::ResponseFrame(frame) => {
-            validate_schema(&frame.schema)?;
-            validate_request_id(frame.request_id)
-        }
-        ProtocolFrame::EventFrame(frame) => validate_schema(&frame.schema),
-        ProtocolFrame::SidecarRequestFrame(frame) => {
-            validate_schema(&frame.schema)?;
-            validate_request_id(frame.request_id)
-        }
-        ProtocolFrame::SidecarResponseFrame(frame) => {
-            validate_schema(&frame.schema)?;
-            validate_request_id(frame.request_id)
-        }
-    }
-}
-
-fn validate_schema(schema: &ProtocolSchema) -> Result<(), ProtocolCodecError> {
-    if schema.name != PROTOCOL_NAME || schema.version != PROTOCOL_VERSION {
-        return Err(ProtocolCodecError::UnsupportedSchema {
-            name: schema.name.clone(),
-            version: schema.version,
-        });
-    }
-    Ok(())
-}
-
-fn validate_request_id(request_id: RequestId) -> Result<(), ProtocolCodecError> {
-    if request_id == 0 {
-        return Err(ProtocolCodecError::InvalidRequestId);
-    }
-    Ok(())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use crate::generated_protocol::v1::{
-        FsPermissionScope, PatternPermissionScope, PermissionMode,
-    };
-    use std::collections::BTreeMap;
-
-    #[test]
-    fn legacy_metadata_preserves_js_runtime_limits_with_only_new_fields() {
-        let metadata = BTreeMap::from([(
-            String::from("limits.js_runtime.cpu_time_limit_ms"),
-            String::from("123"),
-        )]);
-
-        let config = legacy_limits_config(&metadata).expect("limits config");
-        let js_runtime = config.js_runtime.expect("js runtime limits");
-
-        assert_eq!(js_runtime.cpu_time_limit_ms, Some(123));
-    }
-
-    #[test]
-    fn legacy_metadata_preserves_wasm_limits_with_only_new_fields() {
-        let metadata = BTreeMap::from([(
-            String::from("limits.wasm.prewarm_timeout_ms"),
-            String::from("456"),
-        )]);
-
-        let config = legacy_limits_config(&metadata).expect("limits config");
-        let wasm = config.wasm.expect("wasm limits");
-
-        assert_eq!(wasm.prewarm_timeout_ms, Some(456));
-    }
-
-    #[test]
-    fn legacy_metadata_preserves_wasm_runner_heap_limit_as_only_new_field() {
-        let metadata = BTreeMap::from([(
-            String::from("limits.wasm.runner_heap_limit_mb"),
-            String::from("789"),
-        )]);
-
-        let config = legacy_limits_config(&metadata).expect("limits config");
-        let wasm = config.wasm.expect("wasm limits");
-
-        assert_eq!(wasm.runner_heap_limit_mb, Some(789));
-    }
-
-    #[test]
-    fn permissions_policy_default_matches_no_policy_deny_all() {
-        let policy = PermissionsPolicy::default();
-
-        assert!(matches!(
-            policy.fs,
-            Some(FsPermissionScope::PermissionMode(PermissionMode::Deny))
-        ));
-        for scope in [
-            policy.network,
-            policy.child_process,
-            policy.process,
-            policy.env,
-            policy.binding,
-        ] {
-            assert!(matches!(
-                scope,
-                Some(PatternPermissionScope::PermissionMode(PermissionMode::Deny))
-            ));
-        }
-    }
-
-    #[test]
-    fn permissions_policy_allow_all_remains_explicit() {
-        let policy = PermissionsPolicy::allow_all();
-
-        assert!(matches!(
-            policy.fs,
-            Some(FsPermissionScope::PermissionMode(PermissionMode::Allow))
-        ));
-        for scope in [
-            policy.network,
-            policy.child_process,
-            policy.process,
-            policy.env,
-            policy.binding,
-        ] {
-            assert!(matches!(
-                scope,
-                Some(PatternPermissionScope::PermissionMode(
-                    PermissionMode::Allow
-                ))
-            ));
-        }
-    }
-}
diff --git a/crates/sidecar/AGENTS.md b/crates/sidecar/AGENTS.md
deleted file mode 120000
index 681311eb9..000000000
--- a/crates/sidecar/AGENTS.md
+++ /dev/null
@@ -1 +0,0 @@
-CLAUDE.md
\ No newline at end of file
diff --git a/crates/sidecar/CLAUDE.md b/crates/sidecar/CLAUDE.md
deleted file mode 100644
index 8601adf8c..000000000
--- a/crates/sidecar/CLAUDE.md
+++ /dev/null
@@ -1,35 +0,0 @@
-See `../CLAUDE.md` for crate-wide runtime and testing rules.
-
-## env vs BARE wire — channel classification
-
-Spawned language-host engines are configured two ways: the **BARE wire/structured request** (`protocol.rs` payloads, `CreateVmConfig`, and the per-engine `Start{Javascript,Wasm,Python}ExecutionRequest` structs in `crates/execution`) and the **`AGENTOS_*` env channel** (assembled in `prepare_guest_runtime_env` / `apply_wasm_limit_env` in `src/execution.rs`, read back by the engines/bridge). Every setting belongs to exactly one of three buckets:
-
-1. **Process-wide / host / build / test → env.** Shared across all VMs, not per-VM configurable (e.g. `SECURE_EXEC_NODE`, `*_V8_BRIDGE_BUILD_SCRIPT`, pyodide index/cache URLs, all test/debug knobs). Leave on env.
-2. **Per-VM bootstrap-before-wire → env (explicit carve-out).** Must exist at `exec` time *before* the wire/sync-RPC bridge is up: `AGENTOS_SANDBOX_ROOT`, the sync-RPC bridge fds (`AGENTOS_NODE_SYNC_RPC_ENABLE`/`_REQUEST_FD`/`_RESPONSE_FD`/`_DATA_BYTES`/`_WAIT_TIMEOUT_MS`), entrypoint/argv/payload (`AGENTOS_ENTRYPOINT`/`_GUEST_ENTRYPOINT`/`_GUEST_ARGV`/`_BOOTSTRAP_MODULE`, `_PYTHON_CODE`/`_PYTHON_FILE`, `_WASM_MODULE_PATH`). Keep on env; keep scrubbed from guest `process.env` and from `child_process` spawns.
-3. **Per-VM runtime config → BARE wire.** Anything per-VM the established wire/bridge could carry: resource limits, isolation policy, virtualized identity. MUST ride the wire (a typed field on `CreateVmConfig`/`VmLimits` or the per-execution request), read by the engine from that field. New per-VM settings default here.
-
-**Dead-cap anti-pattern.** A value set on the wire that is then silently re-emitted as an `AGENTOS_*` env knob is the dead-cap failure mode — the env knob can be wrong, stale, or never read while the wire value is ignored (this is exactly how `AGENTOS_WASM_MAX_STACK_BYTES` was set into env but never read). If it's on the wire, the engine reads it from the wire path; do not duplicate it onto env "just in case", and per the versionless-lockstep rule do not keep an env knob as a fallback.
-
-Migration status: **resource limits** (typed `*ExecutionLimits` on the execution request) and **virtualized identity** (`process.{pid,ppid,uid,gid}` interpolated into the runtime shim; `os.{cpus,totalmem,freemem,homedir,userInfo,…}` via the `__agentOSVirtualOs` global the shim sets) are migrated to the wire. **Isolation policy** (`AGENTOS_GUEST_PATH_MAPPINGS`, `EXTRA_FS_*_PATHS`, `ALLOWED_NODE_BUILTINS`, `LOOPBACK_EXEMPT_PORTS`, `WASM_PERMISSION_TIER`) is bucket 3 but still on env — future work. Note: the guest module loader and `os` module (`guestOs`) read their inputs at module-evaluation; the runtime shim sets `__agentOSVirtualOs` early enough that this works (verified by `os_resource_limits_are_vm_scoped` in `tests/builtin_conformance.rs`, which asserts the guest's `os.*` identity reflects the configured VM).
-
-## Local Patterns
-
-- `RequestPayload::Ext`, `ResponsePayload::ExtResult`, `EventPayload::Ext`, and sidecar callback `Ext` payloads are opaque to core sidecar code; dispatch only by namespace and leave inner payload decoding to the registered extension.
-- `ExtensionContext` primitives should delegate to existing `NativeSidecar` ownership, process, event, and callback paths instead of giving extensions direct access to internal maps such as VM tables or ACP session state.
-- Extension callbacks and events must stay transport-agnostic: do not expose stdio, socket, or browser `postMessage` details through the `Extension` trait or `ExtensionContext`.
-- Stdio blocking-request interruption must stay extension-owned. Core stdio may call generic `Extension` hooks, but production secure-exec-sidecar code must not decode ACP payloads or depend on `agentos-protocol`.
-- Sidecar-to-host callback protocol must stay agent-agnostic: use `HostCallback{callback_key}` for generic host callbacks, and keep toolkit-specific naming and schemas out of the core callback frame.
-- Legacy ACP helpers under `tests/acp_legacy/` are fixtures only; production ACP behavior belongs in `crates/agentos-sidecar`, not `crates/sidecar/src`.
-- Tool CLI `--json` and `--json-file` payloads in `src/tools.rs` must be validated against the registered host callback `input_schema` before building `HostCallbackRequest`; relying on the host callback to fail closed leaves non-TypeScript hosts and any pre-dispatch checks exposed to raw, unvalidated payload shapes.
-- `net.poll` waits in `src/execution.rs` must stay explicitly bounded. The sync-RPC handler runs on the sidecar's main sync-RPC thread, so guest `wait_ms` values must be clamped via `clamp_javascript_net_poll_wait(...)` to the 50 ms ceiling; longer waits should return the currently observed socket state after the ceiling expires instead of blocking dispose/shutdown or unrelated VM work.
-- `kill_process` signal parsing in `src/execution.rs` must stay aligned with the guest `child_process.kill(...)` bridge contract: accept the full 1..31 signal table plus common aliases (`SIGIOT` -> `SIGABRT`, `SIGPOLL` -> `SIGIO`), and terminate shared-V8 child executions directly for non-streamed signals so child polls still observe prompt exits.
-- `child_process.poll` in `src/execution.rs` must reserve `Value::Null` for the real "no events pending" case. If a tracked child disappears after descendant-event drain, return a typed `ECHILD` execution error instead so guest poll loops stop instead of spinning on a ghost child.
-- Child stdin plumbing in `src/execution.rs` must mirror the root-process path for nested `child_process` children too: always call `child.execution.write_stdin()` / `close_stdin()` and the kernel pipe helpers together. Kernel-only writes or closes leave shared-V8 WASM children stuck behind the local `kernel_stdin` bridge, so pipelines like `echo hello | wc -c` never observe EOF.
-- Child JavaScript executions use `service_javascript_sync_rpc(...)` in `src/execution.rs`, not the top-level `src/service.rs`, for `process.*` bridge calls. When changing guest self-signal behavior (`process.kill`, `process.abort()`, signal-shape exit reporting), mirror the top-level bookkeeping there too or spawned Node children will regress to `unsupported JavaScript sync RPC method process.kill` and report plain exit codes.
-- Nested JavaScript child signal registration currently arrives through the sync-RPC method `process.signal_state`, not just `ActiveExecutionEvent::SignalState`. When fixing descendant `SIGCHLD` or job-control behavior in `src/execution.rs`, keep the nested `process.signal_state` bookkeeping aligned with the top-level `src/service.rs` handler or grandchildren will silently lose their registered signal handlers.
-- The sidecar protocol `Authenticate` handshake must carry `secure_exec_bridge::bridge_contract().version`; `src/service.rs` should reject mismatches with `bridge_version_mismatch` before opening a connection so bridge-contract drift fails fast instead of crashing later on the first divergent RPC.
-- `plugins/host_dir.rs` metadata writes must keep the old symlink-leaf safety contract for plain ops (`chmod`/`chown`/`utimes` still reject symlink leaves), while the richer timestamp path should only mutate symlink metadata when the caller explicitly requests nofollow semantics (`lutimes` / `utimes_spec(..., false)`).
-- Mounted filesystem shutdown now happens explicitly during `src/vm.rs` disposal/reconfigure, not just in `MountTable::drop`. Bridge-backed mounts can therefore emit `SidecarRequestPayload::JsBridgeCall` during teardown, and host-visible flush failures should surface as the structured event `filesystem.mount.shutdown_failed` with the mount metadata plus the original error code/message.
-- Guest runtime env setup in `src/execution.rs` must add writable `host_dir` / `module_access` mount roots to `AGENTOS_EXTRA_FS_WRITE_PATHS`, not just the VM shadow cwd. Without those extra write roots, guest `fs.*` bridge calls misclassify writable mounts as read-only (`EROFS`) and cross-mount rename tests never reach the intended `EXDEV` path.
-- Python mapped host-path access in `src/filesystem.rs` must stay on the anchored-fd path: open the mapped root once, resolve descendants with `openat2(RESOLVE_BENEATH | RESOLVE_NO_MAGICLINKS)`, and perform the actual syscall through `/proc/self/fd/<fd>` or an anchored parent dir. Do not reintroduce resolve-then-use `PathBuf` opens, and when filtering `read_dir` results from a proc-fd directory, rebuild child host paths from the resolved directory host path plus `file_name()` instead of reusing `DirEntry::path()`, which points back into procfs.
-- In `tests/builtin_conformance.rs`, isolated extra tests that open a host listener should finish sidecar/session/VM setup before starting any accept deadline. Those tests run in subprocesses that can queue behind the shared sidecar-runtime lock, so a server timeout that starts before VM creation will flake under the normal parallel `cargo test` harness.
diff --git a/crates/sidecar/Cargo.toml b/crates/sidecar/Cargo.toml
index 89be156ff..6cbe7dddc 100644
--- a/crates/sidecar/Cargo.toml
+++ b/crates/sidecar/Cargo.toml
@@ -4,72 +4,10 @@ version.workspace = true
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
-description = "Native Secure Exec sidecar runtime"
+description = "secure-exec-sidecar compatibility shim for agentos-native-sidecar"
 
 [lib]
 name = "secure_exec_sidecar"
 
-[[bin]]
-name = "secure-exec-sidecar"
-path = "src/main.rs"
-
 [dependencies]
-secure-exec-bridge = { workspace = true }
-secure-exec-kernel = { workspace = true }
-secure-exec-sidecar-protocol = { workspace = true }
-secure-exec-sidecar-core = { workspace = true }
-secure-exec-execution = { workspace = true }
-secure-exec-vm-config = { workspace = true }
-secure-exec-vfs = { workspace = true }
-async-trait = "0.1"
-aes = "0.8"
-aes-gcm = "0.10"
-aws-config = "1"
-aws-credential-types = "1"
-aws-sdk-s3 = "1"
-base64 = "0.22"
-blake3 = "1"
-bytes = "1"
-ctr = "0.9"
-filetime = "0.2"
-h2 = "0.4"
-http = "1"
-hmac = "0.12"
-hickory-resolver = "0.26.0-beta.3"
-jsonwebtoken = "8.3.0"
-log = "0.4"
-md-5 = "0.10"
-nix = { version = "0.29", features = ["fs", "poll", "process", "signal", "user"] }
-# `vendored` builds OpenSSL from source → self-contained binary with no
-# system-openssl discovery on any runner (ubuntu/macOS). openssl backs the
-# guest crypto runtime (RSA/EC/DH/AES), so it cannot be a TLS-only stack.
-openssl = { version = "0.10", features = ["vendored"] }
-pbkdf2 = "0.12"
-rustls = { version = "0.23.37", default-features = false, features = ["aws_lc_rs", "std", "tls12"] }
-rustls-native-certs = "0.8"
-rustls-pemfile = "2.2"
-tokio-rustls = { version = "0.26", default-features = false, features = ["aws_lc_rs", "tls12"] }
-rusqlite = { version = "0.32", features = ["bundled"] }
-scrypt = "0.11"
-serde = { version = "1.0", features = ["derive"] }
-serde_json = "1.0"
-sha1 = "0.10"
-sha2 = "0.10"
-socket2 = "0.6"
-tokio = { version = "1", features = ["io-std", "io-util", "macros", "net", "rt", "rt-multi-thread", "sync", "time"] }
-tracing = "0.1"
-tracing-subscriber = { version = "0.3", features = ["fmt"] }
-ureq = { version = "2.10", features = ["json"] }
-url = "2"
-vfs = { workspace = true }
-
-[target.'cfg(target_os = "macos")'.dependencies]
-# macOS has no openat2/RESOLVE_BENEATH; cap-std provides the audited
-# resolve-beneath path resolution used in place of openat2 on this platform.
-cap-std = "3"
-
-[dev-dependencies]
-serde_bare = "0.5"
-tar = "0.4"
-wat = "1.0"
-v8 = "130"
+agentos_native_sidecar = { package = "agentos-native-sidecar", path = "../../../agentos/crates/native-sidecar", version = "0.0.1" }
diff --git a/crates/sidecar/assets/base-filesystem.json b/crates/sidecar/assets/base-filesystem.json
deleted file mode 100644
index 64e03bfa5..000000000
--- a/crates/sidecar/assets/base-filesystem.json
+++ /dev/null
@@ -1,536 +0,0 @@
-{
-  "source": {
-    "snapshotPath": "alpine-defaults.json",
-    "image": "alpine:3.22",
-    "snapshotCreatedAt": "2026-06-22T19:45:20.529Z",
-    "builtAt": "2026-06-23T03:47:12.644Z",
-    "transforms": [
-      "Normalize HOSTNAME to secure-exec",
-      "Preserve the captured user-level environment and filesystem layout as the secure-exec base layer",
-      "Add the non-Alpine /workspace directory (default agent working directory) owned by the base user"
-    ]
-  },
-  "environment": {
-    "env": {
-      "CHARSET": "UTF-8",
-      "HOME": "/home/agentos",
-      "HOSTNAME": "secure-exec",
-      "LANG": "C.UTF-8",
-      "LC_COLLATE": "C",
-      "LOGNAME": "agentos",
-      "PAGER": "less",
-      "PATH": "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
-      "SHELL": "/bin/sh",
-      "USER": "agentos"
-    },
-    "prompt": "\\h:\\w\\$ "
-  },
-  "filesystem": {
-    "entries": [
-      {
-        "path": "/",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/bin",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/alpine-release",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "3.22.4\n"
-      },
-      {
-        "path": "/etc/apk",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/busybox-paths.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/crontabs",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/group",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "root:x:0:root\nbin:x:1:root,bin,daemon\ndaemon:x:2:root,bin,daemon\nsys:x:3:root,bin\nadm:x:4:root,daemon\ntty:x:5:\ndisk:x:6:root\nlp:x:7:lp\nkmem:x:9:\nwheel:x:10:root\nfloppy:x:11:root\nmail:x:12:mail\nnews:x:13:news\nuucp:x:14:uucp\ncron:x:16:cron\naudio:x:18:\ncdrom:x:19:\ndialout:x:20:root\nftp:x:21:\nsshd:x:22:\ninput:x:23:\ntape:x:26:root\nvideo:x:27:root\nnetdev:x:28:\nkvm:x:34:kvm\ngames:x:35:\nshadow:x:42:\nwww-data:x:82:\nusers:x:100:games\nntp:x:123:\nabuild:x:300:\nutmp:x:406:\nping:x:999:\nnogroup:x:65533:\nnobody:x:65534:\nagentos:x:1000:\n"
-      },
-      {
-        "path": "/etc/hostname",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "secure-exec\n"
-      },
-      {
-        "path": "/etc/logrotate.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/modprobe.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/modules-load.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/network",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/nsswitch.conf",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "# musl itself does not support NSS, however some third-party DNS\n# implementations use the nsswitch.conf file to determine what\n# policy to follow.\n# Editing this file is not recommended.\nhosts: files dns\n"
-      },
-      {
-        "path": "/etc/opt",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/os-release",
-        "type": "symlink",
-        "mode": "777",
-        "uid": 0,
-        "gid": 0,
-        "target": "../usr/lib/os-release"
-      },
-      {
-        "path": "/etc/passwd",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "root:x:0:0:root:/root:/bin/sh\nbin:x:1:1:bin:/bin:/sbin/nologin\ndaemon:x:2:2:daemon:/sbin:/sbin/nologin\nlp:x:4:7:lp:/var/spool/lpd:/sbin/nologin\nsync:x:5:0:sync:/sbin:/bin/sync\nshutdown:x:6:0:shutdown:/sbin:/sbin/shutdown\nhalt:x:7:0:halt:/sbin:/sbin/halt\nmail:x:8:12:mail:/var/mail:/sbin/nologin\nnews:x:9:13:news:/usr/lib/news:/sbin/nologin\nuucp:x:10:14:uucp:/var/spool/uucppublic:/sbin/nologin\ncron:x:16:16:cron:/var/spool/cron:/sbin/nologin\nftp:x:21:21::/var/lib/ftp:/sbin/nologin\nsshd:x:22:22:sshd:/dev/null:/sbin/nologin\ngames:x:35:35:games:/usr/games:/sbin/nologin\nntp:x:123:123:NTP:/var/empty:/sbin/nologin\nguest:x:405:100:guest:/dev/null:/sbin/nologin\nnobody:x:65534:65534:nobody:/:/sbin/nologin\nagentos:x:1000:1000::/home/agentos:/bin/sh\n"
-      },
-      {
-        "path": "/etc/periodic",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/profile",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "export PATH=\"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\"\n\nexport PAGER=less\numask 022\n\n# use nicer PS1 for bash and busybox ash\nif [ -n \"$BASH_VERSION\" -o \"$BB_ASH_VERSION\" ]; then\n\tPS1='\\h:\\w\\$ '\n# use nicer PS1 for zsh\nelif [ -n \"$ZSH_VERSION\" ]; then\n\tPS1='%m:%~%# '\n# set up fallback default PS1\nelse\n\t: \"${HOSTNAME:=$(hostname)}\"\n\tPS1='${HOSTNAME%%.*}:$PWD'\n\t[ \"$(id -u)\" -eq 0 ] && PS1=\"${PS1}# \" || PS1=\"${PS1}\\$ \"\nfi\n\nfor script in /etc/profile.d/*.sh ; do\n\tif [ -r \"$script\" ] ; then\n\t\t. \"$script\"\n\tfi\ndone\nunset script\n"
-      },
-      {
-        "path": "/etc/profile.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/secfixes.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/shadow",
-        "type": "file",
-        "mode": "640",
-        "uid": 0,
-        "gid": 42,
-        "content": "root:*::0:::::\nbin:!::0:::::\ndaemon:!::0:::::\nlp:!::0:::::\nsync:!::0:::::\nshutdown:!::0:::::\nhalt:!::0:::::\nmail:!::0:::::\nnews:!::0:::::\nuucp:!::0:::::\ncron:!::0:::::\nftp:!::0:::::\nsshd:!::0:::::\ngames:!::0:::::\nntp:!::0:::::\nguest:!::0:::::\nnobody:!::0:::::\nagentos:!:20626:0:99999:7:::\n"
-      },
-      {
-        "path": "/etc/shells",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "# valid login shells\n/bin/sh\n/bin/ash\n"
-      },
-      {
-        "path": "/etc/ssl",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/ssl1.1",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/sysctl.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/udhcpc",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/home",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/home/agentos",
-        "type": "directory",
-        "mode": "2755",
-        "uid": 1000,
-        "gid": 1000
-      },
-      {
-        "path": "/lib",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/lib/apk",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/lib/firmware",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/lib/modules-load.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/lib/sysctl.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/media",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/media/cdrom",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/media/floppy",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/media/usb",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/mnt",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/opt",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/root",
-        "type": "directory",
-        "mode": "700",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/run",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/run/lock",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/sbin",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/srv",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/sys",
-        "type": "directory",
-        "mode": "555",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/tmp",
-        "type": "directory",
-        "mode": "1777",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/usr",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/usr/bin",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/usr/bin/env",
-        "type": "symlink",
-        "mode": "777",
-        "uid": 0,
-        "gid": 0,
-        "target": "/bin/busybox"
-      },
-      {
-        "path": "/usr/lib",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/usr/lib/os-release",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "NAME=\"Alpine Linux\"\nID=alpine\nVERSION_ID=3.22.4\nPRETTY_NAME=\"Alpine Linux v3.22\"\nHOME_URL=\"https://alpinelinux.org/\"\nBUG_REPORT_URL=\"https://gitlab.alpinelinux.org/alpine/aports/-/issues\"\n"
-      },
-      {
-        "path": "/usr/local",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/usr/sbin",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/usr/share",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/cache",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/empty",
-        "type": "directory",
-        "mode": "555",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/lib",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/local",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/lock",
-        "type": "symlink",
-        "mode": "777",
-        "uid": 0,
-        "gid": 0,
-        "target": "../run/lock"
-      },
-      {
-        "path": "/var/log",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/mail",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/opt",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/run",
-        "type": "symlink",
-        "mode": "777",
-        "uid": 0,
-        "gid": 0,
-        "target": "../run"
-      },
-      {
-        "path": "/var/spool",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/spool/cron",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/spool/cron/crontabs",
-        "type": "symlink",
-        "mode": "777",
-        "uid": 0,
-        "gid": 0,
-        "target": "../../../etc/crontabs"
-      },
-      {
-        "path": "/var/tmp",
-        "type": "directory",
-        "mode": "1777",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/workspace",
-        "type": "directory",
-        "mode": "755",
-        "uid": 1000,
-        "gid": 1000
-      }
-    ]
-  }
-}
diff --git a/crates/sidecar/build.rs b/crates/sidecar/build.rs
deleted file mode 100644
index 955b501ed..000000000
--- a/crates/sidecar/build.rs
+++ /dev/null
@@ -1,34 +0,0 @@
-use std::{env, fs, path::PathBuf};
-
-// Stage the base filesystem fixture into OUT_DIR. In-tree builds use the
-// canonical secure-exec package fixture from the current workspace; the
-// published crate falls back to the vendored `assets/base-filesystem.json` copy.
-fn main() {
-    let manifest_dir =
-        PathBuf::from(env::var("CARGO_MANIFEST_DIR").expect("CARGO_MANIFEST_DIR must be set"));
-    let out_dir = PathBuf::from(env::var("OUT_DIR").expect("OUT_DIR must be set"));
-
-    println!("cargo:rerun-if-changed=build.rs");
-
-    let workspace_fixtures = [
-        manifest_dir.join("../../packages/secure-exec-core/fixtures/base-filesystem.json"),
-        manifest_dir.join("../../packages/core/fixtures/base-filesystem.json"),
-    ];
-    let vendored = manifest_dir.join("assets/base-filesystem.json");
-    let src = workspace_fixtures
-        .into_iter()
-        .find(|fixture| fixture.exists())
-        .unwrap_or(vendored);
-
-    println!("cargo:rerun-if-changed={}", src.display());
-
-    let dest = out_dir.join("base-filesystem.json");
-    fs::copy(&src, &dest).unwrap_or_else(|error| {
-        panic!(
-            "failed to stage base-filesystem.json from {} to {}: {}",
-            src.display(),
-            dest.display(),
-            error
-        )
-    });
-}
diff --git a/crates/sidecar/src/bootstrap.rs b/crates/sidecar/src/bootstrap.rs
deleted file mode 100644
index ab31ddb9c..000000000
--- a/crates/sidecar/src/bootstrap.rs
+++ /dev/null
@@ -1,66 +0,0 @@
-//! Root filesystem bootstrap and snapshot helpers extracted from vm.rs.
-
-use crate::protocol::RootFilesystemEntry;
-use crate::state::SidecarKernel;
-use crate::SidecarError;
-
-use secure_exec_kernel::root_fs::{
-    FilesystemEntry as KernelFilesystemEntry, RootFilesystemSnapshot,
-};
-use secure_exec_kernel::vfs::VirtualFileSystem;
-use std::collections::BTreeMap;
-
-pub(crate) fn root_snapshot_entry(entry: &KernelFilesystemEntry) -> RootFilesystemEntry {
-    secure_exec_sidecar_core::root_snapshot_entry(entry)
-}
-
-pub(crate) fn root_snapshot_entries(snapshot: &RootFilesystemSnapshot) -> Vec<RootFilesystemEntry> {
-    snapshot.entries.iter().map(root_snapshot_entry).collect()
-}
-
-pub(crate) fn root_snapshot_from_entries(
-    entries: &[RootFilesystemEntry],
-) -> Result<RootFilesystemSnapshot, SidecarError> {
-    secure_exec_sidecar_core::root_snapshot_from_entries(entries)
-        .map_err(|error| SidecarError::InvalidState(error.to_string()))
-}
-
-pub(crate) fn apply_root_filesystem_entry<F>(
-    filesystem: &mut F,
-    entry: &RootFilesystemEntry,
-) -> Result<(), SidecarError>
-where
-    F: VirtualFileSystem,
-{
-    secure_exec_sidecar_core::apply_root_filesystem_entry(filesystem, entry)
-        .map_err(|error| SidecarError::InvalidState(error.to_string()))
-}
-
-pub(crate) fn discover_command_guest_paths(kernel: &mut SidecarKernel) -> BTreeMap<String, String> {
-    let mut command_guest_paths = BTreeMap::new();
-    let Ok(command_roots) = kernel.read_dir("/__secure_exec/commands") else {
-        return command_guest_paths;
-    };
-
-    let mut ordered_roots = command_roots
-        .into_iter()
-        .filter(|entry| !entry.is_empty() && entry.chars().all(|ch| ch.is_ascii_digit()))
-        .collect::<Vec<_>>();
-    ordered_roots.sort();
-
-    for root in ordered_roots {
-        let guest_root = format!("/__secure_exec/commands/{root}");
-        let Ok(entries) = kernel.read_dir(&guest_root) else {
-            continue;
-        };
-
-        for entry in entries {
-            if entry.starts_with('.') || command_guest_paths.contains_key(&entry) {
-                continue;
-            }
-            command_guest_paths.insert(entry.clone(), format!("{guest_root}/{entry}"));
-        }
-    }
-
-    command_guest_paths
-}
diff --git a/crates/sidecar/src/bridge.rs b/crates/sidecar/src/bridge.rs
deleted file mode 100644
index ad5d30ea8..000000000
--- a/crates/sidecar/src/bridge.rs
+++ /dev/null
@@ -1,1173 +0,0 @@
-//! Host bridge filesystem and permission plumbing extracted from service.rs.
-
-#![cfg_attr(test, allow(dead_code))]
-
-use crate::plugins::register_native_mount_plugins;
-use crate::service::{audit_fields, emit_security_audit_event, plugin_error};
-use crate::state::{BridgeError, SharedBridge, SharedSidecarRequestClient};
-use crate::{NativeSidecarBridge, SidecarError};
-
-use secure_exec_bridge::FilesystemAccess;
-use secure_exec_kernel::mount_plugin::{
-    FileSystemPluginFactory, FileSystemPluginRegistry, OpenFileSystemPluginRequest, PluginError,
-};
-use secure_exec_kernel::mount_table::MountedVirtualFileSystem;
-use secure_exec_kernel::permissions::{
-    CommandAccessRequest, EnvAccessRequest, FsAccessRequest, FsOperation, NetworkAccessRequest,
-    PermissionDecision, Permissions,
-};
-use secure_exec_kernel::vfs::MemoryFileSystem;
-use secure_exec_sidecar_core::permissions::filesystem_permission_capability;
-use std::fmt;
-use std::sync::Arc;
-
-#[cfg(test)]
-use crate::service::{dirname, normalize_path};
-#[cfg(test)]
-use crate::state::HOST_REALPATH_MAX_SYMLINK_DEPTH;
-#[cfg(test)]
-use secure_exec_bridge::{
-    ChmodRequest, CreateDirRequest, FileKind, FileMetadata, PathRequest, ReadDirRequest,
-    ReadFileRequest, RenameRequest, SymlinkRequest, TruncateRequest, WriteFileRequest,
-};
-#[cfg(test)]
-use secure_exec_kernel::vfs::{
-    VfsError, VfsResult, VirtualDirEntry, VirtualFileSystem, VirtualStat,
-};
-#[cfg(test)]
-use std::collections::{BTreeMap, BTreeSet};
-#[cfg(test)]
-use std::path::Path;
-#[cfg(test)]
-use std::sync::Mutex;
-#[cfg(test)]
-use std::time::{SystemTime, UNIX_EPOCH};
-
-#[cfg(test)]
-#[derive(Clone)]
-pub(crate) struct HostFilesystem<B> {
-    bridge: SharedBridge<B>,
-    vm_id: String,
-    links: Arc<Mutex<HostFilesystemLinkState>>,
-}
-
-#[cfg(test)]
-#[derive(Debug, Clone, Default)]
-struct HostFilesystemMetadataState {
-    uid: Option<u32>,
-    gid: Option<u32>,
-    atime_ms: Option<u64>,
-    mtime_ms: Option<u64>,
-    ctime_ms: Option<u64>,
-    birthtime_ms: Option<u64>,
-}
-
-#[cfg(test)]
-impl HostFilesystemMetadataState {
-    fn apply_to_stat(&self, stat: &mut VirtualStat) {
-        if let Some(uid) = self.uid {
-            stat.uid = uid;
-        }
-        if let Some(gid) = self.gid {
-            stat.gid = gid;
-        }
-        if let Some(atime_ms) = self.atime_ms {
-            stat.atime_ms = atime_ms;
-        }
-        if let Some(mtime_ms) = self.mtime_ms {
-            stat.mtime_ms = mtime_ms;
-        }
-        if let Some(ctime_ms) = self.ctime_ms {
-            stat.ctime_ms = ctime_ms;
-        }
-        if let Some(birthtime_ms) = self.birthtime_ms {
-            stat.birthtime_ms = birthtime_ms;
-        }
-    }
-}
-
-#[cfg(test)]
-#[derive(Debug, Clone)]
-struct HostFilesystemLinkedInode {
-    canonical_path: String,
-    paths: BTreeSet<String>,
-    metadata: HostFilesystemMetadataState,
-}
-
-#[cfg(test)]
-#[derive(Debug, Default)]
-struct HostFilesystemLinkState {
-    next_ino: u64,
-    path_to_ino: BTreeMap<String, u64>,
-    inodes: BTreeMap<u64, HostFilesystemLinkedInode>,
-}
-
-#[cfg(test)]
-#[derive(Debug, Clone)]
-struct HostFilesystemTrackedIdentity {
-    canonical_path: String,
-    ino: u64,
-    nlink: u64,
-    metadata: HostFilesystemMetadataState,
-}
-
-#[cfg(test)]
-impl<B> HostFilesystem<B> {
-    pub(crate) fn new(bridge: SharedBridge<B>, vm_id: impl Into<String>) -> Self {
-        Self {
-            bridge,
-            vm_id: vm_id.into(),
-            links: Arc::new(Mutex::new(HostFilesystemLinkState {
-                next_ino: 1,
-                ..HostFilesystemLinkState::default()
-            })),
-        }
-    }
-
-    fn vfs_error(error: SidecarError) -> VfsError {
-        VfsError::io(error.to_string())
-    }
-
-    fn bridge_path_not_found(op: &'static str, path: &str) -> VfsError {
-        VfsError::new(
-            "ENOENT",
-            format!("no such file or directory, {op} '{path}'"),
-        )
-    }
-
-    fn link_state_error() -> VfsError {
-        VfsError::io("native sidecar host filesystem link state lock poisoned")
-    }
-
-    fn current_time_ms() -> u64 {
-        SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .unwrap_or_default()
-            .as_millis() as u64
-    }
-
-    fn file_metadata_to_stat(
-        metadata: FileMetadata,
-        identity: Option<&HostFilesystemTrackedIdentity>,
-    ) -> VirtualStat {
-        let mut stat = VirtualStat {
-            mode: metadata.mode,
-            size: metadata.size,
-            blocks: if metadata.size == 0 {
-                0
-            } else {
-                metadata.size.div_ceil(512)
-            },
-            dev: 1,
-            rdev: 0,
-            is_directory: metadata.kind == FileKind::Directory,
-            is_symbolic_link: metadata.kind == FileKind::SymbolicLink,
-            atime_ms: 0,
-            atime_nsec: 0,
-            mtime_ms: 0,
-            mtime_nsec: 0,
-            ctime_ms: 0,
-            ctime_nsec: 0,
-            birthtime_ms: 0,
-            ino: identity.map_or(0, |tracked| tracked.ino),
-            nlink: identity.map_or(1, |tracked| tracked.nlink),
-            uid: 0,
-            gid: 0,
-        };
-        if let Some(identity) = identity {
-            identity.metadata.apply_to_stat(&mut stat);
-        }
-        stat
-    }
-
-    fn tracked_identity(&self, path: &str) -> VfsResult<Option<HostFilesystemTrackedIdentity>> {
-        let normalized = normalize_path(path);
-        let links = self.links.lock().map_err(|_| Self::link_state_error())?;
-        Ok(links.path_to_ino.get(&normalized).and_then(|ino| {
-            links
-                .inodes
-                .get(ino)
-                .map(|inode| HostFilesystemTrackedIdentity {
-                    canonical_path: inode.canonical_path.clone(),
-                    ino: *ino,
-                    nlink: inode.paths.len() as u64,
-                    metadata: inode.metadata.clone(),
-                })
-        }))
-    }
-
-    fn tracked_identity_for_stat(
-        &self,
-        path: &str,
-    ) -> VfsResult<Option<HostFilesystemTrackedIdentity>>
-    where
-        B: NativeSidecarBridge + Send + 'static,
-        BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-    {
-        let normalized = normalize_path(path);
-        if let Some(identity) = self.tracked_identity(&normalized)? {
-            return Ok(Some(identity));
-        }
-
-        let resolved = self.realpath(&normalized)?;
-        if resolved == normalized {
-            return Ok(None);
-        }
-
-        self.tracked_identity(&resolved)
-    }
-
-    fn tracked_successor(&self, path: &str) -> VfsResult<Option<String>> {
-        let normalized = normalize_path(path);
-        let links = self.links.lock().map_err(|_| Self::link_state_error())?;
-        Ok(links
-            .path_to_ino
-            .get(&normalized)
-            .and_then(|ino| links.inodes.get(ino))
-            .and_then(|inode| {
-                inode
-                    .paths
-                    .iter()
-                    .find(|candidate| **candidate != normalized)
-                    .cloned()
-            }))
-    }
-
-    fn ensure_tracked_path(&self, path: &str) -> VfsResult<u64> {
-        let normalized = normalize_path(path);
-        let mut links = self.links.lock().map_err(|_| Self::link_state_error())?;
-        if let Some(ino) = links.path_to_ino.get(&normalized).copied() {
-            return Ok(ino);
-        }
-
-        let ino = links.next_ino;
-        links.next_ino += 1;
-        links.path_to_ino.insert(normalized.clone(), ino);
-        links.inodes.insert(
-            ino,
-            HostFilesystemLinkedInode {
-                canonical_path: normalized.clone(),
-                paths: BTreeSet::from([normalized]),
-                metadata: HostFilesystemMetadataState::default(),
-            },
-        );
-        Ok(ino)
-    }
-
-    fn track_link(&self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let normalized_old = normalize_path(old_path);
-        let normalized_new = normalize_path(new_path);
-        let ino = self.ensure_tracked_path(&normalized_old)?;
-        let mut links = self.links.lock().map_err(|_| Self::link_state_error())?;
-        links.path_to_ino.insert(normalized_new.clone(), ino);
-        links
-            .inodes
-            .get_mut(&ino)
-            .expect("tracked inode should exist")
-            .paths
-            .insert(normalized_new);
-        Ok(())
-    }
-
-    fn metadata_target_path(&self, path: &str) -> VfsResult<String>
-    where
-        B: NativeSidecarBridge + Send + 'static,
-        BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-    {
-        if let Some(identity) = self.tracked_identity(path)? {
-            return Ok(identity.canonical_path);
-        }
-
-        let normalized = normalize_path(path);
-        self.bridge
-            .with_mut(|bridge| {
-                bridge.stat(PathRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized.clone(),
-                })
-            })
-            .map_err(Self::vfs_error)?;
-        self.realpath(&normalized)
-    }
-
-    fn update_metadata(
-        &self,
-        path: &str,
-        update: impl FnOnce(&mut HostFilesystemMetadataState),
-    ) -> VfsResult<()>
-    where
-        B: NativeSidecarBridge + Send + 'static,
-        BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-    {
-        let target = self.metadata_target_path(path)?;
-        let ino = self.ensure_tracked_path(&target)?;
-        let mut links = self.links.lock().map_err(|_| Self::link_state_error())?;
-        let inode = links
-            .inodes
-            .get_mut(&ino)
-            .expect("tracked inode should exist");
-        update(&mut inode.metadata);
-        Ok(())
-    }
-
-    fn apply_remove(&self, path: &str) -> VfsResult<()> {
-        let normalized = normalize_path(path);
-        let mut links = self.links.lock().map_err(|_| Self::link_state_error())?;
-        let Some(ino) = links.path_to_ino.remove(&normalized) else {
-            return Ok(());
-        };
-        let remove_inode = {
-            let inode = links
-                .inodes
-                .get_mut(&ino)
-                .expect("tracked inode should exist");
-            inode.paths.remove(&normalized);
-            if inode.paths.is_empty() {
-                true
-            } else {
-                if inode.canonical_path == normalized {
-                    inode.canonical_path = inode
-                        .paths
-                        .iter()
-                        .next()
-                        .expect("tracked inode should retain at least one path")
-                        .clone();
-                }
-                false
-            }
-        };
-        if remove_inode {
-            links.inodes.remove(&ino);
-        }
-        Ok(())
-    }
-
-    fn apply_rename(&self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let normalized_old = normalize_path(old_path);
-        let normalized_new = normalize_path(new_path);
-        let mut links = self.links.lock().map_err(|_| Self::link_state_error())?;
-        let Some(ino) = links.path_to_ino.remove(&normalized_old) else {
-            return Ok(());
-        };
-        links.path_to_ino.insert(normalized_new.clone(), ino);
-        let inode = links
-            .inodes
-            .get_mut(&ino)
-            .expect("tracked inode should exist");
-        inode.paths.remove(&normalized_old);
-        inode.paths.insert(normalized_new.clone());
-        if inode.canonical_path == normalized_old {
-            inode.canonical_path = normalized_new;
-        }
-        Ok(())
-    }
-
-    fn apply_rename_prefix(&self, old_prefix: &str, new_prefix: &str) -> VfsResult<()> {
-        let normalized_old = normalize_path(old_prefix);
-        let normalized_new = normalize_path(new_prefix);
-        let prefix = if normalized_old == "/" {
-            String::from("/")
-        } else {
-            format!("{}/", normalized_old.trim_end_matches('/'))
-        };
-
-        let mut links = self.links.lock().map_err(|_| Self::link_state_error())?;
-        let affected = links
-            .path_to_ino
-            .keys()
-            .filter(|path| *path == &normalized_old || path.starts_with(&prefix))
-            .cloned()
-            .collect::<Vec<_>>();
-
-        for old_path in affected {
-            let suffix = old_path
-                .strip_prefix(&normalized_old)
-                .expect("tracked path should match renamed prefix");
-            let new_path = if normalized_new == "/" {
-                normalize_path(&format!("/{}", suffix.trim_start_matches('/')))
-            } else if suffix.is_empty() {
-                normalized_new.clone()
-            } else {
-                normalize_path(&format!(
-                    "{}/{}",
-                    normalized_new.trim_end_matches('/'),
-                    suffix.trim_start_matches('/')
-                ))
-            };
-            let ino = links
-                .path_to_ino
-                .remove(&old_path)
-                .expect("tracked path should exist");
-            links.path_to_ino.insert(new_path.clone(), ino);
-            let inode = links
-                .inodes
-                .get_mut(&ino)
-                .expect("tracked inode should exist");
-            inode.paths.remove(&old_path);
-            inode.paths.insert(new_path.clone());
-            if inode.canonical_path == old_path {
-                inode.canonical_path = new_path;
-            }
-        }
-        Ok(())
-    }
-}
-
-#[cfg(test)]
-impl<B> VirtualFileSystem for HostFilesystem<B>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        let normalized = self
-            .tracked_identity(path)?
-            .map(|identity| identity.canonical_path)
-            .unwrap_or_else(|| normalize_path(path));
-        self.bridge
-            .with_mut(|bridge| {
-                bridge.read_file(ReadFileRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized,
-                })
-            })
-            .map_err(Self::vfs_error)
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        let normalized = normalize_path(path);
-        let mut entries = self
-            .bridge
-            .with_mut(|bridge| {
-                bridge.read_dir(ReadDirRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized.clone(),
-                })
-            })
-            .map_err(Self::vfs_error)?;
-        let links = self.links.lock().map_err(|_| Self::link_state_error())?;
-        for linked_path in links.path_to_ino.keys() {
-            if dirname(linked_path) != normalized {
-                continue;
-            }
-            let name = Path::new(linked_path)
-                .file_name()
-                .map(|value| value.to_string_lossy().into_owned())
-                .unwrap_or_else(|| linked_path.trim_start_matches('/').to_owned());
-            if entries.iter().all(|entry| entry.name != name) {
-                entries.push(secure_exec_bridge::DirectoryEntry {
-                    name,
-                    kind: FileKind::File,
-                });
-            }
-        }
-        Ok(entries.into_iter().map(|entry| entry.name).collect())
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        let normalized = normalize_path(path);
-        let mut entries = self
-            .bridge
-            .with_mut(|bridge| {
-                bridge.read_dir(ReadDirRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized.clone(),
-                })
-            })
-            .map_err(Self::vfs_error)?;
-        let links = self.links.lock().map_err(|_| Self::link_state_error())?;
-        for linked_path in links.path_to_ino.keys() {
-            if dirname(linked_path) != normalized {
-                continue;
-            }
-            let name = Path::new(linked_path)
-                .file_name()
-                .map(|value| value.to_string_lossy().into_owned())
-                .unwrap_or_else(|| linked_path.trim_start_matches('/').to_owned());
-            if entries.iter().all(|entry| entry.name != name) {
-                entries.push(secure_exec_bridge::DirectoryEntry {
-                    name,
-                    kind: FileKind::File,
-                });
-            }
-        }
-        Ok(entries
-            .into_iter()
-            .map(|entry| VirtualDirEntry {
-                name: entry.name,
-                is_directory: entry.kind == FileKind::Directory,
-                is_symbolic_link: entry.kind == FileKind::SymbolicLink,
-            })
-            .collect())
-    }
-
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        let normalized = self
-            .tracked_identity(path)?
-            .map(|identity| identity.canonical_path)
-            .unwrap_or_else(|| normalize_path(path));
-        self.bridge
-            .with_mut(|bridge| {
-                bridge.write_file(WriteFileRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized,
-                    contents: content.into(),
-                })
-            })
-            .map_err(Self::vfs_error)
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        let normalized = normalize_path(path);
-        self.bridge
-            .with_mut(|bridge| {
-                bridge.create_dir(CreateDirRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized,
-                    recursive: false,
-                })
-            })
-            .map_err(Self::vfs_error)
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        let normalized = normalize_path(path);
-        self.bridge
-            .with_mut(|bridge| {
-                bridge.create_dir(CreateDirRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized,
-                    recursive,
-                })
-            })
-            .map_err(Self::vfs_error)
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        if self.tracked_identity(path).ok().flatten().is_some() {
-            return true;
-        }
-        let normalized = normalize_path(path);
-        self.bridge
-            .with_mut(|bridge| {
-                bridge.exists(PathRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized,
-                })
-            })
-            .unwrap_or(false)
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        let identity = self.tracked_identity_for_stat(path)?;
-        let normalized = identity
-            .as_ref()
-            .map(|identity| identity.canonical_path.clone())
-            .unwrap_or_else(|| normalize_path(path));
-        let metadata = match self.bridge.with_mut(|bridge| {
-            bridge.stat(PathRequest {
-                vm_id: self.vm_id.clone(),
-                path: normalized.clone(),
-            })
-        }) {
-            Ok(metadata) => metadata,
-            Err(error) => {
-                if !self.exists(&normalized) {
-                    return Err(Self::bridge_path_not_found("stat", &normalized));
-                }
-                return Err(Self::vfs_error(error));
-            }
-        };
-        Ok(Self::file_metadata_to_stat(metadata, identity.as_ref()))
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        let normalized = normalize_path(path);
-        if let Some(identity) = self.tracked_identity(&normalized)? {
-            let canonical = identity.canonical_path;
-            let nlink = identity.nlink;
-            if canonical == normalized {
-                if nlink > 1 {
-                    let successor = self
-                        .tracked_successor(&normalized)?
-                        .expect("tracked inode should retain a successor path");
-                    self.bridge
-                        .with_mut(|bridge| {
-                            bridge.rename(RenameRequest {
-                                vm_id: self.vm_id.clone(),
-                                from_path: canonical.clone(),
-                                to_path: successor,
-                            })
-                        })
-                        .map_err(Self::vfs_error)?;
-                } else {
-                    self.bridge
-                        .with_mut(|bridge| {
-                            bridge.remove_file(PathRequest {
-                                vm_id: self.vm_id.clone(),
-                                path: canonical,
-                            })
-                        })
-                        .map_err(Self::vfs_error)?;
-                }
-            }
-            self.apply_remove(&normalized)?;
-            return Ok(());
-        }
-
-        self.bridge
-            .with_mut(|bridge| {
-                bridge.remove_file(PathRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized,
-                })
-            })
-            .map_err(Self::vfs_error)
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        let normalized = normalize_path(path);
-        self.bridge
-            .with_mut(|bridge| {
-                bridge.remove_dir(PathRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized,
-                })
-            })
-            .map_err(Self::vfs_error)
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let normalized_old = normalize_path(old_path);
-        let normalized_new = normalize_path(new_path);
-        let tracked = self.tracked_identity(&normalized_old)?;
-        if let Some(identity) = tracked {
-            let canonical = identity.canonical_path;
-            if self.exists(&normalized_new) {
-                return Err(VfsError::new(
-                    "EEXIST",
-                    format!("file already exists, rename '{new_path}'"),
-                ));
-            }
-            if canonical == normalized_old {
-                self.bridge
-                    .with_mut(|bridge| {
-                        bridge.rename(RenameRequest {
-                            vm_id: self.vm_id.clone(),
-                            from_path: canonical,
-                            to_path: normalized_new.clone(),
-                        })
-                    })
-                    .map_err(Self::vfs_error)?;
-            }
-            self.apply_rename(&normalized_old, &normalized_new)?;
-            return Ok(());
-        }
-
-        let old_kind = self
-            .bridge
-            .with_mut(|bridge| {
-                bridge.lstat(PathRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized_old.clone(),
-                })
-            })
-            .ok()
-            .map(|metadata| metadata.kind);
-        self.bridge
-            .with_mut(|bridge| {
-                bridge.rename(RenameRequest {
-                    vm_id: self.vm_id.clone(),
-                    from_path: normalized_old.clone(),
-                    to_path: normalized_new.clone(),
-                })
-            })
-            .map_err(Self::vfs_error)?;
-        if old_kind == Some(FileKind::Directory) {
-            self.apply_rename_prefix(&normalized_old, &normalized_new)?;
-        }
-        Ok(())
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        let original = normalize_path(path);
-        let mut normalized = original.clone();
-
-        for _ in 0..HOST_REALPATH_MAX_SYMLINK_DEPTH {
-            match self.lstat(&normalized) {
-                Ok(stat) if stat.is_symbolic_link => {
-                    let target = self.read_link(&normalized)?;
-                    normalized = if target.starts_with('/') {
-                        normalize_path(&target)
-                    } else {
-                        normalize_path(&format!("{}/{}", dirname(&normalized), target))
-                    };
-                }
-                Ok(_) | Err(_) => return Ok(normalized),
-            }
-        }
-
-        Err(VfsError::new(
-            "ELOOP",
-            format!("too many levels of symbolic links, '{original}'"),
-        ))
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        self.bridge
-            .with_mut(|bridge| {
-                bridge.symlink(SymlinkRequest {
-                    vm_id: self.vm_id.clone(),
-                    target_path: normalize_path(target),
-                    link_path: normalize_path(link_path),
-                })
-            })
-            .map_err(Self::vfs_error)
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        let normalized = normalize_path(path);
-        self.bridge
-            .with_mut(|bridge| {
-                bridge.read_link(PathRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized,
-                })
-            })
-            .map_err(Self::vfs_error)
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        let identity = self.tracked_identity(path)?;
-        let normalized = identity
-            .as_ref()
-            .map(|identity| identity.canonical_path.clone())
-            .unwrap_or_else(|| normalize_path(path));
-        let metadata = match self.bridge.with_mut(|bridge| {
-            bridge.lstat(PathRequest {
-                vm_id: self.vm_id.clone(),
-                path: normalized.clone(),
-            })
-        }) {
-            Ok(metadata) => metadata,
-            Err(error) => {
-                let exists = self
-                    .bridge
-                    .with_mut(|bridge| {
-                        bridge.exists(PathRequest {
-                            vm_id: self.vm_id.clone(),
-                            path: normalized.clone(),
-                        })
-                    })
-                    .unwrap_or(false);
-                if !exists {
-                    return Err(Self::bridge_path_not_found("lstat", &normalized));
-                }
-                return Err(Self::vfs_error(error));
-            }
-        };
-        Ok(Self::file_metadata_to_stat(metadata, identity.as_ref()))
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let normalized_old = normalize_path(old_path);
-        let normalized_new = normalize_path(new_path);
-        if self.exists(&normalized_new) {
-            return Err(VfsError::new(
-                "EEXIST",
-                format!("file already exists, link '{new_path}'"),
-            ));
-        }
-
-        let old_stat = self.stat(&normalized_old)?;
-        if old_stat.is_directory || old_stat.is_symbolic_link {
-            return Err(VfsError::new(
-                "EPERM",
-                format!("operation not permitted, link '{old_path}'"),
-            ));
-        }
-        let parent = self.lstat(&dirname(&normalized_new))?;
-        if !parent.is_directory {
-            return Err(VfsError::new(
-                "ENOENT",
-                format!("no such file or directory, link '{new_path}'"),
-            ));
-        }
-
-        self.track_link(&normalized_old, &normalized_new)
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        let normalized = normalize_path(path);
-        self.bridge
-            .with_mut(|bridge| {
-                bridge.chmod(ChmodRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized,
-                    mode,
-                })
-            })
-            .map_err(Self::vfs_error)
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        let now = Self::current_time_ms();
-        self.update_metadata(path, |metadata| {
-            metadata.uid = Some(uid);
-            metadata.gid = Some(gid);
-            metadata.ctime_ms = Some(now);
-        })
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        let now = Self::current_time_ms();
-        self.update_metadata(path, |metadata| {
-            metadata.atime_ms = Some(atime_ms);
-            metadata.mtime_ms = Some(mtime_ms);
-            metadata.ctime_ms = Some(now);
-        })
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        let normalized = self
-            .tracked_identity(path)?
-            .map(|identity| identity.canonical_path)
-            .unwrap_or_else(|| normalize_path(path));
-        self.bridge
-            .with_mut(|bridge| {
-                bridge.truncate(TruncateRequest {
-                    vm_id: self.vm_id.clone(),
-                    path: normalized,
-                    len: length,
-                })
-            })
-            .map_err(Self::vfs_error)
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        let bytes = self.read_file(path)?;
-        let start = offset as usize;
-        if start >= bytes.len() {
-            return Ok(Vec::new());
-        }
-        let end = start.saturating_add(length).min(bytes.len());
-        Ok(bytes[start..end].to_vec())
-    }
-}
-
-#[cfg(test)]
-#[derive(Clone)]
-pub(crate) struct ScopedHostFilesystem<B> {
-    inner: HostFilesystem<B>,
-    guest_root: String,
-}
-
-#[cfg(test)]
-impl<B> ScopedHostFilesystem<B> {
-    pub(crate) fn new(inner: HostFilesystem<B>, guest_root: impl Into<String>) -> Self {
-        Self {
-            inner,
-            guest_root: normalize_path(&guest_root.into()),
-        }
-    }
-
-    fn scoped_path(&self, path: &str) -> String {
-        let normalized = normalize_path(path);
-        if self.guest_root == "/" {
-            return normalized;
-        }
-        if normalized == "/" {
-            return self.guest_root.clone();
-        }
-        format!(
-            "{}/{}",
-            self.guest_root.trim_end_matches('/'),
-            normalized.trim_start_matches('/')
-        )
-    }
-
-    fn scoped_target(&self, target: &str) -> String {
-        if target.starts_with('/') {
-            self.scoped_path(target)
-        } else {
-            target.to_owned()
-        }
-    }
-
-    fn strip_guest_root_prefix<'a>(&self, target: &'a str) -> Option<&'a str> {
-        if target == self.guest_root {
-            Some("")
-        } else {
-            target
-                .strip_prefix(self.guest_root.as_str())
-                .filter(|stripped| stripped.starts_with('/'))
-        }
-    }
-
-    pub(crate) fn unscoped_target(&self, target: String) -> String {
-        if !target.starts_with('/') || self.guest_root == "/" {
-            return target;
-        }
-        match self.strip_guest_root_prefix(&target) {
-            Some(stripped) => format!("/{}", stripped.trim_start_matches('/')),
-            None => target,
-        }
-    }
-}
-
-#[cfg(test)]
-impl<B> VirtualFileSystem for ScopedHostFilesystem<B>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        self.inner.read_file(&self.scoped_path(path))
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        self.inner.read_dir(&self.scoped_path(path))
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        self.inner.read_dir_with_types(&self.scoped_path(path))
-    }
-
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        self.inner.write_file(&self.scoped_path(path), content)
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.inner.create_dir(&self.scoped_path(path))
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        self.inner.mkdir(&self.scoped_path(path), recursive)
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        self.inner.exists(&self.scoped_path(path))
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        self.inner.stat(&self.scoped_path(path))
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        self.inner.remove_file(&self.scoped_path(path))
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.inner.remove_dir(&self.scoped_path(path))
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        self.inner
-            .rename(&self.scoped_path(old_path), &self.scoped_path(new_path))
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        let resolved = self.inner.realpath(&self.scoped_path(path))?;
-        Ok(self.unscoped_target(resolved))
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        self.inner
-            .symlink(&self.scoped_target(target), &self.scoped_path(link_path))
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        self.inner
-            .read_link(&self.scoped_path(path))
-            .map(|target| self.unscoped_target(target))
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        self.inner.lstat(&self.scoped_path(path))
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        self.inner
-            .link(&self.scoped_path(old_path), &self.scoped_path(new_path))
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        self.inner.chmod(&self.scoped_path(path), mode)
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        self.inner.chown(&self.scoped_path(path), uid, gid)
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        self.inner
-            .utimes(&self.scoped_path(path), atime_ms, mtime_ms)
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        self.inner.truncate(&self.scoped_path(path), length)
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        self.inner.pread(&self.scoped_path(path), offset, length)
-    }
-}
-
-#[derive(Clone)]
-pub(crate) struct MountPluginContext<B> {
-    pub(crate) bridge: SharedBridge<B>,
-    pub(crate) connection_id: String,
-    pub(crate) session_id: String,
-    pub(crate) vm_id: String,
-    pub(crate) sidecar_requests: SharedSidecarRequestClient,
-    pub(crate) max_pread_bytes: Option<usize>,
-}
-
-impl<B> crate::plugins::host_dir::HostDirReadLimitContext for MountPluginContext<B> {
-    fn host_dir_max_read_bytes(&self) -> Option<usize> {
-        self.max_pread_bytes
-    }
-}
-
-#[derive(Debug)]
-struct MemoryMountPlugin;
-
-impl<Context> FileSystemPluginFactory<Context> for MemoryMountPlugin {
-    fn plugin_id(&self) -> &'static str {
-        "memory"
-    }
-
-    fn open(
-        &self,
-        _request: OpenFileSystemPluginRequest<'_, Context>,
-    ) -> Result<Box<dyn secure_exec_kernel::mount_table::MountedFileSystem>, PluginError> {
-        Ok(Box::new(MountedVirtualFileSystem::new(
-            MemoryFileSystem::new(),
-        )))
-    }
-}
-
-pub(crate) fn bridge_permissions<B>(bridge: SharedBridge<B>, vm_id: &str) -> Permissions
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let vm_id = vm_id.to_owned();
-
-    let filesystem_bridge = bridge.clone();
-    let filesystem_vm_id = vm_id.clone();
-    let network_bridge = bridge.clone();
-    let network_vm_id = vm_id.clone();
-    let command_bridge = bridge.clone();
-    let command_vm_id = vm_id.clone();
-    let environment_bridge = bridge;
-
-    Permissions {
-        filesystem: Some(Arc::new(move |request: &FsAccessRequest| {
-            let access = match request.op {
-                FsOperation::Read => FilesystemAccess::Read,
-                FsOperation::Write => FilesystemAccess::Write,
-                FsOperation::Mkdir | FsOperation::CreateDir => FilesystemAccess::CreateDir,
-                FsOperation::ReadDir => FilesystemAccess::ReadDir,
-                FsOperation::Stat | FsOperation::Exists => FilesystemAccess::Stat,
-                FsOperation::Remove => FilesystemAccess::Remove,
-                FsOperation::Rename => FilesystemAccess::Rename,
-                FsOperation::Symlink => FilesystemAccess::Symlink,
-                FsOperation::ReadLink => FilesystemAccess::ReadLink,
-                FsOperation::Link => FilesystemAccess::Write,
-                FsOperation::Chmod => FilesystemAccess::Write,
-                FsOperation::Chown => FilesystemAccess::Write,
-                FsOperation::Utimes => FilesystemAccess::Write,
-                FsOperation::Truncate => FilesystemAccess::Truncate,
-                FsOperation::MountSensitive => FilesystemAccess::Write,
-            };
-            let policy = if request.op == FsOperation::MountSensitive {
-                "fs.mount_sensitive"
-            } else {
-                filesystem_permission_capability(access)
-            };
-            let decision = if request.op == FsOperation::MountSensitive {
-                filesystem_bridge
-                    .static_permission_decision(
-                        &filesystem_vm_id,
-                        policy,
-                        "fs",
-                        Some(&request.path),
-                    )
-                    .unwrap_or_else(|| {
-                        PermissionDecision::deny("missing fs.mount_sensitive permission policy")
-                    })
-            } else {
-                filesystem_bridge.filesystem_decision(&filesystem_vm_id, &request.path, access)
-            };
-
-            if !decision.allow {
-                emit_security_audit_event(
-                    &filesystem_bridge,
-                    &filesystem_vm_id,
-                    "security.permission.denied",
-                    audit_fields([
-                        (
-                            String::from("operation"),
-                            filesystem_operation_label(request.op).to_owned(),
-                        ),
-                        (String::from("path"), request.path.clone()),
-                        (String::from("policy"), String::from(policy)),
-                        (
-                            String::from("reason"),
-                            decision
-                                .reason
-                                .clone()
-                                .unwrap_or_else(|| String::from("permission denied")),
-                        ),
-                    ]),
-                );
-            }
-
-            decision
-        })),
-        network: Some(Arc::new(move |request: &NetworkAccessRequest| {
-            network_bridge.network_decision(&network_vm_id, request)
-        })),
-        child_process: Some(Arc::new(move |request: &CommandAccessRequest| {
-            command_bridge.command_decision(&command_vm_id, request)
-        })),
-        environment: Some(Arc::new(move |request: &EnvAccessRequest| {
-            environment_bridge.environment_decision(&vm_id, request)
-        })),
-    }
-}
-
-fn filesystem_operation_label(operation: FsOperation) -> &'static str {
-    match operation {
-        FsOperation::Read => "read",
-        FsOperation::Write => "write",
-        FsOperation::Mkdir => "mkdir",
-        FsOperation::CreateDir => "createDir",
-        FsOperation::ReadDir => "readdir",
-        FsOperation::Stat => "stat",
-        FsOperation::Remove => "rm",
-        FsOperation::Rename => "rename",
-        FsOperation::Exists => "exists",
-        FsOperation::Symlink => "symlink",
-        FsOperation::ReadLink => "readlink",
-        FsOperation::Link => "link",
-        FsOperation::Chmod => "chmod",
-        FsOperation::Chown => "chown",
-        FsOperation::Utimes => "utimes",
-        FsOperation::Truncate => "truncate",
-        FsOperation::MountSensitive => "mount",
-    }
-}
-
-pub(crate) fn build_mount_plugin_registry<B>(
-) -> Result<FileSystemPluginRegistry<MountPluginContext<B>>, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let mut registry = FileSystemPluginRegistry::new();
-    registry.register(MemoryMountPlugin).map_err(plugin_error)?;
-    register_native_mount_plugins(&mut registry).map_err(plugin_error)?;
-    Ok(registry)
-}
diff --git a/crates/sidecar/src/crypto_cipher.rs b/crates/sidecar/src/crypto_cipher.rs
deleted file mode 100644
index 088c35225..000000000
--- a/crates/sidecar/src/crypto_cipher.rs
+++ /dev/null
@@ -1,633 +0,0 @@
-//! Pure-Rust (RustCrypto) AES cipher primitives backing guest `node:crypto`
-//! `createCipheriv`/`createDecipheriv` and SubtleCrypto AES, replacing the prior
-//! OpenSSL `Crypter`. Supports `aes-{128,192,256}-{cbc,ctr,gcm}` with streaming
-//! `update`/`final`, PKCS#7 auto-padding (CBC), and AEAD aad/auth-tag handling
-//! (GCM). Behaviour matches Node so the concatenation of every `update()` output
-//! plus `final()` equals the reference ciphertext/plaintext byte-for-byte.
-//!
-//! This module is intentionally backend-agnostic (no OpenSSL, no host coupling)
-//! so the same implementation can serve the native and wasm sidecars.
-
-use aes::cipher::generic_array::GenericArray;
-use aes::cipher::{BlockDecrypt, BlockEncrypt, KeyInit, KeyIvInit, StreamCipher};
-use aes::{Aes128, Aes192, Aes256};
-use aes_gcm::aead::consts::U12;
-use aes_gcm::aead::AeadInPlace;
-use aes_gcm::AesGcm;
-
-const AES_BLOCK_LEN: usize = 16;
-
-/// Error type for cipher operations. Mapped by the caller to a `SidecarError`.
-#[derive(Debug)]
-pub(crate) struct CipherError(pub(crate) String);
-
-impl CipherError {
-    fn new(message: impl Into<String>) -> Self {
-        CipherError(message.into())
-    }
-}
-
-type Result<T> = std::result::Result<T, CipherError>;
-
-#[derive(Clone, Copy, PartialEq, Eq)]
-enum AesMode {
-    Cbc,
-    Ctr,
-    Gcm,
-}
-
-#[derive(Clone, Copy, PartialEq, Eq)]
-enum AesBits {
-    A128,
-    A192,
-    A256,
-}
-
-impl AesBits {
-    fn key_len(self) -> usize {
-        match self {
-            AesBits::A128 => 16,
-            AesBits::A192 => 24,
-            AesBits::A256 => 32,
-        }
-    }
-}
-
-/// Parse a Node cipher name (`aes-256-cbc`) into (bits, mode).
-fn parse_algorithm(name: &str) -> Result<(AesBits, AesMode)> {
-    let lower = name.to_ascii_lowercase();
-    let (bits, mode) = match lower.as_str() {
-        "aes-128-cbc" => (AesBits::A128, AesMode::Cbc),
-        "aes-192-cbc" => (AesBits::A192, AesMode::Cbc),
-        "aes-256-cbc" => (AesBits::A256, AesMode::Cbc),
-        "aes-128-ctr" => (AesBits::A128, AesMode::Ctr),
-        "aes-192-ctr" => (AesBits::A192, AesMode::Ctr),
-        "aes-256-ctr" => (AesBits::A256, AesMode::Ctr),
-        "aes-128-gcm" => (AesBits::A128, AesMode::Gcm),
-        "aes-192-gcm" => (AesBits::A192, AesMode::Gcm),
-        "aes-256-gcm" => (AesBits::A256, AesMode::Gcm),
-        other => {
-            return Err(CipherError::new(format!(
-                "unsupported crypto cipher algorithm {other}"
-            )))
-        }
-    };
-    Ok((bits, mode))
-}
-
-/// Returns true when the algorithm is an AEAD (GCM) cipher.
-pub(crate) fn is_aead(algorithm: &str) -> bool {
-    algorithm.to_ascii_lowercase().ends_with("-gcm")
-}
-
-/// Default AEAD authentication tag length in bytes.
-pub(crate) fn default_aead_tag_len() -> usize {
-    AES_BLOCK_LEN
-}
-
-enum AesBlockCipher {
-    A128(Aes128),
-    A192(Aes192),
-    A256(Aes256),
-}
-
-impl AesBlockCipher {
-    fn new(bits: AesBits, key: &[u8]) -> Result<Self> {
-        if key.len() != bits.key_len() {
-            return Err(CipherError::new(format!(
-                "Invalid key length: expected {} bytes, got {}",
-                bits.key_len(),
-                key.len()
-            )));
-        }
-        Ok(match bits {
-            AesBits::A128 => AesBlockCipher::A128(Aes128::new(GenericArray::from_slice(key))),
-            AesBits::A192 => AesBlockCipher::A192(Aes192::new(GenericArray::from_slice(key))),
-            AesBits::A256 => AesBlockCipher::A256(Aes256::new(GenericArray::from_slice(key))),
-        })
-    }
-
-    fn encrypt_block(&self, block: &mut [u8; AES_BLOCK_LEN]) {
-        let ga = GenericArray::from_mut_slice(block);
-        match self {
-            AesBlockCipher::A128(cipher) => cipher.encrypt_block(ga),
-            AesBlockCipher::A192(cipher) => cipher.encrypt_block(ga),
-            AesBlockCipher::A256(cipher) => cipher.encrypt_block(ga),
-        }
-    }
-
-    fn decrypt_block(&self, block: &mut [u8; AES_BLOCK_LEN]) {
-        let ga = GenericArray::from_mut_slice(block);
-        match self {
-            AesBlockCipher::A128(cipher) => cipher.decrypt_block(ga),
-            AesBlockCipher::A192(cipher) => cipher.decrypt_block(ga),
-            AesBlockCipher::A256(cipher) => cipher.decrypt_block(ga),
-        }
-    }
-}
-
-enum AesCtrStream {
-    A128(ctr::Ctr128BE<Aes128>),
-    A192(ctr::Ctr128BE<Aes192>),
-    A256(ctr::Ctr128BE<Aes256>),
-}
-
-impl AesCtrStream {
-    fn new(bits: AesBits, key: &[u8], iv: &[u8]) -> Result<Self> {
-        if key.len() != bits.key_len() {
-            return Err(CipherError::new(format!(
-                "Invalid key length: expected {} bytes, got {}",
-                bits.key_len(),
-                key.len()
-            )));
-        }
-        if iv.len() != AES_BLOCK_LEN {
-            return Err(CipherError::new(format!(
-                "Invalid IV length: expected {AES_BLOCK_LEN} bytes, got {}",
-                iv.len()
-            )));
-        }
-        let invalid = |_| CipherError::new("Invalid key/IV length for AES-CTR");
-        Ok(match bits {
-            AesBits::A128 => AesCtrStream::A128(
-                ctr::Ctr128BE::<Aes128>::new_from_slices(key, iv).map_err(invalid)?,
-            ),
-            AesBits::A192 => AesCtrStream::A192(
-                ctr::Ctr128BE::<Aes192>::new_from_slices(key, iv).map_err(invalid)?,
-            ),
-            AesBits::A256 => AesCtrStream::A256(
-                ctr::Ctr128BE::<Aes256>::new_from_slices(key, iv).map_err(invalid)?,
-            ),
-        })
-    }
-
-    fn apply(&mut self, buf: &mut [u8]) {
-        match self {
-            AesCtrStream::A128(stream) => stream.apply_keystream(buf),
-            AesCtrStream::A192(stream) => stream.apply_keystream(buf),
-            AesCtrStream::A256(stream) => stream.apply_keystream(buf),
-        }
-    }
-}
-
-struct CbcState {
-    cipher: AesBlockCipher,
-    /// Previous ciphertext block used for chaining (initialised to the IV).
-    chain: [u8; AES_BLOCK_LEN],
-    /// Pending input bytes that have not yet formed a processable block.
-    buffer: Vec<u8>,
-    decrypt: bool,
-    pad: bool,
-}
-
-enum CipherKind {
-    Cbc(CbcState),
-    Ctr(AesCtrStream),
-    Gcm(GcmState),
-}
-
-struct GcmState {
-    bits: AesBits,
-    key: Vec<u8>,
-    iv: Vec<u8>,
-    aad: Vec<u8>,
-    buffer: Vec<u8>,
-    decrypt: bool,
-    /// Caller-supplied authentication tag (decrypt only).
-    auth_tag: Option<Vec<u8>>,
-    tag_len: usize,
-}
-
-/// Streaming AES cipher session mirroring Node's `Cipheriv`/`Decipheriv`.
-pub(crate) struct StreamCipherSession {
-    kind: CipherKind,
-}
-
-impl StreamCipherSession {
-    /// Construct a cipher session. `pad` controls PKCS#7 auto-padding for CBC
-    /// (Node's `setAutoPadding`). `aad`/`auth_tag` apply to AEAD (GCM) modes.
-    #[allow(clippy::too_many_arguments)] // mirrors Node's createCipheriv surface
-    pub(crate) fn new(
-        algorithm: &str,
-        key: &[u8],
-        iv: Option<&[u8]>,
-        decrypt: bool,
-        pad: bool,
-        aad: Option<&[u8]>,
-        auth_tag: Option<&[u8]>,
-        tag_len: usize,
-    ) -> Result<Self> {
-        let (bits, mode) = parse_algorithm(algorithm)?;
-        let kind = match mode {
-            AesMode::Cbc => {
-                let iv = iv.ok_or_else(|| CipherError::new("CBC cipher requires an IV"))?;
-                if iv.len() != AES_BLOCK_LEN {
-                    return Err(CipherError::new(format!(
-                        "Invalid IV length: expected {AES_BLOCK_LEN} bytes, got {}",
-                        iv.len()
-                    )));
-                }
-                let mut chain = [0_u8; AES_BLOCK_LEN];
-                chain.copy_from_slice(iv);
-                CipherKind::Cbc(CbcState {
-                    cipher: AesBlockCipher::new(bits, key)?,
-                    chain,
-                    buffer: Vec::new(),
-                    decrypt,
-                    pad,
-                })
-            }
-            AesMode::Ctr => {
-                let iv = iv.ok_or_else(|| CipherError::new("CTR cipher requires an IV"))?;
-                CipherKind::Ctr(AesCtrStream::new(bits, key, iv)?)
-            }
-            AesMode::Gcm => {
-                let iv = iv.ok_or_else(|| CipherError::new("GCM cipher requires an IV"))?;
-                if key.len() != bits.key_len() {
-                    return Err(CipherError::new(format!(
-                        "Invalid key length: expected {} bytes, got {}",
-                        bits.key_len(),
-                        key.len()
-                    )));
-                }
-                CipherKind::Gcm(GcmState {
-                    bits,
-                    key: key.to_vec(),
-                    iv: iv.to_vec(),
-                    aad: aad.map(<[u8]>::to_vec).unwrap_or_default(),
-                    buffer: Vec::new(),
-                    decrypt,
-                    auth_tag: auth_tag.map(<[u8]>::to_vec),
-                    tag_len: if tag_len == 0 {
-                        default_aead_tag_len()
-                    } else {
-                        tag_len
-                    },
-                })
-            }
-        };
-        Ok(StreamCipherSession { kind })
-    }
-
-    /// Process input, returning whatever output is ready (Node `update`).
-    pub(crate) fn update(&mut self, data: &[u8]) -> Result<Vec<u8>> {
-        match &mut self.kind {
-            CipherKind::Cbc(state) => Ok(cbc_update(state, data)),
-            CipherKind::Ctr(stream) => {
-                let mut output = data.to_vec();
-                stream.apply(&mut output);
-                Ok(output)
-            }
-            CipherKind::Gcm(state) => {
-                state.buffer.extend_from_slice(data);
-                Ok(Vec::new())
-            }
-        }
-    }
-
-    /// Flush the cipher (Node `final`). For AEAD encryption, the authentication
-    /// tag is returned alongside the final output bytes.
-    pub(crate) fn finalize(self) -> Result<CipherFinal> {
-        match self.kind {
-            CipherKind::Cbc(state) => Ok(CipherFinal {
-                data: cbc_finalize(state)?,
-                auth_tag: None,
-            }),
-            CipherKind::Ctr(_) => Ok(CipherFinal {
-                data: Vec::new(),
-                auth_tag: None,
-            }),
-            CipherKind::Gcm(state) => gcm_finalize(state),
-        }
-    }
-}
-
-/// Output of `finalize`, optionally carrying an AEAD auth tag.
-pub(crate) struct CipherFinal {
-    pub(crate) data: Vec<u8>,
-    pub(crate) auth_tag: Option<Vec<u8>>,
-}
-
-fn cbc_update(state: &mut CbcState, data: &[u8]) -> Vec<u8> {
-    state.buffer.extend_from_slice(data);
-    let mut output = Vec::new();
-    // For decryption with padding we must retain the final block so `finalize`
-    // can strip PKCS#7; otherwise process every complete block now.
-    let reserve = usize::from(state.decrypt && state.pad);
-    while state.buffer.len() > reserve * AES_BLOCK_LEN
-        && state.buffer.len() >= AES_BLOCK_LEN
-        && state.buffer.len() - AES_BLOCK_LEN >= reserve * AES_BLOCK_LEN
-    {
-        let mut block = [0_u8; AES_BLOCK_LEN];
-        block.copy_from_slice(&state.buffer[..AES_BLOCK_LEN]);
-        let processed = cbc_process_block(state, block);
-        output.extend_from_slice(&processed);
-        state.buffer.drain(..AES_BLOCK_LEN);
-    }
-    output
-}
-
-fn cbc_process_block(state: &mut CbcState, mut block: [u8; AES_BLOCK_LEN]) -> [u8; AES_BLOCK_LEN] {
-    if state.decrypt {
-        let ciphertext = block;
-        state.cipher.decrypt_block(&mut block);
-        for (byte, chain) in block.iter_mut().zip(state.chain.iter()) {
-            *byte ^= *chain;
-        }
-        state.chain = ciphertext;
-        block
-    } else {
-        for (byte, chain) in block.iter_mut().zip(state.chain.iter()) {
-            *byte ^= *chain;
-        }
-        state.cipher.encrypt_block(&mut block);
-        state.chain = block;
-        block
-    }
-}
-
-fn cbc_finalize(mut state: CbcState) -> Result<Vec<u8>> {
-    if state.decrypt {
-        if state.pad {
-            if state.buffer.len() != AES_BLOCK_LEN {
-                return Err(CipherError::new(
-                    "wrong final block length (bad decrypt input)",
-                ));
-            }
-            let mut block = [0_u8; AES_BLOCK_LEN];
-            block.copy_from_slice(&state.buffer);
-            let plaintext = cbc_process_block(&mut state, block);
-            strip_pkcs7(&plaintext)
-        } else {
-            if !state.buffer.is_empty() {
-                return Err(CipherError::new(
-                    "wrong final block length (bad decrypt input)",
-                ));
-            }
-            Ok(Vec::new())
-        }
-    } else if state.pad {
-        // PKCS#7: always emit one padded block, even when the remainder is empty.
-        let remainder = state.buffer.len();
-        let pad = AES_BLOCK_LEN - remainder;
-        let mut block = [0_u8; AES_BLOCK_LEN];
-        block[..remainder].copy_from_slice(&state.buffer);
-        for byte in block.iter_mut().skip(remainder) {
-            *byte = pad as u8;
-        }
-        Ok(cbc_process_block(&mut state, block).to_vec())
-    } else {
-        if !state.buffer.is_empty() {
-            return Err(CipherError::new(
-                "data not a multiple of block length (no padding)",
-            ));
-        }
-        Ok(Vec::new())
-    }
-}
-
-fn strip_pkcs7(block: &[u8]) -> Result<Vec<u8>> {
-    let pad = *block
-        .last()
-        .ok_or_else(|| CipherError::new("empty block during unpad"))? as usize;
-    if pad == 0 || pad > AES_BLOCK_LEN || pad > block.len() {
-        return Err(CipherError::new("bad decrypt (invalid PKCS#7 padding)"));
-    }
-    if block[block.len() - pad..]
-        .iter()
-        .any(|&byte| byte as usize != pad)
-    {
-        return Err(CipherError::new("bad decrypt (invalid PKCS#7 padding)"));
-    }
-    Ok(block[..block.len() - pad].to_vec())
-}
-
-fn gcm_cipher(bits: AesBits, key: &[u8]) -> Result<GcmAead> {
-    let invalid = |_| CipherError::new("Invalid key length for AES-GCM");
-    Ok(match bits {
-        AesBits::A128 => GcmAead::A128(Box::new(
-            AesGcm::<Aes128, U12>::new_from_slice(key).map_err(invalid)?,
-        )),
-        AesBits::A192 => GcmAead::A192(Box::new(
-            AesGcm::<Aes192, U12>::new_from_slice(key).map_err(invalid)?,
-        )),
-        AesBits::A256 => GcmAead::A256(Box::new(
-            AesGcm::<Aes256, U12>::new_from_slice(key).map_err(invalid)?,
-        )),
-    })
-}
-
-enum GcmAead {
-    A128(Box<AesGcm<Aes128, U12>>),
-    A192(Box<AesGcm<Aes192, U12>>),
-    A256(Box<AesGcm<Aes256, U12>>),
-}
-
-impl GcmAead {
-    fn encrypt_detached(&self, nonce: &[u8], aad: &[u8], buffer: &mut [u8]) -> Result<Vec<u8>> {
-        let nonce = GenericArray::from_slice(nonce);
-        let tag = match self {
-            GcmAead::A128(c) => c.encrypt_in_place_detached(nonce, aad, buffer),
-            GcmAead::A192(c) => c.encrypt_in_place_detached(nonce, aad, buffer),
-            GcmAead::A256(c) => c.encrypt_in_place_detached(nonce, aad, buffer),
-        }
-        .map_err(|_| CipherError::new("AEAD encryption failed"))?;
-        Ok(tag.to_vec())
-    }
-
-    fn decrypt_detached(
-        &self,
-        nonce: &[u8],
-        aad: &[u8],
-        buffer: &mut [u8],
-        tag: &[u8],
-    ) -> Result<()> {
-        let nonce = GenericArray::from_slice(nonce);
-        let tag = GenericArray::from_slice(tag);
-        match self {
-            GcmAead::A128(c) => c.decrypt_in_place_detached(nonce, aad, buffer, tag),
-            GcmAead::A192(c) => c.decrypt_in_place_detached(nonce, aad, buffer, tag),
-            GcmAead::A256(c) => c.decrypt_in_place_detached(nonce, aad, buffer, tag),
-        }
-        .map_err(|_| CipherError::new("Unsupported state or unable to authenticate data"))
-    }
-}
-
-fn gcm_finalize(state: GcmState) -> Result<CipherFinal> {
-    if state.iv.len() != 12 {
-        return Err(CipherError::new(format!(
-            "GCM requires a 12-byte IV, got {}",
-            state.iv.len()
-        )));
-    }
-    let cipher = gcm_cipher(state.bits, &state.key)?;
-    let mut buffer = state.buffer.clone();
-    if state.decrypt {
-        let tag = state
-            .auth_tag
-            .as_ref()
-            .ok_or_else(|| CipherError::new("missing AEAD auth tag for decryption"))?;
-        if tag.len() != default_aead_tag_len() {
-            return Err(CipherError::new(format!(
-                "GCM auth tag must be {} bytes, got {}",
-                default_aead_tag_len(),
-                tag.len()
-            )));
-        }
-        cipher.decrypt_detached(&state.iv, &state.aad, &mut buffer, tag)?;
-        Ok(CipherFinal {
-            data: buffer,
-            auth_tag: None,
-        })
-    } else {
-        let mut tag = cipher.encrypt_detached(&state.iv, &state.aad, &mut buffer)?;
-        tag.truncate(state.tag_len);
-        Ok(CipherFinal {
-            data: buffer,
-            auth_tag: Some(tag),
-        })
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    fn encrypt_all(
-        algorithm: &str,
-        key: &[u8],
-        iv: &[u8],
-        plaintext: &[u8],
-    ) -> (Vec<u8>, Option<Vec<u8>>) {
-        let mut session =
-            StreamCipherSession::new(algorithm, key, Some(iv), false, true, None, None, 16)
-                .unwrap();
-        let mut out = session.update(plaintext).unwrap();
-        let fin = session.finalize().unwrap();
-        out.extend_from_slice(&fin.data);
-        (out, fin.auth_tag)
-    }
-
-    fn decrypt_all(
-        algorithm: &str,
-        key: &[u8],
-        iv: &[u8],
-        ciphertext: &[u8],
-        tag: Option<&[u8]>,
-    ) -> Vec<u8> {
-        let mut session =
-            StreamCipherSession::new(algorithm, key, Some(iv), true, true, None, tag, 16).unwrap();
-        let mut out = session.update(ciphertext).unwrap();
-        let fin = session.finalize().unwrap();
-        out.extend_from_slice(&fin.data);
-        out
-    }
-
-    #[test]
-    fn aes_256_cbc_roundtrip() {
-        let key = [7_u8; 32];
-        let iv = [9_u8; 16];
-        let plaintext = b"secure-exec-crypto-surface";
-        let (ciphertext, _) = encrypt_all("aes-256-cbc", &key, &iv, plaintext);
-        let recovered = decrypt_all("aes-256-cbc", &key, &iv, &ciphertext, None);
-        assert_eq!(recovered, plaintext);
-    }
-
-    #[test]
-    fn aes_256_cbc_matches_known_vector() {
-        // NIST SP 800-38A F.2.5 CBC-AES256.Encrypt, first block.
-        let key = [
-            0x60, 0x3d, 0xeb, 0x10, 0x15, 0xca, 0x71, 0xbe, 0x2b, 0x73, 0xae, 0xf0, 0x85, 0x7d,
-            0x77, 0x81, 0x1f, 0x35, 0x2c, 0x07, 0x3b, 0x61, 0x08, 0xd7, 0x2d, 0x98, 0x10, 0xa3,
-            0x09, 0x14, 0xdf, 0xf4,
-        ];
-        let iv = [
-            0x00, 0x01, 0x02, 0x03, 0x04, 0x05, 0x06, 0x07, 0x08, 0x09, 0x0a, 0x0b, 0x0c, 0x0d,
-            0x0e, 0x0f,
-        ];
-        let plaintext = [
-            0x6b, 0xc1, 0xbe, 0xe2, 0x2e, 0x40, 0x9f, 0x96, 0xe9, 0x3d, 0x7e, 0x11, 0x73, 0x93,
-            0x17, 0x2a,
-        ];
-        // Disable padding so the single block maps 1:1 to the known ciphertext.
-        let mut session =
-            StreamCipherSession::new("aes-256-cbc", &key, Some(&iv), false, false, None, None, 16)
-                .unwrap();
-        let mut out = session.update(&plaintext).unwrap();
-        out.extend_from_slice(&session.finalize().unwrap().data);
-        assert_eq!(
-            out,
-            vec![
-                0xf5, 0x8c, 0x4c, 0x04, 0xd6, 0xe5, 0xf1, 0xba, 0x77, 0x9e, 0xab, 0xfb, 0x5f, 0x7b,
-                0xfb, 0xd6
-            ]
-        );
-    }
-
-    #[test]
-    fn aes_128_ctr_roundtrip_chunked() {
-        let key = [1_u8; 16];
-        let iv = [2_u8; 16];
-        let plaintext = b"the quick brown fox jumps over the lazy dog";
-        // Chunked update must equal a single update for stream ciphers.
-        let mut session =
-            StreamCipherSession::new("aes-128-ctr", &key, Some(&iv), false, true, None, None, 16)
-                .unwrap();
-        let mut ciphertext = session.update(&plaintext[..10]).unwrap();
-        ciphertext.extend_from_slice(&session.update(&plaintext[10..]).unwrap());
-        ciphertext.extend_from_slice(&session.finalize().unwrap().data);
-        let recovered = decrypt_all("aes-128-ctr", &key, &iv, &ciphertext, None);
-        assert_eq!(recovered, plaintext);
-    }
-
-    #[test]
-    fn aes_256_gcm_roundtrip_with_tag() {
-        let key = [3_u8; 32];
-        let iv = [4_u8; 12];
-        let plaintext = b"authenticated payload";
-        let (ciphertext, tag) = encrypt_all("aes-256-gcm", &key, &iv, plaintext);
-        let tag = tag.expect("gcm tag");
-        assert_eq!(tag.len(), 16);
-        let recovered = decrypt_all("aes-256-gcm", &key, &iv, &ciphertext, Some(&tag));
-        assert_eq!(recovered, plaintext);
-    }
-
-    #[test]
-    fn aes_256_gcm_rejects_tampered_tag() {
-        let key = [3_u8; 32];
-        let iv = [4_u8; 12];
-        let (ciphertext, tag) = encrypt_all("aes-256-gcm", &key, &iv, b"payload");
-        let mut tag = tag.unwrap();
-        tag[0] ^= 0xff;
-        let mut session = StreamCipherSession::new(
-            "aes-256-gcm",
-            &key,
-            Some(&iv),
-            true,
-            true,
-            None,
-            Some(&tag),
-            16,
-        )
-        .unwrap();
-        session.update(&ciphertext).unwrap();
-        assert!(session.finalize().is_err());
-    }
-
-    #[test]
-    fn cbc_chunked_update_matches_single() {
-        let key = [5_u8; 16];
-        let iv = [6_u8; 16];
-        let plaintext = b"0123456789abcdefghABCDEFGH"; // 26 bytes, spans blocks
-        let (single, _) = encrypt_all("aes-128-cbc", &key, &iv, plaintext);
-
-        let mut session =
-            StreamCipherSession::new("aes-128-cbc", &key, Some(&iv), false, true, None, None, 16)
-                .unwrap();
-        let mut chunked = session.update(&plaintext[..5]).unwrap();
-        chunked.extend_from_slice(&session.update(&plaintext[5..20]).unwrap());
-        chunked.extend_from_slice(&session.update(&plaintext[20..]).unwrap());
-        chunked.extend_from_slice(&session.finalize().unwrap().data);
-        assert_eq!(chunked, single);
-    }
-}
diff --git a/crates/sidecar/src/execution.rs b/crates/sidecar/src/execution.rs
deleted file mode 100644
index 1359aed1d..000000000
--- a/crates/sidecar/src/execution.rs
+++ /dev/null
@@ -1,24490 +0,0 @@
-//! Process execution, networking, and runtime event handling extracted from service.rs.
-
-use secure_exec_vm_config as vm_config;
-
-use crate::filesystem::{
-    handle_python_vfs_rpc_request as filesystem_handle_python_vfs_rpc_request,
-    service_javascript_fs_read_sync_rpc, service_javascript_fs_readdir_raw_sync_rpc,
-    service_javascript_fs_sync_rpc, service_javascript_module_sync_rpc,
-};
-use crate::protocol::{
-    CloseStdinRequest, EventFrame, EventPayload, ExecuteRequest, FindBoundUdpRequest,
-    FindListenerRequest, GetProcessSnapshotRequest, GetResourceSnapshotRequest,
-    GetSignalStateRequest, GetZombieTimerCountRequest, GuestKernelCallRequest,
-    GuestKernelResultResponse, GuestRuntimeKind, JavascriptChildProcessSpawnOptions,
-    JavascriptChildProcessSpawnRequest, JavascriptDgramBindRequest,
-    JavascriptDgramCreateSocketRequest, JavascriptDgramSendRequest, JavascriptDnsLookupRequest,
-    JavascriptDnsResolveRequest, JavascriptNetConnectRequest, JavascriptNetListenRequest,
-    JavascriptNetReserveTcpPortRequest, KillProcessRequest, OwnershipScope, ProcessExitedEvent,
-    ProcessOutputEvent, ProcessSnapshotEntry, ProcessSnapshotStatus, PtyResizedResponse,
-    QueueSnapshotEntry, RequestFrame, ResizePtyRequest, ResourceSnapshotResponse, ResponseFrame,
-    ResponsePayload, SidecarRequestPayload, SignalDispositionAction, SignalHandlerRegistration,
-    SocketStateEntry, StreamChannel, VmFetchRequest, VmFetchResponse, WasmPermissionTier,
-    WriteStdinRequest,
-};
-use crate::service::{
-    audit_fields, dirname, emit_security_audit_event, emit_structured_event, javascript_error,
-    kernel_error, log_stale_process_event, normalize_host_path, normalize_path,
-    parse_javascript_child_process_spawn_request, path_is_within_root,
-    process_event_queue_overflow_error, python_error, wasm_error, MAX_PROCESS_EVENT_QUEUE,
-};
-use crate::state::{
-    ActiveCipherSession, ActiveDhSession, ActiveDiffieHellmanSession, ActiveEcdhSession,
-    ActiveExecution, ActiveExecutionEvent, ActiveHttp2Server, ActiveHttp2Session,
-    ActiveHttp2Stream, ActiveHttpServer, ActiveMappedHostFd, ActiveProcess, ActiveSqliteDatabase,
-    ActiveSqliteStatement, ActiveTcpListener, ActiveTcpSocket, ActiveTlsState, ActiveTlsStream,
-    ActiveUdpSocket, ActiveUnixListener, ActiveUnixSocket, BridgeError, ExitedProcessSnapshot,
-    Http2BridgeEvent, Http2RuntimeSnapshot, Http2SessionCommand, Http2SessionSnapshot,
-    Http2SocketSnapshot, JavascriptHttpLoopbackTarget, JavascriptSocketEventPusher,
-    JavascriptSocketFamily, JavascriptSocketPathContext, JavascriptTcpListenerEvent,
-    JavascriptTcpSocketEvent, JavascriptTlsBridgeOptions, JavascriptTlsClientHello,
-    JavascriptTlsDataValue, JavascriptTlsMaterial, JavascriptUdpFamily, JavascriptUdpSocketEvent,
-    JavascriptUnixListenerEvent, KernelSocketReadinessEvent, KernelSocketReadinessRegistry,
-    KernelSocketReadinessTarget, LoopbackTlsPendingWriteHandle, LoopbackTlsPendingWriteState,
-    NetworkResourceCounts, PendingTcpSocket, PendingUnixSocket, ProcNetEntry, ProcessEventEnvelope,
-    PythonHostSocket, ResolvedChildProcessExecution, ResolvedTcpConnectAddr, SharedBridge,
-    SharedSidecarRequestClient, SidecarKernel, SocketQueryKind, ToolExecution, VmDnsConfig,
-    VmListenPolicy, VmState, DEFAULT_JAVASCRIPT_NET_BACKLOG, EXECUTION_DRIVER_NAME,
-    EXECUTION_SANDBOX_ROOT_ENV, JAVASCRIPT_COMMAND, LOOPBACK_EXEMPT_PORTS_ENV,
-    MAPPED_HOST_FD_START, PYTHON_COMMAND, TOOL_DRIVER_NAME,
-    VM_LISTEN_ALLOW_PRIVILEGED_METADATA_KEY, WASM_COMMAND, WASM_STDIO_SYNC_RPC_ENV,
-};
-use crate::tools::{
-    format_tool_failure_output, is_tool_command, normalized_tool_command_name,
-    resolve_tool_command, ToolCommandResolution,
-};
-use crate::wire::{ProtocolFrame as WireProtocolFrame, WireFrameCodec};
-use crate::{DispatchResult, NativeSidecar, NativeSidecarBridge, SidecarError};
-
-use base64::Engine;
-use bytes::Bytes;
-use h2::{client, server, Reason};
-use hickory_resolver::proto::rr::{RData, Record, RecordType};
-use hmac::{Hmac, Mac};
-use http::{HeaderMap, HeaderName, HeaderValue, Method, Request, Response, Uri};
-use md5::Md5;
-use nix::libc;
-use nix::poll::{poll, PollFd as NixPollFd, PollFlags, PollTimeout};
-use nix::sys::signal::{kill as send_signal, Signal};
-use nix::sys::wait::WaitStatus;
-#[cfg(not(target_os = "macos"))]
-use nix::sys::wait::{waitid as wait_on_child, Id as WaitId, WaitPidFlag};
-#[cfg(target_os = "macos")]
-use nix::sys::wait::{waitpid, WaitPidFlag};
-use nix::unistd::Pid;
-use openssl::bn::{BigNum, BigNumContext};
-use openssl::derive::Deriver;
-use openssl::dh::Dh;
-use openssl::ec::{EcGroup, EcKey, EcPoint, PointConversionForm};
-use openssl::hash::MessageDigest;
-use openssl::nid::Nid;
-use openssl::pkey::{Id as PKeyId, PKey, Params, Private, Public};
-use openssl::rand::rand_bytes;
-use openssl::rsa::{Padding, Rsa};
-use openssl::sign::{Signer, Verifier};
-use pbkdf2::pbkdf2_hmac;
-
-use crate::crypto_cipher::{CipherError as AesCipherError, StreamCipherSession};
-use rusqlite::types::ValueRef as SqliteValueRef;
-use rusqlite::{
-    Connection as SqliteConnection, OpenFlags as SqliteOpenFlags, Statement as SqliteStatement,
-};
-use rustls::client::danger::{HandshakeSignatureValid, ServerCertVerified, ServerCertVerifier};
-use rustls::crypto::aws_lc_rs;
-use rustls::pki_types::{CertificateDer, PrivateKeyDer, ServerName};
-use rustls::{
-    ClientConfig, ClientConnection, DigitallySignedStruct, RootCertStore, ServerConfig,
-    ServerConnection, SignatureScheme,
-};
-use scrypt::{scrypt, Params as ScryptParams};
-use secure_exec_bridge::{queue_tracker, LifecycleState};
-use secure_exec_execution::wasm::WasmExecutionError;
-use secure_exec_execution::{
-    javascript::handle_internal_bridge_call_from_host_context, v8_host::V8SessionHandle,
-    v8_runtime, CreateJavascriptContextRequest, CreatePythonContextRequest,
-    CreateWasmContextRequest, GuestModuleReader, GuestRuntimeConfig, JavascriptExecutionEvent,
-    JavascriptExecutionLimits, JavascriptSyncRpcRequest, ModuleFsReader,
-    NodeSignalDispositionAction, NodeSignalHandlerRegistration, PythonExecutionEvent,
-    PythonExecutionLimits, PythonVfsRpcMethod, PythonVfsRpcRequest, PythonVfsRpcResponsePayload,
-    StartJavascriptExecutionRequest, StartPythonExecutionRequest, StartWasmExecutionRequest,
-    WasmExecutionEvent, WasmExecutionLimits, WasmPermissionTier as ExecutionWasmPermissionTier,
-};
-use secure_exec_kernel::dns::{
-    DnsLookupPolicy, DnsRecordResolution, DnsResolutionSource as KernelDnsResolutionSource,
-};
-use secure_exec_kernel::kernel::{KernelProcessHandle, SpawnOptions, VirtualProcessOptions};
-pub(crate) use secure_exec_kernel::network_policy::format_tcp_resource;
-use secure_exec_kernel::network_policy::{
-    is_loopback_ip, loopback_cidr, restricted_non_loopback_ip_range,
-};
-use secure_exec_kernel::permissions::NetworkOperation;
-use secure_exec_kernel::poll::{PollEvents, PollFd, PollTargetEntry, POLLERR, POLLHUP, POLLIN};
-use secure_exec_kernel::process_table::{ProcessStatus, WaitPidFlags, SIGKILL, SIGTERM};
-use secure_exec_kernel::pty::{LineDisciplineConfig, MAX_PTY_BUFFER_BYTES};
-use secure_exec_kernel::resource_accounting::ResourceLimits;
-use secure_exec_kernel::root_fs::RootFilesystemMode;
-use secure_exec_kernel::socket_table::{
-    reset_socket_read_trace, set_socket_read_trace_enabled, socket_read_trace_snapshot,
-    InetSocketAddress, SocketDomain, SocketId, SocketShutdown as KernelSocketShutdown, SocketSpec,
-    SocketState, SocketType,
-};
-use secure_exec_sidecar_core::{
-    apply_process_signal_state_update, bound_udp_snapshot_response, bridge_buffer_value,
-    decode_base64, decode_bridge_buffer_value, decode_encoded_bytes_value, encoded_bytes_value,
-    ensure_vm_fetch_raw_response_buffer_within_limit, ensure_vm_fetch_response_within_limit,
-    listener_snapshot_response, local_endpoint_value, parse_kernel_http_fetch_response,
-    parse_process_signal_state_request, process_killed_response,
-    process_snapshot_entry_from_kernel, process_snapshot_response, process_started_response,
-    remote_endpoint_value, shared_guest_runtime_identity, signal_state_response,
-    socket_addr_family, socket_address_value, stdin_closed_response, stdin_written_response,
-    tcp_socket_info_value, unix_socket_info_value, zombie_timer_count_response,
-    SharedProcessSnapshotEntry, SharedProcessSnapshotStatus, SidecarCoreError,
-    VM_FETCH_BUFFER_LIMIT_BYTES,
-};
-use serde::{Deserialize, Serialize};
-use serde_json::{json, Map, Value};
-use sha1::Sha1;
-use sha2::{digest::Digest, Sha224, Sha256, Sha384, Sha512};
-use socket2::{SockRef, TcpKeepalive};
-use std::collections::VecDeque;
-use std::collections::{BTreeMap, BTreeSet};
-use std::fmt;
-use std::fs;
-use std::io::{Cursor, Read, Write};
-use std::net::{
-    IpAddr, Ipv4Addr, Ipv6Addr, Shutdown, SocketAddr, TcpListener, TcpStream, ToSocketAddrs,
-    UdpSocket,
-};
-use std::os::fd::{AsFd, BorrowedFd};
-use std::os::unix::fs::{MetadataExt, PermissionsExt};
-use std::os::unix::net::{SocketAddr as UnixSocketAddr, UnixListener, UnixStream};
-use std::path::{Path, PathBuf};
-use std::pin::Pin;
-use std::sync::atomic::{AtomicBool, AtomicU64, Ordering};
-use std::sync::mpsc::{self, RecvTimeoutError, Sender};
-use std::sync::{Arc, Mutex, OnceLock, Weak};
-use std::thread;
-use std::time::{Duration, Instant};
-use tokio::io::{AsyncRead, AsyncWrite};
-use tokio::runtime::Builder as TokioRuntimeBuilder;
-use tokio::sync::mpsc::{unbounded_channel, UnboundedReceiver};
-use tokio_rustls::{TlsAcceptor, TlsConnector};
-use url::Url;
-
-const DEFAULT_KERNEL_STDIN_READ_MAX_BYTES: usize = 64 * 1024;
-const DEFAULT_KERNEL_STDIN_READ_TIMEOUT_MS: u64 = 100;
-const JAVASCRIPT_NET_TIMEOUT_SENTINEL: &str = "__secure_exec_net_timeout__";
-const PYTHON_PYODIDE_GUEST_ROOT: &str = "/__agentos_pyodide";
-const PYTHON_PYODIDE_CACHE_GUEST_ROOT: &str = "/__agentos_pyodide_cache";
-const TCP_SOCKET_POLL_TIMEOUT: Duration = Duration::from_millis(100);
-const TLS_HANDSHAKE_TIMEOUT: Duration = Duration::from_secs(5);
-const LOOPBACK_TLS_HANDSHAKE_POLL_TIMEOUT: Duration = Duration::from_millis(1);
-const LOOPBACK_TLS_PENDING_WRITE_BUFFER_BYTES: usize = 4 * 1024 * 1024;
-const LOOPBACK_TLS_PENDING_WRITE_WARNING_BYTES: usize =
-    LOOPBACK_TLS_PENDING_WRITE_BUFFER_BYTES * 4 / 5;
-const HTTP_LOOPBACK_REQUEST_TIMEOUT: Duration = Duration::from_secs(30);
-const PROCESS_EXIT_DRAIN_INITIAL_QUIET: Duration = Duration::from_millis(1);
-const PROCESS_EXIT_DRAIN_TRAILING_QUIET: Duration = Duration::from_millis(25);
-
-struct NetTcpTraceCounters {
-    socket_read_calls: AtomicU64,
-    socket_read_zero_wait_calls: AtomicU64,
-    socket_read_data_events: AtomicU64,
-    socket_read_bytes: AtomicU64,
-    socket_read_kernel_us: AtomicU64,
-    socket_read_end_events: AtomicU64,
-    socket_read_eagain: AtomicU64,
-    socket_read_errors: AtomicU64,
-    socket_read_push_attempts: AtomicU64,
-    socket_read_push_sent: AtomicU64,
-    socket_read_push_missing: AtomicU64,
-    socket_read_push_errors: AtomicU64,
-    socket_write_calls: AtomicU64,
-    socket_write_bytes: AtomicU64,
-    socket_write_kernel_us: AtomicU64,
-    socket_write_errors: AtomicU64,
-    server_accept_calls: AtomicU64,
-    server_accept_zero_wait_calls: AtomicU64,
-    server_accept_connections: AtomicU64,
-    server_accept_eagain: AtomicU64,
-    server_accept_errors: AtomicU64,
-    kernel_poll_targets: AtomicU64,
-    kernel_poll_zero_wait_calls: AtomicU64,
-    kernel_poll_wait_us: AtomicU64,
-    kernel_poll_elapsed_us: AtomicU64,
-    kernel_poll_empty: AtomicU64,
-    kernel_poll_ready: AtomicU64,
-    kernel_poll_revents_read: AtomicU64,
-    kernel_poll_revents_hup: AtomicU64,
-    kernel_poll_revents_err: AtomicU64,
-    kernel_poll_revents_bits_or: AtomicU64,
-}
-
-impl NetTcpTraceCounters {
-    const fn new() -> Self {
-        Self {
-            socket_read_calls: AtomicU64::new(0),
-            socket_read_zero_wait_calls: AtomicU64::new(0),
-            socket_read_data_events: AtomicU64::new(0),
-            socket_read_bytes: AtomicU64::new(0),
-            socket_read_kernel_us: AtomicU64::new(0),
-            socket_read_end_events: AtomicU64::new(0),
-            socket_read_eagain: AtomicU64::new(0),
-            socket_read_errors: AtomicU64::new(0),
-            socket_read_push_attempts: AtomicU64::new(0),
-            socket_read_push_sent: AtomicU64::new(0),
-            socket_read_push_missing: AtomicU64::new(0),
-            socket_read_push_errors: AtomicU64::new(0),
-            socket_write_calls: AtomicU64::new(0),
-            socket_write_bytes: AtomicU64::new(0),
-            socket_write_kernel_us: AtomicU64::new(0),
-            socket_write_errors: AtomicU64::new(0),
-            server_accept_calls: AtomicU64::new(0),
-            server_accept_zero_wait_calls: AtomicU64::new(0),
-            server_accept_connections: AtomicU64::new(0),
-            server_accept_eagain: AtomicU64::new(0),
-            server_accept_errors: AtomicU64::new(0),
-            kernel_poll_targets: AtomicU64::new(0),
-            kernel_poll_zero_wait_calls: AtomicU64::new(0),
-            kernel_poll_wait_us: AtomicU64::new(0),
-            kernel_poll_elapsed_us: AtomicU64::new(0),
-            kernel_poll_empty: AtomicU64::new(0),
-            kernel_poll_ready: AtomicU64::new(0),
-            kernel_poll_revents_read: AtomicU64::new(0),
-            kernel_poll_revents_hup: AtomicU64::new(0),
-            kernel_poll_revents_err: AtomicU64::new(0),
-            kernel_poll_revents_bits_or: AtomicU64::new(0),
-        }
-    }
-}
-
-static NET_TCP_TRACE_COUNTERS: NetTcpTraceCounters = NetTcpTraceCounters::new();
-pub(crate) const MAX_PER_PROCESS_STATE_HANDLES: usize = 1024;
-const DEFAULT_SCRYPT_COST: u64 = 16_384;
-const DEFAULT_SCRYPT_BLOCK_SIZE: u32 = 8;
-const DEFAULT_SCRYPT_PARALLELIZATION: u32 = 1;
-const SQLITE_JS_SAFE_INTEGER_MAX: i64 = 9_007_199_254_740_991;
-const HTTP_LOOPBACK_REQUEST_TIMEOUT_MS_ENV: &str =
-    "SECURE_EXEC_TEST_HTTP_LOOPBACK_REQUEST_TIMEOUT_MS";
-
-trait Http2AsyncIo: AsyncRead + AsyncWrite + Unpin + Send {}
-
-impl<T> Http2AsyncIo for T where T: AsyncRead + AsyncWrite + Unpin + Send {}
-
-fn http_loopback_request_timeout() -> Duration {
-    std::env::var(HTTP_LOOPBACK_REQUEST_TIMEOUT_MS_ENV)
-        .ok()
-        .and_then(|value| value.parse::<u64>().ok())
-        .map(Duration::from_millis)
-        .unwrap_or(HTTP_LOOPBACK_REQUEST_TIMEOUT)
-}
-
-/// Block until `fd` is readable or `deadline` passes. Returns whether it became readable.
-///
-/// BLOCKING: parks the calling OS thread in `poll(2)`. The unix/tcp accept and
-/// udp recv callers run on the sidecar's single-thread tokio runtime, so a
-/// non-zero wait stalls the whole event loop for up to `deadline` — the same
-/// stall as the fixed sleeps this replaced, and only acceptable because the
-/// guest net path always polls with wait == 0. Keep deadlines bounded and do
-/// not add wait > 0 callers on paths that service concurrent VM traffic.
-fn wait_fd_readable_until(fd: BorrowedFd<'_>, deadline: Instant) -> bool {
-    let remaining = deadline.saturating_duration_since(Instant::now());
-    if remaining.is_zero() {
-        return false;
-    }
-
-    let timeout_ms = remaining.as_millis().saturating_add(u128::from(
-        !remaining.subsec_nanos().is_multiple_of(1_000_000),
-    ));
-    let timeout =
-        PollTimeout::try_from(timeout_ms.min(i32::MAX as u128)).unwrap_or(PollTimeout::MAX);
-    let mut fds = [NixPollFd::new(fd, PollFlags::POLLIN)];
-    match poll(&mut fds, timeout) {
-        Ok(0) => false,
-        Ok(_) => fds[0]
-            .revents()
-            .unwrap_or_else(PollFlags::empty)
-            .intersects(PollFlags::POLLIN | PollFlags::POLLHUP | PollFlags::POLLERR),
-        Err(_) => true,
-    }
-}
-
-const DEFAULT_ALLOWED_NODE_BUILTINS: &[&str] = &[
-    "assert",
-    "buffer",
-    "console",
-    "child_process",
-    "crypto",
-    "dns",
-    "events",
-    "fs",
-    "http",
-    "http2",
-    "https",
-    "module",
-    "os",
-    "path",
-    "perf_hooks",
-    "querystring",
-    "sqlite",
-    "stream",
-    "string_decoder",
-    "timers",
-    "tls",
-    "tty",
-    "url",
-    "util",
-    "zlib",
-];
-const EXECUTION_REQUEST_TTY_ENV: &str = "AGENTOS_EXEC_TTY";
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum JavascriptCryptoDigestAlgorithm {
-    Md5,
-    Sha1,
-    Sha224,
-    Sha256,
-    Sha384,
-    Sha512,
-}
-
-#[derive(Debug, Default, Deserialize)]
-#[serde(default, rename_all = "camelCase")]
-struct JavascriptScryptOptions {
-    #[serde(alias = "N")]
-    cost: Option<u64>,
-    #[serde(alias = "r")]
-    block_size: Option<u32>,
-    #[serde(alias = "p")]
-    parallelization: Option<u32>,
-}
-
-#[derive(Debug, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct JavascriptHttpListenRequest {
-    server_id: u64,
-    #[serde(default)]
-    port: Option<u16>,
-    #[serde(default)]
-    hostname: Option<String>,
-}
-
-#[derive(Debug, Default, Deserialize)]
-#[serde(default, rename_all = "camelCase")]
-struct JavascriptHttpRequestOptions {
-    method: Option<String>,
-    headers: BTreeMap<String, Value>,
-    body: Option<String>,
-    reject_unauthorized: Option<bool>,
-}
-
-#[derive(Debug, Default, Deserialize)]
-#[serde(default, rename_all = "camelCase")]
-struct JavascriptHttp2ServerListenRequest {
-    server_id: u64,
-    secure: bool,
-    port: Option<u16>,
-    host: Option<String>,
-    backlog: Option<u32>,
-    timeout: Option<u64>,
-    settings: BTreeMap<String, Value>,
-    tls: Option<JavascriptTlsBridgeOptions>,
-}
-
-#[derive(Debug, Default, Deserialize)]
-#[serde(default, rename_all = "camelCase")]
-struct JavascriptHttp2SessionConnectRequest {
-    authority: Option<String>,
-    protocol: Option<String>,
-    host: Option<String>,
-    port: Option<u16>,
-    settings: BTreeMap<String, Value>,
-    tls: Option<JavascriptTlsBridgeOptions>,
-}
-
-#[derive(Debug, Default, Deserialize)]
-#[serde(default, rename_all = "camelCase")]
-struct JavascriptHttp2RequestOptions {
-    end_stream: bool,
-}
-
-#[derive(Debug, Default, Deserialize)]
-#[serde(default, rename_all = "camelCase")]
-struct JavascriptHttp2FileResponseOptions {
-    offset: Option<u64>,
-    length: Option<i64>,
-}
-
-#[derive(Debug, Clone)]
-struct HttpHeaderCollection {
-    normalized: BTreeMap<String, Vec<String>>,
-    raw_pairs: Vec<(String, String)>,
-}
-
-#[derive(Debug)]
-struct InsecureTlsVerifier {
-    supported_schemes: Vec<SignatureScheme>,
-}
-
-impl ServerCertVerifier for InsecureTlsVerifier {
-    fn verify_server_cert(
-        &self,
-        _end_entity: &CertificateDer<'_>,
-        _intermediates: &[CertificateDer<'_>],
-        _server_name: &ServerName<'_>,
-        _ocsp_response: &[u8],
-        _now: rustls::pki_types::UnixTime,
-    ) -> Result<ServerCertVerified, rustls::Error> {
-        Ok(ServerCertVerified::assertion())
-    }
-
-    fn verify_tls12_signature(
-        &self,
-        _message: &[u8],
-        _cert: &CertificateDer<'_>,
-        _dss: &DigitallySignedStruct,
-    ) -> Result<HandshakeSignatureValid, rustls::Error> {
-        Ok(HandshakeSignatureValid::assertion())
-    }
-
-    fn verify_tls13_signature(
-        &self,
-        _message: &[u8],
-        _cert: &CertificateDer<'_>,
-        _dss: &DigitallySignedStruct,
-    ) -> Result<HandshakeSignatureValid, rustls::Error> {
-        Ok(HandshakeSignatureValid::assertion())
-    }
-
-    fn supported_verify_schemes(&self) -> Vec<SignatureScheme> {
-        self.supported_schemes.clone()
-    }
-}
-
-impl ActiveProcess {
-    pub(crate) fn new(
-        kernel_pid: u32,
-        kernel_handle: KernelProcessHandle,
-        runtime: GuestRuntimeKind,
-        execution: ActiveExecution,
-    ) -> Self {
-        Self {
-            kernel_pid,
-            kernel_handle,
-            kernel_stdin_writer_fd: None,
-            tty_master_fd: None,
-            runtime,
-            detached: false,
-            execution,
-            guest_cwd: String::from("/"),
-            env: BTreeMap::new(),
-            host_cwd: PathBuf::from("/"),
-            host_write_dirty: false,
-            mapped_host_fds: BTreeMap::new(),
-            next_mapped_host_fd: MAPPED_HOST_FD_START,
-            pending_execution_events: VecDeque::new(),
-            pending_self_signal_exit: None,
-            child_processes: BTreeMap::new(),
-            next_child_process_id: 0,
-            http_servers: BTreeMap::new(),
-            pending_http_requests: BTreeMap::new(),
-            http2: Default::default(),
-            tcp_listeners: BTreeMap::new(),
-            next_tcp_listener_id: 0,
-            tcp_sockets: BTreeMap::new(),
-            next_tcp_socket_id: 0,
-            tcp_port_reservations: BTreeMap::new(),
-            next_tcp_port_reservation_id: 0,
-            unix_listeners: BTreeMap::new(),
-            next_unix_listener_id: 0,
-            unix_sockets: BTreeMap::new(),
-            next_unix_socket_id: 0,
-            udp_sockets: BTreeMap::new(),
-            next_udp_socket_id: 0,
-            python_sockets: BTreeMap::new(),
-            next_python_socket_id: 0,
-            cipher_sessions: BTreeMap::new(),
-            next_cipher_session_id: 0,
-            diffie_hellman_sessions: BTreeMap::new(),
-            next_diffie_hellman_session_id: 0,
-            sqlite_databases: BTreeMap::new(),
-            next_sqlite_database_id: 0,
-            sqlite_statements: BTreeMap::new(),
-            next_sqlite_statement_id: 0,
-            tty_master_owner: None,
-            deferred_kernel_wait_rpc: None,
-            module_resolution_cache: secure_exec_execution::LocalModuleResolutionCache::default(),
-        }
-    }
-
-    pub(crate) fn queue_pending_execution_event(
-        &mut self,
-        event: ActiveExecutionEvent,
-    ) -> Result<(), SidecarError> {
-        if self.pending_execution_events.len() >= MAX_PROCESS_EVENT_QUEUE {
-            return Err(process_event_queue_overflow_error());
-        }
-        self.pending_execution_events.push_back(event);
-        Ok(())
-    }
-
-    pub(crate) fn with_host_cwd(mut self, host_cwd: PathBuf) -> Self {
-        self.host_cwd = host_cwd;
-        self
-    }
-
-    pub(crate) fn mark_host_write_dirty(&mut self) {
-        self.host_write_dirty = true;
-    }
-
-    pub(crate) fn host_write_dirty_recursive(&self) -> bool {
-        self.host_write_dirty
-            || self
-                .child_processes
-                .values()
-                .any(ActiveProcess::host_write_dirty_recursive)
-    }
-
-    pub(crate) fn clean_host_writes_are_observable_recursive(&self) -> bool {
-        matches!(
-            self.execution,
-            ActiveExecution::Javascript(_) | ActiveExecution::Python(_) | ActiveExecution::Wasm(_)
-        ) && self
-            .child_processes
-            .values()
-            .all(ActiveProcess::clean_host_writes_are_observable_recursive)
-    }
-
-    pub(crate) fn with_guest_cwd(mut self, guest_cwd: String) -> Self {
-        self.guest_cwd = guest_cwd;
-        self
-    }
-
-    pub(crate) fn with_env(mut self, env: BTreeMap<String, String>) -> Self {
-        self.env = env;
-        self
-    }
-
-    pub(crate) fn with_kernel_stdin_writer_fd(mut self, fd: u32) -> Self {
-        self.kernel_stdin_writer_fd = Some(fd);
-        self
-    }
-
-    pub(crate) fn with_tty_master_fd(mut self, fd: Option<u32>) -> Self {
-        self.tty_master_fd = fd;
-        self
-    }
-
-    pub(crate) fn with_detached(mut self, detached: bool) -> Self {
-        self.detached = detached;
-        self
-    }
-
-    pub(crate) fn allocate_mapped_host_fd(&mut self, fd: ActiveMappedHostFd) -> u32 {
-        let handle = self.next_mapped_host_fd;
-        self.next_mapped_host_fd = self
-            .next_mapped_host_fd
-            .checked_add(1)
-            .unwrap_or(MAPPED_HOST_FD_START);
-        self.mapped_host_fds.insert(handle, fd);
-        handle
-    }
-
-    pub(crate) fn mapped_host_fd(&self, fd: u32) -> Option<&ActiveMappedHostFd> {
-        self.mapped_host_fds.get(&fd)
-    }
-
-    pub(crate) fn mapped_host_fd_mut(&mut self, fd: u32) -> Option<&mut ActiveMappedHostFd> {
-        self.mapped_host_fds.get_mut(&fd)
-    }
-
-    pub(crate) fn close_mapped_host_fd(&mut self, fd: u32) -> bool {
-        self.mapped_host_fds.remove(&fd).is_some()
-    }
-
-    pub(crate) fn allocate_child_process_id(&mut self) -> String {
-        self.next_child_process_id += 1;
-        format!("child-{}", self.next_child_process_id)
-    }
-
-    fn allocate_tcp_listener_id(&mut self) -> String {
-        self.next_tcp_listener_id += 1;
-        format!("listener-{}", self.next_tcp_listener_id)
-    }
-
-    fn allocate_tcp_socket_id(&mut self) -> String {
-        self.next_tcp_socket_id += 1;
-        format!("socket-{}", self.next_tcp_socket_id)
-    }
-
-    fn allocate_tcp_port_reservation_id(&mut self) -> String {
-        self.next_tcp_port_reservation_id += 1;
-        format!("tcp-port-reservation-{}", self.next_tcp_port_reservation_id)
-    }
-
-    fn allocate_unix_listener_id(&mut self) -> String {
-        self.next_unix_listener_id += 1;
-        format!("unix-listener-{}", self.next_unix_listener_id)
-    }
-
-    fn allocate_unix_socket_id(&mut self) -> String {
-        self.next_unix_socket_id += 1;
-        format!("unix-socket-{}", self.next_unix_socket_id)
-    }
-
-    fn allocate_udp_socket_id(&mut self) -> String {
-        self.next_udp_socket_id += 1;
-        format!("udp-socket-{}", self.next_udp_socket_id)
-    }
-
-    pub(crate) fn network_resource_counts(&self) -> NetworkResourceCounts {
-        let mut counts = NetworkResourceCounts {
-            sockets: self.http_servers.len()
-                + self.tcp_listeners.len()
-                + self.tcp_sockets.len()
-                + self.unix_listeners.len()
-                + self.unix_sockets.len()
-                + self.udp_sockets.len()
-                + self.python_sockets.len(),
-            connections: self.tcp_sockets.len() + self.unix_sockets.len(),
-        };
-        if let Ok(http2) = self.http2.shared.lock() {
-            counts.sockets += http2.servers.len() + http2.sessions.len();
-            counts.connections += http2.sessions.len();
-        }
-
-        for child in self.child_processes.values() {
-            let child_counts = child.network_resource_counts();
-            counts.sockets += child_counts.sockets;
-            counts.connections += child_counts.connections;
-        }
-
-        counts
-    }
-
-    fn sidecar_only_network_resource_counts(&self) -> NetworkResourceCounts {
-        let mut counts = NetworkResourceCounts {
-            sockets: self.http_servers.len()
-                + self
-                    .tcp_listeners
-                    .values()
-                    .filter(|listener| listener.kernel_socket_id.is_none())
-                    .count()
-                + self
-                    .tcp_sockets
-                    .values()
-                    .filter(|socket| socket.kernel_socket_id.is_none())
-                    .count()
-                + self.unix_listeners.len()
-                + self.unix_sockets.len()
-                + self
-                    .udp_sockets
-                    .values()
-                    .filter(|socket| socket.kernel_socket_id.is_none())
-                    .count()
-                + self.python_sockets.len(),
-            connections: self
-                .tcp_sockets
-                .values()
-                .filter(|socket| socket.kernel_socket_id.is_none())
-                .count()
-                + self.unix_sockets.len(),
-        };
-        if let Ok(http2) = self.http2.shared.lock() {
-            counts.sockets += http2.servers.len() + http2.sessions.len();
-            counts.connections += http2.sessions.len();
-        }
-
-        for child in self.child_processes.values() {
-            let child_counts = child.sidecar_only_network_resource_counts();
-            counts.sockets += child_counts.sockets;
-            counts.connections += child_counts.connections;
-        }
-
-        counts
-    }
-}
-
-fn poll_tool_process_event(
-    execution: &ToolExecution,
-) -> Result<Option<ActiveExecutionEvent>, SidecarError> {
-    let event = execution
-        .pending_events
-        .lock()
-        .unwrap_or_else(|poisoned| poisoned.into_inner())
-        .pop_front();
-    if event.is_some() {
-        return Ok(event);
-    }
-    if execution.events_overflowed.load(Ordering::Relaxed) {
-        return Err(process_event_queue_overflow_error());
-    }
-    Ok(None)
-}
-
-fn descendant_pending_execution_event_capacity(
-    root: &ActiveProcess,
-    child_path: &[&str],
-) -> Option<usize> {
-    let mut child = root;
-    for child_process_id in child_path {
-        child = child.child_processes.get(*child_process_id)?;
-    }
-    Some(MAX_PROCESS_EVENT_QUEUE.saturating_sub(child.pending_execution_events.len()))
-}
-
-fn poll_child_execution_after_exit(
-    child: &mut ActiveProcess,
-    wait: Duration,
-) -> Result<Option<ActiveExecutionEvent>, SidecarError> {
-    match child.execution.poll_event_blocking(wait) {
-        Ok(event) => Ok(event),
-        Err(SidecarError::Execution(message))
-            if child.runtime == GuestRuntimeKind::WebAssembly
-                && message == WasmExecutionError::EventChannelClosed.to_string() =>
-        {
-            Ok(None)
-        }
-        Err(error) => Err(error),
-    }
-}
-
-fn closed_javascript_event_channel(message: &str) -> bool {
-    message == "guest JavaScript event channel closed unexpectedly"
-}
-
-fn closed_python_event_channel(message: &str) -> bool {
-    message == "guest Python event channel closed unexpectedly"
-}
-
-fn closed_wasm_event_channel(message: &str) -> bool {
-    message == WasmExecutionError::EventChannelClosed.to_string()
-}
-
-fn missing_vm_error(vm_id: &str) -> SidecarError {
-    SidecarError::InvalidState(format!("VM {vm_id} is no longer active"))
-}
-
-fn missing_process_error(vm_id: &str, process_id: &str) -> SidecarError {
-    SidecarError::InvalidState(format!(
-        "VM {vm_id} no longer has active process {process_id}"
-    ))
-}
-
-/// Map a shared guest-kernel-call dispatcher error into a sidecar error,
-/// preserving POSIX errno codes (`ECODE: message`) as kernel errors so guest
-/// callers observe Linux-faithful failures, mirroring the filesystem path.
-fn guest_kernel_core_error(error: secure_exec_sidecar_core::SidecarCoreError) -> SidecarError {
-    let message = error.to_string();
-    let is_errno = message.split_once(':').is_some_and(|(code, _)| {
-        code.len() >= 2
-            && code.starts_with('E')
-            && code[1..]
-                .bytes()
-                .all(|byte| byte.is_ascii_uppercase() || byte.is_ascii_digit() || byte == b'_')
-    });
-    if is_errno {
-        SidecarError::Kernel(message)
-    } else {
-        SidecarError::InvalidState(message)
-    }
-}
-
-fn is_broken_pipe_error(error: &SidecarError) -> bool {
-    matches!(error, SidecarError::Execution(message) if message.contains("Broken pipe") || message.contains("os error 32") || message.contains("EPIPE"))
-}
-
-fn javascript_child_process_gone_error(process_id: &str, child_path: &[&str]) -> SidecarError {
-    let child_label = if child_path.is_empty() {
-        process_id.to_owned()
-    } else {
-        format!("{process_id}/{}", child_path.join("/"))
-    };
-    SidecarError::Execution(format!(
-        "ECHILD: child_process {child_label} is no longer available"
-    ))
-}
-
-fn is_javascript_child_process_gone_error(error: &SidecarError) -> bool {
-    matches!(
-        error,
-        SidecarError::Execution(message) if guest_errno_code(message) == Some("ECHILD")
-    )
-}
-
-fn loopback_tls_transport_registry(
-) -> &'static Mutex<BTreeMap<String, Weak<crate::state::LoopbackTlsTransportPair>>> {
-    static REGISTRY: OnceLock<
-        Mutex<BTreeMap<String, Weak<crate::state::LoopbackTlsTransportPair>>>,
-    > = OnceLock::new();
-    REGISTRY.get_or_init(|| Mutex::new(BTreeMap::new()))
-}
-
-#[cfg(test)]
-#[allow(dead_code)]
-pub(crate) fn loopback_tls_registry_len() -> usize {
-    loopback_tls_transport_registry()
-        .lock()
-        .expect("loopback TLS transport registry lock poisoned")
-        .len()
-}
-
-#[cfg(test)]
-pub(crate) fn loopback_tls_registry_contains(key: &str) -> bool {
-    loopback_tls_transport_registry()
-        .lock()
-        .expect("loopback TLS transport registry lock poisoned")
-        .contains_key(key)
-}
-
-fn loopback_tls_transport_key(
-    vm_id: &str,
-    socket_id: SocketId,
-    peer_socket_id: SocketId,
-) -> String {
-    let (lower, higher) = if socket_id <= peer_socket_id {
-        (socket_id, peer_socket_id)
-    } else {
-        (peer_socket_id, socket_id)
-    };
-    format!("{vm_id}:{lower}:{higher}")
-}
-
-fn loopback_tls_endpoint(
-    vm_id: &str,
-    socket_id: SocketId,
-    peer_socket_id: SocketId,
-) -> Result<crate::state::LoopbackTlsEndpoint, SidecarError> {
-    let key = loopback_tls_transport_key(vm_id, socket_id, peer_socket_id);
-    let registry = loopback_tls_transport_registry();
-    let mut transports = registry.lock().map_err(|_| {
-        SidecarError::InvalidState(String::from(
-            "loopback TLS transport registry lock poisoned",
-        ))
-    })?;
-    transports.retain(|_, pair| pair.strong_count() > 0);
-    let pair = transports
-        .get(&key)
-        .and_then(Weak::upgrade)
-        .unwrap_or_else(|| {
-            let pair = Arc::new(crate::state::LoopbackTlsTransportPair {
-                state: Mutex::new(crate::state::LoopbackTlsTransportPairState::default()),
-                ready: std::sync::Condvar::new(),
-            });
-            transports.insert(key.clone(), Arc::downgrade(&pair));
-            pair
-        });
-    Ok(crate::state::LoopbackTlsEndpoint {
-        pair,
-        is_lower_socket: socket_id <= peer_socket_id,
-        poll_timeout: TCP_SOCKET_POLL_TIMEOUT,
-        registry_key: Some(key),
-    })
-}
-
-impl crate::state::LoopbackTlsEndpoint {
-    fn set_poll_timeout(&mut self, timeout: Duration) {
-        self.poll_timeout = timeout;
-    }
-
-    fn interrupt_reader(pair: &Arc<crate::state::LoopbackTlsTransportPair>, is_lower_socket: bool) {
-        if let Ok(mut state) = pair.state.lock() {
-            if is_lower_socket {
-                state.lower_read_interrupt = true;
-            } else {
-                state.higher_read_interrupt = true;
-            }
-            pair.ready.notify_all();
-        }
-    }
-
-    fn shutdown_write(&self) -> Result<(), SidecarError> {
-        let mut state = self.pair.state.lock().map_err(|_| {
-            SidecarError::InvalidState(String::from("loopback TLS transport lock poisoned"))
-        })?;
-        if self.is_lower_socket {
-            state.lower_write_closed = true;
-        } else {
-            state.higher_write_closed = true;
-        }
-        self.pair.ready.notify_all();
-        Ok(())
-    }
-
-    fn close_endpoint(&self) -> Result<(), SidecarError> {
-        let mut state = self.pair.state.lock().map_err(|_| {
-            SidecarError::InvalidState(String::from("loopback TLS transport lock poisoned"))
-        })?;
-        if self.is_lower_socket {
-            state.lower_write_closed = true;
-            state.lower_closed = true;
-        } else {
-            state.higher_write_closed = true;
-            state.higher_closed = true;
-        }
-        self.pair.ready.notify_all();
-        Ok(())
-    }
-}
-
-impl LoopbackTlsPendingWriteHandle {
-    pub(crate) fn new(endpoint: &crate::state::LoopbackTlsEndpoint) -> Self {
-        Self {
-            state: Arc::new(Mutex::new(LoopbackTlsPendingWriteState {
-                buffer: Vec::new(),
-                warned_near_cap: false,
-                flushing: false,
-                defer_shutdown_write: false,
-                failure_message: None,
-            })),
-            tls_handshake_complete: Arc::new(AtomicBool::new(false)),
-            failed: Arc::new(AtomicBool::new(false)),
-            pair: Arc::clone(&endpoint.pair),
-            is_lower_socket: endpoint.is_lower_socket,
-            handshake_started_at: Instant::now(),
-        }
-    }
-
-    fn failure_error(&self) -> SidecarError {
-        let message = self
-            .state
-            .lock()
-            .ok()
-            .and_then(|state| state.failure_message.clone())
-            .unwrap_or_else(|| String::from("loopback TLS pending write failed"));
-        SidecarError::Execution(message)
-    }
-
-    fn mark_failed(&self, message: impl Into<String>) {
-        self.failed.store(true, Ordering::SeqCst);
-        if let Ok(mut state) = self.state.lock() {
-            state.buffer.clear();
-            state.flushing = false;
-            state.defer_shutdown_write = false;
-            state.failure_message = Some(message.into());
-        }
-    }
-
-    fn clear_for_close(&self) {
-        self.mark_failed("loopback TLS socket closed before buffered writes flushed");
-    }
-
-    fn fail_if_pending(&self, message: impl Into<String>) {
-        let has_pending = self
-            .state
-            .lock()
-            .map(|state| !state.buffer.is_empty() || state.flushing || state.defer_shutdown_write)
-            .unwrap_or(true);
-        if has_pending {
-            self.mark_failed(message);
-        }
-    }
-
-    fn should_buffer_write(&self) -> Result<bool, SidecarError> {
-        if self.failed.load(Ordering::SeqCst) {
-            return Err(self.failure_error());
-        }
-        let state = self.state.lock().map_err(|_| {
-            SidecarError::InvalidState(String::from("loopback TLS pending write lock poisoned"))
-        })?;
-        Ok(!self.tls_handshake_complete.load(Ordering::SeqCst)
-            || !state.buffer.is_empty()
-            || state.flushing)
-    }
-
-    pub(crate) fn append_write(&self, contents: &[u8]) -> Result<(), SidecarError> {
-        if self.failed.load(Ordering::SeqCst) {
-            return Err(self.failure_error());
-        }
-        let mut state = self.state.lock().map_err(|_| {
-            SidecarError::InvalidState(String::from("loopback TLS pending write lock poisoned"))
-        })?;
-        let observed = state.buffer.len().saturating_add(contents.len());
-        if observed > LOOPBACK_TLS_PENDING_WRITE_BUFFER_BYTES {
-            return Err(SidecarError::Execution(format!(
-                "loopback TLS pending write buffer exceeded: {observed} bytes > {cap} bytes (limit: loopback TLS pending write buffer)",
-                cap = LOOPBACK_TLS_PENDING_WRITE_BUFFER_BYTES
-            )));
-        }
-        if !state.warned_near_cap && observed >= LOOPBACK_TLS_PENDING_WRITE_WARNING_BYTES {
-            state.warned_near_cap = true;
-            tracing::warn!(
-                limit = "loopback_tls_pending_write_buffer",
-                observed_bytes = observed,
-                cap_bytes = LOOPBACK_TLS_PENDING_WRITE_BUFFER_BYTES,
-                fill_percent =
-                    (observed as f64 / LOOPBACK_TLS_PENDING_WRITE_BUFFER_BYTES as f64) * 100.0,
-                wired = "invariant.loopbackTlsPendingWriteBufferBytes",
-                "loopback TLS pending write buffer is near capacity"
-            );
-        }
-        state.buffer.extend_from_slice(contents);
-        Ok(())
-    }
-
-    fn defer_shutdown_write(&self) -> Result<(), SidecarError> {
-        if self.failed.load(Ordering::SeqCst) {
-            return Err(self.failure_error());
-        }
-        let mut state = self.state.lock().map_err(|_| {
-            SidecarError::InvalidState(String::from("loopback TLS pending write lock poisoned"))
-        })?;
-        state.defer_shutdown_write = true;
-        Ok(())
-    }
-
-    fn take_buffer_for_flush(&self) -> Result<Option<Vec<u8>>, SidecarError> {
-        let mut state = self.state.lock().map_err(|_| {
-            SidecarError::InvalidState(String::from("loopback TLS pending write lock poisoned"))
-        })?;
-        if state.buffer.is_empty() {
-            return Ok(None);
-        }
-        state.flushing = true;
-        Ok(Some(std::mem::take(&mut state.buffer)))
-    }
-
-    fn finish_flush(&self) {
-        if let Ok(mut state) = self.state.lock() {
-            state.flushing = false;
-        }
-    }
-
-    fn take_deferred_shutdown_write(&self) -> Result<bool, SidecarError> {
-        let mut state = self.state.lock().map_err(|_| {
-            SidecarError::InvalidState(String::from("loopback TLS pending write lock poisoned"))
-        })?;
-        if state.buffer.is_empty() && !state.flushing && state.defer_shutdown_write {
-            state.defer_shutdown_write = false;
-            return Ok(true);
-        }
-        Ok(false)
-    }
-
-    fn interrupt_own_reader(&self) {
-        crate::state::LoopbackTlsEndpoint::interrupt_reader(&self.pair, self.is_lower_socket);
-    }
-}
-
-fn parse_tls_client_hello_from_bytes(
-    buffer: &[u8],
-) -> Result<Option<JavascriptTlsClientHello>, SidecarError> {
-    if buffer.is_empty() {
-        return Ok(None);
-    }
-
-    let mut acceptor = rustls::server::Acceptor::default();
-    let mut cursor = Cursor::new(buffer);
-    acceptor.read_tls(&mut cursor).map_err(sidecar_net_error)?;
-    let Some(accepted) = acceptor.accept().map_err(|(error, _)| {
-        SidecarError::Execution(format!("failed to parse TLS client hello: {error}"))
-    })?
-    else {
-        return Ok(None);
-    };
-    let client_hello = accepted.client_hello();
-    let alpn_protocols = client_hello.alpn().map(|protocols| {
-        protocols
-            .filter_map(|protocol| String::from_utf8(protocol.to_vec()).ok())
-            .collect::<Vec<_>>()
-    });
-    Ok(Some(JavascriptTlsClientHello {
-        servername: client_hello.server_name().map(str::to_owned),
-        alpn_protocols,
-    }))
-}
-
-fn peek_loopback_tls_client_hello(
-    vm_id: &str,
-    socket_id: SocketId,
-    peer_socket_id: SocketId,
-) -> Result<Option<JavascriptTlsClientHello>, SidecarError> {
-    let key = loopback_tls_transport_key(vm_id, socket_id, peer_socket_id);
-    let registry = loopback_tls_transport_registry();
-    let pair = registry
-        .lock()
-        .map_err(|_| {
-            SidecarError::InvalidState(String::from(
-                "loopback TLS transport registry lock poisoned",
-            ))
-        })?
-        .get(&key)
-        .and_then(Weak::upgrade);
-    let Some(pair) = pair else {
-        return Ok(None);
-    };
-    let is_lower_socket = socket_id <= peer_socket_id;
-    let state = pair.state.lock().map_err(|_| {
-        SidecarError::InvalidState(String::from("loopback TLS transport lock poisoned"))
-    })?;
-    let buffered = if is_lower_socket {
-        state.higher_to_lower.iter().copied().collect::<Vec<_>>()
-    } else {
-        state.lower_to_higher.iter().copied().collect::<Vec<_>>()
-    };
-    drop(state);
-    parse_tls_client_hello_from_bytes(&buffered)
-}
-
-fn wait_for_loopback_peer_socket_id(
-    kernel: &SidecarKernel,
-    socket_id: SocketId,
-) -> Option<SocketId> {
-    // Keep the total wait budget aligned with the previous ~500ms poll window.
-    let deadline = Instant::now() + Duration::from_millis(500);
-    let mut backoff = Duration::from_micros(100);
-    loop {
-        if let Some(peer_socket_id) = kernel
-            .socket_get(socket_id)
-            .and_then(|record| record.peer_socket_id())
-        {
-            return Some(peer_socket_id);
-        }
-        let now = Instant::now();
-        if now >= deadline {
-            break;
-        }
-        std::thread::sleep(backoff.min(deadline.saturating_duration_since(now)));
-        backoff = (backoff * 2).min(Duration::from_millis(1));
-    }
-    None
-}
-
-impl Drop for crate::state::LoopbackTlsEndpoint {
-    fn drop(&mut self) {
-        let _ = self.close_endpoint();
-
-        // Eagerly prune this endpoint's registry entry once we are the last owner
-        // of the shared transport pair. Without this, the `Weak` entry survives
-        // until the next `loopback_tls_endpoint()` call runs its lazy `retain()`,
-        // so dead entries accumulate under intermittent use. We must NOT remove
-        // the entry while a peer endpoint still shares the pair, otherwise a later
-        // connection for the same socket pair would fail to find it and build a
-        // mismatched fresh pair.
-        let Some(key) = self.registry_key.take() else {
-            return;
-        };
-        let Ok(mut transports) = loopback_tls_transport_registry().lock() else {
-            // Lock poisoned: leave the entry for the lazy `retain()` to reclaim.
-            return;
-        };
-        let should_remove = match transports.get(&key) {
-            // Only prune when the registered entry still points at *our* pair and
-            // `self` is its last strong owner. During `Drop` `self.pair` is still
-            // alive, so a strong count of 1 (after dropping the temporary upgrade)
-            // means no other endpoint references it.
-            Some(weak) => match weak.upgrade() {
-                Some(existing) => {
-                    let same_pair = Arc::ptr_eq(&existing, &self.pair);
-                    drop(existing);
-                    same_pair && Arc::strong_count(&self.pair) <= 1
-                }
-                None => true,
-            },
-            None => false,
-        };
-        if should_remove {
-            transports.remove(&key);
-        }
-    }
-}
-
-impl Read for crate::state::LoopbackTlsEndpoint {
-    fn read(&mut self, buffer: &mut [u8]) -> std::io::Result<usize> {
-        let mut state = self
-            .pair
-            .state
-            .lock()
-            .map_err(|_| std::io::Error::other("loopback TLS transport lock poisoned"))?;
-
-        loop {
-            let (peer_write_closed, peer_closed) = if self.is_lower_socket {
-                (state.higher_write_closed, state.higher_closed)
-            } else {
-                (state.lower_write_closed, state.lower_closed)
-            };
-
-            let incoming = if self.is_lower_socket {
-                &mut state.higher_to_lower
-            } else {
-                &mut state.lower_to_higher
-            };
-
-            if !incoming.is_empty() {
-                let count = incoming.len().min(buffer.len());
-                let (head, tail) = incoming.as_slices();
-                let head_count = head.len().min(count);
-                buffer[..head_count].copy_from_slice(&head[..head_count]);
-                if head_count < count {
-                    buffer[head_count..count].copy_from_slice(&tail[..count - head_count]);
-                }
-                incoming.drain(..count);
-                return Ok(count);
-            }
-
-            if peer_write_closed || peer_closed {
-                return Ok(0);
-            }
-
-            let read_interrupted = if self.is_lower_socket {
-                std::mem::take(&mut state.lower_read_interrupt)
-            } else {
-                std::mem::take(&mut state.higher_read_interrupt)
-            };
-            if read_interrupted {
-                return Err(std::io::Error::new(
-                    std::io::ErrorKind::WouldBlock,
-                    "loopback TLS transport read interrupted",
-                ));
-            }
-
-            let (next_state, wait_result) = self
-                .pair
-                .ready
-                .wait_timeout(state, self.poll_timeout)
-                .map_err(|_| std::io::Error::other("loopback TLS transport lock poisoned"))?;
-            state = next_state;
-            if wait_result.timed_out() {
-                return Err(std::io::Error::new(
-                    std::io::ErrorKind::WouldBlock,
-                    "loopback TLS transport read timed out",
-                ));
-            }
-        }
-    }
-}
-
-impl Write for crate::state::LoopbackTlsEndpoint {
-    fn write(&mut self, buffer: &[u8]) -> std::io::Result<usize> {
-        let mut state = self
-            .pair
-            .state
-            .lock()
-            .map_err(|_| std::io::Error::other("loopback TLS transport lock poisoned"))?;
-
-        let peer_closed = if self.is_lower_socket {
-            state.higher_closed
-        } else {
-            state.lower_closed
-        };
-        let outgoing = if self.is_lower_socket {
-            &mut state.lower_to_higher
-        } else {
-            &mut state.higher_to_lower
-        };
-        if peer_closed {
-            return Err(std::io::Error::new(
-                std::io::ErrorKind::BrokenPipe,
-                "loopback TLS peer is closed",
-            ));
-        }
-
-        outgoing.extend(buffer.iter().copied());
-        self.pair.ready.notify_all();
-        Ok(buffer.len())
-    }
-
-    fn flush(&mut self) -> std::io::Result<()> {
-        Ok(())
-    }
-}
-
-#[cfg(test)]
-mod loopback_tls_registry_tests {
-    use super::{
-        loopback_tls_endpoint, loopback_tls_registry_contains, loopback_tls_transport_key,
-    };
-
-    // Each test uses a unique vm_id so the process-global registry stays
-    // partitioned across concurrently running tests.
-
-    #[test]
-    fn dropping_endpoint_removes_its_registry_entry() {
-        let vm_id = "loopback-tls-drop-removes-entry";
-        let key = loopback_tls_transport_key(vm_id, 1, 2);
-
-        let endpoint = loopback_tls_endpoint(vm_id, 1, 2).expect("create endpoint");
-        assert!(
-            loopback_tls_registry_contains(&key),
-            "registry should contain the key while the endpoint is alive"
-        );
-
-        drop(endpoint);
-        assert!(
-            !loopback_tls_registry_contains(&key),
-            "registry entry must be pruned in the endpoint's Drop, not left for the lazy retain()"
-        );
-    }
-
-    #[test]
-    fn registry_entry_survives_until_last_peer_endpoint_drops() {
-        let vm_id = "loopback-tls-shared-pair";
-        let key = loopback_tls_transport_key(vm_id, 3, 4);
-
-        // Both peers of a loopback connection share the same transport pair.
-        let lower = loopback_tls_endpoint(vm_id, 3, 4).expect("create lower endpoint");
-        let higher = loopback_tls_endpoint(vm_id, 4, 3).expect("create higher endpoint");
-        assert!(loopback_tls_registry_contains(&key));
-
-        // Dropping one peer must keep the entry, since the other peer still owns
-        // the shared pair and a later connection must be able to find it.
-        drop(lower);
-        assert!(
-            loopback_tls_registry_contains(&key),
-            "entry must survive while a peer endpoint still shares the pair"
-        );
-
-        drop(higher);
-        assert!(
-            !loopback_tls_registry_contains(&key),
-            "entry must be pruned once the last peer endpoint drops"
-        );
-    }
-}
-
-// TCP types moved to crate::state
-
-struct ActiveTcpConnectRequest<'a, B> {
-    bridge: &'a SharedBridge<B>,
-    kernel: &'a mut SidecarKernel,
-    kernel_pid: u32,
-    vm_id: &'a str,
-    dns: &'a VmDnsConfig,
-    host: &'a str,
-    port: u16,
-    local_address: Option<&'a str>,
-    local_port: Option<u16>,
-    local_reservation: Option<(JavascriptSocketFamily, u16)>,
-    context: &'a JavascriptSocketPathContext,
-}
-
-struct ActiveUdpSendToRequest<'a, B> {
-    bridge: &'a SharedBridge<B>,
-    kernel: &'a mut SidecarKernel,
-    kernel_pid: u32,
-    vm_id: &'a str,
-    dns: &'a VmDnsConfig,
-    host: &'a str,
-    port: u16,
-    context: &'a JavascriptSocketPathContext,
-    contents: &'a [u8],
-}
-
-struct UdpRemoteAddrRequest<'a, B> {
-    bridge: &'a SharedBridge<B>,
-    kernel: &'a SidecarKernel,
-    vm_id: &'a str,
-    dns: &'a VmDnsConfig,
-    host: &'a str,
-    port: u16,
-    family: JavascriptUdpFamily,
-    context: &'a JavascriptSocketPathContext,
-}
-
-pub(crate) struct JavascriptSyncRpcServiceRequest<'a, B> {
-    pub(crate) bridge: &'a SharedBridge<B>,
-    pub(crate) vm_id: &'a str,
-    pub(crate) dns: &'a VmDnsConfig,
-    pub(crate) socket_paths: &'a JavascriptSocketPathContext,
-    pub(crate) kernel: &'a mut SidecarKernel,
-    pub(crate) kernel_readiness: KernelSocketReadinessRegistry,
-    pub(crate) process: &'a mut ActiveProcess,
-    pub(crate) sync_request: &'a JavascriptSyncRpcRequest,
-    pub(crate) resource_limits: &'a ResourceLimits,
-    pub(crate) network_counts: NetworkResourceCounts,
-}
-
-pub(crate) enum JavascriptSyncRpcServiceResponse {
-    Json(Value),
-    Raw(Vec<u8>),
-}
-
-impl From<Value> for JavascriptSyncRpcServiceResponse {
-    fn from(value: Value) -> Self {
-        Self::Json(value)
-    }
-}
-
-impl JavascriptSyncRpcServiceResponse {
-    fn as_json(&self) -> Option<&Value> {
-        match self {
-            Self::Json(value) => Some(value),
-            Self::Raw(_) => None,
-        }
-    }
-}
-
-pub(crate) struct JavascriptNetSyncRpcServiceRequest<'a, B> {
-    pub(crate) bridge: &'a SharedBridge<B>,
-    pub(crate) vm_id: &'a str,
-    pub(crate) dns: &'a VmDnsConfig,
-    pub(crate) socket_paths: &'a JavascriptSocketPathContext,
-    pub(crate) kernel: &'a mut SidecarKernel,
-    pub(crate) kernel_readiness: KernelSocketReadinessRegistry,
-    pub(crate) process: &'a mut ActiveProcess,
-    pub(crate) sync_request: &'a JavascriptSyncRpcRequest,
-    pub(crate) resource_limits: &'a ResourceLimits,
-    pub(crate) network_counts: NetworkResourceCounts,
-}
-
-struct LoopbackHttpResponseWaitRequest<'a, B> {
-    bridge: &'a SharedBridge<B>,
-    vm_id: &'a str,
-    dns: &'a VmDnsConfig,
-    socket_paths: &'a JavascriptSocketPathContext,
-    kernel: &'a mut SidecarKernel,
-    kernel_readiness: KernelSocketReadinessRegistry,
-    process: &'a mut ActiveProcess,
-    resource_limits: &'a ResourceLimits,
-    request_key: (u64, u64),
-}
-
-pub(crate) struct LoopbackHttpDispatchRequest<'a, B> {
-    pub(crate) bridge: &'a SharedBridge<B>,
-    pub(crate) vm_id: &'a str,
-    pub(crate) dns: &'a VmDnsConfig,
-    pub(crate) socket_paths: &'a JavascriptSocketPathContext,
-    pub(crate) kernel: &'a mut SidecarKernel,
-    pub(crate) kernel_readiness: KernelSocketReadinessRegistry,
-    pub(crate) process: &'a mut ActiveProcess,
-    pub(crate) resource_limits: &'a ResourceLimits,
-    pub(crate) server_id: u64,
-    pub(crate) request_json: &'a str,
-}
-
-struct JavascriptDgramSyncRpcServiceRequest<'a, B> {
-    bridge: &'a SharedBridge<B>,
-    kernel: &'a mut SidecarKernel,
-    vm_id: &'a str,
-    dns: &'a VmDnsConfig,
-    socket_paths: &'a JavascriptSocketPathContext,
-    process: &'a mut ActiveProcess,
-    kernel_readiness: KernelSocketReadinessRegistry,
-    sync_request: &'a JavascriptSyncRpcRequest,
-    resource_limits: &'a ResourceLimits,
-    network_counts: NetworkResourceCounts,
-}
-
-struct JavascriptHttp2SyncRpcServiceRequest<'a, B> {
-    bridge: &'a SharedBridge<B>,
-    kernel: &'a mut SidecarKernel,
-    vm_id: &'a str,
-    dns: &'a VmDnsConfig,
-    socket_paths: &'a JavascriptSocketPathContext,
-    process: &'a mut ActiveProcess,
-    sync_request: &'a JavascriptSyncRpcRequest,
-    resource_limits: &'a ResourceLimits,
-    network_counts: NetworkResourceCounts,
-}
-
-impl ActiveTcpSocket {
-    fn connect<B>(request: ActiveTcpConnectRequest<'_, B>) -> Result<Self, SidecarError>
-    where
-        B: NativeSidecarBridge + Send + 'static,
-        BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-    {
-        let ActiveTcpConnectRequest {
-            bridge,
-            kernel,
-            kernel_pid,
-            vm_id,
-            dns,
-            host,
-            port,
-            local_address,
-            local_port,
-            local_reservation,
-            context,
-        } = request;
-        let resolved = resolve_tcp_connect_addr(bridge, kernel, vm_id, dns, host, port, context)?;
-        if resolved.use_kernel_loopback {
-            let family = JavascriptSocketFamily::from_ip(resolved.guest_remote_addr.ip());
-            let requested_local_port = local_port.unwrap_or(0);
-            let local_port = if requested_local_port != 0
-                && local_reservation == Some((family, requested_local_port))
-            {
-                requested_local_port
-            } else {
-                allocate_guest_listen_port(
-                    requested_local_port,
-                    family,
-                    &context.used_tcp_guest_ports,
-                    context.listen_policy,
-                )?
-            };
-            let local_ip = match (family, local_address) {
-                (JavascriptSocketFamily::Ipv4, Some("0.0.0.0")) => {
-                    IpAddr::V4(Ipv4Addr::UNSPECIFIED)
-                }
-                (JavascriptSocketFamily::Ipv4, Some("127.0.0.1") | Some("localhost") | None) => {
-                    IpAddr::V4(Ipv4Addr::LOCALHOST)
-                }
-                (JavascriptSocketFamily::Ipv6, Some("::")) => IpAddr::V6(Ipv6Addr::UNSPECIFIED),
-                (JavascriptSocketFamily::Ipv6, Some("::1") | Some("localhost") | None) => {
-                    IpAddr::V6(Ipv6Addr::LOCALHOST)
-                }
-                (JavascriptSocketFamily::Ipv4, Some(other)) => {
-                    return Err(SidecarError::Execution(format!(
-                        "EACCES: TCP sockets must bind to loopback or unspecified addresses, got {other}"
-                    )));
-                }
-                (JavascriptSocketFamily::Ipv6, Some(other)) => {
-                    return Err(SidecarError::Execution(format!(
-                        "EACCES: TCP sockets must bind to loopback or unspecified addresses, got {other}"
-                    )));
-                }
-            };
-            let local_addr = SocketAddr::new(local_ip, local_port);
-            let spec = match family {
-                JavascriptSocketFamily::Ipv4 => SocketSpec::tcp(),
-                JavascriptSocketFamily::Ipv6 => {
-                    SocketSpec::new(SocketDomain::Inet6, SocketType::Stream)
-                }
-            };
-            let socket_id = kernel
-                .socket_create(EXECUTION_DRIVER_NAME, kernel_pid, spec)
-                .map_err(kernel_error)?;
-            kernel
-                .socket_bind_inet(
-                    EXECUTION_DRIVER_NAME,
-                    kernel_pid,
-                    socket_id,
-                    InetSocketAddress::new(local_ip.to_string(), local_port),
-                )
-                .map_err(kernel_error)?;
-            kernel
-                .socket_connect_inet_loopback(
-                    EXECUTION_DRIVER_NAME,
-                    kernel_pid,
-                    socket_id,
-                    InetSocketAddress::new(
-                        resolved.guest_remote_addr.ip().to_string(),
-                        resolved.guest_remote_addr.port(),
-                    ),
-                )
-                .map_err(kernel_error)?;
-            return Ok(Self::from_kernel(
-                socket_id,
-                None,
-                local_addr,
-                resolved.guest_remote_addr,
-            ));
-        }
-
-        let stream = TcpStream::connect_timeout(&resolved.actual_addr, Duration::from_secs(30))
-            .map_err(sidecar_net_error)?;
-        let guest_local_addr = stream.local_addr().map_err(sidecar_net_error)?;
-        Self::from_stream(stream, None, guest_local_addr, resolved.guest_remote_addr)
-    }
-
-    fn from_stream(
-        stream: TcpStream,
-        listener_id: Option<String>,
-        guest_local_addr: SocketAddr,
-        guest_remote_addr: SocketAddr,
-    ) -> Result<Self, SidecarError> {
-        let read_stream = stream.try_clone().map_err(sidecar_net_error)?;
-        read_stream
-            .set_read_timeout(Some(TCP_SOCKET_POLL_TIMEOUT))
-            .map_err(sidecar_net_error)?;
-        let stream = Arc::new(Mutex::new(stream));
-        let pending_read_stream = Arc::new(Mutex::new(Some(read_stream)));
-        let (sender, events) = mpsc::channel();
-        let tls_mode = Arc::new(AtomicBool::new(false));
-        let tls_stream = Arc::new(Mutex::new(None));
-        let tls_state = Arc::new(Mutex::new(None));
-        let loopback_tls_pending_write = Arc::new(Mutex::new(None));
-        let saw_local_shutdown = Arc::new(AtomicBool::new(false));
-        let saw_remote_end = Arc::new(AtomicBool::new(false));
-        let close_notified = Arc::new(AtomicBool::new(false));
-
-        Ok(Self {
-            stream: Some(stream),
-            pending_read_stream: Some(pending_read_stream),
-            events: Some(events),
-            event_sender: Some(sender),
-            event_pusher: Arc::new(Mutex::new(None)),
-            kernel_socket_id: None,
-            no_delay: false,
-            keep_alive: false,
-            keep_alive_initial_delay_secs: None,
-            guest_local_addr,
-            guest_remote_addr,
-            listener_id,
-            tls_mode,
-            tls_stream,
-            tls_state,
-            loopback_tls_pending_write,
-            saw_local_shutdown,
-            saw_remote_end,
-            close_notified,
-        })
-    }
-
-    fn from_kernel(
-        socket_id: SocketId,
-        listener_id: Option<String>,
-        guest_local_addr: SocketAddr,
-        guest_remote_addr: SocketAddr,
-    ) -> Self {
-        let (sender, events) = mpsc::channel();
-        Self {
-            stream: None,
-            pending_read_stream: None,
-            events: Some(events),
-            event_sender: Some(sender),
-            event_pusher: Arc::new(Mutex::new(None)),
-            kernel_socket_id: Some(socket_id),
-            no_delay: false,
-            keep_alive: false,
-            keep_alive_initial_delay_secs: None,
-            guest_local_addr,
-            guest_remote_addr,
-            listener_id,
-            tls_mode: Arc::new(AtomicBool::new(false)),
-            tls_stream: Arc::new(Mutex::new(None)),
-            tls_state: Arc::new(Mutex::new(None)),
-            loopback_tls_pending_write: Arc::new(Mutex::new(None)),
-            saw_local_shutdown: Arc::new(AtomicBool::new(false)),
-            saw_remote_end: Arc::new(AtomicBool::new(false)),
-            close_notified: Arc::new(AtomicBool::new(false)),
-        }
-    }
-
-    fn set_event_pusher(&self, session: Option<V8SessionHandle>, socket_id: String) {
-        let Some(session) = session else {
-            return;
-        };
-        if let Ok(mut pusher) = self.event_pusher.lock() {
-            *pusher = Some(JavascriptSocketEventPusher { session, socket_id });
-        }
-    }
-
-    fn poll(
-        &mut self,
-        kernel: &mut SidecarKernel,
-        kernel_pid: u32,
-        wait: Duration,
-        trace_enabled: bool,
-    ) -> Result<Option<JavascriptTcpSocketEvent>, SidecarError> {
-        if self.tls_mode.load(Ordering::SeqCst) {
-            self.ensure_tcp_reader()?;
-            return match self
-                .events
-                .as_ref()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("TCP socket event channel missing"))
-                })?
-                .recv_timeout(wait)
-            {
-                Ok(event) => Ok(Some(event)),
-                Err(RecvTimeoutError::Timeout) => Ok(None),
-                Err(RecvTimeoutError::Disconnected) => Ok(None),
-            };
-        }
-
-        if let Some(socket_id) = self.kernel_socket_id {
-            let poll_started = Instant::now();
-            let result = kernel
-                .poll_targets(
-                    EXECUTION_DRIVER_NAME,
-                    kernel_pid,
-                    vec![PollTargetEntry::socket(
-                        socket_id,
-                        POLLIN | POLLHUP | POLLERR,
-                    )],
-                    i32::try_from(wait.as_millis()).unwrap_or(i32::MAX),
-                )
-                .map_err(kernel_error)?;
-            let poll_elapsed = poll_started.elapsed();
-            let revents = result
-                .targets
-                .first()
-                .map(|entry| entry.revents)
-                .unwrap_or_else(PollEvents::empty);
-            record_net_tcp_kernel_poll(trace_enabled, wait, poll_elapsed, revents);
-            if revents.is_empty() {
-                return Ok(None);
-            }
-            if revents.intersects(POLLIN) {
-                let read_started = Instant::now();
-                let read_result =
-                    kernel.socket_read(EXECUTION_DRIVER_NAME, kernel_pid, socket_id, 64 * 1024);
-                if trace_enabled {
-                    NET_TCP_TRACE_COUNTERS.socket_read_kernel_us.fetch_add(
-                        duration_micros_u64(read_started.elapsed()),
-                        Ordering::Relaxed,
-                    );
-                }
-                return match read_result {
-                    Ok(Some(bytes)) if !bytes.is_empty() => {
-                        if trace_enabled {
-                            NET_TCP_TRACE_COUNTERS
-                                .socket_read_data_events
-                                .fetch_add(1, Ordering::Relaxed);
-                            NET_TCP_TRACE_COUNTERS.socket_read_bytes.fetch_add(
-                                u64::try_from(bytes.len()).unwrap_or(u64::MAX),
-                                Ordering::Relaxed,
-                            );
-                        }
-                        Ok(Some(JavascriptTcpSocketEvent::Data(bytes)))
-                    }
-                    Ok(Some(_)) => {
-                        if trace_enabled {
-                            NET_TCP_TRACE_COUNTERS
-                                .socket_read_data_events
-                                .fetch_add(1, Ordering::Relaxed);
-                        }
-                        Ok(Some(JavascriptTcpSocketEvent::Data(Vec::new())))
-                    }
-                    Ok(None) => {
-                        if trace_enabled {
-                            NET_TCP_TRACE_COUNTERS
-                                .socket_read_end_events
-                                .fetch_add(1, Ordering::Relaxed);
-                        }
-                        self.saw_remote_end.store(true, Ordering::SeqCst);
-                        Ok(Some(JavascriptTcpSocketEvent::End))
-                    }
-                    Err(error) if error.code() == "EAGAIN" => {
-                        if trace_enabled {
-                            NET_TCP_TRACE_COUNTERS
-                                .socket_read_eagain
-                                .fetch_add(1, Ordering::Relaxed);
-                        }
-                        Ok(None)
-                    }
-                    Err(error) => {
-                        if trace_enabled {
-                            NET_TCP_TRACE_COUNTERS
-                                .socket_read_errors
-                                .fetch_add(1, Ordering::Relaxed);
-                        }
-                        Ok(Some(JavascriptTcpSocketEvent::Error {
-                            code: Some(error.code().to_string()),
-                            message: error.to_string(),
-                        }))
-                    }
-                };
-            }
-            if revents.intersects(POLLHUP) {
-                self.saw_remote_end.store(true, Ordering::SeqCst);
-                return Ok(Some(JavascriptTcpSocketEvent::End));
-            }
-            if revents.intersects(POLLERR) {
-                return Ok(Some(JavascriptTcpSocketEvent::Error {
-                    code: Some(String::from("EPIPE")),
-                    message: String::from("kernel TCP socket reported POLLERR"),
-                }));
-            }
-            return Ok(None);
-        }
-
-        self.ensure_tcp_reader()?;
-        match self
-            .events
-            .as_ref()
-            .ok_or_else(|| {
-                SidecarError::InvalidState(String::from("TCP socket event channel missing"))
-            })?
-            .recv_timeout(wait)
-        {
-            Ok(event) => Ok(Some(event)),
-            Err(RecvTimeoutError::Timeout) => Ok(None),
-            Err(RecvTimeoutError::Disconnected) => Ok(None),
-        }
-    }
-
-    fn ensure_tcp_reader(&self) -> Result<(), SidecarError> {
-        if self.kernel_socket_id.is_some() {
-            return Ok(());
-        }
-        if self.tls_mode.load(Ordering::SeqCst) {
-            return Ok(());
-        }
-        let read_stream = self
-            .pending_read_stream
-            .as_ref()
-            .ok_or_else(|| {
-                SidecarError::InvalidState(String::from("TCP socket reader handle missing"))
-            })?
-            .lock()
-            .map_err(|_| {
-                SidecarError::InvalidState(String::from("TCP socket reader lock poisoned"))
-            })?
-            .take();
-        if let Some(read_stream) = read_stream {
-            spawn_tcp_socket_reader(
-                read_stream,
-                self.event_sender
-                    .as_ref()
-                    .ok_or_else(|| {
-                        SidecarError::InvalidState(String::from("TCP socket event sender missing"))
-                    })?
-                    .clone(),
-                Arc::clone(&self.event_pusher),
-                Arc::clone(&self.tls_mode),
-                Arc::clone(&self.saw_local_shutdown),
-                Arc::clone(&self.saw_remote_end),
-                Arc::clone(&self.close_notified),
-            );
-        }
-        Ok(())
-    }
-
-    fn socket_info(&self) -> Value {
-        tcp_socket_info_value(&self.guest_local_addr, &self.guest_remote_addr)
-    }
-
-    fn set_no_delay(&mut self, enable: bool) -> Result<(), SidecarError> {
-        self.no_delay = enable;
-        if self.kernel_socket_id.is_some() {
-            return Ok(());
-        }
-        let stream = self
-            .stream
-            .as_ref()
-            .ok_or_else(|| SidecarError::InvalidState(String::from("TCP socket stream missing")))?
-            .lock()
-            .map_err(|_| SidecarError::InvalidState(String::from("TCP socket lock poisoned")))?;
-        stream.set_nodelay(enable).map_err(sidecar_net_error)
-    }
-
-    fn set_keep_alive(
-        &mut self,
-        enable: bool,
-        initial_delay_secs: Option<u64>,
-    ) -> Result<(), SidecarError> {
-        self.keep_alive = enable;
-        self.keep_alive_initial_delay_secs = initial_delay_secs;
-        if self.kernel_socket_id.is_some() {
-            return Ok(());
-        }
-        let stream = self
-            .stream
-            .as_ref()
-            .ok_or_else(|| SidecarError::InvalidState(String::from("TCP socket stream missing")))?
-            .lock()
-            .map_err(|_| SidecarError::InvalidState(String::from("TCP socket lock poisoned")))?;
-        let socket = SockRef::from(&*stream);
-        socket.set_keepalive(enable).map_err(sidecar_net_error)?;
-        if enable {
-            if let Some(delay_secs) = initial_delay_secs.filter(|delay_secs| *delay_secs > 0) {
-                socket
-                    .set_tcp_keepalive(
-                        &TcpKeepalive::new().with_time(Duration::from_secs(delay_secs)),
-                    )
-                    .map_err(sidecar_net_error)?;
-            }
-        }
-        Ok(())
-    }
-
-    fn upgrade_tls(
-        &self,
-        vm_id: &str,
-        kernel: &SidecarKernel,
-        options: JavascriptTlsBridgeOptions,
-    ) -> Result<(), SidecarError> {
-        if self.tls_mode.load(Ordering::SeqCst) {
-            return Ok(());
-        }
-
-        let client_hello = if options.is_server {
-            self.peek_tls_client_hello(vm_id, kernel)?
-        } else {
-            None
-        };
-
-        let (tls_stream, loopback_pending_write) = if let Some(socket_id) = self.kernel_socket_id {
-            let peer_socket_id = wait_for_loopback_peer_socket_id(kernel, socket_id)
-                .ok_or_else(|| {
-                    SidecarError::Execution(format!(
-                        "ERR_NOT_IMPLEMENTED: kernel-backed loopback socket {socket_id} has no peer for TLS upgrade"
-                    ))
-                })?;
-            let endpoint = loopback_tls_endpoint(vm_id, socket_id, peer_socket_id)?;
-            let pending_write = LoopbackTlsPendingWriteHandle::new(&endpoint);
-            let tls_stream = if options.is_server {
-                ActiveTlsStream::LoopbackServer(build_server_loopback_tls_stream(
-                    endpoint, &options,
-                )?)
-            } else {
-                ActiveTlsStream::LoopbackClient(build_client_loopback_tls_stream(
-                    endpoint, &options,
-                )?)
-            };
-            (tls_stream, Some(pending_write))
-        } else {
-            self.pending_read_stream
-                .as_ref()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("TCP socket reader handle missing"))
-                })?
-                .lock()
-                .map_err(|_| {
-                    SidecarError::InvalidState(String::from("TCP socket reader lock poisoned"))
-                })?
-                .take();
-            let stream = self
-                .stream
-                .as_ref()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("TCP socket stream missing"))
-                })?
-                .lock()
-                .map_err(|_| {
-                    SidecarError::InvalidState(String::from("TCP socket lock poisoned"))
-                })?;
-            let cloned = stream.try_clone().map_err(sidecar_net_error)?;
-            drop(stream);
-
-            if options.is_server {
-                (
-                    ActiveTlsStream::Server(build_server_tls_stream(cloned, &options)?),
-                    None,
-                )
-            } else {
-                (
-                    ActiveTlsStream::Client(build_client_tls_stream(cloned, &options)?),
-                    None,
-                )
-            }
-        };
-
-        let tls_state = ActiveTlsState {
-            client_hello,
-            local_certificates: tls_local_certificates(&options)?,
-            session_reused: false,
-        };
-
-        self.tls_mode.store(true, Ordering::SeqCst);
-        {
-            let mut state = self
-                .tls_state
-                .lock()
-                .map_err(|_| SidecarError::InvalidState(String::from("TLS state lock poisoned")))?;
-            *state = Some(tls_state);
-        }
-        {
-            let mut stream = self.tls_stream.lock().map_err(|_| {
-                SidecarError::InvalidState(String::from("TLS stream lock poisoned"))
-            })?;
-            *stream = Some(tls_stream);
-        }
-        {
-            let mut pending = self.loopback_tls_pending_write.lock().map_err(|_| {
-                SidecarError::InvalidState(String::from(
-                    "loopback TLS pending write handle lock poisoned",
-                ))
-            })?;
-            *pending = loopback_pending_write.clone();
-        }
-
-        spawn_tls_socket_reader(
-            Arc::clone(&self.tls_stream),
-            loopback_pending_write,
-            self.event_sender
-                .as_ref()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("TCP socket event sender missing"))
-                })?
-                .clone(),
-            Arc::clone(&self.event_pusher),
-            Arc::clone(&self.saw_local_shutdown),
-            Arc::clone(&self.saw_remote_end),
-            Arc::clone(&self.close_notified),
-        );
-        Ok(())
-    }
-
-    fn peek_tls_client_hello(
-        &self,
-        vm_id: &str,
-        kernel: &SidecarKernel,
-    ) -> Result<Option<JavascriptTlsClientHello>, SidecarError> {
-        if let Some(socket_id) = self.kernel_socket_id {
-            let Some(peer_socket_id) = kernel
-                .socket_get(socket_id)
-                .and_then(|record| record.peer_socket_id())
-            else {
-                return Ok(None);
-            };
-            return peek_loopback_tls_client_hello(vm_id, socket_id, peer_socket_id);
-        }
-
-        let stream = self
-            .stream
-            .as_ref()
-            .ok_or_else(|| SidecarError::InvalidState(String::from("TCP socket stream missing")))?
-            .lock()
-            .map_err(|_| SidecarError::InvalidState(String::from("TCP socket lock poisoned")))?;
-        let mut buffer = vec![0_u8; 16 * 1024];
-        let bytes = match stream.peek(&mut buffer) {
-            Ok(0) => return Ok(None),
-            Ok(bytes) => bytes,
-            Err(error)
-                if matches!(
-                    error.kind(),
-                    std::io::ErrorKind::WouldBlock | std::io::ErrorKind::TimedOut
-                ) =>
-            {
-                return Ok(None);
-            }
-            Err(error) => return Err(sidecar_net_error(error)),
-        };
-        parse_tls_client_hello_from_bytes(&buffer[..bytes])
-    }
-
-    fn tls_client_hello_json(
-        &self,
-        vm_id: &str,
-        kernel: &SidecarKernel,
-    ) -> Result<Value, SidecarError> {
-        if let Some(client_hello) = self
-            .tls_state
-            .lock()
-            .map_err(|_| SidecarError::InvalidState(String::from("TLS state lock poisoned")))?
-            .as_ref()
-            .and_then(|state| state.client_hello.clone())
-        {
-            return javascript_net_json_string(
-                serde_json::to_value(client_hello).map_err(|error| {
-                    SidecarError::InvalidState(format!(
-                        "failed to serialize TLS client hello: {error}"
-                    ))
-                })?,
-                "net.socket_get_tls_client_hello",
-            );
-        }
-
-        javascript_net_json_string(
-            serde_json::to_value(
-                self.peek_tls_client_hello(vm_id, kernel)?
-                    .unwrap_or_default(),
-            )
-            .map_err(|error| {
-                SidecarError::InvalidState(format!("failed to serialize TLS client hello: {error}"))
-            })?,
-            "net.socket_get_tls_client_hello",
-        )
-    }
-
-    fn tls_query(&self, query: &str, detailed: bool) -> Result<Value, SidecarError> {
-        let state = self
-            .tls_state
-            .lock()
-            .map_err(|_| SidecarError::InvalidState(String::from("TLS state lock poisoned")))?
-            .clone();
-        let mut tls_stream = self
-            .tls_stream
-            .lock()
-            .map_err(|_| SidecarError::InvalidState(String::from("TLS stream lock poisoned")))?;
-        let Some(stream) = tls_stream.as_mut() else {
-            return javascript_net_json_string(
-                tls_bridge_undefined_value(),
-                "net.socket_tls_query",
-            );
-        };
-
-        let payload = match query {
-            "getSession" => tls_bridge_undefined_value(),
-            "isSessionReused" => Value::Bool(
-                state
-                    .as_ref()
-                    .is_some_and(|tls_state| tls_state.session_reused),
-            ),
-            "getPeerCertificate" => {
-                let certificate = stream
-                    .peer_certificates()
-                    .and_then(|certificates| certificates.first())
-                    .map(|certificate| {
-                        tls_certificate_bridge_value(certificate.as_ref(), detailed)
-                    });
-                certificate.unwrap_or_else(tls_bridge_undefined_value)
-            }
-            "getCertificate" => state
-                .as_ref()
-                .and_then(|tls_state| tls_state.local_certificates.first())
-                .map(|certificate| tls_certificate_bridge_value(certificate, detailed))
-                .unwrap_or_else(tls_bridge_undefined_value),
-            "getProtocol" => stream
-                .protocol_version()
-                .map(tls_protocol_name)
-                .map(Value::String)
-                .unwrap_or(Value::Null),
-            "getCipher" => stream
-                .negotiated_cipher_suite()
-                .map(tls_cipher_bridge_value)
-                .unwrap_or_else(tls_bridge_undefined_value),
-            other => {
-                return Err(SidecarError::InvalidState(format!(
-                    "unsupported TLS query {other}"
-                )));
-            }
-        };
-        javascript_net_json_string(payload, "net.socket_tls_query")
-    }
-
-    fn write_all(
-        &self,
-        kernel: &mut SidecarKernel,
-        kernel_pid: u32,
-        contents: &[u8],
-    ) -> Result<usize, SidecarError> {
-        if self.tls_mode.load(Ordering::SeqCst) {
-            let loopback_pending_write = self
-                .loopback_tls_pending_write
-                .lock()
-                .map_err(|_| {
-                    SidecarError::InvalidState(String::from(
-                        "loopback TLS pending write handle lock poisoned",
-                    ))
-                })?
-                .clone();
-            if let Some(pending_write) = loopback_pending_write.as_ref() {
-                if pending_write.should_buffer_write()? {
-                    pending_write.append_write(contents)?;
-                    return Ok(contents.len());
-                }
-                pending_write.interrupt_own_reader();
-            }
-            let mut tls_stream = self.tls_stream.lock().map_err(|_| {
-                SidecarError::InvalidState(String::from("TLS stream lock poisoned"))
-            })?;
-            let stream = tls_stream.as_mut().ok_or_else(|| {
-                SidecarError::InvalidState(String::from("TLS stream missing for upgraded socket"))
-            })?;
-            stream.write_all(contents)?;
-            return Ok(contents.len());
-        }
-        if let Some(socket_id) = self.kernel_socket_id {
-            return kernel
-                .socket_write(EXECUTION_DRIVER_NAME, kernel_pid, socket_id, contents)
-                .map_err(kernel_error);
-        }
-
-        let mut stream = self
-            .stream
-            .as_ref()
-            .ok_or_else(|| SidecarError::InvalidState(String::from("TCP socket stream missing")))?
-            .lock()
-            .map_err(|_| SidecarError::InvalidState(String::from("TCP socket lock poisoned")))?;
-        stream.write_all(contents).map_err(sidecar_net_error)?;
-        Ok(contents.len())
-    }
-
-    fn shutdown_write(
-        &self,
-        kernel: &mut SidecarKernel,
-        kernel_pid: u32,
-    ) -> Result<(), SidecarError> {
-        if self.tls_mode.load(Ordering::SeqCst) {
-            let loopback_pending_write = self
-                .loopback_tls_pending_write
-                .lock()
-                .map_err(|_| {
-                    SidecarError::InvalidState(String::from(
-                        "loopback TLS pending write handle lock poisoned",
-                    ))
-                })?
-                .clone();
-            if let Some(pending_write) = loopback_pending_write.as_ref() {
-                if pending_write.should_buffer_write()? {
-                    pending_write.defer_shutdown_write()?;
-                    self.saw_local_shutdown.store(true, Ordering::SeqCst);
-                    return Ok(());
-                }
-                pending_write.interrupt_own_reader();
-            }
-            if let Some(stream) = self
-                .tls_stream
-                .lock()
-                .map_err(|_| SidecarError::InvalidState(String::from("TLS stream lock poisoned")))?
-                .as_mut()
-            {
-                let _ = stream.send_close_notify();
-                let _ = stream.shutdown_write();
-            }
-            if self.kernel_socket_id.is_some() {
-                self.saw_local_shutdown.store(true, Ordering::SeqCst);
-                return Ok(());
-            }
-        }
-        if let Some(socket_id) = self.kernel_socket_id {
-            self.saw_local_shutdown.store(true, Ordering::SeqCst);
-            match kernel.socket_shutdown(
-                EXECUTION_DRIVER_NAME,
-                kernel_pid,
-                socket_id,
-                KernelSocketShutdown::Write,
-            ) {
-                Ok(()) => {}
-                Err(error) if error.code() == "ENOENT" => {}
-                Err(error) => return Err(kernel_error(error)),
-            }
-            return Ok(());
-        }
-        let stream = self
-            .stream
-            .as_ref()
-            .ok_or_else(|| SidecarError::InvalidState(String::from("TCP socket stream missing")))?
-            .lock()
-            .map_err(|_| SidecarError::InvalidState(String::from("TCP socket lock poisoned")))?;
-        self.saw_local_shutdown.store(true, Ordering::SeqCst);
-        match stream.shutdown(Shutdown::Write) {
-            Ok(()) => {}
-            Err(error) if error.kind() == std::io::ErrorKind::NotConnected => {}
-            Err(error) => return Err(sidecar_net_error(error)),
-        }
-        if self.saw_remote_end.load(Ordering::SeqCst)
-            && !self.close_notified.swap(true, Ordering::SeqCst)
-        {
-            let _ = self
-                .event_sender
-                .as_ref()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("TCP socket event sender missing"))
-                })?
-                .send(JavascriptTcpSocketEvent::Close { had_error: false });
-        }
-        Ok(())
-    }
-
-    fn close(&self, kernel: &mut SidecarKernel, kernel_pid: u32) -> Result<(), SidecarError> {
-        if self.tls_mode.load(Ordering::SeqCst) {
-            if let Some(pending_write) = self
-                .loopback_tls_pending_write
-                .lock()
-                .map_err(|_| {
-                    SidecarError::InvalidState(String::from(
-                        "loopback TLS pending write handle lock poisoned",
-                    ))
-                })?
-                .take()
-            {
-                pending_write.clear_for_close();
-                pending_write.interrupt_own_reader();
-            }
-            if let Some(stream) = self
-                .tls_stream
-                .lock()
-                .map_err(|_| SidecarError::InvalidState(String::from("TLS stream lock poisoned")))?
-                .as_mut()
-            {
-                let _ = stream.send_close_notify();
-                let _ = stream.close();
-            }
-        }
-        if let Some(socket_id) = self.kernel_socket_id {
-            return close_kernel_socket_idempotent(kernel, kernel_pid, socket_id);
-        }
-        let stream = self
-            .stream
-            .as_ref()
-            .ok_or_else(|| SidecarError::InvalidState(String::from("TCP socket stream missing")))?
-            .lock()
-            .map_err(|_| SidecarError::InvalidState(String::from("TCP socket lock poisoned")))?;
-        stream.shutdown(Shutdown::Both).map_err(sidecar_net_error)
-    }
-}
-
-fn close_kernel_socket_idempotent(
-    kernel: &mut SidecarKernel,
-    kernel_pid: u32,
-    socket_id: SocketId,
-) -> Result<(), SidecarError> {
-    match kernel.socket_close(EXECUTION_DRIVER_NAME, kernel_pid, socket_id) {
-        Ok(()) => Ok(()),
-        Err(error) if error.code() == "ENOENT" => Ok(()),
-        Err(error) => Err(kernel_error(error)),
-    }
-}
-
-fn register_kernel_readiness_target(
-    registry: &KernelSocketReadinessRegistry,
-    kernel_socket_id: Option<SocketId>,
-    session: Option<V8SessionHandle>,
-    target_id: String,
-    event: KernelSocketReadinessEvent,
-) {
-    let (Some(kernel_socket_id), Some(session)) = (kernel_socket_id, session) else {
-        return;
-    };
-    if let Ok(mut targets) = registry.lock() {
-        targets.insert(
-            kernel_socket_id,
-            KernelSocketReadinessTarget {
-                session,
-                target_id,
-                event,
-            },
-        );
-    }
-}
-
-fn unregister_kernel_readiness_target(
-    registry: &KernelSocketReadinessRegistry,
-    kernel_socket_id: Option<SocketId>,
-) {
-    let Some(kernel_socket_id) = kernel_socket_id else {
-        return;
-    };
-    if let Ok(mut targets) = registry.lock() {
-        targets.remove(&kernel_socket_id);
-    }
-}
-
-fn release_tcp_socket_handle(
-    process: &mut ActiveProcess,
-    socket_id: &str,
-    socket: ActiveTcpSocket,
-    kernel: &mut SidecarKernel,
-    kernel_readiness: &KernelSocketReadinessRegistry,
-) {
-    unregister_kernel_readiness_target(kernel_readiness, socket.kernel_socket_id);
-    if let Some(listener_id) = socket.listener_id.as_deref() {
-        if let Some(listener) = process.tcp_listeners.get_mut(listener_id) {
-            listener.release_connection(socket_id);
-        }
-    }
-    let _ = socket.close(kernel, process.kernel_pid);
-}
-
-fn release_unix_socket_handle(
-    process: &mut ActiveProcess,
-    socket_id: &str,
-    socket: ActiveUnixSocket,
-) {
-    if let Some(listener_id) = socket.listener_id.as_deref() {
-        if let Some(listener) = process.unix_listeners.get_mut(listener_id) {
-            listener.release_connection(socket_id);
-        }
-    }
-    let _ = socket.close();
-}
-
-impl ActiveTlsStream {
-    fn is_loopback(&self) -> bool {
-        matches!(self, Self::LoopbackClient(_) | Self::LoopbackServer(_))
-    }
-
-    fn is_handshaking(&self) -> bool {
-        match self {
-            Self::Client(stream) => stream.conn.is_handshaking(),
-            Self::Server(stream) => stream.conn.is_handshaking(),
-            Self::LoopbackClient(stream) => stream.conn.is_handshaking(),
-            Self::LoopbackServer(stream) => stream.conn.is_handshaking(),
-        }
-    }
-
-    fn set_loopback_poll_timeout(&mut self, timeout: Duration) {
-        match self {
-            Self::LoopbackClient(stream) => stream.sock.set_poll_timeout(timeout),
-            Self::LoopbackServer(stream) => stream.sock.set_poll_timeout(timeout),
-            Self::Client(_) | Self::Server(_) => {}
-        }
-    }
-
-    fn write_all(&mut self, contents: &[u8]) -> Result<(), SidecarError> {
-        match self {
-            Self::Client(stream) => {
-                stream.write_all(contents).map_err(sidecar_net_error)?;
-                stream.flush().map_err(sidecar_net_error)
-            }
-            Self::Server(stream) => {
-                stream.write_all(contents).map_err(sidecar_net_error)?;
-                stream.flush().map_err(sidecar_net_error)
-            }
-            Self::LoopbackClient(stream) => {
-                stream.write_all(contents).map_err(sidecar_net_error)?;
-                stream.flush().map_err(sidecar_net_error)
-            }
-            Self::LoopbackServer(stream) => {
-                stream.write_all(contents).map_err(sidecar_net_error)?;
-                stream.flush().map_err(sidecar_net_error)
-            }
-        }
-    }
-
-    fn read(&mut self, buffer: &mut [u8]) -> std::io::Result<usize> {
-        match self {
-            Self::Client(stream) => stream.read(buffer),
-            Self::Server(stream) => stream.read(buffer),
-            Self::LoopbackClient(stream) => stream.read(buffer),
-            Self::LoopbackServer(stream) => stream.read(buffer),
-        }
-    }
-
-    fn send_close_notify(&mut self) -> Result<(), SidecarError> {
-        match self {
-            Self::Client(stream) => {
-                stream.conn.send_close_notify();
-                let _ = stream.conn.complete_io(&mut stream.sock);
-            }
-            Self::Server(stream) => {
-                stream.conn.send_close_notify();
-                let _ = stream.conn.complete_io(&mut stream.sock);
-            }
-            Self::LoopbackClient(stream) => {
-                stream.conn.send_close_notify();
-                let _ = stream.conn.complete_io(&mut stream.sock);
-            }
-            Self::LoopbackServer(stream) => {
-                stream.conn.send_close_notify();
-                let _ = stream.conn.complete_io(&mut stream.sock);
-            }
-        }
-        Ok(())
-    }
-
-    fn shutdown_write(&mut self) -> Result<(), SidecarError> {
-        match self {
-            Self::Client(stream) => stream
-                .sock
-                .shutdown(Shutdown::Write)
-                .map_err(sidecar_net_error),
-            Self::Server(stream) => stream
-                .sock
-                .shutdown(Shutdown::Write)
-                .map_err(sidecar_net_error),
-            Self::LoopbackClient(stream) => stream.sock.shutdown_write(),
-            Self::LoopbackServer(stream) => stream.sock.shutdown_write(),
-        }
-    }
-
-    fn close(&mut self) -> Result<(), SidecarError> {
-        match self {
-            Self::Client(stream) => stream
-                .sock
-                .shutdown(Shutdown::Both)
-                .map_err(sidecar_net_error),
-            Self::Server(stream) => stream
-                .sock
-                .shutdown(Shutdown::Both)
-                .map_err(sidecar_net_error),
-            Self::LoopbackClient(stream) => stream.sock.close_endpoint(),
-            Self::LoopbackServer(stream) => stream.sock.close_endpoint(),
-        }
-    }
-
-    fn peer_certificates(&self) -> Option<&[CertificateDer<'static>]> {
-        match self {
-            Self::Client(stream) => stream.conn.peer_certificates(),
-            Self::Server(stream) => stream.conn.peer_certificates(),
-            Self::LoopbackClient(stream) => stream.conn.peer_certificates(),
-            Self::LoopbackServer(stream) => stream.conn.peer_certificates(),
-        }
-    }
-
-    fn negotiated_cipher_suite(&self) -> Option<rustls::SupportedCipherSuite> {
-        match self {
-            Self::Client(stream) => stream.conn.negotiated_cipher_suite(),
-            Self::Server(stream) => stream.conn.negotiated_cipher_suite(),
-            Self::LoopbackClient(stream) => stream.conn.negotiated_cipher_suite(),
-            Self::LoopbackServer(stream) => stream.conn.negotiated_cipher_suite(),
-        }
-    }
-
-    fn protocol_version(&self) -> Option<rustls::ProtocolVersion> {
-        match self {
-            Self::Client(stream) => stream.conn.protocol_version(),
-            Self::Server(stream) => stream.conn.protocol_version(),
-            Self::LoopbackClient(stream) => stream.conn.protocol_version(),
-            Self::LoopbackServer(stream) => stream.conn.protocol_version(),
-        }
-    }
-}
-
-// ActiveTcpListener moved to crate::state
-
-// Unix socket types moved to crate::state
-
-impl ActiveUnixSocket {
-    fn connect(host_path: &Path, guest_path: &str) -> Result<Self, SidecarError> {
-        let stream = UnixStream::connect(host_path).map_err(sidecar_net_error)?;
-        Self::from_stream(stream, None, None, Some(guest_path.to_owned()))
-    }
-
-    fn from_stream(
-        stream: UnixStream,
-        listener_id: Option<String>,
-        local_path: Option<String>,
-        remote_path: Option<String>,
-    ) -> Result<Self, SidecarError> {
-        let read_stream = stream.try_clone().map_err(sidecar_net_error)?;
-        let stream = Arc::new(Mutex::new(stream));
-        let (sender, events) = mpsc::channel();
-        let event_pusher = Arc::new(Mutex::new(None));
-        let saw_local_shutdown = Arc::new(AtomicBool::new(false));
-        let saw_remote_end = Arc::new(AtomicBool::new(false));
-        let close_notified = Arc::new(AtomicBool::new(false));
-        spawn_unix_socket_reader(
-            read_stream,
-            sender.clone(),
-            Arc::clone(&event_pusher),
-            Arc::clone(&saw_local_shutdown),
-            Arc::clone(&saw_remote_end),
-            Arc::clone(&close_notified),
-        );
-
-        Ok(Self {
-            stream,
-            events,
-            event_sender: sender,
-            event_pusher,
-            listener_id,
-            local_path,
-            remote_path,
-            saw_local_shutdown,
-            saw_remote_end,
-            close_notified,
-        })
-    }
-
-    fn set_event_pusher(&self, session: Option<V8SessionHandle>, socket_id: String) {
-        let Some(session) = session else {
-            return;
-        };
-        if let Ok(mut pusher) = self.event_pusher.lock() {
-            *pusher = Some(JavascriptSocketEventPusher { session, socket_id });
-        }
-    }
-
-    fn poll(&mut self, wait: Duration) -> Result<Option<JavascriptTcpSocketEvent>, SidecarError> {
-        match self.events.recv_timeout(wait) {
-            Ok(event) => Ok(Some(event)),
-            Err(RecvTimeoutError::Timeout) => Ok(None),
-            Err(RecvTimeoutError::Disconnected) => Ok(None),
-        }
-    }
-
-    fn socket_info(&self) -> Value {
-        unix_socket_info_value(self.local_path.as_deref(), self.remote_path.as_deref())
-    }
-
-    fn write_all(&self, contents: &[u8]) -> Result<usize, SidecarError> {
-        let mut stream = self
-            .stream
-            .lock()
-            .map_err(|_| SidecarError::InvalidState(String::from("Unix socket lock poisoned")))?;
-        stream.write_all(contents).map_err(sidecar_net_error)?;
-        Ok(contents.len())
-    }
-
-    fn shutdown_write(&self) -> Result<(), SidecarError> {
-        let stream = self
-            .stream
-            .lock()
-            .map_err(|_| SidecarError::InvalidState(String::from("Unix socket lock poisoned")))?;
-        self.saw_local_shutdown.store(true, Ordering::SeqCst);
-        stream
-            .shutdown(Shutdown::Write)
-            .map_err(sidecar_net_error)?;
-        if self.saw_remote_end.load(Ordering::SeqCst)
-            && !self.close_notified.swap(true, Ordering::SeqCst)
-        {
-            let _ = self
-                .event_sender
-                .send(JavascriptTcpSocketEvent::Close { had_error: false });
-        }
-        Ok(())
-    }
-
-    fn close(&self) -> Result<(), SidecarError> {
-        let stream = self
-            .stream
-            .lock()
-            .map_err(|_| SidecarError::InvalidState(String::from("Unix socket lock poisoned")))?;
-        stream.shutdown(Shutdown::Both).map_err(sidecar_net_error)
-    }
-}
-
-// ActiveUnixListener moved to crate::state
-
-impl ActiveUnixListener {
-    fn bind(
-        host_path: &Path,
-        guest_path: &str,
-        backlog: Option<u32>,
-    ) -> Result<Self, SidecarError> {
-        if let Some(parent) = host_path.parent() {
-            fs::create_dir_all(parent).map_err(sidecar_net_error)?;
-        }
-        let listener = UnixListener::bind(host_path).map_err(sidecar_net_error)?;
-        listener.set_nonblocking(true).map_err(sidecar_net_error)?;
-        Ok(Self {
-            listener,
-            path: guest_path.to_owned(),
-            backlog: usize::try_from(backlog.unwrap_or(DEFAULT_JAVASCRIPT_NET_BACKLOG))
-                .expect("default backlog fits within usize"),
-            active_connection_ids: BTreeSet::new(),
-        })
-    }
-
-    fn path(&self) -> &str {
-        &self.path
-    }
-
-    fn poll(
-        &mut self,
-        wait: Duration,
-    ) -> Result<Option<JavascriptUnixListenerEvent>, SidecarError> {
-        let deadline = Instant::now() + wait;
-        loop {
-            match self.listener.accept() {
-                Ok((stream, remote_addr)) => {
-                    if self.active_connection_ids.len() >= self.backlog {
-                        let _ = stream.shutdown(Shutdown::Both);
-                        if wait.is_zero() || Instant::now() >= deadline {
-                            return Ok(None);
-                        }
-                        continue;
-                    }
-
-                    let local_path = Some(self.path.clone());
-                    let remote_path = unix_socket_path(&remote_addr);
-                    return Ok(Some(JavascriptUnixListenerEvent::Connection(
-                        PendingUnixSocket {
-                            stream,
-                            local_path,
-                            remote_path,
-                        },
-                    )));
-                }
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                    if wait.is_zero() || Instant::now() >= deadline {
-                        return Ok(None);
-                    }
-                    if !wait_fd_readable_until(self.listener.as_fd(), deadline) {
-                        return Ok(None);
-                    }
-                }
-                Err(error) => {
-                    return Ok(Some(JavascriptUnixListenerEvent::Error {
-                        code: io_error_code(&error),
-                        message: error.to_string(),
-                    }));
-                }
-            }
-        }
-    }
-
-    fn close(&self) -> Result<(), SidecarError> {
-        Ok(())
-    }
-
-    fn active_connection_count(&self) -> usize {
-        self.active_connection_ids.len()
-    }
-
-    fn register_connection(&mut self, socket_id: &str) {
-        self.active_connection_ids.insert(socket_id.to_string());
-    }
-
-    fn release_connection(&mut self, socket_id: &str) {
-        self.active_connection_ids.remove(socket_id);
-    }
-}
-
-impl ActiveTcpListener {
-    fn bind(
-        bind_host: &str,
-        guest_host: &str,
-        guest_port: u16,
-        backlog: Option<u32>,
-    ) -> Result<Self, SidecarError> {
-        let bind_addr = resolve_tcp_bind_addr(bind_host, 0)?;
-        let guest_addr = resolve_tcp_bind_addr(guest_host, guest_port)?;
-        let listener = TcpListener::bind(bind_addr).map_err(sidecar_net_error)?;
-        listener.set_nonblocking(true).map_err(sidecar_net_error)?;
-        let local_addr = listener.local_addr().map_err(sidecar_net_error)?;
-        Ok(Self {
-            listener: Some(listener),
-            kernel_socket_id: None,
-            local_addr: Some(local_addr),
-            guest_local_addr: guest_addr,
-            backlog: usize::try_from(backlog.unwrap_or(DEFAULT_JAVASCRIPT_NET_BACKLOG))
-                .expect("default backlog fits within usize"),
-            active_connection_ids: BTreeSet::new(),
-        })
-    }
-
-    fn bind_kernel(
-        kernel: &mut SidecarKernel,
-        kernel_pid: u32,
-        guest_host: &str,
-        guest_port: u16,
-        backlog: Option<u32>,
-    ) -> Result<Self, SidecarError> {
-        let guest_addr = resolve_tcp_bind_addr(guest_host, guest_port)?;
-        let spec = match guest_addr {
-            SocketAddr::V4(_) => SocketSpec::tcp(),
-            SocketAddr::V6(_) => SocketSpec::new(SocketDomain::Inet6, SocketType::Stream),
-        };
-        let socket_id = kernel
-            .socket_create(EXECUTION_DRIVER_NAME, kernel_pid, spec)
-            .map_err(kernel_error)?;
-        kernel
-            .socket_bind_inet(
-                EXECUTION_DRIVER_NAME,
-                kernel_pid,
-                socket_id,
-                InetSocketAddress::new(guest_addr.ip().to_string(), guest_addr.port()),
-            )
-            .map_err(kernel_error)?;
-        kernel
-            .socket_listen(
-                EXECUTION_DRIVER_NAME,
-                kernel_pid,
-                socket_id,
-                usize::try_from(backlog.unwrap_or(DEFAULT_JAVASCRIPT_NET_BACKLOG))
-                    .expect("default backlog fits within usize"),
-            )
-            .map_err(kernel_error)?;
-        Ok(Self {
-            listener: None,
-            kernel_socket_id: Some(socket_id),
-            local_addr: Some(guest_addr),
-            guest_local_addr: guest_addr,
-            backlog: usize::try_from(backlog.unwrap_or(DEFAULT_JAVASCRIPT_NET_BACKLOG))
-                .expect("default backlog fits within usize"),
-            active_connection_ids: BTreeSet::new(),
-        })
-    }
-
-    pub(crate) fn local_addr(&self) -> SocketAddr {
-        self.local_addr.unwrap_or(self.guest_local_addr)
-    }
-
-    fn guest_local_addr(&self) -> SocketAddr {
-        self.guest_local_addr
-    }
-
-    fn poll(
-        &mut self,
-        kernel: &mut SidecarKernel,
-        kernel_pid: u32,
-        wait: Duration,
-        trace_enabled: bool,
-    ) -> Result<Option<JavascriptTcpListenerEvent>, SidecarError> {
-        if let Some(socket_id) = self.kernel_socket_id {
-            let poll_started = Instant::now();
-            let result = kernel
-                .poll_targets(
-                    EXECUTION_DRIVER_NAME,
-                    kernel_pid,
-                    vec![PollTargetEntry::socket(socket_id, POLLIN)],
-                    i32::try_from(wait.as_millis()).unwrap_or(i32::MAX),
-                )
-                .map_err(kernel_error)?;
-            let poll_elapsed = poll_started.elapsed();
-            let revents = result
-                .targets
-                .first()
-                .map(|entry| entry.revents)
-                .unwrap_or_else(PollEvents::empty);
-            record_net_tcp_kernel_poll(trace_enabled, wait, poll_elapsed, revents);
-            if revents.is_empty() {
-                return Ok(None);
-            }
-            let accepted_socket_id =
-                match kernel.socket_accept(EXECUTION_DRIVER_NAME, kernel_pid, socket_id) {
-                    Ok(accepted_socket_id) => accepted_socket_id,
-                    Err(error) if error.code() == "EAGAIN" => {
-                        if trace_enabled {
-                            NET_TCP_TRACE_COUNTERS
-                                .server_accept_eagain
-                                .fetch_add(1, Ordering::Relaxed);
-                        }
-                        return Ok(None);
-                    }
-                    Err(error) => {
-                        if trace_enabled {
-                            NET_TCP_TRACE_COUNTERS
-                                .server_accept_errors
-                                .fetch_add(1, Ordering::Relaxed);
-                        }
-                        return Ok(Some(JavascriptTcpListenerEvent::Error {
-                            code: Some(error.code().to_string()),
-                            message: error.to_string(),
-                        }));
-                    }
-                };
-            let accepted = kernel.socket_get(accepted_socket_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "accepted kernel TCP socket {accepted_socket_id} is missing"
-                ))
-            })?;
-            let local_addr = accepted.local_address().ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "accepted kernel TCP socket {accepted_socket_id} missing local address"
-                ))
-            })?;
-            let remote_addr = accepted.peer_address().ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "accepted kernel TCP socket {accepted_socket_id} missing peer address"
-                ))
-            })?;
-            if trace_enabled {
-                NET_TCP_TRACE_COUNTERS
-                    .server_accept_connections
-                    .fetch_add(1, Ordering::Relaxed);
-            }
-            return Ok(Some(JavascriptTcpListenerEvent::Connection(
-                PendingTcpSocket {
-                    stream: None,
-                    kernel_socket_id: Some(accepted_socket_id),
-                    preallocated: true,
-                    guest_local_addr: resolve_tcp_bind_addr(local_addr.host(), local_addr.port())?,
-                    guest_remote_addr: resolve_tcp_bind_addr(
-                        remote_addr.host(),
-                        remote_addr.port(),
-                    )?,
-                },
-            )));
-        }
-
-        let deadline = Instant::now() + wait;
-        loop {
-            match self
-                .listener
-                .as_ref()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("TCP listener socket missing"))
-                })?
-                .accept()
-            {
-                Ok((stream, remote_addr)) => {
-                    if self.active_connection_ids.len() >= self.backlog {
-                        let _ = stream.shutdown(Shutdown::Both);
-                        if wait.is_zero() || Instant::now() >= deadline {
-                            return Ok(None);
-                        }
-                        continue;
-                    }
-                    return Ok(Some(JavascriptTcpListenerEvent::Connection(
-                        PendingTcpSocket {
-                            stream: Some(stream),
-                            kernel_socket_id: None,
-                            preallocated: false,
-                            guest_local_addr: self.guest_local_addr,
-                            guest_remote_addr: SocketAddr::new(
-                                remote_addr.ip(),
-                                remote_addr.port(),
-                            ),
-                        },
-                    )));
-                }
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                    if wait.is_zero() || Instant::now() >= deadline {
-                        return Ok(None);
-                    }
-                    if !wait_fd_readable_until(
-                        self.listener
-                            .as_ref()
-                            .expect("TCP listener checked before accept")
-                            .as_fd(),
-                        deadline,
-                    ) {
-                        return Ok(None);
-                    }
-                }
-                Err(error) => {
-                    return Ok(Some(JavascriptTcpListenerEvent::Error {
-                        code: io_error_code(&error),
-                        message: error.to_string(),
-                    }));
-                }
-            }
-        }
-    }
-
-    fn close(&self, kernel: &mut SidecarKernel, kernel_pid: u32) -> Result<(), SidecarError> {
-        if let Some(socket_id) = self.kernel_socket_id {
-            close_kernel_socket_idempotent(kernel, kernel_pid, socket_id)?;
-        }
-        Ok(())
-    }
-
-    fn active_connection_count(&self) -> usize {
-        self.active_connection_ids.len()
-    }
-
-    fn register_connection(&mut self, socket_id: &str) {
-        self.active_connection_ids.insert(socket_id.to_string());
-    }
-
-    fn release_connection(&mut self, socket_id: &str) {
-        self.active_connection_ids.remove(socket_id);
-    }
-}
-
-// UDP types moved to crate::state
-
-impl ActiveUdpSocket {
-    fn new(
-        kernel: &mut SidecarKernel,
-        kernel_pid: u32,
-        family: JavascriptUdpFamily,
-    ) -> Result<Self, SidecarError> {
-        let spec = match family {
-            JavascriptUdpFamily::Ipv4 => SocketSpec::udp(),
-            JavascriptUdpFamily::Ipv6 => SocketSpec::new(SocketDomain::Inet6, SocketType::Datagram),
-        };
-        let socket_id = kernel
-            .socket_create(EXECUTION_DRIVER_NAME, kernel_pid, spec)
-            .map_err(kernel_error)?;
-        Ok(Self {
-            family,
-            socket: None,
-            kernel_socket_id: Some(socket_id),
-            guest_local_addr: None,
-            recv_buffer_size: 0,
-            send_buffer_size: 0,
-        })
-    }
-
-    fn local_addr(&self) -> Option<SocketAddr> {
-        self.guest_local_addr
-    }
-
-    fn socket(&self) -> Result<&UdpSocket, SidecarError> {
-        self.socket
-            .as_ref()
-            .ok_or_else(|| SidecarError::Execution(String::from("EBADF: bad file descriptor")))
-    }
-
-    fn bind(
-        &mut self,
-        kernel: &mut SidecarKernel,
-        kernel_pid: u32,
-        host: Option<&str>,
-        port: u16,
-        context: &JavascriptSocketPathContext,
-    ) -> Result<SocketAddr, SidecarError> {
-        if self.socket.is_some() || self.guest_local_addr.is_some() {
-            return Err(SidecarError::Execution(String::from(
-                "EINVAL: secure-exec dgram socket is already bound",
-            )));
-        }
-
-        let (bind_host, guest_host, guest_family) = normalize_udp_bind_host(host, self.family)?;
-        let guest_port = allocate_guest_listen_port(
-            port,
-            guest_family,
-            &context.used_udp_guest_ports,
-            context.listen_policy,
-        )?;
-        let local_addr = resolve_udp_bind_addr(guest_host, guest_port, self.family)?;
-        if let Some(socket_id) = self.kernel_socket_id {
-            kernel
-                .socket_bind_inet(
-                    EXECUTION_DRIVER_NAME,
-                    kernel_pid,
-                    socket_id,
-                    InetSocketAddress::new(local_addr.ip().to_string(), local_addr.port()),
-                )
-                .map_err(kernel_error)?;
-        } else {
-            let bind_addr = resolve_udp_bind_addr(bind_host, 0, self.family)?;
-            let socket = UdpSocket::bind(bind_addr).map_err(sidecar_net_error)?;
-            socket.set_nonblocking(true).map_err(sidecar_net_error)?;
-            self.socket = Some(socket);
-        }
-        self.guest_local_addr = Some(local_addr);
-        Ok(local_addr)
-    }
-
-    fn ensure_bound_for_send(
-        &mut self,
-        kernel: &mut SidecarKernel,
-        kernel_pid: u32,
-        context: &JavascriptSocketPathContext,
-    ) -> Result<SocketAddr, SidecarError> {
-        if let Some(local_addr) = self.local_addr() {
-            return Ok(local_addr);
-        }
-
-        self.bind(kernel, kernel_pid, None, 0, context)
-    }
-
-    fn send_to<B>(
-        &mut self,
-        request: ActiveUdpSendToRequest<'_, B>,
-    ) -> Result<(usize, SocketAddr), SidecarError>
-    where
-        B: NativeSidecarBridge + Send + 'static,
-        BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-    {
-        let ActiveUdpSendToRequest {
-            bridge,
-            kernel,
-            kernel_pid,
-            vm_id,
-            dns,
-            host,
-            port,
-            context,
-            contents,
-        } = request;
-        let remote_addr = resolve_udp_addr(UdpRemoteAddrRequest {
-            bridge,
-            kernel,
-            vm_id,
-            dns,
-            host,
-            port,
-            family: self.family,
-            context,
-        })?;
-        let local_addr = self.ensure_bound_for_send(kernel, kernel_pid, context)?;
-        let written = if let Some(socket_id) = self.kernel_socket_id {
-            if is_loopback_ip(remote_addr.ip()) && remote_addr.port() == port {
-                kernel
-                    .socket_send_to_inet_loopback(
-                        EXECUTION_DRIVER_NAME,
-                        kernel_pid,
-                        socket_id,
-                        InetSocketAddress::new(remote_addr.ip().to_string(), remote_addr.port()),
-                        contents,
-                    )
-                    .map_err(kernel_error)?
-            } else {
-                return Err(SidecarError::Execution(String::from(
-                    "ERR_NOT_IMPLEMENTED: external UDP datagrams are not yet supported by the kernel-backed V8 bridge",
-                )));
-            }
-        } else {
-            let socket = self.socket.as_ref().ok_or_else(|| {
-                SidecarError::InvalidState(String::from("UDP socket is not initialized"))
-            })?;
-            socket
-                .send_to(contents, remote_addr)
-                .map_err(sidecar_net_error)?
-        };
-        Ok((written, local_addr))
-    }
-
-    fn poll(
-        &self,
-        kernel: &mut SidecarKernel,
-        kernel_pid: u32,
-        wait: Duration,
-    ) -> Result<Option<JavascriptUdpSocketEvent>, SidecarError> {
-        if let Some(socket_id) = self.kernel_socket_id {
-            let result = kernel
-                .poll_targets(
-                    EXECUTION_DRIVER_NAME,
-                    kernel_pid,
-                    vec![PollTargetEntry::socket(socket_id, POLLIN)],
-                    i32::try_from(wait.as_millis()).unwrap_or(i32::MAX),
-                )
-                .map_err(kernel_error)?;
-            let revents = result
-                .targets
-                .first()
-                .map(|entry| entry.revents)
-                .unwrap_or_else(PollEvents::empty);
-            if revents.is_empty() {
-                return Ok(None);
-            }
-            return match kernel.socket_recv_datagram(
-                EXECUTION_DRIVER_NAME,
-                kernel_pid,
-                socket_id,
-                64 * 1024,
-            ) {
-                Ok(Some(datagram)) => {
-                    let (source_address, payload) = datagram.into_parts();
-                    let remote_addr = source_address
-                        .map(|source| {
-                            resolve_udp_bind_addr(source.host(), source.port(), self.family)
-                        })
-                        .transpose()?
-                        .unwrap_or_else(|| match self.family {
-                            JavascriptUdpFamily::Ipv4 => {
-                                SocketAddr::new(IpAddr::V4(Ipv4Addr::LOCALHOST), 0)
-                            }
-                            JavascriptUdpFamily::Ipv6 => {
-                                SocketAddr::new(IpAddr::V6(Ipv6Addr::LOCALHOST), 0)
-                            }
-                        });
-                    Ok(Some(JavascriptUdpSocketEvent::Message {
-                        data: payload,
-                        remote_addr,
-                    }))
-                }
-                Ok(None) => Ok(None),
-                Err(error) if error.code() == "EAGAIN" => Ok(None),
-                Err(error) => Ok(Some(JavascriptUdpSocketEvent::Error {
-                    code: Some(error.code().to_string()),
-                    message: error.to_string(),
-                })),
-            };
-        }
-        let socket = self.socket()?;
-        let deadline = Instant::now() + wait;
-        let mut buffer = vec![0_u8; 64 * 1024];
-
-        loop {
-            match socket.recv_from(&mut buffer) {
-                Ok((bytes_read, remote_addr)) => {
-                    return Ok(Some(JavascriptUdpSocketEvent::Message {
-                        data: buffer[..bytes_read].to_vec(),
-                        remote_addr,
-                    }));
-                }
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                    if wait.is_zero() || Instant::now() >= deadline {
-                        return Ok(None);
-                    }
-                    if !wait_fd_readable_until(socket.as_fd(), deadline) {
-                        return Ok(None);
-                    }
-                }
-                Err(error) => {
-                    return Ok(Some(JavascriptUdpSocketEvent::Error {
-                        code: io_error_code(&error),
-                        message: error.to_string(),
-                    }));
-                }
-            }
-        }
-    }
-
-    fn close(&mut self, kernel: &mut SidecarKernel, kernel_pid: u32) {
-        if let Some(socket_id) = self.kernel_socket_id {
-            let _ = close_kernel_socket_idempotent(kernel, kernel_pid, socket_id);
-        }
-        self.socket.take();
-        self.guest_local_addr = None;
-    }
-
-    fn set_buffer_size(&mut self, which: &str, size: usize) -> Result<(), SidecarError> {
-        match which {
-            "recv" => self.recv_buffer_size = size,
-            "send" => self.send_buffer_size = size,
-            other => {
-                return Err(SidecarError::InvalidState(format!(
-                    "unsupported UDP buffer size kind {other}"
-                )));
-            }
-        }
-        if self.kernel_socket_id.is_some() {
-            return Ok(());
-        }
-        let socket = self.socket()?;
-        let socket = SockRef::from(socket);
-        match which {
-            "recv" => socket.set_recv_buffer_size(size).map_err(sidecar_net_error),
-            "send" => socket.set_send_buffer_size(size).map_err(sidecar_net_error),
-            other => Err(SidecarError::InvalidState(format!(
-                "unsupported UDP buffer size kind {other}"
-            ))),
-        }
-    }
-
-    fn get_buffer_size(&self, which: &str) -> Result<usize, SidecarError> {
-        if self.kernel_socket_id.is_some() {
-            return Ok(match which {
-                "recv" => self.recv_buffer_size,
-                "send" => self.send_buffer_size,
-                other => {
-                    return Err(SidecarError::InvalidState(format!(
-                        "unsupported UDP buffer size kind {other}"
-                    )));
-                }
-            });
-        }
-        let socket = self.socket()?;
-        let socket = SockRef::from(socket);
-        match which {
-            "recv" => socket.recv_buffer_size().map_err(sidecar_net_error),
-            "send" => socket.send_buffer_size().map_err(sidecar_net_error),
-            other => Err(SidecarError::InvalidState(format!(
-                "unsupported UDP buffer size kind {other}"
-            ))),
-        }
-    }
-}
-
-// ActiveExecution, ActiveExecutionEvent, SocketQueryKind moved to crate::state
-
-impl ActiveExecution {
-    pub(crate) fn uses_shared_v8_runtime(&self) -> bool {
-        match self {
-            Self::Javascript(execution) => execution.uses_shared_v8_runtime(),
-            Self::Python(execution) => execution.uses_shared_v8_runtime(),
-            Self::Wasm(execution) => execution.uses_shared_v8_runtime(),
-            Self::Tool(_) => false,
-        }
-    }
-
-    pub(crate) fn child_pid(&self) -> u32 {
-        match self {
-            Self::Javascript(execution) => execution.child_pid(),
-            Self::Python(execution) => execution.child_pid(),
-            Self::Wasm(execution) => execution.child_pid(),
-            Self::Tool(_) => 0,
-        }
-    }
-
-    pub(crate) fn write_stdin(&mut self, chunk: &[u8]) -> Result<(), SidecarError> {
-        match self {
-            Self::Javascript(execution) => execution
-                .write_stdin(chunk)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Python(execution) => execution
-                .write_stdin(chunk)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            // Sidecar wasm always runs with kernel-managed stdio
-            // (AGENTOS_WASI_STDIO_SYNC_RPC=1): the guest reads fd 0 via
-            // `__kernel_stdin_read`, so skip the V8 `stdin` stream event —
-            // it is never consumed and would flood the session's deferred
-            // message queue while the guest blocks in a sync read.
-            Self::Wasm(execution) => execution
-                .write_stdin_kernel_only(chunk)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Tool(_) => Ok(()),
-        }
-    }
-
-    pub(crate) fn close_stdin(&mut self) -> Result<(), SidecarError> {
-        match self {
-            Self::Javascript(execution) => execution
-                .close_stdin()
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Python(execution) => execution
-                .close_stdin()
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Wasm(execution) => execution
-                .close_stdin()
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Tool(_) => Ok(()),
-        }
-    }
-
-    pub(crate) fn respond_python_vfs_rpc_success(
-        &mut self,
-        id: u64,
-        payload: PythonVfsRpcResponsePayload,
-    ) -> Result<(), SidecarError> {
-        match self {
-            Self::Python(execution) => execution
-                .respond_vfs_rpc_success(id, payload)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            _ => Err(SidecarError::InvalidState(String::from(
-                "only Python executions can service Python VFS RPC responses",
-            ))),
-        }
-    }
-
-    pub(crate) fn respond_python_vfs_rpc_error(
-        &mut self,
-        id: u64,
-        code: impl Into<String>,
-        message: impl Into<String>,
-    ) -> Result<(), SidecarError> {
-        match self {
-            Self::Python(execution) => execution
-                .respond_vfs_rpc_error(id, code, message)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            _ => Err(SidecarError::InvalidState(String::from(
-                "only Python executions can service Python VFS RPC responses",
-            ))),
-        }
-    }
-
-    pub(crate) fn send_javascript_stream_event(
-        &self,
-        event_type: &str,
-        payload: Value,
-    ) -> Result<(), SidecarError> {
-        match self {
-            Self::Javascript(execution) => execution
-                .send_stream_event(event_type, payload)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Wasm(execution) => execution
-                .send_stream_event(event_type, payload)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            _ => Err(SidecarError::InvalidState(String::from(
-                "only embedded V8 executions can receive JavaScript stream events",
-            ))),
-        }
-    }
-
-    pub(crate) fn javascript_v8_session_handle(&self) -> Option<V8SessionHandle> {
-        match self {
-            Self::Javascript(execution) => Some(execution.v8_session_handle()),
-            Self::Wasm(execution) => Some(execution.v8_session_handle()),
-            _ => None,
-        }
-    }
-
-    pub(crate) fn terminate(&mut self) -> Result<(), SidecarError> {
-        match self {
-            Self::Javascript(execution) => execution
-                .terminate()
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Python(execution) => execution
-                .kill()
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Wasm(execution) => execution
-                .terminate()
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Tool(_) => Ok(()),
-        }
-    }
-
-    pub(crate) fn respond_javascript_sync_rpc_success(
-        &mut self,
-        id: u64,
-        result: Value,
-    ) -> Result<(), SidecarError> {
-        match self {
-            Self::Javascript(execution) => execution
-                .respond_sync_rpc_success(id, result)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Python(execution) => execution
-                .respond_javascript_sync_rpc_success(id, result)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Wasm(execution) => execution
-                .respond_sync_rpc_success(id, result)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            _ => Err(SidecarError::InvalidState(String::from(
-                "only JavaScript, Python, and WebAssembly executions can service JavaScript sync RPC responses",
-            ))),
-        }
-    }
-
-    pub(crate) fn respond_javascript_sync_rpc_raw_success(
-        &mut self,
-        id: u64,
-        payload: Vec<u8>,
-    ) -> Result<(), SidecarError> {
-        match self {
-            Self::Javascript(execution) => execution
-                .respond_sync_rpc_raw_success(id, payload)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Wasm(execution) => execution
-                .respond_sync_rpc_raw_success(id, payload)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            _ => Err(SidecarError::InvalidState(String::from(
-                "only embedded V8 executions can service raw JavaScript sync RPC responses",
-            ))),
-        }
-    }
-
-    pub(crate) fn respond_javascript_sync_rpc_response(
-        &mut self,
-        id: u64,
-        response: JavascriptSyncRpcServiceResponse,
-    ) -> Result<(), SidecarError> {
-        match response {
-            JavascriptSyncRpcServiceResponse::Json(result) => {
-                self.respond_javascript_sync_rpc_success(id, result)
-            }
-            JavascriptSyncRpcServiceResponse::Raw(payload) => {
-                self.respond_javascript_sync_rpc_raw_success(id, payload)
-            }
-        }
-    }
-
-    pub(crate) fn respond_javascript_sync_rpc_error(
-        &mut self,
-        id: u64,
-        code: impl Into<String>,
-        message: impl Into<String>,
-    ) -> Result<(), SidecarError> {
-        match self {
-            Self::Javascript(execution) => execution
-                .respond_sync_rpc_error(id, code, message)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Python(execution) => execution
-                .respond_javascript_sync_rpc_error(id, code, message)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Wasm(execution) => execution
-                .respond_sync_rpc_error(id, code, message)
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            _ => Err(SidecarError::InvalidState(String::from(
-                "only JavaScript, Python, and WebAssembly executions can service JavaScript sync RPC responses",
-            ))),
-        }
-    }
-
-    pub(crate) async fn poll_event(
-        &mut self,
-        timeout: Duration,
-    ) -> Result<Option<ActiveExecutionEvent>, SidecarError> {
-        match self {
-            Self::Javascript(execution) => execution
-                .poll_event(timeout)
-                .await
-                .map(|event| {
-                    event.map(|event| match event {
-                        JavascriptExecutionEvent::Stdout(chunk) => {
-                            ActiveExecutionEvent::Stdout(chunk)
-                        }
-                        JavascriptExecutionEvent::Stderr(chunk) => {
-                            ActiveExecutionEvent::Stderr(chunk)
-                        }
-                        JavascriptExecutionEvent::SyncRpcRequest(request) => {
-                            ActiveExecutionEvent::JavascriptSyncRpcRequest(request)
-                        }
-                        JavascriptExecutionEvent::SignalState {
-                            signal,
-                            registration,
-                        } => ActiveExecutionEvent::SignalState {
-                            signal,
-                            registration: map_node_signal_registration(registration),
-                        },
-                        JavascriptExecutionEvent::Exited(code) => {
-                            ActiveExecutionEvent::Exited(code)
-                        }
-                    })
-                })
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Python(execution) => execution
-                .poll_event(timeout)
-                .await
-                .map(|event| {
-                    event.map(|event| match event {
-                        PythonExecutionEvent::Stdout(chunk) => ActiveExecutionEvent::Stdout(chunk),
-                        PythonExecutionEvent::Stderr(chunk) => ActiveExecutionEvent::Stderr(chunk),
-                        PythonExecutionEvent::JavascriptSyncRpcRequest(request) => {
-                            ActiveExecutionEvent::JavascriptSyncRpcRequest(request)
-                        }
-                        PythonExecutionEvent::VfsRpcRequest(request) => {
-                            ActiveExecutionEvent::PythonVfsRpcRequest(request)
-                        }
-                        PythonExecutionEvent::Exited(code) => ActiveExecutionEvent::Exited(code),
-                    })
-                })
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Wasm(execution) => execution
-                .poll_event(timeout)
-                .await
-                .map(|event| {
-                    event.map(|event| match event {
-                        WasmExecutionEvent::Stdout(chunk) => ActiveExecutionEvent::Stdout(chunk),
-                        WasmExecutionEvent::Stderr(chunk) => ActiveExecutionEvent::Stderr(chunk),
-                        WasmExecutionEvent::SyncRpcRequest(request) => {
-                            ActiveExecutionEvent::JavascriptSyncRpcRequest(request)
-                        }
-                        WasmExecutionEvent::SignalState {
-                            signal,
-                            registration,
-                        } => ActiveExecutionEvent::SignalState {
-                            signal,
-                            registration: map_wasm_signal_registration(registration),
-                        },
-                        WasmExecutionEvent::Exited(code) => ActiveExecutionEvent::Exited(code),
-                    })
-                })
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Tool(execution) => {
-                let _ = timeout;
-                poll_tool_process_event(execution)
-            }
-        }
-    }
-
-    pub(crate) fn poll_event_blocking(
-        &mut self,
-        timeout: Duration,
-    ) -> Result<Option<ActiveExecutionEvent>, SidecarError> {
-        match self {
-            Self::Javascript(execution) => execution
-                .poll_event_blocking(timeout)
-                .map(|event| {
-                    event.map(|event| match event {
-                        JavascriptExecutionEvent::Stdout(chunk) => {
-                            ActiveExecutionEvent::Stdout(chunk)
-                        }
-                        JavascriptExecutionEvent::Stderr(chunk) => {
-                            ActiveExecutionEvent::Stderr(chunk)
-                        }
-                        JavascriptExecutionEvent::SyncRpcRequest(request) => {
-                            ActiveExecutionEvent::JavascriptSyncRpcRequest(request)
-                        }
-                        JavascriptExecutionEvent::SignalState {
-                            signal,
-                            registration,
-                        } => ActiveExecutionEvent::SignalState {
-                            signal,
-                            registration: map_node_signal_registration(registration),
-                        },
-                        JavascriptExecutionEvent::Exited(code) => {
-                            ActiveExecutionEvent::Exited(code)
-                        }
-                    })
-                })
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Python(execution) => execution
-                .poll_event_blocking(timeout)
-                .map(|event| {
-                    event.map(|event| match event {
-                        PythonExecutionEvent::Stdout(chunk) => ActiveExecutionEvent::Stdout(chunk),
-                        PythonExecutionEvent::Stderr(chunk) => ActiveExecutionEvent::Stderr(chunk),
-                        PythonExecutionEvent::JavascriptSyncRpcRequest(request) => {
-                            ActiveExecutionEvent::JavascriptSyncRpcRequest(request)
-                        }
-                        PythonExecutionEvent::VfsRpcRequest(request) => {
-                            ActiveExecutionEvent::PythonVfsRpcRequest(request)
-                        }
-                        PythonExecutionEvent::Exited(code) => ActiveExecutionEvent::Exited(code),
-                    })
-                })
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Wasm(execution) => execution
-                .poll_event_blocking(timeout)
-                .map(|event| {
-                    event.map(|event| match event {
-                        WasmExecutionEvent::Stdout(chunk) => ActiveExecutionEvent::Stdout(chunk),
-                        WasmExecutionEvent::Stderr(chunk) => ActiveExecutionEvent::Stderr(chunk),
-                        WasmExecutionEvent::SyncRpcRequest(request) => {
-                            ActiveExecutionEvent::JavascriptSyncRpcRequest(request)
-                        }
-                        WasmExecutionEvent::SignalState {
-                            signal,
-                            registration,
-                        } => ActiveExecutionEvent::SignalState {
-                            signal,
-                            registration: map_wasm_signal_registration(registration),
-                        },
-                        WasmExecutionEvent::Exited(code) => ActiveExecutionEvent::Exited(code),
-                    })
-                })
-                .map_err(|error| SidecarError::Execution(error.to_string())),
-            Self::Tool(execution) => {
-                let _ = timeout;
-                poll_tool_process_event(execution)
-            }
-        }
-    }
-}
-
-struct ToolProcessEventRequest {
-    sidecar_requests: SharedSidecarRequestClient,
-    connection_id: String,
-    session_id: String,
-    vm_id: String,
-    tool_resolution: ToolCommandResolution,
-    cancelled: Arc<AtomicBool>,
-    pending_events: Arc<Mutex<VecDeque<ActiveExecutionEvent>>>,
-    events_overflowed: Arc<AtomicBool>,
-}
-
-pub(crate) fn send_tool_process_event(
-    pending_events: &Arc<Mutex<VecDeque<ActiveExecutionEvent>>>,
-    events_overflowed: &AtomicBool,
-    event: ActiveExecutionEvent,
-) -> bool {
-    let mut pending_events = pending_events
-        .lock()
-        .unwrap_or_else(|poisoned| poisoned.into_inner());
-    if pending_events.len() >= MAX_PROCESS_EVENT_QUEUE {
-        events_overflowed.store(true, Ordering::Relaxed);
-        return false;
-    }
-    pending_events.push_back(event);
-    true
-}
-
-fn spawn_tool_process_events(request: ToolProcessEventRequest) {
-    let ToolProcessEventRequest {
-        sidecar_requests,
-        connection_id,
-        session_id,
-        vm_id,
-        tool_resolution,
-        cancelled,
-        pending_events,
-        events_overflowed,
-    } = request;
-    std::thread::spawn(move || match tool_resolution {
-        ToolCommandResolution::Failure(message) => {
-            if !send_tool_process_event(
-                &pending_events,
-                &events_overflowed,
-                ActiveExecutionEvent::Stderr(format_tool_failure_output(&message)),
-            ) {
-                return;
-            }
-            let _ = send_tool_process_event(
-                &pending_events,
-                &events_overflowed,
-                ActiveExecutionEvent::Exited(1),
-            );
-        }
-        ToolCommandResolution::Invoke { request, timeout } => {
-            let response = sidecar_requests.invoke(
-                OwnershipScope::vm(connection_id.clone(), session_id.clone(), vm_id.clone()),
-                SidecarRequestPayload::HostCallback(request.clone()),
-                timeout,
-            );
-            if cancelled.load(Ordering::Relaxed) {
-                return;
-            }
-
-            match response {
-                Ok(crate::protocol::SidecarResponsePayload::HostCallbackResult(result)) => {
-                    if let Some(value) = result.result {
-                        let value: serde_json::Value = serde_json::from_str(&value)
-                            .unwrap_or(serde_json::Value::String(value));
-                        let stdout = serde_json::to_vec(&json!({
-                            "ok": true,
-                            "result": value,
-                        }))
-                        .unwrap_or_else(|error| {
-                            format_tool_failure_output(&format!(
-                                "failed to serialize tool result: {error}"
-                            ))
-                        });
-                        if !send_tool_process_event(
-                            &pending_events,
-                            &events_overflowed,
-                            ActiveExecutionEvent::Stdout(stdout),
-                        ) {
-                            return;
-                        }
-                        let _ = send_tool_process_event(
-                            &pending_events,
-                            &events_overflowed,
-                            ActiveExecutionEvent::Exited(0),
-                        );
-                    } else {
-                        let message = result
-                            .error
-                            .unwrap_or_else(|| String::from("tool invocation returned no result"));
-                        if !send_tool_process_event(
-                            &pending_events,
-                            &events_overflowed,
-                            ActiveExecutionEvent::Stderr(format_tool_failure_output(&message)),
-                        ) {
-                            return;
-                        }
-                        let _ = send_tool_process_event(
-                            &pending_events,
-                            &events_overflowed,
-                            ActiveExecutionEvent::Exited(1),
-                        );
-                    }
-                }
-                Ok(_) => {
-                    if !send_tool_process_event(
-                        &pending_events,
-                        &events_overflowed,
-                        ActiveExecutionEvent::Stderr(format_tool_failure_output(
-                            "unexpected sidecar tool response",
-                        )),
-                    ) {
-                        return;
-                    }
-                    let _ = send_tool_process_event(
-                        &pending_events,
-                        &events_overflowed,
-                        ActiveExecutionEvent::Exited(1),
-                    );
-                }
-                Err(error) => {
-                    if !send_tool_process_event(
-                        &pending_events,
-                        &events_overflowed,
-                        ActiveExecutionEvent::Stderr(format_tool_failure_output(
-                            &error.to_string(),
-                        )),
-                    ) {
-                        return;
-                    }
-                    let _ = send_tool_process_event(
-                        &pending_events,
-                        &events_overflowed,
-                        ActiveExecutionEvent::Exited(1),
-                    );
-                }
-            }
-        }
-    });
-}
-
-impl<B> NativeSidecar<B>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    pub(crate) async fn execute(
-        &mut self,
-        request: &RequestFrame,
-        payload: ExecuteRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let execute_total_start = Instant::now();
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self
-            .vms
-            .get_mut(&vm_id)
-            .ok_or_else(|| missing_vm_error(&vm_id))?;
-        if vm.active_processes.contains_key(&payload.process_id) {
-            return Err(SidecarError::InvalidState(format!(
-                "VM {vm_id} already has an active process with id {}",
-                payload.process_id
-            )));
-        }
-
-        if let Some(command) = payload.command.as_deref() {
-            if let Some(tool_resolution) =
-                resolve_tool_command(vm, command, &payload.args, payload.cwd.as_deref())?
-            {
-                let guest_cwd = payload
-                    .cwd
-                    .as_deref()
-                    .map(normalize_path)
-                    .unwrap_or_else(|| vm.guest_cwd.clone());
-                let kernel_handle = vm
-                    .kernel
-                    .create_virtual_process(
-                        EXECUTION_DRIVER_NAME,
-                        TOOL_DRIVER_NAME,
-                        command,
-                        std::iter::once(command.to_owned())
-                            .chain(payload.args.iter().cloned())
-                            .collect(),
-                        VirtualProcessOptions {
-                            env: vm.guest_env.clone(),
-                            cwd: Some(guest_cwd.clone()),
-                            ..VirtualProcessOptions::default()
-                        },
-                    )
-                    .map_err(kernel_error)?;
-                let kernel_pid = kernel_handle.pid();
-                let tool_execution = ToolExecution::default();
-                let cancelled = tool_execution.cancelled.clone();
-                let pending_events = tool_execution.pending_events.clone();
-                let events_overflowed = tool_execution.events_overflowed.clone();
-                vm.active_processes.insert(
-                    payload.process_id.clone(),
-                    ActiveProcess::new(
-                        kernel_pid,
-                        kernel_handle,
-                        GuestRuntimeKind::JavaScript,
-                        ActiveExecution::Tool(tool_execution),
-                    )
-                    .with_guest_cwd(guest_cwd.clone())
-                    .with_host_cwd(resolve_vm_guest_path_to_host(vm, &guest_cwd)),
-                );
-                self.bridge.emit_lifecycle(&vm_id, LifecycleState::Busy)?;
-                spawn_tool_process_events(ToolProcessEventRequest {
-                    sidecar_requests: self.sidecar_requests.clone(),
-                    connection_id: connection_id.clone(),
-                    session_id: session_id.clone(),
-                    vm_id: vm_id.clone(),
-                    tool_resolution,
-                    cancelled,
-                    pending_events,
-                    events_overflowed,
-                });
-
-                return Ok(DispatchResult {
-                    response: process_started_response(
-                        request,
-                        payload.process_id,
-                        Some(kernel_pid),
-                    ),
-                    events: Vec::new(),
-                });
-            }
-        }
-
-        let requested_tty = payload
-            .env
-            .get(EXECUTION_REQUEST_TTY_ENV)
-            .is_some_and(|value| value == "1" || value.eq_ignore_ascii_case("true"));
-        let phase_start = Instant::now();
-        let resolved = resolve_execute_request(vm, &payload)?;
-        record_execute_phase("resolve_execute_request", phase_start.elapsed());
-        let phase_start = Instant::now();
-        let mut env = resolved.env.clone();
-        env.remove(EXECUTION_REQUEST_TTY_ENV);
-        let sandbox_root = normalize_host_path(&vm.cwd);
-        env.insert(
-            String::from(EXECUTION_SANDBOX_ROOT_ENV),
-            sandbox_root.to_string_lossy().into_owned(),
-        );
-        if resolved.runtime == GuestRuntimeKind::JavaScript {
-            env.insert(
-                String::from("SECURE_EXEC_KEEP_STDIN_OPEN"),
-                String::from("1"),
-            );
-            // A TTY guest-node process reads stdin through the kernel PTY: host
-            // input is written to the PTY master (write_kernel_process_stdin),
-            // line discipline runs (echo / VERASE / ICRNL / VEOF), and the
-            // sidecar drains the cooked bytes from the slave and forwards them
-            // to the isolate's stream-stdin dispatch
-            // (forward_tty_slave_input_to_javascript). The in-isolate
-            // `_kernelStdinRead` bridge stays local; no RPC forwarding is
-            // needed because the isolate never reads kernel fd 0 itself.
-        } else if resolved.runtime == GuestRuntimeKind::WebAssembly {
-            env.insert(String::from(WASM_STDIO_SYNC_RPC_ENV), String::from("1"));
-        }
-        let launch_entrypoint = if resolved.runtime == GuestRuntimeKind::JavaScript {
-            resolve_agentos_package_javascript_launch_entrypoint(vm, &mut env)
-                .unwrap_or_else(|| resolved.entrypoint.clone())
-        } else {
-            resolved.entrypoint.clone()
-        };
-        let argv = std::iter::once(launch_entrypoint.clone())
-            .chain(resolved.execution_args.iter().cloned())
-            .collect::<Vec<_>>();
-        record_execute_phase("env_argv_setup", phase_start.elapsed());
-        let phase_start = Instant::now();
-        let kernel_handle = vm
-            .kernel
-            .spawn_process(
-                &resolved.command,
-                argv,
-                SpawnOptions {
-                    requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                    cwd: Some(resolved.guest_cwd.clone()),
-                    ..SpawnOptions::default()
-                },
-            )
-            .map_err(kernel_error)?;
-        let kernel_pid = kernel_handle.pid();
-        record_execute_phase("kernel_spawn_process", phase_start.elapsed());
-        let tty_master_fd = if requested_tty {
-            let (master_fd, slave_fd, _) = vm
-                .kernel
-                .open_pty(EXECUTION_DRIVER_NAME, kernel_pid)
-                .map_err(kernel_error)?;
-            vm.kernel
-                .fd_dup2(EXECUTION_DRIVER_NAME, kernel_pid, slave_fd, 0)
-                .map_err(kernel_error)?;
-            vm.kernel
-                .fd_dup2(EXECUTION_DRIVER_NAME, kernel_pid, slave_fd, 1)
-                .map_err(kernel_error)?;
-            vm.kernel
-                .fd_dup2(EXECUTION_DRIVER_NAME, kernel_pid, slave_fd, 2)
-                .map_err(kernel_error)?;
-            vm.kernel
-                .pty_set_foreground_pgid(EXECUTION_DRIVER_NAME, kernel_pid, master_fd, kernel_pid)
-                .map_err(kernel_error)?;
-            if let Some((cols, rows)) = requested_pty_window_size(&env) {
-                vm.kernel
-                    .pty_resize(EXECUTION_DRIVER_NAME, kernel_pid, master_fd, cols, rows)
-                    .map_err(kernel_error)?;
-            }
-            Some(master_fd)
-        } else {
-            None
-        };
-
-        let (execution, process_env) = match resolved.runtime {
-            GuestRuntimeKind::JavaScript => {
-                let phase_start = Instant::now();
-                let inline_code = load_javascript_entrypoint_source(
-                    vm,
-                    &resolved.host_cwd,
-                    &launch_entrypoint,
-                    &env,
-                );
-                record_execute_phase("js_load_entrypoint_source", phase_start.elapsed());
-                let phase_start = Instant::now();
-                prepare_javascript_shadow(vm, &resolved, &env)?;
-                record_execute_phase("js_prepare_shadow", phase_start.elapsed());
-
-                let phase_start = Instant::now();
-                let context =
-                    self.javascript_engine
-                        .create_context(CreateJavascriptContextRequest {
-                            vm_id: vm_id.clone(),
-                            bootstrap_module: None,
-                            compile_cache_root: Some(self.cache_root.join("node-compile-cache")),
-                        });
-                record_execute_phase("js_create_context", phase_start.elapsed());
-                let phase_start = Instant::now();
-                let built_reader = build_module_reader(vm, &resolved);
-                let guest_reader = built_reader.clone().map(|reader| {
-                    Box::new(crate::plugins::host_dir::SessionModuleReader::new(reader))
-                        as Box<dyn GuestModuleReader>
-                });
-                let module_reader =
-                    built_reader.map(|reader| Box::new(reader) as Box<dyn ModuleFsReader + Send>);
-                record_execute_phase("js_build_module_reader", phase_start.elapsed());
-                let phase_start = Instant::now();
-                let execution = self
-                    .javascript_engine
-                    .start_execution_with_module_reader(
-                        StartJavascriptExecutionRequest {
-                            guest_runtime: guest_runtime_identity(vm, None, None),
-                            vm_id: vm_id.clone(),
-                            context_id: context.context_id,
-                            argv: std::iter::once(launch_entrypoint.clone())
-                                .chain(resolved.execution_args.iter().cloned())
-                                .collect(),
-                            env: env.clone(),
-                            cwd: resolved.host_cwd.clone(),
-                            limits: javascript_execution_limits(vm),
-                            inline_code,
-                            wasm_module_bytes: None,
-                        },
-                        module_reader,
-                        guest_reader,
-                    )
-                    .map_err(javascript_error)?;
-                record_execute_phase("js_start_execution", phase_start.elapsed());
-                (ActiveExecution::Javascript(execution), env.clone())
-            }
-            GuestRuntimeKind::Python => {
-                // The `python` command path (marked by AGENTOS_PYTHON_ARGV) is
-                // explicit about file mode via AGENTOS_PYTHON_FILE, so a `-c` code
-                // string that happens to end in `.py` is never mistaken for a path.
-                // The low-level execute API keeps the `.py`-suffix heuristic.
-                let python_file_path = if resolved.env.contains_key("AGENTOS_PYTHON_ARGV") {
-                    resolved.env.get("AGENTOS_PYTHON_FILE").map(PathBuf::from)
-                } else {
-                    python_file_entrypoint(&resolved.entrypoint)
-                };
-                let pyodide_dist_path = self
-                    .python_engine
-                    .bundled_pyodide_dist_path_for_vm(&vm_id)
-                    .map_err(python_error)?;
-                let pyodide_cache_path = pyodide_dist_path
-                    .parent()
-                    .and_then(Path::parent)
-                    .unwrap_or(pyodide_dist_path.as_path())
-                    .join("pyodide-package-cache");
-                add_runtime_guest_path_mapping(
-                    &mut env,
-                    PYTHON_PYODIDE_GUEST_ROOT,
-                    &pyodide_dist_path,
-                );
-                add_runtime_guest_path_mapping(
-                    &mut env,
-                    PYTHON_PYODIDE_CACHE_GUEST_ROOT,
-                    &pyodide_cache_path,
-                );
-                add_runtime_host_access_path(
-                    &mut env,
-                    "AGENTOS_EXTRA_FS_READ_PATHS",
-                    &pyodide_dist_path,
-                    true,
-                );
-                add_runtime_host_access_path(
-                    &mut env,
-                    "AGENTOS_EXTRA_FS_READ_PATHS",
-                    &pyodide_cache_path,
-                    true,
-                );
-                add_runtime_host_access_path(
-                    &mut env,
-                    "AGENTOS_EXTRA_FS_WRITE_PATHS",
-                    &pyodide_cache_path,
-                    false,
-                );
-                let context = self
-                    .python_engine
-                    .create_context(CreatePythonContextRequest {
-                        vm_id: vm_id.clone(),
-                        pyodide_dist_path,
-                    });
-                let execution = self
-                    .python_engine
-                    .start_execution(StartPythonExecutionRequest {
-                        vm_id: vm_id.clone(),
-                        context_id: context.context_id,
-                        code: resolved.entrypoint.clone(),
-                        file_path: python_file_path,
-                        env: env.clone(),
-                        cwd: resolved.host_cwd.clone(),
-                        limits: python_execution_limits(vm),
-                        guest_runtime: guest_runtime_identity(vm, None, None),
-                    })
-                    .map_err(python_error)?;
-                (ActiveExecution::Python(execution), env.clone())
-            }
-            GuestRuntimeKind::WebAssembly => {
-                let wasm_limits = wasm_execution_limits(vm);
-                let wasm_guest_runtime =
-                    guest_runtime_identity(vm, Some(u64::from(kernel_pid)), Some(0));
-                let wasm_permission_tier = resolved.wasm_permission_tier.unwrap_or_else(|| {
-                    resolve_wasm_permission_tier(
-                        vm,
-                        Some(&resolved.command),
-                        None,
-                        &resolved.entrypoint,
-                    )
-                });
-                let context = self.wasm_engine.create_context(CreateWasmContextRequest {
-                    vm_id: vm_id.clone(),
-                    module_path: Some(resolved.entrypoint.clone()),
-                });
-                let execution = self
-                    .wasm_engine
-                    .start_execution(StartWasmExecutionRequest {
-                        vm_id: vm_id.clone(),
-                        context_id: context.context_id,
-                        argv: resolved.process_args.clone(),
-                        env: env.clone(),
-                        cwd: resolved.host_cwd.clone(),
-                        permission_tier: execution_wasm_permission_tier(wasm_permission_tier),
-                        limits: wasm_limits,
-                        guest_runtime: wasm_guest_runtime,
-                    })
-                    .map_err(wasm_error)?;
-                (ActiveExecution::Wasm(Box::new(execution)), env)
-            }
-        };
-        let child_pid = execution.child_pid();
-        let phase_start = Instant::now();
-        let kernel_stdin_writer_fd = if let Some(master_fd) = tty_master_fd {
-            master_fd
-        } else {
-            install_kernel_stdin_pipe(&mut vm.kernel, kernel_pid)?
-        };
-        vm.active_processes.insert(
-            payload.process_id.clone(),
-            ActiveProcess::new(kernel_pid, kernel_handle, resolved.runtime, execution)
-                .with_kernel_stdin_writer_fd(kernel_stdin_writer_fd)
-                .with_tty_master_fd(tty_master_fd)
-                .with_guest_cwd(resolved.guest_cwd.clone())
-                .with_env(process_env)
-                .with_host_cwd(resolved.host_cwd.clone()),
-        );
-        self.bridge.emit_lifecycle(&vm_id, LifecycleState::Busy)?;
-        mark_execute_response_ready(&vm_id, &payload.process_id);
-        record_execute_phase("process_register_and_lifecycle", phase_start.elapsed());
-        record_execute_phase("execute_total", execute_total_start.elapsed());
-
-        Ok(DispatchResult {
-            response: process_started_response(
-                request,
-                payload.process_id,
-                Some(if child_pid == 0 {
-                    kernel_pid
-                } else {
-                    child_pid
-                }),
-            ),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn resize_pty(
-        &mut self,
-        request: &RequestFrame,
-        payload: ResizePtyRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self
-            .vms
-            .get_mut(&vm_id)
-            .ok_or_else(|| missing_vm_error(&vm_id))?;
-        let process = vm
-            .active_processes
-            .get_mut(&payload.process_id)
-            .ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "VM {vm_id} has no active process {}",
-                    payload.process_id
-                ))
-            })?;
-        let Some(writer_fd) = process.kernel_stdin_writer_fd else {
-            return Err(SidecarError::InvalidState(format!(
-                "process {} does not have a PTY",
-                payload.process_id
-            )));
-        };
-        vm.kernel
-            .pty_resize(
-                EXECUTION_DRIVER_NAME,
-                process.kernel_pid,
-                writer_fd,
-                payload.cols,
-                payload.rows,
-            )
-            .map_err(kernel_error)?;
-
-        Ok(DispatchResult {
-            response: self.respond(
-                request,
-                ResponsePayload::PtyResized(PtyResizedResponse {
-                    process_id: payload.process_id,
-                    cols: payload.cols,
-                    rows: payload.rows,
-                }),
-            ),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn write_stdin(
-        &mut self,
-        request: &RequestFrame,
-        payload: WriteStdinRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self
-            .vms
-            .get_mut(&vm_id)
-            .ok_or_else(|| missing_vm_error(&vm_id))?;
-        let process = vm
-            .active_processes
-            .get_mut(&payload.process_id)
-            .ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "VM {vm_id} has no active process {}",
-                    payload.process_id
-                ))
-            })?;
-        // For a TTY JavaScript process, host stdin must go ONLY to the kernel PTY
-        // master (so line discipline + echo apply); feeding the in-process local
-        // stdin bridge as well would double-deliver the input. Non-TTY JS (piped
-        // stdin) still uses the local bridge; wasm/python always take the
-        // streaming/no-op `write_stdin` path plus the kernel master write below.
-        let tty_js =
-            process.runtime == GuestRuntimeKind::JavaScript && process.tty_master_fd.is_some();
-        if !tty_js {
-            process.execution.write_stdin(&payload.chunk)?;
-        }
-        write_kernel_process_stdin(&mut vm.kernel, process, &payload.chunk)?;
-
-        Ok(DispatchResult {
-            response: stdin_written_response(
-                request,
-                payload.process_id,
-                payload.chunk.len() as u64,
-            ),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn close_stdin(
-        &mut self,
-        request: &RequestFrame,
-        payload: CloseStdinRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self
-            .vms
-            .get_mut(&vm_id)
-            .ok_or_else(|| missing_vm_error(&vm_id))?;
-        let process = vm
-            .active_processes
-            .get_mut(&payload.process_id)
-            .ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "VM {vm_id} has no active process {}",
-                    payload.process_id
-                ))
-            })?;
-        process.execution.close_stdin()?;
-        close_kernel_process_stdin(&mut vm.kernel, process)?;
-
-        Ok(DispatchResult {
-            response: stdin_closed_response(request, payload.process_id),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn kill_process(
-        &mut self,
-        request: &RequestFrame,
-        payload: KillProcessRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-        self.kill_process_internal(&vm_id, &payload.process_id, &payload.signal)?;
-
-        Ok(DispatchResult {
-            response: process_killed_response(request, payload.process_id),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn find_listener(
-        &mut self,
-        request: &RequestFrame,
-        payload: FindListenerRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-        require_vm_inspection_permission(
-            &self.bridge,
-            &vm_id,
-            "network.inspect",
-            "network",
-            &socket_query_resource(SocketQueryKind::TcpListener, &payload),
-        )?;
-
-        let listener =
-            find_socket_state_entry(self.vms.get(&vm_id), SocketQueryKind::TcpListener, &payload)?;
-
-        Ok(DispatchResult {
-            response: listener_snapshot_response(request, listener),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn get_process_snapshot(
-        &mut self,
-        request: &RequestFrame,
-        _payload: GetProcessSnapshotRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-        require_vm_inspection_permission(
-            &self.bridge,
-            &vm_id,
-            "process.inspect",
-            "process",
-            "process://snapshot",
-        )?;
-
-        let processes = self
-            .vms
-            .get_mut(&vm_id)
-            .map(|vm| {
-                prune_exited_process_snapshots(vm);
-                snapshot_vm_processes(vm)
-            })
-            .unwrap_or_default();
-
-        Ok(DispatchResult {
-            response: process_snapshot_response(request, processes),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn guest_kernel_call(
-        &mut self,
-        request: &RequestFrame,
-        payload: GuestKernelCallRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self.vms.get_mut(&vm_id).ok_or_else(|| {
-            SidecarError::InvalidState(format!("VM {vm_id} no longer exists for guest kernel call"))
-        })?;
-        let kernel_pid = vm
-            .active_processes
-            .get(&payload.execution_id)
-            .map(|process| process.kernel_pid)
-            .ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "VM {vm_id} has no active process {} for guest kernel call",
-                    payload.execution_id
-                ))
-            })?;
-
-        let response = secure_exec_sidecar_core::handle_guest_kernel_call(
-            &mut vm.kernel,
-            kernel_pid,
-            EXECUTION_DRIVER_NAME,
-            &payload.operation,
-            &payload.payload,
-        )
-        .map_err(guest_kernel_core_error)?;
-
-        Ok(DispatchResult {
-            response: self.respond(
-                request,
-                ResponsePayload::GuestKernelResult(GuestKernelResultResponse { payload: response }),
-            ),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn get_resource_snapshot(
-        &mut self,
-        request: &RequestFrame,
-        _payload: GetResourceSnapshotRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-        require_vm_inspection_permission(
-            &self.bridge,
-            &vm_id,
-            "process.inspect",
-            "process",
-            "process://resources",
-        )?;
-
-        let snapshot = self
-            .vms
-            .get(&vm_id)
-            .map(|vm| vm.kernel.resource_snapshot())
-            .unwrap_or_default();
-        let queue_snapshots = queue_tracker::queue_snapshot()
-            .into_iter()
-            .map(|queue| QueueSnapshotEntry {
-                name: queue.name.as_str().to_owned(),
-                category: queue.category.as_str().to_owned(),
-                depth: queue.depth as u64,
-                high_water: queue.high_water as u64,
-                capacity: queue.capacity as u64,
-                fill_percent: queue.fill_percent as u64,
-            })
-            .collect();
-
-        Ok(DispatchResult {
-            response: self.respond(
-                request,
-                ResponsePayload::ResourceSnapshot(ResourceSnapshotResponse {
-                    running_processes: snapshot.running_processes as u64,
-                    exited_processes: snapshot.exited_processes as u64,
-                    fd_tables: snapshot.fd_tables as u64,
-                    open_fds: snapshot.open_fds as u64,
-                    pipes: snapshot.pipes as u64,
-                    pipe_buffered_bytes: snapshot.pipe_buffered_bytes as u64,
-                    ptys: snapshot.ptys as u64,
-                    pty_buffered_input_bytes: snapshot.pty_buffered_input_bytes as u64,
-                    pty_buffered_output_bytes: snapshot.pty_buffered_output_bytes as u64,
-                    sockets: snapshot.sockets as u64,
-                    socket_listeners: snapshot.socket_listeners as u64,
-                    socket_connections: snapshot.socket_connections as u64,
-                    socket_buffered_bytes: snapshot.socket_buffered_bytes as u64,
-                    socket_datagram_queue_len: snapshot.socket_datagram_queue_len as u64,
-                    queue_snapshots,
-                }),
-            ),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn find_bound_udp(
-        &mut self,
-        request: &RequestFrame,
-        payload: FindBoundUdpRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let lookup_request = FindListenerRequest {
-            host: payload.host,
-            port: payload.port,
-            path: None,
-        };
-        require_vm_inspection_permission(
-            &self.bridge,
-            &vm_id,
-            "network.inspect",
-            "network",
-            &socket_query_resource(SocketQueryKind::UdpBound, &lookup_request),
-        )?;
-        let socket = find_socket_state_entry(
-            self.vms.get(&vm_id),
-            SocketQueryKind::UdpBound,
-            &lookup_request,
-        )?;
-
-        Ok(DispatchResult {
-            response: bound_udp_snapshot_response(request, socket),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn vm_fetch(
-        &mut self,
-        request: &RequestFrame,
-        payload: VmFetchRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self
-            .vms
-            .get_mut(&vm_id)
-            .ok_or_else(|| SidecarError::InvalidState(String::from("unknown sidecar VM")))?;
-        let target_path = if payload.path.starts_with('/') {
-            payload.path.clone()
-        } else {
-            format!("/{}", payload.path)
-        };
-        let request_url = Url::parse(&format!("http://127.0.0.1:{}{target_path}", payload.port))
-            .map_err(|error| {
-                SidecarError::InvalidState(format!(
-                    "invalid vm.fetch target {target_path:?}: {error}"
-                ))
-            })?;
-        let header_values: BTreeMap<String, Value> = serde_json::from_str(&payload.headers_json)
-            .map_err(|error| {
-                SidecarError::InvalidState(format!(
-                    "vm.fetch headers_json must be valid JSON: {error}"
-                ))
-            })?;
-        let options = JavascriptHttpRequestOptions {
-            method: Some(payload.method),
-            headers: header_values,
-            body: payload.body,
-            reject_unauthorized: None,
-        };
-        let headers = parse_http_header_collection(&options.headers, "vm.fetch headers")?;
-        let target_process_id = find_kernel_http_listener_process(vm, payload.port);
-        if let Some(target_process_id) = target_process_id {
-            let max_fetch_response_bytes = vm.limits.http.max_fetch_response_bytes;
-            let response_json = match dispatch_kernel_http_fetch(
-                &self.bridge,
-                &vm_id,
-                vm,
-                &target_process_id,
-                payload.port,
-                &target_path,
-                &options,
-                &headers,
-                max_fetch_response_bytes,
-            ) {
-                Ok(response_json) => response_json,
-                Err(error) => {
-                    if let Some(exit_code) = kernel_http_fetch_target_exit_code(&error) {
-                        let _ = vm;
-                        self.finish_active_process_exit(&vm_id, &target_process_id, exit_code)?;
-                    }
-                    return Err(error);
-                }
-            };
-            let response = self.respond(
-                request,
-                ResponsePayload::VmFetchResult(VmFetchResponse { response_json }),
-            );
-            ensure_vm_fetch_response_frame_within_limit(&response, self.config.max_frame_bytes)?;
-
-            return Ok(DispatchResult {
-                response,
-                events: Vec::new(),
-            });
-        }
-
-        let Some((target_process_id, server_id)) =
-            vm.active_processes
-                .iter()
-                .find_map(|(process_id, process)| {
-                    process
-                        .http_servers
-                        .iter()
-                        .find(|(_, server)| server.guest_local_addr.port() == payload.port)
-                        .map(|(server_id, _)| (process_id.clone(), *server_id))
-                })
-        else {
-            return Err(SidecarError::Execution(format!(
-                "vm.fetch could not find a guest HTTP listener on port {}",
-                payload.port
-            )));
-        };
-        let socket_paths = build_javascript_socket_path_context(vm)?;
-        let resource_limits = vm.kernel.resource_limits().clone();
-        let kernel_readiness = Arc::clone(&vm.kernel_socket_readiness);
-        let process = vm
-            .active_processes
-            .get_mut(&target_process_id)
-            .ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "vm.fetch target process disappeared: {target_process_id}"
-                ))
-            })?;
-        let request_json = serialize_http_loopback_request(&request_url, &options, &headers)?;
-        let response_json = dispatch_loopback_http_request(LoopbackHttpDispatchRequest {
-            bridge: &self.bridge,
-            vm_id: &vm_id,
-            dns: &vm.dns,
-            socket_paths: &socket_paths,
-            kernel: &mut vm.kernel,
-            kernel_readiness,
-            process,
-            resource_limits: &resource_limits,
-            server_id,
-            request_json: &request_json,
-        })?;
-
-        let response = self.respond(
-            request,
-            ResponsePayload::VmFetchResult(VmFetchResponse { response_json }),
-        );
-        ensure_vm_fetch_response_frame_within_limit(&response, self.config.max_frame_bytes)?;
-
-        Ok(DispatchResult {
-            response,
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn get_signal_state(
-        &mut self,
-        request: &RequestFrame,
-        payload: GetSignalStateRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let handlers = self
-            .vms
-            .get(&vm_id)
-            .and_then(|vm| vm.signal_states.get(&payload.process_id))
-            .cloned()
-            .unwrap_or_default();
-
-        Ok(DispatchResult {
-            response: signal_state_response(request, payload.process_id, handlers),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn get_zombie_timer_count(
-        &mut self,
-        request: &RequestFrame,
-        _payload: GetZombieTimerCountRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let count = self
-            .vms
-            .get(&vm_id)
-            .map(|vm| vm.kernel.zombie_timer_count() as u64)
-            .unwrap_or_default();
-
-        Ok(DispatchResult {
-            response: zombie_timer_count_response(request, count),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) fn kill_process_internal(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        signal: &str,
-    ) -> Result<(), SidecarError> {
-        let signal_name = signal.to_owned();
-        let signal = parse_signal(signal)?;
-        let vm = self
-            .vms
-            .get_mut(vm_id)
-            .ok_or_else(|| SidecarError::InvalidState(format!("unknown sidecar VM {vm_id}")))?;
-        let process = vm.active_processes.get_mut(process_id).ok_or_else(|| {
-            SidecarError::InvalidState(format!("VM {vm_id} has no active process {process_id}"))
-        })?;
-        let kernel_pid = process.kernel_pid;
-        if !matches!(signal, 0 | libc::SIGCONT) {
-            // A guest parked in a deferred kernel-wait sync RPC is blocked in a
-            // native bridge wait the kill cannot interrupt; answer the parked
-            // RPC first so the termination can take effect.
-            flush_parked_kernel_wait_rpc(process);
-        }
-
-        enum KillBehavior {
-            Tool,
-            SharedV8StateOnly,
-            SharedV8Continue,
-            SharedV8Terminate,
-            SharedV8DispatchOrTerminate,
-            Noop,
-            HostPid(u32),
-        }
-
-        let behavior = match &process.execution {
-            ActiveExecution::Tool(_) => KillBehavior::Tool,
-            ActiveExecution::Javascript(execution)
-                if execution.uses_shared_v8_runtime() && matches!(signal, 0 | libc::SIGSTOP) =>
-            {
-                KillBehavior::SharedV8StateOnly
-            }
-            ActiveExecution::Javascript(execution)
-                if execution.uses_shared_v8_runtime() && signal == libc::SIGCONT =>
-            {
-                KillBehavior::SharedV8Continue
-            }
-            ActiveExecution::Wasm(execution)
-                if execution.uses_shared_v8_runtime()
-                    && matches!(signal, 0 | libc::SIGSTOP | libc::SIGCONT) =>
-            {
-                KillBehavior::SharedV8StateOnly
-            }
-            ActiveExecution::Python(execution)
-                if execution.uses_shared_v8_runtime()
-                    && matches!(signal, 0 | libc::SIGSTOP | libc::SIGCONT) =>
-            {
-                KillBehavior::SharedV8StateOnly
-            }
-            ActiveExecution::Javascript(execution)
-                if execution.uses_shared_v8_runtime() && signal == SIGKILL =>
-            {
-                KillBehavior::SharedV8Terminate
-            }
-            ActiveExecution::Wasm(execution)
-                if execution.uses_shared_v8_runtime() && signal == SIGKILL =>
-            {
-                KillBehavior::SharedV8Terminate
-            }
-            ActiveExecution::Javascript(execution) if execution.uses_shared_v8_runtime() => {
-                KillBehavior::SharedV8DispatchOrTerminate
-            }
-            ActiveExecution::Wasm(execution) if execution.uses_shared_v8_runtime() => {
-                KillBehavior::SharedV8Terminate
-            }
-            ActiveExecution::Python(execution) if execution.uses_shared_v8_runtime() => {
-                KillBehavior::SharedV8Terminate
-            }
-            ActiveExecution::Javascript(execution) if execution.child_pid() == 0 => {
-                KillBehavior::Noop
-            }
-            _ => KillBehavior::HostPid(process.execution.child_pid()),
-        };
-
-        match behavior {
-            KillBehavior::Tool => {
-                let ActiveExecution::Tool(execution) = &process.execution else {
-                    unreachable!("kill behavior must match tool execution");
-                };
-                if signal != 0 {
-                    execution.cancelled.store(true, Ordering::Relaxed);
-                    process.queue_pending_execution_event(ActiveExecutionEvent::Exited(
-                        128 + signal,
-                    ))?;
-                }
-            }
-            KillBehavior::SharedV8StateOnly => {
-                if matches!(signal, libc::SIGSTOP | libc::SIGCONT) {
-                    vm.kernel
-                        .kill_process(EXECUTION_DRIVER_NAME, kernel_pid, signal)
-                        .map_err(kernel_error)?;
-                }
-            }
-            KillBehavior::SharedV8Continue => {
-                vm.kernel
-                    .kill_process(EXECUTION_DRIVER_NAME, kernel_pid, signal)
-                    .map_err(kernel_error)?;
-                if signal != 0 && !dispatch_v8_process_signal(process, signal)? {
-                    process.execution.terminate()?;
-                }
-            }
-            KillBehavior::SharedV8Terminate => {
-                if signal != 0 && matches!(process.execution, ActiveExecution::Python(_)) {
-                    close_kernel_process_stdin(&mut vm.kernel, process)?;
-                }
-                process.execution.terminate()?;
-                let needs_synthetic_exit = matches!(process.execution, ActiveExecution::Wasm(_))
-                    || (signal == SIGKILL
-                        && matches!(process.execution, ActiveExecution::Javascript(_)));
-                if signal != 0 && needs_synthetic_exit {
-                    process.queue_pending_execution_event(ActiveExecutionEvent::Exited(
-                        128 + signal,
-                    ))?;
-                }
-            }
-            KillBehavior::SharedV8DispatchOrTerminate => {
-                if signal != 0 && !dispatch_v8_process_signal(process, signal)? {
-                    process.execution.terminate()?;
-                }
-            }
-            KillBehavior::Noop => {}
-            KillBehavior::HostPid(pid) => {
-                if signal != 0 && matches!(process.execution, ActiveExecution::Python(_)) {
-                    close_kernel_process_stdin(&mut vm.kernel, process)?;
-                }
-                signal_runtime_process(pid, signal)?;
-            }
-        }
-        emit_security_audit_event(
-            &self.bridge,
-            vm_id,
-            "security.process.kill",
-            audit_fields([
-                (String::from("source"), String::from("control_plane")),
-                (String::from("source_pid"), String::from("0")),
-                (String::from("target_pid"), process.kernel_pid.to_string()),
-                (String::from("process_id"), process_id.to_owned()),
-                (String::from("signal"), signal_name),
-                (
-                    String::from("host_pid"),
-                    process.execution.child_pid().to_string(),
-                ),
-            ]),
-        );
-        Ok(())
-    }
-
-    pub async fn pump_process_events(
-        &mut self,
-        ownership: &OwnershipScope,
-    ) -> Result<bool, SidecarError> {
-        let mut emitted_any = false;
-
-        let mut queued_envelopes = Vec::new();
-        {
-            let pending_capacity = self.pending_process_event_capacity();
-            let receiver = self.process_event_receiver.as_mut().ok_or_else(|| {
-                SidecarError::InvalidState(String::from("process event receiver unavailable"))
-            })?;
-            loop {
-                if queued_envelopes.len() >= pending_capacity {
-                    if receiver.is_empty() {
-                        break;
-                    }
-                    return Err(process_event_queue_overflow_error());
-                }
-                match receiver.try_recv() {
-                    Ok(envelope) => {
-                        queued_envelopes.push(envelope);
-                        emitted_any = true;
-                    }
-                    Err(tokio::sync::mpsc::error::TryRecvError::Empty) => break,
-                    Err(tokio::sync::mpsc::error::TryRecvError::Disconnected) => break,
-                }
-            }
-        }
-        for envelope in queued_envelopes {
-            self.queue_pending_process_event(envelope)?;
-        }
-
-        let vm_ids = self.vm_ids_for_scope(ownership)?;
-        for vm_id in vm_ids {
-            while let Some(vm) = self.vms.get(&vm_id) {
-                let connection_id = vm.connection_id.clone();
-                let session_id = vm.session_id.clone();
-                let process_ids = self
-                    .vms
-                    .get(&vm_id)
-                    .map(|vm| vm.active_processes.keys().cloned().collect::<Vec<_>>())
-                    .unwrap_or_default();
-                let mut emitted_this_pass = false;
-
-                for process_id in process_ids {
-                    if self
-                        .vms
-                        .get(&vm_id)
-                        .is_some_and(|vm| vm.detached_child_processes.contains(&process_id))
-                    {
-                        continue;
-                    }
-                    enum ProcessPollResult {
-                        Event(Box<Option<ActiveExecutionEvent>>),
-                        RecoverClosedChannel,
-                    }
-                    let poll_result = {
-                        let Some(vm) = self.vms.get_mut(&vm_id) else {
-                            continue;
-                        };
-                        let Some(process) = vm.active_processes.get_mut(&process_id) else {
-                            continue;
-                        };
-                        if let Some(event) = process.pending_execution_events.pop_front() {
-                            ProcessPollResult::Event(Box::new(Some(event)))
-                        } else {
-                            match process.execution.poll_event(Duration::ZERO).await {
-                                Ok(event) => ProcessPollResult::Event(Box::new(event)),
-                                Err(SidecarError::Execution(message))
-                                    if (process.runtime == GuestRuntimeKind::JavaScript
-                                        && closed_javascript_event_channel(&message))
-                                        || (process.runtime == GuestRuntimeKind::Python
-                                            && closed_python_event_channel(&message))
-                                        || (process.runtime == GuestRuntimeKind::WebAssembly
-                                            && closed_wasm_event_channel(&message)) =>
-                                {
-                                    ProcessPollResult::RecoverClosedChannel
-                                }
-                                Err(other) => return Err(other),
-                            }
-                        }
-                    };
-                    let event = match poll_result {
-                        ProcessPollResult::Event(event) => *event,
-                        ProcessPollResult::RecoverClosedChannel => {
-                            self.recover_closed_root_runtime_process_event(&vm_id, &process_id)?
-                        }
-                    };
-
-                    let Some(event) = event else {
-                        continue;
-                    };
-                    if matches!(&event, ActiveExecutionEvent::Exited(_)) {
-                        record_execute_response_to_exit_milestone(
-                            "execute_response_to_exit_event_polled",
-                            &vm_id,
-                            &process_id,
-                        );
-                    }
-
-                    if Self::internal_execution_event(&event) {
-                        // These events are sidecar work items, not client-facing
-                        // process events. Handle them immediately so a sibling
-                        // process can service sync RPCs while another request
-                        // waits on VM-local networking.
-                        self.handle_execution_event(&vm_id, &process_id, event)?;
-                    } else {
-                        self.queue_pending_process_event(ProcessEventEnvelope {
-                            connection_id: connection_id.clone(),
-                            session_id: session_id.clone(),
-                            vm_id: vm_id.clone(),
-                            process_id: process_id.clone(),
-                            event,
-                        })?;
-                    }
-                    emitted_any = true;
-                    emitted_this_pass = true;
-                }
-
-                if !emitted_this_pass {
-                    break;
-                }
-            }
-
-            if self.pump_detached_child_process_events(&vm_id)? {
-                emitted_any = true;
-            }
-        }
-
-        Ok(emitted_any)
-    }
-
-    fn internal_execution_event(event: &ActiveExecutionEvent) -> bool {
-        matches!(
-            event,
-            ActiveExecutionEvent::JavascriptSyncRpcRequest(_)
-                | ActiveExecutionEvent::PythonVfsRpcRequest(_)
-                | ActiveExecutionEvent::SignalState { .. }
-        )
-    }
-
-    fn recover_closed_root_runtime_process_event(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-    ) -> Result<Option<ActiveExecutionEvent>, SidecarError> {
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Ok(None);
-        };
-        let Some(process) = vm.active_processes.get(process_id) else {
-            return Ok(None);
-        };
-        if process.execution.uses_shared_v8_runtime() {
-            return Ok(None);
-        }
-        if process.runtime != GuestRuntimeKind::JavaScript
-            && process.runtime != GuestRuntimeKind::Python
-            && process.runtime != GuestRuntimeKind::WebAssembly
-        {
-            return Ok(None);
-        }
-        let runtime_child_pid = process.execution.child_pid();
-        if runtime_child_pid == 0 {
-            return Ok(None);
-        }
-        if let Some(status) = runtime_child_exit_status(runtime_child_pid)? {
-            return Ok(Some(ActiveExecutionEvent::Exited(status)));
-        }
-        if runtime_child_is_alive(runtime_child_pid)? {
-            return Ok(None);
-        }
-        Ok(Some(ActiveExecutionEvent::Exited(0)))
-    }
-
-    fn active_process_by_path<'a>(
-        process: &'a ActiveProcess,
-        child_path: &[&str],
-    ) -> Option<&'a ActiveProcess> {
-        let mut current = process;
-        for child_id in child_path {
-            current = current.child_processes.get(*child_id)?;
-        }
-        Some(current)
-    }
-
-    fn active_process_by_path_mut<'a>(
-        process: &'a mut ActiveProcess,
-        child_path: &[&str],
-    ) -> Option<&'a mut ActiveProcess> {
-        let mut current = process;
-        for child_id in child_path {
-            current = current.child_processes.get_mut(*child_id)?;
-        }
-        Some(current)
-    }
-
-    fn active_process_by_owned_path_mut<'a>(
-        process: &'a mut ActiveProcess,
-        child_path: &[String],
-    ) -> Option<&'a mut ActiveProcess> {
-        let mut current = process;
-        for child_id in child_path {
-            current = current.child_processes.get_mut(child_id)?;
-        }
-        Some(current)
-    }
-
-    fn active_process_path_by_kernel_pid(
-        process: &ActiveProcess,
-        kernel_pid: u32,
-    ) -> Option<Vec<String>> {
-        if process.kernel_pid == kernel_pid {
-            return Some(Vec::new());
-        }
-
-        for (child_id, child) in &process.child_processes {
-            let Some(mut path) = Self::active_process_path_by_kernel_pid(child, kernel_pid) else {
-                continue;
-            };
-            path.insert(0, child_id.clone());
-            return Some(path);
-        }
-
-        None
-    }
-
-    fn descendant_parent_process<'a>(
-        vm: &'a VmState,
-        process_id: &str,
-        child_path: &[&str],
-    ) -> Option<&'a ActiveProcess> {
-        let root = vm.active_processes.get(process_id)?;
-        Self::active_process_by_path(root, child_path)
-    }
-
-    fn descendant_parent_process_mut<'a>(
-        vm: &'a mut VmState,
-        process_id: &str,
-        child_path: &[&str],
-    ) -> Option<&'a mut ActiveProcess> {
-        let root = vm.active_processes.get_mut(process_id)?;
-        Self::active_process_by_path_mut(root, child_path)
-    }
-
-    fn child_process_path_label(process_id: &str, child_path: &[&str]) -> String {
-        if child_path.is_empty() {
-            process_id.to_owned()
-        } else {
-            format!("{process_id}/{}", child_path.join("/"))
-        }
-    }
-
-    fn adopt_detached_child_processes(
-        current_process_id: &str,
-        process: &mut ActiveProcess,
-    ) -> Vec<(String, ActiveProcess)> {
-        let mut adopted = Vec::new();
-        let child_ids = process.child_processes.keys().cloned().collect::<Vec<_>>();
-        for child_id in child_ids {
-            let child_process_id = format!("{current_process_id}/{child_id}");
-            let Some(mut child) = process.child_processes.remove(&child_id) else {
-                continue;
-            };
-            if child.detached {
-                adopted.push((child_process_id, child));
-                continue;
-            }
-
-            adopted.extend(Self::adopt_detached_child_processes(
-                &child_process_id,
-                &mut child,
-            ));
-            process.child_processes.insert(child_id, child);
-        }
-        adopted
-    }
-
-    fn child_process_signal_key<'a>(process_id: &'a str, child_path: &[&'a str]) -> &'a str {
-        child_path.last().copied().unwrap_or(process_id)
-    }
-
-    fn resolve_detached_child_process_path(
-        vm: &VmState,
-        detached_process_id: &str,
-    ) -> Option<(String, Vec<String>)> {
-        let root_process_id = vm
-            .active_processes
-            .keys()
-            .filter(|candidate| {
-                detached_process_id == candidate.as_str()
-                    || detached_process_id
-                        .strip_prefix(candidate.as_str())
-                        .is_some_and(|remainder| remainder.starts_with('/'))
-            })
-            .max_by_key(|candidate| candidate.len())?
-            .clone();
-
-        let remainder = detached_process_id
-            .strip_prefix(root_process_id.as_str())
-            .unwrap_or_default();
-        if remainder.is_empty() {
-            return Some((root_process_id, Vec::new()));
-        }
-
-        Some((
-            root_process_id,
-            remainder
-                .trim_start_matches('/')
-                .split('/')
-                .map(str::to_owned)
-                .collect(),
-        ))
-    }
-
-    fn pump_detached_child_process_events(&mut self, vm_id: &str) -> Result<bool, SidecarError> {
-        let detached_process_ids = self
-            .vms
-            .get(vm_id)
-            .map(|vm| {
-                vm.detached_child_processes
-                    .iter()
-                    .cloned()
-                    .collect::<Vec<_>>()
-            })
-            .unwrap_or_default();
-        let mut emitted_any = false;
-        for detached_process_id in detached_process_ids {
-            let Some((root_process_id, child_path)) = self
-                .vms
-                .get(vm_id)
-                .and_then(|vm| Self::resolve_detached_child_process_path(vm, &detached_process_id))
-            else {
-                if let Some(vm) = self.vms.get_mut(vm_id) {
-                    vm.detached_child_processes.remove(&detached_process_id);
-                }
-                continue;
-            };
-            if child_path.is_empty() {
-                loop {
-                    enum ProcessPollResult {
-                        Event(Box<Option<ActiveExecutionEvent>>),
-                        RecoverClosedChannel,
-                    }
-                    let poll_result = {
-                        let Some(vm) = self.vms.get_mut(vm_id) else {
-                            break;
-                        };
-                        let Some(process) = vm.active_processes.get_mut(&root_process_id) else {
-                            break;
-                        };
-                        if let Some(event) = process.pending_execution_events.pop_front() {
-                            ProcessPollResult::Event(Box::new(Some(event)))
-                        } else {
-                            match process.execution.poll_event_blocking(Duration::ZERO) {
-                                Ok(event) => ProcessPollResult::Event(Box::new(event)),
-                                Err(SidecarError::Execution(message))
-                                    if (process.runtime == GuestRuntimeKind::JavaScript
-                                        && closed_javascript_event_channel(&message))
-                                        || (process.runtime == GuestRuntimeKind::Python
-                                            && closed_python_event_channel(&message))
-                                        || (process.runtime == GuestRuntimeKind::WebAssembly
-                                            && closed_wasm_event_channel(&message)) =>
-                                {
-                                    ProcessPollResult::RecoverClosedChannel
-                                }
-                                Err(error) => return Err(error),
-                            }
-                        }
-                    };
-                    let event = match poll_result {
-                        ProcessPollResult::Event(event) => *event,
-                        ProcessPollResult::RecoverClosedChannel => {
-                            self.recover_closed_root_runtime_process_event(vm_id, &root_process_id)?
-                        }
-                    };
-                    let Some(event) = event else {
-                        break;
-                    };
-                    if matches!(&event, ActiveExecutionEvent::Exited(_)) {
-                        record_execute_response_to_exit_milestone(
-                            "execute_response_to_detached_exit_event_polled",
-                            vm_id,
-                            &detached_process_id,
-                        );
-                    }
-                    let Some((connection_id, session_id)) = self
-                        .vms
-                        .get(vm_id)
-                        .map(|vm| (vm.connection_id.clone(), vm.session_id.clone()))
-                    else {
-                        break;
-                    };
-                    match event {
-                        ActiveExecutionEvent::Stdout(chunk) => {
-                            self.queue_pending_process_event(ProcessEventEnvelope {
-                                connection_id,
-                                session_id,
-                                vm_id: vm_id.to_owned(),
-                                process_id: detached_process_id.clone(),
-                                event: ActiveExecutionEvent::Stdout(chunk),
-                            })?;
-                            emitted_any = true;
-                        }
-                        ActiveExecutionEvent::Stderr(chunk) => {
-                            self.queue_pending_process_event(ProcessEventEnvelope {
-                                connection_id,
-                                session_id,
-                                vm_id: vm_id.to_owned(),
-                                process_id: detached_process_id.clone(),
-                                event: ActiveExecutionEvent::Stderr(chunk),
-                            })?;
-                            emitted_any = true;
-                        }
-                        ActiveExecutionEvent::Exited(exit_code) => {
-                            if let Some(vm) = self.vms.get_mut(vm_id) {
-                                vm.detached_child_processes.remove(&detached_process_id);
-                            }
-                            self.queue_pending_process_event(ProcessEventEnvelope {
-                                connection_id,
-                                session_id,
-                                vm_id: vm_id.to_owned(),
-                                process_id: detached_process_id.clone(),
-                                event: ActiveExecutionEvent::Exited(exit_code),
-                            })?;
-                            emitted_any = true;
-                            break;
-                        }
-                        ActiveExecutionEvent::JavascriptSyncRpcRequest(request) => {
-                            self.handle_javascript_sync_rpc_request(
-                                vm_id,
-                                &root_process_id,
-                                request,
-                            )?;
-                        }
-                        ActiveExecutionEvent::PythonVfsRpcRequest(request) => {
-                            self.handle_python_vfs_rpc_request(vm_id, &root_process_id, *request)?;
-                        }
-                        ActiveExecutionEvent::SignalState {
-                            signal,
-                            registration,
-                        } => {
-                            if let Some(vm) = self.vms.get_mut(vm_id) {
-                                vm.signal_states
-                                    .entry(root_process_id.clone())
-                                    .or_default()
-                                    .insert(signal, registration);
-                            }
-                        }
-                    }
-                }
-                continue;
-            }
-
-            let parent_path = child_path[..child_path.len() - 1]
-                .iter()
-                .map(String::as_str)
-                .collect::<Vec<_>>();
-            let child_process_id = child_path.last().expect("child path cannot be empty");
-
-            loop {
-                let event = match self.poll_descendant_javascript_child_process(
-                    vm_id,
-                    &root_process_id,
-                    &parent_path,
-                    child_process_id,
-                    0,
-                ) {
-                    Ok(event) => event,
-                    Err(SidecarError::InvalidState(message))
-                        if message.contains("unknown child process")
-                            || message.contains("unknown child process path") =>
-                    {
-                        if let Some(vm) = self.vms.get_mut(vm_id) {
-                            vm.detached_child_processes.remove(&detached_process_id);
-                        }
-                        break;
-                    }
-                    Err(error) if is_javascript_child_process_gone_error(&error) => {
-                        if let Some(vm) = self.vms.get_mut(vm_id) {
-                            vm.detached_child_processes.remove(&detached_process_id);
-                        }
-                        break;
-                    }
-                    Err(error) => return Err(error),
-                };
-
-                let Some(event_type) = event.get("type").and_then(Value::as_str) else {
-                    break;
-                };
-                let Some((connection_id, session_id)) = self
-                    .vms
-                    .get(vm_id)
-                    .map(|vm| (vm.connection_id.clone(), vm.session_id.clone()))
-                else {
-                    break;
-                };
-
-                let envelope = match event_type {
-                    "stdout" => Some(ProcessEventEnvelope {
-                        connection_id: connection_id.clone(),
-                        session_id: session_id.clone(),
-                        vm_id: vm_id.to_owned(),
-                        process_id: detached_process_id.clone(),
-                        event: ActiveExecutionEvent::Stdout(javascript_sync_rpc_bytes_arg(
-                            &[event.get("data").cloned().unwrap_or(Value::Null)],
-                            0,
-                            "detached child_process stdout",
-                        )?),
-                    }),
-                    "stderr" => Some(ProcessEventEnvelope {
-                        connection_id: connection_id.clone(),
-                        session_id: session_id.clone(),
-                        vm_id: vm_id.to_owned(),
-                        process_id: detached_process_id.clone(),
-                        event: ActiveExecutionEvent::Stderr(javascript_sync_rpc_bytes_arg(
-                            &[event.get("data").cloned().unwrap_or(Value::Null)],
-                            0,
-                            "detached child_process stderr",
-                        )?),
-                    }),
-                    "exit" => {
-                        if let Some(vm) = self.vms.get_mut(vm_id) {
-                            vm.detached_child_processes.remove(&detached_process_id);
-                        }
-                        Some(ProcessEventEnvelope {
-                            connection_id,
-                            session_id,
-                            vm_id: vm_id.to_owned(),
-                            process_id: detached_process_id.clone(),
-                            event: ActiveExecutionEvent::Exited(
-                                event
-                                    .get("exitCode")
-                                    .and_then(Value::as_i64)
-                                    .map(|value| value as i32)
-                                    .unwrap_or(1),
-                            ),
-                        })
-                    }
-                    _ => None,
-                };
-
-                let Some(envelope) = envelope else {
-                    break;
-                };
-                self.queue_pending_process_event(envelope)?;
-                emitted_any = true;
-
-                if event_type == "exit" {
-                    break;
-                }
-            }
-        }
-
-        Ok(emitted_any)
-    }
-    pub(crate) fn drain_queued_descendant_javascript_child_process_events(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        child_path: &[&str],
-    ) -> Result<(), SidecarError> {
-        if child_path.is_empty() {
-            return Ok(());
-        }
-        let target_process_id = Self::child_process_path_label(process_id, child_path);
-        let mut child_capacity = self
-            .vms
-            .get(vm_id)
-            .and_then(|vm| vm.active_processes.get(process_id))
-            .and_then(|root| descendant_pending_execution_event_capacity(root, child_path));
-
-        let mut deferred = VecDeque::new();
-        while let Some(envelope) = self.pending_process_events.pop_front() {
-            if envelope.vm_id == vm_id && envelope.process_id == target_process_id {
-                if matches!(child_capacity, Some(0)) {
-                    self.pending_process_events.push_front(envelope);
-                    while let Some(deferred_envelope) = deferred.pop_back() {
-                        self.pending_process_events.push_front(deferred_envelope);
-                    }
-                    return Err(process_event_queue_overflow_error());
-                }
-                if let Some(vm) = self.vms.get_mut(vm_id) {
-                    if let Some(root) = vm.active_processes.get_mut(process_id) {
-                        if let Some(child) = Self::active_process_by_path_mut(root, child_path) {
-                            child.queue_pending_execution_event(envelope.event)?;
-                            child_capacity = child_capacity.map(|capacity| capacity - 1);
-                            continue;
-                        }
-                    }
-                }
-            }
-            deferred.push_back(envelope);
-        }
-        self.pending_process_events = deferred;
-
-        let mut queued = Vec::new();
-        {
-            let transfer_capacity = self
-                .pending_process_event_capacity()
-                .min(child_capacity.unwrap_or(usize::MAX));
-            let receiver = self.process_event_receiver.as_mut().ok_or_else(|| {
-                SidecarError::InvalidState(String::from("process event receiver unavailable"))
-            })?;
-            loop {
-                if queued.len() >= transfer_capacity {
-                    if receiver.is_empty() {
-                        break;
-                    }
-                    return Err(process_event_queue_overflow_error());
-                }
-                match receiver.try_recv() {
-                    Ok(envelope) => queued.push(envelope),
-                    Err(tokio::sync::mpsc::error::TryRecvError::Empty) => break,
-                    Err(tokio::sync::mpsc::error::TryRecvError::Disconnected) => break,
-                }
-            }
-        }
-        for envelope in queued {
-            if envelope.vm_id == vm_id && envelope.process_id == target_process_id {
-                if let Some(vm) = self.vms.get_mut(vm_id) {
-                    if let Some(root) = vm.active_processes.get_mut(process_id) {
-                        if let Some(child) = Self::active_process_by_path_mut(root, child_path) {
-                            child.queue_pending_execution_event(envelope.event)?;
-                            continue;
-                        }
-                    }
-                }
-            }
-            self.queue_pending_process_event(envelope)?;
-        }
-
-        Ok(())
-    }
-
-    pub(crate) fn handle_execution_event(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        event: ActiveExecutionEvent,
-    ) -> Result<Option<EventFrame>, SidecarError> {
-        let Some(vm) = self.vms.get(vm_id) else {
-            log_stale_process_event(&self.bridge, vm_id, process_id, "execution event dispatch");
-            return Ok(None);
-        };
-        if !vm.active_processes.contains_key(process_id) {
-            log_stale_process_event(&self.bridge, vm_id, process_id, "execution event dispatch");
-            return Ok(None);
-        }
-        let (connection_id, session_id) = { (vm.connection_id.clone(), vm.session_id.clone()) };
-        let ownership = OwnershipScope::vm(&connection_id, &session_id, vm_id);
-
-        if self.capture_extension_process_output_event(vm_id, process_id, &event) {
-            return Ok(None);
-        }
-
-        match event {
-            ActiveExecutionEvent::Stdout(chunk) => Ok(Some(EventFrame::new(
-                ownership,
-                EventPayload::ProcessOutput(ProcessOutputEvent {
-                    process_id: process_id.to_owned(),
-                    channel: StreamChannel::Stdout,
-                    chunk,
-                }),
-            ))),
-            ActiveExecutionEvent::Stderr(chunk) => Ok(Some(EventFrame::new(
-                ownership,
-                EventPayload::ProcessOutput(ProcessOutputEvent {
-                    process_id: process_id.to_owned(),
-                    channel: StreamChannel::Stderr,
-                    chunk,
-                }),
-            ))),
-            ActiveExecutionEvent::JavascriptSyncRpcRequest(request) => {
-                self.handle_javascript_sync_rpc_request(vm_id, process_id, request)?;
-                Ok(None)
-            }
-            ActiveExecutionEvent::PythonVfsRpcRequest(request) => {
-                self.handle_python_vfs_rpc_request(vm_id, process_id, *request)?;
-                Ok(None)
-            }
-            ActiveExecutionEvent::SignalState {
-                signal,
-                registration,
-            } => {
-                let Some(vm) = self.vms.get_mut(vm_id) else {
-                    return Ok(None);
-                };
-                if !vm.active_processes.contains_key(process_id) {
-                    return Ok(None);
-                }
-                vm.signal_states
-                    .entry(process_id.to_owned())
-                    .or_default()
-                    .insert(signal, registration);
-                Ok(None)
-            }
-            ActiveExecutionEvent::Exited(exit_code) => {
-                record_execute_response_to_exit_milestone(
-                    "execute_response_to_exit_event_handle",
-                    vm_id,
-                    process_id,
-                );
-                record_execute_response_to_exit(vm_id, process_id);
-                let phase_start = Instant::now();
-                let became_idle = self
-                    .finish_active_process_exit(vm_id, process_id, exit_code)?
-                    .unwrap_or(false);
-                record_execute_phase("process_exit_cleanup", phase_start.elapsed());
-
-                let phase_start = Instant::now();
-                if became_idle {
-                    self.bridge.emit_lifecycle(vm_id, LifecycleState::Ready)?;
-                }
-                record_execute_phase("process_exit_lifecycle_emit", phase_start.elapsed());
-
-                Ok(Some(EventFrame::new(
-                    ownership,
-                    EventPayload::ProcessExited(ProcessExitedEvent {
-                        process_id: process_id.to_owned(),
-                        exit_code,
-                    }),
-                )))
-            }
-        }
-    }
-
-    pub(crate) fn finish_active_process_exit(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        exit_code: i32,
-    ) -> Result<Option<bool>, SidecarError> {
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            log_stale_process_event(&self.bridge, vm_id, process_id, "process exit cleanup");
-            return Ok(None);
-        };
-        if !vm.active_processes.contains_key(process_id) {
-            log_stale_process_event(&self.bridge, vm_id, process_id, "process exit cleanup");
-            return Ok(None);
-        }
-
-        let phase_start = Instant::now();
-        prune_exited_process_snapshots(vm);
-        record_execute_phase(
-            "process_exit_cleanup_prune_snapshots",
-            phase_start.elapsed(),
-        );
-        let phase_start = Instant::now();
-        let process_table = vm.kernel.list_processes();
-        record_execute_phase("process_exit_cleanup_list_processes", phase_start.elapsed());
-        let phase_start = Instant::now();
-        let Some(mut process) = vm.active_processes.remove(process_id) else {
-            return Ok(None);
-        };
-        record_execute_phase("process_exit_cleanup_remove_active", phase_start.elapsed());
-        let phase_start = Instant::now();
-        if let Some(info) = process_table.get(&process.kernel_pid) {
-            vm.exited_process_snapshots
-                .push_back(ExitedProcessSnapshot {
-                    captured_at: Instant::now(),
-                    process: build_process_snapshot_entry(
-                        process_id,
-                        &process,
-                        info,
-                        Some(exit_code),
-                    ),
-                });
-        }
-        record_execute_phase("process_exit_cleanup_build_snapshot", phase_start.elapsed());
-        let phase_start = Instant::now();
-        let detached_children = Self::adopt_detached_child_processes(process_id, &mut process);
-        record_execute_phase("process_exit_cleanup_adopt_detached", phase_start.elapsed());
-        let phase_start = Instant::now();
-        let should_sync_host_writes = process.host_write_dirty_recursive()
-            || !process.clean_host_writes_are_observable_recursive();
-        if should_sync_host_writes {
-            sync_process_host_writes_to_kernel(vm, &process)?;
-        } else {
-            record_execute_phase(
-                "process_exit_cleanup_sync_host_writes_clean_skip",
-                Duration::ZERO,
-            );
-        }
-        record_execute_phase(
-            "process_exit_cleanup_sync_host_writes",
-            phase_start.elapsed(),
-        );
-        let phase_start = Instant::now();
-        let kernel_readiness = Arc::clone(&vm.kernel_socket_readiness);
-        terminate_child_process_tree(&mut vm.kernel, &mut process, &kernel_readiness);
-        record_execute_phase(
-            "process_exit_cleanup_terminate_child_tree",
-            phase_start.elapsed(),
-        );
-        let phase_start = Instant::now();
-        process.kernel_handle.finish(exit_code);
-        record_execute_phase("process_exit_cleanup_kernel_finish", phase_start.elapsed());
-        let phase_start = Instant::now();
-        let _ = vm.kernel.wait_and_reap(process.kernel_pid);
-        record_execute_phase("process_exit_cleanup_wait_and_reap", phase_start.elapsed());
-        let phase_start = Instant::now();
-        vm.signal_states.remove(process_id);
-        record_execute_phase(
-            "process_exit_cleanup_signal_state_remove",
-            phase_start.elapsed(),
-        );
-        let phase_start = Instant::now();
-        for (detached_process_id, detached_child) in detached_children {
-            vm.detached_child_processes
-                .insert(detached_process_id.clone());
-            vm.active_processes
-                .insert(detached_process_id, detached_child);
-        }
-        record_execute_phase(
-            "process_exit_cleanup_reinsert_detached",
-            phase_start.elapsed(),
-        );
-        let phase_start = Instant::now();
-        let became_idle = vm.active_processes.is_empty();
-        record_execute_phase("process_exit_cleanup_became_idle", phase_start.elapsed());
-        let phase_start = Instant::now();
-        self.prune_extension_process_resource(process_id);
-        record_execute_phase("process_exit_cleanup_prune_resource", phase_start.elapsed());
-
-        Ok(Some(became_idle))
-    }
-
-    pub(crate) fn drain_process_events_blocking_with_limit(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        max_events: usize,
-    ) -> Result<Vec<ActiveExecutionEvent>, SidecarError> {
-        let mut events = Vec::new();
-        if max_events == 0 {
-            return Ok(events);
-        }
-        let mut deadline = Instant::now() + PROCESS_EXIT_DRAIN_INITIAL_QUIET;
-
-        loop {
-            if events.len() >= max_events {
-                break;
-            }
-            let event = {
-                let Some(vm) = self.vms.get_mut(vm_id) else {
-                    break;
-                };
-                let Some(process) = vm.active_processes.get_mut(process_id) else {
-                    break;
-                };
-                if let Some(event) = process.pending_execution_events.pop_front() {
-                    Some(event)
-                } else {
-                    match process.execution.poll_event_blocking(Duration::ZERO) {
-                        Ok(event) => event,
-                        Err(SidecarError::Execution(_)) => None,
-                        Err(other) => return Err(other),
-                    }
-                }
-            };
-
-            let Some(event) = event else {
-                if Instant::now() >= deadline {
-                    break;
-                }
-                let blocking_wait = deadline.saturating_duration_since(Instant::now());
-                if blocking_wait.is_zero() {
-                    break;
-                }
-                if events.len() >= max_events {
-                    break;
-                }
-                let delayed_event = {
-                    let Some(vm) = self.vms.get_mut(vm_id) else {
-                        break;
-                    };
-                    let Some(process) = vm.active_processes.get_mut(process_id) else {
-                        break;
-                    };
-                    if let Some(event) = process.pending_execution_events.pop_front() {
-                        Some(event)
-                    } else {
-                        match process.execution.poll_event_blocking(blocking_wait) {
-                            Ok(event) => event,
-                            Err(SidecarError::Execution(_)) => None,
-                            Err(other) => return Err(other),
-                        }
-                    }
-                };
-                let Some(event) = delayed_event else {
-                    break;
-                };
-                events.push(event);
-                deadline = Instant::now() + PROCESS_EXIT_DRAIN_TRAILING_QUIET;
-                continue;
-            };
-            events.push(event);
-            deadline = Instant::now() + PROCESS_EXIT_DRAIN_TRAILING_QUIET;
-        }
-
-        Ok(events)
-    }
-
-    pub(crate) fn handle_python_vfs_rpc_request(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        request: PythonVfsRpcRequest,
-    ) -> Result<(), SidecarError> {
-        match request.method {
-            PythonVfsRpcMethod::Read
-            | PythonVfsRpcMethod::Write
-            | PythonVfsRpcMethod::Stat
-            | PythonVfsRpcMethod::Lstat
-            | PythonVfsRpcMethod::ReadDir
-            | PythonVfsRpcMethod::Mkdir
-            | PythonVfsRpcMethod::Unlink
-            | PythonVfsRpcMethod::Rmdir
-            | PythonVfsRpcMethod::Rename
-            | PythonVfsRpcMethod::Symlink
-            | PythonVfsRpcMethod::ReadLink
-            | PythonVfsRpcMethod::Setattr => {
-                filesystem_handle_python_vfs_rpc_request(self, vm_id, process_id, request)
-            }
-            PythonVfsRpcMethod::HttpRequest => {
-                self.handle_python_http_rpc_request(vm_id, process_id, request)
-            }
-            PythonVfsRpcMethod::DnsLookup => {
-                self.handle_python_dns_rpc_request(vm_id, process_id, request)
-            }
-            PythonVfsRpcMethod::SubprocessRun => {
-                self.handle_python_subprocess_rpc_request(vm_id, process_id, request)
-            }
-            PythonVfsRpcMethod::SocketConnect
-            | PythonVfsRpcMethod::SocketSend
-            | PythonVfsRpcMethod::SocketRecv
-            | PythonVfsRpcMethod::SocketClose
-            | PythonVfsRpcMethod::UdpCreate
-            | PythonVfsRpcMethod::UdpSendto
-            | PythonVfsRpcMethod::UdpRecvfrom => {
-                self.handle_python_socket_rpc_request(vm_id, process_id, request)
-            }
-        }
-    }
-
-    fn handle_python_http_rpc_request(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        request: PythonVfsRpcRequest,
-    ) -> Result<(), SidecarError> {
-        let Some(vm) = self.vms.get(vm_id) else {
-            return Ok(());
-        };
-        if !vm.active_processes.contains_key(process_id) {
-            return Ok(());
-        }
-        let response = (|| {
-            let url_text = request.url.as_deref().ok_or_else(|| {
-                SidecarError::InvalidState(String::from("python httpRequest requires a url"))
-            })?;
-            let url = Url::parse(url_text)
-                .map_err(|error| SidecarError::Execution(format!("ERR_INVALID_URL: {error}")))?;
-            let host = url.host_str().ok_or_else(|| {
-                SidecarError::Execution(String::from("ERR_INVALID_URL: missing host"))
-            })?;
-            let port = url.port_or_known_default().ok_or_else(|| {
-                SidecarError::Execution(String::from("ERR_INVALID_URL: missing port"))
-            })?;
-            self.bridge.require_network_access(
-                vm_id,
-                NetworkOperation::Http,
-                format_tcp_resource(host, port),
-            )?;
-            // Pin the outbound connection to the IP addresses that pass the
-            // egress range guard at resolution time. A literal IP is validated
-            // directly; a hostname is resolved once here and the resulting
-            // address set is pinned into the HTTP client's resolver below so a
-            // rebinding DNS server cannot make the second (TLS/TCP) lookup land
-            // on a private/link-local/metadata IP that this check rejected.
-            let pinned_addresses = if let Ok(literal_ip) = host.parse::<IpAddr>() {
-                filter_dns_safe_ip_addrs(vec![literal_ip], host)?
-            } else {
-                filter_dns_safe_ip_addrs(
-                    resolve_dns_ip_addrs(
-                        &self.bridge,
-                        &vm.kernel,
-                        vm_id,
-                        &vm.dns,
-                        host,
-                        DnsLookupPolicy::SkipPermissions,
-                    )?,
-                    host,
-                )?
-            };
-            let mut headers = BTreeMap::new();
-            for (name, value) in &request.headers {
-                headers.insert(name.clone(), Value::String(value.clone()));
-            }
-            let options = JavascriptHttpRequestOptions {
-                method: Some(
-                    request
-                        .http_method
-                        .clone()
-                        .unwrap_or_else(|| String::from("GET")),
-                ),
-                headers,
-                body: request.body_base64.as_deref().map(|body| {
-                    String::from_utf8(
-                        base64::engine::general_purpose::STANDARD
-                            .decode(body)
-                            .unwrap_or_default(),
-                    )
-                    .unwrap_or_default()
-                }),
-                reject_unauthorized: None,
-            };
-            let headers =
-                parse_http_header_collection(&options.headers, "python httpRequest headers")?;
-            let response =
-                issue_outbound_http_request(&url, &options, &headers, &pinned_addresses)?;
-            let payload_json = response.as_str().ok_or_else(|| {
-                SidecarError::Execution(String::from(
-                    "python httpRequest returned a non-string response payload",
-                ))
-            })?;
-            let payload: Value = serde_json::from_str(payload_json).map_err(|error| {
-                SidecarError::Execution(format!(
-                    "python httpRequest response must be valid JSON: {error}"
-                ))
-            })?;
-            let header_map = payload
-                .get("headers")
-                .and_then(Value::as_array)
-                .map(|entries| {
-                    let mut normalized = BTreeMap::<String, Vec<String>>::new();
-                    for entry in entries {
-                        let Some(pair) = entry.as_array() else {
-                            continue;
-                        };
-                        let Some(name) = pair.first().and_then(Value::as_str) else {
-                            continue;
-                        };
-                        let Some(value) = pair.get(1).and_then(Value::as_str) else {
-                            continue;
-                        };
-                        normalized
-                            .entry(name.to_owned())
-                            .or_default()
-                            .push(value.to_owned());
-                    }
-                    normalized
-                })
-                .unwrap_or_default();
-            Ok(PythonVfsRpcResponsePayload::Http {
-                status: payload
-                    .get("status")
-                    .and_then(Value::as_u64)
-                    .map(|value| value as u16)
-                    .unwrap_or_default(),
-                reason: payload
-                    .get("statusText")
-                    .and_then(Value::as_str)
-                    .unwrap_or_default()
-                    .to_owned(),
-                url: payload
-                    .get("url")
-                    .and_then(Value::as_str)
-                    .unwrap_or(url_text)
-                    .to_owned(),
-                headers: header_map,
-                body_base64: payload
-                    .get("body")
-                    .and_then(Value::as_str)
-                    .unwrap_or_default()
-                    .to_owned(),
-            })
-        })();
-
-        self.respond_python_rpc(vm_id, process_id, request.id, response)
-    }
-
-    fn handle_python_dns_rpc_request(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        request: PythonVfsRpcRequest,
-    ) -> Result<(), SidecarError> {
-        let Some(vm) = self.vms.get(vm_id) else {
-            return Ok(());
-        };
-        if !vm.active_processes.contains_key(process_id) {
-            return Ok(());
-        }
-        let response = (|| {
-            let hostname = request.hostname.as_deref().ok_or_else(|| {
-                SidecarError::InvalidState(String::from("python dnsLookup requires a hostname"))
-            })?;
-            let mut addresses = filter_dns_safe_ip_addrs(
-                resolve_dns_ip_addrs(
-                    &self.bridge,
-                    &vm.kernel,
-                    vm_id,
-                    &vm.dns,
-                    hostname,
-                    DnsLookupPolicy::CheckPermissions,
-                )?,
-                hostname,
-            )?;
-            if let Some(family) = request.family {
-                addresses.retain(|address| {
-                    matches!((family, address), (4, IpAddr::V4(_)) | (6, IpAddr::V6(_)))
-                });
-            }
-            Ok(PythonVfsRpcResponsePayload::DnsLookup {
-                addresses: addresses
-                    .into_iter()
-                    .map(|address| address.to_string())
-                    .collect(),
-            })
-        })();
-
-        self.respond_python_rpc(vm_id, process_id, request.id, response)
-    }
-
-    fn handle_python_subprocess_rpc_request(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        request: PythonVfsRpcRequest,
-    ) -> Result<(), SidecarError> {
-        let command = request.command.clone().ok_or_else(|| {
-            SidecarError::InvalidState(String::from("python subprocessRun requires a command"))
-        })?;
-        let (internal_bootstrap_env, cwd) = {
-            let Some(vm) = self.vms.get(vm_id) else {
-                return Ok(());
-            };
-            let Some(process) = vm.active_processes.get(process_id) else {
-                return Ok(());
-            };
-            let virtual_home = guest_virtual_home(vm);
-            let cwd = request.cwd.clone().or_else(|| {
-                guest_runtime_path_for_host_path(
-                    &vm.guest_env,
-                    &virtual_home,
-                    &vm.host_cwd,
-                    &process.host_cwd.to_string_lossy(),
-                )
-            });
-            (
-                sanitize_javascript_child_process_internal_bootstrap_env(&vm.guest_env),
-                cwd,
-            )
-        };
-        let response = self
-            .spawn_javascript_child_process_sync(
-                vm_id,
-                process_id,
-                JavascriptChildProcessSpawnRequest {
-                    command,
-                    args: request.args.clone(),
-                    options: JavascriptChildProcessSpawnOptions {
-                        cwd,
-                        env: request.env.clone(),
-                        input: None,
-                        internal_bootstrap_env,
-                        shell: request.shell,
-                        detached: false,
-                        stdio: vec![
-                            String::from("pipe"),
-                            String::from("pipe"),
-                            String::from("pipe"),
-                        ],
-                        timeout: None,
-                        kill_signal: None,
-                    },
-                },
-                request.max_buffer,
-            )
-            .map(|payload| PythonVfsRpcResponsePayload::SubprocessRun {
-                exit_code: payload
-                    .get("code")
-                    .and_then(Value::as_i64)
-                    .map(|value| value as i32)
-                    .unwrap_or(1),
-                stdout: payload
-                    .get("stdout")
-                    .and_then(Value::as_str)
-                    .unwrap_or_default()
-                    .to_owned(),
-                stderr: payload
-                    .get("stderr")
-                    .and_then(Value::as_str)
-                    .unwrap_or_default()
-                    .to_owned(),
-                max_buffer_exceeded: payload
-                    .get("maxBufferExceeded")
-                    .and_then(Value::as_bool)
-                    .unwrap_or(false),
-            });
-
-        self.respond_python_rpc(vm_id, process_id, request.id, response)
-    }
-
-    fn handle_python_socket_rpc_request(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        request: PythonVfsRpcRequest,
-    ) -> Result<(), SidecarError> {
-        if !self.vms.contains_key(vm_id) {
-            return Ok(());
-        }
-        let response = self.python_socket_op(vm_id, process_id, &request);
-        self.respond_python_rpc(vm_id, process_id, request.id, response)
-    }
-
-    fn python_socket_op(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        request: &PythonVfsRpcRequest,
-    ) -> Result<PythonVfsRpcResponsePayload, SidecarError> {
-        match request.method {
-            PythonVfsRpcMethod::SocketConnect => {
-                let host = python_socket_host(request)?;
-                let port = python_socket_port(request)?;
-                self.check_python_socket_limit(vm_id)?;
-                self.bridge.require_network_access(
-                    vm_id,
-                    NetworkOperation::Http,
-                    format_tcp_resource(&host, port),
-                )?;
-                let pinned = self.python_socket_pinned_addrs(vm_id, &host, port)?;
-                let stream = python_connect_tcp(&pinned, port)?;
-                stream
-                    .set_read_timeout(Some(PYTHON_SOCKET_READ_POLL))
-                    .map_err(python_socket_io_error)?;
-                // Bound writes too: without a write timeout `write_all` on a
-                // stalled peer would block the shared event loop indefinitely.
-                stream
-                    .set_write_timeout(Some(PYTHON_SOCKET_WRITE_TIMEOUT))
-                    .map_err(python_socket_io_error)?;
-                let socket_id =
-                    self.store_python_socket(vm_id, process_id, PythonHostSocket::Tcp(stream))?;
-                Ok(PythonVfsRpcResponsePayload::SocketCreated { socket_id })
-            }
-            PythonVfsRpcMethod::SocketSend => {
-                let data = python_socket_payload(request)?;
-                let socket = self.python_socket_mut(vm_id, process_id, request)?;
-                let PythonHostSocket::Tcp(stream) = socket else {
-                    return Err(python_socket_kind_error("send", "TCP"));
-                };
-                stream.write_all(&data).map_err(python_socket_io_error)?;
-                Ok(PythonVfsRpcResponsePayload::SocketSent {
-                    bytes_sent: data.len(),
-                })
-            }
-            PythonVfsRpcMethod::SocketRecv => {
-                let max = python_socket_recv_len(request);
-                let socket = self.python_socket_mut(vm_id, process_id, request)?;
-                let PythonHostSocket::Tcp(stream) = socket else {
-                    return Err(python_socket_kind_error("recv", "TCP"));
-                };
-                let mut buf = vec![0u8; max];
-                match stream.read(&mut buf) {
-                    Ok(0) => Ok(PythonVfsRpcResponsePayload::SocketReceived {
-                        data_base64: String::new(),
-                        closed: true,
-                        timed_out: false,
-                    }),
-                    Ok(n) => Ok(PythonVfsRpcResponsePayload::SocketReceived {
-                        data_base64: base64::engine::general_purpose::STANDARD.encode(&buf[..n]),
-                        closed: false,
-                        timed_out: false,
-                    }),
-                    Err(error) if python_socket_would_block(&error) => {
-                        Ok(PythonVfsRpcResponsePayload::SocketReceived {
-                            data_base64: String::new(),
-                            closed: false,
-                            timed_out: true,
-                        })
-                    }
-                    Err(error) => Err(python_socket_io_error(error)),
-                }
-            }
-            PythonVfsRpcMethod::SocketClose => {
-                self.remove_python_socket(vm_id, process_id, request);
-                Ok(PythonVfsRpcResponsePayload::Empty)
-            }
-            PythonVfsRpcMethod::UdpCreate => {
-                self.check_python_socket_limit(vm_id)?;
-                let socket = UdpSocket::bind("0.0.0.0:0").map_err(python_socket_io_error)?;
-                socket
-                    .set_read_timeout(Some(PYTHON_SOCKET_READ_POLL))
-                    .map_err(python_socket_io_error)?;
-                let socket_id =
-                    self.store_python_socket(vm_id, process_id, PythonHostSocket::Udp(socket))?;
-                Ok(PythonVfsRpcResponsePayload::SocketCreated { socket_id })
-            }
-            PythonVfsRpcMethod::UdpSendto => {
-                let host = python_socket_host(request)?;
-                let port = python_socket_port(request)?;
-                let data = python_socket_payload(request)?;
-                self.bridge.require_network_access(
-                    vm_id,
-                    NetworkOperation::Http,
-                    format_tcp_resource(&host, port),
-                )?;
-                let pinned = self.python_socket_pinned_addrs(vm_id, &host, port)?;
-                let target = pinned
-                    .first()
-                    .map(|ip| SocketAddr::new(*ip, port))
-                    .ok_or_else(|| {
-                        SidecarError::Execution(format!("EAI_NONAME: cannot resolve {host}"))
-                    })?;
-                let socket = self.python_socket_mut(vm_id, process_id, request)?;
-                let PythonHostSocket::Udp(udp) = socket else {
-                    return Err(python_socket_kind_error("sendto", "UDP"));
-                };
-                let sent = udp.send_to(&data, target).map_err(python_socket_io_error)?;
-                Ok(PythonVfsRpcResponsePayload::SocketSent { bytes_sent: sent })
-            }
-            PythonVfsRpcMethod::UdpRecvfrom => {
-                let max = python_socket_recv_len(request);
-                let socket = self.python_socket_mut(vm_id, process_id, request)?;
-                let PythonHostSocket::Udp(udp) = socket else {
-                    return Err(python_socket_kind_error("recvfrom", "UDP"));
-                };
-                let mut buf = vec![0u8; max];
-                match udp.recv_from(&mut buf) {
-                    Ok((n, addr)) => Ok(PythonVfsRpcResponsePayload::UdpReceived {
-                        data_base64: base64::engine::general_purpose::STANDARD.encode(&buf[..n]),
-                        host: addr.ip().to_string(),
-                        port: addr.port(),
-                        timed_out: false,
-                    }),
-                    Err(error) if python_socket_would_block(&error) => {
-                        Ok(PythonVfsRpcResponsePayload::UdpReceived {
-                            data_base64: String::new(),
-                            host: String::new(),
-                            port: 0,
-                            timed_out: true,
-                        })
-                    }
-                    Err(error) => Err(python_socket_io_error(error)),
-                }
-            }
-            _ => Err(SidecarError::InvalidState(String::from(
-                "non-socket python RPC reached the socket dispatcher unexpectedly",
-            ))),
-        }
-    }
-
-    /// Resolve `host` to the egress-guard-approved IP set, then apply the same
-    /// loopback-connect gate the JS raw-TCP path uses (`filter_tcp_connect_ip_addrs`)
-    /// so a rebinding DNS server can't map an allowlisted hostname onto a
-    /// sidecar-local loopback port the VM policy didn't open.
-    fn python_socket_pinned_addrs(
-        &self,
-        vm_id: &str,
-        host: &str,
-        port: u16,
-    ) -> Result<Vec<IpAddr>, SidecarError> {
-        let Some(vm) = self.vms.get(vm_id) else {
-            return Err(SidecarError::InvalidState(String::from(
-                "python socket op for unknown vm",
-            )));
-        };
-        let context = build_javascript_socket_path_context(vm)?;
-        if let Ok(literal_ip) = host.parse::<IpAddr>() {
-            filter_tcp_connect_ip_addrs(vec![literal_ip], host, port, &context)
-        } else {
-            filter_tcp_connect_ip_addrs(
-                resolve_dns_ip_addrs(
-                    &self.bridge,
-                    &vm.kernel,
-                    vm_id,
-                    &vm.dns,
-                    host,
-                    DnsLookupPolicy::SkipPermissions,
-                )?,
-                host,
-                port,
-                &context,
-            )
-        }
-    }
-
-    /// Enforce the VM's `max_sockets` resource limit before opening another
-    /// host socket for the guest (the registry is otherwise unbounded — a
-    /// hostile guest could exhaust the sidecar's fds/memory).
-    fn check_python_socket_limit(&self, vm_id: &str) -> Result<(), SidecarError> {
-        let Some(vm) = self.vms.get(vm_id) else {
-            return Ok(());
-        };
-        let limit = vm.kernel.resource_limits().max_sockets;
-        let current = vm_network_resource_counts(vm).sockets;
-        check_network_resource_limit(limit, current, 1, "socket")
-    }
-
-    fn store_python_socket(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        socket: PythonHostSocket,
-    ) -> Result<u64, SidecarError> {
-        let process = self
-            .vms
-            .get_mut(vm_id)
-            .and_then(|vm| vm.active_processes.get_mut(process_id))
-            .ok_or_else(|| {
-                SidecarError::InvalidState(String::from("python socket op for reaped vm/process"))
-            })?;
-        let socket_id = process.next_python_socket_id;
-        process.next_python_socket_id = process.next_python_socket_id.wrapping_add(1);
-        process.python_sockets.insert(socket_id, socket);
-        Ok(socket_id)
-    }
-
-    fn python_socket_mut(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        request: &PythonVfsRpcRequest,
-    ) -> Result<&mut PythonHostSocket, SidecarError> {
-        let socket_id = request.socket_id.ok_or_else(|| {
-            SidecarError::InvalidState(String::from("python socket op requires socketId"))
-        })?;
-        self.vms
-            .get_mut(vm_id)
-            .and_then(|vm| vm.active_processes.get_mut(process_id))
-            .and_then(|process| process.python_sockets.get_mut(&socket_id))
-            .ok_or_else(|| {
-                SidecarError::Execution(format!("EBADF: unknown python socket {socket_id}"))
-            })
-    }
-
-    fn remove_python_socket(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        request: &PythonVfsRpcRequest,
-    ) {
-        let Some(socket_id) = request.socket_id else {
-            return;
-        };
-        if let Some(process) = self
-            .vms
-            .get_mut(vm_id)
-            .and_then(|vm| vm.active_processes.get_mut(process_id))
-        {
-            process.python_sockets.remove(&socket_id);
-        }
-    }
-
-    fn respond_python_rpc(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        request_id: u64,
-        response: Result<PythonVfsRpcResponsePayload, SidecarError>,
-    ) -> Result<(), SidecarError> {
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Ok(());
-        };
-        let Some(process) = vm.active_processes.get_mut(process_id) else {
-            return Ok(());
-        };
-        let result = match response {
-            Ok(payload) => process
-                .execution
-                .respond_python_vfs_rpc_success(request_id, payload),
-            Err(error) => process.execution.respond_python_vfs_rpc_error(
-                request_id,
-                "ERR_AGENTOS_PYTHON_VFS_RPC",
-                error.to_string(),
-            ),
-        };
-        match result {
-            Ok(()) => Ok(()),
-            Err(error) if is_broken_pipe_error(&error) => Ok(()),
-            Err(error) => Err(error),
-        }
-    }
-
-    pub(crate) fn resolve_javascript_child_process_execution(
-        &self,
-        vm: &VmState,
-        parent_env: &BTreeMap<String, String>,
-        parent_guest_cwd: &str,
-        parent_host_cwd: &Path,
-        request: &JavascriptChildProcessSpawnRequest,
-    ) -> Result<ResolvedChildProcessExecution, SidecarError> {
-        let mut runtime_env = parent_env.clone();
-        runtime_env.extend(request.options.internal_bootstrap_env.clone());
-        let (guest_cwd, host_cwd_override) = request
-            .options
-            .cwd
-            .as_deref()
-            .map(|cwd| {
-                let normalized_parent_host_cwd = normalize_host_path(parent_host_cwd);
-                let requested_host_cwd = normalize_host_path(Path::new(cwd));
-                if path_is_within_root(&requested_host_cwd, &normalized_parent_host_cwd) {
-                    let relative = requested_host_cwd
-                        .strip_prefix(&normalized_parent_host_cwd)
-                        .unwrap_or_else(|_| Path::new(""));
-                    let relative = relative.to_string_lossy().replace('\\', "/");
-                    let guest_cwd = if relative.is_empty() {
-                        parent_guest_cwd.to_owned()
-                    } else {
-                        normalize_path(&format!("{parent_guest_cwd}/{relative}"))
-                    };
-                    (guest_cwd, Some(requested_host_cwd))
-                } else if Path::new(cwd).is_relative() {
-                    (
-                        normalize_path(&format!("{parent_guest_cwd}/{cwd}")),
-                        Some(normalize_host_path(&parent_host_cwd.join(cwd))),
-                    )
-                } else {
-                    (normalize_path(cwd), None)
-                }
-            })
-            .unwrap_or_else(|| (parent_guest_cwd.to_owned(), None));
-        let inherited_host_cwd = (host_cwd_override.is_none() && guest_cwd == parent_guest_cwd)
-            .then(|| normalize_host_path(parent_host_cwd));
-        let host_cwd = host_cwd_override
-            .or(inherited_host_cwd)
-            .or_else(|| {
-                host_runtime_path_for_guest_path_with_env(
-                    vm,
-                    &runtime_env,
-                    &guest_cwd,
-                    parent_host_cwd,
-                )
-            })
-            .unwrap_or_else(|| {
-                let candidate = PathBuf::from(&guest_cwd);
-                if guest_cwd == parent_guest_cwd {
-                    normalize_host_path(parent_host_cwd)
-                } else if candidate.is_absolute() {
-                    shadow_path_for_guest(vm, &guest_cwd)
-                } else {
-                    vm.host_cwd.clone()
-                }
-            });
-        let mut env = parent_env.clone();
-        env.extend(request.options.env.clone());
-        // Child JavaScript executions must resolve their own entrypoint/eval state.
-        // Reusing the parent's values makes the sidecar load the wrong source file.
-        env.remove("AGENTOS_GUEST_ENTRYPOINT");
-        env.remove("AGENTOS_NODE_EVAL");
-
-        let (command, process_args) = if request.options.shell {
-            let tokens = tokenize_shell_free_command(&request.command);
-            let requires_shell = command_requires_shell(&request.command)
-                || tokens.first().is_some_and(|command| {
-                    is_posix_shell_builtin(command) || shell_first_token_requires_shell(command)
-                });
-            if requires_shell {
-                if !vm.command_guest_paths.contains_key("sh") {
-                    return Err(SidecarError::InvalidState(format!(
-                        "shell-mode child_process command requires /bin/sh, which is not \
-                         installed in this VM (install a software package that provides sh, \
-                         for example @secure-exec/coreutils): {}",
-                        request.command
-                    )));
-                }
-                (
-                    String::from("sh"),
-                    vec![String::from("-c"), request.command.clone()],
-                )
-            } else {
-                let Some((command, args)) = tokens.split_first() else {
-                    return Err(SidecarError::InvalidState(String::from(
-                        "child_process shell command must not be empty",
-                    )));
-                };
-                (command.clone(), args.to_vec())
-            }
-        } else {
-            (request.command.clone(), request.args.clone())
-        };
-        let process_args = apply_shell_cwd_prefix(&command, process_args, &guest_cwd);
-        if is_tool_command(vm, &command) {
-            let command = normalized_tool_command_name(&command).unwrap_or(command);
-            return Ok(ResolvedChildProcessExecution {
-                command: command.clone(),
-                process_args: std::iter::once(command.clone())
-                    .chain(process_args.iter().cloned())
-                    .collect(),
-                runtime: GuestRuntimeKind::JavaScript,
-                entrypoint: command,
-                execution_args: process_args,
-                env,
-                guest_cwd,
-                host_cwd,
-                wasm_permission_tier: None,
-                tool_command: true,
-            });
-        }
-
-        if is_path_like_specifier(&command)
-            && matches!(
-                Path::new(&command).extension().and_then(|ext| ext.to_str()),
-                Some("js" | "mjs" | "cjs" | "ts" | "mts" | "cts")
-            )
-        {
-            let guest_entrypoint = if command.starts_with('/') {
-                normalize_path(&command)
-            } else if command.starts_with("file:") {
-                normalize_path(command.trim_start_matches("file:"))
-            } else {
-                normalize_path(&format!("{guest_cwd}/{command}"))
-            };
-            let host_entrypoint = if command.starts_with("./") || command.starts_with("../") {
-                normalize_host_path(&host_cwd.join(&command))
-            } else {
-                host_runtime_path_for_guest_path_with_env(
-                    vm,
-                    &runtime_env,
-                    &guest_entrypoint,
-                    parent_host_cwd,
-                )
-                .unwrap_or_else(|| {
-                    let candidate = PathBuf::from(&guest_entrypoint);
-                    if candidate.is_absolute() {
-                        candidate
-                    } else {
-                        host_cwd.join(&guest_entrypoint)
-                    }
-                })
-            };
-            env.insert(String::from("AGENTOS_GUEST_ENTRYPOINT"), guest_entrypoint);
-            let guest_entrypoint = env.get("AGENTOS_GUEST_ENTRYPOINT").cloned();
-            prepare_guest_runtime_env(vm, &mut env, &guest_cwd, &host_cwd, guest_entrypoint)?;
-
-            return Ok(ResolvedChildProcessExecution {
-                command: command.clone(),
-                process_args: std::iter::once(command)
-                    .chain(process_args.iter().cloned())
-                    .collect(),
-                runtime: GuestRuntimeKind::JavaScript,
-                entrypoint: host_entrypoint.to_string_lossy().into_owned(),
-                execution_args: process_args,
-                env,
-                guest_cwd,
-                host_cwd,
-                wasm_permission_tier: None,
-                tool_command: false,
-            });
-        }
-
-        if is_node_runtime_command(&command) {
-            if let Some(cli) = resolve_host_node_cli_entrypoint(&command) {
-                env.insert(
-                    String::from("AGENTOS_NODE_EVAL"),
-                    build_host_node_cli_eval(&cli),
-                );
-                prepare_guest_runtime_env(vm, &mut env, &guest_cwd, &host_cwd, None)?;
-                add_runtime_guest_path_mapping(&mut env, &cli.guest_root, &cli.package_root);
-                add_runtime_host_access_path(
-                    &mut env,
-                    "AGENTOS_EXTRA_FS_READ_PATHS",
-                    &cli.package_root,
-                    true,
-                );
-
-                return Ok(ResolvedChildProcessExecution {
-                    command: command.clone(),
-                    process_args: std::iter::once(command.clone())
-                        .chain(process_args.iter().cloned())
-                        .collect(),
-                    runtime: GuestRuntimeKind::JavaScript,
-                    entrypoint: String::from("-e"),
-                    execution_args: std::iter::once(cli.guest_entrypoint.clone())
-                        .chain(process_args.iter().cloned())
-                        .collect(),
-                    env,
-                    guest_cwd,
-                    host_cwd,
-                    wasm_permission_tier: None,
-                    tool_command: false,
-                });
-            }
-
-            if process_args.is_empty() {
-                env.insert(String::from("AGENTOS_NODE_EVAL"), String::new());
-                prepare_guest_runtime_env(vm, &mut env, &guest_cwd, &host_cwd, None)?;
-
-                return Ok(ResolvedChildProcessExecution {
-                    command: command.clone(),
-                    process_args: vec![command.clone()],
-                    runtime: GuestRuntimeKind::JavaScript,
-                    entrypoint: String::from("-e"),
-                    execution_args: Vec::new(),
-                    env,
-                    guest_cwd,
-                    host_cwd,
-                    wasm_permission_tier: None,
-                    tool_command: false,
-                });
-            }
-
-            if let Some((entrypoint, execution_args)) =
-                resolve_special_node_cli_invocation(&process_args, &mut env)
-            {
-                prepare_guest_runtime_env(vm, &mut env, &guest_cwd, &host_cwd, None)?;
-
-                return Ok(ResolvedChildProcessExecution {
-                    command: command.clone(),
-                    process_args: std::iter::once(command.clone())
-                        .chain(process_args.iter().cloned())
-                        .collect(),
-                    runtime: GuestRuntimeKind::JavaScript,
-                    entrypoint,
-                    execution_args,
-                    env,
-                    guest_cwd,
-                    host_cwd,
-                    wasm_permission_tier: None,
-                    tool_command: false,
-                });
-            }
-
-            let Some(entrypoint_specifier) = process_args.first() else {
-                return Err(SidecarError::InvalidState(format!(
-                    "{command} child_process spawn requires an entrypoint"
-                )));
-            };
-
-            let (entrypoint, execution_args) = if is_path_like_specifier(entrypoint_specifier) {
-                let guest_entrypoint = if entrypoint_specifier.starts_with('/') {
-                    normalize_path(entrypoint_specifier)
-                } else if entrypoint_specifier.starts_with("file:") {
-                    normalize_path(entrypoint_specifier.trim_start_matches("file:"))
-                } else {
-                    normalize_path(&format!("{guest_cwd}/{entrypoint_specifier}"))
-                };
-                let host_entrypoint = if entrypoint_specifier.starts_with("./")
-                    || entrypoint_specifier.starts_with("../")
-                {
-                    normalize_host_path(&host_cwd.join(entrypoint_specifier))
-                } else {
-                    host_runtime_path_for_guest_path_with_env(
-                        vm,
-                        &runtime_env,
-                        &guest_entrypoint,
-                        parent_host_cwd,
-                    )
-                    .unwrap_or_else(|| {
-                        let candidate = PathBuf::from(&guest_entrypoint);
-                        if candidate.is_absolute() {
-                            candidate
-                        } else {
-                            host_cwd.join(&guest_entrypoint)
-                        }
-                    })
-                };
-                env.insert(String::from("AGENTOS_GUEST_ENTRYPOINT"), guest_entrypoint);
-                (
-                    host_entrypoint.to_string_lossy().into_owned(),
-                    process_args.iter().skip(1).cloned().collect(),
-                )
-            } else {
-                (
-                    entrypoint_specifier.clone(),
-                    process_args.iter().skip(1).cloned().collect(),
-                )
-            };
-            let guest_entrypoint = env.get("AGENTOS_GUEST_ENTRYPOINT").cloned();
-            prepare_guest_runtime_env(vm, &mut env, &guest_cwd, &host_cwd, guest_entrypoint)?;
-
-            return Ok(ResolvedChildProcessExecution {
-                command: command.clone(),
-                process_args: std::iter::once(command)
-                    .chain(process_args.iter().cloned())
-                    .collect(),
-                runtime: GuestRuntimeKind::JavaScript,
-                entrypoint,
-                execution_args,
-                env,
-                guest_cwd,
-                host_cwd,
-                wasm_permission_tier: None,
-                tool_command: false,
-            });
-        }
-
-        if is_python_runtime_command(&command) {
-            return resolve_python_command_execution(
-                vm,
-                &command,
-                &process_args,
-                env,
-                guest_cwd,
-                host_cwd,
-            );
-        }
-
-        let guest_entrypoint = resolve_guest_command_entrypoint(
-            vm,
-            &guest_cwd,
-            &command,
-            env.get("PATH").map(String::as_str),
-        )
-        .ok_or_else(|| SidecarError::InvalidState(format!("command not found: {command}")))?;
-        let host_entrypoint = resolve_vm_guest_path_to_host(vm, &guest_entrypoint);
-        let wasm_permission_tier = vm.command_permissions.get(&command).copied().or_else(|| {
-            Path::new(&guest_entrypoint)
-                .file_name()
-                .and_then(|name| name.to_str())
-                .and_then(|name| vm.command_permissions.get(name).copied())
-        });
-        if let Some((javascript_guest_entrypoint, javascript_host_entrypoint)) =
-            resolve_javascript_command_entrypoint(vm, &guest_entrypoint, &host_entrypoint)
-        {
-            prepare_guest_runtime_env(
-                vm,
-                &mut env,
-                &guest_cwd,
-                &host_cwd,
-                Some(javascript_guest_entrypoint),
-            )?;
-
-            return Ok(ResolvedChildProcessExecution {
-                command: command.clone(),
-                process_args: std::iter::once(command)
-                    .chain(process_args.iter().cloned())
-                    .collect(),
-                runtime: GuestRuntimeKind::JavaScript,
-                entrypoint: javascript_host_entrypoint.to_string_lossy().into_owned(),
-                execution_args: process_args,
-                env,
-                guest_cwd,
-                host_cwd,
-                wasm_permission_tier: None,
-                tool_command: false,
-            });
-        }
-        prepare_guest_runtime_env(
-            vm,
-            &mut env,
-            &guest_cwd,
-            &host_cwd,
-            Some(guest_entrypoint.clone()),
-        )?;
-
-        Ok(ResolvedChildProcessExecution {
-            command: command.clone(),
-            process_args: std::iter::once(command)
-                .chain(process_args.iter().cloned())
-                .collect(),
-            runtime: GuestRuntimeKind::WebAssembly,
-            entrypoint: host_entrypoint.to_string_lossy().into_owned(),
-            execution_args: process_args,
-            env,
-            guest_cwd,
-            host_cwd,
-            wasm_permission_tier,
-            tool_command: false,
-        })
-    }
-
-    pub(crate) fn spawn_javascript_child_process(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        request: JavascriptChildProcessSpawnRequest,
-    ) -> Result<Value, SidecarError> {
-        let total_start = Instant::now();
-        let phase_start = Instant::now();
-        let resolved = {
-            let vm = self.vms.get(vm_id).ok_or_else(|| missing_vm_error(vm_id))?;
-            let parent = vm
-                .active_processes
-                .get(process_id)
-                .ok_or_else(|| missing_process_error(vm_id, process_id))?;
-            self.resolve_javascript_child_process_execution(
-                vm,
-                &parent.env,
-                &parent.guest_cwd,
-                &parent.host_cwd,
-                &request,
-            )?
-        };
-        record_execute_phase("child_process_resolve_execution", phase_start.elapsed());
-        let (parent_kernel_pid, child_process_id) = {
-            let vm = self
-                .vms
-                .get_mut(vm_id)
-                .ok_or_else(|| missing_vm_error(vm_id))?;
-            let process = vm
-                .active_processes
-                .get_mut(process_id)
-                .ok_or_else(|| missing_process_error(vm_id, process_id))?;
-            (process.kernel_pid, process.allocate_child_process_id())
-        };
-        let sidecar_requests = self.sidecar_requests.clone();
-        let vm = self
-            .vms
-            .get_mut(vm_id)
-            .ok_or_else(|| missing_vm_error(vm_id))?;
-        let phase_start = Instant::now();
-        let (kernel_pid, kernel_handle, execution, kernel_stdin_writer_fd) = if resolved
-            .tool_command
-        {
-            let tool_resolution = resolve_tool_command(
-                vm,
-                &resolved.command,
-                &resolved.execution_args,
-                Some(&resolved.guest_cwd),
-            )?
-            .ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "tool command no longer resolves: {}",
-                    resolved.command
-                ))
-            })?;
-            let kernel_handle = vm
-                .kernel
-                .create_virtual_process(
-                    EXECUTION_DRIVER_NAME,
-                    TOOL_DRIVER_NAME,
-                    &resolved.command,
-                    resolved.process_args.clone(),
-                    VirtualProcessOptions {
-                        parent_pid: Some(parent_kernel_pid),
-                        env: resolved.env.clone(),
-                        cwd: Some(resolved.guest_cwd.clone()),
-                    },
-                )
-                .map_err(kernel_error)?;
-            let kernel_pid = kernel_handle.pid();
-            let tool_execution = ToolExecution::default();
-            let cancelled = tool_execution.cancelled.clone();
-            let pending_events = tool_execution.pending_events.clone();
-            let events_overflowed = tool_execution.events_overflowed.clone();
-            spawn_tool_process_events(ToolProcessEventRequest {
-                sidecar_requests: sidecar_requests.clone(),
-                connection_id: vm.connection_id.clone(),
-                session_id: vm.session_id.clone(),
-                vm_id: vm_id.to_owned(),
-                tool_resolution,
-                cancelled,
-                pending_events,
-                events_overflowed,
-            });
-            (
-                kernel_pid,
-                kernel_handle,
-                ActiveExecution::Tool(tool_execution),
-                None,
-            )
-        } else {
-            let kernel_command = match resolved.runtime {
-                GuestRuntimeKind::JavaScript => JAVASCRIPT_COMMAND,
-                GuestRuntimeKind::WebAssembly => WASM_COMMAND,
-                GuestRuntimeKind::Python => PYTHON_COMMAND,
-            };
-            let kernel_handle = vm
-                .kernel
-                .spawn_process(
-                    kernel_command,
-                    resolved.process_args.clone(),
-                    SpawnOptions {
-                        requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                        parent_pid: Some(parent_kernel_pid),
-                        env: resolved.env.clone(),
-                        cwd: Some(resolved.guest_cwd.clone()),
-                    },
-                )
-                .map_err(kernel_error)?;
-            let kernel_pid = kernel_handle.pid();
-            if request.options.detached {
-                vm.kernel
-                    .setsid(EXECUTION_DRIVER_NAME, kernel_pid)
-                    .map_err(kernel_error)?;
-            }
-            let mut execution_env = resolved.env.clone();
-            execution_env.insert(
-                String::from(EXECUTION_SANDBOX_ROOT_ENV),
-                normalize_host_path(&vm.cwd).to_string_lossy().into_owned(),
-            );
-
-            let execution = match resolved.runtime {
-                GuestRuntimeKind::JavaScript => {
-                    execution_env.extend(sanitize_javascript_child_process_internal_bootstrap_env(
-                        &request.options.internal_bootstrap_env,
-                    ));
-                    execution_env.insert(
-                        String::from("SECURE_EXEC_KEEP_STDIN_OPEN"),
-                        String::from("1"),
-                    );
-                    let launch_entrypoint = resolve_agentos_package_javascript_launch_entrypoint(
-                        vm,
-                        &mut execution_env,
-                    )
-                    .unwrap_or_else(|| resolved.entrypoint.clone());
-                    let context =
-                        self.javascript_engine
-                            .create_context(CreateJavascriptContextRequest {
-                                vm_id: vm_id.to_owned(),
-                                bootstrap_module: None,
-                                compile_cache_root: Some(
-                                    self.cache_root.join("node-compile-cache"),
-                                ),
-                            });
-                    let inline_code = load_javascript_entrypoint_source(
-                        vm,
-                        &resolved.host_cwd,
-                        &launch_entrypoint,
-                        &execution_env,
-                    );
-                    prepare_javascript_shadow(vm, &resolved, &execution_env)?;
-
-                    let built_reader = build_module_reader(vm, &resolved);
-                    let guest_reader = built_reader.clone().map(|reader| {
-                        Box::new(crate::plugins::host_dir::SessionModuleReader::new(reader))
-                            as Box<dyn GuestModuleReader>
-                    });
-                    let module_reader = built_reader
-                        .map(|reader| Box::new(reader) as Box<dyn ModuleFsReader + Send>);
-                    let execution = self
-                        .javascript_engine
-                        .start_execution_with_module_reader(
-                            StartJavascriptExecutionRequest {
-                                guest_runtime: guest_runtime_identity(
-                                    vm,
-                                    Some(u64::from(kernel_pid)),
-                                    Some(u64::from(parent_kernel_pid)),
-                                ),
-                                vm_id: vm_id.to_owned(),
-                                context_id: context.context_id,
-                                argv: std::iter::once(launch_entrypoint)
-                                    .chain(resolved.execution_args.clone())
-                                    .collect(),
-                                env: execution_env,
-                                cwd: resolved.host_cwd.clone(),
-                                limits: javascript_execution_limits(vm),
-                                inline_code,
-                                wasm_module_bytes: None,
-                            },
-                            module_reader,
-                            guest_reader,
-                        )
-                        .map_err(javascript_error)?;
-                    ActiveExecution::Javascript(execution)
-                }
-                GuestRuntimeKind::WebAssembly => {
-                    execution_env.insert(String::from(WASM_STDIO_SYNC_RPC_ENV), String::from("1"));
-                    let wasm_limits = wasm_execution_limits(vm);
-                    let wasm_guest_runtime = guest_runtime_identity(
-                        vm,
-                        Some(u64::from(kernel_pid)),
-                        Some(u64::from(parent_kernel_pid)),
-                    );
-                    let context = self.wasm_engine.create_context(CreateWasmContextRequest {
-                        vm_id: vm_id.to_owned(),
-                        module_path: Some(resolved.entrypoint.clone()),
-                    });
-                    let execution = self
-                        .wasm_engine
-                        .start_execution(StartWasmExecutionRequest {
-                            vm_id: vm_id.to_owned(),
-                            context_id: context.context_id,
-                            argv: resolved.process_args.clone(),
-                            env: execution_env,
-                            cwd: resolved.host_cwd.clone(),
-                            permission_tier: execution_wasm_permission_tier(
-                                resolved
-                                    .wasm_permission_tier
-                                    .unwrap_or(WasmPermissionTier::Full),
-                            ),
-                            limits: wasm_limits,
-                            guest_runtime: wasm_guest_runtime,
-                        })
-                        .map_err(wasm_error)?;
-                    ActiveExecution::Wasm(Box::new(execution))
-                }
-                GuestRuntimeKind::Python => {
-                    // Nested `python` child_process: set up the Pyodide context the
-                    // same way the top-level execute path does, so a guest shell or
-                    // node parent can spawn `python` exactly like `node`.
-                    let python_file_path = if execution_env.contains_key("AGENTOS_PYTHON_ARGV") {
-                        execution_env.get("AGENTOS_PYTHON_FILE").map(PathBuf::from)
-                    } else {
-                        python_file_entrypoint(&resolved.entrypoint)
-                    };
-                    let pyodide_dist_path = self
-                        .python_engine
-                        .bundled_pyodide_dist_path_for_vm(vm_id)
-                        .map_err(python_error)?;
-                    let pyodide_cache_path = pyodide_dist_path
-                        .parent()
-                        .and_then(Path::parent)
-                        .unwrap_or(pyodide_dist_path.as_path())
-                        .join("pyodide-package-cache");
-                    add_runtime_guest_path_mapping(
-                        &mut execution_env,
-                        PYTHON_PYODIDE_GUEST_ROOT,
-                        &pyodide_dist_path,
-                    );
-                    add_runtime_guest_path_mapping(
-                        &mut execution_env,
-                        PYTHON_PYODIDE_CACHE_GUEST_ROOT,
-                        &pyodide_cache_path,
-                    );
-                    add_runtime_host_access_path(
-                        &mut execution_env,
-                        "AGENTOS_EXTRA_FS_READ_PATHS",
-                        &pyodide_dist_path,
-                        true,
-                    );
-                    add_runtime_host_access_path(
-                        &mut execution_env,
-                        "AGENTOS_EXTRA_FS_READ_PATHS",
-                        &pyodide_cache_path,
-                        true,
-                    );
-                    add_runtime_host_access_path(
-                        &mut execution_env,
-                        "AGENTOS_EXTRA_FS_WRITE_PATHS",
-                        &pyodide_cache_path,
-                        false,
-                    );
-                    let context = self
-                        .python_engine
-                        .create_context(CreatePythonContextRequest {
-                            vm_id: vm_id.to_owned(),
-                            pyodide_dist_path,
-                        });
-                    let execution = self
-                        .python_engine
-                        .start_execution(StartPythonExecutionRequest {
-                            vm_id: vm_id.to_owned(),
-                            context_id: context.context_id,
-                            code: resolved.entrypoint.clone(),
-                            file_path: python_file_path,
-                            env: execution_env,
-                            cwd: resolved.host_cwd.clone(),
-                            limits: python_execution_limits(vm),
-                            guest_runtime: guest_runtime_identity(
-                                vm,
-                                Some(u64::from(kernel_pid)),
-                                Some(u64::from(parent_kernel_pid)),
-                            ),
-                        })
-                        .map_err(python_error)?;
-                    ActiveExecution::Python(execution)
-                }
-            };
-            let kernel_stdin_writer_fd = match javascript_child_process_stdin_mode(&request) {
-                "pipe" => Some(install_kernel_stdin_pipe(&mut vm.kernel, kernel_pid)?),
-                "ignore" => {
-                    vm.kernel
-                        .fd_close(EXECUTION_DRIVER_NAME, kernel_pid, 0)
-                        .map_err(kernel_error)?;
-                    None
-                }
-                "inherit" => None,
-                _ => Some(install_kernel_stdin_pipe(&mut vm.kernel, kernel_pid)?),
-            };
-            (kernel_pid, kernel_handle, execution, kernel_stdin_writer_fd)
-        };
-        record_execute_phase(
-            "child_process_spawn_and_start_execution",
-            phase_start.elapsed(),
-        );
-
-        let phase_start = Instant::now();
-        // Shared-terminal detection: when the child's kernel fd 1 is a PTY (the
-        // slave inherited from a TTY shell), record who owns the host-facing
-        // master so the child's stdio writes surface through master drains
-        // instead of child stdout events (see `tty_master_owner`).
-        let child_fd1_is_tty = vm
-            .kernel
-            .isatty(EXECUTION_DRIVER_NAME, kernel_pid, 1)
-            .unwrap_or(false);
-        let process = vm
-            .active_processes
-            .get_mut(process_id)
-            .ok_or_else(|| missing_process_error(vm_id, process_id))?;
-        let inherited_tty_master_owner = if child_fd1_is_tty {
-            process
-                .tty_master_fd
-                .map(|master_fd| (process.kernel_pid, master_fd))
-                .or(process.tty_master_owner)
-        } else {
-            None
-        };
-        process.child_processes.insert(
-            child_process_id.clone(),
-            ActiveProcess::new(kernel_pid, kernel_handle, resolved.runtime, execution)
-                .with_detached(request.options.detached)
-                .with_guest_cwd(resolved.guest_cwd.clone())
-                .with_env(resolved.env.clone())
-                .with_host_cwd(resolved.host_cwd.clone()),
-        );
-        {
-            let child = process
-                .child_processes
-                .get_mut(&child_process_id)
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(format!(
-                        "child process {child_process_id} disappeared during spawn"
-                    ))
-                })?;
-            child.tty_master_owner = inherited_tty_master_owner;
-            if let Some(kernel_stdin_writer_fd) = kernel_stdin_writer_fd {
-                child.kernel_stdin_writer_fd = Some(kernel_stdin_writer_fd);
-            }
-        }
-        record_execute_phase("child_process_register", phase_start.elapsed());
-        record_execute_phase("child_process_spawn_total", total_start.elapsed());
-        Ok(json!({
-            "childId": child_process_id,
-            "pid": kernel_pid,
-            "command": resolved.command,
-            "args": resolved.process_args,
-        }))
-    }
-
-    pub(crate) fn spawn_javascript_child_process_sync(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        request: JavascriptChildProcessSpawnRequest,
-        max_buffer: Option<usize>,
-    ) -> Result<Value, SidecarError> {
-        let sync_input = javascript_child_process_sync_input_bytes(request.options.input.as_ref())?;
-        let timeout_deadline = request
-            .options
-            .timeout
-            .map(|timeout_ms| Instant::now() + Duration::from_millis(timeout_ms));
-        let timeout_signal = request
-            .options
-            .kill_signal
-            .clone()
-            .unwrap_or_else(|| String::from("SIGTERM"));
-        let spawned = self.spawn_javascript_child_process(vm_id, process_id, request)?;
-        let child_process_id = spawned
-            .get("childId")
-            .and_then(Value::as_str)
-            .ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "child_process.spawn_sync response is missing childId",
-                ))
-            })?
-            .to_owned();
-
-        if let Some(input) = sync_input.as_deref() {
-            self.write_javascript_child_process_stdin(vm_id, process_id, &child_process_id, input)?;
-        }
-        self.close_javascript_child_process_stdin(vm_id, process_id, &child_process_id)?;
-
-        let max_buffer = max_buffer.unwrap_or(1024 * 1024);
-        let mut stdout = Vec::new();
-        let mut stderr = Vec::new();
-        let mut max_buffer_exceeded = false;
-        let mut kill_sent = false;
-        let mut timed_out = false;
-
-        let exit_code = loop {
-            let wait_ms = if let Some(deadline) = timeout_deadline {
-                let now = Instant::now();
-                if now >= deadline {
-                    if !kill_sent {
-                        timed_out = true;
-                        self.kill_javascript_child_process(
-                            vm_id,
-                            process_id,
-                            &child_process_id,
-                            &timeout_signal,
-                        )?;
-                        kill_sent = true;
-                    }
-                    0
-                } else {
-                    u64::try_from(deadline.saturating_duration_since(now).as_millis().min(50))
-                        .unwrap_or(50)
-                }
-            } else {
-                50
-            };
-            let event =
-                self.poll_javascript_child_process(vm_id, process_id, &child_process_id, wait_ms)?;
-            if event.is_null() {
-                continue;
-            }
-
-            match event.get("type").and_then(Value::as_str) {
-                Some("stdout") => {
-                    let chunk = javascript_sync_rpc_bytes_arg(
-                        &[event.get("data").cloned().unwrap_or(Value::Null)],
-                        0,
-                        "child_process.spawn_sync stdout",
-                    )?;
-                    stdout.extend_from_slice(&chunk);
-                    if stdout.len() > max_buffer && !kill_sent {
-                        max_buffer_exceeded = true;
-                        self.kill_javascript_child_process(
-                            vm_id,
-                            process_id,
-                            &child_process_id,
-                            "SIGTERM",
-                        )?;
-                        kill_sent = true;
-                    }
-                }
-                Some("stderr") => {
-                    let chunk = javascript_sync_rpc_bytes_arg(
-                        &[event.get("data").cloned().unwrap_or(Value::Null)],
-                        0,
-                        "child_process.spawn_sync stderr",
-                    )?;
-                    stderr.extend_from_slice(&chunk);
-                    if stderr.len() > max_buffer && !kill_sent {
-                        max_buffer_exceeded = true;
-                        self.kill_javascript_child_process(
-                            vm_id,
-                            process_id,
-                            &child_process_id,
-                            "SIGTERM",
-                        )?;
-                        kill_sent = true;
-                    }
-                }
-                Some("exit") => {
-                    break event
-                        .get("exitCode")
-                        .and_then(Value::as_i64)
-                        .map(|value| value as i32)
-                        .unwrap_or(1);
-                }
-                _ => {}
-            }
-        };
-
-        Ok(json!({
-            "stdout": String::from_utf8_lossy(&stdout),
-            "stderr": String::from_utf8_lossy(&stderr),
-            "code": exit_code,
-            "signal": if timed_out { Value::String(timeout_signal) } else { Value::Null },
-            "timedOut": timed_out,
-            "maxBufferExceeded": max_buffer_exceeded,
-        }))
-    }
-
-    fn spawn_descendant_javascript_child_process(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        current_process_path: &[&str],
-        request: JavascriptChildProcessSpawnRequest,
-    ) -> Result<Value, SidecarError> {
-        let total_start = Instant::now();
-        let current_process_label =
-            Self::child_process_path_label(process_id, current_process_path);
-        let phase_start = Instant::now();
-        let (resolved, parent_kernel_pid) = {
-            let vm = self.vms.get(vm_id).ok_or_else(|| missing_vm_error(vm_id))?;
-            let root = vm
-                .active_processes
-                .get(process_id)
-                .ok_or_else(|| missing_process_error(vm_id, process_id))?;
-            let parent =
-                Self::active_process_by_path(root, current_process_path).ok_or_else(|| {
-                    SidecarError::InvalidState(format!(
-                        "unknown child process path {current_process_label} during nested spawn"
-                    ))
-                })?;
-            (
-                self.resolve_javascript_child_process_execution(
-                    vm,
-                    &parent.env,
-                    &parent.guest_cwd,
-                    &parent.host_cwd,
-                    &request,
-                )?,
-                parent.kernel_pid,
-            )
-        };
-        record_execute_phase("child_process_resolve_execution", phase_start.elapsed());
-
-        let sidecar_requests = self.sidecar_requests.clone();
-        let vm = self
-            .vms
-            .get_mut(vm_id)
-            .ok_or_else(|| missing_vm_error(vm_id))?;
-        let phase_start = Instant::now();
-        let child_process_id = {
-            let root = vm
-                .active_processes
-                .get_mut(process_id)
-                .ok_or_else(|| missing_process_error(vm_id, process_id))?;
-            let parent =
-                Self::active_process_by_path_mut(root, current_process_path).ok_or_else(|| {
-                    SidecarError::InvalidState(format!(
-                        "unknown child process path {current_process_label} during nested spawn"
-                    ))
-                })?;
-            parent.allocate_child_process_id()
-        };
-        let mut child_path = current_process_path.to_vec();
-        child_path.push(child_process_id.as_str());
-        let (kernel_pid, kernel_handle, execution, kernel_stdin_writer_fd) = if resolved
-            .tool_command
-        {
-            let tool_resolution = resolve_tool_command(
-                vm,
-                &resolved.command,
-                &resolved.execution_args,
-                Some(&resolved.guest_cwd),
-            )?
-            .ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "tool command no longer resolves: {}",
-                    resolved.command
-                ))
-            })?;
-            let kernel_handle = vm
-                .kernel
-                .create_virtual_process(
-                    EXECUTION_DRIVER_NAME,
-                    TOOL_DRIVER_NAME,
-                    &resolved.command,
-                    resolved.process_args.clone(),
-                    VirtualProcessOptions {
-                        parent_pid: Some(parent_kernel_pid),
-                        env: resolved.env.clone(),
-                        cwd: Some(resolved.guest_cwd.clone()),
-                    },
-                )
-                .map_err(kernel_error)?;
-            let kernel_pid = kernel_handle.pid();
-            let tool_execution = ToolExecution::default();
-            let cancelled = tool_execution.cancelled.clone();
-            let pending_events = tool_execution.pending_events.clone();
-            let events_overflowed = tool_execution.events_overflowed.clone();
-            spawn_tool_process_events(ToolProcessEventRequest {
-                sidecar_requests: sidecar_requests.clone(),
-                connection_id: vm.connection_id.clone(),
-                session_id: vm.session_id.clone(),
-                vm_id: vm_id.to_owned(),
-                tool_resolution,
-                cancelled,
-                pending_events,
-                events_overflowed,
-            });
-            (
-                kernel_pid,
-                kernel_handle,
-                ActiveExecution::Tool(tool_execution),
-                None,
-            )
-        } else {
-            let kernel_command = match resolved.runtime {
-                GuestRuntimeKind::JavaScript => JAVASCRIPT_COMMAND,
-                GuestRuntimeKind::WebAssembly => WASM_COMMAND,
-                GuestRuntimeKind::Python => PYTHON_COMMAND,
-            };
-            let kernel_handle = vm
-                .kernel
-                .spawn_process(
-                    kernel_command,
-                    resolved.process_args.clone(),
-                    SpawnOptions {
-                        requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                        parent_pid: Some(parent_kernel_pid),
-                        env: resolved.env.clone(),
-                        cwd: Some(resolved.guest_cwd.clone()),
-                    },
-                )
-                .map_err(kernel_error)?;
-            let kernel_pid = kernel_handle.pid();
-            if request.options.detached {
-                vm.kernel
-                    .setsid(EXECUTION_DRIVER_NAME, kernel_pid)
-                    .map_err(kernel_error)?;
-            }
-            let mut execution_env = resolved.env.clone();
-            execution_env.insert(
-                String::from(EXECUTION_SANDBOX_ROOT_ENV),
-                normalize_host_path(&vm.cwd).to_string_lossy().into_owned(),
-            );
-            let execution = match resolved.runtime {
-                GuestRuntimeKind::JavaScript => {
-                    execution_env.extend(sanitize_javascript_child_process_internal_bootstrap_env(
-                        &request.options.internal_bootstrap_env,
-                    ));
-                    execution_env.insert(
-                        String::from("SECURE_EXEC_KEEP_STDIN_OPEN"),
-                        String::from("1"),
-                    );
-                    let launch_entrypoint = resolve_agentos_package_javascript_launch_entrypoint(
-                        vm,
-                        &mut execution_env,
-                    )
-                    .unwrap_or_else(|| resolved.entrypoint.clone());
-                    let context =
-                        self.javascript_engine
-                            .create_context(CreateJavascriptContextRequest {
-                                vm_id: vm_id.to_owned(),
-                                bootstrap_module: None,
-                                compile_cache_root: Some(
-                                    self.cache_root.join("node-compile-cache"),
-                                ),
-                            });
-                    let inline_code = load_javascript_entrypoint_source(
-                        vm,
-                        &resolved.host_cwd,
-                        &launch_entrypoint,
-                        &execution_env,
-                    );
-                    prepare_javascript_shadow(vm, &resolved, &execution_env)?;
-
-                    let built_reader = build_module_reader(vm, &resolved);
-                    let guest_reader = built_reader.clone().map(|reader| {
-                        Box::new(crate::plugins::host_dir::SessionModuleReader::new(reader))
-                            as Box<dyn GuestModuleReader>
-                    });
-                    let module_reader = built_reader
-                        .map(|reader| Box::new(reader) as Box<dyn ModuleFsReader + Send>);
-                    let execution = self
-                        .javascript_engine
-                        .start_execution_with_module_reader(
-                            StartJavascriptExecutionRequest {
-                                guest_runtime: guest_runtime_identity(
-                                    vm,
-                                    Some(u64::from(kernel_pid)),
-                                    Some(u64::from(parent_kernel_pid)),
-                                ),
-                                vm_id: vm_id.to_owned(),
-                                context_id: context.context_id,
-                                argv: std::iter::once(launch_entrypoint)
-                                    .chain(resolved.execution_args.clone())
-                                    .collect(),
-                                env: execution_env,
-                                cwd: resolved.host_cwd.clone(),
-                                limits: javascript_execution_limits(vm),
-                                inline_code,
-                                wasm_module_bytes: None,
-                            },
-                            module_reader,
-                            guest_reader,
-                        )
-                        .map_err(javascript_error)?;
-                    ActiveExecution::Javascript(execution)
-                }
-                GuestRuntimeKind::WebAssembly => {
-                    execution_env.insert(String::from(WASM_STDIO_SYNC_RPC_ENV), String::from("1"));
-                    let wasm_limits = wasm_execution_limits(vm);
-                    let wasm_guest_runtime = guest_runtime_identity(
-                        vm,
-                        Some(u64::from(kernel_pid)),
-                        Some(u64::from(parent_kernel_pid)),
-                    );
-                    let context = self.wasm_engine.create_context(CreateWasmContextRequest {
-                        vm_id: vm_id.to_owned(),
-                        module_path: Some(resolved.entrypoint.clone()),
-                    });
-                    let execution = self
-                        .wasm_engine
-                        .start_execution(StartWasmExecutionRequest {
-                            vm_id: vm_id.to_owned(),
-                            context_id: context.context_id,
-                            argv: resolved.process_args.clone(),
-                            env: execution_env,
-                            cwd: resolved.host_cwd.clone(),
-                            permission_tier: execution_wasm_permission_tier(
-                                resolved
-                                    .wasm_permission_tier
-                                    .unwrap_or(WasmPermissionTier::Full),
-                            ),
-                            limits: wasm_limits,
-                            guest_runtime: wasm_guest_runtime,
-                        })
-                        .map_err(wasm_error)?;
-                    ActiveExecution::Wasm(Box::new(execution))
-                }
-                GuestRuntimeKind::Python => {
-                    // Nested `python` child_process: set up the Pyodide context the
-                    // same way the top-level execute path does, so a guest shell or
-                    // node parent can spawn `python` exactly like `node`.
-                    let python_file_path = if execution_env.contains_key("AGENTOS_PYTHON_ARGV") {
-                        execution_env.get("AGENTOS_PYTHON_FILE").map(PathBuf::from)
-                    } else {
-                        python_file_entrypoint(&resolved.entrypoint)
-                    };
-                    let pyodide_dist_path = self
-                        .python_engine
-                        .bundled_pyodide_dist_path_for_vm(vm_id)
-                        .map_err(python_error)?;
-                    let pyodide_cache_path = pyodide_dist_path
-                        .parent()
-                        .and_then(Path::parent)
-                        .unwrap_or(pyodide_dist_path.as_path())
-                        .join("pyodide-package-cache");
-                    add_runtime_guest_path_mapping(
-                        &mut execution_env,
-                        PYTHON_PYODIDE_GUEST_ROOT,
-                        &pyodide_dist_path,
-                    );
-                    add_runtime_guest_path_mapping(
-                        &mut execution_env,
-                        PYTHON_PYODIDE_CACHE_GUEST_ROOT,
-                        &pyodide_cache_path,
-                    );
-                    add_runtime_host_access_path(
-                        &mut execution_env,
-                        "AGENTOS_EXTRA_FS_READ_PATHS",
-                        &pyodide_dist_path,
-                        true,
-                    );
-                    add_runtime_host_access_path(
-                        &mut execution_env,
-                        "AGENTOS_EXTRA_FS_READ_PATHS",
-                        &pyodide_cache_path,
-                        true,
-                    );
-                    add_runtime_host_access_path(
-                        &mut execution_env,
-                        "AGENTOS_EXTRA_FS_WRITE_PATHS",
-                        &pyodide_cache_path,
-                        false,
-                    );
-                    let context = self
-                        .python_engine
-                        .create_context(CreatePythonContextRequest {
-                            vm_id: vm_id.to_owned(),
-                            pyodide_dist_path,
-                        });
-                    let execution = self
-                        .python_engine
-                        .start_execution(StartPythonExecutionRequest {
-                            vm_id: vm_id.to_owned(),
-                            context_id: context.context_id,
-                            code: resolved.entrypoint.clone(),
-                            file_path: python_file_path,
-                            env: execution_env,
-                            cwd: resolved.host_cwd.clone(),
-                            limits: python_execution_limits(vm),
-                            guest_runtime: guest_runtime_identity(
-                                vm,
-                                Some(u64::from(kernel_pid)),
-                                Some(u64::from(parent_kernel_pid)),
-                            ),
-                        })
-                        .map_err(python_error)?;
-                    ActiveExecution::Python(execution)
-                }
-            };
-            let kernel_stdin_writer_fd = match javascript_child_process_stdin_mode(&request) {
-                "pipe" => Some(install_kernel_stdin_pipe(&mut vm.kernel, kernel_pid)?),
-                "ignore" => {
-                    vm.kernel
-                        .fd_close(EXECUTION_DRIVER_NAME, kernel_pid, 0)
-                        .map_err(kernel_error)?;
-                    None
-                }
-                "inherit" => None,
-                _ => Some(install_kernel_stdin_pipe(&mut vm.kernel, kernel_pid)?),
-            };
-            (kernel_pid, kernel_handle, execution, kernel_stdin_writer_fd)
-        };
-        record_execute_phase(
-            "child_process_spawn_and_start_execution",
-            phase_start.elapsed(),
-        );
-
-        let phase_start = Instant::now();
-        let child_fd1_is_tty = vm
-            .kernel
-            .isatty(EXECUTION_DRIVER_NAME, kernel_pid, 1)
-            .unwrap_or(false);
-        let root = vm
-            .active_processes
-            .get_mut(process_id)
-            .ok_or_else(|| missing_process_error(vm_id, process_id))?;
-        let parent =
-            Self::active_process_by_path_mut(root, current_process_path).ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "unknown child process path {current_process_label} during nested spawn"
-                ))
-            })?;
-        let inherited_tty_master_owner = if child_fd1_is_tty {
-            parent
-                .tty_master_fd
-                .map(|master_fd| (parent.kernel_pid, master_fd))
-                .or(parent.tty_master_owner)
-        } else {
-            None
-        };
-        parent.child_processes.insert(
-            child_process_id.clone(),
-            ActiveProcess::new(kernel_pid, kernel_handle, resolved.runtime, execution)
-                .with_detached(request.options.detached)
-                .with_guest_cwd(resolved.guest_cwd.clone())
-                .with_env(resolved.env.clone())
-                .with_host_cwd(resolved.host_cwd.clone()),
-        );
-        {
-            let child = parent
-                .child_processes
-                .get_mut(&child_process_id)
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(format!(
-                        "child process {child_process_id} disappeared during nested spawn"
-                    ))
-                })?;
-            child.tty_master_owner = inherited_tty_master_owner;
-            if let Some(kernel_stdin_writer_fd) = kernel_stdin_writer_fd {
-                child.kernel_stdin_writer_fd = Some(kernel_stdin_writer_fd);
-            }
-        }
-        record_execute_phase("child_process_register", phase_start.elapsed());
-        record_execute_phase("child_process_spawn_total", total_start.elapsed());
-        Ok(json!({
-            "childId": child_process_id,
-            "pid": kernel_pid,
-            "command": resolved.command,
-            "args": resolved.process_args,
-        }))
-    }
-
-    fn spawn_descendant_javascript_child_process_sync(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        current_process_path: &[&str],
-        request: JavascriptChildProcessSpawnRequest,
-        max_buffer: Option<usize>,
-    ) -> Result<Value, SidecarError> {
-        let sync_input = javascript_child_process_sync_input_bytes(request.options.input.as_ref())?;
-        let timeout_deadline = request
-            .options
-            .timeout
-            .map(|timeout_ms| Instant::now() + Duration::from_millis(timeout_ms));
-        let timeout_signal = request
-            .options
-            .kill_signal
-            .clone()
-            .unwrap_or_else(|| String::from("SIGTERM"));
-        let spawned = self.spawn_descendant_javascript_child_process(
-            vm_id,
-            process_id,
-            current_process_path,
-            request,
-        )?;
-        let child_process_id = spawned
-            .get("childId")
-            .and_then(Value::as_str)
-            .ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "child_process.spawn_sync response is missing childId",
-                ))
-            })?
-            .to_owned();
-
-        if let Some(input) = sync_input.as_deref() {
-            self.write_descendant_javascript_child_process_stdin(
-                vm_id,
-                process_id,
-                current_process_path,
-                &child_process_id,
-                input,
-            )?;
-        }
-        self.close_descendant_javascript_child_process_stdin(
-            vm_id,
-            process_id,
-            current_process_path,
-            &child_process_id,
-        )?;
-
-        let max_buffer = max_buffer.unwrap_or(1024 * 1024);
-        let mut stdout = Vec::new();
-        let mut stderr = Vec::new();
-        let mut max_buffer_exceeded = false;
-        let mut kill_sent = false;
-        let mut timed_out = false;
-
-        let exit_code = loop {
-            let wait_ms = if let Some(deadline) = timeout_deadline {
-                let now = Instant::now();
-                if now >= deadline {
-                    if !kill_sent {
-                        timed_out = true;
-                        self.kill_descendant_javascript_child_process(
-                            vm_id,
-                            process_id,
-                            current_process_path,
-                            &child_process_id,
-                            &timeout_signal,
-                        )?;
-                        kill_sent = true;
-                    }
-                    0
-                } else {
-                    u64::try_from(deadline.saturating_duration_since(now).as_millis().min(50))
-                        .unwrap_or(50)
-                }
-            } else {
-                50
-            };
-            let event = self.poll_descendant_javascript_child_process(
-                vm_id,
-                process_id,
-                current_process_path,
-                &child_process_id,
-                wait_ms,
-            )?;
-            if event.is_null() {
-                continue;
-            }
-
-            match event.get("type").and_then(Value::as_str) {
-                Some("stdout") => {
-                    let chunk = javascript_sync_rpc_bytes_arg(
-                        &[event.get("data").cloned().unwrap_or(Value::Null)],
-                        0,
-                        "child_process.spawn_sync stdout",
-                    )?;
-                    stdout.extend_from_slice(&chunk);
-                    if stdout.len() > max_buffer && !kill_sent {
-                        max_buffer_exceeded = true;
-                        self.kill_descendant_javascript_child_process(
-                            vm_id,
-                            process_id,
-                            current_process_path,
-                            &child_process_id,
-                            "SIGTERM",
-                        )?;
-                        kill_sent = true;
-                    }
-                }
-                Some("stderr") => {
-                    let chunk = javascript_sync_rpc_bytes_arg(
-                        &[event.get("data").cloned().unwrap_or(Value::Null)],
-                        0,
-                        "child_process.spawn_sync stderr",
-                    )?;
-                    stderr.extend_from_slice(&chunk);
-                    if stderr.len() > max_buffer && !kill_sent {
-                        max_buffer_exceeded = true;
-                        self.kill_descendant_javascript_child_process(
-                            vm_id,
-                            process_id,
-                            current_process_path,
-                            &child_process_id,
-                            "SIGTERM",
-                        )?;
-                        kill_sent = true;
-                    }
-                }
-                Some("exit") => {
-                    break event
-                        .get("exitCode")
-                        .and_then(Value::as_i64)
-                        .map(|value| value as i32)
-                        .unwrap_or(1);
-                }
-                _ => {}
-            }
-        };
-
-        Ok(json!({
-            "stdout": String::from_utf8_lossy(&stdout),
-            "stderr": String::from_utf8_lossy(&stderr),
-            "code": exit_code,
-            "signal": if timed_out { Value::String(timeout_signal) } else { Value::Null },
-            "timedOut": timed_out,
-            "maxBufferExceeded": max_buffer_exceeded,
-        }))
-    }
-
-    fn handle_descendant_javascript_child_process_rpc(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        current_process_path: &[&str],
-        request: &JavascriptSyncRpcRequest,
-    ) -> Result<Value, SidecarError> {
-        match request.method.as_str() {
-            "child_process.spawn" => {
-                let Some(vm) = self.vms.get(vm_id) else {
-                    return Ok(Value::Null);
-                };
-                let (payload, _) = parse_javascript_child_process_spawn_request(vm, &request.args)?;
-                self.spawn_descendant_javascript_child_process(
-                    vm_id,
-                    process_id,
-                    current_process_path,
-                    payload,
-                )
-            }
-            "child_process.spawn_sync" => {
-                let Some(vm) = self.vms.get(vm_id) else {
-                    return Ok(Value::Null);
-                };
-                let (payload, max_buffer) =
-                    parse_javascript_child_process_spawn_request(vm, &request.args)?;
-                self.spawn_descendant_javascript_child_process_sync(
-                    vm_id,
-                    process_id,
-                    current_process_path,
-                    payload,
-                    max_buffer,
-                )
-            }
-            "child_process.poll" => {
-                let child_process_id =
-                    javascript_sync_rpc_arg_str(&request.args, 0, "child_process.poll child id")?;
-                let wait_ms = javascript_sync_rpc_arg_u64_optional(
-                    &request.args,
-                    1,
-                    "child_process.poll wait ms",
-                )?
-                .unwrap_or_default();
-                self.poll_descendant_javascript_child_process(
-                    vm_id,
-                    process_id,
-                    current_process_path,
-                    child_process_id,
-                    wait_ms,
-                )
-            }
-            "child_process.write_stdin" => {
-                let child_process_id = javascript_sync_rpc_arg_str(
-                    &request.args,
-                    0,
-                    "child_process.write_stdin child id",
-                )?;
-                let chunk = javascript_sync_rpc_bytes_arg(
-                    &request.args,
-                    1,
-                    "child_process.write_stdin chunk",
-                )?;
-                self.write_descendant_javascript_child_process_stdin(
-                    vm_id,
-                    process_id,
-                    current_process_path,
-                    child_process_id,
-                    &chunk,
-                )?;
-                Ok(Value::Null)
-            }
-            "child_process.close_stdin" => {
-                let child_process_id = javascript_sync_rpc_arg_str(
-                    &request.args,
-                    0,
-                    "child_process.close_stdin child id",
-                )?;
-                self.close_descendant_javascript_child_process_stdin(
-                    vm_id,
-                    process_id,
-                    current_process_path,
-                    child_process_id,
-                )?;
-                Ok(Value::Null)
-            }
-            "child_process.kill" => {
-                let child_process_id =
-                    javascript_sync_rpc_arg_str(&request.args, 0, "child_process.kill child id")?;
-                let signal =
-                    javascript_sync_rpc_arg_str(&request.args, 1, "child_process.kill signal")?;
-                self.kill_descendant_javascript_child_process(
-                    vm_id,
-                    process_id,
-                    current_process_path,
-                    child_process_id,
-                    signal,
-                )?;
-                Ok(Value::Null)
-            }
-            _ => Err(SidecarError::InvalidState(format!(
-                "unsupported nested child process RPC method {}",
-                request.method
-            ))),
-        }
-    }
-
-    /// Deferred servicing for a CHILD's `__kernel_stdin_read` / `__kernel_poll`
-    /// inside the child-event pump: probe readiness with a zero timeout, reply
-    /// when ready / expired / non-blocking, otherwise park the RPC on the child
-    /// (reply-by-token). The pump loop re-checks the parked RPC every
-    /// iteration, so the dispatch loop never blocks in a kernel wait on the
-    /// child's behalf. Returns false when the RPC must be serviced inline
-    /// (non-TTY JavaScript local stdin bridge).
-    fn service_child_kernel_wait_rpc(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        current_process_path: &[&str],
-        child_process_id: &str,
-        request: &JavascriptSyncRpcRequest,
-    ) -> Result<bool, SidecarError> {
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Ok(true);
-        };
-        let kernel = &mut vm.kernel;
-        let Some(root) = vm.active_processes.get_mut(process_id) else {
-            return Ok(true);
-        };
-        let Some(parent) = Self::active_process_by_path_mut(root, current_process_path) else {
-            return Ok(true);
-        };
-        let Some(child) = parent.child_processes.get_mut(child_process_id) else {
-            return Ok(true);
-        };
-        if request.method == "__kernel_stdin_read"
-            && matches!(child.execution, ActiveExecution::Javascript(_))
-            && child.tty_master_fd.is_none()
-        {
-            return Ok(false);
-        }
-        let now = Instant::now();
-        let requested_timeout_ms = match request.method.as_str() {
-            "__kernel_stdin_read" => parse_kernel_stdin_read_args(request)?.1,
-            _ => u64::try_from(parse_kernel_poll_args(request)?.1).unwrap_or(0),
-        };
-        let deadline = match &child.deferred_kernel_wait_rpc {
-            Some((parked, parked_deadline)) if parked.id == request.id => *parked_deadline,
-            _ => now + Duration::from_millis(requested_timeout_ms),
-        };
-        let kernel_pid = child.kernel_pid;
-        let probe = match request.method.as_str() {
-            "__kernel_stdin_read" => {
-                let (max_bytes, _) = parse_kernel_stdin_read_args(request)?;
-                kernel_stdin_read_response(kernel, kernel_pid, max_bytes, Duration::ZERO)
-            }
-            _ => {
-                let (fd_requests, _) = parse_kernel_poll_args(request)?;
-                kernel_poll_response(kernel, kernel_pid, &fd_requests, 0)
-            }
-        };
-        let probe = match probe {
-            Ok(value) => value,
-            Err(error) => {
-                child.deferred_kernel_wait_rpc = None;
-                child
-                    .execution
-                    .respond_javascript_sync_rpc_error(
-                        request.id,
-                        javascript_sync_rpc_error_code(&error),
-                        error.to_string(),
-                    )
-                    .or_else(ignore_stale_javascript_sync_rpc_response)?;
-                return Ok(true);
-            }
-        };
-        let ready = match request.method.as_str() {
-            "__kernel_stdin_read" => !probe.is_null(),
-            _ => probe.get("readyCount").and_then(Value::as_u64).unwrap_or(0) > 0,
-        };
-        if ready || requested_timeout_ms == 0 || now >= deadline {
-            child.deferred_kernel_wait_rpc = None;
-            child
-                .execution
-                .respond_javascript_sync_rpc_response(request.id, probe.into())
-                .or_else(ignore_stale_javascript_sync_rpc_response)?;
-            return Ok(true);
-        }
-        child.deferred_kernel_wait_rpc = Some((request.clone(), deadline));
-        Ok(true)
-    }
-
-    /// Service `__kernel_stdio_write` for a process writing to the SHARED
-    /// terminal (`tty_master_owner` set): write through the process's own PTY
-    /// slave (line discipline applies), then drain the master and surface the
-    /// drained bytes as the OWNER's ordered output stream — the single
-    /// host-facing path. No child stdout event is queued, so nothing gets
-    /// relayed (and re-rendered) by the parent shell.
-    pub(crate) fn service_shared_tty_stdio_write(
-        &mut self,
-        vm_id: &str,
-        writer_kernel_pid: u32,
-        owner: (u32, u32),
-        request: &JavascriptSyncRpcRequest,
-    ) -> Result<Value, SidecarError> {
-        let fd = javascript_sync_rpc_arg_u32(&request.args, 0, "__kernel_stdio_write fd")?;
-        let chunk = javascript_sync_rpc_bytes_arg(&request.args, 1, "__kernel_stdio_write chunk")?;
-        if fd != 1 && fd != 2 {
-            return Err(SidecarError::InvalidState(format!(
-                "__kernel_stdio_write only supports fd 1/2, got {fd}"
-            )));
-        }
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Ok(json!(chunk.len()));
-        };
-        let written = if fd == 1 {
-            vm.kernel
-                .write_process_stdout(EXECUTION_DRIVER_NAME, writer_kernel_pid, &chunk)
-                .map_err(kernel_error)?
-        } else {
-            vm.kernel
-                .write_process_stderr(EXECUTION_DRIVER_NAME, writer_kernel_pid, &chunk)
-                .map_err(kernel_error)?
-        };
-        let (owner_pid, master_fd) = owner;
-        let mut drained: Vec<u8> = Vec::new();
-        loop {
-            match vm.kernel.fd_read_with_timeout_result(
-                EXECUTION_DRIVER_NAME,
-                owner_pid,
-                master_fd,
-                MAX_PTY_BUFFER_BYTES,
-                Some(Duration::ZERO),
-            ) {
-                Ok(Some(bytes)) if !bytes.is_empty() => drained.extend(bytes),
-                Ok(_) => break,
-                Err(error) if error.code() == "EAGAIN" => break,
-                Err(error) => return Err(kernel_error(error)),
-            }
-        }
-        if !drained.is_empty() {
-            if let Some(owner_process) = vm
-                .active_processes
-                .values_mut()
-                .find(|process| process.kernel_pid == owner_pid)
-            {
-                owner_process
-                    .queue_pending_execution_event(ActiveExecutionEvent::Stdout(drained))?;
-            }
-        }
-        Ok(json!(written))
-    }
-
-    /// Re-check a child's parked kernel-wait RPC (see
-    /// `service_child_kernel_wait_rpc`); called once per pump-loop iteration.
-    fn recheck_child_deferred_kernel_wait_rpc(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        current_process_path: &[&str],
-        child_process_id: &str,
-    ) -> Result<(), SidecarError> {
-        let parked = {
-            let Some(vm) = self.vms.get_mut(vm_id) else {
-                return Ok(());
-            };
-            let Some(root) = vm.active_processes.get_mut(process_id) else {
-                return Ok(());
-            };
-            let Some(parent) = Self::active_process_by_path_mut(root, current_process_path) else {
-                return Ok(());
-            };
-            let Some(child) = parent.child_processes.get_mut(child_process_id) else {
-                return Ok(());
-            };
-            child
-                .deferred_kernel_wait_rpc
-                .as_ref()
-                .map(|(request, _)| request.clone())
-        };
-        if let Some(request) = parked {
-            let _ = self.service_child_kernel_wait_rpc(
-                vm_id,
-                process_id,
-                current_process_path,
-                child_process_id,
-                &request,
-            )?;
-        }
-        Ok(())
-    }
-
-    fn poll_descendant_javascript_child_process(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        current_process_path: &[&str],
-        child_process_id: &str,
-        wait_ms: u64,
-    ) -> Result<Value, SidecarError> {
-        let mut child_path = current_process_path.to_vec();
-        child_path.push(child_process_id);
-        let child_gone_error = || javascript_child_process_gone_error(process_id, &child_path);
-        let deadline = Instant::now() + Duration::from_millis(wait_ms);
-        let mut polled_once = false;
-
-        loop {
-            self.drain_queued_descendant_javascript_child_process_events(
-                vm_id,
-                process_id,
-                &child_path,
-            )?;
-            self.recheck_child_deferred_kernel_wait_rpc(
-                vm_id,
-                process_id,
-                current_process_path,
-                child_process_id,
-            )?;
-            enum ChildPollResult {
-                Event(Box<Option<ActiveExecutionEvent>>),
-                RecoverRuntimeExit,
-                Timeout,
-            }
-            let wait = if wait_ms == 0 {
-                Duration::ZERO
-            } else {
-                deadline.saturating_duration_since(Instant::now())
-            };
-            let poll_result = {
-                let Some(vm) = self.vms.get_mut(vm_id) else {
-                    return Ok(Value::Null);
-                };
-                let Some(parent) =
-                    Self::descendant_parent_process_mut(vm, process_id, current_process_path)
-                else {
-                    return Err(child_gone_error());
-                };
-                let Some(child) = parent.child_processes.get_mut(child_process_id) else {
-                    return Err(child_gone_error());
-                };
-                if let Some(event) = child.pending_execution_events.pop_front() {
-                    ChildPollResult::Event(Box::new(Some(event)))
-                } else if polled_once && wait.is_zero() {
-                    ChildPollResult::Timeout
-                } else {
-                    polled_once = true;
-                    match child.execution.poll_event_blocking(wait) {
-                        Ok(Some(event)) => ChildPollResult::Event(Box::new(Some(event))),
-                        Ok(None) => ChildPollResult::RecoverRuntimeExit,
-                        Err(SidecarError::Execution(message))
-                            if (child.runtime == GuestRuntimeKind::JavaScript
-                                && closed_javascript_event_channel(&message))
-                                || (child.runtime == GuestRuntimeKind::Python
-                                    && closed_python_event_channel(&message))
-                                || (child.runtime == GuestRuntimeKind::WebAssembly
-                                    && closed_wasm_event_channel(&message)) =>
-                        {
-                            ChildPollResult::RecoverRuntimeExit
-                        }
-                        Err(error) => return Err(error),
-                    }
-                }
-            };
-            let event = match poll_result {
-                ChildPollResult::Event(event) => *event,
-                ChildPollResult::Timeout => return Ok(Value::Null),
-                ChildPollResult::RecoverRuntimeExit => self
-                    .recover_descendant_runtime_child_process_event(
-                        vm_id,
-                        process_id,
-                        current_process_path,
-                        child_process_id,
-                        wait.as_millis().try_into().unwrap_or(u64::MAX),
-                    )?,
-            };
-
-            let Some(event) = event else {
-                return Ok(Value::Null);
-            };
-
-            match event {
-                ActiveExecutionEvent::Stdout(chunk) => {
-                    return Ok(json!({
-                        "type": "stdout",
-                        "data": javascript_sync_rpc_bytes_value(&chunk),
-                    }));
-                }
-                ActiveExecutionEvent::Stderr(chunk) => {
-                    return Ok(json!({
-                        "type": "stderr",
-                        "data": javascript_sync_rpc_bytes_value(&chunk),
-                    }));
-                }
-                ActiveExecutionEvent::Exited(exit_code) => {
-                    let cleanup_start = Instant::now();
-                    let had_trailing_events = {
-                        let Some(vm) = self.vms.get_mut(vm_id) else {
-                            return Ok(Value::Null);
-                        };
-                        let Some(parent) = Self::descendant_parent_process_mut(
-                            vm,
-                            process_id,
-                            current_process_path,
-                        ) else {
-                            return Ok(Value::Null);
-                        };
-                        let Some(child) = parent.child_processes.get_mut(child_process_id) else {
-                            return Ok(Value::Null);
-                        };
-                        let mut quiet_deadline = Instant::now() + PROCESS_EXIT_DRAIN_INITIAL_QUIET;
-                        loop {
-                            let wait = quiet_deadline.saturating_duration_since(Instant::now());
-                            let next = poll_child_execution_after_exit(child, wait)?;
-                            let Some(next) = next else {
-                                break;
-                            };
-                            if matches!(next, ActiveExecutionEvent::Exited(_)) {
-                                continue;
-                            }
-                            child.queue_pending_execution_event(next)?;
-                            quiet_deadline = Instant::now() + PROCESS_EXIT_DRAIN_TRAILING_QUIET;
-                        }
-                        if !child.pending_execution_events.is_empty() {
-                            child.queue_pending_execution_event(ActiveExecutionEvent::Exited(
-                                exit_code,
-                            ))?;
-                            true
-                        } else {
-                            false
-                        }
-                    };
-                    if had_trailing_events {
-                        continue;
-                    }
-
-                    let parent_signal_key =
-                        Self::child_process_signal_key(process_id, current_process_path);
-                    let Some(vm) = self.vms.get_mut(vm_id) else {
-                        return Ok(Value::Null);
-                    };
-                    let signal_name = {
-                        let Some(parent) = Self::descendant_parent_process_mut(
-                            vm,
-                            process_id,
-                            current_process_path,
-                        ) else {
-                            return Ok(Value::Null);
-                        };
-                        let Some(child) = parent.child_processes.get_mut(child_process_id) else {
-                            return Ok(Value::Null);
-                        };
-                        child.pending_self_signal_exit.take().and_then(|signal| {
-                            if exit_code == 128 + signal {
-                                canonical_signal_name(signal).map(str::to_owned)
-                            } else {
-                                None
-                            }
-                        })
-                    };
-                    let (parent_runtime_pid, parent_v8_signal_session, should_signal_parent) = {
-                        let Some(parent) =
-                            Self::descendant_parent_process(vm, process_id, current_process_path)
-                        else {
-                            return Ok(Value::Null);
-                        };
-                        (
-                            parent.execution.child_pid(),
-                            parent.execution.javascript_v8_session_handle().filter(|_| {
-                                matches!(
-                                    &parent.execution,
-                                    ActiveExecution::Javascript(execution)
-                                        if execution.uses_shared_v8_runtime()
-                                )
-                            }),
-                            vm.signal_states
-                                .get(parent_signal_key)
-                                .and_then(|handlers| handlers.get(&(libc::SIGCHLD as u32)))
-                                .is_some_and(|registration| {
-                                    registration.action != SignalDispositionAction::Default
-                                }),
-                        )
-                    };
-                    let Some(parent) =
-                        Self::descendant_parent_process_mut(vm, process_id, current_process_path)
-                    else {
-                        return Ok(Value::Null);
-                    };
-                    let Some(mut child) = parent.child_processes.remove(child_process_id) else {
-                        return Ok(Value::Null);
-                    };
-                    let child_process_label =
-                        Self::child_process_path_label(process_id, &child_path);
-                    let detached_children =
-                        Self::adopt_detached_child_processes(&child_process_label, &mut child);
-                    sync_process_host_writes_to_kernel(vm, &child)?;
-                    let kernel_readiness = Arc::clone(&vm.kernel_socket_readiness);
-                    terminate_child_process_tree(&mut vm.kernel, &mut child, &kernel_readiness);
-                    child.kernel_handle.finish(exit_code);
-                    let _ = vm.kernel.wait_and_reap(child.kernel_pid);
-                    vm.signal_states.remove(child_process_id);
-                    for (detached_process_id, detached_child) in detached_children {
-                        vm.detached_child_processes
-                            .insert(detached_process_id.clone());
-                        vm.active_processes
-                            .insert(detached_process_id, detached_child);
-                    }
-                    if should_signal_parent {
-                        if let Some(session) = parent_v8_signal_session {
-                            dispatch_v8_session_signal_async(session, libc::SIGCHLD);
-                        } else {
-                            signal_runtime_process(parent_runtime_pid, libc::SIGCHLD)?;
-                        }
-                    }
-                    let mut payload = Map::new();
-                    payload.insert(String::from("type"), Value::String(String::from("exit")));
-                    payload.insert(String::from("exitCode"), Value::from(exit_code));
-                    if let Some(signal_name) = signal_name {
-                        payload.insert(String::from("signal"), Value::String(signal_name));
-                    }
-                    record_execute_phase("child_process_exit_cleanup", cleanup_start.elapsed());
-                    return Ok(Value::Object(payload));
-                }
-                ActiveExecutionEvent::JavascriptSyncRpcRequest(request) => {
-                    let mut current_child_path = current_process_path.to_vec();
-                    current_child_path.push(child_process_id);
-                    if matches!(
-                        request.method.as_str(),
-                        "__kernel_stdin_read" | "__kernel_poll"
-                    ) && self.service_child_kernel_wait_rpc(
-                        vm_id,
-                        process_id,
-                        current_process_path,
-                        child_process_id,
-                        &request,
-                    )? {
-                        // Replied immediately or parked on the child; the pump
-                        // loop re-checks parked RPCs every iteration.
-                        continue;
-                    }
-                    if request.method == "__kernel_stdio_write" {
-                        let shared_tty = {
-                            let Some(vm) = self.vms.get_mut(vm_id) else {
-                                return Ok(Value::Null);
-                            };
-                            let Some(root) = vm.active_processes.get_mut(process_id) else {
-                                return Ok(Value::Null);
-                            };
-                            let Some(parent) =
-                                Self::active_process_by_path_mut(root, current_process_path)
-                            else {
-                                return Ok(Value::Null);
-                            };
-                            parent
-                                .child_processes
-                                .get(child_process_id)
-                                .and_then(|child| {
-                                    child
-                                        .tty_master_owner
-                                        .map(|owner| (child.kernel_pid, owner))
-                                })
-                        };
-                        if let Some((child_kernel_pid, owner)) = shared_tty {
-                            let response = self.service_shared_tty_stdio_write(
-                                vm_id,
-                                child_kernel_pid,
-                                owner,
-                                &request,
-                            );
-                            let Some(vm) = self.vms.get_mut(vm_id) else {
-                                return Ok(Value::Null);
-                            };
-                            let Some(root) = vm.active_processes.get_mut(process_id) else {
-                                return Ok(Value::Null);
-                            };
-                            let Some(parent) =
-                                Self::active_process_by_path_mut(root, current_process_path)
-                            else {
-                                return Ok(Value::Null);
-                            };
-                            let Some(child) = parent.child_processes.get_mut(child_process_id)
-                            else {
-                                return Ok(Value::Null);
-                            };
-                            match response {
-                                Ok(result) => child
-                                    .execution
-                                    .respond_javascript_sync_rpc_response(request.id, result.into())
-                                    .or_else(ignore_stale_javascript_sync_rpc_response)?,
-                                Err(error) => child
-                                    .execution
-                                    .respond_javascript_sync_rpc_error(
-                                        request.id,
-                                        javascript_sync_rpc_error_code(&error),
-                                        error.to_string(),
-                                    )
-                                    .or_else(ignore_stale_javascript_sync_rpc_response)?,
-                            }
-                            continue;
-                        }
-                    }
-                    let response = if request.method == "process.signal_state" {
-                        let (signal, registration) =
-                            parse_process_signal_state_request(&request.args)
-                                .map_err(|error| SidecarError::InvalidState(error.to_string()))?;
-                        let Some(vm) = self.vms.get_mut(vm_id) else {
-                            return Ok(Value::Null);
-                        };
-                        let signal_key =
-                            Self::child_process_signal_key(process_id, &current_child_path)
-                                .to_owned();
-                        apply_process_signal_state_update(
-                            &mut vm.signal_states,
-                            &signal_key,
-                            signal,
-                            registration,
-                        );
-                        Ok(Value::Null.into())
-                    } else if request.method == "process.kill" {
-                        self.handle_descendant_process_kill_rpc(
-                            vm_id,
-                            process_id,
-                            current_process_path,
-                            child_process_id,
-                            &request,
-                        )
-                        .map(Into::into)
-                    } else if request.method.starts_with("child_process.") {
-                        self.handle_descendant_javascript_child_process_rpc(
-                            vm_id,
-                            process_id,
-                            &current_child_path,
-                            &request,
-                        )
-                        .map(Into::into)
-                    } else {
-                        let Some(vm) = self.vms.get_mut(vm_id) else {
-                            return Ok(Value::Null);
-                        };
-                        let resource_limits = vm.kernel.resource_limits().clone();
-                        let network_counts = vm_network_resource_counts(vm);
-                        let socket_paths = build_javascript_socket_path_context(vm)?;
-                        let kernel_readiness = Arc::clone(&vm.kernel_socket_readiness);
-                        let Some(root) = vm.active_processes.get_mut(process_id) else {
-                            return Ok(Value::Null);
-                        };
-                        let Some(parent) =
-                            Self::active_process_by_path_mut(root, current_process_path)
-                        else {
-                            return Ok(Value::Null);
-                        };
-                        let Some(child) = parent.child_processes.get_mut(child_process_id) else {
-                            return Ok(Value::Null);
-                        };
-                        service_javascript_sync_rpc(JavascriptSyncRpcServiceRequest {
-                            bridge: &self.bridge,
-                            vm_id,
-                            dns: &vm.dns,
-                            socket_paths: &socket_paths,
-                            kernel: &mut vm.kernel,
-                            kernel_readiness,
-                            process: child,
-                            sync_request: &request,
-                            resource_limits: &resource_limits,
-                            network_counts,
-                        })
-                    };
-
-                    let Some(vm) = self.vms.get_mut(vm_id) else {
-                        return Ok(Value::Null);
-                    };
-                    let Some(parent) =
-                        Self::descendant_parent_process_mut(vm, process_id, current_process_path)
-                    else {
-                        return Ok(Value::Null);
-                    };
-                    let Some(child) = parent.child_processes.get_mut(child_process_id) else {
-                        return Ok(Value::Null);
-                    };
-                    let parent_signal_event = response
-                        .as_ref()
-                        .ok()
-                        .and_then(JavascriptSyncRpcServiceResponse::as_json)
-                        .and_then(|result| {
-                        let target_path_label =
-                            Self::child_process_path_label(process_id, current_process_path);
-                        if request.method != "process.kill"
-                            || result.get("action").and_then(Value::as_str) != Some("user")
-                            || result.get("targetProcessPath").and_then(Value::as_str)
-                                != Some(target_path_label.as_str())
-                        {
-                            return None;
-                        }
-                        Some(json!({
-                            "type": "signal",
-                            "signal": result.get("signal").and_then(Value::as_str).unwrap_or_default(),
-                            "number": result.get("number").and_then(Value::as_i64).unwrap_or_default(),
-                        }))
-                    });
-                    match response {
-                        Ok(result) => child
-                            .execution
-                            .respond_javascript_sync_rpc_response(request.id, result)
-                            .or_else(ignore_stale_javascript_sync_rpc_response)?,
-                        Err(error) => child
-                            .execution
-                            .respond_javascript_sync_rpc_error(
-                                request.id,
-                                javascript_sync_rpc_error_code(&error),
-                                error.to_string(),
-                            )
-                            .or_else(ignore_stale_javascript_sync_rpc_response)?,
-                    }
-                    if let Some(event) = parent_signal_event {
-                        return Ok(event);
-                    }
-                }
-                ActiveExecutionEvent::PythonVfsRpcRequest(request) => {
-                    // The kernel-VFS bridge is wired for top-level Python
-                    // executions; a nested Python child (spawned by a JS/Python
-                    // parent) cannot service VFS RPCs through this child-event
-                    // path. Respond with a recoverable error instead of aborting
-                    // the child, so its runner falls back to the in-isolate FS
-                    // for the nested process — top-level Python keeps the full
-                    // VFS root.
-                    let Some(vm) = self.vms.get_mut(vm_id) else {
-                        return Ok(Value::Null);
-                    };
-                    let Some(parent) =
-                        Self::descendant_parent_process_mut(vm, process_id, current_process_path)
-                    else {
-                        return Ok(Value::Null);
-                    };
-                    let Some(child) = parent.child_processes.get_mut(child_process_id) else {
-                        return Ok(Value::Null);
-                    };
-                    // Best-effort: deliver the "unavailable" error so the child's
-                    // pending VFS RPC resolves and its runner falls back to the
-                    // in-isolate FS. If delivery fails the child has already gone
-                    // away (broken pipe / no-longer-pending), so dropping the
-                    // result is correct here — there is nothing left to hang.
-                    let _ = child.execution.respond_python_vfs_rpc_error(
-                        request.id,
-                        "ERR_AGENTOS_PYTHON_VFS_UNAVAILABLE",
-                        "python VFS is not available for nested child processes",
-                    );
-                }
-                ActiveExecutionEvent::SignalState {
-                    signal,
-                    registration,
-                } => {
-                    let Some(vm) = self.vms.get_mut(vm_id) else {
-                        return Ok(Value::Null);
-                    };
-                    let signal_key =
-                        Self::child_process_signal_key(process_id, &child_path).to_owned();
-                    apply_process_signal_state_update(
-                        &mut vm.signal_states,
-                        &signal_key,
-                        signal,
-                        registration.clone(),
-                    );
-                    return Ok(json!({
-                        "type": "signal_state",
-                        "signal": signal,
-                        "registration": registration,
-                    }));
-                }
-            }
-        }
-    }
-
-    fn recover_descendant_runtime_child_process_event(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        current_process_path: &[&str],
-        child_process_id: &str,
-        wait_ms: u64,
-    ) -> Result<Option<ActiveExecutionEvent>, SidecarError> {
-        let (
-            parent_kernel_pid,
-            child_kernel_pid,
-            child_runtime_pid,
-            child_runtime,
-            child_shared_runtime,
-        ) = {
-            let mut child_path = current_process_path.to_vec();
-            child_path.push(child_process_id);
-            let Some(vm) = self.vms.get_mut(vm_id) else {
-                return Ok(None);
-            };
-            let Some(parent) =
-                Self::descendant_parent_process_mut(vm, process_id, current_process_path)
-            else {
-                return Err(javascript_child_process_gone_error(process_id, &child_path));
-            };
-            let Some(child) = parent.child_processes.get_mut(child_process_id) else {
-                return Err(javascript_child_process_gone_error(process_id, &child_path));
-            };
-            (
-                parent.kernel_pid,
-                child.kernel_pid,
-                child.execution.child_pid(),
-                child.runtime.clone(),
-                child.execution.uses_shared_v8_runtime(),
-            )
-        };
-        if child_runtime != GuestRuntimeKind::JavaScript
-            && child_runtime != GuestRuntimeKind::Python
-            && child_runtime != GuestRuntimeKind::WebAssembly
-        {
-            return Ok(None);
-        }
-        let wait_deadline = Instant::now() + Duration::from_millis(wait_ms.min(25));
-        loop {
-            let Some(vm) = self.vms.get_mut(vm_id) else {
-                return Ok(None);
-            };
-            if let Some(process_info) = vm.kernel.list_processes().get(&child_kernel_pid) {
-                if process_info.status == ProcessStatus::Exited {
-                    return Ok(Some(ActiveExecutionEvent::Exited(
-                        process_info.exit_code.unwrap_or(0),
-                    )));
-                }
-            }
-            if let Some(wait_result) = vm
-                .kernel
-                .waitpid_with_options(
-                    EXECUTION_DRIVER_NAME,
-                    parent_kernel_pid,
-                    child_kernel_pid as i32,
-                    WaitPidFlags::WNOHANG,
-                )
-                .map_err(kernel_error)?
-            {
-                return Ok(Some(ActiveExecutionEvent::Exited(wait_result.status)));
-            }
-
-            if !child_shared_runtime && child_runtime_pid != 0 {
-                if let Some(status) = runtime_child_exit_status(child_runtime_pid)? {
-                    return Ok(Some(ActiveExecutionEvent::Exited(status)));
-                }
-                if !runtime_child_is_alive(child_runtime_pid)? {
-                    return Ok(Some(ActiveExecutionEvent::Exited(0)));
-                }
-            }
-            if Instant::now() >= wait_deadline {
-                return Ok(None);
-            }
-            std::thread::sleep(Duration::from_millis(5));
-        }
-    }
-
-    fn write_descendant_javascript_child_process_stdin(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        current_process_path: &[&str],
-        child_process_id: &str,
-        chunk: &[u8],
-    ) -> Result<(), SidecarError> {
-        let mut child_path = current_process_path.to_vec();
-        child_path.push(child_process_id);
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Err(javascript_child_process_gone_error(process_id, &child_path));
-        };
-        let Some(root) = vm.active_processes.get_mut(process_id) else {
-            return Err(javascript_child_process_gone_error(process_id, &child_path));
-        };
-        let Some(parent) = Self::active_process_by_path_mut(root, current_process_path) else {
-            return Err(javascript_child_process_gone_error(process_id, &child_path));
-        };
-        let Some(child) = parent.child_processes.get_mut(child_process_id) else {
-            return Err(javascript_child_process_gone_error(process_id, &child_path));
-        };
-        if let Err(error) = child.execution.write_stdin(chunk) {
-            if is_broken_pipe_error(&error) {
-                return Ok(());
-            }
-            return Err(error);
-        }
-        write_kernel_process_stdin(&mut vm.kernel, child, chunk)
-    }
-
-    fn close_descendant_javascript_child_process_stdin(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        current_process_path: &[&str],
-        child_process_id: &str,
-    ) -> Result<(), SidecarError> {
-        let mut child_path = current_process_path.to_vec();
-        child_path.push(child_process_id);
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Err(javascript_child_process_gone_error(process_id, &child_path));
-        };
-        let Some(root) = vm.active_processes.get_mut(process_id) else {
-            return Err(javascript_child_process_gone_error(process_id, &child_path));
-        };
-        let Some(parent) = Self::active_process_by_path_mut(root, current_process_path) else {
-            return Err(javascript_child_process_gone_error(process_id, &child_path));
-        };
-        let Some(child) = parent.child_processes.get_mut(child_process_id) else {
-            return Err(javascript_child_process_gone_error(process_id, &child_path));
-        };
-        child.execution.close_stdin()?;
-        close_kernel_process_stdin(&mut vm.kernel, child)
-    }
-
-    fn kill_descendant_javascript_child_process(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        current_process_path: &[&str],
-        child_process_id: &str,
-        signal: &str,
-    ) -> Result<(), SidecarError> {
-        let signal_name = signal.to_owned();
-        let signal = parse_signal(signal)?;
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Ok(());
-        };
-        let Some(root) = vm.active_processes.get_mut(process_id) else {
-            return Ok(());
-        };
-        let Some(parent) = Self::active_process_by_path_mut(root, current_process_path) else {
-            return Ok(());
-        };
-        let source_pid = parent.kernel_pid;
-        let Some(child) = parent.child_processes.get_mut(child_process_id) else {
-            return Ok(());
-        };
-        terminate_tracked_child_process_for_signal(&mut vm.kernel, child, signal)?;
-        let child_process_label = if current_process_path.is_empty() {
-            child_process_id.to_owned()
-        } else {
-            format!("{}/{}", current_process_path.join("/"), child_process_id)
-        };
-        emit_security_audit_event(
-            &self.bridge,
-            vm_id,
-            "security.process.kill",
-            audit_fields([
-                (String::from("source"), String::from("guest_child_process")),
-                (String::from("source_pid"), source_pid.to_string()),
-                (String::from("target_pid"), child.kernel_pid.to_string()),
-                (String::from("process_id"), process_id.to_owned()),
-                (String::from("child_process_id"), child_process_label),
-                (String::from("signal"), signal_name),
-            ]),
-        );
-        Ok(())
-    }
-
-    fn handle_descendant_process_kill_rpc(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        current_process_path: &[&str],
-        child_process_id: &str,
-        request: &JavascriptSyncRpcRequest,
-    ) -> Result<Value, SidecarError> {
-        let target_pid = javascript_sync_rpc_arg_i32(&request.args, 0, "process.kill target pid")?;
-        let signal_name = javascript_sync_rpc_arg_str(&request.args, 1, "process.kill signal")?;
-        let signal = parse_signal(signal_name)?;
-
-        let mut source_path = current_process_path.to_vec();
-        source_path.push(child_process_id);
-
-        if signal != 0 && target_pid < 0 {
-            let pgid = target_pid.unsigned_abs();
-            let caller_kernel_pid = {
-                let Some(vm) = self.vms.get(vm_id) else {
-                    return Err(SidecarError::InvalidState(String::from(
-                        "ESRCH: unknown VM during process.kill",
-                    )));
-                };
-                let Some(root) = vm.active_processes.get(process_id) else {
-                    return Err(SidecarError::InvalidState(format!(
-                        "ESRCH: unknown process {process_id} during process.kill",
-                    )));
-                };
-                let Some(source) = Self::active_process_by_path(root, &source_path) else {
-                    return Err(SidecarError::InvalidState(format!(
-                        "ESRCH: unknown child process {child_process_id} during process.kill",
-                    )));
-                };
-                source.kernel_pid
-            };
-            let caller_is_member =
-                self.signal_vm_process_group(vm_id, caller_kernel_pid, pgid, signal_name)?;
-            if !caller_is_member {
-                return Ok(Value::Null);
-            }
-            let Some(vm) = self.vms.get_mut(vm_id) else {
-                return Ok(Value::Null);
-            };
-            let Some(root) = vm.active_processes.get_mut(process_id) else {
-                return Ok(Value::Null);
-            };
-            let Some(source) = Self::active_process_by_path_mut(root, &source_path) else {
-                return Ok(Value::Null);
-            };
-            source.pending_self_signal_exit = None;
-            if !matches!(
-                canonical_signal_name(signal),
-                Some("SIGWINCH" | "SIGCHLD" | "SIGCONT" | "SIGURG")
-            ) {
-                source.pending_self_signal_exit = Some(signal);
-            }
-            return Ok(json!({
-                "self": true,
-                "action": "default",
-            }));
-        }
-
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Err(SidecarError::InvalidState(String::from(
-                "ESRCH: unknown VM during process.kill",
-            )));
-        };
-
-        if signal == 0 {
-            vm.kernel
-                .signal_process(EXECUTION_DRIVER_NAME, target_pid, signal)
-                .map_err(kernel_error)?;
-            return Ok(Value::Null);
-        }
-
-        let target_kernel_pid = u32::try_from(target_pid).map_err(|_| {
-            SidecarError::InvalidState(format!("EINVAL: invalid process pid {target_pid}"))
-        })?;
-        let (source_pid, located_target_path) = {
-            let Some(root) = vm.active_processes.get(process_id) else {
-                return Err(SidecarError::InvalidState(format!(
-                    "ESRCH: unknown process {process_id} during process.kill",
-                )));
-            };
-            let Some(source) = Self::active_process_by_path(root, &source_path) else {
-                return Err(SidecarError::InvalidState(format!(
-                    "ESRCH: unknown child process {child_process_id} during process.kill",
-                )));
-            };
-            vm.kernel
-                .signal_process(EXECUTION_DRIVER_NAME, target_pid, 0)
-                .map_err(kernel_error)?;
-            (
-                source.kernel_pid,
-                Self::active_process_path_by_kernel_pid(root, target_kernel_pid),
-            )
-        };
-        let Some(target_path) = located_target_path else {
-            // The target is alive but not part of this root's process tree.
-            // Resolve it VM-wide so cross-tree pids and untracked kernel
-            // processes still receive the signal.
-            self.signal_vm_kernel_pid(vm_id, target_kernel_pid, signal_name)?;
-            return Ok(Value::Null);
-        };
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Err(SidecarError::InvalidState(String::from(
-                "ESRCH: unknown VM during process.kill",
-            )));
-        };
-
-        if source_pid == target_kernel_pid {
-            let Some(root) = vm.active_processes.get_mut(process_id) else {
-                return Ok(Value::Null);
-            };
-            let Some(source) = Self::active_process_by_path_mut(root, &source_path) else {
-                return Ok(Value::Null);
-            };
-            source.pending_self_signal_exit = None;
-            if !matches!(
-                canonical_signal_name(signal),
-                Some("SIGWINCH" | "SIGCHLD" | "SIGCONT" | "SIGURG")
-            ) {
-                source.pending_self_signal_exit = Some(signal);
-            }
-            return Ok(json!({
-                "self": true,
-                "action": "default",
-            }));
-        }
-
-        let signal_key = target_path.last().map(String::as_str).unwrap_or(process_id);
-        let registration = vm
-            .signal_states
-            .get(signal_key)
-            .and_then(|handlers| handlers.get(&(signal as u32)))
-            .cloned();
-
-        let action = match registration
-            .as_ref()
-            .map(|registration| &registration.action)
-        {
-            Some(SignalDispositionAction::Ignore) => "ignore",
-            Some(SignalDispositionAction::User) => {
-                let Some(root) = vm.active_processes.get_mut(process_id) else {
-                    return Ok(Value::Null);
-                };
-                let Some(target) = Self::active_process_by_owned_path_mut(root, &target_path)
-                else {
-                    return Err(SidecarError::InvalidState(format!(
-                        "ESRCH: unknown process pid {target_pid}"
-                    )));
-                };
-                if let Some(session) = target.execution.javascript_v8_session_handle().filter(
-                    |_| matches!(&target.execution, ActiveExecution::Javascript(execution) if execution.uses_shared_v8_runtime())
-                        || matches!(&target.execution, ActiveExecution::Wasm(execution) if execution.uses_shared_v8_runtime()),
-                ) {
-                    dispatch_v8_session_signal_async(session, signal);
-                } else if !dispatch_v8_process_signal(target, signal)? {
-                    return Err(SidecarError::InvalidState(format!(
-                        "unsupported guest signal delivery for pid {target_pid}"
-                    )));
-                }
-                "user"
-            }
-            Some(SignalDispositionAction::Default) | None
-                if matches!(
-                    canonical_signal_name(signal),
-                    Some("SIGWINCH" | "SIGCHLD" | "SIGURG")
-                ) =>
-            {
-                "ignore"
-            }
-            Some(SignalDispositionAction::Default) | None => {
-                let Some(root) = vm.active_processes.get_mut(process_id) else {
-                    return Ok(Value::Null);
-                };
-                let Some(target) = Self::active_process_by_owned_path_mut(root, &target_path)
-                else {
-                    return Err(SidecarError::InvalidState(format!(
-                        "ESRCH: unknown process pid {target_pid}"
-                    )));
-                };
-                apply_active_process_default_signal(&mut vm.kernel, target, signal)?;
-                "default"
-            }
-        };
-
-        let target_path_label = Self::child_process_path_label(
-            process_id,
-            &target_path.iter().map(String::as_str).collect::<Vec<_>>(),
-        );
-        emit_security_audit_event(
-            &self.bridge,
-            vm_id,
-            "security.process.kill",
-            audit_fields([
-                (String::from("source"), String::from("guest_process")),
-                (String::from("source_pid"), source_pid.to_string()),
-                (String::from("target_pid"), target_pid.to_string()),
-                (String::from("process_id"), process_id.to_owned()),
-                (
-                    String::from("target_process_path"),
-                    target_path_label.clone(),
-                ),
-                (String::from("signal"), signal_name.to_owned()),
-            ]),
-        );
-
-        Ok(json!({
-            "self": false,
-            "action": action,
-            "signal": signal_name,
-            "number": signal,
-            "targetProcessPath": target_path_label,
-        }))
-    }
-
-    pub(crate) fn poll_javascript_child_process(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        child_process_id: &str,
-        wait_ms: u64,
-    ) -> Result<Value, SidecarError> {
-        self.poll_descendant_javascript_child_process(
-            vm_id,
-            process_id,
-            &[],
-            child_process_id,
-            wait_ms,
-        )
-    }
-
-    pub(crate) fn write_javascript_child_process_stdin(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        child_process_id: &str,
-        chunk: &[u8],
-    ) -> Result<(), SidecarError> {
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Err(javascript_child_process_gone_error(
-                process_id,
-                &[child_process_id],
-            ));
-        };
-        let Some(child) = vm
-            .active_processes
-            .get_mut(process_id)
-            .ok_or_else(|| missing_process_error(vm_id, process_id))?
-            .child_processes
-            .get_mut(child_process_id)
-        else {
-            return Err(javascript_child_process_gone_error(
-                process_id,
-                &[child_process_id],
-            ));
-        };
-        if let Err(error) = child.execution.write_stdin(chunk) {
-            if is_broken_pipe_error(&error) {
-                return Ok(());
-            }
-            return Err(error);
-        }
-        write_kernel_process_stdin(&mut vm.kernel, child, chunk)
-    }
-
-    pub(crate) fn close_javascript_child_process_stdin(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        child_process_id: &str,
-    ) -> Result<(), SidecarError> {
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Err(javascript_child_process_gone_error(
-                process_id,
-                &[child_process_id],
-            ));
-        };
-        let Some(child) = vm
-            .active_processes
-            .get_mut(process_id)
-            .ok_or_else(|| missing_process_error(vm_id, process_id))?
-            .child_processes
-            .get_mut(child_process_id)
-        else {
-            return Err(javascript_child_process_gone_error(
-                process_id,
-                &[child_process_id],
-            ));
-        };
-        child.execution.close_stdin()?;
-        close_kernel_process_stdin(&mut vm.kernel, child)
-    }
-
-    pub(crate) fn kill_javascript_child_process(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        child_process_id: &str,
-        signal: &str,
-    ) -> Result<(), SidecarError> {
-        let signal_name = signal.to_owned();
-        let signal = parse_signal(signal)?;
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Ok(());
-        };
-        let process = vm
-            .active_processes
-            .get_mut(process_id)
-            .ok_or_else(|| missing_process_error(vm_id, process_id))?;
-        let source_pid = process.kernel_pid;
-        let child = process
-            .child_processes
-            .get_mut(child_process_id)
-            .ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "unknown child process {child_process_id} during kill"
-                ))
-            })?;
-        terminate_tracked_child_process_for_signal(&mut vm.kernel, child, signal)?;
-        emit_security_audit_event(
-            &self.bridge,
-            vm_id,
-            "security.process.kill",
-            audit_fields([
-                (String::from("source"), String::from("guest_child_process")),
-                (String::from("source_pid"), source_pid.to_string()),
-                (String::from("target_pid"), child.kernel_pid.to_string()),
-                (String::from("process_id"), process_id.to_owned()),
-                (
-                    String::from("child_process_id"),
-                    child_process_id.to_owned(),
-                ),
-                (String::from("signal"), signal_name),
-            ]),
-        );
-        Ok(())
-    }
-
-    /// Delivers a signal to one kernel pid inside a VM, resolving the target
-    /// through the active-process tree first so tracked sidecar executions get
-    /// the same termination handling as a direct `child_process.kill`.
-    /// Untracked kernel processes (for example WASM subprocess trees) receive
-    /// the signal through the kernel process table directly.
-    pub(crate) fn signal_vm_kernel_pid(
-        &mut self,
-        vm_id: &str,
-        target_kernel_pid: u32,
-        signal_name: &str,
-    ) -> Result<(), SidecarError> {
-        let signal = parse_signal(signal_name)?;
-        let located = {
-            let Some(vm) = self.vms.get(vm_id) else {
-                return Err(SidecarError::InvalidState(String::from(
-                    "ESRCH: unknown VM during process.kill",
-                )));
-            };
-            let alive = vm
-                .kernel
-                .list_processes()
-                .get(&target_kernel_pid)
-                .is_some_and(|info| info.status != ProcessStatus::Exited);
-            if !alive {
-                return Err(SidecarError::InvalidState(format!(
-                    "ESRCH: no such process {target_kernel_pid}"
-                )));
-            }
-            vm.active_processes.iter().find_map(|(process_id, root)| {
-                Self::active_process_path_by_kernel_pid(root, target_kernel_pid)
-                    .map(|path| (process_id.clone(), path))
-            })
-        };
-
-        match located {
-            Some((process_id, path)) if path.is_empty() => {
-                self.kill_process_internal(vm_id, &process_id, signal_name)
-            }
-            Some((process_id, path)) => {
-                let Some(vm) = self.vms.get_mut(vm_id) else {
-                    return Ok(());
-                };
-                let Some(root) = vm.active_processes.get_mut(&process_id) else {
-                    return Ok(());
-                };
-                let Some(target) = Self::active_process_by_owned_path_mut(root, &path) else {
-                    return Err(SidecarError::InvalidState(format!(
-                        "ESRCH: no such process {target_kernel_pid}"
-                    )));
-                };
-                terminate_tracked_child_process_for_signal(&mut vm.kernel, target, signal)?;
-                emit_security_audit_event(
-                    &self.bridge,
-                    vm_id,
-                    "security.process.kill",
-                    audit_fields([
-                        (String::from("source"), String::from("guest_process")),
-                        (String::from("target_pid"), target_kernel_pid.to_string()),
-                        (String::from("process_id"), process_id),
-                        (String::from("signal"), signal_name.to_owned()),
-                    ]),
-                );
-                Ok(())
-            }
-            None => {
-                let Some(vm) = self.vms.get_mut(vm_id) else {
-                    return Ok(());
-                };
-                let target_pid = i32::try_from(target_kernel_pid).map_err(|_| {
-                    SidecarError::InvalidState(format!(
-                        "EINVAL: invalid process pid {target_kernel_pid}"
-                    ))
-                })?;
-                vm.kernel
-                    .signal_process(EXECUTION_DRIVER_NAME, target_pid, signal)
-                    .map_err(kernel_error)?;
-                emit_security_audit_event(
-                    &self.bridge,
-                    vm_id,
-                    "security.process.kill",
-                    audit_fields([
-                        (String::from("source"), String::from("guest_process")),
-                        (String::from("target_pid"), target_kernel_pid.to_string()),
-                        (String::from("signal"), signal_name.to_owned()),
-                    ]),
-                );
-                Ok(())
-            }
-        }
-    }
-
-    /// Delivers a signal to every live member of a VM process group, matching
-    /// Linux `kill(-pgid, sig)` semantics. Returns whether the caller itself
-    /// is a member of the group so entry points can apply self-signal
-    /// delivery; the caller is intentionally skipped here.
-    pub(crate) fn signal_vm_process_group(
-        &mut self,
-        vm_id: &str,
-        caller_kernel_pid: u32,
-        pgid: u32,
-        signal_name: &str,
-    ) -> Result<bool, SidecarError> {
-        parse_signal(signal_name)?;
-        let members = {
-            let Some(vm) = self.vms.get(vm_id) else {
-                return Err(SidecarError::InvalidState(String::from(
-                    "ESRCH: unknown VM during process.kill",
-                )));
-            };
-            vm.kernel
-                .list_processes()
-                .into_iter()
-                .filter(|(_, info)| info.pgid == pgid && info.status != ProcessStatus::Exited)
-                .map(|(pid, _)| pid)
-                .collect::<Vec<_>>()
-        };
-        if members.is_empty() {
-            return Err(SidecarError::InvalidState(format!(
-                "ESRCH: no such process group {pgid}"
-            )));
-        }
-
-        let mut caller_is_member = false;
-        for member_pid in members {
-            if member_pid == caller_kernel_pid {
-                caller_is_member = true;
-                continue;
-            }
-            match self.signal_vm_kernel_pid(vm_id, member_pid, signal_name) {
-                Ok(()) => {}
-                // Group members can exit while the group is being signaled. A
-                // vanished member is not an error for the group kill overall.
-                Err(error) if sidecar_error_is_esrch(&error) => {}
-                Err(error) => return Err(error),
-            }
-        }
-        Ok(caller_is_member)
-    }
-}
-
-/// Applies a kill signal to a tracked child execution. Shared-runtime
-/// executions for lethal signals are terminated directly with a synthetic
-/// signal exit so child polls observe a prompt close; everything else routes
-/// through the kernel process table.
-fn terminate_tracked_child_process_for_signal(
-    kernel: &mut SidecarKernel,
-    child: &mut ActiveProcess,
-    signal: i32,
-) -> Result<(), SidecarError> {
-    let should_terminate_shared_runtime = child.execution.uses_shared_v8_runtime()
-        && signal != 0
-        && !matches!(
-            signal,
-            libc::SIGHUP
-                | libc::SIGINT
-                | libc::SIGTERM
-                | libc::SIGCHLD
-                | libc::SIGWINCH
-                | libc::SIGSTOP
-                | libc::SIGCONT
-        );
-    if should_terminate_shared_runtime {
-        child.execution.terminate()?;
-        child.pending_self_signal_exit = Some(signal);
-        child.queue_pending_execution_event(ActiveExecutionEvent::Exited(128 + signal))?;
-    } else {
-        kernel
-            .kill_process(EXECUTION_DRIVER_NAME, child.kernel_pid, signal)
-            .map_err(kernel_error)?;
-    }
-    Ok(())
-}
-
-fn sidecar_error_is_esrch(error: &SidecarError) -> bool {
-    error.to_string().contains("ESRCH")
-}
-
-fn apply_active_process_default_signal(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    signal: i32,
-) -> Result<(), SidecarError> {
-    if matches!(signal, libc::SIGSTOP | libc::SIGCONT) {
-        return kernel
-            .kill_process(EXECUTION_DRIVER_NAME, process.kernel_pid, signal)
-            .map_err(kernel_error);
-    }
-
-    if signal != 0 && matches!(process.execution, ActiveExecution::Python(_)) {
-        close_kernel_process_stdin(kernel, process)?;
-    }
-
-    if process.execution.uses_shared_v8_runtime() {
-        process.execution.terminate()?;
-        if signal != 0 && matches!(process.execution, ActiveExecution::Wasm(_)) {
-            process.queue_pending_execution_event(ActiveExecutionEvent::Exited(128 + signal))?;
-        }
-        return Ok(());
-    }
-
-    kernel
-        .kill_process(EXECUTION_DRIVER_NAME, process.kernel_pid, signal)
-        .map_err(kernel_error)
-}
-
-fn map_wasm_signal_registration(
-    registration: secure_exec_execution::wasm::WasmSignalHandlerRegistration,
-) -> SignalHandlerRegistration {
-    SignalHandlerRegistration {
-        action: match registration.action {
-            secure_exec_execution::wasm::WasmSignalDispositionAction::Default => {
-                crate::protocol::SignalDispositionAction::Default
-            }
-            secure_exec_execution::wasm::WasmSignalDispositionAction::Ignore => {
-                crate::protocol::SignalDispositionAction::Ignore
-            }
-            secure_exec_execution::wasm::WasmSignalDispositionAction::User => {
-                crate::protocol::SignalDispositionAction::User
-            }
-        },
-        mask: registration.mask,
-        flags: registration.flags,
-    }
-}
-
-fn map_node_signal_registration(
-    registration: NodeSignalHandlerRegistration,
-) -> SignalHandlerRegistration {
-    SignalHandlerRegistration {
-        action: match registration.action {
-            NodeSignalDispositionAction::Default => SignalDispositionAction::Default,
-            NodeSignalDispositionAction::Ignore => SignalDispositionAction::Ignore,
-            NodeSignalDispositionAction::User => SignalDispositionAction::User,
-        },
-        mask: registration.mask,
-        flags: registration.flags,
-    }
-}
-
-fn javascript_child_process_sync_input_bytes(
-    value: Option<&Value>,
-) -> Result<Option<Vec<u8>>, SidecarError> {
-    let Some(value) = value else {
-        return Ok(None);
-    };
-
-    match value {
-        Value::Null => Ok(None),
-        Value::String(text) => Ok(Some(text.as_bytes().to_vec())),
-        other => javascript_sync_rpc_bytes_arg(
-            std::slice::from_ref(other),
-            0,
-            "child_process.spawn_sync input",
-        )
-        .map(Some),
-    }
-}
-
-// bridge_permissions moved to crate::bridge
-
-// reconcile_mounts, resolve_cwd moved to crate::vm
-
-fn resolve_execute_request(
-    vm: &VmState,
-    payload: &ExecuteRequest,
-) -> Result<ResolvedChildProcessExecution, SidecarError> {
-    let payload_env: BTreeMap<String, String> = payload
-        .env
-        .iter()
-        .map(|(k, v)| (k.clone(), v.clone()))
-        .collect();
-    if let Some(command) = payload.command.as_deref() {
-        return resolve_command_execution(
-            vm,
-            command,
-            &payload.args,
-            &payload_env,
-            payload.cwd.as_deref(),
-            payload.wasm_permission_tier,
-        );
-    }
-
-    let runtime = payload.runtime.clone().ok_or_else(|| {
-        SidecarError::InvalidState(String::from("execute requires either command or runtime"))
-    })?;
-    let entrypoint = payload.entrypoint.clone().ok_or_else(|| {
-        SidecarError::InvalidState(String::from(
-            "execute requires either command or entrypoint",
-        ))
-    })?;
-    let (guest_cwd, host_cwd, allow_host_path_overrides) =
-        resolve_execution_cwds(vm, payload.cwd.as_deref());
-    let mut env = vm.guest_env.clone();
-    env.extend(payload_env.clone());
-
-    let requested_host_entrypoint = resolve_host_entrypoint_within_vm_host_cwd(vm, &entrypoint);
-    if requested_host_entrypoint.is_some() && !allow_host_path_overrides {
-        let requested_cwd = payload.cwd.as_deref().unwrap_or(guest_cwd.as_str());
-        return Err(SidecarError::InvalidState(format!(
-            "execution cwd {requested_cwd} is outside sandbox root {}",
-            vm.host_cwd.to_string_lossy()
-        )));
-    }
-    let host_entrypoint_override = allow_host_path_overrides
-        .then(|| resolve_host_entrypoint_within_vm_host_cwd(vm, &entrypoint))
-        .flatten();
-
-    let guest_entrypoint = host_entrypoint_override
-        .as_ref()
-        .map(|(guest_entrypoint, _)| guest_entrypoint.clone())
-        .or_else(|| guest_entrypoint_for_specifier(&guest_cwd, &entrypoint));
-    prepare_guest_runtime_env(vm, &mut env, &guest_cwd, &host_cwd, guest_entrypoint)?;
-
-    Ok(ResolvedChildProcessExecution {
-        command: match runtime {
-            GuestRuntimeKind::JavaScript => String::from(JAVASCRIPT_COMMAND),
-            GuestRuntimeKind::Python => String::from(PYTHON_COMMAND),
-            GuestRuntimeKind::WebAssembly => String::from(WASM_COMMAND),
-        },
-        process_args: std::iter::once(entrypoint.clone())
-            .chain(payload.args.iter().cloned())
-            .collect(),
-        runtime,
-        entrypoint: host_entrypoint_override
-            .map(|(_, host_entrypoint)| host_entrypoint)
-            .unwrap_or(entrypoint),
-        execution_args: payload.args.clone(),
-        env,
-        guest_cwd,
-        host_cwd,
-        wasm_permission_tier: payload.wasm_permission_tier,
-        tool_command: false,
-    })
-}
-
-fn resolve_command_execution(
-    vm: &VmState,
-    command: &str,
-    args: &[String],
-    extra_env: &BTreeMap<String, String>,
-    cwd: Option<&str>,
-    explicit_wasm_permission_tier: Option<WasmPermissionTier>,
-) -> Result<ResolvedChildProcessExecution, SidecarError> {
-    let (guest_cwd, host_cwd, allow_host_path_overrides) = resolve_execution_cwds(vm, cwd);
-    let mut env = vm.guest_env.clone();
-    env.extend(extra_env.clone());
-    let args = apply_shell_cwd_prefix(command, args.to_vec(), &guest_cwd);
-
-    if is_tool_command(vm, command) {
-        let command = normalized_tool_command_name(command).unwrap_or_else(|| command.to_owned());
-        return Ok(ResolvedChildProcessExecution {
-            command: command.clone(),
-            process_args: std::iter::once(command.clone())
-                .chain(args.iter().cloned())
-                .collect(),
-            runtime: GuestRuntimeKind::JavaScript,
-            entrypoint: command,
-            execution_args: args,
-            env,
-            guest_cwd,
-            host_cwd,
-            wasm_permission_tier: None,
-            tool_command: true,
-        });
-    }
-
-    if is_python_runtime_command(command) {
-        return resolve_python_command_execution(vm, command, &args, env, guest_cwd, host_cwd);
-    }
-
-    if is_node_runtime_command(command) {
-        if let Some(cli) = resolve_host_node_cli_entrypoint(command) {
-            env.insert(
-                String::from("AGENTOS_NODE_EVAL"),
-                build_host_node_cli_eval(&cli),
-            );
-            prepare_guest_runtime_env(vm, &mut env, &guest_cwd, &host_cwd, None)?;
-            add_runtime_guest_path_mapping(&mut env, &cli.guest_root, &cli.package_root);
-            add_runtime_host_access_path(
-                &mut env,
-                "AGENTOS_EXTRA_FS_READ_PATHS",
-                &cli.package_root,
-                true,
-            );
-
-            return Ok(ResolvedChildProcessExecution {
-                command: String::from(JAVASCRIPT_COMMAND),
-                process_args: std::iter::once(command.to_owned())
-                    .chain(args.iter().cloned())
-                    .collect(),
-                runtime: GuestRuntimeKind::JavaScript,
-                entrypoint: String::from("-e"),
-                execution_args: std::iter::once(cli.guest_entrypoint.clone())
-                    .chain(args.iter().cloned())
-                    .collect(),
-                env,
-                guest_cwd,
-                host_cwd,
-                wasm_permission_tier: None,
-                tool_command: false,
-            });
-        }
-
-        if args.is_empty() {
-            env.insert(String::from("AGENTOS_NODE_EVAL"), String::new());
-            prepare_guest_runtime_env(vm, &mut env, &guest_cwd, &host_cwd, None)?;
-
-            return Ok(ResolvedChildProcessExecution {
-                command: String::from(JAVASCRIPT_COMMAND),
-                process_args: vec![command.to_owned()],
-                runtime: GuestRuntimeKind::JavaScript,
-                entrypoint: String::from("-e"),
-                execution_args: Vec::new(),
-                env,
-                guest_cwd,
-                host_cwd,
-                wasm_permission_tier: None,
-                tool_command: false,
-            });
-        }
-
-        if let Some((entrypoint, execution_args)) =
-            resolve_special_node_cli_invocation(&args, &mut env)
-        {
-            prepare_guest_runtime_env(vm, &mut env, &guest_cwd, &host_cwd, None)?;
-
-            return Ok(ResolvedChildProcessExecution {
-                command: String::from(JAVASCRIPT_COMMAND),
-                process_args: std::iter::once(command.to_owned())
-                    .chain(args.iter().cloned())
-                    .collect(),
-                runtime: GuestRuntimeKind::JavaScript,
-                entrypoint,
-                execution_args,
-                env,
-                guest_cwd,
-                host_cwd,
-                wasm_permission_tier: None,
-                tool_command: false,
-            });
-        }
-
-        let Some(entrypoint_specifier) = args.first() else {
-            return Err(SidecarError::InvalidState(format!(
-                "{command} execution requires an entrypoint"
-            )));
-        };
-
-        let (entrypoint, execution_args, guest_entrypoint) = {
-            let requested_host_entrypoint =
-                resolve_host_entrypoint_within_vm_host_cwd(vm, entrypoint_specifier);
-            if requested_host_entrypoint.is_some() && !allow_host_path_overrides {
-                let requested_cwd = cwd.unwrap_or(guest_cwd.as_str());
-                return Err(SidecarError::InvalidState(format!(
-                    "execution cwd {requested_cwd} is outside sandbox root {}",
-                    vm.host_cwd.to_string_lossy()
-                )));
-            }
-            let host_entrypoint_override = allow_host_path_overrides
-                .then(|| resolve_host_entrypoint_within_vm_host_cwd(vm, entrypoint_specifier))
-                .flatten();
-            let guest_entrypoint = host_entrypoint_override
-                .as_ref()
-                .map(|(guest_entrypoint, _)| guest_entrypoint.clone())
-                .or_else(|| guest_entrypoint_for_specifier(&guest_cwd, entrypoint_specifier));
-            let entrypoint = host_entrypoint_override.map_or_else(
-                || {
-                    guest_entrypoint.as_ref().map_or_else(
-                        || entrypoint_specifier.clone(),
-                        |guest_entrypoint| {
-                            resolve_vm_guest_path_to_host(vm, guest_entrypoint)
-                                .to_string_lossy()
-                                .into_owned()
-                        },
-                    )
-                },
-                |(_, host_entrypoint)| host_entrypoint,
-            );
-            (
-                entrypoint,
-                args.iter().skip(1).cloned().collect(),
-                guest_entrypoint,
-            )
-        };
-
-        prepare_guest_runtime_env(vm, &mut env, &guest_cwd, &host_cwd, guest_entrypoint)?;
-
-        return Ok(ResolvedChildProcessExecution {
-            command: String::from(JAVASCRIPT_COMMAND),
-            process_args: std::iter::once(command.to_owned())
-                .chain(args.iter().cloned())
-                .collect(),
-            runtime: GuestRuntimeKind::JavaScript,
-            entrypoint,
-            execution_args,
-            env,
-            guest_cwd,
-            host_cwd,
-            wasm_permission_tier: None,
-            tool_command: false,
-        });
-    }
-
-    if command.ends_with(".js") || command.ends_with(".mjs") || command.ends_with(".cjs") {
-        let requested_host_entrypoint = resolve_host_entrypoint_within_vm_host_cwd(vm, command);
-        if requested_host_entrypoint.is_some() && !allow_host_path_overrides {
-            let requested_cwd = cwd.unwrap_or(guest_cwd.as_str());
-            return Err(SidecarError::InvalidState(format!(
-                "execution cwd {requested_cwd} is outside sandbox root {}",
-                vm.host_cwd.to_string_lossy()
-            )));
-        }
-        let host_entrypoint_override = allow_host_path_overrides
-            .then(|| resolve_host_entrypoint_within_vm_host_cwd(vm, command))
-            .flatten();
-        let guest_entrypoint = host_entrypoint_override
-            .as_ref()
-            .map(|(guest_entrypoint, _)| guest_entrypoint.clone())
-            .or_else(|| guest_entrypoint_for_specifier(&guest_cwd, command));
-        let entrypoint = host_entrypoint_override.map_or_else(
-            || {
-                guest_entrypoint.as_ref().map_or_else(
-                    || command.to_owned(),
-                    |guest_entrypoint| {
-                        resolve_vm_guest_path_to_host(vm, guest_entrypoint)
-                            .to_string_lossy()
-                            .into_owned()
-                    },
-                )
-            },
-            |(_, host_entrypoint)| host_entrypoint,
-        );
-        prepare_guest_runtime_env(vm, &mut env, &guest_cwd, &host_cwd, guest_entrypoint)?;
-
-        return Ok(ResolvedChildProcessExecution {
-            command: String::from(JAVASCRIPT_COMMAND),
-            process_args: std::iter::once(command.to_owned())
-                .chain(args.iter().cloned())
-                .collect(),
-            runtime: GuestRuntimeKind::JavaScript,
-            entrypoint,
-            execution_args: args.to_vec(),
-            env,
-            guest_cwd,
-            host_cwd,
-            wasm_permission_tier: None,
-            tool_command: false,
-        });
-    }
-
-    let guest_entrypoint = resolve_guest_command_entrypoint(
-        vm,
-        &guest_cwd,
-        command,
-        env.get("PATH").map(String::as_str),
-    )
-    .ok_or_else(|| {
-        SidecarError::InvalidState(format!(
-            "command not found on native sidecar path: {command}"
-        ))
-    })?;
-    let wasm_permission_tier = explicit_wasm_permission_tier
-        .or_else(|| vm.command_permissions.get(command).copied())
-        .or_else(|| {
-            Path::new(&guest_entrypoint)
-                .file_name()
-                .and_then(|name| name.to_str())
-                .and_then(|name| vm.command_permissions.get(name).copied())
-        });
-
-    let host_entrypoint = resolve_vm_guest_path_to_host(vm, &guest_entrypoint);
-    if let Some((javascript_guest_entrypoint, javascript_host_entrypoint)) =
-        resolve_javascript_command_entrypoint(vm, &guest_entrypoint, &host_entrypoint)
-    {
-        prepare_guest_runtime_env(
-            vm,
-            &mut env,
-            &guest_cwd,
-            &host_cwd,
-            Some(javascript_guest_entrypoint),
-        )?;
-
-        return Ok(ResolvedChildProcessExecution {
-            command: command.to_owned(),
-            process_args: std::iter::once(command.to_owned())
-                .chain(args.iter().cloned())
-                .collect(),
-            runtime: GuestRuntimeKind::JavaScript,
-            entrypoint: javascript_host_entrypoint.to_string_lossy().into_owned(),
-            execution_args: args.to_vec(),
-            env,
-            guest_cwd,
-            host_cwd,
-            wasm_permission_tier: None,
-            tool_command: false,
-        });
-    }
-    prepare_guest_runtime_env(
-        vm,
-        &mut env,
-        &guest_cwd,
-        &host_cwd,
-        Some(guest_entrypoint.clone()),
-    )?;
-
-    Ok(ResolvedChildProcessExecution {
-        command: command.to_owned(),
-        process_args: std::iter::once(command.to_owned())
-            .chain(args.iter().cloned())
-            .collect(),
-        runtime: GuestRuntimeKind::WebAssembly,
-        entrypoint: host_entrypoint.to_string_lossy().into_owned(),
-        execution_args: args.to_vec(),
-        env,
-        guest_cwd,
-        host_cwd,
-        wasm_permission_tier,
-        tool_command: false,
-    })
-}
-
-const MAX_JAVASCRIPT_COMMAND_REDIRECT_DEPTH: usize = 4;
-
-fn resolve_javascript_command_entrypoint(
-    vm: &VmState,
-    guest_entrypoint: &str,
-    host_entrypoint: &Path,
-) -> Option<(String, PathBuf)> {
-    // agentOS package content is served guest-native (tar + single-symlink
-    // mounts) and is never materialized on the host, so the shebang-reading
-    // fallback below (which reads the host path) cannot classify these
-    // entrypoints. Within the package mount the only runtimes are WebAssembly
-    // (`*.wasm`) and JavaScript, and `bin/<cmd>` launchers are frequently
-    // extensionless — so classify by extension here: `.wasm` is WASM (fall
-    // through), everything else in the mount is JavaScript.
-    if guest_path_is_within_agentos_package_mount(vm, guest_entrypoint) {
-        let extension = Path::new(guest_entrypoint)
-            .extension()
-            .and_then(|extension| extension.to_str());
-        if extension != Some("wasm") {
-            return Some((guest_entrypoint.to_owned(), host_entrypoint.to_path_buf()));
-        }
-        return None;
-    }
-
-    resolve_javascript_command_entrypoint_inner(
-        vm,
-        guest_entrypoint,
-        host_entrypoint,
-        MAX_JAVASCRIPT_COMMAND_REDIRECT_DEPTH,
-    )
-}
-
-fn resolve_javascript_command_entrypoint_inner(
-    vm: &VmState,
-    guest_entrypoint: &str,
-    host_entrypoint: &Path,
-    redirects_remaining: usize,
-) -> Option<(String, PathBuf)> {
-    if redirects_remaining > 0 {
-        let symlink_target = fs::symlink_metadata(host_entrypoint)
-            .ok()
-            .filter(|metadata| metadata.file_type().is_symlink())
-            .and_then(|_| fs::read_link(host_entrypoint).ok());
-        if let Some(symlink_target) = symlink_target {
-            let guest_parent = Path::new(guest_entrypoint)
-                .parent()
-                .and_then(|path| path.to_str())
-                .unwrap_or("/");
-            let symlink_guest_entrypoint = if symlink_target.is_absolute() {
-                normalize_path(&symlink_target.to_string_lossy())
-            } else {
-                normalize_path(&format!(
-                    "{guest_parent}/{}",
-                    symlink_target.to_string_lossy().replace('\\', "/")
-                ))
-            };
-            let symlink_host_entrypoint =
-                resolve_vm_guest_path_to_host(vm, &symlink_guest_entrypoint);
-            return resolve_javascript_command_entrypoint_inner(
-                vm,
-                &symlink_guest_entrypoint,
-                &symlink_host_entrypoint,
-                redirects_remaining - 1,
-            );
-        }
-    }
-
-    let script = load_executable_script_preview(host_entrypoint)?;
-    let interpreter = parse_script_interpreter_name(&script);
-
-    if interpreter.is_none() && is_probable_javascript_entrypoint(host_entrypoint, &script) {
-        return Some((guest_entrypoint.to_owned(), host_entrypoint.to_path_buf()));
-    }
-
-    let interpreter = interpreter?;
-    if interpreter == "node" {
-        return Some((guest_entrypoint.to_owned(), host_entrypoint.to_path_buf()));
-    }
-
-    if redirects_remaining == 0 || !matches!(interpreter.as_str(), "sh" | "bash" | "dash") {
-        return None;
-    }
-
-    let shim_target = parse_node_shell_shim_target(&script)?;
-    let guest_parent = Path::new(guest_entrypoint)
-        .parent()
-        .and_then(|path| path.to_str())
-        .unwrap_or("/");
-    let shim_guest_entrypoint = normalize_path(&format!("{guest_parent}/{shim_target}"));
-    let shim_host_entrypoint = resolve_vm_guest_path_to_host(vm, &shim_guest_entrypoint);
-    resolve_javascript_command_entrypoint_inner(
-        vm,
-        &shim_guest_entrypoint,
-        &shim_host_entrypoint,
-        redirects_remaining - 1,
-    )
-}
-
-fn load_executable_script_preview(path: &Path) -> Option<String> {
-    let bytes = fs::read(path).ok()?;
-    let preview_len = bytes.len().min(16 * 1024);
-    Some(String::from_utf8_lossy(&bytes[..preview_len]).into_owned())
-}
-
-fn parse_script_interpreter_name(script: &str) -> Option<String> {
-    let shebang = script.lines().next()?.strip_prefix("#!")?.trim();
-    let mut tokens = shebang.split_whitespace();
-    let command = tokens.next()?;
-    let command_name = Path::new(command).file_name()?.to_str()?;
-    if command_name == "env" {
-        for token in tokens {
-            if token.starts_with('-') {
-                continue;
-            }
-            return Path::new(token)
-                .file_name()
-                .and_then(|name| name.to_str())
-                .map(ToOwned::to_owned);
-        }
-        return None;
-    }
-
-    Some(command_name.to_owned())
-}
-
-fn parse_node_shell_shim_target(script: &str) -> Option<String> {
-    for line in script.lines() {
-        let trimmed = line.trim();
-        if !trimmed.starts_with("exec ") {
-            continue;
-        }
-
-        let mut remaining = trimmed;
-        while let Some(start) = remaining.find("\"$basedir/") {
-            let after_prefix = &remaining[start + "\"$basedir/".len()..];
-            let end = after_prefix.find('"')?;
-            let candidate = &after_prefix[..end];
-            remaining = &after_prefix[end + 1..];
-
-            if candidate.is_empty() || candidate == "node" || candidate.ends_with("/node") {
-                continue;
-            }
-
-            return Some(candidate.to_owned());
-        }
-    }
-
-    None
-}
-
-fn is_probable_javascript_entrypoint(path: &Path, script: &str) -> bool {
-    let extension = path
-        .extension()
-        .and_then(|value| value.to_str())
-        .unwrap_or_default();
-    if matches!(extension, "js" | "cjs" | "mjs") {
-        return true;
-    }
-
-    if !path
-        .components()
-        .any(|component| component.as_os_str() == "node_modules")
-    {
-        return false;
-    }
-
-    let preview = script.trim_start_matches('\u{feff}').trim_start();
-    !preview.is_empty()
-        && !preview.starts_with("#!")
-        && (preview.starts_with("\"use strict\"")
-            || preview.starts_with("'use strict'")
-            || preview.starts_with("import ")
-            || preview.starts_with("export ")
-            || preview.starts_with("const ")
-            || preview.starts_with("let ")
-            || preview.starts_with("var ")
-            || preview.starts_with("Object.defineProperty(exports")
-            || preview.starts_with("module.exports")
-            || preview.starts_with("require("))
-}
-
-fn resolve_guest_execution_cwd(vm: &VmState, value: Option<&str>) -> String {
-    value
-        .map(normalize_path)
-        .unwrap_or_else(|| vm.guest_cwd.clone())
-}
-
-fn resolve_execution_cwds(vm: &VmState, value: Option<&str>) -> (String, PathBuf, bool) {
-    if let Some(raw_cwd) = value {
-        let normalized_vm_host_cwd = normalize_host_path(&vm.host_cwd);
-        let requested_host_cwd = normalize_host_path(Path::new(raw_cwd));
-        if path_is_within_root(&requested_host_cwd, &normalized_vm_host_cwd) {
-            let relative = requested_host_cwd
-                .strip_prefix(&normalized_vm_host_cwd)
-                .unwrap_or_else(|_| Path::new(""));
-            let relative = relative.to_string_lossy().replace('\\', "/");
-            let guest_cwd = if relative.is_empty() {
-                String::from("/")
-            } else {
-                normalize_path(&format!("/{relative}"))
-            };
-            return (guest_cwd, requested_host_cwd, true);
-        }
-    }
-
-    let guest_cwd = resolve_guest_execution_cwd(vm, value);
-    let host_cwd = if value.is_none() {
-        vm.host_cwd.clone()
-    } else {
-        resolve_vm_guest_path_to_host(vm, &guest_cwd)
-    };
-    (guest_cwd, host_cwd, value.is_none())
-}
-
-fn resolve_vm_guest_path_to_host(vm: &VmState, guest_path: &str) -> PathBuf {
-    host_mount_path_for_guest_path(vm, guest_path)
-        .unwrap_or_else(|| shadow_path_for_guest(vm, guest_path))
-}
-
-fn shadow_path_for_guest(vm: &VmState, guest_path: &str) -> PathBuf {
-    let normalized = normalize_path(guest_path);
-    let relative = normalized.trim_start_matches('/');
-    if relative.is_empty() {
-        return vm.cwd.clone();
-    }
-    vm.cwd.join(relative)
-}
-
-fn apply_shell_cwd_prefix(command: &str, mut args: Vec<String>, guest_cwd: &str) -> Vec<String> {
-    if guest_cwd == "/" || !is_shell_command(command) {
-        return args;
-    }
-
-    let Some(flag) = args.first() else {
-        return args;
-    };
-    if !matches!(flag.as_str(), "-c" | "-lc") || args.len() < 2 {
-        return args;
-    }
-
-    let command_text = args[1].clone();
-    let quoted_cwd = shell_single_quote(guest_cwd);
-    args[1] = format!("cd {quoted_cwd} && {command_text}");
-    args
-}
-
-fn is_shell_command(command: &str) -> bool {
-    Path::new(command)
-        .file_name()
-        .and_then(|name| name.to_str())
-        .unwrap_or(command)
-        .trim_end_matches(".exe")
-        .eq("sh")
-        || Path::new(command)
-            .file_name()
-            .and_then(|name| name.to_str())
-            .unwrap_or(command)
-            .trim_end_matches(".exe")
-            .eq("bash")
-}
-
-fn shell_single_quote(value: &str) -> String {
-    if value.is_empty() {
-        return String::from("''");
-    }
-    format!("'{}'", value.replace('\'', "'\"'\"'"))
-}
-
-pub(crate) fn sync_active_process_host_writes_to_kernel(
-    vm: &mut VmState,
-) -> Result<(), SidecarError> {
-    if vm.root_filesystem_mode != RootFilesystemMode::ReadOnly {
-        let shadow_root = vm.cwd.clone();
-        sync_host_directory_tree_to_kernel(vm, &shadow_root, "/")?;
-    }
-
-    let normalized_vm_root = normalize_host_path(&vm.cwd);
-    let extra_roots = collect_active_process_host_sync_roots(vm, &normalized_vm_root);
-    for (host_cwd, guest_cwd) in extra_roots {
-        sync_host_directory_tree_to_kernel(vm, &host_cwd, &guest_cwd)?;
-    }
-
-    Ok(())
-}
-
-fn collect_active_process_host_sync_roots(
-    vm: &VmState,
-    normalized_vm_root: &Path,
-) -> Vec<(PathBuf, String)> {
-    let mut roots = Vec::new();
-    let mut seen = BTreeSet::new();
-
-    for process in vm.active_processes.values() {
-        collect_process_host_sync_roots(process, normalized_vm_root, &mut seen, &mut roots);
-    }
-
-    roots
-}
-
-fn collect_process_host_sync_roots(
-    process: &ActiveProcess,
-    normalized_vm_root: &Path,
-    seen: &mut BTreeSet<(PathBuf, String)>,
-    roots: &mut Vec<(PathBuf, String)>,
-) {
-    let normalized_host_cwd = normalize_host_path(&process.host_cwd);
-    if !path_is_within_root(&normalized_host_cwd, normalized_vm_root) {
-        let guest_cwd = normalize_path(&process.guest_cwd);
-        if seen.insert((normalized_host_cwd.clone(), guest_cwd.clone())) {
-            roots.push((normalized_host_cwd, guest_cwd));
-        }
-    }
-
-    for child in process.child_processes.values() {
-        collect_process_host_sync_roots(child, normalized_vm_root, seen, roots);
-    }
-}
-
-fn sync_process_host_writes_to_kernel(
-    vm: &mut VmState,
-    process: &ActiveProcess,
-) -> Result<(), SidecarError> {
-    if vm.root_filesystem_mode != RootFilesystemMode::ReadOnly {
-        let shadow_root = vm.cwd.clone();
-        sync_host_directory_tree_to_kernel(vm, &shadow_root, "/")?;
-    }
-
-    if !path_is_within_root(
-        &normalize_host_path(&process.host_cwd),
-        &normalize_host_path(&vm.cwd),
-    ) {
-        sync_host_directory_tree_to_kernel(vm, &process.host_cwd, &process.guest_cwd)?;
-    }
-
-    Ok(())
-}
-
-fn host_sync_root_is_filesystem_root(host_root: &Path) -> bool {
-    normalize_host_path(host_root) == Path::new("/")
-}
-
-fn sync_host_directory_tree_to_kernel(
-    vm: &mut VmState,
-    host_root: &Path,
-    guest_root: &str,
-) -> Result<(), SidecarError> {
-    let normalized_host_root = normalize_host_path(host_root);
-    let normalized_guest_root = normalize_path(guest_root);
-    if host_sync_root_is_filesystem_root(host_root) {
-        // A process tracked with host cwd "/" would pull the entire host
-        // filesystem into the kernel VFS (until the size/inode caps fire).
-        // No sanctioned flow shadows the host root wholesale; host access is
-        // scoped through mounts.
-        tracing::warn!("skipping host shadow sync rooted at the host filesystem root");
-        return Ok(());
-    }
-    let mut synced_file_times = BTreeMap::new();
-    sync_host_directory_tree_to_kernel_inner(
-        vm,
-        &normalized_host_root,
-        &normalized_host_root,
-        &normalized_guest_root,
-        &mut synced_file_times,
-    )
-}
-
-fn sync_host_directory_tree_to_kernel_inner(
-    vm: &mut VmState,
-    host_root: &Path,
-    current_host_dir: &Path,
-    guest_root: &str,
-    synced_file_times: &mut BTreeMap<(u64, u64), (u64, u64)>,
-) -> Result<(), SidecarError> {
-    let entries = match fs::read_dir(current_host_dir) {
-        Ok(entries) => entries,
-        Err(error) if error.kind() == std::io::ErrorKind::NotFound => return Ok(()),
-        Err(error) if error.kind() == std::io::ErrorKind::PermissionDenied => {
-            // Host dirs the sidecar user cannot read (e.g. root-owned
-            // /lost+found under a host-root mount) are skipped rather than
-            // failing the whole shadow sync; the guest just won't see them.
-            tracing::warn!(
-                path = %current_host_dir.display(),
-                "skipping unreadable host shadow directory"
-            );
-            return Ok(());
-        }
-        Err(error) => {
-            return Err(SidecarError::Io(format!(
-                "failed to read host shadow directory {}: {error}",
-                current_host_dir.display()
-            )));
-        }
-    };
-
-    for entry in entries {
-        let entry = entry.map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to read host shadow entry in {}: {error}",
-                current_host_dir.display()
-            ))
-        })?;
-        let host_path = entry.path();
-        let file_type = entry.file_type().map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to stat host shadow entry {}: {error}",
-                host_path.display()
-            ))
-        })?;
-        let relative_path = host_path
-            .strip_prefix(host_root)
-            .map_err(|error| {
-                SidecarError::InvalidState(format!(
-                    "failed to relativize host shadow path {} against {}: {error}",
-                    host_path.display(),
-                    host_root.display()
-                ))
-            })?
-            .to_string_lossy()
-            .replace('\\', "/");
-        let guest_path = if guest_root == "/" {
-            normalize_path(&format!("/{relative_path}"))
-        } else {
-            normalize_path(&format!(
-                "{}/{}",
-                guest_root.trim_end_matches('/'),
-                relative_path
-            ))
-        };
-
-        if should_skip_shadow_sync_path(vm, &guest_path) {
-            continue;
-        }
-
-        if file_type.is_dir() {
-            let metadata = entry.metadata().map_err(|error| {
-                SidecarError::Io(format!(
-                    "failed to read host shadow metadata {}: {error}",
-                    host_path.display()
-                ))
-            })?;
-            if !is_shadow_bootstrap_dir(&guest_path)
-                && !vm.kernel.exists(&guest_path).unwrap_or(false)
-            {
-                vm.kernel.mkdir(&guest_path, true).map_err(|error| {
-                    SidecarError::InvalidState(format!(
-                        "failed to sync host shadow directory {} to guest {}: {}",
-                        host_path.display(),
-                        guest_path,
-                        kernel_error(error)
-                    ))
-                })?;
-                vm.kernel
-                    .chmod(&guest_path, host_shadow_mode(&metadata))
-                    .map_err(|error| {
-                        SidecarError::InvalidState(format!(
-                            "failed to sync host shadow directory mode {} to guest {}: {}",
-                            host_path.display(),
-                            guest_path,
-                            kernel_error(error)
-                        ))
-                    })?;
-            }
-            sync_host_directory_tree_to_kernel_inner(
-                vm,
-                host_root,
-                &host_path,
-                guest_root,
-                synced_file_times,
-            )?;
-            continue;
-        }
-
-        if file_type.is_file() {
-            let metadata = entry.metadata().map_err(|error| {
-                SidecarError::Io(format!(
-                    "failed to read host shadow metadata {}: {error}",
-                    host_path.display()
-                ))
-            })?;
-            let timestamp_key = (metadata.dev(), metadata.ino());
-            let (atime_ms, mtime_ms) =
-                *synced_file_times.entry(timestamp_key).or_insert_with(|| {
-                    (
-                        metadata_time_ms(metadata.atime(), metadata.atime_nsec()),
-                        metadata_time_ms(metadata.mtime(), metadata.mtime_nsec()),
-                    )
-                });
-            let desired_mode = host_shadow_mode(&metadata);
-            // Fast path: skip the expensive re-read + re-write when the kernel already
-            // holds a copy of this shadow file that matches on size, mode, and mtime.
-            //
-            // Every read-side fs op (exists/stat/readFile/...) triggers a full
-            // shadow-tree reconciliation walk. Without this skip the walk re-reads every
-            // file's bytes from the host and re-writes them into the kernel VFS on every
-            // op -- O(whole tree) per op, and super-linear as the VM's shadow grows,
-            // which is a dominant source of session-creation/runtime latency on
-            // populated VMs.
-            //
-            // This is a (size, mode, mtime) quick-check, the same heuristic rsync uses
-            // by default. It needs no separate cache to invalidate -- it compares against
-            // the kernel's own stat, so a kernel reset (e.g. a layer swap) or any host
-            // change that moves size/mode/mtime forces a resync. Limitation: mtime is
-            // compared at the millisecond granularity the kernel stores (utimes truncates
-            // to ms), so a host-side rewrite that preserves byte length AND mode AND lands
-            // in the same wall-clock millisecond can be skipped and leave stale bytes.
-            // That window is sub-millisecond same-length edits; if it ever matters here,
-            // upgrade this to a content digest (or full-precision mtime) for files whose
-            // mtime is within the last few ms of `now`.
-            if let Ok(existing) = vm.kernel.lstat(&guest_path) {
-                if !existing.is_directory
-                    && !existing.is_symbolic_link
-                    && existing.size == metadata.len()
-                    && (existing.mode & 0o7777) == (desired_mode & 0o7777)
-                    && existing.mtime_ms == mtime_ms
-                {
-                    continue;
-                }
-            }
-            let bytes = match read_host_shadow_file(&host_path, desired_mode) {
-                Ok(bytes) => bytes,
-                // The host entry vanished between the walk and the read
-                // (short-lived files churn constantly — editor swap files,
-                // temp files). Skipping matches native semantics; failing
-                // here would poison EVERY subsequent fs op on the VM.
-                Err(error) if error.kind() == std::io::ErrorKind::NotFound => continue,
-                // Same tolerance for entries the sidecar user cannot read
-                // (root-owned files under a host-root mount): skip them
-                // rather than poisoning the whole sync.
-                Err(error)
-                    if error.kind() == std::io::ErrorKind::PermissionDenied
-                        || error.raw_os_error() == Some(libc::EPERM) =>
-                {
-                    tracing::warn!(
-                        path = %host_path.display(),
-                        "skipping unreadable host shadow file"
-                    );
-                    continue;
-                }
-                Err(error) => {
-                    return Err(SidecarError::Io(format!(
-                        "failed to read host shadow file {}: {error}",
-                        host_path.display()
-                    )));
-                }
-            };
-            match vm.kernel.write_file(&guest_path, bytes) {
-                Ok(()) => {}
-                // ENOENT here means the guest-side path cannot currently
-                // receive the write (e.g. it is a symlink whose target was
-                // just unlinked by the guest — vim's swap-file dance). The
-                // entry is mid-churn; skip it rather than failing the VM.
-                Err(error) if error.code() == "ENOENT" => continue,
-                Err(error) => {
-                    return Err(SidecarError::InvalidState(format!(
-                        "failed to sync host shadow file {} to guest {}: {}",
-                        host_path.display(),
-                        guest_path,
-                        kernel_error(error)
-                    )));
-                }
-            }
-            vm.kernel
-                .chmod(&guest_path, desired_mode)
-                .map_err(|error| {
-                    SidecarError::InvalidState(format!(
-                        "failed to sync host shadow file mode {} to guest {}: {}",
-                        host_path.display(),
-                        guest_path,
-                        kernel_error(error)
-                    ))
-                })?;
-            vm.kernel
-                .utimes(&guest_path, atime_ms, mtime_ms)
-                .map_err(|error| {
-                    SidecarError::InvalidState(format!(
-                        "failed to sync host shadow file times {} to guest {}: {}",
-                        host_path.display(),
-                        guest_path,
-                        kernel_error(error)
-                    ))
-                })?;
-            continue;
-        }
-
-        if file_type.is_symlink() {
-            let target = match fs::read_link(&host_path) {
-                Ok(target) => target,
-                Err(error) if error.kind() == std::io::ErrorKind::NotFound => continue,
-                Err(error) => {
-                    return Err(SidecarError::Io(format!(
-                        "failed to read host shadow symlink {}: {error}",
-                        host_path.display()
-                    )));
-                }
-            };
-            replace_kernel_symlink(vm, &guest_path, &target.to_string_lossy())?;
-        }
-    }
-
-    Ok(())
-}
-
-fn replace_kernel_symlink(
-    vm: &mut VmState,
-    guest_path: &str,
-    target: &str,
-) -> Result<(), SidecarError> {
-    if vm.kernel.symlink(target, guest_path).is_ok() {
-        return Ok(());
-    }
-
-    if let Ok(existing_target) = vm.kernel.read_link(guest_path) {
-        if existing_target == target {
-            return Ok(());
-        }
-    }
-
-    let _ = vm.kernel.remove_file(guest_path);
-    let _ = vm.kernel.remove_dir(guest_path);
-    vm.kernel
-        .symlink(target, guest_path)
-        .map_err(kernel_error)?;
-    Ok(())
-}
-
-fn host_shadow_mode(metadata: &fs::Metadata) -> u32 {
-    metadata.permissions().mode() & 0o7777
-}
-
-/// Reads a shadow-root file back into the kernel even when guest-visible mode
-/// bits make it unreadable for the host user. The sidecar is the kernel for
-/// this tree, so guest permission bits (for example a 0o200 write-only file
-/// produced by `chmod` plus a shell append redirect) must not break the
-/// exit-time shadow sync. The original mode is restored after the read.
-fn read_host_shadow_file(host_path: &Path, mode: u32) -> std::io::Result<Vec<u8>> {
-    match fs::read(host_path) {
-        Ok(bytes) => Ok(bytes),
-        Err(error) if error.kind() == std::io::ErrorKind::PermissionDenied => {
-            fs::set_permissions(host_path, fs::Permissions::from_mode(mode | 0o400))?;
-            let result = fs::read(host_path);
-            fs::set_permissions(host_path, fs::Permissions::from_mode(mode))?;
-            result
-        }
-        Err(error) => Err(error),
-    }
-}
-
-fn metadata_time_ms(seconds: i64, nanos: i64) -> u64 {
-    let seconds = seconds.max(0) as u64;
-    let nanos = nanos.max(0) as u64;
-    seconds
-        .saturating_mul(1_000)
-        .saturating_add(nanos / 1_000_000)
-}
-
-fn is_shadow_bootstrap_dir(path: &str) -> bool {
-    matches!(
-        path,
-        "/dev"
-            | "/proc"
-            | "/tmp"
-            | "/bin"
-            | "/lib"
-            | "/sbin"
-            | "/boot"
-            | "/etc"
-            | "/root"
-            | "/run"
-            | "/srv"
-            | "/sys"
-            | "/opt"
-            | "/mnt"
-            | "/media"
-            | "/home"
-            | "/home/agentos"
-            | "/usr"
-            | "/usr/bin"
-            | "/usr/games"
-            | "/usr/include"
-            | "/usr/lib"
-            | "/usr/libexec"
-            | "/usr/man"
-            | "/usr/local"
-            | "/usr/local/bin"
-            | "/usr/sbin"
-            | "/usr/share"
-            | "/usr/share/man"
-            | "/var"
-            | "/var/cache"
-            | "/var/empty"
-            | "/var/lib"
-            | "/var/lock"
-            | "/var/log"
-            | "/var/run"
-            | "/var/spool"
-            | "/var/tmp"
-            | "/etc/agentos"
-            | "/workspace"
-    )
-}
-
-#[cfg(test)]
-mod shadow_sync_tests {
-    use super::{is_protected_agentos_shadow_sync_path, is_shadow_bootstrap_dir};
-
-    #[test]
-    fn shadow_bootstrap_sync_skips_virtual_home_tree() {
-        assert!(is_shadow_bootstrap_dir("/home"));
-        assert!(is_shadow_bootstrap_dir("/home/agentos"));
-    }
-
-    #[test]
-    fn protected_agentos_paths_are_not_shadow_synced() {
-        assert!(is_protected_agentos_shadow_sync_path("/etc/agentos"));
-        assert!(is_protected_agentos_shadow_sync_path(
-            "/etc/agentos/instructions.md"
-        ));
-        assert!(!is_protected_agentos_shadow_sync_path("/etc/agentos-copy"));
-        assert!(!is_protected_agentos_shadow_sync_path("/etc/agentos.md"));
-    }
-}
-
-fn is_kernel_owned_shadow_sync_path(path: &str) -> bool {
-    matches!(path, "/dev" | "/proc" | "/sys")
-        || path.starts_with("/dev/")
-        || path.starts_with("/proc/")
-        || path.starts_with("/sys/")
-}
-
-pub(crate) fn is_protected_agentos_shadow_sync_path(path: &str) -> bool {
-    path == "/etc/agentos" || path.starts_with("/etc/agentos/")
-}
-
-fn should_skip_shadow_sync_path(vm: &VmState, guest_path: &str) -> bool {
-    is_kernel_owned_shadow_sync_path(guest_path)
-        || is_protected_agentos_shadow_sync_path(guest_path)
-        // agentOS package content is served guest-native from read-only tar
-        // mounts; it is already present in the guest and cannot be written, so a
-        // host->guest shadow sync would fail with EROFS. Skip it.
-        || guest_path_is_within_agentos_package_mount(vm, guest_path)
-        || host_mount_path_for_guest_path_from_mounts(&vm.configuration.mounts, guest_path)
-            .is_some()
-}
-
-fn resolve_path_like_guest_specifier(cwd: &str, specifier: &str) -> String {
-    if specifier.starts_with("file://") {
-        normalize_path(specifier.trim_start_matches("file://"))
-    } else if specifier.starts_with("file:") {
-        normalize_path(specifier.trim_start_matches("file:"))
-    } else if specifier.starts_with('/') {
-        normalize_path(specifier)
-    } else {
-        normalize_path(&format!("{cwd}/{specifier}"))
-    }
-}
-
-fn guest_entrypoint_for_specifier(cwd: &str, specifier: &str) -> Option<String> {
-    is_path_like_specifier(specifier).then(|| resolve_path_like_guest_specifier(cwd, specifier))
-}
-
-fn is_node_runtime_command(command: &str) -> bool {
-    matches!(command, "node" | "npm" | "npx")
-        || Path::new(command)
-            .file_name()
-            .and_then(|name| name.to_str())
-            .is_some_and(|name| matches!(name, "node" | "npm" | "npx"))
-}
-
-fn python_command_base_name(command: &str) -> &str {
-    Path::new(command)
-        .file_name()
-        .and_then(|name| name.to_str())
-        .unwrap_or(command)
-}
-
-/// `python` / `python3` (and `pip` / `pip3`, which map to `python -m pip`) are
-/// served by the embedded Pyodide runtime, mirroring how `node` is served by the
-/// embedded V8 runtime.
-fn is_python_runtime_command(command: &str) -> bool {
-    matches!(
-        python_command_base_name(command),
-        "python" | "python3" | "pip" | "pip3"
-    )
-}
-
-/// Parse a `python` / `pip` command line into a Pyodide execution. Supports the
-/// CPython program selectors `-c CODE`, `-m MODULE`, a `SCRIPT` path, `-` /
-/// piped stdin programs, and a bare interpreter (interactive REPL). The chosen
-/// mode plus `sys.argv` are forwarded to the runner as `AGENTOS_PYTHON_*` control
-/// env, which the runner consumes and never exposes in the guest `os.environ`.
-fn resolve_python_command_execution(
-    vm: &VmState,
-    command: &str,
-    args: &[String],
-    mut env: BTreeMap<String, String>,
-    guest_cwd: String,
-    host_cwd: PathBuf,
-) -> Result<ResolvedChildProcessExecution, SidecarError> {
-    let base_name = python_command_base_name(command);
-    let is_pip = matches!(base_name, "pip" | "pip3");
-
-    let mut entrypoint = String::new();
-    let mut argv: Vec<String> = Vec::new();
-    let mut module: Option<String> = None;
-    let mut stdin_program = false;
-    let mut interactive = false;
-    let mut guest_entrypoint: Option<String> = None;
-
-    if is_pip {
-        module = Some(String::from("pip"));
-        argv.push(String::from("pip"));
-        argv.extend(args.iter().cloned());
-    } else {
-        // Skip the value-less interpreter flags we can safely ignore so they do
-        // not get mistaken for a script path.
-        let mut idx = 0;
-        while let Some(flag) = args.get(idx) {
-            match flag.as_str() {
-                "-B" | "-E" | "-I" | "-O" | "-OO" | "-q" | "-s" | "-S" | "-u" | "-v" | "-b"
-                | "-d" | "-x" => idx += 1,
-                _ => break,
-            }
-        }
-        let rest = &args[idx..];
-        match rest.first().map(String::as_str) {
-            Some("-c") => {
-                entrypoint = rest.get(1).cloned().ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("argument expected for the -c option"))
-                })?;
-                argv.push(String::from("-c"));
-                argv.extend(rest.iter().skip(2).cloned());
-            }
-            Some("-m") => {
-                let name = rest.get(1).cloned().ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("argument expected for the -m option"))
-                })?;
-                module = Some(name);
-                argv.push(String::from("-m"));
-                argv.extend(rest.iter().skip(2).cloned());
-            }
-            Some("-") => {
-                stdin_program = true;
-                argv.push(String::from("-"));
-                argv.extend(rest.iter().skip(1).cloned());
-            }
-            Some(spec) if !spec.starts_with('-') => {
-                let resolved_guest = guest_entrypoint_for_specifier(&guest_cwd, spec)
-                    .unwrap_or_else(|| spec.to_string());
-                entrypoint = resolved_guest.clone();
-                env.insert(String::from("AGENTOS_PYTHON_FILE"), resolved_guest.clone());
-                guest_entrypoint = Some(resolved_guest);
-                argv.push(spec.to_string());
-                argv.extend(rest.iter().skip(1).cloned());
-            }
-            Some(other) => {
-                return Err(SidecarError::InvalidState(format!(
-                    "unsupported python option: {other}"
-                )));
-            }
-            None => {
-                interactive = true;
-                argv.push(String::new());
-            }
-        }
-    }
-
-    env.insert(
-        String::from("AGENTOS_PYTHON_ARGV"),
-        serde_json::to_string(&argv).unwrap_or_else(|_| String::from("[]")),
-    );
-    if let Some(module) = &module {
-        env.insert(String::from("AGENTOS_PYTHON_MODULE"), module.clone());
-    }
-    if stdin_program {
-        env.insert(
-            String::from("AGENTOS_PYTHON_STDIN_PROGRAM"),
-            String::from("1"),
-        );
-    }
-    if interactive {
-        env.insert(
-            String::from("AGENTOS_PYTHON_INTERACTIVE"),
-            String::from("1"),
-        );
-    }
-
-    prepare_guest_runtime_env(vm, &mut env, &guest_cwd, &host_cwd, guest_entrypoint)?;
-
-    Ok(ResolvedChildProcessExecution {
-        command: String::from(PYTHON_COMMAND),
-        process_args: std::iter::once(command.to_owned())
-            .chain(args.iter().cloned())
-            .collect(),
-        runtime: GuestRuntimeKind::Python,
-        entrypoint,
-        execution_args: args.to_vec(),
-        env,
-        guest_cwd,
-        host_cwd,
-        wasm_permission_tier: None,
-        tool_command: false,
-    })
-}
-
-fn resolve_special_node_cli_invocation(
-    args: &[String],
-    env: &mut BTreeMap<String, String>,
-) -> Option<(String, Vec<String>)> {
-    let first = args.first()?;
-    match first.as_str() {
-        "-e" | "--eval" => {
-            env.insert(
-                String::from("AGENTOS_NODE_EVAL"),
-                args.get(1).cloned().unwrap_or_default(),
-            );
-            Some((first.clone(), args.iter().skip(2).cloned().collect()))
-        }
-        "-v" | "--version" => {
-            env.insert(
-                String::from("AGENTOS_NODE_EVAL"),
-                String::from("console.log(process.version);"),
-            );
-            Some((String::from("-e"), args.to_vec()))
-        }
-        _ => None,
-    }
-}
-
-fn node_runtime_command_name(command: &str) -> Option<&str> {
-    let name = Path::new(command)
-        .file_name()
-        .and_then(|name| name.to_str())?;
-    matches!(name, "node" | "npm" | "npx").then_some(name)
-}
-
-struct ResolvedHostNodeCliEntrypoint {
-    command_name: String,
-    guest_root: String,
-    guest_entrypoint: String,
-    package_root: PathBuf,
-}
-
-fn resolve_host_node_cli_entrypoint(command: &str) -> Option<ResolvedHostNodeCliEntrypoint> {
-    let command_name = node_runtime_command_name(command)?;
-    if !matches!(command_name, "npm" | "npx") {
-        return None;
-    }
-
-    let path = std::env::var_os("PATH")?;
-    for root in std::env::split_paths(&path) {
-        let candidate = root.join(command_name);
-        if !candidate.is_file() {
-            continue;
-        }
-        let entrypoint = candidate.canonicalize().ok().unwrap_or(candidate);
-        let package_root = entrypoint.parent()?.parent()?.to_path_buf();
-        let guest_root = format!("/__secure_exec/node-runtime/{command_name}");
-        let relative_entrypoint = entrypoint.strip_prefix(&package_root).ok()?;
-        let guest_entrypoint = normalize_path(&format!(
-            "{guest_root}/{}",
-            relative_entrypoint.to_string_lossy().replace('\\', "/")
-        ));
-        return Some(ResolvedHostNodeCliEntrypoint {
-            command_name: command_name.to_owned(),
-            guest_root,
-            guest_entrypoint,
-            package_root,
-        });
-    }
-
-    None
-}
-
-fn build_host_node_cli_eval(cli: &ResolvedHostNodeCliEntrypoint) -> String {
-    let guest_npm_main = normalize_path(&format!("{}/lib/npm.js", cli.guest_root));
-    let guest_npm_cli = normalize_path(&format!("{}/bin/npm-cli.js", cli.guest_root));
-    let guest_package_json = normalize_path(&format!("{}/package.json", cli.guest_root));
-    let guest_display_module = normalize_path(&format!("{}/lib/utils/display.js", cli.guest_root));
-    let guest_log_file_module =
-        normalize_path(&format!("{}/lib/utils/log-file.js", cli.guest_root));
-    let debug_preamble = "const __agentOSDebugNpmCli = !!process.env.CODEX_DEBUG_NPM_CLI; const __agentOSDebugLog = (...args) => { if (__agentOSDebugNpmCli) { console.error('[secure-exec npm debug]', ...args); } }; const __agentOSIsProcessExitError = (error) => !!(error && typeof error === 'object' && (error._isProcessExit === true || error.name === 'ProcessExitError')); const __agentOSResolveExitCode = (code) => Number.isFinite(code) ? code : (Number.isFinite(process.exitCode) ? process.exitCode : 0); const __agentOSFinish = (code) => { process.exitCode = __agentOSResolveExitCode(code); }; if (__agentOSDebugNpmCli) { const __agentOSWrapAsyncFsMethod = (__agentOSTarget, __agentOSMethod) => { const __agentOSOriginal = __agentOSTarget[__agentOSMethod]; if (typeof __agentOSOriginal !== 'function' || __agentOSOriginal.__agentOSDebugWrapped) { return; } const __agentOSWrapped = async (...args) => { const target = args.length > 0 ? args[0] : '<none>'; __agentOSDebugLog(`fs.${__agentOSMethod}:start`, String(target)); try { const result = await __agentOSOriginal.apply(__agentOSTarget, args); __agentOSDebugLog(`fs.${__agentOSMethod}:done`, String(target)); return result; } catch (error) { __agentOSDebugLog(`fs.${__agentOSMethod}:error`, String(target), error && error.stack ? error.stack : String(error)); throw error; } }; __agentOSWrapped.__agentOSDebugWrapped = true; __agentOSTarget[__agentOSMethod] = __agentOSWrapped; }; const __agentOSWrapSyncFsMethod = (__agentOSTarget, __agentOSMethod) => { const __agentOSOriginal = __agentOSTarget[__agentOSMethod]; if (typeof __agentOSOriginal !== 'function' || __agentOSOriginal.__agentOSDebugWrapped) { return; } const __agentOSWrapped = (...args) => { const target = args.length > 0 ? args[0] : '<none>'; __agentOSDebugLog(`fs.${__agentOSMethod}:start`, String(target)); try { const result = __agentOSOriginal.apply(__agentOSTarget, args); __agentOSDebugLog(`fs.${__agentOSMethod}:done`, String(target)); return result; } catch (error) { __agentOSDebugLog(`fs.${__agentOSMethod}:error`, String(target), error && error.stack ? error.stack : String(error)); throw error; } }; __agentOSWrapped.__agentOSDebugWrapped = true; __agentOSTarget[__agentOSMethod] = __agentOSWrapped; }; const __agentOSFsPromiseModules = [require('fs/promises'), require('node:fs/promises')]; for (const __agentOSFsPromises of __agentOSFsPromiseModules) { for (const __agentOSMethod of ['access', 'lstat', 'mkdir', 'open', 'readFile', 'readdir', 'readlink', 'realpath', 'rename', 'rm', 'rmdir', 'stat', 'symlink', 'unlink', 'writeFile']) { __agentOSWrapAsyncFsMethod(__agentOSFsPromises, __agentOSMethod); } } const __agentOSFsModules = [require('fs'), require('node:fs')]; for (const __agentOSFs of __agentOSFsModules) { for (const __agentOSMethod of ['accessSync', 'existsSync', 'lstatSync', 'mkdirSync', 'openSync', 'readFileSync', 'readdirSync', 'readlinkSync', 'realpathSync', 'renameSync', 'rmSync', 'rmdirSync', 'statSync', 'symlinkSync', 'unlinkSync', 'writeFileSync']) { __agentOSWrapSyncFsMethod(__agentOSFs, __agentOSMethod); } } }";
-    let display_stub = format!(
-        "const __agentOSDisplayModulePath = require.resolve({display_module}); const __agentOSLogFileModulePath = require.resolve({log_file_module}); const __agentOSColorPassthrough = new Proxy((value) => value, {{ get: () => __agentOSColorPassthrough, apply: (_target, _thisArg, args) => args[0] }}); class __AgentOSNpmDisplayStub {{ constructor() {{ this.chalk = {{ noColor: __agentOSColorPassthrough, stdout: __agentOSColorPassthrough, stderr: __agentOSColorPassthrough }}; this._logPaused = true; this._logBuffer = []; this._outputBuffer = []; this._write = (stream, values) => {{ if (!Array.isArray(values) || values.length === 0) {{ return; }} const text = values.map((value) => typeof value === 'string' ? value : String(value)).join(' '); if (text.length === 0) {{ return; }} const normalized = text.replace(/\\r\\n/g, '\\n'); if (/^\\n?> npx\\n> /u.test(normalized)) {{ return; }} stream.write(text.endsWith('\\n') ? text : `${{text}}\\n`); }}; this._inputHandler = (level, ...args) => {{ if (level !== 'read') {{ return; }} const [resolve, reject, callback] = args; Promise.resolve().then(() => callback()).then(resolve, reject); }}; this._logHandler = (level, ...args) => {{ if (level === 'resume') {{ this._logPaused = false; for (const entry of this._logBuffer.splice(0)) {{ this._write(process.stderr, entry); }} return; }} if (level === 'pause') {{ this._logPaused = true; return; }} if (this._logPaused) {{ this._logBuffer.push(args); return; }} this._write(process.stderr, args); }}; this._outputHandler = (level, ...args) => {{ if (level === 'buffer') {{ this._outputBuffer.push(['standard', args]); return; }} if (level === 'flush') {{ for (const [bufferLevel, bufferArgs] of this._outputBuffer.splice(0)) {{ this._write(bufferLevel === 'error' ? process.stderr : process.stdout, bufferArgs); }} return; }} this._write(level === 'error' ? process.stderr : process.stdout, args); }}; process.on('input', this._inputHandler); process.on('log', this._logHandler); process.on('output', this._outputHandler); }} async load() {{ process.emit('log', 'resume'); process.emit('output', 'flush'); }} off() {{ if (this._inputHandler) {{ process.off('input', this._inputHandler); }} if (this._logHandler) {{ process.off('log', this._logHandler); }} if (this._outputHandler) {{ process.off('output', this._outputHandler); }} this._logBuffer.length = 0; this._outputBuffer.length = 0; }} }} class __AgentOSNpmLogFileStub {{ constructor() {{ this.files = []; }} async load() {{ return []; }} off() {{}} }} globalThis._moduleCache[__agentOSDisplayModulePath] = {{ exports: __AgentOSNpmDisplayStub }}; globalThis._moduleCache[__agentOSLogFileModulePath] = {{ exports: __AgentOSNpmLogFileStub }};",
-        display_module = serde_json::to_string(&guest_display_module)
-            .unwrap_or_else(|_| format!("\"{guest_display_module}\"")),
-        log_file_module = serde_json::to_string(&guest_log_file_module)
-            .unwrap_or_else(|_| format!("\"{guest_log_file_module}\"")),
-    );
-    let registry_fetch_stub = "const { createRequire: __agentOSCreateRequire } = require('module'); const __agentOSNpmRequire = __agentOSCreateRequire(require.resolve(__AGENTOS_NPM_MAIN__)); try { const __agentOSMinipassFetchPath = __agentOSNpmRequire.resolve('minipass-fetch'); const __agentOSMinipassFetch = __agentOSNpmRequire(__agentOSMinipassFetchPath); const { FetchError: __agentOSFetchError, Headers: __agentOSFetchHeaders, Request: __agentOSFetchRequest, Response: __agentOSFetchResponse, AbortError: __agentOSAbortError } = __agentOSMinipassFetch; const { Minipass: __agentOSMinipass } = __agentOSNpmRequire('minipass'); const __agentOSCreateBinaryMinipass = () => new __agentOSMinipass({ objectMode: false, encoding: null }); const __agentOSCloneBuffer = (buffer) => Buffer.isBuffer(buffer) ? Buffer.from(buffer) : Buffer.from(buffer ?? []); const __agentOSBufferToArrayBuffer = (buffer) => { const bytes = __agentOSCloneBuffer(buffer); return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength); }; const __agentOSAttachBufferedBodyMethods = (response, responseBuffer) => { const __agentOSReadBuffer = async () => __agentOSCloneBuffer(responseBuffer); response.__agentOSBufferedBody = __agentOSCloneBuffer(responseBuffer); response.buffer = __agentOSReadBuffer; response.text = async () => (await __agentOSReadBuffer()).toString('utf8'); response.json = async () => JSON.parse(await response.text()); response.arrayBuffer = async () => __agentOSBufferToArrayBuffer(await __agentOSReadBuffer()); response.clone = () => { const clonedBody = __agentOSCreateBinaryMinipass(); const clonedBuffer = __agentOSCloneBuffer(responseBuffer); clonedBody.end(clonedBuffer); const clonedResponse = new __agentOSFetchResponse(clonedBody, { url: response.url, status: response.status, statusText: response.statusText, headers: response.headers, size: response.size, timeout: response.timeout, counter: response.counter, trailer: response.trailer }); return __agentOSAttachBufferedBodyMethods(clonedResponse, clonedBuffer); }; return response; }; const __agentOSNormalizeHeaders = (__agentOSHeaders) => { const normalized = {}; __agentOSHeaders.forEach((value, key) => { if (normalized[key] === undefined) { normalized[key] = value; return; } if (Array.isArray(normalized[key])) { normalized[key].push(value); return; } normalized[key] = [normalized[key], value]; }); return normalized; }; const __agentOSPatchedMinipassFetch = async (input, opts = {}) => { const request = input instanceof __agentOSFetchRequest ? input : new __agentOSFetchRequest(input, opts); const __agentOSController = !request.signal && typeof AbortController === 'function' ? new AbortController() : null; const __agentOSSignal = request.signal ?? __agentOSController?.signal; let __agentOSTimer = null; if (__agentOSController && Number.isFinite(request.timeout) && request.timeout > 0) { __agentOSTimer = setTimeout(() => __agentOSController.abort(new Error(`network timeout at: ${request.url}`)), request.timeout); __agentOSTimer.unref?.(); } try { const requestHeaders = {}; request.headers.forEach((value, key) => { requestHeaders[key] = value; }); const response = await fetch(request.url, { method: request.method, headers: requestHeaders, body: request.body ?? undefined, redirect: request.redirect ?? opts.redirect ?? 'follow', signal: __agentOSSignal, ...(request.body ? { duplex: 'half' } : {}) }); const responseBody = __agentOSCreateBinaryMinipass(); const contentType = String(response.headers.get('content-type') || '').toLowerCase(); const responseBuffer = contentType.includes('json') ? Buffer.from(JSON.stringify(await response.json())) : contentType.startsWith('text/') ? Buffer.from(await response.text()) : Buffer.from(await response.arrayBuffer()); responseBody.end(responseBuffer); return __agentOSAttachBufferedBodyMethods(new __agentOSFetchResponse(responseBody, { url: response.url, status: response.status, statusText: response.statusText, headers: __agentOSNormalizeHeaders(response.headers), size: request.size, timeout: request.timeout, counter: request.counter ?? opts.counter ?? 0, trailer: Promise.resolve(new __agentOSFetchHeaders()) }), responseBuffer); } catch (error) { if (error instanceof Error) { throw error; } throw new __agentOSFetchError(String(error), 'system', error); } finally { if (__agentOSTimer) { clearTimeout(__agentOSTimer); } } }; globalThis.__agentOSPatchedMinipassFetch = __agentOSPatchedMinipassFetch; __agentOSPatchedMinipassFetch.isRedirect = typeof __agentOSMinipassFetch.isRedirect === 'function' ? __agentOSMinipassFetch.isRedirect.bind(__agentOSMinipassFetch) : (code) => code === 301 || code === 302 || code === 303 || code === 307 || code === 308; __agentOSPatchedMinipassFetch.FetchError = __agentOSFetchError; __agentOSPatchedMinipassFetch.Headers = __agentOSFetchHeaders; __agentOSPatchedMinipassFetch.Request = __agentOSFetchRequest; __agentOSPatchedMinipassFetch.Response = __agentOSFetchResponse; __agentOSPatchedMinipassFetch.AbortError = __agentOSAbortError; globalThis._moduleCache[__agentOSMinipassFetchPath] = { exports: __agentOSPatchedMinipassFetch }; __agentOSDebugLog('patched-minipass-fetch', __agentOSMinipassFetchPath); const __agentOSCheckResponsePath = __agentOSNpmRequire.resolve('npm-registry-fetch/lib/check-response.js'); const __agentOSCheckResponse = __agentOSNpmRequire(__agentOSCheckResponsePath); const __agentOSEnsureResponseBodyStream = (response) => { if (!response || (response.body && typeof response.body.on === 'function')) { return response; } const body = __agentOSCreateBinaryMinipass(); const finishWithError = (error) => body.emit('error', error instanceof Error ? error : new Error(String(error))); try { if (typeof response.buffer === 'function') { Promise.resolve(response.buffer()).then((buffer) => body.end(buffer), finishWithError); } else if (Buffer.isBuffer(response.body) || typeof response.body === 'string') { body.end(response.body); } else if (response.body && typeof response.body[Symbol.asyncIterator] === 'function') { (async () => { try { for await (const chunk of response.body) { body.write(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk)); } body.end(); } catch (error) { finishWithError(error); body.end(); } })(); } else { body.end(); } } catch (error) { finishWithError(error); body.end(); } return new __agentOSFetchResponse(body, response); }; globalThis._moduleCache[__agentOSCheckResponsePath] = { exports: (payload) => { const normalized = { ...payload, res: __agentOSEnsureResponseBodyStream(payload.res) }; __agentOSDebugLog('check-response-body', normalized.res && normalized.res.status, typeof (normalized.res && normalized.res.body), normalized.res && normalized.res.body && typeof normalized.res.body.on, normalized.res && normalized.res.body && normalized.res.body.constructor && normalized.res.body.constructor.name, !!(normalized.res && normalized.res.__agentOSBufferedBody), normalized.res && typeof normalized.res.json); return __agentOSCheckResponse(normalized); } }; __agentOSDebugLog('patched-check-response', __agentOSCheckResponsePath); } catch (error) { __agentOSDebugLog('patch-minipass-fetch-failed', error && error.stack ? error.stack : String(error)); } try { const __agentOSRegistryFetchPath = __agentOSNpmRequire.resolve('npm-registry-fetch'); const __agentOSRegistryFetch = __agentOSNpmRequire(__agentOSRegistryFetchPath); const __agentOSWrapRegistryFetch = (fn) => { const wrapResult = (promise) => Promise.resolve(promise).then((res) => { __agentOSDebugLog('registry-fetch-result', res && res.status, typeof (res && res.body), res && res.body && typeof res.body.on, res && res.body && res.body.constructor && res.body.constructor.name, !!(res && res.__agentOSBufferedBody), res && typeof res.json); return res; }); const wrapped = (uri, opts = {}) => wrapResult(globalThis.__agentOSPatchedMinipassFetch(uri, { method: opts.method, headers: opts.headers, body: opts.body, redirect: opts.redirect, signal: opts.signal, timeout: opts.timeout, size: opts.size, counter: opts.counter })); if (typeof fn.json === 'function') { wrapped.json = (uri, opts = {}) => wrapped(uri, opts).then((res) => res.json()); } if (fn.json && typeof fn.json.stream === 'function') { wrapped.json = wrapped.json || {}; wrapped.json.stream = (uri, path, opts = {}) => fn.json.stream(uri, path, { ...opts, agent: false }); } if (typeof fn.pickRegistry === 'function') { wrapped.pickRegistry = fn.pickRegistry.bind(fn); } if (typeof fn.getAuth === 'function') { wrapped.getAuth = fn.getAuth.bind(fn); } return wrapped; }; globalThis._moduleCache[__agentOSRegistryFetchPath] = { exports: __agentOSWrapRegistryFetch(__agentOSRegistryFetch) }; __agentOSDebugLog('patched-npm-registry-fetch', __agentOSRegistryFetchPath); } catch (error) { __agentOSDebugLog('patch-npm-registry-fetch-failed', error && error.stack ? error.stack : String(error)); }";
-    match cli.command_name.as_str() {
-        "npx" => format!(
-            "{debug_preamble} {display_stub} {registry_fetch_stub} process.argv[1] = require.resolve({npm_cli}); process.argv.splice(2, 0, 'exec'); __agentOSDebugLog('argv', JSON.stringify(process.argv), 'cwd', process.cwd()); (async () => {{ const pkg = require({package_json}); if (process.argv.includes('--version') || process.argv.includes('-v')) {{ __agentOSDebugLog('version-shortcut'); console.log(pkg.version); __agentOSFinish(0); return; }} const Npm = require({npm_main}); const npm = new Npm(); __agentOSDebugLog('before-load'); const loaded = await npm.load(); __agentOSDebugLog('after-load', loaded && loaded.command, JSON.stringify(loaded && loaded.args)); if (!loaded.exec) {{ __agentOSDebugLog('no-exec'); __agentOSFinish(); return; }} if (!loaded.command) {{ __agentOSDebugLog('no-command'); const {{ output }} = require('proc-log'); output.standard(npm.usage); __agentOSFinish(1); return; }} __agentOSDebugLog('before-exec', loaded.command, JSON.stringify(loaded.args)); await npm.exec(loaded.command, loaded.args); __agentOSDebugLog('after-exec', __agentOSResolveExitCode()); __agentOSFinish(); }})().catch((error) => {{ if (__agentOSIsProcessExitError(error)) {{ __agentOSDebugLog('process-exit-error', __agentOSResolveExitCode(error.code)); __agentOSFinish(error.code); return; }} console.error(error && error.stack ? error.stack : String(error)); __agentOSFinish(error && typeof error === 'object' && Number.isFinite(error.exitCode) ? error.exitCode : 1); }});",
-            debug_preamble = debug_preamble,
-            display_stub = display_stub,
-            registry_fetch_stub = registry_fetch_stub.replace(
-                "__AGENTOS_NPM_MAIN__",
-                &serde_json::to_string(&guest_npm_main)
-                    .unwrap_or_else(|_| format!("\"{guest_npm_main}\"")),
-            ),
-            npm_main = serde_json::to_string(&guest_npm_main)
-                .unwrap_or_else(|_| format!("\"{guest_npm_main}\"")),
-            npm_cli = serde_json::to_string(&guest_npm_cli)
-                .unwrap_or_else(|_| format!("\"{guest_npm_cli}\"")),
-            package_json = serde_json::to_string(&guest_package_json)
-                .unwrap_or_else(|_| format!("\"{guest_package_json}\"")),
-        ),
-        _ => format!(
-            "{debug_preamble} {display_stub} {registry_fetch_stub} __agentOSDebugLog('argv', JSON.stringify(process.argv), 'cwd', process.cwd()); (async () => {{ const pkg = require({package_json}); if (process.argv.includes('--version') || process.argv.includes('-v')) {{ __agentOSDebugLog('version-shortcut'); console.log(pkg.version); __agentOSFinish(0); return; }} const Npm = require({npm_main}); const npm = new Npm(); __agentOSDebugLog('before-load'); const loaded = await npm.load(); __agentOSDebugLog('after-load', loaded && loaded.command, JSON.stringify(loaded && loaded.args)); if (!loaded.exec) {{ __agentOSDebugLog('no-exec'); __agentOSFinish(); return; }} if (!loaded.command) {{ __agentOSDebugLog('no-command'); const {{ output }} = require('proc-log'); output.standard(npm.usage); __agentOSFinish(1); return; }} __agentOSDebugLog('before-exec', loaded.command, JSON.stringify(loaded.args)); await npm.exec(loaded.command, loaded.args); __agentOSDebugLog('after-exec', __agentOSResolveExitCode()); __agentOSFinish(); }})().catch((error) => {{ if (__agentOSIsProcessExitError(error)) {{ __agentOSDebugLog('process-exit-error', __agentOSResolveExitCode(error.code)); __agentOSFinish(error.code); return; }} console.error(error && error.stack ? error.stack : String(error)); __agentOSFinish(error && typeof error === 'object' && Number.isFinite(error.exitCode) ? error.exitCode : 1); }});",
-            debug_preamble = debug_preamble,
-            display_stub = display_stub,
-            registry_fetch_stub = registry_fetch_stub.replace(
-                "__AGENTOS_NPM_MAIN__",
-                &serde_json::to_string(&guest_npm_main)
-                    .unwrap_or_else(|_| format!("\"{guest_npm_main}\"")),
-            ),
-            npm_main = serde_json::to_string(&guest_npm_main)
-                .unwrap_or_else(|_| format!("\"{guest_npm_main}\"")),
-            package_json = serde_json::to_string(&guest_package_json)
-                .unwrap_or_else(|_| format!("\"{guest_package_json}\"")),
-        ),
-    }
-}
-
-fn resolve_guest_command_entrypoint(
-    vm: &VmState,
-    guest_cwd: &str,
-    command: &str,
-    path_env: Option<&str>,
-) -> Option<String> {
-    if !is_path_like_specifier(command) {
-        if let Some(entrypoint) = vm.command_guest_paths.get(command) {
-            return Some(entrypoint.clone());
-        }
-
-        for search_dir in guest_command_search_dirs(vm, guest_cwd, path_env) {
-            let candidate = normalize_path(&format!("{search_dir}/{command}"));
-            if let Some(entrypoint) = resolve_guest_command_path_candidate(vm, &candidate) {
-                return Some(entrypoint);
-            }
-        }
-
-        return None;
-    }
-
-    let normalized = resolve_path_like_guest_specifier(guest_cwd, command);
-    resolve_guest_command_path_candidate(vm, &normalized).or_else(|| {
-        // Some guest shells materialize PATH lookups into absolute candidate paths.
-        // If that path points into a searched directory but does not exist, fall
-        // back to the command basename so the sidecar can remap VM command packages.
-        let parent_dir = Path::new(&normalized).parent()?.to_str()?;
-        if !guest_command_search_dirs(vm, guest_cwd, path_env)
-            .iter()
-            .any(|search_dir| normalize_path(search_dir) == normalize_path(parent_dir))
-        {
-            return None;
-        }
-
-        let file_name = Path::new(&normalized).file_name()?.to_str()?;
-        vm.command_guest_paths.get(file_name).cloned()
-    })
-}
-
-fn guest_command_search_dirs(vm: &VmState, guest_cwd: &str, path_env: Option<&str>) -> Vec<String> {
-    let mut search_dirs = Vec::new();
-    let mut seen = BTreeSet::new();
-
-    if let Some(path) = path_env.or_else(|| vm.guest_env.get("PATH").map(String::as_str)) {
-        for segment in path.split(':') {
-            let trimmed = segment.trim();
-            if trimmed.is_empty() {
-                continue;
-            }
-            let normalized = if trimmed.starts_with('/') {
-                normalize_path(trimmed)
-            } else {
-                normalize_path(&format!("{guest_cwd}/{trimmed}"))
-            };
-            if seen.insert(normalized.clone()) {
-                search_dirs.push(normalized);
-            }
-        }
-    }
-
-    for fallback in ["/bin", "/usr/bin", "/usr/local/bin"] {
-        let normalized = String::from(fallback);
-        if seen.insert(normalized.clone()) {
-            search_dirs.push(normalized);
-        }
-    }
-
-    search_dirs
-}
-
-fn resolve_guest_command_path_candidate(vm: &VmState, candidate: &str) -> Option<String> {
-    if candidate.starts_with(&format!("{}/", crate::package_projection::OPT_AGENTOS_BIN)) {
-        if let Ok(realpath) = vm.kernel.realpath(candidate) {
-            return Some(normalize_path(&realpath));
-        }
-    }
-
-    if candidate.starts_with("/bin/")
-        || candidate.starts_with("/usr/bin/")
-        || candidate.starts_with("/usr/local/bin/")
-        || candidate.starts_with(&format!("{}/", crate::package_projection::OPT_AGENTOS_BIN))
-        || candidate.starts_with("/__secure_exec/commands/")
-    {
-        if let Some(file_name) = Path::new(candidate)
-            .file_name()
-            .and_then(|name| name.to_str())
-        {
-            if let Some(guest_entrypoint) = vm.command_guest_paths.get(file_name) {
-                return Some(guest_entrypoint.clone());
-            }
-        }
-    }
-
-    if vm
-        .kernel
-        .exists(candidate)
-        .ok()
-        .is_some_and(|exists| exists)
-    {
-        return Some(normalize_path(candidate));
-    }
-
-    resolve_vm_guest_path_to_host(vm, candidate)
-        .is_file()
-        .then(|| normalize_path(candidate))
-}
-
-fn resolve_host_entrypoint_within_vm_host_cwd(
-    vm: &VmState,
-    specifier: &str,
-) -> Option<(String, String)> {
-    let candidate = Path::new(specifier);
-    if !candidate.is_absolute() {
-        return None;
-    }
-
-    let normalized_entrypoint = normalize_host_path(candidate);
-    let normalized_host_cwd = normalize_host_path(&vm.host_cwd);
-    if !path_is_within_root(&normalized_entrypoint, &normalized_host_cwd) {
-        return None;
-    }
-
-    let relative = normalized_entrypoint
-        .strip_prefix(&normalized_host_cwd)
-        .ok()?
-        .to_string_lossy()
-        .replace('\\', "/");
-    let guest_entrypoint = if relative.is_empty() {
-        String::from("/")
-    } else {
-        normalize_path(&format!("/{relative}"))
-    };
-    Some((
-        guest_entrypoint,
-        normalized_entrypoint.to_string_lossy().into_owned(),
-    ))
-}
-
-fn prepare_guest_runtime_env(
-    vm: &VmState,
-    env: &mut BTreeMap<String, String>,
-    guest_cwd: &str,
-    host_cwd: &Path,
-    guest_entrypoint: Option<String>,
-) -> Result<(), SidecarError> {
-    let user = vm.kernel.user_profile();
-    let path_mappings = runtime_guest_path_mappings(vm);
-    let read_paths = expand_host_access_paths(
-        std::iter::once(vm.cwd.clone())
-            .chain(
-                path_mappings
-                    .iter()
-                    .map(|mapping| PathBuf::from(&mapping.host_path)),
-            )
-            .chain(std::iter::once(host_cwd.to_path_buf()))
-            .collect::<Vec<_>>()
-            .as_slice(),
-    );
-    let write_paths = dedupe_host_paths(
-        std::iter::once(vm.cwd.clone())
-            .chain(std::iter::once(host_cwd.to_path_buf()))
-            .chain(runtime_guest_writable_host_paths(vm))
-            .collect::<Vec<_>>()
-            .as_slice(),
-    );
-    let allowed_node_builtins = configured_allowed_node_builtins(vm);
-    let loopback_exempt_ports = configured_loopback_exempt_ports(vm);
-
-    env.insert(
-        String::from("AGENTOS_GUEST_PATH_MAPPINGS"),
-        serde_json::to_string(&path_mappings).map_err(|error| {
-            SidecarError::InvalidState(format!("failed to encode guest path mappings: {error}"))
-        })?,
-    );
-    env.entry(String::from(EXECUTION_SANDBOX_ROOT_ENV))
-        .or_insert_with(|| normalize_host_path(&vm.cwd).to_string_lossy().into_owned());
-    env.insert(
-        String::from("AGENTOS_EXTRA_FS_READ_PATHS"),
-        serde_json::to_string(
-            &read_paths
-                .iter()
-                .map(|path| path.to_string_lossy().into_owned())
-                .collect::<Vec<_>>(),
-        )
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("failed to encode read paths: {error}"))
-        })?,
-    );
-    env.insert(
-        String::from("AGENTOS_EXTRA_FS_WRITE_PATHS"),
-        serde_json::to_string(
-            &write_paths
-                .iter()
-                .map(|path| path.to_string_lossy().into_owned())
-                .collect::<Vec<_>>(),
-        )
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("failed to encode write paths: {error}"))
-        })?,
-    );
-    env.insert(
-        String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-        serde_json::to_string(&allowed_node_builtins).map_err(|error| {
-            SidecarError::InvalidState(format!("failed to encode allowed builtins: {error}"))
-        })?,
-    );
-    // The guest JS host platform drives subtractive global scrubbing in the
-    // per-execution runtime shim (see prepend_v8_runtime_shim).
-    env.insert(
-        String::from("AGENTOS_JS_PLATFORM"),
-        js_runtime_platform_env(vm).to_owned(),
-    );
-    // Module-resolution mode (omitted when full Node resolution / the default).
-    if let Some(resolution) = js_runtime_module_resolution_env(vm) {
-        env.insert(
-            String::from("AGENTOS_JS_MODULE_RESOLUTION"),
-            resolution.to_owned(),
-        );
-    }
-    // Builtin allow-list gate for the live resolver. Present only when builtins
-    // should be restricted (non-node platform => deny all; node + explicit
-    // allow-list => exactly those). Absent => unrestricted (node default).
-    if let Some(allowlist) = js_runtime_enforced_builtins(vm) {
-        env.insert(
-            String::from("AGENTOS_JS_BUILTIN_ALLOWLIST"),
-            serde_json::to_string(&allowlist).map_err(|error| {
-                SidecarError::InvalidState(format!(
-                    "failed to encode jsRuntime builtin allow-list: {error}"
-                ))
-            })?,
-        );
-    }
-    // Virtual OS identity (os.cpus/totalmem/freemem/homedir/userInfo/...) now
-    // rides the typed `guest_runtime` (see `guest_runtime_identity`), exposed to
-    // the guest as the `__agentOSVirtualOs` structured global by the runtime
-    // shim — no longer the `AGENTOS_VIRTUAL_OS_*` env vars.
-    // Virtual process uid/gid now ride the typed `guest_runtime` identity
-    // (see `guest_runtime_identity`), not the `AGENTOS_VIRTUAL_PROCESS_*` env.
-    env.entry(String::from("HOME"))
-        .or_insert_with(|| user.homedir.clone());
-    env.entry(String::from("USER"))
-        .or_insert_with(|| user.username.clone());
-    env.entry(String::from("LOGNAME"))
-        .or_insert_with(|| user.username.clone());
-    env.entry(String::from("SHELL"))
-        .or_insert_with(|| user.shell.clone());
-    env.entry(String::from("PATH")).or_insert_with(|| {
-        vm.guest_env
-            .get("PATH")
-            .cloned()
-            .unwrap_or_else(|| crate::vm::DEFAULT_GUEST_PATH_ENV.to_owned())
-    });
-    env.entry(String::from("TMPDIR"))
-        .or_insert_with(|| String::from("/tmp"));
-    env.insert(String::from("PWD"), guest_cwd.to_owned());
-    if !loopback_exempt_ports.is_empty() {
-        env.insert(
-            String::from(LOOPBACK_EXEMPT_PORTS_ENV),
-            serde_json::to_string(&loopback_exempt_ports).map_err(|error| {
-                SidecarError::InvalidState(format!("failed to encode loopback exemptions: {error}"))
-            })?,
-        );
-    }
-    if let Some(guest_entrypoint) = guest_entrypoint {
-        env.insert(String::from("AGENTOS_GUEST_ENTRYPOINT"), guest_entrypoint);
-    }
-    Ok(())
-}
-
-/// Build the typed per-execution JavaScript limits from the per-VM `VmLimits`
-/// (sourced from `CreateVmConfig` on the BARE wire). These ride the execution
-/// request, not `AGENTOS_*` env vars — see the env-vs-wire rule in
-/// `crates/sidecar/CLAUDE.md`.
-fn javascript_execution_limits(vm: &VmState) -> JavascriptExecutionLimits {
-    JavascriptExecutionLimits {
-        v8_heap_limit_mb: vm.limits.js_runtime.v8_heap_limit_mb,
-        sync_rpc_wait_timeout_ms: vm.limits.js_runtime.sync_rpc_wait_timeout_ms,
-        cpu_time_limit_ms: Some(vm.limits.js_runtime.cpu_time_limit_ms),
-        wall_clock_limit_ms: Some(vm.limits.js_runtime.wall_clock_limit_ms),
-        import_cache_materialize_timeout_ms: Some(
-            vm.limits.js_runtime.import_cache_materialize_timeout_ms,
-        ),
-    }
-}
-
-/// Build the typed per-execution guest-runtime identity (virtual `process.*`)
-/// from kernel state. Replaces the `AGENTOS_VIRTUAL_PROCESS_{UID,GID,PID,PPID}`
-/// env round-trip: the runtime shim reads these from `guest_runtime`, not env.
-/// `uid`/`gid` come from the VM user profile (applied to every guest);
-/// `pid`/`ppid` are per-process and only set for paths that assigned them.
-fn guest_runtime_identity(
-    vm: &VmState,
-    virtual_pid: Option<u64>,
-    virtual_ppid: Option<u64>,
-) -> GuestRuntimeConfig {
-    let user = vm.kernel.user_profile();
-    let resource_limits = vm.kernel.resource_limits();
-    let identity = shared_guest_runtime_identity(&user, resource_limits, virtual_pid, virtual_ppid);
-    GuestRuntimeConfig {
-        virtual_uid: Some(identity.virtual_uid),
-        virtual_gid: Some(identity.virtual_gid),
-        virtual_pid: identity.virtual_pid,
-        virtual_ppid: identity.virtual_ppid,
-        virtual_exec_path: None,
-        os_cpu_count: Some(identity.os_cpu_count),
-        os_totalmem: Some(identity.os_totalmem),
-        os_freemem: Some(identity.os_freemem),
-        os_homedir: Some(identity.os_homedir),
-        os_hostname: Some(identity.os_hostname),
-        os_tmpdir: Some(identity.os_tmpdir),
-        os_type: Some(identity.os_type),
-        os_release: Some(identity.os_release),
-        os_version: Some(identity.os_version),
-        os_machine: Some(identity.os_machine),
-        os_shell: Some(identity.os_shell),
-        os_user: Some(identity.os_user),
-        high_resolution_time: vm
-            .configuration
-            .js_runtime
-            .as_ref()
-            .is_some_and(|cfg| cfg.high_resolution_time.unwrap_or(false)),
-        // Userland bundle to bake into the per-sidecar snapshot. The sidecar
-        // derives this from configured agent packages with `agent.snapshot`.
-        snapshot_userland_code: vm.configuration.snapshot_userland_code.clone(),
-    }
-}
-
-/// The guest's virtual home directory, sourced from the VM user profile (the
-/// same value carried to the guest as `os.homedir()` via `guest_runtime`). Used
-/// by sidecar-internal `~`-path resolution; falls back to `/root` for a
-/// non-absolute profile value.
-fn guest_virtual_home(vm: &VmState) -> String {
-    let homedir = vm.kernel.user_profile().homedir;
-    if homedir.starts_with('/') {
-        homedir
-    } else {
-        String::from("/root")
-    }
-}
-
-/// Build the typed per-execution Python limits from the per-VM `VmLimits`.
-fn python_execution_limits(vm: &VmState) -> PythonExecutionLimits {
-    PythonExecutionLimits {
-        output_buffer_max_bytes: Some(vm.limits.python.output_buffer_max_bytes),
-        execution_timeout_ms: Some(vm.limits.python.execution_timeout_ms),
-        max_old_space_mb: Some(vm.limits.python.max_old_space_mb),
-        vfs_rpc_timeout_ms: Some(vm.limits.python.vfs_rpc_timeout_ms),
-    }
-}
-
-/// Build the typed per-execution WebAssembly limits from the per-VM kernel
-/// `ResourceLimits`. Replaces the old `apply_wasm_limit_env` env round-trip;
-/// notably this is the path that finally enforces the stack cap that the
-/// `AGENTOS_WASM_MAX_STACK_BYTES` env knob set but no reader consumed.
-fn wasm_execution_limits(vm: &VmState) -> WasmExecutionLimits {
-    let resource_limits = vm.kernel.resource_limits();
-    WasmExecutionLimits {
-        max_fuel: resource_limits.max_wasm_fuel,
-        max_memory_bytes: resource_limits.max_wasm_memory_bytes,
-        max_stack_bytes: resource_limits
-            .max_wasm_stack_bytes
-            .map(|value| value as u64),
-        prewarm_timeout_ms: Some(vm.limits.wasm.prewarm_timeout_ms),
-        runner_heap_limit_mb: Some(vm.limits.wasm.runner_heap_limit_mb),
-    }
-}
-
-/// The guest JavaScript host platform configured for this VM, defaulting to
-/// full Node.js emulation when no `jsRuntime` config was supplied at create.
-fn js_runtime_platform(vm: &VmState) -> vm_config::JsRuntimePlatform {
-    vm.configuration
-        .js_runtime
-        .as_ref()
-        .map(|cfg| cfg.platform)
-        .unwrap_or(vm_config::JsRuntimePlatform::Node)
-}
-
-/// Lowercase wire name for the configured platform, mirroring the serde
-/// representation of `vm_config::JsRuntimePlatform`.
-fn js_runtime_platform_env(vm: &VmState) -> &'static str {
-    match js_runtime_platform(vm) {
-        vm_config::JsRuntimePlatform::Node => "node",
-        vm_config::JsRuntimePlatform::Browser => "browser",
-        vm_config::JsRuntimePlatform::Neutral => "neutral",
-        vm_config::JsRuntimePlatform::Bare => "bare",
-    }
-}
-
-/// Wire name for the configured module-resolution mode, or `None` when it is the
-/// full-Node default (which the live resolver also assumes when the env is unset).
-fn js_runtime_module_resolution_env(vm: &VmState) -> Option<&'static str> {
-    let resolution = vm
-        .configuration
-        .js_runtime
-        .as_ref()
-        .map(|cfg| cfg.module_resolution)
-        .unwrap_or(vm_config::JsModuleResolution::Node);
-    match resolution {
-        vm_config::JsModuleResolution::Node => None,
-        vm_config::JsModuleResolution::Relative => Some("relative"),
-        vm_config::JsModuleResolution::None => Some("none"),
-    }
-}
-
-/// The builtin allow-list the live resolver should enforce, or `None` to leave
-/// builtins unrestricted (full Node default — preserving today's behavior).
-/// Non-node platforms enforce an empty list (deny all builtins).
-fn js_runtime_enforced_builtins(vm: &VmState) -> Option<Vec<String>> {
-    if js_runtime_platform(vm) != vm_config::JsRuntimePlatform::Node {
-        return Some(Vec::new());
-    }
-    vm.configuration
-        .js_runtime
-        .as_ref()
-        .and_then(|cfg| cfg.allowed_builtins.clone())
-}
-
-fn configured_allowed_node_builtins(vm: &VmState) -> Vec<String> {
-    // Non-node platforms expose no Node builtin modules at all.
-    if js_runtime_platform(vm) != vm_config::JsRuntimePlatform::Node {
-        return Vec::new();
-    }
-    // Under the node platform an explicit allow-list wins — including an explicit
-    // empty list, which means deny all. Absence falls back to the engine default.
-    let configured = match vm
-        .configuration
-        .js_runtime
-        .as_ref()
-        .and_then(|cfg| cfg.allowed_builtins.as_ref())
-    {
-        Some(list) => list.clone(),
-        None => DEFAULT_ALLOWED_NODE_BUILTINS
-            .iter()
-            .map(|value| (*value).to_owned())
-            .collect::<Vec<_>>(),
-    };
-    dedupe_strings(&configured)
-}
-
-fn configured_loopback_exempt_ports(vm: &VmState) -> Vec<String> {
-    if !vm.configuration.loopback_exempt_ports.is_empty() {
-        return vm
-            .configuration
-            .loopback_exempt_ports
-            .iter()
-            .map(ToString::to_string)
-            .collect();
-    }
-
-    vm.create_loopback_exempt_ports
-        .iter()
-        .map(ToString::to_string)
-        .collect()
-}
-
-/// Extract the `hostPath` string from a mount plugin's JSON-encoded config.
-fn mount_config_host_path(config: &str) -> Option<String> {
-    serde_json::from_str::<Value>(config)
-        .ok()?
-        .get("hostPath")
-        .and_then(Value::as_str)
-        .map(str::to_owned)
-}
-
-/// Host path backing a mount for HOST-SIDE resolution (entrypoint launch, import
-/// cache location). `agentos_packages` is deliberately excluded by callers:
-/// package tar mounts are guest-native and resolve through the kernel VFS.
-fn mount_config_host_backing_path(config: &str) -> Option<String> {
-    let value = serde_json::from_str::<Value>(config).ok()?;
-    value
-        .get("hostPath")
-        .and_then(Value::as_str)
-        .map(str::to_owned)
-}
-
-fn runtime_guest_writable_host_paths(vm: &VmState) -> Vec<PathBuf> {
-    vm.configuration
-        .mounts
-        .iter()
-        .filter(|mount| !mount.read_only)
-        .filter_map(|mount| {
-            ((mount.plugin.id == "host_dir") || (mount.plugin.id == "module_access"))
-                .then(|| mount_config_host_path(&mount.plugin.config))
-                .flatten()
-                .map(PathBuf::from)
-        })
-        .collect()
-}
-
-fn runtime_guest_path_mappings(vm: &VmState) -> Vec<RuntimeGuestPathMapping> {
-    let mut mappings = vm
-        .configuration
-        .mounts
-        .iter()
-        .filter_map(|mount| {
-            ((mount.plugin.id == "host_dir") || (mount.plugin.id == "module_access"))
-                .then(|| {
-                    mount_config_host_path(&mount.plugin.config).map(|host_path| {
-                        RuntimeGuestPathMapping {
-                            guest_path: normalize_path(&mount.guest_path),
-                            host_path,
-                            read_only: mount.read_only,
-                        }
-                    })
-                })
-                .flatten()
-        })
-        .collect::<Vec<_>>();
-    let mut command_root_mappings = vm
-        .command_guest_paths
-        .values()
-        .filter_map(|guest_path| {
-            Path::new(guest_path)
-                .parent()
-                .and_then(|parent| parent.to_str())
-                .map(normalize_path)
-        })
-        .collect::<BTreeSet<_>>()
-        .into_iter()
-        .map(|guest_path| RuntimeGuestPathMapping {
-            host_path: resolve_vm_guest_path_to_host(vm, &guest_path)
-                .to_string_lossy()
-                .into_owned(),
-            guest_path,
-            read_only: false,
-        })
-        .collect::<Vec<_>>();
-    mappings.append(&mut command_root_mappings);
-    let mut extra_node_modules_roots = mappings
-        .iter()
-        .filter(|mapping| mapping.guest_path.starts_with("/root/node_modules/"))
-        .filter_map(|mapping| {
-            host_node_modules_root(Path::new(&mapping.host_path)).map(|host_root| {
-                RuntimeGuestPathMapping {
-                    guest_path: String::from("/root/node_modules"),
-                    host_path: host_root.to_string_lossy().into_owned(),
-                    read_only: mapping.read_only,
-                }
-            })
-        })
-        .collect::<Vec<_>>();
-    mappings.append(&mut extra_node_modules_roots);
-    mappings.push(RuntimeGuestPathMapping {
-        guest_path: String::from("/"),
-        host_path: vm.cwd.to_string_lossy().into_owned(),
-        read_only: false,
-    });
-    mappings.sort_by_key(|mapping| std::cmp::Reverse(mapping.guest_path.len()));
-    mappings.dedup_by(|left, right| {
-        left.guest_path == right.guest_path && left.host_path == right.host_path
-    });
-    mappings
-}
-
-/// Build a `Send`-able, read-only VFS module reader over the VM's read-only
-/// `host_dir`/`module_access` mounts (and the derived `/root/node_modules` root
-/// for nested mounts). When present, the V8 bridge thread resolves modules
-/// inline against this reader — concurrently with the service loop — so a large
-/// cold-start module graph never serializes behind / starves an in-flight ACP
-/// `session/new` bootstrap on the single service-loop thread. The reader reads
-/// the same mounted tree the guest sees (anchored `openat2`, escaping-symlink
-/// refusal), never the host-direct path translator. Returns `None` when the VM
-/// has no usable read-only mount, so resolution falls back to the service-loop
-/// kernel reader.
-fn build_module_reader(
-    vm: &VmState,
-    resolved: &ResolvedChildProcessExecution,
-) -> Option<crate::plugins::host_dir::HostDirModuleReader> {
-    let mut pairs: Vec<(String, PathBuf)> = vm
-        .configuration
-        .mounts
-        .iter()
-        .filter(|mount| mount.read_only)
-        .filter(|mount| (mount.plugin.id == "host_dir") || (mount.plugin.id == "module_access"))
-        .filter_map(|mount| {
-            mount_config_host_path(&mount.plugin.config)
-                .map(|host_path| (normalize_path(&mount.guest_path), PathBuf::from(host_path)))
-        })
-        .collect();
-
-    let guest_entrypoint = resolved
-        .env
-        .get("AGENTOS_GUEST_ENTRYPOINT")
-        .map(|path| normalize_path(path));
-    if let Some(guest_entrypoint) = guest_entrypoint.as_deref() {
-        let entrypoint_in_read_only_mount = pairs.iter().any(|(guest_path, _)| {
-            guest_entrypoint == guest_path
-                || guest_entrypoint.starts_with(&format!("{guest_path}/"))
-        });
-        if !entrypoint_in_read_only_mount {
-            return None;
-        }
-    }
-
-    // Mirror runtime_guest_path_mappings: a mount nested under
-    // `/root/node_modules/<pkg>` implies a `/root/node_modules` root the resolver
-    // walks, so expose that root too (e.g. software-package mounts).
-    let extra_roots: Vec<(String, PathBuf)> = pairs
-        .iter()
-        .filter(|(guest_path, _)| guest_path.starts_with("/root/node_modules/"))
-        .filter_map(|(_, host_path)| {
-            host_node_modules_root(host_path).map(|root| (String::from("/root/node_modules"), root))
-        })
-        .collect();
-    pairs.extend(extra_roots);
-
-    crate::plugins::host_dir::HostDirModuleReader::from_mounts(pairs)
-}
-
-fn host_node_modules_root(path: &Path) -> Option<PathBuf> {
-    if let Some(root) = path
-        .ancestors()
-        .filter(|candidate| {
-            candidate.file_name().and_then(|name| name.to_str()) == Some("node_modules")
-        })
-        .last()
-        .map(Path::to_path_buf)
-    {
-        return Some(root);
-    }
-
-    fs::canonicalize(path)
-        .ok()?
-        .ancestors()
-        .filter(|candidate| {
-            candidate.file_name().and_then(|name| name.to_str()) == Some("node_modules")
-        })
-        .last()
-        .map(Path::to_path_buf)
-}
-
-#[cfg(test)]
-mod runtime_guest_path_mapping_tests {
-    use super::{host_node_modules_root, javascript_sync_rpc_option_bool};
-    use serde_json::json;
-    use std::fs;
-    use std::time::{SystemTime, UNIX_EPOCH};
-
-    #[test]
-    fn host_node_modules_root_prefers_workspace_root_over_pnpm_package_node_modules() {
-        let unique = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("clock should be monotonic")
-            .as_nanos();
-        let temp = std::env::temp_dir().join(format!("secure-exec-sidecar-node-modules-{unique}"));
-        let workspace_node_modules = temp.join("node_modules");
-        let package_root = workspace_node_modules
-            .join(".pnpm")
-            .join("example@1.0.0")
-            .join("node_modules")
-            .join("@scope")
-            .join("pkg");
-        fs::create_dir_all(&package_root).expect("package root should be created");
-
-        let resolved =
-            host_node_modules_root(&package_root).expect("node_modules root should resolve");
-
-        assert_eq!(resolved, workspace_node_modules);
-
-        fs::remove_dir_all(&temp).expect("temp tree should be removed");
-    }
-
-    #[test]
-    fn host_node_modules_root_preserves_symlinked_workspace_node_modules_path() {
-        let unique = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("clock should be monotonic")
-            .as_nanos();
-        let temp =
-            std::env::temp_dir().join(format!("secure-exec-sidecar-node-modules-symlink-{unique}"));
-        let workspace_node_modules = temp.join("node_modules");
-        let package_link = workspace_node_modules.join("@scope").join("pkg");
-        let real_package = temp.join("registry").join("agent").join("pkg");
-        fs::create_dir_all(package_link.parent().expect("package parent should exist"))
-            .expect("scoped parent should be created");
-        fs::create_dir_all(&real_package).expect("real package root should be created");
-        std::os::unix::fs::symlink(&real_package, &package_link)
-            .expect("package symlink should be created");
-
-        let resolved =
-            host_node_modules_root(&package_link).expect("node_modules root should resolve");
-
-        assert_eq!(resolved, workspace_node_modules);
-
-        fs::remove_dir_all(&temp).expect("temp tree should be removed");
-    }
-
-    #[test]
-    fn javascript_sync_rpc_option_bool_accepts_boolean_recursive_argument() {
-        assert_eq!(
-            javascript_sync_rpc_option_bool(&[json!("/workspace"), json!(true)], 1, "recursive"),
-            Some(true)
-        );
-        assert_eq!(
-            javascript_sync_rpc_option_bool(
-                &[json!("/workspace"), json!({ "recursive": false })],
-                1,
-                "recursive"
-            ),
-            Some(false)
-        );
-    }
-}
-
-#[cfg(test)]
-mod kernel_poll_sync_rpc_tests {
-    use super::{
-        service_javascript_kernel_poll_sync_rpc, ActiveExecution, ActiveProcess,
-        JavascriptSyncRpcRequest, KernelPollFdResponse, SidecarKernel, ToolExecution,
-        EXECUTION_DRIVER_NAME, JAVASCRIPT_COMMAND,
-    };
-    use secure_exec_kernel::command_registry::CommandDriver;
-    use secure_exec_kernel::kernel::{KernelVmConfig, SpawnOptions};
-    use secure_exec_kernel::mount_table::MountTable;
-    use secure_exec_kernel::permissions::Permissions;
-    use secure_exec_kernel::poll::{POLLHUP, POLLIN};
-    use secure_exec_kernel::vfs::MemoryFileSystem;
-    use serde_json::{json, Value};
-    use std::collections::HashMap;
-    #[test]
-    fn javascript_kernel_poll_sync_rpc_reports_multiple_kernel_fds() {
-        let mut config = KernelVmConfig::new("vm-js-kernel-poll");
-        config.permissions = Permissions::allow_all();
-        let mut kernel = SidecarKernel::new(MountTable::new(MemoryFileSystem::new()), config);
-        kernel
-            .register_driver(CommandDriver::new(
-                EXECUTION_DRIVER_NAME,
-                [JAVASCRIPT_COMMAND],
-            ))
-            .expect("register execution driver");
-
-        let kernel_handle = kernel
-            .spawn_process(
-                JAVASCRIPT_COMMAND,
-                Vec::new(),
-                SpawnOptions {
-                    requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                    ..SpawnOptions::default()
-                },
-            )
-            .expect("spawn javascript kernel process");
-        let pid = kernel_handle.pid();
-
-        let (stdin_read_fd, stdin_write_fd) = kernel
-            .open_pipe(EXECUTION_DRIVER_NAME, pid)
-            .expect("open kernel stdin pipe");
-        kernel
-            .fd_dup2(EXECUTION_DRIVER_NAME, pid, stdin_read_fd, 0)
-            .expect("dup stdin pipe onto fd 0");
-        kernel
-            .fd_close(EXECUTION_DRIVER_NAME, pid, stdin_read_fd)
-            .expect("close original stdin read fd");
-
-        let process = ActiveProcess::new(
-            pid,
-            kernel_handle,
-            super::GuestRuntimeKind::JavaScript,
-            ActiveExecution::Tool(ToolExecution::default()),
-        );
-
-        kernel
-            .fd_write(EXECUTION_DRIVER_NAME, pid, stdin_write_fd, b"poll-ready")
-            .expect("write kernel stdin payload");
-        kernel
-            .fd_close(EXECUTION_DRIVER_NAME, pid, stdin_write_fd)
-            .expect("close kernel stdin writer");
-
-        let response = service_javascript_kernel_poll_sync_rpc(
-            &mut kernel,
-            &process,
-            &JavascriptSyncRpcRequest {
-                id: 1,
-                method: String::from("__kernel_poll"),
-                raw_bytes_args: HashMap::new(),
-                args: vec![
-                    json!([
-                        { "fd": 0, "events": POLLIN.bits() },
-                        { "fd": 1, "events": POLLIN.bits() }
-                    ]),
-                    json!(250),
-                ],
-            },
-        )
-        .expect("poll kernel fds");
-
-        assert_eq!(response["readyCount"], Value::from(1));
-        let fds: Vec<KernelPollFdResponse> =
-            serde_json::from_value(response["fds"].clone()).expect("kernel poll fd response");
-        assert_eq!(
-            fds,
-            vec![
-                KernelPollFdResponse {
-                    fd: 0,
-                    events: POLLIN.bits(),
-                    revents: (POLLIN | POLLHUP).bits(),
-                },
-                KernelPollFdResponse {
-                    fd: 1,
-                    events: POLLIN.bits(),
-                    revents: 0,
-                },
-            ]
-        );
-
-        process.kernel_handle.finish(0);
-        kernel.waitpid(pid).expect("wait javascript kernel process");
-    }
-}
-
-fn dedupe_strings(values: &[String]) -> Vec<String> {
-    let mut seen = BTreeSet::new();
-    let mut deduped = Vec::new();
-    for value in values {
-        if seen.insert(value.clone()) {
-            deduped.push(value.clone());
-        }
-    }
-    deduped
-}
-
-fn dedupe_host_paths(paths: &[PathBuf]) -> Vec<PathBuf> {
-    let mut seen = BTreeSet::new();
-    let mut deduped = Vec::new();
-    for path in paths {
-        let normalized = normalize_host_path(path);
-        let key = normalized.to_string_lossy().into_owned();
-        if seen.insert(key) {
-            deduped.push(normalized);
-        }
-    }
-    deduped
-}
-
-fn expand_host_access_paths(paths: &[PathBuf]) -> Vec<PathBuf> {
-    let mut expanded = Vec::new();
-    let mut seen = BTreeSet::new();
-
-    let mut add_path = |candidate: PathBuf| {
-        let normalized = normalize_host_path(&candidate);
-        let key = normalized.to_string_lossy().into_owned();
-        if seen.insert(key) {
-            expanded.push(normalized);
-        }
-    };
-
-    for host_path in paths {
-        add_path(host_path.clone());
-        if let Ok(realpath) = fs::canonicalize(host_path) {
-            add_path(realpath);
-        }
-
-        if host_path.file_name().and_then(|name| name.to_str()) != Some("node_modules") {
-            continue;
-        }
-
-        let mut current = host_path.parent();
-        while let Some(parent) = current {
-            let candidate = parent.join("node_modules");
-            if candidate.exists() {
-                add_path(candidate.clone());
-                if let Ok(realpath) = fs::canonicalize(&candidate) {
-                    add_path(realpath);
-                }
-            }
-            current = parent.parent();
-        }
-    }
-
-    expanded
-}
-
-fn prepare_javascript_shadow(
-    vm: &mut VmState,
-    resolved: &ResolvedChildProcessExecution,
-    env: &BTreeMap<String, String>,
-) -> Result<(), SidecarError> {
-    let guest_entrypoint = env
-        .get("AGENTOS_GUEST_ENTRYPOINT")
-        .cloned()
-        // An absolute `entrypoint` may be a host path that lives inside the VM's
-        // host cwd (callers can pass a fully-qualified host path). The guest sees
-        // it at its translated guest path (host_cwd -> guest_cwd), so the shadow
-        // must be keyed by that guest path rather than the raw host path. Falling
-        // back to the host path here would materialize the file at the wrong guest
-        // location and the runtime's `require()` would fail with "Cannot find
-        // module".
-        .or_else(|| {
-            resolve_host_entrypoint_within_vm_host_cwd(vm, &resolved.entrypoint)
-                .map(|(guest_entrypoint, _)| guest_entrypoint)
-        })
-        .or_else(|| {
-            resolved
-                .entrypoint
-                .starts_with('/')
-                .then(|| normalize_path(&resolved.entrypoint))
-        });
-    let Some(guest_entrypoint) = guest_entrypoint else {
-        return Ok(());
-    };
-    if host_mount_path_for_guest_path(vm, &guest_entrypoint).is_some() {
-        return Ok(());
-    }
-    if vm.kernel.lstat(&guest_entrypoint).is_err() {
-        let host_entrypoint = {
-            let candidate = Path::new(&resolved.entrypoint);
-            if candidate.is_absolute() {
-                candidate.to_path_buf()
-            } else {
-                resolved.host_cwd.join(candidate)
-            }
-        };
-        if host_entrypoint.exists() {
-            materialize_host_path_to_shadow(vm, &guest_entrypoint, &host_entrypoint)?;
-            // The shadow write only stages the file on the host side; the runtime
-            // resolves modules against the kernel VFS, so the staged entrypoint
-            // must be synced into the kernel before execution starts (otherwise
-            // `require()` reports "Cannot find module").
-            return sync_shadow_entrypoint_into_kernel(vm, &guest_entrypoint);
-        }
-    }
-    materialize_guest_path_to_shadow(vm, &guest_entrypoint)
-}
-
-fn resolve_agentos_package_javascript_launch_entrypoint(
-    vm: &mut VmState,
-    env: &mut BTreeMap<String, String>,
-) -> Option<String> {
-    let guest_entrypoint = env
-        .get("AGENTOS_GUEST_ENTRYPOINT")
-        .filter(|path| path.starts_with('/'))
-        .map(|path| normalize_path(path))?;
-    if !guest_path_is_within_agentos_package_mount(vm, &guest_entrypoint) {
-        return None;
-    }
-
-    let real_entrypoint = normalize_path(&vm.kernel.realpath(&guest_entrypoint).ok()?);
-    if !guest_path_is_within_agentos_package_mount(vm, &real_entrypoint) {
-        return None;
-    }
-
-    env.insert(
-        String::from("AGENTOS_GUEST_ENTRYPOINT"),
-        real_entrypoint.clone(),
-    );
-    if guest_javascript_entrypoint_uses_module_mode(vm, &real_entrypoint) {
-        env.insert(
-            String::from("AGENTOS_GUEST_ENTRYPOINT_MODULE_MODE"),
-            String::from("1"),
-        );
-    } else {
-        env.remove("AGENTOS_GUEST_ENTRYPOINT_MODULE_MODE");
-    }
-    Some(real_entrypoint)
-}
-
-fn guest_path_is_within_agentos_package_mount(vm: &VmState, guest_path: &str) -> bool {
-    let normalized = normalize_path(guest_path);
-    vm.configuration.mounts.iter().any(|mount| {
-        mount.plugin.id == "agentos_packages" && {
-            let guest_root = normalize_path(&mount.guest_path);
-            normalized == guest_root || normalized.starts_with(&format!("{guest_root}/"))
-        }
-    })
-}
-
-fn guest_javascript_entrypoint_uses_module_mode(vm: &mut VmState, guest_path: &str) -> bool {
-    match Path::new(guest_path)
-        .extension()
-        .and_then(|ext| ext.to_str())
-    {
-        Some("mjs" | "mts") => true,
-        Some("js") => nearest_guest_package_json_type(vm, guest_path).as_deref() == Some("module"),
-        _ => false,
-    }
-}
-
-fn nearest_guest_package_json_type(vm: &mut VmState, guest_path: &str) -> Option<String> {
-    let mut dir = dirname(guest_path);
-    loop {
-        let package_json_path = if dir == "/" {
-            String::from("/package.json")
-        } else {
-            normalize_path(&format!("{dir}/package.json"))
-        };
-        if let Ok(bytes) = vm.kernel.read_file(&package_json_path) {
-            if let Ok(value) = serde_json::from_slice::<Value>(&bytes) {
-                if let Some(package_type) = value.get("type").and_then(Value::as_str) {
-                    return Some(package_type.to_owned());
-                }
-            }
-        }
-        if dir == "/" {
-            return None;
-        }
-        dir = dirname(&dir);
-    }
-}
-
-/// Sync a freshly-staged shadow entrypoint into the kernel VFS so the runtime's
-/// kernel-backed module resolver can read it. Mirrors the host->kernel file sync
-/// used by the broader shadow reconciliation, but scoped to the single
-/// entrypoint we just materialized.
-fn sync_shadow_entrypoint_into_kernel(
-    vm: &mut VmState,
-    guest_entrypoint: &str,
-) -> Result<(), SidecarError> {
-    if vm.kernel.exists(guest_entrypoint).unwrap_or(false) {
-        return Ok(());
-    }
-    let shadow_path = shadow_path_for_guest(vm, guest_entrypoint);
-    let bytes = match fs::read(&shadow_path) {
-        Ok(bytes) => bytes,
-        Err(error) if error.kind() == std::io::ErrorKind::NotFound => return Ok(()),
-        Err(error) => {
-            return Err(SidecarError::Io(format!(
-                "failed to read staged shadow entrypoint {}: {error}",
-                shadow_path.display()
-            )));
-        }
-    };
-    if let Some(parent) = guest_parent_path(guest_entrypoint) {
-        if !vm.kernel.exists(&parent).unwrap_or(false) {
-            vm.kernel.mkdir(&parent, true).map_err(kernel_error)?;
-        }
-    }
-    vm.kernel
-        .write_file(guest_entrypoint, bytes)
-        .map_err(kernel_error)?;
-    Ok(())
-}
-
-fn guest_parent_path(guest_path: &str) -> Option<String> {
-    let parent = Path::new(guest_path).parent()?;
-    let parent = parent.to_string_lossy();
-    if parent.is_empty() || parent == "/" {
-        None
-    } else {
-        Some(parent.into_owned())
-    }
-}
-
-fn materialize_host_path_to_shadow(
-    vm: &VmState,
-    guest_path: &str,
-    host_path: &Path,
-) -> Result<(), SidecarError> {
-    let shadow_path = shadow_path_for_guest(vm, guest_path);
-    let metadata = fs::symlink_metadata(host_path)
-        .map_err(|error| SidecarError::Io(format!("failed to stat host entrypoint: {error}")))?;
-
-    if metadata.file_type().is_symlink() {
-        if let Some(parent) = shadow_path.parent() {
-            fs::create_dir_all(parent).map_err(|error| {
-                SidecarError::Io(format!("failed to create shadow symlink parent: {error}"))
-            })?;
-        }
-        let _ = fs::remove_file(&shadow_path);
-        let _ = fs::remove_dir_all(&shadow_path);
-        let target = fs::read_link(host_path)
-            .map_err(|error| SidecarError::Io(format!("failed to read host symlink: {error}")))?;
-        std::os::unix::fs::symlink(&target, &shadow_path)
-            .map_err(|error| SidecarError::Io(format!("failed to mirror host symlink: {error}")))?;
-        return Ok(());
-    }
-
-    if metadata.is_dir() {
-        fs::create_dir_all(&shadow_path).map_err(|error| {
-            SidecarError::Io(format!("failed to create shadow directory: {error}"))
-        })?;
-        fs::set_permissions(
-            &shadow_path,
-            fs::Permissions::from_mode(metadata.permissions().mode() & 0o7777),
-        )
-        .map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to set shadow directory mode on {}: {error}",
-                shadow_path.display()
-            ))
-        })?;
-        return Ok(());
-    }
-
-    if let Some(parent) = shadow_path.parent() {
-        fs::create_dir_all(parent).map_err(|error| {
-            SidecarError::Io(format!("failed to create shadow parent: {error}"))
-        })?;
-    }
-    let bytes = fs::read(host_path)
-        .map_err(|error| SidecarError::Io(format!("failed to read host entrypoint: {error}")))?;
-    fs::write(&shadow_path, bytes).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to mirror host file into shadow root: {error}"
-        ))
-    })?;
-    fs::set_permissions(
-        &shadow_path,
-        fs::Permissions::from_mode(metadata.permissions().mode() & 0o7777),
-    )
-    .map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to set shadow file mode on {}: {error}",
-            shadow_path.display()
-        ))
-    })?;
-    Ok(())
-}
-
-fn materialize_guest_path_to_shadow(
-    vm: &mut VmState,
-    guest_path: &str,
-) -> Result<(), SidecarError> {
-    let stat = vm.kernel.lstat(guest_path).map_err(kernel_error)?;
-    let shadow_path = shadow_path_for_guest(vm, guest_path);
-
-    if stat.is_symbolic_link {
-        if let Some(parent) = shadow_path.parent() {
-            fs::create_dir_all(parent).map_err(|error| {
-                SidecarError::Io(format!("failed to create shadow symlink parent: {error}"))
-            })?;
-        }
-        let _ = fs::remove_file(&shadow_path);
-        let _ = fs::remove_dir_all(&shadow_path);
-        let target = vm.kernel.read_link(guest_path).map_err(kernel_error)?;
-        std::os::unix::fs::symlink(&target, &shadow_path)
-            .map_err(|error| SidecarError::Io(format!("failed to mirror symlink: {error}")))?;
-        return Ok(());
-    }
-
-    if stat.is_directory {
-        fs::create_dir_all(&shadow_path).map_err(|error| {
-            SidecarError::Io(format!("failed to create shadow directory: {error}"))
-        })?;
-        fs::set_permissions(&shadow_path, fs::Permissions::from_mode(stat.mode & 0o7777)).map_err(
-            |error| {
-                SidecarError::Io(format!(
-                    "failed to set shadow directory mode on {}: {error}",
-                    shadow_path.display()
-                ))
-            },
-        )?;
-        return Ok(());
-    }
-
-    if let Some(parent) = shadow_path.parent() {
-        fs::create_dir_all(parent).map_err(|error| {
-            SidecarError::Io(format!("failed to create shadow parent: {error}"))
-        })?;
-    }
-    let bytes = vm.kernel.read_file(guest_path).map_err(kernel_error)?;
-    fs::write(&shadow_path, bytes).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to mirror guest file into shadow root: {error}"
-        ))
-    })?;
-    fs::set_permissions(&shadow_path, fs::Permissions::from_mode(stat.mode & 0o7777)).map_err(
-        |error| {
-            SidecarError::Io(format!(
-                "failed to set shadow file mode on {}: {error}",
-                shadow_path.display()
-            ))
-        },
-    )?;
-    Ok(())
-}
-
-fn load_javascript_entrypoint_source(
-    vm: &mut VmState,
-    host_cwd: &Path,
-    entrypoint: &str,
-    env: &BTreeMap<String, String>,
-) -> Option<String> {
-    let mut read_guest_file = |path: &str| {
-        vm.kernel
-            .read_file(path)
-            .ok()
-            .and_then(|bytes| String::from_utf8(bytes).ok())
-    };
-
-    if let Some(source) = env
-        .get("AGENTOS_GUEST_ENTRYPOINT")
-        .filter(|path| path.starts_with('/'))
-        .and_then(|path| read_guest_file(path))
-    {
-        return Some(source);
-    }
-
-    if entrypoint.starts_with('/') {
-        if let Some(source) = read_guest_file(entrypoint) {
-            return Some(source);
-        }
-    }
-
-    let host_entrypoint = if Path::new(entrypoint).is_absolute() {
-        PathBuf::from(entrypoint)
-    } else {
-        host_cwd.join(entrypoint)
-    };
-    let normalized_entrypoint = normalize_host_path(&host_entrypoint);
-    let sandbox_root = normalize_host_path(&vm.cwd);
-    let host_cwd = normalize_host_path(&vm.host_cwd);
-    if !path_is_within_root(&normalized_entrypoint, &sandbox_root)
-        && !path_is_within_root(&normalized_entrypoint, &host_cwd)
-    {
-        return None;
-    }
-
-    fs::read_to_string(&normalized_entrypoint).ok()
-}
-
-fn emit_dns_resolution_event<B>(
-    bridge: &SharedBridge<B>,
-    vm_id: &str,
-    hostname: &str,
-    source: KernelDnsResolutionSource,
-    addresses: &[IpAddr],
-    dns: &VmDnsConfig,
-) where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let _ = emit_structured_event(
-        bridge,
-        vm_id,
-        "network.dns.resolved",
-        audit_fields([
-            ("hostname", hostname.to_owned()),
-            ("source", source.as_str().to_owned()),
-            (
-                "addresses",
-                addresses
-                    .iter()
-                    .map(ToString::to_string)
-                    .collect::<Vec<_>>()
-                    .join(","),
-            ),
-            ("address_count", addresses.len().to_string()),
-            ("resolver_count", dns.name_servers.len().to_string()),
-            (
-                "resolvers",
-                dns.name_servers
-                    .iter()
-                    .map(ToString::to_string)
-                    .collect::<Vec<_>>()
-                    .join(","),
-            ),
-        ]),
-    );
-}
-
-fn emit_dns_record_resolution_event<B>(
-    bridge: &SharedBridge<B>,
-    vm_id: &str,
-    hostname: &str,
-    resolution: &DnsRecordResolution,
-    dns: &VmDnsConfig,
-) where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    if let Some(addresses) = dns_resolution_ip_addrs(resolution.records()) {
-        emit_dns_resolution_event(
-            bridge,
-            vm_id,
-            hostname,
-            resolution.source(),
-            &addresses,
-            dns,
-        );
-        return;
-    }
-
-    let _ = emit_structured_event(
-        bridge,
-        vm_id,
-        "network.dns.resolved",
-        audit_fields([
-            ("hostname", hostname.to_owned()),
-            ("source", resolution.source().as_str().to_owned()),
-            (
-                "addresses",
-                resolution
-                    .records()
-                    .iter()
-                    .map(summarize_dns_record)
-                    .collect::<Vec<_>>()
-                    .join(","),
-            ),
-            ("address_count", resolution.records().len().to_string()),
-            ("resolver_count", dns.name_servers.len().to_string()),
-            (
-                "resolvers",
-                dns.name_servers
-                    .iter()
-                    .map(ToString::to_string)
-                    .collect::<Vec<_>>()
-                    .join(","),
-            ),
-        ]),
-    );
-}
-
-fn emit_dns_resolution_failure_event<B>(
-    bridge: &SharedBridge<B>,
-    vm_id: &str,
-    hostname: &str,
-    dns: &VmDnsConfig,
-    error: &SidecarError,
-) where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let _ = emit_structured_event(
-        bridge,
-        vm_id,
-        "network.dns.resolve_failed",
-        audit_fields([
-            ("hostname", hostname.to_owned()),
-            ("reason", error.to_string()),
-            ("resolver_count", dns.name_servers.len().to_string()),
-            (
-                "resolvers",
-                dns.name_servers
-                    .iter()
-                    .map(ToString::to_string)
-                    .collect::<Vec<_>>()
-                    .join(","),
-            ),
-        ]),
-    );
-}
-
-fn parse_dns_record_type(rrtype: &str) -> Result<RecordType, SidecarError> {
-    match rrtype {
-        "A" => Ok(RecordType::A),
-        "AAAA" => Ok(RecordType::AAAA),
-        "MX" => Ok(RecordType::MX),
-        "TXT" => Ok(RecordType::TXT),
-        "SRV" => Ok(RecordType::SRV),
-        "CNAME" => Ok(RecordType::CNAME),
-        "PTR" => Ok(RecordType::PTR),
-        "NS" => Ok(RecordType::NS),
-        "SOA" => Ok(RecordType::SOA),
-        "NAPTR" => Ok(RecordType::NAPTR),
-        "CAA" => Ok(RecordType::CAA),
-        "ANY" => Ok(RecordType::ANY),
-        other => Err(SidecarError::Execution(format!(
-            "ERR_NOT_IMPLEMENTED: dns rrtype {other} is not supported by the secure-exec dns bridge"
-        ))),
-    }
-}
-
-fn dns_resolution_to_node_value(
-    resolution: &DnsRecordResolution,
-    requested_type: &str,
-) -> Result<Value, SidecarError> {
-    let safe_ips = dns_resolution_safe_ip_set(resolution.records(), resolution.hostname())?;
-    match requested_type {
-        "A" | "AAAA" => Ok(Value::Array(
-            resolution
-                .records()
-                .iter()
-                .filter_map(|record| dns_record_ip_string(record, &safe_ips))
-                .map(Value::String)
-                .collect(),
-        )),
-        "MX" => Ok(Value::Array(
-            resolution
-                .records()
-                .iter()
-                .filter_map(|record| match record.data() {
-                    RData::MX(mx) => Some(json!({
-                        "priority": mx.preference,
-                        "exchange": normalize_dns_name_for_node(&mx.exchange),
-                        "type": "MX",
-                    })),
-                    _ => None,
-                })
-                .collect(),
-        )),
-        "TXT" => Ok(Value::Array(
-            resolution
-                .records()
-                .iter()
-                .filter_map(|record| match record.data() {
-                    RData::TXT(txt) => Some(Value::Array(
-                        txt.txt_data
-                            .iter()
-                            .map(|entry| Value::String(String::from_utf8_lossy(entry).into_owned()))
-                            .collect(),
-                    )),
-                    _ => None,
-                })
-                .collect(),
-        )),
-        "SRV" => Ok(Value::Array(
-            resolution
-                .records()
-                .iter()
-                .filter_map(|record| match record.data() {
-                    RData::SRV(srv) => Some(json!({
-                        "priority": srv.priority,
-                        "weight": srv.weight,
-                        "port": srv.port,
-                        "name": normalize_dns_name_for_node(&srv.target),
-                        "type": "SRV",
-                    })),
-                    _ => None,
-                })
-                .collect(),
-        )),
-        "CNAME" => Ok(Value::Array(
-            resolution
-                .records()
-                .iter()
-                .filter_map(|record| match record.data() {
-                    RData::CNAME(name) => Some(Value::String(normalize_dns_name_for_node(&name.0))),
-                    _ => None,
-                })
-                .collect(),
-        )),
-        "PTR" => Ok(Value::Array(
-            resolution
-                .records()
-                .iter()
-                .filter_map(|record| match record.data() {
-                    RData::PTR(name) => Some(Value::String(normalize_dns_name_for_node(&name.0))),
-                    _ => None,
-                })
-                .collect(),
-        )),
-        "NS" => Ok(Value::Array(
-            resolution
-                .records()
-                .iter()
-                .filter_map(|record| match record.data() {
-                    RData::NS(name) => Some(Value::String(normalize_dns_name_for_node(&name.0))),
-                    _ => None,
-                })
-                .collect(),
-        )),
-        "SOA" => resolution
-            .records()
-            .iter()
-            .find_map(|record| match record.data() {
-                RData::SOA(soa) => Some(json!({
-                    "nsname": normalize_dns_name_for_node(&soa.mname),
-                    "hostmaster": normalize_dns_name_for_node(&soa.rname),
-                    "serial": soa.serial,
-                    "refresh": soa.refresh,
-                    "retry": soa.retry,
-                    "expire": soa.expire,
-                    "minttl": soa.minimum,
-                })),
-                _ => None,
-            })
-            .ok_or_else(|| {
-                SidecarError::Execution(String::from("failed to resolve DNS SOA record"))
-            }),
-        "NAPTR" => Ok(Value::Array(
-            resolution
-                .records()
-                .iter()
-                .filter_map(|record| match record.data() {
-                    RData::NAPTR(naptr) => Some(json!({
-                        "flags": String::from_utf8_lossy(&naptr.flags).into_owned(),
-                        "service": String::from_utf8_lossy(&naptr.services).into_owned(),
-                        "regexp": String::from_utf8_lossy(&naptr.regexp).into_owned(),
-                        "replacement": normalize_dns_name_for_node(&naptr.replacement),
-                        "order": naptr.order,
-                        "preference": naptr.preference,
-                    })),
-                    _ => None,
-                })
-                .collect(),
-        )),
-        "CAA" => Ok(Value::Array(
-            resolution
-                .records()
-                .iter()
-                .filter_map(|record| match record.data() {
-                    RData::CAA(caa) => {
-                        let mut value = serde_json::Map::new();
-                        value.insert(
-                            "critical".to_owned(),
-                            Value::from(u8::from(caa.issuer_critical)),
-                        );
-                        value.insert("type".to_owned(), Value::String(String::from("CAA")));
-                        if caa.tag.eq_ignore_ascii_case("iodef") {
-                            value.insert(
-                                "iodef".to_owned(),
-                                Value::String(
-                                    caa.value_as_iodef()
-                                        .map(|url| url.to_string())
-                                        .unwrap_or_else(|_| {
-                                            String::from_utf8_lossy(&caa.value).into_owned()
-                                        }),
-                                ),
-                            );
-                        } else if let Ok((issuer, _params)) = caa.value_as_issue() {
-                            let field = if caa.tag.eq_ignore_ascii_case("issuewild") {
-                                "issuewild"
-                            } else {
-                                "issue"
-                            };
-                            value.insert(
-                                field.to_owned(),
-                                Value::String(
-                                    issuer.as_ref().map(ToString::to_string).unwrap_or_else(|| {
-                                        String::from_utf8_lossy(&caa.value).into_owned()
-                                    }),
-                                ),
-                            );
-                        } else {
-                            value.insert(
-                                caa.tag.to_ascii_lowercase(),
-                                Value::String(String::from_utf8_lossy(&caa.value).into_owned()),
-                            );
-                        }
-                        Some(Value::Object(value))
-                    }
-                    _ => None,
-                })
-                .collect(),
-        )),
-        "ANY" => Ok(Value::Array(
-            resolution
-                .records()
-                .iter()
-                .filter_map(|record| dns_any_record_to_value(record, &safe_ips))
-                .collect(),
-        )),
-        other => Err(SidecarError::Execution(format!(
-            "ERR_NOT_IMPLEMENTED: dns rrtype {other} is not supported by the secure-exec dns bridge"
-        ))),
-    }
-}
-
-fn dns_resolution_safe_ip_set(
-    records: &[Record],
-    hostname: &str,
-) -> Result<BTreeSet<IpAddr>, SidecarError> {
-    let ips = records
-        .iter()
-        .filter_map(dns_record_ip_addr)
-        .collect::<Vec<_>>();
-    if ips.is_empty() {
-        return Ok(BTreeSet::new());
-    }
-    Ok(filter_dns_safe_ip_addrs(ips, hostname)?
-        .into_iter()
-        .collect())
-}
-
-fn dns_resolution_ip_addrs(records: &[Record]) -> Option<Vec<IpAddr>> {
-    let ips = records
-        .iter()
-        .filter_map(dns_record_ip_addr)
-        .collect::<Vec<_>>();
-    if ips.is_empty() {
-        return None;
-    }
-    Some(ips)
-}
-
-fn dns_record_ip_addr(record: &Record) -> Option<IpAddr> {
-    match record.data() {
-        RData::A(address) => Some(IpAddr::V4(**address)),
-        RData::AAAA(address) => Some(IpAddr::V6(**address)),
-        _ => None,
-    }
-}
-
-fn dns_record_ip_string(record: &Record, safe_ips: &BTreeSet<IpAddr>) -> Option<String> {
-    let ip = dns_record_ip_addr(record)?;
-    safe_ips.contains(&ip).then(|| ip.to_string())
-}
-
-fn dns_any_record_to_value(record: &Record, safe_ips: &BTreeSet<IpAddr>) -> Option<Value> {
-    let value = match record.data() {
-        RData::A(_) | RData::AAAA(_) => json!({
-            "address": dns_record_ip_string(record, safe_ips)?,
-            "ttl": record.ttl(),
-            "type": record.record_type().to_string(),
-        }),
-        RData::MX(mx) => json!({
-            "exchange": normalize_dns_name_for_node(&mx.exchange),
-            "priority": mx.preference,
-            "type": "MX",
-        }),
-        RData::TXT(txt) => json!({
-            "entries": txt
-                .txt_data
-                .iter()
-                .map(|entry| String::from_utf8_lossy(entry).into_owned())
-                .collect::<Vec<_>>(),
-            "type": "TXT",
-        }),
-        RData::SRV(srv) => json!({
-            "name": normalize_dns_name_for_node(&srv.target),
-            "port": srv.port,
-            "priority": srv.priority,
-            "weight": srv.weight,
-            "type": "SRV",
-        }),
-        RData::CNAME(name) => json!({
-            "value": normalize_dns_name_for_node(&name.0),
-            "type": "CNAME",
-        }),
-        RData::PTR(name) => json!({
-            "value": normalize_dns_name_for_node(&name.0),
-            "type": "PTR",
-        }),
-        RData::NS(name) => json!({
-            "value": normalize_dns_name_for_node(&name.0),
-            "type": "NS",
-        }),
-        RData::SOA(soa) => json!({
-            "nsname": normalize_dns_name_for_node(&soa.mname),
-            "hostmaster": normalize_dns_name_for_node(&soa.rname),
-            "serial": soa.serial,
-            "refresh": soa.refresh,
-            "retry": soa.retry,
-            "expire": soa.expire,
-            "minttl": soa.minimum,
-            "type": "SOA",
-        }),
-        RData::NAPTR(naptr) => json!({
-            "flags": String::from_utf8_lossy(&naptr.flags).into_owned(),
-            "service": String::from_utf8_lossy(&naptr.services).into_owned(),
-            "regexp": String::from_utf8_lossy(&naptr.regexp).into_owned(),
-            "replacement": normalize_dns_name_for_node(&naptr.replacement),
-            "order": naptr.order,
-            "preference": naptr.preference,
-            "type": "NAPTR",
-        }),
-        RData::CAA(caa) => {
-            let mut value = serde_json::Map::new();
-            value.insert(
-                "critical".to_owned(),
-                Value::from(u8::from(caa.issuer_critical)),
-            );
-            value.insert("type".to_owned(), Value::String(String::from("CAA")));
-            if caa.tag.eq_ignore_ascii_case("iodef") {
-                value.insert(
-                    "iodef".to_owned(),
-                    Value::String(
-                        caa.value_as_iodef()
-                            .map(|url| url.to_string())
-                            .unwrap_or_else(|_| String::from_utf8_lossy(&caa.value).into_owned()),
-                    ),
-                );
-            } else if let Ok((issuer, _params)) = caa.value_as_issue() {
-                let field = if caa.tag.eq_ignore_ascii_case("issuewild") {
-                    "issuewild"
-                } else {
-                    "issue"
-                };
-                value.insert(
-                    field.to_owned(),
-                    Value::String(
-                        issuer
-                            .as_ref()
-                            .map(ToString::to_string)
-                            .unwrap_or_else(|| String::from_utf8_lossy(&caa.value).into_owned()),
-                    ),
-                );
-            }
-            Value::Object(value)
-        }
-        _ => return None,
-    };
-    Some(value)
-}
-
-fn normalize_dns_name_for_node(name: &impl ToString) -> String {
-    name.to_string().trim_end_matches('.').to_owned()
-}
-
-fn summarize_dns_record(record: &Record) -> String {
-    match record.data() {
-        RData::A(_) | RData::AAAA(_) => record.data().to_string(),
-        _ => format!("{} {}", record.record_type(), record.data()),
-    }
-}
-
-// build_root_filesystem, convert_root_lower_descriptor, convert_root_filesystem_entry,
-// root_snapshot_entry moved to crate::bootstrap
-
-// apply_root_filesystem_entry, ensure_parent_directories moved to crate::bootstrap
-
-// ProcNetEntry moved to crate::state
-
-fn find_socket_state_entry(
-    vm: Option<&VmState>,
-    kind: SocketQueryKind,
-    request: &FindListenerRequest,
-) -> Result<Option<SocketStateEntry>, SidecarError> {
-    let vm = vm.ok_or_else(|| SidecarError::InvalidState(String::from("unknown sidecar VM")))?;
-
-    for (process_id, process) in &vm.active_processes {
-        if let Some(path) = request.path.as_deref() {
-            if matches!(kind, SocketQueryKind::TcpListener) {
-                for listener in process.unix_listeners.values() {
-                    if listener.path() != path {
-                        continue;
-                    }
-                    return Ok(Some(SocketStateEntry {
-                        process_id: process_id.to_owned(),
-                        host: None,
-                        port: None,
-                        path: Some(path.to_owned()),
-                    }));
-                }
-            }
-        }
-
-        if request.path.is_none() {
-            if let Some(entry) =
-                find_kernel_socket_state_entry(&vm.kernel, process_id, process, kind, request)?
-            {
-                return Ok(Some(entry));
-            }
-
-            match kind {
-                SocketQueryKind::TcpListener => {
-                    for server in process.http_servers.values() {
-                        let local_addr = server.guest_local_addr;
-                        let local_host = local_addr.ip().to_string();
-                        if !socket_host_matches(request.host.as_deref(), &local_host) {
-                            continue;
-                        }
-                        if let Some(port) = request.port {
-                            if local_addr.port() != port {
-                                continue;
-                            }
-                        }
-                        return Ok(Some(SocketStateEntry {
-                            process_id: process_id.to_owned(),
-                            host: Some(local_host),
-                            port: Some(local_addr.port()),
-                            path: None,
-                        }));
-                    }
-
-                    for listener in process.tcp_listeners.values() {
-                        if listener.kernel_socket_id.is_some() {
-                            continue;
-                        }
-                        let local_addr = listener.guest_local_addr();
-                        let local_host = local_addr.ip().to_string();
-                        if !socket_host_matches(request.host.as_deref(), &local_host) {
-                            continue;
-                        }
-                        if let Some(port) = request.port {
-                            if local_addr.port() != port {
-                                continue;
-                            }
-                        }
-                        return Ok(Some(SocketStateEntry {
-                            process_id: process_id.to_owned(),
-                            host: Some(local_host),
-                            port: Some(local_addr.port()),
-                            path: None,
-                        }));
-                    }
-                }
-                SocketQueryKind::UdpBound => {
-                    for socket in process.udp_sockets.values() {
-                        if socket.kernel_socket_id.is_some() {
-                            continue;
-                        }
-                        let Some(local_addr) = socket.local_addr() else {
-                            continue;
-                        };
-                        let local_host = local_addr.ip().to_string();
-                        if !socket_host_matches(request.host.as_deref(), &local_host) {
-                            continue;
-                        }
-                        if let Some(port) = request.port {
-                            if local_addr.port() != port {
-                                continue;
-                            }
-                        }
-                        return Ok(Some(SocketStateEntry {
-                            process_id: process_id.to_owned(),
-                            host: Some(local_host),
-                            port: Some(local_addr.port()),
-                            path: None,
-                        }));
-                    }
-                }
-            }
-        }
-
-        let child_pid = process.execution.child_pid();
-        let inodes = socket_inodes_for_pid(child_pid)?;
-        if inodes.is_empty() {
-            continue;
-        }
-
-        if let Some(path) = request.path.as_deref() {
-            if let Some(listener) = find_unix_socket_for_pid(child_pid, &inodes, path, process_id)?
-            {
-                return Ok(Some(listener));
-            }
-            continue;
-        }
-
-        let table_paths = match kind {
-            SocketQueryKind::TcpListener => [
-                format!("/proc/{child_pid}/net/tcp"),
-                format!("/proc/{child_pid}/net/tcp6"),
-            ],
-            SocketQueryKind::UdpBound => [
-                format!("/proc/{child_pid}/net/udp"),
-                format!("/proc/{child_pid}/net/udp6"),
-            ],
-        };
-        for table_path in table_paths {
-            if let Some(entry) = find_inet_socket_for_pid(
-                &table_path,
-                &inodes,
-                kind,
-                request.host.as_deref(),
-                request.port,
-                process_id,
-            )? {
-                return Ok(Some(entry));
-            }
-        }
-    }
-
-    Ok(None)
-}
-
-fn require_vm_inspection_permission<B>(
-    bridge: &SharedBridge<B>,
-    vm_id: &str,
-    capability: &str,
-    domain: &str,
-    resource: &str,
-) -> Result<(), SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let decision = bridge.static_permission_decision(vm_id, capability, domain, Some(resource));
-    if decision.as_ref().is_some_and(|decision| decision.allow) {
-        return Ok(());
-    }
-
-    let reason = decision
-        .and_then(|decision| decision.reason)
-        .unwrap_or_else(|| format!("{capability} permission required"));
-    Err(SidecarError::Execution(format!(
-        "EACCES: permission denied, {resource}: {reason}"
-    )))
-}
-
-fn socket_query_resource(kind: SocketQueryKind, request: &FindListenerRequest) -> String {
-    if let Some(path) = request.path.as_deref() {
-        return format!("unix://{path}");
-    }
-
-    let host = request.host.as_deref().unwrap_or("*");
-    let port = request
-        .port
-        .map_or_else(|| String::from("*"), |port| port.to_string());
-    match kind {
-        SocketQueryKind::TcpListener => format!("tcp://{host}:{port}"),
-        SocketQueryKind::UdpBound => format!("udp://{host}:{port}"),
-    }
-}
-
-fn snapshot_vm_processes(vm: &VmState) -> Vec<ProcessSnapshotEntry> {
-    let process_table = vm.kernel.list_processes();
-    snapshot_vm_processes_inner(vm, &process_table)
-}
-
-fn snapshot_vm_processes_inner(
-    vm: &VmState,
-    process_table: &BTreeMap<u32, secure_exec_kernel::process_table::ProcessInfo>,
-) -> Vec<ProcessSnapshotEntry> {
-    let mut entries = Vec::new();
-
-    for (process_id, process) in &vm.active_processes {
-        collect_process_snapshot_entries(process_id, process, process_table, &mut entries);
-    }
-
-    for exited in &vm.exited_process_snapshots {
-        entries.push(exited.process.clone());
-    }
-
-    entries
-}
-
-fn prune_exited_process_snapshots(vm: &mut VmState) {
-    let cutoff = Instant::now() - EXITED_PROCESS_SNAPSHOT_RETENTION;
-    while vm
-        .exited_process_snapshots
-        .front()
-        .is_some_and(|snapshot| snapshot.captured_at < cutoff)
-    {
-        vm.exited_process_snapshots.pop_front();
-    }
-}
-
-fn build_process_snapshot_entry(
-    process_id: &str,
-    process: &ActiveProcess,
-    info: &secure_exec_kernel::process_table::ProcessInfo,
-    exit_code: Option<i32>,
-) -> ProcessSnapshotEntry {
-    wire_process_snapshot_entry_from_shared(process_snapshot_entry_from_kernel(
-        process_id,
-        info,
-        process.guest_cwd.clone(),
-        exit_code,
-    ))
-}
-
-fn wire_process_snapshot_entry_from_shared(
-    entry: SharedProcessSnapshotEntry,
-) -> ProcessSnapshotEntry {
-    ProcessSnapshotEntry {
-        process_id: entry.process_id,
-        pid: entry.pid,
-        ppid: entry.ppid,
-        pgid: entry.pgid,
-        sid: entry.sid,
-        driver: entry.driver,
-        command: entry.command,
-        args: entry.args,
-        cwd: entry.cwd,
-        status: match entry.status {
-            SharedProcessSnapshotStatus::Running => ProcessSnapshotStatus::Running,
-            SharedProcessSnapshotStatus::Stopped => ProcessSnapshotStatus::Stopped,
-            SharedProcessSnapshotStatus::Exited => ProcessSnapshotStatus::Exited,
-        },
-        exit_code: entry.exit_code,
-    }
-}
-
-fn collect_process_snapshot_entries(
-    process_id: &str,
-    process: &ActiveProcess,
-    process_table: &BTreeMap<u32, secure_exec_kernel::process_table::ProcessInfo>,
-    entries: &mut Vec<ProcessSnapshotEntry>,
-) {
-    if let Some(info) = process_table.get(&process.kernel_pid) {
-        entries.push(build_process_snapshot_entry(
-            process_id, process, info, None,
-        ));
-    }
-
-    for (child_id, child) in &process.child_processes {
-        let child_process_id = format!("{process_id}/{child_id}");
-        collect_process_snapshot_entries(&child_process_id, child, process_table, entries);
-    }
-}
-
-fn find_kernel_socket_state_entry(
-    kernel: &SidecarKernel,
-    process_id: &str,
-    process: &ActiveProcess,
-    kind: SocketQueryKind,
-    request: &FindListenerRequest,
-) -> Result<Option<SocketStateEntry>, SidecarError> {
-    let entry = match kind {
-        SocketQueryKind::TcpListener => process
-            .tcp_listeners
-            .values()
-            .filter_map(|listener| listener.kernel_socket_id)
-            .find_map(|socket_id| {
-                kernel_socket_state_entry(kernel, process_id, socket_id, kind, request)
-            }),
-        SocketQueryKind::UdpBound => process
-            .udp_sockets
-            .values()
-            .filter_map(|socket| socket.kernel_socket_id)
-            .find_map(|socket_id| {
-                kernel_socket_state_entry(kernel, process_id, socket_id, kind, request)
-            }),
-    };
-
-    if entry.is_some() {
-        return Ok(entry);
-    }
-
-    for child in process.child_processes.values() {
-        if let Some(entry) =
-            find_kernel_socket_state_entry(kernel, process_id, child, kind, request)?
-        {
-            return Ok(Some(entry));
-        }
-    }
-
-    Ok(None)
-}
-
-fn kernel_socket_state_entry(
-    kernel: &SidecarKernel,
-    process_id: &str,
-    socket_id: SocketId,
-    kind: SocketQueryKind,
-    request: &FindListenerRequest,
-) -> Option<SocketStateEntry> {
-    let record = kernel.socket_get(socket_id)?;
-    let local_address = record.local_address()?;
-    match kind {
-        SocketQueryKind::TcpListener if record.state() == SocketState::Listening => {}
-        SocketQueryKind::TcpListener => return None,
-        SocketQueryKind::UdpBound => {}
-    }
-
-    if !socket_host_matches(request.host.as_deref(), local_address.host()) {
-        return None;
-    }
-    if request
-        .port
-        .is_some_and(|port| local_address.port() != port)
-    {
-        return None;
-    }
-
-    Some(SocketStateEntry {
-        process_id: process_id.to_owned(),
-        host: Some(local_address.host().to_owned()),
-        port: Some(local_address.port()),
-        path: None,
-    })
-}
-
-fn socket_inodes_for_pid(pid: u32) -> Result<BTreeSet<u64>, SidecarError> {
-    let fd_dir = PathBuf::from(format!("/proc/{pid}/fd"));
-    let entries = match fs::read_dir(&fd_dir) {
-        Ok(entries) => entries,
-        Err(error) if error.kind() == std::io::ErrorKind::NotFound => return Ok(BTreeSet::new()),
-        Err(error) => {
-            return Err(SidecarError::Io(format!(
-                "failed to read socket descriptors for process {pid}: {error}"
-            )));
-        }
-    };
-
-    let mut inodes = BTreeSet::new();
-    for entry in entries {
-        let entry = entry.map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to inspect fd entry for process {pid}: {error}"
-            ))
-        })?;
-        let target = match fs::read_link(entry.path()) {
-            Ok(target) => target,
-            Err(_) => continue,
-        };
-        if let Some(inode) = parse_socket_inode(&target) {
-            inodes.insert(inode);
-        }
-    }
-
-    Ok(inodes)
-}
-
-fn parse_socket_inode(target: &Path) -> Option<u64> {
-    let value = target.to_string_lossy();
-    let trimmed = value.strip_prefix("socket:[")?.strip_suffix(']')?;
-    trimmed.parse().ok()
-}
-
-fn unix_socket_path(addr: &UnixSocketAddr) -> Option<String> {
-    addr.as_pathname()
-        .map(|path| path.to_string_lossy().into_owned())
-}
-
-fn find_unix_socket_for_pid(
-    pid: u32,
-    inodes: &BTreeSet<u64>,
-    path: &str,
-    process_id: &str,
-) -> Result<Option<SocketStateEntry>, SidecarError> {
-    let table_path = format!("/proc/{pid}/net/unix");
-    let contents = match fs::read_to_string(&table_path) {
-        Ok(contents) => contents,
-        Err(error) if error.kind() == std::io::ErrorKind::NotFound => return Ok(None),
-        Err(error) => {
-            return Err(SidecarError::Io(format!(
-                "failed to inspect unix sockets for process {pid}: {error}"
-            )));
-        }
-    };
-
-    for line in contents.lines().skip(1) {
-        let columns = line.split_whitespace().collect::<Vec<_>>();
-        if columns.len() < 8 {
-            continue;
-        }
-        let Ok(inode) = columns[6].parse::<u64>() else {
-            continue;
-        };
-        if !inodes.contains(&inode) || columns[7] != path {
-            continue;
-        }
-        return Ok(Some(SocketStateEntry {
-            process_id: process_id.to_owned(),
-            host: None,
-            port: None,
-            path: Some(path.to_owned()),
-        }));
-    }
-
-    Ok(None)
-}
-
-fn find_inet_socket_for_pid(
-    table_path: &str,
-    inodes: &BTreeSet<u64>,
-    kind: SocketQueryKind,
-    requested_host: Option<&str>,
-    requested_port: Option<u16>,
-    process_id: &str,
-) -> Result<Option<SocketStateEntry>, SidecarError> {
-    for entry in parse_proc_net_entries(table_path)? {
-        if !inodes.contains(&entry.inode) {
-            continue;
-        }
-        if matches!(kind, SocketQueryKind::TcpListener) && entry.state != "0A" {
-            continue;
-        }
-        if !socket_host_matches(requested_host, &entry.local_host) {
-            continue;
-        }
-        if let Some(port) = requested_port {
-            if entry.local_port != port {
-                continue;
-            }
-        }
-        return Ok(Some(SocketStateEntry {
-            process_id: process_id.to_owned(),
-            host: Some(entry.local_host),
-            port: Some(entry.local_port),
-            path: None,
-        }));
-    }
-
-    Ok(None)
-}
-
-fn is_unspecified_socket_host(host: &str) -> bool {
-    host == "0.0.0.0" || host == "::"
-}
-
-fn is_loopback_socket_host(host: &str) -> bool {
-    host == "127.0.0.1" || host == "::1" || host.eq_ignore_ascii_case("localhost")
-}
-
-pub(crate) fn vm_network_resource_counts(vm: &VmState) -> NetworkResourceCounts {
-    let snapshot = vm.kernel.resource_snapshot();
-    let mut counts = NetworkResourceCounts {
-        sockets: snapshot.sockets,
-        connections: snapshot.socket_connections,
-    };
-    for process in vm.active_processes.values() {
-        let process_counts = process.sidecar_only_network_resource_counts();
-        counts.sockets += process_counts.sockets;
-        counts.connections += process_counts.connections;
-    }
-    counts
-}
-
-#[allow(clippy::too_many_arguments)]
-fn collect_javascript_socket_port_state(
-    kernel: &SidecarKernel,
-    process_id: &str,
-    process: &ActiveProcess,
-    tcp_guest_to_host: &mut BTreeMap<(JavascriptSocketFamily, u16), u16>,
-    http_loopback_targets: &mut BTreeMap<
-        (JavascriptSocketFamily, u16),
-        JavascriptHttpLoopbackTarget,
-    >,
-    udp_guest_to_host: &mut BTreeMap<(JavascriptSocketFamily, u16), u16>,
-    udp_host_to_guest: &mut BTreeMap<(JavascriptSocketFamily, u16), u16>,
-    used_tcp_ports: &mut BTreeMap<JavascriptSocketFamily, BTreeSet<u16>>,
-    used_udp_ports: &mut BTreeMap<JavascriptSocketFamily, BTreeSet<u16>>,
-) {
-    for (family, port) in process.tcp_port_reservations.values() {
-        used_tcp_ports.entry(*family).or_default().insert(*port);
-    }
-
-    let mut record_tcp_listener = |guest_addr: SocketAddr, host_port: u16| {
-        let family = JavascriptSocketFamily::from_ip(guest_addr.ip());
-        used_tcp_ports
-            .entry(family)
-            .or_default()
-            .insert(guest_addr.port());
-        // VM-local loopback connects should also resolve listeners bound to
-        // unspecified guest addresses like 0.0.0.0/::.
-        tcp_guest_to_host.insert((family, guest_addr.port()), host_port);
-    };
-
-    for listener in process.tcp_listeners.values() {
-        let local_addr = listener
-            .kernel_socket_id
-            .and_then(|socket_id| kernel.socket_get(socket_id))
-            .and_then(|record| record.local_address().cloned())
-            .and_then(|address| resolve_tcp_bind_addr(address.host(), address.port()).ok())
-            .unwrap_or_else(|| listener.guest_local_addr());
-        record_tcp_listener(local_addr, local_addr.port());
-    }
-
-    for (server_id, server) in &process.http_servers {
-        let host_port = match server.listener.local_addr() {
-            Ok(addr) => addr.port(),
-            Err(_) => continue,
-        };
-        record_tcp_listener(server.guest_local_addr, host_port);
-        let family = JavascriptSocketFamily::from_ip(server.guest_local_addr.ip());
-        http_loopback_targets.insert(
-            (family, server.guest_local_addr.port()),
-            JavascriptHttpLoopbackTarget {
-                process_id: process_id.to_owned(),
-                server_id: *server_id,
-            },
-        );
-    }
-
-    if let Ok(http2) = process.http2.shared.lock() {
-        for server in http2.servers.values() {
-            record_tcp_listener(server.guest_local_addr, server.actual_local_addr.port());
-        }
-    }
-
-    for socket in process.tcp_sockets.values() {
-        let guest_addr = socket
-            .kernel_socket_id
-            .and_then(|socket_id| kernel.socket_get(socket_id))
-            .and_then(|record| record.local_address().cloned())
-            .and_then(|address| resolve_tcp_bind_addr(address.host(), address.port()).ok())
-            .unwrap_or(socket.guest_local_addr);
-        let family = JavascriptSocketFamily::from_ip(guest_addr.ip());
-        used_tcp_ports
-            .entry(family)
-            .or_default()
-            .insert(guest_addr.port());
-    }
-
-    for socket in process.udp_sockets.values() {
-        let guest_addr = socket
-            .kernel_socket_id
-            .and_then(|socket_id| kernel.socket_get(socket_id))
-            .and_then(|record| record.local_address().cloned())
-            .and_then(|address| {
-                resolve_udp_bind_addr(address.host(), address.port(), socket.family).ok()
-            })
-            .or_else(|| socket.local_addr());
-        let Some(guest_addr) = guest_addr else {
-            continue;
-        };
-        let family = JavascriptSocketFamily::from_ip(guest_addr.ip());
-        used_udp_ports
-            .entry(family)
-            .or_default()
-            .insert(guest_addr.port());
-        if let Some(host_addr) = socket
-            .socket
-            .as_ref()
-            .and_then(|socket| socket.local_addr().ok())
-        {
-            if is_loopback_ip(guest_addr.ip()) {
-                udp_guest_to_host.insert((family, guest_addr.port()), host_addr.port());
-                udp_host_to_guest.insert((family, host_addr.port()), guest_addr.port());
-            }
-        } else if socket.kernel_socket_id.is_some() && is_loopback_ip(guest_addr.ip()) {
-            udp_guest_to_host.insert((family, guest_addr.port()), guest_addr.port());
-            udp_host_to_guest.insert((family, guest_addr.port()), guest_addr.port());
-        }
-    }
-
-    for (child_process_id, child) in &process.child_processes {
-        let child_id = format!("{process_id}/{child_process_id}");
-        collect_javascript_socket_port_state(
-            kernel,
-            &child_id,
-            child,
-            tcp_guest_to_host,
-            http_loopback_targets,
-            udp_guest_to_host,
-            udp_host_to_guest,
-            used_tcp_ports,
-            used_udp_ports,
-        );
-    }
-}
-
-pub(crate) fn build_javascript_socket_path_context(
-    vm: &VmState,
-) -> Result<JavascriptSocketPathContext, SidecarError> {
-    let mut loopback_exempt_ports = vm.create_loopback_exempt_ports.clone();
-    loopback_exempt_ports.extend(vm.configuration.loopback_exempt_ports.iter().copied());
-    let mut tcp_loopback_guest_to_host_ports = BTreeMap::new();
-    let mut http_loopback_targets = BTreeMap::new();
-    let mut udp_loopback_guest_to_host_ports = BTreeMap::new();
-    let mut udp_loopback_host_to_guest_ports = BTreeMap::new();
-    let mut used_tcp_guest_ports = BTreeMap::new();
-    let mut used_udp_guest_ports = BTreeMap::new();
-    for (process_id, process) in &vm.active_processes {
-        collect_javascript_socket_port_state(
-            &vm.kernel,
-            process_id,
-            process,
-            &mut tcp_loopback_guest_to_host_ports,
-            &mut http_loopback_targets,
-            &mut udp_loopback_guest_to_host_ports,
-            &mut udp_loopback_host_to_guest_ports,
-            &mut used_tcp_guest_ports,
-            &mut used_udp_guest_ports,
-        );
-    }
-    Ok(JavascriptSocketPathContext {
-        sandbox_root: vm.cwd.clone(),
-        mounts: vm.configuration.mounts.clone(),
-        listen_policy: vm.listen_policy,
-        loopback_exempt_ports,
-        tcp_loopback_guest_to_host_ports,
-        http_loopback_targets,
-        udp_loopback_guest_to_host_ports,
-        udp_loopback_host_to_guest_ports,
-        used_tcp_guest_ports,
-        used_udp_guest_ports,
-    })
-}
-
-fn check_network_resource_limit(
-    limit: Option<usize>,
-    current: usize,
-    additional: usize,
-    label: &str,
-) -> Result<(), SidecarError> {
-    if let Some(limit) = limit {
-        if current.saturating_add(additional) > limit {
-            return Err(SidecarError::Execution(format!(
-                "EAGAIN: maximum {label} count reached"
-            )));
-        }
-    }
-    Ok(())
-}
-
-fn normalize_tcp_listen_host(
-    host: Option<&str>,
-) -> Result<(JavascriptSocketFamily, &'static str, &'static str), SidecarError> {
-    match host.unwrap_or("127.0.0.1") {
-        "127.0.0.1" | "localhost" => Ok((JavascriptSocketFamily::Ipv4, "127.0.0.1", "127.0.0.1")),
-        "::1" => Ok((JavascriptSocketFamily::Ipv6, "::1", "::1")),
-        "0.0.0.0" => Ok((JavascriptSocketFamily::Ipv4, "127.0.0.1", "0.0.0.0")),
-        "::" => Ok((JavascriptSocketFamily::Ipv6, "::1", "::")),
-        other => Err(SidecarError::Execution(format!(
-            "EACCES: TCP listeners must bind to loopback or unspecified addresses, got {other}"
-        ))),
-    }
-}
-
-fn normalize_udp_bind_host(
-    host: Option<&str>,
-    family: JavascriptUdpFamily,
-) -> Result<(&'static str, &'static str, JavascriptSocketFamily), SidecarError> {
-    match (family, host) {
-        (JavascriptUdpFamily::Ipv4, None) | (JavascriptUdpFamily::Ipv4, Some("0.0.0.0")) => {
-            Ok(("127.0.0.1", "0.0.0.0", JavascriptSocketFamily::Ipv4))
-        }
-        (JavascriptUdpFamily::Ipv4, Some("127.0.0.1"))
-        | (JavascriptUdpFamily::Ipv4, Some("localhost")) => {
-            Ok(("127.0.0.1", "127.0.0.1", JavascriptSocketFamily::Ipv4))
-        }
-        (JavascriptUdpFamily::Ipv6, None) | (JavascriptUdpFamily::Ipv6, Some("::")) => {
-            Ok(("::1", "::", JavascriptSocketFamily::Ipv6))
-        }
-        (JavascriptUdpFamily::Ipv6, Some("::1"))
-        | (JavascriptUdpFamily::Ipv6, Some("localhost")) => {
-            Ok(("::1", "::1", JavascriptSocketFamily::Ipv6))
-        }
-        (JavascriptUdpFamily::Ipv4, Some(other)) => Err(SidecarError::Execution(format!(
-            "EACCES: udp4 sockets must bind to 127.0.0.1 or 0.0.0.0, got {other}"
-        ))),
-        (JavascriptUdpFamily::Ipv6, Some(other)) => Err(SidecarError::Execution(format!(
-            "EACCES: udp6 sockets must bind to ::1 or ::, got {other}"
-        ))),
-    }
-}
-
-fn allocate_guest_listen_port(
-    requested_port: u16,
-    family: JavascriptSocketFamily,
-    used_ports: &BTreeMap<JavascriptSocketFamily, BTreeSet<u16>>,
-    policy: VmListenPolicy,
-) -> Result<u16, SidecarError> {
-    let is_allowed = |port: u16| {
-        port >= policy.port_min
-            && port <= policy.port_max
-            && (policy.allow_privileged || port >= 1024)
-    };
-    let used = used_ports.get(&family);
-
-    if requested_port != 0 {
-        if !is_allowed(requested_port) {
-            let reason = if requested_port < 1024 && !policy.allow_privileged {
-                format!(
-                    "EACCES: privileged listen port {requested_port} requires {}=true",
-                    VM_LISTEN_ALLOW_PRIVILEGED_METADATA_KEY
-                )
-            } else {
-                format!(
-                    "EACCES: listen port {requested_port} is outside the allowed range {}-{}",
-                    policy.port_min, policy.port_max
-                )
-            };
-            return Err(SidecarError::Execution(reason));
-        }
-        if used.is_some_and(|ports| ports.contains(&requested_port)) {
-            return Err(sidecar_net_error(std::io::Error::from_raw_os_error(
-                libc::EADDRINUSE,
-            )));
-        }
-        return Ok(requested_port);
-    }
-
-    let allocation_start = policy
-        .port_min
-        .max(if policy.allow_privileged { 1 } else { 1024 });
-    for candidate in allocation_start..=policy.port_max {
-        if used.is_some_and(|ports| ports.contains(&candidate)) {
-            continue;
-        }
-        return Ok(candidate);
-    }
-
-    Err(sidecar_net_error(std::io::Error::from_raw_os_error(
-        libc::EADDRINUSE,
-    )))
-}
-
-fn socket_host_matches(requested: Option<&str>, actual: &str) -> bool {
-    match requested {
-        None => true,
-        Some(requested) if requested == actual => true,
-        Some(requested)
-            if is_unspecified_socket_host(requested) && is_unspecified_socket_host(actual) =>
-        {
-            true
-        }
-        Some(requested) if is_unspecified_socket_host(requested) => is_loopback_socket_host(actual),
-        Some(requested) if requested.eq_ignore_ascii_case("localhost") => {
-            is_loopback_socket_host(actual)
-        }
-        _ => false,
-    }
-}
-
-fn parse_proc_net_entries(table_path: &str) -> Result<Vec<ProcNetEntry>, SidecarError> {
-    let contents = match fs::read_to_string(table_path) {
-        Ok(contents) => contents,
-        Err(error) if error.kind() == std::io::ErrorKind::NotFound => return Ok(Vec::new()),
-        Err(error) => {
-            return Err(SidecarError::Io(format!(
-                "failed to inspect socket table {table_path}: {error}"
-            )));
-        }
-    };
-
-    let mut entries = Vec::new();
-    for line in contents.lines().skip(1) {
-        let columns = line.split_whitespace().collect::<Vec<_>>();
-        if columns.len() < 10 {
-            continue;
-        }
-        let Some((host, port)) = parse_proc_ip_port(columns[1]) else {
-            continue;
-        };
-        let Ok(inode) = columns[9].parse::<u64>() else {
-            continue;
-        };
-        entries.push(ProcNetEntry {
-            local_host: host,
-            local_port: port,
-            state: columns[3].to_owned(),
-            inode,
-        });
-    }
-
-    Ok(entries)
-}
-
-fn parse_proc_ip_port(value: &str) -> Option<(String, u16)> {
-    let (raw_ip, raw_port) = value.split_once(':')?;
-    let port = u16::from_str_radix(raw_port, 16).ok()?;
-    let host = match raw_ip.len() {
-        8 => {
-            let raw = u32::from_str_radix(raw_ip, 16).ok()?;
-            Ipv4Addr::from(raw.to_le_bytes()).to_string()
-        }
-        32 => {
-            let mut bytes = [0_u8; 16];
-            for (index, chunk) in raw_ip.as_bytes().chunks(8).enumerate() {
-                let word = u32::from_str_radix(std::str::from_utf8(chunk).ok()?, 16).ok()?;
-                bytes[index * 4..(index + 1) * 4].copy_from_slice(&word.to_le_bytes());
-            }
-            Ipv6Addr::from(bytes).to_string()
-        }
-        _ => return None,
-    };
-    Some((host, port))
-}
-
-fn python_file_entrypoint(entrypoint: &str) -> Option<PathBuf> {
-    let path = Path::new(entrypoint);
-    (path.extension().and_then(|extension| extension.to_str()) == Some("py"))
-        .then(|| path.to_path_buf())
-}
-
-fn add_runtime_guest_path_mapping(
-    env: &mut BTreeMap<String, String>,
-    guest_path: &str,
-    host_path: &Path,
-) {
-    let mut mappings = env
-        .get("AGENTOS_GUEST_PATH_MAPPINGS")
-        .and_then(|value| serde_json::from_str::<Vec<Value>>(value).ok())
-        .unwrap_or_default();
-    mappings.retain(|mapping| {
-        mapping
-            .get("guestPath")
-            .and_then(Value::as_str)
-            .map(|existing| normalize_path(existing) != normalize_path(guest_path))
-            .unwrap_or(true)
-    });
-    mappings.push(json!({
-        "guestPath": normalize_path(guest_path),
-        "hostPath": host_path.display().to_string(),
-    }));
-    if let Ok(serialized) = serde_json::to_string(&mappings) {
-        env.insert(String::from("AGENTOS_GUEST_PATH_MAPPINGS"), serialized);
-    }
-}
-
-fn add_runtime_host_access_path(
-    env: &mut BTreeMap<String, String>,
-    key: &str,
-    host_path: &Path,
-    expand: bool,
-) {
-    let existing = env
-        .get(key)
-        .and_then(|value| serde_json::from_str::<Vec<String>>(value).ok())
-        .unwrap_or_default()
-        .into_iter()
-        .map(PathBuf::from)
-        .collect::<Vec<_>>();
-    let mut paths = existing;
-    paths.push(host_path.to_path_buf());
-    let normalized = if expand {
-        expand_host_access_paths(&paths)
-    } else {
-        dedupe_host_paths(&paths)
-    };
-    let serialized = normalized
-        .iter()
-        .map(|path| path.to_string_lossy().into_owned())
-        .collect::<Vec<_>>();
-    if let Ok(serialized) = serde_json::to_string(&serialized) {
-        env.insert(key.to_owned(), serialized);
-    }
-}
-
-// discover_command_guest_paths moved to crate::bootstrap
-
-fn is_path_like_specifier(specifier: &str) -> bool {
-    specifier.starts_with('/')
-        || specifier.starts_with("./")
-        || specifier.starts_with("../")
-        || specifier.starts_with("file:")
-}
-
-fn execution_wasm_permission_tier(tier: WasmPermissionTier) -> ExecutionWasmPermissionTier {
-    match tier {
-        WasmPermissionTier::Full => ExecutionWasmPermissionTier::Full,
-        WasmPermissionTier::ReadWrite => ExecutionWasmPermissionTier::ReadWrite,
-        WasmPermissionTier::ReadOnly => ExecutionWasmPermissionTier::ReadOnly,
-        WasmPermissionTier::Isolated => ExecutionWasmPermissionTier::Isolated,
-    }
-}
-
-fn resolve_wasm_permission_tier(
-    vm: &VmState,
-    command_name: Option<&str>,
-    explicit_tier: Option<WasmPermissionTier>,
-    entrypoint: &str,
-) -> WasmPermissionTier {
-    explicit_tier
-        .or_else(|| command_name.and_then(|command| vm.command_permissions.get(command).copied()))
-        .or_else(|| {
-            Path::new(entrypoint)
-                .file_name()
-                .and_then(|name| name.to_str())
-                .and_then(|command| vm.command_permissions.get(command).copied())
-        })
-        .unwrap_or(WasmPermissionTier::Full)
-}
-
-fn tokenize_shell_free_command(command: &str) -> Vec<String> {
-    command
-        .split_whitespace()
-        .filter(|segment| !segment.is_empty())
-        .map(str::to_owned)
-        .collect()
-}
-
-fn is_posix_shell_builtin(command: &str) -> bool {
-    matches!(
-        command,
-        "." | ":"
-            | "break"
-            | "cd"
-            | "continue"
-            | "eval"
-            | "exec"
-            | "exit"
-            | "export"
-            | "readonly"
-            | "return"
-            | "set"
-            | "shift"
-            | "times"
-            | "trap"
-            | "umask"
-            | "unset"
-    )
-}
-
-/// Single-token checks for shell-mode commands whose first word forces a real
-/// shell even when the command string has no shell metacharacters. This is not
-/// a parser: env-assignment prefixes (`FOO=bar cmd`) and shell reserved words
-/// have no meaning outside `sh`, so whitespace-tokenizing them would silently
-/// run the wrong program.
-fn shell_first_token_requires_shell(token: &str) -> bool {
-    token.contains('=') || is_shell_reserved_word(token)
-}
-
-fn is_shell_reserved_word(token: &str) -> bool {
-    matches!(
-        token,
-        "if" | "then"
-            | "elif"
-            | "else"
-            | "fi"
-            | "for"
-            | "in"
-            | "do"
-            | "done"
-            | "while"
-            | "until"
-            | "case"
-            | "esac"
-            | "{"
-            | "}"
-            | "!"
-    )
-}
-
-fn command_requires_shell(command: &str) -> bool {
-    command.chars().any(|ch| {
-        matches!(
-            ch,
-            '|' | '&'
-                | ';'
-                | '<'
-                | '>'
-                | '('
-                | ')'
-                | '$'
-                | '`'
-                | '*'
-                | '?'
-                | '['
-                | ']'
-                | '{'
-                | '}'
-                | '~'
-                | '\''
-                | '"'
-                | '\\'
-                | '\n'
-        )
-    })
-}
-
-fn host_mount_path_for_guest_path(vm: &VmState, guest_path: &str) -> Option<PathBuf> {
-    let normalized = normalize_path(guest_path);
-
-    let mut mounts = vm
-        .configuration
-        .mounts
-        .iter()
-        .filter_map(|mount| {
-            ((mount.plugin.id == "host_dir") || (mount.plugin.id == "module_access"))
-                .then(|| {
-                    mount_config_host_backing_path(&mount.plugin.config)
-                        .map(|host_path| (mount.guest_path.as_str(), host_path))
-                })
-                .flatten()
-        })
-        .collect::<Vec<_>>();
-    mounts.sort_by_key(|mount| std::cmp::Reverse(mount.0.len()));
-
-    for (guest_root, host_root) in mounts {
-        if normalized != guest_root && !normalized.starts_with(&format!("{guest_root}/")) {
-            continue;
-        }
-
-        let suffix = normalized
-            .strip_prefix(guest_root)
-            .unwrap_or_default()
-            .trim_start_matches('/');
-        let mut path = PathBuf::from(host_root);
-        if !suffix.is_empty() {
-            path.push(suffix);
-        }
-        return Some(path);
-    }
-
-    None
-}
-
-fn host_runtime_path_for_guest_path_with_env(
-    vm: &VmState,
-    runtime_env: &BTreeMap<String, String>,
-    guest_path: &str,
-    default_host_cwd: &Path,
-) -> Option<PathBuf> {
-    if let Some(path) = host_mount_path_for_guest_path(vm, guest_path) {
-        return Some(path);
-    }
-    if let Some(path) = host_path_from_runtime_guest_mappings(runtime_env, guest_path) {
-        return Some(path);
-    }
-
-    let normalized = normalize_path(guest_path);
-    let virtual_home = guest_virtual_home(vm);
-
-    if normalized == virtual_home || normalized.starts_with(&format!("{virtual_home}/")) {
-        let suffix = normalized
-            .strip_prefix(&virtual_home)
-            .unwrap_or_default()
-            .trim_start_matches('/');
-        let mut host_path = default_host_cwd.to_path_buf();
-        if !suffix.is_empty() {
-            host_path.push(suffix);
-        }
-        return Some(host_path);
-    }
-
-    None
-}
-
-#[derive(Deserialize, Serialize)]
-struct RuntimeGuestPathMapping {
-    #[serde(rename = "guestPath")]
-    guest_path: String,
-    #[serde(rename = "hostPath")]
-    host_path: String,
-    #[serde(rename = "readOnly", default)]
-    read_only: bool,
-}
-
-pub(crate) fn host_path_from_runtime_guest_mappings(
-    runtime_env: &BTreeMap<String, String>,
-    guest_path: &str,
-) -> Option<PathBuf> {
-    let mappings = runtime_env
-        .get("AGENTOS_GUEST_PATH_MAPPINGS")
-        .and_then(|value| serde_json::from_str::<Vec<RuntimeGuestPathMapping>>(value).ok())?;
-    let normalized = normalize_path(guest_path);
-
-    let mut sorted_mappings = mappings
-        .into_iter()
-        .filter_map(|mapping| {
-            (!mapping.guest_path.is_empty() && !mapping.host_path.is_empty()).then_some((
-                normalize_path(&mapping.guest_path),
-                PathBuf::from(mapping.host_path),
-            ))
-        })
-        .collect::<Vec<_>>();
-    sorted_mappings.sort_by_key(|mapping| std::cmp::Reverse(mapping.0.len()));
-
-    for (guest_root, mut host_root) in sorted_mappings {
-        if guest_root != "/"
-            && normalized != guest_root
-            && !normalized.starts_with(&format!("{guest_root}/"))
-        {
-            continue;
-        }
-        if guest_root == "/" && !normalized.starts_with('/') {
-            continue;
-        }
-
-        if host_root.is_relative() {
-            host_root = std::env::current_dir().ok()?.join(host_root);
-        }
-
-        let suffix = if guest_root == "/" {
-            normalized.trim_start_matches('/')
-        } else {
-            normalized
-                .strip_prefix(&guest_root)
-                .unwrap_or_default()
-                .trim_start_matches('/')
-        };
-        if !suffix.is_empty() {
-            host_root.push(suffix);
-        }
-        return Some(host_root);
-    }
-
-    None
-}
-
-fn guest_runtime_path_for_host_path(
-    runtime_env: &BTreeMap<String, String>,
-    virtual_home: &str,
-    cwd: &Path,
-    host_path: &str,
-) -> Option<String> {
-    let resolved = if host_path.starts_with("file://") {
-        PathBuf::from(host_path.trim_start_matches("file://"))
-    } else if host_path.starts_with("file:") {
-        PathBuf::from(host_path.trim_start_matches("file:"))
-    } else {
-        let candidate = PathBuf::from(host_path);
-        if candidate.is_absolute() {
-            candidate
-        } else if host_path.starts_with("./") || host_path.starts_with("../") {
-            cwd.join(candidate)
-        } else {
-            return None;
-        }
-    };
-    let normalized = normalize_host_path(&resolved);
-
-    if let Some(path) = guest_path_from_runtime_host_mappings(runtime_env, &normalized) {
-        return Some(path);
-    }
-
-    let normalized_cwd = normalize_host_path(cwd);
-    if !path_is_within_root(&normalized, &normalized_cwd) {
-        return None;
-    }
-
-    let virtual_home = if virtual_home.starts_with('/') {
-        virtual_home.to_string()
-    } else {
-        String::from("/root")
-    };
-    let suffix = normalized
-        .strip_prefix(&normalized_cwd)
-        .ok()?
-        .to_string_lossy()
-        .replace('\\', "/")
-        .trim_start_matches('/')
-        .to_owned();
-
-    Some(if suffix.is_empty() {
-        virtual_home
-    } else {
-        normalize_path(&format!("{virtual_home}/{suffix}"))
-    })
-}
-
-fn guest_path_from_runtime_host_mappings(
-    runtime_env: &BTreeMap<String, String>,
-    host_path: &Path,
-) -> Option<String> {
-    let mappings = runtime_env
-        .get("AGENTOS_GUEST_PATH_MAPPINGS")
-        .and_then(|value| serde_json::from_str::<Vec<RuntimeGuestPathMapping>>(value).ok())?;
-    let normalized = normalize_host_path(host_path);
-
-    let mut sorted_mappings = mappings
-        .into_iter()
-        .filter_map(|mapping| {
-            (!mapping.guest_path.is_empty() && !mapping.host_path.is_empty()).then_some((
-                normalize_path(&mapping.guest_path),
-                normalize_host_path(Path::new(&mapping.host_path)),
-            ))
-        })
-        .collect::<Vec<_>>();
-    sorted_mappings.sort_by_key(|mapping| std::cmp::Reverse(mapping.1.as_os_str().len()));
-
-    for (guest_root, host_root) in sorted_mappings {
-        if !path_is_within_root(&normalized, &host_root) {
-            continue;
-        }
-        let suffix = normalized
-            .strip_prefix(&host_root)
-            .ok()?
-            .to_string_lossy()
-            .replace('\\', "/")
-            .trim_start_matches('/')
-            .to_owned();
-
-        return Some(if suffix.is_empty() {
-            guest_root
-        } else if guest_root == "/" {
-            normalize_path(&format!("/{suffix}"))
-        } else {
-            normalize_path(&format!("{guest_root}/{suffix}"))
-        });
-    }
-
-    None
-}
-
-fn host_mount_path_for_guest_path_from_mounts(
-    mounts: &[crate::protocol::MountDescriptor],
-    guest_path: &str,
-) -> Option<PathBuf> {
-    let normalized = normalize_path(guest_path);
-
-    let mut host_mounts = mounts
-        .iter()
-        .filter_map(|mount| {
-            ((mount.plugin.id == "host_dir") || (mount.plugin.id == "module_access"))
-                .then(|| {
-                    mount_config_host_backing_path(&mount.plugin.config)
-                        .map(|host_path| (mount.guest_path.as_str(), host_path))
-                })
-                .flatten()
-        })
-        .collect::<Vec<_>>();
-    host_mounts.sort_by_key(|mount| std::cmp::Reverse(mount.0.len()));
-
-    for (guest_root, host_root) in host_mounts {
-        if normalized != guest_root && !normalized.starts_with(&format!("{guest_root}/")) {
-            continue;
-        }
-
-        let suffix = normalized
-            .strip_prefix(guest_root)
-            .unwrap_or_default()
-            .trim_start_matches('/');
-        let mut path = PathBuf::from(host_root);
-        if !suffix.is_empty() {
-            path.push(suffix);
-        }
-        return Some(path);
-    }
-
-    None
-}
-
-#[cfg(test)]
-mod host_mount_path_for_guest_path_from_mounts_tests {
-    use super::host_mount_path_for_guest_path_from_mounts;
-    use crate::protocol::{MountDescriptor, MountPluginDescriptor};
-    use serde_json::json;
-    use std::path::PathBuf;
-
-    #[test]
-    fn resolves_module_access_mount_paths() {
-        let mounts = vec![MountDescriptor {
-            guest_path: String::from("/root/node_modules"),
-            read_only: true,
-            plugin: MountPluginDescriptor {
-                id: String::from("module_access"),
-                config: json!({
-                    "hostPath": "/tmp/workspace/node_modules",
-                })
-                .to_string(),
-            },
-        }];
-
-        let resolved =
-            host_mount_path_for_guest_path_from_mounts(&mounts, "/root/node_modules/pkg/index.js")
-                .expect("module_access mount should resolve");
-
-        assert_eq!(
-            resolved,
-            PathBuf::from("/tmp/workspace/node_modules/pkg/index.js")
-        );
-    }
-
-    #[test]
-    fn does_not_resolve_agentos_packages_as_host_paths() {
-        let mounts = vec![MountDescriptor {
-            guest_path: String::from("/opt/agentos/bin/pi"),
-            read_only: true,
-            plugin: MountPluginDescriptor {
-                id: String::from("agentos_packages"),
-                config: json!({
-                    "kind": "singleSymlink",
-                    "target": "../pkgs/pi/current/bin/pi",
-                })
-                .to_string(),
-            },
-        }];
-
-        assert!(
-            host_mount_path_for_guest_path_from_mounts(&mounts, "/opt/agentos/bin/pi").is_none()
-        );
-    }
-}
-
-fn resolve_guest_socket_host_path(
-    context: &JavascriptSocketPathContext,
-    guest_path: &str,
-) -> PathBuf {
-    if let Some(path) = host_mount_path_for_guest_path_from_mounts(&context.mounts, guest_path) {
-        return path;
-    }
-
-    let normalized = normalize_path(guest_path);
-    let mut host_path = context.sandbox_root.clone();
-    let suffix = normalized.trim_start_matches('/');
-    if !suffix.is_empty() {
-        host_path.push(suffix);
-    }
-    host_path
-}
-
-fn ensure_kernel_parent_directories(
-    kernel: &mut SidecarKernel,
-    path: &str,
-) -> Result<(), SidecarError> {
-    let parent = dirname(path);
-    if parent != "/" && !kernel.exists(&parent).map_err(kernel_error)? {
-        kernel.mkdir(&parent, true).map_err(kernel_error)?;
-    }
-    Ok(())
-}
-
-// JavascriptChildProcessSpawnOptions, JavascriptChildProcessSpawnRequest moved to crate::protocol
-// ResolvedChildProcessExecution moved to crate::state
-
-pub(crate) fn sanitize_javascript_child_process_internal_bootstrap_env(
-    env: &BTreeMap<String, String>,
-) -> BTreeMap<String, String> {
-    const ALLOWED_KEYS: &[&str] = &[
-        "AGENTOS_ALLOWED_NODE_BUILTINS",
-        "AGENTOS_GUEST_PATH_MAPPINGS",
-        "AGENTOS_LOOPBACK_EXEMPT_PORTS",
-        "AGENTOS_VIRTUAL_PROCESS_EXEC_PATH",
-        "AGENTOS_VIRTUAL_PROCESS_UID",
-        "AGENTOS_VIRTUAL_PROCESS_GID",
-        "AGENTOS_VIRTUAL_PROCESS_VERSION",
-    ];
-
-    env.iter()
-        .filter(|(key, _)| {
-            ALLOWED_KEYS.contains(&key.as_str()) || key.starts_with("AGENTOS_VIRTUAL_OS_")
-        })
-        .map(|(key, value)| (key.clone(), value.clone()))
-        .collect()
-}
-
-// Network request types moved to crate::protocol
-
-// VmDnsConfig, DnsResolutionSource moved to crate::state
-
-fn resolve_tcp_bind_addr(host: &str, port: u16) -> Result<SocketAddr, SidecarError> {
-    (host, port)
-        .to_socket_addrs()
-        .map_err(sidecar_net_error)?
-        .next()
-        .ok_or_else(|| {
-            SidecarError::Execution(format!("failed to resolve TCP bind address {host}:{port}"))
-        })
-}
-
-pub(crate) fn format_dns_resource(hostname: &str) -> String {
-    format!("dns://{hostname}")
-}
-
-// --- Guest Python socket bridge helpers ------------------------------------
-
-/// Host-socket read timeout for one `recv`/`recvfrom` RPC. Kept short so the
-/// synchronous RPC returns promptly (data, or a `timed_out` flag the Python
-/// shim re-polls on) and never stalls the shared sidecar event loop.
-// Short so a recv/recvfrom RPC holds the shared event loop only briefly; the
-// guest shim adds a capped backoff between polls to bound the poll rate.
-const PYTHON_SOCKET_READ_POLL: Duration = Duration::from_millis(25);
-const PYTHON_SOCKET_CONNECT_TIMEOUT: Duration = Duration::from_secs(30);
-const PYTHON_SOCKET_WRITE_TIMEOUT: Duration = Duration::from_secs(30);
-const PYTHON_SOCKET_DEFAULT_RECV: usize = 65536;
-const PYTHON_SOCKET_MAX_RECV: usize = 4 * 1024 * 1024;
-
-fn python_socket_host(request: &PythonVfsRpcRequest) -> Result<String, SidecarError> {
-    request
-        .hostname
-        .clone()
-        .ok_or_else(|| SidecarError::InvalidState(String::from("python socket op requires a host")))
-}
-
-fn python_socket_port(request: &PythonVfsRpcRequest) -> Result<u16, SidecarError> {
-    request
-        .port
-        .ok_or_else(|| SidecarError::InvalidState(String::from("python socket op requires a port")))
-}
-
-fn python_socket_payload(request: &PythonVfsRpcRequest) -> Result<Vec<u8>, SidecarError> {
-    let Some(body) = request.body_base64.as_deref() else {
-        return Ok(Vec::new());
-    };
-    base64::engine::general_purpose::STANDARD
-        .decode(body)
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("invalid base64 python socket payload: {error}"))
-        })
-}
-
-fn python_socket_recv_len(request: &PythonVfsRpcRequest) -> usize {
-    request
-        .max_buffer
-        .unwrap_or(PYTHON_SOCKET_DEFAULT_RECV)
-        .clamp(1, PYTHON_SOCKET_MAX_RECV)
-}
-
-fn python_connect_tcp(addrs: &[IpAddr], port: u16) -> Result<TcpStream, SidecarError> {
-    let mut last_error: Option<String> = None;
-    for ip in addrs {
-        let addr = SocketAddr::new(*ip, port);
-        match TcpStream::connect_timeout(&addr, PYTHON_SOCKET_CONNECT_TIMEOUT) {
-            Ok(stream) => return Ok(stream),
-            Err(error) => last_error = Some(error.to_string()),
-        }
-    }
-    Err(SidecarError::Execution(format!(
-        "ECONNREFUSED: {}",
-        last_error.unwrap_or_else(|| String::from("no resolved addresses"))
-    )))
-}
-
-fn python_socket_would_block(error: &std::io::Error) -> bool {
-    matches!(
-        error.kind(),
-        std::io::ErrorKind::WouldBlock | std::io::ErrorKind::TimedOut
-    )
-}
-
-fn python_socket_io_error(error: std::io::Error) -> SidecarError {
-    SidecarError::Execution(format!("EIO: python socket: {error}"))
-}
-
-fn python_socket_kind_error(op: &str, expected: &str) -> SidecarError {
-    SidecarError::Execution(format!(
-        "EOPNOTSUPP: python socket {op} requires a {expected} socket"
-    ))
-}
-
-fn blocked_dns_resolution_error(
-    resource: &str,
-    ip: IpAddr,
-    cidr: &str,
-    label: &str,
-) -> SidecarError {
-    SidecarError::Execution(format!(
-        "EACCES: blocked outbound network access to {resource}: {ip} is within restricted {label} range {cidr}"
-    ))
-}
-
-fn blocked_loopback_connect_error(resource: &str, ip: IpAddr, port: u16) -> SidecarError {
-    SidecarError::Execution(format!(
-        "EACCES: blocked outbound network access to {resource}: {ip} is loopback ({}) and port {port} is not owned by this VM and is not listed in {LOOPBACK_EXEMPT_PORTS_ENV}",
-        loopback_cidr(ip)
-    ))
-}
-
-fn filter_dns_safe_ip_addrs(
-    addresses: Vec<IpAddr>,
-    hostname: &str,
-) -> Result<Vec<IpAddr>, SidecarError> {
-    let resource = format_dns_resource(hostname);
-    let mut allowed = Vec::new();
-    let mut blocked = None;
-
-    for ip in addresses {
-        if let Some((cidr, label)) = restricted_non_loopback_ip_range(ip) {
-            blocked.get_or_insert((ip, cidr, label));
-            continue;
-        }
-        allowed.push(ip);
-    }
-
-    if allowed.is_empty() {
-        let (ip, cidr, label) = blocked.expect("blocked DNS results should capture a reason");
-        return Err(blocked_dns_resolution_error(&resource, ip, cidr, label));
-    }
-
-    Ok(allowed)
-}
-
-fn loopback_connect_allowed(context: &JavascriptSocketPathContext, port: u16) -> bool {
-    context.loopback_port_allowed(port)
-}
-
-fn filter_tcp_connect_ip_addrs(
-    addresses: Vec<IpAddr>,
-    host: &str,
-    port: u16,
-    context: &JavascriptSocketPathContext,
-) -> Result<Vec<IpAddr>, SidecarError> {
-    let resource = format_tcp_resource(host, port);
-    let mut allowed = Vec::new();
-    let mut blocked = None;
-
-    for ip in addresses {
-        if let Some((cidr, label)) = restricted_non_loopback_ip_range(ip) {
-            blocked.get_or_insert_with(|| blocked_dns_resolution_error(&resource, ip, cidr, label));
-            continue;
-        }
-        if is_loopback_ip(ip) && !loopback_connect_allowed(context, port) {
-            blocked.get_or_insert_with(|| blocked_loopback_connect_error(&resource, ip, port));
-            continue;
-        }
-        allowed.push(ip);
-    }
-
-    if allowed.is_empty() {
-        return Err(blocked.expect("blocked TCP connect results should capture a reason"));
-    }
-
-    Ok(allowed)
-}
-
-fn resolve_tcp_connect_addr<B>(
-    bridge: &SharedBridge<B>,
-    kernel: &SidecarKernel,
-    vm_id: &str,
-    dns: &VmDnsConfig,
-    host: &str,
-    port: u16,
-    context: &JavascriptSocketPathContext,
-) -> Result<ResolvedTcpConnectAddr, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let allowed = filter_tcp_connect_ip_addrs(
-        resolve_dns_ip_addrs(
-            bridge,
-            kernel,
-            vm_id,
-            dns,
-            host,
-            DnsLookupPolicy::SkipPermissions,
-        )?,
-        host,
-        port,
-        context,
-    )?;
-    let ip = allowed
-        .iter()
-        .copied()
-        .find(|candidate| {
-            let family = JavascriptSocketFamily::from_ip(*candidate);
-            context.translate_tcp_loopback_port(family, port).is_some()
-        })
-        // We do not implement Happy Eyeballs yet, so prefer IPv4 over a
-        // verbatim IPv6-first DNS answer for general outbound TCP connects.
-        .or_else(|| allowed.iter().copied().find(IpAddr::is_ipv4))
-        .or_else(|| allowed.first().copied())
-        .ok_or_else(|| {
-            SidecarError::Execution(format!("failed to resolve TCP address {host}:{port}"))
-        })?;
-    let family = JavascriptSocketFamily::from_ip(ip);
-    let translated_loopback_port = context.translate_tcp_loopback_port(family, port);
-    let use_kernel_loopback = is_loopback_ip(ip) && translated_loopback_port == Some(port);
-    let actual_port = if is_loopback_ip(ip) {
-        translated_loopback_port.unwrap_or(port)
-    } else {
-        port
-    };
-    Ok(ResolvedTcpConnectAddr {
-        actual_addr: SocketAddr::new(ip, actual_port),
-        guest_remote_addr: SocketAddr::new(ip, port),
-        use_kernel_loopback,
-    })
-}
-
-fn resolve_dns_ip_addrs<B>(
-    bridge: &SharedBridge<B>,
-    kernel: &SidecarKernel,
-    vm_id: &str,
-    dns: &VmDnsConfig,
-    hostname: &str,
-    policy: DnsLookupPolicy,
-) -> Result<Vec<IpAddr>, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let resolution = match kernel.resolve_dns(hostname, policy) {
-        Ok(resolution) => resolution,
-        Err(error) => {
-            let sidecar_error = kernel_error(error.clone());
-            if error.code() != "EACCES" {
-                emit_dns_resolution_failure_event(bridge, vm_id, hostname, dns, &sidecar_error);
-            }
-            return Err(sidecar_error);
-        }
-    };
-    emit_dns_resolution_event(
-        bridge,
-        vm_id,
-        hostname,
-        resolution.source(),
-        resolution.addresses(),
-        dns,
-    );
-    Ok(resolution.addresses().to_vec())
-}
-
-fn resolve_dns_records<B>(
-    bridge: &SharedBridge<B>,
-    kernel: &SidecarKernel,
-    vm_id: &str,
-    dns: &VmDnsConfig,
-    hostname: &str,
-    record_type: RecordType,
-    policy: DnsLookupPolicy,
-) -> Result<DnsRecordResolution, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let resolution = match kernel.resolve_dns_records(hostname, record_type, policy) {
-        Ok(resolution) => resolution,
-        Err(error) => {
-            let sidecar_error = kernel_error(error.clone());
-            if error.code() != "EACCES" {
-                emit_dns_resolution_failure_event(bridge, vm_id, hostname, dns, &sidecar_error);
-            }
-            return Err(sidecar_error);
-        }
-    };
-    emit_dns_record_resolution_event(bridge, vm_id, hostname, &resolution, dns);
-    Ok(resolution)
-}
-
-fn filter_dns_ip_addrs(
-    addresses: Vec<IpAddr>,
-    family: Option<u8>,
-) -> Result<Vec<IpAddr>, SidecarError> {
-    let filtered: Vec<_> = match family.unwrap_or(0) {
-        0 => addresses,
-        4 => addresses
-            .into_iter()
-            .filter(|ip| matches!(ip, IpAddr::V4(_)))
-            .collect(),
-        6 => addresses
-            .into_iter()
-            .filter(|ip| matches!(ip, IpAddr::V6(_)))
-            .collect(),
-        other => {
-            return Err(SidecarError::InvalidState(format!(
-                "unsupported dns family {other}"
-            )));
-        }
-    };
-
-    if filtered.is_empty() {
-        return Err(SidecarError::Execution(String::from(
-            "failed to resolve DNS address for requested family",
-        )));
-    }
-
-    Ok(filtered)
-}
-
-fn resolve_udp_bind_addr(
-    host: &str,
-    port: u16,
-    family: JavascriptUdpFamily,
-) -> Result<SocketAddr, SidecarError> {
-    (host, port)
-        .to_socket_addrs()
-        .map_err(sidecar_net_error)?
-        .find(|addr| family.matches_addr(addr))
-        .ok_or_else(|| {
-            SidecarError::Execution(format!(
-                "failed to resolve {} UDP bind address {host}:{port}",
-                family.socket_type()
-            ))
-        })
-}
-
-fn resolve_udp_addr<B>(request: UdpRemoteAddrRequest<'_, B>) -> Result<SocketAddr, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let UdpRemoteAddrRequest {
-        bridge,
-        kernel,
-        vm_id,
-        dns,
-        host,
-        port,
-        family,
-        context,
-    } = request;
-    resolve_dns_ip_addrs(
-        bridge,
-        kernel,
-        vm_id,
-        dns,
-        host,
-        DnsLookupPolicy::SkipPermissions,
-    )?
-    .into_iter()
-    .map(|ip| {
-        let family_key = JavascriptSocketFamily::from_ip(ip);
-        let actual_port = if is_loopback_ip(ip) {
-            context
-                .translate_udp_loopback_port(family_key, port)
-                .unwrap_or(port)
-        } else {
-            port
-        };
-        SocketAddr::new(ip, actual_port)
-    })
-    .find(|addr| family.matches_addr(addr))
-    .ok_or_else(|| {
-        SidecarError::Execution(format!(
-            "failed to resolve {} UDP address {host}:{port}",
-            family.socket_type()
-        ))
-    })
-}
-
-fn javascript_net_timeout_value() -> Value {
-    Value::String(String::from(JAVASCRIPT_NET_TIMEOUT_SENTINEL))
-}
-
-fn javascript_net_json_string(value: Value, label: &str) -> Result<Value, SidecarError> {
-    serde_json::to_string(&value)
-        .map(Value::String)
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("failed to serialize {label} payload: {error}"))
-        })
-}
-
-fn javascript_net_read_value(
-    event: Option<JavascriptTcpSocketEvent>,
-) -> Result<Value, SidecarError> {
-    match event {
-        Some(JavascriptTcpSocketEvent::Data(chunk)) => Ok(Value::String(
-            base64::engine::general_purpose::STANDARD.encode(chunk),
-        )),
-        Some(JavascriptTcpSocketEvent::End | JavascriptTcpSocketEvent::Close { .. }) => {
-            Ok(Value::Null)
-        }
-        Some(JavascriptTcpSocketEvent::Error { code, message }) => {
-            let detail = code.unwrap_or_else(|| String::from("socket read"));
-            Err(SidecarError::Execution(format!("{detail}: {message}")))
-        }
-        None => Ok(javascript_net_timeout_value()),
-    }
-}
-
-fn io_error_code(error: &std::io::Error) -> Option<String> {
-    match error.raw_os_error() {
-        Some(libc::EADDRINUSE) => Some(String::from("EADDRINUSE")),
-        Some(libc::EADDRNOTAVAIL) => Some(String::from("EADDRNOTAVAIL")),
-        Some(libc::ECONNREFUSED) => Some(String::from("ECONNREFUSED")),
-        Some(libc::ECONNRESET) => Some(String::from("ECONNRESET")),
-        Some(libc::EINVAL) => Some(String::from("EINVAL")),
-        Some(libc::EPIPE) => Some(String::from("EPIPE")),
-        Some(libc::ETIMEDOUT) => Some(String::from("ETIMEDOUT")),
-        Some(libc::EHOSTUNREACH) => Some(String::from("EHOSTUNREACH")),
-        Some(libc::ENETUNREACH) => Some(String::from("ENETUNREACH")),
-        _ => None,
-    }
-}
-
-fn sidecar_net_error(error: std::io::Error) -> SidecarError {
-    let message = match io_error_code(&error) {
-        Some(code) => format!("{code}: {error}"),
-        None => error.to_string(),
-    };
-    SidecarError::Execution(message)
-}
-
-fn tls_provider() -> Arc<rustls::crypto::CryptoProvider> {
-    Arc::new(aws_lc_rs::default_provider())
-}
-
-fn tls_local_certificates(
-    options: &JavascriptTlsBridgeOptions,
-) -> Result<Vec<Vec<u8>>, SidecarError> {
-    let Some(certificates) = options.cert.as_ref() else {
-        return Ok(Vec::new());
-    };
-    tls_material_entries(certificates)
-}
-
-fn tls_material_entries(material: &JavascriptTlsMaterial) -> Result<Vec<Vec<u8>>, SidecarError> {
-    match material {
-        JavascriptTlsMaterial::Single(entry) => tls_data_value(entry).map(|value| vec![value]),
-        JavascriptTlsMaterial::Many(entries) => entries.iter().map(tls_data_value).collect(),
-    }
-}
-
-fn tls_data_value(value: &JavascriptTlsDataValue) -> Result<Vec<u8>, SidecarError> {
-    match value {
-        JavascriptTlsDataValue::Buffer { data } => base64::engine::general_purpose::STANDARD
-            .decode(data)
-            .map_err(|error| {
-                SidecarError::InvalidState(format!("TLS material contains invalid base64: {error}"))
-            }),
-        JavascriptTlsDataValue::String { data } => Ok(data.as_bytes().to_vec()),
-    }
-}
-
-fn tls_certificates_from_material(
-    material: &JavascriptTlsMaterial,
-) -> Result<Vec<CertificateDer<'static>>, SidecarError> {
-    let mut certificates = Vec::new();
-    for entry in tls_material_entries(material)? {
-        let mut reader = std::io::BufReader::new(Cursor::new(entry.clone()));
-        let parsed = rustls_pemfile::certs(&mut reader)
-            .collect::<Result<Vec<_>, _>>()
-            .map_err(sidecar_net_error)?;
-        if parsed.is_empty() {
-            certificates.push(CertificateDer::from(entry));
-        } else {
-            certificates.extend(parsed);
-        }
-    }
-    if certificates.is_empty() {
-        return Err(SidecarError::InvalidState(String::from(
-            "TLS certificate material did not contain any certificates",
-        )));
-    }
-    Ok(certificates)
-}
-
-fn tls_private_key_from_material(
-    material: &JavascriptTlsMaterial,
-) -> Result<PrivateKeyDer<'static>, SidecarError> {
-    for entry in tls_material_entries(material)? {
-        let mut reader = std::io::BufReader::new(Cursor::new(entry));
-        if let Some(key) = rustls_pemfile::private_key(&mut reader).map_err(sidecar_net_error)? {
-            return Ok(key);
-        }
-    }
-    Err(SidecarError::InvalidState(String::from(
-        "TLS private key material did not contain a supported key",
-    )))
-}
-
-fn tls_root_store(options: &JavascriptTlsBridgeOptions) -> Result<RootCertStore, SidecarError> {
-    let mut roots = RootCertStore::empty();
-    if let Some(ca) = options.ca.as_ref() {
-        for certificate in tls_certificates_from_material(ca)? {
-            roots.add(certificate).map_err(|error| {
-                SidecarError::InvalidState(format!("failed to add TLS CA certificate: {error}"))
-            })?;
-        }
-        return Ok(roots);
-    }
-
-    for certificate in rustls_native_certs::load_native_certs().certs {
-        roots.add(certificate).map_err(|error| {
-            SidecarError::InvalidState(format!(
-                "failed to add native TLS certificate to root store: {error}"
-            ))
-        })?;
-    }
-    Ok(roots)
-}
-
-fn build_client_tls_stream(
-    stream: TcpStream,
-    options: &JavascriptTlsBridgeOptions,
-) -> Result<rustls::StreamOwned<ClientConnection, TcpStream>, SidecarError> {
-    let config = build_client_tls_config(options)?;
-    let server_name = options
-        .servername
-        .clone()
-        .unwrap_or_else(|| String::from("localhost"));
-    let server_name = ServerName::try_from(server_name)
-        .map_err(|_| SidecarError::InvalidState(String::from("invalid TLS servername")))?;
-    stream
-        .set_read_timeout(Some(TLS_HANDSHAKE_TIMEOUT))
-        .map_err(sidecar_net_error)?;
-    stream
-        .set_write_timeout(Some(TLS_HANDSHAKE_TIMEOUT))
-        .map_err(sidecar_net_error)?;
-    let mut tls_stream = rustls::StreamOwned::new(
-        ClientConnection::new(Arc::new(config), server_name).map_err(|error| {
-            SidecarError::Execution(format!("failed to start TLS client: {error}"))
-        })?,
-        stream,
-    );
-    while tls_stream.conn.is_handshaking() {
-        tls_stream
-            .conn
-            .complete_io(&mut tls_stream.sock)
-            .map_err(sidecar_net_error)?;
-    }
-    tls_stream
-        .sock
-        .set_read_timeout(Some(TCP_SOCKET_POLL_TIMEOUT))
-        .map_err(sidecar_net_error)?;
-    tls_stream
-        .sock
-        .set_write_timeout(None)
-        .map_err(sidecar_net_error)?;
-    Ok(tls_stream)
-}
-
-fn build_client_loopback_tls_stream(
-    transport: crate::state::LoopbackTlsEndpoint,
-    options: &JavascriptTlsBridgeOptions,
-) -> Result<rustls::StreamOwned<ClientConnection, crate::state::LoopbackTlsEndpoint>, SidecarError>
-{
-    let config = build_client_tls_config(options)?;
-    let server_name = options
-        .servername
-        .clone()
-        .unwrap_or_else(|| String::from("localhost"));
-    let server_name = ServerName::try_from(server_name)
-        .map_err(|_| SidecarError::InvalidState(String::from("invalid TLS servername")))?;
-    let mut tls_stream = rustls::StreamOwned::new(
-        ClientConnection::new(Arc::new(config), server_name).map_err(|error| {
-            SidecarError::Execution(format!("failed to start TLS client: {error}"))
-        })?,
-        transport,
-    );
-    match tls_stream.conn.complete_io(&mut tls_stream.sock) {
-        Ok(_) => {}
-        Err(error)
-            if matches!(
-                error.kind(),
-                std::io::ErrorKind::WouldBlock | std::io::ErrorKind::TimedOut
-            ) => {}
-        Err(error) => return Err(sidecar_net_error(error)),
-    }
-    Ok(tls_stream)
-}
-
-fn build_client_tls_config(
-    options: &JavascriptTlsBridgeOptions,
-) -> Result<ClientConfig, SidecarError> {
-    let provider = tls_provider();
-    let builder = ClientConfig::builder_with_provider(provider.clone())
-        .with_safe_default_protocol_versions()
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("invalid TLS protocol config: {error}"))
-        })?;
-
-    let mut config = if options.reject_unauthorized == Some(false) {
-        let verifier = Arc::new(InsecureTlsVerifier {
-            supported_schemes: provider
-                .signature_verification_algorithms
-                .supported_schemes(),
-        });
-        builder
-            .dangerous()
-            .with_custom_certificate_verifier(verifier)
-            .with_no_client_auth()
-    } else {
-        builder
-            .with_root_certificates(tls_root_store(options)?)
-            .with_no_client_auth()
-    };
-
-    if let Some(protocols) = options.alpn_protocols.as_ref() {
-        config.alpn_protocols = protocols
-            .iter()
-            .map(|protocol| protocol.as_bytes().to_vec())
-            .collect();
-    }
-    Ok(config)
-}
-
-fn build_server_tls_stream(
-    stream: TcpStream,
-    options: &JavascriptTlsBridgeOptions,
-) -> Result<rustls::StreamOwned<ServerConnection, TcpStream>, SidecarError> {
-    let config = build_server_tls_config(options)?;
-    stream
-        .set_read_timeout(Some(TLS_HANDSHAKE_TIMEOUT))
-        .map_err(sidecar_net_error)?;
-    stream
-        .set_write_timeout(Some(TLS_HANDSHAKE_TIMEOUT))
-        .map_err(sidecar_net_error)?;
-    let mut tls_stream = rustls::StreamOwned::new(
-        ServerConnection::new(Arc::new(config)).map_err(|error| {
-            SidecarError::Execution(format!("failed to start TLS server: {error}"))
-        })?,
-        stream,
-    );
-    while tls_stream.conn.is_handshaking() {
-        tls_stream
-            .conn
-            .complete_io(&mut tls_stream.sock)
-            .map_err(sidecar_net_error)?;
-    }
-    tls_stream
-        .sock
-        .set_read_timeout(Some(TCP_SOCKET_POLL_TIMEOUT))
-        .map_err(sidecar_net_error)?;
-    tls_stream
-        .sock
-        .set_write_timeout(None)
-        .map_err(sidecar_net_error)?;
-    Ok(tls_stream)
-}
-
-fn build_server_loopback_tls_stream(
-    transport: crate::state::LoopbackTlsEndpoint,
-    options: &JavascriptTlsBridgeOptions,
-) -> Result<rustls::StreamOwned<ServerConnection, crate::state::LoopbackTlsEndpoint>, SidecarError>
-{
-    let config = build_server_tls_config(options)?;
-    Ok(rustls::StreamOwned::new(
-        ServerConnection::new(Arc::new(config)).map_err(|error| {
-            SidecarError::Execution(format!("failed to start TLS server: {error}"))
-        })?,
-        transport,
-    ))
-}
-
-fn build_server_tls_config(
-    options: &JavascriptTlsBridgeOptions,
-) -> Result<ServerConfig, SidecarError> {
-    let certificates = tls_certificates_from_material(options.cert.as_ref().ok_or_else(|| {
-        SidecarError::InvalidState(String::from("TLS server upgrade requires a certificate"))
-    })?)?;
-    let key = tls_private_key_from_material(options.key.as_ref().ok_or_else(|| {
-        SidecarError::InvalidState(String::from("TLS server upgrade requires a private key"))
-    })?)?;
-
-    let mut config = ServerConfig::builder_with_provider(tls_provider())
-        .with_safe_default_protocol_versions()
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("invalid TLS protocol config: {error}"))
-        })?
-        .with_no_client_auth()
-        .with_single_cert(certificates, key)
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("invalid TLS server config: {error}"))
-        })?;
-
-    if let Some(protocols) = options.alpn_protocols.as_ref() {
-        config.alpn_protocols = protocols
-            .iter()
-            .map(|protocol| protocol.as_bytes().to_vec())
-            .collect();
-    }
-    Ok(config)
-}
-
-fn tls_protocol_name(version: rustls::ProtocolVersion) -> String {
-    match version {
-        rustls::ProtocolVersion::TLSv1_2 => String::from("TLSv1.2"),
-        rustls::ProtocolVersion::TLSv1_3 => String::from("TLSv1.3"),
-        other => other
-            .as_str()
-            .map(str::to_owned)
-            .unwrap_or_else(|| format!("{other:?}")),
-    }
-}
-
-fn tls_cipher_bridge_value(suite: rustls::SupportedCipherSuite) -> Value {
-    tls_bridge_object(vec![
-        (
-            "name",
-            suite
-                .suite()
-                .as_str()
-                .map(|value| Value::String(value.to_owned()))
-                .unwrap_or(Value::Null),
-        ),
-        (
-            "standardName",
-            suite
-                .suite()
-                .as_str()
-                .map(|value| Value::String(value.to_owned()))
-                .unwrap_or(Value::Null),
-        ),
-        (
-            "version",
-            Value::String(if suite.tls13().is_some() {
-                String::from("TLSv1.3")
-            } else {
-                String::from("TLSv1.2")
-            }),
-        ),
-    ])
-}
-
-fn tls_certificate_bridge_value(certificate: &[u8], detailed: bool) -> Value {
-    let mut fields = vec![("raw", tls_bridge_buffer_value(certificate))];
-    if detailed {
-        fields.push(("issuerCertificate", tls_bridge_undefined_value()));
-    }
-    tls_bridge_object(fields)
-}
-
-fn tls_bridge_buffer_value(bytes: &[u8]) -> Value {
-    json!({
-        "type": "buffer",
-        "data": base64::engine::general_purpose::STANDARD.encode(bytes),
-    })
-}
-
-fn tls_bridge_object(entries: Vec<(&str, Value)>) -> Value {
-    let value = entries
-        .into_iter()
-        .map(|(key, value)| (key.to_owned(), value))
-        .collect::<serde_json::Map<String, Value>>();
-    json!({
-        "type": "object",
-        "id": 1,
-        "value": value,
-    })
-}
-
-fn tls_bridge_undefined_value() -> Value {
-    json!({
-        "type": "undefined",
-    })
-}
-
-fn spawn_tcp_socket_reader(
-    stream: TcpStream,
-    sender: Sender<JavascriptTcpSocketEvent>,
-    event_pusher: Arc<Mutex<Option<JavascriptSocketEventPusher>>>,
-    tls_mode: Arc<AtomicBool>,
-    saw_local_shutdown: Arc<AtomicBool>,
-    saw_remote_end: Arc<AtomicBool>,
-    close_notified: Arc<AtomicBool>,
-) {
-    thread::spawn(move || {
-        let mut stream = stream;
-        let mut buffer = vec![0_u8; 64 * 1024];
-        loop {
-            if tls_mode.load(Ordering::SeqCst) {
-                break;
-            }
-            match stream.read(&mut buffer) {
-                Ok(0) => {
-                    saw_remote_end.store(true, Ordering::SeqCst);
-                    let _ = sender.send(JavascriptTcpSocketEvent::End);
-                    push_socket_event(&event_pusher, "end");
-                    if saw_local_shutdown.load(Ordering::SeqCst)
-                        && !close_notified.swap(true, Ordering::SeqCst)
-                    {
-                        let _ = sender.send(JavascriptTcpSocketEvent::Close { had_error: false });
-                        push_socket_event(&event_pusher, "close");
-                    }
-                    break;
-                }
-                Ok(bytes_read) => {
-                    if sender
-                        .send(JavascriptTcpSocketEvent::Data(
-                            buffer[..bytes_read].to_vec(),
-                        ))
-                        .is_err()
-                    {
-                        break;
-                    }
-                    push_socket_event(&event_pusher, "data");
-                }
-                Err(error)
-                    if matches!(
-                        error.kind(),
-                        std::io::ErrorKind::WouldBlock | std::io::ErrorKind::TimedOut
-                    ) =>
-                {
-                    continue;
-                }
-                Err(error) => {
-                    let code = io_error_code(&error);
-                    let _ = sender.send(JavascriptTcpSocketEvent::Error {
-                        code,
-                        message: error.to_string(),
-                    });
-                    push_socket_event(&event_pusher, "error");
-                    if !close_notified.swap(true, Ordering::SeqCst) {
-                        let _ = sender.send(JavascriptTcpSocketEvent::Close { had_error: true });
-                        push_socket_event(&event_pusher, "close");
-                    }
-                    break;
-                }
-            }
-        }
-    });
-}
-
-fn push_socket_event(
-    event_pusher: &Arc<Mutex<Option<JavascriptSocketEventPusher>>>,
-    event: &'static str,
-) {
-    NET_TCP_TRACE_COUNTERS
-        .socket_read_push_attempts
-        .fetch_add(1, Ordering::Relaxed);
-    let target = event_pusher.lock().ok().and_then(|guard| guard.clone());
-    let Some(target) = target else {
-        NET_TCP_TRACE_COUNTERS
-            .socket_read_push_missing
-            .fetch_add(1, Ordering::Relaxed);
-        return;
-    };
-    let payload = v8_runtime::json_to_cbor_payload(&json!({
-        "socketId": target.socket_id,
-        "event": event,
-    }))
-    .unwrap_or_default();
-    match target.session.send_stream_event("net_socket", payload) {
-        Ok(()) => {
-            NET_TCP_TRACE_COUNTERS
-                .socket_read_push_sent
-                .fetch_add(1, Ordering::Relaxed);
-        }
-        Err(_) => {
-            NET_TCP_TRACE_COUNTERS
-                .socket_read_push_errors
-                .fetch_add(1, Ordering::Relaxed);
-        }
-    }
-}
-
-fn send_tls_socket_error_and_close(
-    sender: &Sender<JavascriptTcpSocketEvent>,
-    event_pusher: &Arc<Mutex<Option<JavascriptSocketEventPusher>>>,
-    close_notified: &Arc<AtomicBool>,
-    code: Option<String>,
-    message: String,
-) {
-    let _ = sender.send(JavascriptTcpSocketEvent::Error { code, message });
-    push_socket_event(event_pusher, "error");
-    if !close_notified.swap(true, Ordering::SeqCst) {
-        let _ = sender.send(JavascriptTcpSocketEvent::Close { had_error: true });
-        push_socket_event(event_pusher, "close");
-    }
-}
-
-fn fail_loopback_tls_pending_reader(
-    pending_write: &LoopbackTlsPendingWriteHandle,
-    sender: &Sender<JavascriptTcpSocketEvent>,
-    event_pusher: &Arc<Mutex<Option<JavascriptSocketEventPusher>>>,
-    close_notified: &Arc<AtomicBool>,
-    code: Option<String>,
-    message: String,
-) {
-    pending_write.mark_failed(message.clone());
-    send_tls_socket_error_and_close(sender, event_pusher, close_notified, code, message);
-}
-
-fn flush_loopback_tls_pending_writes(
-    tls_stream: &Arc<Mutex<Option<ActiveTlsStream>>>,
-    pending_write: &LoopbackTlsPendingWriteHandle,
-    sender: &Sender<JavascriptTcpSocketEvent>,
-    event_pusher: &Arc<Mutex<Option<JavascriptSocketEventPusher>>>,
-    close_notified: &Arc<AtomicBool>,
-) -> bool {
-    loop {
-        let bytes = match pending_write.take_buffer_for_flush() {
-            Ok(bytes) => bytes,
-            Err(error) => {
-                fail_loopback_tls_pending_reader(
-                    pending_write,
-                    sender,
-                    event_pusher,
-                    close_notified,
-                    Some(String::from("EIO")),
-                    error.to_string(),
-                );
-                return false;
-            }
-        };
-
-        if let Some(bytes) = bytes {
-            let write_result = {
-                let mut guard = match tls_stream.lock() {
-                    Ok(guard) => guard,
-                    Err(_) => {
-                        pending_write.finish_flush();
-                        fail_loopback_tls_pending_reader(
-                            pending_write,
-                            sender,
-                            event_pusher,
-                            close_notified,
-                            Some(String::from("EIO")),
-                            String::from("TLS stream lock poisoned while flushing pending writes"),
-                        );
-                        return false;
-                    }
-                };
-                let Some(stream) = guard.as_mut() else {
-                    pending_write.finish_flush();
-                    fail_loopback_tls_pending_reader(
-                        pending_write,
-                        sender,
-                        event_pusher,
-                        close_notified,
-                        Some(String::from("EIO")),
-                        String::from("TLS stream missing while flushing pending writes"),
-                    );
-                    return false;
-                };
-                stream.write_all(&bytes)
-            };
-            pending_write.finish_flush();
-            if let Err(error) = write_result {
-                fail_loopback_tls_pending_reader(
-                    pending_write,
-                    sender,
-                    event_pusher,
-                    close_notified,
-                    Some(String::from("EIO")),
-                    format!("loopback TLS pending write flush failed: {error}"),
-                );
-                return false;
-            }
-            continue;
-        }
-
-        let should_shutdown = match pending_write.take_deferred_shutdown_write() {
-            Ok(should_shutdown) => should_shutdown,
-            Err(error) => {
-                fail_loopback_tls_pending_reader(
-                    pending_write,
-                    sender,
-                    event_pusher,
-                    close_notified,
-                    Some(String::from("EIO")),
-                    error.to_string(),
-                );
-                return false;
-            }
-        };
-        if should_shutdown {
-            let shutdown_result = {
-                let mut guard = match tls_stream.lock() {
-                    Ok(guard) => guard,
-                    Err(_) => {
-                        fail_loopback_tls_pending_reader(
-                            pending_write,
-                            sender,
-                            event_pusher,
-                            close_notified,
-                            Some(String::from("EIO")),
-                            String::from("TLS stream lock poisoned during deferred shutdown"),
-                        );
-                        return false;
-                    }
-                };
-                let Some(stream) = guard.as_mut() else {
-                    fail_loopback_tls_pending_reader(
-                        pending_write,
-                        sender,
-                        event_pusher,
-                        close_notified,
-                        Some(String::from("EIO")),
-                        String::from("TLS stream missing during deferred shutdown"),
-                    );
-                    return false;
-                };
-                stream
-                    .send_close_notify()
-                    .and_then(|_| stream.shutdown_write())
-            };
-            if let Err(error) = shutdown_result {
-                fail_loopback_tls_pending_reader(
-                    pending_write,
-                    sender,
-                    event_pusher,
-                    close_notified,
-                    Some(String::from("EIO")),
-                    format!("loopback TLS deferred shutdown failed: {error}"),
-                );
-                return false;
-            }
-            continue;
-        }
-
-        return true;
-    }
-}
-
-fn spawn_tls_socket_reader(
-    tls_stream: Arc<Mutex<Option<ActiveTlsStream>>>,
-    loopback_pending_write: Option<LoopbackTlsPendingWriteHandle>,
-    sender: Sender<JavascriptTcpSocketEvent>,
-    event_pusher: Arc<Mutex<Option<JavascriptSocketEventPusher>>>,
-    saw_local_shutdown: Arc<AtomicBool>,
-    saw_remote_end: Arc<AtomicBool>,
-    close_notified: Arc<AtomicBool>,
-) {
-    thread::spawn(move || {
-        let mut buffer = vec![0_u8; 64 * 1024];
-        loop {
-            if let Some(pending_write) = loopback_pending_write.as_ref() {
-                let is_handshaking = {
-                    let mut guard = match tls_stream.lock() {
-                        Ok(guard) => guard,
-                        Err(_) => {
-                            pending_write.mark_failed("TLS stream lock poisoned");
-                            return;
-                        }
-                    };
-                    let Some(stream) = guard.as_mut() else {
-                        pending_write.mark_failed("TLS stream missing");
-                        return;
-                    };
-                    if stream.is_loopback() {
-                        let is_handshaking = stream.is_handshaking();
-                        stream.set_loopback_poll_timeout(LOOPBACK_TLS_HANDSHAKE_POLL_TIMEOUT);
-                        is_handshaking
-                    } else {
-                        false
-                    }
-                };
-
-                if is_handshaking {
-                    if pending_write.handshake_started_at.elapsed() >= TLS_HANDSHAKE_TIMEOUT {
-                        fail_loopback_tls_pending_reader(
-                            pending_write,
-                            &sender,
-                            &event_pusher,
-                            &close_notified,
-                            Some(String::from("ETIMEDOUT")),
-                            format!(
-                                "loopback TLS handshake timed out after {}ms",
-                                TLS_HANDSHAKE_TIMEOUT.as_millis()
-                            ),
-                        );
-                        return;
-                    }
-                } else {
-                    pending_write
-                        .tls_handshake_complete
-                        .store(true, Ordering::SeqCst);
-                    if !flush_loopback_tls_pending_writes(
-                        &tls_stream,
-                        pending_write,
-                        &sender,
-                        &event_pusher,
-                        &close_notified,
-                    ) {
-                        return;
-                    }
-                }
-            }
-
-            let read_result = {
-                let mut guard = match tls_stream.lock() {
-                    Ok(guard) => guard,
-                    Err(_) => {
-                        if let Some(pending_write) = loopback_pending_write.as_ref() {
-                            pending_write.mark_failed("TLS stream lock poisoned");
-                        }
-                        return;
-                    }
-                };
-                let Some(stream) = guard.as_mut() else {
-                    if let Some(pending_write) = loopback_pending_write.as_ref() {
-                        pending_write.mark_failed("TLS stream missing");
-                    }
-                    return;
-                };
-                stream.read(&mut buffer)
-            };
-
-            match read_result {
-                Ok(0) => {
-                    if let Some(pending_write) = loopback_pending_write.as_ref() {
-                        pending_write.fail_if_pending(
-                            "loopback TLS peer closed before buffered writes flushed",
-                        );
-                    }
-                    saw_remote_end.store(true, Ordering::SeqCst);
-                    let _ = sender.send(JavascriptTcpSocketEvent::End);
-                    push_socket_event(&event_pusher, "end");
-                    if saw_local_shutdown.load(Ordering::SeqCst)
-                        && !close_notified.swap(true, Ordering::SeqCst)
-                    {
-                        let _ = sender.send(JavascriptTcpSocketEvent::Close { had_error: false });
-                        push_socket_event(&event_pusher, "close");
-                    }
-                    break;
-                }
-                Ok(bytes_read) => {
-                    if sender
-                        .send(JavascriptTcpSocketEvent::Data(
-                            buffer[..bytes_read].to_vec(),
-                        ))
-                        .is_err()
-                    {
-                        break;
-                    }
-                    push_socket_event(&event_pusher, "data");
-                }
-                Err(error)
-                    if matches!(
-                        error.kind(),
-                        std::io::ErrorKind::WouldBlock | std::io::ErrorKind::TimedOut
-                    ) =>
-                {
-                    // The TLS reader and writer share one rustls stream mutex. Yield after
-                    // timed-out reads so request writes can acquire the lock promptly.
-                    std::thread::sleep(Duration::from_millis(1));
-                    continue;
-                }
-                Err(error) if error.kind() == std::io::ErrorKind::UnexpectedEof => {
-                    if let Some(pending_write) = loopback_pending_write.as_ref() {
-                        pending_write.fail_if_pending(
-                            "loopback TLS peer closed before buffered writes flushed",
-                        );
-                    }
-                    saw_remote_end.store(true, Ordering::SeqCst);
-                    let _ = sender.send(JavascriptTcpSocketEvent::End);
-                    push_socket_event(&event_pusher, "end");
-                    if saw_local_shutdown.load(Ordering::SeqCst)
-                        && !close_notified.swap(true, Ordering::SeqCst)
-                    {
-                        let _ = sender.send(JavascriptTcpSocketEvent::Close { had_error: false });
-                        push_socket_event(&event_pusher, "close");
-                    }
-                    break;
-                }
-                Err(error) => {
-                    if let Some(pending_write) = loopback_pending_write.as_ref() {
-                        pending_write.mark_failed(format!(
-                            "loopback TLS reader failed before buffered writes flushed: {error}"
-                        ));
-                    }
-                    let code = io_error_code(&error);
-                    let _ = sender.send(JavascriptTcpSocketEvent::Error {
-                        code,
-                        message: error.to_string(),
-                    });
-                    push_socket_event(&event_pusher, "error");
-                    if !close_notified.swap(true, Ordering::SeqCst) {
-                        let _ = sender.send(JavascriptTcpSocketEvent::Close { had_error: true });
-                        push_socket_event(&event_pusher, "close");
-                    }
-                    break;
-                }
-            }
-        }
-    });
-}
-
-fn spawn_unix_socket_reader(
-    stream: UnixStream,
-    sender: Sender<JavascriptTcpSocketEvent>,
-    event_pusher: Arc<Mutex<Option<JavascriptSocketEventPusher>>>,
-    saw_local_shutdown: Arc<AtomicBool>,
-    saw_remote_end: Arc<AtomicBool>,
-    close_notified: Arc<AtomicBool>,
-) {
-    thread::spawn(move || {
-        let mut stream = stream;
-        let mut buffer = vec![0_u8; 64 * 1024];
-        loop {
-            match stream.read(&mut buffer) {
-                Ok(0) => {
-                    saw_remote_end.store(true, Ordering::SeqCst);
-                    let _ = sender.send(JavascriptTcpSocketEvent::End);
-                    push_socket_event(&event_pusher, "end");
-                    if saw_local_shutdown.load(Ordering::SeqCst)
-                        && !close_notified.swap(true, Ordering::SeqCst)
-                    {
-                        let _ = sender.send(JavascriptTcpSocketEvent::Close { had_error: false });
-                        push_socket_event(&event_pusher, "close");
-                    }
-                    break;
-                }
-                Ok(bytes_read) => {
-                    if sender
-                        .send(JavascriptTcpSocketEvent::Data(
-                            buffer[..bytes_read].to_vec(),
-                        ))
-                        .is_err()
-                    {
-                        break;
-                    }
-                    push_socket_event(&event_pusher, "data");
-                }
-                Err(error) => {
-                    let code = io_error_code(&error);
-                    let _ = sender.send(JavascriptTcpSocketEvent::Error {
-                        code,
-                        message: error.to_string(),
-                    });
-                    push_socket_event(&event_pusher, "error");
-                    if !close_notified.swap(true, Ordering::SeqCst) {
-                        let _ = sender.send(JavascriptTcpSocketEvent::Close { had_error: true });
-                        push_socket_event(&event_pusher, "close");
-                    }
-                    break;
-                }
-            }
-        }
-    });
-}
-
-/// Unblock a guest thread parked in a deferred `__kernel_stdin_read` /
-/// `__kernel_poll` sync RPC. Isolate termination cannot interrupt the native
-/// bridge wait, so teardown must answer the parked RPC BEFORE dropping the
-/// execution (drop joins the guest thread) or cleanup deadlocks against it.
-fn flush_parked_kernel_wait_rpc(process: &mut ActiveProcess) {
-    if let Some((request, _)) = process.deferred_kernel_wait_rpc.take() {
-        let _ = process
-            .execution
-            .respond_javascript_sync_rpc_error(request.id, "EINTR", "process teardown")
-            .or_else(ignore_stale_javascript_sync_rpc_response);
-    }
-}
-
-fn terminate_child_process_tree(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    kernel_readiness: &KernelSocketReadinessRegistry,
-) {
-    flush_parked_kernel_wait_rpc(process);
-    let sqlite_database_ids = process.sqlite_databases.keys().copied().collect::<Vec<_>>();
-    for database_id in sqlite_database_ids {
-        let _ = close_sqlite_database(kernel, process, database_id);
-    }
-    process.sqlite_statements.clear();
-    process.http_servers.clear();
-    process.pending_http_requests.clear();
-    if let Ok(mut http2) = process.http2.shared.lock() {
-        let sessions = http2.sessions.values().cloned().collect::<Vec<_>>();
-        http2.server_events.clear();
-        http2.session_events.clear();
-        http2.streams.clear();
-        http2.servers.clear();
-        http2.sessions.clear();
-        http2.event_session = None;
-        drop(http2);
-        for session in sessions {
-            let (respond_to, _rx) = mpsc::channel();
-            let _ = session.command_tx.send(Http2SessionCommand::Close {
-                abrupt: true,
-                respond_to,
-            });
-        }
-    }
-
-    let listener_ids = process.tcp_listeners.keys().cloned().collect::<Vec<_>>();
-    for listener_id in listener_ids {
-        if let Some(listener) = process.tcp_listeners.remove(&listener_id) {
-            unregister_kernel_readiness_target(kernel_readiness, listener.kernel_socket_id);
-            let _ = listener.close(kernel, process.kernel_pid);
-        }
-    }
-
-    let sockets = process.tcp_sockets.keys().cloned().collect::<Vec<_>>();
-    for socket_id in sockets {
-        if let Some(socket) = process.tcp_sockets.remove(&socket_id) {
-            unregister_kernel_readiness_target(kernel_readiness, socket.kernel_socket_id);
-            let _ = socket.close(kernel, process.kernel_pid);
-        }
-    }
-
-    let unix_listener_ids = process.unix_listeners.keys().cloned().collect::<Vec<_>>();
-    for listener_id in unix_listener_ids {
-        if let Some(listener) = process.unix_listeners.remove(&listener_id) {
-            let _ = listener.close();
-        }
-    }
-
-    let unix_sockets = process.unix_sockets.keys().cloned().collect::<Vec<_>>();
-    for socket_id in unix_sockets {
-        if let Some(socket) = process.unix_sockets.remove(&socket_id) {
-            let _ = socket.close();
-        }
-    }
-
-    let udp_socket_ids = process.udp_sockets.keys().cloned().collect::<Vec<_>>();
-    for socket_id in udp_socket_ids {
-        if let Some(mut socket) = process.udp_sockets.remove(&socket_id) {
-            unregister_kernel_readiness_target(kernel_readiness, socket.kernel_socket_id);
-            socket.close(kernel, process.kernel_pid);
-        }
-    }
-
-    let child_ids = process.child_processes.keys().cloned().collect::<Vec<_>>();
-    for child_id in child_ids {
-        let Some(mut child) = process.child_processes.remove(&child_id) else {
-            continue;
-        };
-        terminate_child_process_tree(kernel, &mut child, kernel_readiness);
-        let _ = kernel.kill_process(EXECUTION_DRIVER_NAME, child.kernel_pid, SIGTERM);
-        let _ = signal_runtime_process(child.execution.child_pid(), SIGTERM);
-        child.kernel_handle.finish(0);
-        let _ = kernel.wait_and_reap(child.kernel_pid);
-    }
-}
-
-fn service_javascript_sqlite_sync_rpc(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    match request.method.as_str() {
-        "sqlite.constants" => Ok(json!({})),
-        "sqlite.open" => sqlite_open_database(kernel, process, request),
-        "sqlite.close" => {
-            let database_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "sqlite.close database id")?;
-            close_sqlite_database(kernel, process, database_id)?;
-            Ok(Value::Null)
-        }
-        "sqlite.exec" => sqlite_exec_database(kernel, process, request),
-        "sqlite.query" => sqlite_query_database(process, request),
-        "sqlite.prepare" => sqlite_prepare_statement(process, request),
-        "sqlite.location" => {
-            let database_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "sqlite.location database id")?;
-            let database = sqlite_database(process, database_id)?;
-            Ok(database
-                .vm_path
-                .as_ref()
-                .map(|path| Value::String(path.clone()))
-                .unwrap_or(Value::Null))
-        }
-        "sqlite.checkpoint" => {
-            let database_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "sqlite.checkpoint database id")?;
-            let kernel_pid = process.kernel_pid;
-            let database = sqlite_database_mut(process, database_id)?;
-            sqlite_sync_database(kernel, kernel_pid, database)?;
-            Ok(Value::Null)
-        }
-        "sqlite.statement.run" => sqlite_run_statement(kernel, process, request),
-        "sqlite.statement.get" => sqlite_get_statement(process, request),
-        "sqlite.statement.all" | "sqlite.statement.iterate" => {
-            sqlite_all_statement(process, request)
-        }
-        "sqlite.statement.columns" => sqlite_statement_columns(process, request),
-        "sqlite.statement.setReturnArrays" => {
-            let statement_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "sqlite.statement.setReturnArrays statement id",
-            )?;
-            let enabled = javascript_sync_rpc_arg_bool(
-                &request.args,
-                1,
-                "sqlite.statement.setReturnArrays enabled",
-            )?;
-            sqlite_statement_mut(process, statement_id)?.return_arrays = enabled;
-            Ok(Value::Null)
-        }
-        "sqlite.statement.setReadBigInts" => {
-            let statement_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "sqlite.statement.setReadBigInts statement id",
-            )?;
-            let enabled = javascript_sync_rpc_arg_bool(
-                &request.args,
-                1,
-                "sqlite.statement.setReadBigInts enabled",
-            )?;
-            sqlite_statement_mut(process, statement_id)?.read_bigints = enabled;
-            Ok(Value::Null)
-        }
-        "sqlite.statement.setAllowBareNamedParameters" => {
-            let statement_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "sqlite.statement.setAllowBareNamedParameters statement id",
-            )?;
-            let enabled = javascript_sync_rpc_arg_bool(
-                &request.args,
-                1,
-                "sqlite.statement.setAllowBareNamedParameters enabled",
-            )?;
-            sqlite_statement_mut(process, statement_id)?.allow_bare_named_parameters = enabled;
-            Ok(Value::Null)
-        }
-        "sqlite.statement.setAllowUnknownNamedParameters" => {
-            let statement_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "sqlite.statement.setAllowUnknownNamedParameters statement id",
-            )?;
-            let enabled = javascript_sync_rpc_arg_bool(
-                &request.args,
-                1,
-                "sqlite.statement.setAllowUnknownNamedParameters enabled",
-            )?;
-            sqlite_statement_mut(process, statement_id)?.allow_unknown_named_parameters = enabled;
-            Ok(Value::Null)
-        }
-        "sqlite.statement.finalize" => {
-            let statement_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "sqlite.statement.finalize statement id",
-            )?;
-            process
-                .sqlite_statements
-                .remove(&statement_id)
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(format!(
-                        "sqlite statement handle not found: {statement_id}"
-                    ))
-                })?;
-            Ok(Value::Null)
-        }
-        other => Err(SidecarError::InvalidState(format!(
-            "unsupported JavaScript sqlite sync RPC method {other}"
-        ))),
-    }
-}
-
-fn sqlite_open_database(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    ensure_per_process_state_handle_capacity(process.sqlite_databases.len(), "sqlite database")?;
-    let path = request.args.first().and_then(Value::as_str);
-    let vm_path = path.filter(|value| !value.is_empty() && *value != ":memory:");
-    let options = request.args.get(1);
-    let read_only = sqlite_option_bool(options, "readOnly").unwrap_or(false);
-    let create = sqlite_option_bool(options, "create").unwrap_or(!read_only);
-    let timeout_ms = sqlite_option_u64(options, "timeout");
-
-    process.next_sqlite_database_id += 1;
-    let database_id = process.next_sqlite_database_id;
-
-    let host_path = if vm_path.is_some() {
-        Some(
-            std::env::temp_dir()
-                .join(format!(
-                    "secure-exec-sidecar-sqlite-{}-{database_id}",
-                    process.kernel_pid
-                ))
-                .join("database.sqlite"),
-        )
-    } else {
-        None
-    };
-
-    if let Some(host_path) = host_path.as_ref() {
-        if let Some(parent) = host_path.parent() {
-            fs::create_dir_all(parent).map_err(|error| {
-                SidecarError::Io(format!(
-                    "failed to prepare sqlite temp directory {}: {error}",
-                    parent.display()
-                ))
-            })?;
-        }
-    }
-
-    if let (Some(vm_path), Some(host_path)) = (vm_path, host_path.as_ref()) {
-        if kernel
-            .exists_for_process(EXECUTION_DRIVER_NAME, process.kernel_pid, vm_path)
-            .map_err(kernel_error)?
-        {
-            let contents = kernel
-                .read_file_for_process(EXECUTION_DRIVER_NAME, process.kernel_pid, vm_path)
-                .map_err(kernel_error)?;
-            fs::write(host_path, contents).map_err(|error| {
-                SidecarError::Io(format!(
-                    "failed to materialize sqlite database {}: {error}",
-                    host_path.display()
-                ))
-            })?;
-        } else if read_only && !create {
-            return Err(SidecarError::InvalidState(format!(
-                "sqlite database does not exist: {vm_path}"
-            )));
-        }
-    }
-
-    let target = host_path
-        .as_ref()
-        .map(|path| path.to_string_lossy().into_owned())
-        .unwrap_or_else(|| String::from(":memory:"));
-    let mut flags = if read_only {
-        SqliteOpenFlags::SQLITE_OPEN_READ_ONLY
-    } else {
-        SqliteOpenFlags::SQLITE_OPEN_READ_WRITE
-    };
-    if create && !read_only {
-        flags |= SqliteOpenFlags::SQLITE_OPEN_CREATE;
-    }
-
-    let connection = SqliteConnection::open_with_flags(&target, flags).map_err(|error| {
-        SidecarError::InvalidState(format!(
-            "sqlite database open failed for {}: {error}",
-            vm_path.unwrap_or(":memory:")
-        ))
-    })?;
-    if let Some(timeout_ms) = timeout_ms {
-        connection
-            .busy_timeout(Duration::from_millis(timeout_ms))
-            .map_err(sqlite_error)?;
-    }
-    if host_path.is_some() && !read_only {
-        let _ = connection.pragma_update(None, "journal_mode", "WAL");
-    }
-
-    process.sqlite_databases.insert(
-        database_id,
-        ActiveSqliteDatabase {
-            connection,
-            host_path,
-            vm_path: vm_path.map(String::from),
-            dirty: false,
-            transaction_depth: 0,
-            read_only,
-        },
-    );
-
-    Ok(json!(database_id))
-}
-
-fn sqlite_exec_database(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let database_id = javascript_sync_rpc_arg_u64(&request.args, 0, "sqlite.exec database id")?;
-    let sql = javascript_sync_rpc_arg_str(&request.args, 1, "sqlite.exec sql")?;
-    let kernel_pid = process.kernel_pid;
-    let database = sqlite_database_mut(process, database_id)?;
-    let before = database.connection.total_changes();
-    database
-        .connection
-        .execute_batch(sql)
-        .map_err(sqlite_error)?;
-    mark_sqlite_mutation(database, sql);
-    sqlite_sync_database(kernel, kernel_pid, database)?;
-    Ok(json!(database
-        .connection
-        .total_changes()
-        .saturating_sub(before)))
-}
-
-fn sqlite_query_database(
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let database_id = javascript_sync_rpc_arg_u64(&request.args, 0, "sqlite.query database id")?;
-    let sql = javascript_sync_rpc_arg_str(&request.args, 1, "sqlite.query sql")?;
-    let params = request.args.get(2);
-    let options = request.args.get(3);
-    let return_arrays = sqlite_option_bool(options, "returnArrays").unwrap_or(false);
-    let read_bigints = sqlite_option_bool(options, "readBigInts").unwrap_or(false);
-    let database = sqlite_database_mut(process, database_id)?;
-    sqlite_query_rows(
-        &mut database.connection,
-        sql,
-        params,
-        return_arrays,
-        read_bigints,
-        true,
-        false,
-    )
-}
-
-fn sqlite_prepare_statement(
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    ensure_per_process_state_handle_capacity(process.sqlite_statements.len(), "sqlite statement")?;
-    let database_id = javascript_sync_rpc_arg_u64(&request.args, 0, "sqlite.prepare database id")?;
-    let sql = javascript_sync_rpc_arg_str(&request.args, 1, "sqlite.prepare sql")?;
-    let _ = sqlite_database(process, database_id)?;
-    process.next_sqlite_statement_id += 1;
-    let statement_id = process.next_sqlite_statement_id;
-    process.sqlite_statements.insert(
-        statement_id,
-        ActiveSqliteStatement {
-            database_id,
-            sql: sql.to_owned(),
-            return_arrays: false,
-            read_bigints: false,
-            allow_bare_named_parameters: false,
-            allow_unknown_named_parameters: false,
-        },
-    );
-    Ok(json!(statement_id))
-}
-
-fn sqlite_run_statement(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let statement_id =
-        javascript_sync_rpc_arg_u64(&request.args, 0, "sqlite.statement.run statement id")?;
-    let params = request.args.get(1);
-    let statement_state = sqlite_statement(process, statement_id)?.clone();
-    let kernel_pid = process.kernel_pid;
-    let database = sqlite_database_mut(process, statement_state.database_id)?;
-    let before = database.connection.total_changes();
-    {
-        let mut statement = database
-            .connection
-            .prepare(&statement_state.sql)
-            .map_err(sqlite_error)?;
-        bind_sqlite_parameters(
-            &mut statement,
-            params,
-            statement_state.allow_bare_named_parameters,
-            statement_state.allow_unknown_named_parameters,
-        )?;
-        statement.raw_execute().map_err(sqlite_error)?;
-    }
-    let changes = database.connection.total_changes().saturating_sub(before);
-    let last_insert_rowid = database.connection.last_insert_rowid();
-    mark_sqlite_mutation(database, &statement_state.sql);
-    sqlite_sync_database(kernel, kernel_pid, database)?;
-    let result = json!({
-        "changes": changes,
-        "lastInsertRowid": encode_sqlite_integer(last_insert_rowid, true),
-    });
-    Ok(result)
-}
-
-fn sqlite_get_statement(
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let statement_id =
-        javascript_sync_rpc_arg_u64(&request.args, 0, "sqlite.statement.get statement id")?;
-    let params = request.args.get(1);
-    let statement_state = sqlite_statement(process, statement_id)?.clone();
-    let database = sqlite_database_mut(process, statement_state.database_id)?;
-    let rows = sqlite_query_rows(
-        &mut database.connection,
-        &statement_state.sql,
-        params,
-        statement_state.return_arrays,
-        statement_state.read_bigints,
-        statement_state.allow_bare_named_parameters,
-        statement_state.allow_unknown_named_parameters,
-    )?;
-    Ok(rows
-        .as_array()
-        .and_then(|rows| rows.first().cloned())
-        .unwrap_or(Value::Null))
-}
-
-fn sqlite_all_statement(
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let statement_id =
-        javascript_sync_rpc_arg_u64(&request.args, 0, "sqlite.statement.all statement id")?;
-    let params = request.args.get(1);
-    let statement_state = sqlite_statement(process, statement_id)?.clone();
-    let database = sqlite_database_mut(process, statement_state.database_id)?;
-    sqlite_query_rows(
-        &mut database.connection,
-        &statement_state.sql,
-        params,
-        statement_state.return_arrays,
-        statement_state.read_bigints,
-        statement_state.allow_bare_named_parameters,
-        statement_state.allow_unknown_named_parameters,
-    )
-}
-
-fn sqlite_statement_columns(
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let statement_id =
-        javascript_sync_rpc_arg_u64(&request.args, 0, "sqlite.statement.columns statement id")?;
-    let statement_state = sqlite_statement(process, statement_id)?.clone();
-    let database = sqlite_database_mut(process, statement_state.database_id)?;
-    let statement = database
-        .connection
-        .prepare(&statement_state.sql)
-        .map_err(sqlite_error)?;
-    Ok(Value::Array(
-        statement
-            .column_names()
-            .iter()
-            .map(|name| json!({ "name": name }))
-            .collect(),
-    ))
-}
-
-fn sqlite_query_rows(
-    connection: &mut SqliteConnection,
-    sql: &str,
-    params: Option<&Value>,
-    return_arrays: bool,
-    read_bigints: bool,
-    allow_bare_named_parameters: bool,
-    allow_unknown_named_parameters: bool,
-) -> Result<Value, SidecarError> {
-    let mut statement = connection.prepare(sql).map_err(sqlite_error)?;
-    let column_names = statement
-        .column_names()
-        .iter()
-        .map(|name| (*name).to_owned())
-        .collect::<Vec<_>>();
-    let column_count = statement.column_count();
-    bind_sqlite_parameters(
-        &mut statement,
-        params,
-        allow_bare_named_parameters,
-        allow_unknown_named_parameters,
-    )?;
-    let mut rows = statement.raw_query();
-    let mut encoded_rows = Vec::new();
-    while let Some(row) = rows.next().map_err(sqlite_error)? {
-        encoded_rows.push(encode_sqlite_row(
-            row,
-            &column_names,
-            column_count,
-            return_arrays,
-            read_bigints,
-        )?);
-    }
-    Ok(Value::Array(encoded_rows))
-}
-
-fn encode_sqlite_row(
-    row: &rusqlite::Row<'_>,
-    column_names: &[String],
-    column_count: usize,
-    return_arrays: bool,
-    read_bigints: bool,
-) -> Result<Value, SidecarError> {
-    if return_arrays {
-        let mut values = Vec::with_capacity(column_count);
-        for index in 0..column_count {
-            values.push(encode_sqlite_value_ref(
-                row.get_ref(index).map_err(sqlite_error)?,
-                read_bigints,
-            )?);
-        }
-        return Ok(Value::Array(values));
-    }
-
-    let mut object = Map::with_capacity(column_count);
-    for (index, name) in column_names.iter().enumerate() {
-        object.insert(
-            name.clone(),
-            encode_sqlite_value_ref(row.get_ref(index).map_err(sqlite_error)?, read_bigints)?,
-        );
-    }
-    Ok(Value::Object(object))
-}
-
-fn encode_sqlite_value_ref(
-    value: SqliteValueRef<'_>,
-    read_bigints: bool,
-) -> Result<Value, SidecarError> {
-    Ok(match value {
-        SqliteValueRef::Null => Value::Null,
-        SqliteValueRef::Integer(number) => encode_sqlite_integer(number, read_bigints),
-        SqliteValueRef::Real(number) => json!(number),
-        SqliteValueRef::Text(text) => Value::String(String::from_utf8_lossy(text).into_owned()),
-        SqliteValueRef::Blob(bytes) => json!({
-            "__agentosSqliteType": "uint8array",
-            "value": base64::engine::general_purpose::STANDARD.encode(bytes),
-        }),
-    })
-}
-
-fn encode_sqlite_integer(number: i64, read_bigints: bool) -> Value {
-    if read_bigints || number.abs() > SQLITE_JS_SAFE_INTEGER_MAX {
-        json!({
-            "__agentosSqliteType": "bigint",
-            "value": number.to_string(),
-        })
-    } else {
-        json!(number)
-    }
-}
-
-fn bind_sqlite_parameters(
-    statement: &mut SqliteStatement<'_>,
-    params: Option<&Value>,
-    allow_bare_named_parameters: bool,
-    allow_unknown_named_parameters: bool,
-) -> Result<(), SidecarError> {
-    let Some(params) = params else {
-        return Ok(());
-    };
-    match params {
-        Value::Null => Ok(()),
-        Value::Array(values) => {
-            for (index, value) in values.iter().enumerate() {
-                statement
-                    .raw_bind_parameter(index + 1, decode_sqlite_parameter(value)?)
-                    .map_err(sqlite_error)?;
-            }
-            Ok(())
-        }
-        Value::Object(map)
-            if map
-                .get("__agentosSqliteType")
-                .and_then(Value::as_str)
-                .is_none() =>
-        {
-            for (key, value) in map {
-                let index =
-                    resolve_sqlite_parameter_index(statement, key, allow_bare_named_parameters)?;
-                let Some(index) = index else {
-                    if allow_unknown_named_parameters {
-                        continue;
-                    }
-                    return Err(SidecarError::InvalidState(format!(
-                        "sqlite named parameter not found: {key}"
-                    )));
-                };
-                statement
-                    .raw_bind_parameter(index, decode_sqlite_parameter(value)?)
-                    .map_err(sqlite_error)?;
-            }
-            Ok(())
-        }
-        other => statement
-            .raw_bind_parameter(1, decode_sqlite_parameter(other)?)
-            .map_err(sqlite_error),
-    }
-}
-
-fn resolve_sqlite_parameter_index(
-    statement: &mut SqliteStatement<'_>,
-    key: &str,
-    allow_bare_named_parameters: bool,
-) -> Result<Option<usize>, SidecarError> {
-    let mut candidates = vec![key.to_owned()];
-    if allow_bare_named_parameters
-        && !key.starts_with(':')
-        && !key.starts_with('@')
-        && !key.starts_with('$')
-    {
-        candidates.push(format!(":{key}"));
-        candidates.push(format!("@{key}"));
-        candidates.push(format!("${key}"));
-    }
-    for candidate in candidates {
-        if let Some(index) = statement
-            .parameter_index(&candidate)
-            .map_err(sqlite_error)?
-        {
-            return Ok(Some(index));
-        }
-    }
-    Ok(None)
-}
-
-fn decode_sqlite_parameter(value: &Value) -> Result<rusqlite::types::Value, SidecarError> {
-    Ok(match value {
-        Value::Null => rusqlite::types::Value::Null,
-        Value::Bool(value) => rusqlite::types::Value::Integer(i64::from(*value)),
-        Value::Number(value) => match (value.as_i64(), value.as_f64()) {
-            (Some(integer), _) => rusqlite::types::Value::Integer(integer),
-            (_, Some(real)) => rusqlite::types::Value::Real(real),
-            _ => {
-                return Err(SidecarError::InvalidState(String::from(
-                    "sqlite parameter number is not representable",
-                )));
-            }
-        },
-        Value::String(value) => rusqlite::types::Value::Text(value.clone()),
-        Value::Array(_) => {
-            return Err(SidecarError::InvalidState(String::from(
-                "sqlite parameters do not support nested arrays",
-            )));
-        }
-        Value::Object(map) => match map.get("__agentosSqliteType").and_then(Value::as_str) {
-            Some("bigint") => rusqlite::types::Value::Integer(
-                map.get("value")
-                    .and_then(Value::as_str)
-                    .ok_or_else(|| {
-                        SidecarError::InvalidState(String::from(
-                            "sqlite bigint parameter missing string value",
-                        ))
-                    })?
-                    .parse::<i64>()
-                    .map_err(|error| {
-                        SidecarError::InvalidState(format!(
-                            "sqlite bigint parameter is not a signed 64-bit integer: {error}"
-                        ))
-                    })?,
-            ),
-            Some("uint8array") => rusqlite::types::Value::Blob(
-                base64::engine::general_purpose::STANDARD
-                    .decode(map.get("value").and_then(Value::as_str).ok_or_else(|| {
-                        SidecarError::InvalidState(String::from(
-                            "sqlite blob parameter missing base64 value",
-                        ))
-                    })?)
-                    .map_err(|error| {
-                        SidecarError::InvalidState(format!(
-                            "sqlite blob parameter contains invalid base64: {error}"
-                        ))
-                    })?,
-            ),
-            Some(other) => {
-                return Err(SidecarError::InvalidState(format!(
-                    "unsupported sqlite tagged parameter type {other}"
-                )));
-            }
-            None => {
-                return Err(SidecarError::InvalidState(String::from(
-                    "sqlite named parameter objects must be passed as the top-level params object",
-                )));
-            }
-        },
-    })
-}
-
-fn close_sqlite_database(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    database_id: u64,
-) -> Result<(), SidecarError> {
-    let mut database = process
-        .sqlite_databases
-        .remove(&database_id)
-        .ok_or_else(|| {
-            SidecarError::InvalidState(format!("sqlite database handle not found: {database_id}"))
-        })?;
-    process
-        .sqlite_statements
-        .retain(|_, statement| statement.database_id != database_id);
-    sqlite_sync_database(kernel, process.kernel_pid, &mut database)?;
-    let host_path = database.host_path.clone();
-    drop(database);
-    cleanup_sqlite_host_artifacts(host_path.as_deref())?;
-    Ok(())
-}
-
-fn ensure_per_process_state_handle_capacity(len: usize, label: &str) -> Result<(), SidecarError> {
-    if len >= MAX_PER_PROCESS_STATE_HANDLES {
-        return Err(SidecarError::InvalidState(format!(
-            "{label} handle limit exceeded: limit is {MAX_PER_PROCESS_STATE_HANDLES}"
-        )));
-    }
-    Ok(())
-}
-
-fn sqlite_sync_database(
-    kernel: &mut SidecarKernel,
-    kernel_pid: u32,
-    database: &mut ActiveSqliteDatabase,
-) -> Result<(), SidecarError> {
-    if !database.dirty
-        || database.transaction_depth > 0
-        || database.read_only
-        || database.host_path.is_none()
-        || database.vm_path.is_none()
-    {
-        return Ok(());
-    }
-
-    let _ = database
-        .connection
-        .execute_batch("PRAGMA wal_checkpoint(TRUNCATE)");
-    let host_path = database.host_path.as_ref().expect("sqlite host path");
-    if !host_path.exists() {
-        return Ok(());
-    }
-    ensure_vm_parent_dir(
-        kernel,
-        kernel_pid,
-        database.vm_path.as_deref().expect("sqlite vm path"),
-    )?;
-    let contents = fs::read(host_path).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to read sqlite temp database {}: {error}",
-            host_path.display()
-        ))
-    })?;
-    kernel
-        .write_file_for_process(
-            EXECUTION_DRIVER_NAME,
-            kernel_pid,
-            database.vm_path.as_deref().expect("sqlite vm path"),
-            contents,
-            None,
-        )
-        .map_err(kernel_error)?;
-    database.dirty = false;
-    Ok(())
-}
-
-fn cleanup_sqlite_host_artifacts(host_path: Option<&Path>) -> Result<(), SidecarError> {
-    let Some(host_path) = host_path else {
-        return Ok(());
-    };
-    let parent = host_path.parent().map(PathBuf::from);
-    for suffix in ["", "-wal", "-shm"] {
-        let path = PathBuf::from(format!("{}{}", host_path.display(), suffix));
-        if path.exists() {
-            fs::remove_file(&path).map_err(|error| {
-                SidecarError::Io(format!(
-                    "failed to remove sqlite temp artifact {}: {error}",
-                    path.display()
-                ))
-            })?;
-        }
-    }
-    if let Some(parent) = parent {
-        let _ = fs::remove_dir_all(parent);
-    }
-    Ok(())
-}
-
-fn ensure_vm_parent_dir(
-    kernel: &mut SidecarKernel,
-    kernel_pid: u32,
-    path: &str,
-) -> Result<(), SidecarError> {
-    let parent = dirname(path);
-    if parent == "/" || parent == "." {
-        return Ok(());
-    }
-    let mut current = String::new();
-    for segment in parent.split('/').filter(|segment| !segment.is_empty()) {
-        current.push('/');
-        current.push_str(segment);
-        if !kernel
-            .exists_for_process(EXECUTION_DRIVER_NAME, kernel_pid, &current)
-            .map_err(kernel_error)?
-        {
-            kernel
-                .mkdir_for_process(EXECUTION_DRIVER_NAME, kernel_pid, &current, false, None)
-                .map_err(kernel_error)?;
-        }
-    }
-    Ok(())
-}
-
-fn sqlite_database(
-    process: &ActiveProcess,
-    database_id: u64,
-) -> Result<&ActiveSqliteDatabase, SidecarError> {
-    process.sqlite_databases.get(&database_id).ok_or_else(|| {
-        SidecarError::InvalidState(format!("sqlite database handle not found: {database_id}"))
-    })
-}
-
-fn sqlite_database_mut(
-    process: &mut ActiveProcess,
-    database_id: u64,
-) -> Result<&mut ActiveSqliteDatabase, SidecarError> {
-    process
-        .sqlite_databases
-        .get_mut(&database_id)
-        .ok_or_else(|| {
-            SidecarError::InvalidState(format!("sqlite database handle not found: {database_id}"))
-        })
-}
-
-fn sqlite_statement(
-    process: &ActiveProcess,
-    statement_id: u64,
-) -> Result<&ActiveSqliteStatement, SidecarError> {
-    process.sqlite_statements.get(&statement_id).ok_or_else(|| {
-        SidecarError::InvalidState(format!("sqlite statement handle not found: {statement_id}"))
-    })
-}
-
-fn sqlite_statement_mut(
-    process: &mut ActiveProcess,
-    statement_id: u64,
-) -> Result<&mut ActiveSqliteStatement, SidecarError> {
-    process
-        .sqlite_statements
-        .get_mut(&statement_id)
-        .ok_or_else(|| {
-            SidecarError::InvalidState(format!("sqlite statement handle not found: {statement_id}"))
-        })
-}
-
-fn mark_sqlite_mutation(database: &mut ActiveSqliteDatabase, sql: &str) {
-    let normalized = sql.trim_start().to_ascii_lowercase();
-    if normalized.starts_with("begin") || normalized.starts_with("savepoint") {
-        database.dirty = true;
-        database.transaction_depth += 1;
-        return;
-    }
-    if normalized.starts_with("commit") || normalized.starts_with("release savepoint") {
-        database.dirty = true;
-        database.transaction_depth = database.transaction_depth.saturating_sub(1);
-        return;
-    }
-    if normalized.starts_with("rollback") && !normalized.starts_with("rollback to") {
-        database.dirty = true;
-        database.transaction_depth = database.transaction_depth.saturating_sub(1);
-        return;
-    }
-    if normalized.starts_with("insert")
-        || normalized.starts_with("update")
-        || normalized.starts_with("delete")
-        || normalized.starts_with("replace")
-        || normalized.starts_with("create")
-        || normalized.starts_with("alter")
-        || normalized.starts_with("drop")
-        || normalized.starts_with("vacuum")
-        || normalized.starts_with("reindex")
-        || normalized.starts_with("analyze")
-        || normalized.starts_with("attach")
-        || normalized.starts_with("detach")
-        || normalized.starts_with("pragma")
-    {
-        database.dirty = true;
-    }
-}
-
-fn sqlite_option_bool(options: Option<&Value>, key: &str) -> Option<bool> {
-    options
-        .and_then(|value| value.get(key))
-        .and_then(Value::as_bool)
-}
-
-fn sqlite_option_u64(options: Option<&Value>, key: &str) -> Option<u64> {
-    options
-        .and_then(|value| value.get(key))
-        .and_then(Value::as_u64)
-}
-
-fn sqlite_error(error: rusqlite::Error) -> SidecarError {
-    SidecarError::InvalidState(format!("sqlite error: {error}"))
-}
-
-pub(crate) fn javascript_sync_rpc_arg_str<'a>(
-    args: &'a [Value],
-    index: usize,
-    label: &str,
-) -> Result<&'a str, SidecarError> {
-    args.get(index)
-        .and_then(Value::as_str)
-        .ok_or_else(|| SidecarError::InvalidState(format!("{label} must be a string argument")))
-}
-
-pub(crate) fn javascript_sync_rpc_arg_bool(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<bool, SidecarError> {
-    args.get(index)
-        .and_then(Value::as_bool)
-        .ok_or_else(|| SidecarError::InvalidState(format!("{label} must be a boolean argument")))
-}
-
-pub(crate) fn javascript_sync_rpc_encoding(args: &[Value]) -> Option<String> {
-    args.get(1).and_then(|value| {
-        value.as_str().map(str::to_owned).or_else(|| {
-            value
-                .get("encoding")
-                .and_then(Value::as_str)
-                .map(str::to_owned)
-        })
-    })
-}
-
-pub(crate) fn javascript_sync_rpc_option_bool(
-    args: &[Value],
-    index: usize,
-    key: &str,
-) -> Option<bool> {
-    let value = args.get(index)?;
-    if key == "recursive" {
-        if let Some(boolean) = value.as_bool() {
-            return Some(boolean);
-        }
-    }
-    value.get(key).and_then(Value::as_bool)
-}
-
-pub(crate) fn javascript_sync_rpc_option_u32(
-    args: &[Value],
-    index: usize,
-    key: &str,
-) -> Result<Option<u32>, SidecarError> {
-    let Some(value) = args.get(index).and_then(|value| {
-        if value.is_object() {
-            value.get(key)
-        } else if key == "mode" && value.is_number() {
-            Some(value)
-        } else {
-            None
-        }
-    }) else {
-        return Ok(None);
-    };
-    if value.is_null() {
-        return Ok(None);
-    }
-
-    let numeric = value
-        .as_u64()
-        .or_else(|| {
-            value
-                .as_f64()
-                .filter(|number| number.is_finite() && *number >= 0.0)
-                .map(|number| number as u64)
-        })
-        .ok_or_else(|| SidecarError::InvalidState(format!("{key} must be numeric")))?;
-
-    u32::try_from(numeric)
-        .map(Some)
-        .map_err(|_| SidecarError::InvalidState(format!("{key} must fit within u32")))
-}
-
-pub(crate) fn javascript_sync_rpc_arg_u32(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<u32, SidecarError> {
-    let value = javascript_sync_rpc_arg_u64(args, index, label)?;
-    u32::try_from(value)
-        .map_err(|_| SidecarError::InvalidState(format!("{label} must fit within u32")))
-}
-
-pub(crate) fn javascript_sync_rpc_arg_i32(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<i32, SidecarError> {
-    let Some(value) = args.get(index) else {
-        return Err(SidecarError::InvalidState(format!("{label} is required")));
-    };
-
-    let numeric = value
-        .as_i64()
-        .or_else(|| {
-            value
-                .as_f64()
-                .filter(|number| number.is_finite())
-                .map(|number| number as i64)
-        })
-        .ok_or_else(|| SidecarError::InvalidState(format!("{label} must be a numeric argument")))?;
-
-    i32::try_from(numeric)
-        .map_err(|_| SidecarError::InvalidState(format!("{label} must fit within i32")))
-}
-
-pub(crate) fn javascript_sync_rpc_arg_u32_optional(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<Option<u32>, SidecarError> {
-    javascript_sync_rpc_arg_u64_optional(args, index, label)?
-        .map(|value| {
-            u32::try_from(value)
-                .map_err(|_| SidecarError::InvalidState(format!("{label} must fit within u32")))
-        })
-        .transpose()
-}
-
-pub(crate) fn javascript_sync_rpc_arg_u64(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<u64, SidecarError> {
-    let Some(value) = args.get(index) else {
-        return Err(SidecarError::InvalidState(format!("{label} is required")));
-    };
-
-    value
-        .as_u64()
-        .or_else(|| {
-            value
-                .as_f64()
-                .filter(|number| number.is_finite() && *number >= 0.0)
-                .map(|number| number as u64)
-        })
-        .ok_or_else(|| SidecarError::InvalidState(format!("{label} must be a numeric argument")))
-}
-
-pub(crate) fn javascript_sync_rpc_arg_u64_optional(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<Option<u64>, SidecarError> {
-    let Some(value) = args.get(index) else {
-        return Ok(None);
-    };
-    if value.is_null() {
-        return Ok(None);
-    }
-    javascript_sync_rpc_arg_u64(args, index, label).map(Some)
-}
-
-pub(crate) fn javascript_sync_rpc_bytes_arg(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<Vec<u8>, SidecarError> {
-    let Some(value) = args.get(index) else {
-        return Err(SidecarError::InvalidState(format!("{label} is required")));
-    };
-
-    if let Some(text) = value.as_str() {
-        return Ok(text.as_bytes().to_vec());
-    }
-
-    decode_encoded_bytes_value(value)
-        .map_err(|error| SidecarError::InvalidState(format!("{label} {error}")))
-}
-
-pub(crate) fn javascript_sync_rpc_bytes_value(bytes: &[u8]) -> Value {
-    encoded_bytes_value(bytes)
-}
-
-#[derive(Debug, Deserialize)]
-pub(crate) struct KernelPollFdRequest {
-    fd: u32,
-    events: u16,
-}
-
-#[derive(Debug, Deserialize, Serialize, PartialEq, Eq)]
-struct KernelPollFdResponse {
-    fd: u32,
-    events: u16,
-    revents: u16,
-}
-
-fn javascript_sync_rpc_base64_arg(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<Vec<u8>, SidecarError> {
-    let value = javascript_sync_rpc_arg_str(args, index, label)?;
-    decode_base64(value).map_err(|error| SidecarError::InvalidState(format!("{label} {error}")))
-}
-
-// ── Sync-RPC round-trip counting (opt-in via AGENTOS_SYNC_RPC_TRACE=1) ──
-// Each guest fs/module/net sync RPC funnels through service_javascript_sync_rpc,
-// so this is the one place to measure the kernel-VFS "syscall storm" that makes
-// metadata-heavy phases (resourceLoader.reload, createAgentSession) 40-90x slower
-// in the VM than on bare node. Emits a perf log line every 200 calls with the
-// running per-method breakdown.
-static SYNC_RPC_STATS: std::sync::OnceLock<
-    std::sync::Mutex<std::collections::BTreeMap<String, u64>>,
-> = std::sync::OnceLock::new();
-
-#[derive(Default)]
-struct ExecutePhaseStats {
-    calls: u64,
-    total_ns: u128,
-    max_ns: u128,
-}
-
-static EXECUTE_PHASES: OnceLock<Mutex<BTreeMap<String, ExecutePhaseStats>>> = OnceLock::new();
-static EXECUTE_LIFETIMES: OnceLock<Mutex<BTreeMap<String, Instant>>> = OnceLock::new();
-static EXECUTE_EXIT_EVENT_QUEUED: OnceLock<Mutex<BTreeMap<String, Instant>>> = OnceLock::new();
-
-fn execute_phases_enabled() -> bool {
-    std::env::var("AGENTOS_EXECUTE_PHASES").as_deref() == Ok("1")
-}
-
-fn execute_phase_key(vm_id: &str, process_id: &str) -> String {
-    format!("{vm_id}/{process_id}")
-}
-
-pub(crate) fn record_execute_phase(stage: &str, elapsed: Duration) {
-    if !execute_phases_enabled() {
-        return;
-    }
-    let phases = EXECUTE_PHASES.get_or_init(|| Mutex::new(BTreeMap::new()));
-    let Ok(mut phases) = phases.lock() else {
-        return;
-    };
-    let stats = phases.entry(stage.to_string()).or_default();
-    stats.calls += 1;
-    let elapsed_ns = elapsed.as_nanos();
-    stats.total_ns += elapsed_ns;
-    stats.max_ns = stats.max_ns.max(elapsed_ns);
-
-    let Some(path) = std::env::var_os("AGENTOS_EXECUTE_PHASES_FILE") else {
-        return;
-    };
-    let mut output = String::new();
-    for (stage, stats) in phases.iter() {
-        let total_us = stats.total_ns / 1_000;
-        let avg_us = if stats.calls == 0 {
-            0
-        } else {
-            total_us / u128::from(stats.calls)
-        };
-        let max_us = stats.max_ns / 1_000;
-        output.push_str(&format!(
-            "stage={stage} calls={} total_us={total_us} avg_us={avg_us} max_us={max_us}\n",
-            stats.calls
-        ));
-    }
-    let _ = fs::write(path, output);
-}
-
-fn mark_execute_response_ready(vm_id: &str, process_id: &str) {
-    if !execute_phases_enabled() {
-        return;
-    }
-    let lifetimes = EXECUTE_LIFETIMES.get_or_init(|| Mutex::new(BTreeMap::new()));
-    if let Ok(mut lifetimes) = lifetimes.lock() {
-        lifetimes.insert(execute_phase_key(vm_id, process_id), Instant::now());
-    }
-}
-
-pub(crate) fn mark_execute_exit_event_queued(vm_id: &str, process_id: &str) {
-    if !execute_phases_enabled() {
-        return;
-    }
-    let queued = EXECUTE_EXIT_EVENT_QUEUED.get_or_init(|| Mutex::new(BTreeMap::new()));
-    if let Ok(mut queued) = queued.lock() {
-        let key = execute_phase_key(vm_id, process_id);
-        if let std::collections::btree_map::Entry::Vacant(entry) = queued.entry(key) {
-            record_execute_response_to_exit_milestone(
-                "execute_response_to_exit_event_queued",
-                vm_id,
-                process_id,
-            );
-            entry.insert(Instant::now());
-        }
-    }
-}
-
-pub(crate) fn record_execute_exit_event_queue_wait(stage: &str, vm_id: &str, process_id: &str) {
-    if !execute_phases_enabled() {
-        return;
-    }
-    let Some(queued) = EXECUTE_EXIT_EVENT_QUEUED.get() else {
-        return;
-    };
-    let Ok(mut queued) = queued.lock() else {
-        return;
-    };
-    if let Some(started) = queued.remove(&execute_phase_key(vm_id, process_id)) {
-        record_execute_phase(stage, started.elapsed());
-    }
-}
-
-pub(crate) fn record_execute_response_to_exit_milestone(
-    stage: &str,
-    vm_id: &str,
-    process_id: &str,
-) {
-    if !execute_phases_enabled() {
-        return;
-    }
-    let Some(lifetimes) = EXECUTE_LIFETIMES.get() else {
-        return;
-    };
-    let Ok(lifetimes) = lifetimes.lock() else {
-        return;
-    };
-    if let Some(started) = lifetimes.get(&execute_phase_key(vm_id, process_id)) {
-        record_execute_phase(stage, started.elapsed());
-    }
-}
-
-fn record_execute_response_to_exit(vm_id: &str, process_id: &str) {
-    if !execute_phases_enabled() {
-        return;
-    }
-    let Some(lifetimes) = EXECUTE_LIFETIMES.get() else {
-        return;
-    };
-    let Ok(mut lifetimes) = lifetimes.lock() else {
-        return;
-    };
-    if let Some(started) = lifetimes.remove(&execute_phase_key(vm_id, process_id)) {
-        record_execute_phase("execute_response_to_exit_event", started.elapsed());
-    }
-}
-
-fn sync_rpc_trace_enabled() -> bool {
-    std::env::var("AGENTOS_SYNC_RPC_TRACE").as_deref() == Ok("1")
-}
-
-fn record_sync_rpc(method: &str) {
-    let stats =
-        SYNC_RPC_STATS.get_or_init(|| std::sync::Mutex::new(std::collections::BTreeMap::new()));
-    let Ok(mut map) = stats.lock() else {
-        return;
-    };
-    *map.entry(method.to_string()).or_insert(0) += 1;
-    let total: u64 = map.values().sum();
-    if total == 1 || total.is_multiple_of(50) {
-        let mut top: Vec<(&String, &u64)> = map.iter().collect();
-        top.sort_by(|a, b| b.1.cmp(a.1));
-        let breakdown = top
-            .iter()
-            .take(8)
-            .map(|(m, c)| format!("{m}={c}"))
-            .collect::<Vec<_>>()
-            .join(" ");
-        tracing::info!(target: "secure_exec_sidecar::perf", total, %breakdown, "sync_rpc count");
-    }
-}
-
-fn net_tcp_trace_enabled(env: &BTreeMap<String, String>) -> bool {
-    env.get("AGENTOS_NET_BRIDGE_TRACE").map(String::as_str) == Some("1")
-}
-
-fn duration_micros_u64(duration: Duration) -> u64 {
-    u64::try_from(duration.as_micros()).unwrap_or(u64::MAX)
-}
-
-fn net_tcp_trace_reset() {
-    reset_socket_read_trace();
-    set_socket_read_trace_enabled(true);
-    for counter in [
-        &NET_TCP_TRACE_COUNTERS.socket_read_calls,
-        &NET_TCP_TRACE_COUNTERS.socket_read_zero_wait_calls,
-        &NET_TCP_TRACE_COUNTERS.socket_read_data_events,
-        &NET_TCP_TRACE_COUNTERS.socket_read_bytes,
-        &NET_TCP_TRACE_COUNTERS.socket_read_kernel_us,
-        &NET_TCP_TRACE_COUNTERS.socket_read_end_events,
-        &NET_TCP_TRACE_COUNTERS.socket_read_eagain,
-        &NET_TCP_TRACE_COUNTERS.socket_read_errors,
-        &NET_TCP_TRACE_COUNTERS.socket_read_push_attempts,
-        &NET_TCP_TRACE_COUNTERS.socket_read_push_sent,
-        &NET_TCP_TRACE_COUNTERS.socket_read_push_missing,
-        &NET_TCP_TRACE_COUNTERS.socket_read_push_errors,
-        &NET_TCP_TRACE_COUNTERS.socket_write_calls,
-        &NET_TCP_TRACE_COUNTERS.socket_write_bytes,
-        &NET_TCP_TRACE_COUNTERS.socket_write_kernel_us,
-        &NET_TCP_TRACE_COUNTERS.socket_write_errors,
-        &NET_TCP_TRACE_COUNTERS.server_accept_calls,
-        &NET_TCP_TRACE_COUNTERS.server_accept_zero_wait_calls,
-        &NET_TCP_TRACE_COUNTERS.server_accept_connections,
-        &NET_TCP_TRACE_COUNTERS.server_accept_eagain,
-        &NET_TCP_TRACE_COUNTERS.server_accept_errors,
-        &NET_TCP_TRACE_COUNTERS.kernel_poll_targets,
-        &NET_TCP_TRACE_COUNTERS.kernel_poll_zero_wait_calls,
-        &NET_TCP_TRACE_COUNTERS.kernel_poll_wait_us,
-        &NET_TCP_TRACE_COUNTERS.kernel_poll_elapsed_us,
-        &NET_TCP_TRACE_COUNTERS.kernel_poll_empty,
-        &NET_TCP_TRACE_COUNTERS.kernel_poll_ready,
-        &NET_TCP_TRACE_COUNTERS.kernel_poll_revents_read,
-        &NET_TCP_TRACE_COUNTERS.kernel_poll_revents_hup,
-        &NET_TCP_TRACE_COUNTERS.kernel_poll_revents_err,
-        &NET_TCP_TRACE_COUNTERS.kernel_poll_revents_bits_or,
-    ] {
-        counter.store(0, Ordering::Relaxed);
-    }
-}
-
-fn net_tcp_trace_snapshot() -> Value {
-    let load = |counter: &AtomicU64| counter.load(Ordering::Relaxed);
-    let socket_read = socket_read_trace_snapshot();
-    json!({
-        "socketReadCalls": load(&NET_TCP_TRACE_COUNTERS.socket_read_calls),
-        "socketReadZeroWaitCalls": load(&NET_TCP_TRACE_COUNTERS.socket_read_zero_wait_calls),
-        "socketReadDataEvents": load(&NET_TCP_TRACE_COUNTERS.socket_read_data_events),
-        "socketReadBytes": load(&NET_TCP_TRACE_COUNTERS.socket_read_bytes),
-        "socketReadKernelUs": load(&NET_TCP_TRACE_COUNTERS.socket_read_kernel_us),
-        "socketReadRecordCloneCalls": socket_read.socket_record_clone_calls,
-        "socketReadRecordCloneUs": socket_read.socket_record_clone_us,
-        "socketReadRecvCalls": socket_read.read_recv_calls,
-        "socketReadRecvBytes": socket_read.read_recv_bytes,
-        "socketReadRecvChunks": socket_read.read_recv_chunks,
-        "socketReadRecvCopyUs": socket_read.read_recv_copy_us,
-        "socketReadEndEvents": load(&NET_TCP_TRACE_COUNTERS.socket_read_end_events),
-        "socketReadEagain": load(&NET_TCP_TRACE_COUNTERS.socket_read_eagain),
-        "socketReadErrors": load(&NET_TCP_TRACE_COUNTERS.socket_read_errors),
-        "socketReadPushAttempts": load(&NET_TCP_TRACE_COUNTERS.socket_read_push_attempts),
-        "socketReadPushSent": load(&NET_TCP_TRACE_COUNTERS.socket_read_push_sent),
-        "socketReadPushMissing": load(&NET_TCP_TRACE_COUNTERS.socket_read_push_missing),
-        "socketReadPushErrors": load(&NET_TCP_TRACE_COUNTERS.socket_read_push_errors),
-        "socketWriteCalls": load(&NET_TCP_TRACE_COUNTERS.socket_write_calls),
-        "socketWriteBytes": load(&NET_TCP_TRACE_COUNTERS.socket_write_bytes),
-        "socketWriteKernelUs": load(&NET_TCP_TRACE_COUNTERS.socket_write_kernel_us),
-        "socketWriteErrors": load(&NET_TCP_TRACE_COUNTERS.socket_write_errors),
-        "serverAcceptCalls": load(&NET_TCP_TRACE_COUNTERS.server_accept_calls),
-        "serverAcceptZeroWaitCalls": load(&NET_TCP_TRACE_COUNTERS.server_accept_zero_wait_calls),
-        "serverAcceptConnections": load(&NET_TCP_TRACE_COUNTERS.server_accept_connections),
-        "serverAcceptEagain": load(&NET_TCP_TRACE_COUNTERS.server_accept_eagain),
-        "serverAcceptErrors": load(&NET_TCP_TRACE_COUNTERS.server_accept_errors),
-        "kernelPollTargets": load(&NET_TCP_TRACE_COUNTERS.kernel_poll_targets),
-        "kernelPollZeroWaitCalls": load(&NET_TCP_TRACE_COUNTERS.kernel_poll_zero_wait_calls),
-        "kernelPollWaitUs": load(&NET_TCP_TRACE_COUNTERS.kernel_poll_wait_us),
-        "kernelPollElapsedUs": load(&NET_TCP_TRACE_COUNTERS.kernel_poll_elapsed_us),
-        "kernelPollEmpty": load(&NET_TCP_TRACE_COUNTERS.kernel_poll_empty),
-        "kernelPollReady": load(&NET_TCP_TRACE_COUNTERS.kernel_poll_ready),
-        "kernelPollReventsRead": load(&NET_TCP_TRACE_COUNTERS.kernel_poll_revents_read),
-        "kernelPollReventsHup": load(&NET_TCP_TRACE_COUNTERS.kernel_poll_revents_hup),
-        "kernelPollReventsErr": load(&NET_TCP_TRACE_COUNTERS.kernel_poll_revents_err),
-        "kernelPollReventsBitsOr": load(&NET_TCP_TRACE_COUNTERS.kernel_poll_revents_bits_or),
-    })
-}
-
-fn record_net_tcp_kernel_poll(
-    enabled: bool,
-    wait: Duration,
-    elapsed: Duration,
-    revents: PollEvents,
-) {
-    if !enabled {
-        return;
-    }
-    NET_TCP_TRACE_COUNTERS
-        .kernel_poll_targets
-        .fetch_add(1, Ordering::Relaxed);
-    if wait.is_zero() {
-        NET_TCP_TRACE_COUNTERS
-            .kernel_poll_zero_wait_calls
-            .fetch_add(1, Ordering::Relaxed);
-    }
-    NET_TCP_TRACE_COUNTERS
-        .kernel_poll_wait_us
-        .fetch_add(duration_micros_u64(wait), Ordering::Relaxed);
-    NET_TCP_TRACE_COUNTERS
-        .kernel_poll_elapsed_us
-        .fetch_add(duration_micros_u64(elapsed), Ordering::Relaxed);
-    if revents.is_empty() {
-        NET_TCP_TRACE_COUNTERS
-            .kernel_poll_empty
-            .fetch_add(1, Ordering::Relaxed);
-    } else {
-        NET_TCP_TRACE_COUNTERS
-            .kernel_poll_ready
-            .fetch_add(1, Ordering::Relaxed);
-        NET_TCP_TRACE_COUNTERS
-            .kernel_poll_revents_bits_or
-            .fetch_or(u64::from(revents.bits()), Ordering::Relaxed);
-    }
-    if revents.intersects(POLLIN) {
-        NET_TCP_TRACE_COUNTERS
-            .kernel_poll_revents_read
-            .fetch_add(1, Ordering::Relaxed);
-    }
-    if revents.intersects(POLLHUP) {
-        NET_TCP_TRACE_COUNTERS
-            .kernel_poll_revents_hup
-            .fetch_add(1, Ordering::Relaxed);
-    }
-    if revents.intersects(POLLERR) {
-        NET_TCP_TRACE_COUNTERS
-            .kernel_poll_revents_err
-            .fetch_add(1, Ordering::Relaxed);
-    }
-}
-
-pub(crate) fn service_javascript_sync_rpc<B>(
-    request: JavascriptSyncRpcServiceRequest<'_, B>,
-) -> Result<JavascriptSyncRpcServiceResponse, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    if sync_rpc_trace_enabled() {
-        record_sync_rpc(request.sync_request.method.as_str());
-    }
-    let JavascriptSyncRpcServiceRequest {
-        bridge,
-        vm_id,
-        dns,
-        socket_paths,
-        kernel,
-        kernel_readiness,
-        process,
-        sync_request: request,
-        resource_limits,
-        network_counts,
-    } = request;
-    if request.raw_bytes_args.contains_key(&usize::MAX) && request.method == "fs.readSync" {
-        let kernel_pid = process.kernel_pid;
-        let bytes = service_javascript_fs_read_sync_rpc(kernel, process, kernel_pid, request)?;
-        return Ok(JavascriptSyncRpcServiceResponse::Raw(bytes));
-    }
-    if request.method == "fs.readdirSync" {
-        let kernel_pid = process.kernel_pid;
-        let bytes =
-            service_javascript_fs_readdir_raw_sync_rpc(kernel, process, kernel_pid, request)?;
-        return Ok(JavascriptSyncRpcServiceResponse::Raw(bytes));
-    }
-    let response = match request.method.as_str() {
-        "__bench.noop" => Ok(Value::Null),
-        "__bench.net_tcp_metrics_reset" => {
-            net_tcp_trace_reset();
-            Ok(Value::Null)
-        }
-        "__bench.net_tcp_metrics_snapshot" => Ok(net_tcp_trace_snapshot()),
-        // Module resolution / loading / format detection read the kernel VFS so
-        // the resolver sees exactly what the guest and `kernel.readFile()` see.
-        "_resolveModule"
-        | "_resolveModuleSync"
-        | "__resolve_module"
-        | "_batchResolveModules"
-        | "__batch_resolve_modules"
-        | "_loadFile"
-        | "_loadFileSync"
-        | "__load_file"
-        | "_moduleFormat"
-        | "__module_format" => service_javascript_module_sync_rpc(kernel, process, request),
-        // Polyfills are static guest expressions, not VFS reads.
-        "_loadPolyfill" | "__load_polyfill" => {
-            service_javascript_internal_bridge_sync_rpc(process, request)
-        }
-        "__kernel_stdin_read" => {
-            // A TTY (PTY-backed) JavaScript process must read its stdin from the
-            // kernel PTY slave (fd 0) so cooked-mode line discipline (echo,
-            // VERASE/VKILL/VWERASE, ICRNL, VEOF) applies exactly as it does for
-            // wasm/python. Non-TTY JS keeps using the in-process local stdin
-            // bridge (piped stdin fed via process.execution.write_stdin).
-            let js_local_bridge = matches!(process.execution, ActiveExecution::Javascript(_))
-                && process.tty_master_fd.is_none();
-            if js_local_bridge {
-                match &process.execution {
-                    ActiveExecution::Javascript(execution) => execution
-                        .read_kernel_stdin_sync_rpc(request)
-                        .map_err(|error| SidecarError::Execution(error.to_string())),
-                    _ => unreachable!("js_local_bridge implies a JavaScript execution"),
-                }
-            } else {
-                service_javascript_kernel_stdin_sync_rpc(kernel, process, request)
-            }
-        }
-        "__kernel_stdio_write" => {
-            service_javascript_kernel_stdio_write_sync_rpc(kernel, process, request)
-        }
-        "__kernel_isatty" => service_javascript_kernel_isatty_sync_rpc(kernel, process, request),
-        "__kernel_tty_size" => {
-            service_javascript_kernel_tty_size_sync_rpc(kernel, process, request)
-        }
-        "__kernel_poll" => service_javascript_kernel_poll_sync_rpc(kernel, process, request),
-        "__pty_set_raw_mode" => {
-            service_javascript_pty_set_raw_mode_sync_rpc(kernel, process, request)
-        }
-        "crypto.hashDigest"
-        | "crypto.hmacDigest"
-        | "crypto.pbkdf2"
-        | "crypto.scrypt"
-        | "crypto.cipheriv"
-        | "crypto.decipheriv"
-        | "crypto.cipherivCreate"
-        | "crypto.cipherivUpdate"
-        | "crypto.cipherivFinal"
-        | "crypto.sign"
-        | "crypto.verify"
-        | "crypto.asymmetricOp"
-        | "crypto.createKeyObject"
-        | "crypto.generateKeyPairSync"
-        | "crypto.generateKeySync"
-        | "crypto.generatePrimeSync"
-        | "crypto.diffieHellman"
-        | "crypto.diffieHellmanGroup"
-        | "crypto.diffieHellmanSessionCreate"
-        | "crypto.diffieHellmanSessionCall"
-        | "crypto.diffieHellmanSessionDestroy"
-        | "crypto.subtle" => service_javascript_crypto_sync_rpc(process, request),
-        "dns.lookup" | "dns.resolve" | "dns.resolve4" | "dns.resolve6" => {
-            service_javascript_dns_sync_rpc(bridge, kernel, vm_id, dns, request)
-        }
-        "net.http_listen" | "net.http_close" | "net.http_wait" | "net.http_respond" => {
-            return service_javascript_net_sync_rpc_response(JavascriptNetSyncRpcServiceRequest {
-                bridge,
-                vm_id,
-                dns,
-                socket_paths,
-                kernel,
-                kernel_readiness: Arc::clone(&kernel_readiness),
-                process,
-                sync_request: request,
-                resource_limits,
-                network_counts,
-            })
-        }
-        "net.http2_server_listen"
-        | "net.http2_server_poll"
-        | "net.http2_server_close"
-        | "net.http2_server_respond"
-        | "net.http2_server_wait"
-        | "net.http2_session_connect"
-        | "net.http2_session_request"
-        | "net.http2_session_settings"
-        | "net.http2_session_set_local_window_size"
-        | "net.http2_session_goaway"
-        | "net.http2_session_close"
-        | "net.http2_session_destroy"
-        | "net.http2_session_poll"
-        | "net.http2_session_wait"
-        | "net.http2_stream_respond"
-        | "net.http2_stream_push_stream"
-        | "net.http2_stream_write"
-        | "net.http2_stream_end"
-        | "net.http2_stream_close"
-        | "net.http2_stream_pause"
-        | "net.http2_stream_resume"
-        | "net.http2_stream_respond_with_file" => {
-            service_javascript_http2_sync_rpc(JavascriptHttp2SyncRpcServiceRequest {
-                bridge,
-                kernel,
-                vm_id,
-                dns,
-                socket_paths,
-                process,
-                sync_request: request,
-                resource_limits,
-                network_counts,
-            })
-        }
-        "net.connect"
-        | "net.reserve_tcp_port"
-        | "net.release_tcp_port"
-        | "net.listen"
-        | "net.poll"
-        | "net.socket_wait_connect"
-        | "net.socket_read"
-        | "net.socket_set_no_delay"
-        | "net.socket_set_keep_alive"
-        | "net.socket_upgrade_tls"
-        | "net.socket_get_tls_client_hello"
-        | "net.socket_tls_query"
-        | "net.server_poll"
-        | "net.server_accept"
-        | "net.server_connections"
-        | "net.upgrade_socket_write"
-        | "net.upgrade_socket_end"
-        | "net.upgrade_socket_destroy"
-        | "net.write"
-        | "net.shutdown"
-        | "net.destroy"
-        | "net.server_close"
-        | "tls.get_ciphers" => {
-            return service_javascript_net_sync_rpc_response(JavascriptNetSyncRpcServiceRequest {
-                bridge,
-                vm_id,
-                dns,
-                socket_paths,
-                kernel,
-                kernel_readiness: Arc::clone(&kernel_readiness),
-                process,
-                sync_request: request,
-                resource_limits,
-                network_counts,
-            })
-        }
-        "dgram.createSocket"
-        | "dgram.bind"
-        | "dgram.send"
-        | "dgram.poll"
-        | "dgram.close"
-        | "dgram.address"
-        | "dgram.setBufferSize"
-        | "dgram.getBufferSize" => {
-            service_javascript_dgram_sync_rpc(JavascriptDgramSyncRpcServiceRequest {
-                bridge,
-                kernel,
-                vm_id,
-                dns,
-                socket_paths,
-                process,
-                kernel_readiness,
-                sync_request: request,
-                resource_limits,
-                network_counts,
-            })
-        }
-        "sqlite.constants"
-        | "sqlite.open"
-        | "sqlite.close"
-        | "sqlite.exec"
-        | "sqlite.query"
-        | "sqlite.prepare"
-        | "sqlite.location"
-        | "sqlite.checkpoint"
-        | "sqlite.statement.run"
-        | "sqlite.statement.get"
-        | "sqlite.statement.all"
-        | "sqlite.statement.iterate"
-        | "sqlite.statement.columns"
-        | "sqlite.statement.setReturnArrays"
-        | "sqlite.statement.setReadBigInts"
-        | "sqlite.statement.setAllowBareNamedParameters"
-        | "sqlite.statement.setAllowUnknownNamedParameters"
-        | "sqlite.statement.finalize" => {
-            service_javascript_sqlite_sync_rpc(kernel, process, request)
-        }
-        "process.kill" => {
-            let target_pid =
-                javascript_sync_rpc_arg_i32(&request.args, 0, "process.kill target pid")?;
-            let signal = javascript_sync_rpc_arg_str(&request.args, 1, "process.kill signal")?;
-            let parsed_signal = parse_signal(signal)?;
-            if parsed_signal == 0 {
-                kernel
-                    .signal_process(EXECUTION_DRIVER_NAME, target_pid, parsed_signal)
-                    .map_err(kernel_error)?;
-                return Ok(Value::Null.into());
-            }
-            let process_pid = i32::try_from(process.kernel_pid)
-                .map_err(|_| SidecarError::InvalidState("process pid exceeds i32".into()))?;
-            if target_pid != process_pid {
-                return Err(SidecarError::InvalidState(format!(
-                    "unknown process pid {target_pid}"
-                )));
-            }
-            process.pending_self_signal_exit = None;
-            if parsed_signal != 0
-                && !matches!(
-                    canonical_signal_name(parsed_signal),
-                    Some("SIGWINCH" | "SIGCHLD" | "SIGCONT" | "SIGURG")
-                )
-            {
-                process.pending_self_signal_exit = Some(parsed_signal);
-            }
-            Ok(json!({
-                "self": true,
-                "action": "default",
-            }))
-        }
-        "process.umask" => {
-            let new_mask = javascript_sync_rpc_arg_u32_optional(&request.args, 0, "process umask")?;
-            kernel
-                .umask(EXECUTION_DRIVER_NAME, process.kernel_pid, new_mask)
-                .map(|mask| json!(mask))
-                .map_err(kernel_error)
-        }
-        "fs.chmodSync" | "fs.promises.chmod" => {
-            let response =
-                service_javascript_fs_sync_rpc(kernel, process, process.kernel_pid, request)?;
-            mirror_process_chmod_to_host(process, request)?;
-            Ok(response)
-        }
-        _ => service_javascript_fs_sync_rpc(kernel, process, process.kernel_pid, request),
-    }?;
-    Ok(response.into())
-}
-
-fn service_javascript_internal_bridge_sync_rpc(
-    process: &ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    // Module resolution / loading / format now reads the kernel VFS via
-    // `service_javascript_module_sync_rpc`. This host-context path only handles
-    // polyfills, which are static guest expressions independent of the FS.
-    let method = match request.method.as_str() {
-        "_loadPolyfill" | "__load_polyfill" => "_loadPolyfill",
-        other => {
-            return Err(SidecarError::InvalidState(format!(
-                "unsupported JavaScript internal bridge method {other}"
-            )));
-        }
-    };
-
-    handle_internal_bridge_call_from_host_context(
-        &process.host_cwd,
-        &process.guest_cwd,
-        &process.env,
-        method,
-        &request.args,
-    )
-    .ok_or_else(|| {
-        SidecarError::InvalidState(format!(
-            "JavaScript internal bridge method {method} returned no value"
-        ))
-    })
-}
-
-fn mirror_process_chmod_to_host(
-    process: &ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<(), SidecarError> {
-    let guest_path = javascript_sync_rpc_arg_str(&request.args, 0, "filesystem chmod path")?;
-    let mode = javascript_sync_rpc_arg_u32(&request.args, 1, "filesystem chmod mode")? & 0o7777;
-    let Some(host_path) = resolve_process_guest_path_to_host(process, guest_path) else {
-        return Ok(());
-    };
-    if !host_path.exists() {
-        return Ok(());
-    }
-    fs::set_permissions(&host_path, fs::Permissions::from_mode(mode)).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to mirror chmod to host path {}: {error}",
-            host_path.display()
-        ))
-    })
-}
-
-fn resolve_process_guest_path_to_host(
-    process: &ActiveProcess,
-    guest_path: &str,
-) -> Option<PathBuf> {
-    let normalized_guest_path = if guest_path.starts_with('/') {
-        normalize_path(guest_path)
-    } else {
-        normalize_path(&format!(
-            "{}/{}",
-            process.guest_cwd.trim_end_matches('/'),
-            guest_path
-        ))
-    };
-    if let Some(host_path) =
-        host_path_from_runtime_guest_mappings(&process.env, &normalized_guest_path)
-    {
-        return Some(host_path);
-    }
-    let normalized_guest_cwd = normalize_path(&process.guest_cwd);
-    let mut host_root = normalize_host_path(&process.host_cwd);
-    for _ in normalized_guest_cwd
-        .trim_start_matches('/')
-        .split('/')
-        .filter(|segment| !segment.is_empty())
-    {
-        host_root = host_root.parent()?.to_path_buf();
-    }
-    if normalized_guest_path == "/" {
-        Some(host_root)
-    } else {
-        Some(host_root.join(normalized_guest_path.trim_start_matches('/')))
-    }
-}
-
-pub(crate) fn service_javascript_crypto_sync_rpc(
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    match request.method.as_str() {
-        "crypto.hashDigest" => {
-            let algorithm = javascript_crypto_digest_algorithm(
-                &request.args,
-                0,
-                "crypto.hashDigest algorithm",
-            )?;
-            let data = javascript_sync_rpc_base64_arg(&request.args, 1, "crypto.hashDigest data")?;
-            Ok(Value::String(
-                base64::engine::general_purpose::STANDARD.encode(algorithm.digest(&data)),
-            ))
-        }
-        "crypto.hmacDigest" => {
-            let algorithm = javascript_crypto_digest_algorithm(
-                &request.args,
-                0,
-                "crypto.hmacDigest algorithm",
-            )?;
-            let key = javascript_sync_rpc_base64_arg(&request.args, 1, "crypto.hmacDigest key")?;
-            let data = javascript_sync_rpc_base64_arg(&request.args, 2, "crypto.hmacDigest data")?;
-            Ok(Value::String(
-                base64::engine::general_purpose::STANDARD.encode(algorithm.hmac(&key, &data)?),
-            ))
-        }
-        "crypto.pbkdf2" => {
-            let password =
-                javascript_sync_rpc_base64_arg(&request.args, 0, "crypto.pbkdf2 password")?;
-            let salt = javascript_sync_rpc_base64_arg(&request.args, 1, "crypto.pbkdf2 salt")?;
-            let iterations =
-                javascript_sync_rpc_arg_u32(&request.args, 2, "crypto.pbkdf2 iterations")?;
-            if iterations == 0 {
-                return Err(SidecarError::InvalidState(String::from(
-                    "crypto.pbkdf2 iterations must be greater than zero",
-                )));
-            }
-            let key_len = usize::try_from(javascript_sync_rpc_arg_u64(
-                &request.args,
-                3,
-                "crypto.pbkdf2 key length",
-            )?)
-            .map_err(|_| {
-                SidecarError::InvalidState(String::from(
-                    "crypto.pbkdf2 key length must fit within usize",
-                ))
-            })?;
-            let algorithm =
-                javascript_crypto_digest_algorithm(&request.args, 4, "crypto.pbkdf2 digest")?;
-            let mut output = vec![0u8; key_len];
-            algorithm.pbkdf2(&password, &salt, iterations, &mut output);
-            Ok(Value::String(
-                base64::engine::general_purpose::STANDARD.encode(output),
-            ))
-        }
-        "crypto.scrypt" => {
-            let password =
-                javascript_sync_rpc_base64_arg(&request.args, 0, "crypto.scrypt password")?;
-            let salt = javascript_sync_rpc_base64_arg(&request.args, 1, "crypto.scrypt salt")?;
-            let key_len = usize::try_from(javascript_sync_rpc_arg_u64(
-                &request.args,
-                2,
-                "crypto.scrypt key length",
-            )?)
-            .map_err(|_| {
-                SidecarError::InvalidState(String::from(
-                    "crypto.scrypt key length must fit within usize",
-                ))
-            })?;
-            let options_json =
-                javascript_sync_rpc_arg_str(&request.args, 3, "crypto.scrypt options")?;
-            let options: JavascriptScryptOptions =
-                serde_json::from_str(options_json).map_err(|error| {
-                    SidecarError::InvalidState(format!(
-                        "crypto.scrypt options must be valid JSON: {error}"
-                    ))
-                })?;
-            let cost = options.cost.unwrap_or(DEFAULT_SCRYPT_COST);
-            if cost == 0 || !cost.is_power_of_two() {
-                return Err(SidecarError::InvalidState(String::from(
-                    "crypto.scrypt cost must be a positive power of two",
-                )));
-            }
-            let log_n = u8::try_from(cost.ilog2()).map_err(|_| {
-                SidecarError::InvalidState(String::from(
-                    "crypto.scrypt cost exceeds supported parameter range",
-                ))
-            })?;
-            let params = ScryptParams::new(
-                log_n,
-                options.block_size.unwrap_or(DEFAULT_SCRYPT_BLOCK_SIZE),
-                options
-                    .parallelization
-                    .unwrap_or(DEFAULT_SCRYPT_PARALLELIZATION),
-                key_len,
-            )
-            .map_err(|error| {
-                SidecarError::InvalidState(format!("crypto.scrypt options are invalid: {error}"))
-            })?;
-            let mut output = vec![0u8; key_len];
-            scrypt(&password, &salt, &params, &mut output).map_err(|error| {
-                SidecarError::Execution(format!("crypto.scrypt failed: {error}"))
-            })?;
-            Ok(Value::String(
-                base64::engine::general_purpose::STANDARD.encode(output),
-            ))
-        }
-        "crypto.cipheriv" => service_javascript_crypto_cipheriv_sync_rpc(request),
-        "crypto.decipheriv" => service_javascript_crypto_decipheriv_sync_rpc(request),
-        "crypto.cipherivCreate" => {
-            service_javascript_crypto_cipheriv_create_sync_rpc(process, request)
-        }
-        "crypto.cipherivUpdate" => {
-            service_javascript_crypto_cipheriv_update_sync_rpc(process, request)
-        }
-        "crypto.cipherivFinal" => {
-            service_javascript_crypto_cipheriv_final_sync_rpc(process, request)
-        }
-        "crypto.sign" => service_javascript_crypto_sign_sync_rpc(request),
-        "crypto.verify" => service_javascript_crypto_verify_sync_rpc(request),
-        "crypto.asymmetricOp" => service_javascript_crypto_asymmetric_op_sync_rpc(request),
-        "crypto.createKeyObject" => service_javascript_crypto_create_key_object_sync_rpc(request),
-        "crypto.generateKeyPairSync" => {
-            service_javascript_crypto_generate_key_pair_sync_rpc(request)
-        }
-        "crypto.generateKeySync" => service_javascript_crypto_generate_key_sync_rpc(request),
-        "crypto.generatePrimeSync" => service_javascript_crypto_generate_prime_sync_rpc(request),
-        "crypto.diffieHellman" => service_javascript_crypto_diffie_hellman_sync_rpc(request),
-        "crypto.diffieHellmanGroup" => {
-            service_javascript_crypto_diffie_hellman_group_sync_rpc(request)
-        }
-        "crypto.diffieHellmanSessionCreate" => {
-            service_javascript_crypto_diffie_hellman_session_create_sync_rpc(process, request)
-        }
-        "crypto.diffieHellmanSessionCall" => {
-            service_javascript_crypto_diffie_hellman_session_call_sync_rpc(process, request)
-        }
-        "crypto.diffieHellmanSessionDestroy" => {
-            service_javascript_crypto_diffie_hellman_session_destroy_sync_rpc(process, request)
-        }
-        "crypto.subtle" => service_javascript_crypto_subtle_sync_rpc(request),
-        _ => Err(SidecarError::InvalidState(format!(
-            "unsupported JavaScript crypto sync RPC method {}",
-            request.method
-        ))),
-    }
-}
-
-fn javascript_crypto_digest_algorithm(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<JavascriptCryptoDigestAlgorithm, SidecarError> {
-    JavascriptCryptoDigestAlgorithm::parse(javascript_sync_rpc_arg_str(args, index, label)?)
-}
-
-impl JavascriptCryptoDigestAlgorithm {
-    fn parse(value: &str) -> Result<Self, SidecarError> {
-        match value.trim().to_ascii_lowercase().replace('-', "").as_str() {
-            "md5" => Ok(Self::Md5),
-            "sha1" => Ok(Self::Sha1),
-            "sha224" => Ok(Self::Sha224),
-            "sha256" => Ok(Self::Sha256),
-            "sha384" => Ok(Self::Sha384),
-            "sha512" => Ok(Self::Sha512),
-            _ => Err(SidecarError::InvalidState(format!(
-                "unsupported crypto digest algorithm {value}"
-            ))),
-        }
-    }
-
-    fn digest(self, data: &[u8]) -> Vec<u8> {
-        match self {
-            Self::Md5 => Md5::digest(data).to_vec(),
-            Self::Sha1 => Sha1::digest(data).to_vec(),
-            Self::Sha224 => Sha224::digest(data).to_vec(),
-            Self::Sha256 => Sha256::digest(data).to_vec(),
-            Self::Sha384 => Sha384::digest(data).to_vec(),
-            Self::Sha512 => Sha512::digest(data).to_vec(),
-        }
-    }
-
-    fn hmac(self, key: &[u8], data: &[u8]) -> Result<Vec<u8>, SidecarError> {
-        match self {
-            Self::Md5 => {
-                let mut mac = Hmac::<Md5>::new_from_slice(key).map_err(|error| {
-                    SidecarError::InvalidState(format!("invalid HMAC key: {error}"))
-                })?;
-                mac.update(data);
-                Ok(mac.finalize().into_bytes().to_vec())
-            }
-            Self::Sha1 => {
-                let mut mac = Hmac::<Sha1>::new_from_slice(key).map_err(|error| {
-                    SidecarError::InvalidState(format!("invalid HMAC key: {error}"))
-                })?;
-                mac.update(data);
-                Ok(mac.finalize().into_bytes().to_vec())
-            }
-            Self::Sha224 => {
-                let mut mac = Hmac::<Sha224>::new_from_slice(key).map_err(|error| {
-                    SidecarError::InvalidState(format!("invalid HMAC key: {error}"))
-                })?;
-                mac.update(data);
-                Ok(mac.finalize().into_bytes().to_vec())
-            }
-            Self::Sha256 => {
-                let mut mac = Hmac::<Sha256>::new_from_slice(key).map_err(|error| {
-                    SidecarError::InvalidState(format!("invalid HMAC key: {error}"))
-                })?;
-                mac.update(data);
-                Ok(mac.finalize().into_bytes().to_vec())
-            }
-            Self::Sha384 => {
-                let mut mac = Hmac::<Sha384>::new_from_slice(key).map_err(|error| {
-                    SidecarError::InvalidState(format!("invalid HMAC key: {error}"))
-                })?;
-                mac.update(data);
-                Ok(mac.finalize().into_bytes().to_vec())
-            }
-            Self::Sha512 => {
-                let mut mac = Hmac::<Sha512>::new_from_slice(key).map_err(|error| {
-                    SidecarError::InvalidState(format!("invalid HMAC key: {error}"))
-                })?;
-                mac.update(data);
-                Ok(mac.finalize().into_bytes().to_vec())
-            }
-        }
-    }
-
-    fn pbkdf2(self, password: &[u8], salt: &[u8], iterations: u32, output: &mut [u8]) {
-        match self {
-            Self::Md5 => pbkdf2_hmac::<Md5>(password, salt, iterations, output),
-            Self::Sha1 => pbkdf2_hmac::<Sha1>(password, salt, iterations, output),
-            Self::Sha224 => pbkdf2_hmac::<Sha224>(password, salt, iterations, output),
-            Self::Sha256 => pbkdf2_hmac::<Sha256>(password, salt, iterations, output),
-            Self::Sha384 => pbkdf2_hmac::<Sha384>(password, salt, iterations, output),
-            Self::Sha512 => pbkdf2_hmac::<Sha512>(password, salt, iterations, output),
-        }
-    }
-}
-
-#[derive(Debug, Clone)]
-enum JavascriptCryptoKeyMaterial {
-    Private(PKey<Private>),
-    Public(PKey<Public>),
-    Secret(Vec<u8>),
-}
-
-#[derive(Debug, Clone, Deserialize, Serialize)]
-struct JavascriptSerializedSandboxKeyObject {
-    #[serde(rename = "type")]
-    kind: String,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pem: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    raw: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none", rename = "asymmetricKeyType")]
-    asymmetric_key_type: Option<String>,
-    #[serde(
-        skip_serializing_if = "Option::is_none",
-        rename = "asymmetricKeyDetails"
-    )]
-    asymmetric_key_details: Option<Map<String, Value>>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    jwk: Option<Value>,
-}
-
-#[derive(Debug, Clone)]
-struct JavascriptDirectKeyInput {
-    key: JavascriptCryptoKeyMaterial,
-    padding: Option<Padding>,
-}
-
-fn service_javascript_crypto_cipheriv_sync_rpc(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    service_javascript_crypto_cipheriv_inner(request, false)
-}
-
-fn service_javascript_crypto_decipheriv_sync_rpc(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    service_javascript_crypto_cipheriv_inner(request, true)
-}
-
-fn service_javascript_crypto_cipheriv_create_sync_rpc(
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    ensure_per_process_state_handle_capacity(process.cipher_sessions.len(), "cipher session")?;
-    let mode = javascript_sync_rpc_arg_str(&request.args, 0, "crypto.cipherivCreate mode")?;
-    let decrypt = mode == "decipher";
-    let algorithm =
-        javascript_sync_rpc_arg_str(&request.args, 1, "crypto.cipherivCreate algorithm")?;
-    let key = javascript_sync_rpc_base64_arg(&request.args, 2, "crypto.cipherivCreate key")?;
-    let iv = javascript_sync_rpc_base64_arg_optional(&request.args, 3, "crypto.cipherivCreate iv")?;
-    let options =
-        javascript_sync_rpc_json_arg_optional(&request.args, 4, "crypto.cipherivCreate options")?;
-    let context = javascript_crypto_build_cipher_session(
-        algorithm,
-        &key,
-        iv.as_deref(),
-        decrypt,
-        options.as_ref(),
-    )?;
-    process.next_cipher_session_id += 1;
-    let session_id = process.next_cipher_session_id;
-    process
-        .cipher_sessions
-        .insert(session_id, ActiveCipherSession { context });
-    Ok(json!(session_id))
-}
-
-fn service_javascript_crypto_cipheriv_update_sync_rpc(
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let session_id =
-        javascript_sync_rpc_arg_u64(&request.args, 0, "crypto.cipherivUpdate session id")?;
-    let data = javascript_sync_rpc_base64_arg(&request.args, 1, "crypto.cipherivUpdate data")?;
-    let session = process
-        .cipher_sessions
-        .get_mut(&session_id)
-        .ok_or_else(|| {
-            SidecarError::InvalidState(format!("Cipher session {session_id} not found"))
-        })?;
-    let result = javascript_crypto_cipher_update(&mut session.context, &data)?;
-    Ok(Value::String(
-        base64::engine::general_purpose::STANDARD.encode(result),
-    ))
-}
-
-fn service_javascript_crypto_cipheriv_final_sync_rpc(
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let session_id =
-        javascript_sync_rpc_arg_u64(&request.args, 0, "crypto.cipherivFinal session id")?;
-    let session = process.cipher_sessions.remove(&session_id).ok_or_else(|| {
-        SidecarError::InvalidState(format!("Cipher session {session_id} not found"))
-    })?;
-    let outcome = session
-        .context
-        .finalize()
-        .map_err(javascript_crypto_cipher_error)?;
-    let mut response = Map::new();
-    response.insert(
-        String::from("data"),
-        Value::String(base64::engine::general_purpose::STANDARD.encode(outcome.data)),
-    );
-    if let Some(auth_tag) = outcome.auth_tag {
-        response.insert(
-            String::from("authTag"),
-            Value::String(base64::engine::general_purpose::STANDARD.encode(auth_tag)),
-        );
-    }
-    Ok(Value::String(serde_json::to_string(&response).map_err(
-        |error| SidecarError::InvalidState(format!("serialize cipher final response: {error}")),
-    )?))
-}
-
-fn service_javascript_crypto_sign_sync_rpc(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let algorithm = request.args.first().and_then(Value::as_str);
-    let data = javascript_sync_rpc_base64_arg(&request.args, 1, "crypto.sign data")?;
-    let key_json = javascript_sync_rpc_arg_str(&request.args, 2, "crypto.sign key")?;
-    let key_input =
-        javascript_crypto_parse_direct_key_input(key_json, Some("private"), "crypto.sign key")?;
-    let private_key = javascript_crypto_expect_private_key(key_input.key, "crypto.sign key")?;
-    let mut signer = javascript_crypto_new_signer(algorithm, &private_key)?;
-    if let Some(padding) = key_input.padding {
-        signer
-            .set_rsa_padding(padding)
-            .map_err(javascript_crypto_openssl_error)?;
-    }
-    signer
-        .update(&data)
-        .map_err(javascript_crypto_openssl_error)?;
-    Ok(Value::String(
-        base64::engine::general_purpose::STANDARD.encode(
-            signer
-                .sign_to_vec()
-                .map_err(javascript_crypto_openssl_error)?,
-        ),
-    ))
-}
-
-fn service_javascript_crypto_verify_sync_rpc(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let algorithm = request.args.first().and_then(Value::as_str);
-    let data = javascript_sync_rpc_base64_arg(&request.args, 1, "crypto.verify data")?;
-    let key_json = javascript_sync_rpc_arg_str(&request.args, 2, "crypto.verify key")?;
-    let signature = javascript_sync_rpc_base64_arg(&request.args, 3, "crypto.verify signature")?;
-    let key_input =
-        javascript_crypto_parse_direct_key_input(key_json, Some("public"), "crypto.verify key")?;
-    let public_key = javascript_crypto_expect_public_key(key_input.key, "crypto.verify key")?;
-    let mut verifier = javascript_crypto_new_verifier(algorithm, &public_key)?;
-    if let Some(padding) = key_input.padding {
-        verifier
-            .set_rsa_padding(padding)
-            .map_err(javascript_crypto_openssl_error)?;
-    }
-    verifier
-        .update(&data)
-        .map_err(javascript_crypto_openssl_error)?;
-    Ok(json!(verifier
-        .verify(&signature)
-        .map_err(javascript_crypto_openssl_error)?))
-}
-
-fn service_javascript_crypto_asymmetric_op_sync_rpc(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let operation = javascript_sync_rpc_arg_str(&request.args, 0, "crypto.asymmetricOp operation")?;
-    let key_json = javascript_sync_rpc_arg_str(&request.args, 1, "crypto.asymmetricOp key")?;
-    let data = javascript_sync_rpc_base64_arg(&request.args, 2, "crypto.asymmetricOp data")?;
-    let expect_kind = match operation {
-        "publicEncrypt" | "publicDecrypt" => Some("public"),
-        "privateEncrypt" | "privateDecrypt" => Some("private"),
-        other => {
-            return Err(SidecarError::InvalidState(format!(
-                "Unsupported asymmetric crypto operation: {other}"
-            )));
-        }
-    };
-    let key_input =
-        javascript_crypto_parse_direct_key_input(key_json, expect_kind, "crypto.asymmetricOp key")?;
-    let padding = key_input.padding.unwrap_or(Padding::PKCS1);
-    let mut output = vec![0_u8; javascript_crypto_rsa_output_size(&key_input.key)?];
-    let written = match (operation, key_input.key) {
-        ("publicEncrypt", JavascriptCryptoKeyMaterial::Public(key))
-        | ("publicDecrypt", JavascriptCryptoKeyMaterial::Public(key)) => {
-            let rsa = key.rsa().map_err(javascript_crypto_openssl_error)?;
-            if operation == "publicEncrypt" {
-                rsa.public_encrypt(&data, &mut output, padding)
-                    .map_err(javascript_crypto_openssl_error)?
-            } else {
-                rsa.public_decrypt(&data, &mut output, padding)
-                    .map_err(javascript_crypto_openssl_error)?
-            }
-        }
-        ("privateEncrypt", JavascriptCryptoKeyMaterial::Private(key))
-        | ("privateDecrypt", JavascriptCryptoKeyMaterial::Private(key)) => {
-            let rsa = key.rsa().map_err(javascript_crypto_openssl_error)?;
-            if operation == "privateEncrypt" {
-                rsa.private_encrypt(&data, &mut output, padding)
-                    .map_err(javascript_crypto_openssl_error)?
-            } else {
-                rsa.private_decrypt(&data, &mut output, padding)
-                    .map_err(javascript_crypto_openssl_error)?
-            }
-        }
-        _ => {
-            return Err(SidecarError::InvalidState(format!(
-                "{operation} requires an RSA {} key",
-                expect_kind.unwrap_or("asymmetric")
-            )));
-        }
-    };
-    output.truncate(written);
-    Ok(Value::String(
-        base64::engine::general_purpose::STANDARD.encode(output),
-    ))
-}
-
-fn service_javascript_crypto_create_key_object_sync_rpc(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let operation =
-        javascript_sync_rpc_arg_str(&request.args, 0, "crypto.createKeyObject operation")?;
-    let key_json = javascript_sync_rpc_arg_str(&request.args, 1, "crypto.createKeyObject key")?;
-    let expected = match operation {
-        "createPrivateKey" => Some("private"),
-        "createPublicKey" => Some("public"),
-        other => {
-            return Err(SidecarError::InvalidState(format!(
-                "Unsupported key creation operation: {other}"
-            )));
-        }
-    };
-    let key_input =
-        javascript_crypto_parse_direct_key_input(key_json, expected, "crypto.createKeyObject key")?;
-    Ok(Value::String(
-        serde_json::to_string(&javascript_crypto_serialize_sandbox_key_object(
-            &key_input.key,
-        )?)
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("serialize crypto key object: {error}"))
-        })?,
-    ))
-}
-
-fn service_javascript_crypto_generate_key_pair_sync_rpc(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let key_type =
-        javascript_sync_rpc_arg_str(&request.args, 0, "crypto.generateKeyPairSync type")?;
-    let options = javascript_crypto_parse_serialized_options_arg(
-        &request.args,
-        1,
-        "crypto.generateKeyPairSync options",
-    )?
-    .unwrap_or(Value::Object(Map::new()));
-    let public_encoding = options.get("publicKeyEncoding").cloned();
-    let private_encoding = options.get("privateKeyEncoding").cloned();
-
-    let private_key = match key_type {
-        "rsa" => {
-            let bits = options
-                .get("modulusLength")
-                .and_then(Value::as_u64)
-                .unwrap_or(2048) as u32;
-            let exponent = options
-                .get("publicExponent")
-                .map(|value| javascript_crypto_u32_from_bridge_value(value, "rsa publicExponent"))
-                .transpose()?
-                .unwrap_or(65_537);
-            let exponent = BigNum::from_u32(exponent).map_err(javascript_crypto_openssl_error)?;
-            let rsa =
-                Rsa::generate_with_e(bits, &exponent).map_err(javascript_crypto_openssl_error)?;
-            PKey::from_rsa(rsa).map_err(javascript_crypto_openssl_error)?
-        }
-        "ec" => {
-            let named_curve = options
-                .get("namedCurve")
-                .and_then(Value::as_str)
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "crypto.generateKeyPairSync ec requires namedCurve",
-                    ))
-                })?;
-            let group = EcGroup::from_curve_name(javascript_crypto_curve_nid(named_curve)?)
-                .map_err(javascript_crypto_openssl_error)?;
-            let key = EcKey::generate(&group).map_err(javascript_crypto_openssl_error)?;
-            PKey::from_ec_key(key).map_err(javascript_crypto_openssl_error)?
-        }
-        "ed25519" => PKey::generate_ed25519().map_err(javascript_crypto_openssl_error)?,
-        "x25519" => PKey::generate_x25519().map_err(javascript_crypto_openssl_error)?,
-        other => {
-            return Err(SidecarError::InvalidState(format!(
-                "unsupported crypto key pair type {other}"
-            )));
-        }
-    };
-    let public_key = PKey::public_key_from_pem(
-        &private_key
-            .public_key_to_pem()
-            .map_err(javascript_crypto_openssl_error)?,
-    )
-    .map_err(javascript_crypto_openssl_error)?;
-    let response = if public_encoding.is_some() || private_encoding.is_some() {
-        json!({
-            "publicKey": javascript_crypto_serialize_encoded_key_value_public(&public_key, public_encoding.as_ref())?,
-            "privateKey": javascript_crypto_serialize_encoded_key_value_private(&private_key, private_encoding.as_ref())?,
-        })
-    } else {
-        json!({
-            "publicKey": javascript_crypto_serialize_sandbox_key_object(&JavascriptCryptoKeyMaterial::Public(public_key))?,
-            "privateKey": javascript_crypto_serialize_sandbox_key_object(&JavascriptCryptoKeyMaterial::Private(private_key))?,
-        })
-    };
-    Ok(Value::String(serde_json::to_string(&response).map_err(
-        |error| SidecarError::InvalidState(format!("serialize generated key pair: {error}")),
-    )?))
-}
-
-fn service_javascript_crypto_generate_key_sync_rpc(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let key_type = javascript_sync_rpc_arg_str(&request.args, 0, "crypto.generateKeySync type")?;
-    let options = javascript_crypto_parse_serialized_options_arg(
-        &request.args,
-        1,
-        "crypto.generateKeySync options",
-    )?
-    .unwrap_or(Value::Object(Map::new()));
-    let bit_length = options
-        .get("length")
-        .and_then(Value::as_u64)
-        .ok_or_else(|| {
-            SidecarError::InvalidState(String::from(
-                "crypto.generateKeySync options.length is required",
-            ))
-        })? as usize;
-    let mut raw = vec![0_u8; bit_length.div_ceil(8)];
-    rand_bytes(&mut raw).map_err(javascript_crypto_openssl_error)?;
-    let serialized = match key_type {
-        "hmac" => javascript_crypto_serialize_sandbox_key_object(
-            &JavascriptCryptoKeyMaterial::Secret(raw),
-        )?,
-        "aes" => javascript_crypto_serialize_sandbox_key_object(
-            &JavascriptCryptoKeyMaterial::Secret(raw),
-        )?,
-        other => {
-            return Err(SidecarError::InvalidState(format!(
-                "unsupported crypto.generateKeySync type {other}"
-            )));
-        }
-    };
-    Ok(Value::String(serde_json::to_string(&serialized).map_err(
-        |error| SidecarError::InvalidState(format!("serialize generated key: {error}")),
-    )?))
-}
-
-fn service_javascript_crypto_generate_prime_sync_rpc(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let bits =
-        javascript_sync_rpc_arg_u64(&request.args, 0, "crypto.generatePrimeSync size")? as i32;
-    let options = javascript_crypto_parse_serialized_options_arg(
-        &request.args,
-        1,
-        "crypto.generatePrimeSync options",
-    )?
-    .unwrap_or(Value::Object(Map::new()));
-    let safe = options
-        .get("safe")
-        .and_then(Value::as_bool)
-        .unwrap_or(false);
-    let add = options
-        .get("add")
-        .map(|value| javascript_crypto_bignum_from_bridge_value(value, "prime add"))
-        .transpose()?;
-    let rem = options
-        .get("rem")
-        .map(|value| javascript_crypto_bignum_from_bridge_value(value, "prime rem"))
-        .transpose()?;
-    let mut prime = BigNum::new().map_err(javascript_crypto_openssl_error)?;
-    prime
-        .generate_prime(bits, safe, add.as_deref(), rem.as_deref())
-        .map_err(javascript_crypto_openssl_error)?;
-    let payload = if options
-        .get("bigint")
-        .and_then(Value::as_bool)
-        .unwrap_or(false)
-    {
-        json!({
-            "__type": "bigint",
-            "value": prime.to_dec_str().map_err(javascript_crypto_openssl_error)?.to_string(),
-        })
-    } else {
-        json!({
-            "__type": "buffer",
-            "value": base64::engine::general_purpose::STANDARD.encode(prime.to_vec()),
-        })
-    };
-    Ok(Value::String(serde_json::to_string(&payload).map_err(
-        |error| SidecarError::InvalidState(format!("serialize generated prime: {error}")),
-    )?))
-}
-
-fn service_javascript_crypto_diffie_hellman_sync_rpc(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let options = javascript_sync_rpc_arg_str(&request.args, 0, "crypto.diffieHellman options")?;
-    let parsed: Value = serde_json::from_str(options).map_err(|error| {
-        SidecarError::InvalidState(format!(
-            "crypto.diffieHellman options must be valid JSON: {error}"
-        ))
-    })?;
-    let private_key = javascript_crypto_parse_key_material_value(
-        parsed.get("privateKey").ok_or_else(|| {
-            SidecarError::InvalidState(String::from("crypto.diffieHellman missing privateKey"))
-        })?,
-        Some("private"),
-        "crypto.diffieHellman privateKey",
-    )?;
-    let public_key = javascript_crypto_parse_key_material_value(
-        parsed.get("publicKey").ok_or_else(|| {
-            SidecarError::InvalidState(String::from("crypto.diffieHellman missing publicKey"))
-        })?,
-        Some("public"),
-        "crypto.diffieHellman publicKey",
-    )?;
-    let private_key =
-        javascript_crypto_expect_private_key(private_key, "crypto.diffieHellman privateKey")?;
-    let public_key =
-        javascript_crypto_expect_public_key(public_key, "crypto.diffieHellman publicKey")?;
-    let mut deriver = Deriver::new(&private_key).map_err(javascript_crypto_openssl_error)?;
-    deriver
-        .set_peer(&public_key)
-        .map_err(javascript_crypto_openssl_error)?;
-    let secret = deriver
-        .derive_to_vec()
-        .map_err(javascript_crypto_openssl_error)?;
-    Ok(Value::String(
-        serde_json::to_string(&json!({
-            "__type": "buffer",
-            "value": base64::engine::general_purpose::STANDARD.encode(secret),
-        }))
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("serialize derived secret: {error}"))
-        })?,
-    ))
-}
-
-fn service_javascript_crypto_diffie_hellman_group_sync_rpc(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let name = javascript_sync_rpc_arg_str(&request.args, 0, "crypto.diffieHellmanGroup name")?;
-    let params = javascript_crypto_named_dh_group(name)?;
-    let response = json!({
-        "prime": {
-            "__type": "buffer",
-            "value": base64::engine::general_purpose::STANDARD.encode(params.prime_p().to_vec()),
-        },
-        "generator": {
-            "__type": "buffer",
-            "value": base64::engine::general_purpose::STANDARD.encode(params.generator().to_vec()),
-        },
-    });
-    Ok(Value::String(serde_json::to_string(&response).map_err(
-        |error| {
-            SidecarError::InvalidState(format!("serialize diffieHellmanGroup response: {error}"))
-        },
-    )?))
-}
-
-fn service_javascript_crypto_diffie_hellman_session_create_sync_rpc(
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    ensure_per_process_state_handle_capacity(
-        process.diffie_hellman_sessions.len(),
-        "diffie-hellman session",
-    )?;
-    let raw = javascript_sync_rpc_arg_str(
-        &request.args,
-        0,
-        "crypto.diffieHellmanSessionCreate request",
-    )?;
-    let parsed: Value = serde_json::from_str(raw).map_err(|error| {
-        SidecarError::InvalidState(format!(
-            "crypto.diffieHellmanSessionCreate request must be valid JSON: {error}"
-        ))
-    })?;
-    let session = match parsed.get("type").and_then(Value::as_str) {
-        Some("group") => {
-            let name = parsed.get("name").and_then(Value::as_str).ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "crypto.diffieHellmanSessionCreate group requires name",
-                ))
-            })?;
-            ActiveDiffieHellmanSession::Dh(ActiveDhSession {
-                params: javascript_crypto_named_dh_group(name)?,
-                key_pair: None,
-            })
-        }
-        Some("dh") => {
-            let args = parsed
-                .get("args")
-                .and_then(Value::as_array)
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "crypto.diffieHellmanSessionCreate dh requires args",
-                    ))
-                })?;
-            let params = javascript_crypto_build_dh_params(args)?;
-            ActiveDiffieHellmanSession::Dh(ActiveDhSession {
-                params,
-                key_pair: None,
-            })
-        }
-        Some("ecdh") => {
-            let curve = parsed.get("name").and_then(Value::as_str).ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "crypto.diffieHellmanSessionCreate ecdh requires name",
-                ))
-            })?;
-            ActiveDiffieHellmanSession::Ecdh(ActiveEcdhSession {
-                curve: curve.to_string(),
-                key_pair: None,
-            })
-        }
-        other => {
-            return Err(SidecarError::InvalidState(format!(
-                "Unsupported Diffie-Hellman session type: {}",
-                other.unwrap_or("<missing>")
-            )));
-        }
-    };
-    process.next_diffie_hellman_session_id += 1;
-    let session_id = process.next_diffie_hellman_session_id;
-    process.diffie_hellman_sessions.insert(session_id, session);
-    Ok(json!(session_id))
-}
-
-fn service_javascript_crypto_diffie_hellman_session_call_sync_rpc(
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let session_id = javascript_sync_rpc_arg_u64(
-        &request.args,
-        0,
-        "crypto.diffieHellmanSessionCall session id",
-    )?;
-    let raw =
-        javascript_sync_rpc_arg_str(&request.args, 1, "crypto.diffieHellmanSessionCall request")?;
-    let parsed: Value = serde_json::from_str(raw).map_err(|error| {
-        SidecarError::InvalidState(format!(
-            "crypto.diffieHellmanSessionCall request must be valid JSON: {error}"
-        ))
-    })?;
-    let method = parsed
-        .get("method")
-        .and_then(Value::as_str)
-        .ok_or_else(|| {
-            SidecarError::InvalidState(String::from(
-                "crypto.diffieHellmanSessionCall request missing method",
-            ))
-        })?;
-    let args = parsed
-        .get("args")
-        .and_then(Value::as_array)
-        .cloned()
-        .unwrap_or_default();
-    let session = process
-        .diffie_hellman_sessions
-        .get_mut(&session_id)
-        .ok_or_else(|| {
-            SidecarError::InvalidState(format!("Diffie-Hellman session {session_id} not found"))
-        })?;
-    let (result, has_result) = match session {
-        ActiveDiffieHellmanSession::Dh(session) => {
-            javascript_crypto_call_dh_session(session, method, &args)?
-        }
-        ActiveDiffieHellmanSession::Ecdh(session) => {
-            javascript_crypto_call_ecdh_session(session, method, &args)?
-        }
-    };
-    Ok(Value::String(
-        serde_json::to_string(&json!({
-            "result": result,
-            "hasResult": has_result,
-        }))
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("serialize diffie session result: {error}"))
-        })?,
-    ))
-}
-
-fn service_javascript_crypto_diffie_hellman_session_destroy_sync_rpc(
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let session_id = javascript_sync_rpc_arg_u64(
-        &request.args,
-        0,
-        "crypto.diffieHellmanSessionDestroy session id",
-    )?;
-    process
-        .diffie_hellman_sessions
-        .remove(&session_id)
-        .ok_or_else(|| {
-            SidecarError::InvalidState(format!("Diffie-Hellman session {session_id} not found"))
-        })?;
-    Ok(Value::Null)
-}
-
-fn service_javascript_crypto_subtle_sync_rpc(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let raw = javascript_sync_rpc_arg_str(&request.args, 0, "crypto.subtle request")?;
-    let parsed: Value = serde_json::from_str(raw).map_err(|error| {
-        SidecarError::InvalidState(format!("crypto.subtle request must be valid JSON: {error}"))
-    })?;
-    let op = parsed.get("op").and_then(Value::as_str).ok_or_else(|| {
-        SidecarError::InvalidState(String::from("crypto.subtle request missing op"))
-    })?;
-    match op {
-        "digest" => {
-            let algorithm = parsed
-                .get("algorithm")
-                .and_then(Value::as_str)
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "crypto.subtle.digest missing algorithm",
-                    ))
-                })?;
-            let data = parsed.get("data").and_then(Value::as_str).ok_or_else(|| {
-                SidecarError::InvalidState(String::from("crypto.subtle.digest missing data"))
-            })?;
-            let bytes = base64::engine::general_purpose::STANDARD
-                .decode(data)
-                .map_err(|error| {
-                    SidecarError::InvalidState(format!("crypto.subtle.digest data base64: {error}"))
-                })?;
-            let digest = JavascriptCryptoDigestAlgorithm::parse(algorithm)?.digest(&bytes);
-            Ok(Value::String(
-                serde_json::to_string(&json!({
-                    "data": base64::engine::general_purpose::STANDARD.encode(digest),
-                }))
-                .map_err(|error| {
-                    SidecarError::InvalidState(format!("serialize crypto.subtle digest: {error}"))
-                })?,
-            ))
-        }
-        "generateKey" => {
-            let algorithm = parsed.get("algorithm").ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "crypto.subtle.generateKey missing algorithm",
-                ))
-            })?;
-            let name =
-                javascript_crypto_subtle_algorithm_name(algorithm, "crypto.subtle.generateKey")?;
-            if !matches!(name, "AES-GCM" | "AES-CBC" | "AES-CTR" | "AES-KW") {
-                return Err(SidecarError::InvalidState(format!(
-                    "Unsupported key algorithm: {name}"
-                )));
-            }
-            let length_bits = algorithm
-                .get("length")
-                .and_then(Value::as_u64)
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "crypto.subtle.generateKey AES algorithm requires length",
-                    ))
-                })?;
-            if length_bits % 8 != 0 {
-                return Err(SidecarError::InvalidState(String::from(
-                    "crypto.subtle.generateKey length must be byte-aligned",
-                )));
-            }
-            let length_bytes = usize::try_from(length_bits / 8).map_err(|_| {
-                SidecarError::InvalidState(String::from(
-                    "crypto.subtle.generateKey length is too large",
-                ))
-            })?;
-            let mut raw = vec![0_u8; length_bytes];
-            rand_bytes(&mut raw).map_err(javascript_crypto_openssl_error)?;
-            let key = javascript_crypto_serialize_subtle_secret_key(
-                &raw,
-                javascript_crypto_normalize_subtle_secret_algorithm(algorithm.clone(), &raw)?,
-                parsed
-                    .get("extractable")
-                    .and_then(Value::as_bool)
-                    .unwrap_or(false),
-                parsed.get("usages").cloned().unwrap_or_else(|| json!([])),
-            )?;
-            Ok(Value::String(
-                serde_json::to_string(&json!({ "key": key })).map_err(|error| {
-                    SidecarError::InvalidState(format!(
-                        "serialize crypto.subtle generated key: {error}"
-                    ))
-                })?,
-            ))
-        }
-        "importKey" => {
-            let format = parsed
-                .get("format")
-                .and_then(Value::as_str)
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "crypto.subtle.importKey missing format",
-                    ))
-                })?;
-            if format != "raw" {
-                return Err(SidecarError::InvalidState(format!(
-                    "Unsupported import format: {format}"
-                )));
-            }
-            let key_data = parsed
-                .get("keyData")
-                .and_then(Value::as_str)
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "crypto.subtle.importKey missing keyData",
-                    ))
-                })?;
-            let raw = base64::engine::general_purpose::STANDARD
-                .decode(key_data)
-                .map_err(|error| {
-                    SidecarError::InvalidState(format!(
-                        "crypto.subtle.importKey keyData base64: {error}"
-                    ))
-                })?;
-            let algorithm = parsed.get("algorithm").ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "crypto.subtle.importKey missing algorithm",
-                ))
-            })?;
-            let key = javascript_crypto_serialize_subtle_secret_key(
-                &raw,
-                javascript_crypto_normalize_subtle_secret_algorithm(algorithm.clone(), &raw)?,
-                parsed
-                    .get("extractable")
-                    .and_then(Value::as_bool)
-                    .unwrap_or(false),
-                parsed.get("usages").cloned().unwrap_or_else(|| json!([])),
-            )?;
-            Ok(Value::String(
-                serde_json::to_string(&json!({ "key": key })).map_err(|error| {
-                    SidecarError::InvalidState(format!(
-                        "serialize crypto.subtle imported key: {error}"
-                    ))
-                })?,
-            ))
-        }
-        "exportKey" => {
-            let format = parsed
-                .get("format")
-                .and_then(Value::as_str)
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "crypto.subtle.exportKey missing format",
-                    ))
-                })?;
-            if format != "raw" {
-                return Err(SidecarError::InvalidState(format!(
-                    "Unsupported export format: {format}"
-                )));
-            }
-            let raw = javascript_crypto_subtle_key_raw(
-                parsed.get("key").ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("crypto.subtle.exportKey missing key"))
-                })?,
-                "crypto.subtle.exportKey key",
-            )?;
-            Ok(Value::String(
-                serde_json::to_string(&json!({
-                    "data": base64::engine::general_purpose::STANDARD.encode(raw),
-                }))
-                .map_err(|error| {
-                    SidecarError::InvalidState(format!("serialize crypto.subtle export: {error}"))
-                })?,
-            ))
-        }
-        "encrypt" | "decrypt" => service_javascript_crypto_subtle_aes_crypt_sync_rpc(op, &parsed),
-        _ => Err(SidecarError::InvalidState(format!(
-            "Unsupported subtle operation: {op}"
-        ))),
-    }
-}
-
-fn javascript_crypto_subtle_algorithm_name<'a>(
-    algorithm: &'a Value,
-    label: &str,
-) -> Result<&'a str, SidecarError> {
-    if let Some(name) = algorithm.as_str() {
-        return Ok(name);
-    }
-    algorithm
-        .get("name")
-        .and_then(Value::as_str)
-        .ok_or_else(|| SidecarError::InvalidState(format!("{label} algorithm missing name")))
-}
-
-fn javascript_crypto_normalize_subtle_secret_algorithm(
-    algorithm: Value,
-    raw: &[u8],
-) -> Result<Value, SidecarError> {
-    let mut object = match algorithm {
-        Value::String(name) => {
-            let mut object = Map::new();
-            object.insert(String::from("name"), Value::String(name));
-            object
-        }
-        Value::Object(object) => object,
-        _ => {
-            return Err(SidecarError::InvalidState(String::from(
-                "crypto.subtle secret algorithm must be a string or object",
-            )));
-        }
-    };
-    let name = object
-        .get("name")
-        .and_then(Value::as_str)
-        .ok_or_else(|| {
-            SidecarError::InvalidState(String::from("crypto.subtle secret algorithm missing name"))
-        })?
-        .to_string();
-    if matches!(name.as_str(), "AES-GCM" | "AES-CBC" | "AES-CTR" | "AES-KW")
-        && !object.contains_key("length")
-    {
-        object.insert(String::from("length"), json!(raw.len() * 8));
-    }
-    Ok(Value::Object(object))
-}
-
-fn javascript_crypto_serialize_subtle_secret_key(
-    raw: &[u8],
-    algorithm: Value,
-    extractable: bool,
-    usages: Value,
-) -> Result<Value, SidecarError> {
-    let raw_base64 = base64::engine::general_purpose::STANDARD.encode(raw);
-    let source_key_object_data = javascript_crypto_serialize_sandbox_key_object(
-        &JavascriptCryptoKeyMaterial::Secret(raw.to_vec()),
-    )?;
-    Ok(json!({
-        "type": "secret",
-        "algorithm": algorithm,
-        "extractable": extractable,
-        "usages": usages,
-        "_raw": raw_base64,
-        "_sourceKeyObjectData": source_key_object_data,
-    }))
-}
-
-fn javascript_crypto_subtle_key_raw(key: &Value, label: &str) -> Result<Vec<u8>, SidecarError> {
-    let raw = key.get("_raw").and_then(Value::as_str).ok_or_else(|| {
-        SidecarError::InvalidState(format!("{label} must be a raw secret CryptoKey"))
-    })?;
-    base64::engine::general_purpose::STANDARD
-        .decode(raw)
-        .map_err(|error| SidecarError::InvalidState(format!("{label} raw base64: {error}")))
-}
-
-fn service_javascript_crypto_subtle_aes_crypt_sync_rpc(
-    op: &str,
-    parsed: &Value,
-) -> Result<Value, SidecarError> {
-    let algorithm = parsed.get("algorithm").ok_or_else(|| {
-        SidecarError::InvalidState(format!("crypto.subtle.{op} missing algorithm"))
-    })?;
-    let name = javascript_crypto_subtle_algorithm_name(algorithm, &format!("crypto.subtle.{op}"))?;
-    if name != "AES-GCM" {
-        return Err(SidecarError::InvalidState(format!(
-            "Unsupported subtle AES operation algorithm: {name}"
-        )));
-    }
-    let key = javascript_crypto_subtle_key_raw(
-        parsed
-            .get("key")
-            .ok_or_else(|| SidecarError::InvalidState(format!("crypto.subtle.{op} missing key")))?,
-        &format!("crypto.subtle.{op} key"),
-    )?;
-    let iv = algorithm.get("iv").and_then(Value::as_str).ok_or_else(|| {
-        SidecarError::InvalidState(format!("crypto.subtle.{op} AES-GCM missing iv"))
-    })?;
-    let iv = base64::engine::general_purpose::STANDARD
-        .decode(iv)
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("crypto.subtle.{op} iv base64: {error}"))
-        })?;
-    let data = parsed
-        .get("data")
-        .and_then(Value::as_str)
-        .ok_or_else(|| SidecarError::InvalidState(format!("crypto.subtle.{op} missing data")))?;
-    let mut data = base64::engine::general_purpose::STANDARD
-        .decode(data)
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("crypto.subtle.{op} data base64: {error}"))
-        })?;
-    let tag_len = javascript_crypto_subtle_aes_gcm_tag_len(algorithm)?;
-    let mut options = Map::new();
-    options.insert(String::from("authTagLength"), json!(tag_len));
-    if let Some(additional_data) = algorithm.get("additionalData").and_then(Value::as_str) {
-        options.insert(
-            String::from("aad"),
-            Value::String(additional_data.to_string()),
-        );
-    }
-    let decrypt = op == "decrypt";
-    if decrypt {
-        if data.len() < tag_len {
-            return Err(SidecarError::InvalidState(String::from(
-                "crypto.subtle.decrypt AES-GCM data shorter than auth tag",
-            )));
-        }
-        let auth_tag = data.split_off(data.len() - tag_len);
-        options.insert(
-            String::from("authTag"),
-            Value::String(base64::engine::general_purpose::STANDARD.encode(auth_tag)),
-        );
-    }
-    let cipher_name = format!("aes-{}-gcm", key.len() * 8);
-    let mut session = javascript_crypto_build_cipher_session(
-        &cipher_name,
-        &key,
-        Some(&iv),
-        decrypt,
-        Some(&Value::Object(options)),
-    )?;
-    let mut output = javascript_crypto_cipher_update(&mut session, &data)?;
-    let outcome = session.finalize().map_err(javascript_crypto_cipher_error)?;
-    output.extend(outcome.data);
-    if !decrypt {
-        if let Some(auth_tag) = outcome.auth_tag {
-            output.extend(auth_tag);
-        }
-    }
-    Ok(Value::String(
-        serde_json::to_string(&json!({
-            "data": base64::engine::general_purpose::STANDARD.encode(output),
-        }))
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("serialize crypto.subtle {op}: {error}"))
-        })?,
-    ))
-}
-
-fn javascript_crypto_subtle_aes_gcm_tag_len(algorithm: &Value) -> Result<usize, SidecarError> {
-    let tag_bits = algorithm
-        .get("tagLength")
-        .and_then(Value::as_u64)
-        .unwrap_or(128);
-    if !tag_bits.is_multiple_of(8) {
-        return Err(SidecarError::InvalidState(String::from(
-            "crypto.subtle AES-GCM tagLength must be byte-aligned",
-        )));
-    }
-    usize::try_from(tag_bits / 8).map_err(|_| {
-        SidecarError::InvalidState(String::from("crypto.subtle AES-GCM tagLength too large"))
-    })
-}
-
-fn service_javascript_crypto_cipheriv_inner(
-    request: &JavascriptSyncRpcRequest,
-    decrypt: bool,
-) -> Result<Value, SidecarError> {
-    let label = if decrypt {
-        "crypto.decipheriv"
-    } else {
-        "crypto.cipheriv"
-    };
-    let algorithm = javascript_sync_rpc_arg_str(&request.args, 0, &format!("{label} algorithm"))?;
-    let key = javascript_sync_rpc_base64_arg(&request.args, 1, &format!("{label} key"))?;
-    let iv = javascript_sync_rpc_base64_arg_optional(&request.args, 2, &format!("{label} iv"))?;
-    let data = javascript_sync_rpc_base64_arg(&request.args, 3, &format!("{label} data"))?;
-    let options =
-        javascript_sync_rpc_json_arg_optional(&request.args, 4, &format!("{label} options"))?;
-    let mut session = javascript_crypto_build_cipher_session(
-        algorithm,
-        &key,
-        iv.as_deref(),
-        decrypt,
-        options.as_ref(),
-    )?;
-    let payload = javascript_crypto_cipher_update(&mut session, &data)?;
-    let outcome = session.finalize().map_err(javascript_crypto_cipher_error)?;
-    if decrypt {
-        let mut output = payload;
-        output.extend(outcome.data);
-        return Ok(Value::String(
-            base64::engine::general_purpose::STANDARD.encode(output),
-        ));
-    }
-
-    let mut response = Map::new();
-    let mut encrypted = payload;
-    encrypted.extend(outcome.data);
-    response.insert(
-        String::from("data"),
-        Value::String(base64::engine::general_purpose::STANDARD.encode(encrypted)),
-    );
-    if let Some(auth_tag) = outcome.auth_tag {
-        response.insert(
-            String::from("authTag"),
-            Value::String(base64::engine::general_purpose::STANDARD.encode(auth_tag)),
-        );
-    }
-    Ok(Value::String(serde_json::to_string(&response).map_err(
-        |error| SidecarError::InvalidState(format!("serialize {label} response: {error}")),
-    )?))
-}
-
-fn javascript_sync_rpc_base64_arg_optional(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<Option<Vec<u8>>, SidecarError> {
-    if args.get(index).is_none() || args[index].is_null() {
-        return Ok(None);
-    }
-    javascript_sync_rpc_base64_arg(args, index, label).map(Some)
-}
-
-fn javascript_sync_rpc_json_arg_optional(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<Option<Value>, SidecarError> {
-    if args.get(index).is_none() || args[index].is_null() {
-        return Ok(None);
-    }
-    let raw = javascript_sync_rpc_arg_str(args, index, label)?;
-    serde_json::from_str(raw)
-        .map(Some)
-        .map_err(|error| SidecarError::InvalidState(format!("{label} must be valid JSON: {error}")))
-}
-
-fn javascript_crypto_parse_direct_key_input(
-    raw: &str,
-    expected: Option<&str>,
-    label: &str,
-) -> Result<JavascriptDirectKeyInput, SidecarError> {
-    let parsed: Value = serde_json::from_str(raw).map_err(|error| {
-        SidecarError::InvalidState(format!("{label} must be valid JSON: {error}"))
-    })?;
-    let padding = match parsed.as_object().and_then(|value| value.get("padding")) {
-        Some(value) => javascript_crypto_padding_from_value(value)?,
-        None => None,
-    };
-    Ok(JavascriptDirectKeyInput {
-        key: javascript_crypto_parse_key_material_value(&parsed, expected, label)?,
-        padding,
-    })
-}
-
-fn javascript_crypto_parse_key_material_value(
-    value: &Value,
-    expected: Option<&str>,
-    label: &str,
-) -> Result<JavascriptCryptoKeyMaterial, SidecarError> {
-    if let Some(object) = value.as_object() {
-        if object.get("__type").and_then(Value::as_str) == Some("keyObject") {
-            let serialized = object.get("value").ok_or_else(|| {
-                SidecarError::InvalidState(format!("{label} keyObject is missing a value"))
-            })?;
-            return javascript_crypto_parse_serialized_key_object(serialized, expected, label);
-        }
-        if object.contains_key("type") && (object.contains_key("pem") || object.contains_key("raw"))
-        {
-            return javascript_crypto_parse_serialized_key_object(value, expected, label);
-        }
-        if let Some(source) = object.get("key") {
-            return javascript_crypto_parse_key_source(
-                source,
-                object.get("format").and_then(Value::as_str),
-                object.get("type").and_then(Value::as_str),
-                expected,
-                label,
-            );
-        }
-    }
-    javascript_crypto_parse_key_source(value, None, None, expected, label)
-}
-
-fn javascript_crypto_parse_key_source(
-    source: &Value,
-    format: Option<&str>,
-    kind: Option<&str>,
-    expected: Option<&str>,
-    label: &str,
-) -> Result<JavascriptCryptoKeyMaterial, SidecarError> {
-    match source {
-        Value::String(pem) => javascript_crypto_parse_key_from_pem(pem.as_bytes(), expected, label),
-        Value::Object(object) if object.get("__type").and_then(Value::as_str) == Some("buffer") => {
-            let data = javascript_crypto_decode_bridge_buffer(source, label)?;
-            javascript_crypto_parse_key_from_bytes(&data, format, kind, expected, label)
-        }
-        Value::Object(_) => {
-            if format == Some("jwk") {
-                return Err(SidecarError::InvalidState(format!(
-                    "{label} jwk inputs are not supported yet"
-                )));
-            }
-            Err(SidecarError::InvalidState(format!(
-                "{label} has an unsupported key shape"
-            )))
-        }
-        _ => Err(SidecarError::InvalidState(format!(
-            "{label} has an unsupported key value"
-        ))),
-    }
-}
-
-fn javascript_crypto_parse_key_from_pem(
-    pem: &[u8],
-    expected: Option<&str>,
-    label: &str,
-) -> Result<JavascriptCryptoKeyMaterial, SidecarError> {
-    match expected {
-        Some("private") => PKey::private_key_from_pem(pem)
-            .map(JavascriptCryptoKeyMaterial::Private)
-            .map_err(|error| {
-                SidecarError::InvalidState(format!("{label} private key is invalid: {error}"))
-            }),
-        Some("public") => PKey::public_key_from_pem(pem)
-            .map(JavascriptCryptoKeyMaterial::Public)
-            .map_err(|error| {
-                SidecarError::InvalidState(format!("{label} public key is invalid: {error}"))
-            }),
-        _ => PKey::private_key_from_pem(pem)
-            .map(JavascriptCryptoKeyMaterial::Private)
-            .or_else(|_| PKey::public_key_from_pem(pem).map(JavascriptCryptoKeyMaterial::Public))
-            .map_err(|error| {
-                SidecarError::InvalidState(format!("{label} PEM key is invalid: {error}"))
-            }),
-    }
-}
-
-fn javascript_crypto_parse_key_from_bytes(
-    der: &[u8],
-    format: Option<&str>,
-    kind: Option<&str>,
-    expected: Option<&str>,
-    label: &str,
-) -> Result<JavascriptCryptoKeyMaterial, SidecarError> {
-    match (format.unwrap_or("der"), kind.or(expected)) {
-        ("der", Some("pkcs8")) | ("der", Some("private")) => PKey::private_key_from_der(der)
-            .map(JavascriptCryptoKeyMaterial::Private)
-            .map_err(|error| {
-                SidecarError::InvalidState(format!("{label} private key DER is invalid: {error}"))
-            }),
-        ("der", Some("spki")) | ("der", Some("public")) => PKey::public_key_from_der(der)
-            .map(JavascriptCryptoKeyMaterial::Public)
-            .map_err(|error| {
-                SidecarError::InvalidState(format!("{label} public key DER is invalid: {error}"))
-            }),
-        _ => Err(SidecarError::InvalidState(format!(
-            "{label} unsupported key bytes format"
-        ))),
-    }
-}
-
-fn javascript_crypto_parse_serialized_key_object(
-    value: &Value,
-    expected: Option<&str>,
-    label: &str,
-) -> Result<JavascriptCryptoKeyMaterial, SidecarError> {
-    let serialized: JavascriptSerializedSandboxKeyObject = serde_json::from_value(value.clone())
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("{label} keyObject is invalid: {error}"))
-        })?;
-    match serialized.kind.as_str() {
-        "secret" => {
-            if expected == Some("public") || expected == Some("private") {
-                return Err(SidecarError::InvalidState(format!(
-                    "{label} expected an asymmetric key"
-                )));
-            }
-            Ok(JavascriptCryptoKeyMaterial::Secret(
-                base64::engine::general_purpose::STANDARD
-                    .decode(serialized.raw.unwrap_or_default())
-                    .map_err(|error| {
-                        SidecarError::InvalidState(format!(
-                            "{label} secret key contains invalid base64: {error}"
-                        ))
-                    })?,
-            ))
-        }
-        "private" => {
-            let pem = serialized.pem.ok_or_else(|| {
-                SidecarError::InvalidState(format!("{label} private keyObject is missing pem"))
-            })?;
-            javascript_crypto_parse_key_from_pem(pem.as_bytes(), Some("private"), label)
-        }
-        "public" => {
-            let pem = serialized.pem.ok_or_else(|| {
-                SidecarError::InvalidState(format!("{label} public keyObject is missing pem"))
-            })?;
-            javascript_crypto_parse_key_from_pem(pem.as_bytes(), Some("public"), label)
-        }
-        other => Err(SidecarError::InvalidState(format!(
-            "{label} has unsupported keyObject type {other}"
-        ))),
-    }
-}
-
-fn javascript_crypto_expect_private_key(
-    key: JavascriptCryptoKeyMaterial,
-    label: &str,
-) -> Result<PKey<Private>, SidecarError> {
-    match key {
-        JavascriptCryptoKeyMaterial::Private(key) => Ok(key),
-        _ => Err(SidecarError::InvalidState(format!(
-            "{label} requires a private key"
-        ))),
-    }
-}
-
-fn javascript_crypto_expect_public_key(
-    key: JavascriptCryptoKeyMaterial,
-    label: &str,
-) -> Result<PKey<Public>, SidecarError> {
-    match key {
-        JavascriptCryptoKeyMaterial::Public(key) => Ok(key),
-        JavascriptCryptoKeyMaterial::Private(key) => {
-            let pem = key
-                .public_key_to_pem()
-                .map_err(javascript_crypto_openssl_error)?;
-            PKey::public_key_from_pem(&pem).map_err(javascript_crypto_openssl_error)
-        }
-        _ => Err(SidecarError::InvalidState(format!(
-            "{label} requires a public key"
-        ))),
-    }
-}
-
-fn javascript_crypto_new_signer<'a>(
-    algorithm: Option<&'a str>,
-    key: &'a PKey<Private>,
-) -> Result<Signer<'a>, SidecarError> {
-    if matches!(key.id(), PKeyId::ED25519 | PKeyId::ED448) || algorithm.is_none() {
-        return Signer::new_without_digest(key).map_err(javascript_crypto_openssl_error);
-    }
-    Signer::new(
-        javascript_crypto_message_digest_from_name(algorithm.ok_or_else(|| {
-            SidecarError::InvalidState(String::from("crypto.sign requires a digest algorithm"))
-        })?)?,
-        key,
-    )
-    .map_err(javascript_crypto_openssl_error)
-}
-
-fn javascript_crypto_new_verifier<'a>(
-    algorithm: Option<&'a str>,
-    key: &'a PKey<Public>,
-) -> Result<Verifier<'a>, SidecarError> {
-    if matches!(key.id(), PKeyId::ED25519 | PKeyId::ED448) || algorithm.is_none() {
-        return Verifier::new_without_digest(key).map_err(javascript_crypto_openssl_error);
-    }
-    Verifier::new(
-        javascript_crypto_message_digest_from_name(algorithm.ok_or_else(|| {
-            SidecarError::InvalidState(String::from("crypto.verify requires a digest algorithm"))
-        })?)?,
-        key,
-    )
-    .map_err(javascript_crypto_openssl_error)
-}
-
-fn javascript_crypto_message_digest_from_name(name: &str) -> Result<MessageDigest, SidecarError> {
-    match name.trim().to_ascii_lowercase().replace('-', "").as_str() {
-        "md5" => Ok(MessageDigest::md5()),
-        "sha1" => Ok(MessageDigest::sha1()),
-        "sha256" => Ok(MessageDigest::sha256()),
-        "sha384" => Ok(MessageDigest::sha384()),
-        "sha512" => Ok(MessageDigest::sha512()),
-        other => Err(SidecarError::InvalidState(format!(
-            "unsupported crypto digest algorithm {other}"
-        ))),
-    }
-}
-
-fn javascript_crypto_padding_from_value(value: &Value) -> Result<Option<Padding>, SidecarError> {
-    let Some(number) = value.as_i64() else {
-        return Ok(None);
-    };
-    let padding = match number {
-        1 => Padding::PKCS1,
-        3 => Padding::NONE,
-        4 => Padding::PKCS1_OAEP,
-        6 => Padding::PKCS1_PSS,
-        other => {
-            return Err(SidecarError::InvalidState(format!(
-                "unsupported RSA padding constant {other}"
-            )));
-        }
-    };
-    Ok(Some(padding))
-}
-
-fn javascript_crypto_decode_bridge_buffer(
-    value: &Value,
-    label: &str,
-) -> Result<Vec<u8>, SidecarError> {
-    decode_bridge_buffer_value(value)
-        .map_err(|error| SidecarError::InvalidState(format!("{label} {error}")))
-}
-
-fn javascript_crypto_serialize_sandbox_key_object(
-    key: &JavascriptCryptoKeyMaterial,
-) -> Result<Value, SidecarError> {
-    let serialized = match key {
-        JavascriptCryptoKeyMaterial::Private(key) => JavascriptSerializedSandboxKeyObject {
-            kind: String::from("private"),
-            pem: Some(
-                String::from_utf8(
-                    key.private_key_to_pem_pkcs8()
-                        .map_err(javascript_crypto_openssl_error)?,
-                )
-                .map_err(|error| {
-                    SidecarError::InvalidState(format!("private key PEM is not utf8: {error}"))
-                })?,
-            ),
-            raw: None,
-            asymmetric_key_type: javascript_crypto_pkey_type_name(key.id()),
-            asymmetric_key_details: None,
-            jwk: None,
-        },
-        JavascriptCryptoKeyMaterial::Public(key) => JavascriptSerializedSandboxKeyObject {
-            kind: String::from("public"),
-            pem: Some(
-                String::from_utf8(
-                    key.public_key_to_pem()
-                        .map_err(javascript_crypto_openssl_error)?,
-                )
-                .map_err(|error| {
-                    SidecarError::InvalidState(format!("public key PEM is not utf8: {error}"))
-                })?,
-            ),
-            raw: None,
-            asymmetric_key_type: javascript_crypto_pkey_type_name(key.id()),
-            asymmetric_key_details: None,
-            jwk: None,
-        },
-        JavascriptCryptoKeyMaterial::Secret(raw) => JavascriptSerializedSandboxKeyObject {
-            kind: String::from("secret"),
-            pem: None,
-            raw: Some(base64::engine::general_purpose::STANDARD.encode(raw)),
-            asymmetric_key_type: None,
-            asymmetric_key_details: None,
-            jwk: None,
-        },
-    };
-    serde_json::to_value(serialized)
-        .map_err(|error| SidecarError::InvalidState(format!("serialize key object: {error}")))
-}
-
-fn javascript_crypto_pkey_type_name(id: PKeyId) -> Option<String> {
-    match id {
-        PKeyId::RSA => Some(String::from("rsa")),
-        PKeyId::EC => Some(String::from("ec")),
-        PKeyId::ED25519 => Some(String::from("ed25519")),
-        PKeyId::ED448 => Some(String::from("ed448")),
-        PKeyId::X25519 => Some(String::from("x25519")),
-        PKeyId::X448 => Some(String::from("x448")),
-        PKeyId::DH => Some(String::from("dh")),
-        _ => None,
-    }
-}
-
-fn javascript_crypto_rsa_output_size(
-    key: &JavascriptCryptoKeyMaterial,
-) -> Result<usize, SidecarError> {
-    match key {
-        JavascriptCryptoKeyMaterial::Private(key) => key
-            .rsa()
-            .map(|rsa| rsa.size() as usize)
-            .map_err(javascript_crypto_openssl_error),
-        JavascriptCryptoKeyMaterial::Public(key) => key
-            .rsa()
-            .map(|rsa| rsa.size() as usize)
-            .map_err(javascript_crypto_openssl_error),
-        JavascriptCryptoKeyMaterial::Secret(_) => Err(SidecarError::InvalidState(String::from(
-            "RSA operations require an asymmetric key",
-        ))),
-    }
-}
-
-fn javascript_crypto_parse_serialized_options_arg(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<Option<Value>, SidecarError> {
-    let Some(raw) = args.get(index).and_then(Value::as_str) else {
-        return Ok(None);
-    };
-    let parsed: Value = serde_json::from_str(raw).map_err(|error| {
-        SidecarError::InvalidState(format!("{label} must be valid JSON: {error}"))
-    })?;
-    if parsed.get("hasOptions").and_then(Value::as_bool) == Some(true) {
-        Ok(parsed.get("options").cloned())
-    } else {
-        Ok(None)
-    }
-}
-
-fn javascript_crypto_u32_from_bridge_value(
-    value: &Value,
-    label: &str,
-) -> Result<u32, SidecarError> {
-    if let Some(number) = value.as_u64() {
-        return u32::try_from(number)
-            .map_err(|_| SidecarError::InvalidState(format!("{label} must fit within u32")));
-    }
-    let bytes = javascript_crypto_decode_bridge_buffer(value, label)?;
-    if bytes.len() > 4 {
-        return Err(SidecarError::InvalidState(format!(
-            "{label} buffer is too large for u32"
-        )));
-    }
-    Ok(bytes
-        .into_iter()
-        .fold(0_u32, |acc, byte| (acc << 8) | u32::from(byte)))
-}
-
-fn javascript_crypto_bignum_from_bridge_value(
-    value: &Value,
-    label: &str,
-) -> Result<BigNum, SidecarError> {
-    if let Some(object) = value.as_object() {
-        if object.get("__type").and_then(Value::as_str) == Some("bigint") {
-            let decimal = object.get("value").and_then(Value::as_str).ok_or_else(|| {
-                SidecarError::InvalidState(format!("{label} bigint is missing a value"))
-            })?;
-            return BigNum::from_dec_str(decimal).map_err(javascript_crypto_openssl_error);
-        }
-    }
-    let bytes = javascript_crypto_decode_bridge_buffer(value, label)?;
-    BigNum::from_slice(&bytes).map_err(javascript_crypto_openssl_error)
-}
-
-fn javascript_crypto_curve_nid(name: &str) -> Result<Nid, SidecarError> {
-    match name {
-        "prime256v1" | "P-256" => Ok(Nid::X9_62_PRIME256V1),
-        "secp384r1" | "P-384" => Ok(Nid::SECP384R1),
-        "secp521r1" | "P-521" => Ok(Nid::SECP521R1),
-        "secp256k1" => Ok(Nid::SECP256K1),
-        other => Err(SidecarError::InvalidState(format!(
-            "unsupported EC curve {other}"
-        ))),
-    }
-}
-
-fn javascript_crypto_named_dh_group(name: &str) -> Result<Dh<Params>, SidecarError> {
-    match name {
-        "modp2" => Dh::get_1024_160().map_err(javascript_crypto_openssl_error),
-        "modp14" | "modp15" | "modp16" | "modp17" | "modp18" => {
-            Dh::get_2048_256().map_err(javascript_crypto_openssl_error)
-        }
-        other => Err(SidecarError::InvalidState(format!(
-            "unsupported Diffie-Hellman group {other}"
-        ))),
-    }
-}
-
-fn javascript_crypto_clone_dh_params(params: &Dh<Params>) -> Result<Dh<Params>, SidecarError> {
-    Dh::from_pqg(
-        params
-            .prime_p()
-            .to_owned()
-            .map_err(javascript_crypto_openssl_error)?,
-        params
-            .prime_q()
-            .map(|value| value.to_owned().map_err(javascript_crypto_openssl_error))
-            .transpose()?,
-        params
-            .generator()
-            .to_owned()
-            .map_err(javascript_crypto_openssl_error)?,
-    )
-    .map_err(javascript_crypto_openssl_error)
-}
-
-fn javascript_crypto_build_dh_params(args: &[Value]) -> Result<Dh<Params>, SidecarError> {
-    let Some(first) = args.first() else {
-        return Err(SidecarError::InvalidState(String::from(
-            "Diffie-Hellman session args are required",
-        )));
-    };
-    if let Some(bits) = first.as_u64() {
-        let generator = args
-            .get(1)
-            .map(|value| javascript_crypto_u32_from_bridge_value(value, "Diffie-Hellman generator"))
-            .transpose()?
-            .unwrap_or(2);
-        return Dh::generate_params(bits as u32, generator)
-            .map_err(javascript_crypto_openssl_error);
-    }
-    let prime = javascript_crypto_bignum_from_bridge_value(first, "Diffie-Hellman prime")?;
-    let generator = args
-        .get(1)
-        .map(|value| javascript_crypto_bignum_from_bridge_value(value, "Diffie-Hellman generator"))
-        .transpose()?
-        .unwrap_or(BigNum::from_u32(2).map_err(javascript_crypto_openssl_error)?);
-    Dh::from_pqg(prime, None, generator).map_err(javascript_crypto_openssl_error)
-}
-
-fn javascript_crypto_call_dh_session(
-    session: &mut ActiveDhSession,
-    method: &str,
-    args: &[Value],
-) -> Result<(Value, bool), SidecarError> {
-    match method {
-        "verifyError" => Ok((Value::Null, false)),
-        "generateKeys" => {
-            if session.key_pair.is_none() {
-                session.key_pair = Some(
-                    javascript_crypto_clone_dh_params(&session.params)?
-                        .generate_key()
-                        .map_err(javascript_crypto_openssl_error)?,
-                );
-            }
-            let public = session
-                .key_pair
-                .as_ref()
-                .expect("dh key pair")
-                .public_key()
-                .to_vec();
-            Ok((javascript_crypto_bridge_buffer_value(&public), true))
-        }
-        "computeSecret" => {
-            if session.key_pair.is_none() {
-                session.key_pair = Some(
-                    javascript_crypto_clone_dh_params(&session.params)?
-                        .generate_key()
-                        .map_err(javascript_crypto_openssl_error)?,
-                );
-            }
-            let peer = javascript_crypto_bignum_from_bridge_value(
-                args.first().ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "computeSecret requires peer public key",
-                    ))
-                })?,
-                "Diffie-Hellman peer public key",
-            )?;
-            let private_key = session
-                .key_pair
-                .as_ref()
-                .expect("dh key pair")
-                .private_key();
-            let mut secret = BigNum::new().map_err(javascript_crypto_openssl_error)?;
-            let mut ctx = BigNumContext::new().map_err(javascript_crypto_openssl_error)?;
-            secret
-                .mod_exp(&peer, private_key, session.params.prime_p(), &mut ctx)
-                .map_err(javascript_crypto_openssl_error)?;
-            Ok((
-                javascript_crypto_bridge_buffer_value(
-                    &secret
-                        .to_vec_padded(session.params.prime_p().num_bytes())
-                        .map_err(javascript_crypto_openssl_error)?,
-                ),
-                true,
-            ))
-        }
-        "getPrime" => Ok((
-            javascript_crypto_bridge_buffer_value(&session.params.prime_p().to_vec()),
-            true,
-        )),
-        "getGenerator" => Ok((
-            javascript_crypto_bridge_buffer_value(&session.params.generator().to_vec()),
-            true,
-        )),
-        "getPublicKey" => {
-            if session.key_pair.is_none() {
-                session.key_pair = Some(
-                    javascript_crypto_clone_dh_params(&session.params)?
-                        .generate_key()
-                        .map_err(javascript_crypto_openssl_error)?,
-                );
-            }
-            Ok((
-                javascript_crypto_bridge_buffer_value(
-                    &session
-                        .key_pair
-                        .as_ref()
-                        .expect("dh key pair")
-                        .public_key()
-                        .to_vec(),
-                ),
-                true,
-            ))
-        }
-        "getPrivateKey" => {
-            if session.key_pair.is_none() {
-                session.key_pair = Some(
-                    javascript_crypto_clone_dh_params(&session.params)?
-                        .generate_key()
-                        .map_err(javascript_crypto_openssl_error)?,
-                );
-            }
-            Ok((
-                javascript_crypto_bridge_buffer_value(
-                    &session
-                        .key_pair
-                        .as_ref()
-                        .expect("dh key pair")
-                        .private_key()
-                        .to_vec(),
-                ),
-                true,
-            ))
-        }
-        "setPrivateKey" => {
-            let private_key = javascript_crypto_bignum_from_bridge_value(
-                args.first().ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("setPrivateKey requires private key"))
-                })?,
-                "Diffie-Hellman private key",
-            )?;
-            let mut public_key = BigNum::new().map_err(javascript_crypto_openssl_error)?;
-            let mut ctx = BigNumContext::new().map_err(javascript_crypto_openssl_error)?;
-            public_key
-                .mod_exp(
-                    session.params.generator(),
-                    &private_key,
-                    session.params.prime_p(),
-                    &mut ctx,
-                )
-                .map_err(javascript_crypto_openssl_error)?;
-            session.key_pair = Some(
-                javascript_crypto_clone_dh_params(&session.params)?
-                    .set_key(public_key, private_key)
-                    .map_err(javascript_crypto_openssl_error)?,
-            );
-            Ok((Value::Null, false))
-        }
-        "setPublicKey" => {
-            let public_key = javascript_crypto_bignum_from_bridge_value(
-                args.first().ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("setPublicKey requires public key"))
-                })?,
-                "Diffie-Hellman public key",
-            )?;
-            let private_key = session
-                .key_pair
-                .as_ref()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "setPublicKey requires private key to be set first",
-                    ))
-                })?
-                .private_key()
-                .to_owned()
-                .map_err(javascript_crypto_openssl_error)?;
-            session.key_pair = Some(
-                javascript_crypto_clone_dh_params(&session.params)?
-                    .set_key(public_key, private_key)
-                    .map_err(javascript_crypto_openssl_error)?,
-            );
-            Ok((Value::Null, false))
-        }
-        other => Err(SidecarError::InvalidState(format!(
-            "Unsupported Diffie-Hellman method: {other}"
-        ))),
-    }
-}
-
-fn javascript_crypto_call_ecdh_session(
-    session: &mut ActiveEcdhSession,
-    method: &str,
-    args: &[Value],
-) -> Result<(Value, bool), SidecarError> {
-    let nid = javascript_crypto_curve_nid(&session.curve)?;
-    let group = EcGroup::from_curve_name(nid).map_err(javascript_crypto_openssl_error)?;
-    match method {
-        "verifyError" => Ok((Value::Null, false)),
-        "generateKeys" => {
-            if session.key_pair.is_none() {
-                session.key_pair =
-                    Some(EcKey::generate(&group).map_err(javascript_crypto_openssl_error)?);
-            }
-            let mut ctx = BigNumContext::new().map_err(javascript_crypto_openssl_error)?;
-            let bytes = session
-                .key_pair
-                .as_ref()
-                .expect("ecdh key pair")
-                .public_key()
-                .to_bytes(&group, PointConversionForm::UNCOMPRESSED, &mut ctx)
-                .map_err(javascript_crypto_openssl_error)?;
-            Ok((javascript_crypto_bridge_buffer_value(&bytes), true))
-        }
-        "computeSecret" => {
-            if session.key_pair.is_none() {
-                session.key_pair =
-                    Some(EcKey::generate(&group).map_err(javascript_crypto_openssl_error)?);
-            }
-            let peer_bytes = javascript_crypto_decode_bridge_buffer(
-                args.first().ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "computeSecret requires peer public key",
-                    ))
-                })?,
-                "ECDH peer public key",
-            )?;
-            let mut ctx = BigNumContext::new().map_err(javascript_crypto_openssl_error)?;
-            let peer_point = EcPoint::from_bytes(&group, &peer_bytes, &mut ctx)
-                .map_err(javascript_crypto_openssl_error)?;
-            let peer_key = EcKey::from_public_key(&group, &peer_point)
-                .map_err(javascript_crypto_openssl_error)?;
-            let private =
-                PKey::from_ec_key(session.key_pair.as_ref().expect("ecdh key pair").to_owned())
-                    .map_err(javascript_crypto_openssl_error)?;
-            let peer = PKey::from_ec_key(peer_key).map_err(javascript_crypto_openssl_error)?;
-            let mut deriver = Deriver::new(&private).map_err(javascript_crypto_openssl_error)?;
-            deriver
-                .set_peer(&peer)
-                .map_err(javascript_crypto_openssl_error)?;
-            let secret = deriver
-                .derive_to_vec()
-                .map_err(javascript_crypto_openssl_error)?;
-            Ok((javascript_crypto_bridge_buffer_value(&secret), true))
-        }
-        "getPublicKey" => {
-            if session.key_pair.is_none() {
-                session.key_pair =
-                    Some(EcKey::generate(&group).map_err(javascript_crypto_openssl_error)?);
-            }
-            let mut ctx = BigNumContext::new().map_err(javascript_crypto_openssl_error)?;
-            let bytes = session
-                .key_pair
-                .as_ref()
-                .expect("ecdh key pair")
-                .public_key()
-                .to_bytes(&group, PointConversionForm::UNCOMPRESSED, &mut ctx)
-                .map_err(javascript_crypto_openssl_error)?;
-            Ok((javascript_crypto_bridge_buffer_value(&bytes), true))
-        }
-        "getPrivateKey" => {
-            if session.key_pair.is_none() {
-                session.key_pair =
-                    Some(EcKey::generate(&group).map_err(javascript_crypto_openssl_error)?);
-            }
-            Ok((
-                javascript_crypto_bridge_buffer_value(
-                    &session
-                        .key_pair
-                        .as_ref()
-                        .expect("ecdh key pair")
-                        .private_key()
-                        .to_vec(),
-                ),
-                true,
-            ))
-        }
-        "setPrivateKey" => {
-            let private_key = javascript_crypto_bignum_from_bridge_value(
-                args.first().ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("setPrivateKey requires private key"))
-                })?,
-                "ECDH private key",
-            )?;
-            let ctx = BigNumContext::new().map_err(javascript_crypto_openssl_error)?;
-            let mut public_key = EcPoint::new(&group).map_err(javascript_crypto_openssl_error)?;
-            public_key
-                .mul_generator(&group, &private_key, &ctx)
-                .map_err(javascript_crypto_openssl_error)?;
-            session.key_pair = Some(
-                EcKey::from_private_components(&group, &private_key, &public_key)
-                    .map_err(javascript_crypto_openssl_error)?,
-            );
-            Ok((Value::Null, false))
-        }
-        "setPublicKey" => {
-            let public_key_bytes = javascript_crypto_decode_bridge_buffer(
-                args.first().ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("setPublicKey requires public key"))
-                })?,
-                "ECDH public key",
-            )?;
-            let mut ctx = BigNumContext::new().map_err(javascript_crypto_openssl_error)?;
-            let public_key = EcPoint::from_bytes(&group, &public_key_bytes, &mut ctx)
-                .map_err(javascript_crypto_openssl_error)?;
-            let private_key = session
-                .key_pair
-                .as_ref()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "setPublicKey requires private key to be set first",
-                    ))
-                })?
-                .private_key()
-                .to_owned()
-                .map_err(javascript_crypto_openssl_error)?;
-            session.key_pair = Some(
-                EcKey::from_private_components(&group, &private_key, &public_key)
-                    .map_err(javascript_crypto_openssl_error)?,
-            );
-            Ok((Value::Null, false))
-        }
-        other => Err(SidecarError::InvalidState(format!(
-            "Unsupported Diffie-Hellman method: {other}"
-        ))),
-    }
-}
-
-fn javascript_crypto_serialize_encoded_key_value_public(
-    key: &PKey<Public>,
-    encoding: Option<&Value>,
-) -> Result<Value, SidecarError> {
-    if let Some(encoding) = encoding {
-        let format = encoding
-            .get("format")
-            .and_then(Value::as_str)
-            .unwrap_or("pem");
-        return Ok(match format {
-            "der" => json!({
-                "kind": "buffer",
-                "value": base64::engine::general_purpose::STANDARD
-                    .encode(key.public_key_to_der().map_err(javascript_crypto_openssl_error)?),
-            }),
-            _ => json!({
-                "kind": "string",
-                "value": String::from_utf8(
-                    key.public_key_to_pem().map_err(javascript_crypto_openssl_error)?,
-                )
-                .map_err(|error| SidecarError::InvalidState(format!("public key PEM utf8: {error}")))?,
-            }),
-        });
-    }
-    javascript_crypto_serialize_sandbox_key_object(&JavascriptCryptoKeyMaterial::Public(
-        key.to_owned(),
-    ))
-}
-
-fn javascript_crypto_serialize_encoded_key_value_private(
-    key: &PKey<Private>,
-    encoding: Option<&Value>,
-) -> Result<Value, SidecarError> {
-    if let Some(encoding) = encoding {
-        let format = encoding
-            .get("format")
-            .and_then(Value::as_str)
-            .unwrap_or("pem");
-        return Ok(match format {
-            "der" => json!({
-                "kind": "buffer",
-                "value": base64::engine::general_purpose::STANDARD
-                    .encode(key.private_key_to_der().map_err(javascript_crypto_openssl_error)?),
-            }),
-            _ => json!({
-                "kind": "string",
-                "value": String::from_utf8(
-                    key.private_key_to_pem_pkcs8().map_err(javascript_crypto_openssl_error)?,
-                )
-                .map_err(|error| SidecarError::InvalidState(format!("private key PEM utf8: {error}")))?,
-            }),
-        });
-    }
-    javascript_crypto_serialize_sandbox_key_object(&JavascriptCryptoKeyMaterial::Private(
-        key.to_owned(),
-    ))
-}
-
-fn javascript_crypto_bridge_buffer_value(bytes: &[u8]) -> Value {
-    bridge_buffer_value(bytes)
-}
-
-fn javascript_crypto_cipher_error(error: AesCipherError) -> SidecarError {
-    SidecarError::InvalidState(error.0)
-}
-
-fn javascript_crypto_decode_cipher_option_b64(
-    options: Option<&Value>,
-    field: &str,
-) -> Result<Option<Vec<u8>>, SidecarError> {
-    let Some(encoded) = options
-        .and_then(|value| value.get(field))
-        .and_then(Value::as_str)
-    else {
-        return Ok(None);
-    };
-    base64::engine::general_purpose::STANDARD
-        .decode(encoded)
-        .map(Some)
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("cipher {field} contains invalid base64: {error}"))
-        })
-}
-
-fn javascript_crypto_build_cipher_session(
-    algorithm: &str,
-    key: &[u8],
-    iv: Option<&[u8]>,
-    decrypt: bool,
-    options: Option<&Value>,
-) -> Result<StreamCipherSession, SidecarError> {
-    let pad = options
-        .and_then(|value| value.get("autoPadding"))
-        .and_then(Value::as_bool)
-        .unwrap_or(true);
-    let aad = if javascript_crypto_is_aead(algorithm) {
-        javascript_crypto_decode_cipher_option_b64(options, "aad")?
-    } else {
-        None
-    };
-    let auth_tag = if decrypt && javascript_crypto_is_aead(algorithm) {
-        javascript_crypto_decode_cipher_option_b64(options, "authTag")?
-    } else {
-        None
-    };
-    let tag_len = javascript_crypto_requested_aead_tag_len(algorithm, options)?;
-    StreamCipherSession::new(
-        algorithm,
-        key,
-        iv,
-        decrypt,
-        pad,
-        aad.as_deref(),
-        auth_tag.as_deref(),
-        tag_len,
-    )
-    .map_err(javascript_crypto_cipher_error)
-}
-
-fn javascript_crypto_requested_aead_tag_len(
-    algorithm: &str,
-    options: Option<&Value>,
-) -> Result<usize, SidecarError> {
-    if !javascript_crypto_is_aead(algorithm) {
-        return Ok(0);
-    }
-    let requested = options
-        .and_then(|value| value.get("authTagLength"))
-        .and_then(Value::as_u64)
-        .unwrap_or(javascript_crypto_aead_tag_len(algorithm) as u64);
-    usize::try_from(requested).map_err(|_| {
-        SidecarError::InvalidState(String::from("cipher authTagLength must fit within usize"))
-    })
-}
-
-fn javascript_crypto_cipher_update(
-    session: &mut StreamCipherSession,
-    data: &[u8],
-) -> Result<Vec<u8>, SidecarError> {
-    session.update(data).map_err(javascript_crypto_cipher_error)
-}
-
-fn javascript_crypto_is_aead(algorithm: &str) -> bool {
-    crate::crypto_cipher::is_aead(algorithm)
-}
-
-fn javascript_crypto_aead_tag_len(_algorithm: &str) -> usize {
-    crate::crypto_cipher::default_aead_tag_len()
-}
-
-fn javascript_crypto_openssl_error(error: openssl::error::ErrorStack) -> SidecarError {
-    SidecarError::Execution(format!("crypto operation failed: {error}"))
-}
-
-fn service_javascript_kernel_stdin_sync_rpc(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let (max_bytes, timeout_ms) = parse_kernel_stdin_read_args(request)?;
-    kernel_stdin_read_response(
-        kernel,
-        process.kernel_pid,
-        max_bytes,
-        Duration::from_millis(timeout_ms),
-    )
-}
-
-/// Parse `__kernel_stdin_read` args: (max bytes, requested timeout ms).
-pub(crate) fn parse_kernel_stdin_read_args(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<(usize, u64), SidecarError> {
-    let max_bytes =
-        javascript_sync_rpc_arg_u64_optional(&request.args, 0, "__kernel_stdin_read max bytes")?
-            .map(|value| value.clamp(1, DEFAULT_KERNEL_STDIN_READ_MAX_BYTES as u64) as usize)
-            .unwrap_or(DEFAULT_KERNEL_STDIN_READ_MAX_BYTES);
-    let timeout_ms =
-        javascript_sync_rpc_arg_u64_optional(&request.args, 1, "__kernel_stdin_read timeout ms")?
-            .unwrap_or(DEFAULT_KERNEL_STDIN_READ_TIMEOUT_MS);
-    Ok((max_bytes, timeout_ms))
-}
-
-/// One bounded stdin read against the kernel. `Duration::ZERO` = non-blocking
-/// probe (deferred servicing re-checks readiness with this before replying).
-pub(crate) fn kernel_stdin_read_response(
-    kernel: &mut SidecarKernel,
-    kernel_pid: u32,
-    max_bytes: usize,
-    timeout: Duration,
-) -> Result<Value, SidecarError> {
-    match kernel
-        .fd_read_with_timeout_result(
-            EXECUTION_DRIVER_NAME,
-            kernel_pid,
-            0,
-            max_bytes,
-            Some(timeout),
-        )
-        .map_err(kernel_error)
-    {
-        Ok(Some(chunk)) if !chunk.is_empty() => Ok(json!({
-            "dataBase64": base64::engine::general_purpose::STANDARD.encode(chunk),
-        })),
-        Ok(Some(_)) => Ok(Value::Null),
-        Ok(None) => Ok(json!({
-            "done": true,
-        })),
-        Err(SidecarError::Kernel(error)) if error.starts_with("EAGAIN:") => Ok(Value::Null),
-        Err(error) => Err(error),
-    }
-}
-
-fn service_javascript_pty_set_raw_mode_sync_rpc(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let enabled = javascript_sync_rpc_arg_bool(&request.args, 0, "__pty_set_raw_mode enabled")?;
-    kernel
-        .pty_set_discipline(
-            EXECUTION_DRIVER_NAME,
-            process.kernel_pid,
-            0,
-            // Match cfmakeraw: raw mode also disables output post-processing
-            // (OPOST/ONLCR) so a full-screen app (vim) that drives its own
-            // cursor/CRLF is not mangled by the line discipline; cooked mode
-            // re-enables it so the line shell gets LF->CRLF.
-            LineDisciplineConfig {
-                canonical: Some(!enabled),
-                echo: Some(!enabled),
-                isig: Some(!enabled),
-                opost: Some(!enabled),
-                onlcr: Some(!enabled),
-            },
-        )
-        .map_err(kernel_error)?;
-    Ok(Value::Null)
-}
-
-fn service_javascript_kernel_isatty_sync_rpc(
-    kernel: &mut SidecarKernel,
-    process: &ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let fd = javascript_sync_rpc_arg_u32(&request.args, 0, "__kernel_isatty fd")?;
-    let is_tty = kernel
-        .isatty(EXECUTION_DRIVER_NAME, process.kernel_pid, fd)
-        .map_err(kernel_error)?;
-    Ok(json!(is_tty))
-}
-
-fn service_javascript_kernel_tty_size_sync_rpc(
-    kernel: &mut SidecarKernel,
-    process: &ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let fd = javascript_sync_rpc_arg_u32(&request.args, 0, "__kernel_tty_size fd")?;
-    let size = kernel
-        .pty_window_size(EXECUTION_DRIVER_NAME, process.kernel_pid, fd)
-        .map_err(kernel_error)?;
-    Ok(json!({
-        "cols": size.cols,
-        "rows": size.rows,
-    }))
-}
-
-// TODO(double-print): The recovered pre-convergence work (94e935d0) added a
-// guard here because in THAT model the sidecar owned a per-process
-// `tty_master_fd`, drained the PTY master into `Stdout`/`ProcessOutput` events,
-// and therefore had to suppress a TTY child's own `process_output` event to
-// avoid surfacing the same bytes twice (once via the child's Stdout event, once
-// via the drained master).
-//
-// The current "real terminal client" model on main is different and does NOT
-// exhibit that bug as far as I can determine:
-//   * `tty_master_fd` here is only a LOCAL used to derive
-//     `kernel_stdin_writer_fd`; there is no `ActiveProcess::tty_master_fd`
-//     field and no `drain_tty_master_output` — the sidecar never surfaces the
-//     PTY master as host `ProcessOutput` at all. The in-guest terminal client
-//     reads the master itself.
-//   * A wasm/python CHILD of a cooked-TTY JS shell is spawned WITHOUT the
-//     parent's PTY slave dup2'd onto its fds (the child spawn path does no
-//     `open_pty`/slave dup2), so the child's stdout does not flow through the
-//     parent's master. It is surfaced exactly once, via the `Stdout` event
-//     queued below.
-// So there is no second surfacing path to suppress, and porting 94e935d0's
-// master-drain guard would guard against a drain that no longer exists.
-//
-// UNRESOLVED: I could not exercise the live JS-shell-spawns-wasm-child scenario
-// end-to-end to positively confirm the host sees exactly one copy; the analysis
-// above is from the code paths only. If a real double-print is later observed
-// for a TTY child, the fix belongs here (or at the `ProcessOutput` emission in
-// `event_frame_for_execution_event`): suppress this child `Stdout` event when
-// the same bytes already reach the host through a PTY master owned by an
-// ancestor. Deliberately NOT fabricating that guard now, per instructions.
-/// A TTY in raw mode (no echo, no canonical) — like cfmakeraw. Full-screen apps
-/// (vim) run raw and drive their own cursor/CRLF, so their output must be passed
-/// through untouched, NOT round-tripped through the slave->process_output->master
-/// path (which buffers/reorders escape sequences and corrupts the screen).
-fn tty_is_raw_mode(kernel: &SidecarKernel, process: &ActiveProcess) -> bool {
-    let Some(master_fd) = process.tty_master_fd else {
-        return false;
-    };
-    match kernel.tcgetattr(EXECUTION_DRIVER_NAME, process.kernel_pid, master_fd) {
-        Ok(termios) => !termios.echo && !termios.icanon,
-        Err(_) => false,
-    }
-}
-
-/// Non-blocking drain of the PTY master output buffer for a TTY process.
-///
-/// For a TTY (PTY-backed) process the master output buffer is the single
-/// ordered output stream: it carries cooked-mode echo plus ONLCR-processed
-/// guest output, already merged FIFO. A zero-timeout master read returns the
-/// whole current buffer (so echo and guest output stay grouped) or EAGAIN when
-/// empty, which is mapped to `Ok(None)`. Returns `Ok(None)` for non-TTY
-/// processes (no master fd).
-pub(crate) fn drain_tty_master_output(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-) -> Result<Option<Vec<u8>>, SidecarError> {
-    let Some(master_fd) = process.tty_master_fd else {
-        return Ok(None);
-    };
-    match kernel.fd_read_with_timeout_result(
-        EXECUTION_DRIVER_NAME,
-        process.kernel_pid,
-        master_fd,
-        MAX_PTY_BUFFER_BYTES,
-        Some(Duration::ZERO),
-    ) {
-        Ok(Some(bytes)) if !bytes.is_empty() => Ok(Some(bytes)),
-        Ok(_) => Ok(None),
-        Err(error) if error.code() == "EAGAIN" => Ok(None),
-        Err(error) => Err(kernel_error(error)),
-    }
-}
-
-fn service_javascript_kernel_stdio_write_sync_rpc(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let fd = javascript_sync_rpc_arg_u32(&request.args, 0, "__kernel_stdio_write fd")?;
-    let chunk = javascript_sync_rpc_bytes_arg(&request.args, 1, "__kernel_stdio_write chunk")?;
-    if fd != 1 && fd != 2 {
-        return Err(SidecarError::InvalidState(format!(
-            "__kernel_stdio_write only supports fd 1/2, got {fd}"
-        )));
-    }
-
-    // COOKED TTY (line shell): route the write through the PTY slave so it flows
-    // through process_output (ONLCR) into the master output buffer interleaved
-    // with cooked-mode echo, then surface that single ordered master stream so
-    // ONLCR + echo reach the host. stderr shares the master, merging onto Stdout.
-    let raw_mode = tty_is_raw_mode(kernel, process);
-    if process.tty_master_fd.is_some() && !raw_mode {
-        let written = if fd == 1 {
-            kernel
-                .write_process_stdout(EXECUTION_DRIVER_NAME, process.kernel_pid, &chunk)
-                .map_err(kernel_error)?
-        } else {
-            kernel
-                .write_process_stderr(EXECUTION_DRIVER_NAME, process.kernel_pid, &chunk)
-                .map_err(kernel_error)?
-        };
-        if let Some(master_bytes) = drain_tty_master_output(kernel, process)? {
-            process.queue_pending_execution_event(ActiveExecutionEvent::Stdout(master_bytes))?;
-        }
-        return Ok(json!(written));
-    }
-
-    // RAW TTY (full-screen app) or non-TTY: emit the guest's bytes unmodified.
-    // For a raw TTY we must NOT write through the slave (that would fill the
-    // never-drained master and corrupt rendering); for non-TTY we write to the
-    // underlying fd so pipes/files actually receive it.
-    let written = if process.tty_master_fd.is_some() {
-        chunk.len()
-    } else if fd == 1 {
-        kernel
-            .write_process_stdout(EXECUTION_DRIVER_NAME, process.kernel_pid, &chunk)
-            .map_err(kernel_error)?
-    } else {
-        kernel
-            .write_process_stderr(EXECUTION_DRIVER_NAME, process.kernel_pid, &chunk)
-            .map_err(kernel_error)?
-    };
-
-    let event = if fd == 1 {
-        ActiveExecutionEvent::Stdout(chunk)
-    } else {
-        ActiveExecutionEvent::Stderr(chunk)
-    };
-    process.queue_pending_execution_event(event)?;
-
-    Ok(json!(written))
-}
-
-fn service_javascript_kernel_poll_sync_rpc(
-    kernel: &mut SidecarKernel,
-    process: &ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let (fd_requests, timeout_ms) = parse_kernel_poll_args(request)?;
-    kernel_poll_response(kernel, process.kernel_pid, &fd_requests, timeout_ms)
-}
-
-/// Parse `__kernel_poll` args: (fd list, requested timeout ms).
-pub(crate) fn parse_kernel_poll_args(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<(Vec<KernelPollFdRequest>, i32), SidecarError> {
-    let fd_requests: Vec<KernelPollFdRequest> = serde_json::from_value(
-        request
-            .args
-            .first()
-            .cloned()
-            .unwrap_or_else(|| Value::Array(Vec::new())),
-    )
-    .map_err(|error| {
-        SidecarError::InvalidState(format!(
-            "__kernel_poll fd list must be a JSON array of {{ fd, events }} objects: {error}"
-        ))
-    })?;
-    let timeout_ms =
-        javascript_sync_rpc_arg_u64_optional(&request.args, 1, "__kernel_poll timeout ms")?
-            .unwrap_or_default();
-    let timeout_ms = i32::try_from(timeout_ms).map_err(|_| {
-        SidecarError::InvalidState(String::from("__kernel_poll timeout ms must fit within i32"))
-    })?;
-    Ok((fd_requests, timeout_ms))
-}
-
-/// One bounded kernel poll. Timeout `0` = non-blocking probe (deferred
-/// servicing re-checks readiness with this before replying).
-pub(crate) fn kernel_poll_response(
-    kernel: &SidecarKernel,
-    kernel_pid: u32,
-    fd_requests: &[KernelPollFdRequest],
-    timeout_ms: i32,
-) -> Result<Value, SidecarError> {
-    let poll_fds = fd_requests
-        .iter()
-        .map(|entry| PollFd {
-            fd: entry.fd,
-            events: PollEvents::from_bits(entry.events),
-            revents: PollEvents::empty(),
-        })
-        .collect::<Vec<_>>();
-    let result = kernel
-        .poll_fds(EXECUTION_DRIVER_NAME, kernel_pid, poll_fds, timeout_ms)
-        .map_err(kernel_error)?;
-    Ok(json!({
-        "readyCount": result.ready_count,
-        "fds": result
-            .fds
-            .into_iter()
-            .map(|entry| KernelPollFdResponse {
-                fd: entry.fd,
-                events: entry.events.bits(),
-                revents: entry.revents.bits(),
-            })
-            .collect::<Vec<_>>(),
-    }))
-}
-
-fn install_kernel_stdin_pipe(kernel: &mut SidecarKernel, pid: u32) -> Result<u32, SidecarError> {
-    let (read_fd, write_fd) = kernel
-        .open_pipe(EXECUTION_DRIVER_NAME, pid)
-        .map_err(kernel_error)?;
-    kernel
-        .fd_dup2(EXECUTION_DRIVER_NAME, pid, read_fd, 0)
-        .map_err(kernel_error)?;
-    kernel
-        .fd_close(EXECUTION_DRIVER_NAME, pid, read_fd)
-        .map_err(kernel_error)?;
-    Ok(write_fd)
-}
-
-fn requested_pty_window_size(env: &BTreeMap<String, String>) -> Option<(u16, u16)> {
-    let cols = env
-        .get("COLUMNS")
-        .and_then(|value| value.parse::<u16>().ok())
-        .filter(|value| *value > 0)?;
-    let rows = env
-        .get("LINES")
-        .and_then(|value| value.parse::<u16>().ok())
-        .filter(|value| *value > 0)?;
-    Some((cols, rows))
-}
-
-fn javascript_child_process_stdin_mode(request: &JavascriptChildProcessSpawnRequest) -> &str {
-    request
-        .options
-        .stdio
-        .first()
-        .map(String::as_str)
-        .unwrap_or("pipe")
-}
-
-pub(crate) fn write_kernel_process_stdin(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    chunk: &[u8],
-) -> Result<(), SidecarError> {
-    // Non-TTY JavaScript uses the in-process local stdin bridge, not a kernel
-    // fd; a TTY JavaScript process (tty_master_fd set) DOES route through the
-    // kernel PTY master, exactly like wasm/python, so line discipline + echo
-    // apply.
-    if process.runtime == GuestRuntimeKind::JavaScript && process.tty_master_fd.is_none() {
-        return Ok(());
-    }
-    let Some(writer_fd) = process.kernel_stdin_writer_fd else {
-        return Ok(());
-    };
-    kernel
-        .fd_write(EXECUTION_DRIVER_NAME, process.kernel_pid, writer_fd, chunk)
-        .map_err(kernel_error)?;
-    // For a TTY process the master write above drives line-discipline echo into
-    // the master output buffer. Drain it now and surface it as the single
-    // ordered Stdout stream so typed-character echo reaches the host even while
-    // the guest is blocked in read() and not producing output of its own.
-    if let Some(echo) = drain_tty_master_output(kernel, process)? {
-        process.queue_pending_execution_event(ActiveExecutionEvent::Stdout(echo))?;
-    }
-    forward_tty_slave_input_to_javascript(kernel, process)?;
-    Ok(())
-}
-
-/// For a TTY JavaScript guest, cooked input becomes readable on the PTY slave
-/// only after line discipline runs (on newline/VEOF in canonical mode; every
-/// byte in raw mode). The V8 isolate has no kernel-fd read loop of its own —
-/// its stdin is the stream-stdin dispatch fed by `execution.write_stdin` — so
-/// right after each master write, drain whatever the discipline released on
-/// the slave (fd 0) and forward it to the isolate. A `None` read is the
-/// discipline's VEOF: propagate it as end-of-stdin so `process.stdin` emits
-/// `end`. Wasm/python guests read the slave themselves and are skipped.
-fn forward_tty_slave_input_to_javascript(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-) -> Result<(), SidecarError> {
-    if process.tty_master_fd.is_none()
-        || !matches!(process.execution, ActiveExecution::Javascript(_))
-    {
-        return Ok(());
-    }
-    loop {
-        match kernel.fd_read_with_timeout_result(
-            EXECUTION_DRIVER_NAME,
-            process.kernel_pid,
-            0,
-            MAX_PTY_BUFFER_BYTES,
-            Some(Duration::ZERO),
-        ) {
-            Ok(Some(bytes)) if !bytes.is_empty() => {
-                process.execution.write_stdin(&bytes)?;
-            }
-            Ok(Some(_)) => return Ok(()),
-            Ok(None) => {
-                process.execution.close_stdin()?;
-                return Ok(());
-            }
-            Err(error) if error.code() == "EAGAIN" => return Ok(()),
-            Err(error) => return Err(kernel_error(error)),
-        }
-    }
-}
-
-pub(crate) fn close_kernel_process_stdin(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-) -> Result<(), SidecarError> {
-    let Some(writer_fd) = process.kernel_stdin_writer_fd.take() else {
-        return Ok(());
-    };
-    kernel
-        .fd_close(EXECUTION_DRIVER_NAME, process.kernel_pid, writer_fd)
-        .map_err(kernel_error)
-}
-
-fn parse_http_header_collection(
-    headers: &BTreeMap<String, Value>,
-    label: &str,
-) -> Result<HttpHeaderCollection, SidecarError> {
-    let mut normalized = BTreeMap::<String, Vec<String>>::new();
-    let mut raw_pairs = Vec::new();
-
-    for (raw_name, value) in headers {
-        let normalized_name = raw_name.to_ascii_lowercase();
-        let values = match value {
-            Value::String(text) => vec![text.clone()],
-            Value::Array(values) => values
-                .iter()
-                .map(|entry| {
-                    entry.as_str().map(str::to_owned).ok_or_else(|| {
-                        SidecarError::InvalidState(format!(
-                            "{label} header {raw_name} must contain only strings"
-                        ))
-                    })
-                })
-                .collect::<Result<Vec<_>, _>>()?,
-            other => {
-                return Err(SidecarError::InvalidState(format!(
-                    "{label} header {raw_name} must be a string or string array, received {other}"
-                )));
-            }
-        };
-        raw_pairs.extend(
-            values
-                .iter()
-                .cloned()
-                .map(|entry| (raw_name.clone(), entry)),
-        );
-        normalized
-            .entry(normalized_name)
-            .or_default()
-            .extend(values);
-    }
-
-    Ok(HttpHeaderCollection {
-        normalized,
-        raw_pairs,
-    })
-}
-
-fn http_headers_json(headers: &HttpHeaderCollection) -> Value {
-    let map = headers
-        .normalized
-        .iter()
-        .map(|(name, values)| {
-            let value = if values.len() == 1 {
-                Value::String(values[0].clone())
-            } else {
-                Value::Array(values.iter().cloned().map(Value::String).collect())
-            };
-            (name.clone(), value)
-        })
-        .collect::<Map<String, Value>>();
-    Value::Object(map)
-}
-
-fn http_raw_headers_json(headers: &HttpHeaderCollection) -> Value {
-    Value::Array(
-        headers
-            .raw_pairs
-            .iter()
-            .flat_map(|(name, value)| [Value::String(name.clone()), Value::String(value.clone())])
-            .collect(),
-    )
-}
-
-fn is_loopback_request_host(host: &str) -> bool {
-    let bare = host
-        .strip_prefix('[')
-        .and_then(|value| value.strip_suffix(']'))
-        .unwrap_or(host);
-    matches!(bare, "localhost" | "127.0.0.1" | "::1")
-}
-
-fn serialize_http_loopback_request(
-    url: &Url,
-    options: &JavascriptHttpRequestOptions,
-    headers: &HttpHeaderCollection,
-) -> Result<String, SidecarError> {
-    let body_base64 = options
-        .body
-        .as_ref()
-        .map(|body| base64::engine::general_purpose::STANDARD.encode(body.as_bytes()));
-    serde_json::to_string(&json!({
-        "method": options.method.clone().unwrap_or_else(|| String::from("GET")),
-        "url": http_request_target(url),
-        "headers": http_headers_json(headers),
-        "rawHeaders": http_raw_headers_json(headers),
-        "bodyBase64": body_base64,
-    }))
-    .map_err(|error| SidecarError::Execution(format!("ERR_AGENTOS_NODE_SYNC_RPC: {error}")))
-}
-
-fn http_request_target(url: &Url) -> String {
-    let path = if url.path().is_empty() {
-        "/"
-    } else {
-        url.path()
-    };
-    format!(
-        "{path}{}",
-        url.query()
-            .map(|query| format!("?{query}"))
-            .unwrap_or_default()
-    )
-}
-
-fn find_kernel_http_listener_process(vm: &VmState, port: u16) -> Option<String> {
-    vm.active_processes
-        .iter()
-        .find_map(|(process_id, process)| {
-            process.tcp_listeners.values().find_map(|listener| {
-                let socket_id = listener.kernel_socket_id?;
-                let record = vm.kernel.socket_get(socket_id)?;
-                let local_addr = record
-                    .local_address()
-                    .and_then(|address| resolve_tcp_bind_addr(address.host(), address.port()).ok())
-                    .unwrap_or_else(|| listener.guest_local_addr());
-                if local_addr.port() == port && is_vm_local_http_listener_addr(local_addr.ip()) {
-                    Some(process_id.to_owned())
-                } else {
-                    None
-                }
-            })
-        })
-}
-
-fn is_vm_local_http_listener_addr(ip: IpAddr) -> bool {
-    ip.is_loopback() || ip.is_unspecified()
-}
-
-fn serialize_kernel_http_fetch_request(
-    port: u16,
-    path: &str,
-    options: &JavascriptHttpRequestOptions,
-    headers: &HttpHeaderCollection,
-) -> Vec<u8> {
-    let method = options.method.as_deref().unwrap_or("GET");
-    let mut lines = vec![format!("{method} {path} HTTP/1.1")];
-    let mut has_host = false;
-    let mut has_connection = false;
-    let mut has_content_length = false;
-    for (name, values) in &headers.normalized {
-        match name.as_str() {
-            "host" => has_host = true,
-            "connection" => has_connection = true,
-            "content-length" => has_content_length = true,
-            _ => {}
-        }
-        lines.push(format!("{name}: {}", values.join(", ")));
-    }
-    if !has_host {
-        lines.push(format!("Host: 127.0.0.1:{port}"));
-    }
-    if !has_connection {
-        lines.push(String::from("Connection: close"));
-    }
-    let body = options.body.as_deref().unwrap_or("").as_bytes();
-    if !has_content_length && !body.is_empty() {
-        lines.push(format!("Content-Length: {}", body.len()));
-    }
-    lines.push(String::new());
-    lines.push(String::new());
-
-    let mut request = lines.join("\r\n").into_bytes();
-    request.extend_from_slice(body);
-    request
-}
-
-fn kernel_http_fetch_target_exit_code(error: &SidecarError) -> Option<i32> {
-    let SidecarError::Execution(message) = error else {
-        return None;
-    };
-    message
-        .strip_prefix("vm.fetch target exited before responding (exit code ")?
-        .strip_suffix(')')?
-        .parse()
-        .ok()
-}
-
-#[allow(clippy::too_many_arguments)]
-fn service_host_fetch_target_event<B>(
-    bridge: &SharedBridge<B>,
-    vm_id: &str,
-    dns: &VmDnsConfig,
-    socket_paths: &JavascriptSocketPathContext,
-    kernel: &mut SidecarKernel,
-    kernel_readiness: &KernelSocketReadinessRegistry,
-    process: &mut ActiveProcess,
-    resource_limits: &ResourceLimits,
-    wait: Duration,
-) -> Result<bool, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let Some(event) = process
-        .execution
-        .poll_event_blocking(wait)
-        .map_err(|error| SidecarError::Execution(error.to_string()))?
-    else {
-        return Ok(false);
-    };
-
-    match event {
-        ActiveExecutionEvent::JavascriptSyncRpcRequest(request) => {
-            let network_counts = process.network_resource_counts();
-            let response = service_javascript_sync_rpc(JavascriptSyncRpcServiceRequest {
-                bridge,
-                vm_id,
-                dns,
-                socket_paths,
-                kernel,
-                kernel_readiness: Arc::clone(kernel_readiness),
-                process,
-                sync_request: &request,
-                resource_limits,
-                network_counts,
-            });
-            match response {
-                Ok(result) => process
-                    .execution
-                    .respond_javascript_sync_rpc_response(request.id, result)
-                    .or_else(ignore_stale_javascript_sync_rpc_response)?,
-                Err(error) => process
-                    .execution
-                    .respond_javascript_sync_rpc_error(
-                        request.id,
-                        javascript_sync_rpc_error_code(&error),
-                        error.to_string(),
-                    )
-                    .or_else(ignore_stale_javascript_sync_rpc_response)?,
-            }
-        }
-        ActiveExecutionEvent::Exited(code) => {
-            return Err(SidecarError::Execution(format!(
-                "vm.fetch target exited before responding (exit code {code})"
-            )));
-        }
-        other => {
-            process.queue_pending_execution_event(other)?;
-        }
-    }
-    Ok(true)
-}
-
-fn drain_host_fetch_target_events<B>(
-    bridge: &SharedBridge<B>,
-    vm_id: &str,
-    vm: &mut VmState,
-    target_process_id: &str,
-    socket_paths: &JavascriptSocketPathContext,
-    resource_limits: &ResourceLimits,
-) -> Result<(), SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    for _ in 0..32 {
-        let dns = vm.dns.clone();
-        let kernel_readiness = Arc::clone(&vm.kernel_socket_readiness);
-        let Some(process) = vm.active_processes.get_mut(target_process_id) else {
-            break;
-        };
-        let serviced = service_host_fetch_target_event(
-            bridge,
-            vm_id,
-            &dns,
-            socket_paths,
-            &mut vm.kernel,
-            &kernel_readiness,
-            process,
-            resource_limits,
-            Duration::from_millis(1),
-        )?;
-        if !serviced {
-            break;
-        }
-    }
-    Ok(())
-}
-
-#[allow(clippy::too_many_arguments)]
-fn dispatch_kernel_http_fetch<B>(
-    bridge: &SharedBridge<B>,
-    vm_id: &str,
-    vm: &mut VmState,
-    target_process_id: &str,
-    port: u16,
-    path: &str,
-    options: &JavascriptHttpRequestOptions,
-    headers: &HttpHeaderCollection,
-    max_fetch_response_bytes: usize,
-) -> Result<String, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let socket_paths = build_javascript_socket_path_context(vm)?;
-    let family = JavascriptSocketFamily::Ipv4;
-    let local_port = allocate_guest_listen_port(
-        0,
-        family,
-        &socket_paths.used_tcp_guest_ports,
-        socket_paths.listen_policy,
-    )?;
-    let resource_limits = vm.kernel.resource_limits().clone();
-    let network_counts = vm_network_resource_counts(vm);
-    check_network_resource_limit(
-        resource_limits.max_sockets,
-        network_counts.sockets,
-        2,
-        "socket",
-    )?;
-    check_network_resource_limit(
-        resource_limits.max_connections,
-        network_counts.connections,
-        2,
-        "connection",
-    )?;
-
-    let kernel_pid = vm
-        .active_processes
-        .get(target_process_id)
-        .ok_or_else(|| {
-            SidecarError::InvalidState(format!(
-                "vm.fetch target process disappeared: {target_process_id}"
-            ))
-        })?
-        .kernel_pid;
-    let socket_id = vm
-        .kernel
-        .socket_create(EXECUTION_DRIVER_NAME, kernel_pid, SocketSpec::tcp())
-        .map_err(kernel_error)?;
-
-    let result = dispatch_kernel_http_fetch_with_socket(
-        bridge,
-        vm_id,
-        vm,
-        target_process_id,
-        kernel_pid,
-        socket_id,
-        local_port,
-        port,
-        path,
-        options,
-        headers,
-        &socket_paths,
-        &resource_limits,
-        max_fetch_response_bytes,
-    );
-    let close_result = vm
-        .kernel
-        .socket_close(EXECUTION_DRIVER_NAME, kernel_pid, socket_id)
-        .map_err(kernel_error);
-    let cleanup_result = if result.is_err() {
-        drain_host_fetch_target_events(
-            bridge,
-            vm_id,
-            vm,
-            target_process_id,
-            &socket_paths,
-            &resource_limits,
-        )
-    } else {
-        Ok(())
-    };
-    match (result, close_result) {
-        (Ok(response), Ok(())) => cleanup_result.map(|()| response),
-        (Err(error), _) => Err(error),
-        (Ok(_), Err(error)) => Err(error),
-    }
-}
-
-#[allow(clippy::too_many_arguments)]
-fn dispatch_kernel_http_fetch_with_socket<B>(
-    bridge: &SharedBridge<B>,
-    vm_id: &str,
-    vm: &mut VmState,
-    target_process_id: &str,
-    kernel_pid: u32,
-    socket_id: SocketId,
-    local_port: u16,
-    port: u16,
-    path: &str,
-    options: &JavascriptHttpRequestOptions,
-    headers: &HttpHeaderCollection,
-    socket_paths: &JavascriptSocketPathContext,
-    resource_limits: &ResourceLimits,
-    max_fetch_response_bytes: usize,
-) -> Result<String, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    vm.kernel
-        .socket_bind_inet(
-            EXECUTION_DRIVER_NAME,
-            kernel_pid,
-            socket_id,
-            InetSocketAddress::new("127.0.0.1", local_port),
-        )
-        .map_err(kernel_error)?;
-    vm.kernel
-        .socket_connect_inet_loopback(
-            EXECUTION_DRIVER_NAME,
-            kernel_pid,
-            socket_id,
-            InetSocketAddress::new("127.0.0.1", port),
-        )
-        .map_err(kernel_error)?;
-
-    let request_bytes = serialize_kernel_http_fetch_request(port, path, options, headers);
-    vm.kernel
-        .socket_write(EXECUTION_DRIVER_NAME, kernel_pid, socket_id, &request_bytes)
-        .map_err(kernel_error)?;
-
-    let mut response_buffer = Vec::new();
-    let mut peer_closed = false;
-    let url = format!("http://127.0.0.1:{port}{path}");
-    let deadline = Instant::now() + http_loopback_request_timeout();
-    loop {
-        if let Some(response) =
-            parse_kernel_http_fetch_response(&response_buffer, peer_closed, &url)
-                .map_err(sidecar_core_execution_error)?
-        {
-            ensure_vm_fetch_response_within_limit(&response, "vm.fetch", max_fetch_response_bytes)
-                .map_err(sidecar_core_execution_error)?;
-            return Ok(response);
-        }
-        if Instant::now() >= deadline {
-            let preview = String::from_utf8_lossy(&response_buffer);
-            return Err(SidecarError::Execution(format!(
-                "vm.fetch timed out waiting for kernel TCP HTTP response ({} buffered bytes: {:?})",
-                response_buffer.len(),
-                preview.chars().take(200).collect::<String>()
-            )));
-        }
-
-        {
-            let dns = vm.dns.clone();
-            let kernel_readiness = Arc::clone(&vm.kernel_socket_readiness);
-            let process = vm
-                .active_processes
-                .get_mut(target_process_id)
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(format!(
-                        "vm.fetch target process disappeared: {target_process_id}"
-                    ))
-                })?;
-            service_host_fetch_target_event(
-                bridge,
-                vm_id,
-                &dns,
-                socket_paths,
-                &mut vm.kernel,
-                &kernel_readiness,
-                process,
-                resource_limits,
-                Duration::from_millis(5),
-            )?;
-        }
-
-        let poll = vm
-            .kernel
-            .poll_targets(
-                EXECUTION_DRIVER_NAME,
-                kernel_pid,
-                vec![PollTargetEntry::socket(
-                    socket_id,
-                    POLLIN | POLLHUP | POLLERR,
-                )],
-                5,
-            )
-            .map_err(kernel_error)?;
-        let revents = poll
-            .targets
-            .first()
-            .map(|entry| entry.revents)
-            .unwrap_or_else(PollEvents::empty);
-        if revents.intersects(POLLERR) {
-            return Err(SidecarError::Execution(String::from(
-                "vm.fetch kernel TCP socket reported POLLERR",
-            )));
-        }
-        if revents.intersects(POLLIN) {
-            loop {
-                match vm
-                    .kernel
-                    .socket_read(EXECUTION_DRIVER_NAME, kernel_pid, socket_id, 64 * 1024)
-                {
-                    Ok(Some(bytes)) if !bytes.is_empty() => {
-                        response_buffer.extend(bytes);
-                        ensure_vm_fetch_raw_response_buffer_within_limit(
-                            response_buffer.len(),
-                            "vm.fetch",
-                        )
-                        .map_err(sidecar_core_execution_error)?;
-                    }
-                    Ok(Some(_)) => break,
-                    Ok(None) => {
-                        peer_closed = true;
-                        break;
-                    }
-                    Err(error) if error.code() == "EAGAIN" => break,
-                    Err(error) => return Err(kernel_error(error)),
-                }
-            }
-        }
-        if revents.intersects(POLLHUP) {
-            peer_closed = true;
-        }
-    }
-}
-
-fn outbound_http_response_json(url: &Url, response: ureq::Response) -> Result<Value, SidecarError> {
-    let status = response.status();
-    let status_text = response.status_text().to_owned();
-    let mut header_pairs = Vec::new();
-    let mut raw_headers = Vec::new();
-    for raw_name in response.headers_names() {
-        for value in response.all(&raw_name) {
-            header_pairs.push(json!([raw_name.to_ascii_lowercase(), value]));
-            raw_headers.push(Value::String(raw_name.clone()));
-            raw_headers.push(Value::String(value.to_owned()));
-        }
-    }
-    let mut reader = response.into_reader();
-    let mut body = Vec::new();
-    reader.read_to_end(&mut body).map_err(|error| {
-        SidecarError::Execution(format!("failed to read HTTP response: {error}"))
-    })?;
-    serde_json::to_string(&json!({
-        "status": status,
-        "statusText": status_text,
-        "headers": header_pairs,
-        "rawHeaders": raw_headers,
-        "body": base64::engine::general_purpose::STANDARD.encode(body),
-        "bodyEncoding": "base64",
-        "url": url.as_str(),
-    }))
-    .map(Value::String)
-    .map_err(|error| SidecarError::Execution(format!("ERR_AGENTOS_NODE_SYNC_RPC: {error}")))
-}
-
-/// Split a ureq resolver `netloc` (`host:port`, with optional `[..]` IPv6
-/// brackets) into its host and port components. Returns `None` if the port is
-/// missing or unparseable.
-fn split_netloc(netloc: &str) -> Option<(&str, u16)> {
-    let (host, port) = netloc.rsplit_once(':')?;
-    let port: u16 = port.parse().ok()?;
-    let host = host
-        .strip_prefix('[')
-        .and_then(|rest| rest.strip_suffix(']'))
-        .unwrap_or(host);
-    Some((host, port))
-}
-
-fn issue_outbound_http_request(
-    url: &Url,
-    options: &JavascriptHttpRequestOptions,
-    headers: &HttpHeaderCollection,
-    pinned_addresses: &[IpAddr],
-) -> Result<Value, SidecarError> {
-    let method = options.method.as_deref().unwrap_or("GET");
-    // Pin the underlying resolver to the egress-vetted addresses. ureq performs
-    // its own DNS resolution for the TCP/TLS connect; without this override an
-    // https:// request would re-resolve the hostname through the host resolver
-    // (a rebinding DNS server could then return a private/metadata IP that the
-    // earlier range check would have rejected). The pinned resolver returns only
-    // the vetted addresses and refuses any host it was not vetted for, while the
-    // request URL keeps the original hostname so TLS SNI and the Host header stay
-    // correct.
-    let pinned_host = url.host_str().map(str::to_owned);
-    let pinned: Vec<IpAddr> = pinned_addresses.to_vec();
-    let resolver = move |netloc: &str| -> std::io::Result<Vec<SocketAddr>> {
-        let (host, port) = split_netloc(netloc).ok_or_else(|| {
-            std::io::Error::new(
-                std::io::ErrorKind::InvalidInput,
-                format!("invalid network location: {netloc}"),
-            )
-        })?;
-        let expected_host = pinned_host.as_deref();
-        if expected_host != Some(host) {
-            return Err(std::io::Error::new(
-                std::io::ErrorKind::PermissionDenied,
-                format!(
-                    "EACCES: outbound HTTP resolver pinned to {expected_host:?}, refusing {host}"
-                ),
-            ));
-        }
-        if pinned.is_empty() {
-            return Err(std::io::Error::new(
-                std::io::ErrorKind::PermissionDenied,
-                "EACCES: no egress-vetted address available for outbound HTTP request",
-            ));
-        }
-        Ok(pinned.iter().map(|ip| SocketAddr::new(*ip, port)).collect())
-    };
-    let mut agent_builder = ureq::AgentBuilder::new()
-        .resolver(resolver)
-        .timeout_connect(Duration::from_secs(5))
-        .timeout_read(Duration::from_secs(15))
-        .timeout_write(Duration::from_secs(15));
-    if url.scheme() == "https" {
-        let tls_options = JavascriptTlsBridgeOptions {
-            is_server: false,
-            servername: url.host_str().map(str::to_owned),
-            alpn_protocols: Some(vec![String::from("http/1.1")]),
-            reject_unauthorized: options.reject_unauthorized,
-            ..JavascriptTlsBridgeOptions::default()
-        };
-        agent_builder = agent_builder.tls_config(Arc::new(build_client_tls_config(&tls_options)?));
-    }
-    let agent = agent_builder.build();
-    let mut request = agent.request_url(method, url);
-    for (name, values) in &headers.normalized {
-        if name == "host" {
-            continue;
-        }
-        let header_value = values.join(", ");
-        request = request.set(name, &header_value);
-    }
-    let response = match options.body.as_deref() {
-        Some(body) => request.send_string(body),
-        None => request.call(),
-    };
-
-    match response {
-        Ok(response) => outbound_http_response_json(url, response),
-        Err(ureq::Error::Status(_, response)) => outbound_http_response_json(url, response),
-        Err(ureq::Error::Transport(error)) => Err(SidecarError::Execution(format!(
-            "ERR_HTTP_REQUEST_FAILED: {error}"
-        ))),
-    }
-}
-
-fn wait_for_loopback_http_response<B>(
-    request: LoopbackHttpResponseWaitRequest<'_, B>,
-) -> Result<String, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let LoopbackHttpResponseWaitRequest {
-        bridge,
-        vm_id,
-        dns,
-        socket_paths,
-        kernel,
-        kernel_readiness,
-        process,
-        resource_limits,
-        request_key,
-    } = request;
-    let deadline = Instant::now() + http_loopback_request_timeout();
-    loop {
-        if let Some(response) = process
-            .pending_http_requests
-            .get(&request_key)
-            .and_then(|response| response.clone())
-        {
-            process.pending_http_requests.remove(&request_key);
-            return Ok(response);
-        }
-
-        if Instant::now() >= deadline {
-            process.pending_http_requests.remove(&request_key);
-            return Err(SidecarError::Execution(String::from(
-                "HTTP loopback request timed out waiting for net.http_respond",
-            )));
-        }
-
-        let Some(event) = process
-            .execution
-            .poll_event_blocking(Duration::from_millis(10))
-            .map_err(|error| SidecarError::Execution(error.to_string()))?
-        else {
-            continue;
-        };
-
-        match event {
-            ActiveExecutionEvent::JavascriptSyncRpcRequest(request) => {
-                let network_counts = process.network_resource_counts();
-                let response = service_javascript_sync_rpc(JavascriptSyncRpcServiceRequest {
-                    bridge,
-                    vm_id,
-                    dns,
-                    socket_paths,
-                    kernel,
-                    kernel_readiness: Arc::clone(&kernel_readiness),
-                    process,
-                    sync_request: &request,
-                    resource_limits,
-                    network_counts,
-                });
-                match response {
-                    Ok(result) => process
-                        .execution
-                        .respond_javascript_sync_rpc_response(request.id, result)
-                        .or_else(ignore_stale_javascript_sync_rpc_response)?,
-                    Err(error) => process
-                        .execution
-                        .respond_javascript_sync_rpc_error(
-                            request.id,
-                            javascript_sync_rpc_error_code(&error),
-                            error.to_string(),
-                        )
-                        .or_else(ignore_stale_javascript_sync_rpc_response)?,
-                }
-            }
-            ActiveExecutionEvent::Exited(code) => {
-                process.pending_http_requests.remove(&request_key);
-                return Err(SidecarError::Execution(format!(
-                    "HTTP loopback server exited before responding (exit code {code})"
-                )));
-            }
-            ActiveExecutionEvent::Stdout(_)
-            | ActiveExecutionEvent::Stderr(_)
-            | ActiveExecutionEvent::PythonVfsRpcRequest(_)
-            | ActiveExecutionEvent::SignalState { .. } => {}
-        }
-    }
-}
-
-pub(crate) fn dispatch_loopback_http_request<B>(
-    request: LoopbackHttpDispatchRequest<'_, B>,
-) -> Result<String, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let LoopbackHttpDispatchRequest {
-        bridge,
-        vm_id,
-        dns,
-        socket_paths,
-        kernel,
-        kernel_readiness,
-        process,
-        resource_limits,
-        server_id,
-        request_json,
-    } = request;
-    let request_id = {
-        let server = process.http_servers.get_mut(&server_id).ok_or_else(|| {
-            SidecarError::InvalidState(format!("HTTP target server disappeared: {server_id}"))
-        })?;
-        server.next_request_id += 1;
-        server.next_request_id
-    };
-    process
-        .pending_http_requests
-        .insert((server_id, request_id), None);
-    process.execution.send_javascript_stream_event(
-        "http_request",
-        json!({
-            "serverId": server_id,
-            "requestId": request_id,
-            "request": request_json,
-        }),
-    )?;
-    wait_for_loopback_http_response(LoopbackHttpResponseWaitRequest {
-        bridge,
-        vm_id,
-        dns,
-        socket_paths,
-        kernel,
-        kernel_readiness,
-        process,
-        resource_limits,
-        request_key: (server_id, request_id),
-    })
-}
-
-fn sidecar_core_execution_error(error: SidecarCoreError) -> SidecarError {
-    SidecarError::Execution(error.to_string())
-}
-
-pub(crate) fn ensure_vm_fetch_response_frame_within_limit(
-    response: &ResponseFrame,
-    max_frame_bytes: usize,
-) -> Result<(), SidecarError> {
-    let max_frame_bytes = max_frame_bytes.min(VM_FETCH_BUFFER_LIMIT_BYTES);
-    let frame = crate::protocol::to_generated_protocol_frame(
-        &crate::protocol::ProtocolFrame::Response(response.clone()),
-    )
-    .map_err(|error| SidecarError::FrameTooLarge(error.to_string()))?;
-    let WireProtocolFrame::ResponseFrame(_) = &frame else {
-        return Err(SidecarError::FrameTooLarge(String::from(
-            "vm fetch response converted to non-response wire frame",
-        )));
-    };
-    WireFrameCodec::new(max_frame_bytes)
-        .encode(&frame)
-        .map(|_| ())
-        .map_err(|error| SidecarError::FrameTooLarge(error.to_string()))
-}
-
-fn service_javascript_dns_sync_rpc<B>(
-    bridge: &SharedBridge<B>,
-    kernel: &SidecarKernel,
-    vm_id: &str,
-    dns: &VmDnsConfig,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    match request.method.as_str() {
-        "dns.lookup" => {
-            let payload = request
-                .args
-                .first()
-                .cloned()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "dns.lookup requires a request payload",
-                    ))
-                })
-                .and_then(|value| {
-                    serde_json::from_value::<JavascriptDnsLookupRequest>(value).map_err(|error| {
-                        SidecarError::InvalidState(format!("invalid dns.lookup payload: {error}"))
-                    })
-                })?;
-            let addresses = filter_dns_ip_addrs(
-                resolve_dns_ip_addrs(
-                    bridge,
-                    kernel,
-                    vm_id,
-                    dns,
-                    &payload.hostname,
-                    DnsLookupPolicy::CheckPermissions,
-                )?,
-                payload.family,
-            )?;
-            let addresses = filter_dns_safe_ip_addrs(addresses, &payload.hostname)?;
-            Ok(Value::Array(
-                addresses
-                    .into_iter()
-                    .map(|ip| {
-                        json!({
-                            "address": ip.to_string(),
-                            "family": if ip.is_ipv6() { 6 } else { 4 },
-                        })
-                    })
-                    .collect(),
-            ))
-        }
-        "dns.resolve" | "dns.resolve4" | "dns.resolve6" => {
-            let payload = request
-                .args
-                .first()
-                .cloned()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "dns.resolve requires a request payload",
-                    ))
-                })
-                .and_then(|value| {
-                    serde_json::from_value::<JavascriptDnsResolveRequest>(value).map_err(|error| {
-                        SidecarError::InvalidState(format!("invalid dns.resolve payload: {error}"))
-                    })
-                })?;
-            let requested_type = match request.method.as_str() {
-                "dns.resolve4" => String::from("A"),
-                "dns.resolve6" => String::from("AAAA"),
-                _ => payload
-                    .rrtype
-                    .as_deref()
-                    .unwrap_or("A")
-                    .to_ascii_uppercase(),
-            };
-            let record_type = parse_dns_record_type(&requested_type)?;
-            let resolution = resolve_dns_records(
-                bridge,
-                kernel,
-                vm_id,
-                dns,
-                &payload.hostname,
-                record_type,
-                DnsLookupPolicy::CheckPermissions,
-            )?;
-            dns_resolution_to_node_value(&resolution, &requested_type)
-        }
-        other => Err(SidecarError::InvalidState(format!(
-            "unsupported JavaScript dns sync RPC method {other}"
-        ))),
-    }
-}
-
-fn service_javascript_dgram_sync_rpc<B>(
-    request: JavascriptDgramSyncRpcServiceRequest<'_, B>,
-) -> Result<Value, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let JavascriptDgramSyncRpcServiceRequest {
-        bridge,
-        kernel,
-        vm_id,
-        dns,
-        socket_paths,
-        process,
-        kernel_readiness,
-        sync_request: request,
-        resource_limits,
-        network_counts,
-    } = request;
-    match request.method.as_str() {
-        "dgram.createSocket" => {
-            check_network_resource_limit(
-                resource_limits.max_sockets,
-                network_counts.sockets,
-                1,
-                "socket",
-            )?;
-            let payload = request
-                .args
-                .first()
-                .cloned()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "dgram.createSocket requires a request payload",
-                    ))
-                })
-                .and_then(|value| {
-                    serde_json::from_value::<JavascriptDgramCreateSocketRequest>(value).map_err(
-                        |error| {
-                            SidecarError::InvalidState(format!(
-                                "invalid dgram.createSocket payload: {error}"
-                            ))
-                        },
-                    )
-                })?;
-            let family = JavascriptUdpFamily::from_socket_type(&payload.socket_type)?;
-            let socket_id = process.allocate_udp_socket_id();
-            let socket = ActiveUdpSocket::new(kernel, process.kernel_pid, family)?;
-            register_kernel_readiness_target(
-                &kernel_readiness,
-                socket.kernel_socket_id,
-                process.execution.javascript_v8_session_handle(),
-                socket_id.clone(),
-                KernelSocketReadinessEvent::Datagram,
-            );
-            process.udp_sockets.insert(socket_id.clone(), socket);
-            Ok(json!({
-                "socketId": socket_id,
-                "type": family.socket_type(),
-            }))
-        }
-        "dgram.bind" => {
-            let socket_id = javascript_sync_rpc_arg_str(&request.args, 0, "dgram.bind socket id")?;
-            let payload = request
-                .args
-                .get(1)
-                .cloned()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "dgram.bind requires a request payload",
-                    ))
-                })
-                .and_then(|value| {
-                    serde_json::from_value::<JavascriptDgramBindRequest>(value).map_err(|error| {
-                        SidecarError::InvalidState(format!("invalid dgram.bind payload: {error}"))
-                    })
-                })?;
-            let socket = process.udp_sockets.get_mut(socket_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!("unknown UDP socket {socket_id}"))
-            })?;
-            let local_addr = socket.bind(
-                kernel,
-                process.kernel_pid,
-                payload.address.as_deref(),
-                payload.port,
-                socket_paths,
-            )?;
-            Ok(local_endpoint_value(&local_addr))
-        }
-        "dgram.send" => {
-            let socket_id = javascript_sync_rpc_arg_str(&request.args, 0, "dgram.send socket id")?;
-            let chunk = javascript_sync_rpc_bytes_arg(&request.args, 1, "dgram.send payload")?;
-            let payload = request
-                .args
-                .get(2)
-                .cloned()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "dgram.send requires a request payload",
-                    ))
-                })
-                .and_then(|value| {
-                    serde_json::from_value::<JavascriptDgramSendRequest>(value).map_err(|error| {
-                        SidecarError::InvalidState(format!("invalid dgram.send payload: {error}"))
-                    })
-                })?;
-            let socket = process.udp_sockets.get_mut(socket_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!("unknown UDP socket {socket_id}"))
-            })?;
-            let (written, local_addr) = socket.send_to(ActiveUdpSendToRequest {
-                bridge,
-                kernel,
-                kernel_pid: process.kernel_pid,
-                vm_id,
-                dns,
-                host: payload.address.as_deref().unwrap_or("localhost"),
-                port: payload.port,
-                context: socket_paths,
-                contents: &chunk,
-            })?;
-            Ok(json!({
-                "bytes": written,
-                "localAddress": local_addr.ip().to_string(),
-                "localPort": local_addr.port(),
-                "family": socket_addr_family(&local_addr),
-            }))
-        }
-        "dgram.poll" => {
-            let socket_id = javascript_sync_rpc_arg_str(&request.args, 0, "dgram.poll socket id")?;
-            let wait_ms =
-                javascript_sync_rpc_arg_u64_optional(&request.args, 1, "dgram.poll wait ms")?
-                    .unwrap_or_default();
-            let event = {
-                let socket = process.udp_sockets.get(socket_id).ok_or_else(|| {
-                    SidecarError::InvalidState(format!("unknown UDP socket {socket_id}"))
-                })?;
-                socket.poll(kernel, process.kernel_pid, Duration::from_millis(wait_ms))?
-            };
-
-            match event {
-                Some(JavascriptUdpSocketEvent::Message { data, remote_addr }) => {
-                    let family = JavascriptSocketFamily::from_ip(remote_addr.ip());
-                    let guest_remote_port = if is_loopback_ip(remote_addr.ip()) {
-                        socket_paths
-                            .guest_udp_port_for_host_port(family, remote_addr.port())
-                            .unwrap_or(remote_addr.port())
-                    } else {
-                        remote_addr.port()
-                    };
-                    let mut response = remote_endpoint_value(&remote_addr, guest_remote_port);
-                    if let Value::Object(fields) = &mut response {
-                        fields.insert(String::from("type"), Value::String(String::from("message")));
-                        fields.insert(String::from("data"), javascript_sync_rpc_bytes_value(&data));
-                    }
-                    Ok(response)
-                }
-                Some(JavascriptUdpSocketEvent::Error { code, message }) => Ok(json!({
-                    "type": "error",
-                    "code": code,
-                    "message": message,
-                })),
-                None => Ok(Value::Null),
-            }
-        }
-        "dgram.close" => {
-            let socket_id = javascript_sync_rpc_arg_str(&request.args, 0, "dgram.close socket id")?;
-            let mut socket = process.udp_sockets.remove(socket_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!("unknown UDP socket {socket_id}"))
-            })?;
-            unregister_kernel_readiness_target(&kernel_readiness, socket.kernel_socket_id);
-            socket.close(kernel, process.kernel_pid);
-            Ok(Value::Null)
-        }
-        "dgram.address" => {
-            let socket_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "dgram.address socket id")?;
-            let socket = process.udp_sockets.get(socket_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!("unknown UDP socket {socket_id}"))
-            })?;
-            let local_addr = socket.local_addr().ok_or_else(|| {
-                SidecarError::Execution(String::from("EBADF: bad file descriptor"))
-            })?;
-            javascript_net_json_string(
-                json!({
-                    "address": local_addr.ip().to_string(),
-                    "port": local_addr.port(),
-                    "family": socket_addr_family(&local_addr),
-                }),
-                "dgram.address",
-            )
-        }
-        "dgram.setBufferSize" => {
-            let socket_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "dgram.setBufferSize socket id")?;
-            let which =
-                javascript_sync_rpc_arg_str(&request.args, 1, "dgram.setBufferSize buffer kind")?;
-            let size = javascript_sync_rpc_arg_u64(&request.args, 2, "dgram.setBufferSize size")?;
-            let size = usize::try_from(size).map_err(|_| {
-                SidecarError::InvalidState(String::from(
-                    "dgram.setBufferSize size must fit within usize",
-                ))
-            })?;
-            let socket = process.udp_sockets.get_mut(socket_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!("unknown UDP socket {socket_id}"))
-            })?;
-            socket.set_buffer_size(which, size)?;
-            Ok(Value::Null)
-        }
-        "dgram.getBufferSize" => {
-            let socket_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "dgram.getBufferSize socket id")?;
-            let which =
-                javascript_sync_rpc_arg_str(&request.args, 1, "dgram.getBufferSize buffer kind")?;
-            let socket = process.udp_sockets.get(socket_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!("unknown UDP socket {socket_id}"))
-            })?;
-            let size = socket.get_buffer_size(which)?;
-            Ok(json!(size))
-        }
-        other => Err(SidecarError::InvalidState(format!(
-            "unsupported JavaScript dgram sync RPC method {other}"
-        ))),
-    }
-}
-
-#[derive(Debug)]
-struct ClientHttp2StreamState {
-    send_stream: Option<h2::SendStream<Bytes>>,
-}
-
-#[derive(Debug)]
-struct ServerHttp2StreamState {
-    send_response: Option<ServerHttp2Responder>,
-    send_stream: Option<h2::SendStream<Bytes>>,
-}
-
-#[derive(Debug)]
-enum ServerHttp2Responder {
-    Regular(server::SendResponse<Bytes>),
-    Pushed(server::SendPushedResponse<Bytes>),
-}
-
-const HTTP2_DEFAULT_WINDOW_SIZE: u32 = 65_535;
-const HTTP2_POLL_DELAY: Duration = Duration::from_millis(10);
-
-fn http2_runtime_snapshot() -> Http2RuntimeSnapshot {
-    Http2RuntimeSnapshot {
-        effective_local_window_size: HTTP2_DEFAULT_WINDOW_SIZE,
-        local_window_size: HTTP2_DEFAULT_WINDOW_SIZE,
-        remote_window_size: HTTP2_DEFAULT_WINDOW_SIZE,
-        next_stream_id: 1,
-        outbound_queue_size: 1,
-        deflate_dynamic_table_size: 0,
-        inflate_dynamic_table_size: 0,
-    }
-}
-
-fn http2_snapshot_json(snapshot: &Http2SessionSnapshot) -> Result<String, SidecarError> {
-    serde_json::to_string(snapshot)
-        .map_err(|error| SidecarError::Execution(format!("ERR_AGENTOS_NODE_SYNC_RPC: {error}")))
-}
-
-fn http2_event_value(event: &Http2BridgeEvent) -> Result<Value, SidecarError> {
-    serde_json::to_string(event)
-        .map(Value::String)
-        .map_err(|error| SidecarError::Execution(format!("ERR_AGENTOS_NODE_SYNC_RPC: {error}")))
-}
-
-fn push_http2_server_event(
-    shared: &Arc<Mutex<crate::state::Http2SharedState>>,
-    server_id: u64,
-    event: Http2BridgeEvent,
-) {
-    let (ready, wake_session, should_wake) = if let Ok(mut state) = shared.lock() {
-        let queue = state.server_events.entry(server_id).or_default();
-        let should_wake = queue.is_empty();
-        queue.push_back(event);
-        (
-            Some(Arc::clone(&state.ready)),
-            state.event_session.clone(),
-            should_wake,
-        )
-    } else {
-        (None, None, false)
-    };
-    if let Some(ready) = ready {
-        ready.notify_all();
-    }
-    if should_wake {
-        push_http2_retain_wake(wake_session, "server", server_id);
-    }
-}
-
-fn push_http2_session_event(
-    shared: &Arc<Mutex<crate::state::Http2SharedState>>,
-    session_id: u64,
-    event: Http2BridgeEvent,
-) {
-    let (ready, wake_session, should_wake) = if let Ok(mut state) = shared.lock() {
-        let queue = state.session_events.entry(session_id).or_default();
-        let should_wake = queue.is_empty();
-        queue.push_back(event);
-        (
-            Some(Arc::clone(&state.ready)),
-            state.event_session.clone(),
-            should_wake,
-        )
-    } else {
-        (None, None, false)
-    };
-    if let Some(ready) = ready {
-        ready.notify_all();
-    }
-    if should_wake {
-        push_http2_retain_wake(wake_session, "session", session_id);
-    }
-}
-
-fn push_http2_retain_wake(session: Option<V8SessionHandle>, kind: &'static str, id: u64) {
-    let Some(session) = session else {
-        return;
-    };
-    let payload = v8_runtime::json_to_cbor_payload(&json!({
-        "event": "http2",
-        "kind": kind,
-        "id": id,
-    }))
-    .unwrap_or_default();
-    let _ = session.send_stream_event("net_socket", payload);
-}
-
-fn pop_http2_event(
-    queue: &mut BTreeMap<u64, VecDeque<Http2BridgeEvent>>,
-    id: u64,
-) -> Option<Http2BridgeEvent> {
-    queue.get_mut(&id).and_then(VecDeque::pop_front)
-}
-
-fn wait_for_http2_event(
-    shared: &Arc<Mutex<crate::state::Http2SharedState>>,
-    id: u64,
-    is_server: bool,
-    wait_ms: u64,
-) -> Option<Http2BridgeEvent> {
-    let deadline = Instant::now() + Duration::from_millis(wait_ms);
-    let mut state = shared.lock().ok()?;
-    loop {
-        let queue = if is_server {
-            &mut state.server_events
-        } else {
-            &mut state.session_events
-        };
-        if let Some(event) = pop_http2_event(queue, id) {
-            return Some(event);
-        }
-        if wait_ms == 0 {
-            return None;
-        }
-        let now = Instant::now();
-        if now >= deadline {
-            return None;
-        }
-        let remaining = deadline.saturating_duration_since(now);
-        if remaining.is_zero() {
-            return None;
-        }
-        let ready = Arc::clone(&state.ready);
-        state = ready.wait_timeout(state, remaining).ok()?.0;
-    }
-}
-
-fn next_http2_session_id(shared: &mut crate::state::Http2SharedState) -> u64 {
-    shared.next_session_id += 1;
-    shared.next_session_id
-}
-
-fn next_http2_stream_id(shared: &mut crate::state::Http2SharedState) -> u64 {
-    shared.next_stream_id += 1;
-    shared.next_stream_id
-}
-
-fn http2_reason(code: Option<u32>) -> Reason {
-    code.unwrap_or(Reason::NO_ERROR.into()).into()
-}
-
-fn http2_error_payload(message: impl Into<String>) -> String {
-    serde_json::to_string(&json!({
-        "name": "Error",
-        "code": "ERR_HTTP2_ERROR",
-        "message": message.into(),
-    }))
-    .unwrap_or_else(|_| {
-        String::from(
-            "{\"name\":\"Error\",\"code\":\"ERR_HTTP2_ERROR\",\"message\":\"HTTP/2 bridge error\"}",
-        )
-    })
-}
-
-fn http2_socket_snapshot(local_addr: SocketAddr, remote_addr: SocketAddr) -> Http2SocketSnapshot {
-    Http2SocketSnapshot {
-        encrypted: false,
-        allow_half_open: false,
-        local_address: Some(local_addr.ip().to_string()),
-        local_port: Some(local_addr.port()),
-        local_family: Some(socket_addr_family(&local_addr).to_string()),
-        remote_address: Some(remote_addr.ip().to_string()),
-        remote_port: Some(remote_addr.port()),
-        remote_family: Some(socket_addr_family(&remote_addr).to_string()),
-        servername: None,
-        alpn_protocol: Some(String::from("h2c")),
-    }
-}
-
-fn http2_wait_result(kind: &str, id: u64) -> Value {
-    json!({
-        "kind": kind,
-        "id": id,
-    })
-}
-
-fn is_http2_terminal_event(event: &Http2BridgeEvent, is_server: bool, id: u64) -> bool {
-    if is_server {
-        event.kind == "serverClose" && event.id == id
-    } else {
-        event.kind == "sessionClose" && event.id == id
-    }
-}
-
-fn dispatch_http2_wait_loop(
-    process: &ActiveProcess,
-    id: u64,
-    is_server: bool,
-) -> Result<Value, SidecarError> {
-    loop {
-        if let Some(event) = wait_for_http2_event(&process.http2.shared, id, is_server, 50) {
-            let payload = serde_json::to_value(&event).map_err(|error| {
-                SidecarError::Execution(format!("ERR_AGENTOS_NODE_SYNC_RPC: {error}"))
-            })?;
-            process
-                .execution
-                .send_javascript_stream_event("http2", payload.clone())?;
-            if is_http2_terminal_event(&event, is_server, id) {
-                return Ok(payload);
-            }
-            continue;
-        }
-
-        let exists = process
-            .http2
-            .shared
-            .lock()
-            .map(|state| {
-                if is_server {
-                    state.servers.contains_key(&id)
-                } else {
-                    state.sessions.contains_key(&id)
-                }
-            })
-            .unwrap_or(false);
-        if !exists {
-            return Ok(if is_server {
-                http2_wait_result("serverClose", id)
-            } else {
-                http2_wait_result("sessionClose", id)
-            });
-        }
-    }
-}
-
-fn dispatch_http_wait_loop(process: &ActiveProcess, server_id: u64) -> Result<Value, SidecarError> {
-    loop {
-        if !process.http_servers.contains_key(&server_id) {
-            return Ok(json!({
-                "kind": "serverClose",
-                "id": server_id,
-            }));
-        }
-        thread::sleep(Duration::from_millis(25));
-    }
-}
-
-fn http2_settings_from_value(settings: &BTreeMap<String, Value>) -> BTreeMap<String, Value> {
-    settings.clone()
-}
-
-fn parse_http2_headers_json(
-    headers_json: &str,
-    label: &str,
-) -> Result<BTreeMap<String, Value>, SidecarError> {
-    serde_json::from_str::<BTreeMap<String, Value>>(headers_json)
-        .map_err(|error| SidecarError::InvalidState(format!("{label} must be valid JSON: {error}")))
-}
-
-fn apply_http2_header_values(
-    header_map: &mut HeaderMap,
-    name: &str,
-    value: &Value,
-) -> Result<(), SidecarError> {
-    let header_name = HeaderName::from_bytes(name.as_bytes()).map_err(|error| {
-        SidecarError::InvalidState(format!("invalid HTTP/2 header name {name:?}: {error}"))
-    })?;
-    match value {
-        Value::Array(values) => {
-            for value in values {
-                apply_http2_header_values(header_map, name, value)?;
-            }
-        }
-        Value::String(text) => {
-            let value = HeaderValue::from_str(text).map_err(|error| {
-                SidecarError::InvalidState(format!(
-                    "invalid HTTP/2 header value for {name}: {error}"
-                ))
-            })?;
-            header_map.append(header_name.clone(), value);
-        }
-        Value::Number(number) => {
-            let value = HeaderValue::from_str(&number.to_string()).map_err(|error| {
-                SidecarError::InvalidState(format!(
-                    "invalid HTTP/2 numeric header value for {name}: {error}"
-                ))
-            })?;
-            header_map.append(header_name.clone(), value);
-        }
-        Value::Bool(boolean) => {
-            let value = HeaderValue::from_str(if *boolean { "true" } else { "false" }).map_err(
-                |error| {
-                    SidecarError::InvalidState(format!(
-                        "invalid HTTP/2 boolean header value for {name}: {error}"
-                    ))
-                },
-            )?;
-            header_map.append(header_name.clone(), value);
-        }
-        Value::Null => {}
-        Value::Object(_) => {
-            return Err(SidecarError::InvalidState(format!(
-                "unsupported HTTP/2 header object value for {name}"
-            )));
-        }
-    }
-    Ok(())
-}
-
-fn build_http2_request(headers_json: &str) -> Result<Request<()>, SidecarError> {
-    let headers = parse_http2_headers_json(headers_json, "HTTP/2 request headers")?;
-    let method = headers
-        .get(":method")
-        .and_then(Value::as_str)
-        .unwrap_or("GET");
-    let path = headers.get(":path").and_then(Value::as_str).unwrap_or("/");
-    let mut builder = Request::builder()
-        .method(Method::from_bytes(method.as_bytes()).map_err(|error| {
-            SidecarError::InvalidState(format!("invalid HTTP/2 method {method:?}: {error}"))
-        })?)
-        .uri(path.parse::<Uri>().map_err(|error| {
-            SidecarError::InvalidState(format!("invalid HTTP/2 path {path:?}: {error}"))
-        })?);
-    {
-        let header_map = builder.headers_mut().expect("request header map");
-        for (name, value) in &headers {
-            if name.starts_with(':') {
-                continue;
-            }
-            apply_http2_header_values(header_map, name, value)?;
-        }
-    }
-    builder
-        .body(())
-        .map_err(|error| SidecarError::InvalidState(format!("invalid HTTP/2 request: {error}")))
-}
-
-fn build_http2_response(headers_json: &str) -> Result<Response<()>, SidecarError> {
-    let headers = parse_http2_headers_json(headers_json, "HTTP/2 response headers")?;
-    let status = headers
-        .get(":status")
-        .and_then(Value::as_u64)
-        .or_else(|| {
-            headers
-                .get(":status")
-                .and_then(Value::as_str)
-                .and_then(|value| value.parse::<u16>().ok().map(u64::from))
-        })
-        .unwrap_or(200);
-    let mut builder = Response::builder().status(status as u16);
-    {
-        let header_map = builder.headers_mut().expect("response header map");
-        for (name, value) in &headers {
-            if name.starts_with(':') {
-                continue;
-            }
-            apply_http2_header_values(header_map, name, value)?;
-        }
-    }
-    builder.body(()).map_err(|error| {
-        SidecarError::InvalidState(format!("invalid HTTP/2 response headers: {error}"))
-    })
-}
-
-fn serialize_http2_headers_map(
-    pseudo: BTreeMap<String, Value>,
-    headers: &HeaderMap,
-) -> Result<String, SidecarError> {
-    let mut serialized = pseudo;
-    for (name, value) in headers {
-        let name = name.as_str().to_string();
-        let value = Value::String(
-            value
-                .to_str()
-                .map_err(|error| {
-                    SidecarError::Execution(format!("invalid HTTP/2 header value: {error}"))
-                })?
-                .to_owned(),
-        );
-        match serialized.get_mut(&name) {
-            Some(Value::Array(values)) => values.push(value),
-            Some(existing) => {
-                let first = existing.clone();
-                *existing = Value::Array(vec![first, value]);
-            }
-            None => {
-                serialized.insert(name, value);
-            }
-        }
-    }
-    serde_json::to_string(&serialized)
-        .map_err(|error| SidecarError::Execution(format!("ERR_AGENTOS_NODE_SYNC_RPC: {error}")))
-}
-
-fn serialize_http2_request_headers(
-    request: &Request<h2::RecvStream>,
-) -> Result<String, SidecarError> {
-    let mut pseudo = BTreeMap::new();
-    pseudo.insert(
-        String::from(":method"),
-        Value::String(request.method().as_str().to_string()),
-    );
-    pseudo.insert(
-        String::from(":path"),
-        Value::String(
-            request
-                .uri()
-                .path_and_query()
-                .map(|value| value.as_str().to_string())
-                .unwrap_or_else(|| String::from("/")),
-        ),
-    );
-    serialize_http2_headers_map(pseudo, request.headers())
-}
-
-fn serialize_http2_response_headers(
-    response: &Response<h2::RecvStream>,
-) -> Result<String, SidecarError> {
-    let mut pseudo = BTreeMap::new();
-    pseudo.insert(
-        String::from(":status"),
-        Value::Number(serde_json::Number::from(response.status().as_u16())),
-    );
-    serialize_http2_headers_map(pseudo, response.headers())
-}
-
-fn remove_http2_session_resources(
-    shared: &Arc<Mutex<crate::state::Http2SharedState>>,
-    session_id: u64,
-) {
-    if let Ok(mut state) = shared.lock() {
-        state.sessions.remove(&session_id);
-        state.session_events.remove(&session_id);
-        let stream_ids = state
-            .streams
-            .iter()
-            .filter_map(|(stream_id, stream)| {
-                (stream.session_id == session_id).then_some(*stream_id)
-            })
-            .collect::<Vec<_>>();
-        for stream_id in stream_ids {
-            state.streams.remove(&stream_id);
-        }
-    }
-}
-
-fn spawn_http2_client_session(
-    shared: Arc<Mutex<crate::state::Http2SharedState>>,
-    session_id: u64,
-    remote_addr: SocketAddr,
-    tls: Option<JavascriptTlsBridgeOptions>,
-    snapshot: Arc<Mutex<Http2SessionSnapshot>>,
-    mut command_rx: UnboundedReceiver<Http2SessionCommand>,
-) {
-    thread::spawn(move || {
-        let runtime = match TokioRuntimeBuilder::new_current_thread()
-            .enable_all()
-            .build()
-        {
-            Ok(runtime) => runtime,
-            Err(error) => {
-                push_http2_session_event(
-                    &shared,
-                    session_id,
-                    Http2BridgeEvent {
-                        kind: String::from("sessionError"),
-                        id: session_id,
-                        data: Some(http2_error_payload(error.to_string())),
-                        ..Http2BridgeEvent::default()
-                    },
-                );
-                remove_http2_session_resources(&shared, session_id);
-                return;
-            }
-        };
-
-        runtime.block_on(async move {
-            let stream = match tokio::net::TcpStream::connect(remote_addr).await {
-                Ok(stream) => stream,
-                Err(error) => {
-                    push_http2_session_event(
-                        &shared,
-                        session_id,
-                        Http2BridgeEvent {
-                            kind: String::from("sessionError"),
-                            id: session_id,
-                            data: Some(http2_error_payload(error.to_string())),
-                            ..Http2BridgeEvent::default()
-                        },
-                    );
-                    remove_http2_session_resources(&shared, session_id);
-                    return;
-                }
-            };
-
-            let local_addr = match stream.local_addr() {
-                Ok(addr) => addr,
-                Err(error) => {
-                    push_http2_session_event(
-                        &shared,
-                        session_id,
-                        Http2BridgeEvent {
-                            kind: String::from("sessionError"),
-                            id: session_id,
-                            data: Some(http2_error_payload(error.to_string())),
-                            ..Http2BridgeEvent::default()
-                        },
-                    );
-                    remove_http2_session_resources(&shared, session_id);
-                    return;
-                }
-            };
-
-            {
-                let mut snapshot_guard = snapshot.lock().expect("http2 snapshot lock");
-                snapshot_guard.socket = http2_socket_snapshot(local_addr, remote_addr);
-                if let Some(options) = tls.as_ref() {
-                    snapshot_guard.encrypted = true;
-                    snapshot_guard.alpn_protocol = Some(String::from("h2"));
-                    snapshot_guard.socket.encrypted = true;
-                    snapshot_guard.socket.servername = options.servername.clone();
-                    snapshot_guard.socket.alpn_protocol = Some(String::from("h2"));
-                }
-                snapshot_guard.state = http2_runtime_snapshot();
-            }
-            if let Ok(snapshot_json) =
-                http2_snapshot_json(&snapshot.lock().expect("http2 snapshot lock").clone())
-            {
-                push_http2_session_event(
-                    &shared,
-                    session_id,
-                    Http2BridgeEvent {
-                        kind: String::from("sessionConnect"),
-                        id: session_id,
-                        data: Some(snapshot_json),
-                        ..Http2BridgeEvent::default()
-                    },
-                );
-            }
-
-            let io: Pin<Box<dyn Http2AsyncIo>> = if let Some(options) = tls.as_ref() {
-                let server_name = match ServerName::try_from(
-                    options
-                        .servername
-                        .clone()
-                        .unwrap_or_else(|| String::from("localhost")),
-                ) {
-                    Ok(server_name) => server_name,
-                    Err(_) => {
-                        push_http2_session_event(
-                            &shared,
-                            session_id,
-                            Http2BridgeEvent {
-                                kind: String::from("sessionError"),
-                                id: session_id,
-                                data: Some(http2_error_payload("invalid TLS servername")),
-                                ..Http2BridgeEvent::default()
-                            },
-                        );
-                        remove_http2_session_resources(&shared, session_id);
-                        return;
-                    }
-                };
-                let connector = match build_client_tls_config(options) {
-                    Ok(config) => TlsConnector::from(Arc::new(config)),
-                    Err(error) => {
-                        push_http2_session_event(
-                            &shared,
-                            session_id,
-                            Http2BridgeEvent {
-                                kind: String::from("sessionError"),
-                                id: session_id,
-                                data: Some(http2_error_payload(error.to_string())),
-                                ..Http2BridgeEvent::default()
-                            },
-                        );
-                        remove_http2_session_resources(&shared, session_id);
-                        return;
-                    }
-                };
-                match connector.connect(server_name, stream).await {
-                    Ok(tls_stream) => Box::pin(tls_stream),
-                    Err(error) => {
-                        push_http2_session_event(
-                            &shared,
-                            session_id,
-                            Http2BridgeEvent {
-                                kind: String::from("sessionError"),
-                                id: session_id,
-                                data: Some(http2_error_payload(error.to_string())),
-                                ..Http2BridgeEvent::default()
-                            },
-                        );
-                        remove_http2_session_resources(&shared, session_id);
-                        return;
-                    }
-                }
-            } else {
-                Box::pin(stream)
-            };
-
-            let (mut sender, connection) = match client::handshake(io).await {
-                Ok(parts) => parts,
-                Err(error) => {
-                    push_http2_session_event(
-                        &shared,
-                        session_id,
-                        Http2BridgeEvent {
-                            kind: String::from("sessionError"),
-                            id: session_id,
-                            data: Some(http2_error_payload(error.to_string())),
-                            ..Http2BridgeEvent::default()
-                        },
-                    );
-                    remove_http2_session_resources(&shared, session_id);
-                    return;
-                }
-            };
-
-            let (status_tx, mut status_rx) = unbounded_channel::<Result<(), String>>();
-            tokio::spawn(async move {
-                let _ = status_tx.send(connection.await.map_err(|error| error.to_string()));
-            });
-
-            let streams: Arc<Mutex<BTreeMap<u64, ClientHttp2StreamState>>> =
-                Arc::new(Mutex::new(BTreeMap::new()));
-
-            loop {
-                tokio::select! {
-                    Some(result) = status_rx.recv() => {
-                        if let Err(message) = result {
-                            push_http2_session_event(
-                                &shared,
-                                session_id,
-                                Http2BridgeEvent {
-                                    kind: String::from("sessionError"),
-                                    id: session_id,
-                                    data: Some(http2_error_payload(message)),
-                                    ..Http2BridgeEvent::default()
-                                },
-                            );
-                        }
-                        push_http2_session_event(
-                            &shared,
-                            session_id,
-                            Http2BridgeEvent {
-                                kind: String::from("sessionClose"),
-                                id: session_id,
-                                ..Http2BridgeEvent::default()
-                            },
-                        );
-                        remove_http2_session_resources(&shared, session_id);
-                        break;
-                    }
-                    Some(command) = command_rx.recv() => {
-                        match command {
-                            Http2SessionCommand::Request { headers_json, options_json, respond_to } => {
-                                let request = match build_http2_request(&headers_json) {
-                                    Ok(request) => request,
-                                    Err(error) => {
-                                        let _ = respond_to.send(Err(error.to_string()));
-                                        continue;
-                                    }
-                                };
-                                let options: JavascriptHttp2RequestOptions =
-                                    serde_json::from_str(&options_json).unwrap_or_default();
-                                let stream_id = {
-                                    let mut state = shared.lock().expect("http2 shared state");
-                                    let stream_id = next_http2_stream_id(&mut state);
-                                    state.streams.insert(
-                                        stream_id,
-                                        ActiveHttp2Stream {
-                                            session_id,
-                                            paused: Arc::new(AtomicBool::new(false)),
-                                            resume_notify: Arc::new(tokio::sync::Notify::new()),
-                                        },
-                                    );
-                                    stream_id
-                                };
-                                match sender.send_request(request, options.end_stream) {
-                                    Ok((response_future, send_stream)) => {
-                                        if !options.end_stream {
-                                            streams
-                                                .lock()
-                                                .expect("http2 client streams")
-                                                .insert(stream_id, ClientHttp2StreamState { send_stream: Some(send_stream) });
-                                        }
-                                        let shared_clone = Arc::clone(&shared);
-                                        let snapshot_clone = Arc::clone(&snapshot);
-                                        tokio::spawn(async move {
-                                            match response_future.await {
-                                                Ok(response) => {
-                                                    if let Ok(headers_json) = serialize_http2_response_headers(&response) {
-                                                        push_http2_session_event(
-                                                            &shared_clone,
-                                                            session_id,
-                                                            Http2BridgeEvent {
-                                                                kind: String::from("clientResponseHeaders"),
-                                                                id: stream_id,
-                                                                data: Some(headers_json),
-                                                                ..Http2BridgeEvent::default()
-                                                            },
-                                                        );
-                                                    }
-                                                    let mut body = response.into_body();
-                                                    while let Some(chunk) = body.data().await {
-                                                        match chunk {
-                                                            Ok(bytes) => {
-                                                                let pause_state = {
-                                                                    let state = shared_clone.lock().expect("http2 shared state");
-                                                                    state.streams.get(&stream_id).map(|stream| {
-                                                                        (
-                                                                            Arc::clone(&stream.paused),
-                                                                            Arc::clone(&stream.resume_notify),
-                                                                        )
-                                                                    })
-                                                                };
-                                                                if let Some((paused, resume_notify)) = pause_state {
-                                                                    while paused.load(Ordering::SeqCst) {
-                                                                        let notified = resume_notify.notified();
-                                                                        tokio::pin!(notified);
-                                                                        notified.as_mut().enable();
-                                                                        if !paused.load(Ordering::SeqCst) { break; }
-                                                                        let _ = tokio::time::timeout(Duration::from_millis(250), notified).await;
-                                                                    }
-                                                                }
-                                                                let _ = body.flow_control().release_capacity(bytes.len());
-                                                                push_http2_session_event(
-                                                                    &shared_clone,
-                                                                    session_id,
-                                                                    Http2BridgeEvent {
-                                                                        kind: String::from("clientData"),
-                                                                        id: stream_id,
-                                                                        data: Some(base64::engine::general_purpose::STANDARD.encode(bytes)),
-                                                                        ..Http2BridgeEvent::default()
-                                                                    },
-                                                                );
-                                                            }
-                                                            Err(error) => {
-                                                                push_http2_session_event(
-                                                                    &shared_clone,
-                                                                    session_id,
-                                                                    Http2BridgeEvent {
-                                                                        kind: String::from("clientError"),
-                                                                        id: stream_id,
-                                                                        data: Some(http2_error_payload(error.to_string())),
-                                                                        ..Http2BridgeEvent::default()
-                                                                    },
-                                                                );
-                                                                break;
-                                                            }
-                                                        }
-                                                    }
-                                                    {
-                                                        let mut snapshot = snapshot_clone.lock().expect("http2 snapshot lock");
-                                                        snapshot.state.next_stream_id =
-                                                            snapshot.state.next_stream_id.saturating_add(2);
-                                                    }
-                                                    push_http2_session_event(
-                                                        &shared_clone,
-                                                        session_id,
-                                                        Http2BridgeEvent {
-                                                            kind: String::from("clientEnd"),
-                                                            id: stream_id,
-                                                            ..Http2BridgeEvent::default()
-                                                        },
-                                                    );
-                                                    push_http2_session_event(
-                                                        &shared_clone,
-                                                        session_id,
-                                                        Http2BridgeEvent {
-                                                            kind: String::from("clientClose"),
-                                                            id: stream_id,
-                                                            extra_number: Some(0),
-                                                            ..Http2BridgeEvent::default()
-                                                        },
-                                                    );
-                                                    if let Ok(mut state) = shared_clone.lock() {
-                                                        state.streams.remove(&stream_id);
-                                                    }
-                                                }
-                                                Err(error) => {
-                                                    push_http2_session_event(
-                                                        &shared_clone,
-                                                        session_id,
-                                                        Http2BridgeEvent {
-                                                            kind: String::from("clientError"),
-                                                            id: stream_id,
-                                                            data: Some(http2_error_payload(error.to_string())),
-                                                            ..Http2BridgeEvent::default()
-                                                        },
-                                                    );
-                                                    push_http2_session_event(
-                                                        &shared_clone,
-                                                        session_id,
-                                                        Http2BridgeEvent {
-                                                            kind: String::from("clientClose"),
-                                                            id: stream_id,
-                                                            extra_number: Some(u32::from(Reason::INTERNAL_ERROR) as u64),
-                                                            ..Http2BridgeEvent::default()
-                                                        },
-                                                    );
-                                                    if let Ok(mut state) = shared_clone.lock() {
-                                                        state.streams.remove(&stream_id);
-                                                    }
-                                                }
-                                            }
-                                        });
-                                        let _ = respond_to.send(Ok(json!(stream_id)));
-                                    }
-                                    Err(error) => {
-                                        if let Ok(mut state) = shared.lock() {
-                                            state.streams.remove(&stream_id);
-                                        }
-                                        let _ = respond_to.send(Err(error.to_string()));
-                                    }
-                                }
-                            }
-                            Http2SessionCommand::Settings { settings_json, respond_to } => {
-                                let settings = serde_json::from_str::<BTreeMap<String, Value>>(&settings_json)
-                                    .unwrap_or_default();
-                                {
-                                    let mut snapshot = snapshot.lock().expect("http2 snapshot lock");
-                                    snapshot.local_settings = http2_settings_from_value(&settings);
-                                }
-                                if let Ok(headers_json) = serde_json::to_string(&settings) {
-                                    push_http2_session_event(
-                                        &shared,
-                                        session_id,
-                                        Http2BridgeEvent {
-                                            kind: String::from("sessionLocalSettings"),
-                                            id: session_id,
-                                            data: Some(headers_json.clone()),
-                                            ..Http2BridgeEvent::default()
-                                        },
-                                    );
-                                    push_http2_session_event(
-                                        &shared,
-                                        session_id,
-                                        Http2BridgeEvent {
-                                            kind: String::from("sessionSettingsAck"),
-                                            id: session_id,
-                                            ..Http2BridgeEvent::default()
-                                        },
-                                    );
-                                }
-                                let _ = respond_to.send(Ok(Value::Null));
-                            }
-                            Http2SessionCommand::SetLocalWindowSize { size, respond_to } => {
-                                {
-                                    let mut snapshot = snapshot.lock().expect("http2 snapshot lock");
-                                    snapshot.state.local_window_size = size;
-                                    snapshot.state.effective_local_window_size = size;
-                                }
-                                let value = snapshot
-                                    .lock()
-                                    .ok()
-                                    .and_then(|snapshot| http2_snapshot_json(&snapshot.clone()).ok())
-                                    .map(Value::String)
-                                    .unwrap_or(Value::Null);
-                                let _ = respond_to.send(Ok(value));
-                            }
-                            Http2SessionCommand::Goaway { error_code, last_stream_id, opaque_data, respond_to } => {
-                                push_http2_session_event(
-                                    &shared,
-                                    session_id,
-                                    Http2BridgeEvent {
-                                        kind: String::from("sessionGoaway"),
-                                        id: session_id,
-                                        data: opaque_data.map(|value| {
-                                            base64::engine::general_purpose::STANDARD.encode(value)
-                                        }),
-                                        extra_number: Some(error_code as u64),
-                                        flags: Some(last_stream_id as u64),
-                                        ..Http2BridgeEvent::default()
-                                    },
-                                );
-                                let _ = respond_to.send(Ok(Value::Null));
-                            }
-                            Http2SessionCommand::Close { respond_to, .. } => {
-                                let _ = respond_to.send(Ok(Value::Null));
-                                push_http2_session_event(
-                                    &shared,
-                                    session_id,
-                                    Http2BridgeEvent {
-                                        kind: String::from("sessionClose"),
-                                        id: session_id,
-                                        ..Http2BridgeEvent::default()
-                                    },
-                                );
-                                remove_http2_session_resources(&shared, session_id);
-                                break;
-                            }
-                            Http2SessionCommand::StreamWrite { stream_id, chunk, end_stream, respond_to } => {
-                                let result = streams
-                                    .lock()
-                                    .expect("http2 client streams")
-                                    .get_mut(&stream_id)
-                                    .and_then(|stream| stream.send_stream.as_mut())
-                                    .ok_or_else(|| SidecarError::InvalidState(format!("unknown HTTP/2 client stream {stream_id}")))
-                                    .and_then(|stream| stream.send_data(Bytes::from(chunk), end_stream).map_err(|error| SidecarError::Execution(error.to_string())));
-                                match result {
-                                    Ok(()) => {
-                                        if end_stream {
-                                            streams.lock().expect("http2 client streams").remove(&stream_id);
-                                        }
-                                        let _ = respond_to.send(Ok(Value::Bool(true)));
-                                    }
-                                    Err(error) => {
-                                        let _ = respond_to.send(Err(error.to_string()));
-                                    }
-                                }
-                            }
-                            Http2SessionCommand::StreamClose { stream_id, error_code, respond_to } => {
-                                let mut streams = streams.lock().expect("http2 client streams");
-                                let Some(mut state) = streams.remove(&stream_id) else {
-                                    let _ = respond_to.send(Err(format!("unknown HTTP/2 client stream {stream_id}")));
-                                    continue;
-                                };
-                                if let Some(stream) = state.send_stream.as_mut() {
-                                    stream.send_reset(http2_reason(error_code));
-                                }
-                                if let Ok(mut state) = shared.lock() {
-                                    state.streams.remove(&stream_id);
-                                }
-                                push_http2_session_event(
-                                    &shared,
-                                    session_id,
-                                    Http2BridgeEvent {
-                                        kind: String::from("clientClose"),
-                                        id: stream_id,
-                                        extra_number: Some(u32::from(http2_reason(error_code)) as u64),
-                                        ..Http2BridgeEvent::default()
-                                    },
-                                );
-                                let _ = respond_to.send(Ok(Value::Null));
-                            }
-                            Http2SessionCommand::StreamRespond { respond_to, .. }
-                            | Http2SessionCommand::StreamPush { respond_to, .. }
-                            | Http2SessionCommand::StreamRespondWithFile { respond_to, .. } => {
-                                let _ = respond_to.send(Err(String::from("HTTP/2 client streams cannot send server responses")));
-                            }
-                        }
-                    }
-                    else => break,
-                }
-            }
-        });
-    });
-}
-
-fn spawn_http2_server_session(
-    shared: Arc<Mutex<crate::state::Http2SharedState>>,
-    server_id: u64,
-    session_id: u64,
-    stream: TcpStream,
-    tls: Option<JavascriptTlsBridgeOptions>,
-    snapshot: Arc<Mutex<Http2SessionSnapshot>>,
-    mut command_rx: UnboundedReceiver<Http2SessionCommand>,
-) {
-    thread::spawn(move || {
-        let runtime = match TokioRuntimeBuilder::new_current_thread()
-            .enable_all()
-            .build()
-        {
-            Ok(runtime) => runtime,
-            Err(error) => {
-                push_http2_server_event(
-                    &shared,
-                    server_id,
-                    Http2BridgeEvent {
-                        kind: String::from("serverStreamError"),
-                        id: session_id,
-                        data: Some(http2_error_payload(error.to_string())),
-                        ..Http2BridgeEvent::default()
-                    },
-                );
-                remove_http2_session_resources(&shared, session_id);
-                return;
-            }
-        };
-
-        runtime.block_on(async move {
-            if let Err(error) = stream.set_nonblocking(true) {
-                push_http2_server_event(
-                    &shared,
-                    server_id,
-                    Http2BridgeEvent {
-                        kind: String::from("serverStreamError"),
-                        id: session_id,
-                        data: Some(http2_error_payload(error.to_string())),
-                        ..Http2BridgeEvent::default()
-                    },
-                );
-                remove_http2_session_resources(&shared, session_id);
-                return;
-            }
-            let stream = match tokio::net::TcpStream::from_std(stream) {
-                Ok(stream) => stream,
-                Err(error) => {
-                    push_http2_server_event(
-                        &shared,
-                        server_id,
-                        Http2BridgeEvent {
-                            kind: String::from("serverStreamError"),
-                            id: session_id,
-                            data: Some(http2_error_payload(error.to_string())),
-                            ..Http2BridgeEvent::default()
-                        },
-                    );
-                    remove_http2_session_resources(&shared, session_id);
-                    return;
-                }
-            };
-            let local_addr = match stream.local_addr() {
-                Ok(addr) => addr,
-                Err(error) => {
-                    push_http2_server_event(
-                        &shared,
-                        server_id,
-                        Http2BridgeEvent {
-                            kind: String::from("serverStreamError"),
-                            id: session_id,
-                            data: Some(http2_error_payload(error.to_string())),
-                            ..Http2BridgeEvent::default()
-                        },
-                    );
-                    remove_http2_session_resources(&shared, session_id);
-                    return;
-                }
-            };
-            let remote_addr = match stream.peer_addr() {
-                Ok(addr) => addr,
-                Err(error) => {
-                    push_http2_server_event(
-                        &shared,
-                        server_id,
-                        Http2BridgeEvent {
-                            kind: String::from("serverStreamError"),
-                            id: session_id,
-                            data: Some(http2_error_payload(error.to_string())),
-                            ..Http2BridgeEvent::default()
-                        },
-                    );
-                    remove_http2_session_resources(&shared, session_id);
-                    return;
-                }
-            };
-            {
-                let mut snapshot_guard = snapshot.lock().expect("http2 snapshot lock");
-                snapshot_guard.socket = http2_socket_snapshot(local_addr, remote_addr);
-                if tls.is_some() {
-                    snapshot_guard.encrypted = true;
-                    snapshot_guard.alpn_protocol = Some(String::from("h2"));
-                    snapshot_guard.socket.encrypted = true;
-                    snapshot_guard.socket.alpn_protocol = Some(String::from("h2"));
-                }
-                snapshot_guard.state = http2_runtime_snapshot();
-            }
-            if let Ok(snapshot_json) =
-                http2_snapshot_json(&snapshot.lock().expect("http2 snapshot lock").clone())
-            {
-                push_http2_server_event(
-                    &shared,
-                    server_id,
-                    Http2BridgeEvent {
-                        kind: String::from(if tls.is_some() {
-                            "serverSecureConnection"
-                        } else {
-                            "serverConnection"
-                        }),
-                        id: server_id,
-                        data: Some(serde_json::to_string(&http2_socket_snapshot(local_addr, remote_addr)).unwrap_or_default()),
-                        ..Http2BridgeEvent::default()
-                    },
-                );
-                push_http2_server_event(
-                    &shared,
-                    server_id,
-                    Http2BridgeEvent {
-                        kind: String::from("serverSession"),
-                        id: server_id,
-                        data: Some(snapshot_json),
-                        extra_number: Some(session_id),
-                        ..Http2BridgeEvent::default()
-                    },
-                );
-            }
-
-            let io: Pin<Box<dyn Http2AsyncIo>> = if let Some(options) = tls.as_ref() {
-                let acceptor = match build_server_tls_config(options) {
-                    Ok(config) => TlsAcceptor::from(Arc::new(config)),
-                    Err(error) => {
-                        push_http2_server_event(
-                            &shared,
-                            server_id,
-                            Http2BridgeEvent {
-                                kind: String::from("serverStreamError"),
-                                id: session_id,
-                                data: Some(http2_error_payload(error.to_string())),
-                                ..Http2BridgeEvent::default()
-                            },
-                        );
-                        remove_http2_session_resources(&shared, session_id);
-                        return;
-                    }
-                };
-                match acceptor.accept(stream).await {
-                    Ok(tls_stream) => Box::pin(tls_stream),
-                    Err(error) => {
-                        push_http2_server_event(
-                            &shared,
-                            server_id,
-                            Http2BridgeEvent {
-                                kind: String::from("serverStreamError"),
-                                id: session_id,
-                                data: Some(http2_error_payload(error.to_string())),
-                                ..Http2BridgeEvent::default()
-                            },
-                        );
-                        remove_http2_session_resources(&shared, session_id);
-                        return;
-                    }
-                }
-            } else {
-                Box::pin(stream)
-            };
-
-            let mut connection = match server::handshake(io).await {
-                Ok(connection) => connection,
-                Err(error) => {
-                    push_http2_server_event(
-                        &shared,
-                        server_id,
-                        Http2BridgeEvent {
-                            kind: String::from("serverStreamError"),
-                            id: session_id,
-                            data: Some(http2_error_payload(error.to_string())),
-                            ..Http2BridgeEvent::default()
-                        },
-                    );
-                    remove_http2_session_resources(&shared, session_id);
-                    return;
-                }
-            };
-
-            let streams: Arc<Mutex<BTreeMap<u64, ServerHttp2StreamState>>> =
-                Arc::new(Mutex::new(BTreeMap::new()));
-
-            loop {
-                tokio::select! {
-                    incoming = connection.accept() => {
-                        match incoming {
-                            Some(Ok((request, respond))) => {
-                                let headers_json = match serialize_http2_request_headers(&request) {
-                                    Ok(headers) => headers,
-                                    Err(error) => {
-                                        push_http2_server_event(
-                                            &shared,
-                                            server_id,
-                                            Http2BridgeEvent {
-                                                kind: String::from("serverStreamError"),
-                                                id: server_id,
-                                                data: Some(http2_error_payload(error.to_string())),
-                                                ..Http2BridgeEvent::default()
-                                            },
-                                        );
-                                        continue;
-                                    }
-                                };
-                                let stream_id = {
-                                    let mut state = shared.lock().expect("http2 shared state");
-                                    let stream_id = next_http2_stream_id(&mut state);
-                                    state.streams.insert(
-                                        stream_id,
-                                        ActiveHttp2Stream {
-                                            session_id,
-                                            paused: Arc::new(AtomicBool::new(false)),
-                                            resume_notify: Arc::new(tokio::sync::Notify::new()),
-                                        },
-                                    );
-                                    stream_id
-                                };
-                                streams.lock().expect("http2 server streams").insert(
-                                    stream_id,
-                                    ServerHttp2StreamState {
-                                        send_response: Some(ServerHttp2Responder::Regular(respond)),
-                                        send_stream: None,
-                                    },
-                                );
-                                let snapshot_json = snapshot
-                                    .lock()
-                                    .ok()
-                                    .and_then(|snapshot| http2_snapshot_json(&snapshot.clone()).ok());
-                                push_http2_server_event(
-                                    &shared,
-                                    server_id,
-                                    Http2BridgeEvent {
-                                        kind: String::from("serverStream"),
-                                        id: server_id,
-                                        data: Some(stream_id.to_string()),
-                                        extra: snapshot_json,
-                                        extra_number: Some(session_id),
-                                        extra_headers: Some(headers_json),
-                                        flags: Some(0),
-                                    },
-                                );
-                                let shared_clone = Arc::clone(&shared);
-                                tokio::spawn(async move {
-                                    let mut body = request.into_body();
-                                    while let Some(chunk) = body.data().await {
-                                        match chunk {
-                                            Ok(bytes) => {
-                                                let pause_state = {
-                                                    let state = shared_clone.lock().expect("http2 shared state");
-                                                    state.streams.get(&stream_id).map(|stream| {
-                                                        (
-                                                            Arc::clone(&stream.paused),
-                                                            Arc::clone(&stream.resume_notify),
-                                                        )
-                                                    })
-                                                };
-                                                if let Some((paused, resume_notify)) = pause_state {
-                                                    while paused.load(Ordering::SeqCst) {
-                                                        let notified = resume_notify.notified();
-                                                        tokio::pin!(notified);
-                                                        notified.as_mut().enable();
-                                                        if !paused.load(Ordering::SeqCst) { break; }
-                                                        let _ = tokio::time::timeout(Duration::from_millis(250), notified).await;
-                                                    }
-                                                }
-                                                let _ = body.flow_control().release_capacity(bytes.len());
-                                                push_http2_server_event(
-                                                    &shared_clone,
-                                                    server_id,
-                                                    Http2BridgeEvent {
-                                                        kind: String::from("serverStreamData"),
-                                                        id: stream_id,
-                                                        data: Some(base64::engine::general_purpose::STANDARD.encode(bytes)),
-                                                        ..Http2BridgeEvent::default()
-                                                    },
-                                                );
-                                            }
-                                            Err(error) => {
-                                                push_http2_server_event(
-                                                    &shared_clone,
-                                                    server_id,
-                                                    Http2BridgeEvent {
-                                                        kind: String::from("serverStreamError"),
-                                                        id: stream_id,
-                                                        data: Some(http2_error_payload(error.to_string())),
-                                                        ..Http2BridgeEvent::default()
-                                                    },
-                                                );
-                                                break;
-                                            }
-                                        }
-                                    }
-                                    push_http2_server_event(
-                                        &shared_clone,
-                                        server_id,
-                                        Http2BridgeEvent {
-                                            kind: String::from("serverStreamEnd"),
-                                            id: stream_id,
-                                            ..Http2BridgeEvent::default()
-                                        },
-                                    );
-                                });
-                            }
-                            Some(Err(error)) => {
-                                push_http2_server_event(
-                                    &shared,
-                                    server_id,
-                                    Http2BridgeEvent {
-                                        kind: String::from("serverStreamError"),
-                                        id: server_id,
-                                        data: Some(http2_error_payload(error.to_string())),
-                                        ..Http2BridgeEvent::default()
-                                    },
-                                );
-                                break;
-                            }
-                            None => {
-                                push_http2_server_event(
-                                    &shared,
-                                    server_id,
-                                    Http2BridgeEvent {
-                                        kind: String::from("sessionClose"),
-                                        id: session_id,
-                                        ..Http2BridgeEvent::default()
-                                    },
-                                );
-                                remove_http2_session_resources(&shared, session_id);
-                                break;
-                            }
-                        }
-                    }
-                    Some(command) = command_rx.recv() => {
-                        match command {
-                            Http2SessionCommand::Settings { settings_json, respond_to } => {
-                                let settings = serde_json::from_str::<BTreeMap<String, Value>>(&settings_json)
-                                    .unwrap_or_default();
-                                if let Some(initial_window_size) = settings
-                                    .get("initialWindowSize")
-                                    .and_then(Value::as_u64)
-                                {
-                                    let _ = connection.set_initial_window_size(initial_window_size as u32);
-                                }
-                                {
-                                    let mut snapshot = snapshot.lock().expect("http2 snapshot lock");
-                                    snapshot.local_settings = http2_settings_from_value(&settings);
-                                }
-                                if let Ok(headers_json) = serde_json::to_string(&settings) {
-                                    push_http2_session_event(
-                                        &shared,
-                                        session_id,
-                                        Http2BridgeEvent {
-                                            kind: String::from("sessionLocalSettings"),
-                                            id: session_id,
-                                            data: Some(headers_json),
-                                            ..Http2BridgeEvent::default()
-                                        },
-                                    );
-                                }
-                                let _ = respond_to.send(Ok(Value::Null));
-                            }
-                            Http2SessionCommand::SetLocalWindowSize { size, respond_to } => {
-                                connection.set_target_window_size(size);
-                                {
-                                    let mut snapshot = snapshot.lock().expect("http2 snapshot lock");
-                                    snapshot.state.local_window_size = size;
-                                    snapshot.state.effective_local_window_size = size;
-                                }
-                                let value = snapshot
-                                    .lock()
-                                    .ok()
-                                    .and_then(|snapshot| http2_snapshot_json(&snapshot.clone()).ok())
-                                    .map(Value::String)
-                                    .unwrap_or(Value::Null);
-                                let _ = respond_to.send(Ok(value));
-                            }
-                            Http2SessionCommand::Goaway { error_code, last_stream_id, opaque_data, respond_to } => {
-                                connection.abrupt_shutdown(http2_reason(Some(error_code)));
-                                push_http2_session_event(
-                                    &shared,
-                                    session_id,
-                                    Http2BridgeEvent {
-                                        kind: String::from("sessionGoaway"),
-                                        id: session_id,
-                                        data: opaque_data.map(|value| {
-                                            base64::engine::general_purpose::STANDARD.encode(value)
-                                        }),
-                                        extra_number: Some(error_code as u64),
-                                        flags: Some(last_stream_id as u64),
-                                        ..Http2BridgeEvent::default()
-                                    },
-                                );
-                                let _ = respond_to.send(Ok(Value::Null));
-                            }
-                            Http2SessionCommand::Close { abrupt, respond_to } => {
-                                if abrupt {
-                                    connection.abrupt_shutdown(Reason::NO_ERROR);
-                                } else {
-                                    connection.graceful_shutdown();
-                                }
-                                let _ = respond_to.send(Ok(Value::Null));
-                                push_http2_session_event(
-                                    &shared,
-                                    session_id,
-                                    Http2BridgeEvent {
-                                        kind: String::from("sessionClose"),
-                                        id: session_id,
-                                        ..Http2BridgeEvent::default()
-                                    },
-                                );
-                                remove_http2_session_resources(&shared, session_id);
-                                break;
-                            }
-                            Http2SessionCommand::StreamRespond { stream_id, headers_json, respond_to } => {
-                                let response = match build_http2_response(&headers_json) {
-                                    Ok(response) => response,
-                                    Err(error) => {
-                                        let _ = respond_to.send(Err(error.to_string()));
-                                        continue;
-                                    }
-                                };
-                                let mut streams = streams.lock().expect("http2 server streams");
-                                let Some(state) = streams.get_mut(&stream_id) else {
-                                    let _ = respond_to.send(Err(format!("unknown HTTP/2 server stream {stream_id}")));
-                                    continue;
-                                };
-                                let Some(send_response) = state.send_response.as_mut() else {
-                                    let _ = respond_to.send(Err(format!("HTTP/2 server stream {stream_id} already responded")));
-                                    continue;
-                                };
-                                match match send_response {
-                                    ServerHttp2Responder::Regular(send_response) => {
-                                        send_response.send_response(response, false)
-                                    }
-                                    ServerHttp2Responder::Pushed(send_response) => {
-                                        send_response.send_response(response, false)
-                                    }
-                                } {
-                                    Ok(send_stream) => {
-                                        state.send_stream = Some(send_stream);
-                                        state.send_response = None;
-                                        let _ = respond_to.send(Ok(Value::Null));
-                                    }
-                                    Err(error) => {
-                                        let _ = respond_to.send(Err(error.to_string()));
-                                    }
-                                }
-                            }
-                            Http2SessionCommand::StreamPush { stream_id, headers_json, respond_to } => {
-                                let request = match build_http2_request(&headers_json) {
-                                    Ok(request) => request,
-                                    Err(error) => {
-                                        let _ = respond_to.send(Err(error.to_string()));
-                                        continue;
-                                    }
-                                };
-                                let mut streams_guard = streams.lock().expect("http2 server streams");
-                                let Some(state) = streams_guard.get_mut(&stream_id) else {
-                                    let _ = respond_to.send(Err(format!("unknown HTTP/2 server stream {stream_id}")));
-                                    continue;
-                                };
-                                let Some(send_response) = state.send_response.as_mut() else {
-                                    let _ = respond_to.send(Err(format!("HTTP/2 server stream {stream_id} cannot push after responding")));
-                                    continue;
-                                };
-                                let ServerHttp2Responder::Regular(send_response) = send_response else {
-                                    let _ = respond_to.send(Err(format!("HTTP/2 pushed stream {stream_id} cannot create nested push promises")));
-                                    continue;
-                                };
-                                match send_response.push_request(request) {
-                                    Ok(pushed) => {
-                                        let pushed_stream_id = {
-                                            let mut state = shared.lock().expect("http2 shared state");
-                                            let pushed_stream_id = next_http2_stream_id(&mut state);
-                                            state.streams.insert(
-                                                pushed_stream_id,
-                                                ActiveHttp2Stream {
-                                                    session_id,
-                                                    paused: Arc::new(AtomicBool::new(false)),
-                                                    resume_notify: Arc::new(tokio::sync::Notify::new()),
-                                                },
-                                            );
-                                            pushed_stream_id
-                                        };
-                                        streams_guard.insert(
-                                            pushed_stream_id,
-                                            ServerHttp2StreamState {
-                                                send_response: Some(ServerHttp2Responder::Pushed(pushed)),
-                                                send_stream: None,
-                                            },
-                                        );
-                                        let _ = respond_to.send(Ok(json!({
-                                            "streamId": pushed_stream_id,
-                                            "headers": headers_json,
-                                        }).to_string().into()));
-                                    }
-                                    Err(error) => {
-                                        let _ = respond_to.send(Err(error.to_string()));
-                                    }
-                                }
-                            }
-                            Http2SessionCommand::StreamWrite { stream_id, chunk, end_stream, respond_to } => {
-                                let mut streams = streams.lock().expect("http2 server streams");
-                                let Some(state) = streams.get_mut(&stream_id) else {
-                                    let _ = respond_to.send(Err(format!("unknown HTTP/2 server stream {stream_id}")));
-                                    continue;
-                                };
-                                let Some(send_stream) = state.send_stream.as_mut() else {
-                                    let _ = respond_to.send(Err(format!("HTTP/2 server stream {stream_id} has not sent response headers")));
-                                    continue;
-                                };
-                                match send_stream.send_data(Bytes::from(chunk), end_stream) {
-                                    Ok(()) => {
-                                        if end_stream {
-                                            streams.remove(&stream_id);
-                                            if let Ok(mut state) = shared.lock() {
-                                                state.streams.remove(&stream_id);
-                                            }
-                                            push_http2_server_event(
-                                                &shared,
-                                                server_id,
-                                                Http2BridgeEvent {
-                                                    kind: String::from("serverStreamClose"),
-                                                    id: stream_id,
-                                                    extra_number: Some(0),
-                                                    ..Http2BridgeEvent::default()
-                                                },
-                                            );
-                                        }
-                                        let _ = respond_to.send(Ok(Value::Bool(true)));
-                                    }
-                                    Err(error) => {
-                                        let _ = respond_to.send(Err(error.to_string()));
-                                    }
-                                }
-                            }
-                            Http2SessionCommand::StreamClose { stream_id, error_code, respond_to } => {
-                                let mut streams_guard = streams.lock().expect("http2 server streams");
-                                let Some(mut state) = streams_guard.remove(&stream_id) else {
-                                    let _ = respond_to.send(Err(format!("unknown HTTP/2 server stream {stream_id}")));
-                                    continue;
-                                };
-                                let reason = http2_reason(error_code);
-                                if let Some(send_stream) = state.send_stream.as_mut() {
-                                    send_stream.send_reset(reason);
-                                }
-                                if let Some(send_response) = state.send_response.as_mut() {
-                                    match send_response {
-                                        ServerHttp2Responder::Regular(send_response) => {
-                                            send_response.send_reset(reason)
-                                        }
-                                        ServerHttp2Responder::Pushed(send_response) => {
-                                            send_response.send_reset(reason)
-                                        }
-                                    }
-                                }
-                                if let Ok(mut shared_guard) = shared.lock() {
-                                    shared_guard.streams.remove(&stream_id);
-                                }
-                                push_http2_server_event(
-                                    &shared,
-                                    server_id,
-                                    Http2BridgeEvent {
-                                        kind: String::from("serverStreamClose"),
-                                        id: stream_id,
-                                        extra_number: Some(u32::from(reason) as u64),
-                                        ..Http2BridgeEvent::default()
-                                    },
-                                );
-                                let _ = respond_to.send(Ok(Value::Null));
-                            }
-                            Http2SessionCommand::StreamRespondWithFile { stream_id, body, headers_json, options_json, respond_to } => {
-                                let options: JavascriptHttp2FileResponseOptions =
-                                    serde_json::from_str(&options_json).unwrap_or_default();
-                                let response = match build_http2_response(&headers_json) {
-                                    Ok(response) => response,
-                                    Err(error) => {
-                                        let _ = respond_to.send(Err(error.to_string()));
-                                        continue;
-                                    }
-                                };
-                                let offset = usize::try_from(options.offset.unwrap_or_default()).unwrap_or(0);
-                                let body = if offset >= body.len() {
-                                    Vec::new()
-                                } else {
-                                    let body = &body[offset..];
-                                    match options.length {
-                                        Some(length) if length >= 0 => {
-                                            body[..body.len().min(length as usize)].to_vec()
-                                        }
-                                        _ => body.to_vec(),
-                                    }
-                                };
-                                let mut streams_guard = streams.lock().expect("http2 server streams");
-                                let Some(state) = streams_guard.get_mut(&stream_id) else {
-                                    let _ = respond_to.send(Err(format!("unknown HTTP/2 server stream {stream_id}")));
-                                    continue;
-                                };
-                                let Some(send_response) = state.send_response.as_mut() else {
-                                    let _ = respond_to.send(Err(format!("HTTP/2 server stream {stream_id} already responded")));
-                                    continue;
-                                };
-                                match match send_response {
-                                    ServerHttp2Responder::Regular(send_response) => {
-                                        send_response.send_response(response, body.is_empty())
-                                    }
-                                    ServerHttp2Responder::Pushed(send_response) => {
-                                        send_response.send_response(response, body.is_empty())
-                                    }
-                                } {
-                                    Ok(mut send_stream) => {
-                                        state.send_response = None;
-                                        if body.is_empty() {
-                                            streams_guard.remove(&stream_id);
-                                            if let Ok(mut shared_guard) = shared.lock() {
-                                                shared_guard.streams.remove(&stream_id);
-                                            }
-                                        } else {
-                                            if let Err(error) = send_stream.send_data(Bytes::from(body), true) {
-                                                let _ = respond_to.send(Err(error.to_string()));
-                                                continue;
-                                            }
-                                            streams_guard.remove(&stream_id);
-                                            if let Ok(mut shared_guard) = shared.lock() {
-                                                shared_guard.streams.remove(&stream_id);
-                                            }
-                                        }
-                                        push_http2_server_event(
-                                            &shared,
-                                            server_id,
-                                            Http2BridgeEvent {
-                                                kind: String::from("serverStreamClose"),
-                                                id: stream_id,
-                                                extra_number: Some(0),
-                                                ..Http2BridgeEvent::default()
-                                            },
-                                        );
-                                        let _ = respond_to.send(Ok(Value::Null));
-                                    }
-                                    Err(error) => {
-                                        let _ = respond_to.send(Err(error.to_string()));
-                                    }
-                                }
-                            }
-                            Http2SessionCommand::Request { respond_to, .. } => {
-                                let _ = respond_to.send(Err(String::from("HTTP/2 server sessions cannot initiate client requests")));
-                            }
-                        }
-                    }
-                    else => break,
-                }
-            }
-        });
-    });
-}
-
-fn spawn_http2_server_accept_loop(
-    shared: Arc<Mutex<crate::state::Http2SharedState>>,
-    server_id: u64,
-    listener: TcpListener,
-) {
-    thread::spawn(move || {
-        let listener = listener;
-        loop {
-            let closed = shared
-                .lock()
-                .ok()
-                .and_then(|state| {
-                    state
-                        .servers
-                        .get(&server_id)
-                        .map(|server| server.closed.load(Ordering::SeqCst))
-                })
-                .unwrap_or(true);
-            if closed {
-                break;
-            }
-            match listener.accept() {
-                Ok((stream, _)) => {
-                    let (command_tx, command_rx) = unbounded_channel();
-                    let (guest_local_addr, secure, tls) = {
-                        let state = shared.lock().expect("http2 shared state");
-                        let server = state.servers.get(&server_id).expect("http2 server state");
-                        (server.guest_local_addr, server.secure, server.tls.clone())
-                    };
-                    let (local_addr, remote_addr) = match (stream.local_addr(), stream.peer_addr())
-                    {
-                        (Ok(local_addr), Ok(remote_addr)) => (local_addr, remote_addr),
-                        _ => continue,
-                    };
-                    let session_snapshot = Arc::new(Mutex::new(Http2SessionSnapshot {
-                        encrypted: secure,
-                        alpn_protocol: Some(if secure {
-                            String::from("h2")
-                        } else {
-                            String::from("h2c")
-                        }),
-                        local_settings: BTreeMap::new(),
-                        remote_settings: BTreeMap::new(),
-                        state: http2_runtime_snapshot(),
-                        socket: Http2SocketSnapshot {
-                            local_address: Some(guest_local_addr.ip().to_string()),
-                            local_port: Some(guest_local_addr.port()),
-                            local_family: Some(socket_addr_family(&guest_local_addr).to_string()),
-                            remote_address: Some(remote_addr.ip().to_string()),
-                            remote_port: Some(remote_addr.port()),
-                            remote_family: Some(socket_addr_family(&remote_addr).to_string()),
-                            ..http2_socket_snapshot(local_addr, remote_addr)
-                        },
-                        ..Http2SessionSnapshot::default()
-                    }));
-                    let session_id = {
-                        let mut state = shared.lock().expect("http2 shared state");
-                        let session_id = next_http2_session_id(&mut state);
-                        state
-                            .sessions
-                            .insert(session_id, ActiveHttp2Session { command_tx });
-                        session_id
-                    };
-                    spawn_http2_server_session(
-                        Arc::clone(&shared),
-                        server_id,
-                        session_id,
-                        stream,
-                        tls,
-                        session_snapshot,
-                        command_rx,
-                    );
-                }
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                    wait_fd_readable_until(
-                        listener.as_fd(),
-                        Instant::now() + Duration::from_millis(100),
-                    );
-                }
-                Err(error) => {
-                    push_http2_server_event(
-                        &shared,
-                        server_id,
-                        Http2BridgeEvent {
-                            kind: String::from("serverStreamError"),
-                            id: server_id,
-                            data: Some(http2_error_payload(error.to_string())),
-                            ..Http2BridgeEvent::default()
-                        },
-                    );
-                    // Persistent accept errors (e.g. EMFILE) leave the fd readable, so a
-                    // readiness wait would return immediately and spin; keep the throttle.
-                    thread::sleep(HTTP2_POLL_DELAY);
-                }
-            }
-        }
-    });
-}
-
-fn send_http2_command(
-    session: &ActiveHttp2Session,
-    command: impl FnOnce(Sender<Result<Value, String>>) -> Http2SessionCommand,
-) -> Result<Value, SidecarError> {
-    let (respond_to, response_rx) = mpsc::channel();
-    session.command_tx.send(command(respond_to)).map_err(|_| {
-        SidecarError::InvalidState(String::from("HTTP/2 session command channel closed"))
-    })?;
-    response_rx
-        .recv_timeout(Duration::from_secs(30))
-        .map_err(|_| {
-            SidecarError::Execution(String::from("timed out waiting for HTTP/2 session command"))
-        })?
-        .map_err(SidecarError::Execution)
-}
-
-fn parse_http2_server_listen_payload(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<JavascriptHttp2ServerListenRequest, SidecarError> {
-    let payload_json =
-        javascript_sync_rpc_arg_str(&request.args, 0, "net.http2_server_listen payload")?;
-    serde_json::from_str(payload_json).map_err(|error| {
-        SidecarError::InvalidState(format!(
-            "net.http2_server_listen payload must be valid JSON: {error}"
-        ))
-    })
-}
-
-fn parse_http2_connect_payload(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<JavascriptHttp2SessionConnectRequest, SidecarError> {
-    let payload_json =
-        javascript_sync_rpc_arg_str(&request.args, 0, "net.http2_session_connect payload")?;
-    serde_json::from_str(payload_json).map_err(|error| {
-        SidecarError::InvalidState(format!(
-            "net.http2_session_connect payload must be valid JSON: {error}"
-        ))
-    })
-}
-
-fn http2_session_for_id(
-    process: &ActiveProcess,
-    session_id: u64,
-) -> Result<ActiveHttp2Session, SidecarError> {
-    let shared = process
-        .http2
-        .shared
-        .lock()
-        .map_err(|_| SidecarError::InvalidState(String::from("HTTP/2 state lock poisoned")))?;
-    shared
-        .sessions
-        .get(&session_id)
-        .cloned()
-        .ok_or_else(|| SidecarError::InvalidState(format!("unknown HTTP/2 session {session_id}")))
-}
-
-fn http2_stream_for_id(
-    process: &ActiveProcess,
-    stream_id: u64,
-) -> Result<ActiveHttp2Stream, SidecarError> {
-    let shared = process
-        .http2
-        .shared
-        .lock()
-        .map_err(|_| SidecarError::InvalidState(String::from("HTTP/2 state lock poisoned")))?;
-    shared
-        .streams
-        .get(&stream_id)
-        .cloned()
-        .ok_or_else(|| SidecarError::InvalidState(format!("unknown HTTP/2 stream {stream_id}")))
-}
-
-fn service_javascript_http2_sync_rpc<B>(
-    request: JavascriptHttp2SyncRpcServiceRequest<'_, B>,
-) -> Result<Value, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let JavascriptHttp2SyncRpcServiceRequest {
-        bridge,
-        kernel,
-        vm_id,
-        dns,
-        socket_paths,
-        process,
-        sync_request: request,
-        resource_limits,
-        network_counts,
-    } = request;
-    match request.method.as_str() {
-        "net.http2_server_listen" => {
-            check_network_resource_limit(
-                resource_limits.max_sockets,
-                network_counts.sockets,
-                1,
-                "socket",
-            )?;
-            let payload = parse_http2_server_listen_payload(request)?;
-            let (family, bind_host, guest_host) =
-                normalize_tcp_listen_host(payload.host.as_deref())?;
-            let requested_port = payload.port.unwrap_or(0);
-            bridge.require_network_access(
-                vm_id,
-                NetworkOperation::Listen,
-                format_tcp_resource(bind_host, requested_port),
-            )?;
-            let port = allocate_guest_listen_port(
-                requested_port,
-                family,
-                &socket_paths.used_tcp_guest_ports,
-                socket_paths.listen_policy,
-            )?;
-            let mut listener =
-                ActiveTcpListener::bind(bind_host, guest_host, port, payload.backlog)?;
-            let guest_local_addr = listener.guest_local_addr();
-            let closed = Arc::new(AtomicBool::new(false));
-            {
-                let mut state = process.http2.shared.lock().map_err(|_| {
-                    SidecarError::InvalidState(String::from("HTTP/2 state lock poisoned"))
-                })?;
-                state.servers.insert(
-                    payload.server_id,
-                    ActiveHttp2Server {
-                        actual_local_addr: listener.local_addr(),
-                        guest_local_addr,
-                        secure: payload.secure,
-                        tls: payload.tls.clone().map(|mut tls| {
-                            tls.is_server = payload.secure;
-                            if payload.secure && tls.alpn_protocols.is_none() {
-                                tls.alpn_protocols = Some(vec![String::from("h2")]);
-                            }
-                            tls
-                        }),
-                        closed: Arc::clone(&closed),
-                    },
-                );
-                if state.event_session.is_none() {
-                    state.event_session = process.execution.javascript_v8_session_handle();
-                }
-                state.server_events.entry(payload.server_id).or_default();
-            }
-            spawn_http2_server_accept_loop(
-                Arc::clone(&process.http2.shared),
-                payload.server_id,
-                listener.listener.take().ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "HTTP/2 listener missing host TCP socket",
-                    ))
-                })?,
-            );
-            javascript_net_json_string(
-                json!({
-                    "address": socket_address_value(&guest_local_addr)
-                }),
-                "net.http2_server_listen",
-            )
-        }
-        "net.http2_server_poll" => {
-            let server_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "net.http2_server_poll server id")?;
-            let wait_ms = javascript_sync_rpc_arg_u64_optional(
-                &request.args,
-                1,
-                "net.http2_server_poll wait ms",
-            )?
-            .unwrap_or_default();
-            match wait_for_http2_event(&process.http2.shared, server_id, true, wait_ms) {
-                Some(event) => http2_event_value(&event),
-                None => Ok(Value::Null),
-            }
-        }
-        "net.http2_server_wait" => {
-            let server_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "net.http2_server_wait server id")?;
-            dispatch_http2_wait_loop(process, server_id, true)
-        }
-        "net.http2_server_close" => {
-            let server_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "net.http2_server_close server id")?;
-            let server = {
-                let mut state = process.http2.shared.lock().map_err(|_| {
-                    SidecarError::InvalidState(String::from("HTTP/2 state lock poisoned"))
-                })?;
-                state.servers.remove(&server_id)
-            }
-            .ok_or_else(|| {
-                SidecarError::InvalidState(format!("unknown HTTP/2 server {server_id}"))
-            })?;
-            server.closed.store(true, Ordering::SeqCst);
-            push_http2_server_event(
-                &process.http2.shared,
-                server_id,
-                Http2BridgeEvent {
-                    kind: String::from("serverClose"),
-                    id: server_id,
-                    ..Http2BridgeEvent::default()
-                },
-            );
-            Ok(Value::Null)
-        }
-        "net.http2_server_respond" => {
-            let server_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "net.http2_server_respond server id",
-            )?;
-            let request_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                1,
-                "net.http2_server_respond request id",
-            )?;
-            let response_json =
-                javascript_sync_rpc_arg_str(&request.args, 2, "net.http2_server_respond payload")?;
-            ensure_vm_fetch_response_within_limit(
-                response_json,
-                "net.http2_server_respond",
-                VM_FETCH_BUFFER_LIMIT_BYTES,
-            )
-            .map_err(sidecar_core_execution_error)?;
-            serde_json::from_str::<Value>(response_json).map_err(|error| {
-                SidecarError::Execution(format!(
-                    "net.http2_server_respond payload must be valid JSON: {error}"
-                ))
-            })?;
-            let Some(pending) = process
-                .pending_http_requests
-                .get_mut(&(server_id, request_id))
-            else {
-                return Err(SidecarError::InvalidState(format!(
-                    "unknown pending HTTP/2 request {request_id} for server {server_id}"
-                )));
-            };
-            *pending = Some(response_json.to_owned());
-            Ok(Value::Bool(true))
-        }
-        "net.http2_session_connect" => {
-            check_network_resource_limit(
-                resource_limits.max_sockets,
-                network_counts.sockets,
-                1,
-                "socket",
-            )?;
-            check_network_resource_limit(
-                resource_limits.max_connections,
-                network_counts.connections,
-                1,
-                "connection",
-            )?;
-            let payload = parse_http2_connect_payload(request)?;
-            let authority = payload.authority.clone().unwrap_or_else(|| {
-                format!(
-                    "{}://{}:{}",
-                    payload.protocol.as_deref().unwrap_or("http"),
-                    payload.host.as_deref().unwrap_or("localhost"),
-                    payload.port.unwrap_or(80)
-                )
-            });
-            let url = Url::parse(&authority).map_err(|error| {
-                SidecarError::InvalidState(format!(
-                    "invalid HTTP/2 authority {authority:?}: {error}"
-                ))
-            })?;
-            let secure = url.scheme() == "https" || payload.protocol.as_deref() == Some("https:");
-            let host = payload
-                .host
-                .as_deref()
-                .or_else(|| url.host_str())
-                .unwrap_or("localhost");
-            let port = payload.port.or_else(|| url.port()).unwrap_or(80);
-            bridge.require_network_access(
-                vm_id,
-                NetworkOperation::Http,
-                format_tcp_resource(host, port),
-            )?;
-            let resolved = {
-                let shared = process.http2.shared.lock().map_err(|_| {
-                    SidecarError::InvalidState(String::from("HTTP/2 state lock poisoned"))
-                })?;
-                shared
-                    .servers
-                    .values()
-                    .find(|server| {
-                        is_loopback_request_host(host) && server.guest_local_addr.port() == port
-                    })
-                    .map(|server| ResolvedTcpConnectAddr {
-                        actual_addr: server.actual_local_addr,
-                        guest_remote_addr: server.guest_local_addr,
-                        use_kernel_loopback: false,
-                    })
-            };
-            let resolved = match resolved {
-                Some(resolved) => resolved,
-                None => {
-                    resolve_tcp_connect_addr(bridge, kernel, vm_id, dns, host, port, socket_paths)?
-                }
-            };
-            let (command_tx, command_rx) = unbounded_channel();
-            let snapshot = Arc::new(Mutex::new(Http2SessionSnapshot {
-                encrypted: secure,
-                alpn_protocol: Some(String::from(if secure { "h2" } else { "h2c" })),
-                local_settings: http2_settings_from_value(&payload.settings),
-                remote_settings: BTreeMap::new(),
-                state: http2_runtime_snapshot(),
-                socket: Http2SocketSnapshot {
-                    encrypted: secure,
-                    remote_address: Some(resolved.guest_remote_addr.ip().to_string()),
-                    remote_port: Some(resolved.guest_remote_addr.port()),
-                    remote_family: Some(
-                        socket_addr_family(&resolved.guest_remote_addr).to_string(),
-                    ),
-                    servername: if secure {
-                        payload
-                            .tls
-                            .as_ref()
-                            .and_then(|tls| tls.servername.clone())
-                            .or_else(|| Some(host.to_string()))
-                    } else {
-                        None
-                    },
-                    alpn_protocol: Some(String::from(if secure { "h2" } else { "h2c" })),
-                    ..Http2SocketSnapshot::default()
-                },
-                ..Http2SessionSnapshot::default()
-            }));
-            let session_id = {
-                let mut state = process.http2.shared.lock().map_err(|_| {
-                    SidecarError::InvalidState(String::from("HTTP/2 state lock poisoned"))
-                })?;
-                let session_id = next_http2_session_id(&mut state);
-                state
-                    .sessions
-                    .insert(session_id, ActiveHttp2Session { command_tx });
-                if state.event_session.is_none() {
-                    state.event_session = process.execution.javascript_v8_session_handle();
-                }
-                state.session_events.entry(session_id).or_default();
-                session_id
-            };
-            spawn_http2_client_session(
-                Arc::clone(&process.http2.shared),
-                session_id,
-                resolved.actual_addr,
-                if secure {
-                    Some(payload.tls.unwrap_or(JavascriptTlsBridgeOptions {
-                        is_server: false,
-                        servername: Some(host.to_string()),
-                        alpn_protocols: Some(vec![String::from("h2")]),
-                        ..JavascriptTlsBridgeOptions::default()
-                    }))
-                } else {
-                    None
-                },
-                Arc::clone(&snapshot),
-                command_rx,
-            );
-            let snapshot_json =
-                http2_snapshot_json(&snapshot.lock().expect("http2 snapshot lock").clone())?;
-            javascript_net_json_string(
-                json!({
-                    "sessionId": session_id,
-                    "state": snapshot_json,
-                }),
-                "net.http2_session_connect",
-            )
-        }
-        "net.http2_session_request" => {
-            let session_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "net.http2_session_request session id",
-            )?;
-            let headers_json =
-                javascript_sync_rpc_arg_str(&request.args, 1, "net.http2_session_request headers")?;
-            let options_json =
-                javascript_sync_rpc_arg_str(&request.args, 2, "net.http2_session_request options")?;
-            let session = http2_session_for_id(process, session_id)?;
-            send_http2_command(&session, |respond_to| Http2SessionCommand::Request {
-                headers_json: headers_json.to_owned(),
-                options_json: options_json.to_owned(),
-                respond_to,
-            })
-        }
-        "net.http2_session_settings" => {
-            let session_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "net.http2_session_settings session id",
-            )?;
-            let settings_json = javascript_sync_rpc_arg_str(
-                &request.args,
-                1,
-                "net.http2_session_settings settings",
-            )?;
-            let session = http2_session_for_id(process, session_id)?;
-            send_http2_command(&session, |respond_to| Http2SessionCommand::Settings {
-                settings_json: settings_json.to_owned(),
-                respond_to,
-            })
-        }
-        "net.http2_session_set_local_window_size" => {
-            let session_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "net.http2_session_set_local_window_size session id",
-            )?;
-            let window_size = javascript_sync_rpc_arg_u64(
-                &request.args,
-                1,
-                "net.http2_session_set_local_window_size window size",
-            )?;
-            let session = http2_session_for_id(process, session_id)?;
-            send_http2_command(&session, |respond_to| {
-                Http2SessionCommand::SetLocalWindowSize {
-                    size: window_size as u32,
-                    respond_to,
-                }
-            })
-        }
-        "net.http2_session_goaway" => {
-            let session_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "net.http2_session_goaway session id",
-            )?;
-            let error_code = javascript_sync_rpc_arg_u64(
-                &request.args,
-                1,
-                "net.http2_session_goaway error code",
-            )?;
-            let last_stream_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                2,
-                "net.http2_session_goaway last stream id",
-            )?;
-            let opaque_data = request
-                .args
-                .get(3)
-                .and_then(Value::as_str)
-                .map(|value| {
-                    base64::engine::general_purpose::STANDARD
-                        .decode(value)
-                        .map_err(|error| {
-                            SidecarError::InvalidState(format!("invalid GOAWAY payload: {error}"))
-                        })
-                })
-                .transpose()?;
-            let session = http2_session_for_id(process, session_id)?;
-            send_http2_command(&session, |respond_to| Http2SessionCommand::Goaway {
-                error_code: error_code as u32,
-                last_stream_id: last_stream_id as u32,
-                opaque_data,
-                respond_to,
-            })
-        }
-        "net.http2_session_close" | "net.http2_session_destroy" => {
-            let session_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "net.http2_session_close session id",
-            )?;
-            let session = http2_session_for_id(process, session_id)?;
-            send_http2_command(&session, |respond_to| Http2SessionCommand::Close {
-                abrupt: request.method == "net.http2_session_destroy",
-                respond_to,
-            })
-        }
-        "net.http2_session_poll" => {
-            let session_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "net.http2_session_poll session id")?;
-            let wait_ms = javascript_sync_rpc_arg_u64_optional(
-                &request.args,
-                1,
-                "net.http2_session_poll wait ms",
-            )?
-            .unwrap_or_default();
-            match wait_for_http2_event(&process.http2.shared, session_id, false, wait_ms) {
-                Some(event) => http2_event_value(&event),
-                None => Ok(Value::Null),
-            }
-        }
-        "net.http2_session_wait" => {
-            let session_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "net.http2_session_wait session id")?;
-            dispatch_http2_wait_loop(process, session_id, false)
-        }
-        "net.http2_stream_respond" => {
-            let stream_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "net.http2_stream_respond stream id",
-            )?;
-            let headers_json =
-                javascript_sync_rpc_arg_str(&request.args, 1, "net.http2_stream_respond headers")?;
-            let stream = http2_stream_for_id(process, stream_id)?;
-            let session = http2_session_for_id(process, stream.session_id)?;
-            send_http2_command(&session, |respond_to| Http2SessionCommand::StreamRespond {
-                stream_id,
-                headers_json: headers_json.to_owned(),
-                respond_to,
-            })
-        }
-        "net.http2_stream_push_stream" => {
-            let stream_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "net.http2_stream_push_stream stream id",
-            )?;
-            let headers_json = javascript_sync_rpc_arg_str(
-                &request.args,
-                1,
-                "net.http2_stream_push_stream headers",
-            )?;
-            let _options_json = javascript_sync_rpc_arg_str(
-                &request.args,
-                2,
-                "net.http2_stream_push_stream options",
-            )?;
-            let stream = http2_stream_for_id(process, stream_id)?;
-            let session = http2_session_for_id(process, stream.session_id)?;
-            send_http2_command(&session, |respond_to| Http2SessionCommand::StreamPush {
-                stream_id,
-                headers_json: headers_json.to_owned(),
-                respond_to,
-            })
-        }
-        "net.http2_stream_write" => {
-            let stream_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "net.http2_stream_write stream id")?;
-            let chunk =
-                javascript_sync_rpc_base64_arg(&request.args, 1, "net.http2_stream_write data")?;
-            let stream = http2_stream_for_id(process, stream_id)?;
-            let session = http2_session_for_id(process, stream.session_id)?;
-            send_http2_command(&session, |respond_to| Http2SessionCommand::StreamWrite {
-                stream_id,
-                chunk,
-                end_stream: false,
-                respond_to,
-            })
-        }
-        "net.http2_stream_end" => {
-            let stream_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "net.http2_stream_end stream id")?;
-            let chunk = request
-                .args
-                .get(1)
-                .and_then(Value::as_str)
-                .map(|value| {
-                    base64::engine::general_purpose::STANDARD
-                        .decode(value)
-                        .map_err(|error| {
-                            SidecarError::InvalidState(format!(
-                                "invalid HTTP/2 stream payload: {error}"
-                            ))
-                        })
-                })
-                .transpose()?
-                .unwrap_or_default();
-            let stream = http2_stream_for_id(process, stream_id)?;
-            let session = http2_session_for_id(process, stream.session_id)?;
-            send_http2_command(&session, |respond_to| Http2SessionCommand::StreamWrite {
-                stream_id,
-                chunk,
-                end_stream: true,
-                respond_to,
-            })
-        }
-        "net.http2_stream_close" => {
-            let stream_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "net.http2_stream_close stream id")?;
-            let code = javascript_sync_rpc_arg_u64_optional(
-                &request.args,
-                1,
-                "net.http2_stream_close error code",
-            )?
-            .map(|value| value as u32);
-            let stream = http2_stream_for_id(process, stream_id)?;
-            let session = http2_session_for_id(process, stream.session_id)?;
-            send_http2_command(&session, |respond_to| Http2SessionCommand::StreamClose {
-                stream_id,
-                error_code: code,
-                respond_to,
-            })
-        }
-        "net.http2_stream_pause" => {
-            let stream_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "net.http2_stream_pause stream id")?;
-            let stream = http2_stream_for_id(process, stream_id)?;
-            stream.paused.store(true, Ordering::SeqCst);
-            Ok(Value::Null)
-        }
-        "net.http2_stream_resume" => {
-            let stream_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "net.http2_stream_resume stream id")?;
-            let stream = http2_stream_for_id(process, stream_id)?;
-            stream.paused.store(false, Ordering::SeqCst);
-            stream.resume_notify.notify_waiters();
-            Ok(Value::Null)
-        }
-        "net.http2_stream_respond_with_file" => {
-            let stream_id = javascript_sync_rpc_arg_u64(
-                &request.args,
-                0,
-                "net.http2_stream_respond_with_file stream id",
-            )?;
-            let path = javascript_sync_rpc_arg_str(
-                &request.args,
-                1,
-                "net.http2_stream_respond_with_file path",
-            )?;
-            let headers_json = javascript_sync_rpc_arg_str(
-                &request.args,
-                2,
-                "net.http2_stream_respond_with_file headers",
-            )?;
-            let options_json = javascript_sync_rpc_arg_str(
-                &request.args,
-                3,
-                "net.http2_stream_respond_with_file options",
-            )?;
-            let stream = http2_stream_for_id(process, stream_id)?;
-            let session = http2_session_for_id(process, stream.session_id)?;
-            let guest_path = resolve_http2_file_response_guest_path(process, path);
-            let body = kernel.read_file(&guest_path).map_err(kernel_error)?;
-            send_http2_command(&session, |respond_to| {
-                Http2SessionCommand::StreamRespondWithFile {
-                    stream_id,
-                    body,
-                    headers_json: headers_json.to_owned(),
-                    options_json: options_json.to_owned(),
-                    respond_to,
-                }
-            })
-        }
-        other => Err(SidecarError::InvalidState(format!(
-            "unsupported JavaScript HTTP/2 sync RPC method {other}"
-        ))),
-    }
-}
-
-const JAVASCRIPT_NET_POLL_MAX_WAIT: Duration = Duration::from_millis(50);
-const EXITED_PROCESS_SNAPSHOT_RETENTION: Duration = Duration::from_secs(2);
-
-fn resolve_http2_file_response_guest_path(process: &ActiveProcess, path: &str) -> String {
-    if Path::new(path).is_absolute() {
-        normalize_path(path)
-    } else {
-        normalize_path(&format!("{}/{}", process.guest_cwd, path))
-    }
-}
-
-pub(crate) fn clamp_javascript_net_poll_wait(wait_ms: u64) -> Duration {
-    // WASM net.poll runs on the sidecar's sync-RPC main thread. Guest-controlled waits
-    // must stay bounded so one VM cannot stall dispose/shutdown or unrelated VM work.
-    if wait_ms == 0 {
-        Duration::ZERO
-    } else {
-        Duration::from_millis(wait_ms).min(JAVASCRIPT_NET_POLL_MAX_WAIT)
-    }
-}
-
-fn service_javascript_net_sync_rpc_response<B>(
-    request: JavascriptNetSyncRpcServiceRequest<'_, B>,
-) -> Result<JavascriptSyncRpcServiceResponse, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    if request.sync_request.method != "net.socket_read" {
-        return service_javascript_net_sync_rpc(request).map(Into::into);
-    }
-
-    let JavascriptNetSyncRpcServiceRequest {
-        kernel,
-        process,
-        sync_request: request,
-        ..
-    } = request;
-    let trace_enabled = net_tcp_trace_enabled(&process.env);
-    let socket_id = javascript_sync_rpc_arg_str(&request.args, 0, "net.socket_read socket id")?;
-    if trace_enabled {
-        NET_TCP_TRACE_COUNTERS
-            .socket_read_calls
-            .fetch_add(1, Ordering::Relaxed);
-        NET_TCP_TRACE_COUNTERS
-            .socket_read_zero_wait_calls
-            .fetch_add(1, Ordering::Relaxed);
-    }
-
-    let event = if let Some(socket) = process.tcp_sockets.get_mut(socket_id) {
-        socket.poll(kernel, process.kernel_pid, Duration::ZERO, trace_enabled)?
-    } else {
-        let socket = process
-            .unix_sockets
-            .get_mut(socket_id)
-            .ok_or_else(|| SidecarError::InvalidState(format!("unknown net socket {socket_id}")))?;
-        socket.poll(Duration::ZERO)?
-    };
-
-    match event {
-        Some(JavascriptTcpSocketEvent::Data(chunk)) => {
-            Ok(JavascriptSyncRpcServiceResponse::Raw(chunk))
-        }
-        other => javascript_net_read_value(other).map(Into::into),
-    }
-}
-
-pub(crate) fn service_javascript_net_sync_rpc<B>(
-    request: JavascriptNetSyncRpcServiceRequest<'_, B>,
-) -> Result<Value, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let JavascriptNetSyncRpcServiceRequest {
-        bridge,
-        vm_id,
-        dns,
-        socket_paths,
-        kernel,
-        kernel_readiness,
-        process,
-        sync_request: request,
-        resource_limits,
-        network_counts,
-    } = request;
-    let trace_enabled = net_tcp_trace_enabled(&process.env);
-    match request.method.as_str() {
-        "net.http_listen" => {
-            check_network_resource_limit(
-                resource_limits.max_sockets,
-                network_counts.sockets,
-                1,
-                "socket",
-            )?;
-            let payload_json =
-                javascript_sync_rpc_arg_str(&request.args, 0, "net.http_listen payload")?;
-            let payload: JavascriptHttpListenRequest =
-                serde_json::from_str(payload_json).map_err(|error| {
-                    SidecarError::InvalidState(format!(
-                        "net.http_listen payload must be valid JSON: {error}"
-                    ))
-                })?;
-            let (family, bind_host, guest_host) =
-                normalize_tcp_listen_host(payload.hostname.as_deref())?;
-            let requested_port = payload.port.unwrap_or(0);
-            bridge.require_network_access(
-                vm_id,
-                NetworkOperation::Listen,
-                format_tcp_resource(bind_host, requested_port),
-            )?;
-            let port = allocate_guest_listen_port(
-                requested_port,
-                family,
-                &socket_paths.used_tcp_guest_ports,
-                socket_paths.listen_policy,
-            )?;
-            let mut listener = ActiveTcpListener::bind(
-                bind_host,
-                guest_host,
-                port,
-                Some(DEFAULT_JAVASCRIPT_NET_BACKLOG),
-            )?;
-            let guest_local_addr = listener.guest_local_addr();
-            process.http_servers.insert(
-                payload.server_id,
-                ActiveHttpServer {
-                    listener: listener.listener.take().ok_or_else(|| {
-                        SidecarError::InvalidState(String::from(
-                            "HTTP listener missing host TCP socket",
-                        ))
-                    })?,
-                    guest_local_addr,
-                    next_request_id: 0,
-                },
-            );
-            serde_json::to_string(&json!({
-                "address": socket_address_value(&guest_local_addr)
-            }))
-            .map(Value::String)
-            .map_err(|error| SidecarError::Execution(format!("ERR_AGENTOS_NODE_SYNC_RPC: {error}")))
-        }
-        "net.http_close" => {
-            let server_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "net.http_close server id")?;
-            let server = process.http_servers.remove(&server_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!("unknown HTTP server {server_id}"))
-            })?;
-            drop(server.listener);
-            process
-                .pending_http_requests
-                .retain(|(pending_server_id, _), _| *pending_server_id != server_id);
-            Ok(Value::Null)
-        }
-        "net.http_wait" => {
-            let server_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "net.http_wait server id")?;
-            dispatch_http_wait_loop(process, server_id)
-        }
-        "net.http_respond" => {
-            let server_id =
-                javascript_sync_rpc_arg_u64(&request.args, 0, "net.http_respond server id")?;
-            let request_id =
-                javascript_sync_rpc_arg_u64(&request.args, 1, "net.http_respond request id")?;
-            let response_json =
-                javascript_sync_rpc_arg_str(&request.args, 2, "net.http_respond payload")?;
-            ensure_vm_fetch_response_within_limit(
-                response_json,
-                "net.http_respond",
-                VM_FETCH_BUFFER_LIMIT_BYTES,
-            )
-            .map_err(sidecar_core_execution_error)?;
-            serde_json::from_str::<Value>(response_json).map_err(|error| {
-                SidecarError::Execution(format!(
-                    "net.http_respond payload must be valid JSON: {error}"
-                ))
-            })?;
-            let Some(pending) = process
-                .pending_http_requests
-                .get_mut(&(server_id, request_id))
-            else {
-                return Err(SidecarError::InvalidState(format!(
-                    "unknown pending HTTP request {request_id} for server {server_id}"
-                )));
-            };
-            *pending = Some(response_json.to_owned());
-            Ok(Value::Null)
-        }
-        "net.reserve_tcp_port" => {
-            let payload = request
-                .args
-                .first()
-                .cloned()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "net.reserve_tcp_port requires a request payload",
-                    ))
-                })
-                .and_then(|value| {
-                    serde_json::from_value::<JavascriptNetReserveTcpPortRequest>(value).map_err(
-                        |error| {
-                            SidecarError::InvalidState(format!(
-                                "invalid net.reserve_tcp_port payload: {error}"
-                            ))
-                        },
-                    )
-                })?;
-            let (family, _bind_host, guest_host) =
-                normalize_tcp_listen_host(payload.host.as_deref())?;
-            let requested_port = payload.port.unwrap_or(0);
-            let port = allocate_guest_listen_port(
-                requested_port,
-                family,
-                &socket_paths.used_tcp_guest_ports,
-                socket_paths.listen_policy,
-            )?;
-            let reservation_id = process.allocate_tcp_port_reservation_id();
-            process
-                .tcp_port_reservations
-                .insert(reservation_id.clone(), (family, port));
-            Ok(json!({
-                "reservationId": reservation_id,
-                "localAddress": guest_host,
-                "localPort": port,
-                "family": match family {
-                    JavascriptSocketFamily::Ipv4 => "IPv4",
-                    JavascriptSocketFamily::Ipv6 => "IPv6",
-                },
-            }))
-        }
-        "net.release_tcp_port" => {
-            let reservation_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "net.release_tcp_port reservation")?;
-            process.tcp_port_reservations.remove(reservation_id);
-            Ok(Value::Null)
-        }
-        "net.connect" => {
-            check_network_resource_limit(
-                resource_limits.max_sockets,
-                network_counts.sockets,
-                1,
-                "socket",
-            )?;
-            check_network_resource_limit(
-                resource_limits.max_connections,
-                network_counts.connections,
-                1,
-                "connection",
-            )?;
-            let payload = request
-                .args
-                .first()
-                .cloned()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "net.connect requires a request payload",
-                    ))
-                })
-                .and_then(|value| {
-                    serde_json::from_value::<JavascriptNetConnectRequest>(value).map_err(|error| {
-                        SidecarError::InvalidState(format!("invalid net.connect payload: {error}"))
-                    })
-                })?;
-            if let Some(path) = payload.path.as_deref() {
-                let guest_path = normalize_path(path);
-                let host_path = resolve_guest_socket_host_path(socket_paths, &guest_path);
-                let socket = ActiveUnixSocket::connect(&host_path, &guest_path)?;
-                let socket_id = process.allocate_unix_socket_id();
-                socket.set_event_pusher(
-                    process.execution.javascript_v8_session_handle(),
-                    socket_id.clone(),
-                );
-                process.unix_sockets.insert(socket_id.clone(), socket);
-                Ok(json!({
-                    "socketId": socket_id,
-                    "remotePath": guest_path,
-                }))
-            } else {
-                let port = payload.port.ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "net.connect requires either a path or port",
-                    ))
-                })?;
-                let host = payload.host.as_deref().unwrap_or("localhost");
-                let local_reservation = payload.local_reservation.as_deref().and_then(|id| {
-                    process
-                        .tcp_port_reservations
-                        .remove(id)
-                        .map(|reservation| (id.to_owned(), reservation))
-                });
-                bridge.require_network_access(
-                    vm_id,
-                    NetworkOperation::Http,
-                    format_tcp_resource(host, port),
-                )?;
-                if is_loopback_socket_host(host) {
-                    let families = [JavascriptSocketFamily::Ipv4, JavascriptSocketFamily::Ipv6];
-                    if let Some((family, target)) = families.iter().find_map(|family| {
-                        socket_paths
-                            .http_loopback_target(*family, port)
-                            .map(|target| (*family, target))
-                    }) {
-                        if let Some((reservation_id, reservation)) = local_reservation {
-                            process
-                                .tcp_port_reservations
-                                .insert(reservation_id, reservation);
-                        }
-                        let remote_address = match family {
-                            JavascriptSocketFamily::Ipv4 => "127.0.0.1",
-                            JavascriptSocketFamily::Ipv6 => "::1",
-                        };
-                        return Ok(json!({
-                            "loopbackHttpTarget": {
-                                "processId": target.process_id.clone(),
-                                "serverId": target.server_id,
-                                "host": remote_address,
-                                "port": port,
-                            },
-                            "localAddress": match family {
-                                JavascriptSocketFamily::Ipv4 => "127.0.0.1",
-                                JavascriptSocketFamily::Ipv6 => "::1",
-                            },
-                            "localPort": payload.local_port.unwrap_or(0),
-                            "remoteAddress": remote_address,
-                            "remotePort": port,
-                            "remoteFamily": match family {
-                                JavascriptSocketFamily::Ipv4 => "IPv4",
-                                JavascriptSocketFamily::Ipv6 => "IPv6",
-                            },
-                        }));
-                    }
-                }
-                let connect_result = ActiveTcpSocket::connect(ActiveTcpConnectRequest {
-                    bridge,
-                    kernel,
-                    kernel_pid: process.kernel_pid,
-                    vm_id,
-                    dns,
-                    host,
-                    port,
-                    local_address: payload.local_address.as_deref(),
-                    local_port: payload.local_port,
-                    local_reservation: local_reservation
-                        .as_ref()
-                        .map(|(_, reservation)| *reservation),
-                    context: socket_paths,
-                });
-                if let Err(error) = connect_result {
-                    if let Some((reservation_id, reservation)) = local_reservation {
-                        process
-                            .tcp_port_reservations
-                            .insert(reservation_id, reservation);
-                    }
-                    return Err(error);
-                }
-                let socket = connect_result?;
-                let socket_id = process.allocate_tcp_socket_id();
-                let local_addr = socket.guest_local_addr;
-                let remote_addr = socket.guest_remote_addr;
-                socket.set_event_pusher(
-                    process.execution.javascript_v8_session_handle(),
-                    socket_id.clone(),
-                );
-                register_kernel_readiness_target(
-                    &kernel_readiness,
-                    socket.kernel_socket_id,
-                    process.execution.javascript_v8_session_handle(),
-                    socket_id.clone(),
-                    KernelSocketReadinessEvent::Data,
-                );
-                process.tcp_sockets.insert(socket_id.clone(), socket);
-                Ok(json!({
-                    "socketId": socket_id,
-                    "localAddress": local_addr.ip().to_string(),
-                    "localPort": local_addr.port(),
-                    "remoteAddress": remote_addr.ip().to_string(),
-                    "remotePort": remote_addr.port(),
-                    "remoteFamily": socket_addr_family(&remote_addr),
-                }))
-            }
-        }
-        "net.listen" => {
-            check_network_resource_limit(
-                resource_limits.max_sockets,
-                network_counts.sockets,
-                1,
-                "socket",
-            )?;
-            let payload = request
-                .args
-                .first()
-                .cloned()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "net.listen requires a request payload",
-                    ))
-                })
-                .and_then(|value| match value {
-                    Value::String(json) => {
-                        serde_json::from_str::<JavascriptNetListenRequest>(&json).map_err(|error| {
-                            SidecarError::InvalidState(format!(
-                                "invalid net.listen payload: {error}"
-                            ))
-                        })
-                    }
-                    other => serde_json::from_value::<JavascriptNetListenRequest>(other).map_err(
-                        |error| {
-                            SidecarError::InvalidState(format!(
-                                "invalid net.listen payload: {error}"
-                            ))
-                        },
-                    ),
-                })?;
-            if let Some(path) = payload.path.as_deref() {
-                let guest_path = normalize_path(path);
-                if kernel.exists(&guest_path).map_err(kernel_error)? {
-                    return Err(sidecar_net_error(std::io::Error::from_raw_os_error(
-                        libc::EADDRINUSE,
-                    )));
-                }
-
-                let host_path = resolve_guest_socket_host_path(socket_paths, &guest_path);
-                let on_host_mount =
-                    host_mount_path_for_guest_path_from_mounts(&socket_paths.mounts, &guest_path)
-                        .is_some();
-                let listener = ActiveUnixListener::bind(&host_path, &guest_path, payload.backlog)?;
-                if !on_host_mount {
-                    ensure_kernel_parent_directories(kernel, &guest_path)?;
-                    kernel
-                        .write_file(&guest_path, Vec::new())
-                        .map_err(kernel_error)?;
-                }
-                let listener_id = process.allocate_unix_listener_id();
-                process.unix_listeners.insert(listener_id.clone(), listener);
-                Ok(json!({
-                    "serverId": listener_id,
-                    "path": guest_path,
-                }))
-            } else {
-                let (family, bind_host, guest_host) =
-                    normalize_tcp_listen_host(payload.host.as_deref())?;
-                let requested_port = payload.port.unwrap_or(0);
-                bridge.require_network_access(
-                    vm_id,
-                    NetworkOperation::Listen,
-                    format_tcp_resource(bind_host, requested_port),
-                )?;
-                let local_reservation = payload.local_reservation.as_deref().and_then(|id| {
-                    process
-                        .tcp_port_reservations
-                        .remove(id)
-                        .map(|reservation| (id.to_owned(), reservation))
-                });
-                let port = if requested_port != 0
-                    && local_reservation
-                        .as_ref()
-                        .map(|(_, reservation)| *reservation)
-                        == Some((family, requested_port))
-                {
-                    requested_port
-                } else {
-                    allocate_guest_listen_port(
-                        requested_port,
-                        family,
-                        &socket_paths.used_tcp_guest_ports,
-                        socket_paths.listen_policy,
-                    )?
-                };
-                let listener_result = ActiveTcpListener::bind_kernel(
-                    kernel,
-                    process.kernel_pid,
-                    guest_host,
-                    port,
-                    payload.backlog,
-                );
-                if let Err(error) = listener_result {
-                    if let Some((reservation_id, reservation)) = local_reservation {
-                        process
-                            .tcp_port_reservations
-                            .insert(reservation_id, reservation);
-                    }
-                    return Err(error);
-                }
-                let listener = listener_result?;
-                let listener_id = process.allocate_tcp_listener_id();
-                let local_addr = listener.guest_local_addr();
-                register_kernel_readiness_target(
-                    &kernel_readiness,
-                    listener.kernel_socket_id,
-                    process.execution.javascript_v8_session_handle(),
-                    listener_id.clone(),
-                    KernelSocketReadinessEvent::Accept,
-                );
-                process.tcp_listeners.insert(listener_id.clone(), listener);
-                Ok(json!({
-                    "serverId": listener_id,
-                    "localAddress": local_addr.ip().to_string(),
-                    "localPort": local_addr.port(),
-                    "family": socket_addr_family(&local_addr),
-                }))
-            }
-        }
-        "net.poll" => {
-            let socket_id = javascript_sync_rpc_arg_str(&request.args, 0, "net.poll socket id")?;
-            let wait_ms =
-                javascript_sync_rpc_arg_u64_optional(&request.args, 1, "net.poll wait ms")?
-                    .unwrap_or_default();
-            let wait = clamp_javascript_net_poll_wait(wait_ms);
-            let event = if let Some(socket) = process.tcp_sockets.get_mut(socket_id) {
-                socket.poll(kernel, process.kernel_pid, wait, trace_enabled)?
-            } else if let Some(socket) = process.unix_sockets.get_mut(socket_id) {
-                socket.poll(wait)?
-            } else {
-                return Err(SidecarError::InvalidState(format!(
-                    "unknown net socket {socket_id}"
-                )));
-            };
-
-            match event {
-                Some(JavascriptTcpSocketEvent::Data(chunk)) => Ok(json!({
-                    "type": "data",
-                    "data": javascript_sync_rpc_bytes_value(&chunk),
-                })),
-                Some(JavascriptTcpSocketEvent::End) => Ok(json!({
-                    "type": "end",
-                })),
-                Some(JavascriptTcpSocketEvent::Error { code, message }) => Ok(json!({
-                    "type": "error",
-                    "code": code,
-                    "message": message,
-                })),
-                Some(JavascriptTcpSocketEvent::Close { had_error }) => {
-                    if let Some(socket) = process.tcp_sockets.remove(socket_id) {
-                        release_tcp_socket_handle(
-                            process,
-                            socket_id,
-                            socket,
-                            kernel,
-                            &kernel_readiness,
-                        );
-                    } else if let Some(socket) = process.unix_sockets.remove(socket_id) {
-                        release_unix_socket_handle(process, socket_id, socket);
-                    }
-                    Ok(json!({
-                        "type": "close",
-                        "hadError": had_error,
-                    }))
-                }
-                None => Ok(Value::Null),
-            }
-        }
-        "net.socket_wait_connect" => {
-            let socket_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "net.socket_wait_connect socket id")?;
-            if let Some(socket) = process.tcp_sockets.get(socket_id) {
-                javascript_net_json_string(socket.socket_info(), "net.socket_wait_connect")
-            } else {
-                let socket = process.unix_sockets.get(socket_id).ok_or_else(|| {
-                    SidecarError::InvalidState(format!("unknown net socket {socket_id}"))
-                })?;
-                javascript_net_json_string(socket.socket_info(), "net.socket_wait_connect")
-            }
-        }
-        "net.socket_read" => {
-            let socket_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "net.socket_read socket id")?;
-            if trace_enabled {
-                NET_TCP_TRACE_COUNTERS
-                    .socket_read_calls
-                    .fetch_add(1, Ordering::Relaxed);
-                NET_TCP_TRACE_COUNTERS
-                    .socket_read_zero_wait_calls
-                    .fetch_add(1, Ordering::Relaxed);
-            }
-            if let Some(socket) = process.tcp_sockets.get_mut(socket_id) {
-                javascript_net_read_value(socket.poll(
-                    kernel,
-                    process.kernel_pid,
-                    Duration::ZERO,
-                    trace_enabled,
-                )?)
-            } else {
-                let socket = process.unix_sockets.get_mut(socket_id).ok_or_else(|| {
-                    SidecarError::InvalidState(format!("unknown net socket {socket_id}"))
-                })?;
-                javascript_net_read_value(socket.poll(Duration::ZERO)?)
-            }
-        }
-        "net.socket_set_no_delay" => {
-            let socket_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "net.socket_set_no_delay socket id")?;
-            let enable =
-                javascript_sync_rpc_arg_bool(&request.args, 1, "net.socket_set_no_delay enabled")?;
-            if let Some(socket) = process.tcp_sockets.get_mut(socket_id) {
-                socket.set_no_delay(enable)?;
-            } else if !process.unix_sockets.contains_key(socket_id) {
-                return Err(SidecarError::InvalidState(format!(
-                    "unknown net socket {socket_id}"
-                )));
-            }
-            Ok(Value::Null)
-        }
-        "net.socket_set_keep_alive" => {
-            let socket_id = javascript_sync_rpc_arg_str(
-                &request.args,
-                0,
-                "net.socket_set_keep_alive socket id",
-            )?;
-            let enable = javascript_sync_rpc_arg_bool(
-                &request.args,
-                1,
-                "net.socket_set_keep_alive enabled",
-            )?;
-            let initial_delay_secs = javascript_sync_rpc_arg_u64_optional(
-                &request.args,
-                2,
-                "net.socket_set_keep_alive initial delay seconds",
-            )?;
-            if let Some(socket) = process.tcp_sockets.get_mut(socket_id) {
-                socket.set_keep_alive(enable, initial_delay_secs)?;
-            } else if !process.unix_sockets.contains_key(socket_id) {
-                return Err(SidecarError::InvalidState(format!(
-                    "unknown net socket {socket_id}"
-                )));
-            }
-            Ok(Value::Null)
-        }
-        "net.socket_upgrade_tls" => {
-            let socket_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "net.socket_upgrade_tls socket id")?;
-            let options_json =
-                javascript_sync_rpc_arg_str(&request.args, 1, "net.socket_upgrade_tls options")?;
-            let options: JavascriptTlsBridgeOptions =
-                serde_json::from_str(options_json).map_err(|error| {
-                    SidecarError::InvalidState(format!(
-                        "net.socket_upgrade_tls options must be valid JSON: {error}"
-                    ))
-                })?;
-            let socket = process.tcp_sockets.get(socket_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "unknown TCP socket {socket_id} for TLS upgrade"
-                ))
-            })?;
-            socket.upgrade_tls(vm_id, kernel, options)?;
-            Ok(Value::Null)
-        }
-        "net.socket_get_tls_client_hello" => {
-            let socket_id = javascript_sync_rpc_arg_str(
-                &request.args,
-                0,
-                "net.socket_get_tls_client_hello socket id",
-            )?;
-            let socket = process.tcp_sockets.get(socket_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!(
-                    "unknown TCP socket {socket_id} for TLS client hello query"
-                ))
-            })?;
-            socket.tls_client_hello_json(vm_id, kernel)
-        }
-        "net.socket_tls_query" => {
-            let socket_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "net.socket_tls_query socket id")?;
-            let query =
-                javascript_sync_rpc_arg_str(&request.args, 1, "net.socket_tls_query query")?;
-            let detailed = request
-                .args
-                .get(2)
-                .and_then(Value::as_bool)
-                .unwrap_or(false);
-            let socket = process.tcp_sockets.get(socket_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!("unknown TCP socket {socket_id} for TLS query"))
-            })?;
-            socket.tls_query(query, detailed)
-        }
-        "net.server_poll" => {
-            let listener_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "net.server_poll listener id")?;
-            let wait_ms =
-                javascript_sync_rpc_arg_u64_optional(&request.args, 1, "net.server_poll wait ms")?
-                    .unwrap_or_default();
-            let tcp_event = if let Some(listener) = process.tcp_listeners.get_mut(listener_id) {
-                Some(listener.poll(
-                    kernel,
-                    process.kernel_pid,
-                    Duration::from_millis(wait_ms),
-                    trace_enabled,
-                )?)
-            } else {
-                None
-            };
-
-            if let Some(event) = tcp_event {
-                return match event {
-                    Some(JavascriptTcpListenerEvent::Connection(pending)) => {
-                        let PendingTcpSocket {
-                            stream,
-                            kernel_socket_id,
-                            preallocated,
-                            guest_local_addr,
-                            guest_remote_addr,
-                        } = pending;
-                        if !preallocated {
-                            if let Err(error) = check_network_resource_limit(
-                                resource_limits.max_sockets,
-                                network_counts.sockets,
-                                1,
-                                "socket",
-                            )
-                            .and_then(|()| {
-                                check_network_resource_limit(
-                                    resource_limits.max_connections,
-                                    network_counts.connections,
-                                    1,
-                                    "connection",
-                                )
-                            }) {
-                                if let Some(stream) = stream {
-                                    let _ = stream.shutdown(Shutdown::Both);
-                                }
-                                return Ok(json!({
-                                    "type": "error",
-                                    "code": "EAGAIN",
-                                    "message": error.to_string(),
-                                }));
-                            }
-                        }
-                        let socket = if let Some(stream) = stream {
-                            ActiveTcpSocket::from_stream(
-                                stream,
-                                Some(listener_id.to_string()),
-                                guest_local_addr,
-                                guest_remote_addr,
-                            )?
-                        } else {
-                            ActiveTcpSocket::from_kernel(
-                                kernel_socket_id.ok_or_else(|| {
-                                    SidecarError::InvalidState(String::from(
-                                        "kernel TCP accept missing socket id",
-                                    ))
-                                })?,
-                                Some(listener_id.to_string()),
-                                guest_local_addr,
-                                guest_remote_addr,
-                            )
-                        };
-                        let socket_id = process.allocate_tcp_socket_id();
-                        socket.set_event_pusher(
-                            process.execution.javascript_v8_session_handle(),
-                            socket_id.clone(),
-                        );
-                        register_kernel_readiness_target(
-                            &kernel_readiness,
-                            socket.kernel_socket_id,
-                            process.execution.javascript_v8_session_handle(),
-                            socket_id.clone(),
-                            KernelSocketReadinessEvent::Data,
-                        );
-                        if let Some(listener) = process.tcp_listeners.get_mut(listener_id) {
-                            listener.register_connection(&socket_id);
-                        }
-                        process.tcp_sockets.insert(socket_id.clone(), socket);
-                        Ok(json!({
-                            "type": "connection",
-                            "socketId": socket_id,
-                            "localAddress": guest_local_addr.ip().to_string(),
-                            "localPort": guest_local_addr.port(),
-                            "remoteAddress": guest_remote_addr.ip().to_string(),
-                            "remotePort": guest_remote_addr.port(),
-                            "remoteFamily": socket_addr_family(&guest_remote_addr),
-                        }))
-                    }
-                    Some(JavascriptTcpListenerEvent::Error { code, message }) => Ok(json!({
-                        "type": "error",
-                        "code": code,
-                        "message": message,
-                    })),
-                    None => Ok(Value::Null),
-                };
-            }
-
-            let event = {
-                let listener = process.unix_listeners.get_mut(listener_id).ok_or_else(|| {
-                    SidecarError::InvalidState(format!("unknown net listener {listener_id}"))
-                })?;
-                listener.poll(Duration::from_millis(wait_ms))?
-            };
-
-            match event {
-                Some(JavascriptUnixListenerEvent::Connection(pending)) => {
-                    if let Err(error) = check_network_resource_limit(
-                        resource_limits.max_sockets,
-                        network_counts.sockets,
-                        1,
-                        "socket",
-                    )
-                    .and_then(|()| {
-                        check_network_resource_limit(
-                            resource_limits.max_connections,
-                            network_counts.connections,
-                            1,
-                            "connection",
-                        )
-                    }) {
-                        let _ = pending.stream.shutdown(Shutdown::Both);
-                        return Ok(json!({
-                            "type": "error",
-                            "code": "EAGAIN",
-                            "message": error.to_string(),
-                        }));
-                    }
-                    let socket = ActiveUnixSocket::from_stream(
-                        pending.stream,
-                        Some(listener_id.to_string()),
-                        pending.local_path.clone(),
-                        pending.remote_path.clone(),
-                    )?;
-                    let socket_id = process.allocate_unix_socket_id();
-                    socket.set_event_pusher(
-                        process.execution.javascript_v8_session_handle(),
-                        socket_id.clone(),
-                    );
-                    if let Some(listener) = process.unix_listeners.get_mut(listener_id) {
-                        listener.register_connection(&socket_id);
-                    }
-                    process.unix_sockets.insert(socket_id.clone(), socket);
-                    Ok(json!({
-                        "type": "connection",
-                        "socketId": socket_id,
-                        "localPath": pending.local_path,
-                        "remotePath": pending.remote_path,
-                    }))
-                }
-                Some(JavascriptUnixListenerEvent::Error { code, message }) => Ok(json!({
-                    "type": "error",
-                    "code": code,
-                    "message": message,
-                })),
-                None => Ok(Value::Null),
-            }
-        }
-        "net.server_accept" => {
-            let listener_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "net.server_accept listener id")?;
-            if trace_enabled {
-                NET_TCP_TRACE_COUNTERS
-                    .server_accept_calls
-                    .fetch_add(1, Ordering::Relaxed);
-                NET_TCP_TRACE_COUNTERS
-                    .server_accept_zero_wait_calls
-                    .fetch_add(1, Ordering::Relaxed);
-            }
-            if let Some(listener) = process.tcp_listeners.get_mut(listener_id) {
-                return match listener.poll(
-                    kernel,
-                    process.kernel_pid,
-                    Duration::ZERO,
-                    trace_enabled,
-                )? {
-                    Some(JavascriptTcpListenerEvent::Connection(pending)) => {
-                        let PendingTcpSocket {
-                            stream,
-                            kernel_socket_id,
-                            preallocated,
-                            guest_local_addr,
-                            guest_remote_addr,
-                        } = pending;
-                        if !preallocated {
-                            check_network_resource_limit(
-                                resource_limits.max_sockets,
-                                network_counts.sockets,
-                                1,
-                                "socket",
-                            )?;
-                            check_network_resource_limit(
-                                resource_limits.max_connections,
-                                network_counts.connections,
-                                1,
-                                "connection",
-                            )?;
-                        }
-                        let info = tcp_socket_info_value(&guest_local_addr, &guest_remote_addr);
-                        let socket = if let Some(stream) = stream {
-                            ActiveTcpSocket::from_stream(
-                                stream,
-                                Some(listener_id.to_string()),
-                                guest_local_addr,
-                                guest_remote_addr,
-                            )?
-                        } else {
-                            ActiveTcpSocket::from_kernel(
-                                kernel_socket_id.ok_or_else(|| {
-                                    SidecarError::InvalidState(String::from(
-                                        "kernel TCP accept missing socket id",
-                                    ))
-                                })?,
-                                Some(listener_id.to_string()),
-                                guest_local_addr,
-                                guest_remote_addr,
-                            )
-                        };
-                        let socket_id = process.allocate_tcp_socket_id();
-                        socket.set_event_pusher(
-                            process.execution.javascript_v8_session_handle(),
-                            socket_id.clone(),
-                        );
-                        register_kernel_readiness_target(
-                            &kernel_readiness,
-                            socket.kernel_socket_id,
-                            process.execution.javascript_v8_session_handle(),
-                            socket_id.clone(),
-                            KernelSocketReadinessEvent::Data,
-                        );
-                        if let Some(listener) = process.tcp_listeners.get_mut(listener_id) {
-                            listener.register_connection(&socket_id);
-                        }
-                        process.tcp_sockets.insert(socket_id.clone(), socket);
-                        javascript_net_json_string(
-                            json!({
-                                "socketId": socket_id,
-                                "info": info,
-                            }),
-                            "net.server_accept",
-                        )
-                    }
-                    Some(JavascriptTcpListenerEvent::Error { code, message }) => {
-                        let detail = code.unwrap_or_else(|| String::from("server accept"));
-                        Err(SidecarError::Execution(format!("{detail}: {message}")))
-                    }
-                    None => Ok(javascript_net_timeout_value()),
-                };
-            }
-
-            let listener = process.unix_listeners.get_mut(listener_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!("unknown net listener {listener_id}"))
-            })?;
-            match listener.poll(Duration::ZERO)? {
-                Some(JavascriptUnixListenerEvent::Connection(pending)) => {
-                    check_network_resource_limit(
-                        resource_limits.max_sockets,
-                        network_counts.sockets,
-                        1,
-                        "socket",
-                    )?;
-                    check_network_resource_limit(
-                        resource_limits.max_connections,
-                        network_counts.connections,
-                        1,
-                        "connection",
-                    )?;
-                    let info = json!({
-                        "localPath": pending.local_path.clone(),
-                        "remotePath": pending.remote_path.clone(),
-                    });
-                    let socket = ActiveUnixSocket::from_stream(
-                        pending.stream,
-                        Some(listener_id.to_string()),
-                        pending.local_path,
-                        pending.remote_path,
-                    )?;
-                    let socket_id = process.allocate_unix_socket_id();
-                    socket.set_event_pusher(
-                        process.execution.javascript_v8_session_handle(),
-                        socket_id.clone(),
-                    );
-                    if let Some(listener) = process.unix_listeners.get_mut(listener_id) {
-                        listener.register_connection(&socket_id);
-                    }
-                    process.unix_sockets.insert(socket_id.clone(), socket);
-                    javascript_net_json_string(
-                        json!({
-                            "socketId": socket_id,
-                            "info": info,
-                        }),
-                        "net.server_accept",
-                    )
-                }
-                Some(JavascriptUnixListenerEvent::Error { code, message }) => {
-                    let detail = code.unwrap_or_else(|| String::from("server accept"));
-                    Err(SidecarError::Execution(format!("{detail}: {message}")))
-                }
-                None => Ok(javascript_net_timeout_value()),
-            }
-        }
-        "net.server_connections" => {
-            let listener_id = javascript_sync_rpc_arg_str(
-                &request.args,
-                0,
-                "net.server_connections listener id",
-            )?;
-            if let Some(listener) = process.tcp_listeners.get(listener_id) {
-                Ok(json!(listener.active_connection_count()))
-            } else {
-                let listener = process.unix_listeners.get(listener_id).ok_or_else(|| {
-                    SidecarError::InvalidState(format!("unknown net listener {listener_id}"))
-                })?;
-                Ok(json!(listener.active_connection_count()))
-            }
-        }
-        "net.upgrade_socket_write" => {
-            let socket_id = javascript_sync_rpc_arg_str(
-                &request.args,
-                0,
-                "net.upgrade_socket_write socket id",
-            )?;
-            let chunk =
-                javascript_sync_rpc_base64_arg(&request.args, 1, "net.upgrade_socket_write chunk")?;
-            let socket = process.tcp_sockets.get(socket_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!("unknown TCP socket {socket_id}"))
-            })?;
-            socket
-                .write_all(kernel, process.kernel_pid, &chunk)
-                .map(|written| json!(written))
-        }
-        "net.upgrade_socket_end" => {
-            let socket_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "net.upgrade_socket_end socket id")?;
-            let socket = process.tcp_sockets.get(socket_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!("unknown TCP socket {socket_id}"))
-            })?;
-            socket.shutdown_write(kernel, process.kernel_pid)?;
-            Ok(Value::Null)
-        }
-        "net.upgrade_socket_destroy" => {
-            let socket_id = javascript_sync_rpc_arg_str(
-                &request.args,
-                0,
-                "net.upgrade_socket_destroy socket id",
-            )?;
-            let socket = process.tcp_sockets.remove(socket_id).ok_or_else(|| {
-                SidecarError::InvalidState(format!("unknown TCP socket {socket_id}"))
-            })?;
-            release_tcp_socket_handle(process, socket_id, socket, kernel, &kernel_readiness);
-            Ok(Value::Null)
-        }
-        "net.write" => {
-            let socket_id = javascript_sync_rpc_arg_str(&request.args, 0, "net.write socket id")?;
-            let chunk = if let Some(bytes) = request.raw_bytes_args.get(&1) {
-                bytes.clone()
-            } else {
-                javascript_sync_rpc_bytes_arg(&request.args, 1, "net.write chunk")?
-            };
-            if trace_enabled {
-                NET_TCP_TRACE_COUNTERS
-                    .socket_write_calls
-                    .fetch_add(1, Ordering::Relaxed);
-                NET_TCP_TRACE_COUNTERS.socket_write_bytes.fetch_add(
-                    u64::try_from(chunk.len()).unwrap_or(u64::MAX),
-                    Ordering::Relaxed,
-                );
-            }
-            if let Some(socket) = process.tcp_sockets.get(socket_id) {
-                let write_started = trace_enabled.then(Instant::now);
-                let write_result = socket.write_all(kernel, process.kernel_pid, &chunk);
-                if let Some(write_started) = write_started {
-                    NET_TCP_TRACE_COUNTERS.socket_write_kernel_us.fetch_add(
-                        duration_micros_u64(write_started.elapsed()),
-                        Ordering::Relaxed,
-                    );
-                }
-                match write_result {
-                    Ok(written) => Ok(json!(written)),
-                    Err(error) => {
-                        if trace_enabled {
-                            NET_TCP_TRACE_COUNTERS
-                                .socket_write_errors
-                                .fetch_add(1, Ordering::Relaxed);
-                        }
-                        Err(error)
-                    }
-                }
-            } else {
-                let socket = process.unix_sockets.get(socket_id).ok_or_else(|| {
-                    SidecarError::InvalidState(format!("unknown net socket {socket_id}"))
-                })?;
-                socket.write_all(&chunk).map(|written| json!(written))
-            }
-        }
-        "net.shutdown" => {
-            let socket_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "net.shutdown socket id")?;
-            if let Some(socket) = process.tcp_sockets.get(socket_id) {
-                socket.shutdown_write(kernel, process.kernel_pid)?;
-            } else {
-                let socket = process.unix_sockets.get(socket_id).ok_or_else(|| {
-                    SidecarError::InvalidState(format!("unknown net socket {socket_id}"))
-                })?;
-                socket.shutdown_write()?;
-            }
-            Ok(Value::Null)
-        }
-        "net.destroy" => {
-            let socket_id = javascript_sync_rpc_arg_str(&request.args, 0, "net.destroy socket id")?;
-            if let Some(socket) = process.tcp_sockets.remove(socket_id) {
-                release_tcp_socket_handle(process, socket_id, socket, kernel, &kernel_readiness);
-                Ok(Value::Null)
-            } else if let Some(socket) = process.unix_sockets.remove(socket_id) {
-                release_unix_socket_handle(process, socket_id, socket);
-                Ok(Value::Null)
-            } else {
-                Ok(Value::Null)
-            }
-        }
-        "net.server_close" => {
-            let listener_id =
-                javascript_sync_rpc_arg_str(&request.args, 0, "net.server_close listener id")?;
-            if let Some(listener) = process.tcp_listeners.remove(listener_id) {
-                unregister_kernel_readiness_target(&kernel_readiness, listener.kernel_socket_id);
-                listener.close(kernel, process.kernel_pid)?;
-                Ok(Value::Null)
-            } else {
-                let listener = process.unix_listeners.remove(listener_id).ok_or_else(|| {
-                    SidecarError::InvalidState(format!("unknown net listener {listener_id}"))
-                })?;
-                listener.close()?;
-                Ok(Value::Null)
-            }
-        }
-        "tls.get_ciphers" => javascript_net_json_string(
-            Value::Array(
-                tls_provider()
-                    .cipher_suites
-                    .iter()
-                    .filter_map(|suite| {
-                        suite
-                            .suite()
-                            .as_str()
-                            .map(|value| Value::String(value.to_owned()))
-                    })
-                    .collect(),
-            ),
-            "tls.get_ciphers",
-        ),
-        _ => Err(SidecarError::InvalidState(format!(
-            "unsupported JavaScript net sync RPC method {}",
-            request.method
-        ))),
-    }
-}
-
-fn signal_name_for_stream_event(signal: i32) -> Option<&'static str> {
-    match signal {
-        libc::SIGHUP => Some("SIGHUP"),
-        libc::SIGINT => Some("SIGINT"),
-        libc::SIGUSR1 => Some("SIGUSR1"),
-        libc::SIGALRM => Some("SIGALRM"),
-        libc::SIGCONT => Some("SIGCONT"),
-        libc::SIGTERM => Some("SIGTERM"),
-        libc::SIGCHLD => Some("SIGCHLD"),
-        libc::SIGWINCH => Some("SIGWINCH"),
-        _ => None,
-    }
-}
-
-pub(crate) fn canonical_signal_name(signal: i32) -> Option<&'static str> {
-    secure_exec_sidecar_core::canonical_signal_name(signal)
-}
-
-fn dispatch_v8_process_signal(process: &ActiveProcess, signal: i32) -> Result<bool, SidecarError> {
-    let Some(signal_name) = signal_name_for_stream_event(signal) else {
-        return Ok(false);
-    };
-    process.execution.send_javascript_stream_event(
-        "signal",
-        json!({
-            "signal": signal_name,
-            "number": signal,
-            "action": "default",
-        }),
-    )?;
-    Ok(true)
-}
-
-fn dispatch_v8_session_signal_async(session: V8SessionHandle, signal: i32) {
-    let Some(signal_name) = signal_name_for_stream_event(signal).map(str::to_owned) else {
-        return;
-    };
-    thread::spawn(move || {
-        thread::sleep(Duration::from_millis(1));
-        let payload = v8_runtime::json_to_cbor_payload(&json!({
-            "signal": signal_name,
-            "number": signal,
-            "action": "default",
-        }))
-        .unwrap_or_default();
-        let _ = session.send_stream_event("signal", payload);
-    });
-}
-
-pub(crate) fn parse_signal(signal: &str) -> Result<i32, SidecarError> {
-    let trimmed = signal.trim();
-    if trimmed.is_empty() {
-        return Err(SidecarError::InvalidState(String::from(
-            "kill_process requires a non-empty signal",
-        )));
-    }
-
-    if let Ok(value) = trimmed.parse::<i32>() {
-        return match value {
-            0..=31 => Ok(value),
-            _ => Err(SidecarError::InvalidState(format!(
-                "unsupported kill_process signal {signal}"
-            ))),
-        };
-    }
-
-    secure_exec_sidecar_core::parse_posix_signal(trimmed).ok_or_else(|| {
-        SidecarError::InvalidState(format!("unsupported kill_process signal {signal}"))
-    })
-}
-
-pub(crate) fn runtime_child_is_alive(child_pid: u32) -> Result<bool, SidecarError> {
-    Ok(runtime_child_exit_status(child_pid)?.is_none())
-}
-
-#[cfg(not(target_os = "macos"))]
-fn runtime_child_exit_status(child_pid: u32) -> Result<Option<i32>, SidecarError> {
-    if child_pid == 0 {
-        return Ok(Some(0));
-    }
-
-    let wait_flags = WaitPidFlag::WNOHANG
-        | WaitPidFlag::WNOWAIT
-        | WaitPidFlag::WEXITED
-        | WaitPidFlag::WUNTRACED
-        | WaitPidFlag::WCONTINUED;
-    match wait_on_child(WaitId::Pid(Pid::from_raw(child_pid as i32)), wait_flags) {
-        Ok(WaitStatus::StillAlive)
-        | Ok(WaitStatus::Stopped(_, _))
-        | Ok(WaitStatus::Continued(_)) => Ok(None),
-        Ok(WaitStatus::Exited(_, status)) => Ok(Some(status)),
-        Ok(WaitStatus::Signaled(_, signal, _)) => Ok(Some(128 + signal as i32)),
-        #[cfg(any(target_os = "linux", target_os = "android"))]
-        Ok(WaitStatus::PtraceEvent(_, _, _) | WaitStatus::PtraceSyscall(_)) => Ok(None),
-        Err(nix::errno::Errno::ECHILD) => Ok(Some(0)),
-        Err(error) => Err(SidecarError::Execution(format!(
-            "failed to inspect guest runtime process {child_pid}: {error}"
-        ))),
-    }
-}
-
-// macOS nix exposes no `waitid`/`WNOWAIT`, so we poll with `waitpid(WNOHANG)`.
-// NOTE: unlike Linux's `waitid(WNOWAIT)`, `waitpid` REAPS an exited child rather
-// than leaving it waitable. That is correct for this poll (the sidecar is the
-// reaping parent), but a second status query after exit returns ECHILD → treated
-// as "exited(0)" below.
-#[cfg(target_os = "macos")]
-fn runtime_child_exit_status(child_pid: u32) -> Result<Option<i32>, SidecarError> {
-    if child_pid == 0 {
-        return Ok(Some(0));
-    }
-
-    match waitpid(Pid::from_raw(child_pid as i32), Some(WaitPidFlag::WNOHANG)) {
-        Ok(WaitStatus::StillAlive)
-        | Ok(WaitStatus::Stopped(_, _))
-        | Ok(WaitStatus::Continued(_)) => Ok(None),
-        Ok(WaitStatus::Exited(_, status)) => Ok(Some(status)),
-        Ok(WaitStatus::Signaled(_, signal, _)) => Ok(Some(128 + signal as i32)),
-        Err(nix::errno::Errno::ECHILD) => Ok(Some(0)),
-        Err(error) => Err(SidecarError::Execution(format!(
-            "failed to inspect guest runtime process {child_pid}: {error}"
-        ))),
-    }
-}
-
-pub(crate) fn signal_runtime_process(child_pid: u32, signal: i32) -> Result<(), SidecarError> {
-    if child_pid == 0 {
-        return Ok(());
-    }
-
-    if !runtime_child_is_alive(child_pid)? {
-        return Ok(());
-    }
-
-    if signal == 0 {
-        return Ok(());
-    }
-
-    let parsed = Signal::try_from(signal).map_err(|_| {
-        SidecarError::InvalidState(format!("unsupported kill_process signal {signal}"))
-    })?;
-    let result = send_signal(Pid::from_raw(child_pid as i32), Some(parsed));
-
-    match result {
-        Ok(()) => Ok(()),
-        Err(nix::errno::Errno::ESRCH) => Ok(()),
-        Err(error) => Err(SidecarError::Execution(format!(
-            "failed to signal guest runtime process {child_pid}: {error}"
-        ))),
-    }
-}
-
-pub(crate) fn error_code(error: &SidecarError) -> &'static str {
-    match error {
-        SidecarError::InvalidState(_) => "invalid_state",
-        SidecarError::ProtocolVersionMismatch(_) => "protocol_version_mismatch",
-        SidecarError::BridgeVersionMismatch(_) => "bridge_version_mismatch",
-        SidecarError::Conflict(_) => "conflict",
-        SidecarError::Unauthorized(_) => "unauthorized",
-        SidecarError::Unsupported(_) => "unsupported",
-        SidecarError::FrameTooLarge(_) => "frame_too_large",
-        SidecarError::Kernel(_) => "kernel_error",
-        SidecarError::Plugin(_) => "plugin_error",
-        SidecarError::Execution(_) => "execution_error",
-        SidecarError::Bridge(_) => "bridge_error",
-        SidecarError::Io(_) => "io_error",
-    }
-}
-
-fn guest_errno_code(message: &str) -> Option<&str> {
-    const TRUSTED_PREFIXES: &[&str] = &[
-        "ERR_AGENTOS_NODE_SYNC_RPC",
-        "ERR_AGENTOS_PYTHON_VFS_RPC",
-        "ERR_AGENTOS_BRIDGE",
-    ];
-
-    let mut segments = message.split(':').map(str::trim);
-    let first = segments.next()?;
-    if is_guest_errno_segment(first) {
-        return Some(first);
-    }
-
-    if TRUSTED_PREFIXES.contains(&first) {
-        let second = segments.next()?;
-        if is_guest_errno_segment(second) {
-            return Some(second);
-        }
-    }
-
-    None
-}
-
-fn is_guest_errno_segment(segment: &str) -> bool {
-    segment.len() >= 2
-        && segment.starts_with('E')
-        && !segment.starts_with("ERR_")
-        && segment[1..]
-            .bytes()
-            .all(|byte| byte.is_ascii_uppercase() || byte.is_ascii_digit() || byte == b'_')
-}
-
-pub(crate) fn javascript_sync_rpc_error_code(error: &SidecarError) -> String {
-    let message = error.to_string();
-    if let Some(code) = guest_errno_code(&message) {
-        return code.to_owned();
-    }
-    if message.starts_with("ERR_NATIVE_BINARY_NOT_SUPPORTED:") {
-        return String::from("ERR_NATIVE_BINARY_NOT_SUPPORTED");
-    }
-
-    let lower = message.to_ascii_lowercase();
-    if lower.contains("no such file or directory")
-        || lower.contains("entry not found")
-        || lower.contains("not found")
-    {
-        return String::from("ENOENT");
-    }
-    if lower.contains("permission denied") {
-        return String::from("EACCES");
-    }
-    if lower.contains("already exists")
-        || lower.contains("already registered")
-        || lower.contains("file exists")
-    {
-        return String::from("EEXIST");
-    }
-    if lower.contains("invalid argument") {
-        return String::from("EINVAL");
-    }
-
-    String::from("ERR_AGENTOS_NODE_SYNC_RPC")
-}
-
-pub(crate) fn ignore_stale_javascript_sync_rpc_response(
-    error: SidecarError,
-) -> Result<(), SidecarError> {
-    match error {
-        SidecarError::Execution(message)
-            if message.ends_with("is no longer pending")
-                && message.starts_with("sync RPC request ") =>
-        {
-            Ok(())
-        }
-        SidecarError::Execution(message) => {
-            let lower = message.to_ascii_lowercase();
-            if lower.contains("sync rpc response")
-                && (lower.contains("broken pipe") || lower.contains("channel closed unexpectedly"))
-            {
-                Ok(())
-            } else {
-                Err(SidecarError::Execution(message))
-            }
-        }
-        other => Err(other),
-    }
-}
-
-#[cfg(test)]
-mod error_code_tests {
-    use super::{guest_errno_code, javascript_sync_rpc_error_code, SidecarError};
-
-    #[test]
-    fn guest_errno_code_rejects_guest_controlled_errno_segments() {
-        assert_eq!(guest_errno_code("user said 'EACCES: denied'"), None);
-        assert_eq!(
-            guest_errno_code("prefix: user said 'EPERM': more text"),
-            None
-        );
-        assert_eq!(guest_errno_code("ERR_AGENTOS_FAKE: EACCES: denied"), None);
-    }
-
-    #[test]
-    fn guest_errno_code_accepts_trusted_secure_exec_prefixes() {
-        assert_eq!(
-            guest_errno_code("ERR_AGENTOS_NODE_SYNC_RPC: EACCES: permission denied on /foo"),
-            Some("EACCES")
-        );
-        assert_eq!(
-            guest_errno_code("ERR_AGENTOS_PYTHON_VFS_RPC: ENOENT: missing file"),
-            Some("ENOENT")
-        );
-        assert_eq!(guest_errno_code("EEXIST: already exists"), Some("EEXIST"));
-    }
-
-    #[test]
-    fn javascript_sync_rpc_error_code_ignores_spoofed_errnos() {
-        let error = SidecarError::Execution(String::from("user said 'EACCES: denied'"));
-        assert_eq!(
-            javascript_sync_rpc_error_code(&error),
-            "ERR_AGENTOS_NODE_SYNC_RPC"
-        );
-    }
-
-    #[test]
-    fn javascript_sync_rpc_error_code_preserves_real_sidecar_errnos() {
-        let error = SidecarError::Execution(String::from(
-            "ERR_AGENTOS_NODE_SYNC_RPC: EACCES: permission denied on /foo",
-        ));
-        assert_eq!(javascript_sync_rpc_error_code(&error), "EACCES");
-    }
-
-    #[test]
-    fn javascript_sync_rpc_error_code_maps_file_exists_messages() {
-        let error = SidecarError::Io(String::from(
-            "failed to create mapped guest directory /.next/server: File exists (os error 17)",
-        ));
-        assert_eq!(javascript_sync_rpc_error_code(&error), "EEXIST");
-    }
-
-    #[test]
-    fn javascript_sync_rpc_error_code_preserves_native_binary_rejections() {
-        let error = SidecarError::Execution(String::from(
-            "ERR_NATIVE_BINARY_NOT_SUPPORTED: refused to execute native ELF guest binary at /tmp/fake-rg inside the VM",
-        ));
-        assert_eq!(
-            javascript_sync_rpc_error_code(&error),
-            "ERR_NATIVE_BINARY_NOT_SUPPORTED"
-        );
-    }
-}
-#[cfg(test)]
-mod ssrf_egress_classifier_tests {
-    // F-005/006/007 (sec-sidecar T1/T7/T11): the egress classifier must treat the
-    // unspecified address (0.0.0.0 / ::), CGNAT (100.64.0.0/10), IPv6 spellings of
-    // restricted IPv4 targets (::a.b.c.d), and reserved/multicast (240/4, 224/4) as
-    // restricted. 0.0.0.0 routes to 127.0.0.1 on connect(), so leaving it
-    // unclassified let a guest bypass the loopback port-ownership gate.
-    //
-    // These are bounded SAFEGUARD tests: they exercise the classifier and the DNS
-    // egress filter directly (no network I/O, no Node), so they run fast and
-    // deterministically. See FAILURES.md#F-005, #F-006, #F-007.
-    use super::{
-        filter_dns_safe_ip_addrs, is_loopback_ip, restricted_non_loopback_ip_range, SidecarError,
-    };
-    use std::net::{IpAddr, Ipv4Addr, Ipv6Addr};
-
-    fn assert_restricted(ip: IpAddr, expected_label: &str) {
-        let classification = restricted_non_loopback_ip_range(ip);
-        assert!(
-            classification.is_some(),
-            "{ip} must be classified as a restricted egress target"
-        );
-        let (_cidr, label) = classification.unwrap();
-        assert_eq!(
-            label, expected_label,
-            "{ip} should be labelled {expected_label}, got {label}"
-        );
-    }
-
-    fn assert_dns_denied(ip: IpAddr, label: &str) {
-        match filter_dns_safe_ip_addrs(vec![ip], "attacker.example") {
-            Err(SidecarError::Execution(message)) => assert!(
-                message.starts_with("EACCES:"),
-                "{label}: egress filter must deny with EACCES, got: {message}"
-            ),
-            other => panic!("{label}: expected EACCES denial, got {other:?}"),
-        }
-    }
-
-    // F-005 (sec-sidecar T1).
-    #[test]
-    fn classifier_denies_unspecified_and_cgnat_targets() {
-        // 0.0.0.0 (IPv4 unspecified) -> would route to host loopback.
-        assert_restricted(IpAddr::V4(Ipv4Addr::UNSPECIFIED), "unspecified");
-        // :: (IPv6 unspecified).
-        assert_restricted(IpAddr::V6(Ipv6Addr::UNSPECIFIED), "unspecified");
-
-        // CGNAT 100.64.0.0/10 spans 100.64.x.x .. 100.127.x.x.
-        assert_restricted(
-            IpAddr::V4(Ipv4Addr::new(100, 64, 0, 1)),
-            "carrier-grade-nat",
-        );
-        assert_restricted(
-            IpAddr::V4(Ipv4Addr::new(100, 127, 255, 254)),
-            "carrier-grade-nat",
-        );
-
-        // Guard against over-blocking: addresses just outside 100.64/10 stay allowed.
-        assert!(
-            restricted_non_loopback_ip_range(IpAddr::V4(Ipv4Addr::new(100, 63, 255, 255)))
-                .is_none(),
-            "100.63.255.255 is outside CGNAT and must remain allowed"
-        );
-        assert!(
-            restricted_non_loopback_ip_range(IpAddr::V4(Ipv4Addr::new(100, 128, 0, 0))).is_none(),
-            "100.128.0.0 is outside CGNAT and must remain allowed"
-        );
-
-        // The DNS egress filter must also deny these via EACCES.
-        assert_dns_denied(IpAddr::V4(Ipv4Addr::UNSPECIFIED), "0.0.0.0 (unspecified)");
-        assert_dns_denied(IpAddr::V6(Ipv6Addr::UNSPECIFIED), ":: (unspecified)");
-        assert_dns_denied(
-            IpAddr::V4(Ipv4Addr::new(100, 64, 0, 1)),
-            "100.64.0.1 (CGNAT)",
-        );
-    }
-
-    // F-006 (sec-sidecar T7).
-    #[test]
-    fn classifier_denies_ipv6_spelled_metadata_addresses() {
-        // The IPv4-mapped form (::ffff:169.254.169.254) was already handled; the
-        // IPv4-compatible form (::169.254.169.254) is the gap this fixes.
-        let mapped = "::ffff:169.254.169.254".parse::<Ipv6Addr>().unwrap();
-        assert_restricted(IpAddr::V6(mapped), "link-local");
-
-        let compat = "::169.254.169.254".parse::<Ipv6Addr>().unwrap();
-        assert_restricted(IpAddr::V6(compat), "link-local");
-
-        // Other IPv4-compatible private/CGNAT spellings must also be canonicalized.
-        assert_restricted(
-            IpAddr::V6("::10.0.0.1".parse::<Ipv6Addr>().unwrap()),
-            "private",
-        );
-        assert_restricted(
-            IpAddr::V6("::100.64.0.1".parse::<Ipv6Addr>().unwrap()),
-            "carrier-grade-nat",
-        );
-
-        // Guard against over-blocking: the IPv6 unspecified/loopback addresses
-        // are not IPv4-compatible host targets, and a public IPv4-compatible
-        // address must remain allowed.
-        assert_eq!(
-            restricted_non_loopback_ip_range(IpAddr::V6(Ipv6Addr::UNSPECIFIED)),
-            Some(("::/128", "unspecified")),
-            ":: must classify as unspecified, not via the IPv4-compat path"
-        );
-        assert!(
-            restricted_non_loopback_ip_range(IpAddr::V6(Ipv6Addr::LOCALHOST)).is_none()
-                || is_loopback_ip(IpAddr::V6(Ipv6Addr::LOCALHOST)),
-            "::1 must not be classified as a restricted IPv4-compatible target"
-        );
-        assert!(
-            restricted_non_loopback_ip_range(IpAddr::V6("::8.8.8.8".parse::<Ipv6Addr>().unwrap()))
-                .is_none(),
-            "::8.8.8.8 (public IPv4-compatible) must remain allowed"
-        );
-
-        // The DNS egress filter must deny the IPv4-compat metadata spelling.
-        assert_dns_denied(
-            IpAddr::V6("::169.254.169.254".parse::<Ipv6Addr>().unwrap()),
-            "::169.254.169.254 (IPv4-compat metadata)",
-        );
-    }
-
-    // F-007 (sec-sidecar T11).
-    #[test]
-    fn classifier_denies_reserved_and_multicast_targets() {
-        // 224.0.0.0/4 (multicast) and 240.0.0.0/4 (reserved / future use) are not
-        // legitimate unicast egress targets; a guest connect to them must be
-        // classified as restricted and denied.
-        assert_restricted(IpAddr::V4(Ipv4Addr::new(224, 0, 0, 1)), "multicast");
-        assert_restricted(IpAddr::V4(Ipv4Addr::new(239, 255, 255, 255)), "multicast");
-        assert_restricted(IpAddr::V4(Ipv4Addr::new(240, 0, 0, 1)), "reserved");
-        // 255.255.255.255 (limited broadcast) falls in 240.0.0.0/4.
-        assert_restricted(IpAddr::V4(Ipv4Addr::BROADCAST), "reserved");
-
-        // IPv4-compatible IPv6 spellings must canonicalize and be denied too.
-        assert_restricted(
-            IpAddr::V6("::224.0.0.1".parse::<Ipv6Addr>().unwrap()),
-            "multicast",
-        );
-        assert_restricted(
-            IpAddr::V6("::240.0.0.1".parse::<Ipv6Addr>().unwrap()),
-            "reserved",
-        );
-
-        // Guard against over-blocking: addresses just outside 224/4 stay allowed.
-        assert!(
-            restricted_non_loopback_ip_range(IpAddr::V4(Ipv4Addr::new(223, 255, 255, 255)))
-                .is_none(),
-            "223.255.255.255 is outside 224/4 and must remain allowed"
-        );
-
-        // The DNS egress filter must also deny these via EACCES.
-        assert_dns_denied(
-            IpAddr::V4(Ipv4Addr::new(240, 0, 0, 1)),
-            "240.0.0.1 (reserved)",
-        );
-        assert_dns_denied(
-            IpAddr::V4(Ipv4Addr::new(224, 0, 0, 1)),
-            "224.0.0.1 (multicast)",
-        );
-    }
-}
-
-/// Adversarial coverage for the DNS-rebinding gap (VECTORS.md D.3) on the
-/// Python/Pyodide `httpRequestSync` outbound HTTP path. The egress range guard
-/// (`filter_dns_safe_ip_addrs`) runs at resolution time, but `ureq` performs its
-/// own DNS resolution for the TCP/TLS connect, so a rebinding DNS server could
-/// previously make the second lookup land on a private/link-local/metadata IP
-/// the first check rejected. The fix pins `ureq`'s resolver to the vetted
-/// address set; these tests prove the connect is pinned and refuses any other
-/// host or an empty (fully-rejected) address set.
-#[cfg(test)]
-mod dns_rebinding_pin_tests {
-    use super::{issue_outbound_http_request, split_netloc, JavascriptHttpRequestOptions};
-    use std::collections::BTreeMap;
-    use std::io::{Read, Write};
-    use std::net::{IpAddr, Ipv4Addr, TcpListener};
-    use std::thread;
-    use url::Url;
-
-    fn empty_headers() -> super::HttpHeaderCollection {
-        super::parse_http_header_collection(&BTreeMap::new(), "test headers")
-            .expect("empty header collection")
-    }
-
-    fn options() -> JavascriptHttpRequestOptions {
-        JavascriptHttpRequestOptions {
-            method: Some(String::from("GET")),
-            headers: BTreeMap::new(),
-            body: None,
-            reject_unauthorized: None,
-        }
-    }
-
-    #[test]
-    fn split_netloc_handles_hostnames_and_bracketed_ipv6() {
-        assert_eq!(
-            split_netloc("attacker.example:80"),
-            Some(("attacker.example", 80))
-        );
-        assert_eq!(split_netloc("[::1]:443"), Some(("::1", 443)));
-        assert_eq!(split_netloc("10.0.0.1:8080"), Some(("10.0.0.1", 8080)));
-        assert_eq!(split_netloc("no-port"), None);
-        assert_eq!(split_netloc("host:notaport"), None);
-    }
-
-    /// A loopback HTTP server stands in for the egress-vetted target. The
-    /// request URL uses a *different* hostname (`attacker.example`) whose real
-    /// DNS would resolve elsewhere; pinning forces the connect onto the vetted
-    /// IP only. If the resolver were unpinned, the request would fail to reach
-    /// this server (and on a real host could land on a private/metadata IP).
-    #[test]
-    fn outbound_http_connect_is_pinned_to_vetted_ip() {
-        let listener = TcpListener::bind((Ipv4Addr::LOCALHOST, 0)).expect("bind loopback server");
-        let port = listener.local_addr().expect("local addr").port();
-        let server = thread::spawn(move || {
-            let (mut stream, _) = listener.accept().expect("accept");
-            let mut buf = [0u8; 1024];
-            let _ = stream.read(&mut buf);
-            stream
-                .write_all(b"HTTP/1.1 200 OK\r\nContent-Length: 2\r\n\r\nhi")
-                .expect("write response");
-            let _ = stream.flush();
-        });
-
-        let url = Url::parse(&format!("http://attacker.example:{port}/")).expect("url");
-        let pinned = vec![IpAddr::V4(Ipv4Addr::LOCALHOST)];
-        let result = issue_outbound_http_request(&url, &options(), &empty_headers(), &pinned)
-            .expect("pinned request should reach the vetted loopback target");
-        let payload = result.as_str().expect("string payload");
-        assert!(
-            payload.contains("\"status\":200"),
-            "expected 200 from pinned target, got: {payload}"
-        );
-        server.join().expect("server thread");
-    }
-
-    /// With no vetted address (every resolved IP was rejected by the range
-    /// guard, or the literal IP was a blocked range), the pinned resolver must
-    /// refuse rather than fall back to the host resolver.
-    #[test]
-    fn outbound_http_refuses_when_no_vetted_address() {
-        let url = Url::parse("https://attacker.example/").expect("url");
-        let error = issue_outbound_http_request(&url, &options(), &empty_headers(), &[])
-            .expect_err("empty pinned set must be refused");
-        let message = error.to_string();
-        assert!(
-            message.contains("EACCES") || message.contains("ERR_HTTP_REQUEST_FAILED"),
-            "expected an egress refusal, got: {message}"
-        );
-    }
-}
diff --git a/crates/sidecar/src/extension.rs b/crates/sidecar/src/extension.rs
deleted file mode 100644
index b2d22808d..000000000
--- a/crates/sidecar/src/extension.rs
+++ /dev/null
@@ -1,727 +0,0 @@
-use std::future::Future;
-use std::pin::Pin;
-use std::time::Duration;
-
-use crate::protocol::{
-    CloseStdinRequest, EventFrame, EventPayload, ExecuteRequest, ExtEnvelope,
-    GuestFilesystemCallRequest, GuestFilesystemResultResponse, KillProcessRequest, OwnershipScope,
-    ProcessKilledResponse, ProcessStartedResponse, SidecarRequestPayload, SidecarResponsePayload,
-    StdinClosedResponse, StdinWrittenResponse, WriteStdinRequest,
-};
-use crate::state::{SharedEventSink, SharedSidecarRequestClient, SidecarError};
-
-pub type ExtensionFuture<'a, T> = Pin<Box<dyn Future<Output = Result<T, SidecarError>> + 'a>>;
-
-pub trait ExtensionHost {
-    fn spawn_process<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        request: ExecuteRequest,
-    ) -> ExtensionFuture<'a, ProcessStartedResponse>;
-
-    fn write_stdin<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        request: WriteStdinRequest,
-    ) -> ExtensionFuture<'a, StdinWrittenResponse>;
-
-    fn close_stdin<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        request: CloseStdinRequest,
-    ) -> ExtensionFuture<'a, StdinClosedResponse>;
-
-    fn kill_process<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        request: KillProcessRequest,
-    ) -> ExtensionFuture<'a, ProcessKilledResponse>;
-
-    fn poll_event<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        timeout: Duration,
-    ) -> ExtensionFuture<'a, Option<EventFrame>>;
-
-    fn guest_filesystem_call<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        request: GuestFilesystemCallRequest,
-    ) -> ExtensionFuture<'a, GuestFilesystemResultResponse>;
-
-    fn bind_process_to_session<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        namespace: String,
-        ext_session_id: String,
-        process_id: String,
-    ) -> ExtensionFuture<'a, ()>;
-
-    fn bind_vm_to_session<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        namespace: String,
-        ext_session_id: String,
-    ) -> ExtensionFuture<'a, ()>;
-
-    fn dispose_session_resources<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        namespace: String,
-        ext_session_id: String,
-    ) -> ExtensionFuture<'a, Vec<EventFrame>>;
-
-    fn start_buffering_process_output<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        process_id: String,
-    ) -> ExtensionFuture<'a, ()>;
-
-    fn handoff_buffered_process_output<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        namespace: String,
-        ext_session_id: String,
-        process_id: String,
-        timeout: Duration,
-    ) -> ExtensionFuture<'a, ExtensionBufferedProcessOutput>;
-}
-
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct ExtensionBufferedProcessOutput {
-    pub stdout: Vec<u8>,
-    pub stderr: Vec<u8>,
-    pub stdout_truncated: bool,
-    pub stderr_truncated: bool,
-}
-
-impl ExtensionBufferedProcessOutput {
-    pub(crate) fn append_stdout(&mut self, chunk: &[u8], cap: usize) {
-        self.stdout_truncated |= append_bounded_bytes(&mut self.stdout, chunk, cap);
-    }
-
-    pub(crate) fn append_stderr(&mut self, chunk: &[u8], cap: usize) {
-        self.stderr_truncated |= append_bounded_bytes(&mut self.stderr, chunk, cap);
-    }
-}
-
-fn append_bounded_bytes(buffer: &mut Vec<u8>, chunk: &[u8], cap: usize) -> bool {
-    buffer.extend_from_slice(chunk);
-    if buffer.len() <= cap {
-        return false;
-    }
-    let remove_len = buffer.len() - cap;
-    buffer.drain(..remove_len);
-    true
-}
-
-#[derive(Debug, Clone)]
-pub struct ExtensionResponse {
-    pub payload: Vec<u8>,
-    pub events: Vec<EventFrame>,
-}
-
-impl ExtensionResponse {
-    pub fn new(payload: Vec<u8>) -> Self {
-        Self {
-            payload,
-            events: Vec::new(),
-        }
-    }
-
-    pub fn with_events(payload: Vec<u8>, events: Vec<EventFrame>) -> Self {
-        Self { payload, events }
-    }
-
-    pub fn with_wire_events(
-        payload: Vec<u8>,
-        events: Vec<crate::wire::EventFrame>,
-    ) -> Result<Self, SidecarError> {
-        let events = events
-            .into_iter()
-            .map(crate::wire::event_frame_to_compat)
-            .collect::<Result<Vec<_>, _>>()
-            .map_err(wire_protocol_error)?;
-        Ok(Self { payload, events })
-    }
-}
-
-#[derive(Clone)]
-pub struct ExtensionSnapshot {
-    namespace: String,
-    ownership: OwnershipScope,
-    sidecar_requests: SharedSidecarRequestClient,
-    event_sink: SharedEventSink,
-}
-
-pub struct ExtensionContext<'a> {
-    snapshot: ExtensionSnapshot,
-    host: &'a mut dyn ExtensionHost,
-}
-
-impl ExtensionSnapshot {
-    pub(crate) fn new(
-        namespace: String,
-        ownership: OwnershipScope,
-        sidecar_requests: SharedSidecarRequestClient,
-        event_sink: SharedEventSink,
-    ) -> Self {
-        Self {
-            namespace,
-            ownership,
-            sidecar_requests,
-            event_sink,
-        }
-    }
-
-    pub fn namespace(&self) -> &str {
-        &self.namespace
-    }
-
-    pub fn ownership(&self) -> &OwnershipScope {
-        &self.ownership
-    }
-
-    pub fn ext_event(&self, payload: Vec<u8>) -> EventFrame {
-        EventFrame::new(
-            self.ownership.clone(),
-            EventPayload::Ext(ExtEnvelope {
-                namespace: self.namespace.clone(),
-                payload,
-            }),
-        )
-    }
-
-    pub fn ext_event_wire(
-        &self,
-        payload: Vec<u8>,
-    ) -> Result<crate::wire::EventFrame, SidecarError> {
-        crate::wire::event_frame_from_compat(self.ext_event(payload)).map_err(wire_protocol_error)
-    }
-
-    /// Emit a wire event frame to the host the instant it is produced, rather
-    /// than collecting it into the dispatch result and waiting for the whole
-    /// request to resolve. Returns `Ok(None)` when delivered live, or
-    /// `Ok(Some(event))` when no live sink is configured (in-process sidecar) so
-    /// the caller can fall back to returning it in the dispatch's batch.
-    pub fn emit_event_wire(
-        &self,
-        event: crate::wire::EventFrame,
-    ) -> Result<Option<crate::wire::EventFrame>, SidecarError> {
-        self.event_sink.try_emit(event)
-    }
-
-    /// Build a namespaced ext-event from `payload` and emit it live (see
-    /// [`Self::emit_event_wire`]).
-    pub fn emit_ext_event(
-        &self,
-        payload: Vec<u8>,
-    ) -> Result<Option<crate::wire::EventFrame>, SidecarError> {
-        let event = self.ext_event_wire(payload)?;
-        self.emit_event_wire(event)
-    }
-
-    pub fn invoke_callback(
-        &self,
-        payload: Vec<u8>,
-        timeout: Duration,
-    ) -> Result<Vec<u8>, SidecarError> {
-        let response = self.sidecar_requests.invoke(
-            self.ownership.clone(),
-            SidecarRequestPayload::Ext(ExtEnvelope {
-                namespace: self.namespace.clone(),
-                payload,
-            }),
-            timeout,
-        )?;
-        extension_callback_response_payload(&self.namespace, response)
-    }
-}
-
-impl<'a> ExtensionContext<'a> {
-    pub(crate) fn new(snapshot: ExtensionSnapshot, host: &'a mut dyn ExtensionHost) -> Self {
-        Self { snapshot, host }
-    }
-
-    pub fn snapshot(&self) -> ExtensionSnapshot {
-        self.snapshot.clone()
-    }
-
-    pub fn namespace(&self) -> &str {
-        self.snapshot.namespace()
-    }
-
-    pub fn ownership(&self) -> &OwnershipScope {
-        self.snapshot.ownership()
-    }
-
-    pub fn ext_event(&self, payload: Vec<u8>) -> EventFrame {
-        self.snapshot.ext_event(payload)
-    }
-
-    pub fn ext_event_wire(
-        &self,
-        payload: Vec<u8>,
-    ) -> Result<crate::wire::EventFrame, SidecarError> {
-        self.snapshot.ext_event_wire(payload)
-    }
-
-    /// Emit a wire event frame to the host live (see
-    /// [`ExtensionSnapshot::emit_event_wire`]).
-    pub fn emit_event_wire(
-        &self,
-        event: crate::wire::EventFrame,
-    ) -> Result<Option<crate::wire::EventFrame>, SidecarError> {
-        self.snapshot.emit_event_wire(event)
-    }
-
-    /// Build a namespaced ext-event from `payload` and emit it live (see
-    /// [`ExtensionSnapshot::emit_ext_event`]).
-    pub fn emit_ext_event(
-        &self,
-        payload: Vec<u8>,
-    ) -> Result<Option<crate::wire::EventFrame>, SidecarError> {
-        self.snapshot.emit_ext_event(payload)
-    }
-
-    pub fn invoke_callback(
-        &self,
-        payload: Vec<u8>,
-        timeout: Duration,
-    ) -> Result<Vec<u8>, SidecarError> {
-        self.snapshot.invoke_callback(payload, timeout)
-    }
-
-    pub async fn spawn_process(
-        &mut self,
-        request: ExecuteRequest,
-    ) -> Result<ProcessStartedResponse, SidecarError> {
-        self.host
-            .spawn_process(self.snapshot.ownership.clone(), request)
-            .await
-    }
-
-    pub async fn spawn_process_wire(
-        &mut self,
-        request: crate::wire::ExecuteRequest,
-    ) -> Result<crate::wire::ProcessStartedResponse, SidecarError> {
-        let payload = crate::wire::request_payload_to_compat(
-            self.snapshot.ownership(),
-            crate::wire::RequestPayload::ExecuteRequest(request),
-        )
-        .map_err(wire_protocol_error)?;
-        let crate::protocol::RequestPayload::Execute(request) = payload else {
-            return Err(unexpected_wire_request_payload("execute"));
-        };
-        let response = self.spawn_process(request).await?;
-        let payload = crate::wire::response_payload_from_compat(
-            self.snapshot.ownership(),
-            crate::protocol::ResponsePayload::ProcessStarted(response),
-        )
-        .map_err(wire_protocol_error)?;
-        let crate::wire::ResponsePayload::ProcessStartedResponse(response) = payload else {
-            return Err(unexpected_wire_response_payload("process started"));
-        };
-        Ok(response)
-    }
-
-    pub async fn write_stdin(
-        &mut self,
-        request: WriteStdinRequest,
-    ) -> Result<StdinWrittenResponse, SidecarError> {
-        self.host
-            .write_stdin(self.snapshot.ownership.clone(), request)
-            .await
-    }
-
-    pub async fn write_stdin_wire(
-        &mut self,
-        request: crate::wire::WriteStdinRequest,
-    ) -> Result<crate::wire::StdinWrittenResponse, SidecarError> {
-        let payload = crate::wire::request_payload_to_compat(
-            self.snapshot.ownership(),
-            crate::wire::RequestPayload::WriteStdinRequest(request),
-        )
-        .map_err(wire_protocol_error)?;
-        let crate::protocol::RequestPayload::WriteStdin(request) = payload else {
-            return Err(unexpected_wire_request_payload("write stdin"));
-        };
-        let response = self.write_stdin(request).await?;
-        let payload = crate::wire::response_payload_from_compat(
-            self.snapshot.ownership(),
-            crate::protocol::ResponsePayload::StdinWritten(response),
-        )
-        .map_err(wire_protocol_error)?;
-        let crate::wire::ResponsePayload::StdinWrittenResponse(response) = payload else {
-            return Err(unexpected_wire_response_payload("stdin written"));
-        };
-        Ok(response)
-    }
-
-    pub async fn close_stdin(
-        &mut self,
-        request: CloseStdinRequest,
-    ) -> Result<StdinClosedResponse, SidecarError> {
-        self.host
-            .close_stdin(self.snapshot.ownership.clone(), request)
-            .await
-    }
-
-    pub async fn close_stdin_wire(
-        &mut self,
-        request: crate::wire::CloseStdinRequest,
-    ) -> Result<crate::wire::StdinClosedResponse, SidecarError> {
-        let payload = crate::wire::request_payload_to_compat(
-            self.snapshot.ownership(),
-            crate::wire::RequestPayload::CloseStdinRequest(request),
-        )
-        .map_err(wire_protocol_error)?;
-        let crate::protocol::RequestPayload::CloseStdin(request) = payload else {
-            return Err(unexpected_wire_request_payload("close stdin"));
-        };
-        let response = self.close_stdin(request).await?;
-        let payload = crate::wire::response_payload_from_compat(
-            self.snapshot.ownership(),
-            crate::protocol::ResponsePayload::StdinClosed(response),
-        )
-        .map_err(wire_protocol_error)?;
-        let crate::wire::ResponsePayload::StdinClosedResponse(response) = payload else {
-            return Err(unexpected_wire_response_payload("stdin closed"));
-        };
-        Ok(response)
-    }
-
-    pub async fn kill_process(
-        &mut self,
-        request: KillProcessRequest,
-    ) -> Result<ProcessKilledResponse, SidecarError> {
-        self.host
-            .kill_process(self.snapshot.ownership.clone(), request)
-            .await
-    }
-
-    pub async fn kill_process_wire(
-        &mut self,
-        request: crate::wire::KillProcessRequest,
-    ) -> Result<crate::wire::ProcessKilledResponse, SidecarError> {
-        let payload = crate::wire::request_payload_to_compat(
-            self.snapshot.ownership(),
-            crate::wire::RequestPayload::KillProcessRequest(request),
-        )
-        .map_err(wire_protocol_error)?;
-        let crate::protocol::RequestPayload::KillProcess(request) = payload else {
-            return Err(unexpected_wire_request_payload("kill process"));
-        };
-        let response = self.kill_process(request).await?;
-        let payload = crate::wire::response_payload_from_compat(
-            self.snapshot.ownership(),
-            crate::protocol::ResponsePayload::ProcessKilled(response),
-        )
-        .map_err(wire_protocol_error)?;
-        let crate::wire::ResponsePayload::ProcessKilledResponse(response) = payload else {
-            return Err(unexpected_wire_response_payload("process killed"));
-        };
-        Ok(response)
-    }
-
-    pub async fn poll_event(
-        &mut self,
-        timeout: Duration,
-    ) -> Result<Option<EventFrame>, SidecarError> {
-        self.host
-            .poll_event(self.snapshot.ownership.clone(), timeout)
-            .await
-    }
-
-    pub async fn poll_event_wire(
-        &mut self,
-        timeout: Duration,
-    ) -> Result<Option<crate::wire::EventFrame>, SidecarError> {
-        self.poll_event(timeout)
-            .await?
-            .map(crate::wire::event_frame_from_compat)
-            .transpose()
-            .map_err(wire_protocol_error)
-    }
-
-    pub async fn guest_filesystem_call(
-        &mut self,
-        request: GuestFilesystemCallRequest,
-    ) -> Result<GuestFilesystemResultResponse, SidecarError> {
-        self.host
-            .guest_filesystem_call(self.snapshot.ownership.clone(), request)
-            .await
-    }
-
-    pub async fn guest_filesystem_call_wire(
-        &mut self,
-        request: crate::wire::GuestFilesystemCallRequest,
-    ) -> Result<crate::wire::GuestFilesystemResultResponse, SidecarError> {
-        let payload = crate::wire::request_payload_to_compat(
-            self.snapshot.ownership(),
-            crate::wire::RequestPayload::GuestFilesystemCallRequest(request),
-        )
-        .map_err(wire_protocol_error)?;
-        let crate::protocol::RequestPayload::GuestFilesystemCall(request) = payload else {
-            return Err(unexpected_wire_request_payload("guest filesystem call"));
-        };
-        let response = self.guest_filesystem_call(request).await?;
-        let payload = crate::wire::response_payload_from_compat(
-            self.snapshot.ownership(),
-            crate::protocol::ResponsePayload::GuestFilesystemResult(response),
-        )
-        .map_err(wire_protocol_error)?;
-        let crate::wire::ResponsePayload::GuestFilesystemResultResponse(response) = payload else {
-            return Err(unexpected_wire_response_payload("guest filesystem result"));
-        };
-        Ok(response)
-    }
-
-    pub async fn bind_process_to_session(
-        &mut self,
-        ext_session_id: impl Into<String>,
-        process_id: impl Into<String>,
-    ) -> Result<(), SidecarError> {
-        self.host
-            .bind_process_to_session(
-                self.snapshot.ownership.clone(),
-                self.snapshot.namespace.clone(),
-                ext_session_id.into(),
-                process_id.into(),
-            )
-            .await
-    }
-
-    pub async fn bind_vm_to_session(
-        &mut self,
-        ext_session_id: impl Into<String>,
-    ) -> Result<(), SidecarError> {
-        self.host
-            .bind_vm_to_session(
-                self.snapshot.ownership.clone(),
-                self.snapshot.namespace.clone(),
-                ext_session_id.into(),
-            )
-            .await
-    }
-
-    pub async fn dispose_session_resources(
-        &mut self,
-        ext_session_id: impl Into<String>,
-    ) -> Result<Vec<EventFrame>, SidecarError> {
-        self.host
-            .dispose_session_resources(
-                self.snapshot.ownership.clone(),
-                self.snapshot.namespace.clone(),
-                ext_session_id.into(),
-            )
-            .await
-    }
-
-    pub async fn dispose_session_resources_wire(
-        &mut self,
-        ext_session_id: impl Into<String>,
-    ) -> Result<Vec<crate::wire::EventFrame>, SidecarError> {
-        self.dispose_session_resources(ext_session_id)
-            .await?
-            .into_iter()
-            .map(crate::wire::event_frame_from_compat)
-            .collect::<Result<Vec<_>, _>>()
-            .map_err(wire_protocol_error)
-    }
-
-    pub async fn start_buffering_process_output(
-        &mut self,
-        process_id: impl Into<String>,
-    ) -> Result<(), SidecarError> {
-        self.host
-            .start_buffering_process_output(self.snapshot.ownership.clone(), process_id.into())
-            .await
-    }
-
-    pub async fn handoff_buffered_process_output(
-        &mut self,
-        ext_session_id: impl Into<String>,
-        process_id: impl Into<String>,
-        timeout: Duration,
-    ) -> Result<ExtensionBufferedProcessOutput, SidecarError> {
-        self.host
-            .handoff_buffered_process_output(
-                self.snapshot.ownership.clone(),
-                self.snapshot.namespace.clone(),
-                ext_session_id.into(),
-                process_id.into(),
-                timeout,
-            )
-            .await
-    }
-}
-
-fn wire_protocol_error(error: crate::wire::ProtocolCodecError) -> SidecarError {
-    SidecarError::InvalidState(format!("invalid generated wire protocol frame: {error}"))
-}
-
-fn unexpected_wire_request_payload(operation: &str) -> SidecarError {
-    SidecarError::InvalidState(format!(
-        "generated wire {operation} request converted to the wrong compatibility payload"
-    ))
-}
-
-fn unexpected_wire_response_payload(operation: &str) -> SidecarError {
-    SidecarError::InvalidState(format!(
-        "compatibility {operation} response converted to the wrong generated wire payload"
-    ))
-}
-
-fn extension_callback_response_payload(
-    namespace: &str,
-    response: SidecarResponsePayload,
-) -> Result<Vec<u8>, SidecarError> {
-    match response {
-        SidecarResponsePayload::ExtResult(envelope) if envelope.namespace == namespace => {
-            Ok(envelope.payload)
-        }
-        SidecarResponsePayload::ExtResult(envelope) => Err(SidecarError::InvalidState(format!(
-            "extension callback response namespace {} did not match {}",
-            envelope.namespace, namespace
-        ))),
-        SidecarResponsePayload::HostCallbackResult(_)
-        | SidecarResponsePayload::JsBridgeResult(_) => Err(SidecarError::InvalidState(
-            String::from("extension callback received a non-extension response"),
-        )),
-    }
-}
-
-pub enum ExtensionInterruptRequest<'a> {
-    ExtensionPayload(&'a [u8]),
-    KillProcess,
-}
-
-#[derive(Debug, Clone)]
-pub struct ExtensionInterruptResponse {
-    pub interrupted_response_payload: Vec<u8>,
-    pub interrupting_response_payload: Option<Vec<u8>>,
-}
-
-pub trait Extension: Send + Sync {
-    fn namespace(&self) -> &str;
-
-    fn handle_request<'a>(
-        &'a self,
-        ctx: ExtensionContext<'a>,
-        payload: Vec<u8>,
-    ) -> ExtensionFuture<'a, ExtensionResponse>;
-
-    fn on_vm_created<'a>(&'a self, _ctx: ExtensionSnapshot) -> ExtensionFuture<'a, ()> {
-        Box::pin(async { Ok(()) })
-    }
-
-    /// Per-session teardown hook. The host invokes this for every registered
-    /// extension when a session is disposed because its connection closed
-    /// (`DisposeReason::ConnectionClosed`), giving the extension the disposed
-    /// session's ownership scope so it can release the per-session state it
-    /// keyed on that session. Default is a no-op. This is the only signal an
-    /// extension receives that a client has disconnected, so it is what lets an
-    /// ACP-style extension free per-session state instead of leaking it for the
-    /// process lifetime.
-    fn on_session_disposed<'a>(&'a self, _ctx: ExtensionSnapshot) -> ExtensionFuture<'a, ()> {
-        Box::pin(async { Ok(()) })
-    }
-
-    fn is_blocking_request(&self, _payload: &[u8]) -> bool {
-        false
-    }
-
-    fn interrupt_blocking_request(
-        &self,
-        _blocking_payload: &[u8],
-        _interrupt: ExtensionInterruptRequest<'_>,
-    ) -> Option<ExtensionInterruptResponse> {
-        None
-    }
-
-    fn on_dispose<'a>(&'a self) -> ExtensionFuture<'a, ()> {
-        Box::pin(async { Ok(()) })
-    }
-}
-
-#[cfg(test)]
-mod live_event_tests {
-    use super::*;
-    use crate::state::EventSinkTransport;
-    use std::sync::{Arc, Mutex};
-
-    /// Records every event handed to the live sink, standing in for the stdio
-    /// `FrameEventTransport` that writes `ProtocolFrame::EventFrame`s to stdout.
-    #[derive(Default)]
-    struct RecordingEventSink {
-        events: Arc<Mutex<Vec<crate::wire::EventFrame>>>,
-    }
-
-    impl EventSinkTransport for RecordingEventSink {
-        fn emit_event(&self, event: crate::wire::EventFrame) -> Result<(), SidecarError> {
-            self.events.lock().unwrap().push(event);
-            Ok(())
-        }
-    }
-
-    fn snapshot_with_sink(event_sink: SharedEventSink) -> ExtensionSnapshot {
-        ExtensionSnapshot::new(
-            String::from("dev.rivet.test.live-event"),
-            OwnershipScope::session("conn-live", "sess-live"),
-            SharedSidecarRequestClient::default(),
-            event_sink,
-        )
-    }
-
-    // With a transport configured (the stdio path), an ext event is emitted live
-    // and `emit_ext_event` reports nothing left to batch.
-    #[test]
-    fn emit_ext_event_streams_live_when_sink_configured() {
-        let recorded = Arc::new(Mutex::new(Vec::new()));
-        let mut sink = SharedEventSink::default();
-        sink.set_transport(Arc::new(RecordingEventSink {
-            events: recorded.clone(),
-        }));
-
-        let snapshot = snapshot_with_sink(sink);
-        let leftover = snapshot
-            .emit_ext_event(b"live-update".to_vec())
-            .expect("emit must succeed");
-
-        assert!(
-            leftover.is_none(),
-            "a configured sink consumes the event live, leaving nothing to batch"
-        );
-        let recorded = recorded.lock().unwrap();
-        assert_eq!(recorded.len(), 1, "the event must reach the live transport");
-        // The live frame round-trips back to the namespaced ext payload.
-        let compat = crate::wire::event_frame_to_compat(recorded[0].clone())
-            .expect("recorded frame converts back to compat");
-        match compat.payload {
-            EventPayload::Ext(envelope) => {
-                assert_eq!(envelope.namespace, "dev.rivet.test.live-event");
-                assert_eq!(envelope.payload, b"live-update");
-            }
-            other => panic!("unexpected live event payload: {other:?}"),
-        }
-    }
-
-    // With no transport (an in-process sidecar), the event is handed back so the
-    // caller can fall back to the dispatch-result batch — preserving delivery.
-    #[test]
-    fn emit_ext_event_falls_back_to_batch_without_sink() {
-        let snapshot = snapshot_with_sink(SharedEventSink::default());
-        let leftover = snapshot
-            .emit_ext_event(b"batched-update".to_vec())
-            .expect("emit must succeed");
-
-        let frame = leftover.expect("without a sink the event is returned for batching");
-        let compat = crate::wire::event_frame_to_compat(frame)
-            .expect("returned frame converts back to compat");
-        match compat.payload {
-            EventPayload::Ext(envelope) => assert_eq!(envelope.payload, b"batched-update"),
-            other => panic!("unexpected batched event payload: {other:?}"),
-        }
-    }
-}
diff --git a/crates/sidecar/src/filesystem.rs b/crates/sidecar/src/filesystem.rs
deleted file mode 100644
index 278c30baf..000000000
--- a/crates/sidecar/src/filesystem.rs
+++ /dev/null
@@ -1,5096 +0,0 @@
-//! Guest filesystem and VFS dispatch extracted from service.rs.
-
-use crate::execution::{
-    host_path_from_runtime_guest_mappings, is_protected_agentos_shadow_sync_path,
-    sync_active_process_host_writes_to_kernel,
-};
-use crate::protocol::{
-    GuestFilesystemCallRequest, GuestFilesystemOperation, GuestRuntimeKind, RequestFrame,
-    ResponsePayload,
-};
-use crate::service::{
-    javascript_sync_rpc_arg_str, javascript_sync_rpc_arg_u32, javascript_sync_rpc_arg_u32_optional,
-    javascript_sync_rpc_arg_u64, javascript_sync_rpc_arg_u64_optional,
-    javascript_sync_rpc_bytes_arg, javascript_sync_rpc_bytes_value, javascript_sync_rpc_encoding,
-    javascript_sync_rpc_option_bool, javascript_sync_rpc_option_u32, kernel_error,
-    log_stale_process_event, normalize_host_path, normalize_path, path_is_within_root,
-};
-use crate::state::{
-    ActiveExecutionEvent, ActiveProcess, BridgeError, SidecarKernel, VmState,
-    EXECUTION_DRIVER_NAME, EXECUTION_SANDBOX_ROOT_ENV, PYTHON_VFS_RPC_GUEST_ROOT,
-};
-use crate::{DispatchResult, NativeSidecar, NativeSidecarBridge, SidecarError};
-
-use base64::Engine;
-use nix::errno::Errno;
-use nix::fcntl::{open, OFlag};
-#[cfg(not(target_os = "macos"))]
-use nix::fcntl::{openat2, OpenHow, ResolveFlag};
-use nix::libc;
-
-// macOS has neither `O_PATH` (metadata-only anchor) nor `O_TMPFILE`. O_PATH
-// anchors are re-opened via `/dev/fd/N`, so a read-only open stands in; no
-// caller actually passes O_TMPFILE (it appears only in a defensive `intersects`
-// check), so an empty flag is an exact behavioural match there.
-#[cfg(not(target_os = "macos"))]
-const O_PATH_ANCHOR: OFlag = OFlag::O_PATH;
-#[cfg(target_os = "macos")]
-const O_PATH_ANCHOR: OFlag = OFlag::O_RDONLY;
-#[cfg(not(target_os = "macos"))]
-const O_TMPFILE_FLAG: OFlag = OFlag::O_TMPFILE;
-#[cfg(target_os = "macos")]
-const O_TMPFILE_FLAG: OFlag = OFlag::empty();
-use nix::sys::stat::{utimensat, Mode, UtimensatFlags};
-use nix::sys::time::TimeSpec;
-use secure_exec_execution::{
-    JavascriptSyncRpcRequest, LocalResolvedModuleFormat, ModuleFsReader, ModuleResolveMode,
-    ModuleResolver, PythonVfsRpcMethod, PythonVfsRpcRequest, PythonVfsRpcResponsePayload,
-    PythonVfsRpcStat,
-};
-use secure_exec_kernel::vfs::{VirtualStat, VirtualTimeSpec, VirtualUtimeSpec};
-use secure_exec_sidecar_core::{
-    decode_guest_filesystem_content, handle_guest_filesystem_call as core_guest_filesystem_call,
-};
-use serde::Deserialize;
-use serde_json::{json, Map, Value};
-use std::collections::{BTreeMap, BTreeSet};
-use std::env;
-use std::ffi::OsString;
-use std::fmt;
-use std::fs::{self, OpenOptions};
-use std::io::{Read, Write};
-use std::os::fd::{AsRawFd, RawFd};
-use std::os::unix::fs::{symlink, FileExt, MetadataExt, OpenOptionsExt, PermissionsExt};
-use std::path::{Path, PathBuf};
-use std::sync::{Mutex, OnceLock};
-use std::time::Instant;
-
-const PYTHON_PYODIDE_GUEST_ROOT: &str = "/__agentos_pyodide";
-
-fn kernel_path_error(
-    operation: &str,
-    path: &str,
-    error: impl Into<secure_exec_kernel::kernel::KernelError>,
-) -> SidecarError {
-    let error = error.into();
-    let base = kernel_error(error);
-    match base {
-        SidecarError::Kernel(message) => {
-            SidecarError::Kernel(format!("{operation} {path}: {message}"))
-        }
-        other => other,
-    }
-}
-
-fn filesystem_access_denied(path: &str, mode: u32) -> SidecarError {
-    SidecarError::Execution(format!(
-        "EACCES: filesystem access denied for {path} with mode {mode:o}"
-    ))
-}
-
-fn filesystem_access_mode_is_allowed(file_mode: u32, requested: u32) -> bool {
-    const ACCESS_MASK: u32 = libc::R_OK as u32 | libc::W_OK as u32 | libc::X_OK as u32;
-    if requested & ACCESS_MASK == 0 {
-        return true;
-    }
-    if requested & libc::R_OK as u32 != 0 && file_mode & 0o444 == 0 {
-        return false;
-    }
-    if requested & libc::W_OK as u32 != 0 && file_mode & 0o222 == 0 {
-        return false;
-    }
-    if requested & libc::X_OK as u32 != 0 && file_mode & 0o111 == 0 {
-        return false;
-    }
-    true
-}
-const PYTHON_PYODIDE_CACHE_GUEST_ROOT: &str = "/__agentos_pyodide_cache";
-const UTIME_NOW_NSEC: i64 = libc::UTIME_NOW;
-const UTIME_OMIT_NSEC: i64 = libc::UTIME_OMIT;
-
-/// Backstop bound on a guest-controlled `ftruncate` length for a mapped host fd.
-/// The kernel's configured truncate-size limit is the primary enforcement for
-/// paths visible in the VFS; this caps the raw host `set_len` (and covers fds
-/// with no kernel-visible guest path) so a hostile length cannot create an
-/// enormous sparse host file or drive an unbounded sidecar-side mirror read.
-const MAX_MAPPED_TRUNCATE_BYTES: u64 = 4 * 1024 * 1024 * 1024;
-
-#[derive(Debug, Clone)]
-struct MappedRuntimeHostPath {
-    guest_path: String,
-    host_root: PathBuf,
-    host_path: PathBuf,
-}
-
-#[derive(Debug, Clone)]
-enum MappedRuntimeHostAccess {
-    Writable(MappedRuntimeHostPath),
-    ReadOnly(MappedRuntimeHostPath),
-}
-
-#[derive(Debug)]
-struct AnchoredFd {
-    fd: RawFd,
-}
-
-impl AnchoredFd {
-    #[cfg(not(target_os = "macos"))]
-    fn proc_path(&self) -> PathBuf {
-        PathBuf::from(format!("/proc/self/fd/{}", self.fd))
-    }
-
-    // macOS `/dev/fd/N` re-opens a *file* fd (the kernel dups it), standing in
-    // for Linux's `/proc/self/fd/N` at the file read/write/metadata call sites.
-    // It is NOT, however, a drop-in for directory work: `/dev/fd/N` is not a
-    // `readdir`-able directory and child components cannot be appended
-    // (`/dev/fd/N/child` fails). Directory enumeration uses [`readdir_path`];
-    // child mutations use fd-relative `*at` calls.
-    #[cfg(target_os = "macos")]
-    fn proc_path(&self) -> PathBuf {
-        PathBuf::from(format!("/dev/fd/{}", self.fd))
-    }
-
-    // Path to enumerate this fd's directory entries. Linux can `readdir`
-    // `/proc/self/fd/N` directly; macOS `/dev/fd/N` is not a readdir-able
-    // directory (it yields `ENOTDIR`), so recover the fd's real host path via
-    // `fcntl(F_GETPATH)` — the same fd→path recovery used elsewhere on macOS.
-    #[cfg(not(target_os = "macos"))]
-    fn readdir_path(&self) -> std::io::Result<PathBuf> {
-        Ok(self.proc_path())
-    }
-    #[cfg(target_os = "macos")]
-    fn readdir_path(&self) -> std::io::Result<PathBuf> {
-        crate::macos_fs::fd_real_path(self.fd)
-    }
-}
-
-impl AsRawFd for AnchoredFd {
-    fn as_raw_fd(&self) -> RawFd {
-        self.fd
-    }
-}
-
-impl Drop for AnchoredFd {
-    fn drop(&mut self) {
-        let _ = nix::unistd::close(self.fd);
-    }
-}
-
-#[derive(Debug)]
-struct MappedRuntimeOpenedPath {
-    handle: AnchoredFd,
-    host_path: PathBuf,
-}
-
-#[derive(Debug)]
-struct MappedRuntimeParentPath {
-    directory: AnchoredFd,
-    host_path: PathBuf,
-    child_name: OsString,
-}
-
-#[derive(Debug, Deserialize)]
-struct RuntimeGuestPathMappingWire {
-    #[serde(rename = "guestPath")]
-    guest_path: String,
-    #[serde(rename = "hostPath")]
-    host_path: String,
-}
-
-fn parse_timespec_seconds(value: f64, label: &str) -> Result<VirtualTimeSpec, SidecarError> {
-    if !value.is_finite() {
-        return Err(SidecarError::InvalidState(format!(
-            "{label} must be a finite numeric value"
-        )));
-    }
-    let seconds = value.floor();
-    let mut sec = seconds as i64;
-    let mut nanos = ((value - seconds) * 1_000_000_000.0).round() as i64;
-    if nanos >= 1_000_000_000 {
-        sec = sec.saturating_add(1);
-        nanos -= 1_000_000_000;
-    }
-    VirtualTimeSpec::new(sec, nanos as u32)
-        .map_err(|error| SidecarError::InvalidState(format!("{label}: {error}")))
-}
-
-fn parse_timespec_integer(value: &Value, label: &str) -> Result<i64, SidecarError> {
-    value
-        .as_i64()
-        .or_else(|| value.as_u64().and_then(|value| i64::try_from(value).ok()))
-        .ok_or_else(|| SidecarError::InvalidState(format!("{label} must be an integer")))
-}
-
-fn parse_utime_spec_value(value: &Value, label: &str) -> Result<VirtualUtimeSpec, SidecarError> {
-    if let Some(number) = value.as_f64() {
-        return parse_timespec_seconds(number, label).map(VirtualUtimeSpec::Set);
-    }
-
-    let Some(object) = value.as_object() else {
-        return Err(SidecarError::InvalidState(format!(
-            "{label} must be a numeric seconds value or {{ sec, nsec }}"
-        )));
-    };
-
-    if let Some(kind) = object.get("kind").and_then(Value::as_str) {
-        return match kind {
-            "now" | "UTIME_NOW" => Ok(VirtualUtimeSpec::Now),
-            "omit" | "UTIME_OMIT" => Ok(VirtualUtimeSpec::Omit),
-            other => Err(SidecarError::InvalidState(format!(
-                "{label} kind must be 'now' or 'omit', got {other}"
-            ))),
-        };
-    }
-
-    let Some(nsec_value) = object.get("nsec") else {
-        return Err(SidecarError::InvalidState(format!(
-            "{label} timespec requires nsec"
-        )));
-    };
-    if let Some(text) = nsec_value.as_str() {
-        return match text {
-            "UTIME_NOW" => Ok(VirtualUtimeSpec::Now),
-            "UTIME_OMIT" => Ok(VirtualUtimeSpec::Omit),
-            _ => Err(SidecarError::InvalidState(format!(
-                "{label} nsec must be numeric, UTIME_NOW, or UTIME_OMIT"
-            ))),
-        };
-    }
-    if let Some(integer) = nsec_value.as_i64().or_else(|| {
-        nsec_value
-            .as_u64()
-            .and_then(|value| i64::try_from(value).ok())
-    }) {
-        if integer == UTIME_NOW_NSEC {
-            return Ok(VirtualUtimeSpec::Now);
-        }
-        if integer == UTIME_OMIT_NSEC {
-            return Ok(VirtualUtimeSpec::Omit);
-        }
-    }
-
-    let sec_value = object
-        .get("sec")
-        .ok_or_else(|| SidecarError::InvalidState(format!("{label} timespec requires sec")))?;
-    let sec = parse_timespec_integer(sec_value, &format!("{label}.sec"))?;
-    let nsec = u32::try_from(parse_timespec_integer(
-        nsec_value,
-        &format!("{label}.nsec"),
-    )?)
-    .map_err(|_| SidecarError::InvalidState(format!("{label}.nsec must fit within u32")))?;
-    VirtualTimeSpec::new(sec, nsec)
-        .map(VirtualUtimeSpec::Set)
-        .map_err(|error| SidecarError::InvalidState(format!("{label}: {error}")))
-}
-
-fn parse_utime_arg(
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<VirtualUtimeSpec, SidecarError> {
-    let value = args
-        .get(index)
-        .ok_or_else(|| SidecarError::InvalidState(format!("{label} is required")))?;
-    parse_utime_spec_value(value, label)
-}
-
-fn metadata_timespec(
-    metadata: &fs::Metadata,
-    access_time: bool,
-) -> Result<VirtualTimeSpec, SidecarError> {
-    let (sec, nsec) = if access_time {
-        (metadata.atime(), metadata.atime_nsec())
-    } else {
-        (metadata.mtime(), metadata.mtime_nsec())
-    };
-    VirtualTimeSpec::new(sec, nsec.clamp(0, 999_999_999) as u32)
-        .map_err(|error| SidecarError::InvalidState(format!("invalid host metadata time: {error}")))
-}
-
-fn resolve_host_utime(spec: VirtualUtimeSpec, existing: VirtualTimeSpec) -> TimeSpec {
-    match spec {
-        VirtualUtimeSpec::Set(spec) => TimeSpec::new(spec.sec, spec.nsec as libc::c_long),
-        VirtualUtimeSpec::Now => TimeSpec::new(0, libc::UTIME_NOW),
-        VirtualUtimeSpec::Omit => TimeSpec::new(existing.sec, libc::UTIME_OMIT),
-    }
-}
-
-fn apply_host_path_utimens(
-    host_path: &Path,
-    atime: VirtualUtimeSpec,
-    mtime: VirtualUtimeSpec,
-    follow_symlinks: bool,
-    context: &str,
-) -> Result<(), SidecarError> {
-    let existing = match (atime, mtime) {
-        (VirtualUtimeSpec::Omit, _) | (_, VirtualUtimeSpec::Omit) => {
-            let metadata = if follow_symlinks {
-                fs::metadata(host_path)
-            } else {
-                fs::symlink_metadata(host_path)
-            }
-            .map_err(|error| {
-                SidecarError::Io(format!(
-                    "{context}: failed to stat {}: {error}",
-                    host_path.display()
-                ))
-            })?;
-            Some((
-                metadata_timespec(&metadata, true)?,
-                metadata_timespec(&metadata, false)?,
-            ))
-        }
-        _ => None,
-    };
-    let existing_atime = existing
-        .as_ref()
-        .map(|(atime, _)| *atime)
-        .unwrap_or(VirtualTimeSpec { sec: 0, nsec: 0 });
-    let existing_mtime = existing
-        .as_ref()
-        .map(|(_, mtime)| *mtime)
-        .unwrap_or(VirtualTimeSpec { sec: 0, nsec: 0 });
-    let times = [
-        resolve_host_utime(atime, existing_atime),
-        resolve_host_utime(mtime, existing_mtime),
-    ];
-    let flags = if follow_symlinks {
-        UtimensatFlags::FollowSymlink
-    } else {
-        UtimensatFlags::NoFollowSymlink
-    };
-    utimensat(None, host_path, &times[0], &times[1], flags).map_err(|error| {
-        SidecarError::Io(format!(
-            "{context}: failed to update {}: {error}",
-            host_path.display()
-        ))
-    })
-}
-
-pub(crate) async fn guest_filesystem_call<B>(
-    sidecar: &mut NativeSidecar<B>,
-    request: &RequestFrame,
-    payload: GuestFilesystemCallRequest,
-) -> Result<DispatchResult, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let (connection_id, session_id, vm_id) = sidecar.vm_scope_for(&request.ownership)?;
-    sidecar.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-    let response = {
-        let vm = match sidecar.vms.get_mut(&vm_id) {
-            Some(vm) => vm,
-            None => {
-                return Err(stale_filesystem_request_error(
-                    sidecar,
-                    &vm_id,
-                    None,
-                    "guest filesystem dispatch",
-                ));
-            }
-        };
-        sync_guest_filesystem_shadow_before_call(vm, &payload)?;
-        let response = core_guest_filesystem_call(&mut vm.kernel, payload.clone())
-            .map_err(native_guest_filesystem_core_error)?;
-        mirror_guest_filesystem_shadow_after_call(vm, &payload)?;
-        response
-    };
-
-    Ok(DispatchResult {
-        response: sidecar.respond(request, ResponsePayload::GuestFilesystemResult(response)),
-        events: Vec::new(),
-    })
-}
-
-fn native_guest_filesystem_core_error(
-    error: secure_exec_sidecar_core::SidecarCoreError,
-) -> SidecarError {
-    let message = error.to_string();
-    if message
-        .split_once(':')
-        .is_some_and(|(code, _)| is_posix_errno_code(code))
-    {
-        SidecarError::Kernel(message)
-    } else {
-        SidecarError::InvalidState(message)
-    }
-}
-
-fn is_posix_errno_code(code: &str) -> bool {
-    code.len() >= 2
-        && code.starts_with('E')
-        && code[1..]
-            .bytes()
-            .all(|byte| byte.is_ascii_uppercase() || byte.is_ascii_digit() || byte == b'_')
-}
-
-fn sync_guest_filesystem_shadow_before_call(
-    vm: &mut VmState,
-    payload: &GuestFilesystemCallRequest,
-) -> Result<(), SidecarError> {
-    match payload.operation {
-        GuestFilesystemOperation::ReadFile
-        | GuestFilesystemOperation::Pread
-        | GuestFilesystemOperation::Pwrite
-        | GuestFilesystemOperation::Exists
-        | GuestFilesystemOperation::Stat
-        | GuestFilesystemOperation::Lstat
-        | GuestFilesystemOperation::ReadDirRecursive
-        | GuestFilesystemOperation::Remove
-        | GuestFilesystemOperation::Copy
-        | GuestFilesystemOperation::Move => {
-            // Pwrite is a partial write that preserves the unmodified bytes, so
-            // the existing shadow content must be present in the kernel before
-            // the call, exactly like a read.
-            sync_active_shadow_path_to_kernel(vm, &payload.path)?;
-        }
-        GuestFilesystemOperation::WriteFile
-        | GuestFilesystemOperation::CreateDir
-        | GuestFilesystemOperation::Mkdir
-        | GuestFilesystemOperation::ReadDir
-        | GuestFilesystemOperation::RemoveFile
-        | GuestFilesystemOperation::RemoveDir
-        | GuestFilesystemOperation::Rename
-        | GuestFilesystemOperation::Realpath
-        | GuestFilesystemOperation::Symlink
-        | GuestFilesystemOperation::ReadLink
-        | GuestFilesystemOperation::Link
-        | GuestFilesystemOperation::Chmod
-        | GuestFilesystemOperation::Chown
-        | GuestFilesystemOperation::Utimes
-        | GuestFilesystemOperation::Truncate => {}
-    }
-    Ok(())
-}
-
-fn mirror_guest_filesystem_shadow_after_call(
-    vm: &mut VmState,
-    payload: &GuestFilesystemCallRequest,
-) -> Result<(), SidecarError> {
-    match payload.operation {
-        GuestFilesystemOperation::WriteFile => {
-            let bytes = decode_guest_filesystem_content(
-                &payload.path,
-                payload.content.as_deref(),
-                payload.encoding.clone(),
-            )
-            .map_err(|error| SidecarError::InvalidState(error.to_string()))?;
-            mirror_guest_file_write_to_shadow(vm, &payload.path, &bytes)?;
-        }
-        GuestFilesystemOperation::Pwrite => {
-            // A positional write only carries the changed region; mirror the
-            // full post-write file from the kernel so the shadow stays faithful.
-            let bytes = vm.kernel.read_file(&payload.path).map_err(kernel_error)?;
-            mirror_guest_file_write_to_shadow(vm, &payload.path, &bytes)?;
-        }
-        GuestFilesystemOperation::CreateDir | GuestFilesystemOperation::Mkdir => {
-            mirror_guest_directory_write_to_shadow(vm, &payload.path)?;
-        }
-        GuestFilesystemOperation::RemoveFile | GuestFilesystemOperation::RemoveDir => {
-            remove_guest_shadow_path(vm, &payload.path)?;
-        }
-        GuestFilesystemOperation::Remove => {
-            remove_guest_shadow_path(vm, &payload.path)?;
-        }
-        GuestFilesystemOperation::Copy => {
-            let destination = payload.destination_path.as_deref().ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "guest filesystem copy requires a destination_path",
-                ))
-            })?;
-            remove_guest_shadow_path(vm, destination)?;
-            mirror_guest_subtree_to_shadow(vm, destination)?;
-        }
-        GuestFilesystemOperation::Move => {
-            let destination = payload.destination_path.as_deref().ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "guest filesystem move requires a destination_path",
-                ))
-            })?;
-            remove_guest_shadow_path(vm, &payload.path)?;
-            remove_guest_shadow_path(vm, destination)?;
-            mirror_guest_subtree_to_shadow(vm, destination)?;
-        }
-        GuestFilesystemOperation::Rename => {
-            let destination = payload.destination_path.as_deref().ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "guest filesystem rename requires a destination_path",
-                ))
-            })?;
-            rename_guest_shadow_path(vm, &payload.path, destination)?;
-        }
-        GuestFilesystemOperation::Symlink => {
-            let target = payload.target.as_deref().ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "guest filesystem symlink requires a target",
-                ))
-            })?;
-            mirror_guest_symlink_to_shadow(vm, &payload.path, target)?;
-        }
-        GuestFilesystemOperation::Link => {
-            let destination = payload.destination_path.as_deref().ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "guest filesystem link requires a destination_path",
-                ))
-            })?;
-            mirror_guest_link_to_shadow(vm, &payload.path, destination)?;
-        }
-        GuestFilesystemOperation::Chmod => {
-            let mode = payload.mode.ok_or_else(|| {
-                SidecarError::InvalidState(String::from("guest filesystem chmod requires a mode"))
-            })?;
-            mirror_guest_chmod_to_shadow(vm, &payload.path, mode)?;
-        }
-        GuestFilesystemOperation::Utimes => {
-            let atime_ms = payload.atime_ms.ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "guest filesystem utimes requires atime_ms",
-                ))
-            })?;
-            let mtime_ms = payload.mtime_ms.ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "guest filesystem utimes requires mtime_ms",
-                ))
-            })?;
-            mirror_guest_utimes_to_shadow(
-                vm,
-                &payload.path,
-                VirtualUtimeSpec::Set(VirtualTimeSpec::from_millis(atime_ms)),
-                VirtualUtimeSpec::Set(VirtualTimeSpec::from_millis(mtime_ms)),
-                true,
-            )?;
-        }
-        GuestFilesystemOperation::Truncate => {
-            let len = payload.len.ok_or_else(|| {
-                SidecarError::InvalidState(String::from("guest filesystem truncate requires len"))
-            })?;
-            mirror_guest_truncate_to_shadow(vm, &payload.path, len)?;
-        }
-        GuestFilesystemOperation::ReadFile
-        | GuestFilesystemOperation::Pread
-        | GuestFilesystemOperation::Exists
-        | GuestFilesystemOperation::Stat
-        | GuestFilesystemOperation::Lstat
-        | GuestFilesystemOperation::ReadDir
-        | GuestFilesystemOperation::ReadDirRecursive
-        | GuestFilesystemOperation::Realpath
-        | GuestFilesystemOperation::ReadLink
-        | GuestFilesystemOperation::Chown => {}
-    }
-    Ok(())
-}
-
-pub(crate) fn handle_python_vfs_rpc_request<B>(
-    sidecar: &mut NativeSidecar<B>,
-    vm_id: &str,
-    process_id: &str,
-    request: PythonVfsRpcRequest,
-) -> Result<(), SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let Some(vm) = sidecar.vms.get(vm_id) else {
-        log_stale_process_event(&sidecar.bridge, vm_id, process_id, "python VFS RPC");
-        return Ok(());
-    };
-    if !vm.active_processes.contains_key(process_id) {
-        log_stale_process_event(&sidecar.bridge, vm_id, process_id, "python VFS RPC");
-        return Ok(());
-    }
-
-    let response = match normalize_python_vfs_rpc_path(&request.path) {
-        Ok(path) => {
-            let Some(vm) = sidecar.vms.get_mut(vm_id) else {
-                log_stale_process_event(&sidecar.bridge, vm_id, process_id, "python VFS RPC");
-                return Ok(());
-            };
-            match request.method {
-                PythonVfsRpcMethod::Read => vm
-                    .kernel
-                    .read_file(&path)
-                    .map(|content| PythonVfsRpcResponsePayload::Read {
-                        content_base64: base64::engine::general_purpose::STANDARD.encode(content),
-                    })
-                    .map_err(kernel_error),
-                PythonVfsRpcMethod::Write => {
-                    let content_base64 = request.content_base64.as_deref().ok_or_else(|| {
-                        SidecarError::InvalidState(format!(
-                            "python VFS fsWrite for {} requires contentBase64",
-                            path
-                        ))
-                    })?;
-                    let bytes = base64::engine::general_purpose::STANDARD
-                        .decode(content_base64)
-                        .map_err(|error| {
-                            SidecarError::InvalidState(format!(
-                                "invalid base64 python VFS content for {}: {error}",
-                                path
-                            ))
-                        })?;
-                    vm.kernel
-                        .write_file(&path, bytes)
-                        .map(|()| PythonVfsRpcResponsePayload::Empty)
-                        .map_err(kernel_error)
-                }
-                PythonVfsRpcMethod::Stat => vm
-                    .kernel
-                    .stat(&path)
-                    .map(|stat| PythonVfsRpcResponsePayload::Stat {
-                        stat: PythonVfsRpcStat {
-                            mode: stat.mode,
-                            size: stat.size,
-                            is_directory: stat.is_directory,
-                            is_symbolic_link: stat.is_symbolic_link,
-                        },
-                    })
-                    .map_err(kernel_error),
-                // Like Stat but does NOT follow symlinks, so the runner can
-                // represent a host-preexisting symlink as a link node.
-                PythonVfsRpcMethod::Lstat => vm
-                    .kernel
-                    .lstat(&path)
-                    .map(|stat| PythonVfsRpcResponsePayload::Stat {
-                        stat: PythonVfsRpcStat {
-                            mode: stat.mode,
-                            size: stat.size,
-                            is_directory: stat.is_directory,
-                            is_symbolic_link: stat.is_symbolic_link,
-                        },
-                    })
-                    .map_err(kernel_error),
-                PythonVfsRpcMethod::ReadDir => vm
-                    .kernel
-                    .read_dir(&path)
-                    .map(|entries| PythonVfsRpcResponsePayload::ReadDir { entries })
-                    .map_err(kernel_error),
-                PythonVfsRpcMethod::Mkdir => vm
-                    .kernel
-                    .mkdir(&path, request.recursive)
-                    .map(|()| PythonVfsRpcResponsePayload::Empty)
-                    .map_err(kernel_error),
-                // Mirror the delete/rename into the host-side shadow too, the
-                // same way the wire `GuestFilesystemOperation` handlers do —
-                // otherwise a later shadow→kernel sync would resurrect the
-                // entry the guest just removed.
-                PythonVfsRpcMethod::Unlink => {
-                    match vm.kernel.remove_file(&path).map_err(kernel_error) {
-                        Ok(()) => remove_guest_shadow_path(vm, &path)
-                            .map(|()| PythonVfsRpcResponsePayload::Empty),
-                        Err(error) => Err(error),
-                    }
-                }
-                PythonVfsRpcMethod::Rmdir => {
-                    match vm.kernel.remove_dir(&path).map_err(kernel_error) {
-                        Ok(()) => remove_guest_shadow_path(vm, &path)
-                            .map(|()| PythonVfsRpcResponsePayload::Empty),
-                        Err(error) => Err(error),
-                    }
-                }
-                PythonVfsRpcMethod::Rename => {
-                    let destination = request.destination.as_deref().ok_or_else(|| {
-                        SidecarError::InvalidState(format!(
-                            "python VFS fsRename for {} requires destination",
-                            path
-                        ))
-                    })?;
-                    let destination = normalize_python_vfs_rpc_path(destination)?;
-                    match vm.kernel.rename(&path, &destination).map_err(kernel_error) {
-                        Ok(()) => rename_guest_shadow_path(vm, &path, &destination)
-                            .map(|()| PythonVfsRpcResponsePayload::Empty),
-                        Err(error) => Err(error),
-                    }
-                }
-                // Kernel-direct (no shadow mirror): guest Python writes/creates
-                // land only in the kernel VFS, so mirroring create/modify ops into
-                // the host-side shadow would leave empty stubs that a later
-                // shadow->kernel sync resurrects over real content. (Delete/rename
-                // still mirror — to *remove* stale wire-written shadow entries.)
-                PythonVfsRpcMethod::Symlink => {
-                    let target = request.target.clone().ok_or_else(|| {
-                        SidecarError::InvalidState(format!(
-                            "python VFS fsSymlink for {} requires a target",
-                            path
-                        ))
-                    })?;
-                    vm.kernel
-                        .symlink(&target, &path)
-                        .map(|()| PythonVfsRpcResponsePayload::Empty)
-                        .map_err(kernel_error)
-                }
-                PythonVfsRpcMethod::ReadLink => vm
-                    .kernel
-                    .read_link(&path)
-                    .map(|target| PythonVfsRpcResponsePayload::SymlinkTarget { target })
-                    .map_err(kernel_error),
-                // `setattr` carries any of mode/uid/gid/atime+mtime; apply each
-                // present field to the host VFS.
-                PythonVfsRpcMethod::Setattr => {
-                    (|| -> Result<PythonVfsRpcResponsePayload, SidecarError> {
-                        // Mirror metadata into the host shadow only when the entry
-                        // already exists there (a host-mounted / wire-written file),
-                        // so the next shadow->kernel reconcile keeps the guest's
-                        // change. Never *create* a shadow stub for a kernel-only
-                        // guest file (that resurrected empty content).
-                        let mirror = shadow_host_path_for_guest(&vm.cwd, &path).exists();
-                        if let Some(mode) = request.mode {
-                            vm.kernel.chmod(&path, mode).map_err(kernel_error)?;
-                            if mirror {
-                                mirror_guest_chmod_to_shadow(vm, &path, mode)?;
-                            }
-                        }
-                        // uid/gid apply independently (`os.chown(p, uid, -1)` keeps
-                        // the other side); fill the missing side from the current
-                        // owner rather than dropping the whole chown.
-                        if request.uid.is_some() || request.gid.is_some() {
-                            let current = vm.kernel.stat(&path).map_err(kernel_error)?;
-                            let uid = request.uid.unwrap_or(current.uid);
-                            let gid = request.gid.unwrap_or(current.gid);
-                            vm.kernel.chown(&path, uid, gid).map_err(kernel_error)?;
-                        }
-                        if let (Some(atime_ms), Some(mtime_ms)) =
-                            (request.atime_ms, request.mtime_ms)
-                        {
-                            vm.kernel
-                                .utimes(&path, atime_ms, mtime_ms)
-                                .map_err(kernel_error)?;
-                            if mirror {
-                                mirror_guest_utimes_to_shadow(
-                                    vm,
-                                    &path,
-                                    VirtualUtimeSpec::Set(VirtualTimeSpec::from_millis(atime_ms)),
-                                    VirtualUtimeSpec::Set(VirtualTimeSpec::from_millis(mtime_ms)),
-                                    true,
-                                )?;
-                            }
-                        }
-                        Ok(PythonVfsRpcResponsePayload::Empty)
-                    })()
-                }
-                PythonVfsRpcMethod::HttpRequest
-                | PythonVfsRpcMethod::DnsLookup
-                | PythonVfsRpcMethod::SubprocessRun
-                | PythonVfsRpcMethod::SocketConnect
-                | PythonVfsRpcMethod::SocketSend
-                | PythonVfsRpcMethod::SocketRecv
-                | PythonVfsRpcMethod::SocketClose
-                | PythonVfsRpcMethod::UdpCreate
-                | PythonVfsRpcMethod::UdpSendto
-                | PythonVfsRpcMethod::UdpRecvfrom => Err(SidecarError::InvalidState(String::from(
-                    "python non-filesystem RPC reached filesystem dispatcher unexpectedly",
-                ))),
-            }
-        }
-        Err(error) => Err(error),
-    };
-
-    let Some(vm) = sidecar.vms.get_mut(vm_id) else {
-        log_stale_process_event(&sidecar.bridge, vm_id, process_id, "python VFS RPC");
-        return Ok(());
-    };
-    let Some(process) = vm.active_processes.get_mut(process_id) else {
-        log_stale_process_event(&sidecar.bridge, vm_id, process_id, "python VFS RPC");
-        return Ok(());
-    };
-
-    match response {
-        Ok(payload) => process
-            .execution
-            .respond_python_vfs_rpc_success(request.id, payload),
-        Err(error) => process.execution.respond_python_vfs_rpc_error(
-            request.id,
-            "ERR_AGENTOS_PYTHON_VFS_RPC",
-            error.to_string(),
-        ),
-    }
-}
-
-fn stale_filesystem_request_error<B>(
-    sidecar: &NativeSidecar<B>,
-    vm_id: &str,
-    process_id: Option<&str>,
-    context: &str,
-) -> SidecarError
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let message = match process_id {
-        Some(process_id) => format!(
-            "Ignoring stale filesystem request during {context}: VM {vm_id} process {process_id} was already reaped"
-        ),
-        None => format!(
-            "Ignoring stale filesystem request during {context}: VM {vm_id} was already reaped"
-        ),
-    };
-    let _ = sidecar.bridge.emit_log(vm_id, message.clone());
-    SidecarError::InvalidState(message)
-}
-
-pub(crate) fn normalize_python_vfs_rpc_path(path: &str) -> Result<String, SidecarError> {
-    if !path.starts_with('/') {
-        return Err(SidecarError::InvalidState(format!(
-            "python VFS RPC path {path} must be absolute within {PYTHON_VFS_RPC_GUEST_ROOT}"
-        )));
-    }
-
-    // Root is `/`: Python may address the whole guest VFS. Textual `..` segments
-    // are resolved by `normalize_path`, and the kernel enforces fs permissions
-    // plus mount-confinement (openat2 RESOLVE_BENEATH refuses escaping symlinks)
-    // on every op — so confinement is the kernel's job, not a prefix check here.
-    let normalized = normalize_path(path);
-    debug_assert_eq!(PYTHON_VFS_RPC_GUEST_ROOT, "/");
-    Ok(normalized)
-}
-
-/// Kernel-VFS-backed reader for resolver unit tests and kernel-only callers.
-#[cfg(test)]
-struct KernelModuleFsReader<'a> {
-    kernel: &'a mut SidecarKernel,
-}
-
-#[cfg(test)]
-impl ModuleFsReader for KernelModuleFsReader<'_> {
-    fn canonical_guest_path(&mut self, guest_path: &str) -> Option<String> {
-        self.kernel.realpath(guest_path).ok()
-    }
-
-    fn read_to_string(&mut self, guest_path: &str) -> Option<String> {
-        let bytes = self.kernel.read_file(guest_path).ok()?;
-        String::from_utf8(bytes).ok()
-    }
-
-    fn path_is_dir(&mut self, guest_path: &str) -> Option<bool> {
-        self.kernel
-            .stat(guest_path)
-            .ok()
-            .map(|stat| stat.is_directory)
-    }
-
-    fn path_exists(&mut self, guest_path: &str) -> bool {
-        self.kernel.exists(guest_path).unwrap_or(false)
-    }
-}
-
-/// Module reader for live JavaScript processes. In the NodeRuntime embedding,
-/// guest filesystem calls operate on the process' mapped host shadow first and
-/// reconcile back to the kernel on exit. Module resolution must therefore check
-/// that same process shadow before falling back to the sidecar kernel, otherwise
-/// `fs.writeFileSync(...); await import(...)` observes an older filesystem.
-struct ProcessModuleFsReader<'a> {
-    kernel: &'a mut SidecarKernel,
-    process: &'a ActiveProcess,
-}
-
-impl ProcessModuleFsReader<'_> {
-    fn normalize_guest_path(&self, guest_path: &str) -> String {
-        normalize_process_filesystem_rpc_path(self.process, guest_path)
-    }
-
-    fn mapped_host_path(&self, guest_path: &str) -> Option<MappedRuntimeHostPath> {
-        mapped_runtime_host_path_for_read(self.process, guest_path)
-    }
-
-    fn materialize_mapped_path(
-        &mut self,
-        guest_path: &str,
-        mapped: &MappedRuntimeHostPath,
-    ) -> Result<(), SidecarError> {
-        materialize_mapped_host_path_from_kernel(
-            self.kernel,
-            self.process.kernel_pid,
-            guest_path,
-            mapped,
-        )
-    }
-
-    fn open_mapped_path(
-        &mut self,
-        guest_path: &str,
-        operation: &'static str,
-        flags: OFlag,
-    ) -> Option<MappedRuntimeOpenedPath> {
-        let mapped = self.mapped_host_path(guest_path)?;
-        self.materialize_mapped_path(guest_path, &mapped).ok()?;
-        open_mapped_runtime_beneath(&mapped, operation, flags, Mode::empty()).ok()
-    }
-}
-
-impl ModuleFsReader for ProcessModuleFsReader<'_> {
-    fn canonical_guest_path(&mut self, guest_path: &str) -> Option<String> {
-        let normalized = self.normalize_guest_path(guest_path);
-        if self
-            .open_mapped_path(&normalized, "module.realpath", O_PATH_ANCHOR)
-            .is_some()
-        {
-            return Some(normalized);
-        }
-        self.kernel.realpath(&normalized).ok()
-    }
-
-    fn read_to_string(&mut self, guest_path: &str) -> Option<String> {
-        let normalized = self.normalize_guest_path(guest_path);
-        if let Some(opened) = self.open_mapped_path(&normalized, "module.readFile", OFlag::O_RDONLY)
-        {
-            if let Ok(source) = fs::read_to_string(opened.handle.proc_path()) {
-                return Some(source);
-            }
-        }
-
-        let bytes = self.kernel.read_file(&normalized).ok()?;
-        String::from_utf8(bytes).ok()
-    }
-
-    fn path_is_dir(&mut self, guest_path: &str) -> Option<bool> {
-        let normalized = self.normalize_guest_path(guest_path);
-        if let Some(opened) = self.open_mapped_path(&normalized, "module.stat", O_PATH_ANCHOR) {
-            if let Ok(metadata) = fs::metadata(opened.handle.proc_path()) {
-                return Some(metadata.is_dir());
-            }
-        }
-
-        self.kernel
-            .stat(&normalized)
-            .ok()
-            .map(|stat| stat.is_directory)
-    }
-
-    fn path_exists(&mut self, guest_path: &str) -> bool {
-        let normalized = self.normalize_guest_path(guest_path);
-        if self
-            .open_mapped_path(&normalized, "module.exists", O_PATH_ANCHOR)
-            .is_some()
-        {
-            return true;
-        }
-        self.kernel.exists(&normalized).unwrap_or(false)
-    }
-}
-
-/// Resolve / load / format / batch-resolve module requests against the kernel
-/// VFS. Routed here from `service_javascript_sync_rpc` for the
-/// `__resolve_module` / `__load_file` / `__module_format` /
-/// `__batch_resolve_modules` methods (mapped from the guest bridge's
-/// `_resolveModule` / `_loadFile` / `_moduleFormat` / `_batchResolveModules`).
-pub(crate) fn service_javascript_module_sync_rpc(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let mut cache = std::mem::take(&mut process.module_resolution_cache);
-    let value = {
-        let reader = ProcessModuleFsReader {
-            kernel,
-            process: &*process,
-        };
-        let mut resolver = ModuleResolver::new(reader, &mut cache);
-
-        match request.method.as_str() {
-            "__resolve_module" | "_resolveModule" | "_resolveModuleSync" => {
-                let specifier =
-                    javascript_sync_rpc_arg_str(&request.args, 0, "module resolve specifier")?;
-                let parent = request.args.get(1).and_then(Value::as_str).unwrap_or("/");
-                let mode = match request.args.get(2).and_then(Value::as_str) {
-                    Some("import") => ModuleResolveMode::Import,
-                    Some("require") => ModuleResolveMode::Require,
-                    // `_resolveModule` defaults to import; `_resolveModuleSync` to require.
-                    _ if request.method == "_resolveModuleSync" => ModuleResolveMode::Require,
-                    _ => ModuleResolveMode::Import,
-                };
-                resolver
-                    .resolve_module(specifier, parent, mode)
-                    .map(Value::String)
-                    .unwrap_or(Value::Null)
-            }
-            "__load_file" | "_loadFile" | "_loadFileSync" => {
-                let path = javascript_sync_rpc_arg_str(&request.args, 0, "module load path")?;
-                resolver
-                    .load_file(path)
-                    .map(Value::String)
-                    .unwrap_or(Value::Null)
-            }
-            "__module_format" | "_moduleFormat" => {
-                let path = javascript_sync_rpc_arg_str(&request.args, 0, "module format path")?;
-                resolver
-                    .module_format(path)
-                    .map(|format: LocalResolvedModuleFormat| {
-                        Value::String(String::from(format.as_str()))
-                    })
-                    .unwrap_or(Value::Null)
-            }
-            "__batch_resolve_modules" | "_batchResolveModules" => {
-                resolver.batch_resolve_modules(&request.args)
-            }
-            other => {
-                process.module_resolution_cache = cache;
-                return Err(SidecarError::InvalidState(format!(
-                    "unsupported JavaScript module sync RPC method {other}"
-                )));
-            }
-        }
-    };
-    process.module_resolution_cache = cache;
-
-    Ok(value)
-}
-
-#[derive(Clone, Copy, Default)]
-struct FsSyncPhaseStats {
-    calls: u64,
-    total_ns: u128,
-    max_ns: u128,
-}
-
-static FS_SYNC_PHASES: OnceLock<Mutex<BTreeMap<String, FsSyncPhaseStats>>> = OnceLock::new();
-
-struct FsSyncPhaseTimer<'a> {
-    method: &'a str,
-    start: Option<Instant>,
-}
-
-impl<'a> FsSyncPhaseTimer<'a> {
-    fn start(method: &'a str) -> Self {
-        let start = fs_sync_phases_enabled().then(Instant::now);
-        Self { method, start }
-    }
-}
-
-impl Drop for FsSyncPhaseTimer<'_> {
-    fn drop(&mut self) {
-        let Some(start) = self.start else { return };
-        record_fs_sync_phase(self.method, start.elapsed().as_nanos());
-    }
-}
-
-fn record_fs_sync_subphase(method: &str, stage: &str, start: Instant) {
-    if !fs_sync_phases_enabled() {
-        return;
-    }
-    record_fs_sync_phase(&format!("{method}:{stage}"), start.elapsed().as_nanos());
-}
-
-fn fs_sync_phases_enabled() -> bool {
-    matches!(env::var("AGENTOS_FS_SYNC_PHASES").as_deref(), Ok("1"))
-}
-
-fn record_fs_sync_phase(method: &str, elapsed_ns: u128) {
-    let phases = FS_SYNC_PHASES.get_or_init(|| Mutex::new(BTreeMap::new()));
-    let Ok(mut phases) = phases.lock() else {
-        return;
-    };
-    let stats = phases.entry(method.to_string()).or_default();
-    stats.calls += 1;
-    stats.total_ns += elapsed_ns;
-    stats.max_ns = stats.max_ns.max(elapsed_ns);
-
-    let Some(path) = env::var_os("AGENTOS_FS_SYNC_PHASES_FILE") else {
-        return;
-    };
-    let mut output = String::new();
-    for (method, stats) in phases.iter() {
-        let total_us = stats.total_ns / 1_000;
-        let avg_us = if stats.calls == 0 {
-            0
-        } else {
-            total_us / u128::from(stats.calls)
-        };
-        let max_us = stats.max_ns / 1_000;
-        output.push_str(&format!(
-            "method={method} calls={} total_us={total_us} avg_us={avg_us} max_us={max_us}\n",
-            stats.calls
-        ));
-    }
-    let _ = fs::write(path, output);
-}
-
-fn fs_sync_request_marks_host_write_dirty(
-    request: &JavascriptSyncRpcRequest,
-) -> Result<bool, SidecarError> {
-    Ok(match request.method.as_str() {
-        "fs.open" | "fs.openSync" => {
-            let flags = javascript_sync_rpc_arg_u32(&request.args, 1, "filesystem open flags")?;
-            mapped_host_open_is_writable(flags)
-        }
-        "fs.write"
-        | "fs.writeSync"
-        | "fs.writevSync"
-        | "fs.writeFileSync"
-        | "fs.promises.writeFile"
-        | "fs.mkdirSync"
-        | "fs.promises.mkdir"
-        | "fs.copyFileSync"
-        | "fs.promises.copyFile"
-        | "fs.symlinkSync"
-        | "fs.promises.symlink"
-        | "fs.linkSync"
-        | "fs.promises.link"
-        | "fs.renameSync"
-        | "fs.promises.rename"
-        | "fs.rmdirSync"
-        | "fs.promises.rmdir"
-        | "fs.unlinkSync"
-        | "fs.promises.unlink"
-        | "fs.chmodSync"
-        | "fs.promises.chmod"
-        | "fs.chownSync"
-        | "fs.promises.chown"
-        | "fs.utimesSync"
-        | "fs.promises.utimes"
-        | "fs.lutimesSync"
-        | "fs.promises.lutimes"
-        | "fs.futimesSync" => true,
-        _ => false,
-    })
-}
-
-pub(crate) fn service_javascript_fs_read_sync_rpc(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    kernel_pid: u32,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Vec<u8>, SidecarError> {
-    let fd = javascript_sync_rpc_arg_u32(&request.args, 0, "filesystem read fd")?;
-    let length = usize::try_from(javascript_sync_rpc_arg_u64(
-        &request.args,
-        1,
-        "filesystem read length",
-    )?)
-    .map_err(|_| {
-        SidecarError::InvalidState("filesystem read length must fit within usize".to_string())
-    })?;
-    let position =
-        javascript_sync_rpc_arg_u64_optional(&request.args, 2, "filesystem read position")?;
-    if let Some(mapped) = process.mapped_host_fd_mut(fd) {
-        let value = read_mapped_host_fd(mapped, fd, length, position)?;
-        return javascript_sync_rpc_bytes_arg(
-            std::slice::from_ref(&value),
-            0,
-            "filesystem mapped read response",
-        );
-    }
-    match position {
-        Some(offset) => kernel.fd_pread(EXECUTION_DRIVER_NAME, kernel_pid, fd, length, offset),
-        None => kernel.fd_read(EXECUTION_DRIVER_NAME, kernel_pid, fd, length),
-    }
-    .map_err(kernel_error)
-}
-
-pub(crate) fn service_javascript_fs_sync_rpc(
-    kernel: &mut SidecarKernel,
-    process: &mut ActiveProcess,
-    kernel_pid: u32,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Value, SidecarError> {
-    let _phase_timer = FsSyncPhaseTimer::start(request.method.as_str());
-    if fs_sync_request_marks_host_write_dirty(request)? {
-        process.mark_host_write_dirty();
-    }
-    match request.method.as_str() {
-        "fs.open" | "fs.openSync" => {
-            let phase_start = Instant::now();
-            let path =
-                javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem open path")?;
-            let path = path.as_str();
-            let flags = javascript_sync_rpc_arg_u32(&request.args, 1, "filesystem open flags")?;
-            let mode =
-                javascript_sync_rpc_arg_u32_optional(&request.args, 2, "filesystem open mode")?;
-            record_fs_sync_subphase(request.method.as_str(), "parse", phase_start);
-            let phase_start = Instant::now();
-            match mapped_runtime_host_path(process, path, mapped_host_open_is_writable(flags)) {
-                Some(MappedRuntimeHostAccess::Writable(mapped_host)) => {
-                    record_fs_sync_subphase(
-                        request.method.as_str(),
-                        "mapped_host_match",
-                        phase_start,
-                    );
-                    let phase_start = Instant::now();
-                    materialize_mapped_host_path_from_kernel(
-                        kernel,
-                        kernel_pid,
-                        path,
-                        &mapped_host,
-                    )?;
-                    record_fs_sync_subphase(
-                        request.method.as_str(),
-                        "materialize_mapped_host",
-                        phase_start,
-                    );
-                    let phase_start = Instant::now();
-                    let opened = open_mapped_runtime_beneath(
-                        &mapped_host,
-                        "fs.open",
-                        OFlag::from_bits_truncate(flags as i32),
-                        Mode::from_bits_truncate(mode.unwrap_or(0o666) as _),
-                    )?;
-                    record_fs_sync_subphase(
-                        request.method.as_str(),
-                        "open_mapped_beneath",
-                        phase_start,
-                    );
-                    let host_path = opened.host_path.clone();
-                    let phase_start = Instant::now();
-                    return open_mapped_host_fd(
-                        process,
-                        host_path,
-                        Some(path.to_string()),
-                        opened.handle.proc_path(),
-                        flags,
-                    )
-                    .inspect(|_| {
-                        record_fs_sync_subphase(
-                            request.method.as_str(),
-                            "open_mapped_fd",
-                            phase_start,
-                        );
-                    });
-                }
-                Some(MappedRuntimeHostAccess::ReadOnly(_)) => {
-                    return Err(read_only_mapped_runtime_host_path_error(path));
-                }
-                None => {}
-            }
-            record_fs_sync_subphase(request.method.as_str(), "mapped_host_none", phase_start);
-            let phase_start = Instant::now();
-            kernel
-                .fd_open(EXECUTION_DRIVER_NAME, kernel_pid, path, flags, mode)
-                .map(|fd| json!(fd))
-                .map_err(|error| kernel_path_error("fs.open", path, error))
-                .inspect(|_| {
-                    record_fs_sync_subphase(request.method.as_str(), "kernel_fd_open", phase_start);
-                })
-        }
-        "fs.read" | "fs.readSync" => {
-            service_javascript_fs_read_sync_rpc(kernel, process, kernel_pid, request)
-                .map(|bytes| javascript_sync_rpc_bytes_value(&bytes))
-        }
-        "fs.write" | "fs.writeSync" => {
-            let phase_start = Instant::now();
-            let fd = javascript_sync_rpc_arg_u32(&request.args, 0, "filesystem write fd")?;
-            let contents = if let Some(bytes) = request.raw_bytes_args.get(&1) {
-                bytes.clone()
-            } else {
-                javascript_sync_rpc_bytes_arg(&request.args, 1, "filesystem write contents")?
-            };
-            let position = javascript_sync_rpc_arg_u64_optional(
-                &request.args,
-                2,
-                "filesystem write position",
-            )?;
-            record_fs_sync_subphase(request.method.as_str(), "parse", phase_start);
-            let phase_start = Instant::now();
-            if let Some(mapped) = process.mapped_host_fd_mut(fd) {
-                record_fs_sync_subphase(request.method.as_str(), "mapped_fd_match", phase_start);
-                return write_mapped_host_fd(mapped, fd, &contents, position);
-            }
-            record_fs_sync_subphase(request.method.as_str(), "mapped_fd_none", phase_start);
-            let phase_start = Instant::now();
-            let written = match position {
-                Some(offset) => kernel
-                    .fd_pwrite(EXECUTION_DRIVER_NAME, kernel_pid, fd, &contents, offset)
-                    .map_err(kernel_error)?,
-                None => kernel
-                    .fd_write(EXECUTION_DRIVER_NAME, kernel_pid, fd, &contents)
-                    .map_err(kernel_error)?,
-            };
-            record_fs_sync_subphase(request.method.as_str(), "kernel_fd_write", phase_start);
-            let phase_start = Instant::now();
-            let surfaces_stdio =
-                position.is_none() && kernel_fd_surfaces_stdio_event(kernel, kernel_pid, fd)?;
-            record_fs_sync_subphase(request.method.as_str(), "stdio_check", phase_start);
-            if surfaces_stdio {
-                let phase_start = Instant::now();
-                let event = if fd == 1 {
-                    ActiveExecutionEvent::Stdout(contents)
-                } else {
-                    ActiveExecutionEvent::Stderr(contents)
-                };
-                process.queue_pending_execution_event(event)?;
-                record_fs_sync_subphase(request.method.as_str(), "queue_stdio_event", phase_start);
-            } else {
-                let phase_start = Instant::now();
-                mirror_kernel_fd_contents_to_process_shadow(kernel, process, kernel_pid, fd)?;
-                record_fs_sync_subphase(request.method.as_str(), "mirror_shadow", phase_start);
-            }
-            Ok(json!(written))
-        }
-        "fs.writevSync" => {
-            let phase_start = Instant::now();
-            let fd = javascript_sync_rpc_arg_u32(&request.args, 0, "filesystem writev fd")?;
-            let contents = request.raw_bytes_args.get(&1).ok_or_else(|| {
-                SidecarError::InvalidState(String::from(
-                    "filesystem writev requires raw byte payload",
-                ))
-            })?;
-            let position = javascript_sync_rpc_arg_u64_optional(
-                &request.args,
-                2,
-                "filesystem writev position",
-            )?;
-            let buffers = decode_javascript_writev_raw_payload(contents)?;
-            record_fs_sync_subphase(request.method.as_str(), "parse", phase_start);
-
-            let mut total_written = 0usize;
-            if let Some(mapped) = process.mapped_host_fd_mut(fd) {
-                record_fs_sync_subphase(request.method.as_str(), "mapped_fd_match", phase_start);
-                let mut next_position = position;
-                for buffer in buffers {
-                    let written = write_all_mapped_host_fd(mapped, fd, buffer, next_position)?;
-                    total_written = total_written.saturating_add(written);
-                    if let Some(position) = &mut next_position {
-                        *position = position.saturating_add(written as u64);
-                    }
-                }
-                return Ok(json!(total_written));
-            }
-            record_fs_sync_subphase(request.method.as_str(), "mapped_fd_none", phase_start);
-
-            let surfaces_stdio =
-                position.is_none() && kernel_fd_surfaces_stdio_event(kernel, kernel_pid, fd)?;
-            let mut next_position = position;
-            let mut combined_stdio = Vec::new();
-            for buffer in buffers {
-                let mut offset = 0usize;
-                while offset < buffer.len() {
-                    let slice = &buffer[offset..];
-                    let written = match next_position {
-                        Some(position) => kernel
-                            .fd_pwrite(EXECUTION_DRIVER_NAME, kernel_pid, fd, slice, position)
-                            .map_err(kernel_error)?,
-                        None => kernel
-                            .fd_write(EXECUTION_DRIVER_NAME, kernel_pid, fd, slice)
-                            .map_err(kernel_error)?,
-                    };
-                    if written == 0 {
-                        return Err(SidecarError::Execution(format!(
-                            "EIO: filesystem writev made no progress on fd {fd}"
-                        )));
-                    }
-                    offset += written;
-                    total_written = total_written.saturating_add(written);
-                    if let Some(position) = &mut next_position {
-                        *position = position.saturating_add(written as u64);
-                    }
-                }
-                if surfaces_stdio {
-                    combined_stdio.extend_from_slice(buffer);
-                }
-            }
-            record_fs_sync_subphase(request.method.as_str(), "kernel_fd_write", phase_start);
-            if surfaces_stdio && !combined_stdio.is_empty() {
-                let event = if fd == 1 {
-                    ActiveExecutionEvent::Stdout(combined_stdio)
-                } else {
-                    ActiveExecutionEvent::Stderr(combined_stdio)
-                };
-                process.queue_pending_execution_event(event)?;
-            } else {
-                mirror_kernel_fd_contents_to_process_shadow(kernel, process, kernel_pid, fd)?;
-            }
-            Ok(json!(total_written))
-        }
-        "fs.close" | "fs.closeSync" => {
-            let fd = javascript_sync_rpc_arg_u32(&request.args, 0, "filesystem close fd")?;
-            if process.close_mapped_host_fd(fd) {
-                return Ok(Value::Null);
-            }
-            kernel
-                .fd_close(EXECUTION_DRIVER_NAME, kernel_pid, fd)
-                .map(|()| Value::Null)
-                .map_err(kernel_error)
-        }
-        "fs.fstat" | "fs.fstatSync" => {
-            let fd = javascript_sync_rpc_arg_u32(&request.args, 0, "filesystem fstat fd")?;
-            if let Some(mapped) = process.mapped_host_fd(fd) {
-                let metadata = mapped.file.metadata().map_err(|error| {
-                    SidecarError::Io(format!(
-                        "failed to stat mapped guest fd {fd} -> {}: {error}",
-                        mapped.path.display()
-                    ))
-                })?;
-                return Ok(javascript_sync_rpc_host_stat_value(&metadata));
-            }
-            kernel
-                .fd_stat(EXECUTION_DRIVER_NAME, kernel_pid, fd)
-                .map_err(kernel_error)?;
-            kernel
-                .dev_fd_stat(EXECUTION_DRIVER_NAME, kernel_pid, fd)
-                .map(javascript_sync_rpc_stat_value)
-                .map_err(kernel_error)
-        }
-        "fs.fsyncSync" | "fs.fdatasyncSync" => {
-            let fd = javascript_sync_rpc_arg_u32(&request.args, 0, "filesystem sync fd")?;
-            if let Some(mapped) = process.mapped_host_fd(fd) {
-                return mapped
-                    .file
-                    .sync_all()
-                    .map(|()| Value::Null)
-                    .map_err(|error| {
-                        SidecarError::Io(format!(
-                            "failed to sync mapped guest fd {fd} -> {}: {error}",
-                            mapped.path.display()
-                        ))
-                    });
-            }
-            kernel
-                .fd_stat(EXECUTION_DRIVER_NAME, kernel_pid, fd)
-                .map(|_| Value::Null)
-                .map_err(kernel_error)
-        }
-        "fs.ftruncateSync" => {
-            let fd = javascript_sync_rpc_arg_u32(&request.args, 0, "filesystem ftruncate fd")?;
-            let length = javascript_sync_rpc_arg_u64_optional(
-                &request.args,
-                1,
-                "filesystem ftruncate length",
-            )?
-            .unwrap_or(0);
-            if let Some(mapped_guest_path) = process
-                .mapped_host_fd_mut(fd)
-                .map(|mapped| mapped.guest_path.clone())
-            {
-                // `length` is guest-controlled. Bound it before resizing the host
-                // file so a hostile value cannot create an enormous sparse host
-                // file. For a VFS-visible guest path the kernel truncate below is
-                // the primary (configured) size enforcement and mirrors the new
-                // length without reading the whole host file into sidecar memory.
-                if length > MAX_MAPPED_TRUNCATE_BYTES {
-                    return Err(SidecarError::Io(format!(
-                        "ftruncate length {length} exceeds maximum \
-                         {MAX_MAPPED_TRUNCATE_BYTES} for mapped guest fd {fd}"
-                    )));
-                }
-                if let Some(guest_path) = mapped_guest_path.as_deref() {
-                    kernel
-                        .truncate(guest_path, length)
-                        .map_err(|error| kernel_path_error("fs.ftruncate", guest_path, error))?;
-                }
-                let mapped = process.mapped_host_fd_mut(fd).ok_or_else(|| {
-                    SidecarError::Io(format!(
-                        "mapped guest fd {fd} disappeared during ftruncate"
-                    ))
-                })?;
-                mapped.file.set_len(length).map_err(|error| {
-                    SidecarError::Io(format!("failed to truncate mapped guest fd {fd}: {error}"))
-                })?;
-                if let Some(guest_path) = mapped_guest_path.as_deref() {
-                    mirror_kernel_path_to_process_shadow(kernel, process, kernel_pid, guest_path)?;
-                }
-                return Ok(Value::Null);
-            }
-            let fd_stat = kernel
-                .fd_stat(EXECUTION_DRIVER_NAME, kernel_pid, fd)
-                .map_err(kernel_error)?;
-            if (fd_stat.flags & libc::O_ACCMODE as u32) == libc::O_RDONLY as u32 {
-                return Err(SidecarError::Execution(format!(
-                    "EBADF: file descriptor {fd} is not open for writing"
-                )));
-            }
-            let path = kernel
-                .fd_path(EXECUTION_DRIVER_NAME, kernel_pid, fd)
-                .map_err(kernel_error)?;
-            kernel.truncate(&path, length).map_err(kernel_error)?;
-            mirror_kernel_path_to_process_shadow(kernel, process, kernel_pid, &path)?;
-            Ok(Value::Null)
-        }
-        "fs.readFileSync" | "fs.promises.readFile" => {
-            let path = javascript_sync_rpc_path_arg(
-                process,
-                &request.args,
-                0,
-                "filesystem readFile path",
-            )?;
-            let path = path.as_str();
-            let encoding = javascript_sync_rpc_encoding(&request.args);
-            if let Some(mapped_host) = mapped_runtime_host_path_for_read(process, path) {
-                materialize_mapped_host_path_from_kernel(kernel, kernel_pid, path, &mapped_host)?;
-                let opened = open_mapped_runtime_beneath(
-                    &mapped_host,
-                    "fs.readFile",
-                    OFlag::O_RDONLY,
-                    Mode::empty(),
-                )?;
-                let content = fs::read(opened.handle.proc_path()).map_err(|error| {
-                    SidecarError::Io(format!(
-                        "failed to read mapped guest file {} -> {}: {error}",
-                        path,
-                        opened.host_path.display()
-                    ))
-                })?;
-                return Ok(match encoding.as_deref() {
-                    Some("utf8") | Some("utf-8") => {
-                        Value::String(String::from_utf8_lossy(&content).into_owned())
-                    }
-                    _ => javascript_sync_rpc_bytes_value(&content),
-                });
-            }
-            kernel
-                .read_file_for_process(EXECUTION_DRIVER_NAME, kernel_pid, path)
-                .map(|content| match encoding.as_deref() {
-                    Some("utf8") | Some("utf-8") => {
-                        Value::String(String::from_utf8_lossy(&content).into_owned())
-                    }
-                    _ => javascript_sync_rpc_bytes_value(&content),
-                })
-                .map_err(kernel_error)
-        }
-        "fs.writeFileSync" | "fs.promises.writeFile" => {
-            let path = javascript_sync_rpc_path_arg(
-                process,
-                &request.args,
-                0,
-                "filesystem writeFile path",
-            )?;
-            let path = path.as_str();
-            let contents = if let Some(bytes) = request.raw_bytes_args.get(&1) {
-                bytes.clone()
-            } else {
-                javascript_sync_rpc_bytes_arg(&request.args, 1, "filesystem writeFile contents")?
-            };
-            match mapped_runtime_host_path(process, path, true) {
-                Some(MappedRuntimeHostAccess::Writable(mapped_host)) => {
-                    let opened = open_mapped_runtime_beneath(
-                        &mapped_host,
-                        "fs.writeFile",
-                        OFlag::O_WRONLY | OFlag::O_CREAT | OFlag::O_TRUNC,
-                        Mode::from_bits_truncate(
-                            javascript_sync_rpc_option_u32(&request.args, 2, "mode")?
-                                .unwrap_or(0o666) as _,
-                        ),
-                    )?;
-                    fs::write(opened.handle.proc_path(), contents).map_err(|error| {
-                        SidecarError::Io(format!(
-                            "failed to write mapped guest file {} -> {}: {error}",
-                            path,
-                            opened.host_path.display()
-                        ))
-                    })?;
-                    return Ok(Value::Null);
-                }
-                Some(MappedRuntimeHostAccess::ReadOnly(_)) => {
-                    return Err(read_only_mapped_runtime_host_path_error(path));
-                }
-                None => {}
-            }
-            kernel
-                .write_file_for_process(
-                    EXECUTION_DRIVER_NAME,
-                    kernel_pid,
-                    path,
-                    contents,
-                    javascript_sync_rpc_option_u32(&request.args, 2, "mode")?,
-                )
-                .map_err(|error| kernel_path_error("fs.writeFile", path, error))?;
-            mirror_kernel_path_to_process_shadow(kernel, process, kernel_pid, path)?;
-            Ok(Value::Null)
-        }
-        "fs.statSync" | "fs.promises.stat" => {
-            let path =
-                javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem stat path")?;
-            let path = path.as_str();
-            if let Some(mapped_host) = mapped_runtime_host_path_for_read(process, path) {
-                materialize_mapped_host_path_from_kernel(kernel, kernel_pid, path, &mapped_host)?;
-                let opened = open_mapped_runtime_beneath(
-                    &mapped_host,
-                    "fs.stat",
-                    O_PATH_ANCHOR,
-                    Mode::empty(),
-                )?;
-                let metadata = fs::metadata(opened.handle.proc_path()).map_err(|error| {
-                    SidecarError::Io(format!(
-                        "failed to stat mapped guest path {} -> {}: {error}",
-                        path,
-                        opened.host_path.display()
-                    ))
-                })?;
-                return Ok(javascript_sync_rpc_host_stat_value(&metadata));
-            }
-            kernel
-                .stat_for_process(EXECUTION_DRIVER_NAME, kernel_pid, path)
-                .map(javascript_sync_rpc_stat_value)
-                .map_err(kernel_error)
-        }
-        "fs.lstatSync" | "fs.promises.lstat" => {
-            let path =
-                javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem lstat path")?;
-            let path = path.as_str();
-            if let Some(mapped_host) = mapped_runtime_host_path_for_read(process, path) {
-                materialize_mapped_host_path_from_kernel(kernel, kernel_pid, path, &mapped_host)?;
-                let metadata = mapped_runtime_symlink_metadata(&mapped_host, "fs.lstat")?;
-                return Ok(metadata.to_value());
-            }
-            kernel
-                .lstat_for_process(EXECUTION_DRIVER_NAME, kernel_pid, path)
-                .map(javascript_sync_rpc_stat_value)
-                .map_err(kernel_error)
-        }
-        "fs.readdirSync" | "fs.promises.readdir" => {
-            let path =
-                javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem readdir path")?;
-            let path = path.as_str();
-            service_javascript_fs_readdir_entries(kernel, process, kernel_pid, path)
-                .map(javascript_sync_rpc_readdir_typed_value)
-        }
-        "fs.mkdirSync" | "fs.promises.mkdir" => {
-            let path =
-                javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem mkdir path")?;
-            let path = path.as_str();
-            let recursive =
-                javascript_sync_rpc_option_bool(&request.args, 1, "recursive").unwrap_or(false);
-            match mapped_runtime_host_path(process, path, true) {
-                Some(MappedRuntimeHostAccess::Writable(mapped_host)) => {
-                    if mapped_runtime_relative_path(&mapped_host)? == Path::new(".") {
-                        create_mapped_runtime_root_directory(&mapped_host, recursive)?;
-                    } else {
-                        if recursive {
-                            ensure_mapped_runtime_parent_dirs(&mapped_host, "fs.mkdir")?;
-                            let parent =
-                                open_mapped_runtime_parent_beneath(&mapped_host, "fs.mkdir")?;
-                            create_mapped_runtime_directory(&parent, path, true)?;
-                        } else {
-                            let parent =
-                                open_mapped_runtime_parent_beneath(&mapped_host, "fs.mkdir")?;
-                            create_mapped_runtime_directory(&parent, path, false)?;
-                        }
-                    }
-                    return Ok(Value::Null);
-                }
-                Some(MappedRuntimeHostAccess::ReadOnly(_)) => {
-                    return Err(read_only_mapped_runtime_host_path_error(path));
-                }
-                None => {}
-            }
-            kernel
-                .mkdir_for_process(
-                    EXECUTION_DRIVER_NAME,
-                    kernel_pid,
-                    path,
-                    recursive,
-                    javascript_sync_rpc_option_u32(&request.args, 1, "mode")?,
-                )
-                .map(|()| Value::Null)
-                .map_err(kernel_error)
-        }
-        "fs.accessSync" | "fs.promises.access" => {
-            let path =
-                javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem access path")?;
-            let path = path.as_str();
-            let mode =
-                javascript_sync_rpc_arg_u32_optional(&request.args, 1, "filesystem access mode")?
-                    .unwrap_or(0);
-            let valid_mask = libc::R_OK as u32 | libc::W_OK as u32 | libc::X_OK as u32;
-            if mode & !valid_mask != 0 {
-                return Err(SidecarError::Execution(format!(
-                    "EINVAL: invalid filesystem access mode {mode:o}"
-                )));
-            }
-            if let Some(mapped_host) = mapped_runtime_host_path_for_read(process, path) {
-                materialize_mapped_host_path_from_kernel(kernel, kernel_pid, path, &mapped_host)?;
-                let opened = open_mapped_runtime_beneath(
-                    &mapped_host,
-                    "fs.access",
-                    O_PATH_ANCHOR,
-                    Mode::empty(),
-                )?;
-                let metadata = fs::metadata(opened.handle.proc_path()).map_err(|error| {
-                    SidecarError::Io(format!(
-                        "failed to access mapped guest path {} -> {}: {error}",
-                        path,
-                        opened.host_path.display()
-                    ))
-                })?;
-                if !filesystem_access_mode_is_allowed(metadata.permissions().mode(), mode) {
-                    return Err(filesystem_access_denied(path, mode));
-                }
-                return Ok(Value::Null);
-            }
-            let stat = kernel
-                .stat_for_process(EXECUTION_DRIVER_NAME, kernel_pid, path)
-                .map_err(kernel_error)?;
-            if !filesystem_access_mode_is_allowed(stat.mode, mode) {
-                return Err(filesystem_access_denied(path, mode));
-            }
-            Ok(Value::Null)
-        }
-        "fs.copyFileSync" | "fs.promises.copyFile" => {
-            let source = javascript_sync_rpc_path_arg(
-                process,
-                &request.args,
-                0,
-                "filesystem copyFile source",
-            )?;
-            let source = source.as_str();
-            let destination = javascript_sync_rpc_path_arg(
-                process,
-                &request.args,
-                1,
-                "filesystem copyFile destination",
-            )?;
-            let destination = destination.as_str();
-            let source_host = mapped_runtime_host_path(process, source, false);
-            let destination_host = mapped_runtime_host_path(process, destination, true);
-            if matches!(destination_host, Some(MappedRuntimeHostAccess::ReadOnly(_))) {
-                return Err(read_only_mapped_runtime_host_path_error(destination));
-            }
-            if source_host.is_some() || destination_host.is_some() {
-                let contents = match source_host {
-                    Some(MappedRuntimeHostAccess::Writable(ref mapped_host)) => {
-                        let opened = open_mapped_runtime_beneath(
-                            mapped_host,
-                            "fs.copyFile source",
-                            OFlag::O_RDONLY,
-                            Mode::empty(),
-                        )?;
-                        fs::read(opened.handle.proc_path()).map_err(|error| {
-                            SidecarError::Io(format!(
-                                "failed to read mapped guest file {} -> {}: {error}",
-                                source,
-                                opened.host_path.display()
-                            ))
-                        })?
-                    }
-                    Some(MappedRuntimeHostAccess::ReadOnly(ref mapped_host)) => {
-                        let opened = open_mapped_runtime_beneath(
-                            mapped_host,
-                            "fs.copyFile source",
-                            OFlag::O_RDONLY,
-                            Mode::empty(),
-                        )?;
-                        fs::read(opened.handle.proc_path()).map_err(|error| {
-                            SidecarError::Io(format!(
-                                "failed to read mapped guest file {} -> {}: {error}",
-                                source,
-                                opened.host_path.display()
-                            ))
-                        })?
-                    }
-                    None => kernel
-                        .read_file_for_process(EXECUTION_DRIVER_NAME, kernel_pid, source)
-                        .map_err(kernel_error)?,
-                };
-                return match destination_host {
-                    Some(MappedRuntimeHostAccess::Writable(mapped_host)) => {
-                        let opened = open_mapped_runtime_beneath(
-                            &mapped_host,
-                            "fs.copyFile destination",
-                            OFlag::O_WRONLY | OFlag::O_CREAT | OFlag::O_TRUNC,
-                            Mode::from_bits_truncate(0o666),
-                        )?;
-                        fs::write(opened.handle.proc_path(), contents)
-                            .map(|()| Value::Null)
-                            .map_err(|error| {
-                                SidecarError::Io(format!(
-                                    "failed to write mapped guest file {} -> {}: {error}",
-                                    destination,
-                                    opened.host_path.display()
-                                ))
-                            })
-                    }
-                    Some(MappedRuntimeHostAccess::ReadOnly(_)) => {
-                        Err(read_only_mapped_runtime_host_path_error(destination))
-                    }
-                    None => kernel
-                        .write_file_for_process(
-                            EXECUTION_DRIVER_NAME,
-                            kernel_pid,
-                            destination,
-                            contents,
-                            None,
-                        )
-                        .map(|()| Value::Null)
-                        .map_err(kernel_error),
-                };
-            }
-            let contents = kernel
-                .read_file_for_process(EXECUTION_DRIVER_NAME, kernel_pid, source)
-                .map_err(kernel_error)?;
-            kernel
-                .write_file_for_process(
-                    EXECUTION_DRIVER_NAME,
-                    kernel_pid,
-                    destination,
-                    contents,
-                    None,
-                )
-                .map(|()| Value::Null)
-                .map_err(kernel_error)
-        }
-        "fs.existsSync" => {
-            let path =
-                javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem exists path")?;
-            let path = path.as_str();
-            if let Some(mapped_host) = mapped_runtime_host_path_for_read(process, path) {
-                materialize_mapped_host_path_from_kernel(kernel, kernel_pid, path, &mapped_host)?;
-                let exists = match open_mapped_runtime_beneath(
-                    &mapped_host,
-                    "fs.exists",
-                    O_PATH_ANCHOR,
-                    Mode::empty(),
-                ) {
-                    Ok(opened) => fs::metadata(opened.handle.proc_path()).is_ok(),
-                    Err(_) => false,
-                };
-                return Ok(Value::Bool(exists));
-            }
-            kernel
-                .exists_for_process(EXECUTION_DRIVER_NAME, kernel_pid, path)
-                .map(Value::Bool)
-                .map_err(kernel_error)
-        }
-        "fs.readlinkSync" | "fs.promises.readlink" => {
-            let path = javascript_sync_rpc_path_arg(
-                process,
-                &request.args,
-                0,
-                "filesystem readlink path",
-            )?;
-            let path = path.as_str();
-            if let Some(mapped_host) = mapped_runtime_host_path_for_read(process, path) {
-                materialize_mapped_host_path_from_kernel(kernel, kernel_pid, path, &mapped_host)?;
-                let target = read_mapped_runtime_link(&mapped_host, path, "fs.readlink")?;
-                return Ok(Value::String(target.to_string_lossy().into_owned()));
-            }
-            kernel
-                .read_link_for_process(EXECUTION_DRIVER_NAME, kernel_pid, path)
-                .map(Value::String)
-                .map_err(kernel_error)
-        }
-        "fs.symlinkSync" | "fs.promises.symlink" => {
-            let target =
-                javascript_sync_rpc_arg_str(&request.args, 0, "filesystem symlink target")?;
-            let link_path =
-                javascript_sync_rpc_path_arg(process, &request.args, 1, "filesystem symlink path")?;
-            let link_path = link_path.as_str();
-            match mapped_runtime_host_path(process, link_path, true) {
-                Some(MappedRuntimeHostAccess::Writable(mapped_host)) => {
-                    ensure_mapped_runtime_parent_dirs(&mapped_host, "fs.symlink")?;
-                    let parent = open_mapped_runtime_parent_beneath(&mapped_host, "fs.symlink")?;
-                    let host_path = parent.host_path.join(&parent.child_name);
-                    remove_shadow_path_if_exists(&host_path, link_path)?;
-                    mapped_child_symlink(&parent, target).map_err(|error| {
-                        SidecarError::Io(format!(
-                            "failed to create mapped guest symlink {} -> {} ({target}): {error}",
-                            link_path,
-                            host_path.display()
-                        ))
-                    })?;
-                    return Ok(Value::Null);
-                }
-                Some(MappedRuntimeHostAccess::ReadOnly(_)) => {
-                    return Err(read_only_mapped_runtime_host_path_error(link_path));
-                }
-                None => {}
-            }
-            kernel
-                .symlink(target, link_path)
-                .map(|()| Value::Null)
-                .map_err(kernel_error)
-        }
-        "fs.linkSync" | "fs.promises.link" => {
-            let source =
-                javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem link source")?;
-            let source = source.as_str();
-            let destination =
-                javascript_sync_rpc_path_arg(process, &request.args, 1, "filesystem link path")?;
-            let destination = destination.as_str();
-            kernel
-                .link(source, destination)
-                .map(|()| Value::Null)
-                .map_err(kernel_error)
-        }
-        "fs.renameSync" | "fs.promises.rename" => {
-            let source = javascript_sync_rpc_path_arg(
-                process,
-                &request.args,
-                0,
-                "filesystem rename source",
-            )?;
-            let source = source.as_str();
-            let destination = javascript_sync_rpc_path_arg(
-                process,
-                &request.args,
-                1,
-                "filesystem rename destination",
-            )?;
-            let destination = destination.as_str();
-            let source_host = mapped_runtime_host_path(process, source, true);
-            let destination_host = mapped_runtime_host_path(process, destination, true);
-            if matches!(source_host, Some(MappedRuntimeHostAccess::ReadOnly(_))) {
-                return Err(read_only_mapped_runtime_host_path_error(source));
-            }
-            if matches!(destination_host, Some(MappedRuntimeHostAccess::ReadOnly(_))) {
-                return Err(read_only_mapped_runtime_host_path_error(destination));
-            }
-            if source_host.is_some() || destination_host.is_some() {
-                return rename_mapped_host_path(source, source_host, destination, destination_host);
-            }
-            kernel
-                .rename(source, destination)
-                .map(|()| Value::Null)
-                .map_err(kernel_error)
-        }
-        "fs.rmdirSync" | "fs.promises.rmdir" => {
-            let path =
-                javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem rmdir path")?;
-            let path = path.as_str();
-            match mapped_runtime_host_path(process, path, true) {
-                Some(MappedRuntimeHostAccess::Writable(mapped_host)) => {
-                    let parent = open_mapped_runtime_parent_beneath(&mapped_host, "fs.rmdir")?;
-                    let host_path = parent.host_path.join(&parent.child_name);
-                    mapped_child_remove_dir(&parent).map_err(|error| {
-                        SidecarError::Io(format!(
-                            "failed to remove mapped guest directory {} -> {}: {error}",
-                            path,
-                            host_path.display()
-                        ))
-                    })?;
-                    // Mirror the deletion into the kernel for the same reason as
-                    // fs.unlink below: readdir/stat merge kernel state, so a
-                    // kernel-backed directory would otherwise resurrect.
-                    if let Err(error) = kernel.remove_dir(path) {
-                        if error.code() != "ENOENT" {
-                            return Err(kernel_error(error));
-                        }
-                    }
-                    return Ok(Value::Null);
-                }
-                Some(MappedRuntimeHostAccess::ReadOnly(_)) => {
-                    return Err(read_only_mapped_runtime_host_path_error(path));
-                }
-                None => {}
-            }
-            kernel
-                .remove_dir(path)
-                .map(|()| Value::Null)
-                .map_err(kernel_error)
-        }
-        "fs.unlinkSync" | "fs.promises.unlink" => {
-            let path =
-                javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem unlink path")?;
-            let path = path.as_str();
-            match mapped_runtime_host_path(process, path, true) {
-                Some(MappedRuntimeHostAccess::Writable(mapped_host)) => {
-                    let parent = open_mapped_runtime_parent_beneath(&mapped_host, "fs.unlink")?;
-                    let host_path = parent.host_path.join(&parent.child_name);
-                    mapped_child_remove_file(&parent).map_err(|error| {
-                        SidecarError::Io(format!(
-                            "failed to remove mapped guest file {} -> {}: {error}",
-                            path,
-                            host_path.display()
-                        ))
-                    })?;
-                    // The shadow cannot express deletions, and readdir/stat now
-                    // merge kernel state into the mapped view — without a kernel
-                    // removal a kernel-backed file (e.g. created by a wasm
-                    // command) would resurrect in the very listing that follows
-                    // the unlink. Best-effort: absent kernel entries are fine.
-                    if let Err(error) = kernel.remove_file(path) {
-                        if error.code() != "ENOENT" {
-                            return Err(kernel_error(error));
-                        }
-                    }
-                    return Ok(Value::Null);
-                }
-                Some(MappedRuntimeHostAccess::ReadOnly(_)) => {
-                    return Err(read_only_mapped_runtime_host_path_error(path));
-                }
-                None => {}
-            }
-            kernel
-                .remove_file(path)
-                .map(|()| Value::Null)
-                .map_err(kernel_error)
-        }
-        "fs.chmodSync" | "fs.promises.chmod" => {
-            let path =
-                javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem chmod path")?;
-            let path = path.as_str();
-            let mode = javascript_sync_rpc_arg_u32(&request.args, 1, "filesystem chmod mode")?;
-            match mapped_runtime_host_path(process, path, true) {
-                Some(MappedRuntimeHostAccess::Writable(mapped_host)) => {
-                    materialize_mapped_host_path_from_kernel(
-                        kernel,
-                        kernel_pid,
-                        path,
-                        &mapped_host,
-                    )?;
-                    let opened = open_mapped_runtime_beneath(
-                        &mapped_host,
-                        "fs.chmod",
-                        O_PATH_ANCHOR,
-                        Mode::empty(),
-                    )?;
-                    if kernel
-                        .exists_for_process(EXECUTION_DRIVER_NAME, kernel_pid, path)
-                        .map_err(kernel_error)?
-                    {
-                        kernel.chmod(path, mode).map_err(kernel_error)?;
-                    }
-                    fs::set_permissions(
-                        opened.handle.proc_path(),
-                        fs::Permissions::from_mode(mode & 0o7777),
-                    )
-                    .map_err(|error| {
-                        SidecarError::Io(format!(
-                            "failed to chmod mapped guest path {} -> {}: {error}",
-                            path,
-                            opened.host_path.display()
-                        ))
-                    })?;
-                    return Ok(Value::Null);
-                }
-                Some(MappedRuntimeHostAccess::ReadOnly(_)) => {
-                    return Err(read_only_mapped_runtime_host_path_error(path));
-                }
-                None => {}
-            }
-            kernel
-                .chmod(path, mode)
-                .map(|()| Value::Null)
-                .map_err(kernel_error)
-        }
-        "fs.chownSync" | "fs.promises.chown" => {
-            let path =
-                javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem chown path")?;
-            let path = path.as_str();
-            let uid = javascript_sync_rpc_arg_u32(&request.args, 1, "filesystem chown uid")?;
-            let gid = javascript_sync_rpc_arg_u32(&request.args, 2, "filesystem chown gid")?;
-            kernel
-                .chown(path, uid, gid)
-                .map(|()| Value::Null)
-                .map_err(kernel_error)
-        }
-        "fs.utimesSync" | "fs.promises.utimes" | "fs.lutimesSync" | "fs.promises.lutimes" => {
-            let path =
-                javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem utimes path")?;
-            let path = path.as_str();
-            let atime = parse_utime_arg(&request.args, 1, "filesystem utimes atime")?;
-            let mtime = parse_utime_arg(&request.args, 2, "filesystem utimes mtime")?;
-            let follow_symlinks = !matches!(
-                request.method.as_str(),
-                "fs.lutimesSync" | "fs.promises.lutimes"
-            );
-            if let Some(shadow_path) = process_shadow_host_path(process, path) {
-                if fs::symlink_metadata(&shadow_path).is_ok() {
-                    let result = if follow_symlinks {
-                        kernel.utimes_spec(path, atime, mtime)
-                    } else {
-                        kernel.lutimes(path, atime, mtime)
-                    };
-                    if let Err(error) = result {
-                        if error.code() != "ENOENT" {
-                            return Err(kernel_error(error));
-                        }
-                    }
-                    apply_host_path_utimens(
-                        &shadow_path,
-                        atime,
-                        mtime,
-                        follow_symlinks,
-                        &format!("failed to update process shadow path times {path}"),
-                    )?;
-                    return Ok(Value::Null);
-                }
-            }
-            match mapped_runtime_host_path(process, path, true) {
-                Some(MappedRuntimeHostAccess::Writable(mapped_host)) => {
-                    let mapped_host_exists = match fs::symlink_metadata(&mapped_host.host_path) {
-                        Ok(_) => true,
-                        Err(error) if error.kind() == std::io::ErrorKind::NotFound => {
-                            materialize_mapped_host_path_from_kernel(
-                                kernel,
-                                kernel_pid,
-                                path,
-                                &mapped_host,
-                            )?;
-                            fs::symlink_metadata(&mapped_host.host_path).is_ok()
-                        }
-                        Err(error) => {
-                            return Err(SidecarError::Io(format!(
-                                "failed to inspect mapped guest path {} -> {}: {error}",
-                                path,
-                                mapped_host.host_path.display()
-                            )));
-                        }
-                    };
-                    if mapped_host_exists {
-                        let context = format!("failed to update mapped guest path times {path}");
-                        // Resolve the host target up front and hold the handle across
-                        // the kernel update so the apply below operates on the verified
-                        // fd. (The handle must stay alive: a `/proc/self/fd` path is
-                        // only valid while its fd is open, and the macOS fd-relative
-                        // path needs the live parent fd.)
-                        let follow_handle = if follow_symlinks {
-                            Some(open_mapped_runtime_beneath(
-                                &mapped_host,
-                                "fs.utimes",
-                                O_PATH_ANCHOR,
-                                Mode::empty(),
-                            )?)
-                        } else {
-                            None
-                        };
-                        let parent_handle = if follow_symlinks {
-                            None
-                        } else {
-                            Some(open_mapped_runtime_parent_beneath(
-                                &mapped_host,
-                                "fs.lutimes",
-                            )?)
-                        };
-                        if kernel
-                            .exists_for_process(EXECUTION_DRIVER_NAME, kernel_pid, path)
-                            .map_err(kernel_error)?
-                        {
-                            let result = if follow_symlinks {
-                                kernel.utimes_spec(path, atime, mtime)
-                            } else {
-                                kernel.lutimes(path, atime, mtime)
-                            };
-                            if let Err(error) = result {
-                                if error.code() != "ENOENT" {
-                                    return Err(kernel_error(error));
-                                }
-                            }
-                        }
-                        if let Some(opened) = &follow_handle {
-                            apply_host_path_utimens(
-                                &opened.handle.proc_path(),
-                                atime,
-                                mtime,
-                                true,
-                                &context,
-                            )?;
-                        } else if let Some(parent) = &parent_handle {
-                            apply_mapped_child_utimens(parent, atime, mtime, &context)?;
-                        }
-                        return Ok(Value::Null);
-                    }
-                }
-                Some(MappedRuntimeHostAccess::ReadOnly(_)) => {
-                    return Err(read_only_mapped_runtime_host_path_error(path));
-                }
-                None => {}
-            }
-            if follow_symlinks {
-                kernel
-                    .utimes_spec(path, atime, mtime)
-                    .map_err(kernel_error)?;
-            } else {
-                kernel.lutimes(path, atime, mtime).map_err(kernel_error)?;
-            };
-            Ok(Value::Null)
-        }
-        "fs.futimesSync" => {
-            let fd = javascript_sync_rpc_arg_u32(&request.args, 0, "filesystem futimes fd")?;
-            let atime = parse_utime_arg(&request.args, 1, "filesystem futimes atime")?;
-            let mtime = parse_utime_arg(&request.args, 2, "filesystem futimes mtime")?;
-            kernel
-                .futimes(EXECUTION_DRIVER_NAME, kernel_pid, fd, atime, mtime)
-                .map(|()| Value::Null)
-                .map_err(kernel_error)
-        }
-        _ => Err(SidecarError::InvalidState(format!(
-            "unsupported JavaScript sync RPC method {}",
-            request.method
-        ))),
-    }
-}
-
-fn kernel_fd_surfaces_stdio_event(
-    kernel: &SidecarKernel,
-    kernel_pid: u32,
-    fd: u32,
-) -> Result<bool, SidecarError> {
-    let path = match fd {
-        1 | 2 => kernel
-            .fd_path(EXECUTION_DRIVER_NAME, kernel_pid, fd)
-            .map_err(kernel_error)?,
-        _ => return Ok(false),
-    };
-    Ok(matches!(
-        (fd, path.as_str()),
-        (1, "/dev/stdout") | (2, "/dev/stderr")
-    ))
-}
-
-fn javascript_sync_rpc_path_arg(
-    process: &ActiveProcess,
-    args: &[Value],
-    index: usize,
-    label: &str,
-) -> Result<String, SidecarError> {
-    let path = javascript_sync_rpc_arg_str(args, index, label)?;
-    Ok(normalize_process_filesystem_rpc_path(process, path))
-}
-
-fn normalize_process_filesystem_rpc_path(process: &ActiveProcess, path: &str) -> String {
-    let host_path = Path::new(path);
-    if host_path.is_absolute() {
-        let normalized_host_path = normalize_host_path(host_path);
-        if let Some(guest_path) =
-            guest_path_from_runtime_host_mappings(process, &normalized_host_path)
-        {
-            return guest_path;
-        }
-        if let Some(sandbox_root) = process
-            .env
-            .get(EXECUTION_SANDBOX_ROOT_ENV)
-            .filter(|value| !value.is_empty())
-            .map(PathBuf::from)
-            .map(|path| normalize_host_path(&path))
-        {
-            if let Ok(suffix) = normalized_host_path.strip_prefix(&sandbox_root) {
-                let suffix = suffix.to_string_lossy();
-                return normalize_path(&format!("/{}", suffix.trim_start_matches('/')));
-            }
-        }
-    }
-    path.to_owned()
-}
-
-fn guest_path_from_runtime_host_mappings(
-    process: &ActiveProcess,
-    host_path: &Path,
-) -> Option<String> {
-    runtime_guest_host_mappings(process)
-        .into_iter()
-        .filter_map(|(guest_path, host_root)| {
-            host_path.strip_prefix(&host_root).ok().map(|suffix| {
-                let suffix = suffix.to_string_lossy();
-                normalize_path(&format!(
-                    "{}/{}",
-                    guest_path.trim_end_matches('/'),
-                    suffix.trim_start_matches('/')
-                ))
-            })
-        })
-        .max_by_key(String::len)
-}
-
-fn runtime_guest_host_mappings(process: &ActiveProcess) -> Vec<(String, PathBuf)> {
-    let Some(mappings) = process
-        .env
-        .get("AGENTOS_GUEST_PATH_MAPPINGS")
-        .and_then(|value| serde_json::from_str::<Vec<RuntimeGuestPathMappingWire>>(value).ok())
-    else {
-        return Vec::new();
-    };
-    mappings
-        .into_iter()
-        .filter_map(|mapping| {
-            if mapping.guest_path.is_empty() || mapping.host_path.is_empty() {
-                return None;
-            }
-            let host_root = PathBuf::from(mapping.host_path);
-            let normalized_host_root = if host_root.is_absolute() {
-                normalize_host_path(&host_root)
-            } else {
-                normalize_host_path(&std::env::current_dir().ok()?.join(host_root))
-            };
-            Some((normalize_path(&mapping.guest_path), normalized_host_root))
-        })
-        .collect()
-}
-
-fn mirror_kernel_fd_contents_to_process_shadow(
-    kernel: &mut SidecarKernel,
-    process: &ActiveProcess,
-    kernel_pid: u32,
-    fd: u32,
-) -> Result<(), SidecarError> {
-    let path = kernel
-        .fd_path(EXECUTION_DRIVER_NAME, kernel_pid, fd)
-        .map_err(kernel_error)?;
-    let path = normalize_process_filesystem_rpc_path(process, &path);
-    mirror_kernel_path_to_process_shadow(kernel, process, kernel_pid, &path)
-}
-
-fn mirror_kernel_path_to_process_shadow(
-    kernel: &mut SidecarKernel,
-    process: &ActiveProcess,
-    kernel_pid: u32,
-    guest_path: &str,
-) -> Result<(), SidecarError> {
-    let Some(shadow_path) = resolve_process_guest_path_to_host(process, guest_path) else {
-        return Ok(());
-    };
-    let bytes = kernel
-        .read_file_for_process(EXECUTION_DRIVER_NAME, kernel_pid, guest_path)
-        .map_err(kernel_error)?;
-    write_process_shadow_file(&shadow_path, guest_path, &bytes)
-}
-
-fn write_process_shadow_file(
-    shadow_path: &Path,
-    guest_path: &str,
-    bytes: &[u8],
-) -> Result<(), SidecarError> {
-    if let Some(parent) = shadow_path.parent() {
-        fs::create_dir_all(parent).map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to create shadow parent for {}: {error}",
-                normalize_path(guest_path)
-            ))
-        })?;
-    }
-    match fs::symlink_metadata(shadow_path) {
-        Ok(metadata) if metadata.file_type().is_symlink() => {
-            fs::remove_file(shadow_path).map_err(|error| {
-                SidecarError::Io(format!(
-                    "failed to replace shadow symlink for {}: {error}",
-                    normalize_path(guest_path)
-                ))
-            })?;
-        }
-        Ok(metadata) if metadata.is_dir() => {
-            fs::remove_dir_all(shadow_path).map_err(|error| {
-                SidecarError::Io(format!(
-                    "failed to replace shadow directory for {}: {error}",
-                    normalize_path(guest_path)
-                ))
-            })?;
-        }
-        Ok(_) => {}
-        Err(error) if error.kind() == std::io::ErrorKind::NotFound => {}
-        Err(error) => {
-            return Err(SidecarError::Io(format!(
-                "failed to inspect shadow path for {}: {error}",
-                normalize_path(guest_path)
-            )));
-        }
-    }
-    fs::write(shadow_path, bytes).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to mirror kernel file {} into process shadow: {error}",
-            normalize_path(guest_path)
-        ))
-    })
-}
-
-fn javascript_sync_rpc_stat_value(stat: VirtualStat) -> Value {
-    let mut value = Map::with_capacity(18);
-    value.insert("mode".to_string(), Value::from(stat.mode));
-    value.insert("size".to_string(), Value::from(stat.size));
-    value.insert("blocks".to_string(), Value::from(stat.blocks));
-    value.insert("dev".to_string(), Value::from(stat.dev));
-    value.insert("rdev".to_string(), Value::from(stat.rdev));
-    value.insert("isDirectory".to_string(), Value::from(stat.is_directory));
-    value.insert(
-        "isSymbolicLink".to_string(),
-        Value::from(stat.is_symbolic_link),
-    );
-    value.insert("atimeMs".to_string(), Value::from(stat.atime_ms));
-    value.insert("atimeNsec".to_string(), Value::from(stat.atime_nsec));
-    value.insert("mtimeMs".to_string(), Value::from(stat.mtime_ms));
-    value.insert("mtimeNsec".to_string(), Value::from(stat.mtime_nsec));
-    value.insert("ctimeMs".to_string(), Value::from(stat.ctime_ms));
-    value.insert("ctimeNsec".to_string(), Value::from(stat.ctime_nsec));
-    value.insert("birthtimeMs".to_string(), Value::from(stat.birthtime_ms));
-    value.insert("ino".to_string(), Value::from(stat.ino));
-    value.insert("nlink".to_string(), Value::from(stat.nlink));
-    value.insert("uid".to_string(), Value::from(stat.uid));
-    value.insert("gid".to_string(), Value::from(stat.gid));
-    Value::Object(value)
-}
-
-fn javascript_sync_rpc_host_stat_value(metadata: &fs::Metadata) -> Value {
-    let mut value = Map::with_capacity(15);
-    value.insert("mode".to_string(), Value::from(metadata.mode()));
-    value.insert("size".to_string(), Value::from(metadata.size()));
-    value.insert("blocks".to_string(), Value::from(metadata.blocks()));
-    value.insert("dev".to_string(), Value::from(metadata.dev()));
-    value.insert("rdev".to_string(), Value::from(metadata.rdev()));
-    value.insert("isDirectory".to_string(), Value::from(metadata.is_dir()));
-    value.insert(
-        "isSymbolicLink".to_string(),
-        Value::from(metadata.file_type().is_symlink()),
-    );
-    value.insert(
-        "atimeMs".to_string(),
-        Value::from(metadata.atime() * 1000 + (metadata.atime_nsec() / 1_000_000)),
-    );
-    value.insert(
-        "mtimeMs".to_string(),
-        Value::from(metadata.mtime() * 1000 + (metadata.mtime_nsec() / 1_000_000)),
-    );
-    value.insert(
-        "ctimeMs".to_string(),
-        Value::from(metadata.ctime() * 1000 + (metadata.ctime_nsec() / 1_000_000)),
-    );
-    value.insert(
-        "birthtimeMs".to_string(),
-        Value::from(metadata.ctime() * 1000 + (metadata.ctime_nsec() / 1_000_000)),
-    );
-    value.insert("ino".to_string(), Value::from(metadata.ino()));
-    value.insert("nlink".to_string(), Value::from(metadata.nlink()));
-    value.insert("uid".to_string(), Value::from(metadata.uid()));
-    value.insert("gid".to_string(), Value::from(metadata.gid()));
-    Value::Object(value)
-}
-
-fn mapped_runtime_host_path(
-    process: &ActiveProcess,
-    guest_path: &str,
-    writable: bool,
-) -> Option<MappedRuntimeHostAccess> {
-    if process_prefers_kernel_fs_sync_rpc(process) {
-        return None;
-    }
-
-    let normalized = if guest_path.starts_with('/') {
-        normalize_path(guest_path)
-    } else {
-        normalize_path(&format!(
-            "{}/{}",
-            process.guest_cwd.trim_end_matches('/'),
-            guest_path
-        ))
-    };
-    let mappings = process
-        .env
-        .get("AGENTOS_GUEST_PATH_MAPPINGS")
-        .and_then(|value| serde_json::from_str::<Vec<RuntimeGuestPathMappingWire>>(value).ok())?;
-    let mut sorted_mappings = mappings
-        .into_iter()
-        .filter_map(|mapping| {
-            (!mapping.guest_path.is_empty() && !mapping.host_path.is_empty()).then_some((
-                normalize_path(&mapping.guest_path),
-                PathBuf::from(mapping.host_path),
-            ))
-        })
-        .collect::<Vec<_>>();
-    sorted_mappings.sort_by_key(|mapping| std::cmp::Reverse(mapping.0.len()));
-    let readable_roots = runtime_host_access_roots(process, "AGENTOS_EXTRA_FS_READ_PATHS")?;
-    let writable_roots = writable
-        .then(|| runtime_host_access_roots(process, "AGENTOS_EXTRA_FS_WRITE_PATHS"))
-        .flatten()
-        .unwrap_or_default();
-
-    for (guest_root, host_root) in sorted_mappings {
-        if guest_root != "/"
-            && normalized != guest_root
-            && !normalized.starts_with(&format!("{guest_root}/"))
-        {
-            continue;
-        }
-        if guest_root == "/" && !normalized.starts_with('/') {
-            continue;
-        }
-
-        let normalized_host_root = if host_root.is_absolute() {
-            normalize_host_path(&host_root)
-        } else {
-            normalize_host_path(&std::env::current_dir().ok()?.join(host_root))
-        };
-        let suffix = if guest_root == "/" {
-            normalized.trim_start_matches('/')
-        } else {
-            normalized
-                .strip_prefix(&guest_root)
-                .unwrap_or_default()
-                .trim_start_matches('/')
-        };
-        let host_path = if suffix.is_empty() {
-            normalized_host_root.clone()
-        } else {
-            normalized_host_root.join(suffix)
-        };
-
-        let is_asset_path = guest_root == PYTHON_PYODIDE_GUEST_ROOT
-            || normalized == PYTHON_PYODIDE_GUEST_ROOT
-            || normalized.starts_with(&format!("{PYTHON_PYODIDE_GUEST_ROOT}/"));
-        let is_cache_path = guest_root == PYTHON_PYODIDE_CACHE_GUEST_ROOT
-            || normalized == PYTHON_PYODIDE_CACHE_GUEST_ROOT
-            || normalized.starts_with(&format!("{PYTHON_PYODIDE_CACHE_GUEST_ROOT}/"));
-        if is_asset_path && !writable {
-            return Some(MappedRuntimeHostAccess::Writable(MappedRuntimeHostPath {
-                guest_path: normalized.clone(),
-                host_root: normalized_host_root.clone(),
-                host_path,
-            }));
-        }
-        if is_cache_path {
-            return Some(MappedRuntimeHostAccess::Writable(MappedRuntimeHostPath {
-                guest_path: normalized.clone(),
-                host_root: normalized_host_root.clone(),
-                host_path,
-            }));
-        }
-
-        let Some(read_root) = readable_roots
-            .iter()
-            .find(|root| path_is_within_root(&host_path, root))
-            .cloned()
-        else {
-            continue;
-        };
-        if !writable {
-            return Some(MappedRuntimeHostAccess::Writable(MappedRuntimeHostPath {
-                guest_path: normalized.clone(),
-                host_root: read_root.clone(),
-                host_path,
-            }));
-        }
-        if let Some(write_root) = writable_roots
-            .iter()
-            .find(|root| path_is_within_root(&host_path, root))
-            .cloned()
-        {
-            return Some(MappedRuntimeHostAccess::Writable(MappedRuntimeHostPath {
-                guest_path: normalized.clone(),
-                host_root: write_root.clone(),
-                host_path,
-            }));
-        }
-        if guest_root != "/" {
-            return Some(MappedRuntimeHostAccess::ReadOnly(MappedRuntimeHostPath {
-                guest_path: normalized.clone(),
-                host_root: read_root.clone(),
-                host_path,
-            }));
-        }
-    }
-
-    None
-}
-
-fn mapped_runtime_host_path_for_read(
-    process: &ActiveProcess,
-    guest_path: &str,
-) -> Option<MappedRuntimeHostPath> {
-    match mapped_runtime_host_path(process, guest_path, false) {
-        Some(MappedRuntimeHostAccess::Writable(mapped_host))
-        | Some(MappedRuntimeHostAccess::ReadOnly(mapped_host)) => Some(mapped_host),
-        None => None,
-    }
-}
-
-fn process_shadow_host_path(process: &ActiveProcess, guest_path: &str) -> Option<PathBuf> {
-    if process_prefers_kernel_fs_sync_rpc(process) {
-        return None;
-    }
-
-    let normalized_guest_path = normalized_process_guest_path(process, guest_path);
-    let normalized_guest_cwd = normalize_path(&process.guest_cwd);
-    let mut host_root = normalize_host_path(&process.host_cwd);
-    for _ in normalized_guest_cwd
-        .trim_start_matches('/')
-        .split('/')
-        .filter(|segment| !segment.is_empty())
-    {
-        host_root = host_root.parent()?.to_path_buf();
-    }
-    if normalized_guest_path == "/" {
-        Some(host_root)
-    } else {
-        Some(host_root.join(normalized_guest_path.trim_start_matches('/')))
-    }
-}
-
-fn normalized_process_guest_path(process: &ActiveProcess, guest_path: &str) -> String {
-    if guest_path.starts_with('/') {
-        normalize_path(guest_path)
-    } else {
-        normalize_path(&format!(
-            "{}/{}",
-            process.guest_cwd.trim_end_matches('/'),
-            guest_path
-        ))
-    }
-}
-
-fn process_prefers_kernel_fs_sync_rpc(process: &ActiveProcess) -> bool {
-    process.runtime == GuestRuntimeKind::WebAssembly
-        && process
-            .env
-            .get(EXECUTION_SANDBOX_ROOT_ENV)
-            .is_some_and(|value| !value.is_empty())
-}
-
-fn runtime_host_access_roots(process: &ActiveProcess, key: &str) -> Option<Vec<PathBuf>> {
-    process
-        .env
-        .get(key)
-        .and_then(|value| serde_json::from_str::<Vec<String>>(value).ok())
-        .map(|roots| {
-            roots
-                .into_iter()
-                .map(PathBuf::from)
-                .map(|root| normalize_host_path(&root))
-                .collect()
-        })
-}
-
-fn mapped_runtime_child_mount_basenames(process: &ActiveProcess, guest_path: &str) -> Vec<String> {
-    let normalized = normalize_path(guest_path);
-    let mappings = process
-        .env
-        .get("AGENTOS_GUEST_PATH_MAPPINGS")
-        .and_then(|value| serde_json::from_str::<Vec<RuntimeGuestPathMappingWire>>(value).ok())
-        .unwrap_or_default();
-    let mut basenames = BTreeSet::new();
-    for mapping in mappings {
-        let guest_root = normalize_path(&mapping.guest_path);
-        if guest_root == "/" || guest_root == normalized {
-            continue;
-        }
-        if mapped_runtime_parent_path(&guest_root) == normalized {
-            basenames.insert(mapped_runtime_basename(&guest_root));
-        }
-    }
-    basenames.into_iter().collect()
-}
-
-fn mapped_runtime_parent_path(path: &str) -> String {
-    let normalized = normalize_path(path);
-    let parent = Path::new(&normalized)
-        .parent()
-        .unwrap_or_else(|| Path::new("/"));
-    let value = parent.to_string_lossy();
-    if value.is_empty() {
-        String::from("/")
-    } else {
-        value.into_owned()
-    }
-}
-
-fn mapped_runtime_basename(path: &str) -> String {
-    let normalized = normalize_path(path);
-    Path::new(&normalized)
-        .file_name()
-        .map(|value| value.to_string_lossy().into_owned())
-        .unwrap_or_else(|| String::from("/"))
-}
-
-fn read_only_mapped_runtime_host_path_error(guest_path: &str) -> SidecarError {
-    SidecarError::Kernel(format!("EROFS: read-only filesystem: {guest_path}"))
-}
-
-#[cfg(not(target_os = "macos"))]
-fn mapped_runtime_resolve_flags() -> ResolveFlag {
-    ResolveFlag::RESOLVE_BENEATH | ResolveFlag::RESOLVE_NO_MAGICLINKS
-}
-
-/// Open `relative` strictly beneath the mapped mount root, returning an owned
-/// raw fd. Linux resolves with `openat2(RESOLVE_BENEATH | RESOLVE_NO_MAGICLINKS)`
-/// anchored on `root_dir`; macOS has no such syscall and resolves beneath
-/// `host_root` with cap-std (see [`crate::macos_fs`]).
-#[cfg(not(target_os = "macos"))]
-fn mapped_runtime_open_fd(
-    root_dir: &AnchoredFd,
-    _host_root: &Path,
-    relative: &Path,
-    flags: OFlag,
-    mode: Mode,
-) -> Result<RawFd, Errno> {
-    openat2(
-        root_dir.as_raw_fd(),
-        relative,
-        OpenHow::new()
-            .flags(flags | OFlag::O_CLOEXEC)
-            .mode(mode)
-            .resolve(mapped_runtime_resolve_flags()),
-    )
-}
-
-#[cfg(target_os = "macos")]
-fn mapped_runtime_open_fd(
-    _root_dir: &AnchoredFd,
-    host_root: &Path,
-    relative: &Path,
-    flags: OFlag,
-    mode: Mode,
-) -> Result<RawFd, Errno> {
-    crate::macos_fs::resolve_beneath(host_root, relative, flags, mode)
-}
-
-fn mapped_runtime_relative_path(mapped: &MappedRuntimeHostPath) -> Result<PathBuf, SidecarError> {
-    let normalized_root = normalize_host_path(&mapped.host_root);
-    let normalized_path = normalize_host_path(&mapped.host_path);
-    if !path_is_within_root(&normalized_path, &normalized_root) {
-        return Err(mapped_runtime_host_path_escape_error(
-            mapped,
-            &normalized_path,
-        ));
-    }
-    let relative = normalized_path
-        .strip_prefix(&normalized_root)
-        .map_err(|error| {
-            SidecarError::InvalidState(format!(
-                "failed to relativize mapped guest path {} ({} against {}): {error}",
-                mapped.guest_path,
-                normalized_path.display(),
-                normalized_root.display()
-            ))
-        })?;
-    Ok(if relative.as_os_str().is_empty() {
-        PathBuf::from(".")
-    } else {
-        relative.to_path_buf()
-    })
-}
-
-fn open_mapped_runtime_root_dir(
-    mapped: &MappedRuntimeHostPath,
-    operation: &str,
-) -> Result<AnchoredFd, SidecarError> {
-    let fd = open(
-        &mapped.host_root,
-        OFlag::O_CLOEXEC | OFlag::O_DIRECTORY | OFlag::O_RDONLY,
-        Mode::empty(),
-    )
-    .map_err(|error| {
-        SidecarError::Io(format!(
-            "{operation}: failed to open mapped host root {} for {}: {}",
-            mapped.host_root.display(),
-            mapped.guest_path,
-            std::io::Error::from_raw_os_error(error as i32)
-        ))
-    })?;
-    Ok(AnchoredFd { fd })
-}
-
-fn open_mapped_runtime_beneath(
-    mapped: &MappedRuntimeHostPath,
-    operation: &str,
-    flags: OFlag,
-    mode: Mode,
-) -> Result<MappedRuntimeOpenedPath, SidecarError> {
-    let root_dir = open_mapped_runtime_root_dir(mapped, operation)?;
-    let relative = mapped_runtime_relative_path(mapped)?;
-    let open_mode = if flags.intersects(OFlag::O_CREAT | O_TMPFILE_FLAG) {
-        mode
-    } else {
-        Mode::empty()
-    };
-    let fd = mapped_runtime_open_fd(&root_dir, &mapped.host_root, &relative, flags, open_mode)
-        .map_err(|error| mapped_runtime_open_error(operation, mapped, error))?;
-    let handle = AnchoredFd { fd };
-    let host_path = mapped_runtime_host_path_from_fd(mapped, operation, &handle)?;
-    Ok(MappedRuntimeOpenedPath { handle, host_path })
-}
-
-fn open_mapped_runtime_directory_beneath(
-    mapped: &MappedRuntimeHostPath,
-    operation: &str,
-    relative: &Path,
-) -> Result<MappedRuntimeOpenedPath, SidecarError> {
-    let root_dir = open_mapped_runtime_root_dir(mapped, operation)?;
-    let fd = mapped_runtime_open_fd(
-        &root_dir,
-        &mapped.host_root,
-        relative,
-        OFlag::O_DIRECTORY | OFlag::O_RDONLY,
-        Mode::empty(),
-    )
-    .map_err(|error| mapped_runtime_open_error(operation, mapped, error))?;
-    let handle = AnchoredFd { fd };
-    let host_path = mapped_runtime_host_path_from_fd(mapped, operation, &handle)?;
-    Ok(MappedRuntimeOpenedPath { handle, host_path })
-}
-
-fn open_mapped_runtime_parent_beneath(
-    mapped: &MappedRuntimeHostPath,
-    operation: &str,
-) -> Result<MappedRuntimeParentPath, SidecarError> {
-    let relative = mapped_runtime_relative_path(mapped)?;
-    let child_name = relative.file_name().ok_or_else(|| {
-        SidecarError::InvalidState(format!(
-            "{operation}: mapped guest path {} has no parent-relative basename",
-            mapped.guest_path
-        ))
-    })?;
-    let parent_relative = relative
-        .parent()
-        .filter(|parent| !parent.as_os_str().is_empty())
-        .unwrap_or_else(|| Path::new("."));
-    let directory = open_mapped_runtime_directory_beneath(mapped, operation, parent_relative)?;
-    Ok(MappedRuntimeParentPath {
-        directory: directory.handle,
-        host_path: directory.host_path,
-        child_name: child_name.to_os_string(),
-    })
-}
-
-/// Platform-neutral lstat result. Lets the mapped-runtime lstat path produce the
-/// same guest-facing stat value from either a `std::fs::Metadata` (Linux, and
-/// the macOS root case) or a raw `fstatat` result (macOS fd-relative child
-/// lstat), so the operation stays fd-relative on macOS without a `std::fs`
-/// metadata handle.
-struct HostStat {
-    mode: u32,
-    size: u64,
-    blocks: u64,
-    dev: u64,
-    rdev: u64,
-    is_directory: bool,
-    is_symbolic_link: bool,
-    atime_ms: i64,
-    mtime_ms: i64,
-    ctime_ms: i64,
-    ino: u64,
-    nlink: u64,
-    uid: u32,
-    gid: u32,
-}
-
-impl HostStat {
-    #[cfg_attr(not(test), allow(dead_code))]
-    fn is_dir(&self) -> bool {
-        self.is_directory
-    }
-
-    fn to_value(&self) -> Value {
-        json!({
-            "mode": self.mode,
-            "size": self.size,
-            "blocks": self.blocks,
-            "dev": self.dev,
-            "rdev": self.rdev,
-            "isDirectory": self.is_directory,
-            "isSymbolicLink": self.is_symbolic_link,
-            "atimeMs": self.atime_ms,
-            "mtimeMs": self.mtime_ms,
-            "ctimeMs": self.ctime_ms,
-            "birthtimeMs": self.ctime_ms,
-            "ino": self.ino,
-            "nlink": self.nlink,
-            "uid": self.uid,
-            "gid": self.gid,
-        })
-    }
-}
-
-impl From<&fs::Metadata> for HostStat {
-    fn from(metadata: &fs::Metadata) -> Self {
-        Self {
-            mode: metadata.mode(),
-            size: metadata.size(),
-            blocks: metadata.blocks(),
-            dev: metadata.dev(),
-            rdev: metadata.rdev(),
-            is_directory: metadata.is_dir(),
-            is_symbolic_link: metadata.file_type().is_symlink(),
-            atime_ms: metadata.atime() * 1000 + (metadata.atime_nsec() / 1_000_000),
-            mtime_ms: metadata.mtime() * 1000 + (metadata.mtime_nsec() / 1_000_000),
-            ctime_ms: metadata.ctime() * 1000 + (metadata.ctime_nsec() / 1_000_000),
-            ino: metadata.ino(),
-            nlink: metadata.nlink(),
-            uid: metadata.uid(),
-            gid: metadata.gid(),
-        }
-    }
-}
-
-#[cfg(target_os = "macos")]
-impl HostStat {
-    fn from_filestat(stat: &nix::sys::stat::FileStat) -> Self {
-        use nix::sys::stat::SFlag;
-        let fmt = stat.st_mode & SFlag::S_IFMT.bits();
-        Self {
-            mode: stat.st_mode as u32,
-            size: stat.st_size as u64,
-            blocks: stat.st_blocks as u64,
-            dev: stat.st_dev as u64,
-            rdev: stat.st_rdev as u64,
-            is_directory: fmt == SFlag::S_IFDIR.bits(),
-            is_symbolic_link: fmt == SFlag::S_IFLNK.bits(),
-            atime_ms: stat.st_atime * 1000 + (stat.st_atime_nsec / 1_000_000),
-            mtime_ms: stat.st_mtime * 1000 + (stat.st_mtime_nsec / 1_000_000),
-            ctime_ms: stat.st_ctime * 1000 + (stat.st_ctime_nsec / 1_000_000),
-            ino: stat.st_ino,
-            nlink: stat.st_nlink as u64,
-            uid: stat.st_uid,
-            gid: stat.st_gid,
-        }
-    }
-}
-
-#[cfg(not(target_os = "macos"))]
-fn mapped_child_lstat(parent: &MappedRuntimeParentPath) -> std::io::Result<HostStat> {
-    Ok(HostStat::from(&fs::symlink_metadata(
-        mapped_runtime_parent_child_path(parent),
-    )?))
-}
-#[cfg(target_os = "macos")]
-fn mapped_child_lstat(parent: &MappedRuntimeParentPath) -> std::io::Result<HostStat> {
-    let stat = nix::sys::stat::fstatat(
-        Some(parent.directory.as_raw_fd()),
-        parent.child_name.as_os_str(),
-        nix::fcntl::AtFlags::AT_SYMLINK_NOFOLLOW,
-    )
-    .map_err(errno_to_io)?;
-    Ok(HostStat::from_filestat(&stat))
-}
-
-fn mapped_runtime_symlink_metadata(
-    mapped: &MappedRuntimeHostPath,
-    operation: &str,
-) -> Result<HostStat, SidecarError> {
-    let relative = mapped_runtime_relative_path(mapped)?;
-    if relative == Path::new(".") {
-        return fs::symlink_metadata(&mapped.host_path)
-            .map(|metadata| HostStat::from(&metadata))
-            .map_err(|error| {
-                SidecarError::Io(format!(
-                    "failed to lstat mapped guest path {} -> {}: {error}",
-                    mapped.guest_path,
-                    mapped.host_path.display()
-                ))
-            });
-    }
-
-    let parent = open_mapped_runtime_parent_beneath(mapped, operation)?;
-    let host_path = parent.host_path.join(&parent.child_name);
-    mapped_child_lstat(&parent).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to lstat mapped guest path {} -> {}: {error}",
-            mapped.guest_path,
-            host_path.display()
-        ))
-    })
-}
-
-fn read_mapped_runtime_link(
-    mapped: &MappedRuntimeHostPath,
-    guest_path: &str,
-    operation: &str,
-) -> Result<PathBuf, SidecarError> {
-    if mapped_runtime_relative_path(mapped)? == Path::new(".") {
-        return fs::read_link(&mapped.host_path).map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to read mapped guest symlink {} -> {}: {error}",
-                guest_path,
-                mapped.host_path.display()
-            ))
-        });
-    }
-
-    let parent = open_mapped_runtime_parent_beneath(mapped, operation)?;
-    let host_path = parent.host_path.join(&parent.child_name);
-    mapped_child_read_link(&parent).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to read mapped guest symlink {} -> {}: {error}",
-            guest_path,
-            host_path.display()
-        ))
-    })
-}
-
-fn mapped_runtime_host_path_from_fd(
-    mapped: &MappedRuntimeHostPath,
-    operation: &str,
-    fd: &AnchoredFd,
-) -> Result<PathBuf, SidecarError> {
-    // Linux reads the magic symlink `/proc/self/fd/N`; macOS recovers the path
-    // with `fcntl(F_GETPATH)` (see [`crate::macos_fs::fd_real_path`]).
-    #[cfg(not(target_os = "macos"))]
-    let resolved = fs::read_link(fd.proc_path());
-    #[cfg(target_os = "macos")]
-    let resolved = crate::macos_fs::fd_real_path(fd.as_raw_fd());
-    resolved.map_err(|error| {
-        SidecarError::Io(format!(
-            "{operation}: failed to resolve anchored mapped guest path {}: {error}",
-            mapped.guest_path
-        ))
-    })
-}
-
-#[cfg(not(target_os = "macos"))]
-fn mapped_runtime_parent_child_path(parent: &MappedRuntimeParentPath) -> PathBuf {
-    parent.directory.proc_path().join(&parent.child_name)
-}
-
-// ---------------------------------------------------------------------------
-// Mapped-runtime child operations.
-//
-// On Linux these operate on the resolved parent fd by appending the child to
-// `/proc/self/fd/N`. macOS cannot append path components to `/dev/fd/N`, so it
-// performs the same operations with fd-relative `*at` calls anchored on the
-// resolved parent fd — TOCTOU-safe, mirroring the host_dir plugin.
-// ---------------------------------------------------------------------------
-
-#[cfg(target_os = "macos")]
-fn errno_to_io(error: Errno) -> std::io::Error {
-    std::io::Error::from_raw_os_error(error as i32)
-}
-
-#[cfg(not(target_os = "macos"))]
-fn create_dir_at(dir: &AnchoredFd, name: &std::ffi::OsStr) -> std::io::Result<()> {
-    fs::create_dir(dir.proc_path().join(name))
-}
-#[cfg(target_os = "macos")]
-fn create_dir_at(dir: &AnchoredFd, name: &std::ffi::OsStr) -> std::io::Result<()> {
-    nix::sys::stat::mkdirat(Some(dir.as_raw_fd()), name, Mode::from_bits_truncate(0o777))
-        .map_err(errno_to_io)
-}
-
-fn mapped_child_create_dir(parent: &MappedRuntimeParentPath) -> std::io::Result<()> {
-    create_dir_at(&parent.directory, parent.child_name.as_os_str())
-}
-
-#[cfg(not(target_os = "macos"))]
-fn mapped_child_is_dir(parent: &MappedRuntimeParentPath) -> std::io::Result<bool> {
-    Ok(fs::symlink_metadata(mapped_runtime_parent_child_path(parent))?.is_dir())
-}
-#[cfg(target_os = "macos")]
-fn mapped_child_is_dir(parent: &MappedRuntimeParentPath) -> std::io::Result<bool> {
-    use nix::sys::stat::SFlag;
-    let stat = nix::sys::stat::fstatat(
-        Some(parent.directory.as_raw_fd()),
-        parent.child_name.as_os_str(),
-        nix::fcntl::AtFlags::AT_SYMLINK_NOFOLLOW,
-    )
-    .map_err(errno_to_io)?;
-    Ok(stat.st_mode & SFlag::S_IFMT.bits() == SFlag::S_IFDIR.bits())
-}
-
-#[cfg(not(target_os = "macos"))]
-fn mapped_child_remove_dir(parent: &MappedRuntimeParentPath) -> std::io::Result<()> {
-    fs::remove_dir(mapped_runtime_parent_child_path(parent))
-}
-#[cfg(target_os = "macos")]
-fn mapped_child_remove_dir(parent: &MappedRuntimeParentPath) -> std::io::Result<()> {
-    nix::unistd::unlinkat(
-        Some(parent.directory.as_raw_fd()),
-        parent.child_name.as_os_str(),
-        nix::unistd::UnlinkatFlags::RemoveDir,
-    )
-    .map_err(errno_to_io)
-}
-
-#[cfg(not(target_os = "macos"))]
-fn mapped_child_remove_file(parent: &MappedRuntimeParentPath) -> std::io::Result<()> {
-    fs::remove_file(mapped_runtime_parent_child_path(parent))
-}
-#[cfg(target_os = "macos")]
-fn mapped_child_remove_file(parent: &MappedRuntimeParentPath) -> std::io::Result<()> {
-    nix::unistd::unlinkat(
-        Some(parent.directory.as_raw_fd()),
-        parent.child_name.as_os_str(),
-        nix::unistd::UnlinkatFlags::NoRemoveDir,
-    )
-    .map_err(errno_to_io)
-}
-
-#[cfg(not(target_os = "macos"))]
-fn mapped_child_symlink(parent: &MappedRuntimeParentPath, target: &str) -> std::io::Result<()> {
-    std::os::unix::fs::symlink(target, mapped_runtime_parent_child_path(parent))
-}
-#[cfg(target_os = "macos")]
-fn mapped_child_symlink(parent: &MappedRuntimeParentPath, target: &str) -> std::io::Result<()> {
-    nix::unistd::symlinkat(
-        target,
-        Some(parent.directory.as_raw_fd()),
-        parent.child_name.as_os_str(),
-    )
-    .map_err(errno_to_io)
-}
-
-#[cfg(not(target_os = "macos"))]
-fn mapped_child_read_link(parent: &MappedRuntimeParentPath) -> std::io::Result<PathBuf> {
-    fs::read_link(mapped_runtime_parent_child_path(parent))
-}
-#[cfg(target_os = "macos")]
-fn mapped_child_read_link(parent: &MappedRuntimeParentPath) -> std::io::Result<PathBuf> {
-    nix::fcntl::readlinkat(
-        Some(parent.directory.as_raw_fd()),
-        parent.child_name.as_os_str(),
-    )
-    .map(PathBuf::from)
-    .map_err(errno_to_io)
-}
-
-/// Set access/modification times on a mapped child without following symlinks
-/// (lutimes). Linux operates on `/proc/self/fd/N/child`; macOS uses fd-relative
-/// `utimensat` anchored on the resolved parent fd.
-#[cfg(not(target_os = "macos"))]
-fn apply_mapped_child_utimens(
-    parent: &MappedRuntimeParentPath,
-    atime: VirtualUtimeSpec,
-    mtime: VirtualUtimeSpec,
-    context: &str,
-) -> Result<(), SidecarError> {
-    apply_host_path_utimens(
-        &mapped_runtime_parent_child_path(parent),
-        atime,
-        mtime,
-        false,
-        context,
-    )
-}
-#[cfg(target_os = "macos")]
-fn apply_mapped_child_utimens(
-    parent: &MappedRuntimeParentPath,
-    atime: VirtualUtimeSpec,
-    mtime: VirtualUtimeSpec,
-    context: &str,
-) -> Result<(), SidecarError> {
-    let existing = match (atime, mtime) {
-        (VirtualUtimeSpec::Omit, _) | (_, VirtualUtimeSpec::Omit) => {
-            let stat = nix::sys::stat::fstatat(
-                Some(parent.directory.as_raw_fd()),
-                parent.child_name.as_os_str(),
-                nix::fcntl::AtFlags::AT_SYMLINK_NOFOLLOW,
-            )
-            .map_err(|error| SidecarError::Io(format!("{context}: failed to stat: {error}")))?;
-            Some((
-                VirtualTimeSpec {
-                    sec: stat.st_atime,
-                    nsec: stat.st_atime_nsec.max(0) as u32,
-                },
-                VirtualTimeSpec {
-                    sec: stat.st_mtime,
-                    nsec: stat.st_mtime_nsec.max(0) as u32,
-                },
-            ))
-        }
-        _ => None,
-    };
-    let existing_atime = existing
-        .as_ref()
-        .map(|(atime, _)| *atime)
-        .unwrap_or(VirtualTimeSpec { sec: 0, nsec: 0 });
-    let existing_mtime = existing
-        .as_ref()
-        .map(|(_, mtime)| *mtime)
-        .unwrap_or(VirtualTimeSpec { sec: 0, nsec: 0 });
-    let times = [
-        resolve_host_utime(atime, existing_atime),
-        resolve_host_utime(mtime, existing_mtime),
-    ];
-    utimensat(
-        Some(parent.directory.as_raw_fd()),
-        parent.child_name.as_os_str(),
-        &times[0],
-        &times[1],
-        UtimensatFlags::NoFollowSymlink,
-    )
-    .map_err(|error| SidecarError::Io(format!("{context}: failed to set times: {error}")))
-}
-
-#[cfg(not(target_os = "macos"))]
-fn mapped_child_rename(
-    source: &MappedRuntimeParentPath,
-    destination: &MappedRuntimeParentPath,
-) -> std::io::Result<()> {
-    rename_mapped_host_path_with_fallback(
-        &mapped_runtime_parent_child_path(source),
-        &mapped_runtime_parent_child_path(destination),
-    )
-}
-#[cfg(target_os = "macos")]
-fn mapped_child_rename(
-    source: &MappedRuntimeParentPath,
-    destination: &MappedRuntimeParentPath,
-) -> std::io::Result<()> {
-    // Same-filesystem rename is fd-relative (TOCTOU-safe). A cross-device rename
-    // (EXDEV) cannot be done fd-relative, so fall back to the path-based copy on
-    // the resolved real paths, exactly as the Linux fallback does.
-    match nix::fcntl::renameat(
-        Some(source.directory.as_raw_fd()),
-        source.child_name.as_os_str(),
-        Some(destination.directory.as_raw_fd()),
-        destination.child_name.as_os_str(),
-    ) {
-        Ok(()) => Ok(()),
-        Err(Errno::EXDEV) => move_mapped_host_path_across_devices(
-            &source.host_path.join(&source.child_name),
-            &destination.host_path.join(&destination.child_name),
-        ),
-        Err(error) => Err(errno_to_io(error)),
-    }
-}
-
-fn create_mapped_runtime_directory(
-    parent: &MappedRuntimeParentPath,
-    guest_path: &str,
-    recursive: bool,
-) -> Result<(), SidecarError> {
-    match mapped_child_create_dir(parent) {
-        Ok(()) => Ok(()),
-        Err(error) if recursive && error.kind() == std::io::ErrorKind::AlreadyExists => {
-            match mapped_child_is_dir(parent) {
-                Ok(true) => Ok(()),
-                Ok(false) => Err(SidecarError::Io(format!(
-                    "failed to create mapped guest directory {} -> {}: file exists and is not a directory",
-                    guest_path,
-                    parent.host_path.join(&parent.child_name).display()
-                ))),
-                Err(metadata_error) => Err(SidecarError::Io(format!(
-                    "failed to inspect existing mapped guest directory {} -> {}: {metadata_error}",
-                    guest_path,
-                    parent.host_path.join(&parent.child_name).display()
-                ))),
-            }
-        }
-        Err(error) => Err(SidecarError::Io(format!(
-            "failed to create mapped guest directory {} -> {}: {error}",
-            guest_path,
-            parent.host_path.join(&parent.child_name).display()
-        ))),
-    }
-}
-
-fn create_mapped_runtime_root_directory(
-    mapped: &MappedRuntimeHostPath,
-    recursive: bool,
-) -> Result<(), SidecarError> {
-    let relative = mapped_runtime_relative_path(mapped)?;
-    if relative != Path::new(".") {
-        return Err(SidecarError::InvalidState(format!(
-            "fs.mkdir: mapped guest path {} is not the mapped root",
-            mapped.guest_path
-        )));
-    }
-
-    if recursive {
-        match fs::create_dir_all(&mapped.host_path) {
-            Ok(()) => Ok(()),
-            Err(error) => Err(SidecarError::Io(format!(
-                "failed to create mapped guest directory {} -> {}: {error}",
-                mapped.guest_path,
-                mapped.host_path.display()
-            ))),
-        }
-    } else {
-        match fs::create_dir(&mapped.host_path) {
-            Ok(()) => Ok(()),
-            Err(error) => Err(SidecarError::Io(format!(
-                "failed to create mapped guest directory {} -> {}: {error}",
-                mapped.guest_path,
-                mapped.host_path.display()
-            ))),
-        }
-    }
-}
-
-fn ensure_mapped_runtime_parent_dirs(
-    mapped: &MappedRuntimeHostPath,
-    operation: &str,
-) -> Result<(), SidecarError> {
-    let relative = mapped_runtime_relative_path(mapped)?;
-    let Some(parent_relative) = relative
-        .parent()
-        .filter(|parent| !parent.as_os_str().is_empty())
-    else {
-        return Ok(());
-    };
-    if parent_relative == Path::new(".") {
-        return Ok(());
-    }
-
-    for index in 0..parent_relative.components().count() {
-        let prefix = parent_relative
-            .components()
-            .take(index + 1)
-            .collect::<PathBuf>();
-        if open_mapped_runtime_directory_beneath(mapped, operation, &prefix).is_ok() {
-            continue;
-        }
-
-        let prefix_parent = prefix
-            .parent()
-            .filter(|parent| !parent.as_os_str().is_empty())
-            .unwrap_or_else(|| Path::new("."));
-        let prefix_name = prefix.file_name().ok_or_else(|| {
-            SidecarError::InvalidState(format!(
-                "{operation}: invalid mapped guest directory prefix for {}",
-                mapped.guest_path
-            ))
-        })?;
-        let parent_dir = open_mapped_runtime_directory_beneath(mapped, operation, prefix_parent)?;
-        create_dir_at(&parent_dir.handle, prefix_name).map_err(|error| {
-            SidecarError::Io(format!(
-                "{operation}: failed to create mapped guest parent {} under {}: {error}",
-                mapped.guest_path,
-                parent_dir.host_path.display()
-            ))
-        })?;
-    }
-
-    Ok(())
-}
-
-fn mapped_runtime_open_error(
-    operation: &str,
-    mapped: &MappedRuntimeHostPath,
-    error: Errno,
-) -> SidecarError {
-    match error {
-        Errno::EXDEV => mapped_runtime_host_path_escape_error(mapped, &mapped.host_path),
-        other => SidecarError::Io(format!(
-            "{operation}: failed to open mapped guest path {} beneath {}: {}",
-            mapped.guest_path,
-            mapped.host_root.display(),
-            std::io::Error::from_raw_os_error(other as i32)
-        )),
-    }
-}
-
-fn mapped_runtime_host_path_escape_error(
-    mapped: &MappedRuntimeHostPath,
-    resolved: &Path,
-) -> SidecarError {
-    SidecarError::Io(format!(
-        "mapped guest path {} escapes mapped host root {} via {}",
-        mapped.guest_path,
-        mapped.host_root.display(),
-        resolved.display()
-    ))
-}
-
-fn mapped_host_open_is_writable(flags: u32) -> bool {
-    let access_mode = flags & libc::O_ACCMODE as u32;
-    access_mode == libc::O_WRONLY as u32
-        || access_mode == libc::O_RDWR as u32
-        || flags & libc::O_APPEND as u32 != 0
-        || flags & libc::O_CREAT as u32 != 0
-        || flags & libc::O_TRUNC as u32 != 0
-}
-
-fn materialize_mapped_host_path_from_kernel(
-    kernel: &mut SidecarKernel,
-    kernel_pid: u32,
-    guest_path: &str,
-    mapped: &MappedRuntimeHostPath,
-) -> Result<(), SidecarError> {
-    let host_path = &mapped.host_path;
-    match fs::symlink_metadata(host_path) {
-        Ok(_) => return Ok(()),
-        Err(error) if error.kind() == std::io::ErrorKind::NotFound => {}
-        Err(error) => {
-            return Err(SidecarError::Io(format!(
-                "failed to inspect mapped host path for {} -> {}: {error}",
-                guest_path,
-                host_path.display()
-            )));
-        }
-    }
-
-    if !kernel
-        .exists_for_process(EXECUTION_DRIVER_NAME, kernel_pid, guest_path)
-        .map_err(kernel_error)?
-    {
-        return Ok(());
-    }
-
-    let stat = kernel
-        .lstat_for_process(EXECUTION_DRIVER_NAME, kernel_pid, guest_path)
-        .map_err(kernel_error)?;
-
-    if stat.is_symbolic_link {
-        let target = kernel
-            .read_link_for_process(EXECUTION_DRIVER_NAME, kernel_pid, guest_path)
-            .map_err(kernel_error)?;
-        ensure_mapped_runtime_parent_dirs(mapped, "fs.materialize")?;
-        let parent = open_mapped_runtime_parent_beneath(mapped, "fs.materialize")?;
-        mapped_child_symlink(&parent, &target).map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to materialize mapped guest symlink {} -> {} ({target}): {error}",
-                guest_path,
-                parent.host_path.join(&parent.child_name).display()
-            ))
-        })?;
-        return Ok(());
-    } else if stat.is_directory {
-        if mapped_runtime_relative_path(mapped)? == Path::new(".") {
-            create_mapped_runtime_root_directory(mapped, true)?;
-        } else {
-            ensure_mapped_runtime_parent_dirs(mapped, "fs.materialize")?;
-            let parent = open_mapped_runtime_parent_beneath(mapped, "fs.materialize")?;
-            create_mapped_runtime_directory(&parent, guest_path, true)?;
-        }
-    } else {
-        let bytes = kernel
-            .read_file_for_process(EXECUTION_DRIVER_NAME, kernel_pid, guest_path)
-            .map_err(kernel_error)?;
-        ensure_mapped_runtime_parent_dirs(mapped, "fs.materialize")?;
-        let opened = open_mapped_runtime_beneath(
-            mapped,
-            "fs.materialize",
-            OFlag::O_CREAT | OFlag::O_TRUNC | OFlag::O_WRONLY,
-            Mode::from_bits_truncate((stat.mode & 0o7777) as _),
-        )?;
-        fs::write(opened.handle.proc_path(), bytes).map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to materialize mapped guest file {} -> {}: {error}",
-                guest_path,
-                opened.host_path.display()
-            ))
-        })?;
-    }
-
-    let opened =
-        open_mapped_runtime_beneath(mapped, "fs.materialize", O_PATH_ANCHOR, Mode::empty())?;
-    fs::set_permissions(
-        opened.handle.proc_path(),
-        fs::Permissions::from_mode(stat.mode & 0o7777),
-    )
-    .map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to set permissions for materialized mapped guest path {} -> {}: {error}",
-            guest_path,
-            opened.host_path.display()
-        ))
-    })?;
-
-    Ok(())
-}
-
-fn open_mapped_host_fd(
-    process: &mut ActiveProcess,
-    host_path: PathBuf,
-    guest_path: Option<String>,
-    proc_path: PathBuf,
-    flags: u32,
-) -> Result<Value, SidecarError> {
-    let access_mode = flags & libc::O_ACCMODE as u32;
-    let mut options = OpenOptions::new();
-    match access_mode {
-        x if x == libc::O_WRONLY as u32 => {
-            options.write(true);
-        }
-        x if x == libc::O_RDWR as u32 => {
-            options.read(true).write(true);
-        }
-        _ => {
-            options.read(true);
-        }
-    }
-    if flags & libc::O_APPEND as u32 != 0 {
-        options.append(true);
-    }
-
-    let masked_flags = flags
-        & !(libc::O_ACCMODE as u32
-            | libc::O_APPEND as u32
-            | libc::O_CREAT as u32
-            | libc::O_EXCL as u32
-            | libc::O_TRUNC as u32);
-    options.custom_flags(masked_flags as i32);
-
-    let file = options.open(&proc_path).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to open mapped guest file {}: {error}",
-            host_path.display()
-        ))
-    })?;
-    let fd = process.allocate_mapped_host_fd(crate::state::ActiveMappedHostFd {
-        file,
-        path: host_path,
-        guest_path,
-    });
-    Ok(json!(fd))
-}
-
-fn read_mapped_host_fd(
-    mapped: &mut crate::state::ActiveMappedHostFd,
-    fd: u32,
-    length: usize,
-    position: Option<u64>,
-) -> Result<Value, SidecarError> {
-    let mut bytes = vec![0_u8; length];
-    let read = match position {
-        Some(offset) => mapped.file.read_at(&mut bytes, offset),
-        None => mapped.file.read(&mut bytes),
-    }
-    .map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to read mapped guest fd {fd} -> {}: {error}",
-            mapped.path.display()
-        ))
-    })?;
-    bytes.truncate(read);
-    Ok(javascript_sync_rpc_bytes_value(&bytes))
-}
-
-fn write_mapped_host_fd(
-    mapped: &mut crate::state::ActiveMappedHostFd,
-    fd: u32,
-    contents: &[u8],
-    position: Option<u64>,
-) -> Result<Value, SidecarError> {
-    let written = match position {
-        Some(offset) => mapped.file.write_at(contents, offset),
-        None => mapped.file.write(contents),
-    }
-    .map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to write mapped guest fd {fd} -> {}: {error}",
-            mapped.path.display()
-        ))
-    })?;
-    Ok(json!(written))
-}
-
-fn write_all_mapped_host_fd(
-    mapped: &mut crate::state::ActiveMappedHostFd,
-    fd: u32,
-    contents: &[u8],
-    position: Option<u64>,
-) -> Result<usize, SidecarError> {
-    let mut total = 0usize;
-    while total < contents.len() {
-        let write_position = position.map(|offset| offset.saturating_add(total as u64));
-        let written = match write_position {
-            Some(offset) => mapped.file.write_at(&contents[total..], offset),
-            None => mapped.file.write(&contents[total..]),
-        }
-        .map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to write mapped guest fd {fd} -> {}: {error}",
-                mapped.path.display()
-            ))
-        })?;
-        if written == 0 {
-            return Err(SidecarError::Execution(format!(
-                "EIO: filesystem write made no progress on mapped fd {fd}"
-            )));
-        }
-        total = total.saturating_add(written);
-    }
-    Ok(total)
-}
-
-fn read_le_u32(payload: &[u8], offset: &mut usize, label: &str) -> Result<u32, SidecarError> {
-    let end = offset
-        .checked_add(4)
-        .ok_or_else(|| SidecarError::InvalidState(format!("filesystem {label} offset overflow")))?;
-    let bytes = payload.get(*offset..end).ok_or_else(|| {
-        SidecarError::InvalidState(format!("truncated filesystem {label} payload"))
-    })?;
-    *offset = end;
-    Ok(u32::from_le_bytes(
-        bytes.try_into().expect("slice length checked"),
-    ))
-}
-
-fn decode_javascript_writev_raw_payload(payload: &[u8]) -> Result<Vec<&[u8]>, SidecarError> {
-    let mut offset = 0usize;
-    let count = read_le_u32(payload, &mut offset, "writev count")? as usize;
-    let mut buffers = Vec::with_capacity(count);
-    for _ in 0..count {
-        let len = read_le_u32(payload, &mut offset, "writev buffer length")? as usize;
-        let end = offset.checked_add(len).ok_or_else(|| {
-            SidecarError::InvalidState(String::from("filesystem writev payload length overflow"))
-        })?;
-        let buffer = payload.get(offset..end).ok_or_else(|| {
-            SidecarError::InvalidState(String::from("truncated filesystem writev payload"))
-        })?;
-        buffers.push(buffer);
-        offset = end;
-    }
-    if offset != payload.len() {
-        return Err(SidecarError::InvalidState(String::from(
-            "filesystem writev payload has trailing bytes",
-        )));
-    }
-    Ok(buffers)
-}
-
-fn rename_mapped_host_path(
-    source: &str,
-    source_host: Option<MappedRuntimeHostAccess>,
-    destination: &str,
-    destination_host: Option<MappedRuntimeHostAccess>,
-) -> Result<Value, SidecarError> {
-    match (source_host, destination_host) {
-        (
-            Some(MappedRuntimeHostAccess::Writable(source_host)),
-            Some(MappedRuntimeHostAccess::Writable(destination_host)),
-        ) => {
-            if normalize_host_path(&source_host.host_root)
-                != normalize_host_path(&destination_host.host_root)
-            {
-                return Err(SidecarError::Kernel(format!(
-                    "EXDEV: invalid cross-device link: {source} -> {destination}"
-                )));
-            }
-            let source_parent = open_mapped_runtime_parent_beneath(&source_host, "fs.rename")?;
-            let destination_parent =
-                open_mapped_runtime_parent_beneath(&destination_host, "fs.rename")?;
-            let source_host_path = source_parent.host_path.join(&source_parent.child_name);
-            let destination_host_path = destination_parent
-                .host_path
-                .join(&destination_parent.child_name);
-            mapped_child_rename(&source_parent, &destination_parent)
-                .map(|()| Value::Null)
-                .map_err(|error| {
-                    SidecarError::Io(format!(
-                        "failed to rename mapped guest path {} -> {} ({} -> {}): {error}",
-                        source,
-                        destination,
-                        source_host_path.display(),
-                        destination_host_path.display()
-                    ))
-                })
-        }
-        (Some(MappedRuntimeHostAccess::ReadOnly(_)), _) => {
-            Err(read_only_mapped_runtime_host_path_error(source))
-        }
-        (_, Some(MappedRuntimeHostAccess::ReadOnly(_))) => {
-            Err(read_only_mapped_runtime_host_path_error(destination))
-        }
-        _ => Err(SidecarError::Kernel(format!(
-            "EXDEV: invalid cross-device link: {source} -> {destination}"
-        ))),
-    }
-}
-
-// On macOS the mapped rename is fd-relative (`renameat`); this path-based
-// fallback is only used by the Linux mapped-rename helper.
-#[cfg_attr(target_os = "macos", allow(dead_code))]
-fn rename_mapped_host_path_with_fallback(source: &Path, destination: &Path) -> std::io::Result<()> {
-    if let Some(parent) = destination.parent() {
-        fs::create_dir_all(parent)?;
-    }
-    match fs::rename(source, destination) {
-        Ok(()) => Ok(()),
-        Err(error) if error.raw_os_error() == Some(libc::EXDEV) => {
-            move_mapped_host_path_across_devices(source, destination)
-        }
-        Err(error) => Err(error),
-    }
-}
-
-fn move_mapped_host_path_across_devices(source: &Path, destination: &Path) -> std::io::Result<()> {
-    let metadata = fs::symlink_metadata(source)?;
-    remove_existing_mapped_host_destination(destination)?;
-    if let Some(parent) = destination.parent() {
-        fs::create_dir_all(parent)?;
-    }
-
-    if metadata.file_type().is_symlink() {
-        let target = fs::read_link(source)?;
-        symlink(&target, destination)?;
-        fs::remove_file(source)?;
-        return Ok(());
-    }
-
-    if metadata.is_dir() {
-        fs::create_dir_all(destination)?;
-        for entry in fs::read_dir(source)? {
-            let entry = entry?;
-            let source_child = entry.path();
-            let destination_child = destination.join(entry.file_name());
-            move_mapped_host_path_across_devices(&source_child, &destination_child)?;
-        }
-        fs::set_permissions(destination, metadata.permissions())?;
-        fs::remove_dir(source)?;
-        return Ok(());
-    }
-
-    fs::copy(source, destination)?;
-    fs::set_permissions(destination, metadata.permissions())?;
-    fs::remove_file(source)?;
-    Ok(())
-}
-
-fn remove_existing_mapped_host_destination(path: &Path) -> std::io::Result<()> {
-    match fs::symlink_metadata(path) {
-        Ok(metadata) if metadata.file_type().is_symlink() || metadata.is_file() => {
-            fs::remove_file(path)
-        }
-        Ok(metadata) if metadata.is_dir() => fs::remove_dir(path),
-        Ok(_) => Ok(()),
-        Err(error) if error.kind() == std::io::ErrorKind::NotFound => Ok(()),
-        Err(error) => Err(error),
-    }
-}
-
-fn mapped_readdir_entry_is_directory(
-    mapped_host: &MappedRuntimeHostPath,
-    directory: &MappedRuntimeOpenedPath,
-    guest_dir_path: &str,
-    entry: &fs::DirEntry,
-    name: &str,
-) -> Option<bool> {
-    let file_type = entry.file_type().ok()?;
-    if !file_type.is_symlink() {
-        return Some(file_type.is_dir());
-    }
-
-    let child = MappedRuntimeHostPath {
-        guest_path: normalize_path(&format!(
-            "{}/{}",
-            guest_dir_path.trim_end_matches('/'),
-            name
-        )),
-        host_root: mapped_host.host_root.clone(),
-        host_path: directory.host_path.join(entry.file_name()),
-    };
-    let opened =
-        open_mapped_runtime_beneath(&child, "fs.readdir entry", O_PATH_ANCHOR, Mode::empty())
-            .ok()?;
-    fs::metadata(opened.handle.proc_path())
-        .map(|metadata| metadata.is_dir())
-        .ok()
-}
-
-pub(crate) fn service_javascript_fs_readdir_entries(
-    kernel: &mut SidecarKernel,
-    process: &ActiveProcess,
-    kernel_pid: u32,
-    path: &str,
-) -> Result<BTreeMap<String, bool>, SidecarError> {
-    if let Some(MappedRuntimeHostAccess::Writable(mapped_host)) =
-        mapped_runtime_host_path(process, path, false)
-    {
-        let mut typed: BTreeMap<String, bool> = BTreeMap::new();
-        match open_mapped_runtime_beneath(
-            &mapped_host,
-            "fs.readdir",
-            OFlag::O_DIRECTORY | OFlag::O_RDONLY,
-            Mode::empty(),
-        ) {
-            Ok(directory) => {
-                let readdir_path = directory.handle.readdir_path().map_err(|error| {
-                    SidecarError::Io(format!(
-                        "failed to resolve mapped guest directory {} -> {}: {error}",
-                        path,
-                        directory.host_path.display()
-                    ))
-                })?;
-                for entry in fs::read_dir(readdir_path).map_err(|error| {
-                    SidecarError::Io(format!(
-                        "failed to read mapped guest directory {} -> {}: {error}",
-                        path,
-                        directory.host_path.display()
-                    ))
-                })? {
-                    let Ok(entry) = entry else { continue };
-                    let Ok(name) = entry.file_name().into_string() else {
-                        continue;
-                    };
-                    if let Some(is_dir) = mapped_readdir_entry_is_directory(
-                        &mapped_host,
-                        &directory,
-                        path,
-                        &entry,
-                        &name,
-                    ) {
-                        typed.insert(name, is_dir);
-                    }
-                }
-            }
-            Err(_)
-                if matches!(
-                    fs::symlink_metadata(&mapped_host.host_path),
-                    Err(ref metadata_error)
-                        if metadata_error.kind() == std::io::ErrorKind::NotFound
-                ) => {}
-            Err(error) => return Err(error),
-        }
-        match kernel.read_dir_with_types_for_process(EXECUTION_DRIVER_NAME, kernel_pid, path) {
-            Ok(entries) => {
-                for entry in entries {
-                    typed.entry(entry.name).or_insert(entry.is_directory);
-                }
-            }
-            Err(error) if matches!(error.code(), "ENOENT" | "ENOTDIR") => {}
-            Err(error) => return Err(kernel_error(error)),
-        }
-        for name in mapped_runtime_child_mount_basenames(process, path) {
-            typed.entry(name).or_insert(true);
-        }
-        return Ok(typed);
-    }
-
-    kernel
-        .read_dir_with_types_for_process(EXECUTION_DRIVER_NAME, kernel_pid, path)
-        .map(|entries| {
-            entries
-                .into_iter()
-                .map(|entry| (entry.name, entry.is_directory))
-                .collect()
-        })
-        .map_err(kernel_error)
-}
-
-pub(crate) fn service_javascript_fs_readdir_raw_sync_rpc(
-    kernel: &mut SidecarKernel,
-    process: &ActiveProcess,
-    kernel_pid: u32,
-    request: &JavascriptSyncRpcRequest,
-) -> Result<Vec<u8>, SidecarError> {
-    let path = javascript_sync_rpc_path_arg(process, &request.args, 0, "filesystem readdir path")?;
-    let entries =
-        service_javascript_fs_readdir_entries(kernel, process, kernel_pid, path.as_str())?;
-    encode_javascript_readdir_raw_payload(entries)
-}
-
-fn encode_javascript_readdir_raw_payload(
-    entries: BTreeMap<String, bool>,
-) -> Result<Vec<u8>, SidecarError> {
-    let mut payload = Vec::new();
-    for (name, is_dir) in entries
-        .into_iter()
-        .filter(|(name, _)| name != "." && name != "..")
-    {
-        let name = name.into_bytes();
-        let name_len = u32::try_from(name.len()).map_err(|_| {
-            SidecarError::InvalidState(String::from("filesystem readdir entry name too long"))
-        })?;
-        payload.push(u8::from(is_dir));
-        payload.extend_from_slice(&name_len.to_le_bytes());
-        payload.extend_from_slice(&name);
-    }
-    Ok(payload)
-}
-
-/// Like `javascript_sync_rpc_readdir_value` but carries each entry's
-/// directory-ness as `{name, isDirectory}`. The guest's `normalizeReaddirEntries`
-/// consumes these objects directly for `withFileTypes`, avoiding a per-entry stat
-/// RPC, and extracts `.name` for the plain string form.
-fn javascript_sync_rpc_readdir_typed_value(entries: BTreeMap<String, bool>) -> Value {
-    json!(entries
-        .into_iter()
-        .filter(|(name, _)| name != "." && name != "..")
-        .map(|(name, is_dir)| json!({ "name": name, "isDirectory": is_dir }))
-        .collect::<Vec<_>>())
-}
-
-fn mirror_guest_file_write_to_shadow(
-    vm: &mut VmState,
-    guest_path: &str,
-    bytes: &[u8],
-) -> Result<(), SidecarError> {
-    let guest_path = normalize_path(guest_path);
-    let shadow_path = if guest_path == "/" {
-        vm.cwd.clone()
-    } else {
-        vm.cwd.join(guest_path.trim_start_matches('/'))
-    };
-
-    if let Some(parent) = shadow_path.parent() {
-        fs::create_dir_all(parent).map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to create shadow parent for {}: {error}",
-                guest_path
-            ))
-        })?;
-    }
-
-    match fs::symlink_metadata(&shadow_path) {
-        Ok(metadata) if metadata.file_type().is_symlink() => {
-            fs::remove_file(&shadow_path).map_err(|error| {
-                SidecarError::Io(format!(
-                    "failed to replace shadow symlink for {}: {error}",
-                    guest_path
-                ))
-            })?;
-        }
-        Ok(metadata) if metadata.is_dir() => {
-            fs::remove_dir_all(&shadow_path).map_err(|error| {
-                SidecarError::Io(format!(
-                    "failed to replace shadow directory for {}: {error}",
-                    guest_path
-                ))
-            })?;
-        }
-        Ok(_) => {}
-        Err(error) if error.kind() == std::io::ErrorKind::NotFound => {}
-        Err(error) => {
-            return Err(SidecarError::Io(format!(
-                "failed to inspect shadow path for {}: {error}",
-                guest_path
-            )));
-        }
-    }
-    fs::write(&shadow_path, bytes).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to mirror guest file {} into shadow root: {error}",
-            guest_path
-        ))
-    })?;
-
-    let stat = vm.kernel.lstat(&guest_path).map_err(kernel_error)?;
-    fs::set_permissions(&shadow_path, fs::Permissions::from_mode(stat.mode & 0o7777)).map_err(
-        |error| {
-            SidecarError::Io(format!(
-                "failed to set shadow mode for {}: {error}",
-                guest_path
-            ))
-        },
-    )?;
-
-    Ok(())
-}
-
-fn mirror_guest_directory_write_to_shadow(
-    vm: &mut VmState,
-    guest_path: &str,
-) -> Result<(), SidecarError> {
-    let guest_path = normalize_path(guest_path);
-    let shadow_path = shadow_host_path_for_guest(&vm.cwd, &guest_path);
-
-    fs::create_dir_all(&shadow_path).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to mirror guest directory {} into shadow root: {error}",
-            guest_path
-        ))
-    })?;
-
-    let stat = vm.kernel.lstat(&guest_path).map_err(kernel_error)?;
-    fs::set_permissions(&shadow_path, fs::Permissions::from_mode(stat.mode & 0o7777)).map_err(
-        |error| {
-            SidecarError::Io(format!(
-                "failed to set shadow mode for directory {}: {error}",
-                guest_path
-            ))
-        },
-    )?;
-
-    Ok(())
-}
-
-fn ensure_guest_path_materialized_in_shadow(
-    vm: &mut VmState,
-    guest_path: &str,
-) -> Result<PathBuf, SidecarError> {
-    let guest_path = normalize_path(guest_path);
-    let shadow_path = shadow_host_path_for_guest(&vm.cwd, &guest_path);
-    if fs::symlink_metadata(&shadow_path).is_ok() {
-        return Ok(shadow_path);
-    }
-
-    let stat = vm.kernel.lstat(&guest_path).map_err(kernel_error)?;
-    if stat.is_symbolic_link {
-        let target = vm.kernel.read_link(&guest_path).map_err(kernel_error)?;
-        mirror_guest_symlink_to_shadow(vm, &guest_path, &target)?;
-    } else if stat.is_directory {
-        mirror_guest_directory_write_to_shadow(vm, &guest_path)?;
-    } else {
-        let bytes = vm.kernel.read_file(&guest_path).map_err(kernel_error)?;
-        mirror_guest_file_write_to_shadow(vm, &guest_path, &bytes)?;
-    }
-
-    Ok(shadow_path)
-}
-
-fn mirror_guest_subtree_to_shadow(vm: &mut VmState, guest_path: &str) -> Result<(), SidecarError> {
-    let guest_path = normalize_path(guest_path);
-    ensure_guest_path_materialized_in_shadow(vm, &guest_path)?;
-    let stat = vm.kernel.lstat(&guest_path).map_err(kernel_error)?;
-    if !stat.is_directory || stat.is_symbolic_link {
-        return Ok(());
-    }
-
-    let entries = vm
-        .kernel
-        .read_dir_recursive(&guest_path, None)
-        .map_err(kernel_error)?;
-    for entry in entries {
-        ensure_guest_path_materialized_in_shadow(vm, &entry.path)?;
-    }
-    Ok(())
-}
-
-fn mirror_guest_symlink_to_shadow(
-    vm: &mut VmState,
-    guest_path: &str,
-    target: &str,
-) -> Result<(), SidecarError> {
-    let guest_path = normalize_path(guest_path);
-    let shadow_path = shadow_host_path_for_guest(&vm.cwd, &guest_path);
-    let shadow_target = shadow_symlink_target_for_guest(&vm.cwd, &guest_path, target);
-
-    if let Some(parent) = shadow_path.parent() {
-        fs::create_dir_all(parent).map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to create shadow parent for symlink {}: {error}",
-                guest_path
-            ))
-        })?;
-    }
-
-    remove_shadow_path_if_exists(&shadow_path, &guest_path)?;
-    symlink(&shadow_target, &shadow_path).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to mirror guest symlink {} into shadow root: {error}",
-            guest_path
-        ))
-    })
-}
-
-fn mirror_guest_link_to_shadow(
-    vm: &mut VmState,
-    source_path: &str,
-    destination_path: &str,
-) -> Result<(), SidecarError> {
-    let source_path = normalize_path(source_path);
-    let destination_path = normalize_path(destination_path);
-    let source_shadow_path = ensure_guest_path_materialized_in_shadow(vm, &source_path)?;
-    let destination_shadow_path = shadow_host_path_for_guest(&vm.cwd, &destination_path);
-
-    if let Some(parent) = destination_shadow_path.parent() {
-        fs::create_dir_all(parent).map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to create shadow parent for link {}: {error}",
-                destination_path
-            ))
-        })?;
-    }
-
-    remove_shadow_path_if_exists(&destination_shadow_path, &destination_path)?;
-    fs::hard_link(&source_shadow_path, &destination_shadow_path).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to mirror guest link {} -> {} into shadow root: {error}",
-            source_path, destination_path
-        ))
-    })
-}
-
-fn mirror_guest_chmod_to_shadow(
-    vm: &mut VmState,
-    guest_path: &str,
-    mode: u32,
-) -> Result<(), SidecarError> {
-    let shadow_path = ensure_guest_path_materialized_in_shadow(vm, guest_path)?;
-    fs::set_permissions(&shadow_path, fs::Permissions::from_mode(mode & 0o7777)).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to set shadow mode for {}: {error}",
-            normalize_path(guest_path)
-        ))
-    })
-}
-
-fn mirror_guest_utimes_to_shadow(
-    vm: &mut VmState,
-    guest_path: &str,
-    atime: VirtualUtimeSpec,
-    mtime: VirtualUtimeSpec,
-    follow_symlinks: bool,
-) -> Result<(), SidecarError> {
-    let shadow_path = ensure_guest_path_materialized_in_shadow(vm, guest_path)?;
-    apply_host_path_utimens(
-        &shadow_path,
-        atime,
-        mtime,
-        follow_symlinks,
-        &format!(
-            "failed to mirror guest utimes for {} into shadow root",
-            normalize_path(guest_path)
-        ),
-    )
-}
-
-fn mirror_guest_truncate_to_shadow(
-    vm: &mut VmState,
-    guest_path: &str,
-    len: u64,
-) -> Result<(), SidecarError> {
-    let shadow_path = ensure_guest_path_materialized_in_shadow(vm, guest_path)?;
-    OpenOptions::new()
-        .write(true)
-        .open(&shadow_path)
-        .and_then(|file| file.set_len(len))
-        .map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to mirror guest truncate for {} into shadow root: {error}",
-                normalize_path(guest_path)
-            ))
-        })
-}
-
-fn remove_guest_shadow_path(vm: &mut VmState, guest_path: &str) -> Result<(), SidecarError> {
-    let guest_path = normalize_path(guest_path);
-    let shadow_path = shadow_host_path_for_guest(&vm.cwd, &guest_path);
-    remove_shadow_path_if_exists(&shadow_path, &guest_path)
-}
-
-fn rename_guest_shadow_path(
-    vm: &mut VmState,
-    from_path: &str,
-    to_path: &str,
-) -> Result<(), SidecarError> {
-    let from_path = normalize_path(from_path);
-    let to_path = normalize_path(to_path);
-    let from_shadow_path = shadow_host_path_for_guest(&vm.cwd, &from_path);
-    let to_shadow_path = shadow_host_path_for_guest(&vm.cwd, &to_path);
-
-    if !from_shadow_path.exists() {
-        remove_shadow_path_if_exists(&to_shadow_path, &to_path)?;
-        return Ok(());
-    }
-
-    if let Some(parent) = to_shadow_path.parent() {
-        fs::create_dir_all(parent).map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to create shadow parent for rename {} -> {}: {error}",
-                from_path, to_path
-            ))
-        })?;
-    }
-
-    remove_shadow_path_if_exists(&to_shadow_path, &to_path)?;
-    fs::rename(&from_shadow_path, &to_shadow_path).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to mirror guest rename {} -> {} into shadow root: {error}",
-            from_path, to_path
-        ))
-    })?;
-
-    Ok(())
-}
-
-fn remove_shadow_path_if_exists(shadow_path: &Path, guest_path: &str) -> Result<(), SidecarError> {
-    match fs::symlink_metadata(shadow_path) {
-        Ok(metadata) => {
-            if metadata.is_dir() && !metadata.file_type().is_symlink() {
-                fs::remove_dir_all(shadow_path).map_err(|error| {
-                    SidecarError::Io(format!(
-                        "failed to remove shadow directory for {}: {error}",
-                        guest_path
-                    ))
-                })?;
-            } else {
-                fs::remove_file(shadow_path).map_err(|error| {
-                    SidecarError::Io(format!(
-                        "failed to remove shadow path for {}: {error}",
-                        guest_path
-                    ))
-                })?;
-            }
-            Ok(())
-        }
-        Err(error) if error.kind() == std::io::ErrorKind::NotFound => Ok(()),
-        Err(error) => Err(SidecarError::Io(format!(
-            "failed to inspect shadow path for {}: {error}",
-            guest_path
-        ))),
-    }
-}
-
-fn sync_active_shadow_path_to_kernel(
-    vm: &mut VmState,
-    guest_path: &str,
-) -> Result<(), SidecarError> {
-    sync_active_process_host_writes_to_kernel(vm)?;
-    let guest_path = normalize_path(guest_path);
-    if is_protected_agentos_shadow_sync_path(&guest_path) {
-        return Ok(());
-    }
-    let mut host_paths = active_process_shadow_host_paths_for_guest(vm, &guest_path);
-    if host_paths.is_empty() && !vm.kernel.exists(&guest_path).unwrap_or(false) {
-        host_paths.push(shadow_host_path_for_guest(&vm.cwd, &guest_path));
-    }
-
-    for host_path in host_paths {
-        let metadata = match fs::symlink_metadata(&host_path) {
-            Ok(metadata) => metadata,
-            Err(error) if error.kind() == std::io::ErrorKind::NotFound => continue,
-            Err(error) => {
-                return Err(SidecarError::Io(format!(
-                    "failed to stat host shadow path {}: {error}",
-                    host_path.display()
-                )));
-            }
-        };
-
-        if metadata.file_type().is_symlink() {
-            sync_host_symlink_to_kernel(vm, &guest_path, &host_path)?;
-            return Ok(());
-        }
-
-        if metadata.is_dir() {
-            sync_host_directory_to_kernel(vm, &guest_path, &metadata)?;
-            return Ok(());
-        }
-
-        if metadata.is_file() {
-            sync_host_file_to_kernel(vm, &guest_path, &host_path, &metadata)?;
-            return Ok(());
-        }
-    }
-
-    Ok(())
-}
-
-fn active_process_shadow_host_paths_for_guest(vm: &VmState, guest_path: &str) -> Vec<PathBuf> {
-    let mut candidates = Vec::new();
-    let mut seen = BTreeSet::new();
-
-    for process in vm.active_processes.values() {
-        if let Some(host_path) = resolve_process_guest_path_to_host(process, guest_path) {
-            push_unique_host_path(&mut candidates, &mut seen, host_path);
-        }
-    }
-
-    candidates
-}
-
-fn push_unique_host_path(
-    candidates: &mut Vec<PathBuf>,
-    seen: &mut BTreeSet<PathBuf>,
-    host_path: PathBuf,
-) {
-    if seen.insert(host_path.clone()) {
-        candidates.push(host_path);
-    }
-}
-
-fn shadow_host_path_for_guest(shadow_root: &Path, guest_path: &str) -> PathBuf {
-    if guest_path == "/" {
-        shadow_root.to_path_buf()
-    } else {
-        shadow_root.join(guest_path.trim_start_matches('/'))
-    }
-}
-
-fn shadow_symlink_target_for_guest(shadow_root: &Path, guest_path: &str, target: &str) -> PathBuf {
-    if !target.starts_with('/') {
-        return PathBuf::from(target);
-    }
-
-    let link_shadow_path = shadow_host_path_for_guest(shadow_root, guest_path);
-    let link_parent = link_shadow_path.parent().unwrap_or(shadow_root);
-    let target_shadow_path = shadow_host_path_for_guest(shadow_root, target);
-    relative_path_from(link_parent, &target_shadow_path)
-}
-
-fn relative_path_from(base_dir: &Path, target: &Path) -> PathBuf {
-    let base_components: Vec<_> = base_dir.components().collect();
-    let target_components: Vec<_> = target.components().collect();
-
-    let mut shared_prefix = 0;
-    while shared_prefix < base_components.len()
-        && shared_prefix < target_components.len()
-        && base_components[shared_prefix] == target_components[shared_prefix]
-    {
-        shared_prefix += 1;
-    }
-
-    let mut relative = PathBuf::new();
-    for _ in shared_prefix..base_components.len() {
-        relative.push("..");
-    }
-    for component in target_components.iter().skip(shared_prefix) {
-        relative.push(component.as_os_str());
-    }
-
-    if relative.as_os_str().is_empty() {
-        PathBuf::from(".")
-    } else {
-        relative
-    }
-}
-
-fn resolve_process_guest_path_to_host(
-    process: &ActiveProcess,
-    guest_path: &str,
-) -> Option<PathBuf> {
-    let normalized_guest_path = if guest_path.starts_with('/') {
-        normalize_path(guest_path)
-    } else {
-        normalize_path(&format!(
-            "{}/{}",
-            process.guest_cwd.trim_end_matches('/'),
-            guest_path
-        ))
-    };
-    if let Some(host_path) =
-        host_path_from_runtime_guest_mappings(&process.env, &normalized_guest_path)
-    {
-        return Some(host_path);
-    }
-    let normalized_guest_cwd = normalize_path(&process.guest_cwd);
-    let mut host_root = process.host_cwd.clone();
-    for _ in normalized_guest_cwd
-        .trim_start_matches('/')
-        .split('/')
-        .filter(|segment| !segment.is_empty())
-    {
-        host_root = host_root.parent()?.to_path_buf();
-    }
-    Some(shadow_host_path_for_guest(
-        &host_root,
-        &normalized_guest_path,
-    ))
-}
-
-fn sync_host_directory_to_kernel(
-    vm: &mut VmState,
-    guest_path: &str,
-    metadata: &fs::Metadata,
-) -> Result<(), SidecarError> {
-    vm.kernel.mkdir(guest_path, true).map_err(kernel_error)?;
-    vm.kernel
-        .chmod(guest_path, metadata.permissions().mode() & 0o7777)
-        .map_err(kernel_error)?;
-    Ok(())
-}
-
-fn sync_host_file_to_kernel(
-    vm: &mut VmState,
-    guest_path: &str,
-    host_path: &Path,
-    metadata: &fs::Metadata,
-) -> Result<(), SidecarError> {
-    ensure_guest_parent_dir(vm, guest_path)?;
-    let bytes = fs::read(host_path).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to read host shadow file {}: {error}",
-            host_path.display()
-        ))
-    })?;
-    vm.kernel
-        .write_file(guest_path, bytes)
-        .map_err(kernel_error)?;
-    vm.kernel
-        .chmod(guest_path, metadata.permissions().mode() & 0o7777)
-        .map_err(kernel_error)?;
-    Ok(())
-}
-
-fn sync_host_symlink_to_kernel(
-    vm: &mut VmState,
-    guest_path: &str,
-    host_path: &Path,
-) -> Result<(), SidecarError> {
-    ensure_guest_parent_dir(vm, guest_path)?;
-    let target = fs::read_link(host_path).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to read host shadow symlink {}: {error}",
-            host_path.display()
-        ))
-    })?;
-
-    let target = restore_guest_symlink_target_from_shadow(vm, guest_path, host_path, &target)
-        .unwrap_or_else(|| target.to_string_lossy().into_owned());
-
-    replace_guest_symlink(vm, guest_path, &target)
-}
-
-fn restore_guest_symlink_target_from_shadow(
-    vm: &VmState,
-    guest_path: &str,
-    host_path: &Path,
-    shadow_target: &Path,
-) -> Option<String> {
-    if shadow_target.is_absolute() {
-        return None;
-    }
-
-    let existing_target = vm.kernel.read_link(guest_path).ok()?;
-    if !existing_target.starts_with('/') {
-        return None;
-    }
-
-    let host_parent = host_path.parent().unwrap_or(&vm.cwd);
-    let resolved_host_target = normalize_host_path(&host_parent.join(shadow_target));
-    let normalized_shadow_root = normalize_host_path(&vm.cwd);
-    if resolved_host_target == normalized_shadow_root {
-        return Some(String::from("/"));
-    }
-
-    resolved_host_target
-        .strip_prefix(&normalized_shadow_root)
-        .ok()
-        .map(|suffix| format!("/{}", suffix.to_string_lossy().trim_start_matches('/')))
-}
-
-fn replace_guest_symlink(
-    vm: &mut VmState,
-    guest_path: &str,
-    target: &str,
-) -> Result<(), SidecarError> {
-    if vm.kernel.symlink(target, guest_path).is_ok() {
-        return Ok(());
-    }
-
-    if let Ok(existing_target) = vm.kernel.read_link(guest_path) {
-        if existing_target == target {
-            return Ok(());
-        }
-    }
-
-    let _ = vm.kernel.remove_file(guest_path);
-    let _ = vm.kernel.remove_dir(guest_path);
-    vm.kernel
-        .symlink(target, guest_path)
-        .map_err(kernel_error)?;
-    Ok(())
-}
-
-fn ensure_guest_parent_dir(vm: &mut VmState, guest_path: &str) -> Result<(), SidecarError> {
-    let Some(parent) = Path::new(guest_path).parent() else {
-        return Ok(());
-    };
-    let parent = parent.to_string_lossy();
-    if parent.is_empty() || parent == "/" {
-        return Ok(());
-    }
-    vm.kernel
-        .mkdir(&normalize_path(&parent), true)
-        .map_err(kernel_error)?;
-    Ok(())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::{
-        create_mapped_runtime_directory, create_mapped_runtime_root_directory,
-        mapped_runtime_relative_path, mapped_runtime_symlink_metadata,
-        materialize_mapped_host_path_from_kernel, open_mapped_runtime_parent_beneath,
-        read_mapped_runtime_link, rename_mapped_host_path, MappedRuntimeHostAccess,
-        MappedRuntimeHostPath, SidecarError,
-    };
-    use crate::execution::javascript_sync_rpc_error_code;
-    use crate::state::{SidecarKernel, EXECUTION_DRIVER_NAME, JAVASCRIPT_COMMAND};
-    use secure_exec_kernel::command_registry::CommandDriver;
-    use secure_exec_kernel::kernel::{KernelVmConfig, SpawnOptions};
-    use secure_exec_kernel::mount_table::MountTable;
-    use secure_exec_kernel::permissions::Permissions;
-    use secure_exec_kernel::vfs::MemoryFileSystem;
-    use std::fs;
-    use std::os::unix::fs::PermissionsExt;
-    use std::path::PathBuf;
-    use std::time::{SystemTime, UNIX_EPOCH};
-
-    fn writable_mapping(guest_path: &str, host_root: &str) -> MappedRuntimeHostAccess {
-        let host_root = PathBuf::from(host_root);
-        MappedRuntimeHostAccess::Writable(MappedRuntimeHostPath {
-            guest_path: guest_path.to_owned(),
-            host_path: host_root.join("file.txt"),
-            host_root: host_root.clone(),
-        })
-    }
-
-    fn temp_dir(prefix: &str) -> PathBuf {
-        let path = std::env::temp_dir().join(format!(
-            "{prefix}-{}",
-            SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("system time before unix epoch")
-                .as_nanos()
-        ));
-        fs::create_dir_all(&path).expect("create temp dir");
-        path
-    }
-
-    fn test_kernel_with_process() -> (SidecarKernel, u32) {
-        let mut config = KernelVmConfig::new("vm-mapped-materialize");
-        config.permissions = Permissions::allow_all();
-        let mut kernel = SidecarKernel::new(MountTable::new(MemoryFileSystem::new()), config);
-        kernel
-            .register_driver(CommandDriver::new(
-                EXECUTION_DRIVER_NAME,
-                [JAVASCRIPT_COMMAND],
-            ))
-            .expect("register execution driver");
-        let handle = kernel
-            .spawn_process(
-                JAVASCRIPT_COMMAND,
-                Vec::new(),
-                SpawnOptions {
-                    requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                    cwd: Some(String::from("/")),
-                    ..SpawnOptions::default()
-                },
-            )
-            .expect("spawn kernel process");
-        (kernel, handle.pid())
-    }
-
-    #[test]
-    fn rename_mapped_host_path_reports_exdev_for_cross_mount_guest_errno() {
-        for (source_host, destination_host) in [
-            (
-                Some(writable_mapping(
-                    "/mapped/file.txt",
-                    "/tmp/secure-exec-mapped-source",
-                )),
-                None,
-            ),
-            (
-                None,
-                Some(writable_mapping(
-                    "/mapped-dst/file.txt",
-                    "/tmp/secure-exec-mapped-destination",
-                )),
-            ),
-        ] {
-            let error = rename_mapped_host_path(
-                "/mapped/file.txt",
-                source_host,
-                "/kernel/file.txt",
-                destination_host,
-            )
-            .expect_err("cross-mount rename should fail with EXDEV");
-            assert!(
-                matches!(error, SidecarError::Kernel(ref message) if message.starts_with("EXDEV:")),
-                "expected EXDEV kernel error, got {error:?}"
-            );
-            assert_eq!(javascript_sync_rpc_error_code(&error), "EXDEV");
-        }
-    }
-
-    #[test]
-    fn mapped_runtime_parent_treats_single_segment_relative_paths_as_root_children() {
-        let host_root = std::env::temp_dir().join(format!(
-            "secure-exec-sidecar-fs-parent-{}",
-            SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("system time before unix epoch")
-                .as_nanos()
-        ));
-        fs::create_dir_all(&host_root).expect("create mapped host root");
-        let mapped = MappedRuntimeHostPath {
-            guest_path: String::from("/workspace"),
-            host_root: host_root.clone(),
-            host_path: host_root.join("workspace"),
-        };
-
-        assert_eq!(
-            mapped_runtime_relative_path(&mapped).expect("relative path"),
-            PathBuf::from("workspace")
-        );
-
-        let parent = open_mapped_runtime_parent_beneath(&mapped, "test")
-            .expect("open mapped parent for root child");
-        // `host_path` is the resolved fd's real path, which is canonical (on
-        // macOS the temp dir resolves through the `/private` firmlink), so
-        // compare against the canonicalized root rather than the raw value.
-        assert_eq!(
-            parent.host_path,
-            fs::canonicalize(&host_root).expect("canonicalize host root")
-        );
-        assert_eq!(parent.child_name.to_string_lossy(), "workspace");
-    }
-
-    #[test]
-    fn mapped_runtime_root_lstat_uses_root_metadata_without_parent_basename() {
-        let host_root = std::env::temp_dir().join(format!(
-            "secure-exec-sidecar-fs-root-lstat-{}",
-            SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("system time before unix epoch")
-                .as_nanos()
-        ));
-        fs::create_dir_all(&host_root).expect("create mapped host root");
-        let mapped = MappedRuntimeHostPath {
-            guest_path: String::from("/node_modules"),
-            host_root: host_root.clone(),
-            host_path: host_root.clone(),
-        };
-
-        let metadata = mapped_runtime_symlink_metadata(&mapped, "test").expect("lstat mapped root");
-        assert!(metadata.is_dir(), "expected mapped root directory metadata");
-
-        fs::remove_dir_all(&host_root).expect("remove mapped host root");
-    }
-
-    #[test]
-    fn mapped_runtime_root_readlink_uses_root_path_without_parent_basename() {
-        let host_parent = std::env::temp_dir().join(format!(
-            "secure-exec-sidecar-fs-root-readlink-{}",
-            SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("system time before unix epoch")
-                .as_nanos()
-        ));
-        let host_target = host_parent.join("target");
-        let host_link = host_parent.join("link");
-        fs::create_dir_all(&host_target).expect("create mapped host target");
-        std::os::unix::fs::symlink(&host_target, &host_link).expect("create mapped host link");
-        let mapped = MappedRuntimeHostPath {
-            guest_path: String::from("/"),
-            host_root: host_link.clone(),
-            host_path: host_link,
-        };
-
-        let target = read_mapped_runtime_link(&mapped, "/", "test").expect("read mapped root link");
-        assert_eq!(target, host_target);
-
-        fs::remove_dir_all(&host_parent).expect("remove mapped host parent");
-    }
-
-    #[test]
-    fn recursive_mapped_directory_create_accepts_existing_directory() {
-        let host_root = std::env::temp_dir().join(format!(
-            "secure-exec-sidecar-fs-existing-dir-{}",
-            SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("system time before unix epoch")
-                .as_nanos()
-        ));
-        let existing_dir = host_root.join("workspace");
-        fs::create_dir_all(&existing_dir).expect("create existing mapped directory");
-        let mapped = MappedRuntimeHostPath {
-            guest_path: String::from("/workspace"),
-            host_root: host_root.clone(),
-            host_path: existing_dir,
-        };
-
-        let parent = open_mapped_runtime_parent_beneath(&mapped, "test")
-            .expect("open mapped parent for root child");
-        create_mapped_runtime_directory(&parent, "/workspace", true)
-            .expect("recursive mkdir should accept an existing directory");
-        let non_recursive_error = create_mapped_runtime_directory(&parent, "/workspace", false)
-            .expect_err("non-recursive mkdir should keep EEXIST behavior");
-        assert!(
-            matches!(non_recursive_error, SidecarError::Io(ref message) if message.contains("File exists")),
-            "expected File exists error, got {non_recursive_error:?}"
-        );
-
-        fs::remove_dir_all(&host_root).expect("remove mapped host root");
-    }
-
-    #[test]
-    fn recursive_mapped_root_directory_create_accepts_existing_directory() {
-        let host_root = std::env::temp_dir().join(format!(
-            "secure-exec-sidecar-fs-existing-root-dir-{}",
-            SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("system time before unix epoch")
-                .as_nanos()
-        ));
-        fs::create_dir_all(&host_root).expect("create mapped host root");
-        let mapped = MappedRuntimeHostPath {
-            guest_path: String::from("/"),
-            host_root: host_root.clone(),
-            host_path: host_root.clone(),
-        };
-
-        create_mapped_runtime_root_directory(&mapped, true)
-            .expect("recursive root mkdir should accept an existing directory");
-        let non_recursive_error = create_mapped_runtime_root_directory(&mapped, false)
-            .expect_err("non-recursive root mkdir should keep EEXIST behavior");
-        assert!(
-            matches!(non_recursive_error, SidecarError::Io(ref message) if message.contains("File exists")),
-            "expected File exists error, got {non_recursive_error:?}"
-        );
-
-        fs::remove_dir_all(&host_root).expect("remove mapped host root");
-    }
-
-    #[test]
-    fn materialize_mapped_host_path_does_not_follow_symlinked_parents() {
-        let host_root = temp_dir("secure-exec-sidecar-fs-materialize-root");
-        let outside = temp_dir("secure-exec-sidecar-fs-materialize-outside");
-        std::os::unix::fs::symlink(&outside, host_root.join("link"))
-            .expect("create escape symlink");
-
-        let (mut kernel, pid) = test_kernel_with_process();
-        kernel
-            .write_file_for_process(
-                EXECUTION_DRIVER_NAME,
-                pid,
-                "/workspace/link/out.txt",
-                b"secret".to_vec(),
-                Some(0o644),
-            )
-            .expect("seed guest file");
-        let mapped = MappedRuntimeHostPath {
-            guest_path: String::from("/workspace/link/out.txt"),
-            host_root: host_root.clone(),
-            host_path: host_root.join("link/out.txt"),
-        };
-
-        materialize_mapped_host_path_from_kernel(
-            &mut kernel,
-            pid,
-            "/workspace/link/out.txt",
-            &mapped,
-        )
-        .expect_err("symlinked parent must not be followed during materialization");
-
-        assert!(
-            !outside.join("out.txt").exists(),
-            "materialization wrote through a symlinked mapped parent"
-        );
-
-        fs::remove_dir_all(&host_root).expect("remove mapped host root");
-        fs::remove_dir_all(&outside).expect("remove outside dir");
-    }
-
-    #[test]
-    fn materialize_mapped_host_path_writes_regular_files_beneath_root() {
-        let host_root = temp_dir("secure-exec-sidecar-fs-materialize-file");
-        let (mut kernel, pid) = test_kernel_with_process();
-        kernel
-            .write_file_for_process(
-                EXECUTION_DRIVER_NAME,
-                pid,
-                "/workspace/out.txt",
-                b"secret".to_vec(),
-                Some(0o640),
-            )
-            .expect("seed guest file");
-        let mapped = MappedRuntimeHostPath {
-            guest_path: String::from("/workspace/out.txt"),
-            host_root: host_root.clone(),
-            host_path: host_root.join("out.txt"),
-        };
-
-        materialize_mapped_host_path_from_kernel(&mut kernel, pid, "/workspace/out.txt", &mapped)
-            .expect("materialize regular mapped file");
-
-        let host_path = host_root.join("out.txt");
-        assert_eq!(
-            fs::read(&host_path).expect("read materialized file"),
-            b"secret"
-        );
-        assert_eq!(
-            fs::metadata(&host_path)
-                .expect("materialized metadata")
-                .permissions()
-                .mode()
-                & 0o777,
-            0o640
-        );
-
-        fs::remove_dir_all(&host_root).expect("remove mapped host root");
-    }
-
-    // Companion to the execution-crate `faithful_pnpm_symlink_layout_*` host
-    // test, but resolving through the *kernel VFS* via a read-only `host_dir`
-    // mount at `/root/node_modules` — the real VM path. A faithful pnpm tree
-    // (every package in its own `.pnpm/<pkg>@<ver>/node_modules/<pkg>` entry,
-    // dependencies wired by symlink) must resolve purely by the standard
-    // ancestor walk + realpath, with NO `.pnpm` store scanning, and must pick
-    // the version the symlink points at — not an alphabetically-earlier decoy.
-    #[test]
-    fn faithful_pnpm_symlink_layout_resolves_through_kernel_vfs() {
-        use super::{KernelModuleFsReader, ModuleResolveMode};
-        use secure_exec_execution::{LocalModuleResolutionCache, ModuleResolver};
-        use secure_exec_kernel::mount_table::{MountOptions, MountedVirtualFileSystem};
-        use std::os::unix::fs::symlink;
-
-        let node_modules = temp_dir("pnpm-vfs-node-modules").join("node_modules");
-        let write = |relative: &str, contents: &str| {
-            let path = node_modules.join(relative);
-            fs::create_dir_all(path.parent().expect("parent")).expect("create dirs");
-            fs::write(path, contents).expect("write fixture");
-        };
-        // pnpm always writes *relative* symlinks; the VFS mount follows them
-        // with RESOLVE_BENEATH (absolute targets are treated as escaping, which
-        // is also why pnpm never uses them). `relative_target` is the target
-        // expressed relative to the link's own directory.
-        let link = |relative_target: &str, link_relative: &str| {
-            let link_path = node_modules.join(link_relative);
-            fs::create_dir_all(link_path.parent().expect("link parent")).expect("create dirs");
-            symlink(relative_target, link_path).expect("create symlink");
-        };
-
-        // consumer@1.0.0 in its store entry; imports `dep`.
-        write(
-            ".pnpm/consumer@1.0.0/node_modules/consumer/index.mjs",
-            "import { wanted } from 'dep';\nexport default wanted;",
-        );
-        write(
-            ".pnpm/consumer@1.0.0/node_modules/consumer/package.json",
-            r#"{ "version": "1.0.0", "type": "module", "exports": { ".": "./index.mjs" } }"#,
-        );
-        // dep@2.0.0 — the correct version — in its own store entry.
-        write(
-            ".pnpm/dep@2.0.0/node_modules/dep/index.mjs",
-            "export const wanted = 2;",
-        );
-        write(
-            ".pnpm/dep@2.0.0/node_modules/dep/package.json",
-            r#"{ "version": "2.0.0", "type": "module", "exports": { ".": "./index.mjs" } }"#,
-        );
-        // Decoy: an alphabetically-earlier store entry holding an incompatible dep@1.
-        write(
-            ".pnpm/aaa-other@1.0.0/node_modules/dep/index.js",
-            "module.exports = 1;",
-        );
-        write(
-            ".pnpm/aaa-other@1.0.0/node_modules/dep/package.json",
-            r#"{ "version": "1.0.0", "main": "index.js" }"#,
-        );
-        // pnpm's sibling symlink: consumer's `dep` -> dep@2.0.0's store entry,
-        // expressed relative to `.pnpm/consumer@1.0.0/node_modules/`.
-        link(
-            "../../dep@2.0.0/node_modules/dep",
-            ".pnpm/consumer@1.0.0/node_modules/dep",
-        );
-        // Top-level symlink: node_modules/consumer -> consumer's store entry,
-        // expressed relative to `node_modules/`.
-        link(".pnpm/consumer@1.0.0/node_modules/consumer", "consumer");
-
-        // Mount the tree read-only at /root/node_modules, exactly like the live VM.
-        let mut config = KernelVmConfig::new("vm-pnpm-vfs");
-        config.permissions = Permissions::allow_all();
-        let mut kernel = SidecarKernel::new(MountTable::new(MemoryFileSystem::new()), config);
-        let host_dir = crate::plugins::host_dir::HostDirFilesystem::new(&node_modules)
-            .expect("create host_dir over node_modules");
-        kernel
-            .mount_boxed_filesystem(
-                "/root/node_modules",
-                Box::new(MountedVirtualFileSystem::new(host_dir)),
-                MountOptions::new("host_dir").read_only(true),
-            )
-            .expect("mount node_modules read-only");
-
-        let mut cache = LocalModuleResolutionCache::default();
-        let mut resolver = ModuleResolver::new(
-            KernelModuleFsReader {
-                kernel: &mut kernel,
-            },
-            &mut cache,
-        );
-
-        // Importer is the top-level symlink path. The ancestor walk finds `dep`
-        // via pnpm's sibling symlink in consumer's store dir (pointing at
-        // dep@2.0.0) — no `.pnpm` scan. Resolution reads entirely through the VFS.
-        let resolved = resolver.resolve_module(
-            "dep",
-            "/root/node_modules/consumer/index.mjs",
-            ModuleResolveMode::Import,
-        );
-        assert_eq!(
-            resolved.as_deref(),
-            Some("/root/node_modules/.pnpm/consumer@1.0.0/node_modules/dep/index.mjs"),
-            "must resolve dep@2.0.0 via the sibling symlink, not the aaa-other decoy",
-        );
-
-        // And the resolved source loads through the VFS too.
-        let source = resolver
-            .load_file("/root/node_modules/.pnpm/consumer@1.0.0/node_modules/dep/index.mjs")
-            .expect("load resolved dep source via kernel VFS");
-        assert_eq!(source, "export const wanted = 2;");
-
-        fs::remove_dir_all(node_modules.parent().expect("temp parent")).expect("remove temp tree");
-    }
-
-    // Companion to the kernel-VFS test above, but resolving through the
-    // `HostDirModuleReader` — the bridge-thread reader the live VM uses so module
-    // resolution runs concurrently with the service loop instead of serializing
-    // behind it. It reads the SAME read-only `host_dir` mount (anchored openat2,
-    // escaping-symlink refusal) and must resolve the identical pnpm layout to the
-    // identical guest path, with no `.pnpm` scanning and the symlink-pointed
-    // version winning over the decoy.
-    #[test]
-    fn faithful_pnpm_symlink_layout_resolves_through_host_dir_module_reader() {
-        use crate::plugins::host_dir::HostDirModuleReader;
-        use secure_exec_execution::{
-            LocalModuleResolutionCache, ModuleResolveMode, ModuleResolver,
-        };
-        use std::os::unix::fs::symlink;
-
-        let node_modules = temp_dir("pnpm-reader-node-modules").join("node_modules");
-        let write = |relative: &str, contents: &str| {
-            let path = node_modules.join(relative);
-            fs::create_dir_all(path.parent().expect("parent")).expect("create dirs");
-            fs::write(path, contents).expect("write fixture");
-        };
-        let link = |relative_target: &str, link_relative: &str| {
-            let link_path = node_modules.join(link_relative);
-            fs::create_dir_all(link_path.parent().expect("link parent")).expect("create dirs");
-            symlink(relative_target, link_path).expect("create symlink");
-        };
-
-        write(
-            ".pnpm/consumer@1.0.0/node_modules/consumer/index.mjs",
-            "import { wanted } from 'dep';\nexport default wanted;",
-        );
-        write(
-            ".pnpm/consumer@1.0.0/node_modules/consumer/package.json",
-            r#"{ "version": "1.0.0", "type": "module", "exports": { ".": "./index.mjs" } }"#,
-        );
-        write(
-            ".pnpm/dep@2.0.0/node_modules/dep/index.mjs",
-            "export const wanted = 2;",
-        );
-        write(
-            ".pnpm/dep@2.0.0/node_modules/dep/package.json",
-            r#"{ "version": "2.0.0", "type": "module", "exports": { ".": "./index.mjs" } }"#,
-        );
-        write(
-            ".pnpm/aaa-other@1.0.0/node_modules/dep/index.js",
-            "module.exports = 1;",
-        );
-        write(
-            ".pnpm/aaa-other@1.0.0/node_modules/dep/package.json",
-            r#"{ "version": "1.0.0", "main": "index.js" }"#,
-        );
-        link(
-            "../../dep@2.0.0/node_modules/dep",
-            ".pnpm/consumer@1.0.0/node_modules/dep",
-        );
-        link(".pnpm/consumer@1.0.0/node_modules/consumer", "consumer");
-
-        // The reader is anchored at the node_modules host root, mounted at the
-        // guest convention `/root/node_modules` — exactly what build_module_reader
-        // derives for the live VM.
-        let reader = HostDirModuleReader::from_mounts([("/root/node_modules", &node_modules)])
-            .expect("build host_dir module reader");
-        let mut cache = LocalModuleResolutionCache::default();
-        let mut resolver = ModuleResolver::new(reader, &mut cache);
-
-        let resolved = resolver.resolve_module(
-            "dep",
-            "/root/node_modules/consumer/index.mjs",
-            ModuleResolveMode::Import,
-        );
-        assert_eq!(
-            resolved.as_deref(),
-            Some("/root/node_modules/.pnpm/consumer@1.0.0/node_modules/dep/index.mjs"),
-            "reader must resolve dep@2.0.0 via the sibling symlink, not the aaa-other decoy",
-        );
-
-        let source = resolver
-            .load_file("/root/node_modules/.pnpm/consumer@1.0.0/node_modules/dep/index.mjs")
-            .expect("load resolved dep source via host_dir reader");
-        assert_eq!(source, "export const wanted = 2;");
-
-        // Escaping-symlink refusal is preserved by the mount: a link pointing
-        // outside the node_modules root must not read through it.
-        let outside = temp_dir("pnpm-reader-outside");
-        fs::create_dir_all(&outside).expect("create outside dir");
-        fs::write(outside.join("escaped.js"), "module.exports = 'escaped';")
-            .expect("write escape target");
-        symlink(&outside, node_modules.join("escape-link")).expect("create escaping symlink");
-        let escape_reader =
-            HostDirModuleReader::from_mounts([("/root/node_modules", &node_modules)])
-                .expect("build host_dir module reader");
-        let mut escape_cache = LocalModuleResolutionCache::default();
-        let mut escape_resolver = ModuleResolver::new(escape_reader, &mut escape_cache);
-        let escaped = escape_resolver.load_file("/root/node_modules/escape-link/escaped.js");
-        assert!(
-            escaped.is_none(),
-            "escaping symlink must not read through the mount",
-        );
-
-        fs::remove_dir_all(node_modules.parent().expect("temp parent")).expect("remove temp tree");
-        fs::remove_dir_all(&outside).ok();
-    }
-
-    // Phase 0 perf gate: compare cold-start module resolution cost of the new
-    // kernel-VFS path against the legacy host-direct path over a representative
-    // node_modules closure. Run with:
-    //   cargo test -p secure-exec-sidecar --lib module_resolution_vfs_vs_host_cold_start_perf -- --nocapture --ignored
-    #[test]
-    #[ignore = "perf microbenchmark; run explicitly with --ignored --nocapture"]
-    fn module_resolution_vfs_vs_host_cold_start_perf() {
-        use super::KernelModuleFsReader;
-        use secure_exec_execution::javascript::ModuleResolutionTestHarness;
-        use secure_exec_execution::{
-            LocalModuleResolutionCache, ModuleResolveMode, ModuleResolver,
-        };
-        use secure_exec_kernel::mount_table::{MountOptions, MountedVirtualFileSystem};
-        use std::time::Instant;
-
-        // Build a representative closure: a root entry that imports N packages,
-        // each a scoped/unscoped package with its own package.json + nested dep.
-        const PACKAGES: usize = 40;
-        let root = temp_dir("perf-closure");
-        let write = |relative: &str, contents: &str| {
-            let path = root.join(relative);
-            fs::create_dir_all(path.parent().expect("parent")).expect("create dirs");
-            fs::write(path, contents).expect("write");
-        };
-
-        let mut imports = Vec::new();
-        for i in 0..PACKAGES {
-            let pkg = format!("pkg{i}");
-            write(
-                &format!("node_modules/{pkg}/package.json"),
-                &format!(r#"{{ "name": "{pkg}", "version": "1.0.0", "main": "lib/index.js" }}"#),
-            );
-            write(
-                &format!("node_modules/{pkg}/lib/index.js"),
-                "module.exports = require('./helper');",
-            );
-            write(
-                &format!("node_modules/{pkg}/lib/helper.js"),
-                "module.exports = 1;",
-            );
-            // a nested transitive dependency
-            write(
-                &format!("node_modules/{pkg}/node_modules/dep{i}/package.json"),
-                &format!(r#"{{ "name": "dep{i}", "version": "1.0.0" }}"#),
-            );
-            write(
-                &format!("node_modules/{pkg}/node_modules/dep{i}/index.js"),
-                "module.exports = 2;",
-            );
-            imports.push(pkg);
-        }
-        write("index.js", "// root entry\n");
-
-        let from = "/root/index.js";
-        let iterations = 50usize;
-
-        // --- Host-direct path (legacy) ---
-        let host_start = Instant::now();
-        for _ in 0..iterations {
-            let mut harness = ModuleResolutionTestHarness::new(&root);
-            for pkg in &imports {
-                let _ = harness.resolve_require(pkg, from);
-            }
-        }
-        let host_elapsed = host_start.elapsed();
-
-        // --- Kernel-VFS path (new) ---
-        // Mount the whole closure root so /root resolves through the VFS.
-        let build_kernel = || {
-            let mut config = KernelVmConfig::new("vm-perf");
-            config.permissions = Permissions::allow_all();
-            let mut kernel = SidecarKernel::new(MountTable::new(MemoryFileSystem::new()), config);
-            let host_dir = crate::plugins::host_dir::HostDirFilesystem::new(&root)
-                .expect("host_dir over closure root");
-            kernel
-                .mount_boxed_filesystem(
-                    "/root",
-                    Box::new(MountedVirtualFileSystem::new(host_dir)),
-                    MountOptions::new("host_dir").read_only(true),
-                )
-                .expect("mount /root");
-            kernel
-        };
-
-        let vfs_start = Instant::now();
-        for _ in 0..iterations {
-            let mut kernel = build_kernel();
-            let mut cache = LocalModuleResolutionCache::default();
-            let mut resolver = ModuleResolver::new(
-                KernelModuleFsReader {
-                    kernel: &mut kernel,
-                },
-                &mut cache,
-            );
-            for pkg in &imports {
-                let _ = resolver.resolve_module(pkg, from, ModuleResolveMode::Require);
-            }
-        }
-        let vfs_elapsed = vfs_start.elapsed();
-
-        // Exclude kernel-build cost from the VFS resolution figure by measuring
-        // it separately, so the comparison is resolution-vs-resolution.
-        let build_start = Instant::now();
-        for _ in 0..iterations {
-            let _kernel = build_kernel();
-        }
-        let build_elapsed = build_start.elapsed();
-        let vfs_resolve_only = vfs_elapsed.saturating_sub(build_elapsed);
-
-        let per_closure_host = host_elapsed / iterations as u32;
-        let per_closure_vfs = vfs_elapsed / iterations as u32;
-        let per_closure_vfs_resolve = vfs_resolve_only / iterations as u32;
-
-        eprintln!("\n=== Phase 0 module-resolution cold-start perf ===");
-        eprintln!("closure: {PACKAGES} packages, {iterations} cold iterations");
-        eprintln!("host-direct : {host_elapsed:?} total | {per_closure_host:?} / closure");
-        eprintln!(
-            "kernel-VFS  : {vfs_elapsed:?} total | {per_closure_vfs:?} / closure (incl. mount build)"
-        );
-        eprintln!(
-            "kernel-VFS  : {vfs_resolve_only:?} total | {per_closure_vfs_resolve:?} / closure (resolution only)"
-        );
-        eprintln!(
-            "kernel build: {build_elapsed:?} total | {:?} / closure",
-            build_elapsed / iterations as u32
-        );
-        let ratio = vfs_resolve_only.as_secs_f64() / host_elapsed.as_secs_f64().max(1e-9);
-        eprintln!("ratio (vfs-resolve / host): {ratio:.2}x");
-
-        fs::remove_dir_all(&root).expect("remove perf tree");
-    }
-}
diff --git a/crates/sidecar/src/json_rpc.rs b/crates/sidecar/src/json_rpc.rs
deleted file mode 100644
index 2da9bfaf5..000000000
--- a/crates/sidecar/src/json_rpc.rs
+++ /dev/null
@@ -1,448 +0,0 @@
-use serde::de::Error as _;
-use serde::ser::Error as _;
-use serde::{Deserialize, Deserializer, Serialize, Serializer};
-use serde_json::{Map, Value};
-use std::fmt;
-
-const JSON_RPC_VERSION: &str = "2.0";
-
-#[derive(Debug, Clone, PartialEq, Eq, PartialOrd, Ord, Hash, Serialize, Deserialize)]
-#[serde(untagged)]
-pub enum JsonRpcId {
-    Number(i64),
-    String(String),
-    Null,
-}
-
-impl std::fmt::Display for JsonRpcId {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        match self {
-            Self::Number(value) => write!(f, "{value}"),
-            Self::String(value) => f.write_str(value),
-            Self::Null => f.write_str("null"),
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
-pub struct JsonRpcError {
-    pub code: i64,
-    pub message: String,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub data: Option<Value>,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
-pub struct JsonRpcRequest {
-    #[serde(default = "jsonrpc_version")]
-    pub jsonrpc: String,
-    pub id: JsonRpcId,
-    pub method: String,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub params: Option<Value>,
-}
-
-#[derive(Debug, Clone, PartialEq)]
-pub struct JsonRpcResponse {
-    pub jsonrpc: String,
-    pub id: JsonRpcId,
-    result: Option<Value>,
-    error: Option<JsonRpcError>,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize, Deserialize)]
-pub struct JsonRpcNotification {
-    #[serde(default = "jsonrpc_version")]
-    pub jsonrpc: String,
-    pub method: String,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub params: Option<Value>,
-}
-
-#[derive(Debug, Clone, PartialEq)]
-pub enum JsonRpcMessage {
-    Request(JsonRpcRequest),
-    Response(JsonRpcResponse),
-    Notification(JsonRpcNotification),
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum JsonRpcResponseShapeError {
-    BothResultAndError,
-    MissingResultAndError,
-}
-
-impl fmt::Display for JsonRpcResponseShapeError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::BothResultAndError => {
-                f.write_str("JSON-RPC response cannot include both result and error")
-            }
-            Self::MissingResultAndError => {
-                f.write_str("JSON-RPC response must include exactly one of result or error")
-            }
-        }
-    }
-}
-
-impl std::error::Error for JsonRpcResponseShapeError {}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum JsonRpcParseErrorKind {
-    ParseError,
-    InvalidRequest,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct JsonRpcParseError {
-    kind: JsonRpcParseErrorKind,
-    id: JsonRpcId,
-    message: String,
-}
-
-impl JsonRpcParseError {
-    fn parse_error(error: serde_json::Error) -> Self {
-        Self {
-            kind: JsonRpcParseErrorKind::ParseError,
-            id: JsonRpcId::Null,
-            message: format!("Parse error: {error}"),
-        }
-    }
-
-    fn invalid_request(message: impl Into<String>, id: Option<JsonRpcId>) -> Self {
-        Self {
-            kind: JsonRpcParseErrorKind::InvalidRequest,
-            id: id.unwrap_or(JsonRpcId::Null),
-            message: message.into(),
-        }
-    }
-
-    pub fn code(&self) -> i64 {
-        match self.kind {
-            JsonRpcParseErrorKind::ParseError => -32700,
-            JsonRpcParseErrorKind::InvalidRequest => -32600,
-        }
-    }
-
-    pub fn id(&self) -> &JsonRpcId {
-        &self.id
-    }
-
-    pub fn message(&self) -> &str {
-        &self.message
-    }
-
-    pub fn to_response(&self) -> JsonRpcResponse {
-        JsonRpcResponse::error_response(
-            self.id.clone(),
-            JsonRpcError {
-                code: self.code(),
-                message: self.message.clone(),
-                data: None,
-            },
-        )
-    }
-}
-
-impl fmt::Display for JsonRpcParseError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{} (code {})", self.message, self.code())
-    }
-}
-
-impl std::error::Error for JsonRpcParseError {}
-
-impl From<JsonRpcRequest> for JsonRpcMessage {
-    fn from(value: JsonRpcRequest) -> Self {
-        Self::Request(value)
-    }
-}
-
-impl From<JsonRpcResponse> for JsonRpcMessage {
-    fn from(value: JsonRpcResponse) -> Self {
-        Self::Response(value)
-    }
-}
-
-impl From<JsonRpcNotification> for JsonRpcMessage {
-    fn from(value: JsonRpcNotification) -> Self {
-        Self::Notification(value)
-    }
-}
-
-impl JsonRpcResponse {
-    pub fn success(id: JsonRpcId, result: Value) -> Self {
-        Self {
-            jsonrpc: jsonrpc_version(),
-            id,
-            result: Some(result),
-            error: None,
-        }
-    }
-
-    pub fn error_response(id: JsonRpcId, error: JsonRpcError) -> Self {
-        Self {
-            jsonrpc: jsonrpc_version(),
-            id,
-            result: None,
-            error: Some(error),
-        }
-    }
-
-    pub fn try_from_parts(
-        jsonrpc: String,
-        id: JsonRpcId,
-        result: Option<Value>,
-        error: Option<JsonRpcError>,
-    ) -> Result<Self, JsonRpcResponseShapeError> {
-        match (result, error) {
-            (Some(result), None) => Ok(Self {
-                jsonrpc,
-                id,
-                result: Some(result),
-                error: None,
-            }),
-            (None, Some(error)) => Ok(Self {
-                jsonrpc,
-                id,
-                result: None,
-                error: Some(error),
-            }),
-            (Some(_), Some(_)) => Err(JsonRpcResponseShapeError::BothResultAndError),
-            (None, None) => Err(JsonRpcResponseShapeError::MissingResultAndError),
-        }
-    }
-
-    pub fn result(&self) -> Option<&Value> {
-        self.result.as_ref()
-    }
-
-    pub fn error(&self) -> Option<&JsonRpcError> {
-        self.error.as_ref()
-    }
-
-    pub fn into_result(self) -> Option<Value> {
-        self.result
-    }
-
-    pub fn into_error(self) -> Option<JsonRpcError> {
-        self.error
-    }
-
-    pub fn is_error(&self) -> bool {
-        self.error.is_some()
-    }
-}
-
-pub fn serialize_message(message: &JsonRpcMessage) -> Result<String, serde_json::Error> {
-    let body = match message {
-        JsonRpcMessage::Request(value) => serde_json::to_string(value)?,
-        JsonRpcMessage::Response(value) => serde_json::to_string(value)?,
-        JsonRpcMessage::Notification(value) => serde_json::to_string(value)?,
-    };
-    Ok(format!("{body}\n"))
-}
-
-pub fn deserialize_message(line: &str) -> Result<JsonRpcMessage, JsonRpcParseError> {
-    let value: Value = serde_json::from_str(line).map_err(JsonRpcParseError::parse_error)?;
-    let object = value.as_object().ok_or_else(|| {
-        JsonRpcParseError::invalid_request(
-            "Invalid Request: JSON-RPC payload must be an object",
-            None,
-        )
-    })?;
-    parse_message_object(object)
-}
-
-pub fn is_response(message: &JsonRpcMessage) -> bool {
-    matches!(message, JsonRpcMessage::Response(_))
-}
-
-pub fn is_request(message: &JsonRpcMessage) -> bool {
-    matches!(message, JsonRpcMessage::Request(_))
-}
-
-fn jsonrpc_version() -> String {
-    String::from(JSON_RPC_VERSION)
-}
-
-impl Serialize for JsonRpcResponse {
-    fn serialize<S>(&self, serializer: S) -> Result<S::Ok, S::Error>
-    where
-        S: Serializer,
-    {
-        let mut map = Map::new();
-        map.insert(String::from("jsonrpc"), Value::String(self.jsonrpc.clone()));
-        map.insert(
-            String::from("id"),
-            serde_json::to_value(&self.id).map_err(S::Error::custom)?,
-        );
-        if let Some(result) = &self.result {
-            map.insert(String::from("result"), result.clone());
-        } else if let Some(error) = &self.error {
-            map.insert(
-                String::from("error"),
-                serde_json::to_value(error).map_err(S::Error::custom)?,
-            );
-        }
-        map.serialize(serializer)
-    }
-}
-
-impl<'de> Deserialize<'de> for JsonRpcResponse {
-    fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>
-    where
-        D: Deserializer<'de>,
-    {
-        #[derive(Deserialize)]
-        struct RawJsonRpcResponse {
-            #[serde(default = "jsonrpc_version")]
-            jsonrpc: String,
-            id: JsonRpcId,
-            result: Option<Value>,
-            error: Option<JsonRpcError>,
-        }
-
-        let raw = RawJsonRpcResponse::deserialize(deserializer)?;
-        JsonRpcResponse::try_from_parts(raw.jsonrpc, raw.id, raw.result, raw.error)
-            .map_err(D::Error::custom)
-    }
-}
-
-fn parse_message_object(object: &Map<String, Value>) -> Result<JsonRpcMessage, JsonRpcParseError> {
-    validate_jsonrpc_version(object)?;
-
-    if object.contains_key("method") {
-        validate_request_response_fields_do_not_mix(object)?;
-        return parse_request_or_notification(object);
-    }
-
-    if object.contains_key("result") || object.contains_key("error") || object.contains_key("id") {
-        return parse_response(object);
-    }
-
-    Err(JsonRpcParseError::invalid_request(
-        "Invalid Request: missing method/result/error",
-        parsed_id(object.get("id")),
-    ))
-}
-
-fn validate_request_response_fields_do_not_mix(
-    object: &Map<String, Value>,
-) -> Result<(), JsonRpcParseError> {
-    if object.contains_key("result") || object.contains_key("error") {
-        return Err(JsonRpcParseError::invalid_request(
-            "Invalid Request: method cannot be combined with result or error",
-            parsed_id(object.get("id")),
-        ));
-    }
-
-    Ok(())
-}
-
-fn validate_jsonrpc_version(object: &Map<String, Value>) -> Result<(), JsonRpcParseError> {
-    let id = parsed_id(object.get("id"));
-    match object.get("jsonrpc").and_then(Value::as_str) {
-        Some(JSON_RPC_VERSION) => Ok(()),
-        Some(_) => Err(JsonRpcParseError::invalid_request(
-            "Invalid Request: jsonrpc must be \"2.0\"",
-            id,
-        )),
-        None => Err(JsonRpcParseError::invalid_request(
-            "Invalid Request: missing jsonrpc version",
-            id,
-        )),
-    }
-}
-
-fn parse_request_or_notification(
-    object: &Map<String, Value>,
-) -> Result<JsonRpcMessage, JsonRpcParseError> {
-    let method = object
-        .get("method")
-        .and_then(Value::as_str)
-        .ok_or_else(|| {
-            JsonRpcParseError::invalid_request(
-                "Invalid Request: method must be a string",
-                parsed_id(object.get("id")),
-            )
-        })?;
-    validate_params_shape(object)?;
-
-    let params = object.get("params").cloned();
-    if let Some(id) = parsed_required_id(object)? {
-        return Ok(JsonRpcMessage::Request(JsonRpcRequest {
-            jsonrpc: jsonrpc_version(),
-            id,
-            method: String::from(method),
-            params,
-        }));
-    }
-
-    Ok(JsonRpcMessage::Notification(JsonRpcNotification {
-        jsonrpc: jsonrpc_version(),
-        method: String::from(method),
-        params,
-    }))
-}
-
-fn parse_response(object: &Map<String, Value>) -> Result<JsonRpcMessage, JsonRpcParseError> {
-    let id = parsed_required_id(object)?.ok_or_else(|| {
-        JsonRpcParseError::invalid_request("Invalid Request: response is missing id", None)
-    })?;
-    let result = object.get("result").cloned();
-    let error = match object.get("error") {
-        Some(value) => Some(
-            serde_json::from_value::<JsonRpcError>(value.clone()).map_err(|error| {
-                JsonRpcParseError::invalid_request(
-                    format!("Invalid Request: malformed error payload: {error}"),
-                    Some(id.clone()),
-                )
-            })?,
-        ),
-        None => None,
-    };
-
-    let response = JsonRpcResponse::try_from_parts(jsonrpc_version(), id.clone(), result, error)
-        .map_err(|error| {
-            JsonRpcParseError::invalid_request(format!("Invalid Request: {error}"), Some(id))
-        })?;
-    Ok(JsonRpcMessage::Response(response))
-}
-
-fn validate_params_shape(object: &Map<String, Value>) -> Result<(), JsonRpcParseError> {
-    let Some(params) = object.get("params") else {
-        return Ok(());
-    };
-    if params.is_array() || params.is_object() {
-        return Ok(());
-    }
-
-    Err(JsonRpcParseError::invalid_request(
-        "Invalid Request: params must be an object or array",
-        parsed_id(object.get("id")),
-    ))
-}
-
-fn parsed_required_id(value: &Map<String, Value>) -> Result<Option<JsonRpcId>, JsonRpcParseError> {
-    match value.get("id") {
-        Some(value) => parsed_id(Some(value))
-            .ok_or_else(|| {
-                JsonRpcParseError::invalid_request(
-                    "Invalid Request: id must be a string, number, or null",
-                    None,
-                )
-            })
-            .map(Some),
-        None => Ok(None),
-    }
-}
-
-fn parsed_id(value: Option<&Value>) -> Option<JsonRpcId> {
-    match value {
-        Some(Value::String(value)) => Some(JsonRpcId::String(value.clone())),
-        Some(Value::Number(value)) => value.as_i64().map(JsonRpcId::Number),
-        Some(Value::Null) => Some(JsonRpcId::Null),
-        _ => None,
-    }
-}
diff --git a/crates/sidecar/src/lib.rs b/crates/sidecar/src/lib.rs
index b058197a5..9789e1426 100644
--- a/crates/sidecar/src/lib.rs
+++ b/crates/sidecar/src/lib.rs
@@ -1,65 +1,3 @@
-#![forbid(unsafe_code)]
+//! Compatibility shim for `agentos-native-sidecar`.
 
-//! Native sidecar scaffold that composes the kernel and execution crates.
-
-pub(crate) mod bootstrap;
-pub(crate) mod bridge;
-// Pure-Rust AES cipher primitives (RustCrypto) replacing the OpenSSL `Crypter`.
-pub(crate) mod crypto_cipher;
-pub(crate) mod execution;
-pub mod extension;
-pub(crate) mod filesystem;
-#[allow(dead_code)]
-pub(crate) mod json_rpc;
-pub mod limits;
-#[cfg(target_os = "macos")]
-pub(crate) mod macos_fs;
-pub(crate) mod metadata;
-pub mod package_projection;
-pub(crate) mod plugins;
-pub mod service;
-pub(crate) mod state;
-pub mod stdio;
-pub(crate) mod tools;
-pub(crate) mod vm;
-pub use secure_exec_sidecar_protocol::{generated_protocol, protocol, wire};
-
-pub use extension::{
-    Extension, ExtensionContext, ExtensionFuture, ExtensionInterruptRequest,
-    ExtensionInterruptResponse, ExtensionResponse,
-};
-pub use service::{DispatchResult, NativeSidecar, NativeSidecarConfig, SidecarError};
-pub use state::EventSinkTransport;
-pub use state::SidecarRequestTransport;
-
-use wire::{DEFAULT_MAX_FRAME_BYTES, PROTOCOL_NAME, PROTOCOL_VERSION};
-
-pub trait NativeSidecarBridge: secure_exec_bridge::HostBridge {}
-
-impl<T> NativeSidecarBridge for T where T: secure_exec_bridge::HostBridge {}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct SidecarScaffold {
-    pub package_name: &'static str,
-    pub binary_name: &'static str,
-    pub kernel_package: &'static str,
-    pub execution_package: &'static str,
-    pub protocol_name: &'static str,
-    pub protocol_version: u16,
-    pub max_frame_bytes: usize,
-}
-
-pub fn scaffold() -> SidecarScaffold {
-    let kernel = secure_exec_kernel::scaffold();
-    let execution = secure_exec_execution::scaffold();
-
-    SidecarScaffold {
-        package_name: env!("CARGO_PKG_NAME"),
-        binary_name: env!("CARGO_PKG_NAME"),
-        kernel_package: kernel.package_name,
-        execution_package: execution.package_name,
-        protocol_name: PROTOCOL_NAME,
-        protocol_version: PROTOCOL_VERSION,
-        max_frame_bytes: DEFAULT_MAX_FRAME_BYTES,
-    }
-}
+pub use agentos_native_sidecar::*;
diff --git a/crates/sidecar/src/limits.rs b/crates/sidecar/src/limits.rs
deleted file mode 100644
index 4de5b44e3..000000000
--- a/crates/sidecar/src/limits.rs
+++ /dev/null
@@ -1,27 +0,0 @@
-//! Native compatibility exports for shared VM-scoped runtime limits.
-
-pub use secure_exec_sidecar_core::limits::{
-    validate_vm_limits, AcpLimits, HttpLimits, JsRuntimeLimits, PluginLimits, PythonLimits,
-    ToolLimits, VmLimits, WasmLimits, DEFAULT_ACP_MAX_READ_LINE_BYTES,
-    DEFAULT_ACP_STDOUT_BUFFER_BYTE_LIMIT, DEFAULT_JS_CAPTURED_OUTPUT_LIMIT_BYTES,
-    DEFAULT_JS_EVENT_PAYLOAD_LIMIT_BYTES, DEFAULT_JS_STDIN_BUFFER_LIMIT_BYTES,
-    DEFAULT_MAX_FETCH_RESPONSE_BYTES, DEFAULT_PYTHON_EXECUTION_TIMEOUT_MS,
-    DEFAULT_PYTHON_MAX_OLD_SPACE_MB, DEFAULT_PYTHON_OUTPUT_BUFFER_MAX_BYTES,
-    DEFAULT_PYTHON_VFS_RPC_TIMEOUT_MS, DEFAULT_TOOL_TIMEOUT_MS, DEFAULT_V8_HEAP_LIMIT_MB,
-    DEFAULT_V8_IPC_MAX_FRAME_BYTES, DEFAULT_WASM_CAPTURED_OUTPUT_LIMIT_BYTES,
-    DEFAULT_WASM_MAX_MODULE_FILE_BYTES, DEFAULT_WASM_SYNC_READ_LIMIT_BYTES,
-    MAX_PERSISTED_MANIFEST_BYTES, MAX_PERSISTED_MANIFEST_FILE_BYTES, MAX_REGISTERED_TOOLKITS,
-    MAX_REGISTERED_TOOLS_PER_VM, MAX_TOOLS_PER_TOOLKIT, MAX_TOOL_EXAMPLES_PER_TOOL,
-    MAX_TOOL_EXAMPLE_INPUT_BYTES, MAX_TOOL_SCHEMA_BYTES, MAX_TOOL_TIMEOUT_MS,
-};
-use secure_exec_vm_config::VmLimitsConfig;
-
-use crate::state::SidecarError;
-
-pub fn vm_limits_from_config(
-    config: Option<&VmLimitsConfig>,
-    sidecar_max_frame_bytes: usize,
-) -> Result<VmLimits, SidecarError> {
-    secure_exec_sidecar_core::limits::vm_limits_from_config(config, sidecar_max_frame_bytes)
-        .map_err(|error| SidecarError::InvalidState(error.to_string()))
-}
diff --git a/crates/sidecar/src/macos_fs.rs b/crates/sidecar/src/macos_fs.rs
deleted file mode 100644
index 90591f450..000000000
--- a/crates/sidecar/src/macos_fs.rs
+++ /dev/null
@@ -1,106 +0,0 @@
-//! macOS host-mount confinement shims.
-//!
-//! The Linux host-mount filesystem confinement relies on three primitives that
-//! do not exist on macOS:
-//!   * `openat2(RESOLVE_BENEATH | RESOLVE_NO_MAGICLINKS)` — atomic resolve-beneath
-//!     path resolution (the escape boundary for host-backed mounts),
-//!   * `O_PATH` — a metadata-only anchor fd,
-//!   * `/proc/self/fd/N` — re-deriving a path/handle from an fd.
-//!
-//! This module provides the macOS equivalents:
-//!   * [`resolve_beneath`] resolves a guest-supplied relative path strictly
-//!     beneath the mount root using `cap-std`, whose audited userspace walk
-//!     (fd-relative, per-hop, symlink- and `..`-refusing) reproduces the
-//!     escape guarantee `openat2(RESOLVE_BENEATH)` gives atomically on Linux.
-//!   * [`fd_real_path`] uses `fcntl(F_GETPATH)` in place of
-//!     `readlink("/proc/self/fd/N")` to recover an fd's real host path.
-//!
-//! `O_PATH` is mapped to a read-only anchor (`O_RDONLY`) at the call sites, and
-//! `/proc/self/fd/N` to `/dev/fd/N` in `AnchoredFd::proc_path`.
-
-use cap_std::ambient_authority;
-use cap_std::fs::{Dir, OpenOptions, OpenOptionsExt};
-use nix::errno::Errno;
-use nix::fcntl::{fcntl, FcntlArg, OFlag};
-use nix::sys::stat::Mode;
-use std::io;
-use std::os::fd::{IntoRawFd, RawFd};
-use std::path::{Path, PathBuf};
-
-/// Resolve `relative` strictly beneath `root` and open it, returning an owned
-/// raw fd. macOS counterpart to
-/// `openat2(root, relative, RESOLVE_BENEATH | RESOLVE_NO_MAGICLINKS)`.
-///
-/// `cap-std` guarantees the resolution never escapes `root` (via `..`, an
-/// absolute symlink, or a symlink whose target leaves the tree), refusing such
-/// attempts with an errno-less `PermissionDenied` that [`io_to_errno`] maps to
-/// `EXDEV` — matching how callers already treat `openat2`'s escape error.
-///
-/// `O_PATH` anchors arrive here as `O_RDONLY` (macOS has no metadata-only open);
-/// the resulting fd is still only used as an anchor / re-opened via `/dev/fd/N`.
-pub(crate) fn resolve_beneath(
-    root: &Path,
-    relative: &Path,
-    flags: OFlag,
-    mode: Mode,
-) -> Result<RawFd, Errno> {
-    let dir = Dir::open_ambient_dir(root, ambient_authority()).map_err(io_to_errno)?;
-
-    // Directory handles: `open_dir` is cap-std's resolve-beneath `O_DIRECTORY`
-    // open and returns a `Dir` we can hand back as a raw fd.
-    if flags.contains(OFlag::O_DIRECTORY) {
-        let sub = dir.open_dir(relative).map_err(io_to_errno)?;
-        return Ok(sub.into_raw_fd());
-    }
-
-    let acc = flags & OFlag::O_ACCMODE;
-    let write = acc == OFlag::O_WRONLY || acc == OFlag::O_RDWR;
-
-    let mut opts = OpenOptions::new();
-    // A pure anchor (O_PATH mapped to O_RDONLY) and any read/RDWR open needs
-    // read; ensure we never request neither read nor write (cap-std rejects it).
-    opts.read(!write)
-        .write(write)
-        .create(flags.contains(OFlag::O_CREAT))
-        .create_new(flags.contains(OFlag::O_EXCL))
-        .truncate(flags.contains(OFlag::O_TRUNC));
-    if acc == OFlag::O_RDWR {
-        opts.read(true);
-    }
-    if flags.contains(OFlag::O_APPEND) {
-        opts.append(true);
-    }
-    opts.mode(u32::from(mode.bits()));
-    // Preserve a caller's request not to follow the final component. cap-std
-    // refuses *escaping* symlinks regardless; this additionally refuses a
-    // non-escaping final symlink, matching O_NOFOLLOW semantics.
-    if flags.contains(OFlag::O_NOFOLLOW) {
-        opts.custom_flags(OFlag::O_NOFOLLOW.bits());
-    }
-
-    let file = dir.open_with(relative, &opts).map_err(io_to_errno)?;
-    Ok(file.into_raw_fd())
-}
-
-/// Real filesystem path of an open fd via `fcntl(F_GETPATH)` — the macOS
-/// counterpart to `readlink("/proc/self/fd/N")`. Uses nix's safe wrapper so the
-/// sidecar crate's `#![forbid(unsafe_code)]` holds.
-pub(crate) fn fd_real_path(fd: RawFd) -> io::Result<PathBuf> {
-    let mut path = PathBuf::new();
-    fcntl(fd, FcntlArg::F_GETPATH(&mut path))
-        .map_err(|errno| io::Error::from_raw_os_error(errno as i32))?;
-    Ok(path)
-}
-
-/// Map a `cap-std` filesystem error to an `Errno`. A resolve-beneath escape is
-/// reported by cap-std as an errno-less `PermissionDenied`; translate that to
-/// `EXDEV` so callers reuse their existing "path escapes mount" handling.
-fn io_to_errno(error: io::Error) -> Errno {
-    if let Some(raw) = error.raw_os_error() {
-        Errno::from_raw(raw)
-    } else if error.kind() == io::ErrorKind::PermissionDenied {
-        Errno::EXDEV
-    } else {
-        Errno::EIO
-    }
-}
diff --git a/crates/sidecar/src/main.rs b/crates/sidecar/src/main.rs
deleted file mode 100644
index c95c73df3..000000000
--- a/crates/sidecar/src/main.rs
+++ /dev/null
@@ -1,18 +0,0 @@
-fn main() {
-    // Default to WARN so near-limit / backpressure warnings actually surface
-    // (they were swallowed at ERROR-only); operators can tune via SECURE_EXEC_LOG
-    // (e.g. `error` to quiet, `debug` for queue snapshots). Logs MUST go to stderr:
-    // stdout is the framed wire-protocol channel, so logging there would corrupt it.
-    let level = std::env::var("SECURE_EXEC_LOG")
-        .ok()
-        .and_then(|value| value.parse::<tracing::Level>().ok())
-        .unwrap_or(tracing::Level::WARN);
-    tracing_subscriber::fmt()
-        .with_writer(std::io::stderr)
-        .with_max_level(level)
-        .init();
-    if let Err(error) = secure_exec_sidecar::stdio::run() {
-        tracing::error!(?error, "secure-exec-sidecar startup failed");
-        std::process::exit(1);
-    }
-}
diff --git a/crates/sidecar/src/metadata/mod.rs b/crates/sidecar/src/metadata/mod.rs
deleted file mode 100644
index 51548a90c..000000000
--- a/crates/sidecar/src/metadata/mod.rs
+++ /dev/null
@@ -1,33 +0,0 @@
-use crate::protocol::{ExtEnvelope, OwnershipScope, SidecarRequestPayload, SidecarResponsePayload};
-use crate::state::SharedSidecarRequestClient;
-use crate::SidecarError;
-use secure_exec_vfs::callback_store::CallbackMetadataClient;
-use std::time::Duration;
-
-pub(crate) use secure_exec_vfs::CallbackMetadataStore;
-
-impl CallbackMetadataClient for SharedSidecarRequestClient {
-    type Ownership = OwnershipScope;
-    type Error = SidecarError;
-
-    fn invoke_metadata_callback(
-        &self,
-        ownership: Self::Ownership,
-        namespace: &str,
-        payload: Vec<u8>,
-        timeout: Duration,
-    ) -> Result<(String, Vec<u8>), Self::Error> {
-        let payload = SidecarRequestPayload::Ext(ExtEnvelope {
-            namespace: namespace.to_owned(),
-            payload,
-        });
-        match self.invoke(ownership, payload, timeout)? {
-            SidecarResponsePayload::ExtResult(envelope) => {
-                Ok((envelope.namespace, envelope.payload))
-            }
-            other => Err(SidecarError::InvalidState(format!(
-                "unexpected vfs metadata callback response payload: {other:?}"
-            ))),
-        }
-    }
-}
diff --git a/crates/sidecar/src/package_projection.rs b/crates/sidecar/src/package_projection.rs
deleted file mode 100644
index bd4dababe..000000000
--- a/crates/sidecar/src/package_projection.rs
+++ /dev/null
@@ -1,613 +0,0 @@
-//! agentOS package projection.
-//!
-//! Packages are mounted directly from their uncompressed `package.tar` files.
-//! The tar already contains every member's bytes at known offsets, so the VFS
-//! indexes headers once and returns mmap-backed byte ranges instead of
-//! extracting a duplicate host tree. The projection also serves `bin/*`,
-//! `current`, manpage aliases, and `provides.files` as virtual mounts; it never
-//! writes a physical symlink farm.
-//!
-//! The projection is deliberately granular. Each package version is a tar leaf
-//! at `/opt/agentos/pkgs/<pkg>/<version>`, and each managed command/current
-//! alias is its own root-symlink leaf. The containing dirs stay writable overlay
-//! dirs so user-installed commands can coexist beside managed package entries.
-
-use std::collections::{HashMap, HashSet};
-use std::fs;
-use std::path::{Path, PathBuf};
-
-use crate::state::SidecarError;
-use serde::Deserialize;
-use vfs::posix::{normalize_path, TarFileSystem, VirtualFileSystem};
-
-/// Root of the agentOS package tree inside the VM.
-pub const OPT_AGENTOS_ROOT: &str = "/opt/agentos";
-/// The symlink farm on `$PATH`.
-pub const OPT_AGENTOS_BIN: &str = "/opt/agentos/bin";
-const AGENT_SNAPSHOT_BUNDLE: &str = "dist/sdk-snapshot.js";
-pub const DEFAULT_PACKAGE_TAR_NAME: &str = "package.tar";
-pub const MAX_AGENTOS_PACKAGE_MOUNTS: usize = 4096;
-
-/// A package to project, derived from `agentos-package.json` in a package dir or tar.
-#[derive(Debug, Clone)]
-pub struct PackageDescriptor {
-    pub name: String,
-    pub version: String,
-    pub dir: String,
-    pub tar_path: Option<String>,
-    pub tar_digest: Option<String>,
-    /// `bin/` command that speaks ACP, if this is an agent package.
-    pub acp_entrypoint: Option<String>,
-    pub snapshot: bool,
-    pub provides: Option<PackageProvidesDescriptor>,
-    pub commands: Vec<PackageCommandTarget>,
-    pub man_pages: Vec<PackageManPageTarget>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PackageCommandTarget {
-    pub command: String,
-    pub entry: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PackageManPageTarget {
-    pub section: String,
-    pub page: String,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum PackageLeafMount {
-    Tar {
-        guest_path: String,
-        tar_path: String,
-        digest: String,
-        root: String,
-    },
-    SingleSymlink {
-        guest_path: String,
-        target: String,
-    },
-}
-
-#[derive(Debug, Clone, Deserialize)]
-pub struct PackageProvidesDescriptor {
-    #[serde(default)]
-    pub env: HashMap<String, String>,
-    #[serde(default)]
-    pub files: Vec<PackageProvidesFileDescriptor>,
-}
-
-#[derive(Debug, Clone, Deserialize)]
-pub struct PackageProvidesFileDescriptor {
-    pub source: String,
-    pub target: String,
-}
-
-#[derive(Debug, Deserialize)]
-struct AgentosPackageManifest {
-    name: String,
-    version: String,
-    #[serde(default)]
-    agent: Option<PackageAgentDescriptor>,
-    #[serde(default)]
-    provides: Option<PackageProvidesDescriptor>,
-}
-
-#[derive(Debug, Deserialize)]
-struct PackageAgentDescriptor {
-    #[serde(rename = "acpEntrypoint")]
-    acp_entrypoint: String,
-    #[serde(default)]
-    snapshot: bool,
-}
-
-impl PackageDescriptor {
-    fn from_parts(
-        dir: String,
-        tar_path: Option<String>,
-        tar_digest: Option<String>,
-        manifest: AgentosPackageManifest,
-        commands: Vec<PackageCommandTarget>,
-        man_pages: Vec<PackageManPageTarget>,
-    ) -> Result<Self, SidecarError> {
-        if manifest.name.is_empty() {
-            return Err(SidecarError::InvalidState(format!(
-                "agentos-package.json in {dir} is missing a valid \"name\""
-            )));
-        }
-        if manifest.version.is_empty() {
-            return Err(SidecarError::InvalidState(format!(
-                "agentos-package.json in {dir} is missing a valid \"version\""
-            )));
-        }
-        let (acp_entrypoint, snapshot) = match manifest.agent {
-            Some(agent) => (Some(agent.acp_entrypoint), agent.snapshot),
-            None => (None, false),
-        };
-        if acp_entrypoint
-            .as_ref()
-            .is_some_and(|entry| entry.is_empty())
-        {
-            return Err(SidecarError::InvalidState(format!(
-                "agentos-package.json in {dir} has an empty agent.acpEntrypoint"
-            )));
-        }
-        Ok(Self {
-            name: manifest.name,
-            version: manifest.version,
-            dir,
-            tar_path,
-            tar_digest,
-            acp_entrypoint,
-            snapshot,
-            provides: manifest.provides,
-            commands,
-            man_pages,
-        })
-    }
-
-    pub fn tar_ref(&self) -> Result<(&str, &str), SidecarError> {
-        let tar_path = self.tar_path.as_deref().ok_or_else(|| {
-            SidecarError::InvalidState(format!(
-                "package `{}` must include {DEFAULT_PACKAGE_TAR_NAME}; directory projection is no longer supported",
-                self.name
-            ))
-        })?;
-        let digest = self.tar_digest.as_deref().ok_or_else(|| {
-            SidecarError::InvalidState(format!("package `{}` is missing tar digest", self.name))
-        })?;
-        Ok((tar_path, digest))
-    }
-}
-
-fn io_err(context: &str, error: std::io::Error) -> SidecarError {
-    SidecarError::Io(format!("{context}: {error}"))
-}
-
-fn read_agentos_package_manifest(dir: &str) -> Result<AgentosPackageManifest, SidecarError> {
-    let path = Path::new(dir).join("agentos-package.json");
-    if !path.exists() {
-        return Err(SidecarError::InvalidState(format!(
-            "missing required agentos-package.json in package dir {dir}"
-        )));
-    }
-    let text = fs::read_to_string(&path).map_err(|e| io_err("read agentos-package.json", e))?;
-    serde_json::from_str(&text).map_err(|e| {
-        SidecarError::InvalidState(format!("invalid agentos-package.json in {dir}: {e}"))
-    })
-}
-
-/// Read the sidecar-owned package manifest from `<dir>/agentos-package.json`.
-pub fn read_package_manifest(dir: &str) -> Result<PackageDescriptor, SidecarError> {
-    let manifest = read_agentos_package_manifest(dir)?;
-    let tar_path = package_tar_for_dir(dir);
-    let tar_digest = tar_path
-        .as_ref()
-        .map(|path| digest_file(path))
-        .transpose()?;
-    PackageDescriptor::from_parts(
-        dir.to_owned(),
-        tar_path.map(|path| path.to_string_lossy().into_owned()),
-        tar_digest,
-        manifest,
-        command_targets_from_dir(dir)?,
-        man_pages_from_dir(dir)?,
-    )
-}
-
-/// Read the first snapshot-enabled agent package's bundled SDK snapshot source.
-pub fn read_agent_snapshot_bundle(
-    package: &PackageDescriptor,
-) -> Result<Option<String>, SidecarError> {
-    if !package.snapshot {
-        return Ok(None);
-    }
-    let path = Path::new(&package.dir).join(AGENT_SNAPSHOT_BUNDLE);
-    if !path.exists() {
-        return Ok(None);
-    }
-    fs::read_to_string(&path)
-        .map(Some)
-        .map_err(|e| io_err("read agent snapshot bundle", e))
-}
-
-/// Read the package's `version` from `agentos-package.json`.
-pub fn read_package_version(dir: &str) -> Result<String, SidecarError> {
-    Ok(read_agentos_package_manifest(dir)?.version)
-}
-
-pub fn read_package_name(dir: &str) -> Result<String, SidecarError> {
-    Ok(read_agentos_package_manifest(dir)?.name)
-}
-
-fn package_tar_for_dir(dir: &str) -> Option<PathBuf> {
-    let tar = Path::new(dir).join(DEFAULT_PACKAGE_TAR_NAME);
-    tar.is_file().then_some(tar)
-}
-
-/// Map each command name to its entry path relative to the package root.
-fn command_targets_from_dir(dir: &str) -> Result<Vec<PackageCommandTarget>, SidecarError> {
-    let pkg_json = Path::new(dir).join("package.json");
-    if pkg_json.exists() {
-        if let Ok(text) = fs::read_to_string(&pkg_json) {
-            if let Ok(value) = serde_json::from_str::<serde_json::Value>(&text) {
-                if let Some(targets) = command_targets_from_package_json(&value) {
-                    return Ok(targets);
-                }
-            }
-        }
-    }
-
-    let bin = Path::new(dir).join("bin");
-    if !bin.is_dir() {
-        return Ok(Vec::new());
-    }
-    let mut targets = Vec::new();
-    for entry in fs::read_dir(&bin).map_err(|e| io_err("read bin/", e))? {
-        let entry = entry.map_err(|e| io_err("read bin/ entry", e))?;
-        if let Some(name) = entry.file_name().to_str() {
-            if is_projectable_command_name(name) {
-                targets.push(PackageCommandTarget {
-                    command: name.to_owned(),
-                    entry: format!("bin/{name}"),
-                });
-            }
-        }
-    }
-    targets.sort_by(|a, b| a.command.cmp(&b.command));
-    Ok(targets)
-}
-
-fn man_pages_from_dir(dir: &str) -> Result<Vec<PackageManPageTarget>, SidecarError> {
-    let man = Path::new(dir).join("share").join("man");
-    if !man.is_dir() {
-        return Ok(Vec::new());
-    }
-    let mut pages = Vec::new();
-    for section in fs::read_dir(&man).map_err(|e| io_err("read man/", e))? {
-        let section = section.map_err(|e| io_err("man section", e))?;
-        if !section.path().is_dir() {
-            continue;
-        }
-        let Some(section_name) = section.file_name().to_str().map(str::to_owned) else {
-            continue;
-        };
-        for page in fs::read_dir(section.path()).map_err(|e| io_err("man pages", e))? {
-            let page = page.map_err(|e| io_err("man page", e))?;
-            if let Some(page_name) = page.file_name().to_str() {
-                pages.push(PackageManPageTarget {
-                    section: section_name.clone(),
-                    page: page_name.to_owned(),
-                });
-            }
-        }
-    }
-    pages.sort_by(|a, b| (&a.section, &a.page).cmp(&(&b.section, &b.page)));
-    Ok(pages)
-}
-
-fn command_targets_from_package_json(
-    value: &serde_json::Value,
-) -> Option<Vec<PackageCommandTarget>> {
-    match value.get("bin") {
-        Some(serde_json::Value::String(path)) => {
-            let name = value.get("name").and_then(|v| v.as_str())?;
-            let unscoped = name.rsplit('/').next().unwrap_or(name).to_owned();
-            Some(
-                is_projectable_command_name(&unscoped)
-                    .then(|| PackageCommandTarget {
-                        command: unscoped,
-                        entry: normalize_rel(path),
-                    })
-                    .into_iter()
-                    .collect(),
-            )
-        }
-        Some(serde_json::Value::Object(map)) => {
-            let mut targets: Vec<PackageCommandTarget> = map
-                .iter()
-                .filter_map(|(name, path)| {
-                    is_projectable_command_name(name)
-                        .then(|| path.as_str())
-                        .flatten()
-                        .map(|path| PackageCommandTarget {
-                            command: name.clone(),
-                            entry: normalize_rel(path),
-                        })
-                })
-                .collect();
-            targets.sort_by(|a, b| a.command.cmp(&b.command));
-            Some(targets)
-        }
-        _ => None,
-    }
-}
-
-fn is_projectable_command_name(name: &str) -> bool {
-    !name.starts_with('_') && !name.starts_with('.')
-}
-
-/// Strip a leading `./` so the resulting path is a clean in-package relative path.
-fn normalize_rel(path: &str) -> String {
-    path.strip_prefix("./").unwrap_or(path).to_owned()
-}
-
-/// Derive command names for the package (sorted).
-pub fn derive_commands(dir: &str) -> Result<Vec<String>, SidecarError> {
-    Ok(command_targets_from_dir(dir)?
-        .into_iter()
-        .map(|target| target.command)
-        .collect())
-}
-
-pub fn read_package_manifest_from_ref(
-    dir: Option<&str>,
-    tar: Option<&str>,
-) -> Result<PackageDescriptor, SidecarError> {
-    if let Some(tar) = tar.filter(|value| !value.is_empty()) {
-        return read_package_manifest_from_tar(tar);
-    }
-    if let Some(dir) = dir.filter(|value| !value.is_empty()) {
-        let path = Path::new(dir);
-        if path.is_file() {
-            return read_package_manifest_from_tar(dir);
-        }
-        if let Some(package_tar) = package_tar_for_dir(dir) {
-            return read_package_manifest_from_tar_with_dir(&package_tar, dir.to_owned());
-        }
-        return read_package_manifest(dir);
-    }
-    Err(SidecarError::InvalidState(String::from(
-        "package descriptor must include a package tar or dir",
-    )))
-}
-
-fn read_package_manifest_from_tar(tar: &str) -> Result<PackageDescriptor, SidecarError> {
-    read_package_manifest_from_tar_with_dir(Path::new(tar), tar.to_owned())
-}
-
-fn read_package_manifest_from_tar_with_dir(
-    tar: &Path,
-    dir: String,
-) -> Result<PackageDescriptor, SidecarError> {
-    let digest = digest_file(tar)?;
-    let mut fs = TarFileSystem::open(tar, digest.clone())
-        .map_err(|error| SidecarError::InvalidState(error.to_string()))?;
-    let manifest_bytes = fs
-        .read_file("/agentos-package.json")
-        .map_err(|error| SidecarError::InvalidState(error.to_string()))?;
-    let manifest =
-        serde_json::from_slice::<AgentosPackageManifest>(&manifest_bytes).map_err(|error| {
-            SidecarError::InvalidState(format!(
-                "invalid agentos-package.json in {}: {error}",
-                tar.display()
-            ))
-        })?;
-    let commands = command_targets_from_tar(&mut fs)?;
-    let man_pages = man_pages_from_tar(&mut fs)?;
-    PackageDescriptor::from_parts(
-        dir,
-        Some(tar.to_string_lossy().into_owned()),
-        Some(digest),
-        manifest,
-        commands,
-        man_pages,
-    )
-}
-
-fn command_targets_from_tar(
-    fs: &mut TarFileSystem,
-) -> Result<Vec<PackageCommandTarget>, SidecarError> {
-    match fs.read_file("/package.json") {
-        Ok(bytes) => {
-            if let Ok(value) = serde_json::from_slice::<serde_json::Value>(&bytes) {
-                if let Some(targets) = command_targets_from_package_json(&value) {
-                    return Ok(targets);
-                }
-            }
-        }
-        Err(error) if error.code() == "ENOENT" => {}
-        Err(error) => return Err(SidecarError::InvalidState(error.to_string())),
-    }
-
-    let entries = match fs.read_dir("/bin") {
-        Ok(entries) => entries,
-        Err(error) if error.code() == "ENOENT" => return Ok(Vec::new()),
-        Err(error) => return Err(SidecarError::InvalidState(error.to_string())),
-    };
-    let mut targets = entries
-        .into_iter()
-        .filter_map(|command| {
-            is_projectable_command_name(&command).then(|| PackageCommandTarget {
-                entry: format!("bin/{command}"),
-                command,
-            })
-        })
-        .collect::<Vec<_>>();
-    targets.sort_by(|a, b| a.command.cmp(&b.command));
-    Ok(targets)
-}
-
-fn man_pages_from_tar(fs: &mut TarFileSystem) -> Result<Vec<PackageManPageTarget>, SidecarError> {
-    let sections = match fs.read_dir("/share/man") {
-        Ok(entries) => entries,
-        Err(error) if error.code() == "ENOENT" => return Ok(Vec::new()),
-        Err(error) => return Err(SidecarError::InvalidState(error.to_string())),
-    };
-    let mut pages = Vec::new();
-    for section in sections {
-        let section_path = format!("/share/man/{section}");
-        let Ok(stat) = fs.stat(&section_path) else {
-            continue;
-        };
-        if !stat.is_directory {
-            continue;
-        }
-        for page in fs
-            .read_dir(&section_path)
-            .map_err(|error| SidecarError::InvalidState(error.to_string()))?
-        {
-            pages.push(PackageManPageTarget {
-                section: section.clone(),
-                page,
-            });
-        }
-    }
-    pages.sort_by(|a, b| (&a.section, &a.page).cmp(&(&b.section, &b.page)));
-    Ok(pages)
-}
-
-pub fn build_package_leaf_mounts(
-    packages: &[PackageDescriptor],
-    mount_at: &str,
-) -> Result<Vec<PackageLeafMount>, SidecarError> {
-    let mount_at = normalize_mount_root(mount_at);
-    let mut mounts = Vec::new();
-    let mut command_paths = HashSet::new();
-
-    for package in packages {
-        let commands = package
-            .commands
-            .iter()
-            .map(|target| target.command.clone())
-            .collect::<Vec<_>>();
-        if let Some(acp) = &package.acp_entrypoint {
-            if !commands.contains(acp) {
-                return Err(SidecarError::InvalidState(format!(
-                    "agent acpEntrypoint {acp:?} is not one of {}'s commands",
-                    package.name
-                )));
-            }
-        }
-
-        let (tar_path, digest) = package.tar_ref()?;
-        let package_root = package_guest_root(&mount_at, &package.name);
-        let version_path = normalize_path(&format!("{package_root}/{}", package.version));
-        push_mount(
-            &mut mounts,
-            PackageLeafMount::Tar {
-                guest_path: version_path,
-                tar_path: tar_path.to_owned(),
-                digest: digest.to_owned(),
-                root: String::from("/"),
-            },
-        )?;
-        push_mount(
-            &mut mounts,
-            PackageLeafMount::SingleSymlink {
-                guest_path: normalize_path(&format!("{package_root}/current")),
-                target: package.version.clone(),
-            },
-        )?;
-
-        for target in &package.commands {
-            let guest_path = normalize_path(&format!("{mount_at}/bin/{}", target.command));
-            if !command_paths.insert(guest_path.clone()) {
-                return Err(SidecarError::InvalidState(format!(
-                    "command {:?} is already provided by another package",
-                    target.command
-                )));
-            }
-            push_mount(
-                &mut mounts,
-                PackageLeafMount::SingleSymlink {
-                    guest_path,
-                    target: format!("../pkgs/{}/current/{}", package.name, target.entry),
-                },
-            )?;
-        }
-
-        for page in &package.man_pages {
-            push_mount(
-                &mut mounts,
-                PackageLeafMount::SingleSymlink {
-                    guest_path: normalize_path(&format!(
-                        "{mount_at}/share/man/{}/{}",
-                        page.section, page.page
-                    )),
-                    target: format!(
-                        "../../../pkgs/{}/current/share/man/{}/{}",
-                        package.name, page.section, page.page
-                    ),
-                },
-            )?;
-        }
-    }
-
-    Ok(mounts)
-}
-
-pub fn package_provides_file_mount(
-    package: &PackageDescriptor,
-    source: &str,
-    target: &str,
-) -> Result<Option<PackageLeafMount>, SidecarError> {
-    let (tar_path, digest) = package.tar_ref()?;
-    let root = normalize_package_source(source);
-    let mut fs = TarFileSystem::open_at(tar_path, digest, &root)
-        .map_err(|error| SidecarError::InvalidState(error.to_string()))?;
-    match fs.stat("/") {
-        Ok(stat) if stat.is_directory => Ok(Some(PackageLeafMount::Tar {
-            guest_path: normalize_path(target),
-            tar_path: tar_path.to_owned(),
-            digest: digest.to_owned(),
-            root,
-        })),
-        Ok(_) => Ok(None),
-        Err(error) if error.code() == "ENOENT" => Err(SidecarError::InvalidState(format!(
-            "package provides file source is missing: package `{}` source `{source}` target `{target}`",
-            package.name
-        ))),
-        Err(error) => Err(SidecarError::InvalidState(error.to_string())),
-    }
-}
-
-fn push_mount(
-    mounts: &mut Vec<PackageLeafMount>,
-    mount: PackageLeafMount,
-) -> Result<(), SidecarError> {
-    let observed = mounts.len() + 1;
-    if observed > MAX_AGENTOS_PACKAGE_MOUNTS {
-        return Err(SidecarError::InvalidState(format!(
-            "agentos package mount count exceeded: {observed} mounts > {MAX_AGENTOS_PACKAGE_MOUNTS} mounts (raise via limits.agentosPackages.maxMounts)"
-        )));
-    }
-    if observed * 100 / MAX_AGENTOS_PACKAGE_MOUNTS >= 80 {
-        tracing::warn!(
-            limit = "agentos_package_mounts",
-            observed,
-            capacity = MAX_AGENTOS_PACKAGE_MOUNTS,
-            fill_percent = observed * 100 / MAX_AGENTOS_PACKAGE_MOUNTS,
-            wired = "limits.agentosPackages.maxMounts",
-            "agentos package mount count approaching configured limit"
-        );
-    }
-    mounts.push(mount);
-    Ok(())
-}
-
-fn normalize_mount_root(mount_at: &str) -> String {
-    if mount_at.is_empty() {
-        String::from(OPT_AGENTOS_ROOT)
-    } else {
-        normalize_path(mount_at)
-    }
-}
-
-fn package_guest_root(mount_at: &str, name: &str) -> String {
-    normalize_path(&format!("{mount_at}/pkgs/{name}"))
-}
-
-fn normalize_package_source(source: &str) -> String {
-    if source.trim().is_empty() {
-        String::from("/")
-    } else {
-        normalize_path(source)
-    }
-}
-
-fn digest_file(path: impl AsRef<Path>) -> Result<String, SidecarError> {
-    let bytes = fs::read(path.as_ref()).map_err(|error| io_err("read package tar", error))?;
-    Ok(blake3::hash(&bytes).to_hex().to_string())
-}
diff --git a/crates/sidecar/src/plugins/agentos_packages.rs b/crates/sidecar/src/plugins/agentos_packages.rs
deleted file mode 100644
index 13f3dca22..000000000
--- a/crates/sidecar/src/plugins/agentos_packages.rs
+++ /dev/null
@@ -1,95 +0,0 @@
-//! Guest-native `/opt/agentos` package projection.
-//!
-//! Package files are mounted directly from the uncompressed package tar, not
-//! extracted into a host staging tree. The tar already contains every member's
-//! bytes at known offsets, so the VFS scans the headers once, then serves reads
-//! by mmap-backed byte range. This avoids the old full unpack, hardlink copy,
-//! physical symlink farm, temp cleanup, and duplicate host-disk state.
-//!
-//! The crucial difference from a plain `host_dir` mount is the PLUGIN ID: module
-//! resolution and path translation only treat mounts classified
-//! `host_dir`/`module_access` as host-backed (`build_module_reader` /
-//! `runtime_guest_path_mappings` in `execution.rs`). Because this mount is
-//! `agentos_packages`, the JS runtime resolves `/opt/agentos` modules through the
-//! kernel VFS — no host↔guest path translation (the `/unknown/<cmd>` failure
-//! mode).
-//!
-//! Projection uses granular leaf mounts: one tar mount for
-//! `/opt/agentos/pkgs/<pkg>/<version>`, one synthetic root symlink for
-//! `pkgs/<pkg>/current`, and one synthetic root symlink per managed command or
-//! manpage. The parent directories remain writable overlay directories so
-//! guest-installed commands can coexist with managed package entries.
-
-use secure_exec_kernel::mount_plugin::{
-    FileSystemPluginFactory, OpenFileSystemPluginRequest, PluginError,
-};
-use secure_exec_kernel::mount_table::{
-    MountedFileSystem, MountedVirtualFileSystem, ReadOnlyFileSystem,
-};
-use serde::Deserialize;
-
-#[derive(Debug, Deserialize)]
-#[serde(tag = "kind", rename_all = "camelCase")]
-enum AgentosPackagesMountConfig {
-    Tar {
-        #[serde(rename = "tarPath")]
-        tar_path: String,
-        digest: String,
-        #[serde(default)]
-        root: Option<String>,
-        #[serde(rename = "readOnly")]
-        read_only: Option<bool>,
-    },
-    SingleSymlink {
-        target: String,
-        #[serde(rename = "readOnly")]
-        read_only: Option<bool>,
-    },
-}
-
-#[derive(Debug)]
-pub(crate) struct AgentosPackagesMountPlugin;
-
-impl<Context> FileSystemPluginFactory<Context> for AgentosPackagesMountPlugin {
-    fn plugin_id(&self) -> &'static str {
-        "agentos_packages"
-    }
-
-    fn open(
-        &self,
-        request: OpenFileSystemPluginRequest<'_, Context>,
-    ) -> Result<Box<dyn MountedFileSystem>, PluginError> {
-        let config: AgentosPackagesMountConfig = serde_json::from_value(request.config.clone())
-            .map_err(|error| PluginError::invalid_input(error.to_string()))?;
-        match config {
-            AgentosPackagesMountConfig::Tar {
-                tar_path,
-                digest,
-                root,
-                read_only,
-            } => {
-                let filesystem = vfs::posix::TarFileSystem::open_at(
-                    &tar_path,
-                    digest,
-                    root.as_deref().unwrap_or("/"),
-                )
-                .map_err(|error| PluginError::invalid_input(error.to_string()))?;
-                let mounted = MountedVirtualFileSystem::new(filesystem);
-                if read_only.unwrap_or(true) {
-                    Ok(Box::new(ReadOnlyFileSystem::new(mounted)))
-                } else {
-                    Ok(Box::new(mounted))
-                }
-            }
-            AgentosPackagesMountConfig::SingleSymlink { target, read_only } => {
-                let mounted =
-                    MountedVirtualFileSystem::new(vfs::posix::SingleSymlinkFileSystem::new(target));
-                if read_only.unwrap_or(true) {
-                    Ok(Box::new(ReadOnlyFileSystem::new(mounted)))
-                } else {
-                    Ok(Box::new(mounted))
-                }
-            }
-        }
-    }
-}
diff --git a/crates/sidecar/src/plugins/chunked_local.rs b/crates/sidecar/src/plugins/chunked_local.rs
deleted file mode 100644
index 2e37b7050..000000000
--- a/crates/sidecar/src/plugins/chunked_local.rs
+++ /dev/null
@@ -1,91 +0,0 @@
-use secure_exec_kernel::mount_plugin::{
-    FileSystemPluginFactory, OpenFileSystemPluginRequest, PluginError,
-};
-use secure_exec_kernel::mount_table::MountedFileSystem;
-use secure_exec_vfs::{FileBlockStore, SqliteMetadataStore};
-use serde::Deserialize;
-use vfs::adapter::MountedEngineFileSystem;
-use vfs::engine::engines::{ChunkedFs, ChunkedFsOptions};
-use vfs::engine::CachedMetadataStore;
-
-const DEFAULT_METADATA_CACHE_ENTRIES: usize = 4096;
-
-#[derive(Debug, Clone, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct ChunkedLocalMountConfig {
-    metadata_path: String,
-    block_root: String,
-    chunk_size: Option<u32>,
-    inline_threshold: Option<usize>,
-    uid: Option<u32>,
-    gid: Option<u32>,
-    file_mode: Option<u32>,
-    dir_mode: Option<u32>,
-    metadata_cache_entries: Option<usize>,
-}
-
-#[derive(Debug)]
-pub(crate) struct ChunkedLocalMountPlugin;
-
-impl<Context> FileSystemPluginFactory<Context> for ChunkedLocalMountPlugin {
-    fn plugin_id(&self) -> &'static str {
-        "chunked_local"
-    }
-
-    fn open(
-        &self,
-        request: OpenFileSystemPluginRequest<'_, Context>,
-    ) -> Result<Box<dyn MountedFileSystem>, PluginError> {
-        let config: ChunkedLocalMountConfig = serde_json::from_value(request.config.clone())
-            .map_err(|error| PluginError::invalid_input(error.to_string()))?;
-        if config.metadata_path.trim().is_empty() {
-            return Err(PluginError::invalid_input(
-                "chunked_local mount requires metadataPath",
-            ));
-        }
-        if config.block_root.trim().is_empty() {
-            return Err(PluginError::invalid_input(
-                "chunked_local mount requires blockRoot",
-            ));
-        }
-
-        let chunk_size = config.chunk_size.unwrap_or(vfs::engine::DEFAULT_CHUNK_SIZE);
-        if chunk_size == 0 {
-            return Err(PluginError::invalid_input(
-                "chunked_local mount requires chunkSize to be greater than zero",
-            ));
-        }
-        let inline_threshold = config
-            .inline_threshold
-            .unwrap_or(vfs::engine::DEFAULT_INLINE_THRESHOLD);
-        if inline_threshold > chunk_size as usize {
-            return Err(PluginError::invalid_input(
-                "chunked_local mount requires inlineThreshold to be less than or equal to chunkSize",
-            ));
-        }
-
-        let metadata = SqliteMetadataStore::open(config.metadata_path)
-            .map_err(|error| PluginError::new(error.code(), error.message().to_owned()))?;
-        let metadata = CachedMetadataStore::new(
-            metadata,
-            config
-                .metadata_cache_entries
-                .unwrap_or(DEFAULT_METADATA_CACHE_ENTRIES),
-        );
-        let blocks = FileBlockStore::new(config.block_root)
-            .map_err(|error| PluginError::new(error.code(), error.message().to_owned()))?;
-        let fs = ChunkedFs::with_options(
-            metadata,
-            blocks,
-            ChunkedFsOptions {
-                inline_threshold,
-                chunk_size,
-                uid: config.uid.unwrap_or(0),
-                gid: config.gid.unwrap_or(0),
-                file_mode: config.file_mode.unwrap_or(0o644),
-                dir_mode: config.dir_mode.unwrap_or(0o755),
-            },
-        );
-        Ok(Box::new(MountedEngineFileSystem::new(fs)?))
-    }
-}
diff --git a/crates/sidecar/src/plugins/chunked_s3.rs b/crates/sidecar/src/plugins/chunked_s3.rs
deleted file mode 100644
index 04f835c48..000000000
--- a/crates/sidecar/src/plugins/chunked_s3.rs
+++ /dev/null
@@ -1,175 +0,0 @@
-use crate::bridge::MountPluginContext;
-use crate::metadata::CallbackMetadataStore;
-use crate::plugins::s3_common::{
-    create_s3_client, normalize_prefix, S3MountCredentials, DEFAULT_REGION,
-};
-use crate::protocol::OwnershipScope;
-
-use secure_exec_kernel::mount_plugin::{
-    FileSystemPluginFactory, OpenFileSystemPluginRequest, PluginError,
-};
-use secure_exec_kernel::mount_table::MountedFileSystem;
-use secure_exec_vfs::{S3BlockStore, S3BlockStoreOptions, SqliteMetadataStore};
-use serde::Deserialize;
-use vfs::adapter::MountedEngineFileSystem;
-use vfs::engine::engines::{ChunkedFs, ChunkedFsOptions};
-use vfs::engine::CachedMetadataStore;
-
-const DEFAULT_METADATA_CACHE_ENTRIES: usize = 4096;
-
-#[derive(Debug, Clone, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct ChunkedS3MountConfig {
-    bucket: String,
-    prefix: Option<String>,
-    region: Option<String>,
-    credentials: Option<S3MountCredentials>,
-    endpoint: Option<String>,
-    metadata_path: Option<String>,
-    metadata_backend: Option<String>,
-    mount_id: Option<String>,
-    chunk_size: Option<u32>,
-    inline_threshold: Option<usize>,
-    uid: Option<u32>,
-    gid: Option<u32>,
-    file_mode: Option<u32>,
-    dir_mode: Option<u32>,
-    metadata_cache_entries: Option<usize>,
-}
-
-#[derive(Debug)]
-pub(crate) struct ChunkedS3MountPlugin;
-
-pub(crate) trait ChunkedS3CallbackContext {
-    fn chunked_s3_callback_context(
-        &self,
-    ) -> Option<(crate::state::SharedSidecarRequestClient, OwnershipScope)>;
-}
-
-impl ChunkedS3CallbackContext for () {
-    fn chunked_s3_callback_context(
-        &self,
-    ) -> Option<(crate::state::SharedSidecarRequestClient, OwnershipScope)> {
-        None
-    }
-}
-
-impl<B> ChunkedS3CallbackContext for MountPluginContext<B> {
-    fn chunked_s3_callback_context(
-        &self,
-    ) -> Option<(crate::state::SharedSidecarRequestClient, OwnershipScope)> {
-        Some((
-            self.sidecar_requests.clone(),
-            OwnershipScope::vm(
-                self.connection_id.clone(),
-                self.session_id.clone(),
-                self.vm_id.clone(),
-            ),
-        ))
-    }
-}
-
-impl<Context> FileSystemPluginFactory<Context> for ChunkedS3MountPlugin
-where
-    Context: ChunkedS3CallbackContext,
-{
-    fn plugin_id(&self) -> &'static str {
-        "chunked_s3"
-    }
-
-    fn open(
-        &self,
-        request: OpenFileSystemPluginRequest<'_, Context>,
-    ) -> Result<Box<dyn MountedFileSystem>, PluginError> {
-        let config: ChunkedS3MountConfig = serde_json::from_value(request.config.clone())
-            .map_err(|error| PluginError::invalid_input(error.to_string()))?;
-        let bucket = config.bucket.trim().to_owned();
-        if bucket.is_empty() {
-            return Err(PluginError::invalid_input(
-                "chunked_s3 mount requires a non-empty bucket",
-            ));
-        }
-        let metadata_backend = config.metadata_backend.as_deref().unwrap_or("sqlite");
-        match metadata_backend {
-            "sqlite" | "local" | "callback" => {}
-            backend => {
-                return Err(PluginError::invalid_input(format!(
-                    "unsupported chunked_s3 metadataBackend: {backend}"
-                )));
-            }
-        }
-
-        let chunk_size = config.chunk_size.unwrap_or(vfs::engine::DEFAULT_CHUNK_SIZE);
-        if chunk_size == 0 {
-            return Err(PluginError::invalid_input(
-                "chunked_s3 mount requires chunkSize to be greater than zero",
-            ));
-        }
-        let inline_threshold = config
-            .inline_threshold
-            .unwrap_or(vfs::engine::DEFAULT_INLINE_THRESHOLD);
-        if inline_threshold > chunk_size as usize {
-            return Err(PluginError::invalid_input(
-                "chunked_s3 mount requires inlineThreshold to be less than or equal to chunkSize",
-            ));
-        }
-
-        let prefix = normalize_prefix(config.prefix.as_deref());
-        let client = create_s3_client(
-            config.region.unwrap_or_else(|| DEFAULT_REGION.to_owned()),
-            config.endpoint,
-            config.credentials,
-        )?;
-        let block_store = S3BlockStore::with_options(
-            client,
-            bucket,
-            S3BlockStoreOptions {
-                prefix: format!("{prefix}blocks/"),
-            },
-        );
-        let cache_entries = config
-            .metadata_cache_entries
-            .unwrap_or(DEFAULT_METADATA_CACHE_ENTRIES);
-        let options = ChunkedFsOptions {
-            inline_threshold,
-            chunk_size,
-            uid: config.uid.unwrap_or(0),
-            gid: config.gid.unwrap_or(0),
-            file_mode: config.file_mode.unwrap_or(0o644),
-            dir_mode: config.dir_mode.unwrap_or(0o755),
-        };
-
-        match metadata_backend {
-            "callback" => {
-                let (requests, ownership) = request
-                    .context
-                    .chunked_s3_callback_context()
-                    .ok_or_else(|| {
-                        PluginError::invalid_input(
-                            "chunked_s3 callback metadata backend requires sidecar request context",
-                        )
-                    })?;
-                let mount_id = config
-                    .mount_id
-                    .unwrap_or_else(|| request.guest_path.to_owned());
-                let metadata = CachedMetadataStore::new(
-                    CallbackMetadataStore::new(requests, ownership, mount_id),
-                    cache_entries,
-                );
-                let fs = ChunkedFs::with_options(metadata, block_store, options);
-                Ok(Box::new(MountedEngineFileSystem::new(fs)?))
-            }
-            "sqlite" | "local" => {
-                let metadata_path = config.metadata_path.ok_or_else(|| {
-                    PluginError::invalid_input("chunked_s3 sqlite metadata requires metadataPath")
-                })?;
-                let metadata = SqliteMetadataStore::open(metadata_path)
-                    .map_err(|error| PluginError::new(error.code(), error.message().to_owned()))?;
-                let metadata = CachedMetadataStore::new(metadata, cache_entries);
-                let fs = ChunkedFs::with_options(metadata, block_store, options);
-                Ok(Box::new(MountedEngineFileSystem::new(fs)?))
-            }
-            _ => unreachable!("metadata backend was validated above"),
-        }
-    }
-}
diff --git a/crates/sidecar/src/plugins/google_drive.rs b/crates/sidecar/src/plugins/google_drive.rs
deleted file mode 100644
index a77dcc310..000000000
--- a/crates/sidecar/src/plugins/google_drive.rs
+++ /dev/null
@@ -1,1622 +0,0 @@
-use base64::engine::general_purpose::STANDARD as BASE64;
-use base64::Engine;
-use jsonwebtoken::{Algorithm, EncodingKey, Header};
-use secure_exec_kernel::mount_plugin::{
-    FileSystemPluginFactory, OpenFileSystemPluginRequest, PluginError,
-};
-use secure_exec_kernel::mount_table::{MountedFileSystem, MountedVirtualFileSystem};
-use secure_exec_kernel::vfs::{
-    MemoryFileSystem, MemoryFileSystemSnapshot, MemoryFileSystemSnapshotInode,
-    MemoryFileSystemSnapshotInodeKind, VfsError, VfsResult, VirtualDirEntry, VirtualFileSystem,
-    VirtualStat,
-};
-use serde::{Deserialize, Serialize};
-use serde_json::json;
-use std::collections::{BTreeMap, BTreeSet};
-use std::io::Read;
-use std::time::{SystemTime, UNIX_EPOCH};
-use url::Url;
-
-const DEFAULT_CHUNK_SIZE: usize = 4 * 1024 * 1024;
-const DEFAULT_INLINE_THRESHOLD: usize = 64 * 1024;
-const MANIFEST_FORMAT: &str = "secure_exec_google_drive_filesystem_manifest_v1";
-const LEGACY_AGENTOS_MANIFEST_FORMAT: &str = "agentos_google_drive_filesystem_manifest_v1";
-const DRIVE_SCOPE: &str = "https://www.googleapis.com/auth/drive.file";
-const DEFAULT_TOKEN_URL: &str = "https://oauth2.googleapis.com/token";
-const DEFAULT_API_BASE_URL: &str = "https://www.googleapis.com";
-const TOKEN_REFRESH_SKEW_SECONDS: u64 = 60;
-const MAX_PERSISTED_MANIFEST_BYTES: usize = 64 * 1024 * 1024;
-const MAX_PERSISTED_MANIFEST_FILE_BYTES: u64 = 1024 * 1024 * 1024;
-
-#[derive(Debug, Clone, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct GoogleDriveMountCredentials {
-    client_email: String,
-    private_key: String,
-}
-
-#[derive(Debug, Clone, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct GoogleDriveMountConfig {
-    credentials: GoogleDriveMountCredentials,
-    folder_id: String,
-    key_prefix: Option<String>,
-    chunk_size: Option<usize>,
-    inline_threshold: Option<usize>,
-    #[serde(default)]
-    token_url: Option<String>,
-    #[serde(default)]
-    api_base_url: Option<String>,
-}
-
-#[derive(Debug)]
-pub(crate) struct GoogleDriveMountPlugin;
-
-impl<Context> FileSystemPluginFactory<Context> for GoogleDriveMountPlugin {
-    fn plugin_id(&self) -> &'static str {
-        "google_drive"
-    }
-
-    fn open(
-        &self,
-        request: OpenFileSystemPluginRequest<'_, Context>,
-    ) -> Result<Box<dyn MountedFileSystem>, PluginError> {
-        let config: GoogleDriveMountConfig = serde_json::from_value(request.config.clone())
-            .map_err(|error| PluginError::invalid_input(error.to_string()))?;
-        let filesystem = GoogleDriveBackedFilesystem::from_config(config)?;
-        Ok(Box::new(MountedVirtualFileSystem::new(filesystem)))
-    }
-}
-
-struct GoogleDriveBackedFilesystem {
-    inner: MemoryFileSystem,
-    store: GoogleDriveObjectStore,
-    manifest_key: String,
-    chunk_key_prefix: String,
-    chunk_keys: BTreeSet<String>,
-    chunk_size: usize,
-    inline_threshold: usize,
-}
-
-impl GoogleDriveBackedFilesystem {
-    fn from_config(config: GoogleDriveMountConfig) -> Result<Self, PluginError> {
-        let folder_id = config.folder_id.trim().to_owned();
-        if folder_id.is_empty() {
-            return Err(PluginError::invalid_input(
-                "google_drive mount requires a non-empty folderId",
-            ));
-        }
-
-        let chunk_size = config.chunk_size.unwrap_or(DEFAULT_CHUNK_SIZE);
-        if chunk_size == 0 {
-            return Err(PluginError::invalid_input(
-                "google_drive mount requires chunkSize to be greater than zero",
-            ));
-        }
-
-        let inline_threshold = config.inline_threshold.unwrap_or(DEFAULT_INLINE_THRESHOLD);
-        if inline_threshold > chunk_size {
-            return Err(PluginError::invalid_input(
-                "google_drive mount requires inlineThreshold to be less than or equal to chunkSize",
-            ));
-        }
-
-        let prefix = normalize_prefix(config.key_prefix.as_deref());
-        let manifest_key = format!("{prefix}filesystem-manifest.json");
-        let chunk_key_prefix = format!("{prefix}blocks/");
-        let mut store = GoogleDriveObjectStore::new(
-            config.credentials,
-            folder_id,
-            config
-                .token_url
-                .unwrap_or_else(|| String::from(DEFAULT_TOKEN_URL)),
-            config
-                .api_base_url
-                .unwrap_or_else(|| String::from(DEFAULT_API_BASE_URL)),
-        )?;
-
-        let (inner, chunk_keys) = match store.load_manifest(&manifest_key)? {
-            Some(manifest_bytes) => {
-                load_filesystem_from_manifest(&mut store, &manifest_bytes, &chunk_key_prefix)?
-            }
-            None => (MemoryFileSystem::new(), BTreeSet::new()),
-        };
-
-        Ok(Self {
-            inner,
-            store,
-            manifest_key,
-            chunk_key_prefix,
-            chunk_keys,
-            chunk_size,
-            inline_threshold,
-        })
-    }
-
-    fn persist(&mut self) -> VfsResult<()> {
-        let snapshot = self.inner.snapshot();
-        let (manifest, next_chunk_keys) = persist_manifest_from_snapshot(
-            &mut self.store,
-            &snapshot,
-            &self.chunk_key_prefix,
-            self.chunk_size,
-            self.inline_threshold,
-        )
-        .map_err(storage_error_to_vfs)?;
-
-        let manifest_bytes = serde_json::to_vec(&manifest)
-            .map_err(|error| VfsError::io(format!("serialize google drive manifest: {error}")))?;
-        validate_persisted_manifest_bytes(&manifest_bytes).map_err(storage_error_to_vfs)?;
-        self.store
-            .put_bytes(&self.manifest_key, &manifest_bytes)
-            .map_err(storage_error_to_vfs)?;
-
-        let stale_keys = self
-            .chunk_keys
-            .difference(&next_chunk_keys)
-            .cloned()
-            .collect::<Vec<_>>();
-        for key in stale_keys {
-            self.store
-                .delete_object(&key)
-                .map_err(storage_error_to_vfs)?;
-        }
-
-        self.chunk_keys = next_chunk_keys;
-        Ok(())
-    }
-}
-
-impl VirtualFileSystem for GoogleDriveBackedFilesystem {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        self.inner.read_file(path)
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        self.inner.read_dir(path)
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        self.inner.read_dir_with_types(path)
-    }
-
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        self.inner.write_file(path, content.into())?;
-        self.persist()
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.inner.create_dir(path)?;
-        self.persist()
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        self.inner.mkdir(path, recursive)?;
-        self.persist()
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        self.inner.exists(path)
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        self.inner.stat(path)
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        self.inner.remove_file(path)?;
-        self.persist()
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.inner.remove_dir(path)?;
-        self.persist()
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        self.inner.rename(old_path, new_path)?;
-        self.persist()
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        self.inner.realpath(path)
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        self.inner.symlink(target, link_path)?;
-        self.persist()
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        self.inner.read_link(path)
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        self.inner.lstat(path)
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        self.inner.link(old_path, new_path)?;
-        self.persist()
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        self.inner.chmod(path, mode)?;
-        self.persist()
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        self.inner.chown(path, uid, gid)?;
-        self.persist()
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        self.inner.utimes(path, atime_ms, mtime_ms)?;
-        self.persist()
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        self.inner.truncate(path, length)?;
-        self.persist()
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        self.inner.pread(path, offset, length)
-    }
-}
-
-struct GoogleDriveObjectStore {
-    auth: GoogleServiceAccountAuth,
-    folder_id: String,
-    api_base_url: String,
-    file_id_cache: BTreeMap<String, String>,
-}
-
-impl GoogleDriveObjectStore {
-    fn new(
-        credentials: GoogleDriveMountCredentials,
-        folder_id: String,
-        token_url: String,
-        api_base_url: String,
-    ) -> Result<Self, PluginError> {
-        let api_base_url = validate_google_drive_url(&api_base_url, "apiBaseUrl", false)?;
-
-        Ok(Self {
-            auth: GoogleServiceAccountAuth::new(credentials, token_url)?,
-            folder_id,
-            api_base_url,
-            file_id_cache: BTreeMap::new(),
-        })
-    }
-
-    fn load_manifest(&mut self, key: &str) -> Result<Option<Vec<u8>>, PluginError> {
-        self.load_bytes_limited(key, MAX_PERSISTED_MANIFEST_BYTES)
-            .map_err(|error| PluginError::new("EIO", error.to_string()))
-    }
-
-    fn load_bytes_limited(
-        &mut self,
-        key: &str,
-        max_bytes: usize,
-    ) -> Result<Option<Vec<u8>>, StorageError> {
-        let Some(file_id) = self.find_file_id(key)? else {
-            return Ok(None);
-        };
-
-        match self.download_file(&file_id, max_bytes) {
-            Ok(bytes) => Ok(Some(bytes)),
-            Err(error) if error.is_not_found() => {
-                self.file_id_cache.remove(key);
-                if let Some(file_id) = self.lookup_file_id(key)? {
-                    let bytes = self.download_file(&file_id, max_bytes)?;
-                    Ok(Some(bytes))
-                } else {
-                    Ok(None)
-                }
-            }
-            Err(error) => Err(error),
-        }
-    }
-
-    fn put_bytes(&mut self, key: &str, bytes: &[u8]) -> Result<(), StorageError> {
-        if let Some(file_id) = self.find_file_id(key)? {
-            match self.upload_file_contents(&file_id, bytes) {
-                Ok(()) => return Ok(()),
-                Err(error) if error.is_not_found() => {
-                    self.file_id_cache.remove(key);
-                }
-                Err(error) => return Err(error),
-            }
-        }
-
-        let file_id = self.create_file(key)?;
-        self.upload_file_contents(&file_id, bytes)?;
-        self.file_id_cache.insert(String::from(key), file_id);
-        Ok(())
-    }
-
-    fn delete_object(&mut self, key: &str) -> Result<(), StorageError> {
-        let Some(file_id) = self.find_file_id(key)? else {
-            return Ok(());
-        };
-
-        match self.delete_file(&file_id) {
-            Ok(()) => {}
-            Err(error) if error.is_not_found() => {}
-            Err(error) => return Err(error),
-        }
-
-        self.file_id_cache.remove(key);
-        Ok(())
-    }
-
-    fn find_file_id(&mut self, key: &str) -> Result<Option<String>, StorageError> {
-        if let Some(file_id) = self.file_id_cache.get(key) {
-            return Ok(Some(file_id.clone()));
-        }
-
-        let file_id = self.lookup_file_id(key)?;
-        if let Some(file_id) = &file_id {
-            self.file_id_cache
-                .insert(String::from(key), file_id.clone());
-        }
-        Ok(file_id)
-    }
-
-    fn lookup_file_id(&mut self, key: &str) -> Result<Option<String>, StorageError> {
-        let query = format!(
-            "name = '{}' and '{}' in parents and trashed = false",
-            escape_query_literal(key),
-            escape_query_literal(&self.folder_id),
-        );
-        let token = self.auth.access_token()?;
-        let url = format!("{}/drive/v3/files", self.api_base_url);
-
-        match ureq::get(&url)
-            .query("q", &query)
-            .query("fields", "files(id)")
-            .query("pageSize", "1")
-            .query("supportsAllDrives", "true")
-            .set("Authorization", &format!("Bearer {token}"))
-            .call()
-        {
-            Ok(response) => {
-                let payload = response
-                    .into_json::<DriveFileListResponse>()
-                    .map_err(|error| {
-                        StorageError::new(format!(
-                            "decode google drive file lookup response: {error}"
-                        ))
-                    })?;
-                Ok(payload
-                    .files
-                    .and_then(|mut files| files.pop())
-                    .and_then(|file| file.id))
-            }
-            Err(ureq::Error::Status(status, response)) => Err(response_error(
-                &format!("lookup google drive file '{key}'"),
-                status,
-                response,
-            )),
-            Err(ureq::Error::Transport(error)) => Err(StorageError::new(format!(
-                "lookup google drive file '{key}': {error}"
-            ))),
-        }
-    }
-
-    fn download_file(&mut self, file_id: &str, max_bytes: usize) -> Result<Vec<u8>, StorageError> {
-        let token = self.auth.access_token()?;
-        let url = format!("{}/drive/v3/files/{}", self.api_base_url, file_id);
-
-        match ureq::get(&url)
-            .query("alt", "media")
-            .query("supportsAllDrives", "true")
-            .set("Authorization", &format!("Bearer {token}"))
-            .call()
-        {
-            Ok(response) => read_response_bytes(response, max_bytes).map_err(|error| {
-                StorageError::new(format!("read google drive file '{file_id}': {error}"))
-            }),
-            Err(ureq::Error::Status(status, response)) => Err(response_error(
-                &format!("download google drive file '{file_id}'"),
-                status,
-                response,
-            )),
-            Err(ureq::Error::Transport(error)) => Err(StorageError::new(format!(
-                "download google drive file '{file_id}': {error}"
-            ))),
-        }
-    }
-
-    fn create_file(&mut self, name: &str) -> Result<String, StorageError> {
-        let token = self.auth.access_token()?;
-        let url = format!("{}/drive/v3/files", self.api_base_url);
-
-        match ureq::post(&url)
-            .query("fields", "id")
-            .query("supportsAllDrives", "true")
-            .set("Authorization", &format!("Bearer {token}"))
-            .send_json(json!({
-                "name": name,
-                "parents": [self.folder_id.clone()],
-                "mimeType": "application/octet-stream",
-            })) {
-            Ok(response) => {
-                let payload = response.into_json::<DriveFileResponse>().map_err(|error| {
-                    StorageError::new(format!("decode google drive file create response: {error}"))
-                })?;
-                payload.id.ok_or_else(|| {
-                    StorageError::new(format!(
-                        "create google drive file '{name}': missing file id in response"
-                    ))
-                })
-            }
-            Err(ureq::Error::Status(status, response)) => Err(response_error(
-                &format!("create google drive file '{name}'"),
-                status,
-                response,
-            )),
-            Err(ureq::Error::Transport(error)) => Err(StorageError::new(format!(
-                "create google drive file '{name}': {error}"
-            ))),
-        }
-    }
-
-    fn upload_file_contents(&mut self, file_id: &str, bytes: &[u8]) -> Result<(), StorageError> {
-        let token = self.auth.access_token()?;
-        let url = format!("{}/upload/drive/v3/files/{}", self.api_base_url, file_id);
-
-        match ureq::request("PATCH", &url)
-            .query("uploadType", "media")
-            .query("supportsAllDrives", "true")
-            .set("Authorization", &format!("Bearer {token}"))
-            .set("Content-Type", "application/octet-stream")
-            .send_bytes(bytes)
-        {
-            Ok(_) => Ok(()),
-            Err(ureq::Error::Status(status, response)) => Err(response_error(
-                &format!("upload google drive file '{file_id}'"),
-                status,
-                response,
-            )),
-            Err(ureq::Error::Transport(error)) => Err(StorageError::new(format!(
-                "upload google drive file '{file_id}': {error}"
-            ))),
-        }
-    }
-
-    fn delete_file(&mut self, file_id: &str) -> Result<(), StorageError> {
-        let token = self.auth.access_token()?;
-        let url = format!("{}/drive/v3/files/{}", self.api_base_url, file_id);
-
-        match ureq::delete(&url)
-            .query("supportsAllDrives", "true")
-            .set("Authorization", &format!("Bearer {token}"))
-            .call()
-        {
-            Ok(_) => Ok(()),
-            Err(ureq::Error::Status(status, response)) => Err(response_error(
-                &format!("delete google drive file '{file_id}'"),
-                status,
-                response,
-            )),
-            Err(ureq::Error::Transport(error)) => Err(StorageError::new(format!(
-                "delete google drive file '{file_id}': {error}"
-            ))),
-        }
-    }
-}
-
-struct GoogleServiceAccountAuth {
-    client_email: String,
-    token_url: String,
-    encoding_key: EncodingKey,
-    cached_token: Option<CachedAccessToken>,
-}
-
-#[derive(Debug, Clone)]
-struct CachedAccessToken {
-    access_token: String,
-    expires_at: u64,
-}
-
-impl GoogleServiceAccountAuth {
-    fn new(
-        credentials: GoogleDriveMountCredentials,
-        token_url: String,
-    ) -> Result<Self, PluginError> {
-        if credentials.client_email.trim().is_empty() {
-            return Err(PluginError::invalid_input(
-                "google_drive mount requires credentials.clientEmail",
-            ));
-        }
-        if credentials.private_key.trim().is_empty() {
-            return Err(PluginError::invalid_input(
-                "google_drive mount requires credentials.privateKey",
-            ));
-        }
-        let encoding_key =
-            EncodingKey::from_rsa_pem(credentials.private_key.as_bytes()).map_err(|error| {
-                PluginError::invalid_input(format!(
-                    "google_drive mount credentials.privateKey is not valid PEM: {error}"
-                ))
-            })?;
-        let token_url = validate_google_drive_url(&token_url, "tokenUrl", true)?;
-
-        Ok(Self {
-            client_email: credentials.client_email,
-            token_url,
-            encoding_key,
-            cached_token: None,
-        })
-    }
-
-    fn access_token(&mut self) -> Result<String, StorageError> {
-        let now = now_unix_seconds();
-        if let Some(token) = &self.cached_token {
-            if token.expires_at > now + TOKEN_REFRESH_SKEW_SECONDS {
-                return Ok(token.access_token.clone());
-            }
-        }
-
-        let iat = now as usize;
-        let exp = (now + 3600) as usize;
-        let claims = ServiceAccountClaims {
-            iss: &self.client_email,
-            scope: DRIVE_SCOPE,
-            aud: &self.token_url,
-            iat,
-            exp,
-        };
-        let jwt = jsonwebtoken::encode(&Header::new(Algorithm::RS256), &claims, &self.encoding_key)
-            .map_err(|error| StorageError::new(format!("sign google oauth assertion: {error}")))?;
-
-        match ureq::post(&self.token_url).send_form(&[
-            ("grant_type", "urn:ietf:params:oauth:grant-type:jwt-bearer"),
-            ("assertion", jwt.as_str()),
-        ]) {
-            Ok(response) => {
-                let payload = response
-                    .into_json::<AccessTokenResponse>()
-                    .map_err(|error| {
-                        StorageError::new(format!("decode google oauth token response: {error}"))
-                    })?;
-                let cached = CachedAccessToken {
-                    access_token: payload.access_token,
-                    expires_at: now + payload.expires_in,
-                };
-                let token = cached.access_token.clone();
-                self.cached_token = Some(cached);
-                Ok(token)
-            }
-            Err(ureq::Error::Status(status, response)) => Err(response_error(
-                "fetch google oauth access token",
-                status,
-                response,
-            )),
-            Err(ureq::Error::Transport(error)) => Err(StorageError::new(format!(
-                "fetch google oauth access token: {error}"
-            ))),
-        }
-    }
-}
-
-#[derive(Debug, Deserialize)]
-struct AccessTokenResponse {
-    access_token: String,
-    expires_in: u64,
-}
-
-#[derive(Debug, Serialize)]
-struct ServiceAccountClaims<'a> {
-    iss: &'a str,
-    scope: &'a str,
-    aud: &'a str,
-    iat: usize,
-    exp: usize,
-}
-
-#[derive(Debug, Deserialize)]
-struct DriveFileListResponse {
-    files: Option<Vec<DriveFileResponse>>,
-}
-
-#[derive(Debug, Deserialize)]
-struct DriveFileResponse {
-    id: Option<String>,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-enum StorageErrorKind {
-    Other,
-    NotFound,
-}
-
-#[derive(Debug, Clone)]
-struct StorageError {
-    kind: StorageErrorKind,
-    message: String,
-}
-
-impl StorageError {
-    fn new(message: impl Into<String>) -> Self {
-        Self {
-            kind: StorageErrorKind::Other,
-            message: message.into(),
-        }
-    }
-
-    fn not_found(message: impl Into<String>) -> Self {
-        Self {
-            kind: StorageErrorKind::NotFound,
-            message: message.into(),
-        }
-    }
-
-    fn is_not_found(&self) -> bool {
-        self.kind == StorageErrorKind::NotFound
-    }
-}
-
-impl std::fmt::Display for StorageError {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        f.write_str(&self.message)
-    }
-}
-
-impl std::error::Error for StorageError {}
-
-#[derive(Debug, Serialize, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct PersistedFilesystemManifest {
-    format: String,
-    path_index: BTreeMap<String, u64>,
-    inodes: BTreeMap<u64, PersistedFilesystemInode>,
-    next_ino: u64,
-}
-
-#[derive(Debug, Serialize, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct PersistedFilesystemInode {
-    metadata: secure_exec_kernel::vfs::MemoryFileSystemSnapshotMetadata,
-    kind: PersistedFilesystemInodeKind,
-}
-
-#[derive(Debug, Serialize, Deserialize)]
-#[serde(tag = "kind", rename_all = "camelCase")]
-enum PersistedFilesystemInodeKind {
-    File { storage: PersistedFileStorage },
-    Directory,
-    SymbolicLink { target: String },
-}
-
-#[derive(Debug, Serialize, Deserialize)]
-#[serde(tag = "storageMode", rename_all = "camelCase")]
-enum PersistedFileStorage {
-    Inline {
-        data_base64: String,
-    },
-    Chunked {
-        size: u64,
-        chunks: Vec<PersistedChunkRef>,
-    },
-}
-
-#[derive(Debug, Clone, Serialize, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct PersistedChunkRef {
-    index: u64,
-    key: String,
-}
-
-fn persist_manifest_from_snapshot(
-    store: &mut GoogleDriveObjectStore,
-    snapshot: &MemoryFileSystemSnapshot,
-    chunk_key_prefix: &str,
-    chunk_size: usize,
-    inline_threshold: usize,
-) -> Result<(PersistedFilesystemManifest, BTreeSet<String>), StorageError> {
-    let mut chunk_keys = BTreeSet::new();
-    let mut inodes = BTreeMap::new();
-
-    for (ino, inode) in &snapshot.inodes {
-        let persisted_kind = match &inode.kind {
-            MemoryFileSystemSnapshotInodeKind::File { data } => {
-                if data.len() <= inline_threshold {
-                    PersistedFilesystemInodeKind::File {
-                        storage: PersistedFileStorage::Inline {
-                            data_base64: BASE64.encode(data),
-                        },
-                    }
-                } else {
-                    let mut chunks = Vec::new();
-                    for (index, chunk) in data.chunks(chunk_size).enumerate() {
-                        let key = format!("{chunk_key_prefix}{ino}/{index}");
-                        store.put_bytes(&key, chunk)?;
-                        chunk_keys.insert(key.clone());
-                        chunks.push(PersistedChunkRef {
-                            index: index as u64,
-                            key,
-                        });
-                    }
-
-                    PersistedFilesystemInodeKind::File {
-                        storage: PersistedFileStorage::Chunked {
-                            size: data.len() as u64,
-                            chunks,
-                        },
-                    }
-                }
-            }
-            MemoryFileSystemSnapshotInodeKind::Directory => PersistedFilesystemInodeKind::Directory,
-            MemoryFileSystemSnapshotInodeKind::SymbolicLink { target } => {
-                PersistedFilesystemInodeKind::SymbolicLink {
-                    target: target.clone(),
-                }
-            }
-        };
-
-        inodes.insert(
-            *ino,
-            PersistedFilesystemInode {
-                metadata: inode.metadata.clone(),
-                kind: persisted_kind,
-            },
-        );
-    }
-
-    Ok((
-        PersistedFilesystemManifest {
-            format: String::from(MANIFEST_FORMAT),
-            path_index: snapshot.path_index.clone(),
-            inodes,
-            next_ino: snapshot.next_ino,
-        },
-        chunk_keys,
-    ))
-}
-
-fn load_filesystem_from_manifest(
-    store: &mut GoogleDriveObjectStore,
-    manifest_bytes: &[u8],
-    chunk_key_prefix: &str,
-) -> Result<(MemoryFileSystem, BTreeSet<String>), PluginError> {
-    let manifest: PersistedFilesystemManifest =
-        serde_json::from_slice(manifest_bytes).map_err(|error| {
-            PluginError::invalid_input(format!("parse google drive manifest: {error}"))
-        })?;
-    if !is_supported_manifest_format(&manifest.format) {
-        return Err(PluginError::invalid_input(format!(
-            "unsupported google drive manifest format: {}",
-            manifest.format
-        )));
-    }
-
-    let mut chunk_keys = BTreeSet::new();
-    let mut inodes = BTreeMap::new();
-    for (ino, inode) in manifest.inodes {
-        let kind = match inode.kind {
-            PersistedFilesystemInodeKind::File { storage } => {
-                let data = match storage {
-                    PersistedFileStorage::Inline { data_base64 } => {
-                        validate_inline_manifest_data_size(&data_base64, "google drive", ino)?;
-                        let data = BASE64.decode(data_base64).map_err(|error| {
-                            PluginError::invalid_input(format!(
-                                "decode inline google drive file data for inode {ino}: {error}"
-                            ))
-                        })?;
-                        validate_manifest_file_size(data.len() as u64, "google drive", ino)?;
-                        data
-                    }
-                    PersistedFileStorage::Chunked { size, mut chunks } => {
-                        chunks.sort_by_key(|chunk| chunk.index);
-                        let expected_size = validate_manifest_file_size(size, "google drive", ino)?;
-                        let mut data = Vec::with_capacity(expected_size);
-                        for chunk in chunks {
-                            validate_manifest_chunk_key(&chunk.key, chunk_key_prefix, ino)?;
-                            let remaining = expected_size.saturating_sub(data.len());
-                            if remaining == 0 {
-                                return Err(PluginError::invalid_input(format!(
-                                    "google drive manifest inode {ino} has chunk data beyond declared size {size}"
-                                )));
-                            }
-                            let bytes = store
-                                .load_bytes_limited(&chunk.key, remaining)
-                                .map_err(|error| PluginError::new("EIO", error.to_string()))?
-                                .ok_or_else(|| {
-                                    PluginError::new(
-                                        "EIO",
-                                        format!(
-                                            "google drive manifest references missing chunk '{}' for inode {}",
-                                            chunk.key, ino
-                                        ),
-                                    )
-                                })?;
-                            chunk_keys.insert(chunk.key);
-                            data.extend_from_slice(&bytes);
-                        }
-                        if data.len() != expected_size {
-                            return Err(PluginError::invalid_input(format!(
-                                "google drive manifest inode {ino} restored {} bytes but declared {size}",
-                                data.len()
-                            )));
-                        }
-                        data
-                    }
-                };
-
-                MemoryFileSystemSnapshotInodeKind::File { data }
-            }
-            PersistedFilesystemInodeKind::Directory => MemoryFileSystemSnapshotInodeKind::Directory,
-            PersistedFilesystemInodeKind::SymbolicLink { target } => {
-                MemoryFileSystemSnapshotInodeKind::SymbolicLink { target }
-            }
-        };
-
-        inodes.insert(
-            ino,
-            MemoryFileSystemSnapshotInode {
-                metadata: inode.metadata,
-                kind,
-            },
-        );
-    }
-
-    Ok((
-        MemoryFileSystem::from_snapshot(MemoryFileSystemSnapshot {
-            path_index: manifest.path_index,
-            inodes,
-            next_ino: manifest.next_ino,
-        }),
-        chunk_keys,
-    ))
-}
-
-fn is_supported_manifest_format(format: &str) -> bool {
-    format == MANIFEST_FORMAT || format == LEGACY_AGENTOS_MANIFEST_FORMAT
-}
-
-fn validate_manifest_chunk_key(
-    key: &str,
-    chunk_key_prefix: &str,
-    ino: u64,
-) -> Result<(), PluginError> {
-    if key.starts_with(chunk_key_prefix) {
-        return Ok(());
-    }
-
-    Err(PluginError::invalid_input(format!(
-        "google drive manifest inode {ino} references chunk outside mount prefix"
-    )))
-}
-
-fn validate_manifest_file_size(size: u64, backend: &str, ino: u64) -> Result<usize, PluginError> {
-    if size > MAX_PERSISTED_MANIFEST_FILE_BYTES {
-        return Err(PluginError::invalid_input(format!(
-            "{backend} manifest inode {ino} declares {size} bytes, limit is {MAX_PERSISTED_MANIFEST_FILE_BYTES}"
-        )));
-    }
-
-    usize::try_from(size).map_err(|_| {
-        PluginError::invalid_input(format!(
-            "{backend} manifest inode {ino} size {size} does not fit on this platform"
-        ))
-    })
-}
-
-fn validate_inline_manifest_data_size(
-    data_base64: &str,
-    backend: &str,
-    ino: u64,
-) -> Result<(), PluginError> {
-    validate_inline_manifest_data_size_with_limit(
-        data_base64,
-        backend,
-        ino,
-        MAX_PERSISTED_MANIFEST_FILE_BYTES,
-    )
-}
-
-fn validate_inline_manifest_data_size_with_limit(
-    data_base64: &str,
-    backend: &str,
-    ino: u64,
-    max_bytes: u64,
-) -> Result<(), PluginError> {
-    let padding = data_base64
-        .as_bytes()
-        .iter()
-        .rev()
-        .take_while(|byte| **byte == b'=')
-        .count()
-        .min(2);
-    let estimated_decoded = data_base64
-        .len()
-        .div_ceil(4)
-        .saturating_mul(3)
-        .saturating_sub(padding);
-    if estimated_decoded as u64 > max_bytes {
-        return Err(PluginError::invalid_input(format!(
-            "{backend} manifest inode {ino} inline data may decode to {estimated_decoded} bytes, limit is {max_bytes}"
-        )));
-    }
-    Ok(())
-}
-
-fn validate_persisted_manifest_bytes(bytes: &[u8]) -> Result<(), StorageError> {
-    validate_persisted_manifest_size(bytes.len(), MAX_PERSISTED_MANIFEST_BYTES)
-}
-
-fn validate_persisted_manifest_size(size: usize, max_bytes: usize) -> Result<(), StorageError> {
-    if size > max_bytes {
-        return Err(StorageError::new(format!(
-            "google drive manifest is {size} bytes, limit is {max_bytes}"
-        )));
-    }
-    Ok(())
-}
-
-fn normalize_prefix(raw: Option<&str>) -> String {
-    match raw {
-        Some(prefix) if !prefix.trim().is_empty() => {
-            let trimmed = prefix.trim_matches('/');
-            if trimmed.is_empty() {
-                String::new()
-            } else {
-                format!("{trimmed}/")
-            }
-        }
-        _ => String::new(),
-    }
-}
-
-fn normalize_base_url(raw: &str) -> Option<String> {
-    let trimmed = raw.trim().trim_end_matches('/');
-    if trimmed.is_empty() {
-        None
-    } else {
-        Some(String::from(trimmed))
-    }
-}
-
-fn validate_google_drive_url(
-    raw: &str,
-    field_name: &str,
-    allow_path: bool,
-) -> Result<String, PluginError> {
-    // tokenUrl / apiBaseUrl come only from the trusted mount config, never from
-    // untrusted guest code, so a strict host allowlist (SSRF hardening against
-    // trusted input) is dropped (see root CLAUDE.md). We keep well-formedness
-    // plus the credential-leak guards: these endpoints receive a signed
-    // service-account JWT and an OAuth bearer token, so https is required and
-    // embedded credentials / query / fragment are rejected to avoid leaking
-    // those secrets to an unintended host on a config typo.
-    let normalized = normalize_base_url(raw).ok_or_else(|| {
-        PluginError::invalid_input(format!("google_drive mount requires a valid {field_name}"))
-    })?;
-    let url = Url::parse(&normalized).map_err(|error| {
-        PluginError::invalid_input(format!(
-            "google_drive mount {field_name} is not a valid URL: {error}"
-        ))
-    })?;
-
-    if is_google_drive_test_url(&url) {
-        return Ok(normalized);
-    }
-
-    if url.scheme() != "https" {
-        return Err(PluginError::invalid_input(format!(
-            "google_drive mount {field_name} must use https"
-        )));
-    }
-    if url.host_str().is_none() {
-        return Err(PluginError::invalid_input(format!(
-            "google_drive mount {field_name} must include a host"
-        )));
-    }
-    if !url.username().is_empty() || url.password().is_some() {
-        return Err(PluginError::invalid_input(format!(
-            "google_drive mount {field_name} must not include user credentials"
-        )));
-    }
-    if url.query().is_some() || url.fragment().is_some() {
-        return Err(PluginError::invalid_input(format!(
-            "google_drive mount {field_name} must not include query or fragment components"
-        )));
-    }
-    if !allow_path && url.path() != "/" {
-        return Err(PluginError::invalid_input(format!(
-            "google_drive mount {field_name} must not include a path"
-        )));
-    }
-
-    Ok(normalized)
-}
-
-fn is_google_drive_test_url(url: &Url) -> bool {
-    #[cfg(test)]
-    {
-        matches!(url.scheme(), "http" | "https")
-            && matches!(
-                url.host_str(),
-                Some("127.0.0.1") | Some("localhost") | Some("[::1]")
-            )
-    }
-    #[cfg(not(test))]
-    {
-        let _ = url;
-        false
-    }
-}
-
-fn escape_query_literal(raw: &str) -> String {
-    raw.replace('\\', "\\\\").replace('\'', "\\'")
-}
-
-fn now_unix_seconds() -> u64 {
-    SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .expect("system time before unix epoch")
-        .as_secs()
-}
-
-fn read_response_bytes(response: ureq::Response, max_bytes: usize) -> std::io::Result<Vec<u8>> {
-    let mut reader = response
-        .into_reader()
-        .take(max_bytes.saturating_add(1) as u64);
-    let mut bytes = Vec::new();
-    reader.read_to_end(&mut bytes)?;
-    if bytes.len() > max_bytes {
-        return Err(std::io::Error::new(
-            std::io::ErrorKind::InvalidData,
-            format!("response exceeded {max_bytes} byte limit"),
-        ));
-    }
-    Ok(bytes)
-}
-
-fn response_error(context: &str, status: u16, response: ureq::Response) -> StorageError {
-    let body = response.into_string().unwrap_or_default();
-    let message = if body.trim().is_empty() {
-        format!("{context}: http {status}")
-    } else {
-        format!("{context}: http {status}: {}", body.trim())
-    };
-    if status == 404 {
-        StorageError::not_found(message)
-    } else {
-        StorageError::new(message)
-    }
-}
-
-fn storage_error_to_vfs(error: StorageError) -> VfsError {
-    VfsError::io(error.to_string())
-}
-
-#[cfg(test)]
-pub(crate) mod test_support {
-    #![allow(dead_code)]
-
-    use serde::Deserialize;
-    use serde_json::json;
-    use std::collections::BTreeMap;
-    use std::io::{Read, Write};
-    use std::net::{TcpListener, TcpStream};
-    use std::sync::atomic::{AtomicBool, Ordering};
-    use std::sync::{Arc, Mutex};
-    use std::thread::{self, JoinHandle};
-    use std::time::Duration;
-
-    #[derive(Clone, Debug)]
-    pub(crate) struct LoggedRequest {
-        pub method: String,
-        pub path: String,
-    }
-
-    #[derive(Clone, Debug)]
-    struct MockDriveFile {
-        id: String,
-        name: String,
-        parents: Vec<String>,
-        content: Vec<u8>,
-    }
-
-    #[derive(Default)]
-    struct ServerState {
-        next_id: usize,
-        files: BTreeMap<String, MockDriveFile>,
-        requests: Vec<LoggedRequest>,
-    }
-
-    #[derive(Deserialize)]
-    #[serde(rename_all = "camelCase")]
-    struct CreateFileBody {
-        name: String,
-        parents: Option<Vec<String>>,
-    }
-
-    pub(crate) struct MockGoogleDriveServer {
-        base_url: String,
-        shutdown: Arc<AtomicBool>,
-        state: Arc<Mutex<ServerState>>,
-        handle: Option<JoinHandle<()>>,
-    }
-
-    impl MockGoogleDriveServer {
-        pub(crate) fn start() -> Self {
-            let listener = TcpListener::bind("127.0.0.1:0").expect("bind mock google drive");
-            listener
-                .set_nonblocking(true)
-                .expect("configure mock google drive listener");
-            let address = listener
-                .local_addr()
-                .expect("resolve mock google drive address");
-            let shutdown = Arc::new(AtomicBool::new(false));
-            let state = Arc::new(Mutex::new(ServerState::default()));
-            let shutdown_for_thread = Arc::clone(&shutdown);
-            let state_for_thread = Arc::clone(&state);
-
-            let handle = thread::spawn(move || {
-                while !shutdown_for_thread.load(Ordering::SeqCst) {
-                    match listener.accept() {
-                        Ok((stream, _)) => {
-                            handle_stream(stream, &state_for_thread);
-                        }
-                        Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                            thread::sleep(Duration::from_millis(10));
-                        }
-                        Err(_) => break,
-                    }
-                }
-            });
-
-            Self {
-                base_url: format!("http://{}", address),
-                shutdown,
-                state,
-                handle: Some(handle),
-            }
-        }
-
-        pub(crate) fn base_url(&self) -> &str {
-            &self.base_url
-        }
-
-        pub(crate) fn file_names(&self) -> Vec<String> {
-            self.state
-                .lock()
-                .expect("lock mock google drive state")
-                .files
-                .values()
-                .map(|file| file.name.clone())
-                .collect()
-        }
-
-        pub(crate) fn insert_file(&self, name: &str, parent: &str, content: Vec<u8>) {
-            let mut state = self.state.lock().expect("lock mock google drive state");
-            state.next_id += 1;
-            let file_id = format!("file-{}", state.next_id);
-            state.files.insert(
-                file_id.clone(),
-                MockDriveFile {
-                    id: file_id,
-                    name: name.to_owned(),
-                    parents: vec![parent.to_owned()],
-                    content,
-                },
-            );
-        }
-
-        pub(crate) fn requests(&self) -> Vec<LoggedRequest> {
-            self.state
-                .lock()
-                .expect("lock mock google drive state")
-                .requests
-                .clone()
-        }
-    }
-
-    impl Drop for MockGoogleDriveServer {
-        fn drop(&mut self) {
-            self.shutdown.store(true, Ordering::SeqCst);
-            if let Some(handle) = self.handle.take() {
-                handle.join().expect("join mock google drive thread");
-            }
-        }
-    }
-
-    fn handle_stream(mut stream: TcpStream, state: &Arc<Mutex<ServerState>>) {
-        stream
-            .set_read_timeout(Some(Duration::from_secs(2)))
-            .expect("set mock google drive read timeout");
-
-        let mut buffer = Vec::new();
-        let mut header_end = None;
-        while header_end.is_none() {
-            let mut chunk = [0; 1024];
-            match stream.read(&mut chunk) {
-                Ok(0) => return,
-                Ok(read) => {
-                    buffer.extend_from_slice(&chunk[..read]);
-                    header_end = find_header_end(&buffer);
-                }
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => continue,
-                Err(_) => return,
-            }
-        }
-
-        let header_end = header_end.expect("parse mock google drive headers");
-        let header_text = String::from_utf8_lossy(&buffer[..header_end]);
-        let mut lines = header_text.split("\r\n");
-        let request_line = match lines.next() {
-            Some(line) if !line.is_empty() => line,
-            _ => return,
-        };
-        let mut request_parts = request_line.split_whitespace();
-        let method = request_parts.next().unwrap_or_default().to_owned();
-        let raw_target = request_parts.next().unwrap_or_default();
-        let (raw_path, raw_query) = raw_target.split_once('?').unwrap_or((raw_target, ""));
-        let path = decode_component(raw_path);
-        let query = parse_query(raw_query);
-
-        let mut headers = BTreeMap::new();
-        let mut content_length = 0usize;
-        for line in lines {
-            if let Some((name, value)) = line.split_once(':') {
-                let header_name = name.trim().to_ascii_lowercase();
-                let header_value = value.trim().to_owned();
-                if header_name == "content-length" {
-                    content_length = header_value.parse::<usize>().unwrap_or(0);
-                }
-                headers.insert(header_name, header_value);
-            }
-        }
-
-        while buffer.len() < header_end + 4 + content_length {
-            let mut chunk = [0; 1024];
-            match stream.read(&mut chunk) {
-                Ok(0) => break,
-                Ok(read) => buffer.extend_from_slice(&chunk[..read]),
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => continue,
-                Err(_) => break,
-            }
-        }
-        let body = buffer[header_end + 4..header_end + 4 + content_length].to_vec();
-
-        state
-            .lock()
-            .expect("lock mock google drive state")
-            .requests
-            .push(LoggedRequest {
-                method: method.clone(),
-                path: path.clone(),
-            });
-
-        match (method.as_str(), path.as_str()) {
-            ("POST", "/token") => send_json_response(
-                &mut stream,
-                200,
-                json!({
-                    "access_token": "test-access-token",
-                    "token_type": "Bearer",
-                    "expires_in": 3600,
-                }),
-            ),
-            ("GET", "/drive/v3/files") => handle_list(&mut stream, state, &query),
-            ("POST", "/drive/v3/files") => handle_create(&mut stream, state, &body),
-            ("DELETE", file_path) if file_path.starts_with("/drive/v3/files/") => {
-                handle_delete(&mut stream, state, file_path)
-            }
-            ("POST", copy_path)
-                if copy_path.starts_with("/drive/v3/files/") && copy_path.ends_with("/copy") =>
-            {
-                handle_copy(&mut stream, state, copy_path, &body)
-            }
-            ("GET", file_path)
-                if file_path.starts_with("/drive/v3/files/")
-                    && query.get("alt").map(String::as_str) == Some("media") =>
-            {
-                handle_download(&mut stream, state, file_path, headers.get("range"))
-            }
-            ("PATCH", upload_path) if upload_path.starts_with("/upload/drive/v3/files/") => {
-                handle_upload(&mut stream, state, upload_path, body)
-            }
-            _ => send_response(
-                &mut stream,
-                405,
-                "Method Not Allowed",
-                "text/plain",
-                b"unsupported",
-            ),
-        }
-    }
-
-    fn handle_list(
-        stream: &mut TcpStream,
-        state: &Arc<Mutex<ServerState>>,
-        query: &BTreeMap<String, String>,
-    ) {
-        let Some(q) = query.get("q") else {
-            send_response(stream, 400, "Bad Request", "text/plain", b"missing q");
-            return;
-        };
-        let Some((name, folder_id)) = parse_list_query(q) else {
-            send_response(stream, 400, "Bad Request", "text/plain", b"invalid q");
-            return;
-        };
-
-        let file = state
-            .lock()
-            .expect("lock mock google drive state")
-            .files
-            .values()
-            .find(|file| {
-                file.name == name && file.parents.iter().any(|parent| parent == &folder_id)
-            })
-            .cloned();
-
-        let response = match file {
-            Some(file) => json!({ "files": [{ "id": file.id }] }),
-            None => json!({ "files": [] }),
-        };
-        send_json_response(stream, 200, response);
-    }
-
-    fn handle_create(stream: &mut TcpStream, state: &Arc<Mutex<ServerState>>, body: &[u8]) {
-        let Ok(request) = serde_json::from_slice::<CreateFileBody>(body) else {
-            send_response(stream, 400, "Bad Request", "text/plain", b"invalid json");
-            return;
-        };
-        let mut state = state.lock().expect("lock mock google drive state");
-        state.next_id += 1;
-        let file_id = format!("file-{}", state.next_id);
-        state.files.insert(
-            file_id.clone(),
-            MockDriveFile {
-                id: file_id.clone(),
-                name: request.name,
-                parents: request.parents.unwrap_or_default(),
-                content: Vec::new(),
-            },
-        );
-        send_json_response(stream, 200, json!({ "id": file_id }));
-    }
-
-    fn handle_upload(
-        stream: &mut TcpStream,
-        state: &Arc<Mutex<ServerState>>,
-        path: &str,
-        body: Vec<u8>,
-    ) {
-        let file_id = path.trim_start_matches("/upload/drive/v3/files/");
-        let mut state = state.lock().expect("lock mock google drive state");
-        let Some(file) = state.files.get_mut(file_id) else {
-            send_response(
-                stream,
-                404,
-                "Not Found",
-                "application/json",
-                br#"{"error":"missing"}"#,
-            );
-            return;
-        };
-        file.content = body;
-        send_json_response(stream, 200, json!({ "id": file.id }));
-    }
-
-    fn handle_download(
-        stream: &mut TcpStream,
-        state: &Arc<Mutex<ServerState>>,
-        path: &str,
-        range_header: Option<&String>,
-    ) {
-        let file_id = path.trim_start_matches("/drive/v3/files/");
-        let Some(file) = state
-            .lock()
-            .expect("lock mock google drive state")
-            .files
-            .get(file_id)
-            .cloned()
-        else {
-            send_response(
-                stream,
-                404,
-                "Not Found",
-                "application/json",
-                br#"{"error":"missing"}"#,
-            );
-            return;
-        };
-
-        if let Some(range_header) = range_header {
-            let Some((start, end)) = parse_byte_range(range_header) else {
-                send_response(stream, 400, "Bad Request", "text/plain", b"invalid range");
-                return;
-            };
-            if start >= file.content.len() as u64 {
-                send_response(stream, 416, "Range Not Satisfiable", "text/plain", b"");
-                return;
-            }
-            let end = end.min(file.content.len().saturating_sub(1) as u64);
-            let body = &file.content[start as usize..=end as usize];
-            send_response(
-                stream,
-                206,
-                "Partial Content",
-                "application/octet-stream",
-                body,
-            );
-            return;
-        }
-
-        send_response(stream, 200, "OK", "application/octet-stream", &file.content);
-    }
-
-    fn handle_delete(stream: &mut TcpStream, state: &Arc<Mutex<ServerState>>, path: &str) {
-        let file_id = path.trim_start_matches("/drive/v3/files/");
-        let removed = state
-            .lock()
-            .expect("lock mock google drive state")
-            .files
-            .remove(file_id);
-        if removed.is_some() {
-            send_response(stream, 204, "No Content", "application/json", b"");
-        } else {
-            send_response(
-                stream,
-                404,
-                "Not Found",
-                "application/json",
-                br#"{"error":"missing"}"#,
-            );
-        }
-    }
-
-    fn handle_copy(
-        stream: &mut TcpStream,
-        state: &Arc<Mutex<ServerState>>,
-        path: &str,
-        body: &[u8],
-    ) {
-        let source_id = path
-            .trim_start_matches("/drive/v3/files/")
-            .trim_end_matches("/copy");
-        let Ok(request) = serde_json::from_slice::<CreateFileBody>(body) else {
-            send_response(stream, 400, "Bad Request", "text/plain", b"invalid json");
-            return;
-        };
-        let mut state = state.lock().expect("lock mock google drive state");
-        let Some(source) = state.files.get(source_id).cloned() else {
-            send_response(
-                stream,
-                404,
-                "Not Found",
-                "application/json",
-                br#"{"error":"missing"}"#,
-            );
-            return;
-        };
-        state.next_id += 1;
-        let file_id = format!("file-{}", state.next_id);
-        state.files.insert(
-            file_id.clone(),
-            MockDriveFile {
-                id: file_id.clone(),
-                name: request.name,
-                parents: request.parents.unwrap_or_default(),
-                content: source.content,
-            },
-        );
-        send_json_response(stream, 200, json!({ "id": file_id }));
-    }
-
-    fn send_json_response(stream: &mut TcpStream, status: u16, body: serde_json::Value) {
-        let bytes = serde_json::to_vec(&body).expect("serialize mock google drive response");
-        let reason = match status {
-            200 => "OK",
-            204 => "No Content",
-            400 => "Bad Request",
-            404 => "Not Found",
-            _ => "OK",
-        };
-        send_response(stream, status, reason, "application/json", &bytes);
-    }
-
-    fn send_response(
-        stream: &mut TcpStream,
-        status: u16,
-        reason: &str,
-        content_type: &str,
-        body: &[u8],
-    ) {
-        let response = format!(
-            "HTTP/1.1 {status} {reason}\r\nContent-Length: {}\r\nContent-Type: {content_type}\r\nConnection: close\r\n\r\n",
-            body.len()
-        );
-        stream
-            .write_all(response.as_bytes())
-            .expect("write mock google drive response headers");
-        stream
-            .write_all(body)
-            .expect("write mock google drive response body");
-        stream.flush().expect("flush mock google drive response");
-    }
-
-    fn find_header_end(buffer: &[u8]) -> Option<usize> {
-        buffer.windows(4).position(|window| window == b"\r\n\r\n")
-    }
-
-    fn parse_query(raw: &str) -> BTreeMap<String, String> {
-        raw.split('&')
-            .filter(|pair| !pair.is_empty())
-            .map(|pair| {
-                let (name, value) = pair.split_once('=').unwrap_or((pair, ""));
-                (decode_component(name), decode_component(value))
-            })
-            .collect()
-    }
-
-    fn decode_component(raw: &str) -> String {
-        let mut decoded = String::new();
-        let bytes = raw.as_bytes();
-        let mut index = 0;
-        while index < bytes.len() {
-            if bytes[index] == b'%' && index + 2 < bytes.len() {
-                let code = std::str::from_utf8(&bytes[index + 1..index + 3])
-                    .ok()
-                    .and_then(|hex| u8::from_str_radix(hex, 16).ok());
-                if let Some(code) = code {
-                    decoded.push(code as char);
-                    index += 3;
-                    continue;
-                }
-            }
-            if bytes[index] == b'+' {
-                decoded.push(' ');
-            } else {
-                decoded.push(bytes[index] as char);
-            }
-            index += 1;
-        }
-        decoded
-    }
-
-    fn parse_list_query(query: &str) -> Option<(String, String)> {
-        let name_prefix = "name = ";
-        let name_start = query.find(name_prefix)? + name_prefix.len();
-        let (name, cursor) = parse_single_quoted_literal(query, name_start)?;
-        let parent_prefix = " and ";
-        let parent_start = query[cursor..].find(parent_prefix)? + cursor + parent_prefix.len();
-        let (folder_id, _) = parse_single_quoted_literal(query, parent_start)?;
-        Some((name, folder_id))
-    }
-
-    fn parse_single_quoted_literal(input: &str, start: usize) -> Option<(String, usize)> {
-        let bytes = input.as_bytes();
-        if bytes.get(start)? != &b'\'' {
-            return None;
-        }
-        let mut index = start + 1;
-        let mut decoded = String::new();
-        while index < bytes.len() {
-            match bytes[index] {
-                b'\\' if index + 1 < bytes.len() => {
-                    decoded.push(bytes[index + 1] as char);
-                    index += 2;
-                }
-                b'\'' => return Some((decoded, index + 1)),
-                byte => {
-                    decoded.push(byte as char);
-                    index += 1;
-                }
-            }
-        }
-        None
-    }
-
-    fn parse_byte_range(header: &str) -> Option<(u64, u64)> {
-        let value = header.strip_prefix("bytes=")?;
-        let (start, end) = value.split_once('-')?;
-        Some((start.parse().ok()?, end.parse().ok()?))
-    }
-}
diff --git a/crates/sidecar/src/plugins/host_dir.rs b/crates/sidecar/src/plugins/host_dir.rs
deleted file mode 100644
index 8c977c9f3..000000000
--- a/crates/sidecar/src/plugins/host_dir.rs
+++ /dev/null
@@ -1,1290 +0,0 @@
-use nix::errno::Errno;
-#[cfg(not(target_os = "macos"))]
-use nix::fcntl::{openat2, OpenHow, ResolveFlag};
-use nix::fcntl::{readlinkat, renameat, AtFlags, OFlag};
-use nix::libc;
-
-// macOS has no `O_PATH` (metadata-only anchor fd). The host-mount code only uses
-// O_PATH fds as anchors that are re-opened via `/dev/fd/N`, so a read-only open
-// is an adequate stand-in there; the real access mode is applied on re-open.
-#[cfg(not(target_os = "macos"))]
-const O_PATH_ANCHOR: OFlag = OFlag::O_PATH;
-#[cfg(target_os = "macos")]
-const O_PATH_ANCHOR: OFlag = OFlag::O_RDONLY;
-use nix::sys::stat::{fstatat, mkdirat, utimensat, Mode, SFlag, UtimensatFlags};
-use nix::sys::time::TimeSpec;
-use nix::unistd::{chown, linkat, symlinkat, unlinkat, Gid, Uid, UnlinkatFlags};
-use secure_exec_execution::{
-    GuestModuleReader, LocalModuleResolutionCache, ModuleFsReader, ModuleResolveMode,
-    ModuleResolver,
-};
-use secure_exec_kernel::mount_plugin::{
-    FileSystemPluginFactory, OpenFileSystemPluginRequest, PluginError,
-};
-use secure_exec_kernel::mount_table::{
-    MountedFileSystem, MountedVirtualFileSystem, ReadOnlyFileSystem,
-};
-use secure_exec_kernel::resource_accounting::DEFAULT_MAX_PREAD_BYTES;
-use secure_exec_kernel::vfs::{
-    normalize_path, VfsError, VfsResult, VirtualDirEntry, VirtualFileSystem, VirtualStat,
-    VirtualTimeSpec, VirtualUtimeSpec,
-};
-use serde::Deserialize;
-use std::fs::{self, File};
-use std::io::{self, Read, Write};
-use std::os::fd::{AsRawFd, RawFd};
-use std::os::unix::fs::{FileExt, MetadataExt, OpenOptionsExt, PermissionsExt};
-use std::path::{Component, Path, PathBuf};
-use std::sync::Arc;
-
-const MAX_HOST_DIR_READ_BYTES: usize = DEFAULT_MAX_PREAD_BYTES;
-
-#[derive(Debug)]
-struct AnchoredFd {
-    fd: RawFd,
-}
-
-impl AnchoredFd {
-    #[cfg(not(target_os = "macos"))]
-    fn proc_path(&self) -> PathBuf {
-        PathBuf::from(format!("/proc/self/fd/{}", self.fd))
-    }
-
-    // macOS exposes per-fd paths under `/dev/fd/N` (the kernel dups the fd),
-    // serving the same role as Linux's `/proc/self/fd/N` for re-opening a
-    // *file* fd. Unlike `/proc/self/fd/N` it is NOT a readdir-able directory,
-    // so directory enumeration goes through [`readdir_path`]; child mutations
-    // use the fd-relative `*at` syscalls below.
-    #[cfg(target_os = "macos")]
-    fn proc_path(&self) -> PathBuf {
-        PathBuf::from(format!("/dev/fd/{}", self.fd))
-    }
-
-    // Path to enumerate this fd's directory entries. Linux can `readdir`
-    // `/proc/self/fd/N` directly; macOS `/dev/fd/N` yields `ENOTDIR`, so recover
-    // the fd's real host path via `fcntl(F_GETPATH)` (see [`anchored_fd_real_path`]).
-    #[cfg(not(target_os = "macos"))]
-    fn readdir_path(&self) -> io::Result<PathBuf> {
-        Ok(self.proc_path())
-    }
-    #[cfg(target_os = "macos")]
-    fn readdir_path(&self) -> io::Result<PathBuf> {
-        anchored_fd_real_path(self)
-    }
-}
-
-impl AsRawFd for AnchoredFd {
-    fn as_raw_fd(&self) -> RawFd {
-        self.fd
-    }
-}
-
-impl Drop for AnchoredFd {
-    fn drop(&mut self) {
-        let _ = nix::unistd::close(self.fd);
-    }
-}
-
-/// Recover the real host path an anchored fd points at. Linux reads the magic
-/// symlink `/proc/self/fd/N`; macOS uses `fcntl(F_GETPATH)` (see
-/// [`crate::macos_fs::fd_real_path`]).
-#[cfg(not(target_os = "macos"))]
-fn anchored_fd_real_path(fd: &AnchoredFd) -> io::Result<PathBuf> {
-    fs::read_link(fd.proc_path())
-}
-
-#[cfg(target_os = "macos")]
-fn anchored_fd_real_path(fd: &AnchoredFd) -> io::Result<PathBuf> {
-    crate::macos_fs::fd_real_path(fd.as_raw_fd())
-}
-
-#[derive(Debug, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct HostDirMountConfig {
-    host_path: String,
-    read_only: Option<bool>,
-}
-
-#[derive(Debug)]
-pub(crate) struct HostDirMountPlugin;
-
-pub(crate) trait HostDirReadLimitContext {
-    fn host_dir_max_read_bytes(&self) -> Option<usize>;
-}
-
-impl HostDirReadLimitContext for () {
-    fn host_dir_max_read_bytes(&self) -> Option<usize> {
-        Some(MAX_HOST_DIR_READ_BYTES)
-    }
-}
-
-impl<Context> FileSystemPluginFactory<Context> for HostDirMountPlugin
-where
-    Context: HostDirReadLimitContext,
-{
-    fn plugin_id(&self) -> &'static str {
-        "host_dir"
-    }
-
-    fn open(
-        &self,
-        request: OpenFileSystemPluginRequest<'_, Context>,
-    ) -> Result<Box<dyn MountedFileSystem>, PluginError> {
-        let max_read_bytes = request.context.host_dir_max_read_bytes();
-        self.open_with_read_limit(request, max_read_bytes)
-    }
-}
-
-impl HostDirMountPlugin {
-    fn open_with_read_limit<Context>(
-        &self,
-        request: OpenFileSystemPluginRequest<'_, Context>,
-        max_read_bytes: Option<usize>,
-    ) -> Result<Box<dyn MountedFileSystem>, PluginError> {
-        let config: HostDirMountConfig = serde_json::from_value(request.config.clone())
-            .map_err(|error| PluginError::invalid_input(error.to_string()))?;
-        let filesystem = HostDirFilesystem::new_with_read_limit(&config.host_path, max_read_bytes)?;
-        let mounted = MountedVirtualFileSystem::new(filesystem);
-
-        if config.read_only.unwrap_or(false) {
-            Ok(Box::new(ReadOnlyFileSystem::new(mounted)))
-        } else {
-            Ok(Box::new(mounted))
-        }
-    }
-}
-
-#[derive(Debug, Clone)]
-pub(crate) struct HostDirFilesystem {
-    host_root: PathBuf,
-    host_root_dir: Arc<File>,
-    max_read_bytes: Option<usize>,
-}
-
-impl HostDirFilesystem {
-    #[allow(dead_code)]
-    pub(crate) fn new(host_path: impl AsRef<Path>) -> VfsResult<Self> {
-        Self::new_with_read_limit(host_path, Some(MAX_HOST_DIR_READ_BYTES))
-    }
-
-    pub(crate) fn new_with_read_limit(
-        host_path: impl AsRef<Path>,
-        max_read_bytes: Option<usize>,
-    ) -> VfsResult<Self> {
-        let host_path_str = host_path.as_ref().to_string_lossy().into_owned();
-        let canonical_root = fs::canonicalize(host_path.as_ref())
-            .map_err(|error| io_error_to_vfs("open", &host_path_str, error))?;
-        let metadata = fs::metadata(&canonical_root)
-            .map_err(|error| io_error_to_vfs("stat", &host_path_str, error))?;
-        if !metadata.is_dir() {
-            return Err(VfsError::new(
-                "ENOTDIR",
-                format!(
-                    "host_dir root is not a directory: {}",
-                    canonical_root.display()
-                ),
-            ));
-        }
-
-        Ok(Self {
-            host_root: canonical_root.clone(),
-            host_root_dir: Arc::new(
-                File::open(&canonical_root).map_err(|error| io_error_to_vfs("open", "/", error))?,
-            ),
-            max_read_bytes,
-        })
-    }
-
-    fn ensure_within_root(&self, resolved: &Path, virtual_path: &str) -> VfsResult<()> {
-        if resolved == self.host_root {
-            return Ok(());
-        }
-
-        if resolved.starts_with(&self.host_root) {
-            return Ok(());
-        }
-
-        Err(VfsError::access_denied(
-            "open",
-            virtual_path,
-            Some("path escapes host directory"),
-        ))
-    }
-
-    fn lexical_host_path(&self, path: &str) -> VfsResult<PathBuf> {
-        let normalized = normalize_path(path);
-        let relative = normalized.trim_start_matches('/');
-        let joined = lexical_normalize_path(&self.host_root.join(relative));
-        self.ensure_within_root(&joined, &normalized)?;
-        Ok(joined)
-    }
-
-    fn relative_virtual_path(&self, path: &str) -> (String, PathBuf) {
-        let normalized = normalize_path(path);
-        let relative = normalized.trim_start_matches('/');
-        let relative = if relative.is_empty() {
-            PathBuf::from(".")
-        } else {
-            PathBuf::from(relative)
-        };
-        (normalized, relative)
-    }
-
-    #[cfg(not(target_os = "macos"))]
-    fn resolve_flags() -> ResolveFlag {
-        ResolveFlag::RESOLVE_BENEATH | ResolveFlag::RESOLVE_NO_MAGICLINKS
-    }
-
-    fn open_beneath(&self, relative: &Path, flags: OFlag, mode: Mode) -> VfsResult<AnchoredFd> {
-        let relative_display = relative.display().to_string();
-        let fd = self
-            .resolve_beneath_fd(relative, flags, mode)
-            .map_err(|error| match error {
-                Errno::EXDEV => VfsError::access_denied(
-                    "open",
-                    &relative_display,
-                    Some("path escapes host directory"),
-                ),
-                other => io_error_to_vfs("open", &relative_display, nix_to_io(other)),
-            })?;
-        Ok(AnchoredFd { fd })
-    }
-
-    /// Open `relative` strictly beneath the mount root, returning an owned raw
-    /// fd. Linux uses `openat2(RESOLVE_BENEATH | RESOLVE_NO_MAGICLINKS)`; macOS
-    /// has no such syscall and uses cap-std's audited resolve-beneath instead
-    /// (see [`crate::macos_fs`]).
-    #[cfg(not(target_os = "macos"))]
-    fn resolve_beneath_fd(
-        &self,
-        relative: &Path,
-        flags: OFlag,
-        mode: Mode,
-    ) -> Result<RawFd, Errno> {
-        openat2(
-            self.host_root_dir.as_raw_fd(),
-            relative,
-            OpenHow::new()
-                .flags(flags | OFlag::O_CLOEXEC)
-                .mode(mode)
-                .resolve(Self::resolve_flags()),
-        )
-    }
-
-    #[cfg(target_os = "macos")]
-    fn resolve_beneath_fd(
-        &self,
-        relative: &Path,
-        flags: OFlag,
-        mode: Mode,
-    ) -> Result<RawFd, Errno> {
-        crate::macos_fs::resolve_beneath(&self.host_root, relative, flags, mode)
-    }
-
-    fn open_directory_beneath(&self, relative: &Path) -> VfsResult<AnchoredFd> {
-        self.open_beneath(
-            relative,
-            OFlag::O_DIRECTORY | OFlag::O_RDONLY,
-            Mode::empty(),
-        )
-    }
-
-    fn host_path_for_fd(&self, fd: &AnchoredFd, virtual_path: &str) -> VfsResult<PathBuf> {
-        let host_path = anchored_fd_real_path(fd)
-            .map_err(|error| io_error_to_vfs("open", virtual_path, error))?;
-        self.ensure_within_root(&host_path, virtual_path)?;
-        Ok(host_path)
-    }
-
-    #[cfg(not(target_os = "macos"))]
-    fn open_metadata_beneath(&self, path: &str, op: &'static str) -> VfsResult<AnchoredFd> {
-        let (_, relative) = self.relative_virtual_path(path);
-        let handle =
-            self.open_beneath(&relative, O_PATH_ANCHOR | OFlag::O_NOFOLLOW, Mode::empty())?;
-        let metadata =
-            fs::metadata(handle.proc_path()).map_err(|error| io_error_to_vfs(op, path, error))?;
-        if metadata.file_type().is_symlink() {
-            return Err(VfsError::new(
-                "EPERM",
-                format!("{op} '{path}': metadata operations do not follow symlinks"),
-            ));
-        }
-        Ok(handle)
-    }
-
-    // macOS has no `O_PATH`, and `open(O_NOFOLLOW)` on a symlink fails outright,
-    // so the Linux path above (open the link as an anchor, then inspect it)
-    // cannot run — the resolve-beneath refusal instead surfaces as `EACCES`,
-    // diverging from Linux's `EPERM`. Detect the symlink directly: `lstat` the
-    // final component through the resolved parent fd and reject it with `EPERM`;
-    // otherwise open the (non-symlink) target as the metadata anchor.
-    #[cfg(target_os = "macos")]
-    fn open_metadata_beneath(&self, path: &str, op: &'static str) -> VfsResult<AnchoredFd> {
-        // The mount root has no final component to lstat and is always a
-        // directory (never a symlink), so open it directly as the anchor —
-        // matching Linux, where the `O_PATH | O_NOFOLLOW` open of the root
-        // succeeds. (`split_parent` would otherwise reject `/` with EINVAL.)
-        let (_, root_relative) = self.relative_virtual_path(path);
-        if root_relative.file_name().is_none() {
-            return self.open_beneath(&root_relative, O_PATH_ANCHOR, Mode::empty());
-        }
-        let (parent_dir, _, name, normalized) = self.split_parent(path, false)?;
-        let stat = fstatat(
-            Some(parent_dir.as_raw_fd()),
-            name.as_os_str(),
-            AtFlags::AT_SYMLINK_NOFOLLOW,
-        )
-        .map_err(|error| io_error_to_vfs(op, &normalized, nix_to_io(error)))?;
-        if stat.st_mode & SFlag::S_IFMT.bits() == SFlag::S_IFLNK.bits() {
-            return Err(VfsError::new(
-                "EPERM",
-                format!("{op} '{path}': metadata operations do not follow symlinks"),
-            ));
-        }
-        let (_, relative) = self.relative_virtual_path(path);
-        self.open_beneath(&relative, O_PATH_ANCHOR, Mode::empty())
-    }
-
-    fn ensure_directory_tree(
-        &self,
-        relative_dir: &Path,
-        virtual_path: &str,
-        mode: u32,
-    ) -> VfsResult<()> {
-        if relative_dir == Path::new(".") {
-            return Ok(());
-        }
-
-        let mut prefix = PathBuf::new();
-        for component in relative_dir.components() {
-            match component {
-                Component::Normal(segment) => prefix.push(segment),
-                Component::CurDir => continue,
-                _ => {
-                    return Err(VfsError::new(
-                        "EINVAL",
-                        format!("invalid host_dir component in {virtual_path}"),
-                    ));
-                }
-            }
-
-            if self.open_directory_beneath(&prefix).is_ok() {
-                continue;
-            }
-
-            let parent = match prefix.parent() {
-                Some(parent) if !parent.as_os_str().is_empty() => parent,
-                _ => Path::new("."),
-            };
-            let parent_dir = self.open_directory_beneath(parent)?;
-            let name = prefix.file_name().ok_or_else(|| {
-                VfsError::new("EINVAL", format!("invalid directory path: {virtual_path}"))
-            })?;
-            match mkdirat(
-                Some(parent_dir.as_raw_fd()),
-                name,
-                Mode::from_bits_truncate(mode as _),
-            ) {
-                Ok(()) => {}
-                Err(Errno::EEXIST) => {}
-                Err(error) => {
-                    return Err(io_error_to_vfs("mkdir", virtual_path, nix_to_io(error)));
-                }
-            }
-        }
-
-        Ok(())
-    }
-
-    fn split_parent(
-        &self,
-        path: &str,
-        create_parent_dirs: bool,
-    ) -> VfsResult<(AnchoredFd, PathBuf, std::ffi::OsString, String)> {
-        let (normalized, relative) = self.relative_virtual_path(path);
-        let name = relative.file_name().ok_or_else(|| {
-            VfsError::new(
-                "EINVAL",
-                format!("path does not reference an entry: {normalized}"),
-            )
-        })?;
-        let parent = match relative.parent() {
-            Some(parent) if !parent.as_os_str().is_empty() => parent.to_path_buf(),
-            _ => PathBuf::from("."),
-        };
-        if create_parent_dirs {
-            self.ensure_directory_tree(&parent, &normalized, 0o755)?;
-        }
-        let parent_dir = self.open_directory_beneath(&parent)?;
-        Ok((parent_dir, parent, name.to_os_string(), normalized))
-    }
-
-    fn host_to_virtual_path(&self, host_path: &Path, virtual_path: &str) -> VfsResult<String> {
-        let normalized = lexical_normalize_path(host_path);
-        self.ensure_within_root(&normalized, virtual_path)?;
-        let relative = normalized.strip_prefix(&self.host_root).map_err(|_| {
-            VfsError::access_denied("open", virtual_path, Some("path escapes host directory"))
-        })?;
-
-        if relative.as_os_str().is_empty() {
-            return Ok(String::from("/"));
-        }
-
-        let segments = relative
-            .components()
-            .filter_map(|component| match component {
-                Component::Normal(segment) => Some(segment.to_string_lossy().into_owned()),
-                _ => None,
-            })
-            .collect::<Vec<_>>();
-        Ok(format!("/{}", segments.join("/")))
-    }
-
-    fn existing_utime_specs(
-        &self,
-        parent_dir: &AnchoredFd,
-        name: &std::ffi::OsStr,
-        virtual_path: &str,
-        follow_symlinks: bool,
-    ) -> VfsResult<(VirtualTimeSpec, VirtualTimeSpec)> {
-        let flags = if follow_symlinks {
-            AtFlags::empty()
-        } else {
-            AtFlags::AT_SYMLINK_NOFOLLOW
-        };
-        let stat = fstatat(Some(parent_dir.as_raw_fd()), name, flags)
-            .map_err(|error| io_error_to_vfs("utimes", virtual_path, nix_to_io(error)))?;
-        let atime = VirtualTimeSpec::new(
-            stat.st_atime,
-            stat.st_atime_nsec.clamp(0, 999_999_999) as u32,
-        )?;
-        let mtime = VirtualTimeSpec::new(
-            stat.st_mtime,
-            stat.st_mtime_nsec.clamp(0, 999_999_999) as u32,
-        )?;
-        Ok((atime, mtime))
-    }
-
-    fn resolve_utime_timespec(spec: VirtualUtimeSpec, existing: VirtualTimeSpec) -> TimeSpec {
-        match spec {
-            VirtualUtimeSpec::Set(spec) => TimeSpec::new(spec.sec, spec.nsec as libc::c_long),
-            VirtualUtimeSpec::Now => TimeSpec::new(0, libc::UTIME_NOW),
-            VirtualUtimeSpec::Omit => TimeSpec::new(existing.sec, libc::UTIME_OMIT),
-        }
-    }
-
-    fn apply_utimens(
-        &self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-        follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        if follow_symlinks {
-            let _ = self.open_metadata_beneath(path, "utimes")?;
-        }
-        let (parent_dir, _, name, normalized) = self.split_parent(path, false)?;
-        let existing = match (atime, mtime) {
-            (VirtualUtimeSpec::Omit, _) | (_, VirtualUtimeSpec::Omit) => {
-                Some(self.existing_utime_specs(
-                    &parent_dir,
-                    name.as_os_str(),
-                    &normalized,
-                    follow_symlinks,
-                )?)
-            }
-            _ => None,
-        };
-        let existing_atime = existing
-            .as_ref()
-            .map(|(atime, _)| *atime)
-            .unwrap_or(VirtualTimeSpec { sec: 0, nsec: 0 });
-        let existing_mtime = existing
-            .as_ref()
-            .map(|(_, mtime)| *mtime)
-            .unwrap_or(VirtualTimeSpec { sec: 0, nsec: 0 });
-        let times = [
-            Self::resolve_utime_timespec(atime, existing_atime),
-            Self::resolve_utime_timespec(mtime, existing_mtime),
-        ];
-        let flags = if follow_symlinks {
-            UtimensatFlags::FollowSymlink
-        } else {
-            UtimensatFlags::NoFollowSymlink
-        };
-        utimensat(
-            Some(parent_dir.as_raw_fd()),
-            name.as_os_str(),
-            &times[0],
-            &times[1],
-            flags,
-        )
-        .map_err(|error| io_error_to_vfs("utimes", &normalized, nix_to_io(error)))
-    }
-
-    fn stat_from_metadata(metadata: fs::Metadata) -> VirtualStat {
-        let atime_ms = metadata.atime().max(0) as u64 * 1_000
-            + (metadata.atime_nsec().max(0) as u64 / 1_000_000);
-        let atime_nsec = metadata.atime_nsec().clamp(0, 999_999_999) as u32;
-        let mtime_ms = metadata.mtime().max(0) as u64 * 1_000
-            + (metadata.mtime_nsec().max(0) as u64 / 1_000_000);
-        let mtime_nsec = metadata.mtime_nsec().clamp(0, 999_999_999) as u32;
-        let ctime_ms = metadata.ctime().max(0) as u64 * 1_000
-            + (metadata.ctime_nsec().max(0) as u64 / 1_000_000);
-        let ctime_nsec = metadata.ctime_nsec().clamp(0, 999_999_999) as u32;
-        VirtualStat {
-            mode: metadata.mode(),
-            size: metadata.size(),
-            blocks: metadata.blocks(),
-            dev: metadata.dev(),
-            rdev: metadata.rdev(),
-            is_directory: metadata.is_dir(),
-            is_symbolic_link: metadata.file_type().is_symlink(),
-            atime_ms,
-            atime_nsec,
-            mtime_ms,
-            mtime_nsec,
-            ctime_ms,
-            ctime_nsec,
-            birthtime_ms: ctime_ms,
-            ino: metadata.ino(),
-            nlink: metadata.nlink(),
-            uid: metadata.uid(),
-            gid: metadata.gid(),
-        }
-    }
-
-    #[allow(clippy::unnecessary_cast)]
-    fn stat_from_file_stat(stat: nix::sys::stat::FileStat) -> VirtualStat {
-        let file_type = SFlag::from_bits_truncate(stat.st_mode);
-        let atime_ms =
-            stat.st_atime.max(0) as u64 * 1_000 + (stat.st_atime_nsec.max(0) as u64 / 1_000_000);
-        let atime_nsec = stat.st_atime_nsec.clamp(0, 999_999_999) as u32;
-        let mtime_ms =
-            stat.st_mtime.max(0) as u64 * 1_000 + (stat.st_mtime_nsec.max(0) as u64 / 1_000_000);
-        let mtime_nsec = stat.st_mtime_nsec.clamp(0, 999_999_999) as u32;
-        let ctime_ms =
-            stat.st_ctime.max(0) as u64 * 1_000 + (stat.st_ctime_nsec.max(0) as u64 / 1_000_000);
-        let ctime_nsec = stat.st_ctime_nsec.clamp(0, 999_999_999) as u32;
-
-        VirtualStat {
-            // Widen for platform differences: mode_t/dev_t/nlink_t are narrower
-            // on macOS (u16/i32/u16) than on Linux.
-            mode: stat.st_mode as u32,
-            size: stat.st_size as u64,
-            blocks: stat.st_blocks as u64,
-            dev: stat.st_dev as u64,
-            rdev: stat.st_rdev as u64,
-            is_directory: file_type == SFlag::S_IFDIR,
-            is_symbolic_link: file_type == SFlag::S_IFLNK,
-            atime_ms,
-            atime_nsec,
-            mtime_ms,
-            mtime_nsec,
-            ctime_ms,
-            ctime_nsec,
-            birthtime_ms: ctime_ms,
-            ino: stat.st_ino,
-            // st_nlink is u64 on x86_64 but u32 on aarch64 / u16 on macOS; widen.
-            nlink: stat.st_nlink as u64,
-            uid: stat.st_uid,
-            gid: stat.st_gid,
-        }
-    }
-
-    fn write_all_at(
-        &self,
-        file: &File,
-        content: &[u8],
-        mut offset: u64,
-        path: &str,
-    ) -> VfsResult<()> {
-        let mut written = 0usize;
-        while written < content.len() {
-            let bytes_written = file
-                .write_at(&content[written..], offset)
-                .map_err(|error| io_error_to_vfs("write", path, error))?;
-            if bytes_written == 0 {
-                return Err(io_error_to_vfs(
-                    "write",
-                    path,
-                    io::Error::new(io::ErrorKind::WriteZero, "failed to write whole buffer"),
-                ));
-            }
-
-            written += bytes_written;
-            offset = offset.checked_add(bytes_written as u64).ok_or_else(|| {
-                VfsError::new("EINVAL", format!("pwrite offset overflow: {path}"))
-            })?;
-        }
-
-        Ok(())
-    }
-
-    fn check_read_length(&self, path: &str, length: usize) -> VfsResult<()> {
-        if let Some(limit) = self.max_read_bytes {
-            if length <= limit {
-                return Ok(());
-            }
-
-            return Err(VfsError::new(
-                "EINVAL",
-                format!("read length {length} exceeds host_dir limit {limit}: {path}"),
-            ));
-        }
-
-        Ok(())
-    }
-
-    fn check_full_read_metadata(&self, path: &str, size: u64) -> VfsResult<()> {
-        if let Some(limit) = self.max_read_bytes {
-            if size <= limit as u64 {
-                return Ok(());
-            }
-
-            return Err(VfsError::new(
-                "EINVAL",
-                format!("file size {size} exceeds host_dir read limit {limit}: {path}"),
-            ));
-        }
-
-        Ok(())
-    }
-
-    fn read_to_end_bounded(&self, file: &mut File, path: &str) -> VfsResult<Vec<u8>> {
-        let mut buffer = Vec::new();
-        match self.max_read_bytes {
-            Some(limit) => {
-                Read::by_ref(file)
-                    .take((limit as u64).saturating_add(1))
-                    .read_to_end(&mut buffer)
-                    .map_err(|error| io_error_to_vfs("open", path, error))?;
-            }
-            None => {
-                file.read_to_end(&mut buffer)
-                    .map_err(|error| io_error_to_vfs("open", path, error))?;
-            }
-        }
-        self.check_read_length(path, buffer.len())?;
-        Ok(buffer)
-    }
-
-    fn write_file_with_creation_mode(
-        &mut self,
-        path: &str,
-        content: Vec<u8>,
-        file_mode: u32,
-    ) -> VfsResult<()> {
-        let (_, relative) = self.relative_virtual_path(path);
-        if let Some(parent) = relative.parent() {
-            self.ensure_directory_tree(parent, path, 0o755)?;
-        }
-        let handle = self.open_beneath(
-            &relative,
-            OFlag::O_WRONLY | OFlag::O_CREAT | OFlag::O_TRUNC,
-            Mode::from_bits_truncate(file_mode as _),
-        )?;
-        let mut file = File::options()
-            .write(true)
-            .custom_flags(libc::O_CLOEXEC)
-            .open(handle.proc_path())
-            .map_err(|error| io_error_to_vfs("write", path, error))?;
-        file.write_all(&content)
-            .map_err(|error| io_error_to_vfs("write", path, error))
-    }
-
-    fn create_dir_with_creation_mode(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        let (parent_dir, _, name, normalized) = self.split_parent(path, false)?;
-        mkdirat(
-            Some(parent_dir.as_raw_fd()),
-            name.as_os_str(),
-            Mode::from_bits_truncate(mode as _),
-        )
-        .map_err(|error| io_error_to_vfs("mkdir", &normalized, nix_to_io(error)))
-    }
-
-    fn mkdir_with_creation_mode(
-        &mut self,
-        path: &str,
-        recursive: bool,
-        mode: u32,
-    ) -> VfsResult<()> {
-        if recursive {
-            let (normalized, relative) = self.relative_virtual_path(path);
-            self.ensure_directory_tree(&relative, &normalized, mode)
-        } else {
-            self.create_dir_with_creation_mode(path, mode)
-        }
-    }
-}
-
-impl VirtualFileSystem for HostDirFilesystem {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        let (_, relative) = self.relative_virtual_path(path);
-        let handle = self.open_beneath(&relative, OFlag::O_RDONLY, Mode::empty())?;
-        let mut file =
-            File::open(handle.proc_path()).map_err(|error| io_error_to_vfs("open", path, error))?;
-        self.check_full_read_metadata(
-            path,
-            file.metadata()
-                .map_err(|error| io_error_to_vfs("open", path, error))?
-                .len(),
-        )?;
-        self.read_to_end_bounded(&mut file, path)
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        let (_, relative) = self.relative_virtual_path(path);
-        let directory = self.open_directory_beneath(&relative)?;
-        let readdir_path = directory
-            .readdir_path()
-            .map_err(|error| io_error_to_vfs("readdir", path, error))?;
-        let mut entries = fs::read_dir(readdir_path)
-            .map_err(|error| io_error_to_vfs("readdir", path, error))?
-            .map(|entry| {
-                entry
-                    .map_err(|error| io_error_to_vfs("readdir", path, error))
-                    .map(|entry| entry.file_name().to_string_lossy().into_owned())
-            })
-            .collect::<VfsResult<Vec<_>>>()?;
-        entries.sort();
-        Ok(entries)
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        let (_, relative) = self.relative_virtual_path(path);
-        let directory = self.open_directory_beneath(&relative)?;
-        let readdir_path = directory
-            .readdir_path()
-            .map_err(|error| io_error_to_vfs("readdir", path, error))?;
-        let mut entries = fs::read_dir(readdir_path)
-            .map_err(|error| io_error_to_vfs("readdir", path, error))?
-            .map(|entry| {
-                let entry = entry.map_err(|error| io_error_to_vfs("readdir", path, error))?;
-                let file_type = entry
-                    .file_type()
-                    .map_err(|error| io_error_to_vfs("readdir", path, error))?;
-                Ok(VirtualDirEntry {
-                    name: entry.file_name().to_string_lossy().into_owned(),
-                    is_directory: file_type.is_dir(),
-                    is_symbolic_link: file_type.is_symlink(),
-                })
-            })
-            .collect::<VfsResult<Vec<_>>>()?;
-        entries.sort_by(|left, right| left.name.cmp(&right.name));
-        Ok(entries)
-    }
-
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        self.write_file_with_creation_mode(path, content.into(), 0o644)
-    }
-
-    fn write_file_with_mode(
-        &mut self,
-        path: &str,
-        content: impl Into<Vec<u8>>,
-        mode: Option<u32>,
-    ) -> VfsResult<()> {
-        self.write_file_with_creation_mode(path, content.into(), mode.unwrap_or(0o666))
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.create_dir_with_creation_mode(path, 0o755)
-    }
-
-    fn create_dir_with_mode(&mut self, path: &str, mode: Option<u32>) -> VfsResult<()> {
-        self.create_dir_with_creation_mode(path, mode.unwrap_or(0o777))
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        self.mkdir_with_creation_mode(path, recursive, 0o755)
-    }
-
-    fn mkdir_with_mode(&mut self, path: &str, recursive: bool, mode: Option<u32>) -> VfsResult<()> {
-        self.mkdir_with_creation_mode(path, recursive, mode.unwrap_or(0o777))
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        let (_, relative) = self.relative_virtual_path(path);
-        self.open_beneath(&relative, O_PATH_ANCHOR, Mode::empty())
-            .is_ok()
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        let (_, relative) = self.relative_virtual_path(path);
-        let handle = self.open_beneath(&relative, O_PATH_ANCHOR, Mode::empty())?;
-        fs::metadata(handle.proc_path())
-            .map(Self::stat_from_metadata)
-            .map_err(|error| io_error_to_vfs("stat", path, error))
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        let (parent_dir, _, name, normalized) = self.split_parent(path, false)?;
-        unlinkat(
-            Some(parent_dir.as_raw_fd()),
-            name.as_os_str(),
-            UnlinkatFlags::NoRemoveDir,
-        )
-        .map_err(|error| io_error_to_vfs("unlink", &normalized, nix_to_io(error)))
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        let (parent_dir, _, name, normalized) = self.split_parent(path, false)?;
-        unlinkat(
-            Some(parent_dir.as_raw_fd()),
-            name.as_os_str(),
-            UnlinkatFlags::RemoveDir,
-        )
-        .map_err(|error| io_error_to_vfs("rmdir", &normalized, nix_to_io(error)))
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let (old_parent_dir, _, old_name, old_normalized) = self.split_parent(old_path, false)?;
-        let (new_parent_dir, _, new_name, _) = self.split_parent(new_path, true)?;
-        renameat(
-            Some(old_parent_dir.as_raw_fd()),
-            old_name.as_os_str(),
-            Some(new_parent_dir.as_raw_fd()),
-            new_name.as_os_str(),
-        )
-        .map_err(|error| io_error_to_vfs("rename", &old_normalized, nix_to_io(error)))
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        let (_, relative) = self.relative_virtual_path(path);
-        let file = self.open_beneath(&relative, O_PATH_ANCHOR, Mode::empty())?;
-        let resolved = self.host_path_for_fd(&file, path)?;
-        self.host_to_virtual_path(&resolved, path)
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        let (parent_dir, _, name, normalized) = self.split_parent(link_path, true)?;
-        let parent_host_path = self.host_path_for_fd(&parent_dir, &normalized)?;
-        let host_link_path = parent_host_path.join(&name);
-
-        let link_virtual_path = normalize_path(link_path);
-        let target_virtual_path = if target.starts_with('/') {
-            normalize_path(target)
-        } else {
-            normalize_path(&format!(
-                "{}/{}",
-                virtual_dirname(&link_virtual_path),
-                target
-            ))
-        };
-        let host_target_path = self.lexical_host_path(&target_virtual_path)?;
-        let relative_target = relative_path(
-            host_link_path.parent().unwrap_or(self.host_root.as_path()),
-            &host_target_path,
-        );
-        symlinkat(
-            &relative_target,
-            Some(parent_dir.as_raw_fd()),
-            name.as_os_str(),
-        )
-        .map_err(|error| io_error_to_vfs("symlink", link_path, nix_to_io(error)))
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        let (parent_dir, _, name, normalized) = self.split_parent(path, false)?;
-        let parent_host_path = self.host_path_for_fd(&parent_dir, &normalized)?;
-        let host_link_path = parent_host_path.join(&name);
-        let link_target = readlinkat(Some(parent_dir.as_raw_fd()), name.as_os_str())
-            .map_err(|error| io_error_to_vfs("readlink", path, nix_to_io(error)))?;
-        let link_target_path = PathBuf::from(&link_target);
-        let resolved_target = if link_target_path.is_absolute() {
-            lexical_normalize_path(&link_target_path)
-        } else {
-            lexical_normalize_path(
-                &host_link_path
-                    .parent()
-                    .unwrap_or(self.host_root.as_path())
-                    .join(link_target_path),
-            )
-        };
-        self.host_to_virtual_path(&resolved_target, path)
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        if normalize_path(path) == "/" {
-            return self
-                .host_root_dir
-                .metadata()
-                .map(Self::stat_from_metadata)
-                .map_err(|error| io_error_to_vfs("lstat", path, error));
-        }
-
-        let (parent_dir, _, name, normalized) = self.split_parent(path, false)?;
-        fstatat(
-            Some(parent_dir.as_raw_fd()),
-            name.as_os_str(),
-            AtFlags::AT_SYMLINK_NOFOLLOW,
-        )
-        .map(Self::stat_from_file_stat)
-        .map_err(|error| io_error_to_vfs("lstat", &normalized, nix_to_io(error)))
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let (old_parent_dir, _, old_name, _) = self.split_parent(old_path, false)?;
-        let (new_parent_dir, _, new_name, new_normalized) = self.split_parent(new_path, true)?;
-        linkat(
-            Some(old_parent_dir.as_raw_fd()),
-            old_name.as_os_str(),
-            Some(new_parent_dir.as_raw_fd()),
-            new_name.as_os_str(),
-            AtFlags::empty(),
-        )
-        .map_err(|error| io_error_to_vfs("link", &new_normalized, nix_to_io(error)))
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        let handle = self.open_metadata_beneath(path, "chmod")?;
-        fs::set_permissions(handle.proc_path(), fs::Permissions::from_mode(mode))
-            .map_err(|error| io_error_to_vfs("chmod", path, error))
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        let handle = self.open_metadata_beneath(path, "chown")?;
-        chown(
-            handle.proc_path().as_path(),
-            Some(Uid::from_raw(uid)),
-            Some(Gid::from_raw(gid)),
-        )
-        .map_err(|error| VfsError::new(error_code(&error), error.to_string()))
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        self.apply_utimens(
-            path,
-            VirtualUtimeSpec::Set(VirtualTimeSpec::from_millis(atime_ms)),
-            VirtualUtimeSpec::Set(VirtualTimeSpec::from_millis(mtime_ms)),
-            true,
-        )
-    }
-
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-        follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        self.apply_utimens(path, atime, mtime, follow_symlinks)
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        let (_, relative) = self.relative_virtual_path(path);
-        let handle = self.open_beneath(&relative, OFlag::O_WRONLY, Mode::empty())?;
-        let file = File::options()
-            .write(true)
-            .open(handle.proc_path())
-            .map_err(|error| io_error_to_vfs("truncate", path, error))?;
-        file.set_len(length)
-            .map_err(|error| io_error_to_vfs("truncate", path, error))
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        self.check_read_length(path, length)?;
-        let (_, relative) = self.relative_virtual_path(path);
-        let handle = self.open_beneath(&relative, OFlag::O_RDONLY, Mode::empty())?;
-        let file =
-            File::open(handle.proc_path()).map_err(|error| io_error_to_vfs("open", path, error))?;
-        let mut buffer = vec![0; length];
-        let bytes_read = file
-            .read_at(&mut buffer, offset)
-            .map_err(|error| io_error_to_vfs("open", path, error))?;
-        buffer.truncate(bytes_read);
-        Ok(buffer)
-    }
-
-    fn pwrite(&mut self, path: &str, content: impl Into<Vec<u8>>, offset: u64) -> VfsResult<()> {
-        let (_, relative) = self.relative_virtual_path(path);
-        let handle = self.open_beneath(&relative, OFlag::O_WRONLY, Mode::empty())?;
-        let file = File::options()
-            .write(true)
-            .open(handle.proc_path())
-            .map_err(|error| io_error_to_vfs("open", path, error))?;
-        let content = content.into();
-        self.write_all_at(&file, &content, offset, path)
-    }
-}
-
-/// One read-only `host_dir`/`module_access` mount, keyed by its guest mount
-/// point. The filesystem reads mount-relative virtual paths (e.g. `/foo/index.js`
-/// for a mount at `/root/node_modules`).
-// `dead_code` is allowed because `host_dir.rs` is also `#[path]`-included by
-// `tests/host_dir.rs`, whose test compilation exercises only the filesystem
-// plugin and not the module-reader path (which the real lib build does use).
-#[allow(dead_code)]
-#[derive(Clone)]
-struct HostDirModuleMount {
-    /// Normalized guest mount point, e.g. `/root/node_modules`.
-    guest_prefix: String,
-    filesystem: HostDirFilesystem,
-}
-
-#[allow(dead_code)]
-impl HostDirModuleMount {
-    /// If `guest_path` falls under this mount, return the mount-relative virtual
-    /// path (always absolute, e.g. `/foo/index.js`).
-    fn relative_virtual_path(&self, guest_path: &str) -> Option<String> {
-        if guest_path == self.guest_prefix {
-            return Some(String::from("/"));
-        }
-        let prefix_with_sep = if self.guest_prefix == "/" {
-            String::from("/")
-        } else {
-            format!("{}/", self.guest_prefix)
-        };
-        let rest = guest_path.strip_prefix(&prefix_with_sep)?;
-        Some(format!("/{rest}"))
-    }
-
-    /// Re-express a mount-relative virtual path (e.g. `/foo/index.js`) as a guest
-    /// path under this mount (e.g. `/root/node_modules/foo/index.js`).
-    fn guest_path_for_relative(&self, relative: &str) -> String {
-        let trimmed = relative.trim_start_matches('/');
-        if self.guest_prefix == "/" {
-            if trimmed.is_empty() {
-                String::from("/")
-            } else {
-                format!("/{trimmed}")
-            }
-        } else if trimmed.is_empty() {
-            self.guest_prefix.clone()
-        } else {
-            format!("{}/{trimmed}", self.guest_prefix)
-        }
-    }
-}
-
-/// A `Send`-able, clonable, read-only [`ModuleFsReader`] over one or more mounted
-/// `host_dir`/`module_access` filesystems. It lets module resolution run on the
-/// V8 bridge thread — concurrently with the sidecar service loop — while still
-/// reading exactly the mounted `node_modules` tree the guest sees (anchored
-/// `openat2(RESOLVE_BENEATH)` with escaping-symlink refusal), instead of the
-/// host-direct path translator.
-///
-/// It never touches the `&mut` kernel, so a large cold-start module graph cannot
-/// serialize behind / starve work on the service-loop thread (e.g. an ACP
-/// `session/new` bootstrap awaiting the adapter's response on that same loop).
-#[allow(dead_code)]
-#[derive(Clone)]
-pub(crate) struct HostDirModuleReader {
-    /// Mounts sorted longest-`guest_prefix`-first so the most specific mount
-    /// wins (mirrors the kernel mount table's longest-prefix dispatch).
-    mounts: Vec<HostDirModuleMount>,
-}
-
-#[allow(dead_code)]
-impl HostDirModuleReader {
-    /// Build a reader from `(guest_path, host_path)` pairs for the VM's read-only
-    /// `host_dir`/`module_access` mounts. Mounts whose host root cannot be opened
-    /// are skipped. Returns `None` if no usable mount remains, so callers fall
-    /// back to the service-loop kernel reader.
-    pub(crate) fn from_mounts<I, G, H>(mounts: I) -> Option<Self>
-    where
-        I: IntoIterator<Item = (G, H)>,
-        G: AsRef<str>,
-        H: AsRef<Path>,
-    {
-        let mut entries = mounts
-            .into_iter()
-            .filter_map(|(guest_path, host_path)| {
-                let filesystem = HostDirFilesystem::new_with_read_limit(
-                    host_path.as_ref(),
-                    Some(MAX_HOST_DIR_READ_BYTES),
-                )
-                .ok()?;
-                Some(HostDirModuleMount {
-                    guest_prefix: normalize_path(guest_path.as_ref()),
-                    filesystem,
-                })
-            })
-            .collect::<Vec<_>>();
-        if entries.is_empty() {
-            return None;
-        }
-        entries.sort_by_key(|entry| std::cmp::Reverse(entry.guest_prefix.len()));
-        entries.dedup_by(|left, right| left.guest_prefix == right.guest_prefix);
-        Some(Self { mounts: entries })
-    }
-
-    /// Find the index of the most-specific mount containing `guest_path` and the
-    /// corresponding mount-relative virtual path.
-    fn mount_index_for(&self, guest_path: &str) -> Option<(usize, String)> {
-        let normalized = normalize_path(guest_path);
-        self.mounts.iter().enumerate().find_map(|(index, mount)| {
-            mount
-                .relative_virtual_path(&normalized)
-                .map(|rel| (index, rel))
-        })
-    }
-}
-
-impl ModuleFsReader for HostDirModuleReader {
-    fn canonical_guest_path(&mut self, guest_path: &str) -> Option<String> {
-        let (index, relative) = self.mount_index_for(guest_path)?;
-        let mount = &self.mounts[index];
-        // `realpath` returns a mount-relative virtual path; re-express it as a
-        // guest path so the resolver keeps operating in the guest namespace.
-        let resolved = mount.filesystem.realpath(&relative).ok()?;
-        Some(mount.guest_path_for_relative(&resolved))
-    }
-
-    fn read_to_string(&mut self, guest_path: &str) -> Option<String> {
-        let (index, relative) = self.mount_index_for(guest_path)?;
-        let bytes = self.mounts[index].filesystem.read_file(&relative).ok()?;
-        String::from_utf8(bytes).ok()
-    }
-
-    fn path_is_dir(&mut self, guest_path: &str) -> Option<bool> {
-        let (index, relative) = self.mount_index_for(guest_path)?;
-        // `stat` follows symlinks (O_PATH, no O_NOFOLLOW), so a symlinked package
-        // directory reports as a directory just like `fs.statSync` would.
-        self.mounts[index]
-            .filesystem
-            .stat(&relative)
-            .ok()
-            .map(|stat| stat.is_directory)
-    }
-
-    fn path_exists(&mut self, guest_path: &str) -> bool {
-        match self.mount_index_for(guest_path) {
-            Some((index, relative)) => self.mounts[index].filesystem.exists(&relative),
-            None => false,
-        }
-    }
-}
-
-/// Session-thread module reader: the mounted `HostDirModuleReader` plus a
-/// persistent resolution cache, so the V8 isolate thread can both resolve
-/// specifiers and read source DIRECTLY (same mount + `openat2(RESOLVE_BENEATH)`
-/// confinement, same `ModuleResolver` semantics as the bridge), skipping the
-/// per-module `_resolveModule`/`_loadFile` bridge round-trips.
-pub(crate) struct SessionModuleReader {
-    reader: HostDirModuleReader,
-    cache: LocalModuleResolutionCache,
-}
-
-impl SessionModuleReader {
-    pub(crate) fn new(reader: HostDirModuleReader) -> Self {
-        Self {
-            reader,
-            cache: LocalModuleResolutionCache::default(),
-        }
-    }
-}
-
-impl GuestModuleReader for SessionModuleReader {
-    fn read_module_source(&mut self, resolved_guest_path: &str) -> Option<String> {
-        self.reader.read_to_string(resolved_guest_path)
-    }
-
-    fn resolve_module(&mut self, specifier: &str, referrer: &str) -> Option<String> {
-        // Mirror the bridge's `_resolveModule` exactly: import mode, same reader,
-        // same persisted cache.
-        let reader: &mut dyn ModuleFsReader = &mut self.reader;
-        let mut resolver = ModuleResolver::new(reader, &mut self.cache);
-        resolver.resolve_module(specifier, referrer, ModuleResolveMode::Import)
-    }
-}
-
-fn nix_to_io(error: Errno) -> io::Error {
-    io::Error::from_raw_os_error(error as i32)
-}
-
-fn io_error_to_vfs(op: &'static str, path: &str, error: io::Error) -> VfsError {
-    let code = match error.raw_os_error() {
-        Some(1) => "EPERM",
-        Some(2) => "ENOENT",
-        Some(13) => "EACCES",
-        Some(17) => "EEXIST",
-        Some(18) => "EXDEV",
-        Some(20) => "ENOTDIR",
-        Some(21) => "EISDIR",
-        Some(22) => "EINVAL",
-        Some(30) => "EROFS",
-        Some(39) => "ENOTEMPTY",
-        Some(40) => "ELOOP",
-        _ => match error.kind() {
-            io::ErrorKind::NotFound => "ENOENT",
-            io::ErrorKind::PermissionDenied => "EACCES",
-            io::ErrorKind::AlreadyExists => "EEXIST",
-            io::ErrorKind::InvalidInput => "EINVAL",
-            _ => "EIO",
-        },
-    };
-    VfsError::new(code, format!("{op} '{path}': {error}"))
-}
-
-fn error_code(error: &nix::Error) -> &'static str {
-    match error {
-        nix::Error::EACCES => "EACCES",
-        nix::Error::EEXIST => "EEXIST",
-        nix::Error::EINVAL => "EINVAL",
-        nix::Error::EISDIR => "EISDIR",
-        nix::Error::ELOOP => "ELOOP",
-        nix::Error::ENOENT => "ENOENT",
-        nix::Error::ENOTDIR => "ENOTDIR",
-        nix::Error::ENOTEMPTY => "ENOTEMPTY",
-        nix::Error::EPERM => "EPERM",
-        nix::Error::EROFS => "EROFS",
-        _ => "EIO",
-    }
-}
-
-fn lexical_normalize_path(path: &Path) -> PathBuf {
-    let mut normalized = PathBuf::new();
-    for component in path.components() {
-        match component {
-            Component::RootDir => normalized.push(Path::new("/")),
-            Component::CurDir => {}
-            Component::ParentDir => {
-                normalized.pop();
-            }
-            Component::Normal(segment) => normalized.push(segment),
-            Component::Prefix(prefix) => normalized.push(prefix.as_os_str()),
-        }
-    }
-
-    if normalized.as_os_str().is_empty() {
-        PathBuf::from("/")
-    } else {
-        normalized
-    }
-}
-
-fn relative_path(from_dir: &Path, to: &Path) -> PathBuf {
-    let from_components = from_dir.components().collect::<Vec<_>>();
-    let to_components = to.components().collect::<Vec<_>>();
-    let shared = from_components
-        .iter()
-        .zip(to_components.iter())
-        .take_while(|(left, right)| left == right)
-        .count();
-
-    let mut relative = PathBuf::new();
-    for _ in shared..from_components.len() {
-        relative.push("..");
-    }
-    for component in &to_components[shared..] {
-        if let Component::Normal(segment) = component {
-            relative.push(segment);
-        }
-    }
-
-    if relative.as_os_str().is_empty() {
-        PathBuf::from(".")
-    } else {
-        relative
-    }
-}
-
-fn virtual_dirname(path: &str) -> String {
-    let normalized = normalize_path(path);
-    match normalized.rsplit_once('/') {
-        Some((head, _)) if !head.is_empty() => head.to_owned(),
-        _ => String::from("/"),
-    }
-}
diff --git a/crates/sidecar/src/plugins/js_bridge.rs b/crates/sidecar/src/plugins/js_bridge.rs
deleted file mode 100644
index f1ed81fac..000000000
--- a/crates/sidecar/src/plugins/js_bridge.rs
+++ /dev/null
@@ -1,617 +0,0 @@
-use crate::bridge::MountPluginContext;
-use crate::protocol::{
-    JsBridgeCallRequest, JsBridgeResultResponse, OwnershipScope, SidecarRequestPayload,
-    SidecarResponsePayload,
-};
-use crate::SidecarError;
-
-use base64::engine::general_purpose::STANDARD as BASE64_STANDARD;
-use base64::Engine;
-use secure_exec_kernel::mount_plugin::{
-    FileSystemPluginFactory, OpenFileSystemPluginRequest, PluginError,
-};
-use secure_exec_kernel::mount_table::{MountedFileSystem, MountedVirtualFileSystem};
-use secure_exec_kernel::vfs::{
-    VfsError, VfsResult, VirtualDirEntry, VirtualFileSystem, VirtualStat,
-};
-use serde::Deserialize;
-use serde_json::{json, Value};
-use std::sync::atomic::{AtomicU64, Ordering};
-use std::sync::Arc;
-use std::time::Duration;
-
-const JS_BRIDGE_TIMEOUT: Duration = Duration::from_secs(30);
-
-#[derive(Debug, Default, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct JsBridgeMountConfig {
-    #[serde(default)]
-    mount_id: Option<String>,
-}
-
-#[derive(Debug)]
-pub(crate) struct JsBridgeMountPlugin;
-
-impl<B> FileSystemPluginFactory<MountPluginContext<B>> for JsBridgeMountPlugin {
-    fn plugin_id(&self) -> &'static str {
-        "js_bridge"
-    }
-
-    fn open(
-        &self,
-        request: OpenFileSystemPluginRequest<'_, MountPluginContext<B>>,
-    ) -> Result<Box<dyn MountedFileSystem>, PluginError> {
-        let config: JsBridgeMountConfig = match &request.config {
-            Value::Null => JsBridgeMountConfig::default(),
-            Value::Object(_) => serde_json::from_value(request.config.clone())
-                .map_err(|error| PluginError::invalid_input(error.to_string()))?,
-            _ => {
-                return Err(PluginError::invalid_input(
-                    "js_bridge mount config must be an object or null",
-                ));
-            }
-        };
-        let mount_id = config
-            .mount_id
-            .unwrap_or_else(|| request.guest_path.to_owned());
-        let ownership = OwnershipScope::vm(
-            request.context.connection_id.clone(),
-            request.context.session_id.clone(),
-            request.context.vm_id.clone(),
-        );
-
-        Ok(Box::new(MountedVirtualFileSystem::new(
-            JsBridgeFilesystem::new(
-                request.context.sidecar_requests.clone(),
-                ownership,
-                mount_id,
-                request.context.max_pread_bytes,
-            ),
-        )))
-    }
-}
-
-#[derive(Clone)]
-struct JsBridgeFilesystem {
-    requests: crate::state::SharedSidecarRequestClient,
-    ownership: OwnershipScope,
-    mount_id: String,
-    next_call_id: Arc<AtomicU64>,
-    max_read_bytes: Option<usize>,
-}
-
-impl JsBridgeFilesystem {
-    fn new(
-        requests: crate::state::SharedSidecarRequestClient,
-        ownership: OwnershipScope,
-        mount_id: String,
-        max_read_bytes: Option<usize>,
-    ) -> Self {
-        Self {
-            requests,
-            ownership,
-            mount_id,
-            next_call_id: Arc::new(AtomicU64::new(1)),
-            max_read_bytes,
-        }
-    }
-
-    fn next_call_id(&self) -> String {
-        format!(
-            "js-bridge-call-{}",
-            self.next_call_id.fetch_add(1, Ordering::Relaxed)
-        )
-    }
-
-    fn request_path(&self, operation: &str, path: &str, args: Value) -> VfsResult<Option<Value>> {
-        let args = serde_json::to_string(&args).map_err(|error| {
-            VfsError::io(format!(
-                "failed to encode js_bridge args for {operation} '{path}': {error}"
-            ))
-        })?;
-        let payload = SidecarRequestPayload::JsBridgeCall(JsBridgeCallRequest {
-            call_id: self.next_call_id(),
-            mount_id: self.mount_id.clone(),
-            operation: operation.to_owned(),
-            args,
-        });
-        match self
-            .requests
-            .invoke(self.ownership.clone(), payload, JS_BRIDGE_TIMEOUT)
-            .map_err(|error| Self::sidecar_error_to_vfs(operation, path, error))?
-        {
-            SidecarResponsePayload::JsBridgeResult(JsBridgeResultResponse {
-                result,
-                error,
-                ..
-            }) => {
-                if let Some(error) = error {
-                    return Err(Self::js_error_to_vfs(operation, path, &error));
-                }
-                result
-                    .map(|result| {
-                        serde_json::from_str(&result).map_err(|error| {
-                            VfsError::io(format!(
-                                "invalid js_bridge result payload for {operation} '{path}': {error}"
-                            ))
-                        })
-                    })
-                    .transpose()
-            }
-            other => Err(VfsError::io(format!(
-                "unexpected js_bridge response payload: {other:?}"
-            ))),
-        }
-    }
-
-    fn sidecar_error_to_vfs(operation: &str, path: &str, error: SidecarError) -> VfsError {
-        match error {
-            SidecarError::Io(message) if message.contains("timed out") => {
-                VfsError::io(format!("{operation} {path}: {message}"))
-            }
-            other => VfsError::io(format!("{operation} {path}: {other}")),
-        }
-    }
-
-    fn js_error_to_vfs(operation: &str, path: &str, error: &str) -> VfsError {
-        let lower = error.to_ascii_lowercase();
-        let code = if lower.contains("enoent")
-            || lower.contains("not found")
-            || lower.contains("no such file")
-        {
-            "ENOENT"
-        } else if lower.contains("eacces")
-            || lower.contains("eperm")
-            || lower.contains("permission denied")
-        {
-            "EACCES"
-        } else if lower.contains("eexist") || lower.contains("already exists") {
-            "EEXIST"
-        } else {
-            "EIO"
-        };
-        VfsError::new(code, format!("{error}, {operation} '{path}'"))
-    }
-
-    fn parse_required<T>(&self, operation: &str, path: &str, result: Option<Value>) -> VfsResult<T>
-    where
-        T: for<'de> Deserialize<'de>,
-    {
-        let value = result.ok_or_else(|| {
-            VfsError::io(format!(
-                "js_bridge returned no payload for {operation} '{path}'"
-            ))
-        })?;
-        serde_json::from_value(value).map_err(|error| {
-            VfsError::io(format!(
-                "invalid js_bridge payload for {operation} '{path}': {error}"
-            ))
-        })
-    }
-
-    fn parse_bytes(
-        &self,
-        operation: &str,
-        path: &str,
-        result: Option<Value>,
-    ) -> VfsResult<Vec<u8>> {
-        self.parse_bytes_limited(operation, path, result, None)
-    }
-
-    fn parse_bytes_limited(
-        &self,
-        operation: &str,
-        path: &str,
-        result: Option<Value>,
-        operation_max_bytes: Option<usize>,
-    ) -> VfsResult<Vec<u8>> {
-        let max_bytes = effective_read_limit(self.max_read_bytes, operation_max_bytes);
-        match result.ok_or_else(|| {
-            VfsError::io(format!(
-                "js_bridge returned no payload for {operation} '{path}'"
-            ))
-        })? {
-            Value::String(encoded) => {
-                let estimated_len = estimated_base64_decoded_len(&encoded).ok_or_else(|| {
-                    VfsError::io(format!(
-                        "js_bridge base64 payload length overflows for {operation} '{path}'"
-                    ))
-                })?;
-                Self::check_read_length(operation, path, estimated_len, max_bytes)?;
-                let decoded = BASE64_STANDARD.decode(encoded).map_err(|error| {
-                    VfsError::io(format!(
-                        "invalid js_bridge base64 payload for {operation} '{path}': {error}"
-                    ))
-                })?;
-                Self::check_read_length(operation, path, decoded.len(), max_bytes)?;
-                Ok(decoded)
-            }
-            Value::Array(values) => {
-                Self::check_read_length(operation, path, values.len(), max_bytes)?;
-                values
-                    .into_iter()
-                    .map(|value| match value {
-                        Value::Number(number) => number
-                            .as_u64()
-                            .and_then(|value| u8::try_from(value).ok())
-                            .ok_or_else(|| {
-                                VfsError::io(format!(
-                                    "invalid js_bridge byte payload for {operation} '{path}'"
-                                ))
-                            }),
-                        _ => Err(VfsError::io(format!(
-                            "invalid js_bridge byte payload for {operation} '{path}'"
-                        ))),
-                    })
-                    .collect()
-            }
-            other => Err(VfsError::io(format!(
-                "unsupported js_bridge payload for {operation} '{path}': {other:?}"
-            ))),
-        }
-    }
-
-    fn check_read_length(
-        operation: &str,
-        path: &str,
-        length: usize,
-        max_bytes: Option<usize>,
-    ) -> VfsResult<()> {
-        if let Some(limit) = max_bytes {
-            if length <= limit {
-                return Ok(());
-            }
-
-            return Err(VfsError::new(
-                "EINVAL",
-                format!(
-                    "js_bridge payload length {length} exceeds configured read limit {limit}, {operation} '{path}'"
-                ),
-            ));
-        }
-
-        Ok(())
-    }
-}
-
-fn effective_read_limit(
-    mount_max_bytes: Option<usize>,
-    operation_max_bytes: Option<usize>,
-) -> Option<usize> {
-    match (mount_max_bytes, operation_max_bytes) {
-        (Some(left), Some(right)) => Some(left.min(right)),
-        (Some(limit), None) | (None, Some(limit)) => Some(limit),
-        (None, None) => None,
-    }
-}
-
-fn estimated_base64_decoded_len(encoded: &str) -> Option<usize> {
-    let padding = encoded
-        .as_bytes()
-        .iter()
-        .rev()
-        .take_while(|byte| **byte == b'=')
-        .count()
-        .min(2);
-    encoded
-        .len()
-        .checked_add(3)
-        .map(|length| (length / 4).saturating_mul(3).saturating_sub(padding))
-}
-
-#[derive(Debug, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct JsBridgeVirtualStat {
-    mode: u32,
-    size: u64,
-    blocks: u64,
-    dev: u64,
-    rdev: u64,
-    #[serde(alias = "is_directory")]
-    is_directory: bool,
-    #[serde(alias = "is_symbolic_link")]
-    is_symbolic_link: bool,
-    #[serde(alias = "atime_ms")]
-    atime_ms: u64,
-    #[serde(default, alias = "atime_nsec")]
-    atime_nsec: u32,
-    #[serde(alias = "mtime_ms")]
-    mtime_ms: u64,
-    #[serde(default, alias = "mtime_nsec")]
-    mtime_nsec: u32,
-    #[serde(alias = "ctime_ms")]
-    ctime_ms: u64,
-    #[serde(default, alias = "ctime_nsec")]
-    ctime_nsec: u32,
-    #[serde(alias = "birthtime_ms")]
-    birthtime_ms: u64,
-    ino: u64,
-    nlink: u64,
-    uid: u32,
-    gid: u32,
-}
-
-impl From<JsBridgeVirtualStat> for VirtualStat {
-    fn from(stat: JsBridgeVirtualStat) -> Self {
-        Self {
-            mode: stat.mode,
-            size: stat.size,
-            blocks: stat.blocks,
-            dev: stat.dev,
-            rdev: stat.rdev,
-            is_directory: stat.is_directory,
-            is_symbolic_link: stat.is_symbolic_link,
-            atime_ms: stat.atime_ms,
-            atime_nsec: stat.atime_nsec,
-            mtime_ms: stat.mtime_ms,
-            mtime_nsec: stat.mtime_nsec,
-            ctime_ms: stat.ctime_ms,
-            ctime_nsec: stat.ctime_nsec,
-            birthtime_ms: stat.birthtime_ms,
-            ino: stat.ino,
-            nlink: stat.nlink,
-            uid: stat.uid,
-            gid: stat.gid,
-        }
-    }
-}
-
-#[derive(Debug, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct JsBridgeDirEntry {
-    name: String,
-    #[serde(alias = "is_directory")]
-    is_directory: bool,
-    #[serde(alias = "is_symbolic_link")]
-    is_symbolic_link: bool,
-}
-
-impl From<JsBridgeDirEntry> for VirtualDirEntry {
-    fn from(entry: JsBridgeDirEntry) -> Self {
-        Self {
-            name: entry.name,
-            is_directory: entry.is_directory,
-            is_symbolic_link: entry.is_symbolic_link,
-        }
-    }
-}
-
-impl VirtualFileSystem for JsBridgeFilesystem {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        let result = self.request_path("readFile", path, json!({ "path": path }))?;
-        self.parse_bytes("readFile", path, result)
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        self.parse_required(
-            "readDir",
-            path,
-            self.request_path("readDir", path, json!({ "path": path }))?,
-        )
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        let entries: Vec<JsBridgeDirEntry> = self.parse_required(
-            "readDirWithTypes",
-            path,
-            self.request_path("readDirWithTypes", path, json!({ "path": path }))?,
-        )?;
-        Ok(entries.into_iter().map(Into::into).collect())
-    }
-
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        let content = BASE64_STANDARD.encode(content.into());
-        self.request_path(
-            "writeFile",
-            path,
-            json!({
-                "path": path,
-                "content": content,
-            }),
-        )?;
-        Ok(())
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.request_path("createDir", path, json!({ "path": path }))?;
-        Ok(())
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        self.request_path(
-            "mkdir",
-            path,
-            json!({
-                "path": path,
-                "recursive": recursive,
-            }),
-        )?;
-        Ok(())
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        let Ok(args) = serde_json::to_string(&json!({ "path": path })) else {
-            return false;
-        };
-        self.requests
-            .invoke(
-                self.ownership.clone(),
-                SidecarRequestPayload::JsBridgeCall(JsBridgeCallRequest {
-                    call_id: self.next_call_id(),
-                    mount_id: self.mount_id.clone(),
-                    operation: String::from("exists"),
-                    args,
-                }),
-                JS_BRIDGE_TIMEOUT,
-            )
-            .ok()
-            .and_then(|payload| match payload {
-                SidecarResponsePayload::JsBridgeResult(JsBridgeResultResponse {
-                    result,
-                    error,
-                    ..
-                }) if error.is_none() => result,
-                _ => None,
-            })
-            .and_then(|value| serde_json::from_str::<Value>(&value).ok())
-            .and_then(|value| value.as_bool())
-            .unwrap_or(false)
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        let stat: JsBridgeVirtualStat = self.parse_required(
-            "stat",
-            path,
-            self.request_path("stat", path, json!({ "path": path }))?,
-        )?;
-        Ok(stat.into())
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        self.request_path("removeFile", path, json!({ "path": path }))?;
-        Ok(())
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.request_path("removeDir", path, json!({ "path": path }))?;
-        Ok(())
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        self.request_path(
-            "rename",
-            old_path,
-            json!({
-                "oldPath": old_path,
-                "newPath": new_path,
-            }),
-        )?;
-        Ok(())
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        self.parse_required(
-            "realpath",
-            path,
-            self.request_path("realpath", path, json!({ "path": path }))?,
-        )
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        self.request_path(
-            "symlink",
-            link_path,
-            json!({
-                "target": target,
-                "linkPath": link_path,
-            }),
-        )?;
-        Ok(())
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        self.parse_required(
-            "readlink",
-            path,
-            self.request_path("readlink", path, json!({ "path": path }))?,
-        )
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        let stat: JsBridgeVirtualStat = self.parse_required(
-            "lstat",
-            path,
-            self.request_path("lstat", path, json!({ "path": path }))?,
-        )?;
-        Ok(stat.into())
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        self.request_path(
-            "link",
-            old_path,
-            json!({
-                "oldPath": old_path,
-                "newPath": new_path,
-            }),
-        )?;
-        Ok(())
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        self.request_path(
-            "chmod",
-            path,
-            json!({
-                "path": path,
-                "mode": mode,
-            }),
-        )?;
-        Ok(())
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        self.request_path(
-            "chown",
-            path,
-            json!({
-                "path": path,
-                "uid": uid,
-                "gid": gid,
-            }),
-        )?;
-        Ok(())
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        self.request_path(
-            "utimes",
-            path,
-            json!({
-                "path": path,
-                "atimeMs": atime_ms,
-                "mtimeMs": mtime_ms,
-            }),
-        )?;
-        Ok(())
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        self.request_path(
-            "truncate",
-            path,
-            json!({
-                "path": path,
-                "length": length,
-            }),
-        )?;
-        Ok(())
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        let result = self.request_path(
-            "pread",
-            path,
-            json!({
-                "path": path,
-                "offset": offset,
-                "length": length,
-            }),
-        )?;
-        self.parse_bytes_limited("pread", path, result, Some(length))
-    }
-
-    fn pwrite(&mut self, path: &str, content: impl Into<Vec<u8>>, offset: u64) -> VfsResult<()> {
-        let content = BASE64_STANDARD.encode(content.into());
-        self.request_path(
-            "pwrite",
-            path,
-            json!({
-                "path": path,
-                "offset": offset,
-                "content": content,
-            }),
-        )?;
-        Ok(())
-    }
-}
diff --git a/crates/sidecar/src/plugins/mod.rs b/crates/sidecar/src/plugins/mod.rs
deleted file mode 100644
index ee97f2994..000000000
--- a/crates/sidecar/src/plugins/mod.rs
+++ /dev/null
@@ -1,55 +0,0 @@
-use crate::bridge::MountPluginContext;
-
-use secure_exec_kernel::mount_plugin::{
-    FileSystemPluginFactory, FileSystemPluginRegistry, PluginError,
-};
-
-pub(crate) mod agentos_packages;
-pub(crate) mod chunked_local;
-pub(crate) mod chunked_s3;
-pub(crate) mod google_drive;
-pub(crate) mod host_dir;
-pub(crate) mod js_bridge;
-pub(crate) mod module_access;
-pub(crate) mod object_s3;
-pub(crate) mod s3_common;
-pub(crate) mod sandbox_agent;
-
-use agentos_packages::AgentosPackagesMountPlugin;
-use chunked_local::ChunkedLocalMountPlugin;
-use chunked_s3::ChunkedS3MountPlugin;
-use google_drive::GoogleDriveMountPlugin;
-use host_dir::HostDirMountPlugin;
-use js_bridge::JsBridgeMountPlugin;
-use module_access::ModuleAccessMountPlugin;
-use object_s3::ObjectS3MountPlugin;
-use sandbox_agent::SandboxAgentMountPlugin;
-
-pub(crate) trait SidecarMountPluginFactory<Context>:
-    FileSystemPluginFactory<Context>
-{
-}
-
-impl<Context, T> SidecarMountPluginFactory<Context> for T where T: FileSystemPluginFactory<Context> {}
-
-fn register_plugin<Context>(
-    registry: &mut FileSystemPluginRegistry<Context>,
-    plugin: impl SidecarMountPluginFactory<Context> + 'static,
-) -> Result<(), PluginError> {
-    registry.register(plugin)
-}
-
-pub(crate) fn register_native_mount_plugins<B>(
-    registry: &mut FileSystemPluginRegistry<MountPluginContext<B>>,
-) -> Result<(), PluginError> {
-    register_plugin(registry, AgentosPackagesMountPlugin)?;
-    register_plugin(registry, HostDirMountPlugin)?;
-    register_plugin(registry, ModuleAccessMountPlugin)?;
-    register_plugin(registry, JsBridgeMountPlugin)?;
-    register_plugin(registry, SandboxAgentMountPlugin)?;
-    register_plugin(registry, ChunkedLocalMountPlugin)?;
-    register_plugin(registry, ObjectS3MountPlugin)?;
-    register_plugin(registry, ChunkedS3MountPlugin)?;
-    register_plugin(registry, GoogleDriveMountPlugin)?;
-    Ok(())
-}
diff --git a/crates/sidecar/src/plugins/module_access.rs b/crates/sidecar/src/plugins/module_access.rs
deleted file mode 100644
index 087d229ad..000000000
--- a/crates/sidecar/src/plugins/module_access.rs
+++ /dev/null
@@ -1,61 +0,0 @@
-use crate::plugins::host_dir::{HostDirFilesystem, HostDirReadLimitContext};
-
-use secure_exec_kernel::mount_plugin::{
-    FileSystemPluginFactory, OpenFileSystemPluginRequest, PluginError,
-};
-use secure_exec_kernel::mount_table::{
-    MountedFileSystem, MountedVirtualFileSystem, ReadOnlyFileSystem,
-};
-use serde::Deserialize;
-use std::fs;
-use std::path::{Path, PathBuf};
-
-#[derive(Debug, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct ModuleAccessMountConfig {
-    host_path: String,
-}
-
-#[derive(Debug)]
-pub(crate) struct ModuleAccessMountPlugin;
-
-impl<Context> FileSystemPluginFactory<Context> for ModuleAccessMountPlugin
-where
-    Context: HostDirReadLimitContext,
-{
-    fn plugin_id(&self) -> &'static str {
-        "module_access"
-    }
-
-    fn open(
-        &self,
-        request: OpenFileSystemPluginRequest<'_, Context>,
-    ) -> Result<Box<dyn MountedFileSystem>, PluginError> {
-        let config: ModuleAccessMountConfig = serde_json::from_value(request.config.clone())
-            .map_err(|error| PluginError::invalid_input(error.to_string()))?;
-        let host_path = validate_module_access_root(&config.host_path)?;
-        let filesystem = HostDirFilesystem::new_with_read_limit(
-            &host_path,
-            request.context.host_dir_max_read_bytes(),
-        )
-        .map_err(|error| PluginError::invalid_input(error.to_string()))?;
-        Ok(Box::new(ReadOnlyFileSystem::new(
-            MountedVirtualFileSystem::new(filesystem),
-        )))
-    }
-}
-
-fn validate_module_access_root(path: &str) -> Result<PathBuf, PluginError> {
-    let root = fs::canonicalize(path).map_err(|error| {
-        PluginError::invalid_input(format!(
-            "failed to resolve module_access root {path}: {error}"
-        ))
-    })?;
-    if root.file_name() == Some(Path::new("node_modules").as_os_str()) {
-        return Ok(root);
-    }
-
-    Err(PluginError::invalid_input(format!(
-        "module_access roots must resolve to a node_modules directory: {path}"
-    )))
-}
diff --git a/crates/sidecar/src/plugins/object_s3.rs b/crates/sidecar/src/plugins/object_s3.rs
deleted file mode 100644
index b246bc4cf..000000000
--- a/crates/sidecar/src/plugins/object_s3.rs
+++ /dev/null
@@ -1,74 +0,0 @@
-use crate::plugins::s3_common::{
-    create_s3_client, normalize_prefix, S3MountCredentials, DEFAULT_REGION,
-};
-
-use secure_exec_kernel::mount_plugin::{
-    FileSystemPluginFactory, OpenFileSystemPluginRequest, PluginError,
-};
-use secure_exec_kernel::mount_table::MountedFileSystem;
-use secure_exec_vfs::{S3ObjectBackend, S3ObjectBackendOptions};
-use serde::Deserialize;
-use vfs::adapter::MountedEngineFileSystem;
-use vfs::engine::engines::{ObjectFs, ObjectFsOptions};
-
-#[derive(Debug, Clone, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct ObjectS3MountConfig {
-    bucket: String,
-    prefix: Option<String>,
-    region: Option<String>,
-    credentials: Option<S3MountCredentials>,
-    endpoint: Option<String>,
-    uid: Option<u32>,
-    gid: Option<u32>,
-    file_mode: Option<u32>,
-    dir_mode: Option<u32>,
-}
-
-#[derive(Debug)]
-pub(crate) struct ObjectS3MountPlugin;
-
-impl<Context> FileSystemPluginFactory<Context> for ObjectS3MountPlugin {
-    fn plugin_id(&self) -> &'static str {
-        "object_s3"
-    }
-
-    fn open(
-        &self,
-        request: OpenFileSystemPluginRequest<'_, Context>,
-    ) -> Result<Box<dyn MountedFileSystem>, PluginError> {
-        let config: ObjectS3MountConfig = serde_json::from_value(request.config.clone())
-            .map_err(|error| PluginError::invalid_input(error.to_string()))?;
-        let bucket = config.bucket.trim().to_owned();
-        if bucket.is_empty() {
-            return Err(PluginError::invalid_input(
-                "object_s3 mount requires a non-empty bucket",
-            ));
-        }
-
-        let prefix = normalize_prefix(config.prefix.as_deref());
-        let client = create_s3_client(
-            config.region.unwrap_or_else(|| DEFAULT_REGION.to_owned()),
-            config.endpoint,
-            config.credentials,
-        )?;
-        let backend = S3ObjectBackend::with_options(
-            client,
-            bucket,
-            S3ObjectBackendOptions {
-                prefix: prefix.clone(),
-            },
-        );
-        let fs = ObjectFs::with_options(
-            backend,
-            ObjectFsOptions {
-                prefix: String::new(),
-                uid: config.uid.unwrap_or(0),
-                gid: config.gid.unwrap_or(0),
-                file_mode: config.file_mode.unwrap_or(0o644),
-                dir_mode: config.dir_mode.unwrap_or(0o755),
-            },
-        );
-        Ok(Box::new(MountedEngineFileSystem::new(fs)?))
-    }
-}
diff --git a/crates/sidecar/src/plugins/s3_common.rs b/crates/sidecar/src/plugins/s3_common.rs
deleted file mode 100644
index 823cd41ea..000000000
--- a/crates/sidecar/src/plugins/s3_common.rs
+++ /dev/null
@@ -1,532 +0,0 @@
-use aws_config::BehaviorVersion;
-use aws_credential_types::Credentials;
-use aws_sdk_s3::config::Builder as S3ConfigBuilder;
-use aws_sdk_s3::Client as S3Client;
-use secure_exec_kernel::mount_plugin::PluginError;
-use serde::Deserialize;
-use tokio::runtime::Runtime;
-use url::Url;
-
-pub(crate) const DEFAULT_REGION: &str = "us-east-1";
-
-#[derive(Debug, Clone, Deserialize)]
-#[serde(rename_all = "camelCase")]
-pub(crate) struct S3MountCredentials {
-    pub(crate) access_key_id: String,
-    pub(crate) secret_access_key: String,
-}
-
-pub(crate) fn normalize_prefix(raw: Option<&str>) -> String {
-    match raw {
-        Some(prefix) if !prefix.trim().is_empty() => {
-            let trimmed = prefix.trim_matches('/');
-            if trimmed.is_empty() {
-                String::new()
-            } else {
-                format!("{trimmed}/")
-            }
-        }
-        _ => String::new(),
-    }
-}
-
-pub(crate) fn create_s3_client(
-    region: String,
-    endpoint: Option<String>,
-    credentials: Option<S3MountCredentials>,
-) -> Result<S3Client, PluginError> {
-    let endpoint = endpoint
-        .map(|endpoint| normalize_s3_endpoint(&endpoint))
-        .transpose()?;
-    let shared_config = std::thread::spawn(move || -> Result<_, PluginError> {
-        let runtime = Runtime::new()
-            .map_err(|error| PluginError::unsupported(format!("create tokio runtime: {error}")))?;
-
-        Ok(runtime.block_on(async move {
-            let mut loader = aws_config::defaults(BehaviorVersion::latest())
-                .region(aws_sdk_s3::config::Region::new(region));
-            if let Some(credentials) = credentials {
-                loader = loader.credentials_provider(Credentials::new(
-                    credentials.access_key_id,
-                    credentials.secret_access_key,
-                    None,
-                    None,
-                    "secure-exec-s3-plugin",
-                ));
-            }
-            loader.load().await
-        }))
-    })
-    .join()
-    .map_err(|_| PluginError::unsupported("s3 runtime thread panicked"))??;
-
-    let mut builder = S3ConfigBuilder::from(&shared_config).force_path_style(true);
-    if let Some(endpoint) = endpoint {
-        builder = builder.endpoint_url(endpoint);
-    }
-
-    Ok(S3Client::from_conf(builder.build()))
-}
-
-fn normalize_s3_endpoint(raw: &str) -> Result<String, PluginError> {
-    let normalized = raw.trim().trim_end_matches('/').to_owned();
-    if normalized.is_empty() {
-        return Err(PluginError::invalid_input(
-            "s3 mount endpoint must be a valid URL",
-        ));
-    }
-
-    let url = Url::parse(&normalized).map_err(|error| {
-        PluginError::invalid_input(format!("s3 mount endpoint is not a valid URL: {error}"))
-    })?;
-    url.host_str()
-        .ok_or_else(|| PluginError::invalid_input("s3 mount endpoint must include a host"))?;
-    match url.scheme() {
-        "http" | "https" => {}
-        _ => {
-            return Err(PluginError::invalid_input(
-                "s3 mount endpoint must use http or https",
-            ));
-        }
-    }
-
-    Ok(normalized)
-}
-
-#[cfg(test)]
-pub(crate) mod test_support {
-    #![allow(dead_code)]
-
-    use std::collections::{BTreeMap, BTreeSet};
-    use std::io::{Read, Write};
-    use std::net::{TcpListener, TcpStream};
-    use std::sync::atomic::{AtomicBool, Ordering};
-    use std::sync::{Arc, Mutex};
-    use std::thread::{self, JoinHandle};
-    use std::time::Duration;
-
-    #[derive(Clone, Debug)]
-    pub(crate) struct LoggedRequest {
-        pub method: String,
-        pub path: String,
-    }
-
-    pub(crate) struct MockS3Server {
-        base_url: String,
-        shutdown: Arc<AtomicBool>,
-        objects: Arc<Mutex<BTreeMap<String, Vec<u8>>>>,
-        requests: Arc<Mutex<Vec<LoggedRequest>>>,
-        handle: Option<JoinHandle<()>>,
-    }
-
-    impl MockS3Server {
-        pub(crate) fn start() -> Self {
-            let listener = TcpListener::bind("127.0.0.1:0").expect("bind mock s3");
-            listener
-                .set_nonblocking(true)
-                .expect("configure mock s3 listener");
-            let address = listener.local_addr().expect("resolve mock s3 address");
-            let shutdown = Arc::new(AtomicBool::new(false));
-            let objects = Arc::new(Mutex::new(BTreeMap::new()));
-            let requests = Arc::new(Mutex::new(Vec::new()));
-            let shutdown_for_thread = Arc::clone(&shutdown);
-            let objects_for_thread = Arc::clone(&objects);
-            let requests_for_thread = Arc::clone(&requests);
-
-            let handle = thread::spawn(move || {
-                while !shutdown_for_thread.load(Ordering::SeqCst) {
-                    match listener.accept() {
-                        Ok((stream, _)) => {
-                            handle_stream(stream, &objects_for_thread, &requests_for_thread);
-                        }
-                        Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                            thread::sleep(Duration::from_millis(10));
-                        }
-                        Err(_) => break,
-                    }
-                }
-            });
-
-            Self {
-                base_url: format!("http://{}", address),
-                shutdown,
-                objects,
-                requests,
-                handle: Some(handle),
-            }
-        }
-
-        pub(crate) fn base_url(&self) -> &str {
-            &self.base_url
-        }
-
-        pub(crate) fn object_keys(&self) -> Vec<String> {
-            self.objects
-                .lock()
-                .expect("lock mock s3 objects")
-                .keys()
-                .cloned()
-                .collect()
-        }
-
-        pub(crate) fn put_object(&self, key: &str, bytes: Vec<u8>) {
-            self.objects
-                .lock()
-                .expect("lock mock s3 objects")
-                .insert(key.to_owned(), bytes);
-        }
-
-        pub(crate) fn requests(&self) -> Vec<LoggedRequest> {
-            self.requests.lock().expect("lock mock s3 requests").clone()
-        }
-
-        pub(crate) fn clear_requests(&self) {
-            self.requests.lock().expect("lock mock s3 requests").clear();
-        }
-    }
-
-    impl Drop for MockS3Server {
-        fn drop(&mut self) {
-            self.shutdown.store(true, Ordering::SeqCst);
-            if let Some(handle) = self.handle.take() {
-                handle.join().expect("join mock s3 thread");
-            }
-        }
-    }
-
-    fn handle_stream(
-        mut stream: TcpStream,
-        objects: &Arc<Mutex<BTreeMap<String, Vec<u8>>>>,
-        requests: &Arc<Mutex<Vec<LoggedRequest>>>,
-    ) {
-        stream
-            .set_read_timeout(Some(Duration::from_secs(2)))
-            .expect("set mock s3 read timeout");
-
-        let mut buffer = Vec::new();
-        let mut header_end = None;
-        while header_end.is_none() {
-            let mut chunk = [0; 1024];
-            match stream.read(&mut chunk) {
-                Ok(0) => return,
-                Ok(read) => {
-                    buffer.extend_from_slice(&chunk[..read]);
-                    header_end = find_header_end(&buffer);
-                }
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => continue,
-                Err(_) => return,
-            }
-        }
-
-        let header_end = header_end.expect("parse mock s3 headers");
-        let header_text = String::from_utf8_lossy(&buffer[..header_end]).into_owned();
-        let mut lines = header_text.split("\r\n");
-        let request_line = match lines.next() {
-            Some(line) if !line.is_empty() => line,
-            _ => return,
-        };
-        let mut request_parts = request_line.split_whitespace();
-        let method = request_parts.next().unwrap_or_default().to_owned();
-        let raw_target = request_parts.next().unwrap_or_default();
-        let (raw_path, raw_query) = raw_target.split_once('?').unwrap_or((raw_target, ""));
-        let raw_query = raw_query.to_owned();
-        let path = decode_url_component(raw_path);
-
-        let mut headers = BTreeMap::new();
-        let mut content_length = 0usize;
-        for line in lines {
-            if let Some((name, value)) = line.split_once(':') {
-                let name = name.trim().to_ascii_lowercase();
-                let value = value.trim().to_owned();
-                if name == "content-length" {
-                    content_length = value.parse::<usize>().unwrap_or(0);
-                }
-                headers.insert(name, value);
-            }
-        }
-
-        while buffer.len() < header_end + 4 + content_length {
-            let mut chunk = [0; 1024];
-            match stream.read(&mut chunk) {
-                Ok(0) => break,
-                Ok(read) => buffer.extend_from_slice(&chunk[..read]),
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => continue,
-                Err(_) => break,
-            }
-        }
-        let body = buffer[header_end + 4..header_end + 4 + content_length].to_vec();
-
-        requests
-            .lock()
-            .expect("lock mock s3 request log")
-            .push(LoggedRequest {
-                method: method.clone(),
-                path: path.clone(),
-            });
-
-        match method.as_str() {
-            "GET" if raw_query.contains("list-type=2") => {
-                let query = parse_query(&raw_query);
-                let xml = list_objects_xml(
-                    &path,
-                    query.get("prefix").map(String::as_str).unwrap_or_default(),
-                    query.get("delimiter").map(String::as_str),
-                    objects,
-                );
-                send_response(&mut stream, 200, "OK", "application/xml", xml.as_bytes());
-            }
-            "GET" => {
-                let key = path.trim_start_matches('/');
-                if let Some(bytes) = objects
-                    .lock()
-                    .expect("lock mock s3 objects")
-                    .get(key)
-                    .cloned()
-                {
-                    let bytes = apply_range(&bytes, headers.get("range").map(String::as_str));
-                    send_response(&mut stream, 200, "OK", "application/octet-stream", &bytes);
-                } else {
-                    send_not_found(&mut stream);
-                }
-            }
-            "HEAD" => {
-                let key = path.trim_start_matches('/');
-                let len = objects
-                    .lock()
-                    .expect("lock mock s3 objects")
-                    .get(key)
-                    .map(Vec::len);
-                match len {
-                    Some(len) => send_head_response(&mut stream, 200, "OK", len),
-                    None => send_head_response(&mut stream, 404, "Not Found", 0),
-                }
-            }
-            "PUT" => {
-                let key = path.trim_start_matches('/').to_owned();
-                let data = if let Some(source) = headers.get("x-amz-copy-source") {
-                    let source = decode_url_component(source)
-                        .trim_start_matches('/')
-                        .to_owned();
-                    objects
-                        .lock()
-                        .expect("lock mock s3 objects")
-                        .get(&source)
-                        .cloned()
-                        .unwrap_or_default()
-                } else {
-                    body
-                };
-                objects
-                    .lock()
-                    .expect("lock mock s3 objects")
-                    .insert(key, data);
-                send_response(&mut stream, 200, "OK", "application/xml", b"");
-            }
-            "DELETE" => {
-                objects
-                    .lock()
-                    .expect("lock mock s3 objects")
-                    .remove(path.trim_start_matches('/'));
-                send_response(&mut stream, 204, "No Content", "application/xml", b"");
-            }
-            "POST" if raw_query.starts_with("delete") => {
-                let keys = parse_delete_objects_keys(&body);
-                let bucket = path.trim_matches('/');
-                let mut objects = objects.lock().expect("lock mock s3 objects");
-                if keys.is_empty() {
-                    let bucket_prefix = format!("{bucket}/");
-                    objects.retain(|key, _| !key.starts_with(&bucket_prefix));
-                } else {
-                    for key in keys {
-                        objects.remove(&format!("{bucket}/{key}"));
-                    }
-                }
-                send_response(
-                    &mut stream,
-                    200,
-                    "OK",
-                    "application/xml",
-                    br#"<?xml version="1.0" encoding="UTF-8"?><DeleteResult xmlns="http://s3.amazonaws.com/doc/2006-03-01/"/>"#,
-                );
-            }
-            _ => send_response(
-                &mut stream,
-                405,
-                "Method Not Allowed",
-                "text/plain",
-                b"unsupported",
-            ),
-        }
-    }
-
-    fn list_objects_xml(
-        path: &str,
-        prefix: &str,
-        delimiter: Option<&str>,
-        objects: &Arc<Mutex<BTreeMap<String, Vec<u8>>>>,
-    ) -> String {
-        let bucket = path
-            .trim_start_matches('/')
-            .split('/')
-            .next()
-            .unwrap_or_default();
-        let full_prefix = format!("{bucket}/{prefix}");
-        let delimiter = delimiter.unwrap_or_default();
-        let mut contents = Vec::new();
-        let mut common_prefixes = BTreeSet::new();
-
-        for (key, bytes) in objects.lock().expect("lock mock s3 objects").iter() {
-            let Some(relative) = key.strip_prefix(&full_prefix) else {
-                continue;
-            };
-            if !delimiter.is_empty() {
-                if let Some((first, _)) = relative.split_once(delimiter) {
-                    common_prefixes.insert(format!("{prefix}{first}{delimiter}"));
-                    continue;
-                }
-            }
-            contents.push((
-                key.strip_prefix(&format!("{bucket}/"))
-                    .unwrap_or(key)
-                    .to_owned(),
-                bytes.len(),
-            ));
-        }
-
-        let mut xml = String::from(
-            r#"<?xml version="1.0" encoding="UTF-8"?><ListBucketResult xmlns="http://s3.amazonaws.com/doc/2006-03-01/">"#,
-        );
-        xml.push_str("<IsTruncated>false</IsTruncated>");
-        for (key, len) in contents {
-            xml.push_str("<Contents><Key>");
-            xml.push_str(&escape_xml(&key));
-            xml.push_str("</Key><Size>");
-            xml.push_str(&len.to_string());
-            xml.push_str("</Size></Contents>");
-        }
-        for prefix in common_prefixes {
-            xml.push_str("<CommonPrefixes><Prefix>");
-            xml.push_str(&escape_xml(&prefix));
-            xml.push_str("</Prefix></CommonPrefixes>");
-        }
-        xml.push_str("</ListBucketResult>");
-        xml
-    }
-
-    fn apply_range(bytes: &[u8], range: Option<&str>) -> Vec<u8> {
-        let Some(range) = range.and_then(|range| range.strip_prefix("bytes=")) else {
-            return bytes.to_vec();
-        };
-        let Some((start, end)) = range.split_once('-') else {
-            return bytes.to_vec();
-        };
-        let start = start.parse::<usize>().unwrap_or(0);
-        let end = end
-            .parse::<usize>()
-            .unwrap_or(bytes.len().saturating_sub(1))
-            .min(bytes.len().saturating_sub(1));
-        if start >= bytes.len() || start > end {
-            return Vec::new();
-        }
-        bytes[start..=end].to_vec()
-    }
-
-    fn send_not_found(stream: &mut TcpStream) {
-        send_response(
-            stream,
-            404,
-            "Not Found",
-            "application/xml",
-            br#"<Error><Code>NoSuchKey</Code><Message>missing</Message></Error>"#,
-        );
-    }
-
-    fn send_head_response(stream: &mut TcpStream, status: u16, reason: &str, len: usize) {
-        let response = format!(
-            "HTTP/1.1 {status} {reason}\r\nContent-Length: {len}\r\nConnection: close\r\nx-amz-request-id: test\r\n\r\n"
-        );
-        stream
-            .write_all(response.as_bytes())
-            .expect("write mock s3 head response");
-        stream.flush().expect("flush mock s3 response");
-    }
-
-    fn send_response(
-        stream: &mut TcpStream,
-        status: u16,
-        reason: &str,
-        content_type: &str,
-        body: &[u8],
-    ) {
-        let response = format!(
-            "HTTP/1.1 {status} {reason}\r\nContent-Length: {}\r\nContent-Type: {content_type}\r\nConnection: close\r\nx-amz-request-id: test\r\n\r\n",
-            body.len()
-        );
-        stream
-            .write_all(response.as_bytes())
-            .expect("write mock s3 response headers");
-        stream.write_all(body).expect("write mock s3 response body");
-        stream.flush().expect("flush mock s3 response");
-    }
-
-    fn find_header_end(buffer: &[u8]) -> Option<usize> {
-        buffer.windows(4).position(|window| window == b"\r\n\r\n")
-    }
-
-    fn parse_query(raw: &str) -> BTreeMap<String, String> {
-        raw.split('&')
-            .map(|pair| {
-                let (name, value) = pair.split_once('=').unwrap_or((pair, ""));
-                (decode_url_component(name), decode_url_component(value))
-            })
-            .collect()
-    }
-
-    fn parse_delete_objects_keys(body: &[u8]) -> Vec<String> {
-        let text = String::from_utf8_lossy(body);
-        let mut keys = Vec::new();
-        let mut rest = text.as_ref();
-        while let Some((_, after_start)) = rest.split_once("<Key>") {
-            let Some((key, after_end)) = after_start.split_once("</Key>") else {
-                break;
-            };
-            keys.push(decode_url_component(key));
-            rest = after_end;
-        }
-        keys
-    }
-
-    fn decode_url_component(raw: &str) -> String {
-        let mut decoded = String::new();
-        let bytes = raw.as_bytes();
-        let mut index = 0;
-        while index < bytes.len() {
-            if bytes[index] == b'%' && index + 2 < bytes.len() {
-                let code = std::str::from_utf8(&bytes[index + 1..index + 3])
-                    .ok()
-                    .and_then(|hex| u8::from_str_radix(hex, 16).ok());
-                if let Some(code) = code {
-                    decoded.push(code as char);
-                    index += 3;
-                    continue;
-                }
-            }
-            if bytes[index] == b'+' {
-                decoded.push(' ');
-            } else {
-                decoded.push(bytes[index] as char);
-            }
-            index += 1;
-        }
-        decoded
-    }
-
-    fn escape_xml(value: &str) -> String {
-        value
-            .replace('&', "&amp;")
-            .replace('<', "&lt;")
-            .replace('>', "&gt;")
-            .replace('"', "&quot;")
-            .replace('\'', "&apos;")
-    }
-}
diff --git a/crates/sidecar/src/plugins/sandbox_agent.rs b/crates/sidecar/src/plugins/sandbox_agent.rs
deleted file mode 100644
index 2877ace43..000000000
--- a/crates/sidecar/src/plugins/sandbox_agent.rs
+++ /dev/null
@@ -1,2427 +0,0 @@
-use secure_exec_kernel::mount_plugin::{
-    FileSystemPluginFactory, OpenFileSystemPluginRequest, PluginError,
-};
-use secure_exec_kernel::mount_table::{MountedFileSystem, MountedVirtualFileSystem};
-use secure_exec_kernel::vfs::{
-    normalize_path, VfsError, VfsResult, VirtualDirEntry, VirtualFileSystem, VirtualStat, S_IFDIR,
-    S_IFREG,
-};
-use serde::de::DeserializeOwned;
-use serde::{Deserialize, Serialize};
-use std::collections::BTreeMap;
-use std::io::Read;
-use std::net::IpAddr;
-use std::sync::Mutex;
-use std::time::{Duration, SystemTime, UNIX_EPOCH};
-use url::Url;
-
-const DEFAULT_TIMEOUT_MS: u64 = 30_000;
-const DEFAULT_MAX_FULL_READ_BYTES: u64 = 256 * 1024;
-const DEFAULT_PROCESS_TIMEOUT_MS: u64 = 10_000;
-
-#[derive(Debug, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct SandboxAgentMountConfig {
-    base_url: String,
-    token: Option<String>,
-    headers: Option<BTreeMap<String, String>>,
-    base_path: Option<String>,
-    timeout_ms: Option<u64>,
-    max_full_read_bytes: Option<u64>,
-}
-
-#[derive(Debug)]
-pub(crate) struct SandboxAgentMountPlugin;
-
-impl<Context> FileSystemPluginFactory<Context> for SandboxAgentMountPlugin {
-    fn plugin_id(&self) -> &'static str {
-        "sandbox_agent"
-    }
-
-    fn open(
-        &self,
-        request: OpenFileSystemPluginRequest<'_, Context>,
-    ) -> Result<Box<dyn MountedFileSystem>, PluginError> {
-        let config: SandboxAgentMountConfig = serde_json::from_value(request.config.clone())
-            .map_err(|error| PluginError::invalid_input(error.to_string()))?;
-        let filesystem = SandboxAgentFilesystem::from_config(config)?;
-        Ok(Box::new(MountedVirtualFileSystem::new(filesystem)))
-    }
-}
-
-struct SandboxAgentFilesystem {
-    client: SandboxAgentFilesystemClient,
-    base_path: String,
-    max_full_read_bytes: u64,
-    process_runtime: Mutex<Option<RemoteProcessRuntime>>,
-}
-
-impl SandboxAgentFilesystem {
-    fn from_config(config: SandboxAgentMountConfig) -> Result<Self, PluginError> {
-        let base_url = validate_sandbox_agent_base_url(&config.base_url)?;
-
-        let timeout_ms = config.timeout_ms.unwrap_or(DEFAULT_TIMEOUT_MS);
-        let timeout = Duration::from_millis(timeout_ms);
-        let base_path = normalize_sandbox_agent_base_path(config.base_path.as_deref());
-
-        Ok(Self {
-            client: SandboxAgentFilesystemClient::new(
-                base_url,
-                config.token,
-                config.headers.unwrap_or_default(),
-                timeout,
-            ),
-            base_path,
-            max_full_read_bytes: config
-                .max_full_read_bytes
-                .unwrap_or(DEFAULT_MAX_FULL_READ_BYTES),
-            process_runtime: Mutex::new(None),
-        })
-    }
-
-    fn scoped_path(&self, path: &str) -> String {
-        let normalized = normalize_path(path);
-        if self.base_path == "/" {
-            return normalized;
-        }
-
-        let suffix = normalized.trim_start_matches('/');
-        if self.base_path.starts_with('/') {
-            return normalize_path(&format!(
-                "{}/{}",
-                self.base_path.trim_end_matches('/'),
-                suffix
-            ));
-        }
-
-        if suffix.is_empty() {
-            self.base_path.clone()
-        } else {
-            format!("{}/{}", self.base_path.trim_end_matches('/'), suffix)
-        }
-    }
-
-    fn stat_from_remote(stat: &SandboxAgentFsStat) -> VirtualStat {
-        let modified_ms = now_ms();
-        let is_directory = stat.entry_type == "directory";
-
-        VirtualStat {
-            mode: if is_directory {
-                S_IFDIR | 0o755
-            } else {
-                S_IFREG | 0o644
-            },
-            size: stat.size,
-            blocks: if stat.size == 0 {
-                0
-            } else {
-                stat.size.div_ceil(512)
-            },
-            dev: 1,
-            rdev: 0,
-            is_directory,
-            is_symbolic_link: false,
-            atime_ms: modified_ms,
-            atime_nsec: 0,
-            mtime_ms: modified_ms,
-            mtime_nsec: 0,
-            ctime_ms: modified_ms,
-            ctime_nsec: 0,
-            birthtime_ms: modified_ms,
-            ino: 0,
-            nlink: 1,
-            uid: 0,
-            gid: 0,
-        }
-    }
-
-    fn is_virtual_mount_root(&self, path: &str) -> bool {
-        self.base_path != "/" && normalize_path(path) == "/"
-    }
-
-    fn virtual_mount_root_stat(&self) -> VirtualStat {
-        let modified_ms = now_ms();
-        VirtualStat {
-            mode: S_IFDIR | 0o755,
-            size: 0,
-            blocks: 0,
-            dev: 1,
-            rdev: 0,
-            is_directory: true,
-            is_symbolic_link: false,
-            atime_ms: modified_ms,
-            atime_nsec: 0,
-            mtime_ms: modified_ms,
-            mtime_nsec: 0,
-            ctime_ms: modified_ms,
-            ctime_nsec: 0,
-            birthtime_ms: modified_ms,
-            ino: 0,
-            nlink: 1,
-            uid: 0,
-            gid: 0,
-        }
-    }
-
-    fn scoped_target(&self, target: &str) -> String {
-        if target.starts_with('/') {
-            let scoped = self.scoped_path(target);
-            if scoped.starts_with('/') {
-                scoped
-            } else {
-                format!("/{scoped}")
-            }
-        } else {
-            target.to_owned()
-        }
-    }
-
-    fn strip_base_path_prefix<'a>(&self, target: &'a str) -> Option<&'a str> {
-        if self.base_path == "/" {
-            return None;
-        }
-
-        let base_path = self.base_path.trim_end_matches('/');
-        if target == base_path {
-            Some("")
-        } else if let Some(stripped) = target
-            .strip_prefix(base_path)
-            .filter(|stripped| stripped.starts_with('/'))
-        {
-            Some(stripped)
-        } else if !base_path.starts_with('/') {
-            let absolute_base_path = format!("/{base_path}");
-            if target == absolute_base_path {
-                Some("")
-            } else {
-                target
-                    .strip_prefix(&absolute_base_path)
-                    .filter(|stripped| stripped.starts_with('/'))
-            }
-        } else {
-            None
-        }
-    }
-
-    fn unscoped_target(&self, target: String) -> String {
-        match self.strip_base_path_prefix(&target) {
-            Some(stripped) => format!("/{}", stripped.trim_start_matches('/')),
-            None => target,
-        }
-    }
-
-    fn process_runtimes(&self) -> Vec<RemoteProcessRuntime> {
-        let cached = *self
-            .process_runtime
-            .lock()
-            .expect("lock sandbox_agent process runtime cache");
-        let mut runtimes = Vec::with_capacity(3);
-        if let Some(runtime) = cached {
-            runtimes.push(runtime);
-        }
-        for runtime in [
-            RemoteProcessRuntime::Python3,
-            RemoteProcessRuntime::Python,
-            RemoteProcessRuntime::Node,
-        ] {
-            if Some(runtime) != cached {
-                runtimes.push(runtime);
-            }
-        }
-        runtimes
-    }
-
-    fn remember_process_runtime(&self, runtime: RemoteProcessRuntime) {
-        *self
-            .process_runtime
-            .lock()
-            .expect("lock sandbox_agent process runtime cache") = Some(runtime);
-    }
-
-    fn run_fs_script(
-        &self,
-        op: &'static str,
-        path: &str,
-        python_script: &'static str,
-        node_script: &'static str,
-        args: &[String],
-    ) -> VfsResult<Option<String>> {
-        let mut saw_runtime_candidate = false;
-
-        for runtime in self.process_runtimes() {
-            saw_runtime_candidate = true;
-            match self.run_fs_script_with_runtime(
-                runtime,
-                op,
-                path,
-                python_script,
-                node_script,
-                args,
-            ) {
-                Ok(result) => {
-                    self.remember_process_runtime(runtime);
-                    return Ok(result);
-                }
-                Err(ProcessFallbackError::RuntimeUnavailable) => continue,
-                Err(ProcessFallbackError::Unsupported(message)) => {
-                    return Err(VfsError::unsupported(format!(
-                        "sandbox_agent {op} '{path}' requires remote process execution but the sandbox-agent server does not support the process API: {message}"
-                    )));
-                }
-                Err(ProcessFallbackError::Operation(error)) => return Err(error),
-            }
-        }
-
-        debug_assert!(saw_runtime_candidate);
-        Err(VfsError::unsupported(format!(
-            "sandbox_agent {op} '{path}' requires a remote `python3`, `python`, or `node` runtime via the sandbox-agent process API, but none were available"
-        )))
-    }
-
-    fn run_fs_script_with_runtime(
-        &self,
-        runtime: RemoteProcessRuntime,
-        op: &'static str,
-        path: &str,
-        python_script: &'static str,
-        node_script: &'static str,
-        args: &[String],
-    ) -> Result<Option<String>, ProcessFallbackError> {
-        let request = runtime.process_request(args, python_script, node_script);
-        let response = self
-            .client
-            .run_process(&request)
-            .map_err(|error| match error {
-                SandboxAgentClientError::Status {
-                    status: 404 | 405 | 501,
-                    problem,
-                } => ProcessFallbackError::Unsupported(
-                    problem
-                        .detail
-                        .or(problem.title)
-                        .unwrap_or_else(|| String::from("process API unavailable")),
-                ),
-                other => {
-                    ProcessFallbackError::Operation(sandbox_client_error_to_vfs(op, path, other))
-                }
-            })?;
-
-        if response.timed_out {
-            return Err(ProcessFallbackError::Operation(VfsError::io(format!(
-                "{op} '{path}': remote process helper timed out after {} ms",
-                DEFAULT_PROCESS_TIMEOUT_MS
-            ))));
-        }
-
-        if response.exit_code.unwrap_or_default() == 0 {
-            if response.stdout.is_empty() {
-                return Ok(None);
-            }
-            return parse_process_json_output(&response.stdout, op, path)
-                .map(Some)
-                .map_err(ProcessFallbackError::Operation);
-        }
-
-        if runtime.command_missing(&response) {
-            return Err(ProcessFallbackError::RuntimeUnavailable);
-        }
-
-        Err(ProcessFallbackError::Operation(process_response_to_vfs(
-            op, path, response,
-        )))
-    }
-}
-
-impl VirtualFileSystem for SandboxAgentFilesystem {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        let remote_path = self.scoped_path(path);
-        self.client
-            .read_fs_file(&remote_path)
-            .map_err(|error| sandbox_client_error_to_vfs("open", path, error))
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        let remote_path = self.scoped_path(path);
-        let mut entries = self
-            .client
-            .list_fs_entries(&remote_path)
-            .or_else(|error| {
-                if self.is_virtual_mount_root(path) && is_missing_path_error(&error) {
-                    Ok(Vec::new())
-                } else {
-                    Err(sandbox_client_error_to_vfs("readdir", path, error))
-                }
-            })?
-            .into_iter()
-            .map(|entry| entry.name)
-            .filter(|name| name != "." && name != "..")
-            .collect::<Vec<_>>();
-        entries.sort();
-        Ok(entries)
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        let remote_path = self.scoped_path(path);
-        let mut entries = self
-            .client
-            .list_fs_entries(&remote_path)
-            .or_else(|error| {
-                if self.is_virtual_mount_root(path) && is_missing_path_error(&error) {
-                    Ok(Vec::new())
-                } else {
-                    Err(sandbox_client_error_to_vfs("readdir", path, error))
-                }
-            })?
-            .into_iter()
-            .filter(|entry| entry.name != "." && entry.name != "..")
-            .map(|entry| VirtualDirEntry {
-                name: entry.name,
-                is_directory: entry.entry_type == "directory",
-                is_symbolic_link: false,
-            })
-            .collect::<Vec<_>>();
-        entries.sort_by(|left, right| left.name.cmp(&right.name));
-        Ok(entries)
-    }
-
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        let remote_path = self.scoped_path(path);
-        self.client
-            .write_fs_file(&remote_path, &content.into())
-            .map_err(|error| sandbox_client_error_to_vfs("write", path, error))
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.mkdir(path, false)
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        if !recursive {
-            let parent_path = dirname(path);
-            if parent_path != "/" {
-                let parent_remote = self.scoped_path(&parent_path);
-                let parent = self
-                    .client
-                    .stat_fs(&parent_remote)
-                    .map_err(|error| sandbox_client_error_to_vfs("mkdir", &parent_path, error))?;
-                if parent.entry_type != "directory" {
-                    return Err(VfsError::new(
-                        "ENOTDIR",
-                        format!("not a directory, mkdir '{parent_path}'"),
-                    ));
-                }
-            }
-        }
-
-        let remote_path = self.scoped_path(path);
-        self.client
-            .mkdir_fs(&remote_path)
-            .map_err(|error| sandbox_client_error_to_vfs("mkdir", path, error))
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        let remote_path = self.scoped_path(path);
-        match self.client.stat_fs(&remote_path) {
-            Ok(_) => true,
-            Err(error) => self.is_virtual_mount_root(path) && is_missing_path_error(&error),
-        }
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        let remote_path = self.scoped_path(path);
-        match self.client.stat_fs(&remote_path) {
-            Ok(stat) => Ok(Self::stat_from_remote(&stat)),
-            Err(error) if self.is_virtual_mount_root(path) && is_missing_path_error(&error) => {
-                Ok(self.virtual_mount_root_stat())
-            }
-            Err(error) => Err(sandbox_client_error_to_vfs("stat", path, error)),
-        }
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        let remote_path = self.scoped_path(path);
-        self.client
-            .delete_fs_entry(&remote_path, false)
-            .map_err(|error| sandbox_client_error_to_vfs("unlink", path, error))
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        let remote_path = self.scoped_path(path);
-        let entries = self
-            .client
-            .list_fs_entries(&remote_path)
-            .map_err(|error| sandbox_client_error_to_vfs("rmdir", path, error))?;
-        let children = entries
-            .into_iter()
-            .filter(|entry| entry.name != "." && entry.name != "..")
-            .count();
-        if children > 0 {
-            return Err(VfsError::new(
-                "ENOTEMPTY",
-                format!("directory not empty, rmdir '{path}'"),
-            ));
-        }
-
-        self.client
-            .delete_fs_entry(&remote_path, false)
-            .map_err(|error| sandbox_client_error_to_vfs("rmdir", path, error))
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let old_remote = self.scoped_path(old_path);
-        let new_remote = self.scoped_path(new_path);
-        self.client
-            .move_fs(&old_remote, &new_remote, true)
-            .map_err(|error| sandbox_client_error_to_vfs("rename", old_path, error))
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        let remote_path = self.scoped_path(path);
-        let resolved = self.run_fs_script(
-            "realpath",
-            path,
-            PYTHON_REALPATH_SCRIPT,
-            NODE_REALPATH_SCRIPT,
-            &[remote_path],
-        )?;
-        Ok(self.unscoped_target(resolved.unwrap_or_else(|| normalize_path(path))))
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        let remote_target = self.scoped_target(target);
-        let remote_link = self.scoped_path(link_path);
-        self.run_fs_script(
-            "symlink",
-            link_path,
-            PYTHON_SYMLINK_SCRIPT,
-            NODE_SYMLINK_SCRIPT,
-            &[remote_target, remote_link],
-        )?;
-        Ok(())
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        let remote_path = self.scoped_path(path);
-        let target = self.run_fs_script(
-            "readlink",
-            path,
-            PYTHON_READLINK_SCRIPT,
-            NODE_READLINK_SCRIPT,
-            &[remote_path],
-        )?;
-        Ok(match target {
-            Some(target) if target.starts_with('/') => self.unscoped_target(target),
-            Some(target) => target,
-            None => String::new(),
-        })
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        let remote_path = self.scoped_path(path);
-        match self.client.stat_fs(&remote_path) {
-            Ok(stat) => Ok(Self::stat_from_remote(&stat)),
-            Err(error) if self.is_virtual_mount_root(path) && is_missing_path_error(&error) => {
-                Ok(self.virtual_mount_root_stat())
-            }
-            Err(error) => Err(sandbox_client_error_to_vfs("lstat", path, error)),
-        }
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let old_remote = self.scoped_path(old_path);
-        let new_remote = self.scoped_path(new_path);
-        self.run_fs_script(
-            "link",
-            new_path,
-            PYTHON_LINK_SCRIPT,
-            NODE_LINK_SCRIPT,
-            &[old_remote, new_remote],
-        )?;
-        Ok(())
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        let remote_path = self.scoped_path(path);
-        self.run_fs_script(
-            "chmod",
-            path,
-            PYTHON_CHMOD_SCRIPT,
-            NODE_CHMOD_SCRIPT,
-            &[remote_path, mode.to_string()],
-        )?;
-        Ok(())
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        let remote_path = self.scoped_path(path);
-        self.run_fs_script(
-            "chown",
-            path,
-            PYTHON_CHOWN_SCRIPT,
-            NODE_CHOWN_SCRIPT,
-            &[remote_path, uid.to_string(), gid.to_string()],
-        )?;
-        Ok(())
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        let remote_path = self.scoped_path(path);
-        self.run_fs_script(
-            "utimes",
-            path,
-            PYTHON_UTIMES_SCRIPT,
-            NODE_UTIMES_SCRIPT,
-            &[remote_path, atime_ms.to_string(), mtime_ms.to_string()],
-        )?;
-        Ok(())
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        if length == 0 {
-            return self.write_file(path, Vec::<u8>::new());
-        }
-
-        let remote_path = self.scoped_path(path);
-        self.run_fs_script(
-            "truncate",
-            path,
-            PYTHON_TRUNCATE_SCRIPT,
-            NODE_TRUNCATE_SCRIPT,
-            &[remote_path, length.to_string()],
-        )?;
-        Ok(())
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        if length == 0 {
-            return Ok(Vec::new());
-        }
-
-        let remote_path = self.scoped_path(path);
-        let stat = self
-            .client
-            .stat_fs(&remote_path)
-            .map_err(|error| sandbox_client_error_to_vfs("open", path, error))?;
-        if stat.entry_type == "directory" {
-            return Err(VfsError::new(
-                "EISDIR",
-                format!("illegal operation on a directory, open '{path}'"),
-            ));
-        }
-        if offset >= stat.size {
-            return Ok(Vec::new());
-        }
-
-        match self
-            .client
-            .read_fs_file_range(&remote_path, offset, length, self.max_full_read_bytes)
-            .map_err(|error| sandbox_client_error_to_vfs("open", path, error))?
-        {
-            SandboxAgentReadResponse::Partial(content) => Ok(content),
-            SandboxAgentReadResponse::Full(content) => {
-                tracing::warn!(
-                    path,
-                    downloaded_bytes = content.len(),
-                    max_full_read_bytes = self.max_full_read_bytes,
-                    "sandbox_agent pread fell back to full-file get because remote ignored range"
-                );
-                let start = usize::try_from(offset).unwrap_or(usize::MAX);
-                if start >= content.len() {
-                    return Ok(Vec::new());
-                }
-                let end = start.saturating_add(length).min(content.len());
-                Ok(content[start..end].to_vec())
-            }
-        }
-    }
-}
-
-struct SandboxAgentFilesystemClient {
-    base_url: String,
-    token: Option<String>,
-    headers: BTreeMap<String, String>,
-    agent: ureq::Agent,
-}
-
-#[derive(Clone, Copy, Debug, Eq, PartialEq)]
-enum RemoteProcessRuntime {
-    Python3,
-    Python,
-    Node,
-}
-
-impl RemoteProcessRuntime {
-    fn command(self) -> &'static str {
-        match self {
-            Self::Python3 => "python3",
-            Self::Python => "python",
-            Self::Node => "node",
-        }
-    }
-
-    fn process_request(
-        self,
-        args: &[String],
-        python_script: &'static str,
-        node_script: &'static str,
-    ) -> SandboxAgentProcessRunRequest {
-        match self {
-            Self::Python3 | Self::Python => {
-                let mut process_args = vec![String::from("-c"), python_script.to_owned()];
-                process_args.extend(args.iter().cloned());
-                SandboxAgentProcessRunRequest {
-                    command: self.command().to_owned(),
-                    args: process_args,
-                    cwd: Some(String::from("/")),
-                    env: None,
-                    max_output_bytes: None,
-                    timeout_ms: Some(DEFAULT_PROCESS_TIMEOUT_MS),
-                }
-            }
-            Self::Node => {
-                let mut process_args = vec![String::from("-e"), node_script.to_owned()];
-                if !args.is_empty() {
-                    process_args.push(String::from("--"));
-                    process_args.extend(args.iter().cloned());
-                }
-                SandboxAgentProcessRunRequest {
-                    command: self.command().to_owned(),
-                    args: process_args,
-                    cwd: Some(String::from("/")),
-                    env: None,
-                    max_output_bytes: None,
-                    timeout_ms: Some(DEFAULT_PROCESS_TIMEOUT_MS),
-                }
-            }
-        }
-    }
-
-    fn command_missing(self, response: &SandboxAgentProcessRunResponse) -> bool {
-        if serde_json::from_str::<FsScriptJsonError>(response.stderr.trim()).is_ok() {
-            return false;
-        }
-        let stderr = response.stderr.to_ascii_lowercase();
-        response.exit_code == Some(127)
-            || stderr.contains("command not found")
-            || stderr.contains("executable file not found")
-            || stderr.contains("enoent")
-    }
-}
-
-enum ProcessFallbackError {
-    RuntimeUnavailable,
-    Unsupported(String),
-    Operation(VfsError),
-}
-
-impl SandboxAgentFilesystemClient {
-    fn new(
-        base_url: String,
-        token: Option<String>,
-        headers: BTreeMap<String, String>,
-        timeout: Duration,
-    ) -> Self {
-        let agent = ureq::AgentBuilder::new()
-            .timeout_connect(timeout)
-            .timeout_read(timeout)
-            .timeout_write(timeout)
-            .redirects(0)
-            .build();
-
-        Self {
-            base_url,
-            token,
-            headers,
-            agent,
-        }
-    }
-
-    fn list_fs_entries(
-        &self,
-        path: &str,
-    ) -> Result<Vec<SandboxAgentFsEntry>, SandboxAgentClientError> {
-        self.request_json(
-            "GET",
-            "/v1/fs/entries",
-            vec![(String::from("path"), path.to_owned())],
-            RequestBody::None,
-            Some("application/json"),
-        )
-    }
-
-    fn read_fs_file(&self, path: &str) -> Result<Vec<u8>, SandboxAgentClientError> {
-        self.request_bytes(
-            "GET",
-            "/v1/fs/file",
-            vec![(String::from("path"), path.to_owned())],
-            Some("application/octet-stream"),
-        )
-    }
-
-    fn read_fs_file_range(
-        &self,
-        path: &str,
-        offset: u64,
-        length: usize,
-        max_full_read_bytes: u64,
-    ) -> Result<SandboxAgentReadResponse, SandboxAgentClientError> {
-        let range_length = u64::try_from(length).unwrap_or(u64::MAX);
-        let end = offset.saturating_add(range_length.saturating_sub(1));
-        let response = self.request_raw_with_headers(
-            "GET",
-            "/v1/fs/file",
-            vec![(String::from("path"), path.to_owned())],
-            RequestBody::None,
-            Some("application/octet-stream"),
-            vec![(String::from("Range"), format!("bytes={offset}-{end}"))],
-        )?;
-        let status = response.status();
-        Ok(match status {
-            206 => SandboxAgentReadResponse::Partial(response_into_bytes_limited(
-                response,
-                u64::try_from(length).unwrap_or(u64::MAX),
-            )?),
-            _ => SandboxAgentReadResponse::Full(response_into_bytes_limited(
-                response,
-                max_full_read_bytes,
-            )?),
-        })
-    }
-
-    fn write_fs_file(&self, path: &str, content: &[u8]) -> Result<(), SandboxAgentClientError> {
-        self.request_empty(
-            "PUT",
-            "/v1/fs/file",
-            vec![(String::from("path"), path.to_owned())],
-            RequestBody::Bytes(content.to_vec()),
-            Some("application/json"),
-        )
-    }
-
-    fn delete_fs_entry(&self, path: &str, recursive: bool) -> Result<(), SandboxAgentClientError> {
-        let mut query = vec![(String::from("path"), path.to_owned())];
-        if recursive {
-            query.push((String::from("recursive"), String::from("true")));
-        }
-
-        self.request_empty(
-            "DELETE",
-            "/v1/fs/entry",
-            query,
-            RequestBody::None,
-            Some("application/json"),
-        )
-    }
-
-    fn mkdir_fs(&self, path: &str) -> Result<(), SandboxAgentClientError> {
-        self.request_empty(
-            "POST",
-            "/v1/fs/mkdir",
-            vec![(String::from("path"), path.to_owned())],
-            RequestBody::None,
-            Some("application/json"),
-        )
-    }
-
-    fn move_fs(
-        &self,
-        from: &str,
-        to: &str,
-        overwrite: bool,
-    ) -> Result<(), SandboxAgentClientError> {
-        self.request_empty(
-            "POST",
-            "/v1/fs/move",
-            Vec::new(),
-            RequestBody::Json(serde_json::json!({
-                "from": from,
-                "to": to,
-                "overwrite": overwrite,
-            })),
-            Some("application/json"),
-        )
-    }
-
-    fn stat_fs(&self, path: &str) -> Result<SandboxAgentFsStat, SandboxAgentClientError> {
-        self.request_json(
-            "GET",
-            "/v1/fs/stat",
-            vec![(String::from("path"), path.to_owned())],
-            RequestBody::None,
-            Some("application/json"),
-        )
-    }
-
-    fn run_process(
-        &self,
-        request: &SandboxAgentProcessRunRequest,
-    ) -> Result<SandboxAgentProcessRunResponse, SandboxAgentClientError> {
-        self.request_json(
-            "POST",
-            "/v1/processes/run",
-            Vec::new(),
-            RequestBody::Json(
-                serde_json::to_value(request).expect("serialize process run request"),
-            ),
-            Some("application/json"),
-        )
-    }
-
-    fn request_json<T: DeserializeOwned>(
-        &self,
-        method: &str,
-        path: &str,
-        query: Vec<(String, String)>,
-        body: RequestBody,
-        accept: Option<&str>,
-    ) -> Result<T, SandboxAgentClientError> {
-        let response = self.request_raw(method, path, query, body, accept)?;
-        response
-            .into_json::<T>()
-            .map_err(|error| SandboxAgentClientError::Decode(error.to_string()))
-    }
-
-    fn request_bytes(
-        &self,
-        method: &str,
-        path: &str,
-        query: Vec<(String, String)>,
-        accept: Option<&str>,
-    ) -> Result<Vec<u8>, SandboxAgentClientError> {
-        let response = self.request_raw(method, path, query, RequestBody::None, accept)?;
-        response_into_bytes(response)
-    }
-
-    fn request_empty(
-        &self,
-        method: &str,
-        path: &str,
-        query: Vec<(String, String)>,
-        body: RequestBody,
-        accept: Option<&str>,
-    ) -> Result<(), SandboxAgentClientError> {
-        self.request_raw(method, path, query, body, accept)?;
-        Ok(())
-    }
-
-    fn request_raw(
-        &self,
-        method: &str,
-        path: &str,
-        query: Vec<(String, String)>,
-        body: RequestBody,
-        accept: Option<&str>,
-    ) -> Result<ureq::Response, SandboxAgentClientError> {
-        self.request_raw_with_headers(method, path, query, body, accept, Vec::new())
-    }
-
-    fn request_raw_with_headers(
-        &self,
-        method: &str,
-        path: &str,
-        query: Vec<(String, String)>,
-        body: RequestBody,
-        accept: Option<&str>,
-        request_headers: Vec<(String, String)>,
-    ) -> Result<ureq::Response, SandboxAgentClientError> {
-        let mut request = self
-            .agent
-            .request(method, &format!("{}{}", self.base_url, path));
-
-        if let Some(token) = &self.token {
-            request = request.set("Authorization", &format!("Bearer {token}"));
-        }
-
-        for (name, value) in &self.headers {
-            request = request.set(name, value);
-        }
-
-        for (name, value) in request_headers {
-            request = request.set(&name, &value);
-        }
-
-        if let Some(accept) = accept {
-            request = request.set("Accept", accept);
-        }
-
-        for (name, value) in query {
-            request = request.query(&name, &value);
-        }
-
-        let response = match body {
-            RequestBody::None => request.call(),
-            RequestBody::Json(value) => request.send_json(value),
-            RequestBody::Bytes(content) => request
-                .set("Content-Type", "application/octet-stream")
-                .send_bytes(&content),
-        };
-
-        match response {
-            Ok(response) if response.status() >= 300 => Err(SandboxAgentClientError::Status {
-                status: response.status(),
-                problem: read_problem_details(response),
-            }),
-            Ok(response) => Ok(response),
-            Err(ureq::Error::Status(status, response)) => Err(SandboxAgentClientError::Status {
-                status,
-                problem: read_problem_details(response),
-            }),
-            Err(ureq::Error::Transport(error)) => {
-                Err(SandboxAgentClientError::Transport(error.to_string()))
-            }
-        }
-    }
-}
-
-enum SandboxAgentReadResponse {
-    Partial(Vec<u8>),
-    Full(Vec<u8>),
-}
-
-enum RequestBody {
-    None,
-    Json(serde_json::Value),
-    Bytes(Vec<u8>),
-}
-
-#[derive(Debug, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct SandboxAgentFsEntry {
-    name: String,
-    #[serde(rename = "path")]
-    _path: String,
-    entry_type: String,
-    #[serde(rename = "size")]
-    _size: u64,
-    #[serde(rename = "modified")]
-    _modified: Option<String>,
-}
-
-#[derive(Debug, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct SandboxAgentFsStat {
-    #[serde(rename = "path")]
-    _path: String,
-    entry_type: String,
-    size: u64,
-    #[serde(rename = "modified")]
-    _modified: Option<String>,
-}
-
-#[derive(Debug, Serialize, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct SandboxAgentProcessRunRequest {
-    command: String,
-    #[serde(default)]
-    args: Vec<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    cwd: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    env: Option<BTreeMap<String, String>>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    max_output_bytes: Option<u64>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    timeout_ms: Option<u64>,
-}
-
-#[derive(Debug, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct SandboxAgentProcessRunResponse {
-    #[serde(rename = "durationMs")]
-    _duration_ms: u64,
-    exit_code: Option<i32>,
-    stderr: String,
-    #[serde(rename = "stderrTruncated")]
-    _stderr_truncated: bool,
-    stdout: String,
-    #[serde(rename = "stdoutTruncated")]
-    _stdout_truncated: bool,
-    timed_out: bool,
-}
-
-#[derive(Debug, Deserialize)]
-struct FsScriptJsonOutput {
-    result: Option<String>,
-}
-
-#[derive(Debug, Deserialize)]
-struct FsScriptJsonError {
-    errno: Option<i32>,
-    message: Option<String>,
-}
-
-#[derive(Debug, Default, Deserialize)]
-struct SandboxAgentProblemDetails {
-    title: Option<String>,
-    detail: Option<String>,
-    status: Option<u16>,
-}
-
-#[derive(Debug)]
-enum SandboxAgentClientError {
-    Status {
-        status: u16,
-        problem: SandboxAgentProblemDetails,
-    },
-    Transport(String),
-    Decode(String),
-}
-
-fn read_problem_details(response: ureq::Response) -> SandboxAgentProblemDetails {
-    match response.into_string() {
-        Ok(body) if !body.is_empty() => {
-            serde_json::from_str(&body).unwrap_or_else(|_| SandboxAgentProblemDetails {
-                detail: Some(body),
-                ..SandboxAgentProblemDetails::default()
-            })
-        }
-        _ => SandboxAgentProblemDetails::default(),
-    }
-}
-
-fn response_into_bytes(response: ureq::Response) -> Result<Vec<u8>, SandboxAgentClientError> {
-    let mut reader = response.into_reader();
-    let mut bytes = Vec::new();
-    reader
-        .read_to_end(&mut bytes)
-        .map_err(|error| SandboxAgentClientError::Decode(error.to_string()))?;
-    Ok(bytes)
-}
-
-fn response_into_bytes_limited(
-    response: ureq::Response,
-    max_bytes: u64,
-) -> Result<Vec<u8>, SandboxAgentClientError> {
-    if response
-        .header("Content-Length")
-        .and_then(|value| value.trim().parse::<u64>().ok())
-        .is_some_and(|content_length| content_length > max_bytes)
-    {
-        return Err(SandboxAgentClientError::Decode(format!(
-            "sandbox-agent response exceeded {max_bytes} byte limit"
-        )));
-    }
-
-    let read_limit = max_bytes.saturating_add(1);
-    let mut reader = response.into_reader().take(read_limit);
-    let mut bytes = Vec::new();
-    reader
-        .read_to_end(&mut bytes)
-        .map_err(|error| SandboxAgentClientError::Decode(error.to_string()))?;
-    if u64::try_from(bytes.len()).unwrap_or(u64::MAX) > max_bytes {
-        return Err(SandboxAgentClientError::Decode(format!(
-            "sandbox-agent response exceeded {max_bytes} byte limit"
-        )));
-    }
-    Ok(bytes)
-}
-
-fn validate_sandbox_agent_base_url(raw: &str) -> Result<String, PluginError> {
-    // The baseUrl comes only from the trusted mount config, never from untrusted
-    // guest code, so it is not an SSRF surface (see root CLAUDE.md): the private
-    // -IP denylist and DNS re-resolution are dropped. We still validate
-    // well-formedness (clear errors + the trailing-slash trim that request
-    // building relies on) and still require https for non-local hosts, because
-    // the client's bearer token is sent in the Authorization header and must not
-    // traverse plaintext http.
-    let normalized = raw.trim().trim_end_matches('/').to_owned();
-    if normalized.is_empty() {
-        return Err(PluginError::invalid_input(
-            "sandbox_agent mount requires a non-empty baseUrl",
-        ));
-    }
-
-    let url = Url::parse(&normalized).map_err(|error| {
-        PluginError::invalid_input(format!(
-            "sandbox_agent mount baseUrl is not a valid URL: {error}"
-        ))
-    })?;
-    let host = url.host_str().ok_or_else(|| {
-        PluginError::invalid_input("sandbox_agent mount baseUrl must include a host")
-    })?;
-    let host_for_address = host
-        .strip_prefix('[')
-        .and_then(|host| host.strip_suffix(']'))
-        .unwrap_or(host);
-    if url.query().is_some() || url.fragment().is_some() {
-        return Err(PluginError::invalid_input(
-            "sandbox_agent mount baseUrl must not include a query string or fragment",
-        ));
-    }
-
-    let scheme = url.scheme();
-    if !matches!(scheme, "http" | "https") {
-        return Err(PluginError::invalid_input(
-            "sandbox_agent mount baseUrl must use http or https",
-        ));
-    }
-
-    let is_local = host_for_address.eq_ignore_ascii_case("localhost")
-        || host_for_address
-            .parse::<IpAddr>()
-            .map(|ip| ip.is_loopback())
-            .unwrap_or(false);
-    if scheme != "https" && !is_local {
-        return Err(PluginError::invalid_input(
-            "sandbox_agent mount baseUrl must use https unless it targets localhost",
-        ));
-    }
-
-    Ok(normalized)
-}
-
-fn sandbox_client_error_to_vfs(
-    op: &'static str,
-    path: &str,
-    error: SandboxAgentClientError,
-) -> VfsError {
-    match error {
-        SandboxAgentClientError::Status { status, problem } => {
-            let status = problem.status.unwrap_or(status);
-            let detail = problem
-                .detail
-                .or(problem.title)
-                .unwrap_or_else(|| format!("sandbox-agent request failed with status {status}"));
-
-            let code = if status == 401 || status == 403 {
-                "EACCES"
-            } else if status == 404 || detail.contains("path not found") {
-                "ENOENT"
-            } else if detail.contains("path is not a file") {
-                "EISDIR"
-            } else if detail.contains("destination already exists") || status == 409 {
-                "EEXIST"
-            } else if status == 400 {
-                "EINVAL"
-            } else {
-                "EIO"
-            };
-
-            VfsError::new(code, format!("{op} '{path}': {detail}"))
-        }
-        SandboxAgentClientError::Transport(message) | SandboxAgentClientError::Decode(message) => {
-            VfsError::io(format!("{op} '{path}': {message}"))
-        }
-    }
-}
-
-fn is_missing_path_error(error: &SandboxAgentClientError) -> bool {
-    match error {
-        SandboxAgentClientError::Status { status, problem } => {
-            let detail = problem
-                .detail
-                .as_deref()
-                .or(problem.title.as_deref())
-                .unwrap_or_default();
-            *status == 404 || detail.contains("path not found")
-        }
-        SandboxAgentClientError::Transport(_) | SandboxAgentClientError::Decode(_) => false,
-    }
-}
-
-fn parse_process_json_output(stdout: &str, op: &'static str, path: &str) -> VfsResult<String> {
-    let trimmed = stdout.trim();
-    let output: FsScriptJsonOutput = serde_json::from_str(trimmed).map_err(|error| {
-        VfsError::io(format!(
-            "{op} '{path}': failed to decode process helper output: {error}"
-        ))
-    })?;
-    Ok(output.result.unwrap_or_default())
-}
-
-fn process_response_to_vfs(
-    op: &'static str,
-    path: &str,
-    response: SandboxAgentProcessRunResponse,
-) -> VfsError {
-    let trimmed_stderr = response.stderr.trim();
-    if let Ok(error) = serde_json::from_str::<FsScriptJsonError>(trimmed_stderr) {
-        let message = error
-            .message
-            .unwrap_or_else(|| String::from("remote filesystem helper failed"));
-        if let Some(errno) = error.errno {
-            return VfsError::new(
-                errno_to_vfs_code(errno),
-                format!("{op} '{path}': {message}"),
-            );
-        }
-        return VfsError::io(format!("{op} '{path}': {message}"));
-    }
-
-    let detail = if trimmed_stderr.is_empty() {
-        format!(
-            "remote process exited with code {}",
-            response
-                .exit_code
-                .map(|code| code.to_string())
-                .unwrap_or_else(|| String::from("unknown"))
-        )
-    } else {
-        trimmed_stderr.to_owned()
-    };
-    VfsError::io(format!("{op} '{path}': {detail}"))
-}
-
-fn errno_to_vfs_code(errno: i32) -> &'static str {
-    match errno {
-        nix::libc::EACCES => "EACCES",
-        nix::libc::EEXIST => "EEXIST",
-        nix::libc::EINVAL => "EINVAL",
-        nix::libc::EISDIR => "EISDIR",
-        nix::libc::ELOOP => "ELOOP",
-        nix::libc::ENOENT => "ENOENT",
-        nix::libc::ENOSYS => "ENOSYS",
-        nix::libc::ENOTDIR => "ENOTDIR",
-        nix::libc::ENOTEMPTY => "ENOTEMPTY",
-        nix::libc::EPERM => "EPERM",
-        nix::libc::EXDEV => "EXDEV",
-        _ => "EIO",
-    }
-}
-
-fn dirname(path: &str) -> String {
-    let normalized = normalize_path(path);
-    match normalized.rsplit_once('/') {
-        Some((head, _)) if !head.is_empty() => head.to_owned(),
-        _ => String::from("/"),
-    }
-}
-
-fn normalize_sandbox_agent_base_path(raw: Option<&str>) -> String {
-    match raw {
-        None | Some("") | Some("/") => String::from("/"),
-        Some(path) if path.starts_with('/') => normalize_path(path),
-        Some(path) => {
-            let normalized = normalize_path(&format!("/{path}"));
-            let relative = normalized.trim_start_matches('/');
-            if relative.is_empty() {
-                String::from("/")
-            } else {
-                relative.to_owned()
-            }
-        }
-    }
-}
-
-fn now_ms() -> u64 {
-    SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .unwrap_or_default()
-        .as_millis() as u64
-}
-
-const PYTHON_REALPATH_SCRIPT: &str = r#"import json, os, sys
-path = sys.argv[1]
-try:
-    resolved = os.path.realpath(path)
-    os.stat(resolved)
-    print(json.dumps({"result": resolved}))
-except Exception as exc:
-    payload = {"message": str(exc)}
-    if isinstance(exc, OSError):
-        payload["errno"] = exc.errno
-    print(json.dumps(payload), file=sys.stderr)
-    sys.exit(1)
-"#;
-
-const NODE_REALPATH_SCRIPT: &str = r#"const fs = require("node:fs/promises");
-(async () => {
-  try {
-    const resolved = await fs.realpath(process.argv[1]);
-    console.log(JSON.stringify({ result: resolved }));
-  } catch (error) {
-    console.error(JSON.stringify({ errno: typeof error?.errno === "number" ? Math.abs(error.errno) : undefined, message: error?.message ?? String(error) }));
-    process.exit(1);
-  }
-})();"#;
-
-const PYTHON_SYMLINK_SCRIPT: &str = r#"import json, os, sys
-target, link_path = sys.argv[1], sys.argv[2]
-try:
-    os.symlink(target, link_path)
-    print(json.dumps({"result": None}))
-except Exception as exc:
-    payload = {"message": str(exc)}
-    if isinstance(exc, OSError):
-        payload["errno"] = exc.errno
-    print(json.dumps(payload), file=sys.stderr)
-    sys.exit(1)
-"#;
-
-const NODE_SYMLINK_SCRIPT: &str = r#"const fs = require("node:fs/promises");
-(async () => {
-  try {
-    await fs.symlink(process.argv[1], process.argv[2]);
-    console.log(JSON.stringify({ result: null }));
-  } catch (error) {
-    console.error(JSON.stringify({ errno: typeof error?.errno === "number" ? Math.abs(error.errno) : undefined, message: error?.message ?? String(error) }));
-    process.exit(1);
-  }
-})();"#;
-
-const PYTHON_READLINK_SCRIPT: &str = r#"import json, os, sys
-path = sys.argv[1]
-try:
-    print(json.dumps({"result": os.readlink(path)}))
-except Exception as exc:
-    payload = {"message": str(exc)}
-    if isinstance(exc, OSError):
-        payload["errno"] = exc.errno
-    print(json.dumps(payload), file=sys.stderr)
-    sys.exit(1)
-"#;
-
-const NODE_READLINK_SCRIPT: &str = r#"const fs = require("node:fs/promises");
-(async () => {
-  try {
-    const target = await fs.readlink(process.argv[1]);
-    console.log(JSON.stringify({ result: target }));
-  } catch (error) {
-    console.error(JSON.stringify({ errno: typeof error?.errno === "number" ? Math.abs(error.errno) : undefined, message: error?.message ?? String(error) }));
-    process.exit(1);
-  }
-})();"#;
-
-const PYTHON_LINK_SCRIPT: &str = r#"import json, os, sys
-source, destination = sys.argv[1], sys.argv[2]
-try:
-    os.link(source, destination)
-    print(json.dumps({"result": None}))
-except Exception as exc:
-    payload = {"message": str(exc)}
-    if isinstance(exc, OSError):
-        payload["errno"] = exc.errno
-    print(json.dumps(payload), file=sys.stderr)
-    sys.exit(1)
-"#;
-
-const NODE_LINK_SCRIPT: &str = r#"const fs = require("node:fs/promises");
-(async () => {
-  try {
-    await fs.link(process.argv[1], process.argv[2]);
-    console.log(JSON.stringify({ result: null }));
-  } catch (error) {
-    console.error(JSON.stringify({ errno: typeof error?.errno === "number" ? Math.abs(error.errno) : undefined, message: error?.message ?? String(error) }));
-    process.exit(1);
-  }
-})();"#;
-
-const PYTHON_CHMOD_SCRIPT: &str = r#"import json, os, sys
-path, mode = sys.argv[1], int(sys.argv[2])
-try:
-    os.chmod(path, mode)
-    print(json.dumps({"result": None}))
-except Exception as exc:
-    payload = {"message": str(exc)}
-    if isinstance(exc, OSError):
-        payload["errno"] = exc.errno
-    print(json.dumps(payload), file=sys.stderr)
-    sys.exit(1)
-"#;
-
-const NODE_CHMOD_SCRIPT: &str = r#"const fs = require("node:fs/promises");
-(async () => {
-  try {
-    await fs.chmod(process.argv[1], Number(process.argv[2]));
-    console.log(JSON.stringify({ result: null }));
-  } catch (error) {
-    console.error(JSON.stringify({ errno: typeof error?.errno === "number" ? Math.abs(error.errno) : undefined, message: error?.message ?? String(error) }));
-    process.exit(1);
-  }
-})();"#;
-
-const PYTHON_CHOWN_SCRIPT: &str = r#"import json, os, sys
-path, uid, gid = sys.argv[1], int(sys.argv[2]), int(sys.argv[3])
-try:
-    os.chown(path, uid, gid)
-    print(json.dumps({"result": None}))
-except Exception as exc:
-    payload = {"message": str(exc)}
-    if isinstance(exc, OSError):
-        payload["errno"] = exc.errno
-    print(json.dumps(payload), file=sys.stderr)
-    sys.exit(1)
-"#;
-
-const NODE_CHOWN_SCRIPT: &str = r#"const fs = require("node:fs/promises");
-(async () => {
-  try {
-    await fs.chown(process.argv[1], Number(process.argv[2]), Number(process.argv[3]));
-    console.log(JSON.stringify({ result: null }));
-  } catch (error) {
-    console.error(JSON.stringify({ errno: typeof error?.errno === "number" ? Math.abs(error.errno) : undefined, message: error?.message ?? String(error) }));
-    process.exit(1);
-  }
-})();"#;
-
-const PYTHON_UTIMES_SCRIPT: &str = r#"import json, os, sys
-path, atime_ms, mtime_ms = sys.argv[1], int(sys.argv[2]), int(sys.argv[3])
-try:
-    os.utime(path, ns=(atime_ms * 1_000_000, mtime_ms * 1_000_000))
-    print(json.dumps({"result": None}))
-except Exception as exc:
-    payload = {"message": str(exc)}
-    if isinstance(exc, OSError):
-        payload["errno"] = exc.errno
-    print(json.dumps(payload), file=sys.stderr)
-    sys.exit(1)
-"#;
-
-const NODE_UTIMES_SCRIPT: &str = r#"const fs = require("node:fs/promises");
-(async () => {
-  try {
-    await fs.utimes(process.argv[1], Number(process.argv[2]) / 1000, Number(process.argv[3]) / 1000);
-    console.log(JSON.stringify({ result: null }));
-  } catch (error) {
-    console.error(JSON.stringify({ errno: typeof error?.errno === "number" ? Math.abs(error.errno) : undefined, message: error?.message ?? String(error) }));
-    process.exit(1);
-  }
-})();"#;
-
-const PYTHON_TRUNCATE_SCRIPT: &str = r#"import json, os, sys
-path, length = sys.argv[1], int(sys.argv[2])
-try:
-    os.truncate(path, length)
-    print(json.dumps({"result": None}))
-except Exception as exc:
-    payload = {"message": str(exc)}
-    if isinstance(exc, OSError):
-        payload["errno"] = exc.errno
-    print(json.dumps(payload), file=sys.stderr)
-    sys.exit(1)
-"#;
-
-const NODE_TRUNCATE_SCRIPT: &str = r#"const fs = require("node:fs/promises");
-(async () => {
-  try {
-    await fs.truncate(process.argv[1], Number(process.argv[2]));
-    console.log(JSON.stringify({ result: null }));
-  } catch (error) {
-    console.error(JSON.stringify({ errno: typeof error?.errno === "number" ? Math.abs(error.errno) : undefined, message: error?.message ?? String(error) }));
-    process.exit(1);
-  }
-})();"#;
-
-#[cfg(test)]
-pub(crate) mod test_support {
-    #![allow(dead_code)]
-
-    use serde::{Deserialize, Serialize};
-    use std::collections::BTreeMap;
-    use std::fs;
-    use std::io::{Read, Write};
-    use std::net::{TcpListener, TcpStream};
-    use std::path::{Path, PathBuf};
-    use std::process::Command;
-    use std::sync::atomic::{AtomicBool, Ordering};
-    use std::sync::{Arc, Mutex};
-    use std::thread::{self, JoinHandle};
-    use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
-
-    #[derive(Debug, Clone)]
-    pub(crate) struct LoggedRequest {
-        pub method: String,
-        pub path: String,
-        pub query: BTreeMap<String, String>,
-        pub headers: BTreeMap<String, String>,
-        pub response_status: u16,
-        pub response_body_bytes: usize,
-    }
-
-    pub(crate) struct MockSandboxAgentServer {
-        base_url: String,
-        root: PathBuf,
-        shutdown: Arc<AtomicBool>,
-        requests: Arc<Mutex<Vec<LoggedRequest>>>,
-        handle: Option<JoinHandle<()>>,
-    }
-
-    impl MockSandboxAgentServer {
-        pub(crate) fn start(prefix: &str, token: Option<&str>) -> Self {
-            Self::start_with_options(prefix, token, true, true)
-        }
-
-        pub(crate) fn start_without_process_api(prefix: &str, token: Option<&str>) -> Self {
-            Self::start_with_options(prefix, token, false, true)
-        }
-
-        pub(crate) fn start_without_range_support(prefix: &str, token: Option<&str>) -> Self {
-            Self::start_with_options(prefix, token, true, false)
-        }
-
-        fn start_with_options(
-            prefix: &str,
-            token: Option<&str>,
-            process_api_supported: bool,
-            range_requests_supported: bool,
-        ) -> Self {
-            let root = temp_dir(prefix);
-            // macOS: `temp_dir()` lives under `/var/folders/…`, but `/var` is a
-            // symlink to `/private/var`, and the `realpath` the process helper
-            // runs returns the resolved `/private/var/…` form. Canonicalize the
-            // mock root so its root-prefix stripping (`sanitize_process_stdout`)
-            // matches that output instead of leaking the absolute host path back
-            // to the plugin (which the plugin would then fail to unscope).
-            #[cfg(target_os = "macos")]
-            let root = fs::canonicalize(&root).expect("canonicalize mock sandbox-agent root");
-            let listener = TcpListener::bind("127.0.0.1:0").expect("bind mock sandbox-agent");
-            listener
-                .set_nonblocking(true)
-                .expect("configure mock sandbox-agent listener");
-            let address = listener
-                .local_addr()
-                .expect("resolve mock sandbox-agent address");
-            let shutdown = Arc::new(AtomicBool::new(false));
-            let requests = Arc::new(Mutex::new(Vec::new()));
-            let token = token.map(str::to_owned);
-            let root_for_thread = root.clone();
-            let shutdown_for_thread = Arc::clone(&shutdown);
-            let requests_for_thread = Arc::clone(&requests);
-
-            let handle = thread::spawn(move || {
-                while !shutdown_for_thread.load(Ordering::SeqCst) {
-                    match listener.accept() {
-                        Ok((stream, _)) => {
-                            handle_stream(
-                                stream,
-                                &root_for_thread,
-                                token.as_deref(),
-                                process_api_supported,
-                                range_requests_supported,
-                                &requests_for_thread,
-                            );
-                        }
-                        Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                            thread::sleep(Duration::from_millis(10));
-                        }
-                        Err(_) => break,
-                    }
-                }
-            });
-
-            Self {
-                base_url: format!("http://{}", address),
-                root,
-                shutdown,
-                requests,
-                handle: Some(handle),
-            }
-        }
-
-        pub(crate) fn base_url(&self) -> &str {
-            &self.base_url
-        }
-
-        pub(crate) fn root(&self) -> &Path {
-            &self.root
-        }
-
-        pub(crate) fn requests(&self) -> Vec<LoggedRequest> {
-            self.requests
-                .lock()
-                .expect("lock mock sandbox-agent request log")
-                .clone()
-        }
-    }
-
-    impl Drop for MockSandboxAgentServer {
-        fn drop(&mut self) {
-            self.shutdown.store(true, Ordering::SeqCst);
-            if let Some(handle) = self.handle.take() {
-                handle.join().expect("join mock sandbox-agent thread");
-            }
-            let _ = fs::remove_dir_all(&self.root);
-        }
-    }
-
-    #[derive(Debug, Deserialize)]
-    struct MoveRequest {
-        from: String,
-        to: String,
-        overwrite: Option<bool>,
-    }
-
-    #[derive(Debug, Deserialize)]
-    #[serde(rename_all = "camelCase")]
-    struct ProcessRunRequestBody {
-        command: String,
-        args: Option<Vec<String>>,
-        cwd: Option<String>,
-        env: Option<BTreeMap<String, String>>,
-        #[serde(rename = "maxOutputBytes")]
-        _max_output_bytes: Option<u64>,
-        #[serde(rename = "timeoutMs")]
-        _timeout_ms: Option<u64>,
-    }
-
-    #[derive(Debug, Serialize)]
-    #[serde(rename_all = "camelCase")]
-    struct ProcessRunResponseBody {
-        duration_ms: u64,
-        exit_code: Option<i32>,
-        stderr: String,
-        stderr_truncated: bool,
-        stdout: String,
-        stdout_truncated: bool,
-        timed_out: bool,
-    }
-
-    #[derive(Debug, Serialize)]
-    #[serde(rename_all = "camelCase")]
-    struct FsEntryBody {
-        name: String,
-        path: String,
-        entry_type: &'static str,
-        size: u64,
-        modified: Option<String>,
-    }
-
-    #[derive(Debug, Serialize)]
-    #[serde(rename_all = "camelCase")]
-    struct FsStatBody {
-        path: String,
-        entry_type: &'static str,
-        size: u64,
-        modified: Option<String>,
-    }
-
-    fn handle_stream(
-        mut stream: TcpStream,
-        root: &Path,
-        token: Option<&str>,
-        process_api_supported: bool,
-        range_requests_supported: bool,
-        requests: &Arc<Mutex<Vec<LoggedRequest>>>,
-    ) {
-        stream
-            .set_read_timeout(Some(Duration::from_secs(2)))
-            .expect("set mock sandbox-agent read timeout");
-
-        let mut buffer = Vec::new();
-        let mut header_end = None;
-        while header_end.is_none() {
-            let mut chunk = [0; 1024];
-            match stream.read(&mut chunk) {
-                Ok(0) => return,
-                Ok(read) => {
-                    buffer.extend_from_slice(&chunk[..read]);
-                    header_end = find_header_end(&buffer);
-                }
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => continue,
-                Err(_) => return,
-            }
-        }
-
-        let header_end = header_end.expect("parse mock sandbox-agent headers");
-        let header_text = String::from_utf8_lossy(&buffer[..header_end]);
-        let mut lines = header_text.split("\r\n");
-        let request_line = match lines.next() {
-            Some(line) if !line.is_empty() => line,
-            _ => return,
-        };
-        let mut request_line_parts = request_line.split_whitespace();
-        let method = request_line_parts.next().unwrap_or_default().to_owned();
-        let target = request_line_parts.next().unwrap_or_default().to_owned();
-        let (path, query) = split_target(&target);
-
-        let mut headers = BTreeMap::new();
-        for line in lines {
-            if line.is_empty() {
-                continue;
-            }
-            let Some((name, value)) = line.split_once(':') else {
-                continue;
-            };
-            headers.insert(name.trim().to_ascii_lowercase(), value.trim().to_owned());
-        }
-
-        let content_length = headers
-            .get("content-length")
-            .and_then(|value| value.parse::<usize>().ok())
-            .unwrap_or(0);
-        while buffer.len() < header_end + 4 + content_length {
-            let mut chunk = [0; 1024];
-            match stream.read(&mut chunk) {
-                Ok(0) => break,
-                Ok(read) => buffer.extend_from_slice(&chunk[..read]),
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => continue,
-                Err(_) => break,
-            }
-        }
-        let body = &buffer[header_end + 4..header_end + 4 + content_length];
-
-        let request_index = {
-            let mut logged_requests = requests.lock().expect("record mock sandbox-agent request");
-            logged_requests.push(LoggedRequest {
-                method: method.clone(),
-                path: path.clone(),
-                query: query.clone(),
-                headers: headers.clone(),
-                response_status: 0,
-                response_body_bytes: 0,
-            });
-            logged_requests.len() - 1
-        };
-
-        if let Some(expected_token) = token {
-            let authorization = headers
-                .get("authorization")
-                .map(String::as_str)
-                .unwrap_or_default();
-            if authorization != format!("Bearer {expected_token}") {
-                let outcome =
-                    send_problem(&mut stream, 401, "Unauthorized", "authentication required");
-                update_logged_request(requests, request_index, outcome);
-                return;
-            }
-        }
-
-        let outcome = match (method.as_str(), path.as_str()) {
-            ("GET", "/v1/fs/entries") => {
-                let path = query
-                    .get("path")
-                    .cloned()
-                    .unwrap_or_else(|| String::from("."));
-                let target = resolve_fs_path(root, &path);
-                match fs::read_dir(&target) {
-                    Ok(entries) => {
-                        let mut payload = entries
-                            .filter_map(Result::ok)
-                            .map(|entry| {
-                                let metadata = entry.metadata().expect("read mock entry metadata");
-                                FsEntryBody {
-                                    name: entry.file_name().to_string_lossy().into_owned(),
-                                    path: entry.path().to_string_lossy().into_owned(),
-                                    entry_type: if metadata.is_dir() {
-                                        "directory"
-                                    } else {
-                                        "file"
-                                    },
-                                    size: metadata.len(),
-                                    modified: None,
-                                }
-                            })
-                            .collect::<Vec<_>>();
-                        payload.sort_by(|left, right| left.name.cmp(&right.name));
-                        send_json(&mut stream, 200, &payload)
-                    }
-                    Err(error) if error.kind() == std::io::ErrorKind::NotFound => send_problem(
-                        &mut stream,
-                        400,
-                        "Bad Request",
-                        &format!("path not found: {}", target.display()),
-                    ),
-                    Err(error) => send_problem(
-                        &mut stream,
-                        500,
-                        "Internal Server Error",
-                        &error.to_string(),
-                    ),
-                }
-            }
-            ("GET", "/v1/fs/file") => {
-                let path = query.get("path").cloned().unwrap_or_default();
-                let target = resolve_fs_path(root, &path);
-                if path == "/redirect-to-private" {
-                    return_with_logged_request(
-                        requests,
-                        request_index,
-                        send_redirect(&mut stream, "http://169.254.169.254/latest"),
-                    );
-                    return;
-                }
-                match fs::metadata(&target) {
-                    Ok(metadata) if metadata.is_file() => match fs::read(&target) {
-                        Ok(bytes) => {
-                            if path == "/stream-over-limit" && !range_requests_supported {
-                                return_with_logged_request(
-                                    requests,
-                                    request_index,
-                                    send_bytes_without_content_length(
-                                        &mut stream,
-                                        200,
-                                        "application/octet-stream",
-                                        &bytes,
-                                    ),
-                                );
-                                return;
-                            }
-                            if range_requests_supported {
-                                if let Some(range) = headers
-                                    .get("range")
-                                    .and_then(|value| parse_range_header(value, bytes.len()))
-                                {
-                                    let body = &bytes[range.start..=range.end];
-                                    return_with_logged_request(
-                                        requests,
-                                        request_index,
-                                        send_bytes_with_headers(
-                                            &mut stream,
-                                            206,
-                                            "application/octet-stream",
-                                            body,
-                                            &[
-                                                ("Accept-Ranges", String::from("bytes")),
-                                                (
-                                                    "Content-Range",
-                                                    format!(
-                                                        "bytes {}-{}/{}",
-                                                        range.start,
-                                                        range.end,
-                                                        bytes.len()
-                                                    ),
-                                                ),
-                                            ],
-                                        ),
-                                    );
-                                    return;
-                                }
-                            }
-                            send_bytes(&mut stream, 200, "application/octet-stream", &bytes)
-                        }
-                        Err(error) => send_problem(
-                            &mut stream,
-                            500,
-                            "Internal Server Error",
-                            &error.to_string(),
-                        ),
-                    },
-                    Ok(_) => send_problem(
-                        &mut stream,
-                        400,
-                        "Bad Request",
-                        &format!("path is not a file: {}", target.display()),
-                    ),
-                    Err(error) if error.kind() == std::io::ErrorKind::NotFound => send_problem(
-                        &mut stream,
-                        400,
-                        "Bad Request",
-                        &format!("path not found: {}", target.display()),
-                    ),
-                    Err(error) => send_problem(
-                        &mut stream,
-                        500,
-                        "Internal Server Error",
-                        &error.to_string(),
-                    ),
-                }
-            }
-            ("PUT", "/v1/fs/file") => {
-                let path = query.get("path").cloned().unwrap_or_default();
-                let target = resolve_fs_path(root, &path);
-                if let Some(parent) = target.parent() {
-                    let _ = fs::create_dir_all(parent);
-                }
-                match fs::write(&target, body) {
-                    Ok(()) => send_json(
-                        &mut stream,
-                        200,
-                        &serde_json::json!({
-                            "path": target.to_string_lossy(),
-                            "bytesWritten": body.len(),
-                        }),
-                    ),
-                    Err(error) => send_problem(
-                        &mut stream,
-                        500,
-                        "Internal Server Error",
-                        &error.to_string(),
-                    ),
-                }
-            }
-            ("DELETE", "/v1/fs/entry") => {
-                let path = query.get("path").cloned().unwrap_or_default();
-                let recursive = query
-                    .get("recursive")
-                    .map(|value| value == "true")
-                    .unwrap_or(false);
-                let target = resolve_fs_path(root, &path);
-                match fs::metadata(&target) {
-                    Ok(metadata) if metadata.is_dir() => {
-                        let result = if recursive {
-                            fs::remove_dir_all(&target)
-                        } else {
-                            fs::remove_dir(&target)
-                        };
-                        match result {
-                            Ok(()) => send_json(
-                                &mut stream,
-                                200,
-                                &serde_json::json!({ "path": target.to_string_lossy() }),
-                            ),
-                            Err(error) => send_problem(
-                                &mut stream,
-                                500,
-                                "Internal Server Error",
-                                &error.to_string(),
-                            ),
-                        }
-                    }
-                    Ok(_) => match fs::remove_file(&target) {
-                        Ok(()) => send_json(
-                            &mut stream,
-                            200,
-                            &serde_json::json!({ "path": target.to_string_lossy() }),
-                        ),
-                        Err(error) => send_problem(
-                            &mut stream,
-                            500,
-                            "Internal Server Error",
-                            &error.to_string(),
-                        ),
-                    },
-                    Err(error) if error.kind() == std::io::ErrorKind::NotFound => send_problem(
-                        &mut stream,
-                        400,
-                        "Bad Request",
-                        &format!("path not found: {}", target.display()),
-                    ),
-                    Err(error) => send_problem(
-                        &mut stream,
-                        500,
-                        "Internal Server Error",
-                        &error.to_string(),
-                    ),
-                }
-            }
-            ("POST", "/v1/fs/mkdir") => {
-                let path = query.get("path").cloned().unwrap_or_default();
-                let target = resolve_fs_path(root, &path);
-                match fs::create_dir_all(&target) {
-                    Ok(()) => send_json(
-                        &mut stream,
-                        200,
-                        &serde_json::json!({ "path": target.to_string_lossy() }),
-                    ),
-                    Err(error) => send_problem(
-                        &mut stream,
-                        500,
-                        "Internal Server Error",
-                        &error.to_string(),
-                    ),
-                }
-            }
-            ("POST", "/v1/fs/move") => {
-                let request: MoveRequest =
-                    serde_json::from_slice(body).expect("parse mock move request");
-                let source = resolve_fs_path(root, &request.from);
-                let destination = resolve_fs_path(root, &request.to);
-
-                if destination.exists() {
-                    if request.overwrite.unwrap_or(false) {
-                        let metadata =
-                            fs::metadata(&destination).expect("inspect mock destination metadata");
-                        let remove_result = if metadata.is_dir() {
-                            fs::remove_dir_all(&destination)
-                        } else {
-                            fs::remove_file(&destination)
-                        };
-                        if let Err(error) = remove_result {
-                            send_problem(
-                                &mut stream,
-                                500,
-                                "Internal Server Error",
-                                &error.to_string(),
-                            );
-                            return;
-                        }
-                    } else {
-                        send_problem(
-                            &mut stream,
-                            400,
-                            "Bad Request",
-                            &format!("destination already exists: {}", destination.display()),
-                        );
-                        return;
-                    }
-                }
-
-                if let Some(parent) = destination.parent() {
-                    let _ = fs::create_dir_all(parent);
-                }
-
-                match fs::rename(&source, &destination) {
-                    Ok(()) => send_json(
-                        &mut stream,
-                        200,
-                        &serde_json::json!({
-                            "from": source.to_string_lossy(),
-                            "to": destination.to_string_lossy(),
-                        }),
-                    ),
-                    Err(error) if error.kind() == std::io::ErrorKind::NotFound => send_problem(
-                        &mut stream,
-                        400,
-                        "Bad Request",
-                        &format!("path not found: {}", source.display()),
-                    ),
-                    Err(error) => send_problem(
-                        &mut stream,
-                        500,
-                        "Internal Server Error",
-                        &error.to_string(),
-                    ),
-                }
-            }
-            ("GET", "/v1/fs/stat") => {
-                let path = query.get("path").cloned().unwrap_or_default();
-                let target = resolve_fs_path(root, &path);
-                match fs::metadata(&target) {
-                    Ok(metadata) => send_json(
-                        &mut stream,
-                        200,
-                        &FsStatBody {
-                            path: target.to_string_lossy().into_owned(),
-                            entry_type: if metadata.is_dir() {
-                                "directory"
-                            } else {
-                                "file"
-                            },
-                            size: metadata.len(),
-                            modified: None,
-                        },
-                    ),
-                    Err(error) if error.kind() == std::io::ErrorKind::NotFound => send_problem(
-                        &mut stream,
-                        400,
-                        "Bad Request",
-                        &format!("path not found: {}", target.display()),
-                    ),
-                    Err(error) => send_problem(
-                        &mut stream,
-                        500,
-                        "Internal Server Error",
-                        &error.to_string(),
-                    ),
-                }
-            }
-            ("POST", "/v1/processes/run") => {
-                if !process_api_supported {
-                    let outcome = send_problem(
-                        &mut stream,
-                        501,
-                        "Not Implemented",
-                        "process API unsupported by mock sandbox-agent",
-                    );
-                    update_logged_request(requests, request_index, outcome);
-                    return;
-                }
-
-                let request: ProcessRunRequestBody =
-                    serde_json::from_slice(body).expect("parse mock process run request");
-                let started = Instant::now();
-                let mut command = Command::new(&request.command);
-                command.args(rewrite_process_args(root, request.args.unwrap_or_default()));
-                if let Some(cwd) = request.cwd {
-                    if cwd.starts_with('/') {
-                        command.current_dir(resolve_fs_path(root, &cwd));
-                    } else {
-                        command.current_dir(cwd);
-                    }
-                }
-                if let Some(env) = request.env {
-                    command.envs(env);
-                }
-
-                match command.output() {
-                    Ok(output) => send_json(
-                        &mut stream,
-                        200,
-                        &ProcessRunResponseBody {
-                            duration_ms: started.elapsed().as_millis() as u64,
-                            exit_code: output.status.code(),
-                            stderr: String::from_utf8_lossy(&output.stderr).into_owned(),
-                            stderr_truncated: false,
-                            stdout: sanitize_process_stdout(
-                                root,
-                                String::from_utf8_lossy(&output.stdout).into_owned(),
-                            ),
-                            stdout_truncated: false,
-                            timed_out: false,
-                        },
-                    ),
-                    Err(error) if error.kind() == std::io::ErrorKind::NotFound => send_json(
-                        &mut stream,
-                        200,
-                        &ProcessRunResponseBody {
-                            duration_ms: started.elapsed().as_millis() as u64,
-                            exit_code: Some(127),
-                            stderr: error.to_string(),
-                            stderr_truncated: false,
-                            stdout: String::new(),
-                            stdout_truncated: false,
-                            timed_out: false,
-                        },
-                    ),
-                    Err(error) => send_problem(
-                        &mut stream,
-                        500,
-                        "Internal Server Error",
-                        &error.to_string(),
-                    ),
-                }
-            }
-            _ => send_problem(&mut stream, 404, "Not Found", "unknown mock route"),
-        };
-        update_logged_request(requests, request_index, outcome);
-    }
-
-    fn find_header_end(buffer: &[u8]) -> Option<usize> {
-        buffer.windows(4).position(|window| window == b"\r\n\r\n")
-    }
-
-    fn split_target(target: &str) -> (String, BTreeMap<String, String>) {
-        let Some((path, query)) = target.split_once('?') else {
-            return (target.to_owned(), BTreeMap::new());
-        };
-
-        let query = query
-            .split('&')
-            .filter(|pair| !pair.is_empty())
-            .map(|pair| match pair.split_once('=') {
-                Some((name, value)) => (percent_decode(name), percent_decode(value)),
-                None => (percent_decode(pair), String::new()),
-            })
-            .collect::<BTreeMap<_, _>>();
-        (path.to_owned(), query)
-    }
-
-    fn percent_decode(raw: &str) -> String {
-        let bytes = raw.as_bytes();
-        let mut index = 0;
-        let mut decoded = Vec::with_capacity(bytes.len());
-        while index < bytes.len() {
-            match bytes[index] {
-                b'+' => {
-                    decoded.push(b' ');
-                    index += 1;
-                }
-                b'%' if index + 2 < bytes.len() => {
-                    if let Ok(value) = u8::from_str_radix(&raw[index + 1..index + 3], 16) {
-                        decoded.push(value);
-                        index += 3;
-                    } else {
-                        decoded.push(bytes[index]);
-                        index += 1;
-                    }
-                }
-                byte => {
-                    decoded.push(byte);
-                    index += 1;
-                }
-            }
-        }
-        String::from_utf8(decoded).expect("decode mock sandbox-agent query")
-    }
-
-    fn resolve_fs_path(root: &Path, path: &str) -> PathBuf {
-        let normalized = secure_exec_kernel::vfs::normalize_path(path);
-        root.join(normalized.trim_start_matches('/'))
-    }
-
-    fn rewrite_process_args(root: &Path, args: Vec<String>) -> Vec<String> {
-        args.into_iter()
-            .map(|arg| {
-                if arg.starts_with('/') {
-                    resolve_fs_path(root, &arg).to_string_lossy().into_owned()
-                } else {
-                    arg
-                }
-            })
-            .collect()
-    }
-
-    fn sanitize_process_stdout(root: &Path, stdout: String) -> String {
-        let trimmed = stdout.trim();
-        let Ok(mut value) = serde_json::from_str::<serde_json::Value>(trimmed) else {
-            return stdout;
-        };
-
-        if let Some(result) = value
-            .get("result")
-            .and_then(serde_json::Value::as_str)
-            .map(str::to_owned)
-        {
-            let root_string = root.to_string_lossy();
-            if result == root_string {
-                value["result"] = serde_json::Value::String(String::from("/"));
-            } else if let Some(stripped) = result.strip_prefix(root_string.as_ref()) {
-                value["result"] =
-                    serde_json::Value::String(format!("/{}", stripped.trim_start_matches('/')));
-            }
-        }
-
-        serde_json::to_string(&value).expect("serialize sanitized process stdout")
-    }
-
-    #[derive(Clone, Copy)]
-    struct ResponseOutcome {
-        status: u16,
-        body_bytes: usize,
-    }
-
-    #[derive(Clone, Copy)]
-    struct ByteRange {
-        start: usize,
-        end: usize,
-    }
-
-    fn parse_range_header(raw: &str, content_len: usize) -> Option<ByteRange> {
-        let spec = raw.strip_prefix("bytes=")?;
-        let (start_raw, end_raw) = spec.split_once('-')?;
-        if start_raw.is_empty() {
-            return None;
-        }
-        let start = start_raw.parse::<usize>().ok()?;
-        if start >= content_len {
-            return None;
-        }
-        let end = if end_raw.is_empty() {
-            content_len.saturating_sub(1)
-        } else {
-            end_raw
-                .parse::<usize>()
-                .ok()?
-                .min(content_len.saturating_sub(1))
-        };
-        if end < start {
-            return None;
-        }
-        Some(ByteRange { start, end })
-    }
-
-    fn update_logged_request(
-        requests: &Arc<Mutex<Vec<LoggedRequest>>>,
-        request_index: usize,
-        outcome: ResponseOutcome,
-    ) {
-        if let Some(request) = requests
-            .lock()
-            .expect("lock mock sandbox-agent request log")
-            .get_mut(request_index)
-        {
-            request.response_status = outcome.status;
-            request.response_body_bytes = outcome.body_bytes;
-        }
-    }
-
-    fn return_with_logged_request(
-        requests: &Arc<Mutex<Vec<LoggedRequest>>>,
-        request_index: usize,
-        outcome: ResponseOutcome,
-    ) {
-        update_logged_request(requests, request_index, outcome);
-    }
-
-    fn send_json(stream: &mut TcpStream, status: u16, value: &impl Serialize) -> ResponseOutcome {
-        let body = serde_json::to_vec(value).expect("serialize mock sandbox-agent response");
-        send_bytes(stream, status, "application/json", &body)
-    }
-
-    fn send_problem(
-        stream: &mut TcpStream,
-        status: u16,
-        title: &str,
-        detail: &str,
-    ) -> ResponseOutcome {
-        send_json(
-            stream,
-            status,
-            &serde_json::json!({
-                "type": "about:blank",
-                "title": title,
-                "status": status,
-                "detail": detail,
-            }),
-        )
-    }
-
-    fn send_bytes(
-        stream: &mut TcpStream,
-        status: u16,
-        content_type: &str,
-        body: &[u8],
-    ) -> ResponseOutcome {
-        send_bytes_with_headers(stream, status, content_type, body, &[])
-    }
-
-    fn send_redirect(stream: &mut TcpStream, location: &str) -> ResponseOutcome {
-        send_bytes_with_headers(
-            stream,
-            302,
-            "text/plain",
-            b"",
-            &[("Location", location.to_owned())],
-        )
-    }
-
-    fn send_bytes_without_content_length(
-        stream: &mut TcpStream,
-        status: u16,
-        content_type: &str,
-        body: &[u8],
-    ) -> ResponseOutcome {
-        let status_text = status_text(status);
-        let headers = format!(
-            "HTTP/1.1 {status} {status_text}\r\nContent-Type: {content_type}\r\nConnection: close\r\n\r\n"
-        );
-        let _ = stream.write_all(headers.as_bytes());
-        let _ = stream.write_all(body);
-        let _ = stream.flush();
-        ResponseOutcome {
-            status,
-            body_bytes: body.len(),
-        }
-    }
-
-    fn send_bytes_with_headers(
-        stream: &mut TcpStream,
-        status: u16,
-        content_type: &str,
-        body: &[u8],
-        extra_headers: &[(&str, String)],
-    ) -> ResponseOutcome {
-        let status_text = status_text(status);
-        let mut headers = format!(
-            "HTTP/1.1 {status} {status_text}\r\nContent-Length: {}\r\nContent-Type: {content_type}\r\nConnection: close\r\n",
-            body.len()
-        );
-        for (name, value) in extra_headers {
-            headers.push_str(name);
-            headers.push_str(": ");
-            headers.push_str(value);
-            headers.push_str("\r\n");
-        }
-        headers.push_str("\r\n");
-        let _ = stream.write_all(headers.as_bytes());
-        let _ = stream.write_all(body);
-        let _ = stream.flush();
-        ResponseOutcome {
-            status,
-            body_bytes: body.len(),
-        }
-    }
-
-    fn status_text(status: u16) -> &'static str {
-        match status {
-            200 => "OK",
-            206 => "Partial Content",
-            302 => "Found",
-            400 => "Bad Request",
-            401 => "Unauthorized",
-            404 => "Not Found",
-            501 => "Not Implemented",
-            _ => "Internal Server Error",
-        }
-    }
-
-    fn temp_dir(prefix: &str) -> PathBuf {
-        let suffix = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("clock should be monotonic enough for temp paths")
-            .as_nanos();
-        let path = std::env::temp_dir().join(format!("{prefix}-{suffix}"));
-        fs::create_dir_all(&path).expect("create temp dir");
-        path
-    }
-}
diff --git a/crates/sidecar/src/service.rs b/crates/sidecar/src/service.rs
deleted file mode 100644
index 62ec2aa6d..000000000
--- a/crates/sidecar/src/service.rs
+++ /dev/null
@@ -1,3645 +0,0 @@
-use crate::bridge::{build_mount_plugin_registry, MountPluginContext};
-pub(crate) use crate::execution::{
-    build_javascript_socket_path_context, canonical_signal_name, dispatch_loopback_http_request,
-    error_code, format_tcp_resource, ignore_stale_javascript_sync_rpc_response,
-    javascript_sync_rpc_arg_i32, javascript_sync_rpc_arg_str, javascript_sync_rpc_arg_u32,
-    javascript_sync_rpc_arg_u32_optional, javascript_sync_rpc_arg_u64,
-    javascript_sync_rpc_arg_u64_optional, javascript_sync_rpc_bytes_arg,
-    javascript_sync_rpc_bytes_value, javascript_sync_rpc_encoding, javascript_sync_rpc_error_code,
-    javascript_sync_rpc_option_bool, javascript_sync_rpc_option_u32, kernel_poll_response,
-    kernel_stdin_read_response, mark_execute_exit_event_queued, parse_kernel_poll_args,
-    parse_kernel_stdin_read_args, parse_signal, record_execute_exit_event_queue_wait,
-    record_execute_phase, sanitize_javascript_child_process_internal_bootstrap_env,
-    service_javascript_sync_rpc, vm_network_resource_counts, JavascriptSyncRpcServiceRequest,
-    LoopbackHttpDispatchRequest,
-};
-use crate::extension::{
-    Extension, ExtensionBufferedProcessOutput, ExtensionContext, ExtensionFuture, ExtensionHost,
-    ExtensionSnapshot,
-};
-use crate::filesystem::guest_filesystem_call as filesystem_guest_filesystem_call;
-use crate::limits::DEFAULT_ACP_STDOUT_BUFFER_BYTE_LIMIT;
-use crate::protocol::{
-    CloseStdinRequest, DisposeReason, EventFrame, EventPayload, ExecuteRequest, ExtEnvelope,
-    GuestFilesystemCallRequest, GuestFilesystemResultResponse, JavascriptChildProcessSpawnOptions,
-    JavascriptChildProcessSpawnRequest, KillProcessRequest, OpenSessionRequest, OwnershipScope,
-    ProcessKilledResponse, ProcessStartedResponse, RequestFrame, RequestId, RequestPayload,
-    ResponseFrame, ResponsePayload, SidecarRequestFrame, SidecarRequestPayload,
-    SidecarResponseFrame, SidecarResponsePayload, SidecarResponseTracker,
-    SidecarResponseTrackerError, SignalDispositionAction, StdinClosedResponse,
-    StdinWrittenResponse, VmLifecycleState, WriteStdinRequest,
-};
-use crate::state::{
-    ActiveExecutionEvent, BridgeError, ConnectionState, EventSinkTransport, JavascriptSocketFamily,
-    JavascriptSocketPathContext, ProcessEventEnvelope, SessionState, SharedBridge, SharedEventSink,
-    SharedSidecarRequestClient, SidecarRequestTransport, VmState, EXECUTION_DRIVER_NAME,
-};
-use crate::tools::register_host_callbacks;
-use crate::NativeSidecarBridge;
-use secure_exec_bridge::queue_tracker::{register_queue, QueueGauge, TrackedLimit};
-use secure_exec_bridge::{
-    CommandPermissionRequest, EnvironmentAccess, EnvironmentPermissionRequest, FilesystemAccess,
-    FilesystemPermissionRequest, LifecycleEventRecord, LifecycleState, LogLevel, LogRecord,
-    NetworkAccess, NetworkPermissionRequest, StructuredEventRecord,
-};
-use secure_exec_execution::{
-    record_sync_bridge_request_observed, JavascriptExecutionEngine, JavascriptExecutionError,
-    JavascriptSyncRpcRequest, PythonExecutionEngine, PythonExecutionError, WasmExecutionEngine,
-    WasmExecutionError,
-};
-use secure_exec_kernel::kernel::KernelError;
-use secure_exec_kernel::mount_plugin::{FileSystemPluginRegistry, PluginError};
-use secure_exec_kernel::permissions::{
-    CommandAccessRequest, EnvAccessRequest, EnvironmentOperation, NetworkAccessRequest,
-    NetworkOperation, PermissionDecision,
-};
-use secure_exec_sidecar_core::permissions::{
-    deny_all_policy, environment_permission_capability, evaluate_permissions_policy,
-    filesystem_permission_capability, network_permission_capability,
-    permission_mode_to_kernel_decision,
-};
-use secure_exec_sidecar_core::{
-    apply_process_signal_state_update, authenticated_response as shared_authenticated_response,
-    parse_process_signal_state_request, reject as shared_reject, request_dispatch_mode,
-    respond as shared_respond, route_request_payload, session_opened_response,
-    unsupported_host_callback_direction_dispatch, validate_authenticate_versions,
-    vm_lifecycle_event as shared_vm_lifecycle_event, AuthenticateVersionError, RequestDispatchMode,
-    RequestRoute,
-};
-use secure_exec_vm_config::PermissionsPolicy;
-// root_fs types moved to crate::vm
-use secure_exec_kernel::vfs::VfsError;
-use serde::Deserialize;
-use serde_json::{json, Value};
-use std::collections::{BTreeMap, BTreeSet, VecDeque};
-use std::fmt;
-use std::fs;
-use std::os::unix::fs::PermissionsExt;
-use std::path::{Component, Path, PathBuf};
-use std::sync::{Arc, Mutex, OnceLock};
-use std::task::{Context, Poll, Waker};
-use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
-use tokio::sync::mpsc::{channel, Receiver, Sender};
-use tokio::time;
-
-// Constants and type aliases moved to crate::state
-
-const INTERNAL_JAVASCRIPT_ENTRYPOINT_ENV_KEYS: &[&str] =
-    &["AGENTOS_ENTRYPOINT", "AGENTOS_BOOTSTRAP_MODULE"];
-const INTERNAL_WASM_ENTRYPOINT_ENV_KEYS: &[&str] =
-    &["AGENTOS_WASM_MODULE_PATH", "AGENTOS_WASM_MODULE_BASE64"];
-const INTERNAL_PYTHON_ENTRYPOINT_ENV_PREFIXES: &[&str] = &["AGENTOS_PYTHON_"];
-pub(crate) const MAX_PROCESS_EVENT_QUEUE: usize = 10_000;
-pub(crate) const MAX_PENDING_SIDECAR_RESPONSES: usize = 10_000;
-pub(crate) const MAX_OUTBOUND_SIDECAR_REQUESTS: usize = 10_000;
-pub(crate) const MAX_COMPLETED_SIDECAR_RESPONSES: usize = 10_000;
-static BLOCKING_DISPATCH_RUNTIME: OnceLock<tokio::runtime::Runtime> = OnceLock::new();
-
-fn blocking_dispatch_runtime() -> &'static tokio::runtime::Runtime {
-    BLOCKING_DISPATCH_RUNTIME.get_or_init(|| {
-        tokio::runtime::Builder::new_current_thread()
-            .enable_all()
-            .build()
-            .expect("sidecar blocking dispatch runtime")
-    })
-}
-
-pub(crate) fn process_event_queue_overflow_error() -> SidecarError {
-    SidecarError::InvalidState(format!(
-        "process event queue exceeded {MAX_PROCESS_EVENT_QUEUE} pending events"
-    ))
-}
-
-fn sidecar_response_pending_overflow_error() -> SidecarError {
-    SidecarError::InvalidState(format!(
-        "sidecar response tracker exceeded {MAX_PENDING_SIDECAR_RESPONSES} pending responses"
-    ))
-}
-
-fn outbound_sidecar_request_queue_overflow_error() -> SidecarError {
-    SidecarError::InvalidState(format!(
-        "outbound sidecar request queue exceeded {MAX_OUTBOUND_SIDECAR_REQUESTS} pending requests"
-    ))
-}
-
-fn wire_protocol_error(error: crate::wire::ProtocolCodecError) -> SidecarError {
-    SidecarError::InvalidState(format!("invalid generated wire protocol frame: {error}"))
-}
-
-fn wire_dispatch_result(
-    result: DispatchResult,
-) -> Result<crate::wire::WireDispatchResult, SidecarError> {
-    crate::wire::dispatch_result_from_compat(crate::wire::CompatDispatchResult {
-        response: result.response,
-        events: result.events,
-    })
-    .map_err(wire_protocol_error)
-}
-
-pub use secure_exec_sidecar_core::DispatchResult;
-// NativeSidecarConfig and SidecarError moved to crate::state
-pub use crate::state::{NativeSidecarConfig, SidecarError};
-
-// SharedBridge struct and Clone impl moved to crate::state
-
-#[derive(Debug, Default, Deserialize)]
-struct LegacyJavascriptChildProcessSpawnOptions {
-    #[serde(default)]
-    cwd: Option<String>,
-    #[serde(default)]
-    env: BTreeMap<String, String>,
-    #[serde(default)]
-    input: Option<Value>,
-    #[serde(default)]
-    shell: bool,
-    #[serde(default)]
-    detached: bool,
-    #[serde(default)]
-    stdio: Vec<String>,
-    #[serde(default, rename = "maxBuffer")]
-    max_buffer: Option<usize>,
-    #[serde(default)]
-    timeout: Option<u64>,
-    #[serde(default, rename = "killSignal")]
-    kill_signal: Option<String>,
-}
-
-#[derive(Debug, Deserialize)]
-#[serde(rename_all = "camelCase")]
-struct JavascriptHttpLoopbackRequest {
-    process_id: String,
-    server_id: u64,
-    host: String,
-    port: u16,
-    request: String,
-}
-
-fn is_javascript_loopback_host(host: &str) -> bool {
-    host == "127.0.0.1" || host == "::1" || host.eq_ignore_ascii_case("localhost")
-}
-
-pub(crate) fn parse_javascript_child_process_spawn_request(
-    vm: &VmState,
-    args: &[Value],
-) -> Result<(JavascriptChildProcessSpawnRequest, Option<usize>), SidecarError> {
-    if let Some(value) = args.first().cloned() {
-        if let Ok(request) = serde_json::from_value::<JavascriptChildProcessSpawnRequest>(value) {
-            return Ok((request, None));
-        }
-    }
-
-    let command = javascript_sync_rpc_arg_str(args, 0, "child_process.spawn command")?.to_owned();
-    let raw_args = javascript_sync_rpc_arg_str(args, 1, "child_process.spawn args")?;
-    let raw_options = javascript_sync_rpc_arg_str(args, 2, "child_process.spawn options")?;
-
-    let parsed_args = serde_json::from_str::<Vec<String>>(raw_args).map_err(|error| {
-        SidecarError::InvalidState(format!("invalid child_process.spawn args payload: {error}"))
-    })?;
-    let parsed_options = serde_json::from_str::<LegacyJavascriptChildProcessSpawnOptions>(
-        raw_options,
-    )
-    .map_err(|error| {
-        SidecarError::InvalidState(format!(
-            "invalid child_process.spawn options payload: {error}"
-        ))
-    })?;
-
-    Ok((
-        JavascriptChildProcessSpawnRequest {
-            command,
-            args: parsed_args,
-            options: JavascriptChildProcessSpawnOptions {
-                cwd: parsed_options.cwd,
-                env: parsed_options.env,
-                internal_bootstrap_env: sanitize_javascript_child_process_internal_bootstrap_env(
-                    &vm.guest_env,
-                ),
-                input: parsed_options.input,
-                shell: parsed_options.shell,
-                detached: parsed_options.detached,
-                stdio: parsed_options.stdio,
-                timeout: parsed_options.timeout,
-                kill_signal: parsed_options.kill_signal,
-            },
-        },
-        parsed_options.max_buffer,
-    ))
-}
-
-impl<B> SharedBridge<B> {
-    fn new(bridge: B) -> Self {
-        Self {
-            inner: Arc::new(Mutex::new(bridge)),
-            permissions: Arc::new(Mutex::new(BTreeMap::new())),
-            #[cfg(test)]
-            set_vm_permissions_outcomes: Arc::new(Mutex::new(VecDeque::new())),
-        }
-    }
-}
-
-impl<B> SharedBridge<B>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    pub(crate) fn with_mut<T>(
-        &self,
-        operation: impl FnOnce(&mut B) -> Result<T, BridgeError<B>>,
-    ) -> Result<T, SidecarError> {
-        let mut bridge = self.inner.lock().map_err(|_| {
-            SidecarError::Bridge(String::from("native sidecar bridge lock poisoned"))
-        })?;
-        operation(&mut bridge).map_err(|error| SidecarError::Bridge(format!("{error:?}")))
-    }
-
-    fn inspect<T>(&self, operation: impl FnOnce(&mut B) -> T) -> Result<T, SidecarError> {
-        let mut bridge = self.inner.lock().map_err(|_| {
-            SidecarError::Bridge(String::from("native sidecar bridge lock poisoned"))
-        })?;
-        Ok(operation(&mut bridge))
-    }
-
-    #[cfg(test)]
-    #[allow(dead_code)]
-    pub(crate) fn queue_set_vm_permissions_result(
-        &self,
-        result: Result<(), SidecarError>,
-    ) -> Result<(), SidecarError> {
-        let mut outcomes = self.set_vm_permissions_outcomes.lock().map_err(|_| {
-            SidecarError::Bridge(String::from(
-                "native sidecar test set_vm_permissions outcome lock poisoned",
-            ))
-        })?;
-        outcomes.push_back(result.err());
-        Ok(())
-    }
-
-    pub(crate) fn emit_lifecycle(
-        &self,
-        vm_id: &str,
-        state: LifecycleState,
-    ) -> Result<(), SidecarError> {
-        self.with_mut(|bridge| {
-            bridge.emit_lifecycle(LifecycleEventRecord {
-                vm_id: vm_id.to_owned(),
-                state,
-                detail: None,
-            })
-        })
-    }
-
-    pub(crate) fn emit_log(
-        &self,
-        vm_id: &str,
-        message: impl Into<String>,
-    ) -> Result<(), SidecarError> {
-        self.with_mut(|bridge| {
-            bridge.emit_log(LogRecord {
-                vm_id: vm_id.to_owned(),
-                level: LogLevel::Info,
-                message: message.into(),
-            })
-        })
-    }
-
-    pub(crate) fn filesystem_decision(
-        &self,
-        vm_id: &str,
-        path: &str,
-        access: FilesystemAccess,
-    ) -> PermissionDecision {
-        if let Some(decision) = self.static_permission_decision(
-            vm_id,
-            filesystem_permission_capability(access),
-            "fs",
-            Some(path),
-        ) {
-            return decision;
-        }
-        match self.with_mut(|bridge| {
-            bridge.check_filesystem_access(FilesystemPermissionRequest {
-                vm_id: vm_id.to_owned(),
-                path: path.to_owned(),
-                access,
-            })
-        }) {
-            Ok(decision) => map_bridge_permission(decision),
-            Err(error) => PermissionDecision::deny(error.to_string()),
-        }
-    }
-
-    pub(crate) fn command_decision(
-        &self,
-        vm_id: &str,
-        request: &CommandAccessRequest,
-    ) -> PermissionDecision {
-        if is_internal_runtime_command_request(request) {
-            return PermissionDecision::allow();
-        }
-        if let Some(decision) = self.static_permission_decision(
-            vm_id,
-            "child_process.spawn",
-            "child_process",
-            Some(&request.command),
-        ) {
-            return decision;
-        }
-        match self.with_mut(|bridge| {
-            bridge.check_command_execution(CommandPermissionRequest {
-                vm_id: vm_id.to_owned(),
-                command: request.command.clone(),
-                args: request.args.clone(),
-                cwd: request.cwd.clone(),
-                env: request.env.clone(),
-            })
-        }) {
-            Ok(decision) => map_bridge_permission(decision),
-            Err(error) => PermissionDecision::deny(error.to_string()),
-        }
-    }
-
-    pub(crate) fn environment_decision(
-        &self,
-        vm_id: &str,
-        request: &EnvAccessRequest,
-    ) -> PermissionDecision {
-        if let Some(decision) = self.static_permission_decision(
-            vm_id,
-            environment_permission_capability(request.op),
-            "env",
-            Some(&request.key),
-        ) {
-            return decision;
-        }
-        match self.with_mut(|bridge| {
-            bridge.check_environment_access(EnvironmentPermissionRequest {
-                vm_id: vm_id.to_owned(),
-                access: match request.op {
-                    EnvironmentOperation::Read => EnvironmentAccess::Read,
-                    EnvironmentOperation::Write => EnvironmentAccess::Write,
-                },
-                key: request.key.clone(),
-                value: request.value.clone(),
-            })
-        }) {
-            Ok(decision) => map_bridge_permission(decision),
-            Err(error) => PermissionDecision::deny(error.to_string()),
-        }
-    }
-
-    pub(crate) fn network_decision(
-        &self,
-        vm_id: &str,
-        request: &NetworkAccessRequest,
-    ) -> PermissionDecision {
-        if let Some(decision) = self.static_permission_decision(
-            vm_id,
-            network_permission_capability(request.op),
-            "network",
-            Some(&request.resource),
-        ) {
-            return decision;
-        }
-        match self.with_mut(|bridge| {
-            bridge.check_network_access(NetworkPermissionRequest {
-                vm_id: vm_id.to_owned(),
-                access: match request.op {
-                    NetworkOperation::Fetch => NetworkAccess::Fetch,
-                    NetworkOperation::Http => NetworkAccess::Http,
-                    NetworkOperation::Dns => NetworkAccess::Dns,
-                    NetworkOperation::Listen => NetworkAccess::Listen,
-                },
-                resource: request.resource.clone(),
-            })
-        }) {
-            Ok(decision) => map_bridge_permission(decision),
-            Err(error) => PermissionDecision::deny(error.to_string()),
-        }
-    }
-
-    pub(crate) fn require_network_access(
-        &self,
-        vm_id: &str,
-        op: NetworkOperation,
-        resource: impl Into<String>,
-    ) -> Result<(), SidecarError> {
-        let resource = resource.into();
-        let decision = self.network_decision(
-            vm_id,
-            &NetworkAccessRequest {
-                vm_id: vm_id.to_owned(),
-                op,
-                resource: resource.clone(),
-            },
-        );
-        if decision.allow {
-            return Ok(());
-        }
-
-        let message = match decision.reason.as_deref() {
-            Some(reason) => format!("EACCES: permission denied, {resource}: {reason}"),
-            None => format!("EACCES: permission denied, {resource}"),
-        };
-        Err(SidecarError::Execution(message))
-    }
-
-    pub(crate) fn set_vm_permissions(
-        &self,
-        vm_id: &str,
-        permissions: &PermissionsPolicy,
-    ) -> Result<(), SidecarError> {
-        #[cfg(test)]
-        {
-            let mut outcomes = self.set_vm_permissions_outcomes.lock().map_err(|_| {
-                SidecarError::Bridge(String::from(
-                    "native sidecar test set_vm_permissions outcome lock poisoned",
-                ))
-            })?;
-            if let Some(Some(error)) = outcomes.pop_front() {
-                return Err(error);
-            }
-        }
-
-        let mut stored = self.permissions.lock().map_err(|_| {
-            SidecarError::Bridge(String::from(
-                "native sidecar permission policy lock poisoned",
-            ))
-        })?;
-        stored.insert(vm_id.to_owned(), permissions.clone());
-        Ok(())
-    }
-
-    pub(crate) fn restore_vm_permissions_fail_closed(
-        &self,
-        vm_id: &str,
-        original_permissions: &PermissionsPolicy,
-        context: &str,
-        operation_error: &SidecarError,
-    ) -> Result<(), SidecarError> {
-        match self.set_vm_permissions(vm_id, original_permissions) {
-            Ok(()) => Ok(()),
-            Err(restore_error) => {
-                let deny_all = deny_all_policy();
-                match self.set_vm_permissions(vm_id, &deny_all) {
-                    Ok(()) => Err(SidecarError::InvalidState(format!(
-                        "{context} failed: {operation_error}; restoring original permissions failed: {restore_error}; applied deny-all fallback"
-                    ))),
-                    Err(deny_all_error) => panic!(
-                        "{context} failed: {operation_error}; restoring original permissions failed: {restore_error}; deny-all fallback failed: {deny_all_error}"
-                    ),
-                }
-            }
-        }
-    }
-
-    pub(crate) fn clear_vm_permissions(&self, vm_id: &str) -> Result<(), SidecarError> {
-        let mut stored = self.permissions.lock().map_err(|_| {
-            SidecarError::Bridge(String::from(
-                "native sidecar permission policy lock poisoned",
-            ))
-        })?;
-        stored.remove(vm_id);
-        Ok(())
-    }
-
-    pub(crate) fn static_permission_decision(
-        &self,
-        vm_id: &str,
-        capability: &str,
-        domain: &str,
-        resource: Option<&str>,
-    ) -> Option<PermissionDecision> {
-        let stored = self.permissions.lock().ok()?;
-        let permissions = stored.get(vm_id)?;
-        let mode = evaluate_permissions_policy(permissions, domain, capability, resource);
-        Some(permission_mode_to_kernel_decision(mode, capability))
-    }
-}
-
-pub(crate) fn validate_permissions_policy(
-    permissions: &PermissionsPolicy,
-) -> Result<(), SidecarError> {
-    secure_exec_sidecar_core::permissions::validate_permissions_policy(permissions)
-        .map_err(|error| SidecarError::InvalidState(error.to_string()))
-}
-
-fn is_internal_runtime_command_request(request: &CommandAccessRequest) -> bool {
-    match request.command.as_str() {
-        "node" => request
-            .env
-            .keys()
-            .any(|key| INTERNAL_JAVASCRIPT_ENTRYPOINT_ENV_KEYS.contains(&key.as_str())),
-        "wasm" => request
-            .env
-            .keys()
-            .any(|key| INTERNAL_WASM_ENTRYPOINT_ENV_KEYS.contains(&key.as_str())),
-        "python" => request.env.keys().any(|key| {
-            INTERNAL_PYTHON_ENTRYPOINT_ENV_PREFIXES
-                .iter()
-                .any(|prefix| key.starts_with(prefix))
-        }),
-        _ => false,
-    }
-}
-
-fn ownership_matches_process_event(
-    ownership: &OwnershipScope,
-    event: &ProcessEventEnvelope,
-) -> bool {
-    match ownership {
-        OwnershipScope::ConnectionOwnership(inner) => inner.connection_id == event.connection_id,
-        OwnershipScope::SessionOwnership(inner) => {
-            inner.connection_id == event.connection_id && inner.session_id == event.session_id
-        }
-        OwnershipScope::VmOwnership(inner) => {
-            inner.connection_id == event.connection_id
-                && inner.session_id == event.session_id
-                && inner.vm_id == event.vm_id
-        }
-    }
-}
-
-fn public_process_event_matches_ownership<B>(
-    sidecar: &NativeSidecar<B>,
-    ownership: &OwnershipScope,
-    event: &ProcessEventEnvelope,
-) -> bool
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    if !ownership_matches_process_event(ownership, event) {
-        return false;
-    }
-
-    if event.process_id.contains('/') {
-        return false;
-    }
-
-    // Stale queued events must still be drained through handle_process_event_envelope()
-    // so the sidecar can emit the expected fail-closed log when teardown wins the race.
-    let _ = sidecar;
-    true
-}
-
-fn poll_future_once<F: std::future::Future>(future: std::pin::Pin<&mut F>) -> Option<F::Output> {
-    let mut context = Context::from_waker(Waker::noop());
-    match future.poll(&mut context) {
-        Poll::Ready(output) => Some(output),
-        Poll::Pending => None,
-    }
-}
-
-// ConnectionState, SessionState, VmConfiguration, VmState moved to crate::state
-
-// JavascriptSocketPathContext, JavascriptSocketFamily, VmListenPolicy moved to crate::state
-
-impl JavascriptSocketPathContext {
-    pub(crate) fn loopback_port_allowed(&self, port: u16) -> bool {
-        self.loopback_exempt_ports.contains(&port)
-            || self
-                .tcp_loopback_guest_to_host_ports
-                .keys()
-                .any(|(_, guest_port)| *guest_port == port)
-    }
-
-    pub(crate) fn translate_tcp_loopback_port(
-        &self,
-        family: JavascriptSocketFamily,
-        port: u16,
-    ) -> Option<u16> {
-        self.tcp_loopback_guest_to_host_ports
-            .get(&(family, port))
-            .copied()
-    }
-
-    pub(crate) fn http_loopback_target(
-        &self,
-        family: JavascriptSocketFamily,
-        port: u16,
-    ) -> Option<&crate::state::JavascriptHttpLoopbackTarget> {
-        self.http_loopback_targets.get(&(family, port))
-    }
-
-    pub(crate) fn translate_udp_loopback_port(
-        &self,
-        family: JavascriptSocketFamily,
-        port: u16,
-    ) -> Option<u16> {
-        self.udp_loopback_guest_to_host_ports
-            .get(&(family, port))
-            .copied()
-    }
-
-    pub(crate) fn guest_udp_port_for_host_port(
-        &self,
-        family: JavascriptSocketFamily,
-        port: u16,
-    ) -> Option<u16> {
-        self.udp_loopback_host_to_guest_ports
-            .get(&(family, port))
-            .copied()
-    }
-}
-
-// ActiveProcess, NetworkResourceCounts moved to crate::state
-
-pub struct NativeSidecar<B> {
-    pub(crate) config: NativeSidecarConfig,
-    pub(crate) bridge: SharedBridge<B>,
-    pub(crate) mount_plugins: FileSystemPluginRegistry<MountPluginContext<B>>,
-    pub(crate) cache_root: PathBuf,
-    pub(crate) javascript_engine: JavascriptExecutionEngine,
-    pub(crate) python_engine: PythonExecutionEngine,
-    pub(crate) wasm_engine: WasmExecutionEngine,
-    pub(crate) next_connection_id: usize,
-    pub(crate) next_session_id: usize,
-    pub(crate) next_vm_id: usize,
-    pub(crate) next_sidecar_request_id: RequestId,
-    pub(crate) connections: BTreeMap<String, ConnectionState>,
-    pub(crate) sessions: BTreeMap<String, SessionState>,
-    pub(crate) vms: BTreeMap<String, VmState>,
-    #[allow(dead_code)]
-    pub(crate) process_event_sender: Sender<ProcessEventEnvelope>,
-    pub(crate) process_event_receiver: Option<Receiver<ProcessEventEnvelope>>,
-    pub(crate) pending_process_events: VecDeque<ProcessEventEnvelope>,
-    pub(crate) pending_sidecar_responses: SidecarResponseTracker,
-    pub(crate) outbound_sidecar_requests: VecDeque<SidecarRequestFrame>,
-    pub(crate) completed_sidecar_responses: BTreeMap<RequestId, SidecarResponseFrame>,
-    pub(crate) completed_sidecar_response_order: VecDeque<RequestId>,
-    pub(crate) completed_sidecar_responses_gauge: Arc<QueueGauge>,
-    pub(crate) pending_process_events_gauge: Arc<QueueGauge>,
-    pub(crate) pending_sidecar_responses_gauge: Arc<QueueGauge>,
-    pub(crate) outbound_sidecar_requests_gauge: Arc<QueueGauge>,
-    pub(crate) sidecar_requests: SharedSidecarRequestClient,
-    pub(crate) event_sink: SharedEventSink,
-    pub(crate) extensions: BTreeMap<String, Arc<dyn Extension>>,
-    pub(crate) extension_sessions: BTreeMap<(String, String), ExtensionSessionResources>,
-    pub(crate) extension_process_output_buffers:
-        BTreeMap<(String, String), ExtensionBufferedProcessOutput>,
-    /// Session scopes (connection_id, session_id) disposed since the stdio
-    /// transport last drained them. Lets the transport remove dead sessions from
-    /// its active-session set instead of iterating them forever (M5).
-    pub(crate) disposed_sessions: Vec<(String, String)>,
-}
-
-#[derive(Debug)]
-pub(crate) struct ExtensionSessionResources {
-    pub(crate) ownership: OwnershipScope,
-    pub(crate) process_ids: BTreeSet<String>,
-    pub(crate) vm_ids: BTreeSet<String>,
-}
-
-impl<B> fmt::Debug for NativeSidecar<B> {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        f.debug_struct("NativeSidecar")
-            .field("config", &self.config)
-            .field("cache_root", &self.cache_root)
-            .field("next_connection_id", &self.next_connection_id)
-            .field("next_session_id", &self.next_session_id)
-            .field("next_vm_id", &self.next_vm_id)
-            .field("connection_count", &self.connections.len())
-            .field("session_count", &self.sessions.len())
-            .field("vm_count", &self.vms.len())
-            .field("extension_session_count", &self.extension_sessions.len())
-            .field(
-                "extension_process_output_buffer_count",
-                &self.extension_process_output_buffers.len(),
-            )
-            .finish()
-    }
-}
-
-impl<B> NativeSidecar<B>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    pub fn new(bridge: B) -> Result<Self, SidecarError> {
-        Self::with_config(bridge, NativeSidecarConfig::default())
-    }
-
-    pub fn with_config(bridge: B, config: NativeSidecarConfig) -> Result<Self, SidecarError> {
-        if matches!(config.expected_auth_token.as_deref(), Some("")) {
-            return Err(SidecarError::InvalidState(String::from(
-                "native sidecar expected_auth_token must not be empty",
-            )));
-        }
-
-        let cache_root = config.compile_cache_root.clone().unwrap_or_else(|| {
-            std::env::temp_dir().join(format!(
-                "{}-{}",
-                config.sidecar_id,
-                SystemTime::now()
-                    .duration_since(UNIX_EPOCH)
-                    .expect("system time before unix epoch")
-                    .as_nanos()
-            ))
-        });
-        fs::create_dir_all(&cache_root).map_err(|error| {
-            SidecarError::Io(format!("failed to prepare sidecar cache root: {error}"))
-        })?;
-
-        let bridge = SharedBridge::new(bridge);
-        let mount_plugins = build_mount_plugin_registry::<B>()?;
-        let (process_event_sender, process_event_receiver) = channel(MAX_PROCESS_EVENT_QUEUE);
-
-        Ok(Self {
-            config,
-            bridge,
-            mount_plugins,
-            cache_root,
-            javascript_engine: JavascriptExecutionEngine::default(),
-            python_engine: PythonExecutionEngine::default(),
-            wasm_engine: WasmExecutionEngine::default(),
-            next_connection_id: 0,
-            next_session_id: 0,
-            next_vm_id: 0,
-            next_sidecar_request_id: -1,
-            connections: BTreeMap::new(),
-            sessions: BTreeMap::new(),
-            vms: BTreeMap::new(),
-            process_event_sender,
-            process_event_receiver: Some(process_event_receiver),
-            pending_process_events: VecDeque::new(),
-            pending_sidecar_responses: SidecarResponseTracker::default(),
-            outbound_sidecar_requests: VecDeque::new(),
-            completed_sidecar_responses: BTreeMap::new(),
-            completed_sidecar_response_order: VecDeque::new(),
-            completed_sidecar_responses_gauge: register_queue(
-                TrackedLimit::CompletedSidecarResponses,
-                MAX_COMPLETED_SIDECAR_RESPONSES,
-            ),
-            pending_process_events_gauge: register_queue(
-                TrackedLimit::PendingProcessEvents,
-                MAX_PROCESS_EVENT_QUEUE,
-            ),
-            pending_sidecar_responses_gauge: register_queue(
-                TrackedLimit::PendingSidecarResponses,
-                MAX_PENDING_SIDECAR_RESPONSES,
-            ),
-            outbound_sidecar_requests_gauge: register_queue(
-                TrackedLimit::OutboundSidecarRequests,
-                MAX_OUTBOUND_SIDECAR_REQUESTS,
-            ),
-            sidecar_requests: SharedSidecarRequestClient::default(),
-            event_sink: SharedEventSink::default(),
-            extensions: BTreeMap::new(),
-            extension_sessions: BTreeMap::new(),
-            extension_process_output_buffers: BTreeMap::new(),
-            disposed_sessions: Vec::new(),
-        })
-    }
-
-    pub fn with_config_and_extensions(
-        bridge: B,
-        config: NativeSidecarConfig,
-        extensions: Vec<Box<dyn Extension>>,
-    ) -> Result<Self, SidecarError> {
-        let mut sidecar = Self::with_config(bridge, config)?;
-        for extension in extensions {
-            sidecar.register_extension(extension)?;
-        }
-        Ok(sidecar)
-    }
-
-    pub(crate) fn prune_extension_process_resource(&mut self, process_id: &str) {
-        self.extension_sessions.retain(|_, resources| {
-            resources.process_ids.remove(process_id);
-            !resources.process_ids.is_empty() || !resources.vm_ids.is_empty()
-        });
-    }
-
-    pub(crate) fn prune_extension_vm_resource(&mut self, vm_id: &str) {
-        self.extension_sessions.retain(|_, resources| {
-            if matches!(
-                &resources.ownership,
-                OwnershipScope::VmOwnership(inner) if inner.vm_id == vm_id
-            ) {
-                resources.process_ids.clear();
-            }
-            resources.vm_ids.remove(vm_id);
-            !resources.process_ids.is_empty() || !resources.vm_ids.is_empty()
-        });
-    }
-
-    /// Reclaim every per-VM tracking entry owned by the sidecar for `vm_id`.
-    ///
-    /// Called unconditionally from `dispose_vm_internal` so that a fallible
-    /// teardown step (root-filesystem snapshot/flush, kernel dispose, permission
-    /// reset) erroring out with `?` can never strand these maps for the rest of
-    /// the process lifetime (H1). This also reclaims the ACP output-buffer map,
-    /// which was previously removed only on a successful handoff and leaked on VM
-    /// or session disposal (M6).
-    pub(crate) fn reclaim_vm_tracking(&mut self, session_id: &str, vm_id: &str) {
-        self.javascript_engine.dispose_vm(vm_id);
-        self.python_engine.dispose_vm(vm_id);
-        self.wasm_engine.dispose_vm(vm_id);
-        self.prune_extension_vm_resource(vm_id);
-        self.extension_process_output_buffers
-            .retain(|(buffer_vm_id, _process_id), _| buffer_vm_id != vm_id);
-        if let Some(session) = self.sessions.get_mut(session_id) {
-            session.vm_ids.remove(vm_id);
-        }
-    }
-
-    pub(crate) fn capture_extension_process_output_event(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        event: &ActiveExecutionEvent,
-    ) -> bool {
-        let Some(buffer) = self
-            .extension_process_output_buffers
-            .get_mut(&(vm_id.to_string(), process_id.to_string()))
-        else {
-            return false;
-        };
-        match event {
-            ActiveExecutionEvent::Stdout(chunk) => {
-                buffer.append_stdout(chunk, DEFAULT_ACP_STDOUT_BUFFER_BYTE_LIMIT);
-                true
-            }
-            ActiveExecutionEvent::Stderr(chunk) => {
-                buffer.append_stderr(chunk, DEFAULT_ACP_STDOUT_BUFFER_BYTE_LIMIT);
-                true
-            }
-            ActiveExecutionEvent::JavascriptSyncRpcRequest(_)
-            | ActiveExecutionEvent::PythonVfsRpcRequest(_)
-            | ActiveExecutionEvent::SignalState { .. }
-            | ActiveExecutionEvent::Exited(_) => false,
-        }
-    }
-
-    fn bind_extension_process_resource(
-        &mut self,
-        ownership: OwnershipScope,
-        namespace: String,
-        ext_session_id: String,
-        process_id: String,
-    ) -> Result<(), SidecarError> {
-        if ext_session_id.is_empty() {
-            return Err(SidecarError::InvalidState(String::from(
-                "extension session id must not be empty",
-            )));
-        }
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-        let process_exists = self
-            .vms
-            .get(&vm_id)
-            .is_some_and(|vm| vm.active_processes.contains_key(&process_id));
-        if !process_exists {
-            return Err(SidecarError::InvalidState(format!(
-                "VM {vm_id} has no active process {process_id}"
-            )));
-        }
-
-        let key = (namespace, ext_session_id);
-        if let Some(resources) = self.extension_sessions.get_mut(&key) {
-            if resources.ownership != ownership {
-                return Err(SidecarError::InvalidState(String::from(
-                    "extension session ownership did not match existing resources",
-                )));
-            }
-            resources.process_ids.insert(process_id);
-        } else {
-            self.extension_sessions.insert(
-                key,
-                ExtensionSessionResources {
-                    ownership,
-                    process_ids: BTreeSet::from([process_id]),
-                    vm_ids: BTreeSet::new(),
-                },
-            );
-        }
-        Ok(())
-    }
-
-    fn bind_extension_vm_resource(
-        &mut self,
-        ownership: OwnershipScope,
-        namespace: String,
-        ext_session_id: String,
-    ) -> Result<(), SidecarError> {
-        if ext_session_id.is_empty() {
-            return Err(SidecarError::InvalidState(String::from(
-                "extension session id must not be empty",
-            )));
-        }
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let key = (namespace, ext_session_id);
-        if let Some(resources) = self.extension_sessions.get_mut(&key) {
-            if resources.ownership != ownership {
-                return Err(SidecarError::InvalidState(String::from(
-                    "extension session ownership did not match existing resources",
-                )));
-            }
-            resources.vm_ids.insert(vm_id);
-        } else {
-            self.extension_sessions.insert(
-                key,
-                ExtensionSessionResources {
-                    ownership,
-                    process_ids: BTreeSet::new(),
-                    vm_ids: BTreeSet::from([vm_id]),
-                },
-            );
-        }
-        Ok(())
-    }
-
-    pub fn sidecar_id(&self) -> &str {
-        &self.config.sidecar_id
-    }
-
-    pub fn with_bridge_mut<T>(
-        &self,
-        operation: impl FnOnce(&mut B) -> T,
-    ) -> Result<T, SidecarError> {
-        self.bridge.inspect(operation)
-    }
-
-    pub fn set_sidecar_request_transport(&mut self, transport: Arc<dyn SidecarRequestTransport>) {
-        self.sidecar_requests.set_transport(transport);
-    }
-
-    pub fn set_event_transport(&mut self, transport: Arc<dyn EventSinkTransport>) {
-        self.event_sink.set_transport(transport);
-    }
-
-    pub fn register_extension(
-        &mut self,
-        extension: Box<dyn Extension>,
-    ) -> Result<(), SidecarError> {
-        let namespace = extension.namespace().to_owned();
-        if namespace.is_empty() {
-            return Err(SidecarError::InvalidState(String::from(
-                "extension namespace must not be empty",
-            )));
-        }
-        if self.extensions.contains_key(&namespace) {
-            return Err(SidecarError::Conflict(format!(
-                "extension namespace {namespace} is already registered",
-            )));
-        }
-        self.extensions.insert(namespace, Arc::from(extension));
-        Ok(())
-    }
-
-    pub fn set_sidecar_request_handler<F>(&mut self, handler: F)
-    where
-        F: Fn(SidecarRequestFrame) -> Result<SidecarResponsePayload, SidecarError>
-            + Send
-            + Sync
-            + 'static,
-    {
-        struct HandlerTransport<F>(F);
-
-        impl<F> SidecarRequestTransport for HandlerTransport<F>
-        where
-            F: Fn(SidecarRequestFrame) -> Result<SidecarResponsePayload, SidecarError>
-                + Send
-                + Sync
-                + 'static,
-        {
-            fn send_request(
-                &self,
-                request: SidecarRequestFrame,
-                _timeout: Duration,
-            ) -> Result<SidecarResponseFrame, SidecarError> {
-                let payload = (self.0)(request.clone())?;
-                Ok(SidecarResponseFrame::new(
-                    request.request_id,
-                    request.ownership,
-                    payload,
-                ))
-            }
-        }
-
-        self.set_sidecar_request_transport(Arc::new(HandlerTransport(handler)));
-    }
-
-    pub fn set_wire_sidecar_request_handler<F>(&mut self, handler: F)
-    where
-        F: Fn(
-                crate::wire::SidecarRequestFrame,
-            ) -> Result<crate::wire::SidecarResponseFrame, SidecarError>
-            + Send
-            + Sync
-            + 'static,
-    {
-        self.set_sidecar_request_handler(move |request| {
-            let request = crate::wire::sidecar_request_frame_from_compat(request)
-                .map_err(wire_protocol_error)?;
-            let response = handler(request)?;
-            let response = crate::wire::sidecar_response_frame_to_compat(response)
-                .map_err(wire_protocol_error)?;
-            Ok(response.payload)
-        });
-    }
-
-    pub(crate) fn queue_pending_process_event(
-        &mut self,
-        envelope: ProcessEventEnvelope,
-    ) -> Result<(), SidecarError> {
-        if self.pending_process_events.len() >= MAX_PROCESS_EVENT_QUEUE {
-            return Err(process_event_queue_overflow_error());
-        }
-        if matches!(&envelope.event, ActiveExecutionEvent::Exited(_)) {
-            mark_execute_exit_event_queued(&envelope.vm_id, &envelope.process_id);
-        }
-        self.pending_process_events.push_back(envelope);
-        self.pending_process_events_gauge
-            .observe_depth(self.pending_process_events.len());
-        Ok(())
-    }
-
-    pub(crate) fn queue_front_pending_process_event(
-        &mut self,
-        envelope: ProcessEventEnvelope,
-    ) -> Result<(), SidecarError> {
-        if self.pending_process_events.len() >= MAX_PROCESS_EVENT_QUEUE {
-            return Err(process_event_queue_overflow_error());
-        }
-        if matches!(&envelope.event, ActiveExecutionEvent::Exited(_)) {
-            mark_execute_exit_event_queued(&envelope.vm_id, &envelope.process_id);
-        }
-        self.pending_process_events.push_front(envelope);
-        self.pending_process_events_gauge
-            .observe_depth(self.pending_process_events.len());
-        Ok(())
-    }
-
-    pub(crate) fn pending_process_event_capacity(&self) -> usize {
-        MAX_PROCESS_EVENT_QUEUE.saturating_sub(self.pending_process_events.len())
-    }
-
-    pub fn dispatch_blocking(
-        &mut self,
-        request: RequestFrame,
-    ) -> Result<DispatchResult, SidecarError> {
-        let inside_runtime = tokio::runtime::Handle::try_current().is_ok();
-        if request_dispatch_mode(&request) == RequestDispatchMode::Async && !inside_runtime {
-            return blocking_dispatch_runtime().block_on(self.dispatch(request));
-        }
-
-        let mut future = std::pin::pin!(self.dispatch(request));
-        match poll_future_once(future.as_mut()) {
-            Some(result) => result,
-            None if inside_runtime => Err(SidecarError::InvalidState(String::from(
-                "dispatch_blocking cannot wait for an async sidecar request inside a Tokio runtime; use dispatch().await",
-            ))),
-            None => blocking_dispatch_runtime().block_on(future),
-        }
-    }
-
-    pub fn dispatch_wire_blocking(
-        &mut self,
-        request: crate::wire::RequestFrame,
-    ) -> Result<crate::wire::WireDispatchResult, SidecarError> {
-        let request = crate::wire::request_frame_to_compat(request).map_err(wire_protocol_error)?;
-        let result = self.dispatch_blocking(request)?;
-        wire_dispatch_result(result)
-    }
-
-    pub fn poll_event_blocking(
-        &mut self,
-        ownership: &OwnershipScope,
-        timeout: Duration,
-    ) -> Result<Option<EventFrame>, SidecarError> {
-        blocking_dispatch_runtime().block_on(self.poll_event(ownership, timeout))
-    }
-
-    pub fn poll_event_wire_blocking(
-        &mut self,
-        ownership: &crate::wire::OwnershipScope,
-        timeout: Duration,
-    ) -> Result<Option<crate::wire::EventFrame>, SidecarError> {
-        let ownership = crate::wire::ownership_scope_to_compat(ownership.clone());
-        self.poll_event_blocking(&ownership, timeout)?
-            .map(crate::wire::event_frame_from_compat)
-            .transpose()
-            .map_err(wire_protocol_error)
-    }
-
-    pub fn close_session_blocking(
-        &mut self,
-        connection_id: &str,
-        session_id: &str,
-    ) -> Result<Vec<EventFrame>, SidecarError> {
-        blocking_dispatch_runtime().block_on(self.close_session(connection_id, session_id))
-    }
-
-    pub fn remove_connection_blocking(
-        &mut self,
-        connection_id: &str,
-    ) -> Result<Vec<EventFrame>, SidecarError> {
-        blocking_dispatch_runtime().block_on(self.remove_connection(connection_id))
-    }
-
-    pub fn dispose_vm_internal_blocking(
-        &mut self,
-        connection_id: &str,
-        session_id: &str,
-        vm_id: &str,
-        reason: DisposeReason,
-    ) -> Result<Vec<EventFrame>, SidecarError> {
-        blocking_dispatch_runtime().block_on(self.dispose_vm_internal(
-            connection_id,
-            session_id,
-            vm_id,
-            reason,
-        ))
-    }
-
-    pub async fn dispatch(
-        &mut self,
-        request: RequestFrame,
-    ) -> Result<DispatchResult, SidecarError> {
-        if let Err(error) = self.ensure_request_within_frame_limit(&request) {
-            return Ok(DispatchResult {
-                response: self.reject(&request, error_code(&error), &error.to_string()),
-                events: Vec::new(),
-            });
-        }
-
-        let result = match route_request_payload(&request) {
-            RequestRoute::Authenticate(payload) => {
-                self.authenticate_connection(&request, payload).await
-            }
-            RequestRoute::OpenSession(payload) => self.open_session(&request, payload).await,
-            RequestRoute::CreateVm(payload) => self.create_vm(&request, payload).await,
-            RequestRoute::DisposeVm(payload) => self.dispose_vm(&request, payload).await,
-            RequestRoute::BootstrapRootFilesystem(payload) => {
-                self.bootstrap_root_filesystem(&request, payload.entries)
-                    .await
-            }
-            RequestRoute::ConfigureVm(payload) => self.configure_vm(&request, payload).await,
-            RequestRoute::RegisterHostCallbacks(payload) => {
-                register_host_callbacks(self, &request, payload)
-            }
-            RequestRoute::CreateLayer(payload) => self.create_layer(&request, payload).await,
-            RequestRoute::SealLayer(payload) => self.seal_layer(&request, payload).await,
-            RequestRoute::ImportSnapshot(payload) => self.import_snapshot(&request, payload).await,
-            RequestRoute::ExportSnapshot(payload) => self.export_snapshot(&request, payload).await,
-            RequestRoute::CreateOverlay(payload) => self.create_overlay(&request, payload).await,
-            RequestRoute::GuestFilesystemCall(payload) => {
-                self.guest_filesystem_call(&request, payload).await
-            }
-            RequestRoute::GuestKernelCall(payload) => {
-                self.guest_kernel_call(&request, payload).await
-            }
-            RequestRoute::SnapshotRootFilesystem(payload) => {
-                self.snapshot_root_filesystem(&request, payload).await
-            }
-            RequestRoute::Execute(payload) => self.execute(&request, payload).await,
-            RequestRoute::WriteStdin(payload) => self.write_stdin(&request, payload).await,
-            RequestRoute::ResizePty(payload) => self.resize_pty(&request, payload).await,
-            RequestRoute::CloseStdin(payload) => self.close_stdin(&request, payload).await,
-            RequestRoute::KillProcess(payload) => self.kill_process(&request, payload).await,
-            RequestRoute::GetProcessSnapshot(payload) => {
-                self.get_process_snapshot(&request, payload).await
-            }
-            RequestRoute::GetResourceSnapshot(payload) => {
-                self.get_resource_snapshot(&request, payload).await
-            }
-            RequestRoute::FindListener(payload) => self.find_listener(&request, payload).await,
-            RequestRoute::FindBoundUdp(payload) => self.find_bound_udp(&request, payload).await,
-            RequestRoute::VmFetch(payload) => self.vm_fetch(&request, payload).await,
-            RequestRoute::GetSignalState(payload) => self.get_signal_state(&request, payload).await,
-            RequestRoute::GetZombieTimerCount(payload) => {
-                self.get_zombie_timer_count(&request, payload).await
-            }
-            RequestRoute::LinkPackage(payload) => self.link_package(&request, payload).await,
-            RequestRoute::ProvidedCommands(payload) => {
-                self.provided_commands(&request, payload).await
-            }
-            RequestRoute::UnsupportedHostCallbackDirection => {
-                Ok(unsupported_host_callback_direction_dispatch(&request))
-            }
-            RequestRoute::Ext(payload) => self.dispatch_extension_request(&request, payload).await,
-        };
-
-        match result {
-            Ok(dispatch) => Ok(dispatch),
-            Err(error @ SidecarError::Io(_)) => Err(error),
-            Err(error) => Ok(DispatchResult {
-                response: self.reject(&request, error_code(&error), &error.to_string()),
-                events: Vec::new(),
-            }),
-        }
-    }
-
-    pub async fn dispatch_wire(
-        &mut self,
-        request: crate::wire::RequestFrame,
-    ) -> Result<crate::wire::WireDispatchResult, SidecarError> {
-        let request = crate::wire::request_frame_to_compat(request).map_err(wire_protocol_error)?;
-        let result = self.dispatch(request).await?;
-        wire_dispatch_result(result)
-    }
-
-    pub async fn poll_event_wire(
-        &mut self,
-        ownership: &crate::wire::OwnershipScope,
-        timeout: Duration,
-    ) -> Result<Option<crate::wire::EventFrame>, SidecarError> {
-        let ownership = crate::wire::ownership_scope_to_compat(ownership.clone());
-        self.poll_event(&ownership, timeout)
-            .await?
-            .map(crate::wire::event_frame_from_compat)
-            .transpose()
-            .map_err(wire_protocol_error)
-    }
-
-    async fn dispatch_extension_request(
-        &mut self,
-        request: &RequestFrame,
-        envelope: ExtEnvelope,
-    ) -> Result<DispatchResult, SidecarError> {
-        let namespace = envelope.namespace;
-        let Some(extension) = self.extensions.get(&namespace).cloned() else {
-            return Ok(DispatchResult {
-                response: self.reject(
-                    request,
-                    "unknown_extension",
-                    &format!("no extension registered for namespace {namespace}"),
-                ),
-                events: Vec::new(),
-            });
-        };
-        let snapshot = ExtensionSnapshot::new(
-            namespace.clone(),
-            request.ownership.clone(),
-            self.sidecar_requests.clone(),
-            self.event_sink.clone(),
-        );
-        let ctx = ExtensionContext::new(snapshot, self);
-        let response = extension.handle_request(ctx, envelope.payload).await?;
-        Ok(DispatchResult {
-            response: self.respond(
-                request,
-                ResponsePayload::ExtResult(ExtEnvelope {
-                    namespace,
-                    payload: response.payload,
-                }),
-            ),
-            events: response.events,
-        })
-    }
-
-    pub async fn poll_event(
-        &mut self,
-        ownership: &OwnershipScope,
-        timeout: Duration,
-    ) -> Result<Option<EventFrame>, SidecarError> {
-        let deadline = Instant::now() + timeout;
-        loop {
-            if let Some(index) = self
-                .pending_process_events
-                .iter()
-                .position(|event| public_process_event_matches_ownership(self, ownership, event))
-            {
-                let Some(envelope) = self.pending_process_events.remove(index) else {
-                    continue;
-                };
-                if let Some(frame) = self.handle_process_event_envelope(envelope)? {
-                    return Ok(Some(frame));
-                }
-                continue;
-            }
-
-            if !timeout.is_zero() {
-                let _ = self.pump_process_events(ownership).await?;
-            }
-
-            let queued_envelopes = {
-                let pending_capacity = self.pending_process_event_capacity();
-                let receiver = self.process_event_receiver.as_mut().ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("process event receiver unavailable"))
-                })?;
-                let mut queued = Vec::new();
-                loop {
-                    if queued.len() >= pending_capacity {
-                        if receiver.is_empty() {
-                            break;
-                        }
-                        return Err(process_event_queue_overflow_error());
-                    }
-                    match receiver.try_recv() {
-                        Ok(envelope) => queued.push(envelope),
-                        Err(tokio::sync::mpsc::error::TryRecvError::Empty) => break,
-                        Err(tokio::sync::mpsc::error::TryRecvError::Disconnected) => break,
-                    }
-                }
-                queued
-            };
-
-            let mut matching_envelope = None;
-            for envelope in queued_envelopes {
-                if matching_envelope.is_none()
-                    && public_process_event_matches_ownership(self, ownership, &envelope)
-                {
-                    matching_envelope = Some(envelope);
-                } else {
-                    self.queue_pending_process_event(envelope)?;
-                }
-            }
-
-            if let Some(envelope) = matching_envelope {
-                if let Some(frame) = self.handle_process_event_envelope(envelope)? {
-                    return Ok(Some(frame));
-                }
-                continue;
-            }
-
-            if Instant::now() >= deadline {
-                return Ok(None);
-            }
-
-            let remaining = deadline.saturating_duration_since(Instant::now());
-            time::sleep(remaining.min(Duration::from_millis(10))).await;
-        }
-    }
-
-    pub(crate) fn handle_process_event_envelope(
-        &mut self,
-        envelope: ProcessEventEnvelope,
-    ) -> Result<Option<EventFrame>, SidecarError> {
-        let handle_start = Instant::now();
-        let ProcessEventEnvelope {
-            connection_id,
-            session_id,
-            vm_id,
-            process_id,
-            event,
-        } = envelope;
-
-        let is_exit_event = matches!(event, ActiveExecutionEvent::Exited(_));
-
-        if is_exit_event {
-            record_execute_exit_event_queue_wait(
-                "process_exit_event_queue_wait",
-                &vm_id,
-                &process_id,
-            );
-            let mut trailing = Vec::new();
-            let mut deferred = VecDeque::new();
-            let phase_start = Instant::now();
-            while let Some(pending) = self.pending_process_events.pop_front() {
-                if pending.vm_id == vm_id
-                    && pending.process_id == process_id
-                    && !matches!(pending.event, ActiveExecutionEvent::Exited(_))
-                {
-                    trailing.push(pending.event);
-                } else {
-                    deferred.push_back(pending);
-                }
-            }
-            self.pending_process_events = deferred;
-            record_execute_phase("process_exit_trailing_pending_scan", phase_start.elapsed());
-            let drain_limit = self
-                .pending_process_event_capacity()
-                .saturating_sub(trailing.len().saturating_add(1));
-            let phase_start = Instant::now();
-            trailing.extend(
-                self.drain_process_events_blocking_with_limit(&vm_id, &process_id, drain_limit)?
-                    .into_iter()
-                    .filter(|event| !matches!(event, ActiveExecutionEvent::Exited(_))),
-            );
-            record_execute_phase(
-                "process_exit_trailing_blocking_drain",
-                phase_start.elapsed(),
-            );
-
-            if !trailing.is_empty() {
-                if self.pending_process_event_capacity() < trailing.len() {
-                    return Err(process_event_queue_overflow_error());
-                }
-                let emit_now = if self.pending_process_event_capacity() == trailing.len() {
-                    Some(trailing.remove(0))
-                } else {
-                    None
-                };
-                let phase_start = Instant::now();
-                mark_execute_exit_event_queued(&vm_id, &process_id);
-                self.queue_front_pending_process_event(ProcessEventEnvelope {
-                    connection_id: connection_id.clone(),
-                    session_id: session_id.clone(),
-                    vm_id: vm_id.clone(),
-                    process_id: process_id.clone(),
-                    event,
-                })?;
-                for event in trailing.into_iter().rev() {
-                    self.queue_front_pending_process_event(ProcessEventEnvelope {
-                        connection_id: connection_id.clone(),
-                        session_id: session_id.clone(),
-                        vm_id: vm_id.clone(),
-                        process_id: process_id.clone(),
-                        event,
-                    })?;
-                }
-                record_execute_phase("process_exit_trailing_requeue", phase_start.elapsed());
-                if let Some(event) = emit_now {
-                    let result = self.handle_execution_event(&vm_id, &process_id, event);
-                    record_execute_phase(
-                        "process_exit_event_handle_envelope_total",
-                        handle_start.elapsed(),
-                    );
-                    return result;
-                }
-                record_execute_phase(
-                    "process_exit_event_handle_envelope_total",
-                    handle_start.elapsed(),
-                );
-                return Ok(None);
-            }
-        }
-
-        let result = self.handle_execution_event(&vm_id, &process_id, event);
-        if is_exit_event {
-            record_execute_phase(
-                "process_exit_event_handle_envelope_total",
-                handle_start.elapsed(),
-            );
-        }
-        result
-    }
-
-    // try_poll_event moved to crate::execution
-
-    pub async fn close_session(
-        &mut self,
-        connection_id: &str,
-        session_id: &str,
-    ) -> Result<Vec<EventFrame>, SidecarError> {
-        self.dispose_session(connection_id, session_id, DisposeReason::Requested)
-            .await
-    }
-
-    pub async fn remove_connection(
-        &mut self,
-        connection_id: &str,
-    ) -> Result<Vec<EventFrame>, SidecarError> {
-        self.require_authenticated_connection(connection_id)?;
-
-        let session_ids = self
-            .connections
-            .get(connection_id)
-            .expect("authenticated connection should exist")
-            .sessions
-            .iter()
-            .cloned()
-            .collect::<Vec<_>>();
-
-        let mut events = Vec::new();
-        let mut first_error: Option<SidecarError> = None;
-        for session_id in session_ids {
-            // Attempt EVERY session; aggregate errors instead of `?`-ing out on
-            // the first so one wedged session cannot abandon the rest (H1).
-            match self
-                .dispose_session(connection_id, &session_id, DisposeReason::ConnectionClosed)
-                .await
-            {
-                Ok(session_events) => events.extend(session_events),
-                Err(error) => {
-                    if first_error.is_none() {
-                        first_error = Some(error);
-                    }
-                }
-            }
-        }
-
-        self.connections.remove(connection_id);
-        if let Some(error) = first_error {
-            return Err(error);
-        }
-        Ok(events)
-    }
-
-    async fn authenticate_connection(
-        &mut self,
-        request: &RequestFrame,
-        payload: crate::protocol::AuthenticateRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let _ = self.connection_id_for(&request.ownership)?;
-        if let Err(error) = self.validate_auth_token(&payload.auth_token) {
-            let mut fields = audit_fields([
-                (String::from("source"), payload.client_name.clone()),
-                (String::from("reason"), error.to_string()),
-            ]);
-            if let OwnershipScope::ConnectionOwnership(inner) = &request.ownership {
-                fields.insert(String::from("connection_id"), inner.connection_id.clone());
-            }
-            emit_security_audit_event(
-                &self.bridge,
-                &self.config.sidecar_id,
-                "security.auth.failed",
-                fields,
-            );
-            return Err(error);
-        }
-
-        if let Err(error) = validate_authenticate_versions(&payload) {
-            return Err(match error {
-                AuthenticateVersionError::ProtocolVersionMismatch(message) => {
-                    SidecarError::ProtocolVersionMismatch(message)
-                }
-                AuthenticateVersionError::BridgeVersionMismatch(message) => {
-                    SidecarError::BridgeVersionMismatch(message)
-                }
-            });
-        }
-
-        let connection_id = self.allocate_connection_id();
-        self.connections.insert(
-            connection_id.clone(),
-            ConnectionState {
-                auth_token: payload.auth_token,
-                sessions: BTreeSet::new(),
-            },
-        );
-
-        let response = shared_authenticated_response(
-            request.request_id,
-            self.config.sidecar_id.clone(),
-            connection_id,
-            self.config.max_frame_bytes as u32,
-        );
-        Ok(DispatchResult {
-            response,
-            events: Vec::new(),
-        })
-    }
-
-    async fn open_session(
-        &mut self,
-        request: &RequestFrame,
-        payload: OpenSessionRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let connection_id = self.connection_id_for(&request.ownership)?;
-        self.require_authenticated_connection(&connection_id)?;
-
-        self.next_session_id += 1;
-        let session_id = format!("session-{}", self.next_session_id);
-        self.sessions.insert(
-            session_id.clone(),
-            SessionState {
-                connection_id: connection_id.clone(),
-                placement: payload.placement,
-                metadata: payload.metadata.into_iter().collect(),
-                vm_ids: BTreeSet::new(),
-            },
-        );
-        self.connections
-            .get_mut(&connection_id)
-            .expect("authenticated connection should exist")
-            .sessions
-            .insert(session_id.clone());
-
-        Ok(DispatchResult {
-            response: session_opened_response(request.request_id, connection_id, session_id),
-            events: Vec::new(),
-        })
-    }
-
-    // create_vm, dispose_vm, bootstrap_root_filesystem, configure_vm moved to crate::vm
-
-    async fn guest_filesystem_call(
-        &mut self,
-        request: &RequestFrame,
-        payload: GuestFilesystemCallRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        filesystem_guest_filesystem_call(self, request, payload).await
-    }
-
-    // snapshot_root_filesystem moved to crate::vm
-
-    // execute, write_stdin, close_stdin, kill_process, find_listener, find_bound_udp,
-    // get_signal_state, get_zombie_timer_count moved to crate::execution
-
-    async fn dispose_session(
-        &mut self,
-        connection_id: &str,
-        session_id: &str,
-        reason: DisposeReason,
-    ) -> Result<Vec<EventFrame>, SidecarError> {
-        self.require_owned_session(connection_id, session_id)?;
-
-        let vm_ids = self
-            .sessions
-            .get(session_id)
-            .expect("owned session should exist")
-            .vm_ids
-            .iter()
-            .cloned()
-            .collect::<Vec<_>>();
-
-        let mut events = Vec::new();
-        let mut first_error: Option<SidecarError> = None;
-        for vm_id in vm_ids {
-            // Attempt EVERY VM; aggregate errors instead of `?`-ing out on the
-            // first so one stuck VM cannot strand the remaining VMs' teardown and
-            // leave the session permanently un-reclaimed (H1).
-            match self
-                .dispose_vm_internal(connection_id, session_id, &vm_id, reason.clone())
-                .await
-            {
-                Ok(vm_events) => events.extend(vm_events),
-                Err(error) => {
-                    if first_error.is_none() {
-                        first_error = Some(error);
-                    }
-                }
-            }
-        }
-
-        // On client disconnect, give every registered extension a chance to free
-        // the per-session state it tracks (H4): the host owns the only signal an
-        // extension gets that a session has gone away.
-        if matches!(reason, DisposeReason::ConnectionClosed) {
-            if let Err(error) = self
-                .dispose_extension_session_state(connection_id, session_id)
-                .await
-            {
-                if first_error.is_none() {
-                    first_error = Some(error);
-                }
-            }
-        }
-
-        self.sessions.remove(session_id);
-        if let Some(connection) = self.connections.get_mut(connection_id) {
-            connection.sessions.remove(session_id);
-        }
-        // Tell the stdio transport this session is gone so it stops iterating a
-        // dead entry every event-pump tick and the set stops growing (M5).
-        self.disposed_sessions
-            .push((connection_id.to_owned(), session_id.to_owned()));
-
-        if let Some(error) = first_error {
-            return Err(error);
-        }
-        Ok(events)
-    }
-
-    /// Invoke each registered extension's per-session teardown hook so it can
-    /// release the state it keyed on this host session. Errors are aggregated so
-    /// one misbehaving extension cannot prevent the others from cleaning up.
-    async fn dispose_extension_session_state(
-        &mut self,
-        connection_id: &str,
-        session_id: &str,
-    ) -> Result<(), SidecarError> {
-        let ownership = OwnershipScope::session(connection_id, session_id);
-        let extensions = self
-            .extensions
-            .values()
-            .cloned()
-            .collect::<Vec<Arc<dyn Extension>>>();
-        let mut first_error: Option<SidecarError> = None;
-        for extension in extensions {
-            let snapshot = ExtensionSnapshot::new(
-                extension.namespace().to_owned(),
-                ownership.clone(),
-                self.sidecar_requests.clone(),
-                self.event_sink.clone(),
-            );
-            if let Err(error) = extension.on_session_disposed(snapshot).await {
-                if first_error.is_none() {
-                    first_error = Some(error);
-                }
-            }
-        }
-        match first_error {
-            Some(error) => Err(error),
-            None => Ok(()),
-        }
-    }
-
-    /// Drain the session scopes disposed since the last call so the stdio
-    /// transport can untrack them from its active-session set (M5).
-    pub(crate) fn take_disposed_sessions(&mut self) -> Vec<(String, String)> {
-        std::mem::take(&mut self.disposed_sessions)
-    }
-
-    // dispose_vm_internal, terminate_vm_processes, wait_for_vm_processes_to_exit moved to crate::vm
-
-    // kill_process_internal, handle_execution_event, handle_python_vfs_rpc_request,
-    // resolve_javascript_child_process_execution, spawn_javascript_child_process,
-    // poll_javascript_child_process, write_javascript_child_process_stdin,
-    // close_javascript_child_process_stdin, kill_javascript_child_process moved to crate::execution
-
-    /// Whether a `__kernel_stdin_read` / `__kernel_poll` RPC may be serviced
-    /// via the non-blocking deferral path. Non-TTY JavaScript keeps its
-    /// in-process local stdin bridge (serviced inline by the fallback arm).
-    fn kernel_wait_rpc_is_deferrable(
-        &self,
-        vm_id: &str,
-        process_id: &str,
-        request: &JavascriptSyncRpcRequest,
-    ) -> bool {
-        let Some(vm) = self.vms.get(vm_id) else {
-            return false;
-        };
-        let Some(process) = vm.active_processes.get(process_id) else {
-            return false;
-        };
-        if request.method == "__kernel_stdin_read"
-            && matches!(
-                process.execution,
-                crate::state::ActiveExecution::Javascript(_)
-            )
-            && process.tty_master_fd.is_none()
-        {
-            return false;
-        }
-        true
-    }
-
-    /// Service `__kernel_stdin_read` / `__kernel_poll` without blocking the
-    /// dispatch loop. Probes readiness with a zero timeout; when not ready and
-    /// the requested timeout has not expired, parks the RPC on the process
-    /// (reply-by-token) and spawns a waiter that re-enqueues it as a process
-    /// event when kernel poll state changes or the deadline passes. The kernel
-    /// waits stay event-driven (PollNotifier), so a host stdin write wakes the
-    /// guest immediately instead of after a polling slice.
-    ///
-    /// Returns `Ok(Some(response))` to reply now, `Ok(None)` when parked.
-    fn service_deferrable_kernel_wait_rpc(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        request: &JavascriptSyncRpcRequest,
-    ) -> Result<Option<crate::execution::JavascriptSyncRpcServiceResponse>, SidecarError> {
-        let requested_timeout_ms = match request.method.as_str() {
-            "__kernel_stdin_read" => parse_kernel_stdin_read_args(request)?.1,
-            _ => u64::try_from(parse_kernel_poll_args(request)?.1).unwrap_or(0),
-        };
-        let now = Instant::now();
-
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            log_stale_process_event(&self.bridge, vm_id, process_id, "deferred kernel wait RPC");
-            return Ok(None);
-        };
-        let wait_handle = vm.kernel.poll_wait_handle();
-        // Snapshot BEFORE the readiness probe: a write landing between the
-        // probe and the waiter's wait bumps the generation, so the wait
-        // returns immediately instead of losing the wakeup.
-        let generation = wait_handle.snapshot();
-        let Some(process) = vm.active_processes.get_mut(process_id) else {
-            log_stale_process_event(&self.bridge, vm_id, process_id, "deferred kernel wait RPC");
-            return Ok(None);
-        };
-        let kernel_pid = process.kernel_pid;
-        let deadline = match &process.deferred_kernel_wait_rpc {
-            Some((parked, parked_deadline)) if parked.id == request.id => *parked_deadline,
-            _ => now + Duration::from_millis(requested_timeout_ms),
-        };
-        let probe = match request.method.as_str() {
-            "__kernel_stdin_read" => {
-                let (max_bytes, _) = parse_kernel_stdin_read_args(request)?;
-                kernel_stdin_read_response(&mut vm.kernel, kernel_pid, max_bytes, Duration::ZERO)
-            }
-            _ => {
-                let (fd_requests, _) = parse_kernel_poll_args(request)?;
-                kernel_poll_response(&vm.kernel, kernel_pid, &fd_requests, 0)
-            }
-        };
-        let Some(process) = vm.active_processes.get_mut(process_id) else {
-            return Ok(None);
-        };
-        let probe = match probe {
-            Ok(value) => value,
-            Err(error) => {
-                process.deferred_kernel_wait_rpc = None;
-                return Err(error);
-            }
-        };
-        let ready = match request.method.as_str() {
-            "__kernel_stdin_read" => !probe.is_null(),
-            _ => probe.get("readyCount").and_then(Value::as_u64).unwrap_or(0) > 0,
-        };
-        if ready || requested_timeout_ms == 0 || now >= deadline {
-            process.deferred_kernel_wait_rpc = None;
-            return Ok(Some(probe.into()));
-        }
-
-        let connection_id = vm.connection_id.clone();
-        let session_id = vm.session_id.clone();
-        let remaining = deadline.saturating_duration_since(now);
-        let sender = self.process_event_sender.clone();
-        let waiter_request = request.clone();
-        let envelope_vm_id = vm_id.to_owned();
-        let envelope_process_id = process_id.to_owned();
-        let spawned = std::thread::Builder::new()
-            .name(String::from("kernel-wait-rpc"))
-            .spawn(move || {
-                // Wake on any kernel poll-state change or the deadline; either
-                // way requeue exactly once — the handler re-probes and either
-                // replies or re-parks.
-                let _ = wait_handle.wait_for_change(generation, Some(remaining));
-                let _ = sender.blocking_send(ProcessEventEnvelope {
-                    connection_id,
-                    session_id,
-                    vm_id: envelope_vm_id,
-                    process_id: envelope_process_id,
-                    event: ActiveExecutionEvent::JavascriptSyncRpcRequest(waiter_request),
-                });
-            });
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            return Ok(None);
-        };
-        let Some(process) = vm.active_processes.get_mut(process_id) else {
-            return Ok(None);
-        };
-        if spawned.is_err() {
-            // Degrade to pre-deferral behavior: reply not-ready now and let the
-            // guest re-issue its bounded wait.
-            process.deferred_kernel_wait_rpc = None;
-            return Ok(Some(probe.into()));
-        }
-        process.deferred_kernel_wait_rpc = Some((request.clone(), deadline));
-        Ok(None)
-    }
-
-    pub(crate) fn handle_javascript_sync_rpc_request(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        request: JavascriptSyncRpcRequest,
-    ) -> Result<(), SidecarError> {
-        record_sync_bridge_request_observed(request.id, &request.method);
-        let Some(vm) = self.vms.get(vm_id) else {
-            log_stale_process_event(&self.bridge, vm_id, process_id, "javascript sync RPC");
-            return Ok(());
-        };
-        if !vm.active_processes.contains_key(process_id) {
-            log_stale_process_event(&self.bridge, vm_id, process_id, "javascript sync RPC");
-            return Ok(());
-        }
-
-        let response: Result<crate::execution::JavascriptSyncRpcServiceResponse, SidecarError> =
-            match request.method.as_str() {
-                "child_process.spawn" => {
-                    let Some(vm) = self.vms.get(vm_id) else {
-                        log_stale_process_event(
-                            &self.bridge,
-                            vm_id,
-                            process_id,
-                            "javascript sync RPC child_process.spawn",
-                        );
-                        return Ok(());
-                    };
-                    let (payload, _) =
-                        parse_javascript_child_process_spawn_request(vm, &request.args)?;
-                    self.spawn_javascript_child_process(vm_id, process_id, payload)
-                        .map(Into::into)
-                }
-                "child_process.spawn_sync" => {
-                    let Some(vm) = self.vms.get(vm_id) else {
-                        log_stale_process_event(
-                            &self.bridge,
-                            vm_id,
-                            process_id,
-                            "javascript sync RPC child_process.spawn_sync",
-                        );
-                        return Ok(());
-                    };
-                    let (payload, max_buffer) =
-                        parse_javascript_child_process_spawn_request(vm, &request.args)?;
-                    self.spawn_javascript_child_process_sync(vm_id, process_id, payload, max_buffer)
-                        .map(Into::into)
-                }
-                "child_process.poll" => {
-                    let child_process_id = javascript_sync_rpc_arg_str(
-                        &request.args,
-                        0,
-                        "child_process.poll child id",
-                    )?;
-                    let wait_ms = javascript_sync_rpc_arg_u64_optional(
-                        &request.args,
-                        1,
-                        "child_process.poll wait ms",
-                    )?
-                    .unwrap_or_default();
-                    self.poll_javascript_child_process(vm_id, process_id, child_process_id, wait_ms)
-                        .map(Into::into)
-                }
-                "child_process.write_stdin" => {
-                    let child_process_id = javascript_sync_rpc_arg_str(
-                        &request.args,
-                        0,
-                        "child_process.write_stdin child id",
-                    )?;
-                    let chunk = javascript_sync_rpc_bytes_arg(
-                        &request.args,
-                        1,
-                        "child_process.write_stdin chunk",
-                    )?;
-                    self.write_javascript_child_process_stdin(
-                        vm_id,
-                        process_id,
-                        child_process_id,
-                        &chunk,
-                    )?;
-                    Ok(Value::Null.into())
-                }
-                "child_process.close_stdin" => {
-                    let child_process_id = javascript_sync_rpc_arg_str(
-                        &request.args,
-                        0,
-                        "child_process.close_stdin child id",
-                    )?;
-                    self.close_javascript_child_process_stdin(vm_id, process_id, child_process_id)?;
-                    Ok(Value::Null.into())
-                }
-                "child_process.kill" => {
-                    let child_process_id = javascript_sync_rpc_arg_str(
-                        &request.args,
-                        0,
-                        "child_process.kill child id",
-                    )?;
-                    let signal =
-                        javascript_sync_rpc_arg_str(&request.args, 1, "child_process.kill signal")?;
-                    self.kill_javascript_child_process(
-                        vm_id,
-                        process_id,
-                        child_process_id,
-                        signal,
-                    )?;
-                    Ok(Value::Null.into())
-                }
-                "process.kill" => {
-                    let target_pid =
-                        javascript_sync_rpc_arg_i32(&request.args, 0, "process.kill target pid")?;
-                    let signal =
-                        javascript_sync_rpc_arg_str(&request.args, 1, "process.kill signal")?;
-                    let parsed_signal = parse_signal(signal)?;
-                    if parsed_signal == 0 {
-                        let Some(vm) = self.vms.get(vm_id) else {
-                            log_stale_process_event(
-                                &self.bridge,
-                                vm_id,
-                                process_id,
-                                "javascript sync RPC process.kill",
-                            );
-                            return Ok(());
-                        };
-                        if !vm.active_processes.contains_key(process_id) {
-                            log_stale_process_event(
-                                &self.bridge,
-                                vm_id,
-                                process_id,
-                                "javascript sync RPC process.kill",
-                            );
-                            return Ok(());
-                        }
-                        vm.kernel
-                            .signal_process(EXECUTION_DRIVER_NAME, target_pid, parsed_signal)
-                            .map(|()| Value::Null.into())
-                            .map_err(kernel_error)
-                    } else if target_pid < 0 {
-                        let caller_kernel_pid = {
-                            let Some(vm) = self.vms.get(vm_id) else {
-                                log_stale_process_event(
-                                    &self.bridge,
-                                    vm_id,
-                                    process_id,
-                                    "javascript sync RPC process.kill",
-                                );
-                                return Ok(());
-                            };
-                            let Some(caller) = vm.active_processes.get(process_id) else {
-                                log_stale_process_event(
-                                    &self.bridge,
-                                    vm_id,
-                                    process_id,
-                                    "javascript sync RPC process.kill",
-                                );
-                                return Ok(());
-                            };
-                            caller.kernel_pid
-                        };
-                        let pgid = target_pid.unsigned_abs();
-                        match self.signal_vm_process_group(vm_id, caller_kernel_pid, pgid, signal) {
-                            Ok(true) => Ok(self
-                                .apply_self_process_kill(vm_id, process_id, parsed_signal)
-                                .into()),
-                            Ok(false) => Ok(Value::Null.into()),
-                            Err(error) => Err(error),
-                        }
-                    } else {
-                        enum ProcessKillTarget {
-                            SelfProcess,
-                            Child(String),
-                            TopLevel(String),
-                            KernelPid(u32),
-                        }
-                        let target = {
-                            let Some(vm) = self.vms.get(vm_id) else {
-                                log_stale_process_event(
-                                    &self.bridge,
-                                    vm_id,
-                                    process_id,
-                                    "javascript sync RPC process.kill",
-                                );
-                                return Ok(());
-                            };
-                            let Some(caller) = vm.active_processes.get(process_id) else {
-                                log_stale_process_event(
-                                    &self.bridge,
-                                    vm_id,
-                                    process_id,
-                                    "javascript sync RPC process.kill",
-                                );
-                                return Ok(());
-                            };
-                            let caller_pid = i32::try_from(caller.kernel_pid).map_err(|_| {
-                                SidecarError::InvalidState("caller pid exceeds i32".into())
-                            })?;
-                            if caller_pid == target_pid {
-                                ProcessKillTarget::SelfProcess
-                            } else if let Some((child_process_id, _)) =
-                                caller.child_processes.iter().find(|(_, child)| {
-                                    i32::try_from(child.kernel_pid) == Ok(target_pid)
-                                })
-                            {
-                                ProcessKillTarget::Child(child_process_id.clone())
-                            } else if let Some((target_process_id, _)) =
-                                vm.active_processes.iter().find(|(_, process)| {
-                                    i32::try_from(process.kernel_pid) == Ok(target_pid)
-                                })
-                            {
-                                ProcessKillTarget::TopLevel(target_process_id.clone())
-                            } else {
-                                let target_kernel_pid =
-                                    u32::try_from(target_pid).map_err(|_| {
-                                        SidecarError::InvalidState(format!(
-                                            "EINVAL: invalid process pid {target_pid}"
-                                        ))
-                                    })?;
-                                ProcessKillTarget::KernelPid(target_kernel_pid)
-                            }
-                        };
-                        match target {
-                            ProcessKillTarget::SelfProcess => Ok(self
-                                .apply_self_process_kill(vm_id, process_id, parsed_signal)
-                                .into()),
-                            ProcessKillTarget::Child(child_process_id) => {
-                                self.kill_javascript_child_process(
-                                    vm_id,
-                                    process_id,
-                                    &child_process_id,
-                                    signal,
-                                )?;
-                                Ok(Value::Null.into())
-                            }
-                            ProcessKillTarget::TopLevel(target_process_id) => {
-                                self.kill_process_internal(vm_id, &target_process_id, signal)?;
-                                Ok(Value::Null.into())
-                            }
-                            ProcessKillTarget::KernelPid(target_kernel_pid) => {
-                                // Grandchildren and untracked kernel processes are
-                                // resolved VM-wide instead of failing with an
-                                // unknown-pid error.
-                                self.signal_vm_kernel_pid(vm_id, target_kernel_pid, signal)
-                                    .map(|()| Value::Null.into())
-                            }
-                        }
-                    }
-                }
-                "process.signal_state" => {
-                    let (signal, registration) = parse_process_signal_state_request(&request.args)
-                        .map_err(|error| SidecarError::InvalidState(error.to_string()))?;
-                    let Some(vm) = self.vms.get_mut(vm_id) else {
-                        log_stale_process_event(
-                            &self.bridge,
-                            vm_id,
-                            process_id,
-                            "javascript sync RPC process.signal_state",
-                        );
-                        return Ok(());
-                    };
-                    apply_process_signal_state_update(
-                        &mut vm.signal_states,
-                        process_id,
-                        signal,
-                        registration,
-                    );
-                    Ok(Value::Null.into())
-                }
-                "net.http_request" => {
-                    let payload = request
-                        .args
-                        .first()
-                        .cloned()
-                        .ok_or_else(|| {
-                            SidecarError::InvalidState(String::from(
-                                "net.http_request requires a request payload",
-                            ))
-                        })
-                        .and_then(|value| {
-                            serde_json::from_value::<JavascriptHttpLoopbackRequest>(value).map_err(
-                                |error| {
-                                    SidecarError::InvalidState(format!(
-                                        "invalid net.http_request payload: {error}"
-                                    ))
-                                },
-                            )
-                        })?;
-                    if !is_javascript_loopback_host(&payload.host) {
-                        return Err(SidecarError::Execution(format!(
-                            "EACCES: HTTP loopback request requires a loopback host, got {}",
-                            payload.host
-                        )));
-                    }
-                    self.bridge.require_network_access(
-                        vm_id,
-                        NetworkOperation::Http,
-                        format_tcp_resource(&payload.host, payload.port),
-                    )?;
-                    let Some(vm) = self.vms.get_mut(vm_id) else {
-                        log_stale_process_event(
-                            &self.bridge,
-                            vm_id,
-                            process_id,
-                            "javascript sync RPC net.http_request",
-                        );
-                        return Ok(());
-                    };
-                    let resource_limits = vm.kernel.resource_limits().clone();
-                    let socket_paths = build_javascript_socket_path_context(vm)?;
-                    let target_is_current =
-                        [JavascriptSocketFamily::Ipv4, JavascriptSocketFamily::Ipv6]
-                            .iter()
-                            .any(|family| {
-                                socket_paths
-                                    .http_loopback_target(*family, payload.port)
-                                    .is_some_and(|target| {
-                                        target.process_id == payload.process_id
-                                            && target.server_id == payload.server_id
-                                    })
-                            });
-                    if !target_is_current {
-                        return Err(SidecarError::InvalidState(format!(
-                            "unknown HTTP loopback target {}:{} for server {} in process {}",
-                            payload.host, payload.port, payload.server_id, payload.process_id
-                        )));
-                    }
-                    let kernel_readiness = Arc::clone(&vm.kernel_socket_readiness);
-                    let Some(target_process) = vm.active_processes.get_mut(&payload.process_id)
-                    else {
-                        return Err(SidecarError::InvalidState(format!(
-                            "unknown HTTP loopback process {}",
-                            payload.process_id
-                        )));
-                    };
-                    dispatch_loopback_http_request(LoopbackHttpDispatchRequest {
-                        bridge: &self.bridge,
-                        vm_id,
-                        dns: &vm.dns,
-                        socket_paths: &socket_paths,
-                        kernel: &mut vm.kernel,
-                        kernel_readiness,
-                        process: target_process,
-                        resource_limits: &resource_limits,
-                        server_id: payload.server_id,
-                        request_json: &payload.request,
-                    })
-                    .map(Value::String)
-                    .map(Into::into)
-                }
-                "__kernel_stdio_write"
-                    if self
-                        .vms
-                        .get(vm_id)
-                        .and_then(|vm| vm.active_processes.get(process_id))
-                        .is_some_and(|process| process.tty_master_owner.is_some()) =>
-                {
-                    let (writer_kernel_pid, owner) = {
-                        let process = self
-                            .vms
-                            .get(vm_id)
-                            .and_then(|vm| vm.active_processes.get(process_id))
-                            .expect("guarded by match arm");
-                        (
-                            process.kernel_pid,
-                            process.tty_master_owner.expect("guarded by match arm"),
-                        )
-                    };
-                    self.service_shared_tty_stdio_write(vm_id, writer_kernel_pid, owner, &request)
-                        .map(Into::into)
-                }
-                "__kernel_stdin_read" | "__kernel_poll"
-                    if self.kernel_wait_rpc_is_deferrable(vm_id, process_id, &request) =>
-                {
-                    match self.service_deferrable_kernel_wait_rpc(vm_id, process_id, &request) {
-                        Ok(Some(response)) => Ok(response),
-                        // Parked: an off-loop waiter re-enqueues this request as a
-                        // process event when kernel poll state changes.
-                        Ok(None) => return Ok(()),
-                        Err(error) => Err(error),
-                    }
-                }
-                _ => {
-                    let Some(vm) = self.vms.get_mut(vm_id) else {
-                        log_stale_process_event(
-                            &self.bridge,
-                            vm_id,
-                            process_id,
-                            "javascript sync RPC bridge dispatch",
-                        );
-                        return Ok(());
-                    };
-                    let resource_limits = vm.kernel.resource_limits().clone();
-                    let network_counts = vm_network_resource_counts(vm);
-                    let socket_paths = build_javascript_socket_path_context(vm)?;
-                    let kernel_readiness = Arc::clone(&vm.kernel_socket_readiness);
-                    let Some(process) = vm.active_processes.get_mut(process_id) else {
-                        log_stale_process_event(
-                            &self.bridge,
-                            vm_id,
-                            process_id,
-                            "javascript sync RPC bridge dispatch",
-                        );
-                        return Ok(());
-                    };
-                    service_javascript_sync_rpc(JavascriptSyncRpcServiceRequest {
-                        bridge: &self.bridge,
-                        vm_id,
-                        dns: &vm.dns,
-                        socket_paths: &socket_paths,
-                        kernel: &mut vm.kernel,
-                        kernel_readiness,
-                        process,
-                        sync_request: &request,
-                        resource_limits: &resource_limits,
-                        network_counts,
-                    })
-                }
-            };
-
-        let Some(vm) = self.vms.get_mut(vm_id) else {
-            log_stale_process_event(
-                &self.bridge,
-                vm_id,
-                process_id,
-                "javascript sync RPC response delivery",
-            );
-            return Ok(());
-        };
-        let shadow_root = vm.cwd.clone();
-        let Some(process) = vm.active_processes.get_mut(process_id) else {
-            log_stale_process_event(
-                &self.bridge,
-                vm_id,
-                process_id,
-                "javascript sync RPC response delivery",
-            );
-            return Ok(());
-        };
-
-        if response.is_ok()
-            && matches!(
-                request.method.as_str(),
-                "fs.chmodSync" | "fs.promises.chmod"
-            )
-        {
-            let guest_path =
-                javascript_sync_rpc_arg_str(&request.args, 0, "filesystem chmod path")?;
-            let mode =
-                javascript_sync_rpc_arg_u32(&request.args, 1, "filesystem chmod mode")? & 0o7777;
-            let host_path =
-                shadow_host_path_for_process(&shadow_root, &process.guest_cwd, guest_path);
-            if host_path.exists() {
-                fs::set_permissions(&host_path, fs::Permissions::from_mode(mode)).map_err(
-                    |error| {
-                        SidecarError::Io(format!(
-                            "failed to mirror chmod to shadow path {}: {error}",
-                            host_path.display()
-                        ))
-                    },
-                )?;
-            }
-        }
-
-        match response {
-            Ok(result) => process
-                .execution
-                .respond_javascript_sync_rpc_response(request.id, result)
-                .or_else(ignore_stale_javascript_sync_rpc_response),
-            Err(error) => process
-                .execution
-                .respond_javascript_sync_rpc_error(
-                    request.id,
-                    javascript_sync_rpc_error_code(&error),
-                    error.to_string(),
-                )
-                .or_else(ignore_stale_javascript_sync_rpc_response),
-        }
-    }
-
-    /// Applies a `process.kill` aimed at the calling process itself and
-    /// returns the self-delivery action payload for the bridge.
-    fn apply_self_process_kill(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-        parsed_signal: i32,
-    ) -> Value {
-        let action = self
-            .vms
-            .get(vm_id)
-            .and_then(|vm| vm.signal_states.get(process_id))
-            .and_then(|handlers| handlers.get(&(parsed_signal as u32)))
-            .map(|registration| registration.action.clone())
-            .unwrap_or(SignalDispositionAction::Default);
-        if action == SignalDispositionAction::Default
-            && parsed_signal != 0
-            && !matches!(
-                canonical_signal_name(parsed_signal),
-                Some("SIGWINCH" | "SIGCHLD" | "SIGCONT" | "SIGURG")
-            )
-        {
-            if let Some(vm) = self.vms.get_mut(vm_id) {
-                if let Some(process) = vm.active_processes.get_mut(process_id) {
-                    process.pending_self_signal_exit = Some(parsed_signal);
-                }
-            }
-        }
-        json!({
-            "self": true,
-            "action": match action {
-                SignalDispositionAction::Default => "default",
-                SignalDispositionAction::Ignore => "ignore",
-                SignalDispositionAction::User => "user",
-            },
-        })
-    }
-
-    pub(crate) fn vm_ids_for_scope(
-        &self,
-        ownership: &OwnershipScope,
-    ) -> Result<Vec<String>, SidecarError> {
-        match ownership {
-            OwnershipScope::SessionOwnership(inner) => {
-                self.require_owned_session(&inner.connection_id, &inner.session_id)?;
-                Ok(self
-                    .sessions
-                    .get(&inner.session_id)
-                    .expect("owned session should exist")
-                    .vm_ids
-                    .iter()
-                    .cloned()
-                    .collect())
-            }
-            OwnershipScope::VmOwnership(inner) => {
-                self.require_owned_vm(&inner.connection_id, &inner.session_id, &inner.vm_id)?;
-                Ok(vec![inner.vm_id.clone()])
-            }
-            OwnershipScope::ConnectionOwnership(..) => Err(SidecarError::InvalidState(
-                String::from("event polling requires session or VM ownership scope"),
-            )),
-        }
-    }
-
-    pub(crate) fn vm_ownership(&self, vm_id: &str) -> Result<OwnershipScope, SidecarError> {
-        let vm = self
-            .vms
-            .get(vm_id)
-            .ok_or_else(|| SidecarError::InvalidState(format!("unknown sidecar VM {vm_id}")))?;
-        Ok(OwnershipScope::vm(&vm.connection_id, &vm.session_id, vm_id))
-    }
-
-    pub(crate) fn vm_has_active_processes(&self, vm_id: &str) -> bool {
-        self.vms
-            .get(vm_id)
-            .is_some_and(|vm| !vm.active_processes.is_empty())
-    }
-
-    fn require_authenticated_connection(&self, connection_id: &str) -> Result<(), SidecarError> {
-        if self.connections.contains_key(connection_id) {
-            Ok(())
-        } else {
-            Err(SidecarError::InvalidState(format!(
-                "connection {connection_id} has not authenticated"
-            )))
-        }
-    }
-
-    pub(crate) fn require_owned_session(
-        &self,
-        connection_id: &str,
-        session_id: &str,
-    ) -> Result<(), SidecarError> {
-        self.require_authenticated_connection(connection_id)?;
-        let session = self.sessions.get(session_id).ok_or_else(|| {
-            SidecarError::InvalidState(format!("unknown sidecar session {session_id}"))
-        })?;
-        if session.connection_id == connection_id {
-            Ok(())
-        } else {
-            Err(SidecarError::InvalidState(format!(
-                "session {session_id} is not owned by connection {connection_id}"
-            )))
-        }
-    }
-
-    pub(crate) fn require_owned_vm(
-        &self,
-        connection_id: &str,
-        session_id: &str,
-        vm_id: &str,
-    ) -> Result<(), SidecarError> {
-        self.require_owned_session(connection_id, session_id)?;
-        let vm = self
-            .vms
-            .get(vm_id)
-            .ok_or_else(|| SidecarError::InvalidState(format!("unknown sidecar VM {vm_id}")))?;
-        if vm.connection_id != connection_id || vm.session_id != session_id {
-            return Err(SidecarError::InvalidState(format!(
-                "VM {vm_id} is not owned by {connection_id}/{session_id}"
-            )));
-        }
-        Ok(())
-    }
-
-    fn connection_id_for(&self, ownership: &OwnershipScope) -> Result<String, SidecarError> {
-        match ownership {
-            OwnershipScope::ConnectionOwnership(inner) => Ok(inner.connection_id.clone()),
-            OwnershipScope::SessionOwnership(..) | OwnershipScope::VmOwnership(..) => {
-                Err(SidecarError::InvalidState(String::from(
-                    "request requires connection ownership scope",
-                )))
-            }
-        }
-    }
-
-    fn validate_auth_token(&self, auth_token: &str) -> Result<(), SidecarError> {
-        let Some(expected_auth_token) = self.config.expected_auth_token.as_deref() else {
-            return Ok(());
-        };
-
-        if auth_token == expected_auth_token {
-            Ok(())
-        } else {
-            Err(SidecarError::Unauthorized(String::from(
-                "authenticate request provided an invalid auth token",
-            )))
-        }
-    }
-
-    fn allocate_connection_id(&mut self) -> String {
-        self.next_connection_id += 1;
-        format!("conn-{}", self.next_connection_id)
-    }
-
-    fn take_matching_process_event_envelope(
-        &mut self,
-        vm_id: &str,
-        process_id: &str,
-    ) -> Result<Option<ProcessEventEnvelope>, SidecarError> {
-        if let Some(index) = self
-            .pending_process_events
-            .iter()
-            .position(|event| event.vm_id == vm_id && event.process_id == process_id)
-        {
-            return Ok(self.pending_process_events.remove(index));
-        }
-
-        let mut matching_envelope = None;
-        let mut deferred = Vec::new();
-        {
-            let pending_capacity = self.pending_process_event_capacity();
-            let receiver = self.process_event_receiver.as_mut().ok_or_else(|| {
-                SidecarError::InvalidState(String::from("process event receiver unavailable"))
-            })?;
-            loop {
-                if deferred.len() >= pending_capacity {
-                    if receiver.is_empty() {
-                        break;
-                    }
-                    return Err(process_event_queue_overflow_error());
-                }
-                let envelope = match receiver.try_recv() {
-                    Ok(envelope) => envelope,
-                    Err(tokio::sync::mpsc::error::TryRecvError::Empty) => break,
-                    Err(tokio::sync::mpsc::error::TryRecvError::Disconnected) => break,
-                };
-                if matching_envelope.is_none()
-                    && envelope.vm_id == vm_id
-                    && envelope.process_id == process_id
-                {
-                    matching_envelope = Some(envelope);
-                    break;
-                }
-                deferred.push(envelope);
-            }
-        }
-        for envelope in deferred {
-            self.queue_pending_process_event(envelope)?;
-        }
-
-        Ok(matching_envelope)
-    }
-
-    fn allocate_sidecar_request_id(&mut self) -> RequestId {
-        let request_id = self.next_sidecar_request_id;
-        self.next_sidecar_request_id -= 1;
-        request_id
-    }
-
-    pub(crate) fn session_scope_for(
-        &self,
-        ownership: &OwnershipScope,
-    ) -> Result<(String, String), SidecarError> {
-        match ownership {
-            OwnershipScope::SessionOwnership(inner) => {
-                Ok((inner.connection_id.clone(), inner.session_id.clone()))
-            }
-            OwnershipScope::ConnectionOwnership(..) | OwnershipScope::VmOwnership(..) => {
-                Err(SidecarError::InvalidState(String::from(
-                    "request requires session ownership scope",
-                )))
-            }
-        }
-    }
-
-    pub(crate) fn vm_scope_for(
-        &self,
-        ownership: &OwnershipScope,
-    ) -> Result<(String, String, String), SidecarError> {
-        match ownership {
-            OwnershipScope::VmOwnership(inner) => Ok((
-                inner.connection_id.clone(),
-                inner.session_id.clone(),
-                inner.vm_id.clone(),
-            )),
-            OwnershipScope::ConnectionOwnership(..) | OwnershipScope::SessionOwnership(..) => Err(
-                SidecarError::InvalidState(String::from("request requires VM ownership scope")),
-            ),
-        }
-    }
-
-    pub(crate) fn respond(
-        &self,
-        request: &RequestFrame,
-        payload: ResponsePayload,
-    ) -> ResponseFrame {
-        shared_respond(request, payload)
-    }
-
-    fn reject(&self, request: &RequestFrame, code: &str, message: &str) -> ResponseFrame {
-        shared_reject(request, code, message)
-    }
-
-    pub fn queue_sidecar_request(
-        &mut self,
-        ownership: OwnershipScope,
-        payload: SidecarRequestPayload,
-    ) -> Result<RequestId, SidecarError> {
-        if self.outbound_sidecar_requests.len() >= MAX_OUTBOUND_SIDECAR_REQUESTS {
-            return Err(outbound_sidecar_request_queue_overflow_error());
-        }
-        if self.pending_sidecar_responses.pending_count() >= MAX_PENDING_SIDECAR_RESPONSES {
-            return Err(sidecar_response_pending_overflow_error());
-        }
-        let request_id = self.allocate_sidecar_request_id();
-        let request = SidecarRequestFrame::new(request_id, ownership, payload);
-        self.pending_sidecar_responses
-            .register_request(&request)
-            .map_err(sidecar_response_tracker_error)?;
-        self.outbound_sidecar_requests.push_back(request);
-        self.outbound_sidecar_requests_gauge
-            .observe_depth(self.outbound_sidecar_requests.len());
-        self.pending_sidecar_responses_gauge
-            .observe_depth(self.pending_sidecar_responses.pending_count());
-        Ok(request_id)
-    }
-
-    pub fn queue_wire_sidecar_request(
-        &mut self,
-        ownership: crate::wire::OwnershipScope,
-        payload: crate::wire::SidecarRequestPayload,
-    ) -> Result<crate::wire::RequestId, SidecarError> {
-        let ownership = crate::wire::ownership_scope_to_compat(ownership);
-        let payload = crate::wire::sidecar_request_payload_to_compat(&ownership, payload)
-            .map_err(wire_protocol_error)?;
-        self.queue_sidecar_request(ownership, payload)
-    }
-
-    pub fn pop_sidecar_request(&mut self) -> Option<SidecarRequestFrame> {
-        let request = self.outbound_sidecar_requests.pop_front();
-        self.outbound_sidecar_requests_gauge
-            .observe_depth(self.outbound_sidecar_requests.len());
-        request
-    }
-
-    pub fn pop_wire_sidecar_request(
-        &mut self,
-    ) -> Result<Option<crate::wire::SidecarRequestFrame>, SidecarError> {
-        self.pop_sidecar_request()
-            .map(crate::wire::sidecar_request_frame_from_compat)
-            .transpose()
-            .map_err(wire_protocol_error)
-    }
-
-    pub fn accept_sidecar_response(
-        &mut self,
-        response: SidecarResponseFrame,
-    ) -> Result<(), SidecarError> {
-        match self.pending_sidecar_responses.accept_response(&response) {
-            Ok(()) => {}
-            // A response for a request that is no longer pending (its owning VM
-            // was disposed, abandoning the in-flight callback) or already
-            // completed is a benign late/stale reply on the shared sidecar — a
-            // per-VM `sidecar_request` can be answered by the host after that VM
-            // has been torn down (multiple VMs share one sidecar process). Drop
-            // it instead of failing the whole sidecar over a harmless straggler.
-            Err(
-                error @ (SidecarResponseTrackerError::UnmatchedResponse { .. }
-                | SidecarResponseTrackerError::DuplicateResponse { .. }),
-            ) => {
-                tracing::warn!(
-                    request_id = response.request_id,
-                    "dropping stale sidecar response with no matching pending request: {error}"
-                );
-                return Ok(());
-            }
-            Err(error) => return Err(sidecar_response_tracker_error(error)),
-        }
-        self.pending_sidecar_responses_gauge
-            .observe_depth(self.pending_sidecar_responses.pending_count());
-        self.completed_sidecar_response_order
-            .push_back(response.request_id);
-        self.completed_sidecar_responses
-            .insert(response.request_id, response);
-        self.completed_sidecar_responses_gauge
-            .observe_depth(self.completed_sidecar_responses.len());
-        while self.completed_sidecar_responses.len() > MAX_COMPLETED_SIDECAR_RESPONSES {
-            match self.completed_sidecar_response_order.pop_front() {
-                // Only a response that was never retrieved is a real loss; an id
-                // already taken via take_sidecar_response leaves a stale order
-                // entry that removes to None and is not a dropped response.
-                Some(evicted) => {
-                    if self.completed_sidecar_responses.remove(&evicted).is_some() {
-                        tracing::warn!(
-                            queue = "completed_sidecar_responses",
-                            evicted_request_id = evicted,
-                            capacity = MAX_COMPLETED_SIDECAR_RESPONSES,
-                            "dropping an unretrieved completed sidecar response to stay within cap; the host can no longer fetch it (response lost)"
-                        );
-                        self.completed_sidecar_responses_gauge
-                            .observe_depth(self.completed_sidecar_responses.len());
-                    }
-                }
-                None => break,
-            }
-        }
-        Ok(())
-    }
-
-    pub fn accept_wire_sidecar_response(
-        &mut self,
-        response: crate::wire::SidecarResponseFrame,
-    ) -> Result<(), SidecarError> {
-        let response =
-            crate::wire::sidecar_response_frame_to_compat(response).map_err(wire_protocol_error)?;
-        self.accept_sidecar_response(response)
-    }
-
-    pub fn take_sidecar_response(&mut self, request_id: RequestId) -> Option<SidecarResponseFrame> {
-        let response = self.completed_sidecar_responses.remove(&request_id);
-        if response.is_some() {
-            self.completed_sidecar_response_order
-                .retain(|completed_id| completed_id != &request_id);
-            self.completed_sidecar_responses_gauge
-                .observe_depth(self.completed_sidecar_responses.len());
-        }
-        response
-    }
-
-    pub fn take_wire_sidecar_response(
-        &mut self,
-        request_id: crate::wire::RequestId,
-    ) -> Result<Option<crate::wire::SidecarResponseFrame>, SidecarError> {
-        self.take_sidecar_response(request_id)
-            .map(|response| {
-                crate::wire::sidecar_response_frame_from_compat(response)
-                    .map_err(wire_protocol_error)
-            })
-            .transpose()
-    }
-
-    pub(crate) fn vm_lifecycle_event(
-        &self,
-        connection_id: &str,
-        session_id: &str,
-        vm_id: &str,
-        state: VmLifecycleState,
-    ) -> EventFrame {
-        shared_vm_lifecycle_event(connection_id, session_id, vm_id, state)
-    }
-
-    fn ensure_request_within_frame_limit(
-        &self,
-        request: &RequestFrame,
-    ) -> Result<(), SidecarError> {
-        let frame = crate::protocol::to_generated_protocol_frame(
-            &crate::protocol::ProtocolFrame::Request(request.clone()),
-        )
-        .map_err(|error| {
-            SidecarError::InvalidState(format!("failed to convert request frame: {error}"))
-        })?;
-        let crate::wire::ProtocolFrame::RequestFrame(_) = &frame else {
-            return Err(SidecarError::InvalidState(String::from(
-                "request converted to non-request wire frame",
-            )));
-        };
-
-        crate::wire::WireFrameCodec::new(self.config.max_frame_bytes)
-            .encode(&frame)
-            .map(|_| ())
-            .map_err(|error| SidecarError::FrameTooLarge(error.to_string()))
-    }
-}
-
-impl<B> ExtensionHost for NativeSidecar<B>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    fn spawn_process<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        payload: ExecuteRequest,
-    ) -> ExtensionFuture<'a, ProcessStartedResponse> {
-        Box::pin(async move {
-            let request = RequestFrame::new(0, ownership, RequestPayload::Execute(payload.clone()));
-            let dispatch = NativeSidecar::execute(self, &request, payload).await?;
-            match dispatch.response.payload {
-                ResponsePayload::ProcessStarted(response) => Ok(response),
-                other => Err(unexpected_extension_host_response("execute", other)),
-            }
-        })
-    }
-
-    fn write_stdin<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        payload: WriteStdinRequest,
-    ) -> ExtensionFuture<'a, StdinWrittenResponse> {
-        Box::pin(async move {
-            let request =
-                RequestFrame::new(0, ownership, RequestPayload::WriteStdin(payload.clone()));
-            let dispatch = NativeSidecar::write_stdin(self, &request, payload).await?;
-            match dispatch.response.payload {
-                ResponsePayload::StdinWritten(response) => Ok(response),
-                other => Err(unexpected_extension_host_response("write_stdin", other)),
-            }
-        })
-    }
-
-    fn close_stdin<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        payload: CloseStdinRequest,
-    ) -> ExtensionFuture<'a, StdinClosedResponse> {
-        Box::pin(async move {
-            let request =
-                RequestFrame::new(0, ownership, RequestPayload::CloseStdin(payload.clone()));
-            let dispatch = NativeSidecar::close_stdin(self, &request, payload).await?;
-            match dispatch.response.payload {
-                ResponsePayload::StdinClosed(response) => Ok(response),
-                other => Err(unexpected_extension_host_response("close_stdin", other)),
-            }
-        })
-    }
-
-    fn kill_process<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        payload: KillProcessRequest,
-    ) -> ExtensionFuture<'a, ProcessKilledResponse> {
-        Box::pin(async move {
-            let request =
-                RequestFrame::new(0, ownership, RequestPayload::KillProcess(payload.clone()));
-            let dispatch = NativeSidecar::kill_process(self, &request, payload).await?;
-            match dispatch.response.payload {
-                ResponsePayload::ProcessKilled(response) => Ok(response),
-                other => Err(unexpected_extension_host_response("kill_process", other)),
-            }
-        })
-    }
-
-    fn poll_event<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        timeout: Duration,
-    ) -> ExtensionFuture<'a, Option<EventFrame>> {
-        Box::pin(async move { NativeSidecar::poll_event(self, &ownership, timeout).await })
-    }
-
-    fn guest_filesystem_call<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        payload: GuestFilesystemCallRequest,
-    ) -> ExtensionFuture<'a, GuestFilesystemResultResponse> {
-        Box::pin(async move {
-            let request = RequestFrame::new(
-                0,
-                ownership,
-                RequestPayload::GuestFilesystemCall(payload.clone()),
-            );
-            let dispatch = NativeSidecar::guest_filesystem_call(self, &request, payload).await?;
-            match dispatch.response.payload {
-                ResponsePayload::GuestFilesystemResult(response) => Ok(response),
-                other => Err(unexpected_extension_host_response(
-                    "guest_filesystem_call",
-                    other,
-                )),
-            }
-        })
-    }
-
-    fn bind_process_to_session<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        namespace: String,
-        ext_session_id: String,
-        process_id: String,
-    ) -> ExtensionFuture<'a, ()> {
-        Box::pin(async move {
-            self.bind_extension_process_resource(ownership, namespace, ext_session_id, process_id)
-        })
-    }
-
-    fn bind_vm_to_session<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        namespace: String,
-        ext_session_id: String,
-    ) -> ExtensionFuture<'a, ()> {
-        Box::pin(
-            async move { self.bind_extension_vm_resource(ownership, namespace, ext_session_id) },
-        )
-    }
-
-    fn dispose_session_resources<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        namespace: String,
-        ext_session_id: String,
-    ) -> ExtensionFuture<'a, Vec<EventFrame>> {
-        Box::pin(async move {
-            let key = (namespace, ext_session_id);
-            let Some(resources) = self.extension_sessions.get(&key) else {
-                return Ok(Vec::new());
-            };
-            if resources.ownership != ownership {
-                return Err(SidecarError::InvalidState(String::from(
-                    "extension session ownership did not match dispose request",
-                )));
-            }
-            let resources = self
-                .extension_sessions
-                .remove(&key)
-                .expect("extension resources existed before removal");
-            let (connection_id, session_id, vm_id) = self.vm_scope_for(&ownership)?;
-            for process_id in resources.process_ids {
-                if self
-                    .vms
-                    .get(&vm_id)
-                    .is_some_and(|vm| vm.active_processes.contains_key(&process_id))
-                {
-                    self.kill_process_internal(&vm_id, &process_id, "SIGTERM")?;
-                }
-            }
-            let mut events = Vec::new();
-            for resource_vm_id in resources.vm_ids {
-                if self.vms.contains_key(&resource_vm_id) {
-                    events.extend(
-                        self.dispose_vm_internal(
-                            &connection_id,
-                            &session_id,
-                            &resource_vm_id,
-                            DisposeReason::Requested,
-                        )
-                        .await?,
-                    );
-                }
-            }
-            Ok(events)
-        })
-    }
-
-    fn start_buffering_process_output<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        process_id: String,
-    ) -> ExtensionFuture<'a, ()> {
-        Box::pin(async move {
-            let (connection_id, session_id, vm_id) = self.vm_scope_for(&ownership)?;
-            self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-            let key = (vm_id, process_id);
-            if self.extension_process_output_buffers.contains_key(&key) {
-                return Err(SidecarError::Conflict(String::from(
-                    "extension process output buffering already started",
-                )));
-            }
-            self.extension_process_output_buffers
-                .insert(key, ExtensionBufferedProcessOutput::default());
-            Ok(())
-        })
-    }
-
-    fn handoff_buffered_process_output<'a>(
-        &'a mut self,
-        ownership: OwnershipScope,
-        namespace: String,
-        ext_session_id: String,
-        process_id: String,
-        timeout: Duration,
-    ) -> ExtensionFuture<'a, ExtensionBufferedProcessOutput> {
-        Box::pin(async move {
-            let (connection_id, session_id, vm_id) = self.vm_scope_for(&ownership)?;
-            self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-            let key = (vm_id.clone(), process_id.clone());
-            let deadline = Instant::now() + timeout;
-            loop {
-                self.pump_process_events(&ownership).await?;
-                while let Some(envelope) =
-                    self.take_matching_process_event_envelope(&vm_id, &process_id)?
-                {
-                    if self.capture_extension_process_output_event(
-                        &vm_id,
-                        &process_id,
-                        &envelope.event,
-                    ) {
-                        continue;
-                    }
-                    self.queue_pending_process_event(envelope)?;
-                    break;
-                }
-                let buffered = self
-                    .extension_process_output_buffers
-                    .get(&key)
-                    .is_some_and(|buffer| !buffer.stdout.is_empty() || !buffer.stderr.is_empty());
-                if buffered || timeout.is_zero() || Instant::now() >= deadline {
-                    break;
-                }
-                let remaining = deadline.saturating_duration_since(Instant::now());
-                time::sleep(remaining.min(Duration::from_millis(10))).await;
-            }
-            self.bind_extension_process_resource(
-                ownership,
-                namespace,
-                ext_session_id,
-                process_id.clone(),
-            )?;
-            self.extension_process_output_buffers
-                .remove(&key)
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "extension process output buffering was not started",
-                    ))
-                })
-        })
-    }
-}
-
-fn unexpected_extension_host_response(operation: &str, payload: ResponsePayload) -> SidecarError {
-    match payload {
-        ResponsePayload::Rejected(response) => SidecarError::InvalidState(format!(
-            "extension {operation} rejected with {}: {}",
-            response.code, response.message
-        )),
-        other => SidecarError::InvalidState(format!(
-            "extension {operation} returned unexpected response: {other:?}"
-        )),
-    }
-}
-
-fn shadow_host_path_for_process(
-    shadow_root: &Path,
-    process_guest_cwd: &str,
-    guest_path: &str,
-) -> PathBuf {
-    let normalized_guest_path = if guest_path.starts_with('/') {
-        normalize_path(guest_path)
-    } else {
-        normalize_path(&format!(
-            "{}/{}",
-            process_guest_cwd.trim_end_matches('/'),
-            guest_path
-        ))
-    };
-    if normalized_guest_path == "/" {
-        shadow_root.to_path_buf()
-    } else {
-        shadow_root.join(normalized_guest_path.trim_start_matches('/'))
-    }
-}
-
-fn sidecar_response_tracker_error(error: SidecarResponseTrackerError) -> SidecarError {
-    SidecarError::InvalidState(format!(
-        "invalid sidecar response correlation state: {error}"
-    ))
-}
-
-fn map_bridge_permission(decision: secure_exec_bridge::PermissionDecision) -> PermissionDecision {
-    match decision.verdict {
-        secure_exec_bridge::PermissionVerdict::Allow => PermissionDecision::allow(),
-        secure_exec_bridge::PermissionVerdict::Deny => PermissionDecision::deny(
-            decision
-                .reason
-                .unwrap_or_else(|| String::from("denied by host")),
-        ),
-        secure_exec_bridge::PermissionVerdict::Prompt => PermissionDecision::deny(
-            decision
-                .reason
-                .unwrap_or_else(|| String::from("permission prompt required")),
-        ),
-    }
-}
-
-fn audit_timestamp() -> String {
-    SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .expect("system time before unix epoch")
-        .as_millis()
-        .to_string()
-}
-
-pub(crate) fn audit_fields<I, K, V>(fields: I) -> BTreeMap<String, String>
-where
-    I: IntoIterator<Item = (K, V)>,
-    K: Into<String>,
-    V: Into<String>,
-{
-    let mut mapped = BTreeMap::from([(String::from("timestamp"), audit_timestamp())]);
-    for (key, value) in fields {
-        mapped.insert(key.into(), value.into());
-    }
-    mapped
-}
-
-pub(crate) fn emit_structured_event<B>(
-    bridge: &SharedBridge<B>,
-    vm_id: &str,
-    name: &str,
-    fields: BTreeMap<String, String>,
-) -> Result<(), SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    bridge.with_mut(|bridge| {
-        bridge.emit_structured_event(StructuredEventRecord {
-            vm_id: vm_id.to_owned(),
-            name: name.to_owned(),
-            fields,
-        })
-    })
-}
-
-pub(crate) fn emit_security_audit_event<B>(
-    bridge: &SharedBridge<B>,
-    vm_id: &str,
-    name: &str,
-    fields: BTreeMap<String, String>,
-) where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let _ = emit_structured_event(bridge, vm_id, name, fields);
-}
-
-/// Build a wire `EventFrame` carrying a `StructuredEvent` (name + string-map
-/// detail) scoped to a connection. Used to forward limit-registry warnings to the
-/// host as `{type:"structured", name:"limit_warning", detail}` events without a
-/// protocol schema change. Emitted directly to the host (not via the polled,
-/// per-session bridge queue, which is a no-op in the stdio sidecar), so a
-/// process-global signal is delivered against the active connection.
-pub(crate) fn structured_event_frame(
-    connection_id: &str,
-    name: &str,
-    detail: std::collections::HashMap<String, String>,
-) -> Result<crate::wire::EventFrame, SidecarError> {
-    let event = EventFrame::new(
-        OwnershipScope::connection(connection_id),
-        EventPayload::Structured(crate::protocol::StructuredEvent {
-            name: name.to_owned(),
-            detail,
-        }),
-    );
-    crate::wire::event_frame_from_compat(event).map_err(|error| {
-        SidecarError::InvalidState(format!("invalid structured event frame: {error}"))
-    })
-}
-
-pub(crate) fn log_stale_process_event<B>(
-    bridge: &SharedBridge<B>,
-    vm_id: &str,
-    process_id: &str,
-    context: &str,
-) where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let _ = bridge.emit_log(
-        vm_id,
-        format!(
-            "Ignoring stale process event during {context}: VM {vm_id} process {process_id} was already reaped"
-        ),
-    );
-}
-
-// filesystem_operation_label moved to crate::vm
-
-pub(crate) fn root_filesystem_error(error: impl std::fmt::Display) -> SidecarError {
-    SidecarError::InvalidState(format!("root filesystem: {error}"))
-}
-
-pub(crate) fn normalize_path(path: &str) -> String {
-    let mut segments = Vec::new();
-    for component in Path::new(path).components() {
-        match component {
-            Component::RootDir => segments.clear(),
-            Component::ParentDir => {
-                segments.pop();
-            }
-            Component::CurDir => {}
-            Component::Normal(value) => segments.push(value.to_string_lossy().into_owned()),
-            Component::Prefix(prefix) => {
-                segments.push(prefix.as_os_str().to_string_lossy().into_owned());
-            }
-        }
-    }
-
-    let normalized = format!("/{}", segments.join("/"));
-    if normalized.is_empty() {
-        String::from("/")
-    } else {
-        normalized
-    }
-}
-
-pub(crate) fn normalize_host_path(path: &Path) -> PathBuf {
-    let mut normalized = PathBuf::new();
-
-    for component in path.components() {
-        match component {
-            Component::Prefix(prefix) => normalized.push(prefix.as_os_str()),
-            Component::RootDir => normalized.push(Path::new("/")),
-            Component::CurDir => {}
-            Component::ParentDir => {
-                if normalized != Path::new("/") {
-                    normalized.pop();
-                }
-            }
-            Component::Normal(part) => normalized.push(part),
-        }
-    }
-
-    if normalized.as_os_str().is_empty() {
-        if path.is_absolute() {
-            PathBuf::from("/")
-        } else {
-            PathBuf::from(".")
-        }
-    } else {
-        normalized
-    }
-}
-
-pub(crate) fn path_is_within_root(path: &Path, root: &Path) -> bool {
-    path == root || path.starts_with(root)
-}
-
-pub(crate) fn dirname(path: &str) -> String {
-    let normalized = normalize_path(path);
-    let parent = Path::new(&normalized)
-        .parent()
-        .unwrap_or_else(|| Path::new("/"));
-    let value = parent.to_string_lossy();
-    if value.is_empty() {
-        String::from("/")
-    } else {
-        value.into_owned()
-    }
-}
-
-pub(crate) fn kernel_error(error: KernelError) -> SidecarError {
-    SidecarError::Kernel(error.to_string())
-}
-
-pub(crate) fn plugin_error(error: PluginError) -> SidecarError {
-    SidecarError::Plugin(error.to_string())
-}
-
-pub(crate) fn javascript_error(error: JavascriptExecutionError) -> SidecarError {
-    SidecarError::Execution(error.to_string())
-}
-
-pub(crate) fn wasm_error(error: WasmExecutionError) -> SidecarError {
-    SidecarError::Execution(error.to_string())
-}
-
-pub(crate) fn python_error(error: PythonExecutionError) -> SidecarError {
-    SidecarError::Execution(error.to_string())
-}
-
-pub(crate) fn vfs_error(error: VfsError) -> SidecarError {
-    SidecarError::Kernel(error.to_string())
-}
-
-/// Actionable guidance shown when guest package resolution fails because the packages live in a
-/// non-flat `node_modules` whose package store is not visible in the VM. Mounting host `node_modules`
-/// is a bind mount, so symlinked/store layouts
-/// do not resolve inside the VM: Node canonicalizes a module to its store
-/// realpath (e.g. `node_modules/.pnpm/...`, `.bun/...`, `.store/...`) which lives
-/// above the mounted directory and the guest `fs` cannot read. Plug'n'Play
-/// (yarn-berry default) has no `node_modules` at all. A flat (hoisted) layout is
-/// required. The empirically-supported package managers are captured in
-/// `crates/sidecar/tests/module_layout_e2e.rs`.
-#[allow(dead_code)]
-const HOISTED_NODE_MODULES_GUIDANCE: &str = "secure-exec can't load mounted node_modules: the directory uses a non-flat layout (pnpm / bun / yarn workspaces store, or yarn Plug'n'Play) whose package store isn't visible inside the VM. A flat (hoisted) node_modules is required.\n  - pnpm        -> add `node-linker=hoisted` to .npmrc, then reinstall\n  - yarn berry  -> set `nodeLinker: node-modules` in .yarnrc.yml (not pnp/pnpm)\n  - bun         -> install dependencies outside a workspace (workspaces use a .bun store)\n  - npm / yarn classic -> already flat, no change needed";
-
-/// Detect, from an adapter's captured stderr, a non-flat-`node_modules` failure
-/// signature. Returns the actionable guidance to fold into the surfaced error,
-/// or `None` when the failure is unrelated.
-///
-/// Two signatures, both kept specific so they never fire on unrelated crashes:
-/// - a missing-file / cannot-resolve error referencing a package STORE path that
-///   lives above the mounted project (`.pnpm`, `.bun`, `.store`, PnP `__virtual__`),
-/// - a yarn Plug'n'Play fingerprint (`.pnp.cjs`, the zip cache, or PnP's
-///   "isn't declared in your dependencies" resolver error).
-#[allow(dead_code)]
-fn symlinked_node_modules_hint(stderr: &str) -> Option<&'static str> {
-    // Package stores that only appear in a path when a non-flat layout is used.
-    // pnpm (isolated), bun (workspace), yarn-berry (nodeLinker: pnpm), and PnP
-    // virtual instances all keep real package files under these store dirs, which
-    // sit above the mounted project node_modules and so are not guest-visible.
-    const STORE_MARKERS: &[&str] = &[
-        "node_modules/.pnpm/",
-        "node_modules/.bun/",
-        "node_modules/.store/",
-        "/__virtual__/",
-    ];
-    // Yarn Plug'n'Play has no node_modules at all; resolution fails against the
-    // .pnp runtime / zip cache. "isn't declared in your dependencies" is PnP's
-    // distinctive resolver error and is specific enough to fire on its own.
-    const PNP_STRICT_MARKERS: &[&str] = &["isn't declared in your dependencies"];
-    const PNP_PATH_MARKERS: &[&str] = &[".pnp.cjs", ".pnp.loader.mjs", "/.yarn/cache/"];
-
-    if PNP_STRICT_MARKERS.iter().any(|m| stderr.contains(m)) {
-        return Some(HOISTED_NODE_MODULES_GUIDANCE);
-    }
-
-    let missing = stderr.contains("ENOENT")
-        || stderr.contains("no such file or directory")
-        || stderr.contains("Cannot find module")
-        || stderr.contains("MODULE_NOT_FOUND");
-    if !missing {
-        return None;
-    }
-    if STORE_MARKERS.iter().any(|m| stderr.contains(m))
-        || PNP_PATH_MARKERS.iter().any(|m| stderr.contains(m))
-    {
-        return Some(HOISTED_NODE_MODULES_GUIDANCE);
-    }
-    None
-}
-
-#[cfg(test)]
-mod symlinked_node_modules_hint_tests {
-    use super::symlinked_node_modules_hint;
-
-    // Positive cases: each non-flat package manager's store/PnP signature.
-    #[test]
-    fn matches_pnpm_store_enoent() {
-        // Real pi-coding-agent failure: getPackageDir() falls back to a
-        // dist/package.json inside the unreachable .pnpm store.
-        let stderr = "Error: ENOENT: no such file or directory, open '/root/node_modules/.pnpm/@mariozechner+pi-coding-agent@0.60.0_x/node_modules/@mariozechner/pi-coding-agent/dist/package.json'";
-        let hint = symlinked_node_modules_hint(stderr).expect("expected hoisted guidance");
-        assert!(hint.contains("secure-exec can't load mounted node_modules"));
-        assert!(!hint.contains("agentos"));
-    }
-
-    #[test]
-    fn matches_bun_store_enoent() {
-        let stderr = "Error: ENOENT: no such file or directory, open '/root/node_modules/.bun/is-odd@3.0.1/node_modules/is-odd/package.json'";
-        assert!(symlinked_node_modules_hint(stderr).is_some());
-    }
-
-    #[test]
-    fn matches_yarn_pnpm_store_enoent() {
-        let stderr = "Error: ENOENT: no such file or directory, open '/root/node_modules/.store/is-odd-npm-3.0.1-93c3c3f41b/package/package.json'";
-        assert!(symlinked_node_modules_hint(stderr).is_some());
-    }
-
-    #[test]
-    fn matches_pnp_declared_error() {
-        // Yarn PnP's distinctive resolver error (no node_modules at all).
-        let stderr = "Error: Your application tried to access is-number, but it isn't declared in your dependencies; this makes the require call ambiguous and unsound.";
-        assert!(symlinked_node_modules_hint(stderr).is_some());
-    }
-
-    #[test]
-    fn matches_pnp_cjs_module_not_found() {
-        let stderr = "Error: Cannot find module 'is-odd'\n    at /root/.pnp.cjs:12345:18\n    code: 'MODULE_NOT_FOUND'";
-        assert!(symlinked_node_modules_hint(stderr).is_some());
-    }
-
-    #[test]
-    fn matches_virtual_instance() {
-        let stderr = "Error: ENOENT: no such file or directory, open '/root/.yarn/__virtual__/is-odd-abc/1/node_modules/is-odd/package.json'";
-        assert!(symlinked_node_modules_hint(stderr).is_some());
-    }
-
-    // Negative cases: must not fire.
-    #[test]
-    fn ignores_enoent_outside_a_store() {
-        let stderr = "Error: ENOENT: no such file or directory, open '/tmp/scratch/config.json'";
-        assert!(symlinked_node_modules_hint(stderr).is_none());
-    }
-
-    #[test]
-    fn ignores_store_path_without_missing_file() {
-        let stderr =
-            "loaded /root/node_modules/.pnpm/some-pkg@1.0.0/node_modules/some-pkg/index.js";
-        assert!(symlinked_node_modules_hint(stderr).is_none());
-    }
-
-    #[test]
-    fn ignores_flat_node_modules_enoent() {
-        // npm / yarn-nm / pnpm-hoisted: flat, no store dir in the path.
-        let stderr = "Error: ENOENT: no such file or directory, open '/root/node_modules/is-odd/missing-asset.json'";
-        assert!(symlinked_node_modules_hint(stderr).is_none());
-    }
-
-    #[test]
-    fn ignores_unrelated_failure() {
-        let stderr = "Error: connect ECONNREFUSED 127.0.0.1:443";
-        assert!(symlinked_node_modules_hint(stderr).is_none());
-    }
-}
-
-#[cfg(test)]
-mod structured_event_frame_tests {
-    use super::*;
-
-    #[test]
-    fn structured_event_frame_round_trips_limit_warning() {
-        let mut detail = std::collections::HashMap::new();
-        // Pin a real emitted limit name rather than a fictional string.
-        let limit_name = TrackedLimit::JavascriptEventChannel.as_str();
-        detail.insert(String::from("limit"), String::from(limit_name));
-        detail.insert(String::from("fillPercent"), String::from("82"));
-
-        let wire = structured_event_frame("conn-1", "limit_warning", detail)
-            .expect("build structured event frame");
-        let compat = crate::wire::event_frame_to_compat(wire).expect("convert to compat");
-
-        match compat.payload {
-            EventPayload::Structured(event) => {
-                assert_eq!(event.name, "limit_warning");
-                assert_eq!(
-                    event.detail.get("limit").map(String::as_str),
-                    Some(limit_name)
-                );
-                assert_eq!(
-                    event.detail.get("fillPercent").map(String::as_str),
-                    Some("82")
-                );
-            }
-            other => panic!("expected structured payload, got {other:?}"),
-        }
-        match compat.ownership {
-            OwnershipScope::ConnectionOwnership(inner) => {
-                assert_eq!(inner.connection_id, "conn-1");
-            }
-            other => panic!("expected connection ownership, got {other:?}"),
-        }
-    }
-}
-
-#[cfg(test)]
-mod dispose_lifecycle_tests {
-    use super::*;
-    use crate::extension::ExtensionResponse;
-    use crate::stdio::LocalBridge;
-    use std::sync::atomic::{AtomicUsize, Ordering};
-
-    fn block_on<F: std::future::Future>(future: F) -> F::Output {
-        tokio::runtime::Builder::new_current_thread()
-            .enable_all()
-            .build()
-            .expect("dispose lifecycle test runtime")
-            .block_on(future)
-    }
-
-    fn test_sidecar() -> NativeSidecar<LocalBridge> {
-        NativeSidecar::new(LocalBridge::default()).expect("build test sidecar")
-    }
-
-    // Register a connection + session directly so the dispose paths can be
-    // exercised without spinning up a V8-backed VM.
-    fn insert_session(
-        sidecar: &mut NativeSidecar<LocalBridge>,
-        connection_id: &str,
-        session_id: &str,
-        vm_ids: BTreeSet<String>,
-    ) {
-        sidecar.connections.insert(
-            connection_id.to_string(),
-            ConnectionState {
-                auth_token: String::new(),
-                sessions: BTreeSet::from([session_id.to_string()]),
-            },
-        );
-        sidecar.sessions.insert(
-            session_id.to_string(),
-            SessionState {
-                connection_id: connection_id.to_string(),
-                placement: crate::protocol::SidecarPlacement::SidecarPlacementShared(
-                    crate::protocol::SidecarPlacementShared { pool: None },
-                ),
-                metadata: BTreeMap::new(),
-                vm_ids,
-            },
-        );
-    }
-
-    struct RecordingExtension {
-        namespace: String,
-        session_disposed: Arc<AtomicUsize>,
-    }
-
-    impl Extension for RecordingExtension {
-        fn namespace(&self) -> &str {
-            &self.namespace
-        }
-
-        fn handle_request<'a>(
-            &'a self,
-            _ctx: ExtensionContext<'a>,
-            _payload: Vec<u8>,
-        ) -> ExtensionFuture<'a, ExtensionResponse> {
-            Box::pin(async { Ok(ExtensionResponse::new(Vec::new())) })
-        }
-
-        fn on_session_disposed<'a>(&'a self, _ctx: ExtensionSnapshot) -> ExtensionFuture<'a, ()> {
-            let counter = self.session_disposed.clone();
-            Box::pin(async move {
-                counter.fetch_add(1, Ordering::SeqCst);
-                Ok(())
-            })
-        }
-    }
-
-    fn register_recording_extension(sidecar: &mut NativeSidecar<LocalBridge>) -> Arc<AtomicUsize> {
-        let counter = Arc::new(AtomicUsize::new(0));
-        sidecar
-            .register_extension(Box::new(RecordingExtension {
-                namespace: String::from("dev.test.dispose"),
-                session_disposed: counter.clone(),
-            }))
-            .expect("register recording extension");
-        counter
-    }
-
-    // H4: the extension per-session teardown hook fires on ConnectionClosed so an
-    // ACP-style extension can release per-session state on client disconnect.
-    #[test]
-    fn connection_closed_dispose_invokes_extension_session_teardown() {
-        let mut sidecar = test_sidecar();
-        let counter = register_recording_extension(&mut sidecar);
-        insert_session(&mut sidecar, "conn-1", "session-1", BTreeSet::new());
-
-        block_on(sidecar.dispose_session("conn-1", "session-1", DisposeReason::ConnectionClosed))
-            .expect("dispose session on connection close");
-
-        assert_eq!(
-            counter.load(Ordering::SeqCst),
-            1,
-            "extension session-teardown hook must fire on ConnectionClosed"
-        );
-        assert!(
-            !sidecar.sessions.contains_key("session-1"),
-            "the disposed session must be reclaimed"
-        );
-    }
-
-    // H4 (negative): a client-requested dispose is not a disconnect, so the
-    // teardown hook must not fire.
-    #[test]
-    fn requested_dispose_does_not_invoke_extension_session_teardown() {
-        let mut sidecar = test_sidecar();
-        let counter = register_recording_extension(&mut sidecar);
-        insert_session(&mut sidecar, "conn-1", "session-1", BTreeSet::new());
-
-        block_on(sidecar.dispose_session("conn-1", "session-1", DisposeReason::Requested))
-            .expect("dispose session on request");
-
-        assert_eq!(
-            counter.load(Ordering::SeqCst),
-            0,
-            "the teardown hook is reserved for client disconnect"
-        );
-    }
-
-    // M5: disposing a session records its scope for the stdio transport to drain.
-    #[test]
-    fn dispose_session_records_disposed_scope() {
-        let mut sidecar = test_sidecar();
-        insert_session(&mut sidecar, "conn-1", "session-1", BTreeSet::new());
-
-        block_on(sidecar.dispose_session("conn-1", "session-1", DisposeReason::Requested))
-            .expect("dispose session");
-
-        assert_eq!(
-            sidecar.take_disposed_sessions(),
-            vec![(String::from("conn-1"), String::from("session-1"))],
-            "dispose must publish the session scope so stdio can untrack it"
-        );
-    }
-
-    // H1 + M6: every per-VM tracking map is reclaimed for a disposed VM. The
-    // output-buffer map (M6) was previously only removed on a successful handoff,
-    // and the engine/extension maps (H1) were only reclaimed after the fallible
-    // teardown steps' `?`, so any failure stranded them.
-    #[test]
-    fn reclaim_vm_tracking_clears_every_per_vm_map() {
-        let mut sidecar = test_sidecar();
-        insert_session(
-            &mut sidecar,
-            "conn-1",
-            "session-1",
-            BTreeSet::from([String::from("vm-1")]),
-        );
-        sidecar.extension_process_output_buffers.insert(
-            (String::from("vm-1"), String::from("proc-1")),
-            ExtensionBufferedProcessOutput::default(),
-        );
-        sidecar.extension_sessions.insert(
-            (String::from("ns"), String::from("ext-sess-1")),
-            ExtensionSessionResources {
-                ownership: OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-                process_ids: BTreeSet::new(),
-                vm_ids: BTreeSet::from([String::from("vm-1")]),
-            },
-        );
-
-        sidecar.reclaim_vm_tracking("session-1", "vm-1");
-
-        assert!(
-            sidecar.extension_process_output_buffers.is_empty(),
-            "M6: the output-buffer map must be reclaimed on VM disposal"
-        );
-        assert!(
-            sidecar.extension_sessions.is_empty(),
-            "H1: an extension session bound only to the VM must be reclaimed"
-        );
-        assert!(
-            !sidecar
-                .sessions
-                .get("session-1")
-                .expect("session present")
-                .vm_ids
-                .contains("vm-1"),
-            "the VM id must be removed from its session"
-        );
-    }
-
-    // H1: a failing VM dispose inside the loop must not abandon the session. With
-    // unregistered VM ids, `dispose_vm_internal` fails on `require_owned_vm`;
-    // pre-fix the loop `?`-ed out and left the session in `self.sessions`.
-    #[test]
-    fn dispose_session_reclaims_session_even_when_a_vm_dispose_fails() {
-        let mut sidecar = test_sidecar();
-        insert_session(
-            &mut sidecar,
-            "conn-1",
-            "session-1",
-            BTreeSet::from([String::from("vm-a"), String::from("vm-b")]),
-        );
-
-        let result =
-            block_on(sidecar.dispose_session("conn-1", "session-1", DisposeReason::Requested));
-
-        assert!(
-            result.is_err(),
-            "a failing VM dispose must still surface an error"
-        );
-        assert!(
-            !sidecar.sessions.contains_key("session-1"),
-            "the session must be reclaimed even though VM dispose failed"
-        );
-    }
-}
diff --git a/crates/sidecar/src/state.rs b/crates/sidecar/src/state.rs
deleted file mode 100644
index ba4809ebb..000000000
--- a/crates/sidecar/src/state.rs
+++ /dev/null
@@ -1,1126 +0,0 @@
-//! Shared state types used across sidecar domain modules.
-//!
-//! Contains VM state, session state, configuration types, active process/socket
-//! types, and other shared data structures extracted from service.rs.
-
-use crate::protocol::{
-    GuestRuntimeKind, MountDescriptor, ProjectedModuleDescriptor, RegisterHostCallbacksRequest,
-    SidecarRequestFrame, SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload,
-    SignalHandlerRegistration, SoftwareDescriptor, WasmPermissionTier,
-};
-use crate::wire::DEFAULT_MAX_FRAME_BYTES;
-use rusqlite::Connection;
-use rustls::{ClientConnection, ServerConnection, StreamOwned};
-use secure_exec_bridge::{BridgeTypes, FilesystemSnapshot};
-use secure_exec_execution::{
-    v8_host::V8SessionHandle, JavascriptExecution, JavascriptSyncRpcRequest, PythonExecution,
-    PythonVfsRpcRequest, WasmExecution,
-};
-use secure_exec_kernel::kernel::{KernelProcessHandle, KernelVm};
-use secure_exec_kernel::mount_table::MountTable;
-use secure_exec_kernel::root_fs::RootFilesystemMode;
-use secure_exec_kernel::socket_table::SocketId;
-use secure_exec_sidecar_core::VmLayerStore;
-use secure_exec_vm_config as vm_config;
-use secure_exec_vm_config::PermissionsPolicy;
-use serde::{Deserialize, Serialize};
-use serde_json::Value;
-use std::collections::{BTreeMap, BTreeSet, VecDeque};
-use std::error::Error;
-use std::fmt;
-use std::fs::File;
-use std::net::{IpAddr, SocketAddr, TcpListener, TcpStream, UdpSocket};
-use std::os::unix::net::{UnixListener, UnixStream};
-use std::path::PathBuf;
-use std::sync::atomic::{AtomicBool, AtomicI64, Ordering};
-use std::sync::mpsc::{Receiver, Sender};
-use std::sync::{Arc, Condvar, Mutex};
-use std::time::{Duration, Instant};
-use tokio::sync::mpsc::UnboundedSender;
-
-// ---------------------------------------------------------------------------
-// Type aliases
-// ---------------------------------------------------------------------------
-
-pub(crate) type BridgeError<B> = <B as BridgeTypes>::Error;
-pub(crate) type SidecarKernel = KernelVm<MountTable>;
-pub(crate) type KernelSocketReadinessRegistry =
-    Arc<Mutex<BTreeMap<SocketId, KernelSocketReadinessTarget>>>;
-
-// ---------------------------------------------------------------------------
-// Constants
-// ---------------------------------------------------------------------------
-
-pub(crate) const EXECUTION_DRIVER_NAME: &str = "secure-exec-sidecar-execution";
-pub(crate) const JAVASCRIPT_COMMAND: &str = "node";
-pub(crate) const PYTHON_COMMAND: &str = "python";
-pub(crate) const WASM_COMMAND: &str = "wasm";
-// The Python runtime addresses the whole guest VFS (the kernel enforces fs
-// permissions and mount-confinement on every op, identical to what the JS/WASM
-// runtimes and `vm.readFile()` see), so the VFS-RPC root is `/`, not a single
-// workspace dir.
-pub(crate) const PYTHON_VFS_RPC_GUEST_ROOT: &str = "/";
-pub(crate) const EXECUTION_SANDBOX_ROOT_ENV: &str = "AGENTOS_SANDBOX_ROOT";
-pub(crate) const WASM_STDIO_SYNC_RPC_ENV: &str = "AGENTOS_WASI_STDIO_SYNC_RPC";
-#[cfg(test)]
-#[allow(dead_code)]
-pub(crate) const HOST_REALPATH_MAX_SYMLINK_DEPTH: usize = 40;
-pub(crate) const DISPOSE_VM_SIGTERM_GRACE: std::time::Duration =
-    std::time::Duration::from_millis(100);
-pub(crate) const DISPOSE_VM_SIGKILL_GRACE: std::time::Duration =
-    std::time::Duration::from_millis(100);
-pub(crate) const VM_DNS_SERVERS_METADATA_KEY: &str = "network.dns.servers";
-#[cfg(test)]
-#[allow(dead_code)]
-pub(crate) const VM_LISTEN_PORT_MIN_METADATA_KEY: &str = "network.listen.port_min";
-#[cfg(test)]
-#[allow(dead_code)]
-pub(crate) const VM_LISTEN_PORT_MAX_METADATA_KEY: &str = "network.listen.port_max";
-pub(crate) const VM_LISTEN_ALLOW_PRIVILEGED_METADATA_KEY: &str = "network.listen.allow_privileged";
-pub(crate) const DEFAULT_JAVASCRIPT_NET_BACKLOG: u32 = 511;
-pub(crate) const LOOPBACK_EXEMPT_PORTS_ENV: &str = "AGENTOS_LOOPBACK_EXEMPT_PORTS";
-pub(crate) const TOOL_DRIVER_NAME: &str = "secure-exec-host-callbacks";
-pub(crate) const MAPPED_HOST_FD_START: u32 = 1_000_000_000;
-
-// ---------------------------------------------------------------------------
-// Public API types
-// ---------------------------------------------------------------------------
-
-#[derive(Debug, Clone)]
-pub struct NativeSidecarConfig {
-    pub sidecar_id: String,
-    pub max_frame_bytes: usize,
-    pub compile_cache_root: Option<PathBuf>,
-    pub expected_auth_token: Option<String>,
-    pub acp_termination_grace: Duration,
-}
-
-impl Default for NativeSidecarConfig {
-    fn default() -> Self {
-        Self {
-            sidecar_id: String::from("secure-exec-sidecar"),
-            max_frame_bytes: DEFAULT_MAX_FRAME_BYTES,
-            compile_cache_root: None,
-            expected_auth_token: None,
-            acp_termination_grace: Duration::from_secs(3),
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum SidecarError {
-    InvalidState(String),
-    ProtocolVersionMismatch(String),
-    BridgeVersionMismatch(String),
-    Conflict(String),
-    Unauthorized(String),
-    Unsupported(String),
-    FrameTooLarge(String),
-    Kernel(String),
-    Plugin(String),
-    Execution(String),
-    Bridge(String),
-    Io(String),
-}
-
-impl fmt::Display for SidecarError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::InvalidState(message)
-            | Self::ProtocolVersionMismatch(message)
-            | Self::BridgeVersionMismatch(message)
-            | Self::Conflict(message)
-            | Self::Unauthorized(message)
-            | Self::Unsupported(message)
-            | Self::FrameTooLarge(message)
-            | Self::Kernel(message)
-            | Self::Plugin(message)
-            | Self::Execution(message)
-            | Self::Bridge(message)
-            | Self::Io(message) => f.write_str(message),
-        }
-    }
-}
-
-impl Error for SidecarError {}
-
-pub trait SidecarRequestTransport: Send + Sync {
-    fn send_request(
-        &self,
-        request: SidecarRequestFrame,
-        timeout: Duration,
-    ) -> Result<SidecarResponseFrame, SidecarError>;
-}
-
-#[derive(Clone)]
-pub(crate) struct SharedSidecarRequestClient {
-    transport: Option<Arc<dyn SidecarRequestTransport>>,
-    next_request_id: Arc<AtomicI64>,
-}
-
-impl Default for SharedSidecarRequestClient {
-    fn default() -> Self {
-        Self {
-            transport: None,
-            next_request_id: Arc::new(AtomicI64::new(-1)),
-        }
-    }
-}
-
-impl SharedSidecarRequestClient {
-    pub(crate) fn set_transport(&mut self, transport: Arc<dyn SidecarRequestTransport>) {
-        self.transport = Some(transport);
-    }
-
-    pub(crate) fn invoke(
-        &self,
-        ownership: crate::protocol::OwnershipScope,
-        payload: SidecarRequestPayload,
-        timeout: Duration,
-    ) -> Result<SidecarResponsePayload, SidecarError> {
-        let transport = self.transport.as_ref().ok_or_else(|| {
-            SidecarError::Unsupported(String::from("sidecar request transport is not configured"))
-        })?;
-        let request_id = self.next_request_id.fetch_sub(1, Ordering::Relaxed);
-        let request = SidecarRequestFrame::new(request_id, ownership.clone(), payload);
-        let response = transport.send_request(request, timeout)?;
-        if response.request_id != request_id {
-            return Err(SidecarError::InvalidState(format!(
-                "sidecar response {} did not match request {request_id}",
-                response.request_id
-            )));
-        }
-        if response.ownership != ownership {
-            return Err(SidecarError::InvalidState(String::from(
-                "sidecar response ownership did not match request ownership",
-            )));
-        }
-        Ok(response.payload)
-    }
-}
-
-/// Fire-and-forget live event sink. Lets an extension emit a `session/update`
-/// (or any other) event frame to the host *mid-dispatch*, instead of having to
-/// return it from the dispatch and wait for the whole request to resolve before
-/// the stdio loop flushes it. Mirrors `SidecarRequestTransport`, but events have
-/// no response, no request id, and no timeout — they are written to the same
-/// outbound stdout channel the batch path uses.
-pub trait EventSinkTransport: Send + Sync {
-    fn emit_event(&self, event: crate::wire::EventFrame) -> Result<(), SidecarError>;
-}
-
-#[derive(Clone, Default)]
-pub(crate) struct SharedEventSink {
-    transport: Option<Arc<dyn EventSinkTransport>>,
-}
-
-impl SharedEventSink {
-    pub(crate) fn set_transport(&mut self, transport: Arc<dyn EventSinkTransport>) {
-        self.transport = Some(transport);
-    }
-
-    /// Emit `event` live if a transport is configured (the stdio path). Returns
-    /// `Ok(None)` when the event was handed to the live transport, or
-    /// `Ok(Some(event))` when no transport is configured (e.g. an in-process
-    /// `NativeSidecar` with no stdout loop) so the caller can fall back to the
-    /// batch path and still deliver the event when the dispatch resolves.
-    pub(crate) fn try_emit(
-        &self,
-        event: crate::wire::EventFrame,
-    ) -> Result<Option<crate::wire::EventFrame>, SidecarError> {
-        match self.transport.as_ref() {
-            Some(transport) => {
-                transport.emit_event(event)?;
-                Ok(None)
-            }
-            None => Ok(Some(event)),
-        }
-    }
-}
-
-// ---------------------------------------------------------------------------
-// Bridge wrapper
-// ---------------------------------------------------------------------------
-
-pub(crate) struct SharedBridge<B> {
-    pub(crate) inner: Arc<Mutex<B>>,
-    pub(crate) permissions: Arc<Mutex<BTreeMap<String, PermissionsPolicy>>>,
-    #[cfg(test)]
-    pub(crate) set_vm_permissions_outcomes: Arc<Mutex<VecDeque<Option<SidecarError>>>>,
-}
-
-impl<B> Clone for SharedBridge<B> {
-    fn clone(&self) -> Self {
-        Self {
-            inner: Arc::clone(&self.inner),
-            permissions: Arc::clone(&self.permissions),
-            #[cfg(test)]
-            set_vm_permissions_outcomes: Arc::clone(&self.set_vm_permissions_outcomes),
-        }
-    }
-}
-
-// ---------------------------------------------------------------------------
-// Connection / session / VM state
-// ---------------------------------------------------------------------------
-
-#[allow(dead_code)]
-#[derive(Debug)]
-pub(crate) struct ConnectionState {
-    pub(crate) auth_token: String,
-    pub(crate) sessions: BTreeSet<String>,
-}
-
-#[allow(dead_code)]
-#[derive(Debug)]
-pub(crate) struct SessionState {
-    pub(crate) connection_id: String,
-    pub(crate) placement: crate::protocol::SidecarPlacement,
-    pub(crate) metadata: BTreeMap<String, String>,
-    pub(crate) vm_ids: BTreeSet<String>,
-}
-
-#[allow(dead_code)]
-#[derive(Debug, Clone)]
-pub(crate) struct VmConfiguration {
-    pub(crate) mounts: Vec<MountDescriptor>,
-    pub(crate) software: Vec<SoftwareDescriptor>,
-    pub(crate) permissions: PermissionsPolicy,
-    pub(crate) module_access_cwd: Option<String>,
-    pub(crate) instructions: Vec<String>,
-    pub(crate) projected_modules: Vec<ProjectedModuleDescriptor>,
-    pub(crate) command_permissions: BTreeMap<String, WasmPermissionTier>,
-    pub(crate) provided_commands: BTreeMap<String, Vec<String>>,
-    /// Guest JavaScript host-environment config (platform / module resolution /
-    /// builtin allow-list). Set at `create_vm` from `CreateVmConfig.jsRuntime`
-    /// and preserved across `configure_vm`. `None` => full Node.js emulation.
-    pub(crate) js_runtime: Option<vm_config::JsRuntimeConfig>,
-    /// Agent SDK bundle read by the sidecar from the configured package dir and
-    /// evaluated into the shared V8 startup snapshot.
-    pub(crate) snapshot_userland_code: Option<String>,
-    pub(crate) loopback_exempt_ports: Vec<u16>,
-}
-
-impl Default for VmConfiguration {
-    fn default() -> Self {
-        Self {
-            mounts: Vec::new(),
-            software: Vec::new(),
-            permissions: secure_exec_sidecar_core::permissions::deny_all_policy(),
-            module_access_cwd: None,
-            instructions: Vec::new(),
-            projected_modules: Vec::new(),
-            command_permissions: BTreeMap::new(),
-            provided_commands: BTreeMap::new(),
-            js_runtime: None,
-            snapshot_userland_code: None,
-            loopback_exempt_ports: Vec::new(),
-        }
-    }
-}
-
-#[allow(dead_code)]
-pub(crate) struct VmState {
-    pub(crate) connection_id: String,
-    pub(crate) session_id: String,
-    /// Operator-tunable VM-scoped runtime limits. Immutable for the VM's lifetime;
-    /// `ConfigureVm` does not mutate limits.
-    pub(crate) limits: crate::limits::VmLimits,
-    pub(crate) dns: VmDnsConfig,
-    pub(crate) listen_policy: VmListenPolicy,
-    pub(crate) create_loopback_exempt_ports: BTreeSet<u16>,
-    pub(crate) guest_env: BTreeMap<String, String>,
-    pub(crate) requested_runtime: GuestRuntimeKind,
-    pub(crate) root_filesystem_mode: RootFilesystemMode,
-    pub(crate) guest_cwd: String,
-    pub(crate) cwd: PathBuf,
-    pub(crate) host_cwd: PathBuf,
-    pub(crate) kernel: SidecarKernel,
-    pub(crate) kernel_socket_readiness: KernelSocketReadinessRegistry,
-    pub(crate) loaded_snapshot: Option<FilesystemSnapshot>,
-    pub(crate) configuration: VmConfiguration,
-    pub(crate) layers: VmLayerStore,
-    pub(crate) command_guest_paths: BTreeMap<String, String>,
-    pub(crate) provided_commands: BTreeMap<String, Vec<String>>,
-    pub(crate) command_permissions: BTreeMap<String, WasmPermissionTier>,
-    pub(crate) toolkits: BTreeMap<String, RegisterHostCallbacksRequest>,
-    pub(crate) active_processes: BTreeMap<String, ActiveProcess>,
-    pub(crate) exited_process_snapshots: VecDeque<ExitedProcessSnapshot>,
-    pub(crate) detached_child_processes: BTreeSet<String>,
-    pub(crate) signal_states: BTreeMap<String, BTreeMap<u32, SignalHandlerRegistration>>,
-    /// Legacy staging root slot retained for same-version internal state shape.
-    /// The current `/opt/agentos` projection mounts package tars and synthetic
-    /// symlink leaves directly, so this remains `None`.
-    pub(crate) packages_staging_root: Option<PathBuf>,
-}
-
-#[derive(Debug, Clone)]
-pub(crate) struct ExitedProcessSnapshot {
-    pub(crate) captured_at: Instant,
-    pub(crate) process: crate::protocol::ProcessSnapshotEntry,
-}
-
-// ---------------------------------------------------------------------------
-// DNS configuration
-// ---------------------------------------------------------------------------
-
-#[derive(Debug, Clone, Default)]
-pub(crate) struct VmDnsConfig {
-    pub(crate) name_servers: Vec<SocketAddr>,
-    pub(crate) overrides: BTreeMap<String, Vec<IpAddr>>,
-}
-
-#[derive(Debug, Clone)]
-pub(crate) struct JavascriptSocketPathContext {
-    pub(crate) sandbox_root: PathBuf,
-    pub(crate) mounts: Vec<MountDescriptor>,
-    pub(crate) listen_policy: VmListenPolicy,
-    pub(crate) loopback_exempt_ports: BTreeSet<u16>,
-    pub(crate) tcp_loopback_guest_to_host_ports: BTreeMap<(JavascriptSocketFamily, u16), u16>,
-    pub(crate) http_loopback_targets:
-        BTreeMap<(JavascriptSocketFamily, u16), JavascriptHttpLoopbackTarget>,
-    pub(crate) udp_loopback_guest_to_host_ports: BTreeMap<(JavascriptSocketFamily, u16), u16>,
-    pub(crate) udp_loopback_host_to_guest_ports: BTreeMap<(JavascriptSocketFamily, u16), u16>,
-    pub(crate) used_tcp_guest_ports: BTreeMap<JavascriptSocketFamily, BTreeSet<u16>>,
-    pub(crate) used_udp_guest_ports: BTreeMap<JavascriptSocketFamily, BTreeSet<u16>>,
-}
-
-#[derive(Debug, Clone)]
-pub(crate) struct JavascriptHttpLoopbackTarget {
-    pub(crate) process_id: String,
-    pub(crate) server_id: u64,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord)]
-pub(crate) enum JavascriptSocketFamily {
-    Ipv4,
-    Ipv6,
-}
-
-impl JavascriptSocketFamily {
-    pub(crate) fn from_ip(ip: IpAddr) -> Self {
-        match ip {
-            IpAddr::V4(_) => Self::Ipv4,
-            IpAddr::V6(_) => Self::Ipv6,
-        }
-    }
-}
-
-impl From<JavascriptUdpFamily> for JavascriptSocketFamily {
-    fn from(value: JavascriptUdpFamily) -> Self {
-        match value {
-            JavascriptUdpFamily::Ipv4 => Self::Ipv4,
-            JavascriptUdpFamily::Ipv6 => Self::Ipv6,
-        }
-    }
-}
-
-#[derive(Debug, Clone, Copy)]
-pub(crate) struct VmListenPolicy {
-    pub(crate) port_min: u16,
-    pub(crate) port_max: u16,
-    pub(crate) allow_privileged: bool,
-}
-
-impl Default for VmListenPolicy {
-    fn default() -> Self {
-        Self {
-            port_min: 1,
-            port_max: u16::MAX,
-            allow_privileged: false,
-        }
-    }
-}
-
-// ---------------------------------------------------------------------------
-// Active process state
-// ---------------------------------------------------------------------------
-
-#[allow(dead_code)]
-pub(crate) struct ActiveProcess {
-    pub(crate) kernel_pid: u32,
-    pub(crate) kernel_handle: KernelProcessHandle,
-    pub(crate) kernel_stdin_writer_fd: Option<u32>,
-    /// For a TTY (PTY-backed) process, the master-end fd whose output buffer
-    /// carries cooked-mode echo plus ONLCR-processed guest output. When set,
-    /// this master output is the single ordered output stream surfaced to the
-    /// host (instead of the raw guest stdout/stderr execution events).
-    pub(crate) tty_master_fd: Option<u32>,
-    pub(crate) runtime: GuestRuntimeKind,
-    pub(crate) detached: bool,
-    pub(crate) execution: ActiveExecution,
-    pub(crate) guest_cwd: String,
-    pub(crate) env: BTreeMap<String, String>,
-    pub(crate) host_cwd: PathBuf,
-    pub(crate) host_write_dirty: bool,
-    pub(crate) mapped_host_fds: BTreeMap<u32, ActiveMappedHostFd>,
-    pub(crate) next_mapped_host_fd: u32,
-    pub(crate) pending_execution_events: VecDeque<ActiveExecutionEvent>,
-    pub(crate) pending_self_signal_exit: Option<i32>,
-    pub(crate) child_processes: BTreeMap<String, ActiveProcess>,
-    pub(crate) next_child_process_id: usize,
-    pub(crate) http_servers: BTreeMap<u64, ActiveHttpServer>,
-    pub(crate) pending_http_requests: BTreeMap<(u64, u64), Option<String>>,
-    pub(crate) http2: ActiveHttp2State,
-    pub(crate) tcp_listeners: BTreeMap<String, ActiveTcpListener>,
-    pub(crate) next_tcp_listener_id: usize,
-    pub(crate) tcp_sockets: BTreeMap<String, ActiveTcpSocket>,
-    pub(crate) next_tcp_socket_id: usize,
-    pub(crate) tcp_port_reservations: BTreeMap<String, (JavascriptSocketFamily, u16)>,
-    pub(crate) next_tcp_port_reservation_id: usize,
-    pub(crate) unix_listeners: BTreeMap<String, ActiveUnixListener>,
-    pub(crate) next_unix_listener_id: usize,
-    pub(crate) unix_sockets: BTreeMap<String, ActiveUnixSocket>,
-    pub(crate) next_unix_socket_id: usize,
-    pub(crate) udp_sockets: BTreeMap<String, ActiveUdpSocket>,
-    pub(crate) next_udp_socket_id: usize,
-    /// Synchronous host sockets opened by the guest Python `socket` bridge,
-    /// keyed by the handle returned to the runner. Distinct from the JS
-    /// runtime's event-driven `tcp_sockets`/`udp_sockets` above.
-    pub(crate) python_sockets: BTreeMap<u64, PythonHostSocket>,
-    pub(crate) next_python_socket_id: u64,
-    pub(crate) cipher_sessions: BTreeMap<u64, ActiveCipherSession>,
-    pub(crate) next_cipher_session_id: u64,
-    pub(crate) diffie_hellman_sessions: BTreeMap<u64, ActiveDiffieHellmanSession>,
-    pub(crate) next_diffie_hellman_session_id: u64,
-    pub(crate) sqlite_databases: BTreeMap<u64, ActiveSqliteDatabase>,
-    pub(crate) next_sqlite_database_id: u64,
-    pub(crate) sqlite_statements: BTreeMap<u64, ActiveSqliteStatement>,
-    pub(crate) next_sqlite_statement_id: u64,
-    /// For a child process whose stdio is the SHARED terminal (its kernel fd 1
-    /// is the same PTY slave as the shell's), the `(kernel pid, master fd)` of
-    /// the process that owns the host-facing PTY master. Set at spawn. Such a
-    /// child's stdio writes surface ONLY through master drains attributed to
-    /// the owner — never as child stdout events — exactly like a native
-    /// terminal reading the PTY master (a shell never relays its child's tty
-    /// output).
-    pub(crate) tty_master_owner: Option<(u32, u32)>,
-    /// A parked `__kernel_stdin_read` / `__kernel_poll` sync RPC awaiting
-    /// kernel readiness (reply-by-token deferral so servicing never blocks the
-    /// dispatch loop). At most one per process: the guest thread is blocked in
-    /// this RPC, so it cannot issue another. `(request, absolute deadline)`.
-    pub(crate) deferred_kernel_wait_rpc: Option<(JavascriptSyncRpcRequest, Instant)>,
-    /// Per-process module resolution cache, persisted across module sync-RPCs
-    /// (`__resolve_module` / `__load_file` / `__module_format` /
-    /// `__batch_resolve_modules`) for the lifetime of this process so cold-start
-    /// resolution does not rebuild it on every dispatch. The resolver reads the
-    /// kernel VFS; the node_modules tree is mounted read-only, so cached
-    /// stat/exists/package.json results under it stay valid for the process run.
-    pub(crate) module_resolution_cache: secure_exec_execution::LocalModuleResolutionCache,
-}
-
-pub(crate) struct ActiveMappedHostFd {
-    pub(crate) file: File,
-    pub(crate) path: PathBuf,
-    pub(crate) guest_path: Option<String>,
-}
-
-pub(crate) struct ActiveCipherSession {
-    pub(crate) context: crate::crypto_cipher::StreamCipherSession,
-}
-
-pub(crate) struct ActiveSqliteDatabase {
-    pub(crate) connection: Connection,
-    pub(crate) host_path: Option<PathBuf>,
-    pub(crate) vm_path: Option<String>,
-    pub(crate) dirty: bool,
-    pub(crate) transaction_depth: usize,
-    pub(crate) read_only: bool,
-}
-
-#[derive(Clone)]
-pub(crate) struct ActiveSqliteStatement {
-    pub(crate) database_id: u64,
-    pub(crate) sql: String,
-    pub(crate) return_arrays: bool,
-    pub(crate) read_bigints: bool,
-    pub(crate) allow_bare_named_parameters: bool,
-    pub(crate) allow_unknown_named_parameters: bool,
-}
-
-pub(crate) enum ActiveDiffieHellmanSession {
-    Dh(ActiveDhSession),
-    Ecdh(ActiveEcdhSession),
-}
-
-pub(crate) struct ActiveDhSession {
-    pub(crate) params: openssl::dh::Dh<openssl::pkey::Params>,
-    pub(crate) key_pair: Option<openssl::dh::Dh<openssl::pkey::Private>>,
-}
-
-pub(crate) struct ActiveEcdhSession {
-    pub(crate) curve: String,
-    pub(crate) key_pair: Option<openssl::ec::EcKey<openssl::pkey::Private>>,
-}
-
-#[derive(Debug, Clone, Copy, Default)]
-pub(crate) struct NetworkResourceCounts {
-    pub(crate) sockets: usize,
-    pub(crate) connections: usize,
-}
-
-#[derive(Debug)]
-pub(crate) struct ActiveHttpServer {
-    pub(crate) listener: TcpListener,
-    pub(crate) guest_local_addr: SocketAddr,
-    pub(crate) next_request_id: u64,
-}
-
-#[derive(Clone, Default)]
-pub(crate) struct ActiveHttp2State {
-    pub(crate) shared: Arc<Mutex<Http2SharedState>>,
-}
-
-#[derive(Default)]
-pub(crate) struct Http2SharedState {
-    pub(crate) next_session_id: u64,
-    pub(crate) next_stream_id: u64,
-    pub(crate) ready: Arc<Condvar>,
-    pub(crate) event_session: Option<V8SessionHandle>,
-    pub(crate) servers: BTreeMap<u64, ActiveHttp2Server>,
-    pub(crate) sessions: BTreeMap<u64, ActiveHttp2Session>,
-    pub(crate) streams: BTreeMap<u64, ActiveHttp2Stream>,
-    pub(crate) server_events: BTreeMap<u64, VecDeque<Http2BridgeEvent>>,
-    pub(crate) session_events: BTreeMap<u64, VecDeque<Http2BridgeEvent>>,
-}
-
-#[derive(Debug)]
-pub(crate) struct ActiveHttp2Server {
-    pub(crate) actual_local_addr: SocketAddr,
-    pub(crate) guest_local_addr: SocketAddr,
-    pub(crate) secure: bool,
-    pub(crate) tls: Option<JavascriptTlsBridgeOptions>,
-    pub(crate) closed: Arc<AtomicBool>,
-}
-
-#[derive(Debug, Clone)]
-pub(crate) struct ActiveHttp2Session {
-    pub(crate) command_tx: UnboundedSender<Http2SessionCommand>,
-}
-
-#[derive(Debug, Clone)]
-pub(crate) struct ActiveHttp2Stream {
-    pub(crate) session_id: u64,
-    pub(crate) paused: Arc<AtomicBool>,
-    pub(crate) resume_notify: Arc<tokio::sync::Notify>,
-}
-
-#[derive(Debug, Clone, Default, Serialize, Deserialize)]
-#[serde(default, rename_all = "camelCase")]
-pub(crate) struct Http2SocketSnapshot {
-    pub(crate) encrypted: bool,
-    pub(crate) allow_half_open: bool,
-    pub(crate) local_address: Option<String>,
-    pub(crate) local_port: Option<u16>,
-    pub(crate) local_family: Option<String>,
-    pub(crate) remote_address: Option<String>,
-    pub(crate) remote_port: Option<u16>,
-    pub(crate) remote_family: Option<String>,
-    pub(crate) servername: Option<String>,
-    pub(crate) alpn_protocol: Option<String>,
-}
-
-#[derive(Debug, Clone, Default, Serialize, Deserialize)]
-#[serde(default, rename_all = "camelCase")]
-pub(crate) struct Http2RuntimeSnapshot {
-    pub(crate) effective_local_window_size: u32,
-    pub(crate) local_window_size: u32,
-    pub(crate) remote_window_size: u32,
-    pub(crate) next_stream_id: u32,
-    pub(crate) outbound_queue_size: u32,
-    pub(crate) deflate_dynamic_table_size: u32,
-    pub(crate) inflate_dynamic_table_size: u32,
-}
-
-#[derive(Debug, Clone, Default, Serialize, Deserialize)]
-#[serde(default, rename_all = "camelCase")]
-pub(crate) struct Http2SessionSnapshot {
-    pub(crate) encrypted: bool,
-    pub(crate) alpn_protocol: Option<String>,
-    pub(crate) origin_set: Vec<String>,
-    pub(crate) local_settings: BTreeMap<String, Value>,
-    pub(crate) remote_settings: BTreeMap<String, Value>,
-    pub(crate) state: Http2RuntimeSnapshot,
-    pub(crate) socket: Http2SocketSnapshot,
-}
-
-#[derive(Debug, Clone, Default, Serialize, Deserialize)]
-#[serde(default, rename_all = "camelCase")]
-pub(crate) struct Http2BridgeEvent {
-    pub(crate) kind: String,
-    pub(crate) id: u64,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub(crate) data: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub(crate) extra: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub(crate) extra_number: Option<u64>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub(crate) extra_headers: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub(crate) flags: Option<u64>,
-}
-
-pub(crate) enum Http2SessionCommand {
-    Request {
-        headers_json: String,
-        options_json: String,
-        respond_to: Sender<Result<Value, String>>,
-    },
-    Settings {
-        settings_json: String,
-        respond_to: Sender<Result<Value, String>>,
-    },
-    SetLocalWindowSize {
-        size: u32,
-        respond_to: Sender<Result<Value, String>>,
-    },
-    Goaway {
-        error_code: u32,
-        last_stream_id: u32,
-        opaque_data: Option<Vec<u8>>,
-        respond_to: Sender<Result<Value, String>>,
-    },
-    Close {
-        abrupt: bool,
-        respond_to: Sender<Result<Value, String>>,
-    },
-    StreamRespond {
-        stream_id: u64,
-        headers_json: String,
-        respond_to: Sender<Result<Value, String>>,
-    },
-    StreamPush {
-        stream_id: u64,
-        headers_json: String,
-        respond_to: Sender<Result<Value, String>>,
-    },
-    StreamWrite {
-        stream_id: u64,
-        chunk: Vec<u8>,
-        end_stream: bool,
-        respond_to: Sender<Result<Value, String>>,
-    },
-    StreamClose {
-        stream_id: u64,
-        error_code: Option<u32>,
-        respond_to: Sender<Result<Value, String>>,
-    },
-    StreamRespondWithFile {
-        stream_id: u64,
-        body: Vec<u8>,
-        headers_json: String,
-        options_json: String,
-        respond_to: Sender<Result<Value, String>>,
-    },
-}
-
-// ---------------------------------------------------------------------------
-// TCP types
-// ---------------------------------------------------------------------------
-
-#[derive(Debug)]
-pub(crate) enum JavascriptTcpListenerEvent {
-    Connection(PendingTcpSocket),
-    Error {
-        code: Option<String>,
-        message: String,
-    },
-}
-
-#[derive(Debug)]
-pub(crate) struct PendingTcpSocket {
-    pub(crate) stream: Option<TcpStream>,
-    pub(crate) kernel_socket_id: Option<SocketId>,
-    pub(crate) preallocated: bool,
-    pub(crate) guest_local_addr: SocketAddr,
-    pub(crate) guest_remote_addr: SocketAddr,
-}
-
-#[derive(Debug)]
-pub(crate) enum JavascriptTcpSocketEvent {
-    Data(Vec<u8>),
-    End,
-    Close {
-        had_error: bool,
-    },
-    Error {
-        code: Option<String>,
-        message: String,
-    },
-}
-
-#[derive(Clone, Debug)]
-pub(crate) struct JavascriptSocketEventPusher {
-    pub(crate) session: V8SessionHandle,
-    pub(crate) socket_id: String,
-}
-
-#[derive(Clone, Copy, Debug, PartialEq, Eq)]
-pub(crate) enum KernelSocketReadinessEvent {
-    Data,
-    Datagram,
-    Accept,
-}
-
-#[derive(Clone, Debug)]
-pub(crate) struct KernelSocketReadinessTarget {
-    pub(crate) session: V8SessionHandle,
-    pub(crate) target_id: String,
-    pub(crate) event: KernelSocketReadinessEvent,
-}
-
-#[derive(Debug)]
-pub(crate) struct ActiveTcpSocket {
-    pub(crate) stream: Option<Arc<Mutex<TcpStream>>>,
-    pub(crate) pending_read_stream: Option<Arc<Mutex<Option<TcpStream>>>>,
-    pub(crate) events: Option<Receiver<JavascriptTcpSocketEvent>>,
-    pub(crate) event_sender: Option<Sender<JavascriptTcpSocketEvent>>,
-    pub(crate) event_pusher: Arc<Mutex<Option<JavascriptSocketEventPusher>>>,
-    pub(crate) kernel_socket_id: Option<SocketId>,
-    pub(crate) no_delay: bool,
-    pub(crate) keep_alive: bool,
-    pub(crate) keep_alive_initial_delay_secs: Option<u64>,
-    pub(crate) guest_local_addr: SocketAddr,
-    pub(crate) guest_remote_addr: SocketAddr,
-    pub(crate) listener_id: Option<String>,
-    pub(crate) tls_mode: Arc<AtomicBool>,
-    pub(crate) tls_stream: Arc<Mutex<Option<ActiveTlsStream>>>,
-    pub(crate) tls_state: Arc<Mutex<Option<ActiveTlsState>>>,
-    pub(crate) loopback_tls_pending_write: Arc<Mutex<Option<LoopbackTlsPendingWriteHandle>>>,
-    pub(crate) saw_local_shutdown: Arc<AtomicBool>,
-    pub(crate) saw_remote_end: Arc<AtomicBool>,
-    pub(crate) close_notified: Arc<AtomicBool>,
-}
-
-#[derive(Debug)]
-pub(crate) struct LoopbackTlsTransportPair {
-    pub(crate) state: Mutex<LoopbackTlsTransportPairState>,
-    pub(crate) ready: Condvar,
-}
-
-#[derive(Debug, Default)]
-pub(crate) struct LoopbackTlsTransportPairState {
-    pub(crate) lower_to_higher: VecDeque<u8>,
-    pub(crate) higher_to_lower: VecDeque<u8>,
-    pub(crate) lower_write_closed: bool,
-    pub(crate) higher_write_closed: bool,
-    pub(crate) lower_closed: bool,
-    pub(crate) higher_closed: bool,
-    pub(crate) lower_read_interrupt: bool,
-    pub(crate) higher_read_interrupt: bool,
-}
-
-pub(crate) struct LoopbackTlsEndpoint {
-    pub(crate) pair: Arc<LoopbackTlsTransportPair>,
-    pub(crate) is_lower_socket: bool,
-    pub(crate) poll_timeout: Duration,
-    /// Registry key (`vm_id:lower:higher`) under which this endpoint's transport
-    /// pair is registered in the loopback-TLS transport registry. Stored so the
-    /// endpoint's `Drop` can eagerly prune its own registry entry once it is the
-    /// last owner of the pair, instead of leaking a dead `Weak` entry until the
-    /// next lazy `retain()` in `loopback_tls_endpoint()`. `None` means the
-    /// endpoint was not registered (e.g. test-constructed) and Drop skips pruning.
-    pub(crate) registry_key: Option<String>,
-}
-
-#[derive(Debug)]
-pub(crate) struct LoopbackTlsPendingWriteState {
-    pub(crate) buffer: Vec<u8>,
-    pub(crate) warned_near_cap: bool,
-    pub(crate) flushing: bool,
-    pub(crate) defer_shutdown_write: bool,
-    pub(crate) failure_message: Option<String>,
-}
-
-#[derive(Debug, Clone)]
-pub(crate) struct LoopbackTlsPendingWriteHandle {
-    pub(crate) state: Arc<Mutex<LoopbackTlsPendingWriteState>>,
-    pub(crate) tls_handshake_complete: Arc<AtomicBool>,
-    pub(crate) failed: Arc<AtomicBool>,
-    pub(crate) pair: Arc<LoopbackTlsTransportPair>,
-    pub(crate) is_lower_socket: bool,
-    pub(crate) handshake_started_at: Instant,
-}
-
-impl fmt::Debug for LoopbackTlsEndpoint {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        f.debug_struct("LoopbackTlsEndpoint")
-            .field("is_lower_socket", &self.is_lower_socket)
-            .finish()
-    }
-}
-
-#[derive(Debug)]
-pub(crate) enum ActiveTlsStream {
-    Client(StreamOwned<ClientConnection, TcpStream>),
-    Server(StreamOwned<ServerConnection, TcpStream>),
-    LoopbackClient(StreamOwned<ClientConnection, LoopbackTlsEndpoint>),
-    LoopbackServer(StreamOwned<ServerConnection, LoopbackTlsEndpoint>),
-}
-
-#[derive(Debug, Clone, Default, Serialize, Deserialize)]
-#[serde(default, rename_all = "camelCase")]
-pub(crate) struct JavascriptTlsClientHello {
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub(crate) servername: Option<String>,
-    #[serde(
-        rename = "ALPNProtocols",
-        alias = "ALPNProtocols",
-        skip_serializing_if = "Option::is_none"
-    )]
-    pub(crate) alpn_protocols: Option<Vec<String>>,
-}
-
-#[derive(Debug, Clone, Default, Deserialize)]
-#[serde(default, rename_all = "camelCase")]
-pub(crate) struct JavascriptTlsBridgeOptions {
-    pub(crate) is_server: bool,
-    pub(crate) servername: Option<String>,
-    pub(crate) reject_unauthorized: Option<bool>,
-    pub(crate) request_cert: Option<bool>,
-    pub(crate) session: Option<String>,
-    pub(crate) key: Option<JavascriptTlsMaterial>,
-    pub(crate) cert: Option<JavascriptTlsMaterial>,
-    pub(crate) ca: Option<JavascriptTlsMaterial>,
-    pub(crate) passphrase: Option<String>,
-    pub(crate) ciphers: Option<String>,
-    #[serde(alias = "ALPNProtocols")]
-    pub(crate) alpn_protocols: Option<Vec<String>>,
-    pub(crate) min_version: Option<String>,
-    pub(crate) max_version: Option<String>,
-}
-
-#[derive(Debug, Clone, Deserialize)]
-#[serde(untagged)]
-pub(crate) enum JavascriptTlsMaterial {
-    Single(JavascriptTlsDataValue),
-    Many(Vec<JavascriptTlsDataValue>),
-}
-
-#[derive(Debug, Clone, Deserialize)]
-#[serde(tag = "kind", rename_all = "camelCase")]
-pub(crate) enum JavascriptTlsDataValue {
-    Buffer { data: String },
-    String { data: String },
-}
-
-#[derive(Debug, Clone, Default)]
-pub(crate) struct ActiveTlsState {
-    pub(crate) client_hello: Option<JavascriptTlsClientHello>,
-    pub(crate) local_certificates: Vec<Vec<u8>>,
-    pub(crate) session_reused: bool,
-}
-
-#[derive(Debug, Clone, Copy)]
-pub(crate) struct ResolvedTcpConnectAddr {
-    pub(crate) actual_addr: SocketAddr,
-    pub(crate) guest_remote_addr: SocketAddr,
-    pub(crate) use_kernel_loopback: bool,
-}
-
-#[derive(Debug)]
-pub(crate) struct ActiveTcpListener {
-    pub(crate) listener: Option<TcpListener>,
-    pub(crate) kernel_socket_id: Option<SocketId>,
-    pub(crate) local_addr: Option<SocketAddr>,
-    pub(crate) guest_local_addr: SocketAddr,
-    pub(crate) backlog: usize,
-    pub(crate) active_connection_ids: BTreeSet<String>,
-}
-
-// ---------------------------------------------------------------------------
-// Unix socket types
-// ---------------------------------------------------------------------------
-
-#[derive(Debug)]
-pub(crate) enum JavascriptUnixListenerEvent {
-    Connection(PendingUnixSocket),
-    Error {
-        code: Option<String>,
-        message: String,
-    },
-}
-
-#[derive(Debug)]
-pub(crate) struct PendingUnixSocket {
-    pub(crate) stream: UnixStream,
-    pub(crate) local_path: Option<String>,
-    pub(crate) remote_path: Option<String>,
-}
-
-#[derive(Debug)]
-pub(crate) struct ActiveUnixSocket {
-    pub(crate) stream: Arc<Mutex<UnixStream>>,
-    pub(crate) events: Receiver<JavascriptTcpSocketEvent>,
-    pub(crate) event_sender: Sender<JavascriptTcpSocketEvent>,
-    pub(crate) event_pusher: Arc<Mutex<Option<JavascriptSocketEventPusher>>>,
-    pub(crate) listener_id: Option<String>,
-    pub(crate) local_path: Option<String>,
-    pub(crate) remote_path: Option<String>,
-    pub(crate) saw_local_shutdown: Arc<AtomicBool>,
-    pub(crate) saw_remote_end: Arc<AtomicBool>,
-    pub(crate) close_notified: Arc<AtomicBool>,
-}
-
-#[derive(Debug)]
-pub(crate) struct ActiveUnixListener {
-    pub(crate) listener: UnixListener,
-    pub(crate) path: String,
-    pub(crate) backlog: usize,
-    pub(crate) active_connection_ids: BTreeSet<String>,
-}
-
-// ---------------------------------------------------------------------------
-// UDP types
-// ---------------------------------------------------------------------------
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub(crate) enum JavascriptUdpFamily {
-    Ipv4,
-    Ipv6,
-}
-
-impl JavascriptUdpFamily {
-    pub(crate) fn from_socket_type(value: &str) -> Result<Self, SidecarError> {
-        match value {
-            "udp4" => Ok(Self::Ipv4),
-            "udp6" => Ok(Self::Ipv6),
-            other => Err(SidecarError::InvalidState(format!(
-                "unsupported dgram socket type {other}"
-            ))),
-        }
-    }
-
-    pub(crate) fn socket_type(self) -> &'static str {
-        match self {
-            Self::Ipv4 => "udp4",
-            Self::Ipv6 => "udp6",
-        }
-    }
-
-    pub(crate) fn matches_addr(self, addr: &SocketAddr) -> bool {
-        matches!(
-            (self, addr),
-            (Self::Ipv4, SocketAddr::V4(_)) | (Self::Ipv6, SocketAddr::V6(_))
-        )
-    }
-}
-
-#[derive(Debug)]
-pub(crate) enum JavascriptUdpSocketEvent {
-    Message {
-        data: Vec<u8>,
-        remote_addr: SocketAddr,
-    },
-    Error {
-        code: Option<String>,
-        message: String,
-    },
-}
-
-/// A blocking host socket backing one guest Python socket. Reads use a short
-/// timeout (set on the socket) so a `recv`/`recvfrom` RPC never stalls the
-/// shared sidecar event loop; the Python shim re-polls to emulate blocking.
-#[derive(Debug)]
-pub(crate) enum PythonHostSocket {
-    Tcp(TcpStream),
-    Udp(UdpSocket),
-}
-
-#[derive(Debug)]
-pub(crate) struct ActiveUdpSocket {
-    pub(crate) family: JavascriptUdpFamily,
-    pub(crate) socket: Option<UdpSocket>,
-    pub(crate) kernel_socket_id: Option<SocketId>,
-    pub(crate) guest_local_addr: Option<SocketAddr>,
-    pub(crate) recv_buffer_size: usize,
-    pub(crate) send_buffer_size: usize,
-}
-
-// ---------------------------------------------------------------------------
-// Execution types
-// ---------------------------------------------------------------------------
-
-#[derive(Debug)]
-pub(crate) enum ActiveExecution {
-    Javascript(JavascriptExecution),
-    Python(PythonExecution),
-    Wasm(Box<WasmExecution>),
-    Tool(ToolExecution),
-}
-
-#[derive(Debug, Clone)]
-pub(crate) struct ToolExecution {
-    pub(crate) cancelled: Arc<AtomicBool>,
-    pub(crate) pending_events: Arc<Mutex<VecDeque<ActiveExecutionEvent>>>,
-    pub(crate) events_overflowed: Arc<AtomicBool>,
-}
-
-impl Default for ToolExecution {
-    fn default() -> Self {
-        Self {
-            cancelled: Arc::new(AtomicBool::new(false)),
-            pending_events: Arc::new(Mutex::new(VecDeque::new())),
-            events_overflowed: Arc::new(AtomicBool::new(false)),
-        }
-    }
-}
-
-#[derive(Debug)]
-pub(crate) enum ActiveExecutionEvent {
-    Stdout(Vec<u8>),
-    Stderr(Vec<u8>),
-    JavascriptSyncRpcRequest(JavascriptSyncRpcRequest),
-    PythonVfsRpcRequest(Box<PythonVfsRpcRequest>),
-    SignalState {
-        signal: u32,
-        registration: SignalHandlerRegistration,
-    },
-    Exited(i32),
-}
-
-#[derive(Debug)]
-pub(crate) struct ProcessEventEnvelope {
-    pub(crate) connection_id: String,
-    pub(crate) session_id: String,
-    pub(crate) vm_id: String,
-    pub(crate) process_id: String,
-    pub(crate) event: ActiveExecutionEvent,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub(crate) enum SocketQueryKind {
-    TcpListener,
-    UdpBound,
-}
-
-// ---------------------------------------------------------------------------
-// Command resolution
-// ---------------------------------------------------------------------------
-
-#[derive(Debug)]
-pub(crate) struct ResolvedChildProcessExecution {
-    pub(crate) command: String,
-    pub(crate) process_args: Vec<String>,
-    pub(crate) runtime: GuestRuntimeKind,
-    pub(crate) entrypoint: String,
-    pub(crate) execution_args: Vec<String>,
-    pub(crate) env: BTreeMap<String, String>,
-    pub(crate) guest_cwd: String,
-    pub(crate) host_cwd: PathBuf,
-    pub(crate) wasm_permission_tier: Option<WasmPermissionTier>,
-    pub(crate) tool_command: bool,
-}
-
-// ---------------------------------------------------------------------------
-// Utility types
-// ---------------------------------------------------------------------------
-
-#[derive(Debug)]
-pub(crate) struct ProcNetEntry {
-    pub(crate) local_host: String,
-    pub(crate) local_port: u16,
-    pub(crate) state: String,
-    pub(crate) inode: u64,
-}
diff --git a/crates/sidecar/src/stdio.rs b/crates/sidecar/src/stdio.rs
deleted file mode 100644
index 33627fde3..000000000
--- a/crates/sidecar/src/stdio.rs
+++ /dev/null
@@ -1,1523 +0,0 @@
-use crate::wire::{
-    self, AuthenticatedResponse, ExtEnvelope, OwnershipScope, ProtocolCodecError, ProtocolFrame,
-    RequestFrame, RequestId, RequestPayload, ResponseFrame, ResponsePayload, SessionOpenedResponse,
-    SidecarResponseFrame, WireDispatchResult, WireFrameCodec,
-};
-use crate::{
-    EventSinkTransport, Extension, ExtensionInterruptRequest, NativeSidecar, NativeSidecarConfig,
-    SidecarError, SidecarRequestTransport,
-};
-use secure_exec_bridge::queue_tracker::{tracked_sync_channel, TrackedLimit, TrackedSyncSender};
-use secure_exec_bridge::{
-    BridgeTypes, ChmodRequest, ClockBridge, ClockRequest, CommandPermissionRequest,
-    CreateDirRequest, CreateJavascriptContextRequest, CreateWasmContextRequest, DiagnosticRecord,
-    DirectoryEntry, EnvironmentPermissionRequest, EventBridge, ExecutionBridge, ExecutionEvent,
-    ExecutionHandleRequest, FileMetadata, FilesystemBridge, FilesystemPermissionRequest,
-    FilesystemSnapshot, FlushFilesystemStateRequest, GuestContextHandle, KillExecutionRequest,
-    LifecycleEventRecord, LoadFilesystemStateRequest, LogRecord, NetworkPermissionRequest,
-    PathRequest, PermissionBridge, PermissionDecision, PersistenceBridge,
-    PollExecutionEventRequest, RandomBridge, RandomBytesRequest, ReadDirRequest, ReadFileRequest,
-    RenameRequest, ScheduleTimerRequest, ScheduledTimer, StartExecutionRequest, StartedExecution,
-    StructuredEventRecord, SymlinkRequest, TruncateRequest, WriteExecutionStdinRequest,
-    WriteFileRequest,
-};
-use secure_exec_sidecar_core::{
-    generated_wire_blocking_extension_interrupt, BlockingExtensionInterrupt,
-};
-use std::collections::{BTreeMap, BTreeSet};
-use std::error::Error;
-use std::fmt;
-use std::fs::{self, OpenOptions};
-use std::io::{self, Read, Write};
-use std::os::unix::fs::{symlink as create_symlink, MetadataExt, PermissionsExt};
-use std::path::{Path, PathBuf};
-use std::sync::{mpsc, Arc, Mutex};
-use std::thread;
-use std::time::{Duration, Instant, SystemTime};
-use tokio::sync::{
-    mpsc::{channel, unbounded_channel, Receiver},
-    Notify,
-};
-use tokio::time;
-
-// Guest sync fs/module RPCs are serviced by `pump_process_events` on this timer,
-// so a blocked guest call waits up to one interval before the host even sees it.
-// At 5ms this dominated per-call latency (~5ms/stat); 250us cuts it ~11x (stat
-// 7.5s -> ~0.65s over 1500 ops) and the sub-ms tokio timer is honored. Idle
-// pumps are cheap no-ops (try_recv + zero-timeout poll), so the higher cadence
-// costs negligible CPU when no guest is issuing RPCs.
-const EVENT_PUMP_INTERVAL: Duration = Duration::from_micros(250);
-const MAX_STDIN_FRAME_QUEUE: usize = 128;
-const MAX_EVENT_READY_QUEUE: usize = 1;
-// Defense-in-depth headroom for the host-bound frame queue: a burst of output
-// frames from a busy turn should be buffered, so the writer only backpressures
-// when the host genuinely stops reading stdout rather than on every spike.
-const MAX_STDOUT_FRAME_QUEUE: usize = 4096;
-
-#[cfg(test)]
-fn request_frame(
-    request_id: RequestId,
-    ownership: OwnershipScope,
-    payload: RequestPayload,
-) -> RequestFrame {
-    RequestFrame {
-        schema: wire::protocol_schema(),
-        request_id,
-        ownership,
-        payload,
-    }
-}
-
-fn response_frame(
-    request_id: RequestId,
-    ownership: OwnershipScope,
-    payload: ResponsePayload,
-) -> ResponseFrame {
-    ResponseFrame {
-        schema: wire::protocol_schema(),
-        request_id,
-        ownership,
-        payload,
-    }
-}
-
-#[cfg(test)]
-fn connection_ownership(connection_id: &str) -> OwnershipScope {
-    OwnershipScope::ConnectionOwnership(wire::ConnectionOwnership {
-        connection_id: connection_id.to_owned(),
-    })
-}
-
-fn session_ownership(connection_id: &str, session_id: &str) -> OwnershipScope {
-    OwnershipScope::SessionOwnership(wire::SessionOwnership {
-        connection_id: connection_id.to_owned(),
-        session_id: session_id.to_owned(),
-    })
-}
-
-#[cfg(test)]
-fn vm_ownership(connection_id: &str, session_id: &str, vm_id: &str) -> OwnershipScope {
-    OwnershipScope::VmOwnership(wire::VmOwnership {
-        connection_id: connection_id.to_owned(),
-        session_id: session_id.to_owned(),
-        vm_id: vm_id.to_owned(),
-    })
-}
-
-fn wire_protocol_error(error: ProtocolCodecError) -> SidecarError {
-    SidecarError::InvalidState(format!("invalid generated wire protocol frame: {error}"))
-}
-
-pub fn run() -> Result<(), Box<dyn Error>> {
-    run_with_extensions(Vec::new())
-}
-
-pub fn run_with_extensions(extensions: Vec<Box<dyn Extension>>) -> Result<(), Box<dyn Error>> {
-    // Initialize the embedded V8 runtime + platform now, on the long-lived main
-    // thread, so it is never first-initialized on a transient worker thread (e.g. a
-    // VM-create snapshot pre-warm thread that then exits — which corrupts V8's
-    // platform and wedges later isolate creation). Best-effort.
-    if let Err(error) = secure_exec_execution::v8_host::ensure_runtime_initialized() {
-        eprintln!("embedded V8 runtime init failed at startup: {error}");
-    }
-    tokio::runtime::Builder::new_current_thread()
-        .enable_all()
-        .build()?
-        .block_on(run_async(extensions))
-}
-
-async fn run_async(extensions: Vec<Box<dyn Extension>>) -> Result<(), Box<dyn Error>> {
-    let config = NativeSidecarConfig {
-        compile_cache_root: Some(default_compile_cache_root()),
-        ..NativeSidecarConfig::default()
-    };
-    let codec = WireFrameCodec::new(config.max_frame_bytes);
-    let mut sidecar =
-        NativeSidecar::with_config_and_extensions(LocalBridge::default(), config, extensions)?;
-    let mut active_sessions = BTreeSet::<SessionScope>::new();
-    let mut active_connections = BTreeSet::<String>::new();
-    let (stdin_tx, mut stdin_rx) =
-        channel::<Result<Option<ProtocolFrame>, String>>(MAX_STDIN_FRAME_QUEUE);
-    let stdin_gauge = secure_exec_bridge::queue_tracker::register_queue(
-        TrackedLimit::SidecarStdinFrames,
-        MAX_STDIN_FRAME_QUEUE,
-    );
-    let (event_ready_tx, mut event_ready_rx) = channel::<()>(MAX_EVENT_READY_QUEUE);
-    let (write_tx, write_rx) = tracked_sync_channel::<ProtocolFrame>(
-        TrackedLimit::SidecarStdoutFrames,
-        MAX_STDOUT_FRAME_QUEUE,
-    );
-    let (write_error_tx, mut write_error_rx) = unbounded_channel::<String>();
-
-    // Forward limit-registry near-capacity warnings to the host: the global sink
-    // fires (edge-triggered, from arbitrary threads) into this channel, and the
-    // event loop below drains it and emits a `StructuredEvent` (name
-    // "limit_warning"). The unbounded sender is Send+Sync and lives for the whole
-    // process inside the global handler, so the receiver never sees a hangup.
-    let (limit_warning_tx, mut limit_warning_rx) =
-        unbounded_channel::<secure_exec_bridge::queue_tracker::LimitWarning>();
-    secure_exec_bridge::queue_tracker::set_limit_warning_handler(Box::new(move |warning| {
-        let _ = limit_warning_tx.send(warning.clone());
-    }));
-    let callback_transport = Arc::new(FrameSidecarRequestTransport::new(write_tx.clone()));
-    sidecar.set_sidecar_request_transport(callback_transport.clone());
-    // Live event sink: lets an extension stream `session/update` (and other)
-    // events to stdout mid-dispatch instead of batching them until the request
-    // resolves. Shares the same outbound `write_tx` channel as the batch path, so
-    // ordering and backpressure are identical.
-    let event_transport = Arc::new(FrameEventTransport::new(write_tx.clone()));
-    sidecar.set_event_transport(event_transport);
-    let mut event_pump = time::interval(EVENT_PUMP_INTERVAL);
-    let process_event_notify = Arc::new(Notify::new());
-    sidecar
-        .javascript_engine
-        .set_event_notify(Some(process_event_notify.clone()));
-    let writer_codec = codec.clone();
-    let reader_codec = codec.clone();
-    let writer_error_tx = write_error_tx.clone();
-    thread::spawn(move || {
-        let mut writer = io::BufWriter::new(io::stdout());
-        while let Ok(frame) = write_rx.recv() {
-            if let Err(error) = write_frame(&writer_codec, &mut writer, &frame) {
-                let _ = writer_error_tx.send(error.to_string());
-                break;
-            }
-        }
-    });
-
-    thread::spawn({
-        let callback_transport = callback_transport.clone();
-        let read_error_tx = write_error_tx.clone();
-        move || {
-            let mut stdin = io::stdin();
-            loop {
-                let frame = match read_frame(&reader_codec, &mut stdin) {
-                    Ok(Some(ProtocolFrame::SidecarResponseFrame(response))) => {
-                        if callback_transport.accept_response(response.clone()) {
-                            continue;
-                        }
-                        Ok(Some(ProtocolFrame::SidecarResponseFrame(response)))
-                    }
-                    Ok(Some(frame)) => Ok(Some(frame)),
-                    other => other,
-                }
-                .map_err(|error: Box<dyn Error>| error.to_string());
-                let should_stop = matches!(frame, Ok(None) | Err(_));
-                match enqueue_stdin_frame(&stdin_tx, frame) {
-                    Ok(()) => {
-                        // Sample inbound queue depth so the centralized tracker
-                        // can warn before host requests back up on the sidecar.
-                        stdin_gauge.observe_depth(
-                            stdin_tx.max_capacity().saturating_sub(stdin_tx.capacity()),
-                        );
-                    }
-                    Err(StdinFrameQueueError::Full(message)) => {
-                        let _ = read_error_tx.send(message);
-                        break;
-                    }
-                    Err(StdinFrameQueueError::Closed) => break,
-                }
-                if should_stop {
-                    break;
-                }
-            }
-        }
-    });
-
-    flush_sidecar_requests(&mut sidecar, &write_tx)?;
-    let mut pending_frame: Option<ProtocolFrame> = None;
-    let mut limit_warning_closed = false;
-
-    loop {
-        if let Some(frame) = pending_frame.take() {
-            handle_protocol_frame(
-                frame,
-                &mut sidecar,
-                &mut stdin_rx,
-                &mut pending_frame,
-                &write_tx,
-                &mut active_sessions,
-                &mut active_connections,
-            )
-            .await?;
-            continue;
-        }
-
-        tokio::select! {
-            maybe_frame = stdin_rx.recv() => {
-                let Some(frame) = maybe_frame else {
-                    break;
-                };
-                let Some(frame) = frame.map_err(io::Error::other)? else {
-                    break;
-                };
-                handle_protocol_frame(
-                    frame,
-                    &mut sidecar,
-                    &mut stdin_rx,
-                    &mut pending_frame,
-                    &write_tx,
-                    &mut active_sessions,
-                    &mut active_connections,
-                ).await?;
-            }
-            maybe_warning = limit_warning_rx.recv(), if !limit_warning_closed => {
-                match maybe_warning {
-                    Some(warning) => {
-                        // A limit warning is process-global; deliver it ONCE. The
-                        // stdio transport is single-client, so emit it to the first
-                        // active connection (if any) rather than fanning out a copy
-                        // per connection. Dropped if no client has authenticated yet
-                        // (only the tracing log survives, which is acceptable).
-                        if let Some(connection_id) = active_connections.iter().next() {
-                            let mut detail = std::collections::HashMap::new();
-                            detail.insert(String::from("limit"), warning.name.as_str().to_string());
-                            detail.insert(
-                                String::from("category"),
-                                warning.category.as_str().to_string(),
-                            );
-                            detail.insert(String::from("observed"), warning.observed.to_string());
-                            detail.insert(String::from("capacity"), warning.capacity.to_string());
-                            detail.insert(
-                                String::from("fillPercent"),
-                                warning.fill_percent.to_string(),
-                            );
-                            let frame = crate::service::structured_event_frame(
-                                connection_id,
-                                "limit_warning",
-                                detail,
-                            )?;
-                            send_output_frame(&write_tx, ProtocolFrame::EventFrame(frame))?;
-                        }
-                    }
-                    None => {
-                        // Sender dropped (only possible if another sidecar replaced
-                        // the global handler in-process). Disarm this branch so the
-                        // select! does not hot-spin on an always-ready closed
-                        // receiver; do NOT break — that would tear down the sidecar.
-                        limit_warning_closed = true;
-                    }
-                }
-            }
-            maybe_ready = event_ready_rx.recv() => {
-                let Some(()) = maybe_ready else {
-                    break;
-                };
-                loop {
-                    let mut emitted_frame = false;
-                    for session in active_sessions.iter().cloned().collect::<Vec<_>>() {
-                        if let Some(frame) = sidecar
-                            .poll_event_wire(&session.ownership_scope(), Duration::ZERO)
-                            .await?
-                        {
-                            send_output_frame(&write_tx, ProtocolFrame::EventFrame(frame))?;
-                            emitted_frame = true;
-                        }
-                    }
-
-                    if !emitted_frame {
-                        break;
-                    }
-                }
-                flush_sidecar_requests(&mut sidecar, &write_tx)?;
-            }
-            _ = process_event_notify.notified() => {
-                for session in active_sessions.iter().cloned().collect::<Vec<_>>() {
-                    if sidecar.pump_process_events(&session.compat_ownership_scope()).await? {
-                        let _ = event_ready_tx.try_send(());
-                    }
-                }
-                flush_sidecar_requests(&mut sidecar, &write_tx)?;
-            }
-            _ = event_pump.tick() => {
-                for session in active_sessions.iter().cloned().collect::<Vec<_>>() {
-                    if sidecar.pump_process_events(&session.compat_ownership_scope()).await? {
-                        let _ = event_ready_tx.try_send(());
-                    }
-                }
-                flush_sidecar_requests(&mut sidecar, &write_tx)?;
-            }
-            maybe_write_error = write_error_rx.recv() => {
-                if let Some(error) = maybe_write_error {
-                    return Err(io::Error::new(io::ErrorKind::BrokenPipe, error).into());
-                }
-            }
-        }
-    }
-
-    cleanup_connections(&mut sidecar, &active_connections, &mut active_sessions).await;
-    Ok(())
-}
-
-async fn handle_protocol_frame(
-    frame: ProtocolFrame,
-    sidecar: &mut NativeSidecar<LocalBridge>,
-    stdin_rx: &mut Receiver<Result<Option<ProtocolFrame>, String>>,
-    pending_frame: &mut Option<ProtocolFrame>,
-    write_tx: &TrackedSyncSender<ProtocolFrame>,
-    active_sessions: &mut BTreeSet<SessionScope>,
-    active_connections: &mut BTreeSet<String>,
-) -> Result<(), Box<dyn Error>> {
-    match frame {
-        ProtocolFrame::RequestFrame(request) => {
-            let (dispatch, extra_responses) =
-                dispatch_with_prompt_interrupt(sidecar, request.clone(), stdin_rx, pending_frame)
-                    .await?;
-            track_session_state(
-                &dispatch.response.payload,
-                active_sessions,
-                active_connections,
-            );
-
-            send_output_frame(write_tx, ProtocolFrame::ResponseFrame(dispatch.response))?;
-            for response in extra_responses {
-                send_output_frame(write_tx, ProtocolFrame::ResponseFrame(response))?;
-            }
-            for event in dispatch.events {
-                send_output_frame(write_tx, ProtocolFrame::EventFrame(event))?;
-            }
-            flush_sidecar_requests(sidecar, write_tx)?;
-        }
-        ProtocolFrame::SidecarResponseFrame(response) => {
-            sidecar.accept_wire_sidecar_response(response)?;
-            flush_sidecar_requests(sidecar, write_tx)?;
-        }
-        other => {
-            return Err(format!(
-                "expected request or sidecar_response frame on stdin, received {}",
-                frame_kind(&other)
-            )
-            .into());
-        }
-    }
-    // Drop any sessions the sidecar disposed while handling this frame from the
-    // active-session set so the event pump stops iterating dead sessions (M5).
-    untrack_disposed_sessions(&sidecar.take_disposed_sessions(), active_sessions);
-    Ok(())
-}
-
-/// Remove every disposed session scope from the stdio transport's active-session
-/// set. Without this the set is insert-only (`track_session_state` adds on
-/// `SessionOpenedResponse` but nothing ever removed), so it grew per session for
-/// the process lifetime and the ~250us event pump iterated every dead entry (M5).
-fn untrack_disposed_sessions(
-    disposed: &[(String, String)],
-    active_sessions: &mut BTreeSet<SessionScope>,
-) {
-    for (connection_id, session_id) in disposed {
-        active_sessions.remove(&SessionScope {
-            connection_id: connection_id.clone(),
-            session_id: session_id.clone(),
-        });
-    }
-}
-
-async fn dispatch_with_prompt_interrupt(
-    sidecar: &mut NativeSidecar<LocalBridge>,
-    request: RequestFrame,
-    stdin_rx: &mut Receiver<Result<Option<ProtocolFrame>, String>>,
-    pending_frame: &mut Option<ProtocolFrame>,
-) -> Result<(WireDispatchResult, Vec<ResponseFrame>), Box<dyn Error>> {
-    let Some(blocking_request) = blocking_extension_request(sidecar, &request) else {
-        return Ok((sidecar.dispatch_wire(request).await?, Vec::new()));
-    };
-
-    let mut dispatch = Box::pin(sidecar.dispatch_wire(request.clone()));
-    tokio::select! {
-        result = dispatch.as_mut() => Ok((result?, Vec::new())),
-        maybe_frame = stdin_rx.recv() => {
-            let frame = decode_stdin_frame(maybe_frame)?;
-            if let Some(frame) = frame {
-                if let Some(interrupt) = extension_interrupt_response(&blocking_request, &request, &frame) {
-                    drop(dispatch);
-                    let mut extra_responses = Vec::new();
-                    if let Some(response) = interrupt.interrupting_response {
-                        extra_responses.push(response);
-                    } else {
-                        *pending_frame = Some(frame);
-                    }
-                    return Ok((interrupt.interrupted_dispatch, extra_responses));
-                }
-                *pending_frame = Some(frame);
-            }
-            Ok((dispatch.await?, Vec::new()))
-        }
-    }
-}
-
-fn decode_stdin_frame(
-    maybe_frame: Option<Result<Option<ProtocolFrame>, String>>,
-) -> Result<Option<ProtocolFrame>, Box<dyn Error>> {
-    let Some(frame) = maybe_frame else {
-        return Ok(None);
-    };
-    Ok(frame.map_err(io::Error::other)?)
-}
-
-struct BlockingExtensionRequest {
-    namespace: String,
-    payload: Vec<u8>,
-    extension: Arc<dyn Extension>,
-}
-
-struct ExtensionInterruptDispatch {
-    interrupted_dispatch: WireDispatchResult,
-    interrupting_response: Option<ResponseFrame>,
-}
-
-fn blocking_extension_request(
-    sidecar: &NativeSidecar<LocalBridge>,
-    request: &RequestFrame,
-) -> Option<BlockingExtensionRequest> {
-    let RequestPayload::ExtEnvelope(envelope) = &request.payload else {
-        return None;
-    };
-    let extension = sidecar.extensions.get(&envelope.namespace)?.clone();
-    if !extension.is_blocking_request(&envelope.payload) {
-        return None;
-    }
-    Some(BlockingExtensionRequest {
-        namespace: envelope.namespace.clone(),
-        payload: envelope.payload.clone(),
-        extension,
-    })
-}
-
-fn extension_interrupt_response(
-    blocking_request: &BlockingExtensionRequest,
-    active_request: &RequestFrame,
-    frame: &ProtocolFrame,
-) -> Option<ExtensionInterruptDispatch> {
-    match frame {
-        ProtocolFrame::RequestFrame(request) => {
-            let interrupt = generated_wire_blocking_extension_interrupt(
-                active_request,
-                &blocking_request.namespace,
-                request,
-            )?;
-            let interrupt = blocking_request.extension.interrupt_blocking_request(
-                &blocking_request.payload,
-                match interrupt {
-                    BlockingExtensionInterrupt::ExtensionPayload(payload) => {
-                        ExtensionInterruptRequest::ExtensionPayload(payload)
-                    }
-                    BlockingExtensionInterrupt::KillProcess => {
-                        ExtensionInterruptRequest::KillProcess
-                    }
-                },
-            )?;
-            let interrupted_dispatch = interrupted_extension_dispatch(
-                active_request,
-                &blocking_request.namespace,
-                interrupt.interrupted_response_payload,
-            );
-            let interrupting_response = interrupt.interrupting_response_payload.map(|payload| {
-                response_frame(
-                    request.request_id,
-                    request.ownership.clone(),
-                    ResponsePayload::ExtEnvelope(ExtEnvelope {
-                        namespace: blocking_request.namespace.clone(),
-                        payload,
-                    }),
-                )
-            });
-            Some(ExtensionInterruptDispatch {
-                interrupted_dispatch,
-                interrupting_response,
-            })
-        }
-        // Response, Event, and SidecarRequest frames are sidecar-to-host only. If one
-        // arrives on stdin it is requeued and rejected as a protocol error by
-        // handle_protocol_frame, so it must not synthesize a cancelled prompt first.
-        // SidecarResponse frames answer sidecar-initiated callbacks and may be the very
-        // response the blocked prompt dispatch is waiting on, so they never interrupt.
-        ProtocolFrame::ResponseFrame(_)
-        | ProtocolFrame::EventFrame(_)
-        | ProtocolFrame::SidecarRequestFrame(_)
-        | ProtocolFrame::SidecarResponseFrame(_) => None,
-    }
-}
-
-fn interrupted_extension_dispatch(
-    request: &RequestFrame,
-    namespace: &str,
-    payload: Vec<u8>,
-) -> WireDispatchResult {
-    if !matches!(request.payload, RequestPayload::ExtEnvelope(_)) {
-        unreachable!("interrupted extension dispatch requires an extension request");
-    }
-
-    let response = ResponsePayload::ExtEnvelope(ExtEnvelope {
-        namespace: namespace.to_string(),
-        payload,
-    });
-    WireDispatchResult {
-        response: response_frame(request.request_id, request.ownership.clone(), response),
-        events: Vec::new(),
-    }
-}
-
-async fn cleanup_connections(
-    sidecar: &mut NativeSidecar<LocalBridge>,
-    active_connections: &BTreeSet<String>,
-    active_sessions: &mut BTreeSet<SessionScope>,
-) {
-    for connection_id in active_connections {
-        let _ = sidecar.remove_connection(connection_id).await;
-    }
-    untrack_disposed_sessions(&sidecar.take_disposed_sessions(), active_sessions);
-}
-
-fn track_session_state(
-    payload: &ResponsePayload,
-    active_sessions: &mut BTreeSet<SessionScope>,
-    active_connections: &mut BTreeSet<String>,
-) {
-    match payload {
-        ResponsePayload::AuthenticatedResponse(AuthenticatedResponse { connection_id, .. }) => {
-            active_connections.insert(connection_id.clone());
-        }
-        ResponsePayload::SessionOpenedResponse(SessionOpenedResponse {
-            session_id,
-            owner_connection_id,
-        }) => {
-            active_sessions.insert(SessionScope {
-                connection_id: owner_connection_id.clone(),
-                session_id: session_id.clone(),
-            });
-        }
-        _ => {}
-    }
-}
-
-fn read_frame(
-    codec: &WireFrameCodec,
-    reader: &mut impl Read,
-) -> Result<Option<ProtocolFrame>, Box<dyn Error>> {
-    let mut prefix = [0u8; 4];
-    match reader.read_exact(&mut prefix) {
-        Ok(()) => {}
-        Err(error) if error.kind() == io::ErrorKind::UnexpectedEof => {
-            return Ok(None);
-        }
-        Err(error) => return Err(error.into()),
-    }
-
-    let declared_len = u32::from_be_bytes(prefix) as usize;
-    if declared_len > codec.max_frame_bytes() {
-        return Err(ProtocolCodecError::FrameTooLarge {
-            size: declared_len,
-            max: codec.max_frame_bytes(),
-        }
-        .into());
-    }
-    let total_len = prefix.len().saturating_add(declared_len);
-    let mut bytes = Vec::with_capacity(total_len);
-    bytes.extend_from_slice(&prefix);
-    bytes.resize(total_len, 0);
-    reader.read_exact(&mut bytes[prefix.len()..])?;
-
-    Ok(Some(codec.decode(&bytes)?))
-}
-
-fn write_frame(
-    codec: &WireFrameCodec,
-    writer: &mut impl Write,
-    frame: &ProtocolFrame,
-) -> Result<(), Box<dyn Error>> {
-    let bytes = codec.encode(frame)?;
-    writer.write_all(&bytes)?;
-    writer.flush()?;
-    Ok(())
-}
-
-fn frame_kind(frame: &ProtocolFrame) -> &'static str {
-    match frame {
-        ProtocolFrame::RequestFrame(_) => "request",
-        ProtocolFrame::ResponseFrame(_) => "response",
-        ProtocolFrame::EventFrame(_) => "event",
-        ProtocolFrame::SidecarRequestFrame(_) => "sidecar_request",
-        ProtocolFrame::SidecarResponseFrame(_) => "sidecar_response",
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-enum StdinFrameQueueError {
-    Full(String),
-    Closed,
-}
-
-fn enqueue_stdin_frame(
-    sender: &tokio::sync::mpsc::Sender<Result<Option<ProtocolFrame>, String>>,
-    frame: Result<Option<ProtocolFrame>, String>,
-) -> Result<(), StdinFrameQueueError> {
-    sender.try_send(frame).map_err(|error| match error {
-        tokio::sync::mpsc::error::TrySendError::Full(_) => StdinFrameQueueError::Full(format!(
-            "stdin frame queue exceeded {MAX_STDIN_FRAME_QUEUE} pending frames"
-        )),
-        tokio::sync::mpsc::error::TrySendError::Closed(_) => StdinFrameQueueError::Closed,
-    })
-}
-
-fn flush_sidecar_requests(
-    sidecar: &mut NativeSidecar<LocalBridge>,
-    writer: &TrackedSyncSender<ProtocolFrame>,
-) -> Result<(), Box<dyn Error>> {
-    while let Some(request) = sidecar.pop_wire_sidecar_request()? {
-        send_output_frame(writer, ProtocolFrame::SidecarRequestFrame(request))?;
-    }
-    Ok(())
-}
-
-fn send_output_frame(
-    writer: &TrackedSyncSender<ProtocolFrame>,
-    frame: ProtocolFrame,
-) -> Result<(), io::Error> {
-    // Apply backpressure rather than killing the sidecar when the host reads
-    // stdout slowly. A full queue means the dedicated writer thread is blocked on
-    // the stdout pipe (the host has not drained it yet) — a transient, recoverable
-    // condition. Previously `try_send` turned that backlog into a `BrokenPipe`
-    // error that propagated up and exited the whole sidecar process (code 1),
-    // taking every session with it. A blocking `send` parks the producer until the
-    // writer drains a slot, which transitively backpressures the V8 event bridge
-    // and the guest. It never deadlocks: the writer thread runs independently, and
-    // if it dies (real broken pipe) the receiver is dropped and `send` returns
-    // `Disconnected`, which we still surface as a terminal `BrokenPipe`.
-    writer.send(frame).map_err(|_disconnected| {
-        io::Error::new(io::ErrorKind::BrokenPipe, "stdout writer disconnected")
-    })
-}
-
-fn default_compile_cache_root() -> PathBuf {
-    // Stable across sidecar processes so V8 compile-cache (cachedData) survives a
-    // fresh sidecar/VM and benefits cold starts. Previously keyed by PID, which
-    // gave every process an empty cache — cold module imports never reused
-    // compiled bytecode. Entries are namespaced+validated downstream by
-    // `stable_compile_cache_namespace_hash` + V8's source/version checks, so a
-    // shared root is safe; stale or mismatched entries are simply ignored.
-    std::env::temp_dir().join("secure-exec-sidecar-compile-cache")
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use crate::wire::{AuthenticateRequest, KillProcessRequest};
-    use crate::{ExtensionContext, ExtensionFuture, ExtensionInterruptResponse, ExtensionResponse};
-    use std::io::Cursor;
-
-    const TEST_EXTENSION_NAMESPACE: &str = "dev.rivet.secure-exec.test.blocking";
-
-    #[test]
-    fn read_frame_rejects_oversized_prefix_before_allocating_payload() {
-        let codec = WireFrameCodec::new(16);
-        let mut reader = Cursor::new((32_u32).to_be_bytes().to_vec());
-
-        let error = read_frame(&codec, &mut reader).expect_err("oversized frame should fail");
-        let error = error
-            .downcast::<ProtocolCodecError>()
-            .expect("protocol codec error");
-        assert!(matches!(
-            *error,
-            ProtocolCodecError::FrameTooLarge { size: 32, max: 16 }
-        ));
-    }
-
-    #[test]
-    fn stdio_work_queues_are_bounded() {
-        let (stdin_tx, _stdin_rx) =
-            channel::<Result<Option<ProtocolFrame>, String>>(MAX_STDIN_FRAME_QUEUE);
-        for _ in 0..MAX_STDIN_FRAME_QUEUE {
-            enqueue_stdin_frame(&stdin_tx, Ok(None))
-                .expect("stdin frame queue should accept capacity");
-        }
-        assert!(matches!(
-            enqueue_stdin_frame(&stdin_tx, Ok(None)),
-            Err(StdinFrameQueueError::Full(_))
-        ));
-
-        let (event_ready_tx, _event_ready_rx) = channel::<()>(MAX_EVENT_READY_QUEUE);
-        event_ready_tx
-            .try_send(())
-            .expect("event-ready queue should accept capacity");
-        assert!(matches!(
-            event_ready_tx.try_send(()),
-            Err(tokio::sync::mpsc::error::TrySendError::Full(_))
-        ));
-    }
-
-    // Regression: a full stdout frame queue must apply backpressure (block the
-    // producer until the writer drains a slot), NOT tear the sidecar down. The
-    // old `try_send` turned a slow host reader into a `BrokenPipe` error that
-    // propagated up and exited the whole sidecar process (code 1). Here a slow
-    // drainer forces the queue past capacity; with backpressure every send
-    // succeeds, and overflow only fails when the writer (receiver) is gone.
-    #[test]
-    fn stdout_frame_queue_applies_backpressure_instead_of_crashing() {
-        let queue_frame = |request_id: RequestId| {
-            ProtocolFrame::RequestFrame(request_frame(
-                request_id,
-                connection_ownership("conn-queue"),
-                RequestPayload::AuthenticateRequest(AuthenticateRequest {
-                    client_name: String::from("queue-test"),
-                    auth_token: String::from("token"),
-                    protocol_version: wire::PROTOCOL_VERSION,
-                    bridge_version: secure_exec_bridge::bridge_contract().version,
-                }),
-            ))
-        };
-
-        // Small fixed capacity (independent of the production constant) with a
-        // drainer slow enough that the queue fills and the producer is forced
-        // onto the blocking path. The old try_send path errored on the
-        // (capacity + 1)th frame; backpressure accepts all of them.
-        let queue_cap = 8usize;
-        let total_frames = queue_cap * 3;
-        let (stdout_tx, stdout_rx) =
-            tracked_sync_channel::<ProtocolFrame>(TrackedLimit::SidecarStdoutFrames, queue_cap);
-        let drainer = std::thread::spawn(move || {
-            let mut drained = 0usize;
-            while stdout_rx.recv().is_ok() {
-                drained += 1;
-                std::thread::sleep(std::time::Duration::from_millis(1));
-            }
-            drained
-        });
-
-        for request_id in 0..total_frames {
-            send_output_frame(&stdout_tx, queue_frame(request_id as RequestId))
-                .expect("backpressured stdout queue must accept frames, not crash");
-        }
-        drop(stdout_tx);
-        let drained = drainer.join().expect("drainer thread panicked");
-        assert_eq!(
-            drained, total_frames,
-            "every frame must survive the backpressured queue"
-        );
-
-        // When the writer (receiver) is gone, overflow is genuinely terminal and
-        // still surfaces as a BrokenPipe error rather than blocking forever.
-        let (closed_tx, closed_rx) =
-            tracked_sync_channel::<ProtocolFrame>(TrackedLimit::SidecarStdoutFrames, queue_cap);
-        drop(closed_rx);
-        let error = send_output_frame(&closed_tx, queue_frame(0))
-            .expect_err("send to a dropped writer must error");
-        assert_eq!(error.kind(), io::ErrorKind::BrokenPipe);
-    }
-
-    // Regression (M5): the active-session set must shrink when a session is
-    // disposed. `track_session_state` is insert-only, so the transport relies on
-    // `untrack_disposed_sessions` draining the sidecar's disposed-session signal;
-    // without it a long-lived connection's set grows per session forever and the
-    // ~250us event pump iterates every dead entry.
-    #[test]
-    fn disposed_sessions_are_untracked_from_active_sessions() {
-        let mut active_sessions = BTreeSet::<SessionScope>::new();
-        let mut active_connections = BTreeSet::<String>::new();
-        track_session_state(
-            &ResponsePayload::SessionOpenedResponse(SessionOpenedResponse {
-                session_id: String::from("session-1"),
-                owner_connection_id: String::from("conn-1"),
-            }),
-            &mut active_sessions,
-            &mut active_connections,
-        );
-        assert_eq!(
-            active_sessions.len(),
-            1,
-            "opening a session should track it for the event pump"
-        );
-
-        untrack_disposed_sessions(
-            &[(String::from("conn-1"), String::from("session-1"))],
-            &mut active_sessions,
-        );
-        assert!(
-            active_sessions.is_empty(),
-            "a disposed session must be removed from the active-session set"
-        );
-    }
-
-    #[test]
-    fn read_frame_decodes_wire_authenticate_request() {
-        let codec = WireFrameCodec::new(wire::DEFAULT_MAX_FRAME_BYTES);
-        let frame = ProtocolFrame::RequestFrame(request_frame(
-            1,
-            connection_ownership("client-hint"),
-            RequestPayload::AuthenticateRequest(AuthenticateRequest {
-                client_name: "probe".to_string(),
-                auth_token: "probe-token".to_string(),
-                protocol_version: wire::PROTOCOL_VERSION,
-                bridge_version: secure_exec_bridge::bridge_contract().version,
-            }),
-        ));
-        let encoded = codec.encode(&frame).expect("encode wire frame");
-        let mut reader = Cursor::new(encoded);
-
-        let decoded = read_frame(&codec, &mut reader)
-            .expect("decode bare frame")
-            .expect("frame present");
-
-        assert_eq!(decoded, frame);
-    }
-
-    #[test]
-    fn extension_close_interrupts_matching_blocking_request() {
-        let ownership = vm_ownership("conn-1", "session-1", "vm-1");
-        let prompt = test_extension_request_frame(10, ownership.clone(), "prompt:ext-session-1");
-        let close = ProtocolFrame::RequestFrame(test_extension_request_frame(
-            11,
-            ownership,
-            "close:ext-session-1",
-        ));
-
-        let blocking_request = blocking_extension_request(&prompt);
-        let interrupt = extension_interrupt_response(&blocking_request, &prompt, &close)
-            .expect("close should interrupt prompt");
-
-        assert_eq!(interrupt.interrupted_dispatch.response.request_id, 10);
-        let ResponsePayload::ExtEnvelope(envelope) =
-            interrupt.interrupted_dispatch.response.payload
-        else {
-            panic!("expected extension response");
-        };
-        assert_eq!(envelope.namespace, TEST_EXTENSION_NAMESPACE);
-        assert_eq!(envelope.payload, b"prompt-cancelled:ext-session-1");
-    }
-
-    #[test]
-    fn extension_cancel_interrupt_gets_synthetic_response() {
-        let ownership = vm_ownership("conn-1", "session-1", "vm-1");
-        let prompt = test_extension_request_frame(10, ownership.clone(), "prompt:ext-session-1");
-        let cancel = ProtocolFrame::RequestFrame(test_extension_request_frame(
-            11,
-            ownership,
-            "cancel:ext-session-1",
-        ));
-
-        let blocking_request = blocking_extension_request(&prompt);
-        let interrupt = extension_interrupt_response(&blocking_request, &prompt, &cancel)
-            .expect("cancel should interrupt prompt");
-        let response = interrupt
-            .interrupting_response
-            .expect("cancel should get a response");
-
-        assert_eq!(response.request_id, 11);
-        let ResponsePayload::ExtEnvelope(envelope) = response.payload else {
-            panic!("expected extension response");
-        };
-        assert_eq!(envelope.namespace, TEST_EXTENSION_NAMESPACE);
-        assert_eq!(envelope.payload, b"cancelled:ext-session-1");
-    }
-
-    #[test]
-    fn kill_process_interrupts_blocking_extension_request() {
-        let ownership = vm_ownership("conn-1", "session-1", "vm-1");
-        let prompt = test_extension_request_frame(10, ownership.clone(), "prompt:ext-session-1");
-        let kill = ProtocolFrame::RequestFrame(request_frame(
-            11,
-            ownership,
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: "adapter-process".to_string(),
-                signal: "SIGTERM".to_string(),
-            }),
-        ));
-
-        let blocking_request = blocking_extension_request(&prompt);
-        let interrupt = extension_interrupt_response(&blocking_request, &prompt, &kill)
-            .expect("kill should interrupt prompt");
-
-        assert_eq!(interrupt.interrupted_dispatch.response.request_id, 10);
-        assert!(interrupt.interrupting_response.is_none());
-    }
-
-    fn test_extension_request_frame(
-        request_id: RequestId,
-        ownership: OwnershipScope,
-        payload: &str,
-    ) -> RequestFrame {
-        request_frame(
-            request_id,
-            ownership,
-            RequestPayload::ExtEnvelope(ExtEnvelope {
-                namespace: TEST_EXTENSION_NAMESPACE.to_string(),
-                payload: payload.as_bytes().to_vec(),
-            }),
-        )
-    }
-
-    fn blocking_extension_request(request: &RequestFrame) -> BlockingExtensionRequest {
-        let RequestPayload::ExtEnvelope(envelope) = &request.payload else {
-            panic!("expected extension request");
-        };
-        BlockingExtensionRequest {
-            namespace: TEST_EXTENSION_NAMESPACE.to_string(),
-            payload: envelope.payload.clone(),
-            extension: Arc::new(TestBlockingInterruptExtension),
-        }
-    }
-
-    struct TestBlockingInterruptExtension;
-
-    impl Extension for TestBlockingInterruptExtension {
-        fn namespace(&self) -> &str {
-            TEST_EXTENSION_NAMESPACE
-        }
-
-        fn handle_request<'a>(
-            &'a self,
-            _ctx: ExtensionContext<'a>,
-            _payload: Vec<u8>,
-        ) -> ExtensionFuture<'a, ExtensionResponse> {
-            Box::pin(async { Ok(ExtensionResponse::new(Vec::new())) })
-        }
-
-        fn is_blocking_request(&self, payload: &[u8]) -> bool {
-            parse_test_payload(payload).is_some_and(|(kind, _session_id)| kind == "prompt")
-        }
-
-        fn interrupt_blocking_request(
-            &self,
-            blocking_payload: &[u8],
-            interrupt: ExtensionInterruptRequest<'_>,
-        ) -> Option<ExtensionInterruptResponse> {
-            let (blocking_kind, blocking_session_id) = parse_test_payload(blocking_payload)?;
-            if blocking_kind != "prompt" {
-                return None;
-            }
-
-            let interrupted_response_payload =
-                encode_test_response("prompt-cancelled", blocking_session_id);
-            match interrupt {
-                ExtensionInterruptRequest::KillProcess => Some(ExtensionInterruptResponse {
-                    interrupted_response_payload,
-                    interrupting_response_payload: None,
-                }),
-                ExtensionInterruptRequest::ExtensionPayload(payload) => {
-                    let (interrupt_kind, interrupt_session_id) = parse_test_payload(payload)?;
-                    match interrupt_kind {
-                        "close" if interrupt_session_id == blocking_session_id => {
-                            Some(ExtensionInterruptResponse {
-                                interrupted_response_payload,
-                                interrupting_response_payload: None,
-                            })
-                        }
-                        "cancel" if interrupt_session_id == blocking_session_id => {
-                            Some(ExtensionInterruptResponse {
-                                interrupted_response_payload,
-                                interrupting_response_payload: Some(encode_test_response(
-                                    "cancelled",
-                                    interrupt_session_id,
-                                )),
-                            })
-                        }
-                        "prompt" | "close" | "cancel" => None,
-                        _ => None,
-                    }
-                }
-            }
-        }
-    }
-
-    fn parse_test_payload(payload: &[u8]) -> Option<(&str, &str)> {
-        let payload = std::str::from_utf8(payload).ok()?;
-        payload.split_once(':')
-    }
-
-    fn encode_test_response(kind: &str, session_id: &str) -> Vec<u8> {
-        format!("{kind}:{session_id}").into_bytes()
-    }
-}
-
-#[derive(Debug, Clone)]
-pub(crate) struct LocalBridge {
-    started_at: Instant,
-    next_timer_id: usize,
-    snapshots: BTreeMap<String, FilesystemSnapshot>,
-}
-
-impl Default for LocalBridge {
-    fn default() -> Self {
-        Self {
-            started_at: Instant::now(),
-            next_timer_id: 0,
-            snapshots: BTreeMap::new(),
-        }
-    }
-}
-
-impl BridgeTypes for LocalBridge {
-    type Error = LocalBridgeError;
-}
-
-impl FilesystemBridge for LocalBridge {
-    fn read_file(&mut self, request: ReadFileRequest) -> Result<Vec<u8>, Self::Error> {
-        fs::read(Self::host_path(&request.path))
-            .map_err(|error| LocalBridgeError::io("read", &request.path, error))
-    }
-
-    fn write_file(&mut self, request: WriteFileRequest) -> Result<(), Self::Error> {
-        let host_path = Self::host_path(&request.path);
-        if let Some(parent) = host_path.parent() {
-            fs::create_dir_all(parent)
-                .map_err(|error| LocalBridgeError::io("mkdir", &request.path, error))?;
-        }
-        fs::write(host_path, request.contents)
-            .map_err(|error| LocalBridgeError::io("write", &request.path, error))
-    }
-
-    fn stat(&mut self, request: PathRequest) -> Result<FileMetadata, Self::Error> {
-        fs::metadata(Self::host_path(&request.path))
-            .map(Self::file_metadata)
-            .map_err(|error| LocalBridgeError::io("stat", &request.path, error))
-    }
-
-    fn lstat(&mut self, request: PathRequest) -> Result<FileMetadata, Self::Error> {
-        fs::symlink_metadata(Self::host_path(&request.path))
-            .map(Self::file_metadata)
-            .map_err(|error| LocalBridgeError::io("lstat", &request.path, error))
-    }
-
-    fn read_dir(&mut self, request: ReadDirRequest) -> Result<Vec<DirectoryEntry>, Self::Error> {
-        let mut entries = fs::read_dir(Self::host_path(&request.path))
-            .map_err(|error| LocalBridgeError::io("readdir", &request.path, error))?
-            .map(|entry| {
-                let entry =
-                    entry.map_err(|error| LocalBridgeError::io("readdir", &request.path, error))?;
-                let kind = entry
-                    .file_type()
-                    .map(Self::file_kind)
-                    .map_err(|error| LocalBridgeError::io("readdir", &request.path, error))?;
-                Ok(DirectoryEntry {
-                    name: entry.file_name().to_string_lossy().into_owned(),
-                    kind,
-                })
-            })
-            .collect::<Result<Vec<_>, LocalBridgeError>>()?;
-        entries.sort_by(|left, right| left.name.cmp(&right.name));
-        Ok(entries)
-    }
-
-    fn create_dir(&mut self, request: CreateDirRequest) -> Result<(), Self::Error> {
-        let host_path = Self::host_path(&request.path);
-        if request.recursive {
-            fs::create_dir_all(host_path)
-        } else {
-            fs::create_dir(host_path)
-        }
-        .map_err(|error| LocalBridgeError::io("mkdir", &request.path, error))
-    }
-
-    fn remove_file(&mut self, request: PathRequest) -> Result<(), Self::Error> {
-        fs::remove_file(Self::host_path(&request.path))
-            .map_err(|error| LocalBridgeError::io("unlink", &request.path, error))
-    }
-
-    fn remove_dir(&mut self, request: PathRequest) -> Result<(), Self::Error> {
-        fs::remove_dir(Self::host_path(&request.path))
-            .map_err(|error| LocalBridgeError::io("rmdir", &request.path, error))
-    }
-
-    fn rename(&mut self, request: RenameRequest) -> Result<(), Self::Error> {
-        let from_path = Self::host_path(&request.from_path);
-        let to_path = Self::host_path(&request.to_path);
-        if let Some(parent) = to_path.parent() {
-            fs::create_dir_all(parent)
-                .map_err(|error| LocalBridgeError::io("mkdir", &request.to_path, error))?;
-        }
-        fs::rename(from_path, to_path).map_err(|error| {
-            LocalBridgeError::unsupported(format!(
-                "rename {} -> {}: {}",
-                request.from_path, request.to_path, error
-            ))
-        })
-    }
-
-    fn symlink(&mut self, request: SymlinkRequest) -> Result<(), Self::Error> {
-        let link_path = Self::host_path(&request.link_path);
-        if let Some(parent) = link_path.parent() {
-            fs::create_dir_all(parent)
-                .map_err(|error| LocalBridgeError::io("mkdir", &request.link_path, error))?;
-        }
-        create_symlink(&request.target_path, link_path)
-            .map_err(|error| LocalBridgeError::io("symlink", &request.link_path, error))
-    }
-
-    fn read_link(&mut self, request: PathRequest) -> Result<String, Self::Error> {
-        fs::read_link(Self::host_path(&request.path))
-            .map(|target| target.to_string_lossy().into_owned())
-            .map_err(|error| LocalBridgeError::io("readlink", &request.path, error))
-    }
-
-    fn chmod(&mut self, request: ChmodRequest) -> Result<(), Self::Error> {
-        let permissions = fs::Permissions::from_mode(request.mode);
-        fs::set_permissions(Self::host_path(&request.path), permissions)
-            .map_err(|error| LocalBridgeError::io("chmod", &request.path, error))
-    }
-
-    fn truncate(&mut self, request: TruncateRequest) -> Result<(), Self::Error> {
-        OpenOptions::new()
-            .write(true)
-            .create(false)
-            .open(Self::host_path(&request.path))
-            .and_then(|file| file.set_len(request.len))
-            .map_err(|error| LocalBridgeError::io("truncate", &request.path, error))
-    }
-
-    fn exists(&mut self, request: PathRequest) -> Result<bool, Self::Error> {
-        Ok(fs::symlink_metadata(Self::host_path(&request.path)).is_ok())
-    }
-}
-
-impl PermissionBridge for LocalBridge {
-    fn check_filesystem_access(
-        &mut self,
-        request: FilesystemPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        Ok(PermissionDecision::deny(format!(
-            "no static filesystem policy registered for {}:{}",
-            request.vm_id, request.path
-        )))
-    }
-
-    fn check_network_access(
-        &mut self,
-        request: NetworkPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        Ok(PermissionDecision::deny(format!(
-            "no static network policy registered for {}:{}",
-            request.vm_id, request.resource
-        )))
-    }
-
-    fn check_command_execution(
-        &mut self,
-        request: CommandPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        Ok(PermissionDecision::deny(format!(
-            "no static child_process policy registered for {}:{}",
-            request.vm_id, request.command
-        )))
-    }
-
-    fn check_environment_access(
-        &mut self,
-        request: EnvironmentPermissionRequest,
-    ) -> Result<PermissionDecision, Self::Error> {
-        Ok(PermissionDecision::deny(format!(
-            "no static env policy registered for {}:{}",
-            request.vm_id, request.key
-        )))
-    }
-}
-
-impl PersistenceBridge for LocalBridge {
-    fn load_filesystem_state(
-        &mut self,
-        request: LoadFilesystemStateRequest,
-    ) -> Result<Option<FilesystemSnapshot>, Self::Error> {
-        Ok(self.snapshots.get(&request.vm_id).cloned())
-    }
-
-    fn flush_filesystem_state(
-        &mut self,
-        request: FlushFilesystemStateRequest,
-    ) -> Result<(), Self::Error> {
-        self.snapshots.insert(request.vm_id, request.snapshot);
-        Ok(())
-    }
-}
-
-impl ClockBridge for LocalBridge {
-    fn wall_clock(&mut self, _request: ClockRequest) -> Result<SystemTime, Self::Error> {
-        Ok(SystemTime::now())
-    }
-
-    fn monotonic_clock(&mut self, _request: ClockRequest) -> Result<Duration, Self::Error> {
-        Ok(self.started_at.elapsed())
-    }
-
-    fn schedule_timer(
-        &mut self,
-        request: ScheduleTimerRequest,
-    ) -> Result<ScheduledTimer, Self::Error> {
-        self.next_timer_id += 1;
-        Ok(ScheduledTimer {
-            timer_id: format!("timer-{}", self.next_timer_id),
-            delay: request.delay,
-        })
-    }
-}
-
-impl RandomBridge for LocalBridge {
-    fn fill_random_bytes(&mut self, request: RandomBytesRequest) -> Result<Vec<u8>, Self::Error> {
-        Ok(vec![0u8; request.len])
-    }
-}
-
-impl EventBridge for LocalBridge {
-    fn emit_structured_event(&mut self, _event: StructuredEventRecord) -> Result<(), Self::Error> {
-        Ok(())
-    }
-
-    fn emit_diagnostic(&mut self, _event: DiagnosticRecord) -> Result<(), Self::Error> {
-        Ok(())
-    }
-
-    fn emit_log(&mut self, _event: LogRecord) -> Result<(), Self::Error> {
-        Ok(())
-    }
-
-    fn emit_lifecycle(&mut self, _event: LifecycleEventRecord) -> Result<(), Self::Error> {
-        Ok(())
-    }
-}
-
-impl ExecutionBridge for LocalBridge {
-    fn create_javascript_context(
-        &mut self,
-        _request: CreateJavascriptContextRequest,
-    ) -> Result<GuestContextHandle, Self::Error> {
-        Err(LocalBridgeError::unsupported(
-            "execution bridge is handled internally by the native sidecar",
-        ))
-    }
-
-    fn create_wasm_context(
-        &mut self,
-        _request: CreateWasmContextRequest,
-    ) -> Result<GuestContextHandle, Self::Error> {
-        Err(LocalBridgeError::unsupported(
-            "execution bridge is handled internally by the native sidecar",
-        ))
-    }
-
-    fn start_execution(
-        &mut self,
-        _request: StartExecutionRequest,
-    ) -> Result<StartedExecution, Self::Error> {
-        Err(LocalBridgeError::unsupported(
-            "execution bridge is handled internally by the native sidecar",
-        ))
-    }
-
-    fn write_stdin(&mut self, _request: WriteExecutionStdinRequest) -> Result<(), Self::Error> {
-        Err(LocalBridgeError::unsupported(
-            "execution bridge is handled internally by the native sidecar",
-        ))
-    }
-
-    fn close_stdin(&mut self, _request: ExecutionHandleRequest) -> Result<(), Self::Error> {
-        Err(LocalBridgeError::unsupported(
-            "execution bridge is handled internally by the native sidecar",
-        ))
-    }
-
-    fn kill_execution(&mut self, _request: KillExecutionRequest) -> Result<(), Self::Error> {
-        Err(LocalBridgeError::unsupported(
-            "execution bridge is handled internally by the native sidecar",
-        ))
-    }
-
-    fn poll_execution_event(
-        &mut self,
-        _request: PollExecutionEventRequest,
-    ) -> Result<Option<ExecutionEvent>, Self::Error> {
-        Ok(None)
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, PartialOrd, Ord)]
-struct SessionScope {
-    connection_id: String,
-    session_id: String,
-}
-
-impl SessionScope {
-    fn ownership_scope(&self) -> OwnershipScope {
-        session_ownership(&self.connection_id, &self.session_id)
-    }
-
-    fn compat_ownership_scope(&self) -> crate::protocol::OwnershipScope {
-        wire::ownership_scope_to_compat(self.ownership_scope())
-    }
-}
-
-/// Live event sink backed by the outbound stdout channel. Writes each event as a
-/// `ProtocolFrame::EventFrame` immediately, using the same blocking
-/// backpressure semantics as the batch event path (`send_output_frame`): a full
-/// queue parks the producer until the writer thread drains stdout rather than
-/// tearing down the process.
-struct FrameEventTransport {
-    writer: TrackedSyncSender<ProtocolFrame>,
-}
-
-impl FrameEventTransport {
-    fn new(writer: TrackedSyncSender<ProtocolFrame>) -> Self {
-        Self { writer }
-    }
-}
-
-impl EventSinkTransport for FrameEventTransport {
-    fn emit_event(&self, event: crate::wire::EventFrame) -> Result<(), SidecarError> {
-        send_output_frame(&self.writer, ProtocolFrame::EventFrame(event))
-            .map_err(|error| SidecarError::Bridge(error.to_string()))
-    }
-}
-
-struct FrameSidecarRequestTransport {
-    writer: TrackedSyncSender<ProtocolFrame>,
-    pending: Arc<Mutex<BTreeMap<RequestId, mpsc::SyncSender<SidecarResponseFrame>>>>,
-}
-
-impl FrameSidecarRequestTransport {
-    fn new(writer: TrackedSyncSender<ProtocolFrame>) -> Self {
-        Self {
-            writer,
-            pending: Arc::new(Mutex::new(BTreeMap::new())),
-        }
-    }
-
-    fn accept_response(&self, response: SidecarResponseFrame) -> bool {
-        let sender = {
-            let mut pending = match self.pending.lock() {
-                Ok(pending) => pending,
-                Err(_) => return false,
-            };
-            pending.remove(&response.request_id)
-        };
-        let Some(sender) = sender else {
-            return false;
-        };
-        let _ = sender.send(response);
-        true
-    }
-}
-
-impl SidecarRequestTransport for FrameSidecarRequestTransport {
-    fn send_request(
-        &self,
-        request: crate::protocol::SidecarRequestFrame,
-        timeout: Duration,
-    ) -> Result<crate::protocol::SidecarResponseFrame, SidecarError> {
-        let request =
-            wire::sidecar_request_frame_from_compat(request).map_err(wire_protocol_error)?;
-        let (sender, receiver) = mpsc::sync_channel(1);
-        self.pending
-            .lock()
-            .map_err(|_| {
-                SidecarError::Bridge(String::from("sidecar callback waiter map lock poisoned"))
-            })?
-            .insert(request.request_id, sender);
-        // Bound the request-frame WRITE by the caller's deadline. The shared
-        // `send_output_frame` blocks (correct backpressure for the fire-and-forget
-        // event/response paths), but this request path has a `timeout` that the
-        // response wait below already honors — so a stalled host stdout must not
-        // make the *send* block past it. Poll try_send until a slot frees or the
-        // deadline passes.
-        let write_deadline = Instant::now() + timeout;
-        let mut frame = ProtocolFrame::SidecarRequestFrame(request.clone());
-        let write_result = loop {
-            match self.writer.try_send(frame) {
-                Ok(()) => break Ok(()),
-                Err(mpsc::TrySendError::Disconnected(_)) => {
-                    break Err(String::from("stdout writer disconnected"));
-                }
-                Err(mpsc::TrySendError::Full(returned)) => {
-                    if Instant::now() >= write_deadline {
-                        break Err(format!(
-                            "timed out writing sidecar request frame after {}s",
-                            timeout.as_secs()
-                        ));
-                    }
-                    frame = returned;
-                    thread::sleep(Duration::from_millis(1));
-                }
-            }
-        };
-        if let Err(message) = write_result {
-            let _ = self
-                .pending
-                .lock()
-                .map(|mut pending| pending.remove(&request.request_id));
-            return Err(SidecarError::Io(format!(
-                "failed to write sidecar request frame: {message}"
-            )));
-        }
-        match receiver.recv_timeout(timeout) {
-            Ok(response) => {
-                wire::sidecar_response_frame_to_compat(response).map_err(wire_protocol_error)
-            }
-            Err(mpsc::RecvTimeoutError::Timeout) => {
-                let _ = self
-                    .pending
-                    .lock()
-                    .map(|mut pending| pending.remove(&request.request_id));
-                Err(SidecarError::Io(format!(
-                    "timed out waiting for sidecar response after {}s",
-                    timeout.as_secs()
-                )))
-            }
-            Err(mpsc::RecvTimeoutError::Disconnected) => Err(SidecarError::Io(String::from(
-                "sidecar response waiter disconnected",
-            ))),
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub(crate) struct LocalBridgeError {
-    message: String,
-}
-
-impl LocalBridgeError {
-    fn unsupported(message: impl Into<String>) -> Self {
-        Self {
-            message: message.into(),
-        }
-    }
-
-    fn io(operation: &str, path: &str, error: io::Error) -> Self {
-        Self::unsupported(format!("{operation} {path}: {error}"))
-    }
-}
-
-impl fmt::Display for LocalBridgeError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        f.write_str(&self.message)
-    }
-}
-
-impl Error for LocalBridgeError {}
-
-impl LocalBridge {
-    fn host_path(path: &str) -> PathBuf {
-        let candidate = Path::new(path);
-        if candidate.is_absolute() {
-            candidate.to_path_buf()
-        } else {
-            std::env::current_dir()
-                .unwrap_or_else(|_| PathBuf::from("."))
-                .join(candidate)
-        }
-    }
-
-    fn file_metadata(metadata: fs::Metadata) -> FileMetadata {
-        FileMetadata {
-            mode: metadata.permissions().mode(),
-            size: metadata.size(),
-            kind: Self::file_kind(metadata.file_type()),
-        }
-    }
-
-    fn file_kind(file_type: fs::FileType) -> secure_exec_bridge::FileKind {
-        if file_type.is_file() {
-            secure_exec_bridge::FileKind::File
-        } else if file_type.is_dir() {
-            secure_exec_bridge::FileKind::Directory
-        } else if file_type.is_symlink() {
-            secure_exec_bridge::FileKind::SymbolicLink
-        } else {
-            secure_exec_bridge::FileKind::Other
-        }
-    }
-}
diff --git a/crates/sidecar/src/tools.rs b/crates/sidecar/src/tools.rs
deleted file mode 100644
index a52a02a72..000000000
--- a/crates/sidecar/src/tools.rs
+++ /dev/null
@@ -1,933 +0,0 @@
-use crate::protocol::{
-    HostCallbackRequest, HostCallbacksRegisteredResponse, RegisterHostCallbacksRequest,
-    RequestFrame, ResponsePayload,
-};
-use crate::service::{kernel_error, normalize_path, DispatchResult};
-use crate::state::{BridgeError, VmState, TOOL_DRIVER_NAME};
-use crate::{NativeSidecar, NativeSidecarBridge, SidecarError};
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_sidecar_core::permissions::{
-    allow_all_policy, deny_all_policy, evaluate_permissions_policy,
-};
-use secure_exec_sidecar_core::tools::{
-    ensure_command_aliases_available as core_ensure_command_aliases_available,
-    ensure_toolkit_name_available as core_ensure_toolkit_name_available,
-    ensure_toolkit_registry_capacity as core_ensure_toolkit_registry_capacity,
-    registered_tool_command_names,
-    validate_toolkit_registration as core_validate_toolkit_registration, ToolRegistrationError,
-    DEFAULT_TOOL_TIMEOUT_MS,
-};
-#[cfg(test)]
-#[allow(unused_imports)]
-pub(crate) use secure_exec_sidecar_core::tools::{
-    MAX_REGISTERED_TOOLKITS, MAX_REGISTERED_TOOLS_PER_VM, MAX_TOOLS_PER_TOOLKIT,
-    MAX_TOOL_DESCRIPTION_LENGTH, MAX_TOOL_EXAMPLES_PER_TOOL, MAX_TOOL_EXAMPLE_INPUT_BYTES,
-    MAX_TOOL_SCHEMA_BYTES, MAX_TOOL_SCHEMA_DEPTH, MAX_TOOL_TIMEOUT_MS,
-};
-use secure_exec_vm_config::PermissionMode;
-use serde_json::{json, Map, Number, Value};
-use std::collections::{BTreeMap, BTreeSet};
-use std::fmt;
-use std::path::Path;
-use std::time::{Duration, SystemTime, UNIX_EPOCH};
-
-#[derive(Debug)]
-pub(crate) enum ToolCommandResolution {
-    Invoke {
-        request: HostCallbackRequest,
-        timeout: Duration,
-    },
-    Failure(String),
-}
-
-pub(crate) fn format_tool_failure_output(message: &str) -> Vec<u8> {
-    let mut output = message.as_bytes().to_vec();
-    if !output.ends_with(b"\n") {
-        output.push(b'\n');
-    }
-    output
-}
-
-pub(crate) fn register_host_callbacks<B>(
-    sidecar: &mut NativeSidecar<B>,
-    request: &RequestFrame,
-    payload: RegisterHostCallbacksRequest,
-) -> Result<DispatchResult, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    let (connection_id, session_id, vm_id) = sidecar.vm_scope_for(&request.ownership)?;
-    sidecar.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-    validate_toolkit_registration(&payload)?;
-
-    let registered_name = payload.name.clone();
-    let (original_permissions, original_toolkits, original_command_guest_paths) = {
-        let vm = sidecar.vms.get(&vm_id).expect("owned VM should exist");
-        (
-            vm.configuration.permissions.clone(),
-            vm.toolkits.clone(),
-            vm.command_guest_paths.clone(),
-        )
-    };
-    sidecar
-        .bridge
-        .set_vm_permissions(&vm_id, &allow_all_policy())?;
-    let registration_result = (|| -> Result<_, SidecarError> {
-        let vm = sidecar.vms.get_mut(&vm_id).expect("owned VM should exist");
-        ensure_toolkit_name_available(&vm.toolkits, &registered_name)?;
-        ensure_command_aliases_available(&vm.toolkits, &payload)?;
-        ensure_toolkit_registry_capacity(&vm.toolkits, &payload)?;
-        vm.toolkits.insert(registered_name.clone(), payload);
-        refresh_tool_registry(vm)?;
-        Ok::<_, SidecarError>(tool_command_names(vm).len() as u32)
-    })();
-    let command_count = match registration_result {
-        Ok(result) => {
-            sidecar
-                .bridge
-                .set_vm_permissions(&vm_id, &original_permissions)?;
-            result
-        }
-        Err(error) => {
-            let vm = sidecar.vms.get_mut(&vm_id).expect("owned VM should exist");
-            vm.toolkits = original_toolkits;
-            vm.command_guest_paths = original_command_guest_paths;
-            match sidecar.bridge.restore_vm_permissions_fail_closed(
-                &vm_id,
-                &original_permissions,
-                "toolkit registration rollback",
-                &error,
-            ) {
-                Ok(()) => return Err(error),
-                Err(rollback_error) => {
-                    vm.configuration.permissions = deny_all_policy();
-                    return Err(rollback_error);
-                }
-            }
-        }
-    };
-
-    Ok(DispatchResult {
-        response: sidecar.respond(
-            request,
-            ResponsePayload::HostCallbacksRegistered(HostCallbacksRegisteredResponse {
-                registration: registered_name,
-                command_count,
-            }),
-        ),
-        events: Vec::new(),
-    })
-}
-
-fn refresh_tool_registry(vm: &mut VmState) -> Result<(), SidecarError> {
-    let commands = tool_command_names(vm);
-    vm.kernel
-        .register_driver(CommandDriver::new(
-            TOOL_DRIVER_NAME,
-            commands.iter().cloned(),
-        ))
-        .map_err(kernel_error)?;
-
-    for command in commands {
-        vm.command_guest_paths
-            .insert(command.clone(), format!("/bin/{command}"));
-    }
-    Ok(())
-}
-
-pub(crate) fn resolve_tool_command(
-    vm: &mut VmState,
-    command: &str,
-    args: &[String],
-    cwd: Option<&str>,
-) -> Result<Option<ToolCommandResolution>, SidecarError> {
-    let Some(kind) = identify_tool_command(vm, command) else {
-        return Ok(None);
-    };
-    let guest_cwd = cwd
-        .map(normalize_path)
-        .unwrap_or_else(|| vm.guest_cwd.clone());
-    let resolution = match kind {
-        ToolCommand::Registry(command_name) => {
-            resolve_registry_command(vm, &command_name, args, &guest_cwd)?
-        }
-        ToolCommand::Toolkit { toolkit_name } => {
-            resolve_toolkit_command(vm, &toolkit_name, args, &guest_cwd)?
-        }
-    };
-    Ok(Some(resolution))
-}
-
-pub(crate) fn is_tool_command(vm: &VmState, command: &str) -> bool {
-    identify_tool_command(vm, command).is_some()
-}
-
-pub(crate) fn normalized_tool_command_name(command: &str) -> Option<String> {
-    tool_command_name_from_specifier(command).map(ToOwned::to_owned)
-}
-
-fn identify_tool_command(vm: &VmState, command: &str) -> Option<ToolCommand> {
-    let command_name = tool_command_name_from_specifier(command).unwrap_or(command);
-
-    if vm.toolkits.values().any(|toolkit| {
-        toolkit
-            .registry_command_aliases
-            .iter()
-            .any(|alias| alias == command_name)
-    }) {
-        return Some(ToolCommand::Registry(command_name.to_owned()));
-    }
-
-    vm.toolkits
-        .iter()
-        .find(|(_toolkit_name, toolkit)| {
-            toolkit
-                .command_aliases
-                .iter()
-                .any(|alias| alias == command_name)
-        })
-        .map(|(toolkit_name, _toolkit)| ToolCommand::Toolkit {
-            toolkit_name: toolkit_name.to_owned(),
-        })
-}
-
-fn tool_command_name_from_specifier(command: &str) -> Option<&str> {
-    let file_name = Path::new(command).file_name()?.to_str()?;
-    let normalized = normalize_path(command);
-    let registered_internal_path = normalized
-        .strip_prefix("/__secure_exec/commands/")
-        .and_then(|suffix| suffix.rsplit('/').next())
-        .is_some_and(|name| name == file_name);
-    if !matches!(
-        normalized.as_str(),
-        path if path == format!("/bin/{file_name}")
-            || path == format!("/usr/bin/{file_name}")
-            || path == format!("/usr/local/bin/{file_name}")
-    ) && !registered_internal_path
-    {
-        return None;
-    }
-    Some(file_name)
-}
-
-fn resolve_registry_command(
-    vm: &mut VmState,
-    command_name: &str,
-    args: &[String],
-    guest_cwd: &str,
-) -> Result<ToolCommandResolution, SidecarError> {
-    let timeout_ms =
-        command_callback_timeout_ms(vm, &ToolCommand::Registry(command_name.to_owned()));
-    Ok(build_command_callback_resolution(
-        command_name,
-        build_registry_command_input(command_name, args, guest_cwd),
-        timeout_ms,
-    ))
-}
-
-fn resolve_toolkit_command(
-    vm: &mut VmState,
-    toolkit_name: &str,
-    args: &[String],
-    _guest_cwd: &str,
-) -> Result<ToolCommandResolution, SidecarError> {
-    let Some((tool_name, tool_args)) = args.split_first() else {
-        return Ok(ToolCommandResolution::Failure(format!(
-            "toolkit command {toolkit_name} requires a tool name"
-        )));
-    };
-    let callback_key = format!("{toolkit_name}:{tool_name}");
-    let Some(tool) = vm
-        .toolkits
-        .get(toolkit_name)
-        .and_then(|toolkit| toolkit.callbacks.get(tool_name))
-        .cloned()
-    else {
-        return Ok(ToolCommandResolution::Failure(format!(
-            "unknown tool callback {callback_key}"
-        )));
-    };
-    if !matches!(
-        evaluate_permissions_policy(
-            &vm.configuration.permissions,
-            "binding",
-            "binding.invoke",
-            Some(&callback_key),
-        ),
-        PermissionMode::Allow
-    ) {
-        return Ok(ToolCommandResolution::Failure(format!(
-            "blocked by binding.invoke policy for {callback_key}"
-        )));
-    }
-
-    let input_schema: Value = serde_json::from_str(&tool.input_schema).map_err(|error| {
-        SidecarError::InvalidState(format!(
-            "tool {callback_key} input schema is not valid JSON: {error}"
-        ))
-    })?;
-    let input = match parse_toolkit_command_input(vm, &input_schema, tool_args) {
-        Ok(input) => input,
-        Err(message) => return Ok(ToolCommandResolution::Failure(message)),
-    };
-    if let Err(message) = validate_tool_input_schema(&input_schema, &input) {
-        return Ok(ToolCommandResolution::Failure(message));
-    }
-    let timeout_ms = tool.timeout_ms.unwrap_or(DEFAULT_TOOL_TIMEOUT_MS);
-
-    Ok(build_command_callback_resolution(
-        &callback_key,
-        input,
-        timeout_ms,
-    ))
-}
-
-fn build_command_callback_resolution(
-    command_name: &str,
-    input: Value,
-    timeout_ms: u64,
-) -> ToolCommandResolution {
-    let nonce = SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .unwrap_or_default()
-        .as_nanos();
-
-    ToolCommandResolution::Invoke {
-        request: HostCallbackRequest {
-            invocation_id: format!("{command_name}:{nonce}"),
-            callback_key: command_name.to_owned(),
-            input: input.to_string(),
-            timeout_ms,
-        },
-        timeout: Duration::from_millis(timeout_ms),
-    }
-}
-
-fn build_registry_command_input(command_name: &str, args: &[String], guest_cwd: &str) -> Value {
-    json!({
-        "type": "command",
-        "command": command_name,
-        "args": args,
-        "cwd": guest_cwd,
-    })
-}
-
-fn parse_toolkit_command_input(
-    vm: &mut VmState,
-    schema: &Value,
-    args: &[String],
-) -> Result<Value, String> {
-    match args {
-        [] => Ok(Value::Object(Map::new())),
-        [flag, raw] if flag == "--json" => {
-            serde_json::from_str(raw).map_err(|error| format!("invalid --json tool input: {error}"))
-        }
-        [flag, path] if flag == "--json-file" => {
-            let bytes = vm
-                .kernel
-                .read_file(path)
-                .map_err(|error| format!("failed to read --json-file {path}: {error}"))?;
-            let raw = String::from_utf8(bytes)
-                .map_err(|error| format!("invalid UTF-8 in --json-file {path}: {error}"))?;
-            serde_json::from_str(&raw)
-                .map_err(|error| format!("invalid JSON in --json-file {path}: {error}"))
-        }
-        _ => parse_toolkit_command_flags(schema, args),
-    }
-}
-
-fn parse_toolkit_command_flags(schema: &Value, args: &[String]) -> Result<Value, String> {
-    let Some(schema_object) = schema.as_object() else {
-        return Ok(json!({ "args": args }));
-    };
-    if schema_object.get("type").and_then(Value::as_str) != Some("object") {
-        return Ok(json!({ "args": args }));
-    }
-    let Some(properties) = schema_object.get("properties").and_then(Value::as_object) else {
-        return Ok(json!({ "args": args }));
-    };
-
-    let required = schema_object
-        .get("required")
-        .and_then(Value::as_array)
-        .map(|required| {
-            required
-                .iter()
-                .filter_map(Value::as_str)
-                .collect::<BTreeSet<_>>()
-        })
-        .unwrap_or_default();
-    let flag_to_field = properties
-        .iter()
-        .map(|(field_name, field_schema)| (camel_to_kebab(field_name), (field_name, field_schema)))
-        .collect::<BTreeMap<_, _>>();
-
-    let mut input = Map::new();
-    let mut index = 0;
-    while index < args.len() {
-        let arg = &args[index];
-        let Some(raw_flag) = arg.strip_prefix("--") else {
-            return Err(format!("Unexpected positional argument: \"{arg}\""));
-        };
-        let (negated, flag_name) = raw_flag
-            .strip_prefix("no-")
-            .map_or((false, raw_flag), |name| (true, name));
-        let Some((field_name, field_schema)) = flag_to_field.get(flag_name) else {
-            return Err(format!("Unknown flag: --{raw_flag}"));
-        };
-        let field_type = json_schema_type(field_schema);
-
-        if negated {
-            if field_type != Some("boolean") {
-                return Err(format!("Unknown flag: --{raw_flag}"));
-            }
-            input.insert((*field_name).clone(), Value::Bool(false));
-            index += 1;
-            continue;
-        }
-
-        if field_type == Some("boolean") {
-            input.insert((*field_name).clone(), Value::Bool(true));
-            index += 1;
-            continue;
-        }
-
-        let Some(value) = args.get(index + 1) else {
-            return Err(format!("Flag --{raw_flag} requires a value"));
-        };
-        let parsed_value = parse_tool_flag_value(raw_flag, field_schema, value)?;
-        if field_type == Some("array") {
-            let entry = input
-                .entry((*field_name).clone())
-                .or_insert_with(|| Value::Array(Vec::new()));
-            let Some(values) = entry.as_array_mut() else {
-                return Err(format!("Flag --{raw_flag} cannot be repeated"));
-            };
-            values.push(parsed_value);
-        } else {
-            input.insert((*field_name).clone(), parsed_value);
-        }
-        index += 2;
-    }
-
-    for field_name in required {
-        if !input.contains_key(field_name) {
-            return Err(format!(
-                "Missing required flag: --{}",
-                camel_to_kebab(field_name)
-            ));
-        }
-    }
-
-    Ok(Value::Object(input))
-}
-
-fn parse_tool_flag_value(
-    raw_flag: &str,
-    field_schema: &Value,
-    value: &str,
-) -> Result<Value, String> {
-    let item_schema = field_schema
-        .get("items")
-        .filter(|_| json_schema_type(field_schema) == Some("array"))
-        .unwrap_or(field_schema);
-    match json_schema_type(item_schema) {
-        Some("integer") => {
-            let number = value
-                .parse::<i64>()
-                .map_err(|_| format!("Flag --{raw_flag} expects an integer, got \"{value}\""))?;
-            Ok(Value::Number(Number::from(number)))
-        }
-        Some("number") => {
-            let number = value
-                .parse::<f64>()
-                .map_err(|_| format!("Flag --{raw_flag} expects a number, got \"{value}\""))?;
-            Number::from_f64(number).map(Value::Number).ok_or_else(|| {
-                format!("Flag --{raw_flag} expects a finite number, got \"{value}\"")
-            })
-        }
-        Some("boolean") => match value {
-            "true" => Ok(Value::Bool(true)),
-            "false" => Ok(Value::Bool(false)),
-            _ => Err(format!(
-                "Flag --{raw_flag} expects a boolean, got \"{value}\""
-            )),
-        },
-        _ => Ok(Value::String(value.to_owned())),
-    }
-}
-
-fn json_schema_type(schema: &Value) -> Option<&str> {
-    schema.get("type").and_then(Value::as_str)
-}
-
-fn camel_to_kebab(value: &str) -> String {
-    let mut output = String::with_capacity(value.len());
-    for (index, ch) in value.chars().enumerate() {
-        if ch.is_ascii_uppercase() {
-            if index > 0 {
-                output.push('-');
-            }
-            output.push(ch.to_ascii_lowercase());
-        } else {
-            output.push(ch);
-        }
-    }
-    output
-}
-
-fn validate_tool_input_schema(schema: &Value, input: &Value) -> Result<(), String> {
-    let Some(schema_object) = schema.as_object() else {
-        return Ok(());
-    };
-    if schema_object.get("type").and_then(Value::as_str) != Some("object") {
-        return Ok(());
-    }
-    let Some(input_object) = input.as_object() else {
-        return Err(String::from(
-            "ToolInputSchemaViolation at $: expected object",
-        ));
-    };
-
-    if let Some(required) = schema_object.get("required").and_then(Value::as_array) {
-        for name in required.iter().filter_map(Value::as_str) {
-            if !input_object.contains_key(name) {
-                return Err(format!(
-                    "ToolInputSchemaViolation at $.{name}: missing required property"
-                ));
-            }
-        }
-    }
-
-    let properties = schema_object
-        .get("properties")
-        .and_then(Value::as_object)
-        .cloned()
-        .unwrap_or_default();
-    for (name, property_schema) in &properties {
-        if let Some(value) = input_object.get(name) {
-            validate_tool_input_value_type(value, property_schema, &format!("$.{name}"))?;
-        }
-    }
-    if schema_object
-        .get("additionalProperties")
-        .and_then(Value::as_bool)
-        == Some(false)
-    {
-        for name in input_object.keys() {
-            if !properties.contains_key(name) {
-                return Err(format!(
-                    "ToolInputSchemaViolation at $.{name}: unexpected property"
-                ));
-            }
-        }
-    }
-
-    Ok(())
-}
-
-fn validate_tool_input_value_type(value: &Value, schema: &Value, path: &str) -> Result<(), String> {
-    let Some(expected) = schema.get("type").and_then(Value::as_str) else {
-        return Ok(());
-    };
-    let matches = match expected {
-        "array" => value.is_array(),
-        "boolean" => value.is_boolean(),
-        "integer" => value.as_i64().is_some() || value.as_u64().is_some(),
-        "number" => value.is_number(),
-        "object" => value.is_object(),
-        "string" => value.is_string(),
-        _ => true,
-    };
-    if matches {
-        Ok(())
-    } else {
-        Err(format!(
-            "ToolInputSchemaViolation at {path}: expected {expected}"
-        ))
-    }
-}
-
-fn command_callback_timeout_ms(vm: &VmState, kind: &ToolCommand) -> u64 {
-    let callbacks = match kind {
-        ToolCommand::Registry(command_name) => vm
-            .toolkits
-            .values()
-            .filter(|toolkit| {
-                toolkit
-                    .registry_command_aliases
-                    .iter()
-                    .any(|alias| alias == command_name)
-            })
-            .flat_map(|toolkit| toolkit.callbacks.values())
-            .collect::<Vec<_>>(),
-        ToolCommand::Toolkit { toolkit_name, .. } => vm
-            .toolkits
-            .get(toolkit_name)
-            .map(|toolkit| toolkit.callbacks.values().collect::<Vec<_>>())
-            .unwrap_or_default(),
-    };
-
-    callbacks
-        .into_iter()
-        .filter_map(|callback| callback.timeout_ms)
-        .max()
-        .unwrap_or(DEFAULT_TOOL_TIMEOUT_MS)
-}
-
-fn ensure_toolkit_name_available(
-    toolkits: &BTreeMap<String, RegisterHostCallbacksRequest>,
-    toolkit_name: &str,
-) -> Result<(), SidecarError> {
-    core_ensure_toolkit_name_available(toolkits, toolkit_name).map_err(tool_registration_error)
-}
-
-fn ensure_command_aliases_available(
-    toolkits: &BTreeMap<String, RegisterHostCallbacksRequest>,
-    payload: &RegisterHostCallbacksRequest,
-) -> Result<(), SidecarError> {
-    core_ensure_command_aliases_available(toolkits, payload).map_err(tool_registration_error)
-}
-
-fn ensure_toolkit_registry_capacity(
-    toolkits: &BTreeMap<String, RegisterHostCallbacksRequest>,
-    payload: &RegisterHostCallbacksRequest,
-) -> Result<(), SidecarError> {
-    core_ensure_toolkit_registry_capacity(toolkits, payload).map_err(tool_registration_error)
-}
-
-fn tool_command_names(vm: &VmState) -> Vec<String> {
-    registered_tool_command_names(&vm.toolkits)
-}
-
-fn validate_toolkit_registration(
-    payload: &RegisterHostCallbacksRequest,
-) -> Result<(), SidecarError> {
-    core_validate_toolkit_registration(payload).map_err(tool_registration_error)
-}
-
-fn tool_registration_error(error: ToolRegistrationError) -> SidecarError {
-    match error {
-        ToolRegistrationError::InvalidState(message) => SidecarError::InvalidState(message),
-        ToolRegistrationError::Conflict(message) => SidecarError::Conflict(message),
-    }
-}
-
-enum ToolCommand {
-    Registry(String),
-    Toolkit { toolkit_name: String },
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use crate::protocol::RegisteredHostCallbackDefinition;
-    use std::collections::BTreeMap;
-
-    fn screenshot_schema() -> Value {
-        json!({
-            "type": "object",
-            "properties": {
-                "url": { "type": "string" },
-                "fullPage": { "type": "boolean" },
-                "width": { "type": "number" },
-                "format": { "type": "string", "enum": ["png", "jpg"] },
-                "tags": { "type": "array", "items": { "type": "string" } }
-            },
-            "required": ["url"]
-        })
-    }
-
-    fn registered_tool(description: String) -> RegisteredHostCallbackDefinition {
-        RegisteredHostCallbackDefinition {
-            description,
-            input_schema: screenshot_schema().to_string(),
-            timeout_ms: None,
-            examples: Vec::new(),
-        }
-    }
-
-    fn toolkit_with_descriptions(
-        toolkit_description: String,
-        tool_description: String,
-    ) -> RegisterHostCallbacksRequest {
-        toolkit_with_schema(
-            String::from("browser"),
-            toolkit_description,
-            String::from("screenshot"),
-            tool_description,
-            screenshot_schema(),
-        )
-    }
-
-    fn toolkit_with_schema(
-        toolkit_name: String,
-        toolkit_description: String,
-        tool_name: String,
-        tool_description: String,
-        input_schema: Value,
-    ) -> RegisterHostCallbacksRequest {
-        RegisterHostCallbacksRequest {
-            name: toolkit_name.clone(),
-            description: toolkit_description,
-            command_aliases: vec![format!("agentos-{toolkit_name}")],
-            registry_command_aliases: vec![String::from("agentos")],
-            callbacks: std::collections::HashMap::from([(
-                tool_name,
-                RegisteredHostCallbackDefinition {
-                    description: tool_description,
-                    input_schema: input_schema.to_string(),
-                    timeout_ms: None,
-                    examples: Vec::new(),
-                },
-            )]),
-        }
-    }
-
-    #[test]
-    fn accepts_toolkit_and_tool_descriptions_at_length_limit() {
-        let description = "a".repeat(MAX_TOOL_DESCRIPTION_LENGTH);
-        let payload = toolkit_with_descriptions(description.clone(), description);
-
-        validate_toolkit_registration(&payload).expect("description at limit should pass");
-    }
-
-    #[test]
-    fn rejects_toolkit_registration_over_shape_limits() {
-        let too_many_tools = RegisterHostCallbacksRequest {
-            name: String::from("browser"),
-            description: String::from("Browser automation"),
-            command_aliases: vec![String::from("agentos-browser")],
-            registry_command_aliases: vec![String::from("agentos")],
-            callbacks: (0..=MAX_TOOLS_PER_TOOLKIT)
-                .map(|index| {
-                    (
-                        format!("tool-{index}"),
-                        registered_tool(String::from("Run a bounded test tool")),
-                    )
-                })
-                .collect(),
-        };
-        assert!(validate_toolkit_registration(&too_many_tools)
-            .expect_err("toolkit should reject too many tools")
-            .to_string()
-            .contains("max is 64"));
-
-        let mut long_timeout = toolkit_with_descriptions(
-            String::from("Browser automation"),
-            String::from("Take a screenshot"),
-        );
-        long_timeout
-            .callbacks
-            .get_mut("screenshot")
-            .expect("test tool")
-            .timeout_ms = Some(MAX_TOOL_TIMEOUT_MS + 1);
-        assert!(validate_toolkit_registration(&long_timeout)
-            .expect_err("toolkit should reject long timeouts")
-            .to_string()
-            .contains("timeout is"));
-
-        let mut too_many_examples = toolkit_with_descriptions(
-            String::from("Browser automation"),
-            String::from("Take a screenshot"),
-        );
-        too_many_examples
-            .callbacks
-            .get_mut("screenshot")
-            .expect("test tool")
-            .examples = (0..=MAX_TOOL_EXAMPLES_PER_TOOL)
-            .map(|index| crate::protocol::RegisteredHostCallbackExample {
-                description: format!("example {index}"),
-                input: json!({ "url": "https://example.com" }).to_string(),
-            })
-            .collect();
-        assert!(validate_toolkit_registration(&too_many_examples)
-            .expect_err("toolkit should reject too many examples")
-            .to_string()
-            .contains("examples"));
-    }
-
-    #[test]
-    fn validates_host_callback_command_aliases() {
-        let mut payload = toolkit_with_descriptions(
-            String::from("Browser automation"),
-            String::from("Take a screenshot"),
-        );
-        payload.command_aliases = vec![String::from("agentos-browser"), String::from("bad/path")];
-        assert!(validate_toolkit_registration(&payload)
-            .expect_err("slashes should be rejected")
-            .to_string()
-            .contains("invalid host callback command alias"));
-
-        payload.command_aliases = vec![String::from("agentos-browser")];
-        payload.registry_command_aliases = vec![String::from("agentos-browser")];
-        assert!(validate_toolkit_registration(&payload)
-            .expect_err("ambiguous aliases should be rejected")
-            .to_string()
-            .contains("must not also be a registry command alias"));
-
-        payload.registry_command_aliases = vec![String::from("agentos")];
-        validate_toolkit_registration(&payload).expect("distinct aliases should pass");
-
-        let existing = BTreeMap::from([(String::from("browser"), payload.clone())]);
-        let mut next = toolkit_with_schema(
-            String::from("files"),
-            String::from("File utilities"),
-            String::from("read"),
-            String::from("Read a file"),
-            screenshot_schema(),
-        );
-        next.command_aliases = vec![String::from("agentos-browser")];
-        assert!(ensure_command_aliases_available(&existing, &next)
-            .expect_err("direct command aliases should be unique")
-            .to_string()
-            .contains("already registered"));
-
-        next.command_aliases = vec![String::from("agentos-files")];
-        next.registry_command_aliases = vec![String::from("agentos")];
-        ensure_command_aliases_available(&existing, &next).expect("registry aliases can be shared");
-    }
-
-    #[test]
-    fn parses_toolkit_command_flags_from_schema() {
-        let input = parse_toolkit_command_flags(
-            &screenshot_schema(),
-            &[
-                String::from("--url"),
-                String::from("https://example.com"),
-                String::from("--full-page"),
-                String::from("--width"),
-                String::from("320"),
-                String::from("--tags"),
-                String::from("smoke"),
-                String::from("--tags"),
-                String::from("full"),
-            ],
-        )
-        .expect("parse flags");
-
-        assert_eq!(
-            input,
-            json!({
-                "url": "https://example.com",
-                "fullPage": true,
-                "width": 320.0,
-                "tags": ["smoke", "full"],
-            })
-        );
-    }
-
-    #[test]
-    fn parse_toolkit_command_flags_reports_missing_required_flags() {
-        let error = parse_toolkit_command_flags(&screenshot_schema(), &[])
-            .expect_err("missing required flag");
-
-        assert_eq!(error, "Missing required flag: --url");
-    }
-
-    #[test]
-    fn rejects_toolkit_registration_with_oversized_schema_or_example_input() {
-        let mut deep_schema = Value::Null;
-        for _ in 0..=MAX_TOOL_SCHEMA_DEPTH {
-            deep_schema = json!({ "items": deep_schema });
-        }
-        let deep_schema_payload = toolkit_with_schema(
-            String::from("browser"),
-            String::from("Browser automation"),
-            String::from("screenshot"),
-            String::from("Take a screenshot"),
-            deep_schema,
-        );
-        assert!(validate_toolkit_registration(&deep_schema_payload)
-            .expect_err("toolkit should reject deep schemas")
-            .to_string()
-            .contains("max JSON depth"));
-
-        let mut oversized_schema_payload = toolkit_with_schema(
-            String::from("browser"),
-            String::from("Browser automation"),
-            String::from("screenshot"),
-            String::from("Take a screenshot"),
-            json!({ "description": "a".repeat(MAX_TOOL_SCHEMA_BYTES) }),
-        );
-        assert!(validate_toolkit_registration(&oversized_schema_payload)
-            .expect_err("toolkit should reject oversized schemas")
-            .to_string()
-            .contains("input schema is"));
-
-        oversized_schema_payload
-            .callbacks
-            .get_mut("screenshot")
-            .expect("test tool")
-            .input_schema = screenshot_schema().to_string();
-        let oversized_example_input = crate::protocol::RegisteredHostCallbackExample {
-            description: String::from("large example"),
-            input: json!({ "payload": "a".repeat(MAX_TOOL_EXAMPLE_INPUT_BYTES) }).to_string(),
-        };
-        oversized_schema_payload
-            .callbacks
-            .get_mut("screenshot")
-            .expect("test tool")
-            .examples = vec![oversized_example_input];
-        assert!(validate_toolkit_registration(&oversized_schema_payload)
-            .expect_err("toolkit should reject oversized example inputs")
-            .to_string()
-            .contains("example 0 input is"));
-    }
-
-    #[test]
-    fn rejects_toolkit_description_longer_than_limit() {
-        let payload = toolkit_with_descriptions(
-            "a".repeat(MAX_TOOL_DESCRIPTION_LENGTH + 1),
-            String::from("Take a screenshot"),
-        );
-
-        let error = validate_toolkit_registration(&payload).expect_err("long toolkit rejected");
-        assert_eq!(
-            error.to_string(),
-            format!(
-                "Toolkit \"browser\" description is {} characters, max is {}",
-                MAX_TOOL_DESCRIPTION_LENGTH + 1,
-                MAX_TOOL_DESCRIPTION_LENGTH
-            )
-        );
-    }
-
-    #[test]
-    fn rejects_tool_description_longer_than_limit() {
-        let payload = toolkit_with_descriptions(
-            String::from("Browser automation"),
-            "a".repeat(MAX_TOOL_DESCRIPTION_LENGTH + 1),
-        );
-
-        let error = validate_toolkit_registration(&payload).expect_err("long tool rejected");
-        assert_eq!(
-            error.to_string(),
-            format!(
-                "Tool \"browser/screenshot\" description is {} characters, max is {}",
-                MAX_TOOL_DESCRIPTION_LENGTH + 1,
-                MAX_TOOL_DESCRIPTION_LENGTH
-            )
-        );
-    }
-
-    #[test]
-    fn tools_reject_duplicate_toolkit_registration() {
-        let toolkits = BTreeMap::from([(
-            String::from("browser"),
-            toolkit_with_descriptions(
-                String::from("Browser automation"),
-                String::from("Take a screenshot"),
-            ),
-        )]);
-
-        let error =
-            ensure_toolkit_name_available(&toolkits, "browser").expect_err("duplicate rejected");
-        assert_eq!(
-            error,
-            SidecarError::Conflict(String::from("toolkit already registered: browser"))
-        );
-    }
-}
diff --git a/crates/sidecar/src/vm.rs b/crates/sidecar/src/vm.rs
deleted file mode 100644
index 438144444..000000000
--- a/crates/sidecar/src/vm.rs
+++ /dev/null
@@ -1,2494 +0,0 @@
-//! VM lifecycle functions: create, configure, dispose, bootstrap, snapshot.
-//!
-//! Extracted from service.rs as part of the service.rs split (Step 0a).
-//! Contains VM lifecycle methods on NativeSidecar<B> and associated helpers.
-
-use crate::bootstrap::{
-    apply_root_filesystem_entry, discover_command_guest_paths, root_snapshot_entries,
-    root_snapshot_entry, root_snapshot_from_entries,
-};
-use crate::bridge::{bridge_permissions, MountPluginContext};
-use crate::protocol::{
-    AgentosProjectedAgent, ConfigureVmRequest, CreateLayerRequest, CreateOverlayRequest,
-    DisposeReason, EventFrame, ExportSnapshotRequest, ImportSnapshotRequest, LinkPackageRequest,
-    MountDescriptor, MountPluginDescriptor, PackageCommands, ProjectedCommand,
-    ProvidedCommandsRequest, RootFilesystemDescriptor, RootFilesystemEntry,
-    RootFilesystemEntryEncoding, RootFilesystemLowerDescriptor, SealLayerRequest,
-    SnapshotRootFilesystemRequest, VmLifecycleState,
-};
-use crate::service::{
-    audit_fields, dirname, emit_security_audit_event, emit_structured_event, kernel_error,
-    normalize_path, plugin_error, root_filesystem_error, validate_permissions_policy, vfs_error,
-};
-use crate::state::{
-    BridgeError, KernelSocketReadinessEvent, KernelSocketReadinessRegistry,
-    KernelSocketReadinessTarget, VmConfiguration, VmDnsConfig, VmListenPolicy, VmState,
-    DISPOSE_VM_SIGKILL_GRACE, DISPOSE_VM_SIGTERM_GRACE, EXECUTION_DRIVER_NAME, JAVASCRIPT_COMMAND,
-    PYTHON_COMMAND, WASM_COMMAND,
-};
-use crate::{DispatchResult, NativeSidecar, NativeSidecarBridge, SidecarError};
-
-use base64::Engine;
-use secure_exec_bridge::{
-    FilesystemSnapshot, FlushFilesystemStateRequest, LifecycleState, LoadFilesystemStateRequest,
-};
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig};
-use secure_exec_kernel::mount_plugin::OpenFileSystemPluginRequest;
-use secure_exec_kernel::mount_table::{MountOptions, MountTable, MountedFileSystem};
-use secure_exec_kernel::permissions::filter_env;
-use secure_exec_kernel::resource_accounting::ResourceLimits;
-use secure_exec_kernel::root_fs::{
-    decode_snapshot_with_import_limits, encode_snapshot as encode_root_snapshot,
-    is_supported_root_filesystem_snapshot_format, FilesystemEntryKind as KernelFilesystemEntryKind,
-    RootFilesystemImportLimits, ROOT_FILESYSTEM_SNAPSHOT_FORMAT,
-};
-use secure_exec_kernel::socket_table::{SocketReadiness, SocketReadinessKind};
-use secure_exec_sidecar_core::permissions::{allow_all_policy, deny_all_policy};
-use secure_exec_sidecar_core::{
-    layer_created_response, layer_sealed_response, overlay_created_response,
-    package_linked_response, protocol_root_filesystem_mode, provided_commands_response,
-    root_filesystem_bootstrapped_response, root_filesystem_protocol_descriptor_from_config,
-    root_filesystem_snapshot_response, snapshot_exported_response, snapshot_imported_response,
-    vm_configured_response, vm_created_response, vm_disposed_response, VmLayerStore,
-};
-use secure_exec_vm_config as vm_config;
-use std::collections::{BTreeMap, BTreeSet, VecDeque};
-use std::fmt;
-use std::fs;
-use std::net::{IpAddr, SocketAddr};
-use std::os::unix::fs::PermissionsExt;
-use std::path::{Path, PathBuf};
-use std::sync::{Arc, Mutex};
-use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
-
-const SHADOW_ROOT_BOOTSTRAP_DIRS: &[(&str, u32)] = &[
-    ("/dev", 0o755),
-    ("/proc", 0o755),
-    ("/tmp", 0o1777),
-    ("/bin", 0o755),
-    ("/lib", 0o755),
-    ("/sbin", 0o755),
-    ("/boot", 0o755),
-    ("/etc", 0o755),
-    ("/root", 0o755),
-    ("/run", 0o755),
-    ("/srv", 0o755),
-    ("/sys", 0o755),
-    ("/opt", 0o755),
-    ("/mnt", 0o755),
-    ("/media", 0o755),
-    ("/home", 0o755),
-    ("/home/agentos", 0o755),
-    ("/usr", 0o755),
-    ("/usr/bin", 0o755),
-    ("/usr/games", 0o755),
-    ("/usr/include", 0o755),
-    ("/usr/lib", 0o755),
-    ("/usr/libexec", 0o755),
-    ("/usr/man", 0o755),
-    ("/usr/local", 0o755),
-    ("/usr/local/bin", 0o755),
-    ("/usr/sbin", 0o755),
-    ("/usr/share", 0o755),
-    ("/usr/share/man", 0o755),
-    ("/var", 0o755),
-    ("/var/cache", 0o755),
-    ("/var/empty", 0o755),
-    ("/var/lib", 0o755),
-    ("/var/lock", 0o755),
-    ("/var/log", 0o755),
-    ("/var/run", 0o755),
-    ("/var/spool", 0o755),
-    ("/var/tmp", 0o1777),
-    ("/etc/agentos", 0o755),
-    // Non-Alpine default agent working directory (also present in the base
-    // filesystem snapshot); scaffold it here so it exists even when the
-    // default base layer is disabled. It is the default cwd and mount root,
-    // kept separate from $HOME (/home/agentos).
-    ("/workspace", 0o755),
-];
-
-fn send_kernel_socket_readiness_event(
-    target: KernelSocketReadinessTarget,
-    readiness: SocketReadiness,
-) {
-    let event = match (target.event, readiness.kind) {
-        (KernelSocketReadinessEvent::Accept, SocketReadinessKind::Accept) => "accept",
-        (KernelSocketReadinessEvent::Data, SocketReadinessKind::Data) => "data",
-        (KernelSocketReadinessEvent::Datagram, SocketReadinessKind::Data) => "dgram",
-        _ => return,
-    };
-    let payload = match target.event {
-        KernelSocketReadinessEvent::Accept => {
-            secure_exec_execution::v8_runtime::json_to_cbor_payload(&serde_json::json!({
-                "serverId": target.target_id,
-                "event": event,
-            }))
-        }
-        KernelSocketReadinessEvent::Data | KernelSocketReadinessEvent::Datagram => {
-            secure_exec_execution::v8_runtime::json_to_cbor_payload(&serde_json::json!({
-                "socketId": target.target_id,
-                "event": event,
-            }))
-        }
-    }
-    .unwrap_or_default();
-    let _ = target.session.send_stream_event("net_socket", payload);
-}
-
-pub(crate) const DEFAULT_GUEST_PATH_ENV: &str =
-    "/usr/local/sbin:/usr/local/bin:/opt/agentos/bin:/usr/sbin:/usr/bin:/sbin:/bin";
-#[cfg(test)]
-const KERNEL_COMMAND_STUB: &[u8] = b"#!/bin/sh\n# kernel command stub\n";
-
-fn projected_command_guest_path(command: &str) -> String {
-    format!("{}/{command}", crate::package_projection::OPT_AGENTOS_BIN)
-}
-
-fn projected_commands_from_guest_paths(
-    command_guest_paths: &BTreeMap<String, String>,
-) -> Vec<ProjectedCommand> {
-    command_guest_paths
-        .iter()
-        .filter(|(_, guest_path)| {
-            guest_path.starts_with(crate::package_projection::OPT_AGENTOS_BIN)
-        })
-        .map(|(name, guest_path)| ProjectedCommand {
-            name: name.clone(),
-            guest_path: guest_path.clone(),
-        })
-        .collect()
-}
-// ---------------------------------------------------------------------------
-// NativeSidecar VM lifecycle methods
-// ---------------------------------------------------------------------------
-
-impl<B> NativeSidecar<B>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    pub(crate) async fn create_vm(
-        &mut self,
-        request: &crate::protocol::RequestFrame,
-        payload: crate::protocol::CreateVmRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let __t = Instant::now();
-        let (connection_id, session_id) = self.session_scope_for(&request.ownership)?;
-        self.require_owned_session(&connection_id, &session_id)?;
-        let create_config: vm_config::CreateVmConfig = serde_json::from_str(&payload.config)
-            .map_err(|error| {
-                SidecarError::InvalidState(format!("invalid create VM config JSON: {error}"))
-            })?;
-        create_config
-            .validate(self.config.max_frame_bytes)
-            .map_err(|error| {
-                SidecarError::InvalidState(format!("invalid create VM config: {error}"))
-            })?;
-        let root_filesystem =
-            root_filesystem_protocol_descriptor_from_config(&create_config.root_filesystem);
-        let permissions_policy = create_config
-            .permissions
-            .clone()
-            .unwrap_or_else(deny_all_policy);
-        validate_permissions_policy(&permissions_policy)?;
-
-        self.next_vm_id += 1;
-        let vm_id = format!("vm-{}", self.next_vm_id);
-        let cwd = create_vm_shadow_root(&vm_id)?;
-        let (guest_cwd, host_cwd) = resolve_vm_cwds(create_config.cwd.as_ref(), &cwd)?;
-        fs::create_dir_all(&host_cwd)
-            .map_err(|error| SidecarError::Io(format!("failed to create VM cwd: {error}")))?;
-        let limits = crate::limits::vm_limits_from_config(
-            create_config.limits.as_ref(),
-            self.config.max_frame_bytes,
-        )?;
-        let resource_limits = limits.resources.clone();
-        let dns = vm_dns_config_from_config(create_config.dns.as_ref())?;
-        let listen_policy = vm_listen_policy_from_config(create_config.listen.as_ref())?;
-        let create_loopback_exempt_ports: BTreeSet<u16> = create_config
-            .loopback_exempt_ports
-            .iter()
-            .copied()
-            .collect();
-        self.bridge
-            .set_vm_permissions(&vm_id, &permissions_policy)?;
-        let permissions = bridge_permissions(self.bridge.clone(), &vm_id);
-        let mut guest_env = filter_env(&vm_id, &create_config.env, &permissions);
-        // Sidecar-owned bootstrap work still needs to reconcile command stubs and the root
-        // filesystem before the guest-visible policy takes effect.
-        self.bridge
-            .set_vm_permissions(&vm_id, &allow_all_policy())?;
-        let native_root = native_root_plugin_from_config(create_config.native_root.as_ref())?;
-        let loaded_snapshot = if native_root.is_some() {
-            None
-        } else {
-            self.bridge.with_mut(|bridge| {
-                bridge.load_filesystem_state(LoadFilesystemStateRequest {
-                    vm_id: vm_id.clone(),
-                })
-            })?
-        };
-        if native_root.is_none() {
-            materialize_shadow_root_snapshot_entries(
-                &cwd,
-                &root_filesystem,
-                loaded_snapshot.as_ref(),
-                &resource_limits,
-            )?;
-        }
-
-        let mut config = KernelVmConfig::new(vm_id.clone());
-        config.cwd = guest_cwd.clone();
-        config.env = guest_env.clone();
-        config.permissions = permissions;
-        config.dns = secure_exec_kernel::dns::DnsConfig {
-            name_servers: dns.name_servers.clone(),
-            overrides: dns.overrides.clone(),
-        };
-        config.loopback_exempt_ports = create_loopback_exempt_ports.clone();
-        let root_mount_table = if let Some(native_root) = native_root.as_ref() {
-            build_native_root_mount_table(
-                &self.mount_plugins,
-                native_root,
-                &root_filesystem,
-                MountPluginContext {
-                    bridge: self.bridge.clone(),
-                    connection_id: connection_id.clone(),
-                    session_id: session_id.clone(),
-                    vm_id: vm_id.clone(),
-                    sidecar_requests: self.sidecar_requests.clone(),
-                    max_pread_bytes: resource_limits.max_pread_bytes,
-                },
-            )?
-        } else {
-            secure_exec_sidecar_core::build_root_mount_table_with_loaded_snapshot(
-                &create_config.root_filesystem,
-                loaded_snapshot.as_ref(),
-                &resource_limits,
-            )
-            .map_err(|error| SidecarError::InvalidState(error.to_string()))?
-        };
-        config.resources = resource_limits;
-        let mut kernel = KernelVm::new(root_mount_table, config);
-        let kernel_socket_readiness: KernelSocketReadinessRegistry =
-            Arc::new(Mutex::new(BTreeMap::new()));
-        let readiness_targets = Arc::clone(&kernel_socket_readiness);
-        kernel.set_socket_readiness_sink(Some(move |readiness: SocketReadiness| {
-            let target = readiness_targets
-                .lock()
-                .ok()
-                .and_then(|targets| targets.get(&readiness.socket_id).cloned());
-            if let Some(target) = target {
-                send_kernel_socket_readiness_event(target, readiness);
-            }
-        }));
-        let command_guest_paths = discover_command_guest_paths(&mut kernel);
-        refresh_guest_command_path_env(&mut guest_env, &command_guest_paths);
-        let mut execution_commands = vec![
-            String::from(JAVASCRIPT_COMMAND),
-            String::from(PYTHON_COMMAND),
-            // `python3` resolves to the same Pyodide runtime; register it so the
-            // guest shell can find `/bin/python3` on PATH (the command resolver
-            // already rewrites the alias to `python`).
-            String::from("python3"),
-            String::from(WASM_COMMAND),
-        ];
-        if let Some(bootstrap_commands) = &create_config.bootstrap_commands {
-            execution_commands.extend(bootstrap_commands.iter().cloned());
-        }
-        execution_commands.extend(command_guest_paths.keys().cloned());
-        kernel
-            .register_driver(CommandDriver::new(
-                EXECUTION_DRIVER_NAME,
-                execution_commands,
-            ))
-            .map_err(kernel_error)?;
-        if let Some(root) = kernel.root_filesystem_mut() {
-            root.finish_bootstrap();
-        }
-        self.bridge
-            .set_vm_permissions(&vm_id, &permissions_policy)?;
-
-        self.bridge
-            .emit_lifecycle(&vm_id, LifecycleState::Starting)?;
-        self.bridge.emit_lifecycle(&vm_id, LifecycleState::Ready)?;
-        self.bridge.emit_log(
-            &vm_id,
-            format!("created VM {vm_id} for session {session_id}"),
-        )?;
-
-        self.sessions
-            .get_mut(&session_id)
-            .expect("owned session should exist")
-            .vm_ids
-            .insert(vm_id.clone());
-        self.vms.insert(
-            vm_id.clone(),
-            VmState {
-                connection_id: connection_id.clone(),
-                session_id: session_id.clone(),
-                limits,
-                dns,
-                listen_policy,
-                create_loopback_exempt_ports,
-                guest_env,
-                requested_runtime: payload.runtime,
-                root_filesystem_mode: protocol_root_filesystem_mode(root_filesystem.mode),
-                guest_cwd,
-                cwd,
-                host_cwd,
-                kernel,
-                kernel_socket_readiness,
-                loaded_snapshot,
-                configuration: VmConfiguration {
-                    permissions: permissions_policy,
-                    js_runtime: create_config.js_runtime.clone(),
-                    ..VmConfiguration::default()
-                },
-                layers: VmLayerStore::default(),
-                command_guest_paths,
-                provided_commands: BTreeMap::new(),
-                command_permissions: BTreeMap::new(),
-                toolkits: BTreeMap::new(),
-                active_processes: BTreeMap::new(),
-                exited_process_snapshots: VecDeque::new(),
-                detached_child_processes: BTreeSet::new(),
-                signal_states: BTreeMap::new(),
-                packages_staging_root: None,
-            },
-        );
-
-        let events = vec![
-            self.vm_lifecycle_event(
-                &connection_id,
-                &session_id,
-                &vm_id,
-                VmLifecycleState::Creating,
-            ),
-            self.vm_lifecycle_event(&connection_id, &session_id, &vm_id, VmLifecycleState::Ready),
-        ];
-
-        tracing::info!(target: "secure_exec_sidecar::perf", phase = "create_vm", elapsed_ms = __t.elapsed().as_millis() as u64, "vm phase");
-        Ok(DispatchResult {
-            response: vm_created_response(request, vm_id),
-            events,
-        })
-    }
-
-    pub(crate) async fn dispose_vm(
-        &mut self,
-        request: &crate::protocol::RequestFrame,
-        payload: crate::protocol::DisposeVmRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        let events = self
-            .dispose_vm_internal(&connection_id, &session_id, &vm_id, payload.reason)
-            .await?;
-
-        Ok(DispatchResult {
-            response: vm_disposed_response(request, vm_id),
-            events,
-        })
-    }
-
-    pub(crate) async fn bootstrap_root_filesystem(
-        &mut self,
-        request: &crate::protocol::RequestFrame,
-        entries: Vec<RootFilesystemEntry>,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self.vms.get_mut(&vm_id).expect("owned VM should exist");
-        let root = vm.kernel.root_filesystem_mut().ok_or_else(|| {
-            SidecarError::InvalidState(String::from("VM root filesystem is unavailable"))
-        })?;
-        for entry in &entries {
-            apply_root_filesystem_entry(root, entry)?;
-        }
-
-        Ok(DispatchResult {
-            response: root_filesystem_bootstrapped_response(request, entries.len() as u32),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn configure_vm(
-        &mut self,
-        request: &crate::protocol::RequestFrame,
-        payload: ConfigureVmRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let __t = Instant::now();
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let mount_plugins = &self.mount_plugins;
-        let bridge = self.bridge.clone();
-        let vm = self.vms.get_mut(&vm_id).expect("owned VM should exist");
-        let max_pread_bytes = vm.kernel.resource_limits().max_pread_bytes;
-        let original_permissions = vm.configuration.permissions.clone();
-        let configured_permissions = payload
-            .permissions
-            .clone()
-            .map(crate::wire::permissions_policy_config_from_wire)
-            .unwrap_or_else(|| original_permissions.clone());
-        validate_permissions_policy(&configured_permissions)?;
-        bridge.set_vm_permissions(&vm_id, &allow_all_policy())?;
-        let mut effective_mounts = payload.mounts.clone();
-        append_module_access_mount(&mut effective_mounts, payload.module_access_cwd.as_ref())?;
-        let package_descriptors = package_descriptors_from_wire(&payload.packages)?;
-        let mut provided_commands: BTreeMap<String, Vec<String>> = BTreeMap::new();
-        for descriptor in &package_descriptors {
-            provided_commands.insert(
-                descriptor.name.clone(),
-                descriptor
-                    .commands
-                    .iter()
-                    .map(|target| target.command.clone())
-                    .collect(),
-            );
-        }
-        let snapshot_userland_code = resolve_agent_snapshot_bundle(&package_descriptors)?;
-        let package_mounts =
-            build_packages_projection(&vm_id, &package_descriptors, &payload.packages_mount_at)?;
-        effective_mounts.extend(package_mounts);
-        apply_package_provides_env(&mut vm.guest_env, &package_descriptors);
-        append_package_provides_mounts(&mut effective_mounts, &package_descriptors)?;
-        let reconfigure_result = reconcile_mounts(
-            mount_plugins,
-            vm,
-            &effective_mounts,
-            MountPluginContext {
-                bridge: bridge.clone(),
-                connection_id: connection_id.clone(),
-                session_id: session_id.clone(),
-                vm_id: vm_id.clone(),
-                sidecar_requests: self.sidecar_requests.clone(),
-                max_pread_bytes,
-            },
-        )
-        .and_then(|()| {
-            vm.command_guest_paths = discover_command_guest_paths(&mut vm.kernel);
-            // The `{ packageDir }` projection lands each package's `bin/<cmd>` at
-            // `/opt/agentos/bin/<cmd>` (on `$PATH`) but does NOT populate
-            // `/__secure_exec/commands`, so `discover_command_guest_paths` alone misses
-            // projected commands and every projected wasm/js command resolves to
-            // ENOEXEC (absolute path) / ENOENT (bare name). Register each projected
-            // command by name -> its `/opt/agentos/bin/<cmd>` entrypoint so both the
-            // kernel command table (via `execution_commands` below) and the sidecar
-            // entrypoint resolver (`resolve_guest_command_entrypoint`) can find it.
-            for commands in provided_commands.values() {
-                for command in commands {
-                    let entrypoint =
-                        format!("{}/{command}", crate::package_projection::OPT_AGENTOS_BIN);
-                    vm.command_guest_paths
-                        .entry(command.clone())
-                        .or_insert(entrypoint);
-                }
-            }
-            refresh_guest_command_path_env(&mut vm.guest_env, &vm.command_guest_paths);
-            let mut execution_commands =
-                vec![String::from(JAVASCRIPT_COMMAND), String::from(WASM_COMMAND)];
-            execution_commands.extend(payload.bootstrap_commands.iter().cloned());
-            execution_commands.extend(payload.tool_shim_commands.iter().cloned());
-            execution_commands.extend(vm.command_guest_paths.keys().cloned());
-            vm.kernel
-                .register_driver(CommandDriver::new(
-                    EXECUTION_DRIVER_NAME,
-                    execution_commands,
-                ))
-                .map_err(kernel_error)?;
-            vm.command_permissions = payload.command_permissions.clone().into_iter().collect();
-            let mut loopback_exempt_ports = vm.create_loopback_exempt_ports.clone();
-            loopback_exempt_ports.extend(payload.loopback_exempt_ports.iter().copied());
-            vm.kernel.set_loopback_exempt_ports(loopback_exempt_ports);
-            vm.configuration = VmConfiguration {
-                mounts: effective_mounts.clone(),
-                software: payload.software.clone(),
-                permissions: configured_permissions.clone(),
-                module_access_cwd: payload.module_access_cwd.clone(),
-                instructions: payload.instructions.clone(),
-                projected_modules: payload.projected_modules.clone(),
-                command_permissions: payload.command_permissions.clone().into_iter().collect(),
-                provided_commands: provided_commands.clone(),
-                // jsRuntime is create-time only; preserve what create_vm stored.
-                js_runtime: vm.configuration.js_runtime.clone(),
-                snapshot_userland_code: snapshot_userland_code.clone(),
-                loopback_exempt_ports: payload.loopback_exempt_ports.clone(),
-            };
-            vm.provided_commands = provided_commands;
-            Ok(())
-        });
-        match reconfigure_result {
-            Ok(()) => {
-                bridge.set_vm_permissions(&vm_id, &configured_permissions)?;
-            }
-            Err(error) => {
-                match bridge.restore_vm_permissions_fail_closed(
-                    &vm_id,
-                    &original_permissions,
-                    "configure_vm rollback",
-                    &error,
-                ) {
-                    Ok(()) => return Err(error),
-                    Err(rollback_error) => {
-                        self.vms
-                            .get_mut(&vm_id)
-                            .expect("owned VM should exist")
-                            .configuration
-                            .permissions = deny_all_policy();
-                        return Err(rollback_error);
-                    }
-                }
-            }
-        }
-
-        let applied_mounts = effective_mounts.len() as u32;
-        let configured_software = payload.software.len() as u32;
-        let projected_commands = projected_commands_from_guest_paths(&vm.command_guest_paths);
-        let agents = projected_agents_from_descriptors(&package_descriptors);
-        let _ = vm;
-        // Pre-warm the agent-SDK snapshot when a configured package opts in with
-        // `agent.snapshot`. The sidecar reads the bundle from the host package dir
-        // it already projects, so the first session is warm without shipping the
-        // source over the client wire.
-        if let Some(userland) = snapshot_userland_code {
-            let _ = tokio::task::spawn_blocking(move || {
-                if let Err(error) =
-                    secure_exec_execution::v8_host::pre_warm_agent_snapshot(&userland)
-                {
-                    eprintln!("agent snapshot pre-warm failed: {error}");
-                }
-            })
-            .await;
-        }
-
-        tracing::info!(target: "secure_exec_sidecar::perf", phase = "configure_vm", elapsed_ms = __t.elapsed().as_millis() as u64, applied_mounts = applied_mounts as u64, "vm phase");
-        Ok(DispatchResult {
-            response: vm_configured_response(
-                request,
-                applied_mounts,
-                configured_software,
-                projected_commands,
-                agents,
-            ),
-            events: Vec::new(),
-        })
-    }
-
-    /// Runtime dynamic `linkSoftware`: add one package's tar/current/bin leaf
-    /// mounts to the live VM so commands appear under `/opt/agentos/bin`
-    /// immediately, with no reboot. Returns the linked command names.
-    pub(crate) async fn link_package(
-        &mut self,
-        request: &crate::protocol::RequestFrame,
-        payload: LinkPackageRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self.vms.get_mut(&vm_id).expect("owned VM should exist");
-        let descriptor = crate::package_projection::read_package_manifest_from_ref(
-            payload.package.dir.as_deref(),
-            payload.package.tar.as_deref(),
-        )?;
-        let new_mounts = build_packages_projection(
-            &vm_id,
-            std::slice::from_ref(&descriptor),
-            crate::package_projection::OPT_AGENTOS_ROOT,
-        )?;
-        for mount in &new_mounts {
-            if vm
-                .configuration
-                .mounts
-                .iter()
-                .any(|existing| existing.guest_path == mount.guest_path)
-            {
-                return Err(SidecarError::InvalidState(format!(
-                    "agentos package mount already exists at {}",
-                    mount.guest_path
-                )));
-            }
-        }
-        let mount_context = MountPluginContext {
-            bridge: self.bridge.clone(),
-            connection_id: connection_id.clone(),
-            session_id: session_id.clone(),
-            vm_id: vm_id.clone(),
-            sidecar_requests: self.sidecar_requests.clone(),
-            max_pread_bytes: vm.kernel.resource_limits().max_pread_bytes,
-        };
-        mount_leaf_descriptors(&self.mount_plugins, vm, &new_mounts, mount_context)?;
-        vm.configuration.mounts.extend(new_mounts);
-
-        let commands = descriptor
-            .commands
-            .iter()
-            .map(|target| target.command.clone())
-            .collect::<Vec<_>>();
-        vm.provided_commands
-            .insert(descriptor.name.clone(), commands.clone());
-        vm.configuration
-            .provided_commands
-            .insert(descriptor.name.clone(), commands.clone());
-        for command in &commands {
-            let entrypoint = projected_command_guest_path(command);
-            vm.command_guest_paths
-                .entry(command.clone())
-                .or_insert(entrypoint);
-        }
-        refresh_guest_command_path_env(&mut vm.guest_env, &vm.command_guest_paths);
-        let mut execution_commands =
-            vec![String::from(JAVASCRIPT_COMMAND), String::from(WASM_COMMAND)];
-        execution_commands.extend(vm.command_guest_paths.keys().cloned());
-        vm.kernel
-            .register_driver(CommandDriver::new(
-                EXECUTION_DRIVER_NAME,
-                execution_commands,
-            ))
-            .map_err(kernel_error)?;
-        let projected_commands = commands
-            .iter()
-            .map(|command| ProjectedCommand {
-                name: command.clone(),
-                guest_path: projected_command_guest_path(command),
-            })
-            .collect();
-        let agents = projected_agents_from_descriptors(std::slice::from_ref(&descriptor));
-
-        Ok(DispatchResult {
-            response: package_linked_response(request, projected_commands, agents),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn provided_commands(
-        &mut self,
-        request: &crate::protocol::RequestFrame,
-        _payload: ProvidedCommandsRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let packages = self
-            .vms
-            .get(&vm_id)
-            .map(|vm| {
-                vm.provided_commands
-                    .iter()
-                    .map(|(package_name, commands)| PackageCommands {
-                        package_name: package_name.clone(),
-                        commands: commands.clone(),
-                    })
-                    .collect()
-            })
-            .unwrap_or_default();
-
-        Ok(DispatchResult {
-            response: provided_commands_response(request, packages),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn create_layer(
-        &mut self,
-        request: &crate::protocol::RequestFrame,
-        _payload: CreateLayerRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self.vms.get_mut(&vm_id).expect("owned VM should exist");
-        let layer_id = vm
-            .layers
-            .create_writable_layer()
-            .map_err(sidecar_core_error)?;
-
-        Ok(DispatchResult {
-            response: layer_created_response(request, layer_id),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn seal_layer(
-        &mut self,
-        request: &crate::protocol::RequestFrame,
-        payload: SealLayerRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self.vms.get_mut(&vm_id).expect("owned VM should exist");
-        let layer_id = vm
-            .layers
-            .seal_layer(&payload.layer_id)
-            .map_err(sidecar_core_error)?;
-
-        Ok(DispatchResult {
-            response: layer_sealed_response(request, layer_id),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn import_snapshot(
-        &mut self,
-        request: &crate::protocol::RequestFrame,
-        payload: ImportSnapshotRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self.vms.get_mut(&vm_id).expect("owned VM should exist");
-        let layer_id = vm
-            .layers
-            .import_snapshot(root_snapshot_from_entries(&payload.entries)?)
-            .map_err(sidecar_core_error)?;
-
-        Ok(DispatchResult {
-            response: snapshot_imported_response(request, layer_id),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn export_snapshot(
-        &mut self,
-        request: &crate::protocol::RequestFrame,
-        payload: ExportSnapshotRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self.vms.get_mut(&vm_id).expect("owned VM should exist");
-        let snapshot = vm
-            .layers
-            .export_snapshot(&payload.layer_id)
-            .map_err(sidecar_core_error)?;
-
-        Ok(DispatchResult {
-            response: snapshot_exported_response(
-                request,
-                payload.layer_id,
-                root_snapshot_entries(&snapshot),
-            ),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn create_overlay(
-        &mut self,
-        request: &crate::protocol::RequestFrame,
-        payload: CreateOverlayRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self.vms.get_mut(&vm_id).expect("owned VM should exist");
-        let layer_id = vm
-            .layers
-            .create_overlay_layer(
-                protocol_root_filesystem_mode(payload.mode),
-                payload.upper_layer_id,
-                payload.lower_layer_ids,
-            )
-            .map_err(sidecar_core_error)?;
-
-        Ok(DispatchResult {
-            response: overlay_created_response(request, layer_id),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn snapshot_root_filesystem(
-        &mut self,
-        request: &crate::protocol::RequestFrame,
-        _payload: SnapshotRootFilesystemRequest,
-    ) -> Result<DispatchResult, SidecarError> {
-        let (connection_id, session_id, vm_id) = self.vm_scope_for(&request.ownership)?;
-        self.require_owned_vm(&connection_id, &session_id, &vm_id)?;
-
-        let vm = self.vms.get_mut(&vm_id).expect("owned VM should exist");
-        let snapshot = vm.kernel.snapshot_root_filesystem().map_err(kernel_error)?;
-
-        Ok(DispatchResult {
-            response: root_filesystem_snapshot_response(
-                request,
-                snapshot.entries.iter().map(root_snapshot_entry).collect(),
-            ),
-            events: Vec::new(),
-        })
-    }
-
-    pub(crate) async fn dispose_vm_internal(
-        &mut self,
-        connection_id: &str,
-        session_id: &str,
-        vm_id: &str,
-        _reason: DisposeReason,
-    ) -> Result<Vec<EventFrame>, SidecarError> {
-        self.require_owned_vm(connection_id, session_id, vm_id)?;
-
-        let mut events = vec![self.vm_lifecycle_event(
-            connection_id,
-            session_id,
-            vm_id,
-            VmLifecycleState::Disposing,
-        )];
-        // Process termination needs the VM live in `self.vms` (it looks up and
-        // signals the VM's active processes). Capture its result but keep tearing
-        // down: a process that refuses to die must not strand the VM's tracking
-        // entries for the process lifetime.
-        let terminate_result = self.terminate_vm_processes(vm_id, &mut events).await;
-
-        // Detach the VM from `self.vms` BEFORE the remaining fallible teardown so
-        // no `?` below can leave the registry entry (or any per-VM map) behind.
-        let mut vm = self
-            .vms
-            .remove(vm_id)
-            .expect("owned VM should exist before disposal");
-
-        // `continue_on_error = true` => `shutdown_configured_mounts` never returns
-        // `Err` on the dispose path (it logs and presses on), so its result is
-        // intentionally discarded rather than `?`-ed.
-        let mount_context = MountPluginContext {
-            bridge: self.bridge.clone(),
-            connection_id: connection_id.to_owned(),
-            session_id: session_id.to_owned(),
-            vm_id: vm_id.to_owned(),
-            sidecar_requests: self.sidecar_requests.clone(),
-            max_pread_bytes: vm.kernel.resource_limits().max_pread_bytes,
-        };
-        let _ = shutdown_configured_mounts(&mut vm, &mount_context, "dispose_vm", true);
-
-        // Snapshot/flush/kernel-dispose/permission-reset can each fail; run them
-        // in a helper whose result is captured so cleanup below is unconditional.
-        let teardown_result = self.finish_vm_teardown(vm_id, &mut vm).await;
-
-        // Reclaim EVERY per-VM tracking entry on EVERY exit path — even when a
-        // teardown step above errored. Pre-fix these ran only after the fallible
-        // steps' `?`, so any failure stranded the engine/extension maps (H1) and
-        // the output-buffer map was never reclaimed at all (M6).
-        self.reclaim_vm_tracking(session_id, vm_id);
-        let _ = fs::remove_dir_all(&vm.cwd);
-        if let Some(staging_root) = vm.packages_staging_root.take() {
-            let _ = fs::remove_dir_all(&staging_root);
-        }
-
-        // Surface the first failure only AFTER cleanup has completed.
-        terminate_result?;
-        teardown_result?;
-
-        events.push(self.vm_lifecycle_event(
-            connection_id,
-            session_id,
-            vm_id,
-            VmLifecycleState::Disposed,
-        ));
-        Ok(events)
-    }
-
-    /// Run the fallible second half of VM disposal (root-filesystem snapshot +
-    /// flush, lifecycle event, kernel dispose, permission reset) against a VM
-    /// that has already been detached from `self.vms`. Kept separate so its
-    /// `?`-propagated errors are captured by the caller and the per-VM tracking
-    /// maps are still reclaimed afterward.
-    async fn finish_vm_teardown(
-        &mut self,
-        vm_id: &str,
-        vm: &mut VmState,
-    ) -> Result<(), SidecarError> {
-        let snapshot = if vm.kernel.root_filesystem_mut().is_some() {
-            Some(FilesystemSnapshot {
-                format: String::from(ROOT_FILESYSTEM_SNAPSHOT_FORMAT),
-                bytes: encode_root_snapshot(
-                    &vm.kernel.snapshot_root_filesystem().map_err(kernel_error)?,
-                )
-                .map_err(root_filesystem_error)?,
-            })
-        } else {
-            None
-        };
-
-        self.bridge
-            .emit_lifecycle(vm_id, LifecycleState::Terminated)?;
-        vm.kernel.dispose().map_err(kernel_error)?;
-        if let Some(snapshot) = snapshot {
-            self.bridge.with_mut(|bridge| {
-                bridge.flush_filesystem_state(FlushFilesystemStateRequest {
-                    vm_id: vm_id.to_owned(),
-                    snapshot,
-                })
-            })?;
-        }
-        self.bridge.clear_vm_permissions(vm_id)?;
-        Ok(())
-    }
-
-    pub(crate) async fn terminate_vm_processes(
-        &mut self,
-        vm_id: &str,
-        events: &mut Vec<EventFrame>,
-    ) -> Result<(), SidecarError> {
-        let process_ids = self
-            .vms
-            .get(vm_id)
-            .map(|vm| vm.active_processes.keys().cloned().collect::<Vec<_>>())
-            .unwrap_or_default();
-        if process_ids.is_empty() {
-            return Ok(());
-        }
-
-        for process_id in process_ids {
-            if self
-                .vms
-                .get(vm_id)
-                .is_some_and(|vm| vm.active_processes.contains_key(&process_id))
-            {
-                self.kill_process_internal(vm_id, &process_id, "SIGTERM")?;
-            }
-        }
-        self.wait_for_vm_processes_to_exit(vm_id, DISPOSE_VM_SIGTERM_GRACE, events)
-            .await?;
-
-        if !self.vm_has_active_processes(vm_id) {
-            return Ok(());
-        }
-
-        let remaining = self
-            .vms
-            .get(vm_id)
-            .map(|vm| vm.active_processes.keys().cloned().collect::<Vec<_>>())
-            .unwrap_or_default();
-        for process_id in remaining {
-            if self
-                .vms
-                .get(vm_id)
-                .is_some_and(|vm| vm.active_processes.contains_key(&process_id))
-            {
-                self.kill_process_internal(vm_id, &process_id, "SIGKILL")?;
-            }
-        }
-        self.wait_for_vm_processes_to_exit(vm_id, DISPOSE_VM_SIGKILL_GRACE, events)
-            .await?;
-
-        if self.vm_has_active_processes(vm_id) {
-            return Err(SidecarError::Execution(format!(
-                "failed to terminate active guest executions for VM {vm_id}"
-            )));
-        }
-
-        Ok(())
-    }
-
-    pub(crate) async fn wait_for_vm_processes_to_exit(
-        &mut self,
-        vm_id: &str,
-        timeout: Duration,
-        events: &mut Vec<EventFrame>,
-    ) -> Result<(), SidecarError> {
-        let ownership = self.vm_ownership(vm_id)?;
-        let deadline = Instant::now() + timeout;
-
-        while self.vm_has_active_processes(vm_id) && Instant::now() < deadline {
-            let remaining = deadline.saturating_duration_since(Instant::now());
-            if let Some(event) = self
-                .poll_event(&ownership, remaining.min(Duration::from_millis(10)))
-                .await?
-            {
-                events.push(event);
-            }
-        }
-
-        Ok(())
-    }
-}
-
-// ---------------------------------------------------------------------------
-// Free functions — VM lifecycle helpers
-// ---------------------------------------------------------------------------
-
-fn native_root_plugin_from_config(
-    config: Option<&vm_config::NativeRootFilesystemConfig>,
-) -> Result<Option<NativeRootPluginConfig>, SidecarError> {
-    let Some(config) = config else {
-        return Ok(None);
-    };
-    let plugin_config = serde_json::to_string(&config.plugin.config).map_err(|error| {
-        SidecarError::InvalidState(format!(
-            "failed to serialize nativeRoot.plugin.config: {error}"
-        ))
-    })?;
-    Ok(Some(NativeRootPluginConfig {
-        plugin: MountPluginDescriptor {
-            id: config.plugin.id.clone(),
-            config: plugin_config,
-        },
-        read_only: config.read_only,
-    }))
-}
-
-fn vm_dns_config_from_config(
-    config: Option<&vm_config::VmDnsConfig>,
-) -> Result<VmDnsConfig, SidecarError> {
-    let Some(config) = config else {
-        return Ok(VmDnsConfig::default());
-    };
-    let name_servers = config
-        .name_servers
-        .iter()
-        .map(|entry| parse_vm_dns_nameserver(entry))
-        .collect::<Result<Vec<_>, _>>()?;
-    let mut overrides = BTreeMap::new();
-    for (hostname, addresses) in &config.overrides {
-        let normalized_hostname = normalize_dns_hostname(hostname)?;
-        let parsed_addresses = addresses
-            .iter()
-            .map(|entry| {
-                entry.parse::<IpAddr>().map_err(|error| {
-                    SidecarError::InvalidState(format!(
-                        "invalid DNS override {hostname}={entry}: {error}"
-                    ))
-                })
-            })
-            .collect::<Result<Vec<_>, _>>()?;
-        overrides.insert(normalized_hostname, parsed_addresses);
-    }
-    Ok(VmDnsConfig {
-        name_servers,
-        overrides,
-    })
-}
-
-fn vm_listen_policy_from_config(
-    config: Option<&vm_config::VmListenPolicyConfig>,
-) -> Result<VmListenPolicy, SidecarError> {
-    let mut policy = VmListenPolicy::default();
-    let Some(config) = config else {
-        return Ok(policy);
-    };
-    if let Some(port_min) = config.port_min {
-        policy.port_min = port_min;
-    }
-    if let Some(port_max) = config.port_max {
-        policy.port_max = port_max;
-    }
-    if policy.port_min > policy.port_max {
-        return Err(SidecarError::InvalidState(format!(
-            "invalid listen port range {} exceeds {}",
-            policy.port_min, policy.port_max
-        )));
-    }
-    if let Some(allow_privileged) = config.allow_privileged {
-        policy.allow_privileged = allow_privileged;
-    }
-    Ok(policy)
-}
-
-#[derive(Debug, Clone)]
-struct NativeRootPluginConfig {
-    plugin: MountPluginDescriptor,
-    read_only: bool,
-}
-
-fn build_native_root_mount_table<B>(
-    mount_plugins: &secure_exec_kernel::mount_plugin::FileSystemPluginRegistry<
-        MountPluginContext<B>,
-    >,
-    native_root: &NativeRootPluginConfig,
-    descriptor: &RootFilesystemDescriptor,
-    context: MountPluginContext<B>,
-) -> Result<MountTable, SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    if !descriptor.lowers.is_empty() {
-        return Err(SidecarError::InvalidState(String::from(
-            "native root filesystems do not support rootFilesystem.lowers",
-        )));
-    }
-
-    let config_value: serde_json::Value = serde_json::from_str(&native_root.plugin.config)
-        .map_err(|error| {
-            SidecarError::InvalidState(format!(
-                "root native plugin config for {} is not valid JSON: {error}",
-                native_root.plugin.id
-            ))
-        })?;
-    let mut filesystem = mount_plugins
-        .open(
-            &native_root.plugin.id,
-            OpenFileSystemPluginRequest {
-                vm_id: &context.vm_id,
-                guest_path: "/",
-                read_only: native_root.read_only,
-                config: &config_value,
-                context: &context,
-            },
-        )
-        .map_err(plugin_error)?;
-
-    bootstrap_native_root_filesystem(filesystem.as_mut(), descriptor)?;
-
-    Ok(MountTable::new_boxed_root(
-        filesystem,
-        MountOptions::new(native_root.plugin.id.clone()).read_only(native_root.read_only),
-    ))
-}
-
-fn bootstrap_native_root_filesystem(
-    filesystem: &mut dyn MountedFileSystem,
-    descriptor: &RootFilesystemDescriptor,
-) -> Result<(), SidecarError> {
-    for (guest_path, mode) in SHADOW_ROOT_BOOTSTRAP_DIRS {
-        filesystem.mkdir(guest_path, true).map_err(vfs_error)?;
-        filesystem.chmod(guest_path, *mode).map_err(vfs_error)?;
-    }
-
-    for entry in &descriptor.bootstrap_entries {
-        apply_native_root_filesystem_entry(filesystem, entry)?;
-    }
-
-    Ok(())
-}
-
-fn apply_native_root_filesystem_entry(
-    filesystem: &mut dyn MountedFileSystem,
-    entry: &RootFilesystemEntry,
-) -> Result<(), SidecarError> {
-    let snapshot = root_snapshot_from_entries(std::slice::from_ref(entry))?;
-    let kernel_entry = snapshot
-        .entries
-        .into_iter()
-        .next()
-        .expect("root snapshot from one entry should contain one entry");
-    ensure_mounted_parent_directories(filesystem, &kernel_entry.path)?;
-
-    match kernel_entry.kind {
-        KernelFilesystemEntryKind::Directory => filesystem
-            .mkdir(&kernel_entry.path, true)
-            .map_err(vfs_error)?,
-        KernelFilesystemEntryKind::File => filesystem
-            .write_file(&kernel_entry.path, kernel_entry.content.unwrap_or_default())
-            .map_err(vfs_error)?,
-        KernelFilesystemEntryKind::Symlink => filesystem
-            .symlink(
-                kernel_entry.target.as_deref().ok_or_else(|| {
-                    SidecarError::InvalidState(format!(
-                        "root filesystem bootstrap for symlink {} requires a target",
-                        entry.path
-                    ))
-                })?,
-                &kernel_entry.path,
-            )
-            .map_err(vfs_error)?,
-    }
-
-    if !matches!(kernel_entry.kind, KernelFilesystemEntryKind::Symlink) {
-        filesystem
-            .chmod(&kernel_entry.path, kernel_entry.mode)
-            .map_err(vfs_error)?;
-        filesystem
-            .chown(&kernel_entry.path, kernel_entry.uid, kernel_entry.gid)
-            .map_err(vfs_error)?;
-    }
-
-    Ok(())
-}
-
-fn ensure_mounted_parent_directories(
-    filesystem: &mut dyn MountedFileSystem,
-    path: &str,
-) -> Result<(), SidecarError> {
-    let parent = dirname(path);
-    if parent != "/" && !filesystem.exists(&parent) {
-        ensure_mounted_parent_directories(filesystem, &parent)?;
-        filesystem.mkdir(&parent, true).map_err(vfs_error)?;
-    }
-    Ok(())
-}
-
-fn reconcile_mounts<B>(
-    mount_plugins: &secure_exec_kernel::mount_plugin::FileSystemPluginRegistry<
-        MountPluginContext<B>,
-    >,
-    vm: &mut VmState,
-    mounts: &[crate::protocol::MountDescriptor],
-    context: MountPluginContext<B>,
-) -> Result<(), SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    shutdown_configured_mounts(vm, &context, "configure_vm", false)?;
-    mount_leaf_descriptors(mount_plugins, vm, mounts, context)
-}
-
-fn mount_leaf_descriptors<B>(
-    mount_plugins: &secure_exec_kernel::mount_plugin::FileSystemPluginRegistry<
-        MountPluginContext<B>,
-    >,
-    vm: &mut VmState,
-    mounts: &[crate::protocol::MountDescriptor],
-    context: MountPluginContext<B>,
-) -> Result<(), SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    for mount in mounts {
-        let config_value: serde_json::Value =
-            serde_json::from_str(&mount.plugin.config).map_err(|error| {
-                SidecarError::InvalidState(format!(
-                    "mount plugin config for {} is not valid JSON: {error}",
-                    mount.plugin.id
-                ))
-            })?;
-        let filesystem = mount_plugins
-            .open(
-                &mount.plugin.id,
-                OpenFileSystemPluginRequest {
-                    vm_id: &context.vm_id,
-                    guest_path: &mount.guest_path,
-                    read_only: mount.read_only,
-                    config: &config_value,
-                    context: &context,
-                },
-            )
-            .map_err(plugin_error)?;
-
-        vm.kernel
-            .mount_boxed_filesystem(
-                &mount.guest_path,
-                filesystem,
-                MountOptions::new(mount.plugin.id.clone()).read_only(mount.read_only),
-            )
-            .map_err(kernel_error)?;
-        emit_security_audit_event(
-            &context.bridge,
-            &context.vm_id,
-            "security.mount.mounted",
-            audit_fields([
-                (String::from("guest_path"), mount.guest_path.clone()),
-                (String::from("plugin_id"), mount.plugin.id.clone()),
-                (String::from("read_only"), mount.read_only.to_string()),
-            ]),
-        );
-    }
-
-    Ok(())
-}
-
-fn shutdown_configured_mounts<B>(
-    vm: &mut VmState,
-    context: &MountPluginContext<B>,
-    phase: &str,
-    continue_on_error: bool,
-) -> Result<(), SidecarError>
-where
-    B: NativeSidecarBridge + Send + 'static,
-    BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-{
-    for existing in vm.configuration.mounts.clone() {
-        match vm.kernel.unmount_filesystem(&existing.guest_path) {
-            Ok(()) => emit_security_audit_event(
-                &context.bridge,
-                &context.vm_id,
-                "security.mount.unmounted",
-                audit_fields([
-                    (String::from("guest_path"), existing.guest_path.clone()),
-                    (String::from("plugin_id"), existing.plugin.id.clone()),
-                    (String::from("read_only"), existing.read_only.to_string()),
-                ]),
-            ),
-            Err(error) if error.code() == "EINVAL" => {}
-            Err(error) => {
-                let _ = emit_structured_event(
-                    &context.bridge,
-                    &context.vm_id,
-                    "filesystem.mount.shutdown_failed",
-                    audit_fields([
-                        (String::from("guest_path"), existing.guest_path.clone()),
-                        (String::from("plugin_id"), existing.plugin.id.clone()),
-                        (String::from("read_only"), existing.read_only.to_string()),
-                        (String::from("phase"), String::from(phase)),
-                        (String::from("error_code"), String::from(error.code())),
-                        (String::from("error"), error.to_string()),
-                    ]),
-                );
-
-                if !continue_on_error {
-                    return Err(kernel_error(error));
-                }
-            }
-        }
-    }
-
-    Ok(())
-}
-
-/// Build the `/opt/agentos` package projection for `configure_vm`.
-///
-/// The projection mounts the package tar directly and serves derived aliases as
-/// synthetic symlink leaves. This eliminates extraction and the old host-disk
-/// symlink farm: the tar VFS indexes member offsets once and reads mmap-backed
-/// byte ranges. Each managed entry is a granular leaf mount, while parent dirs
-/// such as `/opt/agentos/bin` and `/opt/agentos/pkgs/<pkg>` remain writable
-/// overlay dirs so guest-installed commands can coexist beside managed entries.
-fn build_packages_projection(
-    _vm_id: &str,
-    packages: &[crate::package_projection::PackageDescriptor],
-    mount_at: &str,
-) -> Result<Vec<MountDescriptor>, SidecarError> {
-    Ok(
-        crate::package_projection::build_package_leaf_mounts(packages, mount_at)?
-            .into_iter()
-            .map(package_leaf_mount_to_descriptor)
-            .collect(),
-    )
-}
-
-fn package_leaf_mount_to_descriptor(
-    mount: crate::package_projection::PackageLeafMount,
-) -> MountDescriptor {
-    match mount {
-        crate::package_projection::PackageLeafMount::Tar {
-            guest_path,
-            tar_path,
-            digest,
-            root,
-        } => MountDescriptor {
-            guest_path,
-            read_only: true,
-            plugin: MountPluginDescriptor {
-                id: String::from("agentos_packages"),
-                config: serde_json::json!({
-                    "kind": "tar",
-                    "tarPath": tar_path,
-                    "digest": digest,
-                    "root": root,
-                    "readOnly": true,
-                })
-                .to_string(),
-            },
-        },
-        crate::package_projection::PackageLeafMount::SingleSymlink { guest_path, target } => {
-            MountDescriptor {
-                guest_path,
-                read_only: true,
-                plugin: MountPluginDescriptor {
-                    id: String::from("agentos_packages"),
-                    config: serde_json::json!({
-                        "kind": "singleSymlink",
-                        "target": target,
-                        "readOnly": true,
-                    })
-                    .to_string(),
-                },
-            }
-        }
-    }
-}
-
-fn package_descriptors_from_wire(
-    packages: &[crate::protocol::PackageDescriptor],
-) -> Result<Vec<crate::package_projection::PackageDescriptor>, SidecarError> {
-    packages
-        .iter()
-        .map(|package| {
-            crate::package_projection::read_package_manifest_from_ref(
-                package.dir.as_deref(),
-                package.tar.as_deref(),
-            )
-        })
-        .collect()
-}
-
-fn projected_agents_from_descriptors(
-    packages: &[crate::package_projection::PackageDescriptor],
-) -> Vec<AgentosProjectedAgent> {
-    packages
-        .iter()
-        .flat_map(|package| {
-            let Some(acp_entrypoint) = package.acp_entrypoint.as_ref() else {
-                return Vec::new();
-            };
-            let mut ids = vec![package.name.clone()];
-            if let Ok(package_json_name) =
-                crate::package_projection::read_package_name(&package.dir)
-            {
-                if package_json_name != package.name {
-                    ids.push(package_json_name);
-                }
-            }
-            ids.into_iter()
-                .map(|id| AgentosProjectedAgent {
-                    id,
-                    acp_entrypoint: acp_entrypoint.clone(),
-                    adapter_entrypoint: format!(
-                        "{}/{}",
-                        crate::package_projection::OPT_AGENTOS_BIN,
-                        acp_entrypoint
-                    ),
-                })
-                .collect::<Vec<_>>()
-        })
-        .collect()
-}
-
-fn resolve_agent_snapshot_bundle(
-    packages: &[crate::package_projection::PackageDescriptor],
-) -> Result<Option<String>, SidecarError> {
-    for package in packages {
-        if let Some(bundle) = crate::package_projection::read_agent_snapshot_bundle(package)? {
-            return Ok(Some(bundle));
-        }
-    }
-    Ok(None)
-}
-
-fn apply_package_provides_env(
-    guest_env: &mut BTreeMap<String, String>,
-    packages: &[crate::package_projection::PackageDescriptor],
-) {
-    for package in packages {
-        let Some(provides) = package.provides.as_ref() else {
-            continue;
-        };
-        for (key, value) in &provides.env {
-            guest_env
-                .entry(key.clone())
-                .or_insert_with(|| value.clone());
-        }
-    }
-}
-
-fn append_package_provides_mounts(
-    mounts: &mut Vec<MountDescriptor>,
-    packages: &[crate::package_projection::PackageDescriptor],
-) -> Result<(), SidecarError> {
-    for package in packages {
-        let Some(provides) = package.provides.as_ref() else {
-            continue;
-        };
-        for file in &provides.files {
-            match crate::package_projection::package_provides_file_mount(
-                package,
-                &file.source,
-                &file.target,
-            )? {
-                Some(mount) => mounts.push(package_leaf_mount_to_descriptor(mount)),
-                None => {
-                    tracing::warn!(
-                        package = %package.name,
-                        source = %file.source,
-                        target = %file.target,
-                        "package provides file source is not a directory; skipping"
-                    );
-                }
-            }
-        }
-    }
-    Ok(())
-}
-
-fn append_module_access_mount(
-    mounts: &mut Vec<MountDescriptor>,
-    module_access_cwd: Option<&String>,
-) -> Result<(), SidecarError> {
-    if mounts
-        .iter()
-        .any(|mount| mount.guest_path == "/root/node_modules")
-    {
-        return Ok(());
-    }
-
-    let Some(module_access_cwd) = module_access_cwd else {
-        return Ok(());
-    };
-    let root = resolve_host_path(Some(module_access_cwd))?.join("node_modules");
-    if !root.is_dir() {
-        return Ok(());
-    }
-
-    mounts.push(MountDescriptor {
-        guest_path: String::from("/root/node_modules"),
-        read_only: true,
-        plugin: MountPluginDescriptor {
-            id: String::from("module_access"),
-            config: serde_json::json!({
-                "hostPath": root,
-            })
-            .to_string(),
-        },
-    });
-    append_module_access_symlink_mounts(mounts, &root)?;
-    Ok(())
-}
-
-fn append_module_access_symlink_mounts(
-    mounts: &mut Vec<MountDescriptor>,
-    node_modules_root: &Path,
-) -> Result<(), SidecarError> {
-    for entry in fs::read_dir(node_modules_root)
-        .map_err(|error| SidecarError::Io(format!("failed to read module_access root: {error}")))?
-    {
-        let entry = entry.map_err(|error| {
-            SidecarError::Io(format!("failed to inspect module_access root: {error}"))
-        })?;
-        let file_name = entry.file_name();
-        let name = file_name.to_string_lossy();
-        if name.starts_with('.') {
-            continue;
-        }
-        let path = entry.path();
-        let metadata = fs::symlink_metadata(&path).map_err(|error| {
-            SidecarError::Io(format!("failed to stat module_access entry: {error}"))
-        })?;
-        if metadata.file_type().is_symlink() {
-            append_module_access_symlink_mount(
-                mounts,
-                &format!("/root/node_modules/{name}"),
-                &path,
-            )?;
-            continue;
-        }
-        if !metadata.is_dir() || !name.starts_with('@') {
-            continue;
-        }
-        for scoped_entry in fs::read_dir(&path).map_err(|error| {
-            SidecarError::Io(format!("failed to read module_access scope: {error}"))
-        })? {
-            let scoped_entry = scoped_entry.map_err(|error| {
-                SidecarError::Io(format!("failed to inspect module_access scope: {error}"))
-            })?;
-            let scoped_name = scoped_entry.file_name().to_string_lossy().into_owned();
-            if scoped_name.starts_with('.') {
-                continue;
-            }
-            let scoped_path = scoped_entry.path();
-            let scoped_metadata = fs::symlink_metadata(&scoped_path).map_err(|error| {
-                SidecarError::Io(format!(
-                    "failed to stat module_access scoped entry: {error}"
-                ))
-            })?;
-            if scoped_metadata.file_type().is_symlink() {
-                append_module_access_symlink_mount(
-                    mounts,
-                    &format!("/root/node_modules/{name}/{scoped_name}"),
-                    &scoped_path,
-                )?;
-            }
-        }
-    }
-
-    Ok(())
-}
-
-fn append_module_access_symlink_mount(
-    mounts: &mut Vec<MountDescriptor>,
-    guest_path: &str,
-    symlink_path: &Path,
-) -> Result<(), SidecarError> {
-    if mounts.iter().any(|mount| mount.guest_path == guest_path) {
-        return Ok(());
-    }
-
-    let target = fs::canonicalize(symlink_path).map_err(|error| {
-        SidecarError::Io(format!(
-            "failed to resolve module_access package symlink {}: {error}",
-            symlink_path.display()
-        ))
-    })?;
-    if !target.is_dir() {
-        return Ok(());
-    }
-
-    mounts.push(MountDescriptor {
-        guest_path: guest_path.to_owned(),
-        read_only: true,
-        plugin: MountPluginDescriptor {
-            id: String::from("host_dir"),
-            config: serde_json::json!({
-                "hostPath": target,
-                "readOnly": true,
-            })
-            .to_string(),
-        },
-    });
-    Ok(())
-}
-
-fn sidecar_core_error(error: secure_exec_sidecar_core::SidecarCoreError) -> SidecarError {
-    SidecarError::InvalidState(error.to_string())
-}
-
-fn resolve_guest_cwd(value: Option<&String>) -> String {
-    value
-        .map(|path| normalize_guest_path(path))
-        .unwrap_or_else(|| String::from("/workspace"))
-}
-
-fn resolve_vm_cwds(
-    metadata_cwd: Option<&String>,
-    shadow_root: &Path,
-) -> Result<(String, PathBuf), SidecarError> {
-    if let Some(raw_cwd) = metadata_cwd {
-        let candidate = PathBuf::from(raw_cwd);
-        if candidate.is_absolute() || raw_cwd.starts_with('.') {
-            let resolved_host_cwd = resolve_host_path(Some(raw_cwd))?;
-            return Ok((String::from("/"), resolved_host_cwd));
-        }
-    }
-
-    let guest_cwd = resolve_guest_cwd(metadata_cwd);
-    let host_cwd = shadow_path_for_guest(shadow_root, &guest_cwd);
-    Ok((guest_cwd, host_cwd))
-}
-
-fn resolve_host_path(value: Option<&String>) -> Result<PathBuf, SidecarError> {
-    match value {
-        Some(path) => {
-            let cwd = PathBuf::from(path);
-            let resolved = if cwd.is_absolute() {
-                cwd
-            } else {
-                std::env::current_dir()
-                    .map_err(|error| {
-                        SidecarError::Io(format!("failed to resolve current directory: {error}"))
-                    })?
-                    .join(cwd)
-            };
-            Ok(resolved)
-        }
-        None => std::env::current_dir().map_err(|error| {
-            SidecarError::Io(format!("failed to resolve current directory: {error}"))
-        }),
-    }
-}
-
-fn create_vm_shadow_root(vm_id: &str) -> Result<PathBuf, SidecarError> {
-    let nonce = SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .map_err(|error| SidecarError::Io(format!("failed to compute shadow-root nonce: {error}")))?
-        .as_nanos();
-    let root = std::env::temp_dir().join(format!("secure-exec-sidecar-shadow-{vm_id}-{nonce}"));
-    fs::create_dir_all(&root)
-        .map_err(|error| SidecarError::Io(format!("failed to create VM shadow root: {error}")))?;
-    // macOS: `std::env::temp_dir()` lives under `/var/folders/…`, but `/var` is a
-    // symlink to `/private/var`, and macOS fd→path recovery (`fcntl(F_GETPATH)`)
-    // reports the resolved `/private/var/…` form. Canonicalize the shadow root up
-    // front so the stored host-root matches those resolved paths; otherwise the
-    // mapped-runtime confinement prefix checks (`strip_prefix(host_root)`) reject
-    // every child and guest `readdir` of a populated dir returns empty. host_dir
-    // mounts already canonicalize their root for the same reason.
-    #[cfg(target_os = "macos")]
-    let root = fs::canonicalize(&root).map_err(|error| {
-        SidecarError::Io(format!("failed to canonicalize VM shadow root: {error}"))
-    })?;
-    bootstrap_shadow_root(&root)?;
-    Ok(root)
-}
-
-fn bootstrap_shadow_root(root: &Path) -> Result<(), SidecarError> {
-    for (guest_path, mode) in SHADOW_ROOT_BOOTSTRAP_DIRS {
-        let host_path = shadow_path_for_guest(root, guest_path);
-        fs::create_dir_all(&host_path).map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to create shadow directory {}: {error}",
-                host_path.display()
-            ))
-        })?;
-        fs::set_permissions(&host_path, fs::Permissions::from_mode(*mode)).map_err(|error| {
-            SidecarError::Io(format!(
-                "failed to set shadow directory mode {mode:o} on {}: {error}",
-                host_path.display()
-            ))
-        })?;
-    }
-    Ok(())
-}
-
-fn materialize_shadow_root_snapshot_entries(
-    shadow_root: &Path,
-    descriptor: &RootFilesystemDescriptor,
-    loaded_snapshot: Option<&FilesystemSnapshot>,
-    resource_limits: &ResourceLimits,
-) -> Result<(), SidecarError> {
-    let import_limits = RootFilesystemImportLimits::from_resource_limits(resource_limits);
-    if let Some(snapshot) = loaded_snapshot
-        .filter(|snapshot| is_supported_root_filesystem_snapshot_format(&snapshot.format))
-        .map(|snapshot| {
-            decode_snapshot_with_import_limits(&snapshot.bytes, &import_limits)
-                .map_err(root_filesystem_error)
-        })
-        .transpose()?
-    {
-        return materialize_shadow_entries(shadow_root, &root_snapshot_entries(&snapshot));
-    }
-
-    validate_shadow_descriptor_import_limits(descriptor, &import_limits)?;
-    for lower in &descriptor.lowers {
-        if let RootFilesystemLowerDescriptor::SnapshotRootFilesystemLower(inner) = lower {
-            materialize_shadow_entries(shadow_root, &inner.entries)?;
-        }
-    }
-    materialize_shadow_entries(shadow_root, &descriptor.bootstrap_entries)?;
-    Ok(())
-}
-
-fn validate_shadow_descriptor_import_limits(
-    descriptor: &RootFilesystemDescriptor,
-    limits: &RootFilesystemImportLimits,
-) -> Result<(), SidecarError> {
-    let mut explicit_entry_count = descriptor.bootstrap_entries.len();
-    let mut inode_paths = BTreeSet::new();
-    collect_root_protocol_entry_paths(&descriptor.bootstrap_entries, &mut inode_paths);
-    let mut bytes = root_protocol_entry_content_bytes(&descriptor.bootstrap_entries)?;
-
-    for lower in &descriptor.lowers {
-        match lower {
-            RootFilesystemLowerDescriptor::SnapshotRootFilesystemLower(inner) => {
-                let entries = &inner.entries;
-                explicit_entry_count = explicit_entry_count.saturating_add(entries.len());
-                collect_root_protocol_entry_paths(entries, &mut inode_paths);
-                bytes = bytes.saturating_add(root_protocol_entry_content_bytes(entries)?);
-            }
-            RootFilesystemLowerDescriptor::BundledBaseFilesystemLower => {}
-        }
-    }
-
-    if let Some(limit) = limits.max_inode_count {
-        if explicit_entry_count > limit {
-            return Err(root_filesystem_error(format!(
-                "root filesystem descriptor contains {explicit_entry_count} entries, exceeding limit {limit}"
-            )));
-        }
-
-        let entry_count = inode_paths.len();
-        if entry_count > limit {
-            return Err(root_filesystem_error(format!(
-                "root filesystem descriptor contains {entry_count} entries, exceeding limit {limit}"
-            )));
-        }
-    }
-
-    if let Some(limit) = limits.max_filesystem_bytes {
-        if bytes > limit {
-            return Err(root_filesystem_error(format!(
-                "root filesystem descriptor contains {bytes} bytes, exceeding limit {limit}"
-            )));
-        }
-    }
-
-    Ok(())
-}
-
-fn collect_root_protocol_entry_paths(
-    entries: &[RootFilesystemEntry],
-    paths: &mut BTreeSet<String>,
-) {
-    for entry in entries {
-        collect_root_protocol_path(&entry.path, paths);
-    }
-}
-
-fn collect_root_protocol_path(path: &str, paths: &mut BTreeSet<String>) {
-    let normalized = normalize_guest_path(path);
-    paths.insert(normalized.clone());
-
-    let mut parent = String::new();
-    let segments = normalized
-        .split('/')
-        .filter(|segment| !segment.is_empty())
-        .collect::<Vec<_>>();
-    for segment in segments.iter().take(segments.len().saturating_sub(1)) {
-        parent.push('/');
-        parent.push_str(segment);
-        paths.insert(parent.clone());
-    }
-}
-
-fn root_protocol_entry_content_bytes(entries: &[RootFilesystemEntry]) -> Result<u64, SidecarError> {
-    entries.iter().try_fold(0_u64, |total, entry| {
-        let bytes = match entry.kind {
-            crate::protocol::RootFilesystemEntryKind::Directory => 0,
-            crate::protocol::RootFilesystemEntryKind::File => {
-                root_protocol_file_content_bytes(entry)?
-            }
-            crate::protocol::RootFilesystemEntryKind::Symlink => entry
-                .target
-                .as_ref()
-                .map(|target| usize_to_u64(target.len()))
-                .unwrap_or(0),
-        };
-        Ok(total.saturating_add(bytes))
-    })
-}
-
-fn root_protocol_file_content_bytes(entry: &RootFilesystemEntry) -> Result<u64, SidecarError> {
-    let Some(content) = entry.content.as_deref() else {
-        return Ok(0);
-    };
-
-    let bytes = match entry
-        .encoding
-        .clone()
-        .unwrap_or(RootFilesystemEntryEncoding::Utf8)
-    {
-        RootFilesystemEntryEncoding::Utf8 => content.len(),
-        RootFilesystemEntryEncoding::Base64 => estimated_base64_decoded_len(content),
-    };
-    Ok(usize_to_u64(bytes))
-}
-
-fn estimated_base64_decoded_len(content: &str) -> usize {
-    let padding = content
-        .as_bytes()
-        .iter()
-        .rev()
-        .take_while(|byte| **byte == b'=')
-        .count()
-        .min(2);
-    content
-        .len()
-        .div_ceil(4)
-        .saturating_mul(3)
-        .saturating_sub(padding)
-}
-
-fn usize_to_u64(value: usize) -> u64 {
-    u64::try_from(value).unwrap_or(u64::MAX)
-}
-
-fn materialize_shadow_entries(
-    shadow_root: &Path,
-    entries: &[RootFilesystemEntry],
-) -> Result<(), SidecarError> {
-    let mut ordered = entries.iter().collect::<Vec<_>>();
-    ordered.sort_by_key(|entry| {
-        let depth = entry.path.matches('/').count();
-        let kind_rank = match entry.kind {
-            crate::protocol::RootFilesystemEntryKind::Directory => 0,
-            crate::protocol::RootFilesystemEntryKind::File => 1,
-            crate::protocol::RootFilesystemEntryKind::Symlink => 2,
-        };
-        (kind_rank, depth, entry.path.as_str())
-    });
-
-    for entry in ordered {
-        let shadow_path = shadow_path_for_guest(shadow_root, &entry.path);
-        if let Some(parent) = shadow_path.parent() {
-            fs::create_dir_all(parent).map_err(|error| {
-                SidecarError::Io(format!(
-                    "failed to create shadow parent for {}: {error}",
-                    entry.path
-                ))
-            })?;
-        }
-
-        match entry.kind {
-            crate::protocol::RootFilesystemEntryKind::Directory => {
-                fs::create_dir_all(&shadow_path).map_err(|error| {
-                    SidecarError::Io(format!(
-                        "failed to materialize shadow directory {}: {error}",
-                        entry.path
-                    ))
-                })?;
-            }
-            crate::protocol::RootFilesystemEntryKind::File => {
-                let bytes = decode_root_entry_content(entry)?;
-                fs::write(&shadow_path, bytes).map_err(|error| {
-                    SidecarError::Io(format!(
-                        "failed to materialize shadow file {}: {error}",
-                        entry.path
-                    ))
-                })?;
-            }
-            crate::protocol::RootFilesystemEntryKind::Symlink => {
-                let _ = fs::remove_file(&shadow_path);
-                let _ = fs::remove_dir_all(&shadow_path);
-                std::os::unix::fs::symlink(
-                    entry.target.as_deref().ok_or_else(|| {
-                        SidecarError::InvalidState(format!(
-                            "root filesystem symlink {} requires a target",
-                            entry.path
-                        ))
-                    })?,
-                    &shadow_path,
-                )
-                .map_err(|error| {
-                    SidecarError::Io(format!(
-                        "failed to materialize shadow symlink {}: {error}",
-                        entry.path
-                    ))
-                })?;
-                continue;
-            }
-        }
-
-        let mode = entry.mode.unwrap_or(match entry.kind {
-            crate::protocol::RootFilesystemEntryKind::Directory => 0o755,
-            crate::protocol::RootFilesystemEntryKind::File => {
-                if entry.executable {
-                    0o755
-                } else {
-                    0o644
-                }
-            }
-            crate::protocol::RootFilesystemEntryKind::Symlink => 0o777,
-        });
-        fs::set_permissions(&shadow_path, fs::Permissions::from_mode(mode & 0o7777)).map_err(
-            |error| {
-                SidecarError::Io(format!(
-                    "failed to set shadow mode on {}: {error}",
-                    entry.path
-                ))
-            },
-        )?;
-    }
-
-    Ok(())
-}
-
-fn decode_root_entry_content(entry: &RootFilesystemEntry) -> Result<Vec<u8>, SidecarError> {
-    let content = entry.content.as_deref().unwrap_or_default();
-    match entry
-        .encoding
-        .clone()
-        .unwrap_or(crate::protocol::RootFilesystemEntryEncoding::Utf8)
-    {
-        crate::protocol::RootFilesystemEntryEncoding::Utf8 => Ok(content.as_bytes().to_vec()),
-        crate::protocol::RootFilesystemEntryEncoding::Base64 => {
-            base64::engine::general_purpose::STANDARD
-                .decode(content)
-                .map_err(|error| {
-                    SidecarError::InvalidState(format!(
-                        "invalid base64 root filesystem content for {}: {error}",
-                        entry.path
-                    ))
-                })
-        }
-    }
-}
-
-fn shadow_path_for_guest(shadow_root: &std::path::Path, guest_path: &str) -> PathBuf {
-    let normalized = normalize_guest_path(guest_path);
-    let relative = normalized.trim_start_matches('/');
-    if relative.is_empty() {
-        return shadow_root.to_path_buf();
-    }
-    shadow_root.join(relative)
-}
-
-fn normalize_guest_path(path: &str) -> String {
-    let mut segments = Vec::new();
-    let absolute = path.starts_with('/');
-    for segment in path.split('/') {
-        match segment {
-            "" | "." => {}
-            ".." => {
-                segments.pop();
-            }
-            other => segments.push(other),
-        }
-    }
-
-    if !absolute {
-        return format!("/{}", segments.join("/"));
-    }
-    if segments.is_empty() {
-        String::from("/")
-    } else {
-        format!("/{}", segments.join("/"))
-    }
-}
-
-fn parse_vm_dns_nameserver(value: &str) -> Result<SocketAddr, SidecarError> {
-    use crate::state::VM_DNS_SERVERS_METADATA_KEY;
-
-    if let Ok(address) = value.parse::<SocketAddr>() {
-        return Ok(address);
-    }
-    if let Ok(ip) = value.parse::<IpAddr>() {
-        return Ok(SocketAddr::new(ip, 53));
-    }
-    Err(SidecarError::InvalidState(format!(
-        "invalid {} entry {value}; expected IP or IP:port",
-        VM_DNS_SERVERS_METADATA_KEY
-    )))
-}
-
-fn refresh_guest_command_path_env(
-    guest_env: &mut BTreeMap<String, String>,
-    command_guest_paths: &BTreeMap<String, String>,
-) {
-    let mut merged = Vec::new();
-    let mut seen = BTreeSet::new();
-
-    for guest_path in command_guest_paths.values() {
-        let Some(parent) = Path::new(guest_path)
-            .parent()
-            .and_then(|path| path.to_str())
-        else {
-            continue;
-        };
-        let normalized = normalize_path(parent);
-        if normalized == "/" {
-            continue;
-        }
-        if seen.insert(normalized.clone()) {
-            merged.push(normalized);
-        }
-    }
-
-    for segment in DEFAULT_GUEST_PATH_ENV.split(':') {
-        let normalized = normalize_path(segment);
-        if seen.insert(normalized.clone()) {
-            merged.push(normalized);
-        }
-    }
-
-    if let Some(existing_path) = guest_env.get("PATH") {
-        for segment in existing_path.split(':') {
-            let trimmed = segment.trim();
-            if trimmed.is_empty() {
-                continue;
-            }
-            let normalized = if trimmed.starts_with('/') {
-                normalize_path(trimmed)
-            } else {
-                trimmed.to_owned()
-            };
-            if seen.insert(normalized.clone()) {
-                merged.push(normalized);
-            }
-        }
-    }
-
-    guest_env.insert(String::from("PATH"), merged.join(":"));
-}
-
-pub(crate) fn normalize_dns_hostname(hostname: &str) -> Result<String, SidecarError> {
-    let normalized = hostname.trim().trim_end_matches('.').to_ascii_lowercase();
-    if normalized.is_empty() {
-        return Err(SidecarError::InvalidState(String::from(
-            "DNS hostname must not be empty",
-        )));
-    }
-    Ok(normalized)
-}
-
-// Retained for the native-root command-stub test; `python` is now a real
-// command so production no longer prunes `/bin/python`.
-#[cfg(test)]
-fn prune_kernel_command_stub(
-    kernel: &mut KernelVm<secure_exec_kernel::mount_table::MountTable>,
-    path: &str,
-) -> Result<(), SidecarError> {
-    if !kernel.exists(path).map_err(kernel_error)? {
-        return Ok(());
-    }
-
-    let content = kernel.read_file(path).map_err(kernel_error)?;
-    if content == KERNEL_COMMAND_STUB {
-        kernel.remove_file(path).map_err(kernel_error)?;
-    }
-
-    Ok(())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::{
-        bootstrap_native_root_filesystem, bootstrap_shadow_root,
-        materialize_shadow_root_snapshot_entries, native_root_plugin_from_config,
-        prune_kernel_command_stub, shadow_path_for_guest, KERNEL_COMMAND_STUB,
-    };
-    use crate::plugins::chunked_local::ChunkedLocalMountPlugin;
-    use crate::protocol::{
-        RootFilesystemDescriptor, RootFilesystemEntry, RootFilesystemEntryKind,
-        RootFilesystemLowerDescriptor,
-    };
-    use secure_exec_bridge::FilesystemSnapshot;
-    use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig};
-    use secure_exec_kernel::mount_plugin::{FileSystemPluginFactory, OpenFileSystemPluginRequest};
-    use secure_exec_kernel::mount_table::{MountOptions, MountTable};
-    use secure_exec_kernel::permissions::Permissions;
-    use secure_exec_kernel::resource_accounting::ResourceLimits;
-    use secure_exec_kernel::root_fs::{encode_snapshot, FilesystemEntry, RootFilesystemSnapshot};
-    use secure_exec_kernel::vfs::VirtualFileSystem;
-    use std::fs;
-    use std::os::unix::fs::PermissionsExt;
-    use std::time::{SystemTime, UNIX_EPOCH};
-
-    #[test]
-    fn bootstrap_shadow_root_seeds_standard_directories() {
-        let unique = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("clock should be monotonic")
-            .as_nanos();
-        let root = std::env::temp_dir().join(format!("secure-exec-sidecar-shadow-test-{unique}"));
-        fs::create_dir_all(&root).expect("temp shadow root should be created");
-
-        bootstrap_shadow_root(&root).expect("shadow bootstrap should succeed");
-
-        let tmp = shadow_path_for_guest(&root, "/tmp");
-        let etc_agentos = shadow_path_for_guest(&root, "/etc/agentos");
-        let usr_local_bin = shadow_path_for_guest(&root, "/usr/local/bin");
-
-        assert!(tmp.is_dir(), "/tmp should exist in the shadow root");
-        assert!(
-            etc_agentos.is_dir(),
-            "/etc/agentos should exist in the shadow root"
-        );
-        assert!(
-            usr_local_bin.is_dir(),
-            "/usr/local/bin should exist in the shadow root"
-        );
-        assert_eq!(
-            fs::metadata(&tmp)
-                .expect("/tmp metadata should be readable")
-                .permissions()
-                .mode()
-                & 0o7777,
-            0o1777,
-            "/tmp should preserve its sticky-bit mode in the shadow root"
-        );
-
-        fs::remove_dir_all(&root).expect("temp shadow root should be removed");
-    }
-
-    #[test]
-    fn native_root_config_opens_chunked_local_as_persistent_root() {
-        let unique = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("clock should be monotonic")
-            .as_nanos();
-        let database_path =
-            std::env::temp_dir().join(format!("secure-exec-native-root-{unique}.sqlite"));
-        let block_root =
-            std::env::temp_dir().join(format!("secure-exec-native-root-blocks-{unique}"));
-        let native_root = native_root_plugin_from_config(Some(
-            &secure_exec_vm_config::NativeRootFilesystemConfig {
-                plugin: secure_exec_vm_config::MountPluginDescriptor {
-                    id: "chunked_local".to_string(),
-                    config: serde_json::json!({
-                        "metadataPath": database_path.to_string_lossy(),
-                        "blockRoot": block_root.to_string_lossy(),
-                    }),
-                },
-                read_only: false,
-            },
-        ))
-        .expect("native root config should parse")
-        .expect("native root should be present");
-        let config: serde_json::Value =
-            serde_json::from_str(&native_root.plugin.config).expect("valid plugin config");
-        let plugin = ChunkedLocalMountPlugin;
-        let mut filesystem = plugin
-            .open(OpenFileSystemPluginRequest {
-                vm_id: "vm-test",
-                guest_path: "/",
-                read_only: false,
-                config: &config,
-                context: &(),
-            })
-            .expect("sqlite root should open");
-        bootstrap_native_root_filesystem(
-            filesystem.as_mut(),
-            &RootFilesystemDescriptor {
-                bootstrap_entries: vec![RootFilesystemEntry {
-                    path: "/etc/agentos/boot.txt".to_string(),
-                    kind: RootFilesystemEntryKind::File,
-                    content: Some("booted".to_string()),
-                    ..Default::default()
-                }],
-                ..Default::default()
-            },
-        )
-        .expect("native root should bootstrap");
-
-        let mut mount_table = MountTable::new_boxed_root(
-            filesystem,
-            MountOptions::new(native_root.plugin.id.clone()),
-        );
-        assert!(mount_table.exists("/home/agentos"));
-        assert_eq!(
-            mount_table
-                .read_file("/etc/agentos/boot.txt")
-                .expect("bootstrap file should be readable"),
-            b"booted".to_vec()
-        );
-        mount_table
-            .write_file("/home/agentos/persist.txt", b"persisted".to_vec())
-            .expect("write through sqlite root should succeed");
-        let mut kernel_config = KernelVmConfig::new("vm-test");
-        kernel_config.permissions = Permissions::allow_all();
-        let mut kernel = KernelVm::new(mount_table, kernel_config);
-        kernel
-            .write_file("/bin/python", KERNEL_COMMAND_STUB.to_vec())
-            .expect("command stub should be writable");
-        prune_kernel_command_stub(&mut kernel, "/bin/python")
-            .expect("command stub prune should support native roots");
-        assert!(
-            !kernel.exists("/bin/python").expect("exists should succeed"),
-            "stub should be pruned through the mounted root"
-        );
-        drop(kernel);
-
-        let reopened = plugin
-            .open(OpenFileSystemPluginRequest {
-                vm_id: "vm-test",
-                guest_path: "/",
-                read_only: false,
-                config: &config,
-                context: &(),
-            })
-            .expect("chunked local root should reopen");
-        let mut reopened = MountTable::new_boxed_root(reopened, MountOptions::new("chunked_local"));
-        assert_eq!(
-            reopened
-                .read_file("/home/agentos/persist.txt")
-                .expect("persisted file should survive reopen"),
-            b"persisted".to_vec()
-        );
-
-        let _ = fs::remove_file(database_path);
-        let _ = fs::remove_dir_all(block_root);
-    }
-
-    #[test]
-    fn materialize_shadow_root_snapshot_entries_rejects_oversized_legacy_restored_snapshots() {
-        let unique = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("clock should be monotonic")
-            .as_nanos();
-        let root = std::env::temp_dir().join(format!("secure-exec-sidecar-shadow-limit-{unique}"));
-        fs::create_dir_all(&root).expect("temp shadow root should be created");
-        bootstrap_shadow_root(&root).expect("shadow bootstrap should succeed");
-
-        let snapshot = RootFilesystemSnapshot {
-            entries: vec![FilesystemEntry::file("/large.txt", b"four".to_vec())],
-        };
-        let loaded_snapshot = FilesystemSnapshot {
-            format: String::from("agentos_filesystem_snapshot_v1"),
-            bytes: encode_snapshot(&snapshot).expect("encode restored snapshot"),
-        };
-        let resource_limits = ResourceLimits {
-            max_filesystem_bytes: Some(3),
-            ..ResourceLimits::default()
-        };
-
-        let error = materialize_shadow_root_snapshot_entries(
-            &root,
-            &RootFilesystemDescriptor::default(),
-            Some(&loaded_snapshot),
-            &resource_limits,
-        )
-        .expect_err("oversized restored snapshot should be rejected");
-
-        assert!(error.to_string().contains("exceeding limit 3"));
-        fs::remove_dir_all(&root).expect("temp shadow root should be removed");
-    }
-
-    #[test]
-    fn materialize_shadow_root_snapshot_entries_rejects_oversized_descriptor_before_writes() {
-        let unique = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("clock should be monotonic")
-            .as_nanos();
-        let root =
-            std::env::temp_dir().join(format!("secure-exec-sidecar-shadow-descriptor-{unique}"));
-        fs::create_dir_all(&root).expect("temp shadow root should be created");
-        bootstrap_shadow_root(&root).expect("shadow bootstrap should succeed");
-
-        let descriptor = RootFilesystemDescriptor {
-            lowers: vec![RootFilesystemLowerDescriptor::SnapshotRootFilesystemLower(
-                crate::protocol::SnapshotRootFilesystemLower {
-                    entries: vec![RootFilesystemEntry {
-                        path: String::from("/large.txt"),
-                        kind: RootFilesystemEntryKind::File,
-                        mode: Some(0o644),
-                        uid: Some(0),
-                        gid: Some(0),
-                        content: Some(String::from("four")),
-                        encoding: Some(crate::protocol::RootFilesystemEntryEncoding::Utf8),
-                        target: None,
-                        executable: false,
-                    }],
-                },
-            )],
-            ..RootFilesystemDescriptor::default()
-        };
-        let resource_limits = ResourceLimits {
-            max_filesystem_bytes: Some(3),
-            ..ResourceLimits::default()
-        };
-
-        let error =
-            materialize_shadow_root_snapshot_entries(&root, &descriptor, None, &resource_limits)
-                .expect_err("oversized descriptor should be rejected");
-
-        assert!(error.to_string().contains("exceeding limit 3"));
-        assert!(
-            !shadow_path_for_guest(&root, "/large.txt").exists(),
-            "oversized descriptor must be rejected before materializing files"
-        );
-        fs::remove_dir_all(&root).expect("temp shadow root should be removed");
-    }
-
-    #[test]
-    fn materialize_shadow_root_snapshot_entries_counts_implicit_parent_directories() {
-        let unique = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("clock should be monotonic")
-            .as_nanos();
-        let root =
-            std::env::temp_dir().join(format!("secure-exec-sidecar-shadow-parents-{unique}"));
-        fs::create_dir_all(&root).expect("temp shadow root should be created");
-        bootstrap_shadow_root(&root).expect("shadow bootstrap should succeed");
-
-        let descriptor = RootFilesystemDescriptor {
-            lowers: vec![RootFilesystemLowerDescriptor::SnapshotRootFilesystemLower(
-                crate::protocol::SnapshotRootFilesystemLower {
-                    entries: vec![RootFilesystemEntry {
-                        path: String::from("/deep/nested/file.txt"),
-                        kind: RootFilesystemEntryKind::File,
-                        mode: Some(0o644),
-                        uid: Some(0),
-                        gid: Some(0),
-                        content: Some(String::from("x")),
-                        encoding: Some(crate::protocol::RootFilesystemEntryEncoding::Utf8),
-                        target: None,
-                        executable: false,
-                    }],
-                },
-            )],
-            ..RootFilesystemDescriptor::default()
-        };
-        let resource_limits = ResourceLimits {
-            max_inode_count: Some(1),
-            ..ResourceLimits::default()
-        };
-
-        let error =
-            materialize_shadow_root_snapshot_entries(&root, &descriptor, None, &resource_limits)
-                .expect_err("implicit parents should be rejected");
-
-        assert!(error.to_string().contains("exceeding limit 1"));
-        assert!(
-            !shadow_path_for_guest(&root, "/deep").exists(),
-            "implicit parents must not be materialized after rejection"
-        );
-        fs::remove_dir_all(&root).expect("temp shadow root should be removed");
-    }
-
-    #[test]
-    fn materialize_shadow_root_snapshot_entries_rejects_duplicate_descriptor_entries() {
-        let unique = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("clock should be monotonic")
-            .as_nanos();
-        let root =
-            std::env::temp_dir().join(format!("secure-exec-sidecar-shadow-duplicates-{unique}"));
-        fs::create_dir_all(&root).expect("temp shadow root should be created");
-        bootstrap_shadow_root(&root).expect("shadow bootstrap should succeed");
-
-        let duplicate_entry = RootFilesystemEntry {
-            path: String::from("/dup.txt"),
-            kind: RootFilesystemEntryKind::File,
-            mode: Some(0o644),
-            uid: Some(0),
-            gid: Some(0),
-            content: Some(String::new()),
-            encoding: Some(crate::protocol::RootFilesystemEntryEncoding::Utf8),
-            target: None,
-            executable: false,
-        };
-        let descriptor = RootFilesystemDescriptor {
-            lowers: vec![RootFilesystemLowerDescriptor::SnapshotRootFilesystemLower(
-                crate::protocol::SnapshotRootFilesystemLower {
-                    entries: vec![duplicate_entry.clone(), duplicate_entry],
-                },
-            )],
-            ..RootFilesystemDescriptor::default()
-        };
-        let resource_limits = ResourceLimits {
-            max_inode_count: Some(1),
-            ..ResourceLimits::default()
-        };
-
-        let error =
-            materialize_shadow_root_snapshot_entries(&root, &descriptor, None, &resource_limits)
-                .expect_err("duplicate descriptor entries should be rejected");
-
-        assert!(error.to_string().contains("exceeding limit 1"));
-        assert!(
-            !shadow_path_for_guest(&root, "/dup.txt").exists(),
-            "duplicate descriptor must be rejected before materializing files"
-        );
-        fs::remove_dir_all(&root).expect("temp shadow root should be removed");
-    }
-
-    #[test]
-    fn materialize_shadow_root_snapshot_entries_copies_custom_snapshot_files() {
-        let unique = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("clock should be monotonic")
-            .as_nanos();
-        let root =
-            std::env::temp_dir().join(format!("secure-exec-sidecar-shadow-snapshot-{unique}"));
-        fs::create_dir_all(&root).expect("temp shadow root should be created");
-        bootstrap_shadow_root(&root).expect("shadow bootstrap should succeed");
-
-        let descriptor = RootFilesystemDescriptor {
-            lowers: vec![RootFilesystemLowerDescriptor::SnapshotRootFilesystemLower(
-                crate::protocol::SnapshotRootFilesystemLower {
-                    entries: vec![
-                        RootFilesystemEntry {
-                            path: String::from("/"),
-                            kind: RootFilesystemEntryKind::Directory,
-                            mode: Some(0o755),
-                            uid: Some(0),
-                            gid: Some(0),
-                            content: None,
-                            encoding: None,
-                            target: None,
-                            executable: false,
-                        },
-                        RootFilesystemEntry {
-                            path: String::from("/hello.txt"),
-                            kind: RootFilesystemEntryKind::File,
-                            mode: Some(0o644),
-                            uid: Some(0),
-                            gid: Some(0),
-                            content: Some(String::from("hello from snapshot\n")),
-                            encoding: Some(crate::protocol::RootFilesystemEntryEncoding::Utf8),
-                            target: None,
-                            executable: false,
-                        },
-                    ],
-                },
-            )],
-            ..RootFilesystemDescriptor::default()
-        };
-
-        materialize_shadow_root_snapshot_entries(
-            &root,
-            &descriptor,
-            None,
-            &ResourceLimits::default(),
-        )
-        .expect("snapshot entries should materialize into the shadow root");
-
-        assert_eq!(
-            fs::read_to_string(shadow_path_for_guest(&root, "/hello.txt"))
-                .expect("shadow file should be readable"),
-            "hello from snapshot\n"
-        );
-
-        fs::remove_dir_all(&root).expect("temp shadow root should be removed");
-    }
-}
diff --git a/crates/sidecar/tests/acp/client.rs b/crates/sidecar/tests/acp/client.rs
deleted file mode 100644
index 31c157d37..000000000
--- a/crates/sidecar/tests/acp/client.rs
+++ /dev/null
@@ -1,630 +0,0 @@
-use crate::acp::{
-    deserialize_message, AcpClient, AcpClientError, AcpClientOptions, AcpClientProcessState,
-    InboundRequestHandler, InboundRequestOutcome, JsonRpcError, JsonRpcId, JsonRpcMessage,
-    JsonRpcNotification, JsonRpcRequest, JsonRpcResponse,
-};
-use serde_json::{json, Value};
-use std::collections::BTreeMap;
-use std::sync::Arc;
-use std::time::{Duration, Instant};
-use tokio::io::{split, AsyncBufReadExt, AsyncWriteExt, BufReader, DuplexStream};
-
-fn new_client(
-    options: AcpClientOptions,
-) -> (
-    AcpClient,
-    tokio::io::Lines<BufReader<tokio::io::ReadHalf<DuplexStream>>>,
-    tokio::io::WriteHalf<DuplexStream>,
-) {
-    let (client_stream, server_stream) = tokio::io::duplex(8 * 1024);
-    let (client_reader, client_writer) = split(client_stream);
-    let (server_reader, server_writer) = split(server_stream);
-    let client = AcpClient::new(client_reader, client_writer, options);
-    (client, BufReader::new(server_reader).lines(), server_writer)
-}
-
-async fn read_message(
-    reader: &mut tokio::io::Lines<BufReader<tokio::io::ReadHalf<DuplexStream>>>,
-) -> JsonRpcMessage {
-    let line = reader
-        .next_line()
-        .await
-        .expect("read line")
-        .expect("line should exist");
-    deserialize_message(&line).expect("decode json-rpc line")
-}
-
-async fn write_raw(writer: &mut tokio::io::WriteHalf<DuplexStream>, line: &str) {
-    writer
-        .write_all(line.as_bytes())
-        .await
-        .expect("write raw line");
-    writer.flush().await.expect("flush raw line");
-}
-
-async fn write_message(writer: &mut tokio::io::WriteHalf<DuplexStream>, message: &JsonRpcMessage) {
-    let encoded = crate::acp::serialize_message(message).expect("encode json-rpc");
-    write_raw(writer, &encoded).await;
-}
-
-async fn recv_notification(
-    receiver: &mut tokio::sync::broadcast::Receiver<JsonRpcNotification>,
-) -> JsonRpcNotification {
-    tokio::time::timeout(Duration::from_secs(1), receiver.recv())
-        .await
-        .expect("notification timeout")
-        .expect("receive notification")
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn client_correlates_responses_and_forwards_notifications() {
-    let (client, mut reader, mut writer) = new_client(AcpClientOptions::default());
-    let mut notifications = client.subscribe_notifications();
-
-    let request_task = tokio::spawn({
-        let client = client.clone();
-        async move {
-            client
-                .request(
-                    "session/prompt",
-                    Some(json!({ "sessionId": "session-1", "prompt": [{ "type": "text", "text": "hi" }] })),
-                )
-                .await
-        }
-    });
-
-    let request = read_message(&mut reader).await;
-    match request {
-        JsonRpcMessage::Request(message) => {
-            assert_eq!(message.method, "session/prompt");
-            write_message(
-                &mut writer,
-                &JsonRpcMessage::Notification(JsonRpcNotification {
-                    jsonrpc: String::from("2.0"),
-                    method: String::from("session/update"),
-                    params: Some(json!({ "status": "thinking" })),
-                }),
-            )
-            .await;
-            write_message(
-                &mut writer,
-                &JsonRpcMessage::Response(JsonRpcResponse::success(
-                    message.id,
-                    json!({ "status": "complete" }),
-                )),
-            )
-            .await;
-        }
-        other => panic!("unexpected outbound frame: {other:?}"),
-    }
-
-    let notification = recv_notification(&mut notifications).await;
-    assert_eq!(notification.method, "session/update");
-    assert_eq!(notification.params, Some(json!({ "status": "thinking" })));
-
-    let response = request_task.await.expect("request task").expect("request");
-    assert_eq!(response.result(), Some(&json!({ "status": "complete" })));
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn client_shims_modern_permission_requests_to_legacy_notifications() {
-    let (client, mut reader, mut writer) = new_client(AcpClientOptions::default());
-    let mut notifications = client.subscribe_notifications();
-
-    let prompt_task = tokio::spawn({
-        let client = client.clone();
-        async move {
-            client
-                .request("session/prompt", Some(json!({ "sessionId": "session-1" })))
-                .await
-        }
-    });
-
-    let prompt_request = read_message(&mut reader).await;
-    let prompt_id = match prompt_request {
-        JsonRpcMessage::Request(request) => {
-            assert_eq!(request.method, "session/prompt");
-            request.id
-        }
-        other => panic!("unexpected prompt frame: {other:?}"),
-    };
-
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Request(JsonRpcRequest {
-            jsonrpc: String::from("2.0"),
-            id: JsonRpcId::String(String::from("perm-modern-1")),
-            method: String::from("session/request_permission"),
-            params: Some(json!({
-                "sessionId": "session-1",
-                "options": [
-                    { "optionId": "allow_once", "kind": "allow_once" },
-                    { "optionId": "allow_always", "kind": "allow_always" },
-                    { "optionId": "reject_once", "kind": "reject_once" }
-                ]
-            })),
-        }),
-    )
-    .await;
-
-    let notification = recv_notification(&mut notifications).await;
-    assert_eq!(notification.method, "request/permission");
-    let params = notification.params.expect("permission params");
-    assert_eq!(params["permissionId"], json!("perm-modern-1"));
-    assert_eq!(params["_acpMethod"], json!("session/request_permission"));
-
-    let permission_response = client
-        .request(
-            "request/permission",
-            Some(json!({
-                "permissionId": "perm-modern-1",
-                "reply": "always"
-            })),
-        )
-        .await
-        .expect("permission response");
-    assert_eq!(
-        permission_response.result(),
-        Some(&json!({
-            "outcome": {
-                "outcome": "selected",
-                "optionId": "allow_always"
-            }
-        }))
-    );
-
-    let outbound_permission = read_message(&mut reader).await;
-    match outbound_permission {
-        JsonRpcMessage::Response(response) => {
-            assert_eq!(
-                response.id,
-                JsonRpcId::String(String::from("perm-modern-1"))
-            );
-            assert_eq!(
-                response.result(),
-                Some(&json!({
-                    "outcome": {
-                        "outcome": "selected",
-                        "optionId": "allow_always"
-                    }
-                }))
-            );
-        }
-        other => panic!("unexpected permission response frame: {other:?}"),
-    }
-
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Response(JsonRpcResponse::success(
-            prompt_id,
-            json!({ "status": "complete" }),
-        )),
-    )
-    .await;
-
-    let prompt_response = prompt_task
-        .await
-        .expect("prompt task")
-        .expect("prompt response");
-    assert_eq!(
-        prompt_response.result(),
-        Some(&json!({ "status": "complete" }))
-    );
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn client_normalizes_opencode_style_permission_option_ids() {
-    let (client, mut reader, mut writer) = new_client(AcpClientOptions::default());
-    let mut notifications = client.subscribe_notifications();
-
-    let prompt_task = tokio::spawn({
-        let client = client.clone();
-        async move {
-            client
-                .request("session/prompt", Some(json!({ "sessionId": "session-oc" })))
-                .await
-        }
-    });
-
-    let prompt_request = read_message(&mut reader).await;
-    let prompt_id = match prompt_request {
-        JsonRpcMessage::Request(request) => request.id,
-        other => panic!("unexpected prompt frame: {other:?}"),
-    };
-
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Request(JsonRpcRequest {
-            jsonrpc: String::from("2.0"),
-            id: JsonRpcId::String(String::from("perm-opencode-1")),
-            method: String::from("session/request_permission"),
-            params: Some(json!({
-                "sessionId": "session-oc",
-                "options": [
-                    { "optionId": "once", "kind": "allow_once" },
-                    { "optionId": "always", "kind": "allow_always" },
-                    { "optionId": "reject", "kind": "reject_once" }
-                ]
-            })),
-        }),
-    )
-    .await;
-
-    let _ = recv_notification(&mut notifications).await;
-
-    client
-        .request(
-            "request/permission",
-            Some(json!({
-                "permissionId": "perm-opencode-1",
-                "reply": "always"
-            })),
-        )
-        .await
-        .expect("permission response");
-
-    let outbound_permission = read_message(&mut reader).await;
-    match outbound_permission {
-        JsonRpcMessage::Response(response) => {
-            assert_eq!(
-                response.result(),
-                Some(&json!({
-                    "outcome": {
-                        "outcome": "selected",
-                        "optionId": "always"
-                    }
-                }))
-            );
-        }
-        other => panic!("unexpected permission response frame: {other:?}"),
-    }
-
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Response(JsonRpcResponse::success(prompt_id, json!({ "done": true }))),
-    )
-    .await;
-
-    let prompt_response = prompt_task
-        .await
-        .expect("prompt task")
-        .expect("prompt response");
-    assert_eq!(prompt_response.result(), Some(&json!({ "done": true })));
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn client_deduplicates_repeated_permission_request_ids() {
-    let (client, mut reader, mut writer) = new_client(AcpClientOptions::default());
-    let mut notifications = client.subscribe_notifications();
-
-    let prompt_task = tokio::spawn({
-        let client = client.clone();
-        async move { client.request("session/prompt", Some(json!({}))).await }
-    });
-
-    let prompt_request = read_message(&mut reader).await;
-    let prompt_id = match prompt_request {
-        JsonRpcMessage::Request(request) => request.id,
-        other => panic!("unexpected prompt frame: {other:?}"),
-    };
-
-    let permission_request = JsonRpcMessage::Request(JsonRpcRequest {
-        jsonrpc: String::from("2.0"),
-        id: JsonRpcId::String(String::from("perm-dup-1")),
-        method: String::from("session/request_permission"),
-        params: Some(json!({
-            "options": [
-                { "optionId": "allow_once", "kind": "allow_once" },
-                { "optionId": "reject_once", "kind": "reject_once" }
-            ]
-        })),
-    });
-    write_message(&mut writer, &permission_request).await;
-    write_message(&mut writer, &permission_request).await;
-
-    let notification = recv_notification(&mut notifications).await;
-    assert_eq!(
-        notification.params.expect("permission params")["permissionId"],
-        json!("perm-dup-1")
-    );
-    assert!(
-        tokio::time::timeout(Duration::from_millis(50), notifications.recv())
-            .await
-            .is_err()
-    );
-
-    client
-        .request(
-            "request/permission",
-            Some(json!({
-                "permissionId": "perm-dup-1",
-                "reply": "once"
-            })),
-        )
-        .await
-        .expect("permission response");
-
-    let outbound_permission = read_message(&mut reader).await;
-    match outbound_permission {
-        JsonRpcMessage::Response(response) => {
-            assert_eq!(response.id, JsonRpcId::String(String::from("perm-dup-1")));
-        }
-        other => panic!("unexpected permission response frame: {other:?}"),
-    }
-
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Response(JsonRpcResponse::success(prompt_id, json!({ "done": true }))),
-    )
-    .await;
-
-    let _ = prompt_task
-        .await
-        .expect("prompt task")
-        .expect("prompt response");
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn client_falls_back_to_cancel_notification_when_request_form_is_unsupported() {
-    let (client, mut reader, mut writer) = new_client(AcpClientOptions::default());
-
-    let cancel_task = tokio::spawn({
-        let client = client.clone();
-        async move {
-            client
-                .request("session/cancel", Some(json!({ "sessionId": "session-1" })))
-                .await
-        }
-    });
-
-    let outbound_request = read_message(&mut reader).await;
-    let request_id = match outbound_request {
-        JsonRpcMessage::Request(request) => {
-            assert_eq!(request.method, "session/cancel");
-            request.id
-        }
-        other => panic!("unexpected cancel request: {other:?}"),
-    };
-
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Response(JsonRpcResponse::error_response(
-            request_id,
-            JsonRpcError {
-                code: -32601,
-                message: String::from("Method not found: session/cancel"),
-                data: Some(json!({ "method": "session/cancel" })),
-            },
-        )),
-    )
-    .await;
-
-    let fallback = read_message(&mut reader).await;
-    match fallback {
-        JsonRpcMessage::Notification(notification) => {
-            assert_eq!(notification.method, "session/cancel");
-            assert_eq!(
-                notification.params,
-                Some(json!({ "sessionId": "session-1" }))
-            );
-        }
-        other => panic!("unexpected fallback frame: {other:?}"),
-    }
-
-    let response = cancel_task
-        .await
-        .expect("cancel task")
-        .expect("cancel response");
-    assert_eq!(
-        response.result(),
-        Some(&json!({
-            "cancelled": false,
-            "requested": true,
-            "via": "notification-fallback"
-        }))
-    );
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn client_timeout_errors_include_recent_activity() {
-    let (client, mut reader, mut writer) = new_client(AcpClientOptions {
-        timeout: Duration::from_millis(50),
-        method_timeouts: BTreeMap::new(),
-        request_handler: None,
-        process_state_provider: Some(Arc::new(|| AcpClientProcessState {
-            exit_code: Some(137),
-            killed: Some(true),
-        })),
-        max_read_line_bytes: 16 * 1024 * 1024,
-    });
-
-    let request_task = tokio::spawn({
-        let client = client.clone();
-        async move {
-            client
-                .request("session/prompt", Some(json!({ "sessionId": "hang" })))
-                .await
-        }
-    });
-
-    let outbound_request = read_message(&mut reader).await;
-    match outbound_request {
-        JsonRpcMessage::Request(request) => {
-            assert_eq!(request.method, "session/prompt");
-        }
-        other => panic!("unexpected request frame: {other:?}"),
-    }
-
-    write_raw(&mut writer, "[sandbox.require] start node:url /\n").await;
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Notification(JsonRpcNotification {
-            jsonrpc: String::from("2.0"),
-            method: String::from("session/update"),
-            params: Some(json!({ "status": "thinking" })),
-        }),
-    )
-    .await;
-
-    let error = request_task
-        .await
-        .expect("request task")
-        .expect_err("request should time out");
-    let message = error.to_string();
-    assert!(message.contains("Recent ACP activity"));
-    assert!(message.contains("invalid_json_rpc code=-32700 Parse error"));
-    assert!(message.contains("received notification session/update"));
-    assert!(message.contains("process exitCode=137"));
-    assert!(message.contains("killed=true"));
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn client_rejects_adapter_lines_over_configured_limit() {
-    let (client, mut reader, mut writer) = new_client(AcpClientOptions {
-        timeout: Duration::from_secs(1),
-        method_timeouts: BTreeMap::new(),
-        request_handler: None,
-        process_state_provider: None,
-        max_read_line_bytes: 32,
-    });
-
-    let request_task = tokio::spawn({
-        let client = client.clone();
-        async move {
-            client
-                .request(
-                    "session/prompt",
-                    Some(json!({ "sessionId": "oversized-line" })),
-                )
-                .await
-        }
-    });
-
-    let outbound_request = read_message(&mut reader).await;
-    match outbound_request {
-        JsonRpcMessage::Request(request) => {
-            assert_eq!(request.method, "session/prompt");
-        }
-        other => panic!("unexpected request frame: {other:?}"),
-    }
-
-    write_raw(&mut writer, "xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx\n").await;
-
-    let error = request_task
-        .await
-        .expect("request task")
-        .expect_err("oversized line should fail the request");
-    assert!(
-        matches!(error, AcpClientError::Io(_)),
-        "unexpected error: {error:?}"
-    );
-    assert!(
-        error
-            .to_string()
-            .contains("ACP adapter emitted a line longer than 32 bytes"),
-        "unexpected oversized-line error: {error}"
-    );
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn client_waits_for_exit_drain_before_rejecting_pending_requests() {
-    let (client, mut reader, mut writer) = new_client(AcpClientOptions {
-        timeout: Duration::from_secs(1),
-        method_timeouts: BTreeMap::new(),
-        request_handler: None,
-        process_state_provider: None,
-        max_read_line_bytes: 16 * 1024 * 1024,
-    });
-
-    let started_at = Instant::now();
-    let request_task = tokio::spawn({
-        let client = client.clone();
-        async move {
-            client
-                .request("session/prompt", Some(json!({ "sessionId": "exit" })))
-                .await
-        }
-    });
-
-    let outbound_request = read_message(&mut reader).await;
-    match outbound_request {
-        JsonRpcMessage::Request(request) => {
-            assert_eq!(request.method, "session/prompt");
-        }
-        other => panic!("unexpected request frame: {other:?}"),
-    }
-
-    writer.shutdown().await.expect("shutdown server writer");
-    drop(writer);
-    drop(reader);
-
-    let error = request_task
-        .await
-        .expect("request task")
-        .expect_err("request should fail after exit");
-    assert!(
-        matches!(error, AcpClientError::Closed(_)),
-        "unexpected error: {error:?}"
-    );
-    assert!(started_at.elapsed() >= Duration::from_millis(45));
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn client_handles_inbound_requests_with_registered_handler() {
-    let handler: InboundRequestHandler = Arc::new(|request| {
-        Box::pin(async move {
-            Ok(Some(InboundRequestOutcome {
-                result: Some(json!({
-                    "echo": request.params.unwrap_or(Value::Null)
-                })),
-                error: None,
-            }))
-        })
-    });
-
-    let (client, mut reader, mut writer) = new_client(AcpClientOptions {
-        timeout: Duration::from_secs(1),
-        method_timeouts: BTreeMap::new(),
-        request_handler: Some(handler),
-        process_state_provider: None,
-        max_read_line_bytes: 16 * 1024 * 1024,
-    });
-    let mut notifications = client.subscribe_notifications();
-
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Request(JsonRpcRequest {
-            jsonrpc: String::from("2.0"),
-            id: JsonRpcId::Number(41),
-            method: String::from("fs/read_text_file"),
-            params: Some(json!({ "path": "/workspace/notes.txt" })),
-        }),
-    )
-    .await;
-
-    let notification = recv_notification(&mut notifications).await;
-    assert_eq!(notification.method, "fs/read_text_file");
-    assert_eq!(
-        notification.params,
-        Some(json!({
-            "path": "/workspace/notes.txt",
-            "requestId": 41
-        }))
-    );
-
-    let response = read_message(&mut reader).await;
-    match response {
-        JsonRpcMessage::Response(response) => {
-            assert_eq!(response.id, JsonRpcId::Number(41));
-            assert_eq!(
-                response.result(),
-                Some(&json!({
-                    "echo": {
-                        "path": "/workspace/notes.txt"
-                    }
-                }))
-            );
-        }
-        other => panic!("unexpected inbound response frame: {other:?}"),
-    }
-}
diff --git a/crates/sidecar/tests/acp/json_rpc.rs b/crates/sidecar/tests/acp/json_rpc.rs
deleted file mode 100644
index c495ebb08..000000000
--- a/crates/sidecar/tests/acp/json_rpc.rs
+++ /dev/null
@@ -1,121 +0,0 @@
-use crate::acp::{
-    deserialize_message, is_request, is_response, serialize_message, JsonRpcError, JsonRpcId,
-    JsonRpcMessage, JsonRpcNotification, JsonRpcRequest, JsonRpcResponse,
-    JsonRpcResponseShapeError,
-};
-use serde_json::json;
-
-#[test]
-fn json_rpc_codec_round_trips_all_message_shapes() {
-    let request = JsonRpcMessage::Request(JsonRpcRequest {
-        jsonrpc: String::from("2.0"),
-        id: JsonRpcId::Number(7),
-        method: String::from("session/prompt"),
-        params: Some(json!({ "sessionId": "session-1" })),
-    });
-    let response = JsonRpcMessage::Response(JsonRpcResponse::success(
-        JsonRpcId::String(String::from("req-1")),
-        json!({ "ok": true }),
-    ));
-    let notification = JsonRpcMessage::Notification(JsonRpcNotification {
-        jsonrpc: String::from("2.0"),
-        method: String::from("session/update"),
-        params: Some(json!({ "status": "thinking" })),
-    });
-
-    let encoded_request = serialize_message(&request).expect("encode request");
-    let encoded_response = serialize_message(&response).expect("encode response");
-    let encoded_notification = serialize_message(&notification).expect("encode notification");
-
-    assert_eq!(
-        deserialize_message(encoded_request.trim()),
-        Ok(request.clone())
-    );
-    assert_eq!(
-        deserialize_message(encoded_response.trim()),
-        Ok(response.clone())
-    );
-    assert_eq!(
-        deserialize_message(encoded_notification.trim()),
-        Ok(notification.clone())
-    );
-    assert!(is_request(&request));
-    assert!(is_response(&response));
-    assert!(!is_request(&notification));
-    assert!(!is_response(&notification));
-}
-
-#[test]
-fn json_rpc_deserializer_rejects_invalid_lines() {
-    let parse_error = deserialize_message("not json").expect_err("invalid json should fail");
-    assert_eq!(parse_error.code(), -32700);
-    assert_eq!(parse_error.id(), &JsonRpcId::Null);
-
-    let invalid_version = deserialize_message(r#"{"jsonrpc":"1.0","id":1,"method":"initialize"}"#)
-        .expect_err("wrong jsonrpc version should fail");
-    assert_eq!(invalid_version.code(), -32600);
-    assert_eq!(invalid_version.id(), &JsonRpcId::Number(1));
-
-    let missing_id = deserialize_message(r#"{"jsonrpc":"2.0","result":{"ok":true}}"#)
-        .expect_err("response without id should fail");
-    assert_eq!(missing_id.code(), -32600);
-    assert_eq!(missing_id.id(), &JsonRpcId::Null);
-
-    let invalid_params =
-        deserialize_message(r#"{"jsonrpc":"2.0","id":9,"method":"initialize","params":"bad"}"#)
-            .expect_err("non-object params should fail");
-    assert_eq!(invalid_params.code(), -32600);
-    assert_eq!(invalid_params.id(), &JsonRpcId::Number(9));
-}
-
-#[test]
-fn json_rpc_deserializer_rejects_ambiguous_request_response_shapes() {
-    let mixed_result =
-        deserialize_message(r#"{"jsonrpc":"2.0","id":11,"method":"initialize","result":{}}"#)
-            .expect_err("request with result field should fail");
-    assert_eq!(mixed_result.code(), -32600);
-    assert_eq!(mixed_result.id(), &JsonRpcId::Number(11));
-    assert_eq!(
-        mixed_result.message(),
-        "Invalid Request: method cannot be combined with result or error"
-    );
-
-    let mixed_error = deserialize_message(
-        r#"{"jsonrpc":"2.0","id":"req-12","method":"initialize","error":{"code":-32000,"message":"boom"}}"#,
-    )
-    .expect_err("request with error field should fail");
-    assert_eq!(mixed_error.code(), -32600);
-    assert_eq!(mixed_error.id(), &JsonRpcId::String(String::from("req-12")));
-}
-
-#[test]
-fn json_rpc_error_serializes_optional_data() {
-    let response = JsonRpcMessage::Response(JsonRpcResponse::error_response(
-        JsonRpcId::Null,
-        JsonRpcError {
-            code: -32601,
-            message: String::from("Method not found"),
-            data: Some(json!({ "method": "session/cancel" })),
-        },
-    ));
-
-    let encoded = serialize_message(&response).expect("encode error response");
-    assert!(encoded.contains("\"data\":{\"method\":\"session/cancel\"}"));
-}
-
-#[test]
-fn json_rpc_response_rejects_both_result_and_error() {
-    let error = JsonRpcResponse::try_from_parts(
-        String::from("2.0"),
-        JsonRpcId::Number(1),
-        Some(json!({ "ok": true })),
-        Some(JsonRpcError {
-            code: -32000,
-            message: String::from("boom"),
-            data: None,
-        }),
-    )
-    .expect_err("response shape should be rejected");
-
-    assert_eq!(error, JsonRpcResponseShapeError::BothResultAndError);
-}
diff --git a/crates/sidecar/tests/acp/mod.rs b/crates/sidecar/tests/acp/mod.rs
deleted file mode 100644
index c0468ef84..000000000
--- a/crates/sidecar/tests/acp/mod.rs
+++ /dev/null
@@ -1,2 +0,0 @@
-mod client;
-mod json_rpc;
diff --git a/crates/sidecar/tests/acp_integration.rs b/crates/sidecar/tests/acp_integration.rs
deleted file mode 100644
index 8c4d8ca70..000000000
--- a/crates/sidecar/tests/acp_integration.rs
+++ /dev/null
@@ -1,9 +0,0 @@
-#[allow(dead_code, unused_imports)]
-#[path = "acp_legacy/mod.rs"]
-mod acp;
-#[allow(dead_code, unused_imports)]
-#[path = "../src/json_rpc.rs"]
-mod json_rpc;
-
-#[path = "acp/mod.rs"]
-mod acp_tests;
diff --git a/crates/sidecar/tests/acp_legacy/client.rs b/crates/sidecar/tests/acp_legacy/client.rs
deleted file mode 100644
index c47a7111e..000000000
--- a/crates/sidecar/tests/acp_legacy/client.rs
+++ /dev/null
@@ -1,1271 +0,0 @@
-use crate::acp::compat::{
-    PendingPermissionRequest, PendingPermissionRequests, SeenInboundRequestIds,
-};
-use crate::acp::AcpTimeoutDiagnostics;
-use crate::json_rpc::{
-    serialize_message, JsonRpcError, JsonRpcId, JsonRpcMessage, JsonRpcNotification,
-    JsonRpcRequest, JsonRpcResponse,
-};
-use serde_json::{json, Map, Value};
-use std::collections::{BTreeMap, VecDeque};
-use std::future::Future;
-use std::pin::Pin;
-use std::sync::atomic::{AtomicBool, AtomicI64, Ordering};
-use std::sync::{Arc, Mutex};
-use std::time::Duration;
-use tokio::io::{AsyncBufReadExt, AsyncRead, AsyncWrite, AsyncWriteExt, BufReader};
-use tokio::sync::{broadcast, oneshot, Mutex as AsyncMutex};
-
-const DEFAULT_TIMEOUT_MS: Duration = Duration::from_millis(120_000);
-const INITIALIZE_TIMEOUT_MS: Duration = Duration::from_millis(10_000);
-const SESSION_NEW_TIMEOUT_MS: Duration = Duration::from_millis(30_000);
-const SESSION_PROMPT_TIMEOUT_MS: Duration = Duration::from_millis(600_000);
-const EXIT_DRAIN_GRACE_MS: Duration = Duration::from_millis(50);
-const DEFAULT_MAX_READ_LINE_BYTES: usize = 16 * 1024 * 1024;
-const LEGACY_PERMISSION_METHOD: &str = "request/permission";
-const ACP_PERMISSION_METHOD: &str = "session/request_permission";
-const ACP_CANCEL_METHOD: &str = "session/cancel";
-const RECENT_ACTIVITY_LIMIT: usize = 20;
-const ACTIVITY_TEXT_LIMIT: usize = 240;
-
-pub type InboundRequestFuture =
-    Pin<Box<dyn Future<Output = Result<Option<InboundRequestOutcome>, String>> + Send + 'static>>;
-pub type InboundRequestHandler = Arc<dyn Fn(JsonRpcRequest) -> InboundRequestFuture + Send + Sync>;
-pub type AcpClientProcessStateProvider =
-    Arc<dyn Fn() -> AcpClientProcessState + Send + Sync + 'static>;
-
-#[derive(Debug, Clone, PartialEq)]
-pub struct InboundRequestOutcome {
-    pub result: Option<Value>,
-    pub error: Option<JsonRpcError>,
-}
-
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct AcpClientProcessState {
-    pub exit_code: Option<i32>,
-    pub killed: Option<bool>,
-}
-
-#[derive(Clone)]
-pub struct AcpClient {
-    inner: Arc<AcpClientInner>,
-}
-
-#[derive(Clone)]
-pub struct AcpClientOptions {
-    pub timeout: Duration,
-    pub method_timeouts: BTreeMap<String, Duration>,
-    pub request_handler: Option<InboundRequestHandler>,
-    pub process_state_provider: Option<AcpClientProcessStateProvider>,
-    pub max_read_line_bytes: usize,
-}
-
-impl Default for AcpClientOptions {
-    fn default() -> Self {
-        Self {
-            timeout: DEFAULT_TIMEOUT_MS,
-            method_timeouts: AcpClient::default_method_timeouts(),
-            request_handler: None,
-            process_state_provider: None,
-            max_read_line_bytes: DEFAULT_MAX_READ_LINE_BYTES,
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum AcpClientError {
-    Closed(String),
-    Timeout(String),
-    Io(String),
-}
-
-impl std::fmt::Display for AcpClientError {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        match self {
-            Self::Closed(message) | Self::Timeout(message) | Self::Io(message) => {
-                f.write_str(message)
-            }
-        }
-    }
-}
-
-impl std::error::Error for AcpClientError {}
-
-struct AcpClientInner {
-    writer: AsyncMutex<Pin<Box<dyn AsyncWrite + Send>>>,
-    pending: Mutex<BTreeMap<JsonRpcId, oneshot::Sender<Result<JsonRpcResponse, AcpClientError>>>>,
-    seen_inbound_request_ids: Mutex<SeenInboundRequestIds>,
-    pending_permission_requests: Mutex<PendingPermissionRequests>,
-    request_handler: Mutex<Option<InboundRequestHandler>>,
-    notification_tx: broadcast::Sender<JsonRpcNotification>,
-    recent_activity: Mutex<VecDeque<String>>,
-    next_id: AtomicI64,
-    closed: AtomicBool,
-    terminal_error: Mutex<Option<AcpClientError>>,
-    transport_state: Mutex<String>,
-    timeout: Duration,
-    method_timeouts: BTreeMap<String, Duration>,
-    process_state_provider: Option<AcpClientProcessStateProvider>,
-    max_read_line_bytes: usize,
-}
-
-impl AcpClient {
-    pub fn new<R, W>(reader: R, writer: W, options: AcpClientOptions) -> Self
-    where
-        R: AsyncRead + Unpin + Send + 'static,
-        W: AsyncWrite + Unpin + Send + 'static,
-    {
-        let (notification_tx, _) = broadcast::channel(64);
-        let inner = Arc::new(AcpClientInner {
-            writer: AsyncMutex::new(Box::pin(writer)),
-            pending: Mutex::new(BTreeMap::new()),
-            seen_inbound_request_ids: Mutex::new(SeenInboundRequestIds::default()),
-            pending_permission_requests: Mutex::new(PendingPermissionRequests::default()),
-            request_handler: Mutex::new(options.request_handler),
-            notification_tx,
-            recent_activity: Mutex::new(VecDeque::with_capacity(RECENT_ACTIVITY_LIMIT)),
-            next_id: AtomicI64::new(1),
-            closed: AtomicBool::new(false),
-            terminal_error: Mutex::new(None),
-            transport_state: Mutex::new(String::from("transport_open")),
-            timeout: options.timeout,
-            method_timeouts: options.method_timeouts,
-            process_state_provider: options.process_state_provider,
-            max_read_line_bytes: options.max_read_line_bytes,
-        });
-
-        tokio::spawn(read_loop(BufReader::new(reader), Arc::clone(&inner)));
-
-        Self { inner }
-    }
-
-    pub fn subscribe_notifications(&self) -> broadcast::Receiver<JsonRpcNotification> {
-        self.inner.notification_tx.subscribe()
-    }
-
-    pub fn default_method_timeouts() -> BTreeMap<String, Duration> {
-        BTreeMap::from([
-            (String::from("initialize"), INITIALIZE_TIMEOUT_MS),
-            (String::from("session/new"), SESSION_NEW_TIMEOUT_MS),
-            (String::from("session/prompt"), SESSION_PROMPT_TIMEOUT_MS),
-        ])
-    }
-
-    pub fn set_request_handler(&self, handler: Option<InboundRequestHandler>) {
-        *self
-            .inner
-            .request_handler
-            .lock()
-            .expect("request handler lock poisoned") = handler;
-    }
-
-    pub async fn request(
-        &self,
-        method: impl Into<String>,
-        params: Option<Value>,
-    ) -> Result<JsonRpcResponse, AcpClientError> {
-        if let Some(error) = self.inner.terminal_error() {
-            return Err(error);
-        }
-
-        let method = method.into();
-        if let Some(response) = self
-            .maybe_handle_permission_response(&method, params.clone())
-            .await?
-        {
-            return Ok(response);
-        }
-        let request_timeout = self.inner.timeout_for_method(&method);
-
-        let id = JsonRpcId::Number(self.inner.next_id.fetch_add(1, Ordering::Relaxed));
-        let message = JsonRpcRequest {
-            jsonrpc: String::from("2.0"),
-            id: id.clone(),
-            method: method.clone(),
-            params: params.clone(),
-        };
-
-        let (tx, rx) = oneshot::channel();
-        self.inner
-            .pending
-            .lock()
-            .expect("pending lock poisoned")
-            .insert(id.clone(), tx);
-
-        self.inner
-            .record_activity(format!("sent request {method} id={id}"));
-        if let Err(error) = self.write_message(JsonRpcMessage::Request(message)).await {
-            self.inner
-                .pending
-                .lock()
-                .expect("pending lock poisoned")
-                .remove(&id);
-            return Err(error);
-        }
-
-        let response = match tokio::time::timeout(request_timeout, rx).await {
-            Ok(Ok(Ok(response))) => response,
-            Ok(Ok(Err(error))) => return Err(error),
-            Ok(Err(_)) => {
-                return Err(AcpClientError::Closed(String::from(
-                    "ACP client request channel closed before a response arrived",
-                )));
-            }
-            Err(_) => {
-                self.inner
-                    .pending
-                    .lock()
-                    .expect("pending lock poisoned")
-                    .remove(&id);
-                self.dispatch_timeout_cancel(&method, params.as_ref()).await;
-                return Err(self
-                    .inner
-                    .create_timeout_error(&method, &id, request_timeout));
-            }
-        };
-
-        if method != ACP_CANCEL_METHOD || !is_cancel_method_not_found(&response) {
-            return Ok(response);
-        }
-
-        self.notify(method.clone(), params).await?;
-        Ok(JsonRpcResponse::success(
-            response.id,
-            json!({
-                "cancelled": false,
-                "requested": true,
-                "via": "notification-fallback",
-            }),
-        ))
-    }
-
-    pub async fn notify(
-        &self,
-        method: impl Into<String>,
-        params: Option<Value>,
-    ) -> Result<(), AcpClientError> {
-        if let Some(error) = self.inner.terminal_error() {
-            return Err(error);
-        }
-
-        let method = method.into();
-        self.inner
-            .record_activity(format!("sent notification {method}"));
-        self.write_message(JsonRpcMessage::Notification(JsonRpcNotification {
-            jsonrpc: String::from("2.0"),
-            method,
-            params,
-        }))
-        .await
-    }
-
-    pub async fn close(&self) -> Result<(), AcpClientError> {
-        if self.inner.closed.swap(true, Ordering::SeqCst) {
-            return Ok(());
-        }
-
-        {
-            let mut terminal_error = self
-                .inner
-                .terminal_error
-                .lock()
-                .expect("terminal error lock poisoned");
-            terminal_error
-                .get_or_insert_with(|| AcpClientError::Closed(String::from("AcpClient closed")));
-        }
-
-        {
-            let mut writer = self.inner.writer.lock().await;
-            writer.shutdown().await.map_err(|error| {
-                AcpClientError::Io(format!("failed to close ACP writer: {error}"))
-            })?;
-        }
-        self.inner
-            .reject_all(AcpClientError::Closed(String::from("AcpClient closed")));
-        Ok(())
-    }
-
-    async fn maybe_handle_permission_response(
-        &self,
-        method: &str,
-        params: Option<Value>,
-    ) -> Result<Option<JsonRpcResponse>, AcpClientError> {
-        if method != LEGACY_PERMISSION_METHOD && method != ACP_PERMISSION_METHOD {
-            return Ok(None);
-        }
-
-        let payload = to_record(params);
-        let permission_id = match payload.get("permissionId") {
-            Some(Value::String(value)) => value.clone(),
-            Some(Value::Number(value)) => value.to_string(),
-            _ => return Ok(None),
-        };
-
-        let pending = self
-            .inner
-            .pending_permission_requests
-            .lock()
-            .expect("permission lock poisoned")
-            .remove_by_permission_id(&permission_id);
-        let Some(pending) = pending else {
-            return Ok(None);
-        };
-        if pending.method != ACP_PERMISSION_METHOD {
-            return Ok(None);
-        }
-
-        let result = normalize_permission_result(&payload, &pending);
-        let response = JsonRpcResponse::success(pending.id.clone(), result);
-
-        self.inner
-            .record_activity(format!("sent permission response id={}", pending.id));
-        self.write_message(JsonRpcMessage::Response(response.clone()))
-            .await?;
-        Ok(Some(response))
-    }
-
-    async fn write_message(&self, message: JsonRpcMessage) -> Result<(), AcpClientError> {
-        write_with_inner(&self.inner, message).await
-    }
-
-    async fn dispatch_timeout_cancel(&self, method: &str, params: Option<&Value>) {
-        let Some(cancel_params) = timeout_cancel_params(method, params) else {
-            return;
-        };
-        let _ = self.notify(ACP_CANCEL_METHOD, Some(cancel_params)).await;
-    }
-}
-
-impl AcpClientInner {
-    fn terminal_error(&self) -> Option<AcpClientError> {
-        self.terminal_error
-            .lock()
-            .expect("terminal error lock poisoned")
-            .clone()
-    }
-
-    fn record_activity(&self, entry: String) {
-        let mut recent = self
-            .recent_activity
-            .lock()
-            .expect("recent activity lock poisoned");
-        recent.push_back(entry);
-        while recent.len() > RECENT_ACTIVITY_LIMIT {
-            recent.pop_front();
-        }
-    }
-
-    fn create_timeout_error(
-        &self,
-        method: &str,
-        id: &JsonRpcId,
-        timeout: Duration,
-    ) -> AcpClientError {
-        let transport_state = self
-            .transport_state
-            .lock()
-            .expect("transport state lock poisoned")
-            .clone();
-        let recent_activity = self
-            .recent_activity
-            .lock()
-            .expect("recent activity lock poisoned")
-            .iter()
-            .cloned()
-            .collect::<Vec<_>>();
-        let process_state = self
-            .process_state_provider
-            .as_ref()
-            .map(|provider| provider())
-            .unwrap_or_default();
-        let timeout_ms = u64::try_from(timeout.as_millis()).unwrap_or(u64::MAX);
-        let diagnostics = AcpTimeoutDiagnostics::new(
-            method,
-            id.clone(),
-            timeout_ms,
-            process_state.exit_code,
-            process_state.killed,
-            Some(transport_state),
-            recent_activity,
-        );
-        AcpClientError::Timeout(diagnostics.message())
-    }
-
-    fn timeout_for_method(&self, method: &str) -> Duration {
-        self.method_timeouts
-            .get(method)
-            .copied()
-            .unwrap_or(self.timeout)
-    }
-
-    fn reject_all(&self, error: AcpClientError) {
-        let responders = {
-            let mut pending = self.pending.lock().expect("pending lock poisoned");
-            std::mem::take(&mut *pending)
-        };
-        for (_, responder) in responders {
-            let _ = responder.send(Err(error.clone()));
-        }
-        self.pending_permission_requests
-            .lock()
-            .expect("permission lock poisoned")
-            .clear();
-        self.seen_inbound_request_ids
-            .lock()
-            .expect("seen request ids lock poisoned")
-            .clear();
-    }
-
-    fn fail_transport(&self, error: AcpClientError) -> AcpClientError {
-        if !self.closed.swap(true, Ordering::SeqCst) {
-            let mut terminal_error = self
-                .terminal_error
-                .lock()
-                .expect("terminal error lock poisoned");
-            terminal_error.get_or_insert_with(|| error.clone());
-            self.reject_all(error.clone());
-        }
-        error
-    }
-}
-
-async fn read_loop<R>(mut reader: BufReader<R>, inner: Arc<AcpClientInner>)
-where
-    R: AsyncRead + Unpin + Send + 'static,
-{
-    let max_read_line_bytes = inner.max_read_line_bytes;
-    loop {
-        match read_bounded_line(&mut reader, max_read_line_bytes).await {
-            Ok(Some(line)) => {
-                let trimmed = line.trim();
-                if trimmed.is_empty() {
-                    continue;
-                }
-
-                let message = match crate::acp::deserialize_message(trimmed) {
-                    Ok(message) => message,
-                    Err(error) => {
-                        inner.record_activity(format!(
-                            "invalid_json_rpc code={} {}",
-                            error.code(),
-                            truncate_activity_text(error.message())
-                        ));
-                        if write_with_inner(&inner, JsonRpcMessage::Response(error.to_response()))
-                            .await
-                            .is_err()
-                        {
-                            return;
-                        }
-                        continue;
-                    }
-                };
-                inner.record_activity(summarize_inbound_message(&message));
-
-                match message {
-                    JsonRpcMessage::Response(response) => {
-                        if let Some(pending) = inner
-                            .pending
-                            .lock()
-                            .expect("pending lock poisoned")
-                            .remove(&response.id)
-                        {
-                            let _ = pending.send(Ok(response));
-                        }
-                    }
-                    JsonRpcMessage::Request(request) => {
-                        handle_inbound_request(Arc::clone(&inner), request).await;
-                    }
-                    JsonRpcMessage::Notification(notification) => {
-                        let _ = inner.notification_tx.send(notification);
-                    }
-                }
-            }
-            Ok(None) => {
-                *inner
-                    .transport_state
-                    .lock()
-                    .expect("transport state lock poisoned") = String::from("transport_closed");
-                inner.record_activity(String::from("process_exit transport_closed"));
-                break;
-            }
-            Err(error) => {
-                *inner
-                    .transport_state
-                    .lock()
-                    .expect("transport state lock poisoned") = format!("transport_error {error}");
-                inner.record_activity(format!("process_exit transport_error={error}"));
-                inner.fail_transport(AcpClientError::Io(format!(
-                    "failed to read ACP frame: {error}"
-                )));
-                return;
-            }
-        }
-    }
-
-    tokio::time::sleep(EXIT_DRAIN_GRACE_MS).await;
-    if !inner.closed.load(Ordering::SeqCst) {
-        inner.fail_transport(AcpClientError::Closed(String::from("Agent process exited")));
-    }
-}
-
-async fn read_bounded_line<R>(
-    reader: &mut BufReader<R>,
-    max_read_line_bytes: usize,
-) -> std::io::Result<Option<String>>
-where
-    R: AsyncRead + Unpin,
-{
-    let mut line = Vec::new();
-
-    loop {
-        let available = reader.fill_buf().await?;
-        if available.is_empty() {
-            if line.is_empty() {
-                return Ok(None);
-            }
-            break;
-        }
-
-        let (chunk, consume_len, line_complete) =
-            if let Some(newline_pos) = available.iter().position(|byte| *byte == b'\n') {
-                (&available[..newline_pos], newline_pos + 1, true)
-            } else {
-                (available, available.len(), false)
-            };
-
-        if line.len().saturating_add(chunk.len()) > max_read_line_bytes {
-            return Err(std::io::Error::new(
-                std::io::ErrorKind::InvalidData,
-                format!("ACP adapter emitted a line longer than {max_read_line_bytes} bytes"),
-            ));
-        }
-
-        line.extend_from_slice(chunk);
-        reader.consume(consume_len);
-
-        if line_complete {
-            break;
-        }
-    }
-
-    if line.last() == Some(&b'\r') {
-        line.pop();
-    }
-
-    String::from_utf8(line)
-        .map(Some)
-        .map_err(|error| std::io::Error::new(std::io::ErrorKind::InvalidData, error))
-}
-
-async fn handle_inbound_request(inner: Arc<AcpClientInner>, request: JsonRpcRequest) {
-    {
-        let mut seen = inner
-            .seen_inbound_request_ids
-            .lock()
-            .expect("seen request ids lock poisoned");
-        if seen.contains(&request.id) {
-            return;
-        }
-        seen.insert(request.id.clone());
-    }
-
-    if request.method == ACP_PERMISSION_METHOD {
-        let params = to_record(request.params.clone());
-        let permission_id = inner
-            .pending_permission_requests
-            .lock()
-            .expect("permission lock poisoned")
-            .insert(PendingPermissionRequest {
-                id: request.id.clone(),
-                method: request.method.clone(),
-                options: params
-                    .get("options")
-                    .and_then(Value::as_array)
-                    .map(|items| {
-                        items
-                            .iter()
-                            .filter_map(Value::as_object)
-                            .cloned()
-                            .collect::<Vec<_>>()
-                    }),
-            });
-
-        let mut notification_params = params;
-        notification_params.insert(
-            String::from("permissionId"),
-            Value::String(permission_id.clone()),
-        );
-        notification_params.insert(
-            String::from("_acpMethod"),
-            Value::String(request.method.clone()),
-        );
-        let _ = inner.notification_tx.send(JsonRpcNotification {
-            jsonrpc: String::from("2.0"),
-            method: String::from(LEGACY_PERMISSION_METHOD),
-            params: Some(Value::Object(notification_params)),
-        });
-        return;
-    }
-
-    let mut notification_params = to_record(request.params.clone());
-    notification_params.insert(
-        String::from("requestId"),
-        serde_json::to_value(&request.id).expect("serialize request id"),
-    );
-    let _ = inner.notification_tx.send(JsonRpcNotification {
-        jsonrpc: String::from("2.0"),
-        method: request.method.clone(),
-        params: Some(Value::Object(notification_params)),
-    });
-
-    let handler = inner
-        .request_handler
-        .lock()
-        .expect("request handler lock poisoned")
-        .clone();
-    let Some(handler) = handler else {
-        let response = method_not_found_response(&request);
-        if write_with_inner(&inner, JsonRpcMessage::Response(response))
-            .await
-            .is_err()
-        {
-            return;
-        }
-        return;
-    };
-
-    let response = match tokio::time::timeout(inner.timeout, handler(request.clone())).await {
-        Ok(result) => match result {
-            Ok(Some(outcome)) if outcome.error.is_some() => JsonRpcResponse::error_response(
-                request.id,
-                outcome.error.expect("guard ensured error is present"),
-            ),
-            Ok(Some(outcome)) => {
-                JsonRpcResponse::success(request.id, outcome.result.unwrap_or(Value::Null))
-            }
-            Ok(None) => method_not_found_response(&request),
-            Err(message) => JsonRpcResponse::error_response(
-                request.id,
-                JsonRpcError {
-                    code: -32000,
-                    message,
-                    data: None,
-                },
-            ),
-        },
-        Err(_) => {
-            inner.record_activity(format!(
-                "timed out waiting for inbound host handler {} id={}",
-                request.method, request.id
-            ));
-            method_not_found_response(&request)
-        }
-    };
-
-    let _ = write_with_inner(&inner, JsonRpcMessage::Response(response)).await;
-}
-
-#[cfg(test)]
-impl AcpClient {
-    fn seen_inbound_request_id_count_for_tests(&self) -> usize {
-        self.inner
-            .seen_inbound_request_ids
-            .lock()
-            .expect("seen request ids lock poisoned")
-            .len()
-    }
-
-    fn pending_permission_request_count_for_tests(&self) -> usize {
-        self.inner
-            .pending_permission_requests
-            .lock()
-            .expect("permission lock poisoned")
-            .len()
-    }
-
-    fn recent_activity_for_tests(&self) -> Vec<String> {
-        self.inner
-            .recent_activity
-            .lock()
-            .expect("recent activity lock poisoned")
-            .iter()
-            .cloned()
-            .collect()
-    }
-
-    fn transport_state_for_tests(&self) -> String {
-        self.inner
-            .transport_state
-            .lock()
-            .expect("transport state lock poisoned")
-            .clone()
-    }
-}
-
-fn method_not_found_response(request: &JsonRpcRequest) -> JsonRpcResponse {
-    JsonRpcResponse::error_response(
-        request.id.clone(),
-        JsonRpcError {
-            code: -32601,
-            message: format!("Method not found: {}", request.method),
-            data: None,
-        },
-    )
-}
-
-async fn write_with_inner(
-    inner: &AcpClientInner,
-    message: JsonRpcMessage,
-) -> Result<(), AcpClientError> {
-    let encoded = serialize_message(&message)
-        .map_err(|error| AcpClientError::Io(format!("failed to serialize ACP frame: {error}")))?;
-    let mut writer = inner.writer.lock().await;
-    writer
-        .write_all(encoded.as_bytes())
-        .await
-        .map_err(|error| {
-            *inner
-                .transport_state
-                .lock()
-                .expect("transport state lock poisoned") = format!("transport_write_error {error}");
-            inner.record_activity(format!("process_exit transport_write_error={error}"));
-            inner.fail_transport(AcpClientError::Io(format!(
-                "failed to write ACP frame: {error}"
-            )))
-        })?;
-    writer.flush().await.map_err(|error| {
-        *inner
-            .transport_state
-            .lock()
-            .expect("transport state lock poisoned") = format!("transport_flush_error {error}");
-        inner.record_activity(format!("process_exit transport_flush_error={error}"));
-        inner.fail_transport(AcpClientError::Io(format!(
-            "failed to flush ACP frame: {error}"
-        )))
-    })?;
-    Ok(())
-}
-
-fn normalize_permission_result(
-    params: &Map<String, Value>,
-    pending: &PendingPermissionRequest,
-) -> Value {
-    if let Some(outcome) = params.get("outcome") {
-        if outcome.is_object() {
-            return json!({ "outcome": outcome });
-        }
-    }
-
-    let requested_reply = params.get("reply").and_then(Value::as_str);
-    if let Some(selected_option_id) =
-        resolve_permission_option_id(&pending.options, requested_reply)
-    {
-        return json!({
-            "outcome": {
-                "outcome": "selected",
-                "optionId": selected_option_id,
-            }
-        });
-    }
-
-    match requested_reply {
-        Some("always") => json!({
-            "outcome": {
-                "outcome": "selected",
-                "optionId": "allow_always",
-            }
-        }),
-        Some("once") => json!({
-            "outcome": {
-                "outcome": "selected",
-                "optionId": "allow_once",
-            }
-        }),
-        Some("reject") => json!({
-            "outcome": {
-                "outcome": "selected",
-                "optionId": "reject_once",
-            }
-        }),
-        _ => json!({
-            "outcome": {
-                "outcome": "cancelled",
-            }
-        }),
-    }
-}
-
-fn resolve_permission_option_id(
-    options: &Option<Vec<Map<String, Value>>>,
-    reply: Option<&str>,
-) -> Option<String> {
-    let reply = reply?;
-    let targets = match reply {
-        "always" => (["always", "allow_always"], ["allow_always"]),
-        "once" => (["once", "allow_once"], ["allow_once"]),
-        "reject" => (["reject", "reject_once"], ["reject_once"]),
-        _ => return None,
-    };
-
-    let options = options.as_ref()?;
-    let matched = options.iter().find(|option| {
-        let option_id_matches = option
-            .get("optionId")
-            .and_then(Value::as_str)
-            .map(|value| targets.0.contains(&value))
-            .unwrap_or(false);
-        let kind_matches = option
-            .get("kind")
-            .and_then(Value::as_str)
-            .map(|value| targets.1.contains(&value))
-            .unwrap_or(false);
-        option_id_matches || kind_matches
-    })?;
-
-    matched
-        .get("optionId")
-        .and_then(Value::as_str)
-        .map(String::from)
-}
-
-fn is_cancel_method_not_found(response: &JsonRpcResponse) -> bool {
-    let Some(error) = response.error() else {
-        return false;
-    };
-    if error.code != -32601 {
-        return false;
-    }
-
-    if let Some(data) = error.data.as_ref().and_then(Value::as_object) {
-        if data
-            .get("method")
-            .and_then(Value::as_str)
-            .is_some_and(|method| method == ACP_CANCEL_METHOD)
-        {
-            return true;
-        }
-    }
-
-    error.message.contains(ACP_CANCEL_METHOD)
-}
-
-fn to_record(value: Option<Value>) -> Map<String, Value> {
-    match value {
-        Some(Value::Object(map)) => map,
-        _ => Map::new(),
-    }
-}
-
-fn timeout_cancel_params(method: &str, params: Option<&Value>) -> Option<Value> {
-    if method == ACP_CANCEL_METHOD {
-        return None;
-    }
-
-    let params = params?.as_object()?;
-    let session_id = params.get("sessionId")?.clone();
-    Some(json!({ "sessionId": session_id }))
-}
-
-fn truncate_activity_text(value: &str) -> String {
-    if value.len() <= ACTIVITY_TEXT_LIMIT {
-        return String::from(value);
-    }
-    format!("{}...", &value[..ACTIVITY_TEXT_LIMIT])
-}
-
-fn summarize_inbound_message(message: &JsonRpcMessage) -> String {
-    match message {
-        JsonRpcMessage::Response(response) => match response.error() {
-            Some(error) => truncate_activity_text(&format!(
-                "received response id={} error={}:{}",
-                response.id, error.code, error.message
-            )),
-            None => format!("received response id={}", response.id),
-        },
-        JsonRpcMessage::Request(request) => truncate_activity_text(&format!(
-            "received request {} id={}",
-            request.method, request.id
-        )),
-        JsonRpcMessage::Notification(notification) => {
-            truncate_activity_text(&format!("received notification {}", notification.method))
-        }
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use tokio::io::{split, AsyncBufReadExt, AsyncWriteExt, BufReader};
-    use tokio::time::timeout;
-
-    #[tokio::test(flavor = "current_thread")]
-    async fn client_seen_request_ids_stay_bounded_after_many_unique_requests() {
-        let (client_stream, server_stream) = tokio::io::duplex(256 * 1024);
-        let (client_reader, client_writer) = split(client_stream);
-        let (server_reader, mut server_writer) = split(server_stream);
-        let client = AcpClient::new(client_reader, client_writer, AcpClientOptions::default());
-
-        let response_drain = tokio::spawn(async move {
-            let mut lines = BufReader::new(server_reader).lines();
-            let mut responses = 0usize;
-            while responses < 100_000 {
-                let line = lines
-                    .next_line()
-                    .await
-                    .expect("read response line")
-                    .expect("response line should exist");
-                let message = crate::acp::deserialize_message(&line).expect("decode response");
-                match message {
-                    JsonRpcMessage::Response(_) => responses += 1,
-                    other => {
-                        panic!("unexpected outbound frame while draining responses: {other:?}")
-                    }
-                }
-            }
-        });
-
-        for request_id in 0..100_000 {
-            let message = JsonRpcMessage::Request(JsonRpcRequest {
-                jsonrpc: String::from("2.0"),
-                id: JsonRpcId::Number(request_id),
-                method: String::from("fs/read_text_file"),
-                params: Some(json!({ "path": format!("/tmp/{request_id}.txt") })),
-            });
-            let encoded = serialize_message(&message).expect("encode request");
-            server_writer
-                .write_all(encoded.as_bytes())
-                .await
-                .expect("write request");
-        }
-        server_writer.flush().await.expect("flush requests");
-
-        response_drain.await.expect("response drain");
-        assert_eq!(
-            client.seen_inbound_request_id_count_for_tests(),
-            crate::acp::compat::SEEN_INBOUND_REQUEST_ID_RETENTION_LIMIT
-        );
-    }
-
-    #[tokio::test(flavor = "current_thread")]
-    async fn client_pending_permission_requests_stay_bounded_with_seen_request_ids() {
-        let (client_stream, server_stream) = tokio::io::duplex(8 * 1024);
-        let (client_reader, client_writer) = split(client_stream);
-        let (_server_reader, mut server_writer) = split(server_stream);
-        let client = AcpClient::new(client_reader, client_writer, AcpClientOptions::default());
-        let mut notifications = client.subscribe_notifications();
-
-        for request_id in 0..=crate::acp::compat::PENDING_PERMISSION_REQUEST_RETENTION_LIMIT {
-            let message = JsonRpcMessage::Request(JsonRpcRequest {
-                jsonrpc: String::from("2.0"),
-                id: JsonRpcId::Number(request_id as i64),
-                method: String::from("session/request_permission"),
-                params: Some(json!({ "path": format!("/tmp/{request_id}.txt") })),
-            });
-            let encoded = serialize_message(&message).expect("encode request");
-            server_writer
-                .write_all(encoded.as_bytes())
-                .await
-                .expect("write request");
-            server_writer.flush().await.expect("flush request");
-            let notification = notifications.recv().await.expect("permission notification");
-            assert_eq!(notification.method, LEGACY_PERMISSION_METHOD);
-        }
-
-        assert_eq!(
-            client.seen_inbound_request_id_count_for_tests(),
-            crate::acp::compat::SEEN_INBOUND_REQUEST_ID_RETENTION_LIMIT
-        );
-        assert_eq!(
-            client.pending_permission_request_count_for_tests(),
-            crate::acp::compat::PENDING_PERMISSION_REQUEST_RETENTION_LIMIT
-        );
-    }
-
-    #[tokio::test(flavor = "current_thread")]
-    async fn client_permission_reply_survives_unrelated_seen_request_id_eviction() {
-        let (client_stream, server_stream) = tokio::io::duplex(16 * 1024);
-        let (client_reader, client_writer) = split(client_stream);
-        let (server_reader, mut server_writer) = split(server_stream);
-        let client = AcpClient::new(client_reader, client_writer, AcpClientOptions::default());
-        let mut notifications = client.subscribe_notifications();
-        let mut outbound_lines = BufReader::new(server_reader).lines();
-
-        let permission_request = JsonRpcMessage::Request(JsonRpcRequest {
-            jsonrpc: String::from("2.0"),
-            id: JsonRpcId::String(String::from("perm-late")),
-            method: String::from("session/request_permission"),
-            params: Some(json!({ "path": "/tmp/late.txt" })),
-        });
-        let encoded = serialize_message(&permission_request).expect("encode permission request");
-        server_writer
-            .write_all(encoded.as_bytes())
-            .await
-            .expect("write permission request");
-        server_writer
-            .flush()
-            .await
-            .expect("flush permission request");
-        let notification = notifications.recv().await.expect("permission notification");
-        assert_eq!(notification.method, LEGACY_PERMISSION_METHOD);
-
-        for request_id in 0..=crate::acp::compat::SEEN_INBOUND_REQUEST_ID_RETENTION_LIMIT {
-            let message = JsonRpcMessage::Request(JsonRpcRequest {
-                jsonrpc: String::from("2.0"),
-                id: JsonRpcId::Number(request_id as i64),
-                method: String::from("fs/read_text_file"),
-                params: Some(json!({ "path": format!("/tmp/{request_id}.txt") })),
-            });
-            let encoded = serialize_message(&message).expect("encode request");
-            server_writer
-                .write_all(encoded.as_bytes())
-                .await
-                .expect("write request");
-            server_writer.flush().await.expect("flush request");
-            outbound_lines
-                .next_line()
-                .await
-                .expect("read method-not-found response")
-                .expect("method-not-found response should exist");
-        }
-
-        let permission_response = client
-            .request(
-                "request/permission",
-                Some(json!({
-                    "permissionId": "perm-late",
-                    "reply": "once",
-                })),
-            )
-            .await
-            .expect("late permission response should still match pending request");
-        assert_eq!(
-            permission_response.result(),
-            Some(&json!({
-                "outcome": {
-                    "outcome": "selected",
-                    "optionId": "allow_once",
-                }
-            }))
-        );
-
-        let outbound_permission = outbound_lines
-            .next_line()
-            .await
-            .expect("read permission response")
-            .expect("permission response should exist");
-        let outbound_permission =
-            crate::acp::deserialize_message(&outbound_permission).expect("decode response");
-        match outbound_permission {
-            JsonRpcMessage::Response(response) => {
-                assert_eq!(response.id, JsonRpcId::String(String::from("perm-late")));
-            }
-            other => panic!("unexpected outbound permission frame: {other:?}"),
-        }
-    }
-
-    #[tokio::test(flavor = "current_thread")]
-    async fn client_permission_ids_are_collision_safe_for_string_and_number_ids() {
-        let (client_stream, server_stream) = tokio::io::duplex(8 * 1024);
-        let (client_reader, client_writer) = split(client_stream);
-        let (server_reader, mut server_writer) = split(server_stream);
-        let client = AcpClient::new(client_reader, client_writer, AcpClientOptions::default());
-        let mut notifications = client.subscribe_notifications();
-        let mut outbound_lines = BufReader::new(server_reader).lines();
-
-        for id in [JsonRpcId::Number(1), JsonRpcId::String(String::from("1"))] {
-            let message = JsonRpcMessage::Request(JsonRpcRequest {
-                jsonrpc: String::from("2.0"),
-                id,
-                method: String::from("session/request_permission"),
-                params: Some(json!({ "path": "/tmp/collide.txt" })),
-            });
-            let encoded = serialize_message(&message).expect("encode permission request");
-            server_writer
-                .write_all(encoded.as_bytes())
-                .await
-                .expect("write permission request");
-            server_writer
-                .flush()
-                .await
-                .expect("flush permission request");
-        }
-
-        let first = notifications.recv().await.expect("first permission");
-        let second = notifications.recv().await.expect("second permission");
-        let first_permission_id = first
-            .params
-            .as_ref()
-            .and_then(|params| params.get("permissionId"))
-            .and_then(Value::as_str)
-            .expect("first permission id");
-        let second_permission_id = second
-            .params
-            .as_ref()
-            .and_then(|params| params.get("permissionId"))
-            .and_then(Value::as_str)
-            .expect("second permission id");
-        assert_eq!(first_permission_id, "1");
-        assert_ne!(second_permission_id, "1");
-
-        let second_response = client
-            .request(
-                "request/permission",
-                Some(json!({
-                    "permissionId": second_permission_id,
-                    "reply": "reject",
-                })),
-            )
-            .await
-            .expect("second permission response should match string id");
-        assert_eq!(
-            second_response.result(),
-            Some(&json!({
-                "outcome": {
-                    "outcome": "selected",
-                    "optionId": "reject_once",
-                }
-            }))
-        );
-        let outbound_second = outbound_lines
-            .next_line()
-            .await
-            .expect("read second permission response")
-            .expect("second permission response should exist");
-        match crate::acp::deserialize_message(&outbound_second).expect("decode response") {
-            JsonRpcMessage::Response(response) => {
-                assert_eq!(response.id, JsonRpcId::String(String::from("1")));
-            }
-            other => panic!("unexpected second permission frame: {other:?}"),
-        }
-
-        client
-            .request(
-                "request/permission",
-                Some(json!({
-                    "permissionId": first_permission_id,
-                    "reply": "reject",
-                })),
-            )
-            .await
-            .expect("first permission response should still match number id");
-        let outbound_first = outbound_lines
-            .next_line()
-            .await
-            .expect("read first permission response")
-            .expect("first permission response should exist");
-        match crate::acp::deserialize_message(&outbound_first).expect("decode response") {
-            JsonRpcMessage::Response(response) => {
-                assert_eq!(response.id, JsonRpcId::Number(1));
-            }
-            other => panic!("unexpected first permission frame: {other:?}"),
-        }
-    }
-
-    #[tokio::test(flavor = "current_thread")]
-    async fn client_fails_when_adapter_emits_a_line_longer_than_the_configured_limit() {
-        const MAX_READ_LINE_BYTES: usize = 16 * 1024 * 1024;
-        const OVERSIZED_LINE_BYTES: usize = 20 * 1024 * 1024;
-
-        let (client_stream, server_stream) = tokio::io::duplex(OVERSIZED_LINE_BYTES + 1024);
-        let (client_reader, client_writer) = split(client_stream);
-        let (server_reader, mut server_writer) = split(server_stream);
-        let client = AcpClient::new(
-            client_reader,
-            client_writer,
-            AcpClientOptions {
-                max_read_line_bytes: MAX_READ_LINE_BYTES,
-                ..AcpClientOptions::default()
-            },
-        );
-        let mut outbound_lines = BufReader::new(server_reader).lines();
-
-        let pending_request = tokio::spawn({
-            let client = client.clone();
-            async move {
-                client
-                    .request(
-                        "session/prompt",
-                        Some(json!({ "sessionId": "oversized-line" })),
-                    )
-                    .await
-            }
-        });
-
-        let outbound_request = outbound_lines
-            .next_line()
-            .await
-            .expect("read outbound request")
-            .expect("outbound request should exist");
-        let outbound_request =
-            crate::acp::deserialize_message(&outbound_request).expect("decode outbound request");
-        match outbound_request {
-            JsonRpcMessage::Request(request) => {
-                assert_eq!(request.method, "session/prompt");
-            }
-            other => panic!("unexpected outbound frame: {other:?}"),
-        }
-
-        let oversized_writer = tokio::spawn(async move {
-            let chunk = vec![b'x'; 1024 * 1024];
-            let mut remaining = OVERSIZED_LINE_BYTES;
-            while remaining > 0 {
-                let next = remaining.min(chunk.len());
-                server_writer
-                    .write_all(&chunk[..next])
-                    .await
-                    .map_err(|error| error.kind())?;
-                remaining -= next;
-            }
-            server_writer
-                .write_all(b"\n")
-                .await
-                .map_err(|error| error.kind())?;
-            server_writer.flush().await.map_err(|error| error.kind())
-        });
-
-        let pending_error = timeout(Duration::from_secs(5), pending_request)
-            .await
-            .expect("pending request timeout")
-            .expect("pending request join")
-            .expect_err("oversized line should fail the client");
-        assert!(
-            matches!(pending_error, AcpClientError::Io(_)),
-            "unexpected error: {pending_error:?}"
-        );
-        assert!(
-            pending_error
-                .to_string()
-                .contains("ACP adapter emitted a line longer than"),
-            "unexpected oversized-line error: {pending_error}"
-        );
-
-        let transport_state = client.transport_state_for_tests();
-        assert!(transport_state.contains("transport_error"));
-        assert!(
-            client
-                .recent_activity_for_tests()
-                .iter()
-                .any(|entry| entry.contains("transport_error")),
-            "recent activity should capture a transport_error entry"
-        );
-
-        let subsequent_error = client
-            .request(
-                "session/prompt",
-                Some(json!({ "sessionId": "after-oversized-line" })),
-            )
-            .await
-            .expect_err("subsequent request should fail immediately");
-        assert_eq!(subsequent_error.to_string(), pending_error.to_string());
-
-        let oversized_writer_result = timeout(Duration::from_secs(1), oversized_writer)
-            .await
-            .expect("oversized writer timeout")
-            .expect("oversized writer join");
-        assert!(
-            oversized_writer_result.is_ok()
-                || oversized_writer_result == Err(std::io::ErrorKind::BrokenPipe),
-            "unexpected oversized writer result: {oversized_writer_result:?}"
-        );
-    }
-}
diff --git a/crates/sidecar/tests/acp_legacy/compat.rs b/crates/sidecar/tests/acp_legacy/compat.rs
deleted file mode 100644
index bb1aea531..000000000
--- a/crates/sidecar/tests/acp_legacy/compat.rs
+++ /dev/null
@@ -1,615 +0,0 @@
-use crate::json_rpc::{JsonRpcId, JsonRpcNotification, JsonRpcRequest, JsonRpcResponse};
-use serde_json::{json, Map, Value};
-use std::collections::{BTreeMap, BTreeSet, VecDeque};
-
-pub(crate) const LEGACY_PERMISSION_METHOD: &str = "request/permission";
-pub(crate) const ACP_PERMISSION_METHOD: &str = "session/request_permission";
-pub(crate) const ACP_CANCEL_METHOD: &str = "session/cancel";
-pub(crate) const RECENT_ACTIVITY_LIMIT: usize = 20;
-pub(crate) const ACTIVITY_TEXT_LIMIT: usize = 240;
-pub(crate) const SEEN_INBOUND_REQUEST_ID_RETENTION_LIMIT: usize = 4_096;
-pub(crate) const PENDING_PERMISSION_REQUEST_RETENTION_LIMIT: usize = 4_096;
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub(crate) enum AgentCompatibilityKind {
-    Generic,
-    OpenCode,
-}
-
-#[derive(Debug, Clone)]
-pub(crate) struct PendingPermissionRequest {
-    pub(crate) id: JsonRpcId,
-    pub(crate) method: String,
-    pub(crate) options: Option<Vec<Map<String, Value>>>,
-}
-
-#[derive(Debug, Clone)]
-pub(crate) struct PendingPermissionRequests {
-    pending: BTreeMap<JsonRpcId, PendingPermissionRequest>,
-    permission_ids: BTreeMap<String, JsonRpcId>,
-    order: VecDeque<JsonRpcId>,
-    limit: usize,
-}
-
-impl PendingPermissionRequests {
-    pub(crate) fn new(limit: usize) -> Self {
-        Self {
-            pending: BTreeMap::new(),
-            permission_ids: BTreeMap::new(),
-            order: VecDeque::new(),
-            limit,
-        }
-    }
-
-    pub(crate) fn insert(&mut self, request: PendingPermissionRequest) -> String {
-        self.remove_existing_permission_id(&request.id);
-        if !self.pending.contains_key(&request.id) {
-            self.order.push_back(request.id.clone());
-        }
-        let permission_id = self.assign_permission_id(&request.id);
-        let request_id = request.id.clone();
-        self.pending.insert(request.id.clone(), request);
-        self.permission_ids
-            .insert(permission_id.clone(), request_id);
-        self.evict_oldest();
-        permission_id
-    }
-
-    pub(crate) fn remove_by_permission_id(
-        &mut self,
-        permission_id: &str,
-    ) -> Option<PendingPermissionRequest> {
-        let id = self.permission_ids.remove(permission_id)?;
-        self.order.retain(|existing| existing != &id);
-        self.pending.remove(&id)
-    }
-
-    pub(crate) fn clear(&mut self) {
-        self.pending.clear();
-        self.permission_ids.clear();
-        self.order.clear();
-    }
-
-    #[cfg_attr(not(test), allow(dead_code))]
-    pub(crate) fn len(&self) -> usize {
-        self.pending.len()
-    }
-
-    #[cfg(test)]
-    pub(crate) fn contains_id(&self, id: &JsonRpcId) -> bool {
-        self.pending.contains_key(id)
-    }
-
-    fn evict_oldest(&mut self) {
-        while self.order.len() > self.limit {
-            if let Some(oldest) = self.order.pop_front() {
-                self.pending.remove(&oldest);
-                self.remove_existing_permission_id(&oldest);
-            }
-        }
-    }
-
-    fn assign_permission_id(&self, id: &JsonRpcId) -> String {
-        let display_id = id.to_string();
-        if !self.permission_ids.contains_key(&display_id) {
-            return display_id;
-        }
-
-        let encoded = serde_json::to_string(id).expect("JSON-RPC id should serialize");
-        let mut candidate = format!("jsonrpc:{encoded}");
-        let mut suffix = 2usize;
-        while self.permission_ids.contains_key(&candidate) {
-            candidate = format!("jsonrpc:{encoded}:{suffix}");
-            suffix += 1;
-        }
-        candidate
-    }
-
-    fn remove_existing_permission_id(&mut self, id: &JsonRpcId) {
-        let existing = self
-            .permission_ids
-            .iter()
-            .find_map(|(permission_id, pending_id)| {
-                if pending_id == id {
-                    Some(permission_id.clone())
-                } else {
-                    None
-                }
-            });
-        if let Some(permission_id) = existing {
-            self.permission_ids.remove(&permission_id);
-        }
-    }
-}
-
-impl Default for PendingPermissionRequests {
-    fn default() -> Self {
-        Self::new(PENDING_PERMISSION_REQUEST_RETENTION_LIMIT)
-    }
-}
-
-#[derive(Debug, Clone)]
-pub(crate) struct SeenInboundRequestIds {
-    seen: BTreeSet<JsonRpcId>,
-    order: VecDeque<JsonRpcId>,
-    limit: usize,
-}
-
-impl SeenInboundRequestIds {
-    pub(crate) fn new(limit: usize) -> Self {
-        Self {
-            seen: BTreeSet::new(),
-            order: VecDeque::new(),
-            limit,
-        }
-    }
-
-    pub(crate) fn contains(&self, id: &JsonRpcId) -> bool {
-        self.seen.contains(id)
-    }
-
-    pub(crate) fn insert(&mut self, id: JsonRpcId) {
-        if !self.seen.insert(id.clone()) {
-            return;
-        }
-        self.order.push_back(id);
-        self.evict_oldest();
-    }
-
-    pub(crate) fn clear(&mut self) {
-        self.seen.clear();
-        self.order.clear();
-    }
-
-    #[cfg_attr(not(test), allow(dead_code))]
-    pub(crate) fn len(&self) -> usize {
-        self.seen.len()
-    }
-
-    fn evict_oldest(&mut self) {
-        while self.order.len() > self.limit {
-            if let Some(oldest) = self.order.pop_front() {
-                self.seen.remove(&oldest);
-            }
-        }
-    }
-}
-
-impl Default for SeenInboundRequestIds {
-    fn default() -> Self {
-        Self::new(SEEN_INBOUND_REQUEST_ID_RETENTION_LIMIT)
-    }
-}
-
-pub(crate) fn compatibility_for(agent_type: &str) -> AgentCompatibilityKind {
-    match agent_type {
-        "opencode" => AgentCompatibilityKind::OpenCode,
-        _ => AgentCompatibilityKind::Generic,
-    }
-}
-
-pub(crate) fn normalize_inbound_permission_request(
-    request: &JsonRpcRequest,
-    seen_inbound_request_ids: &mut SeenInboundRequestIds,
-    pending_permission_requests: &mut PendingPermissionRequests,
-) -> Option<JsonRpcNotification> {
-    if request.method != ACP_PERMISSION_METHOD {
-        return None;
-    }
-
-    if seen_inbound_request_ids.contains(&request.id) {
-        return None;
-    }
-    seen_inbound_request_ids.insert(request.id.clone());
-
-    let params = to_record(request.params.clone());
-    let permission_id = pending_permission_requests.insert(PendingPermissionRequest {
-        id: request.id.clone(),
-        method: request.method.clone(),
-        options: params
-            .get("options")
-            .and_then(Value::as_array)
-            .map(|items| {
-                items
-                    .iter()
-                    .filter_map(Value::as_object)
-                    .cloned()
-                    .collect::<Vec<_>>()
-            }),
-    });
-
-    let mut normalized = params;
-    normalized.insert(String::from("permissionId"), Value::String(permission_id));
-    normalized.insert(
-        String::from("_acpMethod"),
-        Value::String(request.method.clone()),
-    );
-    Some(JsonRpcNotification {
-        jsonrpc: String::from("2.0"),
-        method: String::from(LEGACY_PERMISSION_METHOD),
-        params: Some(Value::Object(normalized)),
-    })
-}
-
-pub(crate) fn maybe_normalize_permission_response(
-    method: &str,
-    params: Option<Value>,
-    pending_permission_requests: &mut PendingPermissionRequests,
-) -> Option<(JsonRpcId, Value)> {
-    if method != LEGACY_PERMISSION_METHOD && method != ACP_PERMISSION_METHOD {
-        return None;
-    }
-
-    let payload = to_record(params);
-    let permission_id = match payload.get("permissionId") {
-        Some(Value::String(value)) => value.clone(),
-        Some(Value::Number(value)) => value.to_string(),
-        _ => return None,
-    };
-
-    let pending = pending_permission_requests.remove_by_permission_id(&permission_id)?;
-    if pending.method != ACP_PERMISSION_METHOD {
-        return None;
-    }
-
-    Some((
-        pending.id.clone(),
-        normalize_permission_result(&payload, &pending),
-    ))
-}
-
-pub(crate) fn is_cancel_method_not_found(response: &JsonRpcResponse) -> bool {
-    let Some(error) = response.error() else {
-        return false;
-    };
-    if error.code != -32601 {
-        return false;
-    }
-
-    if let Some(data) = error.data.as_ref().and_then(Value::as_object) {
-        if data
-            .get("method")
-            .and_then(Value::as_str)
-            .is_some_and(|method| method == ACP_CANCEL_METHOD)
-        {
-            return true;
-        }
-    }
-
-    error.message.contains(ACP_CANCEL_METHOD)
-}
-
-pub(crate) fn derive_config_options(
-    agent_type: &str,
-    session_result: &Map<String, Value>,
-) -> Vec<Value> {
-    let Some(models) = session_result.get("models").and_then(Value::as_object) else {
-        return Vec::new();
-    };
-    let current_model_id = models
-        .get("currentModelId")
-        .and_then(Value::as_str)
-        .map(String::from);
-    let allowed_values = models
-        .get("availableModels")
-        .and_then(Value::as_array)
-        .map(|models| {
-            models
-                .iter()
-                .filter_map(Value::as_object)
-                .filter_map(|model| {
-                    let model_id = model.get("modelId")?.as_str()?;
-                    let mut item = Map::from_iter([(
-                        String::from("id"),
-                        Value::String(String::from(model_id)),
-                    )]);
-                    if let Some(name) = model.get("name").and_then(Value::as_str) {
-                        item.insert(String::from("label"), Value::String(String::from(name)));
-                    }
-                    Some(Value::Object(item))
-                })
-                .collect::<Vec<_>>()
-        })
-        .unwrap_or_default();
-    if current_model_id.is_none() && allowed_values.is_empty() {
-        return Vec::new();
-    }
-
-    let mut option = Map::from_iter([
-        (String::from("id"), Value::String(String::from("model"))),
-        (
-            String::from("category"),
-            Value::String(String::from("model")),
-        ),
-        (String::from("label"), Value::String(String::from("Model"))),
-        (String::from("allowedValues"), Value::Array(allowed_values)),
-        (
-            String::from("readOnly"),
-            Value::Bool(matches!(
-                compatibility_for(agent_type),
-                AgentCompatibilityKind::OpenCode
-            )),
-        ),
-    ]);
-    if let Some(current_model_id) = current_model_id {
-        option.insert(
-            String::from("currentValue"),
-            Value::String(current_model_id),
-        );
-    }
-    if matches!(
-        compatibility_for(agent_type),
-        AgentCompatibilityKind::OpenCode
-    ) {
-        option.insert(
-            String::from("description"),
-            Value::String(String::from(
-                "Available models reported by OpenCode. Model switching must be configured before createSession() because ACP session/set_config_option is not implemented.",
-            )),
-        );
-    }
-
-    vec![Value::Object(option)]
-}
-
-pub(crate) fn synthetic_mode_update(mode_id: &str) -> JsonRpcNotification {
-    JsonRpcNotification {
-        jsonrpc: String::from("2.0"),
-        method: String::from("session/update"),
-        params: Some(json!({
-            "update": {
-                "sessionUpdate": "current_mode_update",
-                "currentModeId": mode_id,
-            }
-        })),
-    }
-}
-
-pub(crate) fn synthetic_config_update(config_options: &[Value]) -> JsonRpcNotification {
-    JsonRpcNotification {
-        jsonrpc: String::from("2.0"),
-        method: String::from("session/update"),
-        params: Some(json!({
-            "update": {
-                "sessionUpdate": "config_option_update",
-                "configOptions": config_options,
-            }
-        })),
-    }
-}
-
-pub(crate) fn truncate_activity_text(value: &str) -> String {
-    if value.len() <= ACTIVITY_TEXT_LIMIT {
-        return String::from(value);
-    }
-    format!("{}...", &value[..ACTIVITY_TEXT_LIMIT])
-}
-
-pub(crate) fn summarize_inbound_notification(notification: &JsonRpcNotification) -> String {
-    truncate_activity_text(&format!("received notification {}", notification.method))
-}
-
-pub(crate) fn summarize_inbound_request(request: &JsonRpcRequest) -> String {
-    truncate_activity_text(&format!(
-        "received request {} id={}",
-        request.method, request.id
-    ))
-}
-
-pub(crate) fn summarize_inbound_response(response: &JsonRpcResponse) -> String {
-    match response.error() {
-        Some(error) => truncate_activity_text(&format!(
-            "received response id={} error={}:{}",
-            response.id, error.code, error.message
-        )),
-        None => format!("received response id={}", response.id),
-    }
-}
-
-fn normalize_permission_result(
-    params: &Map<String, Value>,
-    pending: &PendingPermissionRequest,
-) -> Value {
-    if let Some(outcome) = params.get("outcome") {
-        if outcome.is_object() {
-            return json!({ "outcome": outcome });
-        }
-    }
-
-    let requested_reply = params.get("reply").and_then(Value::as_str);
-    if let Some(selected_option_id) =
-        resolve_permission_option_id(&pending.options, requested_reply)
-    {
-        return json!({
-            "outcome": {
-                "outcome": "selected",
-                "optionId": selected_option_id,
-            }
-        });
-    }
-
-    match requested_reply {
-        Some("always") => {
-            json!({ "outcome": { "outcome": "selected", "optionId": "allow_always" } })
-        }
-        Some("once") => json!({ "outcome": { "outcome": "selected", "optionId": "allow_once" } }),
-        Some("reject") => {
-            json!({ "outcome": { "outcome": "selected", "optionId": "reject_once" } })
-        }
-        _ => json!({ "outcome": { "outcome": "cancelled" } }),
-    }
-}
-
-fn resolve_permission_option_id(
-    options: &Option<Vec<Map<String, Value>>>,
-    reply: Option<&str>,
-) -> Option<String> {
-    let reply = reply?;
-    let targets = match reply {
-        "always" => (["always", "allow_always"], ["allow_always"]),
-        "once" => (["once", "allow_once"], ["allow_once"]),
-        "reject" => (["reject", "reject_once"], ["reject_once"]),
-        _ => return None,
-    };
-
-    let options = options.as_ref()?;
-    let matched = options.iter().find(|option| {
-        let option_id_matches = option
-            .get("optionId")
-            .and_then(Value::as_str)
-            .map(|value| targets.0.contains(&value))
-            .unwrap_or(false);
-        let kind_matches = option
-            .get("kind")
-            .and_then(Value::as_str)
-            .map(|value| targets.1.contains(&value))
-            .unwrap_or(false);
-        option_id_matches || kind_matches
-    })?;
-
-    matched
-        .get("optionId")
-        .and_then(Value::as_str)
-        .map(String::from)
-}
-
-pub(crate) fn to_record(value: Option<Value>) -> Map<String, Value> {
-    match value {
-        Some(Value::Object(map)) => map,
-        _ => Map::new(),
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn seen_inbound_request_ids_evict_oldest_entry_after_retention_window() {
-        let mut seen = SeenInboundRequestIds::new(2);
-        let first = JsonRpcId::Number(1);
-        let second = JsonRpcId::Number(2);
-        let third = JsonRpcId::Number(3);
-
-        seen.insert(first.clone());
-        seen.insert(second.clone());
-        assert!(seen.contains(&first));
-        assert!(seen.contains(&second));
-
-        seen.insert(third.clone());
-        assert_eq!(seen.len(), 2);
-        assert!(!seen.contains(&first));
-        assert!(seen.contains(&second));
-        assert!(seen.contains(&third));
-    }
-
-    #[test]
-    fn permission_requests_evict_pending_entries_with_seen_request_window() {
-        let mut seen = SeenInboundRequestIds::new(2);
-        let mut pending = PendingPermissionRequests::new(2);
-
-        for request_id in 1..=3 {
-            let request = JsonRpcRequest {
-                jsonrpc: String::from("2.0"),
-                id: JsonRpcId::Number(request_id),
-                method: String::from("session/request_permission"),
-                params: Some(json!({ "path": format!("/tmp/{request_id}.txt") })),
-            };
-            let notification =
-                normalize_inbound_permission_request(&request, &mut seen, &mut pending)
-                    .expect("permission request should normalize");
-            assert_eq!(notification.method, LEGACY_PERMISSION_METHOD);
-        }
-
-        assert_eq!(seen.len(), 2);
-        assert_eq!(pending.len(), 2);
-        assert!(!pending.contains_id(&JsonRpcId::Number(1)));
-        assert!(pending.contains_id(&JsonRpcId::Number(2)));
-        assert!(pending.contains_id(&JsonRpcId::Number(3)));
-    }
-
-    #[test]
-    fn pending_permission_eviction_uses_typed_json_rpc_ids() {
-        let mut pending = PendingPermissionRequests::new(2);
-
-        for id in [
-            JsonRpcId::Number(1),
-            JsonRpcId::String(String::from("1")),
-            JsonRpcId::Number(2),
-        ] {
-            pending.insert(PendingPermissionRequest {
-                id,
-                method: String::from(ACP_PERMISSION_METHOD),
-                options: None,
-            });
-        }
-
-        assert_eq!(pending.len(), 2);
-        assert!(!pending.contains_id(&JsonRpcId::Number(1)));
-        assert!(pending.contains_id(&JsonRpcId::String(String::from("1"))));
-        assert!(pending.contains_id(&JsonRpcId::Number(2)));
-    }
-
-    #[test]
-    fn permission_ids_are_collision_safe_for_string_and_number_ids() {
-        let mut seen = SeenInboundRequestIds::new(4);
-        let mut pending = PendingPermissionRequests::new(4);
-
-        let number_request = JsonRpcRequest {
-            jsonrpc: String::from("2.0"),
-            id: JsonRpcId::Number(1),
-            method: String::from("session/request_permission"),
-            params: Some(json!({ "path": "/tmp/number.txt" })),
-        };
-        let string_request = JsonRpcRequest {
-            jsonrpc: String::from("2.0"),
-            id: JsonRpcId::String(String::from("1")),
-            method: String::from("session/request_permission"),
-            params: Some(json!({ "path": "/tmp/string.txt" })),
-        };
-
-        let number_notification =
-            normalize_inbound_permission_request(&number_request, &mut seen, &mut pending)
-                .expect("number permission request should normalize");
-        let string_notification =
-            normalize_inbound_permission_request(&string_request, &mut seen, &mut pending)
-                .expect("string permission request should normalize");
-
-        let number_permission_id = number_notification
-            .params
-            .as_ref()
-            .and_then(|params| params.get("permissionId"))
-            .and_then(Value::as_str)
-            .expect("number permission id");
-        let string_permission_id = string_notification
-            .params
-            .as_ref()
-            .and_then(|params| params.get("permissionId"))
-            .and_then(Value::as_str)
-            .expect("string permission id");
-        assert_eq!(number_permission_id, "1");
-        assert_ne!(string_permission_id, "1");
-
-        let (string_reply_id, _) = maybe_normalize_permission_response(
-            LEGACY_PERMISSION_METHOD,
-            Some(json!({
-                "permissionId": string_permission_id,
-                "reply": "reject",
-            })),
-            &mut pending,
-        )
-        .expect("string permission reply should resolve");
-        assert_eq!(string_reply_id, JsonRpcId::String(String::from("1")));
-
-        let (number_reply_id, _) = maybe_normalize_permission_response(
-            LEGACY_PERMISSION_METHOD,
-            Some(json!({
-                "permissionId": number_permission_id,
-                "reply": "reject",
-            })),
-            &mut pending,
-        )
-        .expect("number permission reply should resolve");
-        assert_eq!(number_reply_id, JsonRpcId::Number(1));
-    }
-}
diff --git a/crates/sidecar/tests/acp_legacy/mod.rs b/crates/sidecar/tests/acp_legacy/mod.rs
deleted file mode 100644
index d5a81eaaa..000000000
--- a/crates/sidecar/tests/acp_legacy/mod.rs
+++ /dev/null
@@ -1,15 +0,0 @@
-mod client;
-pub(crate) mod compat;
-pub(crate) mod session;
-mod timeout;
-
-pub use crate::json_rpc::{
-    deserialize_message, is_request, is_response, serialize_message, JsonRpcError, JsonRpcId,
-    JsonRpcMessage, JsonRpcNotification, JsonRpcParseError, JsonRpcParseErrorKind, JsonRpcRequest,
-    JsonRpcResponse, JsonRpcResponseShapeError,
-};
-pub use client::{
-    AcpClient, AcpClientError, AcpClientOptions, AcpClientProcessState,
-    AcpClientProcessStateProvider, InboundRequestHandler, InboundRequestOutcome,
-};
-pub(crate) use timeout::AcpTimeoutDiagnostics;
diff --git a/crates/sidecar/tests/acp_legacy/session.rs b/crates/sidecar/tests/acp_legacy/session.rs
deleted file mode 100644
index 7a42002c2..000000000
--- a/crates/sidecar/tests/acp_legacy/session.rs
+++ /dev/null
@@ -1,506 +0,0 @@
-use crate::acp::compat::{
-    derive_config_options, synthetic_config_update, synthetic_mode_update,
-    PendingPermissionRequests, SeenInboundRequestIds, RECENT_ACTIVITY_LIMIT,
-};
-use crate::acp::AcpTimeoutDiagnostics;
-use crate::acp::{JsonRpcError, JsonRpcId, JsonRpcNotification};
-use serde_json::{Map, Value};
-use std::collections::{BTreeMap, VecDeque};
-use std::fmt;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub(crate) struct SessionCreatedResponse {
-    pub(crate) session_id: String,
-    pub(crate) pid: Option<u32>,
-    pub(crate) modes: Option<Value>,
-    pub(crate) config_options: Vec<Value>,
-    pub(crate) agent_capabilities: Option<Value>,
-    pub(crate) agent_info: Option<Value>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub(crate) struct SessionStateResponse {
-    pub(crate) session_id: String,
-    pub(crate) agent_type: String,
-    pub(crate) process_id: String,
-    pub(crate) pid: Option<u32>,
-    pub(crate) closed: bool,
-    pub(crate) modes: Option<Value>,
-    pub(crate) config_options: Vec<Value>,
-    pub(crate) agent_capabilities: Option<Value>,
-    pub(crate) agent_info: Option<Value>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub(crate) enum AcpSessionStateError {
-    InvalidConfigOptionParams(String),
-    MalformedConfigOptionEntry { index: usize, reason: String },
-    UnknownConfigOption(String),
-}
-
-impl AcpSessionStateError {
-    fn invalid_config_option_params(message: impl Into<String>) -> Self {
-        Self::InvalidConfigOptionParams(message.into())
-    }
-
-    fn malformed_config_option_entry(index: usize, reason: impl Into<String>) -> Self {
-        Self::MalformedConfigOptionEntry {
-            index,
-            reason: reason.into(),
-        }
-    }
-
-    fn unknown_config_option(config_id: impl Into<String>) -> Self {
-        Self::UnknownConfigOption(config_id.into())
-    }
-
-    pub(crate) fn to_json_rpc_error(&self, method: &str) -> JsonRpcError {
-        match self {
-            Self::InvalidConfigOptionParams(message) => JsonRpcError {
-                code: -32602,
-                message: format!("Invalid params for {method}: {message}"),
-                data: Some(serde_json::json!({
-                    "kind": "invalid_config_option_params",
-                    "method": method,
-                })),
-            },
-            Self::MalformedConfigOptionEntry { index, reason } => JsonRpcError {
-                code: -32602,
-                message: format!(
-                    "Invalid params for {method}: config option entry {index} is malformed: {reason}"
-                ),
-                data: Some(serde_json::json!({
-                    "kind": "malformed_config_option_entry",
-                    "method": method,
-                    "index": index,
-                })),
-            },
-            Self::UnknownConfigOption(config_id) => JsonRpcError {
-                code: -32602,
-                message: format!("Invalid params for {method}: unknown config option {config_id}"),
-                data: Some(serde_json::json!({
-                    "kind": "unknown_config_option",
-                    "method": method,
-                    "configId": config_id,
-                })),
-            },
-        }
-    }
-}
-
-impl fmt::Display for AcpSessionStateError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::InvalidConfigOptionParams(message) => f.write_str(message),
-            Self::MalformedConfigOptionEntry { index, reason } => {
-                write!(f, "config option entry {index} is malformed: {reason}")
-            }
-            Self::UnknownConfigOption(config_id) => {
-                write!(f, "unknown config option {config_id}")
-            }
-        }
-    }
-}
-
-impl std::error::Error for AcpSessionStateError {}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub(crate) enum AcpInitializeError {
-    MissingProtocolVersion,
-    InvalidProtocolVersion,
-    ProtocolVersionMismatch { requested: u64, reported: u64 },
-}
-
-impl fmt::Display for AcpInitializeError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::MissingProtocolVersion => {
-                f.write_str("ACP initialize response missing protocolVersion")
-            }
-            Self::InvalidProtocolVersion => {
-                f.write_str("ACP initialize response protocolVersion must be an unsigned integer")
-            }
-            Self::ProtocolVersionMismatch {
-                requested,
-                reported,
-            } => write!(
-                f,
-                "ACP initialize protocolVersion mismatch: requested {requested}, agent reported {reported}"
-            ),
-        }
-    }
-}
-
-impl std::error::Error for AcpInitializeError {}
-
-pub(crate) fn build_initialize_request(
-    protocol_version: u64,
-    client_capabilities: Value,
-) -> crate::acp::JsonRpcRequest {
-    crate::acp::JsonRpcRequest {
-        jsonrpc: String::from("2.0"),
-        id: JsonRpcId::Number(1),
-        method: String::from("initialize"),
-        params: Some(serde_json::json!({
-            "protocolVersion": protocol_version,
-            "clientCapabilities": client_capabilities,
-        })),
-    }
-}
-
-pub(crate) fn validate_initialize_result(
-    init_result: &Map<String, Value>,
-    requested_protocol_version: u64,
-) -> Result<u64, AcpInitializeError> {
-    let reported_protocol_version = init_result
-        .get("protocolVersion")
-        .ok_or(AcpInitializeError::MissingProtocolVersion)?
-        .as_u64()
-        .ok_or(AcpInitializeError::InvalidProtocolVersion)?;
-
-    if reported_protocol_version != requested_protocol_version {
-        return Err(AcpInitializeError::ProtocolVersionMismatch {
-            requested: requested_protocol_version,
-            reported: reported_protocol_version,
-        });
-    }
-
-    Ok(reported_protocol_version)
-}
-
-#[derive(Debug, Clone)]
-pub(crate) struct AcpTerminalState {
-    pub(crate) process_id: String,
-    pub(crate) output: String,
-    pub(crate) truncated: bool,
-    pub(crate) output_byte_limit: usize,
-    pub(crate) exit_code: Option<i32>,
-    pub(crate) released: bool,
-}
-
-impl AcpTerminalState {
-    pub(crate) fn new(process_id: String, output_byte_limit: usize) -> Self {
-        Self {
-            process_id,
-            output: String::new(),
-            truncated: false,
-            output_byte_limit,
-            exit_code: None,
-            released: false,
-        }
-    }
-
-    pub(crate) fn append_output(&mut self, chunk: &[u8]) {
-        self.output.push_str(&String::from_utf8_lossy(chunk));
-        if self.output_byte_limit == 0 {
-            self.output.clear();
-            self.truncated = true;
-            return;
-        }
-
-        while self.output.len() > self.output_byte_limit {
-            let remove_len = self
-                .output
-                .chars()
-                .next()
-                .map(char::len_utf8)
-                .unwrap_or(self.output.len());
-            self.output.drain(..remove_len);
-            self.truncated = true;
-        }
-    }
-}
-
-pub(crate) const ACP_STDOUT_BUFFER_BYTE_LIMIT: usize = 1024 * 1024;
-
-#[derive(Debug, Clone)]
-pub(crate) struct AcpSessionState {
-    pub(crate) session_id: String,
-    pub(crate) vm_id: String,
-    pub(crate) agent_type: String,
-    pub(crate) process_id: String,
-    pub(crate) pid: Option<u32>,
-    pub(crate) stdout_buffer: String,
-    pub(crate) stdout_buffer_truncated: bool,
-    pub(crate) next_request_id: i64,
-    pub(crate) modes: Option<Value>,
-    pub(crate) config_options: Vec<Value>,
-    pub(crate) agent_capabilities: Option<Value>,
-    pub(crate) agent_info: Option<Value>,
-    pub(crate) recent_activity: VecDeque<String>,
-    pub(crate) pending_permission_requests: PendingPermissionRequests,
-    pub(crate) seen_inbound_request_ids: SeenInboundRequestIds,
-    pub(crate) terminals: BTreeMap<String, AcpTerminalState>,
-    pub(crate) next_terminal_id: u64,
-    pub(crate) closed: bool,
-    pub(crate) exit_code: Option<i32>,
-    pub(crate) termination_requested: bool,
-}
-
-impl AcpSessionState {
-    pub(crate) fn new(
-        session_id: String,
-        vm_id: String,
-        agent_type: String,
-        process_id: String,
-        pid: Option<u32>,
-        init_result: &Map<String, Value>,
-        session_result: &Map<String, Value>,
-    ) -> Self {
-        let mut config_options = init_result
-            .get("configOptions")
-            .and_then(Value::as_array)
-            .cloned()
-            .unwrap_or_default();
-        if let Some(overrides) = session_result
-            .get("configOptions")
-            .and_then(Value::as_array)
-        {
-            config_options = overrides.clone();
-        }
-        let has_model_option = config_options.iter().any(|option| {
-            option.as_object().is_some_and(|map| {
-                map.get("id")
-                    .and_then(Value::as_str)
-                    .is_some_and(|id| id == "model")
-            })
-        });
-        if !has_model_option {
-            config_options.extend(derive_config_options(&agent_type, session_result));
-        }
-
-        Self {
-            session_id,
-            vm_id,
-            agent_type,
-            process_id,
-            pid,
-            stdout_buffer: String::new(),
-            stdout_buffer_truncated: false,
-            // The sidecar already used request ids 1 and 2 on this ACP
-            // connection for initialize and session/new before the session
-            // state is created. Continue from 3 so later session RPCs never
-            // reuse ids on the same transport.
-            next_request_id: 3,
-            modes: session_result
-                .get("modes")
-                .cloned()
-                .or_else(|| init_result.get("modes").cloned()),
-            config_options,
-            agent_capabilities: init_result.get("agentCapabilities").cloned(),
-            agent_info: init_result.get("agentInfo").cloned(),
-            recent_activity: VecDeque::with_capacity(RECENT_ACTIVITY_LIMIT),
-            pending_permission_requests: PendingPermissionRequests::default(),
-            seen_inbound_request_ids: SeenInboundRequestIds::default(),
-            terminals: BTreeMap::new(),
-            next_terminal_id: 1,
-            closed: false,
-            exit_code: None,
-            termination_requested: false,
-        }
-    }
-
-    pub(crate) fn created_response(&self) -> SessionCreatedResponse {
-        SessionCreatedResponse {
-            session_id: self.session_id.clone(),
-            pid: self.pid,
-            modes: self.modes.clone(),
-            config_options: self.config_options.clone(),
-            agent_capabilities: self.agent_capabilities.clone(),
-            agent_info: self.agent_info.clone(),
-        }
-    }
-
-    #[allow(dead_code)]
-    pub(crate) fn state_response(&self) -> Result<SessionStateResponse, AcpSessionStateError> {
-        Ok(SessionStateResponse {
-            session_id: self.session_id.clone(),
-            agent_type: self.agent_type.clone(),
-            process_id: self.process_id.clone(),
-            pid: self.pid,
-            closed: self.closed,
-            modes: self.modes.clone(),
-            config_options: self.config_options.clone(),
-            agent_capabilities: self.agent_capabilities.clone(),
-            agent_info: self.agent_info.clone(),
-        })
-    }
-
-    pub(crate) fn record_activity(&mut self, entry: String) {
-        self.recent_activity.push_back(entry);
-        while self.recent_activity.len() > RECENT_ACTIVITY_LIMIT {
-            self.recent_activity.pop_front();
-        }
-    }
-
-    pub(crate) fn mark_termination_requested(&mut self) {
-        self.termination_requested = true;
-        self.closed = true;
-    }
-
-    pub(crate) fn timeout_diagnostics(
-        &self,
-        method: &str,
-        id: &JsonRpcId,
-        timeout_ms: u64,
-        transport_state: Option<String>,
-    ) -> AcpTimeoutDiagnostics {
-        AcpTimeoutDiagnostics::new(
-            method,
-            id.clone(),
-            timeout_ms,
-            self.exit_code,
-            self.timeout_killed_state(),
-            transport_state,
-            self.recent_activity.iter().cloned().collect(),
-        )
-    }
-
-    pub(crate) fn record_notification(&mut self, notification: JsonRpcNotification) {
-        self.apply_session_update(&notification);
-    }
-
-    pub(crate) fn allocate_terminal_id(&mut self) -> String {
-        let terminal_id = format!("acp-term-{}", self.next_terminal_id);
-        self.next_terminal_id += 1;
-        terminal_id
-    }
-
-    pub(crate) fn apply_request_success(
-        &mut self,
-        method: &str,
-        params: &Map<String, Value>,
-        saw_session_update: bool,
-    ) -> Result<Option<JsonRpcNotification>, AcpSessionStateError> {
-        if method == "session/set_mode" {
-            if let Some(mode_id) = params.get("modeId").and_then(Value::as_str) {
-                self.apply_local_mode_update(mode_id);
-                if !saw_session_update {
-                    let notification = synthetic_mode_update(mode_id);
-                    self.record_notification(notification.clone());
-                    return Ok(Some(notification));
-                }
-            }
-        }
-
-        if method == "session/set_config_option" {
-            let config_id = params
-                .get("configId")
-                .ok_or_else(|| {
-                    AcpSessionStateError::invalid_config_option_params("configId is required")
-                })?
-                .as_str()
-                .ok_or_else(|| {
-                    AcpSessionStateError::invalid_config_option_params("configId must be a string")
-                })?;
-            let value = params.get("value").ok_or_else(|| {
-                AcpSessionStateError::invalid_config_option_params("value is required")
-            })?;
-            self.apply_local_config_update(config_id, value)?;
-            if !saw_session_update {
-                let notification = synthetic_config_update(&self.config_options);
-                self.record_notification(notification.clone());
-                return Ok(Some(notification));
-            }
-        }
-
-        Ok(None)
-    }
-
-    fn apply_session_update(&mut self, notification: &JsonRpcNotification) {
-        if notification.method != "session/update" {
-            return;
-        }
-        let Some(params) = notification
-            .params
-            .clone()
-            .and_then(|value| value.as_object().cloned())
-        else {
-            return;
-        };
-        let update = params
-            .get("update")
-            .and_then(Value::as_object)
-            .cloned()
-            .unwrap_or(params);
-
-        if update
-            .get("sessionUpdate")
-            .and_then(Value::as_str)
-            .is_some_and(|value| value == "current_mode_update")
-        {
-            if let Some(current_mode_id) = update.get("currentModeId").and_then(Value::as_str) {
-                self.apply_local_mode_update(current_mode_id);
-            }
-        }
-
-        if update
-            .get("sessionUpdate")
-            .and_then(Value::as_str)
-            .is_some_and(|value| {
-                value == "config_option_update" || value == "config_options_update"
-            })
-        {
-            if let Some(config_options) = update.get("configOptions").and_then(Value::as_array) {
-                self.config_options = config_options.clone();
-            }
-        }
-    }
-
-    fn apply_local_mode_update(&mut self, mode_id: &str) {
-        let Some(Value::Object(modes)) = self.modes.as_mut() else {
-            return;
-        };
-        modes.insert(
-            String::from("currentModeId"),
-            Value::String(String::from(mode_id)),
-        );
-    }
-
-    fn apply_local_config_update(
-        &mut self,
-        config_id: &str,
-        value: &Value,
-    ) -> Result<(), AcpSessionStateError> {
-        let mut updated = false;
-        let mut config_options = Vec::with_capacity(self.config_options.len());
-        for (index, option) in self.config_options.iter().enumerate() {
-            let mut map = option.as_object().cloned().ok_or_else(|| {
-                AcpSessionStateError::malformed_config_option_entry(index, "expected an object")
-            })?;
-            let option_id = map.get("id").and_then(Value::as_str).ok_or_else(|| {
-                AcpSessionStateError::malformed_config_option_entry(index, "missing string id")
-            })?;
-            if option_id == config_id {
-                map.insert(String::from("currentValue"), value.clone());
-                updated = true;
-            }
-            config_options.push(Value::Object(map));
-        }
-        if !updated {
-            return Err(AcpSessionStateError::unknown_config_option(config_id));
-        }
-        self.config_options = config_options;
-        Ok(())
-    }
-
-    fn timeout_killed_state(&self) -> Option<bool> {
-        if self.exit_code.is_some() {
-            return Some(self.termination_requested);
-        }
-        self.termination_requested.then_some(true)
-    }
-}
-
-pub(crate) fn trim_acp_stdout_buffer(buffer: &mut String) -> bool {
-    if buffer.len() <= ACP_STDOUT_BUFFER_BYTE_LIMIT {
-        return false;
-    }
-
-    let mut remove_len = buffer.len() - ACP_STDOUT_BUFFER_BYTE_LIMIT;
-    while !buffer.is_char_boundary(remove_len) {
-        remove_len += 1;
-    }
-    buffer.drain(..remove_len);
-    true
-}
diff --git a/crates/sidecar/tests/acp_legacy/timeout.rs b/crates/sidecar/tests/acp_legacy/timeout.rs
deleted file mode 100644
index 67cc09ecd..000000000
--- a/crates/sidecar/tests/acp_legacy/timeout.rs
+++ /dev/null
@@ -1,72 +0,0 @@
-use crate::acp::JsonRpcId;
-use serde::{Deserialize, Serialize};
-use serde_json::Value;
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-#[serde(rename_all = "camelCase")]
-pub(crate) struct AcpTimeoutDiagnostics {
-    pub(crate) kind: String,
-    pub(crate) method: String,
-    pub(crate) id: JsonRpcId,
-    pub(crate) timeout_ms: u64,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    pub(crate) exit_code: Option<i32>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    pub(crate) killed: Option<bool>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    pub(crate) transport_state: Option<String>,
-    #[serde(default, skip_serializing_if = "Vec::is_empty")]
-    pub(crate) recent_activity: Vec<String>,
-}
-
-impl AcpTimeoutDiagnostics {
-    pub(crate) fn new(
-        method: impl Into<String>,
-        id: JsonRpcId,
-        timeout_ms: u64,
-        exit_code: Option<i32>,
-        killed: Option<bool>,
-        transport_state: Option<String>,
-        recent_activity: Vec<String>,
-    ) -> Self {
-        Self {
-            kind: String::from("acp_timeout"),
-            method: method.into(),
-            id,
-            timeout_ms,
-            exit_code,
-            killed,
-            transport_state,
-            recent_activity,
-        }
-    }
-
-    pub(crate) fn message(&self) -> String {
-        let transport_state = self
-            .transport_state
-            .as_ref()
-            .map(|state| format!("{state}. "))
-            .unwrap_or_default();
-        let exit_code = self
-            .exit_code
-            .map(|value| value.to_string())
-            .unwrap_or_else(|| String::from("unknown"));
-        let killed = self
-            .killed
-            .map(|value| format!(" killed={value}."))
-            .unwrap_or_default();
-        let activity = if self.recent_activity.is_empty() {
-            String::from("no recent ACP activity")
-        } else {
-            self.recent_activity.join(" | ")
-        };
-        format!(
-            "ACP request {} (id={}) timed out after {}ms. {}process exitCode={exit_code}.{killed} Recent ACP activity: {activity}",
-            self.method, self.id, self.timeout_ms, transport_state
-        )
-    }
-
-    pub(crate) fn to_json(&self) -> Value {
-        serde_json::to_value(self).expect("serialize ACP timeout diagnostics")
-    }
-}
diff --git a/crates/sidecar/tests/acp_session.rs b/crates/sidecar/tests/acp_session.rs
deleted file mode 100644
index 320ad540c..000000000
--- a/crates/sidecar/tests/acp_session.rs
+++ /dev/null
@@ -1,1128 +0,0 @@
-#[allow(dead_code, unused_imports)]
-#[path = "acp_legacy/mod.rs"]
-mod acp;
-#[allow(dead_code, unused_imports)]
-#[path = "../src/json_rpc.rs"]
-mod json_rpc;
-#[allow(dead_code, unused_imports, clippy::enum_variant_names)]
-mod protocol {
-    pub use secure_exec_sidecar_protocol::protocol::*;
-}
-
-use acp::compat::{
-    is_cancel_method_not_found, maybe_normalize_permission_response,
-    normalize_inbound_permission_request, PENDING_PERMISSION_REQUEST_RETENTION_LIMIT,
-    SEEN_INBOUND_REQUEST_ID_RETENTION_LIMIT,
-};
-use acp::session::{trim_acp_stdout_buffer, AcpSessionState, ACP_STDOUT_BUFFER_BYTE_LIMIT};
-use acp::{
-    deserialize_message, serialize_message, AcpClient, AcpClientError, AcpClientOptions,
-    InboundRequestHandler, InboundRequestOutcome, JsonRpcError, JsonRpcId, JsonRpcMessage,
-    JsonRpcNotification, JsonRpcRequest, JsonRpcResponse,
-};
-use serde_json::{json, Map, Value};
-use std::collections::BTreeMap;
-use std::pin::Pin;
-use std::sync::atomic::{AtomicBool, Ordering};
-use std::sync::Arc;
-use std::task::{Context, Poll};
-use std::time::{Duration, Instant};
-use tokio::io::{split, AsyncBufReadExt, AsyncWrite, AsyncWriteExt, BufReader, DuplexStream};
-
-// Timing-sensitive assertions flake under the CPU contention of a parallel test
-// run (see CLAUDE.md > Testing). Gated off by default; the nightly timing lane
-// sets SECURE_EXEC_RUN_TIMING_TESTS=1 to enforce them.
-fn run_timing_sensitive_tests() -> bool {
-    std::env::var_os("SECURE_EXEC_RUN_TIMING_TESTS").is_some()
-}
-
-fn sample_init_result() -> Map<String, Value> {
-    Map::from_iter([
-        (
-            String::from("agentInfo"),
-            json!({ "name": "Mock ACP", "version": "1.0.0" }),
-        ),
-        (
-            String::from("agentCapabilities"),
-            json!({
-                "permissions": true,
-                "plan_mode": true,
-                "tool_calls": true,
-            }),
-        ),
-        (
-            String::from("modes"),
-            json!({
-                "currentModeId": "build",
-                "availableModes": [
-                    { "id": "build", "label": "Build" },
-                    { "id": "plan", "label": "Plan" },
-                ],
-            }),
-        ),
-        (
-            String::from("configOptions"),
-            json!([
-                {
-                    "id": "model-opt",
-                    "category": "model",
-                    "label": "Model",
-                    "currentValue": "default",
-                },
-                {
-                    "id": "thought-opt",
-                    "category": "thought_level",
-                    "label": "Thought Level",
-                    "currentValue": "medium",
-                },
-            ]),
-        ),
-    ])
-}
-
-fn sample_session_result() -> Map<String, Value> {
-    Map::from_iter([
-        (String::from("sessionId"), json!("mock-agent-session")),
-        (
-            String::from("models"),
-            json!({
-                "currentModelId": "anthropic/claude-sonnet-4-20250514",
-                "availableModels": [
-                    {
-                        "modelId": "anthropic/claude-sonnet-4-20250514",
-                        "name": "Sonnet 4",
-                    },
-                    {
-                        "modelId": "anthropic/claude-opus-4-1-20250805",
-                        "name": "Opus 4.1",
-                    },
-                ],
-            }),
-        ),
-    ])
-}
-
-fn session(agent_type: &str) -> AcpSessionState {
-    AcpSessionState::new(
-        String::from("mock-agent-session"),
-        String::from("vm-1"),
-        String::from(agent_type),
-        String::from("acp-agent-1"),
-        None,
-        &sample_init_result(),
-        &sample_session_result(),
-    )
-}
-
-fn codex_session_with_standard_model_option() -> AcpSessionState {
-    AcpSessionState::new(
-        String::from("mock-agent-session"),
-        String::from("vm-1"),
-        String::from("codex"),
-        String::from("acp-agent-1"),
-        None,
-        &sample_init_result(),
-        &Map::from_iter([
-            (String::from("sessionId"), json!("mock-agent-session")),
-            (
-                String::from("configOptions"),
-                json!([
-                    {
-                        "id": "model",
-                        "category": "model",
-                        "label": "Model",
-                        "currentValue": "gpt-5-codex",
-                    },
-                    {
-                        "id": "thought_level",
-                        "category": "thought_level",
-                        "label": "Thought Level",
-                        "currentValue": "medium",
-                    },
-                ]),
-            ),
-            (
-                String::from("models"),
-                json!({
-                    "currentModelId": "gpt-5-codex",
-                    "availableModels": [
-                        {
-                            "modelId": "gpt-5-codex",
-                            "name": "Codex Default",
-                        },
-                        {
-                            "modelId": "gpt-5.4",
-                            "name": "GPT-5.4",
-                        },
-                    ],
-                }),
-            ),
-        ]),
-    )
-}
-
-fn new_client(
-    options: AcpClientOptions,
-) -> (
-    AcpClient,
-    tokio::io::Lines<BufReader<tokio::io::ReadHalf<DuplexStream>>>,
-    tokio::io::WriteHalf<DuplexStream>,
-) {
-    let (client_stream, server_stream) = tokio::io::duplex(8 * 1024);
-    let (client_reader, client_writer) = split(client_stream);
-    let (server_reader, server_writer) = split(server_stream);
-    let client = AcpClient::new(client_reader, client_writer, options);
-    (client, BufReader::new(server_reader).lines(), server_writer)
-}
-
-struct FailOnWrite {
-    inner: tokio::io::WriteHalf<DuplexStream>,
-    fail_writes: Arc<AtomicBool>,
-}
-
-impl AsyncWrite for FailOnWrite {
-    fn poll_write(
-        mut self: Pin<&mut Self>,
-        cx: &mut Context<'_>,
-        buf: &[u8],
-    ) -> Poll<std::io::Result<usize>> {
-        if self.fail_writes.load(Ordering::SeqCst) {
-            return Poll::Ready(Err(std::io::Error::new(
-                std::io::ErrorKind::BrokenPipe,
-                "simulated hung-up peer",
-            )));
-        }
-        Pin::new(&mut self.inner).poll_write(cx, buf)
-    }
-
-    fn poll_flush(mut self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<std::io::Result<()>> {
-        if self.fail_writes.load(Ordering::SeqCst) {
-            return Poll::Ready(Err(std::io::Error::new(
-                std::io::ErrorKind::BrokenPipe,
-                "simulated hung-up peer",
-            )));
-        }
-        Pin::new(&mut self.inner).poll_flush(cx)
-    }
-
-    fn poll_shutdown(mut self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<std::io::Result<()>> {
-        if self.fail_writes.load(Ordering::SeqCst) {
-            return Poll::Ready(Err(std::io::Error::new(
-                std::io::ErrorKind::BrokenPipe,
-                "simulated hung-up peer",
-            )));
-        }
-        Pin::new(&mut self.inner).poll_shutdown(cx)
-    }
-}
-
-type FailingWriterClient = (
-    AcpClient,
-    tokio::io::Lines<BufReader<tokio::io::ReadHalf<DuplexStream>>>,
-    tokio::io::WriteHalf<DuplexStream>,
-    Arc<AtomicBool>,
-);
-
-fn new_client_with_failing_writer(options: AcpClientOptions) -> FailingWriterClient {
-    let (client_stream, server_stream) = tokio::io::duplex(8 * 1024);
-    let (client_reader, client_writer) = split(client_stream);
-    let (server_reader, server_writer) = split(server_stream);
-    let fail_writes = Arc::new(AtomicBool::new(false));
-    let client = AcpClient::new(
-        client_reader,
-        FailOnWrite {
-            inner: client_writer,
-            fail_writes: Arc::clone(&fail_writes),
-        },
-        options,
-    );
-    (
-        client,
-        BufReader::new(server_reader).lines(),
-        server_writer,
-        fail_writes,
-    )
-}
-
-async fn read_message(
-    reader: &mut tokio::io::Lines<BufReader<tokio::io::ReadHalf<DuplexStream>>>,
-) -> JsonRpcMessage {
-    let line = reader
-        .next_line()
-        .await
-        .expect("read line")
-        .expect("line should exist");
-    deserialize_message(&line).expect("decode json-rpc line")
-}
-
-async fn write_raw(writer: &mut tokio::io::WriteHalf<DuplexStream>, line: &str) {
-    writer
-        .write_all(line.as_bytes())
-        .await
-        .expect("write raw json-rpc line");
-    writer.flush().await.expect("flush raw json-rpc line");
-}
-
-async fn write_message(writer: &mut tokio::io::WriteHalf<DuplexStream>, message: &JsonRpcMessage) {
-    let encoded = serialize_message(message).expect("encode json-rpc");
-    write_raw(writer, &encoded).await;
-}
-
-#[test]
-fn session_state_tracks_metadata_and_derived_model_option() {
-    let session = session("pi");
-
-    let created = session.created_response();
-    assert_eq!(created.session_id, "mock-agent-session");
-    assert_eq!(
-        created.agent_info.expect("agent info")["name"],
-        Value::String(String::from("Mock ACP"))
-    );
-    assert_eq!(
-        created.modes.expect("modes")["currentModeId"],
-        Value::String(String::from("build"))
-    );
-    assert!(created
-        .config_options
-        .iter()
-        .any(|option| { option.get("id").and_then(Value::as_str) == Some("model") }));
-
-    let state = session.state_response().expect("session state");
-    assert_eq!(state.session_id, "mock-agent-session");
-    assert_eq!(state.agent_type, "pi");
-    assert_eq!(state.process_id, "acp-agent-1");
-    assert!(!state.closed);
-}
-
-#[test]
-fn initialize_request_uses_requested_protocol_version_and_client_capabilities() {
-    let client_capabilities = json!({
-        "fs": {
-            "readTextFile": true,
-            "writeTextFile": false,
-        },
-        "terminal": false,
-    });
-    let request = acp::session::build_initialize_request(2, client_capabilities.clone());
-    let params = request
-        .params
-        .expect("initialize request params")
-        .as_object()
-        .cloned()
-        .expect("initialize params object");
-
-    assert_eq!(request.method, "initialize");
-    assert_eq!(params.get("protocolVersion"), Some(&json!(2)));
-    assert_eq!(params.get("clientCapabilities"), Some(&client_capabilities));
-}
-
-#[test]
-fn initialize_result_accepts_matching_protocol_version() {
-    let init_result = Map::from_iter([(String::from("protocolVersion"), json!(1))]);
-
-    assert_eq!(
-        acp::session::validate_initialize_result(&init_result, 1),
-        Ok(1)
-    );
-}
-
-#[test]
-fn initialize_result_reports_protocol_version_mismatch() {
-    let init_result = Map::from_iter([(String::from("protocolVersion"), json!(2))]);
-
-    match acp::session::validate_initialize_result(&init_result, 1) {
-        Err(acp::session::AcpInitializeError::ProtocolVersionMismatch {
-            requested,
-            reported,
-        }) => {
-            assert_eq!(requested, 1);
-            assert_eq!(reported, 2);
-        }
-        other => panic!("expected protocol version mismatch, got {other:?}"),
-    }
-}
-
-#[test]
-fn session_state_does_not_duplicate_existing_model_options() {
-    let session = codex_session_with_standard_model_option();
-    let model_options = session
-        .created_response()
-        .config_options
-        .into_iter()
-        .filter(|option| {
-            option
-                .get("category")
-                .and_then(Value::as_str)
-                .is_some_and(|category| category == "model")
-        })
-        .collect::<Vec<_>>();
-
-    assert_eq!(model_options.len(), 1);
-    assert_eq!(model_options[0]["id"], "model");
-    assert_eq!(model_options[0]["currentValue"], "gpt-5-codex");
-}
-
-#[test]
-fn permission_requests_are_normalized_and_deduped() {
-    let mut session = session("pi");
-    let request = JsonRpcRequest {
-        jsonrpc: String::from("2.0"),
-        id: JsonRpcId::Number(90),
-        method: String::from("session/request_permission"),
-        params: Some(json!({
-            "sessionId": "mock-agent-session",
-            "options": [
-                { "optionId": "once", "kind": "allow_once" },
-                { "optionId": "always", "kind": "allow_always" },
-                { "optionId": "reject", "kind": "reject_once" },
-            ],
-        })),
-    };
-
-    let normalized = normalize_inbound_permission_request(
-        &request,
-        &mut session.seen_inbound_request_ids,
-        &mut session.pending_permission_requests,
-    )
-    .expect("normalized permission request");
-    assert_eq!(normalized.method, "request/permission");
-    assert_eq!(
-        normalized
-            .params
-            .as_ref()
-            .and_then(|params| params.get("permissionId"))
-            .and_then(Value::as_str),
-        Some("90")
-    );
-
-    let duplicate = normalize_inbound_permission_request(
-        &request,
-        &mut session.seen_inbound_request_ids,
-        &mut session.pending_permission_requests,
-    );
-    assert!(duplicate.is_none());
-
-    let (reply_id, result) = maybe_normalize_permission_response(
-        "request/permission",
-        Some(json!({
-            "permissionId": "90",
-            "reply": "always",
-        })),
-        &mut session.pending_permission_requests,
-    )
-    .expect("normalized permission reply");
-    assert_eq!(reply_id, JsonRpcId::Number(90));
-    assert_eq!(result["outcome"]["optionId"], "always");
-}
-
-#[test]
-fn session_permission_reply_survives_unrelated_seen_request_id_eviction() {
-    let mut session = session("pi");
-    let request = JsonRpcRequest {
-        jsonrpc: String::from("2.0"),
-        id: JsonRpcId::String(String::from("perm-late")),
-        method: String::from("session/request_permission"),
-        params: Some(json!({ "sessionId": "mock-agent-session" })),
-    };
-
-    normalize_inbound_permission_request(
-        &request,
-        &mut session.seen_inbound_request_ids,
-        &mut session.pending_permission_requests,
-    )
-    .expect("normalized permission request");
-
-    for request_id in 0..=SEEN_INBOUND_REQUEST_ID_RETENTION_LIMIT {
-        session
-            .seen_inbound_request_ids
-            .insert(JsonRpcId::Number(request_id as i64));
-    }
-
-    let (reply_id, result) = maybe_normalize_permission_response(
-        "request/permission",
-        Some(json!({
-            "permissionId": "perm-late",
-            "reply": "once",
-        })),
-        &mut session.pending_permission_requests,
-    )
-    .expect("permission reply should remain pending after unrelated seen-id churn");
-    assert_eq!(reply_id, JsonRpcId::String(String::from("perm-late")));
-    assert_eq!(result["outcome"]["optionId"], "allow_once");
-}
-
-#[test]
-fn session_pending_permission_requests_are_bounded_independently() {
-    let mut session = session("pi");
-
-    for request_id in 0..=PENDING_PERMISSION_REQUEST_RETENTION_LIMIT {
-        let request = JsonRpcRequest {
-            jsonrpc: String::from("2.0"),
-            id: JsonRpcId::Number(request_id as i64),
-            method: String::from("session/request_permission"),
-            params: Some(json!({ "sessionId": "mock-agent-session" })),
-        };
-        normalize_inbound_permission_request(
-            &request,
-            &mut session.seen_inbound_request_ids,
-            &mut session.pending_permission_requests,
-        )
-        .expect("normalized permission request");
-    }
-
-    assert_eq!(
-        session.pending_permission_requests.len(),
-        PENDING_PERMISSION_REQUEST_RETENTION_LIMIT
-    );
-}
-
-#[test]
-fn notifications_update_session_snapshot_without_retaining_replay_events() {
-    let mut session = session("pi");
-    session.record_notification(JsonRpcNotification {
-        jsonrpc: String::from("2.0"),
-        method: String::from("session/update"),
-        params: Some(json!({
-            "update": {
-                "sessionUpdate": "config_option_update",
-                "configOptions": [
-                    {
-                        "id": "thought-opt",
-                        "category": "thought_level",
-                        "label": "Thought Level",
-                        "currentValue": "high",
-                    },
-                ],
-            },
-        })),
-    });
-    session.record_notification(JsonRpcNotification {
-        jsonrpc: String::from("2.0"),
-        method: String::from("session/update"),
-        params: Some(json!({
-            "update": {
-                "sessionUpdate": "agent_message_chunk",
-                "content": { "text": "hello from mock agent" },
-            },
-        })),
-    });
-
-    let state = session.state_response().expect("session state");
-    assert_eq!(state.config_options.len(), 1);
-    assert_eq!(state.config_options[0]["currentValue"], "high");
-}
-
-#[test]
-fn acp_stdout_buffer_trimming_keeps_newest_utf8_boundary() {
-    let mut buffer = format!("{}é", "a".repeat(ACP_STDOUT_BUFFER_BYTE_LIMIT));
-
-    assert!(trim_acp_stdout_buffer(&mut buffer));
-
-    assert_eq!(buffer.len(), ACP_STDOUT_BUFFER_BYTE_LIMIT);
-    assert!(buffer.is_char_boundary(0));
-    assert!(buffer.ends_with('é'));
-
-    let mut buffer = format!("é{}", "a".repeat(ACP_STDOUT_BUFFER_BYTE_LIMIT));
-
-    assert!(trim_acp_stdout_buffer(&mut buffer));
-
-    assert_eq!(buffer.len(), ACP_STDOUT_BUFFER_BYTE_LIMIT);
-    assert!(buffer.is_char_boundary(0));
-    assert!(buffer.starts_with('a'));
-}
-
-#[test]
-fn mode_changes_inject_synthetic_session_update_when_agent_omits_notification() {
-    let mut session = session("mock-no-update-agent");
-    let params = Map::from_iter([(String::from("modeId"), Value::String(String::from("plan")))]);
-
-    let synthetic = session
-        .apply_request_success("session/set_mode", &params, false)
-        .expect("mode update should succeed")
-        .expect("synthetic mode update");
-    assert_eq!(synthetic.method, "session/update");
-    assert_eq!(
-        session
-            .state_response()
-            .expect("session state")
-            .modes
-            .expect("modes")["currentModeId"],
-        Value::String(String::from("plan"))
-    );
-}
-
-#[test]
-fn mode_changes_do_not_duplicate_existing_session_updates() {
-    let mut session = session("mock-no-update-agent");
-    session.record_notification(JsonRpcNotification {
-        jsonrpc: String::from("2.0"),
-        method: String::from("session/update"),
-        params: Some(json!({
-            "update": {
-                "sessionUpdate": "current_mode_update",
-                "currentModeId": "plan",
-            },
-        })),
-    });
-
-    let params = Map::from_iter([(String::from("modeId"), Value::String(String::from("plan")))]);
-    let synthetic = session
-        .apply_request_success("session/set_mode", &params, true)
-        .expect("mode update should succeed");
-
-    assert!(synthetic.is_none());
-    assert_eq!(
-        session
-            .state_response()
-            .expect("session state")
-            .modes
-            .expect("modes")["currentModeId"],
-        "plan"
-    );
-}
-
-#[test]
-fn config_changes_inject_synthetic_session_update_when_agent_omits_notification() {
-    let mut session = session("mock-no-update-agent");
-    let params = Map::from_iter([
-        (
-            String::from("configId"),
-            Value::String(String::from("thought-opt")),
-        ),
-        (String::from("value"), Value::String(String::from("high"))),
-    ]);
-
-    let synthetic = session
-        .apply_request_success("session/set_config_option", &params, false)
-        .expect("config update should succeed")
-        .expect("synthetic config update");
-    assert_eq!(synthetic.method, "session/update");
-    assert_eq!(
-        synthetic.params.expect("config params")["update"]["sessionUpdate"],
-        Value::String(String::from("config_option_update"))
-    );
-    assert_eq!(
-        session
-            .state_response()
-            .expect("session state")
-            .config_options[1]["currentValue"],
-        "high"
-    );
-}
-
-#[test]
-fn config_changes_do_not_duplicate_existing_session_updates() {
-    let mut session = session("mock-no-update-agent");
-    session.record_notification(JsonRpcNotification {
-        jsonrpc: String::from("2.0"),
-        method: String::from("session/update"),
-        params: Some(json!({
-            "update": {
-                "sessionUpdate": "config_option_update",
-                "configOptions": [
-                    {
-                        "id": "model-opt",
-                        "category": "model",
-                        "label": "Model",
-                        "currentValue": "default",
-                    },
-                    {
-                        "id": "thought-opt",
-                        "category": "thought_level",
-                        "label": "Thought Level",
-                        "currentValue": "high",
-                    },
-                ],
-            },
-        })),
-    });
-
-    let params = Map::from_iter([
-        (
-            String::from("configId"),
-            Value::String(String::from("thought-opt")),
-        ),
-        (String::from("value"), Value::String(String::from("high"))),
-    ]);
-    let synthetic = session
-        .apply_request_success("session/set_config_option", &params, true)
-        .expect("config update should succeed");
-
-    assert!(synthetic.is_none());
-    assert_eq!(
-        session
-            .state_response()
-            .expect("session state")
-            .config_options[1]["currentValue"],
-        "high"
-    );
-}
-
-#[test]
-fn config_changes_accept_non_string_values() {
-    let mut session = session("mock-no-update-agent");
-    let params = Map::from_iter([
-        (
-            String::from("configId"),
-            Value::String(String::from("thought-opt")),
-        ),
-        (String::from("value"), Value::Bool(true)),
-    ]);
-
-    let synthetic = session
-        .apply_request_success("session/set_config_option", &params, false)
-        .expect("config update should succeed")
-        .expect("synthetic config update");
-
-    assert_eq!(synthetic.method, "session/update");
-    assert_eq!(
-        session
-            .state_response()
-            .expect("session state")
-            .config_options[1]["currentValue"],
-        Value::Bool(true)
-    );
-}
-
-#[test]
-fn config_changes_return_typed_error_for_malformed_params() {
-    let mut session = session("mock-no-update-agent");
-    let params = Map::from_iter([
-        (String::from("configId"), Value::Bool(true)),
-        (String::from("value"), Value::Bool(true)),
-    ]);
-
-    let error = session
-        .apply_request_success("session/set_config_option", &params, false)
-        .expect_err("malformed params should fail");
-    let json_rpc = error.to_json_rpc_error("session/set_config_option");
-
-    assert_eq!(json_rpc.code, -32602);
-    assert_eq!(
-        json_rpc.message,
-        "Invalid params for session/set_config_option: configId must be a string"
-    );
-    assert_eq!(
-        json_rpc.data.expect("typed error data")["kind"],
-        json!("invalid_config_option_params")
-    );
-}
-
-#[test]
-fn config_changes_return_typed_error_for_malformed_option_entries() {
-    let mut session = session("mock-no-update-agent");
-    session
-        .config_options
-        .push(Value::String(String::from("broken")));
-    let params = Map::from_iter([
-        (
-            String::from("configId"),
-            Value::String(String::from("thought-opt")),
-        ),
-        (String::from("value"), Value::Bool(true)),
-    ]);
-
-    let error = session
-        .apply_request_success("session/set_config_option", &params, false)
-        .expect_err("malformed config options should fail");
-    let json_rpc = error.to_json_rpc_error("session/set_config_option");
-
-    assert_eq!(json_rpc.code, -32602);
-    assert_eq!(
-        json_rpc.message,
-        "Invalid params for session/set_config_option: config option entry 3 is malformed: expected an object"
-    );
-    let data = json_rpc.data.expect("typed error data");
-    assert_eq!(data["kind"], json!("malformed_config_option_entry"));
-    assert_eq!(data["index"], json!(3));
-}
-
-#[test]
-fn cancel_method_not_found_detects_session_cancel_response_shape() {
-    let response = JsonRpcResponse::error_response(
-        JsonRpcId::Number(1),
-        JsonRpcError {
-            code: -32601,
-            message: String::from("Method not found: session/cancel"),
-            data: Some(json!({ "method": "session/cancel" })),
-        },
-    );
-
-    assert!(is_cancel_method_not_found(&response));
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn acp_inbound_requests_wait_for_host_response_before_falling_back() {
-    let handler: InboundRequestHandler = Arc::new(|request| {
-        Box::pin(async move {
-            tokio::time::sleep(Duration::from_millis(25)).await;
-            Ok(Some(InboundRequestOutcome {
-                result: Some(json!({
-                    "echo": request.params.unwrap_or(Value::Null)
-                })),
-                error: None,
-            }))
-        })
-    });
-
-    let (_client, mut reader, mut writer) = new_client(AcpClientOptions {
-        timeout: Duration::from_millis(100),
-        method_timeouts: BTreeMap::new(),
-        request_handler: Some(handler),
-        process_state_provider: None,
-        max_read_line_bytes: 16 * 1024 * 1024,
-    });
-    let started_at = Instant::now();
-
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Request(JsonRpcRequest {
-            jsonrpc: String::from("2.0"),
-            id: JsonRpcId::Number(41),
-            method: String::from("fs/read_text_file"),
-            params: Some(json!({ "path": "/workspace/notes.txt" })),
-        }),
-    )
-    .await;
-
-    let response = read_message(&mut reader).await;
-    assert!(started_at.elapsed() >= Duration::from_millis(20));
-    assert_eq!(
-        response,
-        JsonRpcMessage::Response(JsonRpcResponse::success(
-            JsonRpcId::Number(41),
-            json!({
-                "echo": {
-                    "path": "/workspace/notes.txt",
-                },
-            }),
-        ))
-    );
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn acp_inbound_requests_return_method_not_found_after_handler_timeout() {
-    let handler: InboundRequestHandler = Arc::new(|_request| {
-        Box::pin(async move {
-            tokio::time::sleep(Duration::from_millis(50)).await;
-            Ok(Some(InboundRequestOutcome {
-                result: Some(json!({ "late": true })),
-                error: None,
-            }))
-        })
-    });
-
-    let (_client, mut reader, mut writer) = new_client(AcpClientOptions {
-        timeout: Duration::from_millis(10),
-        method_timeouts: BTreeMap::new(),
-        request_handler: Some(handler),
-        process_state_provider: None,
-        max_read_line_bytes: 16 * 1024 * 1024,
-    });
-    let started_at = Instant::now();
-
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Request(JsonRpcRequest {
-            jsonrpc: String::from("2.0"),
-            id: JsonRpcId::Number(42),
-            method: String::from("host/missing"),
-            params: None,
-        }),
-    )
-    .await;
-
-    let response = read_message(&mut reader).await;
-    assert!(started_at.elapsed() >= Duration::from_millis(10));
-    assert_eq!(
-        response,
-        JsonRpcMessage::Response(JsonRpcResponse::error_response(
-            JsonRpcId::Number(42),
-            JsonRpcError {
-                code: -32601,
-                message: String::from("Method not found: host/missing"),
-                data: None,
-            },
-        ))
-    );
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn malformed_acp_frames_with_missing_ids_return_invalid_request_errors() {
-    let (_client, mut reader, mut writer) = new_client(AcpClientOptions::default());
-
-    write_raw(&mut writer, r#"{"jsonrpc":"2.0","result":{"ok":true}}"#).await;
-    write_raw(&mut writer, "\n").await;
-
-    let response = read_message(&mut reader).await;
-    assert_eq!(
-        response,
-        JsonRpcMessage::Response(JsonRpcResponse::error_response(
-            JsonRpcId::Null,
-            JsonRpcError {
-                code: -32600,
-                message: String::from("Invalid Request: response is missing id"),
-                data: None,
-            },
-        ))
-    );
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn acp_response_write_failures_put_the_client_into_a_failed_state() {
-    let handler: InboundRequestHandler = Arc::new(|request| {
-        Box::pin(async move {
-            Ok(Some(InboundRequestOutcome {
-                result: Some(json!({
-                    "echo": request.params.unwrap_or(Value::Null)
-                })),
-                error: None,
-            }))
-        })
-    });
-
-    let (client, mut reader, mut writer, fail_writes) =
-        new_client_with_failing_writer(AcpClientOptions {
-            timeout: Duration::from_secs(1),
-            method_timeouts: BTreeMap::new(),
-            request_handler: Some(handler),
-            process_state_provider: None,
-            max_read_line_bytes: 16 * 1024 * 1024,
-        });
-
-    let pending_request = tokio::spawn({
-        let client = client.clone();
-        async move {
-            client
-                .request("session/prompt", Some(json!({ "sessionId": "pending" })))
-                .await
-        }
-    });
-
-    let outbound_request = read_message(&mut reader).await;
-    match outbound_request {
-        JsonRpcMessage::Request(request) => {
-            assert_eq!(request.method, "session/prompt");
-        }
-        other => panic!("unexpected outbound request: {other:?}"),
-    }
-
-    fail_writes.store(true, Ordering::SeqCst);
-
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Request(JsonRpcRequest {
-            jsonrpc: String::from("2.0"),
-            id: JsonRpcId::Number(77),
-            method: String::from("fs/read_text_file"),
-            params: Some(json!({ "path": "/workspace/notes.txt" })),
-        }),
-    )
-    .await;
-
-    let pending_error = tokio::time::timeout(Duration::from_secs(1), pending_request)
-        .await
-        .expect("pending request timeout")
-        .expect("pending request join")
-        .expect_err("pending request should fail after response write error");
-    assert!(
-        matches!(pending_error, AcpClientError::Io(_)),
-        "unexpected pending error: {pending_error:?}"
-    );
-    assert!(
-        pending_error
-            .to_string()
-            .contains("failed to write ACP frame"),
-        "unexpected pending error message: {pending_error}"
-    );
-
-    let started_at = Instant::now();
-    let subsequent_error = client
-        .request(
-            "session/prompt",
-            Some(json!({ "sessionId": "after-failure" })),
-        )
-        .await
-        .expect_err("subsequent request should fail fast");
-    if run_timing_sensitive_tests() {
-        assert!(started_at.elapsed() < Duration::from_millis(50));
-    }
-    assert!(
-        matches!(subsequent_error, AcpClientError::Io(_)),
-        "unexpected subsequent error: {subsequent_error:?}"
-    );
-    assert_eq!(subsequent_error.to_string(), pending_error.to_string());
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn acp_request_method_timeout_overrides_apply_to_initialize_and_prompt() {
-    let (client, mut reader, mut writer) = new_client(AcpClientOptions {
-        timeout: Duration::from_millis(25),
-        method_timeouts: BTreeMap::from([
-            (String::from("initialize"), Duration::from_millis(5)),
-            (String::from("session/prompt"), Duration::from_millis(80)),
-        ]),
-        request_handler: None,
-        process_state_provider: None,
-        max_read_line_bytes: 16 * 1024 * 1024,
-    });
-
-    let initialize_started = Instant::now();
-    let initialize = tokio::spawn({
-        let client = client.clone();
-        async move {
-            client
-                .request("initialize", Some(json!({ "protocolVersion": 1 })))
-                .await
-        }
-    });
-
-    let initialize_request = read_message(&mut reader).await;
-    match initialize_request {
-        JsonRpcMessage::Request(request) => {
-            assert_eq!(request.method, "initialize");
-        }
-        other => panic!("unexpected initialize request: {other:?}"),
-    }
-
-    let initialize_error = initialize
-        .await
-        .expect("initialize join")
-        .expect_err("initialize should time out");
-    assert!(matches!(initialize_error, AcpClientError::Timeout(_)));
-    if run_timing_sensitive_tests() {
-        assert!(initialize_started.elapsed() < Duration::from_millis(20));
-    }
-    assert!(initialize_error
-        .to_string()
-        .contains("ACP request initialize (id=1) timed out after 5ms"));
-
-    let prompt = tokio::spawn({
-        let client = client.clone();
-        async move {
-            client
-                .request("session/prompt", Some(json!({ "sessionId": "long-lived" })))
-                .await
-        }
-    });
-
-    let prompt_request = read_message(&mut reader).await;
-    let prompt_id = match prompt_request {
-        JsonRpcMessage::Request(request) => {
-            assert_eq!(request.method, "session/prompt");
-            request.id
-        }
-        other => panic!("unexpected prompt request: {other:?}"),
-    };
-
-    tokio::time::sleep(Duration::from_millis(40)).await;
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Response(JsonRpcResponse::success(
-            prompt_id,
-            json!({ "status": "complete" }),
-        )),
-    )
-    .await;
-
-    let prompt_response = prompt.await.expect("prompt join").expect("prompt response");
-    assert_eq!(
-        prompt_response.result(),
-        Some(&json!({ "status": "complete" }))
-    );
-}
-
-#[tokio::test(flavor = "current_thread")]
-async fn acp_timed_out_session_prompt_sends_cancel_and_ignores_late_response() {
-    let (client, mut reader, mut writer) = new_client(AcpClientOptions {
-        timeout: Duration::from_millis(20),
-        method_timeouts: BTreeMap::from([(String::from("initialize"), Duration::from_millis(50))]),
-        request_handler: None,
-        process_state_provider: None,
-        max_read_line_bytes: 16 * 1024 * 1024,
-    });
-
-    let prompt = tokio::spawn({
-        let client = client.clone();
-        async move {
-            client
-                .request(
-                    "session/prompt",
-                    Some(json!({ "sessionId": "session-timeout" })),
-                )
-                .await
-        }
-    });
-
-    let outbound_request = read_message(&mut reader).await;
-    let prompt_id = match outbound_request {
-        JsonRpcMessage::Request(request) => {
-            assert_eq!(request.method, "session/prompt");
-            request.id
-        }
-        other => panic!("unexpected prompt request: {other:?}"),
-    };
-
-    let cancel = read_message(&mut reader).await;
-    match cancel {
-        JsonRpcMessage::Notification(notification) => {
-            assert_eq!(notification.method, "session/cancel");
-            assert_eq!(
-                notification.params,
-                Some(json!({ "sessionId": "session-timeout" }))
-            );
-        }
-        other => panic!("unexpected timeout cancel frame: {other:?}"),
-    }
-
-    let prompt_error = prompt
-        .await
-        .expect("prompt join")
-        .expect_err("prompt should time out");
-    assert!(matches!(prompt_error, AcpClientError::Timeout(_)));
-
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Response(JsonRpcResponse::success(
-            prompt_id,
-            json!({ "status": "late" }),
-        )),
-    )
-    .await;
-
-    let initialize = tokio::spawn({
-        let client = client.clone();
-        async move {
-            client
-                .request("initialize", Some(json!({ "protocolVersion": 1 })))
-                .await
-        }
-    });
-
-    let initialize_request = read_message(&mut reader).await;
-    let initialize_id = match initialize_request {
-        JsonRpcMessage::Request(request) => {
-            assert_eq!(request.method, "initialize");
-            request.id
-        }
-        other => panic!("unexpected initialize request: {other:?}"),
-    };
-
-    write_message(
-        &mut writer,
-        &JsonRpcMessage::Response(JsonRpcResponse::success(
-            initialize_id,
-            json!({ "protocolVersion": 1 }),
-        )),
-    )
-    .await;
-
-    let initialize_response = initialize
-        .await
-        .expect("initialize join")
-        .expect("initialize response");
-    assert_eq!(
-        initialize_response.result(),
-        Some(&json!({ "protocolVersion": 1 }))
-    );
-}
diff --git a/crates/sidecar/tests/architecture_guards.rs b/crates/sidecar/tests/architecture_guards.rs
deleted file mode 100644
index f94afbf4d..000000000
--- a/crates/sidecar/tests/architecture_guards.rs
+++ /dev/null
@@ -1,601 +0,0 @@
-//! Architecture / boundary guards (CI hardening, item #2).
-//!
-//! This is a *chokepoint lint*: it scans the secure-exec Rust source tree and
-//! FAILS if a security-sensitive host API ("banned API") appears OUTSIDE an
-//! explicit allowlist of sanctioned modules. The goal is to keep host access
-//! funnelled through a small, reviewable set of files so that a NEW use of
-//! `std::fs`, raw sockets, `Command::new`, or process-environment reads cannot
-//! be introduced without either landing in a sanctioned module or consciously
-//! updating this allowlist (which forces review of the boundary).
-//!
-//! The four banned classes mirror the kernel/sidecar trust boundary:
-//!
-//!   * fs      -- `std::fs` / `tokio::fs` / `File::open` / `File::create` /
-//!     `OpenOptions` / raw `openat`. Sanctioned only in the sidecar host-FS
-//!     plumbing, the VFS-backed runtime modules, and runtime asset/module
-//!     loaders.
-//!   * net     -- `std::net` / `tokio::net` socket constructors, `reqwest`,
-//!     `hyper`, `to_socket_addrs`, `UnixStream::pair`. Sanctioned only in the
-//!     kernel DNS/socket plane, the sidecar host-net chokepoint
-//!     (`sidecar::execution`), the embedded V8 runtime IPC pair, and
-//!     host-backed storage plugins.
-//!   * process -- `std::process::Command` / `tokio::process` / OS `fork`.
-//!     Sanctioned only where secure-exec spawns its own helper process (the
-//!     client transport that launches the sidecar). Guest "process" spawns are
-//!     dispatched through the kernel `CommandDriver` registry and never touch
-//!     `Command::new`.
-//!   * env     -- `std::env::var` / `var_os` / `vars`. Sanctioned only at the
-//!     scrubbed env-assembly / bootstrap points that read host configuration
-//!     before a VM is constructed.
-//!
-//! IMPORTANT MAINTENANCE NOTES
-//! ---------------------------
-//! * The allowlist is built from the CURRENT legitimate uses so the test is
-//!   GREEN today; it is designed to catch only *new* uses.
-//! * Build scripts (`build.rs`, `*_build_support.rs`, ...), `tests/` and
-//!   `benches/` directories, and inline `#[cfg(test)]` modules are excluded
-//!   from the scan (they are not production host-access surface).
-//! * `crates/execution/src/benchmark.rs`, `crates/execution/src/bin/`, and
-//!   `crates/native-baseline/` hold benchmarking/dev tooling and are excluded
-//!   for the same reason.
-//!
-//! If you are adding a genuinely new sanctioned chokepoint, add its
-//! repo-relative path to the relevant allowlist below WITH a comment
-//! explaining why the host access is safe. If you are adding host access
-//! anywhere else, route it through an existing chokepoint instead.
-
-use std::collections::BTreeSet;
-use std::path::{Path, PathBuf};
-
-/// Repo root = `<root>/crates/sidecar` -> up two levels.
-fn repo_root() -> PathBuf {
-    let manifest = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
-    manifest
-        .parent()
-        .and_then(Path::parent)
-        .expect("sidecar crate should live two levels under the repo root")
-        .to_path_buf()
-}
-
-/// Every production Rust source file under `crates/*/src/`, repo-relative,
-/// excluding build scripts, benches, bins, and `tests/` trees.
-fn production_source_files(root: &Path) -> Vec<PathBuf> {
-    let mut out = Vec::new();
-    let crates_dir = root.join("crates");
-    let mut crate_dirs: Vec<PathBuf> = std::fs::read_dir(&crates_dir)
-        .expect("crates/ directory should exist")
-        .filter_map(|entry| entry.ok().map(|e| e.path()))
-        .filter(|p| p.is_dir())
-        .collect();
-    crate_dirs.sort();
-    for crate_dir in crate_dirs {
-        let src = crate_dir.join("src");
-        if src.is_dir() {
-            collect_rs(&src, root, &mut out);
-        }
-    }
-    out.sort();
-    out
-}
-
-fn collect_rs(dir: &Path, root: &Path, out: &mut Vec<PathBuf>) {
-    let mut entries: Vec<PathBuf> = std::fs::read_dir(dir)
-        .unwrap_or_else(|err| panic!("read_dir {dir:?}: {err}"))
-        .filter_map(|entry| entry.ok().map(|e| e.path()))
-        .collect();
-    entries.sort();
-    for path in entries {
-        if path.is_dir() {
-            // Exclude bench/dev binaries that are not production runtime.
-            if path.file_name().map(|n| n == "bin").unwrap_or(false) {
-                continue;
-            }
-            collect_rs(&path, root, out);
-        } else if path.extension().map(|e| e == "rs").unwrap_or(false) {
-            let rel = path
-                .strip_prefix(root)
-                .expect("source path under repo root")
-                .to_path_buf();
-            out.push(rel);
-        }
-    }
-}
-
-/// Returns true if the file is excluded from scanning entirely.
-fn is_excluded_file(rel: &Path) -> bool {
-    let s = rel.to_string_lossy();
-    s.ends_with("build.rs")
-        || s.ends_with("build_support.rs")
-        || s.ends_with("v8_bridge_build.rs")
-        // Benchmarking / dev tooling, not production host-access surface.
-        || s == "crates/execution/src/benchmark.rs"
-        || s.starts_with("crates/native-baseline/")
-        || s.contains("/src/bin/")
-}
-
-/// Strip a trailing `//` line comment (good enough for this lint; we are not
-/// trying to be a full Rust parser, only to avoid flagging commented examples).
-fn strip_line_comment(line: &str) -> &str {
-    match line.find("//") {
-        Some(idx) => &line[..idx],
-        None => line,
-    }
-}
-
-/// Track whether a line is inside a top-level `#[cfg(test)]` module so test
-/// code is excluded from the scan. We watch for `#[cfg(test)]` immediately
-/// followed by a `mod ... {` and then balance braces until the module closes.
-struct CfgTestTracker {
-    pending_cfg_test: bool,
-    depth: u32,
-}
-
-impl CfgTestTracker {
-    fn new() -> Self {
-        Self {
-            pending_cfg_test: false,
-            depth: 0,
-        }
-    }
-
-    /// Feed a line. Returns true if this line is inside a `#[cfg(test)]` module.
-    fn in_test(&mut self, raw: &str) -> bool {
-        let line = strip_line_comment(raw);
-        let trimmed = line.trim();
-
-        if self.depth > 0 {
-            // Already inside a cfg(test) module: update brace balance.
-            self.depth += count_open(line);
-            self.depth = self.depth.saturating_sub(count_close(line));
-            return true;
-        }
-
-        if trimmed.starts_with("#[cfg(test)]") {
-            self.pending_cfg_test = true;
-            return false;
-        }
-
-        if self.pending_cfg_test {
-            if trimmed.is_empty() || trimmed.starts_with("#[") || trimmed.starts_with("//") {
-                // Attributes/blank lines may sit between #[cfg(test)] and the item.
-                return false;
-            }
-            // The attribute applies to the next item. Only a `mod ... { ... }`
-            // creates a test *region* we must skip wholesale; a `#[cfg(test)]`
-            // on a `use` / `fn` / `const` is a single item and gets matched
-            // line-by-line, so we still skip just that line below.
-            self.pending_cfg_test = false;
-            if trimmed.starts_with("mod ")
-                || trimmed.starts_with("pub mod ")
-                || trimmed.starts_with("pub(crate) mod ")
-                || trimmed.starts_with("pub(super) mod ")
-            {
-                // Enter test module; balance braces starting from this line.
-                self.depth = count_open(line).saturating_sub(count_close(line));
-                if self.depth == 0 {
-                    // Single-line `mod x;` declaration (no body) -- nothing to skip.
-                }
-                return true;
-            }
-            // A single `#[cfg(test)]` item (use/fn/const/static). Skip this line.
-            return true;
-        }
-
-        false
-    }
-}
-
-fn count_open(s: &str) -> u32 {
-    s.bytes().filter(|&b| b == b'{').count() as u32
-}
-fn count_close(s: &str) -> u32 {
-    s.bytes().filter(|&b| b == b'}').count() as u32
-}
-
-/// A banned-API class and the regex-free matchers describing it.
-struct BannedClass {
-    name: &'static str,
-    /// Substrings; a line matches the class if it contains any of them.
-    needles: &'static [&'static str],
-    /// Files (repo-relative) where this class is sanctioned.
-    allowlist: &'static [&'static str],
-}
-
-fn line_matches(line: &str, needles: &[&str]) -> bool {
-    needles.iter().any(|n| line.contains(n))
-}
-
-/// Run the chokepoint scan for one banned class and return offending
-/// `path:line: text` strings that are NOT in the allowlist.
-fn scan_class(root: &Path, files: &[PathBuf], class: &BannedClass) -> Vec<String> {
-    let allow: BTreeSet<&str> = class.allowlist.iter().copied().collect();
-    let mut violations = Vec::new();
-
-    for rel in files {
-        if is_excluded_file(rel) {
-            continue;
-        }
-        let rel_str = rel.to_string_lossy().replace('\\', "/");
-        let allowed = allow.contains(rel_str.as_str());
-        let abs = root.join(rel);
-        let content =
-            std::fs::read_to_string(&abs).unwrap_or_else(|err| panic!("read {abs:?}: {err}"));
-        let mut tracker = CfgTestTracker::new();
-        for (idx, raw) in content.lines().enumerate() {
-            let in_test = tracker.in_test(raw);
-            if allowed {
-                continue; // still need to advance the tracker above
-            }
-            if in_test {
-                continue;
-            }
-            let code = strip_line_comment(raw);
-            if line_matches(code, class.needles) {
-                violations.push(format!("{}:{}: {}", rel_str, idx + 1, raw.trim()));
-            }
-        }
-    }
-    violations
-}
-
-// ---------------------------------------------------------------------------
-// Allowlists -- built from the CURRENT legitimate uses (green today).
-// ---------------------------------------------------------------------------
-
-/// fs: host filesystem access.
-///
-/// Sanctioned surface: the sidecar host-FS plumbing + VFS-backed runtime, the
-/// JS/Python/WASM runtime asset & module loaders, the sidecar bootstrap
-/// (stdio/service/state/vm), and runtime support glue. These modules read
-/// real host files to seed the VFS, load runtime assets, and bridge guest FS
-/// syscalls to the host-dir mount.
-const FS_ALLOW: &[&str] = &[
-    // sidecar host-FS chokepoint + bootstrap
-    "crates/sidecar/src/filesystem.rs",
-    "crates/sidecar/src/plugins/host_dir.rs",
-    // macOS host-mount confinement primitives: the cap-std resolve-beneath walk
-    // that stands in for Linux `openat2(RESOLVE_BENEATH)` on darwin. Same
-    // sanctioned boundary as host_dir.rs/filesystem.rs, macOS-only.
-    "crates/sidecar/src/macos_fs.rs",
-    "crates/sidecar/src/plugins/module_access.rs",
-    // agentOS package projection: the sidecar is the host-side TCB that reads a
-    // trusted, client-configured package's tar + `agentos-package.json` from the
-    // host to build the read-only `/opt/agentos` granular mounts (no extraction,
-    // no on-disk symlink farm). Same sanctioned read-only host-source boundary as
-    // filesystem.rs/host_dir.rs.
-    "crates/sidecar/src/package_projection.rs",
-    "crates/sidecar/src/stdio.rs",
-    "crates/sidecar/src/state.rs",
-    "crates/sidecar/src/vm.rs",
-    "crates/sidecar/src/service.rs",
-    "crates/sidecar/src/execution.rs",
-    "crates/sidecar/src/plugins/chunked_local.rs",
-    "crates/secure-exec-vfs/src/local/file_block_store.rs",
-    "crates/secure-exec-vfs/src/local/sqlite_metadata_store.rs",
-    // Tar-backed read-only VFS: mmaps the trusted, client-configured package
-    // tar from the host and serves member byte ranges without extracting.
-    // Same sanctioned read-only host-source boundary as host_dir.rs (the tar is
-    // an immutable, content-addressed mount source); reads are SIGBUS-guarded.
-    "crates/vfs/src/posix/tar_fs.rs",
-    // language-runtime asset / module loaders (read host runtime assets)
-    "crates/execution/src/python.rs",
-    "crates/execution/src/wasm.rs",
-    "crates/execution/src/javascript.rs",
-    "crates/execution/src/node_import_cache.rs",
-    "crates/execution/src/runtime_support.rs",
-    // Host-side V8 diagnostics: module-trace and sync-RPC latency profilers
-    // write to an operator-provided file path, and snapshot bootstrap reads the
-    // userland bundle from PI_SNAPSHOT_BUNDLE_PATH. Host-only, not guest-reachable.
-    "crates/v8-runtime/src/execution.rs",
-    "crates/v8-runtime/src/host_call.rs",
-    "crates/v8-runtime/src/snapshot.rs",
-    // Session-phase perf recorder writes to an operator-provided file path
-    // (AGENTOS_V8_SESSION_PHASES_FILE). Host-only diagnostics, same class as
-    // execution.rs/host_call.rs above.
-    "crates/v8-runtime/src/session.rs",
-];
-
-/// net: host network access.
-///
-/// Sanctioned surface: the kernel DNS resolver plane, the sidecar host-net
-/// chokepoint (`execution.rs`, which owns all guest TCP/UDP/Unix sockets), the
-/// host-backed storage/agent plugins (which open egress to S3 / Google Drive /
-/// the sandbox-agent control plane), the embedded V8 runtime IPC socketpair,
-/// and the client transport that talks to the spawned sidecar.
-const NET_ALLOW: &[&str] = &[
-    // kernel network plane
-    "crates/kernel/src/dns.rs",
-    // Shared IP classifier only; no host sockets are opened here.
-    "crates/kernel/src/network_policy.rs",
-    // Shared socket-address formatting only; no host sockets are opened here.
-    "crates/sidecar-core/src/net.rs",
-    "crates/kernel/src/socket_table.rs",
-    "crates/kernel/src/kernel.rs",
-    // sidecar host-net chokepoint + bootstrap
-    "crates/sidecar/src/execution.rs",
-    "crates/sidecar/src/state.rs",
-    "crates/sidecar/src/vm.rs",
-    // host-backed storage / agent plugins (network egress)
-    "crates/sidecar/src/plugins/s3_common.rs",
-    "crates/secure-exec-vfs/src/s3/block_store.rs",
-    "crates/secure-exec-vfs/src/s3/object_backend.rs",
-    "crates/sidecar/src/plugins/google_drive.rs",
-    "crates/sidecar/src/plugins/sandbox_agent.rs",
-    // embedded runtime IPC socketpair (not external egress)
-    "crates/v8-runtime/src/embedded_runtime.rs",
-    "crates/execution/src/v8_runtime.rs",
-    // client spawns + connects to the sidecar helper
-    "crates/secure-exec-client/src/transport.rs",
-];
-
-/// process: OS subprocess creation.
-///
-/// Sanctioned surface: only the client transport, which spawns secure-exec's
-/// own sidecar helper binary. Guest "process" spawns go through the kernel
-/// `CommandDriver` registry and never reach `Command::new`.
-const PROCESS_ALLOW: &[&str] = &[
-    "crates/secure-exec-client/src/transport.rs",
-    // V8 snapshot builder re-execs secure-exec's OWN binary as a helper
-    // (SNAPSHOT_HELPER_ENV) so snapshot creation runs in a clean process.
-    // Host-side bootstrap only; no guest-controlled input picks the program.
-    "crates/v8-runtime/src/snapshot.rs",
-];
-
-/// env: process-environment reads.
-///
-/// Sanctioned surface: the scrubbed/bootstrap configuration readers that look
-/// up host configuration (sidecar binary path, node binary path/PATH, codec
-/// selection, subprocess re-exec markers, local-endpoint test escape hatch)
-/// before a VM exists.
-const ENV_ALLOW: &[&str] = &[
-    "crates/secure-exec-client/src/transport.rs",
-    "crates/execution/src/host_node.rs",
-    // Node import cache reads an operator timeout knob before materializing
-    // host-side runtime assets for VM startup.
-    "crates/execution/src/node_import_cache.rs",
-    // Host-side perf phase diagnostics toggles, read from operator env and not
-    // guest-reachable.
-    "crates/execution/src/javascript.rs",
-    "crates/sidecar/src/filesystem.rs",
-    "crates/v8-runtime/src/bridge.rs",
-    "crates/sidecar/src/execution.rs",
-    "crates/sidecar/src/plugins/s3_common.rs",
-    // Host-process startup log-level knob, read before any VM exists.
-    "crates/sidecar/src/main.rs",
-    // Host-side V8 diagnostics toggles (module-trace + sync-RPC latency
-    // profiling + snapshot-bundle path), read at runtime init from operator
-    // env. Not guest-reachable.
-    "crates/v8-runtime/src/execution.rs",
-    "crates/v8-runtime/src/host_call.rs",
-    "crates/v8-runtime/src/snapshot.rs",
-    // Browser sidecar reads a test-only vm.fetch timeout override (bucket 1:
-    // process-wide test/debug knob, native-only); not VM policy.
-    "crates/sidecar-browser/src/service.rs",
-    // Warm-isolate pool sizing knob (AGENTOS_V8_WARM_ISOLATES), read at
-    // executor init from operator env. Not guest-reachable.
-    "crates/execution/src/v8_host.rs",
-    // Wasm runner mode/cache knobs (AGENTOS_WASM_SNAPSHOT_RUNNER,
-    // AGENTOS_WASM_RUNNER_NO_CACHE) + warm-pool sizing, read at executor init
-    // from operator env. Not guest-reachable. (wasm.rs is already a sanctioned
-    // FS asset-loading boundary above.)
-    "crates/execution/src/wasm.rs",
-    // Session-phase perf diagnostics toggles (AGENTOS_V8_SESSION_PHASES*),
-    // read from operator env. Not guest-reachable.
-    "crates/v8-runtime/src/session.rs",
-];
-
-fn fs_class() -> BannedClass {
-    BannedClass {
-        name: "fs",
-        needles: &[
-            "std::fs",
-            "tokio::fs",
-            "File::open",
-            "File::create",
-            "OpenOptions",
-            "openat",
-        ],
-        allowlist: FS_ALLOW,
-    }
-}
-
-fn net_class() -> BannedClass {
-    BannedClass {
-        name: "net",
-        needles: &[
-            "std::net::",
-            "tokio::net::",
-            "reqwest::",
-            "reqwest ",
-            "hyper::",
-            "TcpStream::",
-            "TcpListener::bind",
-            "UdpSocket::bind",
-            "UnixStream::connect",
-            "UnixStream::pair",
-            "UnixListener::bind",
-            ".to_socket_addrs(",
-            "std::os::unix::net",
-        ],
-        allowlist: NET_ALLOW,
-    }
-}
-
-fn process_class() -> BannedClass {
-    BannedClass {
-        name: "process",
-        needles: &[
-            "std::process::Command",
-            "process::Command",
-            "tokio::process",
-            "Command::new",
-            "libc::fork",
-            "nix::unistd::fork",
-        ],
-        allowlist: PROCESS_ALLOW,
-    }
-}
-
-fn env_class() -> BannedClass {
-    BannedClass {
-        name: "env",
-        needles: &[
-            "env::var(",
-            "env::var_os(",
-            "env::vars(",
-            "env::vars_os(",
-            "std::env::var",
-        ],
-        allowlist: ENV_ALLOW,
-    }
-}
-
-fn assert_green(root: &Path, files: &[PathBuf], class: BannedClass) {
-    let violations = scan_class(root, files, &class);
-    assert!(
-        violations.is_empty(),
-        "\n\nChokepoint lint ({}) found {} host-API use(s) OUTSIDE the sanctioned \
-allowlist.\nEither route the access through an existing chokepoint, or -- if this \
-is a genuinely new sanctioned boundary -- add the file to the `{}` allowlist in \
-crates/sidecar/tests/architecture_guards.rs with a justifying comment.\n\n{}\n",
-        class.name,
-        violations.len(),
-        match class.name {
-            "fs" => "FS_ALLOW",
-            "net" => "NET_ALLOW",
-            "process" => "PROCESS_ALLOW",
-            _ => "ENV_ALLOW",
-        },
-        violations.join("\n"),
-    );
-}
-
-#[test]
-fn fs_access_confined_to_chokepoints() {
-    let root = repo_root();
-    let files = production_source_files(&root);
-    assert_green(&root, &files, fs_class());
-}
-
-#[test]
-fn net_access_confined_to_chokepoints() {
-    let root = repo_root();
-    let files = production_source_files(&root);
-    assert_green(&root, &files, net_class());
-}
-
-#[test]
-fn process_spawn_confined_to_chokepoints() {
-    let root = repo_root();
-    let files = production_source_files(&root);
-    assert_green(&root, &files, process_class());
-}
-
-#[test]
-fn env_reads_confined_to_chokepoints() {
-    let root = repo_root();
-    let files = production_source_files(&root);
-    assert_green(&root, &files, env_class());
-}
-
-/// Sanity: the scan actually sees source files and the allowlisted files exist.
-/// Guards against a refactor silently making the lint scan nothing (which would
-/// make it vacuously pass).
-#[test]
-fn lint_scans_real_sources_and_allowlist_paths_exist() {
-    let root = repo_root();
-    let files = production_source_files(&root);
-    assert!(
-        files.len() > 30,
-        "expected to scan many source files, found {}",
-        files.len()
-    );
-
-    let mut missing = Vec::new();
-    for class in [FS_ALLOW, NET_ALLOW, PROCESS_ALLOW, ENV_ALLOW] {
-        for rel in class {
-            if !root.join(rel).is_file() {
-                missing.push(rel.to_string());
-            }
-        }
-    }
-    missing.sort();
-    missing.dedup();
-    assert!(
-        missing.is_empty(),
-        "allowlist references files that no longer exist (clean them up): {missing:?}"
-    );
-}
-
-// ---------------------------------------------------------------------------
-// Dependency-boundary guard: no secure-exec crate may depend on an
-// agent / ACP / session crate. secure-exec must remain free of Agent OS
-// concerns (ACP, agent adapters, sessions).
-// ---------------------------------------------------------------------------
-
-#[test]
-fn no_secure_exec_crate_depends_on_agent_acp_session() {
-    let root = repo_root();
-    let crates_dir = root.join("crates");
-    let banned_dep_markers = ["agent", "acp", "session"];
-
-    let mut violations = Vec::new();
-    let mut crate_dirs: Vec<PathBuf> = std::fs::read_dir(&crates_dir)
-        .expect("crates/ exists")
-        .filter_map(|e| e.ok().map(|e| e.path()))
-        .filter(|p| p.is_dir())
-        .collect();
-    crate_dirs.sort();
-
-    for crate_dir in crate_dirs {
-        let manifest = crate_dir.join("Cargo.toml");
-        if !manifest.is_file() {
-            continue;
-        }
-        let text = std::fs::read_to_string(&manifest)
-            .unwrap_or_else(|err| panic!("read {manifest:?}: {err}"));
-        let mut in_deps = false;
-        for raw in text.lines() {
-            let line = raw.trim();
-            if line.starts_with('[') {
-                // Any table whose name mentions "dependencies" is a dep table.
-                in_deps = line.contains("dependencies");
-                continue;
-            }
-            if !in_deps || line.is_empty() || line.starts_with('#') {
-                continue;
-            }
-            // Dependency key is the token before `=` or whitespace.
-            let key = line
-                .split(['=', ' ', '\t'])
-                .next()
-                .unwrap_or("")
-                .trim_matches('"')
-                .to_ascii_lowercase();
-            if key.is_empty() {
-                continue;
-            }
-            // Only consider secure-exec / agentos style crate names, and skip
-            // false positives like "tokio" containing none of the markers.
-            for marker in banned_dep_markers {
-                if key.contains(marker) {
-                    violations.push(format!(
-                        "{}: depends on banned crate `{}`",
-                        manifest
-                            .strip_prefix(&root)
-                            .unwrap_or(&manifest)
-                            .to_string_lossy(),
-                        key
-                    ));
-                }
-            }
-        }
-    }
-
-    assert!(
-        violations.is_empty(),
-        "\n\nsecure-exec crates must not depend on agent/acp/session crates \
-(Agent OS owns those). Offending dependencies:\n\n{}\n",
-        violations.join("\n")
-    );
-}
diff --git a/crates/sidecar/tests/bidirectional_frames.rs b/crates/sidecar/tests/bidirectional_frames.rs
deleted file mode 100644
index 0f82f08f7..000000000
--- a/crates/sidecar/tests/bidirectional_frames.rs
+++ /dev/null
@@ -1,172 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{
-    GuestRuntimeKind, HostCallbackRequest, HostCallbackResultResponse, OwnershipScope,
-    SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload,
-};
-use serde_json::json;
-use support::{
-    authenticate_wire, create_vm_wire, new_sidecar, open_session_wire, temp_dir, wire_vm,
-};
-
-const SIDECAR_CALLBACK_LIMIT: usize = 10_000;
-
-fn host_callback(index: usize) -> SidecarRequestPayload {
-    SidecarRequestPayload::HostCallbackRequest(HostCallbackRequest {
-        invocation_id: format!("invoke-{index}"),
-        callback_key: "toolkit:tool".to_string(),
-        input: json!({ "prompt": "ping", "index": index }).to_string(),
-        timeout_ms: 1_000,
-    })
-}
-
-fn host_callback_response(index: usize) -> SidecarResponsePayload {
-    SidecarResponsePayload::HostCallbackResultResponse(HostCallbackResultResponse {
-        invocation_id: format!("invoke-{index}"),
-        result: Some(json!({ "ok": true }).to_string()),
-        error: None,
-    })
-}
-
-fn new_vm_scope(
-    name: &str,
-) -> (
-    secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    OwnershipScope,
-) {
-    let mut sidecar = new_sidecar(name);
-    let connection_id = authenticate_wire(&mut sidecar, "client-hint");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &temp_dir(&format!("{name}-vm")),
-    );
-    (sidecar, wire_vm(&connection_id, &session_id, &vm_id))
-}
-
-#[test]
-fn native_sidecar_tracks_sidecar_initiated_requests_and_responses() {
-    let (mut sidecar, ownership) = new_vm_scope("bidirectional-frames");
-
-    let request_id = sidecar
-        .queue_wire_sidecar_request(ownership.clone(), host_callback(1))
-        .expect("queue wire sidecar request");
-    assert_eq!(request_id, -1);
-
-    let outbound = sidecar
-        .pop_wire_sidecar_request()
-        .expect("pop wire sidecar request")
-        .expect("pending outbound request");
-    assert_eq!(outbound.request_id, -1);
-
-    sidecar
-        .accept_wire_sidecar_response(SidecarResponseFrame {
-            schema: secure_exec_sidecar::wire::protocol_schema(),
-            request_id: outbound.request_id,
-            ownership: outbound.ownership.clone(),
-            payload: host_callback_response(1),
-        })
-        .expect("accept wire sidecar response");
-
-    let completed = sidecar
-        .take_wire_sidecar_response(outbound.request_id)
-        .expect("take wire sidecar response")
-        .expect("completed sidecar response");
-    assert_eq!(completed.request_id, -1);
-    assert!(matches!(
-        completed.payload,
-        SidecarResponsePayload::HostCallbackResultResponse(_)
-    ));
-}
-
-#[test]
-fn native_sidecar_bounds_undrained_outbound_sidecar_requests() {
-    let (mut sidecar, ownership) = new_vm_scope("bidirectional-outbound-bound");
-
-    for index in 0..SIDECAR_CALLBACK_LIMIT {
-        sidecar
-            .queue_wire_sidecar_request(ownership.clone(), host_callback(index))
-            .expect("queue wire sidecar request within outbound limit");
-    }
-
-    let error = sidecar
-        .queue_wire_sidecar_request(ownership, host_callback(SIDECAR_CALLBACK_LIMIT))
-        .expect_err("undrained outbound queue should be bounded");
-    assert!(
-        error
-            .to_string()
-            .contains("outbound sidecar request queue exceeded"),
-        "unexpected outbound queue error: {error}"
-    );
-}
-
-#[test]
-fn native_sidecar_bounds_popped_unanswered_sidecar_requests() {
-    let (mut sidecar, ownership) = new_vm_scope("bidirectional-pending-bound");
-
-    for index in 0..SIDECAR_CALLBACK_LIMIT {
-        sidecar
-            .queue_wire_sidecar_request(ownership.clone(), host_callback(index))
-            .expect("queue wire sidecar request within pending limit");
-        sidecar
-            .pop_wire_sidecar_request()
-            .expect("pop wire sidecar request")
-            .expect("pop queued sidecar request");
-    }
-
-    let error = sidecar
-        .queue_wire_sidecar_request(ownership, host_callback(SIDECAR_CALLBACK_LIMIT))
-        .expect_err("pending response tracker should be bounded");
-    assert!(
-        error
-            .to_string()
-            .contains("sidecar response tracker exceeded"),
-        "unexpected pending tracker error: {error}"
-    );
-}
-
-#[test]
-fn native_sidecar_bounds_completed_sidecar_responses() {
-    let (mut sidecar, ownership) = new_vm_scope("bidirectional-completed-bound");
-    let mut latest_request_id = 0;
-
-    for index in 0..=SIDECAR_CALLBACK_LIMIT {
-        let request_id = sidecar
-            .queue_wire_sidecar_request(ownership.clone(), host_callback(index))
-            .expect("queue wire sidecar request");
-        let outbound = sidecar
-            .pop_wire_sidecar_request()
-            .expect("pop wire sidecar request")
-            .expect("pop queued sidecar request");
-        assert_eq!(outbound.request_id, request_id);
-        sidecar
-            .accept_wire_sidecar_response(SidecarResponseFrame {
-                schema: secure_exec_sidecar::wire::protocol_schema(),
-                request_id,
-                ownership: ownership.clone(),
-                payload: host_callback_response(index),
-            })
-            .expect("accept wire sidecar response");
-        latest_request_id = request_id;
-    }
-
-    assert!(
-        sidecar
-            .take_wire_sidecar_response(-1)
-            .expect("take evicted wire sidecar response")
-            .is_none(),
-        "oldest completed response should be evicted"
-    );
-    assert_eq!(
-        sidecar
-            .take_wire_sidecar_response(latest_request_id)
-            .expect("take latest wire sidecar response")
-            .expect("latest completed response should remain")
-            .request_id,
-        latest_request_id
-    );
-}
diff --git a/crates/sidecar/tests/bridge.rs b/crates/sidecar/tests/bridge.rs
deleted file mode 100644
index 254d93935..000000000
--- a/crates/sidecar/tests/bridge.rs
+++ /dev/null
@@ -1,166 +0,0 @@
-#[path = "../../bridge/tests/support.rs"]
-mod bridge_support;
-
-use bridge_support::RecordingBridge;
-use secure_exec_bridge::{
-    BridgeTypes, ClockRequest, CommandPermissionRequest, CreateJavascriptContextRequest,
-    DiagnosticRecord, EnvironmentAccess, EnvironmentPermissionRequest, FilesystemAccess,
-    FilesystemPermissionRequest, FilesystemSnapshot, FlushFilesystemStateRequest,
-    LifecycleEventRecord, LifecycleState, LoadFilesystemStateRequest, LogLevel, LogRecord,
-    NetworkAccess, NetworkPermissionRequest, PathRequest, PollExecutionEventRequest,
-    ReadFileRequest, StructuredEventRecord, WriteFileRequest,
-};
-use secure_exec_sidecar::NativeSidecarBridge;
-use std::collections::BTreeMap;
-use std::fmt::Debug;
-
-fn assert_native_sidecar_bridge<B>(bridge: &mut B)
-where
-    B: NativeSidecarBridge,
-    <B as BridgeTypes>::Error: Debug,
-{
-    bridge
-        .write_file(WriteFileRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace/config.json"),
-            contents: br#"{"ok":true}"#.to_vec(),
-        })
-        .expect("write file");
-    assert!(bridge
-        .exists(PathRequest {
-            vm_id: String::from("vm-1"),
-            path: String::from("/workspace/config.json"),
-        })
-        .expect("exists"));
-    assert_eq!(
-        bridge
-            .read_file(ReadFileRequest {
-                vm_id: String::from("vm-1"),
-                path: String::from("/workspace/config.json"),
-            })
-            .expect("read file"),
-        br#"{"ok":true}"#.to_vec()
-    );
-
-    assert_eq!(
-        bridge
-            .check_filesystem_access(FilesystemPermissionRequest {
-                vm_id: String::from("vm-1"),
-                path: String::from("/workspace/config.json"),
-                access: FilesystemAccess::Read,
-            })
-            .expect("filesystem permission"),
-        secure_exec_bridge::PermissionDecision::allow()
-    );
-    assert_eq!(
-        bridge
-            .check_network_access(NetworkPermissionRequest {
-                vm_id: String::from("vm-1"),
-                access: NetworkAccess::Fetch,
-                resource: String::from("https://example.test"),
-            })
-            .expect("network permission"),
-        secure_exec_bridge::PermissionDecision::allow()
-    );
-    assert_eq!(
-        bridge
-            .check_command_execution(CommandPermissionRequest {
-                vm_id: String::from("vm-1"),
-                command: String::from("node"),
-                args: vec![String::from("--version")],
-                cwd: None,
-                env: BTreeMap::new(),
-            })
-            .expect("command permission"),
-        secure_exec_bridge::PermissionDecision::allow()
-    );
-    assert_eq!(
-        bridge
-            .check_environment_access(EnvironmentPermissionRequest {
-                vm_id: String::from("vm-1"),
-                access: EnvironmentAccess::Read,
-                key: String::from("PATH"),
-                value: None,
-            })
-            .expect("env permission"),
-        secure_exec_bridge::PermissionDecision::allow()
-    );
-
-    bridge
-        .flush_filesystem_state(FlushFilesystemStateRequest {
-            vm_id: String::from("vm-1"),
-            snapshot: FilesystemSnapshot {
-                format: String::from("tar"),
-                bytes: vec![1, 2, 3],
-            },
-        })
-        .expect("flush state");
-    assert_eq!(
-        bridge
-            .load_filesystem_state(LoadFilesystemStateRequest {
-                vm_id: String::from("vm-1"),
-            })
-            .expect("load state")
-            .expect("snapshot"),
-        FilesystemSnapshot {
-            format: String::from("tar"),
-            bytes: vec![1, 2, 3],
-        }
-    );
-    assert_eq!(
-        bridge
-            .wall_clock(ClockRequest {
-                vm_id: String::from("vm-1"),
-            })
-            .expect("wall clock"),
-        std::time::SystemTime::UNIX_EPOCH + std::time::Duration::from_secs(1_710_000_000)
-    );
-    bridge
-        .emit_log(LogRecord {
-            vm_id: String::from("vm-1"),
-            level: LogLevel::Info,
-            message: String::from("native sidecar ready"),
-        })
-        .expect("emit log");
-    bridge
-        .emit_diagnostic(DiagnosticRecord {
-            vm_id: String::from("vm-1"),
-            message: String::from("snapshot flushed"),
-            fields: BTreeMap::new(),
-        })
-        .expect("emit diagnostic");
-    bridge
-        .emit_structured_event(StructuredEventRecord {
-            vm_id: String::from("vm-1"),
-            name: String::from("vm.created"),
-            fields: BTreeMap::new(),
-        })
-        .expect("emit structured event");
-    bridge
-        .emit_lifecycle(LifecycleEventRecord {
-            vm_id: String::from("vm-1"),
-            state: LifecycleState::Ready,
-            detail: None,
-        })
-        .expect("emit lifecycle");
-
-    let context = bridge
-        .create_javascript_context(CreateJavascriptContextRequest {
-            vm_id: String::from("vm-1"),
-            bootstrap_module: None,
-        })
-        .expect("create context");
-    assert!(context.context_id.starts_with("js-context-"));
-    assert!(bridge
-        .poll_execution_event(PollExecutionEventRequest {
-            vm_id: String::from("vm-1"),
-        })
-        .expect("poll event")
-        .is_none());
-}
-
-#[test]
-fn sidecar_crate_compiles_against_composed_host_bridge() {
-    let mut bridge = RecordingBridge::default();
-    assert_native_sidecar_bridge(&mut bridge);
-}
diff --git a/crates/sidecar/tests/builtin_completeness.rs b/crates/sidecar/tests/builtin_completeness.rs
deleted file mode 100644
index 3268d7166..000000000
--- a/crates/sidecar/tests/builtin_completeness.rs
+++ /dev/null
@@ -1,528 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{EventPayload, GuestRuntimeKind, StreamChannel};
-use serde_json::Value;
-use std::collections::HashMap;
-use std::fmt::Write as _;
-use std::path::Path;
-use std::time::{Duration, Instant};
-use support::{
-    authenticate_wire, create_vm_wire_with_metadata, execute_wire, new_sidecar, open_session_wire,
-    temp_dir, wire_session, wire_vm, write_fixture,
-};
-
-#[derive(Clone, Copy, Debug, Eq, PartialEq)]
-enum BuiltinStatus {
-    Polyfilled,
-    KernelBacked,
-    Denied,
-    StubOk,
-}
-
-#[derive(Clone, Copy, Debug)]
-struct BuiltinExpectation {
-    name: &'static str,
-    status: BuiltinStatus,
-}
-
-const BUILTIN_EXPECTATIONS: &[BuiltinExpectation] = &[
-    BuiltinExpectation {
-        name: "fs",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "fs/promises",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "path",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "path/posix",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "path/win32",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "os",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "crypto",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "http",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "https",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "http2",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "net",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "dgram",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "dns",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "dns/promises",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "tls",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "child_process",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "stream",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "events",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "buffer",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "util",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "util/types",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "url",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "querystring",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "sqlite",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "string_decoder",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "punycode",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "zlib",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "assert",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "constants",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "console",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "readline",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "tty",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "perf_hooks",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "timers",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "timers/promises",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "stream/promises",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "stream/consumers",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "stream/web",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "module",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "process",
-        status: BuiltinStatus::KernelBacked,
-    },
-    BuiltinExpectation {
-        name: "vm",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "worker_threads",
-        status: BuiltinStatus::StubOk,
-    },
-    BuiltinExpectation {
-        name: "inspector",
-        status: BuiltinStatus::Denied,
-    },
-    BuiltinExpectation {
-        name: "v8",
-        status: BuiltinStatus::Polyfilled,
-    },
-    BuiltinExpectation {
-        name: "cluster",
-        status: BuiltinStatus::Denied,
-    },
-    BuiltinExpectation {
-        name: "async_hooks",
-        status: BuiltinStatus::StubOk,
-    },
-    BuiltinExpectation {
-        name: "diagnostics_channel",
-        status: BuiltinStatus::StubOk,
-    },
-    BuiltinExpectation {
-        name: "wasi",
-        status: BuiltinStatus::Denied,
-    },
-    BuiltinExpectation {
-        name: "trace_events",
-        status: BuiltinStatus::Denied,
-    },
-    BuiltinExpectation {
-        name: "repl",
-        status: BuiltinStatus::Denied,
-    },
-    BuiltinExpectation {
-        name: "domain",
-        status: BuiltinStatus::Denied,
-    },
-    BuiltinExpectation {
-        name: "sys",
-        status: BuiltinStatus::Polyfilled,
-    },
-];
-
-const EXPECTED_RUNTIME_BUILTINS: &[&str] = &[
-    "assert",
-    "async_hooks",
-    "buffer",
-    "child_process",
-    "cluster",
-    "console",
-    "constants",
-    "crypto",
-    "dgram",
-    "diagnostics_channel",
-    "dns",
-    "dns/promises",
-    "domain",
-    "events",
-    "fs",
-    "fs/promises",
-    "http",
-    "http2",
-    "https",
-    "inspector",
-    "module",
-    "net",
-    "os",
-    "path",
-    "path/posix",
-    "path/win32",
-    "perf_hooks",
-    "process",
-    "punycode",
-    "querystring",
-    "readline",
-    "repl",
-    "sqlite",
-    "stream",
-    "stream/consumers",
-    "stream/promises",
-    "stream/web",
-    "string_decoder",
-    "sys",
-    "timers",
-    "timers/promises",
-    "tls",
-    "trace_events",
-    "tty",
-    "url",
-    "util",
-    "util/types",
-    "v8",
-    "vm",
-    "wasi",
-    "worker_threads",
-    "zlib",
-];
-
-const COMPLETENESS_SCRIPT: &str = r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const target = process.argv[2];
-if (target === "--inventory") {
-  const builtinModules = require("module").builtinModules.slice().sort();
-  console.log(JSON.stringify({ builtinModules }));
-  process.exit(0);
-}
-
-try {
-  const mod = require(target);
-  const modType = typeof mod;
-  const ownKeys =
-    mod != null && (modType === "object" || modType === "function")
-      ? Array.from(
-          new Set([
-            ...Object.keys(mod),
-            ...Object.getOwnPropertyNames(mod),
-          ]),
-        ).sort()
-      : [];
-
-  console.log(
-    JSON.stringify({
-      target,
-      ok: true,
-      type: modType,
-      isNull: mod === null,
-      ownKeyCount: ownKeys.length,
-      emptyObject: modType === "object" && mod !== null && ownKeys.length === 0,
-    }),
-  );
-} catch (error) {
-  console.log(
-    JSON.stringify({
-      target,
-      ok: false,
-      code: error?.code ?? null,
-      name: error?.name ?? null,
-      message: String(error?.message ?? error),
-    }),
-  );
-}
-"#;
-
-const PROBE_OUTPUT_BYTE_LIMIT: usize = 1024 * 1024;
-
-fn allowed_builtins_json() -> String {
-    let allowed = BUILTIN_EXPECTATIONS
-        .iter()
-        .filter(|builtin| builtin.status != BuiltinStatus::Denied)
-        .map(|builtin| builtin.name)
-        .collect::<Vec<_>>();
-    serde_json::to_string(&allowed).expect("serialize allowed builtin list")
-}
-
-fn run_guest_probe(entrypoint: &Path, arg: &str) -> Value {
-    let mut sidecar = new_sidecar(&format!(
-        "builtin-completeness-{}",
-        arg.chars()
-            .map(|ch| if ch.is_ascii_alphanumeric() { ch } else { '-' })
-            .collect::<String>()
-    ));
-    let connection_id = authenticate_wire(&mut sidecar, &format!("conn-{arg}"));
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let cwd = entrypoint.parent().expect("entrypoint parent");
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        cwd,
-        HashMap::from([(
-            String::from("env.AGENTOS_ALLOWED_NODE_BUILTINS"),
-            allowed_builtins_json(),
-        )]),
-    );
-
-    let process_id = format!(
-        "probe-{}",
-        arg.chars()
-            .map(|ch| if ch.is_ascii_alphanumeric() { ch } else { '-' })
-            .collect::<String>()
-    );
-
-    execute_wire(
-        &mut sidecar,
-        100,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        &process_id,
-        GuestRuntimeKind::JavaScript,
-        entrypoint,
-        vec![arg.to_owned()],
-    );
-
-    let ownership = wire_session(&connection_id, &session_id);
-    let deadline = Instant::now() + Duration::from_secs(5);
-    let mut stdout = String::new();
-    let mut stderr = String::new();
-    let mut exit = None;
-
-    loop {
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll sidecar event");
-        if let Some(event) = event {
-            assert_eq!(
-                event.ownership,
-                wire_vm(&connection_id, &session_id, &vm_id)
-            );
-
-            match event.payload {
-                EventPayload::ProcessOutputEvent(output) if output.process_id == process_id => {
-                    match output.channel {
-                        StreamChannel::Stdout => {
-                            append_probe_output(&mut stdout, &output.chunk, arg, "stdout")
-                        }
-                        StreamChannel::Stderr => {
-                            append_probe_output(&mut stderr, &output.chunk, arg, "stderr")
-                        }
-                    }
-                }
-                EventPayload::ProcessExitedEvent(exited) if exited.process_id == process_id => {
-                    exit = Some((exited.exit_code, Instant::now()));
-                }
-                _ => {}
-            }
-        }
-
-        if let Some((exit_code, seen_at)) = exit {
-            if Instant::now().duration_since(seen_at) >= Duration::from_millis(200) {
-                assert_eq!(
-                    exit_code, 0,
-                    "guest probe failed for {arg}\nstdout:\n{stdout}\nstderr:\n{stderr}"
-                );
-                assert!(
-                    stderr.trim().is_empty(),
-                    "guest probe stderr for {arg}:\n{stderr}"
-                );
-                return serde_json::from_str(stdout.trim()).expect("parse builtin probe JSON");
-            }
-        }
-
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for process events for builtin {arg}\nstdout:\n{stdout}\nstderr:\n{stderr}"
-        );
-    }
-}
-
-fn append_probe_output(buffer: &mut String, chunk: &[u8], arg: &str, channel: &str) {
-    let text = String::from_utf8_lossy(chunk);
-    assert!(
-        buffer.len().saturating_add(text.len()) <= PROBE_OUTPUT_BYTE_LIMIT,
-        "builtin probe {arg} exceeded {PROBE_OUTPUT_BYTE_LIMIT} bytes on {channel}"
-    );
-    buffer.push_str(&text);
-}
-
-#[test]
-fn every_guest_builtin_is_classified_and_never_silently_missing() {
-    let cwd = temp_dir("builtin-completeness");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(&entrypoint, COMPLETENESS_SCRIPT);
-
-    let inventory = run_guest_probe(&entrypoint, "--inventory");
-    let actual_inventory = inventory["builtinModules"]
-        .as_array()
-        .expect("builtinModules array")
-        .iter()
-        .map(|value| value.as_str().expect("builtin module string"))
-        .collect::<Vec<_>>();
-    assert_eq!(
-        actual_inventory, EXPECTED_RUNTIME_BUILTINS,
-        "guest builtin inventory changed; classify the added/removed modules in builtin_completeness.rs"
-    );
-
-    let mut failures = Vec::new();
-
-    for builtin in BUILTIN_EXPECTATIONS {
-        let result = run_guest_probe(&entrypoint, builtin.name);
-
-        match builtin.status {
-            BuiltinStatus::Denied => {
-                let code = result["code"].as_str();
-                if result["ok"].as_bool() != Some(false) || code != Some("ERR_ACCESS_DENIED") {
-                    failures.push(format!(
-                        "{name}: expected ERR_ACCESS_DENIED, got {result}",
-                        name = builtin.name
-                    ));
-                }
-            }
-            BuiltinStatus::Polyfilled | BuiltinStatus::KernelBacked | BuiltinStatus::StubOk => {
-                let ok = result["ok"].as_bool() == Some(true);
-                let type_ok = matches!(result["type"].as_str(), Some("object" | "function"));
-                let is_null = result["isNull"].as_bool() == Some(true);
-                let empty_object = result["emptyObject"].as_bool() == Some(true);
-                if !ok {
-                    failures.push(format!(
-                        "{name}: expected loaded module, got {result}",
-                        name = builtin.name
-                    ));
-                } else if !type_ok {
-                    failures.push(format!(
-                        "{name}: expected typeof object/function, got {result}",
-                        name = builtin.name
-                    ));
-                } else if is_null {
-                    failures.push(format!(
-                        "{name}: module resolved to null, got {result}",
-                        name = builtin.name
-                    ));
-                } else if empty_object {
-                    failures.push(format!(
-                        "{name}: module resolved to an empty object stub, got {result}",
-                        name = builtin.name
-                    ));
-                }
-            }
-        }
-    }
-
-    if !failures.is_empty() {
-        let mut message = String::from("builtin completeness failures:\n");
-        for failure in failures {
-            let _ = writeln!(&mut message, "- {failure}");
-        }
-        panic!("{message}");
-    }
-}
diff --git a/crates/sidecar/tests/builtin_conformance.rs b/crates/sidecar/tests/builtin_conformance.rs
deleted file mode 100644
index 92dd2692a..000000000
--- a/crates/sidecar/tests/builtin_conformance.rs
+++ /dev/null
@@ -1,4301 +0,0 @@
-mod support;
-
-use hickory_resolver::proto::op::{Message, Query};
-use hickory_resolver::proto::rr::domain::Name;
-use hickory_resolver::proto::rr::rdata::{A, AAAA, CAA, CNAME, MX, NAPTR, NS, PTR, SOA, SRV, TXT};
-use hickory_resolver::proto::rr::{RData, Record, RecordType};
-use secure_exec_sidecar::wire::{
-    CloseStdinRequest, CreateVmRequest, DisposeReason, DisposeVmRequest, EventPayload,
-    GuestRuntimeKind, PatternPermissionScope, PermissionMode, PermissionsPolicy, RequestPayload,
-    ResponsePayload, RootFilesystemDescriptor, RootFilesystemMode, StreamChannel,
-    WriteStdinRequest,
-};
-use serde_json::{json, Value};
-use std::collections::HashMap;
-use std::io::{Read, Write};
-use std::net::{Shutdown, SocketAddr, TcpListener, TcpStream, UdpSocket};
-use std::path::Path;
-use std::process::{Command, Stdio};
-use std::sync::{
-    atomic::{AtomicBool, Ordering},
-    Arc,
-};
-use std::thread;
-use std::time::{Duration, Instant};
-use support::{
-    assert_node_available, authenticate_wire, dispose_vm_and_close_session_wire, execute_wire,
-    new_sidecar, open_session_wire, temp_dir, wire_permissions_allow_all, wire_request,
-    wire_session, wire_vm, write_fixture,
-};
-
-// Timing-sensitive assertions flake under the CPU contention of a parallel test
-// run (see CLAUDE.md > Testing). Gated off by default; the nightly timing lane
-// sets SECURE_EXEC_RUN_TIMING_TESTS=1 to enforce them.
-fn run_timing_sensitive_tests() -> bool {
-    std::env::var_os("SECURE_EXEC_RUN_TIMING_TESTS").is_some()
-}
-
-const ALLOWED_NODE_BUILTINS: &[&str] = &[
-    "assert",
-    "buffer",
-    "child_process",
-    "console",
-    "constants",
-    "crypto",
-    "events",
-    "fs",
-    "module",
-    "os",
-    "path",
-    "perf_hooks",
-    "punycode",
-    "querystring",
-    "stream",
-    "string_decoder",
-    "timers",
-    "tty",
-    "url",
-    "util",
-    "zlib",
-];
-
-const BUILTIN_CONFORMANCE_CASES: &[&str] = &[
-    "fs",
-    "console",
-    "child_process",
-    "path",
-    "crypto",
-    "dns",
-    "events",
-    "stream",
-    "buffer",
-    "url",
-    "stdlib_polyfill",
-    "extended_builtin_polyfills",
-];
-
-const PROBE_OUTPUT_BYTE_LIMIT: usize = 1024 * 1024;
-
-fn run_host_probe(cwd: &Path, entrypoint: &Path) -> Value {
-    run_host_probe_with_env(cwd, entrypoint, &[])
-}
-
-fn run_host_probe_with_env(cwd: &Path, entrypoint: &Path, env: &[(&str, &str)]) -> Value {
-    let mut command = Command::new("node");
-    command.arg(entrypoint).current_dir(cwd);
-    for (key, value) in env {
-        command.env(key, value);
-    }
-
-    let mut child = command
-        .stdout(Stdio::piped())
-        .stderr(Stdio::piped())
-        .spawn()
-        .expect("spawn host node probe");
-    let stdout = child.stdout.take().expect("host probe stdout pipe");
-    let stderr = child.stderr.take().expect("host probe stderr pipe");
-    let stdout_reader = thread::spawn(move || read_probe_pipe(stdout, "stdout"));
-    let stderr_reader = thread::spawn(move || read_probe_pipe(stderr, "stderr"));
-    let status = child.wait().expect("wait host node probe");
-    let stdout = stdout_reader
-        .join()
-        .expect("join host probe stdout reader")
-        .expect("read bounded host probe stdout");
-    let stderr = stderr_reader
-        .join()
-        .expect("join host probe stderr reader")
-        .expect("read bounded host probe stderr");
-
-    assert!(
-        status.success(),
-        "host probe failed with status {:?}\nstdout:\n{}\nstderr:\n{}",
-        status.code(),
-        String::from_utf8_lossy(&stdout),
-        String::from_utf8_lossy(&stderr)
-    );
-
-    serde_json::from_slice(&stdout).expect("parse host probe JSON")
-}
-
-fn read_probe_pipe(mut pipe: impl Read, channel: &str) -> Result<Vec<u8>, String> {
-    let mut output = Vec::new();
-    let mut chunk = [0_u8; 8192];
-    loop {
-        let read = pipe
-            .read(&mut chunk)
-            .map_err(|err| format!("read host probe {channel}: {err}"))?;
-        if read == 0 {
-            return Ok(output);
-        }
-        if output.len().saturating_add(read) > PROBE_OUTPUT_BYTE_LIMIT {
-            return Err(format!(
-                "host probe exceeded {PROBE_OUTPUT_BYTE_LIMIT} bytes on {channel}"
-            ));
-        }
-        output.extend_from_slice(&chunk[..read]);
-    }
-}
-
-fn run_guest_probe(case_name: &str, cwd: &Path, entrypoint: &Path) -> Value {
-    run_guest_probe_with_config(
-        case_name,
-        cwd,
-        entrypoint,
-        HashMap::new(),
-        wire_permissions_allow_all(),
-        ALLOWED_NODE_BUILTINS,
-    )
-}
-
-#[allow(clippy::too_many_arguments)]
-fn create_vm_with_metadata_and_permissions(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: i64,
-    connection_id: &str,
-    session_id: &str,
-    runtime: GuestRuntimeKind,
-    cwd: &Path,
-    mut metadata: HashMap<String, String>,
-    permissions: PermissionsPolicy,
-) -> String {
-    metadata
-        .entry(String::from("cwd"))
-        .or_insert_with(|| cwd.to_string_lossy().into_owned());
-
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_session(connection_id, session_id),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                runtime,
-                metadata,
-                RootFilesystemDescriptor {
-                    mode: RootFilesystemMode::Ephemeral,
-                    disable_default_base_layer: false,
-                    lowers: Vec::new(),
-                    bootstrap_entries: Vec::new(),
-                },
-                Some(permissions),
-            )),
-        ))
-        .expect("create sidecar VM through wire");
-
-    match result.response.payload {
-        ResponsePayload::VmCreatedResponse(response) => response.vm_id,
-        other => panic!("unexpected wire vm create response: {other:?}"),
-    }
-}
-
-fn collect_builtin_process_output(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-) -> (String, String, i32) {
-    collect_builtin_process_output_with_timeout(
-        sidecar,
-        connection_id,
-        session_id,
-        vm_id,
-        process_id,
-        Duration::from_secs(10),
-    )
-}
-
-fn collect_builtin_process_output_with_timeout(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    timeout: Duration,
-) -> (String, String, i32) {
-    let ownership = wire_session(connection_id, session_id);
-    let deadline = Instant::now() + timeout;
-    let mut stdout = String::new();
-    let mut stderr = String::new();
-    let mut exit = None;
-
-    loop {
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll builtin conformance wire event");
-        if let Some(event) = event {
-            assert_eq!(event.ownership, wire_vm(connection_id, session_id, vm_id));
-
-            match event.payload {
-                EventPayload::ProcessOutputEvent(output) if output.process_id == process_id => {
-                    match output.channel {
-                        StreamChannel::Stdout => {
-                            append_probe_output(&mut stdout, &output.chunk, process_id, "stdout")
-                        }
-                        StreamChannel::Stderr => {
-                            append_probe_output(&mut stderr, &output.chunk, process_id, "stderr")
-                        }
-                    }
-                }
-                EventPayload::ProcessExitedEvent(exited) if exited.process_id == process_id => {
-                    exit = Some((exited.exit_code, Instant::now()));
-                }
-                _ => {}
-            }
-        }
-
-        if let Some((exit_code, seen_at)) = exit {
-            if Instant::now().duration_since(seen_at) >= Duration::from_millis(200) {
-                return (stdout, stderr, exit_code);
-            }
-        }
-
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for builtin conformance process {process_id}\nstdout:\n{stdout}\nstderr:\n{stderr}"
-        );
-    }
-}
-
-fn append_probe_output(buffer: &mut String, chunk: &[u8], process_id: &str, channel: &str) {
-    let text = String::from_utf8_lossy(chunk);
-    assert!(
-        buffer.len().saturating_add(text.len()) <= PROBE_OUTPUT_BYTE_LIMIT,
-        "builtin conformance process {process_id} exceeded {PROBE_OUTPUT_BYTE_LIMIT} bytes on {channel}"
-    );
-    buffer.push_str(&text);
-}
-
-fn run_guest_probe_with_config(
-    case_name: &str,
-    cwd: &Path,
-    entrypoint: &Path,
-    mut metadata: HashMap<String, String>,
-    permissions: PermissionsPolicy,
-    allowed_builtins: &[&str],
-) -> Value {
-    let mut sidecar = new_sidecar(case_name);
-    let connection_id = authenticate_wire(&mut sidecar, &format!("conn-{case_name}"));
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let allowed_builtins =
-        serde_json::to_string(allowed_builtins).expect("serialize builtin allowlist");
-    metadata.insert(
-        String::from("env.AGENTOS_ALLOWED_NODE_BUILTINS"),
-        allowed_builtins,
-    );
-    let vm_id = create_vm_with_metadata_and_permissions(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        cwd,
-        metadata,
-        permissions,
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        &format!("proc-{case_name}"),
-        GuestRuntimeKind::JavaScript,
-        entrypoint,
-        Vec::new(),
-    );
-
-    let (stdout, stderr, exit_code) = collect_builtin_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        &format!("proc-{case_name}"),
-    );
-    dispose_vm_and_close_session_wire(&mut sidecar, &connection_id, &session_id, &vm_id);
-
-    assert_eq!(
-        exit_code, 0,
-        "guest probe failed for {case_name}\nstdout:\n{stdout}\nstderr:\n{stderr}"
-    );
-    assert!(
-        stderr.trim().is_empty(),
-        "guest probe stderr for {case_name}:\n{stderr}"
-    );
-
-    serde_json::from_str(stdout.trim()).expect("parse guest probe JSON")
-}
-
-#[allow(clippy::too_many_arguments)]
-fn run_guest_probe_in_existing_session(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id_base: i64,
-    connection_id: &str,
-    session_id: &str,
-    case_name: &str,
-    cwd: &Path,
-    entrypoint: &Path,
-    mut metadata: HashMap<String, String>,
-) -> Value {
-    let allowed_builtins =
-        serde_json::to_string(ALLOWED_NODE_BUILTINS).expect("serialize builtin allowlist");
-    metadata.insert(
-        String::from("env.AGENTOS_ALLOWED_NODE_BUILTINS"),
-        allowed_builtins,
-    );
-
-    let vm_id = create_vm_with_metadata_and_permissions(
-        sidecar,
-        request_id_base,
-        connection_id,
-        session_id,
-        GuestRuntimeKind::JavaScript,
-        cwd,
-        metadata,
-        wire_permissions_allow_all(),
-    );
-
-    let process_id = format!("proc-{case_name}");
-    execute_wire(
-        sidecar,
-        request_id_base + 1,
-        connection_id,
-        session_id,
-        &vm_id,
-        &process_id,
-        GuestRuntimeKind::JavaScript,
-        entrypoint,
-        Vec::new(),
-    );
-
-    let (stdout, stderr, exit_code) =
-        collect_builtin_process_output(sidecar, connection_id, session_id, &vm_id, &process_id);
-
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id_base + 2,
-            wire_vm(connection_id, session_id, &vm_id),
-            RequestPayload::DisposeVmRequest(DisposeVmRequest {
-                reason: DisposeReason::Requested,
-            }),
-        ))
-        .expect("dispose sidecar VM through wire");
-
-    match result.response.payload {
-        ResponsePayload::VmDisposedResponse(response) => {
-            assert_eq!(response.vm_id, vm_id);
-        }
-        other => panic!("unexpected wire vm dispose response: {other:?}"),
-    }
-
-    assert_eq!(
-        exit_code, 0,
-        "guest probe failed for {case_name}\nstdout:\n{stdout}\nstderr:\n{stderr}"
-    );
-    assert!(
-        stderr.trim().is_empty(),
-        "guest probe stderr for {case_name}:\n{stderr}"
-    );
-
-    serde_json::from_str(stdout.trim()).expect("parse guest probe JSON")
-}
-
-fn assert_conformance(case_name: &str, script: &str) {
-    assert_node_available();
-
-    let cwd = temp_dir(&format!("builtin-conformance-{case_name}"));
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(&entrypoint, script);
-
-    let host = run_host_probe(&cwd, &entrypoint);
-    let guest = run_guest_probe(case_name, &cwd, &entrypoint);
-
-    assert_eq!(
-        guest,
-        host,
-        "guest V8 result diverged from host Node for {case_name}\nhost: {}\nguest: {}",
-        serde_json::to_string_pretty(&host).expect("pretty host JSON"),
-        serde_json::to_string_pretty(&guest).expect("pretty guest JSON")
-    );
-}
-
-fn run_isolated_builtin_conformance_test(test_name: &str) {
-    let current_exe = std::env::current_exe().expect("current test binary path");
-    let status = Command::new(&current_exe)
-        .arg("--exact")
-        .arg("__builtin_conformance_extra_test_runner")
-        .arg("--nocapture")
-        .env("AGENTOS_BUILTIN_CONFORMANCE_EXTRA_TEST", test_name)
-        .status()
-        .unwrap_or_else(|error| {
-            panic!("spawn builtin conformance extra runner for {test_name}: {error}")
-        });
-
-    assert!(
-        status.success(),
-        "builtin conformance extra test {test_name} failed with status {status}"
-    );
-}
-
-fn write_process_stdin(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: i64,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    chunk: &str,
-) {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_vm(connection_id, session_id, vm_id),
-            RequestPayload::WriteStdinRequest(WriteStdinRequest {
-                process_id: process_id.to_owned(),
-                chunk: chunk.as_bytes().to_vec(),
-            }),
-        ))
-        .expect("write builtin conformance stdin through wire");
-
-    match result.response.payload {
-        ResponsePayload::StdinWrittenResponse(response) => {
-            assert_eq!(response.process_id, process_id);
-            assert_eq!(response.accepted_bytes, chunk.len() as u64);
-        }
-        other => panic!("unexpected wire stdin-written response: {other:?}"),
-    }
-}
-
-fn close_process_stdin(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: i64,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-) {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_vm(connection_id, session_id, vm_id),
-            RequestPayload::CloseStdinRequest(CloseStdinRequest {
-                process_id: process_id.to_owned(),
-            }),
-        ))
-        .expect("close builtin conformance stdin through wire");
-
-    match result.response.payload {
-        ResponsePayload::StdinClosedResponse(response) => {
-            assert_eq!(response.process_id, process_id);
-        }
-        other => panic!("unexpected wire stdin-closed response: {other:?}"),
-    }
-}
-
-struct FixtureDnsServer {
-    addr: SocketAddr,
-    running: Arc<AtomicBool>,
-    thread: Option<thread::JoinHandle<()>>,
-}
-
-impl FixtureDnsServer {
-    fn start() -> Self {
-        let socket = UdpSocket::bind("127.0.0.1:0").expect("bind fixture DNS server");
-        socket
-            .set_read_timeout(Some(Duration::from_millis(100)))
-            .expect("set fixture DNS timeout");
-        let addr = socket.local_addr().expect("fixture DNS local addr");
-        let running = Arc::new(AtomicBool::new(true));
-        let thread_running = Arc::clone(&running);
-        let thread = thread::spawn(move || {
-            let mut buffer = [0_u8; 2048];
-            while thread_running.load(Ordering::SeqCst) {
-                let Ok((len, peer)) = socket.recv_from(&mut buffer) else {
-                    continue;
-                };
-                let Ok(request) = Message::from_vec(&buffer[..len]) else {
-                    continue;
-                };
-                let response = fixture_dns_response(&request);
-                let bytes = response.to_vec().expect("encode fixture DNS response");
-                let _ = socket.send_to(&bytes, peer);
-            }
-        });
-        Self {
-            addr,
-            running,
-            thread: Some(thread),
-        }
-    }
-}
-
-impl Drop for FixtureDnsServer {
-    fn drop(&mut self) {
-        self.running.store(false, Ordering::SeqCst);
-        if let Ok(socket) = UdpSocket::bind("127.0.0.1:0") {
-            let _ = socket.send_to(&[0], self.addr);
-        }
-        if let Some(thread) = self.thread.take() {
-            thread.join().expect("join fixture DNS thread");
-        }
-    }
-}
-
-fn fixture_dns_response(request: &Message) -> Message {
-    let mut response = Message::response(request.metadata.id, request.metadata.op_code);
-    response.metadata.authoritative = true;
-    response.metadata.recursion_available = true;
-    response.add_queries(request.queries.iter().cloned());
-    if let Some(query) = request.queries.first() {
-        response.add_answers(fixture_dns_answers(query));
-    }
-    response
-}
-
-fn fixture_dns_answers(query: &Query) -> Vec<Record> {
-    let name = query.name().to_ascii();
-    match (name.as_str(), query.query_type()) {
-        ("bundle.example.test.", RecordType::A) => vec![
-            fixture_dns_record("bundle.example.test.", RData::A(A::new(203, 0, 113, 10))),
-            fixture_dns_record("bundle.example.test.", RData::A(A::new(203, 0, 113, 11))),
-        ],
-        ("bundle.example.test.", RecordType::AAAA) => vec![
-            fixture_dns_record(
-                "bundle.example.test.",
-                RData::AAAA(AAAA::new(0x2001, 0x0db8, 0, 0, 0, 0, 0, 0x0010)),
-            ),
-            fixture_dns_record(
-                "bundle.example.test.",
-                RData::AAAA(AAAA::new(0x2001, 0x0db8, 0, 0, 0, 0, 0, 0x0011)),
-            ),
-        ],
-        ("bundle.example.test.", RecordType::MX) => vec![fixture_dns_record(
-            "bundle.example.test.",
-            RData::MX(MX::new(10, fixture_dns_name("mail.example.test."))),
-        )],
-        ("bundle.example.test.", RecordType::TXT) => vec![
-            fixture_dns_record(
-                "bundle.example.test.",
-                RData::TXT(TXT::new(vec![String::from("v=spf1"), String::from("-all")])),
-            ),
-            fixture_dns_record(
-                "bundle.example.test.",
-                RData::TXT(TXT::new(vec![String::from("secure-exec")])),
-            ),
-        ],
-        ("bundle.example.test.", RecordType::ANY) => vec![
-            fixture_dns_record("bundle.example.test.", RData::A(A::new(203, 0, 113, 10))),
-            fixture_dns_record("bundle.example.test.", RData::A(A::new(203, 0, 113, 11))),
-            fixture_dns_record(
-                "bundle.example.test.",
-                RData::AAAA(AAAA::new(0x2001, 0x0db8, 0, 0, 0, 0, 0, 0x0010)),
-            ),
-            fixture_dns_record(
-                "bundle.example.test.",
-                RData::AAAA(AAAA::new(0x2001, 0x0db8, 0, 0, 0, 0, 0, 0x0011)),
-            ),
-            fixture_dns_record(
-                "bundle.example.test.",
-                RData::MX(MX::new(10, fixture_dns_name("mail.example.test."))),
-            ),
-            fixture_dns_record(
-                "bundle.example.test.",
-                RData::TXT(TXT::new(vec![String::from("v=spf1"), String::from("-all")])),
-            ),
-        ],
-        ("alias.example.test.", RecordType::CNAME) => vec![fixture_dns_record(
-            "alias.example.test.",
-            RData::CNAME(CNAME(fixture_dns_name("bundle.example.test."))),
-        )],
-        ("ptr.example.test.", RecordType::PTR) => vec![fixture_dns_record(
-            "ptr.example.test.",
-            RData::PTR(PTR(fixture_dns_name("host.example.test."))),
-        )],
-        ("zone.example.test.", RecordType::NS) => vec![fixture_dns_record(
-            "zone.example.test.",
-            RData::NS(NS(fixture_dns_name("ns1.example.test."))),
-        )],
-        ("zone.example.test.", RecordType::SOA) => vec![fixture_dns_record(
-            "zone.example.test.",
-            RData::SOA(SOA::new(
-                fixture_dns_name("ns1.example.test."),
-                fixture_dns_name("hostmaster.example.test."),
-                2026041601,
-                3600,
-                600,
-                86400,
-                60,
-            )),
-        )],
-        ("_svc._tcp.example.test.", RecordType::SRV) => vec![fixture_dns_record(
-            "_svc._tcp.example.test.",
-            RData::SRV(SRV::new(
-                1,
-                5,
-                8443,
-                fixture_dns_name("svc-target.example.test."),
-            )),
-        )],
-        ("naptr.example.test.", RecordType::NAPTR) => vec![fixture_dns_record(
-            "naptr.example.test.",
-            RData::NAPTR(NAPTR::new(
-                10,
-                20,
-                b"s".to_vec().into_boxed_slice(),
-                b"SIP+D2U".to_vec().into_boxed_slice(),
-                b"!^.*$!sip:service@example.test!"
-                    .to_vec()
-                    .into_boxed_slice(),
-                fixture_dns_name("_sip._udp.example.test."),
-            )),
-        )],
-        ("caa.example.test.", RecordType::CAA) => vec![
-            fixture_dns_record(
-                "caa.example.test.",
-                RData::CAA(CAA::new_issue(
-                    false,
-                    Some(fixture_dns_name("letsencrypt.org.")),
-                    vec![],
-                )),
-            ),
-            fixture_dns_record(
-                "caa.example.test.",
-                RData::CAA(CAA::new_iodef(
-                    false,
-                    url::Url::parse("https://iodef.example.test/report")
-                        .expect("fixture CAA iodef URL"),
-                )),
-            ),
-        ],
-        _ => Vec::new(),
-    }
-}
-
-fn fixture_dns_record(name: &str, data: RData) -> Record {
-    Record::from_rdata(fixture_dns_name(name), 60, data)
-}
-
-fn fixture_dns_name(name: &str) -> Name {
-    name.parse().expect("valid fixture DNS name")
-}
-
-fn read_http_request(stream: &mut TcpStream) -> String {
-    let mut request = Vec::new();
-    let mut buffer = [0_u8; 1024];
-
-    loop {
-        let bytes_read = stream.read(&mut buffer).expect("read http request");
-        assert!(
-            bytes_read > 0,
-            "connection closed before full HTTP request arrived"
-        );
-        request.extend_from_slice(&buffer[..bytes_read]);
-        if request.windows(4).any(|window| window == b"\r\n\r\n") {
-            break;
-        }
-    }
-
-    String::from_utf8(request).expect("request utf8")
-}
-
-fn http_request_custom_agent_reuses_keepalive_socket_impl() {
-    assert_node_available();
-
-    let listener = TcpListener::bind("127.0.0.1:0").expect("bind host http listener");
-    let port = listener.local_addr().expect("listener addr").port();
-    let cwd = temp_dir("builtin-http-agent-keepalive");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        format!(
-            r#"
-import http from "node:http";
-
-const agent = new http.Agent({{
-  keepAlive: true,
-  maxSockets: 1,
-}});
-
-function request(path) {{
-  return new Promise((resolve, reject) => {{
-    const req = http.request({{
-      host: "127.0.0.1",
-      port: {port},
-      path,
-      method: "GET",
-      agent,
-    }}, (res) => {{
-      res.setEncoding("utf8");
-      let body = "";
-      res.on("data", (chunk) => {{
-        body += chunk;
-      }});
-      res.on("end", () => {{
-        resolve({{
-          body,
-          reusedSocket: req.reusedSocket,
-          socketLocalPort: req.socket?.localPort ?? null,
-          statusCode: res.statusCode ?? null,
-        }});
-      }});
-    }});
-    req.on("error", reject);
-    req.end();
-  }});
-}}
-
-const first = await request("/first");
-const second = await request("/second");
-await new Promise((resolve) => setTimeout(resolve, 0));
-
-const freeSockets = Object.values(agent.freeSockets).reduce(
-  (total, sockets) => total + sockets.length,
-  0,
-);
-
-console.log(JSON.stringify({{
-  first,
-  second,
-  freeSockets,
-  totalSocketCount: agent.totalSocketCount,
-}}));
-
-agent.destroy();
-"#,
-        ),
-    );
-
-    let case_name = "builtin-http-agent-keepalive";
-    let mut sidecar = new_sidecar(case_name);
-    let connection_id = authenticate_wire(&mut sidecar, &format!("conn-{case_name}"));
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let allowed_builtins = serde_json::to_string(&["http"]).expect("serialize builtin allowlist");
-    let guest_env = HashMap::from([
-        (
-            String::from("env.AGENTOS_ALLOWED_NODE_BUILTINS"),
-            allowed_builtins,
-        ),
-        (
-            String::from("env.AGENTOS_LOOPBACK_EXEMPT_PORTS"),
-            format!("[{port}]"),
-        ),
-    ]);
-    let vm_id = create_vm_with_metadata_and_permissions(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        guest_env,
-        wire_permissions_allow_all(),
-    );
-
-    let server = thread::spawn(move || {
-        listener
-            .set_nonblocking(true)
-            .expect("configure nonblocking listener");
-        let deadline = Instant::now() + Duration::from_secs(10);
-        let (mut stream, _) = loop {
-            match listener.accept() {
-                Ok(accepted) => break accepted,
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                    assert!(
-                        Instant::now() < deadline,
-                        "timed out waiting for guest keep-alive connection"
-                    );
-                    thread::sleep(Duration::from_millis(10));
-                }
-                Err(error) => panic!("accept keep-alive connection: {error}"),
-            }
-        };
-
-        stream
-            .set_read_timeout(Some(Duration::from_secs(5)))
-            .expect("set read timeout");
-
-        let first_request = read_http_request(&mut stream);
-        assert!(
-            first_request.contains("GET /first HTTP/1.1"),
-            "unexpected first request: {first_request}"
-        );
-        stream
-            .write_all(
-                b"HTTP/1.1 200 OK\r\nContent-Length: 5\r\nConnection: keep-alive\r\n\r\nfirst",
-            )
-            .expect("write first keep-alive response");
-        stream.flush().expect("flush first keep-alive response");
-
-        let second_request = read_http_request(&mut stream);
-        assert!(
-            second_request.contains("GET /second HTTP/1.1"),
-            "unexpected second request: {second_request}"
-        );
-        stream
-            .write_all(b"HTTP/1.1 200 OK\r\nContent-Length: 6\r\nConnection: close\r\n\r\nsecond")
-            .expect("write second keep-alive response");
-        stream.flush().expect("flush second keep-alive response");
-    });
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        &format!("proc-{case_name}"),
-        GuestRuntimeKind::JavaScript,
-        &entrypoint,
-        Vec::new(),
-    );
-    let (stdout, stderr, exit_code) = collect_builtin_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-builtin-http-agent-keepalive",
-    );
-    dispose_vm_and_close_session_wire(&mut sidecar, &connection_id, &session_id, &vm_id);
-
-    server.join().expect("join keep-alive server");
-
-    assert_eq!(
-        exit_code, 0,
-        "guest probe failed for {case_name}\nstdout:\n{stdout}\nstderr:\n{stderr}"
-    );
-    assert!(
-        stderr.trim().is_empty(),
-        "guest probe stderr for {case_name}:\n{stderr}"
-    );
-    let guest: Value = serde_json::from_str(stdout.trim()).expect("parse guest probe JSON");
-
-    assert_eq!(guest["first"]["statusCode"], 200);
-    assert_eq!(guest["first"]["body"], "first");
-    assert_eq!(guest["first"]["reusedSocket"], false);
-    assert_eq!(guest["second"]["statusCode"], 200);
-    assert_eq!(guest["second"]["body"], "second");
-    assert_eq!(guest["second"]["reusedSocket"], true);
-    assert_eq!(
-        guest["first"]["socketLocalPort"], guest["second"]["socketLocalPort"],
-        "expected second request to reuse the first socket"
-    );
-    assert_eq!(guest["freeSockets"], 1);
-}
-
-fn http_request_denied_egress_returns_permission_error_impl() {
-    assert_node_available();
-
-    let cwd = temp_dir("builtin-http-agent-denied");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-import http from "node:http";
-
-const result = await new Promise((resolve) => {
-  const req = http.get("http://127.0.0.1:9/denied", (res) => {
-    res.resume();
-    resolve({
-      statusCode: res.statusCode ?? null,
-      unexpected: true,
-    });
-  });
-  req.on("error", (error) => {
-    resolve({
-      code: error?.code ?? null,
-      message: String(error?.message ?? ""),
-      name: error?.name ?? null,
-    });
-  });
-});
-
-console.log(JSON.stringify(result));
-"#,
-    );
-
-    let allow_all = wire_permissions_allow_all();
-    let guest = run_guest_probe_with_config(
-        "builtin-http-agent-denied",
-        &cwd,
-        &entrypoint,
-        HashMap::new(),
-        PermissionsPolicy {
-            fs: allow_all.fs,
-            network: Some(PatternPermissionScope::PermissionMode(PermissionMode::Deny)),
-            child_process: allow_all.child_process,
-            process: allow_all.process,
-            env: allow_all.env,
-            binding: allow_all.binding,
-        },
-        &["http"],
-    );
-
-    assert_eq!(guest["code"], "EACCES");
-    assert_eq!(guest["unexpected"], Value::Null);
-    assert!(
-        guest["message"]
-            .as_str()
-            .is_some_and(|message| message.contains("permission denied")),
-        "unexpected denied-egress payload: {guest}"
-    );
-}
-
-#[test]
-fn http_request_custom_agent_reuses_keepalive_socket() {
-    run_isolated_builtin_conformance_test("http-request-keepalive");
-}
-
-#[test]
-fn http_request_denied_egress_returns_permission_error() {
-    run_isolated_builtin_conformance_test("http-request-denied");
-}
-
-fn http_socket_writes_do_not_silently_drop_data_impl() {
-    assert_node_available();
-
-    let request_socket_listener =
-        TcpListener::bind("127.0.0.1:0").expect("bind host request-socket listener");
-    let request_socket_port = request_socket_listener
-        .local_addr()
-        .expect("request-socket listener addr")
-        .port();
-    let request_socket_payload = "agent-socket-payload";
-
-    let request_socket_server = thread::spawn(move || {
-        let (mut stream, _) = request_socket_listener
-            .accept()
-            .expect("accept request-socket stream");
-        stream
-            .set_read_timeout(Some(Duration::from_secs(5)))
-            .expect("set request-socket read timeout");
-
-        let request = read_http_request(&mut stream);
-        assert!(
-            request.contains("GET /socket-write HTTP/1.1"),
-            "unexpected keep-alive request: {request}"
-        );
-
-        stream
-            .write_all(b"HTTP/1.1 200 OK\r\nContent-Length: 2\r\nConnection: keep-alive\r\n\r\nok")
-            .expect("write keep-alive response");
-        stream.flush().expect("flush keep-alive response");
-
-        let mut payload = vec![0; request_socket_payload.len()];
-        match stream.read(&mut payload) {
-            Ok(0) => {}
-            Ok(bytes_read) => {
-                let payload = payload[..bytes_read].to_vec();
-                assert_eq!(
-                    String::from_utf8(payload.clone()).expect("utf8 tunneled payload"),
-                    request_socket_payload
-                );
-                stream
-                    .shutdown(Shutdown::Write)
-                    .expect("shutdown request-socket write half");
-            }
-            Err(error)
-                if matches!(
-                    error.kind(),
-                    std::io::ErrorKind::WouldBlock | std::io::ErrorKind::TimedOut
-                ) => {}
-            Err(error) => panic!("read request-socket payload: {error}"),
-        }
-    });
-
-    let cwd = temp_dir("builtin-http-socket-writes");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        format!(
-            r#"
-import http from "node:http";
-
-const requestSocketResult = await new Promise((resolve, reject) => {{
-  const agent = new http.Agent({{ keepAlive: true, maxSockets: 1 }});
-  const req = http.request({{
-    host: "127.0.0.1",
-    port: {request_socket_port},
-    path: "/socket-write",
-    method: "GET",
-    agent,
-    headers: {{ Connection: "keep-alive" }},
-  }}, (res) => {{
-    res.resume();
-    res.on("end", () => {{
-      const payload = "{request_socket_payload}";
-      const finish = (result) => {{
-        agent.destroy();
-        resolve(result);
-      }};
-
-      req.socket.once("error", (error) => {{
-        finish({{
-          outcome: error?.code ?? error?.name ?? String(error),
-          sameSocket: !!req.socket,
-          statusCode: res.statusCode ?? null,
-        }});
-      }});
-
-      try {{
-        let writeReturn = null;
-        writeReturn = req.socket.write(payload, () => {{
-          finish({{
-            outcome: "forwarded",
-            writeReturn,
-            sameSocket: !!req.socket,
-            statusCode: res.statusCode ?? null,
-          }});
-        }});
-      }} catch (error) {{
-        finish({{
-          outcome: error?.code ?? error?.name ?? String(error),
-          sameSocket: !!req.socket,
-          statusCode: res.statusCode ?? null,
-        }});
-      }}
-    }});
-  }});
-  req.on("error", reject);
-  req.end();
-}});
-
-const responseResult = (() => {{
-  const res = new http.ServerResponse({{ method: "GET" }});
-  const result = {{
-    hasConnectionAlias: res.connection === res.socket,
-    socketPresent: !!res.socket,
-  }};
-  try {{
-    result.outcome = "forwarded";
-    result.returnValue = res.socket.write("socket-body:");
-  }} catch (error) {{
-    result.outcome = error?.code ?? error?.name ?? String(error);
-  }}
-  res.end("tail");
-  result.body = Buffer.concat(res._chunks ?? []).toString("utf8");
-  result.headersSent = res.headersSent;
-  result.writableFinished = res.writableFinished;
-  return result;
-}})();
-
-console.log(JSON.stringify({{ requestSocketResult, responseResult }}));
-await new Promise((resolve) => setTimeout(resolve, 0));
-process.exit(0);
-"#,
-        ),
-    );
-
-    let guest = run_guest_probe_with_config(
-        "builtin-http-socket-writes",
-        &cwd,
-        &entrypoint,
-        HashMap::from([(
-            String::from("env.AGENTOS_LOOPBACK_EXEMPT_PORTS"),
-            format!("[{request_socket_port}]"),
-        )]),
-        wire_permissions_allow_all(),
-        &["http"],
-    );
-
-    request_socket_server
-        .join()
-        .expect("join request-socket fixture server");
-
-    assert_eq!(guest["requestSocketResult"]["statusCode"], 200);
-    assert_eq!(
-        guest["requestSocketResult"]["sameSocket"],
-        Value::Bool(true)
-    );
-    let connect_outcome = guest["requestSocketResult"]["outcome"]
-        .as_str()
-        .expect("req.socket outcome");
-    assert!(
-        connect_outcome == "forwarded" || connect_outcome == "ERR_NOT_IMPLEMENTED",
-        "unexpected req.socket.write outcome: {guest}"
-    );
-    if connect_outcome == "forwarded" {
-        assert_eq!(guest["requestSocketResult"]["statusCode"], 200);
-    }
-
-    assert_eq!(guest["responseResult"]["socketPresent"], Value::Bool(true));
-    assert_eq!(
-        guest["responseResult"]["hasConnectionAlias"],
-        Value::Bool(true)
-    );
-    let response_outcome = guest["responseResult"]["outcome"]
-        .as_str()
-        .expect("ServerResponse.socket outcome");
-    assert!(
-        response_outcome == "forwarded" || response_outcome == "ERR_NOT_IMPLEMENTED",
-        "unexpected res.socket.write outcome: {guest}"
-    );
-    if response_outcome == "forwarded" {
-        assert_eq!(
-            guest["responseResult"]["returnValue"],
-            Value::Bool(true),
-            "expected res.socket.write to mirror ServerResponse.write return value"
-        );
-        assert_eq!(guest["responseResult"]["headersSent"], Value::Bool(true));
-        assert_eq!(
-            guest["responseResult"]["writableFinished"],
-            Value::Bool(true)
-        );
-        assert_eq!(
-            guest["responseResult"]["body"],
-            Value::String(String::from("socket-body:tail"))
-        );
-    } else {
-        assert_eq!(
-            guest["responseResult"]["body"],
-            Value::String(String::from("tail"))
-        );
-    }
-}
-
-#[test]
-fn http_socket_writes_do_not_silently_drop_data() {
-    run_isolated_builtin_conformance_test("http-socket-writes");
-}
-
-fn net_socket_readable_state_tracks_ssh2_writable_shape_impl() {
-    assert_node_available();
-
-    let cwd = temp_dir("builtin-net-socket-readable-state");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-import net from "node:net";
-
-const isWritable = (stream) =>
-  Boolean(stream?.writable && stream?._readableState?.ended === false);
-
-const socket = new net.Socket();
-const open = {
-  ended: socket._readableState?.ended ?? null,
-  endEmitted: socket._readableState?.endEmitted ?? null,
-  writable: socket.writable ?? null,
-  isWritable: isWritable(socket),
-};
-
-socket.destroy();
-
-const closed = {
-  ended: socket._readableState?.ended ?? null,
-  endEmitted: socket._readableState?.endEmitted ?? null,
-  writable: socket.writable ?? null,
-  isWritable: isWritable(socket),
-  destroyed: socket.destroyed ?? null,
-};
-
-console.log(JSON.stringify({ open, closed }));
-"#,
-    );
-
-    let guest = run_guest_probe_with_config(
-        "net-socket-readable-state",
-        &cwd,
-        &entrypoint,
-        HashMap::new(),
-        wire_permissions_allow_all(),
-        &["net"],
-    );
-
-    assert_eq!(guest["open"]["ended"], Value::Bool(false));
-    assert_eq!(guest["open"]["endEmitted"], Value::Bool(false));
-    assert_eq!(guest["open"]["isWritable"], Value::Bool(true));
-    assert_eq!(guest["closed"]["ended"], Value::Bool(true));
-    assert_eq!(guest["closed"]["endEmitted"], Value::Bool(true));
-    assert_eq!(guest["closed"]["isWritable"], Value::Bool(false));
-}
-
-#[test]
-fn net_socket_readable_state_tracks_ssh2_writable_shape() {
-    run_isolated_builtin_conformance_test("net-socket-readable-state");
-}
-
-fn readable_on_data_respects_explicit_pause_matches_host_node_impl() {
-    assert_conformance(
-        "readable-on-data-explicit-pause",
-        r#"
-import fs from "node:fs";
-
-const fixturePath = new URL("./fixture.txt", import.meta.url);
-fs.writeFileSync(fixturePath, "abcdef");
-
-const delay = (ms) => new Promise((resolve) => setTimeout(resolve, ms));
-
-async function pauseThenOnDataThenResume() {
-  const stream = fs.createReadStream(fixturePath, { encoding: "utf8", highWaterMark: 2 });
-  const chunks = [];
-  stream.pause();
-  const afterPause = stream.readableFlowing;
-  stream.on("data", (chunk) => chunks.push(chunk));
-  const afterOnData = stream.readableFlowing;
-  await delay(20);
-  const beforeResumeChunkCount = chunks.length;
-  stream.resume();
-  const afterResume = stream.readableFlowing;
-  await new Promise((resolve, reject) => {
-    stream.on("end", resolve);
-    stream.on("error", reject);
-  });
-  return {
-    afterPause,
-    afterOnData,
-    beforeResumeChunkCount,
-    afterResume,
-    chunks,
-  };
-}
-
-async function onDataAlone() {
-  const stream = fs.createReadStream(fixturePath, { encoding: "utf8", highWaterMark: 2 });
-  const chunks = [];
-  const initialFlowing = stream.readableFlowing;
-  stream.on("data", (chunk) => chunks.push(chunk));
-  const afterOnData = stream.readableFlowing;
-  await new Promise((resolve, reject) => {
-    stream.on("end", resolve);
-    stream.on("error", reject);
-  });
-  return {
-    initialFlowing,
-    afterOnData,
-    chunks,
-  };
-}
-
-async function multiplePauseResumeCycles() {
-  const stream = fs.createReadStream(fixturePath, { encoding: "utf8", highWaterMark: 2 });
-  const chunks = [];
-  const checkpoints = [];
-  let firstChunkSeen = false;
-
-  stream.pause();
-  checkpoints.push(["afterInitialPause", stream.readableFlowing]);
-  stream.on("data", (chunk) => {
-    chunks.push(chunk);
-    if (!firstChunkSeen) {
-      firstChunkSeen = true;
-      stream.pause();
-      checkpoints.push(["afterMidStreamPause", stream.readableFlowing]);
-      setTimeout(() => {
-        checkpoints.push(["beforeSecondResumeChunkCount", chunks.length]);
-        stream.resume();
-        checkpoints.push(["afterSecondResume", stream.readableFlowing]);
-      }, 20);
-    }
-  });
-  checkpoints.push(["afterOnData", stream.readableFlowing]);
-  await delay(20);
-  checkpoints.push(["beforeFirstResumeChunkCount", chunks.length]);
-  stream.resume();
-  checkpoints.push(["afterFirstResume", stream.readableFlowing]);
-  await new Promise((resolve, reject) => {
-    stream.on("end", resolve);
-    stream.on("error", reject);
-  });
-  return { checkpoints, chunks };
-}
-
-console.log(JSON.stringify({
-  pauseThenOnDataThenResume: await pauseThenOnDataThenResume(),
-  onDataAlone: await onDataAlone(),
-  multiplePauseResumeCycles: await multiplePauseResumeCycles(),
-}));
-"#,
-    );
-}
-
-#[test]
-fn readable_on_data_respects_explicit_pause_matches_host_node() {
-    run_isolated_builtin_conformance_test("readable-on-data-explicit-pause");
-}
-
-fn readline_question_reads_real_stdin_impl() {
-    assert_node_available();
-
-    let cwd = temp_dir("builtin-readline-question");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-import readline from "node:readline";
-
-const output = { write() {} };
-const rl = readline.createInterface({ input: process.stdin, output });
-process.stdout.write("__READY__\n");
-
-const callbackAnswer = await new Promise((resolve, reject) => {
-  const timeout = setTimeout(() => reject(new Error("callback question timed out")), 2000);
-  rl.question("callback> ", (answer) => {
-    clearTimeout(timeout);
-    resolve(answer);
-  });
-});
-
-const promiseAnswer = await rl.question("promise> ");
-rl.close();
-
-console.log(JSON.stringify({ callbackAnswer, promiseAnswer }));
-"#,
-    );
-
-    let mut sidecar = new_sidecar("builtin-readline-question");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-readline-question");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_metadata_and_permissions(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::from([
-            (
-                String::from("env.AGENTOS_ALLOWED_NODE_BUILTINS"),
-                serde_json::to_string(&["readline"]).expect("serialize builtin allowlist"),
-            ),
-            (
-                String::from("env.SECURE_EXEC_KEEP_STDIN_OPEN"),
-                String::from("1"),
-            ),
-        ]),
-        wire_permissions_allow_all(),
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-readline-question",
-        GuestRuntimeKind::JavaScript,
-        &entrypoint,
-        Vec::new(),
-    );
-    let ownership = wire_session(&connection_id, &session_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-    let mut stdout = String::new();
-    let mut stderr = String::new();
-    let mut exit = None;
-    let mut stdin_sent = false;
-
-    loop {
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll readline question wire event");
-
-        if let Some(event) = event {
-            assert_eq!(
-                event.ownership,
-                wire_vm(&connection_id, &session_id, &vm_id)
-            );
-
-            match event.payload {
-                EventPayload::ProcessOutputEvent(output)
-                    if output.process_id == "proc-readline-question" =>
-                {
-                    match output.channel {
-                        StreamChannel::Stdout => append_probe_output(
-                            &mut stdout,
-                            &output.chunk,
-                            &output.process_id,
-                            "stdout",
-                        ),
-                        StreamChannel::Stderr => append_probe_output(
-                            &mut stderr,
-                            &output.chunk,
-                            &output.process_id,
-                            "stderr",
-                        ),
-                    }
-                }
-                EventPayload::ProcessExitedEvent(exited)
-                    if exited.process_id == "proc-readline-question" =>
-                {
-                    exit = Some((exited.exit_code, Instant::now()));
-                }
-                _ => {}
-            }
-        }
-
-        if !stdin_sent && stdout.contains("__READY__\n") {
-            write_process_stdin(
-                &mut sidecar,
-                5,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                "proc-readline-question",
-                "hello\nworld\n",
-            );
-            close_process_stdin(
-                &mut sidecar,
-                6,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                "proc-readline-question",
-            );
-            stdin_sent = true;
-        }
-
-        if let Some((exit_code, seen_at)) = exit {
-            if Instant::now().duration_since(seen_at) >= Duration::from_millis(200) {
-                let stdout = stdout.replace("__READY__\n", "");
-                dispose_vm_and_close_session_wire(
-                    &mut sidecar,
-                    &connection_id,
-                    &session_id,
-                    &vm_id,
-                );
-
-                assert_eq!(
-                    exit_code, 0,
-                    "readline question probe failed\nstdout:\n{stdout}\nstderr:\n{stderr}"
-                );
-                assert!(stderr.trim().is_empty(), "unexpected stderr:\n{stderr}");
-
-                let payload: Value =
-                    serde_json::from_str(stdout.trim()).expect("parse readline JSON");
-                assert_eq!(payload["callbackAnswer"], "hello");
-                assert_eq!(payload["promiseAnswer"], "world");
-                return;
-            }
-        }
-
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for readline question probe\nstdout:\n{stdout}\nstderr:\n{stderr}"
-        );
-    }
-}
-
-#[test]
-fn readline_question_reads_real_stdin() {
-    run_isolated_builtin_conformance_test("readline-question");
-}
-
-fn vm_is_context_only_accepts_create_context_tagged_sandboxes_impl() {
-    assert_conformance(
-        "vm-is-context",
-        r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const vm = require("node:vm");
-
-const safeIsContext = (value) => {
-  try {
-    return vm.isContext(value);
-  } catch {
-    return false;
-  }
-};
-
-const sandbox = {};
-const tagged = vm.createContext(sandbox);
-const taggedArray = vm.createContext([]);
-
-console.log(JSON.stringify({
-  sameReference: tagged === sandbox,
-  matrix: {
-    plainObject: safeIsContext({}),
-    taggedObject: safeIsContext(tagged),
-    plainArray: safeIsContext([]),
-    taggedArray: safeIsContext(taggedArray),
-    functionValue: safeIsContext(function demo() {}),
-    nullValue: safeIsContext(null),
-    numberValue: safeIsContext(1),
-    stringValue: safeIsContext("text"),
-  },
-}));
-"#,
-    );
-}
-
-#[test]
-fn vm_is_context_only_accepts_create_context_tagged_sandboxes() {
-    run_isolated_builtin_conformance_test("vm-is-context");
-}
-
-fn vm_context_isolation_and_script_options_match_host_node_impl() {
-    assert_conformance(
-        "vm-context-isolation",
-        r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const vm = require("node:vm");
-
-const sandbox = { answer: 41 };
-const context = vm.createContext(sandbox);
-const runResult = vm.runInContext("answer += 1; typeof globalThis.require", context);
-
-let filenameLine = false;
-try {
-  new vm.Script("throw new Error('boom')", {
-    filename: "named-vm.js",
-    lineOffset: 2,
-    columnOffset: 4,
-  }).runInNewContext({});
-} catch (error) {
-  filenameLine = String(error?.stack ?? error).includes("named-vm.js:3");
-}
-
-let invalidContextType = null;
-try {
-  vm.runInContext("1 + 1", {});
-} catch (error) {
-  invalidContextType = error?.name ?? null;
-}
-
-console.log(JSON.stringify({
-  sameReference: context === sandbox,
-  sandboxAnswer: sandbox.answer,
-  newContextRequire: vm.runInNewContext("typeof globalThis.require"),
-  newContextBuffer: vm.runInNewContext("typeof Buffer"),
-  contextRequire: runResult,
-  filenameLine,
-  invalidContextType,
-}));
-"#,
-    );
-}
-
-#[test]
-fn vm_context_isolation_and_script_options_match_host_node() {
-    run_isolated_builtin_conformance_test("vm-context-isolation");
-}
-
-fn vm_timeout_terminates_within_deadline_impl() {
-    let cwd = temp_dir("builtin-conformance-vm-timeout");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const vm = require("node:vm");
-
-const started = Date.now();
-let timeoutCode = null;
-let timeoutMessage = null;
-try {
-  vm.runInNewContext("while (true) {}", {}, { timeout: 100 });
-} catch (error) {
-  timeoutCode = error?.code ?? null;
-  timeoutMessage = String(error?.message ?? error);
-}
-
-console.log(JSON.stringify({
-  elapsedMs: Date.now() - started,
-  timeoutCode,
-  timeoutMessage,
-}));
-"#,
-    );
-
-    let result = run_guest_probe("vm-timeout", &cwd, &entrypoint);
-    let elapsed_ms = result["elapsedMs"]
-        .as_u64()
-        .expect("vm timeout elapsed milliseconds");
-    if run_timing_sensitive_tests() {
-        assert!(
-            elapsed_ms <= 200,
-            "vm timeout exceeded 200ms: {elapsed_ms}ms ({result})"
-        );
-    }
-    assert_eq!(
-        result["timeoutCode"],
-        Value::String(String::from("ERR_SCRIPT_EXECUTION_TIMEOUT"))
-    );
-    assert!(
-        result["timeoutMessage"]
-            .as_str()
-            .is_some_and(|message| message.contains("timed out")),
-        "vm timeout message missing timeout marker: {result}"
-    );
-}
-
-#[test]
-fn vm_timeout_terminates_within_deadline() {
-    run_isolated_builtin_conformance_test("vm-timeout");
-}
-
-fn vm_optional_surface_is_implemented_or_explicitly_not_implemented_impl() {
-    let cwd = temp_dir("builtin-conformance-vm-optional-surface");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const vm = require("node:vm");
-
-function capture(label, fn) {
-  try {
-    const value = fn();
-    return typeof value?.then === "function" ? "ok" : "ok";
-  } catch (error) {
-    return error?.code ?? `${label}-error`;
-  }
-}
-
-console.log(JSON.stringify({
-  compileFunction: capture("compileFunction", () => vm.compileFunction("return value;", ["value"])),
-  measureMemory: capture("measureMemory", () => vm.measureMemory()),
-}));
-"#,
-    );
-
-    let result = run_guest_probe("vm-optional-surface", &cwd, &entrypoint);
-    for key in ["compileFunction", "measureMemory"] {
-        let outcome = result[key].as_str().unwrap_or_default();
-        assert!(
-            outcome == "ok" || outcome == "ERR_NOT_IMPLEMENTED",
-            "vm optional surface {key} returned unexpected outcome: {result}"
-        );
-    }
-}
-
-#[test]
-fn vm_optional_surface_is_implemented_or_explicitly_not_implemented() {
-    run_isolated_builtin_conformance_test("vm-optional-surface");
-}
-
-fn perf_hooks_observer_and_histogram_match_host_node_impl() {
-    assert_conformance(
-        "perf-hooks-observer",
-        r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const { PerformanceObserver, createHistogram, performance } = require("node:perf_hooks");
-
-function sortEntries(entries) {
-  return [...entries].sort((left, right) => left.localeCompare(right));
-}
-
-function toEntryNames(entries) {
-  return entries.map((entry) => `${entry.entryType}:${entry.name}`);
-}
-
-performance.clearMarks?.();
-performance.clearMeasures?.();
-
-const callbackEntries = [];
-const observer = new PerformanceObserver((list) => {
-  callbackEntries.push(...toEntryNames(list.getEntries()));
-});
-observer.observe({ entryTypes: ["mark", "measure"] });
-performance.mark("start");
-performance.mark("end");
-performance.measure("delta", "start", "end");
-await new Promise((resolve) => setImmediate(resolve));
-const callbackObserved = sortEntries(callbackEntries);
-const afterFlush = sortEntries(toEntryNames(observer.takeRecords()));
-observer.disconnect();
-
-performance.clearMarks?.();
-performance.clearMeasures?.();
-
-const takeRecordsObserver = new PerformanceObserver(() => {});
-takeRecordsObserver.observe({ entryTypes: ["mark", "measure"] });
-performance.mark("alpha");
-performance.mark("omega");
-performance.measure("window", "alpha", "omega");
-const takeRecordsBeforeFlush = sortEntries(
-  toEntryNames(takeRecordsObserver.takeRecords()),
-);
-await new Promise((resolve) => setImmediate(resolve));
-const takeRecordsAfterFlush = sortEntries(
-  toEntryNames(takeRecordsObserver.takeRecords()),
-);
-takeRecordsObserver.disconnect();
-
-const histogram = createHistogram();
-histogram.record(10);
-histogram.record(20);
-histogram.record(30);
-
-console.log(JSON.stringify({
-  callbackObserved,
-  afterFlush,
-  takeRecordsBeforeFlush,
-  takeRecordsAfterFlush,
-  histogram: {
-    emptyP50: createHistogram().percentile(50),
-    p50: histogram.percentile(50),
-    p90: histogram.percentile(90),
-  },
-}));
-"#,
-    );
-}
-
-#[test]
-fn perf_hooks_observer_and_histogram_match_host_node() {
-    run_isolated_builtin_conformance_test("perf-hooks-observer");
-}
-
-fn run_guest_script(case_name: &str, script: &str) -> Value {
-    assert_node_available();
-
-    let cwd = temp_dir(&format!("builtin-guest-{case_name}"));
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(&entrypoint, script);
-
-    run_guest_probe(case_name, &cwd, &entrypoint)
-}
-
-fn current_openssl_version() -> String {
-    openssl::version::version()
-        .split_whitespace()
-        .nth(1)
-        .unwrap_or_else(openssl::version::version)
-        .to_string()
-}
-
-fn process_runtime_stats_are_live_impl() {
-    let cwd = temp_dir("process-runtime-stats");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-const before = process.memoryUsage();
-const beforeCpu = process.cpuUsage();
-const retained = [];
-for (let i = 0; i < 25000; i += 1) {
-  retained.push({
-    index: i,
-    text: `${i}-`.padEnd(256, String(i % 10)),
-  });
-}
-let cpuAccumulator = 0;
-for (let i = 0; i < 500000; i += 1) {
-  cpuAccumulator += Math.sqrt(i % 1000);
-}
-globalThis.__retainedProcessStatsFixture = retained;
-const after = process.memoryUsage();
-const deltaCpu = process.cpuUsage(beforeCpu);
-const resource = process.resourceUsage();
-
-console.log(JSON.stringify({
-  before,
-  after,
-  deltaCpu,
-  resource,
-  versions: {
-    node: process.versions.node,
-    v8: process.versions.v8,
-    openssl: process.versions.openssl,
-  },
-  retainedCount: retained.length,
-  cpuAccumulator,
-}));
-"#,
-    );
-    let guest = run_guest_probe_with_config(
-        "process-runtime-stats",
-        &cwd,
-        &entrypoint,
-        HashMap::new(),
-        wire_permissions_allow_all(),
-        &[],
-    );
-
-    let before_heap_used = guest["before"]["heapUsed"]
-        .as_u64()
-        .expect("before heapUsed should be a number");
-    let after_heap_used = guest["after"]["heapUsed"]
-        .as_u64()
-        .expect("after heapUsed should be a number");
-    assert!(
-        after_heap_used > before_heap_used + 512_000,
-        "expected heapUsed to grow by at least 512KiB after allocation, before={before_heap_used}, after={after_heap_used}, guest={guest}",
-    );
-
-    let user_cpu = guest["deltaCpu"]["user"]
-        .as_u64()
-        .expect("cpuUsage.user should be a number");
-    let system_cpu = guest["deltaCpu"]["system"]
-        .as_u64()
-        .expect("cpuUsage.system should be a number");
-    assert!(
-        user_cpu + system_cpu > 0,
-        "expected cpuUsage delta to report live CPU time, guest={guest}",
-    );
-
-    for field in [
-        "userCPUTime",
-        "systemCPUTime",
-        "maxRSS",
-        "minorPageFault",
-        "majorPageFault",
-        "voluntaryContextSwitches",
-        "involuntaryContextSwitches",
-    ] {
-        assert!(
-            guest["resource"][field].is_number(),
-            "expected resourceUsage.{field} to be numeric, guest={guest}",
-        );
-    }
-
-    assert_eq!(
-        guest["versions"]["v8"],
-        Value::String(v8::V8::get_version().to_string())
-    );
-    assert_eq!(
-        guest["versions"]["openssl"],
-        Value::String(current_openssl_version())
-    );
-}
-
-#[test]
-fn process_runtime_stats_are_live() {
-    run_isolated_builtin_conformance_test("process-runtime-stats");
-}
-
-fn os_resource_limits_are_vm_scoped_impl() {
-    let cwd = temp_dir("builtin-conformance-os-resource-limits");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-import os from "node:os";
-
-console.log(JSON.stringify({
-  availableParallelism: os.availableParallelism(),
-  cpusLength: os.cpus().length,
-  freemem: os.freemem(),
-  totalmem: os.totalmem(),
-  username: os.userInfo().username,
-  homedir: os.homedir(),
-  envUser: process.env.USER,
-  envHome: process.env.HOME,
-}));
-"#,
-    );
-
-    let mut sidecar = new_sidecar("os-resource-limits");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-os-resource-limits");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-
-    let constrained = run_guest_probe_in_existing_session(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        "os-resource-limits-constrained",
-        &cwd,
-        &entrypoint,
-        HashMap::from([
-            (String::from("resource.cpu_count"), String::from("2")),
-            (
-                String::from("resource.max_wasm_memory_bytes"),
-                (64_u64 * 1024 * 1024).to_string(),
-            ),
-        ]),
-    );
-    let expanded = run_guest_probe_in_existing_session(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        "os-resource-limits-expanded",
-        &cwd,
-        &entrypoint,
-        HashMap::from([
-            (String::from("resource.cpu_count"), String::from("5")),
-            (
-                String::from("resource.max_wasm_memory_bytes"),
-                (256_u64 * 1024 * 1024).to_string(),
-            ),
-        ]),
-    );
-
-    sidecar
-        .close_session_blocking(&connection_id, &session_id)
-        .expect("close sidecar session");
-    sidecar
-        .remove_connection_blocking(&connection_id)
-        .expect("remove sidecar connection");
-
-    // Virtual identity must reflect the configured VM (distinct from the loader's
-    // hardcoded root/"/root" defaults) — this is the sidecar-level coverage that
-    // exercises the guestOs/`import os` path, which an engine-only test does not.
-    assert_eq!(constrained["username"], "agentos");
-    assert_eq!(constrained["homedir"], "/home/agentos");
-    assert_eq!(expanded["username"], "agentos");
-    assert_eq!(expanded["homedir"], "/home/agentos");
-
-    assert_eq!(constrained["availableParallelism"], 2);
-    assert_eq!(constrained["cpusLength"], 2);
-    assert_eq!(constrained["totalmem"], 64_u64 * 1024 * 1024);
-    assert_eq!(constrained["freemem"], 64_u64 * 1024 * 1024);
-
-    assert_eq!(expanded["availableParallelism"], 5);
-    assert_eq!(expanded["cpusLength"], 5);
-    assert_eq!(expanded["totalmem"], 256_u64 * 1024 * 1024);
-    assert_eq!(expanded["freemem"], 256_u64 * 1024 * 1024);
-
-    assert_ne!(constrained, expanded);
-}
-
-#[test]
-fn os_resource_limits_are_vm_scoped() {
-    run_isolated_builtin_conformance_test("os-resource-limits");
-}
-
-fn dns_conformance_matches_host_node() {
-    assert_node_available();
-
-    let dns_server = FixtureDnsServer::start();
-    let dns_server_addr = dns_server.addr.to_string();
-    let cwd = temp_dir("builtin-conformance-dns");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-import dns from "node:dns";
-
-if (process.env.AGENTOS_TEST_DNS_SERVER) {
-  dns.setServers([process.env.AGENTOS_TEST_DNS_SERVER]);
-}
-
-function sortStrings(values) {
-  return [...values].sort((left, right) => left.localeCompare(right));
-}
-
-function sortObjects(values) {
-  return [...values].sort((left, right) =>
-    JSON.stringify(left).localeCompare(JSON.stringify(right)),
-  );
-}
-
-function resolveWithCallback(hostname, rrtype) {
-  return new Promise((resolve, reject) => {
-    dns.resolve(hostname, rrtype, (error, records) => {
-      if (error) {
-        reject(error);
-        return;
-      }
-      resolve(records);
-    });
-  });
-}
-
-const resolveAny = sortObjects(await dns.promises.resolveAny("bundle.example.test"));
-const results = {
-  resolveCallbackA: sortStrings(await resolveWithCallback("bundle.example.test", "A")),
-  resolve4: sortStrings(await dns.promises.resolve4("bundle.example.test")),
-  resolve6: sortStrings(await dns.promises.resolve6("bundle.example.test")),
-  resolveCallbackMx: sortObjects(await resolveWithCallback("bundle.example.test", "MX")),
-  resolveTxt: sortObjects(await dns.promises.resolveTxt("bundle.example.test")),
-  resolveSrv: sortObjects(await dns.promises.resolveSrv("_svc._tcp.example.test")),
-  resolveCname: sortStrings(await dns.promises.resolveCname("alias.example.test")),
-  resolvePtr: sortStrings(await dns.promises.resolvePtr("ptr.example.test")),
-  resolveNs: sortStrings(await dns.promises.resolveNs("zone.example.test")),
-  resolveSoa: await dns.promises.resolveSoa("zone.example.test"),
-  resolveNaptr: sortObjects(await dns.promises.resolveNaptr("naptr.example.test")),
-  resolveCaa: sortObjects(await dns.promises.resolveCaa("caa.example.test")),
-  resolveAny,
-};
-
-console.log(JSON.stringify(results));
-"#,
-    );
-
-    let host = run_host_probe_with_env(
-        &cwd,
-        &entrypoint,
-        &[("AGENTOS_TEST_DNS_SERVER", dns_server_addr.as_str())],
-    );
-    let guest = run_guest_probe_with_config(
-        "dns",
-        &cwd,
-        &entrypoint,
-        HashMap::from([(String::from("network.dns.servers"), dns_server_addr.clone())]),
-        wire_permissions_allow_all(),
-        &["dns"],
-    );
-
-    // `dns.resolveSrv`/`resolveCaa`/`resolve(..., "MX")` record shapes differ
-    // by host Node *version*, not by guest correctness: Node >= 24 attaches a
-    // `type` discriminator (e.g. `"type":"SRV"`) to these records, while Node
-    // <= 22 omits it. The guest shim always emits the modern shape with `type`.
-    // CI runs on Node 22 and the dev machines run Node 24, so a raw
-    // `guest == host` comparison flaps on the runner's Node version even though
-    // every actual resolved value is identical. We therefore:
-    //   1. strip the version-dependent `type` discriminator from both sides
-    //      before comparing the resolved data, so the guest-vs-host conformance
-    //      check still covers all version-stable fields (addresses, ttls,
-    //      priorities, exchanges, ports, soa fields, ...); and
-    //   2. assert the guest's own `type` discriminators directly, so we keep
-    //      testing the guest's record-shape correctness independent of the
-    //      host Node version.
-    fn strip_record_type(value: &Value) -> Value {
-        match value {
-            Value::Object(map) => Value::Object(
-                map.iter()
-                    .filter(|(key, _)| key.as_str() != "type")
-                    .map(|(key, val)| (key.clone(), strip_record_type(val)))
-                    .collect(),
-            ),
-            Value::Array(items) => Value::Array(items.iter().map(strip_record_type).collect()),
-            other => other.clone(),
-        }
-    }
-
-    assert_eq!(
-        strip_record_type(&guest),
-        strip_record_type(&host),
-        "guest V8 result diverged from host Node for dns (ignoring host-Node-version-dependent record `type` field)\nhost: {}\nguest: {}",
-        serde_json::to_string_pretty(&host).expect("pretty host JSON"),
-        serde_json::to_string_pretty(&guest).expect("pretty guest JSON")
-    );
-
-    // Guest record-shape correctness, asserted directly so it does not depend on
-    // the host Node version. The modern Node shape attaches these discriminators.
-    let type_at = |key: &str, index: usize| -> Option<String> {
-        guest[key]
-            .get(index)
-            .and_then(|record| record.get("type"))
-            .and_then(Value::as_str)
-            .map(str::to_owned)
-    };
-    assert_eq!(type_at("resolveSrv", 0).as_deref(), Some("SRV"));
-    assert_eq!(type_at("resolveCallbackMx", 0).as_deref(), Some("MX"));
-    assert!(
-        guest["resolveCaa"].as_array().is_some_and(|records| records
-            .iter()
-            .all(|record| record.get("type").and_then(Value::as_str) == Some("CAA"))),
-        "guest resolveCaa records missing CAA type discriminator: {}",
-        guest["resolveCaa"]
-    );
-    assert!(
-        guest["resolveAny"].as_array().is_some_and(|records| records
-            .iter()
-            .all(|record| record.get("type").and_then(Value::as_str).is_some())),
-        "guest resolveAny records missing type discriminator: {}",
-        guest["resolveAny"]
-    );
-
-    let unsupported_cwd = temp_dir("builtin-conformance-dns-unsupported");
-    let unsupported_entrypoint = unsupported_cwd.join("entry.mjs");
-    write_fixture(
-        &unsupported_entrypoint,
-        r#"
-import dns from "node:dns";
-
-try {
-  await dns.promises.resolve("bundle.example.test", "TLSA");
-  console.log(JSON.stringify({ unexpected: true }));
-} catch (error) {
-  console.log(JSON.stringify({
-    code: error?.code ?? null,
-    message: String(error?.message ?? ""),
-  }));
-}
-"#,
-    );
-    let unsupported = run_guest_probe_with_config(
-        "dns-unsupported",
-        &unsupported_cwd,
-        &unsupported_entrypoint,
-        HashMap::new(),
-        wire_permissions_allow_all(),
-        &["dns"],
-    );
-
-    assert_eq!(unsupported["code"], "ERR_NOT_IMPLEMENTED");
-    assert!(
-        unsupported["message"]
-            .as_str()
-            .is_some_and(|message| message.contains("TLSA")),
-        "unexpected unsupported rrtype payload: {unsupported}"
-    );
-
-    let resolver_cwd = temp_dir("builtin-conformance-dns-resolver");
-    let resolver_entrypoint = resolver_cwd.join("entry.mjs");
-    write_fixture(
-        &resolver_entrypoint,
-        r#"
-import dns, { Resolver as CallbackResolver } from "node:dns";
-import dnsPromises, { Resolver as PromisesResolver } from "node:dns/promises";
-
-const callbackResolver = new CallbackResolver();
-callbackResolver.setServers(["203.0.113.53:5353"]);
-const callbackResult = await new Promise((resolve, reject) => {
-  callbackResolver.resolve4("bundle.example.test", (error, records) => {
-    if (error) {
-      reject(error);
-      return;
-    }
-    resolve(records);
-  });
-});
-
-const promisesResolver = new PromisesResolver();
-promisesResolver.setServers(["203.0.113.54", "203.0.113.55:5353"]);
-
-console.log(JSON.stringify({
-  callbackResolverIsConstructor: typeof CallbackResolver === "function",
-  promisesResolverIsConstructor: typeof PromisesResolver === "function",
-  sameCallbackResolverExport: dns.Resolver === CallbackResolver,
-  samePromisesResolverExport: dnsPromises.Resolver === PromisesResolver,
-  callbackServers: callbackResolver.getServers(),
-  promisesServers: promisesResolver.getServers(),
-  callbackResult: [...callbackResult].sort(),
-  promisesResult: [...(await promisesResolver.resolve4("bundle.example.test"))].sort(),
-}));
-"#,
-    );
-    let resolver_probe = run_guest_probe_with_config(
-        "dns-resolver",
-        &resolver_cwd,
-        &resolver_entrypoint,
-        HashMap::from([(String::from("network.dns.servers"), dns_server_addr.clone())]),
-        wire_permissions_allow_all(),
-        &["dns"],
-    );
-
-    assert_eq!(
-        resolver_probe["callbackResolverIsConstructor"],
-        Value::Bool(true)
-    );
-    assert_eq!(
-        resolver_probe["promisesResolverIsConstructor"],
-        Value::Bool(true)
-    );
-    assert_eq!(
-        resolver_probe["sameCallbackResolverExport"],
-        Value::Bool(true)
-    );
-    assert_eq!(
-        resolver_probe["samePromisesResolverExport"],
-        Value::Bool(true)
-    );
-    assert_eq!(
-        resolver_probe["callbackServers"],
-        json!([String::from("203.0.113.53:5353")])
-    );
-    assert_eq!(
-        resolver_probe["promisesServers"],
-        json!([
-            String::from("203.0.113.54"),
-            String::from("203.0.113.55:5353"),
-        ])
-    );
-    assert_eq!(
-        resolver_probe["callbackResult"],
-        json!([String::from("203.0.113.10"), String::from("203.0.113.11"),])
-    );
-    assert_eq!(
-        resolver_probe["promisesResult"],
-        json!([String::from("203.0.113.10"), String::from("203.0.113.11"),])
-    );
-}
-
-fn fs_conformance_matches_host_node() {
-    assert_conformance(
-        "fs",
-        r#"
-import fs from "node:fs";
-
-fs.mkdirSync("scratchdir");
-fs.mkdirSync("scratchdir/nested");
-fs.writeFileSync("scratchdir/nested/alpha.txt", Buffer.from("alpha-sync", "utf8"));
-await new Promise((resolve, reject) => {
-  fs.writeFile("scratchdir/beta.txt", Buffer.from("beta-async", "utf8"), (error) => {
-    if (error) {
-      reject(error);
-      return;
-    }
-    resolve();
-  });
-});
-
-let missingStatCode = null;
-try {
-  fs.statSync("scratchdir/missing.txt");
-} catch (error) {
-  missingStatCode = error?.code ?? null;
-}
-
-let missingReadCode = null;
-try {
-  await new Promise((resolve, reject) => {
-    fs.readFile("scratchdir/missing.txt", "utf8", (error, value) => {
-      if (error) {
-        reject(error);
-        return;
-      }
-      resolve(value);
-    });
-  });
-} catch (error) {
-  missingReadCode = error?.code ?? null;
-}
-
-const asyncRead = await new Promise((resolve, reject) => {
-  fs.readFile("scratchdir/beta.txt", "utf8", (error, value) => {
-    if (error) {
-      reject(error);
-      return;
-    }
-    resolve(value);
-  });
-});
-
-console.log(JSON.stringify({
-  syncRead: fs.readFileSync("scratchdir/nested/alpha.txt", "utf8"),
-  asyncRead,
-  entries: fs.readdirSync("scratchdir").sort(),
-  statSize: fs.statSync("scratchdir/nested/alpha.txt").size,
-  existsAlpha: fs.existsSync("scratchdir/nested/alpha.txt"),
-  existsBeta: fs.existsSync("scratchdir/beta.txt"),
-  missingStatCode,
-  missingReadCode,
-}));
-"#,
-    );
-}
-
-fn console_conformance_matches_host_node() {
-    assert_conformance(
-        "console",
-        r#"
-import * as consoleModule from "node:console";
-import { Writable } from "node:stream";
-const consoleInstance = new consoleModule.Console(process.stdout, process.stderr);
-const task = consoleModule.createTask("demo-task");
-const detachedChunks = [];
-const detachedErrors = [];
-const createSink = (target) =>
-  new Writable({
-    write(chunk, _encoding, callback) {
-      target.push(String(chunk));
-      callback();
-    },
-  });
-const detachedConsole = new consoleModule.Console(
-  createSink(detachedChunks),
-  createSink(detachedErrors),
-);
-const detachedLog = detachedConsole.log;
-const detachedError = detachedConsole.error;
-detachedLog("detached-log");
-detachedError("detached-error");
-
-console.log(JSON.stringify({
-  types: {
-    Console: typeof consoleModule.Console,
-    context: typeof consoleModule.context,
-    createTask: typeof consoleModule.createTask,
-    log: typeof consoleModule.log,
-    table: typeof consoleModule.table,
-  },
-  taskRunType: typeof task.run,
-  consoleMethods: {
-    assert: typeof consoleInstance.assert,
-    clear: typeof consoleInstance.clear,
-    count: typeof consoleInstance.count,
-    countReset: typeof consoleInstance.countReset,
-    debug: typeof consoleInstance.debug,
-    dir: typeof consoleInstance.dir,
-    dirxml: typeof consoleInstance.dirxml,
-    error: typeof consoleInstance.error,
-    group: typeof consoleInstance.group,
-    groupCollapsed: typeof consoleInstance.groupCollapsed,
-    groupEnd: typeof consoleInstance.groupEnd,
-    info: typeof consoleInstance.info,
-    log: typeof consoleInstance.log,
-    profile: typeof consoleInstance.profile,
-    profileEnd: typeof consoleInstance.profileEnd,
-    table: typeof consoleInstance.table,
-    time: typeof consoleInstance.time,
-    timeEnd: typeof consoleInstance.timeEnd,
-    timeLog: typeof consoleInstance.timeLog,
-    timeStamp: typeof consoleInstance.timeStamp,
-    trace: typeof consoleInstance.trace,
-    warn: typeof consoleInstance.warn,
-  },
-  detachedOutput: detachedChunks.join(""),
-  detachedErrorOutput: detachedErrors.join(""),
-}));
-"#,
-    );
-}
-
-fn child_process_conformance_matches_host_node() {
-    assert_conformance(
-        "child-process",
-        r#"
-import childProcess from "node:child_process";
-const syncStdout = childProcess.spawnSync(
-  "node",
-  ["-e", "process.stdout.write(process.argv[1] ?? '')", "alpha-sync"],
-);
-const syncError = childProcess.spawnSync(
-  "node",
-  ["-e", "process.stderr.write('sync-error'); throw new Error('sync-fail');"],
-);
-
-const asyncEchoResult = await new Promise((resolve, reject) => {
-  const child = childProcess.spawn(
-    "node",
-    [
-      "-e",
-      "let data=''; let settled = false; const fallback = setTimeout(() => { if (!settled) process.exit(19); }, 50); process.stdin.on('data', (chunk) => { data += chunk; }); process.stdin.on('end', () => { settled = true; clearTimeout(fallback); process.exit(data === 'beta-async' ? 0 : 17); });",
-    ],
-  );
-  const timer = setTimeout(() => {
-    reject(new Error("spawn(node async echo) did not close within 2s"));
-  }, 2000);
-  const stdout = [];
-  const stderr = [];
-  child.stdout.on("data", (chunk) => {
-    stdout.push(Buffer.from(chunk));
-  });
-  child.stderr.on("data", (chunk) => {
-    stderr.push(Buffer.from(chunk));
-  });
-  child.stdin.write(Buffer.from("beta-async"));
-  child.stdin.end();
-  child.on("error", reject);
-  child.on("close", (code, signal) => {
-    clearTimeout(timer);
-    resolve({
-      code,
-      signal,
-      stdoutBase64: Buffer.concat(stdout).toString("base64"),
-      stderrBase64: Buffer.concat(stderr).toString("base64"),
-    });
-  });
-});
-
-const asyncErrorResult = await new Promise((resolve, reject) => {
-  const child = childProcess.spawn(
-    "node",
-    [
-      "-e",
-      "setTimeout(() => { process.stderr.write('async-error'); throw new Error('async-fail'); }, 10);",
-    ],
-  );
-  const timer = setTimeout(() => {
-    reject(new Error("spawn(node async failure) did not close within 2s"));
-  }, 2000);
-  const stdout = [];
-  const stderr = [];
-  child.stdout.on("data", (chunk) => {
-    stdout.push(Buffer.from(chunk));
-  });
-  child.stderr.on("data", (chunk) => {
-    stderr.push(Buffer.from(chunk));
-  });
-  child.on("error", reject);
-  child.on("close", (code, signal) => {
-    clearTimeout(timer);
-    resolve({
-      code,
-      signal,
-      stdoutBase64: Buffer.concat(stdout).toString("base64"),
-      stderrBase64: Buffer.concat(stderr).toString("base64"),
-    });
-  });
-});
-
-console.log(JSON.stringify({
-  syncStdoutStatus: syncStdout.status,
-  syncStdoutTrimmed: Buffer.from(syncStdout.stdout ?? []).toString("utf8").trim(),
-  syncStdoutStderrBase64: Buffer.from(syncStdout.stderr ?? []).toString("base64"),
-  syncErrorStatus: syncError.status,
-  syncErrorStdoutBase64: Buffer.from(syncError.stdout ?? []).toString("base64"),
-  syncErrorHasMarker: Buffer.from(syncError.stderr ?? []).toString("utf8").includes("sync-error"),
-  syncErrorHasNonZeroStatus: (syncError.status ?? 0) !== 0,
-  asyncEchoCode: asyncEchoResult.code,
-  asyncEchoSignal: asyncEchoResult.signal,
-  asyncEchoStdoutBase64: asyncEchoResult.stdoutBase64,
-  asyncEchoStderrBase64: asyncEchoResult.stderrBase64,
-  asyncErrorCode: asyncErrorResult.code,
-  asyncErrorSignal: asyncErrorResult.signal,
-  asyncErrorStdoutBase64: asyncErrorResult.stdoutBase64,
-  asyncErrorHasNonZeroStatus: (asyncErrorResult.code ?? 0) !== 0,
-}));
-"#,
-    );
-}
-
-fn child_process_fork_supports_basic_ipc_impl() {
-    let cwd = temp_dir("builtin-child-process-fork-ipc");
-    let entrypoint = cwd.join("entry.mjs");
-    let worker = cwd.join("worker.mjs");
-    write_fixture(
-        &worker,
-        r#"
-process.send({
-  type: "ready",
-  connected: process.connected,
-  argv: process.argv.slice(-1),
-});
-
-process.on("message", (message) => {
-  process.send({
-    type: "pong",
-    value: message.value + 1,
-    connected: process.connected,
-  });
-  process.exit(0);
-});
-"#,
-    );
-    write_fixture(
-        &entrypoint,
-        r#"
-import childProcess from "node:child_process";
-import { Buffer } from "node:buffer";
-
-const child = childProcess.fork("./worker.mjs", ["worker-arg"]);
-const stdout = [];
-const messages = [];
-const errors = [];
-let sendReturn = null;
-
-child.stdout.on("data", (chunk) => stdout.push(Buffer.from(chunk)));
-child.on("error", (error) => errors.push({
-  name: error?.name ?? null,
-  message: error?.message ?? null,
-  code: error?.code ?? null,
-}));
-child.on("message", (message) => {
-  messages.push(message);
-  if (message.type === "ready") {
-    sendReturn = child.send({ type: "ping", value: 41 });
-  }
-});
-
-const exit = await new Promise((resolve) => {
-  child.on("close", (code, signal) => resolve({ code, signal }));
-});
-
-console.log(JSON.stringify({
-  connectedAfterFork: child.connected,
-  sendReturn,
-  messages,
-  errors,
-  stdoutBase64: Buffer.concat(stdout).toString("base64"),
-  exit,
-}));
-"#,
-    );
-
-    let guest = run_guest_probe_with_config(
-        "child-process-fork-ipc",
-        &cwd,
-        &entrypoint,
-        HashMap::new(),
-        wire_permissions_allow_all(),
-        &["child_process"],
-    );
-
-    let pretty_guest = serde_json::to_string_pretty(&guest).expect("pretty guest JSON");
-    assert_eq!(
-        guest["sendReturn"],
-        Value::Bool(true),
-        "guest result:\n{pretty_guest}"
-    );
-    assert_eq!(
-        guest["errors"],
-        Value::Array(Vec::new()),
-        "guest result:\n{pretty_guest}"
-    );
-    assert_eq!(guest["stdoutBase64"], Value::String(String::new()));
-    assert_eq!(guest["exit"]["code"], Value::from(0));
-    assert_eq!(guest["exit"]["signal"], Value::Null);
-    assert_eq!(
-        guest["messages"][0]["type"],
-        Value::String(String::from("ready"))
-    );
-    assert_eq!(guest["messages"][0]["connected"], Value::Bool(true));
-    assert_eq!(
-        guest["messages"][0]["argv"][0],
-        Value::String(String::from("worker-arg"))
-    );
-    assert_eq!(
-        guest["messages"][1]["type"],
-        Value::String(String::from("pong"))
-    );
-    assert_eq!(guest["messages"][1]["value"], Value::from(42));
-    assert_eq!(guest["messages"][1]["connected"], Value::Bool(true));
-}
-
-#[test]
-fn child_process_fork_supports_basic_ipc() {
-    run_isolated_builtin_conformance_test("child-process-fork-ipc");
-}
-
-fn child_process_exec_preserves_spawn_error_codes_impl() {
-    assert_node_available();
-
-    let cwd = temp_dir("builtin-child-process-exec-spawn-error-code");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-import childProcess from "node:child_process";
-
-const result = await new Promise((resolve) => {
-  const callbacks = [];
-  const closeEvents = [];
-  const child = childProcess.exec(
-    "/definitely/not/a/binary",
-    (err, stdout, stderr) => {
-      callbacks.push({
-        code: err?.code ?? null,
-        errno: typeof err?.errno === "number" ? err.errno : null,
-        syscall: err?.syscall ?? null,
-        path: err?.path ?? null,
-        stdout,
-        stderr,
-      });
-      setTimeout(() => resolve({ callbacks, closeEvents }), 0);
-    },
-  );
-  child.on("close", (code, signal) => {
-    closeEvents.push({
-      code: code ?? null,
-      signal: signal ?? null,
-    });
-  });
-  child.on("error", () => {});
-});
-
-console.log(JSON.stringify(result));
-"#,
-    );
-
-    let guest = run_guest_probe_with_config(
-        "child-process-exec-spawn-error-code",
-        &cwd,
-        &entrypoint,
-        HashMap::new(),
-        wire_permissions_allow_all(),
-        &["child_process"],
-    );
-
-    assert_eq!(
-        guest["callbacks"][0]["code"],
-        Value::String(String::from("ENOENT")),
-        "guest exec() callback should preserve the original spawn error code",
-    );
-    assert_eq!(
-        guest["callbacks"].as_array().map(Vec::len),
-        Some(1),
-        "guest exec() callback should not be re-fired after a spawn error"
-    );
-    assert_eq!(
-        guest["callbacks"][0]["stdout"],
-        Value::String(String::new())
-    );
-    assert_eq!(
-        guest["callbacks"][0]["stderr"],
-        Value::String(String::new())
-    );
-}
-
-#[test]
-fn child_process_exec_preserves_spawn_error_codes() {
-    run_isolated_builtin_conformance_test("child-process-exec-spawn-error-code");
-}
-
-fn child_process_rejects_native_elf_binaries_before_wasm_compile_impl() {
-    let cwd = temp_dir("builtin-child-process-native-elf-reject");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-import childProcess from "node:child_process";
-import fs from "node:fs";
-
-const fakeRgPath = "/tmp/fake-rg";
-fs.writeFileSync(
-  fakeRgPath,
-  Buffer.from([0x7f, 0x45, 0x4c, 0x46, 0x02, 0x01, 0x01, 0x00]),
-);
-fs.chmodSync(fakeRgPath, 0o755);
-
-const syncResult = childProcess.spawnSync(fakeRgPath, ["--version"]);
-
-const asyncResult = await new Promise((resolve) => {
-  const child = childProcess.spawn(fakeRgPath, ["--version"]);
-  child.once("error", (error) => {
-    resolve({
-      code: error?.code ?? null,
-      message: error?.message ?? null,
-    });
-  });
-});
-
-console.log(JSON.stringify({
-  sync: {
-    status: syncResult.status,
-    errorCode: syncResult.error?.code ?? null,
-    errorMessage: syncResult.error?.message ?? null,
-    stderr: Buffer.isBuffer(syncResult.stderr)
-      ? syncResult.stderr.toString("utf8")
-      : String(syncResult.stderr ?? ""),
-  },
-  async: asyncResult,
-}));
-"#,
-    );
-
-    let guest = run_guest_probe_with_config(
-        "child-process-native-elf-reject",
-        &cwd,
-        &entrypoint,
-        HashMap::new(),
-        wire_permissions_allow_all(),
-        &["child_process", "fs"],
-    );
-
-    assert_eq!(guest["sync"]["status"], Value::Number(1.into()));
-    assert_eq!(
-        guest["sync"]["errorCode"],
-        Value::String(String::from("ERR_NATIVE_BINARY_NOT_SUPPORTED"))
-    );
-    let sync_stderr = guest["sync"]["stderr"]
-        .as_str()
-        .expect("sync stderr string");
-    assert!(
-        sync_stderr.contains("ERR_NATIVE_BINARY_NOT_SUPPORTED"),
-        "sync stderr should expose the explicit native-binary rejection: {sync_stderr}"
-    );
-    assert!(
-        sync_stderr.contains("ELF"),
-        "sync stderr should name the detected ELF format: {sync_stderr}"
-    );
-    assert!(
-        !sync_stderr.contains("CompileError"),
-        "sync stderr must not fall back to the WASM compile error: {sync_stderr}"
-    );
-    assert_eq!(
-        guest["async"]["code"],
-        Value::String(String::from("ERR_NATIVE_BINARY_NOT_SUPPORTED"))
-    );
-    let async_message = guest["async"]["message"]
-        .as_str()
-        .expect("async error message string");
-    assert!(
-        async_message.contains("ERR_NATIVE_BINARY_NOT_SUPPORTED"),
-        "async spawn error should preserve the explicit native-binary code: {async_message}"
-    );
-    assert!(
-        async_message.contains("ELF"),
-        "async spawn error should name the detected ELF format: {async_message}"
-    );
-    assert!(
-        !async_message.contains("CompileError"),
-        "async spawn error must not fall back to the WASM compile error: {async_message}"
-    );
-}
-
-#[test]
-fn child_process_rejects_native_elf_binaries_before_wasm_compile() {
-    run_isolated_builtin_conformance_test("child-process-native-elf-reject");
-}
-
-fn child_process_kill_numeric_signals_match_host_node_impl() {
-    assert_node_available();
-
-    let cwd = temp_dir("builtin-child-process-kill-numeric-signal");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-import childProcess from "node:child_process";
-
-async function captureKill(signal) {
-  const child = childProcess.spawn("node", ["-e", "setInterval(() => {}, 1000)"]);
-  const killResult = child.kill(signal);
-  const signalCodeAfterKill = child.signalCode ?? null;
-  return await new Promise((resolve, reject) => {
-    const timer = setTimeout(() => {
-      reject(new Error(`spawn(node interval) kill(${String(signal)}) did not exit within 2s`));
-    }, 2000);
-    child.on("error", reject);
-    child.on("exit", (code, exitSignal) => {
-      clearTimeout(timer);
-      resolve({
-        killResult,
-        signalCodeAfterKill,
-        code: code ?? null,
-        signal: exitSignal ?? null,
-        signalCodeAfterExit: child.signalCode ?? null,
-        killed: child.killed,
-      });
-    });
-  });
-}
-
-console.log(JSON.stringify({
-  numeric: await captureKill(11),
-  alias: await captureKill("SIGIOT"),
-}));
-"#,
-    );
-
-    let host = run_host_probe(&cwd, &entrypoint);
-    let guest = run_guest_probe_with_config(
-        "child-process-kill-numeric-signal",
-        &cwd,
-        &entrypoint,
-        HashMap::new(),
-        wire_permissions_allow_all(),
-        &["child_process"],
-    );
-
-    assert_eq!(
-        guest,
-        host,
-        "guest child_process.kill signal mapping diverged from host Node\nhost: {}\nguest: {}",
-        serde_json::to_string_pretty(&host).expect("pretty host JSON"),
-        serde_json::to_string_pretty(&guest).expect("pretty guest JSON")
-    );
-    assert_eq!(
-        guest["numeric"]["signalCodeAfterExit"],
-        Value::String(String::from("SIGSEGV"))
-    );
-}
-
-#[test]
-fn child_process_kill_numeric_signals_match_host_node() {
-    run_isolated_builtin_conformance_test("child-process-kill-numeric-signal");
-}
-
-fn child_process_abort_reports_sigabrt_impl() {
-    assert_node_available();
-
-    let cwd = temp_dir("builtin-child-process-abort-signal");
-    let entrypoint = cwd.join("entry.mjs");
-    // Use an inline `node -e` child rather than spawning a child *file*. The
-    // previous version wrote the child script to a hardcoded host `/tmp` path
-    // and spawned it with `cwd: "/tmp"`; that path is written into the guest
-    // VFS by the parent, but the spawned guest child resolves the module
-    // against the runner's filesystem, so it fails with `Cannot find module`
-    // (exiting with code 1) before ever calling `process.abort()`. Whether the
-    // file happened to be visible depended on the CI runner's `/tmp` layout,
-    // which made this case flaky. The inline form mirrors the sibling
-    // `child-process-kill-numeric-signal` case and exercises the exact same
-    // guest behavior — `process.abort()` mapping to a SIGABRT-shaped exit —
-    // without any cross-runtime filesystem dependency.
-    write_fixture(
-        &entrypoint,
-        r#"
-import childProcess from "node:child_process";
-
-const child = childProcess.spawn("node", ["-e", "process.abort();"]);
-const result = await new Promise((resolve, reject) => {
-  const timer = setTimeout(() => {
-    reject(new Error("spawn(node abort child) did not exit within 2s"));
-  }, 2000);
-  child.on("error", reject);
-  child.on("exit", (code, signal) => {
-    clearTimeout(timer);
-    resolve({
-      code: code ?? null,
-      signal: signal ?? null,
-      signalCodeAfterExit: child.signalCode ?? null,
-      killed: child.killed,
-    });
-  });
-});
-
-console.log(JSON.stringify(result));
-"#,
-    );
-
-    let host = run_host_probe(&cwd, &entrypoint);
-    let guest = run_guest_probe_with_config(
-        "child-process-abort-signal",
-        &cwd,
-        &entrypoint,
-        HashMap::new(),
-        wire_permissions_allow_all(),
-        &["child_process"],
-    );
-
-    assert_eq!(guest["code"], host["code"]);
-    assert_eq!(guest["signal"], host["signal"]);
-    assert_eq!(guest["signalCodeAfterExit"], host["signalCodeAfterExit"]);
-    assert_eq!(guest["killed"], host["killed"]);
-    assert_eq!(guest["signal"], Value::String(String::from("SIGABRT")));
-    assert_eq!(
-        guest["signalCodeAfterExit"],
-        Value::String(String::from("SIGABRT"))
-    );
-}
-
-#[test]
-fn child_process_abort_reports_sigabrt() {
-    run_isolated_builtin_conformance_test("child-process-abort-signal");
-}
-
-fn path_conformance_matches_host_node() {
-    assert_conformance(
-        "path",
-        r#"
-import * as pathNs from "node:path";
-
-const path = pathNs.default ?? pathNs;
-
-console.log(JSON.stringify({
-  join: path.join("/virtual", "project", "file.txt"),
-  resolve: path.resolve("/virtual/root", "alpha", "..", "beta", "file.txt"),
-  dirname: path.dirname("/virtual/root/beta/file.txt"),
-  basename: path.basename("/virtual/root/beta/file.txt"),
-  extname: path.extname("/virtual/root/beta/file.txt"),
-  isAbsoluteFile: path.isAbsolute("/virtual/root/beta/file.txt"),
-  isAbsoluteRelative: path.isAbsolute("virtual/root/beta/file.txt"),
-  relative: path.relative("/virtual/root/alpha", "/virtual/root/beta/file.txt"),
-  normalize: path.normalize("/virtual//root/alpha/../beta//file.txt"),
-}));
-"#,
-    );
-}
-
-fn crypto_conformance_matches_host_node() {
-    assert_conformance(
-        "crypto",
-        r#"
-import crypto from "node:crypto";
-
-const random = crypto.randomBytes(16);
-const uuid = crypto.randomUUID();
-const ciphers = crypto.getCiphers();
-const curves = crypto.getCurves();
-
-console.log(JSON.stringify({
-  hashesIncludeSha256: crypto.getHashes().includes("sha256"),
-  ciphersIncludeAes256Cbc: ciphers.includes("aes-256-cbc"),
-  ciphersIncludeAes256Gcm: ciphers.includes("aes-256-gcm"),
-  ciphersSorted: ciphers.join(",") === [...ciphers].sort().join(","),
-  curvesIncludePrime256v1: curves.includes("prime256v1"),
-  curvesIncludeSecp384r1: curves.includes("secp384r1"),
-  curvesSorted: curves.join(",") === [...curves].sort().join(","),
-  sha256: crypto.createHash("sha256").update("secure-exec").digest("hex"),
-  hmacSha256: crypto.createHmac("sha256", "shared-secret").update("secure-exec").digest("hex"),
-  randomBytesLength: random.length,
-  randomBytesHexLength: random.toString("hex").length,
-  randomBytesAllZero: Array.from(random).every((value) => value === 0),
-  randomUuidValid: /^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/i.test(uuid),
-}));
-"#,
-    );
-}
-
-fn crypto_extended_surface_matches_host_node() {
-    assert_conformance(
-        "crypto-extended",
-        r#"
-import crypto from "node:crypto";
-
-const cipherKey = Buffer.alloc(32, 7);
-const cipherIv = Buffer.alloc(16, 9);
-const cipherPlaintext = Buffer.from("secure-exec-crypto-surface", "utf8");
-const cipher = crypto.createCipheriv("aes-256-cbc", cipherKey, cipherIv);
-const encrypted = Buffer.concat([cipher.update(cipherPlaintext), cipher.final()]);
-const decipher = crypto.createDecipheriv("aes-256-cbc", cipherKey, cipherIv);
-const decrypted = Buffer.concat([decipher.update(encrypted), decipher.final()]).toString("utf8");
-
-const pbkdf2Hex = await new Promise((resolve, reject) => {
-  crypto.pbkdf2("password", "salt", 10, 32, "sha256", (error, result) => {
-    if (error) {
-      reject(error);
-      return;
-    }
-    resolve(result.toString("hex"));
-  });
-});
-
-const scryptHex = await new Promise((resolve, reject) => {
-  crypto.scrypt("password", "salt", 32, { N: 1024, r: 8, p: 1 }, (error, result) => {
-    if (error) {
-      reject(error);
-      return;
-    }
-    resolve(result.toString("hex"));
-  });
-});
-
-const { publicKey, privateKey } = crypto.generateKeyPairSync("rsa", { modulusLength: 1024 });
-const privatePem = privateKey.export({ format: "pem", type: "pkcs8" });
-const publicPem = publicKey.export({ format: "pem", type: "spki" });
-const importedPrivateKey = crypto.createPrivateKey(privatePem);
-const importedPublicKey = crypto.createPublicKey(publicPem);
-
-const signer = crypto.createSign("sha256");
-signer.update("secure-exec-signature");
-const signature = signer.sign(importedPrivateKey);
-
-const verifier = crypto.createVerify("sha256");
-verifier.update("secure-exec-signature");
-const signatureVerified = verifier.verify(importedPublicKey, signature);
-
-const oneShotSignature = crypto.sign("sha256", Buffer.from("secure-exec-signature"), importedPrivateKey);
-const oneShotVerified = crypto.verify(
-  "sha256",
-  Buffer.from("secure-exec-signature"),
-  importedPublicKey,
-  oneShotSignature,
-);
-
-const rsaCiphertext = crypto.publicEncrypt(
-  { key: importedPublicKey, padding: crypto.constants.RSA_PKCS1_PADDING },
-  Buffer.from("secure-exec-rsa", "utf8"),
-);
-const rsaPlaintext = crypto.privateDecrypt(
-  { key: importedPrivateKey, padding: crypto.constants.RSA_PKCS1_PADDING },
-  rsaCiphertext,
-).toString("utf8");
-
-const secretKey = crypto.createSecretKey(Buffer.from("abcd", "utf8"));
-const generatedHmacKey = crypto.generateKeySync("hmac", { length: 256 });
-const generatedAesKey = crypto.generateKeySync("aes", { length: 128 });
-const generatedPrime = crypto.generatePrimeSync(64, { bigint: true });
-
-const groupAlice = crypto.getDiffieHellman("modp14");
-const groupBob = crypto.getDiffieHellman("modp14");
-groupAlice.generateKeys();
-groupBob.generateKeys();
-const groupSecretA = groupAlice.computeSecret(groupBob.getPublicKey());
-const groupSecretB = groupBob.computeSecret(groupAlice.getPublicKey());
-
-const ecdhAlice = crypto.createECDH("prime256v1");
-const ecdhBob = crypto.createECDH("prime256v1");
-ecdhAlice.generateKeys();
-ecdhBob.generateKeys();
-const ecdhSecretA = ecdhAlice.computeSecret(ecdhBob.getPublicKey());
-const ecdhSecretB = ecdhBob.computeSecret(ecdhAlice.getPublicKey());
-
-const x25519Alice = crypto.generateKeyPairSync("x25519");
-const x25519Bob = crypto.generateKeyPairSync("x25519");
-const x25519SecretA = crypto.diffieHellman({
-  privateKey: x25519Alice.privateKey,
-  publicKey: x25519Bob.publicKey,
-});
-const x25519SecretB = crypto.diffieHellman({
-  privateKey: x25519Bob.privateKey,
-  publicKey: x25519Alice.publicKey,
-});
-
-const generatedAsyncPair = await new Promise((resolve, reject) => {
-  crypto.generateKeyPair("rsa", { modulusLength: 1024 }, (error, publicKeyValue, privateKeyValue) => {
-    if (error) {
-      reject(error);
-      return;
-    }
-    resolve({
-      publicType: publicKeyValue.type,
-      privateType: privateKeyValue.type,
-      publicAsymmetricKeyType: publicKeyValue.asymmetricKeyType,
-      privateAsymmetricKeyType: privateKeyValue.asymmetricKeyType,
-    });
-  });
-});
-
-console.log(JSON.stringify({
-  cipherHex: encrypted.toString("hex"),
-  decipheredText: decrypted,
-  pbkdf2SyncHex: crypto.pbkdf2Sync("password", "salt", 10, 32, "sha256").toString("hex"),
-  pbkdf2Hex,
-  scryptSyncHex: crypto.scryptSync("password", "salt", 32, { N: 1024, r: 8, p: 1 }).toString("hex"),
-  scryptHex,
-  importedPrivateType: importedPrivateKey.type,
-  importedPrivateAsymmetricKeyType: importedPrivateKey.asymmetricKeyType,
-  importedPublicType: importedPublicKey.type,
-  importedPublicAsymmetricKeyType: importedPublicKey.asymmetricKeyType,
-  importedPrivateEquals: importedPrivateKey.equals(crypto.createPrivateKey(privatePem)),
-  importedPublicEquals: importedPublicKey.equals(crypto.createPublicKey(publicPem)),
-  signatureLength: signature.length,
-  signatureVerified,
-  oneShotSignatureLength: oneShotSignature.length,
-  oneShotVerified,
-  rsaCiphertextLength: rsaCiphertext.length,
-  rsaPlaintext,
-  secretKeyType: secretKey.type,
-  secretKeyExportHex: secretKey.export().toString("hex"),
-  generatedHmacKeyType: generatedHmacKey.type,
-  generatedHmacKeyLength: generatedHmacKey.export().length,
-  generatedAesKeyType: generatedAesKey.type,
-  generatedAesKeyLength: generatedAesKey.export().length,
-  generatedPrimeType: typeof generatedPrime,
-  generatedPrimePositive: generatedPrime > 0n,
-  groupVerifyError: groupAlice.verifyError,
-  groupSecretMatches: groupSecretA.equals(groupSecretB),
-  groupPrimeLength: groupAlice.getPrime().length,
-  ecdhSecretMatches: ecdhSecretA.equals(ecdhSecretB),
-  ecdhPublicKeyLength: ecdhAlice.getPublicKey().length,
-  x25519SecretMatches: x25519SecretA.equals(x25519SecretB),
-  x25519SecretLength: x25519SecretA.length,
-  generatedAsyncPair,
-}));
-"#,
-    );
-}
-
-fn crypto_basic_fixture_matches_shared_expected_impl() {
-    assert_node_available();
-
-    let fixture_json = include_str!("../../../tests/fixtures/crypto-basic-conformance.json");
-    let fixture: Value = serde_json::from_str(fixture_json).expect("parse crypto fixture");
-    let script = r#"
-import crypto from "node:crypto";
-
-const fixture = __CRYPTO_FIXTURE__;
-const pbkdf2Hex = await new Promise((resolve, reject) => {
-  crypto.pbkdf2(fixture.password, fixture.salt, fixture.iterations, fixture.keyLength, "sha256", (error, value) => {
-    if (error) reject(error);
-    else resolve(value.toString("hex"));
-  });
-});
-const pbkdf2Sha384Hex = await new Promise((resolve, reject) => {
-  crypto.pbkdf2(fixture.password, fixture.salt, fixture.iterations, fixture.keyLength, "sha384", (error, value) => {
-    if (error) reject(error);
-    else resolve(value.toString("hex"));
-  });
-});
-const scryptHex = await new Promise((resolve, reject) => {
-  crypto.scrypt(fixture.password, fixture.salt, fixture.keyLength, fixture.scrypt, (error, value) => {
-    if (error) reject(error);
-    else resolve(value.toString("hex"));
-  });
-});
-const generatedPrime = crypto.generatePrimeSync(fixture.expected.primes.bits, { bigint: true });
-const generatedSafePrime = crypto.generatePrimeSync(fixture.expected.primes.safeBits, {
-  bigint: true,
-  safe: true,
-});
-const generatedPrimeBuffer = crypto.generatePrimeSync(fixture.expected.primes.bufferBits);
-const bytesFromHex = (hex) => Uint8Array.from(hex.match(/../g).map((byte) => parseInt(byte, 16)));
-const bytesToHex = (bytes) => Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
-const aesCbcKey = Buffer.from(fixture.aesCbc.keyHex, "hex");
-const aesCbcIv = Buffer.from(fixture.aesCbc.ivHex, "hex");
-const cipher = crypto.createCipheriv(fixture.aesCbc.algorithm, aesCbcKey, aesCbcIv);
-const aes256CbcCiphertext = cipher.update(fixture.aesCbc.plaintext, "utf8", "hex") + cipher.final("hex");
-const decipher = crypto.createDecipheriv(fixture.aesCbc.algorithm, aesCbcKey, aesCbcIv);
-const aes256CbcPlaintext = decipher.update(aes256CbcCiphertext, "hex", "utf8") + decipher.final("utf8");
-const aesGcmKey = Buffer.from(fixture.aesGcm.keyHex, "hex");
-const aesGcmIv = Buffer.from(fixture.aesGcm.ivHex, "hex");
-const aesGcmAad = Buffer.from(fixture.aesGcm.aad);
-const gcmCipher = crypto.createCipheriv(fixture.aesGcm.algorithm, aesGcmKey, aesGcmIv, {
-  authTagLength: fixture.aesGcm.authTagLength,
-});
-gcmCipher.setAAD(aesGcmAad);
-const aes256GcmCiphertext = gcmCipher.update(fixture.aesGcm.plaintext, "utf8", "hex") + gcmCipher.final("hex");
-const aes256GcmAuthTag = gcmCipher.getAuthTag().toString("hex");
-const gcmDecipher = crypto.createDecipheriv(fixture.aesGcm.algorithm, aesGcmKey, aesGcmIv, {
-  authTagLength: fixture.aesGcm.authTagLength,
-});
-gcmDecipher.setAAD(aesGcmAad);
-gcmDecipher.setAuthTag(bytesFromHex(aes256GcmAuthTag));
-const aes256GcmPlaintext = gcmDecipher.update(aes256GcmCiphertext, "hex", "utf8") + gcmDecipher.final("utf8");
-const subtleKey = await crypto.subtle.importKey("raw", aesGcmKey, { name: "AES-GCM" }, false, ["encrypt", "decrypt"]);
-const subtleAlgorithm = {
-  name: "AES-GCM",
-  iv: aesGcmIv,
-  additionalData: aesGcmAad,
-  tagLength: fixture.aesGcm.authTagLength * 8,
-};
-const aes256GcmWebCryptoBytes = new Uint8Array(await crypto.subtle.encrypt(
-  subtleAlgorithm,
-  subtleKey,
-  Buffer.from(fixture.aesGcm.plaintext),
-));
-const aes256GcmWebCryptoCiphertext = bytesToHex(aes256GcmWebCryptoBytes);
-const aes256GcmWebCryptoPlaintext = Buffer.from(await crypto.subtle.decrypt(
-  subtleAlgorithm,
-  subtleKey,
-  aes256GcmWebCryptoBytes,
-)).toString("utf8");
-const importedPrivateKey = crypto.createPrivateKey(fixture.rsa.privatePem);
-const importedPublicKey = crypto.createPublicKey(fixture.rsa.publicPem);
-const rsaSignature = crypto.createSign("sha256").update(fixture.rsa.message).sign(importedPrivateKey);
-const rsaVerified = crypto.createVerify("sha256").update(fixture.rsa.message).verify(importedPublicKey, rsaSignature);
-const rsaExpectedVerified = crypto.createVerify("sha256")
-  .update(fixture.rsa.message)
-  .verify(importedPublicKey, Buffer.from(fixture.rsa.sha256SignatureHex, "hex"));
-const rsaOneShotSignature = crypto.sign("sha256", Buffer.from(fixture.rsa.message), importedPrivateKey);
-const rsaOneShotVerified = crypto.verify(
-  "sha256",
-  Buffer.from(fixture.rsa.message),
-  importedPublicKey,
-  rsaOneShotSignature,
-);
-const dhAlice = crypto.createDiffieHellman(
-  Buffer.from(fixture.dh.primeHex, "hex"),
-  Buffer.from(fixture.dh.generatorHex, "hex"),
-);
-const dhBob = crypto.createDiffieHellman(
-  Buffer.from(fixture.dh.primeHex, "hex"),
-  Buffer.from(fixture.dh.generatorHex, "hex"),
-);
-dhAlice.setPrivateKey(Buffer.from(fixture.dh.privateAHex, "hex"));
-dhAlice.setPublicKey(Buffer.from(fixture.dh.publicAHex, "hex"));
-dhBob.setPrivateKey(Buffer.from(fixture.dh.privateBHex, "hex"));
-dhBob.setPublicKey(Buffer.from(fixture.dh.publicBHex, "hex"));
-const dhSecretA = dhAlice.computeSecret(Buffer.from(fixture.dh.publicBHex, "hex"));
-const dhSecretB = dhBob.computeSecret(Buffer.from(fixture.dh.publicAHex, "hex"));
-const ecdhAlice = crypto.createECDH(fixture.ecdh.curve);
-const ecdhBob = crypto.createECDH(fixture.ecdh.curve);
-ecdhAlice.setPrivateKey(Buffer.from(fixture.ecdh.privateAHex, "hex"));
-ecdhBob.setPrivateKey(Buffer.from(fixture.ecdh.privateBHex, "hex"));
-const ecdhSecretA = ecdhAlice.computeSecret(Buffer.from(fixture.ecdh.publicBHex, "hex"));
-const ecdhSecretB = ecdhBob.computeSecret(Buffer.from(fixture.ecdh.publicAHex, "hex"));
-
-console.log(JSON.stringify({
-  hashes: crypto.getHashes(),
-  ciphers: crypto.getCiphers(),
-  curves: crypto.getCurves(),
-  md5: crypto.createHash("md5").update(fixture.message).digest("hex"),
-  sha224: crypto.createHash("sha224").update(fixture.message).digest("hex"),
-  sha256: crypto.createHash("sha256").update(fixture.message).digest("hex"),
-  sha384: crypto.createHash("sha384").update(fixture.message).digest("hex"),
-  hmacSha256: crypto.createHmac("sha256", fixture.hmacKey).update(fixture.message).digest("hex"),
-  hmacSha384: crypto.createHmac("sha384", fixture.hmacKey).update(fixture.message).digest("hex"),
-  pbkdf2SyncHex: crypto.pbkdf2Sync(fixture.password, fixture.salt, fixture.iterations, fixture.keyLength, "sha256").toString("hex"),
-  pbkdf2Sha384Hex,
-  pbkdf2Hex,
-  scryptSyncHex: crypto.scryptSync(fixture.password, fixture.salt, fixture.keyLength, fixture.scrypt).toString("hex"),
-  scryptHex,
-  generatedPrimeType: typeof generatedPrime,
-  generatedPrimeBits: generatedPrime.toString(2).length,
-  generatedPrimePositive: generatedPrime > 0n,
-  generatedSafePrimeBits: generatedSafePrime.toString(2).length,
-  generatedSafePrimePositive: generatedSafePrime > 0n,
-  generatedPrimeBufferBits: fixture.expected.primes.bufferBits,
-  generatedPrimeBufferByteLength: generatedPrimeBuffer.byteLength,
-  aes256CbcCiphertext,
-  aes256CbcPlaintext,
-  aes256GcmCiphertext,
-  aes256GcmAuthTag,
-  aes256GcmPlaintext,
-  aes256GcmWebCryptoCiphertext,
-  aes256GcmWebCryptoPlaintext,
-  rsaSignatureHex: rsaSignature.toString("hex"),
-  rsaVerified,
-  rsaExpectedVerified,
-  rsaOneShotSignatureHex: rsaOneShotSignature.toString("hex"),
-  rsaOneShotVerified,
-  dhPublicAHex: dhAlice.getPublicKey("hex"),
-  dhPublicBHex: dhBob.getPublicKey("hex"),
-  dhSecretAHex: dhSecretA.toString("hex"),
-  dhSecretBHex: dhSecretB.toString("hex"),
-  ecdhPublicAHex: ecdhAlice.getPublicKey("hex"),
-  ecdhPublicBHex: ecdhBob.getPublicKey("hex"),
-  ecdhSecretAHex: ecdhSecretA.toString("hex"),
-  ecdhSecretBHex: ecdhSecretB.toString("hex"),
-}));
-"#
-    .replace("__CRYPTO_FIXTURE__", fixture_json);
-
-    let cwd = temp_dir("builtin-conformance-crypto-basic-fixture");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(&entrypoint, &script);
-    let guest = run_guest_probe("crypto-basic-fixture", &cwd, &entrypoint);
-    let expected = &fixture["expected"];
-    let dh_expected_secret = format!(
-        "{:0>width$}",
-        fixture["dh"]["secretHex"]
-            .as_str()
-            .expect("dh secret fixture must be a string"),
-        width = fixture["dh"]["primeHex"]
-            .as_str()
-            .expect("dh prime fixture must be a string")
-            .len()
-    );
-
-    assert_eq!(guest["hashes"], expected["hashes"]);
-    assert_eq!(guest["ciphers"], expected["ciphers"]);
-    assert_eq!(guest["curves"], expected["curves"]);
-    assert_eq!(guest["md5"], expected["md5"]);
-    assert_eq!(guest["sha224"], expected["sha224"]);
-    assert_eq!(guest["sha256"], expected["sha256"]);
-    assert_eq!(guest["sha384"], expected["sha384"]);
-    assert_eq!(guest["hmacSha256"], expected["hmacSha256"]);
-    assert_eq!(guest["hmacSha384"], expected["hmacSha384"]);
-    assert_eq!(guest["pbkdf2SyncHex"], expected["pbkdf2Sha256"]);
-    assert_eq!(guest["pbkdf2Hex"], expected["pbkdf2Sha256"]);
-    assert_eq!(guest["pbkdf2Sha384Hex"], expected["pbkdf2Sha384"]);
-    assert_eq!(guest["scryptSyncHex"], expected["scrypt"]);
-    assert_eq!(guest["scryptHex"], expected["scrypt"]);
-    assert_eq!(guest["generatedPrimeType"], json!("bigint"));
-    assert_eq!(guest["generatedPrimeBits"], expected["primes"]["bits"]);
-    assert_eq!(guest["generatedPrimePositive"], json!(true));
-    assert_eq!(
-        guest["generatedSafePrimeBits"],
-        expected["primes"]["safeBits"]
-    );
-    assert_eq!(guest["generatedSafePrimePositive"], json!(true));
-    assert_eq!(
-        guest["generatedPrimeBufferBits"],
-        expected["primes"]["bufferBits"]
-    );
-    assert_eq!(
-        guest["generatedPrimeBufferByteLength"],
-        expected["primes"]["bufferByteLength"]
-    );
-    assert_eq!(
-        guest["aes256CbcCiphertext"],
-        expected["aes256CbcCiphertext"]
-    );
-    assert_eq!(guest["aes256CbcPlaintext"], fixture["aesCbc"]["plaintext"]);
-    assert_eq!(
-        guest["aes256GcmCiphertext"],
-        expected["aes256GcmCiphertext"]
-    );
-    assert_eq!(guest["aes256GcmAuthTag"], expected["aes256GcmAuthTag"]);
-    assert_eq!(guest["aes256GcmPlaintext"], fixture["aesGcm"]["plaintext"]);
-    assert_eq!(
-        guest["aes256GcmWebCryptoCiphertext"],
-        expected["aes256GcmWebCryptoCiphertext"]
-    );
-    assert_eq!(
-        guest["aes256GcmWebCryptoPlaintext"],
-        fixture["aesGcm"]["plaintext"]
-    );
-    assert_eq!(
-        guest["rsaSignatureHex"],
-        fixture["rsa"]["sha256SignatureHex"]
-    );
-    assert_eq!(guest["rsaVerified"], json!(true));
-    assert_eq!(guest["rsaExpectedVerified"], json!(true));
-    assert_eq!(
-        guest["rsaOneShotSignatureHex"],
-        fixture["rsa"]["sha256SignatureHex"]
-    );
-    assert_eq!(guest["rsaOneShotVerified"], json!(true));
-    assert_eq!(guest["dhPublicAHex"], fixture["dh"]["publicAHex"]);
-    assert_eq!(guest["dhPublicBHex"], fixture["dh"]["publicBHex"]);
-    assert_eq!(guest["dhSecretAHex"], json!(dh_expected_secret));
-    assert_eq!(guest["dhSecretBHex"], json!(dh_expected_secret));
-    assert_eq!(guest["ecdhPublicAHex"], fixture["ecdh"]["publicAHex"]);
-    assert_eq!(guest["ecdhPublicBHex"], fixture["ecdh"]["publicBHex"]);
-    assert_eq!(guest["ecdhSecretAHex"], fixture["ecdh"]["secretHex"]);
-    assert_eq!(guest["ecdhSecretBHex"], fixture["ecdh"]["secretHex"]);
-}
-
-#[test]
-fn crypto_basic_fixture_matches_shared_expected_isolated() {
-    run_isolated_builtin_conformance_test("crypto-basic-fixture");
-}
-
-#[test]
-fn crypto_extended_surface_matches_host_node_isolated() {
-    run_isolated_builtin_conformance_test("crypto-extended");
-}
-
-fn events_conformance_matches_host_node() {
-    assert_conformance(
-        "events",
-        r#"
-import { EventEmitter } from "node:events";
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const events = require("events");
-const nodeEvents = require("node:events");
-
-const emitter = new EventEmitter();
-class DerivedEmitter extends require("events") {}
-const derived = new DerivedEmitter();
-const constructed = new (require("events"))();
-const seen = [];
-const metaNew = [];
-const metaRemove = [];
-const constructedSeen = [];
-const derivedSeen = [];
-const warningEvents = [];
-
-function persistent(value) {
-  seen.push(`on:${value}`);
-}
-
-function onTick() {}
-function onceTick() {}
-function prependTick() {}
-function prependOnceTick() {}
-function removeFirst() {}
-function removeSecond() {}
-function removeThird() {}
-function onceVisible() {}
-
-emitter.on("newListener", (eventName, listener) => {
-  if (eventName === "newListener") {
-    return;
-  }
-  metaNew.push({
-    eventName,
-    listenerName: listener.name || "anon",
-    tickCountBefore: emitter.listenerCount("tick"),
-    tickListenersBefore: emitter.listeners("tick").map((fn) => fn.name || "anon"),
-  });
-});
-
-const removalEmitter = new EventEmitter();
-removalEmitter.on("removeListener", (eventName, listener) => {
-  if (eventName === "removeListener") {
-    return;
-  }
-  metaRemove.push({
-    eventName,
-    listenerName: listener.name || "anon",
-    tickCountAfter: removalEmitter.listenerCount("tick"),
-    tickListenersAfter: removalEmitter.listeners("tick").map((fn) => fn.name || "anon"),
-    eventNamesAfter: removalEmitter.eventNames().sort(),
-  });
-});
-
-emitter.on("tick", persistent);
-emitter.once("tick", (value) => {
-  seen.push(`once:${value}`);
-});
-emitter.on("tick", onTick);
-emitter.once("tick", onceTick);
-emitter.prependListener("tick", prependTick);
-emitter.prependOnceListener("tick", prependOnceTick);
-const listenerViewEmitter = new EventEmitter();
-listenerViewEmitter.once("visible", onceVisible);
-const visibleListeners = listenerViewEmitter.listeners("visible");
-const visibleRawListeners = listenerViewEmitter.rawListeners("visible");
-emitter.emit("tick", "alpha");
-emitter.removeListener("tick", persistent);
-emitter.emit("tick", "beta");
-
-removalEmitter.on("tick", removeFirst);
-removalEmitter.on("tick", removeSecond);
-removalEmitter.on("pong", removeThird);
-removalEmitter.removeListener("tick", removeSecond);
-removalEmitter.removeAllListeners("tick");
-removalEmitter.removeAllListeners();
-
-constructed.on("ready", (value) => {
-  constructedSeen.push(`constructed:${value}`);
-});
-const constructedEmitHandled = constructed.emit("ready", "gamma");
-
-derived.on("tick", (value) => {
-  derivedSeen.push(`derived:${value}`);
-});
-const derivedEmitHandled = derived.emit("tick", "delta");
-
-process.on("warning", (warning) => {
-  warningEvents.push({
-    name: warning.name,
-    message: warning.message,
-    type: warning.type,
-    count: warning.count,
-    emitterMatches: warning.emitter === emitter,
-  });
-});
-
-for (let index = 0; index < 11; index += 1) {
-  emitter.on("warning-check", () => {});
-}
-emitter.once("warning-check", () => {});
-emitter.prependListener("warning-check", () => {});
-emitter.prependOnceListener("warning-check", () => {});
-
-const zeroMaxListenersEmitter = new EventEmitter();
-zeroMaxListenersEmitter.setMaxListeners(0);
-for (let index = 0; index < 12; index += 1) {
-  zeroMaxListenersEmitter.on("disabled-warning-check", () => {});
-}
-
-await new Promise((resolve) => setTimeout(resolve, 0));
-
-console.log(JSON.stringify({
-  bareEqualsNode: events === nodeEvents,
-  cjsEqualsEventEmitter: events === EventEmitter,
-  bareType: typeof events,
-  nodeType: typeof nodeEvents,
-  eventEmitterPropEqualsSelf: events.EventEmitter === events,
-  nodeEventEmitterPropEqualsSelf: nodeEvents.EventEmitter === nodeEvents,
-  constructedInstanceWorks: constructed instanceof EventEmitter,
-  constructedEmitHandled,
-  constructedSeen,
-  derivedInstanceWorks: derived instanceof EventEmitter,
-  derivedEmitHandled,
-  derivedSeen,
-  visibleListenersIsArray: Array.isArray(visibleListeners),
-  visibleRawListenersIsArray: Array.isArray(visibleRawListeners),
-  listenersUnwrapOnce: visibleListeners?.[0] === onceVisible,
-  rawListenersKeepWrapper: visibleRawListeners?.[0] !== onceVisible,
-  rawListenerTargetsOriginal: visibleRawListeners?.[0]?.listener === onceVisible,
-  metaNew,
-  metaRemove,
-  warningEvents,
-  seen,
-  listenerCount: emitter.listenerCount("tick"),
-}));
-"#,
-    );
-}
-
-fn stream_conformance_matches_host_node() {
-    assert_conformance(
-        "stream",
-        r#"
-import { createRequire } from "node:module";
-import * as streamNs from "node:stream";
-
-const stream = streamNs.default ?? streamNs;
-const require = createRequire(import.meta.url);
-const cjsStream = require("stream");
-
-class Source extends stream.Readable {
-  constructor() {
-    super();
-    this.sent = false;
-  }
-
-  _read() {
-    if (this.sent) {
-      return;
-    }
-    this.sent = true;
-    this.push("alpha");
-    this.push("beta");
-    this.push(null);
-  }
-}
-
-class Sink extends stream.Writable {
-  constructor(chunks) {
-    super();
-    this.chunks = chunks;
-  }
-
-  _write(chunk, _encoding, callback) {
-    this.chunks.push(Buffer.from(chunk).toString("utf8"));
-    callback();
-  }
-}
-
-class Upper extends stream.Transform {
-  _transform(chunk, _encoding, callback) {
-    callback(null, Buffer.from(chunk).toString("utf8").toUpperCase());
-  }
-}
-
-class IterableSource extends stream.Readable {
-  constructor(values) {
-    super({ objectMode: true });
-    this.values = [...values];
-  }
-
-  _read() {
-    if (this.values.length === 0) {
-      this.push(null);
-      return;
-    }
-    this.push(this.values.shift());
-  }
-}
-
-class RequiredIterableSource extends cjsStream.Readable {
-  constructor(values) {
-    super({ objectMode: true });
-    this.values = [...values];
-  }
-
-  _read() {
-    if (this.values.length === 0) {
-      this.push(null);
-      return;
-    }
-    this.push(this.values.shift());
-  }
-}
-
-const chunks = [];
-const source = new Source();
-const sink = new Sink(chunks);
-const upper = new Upper();
-
-let pipelineError = null;
-const pipelineResult = stream.pipeline(source, upper, sink, (error) => {
-  pipelineError = error ? String(error.message || error) : null;
-});
-source._read();
-await new Promise((resolve) => setTimeout(resolve, 0));
-
-const iteratedValues = [];
-for await (const chunk of new IterableSource(["gamma", "delta"])) {
-  iteratedValues.push(
-    Buffer.isBuffer(chunk) ? chunk.toString("utf8") : String(chunk),
-  );
-}
-
-const requiredIteratedValues = [];
-for await (const chunk of new RequiredIterableSource(["theta", "lambda"])) {
-  requiredIteratedValues.push(
-    Buffer.isBuffer(chunk) ? chunk.toString("utf8") : String(chunk),
-  );
-}
-
-const selfCheckReadable = new IterableSource(["self-check"]);
-const selfCheckIterator = selfCheckReadable[Symbol.asyncIterator]();
-
-console.log(JSON.stringify({
-  output: chunks.join("|"),
-  pipelineReturnedSink: pipelineResult === sink,
-  pipelineError,
-  readableIsFunction: typeof stream.Readable === "function",
-  writableIsFunction: typeof stream.Writable === "function",
-  transformIsFunction: typeof stream.Transform === "function",
-  prototypeHasAsyncIterator:
-    typeof stream.Readable.prototype[Symbol.asyncIterator] === "function",
-  requiredPrototypeHasAsyncIterator:
-    typeof cjsStream.Readable.prototype[Symbol.asyncIterator] === "function",
-  readableIteratorReturnsSelf:
-    selfCheckIterator[Symbol.asyncIterator]() === selfCheckIterator,
-  iteratedValues,
-  requiredIteratedValues,
-}));
-"#,
-    );
-}
-
-fn buffer_conformance_matches_host_node() {
-    assert_conformance(
-        "buffer",
-        r#"
-const text = Buffer.from("hello", "utf8");
-const filled = Buffer.alloc(4, 0x61);
-const combined = Buffer.concat([text, Buffer.from("-world", "utf8")]);
-
-console.log(JSON.stringify({
-  fromHex: text.toString("hex"),
-  allocUtf8: filled.toString("utf8"),
-  concatUtf8: combined.toString("utf8"),
-  sliceUtf8: combined.slice(3, 8).toString("utf8"),
-}));
-"#,
-    );
-}
-
-fn buffer_concat_truncation_matches_host_node_impl() {
-    assert_conformance(
-        "buffer-concat-truncation",
-        r#"
-function describeBuffer(value) {
-  return {
-    length: value.length,
-    hex: value.toString("hex"),
-  };
-}
-
-function describeError(fn) {
-  try {
-    fn();
-    return { threw: false };
-  } catch (error) {
-    return {
-      threw: true,
-      name: error?.name ?? null,
-    };
-  }
-}
-
-const chunks = [Buffer.from("abc"), Buffer.from("def")];
-
-console.log(JSON.stringify({
-  smaller: describeBuffer(Buffer.concat(chunks, 4)),
-  exact: describeBuffer(Buffer.concat(chunks, 6)),
-  larger: describeBuffer(Buffer.concat(chunks, 8)),
-  emptyNonZero: describeBuffer(Buffer.concat([], 3)),
-  invalidEntry: describeError(() => Buffer.concat([Buffer.from("a"), "x"], 1)),
-  invalidList: describeError(() => Buffer.concat("nope", 1)),
-}));
-"#,
-    );
-}
-
-#[test]
-fn buffer_concat_truncation_matches_host_node() {
-    run_isolated_builtin_conformance_test("buffer-concat-truncation");
-}
-
-fn mkdtemp_sync_collision_safe_matches_host_node_impl() {
-    let cwd = temp_dir("mkdtemp-sync-collision-safe");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-
-const root = fs.mkdtempSync(path.join(os.tmpdir(), "mkdtemp-conformance-"));
-const prefix = path.join(root, "x-");
-const sampleCount = 32;
-const created = await Promise.all(
-  Array.from({ length: sampleCount }, () => Promise.resolve().then(() => fs.mkdtempSync(prefix)))
-);
-const result = {
-  createdCount: created.length,
-  uniqueCount: new Set(created).size,
-  basenameLengths: [...new Set(created.map((value) => path.basename(value).length))].sort(
-    (left, right) => left - right
-  ),
-  prefixesOk: created.every((value) => value.startsWith(prefix)),
-};
-fs.rmSync(root, { recursive: true, force: true });
-console.log(JSON.stringify(result));
-"#,
-    );
-
-    let guest = run_guest_probe("mkdtemp-sync-collision-safe", &cwd, &entrypoint);
-
-    assert_eq!(guest["createdCount"], Value::from(32));
-    assert_eq!(guest["uniqueCount"], Value::from(32));
-    assert_eq!(guest["basenameLengths"], json!([8]));
-    assert_eq!(guest["prefixesOk"], Value::Bool(true));
-}
-
-#[test]
-fn mkdtemp_sync_collision_safe_matches_host_node() {
-    run_isolated_builtin_conformance_test("mkdtemp-sync-collision-safe");
-}
-
-fn url_conformance_matches_host_node() {
-    assert_conformance(
-        "url",
-        r#"
-import * as urlNs from "node:url";
-
-const urlModule = urlNs.default ?? urlNs;
-const URLSearchParamsCtor = urlNs.URLSearchParams ?? globalThis.URLSearchParams;
-const url = new urlModule.URL("https://example.com/a/b?x=1&y=two#frag");
-url.searchParams.append("z", "3");
-const fileRelative = new urlModule.URL("file:.", "file:///tmp/base/entry.mjs");
-const fileRelativeNoBase = new urlModule.URL("file:./child");
-const plusDecoded = new URLSearchParamsCtor("?a=foo+bar");
-const invalidPercentDecoded = new URLSearchParamsCtor("?a=%&b=%2&c=%GG&d=%E0%A4%A");
-const sortable = new URLSearchParamsCtor([
-  ["b", "1"],
-  ["a", "first"],
-  ["ä", "umlaut"],
-  ["a", "second"],
-  ["aa", "x"],
-]);
-sortable.sort();
-const setSemantics = new URLSearchParamsCtor("a=1&b=2&a=3&a=4&c=5");
-setSemantics.set("a", "z");
-
-const parsed = urlModule.parse("https://example.com/a/b?x=1&y=two#frag", true);
-
-console.log(JSON.stringify({
-  href: url.href,
-  searchParams: Array.from(url.searchParams.entries()),
-  plusDecoded: Array.from(plusDecoded.entries()),
-  plusDecodedString: plusDecoded.toString(),
-  invalidPercentDecoded: Array.from(invalidPercentDecoded.entries()),
-  invalidPercentDecodedString: invalidPercentDecoded.toString(),
-  sortedSearchParams: Array.from(sortable.entries()),
-  setSearchParams: Array.from(setSemantics.entries()),
-  setSearchParamsSize: setSemantics.size,
-  fileRelativeHref: fileRelative.href,
-  fileRelativeNoBaseHref: fileRelativeNoBase.href,
-  formatted: urlModule.format(parsed),
-  parsedPathname: parsed.pathname,
-  parsedQuery: parsed.query,
-}));
-"#,
-    );
-}
-
-fn stdlib_polyfill_conformance_matches_host_node() {
-    assert_conformance(
-        "stdlib-polyfills",
-        r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const assert = require("node:assert");
-const constants = require("node:constants");
-const path = require("node:path");
-const punycode = require("node:punycode");
-const querystring = require("node:querystring");
-const stringDecoder = require("node:string_decoder");
-const util = require("node:util");
-const utilTypes = require("node:util/types");
-const zlib = require("node:zlib");
-
-assert.deepStrictEqual(path.normalize?.("/alpha/../beta"), "/beta");
-assert.notStrictEqual(1, 2);
-assert.strictEqual(typeof assert.fail, "function");
-
-let throwsCode = null;
-assert.throws(
-  () => {
-    const error = new TypeError("boom");
-    error.code = "ERR_BOOM";
-    throw error;
-  },
-  (error) => {
-    throwsCode = error?.code ?? null;
-    return true;
-  },
-);
-
-let rejectsCode = null;
-await assert.rejects(
-  Promise.reject(Object.assign(new Error("reject"), { code: "ERR_REJECT" })),
-  (error) => {
-    rejectsCode = error?.code ?? null;
-    return true;
-  },
-);
-
-const decoder = new stringDecoder.StringDecoder("utf8");
-const textBytes = Buffer.from("Grüße", "utf8");
-const decoded =
-  decoder.write(textBytes.subarray(0, 4)) +
-  decoder.end(textBytes.subarray(4));
-
-const formatted = util.format("value:%s count:%d json:%j", "alpha", 7, { ok: true });
-const promisified = await util.promisify((value, callback) => callback(null, value.toUpperCase()))("beta");
-const encodedLength = new util.TextEncoder().encode("Grüße").length;
-const decodedText = new util.TextDecoder().decode(textBytes);
-
-const deflated = zlib.deflateSync(Buffer.from("secure-exec", "utf8"));
-const inflated = zlib.inflateSync(deflated).toString("utf8");
-
-console.log(JSON.stringify({
-  constants: {
-    fOk: constants.F_OK ?? null,
-    oRdOnly: constants.O_RDONLY ?? null,
-    rOk: constants.R_OK ?? null,
-  },
-  decoded,
-  decodedText,
-  deflatedBase64: deflated.toString("base64"),
-  encodedLength,
-  formatted,
-  inflated,
-  isArrayBufferView: util.types.isArrayBufferView(textBytes),
-  isDateViaUtilTypes: utilTypes.isDate(new Date("2024-01-01T00:00:00Z")),
-  isMapViaUtilTypes: utilTypes.isMap(new Map([["alpha", 1]])),
-  isUint8ArrayViaUtilTypes: utilTypes.isUint8Array(textBytes),
-  promisified,
-  punycodeAscii: punycode.toASCII("mañana.com"),
-  punycodeUnicode: punycode.toUnicode("xn--maana-pta.com"),
-  querystringParsed: querystring.parse("a=1&b=x&b=y"),
-  querystringStringified: querystring.stringify({ a: 1, b: ["x", "y"] }),
-  rejectsCode,
-  throwsCode,
-}));
-"#,
-    );
-}
-
-fn extended_builtin_polyfills_work_in_guest_v8() {
-    let result = run_guest_script(
-        "extended-builtins",
-        r#"
-import os from "node:os";
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-const moduleBuiltin = require("node:module");
-const perfHooks = require("node:perf_hooks");
-const streamConsumers = require("node:stream/consumers");
-const streamPromises = require("node:stream/promises");
-const timersPromises = require("node:timers/promises");
-const tty = require("node:tty");
-const zlib = require("node:zlib");
-const { constants: zlibConstants } = await import("node:zlib");
-
-perfHooks.performance.clearMarks?.();
-perfHooks.performance.clearMeasures?.();
-perfHooks.performance.mark("start");
-await timersPromises.setTimeout(5);
-perfHooks.performance.mark("end");
-const measure = perfHooks.performance.measure("delta", "start", "end");
-
-const immediateValue = await timersPromises.setImmediate("tick");
-const timeoutValue = await timersPromises.setTimeout(1, "done");
-const intervalValues = [];
-const interval = timersPromises.setInterval(1, "pulse");
-intervalValues.push((await interval.next()).value);
-intervalValues.push((await interval.next()).value);
-await interval.return();
-
-function createSink() {
-  const listeners = new Map();
-  return {
-    chunks: [],
-    write(chunk, callback) {
-      this.chunks.push(Buffer.from(chunk).toString("utf8"));
-      callback?.(null);
-    },
-    end(callback) {
-      queueMicrotask(() => {
-        for (const handler of listeners.get("finish") ?? []) handler();
-        for (const handler of listeners.get("close") ?? []) handler();
-        callback?.(null);
-      });
-    },
-    once(event, handler) {
-      const entries = listeners.get(event) ?? [];
-      listeners.set(event, [...entries, handler]);
-      return this;
-    },
-    off(event, handler) {
-      const entries = listeners.get(event) ?? [];
-      listeners.set(
-        event,
-        entries.filter((candidate) => candidate !== handler),
-      );
-      return this;
-    },
-  };
-}
-
-const pipelineWritable = createSink();
-await streamPromises.pipeline(
-  (async function* () {
-    yield Buffer.from("left");
-    yield Buffer.from("+");
-    yield Buffer.from("right");
-  })(),
-  pipelineWritable,
-);
-
-const finishedWritable = createSink();
-const finishedResult = streamPromises.finished(finishedWritable).then(() => "resolved");
-finishedWritable.end();
-
-function makeAsyncStream(chunks) {
-  return (async function* () {
-    for (const chunk of chunks) {
-      yield chunk;
-    }
-  })();
-}
-
-const textValue = await streamConsumers.text(
-  makeAsyncStream([
-    Buffer.from("he"),
-    Buffer.from("llo"),
-  ]),
-);
-const jsonValue = await streamConsumers.json(
-  makeAsyncStream([Buffer.from('{"ok":true,"count":2}')]),
-);
-const arrayBufferValue = await streamConsumers.arrayBuffer(
-  makeAsyncStream([Buffer.from("AB")]),
-);
-const blobValue = await streamConsumers.blob(
-  makeAsyncStream([Buffer.from("blob")]),
-);
-const bufferValue = await streamConsumers.buffer(
-  makeAsyncStream([Buffer.from("buf")]),
-);
-
-const deflated = zlib.deflateSync(Buffer.from("secure-exec", "utf8"));
-const inflated = zlib.inflateSync(deflated).toString("utf8");
-
-process.stdout.write(`${JSON.stringify({
-  moduleBuiltinHasCreateRequire:
-    typeof moduleBuiltin.createRequire === "function",
-  moduleBuiltinHasBuiltinModules:
-    Array.isArray(moduleBuiltin.builtinModules),
-  moduleBuiltinHasStreamPromises:
-    moduleBuiltin.builtinModules.includes("stream/promises"),
-  os: {
-    arch: os.arch(),
-    availableParallelism: os.availableParallelism(),
-    cpusLength: os.cpus().length,
-    eol: os.EOL,
-    freemem: os.freemem(),
-    hasSignals: typeof os.constants?.signals?.SIGTERM === "number",
-    homedir: os.homedir(),
-    hostname: os.hostname(),
-    networkInterfaceKeys: Object.keys(os.networkInterfaces()),
-    platform: os.platform(),
-    release: os.release(),
-    tmpdir: os.tmpdir(),
-    totalmem: os.totalmem(),
-    type: os.type(),
-    userInfoHomedir: os.userInfo().homedir,
-  },
-  perf: {
-    entriesByType: perfHooks.performance.getEntriesByType?.("measure")?.length ?? 0,
-    entriesByName: perfHooks.performance.getEntriesByName?.("delta", "measure")?.length ?? 0,
-    hasNow: typeof perfHooks.performance.now === "function",
-    hasObserver: typeof perfHooks.PerformanceObserver === "function",
-    measureDurationFinite: Number.isFinite(measure.duration),
-  },
-  streamConsumers: {
-    arrayBufferLength: arrayBufferValue.byteLength,
-    blobText: await blobValue.text(),
-    bufferText: bufferValue.toString("utf8"),
-    jsonCount: jsonValue.count,
-    jsonOk: jsonValue.ok,
-    textValue,
-  },
-  streamPromises: {
-    finishedResult: await finishedResult,
-    pipelineText: pipelineWritable.chunks.join(""),
-  },
-  timersPromises: {
-    immediateValue,
-    intervalValues,
-    timeoutValue,
-  },
-  tty: {
-    isatty0: tty.isatty(0),
-    isatty1: tty.isatty(1),
-    isatty2: tty.isatty(2),
-    readStreamType: typeof tty.ReadStream,
-    writeStreamType: typeof tty.WriteStream,
-  },
-  zlib: {
-    constantsHasSyncFlush: typeof zlib.constants?.Z_SYNC_FLUSH === "number",
-    importConstantsHasSyncFlush: typeof zlibConstants?.Z_SYNC_FLUSH === "number",
-    createDeflateType: typeof zlib.createDeflate,
-    createInflateType: typeof zlib.createInflate,
-    inflated,
-  },
-})}\n`);
-process.exit(0);
-"#,
-    );
-
-    assert_eq!(result["moduleBuiltinHasCreateRequire"], true);
-    assert_eq!(result["moduleBuiltinHasBuiltinModules"], true);
-    assert_eq!(result["moduleBuiltinHasStreamPromises"], true);
-    assert_eq!(result["os"]["platform"], "linux");
-    assert_eq!(result["os"]["arch"], "x64");
-    assert_eq!(result["os"]["type"], "Linux");
-    assert!(result["os"]["homedir"]
-        .as_str()
-        .expect("os.homedir string")
-        .starts_with('/'));
-    assert_eq!(result["os"]["tmpdir"], "/tmp");
-    assert_eq!(result["os"]["userInfoHomedir"], result["os"]["homedir"]);
-    assert_eq!(result["os"]["eol"], "\n");
-    assert_eq!(result["os"]["availableParallelism"], 1);
-    assert_eq!(result["os"]["cpusLength"], 1);
-    assert_eq!(result["os"]["totalmem"], 134_217_728u64);
-    assert_eq!(result["os"]["freemem"], 134_217_728u64);
-    assert_eq!(result["os"]["hasSignals"], true);
-    assert!(result["os"]["networkInterfaceKeys"]
-        .as_array()
-        .expect("network interfaces array")
-        .is_empty());
-    assert_eq!(result["perf"]["hasNow"], true);
-    assert_eq!(result["perf"]["hasObserver"], true);
-    assert_eq!(result["perf"]["measureDurationFinite"], true);
-    assert_eq!(result["perf"]["entriesByType"], 1);
-    assert_eq!(result["perf"]["entriesByName"], 1);
-    assert_eq!(result["timersPromises"]["immediateValue"], "tick");
-    assert_eq!(result["timersPromises"]["timeoutValue"], "done");
-    assert_eq!(
-        result["timersPromises"]["intervalValues"]
-            .as_array()
-            .expect("interval values"),
-        &vec![Value::from("pulse"), Value::from("pulse")]
-    );
-    assert_eq!(result["streamPromises"]["pipelineText"], "left+right");
-    assert_eq!(result["streamPromises"]["finishedResult"], "resolved");
-    assert_eq!(result["streamConsumers"]["textValue"], "hello");
-    assert_eq!(result["streamConsumers"]["jsonOk"], true);
-    assert_eq!(result["streamConsumers"]["jsonCount"], 2);
-    assert_eq!(result["streamConsumers"]["arrayBufferLength"], 2);
-    assert_eq!(result["streamConsumers"]["blobText"], "blob");
-    assert_eq!(result["streamConsumers"]["bufferText"], "buf");
-    assert_eq!(result["tty"]["readStreamType"], "function");
-    assert_eq!(result["tty"]["writeStreamType"], "function");
-    assert_eq!(result["tty"]["isatty0"], false);
-    assert_eq!(result["tty"]["isatty1"], false);
-    assert_eq!(result["tty"]["isatty2"], false);
-    assert_eq!(result["zlib"]["constantsHasSyncFlush"], true);
-    assert_eq!(result["zlib"]["importConstantsHasSyncFlush"], true);
-    assert_eq!(result["zlib"]["createDeflateType"], "function");
-    assert_eq!(result["zlib"]["createInflateType"], "function");
-    assert_eq!(result["zlib"]["inflated"], "secure-exec");
-}
-
-fn timer_handle_ref_refresh_matches_host_node_impl() {
-    assert_node_available();
-
-    let cwd = temp_dir("builtin-timer-handle-ref-refresh");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-import { performance } from "node:perf_hooks";
-
-const timeout = setTimeout(() => {}, 1_000);
-const interval = setInterval(() => {}, 1_000);
-const initial = {
-  timeout: timeout.hasRef(),
-  interval: interval.hasRef(),
-};
-const unrefReturnSelf = timeout.unref() === timeout && interval.unref() === interval;
-const afterUnref = {
-  timeout: timeout.hasRef(),
-  interval: interval.hasRef(),
-};
-const refReturnSelf = timeout.ref() === timeout && interval.ref() === interval;
-const afterRef = {
-  timeout: timeout.hasRef(),
-  interval: interval.hasRef(),
-};
-clearTimeout(timeout);
-clearInterval(interval);
-
-const refreshDelay = 80;
-const refreshWait = 40;
-const refreshTolerance = 20;
-const refreshStart = performance.now();
-let refreshReturnSelf = false;
-let refreshedAt = 0;
-
-await new Promise((resolve) => {
-  const refreshedTimeout = setTimeout(() => {
-    const elapsed = performance.now() - refreshStart;
-    console.log(JSON.stringify({
-      initial,
-      unrefReturnSelf,
-      afterUnref,
-      refReturnSelf,
-      afterRef,
-      refreshReturnSelf,
-      refreshHonored: elapsed >= refreshedAt + refreshDelay - refreshTolerance,
-    }));
-    resolve();
-  }, refreshDelay);
-
-  setTimeout(() => {
-    refreshedAt = performance.now() - refreshStart;
-    refreshReturnSelf = refreshedTimeout.refresh() === refreshedTimeout;
-  }, refreshWait);
-});
-"#,
-    );
-
-    let host = run_host_probe(&cwd, &entrypoint);
-    let guest = run_guest_probe_with_config(
-        "timer-handle-ref-refresh",
-        &cwd,
-        &entrypoint,
-        HashMap::new(),
-        wire_permissions_allow_all(),
-        &["perf_hooks", "timers"],
-    );
-
-    assert_eq!(
-        guest,
-        host,
-        "guest timer handle behavior diverged from host Node\nhost: {}\nguest: {}",
-        serde_json::to_string_pretty(&host).expect("pretty host JSON"),
-        serde_json::to_string_pretty(&guest).expect("pretty guest JSON")
-    );
-    assert_eq!(guest["afterUnref"]["timeout"], Value::Bool(false));
-    assert_eq!(guest["afterUnref"]["interval"], Value::Bool(false));
-    assert_eq!(guest["afterRef"]["timeout"], Value::Bool(true));
-    assert_eq!(guest["afterRef"]["interval"], Value::Bool(true));
-    assert_eq!(guest["refreshHonored"], Value::Bool(true));
-}
-
-#[test]
-fn timer_handle_ref_refresh_matches_host_node() {
-    run_isolated_builtin_conformance_test("timer-handle-ref-refresh");
-}
-
-fn unrefd_timeout_does_not_keep_guest_process_alive_impl() {
-    let cwd = temp_dir("builtin-timer-unref-exit");
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(
-        &entrypoint,
-        r#"
-const timer = setTimeout(() => {
-  console.error("timer-fired");
-  process.exitCode = 1;
-}, 10_000);
-
-timer.unref();
-console.log(JSON.stringify({ hasRefAfterUnref: timer.hasRef() }));
-"#,
-    );
-
-    let mut sidecar = new_sidecar("timer-unref-exit");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-timer-unref-exit");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let allowed_builtins =
-        serde_json::to_string(&["timers"]).expect("serialize timer builtin allowlist");
-    let mut metadata = HashMap::new();
-    metadata.insert(
-        String::from("env.AGENTOS_ALLOWED_NODE_BUILTINS"),
-        allowed_builtins,
-    );
-    let vm_id = create_vm_with_metadata_and_permissions(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        metadata,
-        wire_permissions_allow_all(),
-    );
-
-    let started_at = Instant::now();
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-timer-unref-exit",
-        GuestRuntimeKind::JavaScript,
-        &entrypoint,
-        Vec::new(),
-    );
-
-    let (stdout, stderr, exit_code) = collect_builtin_process_output_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-timer-unref-exit",
-        Duration::from_secs(2),
-    );
-    let elapsed = started_at.elapsed();
-    dispose_vm_and_close_session_wire(&mut sidecar, &connection_id, &session_id, &vm_id);
-
-    assert_eq!(exit_code, 0, "guest process should exit cleanly: {stderr}");
-    assert!(
-        stderr.trim().is_empty(),
-        "guest process should not wait long enough to fire the timer:\n{stderr}"
-    );
-    if run_timing_sensitive_tests() {
-        assert!(
-            elapsed < Duration::from_millis(1_500),
-            "guest process waited too long for an unref'd timer: {elapsed:?}"
-        );
-    }
-
-    let payload: Value = serde_json::from_str(stdout.trim()).expect("parse timer stdout JSON");
-    assert_eq!(payload["hasRefAfterUnref"], Value::Bool(false));
-}
-
-#[test]
-fn unrefd_timeout_does_not_keep_guest_process_alive() {
-    run_isolated_builtin_conformance_test("timer-unref-exit");
-}
-
-fn run_named_case(case_name: &str) {
-    match case_name {
-        "fs" => fs_conformance_matches_host_node(),
-        "console" => console_conformance_matches_host_node(),
-        "child_process" => child_process_conformance_matches_host_node(),
-        "path" => path_conformance_matches_host_node(),
-        "crypto" => crypto_conformance_matches_host_node(),
-        "dns" => dns_conformance_matches_host_node(),
-        "events" => events_conformance_matches_host_node(),
-        "stream" => stream_conformance_matches_host_node(),
-        "buffer" => buffer_conformance_matches_host_node(),
-        "url" => url_conformance_matches_host_node(),
-        "stdlib_polyfill" => stdlib_polyfill_conformance_matches_host_node(),
-        "extended_builtin_polyfills" => extended_builtin_polyfills_work_in_guest_v8(),
-        other => panic!("unknown builtin conformance case: {other}"),
-    }
-}
-
-#[test]
-fn builtin_conformance_cases() {
-    let current_exe = std::env::current_exe().expect("current test binary path");
-
-    for case_name in BUILTIN_CONFORMANCE_CASES {
-        let status = Command::new(&current_exe)
-            .arg("--exact")
-            .arg("__builtin_conformance_case_runner")
-            .arg("--nocapture")
-            .env("AGENTOS_BUILTIN_CONFORMANCE_CASE", case_name)
-            .status()
-            .unwrap_or_else(|error| {
-                panic!("spawn builtin conformance runner for {case_name}: {error}")
-            });
-
-        assert!(
-            status.success(),
-            "builtin conformance case {case_name} failed with status {status}"
-        );
-    }
-}
-
-#[test]
-fn __builtin_conformance_case_runner() {
-    let Ok(case_name) = std::env::var("AGENTOS_BUILTIN_CONFORMANCE_CASE") else {
-        return;
-    };
-
-    run_named_case(&case_name);
-}
-
-#[test]
-fn __builtin_conformance_extra_test_runner() {
-    let Ok(test_name) = std::env::var("AGENTOS_BUILTIN_CONFORMANCE_EXTRA_TEST") else {
-        return;
-    };
-
-    match test_name.as_str() {
-        "http-request-keepalive" => http_request_custom_agent_reuses_keepalive_socket_impl(),
-        "http-request-denied" => http_request_denied_egress_returns_permission_error_impl(),
-        "child-process-fork-ipc" => child_process_fork_supports_basic_ipc_impl(),
-        "http-socket-writes" => http_socket_writes_do_not_silently_drop_data_impl(),
-        "buffer-concat-truncation" => buffer_concat_truncation_matches_host_node_impl(),
-        "mkdtemp-sync-collision-safe" => mkdtemp_sync_collision_safe_matches_host_node_impl(),
-        "crypto-basic-fixture" => crypto_basic_fixture_matches_shared_expected_impl(),
-        "crypto-extended" => crypto_extended_surface_matches_host_node(),
-        "child-process-exec-spawn-error-code" => {
-            child_process_exec_preserves_spawn_error_codes_impl()
-        }
-        "child-process-native-elf-reject" => {
-            child_process_rejects_native_elf_binaries_before_wasm_compile_impl()
-        }
-        "child-process-kill-numeric-signal" => {
-            child_process_kill_numeric_signals_match_host_node_impl()
-        }
-        "child-process-abort-signal" => child_process_abort_reports_sigabrt_impl(),
-        "net-socket-readable-state" => net_socket_readable_state_tracks_ssh2_writable_shape_impl(),
-        "readable-on-data-explicit-pause" => {
-            readable_on_data_respects_explicit_pause_matches_host_node_impl()
-        }
-        "readline-question" => readline_question_reads_real_stdin_impl(),
-        "vm-is-context" => vm_is_context_only_accepts_create_context_tagged_sandboxes_impl(),
-        "vm-context-isolation" => vm_context_isolation_and_script_options_match_host_node_impl(),
-        "vm-optional-surface" => {
-            vm_optional_surface_is_implemented_or_explicitly_not_implemented_impl()
-        }
-        "vm-timeout" => vm_timeout_terminates_within_deadline_impl(),
-        "perf-hooks-observer" => perf_hooks_observer_and_histogram_match_host_node_impl(),
-        "process-runtime-stats" => process_runtime_stats_are_live_impl(),
-        "os-resource-limits" => os_resource_limits_are_vm_scoped_impl(),
-        "timer-handle-ref-refresh" => timer_handle_ref_refresh_matches_host_node_impl(),
-        "timer-unref-exit" => unrefd_timeout_does_not_keep_guest_process_alive_impl(),
-        other => panic!("unknown builtin conformance extra test: {other}"),
-    }
-}
diff --git a/crates/sidecar/tests/connection_auth.rs b/crates/sidecar/tests/connection_auth.rs
deleted file mode 100644
index 03ad25330..000000000
--- a/crates/sidecar/tests/connection_auth.rs
+++ /dev/null
@@ -1,192 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{
-    AuthenticateRequest, CreateVmRequest, ExtEnvelope, GuestRuntimeKind, OpenSessionRequest,
-    RequestPayload, ResponsePayload, RootFilesystemDescriptor, SidecarPlacement,
-};
-use std::collections::HashMap;
-use support::{
-    authenticate_wire, authenticate_wire_with_token, new_sidecar, new_sidecar_with_auth_token,
-    open_session_wire, temp_dir, wire_connection, wire_request, wire_session, TEST_AUTH_TOKEN,
-};
-
-#[test]
-fn authenticate_ignores_client_connection_hints_and_preserves_existing_owners() {
-    let mut sidecar = new_sidecar("connection-auth");
-
-    let connection_a = authenticate_wire(&mut sidecar, "client-a");
-    let session_a = open_session_wire(&mut sidecar, 2, &connection_a);
-
-    let auth_b = authenticate_wire_with_token(&mut sidecar, 3, &connection_a, TEST_AUTH_TOKEN);
-    let connection_b = match auth_b.response.payload {
-        ResponsePayload::AuthenticatedResponse(response) => {
-            assert_eq!(
-                auth_b.response.ownership,
-                wire_connection(&response.connection_id)
-            );
-            assert_ne!(response.connection_id, connection_a);
-            response.connection_id
-        }
-        other => panic!("unexpected second auth response: {other:?}"),
-    };
-
-    let cwd = temp_dir("connection-auth-cwd");
-    let create_vm = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_session(&connection_b, &session_a),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                GuestRuntimeKind::JavaScript,
-                HashMap::from([(String::from("cwd"), cwd.to_string_lossy().into_owned())]),
-                RootFilesystemDescriptor {
-                    mode: secure_exec_sidecar::wire::RootFilesystemMode::Ephemeral,
-                    disable_default_base_layer: false,
-                    lowers: Vec::new(),
-                    bootstrap_entries: Vec::new(),
-                },
-                None,
-            )),
-        ))
-        .expect("dispatch cross-connection create_vm");
-
-    match create_vm.response.payload {
-        ResponsePayload::RejectedResponse(response) => {
-            assert_eq!(response.code, "invalid_state");
-            assert!(response.message.contains("not owned"));
-        }
-        other => panic!("unexpected create_vm response: {other:?}"),
-    }
-}
-
-#[test]
-fn authenticate_rejects_invalid_auth_tokens() {
-    let mut sidecar = new_sidecar_with_auth_token("connection-auth-invalid", "expected-token");
-
-    let rejected_connection = "client-a";
-    let result = authenticate_wire_with_token(&mut sidecar, 1, rejected_connection, "wrong-token");
-
-    match result.response.payload {
-        ResponsePayload::RejectedResponse(response) => {
-            assert_eq!(response.code, "unauthorized");
-            assert!(response.message.contains("invalid auth token"));
-        }
-        other => panic!("unexpected invalid auth response: {other:?}"),
-    }
-
-    assert_rejected_auth_does_not_open_connection(&mut sidecar, 2, rejected_connection);
-    assert_rejected_auth_does_not_open_connection(&mut sidecar, 3, "conn-1");
-}
-
-#[test]
-fn authenticate_rejects_bridge_contract_version_mismatch() {
-    let mut sidecar = new_sidecar("connection-auth-bridge-version");
-    let rejected_connection = "client-a";
-
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            1,
-            wire_connection(rejected_connection),
-            RequestPayload::AuthenticateRequest(AuthenticateRequest {
-                client_name: String::from("bridge-version-test"),
-                auth_token: String::from(TEST_AUTH_TOKEN),
-                protocol_version: secure_exec_sidecar::wire::PROTOCOL_VERSION,
-                bridge_version: secure_exec_bridge::bridge_contract().version + 1,
-            }),
-        ))
-        .expect("dispatch mismatched authenticate");
-
-    match result.response.payload {
-        ResponsePayload::RejectedResponse(response) => {
-            assert_eq!(response.code, "bridge_version_mismatch");
-            assert!(response.message.contains("expected"));
-            assert!(response.message.contains("got"));
-        }
-        other => panic!("unexpected bridge version auth response: {other:?}"),
-    }
-
-    assert_rejected_auth_does_not_open_connection(&mut sidecar, 2, rejected_connection);
-    assert_rejected_auth_does_not_open_connection(&mut sidecar, 3, "conn-1");
-}
-
-#[test]
-fn authenticate_rejects_protocol_version_mismatch() {
-    let mut sidecar = new_sidecar("connection-auth-protocol-version");
-    let rejected_connection = "client-a";
-
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            1,
-            wire_connection(rejected_connection),
-            RequestPayload::AuthenticateRequest(AuthenticateRequest {
-                client_name: String::from("protocol-version-test"),
-                auth_token: String::from(TEST_AUTH_TOKEN),
-                protocol_version: secure_exec_sidecar::wire::PROTOCOL_VERSION + 1,
-                bridge_version: secure_exec_bridge::bridge_contract().version,
-            }),
-        ))
-        .expect("dispatch mismatched authenticate");
-
-    match result.response.payload {
-        ResponsePayload::RejectedResponse(response) => {
-            assert_eq!(response.code, "protocol_version_mismatch");
-            assert!(response.message.contains("expected"));
-            assert!(response.message.contains("got"));
-        }
-        other => panic!("unexpected protocol version auth response: {other:?}"),
-    }
-
-    assert_rejected_auth_does_not_open_connection(&mut sidecar, 2, rejected_connection);
-    assert_rejected_auth_does_not_open_connection(&mut sidecar, 3, "conn-1");
-}
-
-#[test]
-fn ext_requests_fail_closed_when_namespace_is_unregistered() {
-    let mut sidecar = new_sidecar("connection-auth-ext");
-    let connection_id = authenticate_wire(&mut sidecar, "ext-client");
-
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            2,
-            wire_connection(&connection_id),
-            RequestPayload::ExtEnvelope(ExtEnvelope {
-                namespace: "dev.rivet.secure-exec.test".to_string(),
-                payload: b"hello-ext".to_vec(),
-            }),
-        ))
-        .expect("dispatch ext request");
-
-    match result.response.payload {
-        ResponsePayload::RejectedResponse(response) => {
-            assert_eq!(response.code, "unknown_extension");
-            assert!(response.message.contains("dev.rivet.secure-exec.test"));
-        }
-        other => panic!("unexpected ext response: {other:?}"),
-    }
-}
-
-fn assert_rejected_auth_does_not_open_connection(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: i64,
-    connection_id: &str,
-) {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_connection(connection_id),
-            RequestPayload::OpenSessionRequest(OpenSessionRequest {
-                placement: SidecarPlacement::SidecarPlacementShared(
-                    secure_exec_sidecar::wire::SidecarPlacementShared { pool: None },
-                ),
-                metadata: HashMap::new(),
-            }),
-        ))
-        .expect("dispatch open session after rejected authenticate");
-
-    match result.response.payload {
-        ResponsePayload::RejectedResponse(response) => {
-            assert_eq!(response.code, "invalid_state");
-            assert!(response.message.contains("has not authenticated"));
-        }
-        other => panic!("unexpected post-rejection session response: {other:?}"),
-    }
-}
diff --git a/crates/sidecar/tests/crash_isolation.rs b/crates/sidecar/tests/crash_isolation.rs
deleted file mode 100644
index abc3ab625..000000000
--- a/crates/sidecar/tests/crash_isolation.rs
+++ /dev/null
@@ -1,246 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{EventPayload, GuestRuntimeKind, OwnershipScope, StreamChannel};
-use std::collections::BTreeMap;
-use std::time::{Duration, Instant};
-use support::{
-    assert_node_available, authenticate_wire, create_vm_wire, execute_wire, new_sidecar,
-    open_session_wire, temp_dir, wire_session, wire_vm, write_fixture,
-};
-
-const PROCESS_OUTPUT_BYTE_LIMIT: usize = 1024 * 1024;
-
-#[derive(Debug, Default)]
-struct ProcessResult {
-    stdout: String,
-    stderr: String,
-    exit_code: Option<i32>,
-}
-
-#[test]
-fn guest_failure_in_one_vm_does_not_break_peer_vm_execution() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("crash-isolation");
-    let cwd = temp_dir("crash-isolation-cwd");
-    let crash_entry = cwd.join("crash.cjs");
-    let healthy_entry = cwd.join("healthy.cjs");
-
-    write_fixture(&crash_entry, "throw new Error(\"boom\");\n");
-    write_fixture(&healthy_entry, "console.log(\"healthy\");\n");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (crash_vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-    let (healthy_vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    execute_wire(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &crash_vm_id,
-        "proc-crash",
-        GuestRuntimeKind::JavaScript,
-        &crash_entry,
-        Vec::new(),
-    );
-    execute_wire(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &healthy_vm_id,
-        "proc-healthy",
-        GuestRuntimeKind::JavaScript,
-        &healthy_entry,
-        Vec::new(),
-    );
-
-    let mut results = BTreeMap::from([
-        (crash_vm_id.clone(), ProcessResult::default()),
-        (healthy_vm_id.clone(), ProcessResult::default()),
-    ]);
-    let deadline = Instant::now() + Duration::from_secs(10);
-    let ownership = wire_session(&connection_id, &session_id);
-
-    let is_complete = |results: &BTreeMap<String, ProcessResult>| {
-        let crash = results
-            .get(&crash_vm_id)
-            .expect("crash vm result should exist");
-        let healthy = results
-            .get(&healthy_vm_id)
-            .expect("healthy vm result should exist");
-
-        crash.exit_code == Some(1) && healthy.exit_code == Some(0)
-    };
-
-    while !is_complete(&results) {
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll crash-isolation event");
-        let Some(event) = event else {
-            assert!(
-                Instant::now() < deadline,
-                "timed out waiting for crash-isolation events"
-            );
-            continue;
-        };
-
-        let OwnershipScope::VmOwnership(vm_ownership) = event.ownership else {
-            panic!("expected VM-scoped crash-isolation event");
-        };
-        let result = results
-            .get_mut(&vm_ownership.vm_id)
-            .unwrap_or_else(|| panic!("unexpected vm event for {}", vm_ownership.vm_id));
-
-        match event.payload {
-            EventPayload::ProcessOutputEvent(output) => match output.channel {
-                StreamChannel::Stdout => {
-                    append_process_output(
-                        &mut result.stdout,
-                        &output.chunk,
-                        &output.process_id,
-                        "stdout",
-                    );
-                }
-                StreamChannel::Stderr => {
-                    append_process_output(
-                        &mut result.stderr,
-                        &output.chunk,
-                        &output.process_id,
-                        "stderr",
-                    );
-                }
-            },
-            EventPayload::ProcessExitedEvent(exited) => {
-                result.exit_code = Some(exited.exit_code);
-            }
-            EventPayload::VmLifecycleEvent(_)
-            | EventPayload::StructuredEvent(_)
-            | EventPayload::ExtEnvelope(_) => {}
-        }
-    }
-
-    let crash = results.get(&crash_vm_id).expect("crash vm result");
-    let healthy = results.get(&healthy_vm_id).expect("healthy vm result");
-
-    assert_eq!(crash.exit_code, Some(1));
-    assert!(
-        crash.stderr.contains("boom"),
-        "unexpected crash stderr: {}",
-        crash.stderr
-    );
-    assert_eq!(healthy.exit_code, Some(0));
-    assert!(
-        healthy.stderr.is_empty(),
-        "unexpected healthy stderr: {}",
-        healthy.stderr
-    );
-
-    execute_wire(
-        &mut sidecar,
-        7,
-        &connection_id,
-        &session_id,
-        &healthy_vm_id,
-        "proc-healthy-2",
-        GuestRuntimeKind::JavaScript,
-        &healthy_entry,
-        Vec::new(),
-    );
-    let (_stdout, stderr, exit_code) = collect_crash_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &healthy_vm_id,
-        "proc-healthy-2",
-    );
-
-    assert_eq!(exit_code, 0);
-    assert!(stderr.is_empty(), "unexpected follow-up stderr: {stderr}");
-}
-
-fn collect_crash_process_output(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-) -> (String, String, i32) {
-    let ownership = wire_session(connection_id, session_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-    let mut stdout = String::new();
-    let mut stderr = String::new();
-    let mut exit = None;
-
-    loop {
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll crash-isolation follow-up event");
-        if let Some(event) = event {
-            assert_eq!(event.ownership, wire_vm(connection_id, session_id, vm_id));
-
-            match event.payload {
-                EventPayload::ProcessOutputEvent(output) if output.process_id == process_id => {
-                    match output.channel {
-                        StreamChannel::Stdout => append_process_output(
-                            &mut stdout,
-                            &output.chunk,
-                            &output.process_id,
-                            "stdout",
-                        ),
-                        StreamChannel::Stderr => append_process_output(
-                            &mut stderr,
-                            &output.chunk,
-                            &output.process_id,
-                            "stderr",
-                        ),
-                    }
-                }
-                EventPayload::ProcessExitedEvent(exited) if exited.process_id == process_id => {
-                    exit = Some((exited.exit_code, Instant::now()));
-                }
-                EventPayload::ProcessOutputEvent(_)
-                | EventPayload::ProcessExitedEvent(_)
-                | EventPayload::VmLifecycleEvent(_)
-                | EventPayload::StructuredEvent(_)
-                | EventPayload::ExtEnvelope(_) => {}
-            }
-        }
-
-        if let Some((exit_code, seen_at)) = exit {
-            if Instant::now().duration_since(seen_at) >= Duration::from_millis(200) {
-                return (stdout, stderr, exit_code);
-            }
-        }
-
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for crash-isolation process {process_id}\nstdout:\n{stdout}\nstderr:\n{stderr}"
-        );
-    }
-}
-
-fn append_process_output(buffer: &mut String, chunk: &[u8], process_id: &str, channel: &str) {
-    let text = String::from_utf8_lossy(chunk);
-    assert!(
-        buffer.len().saturating_add(text.len()) <= PROCESS_OUTPUT_BYTE_LIMIT,
-        "crash-isolation process {process_id} exceeded {PROCESS_OUTPUT_BYTE_LIMIT} bytes on {channel}"
-    );
-    buffer.push_str(&text);
-}
diff --git a/crates/sidecar/tests/extension.rs b/crates/sidecar/tests/extension.rs
deleted file mode 100644
index ee51a76b3..000000000
--- a/crates/sidecar/tests/extension.rs
+++ /dev/null
@@ -1,398 +0,0 @@
-mod support;
-
-use std::collections::HashMap;
-use std::fs;
-use std::time::Duration;
-
-use secure_exec_bridge::{LoadFilesystemStateRequest, PersistenceBridge};
-use secure_exec_sidecar::wire::{
-    EventPayload, ExecuteRequest, ExtEnvelope, GuestFilesystemCallRequest,
-    GuestFilesystemOperation, GuestRuntimeKind, RequestPayload, ResponsePayload,
-    SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, StreamChannel,
-    VmLifecycleState,
-};
-use secure_exec_sidecar::{
-    Extension, ExtensionContext, ExtensionFuture, ExtensionResponse, SidecarError,
-};
-use support::{
-    assert_node_available, authenticate_wire, create_vm_wire, new_sidecar, open_session_wire,
-    temp_dir, wire_request, wire_vm, RecordingBridge,
-};
-
-const TEST_NAMESPACE: &str = "dev.rivet.secure-exec.extension-test";
-
-struct EchoExtension;
-struct VmLifetimeExtension;
-
-impl Extension for EchoExtension {
-    fn namespace(&self) -> &str {
-        TEST_NAMESPACE
-    }
-
-    fn handle_request<'a>(
-        &'a self,
-        mut ctx: ExtensionContext<'a>,
-        payload: Vec<u8>,
-    ) -> ExtensionFuture<'a, ExtensionResponse> {
-        Box::pin(async move {
-            let callback =
-                ctx.invoke_callback(b"callback-input".to_vec(), Duration::from_secs(1))?;
-            let payload = String::from_utf8(payload).map_err(|error| {
-                SidecarError::InvalidState(format!("invalid extension test entrypoint: {error}"))
-            })?;
-            let mut payload_lines = payload.lines();
-            let entrypoint = payload_lines
-                .next()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from("missing extension process entrypoint"))
-                })?
-                .to_string();
-            let lifecycle_entrypoint = payload_lines
-                .next()
-                .ok_or_else(|| {
-                    SidecarError::InvalidState(String::from(
-                        "missing extension lifecycle entrypoint",
-                    ))
-                })?
-                .to_string();
-            let process_id = "extension-process";
-            ctx.start_buffering_process_output(process_id).await?;
-            ctx.guest_filesystem_call_wire(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::WriteFile,
-                path: String::from("/tmp/extension-fs.txt"),
-                destination_path: None,
-                target: None,
-                content: Some(String::from("extension fs primitive")),
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            })
-            .await?;
-            let fs_read = ctx
-                .guest_filesystem_call_wire(GuestFilesystemCallRequest {
-                    operation: GuestFilesystemOperation::ReadFile,
-                    path: String::from("/tmp/extension-fs.txt"),
-                    destination_path: None,
-                    target: None,
-                    content: None,
-                    encoding: None,
-                    recursive: false,
-            max_depth: None,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    atime_ms: None,
-                    mtime_ms: None,
-                    len: None,
-                    offset: None,
-                })
-                .await?;
-            assert_eq!(fs_read.content.as_deref(), Some("extension fs primitive"));
-
-            let started = ctx
-                .spawn_process_wire(ExecuteRequest {
-                    process_id: process_id.to_string(),
-                    command: None,
-                    runtime: Some(GuestRuntimeKind::JavaScript),
-                    entrypoint: Some(entrypoint),
-                    args: Vec::new(),
-                    env: HashMap::new(),
-                    cwd: None,
-                    wasm_permission_tier: None,
-                })
-                .await?;
-            assert_eq!(started.process_id, process_id);
-            let handoff = ctx
-                .handoff_buffered_process_output(
-                    "extension-buffered-session",
-                    process_id,
-                    Duration::from_secs(5),
-                )
-                .await?;
-            assert!(String::from_utf8_lossy(&handoff.stdout).contains("extension-buffered-output"));
-            assert!(!handoff.stdout_truncated);
-            let lifecycle_process_id = "extension-lifecycle-process";
-            let lifecycle_started = ctx
-                .spawn_process_wire(ExecuteRequest {
-                    process_id: lifecycle_process_id.to_string(),
-                    command: None,
-                    runtime: Some(GuestRuntimeKind::JavaScript),
-                    entrypoint: Some(lifecycle_entrypoint),
-                    args: Vec::new(),
-                    env: HashMap::new(),
-                    cwd: None,
-                    wasm_permission_tier: None,
-                })
-                .await?;
-            assert_eq!(lifecycle_started.process_id, lifecycle_process_id);
-            ctx.bind_process_to_session("extension-lifecycle-session", lifecycle_process_id)
-                .await?;
-            ctx.dispose_session_resources("extension-lifecycle-session")
-                .await?;
-
-            let mut stdout = handoff.stdout;
-            let mut exit_code = None;
-            let mut lifecycle_exit_code = None;
-            while exit_code.is_none() || lifecycle_exit_code.is_none() {
-                let event = ctx
-                    .poll_event_wire(Duration::from_secs(5))
-                    .await?
-                    .ok_or_else(|| {
-                        SidecarError::InvalidState(String::from(
-                            "timed out waiting for extension process event",
-                        ))
-                    })?;
-                match event.payload {
-                    EventPayload::ProcessOutputEvent(output)
-                        if output.process_id == process_id
-                            && output.channel == StreamChannel::Stdout =>
-                    {
-                        stdout.extend(output.chunk);
-                    }
-                    EventPayload::ProcessExitedEvent(exited) if exited.process_id == process_id => {
-                        exit_code = Some(exited.exit_code);
-                    }
-                    EventPayload::ProcessExitedEvent(exited)
-                        if exited.process_id == lifecycle_process_id =>
-                    {
-                        lifecycle_exit_code = Some(exited.exit_code);
-                    }
-                    EventPayload::ProcessOutputEvent(_)
-                    | EventPayload::ProcessExitedEvent(_)
-                    | EventPayload::VmLifecycleEvent(_)
-                    | EventPayload::StructuredEvent(_)
-                    | EventPayload::ExtEnvelope(_) => {}
-                }
-            }
-
-            let stdout = String::from_utf8(stdout).map_err(|error| {
-                SidecarError::InvalidState(format!("invalid extension process stdout: {error}"))
-            })?;
-            let process_summary = format!(
-                "{}:{}:{}",
-                String::from_utf8_lossy(&callback),
-                stdout.trim().replace('\n', "|"),
-                exit_code.expect("exit code set before loop exits"),
-            );
-            ExtensionResponse::with_wire_events(
-                process_summary.clone().into_bytes(),
-                vec![ctx.ext_event_wire(format!("extension-event:{process_summary}").into_bytes())?],
-            )
-        })
-    }
-}
-
-impl Extension for VmLifetimeExtension {
-    fn namespace(&self) -> &str {
-        "dev.rivet.secure-exec.extension-vm-lifetime-test"
-    }
-
-    fn handle_request<'a>(
-        &'a self,
-        mut ctx: ExtensionContext<'a>,
-        _payload: Vec<u8>,
-    ) -> ExtensionFuture<'a, ExtensionResponse> {
-        Box::pin(async move {
-            ctx.bind_vm_to_session("extension-vm-session").await?;
-            let events = ctx
-                .dispose_session_resources_wire("extension-vm-session")
-                .await?;
-            ExtensionResponse::with_wire_events(b"vm-disposed".to_vec(), events)
-        })
-    }
-}
-
-#[test]
-fn registered_extension_round_trips_ext_request_callback_and_event() {
-    assert_node_available();
-    let mut sidecar = new_sidecar("extension-roundtrip");
-    sidecar
-        .register_extension(Box::new(EchoExtension))
-        .expect("register extension");
-    sidecar.set_wire_sidecar_request_handler(|frame| match frame.payload {
-        SidecarRequestPayload::ExtEnvelope(envelope) => {
-            assert_eq!(envelope.namespace, TEST_NAMESPACE);
-            assert_eq!(envelope.payload, b"callback-input");
-            Ok(SidecarResponseFrame {
-                schema: frame.schema,
-                request_id: frame.request_id,
-                ownership: frame.ownership,
-                payload: SidecarResponsePayload::ExtEnvelope(ExtEnvelope {
-                    namespace: envelope.namespace,
-                    payload: b"callback-output".to_vec(),
-                }),
-            })
-        }
-        other => panic!("unexpected sidecar request payload: {other:?}"),
-    });
-
-    let connection_id = authenticate_wire(&mut sidecar, "extension-client");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let cwd = temp_dir("extension-process-cwd");
-    let entrypoint = cwd.join("extension-entrypoint.mjs");
-    let lifecycle_entrypoint = cwd.join("extension-lifecycle-entrypoint.mjs");
-    fs::write(
-        &entrypoint,
-        "console.log('extension-buffered-output');\nsetTimeout(() => {\n  console.log('extension-process-output');\n  process.exit(0);\n}, 50);\n",
-    )
-    .expect("write extension entrypoint");
-    fs::write(&lifecycle_entrypoint, "setInterval(() => {}, 1000);\n")
-        .expect("write extension lifecycle entrypoint");
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ExtEnvelope(ExtEnvelope {
-                namespace: TEST_NAMESPACE.to_string(),
-                payload: format!(
-                    "{}\n{}",
-                    entrypoint.to_string_lossy(),
-                    lifecycle_entrypoint.to_string_lossy()
-                )
-                .into_bytes(),
-            }),
-        ))
-        .expect("dispatch extension request");
-
-    match result.response.payload {
-        ResponsePayload::ExtEnvelope(envelope) => {
-            assert_eq!(envelope.namespace, TEST_NAMESPACE);
-            assert_eq!(
-                envelope.payload,
-                b"callback-output:extension-buffered-output|extension-process-output:0"
-            );
-        }
-        other => panic!("unexpected extension response: {other:?}"),
-    }
-
-    assert_eq!(result.events.len(), 1);
-    match &result.events[0].payload {
-        EventPayload::ExtEnvelope(envelope) => {
-            assert_eq!(envelope.namespace, TEST_NAMESPACE);
-            assert_eq!(
-                envelope.payload,
-                b"extension-event:callback-output:extension-buffered-output|extension-process-output:0",
-            );
-        }
-        other => panic!("unexpected extension event: {other:?}"),
-    }
-}
-
-#[test]
-fn extension_session_resources_can_dispose_bound_vm() {
-    assert_node_available();
-    let mut sidecar = new_sidecar("extension-vm-lifetime");
-    sidecar
-        .register_extension(Box::new(VmLifetimeExtension))
-        .expect("register vm lifetime extension");
-
-    let connection_id = authenticate_wire(&mut sidecar, "extension-vm-client");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let cwd = temp_dir("extension-vm-lifetime-cwd");
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ExtEnvelope(ExtEnvelope {
-                namespace: String::from("dev.rivet.secure-exec.extension-vm-lifetime-test"),
-                payload: Vec::new(),
-            }),
-        ))
-        .expect("dispatch vm lifetime extension request");
-
-    match result.response.payload {
-        ResponsePayload::ExtEnvelope(envelope) => {
-            assert_eq!(
-                envelope.namespace,
-                "dev.rivet.secure-exec.extension-vm-lifetime-test"
-            );
-            assert_eq!(envelope.payload, b"vm-disposed");
-        }
-        other => panic!("unexpected extension response: {other:?}"),
-    }
-    assert!(result.events.iter().any(|event| {
-        matches!(&event.payload, EventPayload::VmLifecycleEvent(event) if event.state == VmLifecycleState::Disposed)
-    }));
-
-    let rejected = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::Exists,
-                path: String::from("/tmp/extension-fs.txt"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ))
-        .expect("dispatch call against disposed vm");
-    match rejected.response.payload {
-        ResponsePayload::RejectedResponse(rejected) => {
-            assert_eq!(rejected.code, "invalid_state");
-            assert!(rejected.message.contains(&vm_id));
-        }
-        other => panic!("unexpected disposed-vm response: {other:?}"),
-    }
-
-    sidecar
-        .with_bridge_mut(|bridge: &mut RecordingBridge| {
-            let snapshot = bridge
-                .load_filesystem_state(LoadFilesystemStateRequest {
-                    vm_id: vm_id.clone(),
-                })
-                .expect("load persisted snapshot");
-            assert!(
-                snapshot.is_some(),
-                "extension-bound vm disposal should flush a filesystem snapshot"
-            );
-        })
-        .expect("inspect persistence bridge");
-}
-
-#[test]
-fn duplicate_extension_namespaces_are_rejected() {
-    let mut sidecar = new_sidecar("extension-duplicate");
-    sidecar
-        .register_extension(Box::new(EchoExtension))
-        .expect("register first extension");
-
-    let error = sidecar
-        .register_extension(Box::new(EchoExtension))
-        .expect_err("duplicate extension namespace should fail");
-    assert!(matches!(error, SidecarError::Conflict(_)));
-}
diff --git a/crates/sidecar/tests/fetch_via_undici.rs b/crates/sidecar/tests/fetch_via_undici.rs
deleted file mode 100644
index 9f7a3779a..000000000
--- a/crates/sidecar/tests/fetch_via_undici.rs
+++ /dev/null
@@ -1,591 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::GuestRuntimeKind;
-use std::collections::HashMap;
-use std::io::{Read, Write};
-use std::net::TcpListener;
-use std::process::Command;
-use std::sync::atomic::{AtomicUsize, Ordering};
-use std::sync::Arc;
-use std::thread;
-use std::time::{Duration, Instant};
-use support::{
-    assert_node_available, authenticate_wire, collect_process_output_wire_with_timeout,
-    create_vm_wire_with_metadata, dispose_vm_and_close_session, execute_wire, new_sidecar,
-    open_session_wire, temp_dir, write_fixture,
-};
-
-const FETCH_VIA_UNDICI_CASES: &[&str] = &["fetch", "abort", "keepalive_no_listener_leak"];
-
-// Regression guard for the net-bridge socket-listener leak: a long-lived VM that
-// makes many keep-alive HTTP requests over one reused bridge socket must not
-// accumulate per-request socket/undici listeners. Each leaked listener trips the
-// guest EventEmitter's `MaxListenersExceededWarning` via `console.error`, which
-// lands on the process stderr -- so an empty stderr after N >> 10 reused requests
-// proves listeners are added and removed symmetrically per request.
-fn javascript_fetch_keepalive_does_not_leak_socket_listeners() {
-    assert_node_available();
-
-    // Concurrency is the trigger: with an UNBOUNDED per-origin pool, overlapping
-    // requests dispatched during the connect window each find every existing client
-    // still `kNeedDrain` and spawn a fresh Client+socket (undici pool.rs kGetDispatcher),
-    // accumulating their listener sets without bound. The fix bounds the agent's
-    // `connections`, so excess requests queue on existing clients instead of spawning
-    // new ones -- the host-side connection count (each guest socket = one accepted TCP
-    // connection) then stays a small multiple of the concurrency instead of growing
-    // toward the total request count.
-    const CONCURRENCY: usize = 8;
-    const ROUNDS: usize = 20;
-    const REQUESTS: usize = CONCURRENCY * ROUNDS;
-
-    let mut sidecar = new_sidecar("fetch-keepalive-leak");
-    let cwd = temp_dir("fetch-keepalive-leak-cwd");
-    let entry = cwd.join("fetch-keepalive-entry.mjs");
-
-    let listener = TcpListener::bind("127.0.0.1:0").expect("bind host http listener");
-    let port = listener.local_addr().expect("listener addr").port();
-    let served = Arc::new(AtomicUsize::new(0));
-    let connections = Arc::new(AtomicUsize::new(0));
-    let served_server = served.clone();
-    let connections_server = connections.clone();
-    let server = thread::spawn(move || {
-        listener
-            .set_nonblocking(true)
-            .expect("configure nonblocking listener");
-        let deadline = Instant::now() + Duration::from_secs(25);
-        let mut handlers = Vec::new();
-        // Accept every connection the guest opens (one reused keep-alive socket in the
-        // common case, but robust to a fresh socket per request) and serve keep-alive
-        // responses on each until the guest closes it. Reading to the client's EOF
-        // means teardown is a clean FIN, never an ECONNRESET test artifact.
-        while served_server.load(Ordering::SeqCst) < REQUESTS && Instant::now() < deadline {
-            match listener.accept() {
-                Ok((mut stream, _)) => {
-                    connections_server.fetch_add(1, Ordering::SeqCst);
-                    let served_handler = served.clone();
-                    handlers.push(thread::spawn(move || {
-                        stream
-                            .set_read_timeout(Some(Duration::from_millis(200)))
-                            .expect("configure read timeout");
-                        let handler_deadline = Instant::now() + Duration::from_secs(20);
-                        let mut buffer: Vec<u8> = Vec::new();
-                        let mut chunk = [0_u8; 4096];
-                        while Instant::now() < handler_deadline {
-                            match stream.read(&mut chunk) {
-                                Ok(0) => break, // guest closed this connection
-                                Ok(n) => {
-                                    buffer.extend_from_slice(&chunk[..n]);
-                                    // GET requests have no body: each ends at CRLFCRLF.
-                                    while let Some(pos) = buffer
-                                        .windows(4)
-                                        .position(|window| window == b"\r\n\r\n")
-                                    {
-                                        buffer.drain(..pos + 4);
-                                        if stream
-                                            .write_all(
-                                                b"HTTP/1.1 200 OK\r\nContent-Type: text/plain\r\nContent-Length: 11\r\nConnection: keep-alive\r\n\r\nhello world",
-                                            )
-                                            .is_err()
-                                        {
-                                            return;
-                                        }
-                                        let _ = stream.flush();
-                                        served_handler.fetch_add(1, Ordering::SeqCst);
-                                    }
-                                }
-                                Err(error)
-                                    if error.kind() == std::io::ErrorKind::WouldBlock
-                                        || error.kind() == std::io::ErrorKind::TimedOut =>
-                                {
-                                    continue
-                                }
-                                Err(_) => break,
-                            }
-                        }
-                    }));
-                }
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                    thread::sleep(Duration::from_millis(10));
-                }
-                Err(error) => panic!("accept http request: {error}"),
-            }
-        }
-        // Let in-flight handlers drain to the guest's clean close.
-        for handler in handlers {
-            let _ = handler.join();
-        }
-        (
-            served_server.load(Ordering::SeqCst),
-            connections_server.load(Ordering::SeqCst),
-        )
-    });
-
-    write_fixture(
-        &entry,
-        format!(
-            r#"
-const ROUNDS = {ROUNDS};
-const CONCURRENCY = {CONCURRENCY};
-// Surface Node process warnings (MaxListenersExceededWarning et al.) onto stderr so
-// the host can assert on them -- there is no default "warning" handler otherwise, so a
-// listener-leak warning would be emitted-and-dropped instead of observed.
-process.on("warning", (warning) => {{
-  console.error(`PROCESS_WARNING ${{warning.name}}: ${{warning.message}}`);
-}});
-let done = 0;
-// Overlapping requests per round (not strictly sequential) so they dispatch while
-// the pool's clients are still connecting -- the condition that makes an unbounded
-// pool spawn a fresh client+socket per request.
-for (let round = 0; round < ROUNDS; round++) {{
-  await Promise.all(Array.from({{ length: CONCURRENCY }}, async () => {{
-    const response = await fetch("http://127.0.0.1:{port}/health", {{
-      headers: {{ accept: "text/plain" }},
-    }});
-    const body = await response.text();
-    if (response.status !== 200 || body !== "hello world") {{
-      throw new Error(`request failed: status=${{response.status}} body=${{body}}`);
-    }}
-    done++;
-  }}));
-}}
-console.log(JSON.stringify({{ ok: true, count: done }}));
-"#,
-        ),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let mut metadata = HashMap::new();
-    metadata.insert(
-        String::from("env.AGENTOS_LOOPBACK_EXEMPT_PORTS"),
-        format!("[{port}]"),
-    );
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        metadata,
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "fetch-keepalive-process",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_wire_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "fetch-keepalive-process",
-        Duration::from_secs(30),
-    );
-    dispose_vm_and_close_session(&mut sidecar, &connection_id, &session_id, &vm_id);
-    let server_result = server.join();
-
-    assert_eq!(exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    // The leak guard: a MaxListenersExceededWarning (re-surfaced via the fixture's
-    // process.on("warning") handler) lands on stderr. The fixture's only other stderr
-    // output would be an uncaught error, so stderr must be empty on the happy path.
-    assert!(
-        stderr.trim().is_empty(),
-        "keep-alive request loop produced unexpected stderr (possible listener leak):\n{stderr}"
-    );
-    assert!(
-        !stderr.contains("MaxListenersExceededWarning"),
-        "socket-listener leak detected after {REQUESTS} keep-alive requests:\n{stderr}"
-    );
-    let json_line = stdout
-        .lines()
-        .rev()
-        .find(|line| !line.trim().is_empty())
-        .expect("stdout json line");
-    let payload: serde_json::Value =
-        serde_json::from_str(json_line).expect("parse keepalive fetch result");
-    assert_eq!(payload["ok"], true);
-    assert_eq!(payload["count"], REQUESTS);
-    let (served_count, connection_count) = server_result
-        .unwrap_or_else(|_| panic!("server thread failed\nstdout:\n{stdout}\nstderr:\n{stderr}"));
-    assert_eq!(
-        served_count, REQUESTS,
-        "server should have served every request"
-    );
-    // The real leak guard: the per-origin pool must be BOUNDED. Each guest socket is one
-    // accepted TCP connection here, so an unbounded pool that spawns a fresh client+socket
-    // per overlapping request makes `connection_count` grow with the total request count;
-    // a bounded pool keeps it to a small multiple of the concurrency regardless of how
-    // many requests run. (The MaxListenersExceededWarning guard above is necessary but not
-    // sufficient -- the leaked listeners spread across many per-client emitters, so no
-    // single one may cross the threshold even while sockets grow unbounded.)
-    // With the bounded pool, connections stay at/under the cap (+ a small margin for any
-    // mid-run reconnect) regardless of how many requests run. Observed: 6 with the cap vs
-    // ~2x the concurrency (16) without it for this 8-way / 160-request load.
-    let connection_bound = CONCURRENCY + 2;
-    assert!(
-        connection_count <= connection_bound,
-        "undici client-per-request leak: {served_count} requests over {connection_count} \
-         connections (expected <= {connection_bound} for concurrency {CONCURRENCY}); an \
-         unbounded pool spawns a fresh client+socket per overlapping request"
-    );
-    eprintln!(
-        "[keepalive-leak] served {served_count} requests over {connection_count} connection(s) \
-         (bound {connection_bound})"
-    );
-}
-
-fn javascript_fetch_uses_guest_undici_over_kernel_tcp_socket() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("fetch-via-undici");
-    let cwd = temp_dir("fetch-via-undici-cwd");
-    let entry = cwd.join("fetch-entry.mjs");
-
-    let listener = TcpListener::bind("127.0.0.1:0").expect("bind host http listener");
-    let port = listener.local_addr().expect("listener addr").port();
-    let server = thread::spawn(move || {
-        listener
-            .set_nonblocking(true)
-            .expect("configure nonblocking listener");
-        let deadline = Instant::now() + Duration::from_secs(5);
-        let (mut stream, _) = loop {
-            match listener.accept() {
-                Ok(accepted) => break accepted,
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                    assert!(
-                        Instant::now() < deadline,
-                        "timed out waiting for guest fetch connection"
-                    );
-                    thread::sleep(Duration::from_millis(10));
-                }
-                Err(error) => panic!("accept http request: {error}"),
-            }
-        };
-        stream
-            .set_read_timeout(Some(Duration::from_secs(2)))
-            .expect("configure http request read timeout");
-        let mut request = String::new();
-        let mut buffer = [0_u8; 4096];
-        let bytes_read = stream.read(&mut buffer).expect("read http request");
-        request.push_str(&String::from_utf8_lossy(&buffer[..bytes_read]));
-        assert!(
-            request.contains("GET /health HTTP/1.1"),
-            "unexpected request: {request}"
-        );
-
-        stream
-            .write_all(
-                b"HTTP/1.1 200 OK\r\nContent-Type: text/plain\r\nContent-Length: 11\r\nConnection: close\r\n\r\nhello world",
-            )
-            .expect("write http response");
-        stream.flush().expect("flush http response");
-    });
-
-    write_fixture(
-        &entry,
-        format!(
-            r#"
-console.log("before-fetch");
-console.log(JSON.stringify({{
-  fetchType: typeof fetch,
-  globalFetchType: typeof globalThis.fetch,
-}}));
-const response = await fetch("http://127.0.0.1:{port}/health", {{
-  headers: {{ accept: "text/plain" }},
-}});
-if (response.status !== 200) {{
-  throw new Error(`status=${{response.status}}`);
-}}
-if (!response.body || typeof response.body.getReader !== "function") {{
-  throw new Error("expected ReadableStream body");
-}}
-const reader = response.body.getReader();
-const decoder = new TextDecoder();
-let body = "";
-for (;;) {{
-  const {{ value, done }} = await reader.read();
-  if (done) break;
-  body += decoder.decode(value, {{ stream: true }});
-}}
-body += decoder.decode();
-console.log(JSON.stringify({{
-  status: response.status,
-  body,
-  contentType: response.headers.get("content-type"),
-  hasReader: true,
-}}));
-"#,
-        ),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let mut metadata = HashMap::new();
-    metadata.insert(
-        String::from("env.AGENTOS_LOOPBACK_EXEMPT_PORTS"),
-        format!("[{port}]"),
-    );
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        metadata,
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "fetch-process",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_wire_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "fetch-process",
-        Duration::from_secs(10),
-    );
-    dispose_vm_and_close_session(&mut sidecar, &connection_id, &session_id, &vm_id);
-    let server_result = server.join();
-
-    assert_eq!(exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(stderr.trim().is_empty(), "unexpected stderr:\n{stderr}");
-    let json_line = stdout
-        .lines()
-        .rev()
-        .find(|line| !line.trim().is_empty())
-        .expect("stdout json line");
-    let payload: serde_json::Value = serde_json::from_str(json_line).expect("parse fetch result");
-    assert_eq!(payload["status"], 200);
-    assert_eq!(payload["body"], "hello world");
-    assert_eq!(payload["contentType"], "text/plain");
-    assert_eq!(payload["hasReader"], true);
-    server_result
-        .unwrap_or_else(|_| panic!("server thread failed\nstdout:\n{stdout}\nstderr:\n{stderr}"));
-}
-
-fn javascript_fetch_honors_abortsignal_timeout_and_manual_abort() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("fetch-abort-via-undici");
-    let cwd = temp_dir("fetch-abort-via-undici-cwd");
-    let entry = cwd.join("fetch-abort-entry.mjs");
-
-    let listener = TcpListener::bind("127.0.0.1:0").expect("bind host http listener");
-    let port = listener.local_addr().expect("listener addr").port();
-    let server = thread::spawn(move || {
-        listener
-            .set_nonblocking(true)
-            .expect("configure nonblocking listener");
-        let deadline = Instant::now() + Duration::from_secs(10);
-        for _ in 0..2 {
-            let (mut stream, _) = loop {
-                match listener.accept() {
-                    Ok(accepted) => break accepted,
-                    Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                        assert!(
-                            Instant::now() < deadline,
-                            "timed out waiting for guest fetch connection"
-                        );
-                        thread::sleep(Duration::from_millis(10));
-                    }
-                    Err(error) => panic!("accept http request: {error}"),
-                }
-            };
-
-            stream
-                .set_read_timeout(Some(Duration::from_secs(2)))
-                .expect("configure abort request read timeout");
-            let mut buffer = [0_u8; 4096];
-            let _ = stream.read(&mut buffer);
-            thread::sleep(Duration::from_millis(250));
-            let _ = stream.write_all(
-                b"HTTP/1.1 200 OK\r\nContent-Type: text/plain\r\nContent-Length: 7\r\nConnection: close\r\n\r\nignored",
-            );
-            let _ = stream.flush();
-        }
-    });
-
-    write_fixture(
-        &entry,
-        format!(
-            r#"
-async function expectAbort(label, promiseFactory, expectedReason) {{
-  try {{
-    await promiseFactory();
-    throw new Error(`${{label}} unexpectedly resolved`);
-  }} catch (error) {{
-    return {{
-      label,
-      name: error?.name ?? null,
-      code: error?.code ?? null,
-      message: String(error?.message ?? ""),
-      expectedReason,
-    }};
-  }}
-}}
-
-const timeoutSignal = AbortSignal.timeout(50);
-let timeoutSignalEvents = 0;
-timeoutSignal.addEventListener("abort", () => {{
-  timeoutSignalEvents += 1;
-}});
-const timeoutResult = await expectAbort(
-  "timeout",
-  () => fetch("http://127.0.0.1:{port}/timeout", {{ signal: timeoutSignal }}),
-  timeoutSignal.reason?.name ?? null,
-);
-
-const controller = new AbortController();
-let manualSignalEvents = 0;
-controller.signal.addEventListener("abort", () => {{
-  manualSignalEvents += 1;
-}});
-setTimeout(() => controller.abort("manual-stop"), 25);
-const manualResult = await expectAbort(
-  "manual",
-  () => fetch("http://127.0.0.1:{port}/manual", {{ signal: controller.signal }}),
-  controller.signal.reason ?? null,
-);
-
-console.log(JSON.stringify({{
-  timeoutResult,
-  timeoutSignalAborted: timeoutSignal.aborted,
-  timeoutSignalEvents,
-  timeoutSignalReasonName: timeoutSignal.reason?.name ?? null,
-  manualResult,
-  manualSignalAborted: controller.signal.aborted,
-  manualSignalEvents,
-  manualSignalReason: controller.signal.reason ?? null,
-}}));
-"#,
-        ),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-abort");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let mut metadata = HashMap::new();
-    metadata.insert(
-        String::from("env.AGENTOS_LOOPBACK_EXEMPT_PORTS"),
-        format!("[{port}]"),
-    );
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        metadata,
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "fetch-abort-process",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_wire_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "fetch-abort-process",
-        Duration::from_secs(10),
-    );
-    dispose_vm_and_close_session(&mut sidecar, &connection_id, &session_id, &vm_id);
-    let server_result = server.join();
-
-    assert_eq!(exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(stderr.trim().is_empty(), "unexpected stderr:\n{stderr}");
-    let json_line = stdout
-        .lines()
-        .rev()
-        .find(|line| !line.trim().is_empty())
-        .expect("stdout json line");
-    let payload: serde_json::Value = serde_json::from_str(json_line).expect("parse fetch result");
-
-    assert_eq!(payload["timeoutSignalAborted"], true);
-    assert_eq!(payload["timeoutSignalEvents"], 1);
-    assert_eq!(payload["timeoutSignalReasonName"], "AbortError");
-    assert_ne!(
-        payload["timeoutResult"]["message"],
-        "timeout unexpectedly resolved"
-    );
-
-    assert_eq!(payload["manualSignalAborted"], true);
-    assert_eq!(payload["manualSignalEvents"], 1);
-    assert_eq!(payload["manualSignalReason"], "manual-stop");
-    assert_ne!(
-        payload["manualResult"]["message"],
-        "manual unexpectedly resolved"
-    );
-
-    server_result
-        .unwrap_or_else(|_| panic!("server thread failed\nstdout:\n{stdout}\nstderr:\n{stderr}"));
-}
-
-fn run_named_case(case_name: &str) {
-    match case_name {
-        "fetch" => javascript_fetch_uses_guest_undici_over_kernel_tcp_socket(),
-        "abort" => javascript_fetch_honors_abortsignal_timeout_and_manual_abort(),
-        "keepalive_no_listener_leak" => javascript_fetch_keepalive_does_not_leak_socket_listeners(),
-        other => panic!("unknown fetch_via_undici case: {other}"),
-    }
-}
-
-#[test]
-fn fetch_via_undici_cases() {
-    let current_exe = std::env::current_exe().expect("current test binary path");
-
-    for case_name in FETCH_VIA_UNDICI_CASES {
-        let status = Command::new(&current_exe)
-            .arg("--exact")
-            .arg("__fetch_via_undici_case_runner")
-            .arg("--nocapture")
-            .env("AGENTOS_FETCH_VIA_UNDICI_CASE", case_name)
-            .status()
-            .unwrap_or_else(|error| {
-                panic!("spawn fetch_via_undici runner for {case_name}: {error}")
-            });
-
-        assert!(
-            status.success(),
-            "fetch_via_undici case {case_name} failed with status {status}"
-        );
-    }
-}
-
-#[test]
-fn __fetch_via_undici_case_runner() {
-    let Ok(case_name) = std::env::var("AGENTOS_FETCH_VIA_UNDICI_CASE") else {
-        return;
-    };
-
-    run_named_case(&case_name);
-}
diff --git a/crates/sidecar/tests/filesystem.rs b/crates/sidecar/tests/filesystem.rs
deleted file mode 100644
index 744cf37cb..000000000
--- a/crates/sidecar/tests/filesystem.rs
+++ /dev/null
@@ -1,945 +0,0 @@
-mod support;
-
-// `host_dir.rs` is `include!`d below rather than linked from the crate, so its
-// macOS-only `crate::macos_fs::…` references must resolve within this test
-// binary too. Wire the same module in (macOS only; on Linux those references
-// are `#[cfg]`d out and this module is unused).
-#[cfg(target_os = "macos")]
-#[path = "../src/macos_fs.rs"]
-mod macos_fs;
-
-mod host_dir {
-    #![allow(dead_code)]
-    include!("../src/plugins/host_dir.rs");
-
-    mod tests {
-        use super::HostDirFilesystem;
-        use nix::sys::stat::{utimensat, UtimensatFlags};
-        use nix::sys::time::{TimeSpec, TimeValLike};
-        use secure_exec_kernel::command_registry::CommandDriver;
-        use secure_exec_kernel::fd_table::O_RDWR;
-        use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig, SpawnOptions};
-        use secure_exec_kernel::mount_table::{MountOptions, MountTable};
-        use secure_exec_kernel::permissions::Permissions;
-        use secure_exec_kernel::vfs::{
-            MemoryFileSystem, VirtualFileSystem, VirtualTimeSpec, VirtualUtimeSpec,
-        };
-        use std::fs;
-        use std::os::unix::fs::{MetadataExt, PermissionsExt};
-        use std::path::PathBuf;
-        use std::time::{SystemTime, UNIX_EPOCH};
-
-        fn temp_dir(prefix: &str) -> PathBuf {
-            let suffix = SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("clock should be monotonic enough for temp paths")
-                .as_nanos();
-            let path = std::env::temp_dir().join(format!("{prefix}-{suffix}"));
-            fs::create_dir_all(&path).expect("create temp dir");
-            path
-        }
-
-        fn spawn_shell_in<F: VirtualFileSystem + 'static>(
-            kernel: &mut KernelVm<F>,
-        ) -> secure_exec_kernel::kernel::KernelProcessHandle {
-            kernel
-                .spawn_process(
-                    "sh",
-                    Vec::new(),
-                    SpawnOptions {
-                        requester_driver: Some(String::from("shell")),
-                        ..SpawnOptions::default()
-                    },
-                )
-                .expect("spawn shell")
-        }
-
-        #[test]
-        fn filesystem_host_dir_metadata_ops_reject_symlink_escape_targets() {
-            let host_dir = temp_dir("secure-exec-sidecar-filesystem-host-dir");
-            let outside_dir = temp_dir("secure-exec-sidecar-filesystem-host-dir-outside");
-            let outside_file = outside_dir.join("outside.txt");
-            fs::write(&outside_file, b"outside").expect("seed outside file");
-            std::os::unix::fs::symlink(&outside_file, host_dir.join("link"))
-                .expect("seed escape symlink");
-
-            let baseline = fs::metadata(&outside_file).expect("outside metadata before ops");
-            let baseline_mode = baseline.permissions().mode() & 0o7777;
-            let baseline_uid = baseline.uid();
-            let baseline_gid = baseline.gid();
-            let baseline_mtime = baseline.mtime();
-            let baseline_mtime_ns = baseline.mtime_nsec();
-
-            let mut filesystem = HostDirFilesystem::new(&host_dir).expect("create host dir fs");
-
-            let chmod_error = filesystem
-                .chmod("/link", 0o777)
-                .expect_err("chmod should reject escaped symlink target");
-            assert!(matches!(chmod_error.code(), "EPERM" | "EACCES"));
-
-            let chown_error = filesystem
-                .chown("/link", baseline_uid, baseline_gid)
-                .expect_err("chown should reject escaped symlink target");
-            assert!(matches!(chown_error.code(), "EPERM" | "EACCES"));
-
-            let utimes_error = filesystem
-                .utimes("/link", 1_000, 2_000)
-                .expect_err("utimes should reject escaped symlink target");
-            assert!(matches!(utimes_error.code(), "EPERM" | "EACCES"));
-
-            let after = fs::metadata(&outside_file).expect("outside metadata after ops");
-            assert_eq!(after.permissions().mode() & 0o7777, baseline_mode);
-            assert_eq!(after.uid(), baseline_uid);
-            assert_eq!(after.gid(), baseline_gid);
-            assert_eq!(after.mtime(), baseline_mtime);
-            assert_eq!(after.mtime_nsec(), baseline_mtime_ns);
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-            fs::remove_dir_all(outside_dir).expect("remove outside temp dir");
-        }
-
-        #[test]
-        fn filesystem_host_dir_write_file_with_mode_honors_requested_permissions() {
-            let host_dir = temp_dir("secure-exec-sidecar-filesystem-host-dir-write-mode");
-
-            let mut filesystem = HostDirFilesystem::new(&host_dir).expect("create host dir fs");
-            filesystem
-                .write_file_with_mode("/private.txt", b"secret".to_vec(), Some(0o600))
-                .expect("write private host file");
-
-            let metadata = fs::metadata(host_dir.join("private.txt")).expect("read file metadata");
-            assert_eq!(metadata.permissions().mode() & 0o777, 0o600);
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-        }
-
-        #[test]
-        fn filesystem_host_dir_recursive_mkdir_with_mode_honors_requested_permissions() {
-            let host_dir = temp_dir("secure-exec-sidecar-filesystem-host-dir-mkdir-mode");
-
-            let mut filesystem = HostDirFilesystem::new(&host_dir).expect("create host dir fs");
-            filesystem
-                .mkdir_with_mode("/private/nested", true, Some(0o700))
-                .expect("create private directories");
-
-            for relative in ["private", "private/nested"] {
-                let metadata =
-                    fs::metadata(host_dir.join(relative)).expect("read directory metadata");
-                assert_eq!(
-                    metadata.permissions().mode() & 0o777,
-                    0o700,
-                    "unexpected mode for {relative}"
-                );
-            }
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-        }
-
-        #[test]
-        fn filesystem_host_dir_stat_preserves_nanosecond_timestamp_precision() {
-            let host_dir = temp_dir("secure-exec-sidecar-filesystem-host-dir-stat");
-            let tracked_file = host_dir.join("tracked.txt");
-            fs::write(&tracked_file, b"tracked").expect("seed tracked file");
-
-            let atime = TimeSpec::nanoseconds(1_700_000_000_123_456_789);
-            let mtime = TimeSpec::nanoseconds(1_700_000_000_987_654_321);
-            utimensat(
-                None,
-                &tracked_file,
-                &atime,
-                &mtime,
-                UtimensatFlags::NoFollowSymlink,
-            )
-            .expect("set tracked file timestamps");
-
-            let baseline = fs::metadata(&tracked_file).expect("tracked file metadata");
-            assert_ne!(
-                baseline.mtime_nsec(),
-                0,
-                "fixture should keep non-zero mtime nsec"
-            );
-
-            let mut filesystem = HostDirFilesystem::new(&host_dir).expect("create host dir fs");
-            let stat = filesystem.stat("/tracked.txt").expect("stat tracked file");
-
-            assert_eq!(
-                stat.atime_ms,
-                baseline.atime() as u64 * 1_000 + (baseline.atime_nsec() as u64 / 1_000_000)
-            );
-            assert_eq!(stat.atime_nsec, baseline.atime_nsec() as u32);
-            assert_eq!(
-                stat.mtime_ms,
-                baseline.mtime() as u64 * 1_000 + (baseline.mtime_nsec() as u64 / 1_000_000)
-            );
-            assert_eq!(stat.mtime_nsec, baseline.mtime_nsec() as u32);
-            assert_eq!(
-                stat.ctime_ms,
-                baseline.ctime() as u64 * 1_000 + (baseline.ctime_nsec() as u64 / 1_000_000)
-            );
-            assert_eq!(stat.ctime_nsec, baseline.ctime_nsec() as u32);
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-        }
-
-        #[test]
-        fn filesystem_host_dir_utimes_spec_honors_omit_and_now_controls() {
-            let host_dir = temp_dir("secure-exec-sidecar-filesystem-host-dir-utimes-spec");
-            let tracked_file = host_dir.join("tracked.txt");
-            fs::write(&tracked_file, b"tracked").expect("seed tracked file");
-
-            let baseline_atime_sec = 1_700_000_000;
-            let baseline_atime_nsec = 111_111_111;
-            let baseline_mtime_sec = 1_700_000_000;
-            let baseline_mtime_nsec = 222_222_222;
-            let baseline_atime =
-                TimeSpec::nanoseconds(baseline_atime_sec * 1_000_000_000 + baseline_atime_nsec);
-            let baseline_mtime =
-                TimeSpec::nanoseconds(baseline_mtime_sec * 1_000_000_000 + baseline_mtime_nsec);
-            utimensat(
-                None,
-                &tracked_file,
-                &baseline_atime,
-                &baseline_mtime,
-                UtimensatFlags::FollowSymlink,
-            )
-            .expect("seed tracked file timestamps");
-
-            let mut filesystem = HostDirFilesystem::new(&host_dir).expect("create host dir fs");
-            filesystem
-                .utimes_spec(
-                    "/tracked.txt",
-                    VirtualUtimeSpec::Set(
-                        VirtualTimeSpec::new(1_700_000_123, 987_654_321)
-                            .expect("valid atime timespec"),
-                    ),
-                    VirtualUtimeSpec::Omit,
-                    true,
-                )
-                .expect("utimes_spec should preserve mtime");
-
-            let after_omit = fs::metadata(&tracked_file).expect("tracked file metadata after omit");
-            assert_eq!(after_omit.mtime(), baseline_mtime_sec);
-            assert_eq!(after_omit.mtime_nsec(), baseline_mtime_nsec);
-            assert_eq!(after_omit.atime(), 1_700_000_123);
-            assert_eq!(after_omit.atime_nsec(), 987_654_321);
-
-            filesystem
-                .utimes_spec(
-                    "/tracked.txt",
-                    VirtualUtimeSpec::Now,
-                    VirtualUtimeSpec::Omit,
-                    true,
-                )
-                .expect("utimes_spec should accept UTIME_NOW");
-
-            let after_now = fs::metadata(&tracked_file).expect("tracked file metadata after now");
-            assert_eq!(after_now.mtime(), baseline_mtime_sec);
-            assert_eq!(after_now.mtime_nsec(), baseline_mtime_nsec);
-            assert!(
-                after_now.atime() > after_omit.atime()
-                    || (after_now.atime() == after_omit.atime()
-                        && after_now.atime_nsec() >= after_omit.atime_nsec()),
-                "UTIME_NOW should move atime forward"
-            );
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-        }
-
-        #[test]
-        fn filesystem_host_dir_lutimes_updates_symlink_without_touching_target() {
-            let host_dir = temp_dir("secure-exec-sidecar-filesystem-host-dir-lutimes");
-            let target = host_dir.join("target.txt");
-            let link = host_dir.join("link.txt");
-            fs::write(&target, b"target").expect("seed target file");
-            std::os::unix::fs::symlink("target.txt", &link).expect("create symlink");
-
-            let baseline_target = fs::metadata(&target).expect("target metadata before lutimes");
-            let baseline_target_mtime = baseline_target.mtime();
-            let baseline_target_mtime_nsec = baseline_target.mtime_nsec();
-
-            let mut filesystem = HostDirFilesystem::new(&host_dir).expect("create host dir fs");
-            filesystem
-                .utimes_spec(
-                    "/link.txt",
-                    VirtualUtimeSpec::Set(
-                        VirtualTimeSpec::new(1_700_000_444, 123_456_789).expect("valid link atime"),
-                    ),
-                    VirtualUtimeSpec::Set(
-                        VirtualTimeSpec::new(1_700_000_555, 987_654_321).expect("valid link mtime"),
-                    ),
-                    false,
-                )
-                .expect("lutimes should update the symlink itself");
-
-            let link_metadata = fs::symlink_metadata(&link).expect("link metadata after lutimes");
-            let target_metadata = fs::metadata(&target).expect("target metadata after lutimes");
-
-            assert_eq!(link_metadata.mtime(), 1_700_000_555);
-            assert_eq!(link_metadata.mtime_nsec(), 987_654_321);
-            assert_eq!(link_metadata.atime(), 1_700_000_444);
-            assert_eq!(link_metadata.atime_nsec(), 123_456_789);
-            assert_eq!(target_metadata.mtime(), baseline_target_mtime);
-            assert_eq!(target_metadata.mtime_nsec(), baseline_target_mtime_nsec);
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-        }
-
-        #[test]
-        fn kernel_futimes_updates_host_dir_mount_with_nanosecond_precision() {
-            let host_dir = temp_dir("secure-exec-sidecar-filesystem-host-dir-futimes");
-            let tracked_file = host_dir.join("tracked.txt");
-            fs::write(&tracked_file, b"tracked").expect("seed tracked file");
-
-            let mut config = KernelVmConfig::new("vm-host-dir-futimes");
-            config.permissions = Permissions::allow_all();
-            let mut kernel = KernelVm::new(MountTable::new(MemoryFileSystem::new()), config);
-            kernel
-                .register_driver(CommandDriver::new("shell", ["sh"]))
-                .expect("register shell driver");
-            kernel
-                .mount_filesystem(
-                    "/workspace",
-                    HostDirFilesystem::new(&host_dir).expect("host dir fs"),
-                    MountOptions::new("host_dir"),
-                )
-                .expect("mount host dir");
-
-            let process = spawn_shell_in(&mut kernel);
-            let fd = kernel
-                .fd_open(
-                    "shell",
-                    process.pid(),
-                    "/workspace/tracked.txt",
-                    O_RDWR,
-                    None,
-                )
-                .expect("open tracked file");
-
-            kernel
-                .futimes(
-                    "shell",
-                    process.pid(),
-                    fd,
-                    VirtualUtimeSpec::Set(
-                        VirtualTimeSpec::new(1_700_000_666, 111_222_333)
-                            .expect("valid futimes atime"),
-                    ),
-                    VirtualUtimeSpec::Set(
-                        VirtualTimeSpec::new(1_700_000_777, 444_555_666)
-                            .expect("valid futimes mtime"),
-                    ),
-                )
-                .expect("futimes should update host file");
-
-            let metadata = fs::metadata(&tracked_file).expect("tracked metadata after futimes");
-            assert_eq!(metadata.atime(), 1_700_000_666);
-            assert_eq!(metadata.atime_nsec(), 111_222_333);
-            assert_eq!(metadata.mtime(), 1_700_000_777);
-            assert_eq!(metadata.mtime_nsec(), 444_555_666);
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-        }
-    }
-}
-
-mod shadow_root {
-    use secure_exec_sidecar::wire::{
-        ConfigureVmRequest, DisposeReason, DisposeVmRequest, EventPayload, ExecuteRequest,
-        GuestFilesystemCallRequest, GuestFilesystemOperation, GuestRuntimeKind, MountDescriptor,
-        MountPluginDescriptor, RequestPayload, ResponsePayload, RootFilesystemEntryEncoding,
-        StreamChannel,
-    };
-    use serde_json::json;
-    use std::collections::HashMap;
-    use std::fs;
-    use std::time::Duration;
-
-    use crate::support::{
-        self, authenticate_wire, create_vm_wire, open_session_wire, temp_dir, wire_request,
-        wire_vm, RecordingBridge,
-    };
-
-    const PROCESS_OUTPUT_BYTE_LIMIT: usize = 1024 * 1024;
-
-    fn create_test_sidecar() -> secure_exec_sidecar::NativeSidecar<RecordingBridge> {
-        support::new_sidecar("filesystem-test")
-    }
-
-    fn authenticate_and_open_session(
-        sidecar: &mut secure_exec_sidecar::NativeSidecar<RecordingBridge>,
-    ) -> (String, String) {
-        let connection_id = authenticate_wire(sidecar, "conn-1");
-        let session_id = open_session_wire(sidecar, 2, &connection_id);
-        (connection_id, session_id)
-    }
-
-    fn create_vm_with_mounts(
-        sidecar: &mut secure_exec_sidecar::NativeSidecar<RecordingBridge>,
-        connection_id: &str,
-        session_id: &str,
-        extra_mounts: Vec<MountDescriptor>,
-    ) -> String {
-        let cwd = temp_dir("filesystem-vm-cwd");
-        let (vm_id, _) = create_vm_wire(
-            sidecar,
-            3,
-            connection_id,
-            session_id,
-            GuestRuntimeKind::JavaScript,
-            &cwd,
-        );
-        let command_root = registry_command_root()
-            .expect("registry WASM commands are required before mounting command root");
-        let mut mounts = vec![MountDescriptor {
-            guest_path: String::from("/__secure_exec/commands/0"),
-            read_only: true,
-            plugin: MountPluginDescriptor {
-                id: String::from("host_dir"),
-                config: serde_json::to_string(&json!({
-                    "hostPath": command_root,
-                    "readOnly": true,
-                }))
-                .expect("serialize command mount config"),
-            },
-        }];
-        mounts.extend(extra_mounts);
-        sidecar
-            .dispatch_wire_blocking(wire_request(
-                4,
-                wire_vm(connection_id, session_id, &vm_id),
-                RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                    mounts,
-                    software: Vec::new(),
-                    permissions: None,
-                    module_access_cwd: None,
-                    instructions: Vec::new(),
-                    projected_modules: Vec::new(),
-                    command_permissions: HashMap::new(),
-                    loopback_exempt_ports: Vec::new(),
-                    packages: Vec::new(),
-                    packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                }),
-            ))
-            .expect("configure command mount");
-
-        vm_id
-    }
-
-    fn registry_command_root() -> Option<String> {
-        let repo_root = std::path::PathBuf::from(env!("CARGO_MANIFEST_DIR"))
-            .join("../..")
-            .canonicalize()
-            .expect("canonicalize repo root");
-        let copied = repo_root.join("registry/software/coreutils/wasm");
-        if copied.exists() {
-            return Some(copied.to_string_lossy().into_owned());
-        }
-
-        let fallback = repo_root.join("registry/native/target/wasm32-wasip1/release/commands");
-        if fallback.exists() {
-            return Some(fallback.to_string_lossy().into_owned());
-        }
-
-        eprintln!(
-            "registry WASM commands are required for filesystem tests: expected {} or {}",
-            copied.display(),
-            fallback.display()
-        );
-        None
-    }
-
-    fn guest_filesystem_call(
-        sidecar: &mut secure_exec_sidecar::NativeSidecar<RecordingBridge>,
-        connection_id: &str,
-        session_id: &str,
-        vm_id: &str,
-        request_id: i64,
-        payload: GuestFilesystemCallRequest,
-    ) {
-        let response = sidecar
-            .dispatch_wire_blocking(wire_request(
-                request_id,
-                wire_vm(connection_id, session_id, vm_id),
-                RequestPayload::GuestFilesystemCallRequest(payload),
-            ))
-            .expect("dispatch guest filesystem call");
-        match response.response.payload {
-            ResponsePayload::GuestFilesystemResultResponse(_) => {}
-            other => panic!("expected guest_filesystem_result response, got {other:?}"),
-        }
-    }
-
-    #[allow(clippy::too_many_arguments)]
-    fn execute_command(
-        sidecar: &mut secure_exec_sidecar::NativeSidecar<RecordingBridge>,
-        connection_id: &str,
-        session_id: &str,
-        vm_id: &str,
-        request_id: i64,
-        process_id: &str,
-        command: &str,
-        args: Vec<String>,
-    ) -> (String, String, Option<i32>) {
-        let response = sidecar
-            .dispatch_wire_blocking(wire_request(
-                request_id,
-                wire_vm(connection_id, session_id, vm_id),
-                RequestPayload::ExecuteRequest(ExecuteRequest {
-                    process_id: String::from(process_id),
-                    command: Some(String::from(command)),
-                    runtime: None,
-                    entrypoint: None,
-                    args,
-                    env: HashMap::new(),
-                    cwd: Some(String::from("/workspace")),
-                    wasm_permission_tier: None,
-                }),
-            ))
-            .expect("dispatch execute");
-
-        match response.response.payload {
-            ResponsePayload::ProcessStartedResponse(started) => {
-                assert_eq!(started.process_id, process_id);
-            }
-            other => panic!("unexpected execute response: {other:?}"),
-        }
-
-        drain_process_output(sidecar, connection_id, session_id, vm_id, process_id)
-    }
-
-    fn execute_javascript_entrypoint(
-        sidecar: &mut secure_exec_sidecar::NativeSidecar<RecordingBridge>,
-        connection_id: &str,
-        session_id: &str,
-        vm_id: &str,
-        request_id: i64,
-        process_id: &str,
-        entrypoint: &str,
-    ) -> (String, String, Option<i32>) {
-        let response = sidecar
-            .dispatch_wire_blocking(wire_request(
-                request_id,
-                wire_vm(connection_id, session_id, vm_id),
-                RequestPayload::ExecuteRequest(ExecuteRequest {
-                    process_id: String::from(process_id),
-                    command: None,
-                    runtime: Some(GuestRuntimeKind::JavaScript),
-                    entrypoint: Some(String::from(entrypoint)),
-                    args: Vec::new(),
-                    env: HashMap::new(),
-                    cwd: Some(String::from("/workspace")),
-                    wasm_permission_tier: None,
-                }),
-            ))
-            .expect("dispatch execute");
-
-        match response.response.payload {
-            ResponsePayload::ProcessStartedResponse(started) => {
-                assert_eq!(started.process_id, process_id);
-            }
-            other => panic!("unexpected execute response: {other:?}"),
-        }
-
-        drain_process_output(sidecar, connection_id, session_id, vm_id, process_id)
-    }
-
-    fn drain_process_output(
-        sidecar: &mut secure_exec_sidecar::NativeSidecar<RecordingBridge>,
-        connection_id: &str,
-        session_id: &str,
-        vm_id: &str,
-        process_id: &str,
-    ) -> (String, String, Option<i32>) {
-        let ownership = wire_vm(connection_id, session_id, vm_id);
-        let mut stdout = String::new();
-        let mut stderr = String::new();
-        let mut exit_code = None;
-
-        for _ in 0..64 {
-            let Some(event) = sidecar
-                .poll_event_wire_blocking(&ownership, Duration::from_secs(5))
-                .expect("poll wire process event")
-            else {
-                if exit_code.is_some() {
-                    break;
-                }
-                panic!("timed out waiting for process {process_id} to exit");
-            };
-
-            match event.payload {
-                EventPayload::ProcessOutputEvent(output) if output.process_id == process_id => {
-                    match output.channel {
-                        StreamChannel::Stdout => {
-                            append_process_output(
-                                &mut stdout,
-                                &output.chunk,
-                                &output.process_id,
-                                "stdout",
-                            );
-                        }
-                        StreamChannel::Stderr => {
-                            append_process_output(
-                                &mut stderr,
-                                &output.chunk,
-                                &output.process_id,
-                                "stderr",
-                            );
-                        }
-                    }
-                }
-                EventPayload::ProcessExitedEvent(exited) if exited.process_id == process_id => {
-                    exit_code = Some(exited.exit_code);
-                    break;
-                }
-                _ => {}
-            }
-        }
-
-        (stdout, stderr, exit_code)
-    }
-
-    fn append_process_output(buffer: &mut String, chunk: &[u8], process_id: &str, channel: &str) {
-        let text = String::from_utf8_lossy(chunk);
-        assert!(
-            buffer.len().saturating_add(text.len()) <= PROCESS_OUTPUT_BYTE_LIMIT,
-            "filesystem process {process_id} exceeded {PROCESS_OUTPUT_BYTE_LIMIT} bytes on {channel}"
-        );
-        buffer.push_str(&text);
-    }
-
-    fn dispose_vm_and_close_session(
-        sidecar: &mut secure_exec_sidecar::NativeSidecar<RecordingBridge>,
-        connection_id: &str,
-        session_id: &str,
-        vm_id: &str,
-    ) {
-        sidecar
-            .dispatch_wire_blocking(wire_request(
-                90,
-                wire_vm(connection_id, session_id, vm_id),
-                RequestPayload::DisposeVmRequest(DisposeVmRequest {
-                    reason: DisposeReason::Requested,
-                }),
-            ))
-            .expect("dispose vm");
-        sidecar
-            .close_session_blocking(connection_id, session_id)
-            .expect("close session");
-        sidecar
-            .remove_connection_blocking(connection_id)
-            .expect("remove connection");
-    }
-
-    #[test]
-    fn filesystem_cross_mount_rename_reports_exdev_to_js_and_falls_back_in_shell() {
-        if registry_command_root().is_none() {
-            return;
-        }
-
-        let host_dir = temp_dir("secure-exec-sidecar-cross-mount-rename-js");
-        fs::write(host_dir.join("source.txt"), "mapped-source\n").expect("seed mapped file");
-
-        let mut sidecar = create_test_sidecar();
-        let (connection_id, session_id) = authenticate_and_open_session(&mut sidecar);
-        let vm_id = create_vm_with_mounts(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            vec![MountDescriptor {
-                guest_path: String::from("/mapped"),
-                read_only: false,
-                plugin: MountPluginDescriptor {
-                    id: String::from("host_dir"),
-                    config: serde_json::to_string(&json!({
-                        "hostPath": host_dir.to_string_lossy().into_owned(),
-                        "readOnly": false,
-                    }))
-                    .expect("serialize mapped mount config"),
-                },
-            }],
-        );
-
-        guest_filesystem_call(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            4,
-            GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::WriteFile,
-                path: String::from("/workspace/original.txt"),
-                content: Some(String::from("original\n")),
-                encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                ..GuestFilesystemCallRequest {
-                    operation: GuestFilesystemOperation::WriteFile,
-                    path: String::new(),
-                    destination_path: None,
-                    target: None,
-                    content: None,
-                    encoding: None,
-                    recursive: false,
-            max_depth: None,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    atime_ms: None,
-                    mtime_ms: None,
-                    len: None,
-                    offset: None,
-                }
-            },
-        );
-        guest_filesystem_call(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            5,
-            GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::Symlink,
-                path: String::from("/workspace/alias.txt"),
-                target: Some(String::from("/workspace/original.txt")),
-                ..GuestFilesystemCallRequest {
-                    operation: GuestFilesystemOperation::Symlink,
-                    path: String::new(),
-                    destination_path: None,
-                    target: None,
-                    content: None,
-                    encoding: None,
-                    recursive: false,
-            max_depth: None,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    atime_ms: None,
-                    mtime_ms: None,
-                    len: None,
-                    offset: None,
-                }
-            },
-        );
-
-        let (stdout, stderr, exit_code) = execute_command(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            6,
-            "proc-ls-symlink",
-            "/bin/ls",
-            vec![String::from("-l"), String::from("/workspace")],
-        );
-        assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-        assert!(
-            stdout.contains("alias.txt"),
-            "stdout did not render mirrored symlink:\n{stdout}"
-        );
-
-        let (cat_stdout, cat_stderr, cat_exit_code) = execute_command(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            7,
-            "proc-cat-symlink",
-            "/bin/cat",
-            vec![String::from("/workspace/alias.txt")],
-        );
-        assert_eq!(cat_exit_code, Some(0), "stderr: {cat_stderr}");
-        assert_eq!(cat_stdout, "original\n");
-
-        guest_filesystem_call(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            8,
-            GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::Link,
-                path: String::from("/workspace/original.txt"),
-                destination_path: Some(String::from("/workspace/linked.txt")),
-                ..GuestFilesystemCallRequest {
-                    operation: GuestFilesystemOperation::Link,
-                    path: String::new(),
-                    destination_path: None,
-                    target: None,
-                    content: None,
-                    encoding: None,
-                    recursive: false,
-            max_depth: None,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    atime_ms: None,
-                    mtime_ms: None,
-                    len: None,
-                    offset: None,
-                }
-            },
-        );
-
-        let (ls_stdout, ls_stderr, ls_exit_code) = execute_command(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            9,
-            "proc-ls-link",
-            "/bin/ls",
-            vec![String::from("-l"), String::from("/workspace")],
-        );
-        assert_eq!(ls_exit_code, Some(0), "stderr: {ls_stderr}");
-        assert!(
-            ls_stdout.contains("linked.txt"),
-            "stdout did not render mirrored hard link:\n{ls_stdout}"
-        );
-
-        let (cat_stdout, cat_stderr, cat_exit_code) = execute_command(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            10,
-            "proc-cat-link",
-            "/bin/cat",
-            vec![String::from("/workspace/linked.txt")],
-        );
-        assert_eq!(cat_exit_code, Some(0), "stderr: {cat_stderr}");
-        assert_eq!(cat_stdout, "original\n");
-
-        guest_filesystem_call(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            11,
-            GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::Mkdir,
-                path: String::from("/kernel"),
-                recursive: false,
-            max_depth: None,
-                ..GuestFilesystemCallRequest {
-                    operation: GuestFilesystemOperation::Mkdir,
-                    path: String::new(),
-                    destination_path: None,
-                    target: None,
-                    content: None,
-                    encoding: None,
-                    recursive: false,
-            max_depth: None,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    atime_ms: None,
-                    mtime_ms: None,
-                    len: None,
-                    offset: None,
-                }
-            },
-        );
-
-        guest_filesystem_call(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            12,
-            GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::WriteFile,
-                path: String::from("/workspace/rename-check.js"),
-                content: Some(String::from(
-                    r#"const fs = require("node:fs");
-
-try {
-  fs.renameSync("/mapped/source.txt", "/kernel/dest.txt");
-  console.log(JSON.stringify({ ok: true }));
-} catch (error) {
-  console.log(JSON.stringify({ ok: false, code: error.code, message: error.message }));
-}
-"#,
-                )),
-                encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                ..GuestFilesystemCallRequest {
-                    operation: GuestFilesystemOperation::WriteFile,
-                    path: String::new(),
-                    destination_path: None,
-                    target: None,
-                    content: None,
-                    encoding: None,
-                    recursive: false,
-            max_depth: None,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    atime_ms: None,
-                    mtime_ms: None,
-                    len: None,
-                    offset: None,
-                }
-            },
-        );
-
-        let (stdout, stderr, exit_code) = execute_javascript_entrypoint(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            13,
-            "proc-js-rename-exdev",
-            "/workspace/rename-check.js",
-        );
-        assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-        let result: serde_json::Value =
-            serde_json::from_str(stdout.trim()).expect("parse renameSync result");
-        assert_eq!(result["ok"], false);
-        assert_eq!(result["code"], "EXDEV");
-        assert!(
-            !host_dir.join("dest.txt").exists(),
-            "renameSync should not create a host destination during EXDEV failure"
-        );
-        assert!(
-            host_dir.join("source.txt").exists(),
-            "renameSync should leave the mapped source in place on EXDEV"
-        );
-
-        fs::write(host_dir.join("source.txt"), "mv-fallback\n").expect("reset mapped file for mv");
-
-        let (stdout, stderr, exit_code) = execute_command(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            14,
-            "proc-mv-cross-mount",
-            "/bin/mv",
-            vec![
-                String::from("/mapped/source.txt"),
-                String::from("/kernel/copied.txt"),
-            ],
-        );
-        assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-        assert_eq!(stderr, "");
-
-        let (cat_stdout, cat_stderr, cat_exit_code) = execute_command(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            15,
-            "proc-cat-cross-mount",
-            "/bin/cat",
-            vec![String::from("/kernel/copied.txt")],
-        );
-        assert_eq!(cat_exit_code, Some(0), "stderr: {cat_stderr}");
-        assert_eq!(cat_stdout, "mv-fallback\n");
-        assert!(
-            !host_dir.join("source.txt").exists(),
-            "mv should unlink the mapped source after copying"
-        );
-
-        dispose_vm_and_close_session(&mut sidecar, &connection_id, &session_id, &vm_id);
-        fs::remove_dir_all(host_dir).expect("remove temp dir");
-    }
-}
diff --git a/crates/sidecar/tests/fixtures/gen-pm-layouts.sh b/crates/sidecar/tests/fixtures/gen-pm-layouts.sh
deleted file mode 100755
index dfb204293..000000000
--- a/crates/sidecar/tests/fixtures/gen-pm-layouts.sh
+++ /dev/null
@@ -1,60 +0,0 @@
-#!/usr/bin/env bash
-# Generate a clean, isolated node_modules layout per package manager, using
-# Docker containers so each install runs with fresh caches/stores and no host
-# pollution. Each layout is a workspace root + an `app` subpackage depending on
-# `is-odd` (which pulls the transitive `is-number`), reproducing the real
-# monorepo case where a package's store escapes the mounted project dir.
-#
-# Usage:
-#   crates/sidecar/tests/fixtures/gen-pm-layouts.sh [OUT_DIR]
-# then point the layout test at it:
-#   PM_LAYOUTS_DIR=$OUT_DIR cargo test -p agent-os-client --test module_layout_e2e -- --nocapture
-#
-# The resulting per-PM store signatures (what the sidecar detector keys on):
-#   pnpm (isolated)      app/node_modules/<dep> -> ../../node_modules/.pnpm/...
-#   bun (workspace)      app/node_modules/<dep> -> ../../node_modules/.bun/...
-#   yarn (nodeLinker:pnpm) app/node_modules/<dep> -> ../../node_modules/.store/...
-#   yarn (pnp, default)  .pnp.cjs + .yarn/cache, NO node_modules
-#   npm / yarn-nm / pnpm-hoisted   flat (hoisted to root, no store) -> work
-set -uo pipefail
-
-OUT="${1:-$(mktemp -d /tmp/pm-layouts.XXXXXX)}"
-mkdir -p "$OUT"
-echo "output: $OUT"
-
-NODE_IMG=node:22-bookworm-slim
-BUN_IMG=oven/bun:1-slim
-export COREPACK_ENABLE_DOWNLOAD_PROMPT=0
-
-scaffold='
-mkdir -p app
-cat > package.json <<JSON
-{ "name": "root", "private": true, "version": "1.0.0", "workspaces": ["app"] }
-JSON
-cat > app/package.json <<JSON
-{ "name": "app", "version": "1.0.0", "dependencies": { "is-odd": "3.0.1" } }
-JSON
-'
-
-run() { # name image script
-  local name="$1" image="$2" script="$3"
-  mkdir -p "$OUT/$name"
-  printf '%-16s ' "$name"
-  if docker run --rm -v "$OUT/$name:/work" -w /work -e COREPACK_ENABLE_DOWNLOAD_PROMPT=0 \
-      "$image" bash -lc "$scaffold $script" > "$OUT/$name.log" 2>&1; then
-    echo "ok"
-  else
-    echo "FAILED (see $OUT/$name.log)"
-  fi
-}
-
-run npm           "$NODE_IMG" 'npm install --silent'
-run pnpm-isolated "$NODE_IMG" 'echo "packages: [app]" > pnpm-workspace.yaml; corepack enable >/dev/null 2>&1; corepack pnpm install --config.store-dir=/work/.store --silent'
-run pnpm-hoisted  "$NODE_IMG" 'echo "packages: [app]" > pnpm-workspace.yaml; printf "node-linker=hoisted\n" > .npmrc; corepack enable >/dev/null 2>&1; corepack pnpm install --config.store-dir=/work/.store --silent'
-run yarn-pnp      "$NODE_IMG" 'corepack enable >/dev/null 2>&1; corepack yarn set version stable >/dev/null 2>&1; corepack yarn install >/dev/null 2>&1'
-run yarn-nm       "$NODE_IMG" 'printf "nodeLinker: node-modules\n" > .yarnrc.yml; corepack enable >/dev/null 2>&1; corepack yarn set version stable >/dev/null 2>&1; corepack yarn install >/dev/null 2>&1'
-run yarn-pnpm     "$NODE_IMG" 'printf "nodeLinker: pnpm\n" > .yarnrc.yml; corepack enable >/dev/null 2>&1; corepack yarn set version stable >/dev/null 2>&1; corepack yarn install >/dev/null 2>&1'
-run bun           "$BUN_IMG"  'bun install >/dev/null 2>&1'
-
-echo ""
-echo "PM_LAYOUTS_DIR=$OUT"
diff --git a/crates/sidecar/tests/fixtures/limits-inventory.json b/crates/sidecar/tests/fixtures/limits-inventory.json
deleted file mode 100644
index 9af7c5d93..000000000
--- a/crates/sidecar/tests/fixtures/limits-inventory.json
+++ /dev/null
@@ -1,1118 +0,0 @@
-[
-	{
-		"name": "MAX_SYMLINK_DEPTH",
-		"path": "packages/build-tools/bridge-src/builtins/fs.ts",
-		"class": "invariant",
-		"rationale": "Linux ELOOP mirror of the kernel invariant."
-	},
-	{
-		"name": "MAX_REALPATH_SYMLINKS",
-		"path": "crates/vfs/src/posix/mount_table.rs",
-		"class": "invariant",
-		"rationale": "ELOOP bound for cross-mount symlink resolution in realpath."
-	},
-	{
-		"name": "MAX_TAR_INDEX_ENTRIES",
-		"path": "crates/vfs/src/posix/tar_fs.rs",
-		"class": "invariant",
-		"rationale": "Caps a malformed tar's member count so the in-memory index cannot exhaust host memory."
-	},
-	{
-		"name": "MAX_TAR_CACHE_ARCHIVES",
-		"path": "crates/vfs/src/posix/tar_fs.rs",
-		"class": "invariant",
-		"rationale": "Bounded, refcounted digest-keyed archive mmap cache; evicts with a warning."
-	},
-	{
-		"name": "MAX_TAR_SYMLINKS",
-		"path": "crates/vfs/src/posix/tar_fs.rs",
-		"class": "invariant",
-		"rationale": "ELOOP bound for symlink resolution within a single tar archive."
-	},
-	{
-		"name": "MAX_AGENTOS_PACKAGE_MOUNTS",
-		"path": "crates/sidecar/src/package_projection.rs",
-		"class": "policy-deferred",
-		"rationale": "Per-VM cap on granular /opt/agentos leaf mounts; not yet wired to VmLimits."
-	},
-	{
-		"name": "MAX_BENCHMARK_ITERATIONS",
-		"path": "crates/execution/src/benchmark.rs",
-		"class": "invariant",
-		"rationale": "Dev benchmarking harness only."
-	},
-	{
-		"name": "MAX_BENCHMARK_WARMUP_ITERATIONS",
-		"path": "crates/execution/src/benchmark.rs",
-		"class": "invariant",
-		"rationale": "Dev benchmarking harness only."
-	},
-	{
-		"name": "JAVASCRIPT_CAPTURED_OUTPUT_LIMIT_BYTES",
-		"path": "crates/execution/src/javascript.rs",
-		"class": "policy",
-		"rationale": "Guest JS stdout/stderr capture cap.",
-		"wired": "VmLimits.js_runtime.captured_output_limit_bytes"
-	},
-	{
-		"name": "MAX_TIMER_DELAY_MS",
-		"path": "crates/execution/src/javascript.rs",
-		"class": "invariant",
-		"rationale": "Clamps a guest timer delay to the JS setTimeout ceiling (2^31-1 ms); a leak guard so a timer thread cannot outlive its session by pinning the session Arc, mirroring the standard setTimeout max rather than operator policy."
-	},
-	{
-		"name": "NET_BRIDGE_MAX_RAW_WRITE_BYTES",
-		"path": "packages/build-tools/bridge-src/builtins/net.ts",
-		"class": "invariant",
-		"rationale": "Internal socket bridge flush granularity that preserves backpressure under the wired socket buffered-byte limit; not an operator policy cap."
-	},
-	{
-		"name": "JAVASCRIPT_EVENT_CHANNEL_CAPACITY",
-		"path": "crates/execution/src/javascript.rs",
-		"class": "invariant",
-		"rationale": "Channel shape required by the sync-RPC protocol; flow control, not policy."
-	},
-	{
-		"name": "JAVASCRIPT_EVENT_PAYLOAD_LIMIT_BYTES",
-		"path": "crates/execution/src/javascript.rs",
-		"class": "policy",
-		"rationale": "Per-event payload cap for the JS event channel.",
-		"wired": "VmLimits.js_runtime.event_payload_limit_bytes"
-	},
-	{
-		"name": "KERNEL_STDIN_BUFFER_LIMIT_BYTES",
-		"path": "crates/execution/src/javascript.rs",
-		"class": "policy",
-		"rationale": "Guest stdin buffering cap.",
-		"wired": "VmLimits.js_runtime.stdin_buffer_limit_bytes"
-	},
-	{
-		"name": "NODE_SYNC_RPC_RESPONSE_QUEUE_CAPACITY",
-		"path": "crates/execution/src/javascript.rs",
-		"class": "invariant",
-		"rationale": "Channel shape required by the sync-RPC protocol; flow control, not policy."
-	},
-	{
-		"name": "DEFAULT_V8_CPU_TIME_LIMIT_MS",
-		"path": "crates/execution/src/javascript.rs",
-		"class": "policy",
-		"rationale": "Execution-layer active JavaScript CPU-time fallback; normal VM executions receive the wired sidecar value.",
-		"wired": "VmLimits.js_runtime.cpu_time_limit_ms"
-	},
-	{
-		"name": "DEFAULT_V8_WALL_CLOCK_LIMIT_MS",
-		"path": "crates/execution/src/javascript.rs",
-		"class": "policy",
-		"rationale": "Execution-layer JavaScript wall-clock fallback; zero keeps it disabled unless the wired VM limit overrides it.",
-		"wired": "VmLimits.js_runtime.wall_clock_limit_ms"
-	},
-	{
-		"name": "DEFAULT_NODE_IMPORT_CACHE_MATERIALIZE_TIMEOUT_MS",
-		"path": "crates/execution/src/javascript.rs",
-		"class": "policy",
-		"rationale": "Execution-layer Node import-cache materialization fallback; normal VM executions receive the wired sidecar value.",
-		"wired": "VmLimits.js_runtime.import_cache_materialize_timeout_ms"
-	},
-	{
-		"name": "DEFAULT_NODE_IMPORT_CACHE_MATERIALIZE_TIMEOUT",
-		"path": "crates/execution/src/node_import_cache.rs",
-		"class": "invariant",
-		"rationale": "Standalone import-cache materialization fallback; normal VM executions use VmLimits.js_runtime.import_cache_materialize_timeout_ms."
-	},
-	{
-		"name": "DEFAULT_PYTHON_EXECUTION_TIMEOUT_MS",
-		"path": "crates/execution/src/python.rs",
-		"class": "policy",
-		"rationale": "Python runtime execution timeout.",
-		"wired": "VmLimits.python.execution_timeout_ms"
-	},
-	{
-		"name": "DEFAULT_PYTHON_MAX_OLD_SPACE_MB",
-		"path": "crates/execution/src/python.rs",
-		"class": "policy",
-		"rationale": "Python host JS old-space heap sizing; engine-side default for the wired limit.",
-		"wired": "VmLimits.python.max_old_space_mb"
-	},
-	{
-		"name": "DEFAULT_PYTHON_OUTPUT_BUFFER_MAX_BYTES",
-		"path": "crates/execution/src/python.rs",
-		"class": "policy",
-		"rationale": "Python output buffer cap; env knob already exists.",
-		"wired": "VmLimits.python.output_buffer_max_bytes"
-	},
-	{
-		"name": "DEFAULT_PYTHON_VFS_RPC_TIMEOUT_MS",
-		"path": "crates/execution/src/python.rs",
-		"class": "policy",
-		"rationale": "Python VFS RPC timeout.",
-		"wired": "VmLimits.python.vfs_rpc_timeout_ms"
-	},
-	{
-		"name": "PYTHON_SOCKET_MAX_RECV",
-		"path": "crates/sidecar/src/execution.rs",
-		"class": "policy-deferred",
-		"rationale": "Guest Python socket recv request clamp for one synchronous host read; bounded by default, fold into Python/socket VmLimits if operators need to tune it."
-	},
-	{
-		"name": "V8_SESSION_FRAME_CHANNEL_CAPACITY",
-		"path": "crates/execution/src/v8_host.rs",
-		"class": "invariant",
-		"rationale": "In-process channel backpressure."
-	},
-	{
-		"name": "MAX_FRAME_SIZE",
-		"path": "crates/execution/src/v8_ipc.rs",
-		"class": "policy",
-		"rationale": "V8 IPC frame size; single value feeds BOTH codec sides.",
-		"wired": "VmLimits.js_runtime.v8_ipc_max_frame_bytes"
-	},
-	{
-		"name": "DEFAULT_WASM_RUNNER_HEAP_LIMIT_MB",
-		"path": "crates/execution/src/wasm.rs",
-		"class": "policy",
-		"rationale": "Wasm runner V8 heap default (2 GiB, intentionally above the 128 MiB per-guest budget so warmup stops OOMing); normal VM executions use VmLimits.wasm.runner_heap_limit_mb.",
-		"wired": "VmLimits.wasm.runner_heap_limit_mb"
-	},
-	{
-		"name": "DEFAULT_WASM_PREWARM_TIMEOUT_MS",
-		"path": "crates/execution/src/wasm.rs",
-		"class": "policy",
-		"rationale": "WASM prewarm compile-cache timeout.",
-		"wired": "VmLimits.wasm.prewarm_timeout_ms"
-	},
-	{
-		"name": "MAX_SYNC_WASM_PREWARM_MODULE_BYTES",
-		"path": "crates/execution/src/wasm.rs",
-		"class": "invariant",
-		"rationale": "Prewarm compile-cache heuristic bound; not guest-visible behavior."
-	},
-	{
-		"name": "MAX_WASM_IMPORT_SECTION_ENTRIES",
-		"path": "crates/execution/src/wasm.rs",
-		"class": "invariant",
-		"rationale": "Parser DoS hardening mandated by crates/CLAUDE.md invariant 6."
-	},
-	{
-		"name": "MAX_WASM_MEMORY_SECTION_ENTRIES",
-		"path": "crates/execution/src/wasm.rs",
-		"class": "invariant",
-		"rationale": "Parser DoS hardening mandated by crates/CLAUDE.md invariant 6."
-	},
-	{
-		"name": "MAX_WASM_MODULE_FILE_BYTES",
-		"path": "crates/execution/src/wasm.rs",
-		"class": "policy",
-		"rationale": "Guards module load size.",
-		"wired": "VmLimits.wasm.max_module_file_bytes"
-	},
-	{
-		"name": "MAX_WASM_VARUINT_BYTES",
-		"path": "crates/execution/src/wasm.rs",
-		"class": "invariant",
-		"rationale": "Parser DoS hardening mandated by crates/CLAUDE.md invariant 6."
-	},
-	{
-		"name": "WASM_CAPTURED_OUTPUT_LIMIT_BYTES",
-		"path": "crates/execution/src/wasm.rs",
-		"class": "policy",
-		"rationale": "WASM stdout/stderr capture cap.",
-		"wired": "VmLimits.wasm.captured_output_limit_bytes"
-	},
-	{
-		"name": "WASM_SYNC_READ_LIMIT_BYTES",
-		"path": "crates/execution/src/wasm.rs",
-		"class": "policy",
-		"rationale": "WASM sync read cap; also templated into the JS runner shim.",
-		"wired": "VmLimits.wasm.sync_read_limit_bytes"
-	},
-	{
-		"name": "DEFAULT_STREAM_DEVICE_READ_BYTES",
-		"path": "crates/kernel/src/device_layer.rs",
-		"class": "invariant",
-		"rationale": "Internal device read chunk size; perf detail, not a guest bound."
-	},
-	{
-		"name": "MAX_FDS_PER_PROCESS",
-		"path": "crates/kernel/src/fd_table.rs",
-		"class": "invariant",
-		"rationale": "FD table layout fixed at 0-255; max_open_fds is the policy knob above it."
-	},
-	{
-		"name": "SHEBANG_LINE_MAX_BYTES",
-		"path": "crates/kernel/src/kernel.rs",
-		"class": "invariant",
-		"rationale": "Shebang parse guard; matches Linux BINPRM_BUF_SIZE-style bound, parser-safety."
-	},
-	{
-		"name": "MAX_SNAPSHOT_DEPTH",
-		"path": "crates/vfs/src/posix/overlay_fs.rs",
-		"class": "invariant",
-		"rationale": "Recursion guard against cyclic/abusive layer chains; parser-safety."
-	},
-	{
-		"name": "MAX_PIPE_BUFFER_BYTES",
-		"path": "crates/kernel/src/pipe_manager.rs",
-		"class": "invariant",
-		"rationale": "Linux default pipe capacity; guest-visible POSIX semantics, not policy."
-	},
-	{
-		"name": "MAX_ALLOCATED_PID",
-		"path": "crates/kernel/src/process_table.rs",
-		"class": "invariant",
-		"rationale": "POSIX PID value space."
-	},
-	{
-		"name": "MAX_SIGNAL",
-		"path": "crates/kernel/src/process_table.rs",
-		"class": "invariant",
-		"rationale": "Linux signal number space."
-	},
-	{
-		"name": "MAX_CANON",
-		"path": "crates/kernel/src/pty.rs",
-		"class": "invariant",
-		"rationale": "POSIX MAX_CANON line-discipline constant."
-	},
-	{
-		"name": "MAX_PTY_BUFFER_BYTES",
-		"path": "crates/kernel/src/pty.rs",
-		"class": "invariant",
-		"rationale": "Mirrors Linux PTY buffer semantics."
-	},
-	{
-		"name": "DEFAULT_BLOCKING_READ_TIMEOUT_MS",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_blocking_read_ms"
-	},
-	{
-		"name": "DEFAULT_MAX_CONNECTIONS",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_connections"
-	},
-	{
-		"name": "DEFAULT_MAX_FD_WRITE_BYTES",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_fd_write_bytes"
-	},
-	{
-		"name": "DEFAULT_MAX_FILESYSTEM_BYTES",
-		"path": "crates/vfs/src/posix/usage.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_filesystem_bytes"
-	},
-	{
-		"name": "DEFAULT_MAX_INODE_COUNT",
-		"path": "crates/vfs/src/posix/usage.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_inode_count"
-	},
-	{
-		"name": "DEFAULT_MAX_OPEN_FDS",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_open_fds"
-	},
-	{
-		"name": "DEFAULT_MAX_PIPES",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_pipes"
-	},
-	{
-		"name": "DEFAULT_MAX_PREAD_BYTES",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_pread_bytes"
-	},
-	{
-		"name": "DEFAULT_MAX_PROCESS_ARGV_BYTES",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_process_argv_bytes"
-	},
-	{
-		"name": "DEFAULT_MAX_PROCESS_ENV_BYTES",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_process_env_bytes"
-	},
-	{
-		"name": "DEFAULT_MAX_PROCESSES",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_processes"
-	},
-	{
-		"name": "DEFAULT_MAX_PTYS",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_ptys"
-	},
-	{
-		"name": "DEFAULT_MAX_READDIR_ENTRIES",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_readdir_entries"
-	},
-	{
-		"name": "DEFAULT_MAX_WASM_MEMORY_BYTES",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Default WASM memory envelope; guests stay bounded unless trusted VM config raises the cap.",
-		"wired": "VmLimits.resources.max_wasm_memory_bytes"
-	},
-	{
-		"name": "DEFAULT_MAX_SOCKET_BUFFERED_BYTES",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_socket_buffered_bytes"
-	},
-	{
-		"name": "DEFAULT_MAX_SOCKET_DATAGRAM_QUEUE_LEN",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_socket_datagram_queue_len"
-	},
-	{
-		"name": "DEFAULT_MAX_SOCKETS",
-		"path": "crates/kernel/src/resource_accounting.rs",
-		"class": "policy",
-		"rationale": "Kernel resource policy surface.",
-		"wired": "VmLimits.resources.max_sockets"
-	},
-	{
-		"name": "MAX_PATH_LENGTH",
-		"path": "crates/vfs/src/posix/vfs.rs",
-		"class": "invariant",
-		"rationale": "Linux PATH_MAX; changing it diverges from Linux."
-	},
-	{
-		"name": "MAX_SYMLINK_DEPTH",
-		"path": "crates/vfs/src/posix/vfs.rs",
-		"class": "invariant",
-		"rationale": "Linux ELOOP resolution limit."
-	},
-	{
-		"name": "MAX_PATH",
-		"path": "crates/vfs/src/engine/types.rs",
-		"class": "invariant",
-		"rationale": "Linux PATH_MAX mirror for engine-backed VFS paths."
-	},
-	{
-		"name": "MAX_SYMLINK_DEPTH",
-		"path": "crates/vfs/src/engine/types.rs",
-		"class": "invariant",
-		"rationale": "Linux ELOOP resolution limit for engine-backed VFS paths."
-	},
-	{
-		"name": "DEFAULT_METADATA_CACHE_ENTRIES",
-		"path": "crates/sidecar/src/plugins/chunked_local.rs",
-		"class": "invariant",
-		"rationale": "In-memory chunk metadata cache size; performance detail, not guest policy."
-	},
-	{
-		"name": "DEFAULT_METADATA_CACHE_ENTRIES",
-		"path": "crates/sidecar/src/plugins/chunked_s3.rs",
-		"class": "invariant",
-		"rationale": "In-memory chunk metadata cache size; performance detail, not guest policy."
-	},
-	{
-		"name": "CONTROL_FRAME_QUEUE_CAPACITY",
-		"path": "crates/secure-exec-client/src/transport.rs",
-		"class": "invariant",
-		"rationale": "Internal backpressure channel capacity."
-	},
-	{
-		"name": "EVENT_CHANNEL_CAPACITY",
-		"path": "crates/secure-exec-client/src/transport.rs",
-		"class": "invariant",
-		"rationale": "Internal backpressure channel capacity."
-	},
-	{
-		"name": "PENDING_REQUEST_LIMIT",
-		"path": "crates/secure-exec-client/src/transport.rs",
-		"class": "invariant",
-		"rationale": "Internal pending-request ring; fails loudly when exceeded."
-	},
-	{
-		"name": "REQUEST_FRAME_QUEUE_CAPACITY",
-		"path": "crates/secure-exec-client/src/transport.rs",
-		"class": "invariant",
-		"rationale": "Internal backpressure channel capacity."
-	},
-	{
-		"name": "DEFAULT_KERNEL_STDIN_READ_MAX_BYTES",
-		"path": "crates/sidecar/src/execution.rs",
-		"class": "invariant",
-		"rationale": "Internal stdin pump chunking; not a guest-visible bound."
-	},
-	{
-		"name": "DEFAULT_KERNEL_STDIN_READ_TIMEOUT_MS",
-		"path": "crates/sidecar/src/execution.rs",
-		"class": "invariant",
-		"rationale": "Internal stdin pump poll interval; not a guest-visible bound."
-	},
-	{
-		"name": "EXITED_PROCESS_SNAPSHOT_RETENTION",
-		"path": "crates/sidecar/src/execution.rs",
-		"class": "invariant",
-		"rationale": "Bounded exited-process snapshot ring for wait/inspect bookkeeping."
-	},
-	{
-		"name": "JAVASCRIPT_NET_POLL_MAX_WAIT",
-		"path": "crates/sidecar/src/execution.rs",
-		"class": "invariant",
-		"rationale": "net.poll sync-RPC wait ceiling; protects the main sync-RPC thread."
-	},
-	{
-		"name": "MAX_JAVASCRIPT_COMMAND_REDIRECT_DEPTH",
-		"path": "crates/sidecar/src/execution.rs",
-		"class": "invariant",
-		"rationale": "Command-resolution recursion guard (symlink/shim chains); safety invariant."
-	},
-	{
-		"name": "MAX_PER_PROCESS_STATE_HANDLES",
-		"path": "crates/sidecar/src/execution.rs",
-		"class": "policy-deferred",
-		"rationale": "Crypto/state handle table cap tunable in principle; low demand, wire later."
-	},
-	{
-		"name": "SQLITE_JS_SAFE_INTEGER_MAX",
-		"path": "crates/sidecar/src/execution.rs",
-		"class": "invariant",
-		"rationale": "JS Number.MAX_SAFE_INTEGER boundary for SQLite integer coercion, not a tunable bound."
-	},
-	{
-		"name": "VM_FETCH_BUFFER_LIMIT_BYTES",
-		"path": "crates/sidecar-core/src/vm_fetch.rs",
-		"class": "policy",
-		"rationale": "vm.fetch() HTTP response body cap; must stay <= negotiated frame budget.",
-		"wired": "VmLimits.http.max_fetch_response_bytes"
-	},
-	{
-		"name": "DEFAULT_ACP_MAX_READ_LINE_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "ACP adapter stdout line cap.",
-		"wired": "VmLimits.acp.max_read_line_bytes"
-	},
-	{
-		"name": "DEFAULT_ACP_STDOUT_BUFFER_BYTE_LIMIT",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Pre-session ACP stdout buffer cap.",
-		"wired": "VmLimits.acp.stdout_buffer_byte_limit"
-	},
-	{
-		"name": "DEFAULT_JS_CAPTURED_OUTPUT_LIMIT_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Guest JS stdout/stderr capture cap.",
-		"wired": "VmLimits.js_runtime.captured_output_limit_bytes"
-	},
-	{
-		"name": "DEFAULT_JS_EVENT_PAYLOAD_LIMIT_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Per-event payload cap for JS event channel.",
-		"wired": "VmLimits.js_runtime.event_payload_limit_bytes"
-	},
-	{
-		"name": "DEFAULT_JS_STDIN_BUFFER_LIMIT_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Guest JS stdin buffering cap.",
-		"wired": "VmLimits.js_runtime.stdin_buffer_limit_bytes"
-	},
-	{
-		"name": "DEFAULT_NODE_IMPORT_CACHE_MATERIALIZE_TIMEOUT_MS",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Node import-cache materialization timeout.",
-		"wired": "VmLimits.js_runtime.import_cache_materialize_timeout_ms"
-	},
-	{
-		"name": "DEFAULT_MAX_FETCH_RESPONSE_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Default home for vm.fetch() body cap.",
-		"wired": "VmLimits.http.max_fetch_response_bytes"
-	},
-	{
-		"name": "DEFAULT_PYTHON_EXECUTION_TIMEOUT_MS",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Python execution timeout.",
-		"wired": "VmLimits.python.execution_timeout_ms"
-	},
-	{
-		"name": "DEFAULT_PYTHON_MAX_OLD_SPACE_MB",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Python host JS old-space heap sizing; sidecar default for the wired limit.",
-		"wired": "VmLimits.python.max_old_space_mb"
-	},
-	{
-		"name": "DEFAULT_PYTHON_OUTPUT_BUFFER_MAX_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Python output buffer cap.",
-		"wired": "VmLimits.python.output_buffer_max_bytes"
-	},
-	{
-		"name": "DEFAULT_PYTHON_VFS_RPC_TIMEOUT_MS",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Python VFS RPC timeout.",
-		"wired": "VmLimits.python.vfs_rpc_timeout_ms"
-	},
-	{
-		"name": "DEFAULT_TOOL_TIMEOUT_MS",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Default tool invocation timeout.",
-		"wired": "VmLimits.tools.default_tool_timeout_ms"
-	},
-	{
-		"name": "DEFAULT_V8_HEAP_LIMIT_MB",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Default guest JS V8 heap cap.",
-		"wired": "VmLimits.js_runtime.v8_heap_limit_mb"
-	},
-	{
-		"name": "DEFAULT_V8_CPU_TIME_LIMIT_MS",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Default active JavaScript CPU-time budget.",
-		"wired": "VmLimits.js_runtime.cpu_time_limit_ms"
-	},
-	{
-		"name": "DEFAULT_V8_WALL_CLOCK_LIMIT_MS",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Default JavaScript wall-clock backstop; zero keeps it disabled.",
-		"wired": "VmLimits.js_runtime.wall_clock_limit_ms"
-	},
-	{
-		"name": "DEFAULT_V8_IPC_MAX_FRAME_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "V8 IPC codec frame cap.",
-		"wired": "VmLimits.js_runtime.v8_ipc_max_frame_bytes"
-	},
-	{
-		"name": "DEFAULT_WASM_CAPTURED_OUTPUT_LIMIT_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "WASM stdout/stderr capture cap.",
-		"wired": "VmLimits.wasm.captured_output_limit_bytes"
-	},
-	{
-		"name": "DEFAULT_WASM_MAX_MODULE_FILE_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "WASM module load size.",
-		"wired": "VmLimits.wasm.max_module_file_bytes"
-	},
-	{
-		"name": "DEFAULT_WASM_PREWARM_TIMEOUT_MS",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "WASM compile-cache warmup timeout.",
-		"wired": "VmLimits.wasm.prewarm_timeout_ms"
-	},
-	{
-		"name": "DEFAULT_WASM_RUNNER_HEAP_LIMIT_MB",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "WASM runner V8 heap cap.",
-		"wired": "VmLimits.wasm.runner_heap_limit_mb"
-	},
-	{
-		"name": "DEFAULT_WASM_SYNC_READ_LIMIT_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "WASM sync read cap.",
-		"wired": "VmLimits.wasm.sync_read_limit_bytes"
-	},
-	{
-		"name": "MAX_PERSISTED_MANIFEST_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Mount manifest blob size.",
-		"wired": "VmLimits.plugins.max_persisted_manifest_bytes"
-	},
-	{
-		"name": "MAX_PERSISTED_MANIFEST_FILE_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Mount manifest file size.",
-		"wired": "VmLimits.plugins.max_persisted_manifest_file_bytes"
-	},
-	{
-		"name": "MAX_REGISTERED_TOOLKITS",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Toolkit registration capacity.",
-		"wired": "VmLimits.tools.max_registered_toolkits"
-	},
-	{
-		"name": "MAX_REGISTERED_TOOLS_PER_VM",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Tool registration capacity.",
-		"wired": "VmLimits.tools.max_registered_tools_per_vm"
-	},
-	{
-		"name": "MAX_TOOL_EXAMPLE_INPUT_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Tool example input size.",
-		"wired": "VmLimits.tools.max_tool_example_input_bytes"
-	},
-	{
-		"name": "MAX_TOOL_EXAMPLES_PER_TOOL",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Tool example count.",
-		"wired": "VmLimits.tools.max_tool_examples_per_tool"
-	},
-	{
-		"name": "MAX_TOOL_SCHEMA_BYTES",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Tool schema payload size.",
-		"wired": "VmLimits.tools.max_tool_schema_bytes"
-	},
-	{
-		"name": "MAX_TOOL_TIMEOUT_MS",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Max tool invocation timeout.",
-		"wired": "VmLimits.tools.max_tool_timeout_ms"
-	},
-	{
-		"name": "MAX_TOOLS_PER_TOOLKIT",
-		"path": "crates/sidecar-core/src/limits.rs",
-		"class": "policy",
-		"rationale": "Tools-per-toolkit capacity.",
-		"wired": "VmLimits.tools.max_tools_per_toolkit"
-	},
-	{
-		"name": "MAX_PERSISTED_MANIFEST_BYTES",
-		"path": "crates/sidecar/src/plugins/google_drive.rs",
-		"class": "policy",
-		"rationale": "Mount manifest size policy.",
-		"wired": "VmLimits.plugins.max_persisted_manifest_bytes"
-	},
-	{
-		"name": "MAX_PERSISTED_MANIFEST_FILE_BYTES",
-		"path": "crates/sidecar/src/plugins/google_drive.rs",
-		"class": "policy",
-		"rationale": "Mount manifest file size policy.",
-		"wired": "VmLimits.plugins.max_persisted_manifest_file_bytes"
-	},
-	{
-		"name": "MAX_HOST_DIR_READ_BYTES",
-		"path": "crates/sidecar/src/plugins/host_dir.rs",
-		"class": "policy",
-		"rationale": "Reads the VM's configured max_pread_bytes resource limit.",
-		"wired": "VmLimits.resources.max_pread_bytes"
-	},
-	{
-		"name": "DEFAULT_MAX_FULL_READ_BYTES",
-		"path": "crates/sidecar/src/plugins/sandbox_agent.rs",
-		"class": "policy-deferred",
-		"rationale": "Better expressed as per-mount config on the sandbox_agent descriptor; defer to a mount-config change."
-	},
-	{
-		"name": "DEFAULT_PROCESS_TIMEOUT_MS",
-		"path": "crates/sidecar/src/plugins/sandbox_agent.rs",
-		"class": "policy-deferred",
-		"rationale": "Better expressed as per-mount config on the sandbox_agent descriptor; defer to a mount-config change."
-	},
-	{
-		"name": "DEFAULT_TIMEOUT_MS",
-		"path": "crates/sidecar/src/plugins/sandbox_agent.rs",
-		"class": "policy-deferred",
-		"rationale": "Better expressed as per-mount config on the sandbox_agent descriptor; defer to a mount-config change."
-	},
-	{
-		"name": "DEFAULT_COMPLETED_RESPONSE_CAP",
-		"path": "crates/sidecar-protocol/src/protocol.rs",
-		"class": "invariant",
-		"rationale": "Internal dedupe/backpressure ring; loud-fail bounded buffer."
-	},
-	{
-		"name": "DEFAULT_MAX_FRAME_BYTES",
-		"path": "crates/sidecar-protocol/src/protocol.rs",
-		"class": "policy",
-		"rationale": "Wire frame cap; sidecar-scoped, exposed via NativeSidecarConfig and negotiated to clients.",
-		"wired": "NativeSidecarConfig.max_frame_bytes"
-	},
-	{
-		"name": "DEFAULT_MAX_FRAME_BYTES",
-		"path": "crates/sidecar-protocol/src/wire.rs",
-		"class": "invariant",
-		"rationale": "Wire frame-size cap constant in its owning wire module; protocol-level frame invariant, not a per-VM policy limit."
-	},
-	{
-		"name": "MAX_COMPLETED_SIDECAR_RESPONSES",
-		"path": "crates/sidecar/src/service.rs",
-		"class": "invariant",
-		"rationale": "Internal queue backpressure guard; fails loudly on overflow."
-	},
-	{
-		"name": "MAX_OUTBOUND_SIDECAR_REQUESTS",
-		"path": "crates/sidecar/src/service.rs",
-		"class": "invariant",
-		"rationale": "Internal queue backpressure guard; fails loudly on overflow."
-	},
-	{
-		"name": "MAX_PENDING_SIDECAR_RESPONSES",
-		"path": "crates/sidecar/src/service.rs",
-		"class": "invariant",
-		"rationale": "Internal queue backpressure guard; fails loudly on overflow."
-	},
-	{
-		"name": "MAX_PROCESS_EVENT_QUEUE",
-		"path": "crates/sidecar/src/service.rs",
-		"class": "invariant",
-		"rationale": "Internal queue backpressure guard; fails loudly on overflow."
-	},
-	{
-		"name": "HOST_REALPATH_MAX_SYMLINK_DEPTH",
-		"path": "crates/sidecar/src/state.rs",
-		"class": "invariant",
-		"rationale": "Host realpath ELOOP guard mirroring Linux symlink depth."
-	},
-	{
-		"name": "VM_LISTEN_PORT_MAX_METADATA_KEY",
-		"path": "crates/sidecar/src/state.rs",
-		"class": "invariant",
-		"rationale": "Metadata key name string, not a numeric bound."
-	},
-	{
-		"name": "MAX_EVENT_READY_QUEUE",
-		"path": "crates/sidecar/src/stdio.rs",
-		"class": "invariant",
-		"rationale": "Stdio pump channel capacity; internal flow control."
-	},
-	{
-		"name": "MAX_STDIN_FRAME_QUEUE",
-		"path": "crates/sidecar/src/stdio.rs",
-		"class": "invariant",
-		"rationale": "Stdio pump channel capacity; internal flow control."
-	},
-	{
-		"name": "MAX_STDOUT_FRAME_QUEUE",
-		"path": "crates/sidecar/src/stdio.rs",
-		"class": "invariant",
-		"rationale": "Stdio pump channel capacity; internal flow control."
-	},
-	{
-		"name": "DEFAULT_TOOL_TIMEOUT_MS",
-		"path": "crates/sidecar-core/src/tools.rs",
-		"class": "policy",
-		"rationale": "Tool invocation timeout policy.",
-		"wired": "VmLimits.tools.default_tool_timeout_ms"
-	},
-	{
-		"name": "MAX_REGISTERED_TOOLKITS",
-		"path": "crates/sidecar-core/src/tools.rs",
-		"class": "policy",
-		"rationale": "Tool registration capacity policy.",
-		"wired": "VmLimits.tools.max_registered_toolkits"
-	},
-	{
-		"name": "MAX_REGISTERED_TOOLS_PER_VM",
-		"path": "crates/sidecar-core/src/tools.rs",
-		"class": "policy",
-		"rationale": "Tool registration capacity policy.",
-		"wired": "VmLimits.tools.max_registered_tools_per_vm"
-	},
-	{
-		"name": "MAX_TOOL_DESCRIPTION_LENGTH",
-		"path": "crates/sidecar-core/src/tools.rs",
-		"class": "policy-deferred",
-		"rationale": "Cross-boundary contract with packages/core/src/bindings.ts; both sides must change together."
-	},
-	{
-		"name": "MAX_TOOL_EXAMPLE_INPUT_BYTES",
-		"path": "crates/sidecar-core/src/tools.rs",
-		"class": "policy",
-		"rationale": "Example input size policy.",
-		"wired": "VmLimits.tools.max_tool_example_input_bytes"
-	},
-	{
-		"name": "MAX_TOOL_EXAMPLES_PER_TOOL",
-		"path": "crates/sidecar-core/src/tools.rs",
-		"class": "policy",
-		"rationale": "Example count policy.",
-		"wired": "VmLimits.tools.max_tool_examples_per_tool"
-	},
-	{
-		"name": "MAX_TOOL_NAME_LENGTH",
-		"path": "crates/sidecar-core/src/tools.rs",
-		"class": "policy-deferred",
-		"rationale": "Cross-boundary contract with packages/core/src/bindings.ts; both sides must change together."
-	},
-	{
-		"name": "MAX_TOOL_SCHEMA_BYTES",
-		"path": "crates/sidecar-core/src/tools.rs",
-		"class": "policy",
-		"rationale": "Schema payload size policy.",
-		"wired": "VmLimits.tools.max_tool_schema_bytes"
-	},
-	{
-		"name": "MAX_TOOL_SCHEMA_DEPTH",
-		"path": "crates/sidecar-core/src/tools.rs",
-		"class": "invariant",
-		"rationale": "JSON recursion guard for schema validation; parser-safety."
-	},
-	{
-		"name": "MAX_TOOL_TIMEOUT_MS",
-		"path": "crates/sidecar-core/src/tools.rs",
-		"class": "policy",
-		"rationale": "Tool invocation timeout policy.",
-		"wired": "VmLimits.tools.max_tool_timeout_ms"
-	},
-	{
-		"name": "MAX_TOOLKIT_NAME_LENGTH",
-		"path": "crates/sidecar-core/src/tools.rs",
-		"class": "policy-deferred",
-		"rationale": "Cross-boundary contract with packages/core/src/bindings.ts; both sides must change together."
-	},
-	{
-		"name": "MAX_TOOLS_PER_TOOLKIT",
-		"path": "crates/sidecar-core/src/tools.rs",
-		"class": "policy",
-		"rationale": "Tool registration capacity policy.",
-		"wired": "VmLimits.tools.max_tools_per_toolkit"
-	},
-	{
-		"name": "MAX_VM_LAYERS",
-		"path": "crates/sidecar-core/src/layers.rs",
-		"class": "policy-deferred",
-		"rationale": "Layer count cap is operator-meaningful but coupled to layer RPC validation tests; wire later."
-	},
-	{
-		"name": "MAX_CBOR_BRIDGE_CONTAINER_ITEMS",
-		"path": "crates/v8-runtime/src/bridge.rs",
-		"class": "invariant",
-		"rationale": "Codec amplification hardening; parser-safety."
-	},
-	{
-		"name": "MAX_CBOR_BRIDGE_DEPTH",
-		"path": "crates/v8-runtime/src/bridge.rs",
-		"class": "invariant",
-		"rationale": "Codec recursion hardening; parser-safety."
-	},
-	{
-		"name": "MAX_PENDING_PROMISES",
-		"path": "crates/v8-runtime/src/bridge.rs",
-		"class": "invariant",
-		"rationale": "Runtime self-protection cap with typed error code; sized for safety, loud on overflow."
-	},
-	{
-		"name": "MAX_VM_CONTEXTS",
-		"path": "crates/v8-runtime/src/bridge.rs",
-		"class": "invariant",
-		"rationale": "Runtime self-protection cap with typed error code; sized for safety, loud on overflow."
-	},
-	{
-		"name": "SESSION_OUTPUT_CHANNEL_CAPACITY",
-		"path": "crates/v8-runtime/src/embedded_runtime.rs",
-		"class": "invariant",
-		"rationale": "In-process channel backpressure."
-	},
-	{
-		"name": "MAX_CJS_NAMED_EXPORTS",
-		"path": "crates/v8-runtime/src/execution.rs",
-		"class": "invariant",
-		"rationale": "Module resolver parser/amplification hardening; sized as safety ceiling, not a tuning knob."
-	},
-	{
-		"name": "MAX_CJS_RUNTIME_EXPORT_NAME_LEN",
-		"path": "crates/v8-runtime/src/execution.rs",
-		"class": "invariant",
-		"rationale": "Module resolver parser/amplification hardening; sized as safety ceiling, not a tuning knob."
-	},
-	{
-		"name": "MAX_MODULE_BATCH_RESOLVE_RESPONSE_BYTES",
-		"path": "crates/v8-runtime/src/execution.rs",
-		"class": "invariant",
-		"rationale": "Module resolver parser/amplification hardening; sized as safety ceiling, not a tuning knob."
-	},
-	{
-		"name": "MAX_MODULE_PREFETCH_BATCH_SIZE",
-		"path": "crates/v8-runtime/src/execution.rs",
-		"class": "invariant",
-		"rationale": "Module resolver parser/amplification hardening; sized as safety ceiling, not a tuning knob."
-	},
-	{
-		"name": "MAX_MODULE_PREFETCH_GRAPH_MODULES",
-		"path": "crates/v8-runtime/src/execution.rs",
-		"class": "invariant",
-		"rationale": "Module resolver parser/amplification hardening; sized as safety ceiling, not a tuning knob."
-	},
-	{
-		"name": "MAX_MODULE_RESOLVE_CACHE_ENTRIES",
-		"path": "crates/v8-runtime/src/execution.rs",
-		"class": "invariant",
-		"rationale": "Module resolver parser/amplification hardening; sized as safety ceiling, not a tuning knob."
-	},
-	{
-		"name": "MAX_MODULE_RESOLVE_MODULES",
-		"path": "crates/v8-runtime/src/execution.rs",
-		"class": "invariant",
-		"rationale": "Module resolver parser/amplification hardening; sized as safety ceiling, not a tuning knob."
-	},
-	{
-		"name": "MAX_FRAME_SIZE",
-		"path": "crates/v8-runtime/src/ipc_binary.rs",
-		"class": "policy",
-		"rationale": "Pair of execution/v8_ipc.rs; feeds the same V8 IPC frame field.",
-		"wired": "VmLimits.js_runtime.v8_ipc_max_frame_bytes"
-	},
-	{
-		"name": "MAX_UNHANDLED_PROMISE_REJECTIONS",
-		"path": "crates/v8-runtime/src/isolate.rs",
-		"class": "invariant",
-		"rationale": "Bounded diagnostic accumulation with typed error."
-	},
-	{
-		"name": "NEAR_HEAP_LIMIT_HEADROOM_BYTES",
-		"path": "crates/v8-runtime/src/isolate.rs",
-		"class": "invariant",
-		"rationale": "Internal V8 near-heap-limit OOM-guard headroom; runtime self-protection mechanism, not an operator bound."
-	},
-	{
-		"name": "MAX_DEFERRED_SESSION_COMMANDS",
-		"path": "crates/v8-runtime/src/session.rs",
-		"class": "invariant",
-		"rationale": "Session channel backpressure with typed error."
-	},
-	{
-		"name": "MAX_DEFERRED_SYNC_MESSAGES",
-		"path": "crates/v8-runtime/src/session.rs",
-		"class": "invariant",
-		"rationale": "Session channel backpressure with typed error."
-	},
-	{
-		"name": "SESSION_COMMAND_CHANNEL_CAPACITY",
-		"path": "crates/v8-runtime/src/session.rs",
-		"class": "invariant",
-		"rationale": "Session channel backpressure with typed error."
-	},
-	{
-		"name": "MAX_SNAPSHOT_BLOB_BYTES",
-		"path": "crates/v8-runtime/src/snapshot.rs",
-		"class": "invariant",
-		"rationale": "Build-time artifact sanity guard on first-party assets, not guest input."
-	},
-	{
-		"name": "MAX_V8_BRIDGE_CODE_BYTES",
-		"path": "crates/v8-runtime/src/snapshot.rs",
-		"class": "invariant",
-		"rationale": "Build-time artifact sanity guard on first-party assets, not guest input."
-	},
-	{
-		"name": "MAX_V8_USERLAND_CODE_BYTES",
-		"path": "crates/v8-runtime/src/snapshot.rs",
-		"class": "invariant",
-		"rationale": "Sanity bound on the client-configured agent-SDK userland snapshot bundle; trusted-config artifact guard, not guest input."
-	},
-	{
-		"name": "DEFAULT_HEAP_LIMIT_MB",
-		"path": "crates/v8-runtime/src/isolate.rs",
-		"class": "policy",
-		"rationale": "Engine-side default for the wired V8 isolate heap limit (128 MiB, Cloudflare-matching); operator-raisable via the configured jsRuntime heap limit.",
-		"wired": "VmLimits.js_runtime.v8_heap_limit_mb"
-	},
-	{
-		"name": "TRAILING_OUTPUT_DRAIN_MAX_MS",
-		"path": "packages/core/src/kernel-proxy.ts",
-		"class": "invariant",
-		"rationale": "Teardown drain heuristic, not a guest-visible bound."
-	},
-	{
-		"name": "DEFAULT_SIDECAR_EVENT_BUFFER_CAPACITY",
-		"path": "packages/core/src/native-client.ts",
-		"class": "policy-deferred",
-		"rationale": "Client-side event buffer default; callers can override native client options."
-	},
-	{
-		"name": "DEFAULT_SIDECAR_FRAME_TIMEOUT_MS",
-		"path": "packages/core/src/native-client.ts",
-		"class": "policy-deferred",
-		"rationale": "Client-side frame timeout default; callers can override native client options."
-	},
-	{
-		"name": "MAX_SYMLINK_DEPTH",
-		"path": "packages/core/src/test-runtime.ts",
-		"class": "invariant",
-		"rationale": "Linux ELOOP mirror of the kernel invariant."
-	},
-	{
-		"name": "BROWSER_MAX_FRAME_BYTES",
-		"path": "crates/sidecar-browser/src/wire_dispatch.rs",
-		"class": "policy-deferred",
-		"rationale": "Browser transport frame cap; fixed host transport limit until browser config exposes it."
-	},
-	{
-		"name": "DEFAULT_READ_MAX_BYTES",
-		"path": "crates/sidecar-core/src/guest_net.rs",
-		"class": "policy-deferred",
-		"rationale": "Fallback guest network read cap when the request omits max bytes; wire to request/config if tuning is needed."
-	},
-	{
-		"name": "MAX_POLL_WAIT_MS",
-		"path": "crates/sidecar-core/src/guest_net.rs",
-		"class": "invariant",
-		"rationale": "Guest network poll wait clamp; internal scheduling guard."
-	},
-	{
-		"name": "DEFAULT_READ_MAX_BYTES",
-		"path": "crates/sidecar-core/src/guest_pty.rs",
-		"class": "policy-deferred",
-		"rationale": "Fallback guest PTY read cap when the request omits max bytes; wire to request/config if tuning is needed."
-	},
-	{
-		"name": "MAX_PTY_READ_WAIT_MS",
-		"path": "crates/sidecar-core/src/guest_pty.rs",
-		"class": "invariant",
-		"rationale": "Guest PTY read wait clamp; internal scheduling guard."
-	},
-	{
-		"name": "DEFAULT_SIDECAR_EVENT_BUFFER_CAPACITY",
-		"path": "packages/core/src/sidecar-process.ts",
-		"class": "policy-deferred",
-		"rationale": "Client-side event buffer default for spawned sidecar processes; callers can override sidecar process options."
-	},
-	{
-		"name": "WASM_MODULE_BYTES_CACHE_CAPACITY",
-		"path": "crates/execution/src/wasm.rs",
-		"class": "invariant",
-		"rationale": "Host-side LRU entry cap for cached wasm module bytes; process-wide cache sizing, not per-VM policy."
-	}
-]
diff --git a/crates/sidecar/tests/fs_watch_and_streams.rs b/crates/sidecar/tests/fs_watch_and_streams.rs
deleted file mode 100644
index 1ea32f5c8..000000000
--- a/crates/sidecar/tests/fs_watch_and_streams.rs
+++ /dev/null
@@ -1,190 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{
-    CreateVmRequest, GuestRuntimeKind, RequestPayload, ResponsePayload, RootFilesystemDescriptor,
-    RootFilesystemEntry, RootFilesystemEntryEncoding, RootFilesystemEntryKind, RootFilesystemMode,
-};
-use std::collections::HashMap;
-use std::time::Duration;
-use support::{
-    assert_node_available, authenticate_wire, collect_process_output_wire_with_timeout,
-    execute_wire, new_sidecar, open_session_wire, temp_dir, wire_permissions_allow_all,
-    wire_request, wire_session, write_fixture,
-};
-
-fn root_dir(path: &str, mode: u32) -> RootFilesystemEntry {
-    RootFilesystemEntry {
-        path: path.to_owned(),
-        kind: RootFilesystemEntryKind::Directory,
-        mode: Some(mode),
-        uid: None,
-        gid: None,
-        content: None,
-        encoding: None,
-        target: None,
-        executable: false,
-    }
-}
-
-fn root_file(path: &str, content: &str) -> RootFilesystemEntry {
-    RootFilesystemEntry {
-        path: path.to_owned(),
-        kind: RootFilesystemEntryKind::File,
-        mode: None,
-        uid: None,
-        gid: None,
-        content: Some(content.to_owned()),
-        encoding: Some(RootFilesystemEntryEncoding::Utf8),
-        target: None,
-        executable: false,
-    }
-}
-
-#[test]
-fn javascript_fs_watch_and_streams_work_against_the_vm_kernel_filesystem() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("fs-watch-and-streams");
-    let cwd = temp_dir("fs-watch-and-streams-cwd");
-    let entry = cwd.join("fs-watch-and-streams.mjs");
-
-    write_fixture(
-        &entry,
-        r#"
-import fs from "node:fs";
-import { once } from "node:events";
-
-const readChunks = [];
-const reader = fs.createReadStream("/rpc/input.txt", {
-  encoding: "utf8",
-  start: 1,
-  end: 5,
-  highWaterMark: 2,
-});
-reader.on("data", (chunk) => readChunks.push(chunk));
-await once(reader, "close");
-
-const writer = fs.createWriteStream("/rpc/output.txt", {
-  start: 2,
-  highWaterMark: 2,
-});
-writer.write("XY");
-writer.end("Z");
-await once(writer, "close");
-
-const watchEvents = [];
-const watchFileEvents = [];
-const watcher = fs.watch("/rpc/watch.txt", (eventType, filename) => {
-  watchEvents.push({
-    eventType,
-    filename: Buffer.isBuffer(filename) ? filename.toString("utf8") : filename,
-  });
-});
-fs.watchFile("/rpc/watch.txt", { interval: 20 }, (curr, prev) => {
-  watchFileEvents.push({
-    currSize: curr.size,
-    prevSize: prev.size,
-  });
-});
-
-setTimeout(() => {
-  fs.writeFileSync("/rpc/watch.txt", "after!!");
-}, 60);
-
-const deadline = Date.now() + 3000;
-while (watchEvents.length === 0 || watchFileEvents.length === 0) {
-  if (Date.now() > deadline) {
-    watcher.close();
-    fs.unwatchFile("/rpc/watch.txt");
-    throw new Error(
-      `timed out waiting for watch events: ${JSON.stringify({
-        watchEvents,
-        watchFileEvents,
-      })}`,
-    );
-  }
-  await new Promise((resolve) => setTimeout(resolve, 20));
-}
-
-watcher.close();
-fs.unwatchFile("/rpc/watch.txt");
-
-console.log(
-  JSON.stringify({
-    readChunks,
-    output: fs.readFileSync("/rpc/output.txt", "utf8"),
-    watchEvents,
-    watchFileEvents,
-  }),
-);
-"#,
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-fs-watch-and-streams");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let create = sidecar
-        .dispatch_wire_blocking(wire_request(
-            3,
-            wire_session(&connection_id, &session_id),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                GuestRuntimeKind::JavaScript,
-                HashMap::from([(String::from("cwd"), cwd.to_string_lossy().into_owned())]),
-                RootFilesystemDescriptor {
-                    mode: RootFilesystemMode::Ephemeral,
-                    disable_default_base_layer: false,
-                    lowers: Vec::new(),
-                    bootstrap_entries: vec![
-                        root_dir("/rpc", 0o755),
-                        root_file("/rpc/input.txt", "abcdefg"),
-                        root_file("/rpc/output.txt", "hello"),
-                        root_file("/rpc/watch.txt", "before"),
-                    ],
-                },
-                Some(wire_permissions_allow_all()),
-            )),
-        ))
-        .expect("create sidecar vm");
-    let vm_id = match create.response.payload {
-        ResponsePayload::VmCreatedResponse(response) => response.vm_id,
-        other => panic!("unexpected create vm response: {other:?}"),
-    };
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "fs-watch-and-streams",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_wire_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "fs-watch-and-streams",
-        Duration::from_secs(10),
-    );
-
-    assert_eq!(exit_code, 0, "stdout:\n{stdout}\nstderr:\n{stderr}");
-    assert!(stderr.trim().is_empty(), "unexpected stderr:\n{stderr}");
-
-    let json_line = stdout
-        .lines()
-        .rev()
-        .find(|line| !line.trim().is_empty())
-        .expect("stdout json line");
-    let payload: serde_json::Value =
-        serde_json::from_str(json_line).expect("parse fs watch and streams result");
-
-    assert_eq!(payload["readChunks"], serde_json::json!(["bc", "de", "f"]));
-    assert_eq!(payload["output"], "\u{0}\u{0}XYZ");
-    assert_eq!(payload["watchEvents"][0]["eventType"], "change");
-    assert_eq!(payload["watchEvents"][0]["filename"], "watch.txt");
-    assert_eq!(payload["watchFileEvents"][0]["prevSize"], 6);
-    assert_eq!(payload["watchFileEvents"][0]["currSize"], 7);
-}
diff --git a/crates/sidecar/tests/generated_protocol.rs b/crates/sidecar/tests/generated_protocol.rs
deleted file mode 100644
index 91ed465d4..000000000
--- a/crates/sidecar/tests/generated_protocol.rs
+++ /dev/null
@@ -1,336 +0,0 @@
-use secure_exec_sidecar::generated_protocol::v1::{
-    AuthenticateRequest, ConfigureVmRequest, ConnectionOwnership, ExtEnvelope, FsPermissionScope,
-    GuestFilesystemCallRequest, GuestFilesystemOperation, MountDescriptor, MountPluginDescriptor,
-    OwnershipScope, PermissionMode, PermissionsPolicy, ProjectedModuleDescriptor, ProtocolFrame,
-    ProtocolSchema, RequestFrame, RequestPayload, ResponseFrame, ResponsePayload,
-    VmConfiguredResponse, VmOwnership, WasmPermissionTier,
-};
-use secure_exec_sidecar::protocol as live_protocol;
-use serde_json::json;
-use std::collections::HashMap;
-
-const GENERATED_AUTH_FRAME_HEX: &str = "00137365637572652d657865632d73696465636172070007000000000000000006636f6e6e2d31000e67656e6572617465642d7465737405746f6b656e070001000000";
-
-#[test]
-fn generated_protocol_round_trips_request_frame() {
-    let frame = ProtocolFrame::RequestFrame(RequestFrame {
-        schema: ProtocolSchema {
-            name: live_protocol::PROTOCOL_NAME.to_string(),
-            version: live_protocol::PROTOCOL_VERSION,
-        },
-        request_id: 7,
-        ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-            connection_id: "conn-1".to_string(),
-        }),
-        payload: RequestPayload::AuthenticateRequest(AuthenticateRequest {
-            client_name: "generated-test".to_string(),
-            auth_token: "token".to_string(),
-            protocol_version: live_protocol::PROTOCOL_VERSION,
-            bridge_version: 1,
-        }),
-    });
-
-    let encoded = serde_bare::to_vec(&frame).expect("encode generated frame");
-    let decoded: ProtocolFrame = serde_bare::from_slice(&encoded).expect("decode generated frame");
-
-    assert_eq!(decoded, frame);
-}
-
-#[test]
-fn generated_protocol_matches_cross_language_auth_frame_bytes() {
-    let frame = generated_auth_frame();
-
-    let encoded = serde_bare::to_vec(&frame).expect("encode generated frame");
-    assert_eq!(hex_encode(&encoded), GENERATED_AUTH_FRAME_HEX);
-
-    let fixture = hex_decode(GENERATED_AUTH_FRAME_HEX);
-    let decoded: ProtocolFrame =
-        serde_bare::from_slice(&fixture).expect("decode generated auth fixture");
-    assert_eq!(decoded, frame);
-}
-
-#[test]
-fn live_bare_codec_matches_generated_request_bytes() {
-    let codec = live_protocol::NativeFrameCodec::with_payload_codec(
-        1024 * 1024,
-        live_protocol::NativePayloadCodec::Bare,
-    );
-
-    let live_auth = live_protocol::ProtocolFrame::Request(live_protocol::RequestFrame::new(
-        7,
-        live_protocol::OwnershipScope::connection("conn-1"),
-        live_protocol::RequestPayload::Authenticate(live_protocol::AuthenticateRequest {
-            client_name: "generated-test".to_string(),
-            auth_token: "token".to_string(),
-            protocol_version: live_protocol::PROTOCOL_VERSION,
-            bridge_version: 1,
-        }),
-    ));
-    let live_auth_payload = live_frame_payload(&codec.encode(&live_auth).expect("encode auth"));
-    let generated_auth_payload =
-        serde_bare::to_vec(&generated_auth_frame()).expect("encode generated auth");
-    assert_eq!(live_auth_payload, generated_auth_payload);
-
-    let live_configure = live_protocol::ProtocolFrame::Request(live_protocol::RequestFrame::new(
-        9,
-        live_protocol::OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        live_protocol::RequestPayload::ConfigureVm(live_protocol::ConfigureVmRequest {
-            mounts: vec![live_protocol::MountDescriptor {
-                guest_path: "/node_modules".to_string(),
-                read_only: true,
-                plugin: live_protocol::MountPluginDescriptor {
-                    id: "host_dir".to_string(),
-                    config: json!({
-                        "hostPath": "/tmp/deps",
-                        "readOnly": true,
-                    })
-                    .to_string(),
-                },
-            }],
-            software: Vec::new(),
-            permissions: Some(live_protocol::PermissionsPolicy {
-                fs: Some(live_protocol::FsPermissionScope::PermissionMode(
-                    live_protocol::PermissionMode::Allow,
-                )),
-                network: None,
-                child_process: None,
-                process: None,
-                env: None,
-                binding: None,
-            }),
-            module_access_cwd: Some("/workspace".to_string()),
-            instructions: vec!["keep it generic".to_string()],
-            projected_modules: vec![live_protocol::ProjectedModuleDescriptor {
-                package_name: "workspace".to_string(),
-                entrypoint: "/workspace/index.js".to_string(),
-            }],
-            command_permissions: std::collections::HashMap::from([(
-                "cat".to_string(),
-                live_protocol::WasmPermissionTier::ReadOnly,
-            )]),
-            loopback_exempt_ports: vec![3000],
-            packages: Vec::new(),
-            packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-        }),
-    ));
-    let live_configure_payload =
-        live_frame_payload(&codec.encode(&live_configure).expect("encode configure"));
-    let generated_configure_payload =
-        serde_bare::to_vec(&generated_configure_frame()).expect("encode generated configure");
-    assert_eq!(live_configure_payload, generated_configure_payload);
-
-    let live_ext = live_protocol::ProtocolFrame::Request(live_protocol::RequestFrame::new(
-        11,
-        live_protocol::OwnershipScope::connection("conn-1"),
-        live_protocol::RequestPayload::Ext(live_protocol::ExtEnvelope {
-            namespace: "dev.rivet.secure-exec.test".to_string(),
-            payload: b"extension-bytes".to_vec(),
-        }),
-    ));
-    let live_ext_payload = live_frame_payload(&codec.encode(&live_ext).expect("encode ext"));
-    let generated_ext_payload =
-        serde_bare::to_vec(&generated_ext_frame()).expect("encode generated ext");
-    assert_eq!(live_ext_payload, generated_ext_payload);
-}
-
-#[test]
-fn live_bare_codec_decodes_generated_response_bytes() {
-    let codec = live_protocol::NativeFrameCodec::with_payload_codec(
-        1024 * 1024,
-        live_protocol::NativePayloadCodec::Bare,
-    );
-    let generated = ProtocolFrame::ResponseFrame(ResponseFrame {
-        schema: protocol_schema(),
-        request_id: 9,
-        ownership: generated_vm_ownership(),
-        payload: ResponsePayload::VmConfiguredResponse(VmConfiguredResponse {
-            applied_mounts: 2,
-            applied_software: 0,
-                projected_commands: Vec::new(),
-            agents: Vec::new(),
-        }),
-    });
-    let payload = serde_bare::to_vec(&generated).expect("encode generated response");
-    let decoded = codec
-        .decode(&framed_payload(&payload))
-        .expect("decode generated response with live codec");
-
-    assert_eq!(
-        decoded,
-        live_protocol::ProtocolFrame::Response(live_protocol::ResponseFrame::new(
-            9,
-            live_protocol::OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-            live_protocol::ResponsePayload::VmConfigured(live_protocol::VmConfiguredResponse {
-                applied_mounts: 2,
-                applied_software: 0,
-                projected_commands: Vec::new(),
-                agents: Vec::new(),
-            }),
-        )),
-    );
-}
-
-#[test]
-fn generated_protocol_preserves_json_utf8_strings() {
-    let descriptor = MountPluginDescriptor {
-        id: "chunked_s3".to_string(),
-        config: r#"{"bucket":"demo","prefix":"workspace"}"#.to_string(),
-    };
-
-    let encoded = serde_bare::to_vec(&descriptor).expect("encode generated descriptor");
-    let decoded: MountPluginDescriptor =
-        serde_bare::from_slice(&encoded).expect("decode generated descriptor");
-
-    assert_eq!(decoded, descriptor);
-}
-
-#[test]
-fn generated_protocol_preserves_guest_filesystem_call_offsets() {
-    let request = GuestFilesystemCallRequest {
-        operation: GuestFilesystemOperation::Pread,
-        path: "/workspace/data.bin".to_string(),
-        destination_path: None,
-        target: None,
-        content: None,
-        encoding: None,
-        recursive: false,
-            max_depth: None,
-        mode: None,
-        uid: None,
-        gid: None,
-        atime_ms: None,
-        mtime_ms: None,
-        len: Some(12),
-        offset: Some(34),
-    };
-
-    let encoded = serde_bare::to_vec(&request).expect("encode generated filesystem call");
-    let decoded: GuestFilesystemCallRequest =
-        serde_bare::from_slice(&encoded).expect("decode generated filesystem call");
-
-    assert_eq!(decoded, request);
-}
-
-fn hex_encode(bytes: &[u8]) -> String {
-    const HEX: &[u8; 16] = b"0123456789abcdef";
-    let mut output = String::with_capacity(bytes.len() * 2);
-    for byte in bytes {
-        output.push(HEX[(byte >> 4) as usize] as char);
-        output.push(HEX[(byte & 0x0f) as usize] as char);
-    }
-    output
-}
-
-fn hex_decode(hex: &str) -> Vec<u8> {
-    assert_eq!(hex.len() % 2, 0, "hex length must be even");
-    hex.as_bytes()
-        .chunks_exact(2)
-        .map(|pair| (hex_nibble(pair[0]) << 4) | hex_nibble(pair[1]))
-        .collect()
-}
-
-fn generated_auth_frame() -> ProtocolFrame {
-    ProtocolFrame::RequestFrame(RequestFrame {
-        schema: protocol_schema(),
-        request_id: 7,
-        ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-            connection_id: "conn-1".to_string(),
-        }),
-        payload: RequestPayload::AuthenticateRequest(AuthenticateRequest {
-            client_name: "generated-test".to_string(),
-            auth_token: "token".to_string(),
-            protocol_version: live_protocol::PROTOCOL_VERSION,
-            bridge_version: 1,
-        }),
-    })
-}
-
-fn generated_configure_frame() -> ProtocolFrame {
-    ProtocolFrame::RequestFrame(RequestFrame {
-        schema: protocol_schema(),
-        request_id: 9,
-        ownership: generated_vm_ownership(),
-        payload: RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-            mounts: vec![MountDescriptor {
-                guest_path: "/node_modules".to_string(),
-                read_only: true,
-                plugin: MountPluginDescriptor {
-                    id: "host_dir".to_string(),
-                    config: r#"{"hostPath":"/tmp/deps","readOnly":true}"#.to_string(),
-                },
-            }],
-            software: Vec::new(),
-            permissions: Some(PermissionsPolicy {
-                fs: Some(FsPermissionScope::PermissionMode(PermissionMode::Allow)),
-                network: None,
-                child_process: None,
-                process: None,
-                env: None,
-                binding: None,
-            }),
-            module_access_cwd: Some("/workspace".to_string()),
-            instructions: vec!["keep it generic".to_string()],
-            projected_modules: vec![ProjectedModuleDescriptor {
-                package_name: "workspace".to_string(),
-                entrypoint: "/workspace/index.js".to_string(),
-            }],
-            command_permissions: HashMap::from([("cat".to_string(), WasmPermissionTier::ReadOnly)]),
-            loopback_exempt_ports: vec![3000],
-            packages: Vec::new(),
-            packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-        }),
-    })
-}
-
-fn protocol_schema() -> ProtocolSchema {
-    ProtocolSchema {
-        name: live_protocol::PROTOCOL_NAME.to_string(),
-        version: live_protocol::PROTOCOL_VERSION,
-    }
-}
-
-fn generated_ext_frame() -> ProtocolFrame {
-    ProtocolFrame::RequestFrame(RequestFrame {
-        schema: protocol_schema(),
-        request_id: 11,
-        ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-            connection_id: "conn-1".to_string(),
-        }),
-        payload: RequestPayload::ExtEnvelope(ExtEnvelope {
-            namespace: "dev.rivet.secure-exec.test".to_string(),
-            payload: b"extension-bytes".to_vec(),
-        }),
-    })
-}
-
-fn generated_vm_ownership() -> OwnershipScope {
-    OwnershipScope::VmOwnership(VmOwnership {
-        connection_id: "conn-1".to_string(),
-        session_id: "session-1".to_string(),
-        vm_id: "vm-1".to_string(),
-    })
-}
-
-fn live_frame_payload(frame: &[u8]) -> Vec<u8> {
-    frame[4..].to_vec()
-}
-
-fn framed_payload(payload: &[u8]) -> Vec<u8> {
-    let mut frame = Vec::with_capacity(4 + payload.len());
-    frame.extend_from_slice(&(payload.len() as u32).to_be_bytes());
-    frame.extend_from_slice(payload);
-    frame
-}
-
-fn hex_nibble(byte: u8) -> u8 {
-    match byte {
-        b'0'..=b'9' => byte - b'0',
-        b'a'..=b'f' => byte - b'a' + 10,
-        b'A'..=b'F' => byte - b'A' + 10,
-        _ => panic!("invalid hex byte {byte}"),
-    }
-}
diff --git a/crates/sidecar/tests/google_drive.rs b/crates/sidecar/tests/google_drive.rs
deleted file mode 100644
index 6e1c37aa7..000000000
--- a/crates/sidecar/tests/google_drive.rs
+++ /dev/null
@@ -1,510 +0,0 @@
-#[allow(dead_code)]
-mod google_drive {
-    include!("../src/plugins/google_drive.rs");
-
-    mod tests {
-        use super::test_support::MockGoogleDriveServer;
-        use super::*;
-
-        const TEST_PRIVATE_KEY: &str = "-----BEGIN RSA PRIVATE KEY-----\n\
-MIIEpAIBAAKCAQEAyRE6rHuNR0QbHO3H3Kt2pOKGVhQqGZXInOduQNxXzuKlvQTL\n\
-UTv4l4sggh5/CYYi/cvI+SXVT9kPWSKXxJXBXd/4LkvcPuUakBoAkfh+eiFVMh2V\n\
-rUyWyj3MFl0HTVF9KwRXLAcwkREiS3npThHRyIxuy0ZMeZfxVL5arMhw1SRELB8H\n\
-oGfG/AtH89BIE9jDBHZ9dLelK9a184zAf8LwoPLxvJb3Il5nncqPcSfKDDodMFBI\n\
-Mc4lQzDKL5gvmiXLXB1AGLm8KBjfE8s3L5xqi+yUod+j8MtvIj812dkS4QMiRVN/\n\
-by2h3ZY8LYVGrqZXZTcgn2ujn8uKjXLZVD5TdQIDAQABAoIBAHREk0I0O9DvECKd\n\
-WUpAmF3mY7oY9PNQiu44Yaf+AoSuyRpRUGTMIgc3u3eivOE8ALX0BmYUO5JtuRNZ\n\
-Dpvt4SAwqCnVUinIf6C+eH/wSurCpapSM0BAHp4aOA7igptyOMgMPYBHNA1e9A7j\n\
-E0dCxKWMl3DSWNyjQTk4zeRGEAEfbNjHrq6YCtjHSZSLmWiG80hnfnYos9hOr5Jn\n\
-LnyS7ZmFE/5P3XVrxLc/tQ5zum0R4cbrgzHiQP5RgfxGJaEi7XcgherCCOgurJSS\n\
-bYH29Gz8u5fFbS+Yg8s+OiCss3cs1rSgJ9/eHZuzGEdUZVARH6hVMjSuwvqVTFaE\n\
-8AgtleECgYEA+uLMn4kNqHlJS2A5uAnCkj90ZxEtNm3E8hAxUrhssktY5XSOAPBl\n\
-xyf5RuRGIImGtUVIr4HuJSa5TX48n3Vdt9MYCprO/iYl6moNRSPt5qowIIOJmIjY\n\
-2mqPDfDt/zw+fcDD3lmCJrFlzcnh0uea1CohxEbQnL3cypeLt+WbU6kCgYEAzSp1\n\
-9m1ajieFkqgoB0YTpt/OroDx38vvI5unInJlEeOjQ+oIAQdN2wpxBvTrRorMU6P0\n\
-7mFUbt1j+Co6CbNiw+X8HcCaqYLR5clbJOOWNR36PuzOpQLkfK8woupBxzW9B8gZ\n\
-mY8rB1mbJ+/WTPrEJy6YGmIEBkWylQ2VpW8O4O0CgYEApdbvvfFBlwD9YxbrcGz7\n\
-MeNCFbMz+MucqQntIKoKJ91ImPxvtc0y6e/Rhnv0oyNlaUOwJVu0yNgNG117w0g4\n\
-t/+Q38mvVC5xV7/cn7x9UMFk6MkqVir3dYGEqIl/OP1grY2Tq9HtB5iyG9L8NIam\n\
-QOLMyUqqMUILxdthHyFmiGkCgYEAn9+PjpjGMPHxL0gj8Q8VbzsFtou6b1deIRRA\n\
-2CHmSltltR1gYVTMwXxQeUhPMmgkMqUXzs4/WijgpthY44hK1TaZEKIuoxrS70nJ\n\
-4WQLf5a9k1065fDsFZD6yGjdGxvwEmlGMZgTwqV7t1I4X0Ilqhav5hcs5apYL7gn\n\
-PYPeRz0CgYALHCj/Ji8XSsDoF/MhVhnGdIs2P99NNdmo3R2Pv0CuZbDKMU559LJH\n\
-UvrKS8WkuWRDuKrz1W/EQKApFjDGpdqToZqriUFQzwy7mR3ayIiogzNtHcvbDHx8\n\
-oFnGY0OFksX/ye0/XGpy2SFxYRwGU98HPYeBvAQQrVjdkzfy7BmXQQ==\n\
------END RSA PRIVATE KEY-----";
-
-        fn test_config(server: &MockGoogleDriveServer, prefix: &str) -> GoogleDriveMountConfig {
-            GoogleDriveMountConfig {
-                credentials: GoogleDriveMountCredentials {
-                    client_email: String::from("test-service-account@example.com"),
-                    private_key: String::from(TEST_PRIVATE_KEY),
-                },
-                folder_id: String::from("folder-123"),
-                key_prefix: Some(String::from(prefix)),
-                chunk_size: Some(8),
-                inline_threshold: Some(4),
-                token_url: Some(format!("{}/token", server.base_url())),
-                api_base_url: Some(String::from(server.base_url())),
-            }
-        }
-
-        #[test]
-        fn google_drive_url_drops_host_allowlist_but_keeps_credential_guards() {
-            // tokenUrl/apiBaseUrl are trusted mount config, so the strict host
-            // allowlist (SSRF hardening over trusted input) is gone: an arbitrary
-            // https host is now accepted.
-            validate_google_drive_url("https://drive.example.com", "apiBaseUrl", false)
-                .expect("arbitrary https host should now be accepted");
-
-            // The credential-leak guards stay, because these endpoints carry the
-            // OAuth bearer token and signed JWT assertion: http and embedded
-            // credentials are still rejected.
-            let http = validate_google_drive_url("http://oauth2.googleapis.com", "tokenUrl", true)
-                .expect_err("http tokenUrl should be rejected");
-            assert!(
-                http.to_string().contains("tokenUrl must use https"),
-                "unexpected error: {http}"
-            );
-
-            let creds = validate_google_drive_url(
-                "https://user:pass@oauth2.googleapis.com",
-                "tokenUrl",
-                true,
-            )
-            .expect_err("tokenUrl with embedded credentials should be rejected");
-            assert!(
-                creds
-                    .to_string()
-                    .contains("must not include user credentials"),
-                "unexpected error: {creds}"
-            );
-        }
-
-        #[test]
-        fn google_drive_query_literals_escape_backslashes_before_quotes() {
-            assert_eq!(escape_query_literal(r#"plain-text"#), r#"plain-text"#);
-            assert_eq!(
-                escape_query_literal(r#"with\backslash"#),
-                r#"with\\backslash"#
-            );
-            assert_eq!(escape_query_literal("with'quote"), "with\\'quote");
-            assert_eq!(
-                escape_query_literal(r#"path\with'quote"#),
-                r#"path\\with\'quote"#
-            );
-        }
-
-        fn manifest_metadata(
-            ino: u64,
-            mode: u32,
-        ) -> secure_exec_kernel::vfs::MemoryFileSystemSnapshotMetadata {
-            secure_exec_kernel::vfs::MemoryFileSystemSnapshotMetadata {
-                mode,
-                uid: 0,
-                gid: 0,
-                nlink: 1,
-                ino,
-                atime_ms: 0,
-                atime_nsec: 0,
-                mtime_ms: 0,
-                mtime_nsec: 0,
-                ctime_ms: 0,
-                ctime_nsec: 0,
-                birthtime_ms: 0,
-            }
-        }
-
-        #[test]
-        fn google_drive_plugin_persists_files_across_reopen_and_preserves_links() {
-            let server = MockGoogleDriveServer::start();
-
-            let mut filesystem =
-                GoogleDriveBackedFilesystem::from_config(test_config(&server, "persist"))
-                    .expect("open google drive fs");
-            filesystem
-                .write_file("/workspace/original.txt", b"hello world".to_vec())
-                .expect("write original");
-            filesystem
-                .link("/workspace/original.txt", "/workspace/linked.txt")
-                .expect("link file");
-            filesystem
-                .symlink("/workspace/original.txt", "/workspace/alias.txt")
-                .expect("symlink file");
-
-            let mut reopened =
-                GoogleDriveBackedFilesystem::from_config(test_config(&server, "persist"))
-                    .expect("reopen google drive fs");
-
-            assert_eq!(
-                reopened
-                    .read_file("/workspace/original.txt")
-                    .expect("read reopened original"),
-                b"hello world".to_vec()
-            );
-            assert_eq!(
-                reopened
-                    .read_file("/workspace/linked.txt")
-                    .expect("read reopened hard link"),
-                b"hello world".to_vec()
-            );
-            assert_eq!(
-                reopened
-                    .read_file("/workspace/alias.txt")
-                    .expect("read reopened symlink"),
-                b"hello world".to_vec()
-            );
-            assert_eq!(
-                reopened
-                    .stat("/workspace/original.txt")
-                    .expect("stat reopened file")
-                    .nlink,
-                2
-            );
-
-            let chunk_files = server
-                .file_names()
-                .into_iter()
-                .filter(|name| name.contains("/blocks/"))
-                .collect::<Vec<_>>();
-            assert!(
-                chunk_files.len() >= 2,
-                "expected chunked storage to create multiple google drive block files"
-            );
-            assert!(
-                server
-                    .requests()
-                    .iter()
-                    .any(|request| request.method == "POST" && request.path == "/token"),
-                "expected oauth token requests during google drive persistence"
-            );
-        }
-
-        #[test]
-        fn google_drive_plugin_cleans_up_stale_chunk_objects_after_truncate() {
-            let server = MockGoogleDriveServer::start();
-
-            let mut filesystem =
-                GoogleDriveBackedFilesystem::from_config(test_config(&server, "truncate"))
-                    .expect("open google drive fs");
-            filesystem
-                .write_file("/large.txt", b"abcdefghijk".to_vec())
-                .expect("write large file");
-
-            let before = server
-                .file_names()
-                .into_iter()
-                .filter(|name| name.contains("/blocks/"))
-                .collect::<Vec<_>>();
-            assert!(
-                before.len() >= 2,
-                "expected multiple google drive blocks before truncation"
-            );
-
-            filesystem
-                .truncate("/large.txt", 1)
-                .expect("truncate to inline size");
-
-            let after = server
-                .file_names()
-                .into_iter()
-                .filter(|name| name.contains("/blocks/"))
-                .collect::<Vec<_>>();
-            assert!(
-                after.is_empty(),
-                "truncate should remove stale google drive block files"
-            );
-
-            let mut reopened =
-                GoogleDriveBackedFilesystem::from_config(test_config(&server, "truncate"))
-                    .expect("reopen truncated fs");
-            assert_eq!(
-                reopened
-                    .read_file("/large.txt")
-                    .expect("read truncated file"),
-                b"a".to_vec()
-            );
-        }
-
-        #[test]
-        fn google_drive_plugin_rejects_oversized_manifest_entries() {
-            let server = MockGoogleDriveServer::start();
-            let manifest = PersistedFilesystemManifest {
-                format: String::from(MANIFEST_FORMAT),
-                path_index: BTreeMap::from([
-                    (String::from("/"), 1),
-                    (String::from("/huge.bin"), 2),
-                ]),
-                inodes: BTreeMap::from([
-                    (
-                        1,
-                        PersistedFilesystemInode {
-                            metadata: secure_exec_kernel::vfs::MemoryFileSystemSnapshotMetadata {
-                                mode: 0o040755,
-                                uid: 0,
-                                gid: 0,
-                                nlink: 1,
-                                ino: 1,
-                                atime_ms: 0,
-                                atime_nsec: 0,
-                                mtime_ms: 0,
-                                mtime_nsec: 0,
-                                ctime_ms: 0,
-                                ctime_nsec: 0,
-                                birthtime_ms: 0,
-                            },
-                            kind: PersistedFilesystemInodeKind::Directory,
-                        },
-                    ),
-                    (
-                        2,
-                        PersistedFilesystemInode {
-                            metadata: secure_exec_kernel::vfs::MemoryFileSystemSnapshotMetadata {
-                                mode: 0o100644,
-                                uid: 0,
-                                gid: 0,
-                                nlink: 1,
-                                ino: 2,
-                                atime_ms: 0,
-                                atime_nsec: 0,
-                                mtime_ms: 0,
-                                mtime_nsec: 0,
-                                ctime_ms: 0,
-                                ctime_nsec: 0,
-                                birthtime_ms: 0,
-                            },
-                            kind: PersistedFilesystemInodeKind::File {
-                                storage: PersistedFileStorage::Chunked {
-                                    size: u64::MAX,
-                                    chunks: Vec::new(),
-                                },
-                            },
-                        },
-                    ),
-                ]),
-                next_ino: 3,
-            };
-            server.insert_file(
-                "oversized/filesystem-manifest.json",
-                "folder-123",
-                serde_json::to_vec(&manifest).expect("serialize malicious manifest"),
-            );
-
-            let error =
-                match GoogleDriveBackedFilesystem::from_config(test_config(&server, "oversized")) {
-                    Ok(_) => panic!("oversized manifest should be rejected"),
-                    Err(error) => error,
-                };
-            assert_eq!(error.code(), "EINVAL");
-            assert!(
-                error.message().contains("limit"),
-                "unexpected error message: {}",
-                error.message()
-            );
-        }
-
-        #[test]
-        fn google_drive_plugin_accepts_legacy_agentos_manifest_format() {
-            let server = MockGoogleDriveServer::start();
-            let manifest = PersistedFilesystemManifest {
-                format: String::from(LEGACY_AGENTOS_MANIFEST_FORMAT),
-                path_index: BTreeMap::from([
-                    (String::from("/"), 1),
-                    (String::from("/legacy.txt"), 2),
-                ]),
-                inodes: BTreeMap::from([
-                    (
-                        1,
-                        PersistedFilesystemInode {
-                            metadata: manifest_metadata(1, 0o040755),
-                            kind: PersistedFilesystemInodeKind::Directory,
-                        },
-                    ),
-                    (
-                        2,
-                        PersistedFilesystemInode {
-                            metadata: manifest_metadata(2, 0o100644),
-                            kind: PersistedFilesystemInodeKind::File {
-                                storage: PersistedFileStorage::Inline {
-                                    data_base64: BASE64.encode(b"legacy"),
-                                },
-                            },
-                        },
-                    ),
-                ]),
-                next_ino: 3,
-            };
-            server.insert_file(
-                "legacy/filesystem-manifest.json",
-                "folder-123",
-                serde_json::to_vec(&manifest).expect("serialize legacy manifest"),
-            );
-
-            let mut filesystem =
-                GoogleDriveBackedFilesystem::from_config(test_config(&server, "legacy"))
-                    .expect("legacy google drive manifest should load");
-            assert_eq!(
-                filesystem
-                    .read_file("/legacy.txt")
-                    .expect("read legacy manifest file"),
-                b"legacy".to_vec()
-            );
-        }
-
-        #[test]
-        fn google_drive_manifest_rejects_oversized_inline_estimates() {
-            validate_inline_manifest_data_size_with_limit("AAAAAA==", "google drive", 6, 4)
-                .expect("padded inline data at the limit should be accepted");
-
-            let error =
-                validate_inline_manifest_data_size_with_limit("AAAAAAAAAAAA", "google drive", 7, 8)
-                    .expect_err("inline data estimate should be bounded");
-
-            assert_eq!(error.code(), "EINVAL");
-            assert!(
-                error.message().contains("inline data may decode"),
-                "unexpected error message: {}",
-                error.message()
-            );
-        }
-
-        #[test]
-        fn google_drive_persist_rejects_manifest_bytes_above_reader_limit() {
-            validate_persisted_manifest_size(8, 8)
-                .expect("manifest at reader limit should be accepted");
-
-            let error = validate_persisted_manifest_size(9, 8)
-                .expect_err("persist should reject unreadable manifest size");
-
-            assert!(
-                error
-                    .to_string()
-                    .contains("google drive manifest is 9 bytes, limit is 8"),
-                "unexpected error: {error}"
-            );
-        }
-
-        #[test]
-        fn google_drive_manifest_rejects_chunks_larger_than_declared_size() {
-            let server = MockGoogleDriveServer::start();
-            let manifest = PersistedFilesystemManifest {
-                format: String::from(MANIFEST_FORMAT),
-                path_index: BTreeMap::from([
-                    (String::from("/"), 1),
-                    (String::from("/small.bin"), 2),
-                ]),
-                inodes: BTreeMap::from([
-                    (
-                        1,
-                        PersistedFilesystemInode {
-                            metadata: manifest_metadata(1, 0o040755),
-                            kind: PersistedFilesystemInodeKind::Directory,
-                        },
-                    ),
-                    (
-                        2,
-                        PersistedFilesystemInode {
-                            metadata: manifest_metadata(2, 0o100644),
-                            kind: PersistedFilesystemInodeKind::File {
-                                storage: PersistedFileStorage::Chunked {
-                                    size: 5,
-                                    chunks: vec![PersistedChunkRef {
-                                        index: 0,
-                                        key: String::from("chunk-overflow/blocks/2/0"),
-                                    }],
-                                },
-                            },
-                        },
-                    ),
-                ]),
-                next_ino: 3,
-            };
-            server.insert_file(
-                "chunk-overflow/filesystem-manifest.json",
-                "folder-123",
-                serde_json::to_vec(&manifest).expect("serialize malicious manifest"),
-            );
-            server.insert_file(
-                "chunk-overflow/blocks/2/0",
-                "folder-123",
-                b"123456".to_vec(),
-            );
-
-            let error = match GoogleDriveBackedFilesystem::from_config(test_config(
-                &server,
-                "chunk-overflow",
-            )) {
-                Ok(_) => panic!("oversized chunk payload should be rejected"),
-                Err(error) => error,
-            };
-            assert_eq!(error.code(), "EIO");
-            assert!(
-                error.message().contains("exceeded 5 byte limit"),
-                "unexpected error message: {}",
-                error.message()
-            );
-        }
-
-        #[test]
-        fn google_drive_manifest_rejects_chunk_keys_outside_mount_prefix() {
-            let server = MockGoogleDriveServer::start();
-            let manifest = PersistedFilesystemManifest {
-                format: String::from(MANIFEST_FORMAT),
-                path_index: BTreeMap::from([
-                    (String::from("/"), 1),
-                    (String::from("/escaped.bin"), 2),
-                ]),
-                inodes: BTreeMap::from([
-                    (
-                        1,
-                        PersistedFilesystemInode {
-                            metadata: manifest_metadata(1, 0o040755),
-                            kind: PersistedFilesystemInodeKind::Directory,
-                        },
-                    ),
-                    (
-                        2,
-                        PersistedFilesystemInode {
-                            metadata: manifest_metadata(2, 0o100644),
-                            kind: PersistedFilesystemInodeKind::File {
-                                storage: PersistedFileStorage::Chunked {
-                                    size: 4,
-                                    chunks: vec![PersistedChunkRef {
-                                        index: 0,
-                                        key: String::from("outside-prefix/blocks/2/0"),
-                                    }],
-                                },
-                            },
-                        },
-                    ),
-                ]),
-                next_ino: 3,
-            };
-            server.insert_file(
-                "safe-prefix/filesystem-manifest.json",
-                "folder-123",
-                serde_json::to_vec(&manifest).expect("serialize escaped manifest"),
-            );
-            server.insert_file("outside-prefix/blocks/2/0", "folder-123", b"evil".to_vec());
-
-            let error =
-                match GoogleDriveBackedFilesystem::from_config(test_config(&server, "safe-prefix"))
-                {
-                    Ok(_) => panic!("escaped chunk key should be rejected"),
-                    Err(error) => error,
-                };
-            assert_eq!(error.code(), "EINVAL");
-            assert!(
-                error.message().contains("outside mount prefix"),
-                "unexpected error message: {}",
-                error.message()
-            );
-            assert!(
-                server
-                    .file_names()
-                    .contains(&String::from("outside-prefix/blocks/2/0")),
-                "escaped chunk object should not be deleted as a stale safe-prefix chunk"
-            );
-        }
-    }
-}
diff --git a/crates/sidecar/tests/guest_identity.rs b/crates/sidecar/tests/guest_identity.rs
deleted file mode 100644
index dfdc1eec6..000000000
--- a/crates/sidecar/tests/guest_identity.rs
+++ /dev/null
@@ -1,587 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{
-    CreateVmRequest, GuestRuntimeKind, RequestId, RequestPayload, ResponsePayload,
-    RootFilesystemDescriptor, RootFilesystemEntry, RootFilesystemEntryEncoding,
-    RootFilesystemEntryKind, RootFilesystemMode,
-};
-use serde_json::Value;
-use std::collections::{BTreeMap, BTreeSet, HashMap};
-use std::fs;
-use std::process::Command;
-use std::time::Duration;
-use support::{
-    assert_node_available, authenticate_wire, collect_process_output_wire_with_timeout,
-    create_vm_wire, dispose_vm_and_close_session, execute_wire, new_sidecar, open_session_wire,
-    temp_dir, wire_permissions_allow_all, wire_request, wire_session,
-};
-
-const DEFAULT_GUEST_PATH_ENV: &str =
-    "/usr/local/sbin:/usr/local/bin:/opt/agentos/bin:/usr/sbin:/usr/bin:/sbin:/bin";
-const GUEST_IDENTITY_CASES: &[&str] = &["javascript", "python", "wasm_identity", "wasm_env"];
-
-fn create_vm_with_root_filesystem(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    runtime: GuestRuntimeKind,
-    cwd: &std::path::Path,
-    root_filesystem: RootFilesystemDescriptor,
-) -> String {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_session(connection_id, session_id),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                runtime,
-                HashMap::from([(String::from("cwd"), cwd.to_string_lossy().into_owned())]),
-                root_filesystem,
-                Some(wire_permissions_allow_all()),
-            )),
-        ))
-        .expect("create sidecar VM");
-
-    match result.response.payload {
-        ResponsePayload::VmCreatedResponse(response) => response.vm_id,
-        other => panic!("unexpected vm create response: {other:?}"),
-    }
-}
-
-fn parse_json_stdout(stdout: &str) -> Value {
-    serde_json::from_str(stdout.trim()).expect("parse JSON stdout")
-}
-
-fn parse_env_stdout(stdout: &str) -> BTreeMap<String, String> {
-    stdout
-        .lines()
-        .filter_map(|line| line.split_once('='))
-        .map(|(key, value)| (key.to_owned(), value.to_owned()))
-        .collect()
-}
-
-fn javascript_guest_identity_uses_kernel_owned_defaults() {
-    let mut sidecar = new_sidecar("guest-identity-js");
-    let cwd = temp_dir("guest-identity-js-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-guest-identity-js");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    let entrypoint = cwd.join("identity.mjs");
-    fs::write(
-        &entrypoint,
-        r#"
-import os from "node:os";
-
-console.log(JSON.stringify({
-  envUser: process.env.USER ?? null,
-  envHome: process.env.HOME ?? null,
-  envPwd: process.env.PWD ?? null,
-  envShell: process.env.SHELL ?? null,
-  envPath: process.env.PATH ?? null,
-  internalKeys: Object.keys(process.env).filter((key) =>
-    key.startsWith("AGENTOS_") || key.startsWith("NODE_SYNC_RPC_")
-  ),
-  uid: process.getuid(),
-  gid: process.getgid(),
-  euid: process.geteuid(),
-  egid: process.getegid(),
-  groups: process.getgroups(),
-  homedir: os.homedir(),
-  userInfo: os.userInfo(),
-  cwd: process.cwd(),
-}));
-"#,
-    )
-    .expect("write JavaScript identity fixture");
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-js-identity",
-        GuestRuntimeKind::JavaScript,
-        &entrypoint,
-        Vec::new(),
-    );
-
-    let (stdout, stderr, exit_code) = collect_guest_identity_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-js-identity",
-    );
-    dispose_vm_and_close_session(&mut sidecar, &connection_id, &session_id, &vm_id);
-    assert_eq!(exit_code, 0, "stderr:\n{stderr}");
-    assert!(
-        stderr.is_empty(),
-        "unexpected stderr from JavaScript identity execution: {stderr}"
-    );
-
-    let parsed = parse_json_stdout(&stdout);
-    assert_eq!(parsed["envUser"], "agentos");
-    assert_eq!(parsed["envHome"], "/home/agentos");
-    assert_eq!(parsed["envPwd"], "/");
-    assert_eq!(parsed["envShell"], "/bin/sh");
-    assert_eq!(parsed["envPath"], DEFAULT_GUEST_PATH_ENV);
-    assert_eq!(parsed["internalKeys"], Value::Array(Vec::new()));
-    assert_eq!(parsed["uid"], 1000);
-    assert_eq!(parsed["gid"], 1000);
-    assert_eq!(parsed["euid"], 1000);
-    assert_eq!(parsed["egid"], 1000);
-    assert_eq!(parsed["groups"], Value::Array(vec![Value::from(1000)]));
-    assert_eq!(parsed["homedir"], "/home/agentos");
-    assert_eq!(parsed["cwd"], "/");
-    assert_eq!(parsed["userInfo"]["username"], "agentos");
-    assert_eq!(parsed["userInfo"]["uid"], 1000);
-    assert_eq!(parsed["userInfo"]["gid"], 1000);
-    assert_eq!(parsed["userInfo"]["shell"], "/bin/sh");
-    assert_eq!(parsed["userInfo"]["homedir"], "/home/agentos");
-}
-
-fn python_guest_identity_uses_kernel_owned_defaults() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("guest-identity-python");
-    let cwd = temp_dir("guest-identity-python-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-guest-identity-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_root_filesystem(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        RootFilesystemDescriptor {
-            mode: RootFilesystemMode::Ephemeral,
-            disable_default_base_layer: false,
-            lowers: Vec::new(),
-            bootstrap_entries: vec![
-                RootFilesystemEntry {
-                    path: String::from("/workspace"),
-                    kind: RootFilesystemEntryKind::Directory,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    content: None,
-                    encoding: None,
-                    target: None,
-                    executable: false,
-                },
-                RootFilesystemEntry {
-                    path: String::from("/workspace/identity.py"),
-                    kind: RootFilesystemEntryKind::File,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    content: Some(String::from(
-                        r#"
-import json
-import os
-from pathlib import Path
-
-print(json.dumps({
-    "env_user": os.environ.get("USER"),
-    "env_home": os.environ.get("HOME"),
-    "env_pwd": os.environ.get("PWD"),
-    "env_shell": os.environ.get("SHELL"),
-    "env_path": os.environ.get("PATH"),
-    "internal_keys": sorted([
-        key for key in os.environ
-        if key.startswith("AGENTOS_") or key.startswith("NODE_SYNC_RPC_")
-    ]),
-    "path_home": str(Path.home()),
-}))
-"#,
-                    )),
-                    encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                    target: None,
-                    executable: false,
-                },
-            ],
-        },
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-identity",
-        GuestRuntimeKind::Python,
-        std::path::Path::new("/workspace/identity.py"),
-        Vec::new(),
-    );
-
-    let (stdout, stderr, exit_code) = collect_guest_identity_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-identity",
-    );
-    dispose_vm_and_close_session(&mut sidecar, &connection_id, &session_id, &vm_id);
-    assert_eq!(exit_code, 0, "stderr:\n{stderr}");
-    assert!(
-        stderr.is_empty(),
-        "unexpected stderr from Python identity execution: {stderr}"
-    );
-
-    let parsed = parse_json_stdout(&stdout);
-    assert_eq!(parsed["env_user"], "agentos");
-    assert_eq!(parsed["env_home"], "/home/agentos");
-    assert_eq!(parsed["env_pwd"], "/");
-    assert_eq!(parsed["env_shell"], "/bin/sh");
-    assert_eq!(parsed["env_path"], DEFAULT_GUEST_PATH_ENV);
-    assert_eq!(parsed["internal_keys"], Value::Array(Vec::new()));
-    assert_eq!(parsed["path_home"], "/home/agentos");
-}
-
-fn wasm_guest_identity_commands_use_kernel_owned_defaults() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("guest-identity-wasm");
-    let cwd = temp_dir("guest-identity-wasm-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-guest-identity-wasm");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::WebAssembly,
-        &cwd,
-    );
-
-    let wasm_path = cwd.join("identity.wasm");
-    fs::write(
-        &wasm_path,
-        wat::parse_str(
-            r#"
-(module
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (type $getid_t (func (param i32) (result i32)))
-  (type $getpwuid_t (func (param i32 i32 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (import "host_user" "getuid" (func $getuid (type $getid_t)))
-  (import "host_user" "getgid" (func $getgid (type $getid_t)))
-  (import "host_user" "getpwuid" (func $getpwuid (type $getpwuid_t)))
-  (memory (export "memory") 1)
-  (func $assert_zero (param $errno i32)
-    local.get $errno
-    i32.eqz
-    if
-    else
-      unreachable
-    end)
-  (func $assert_value (param $value i32) (param $expected i32)
-    local.get $value
-    local.get $expected
-    i32.eq
-    if
-    else
-      unreachable
-    end)
-  (func $write_stdout (param $ptr i32) (param $len i32)
-    i32.const 16
-    local.get $ptr
-    i32.store
-    i32.const 20
-    local.get $len
-    i32.store
-    i32.const 1
-    i32.const 16
-    i32.const 1
-    i32.const 24
-    call $fd_write
-    call $assert_zero)
-  (func $_start (export "_start")
-    i32.const 0
-    call $getuid
-    call $assert_zero
-    i32.const 0
-    i32.load
-    i32.const 1000
-    call $assert_value
-
-    i32.const 4
-    call $getgid
-    call $assert_zero
-    i32.const 4
-    i32.load
-    i32.const 1000
-    call $assert_value
-
-    i32.const 0
-    i32.load
-    i32.const 128
-    i32.const 256
-    i32.const 8
-    call $getpwuid
-    call $assert_zero
-
-    i32.const 128
-    i32.const 8
-    i32.load
-    call $write_stdout
-  ))
-"#,
-        )
-        .expect("compile wasm identity fixture"),
-    )
-    .expect("write wasm identity fixture");
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-wasm-identity",
-        GuestRuntimeKind::WebAssembly,
-        &wasm_path,
-        Vec::new(),
-    );
-
-    let (stdout, stderr, exit_code) = collect_guest_identity_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-wasm-identity",
-    );
-    dispose_vm_and_close_session(&mut sidecar, &connection_id, &session_id, &vm_id);
-    assert_eq!(exit_code, 0, "stderr:\n{stderr}");
-    assert!(
-        stderr.is_empty(),
-        "unexpected stderr from wasm identity execution: {stderr}"
-    );
-    assert_eq!(stdout, "agentos:x:1000:1000::/home/agentos:/bin/sh");
-}
-
-fn wasm_guest_env_filters_internal_control_vars_and_uses_kernel_defaults() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("guest-env-wasm");
-    let cwd = temp_dir("guest-env-wasm-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-guest-env-wasm");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::WebAssembly,
-        &cwd,
-    );
-
-    let wasm_path = cwd.join("env.wasm");
-    fs::write(
-        &wasm_path,
-        wat::parse_str(
-            r#"
-(module
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (type $environ_sizes_get_t (func (param i32 i32) (result i32)))
-  (type $environ_get_t (func (param i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (import "wasi_snapshot_preview1" "environ_sizes_get" (func $environ_sizes_get (type $environ_sizes_get_t)))
-  (import "wasi_snapshot_preview1" "environ_get" (func $environ_get (type $environ_get_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 16) "\n")
-  (func $assert_zero (param $errno i32)
-    local.get $errno
-    i32.eqz
-    if
-    else
-      unreachable
-    end)
-  (func $strlen (param $ptr i32) (result i32)
-    (local $len i32)
-    (loop $loop
-      local.get $ptr
-      local.get $len
-      i32.add
-      i32.load8_u
-      i32.eqz
-      if
-        local.get $len
-        return
-      end
-      local.get $len
-      i32.const 1
-      i32.add
-      local.set $len
-      br $loop)
-    i32.const 0)
-  (func $write_buffer (param $ptr i32) (param $len i32)
-    i32.const 0
-    local.get $ptr
-    i32.store
-    i32.const 4
-    local.get $len
-    i32.store
-    i32.const 1
-    i32.const 0
-    i32.const 1
-    i32.const 8
-    call $fd_write
-    call $assert_zero)
-  (func $_start (export "_start")
-    (local $count i32)
-    (local $index i32)
-    (local $ptr i32)
-    i32.const 256
-    i32.const 260
-    call $environ_sizes_get
-    call $assert_zero
-    i32.const 256
-    i32.load
-    local.set $count
-    i32.const 512
-    i32.const 1024
-    call $environ_get
-    call $assert_zero
-    (loop $env_loop
-      local.get $index
-      local.get $count
-      i32.lt_u
-      if
-        i32.const 512
-        local.get $index
-        i32.const 4
-        i32.mul
-        i32.add
-        i32.load
-        local.set $ptr
-        local.get $ptr
-        local.get $ptr
-        call $strlen
-        call $write_buffer
-        i32.const 16
-        i32.const 1
-        call $write_buffer
-        local.get $index
-        i32.const 1
-        i32.add
-        local.set $index
-        br $env_loop
-      end)))
-"#,
-        )
-        .expect("compile wasm env fixture"),
-    )
-    .expect("write wasm env fixture");
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-wasm-env",
-        GuestRuntimeKind::WebAssembly,
-        &wasm_path,
-        Vec::new(),
-    );
-
-    let (stdout, stderr, exit_code) = collect_guest_identity_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-wasm-env",
-    );
-    dispose_vm_and_close_session(&mut sidecar, &connection_id, &session_id, &vm_id);
-    assert_eq!(exit_code, 0, "stderr:\n{stderr}");
-    assert!(
-        stderr.is_empty(),
-        "unexpected stderr from wasm env execution: {stderr}"
-    );
-
-    let env = parse_env_stdout(&stdout);
-    let leaked_internal = env
-        .keys()
-        .filter(|key| key.starts_with("AGENTOS_") || key.starts_with("NODE_SYNC_RPC_"))
-        .cloned()
-        .collect::<BTreeSet<_>>();
-
-    assert_eq!(env.get("HOME").map(String::as_str), Some("/home/agentos"));
-    assert_eq!(env.get("USER").map(String::as_str), Some("agentos"));
-    assert_eq!(
-        env.get("PATH").map(String::as_str),
-        Some(DEFAULT_GUEST_PATH_ENV)
-    );
-    assert!(
-        leaked_internal.is_empty(),
-        "unexpected internal env leakage: {leaked_internal:?}"
-    );
-}
-
-fn run_named_case(case_name: &str) {
-    match case_name {
-        "javascript" => javascript_guest_identity_uses_kernel_owned_defaults(),
-        "python" => python_guest_identity_uses_kernel_owned_defaults(),
-        "wasm_identity" => wasm_guest_identity_commands_use_kernel_owned_defaults(),
-        "wasm_env" => wasm_guest_env_filters_internal_control_vars_and_uses_kernel_defaults(),
-        other => panic!("unknown guest_identity case: {other}"),
-    }
-}
-
-fn collect_guest_identity_process_output(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-) -> (String, String, i32) {
-    collect_process_output_wire_with_timeout(
-        sidecar,
-        connection_id,
-        session_id,
-        vm_id,
-        process_id,
-        Duration::from_secs(10),
-    )
-}
-
-#[test]
-fn guest_identity_cases() {
-    let current_exe = std::env::current_exe().expect("current test binary path");
-
-    for case_name in GUEST_IDENTITY_CASES {
-        let status = Command::new(&current_exe)
-            .arg("--exact")
-            .arg("__guest_identity_case_runner")
-            .arg("--nocapture")
-            .env("AGENTOS_GUEST_IDENTITY_CASE", case_name)
-            .status()
-            .unwrap_or_else(|error| panic!("spawn guest_identity runner for {case_name}: {error}"));
-
-        assert!(
-            status.success(),
-            "guest_identity case {case_name} failed with status {status}"
-        );
-    }
-}
-
-#[test]
-fn __guest_identity_case_runner() {
-    let Ok(case_name) = std::env::var("AGENTOS_GUEST_IDENTITY_CASE") else {
-        return;
-    };
-
-    run_named_case(&case_name);
-}
diff --git a/crates/sidecar/tests/host_dir.rs b/crates/sidecar/tests/host_dir.rs
deleted file mode 100644
index 9061f558b..000000000
--- a/crates/sidecar/tests/host_dir.rs
+++ /dev/null
@@ -1,235 +0,0 @@
-// `host_dir.rs` is `include!`d below rather than linked from the crate, so its
-// macOS-only `crate::macos_fs::…` references must resolve within this test
-// binary too. Wire the same module in (macOS only; on Linux those references
-// are `#[cfg]`d out and this module is unused).
-#[cfg(target_os = "macos")]
-#[path = "../src/macos_fs.rs"]
-mod macos_fs;
-
-// The source is `include!`d wholesale but this test only exercises the
-// filesystem-plugin subset, so items used elsewhere in the crate (e.g. the
-// session-thread `SessionModuleReader`) are legitimately unused here.
-#[allow(dead_code)]
-mod host_dir {
-    include!("../src/plugins/host_dir.rs");
-
-    mod tests {
-        use super::{HostDirFilesystem, HostDirMountPlugin, MAX_HOST_DIR_READ_BYTES};
-        use secure_exec_kernel::mount_plugin::{
-            FileSystemPluginFactory, OpenFileSystemPluginRequest,
-        };
-        use secure_exec_kernel::mount_table::MountedFileSystem;
-        use secure_exec_kernel::vfs::VirtualFileSystem;
-        use serde_json::json;
-        use std::fs;
-        use std::os::unix::fs::{MetadataExt, PermissionsExt};
-        use std::path::PathBuf;
-        use std::time::{SystemTime, UNIX_EPOCH};
-
-        fn temp_dir(prefix: &str) -> PathBuf {
-            let suffix = SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("clock should be monotonic enough for temp paths")
-                .as_nanos();
-            let path = std::env::temp_dir().join(format!("{prefix}-{suffix}"));
-            fs::create_dir_all(&path).expect("create temp dir");
-            path
-        }
-
-        #[test]
-        fn filesystem_rejects_symlink_escapes_and_round_trips_writes() {
-            let host_dir = temp_dir("secure-exec-host-dir-plugin");
-            let outside_dir = temp_dir("secure-exec-host-dir-plugin-outside");
-            fs::write(host_dir.join("hello.txt"), "hello from host").expect("seed host file");
-            std::os::unix::fs::symlink(&outside_dir, host_dir.join("escape"))
-                .expect("seed escape symlink");
-
-            let mut filesystem = HostDirFilesystem::new(&host_dir).expect("create host dir fs");
-            assert_eq!(
-                filesystem
-                    .read_text_file("/hello.txt")
-                    .expect("read host file"),
-                "hello from host"
-            );
-
-            filesystem
-                .write_file("/nested/out.txt", b"written from vm".to_vec())
-                .expect("write through host dir fs");
-            assert_eq!(
-                fs::read_to_string(host_dir.join("nested/out.txt"))
-                    .expect("read written host file"),
-                "written from vm"
-            );
-
-            let error = filesystem
-                .read_file("/escape/hostname")
-                .expect_err("escape symlink should fail closed");
-            assert_eq!(error.code(), "EACCES");
-            assert!(
-                !outside_dir.join("hostname").exists(),
-                "read should not materialize files outside the host mount"
-            );
-
-            let error = filesystem
-                .write_file("/escape/owned.txt", b"owned".to_vec())
-                .expect_err("escape symlink write should fail closed");
-            assert_eq!(error.code(), "EACCES");
-            assert!(
-                !outside_dir.join("owned.txt").exists(),
-                "write should not escape the mounted host directory"
-            );
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-            fs::remove_dir_all(outside_dir).expect("remove outside temp dir");
-        }
-
-        #[test]
-        fn filesystem_pwrite_updates_in_place_and_zero_fills_gaps() {
-            let host_dir = temp_dir("secure-exec-host-dir-plugin-pwrite");
-            fs::write(host_dir.join("data.txt"), b"abcdef").expect("seed host file");
-
-            let mut filesystem = HostDirFilesystem::new(&host_dir).expect("create host dir fs");
-            filesystem
-                .pwrite("/data.txt", b"XYZ".to_vec(), 2)
-                .expect("overwrite bytes in place");
-            filesystem
-                .pwrite("/data.txt", b"!".to_vec(), 8)
-                .expect("extend file with zero-filled hole");
-
-            assert_eq!(
-                fs::read(host_dir.join("data.txt")).expect("read written host file"),
-                b"abXYZf\0\0!".to_vec()
-            );
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-        }
-
-        #[test]
-        fn filesystem_pwrite_rejects_symlink_escape_targets() {
-            let host_dir = temp_dir("secure-exec-host-dir-plugin-pwrite-escape");
-            let outside_dir = temp_dir("secure-exec-host-dir-plugin-pwrite-escape-outside");
-            fs::write(outside_dir.join("outside.txt"), b"outside").expect("seed outside file");
-            std::os::unix::fs::symlink(&outside_dir, host_dir.join("escape"))
-                .expect("seed escape symlink");
-
-            let mut filesystem = HostDirFilesystem::new(&host_dir).expect("create host dir fs");
-            let error = filesystem
-                .pwrite("/escape/outside.txt", b"owned".to_vec(), 0)
-                .expect_err("pwrite should reject symlink escapes");
-            assert_eq!(error.code(), "EACCES");
-            assert_eq!(
-                fs::read(outside_dir.join("outside.txt")).expect("outside file should stay intact"),
-                b"outside".to_vec()
-            );
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-            fs::remove_dir_all(outside_dir).expect("remove outside temp dir");
-        }
-
-        #[test]
-        fn filesystem_rejects_full_reads_above_host_dir_limit() {
-            let host_dir = temp_dir("secure-exec-host-dir-plugin-full-read-limit");
-            let huge_file = fs::File::create(host_dir.join("huge.bin")).expect("create huge file");
-            huge_file
-                .set_len(MAX_HOST_DIR_READ_BYTES as u64 + 1)
-                .expect("make sparse huge file");
-
-            let mut filesystem = HostDirFilesystem::new(&host_dir).expect("create host dir fs");
-            let error = filesystem
-                .read_file("/huge.bin")
-                .expect_err("full read should reject oversized host file");
-            assert_eq!(error.code(), "EINVAL");
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-        }
-
-        #[test]
-        fn filesystem_pread_rejects_lengths_above_host_dir_limit() {
-            let host_dir = temp_dir("secure-exec-host-dir-plugin-pread-limit");
-            fs::write(host_dir.join("small.txt"), b"small").expect("seed host file");
-
-            let mut filesystem = HostDirFilesystem::new(&host_dir).expect("create host dir fs");
-            let error = filesystem
-                .pread("/small.txt", 0, MAX_HOST_DIR_READ_BYTES + 1)
-                .expect_err("pread should reject oversized allocation");
-            assert_eq!(error.code(), "EINVAL");
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-        }
-
-        #[test]
-        fn filesystem_metadata_ops_reject_symlink_targets() {
-            let host_dir = temp_dir("secure-exec-host-dir-plugin-metadata");
-            let outside_dir = temp_dir("secure-exec-host-dir-plugin-metadata-outside");
-            let outside_file = outside_dir.join("outside.txt");
-            fs::write(&outside_file, b"outside").expect("seed outside file");
-            std::os::unix::fs::symlink(&outside_file, host_dir.join("link"))
-                .expect("seed escape symlink");
-
-            let baseline = fs::metadata(&outside_file).expect("outside metadata before ops");
-            let baseline_mode = baseline.permissions().mode() & 0o7777;
-            let baseline_uid = baseline.uid();
-            let baseline_gid = baseline.gid();
-            let baseline_atime_ns = baseline.atime_nsec();
-            let baseline_mtime_ns = baseline.mtime_nsec();
-
-            let mut filesystem = HostDirFilesystem::new(&host_dir).expect("create host dir fs");
-
-            let chmod_error = filesystem
-                .chmod("/link", 0o777)
-                .expect_err("chmod should reject symlink targets");
-            assert_eq!(chmod_error.code(), "EPERM");
-
-            let chown_error = filesystem
-                .chown("/link", baseline_uid, baseline_gid)
-                .expect_err("chown should reject symlink targets");
-            assert_eq!(chown_error.code(), "EPERM");
-
-            let utimes_error = filesystem
-                .utimes("/link", 1_000, 2_000)
-                .expect_err("utimes should reject symlink targets");
-            assert_eq!(utimes_error.code(), "EPERM");
-
-            let after = fs::metadata(&outside_file).expect("outside metadata after ops");
-            assert_eq!(after.permissions().mode() & 0o7777, baseline_mode);
-            assert_eq!(after.uid(), baseline_uid);
-            assert_eq!(after.gid(), baseline_gid);
-            assert_eq!(after.atime_nsec(), baseline_atime_ns);
-            assert_eq!(after.mtime_nsec(), baseline_mtime_ns);
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-            fs::remove_dir_all(outside_dir).expect("remove outside temp dir");
-        }
-
-        #[test]
-        fn plugin_config_can_enforce_read_only_mounts() {
-            let host_dir = temp_dir("secure-exec-host-dir-plugin-readonly");
-            fs::write(host_dir.join("hello.txt"), "hello from host").expect("seed host file");
-
-            let plugin = HostDirMountPlugin;
-            let mut mounted = plugin
-                .open(OpenFileSystemPluginRequest {
-                    vm_id: "vm-1",
-                    guest_path: "/workspace",
-                    read_only: false,
-                    config: &json!({
-                        "hostPath": host_dir,
-                        "readOnly": true,
-                    }),
-                    context: &(),
-                })
-                .expect("open host_dir plugin");
-
-            assert_eq!(
-                mounted.read_file("/hello.txt").expect("read host file"),
-                b"hello from host".to_vec()
-            );
-            let error = mounted
-                .write_file("/blocked.txt", b"blocked".to_vec())
-                .expect_err("readonly plugin config should reject writes");
-            assert_eq!(error.code(), "EROFS");
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-        }
-    }
-}
diff --git a/crates/sidecar/tests/kill_cleanup.rs b/crates/sidecar/tests/kill_cleanup.rs
deleted file mode 100644
index 321ac93f2..000000000
--- a/crates/sidecar/tests/kill_cleanup.rs
+++ /dev/null
@@ -1,612 +0,0 @@
-mod support;
-
-use secure_exec_bridge::{LoadFilesystemStateRequest, PersistenceBridge};
-use secure_exec_sidecar::wire::{
-    DisposeReason, DisposeVmRequest, EventPayload, GuestRuntimeKind, KillProcessRequest,
-    OpenSessionRequest, RequestPayload, ResponsePayload, SidecarPlacement, SidecarPlacementShared,
-    StreamChannel,
-};
-use std::collections::HashMap;
-use std::time::{Duration, Instant};
-use support::{
-    assert_node_available, authenticate_wire, create_vm_wire, execute_wire, new_sidecar,
-    open_session_wire, temp_dir, wire_connection, wire_request, wire_session, wire_vm,
-    write_fixture, RecordingBridge,
-};
-
-const PROCESS_OUTPUT_BYTE_LIMIT: usize = 1024 * 1024;
-
-fn wait_for_process_exit(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-) -> i32 {
-    let ownership = wire_vm(connection_id, session_id, vm_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-
-    loop {
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll sidecar wire process exit");
-        let Some(event) = event else {
-            assert!(
-                Instant::now() < deadline,
-                "timed out waiting for process exit"
-            );
-            continue;
-        };
-
-        match event.payload {
-            EventPayload::ProcessExitedEvent(exited) if exited.process_id == process_id => {
-                return exited.exit_code;
-            }
-            _ => {}
-        }
-    }
-}
-
-fn kill_process_terminates_running_guest_execution() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("kill-process");
-    let cwd = temp_dir("kill-process-cwd");
-    let entry = cwd.join("hang.mjs");
-    write_fixture(&entry, "setInterval(() => {}, 1000);\n");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-hang",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    let kill = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("proc-hang"),
-                signal: String::from("SIGTERM"),
-            }),
-        ))
-        .expect("kill guest process");
-
-    match kill.response.payload {
-        ResponsePayload::ProcessKilledResponse(response) => {
-            assert_eq!(response.process_id, "proc-hang");
-        }
-        other => panic!("unexpected kill response: {other:?}"),
-    }
-
-    let exit_code = wait_for_process_exit(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-hang",
-    );
-    assert_ne!(exit_code, 0);
-
-    let rerun = cwd.join("rerun.mjs");
-    write_fixture(&rerun, "console.log('rerun-ok');\n");
-    execute_wire(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-rerun",
-        GuestRuntimeKind::JavaScript,
-        &rerun,
-        Vec::new(),
-    );
-    let (stdout, stderr, rerun_exit) = collect_kill_cleanup_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-rerun",
-    );
-    assert_eq!(stdout, "rerun-ok\n");
-    assert!(stderr.is_empty());
-    assert_eq!(rerun_exit, 0);
-}
-
-fn sigkill_synthesizes_exit_for_shared_v8_guest_execution() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("kill-process-sigkill");
-    let cwd = temp_dir("kill-process-sigkill-cwd");
-    let entry = cwd.join("hang.mjs");
-    write_fixture(&entry, "setInterval(() => {}, 1000);\n");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-sigkill",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    let kill = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("proc-sigkill"),
-                signal: String::from("SIGKILL"),
-            }),
-        ))
-        .expect("SIGKILL guest process");
-
-    match kill.response.payload {
-        ResponsePayload::ProcessKilledResponse(response) => {
-            assert_eq!(response.process_id, "proc-sigkill");
-        }
-        other => panic!("unexpected kill response: {other:?}"),
-    }
-
-    let exit_code = wait_for_process_exit(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-sigkill",
-    );
-    assert_eq!(exit_code, 128 + 9);
-}
-
-fn collect_kill_cleanup_process_output(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-) -> (String, String, i32) {
-    let ownership = wire_session(connection_id, session_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-    let mut stdout = String::new();
-    let mut stderr = String::new();
-    let mut exit = None;
-
-    loop {
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll kill-cleanup wire process event");
-        if let Some(event) = event {
-            assert_eq!(event.ownership, wire_vm(connection_id, session_id, vm_id));
-
-            match event.payload {
-                EventPayload::ProcessOutputEvent(output) if output.process_id == process_id => {
-                    match output.channel {
-                        StreamChannel::Stdout => append_process_output(
-                            &mut stdout,
-                            &output.chunk,
-                            &output.process_id,
-                            "stdout",
-                        ),
-                        StreamChannel::Stderr => append_process_output(
-                            &mut stderr,
-                            &output.chunk,
-                            &output.process_id,
-                            "stderr",
-                        ),
-                    }
-                }
-                EventPayload::ProcessExitedEvent(exited) if exited.process_id == process_id => {
-                    exit = Some((exited.exit_code, Instant::now()));
-                }
-                EventPayload::ProcessOutputEvent(_)
-                | EventPayload::ProcessExitedEvent(_)
-                | EventPayload::VmLifecycleEvent(_)
-                | EventPayload::StructuredEvent(_)
-                | EventPayload::ExtEnvelope(_) => {}
-            }
-        }
-
-        if let Some((exit_code, seen_at)) = exit {
-            if Instant::now().duration_since(seen_at) >= Duration::from_millis(200) {
-                return (stdout, stderr, exit_code);
-            }
-        }
-
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for kill-cleanup process {process_id}\nstdout:\n{stdout}\nstderr:\n{stderr}"
-        );
-    }
-}
-
-fn append_process_output(buffer: &mut String, chunk: &[u8], process_id: &str, channel: &str) {
-    let text = String::from_utf8_lossy(chunk);
-    assert!(
-        buffer.len().saturating_add(text.len()) <= PROCESS_OUTPUT_BYTE_LIMIT,
-        "kill-cleanup process {process_id} exceeded {PROCESS_OUTPUT_BYTE_LIMIT} bytes on {channel}"
-    );
-    buffer.push_str(&text);
-}
-
-fn kill_process_terminates_running_wasm_execution() {
-    // Timeout-dependent: the infinite-loop wasm module's prewarm runs into the
-    // ~30s V8 CPU-time watchdog before the kill lands, so this case takes ~30s
-    // regardless. Gate it to the nightly timing lane (SECURE_EXEC_RUN_TIMING_TESTS=1)
-    // rather than pay 30s on every PR. See CLAUDE.md > Testing.
-    if std::env::var_os("SECURE_EXEC_RUN_TIMING_TESTS").is_none() {
-        return;
-    }
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("kill-process-wasm");
-    let cwd = temp_dir("kill-process-wasm-cwd");
-    let entry = cwd.join("hang.wasm");
-    write_fixture(
-        &entry,
-        wat::parse_str(
-            r#"
-(module
-  (func $_start (export "_start")
-    (loop $loop
-      br $loop
-    )
-  )
-)
-"#,
-        )
-        .expect("compile wasm hang fixture"),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::WebAssembly,
-        &cwd,
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-hang-wasm",
-        GuestRuntimeKind::WebAssembly,
-        &entry,
-        Vec::new(),
-    );
-
-    let kill = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("proc-hang-wasm"),
-                signal: String::from("SIGTERM"),
-            }),
-        ))
-        .expect("kill guest wasm process");
-
-    match kill.response.payload {
-        ResponsePayload::ProcessKilledResponse(response) => {
-            assert_eq!(response.process_id, "proc-hang-wasm");
-        }
-        other => panic!("unexpected kill response: {other:?}"),
-    }
-
-    let exit_code = wait_for_process_exit(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-hang-wasm",
-    );
-    assert_ne!(exit_code, 0);
-}
-
-fn dispose_vm_succeeds_even_when_a_guest_process_is_running() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("dispose-vm-running-process");
-    let cwd = temp_dir("dispose-vm-running-process-cwd");
-    let entry = cwd.join("hang.mjs");
-    write_fixture(&entry, "setInterval(() => {}, 1000);\n");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-hang",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    let dispose = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::DisposeVmRequest(DisposeVmRequest {
-                reason: DisposeReason::Requested,
-            }),
-        ))
-        .expect("dispose vm with running process");
-
-    match dispose.response.payload {
-        ResponsePayload::VmDisposedResponse(response) => {
-            assert_eq!(response.vm_id, vm_id);
-        }
-        other => panic!("unexpected dispose response: {other:?}"),
-    }
-    assert!(dispose
-        .events
-        .iter()
-        .any(|event| matches!(event.payload, EventPayload::ProcessExitedEvent(_))));
-
-    let (_, replacement_vm) = create_vm_wire(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-    match replacement_vm.response.payload {
-        ResponsePayload::VmCreatedResponse(_) => {}
-        other => panic!("unexpected replacement vm response: {other:?}"),
-    }
-
-    sidecar
-        .with_bridge_mut(|bridge: &mut RecordingBridge| {
-            let snapshot = bridge
-                .load_filesystem_state(LoadFilesystemStateRequest {
-                    vm_id: vm_id.clone(),
-                })
-                .expect("load persisted snapshot");
-            assert!(
-                snapshot.is_some(),
-                "disposed vm should flush a filesystem snapshot"
-            );
-        })
-        .expect("inspect persistence bridge");
-}
-
-fn close_session_removes_the_session_and_disposes_owned_vms() {
-    let mut sidecar = new_sidecar("close-session");
-    let cwd = temp_dir("close-session-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    let events = sidecar
-        .close_session_blocking(&connection_id, &session_id)
-        .expect("close owned session");
-    assert!(events
-        .iter()
-        .any(|event| { format!("{:?}", event.payload).contains("Disposed") }));
-
-    let create_after_close = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_session(&connection_id, &session_id),
-            RequestPayload::CreateVmRequest(
-                secure_exec_sidecar::wire::CreateVmRequest::legacy_test_config(
-                    GuestRuntimeKind::JavaScript,
-                    HashMap::from([(String::from("cwd"), cwd.to_string_lossy().into_owned())]),
-                    secure_exec_sidecar::wire::RootFilesystemDescriptor {
-                        mode: secure_exec_sidecar::wire::RootFilesystemMode::Ephemeral,
-                        disable_default_base_layer: false,
-                        lowers: Vec::new(),
-                        bootstrap_entries: Vec::new(),
-                    },
-                    None,
-                ),
-            ),
-        ))
-        .expect("dispatch closed-session create_vm");
-    match create_after_close.response.payload {
-        ResponsePayload::RejectedResponse(rejected) => {
-            assert_eq!(rejected.code, "invalid_state");
-            assert!(rejected.message.contains("unknown sidecar session"));
-        }
-        other => panic!("unexpected closed-session create_vm response: {other:?}"),
-    }
-
-    let reopened = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_connection(&connection_id),
-            RequestPayload::OpenSessionRequest(OpenSessionRequest {
-                placement: SidecarPlacement::SidecarPlacementShared(SidecarPlacementShared {
-                    pool: None,
-                }),
-                metadata: HashMap::new(),
-            }),
-        ))
-        .expect("open replacement session");
-    match reopened.response.payload {
-        ResponsePayload::SessionOpenedResponse(_) => {}
-        other => panic!("unexpected session reopen response: {other:?}"),
-    }
-
-    sidecar
-        .with_bridge_mut(|bridge: &mut RecordingBridge| {
-            let snapshot = bridge
-                .load_filesystem_state(LoadFilesystemStateRequest {
-                    vm_id: vm_id.clone(),
-                })
-                .expect("load persisted snapshot");
-            assert!(
-                snapshot.is_some(),
-                "closing a session should dispose its VMs"
-            );
-        })
-        .expect("inspect persistence bridge");
-}
-
-fn remove_connection_disposes_owned_sessions_and_vms() {
-    let mut sidecar = new_sidecar("remove-connection");
-    let cwd = temp_dir("remove-connection-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    let events = sidecar
-        .remove_connection_blocking(&connection_id)
-        .expect("remove authenticated connection");
-    assert!(events
-        .iter()
-        .any(|event| { format!("{:?}", event.payload).contains("Disposed") }));
-
-    let reopened = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_connection(&connection_id),
-            RequestPayload::OpenSessionRequest(OpenSessionRequest {
-                placement: SidecarPlacement::SidecarPlacementShared(SidecarPlacementShared {
-                    pool: None,
-                }),
-                metadata: HashMap::new(),
-            }),
-        ))
-        .expect("attempt open session after connection removal");
-    match reopened.response.payload {
-        ResponsePayload::RejectedResponse(rejected) => {
-            assert_eq!(rejected.code, "invalid_state");
-            assert!(rejected.message.contains("has not authenticated"));
-        }
-        other => panic!("unexpected post-removal open-session response: {other:?}"),
-    }
-
-    sidecar
-        .with_bridge_mut(|bridge: &mut RecordingBridge| {
-            let snapshot = bridge
-                .load_filesystem_state(LoadFilesystemStateRequest {
-                    vm_id: vm_id.clone(),
-                })
-                .expect("load persisted snapshot");
-            assert!(
-                snapshot.is_some(),
-                "removing a connection should dispose its VMs"
-            );
-        })
-        .expect("inspect persistence bridge");
-}
-
-#[test]
-fn kill_cleanup_suite() {
-    // Multiple libtest cases in this V8-backed integration binary still trip
-    // teardown/init crashes, so keep the coverage in one top-level suite.
-    //
-    // cargo-nextest runs every `#[test]` in its OWN process, so that crash cannot
-    // occur there — `mod kill_cleanup_split` below exposes each case as a separate
-    // test that nextest runs in parallel across cores. Skip the collapsed run under
-    // nextest so the work isn't done twice; the split cases skip themselves under
-    // `cargo test`. nextest sets `NEXTEST=1` in each test process; libtest/`cargo
-    // test` does not.
-    if std::env::var_os("NEXTEST").is_some() {
-        return;
-    }
-    close_session_removes_the_session_and_disposes_owned_vms();
-    dispose_vm_succeeds_even_when_a_guest_process_is_running();
-    kill_process_terminates_running_guest_execution();
-    sigkill_synthesizes_exit_for_shared_v8_guest_execution();
-    kill_process_terminates_running_wasm_execution();
-    remove_connection_disposes_owned_sessions_and_vms();
-}
-
-/// Per-case split of `kill_cleanup_suite` for cargo-nextest (process-per-test).
-///
-/// Each `#[test]` here runs exactly one case in its own process, so the
-/// shared-process V8 teardown/init crash that forces the collapsed
-/// `kill_cleanup_suite` above does not apply, and the cases run in parallel across
-/// cores instead of serially. Each case skips itself under plain `cargo test`
-/// (where `NEXTEST` is unset) so the collapsed suite owns the run there; the
-/// collapsed suite likewise skips under nextest so the work isn't duplicated.
-mod kill_cleanup_split {
-    macro_rules! nextest_cases {
-        ($($case:ident),+ $(,)?) => {
-            $(
-                #[test]
-                fn $case() {
-                    // Covered by the collapsed `super::kill_cleanup_suite` under `cargo test`.
-                    if std::env::var_os("NEXTEST").is_none() {
-                        return;
-                    }
-                    super::$case();
-                }
-            )+
-        };
-    }
-
-    nextest_cases!(
-        close_session_removes_the_session_and_disposes_owned_vms,
-        dispose_vm_succeeds_even_when_a_guest_process_is_running,
-        kill_process_terminates_running_guest_execution,
-        sigkill_synthesizes_exit_for_shared_v8_guest_execution,
-        kill_process_terminates_running_wasm_execution,
-        remove_connection_disposes_owned_sessions_and_vms,
-    );
-}
diff --git a/crates/sidecar/tests/layer_management.rs b/crates/sidecar/tests/layer_management.rs
deleted file mode 100644
index a8ce77626..000000000
--- a/crates/sidecar/tests/layer_management.rs
+++ /dev/null
@@ -1,723 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{
-    ConfigureVmRequest, CreateOverlayRequest, CreateVmRequest, ExportSnapshotRequest,
-    GuestFilesystemCallRequest, GuestFilesystemOperation, GuestRuntimeKind, ImportSnapshotRequest,
-    RequestPayload, ResponsePayload, RootFilesystemDescriptor, RootFilesystemEntry,
-    RootFilesystemEntryKind, RootFilesystemLowerDescriptor, RootFilesystemMode, SealLayerRequest,
-    SnapshotRootFilesystemLower,
-};
-use std::collections::HashMap;
-use std::fs::{create_dir_all, write};
-use support::{
-    authenticate_wire, create_vm_wire, new_sidecar, open_session_wire, temp_dir,
-    wire_permissions_allow_all, wire_request, wire_session, wire_vm,
-};
-
-const MAX_VM_LAYERS_UNDER_TEST: usize = 256;
-
-fn root_dir(path: impl Into<String>) -> RootFilesystemEntry {
-    root_entry(path, RootFilesystemEntryKind::Directory, None)
-}
-
-fn root_file(path: impl Into<String>, content: impl Into<String>) -> RootFilesystemEntry {
-    root_entry(path, RootFilesystemEntryKind::File, Some(content.into()))
-}
-
-fn root_entry(
-    path: impl Into<String>,
-    kind: RootFilesystemEntryKind,
-    content: Option<String>,
-) -> RootFilesystemEntry {
-    RootFilesystemEntry {
-        path: path.into(),
-        kind,
-        mode: None,
-        uid: None,
-        gid: None,
-        content,
-        encoding: None,
-        target: None,
-        executable: false,
-    }
-}
-
-#[test]
-fn vm_layer_lifecycle_round_trips_snapshots_and_invalidates_sealed_ids() {
-    let mut sidecar = new_sidecar("layer-lifecycle");
-    let cwd = temp_dir("layer-lifecycle-cwd");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    let imported_layer_id = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ImportSnapshotRequest(ImportSnapshotRequest {
-                entries: vec![
-                    root_dir("/workspace"),
-                    root_file("/workspace/note.txt", "imported"),
-                ],
-            }),
-        ))
-        .expect("import snapshot")
-        .response
-        .payload
-    {
-        ResponsePayload::SnapshotImportedResponse(response) => response.layer_id,
-        other => panic!("unexpected import snapshot response: {other:?}"),
-    };
-
-    let imported_entries = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ExportSnapshotRequest(ExportSnapshotRequest {
-                layer_id: imported_layer_id.clone(),
-            }),
-        ))
-        .expect("export imported snapshot")
-        .response
-        .payload
-    {
-        ResponsePayload::SnapshotExportedResponse(response) => response.entries,
-        other => panic!("unexpected export snapshot response: {other:?}"),
-    };
-    assert!(imported_entries.iter().any(|entry| {
-        entry.path == "/workspace/note.txt" && entry.content.as_deref() == Some("imported")
-    }));
-
-    let writable_layer_id = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::CreateLayerRequest,
-        ))
-        .expect("create writable layer")
-        .response
-        .payload
-    {
-        ResponsePayload::LayerCreatedResponse(response) => response.layer_id,
-        other => panic!("unexpected create layer response: {other:?}"),
-    };
-    let sealed_layer_id = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            7,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::SealLayerRequest(SealLayerRequest {
-                layer_id: writable_layer_id.clone(),
-            }),
-        ))
-        .expect("seal writable layer")
-        .response
-        .payload
-    {
-        ResponsePayload::LayerSealedResponse(response) => response.layer_id,
-        other => panic!("unexpected seal layer response: {other:?}"),
-    };
-    assert_ne!(sealed_layer_id, writable_layer_id);
-
-    let sealed_entries = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            8,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ExportSnapshotRequest(ExportSnapshotRequest {
-                layer_id: sealed_layer_id,
-            }),
-        ))
-        .expect("export sealed layer")
-        .response
-        .payload
-    {
-        ResponsePayload::SnapshotExportedResponse(response) => response.entries,
-        other => panic!("unexpected export sealed snapshot response: {other:?}"),
-    };
-    assert!(sealed_entries.iter().any(|entry| entry.path == "/"));
-
-    let rejected = sidecar
-        .dispatch_wire_blocking(wire_request(
-            9,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ExportSnapshotRequest(ExportSnapshotRequest {
-                layer_id: writable_layer_id.clone(),
-            }),
-        ))
-        .expect("export sealed source layer should reject");
-    match rejected.response.payload {
-        ResponsePayload::RejectedResponse(response) => {
-            assert_eq!(response.code, "invalid_state");
-            assert!(response.message.contains("unknown layer"));
-        }
-        other => panic!("unexpected rejection response: {other:?}"),
-    }
-
-    let rejected = sidecar
-        .dispatch_wire_blocking(wire_request(
-            10,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::SealLayerRequest(SealLayerRequest {
-                layer_id: writable_layer_id,
-            }),
-        ))
-        .expect("double seal should reject");
-    match rejected.response.payload {
-        ResponsePayload::RejectedResponse(response) => {
-            assert_eq!(response.code, "invalid_state");
-            assert!(response.message.contains("unknown layer"));
-        }
-        other => panic!("unexpected rejection response: {other:?}"),
-    }
-}
-
-#[test]
-fn vm_layer_ids_are_reused_per_vm_without_cross_vm_leakage() {
-    let mut sidecar = new_sidecar("layer-store-isolation");
-    let cwd = temp_dir("layer-store-isolation-cwd");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (first_vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-    let (second_vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    let first_layer_id = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &first_vm_id),
-            RequestPayload::ImportSnapshotRequest(ImportSnapshotRequest {
-                entries: vec![
-                    root_dir("/workspace"),
-                    root_file("/workspace/first.txt", "first-vm"),
-                ],
-            }),
-        ))
-        .expect("import snapshot into first vm")
-        .response
-        .payload
-    {
-        ResponsePayload::SnapshotImportedResponse(response) => response.layer_id,
-        other => panic!("unexpected first import response: {other:?}"),
-    };
-    let second_layer_id = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            wire_vm(&connection_id, &session_id, &second_vm_id),
-            RequestPayload::ImportSnapshotRequest(ImportSnapshotRequest {
-                entries: vec![
-                    root_dir("/workspace"),
-                    root_file("/workspace/second.txt", "second-vm"),
-                ],
-            }),
-        ))
-        .expect("import snapshot into second vm")
-        .response
-        .payload
-    {
-        ResponsePayload::SnapshotImportedResponse(response) => response.layer_id,
-        other => panic!("unexpected second import response: {other:?}"),
-    };
-
-    assert_eq!(first_layer_id, "layer-1");
-    assert_eq!(second_layer_id, "layer-1");
-
-    let first_entries = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            7,
-            wire_vm(&connection_id, &session_id, &first_vm_id),
-            RequestPayload::ExportSnapshotRequest(ExportSnapshotRequest {
-                layer_id: first_layer_id,
-            }),
-        ))
-        .expect("export first vm snapshot")
-        .response
-        .payload
-    {
-        ResponsePayload::SnapshotExportedResponse(response) => response.entries,
-        other => panic!("unexpected first export response: {other:?}"),
-    };
-    let second_entries = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            8,
-            wire_vm(&connection_id, &session_id, &second_vm_id),
-            RequestPayload::ExportSnapshotRequest(ExportSnapshotRequest {
-                layer_id: second_layer_id,
-            }),
-        ))
-        .expect("export second vm snapshot")
-        .response
-        .payload
-    {
-        ResponsePayload::SnapshotExportedResponse(response) => response.entries,
-        other => panic!("unexpected second export response: {other:?}"),
-    };
-
-    assert!(first_entries.iter().any(|entry| {
-        entry.path == "/workspace/first.txt" && entry.content.as_deref() == Some("first-vm")
-    }));
-    assert!(!first_entries
-        .iter()
-        .any(|entry| entry.path == "/workspace/second.txt"));
-    assert!(second_entries.iter().any(|entry| {
-        entry.path == "/workspace/second.txt" && entry.content.as_deref() == Some("second-vm")
-    }));
-    assert!(!second_entries
-        .iter()
-        .any(|entry| entry.path == "/workspace/first.txt"));
-}
-
-#[test]
-fn vm_layer_store_rejects_new_layers_at_limit() {
-    let mut sidecar = new_sidecar("layer-store-limit");
-    let cwd = temp_dir("layer-store-limit-cwd");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    let mut first_layer_id = String::new();
-    for index in 0..MAX_VM_LAYERS_UNDER_TEST {
-        let layer_id = match sidecar
-            .dispatch_wire_blocking(wire_request(
-                4 + index as i64,
-                wire_vm(&connection_id, &session_id, &vm_id),
-                RequestPayload::ImportSnapshotRequest(ImportSnapshotRequest {
-                    entries: vec![root_file(
-                        format!("/layer-{index}.txt"),
-                        format!("layer {index}"),
-                    )],
-                }),
-            ))
-            .expect("import snapshot at layer limit")
-            .response
-            .payload
-        {
-            ResponsePayload::SnapshotImportedResponse(response) => response.layer_id,
-            other => panic!("unexpected import snapshot response: {other:?}"),
-        };
-        if index == 0 {
-            first_layer_id = layer_id;
-        }
-    }
-
-    for (offset, payload) in [
-        (
-            0,
-            RequestPayload::ImportSnapshotRequest(ImportSnapshotRequest {
-                entries: vec![root_file("/overflow-import.txt", "overflow")],
-            }),
-        ),
-        (1, RequestPayload::CreateLayerRequest),
-        (
-            2,
-            RequestPayload::CreateOverlayRequest(CreateOverlayRequest {
-                mode: RootFilesystemMode::Ephemeral,
-                upper_layer_id: None,
-                lower_layer_ids: vec![first_layer_id.clone()],
-            }),
-        ),
-        (
-            3,
-            RequestPayload::CreateOverlayRequest(CreateOverlayRequest {
-                mode: RootFilesystemMode::Ephemeral,
-                upper_layer_id: None,
-                lower_layer_ids: vec![String::from("missing-layer")],
-            }),
-        ),
-    ] {
-        let rejected = sidecar
-            .dispatch_wire_blocking(wire_request(
-                300 + offset,
-                wire_vm(&connection_id, &session_id, &vm_id),
-                payload,
-            ))
-            .expect("dispatch layer overflow request");
-        match rejected.response.payload {
-            ResponsePayload::RejectedResponse(response) => {
-                assert_eq!(response.code, "invalid_state");
-                assert!(
-                    response.message.contains("VM layer limit exceeded"),
-                    "unexpected rejection: {response:?}"
-                );
-            }
-            other => panic!("expected layer limit rejection, got {other:?}"),
-        }
-    }
-
-    let rejected = sidecar
-        .dispatch_wire_blocking(wire_request(
-            400,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ExportSnapshotRequest(ExportSnapshotRequest {
-                layer_id: String::from("layer-257"),
-            }),
-        ))
-        .expect("export overflow layer id should reject");
-    match rejected.response.payload {
-        ResponsePayload::RejectedResponse(response) => {
-            assert_eq!(response.code, "invalid_state");
-            assert!(response.message.contains("unknown layer"));
-        }
-        other => panic!("expected unknown overflow layer rejection, got {other:?}"),
-    }
-}
-
-#[test]
-fn create_vm_root_filesystem_composes_multiple_lowers_with_bootstrap_upper() {
-    let mut sidecar = new_sidecar("vm-root-multi-layer");
-    let cwd = temp_dir("vm-root-multi-layer-cwd");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let create = sidecar
-        .dispatch_wire_blocking(wire_request(
-            3,
-            wire_session(&connection_id, &session_id),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                GuestRuntimeKind::JavaScript,
-                HashMap::from([(String::from("cwd"), cwd.to_string_lossy().into_owned())]),
-                RootFilesystemDescriptor {
-                    disable_default_base_layer: true,
-                    lowers: vec![
-                        RootFilesystemLowerDescriptor::SnapshotRootFilesystemLower(
-                            SnapshotRootFilesystemLower {
-                                entries: vec![
-                                    root_dir("/workspace"),
-                                    root_file("/workspace/shared.txt", "higher"),
-                                    root_file("/workspace/higher-only.txt", "higher-only"),
-                                ],
-                            },
-                        ),
-                        RootFilesystemLowerDescriptor::SnapshotRootFilesystemLower(
-                            SnapshotRootFilesystemLower {
-                                entries: vec![
-                                    root_dir("/workspace"),
-                                    root_file("/workspace/shared.txt", "lower"),
-                                    root_file("/workspace/lower-only.txt", "lower-only"),
-                                ],
-                            },
-                        ),
-                    ],
-                    bootstrap_entries: vec![
-                        root_dir("/workspace"),
-                        root_file("/workspace/shared.txt", "upper"),
-                        root_file("/workspace/upper-only.txt", "upper-only"),
-                    ],
-                    mode: RootFilesystemMode::Ephemeral,
-                },
-                Some(wire_permissions_allow_all()),
-            )),
-        ))
-        .expect("create vm with multi-layer root");
-
-    let vm_id = match create.response.payload {
-        ResponsePayload::VmCreatedResponse(response) => response.vm_id,
-        other => panic!("unexpected create vm response: {other:?}"),
-    };
-
-    for (request_id, path, expected) in [
-        (4, "/workspace/shared.txt", "upper"),
-        (5, "/workspace/higher-only.txt", "higher-only"),
-        (6, "/workspace/lower-only.txt", "lower-only"),
-        (7, "/workspace/upper-only.txt", "upper-only"),
-    ] {
-        let read = sidecar
-            .dispatch_wire_blocking(wire_request(
-                request_id,
-                wire_vm(&connection_id, &session_id, &vm_id),
-                RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                    operation: GuestFilesystemOperation::ReadFile,
-                    path: String::from(path),
-                    destination_path: None,
-                    target: None,
-                    content: None,
-                    encoding: None,
-                    recursive: false,
-            max_depth: None,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    atime_ms: None,
-                    mtime_ms: None,
-                    len: None,
-                    offset: None,
-                }),
-            ))
-            .expect("read layered file");
-
-        match read.response.payload {
-            ResponsePayload::GuestFilesystemResultResponse(response) => {
-                assert_eq!(response.content.as_deref(), Some(expected));
-            }
-            other => panic!("unexpected guest filesystem response: {other:?}"),
-        }
-    }
-}
-
-#[test]
-fn vm_layer_rpcs_and_module_access_mounts_are_scoped_per_vm() {
-    let mut sidecar = new_sidecar("layer-management");
-    let cwd = temp_dir("layer-management-cwd");
-    let module_access_cwd = temp_dir("layer-management-module-access");
-    let package_root = module_access_cwd.join("node_modules/fixture-pkg");
-    create_dir_all(&package_root).expect("create module access package root");
-    write(
-        package_root.join("package.json"),
-        r#"{"name":"fixture-pkg","version":"1.0.0"}"#,
-    )
-    .expect("write module access package json");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    let configure = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: Vec::new(),
-                software: Vec::new(),
-                permissions: None,
-                module_access_cwd: Some(module_access_cwd.to_string_lossy().into_owned()),
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: HashMap::new(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ))
-        .expect("configure vm");
-    match configure.response.payload {
-        ResponsePayload::VmConfiguredResponse(response) => {
-            // 1 = just the module_access node_modules mount. With no packages
-            // configured there are no granular `/opt/agentos` leaf mounts (the
-            // projection adds a tar/bin/current mount per package, not a single
-            // always-present staging mount).
-            assert_eq!(response.applied_mounts, 1);
-        }
-        other => panic!("unexpected configure response: {other:?}"),
-    }
-
-    let module_read = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::ReadFile,
-                path: String::from("/root/node_modules/fixture-pkg/package.json"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ))
-        .expect("read module access file");
-    match module_read.response.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert!(response
-                .content
-                .expect("module access content")
-                .contains("\"fixture-pkg\""));
-        }
-        other => panic!("unexpected module access response: {other:?}"),
-    }
-
-    let writable_layer_id = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::CreateLayerRequest,
-        ))
-        .expect("create layer")
-        .response
-        .payload
-    {
-        ResponsePayload::LayerCreatedResponse(response) => response.layer_id,
-        other => panic!("unexpected create layer response: {other:?}"),
-    };
-    let sealed_layer_id = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            7,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::SealLayerRequest(SealLayerRequest {
-                layer_id: writable_layer_id,
-            }),
-        ))
-        .expect("seal layer")
-        .response
-        .payload
-    {
-        ResponsePayload::LayerSealedResponse(response) => response.layer_id,
-        other => panic!("unexpected seal layer response: {other:?}"),
-    };
-    let sealed_entries = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            8,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ExportSnapshotRequest(ExportSnapshotRequest {
-                layer_id: sealed_layer_id,
-            }),
-        ))
-        .expect("export sealed layer")
-        .response
-        .payload
-    {
-        ResponsePayload::SnapshotExportedResponse(response) => response.entries,
-        other => panic!("unexpected export snapshot response: {other:?}"),
-    };
-    assert!(sealed_entries.iter().any(|entry| entry.path == "/"));
-
-    let lower_layer_id = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            9,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ImportSnapshotRequest(ImportSnapshotRequest {
-                entries: vec![
-                    root_dir("/workspace"),
-                    root_file("/workspace/lower.txt", "lower"),
-                    root_file("/workspace/shared.txt", "lower"),
-                ],
-            }),
-        ))
-        .expect("import lower snapshot")
-        .response
-        .payload
-    {
-        ResponsePayload::SnapshotImportedResponse(response) => response.layer_id,
-        other => panic!("unexpected import snapshot response: {other:?}"),
-    };
-    let upper_layer_id = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            10,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ImportSnapshotRequest(ImportSnapshotRequest {
-                entries: vec![
-                    root_dir("/workspace"),
-                    root_file("/workspace/upper.txt", "upper"),
-                    root_file("/workspace/shared.txt", "upper"),
-                ],
-            }),
-        ))
-        .expect("import upper snapshot")
-        .response
-        .payload
-    {
-        ResponsePayload::SnapshotImportedResponse(response) => response.layer_id,
-        other => panic!("unexpected import snapshot response: {other:?}"),
-    };
-    let overlay_layer_id = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            11,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::CreateOverlayRequest(CreateOverlayRequest {
-                mode: RootFilesystemMode::Ephemeral,
-                upper_layer_id: Some(upper_layer_id),
-                lower_layer_ids: vec![lower_layer_id],
-            }),
-        ))
-        .expect("create overlay")
-        .response
-        .payload
-    {
-        ResponsePayload::OverlayCreatedResponse(response) => response.layer_id,
-        other => panic!("unexpected create overlay response: {other:?}"),
-    };
-    let overlay_entries = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            12,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ExportSnapshotRequest(ExportSnapshotRequest {
-                layer_id: overlay_layer_id.clone(),
-            }),
-        ))
-        .expect("export overlay snapshot")
-        .response
-        .payload
-    {
-        ResponsePayload::SnapshotExportedResponse(response) => response.entries,
-        other => panic!("unexpected overlay export response: {other:?}"),
-    };
-    assert!(overlay_entries
-        .iter()
-        .any(|entry| entry.path == "/workspace/lower.txt"));
-    assert!(overlay_entries
-        .iter()
-        .any(|entry| entry.path == "/workspace/upper.txt"));
-    assert!(overlay_entries
-        .iter()
-        .any(|entry| entry.path == "/workspace/shared.txt"
-            && entry.content.as_deref() == Some("upper")));
-
-    let (other_vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        13,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-    let rejected = sidecar
-        .dispatch_wire_blocking(wire_request(
-            14,
-            wire_vm(&connection_id, &session_id, &other_vm_id),
-            RequestPayload::ExportSnapshotRequest(ExportSnapshotRequest {
-                layer_id: overlay_layer_id,
-            }),
-        ))
-        .expect("export unknown layer should reject");
-    match rejected.response.payload {
-        ResponsePayload::RejectedResponse(response) => {
-            assert_eq!(response.code, "invalid_state");
-            assert!(response.message.contains("unknown layer"));
-        }
-        other => panic!("unexpected rejection response: {other:?}"),
-    }
-}
diff --git a/crates/sidecar/tests/limits.rs b/crates/sidecar/tests/limits.rs
deleted file mode 100644
index 1fe9b6eb4..000000000
--- a/crates/sidecar/tests/limits.rs
+++ /dev/null
@@ -1,138 +0,0 @@
-//! Tests for typed create-VM limits config defaults, overrides, and validation.
-
-use secure_exec_sidecar::limits::{vm_limits_from_config, VmLimits};
-use secure_exec_vm_config::{
-    HttpLimitsConfig, JsRuntimeLimitsConfig, PythonLimitsConfig, ResourceLimitsConfig,
-    ToolLimitsConfig, VmLimitsConfig, WasmLimitsConfig,
-};
-use serde_json::json;
-
-// Must match the production sidecar wire frame cap (wire::DEFAULT_MAX_FRAME_BYTES),
-// which is what vm_limits_from_config is called with at runtime (lib.rs/state.rs).
-const SIDECAR_FRAME_CAP: usize = 16 * 1024 * 1024;
-
-#[test]
-fn defaults_match_struct_default() {
-    let parsed =
-        vm_limits_from_config(None, SIDECAR_FRAME_CAP).expect("empty config parses to defaults");
-    assert_eq!(parsed, VmLimits::default());
-    assert_eq!(
-        parsed.js_runtime.v8_heap_limit_mb,
-        Some(128),
-        "JavaScript heap must be bounded by default"
-    );
-    assert_eq!(
-        parsed.resources.max_wasm_memory_bytes,
-        Some(128 * 1024 * 1024),
-        "WASM memory must be bounded by default"
-    );
-}
-
-#[test]
-fn overrides_only_present_keys() {
-    let config = VmLimitsConfig {
-        tools: Some(ToolLimitsConfig {
-            max_tool_schema_bytes: Some(4096),
-            ..Default::default()
-        }),
-        wasm: Some(WasmLimitsConfig {
-            max_module_file_bytes: Some(1_048_576),
-            ..Default::default()
-        }),
-        js_runtime: Some(JsRuntimeLimitsConfig {
-            v8_heap_limit_mb: Some(256),
-            ..Default::default()
-        }),
-        python: Some(PythonLimitsConfig {
-            execution_timeout_ms: Some(1000),
-            ..Default::default()
-        }),
-        http: Some(HttpLimitsConfig {
-            max_fetch_response_bytes: Some(65_536),
-        }),
-        ..Default::default()
-    };
-    let parsed = vm_limits_from_config(Some(&config), SIDECAR_FRAME_CAP).expect("valid overrides");
-
-    assert_eq!(parsed.tools.max_tool_schema_bytes, 4096);
-    assert_eq!(parsed.wasm.max_module_file_bytes, 1_048_576);
-    assert_eq!(parsed.js_runtime.v8_heap_limit_mb, Some(256));
-    assert_eq!(parsed.python.execution_timeout_ms, 1000);
-    assert_eq!(parsed.http.max_fetch_response_bytes, 65536);
-
-    // Unspecified fields keep defaults.
-    let defaults = VmLimits::default();
-    assert_eq!(
-        parsed.tools.max_registered_toolkits,
-        defaults.tools.max_registered_toolkits
-    );
-    assert_eq!(
-        parsed.wasm.sync_read_limit_bytes,
-        defaults.wasm.sync_read_limit_bytes
-    );
-}
-
-#[test]
-fn resources_subset_threads_through() {
-    let config = VmLimitsConfig {
-        resources: Some(ResourceLimitsConfig {
-            max_processes: Some(8),
-            ..Default::default()
-        }),
-        ..Default::default()
-    };
-    let parsed =
-        vm_limits_from_config(Some(&config), SIDECAR_FRAME_CAP).expect("resources thread through");
-    assert_eq!(parsed.resources.max_processes, Some(8));
-}
-
-#[test]
-fn rejects_unparseable_value() {
-    let error = serde_json::from_value::<VmLimitsConfig>(json!({
-        "tools": { "maxToolSchemaBytes": "not-a-number" }
-    }))
-    .expect_err("unparseable value rejected");
-    assert!(error.to_string().contains("invalid type"));
-}
-
-#[test]
-fn rejects_fetch_body_exceeding_frame_cap() {
-    let config = VmLimitsConfig {
-        http: Some(HttpLimitsConfig {
-            max_fetch_response_bytes: Some((SIDECAR_FRAME_CAP + 1) as u64),
-        }),
-        ..Default::default()
-    };
-    let error = vm_limits_from_config(Some(&config), SIDECAR_FRAME_CAP)
-        .expect_err("oversized fetch body rejected");
-    assert!(error.to_string().contains("wire frame cap"));
-}
-
-#[test]
-fn rejects_default_timeout_above_max() {
-    let config = VmLimitsConfig {
-        tools: Some(ToolLimitsConfig {
-            default_tool_timeout_ms: Some(60_000),
-            max_tool_timeout_ms: Some(30_000),
-            ..Default::default()
-        }),
-        ..Default::default()
-    };
-    let error =
-        vm_limits_from_config(Some(&config), SIDECAR_FRAME_CAP).expect_err("default above max");
-    assert!(error.to_string().contains("max_tool_timeout_ms"));
-}
-
-#[test]
-fn rejects_zero_buffer_cap() {
-    let config = VmLimitsConfig {
-        js_runtime: Some(JsRuntimeLimitsConfig {
-            captured_output_limit_bytes: Some(0),
-            ..Default::default()
-        }),
-        ..Default::default()
-    };
-    let error =
-        vm_limits_from_config(Some(&config), SIDECAR_FRAME_CAP).expect_err("zero buffer cap");
-    assert!(error.to_string().contains("captured_output_limit_bytes"));
-}
diff --git a/crates/sidecar/tests/limits_audit.rs b/crates/sidecar/tests/limits_audit.rs
deleted file mode 100644
index 1765cb2e9..000000000
--- a/crates/sidecar/tests/limits_audit.rs
+++ /dev/null
@@ -1,380 +0,0 @@
-//! Audit test: every limit-shaped constant in the scanned source roots must be classified in
-//! `fixtures/limits-inventory.json` as `policy`, `policy-deferred`, or `invariant`. A new
-//! `MAX_*` / `*_LIMIT` / capacity / retention constant that is not classified fails this test
-//! with instructions, so operator-tunable bounds cannot silently accumulate as hardcoded values.
-//!
-//! This is a pure filesystem test: no VM, no V8, no new dependencies (`serde_json` is already a
-//! sidecar dependency). The match rule is hand-rolled string checks, asserted by its own unit
-//! cases below.
-
-use std::collections::BTreeSet;
-use std::fs;
-use std::path::{Path, PathBuf};
-
-use serde_json::Value;
-
-#[derive(Debug, Clone, PartialEq, Eq, PartialOrd, Ord)]
-struct ScannedConst {
-    name: String,
-    path: String,
-}
-
-/// Resolve the workspace root from `CARGO_MANIFEST_DIR` (which points at `crates/sidecar`).
-fn workspace_root() -> PathBuf {
-    let manifest = PathBuf::from(env!("CARGO_MANIFEST_DIR"));
-    manifest
-        .parent()
-        .and_then(Path::parent)
-        .expect("crates/sidecar has a workspace root two levels up")
-        .to_path_buf()
-}
-
-const SKIP_DIRS: &[&str] = &["target", "node_modules", "dist", "tests", "fixtures"];
-
-/// Decide whether a constant name is a limit-shaped bound that must be classified. Mirrors the
-/// rule documented in `limits-config.md`. Env-var-name constants (`*_ENV`) and error-code string
-/// constants (`*_ERROR_CODE`) are excluded because they name a knob or code, not a bound.
-fn name_qualifies(name: &str) -> bool {
-    if name.ends_with("_ENV") || name.ends_with("_ERROR_CODE") {
-        return false;
-    }
-    if name.contains("MAX_")
-        || name.contains("_MAX")
-        || name.contains("_LIMIT")
-        || name.contains("LIMIT_")
-        || name.contains("_CAPACITY")
-        || name.contains("RETENTION")
-    {
-        return true;
-    }
-    if name.ends_with("_CAP") || name.contains("_CAP_") {
-        return true;
-    }
-    if let Some(rest) = name.strip_prefix("DEFAULT_") {
-        if rest.contains("BYTES") || rest.contains("TIMEOUT") || rest.contains("ENTRIES") {
-            return true;
-        }
-    }
-    false
-}
-
-/// Extract a constant name from a Rust `const` declaration line, if present.
-/// Matches `^\s*(pub(\(crate\))?\s+)?const\s+([A-Z][A-Z0-9_]*)\s*:`.
-fn rust_const_name(line: &str) -> Option<&str> {
-    let trimmed = line.trim_start();
-    let after_vis = trimmed
-        .strip_prefix("pub(crate) ")
-        .or_else(|| trimmed.strip_prefix("pub "))
-        .unwrap_or(trimmed);
-    let after_const = after_vis.strip_prefix("const ")?;
-    let name = identifier_prefix(after_const);
-    if name.is_empty() {
-        return None;
-    }
-    let rest = after_const[name.len()..].trim_start();
-    if !rest.starts_with(':') {
-        return None;
-    }
-    if is_screaming_snake(name) {
-        Some(name)
-    } else {
-        None
-    }
-}
-
-/// Extract a constant name from a TS/JS `const` declaration line, if present.
-/// Matches `^\s*(export\s+)?const\s+([A-Z][A-Z0-9_]*)\s*=`.
-fn ts_const_name(line: &str) -> Option<&str> {
-    let trimmed = line.trim_start();
-    let after_export = trimmed.strip_prefix("export ").unwrap_or(trimmed);
-    let after_const = after_export.strip_prefix("const ")?;
-    let name = identifier_prefix(after_const);
-    if name.is_empty() {
-        return None;
-    }
-    let rest = after_const[name.len()..].trim_start();
-    if !rest.starts_with('=') {
-        return None;
-    }
-    if is_screaming_snake(name) {
-        Some(name)
-    } else {
-        None
-    }
-}
-
-fn identifier_prefix(input: &str) -> &str {
-    let end = input
-        .char_indices()
-        .find(|(_, c)| !(c.is_ascii_alphanumeric() || *c == '_'))
-        .map(|(idx, _)| idx)
-        .unwrap_or(input.len());
-    &input[..end]
-}
-
-/// SCREAMING_SNAKE_CASE: starts with an uppercase ASCII letter, contains only uppercase letters,
-/// digits, and underscores.
-fn is_screaming_snake(name: &str) -> bool {
-    let mut chars = name.chars();
-    match chars.next() {
-        Some(c) if c.is_ascii_uppercase() => {}
-        _ => return false,
-    }
-    name.chars()
-        .all(|c| c.is_ascii_uppercase() || c.is_ascii_digit() || c == '_')
-}
-
-fn scan_file(full: &Path, rel: &str, is_ts: bool, found: &mut Vec<ScannedConst>) {
-    let contents = fs::read_to_string(full)
-        .unwrap_or_else(|error| panic!("failed to read scanned file {rel}: {error}"));
-    for line in contents.lines() {
-        let name = if is_ts {
-            ts_const_name(line)
-        } else {
-            rust_const_name(line)
-        };
-        if let Some(name) = name {
-            if name_qualifies(name) {
-                found.push(ScannedConst {
-                    name: name.to_string(),
-                    path: rel.to_string(),
-                });
-            }
-        }
-    }
-}
-
-fn scan_dir(root: &Path, dir: &Path, extension: &str, is_ts: bool, found: &mut Vec<ScannedConst>) {
-    let entries = match fs::read_dir(dir) {
-        Ok(entries) => entries,
-        Err(_) => return,
-    };
-    for entry in entries {
-        let entry = entry.expect("readable directory entry");
-        let path = entry.path();
-        let file_type = entry.file_type().expect("readable file type");
-        if file_type.is_dir() {
-            let name = entry.file_name();
-            let name = name.to_string_lossy();
-            if SKIP_DIRS.contains(&name.as_ref()) {
-                continue;
-            }
-            scan_dir(root, &path, extension, is_ts, found);
-        } else if file_type.is_file()
-            && path
-                .extension()
-                .map(|ext| ext == extension)
-                .unwrap_or(false)
-        {
-            let rel = path
-                .strip_prefix(root)
-                .expect("scanned path under workspace root")
-                .to_string_lossy()
-                .replace('\\', "/");
-            scan_file(&path, &rel, is_ts, found);
-        }
-    }
-}
-
-fn scan_workspace() -> Vec<ScannedConst> {
-    let root = workspace_root();
-    let mut found = Vec::new();
-
-    // crates/*/src/**/*.rs
-    let crates_dir = root.join("crates");
-    let mut crate_names: Vec<_> = fs::read_dir(&crates_dir)
-        .expect("crates directory exists")
-        .map(|entry| entry.expect("readable crate entry").path())
-        .collect();
-    crate_names.sort();
-    for crate_path in crate_names {
-        let src = crate_path.join("src");
-        if src.is_dir() {
-            scan_dir(&root, &src, "rs", false, &mut found);
-        }
-    }
-
-    // packages/core/src/**/*.ts
-    let core_src = root.join("packages/core/src");
-    if core_src.is_dir() {
-        scan_dir(&root, &core_src, "ts", true, &mut found);
-    }
-
-    // packages/build-tools/bridge-src/**/*.ts
-    let bridge_src = root.join("packages/build-tools/bridge-src");
-    if bridge_src.is_dir() {
-        scan_dir(&root, &bridge_src, "ts", true, &mut found);
-    }
-
-    found.sort();
-    found.dedup();
-    found
-}
-
-#[derive(Debug, Clone)]
-struct InventoryEntry {
-    name: String,
-    path: String,
-    class: String,
-    wired: Option<String>,
-}
-
-fn load_inventory() -> Vec<InventoryEntry> {
-    let path =
-        PathBuf::from(env!("CARGO_MANIFEST_DIR")).join("tests/fixtures/limits-inventory.json");
-    let raw = fs::read_to_string(&path)
-        .unwrap_or_else(|error| panic!("failed to read limits inventory {path:?}: {error}"));
-    let value: Value = serde_json::from_str(&raw).expect("inventory is valid JSON");
-    let array = value.as_array().expect("inventory is a JSON array");
-    array
-        .iter()
-        .map(|entry| {
-            let name = entry["name"].as_str().expect("entry has name").to_string();
-            let path = entry["path"].as_str().expect("entry has path").to_string();
-            let class = entry["class"]
-                .as_str()
-                .expect("entry has class")
-                .to_string();
-            assert!(
-                matches!(class.as_str(), "policy" | "policy-deferred" | "invariant"),
-                "inventory entry {name} ({path}) has invalid class {class}"
-            );
-            let wired = entry
-                .get("wired")
-                .and_then(|v| v.as_str())
-                .map(str::to_string);
-            InventoryEntry {
-                name,
-                path,
-                class,
-                wired,
-            }
-        })
-        .collect()
-}
-
-#[test]
-fn limit_constants_are_classified() {
-    let scanned = scan_workspace();
-    let inventory = load_inventory();
-
-    let mut failures: Vec<String> = Vec::new();
-
-    // Duplicate (name, path) inventory entries are rejected.
-    let mut inventory_keys: BTreeSet<(String, String)> = BTreeSet::new();
-    for entry in &inventory {
-        let key = (entry.name.clone(), entry.path.clone());
-        if !inventory_keys.insert(key.clone()) {
-            failures.push(format!(
-                "duplicate inventory entry for {} in {}",
-                entry.name, entry.path
-            ));
-        }
-    }
-
-    let scanned_keys: BTreeSet<(String, String)> = scanned
-        .iter()
-        .map(|c| (c.name.clone(), c.path.clone()))
-        .collect();
-
-    // Every scanned constant must have an inventory entry.
-    for c in &scanned {
-        let key = (c.name.clone(), c.path.clone());
-        if !inventory_keys.contains(&key) {
-            failures.push(format!(
-                "unclassified limit constant {} in {}: wire it through VmLimits and mark it \
-                 \"policy\", or add an \"invariant\"/\"policy-deferred\" entry to \
-                 crates/sidecar/tests/fixtures/limits-inventory.json with a one-line rationale",
-                c.name, c.path
-            ));
-        }
-    }
-
-    // Every inventory entry must still exist in the scanned source (no stale entries).
-    for entry in &inventory {
-        let key = (entry.name.clone(), entry.path.clone());
-        if !scanned_keys.contains(&key) {
-            failures.push(format!(
-                "stale inventory entry {} in {}: the constant no longer exists in source; \
-                 remove or update the entry in limits-inventory.json (renames must update both)",
-                entry.name, entry.path
-            ));
-        }
-    }
-
-    // Every policy entry names the VmLimits field it is wired through.
-    for entry in &inventory {
-        if entry.class == "policy" {
-            let wired_ok = entry
-                .wired
-                .as_deref()
-                .map(|w| !w.is_empty())
-                .unwrap_or(false);
-            if !wired_ok {
-                failures.push(format!(
-                    "policy inventory entry {} in {} must set a non-empty \"wired\" field naming \
-                     the config field it flows from",
-                    entry.name, entry.path
-                ));
-            }
-        }
-    }
-
-    if !failures.is_empty() {
-        panic!(
-            "limits inventory audit failed with {} issue(s):\n{}",
-            failures.len(),
-            failures.join("\n")
-        );
-    }
-}
-
-#[test]
-fn match_rule_unit_assertions() {
-    // Qualifying names.
-    assert!(name_qualifies("MAX_TOOL_SCHEMA_BYTES"));
-    assert!(name_qualifies("VM_FETCH_BUFFER_LIMIT_BYTES"));
-    assert!(name_qualifies("SESSION_OUTPUT_CHANNEL_CAPACITY"));
-    assert!(name_qualifies("ACP_SESSION_EVENT_RETENTION_LIMIT"));
-    assert!(name_qualifies("DEFAULT_COMPLETED_RESPONSE_CAP"));
-    assert!(name_qualifies("DEFAULT_TIMEOUT_MS"));
-    assert!(name_qualifies("DEFAULT_MAX_PREAD_BYTES"));
-    assert!(name_qualifies("MAX_MODULE_RESOLVE_CACHE_ENTRIES"));
-
-    // Non-qualifying names.
-    assert!(!name_qualifies("PROTOCOL_VERSION"));
-    assert!(!name_qualifies("EXECUTION_DRIVER_NAME"));
-    assert!(!name_qualifies("DEFAULT_VIRTUAL_CPU_COUNT"));
-    // Exclusions.
-    assert!(!name_qualifies("AGENTOS_WASM_MAX_FUEL_ENV"));
-    assert!(!name_qualifies("ERR_SESSION_DEFERRED_COMMAND_ERROR_CODE"));
-
-    // Declaration extraction.
-    assert_eq!(
-        rust_const_name("pub(crate) const MAX_TOOL_TIMEOUT_MS: u64 = 300_000;"),
-        Some("MAX_TOOL_TIMEOUT_MS")
-    );
-    assert_eq!(
-        rust_const_name("    const MAX_FRAME_SIZE: usize = 64 * 1024 * 1024;"),
-        Some("MAX_FRAME_SIZE")
-    );
-    assert_eq!(
-        rust_const_name("pub const DEFAULT_MAX_PROCESSES: usize = 256;"),
-        Some("DEFAULT_MAX_PROCESSES")
-    );
-    // Lowercase const is not a screaming-snake limit constant.
-    assert_eq!(rust_const_name("const max_value: usize = 1;"), None);
-    // A function, not a const.
-    assert_eq!(rust_const_name("fn parse_resource_limits() {}"), None);
-
-    assert_eq!(
-        ts_const_name("export const ACP_SESSION_EVENT_RETENTION_LIMIT = 1024;"),
-        Some("ACP_SESSION_EVENT_RETENTION_LIMIT")
-    );
-    assert_eq!(
-        ts_const_name("const MAX_SYMLINK_DEPTH = 40;"),
-        Some("MAX_SYMLINK_DEPTH")
-    );
-    // camelCase identifiers are not constants for this rule.
-    assert_eq!(ts_const_name("const maxRetries = 3;"), None);
-}
diff --git a/crates/sidecar/tests/node_modules_host_mount_resolution.rs b/crates/sidecar/tests/node_modules_host_mount_resolution.rs
deleted file mode 100644
index e196f33a0..000000000
--- a/crates/sidecar/tests/node_modules_host_mount_resolution.rs
+++ /dev/null
@@ -1,190 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{
-    BootstrapRootFilesystemRequest, ConfigureVmRequest, DisposeReason, DisposeVmRequest,
-    GuestFilesystemCallRequest, GuestFilesystemOperation, GuestRuntimeKind, MountDescriptor,
-    MountPluginDescriptor, RequestPayload, ResponsePayload, RootFilesystemEntry,
-    RootFilesystemEntryEncoding, RootFilesystemEntryKind,
-};
-use std::collections::HashMap;
-use std::fs;
-use std::time::Duration;
-use support::{
-    assert_node_available, authenticate_wire, collect_process_output_wire_with_timeout,
-    create_vm_wire, execute_wire, new_sidecar, open_session_wire, temp_dir, wire_request, wire_vm,
-};
-
-/// Regression test for GitHub issue #109: an external package living in a host
-/// `node_modules` projected into the VM via the `host_dir` mount plugin must
-/// resolve from guest `import`. This mirrors `NodeRuntime.create({ nodeModules })`,
-/// which mounts the host `node_modules` at guest `/tmp/node_modules` and runs
-/// programs under `/tmp`, so the ancestor-`node_modules` resolution walk from
-/// `/tmp` reaches the mount. When this regressed, the guest reported
-/// `_resolveModule returned non-string for '<pkg>'`.
-///
-/// This test runs a guest V8 isolate, so it lives in its own integration-test
-/// binary (one isolate per process) to avoid the multi-isolate process-teardown
-/// segfault that surfaces when several guest-executing tests share a binary.
-#[test]
-fn host_mounted_node_modules_package_resolves_from_guest_import() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("node-modules-host-mount");
-
-    // Seed a host `node_modules` tree with a single package, exactly as a caller
-    // would prepare libraries before execution.
-    let host_root = temp_dir("node-modules-host-mount-host");
-    let host_node_modules = host_root.join("node_modules");
-    let pkg_dir = host_node_modules.join("mypkg");
-    fs::create_dir_all(&pkg_dir).expect("create host package dir");
-    fs::write(
-        pkg_dir.join("package.json"),
-        r#"{"name":"mypkg","version":"1.0.0","type":"module","main":"index.js"}"#,
-    )
-    .expect("write host package.json");
-    fs::write(
-        pkg_dir.join("index.js"),
-        "export default () => \"resolved-from-host-mount\";\n",
-    )
-    .expect("write host package entry");
-
-    let cwd = temp_dir("node-modules-host-mount-cwd");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    // Provide the mountpoint, then project the host `node_modules` at guest
-    // `/tmp/node_modules` (read-only), the default `nodeModules` projection.
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::BootstrapRootFilesystemRequest(BootstrapRootFilesystemRequest {
-                entries: vec![RootFilesystemEntry {
-                    path: String::from("/tmp/node_modules"),
-                    kind: RootFilesystemEntryKind::Directory,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    content: None,
-                    encoding: None,
-                    target: None,
-                    executable: false,
-                }],
-            }),
-        ))
-        .expect("bootstrap mountpoint");
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: vec![MountDescriptor {
-                    guest_path: String::from("/tmp/node_modules"),
-                    read_only: true,
-                    plugin: MountPluginDescriptor {
-                        id: String::from("host_dir"),
-                        config: serde_json::to_string(&serde_json::json!({
-                            "hostPath": host_node_modules.to_string_lossy(),
-                            "readOnly": true,
-                        }))
-                        .expect("serialize host_dir mount config"),
-                    },
-                }],
-                software: Vec::new(),
-                permissions: None,
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: HashMap::new(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ))
-        .expect("mount host node_modules");
-
-    // Write the guest program under `/tmp` (like `NodeRuntime.exec`), so its
-    // module-resolution context is `/tmp` and the bare specifier `mypkg`
-    // resolves through `/tmp/node_modules`.
-    let entry_source = r#"
-import greet from "mypkg";
-console.log(greet());
-"#;
-    let write = sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::WriteFile,
-                path: String::from("/tmp/entry.mjs"),
-                destination_path: None,
-                target: None,
-                content: Some(String::from(entry_source)),
-                encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ))
-        .expect("write guest entry");
-    match write.response.payload {
-        ResponsePayload::GuestFilesystemResultResponse(_) => {}
-        other => panic!("unexpected guest write response: {other:?}"),
-    }
-
-    execute_wire(
-        &mut sidecar,
-        7,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-resolve",
-        GuestRuntimeKind::JavaScript,
-        std::path::Path::new("/tmp/entry.mjs"),
-        Vec::new(),
-    );
-    let (stdout, stderr, exit) = collect_process_output_wire_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-resolve",
-        Duration::from_secs(10),
-    );
-
-    assert_eq!(
-        stdout.trim(),
-        "resolved-from-host-mount",
-        "guest import of a host-mounted package should resolve; stderr: {stderr}"
-    );
-    assert_eq!(exit, 0, "stderr: {stderr}");
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            8,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::DisposeVmRequest(DisposeVmRequest {
-                reason: DisposeReason::Requested,
-            }),
-        ))
-        .expect("dispose vm");
-}
diff --git a/crates/sidecar/tests/node_modules_symlink_resolution.rs b/crates/sidecar/tests/node_modules_symlink_resolution.rs
deleted file mode 100644
index 3277c9bb9..000000000
--- a/crates/sidecar/tests/node_modules_symlink_resolution.rs
+++ /dev/null
@@ -1,229 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{
-    BootstrapRootFilesystemRequest, ConfigureVmRequest, DisposeReason, DisposeVmRequest,
-    GuestFilesystemCallRequest, GuestFilesystemOperation, GuestRuntimeKind, MountDescriptor,
-    MountPluginDescriptor, RequestPayload, ResponsePayload, RootFilesystemEntry,
-    RootFilesystemEntryEncoding, RootFilesystemEntryKind,
-};
-use std::collections::HashMap;
-use std::fs;
-use std::os::unix::fs::symlink;
-use std::time::Duration;
-use support::{
-    authenticate_wire, collect_process_output_wire_with_timeout, create_vm_wire, execute_wire,
-    new_sidecar, open_session_wire, temp_dir, wire_request, wire_vm,
-};
-
-/// Companion to `node_modules_host_mount_resolution.rs` (issue #109): that test
-/// projects a *plain* host `node_modules` (real package directories). Real
-/// installs are rarely plain — pnpm (and yarn's node-linker) lay out
-/// `node_modules` as symlinks into a virtual `.pnpm` store, with scoped
-/// packages nested under an `@scope/` directory. This locks in that the
-/// `host_dir` mount `NodeRuntime.create({ nodeModules })` projects follows those
-/// in-tree relative symlinks, so a pnpm-installed package resolves from guest
-/// `import` exactly like the plain layout does.
-///
-/// Note the boundary this does *not* relax: the mount confines reads to its
-/// root (anchored `openat2(RESOLVE_BENEATH)`), so a symlink that escapes the
-/// mounted tree (a workspace/`file:` dep linked to the workspace root or an
-/// external store) is deliberately not followed. The fix for that case is to
-/// mount a directory that contains the symlink targets, not to widen the mount.
-///
-/// One guest V8 isolate per process, so this lives in its own integration-test
-/// binary (see the sibling test for the multi-isolate teardown rationale).
-#[test]
-fn pnpm_symlinked_packages_resolve_from_guest_import() {
-    support::assert_node_available();
-
-    let mut sidecar = new_sidecar("node-modules-symlink");
-
-    // Seed a host `node_modules` shaped like a pnpm install: real package
-    // directories live in the `.pnpm` virtual store, and the top-level entries
-    // are relative symlinks pointing into it. Both a plain and a scoped package
-    // are covered, since scoped packages take a separate `@scope/` resolution
-    // path.
-    let host_root = temp_dir("node-modules-symlink-host");
-    let node_modules = host_root.join("node_modules");
-    let store = node_modules.join(".pnpm");
-
-    let plain_real = store.join("is-number@7.0.0/node_modules/is-number");
-    fs::create_dir_all(&plain_real).expect("create plain store dir");
-    fs::write(
-        plain_real.join("package.json"),
-        r#"{"name":"is-number","version":"7.0.0","type":"module","main":"index.js"}"#,
-    )
-    .expect("write plain package.json");
-    fs::write(
-        plain_real.join("index.js"),
-        "export default () => \"plain-symlink-resolved\";\n",
-    )
-    .expect("write plain entry");
-
-    let scoped_real = store.join("@scope+pkg@1.0.0/node_modules/@scope/pkg");
-    fs::create_dir_all(&scoped_real).expect("create scoped store dir");
-    fs::write(
-        scoped_real.join("package.json"),
-        r#"{"name":"@scope/pkg","version":"1.0.0","type":"module","main":"index.js"}"#,
-    )
-    .expect("write scoped package.json");
-    fs::write(
-        scoped_real.join("index.js"),
-        "export default () => \"scoped-symlink-resolved\";\n",
-    )
-    .expect("write scoped entry");
-
-    // Top-level symlinks, relative and contained within `node_modules` exactly
-    // as pnpm writes them.
-    symlink(
-        "./.pnpm/is-number@7.0.0/node_modules/is-number",
-        node_modules.join("is-number"),
-    )
-    .expect("link plain package");
-    fs::create_dir_all(node_modules.join("@scope")).expect("create @scope dir");
-    symlink(
-        "../.pnpm/@scope+pkg@1.0.0/node_modules/@scope/pkg",
-        node_modules.join("@scope/pkg"),
-    )
-    .expect("link scoped package");
-
-    let cwd = temp_dir("node-modules-symlink-cwd");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    // Provide the mountpoint, then project the host `node_modules` at guest
-    // `/tmp/node_modules` (read-only) — the default `nodeModules` projection.
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::BootstrapRootFilesystemRequest(BootstrapRootFilesystemRequest {
-                entries: vec![RootFilesystemEntry {
-                    path: String::from("/tmp/node_modules"),
-                    kind: RootFilesystemEntryKind::Directory,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    content: None,
-                    encoding: None,
-                    target: None,
-                    executable: false,
-                }],
-            }),
-        ))
-        .expect("bootstrap mountpoint");
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: vec![MountDescriptor {
-                    guest_path: String::from("/tmp/node_modules"),
-                    read_only: true,
-                    plugin: MountPluginDescriptor {
-                        id: String::from("host_dir"),
-                        config: serde_json::to_string(&serde_json::json!({
-                            "hostPath": node_modules.to_string_lossy(),
-                            "readOnly": true,
-                        }))
-                        .expect("serialize host_dir mount config"),
-                    },
-                }],
-                software: Vec::new(),
-                permissions: None,
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: HashMap::new(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ))
-        .expect("mount host node_modules");
-
-    // Program under `/tmp` so the resolution walk reaches `/tmp/node_modules`,
-    // importing both the plain and the scoped symlinked package.
-    let entry_source = r#"
-import plain from "is-number";
-import scoped from "@scope/pkg";
-console.log(plain());
-console.log(scoped());
-"#;
-    let write = sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::WriteFile,
-                path: String::from("/tmp/entry.mjs"),
-                destination_path: None,
-                target: None,
-                content: Some(String::from(entry_source)),
-                encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ))
-        .expect("write guest entry");
-    match write.response.payload {
-        ResponsePayload::GuestFilesystemResultResponse(_) => {}
-        other => panic!("unexpected guest write response: {other:?}"),
-    }
-
-    execute_wire(
-        &mut sidecar,
-        7,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-resolve",
-        GuestRuntimeKind::JavaScript,
-        std::path::Path::new("/tmp/entry.mjs"),
-        Vec::new(),
-    );
-    let (stdout, stderr, exit) = collect_process_output_wire_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-resolve",
-        Duration::from_secs(10),
-    );
-
-    assert_eq!(
-        stdout.trim(),
-        "plain-symlink-resolved\nscoped-symlink-resolved",
-        "guest import of pnpm-symlinked packages should resolve; stderr: {stderr}"
-    );
-    assert_eq!(exit, 0, "stderr: {stderr}");
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            8,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::DisposeVmRequest(DisposeVmRequest {
-                reason: DisposeReason::Requested,
-            }),
-        ))
-        .expect("dispose vm");
-}
diff --git a/crates/sidecar/tests/package_projection.rs b/crates/sidecar/tests/package_projection.rs
deleted file mode 100644
index 0bb82d557..000000000
--- a/crates/sidecar/tests/package_projection.rs
+++ /dev/null
@@ -1,242 +0,0 @@
-use std::fs;
-use std::io::Write;
-use std::path::{Path, PathBuf};
-
-use secure_exec_sidecar::package_projection::{
-    build_package_leaf_mounts, derive_commands, package_provides_file_mount, read_package_manifest,
-    read_package_manifest_from_ref, read_package_version, PackageLeafMount,
-    DEFAULT_PACKAGE_TAR_NAME,
-};
-use tar::Builder;
-
-fn unique_dir(tag: &str) -> PathBuf {
-    let nonce = std::time::SystemTime::now()
-        .duration_since(std::time::UNIX_EPOCH)
-        .unwrap()
-        .as_nanos();
-    let dir = std::env::temp_dir().join(format!("agentos-projtest-{tag}-{nonce}"));
-    fs::create_dir_all(&dir).unwrap();
-    dir
-}
-
-fn write_package(root: &Path, name: &str, version: &str, commands: &[&str]) {
-    fs::create_dir_all(root.join("bin")).unwrap();
-    fs::write(
-        root.join("agentos-package.json"),
-        format!("{{\"name\":\"{name}\",\"version\":\"{version}\"}}"),
-    )
-    .unwrap();
-    for cmd in commands {
-        fs::write(
-            root.join("bin").join(cmd),
-            format!("#!/usr/bin/env node\n// {cmd}\n"),
-        )
-        .unwrap();
-    }
-}
-
-fn finalize_package_tar(root: &Path) {
-    let tar_path = root.join(DEFAULT_PACKAGE_TAR_NAME);
-    let _ = fs::remove_file(&tar_path);
-    let file = fs::File::create(&tar_path).unwrap();
-    let mut builder = Builder::new(file);
-    append_tree(&mut builder, root, root).unwrap();
-    builder.finish().unwrap();
-    builder.into_inner().unwrap().flush().unwrap();
-}
-
-fn append_tree(builder: &mut Builder<fs::File>, root: &Path, path: &Path) -> std::io::Result<()> {
-    for entry in fs::read_dir(path)? {
-        let entry = entry?;
-        let entry_path = entry.path();
-        if entry_path.file_name().and_then(|name| name.to_str()) == Some(DEFAULT_PACKAGE_TAR_NAME) {
-            continue;
-        }
-        let name = entry_path.strip_prefix(root).unwrap();
-        if entry_path.is_dir() {
-            builder.append_dir(name, &entry_path)?;
-            append_tree(builder, root, &entry_path)?;
-        } else {
-            builder.append_path_with_name(&entry_path, name)?;
-        }
-    }
-    Ok(())
-}
-
-#[test]
-fn reads_version_from_agentos_package_json_and_errors_when_missing() {
-    let pkg = unique_dir("ver");
-    write_package(&pkg, "vt", "3.1.4", &["vt"]);
-    assert_eq!(
-        read_package_version(pkg.to_str().unwrap()).unwrap(),
-        "3.1.4"
-    );
-
-    let empty = unique_dir("ver-missing");
-    assert!(read_package_version(empty.to_str().unwrap()).is_err());
-}
-
-#[test]
-fn reads_name_agent_and_provides_from_agentos_package_json() {
-    let pkg = unique_dir("manifest");
-    write_package(&pkg, "package-json-name", "1.0.0", &["agent-cmd"]);
-    fs::create_dir_all(pkg.join("share/config")).unwrap();
-    fs::write(
-        pkg.join("agentos-package.json"),
-        r#"{
-          "name": "manifest-name",
-          "version": "1.0.0",
-          "agent": { "acpEntrypoint": "agent-cmd" },
-          "provides": {
-            "env": { "FROM_MANIFEST": "yes" },
-            "files": [{ "source": "share/config", "target": "/etc/manifest" }]
-          }
-        }"#,
-    )
-    .unwrap();
-
-    let descriptor = read_package_manifest(pkg.to_str().unwrap()).unwrap();
-    assert_eq!(descriptor.name, "manifest-name");
-    assert_eq!(descriptor.version, "1.0.0");
-    assert_eq!(descriptor.acp_entrypoint.as_deref(), Some("agent-cmd"));
-    let provides = descriptor.provides.as_ref().expect("provides");
-    assert_eq!(
-        provides.env.get("FROM_MANIFEST").map(String::as_str),
-        Some("yes")
-    );
-    assert_eq!(provides.files[0].target, "/etc/manifest");
-}
-
-#[test]
-fn derives_commands_from_bin_dir() {
-    let pkg = unique_dir("cmds");
-    write_package(&pkg, "tool", "1.0.0", &["foo", "bar"]);
-    let mut commands = derive_commands(pkg.to_str().unwrap()).unwrap();
-    commands.sort();
-    assert_eq!(commands, vec!["bar".to_string(), "foo".to_string()]);
-}
-
-#[test]
-fn reads_manifest_and_commands_from_package_tar_without_extracting() {
-    let pkg = unique_dir("tar-src");
-    write_package(&pkg, "demo", "2.0.0", &["demo"]);
-    finalize_package_tar(&pkg);
-
-    let descriptor = read_package_manifest_from_ref(Some(pkg.to_str().unwrap()), None).unwrap();
-    assert_eq!(descriptor.name, "demo");
-    assert_eq!(descriptor.version, "2.0.0");
-    assert!(descriptor
-        .tar_path
-        .as_deref()
-        .unwrap()
-        .ends_with(DEFAULT_PACKAGE_TAR_NAME));
-    assert_eq!(descriptor.commands[0].command, "demo");
-}
-
-#[test]
-fn reads_symlink_commands_from_package_tar() {
-    let pkg = unique_dir("tar-symlink-cmd");
-    write_package(&pkg, "demo", "2.0.0", &[]);
-    fs::write(pkg.join("adapter.mjs"), "console.log('ok');").unwrap();
-    std::os::unix::fs::symlink("../adapter.mjs", pkg.join("bin/demo")).unwrap();
-    finalize_package_tar(&pkg);
-
-    let descriptor = read_package_manifest_from_ref(Some(pkg.to_str().unwrap()), None).unwrap();
-    assert_eq!(descriptor.commands[0].command, "demo");
-    assert_eq!(descriptor.commands[0].entry, "bin/demo");
-}
-
-#[test]
-fn builds_tar_current_bin_and_manpage_leaf_mounts() {
-    let pkg = unique_dir("mounts-src");
-    write_package(&pkg, "demo", "2.0.0", &["demo"]);
-    fs::create_dir_all(pkg.join("share/man/man1")).unwrap();
-    fs::write(pkg.join("share/man/man1/demo.1"), "manual").unwrap();
-    finalize_package_tar(&pkg);
-    let descriptor = read_package_manifest_from_ref(Some(pkg.to_str().unwrap()), None).unwrap();
-
-    let mounts = build_package_leaf_mounts(&[descriptor], "/opt/agentos").unwrap();
-    assert!(mounts.iter().any(|mount| matches!(
-        mount,
-        PackageLeafMount::Tar { guest_path, root, .. }
-            if guest_path == "/opt/agentos/pkgs/demo/2.0.0" && root == "/"
-    )));
-    assert!(mounts.iter().any(|mount| matches!(
-        mount,
-        PackageLeafMount::SingleSymlink { guest_path, target }
-            if guest_path == "/opt/agentos/pkgs/demo/current" && target == "2.0.0"
-    )));
-    assert!(mounts.iter().any(|mount| matches!(
-        mount,
-        PackageLeafMount::SingleSymlink { guest_path, target }
-            if guest_path == "/opt/agentos/bin/demo"
-                && target == "../pkgs/demo/current/bin/demo"
-    )));
-    assert!(mounts.iter().any(|mount| matches!(
-        mount,
-        PackageLeafMount::SingleSymlink { guest_path, target }
-            if guest_path == "/opt/agentos/share/man/man1/demo.1"
-                && target == "../../../pkgs/demo/current/share/man/man1/demo.1"
-    )));
-}
-
-#[test]
-fn duplicate_commands_are_rejected_before_mounting() {
-    let pkg_a = unique_dir("dup-a");
-    write_package(&pkg_a, "a", "1.0.0", &["tool"]);
-    finalize_package_tar(&pkg_a);
-    let pkg_b = unique_dir("dup-b");
-    write_package(&pkg_b, "b", "1.0.0", &["tool"]);
-    finalize_package_tar(&pkg_b);
-
-    let a = read_package_manifest_from_ref(Some(pkg_a.to_str().unwrap()), None).unwrap();
-    let b = read_package_manifest_from_ref(Some(pkg_b.to_str().unwrap()), None).unwrap();
-    let err = build_package_leaf_mounts(&[a, b], "/opt/agentos").unwrap_err();
-    assert!(err.to_string().contains("already provided"), "{err}");
-}
-
-#[test]
-fn invalid_agent_entrypoint_is_rejected() {
-    let pkg = unique_dir("bad-agent");
-    write_package(&pkg, "agent", "1.0.0", &["real"]);
-    fs::write(
-        pkg.join("agentos-package.json"),
-        r#"{"name":"agent","version":"1.0.0","agent":{"acpEntrypoint":"missing"}}"#,
-    )
-    .unwrap();
-    finalize_package_tar(&pkg);
-
-    let descriptor = read_package_manifest_from_ref(Some(pkg.to_str().unwrap()), None).unwrap();
-    let err = build_package_leaf_mounts(&[descriptor], "/opt/agentos").unwrap_err();
-    assert!(err.to_string().contains("acpEntrypoint"), "{err}");
-}
-
-#[test]
-fn provides_files_mounts_tar_subtree() {
-    let pkg = unique_dir("provides");
-    write_package(&pkg, "provider", "1.0.0", &["provider"]);
-    fs::create_dir_all(pkg.join("share/config")).unwrap();
-    fs::write(pkg.join("share/config/settings.json"), "{}").unwrap();
-    fs::write(
-        pkg.join("agentos-package.json"),
-        r#"{
-          "name": "provider",
-          "version": "1.0.0",
-          "provides": {
-            "files": [{ "source": "share/config", "target": "/etc/provider" }]
-          }
-        }"#,
-    )
-    .unwrap();
-    finalize_package_tar(&pkg);
-
-    let descriptor = read_package_manifest_from_ref(Some(pkg.to_str().unwrap()), None).unwrap();
-    let mount = package_provides_file_mount(&descriptor, "share/config", "/etc/provider")
-        .unwrap()
-        .expect("provides dir mount");
-    assert!(matches!(
-        mount,
-        PackageLeafMount::Tar { guest_path, root, .. }
-            if guest_path == "/etc/provider" && root == "/share/config"
-    ));
-}
diff --git a/crates/sidecar/tests/permission_flags.rs b/crates/sidecar/tests/permission_flags.rs
deleted file mode 100644
index c96b44efb..000000000
--- a/crates/sidecar/tests/permission_flags.rs
+++ /dev/null
@@ -1,458 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{
-    ConfigureVmRequest, CreateVmRequest, FsPermissionRule, FsPermissionRuleSet, FsPermissionScope,
-    GuestFilesystemCallRequest, GuestFilesystemOperation, GuestRuntimeKind, PatternPermissionRule,
-    PatternPermissionRuleSet, PatternPermissionScope, PermissionMode, PermissionsPolicy,
-    RequestPayload, ResponsePayload, RootFilesystemDescriptor, RootFilesystemEntry,
-    RootFilesystemEntryKind, RootFilesystemMode,
-};
-use std::collections::HashMap;
-use support::{
-    authenticate_wire, create_vm_wire, open_session_wire, temp_dir, wire_request, wire_session,
-    wire_vm,
-};
-
-fn expect_invalid_state(payload: ResponsePayload, expected_message: &str) {
-    match payload {
-        ResponsePayload::RejectedResponse(rejected) => {
-            assert_eq!(rejected.code, "invalid_state");
-            assert!(
-                rejected.message.contains(expected_message),
-                "unexpected rejection: {rejected:?}"
-            );
-        }
-        other => panic!("expected invalid_state rejection, got {other:?}"),
-    }
-}
-
-fn root_dir(path: &str, mode: u32) -> RootFilesystemEntry {
-    RootFilesystemEntry {
-        path: path.to_owned(),
-        kind: RootFilesystemEntryKind::Directory,
-        mode: Some(mode),
-        uid: None,
-        gid: None,
-        content: None,
-        encoding: None,
-        target: None,
-        executable: false,
-    }
-}
-
-fn create_vm_with_fs_permissions(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    permissions: PermissionsPolicy,
-) -> String {
-    let response = sidecar
-        .dispatch_wire_blocking(wire_request(
-            3,
-            wire_session(connection_id, session_id),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                GuestRuntimeKind::JavaScript,
-                HashMap::new(),
-                RootFilesystemDescriptor {
-                    mode: RootFilesystemMode::Ephemeral,
-                    disable_default_base_layer: false,
-                    lowers: Vec::new(),
-                    bootstrap_entries: vec![root_dir("/tmp", 0o755)],
-                },
-                Some(permissions),
-            )),
-        ))
-        .expect("create vm with fs permissions");
-
-    match response.response.payload {
-        ResponsePayload::VmCreatedResponse(response) => response.vm_id,
-        other => panic!("expected vm create response, got {other:?}"),
-    }
-}
-
-fn mkdir_request(path: &str, recursive: bool) -> GuestFilesystemCallRequest {
-    GuestFilesystemCallRequest {
-        operation: GuestFilesystemOperation::Mkdir,
-        path: path.to_owned(),
-        destination_path: None,
-        target: None,
-        content: None,
-        encoding: None,
-        recursive,
-        max_depth: None,
-        mode: None,
-        uid: None,
-        gid: None,
-        atime_ms: None,
-        mtime_ms: None,
-        len: None,
-        offset: None,
-    }
-}
-
-#[test]
-fn permission_flags_reject_empty_operations_and_accept_explicit_wildcards() {
-    let mut sidecar = support::new_sidecar("permission-flags-create");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-
-    let rejected = sidecar
-        .dispatch_wire_blocking(wire_request(
-            3,
-            wire_session(&connection_id, &session_id),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                GuestRuntimeKind::JavaScript,
-                HashMap::new(),
-                RootFilesystemDescriptor {
-                    mode: RootFilesystemMode::Ephemeral,
-                    disable_default_base_layer: false,
-                    lowers: Vec::new(),
-                    bootstrap_entries: Vec::new(),
-                },
-                Some(PermissionsPolicy {
-                    fs: Some(FsPermissionScope::FsPermissionRuleSet(
-                        FsPermissionRuleSet {
-                            default: Some(PermissionMode::Deny),
-                            rules: vec![FsPermissionRule {
-                                mode: PermissionMode::Allow,
-                                operations: Vec::new(),
-                                paths: vec![String::from("/**")],
-                            }],
-                        },
-                    )),
-                    network: None,
-                    child_process: None,
-                    process: None,
-                    env: None,
-                    binding: None,
-                }),
-            )),
-        ))
-        .expect("dispatch create vm rejection");
-
-    expect_invalid_state(
-        rejected.response.payload,
-        "fs.rules[0].operations must not be empty",
-    );
-
-    let accepted = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_session(&connection_id, &session_id),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                GuestRuntimeKind::JavaScript,
-                HashMap::new(),
-                RootFilesystemDescriptor {
-                    mode: RootFilesystemMode::Ephemeral,
-                    disable_default_base_layer: false,
-                    lowers: Vec::new(),
-                    bootstrap_entries: Vec::new(),
-                },
-                Some(PermissionsPolicy {
-                    fs: Some(FsPermissionScope::FsPermissionRuleSet(
-                        FsPermissionRuleSet {
-                            default: Some(PermissionMode::Deny),
-                            rules: vec![FsPermissionRule {
-                                mode: PermissionMode::Allow,
-                                operations: vec![String::from("*")],
-                                paths: vec![String::from("/**")],
-                            }],
-                        },
-                    )),
-                    network: None,
-                    child_process: None,
-                    process: None,
-                    env: None,
-                    binding: None,
-                }),
-            )),
-        ))
-        .expect("dispatch create vm with wildcard");
-
-    match accepted.response.payload {
-        ResponsePayload::VmCreatedResponse(_) => {}
-        other => panic!("expected vm creation with explicit wildcard, got {other:?}"),
-    }
-}
-
-#[test]
-fn permission_flags_reject_empty_paths_and_patterns_on_configure() {
-    let mut sidecar = support::new_sidecar("permission-flags-configure");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let cwd = temp_dir("permission-flags-configure-cwd");
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    let empty_paths = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: Vec::new(),
-                software: Vec::new(),
-                permissions: Some(PermissionsPolicy {
-                    fs: Some(FsPermissionScope::FsPermissionRuleSet(
-                        FsPermissionRuleSet {
-                            default: Some(PermissionMode::Deny),
-                            rules: vec![FsPermissionRule {
-                                mode: PermissionMode::Allow,
-                                operations: vec![String::from("read")],
-                                paths: Vec::new(),
-                            }],
-                        },
-                    )),
-                    network: None,
-                    child_process: None,
-                    process: None,
-                    env: None,
-                    binding: None,
-                }),
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: Default::default(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ))
-        .expect("dispatch configure vm with empty fs paths");
-
-    expect_invalid_state(
-        empty_paths.response.payload,
-        "fs.rules[0].paths must not be empty",
-    );
-
-    let empty_patterns = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: Vec::new(),
-                software: Vec::new(),
-                permissions: Some(PermissionsPolicy {
-                    fs: None,
-                    network: Some(PatternPermissionScope::PatternPermissionRuleSet(
-                        PatternPermissionRuleSet {
-                            default: Some(PermissionMode::Deny),
-                            rules: vec![PatternPermissionRule {
-                                mode: PermissionMode::Allow,
-                                operations: vec![String::from("*")],
-                                patterns: Vec::new(),
-                            }],
-                        },
-                    )),
-                    child_process: None,
-                    process: None,
-                    env: None,
-                    binding: None,
-                }),
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: Default::default(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ))
-        .expect("dispatch configure vm with empty network patterns");
-
-    expect_invalid_state(
-        empty_patterns.response.payload,
-        "network.rules[0].patterns must not be empty",
-    );
-
-    let empty_pattern_operations = sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: Vec::new(),
-                software: Vec::new(),
-                permissions: Some(PermissionsPolicy {
-                    fs: None,
-                    network: Some(PatternPermissionScope::PatternPermissionRuleSet(
-                        PatternPermissionRuleSet {
-                            default: Some(PermissionMode::Deny),
-                            rules: vec![PatternPermissionRule {
-                                mode: PermissionMode::Allow,
-                                operations: Vec::new(),
-                                patterns: vec![String::from("**")],
-                            }],
-                        },
-                    )),
-                    child_process: None,
-                    process: None,
-                    env: None,
-                    binding: None,
-                }),
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: Default::default(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ))
-        .expect("dispatch configure vm with empty network operations");
-
-    expect_invalid_state(
-        empty_pattern_operations.response.payload,
-        "network.rules[0].operations must not be empty",
-    );
-}
-
-#[test]
-fn permission_flags_single_star_paths_do_not_cross_path_separators() {
-    let mut sidecar = support::new_sidecar("permission-flags-single-star");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_fs_permissions(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        PermissionsPolicy {
-            fs: Some(FsPermissionScope::FsPermissionRuleSet(
-                FsPermissionRuleSet {
-                    default: Some(PermissionMode::Deny),
-                    rules: vec![
-                        FsPermissionRule {
-                            mode: PermissionMode::Allow,
-                            operations: vec![String::from("read")],
-                            paths: vec![String::from("/tmp")],
-                        },
-                        FsPermissionRule {
-                            mode: PermissionMode::Allow,
-                            operations: vec![
-                                String::from("create_dir"),
-                                String::from("read"),
-                                String::from("stat"),
-                            ],
-                            paths: vec![String::from("/tmp/*")],
-                        },
-                    ],
-                },
-            )),
-            network: None,
-            child_process: None,
-            process: None,
-            env: None,
-            binding: None,
-        },
-    );
-
-    let allow_direct_child = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(mkdir_request("/tmp/a", false)),
-        ))
-        .expect("create direct child directory");
-    match allow_direct_child.response.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert_eq!(response.operation, GuestFilesystemOperation::Mkdir);
-            assert_eq!(response.path, "/tmp/a");
-        }
-        other => panic!("expected guest filesystem mkdir response, got {other:?}"),
-    }
-
-    let deny_nested_child = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(mkdir_request("/tmp/a/b", false)),
-        ))
-        .expect("attempt nested child directory create");
-    match deny_nested_child.response.payload {
-        ResponsePayload::RejectedResponse(rejected) => {
-            assert_eq!(rejected.code, "kernel_error");
-            assert!(rejected.message.contains("EACCES"));
-        }
-        other => panic!("expected rejected nested mkdir response, got {other:?}"),
-    }
-}
-
-#[test]
-fn permission_flags_double_star_paths_allow_nested_descendants() {
-    let mut sidecar = support::new_sidecar("permission-flags-double-star");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_fs_permissions(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        PermissionsPolicy {
-            fs: Some(FsPermissionScope::FsPermissionRuleSet(
-                FsPermissionRuleSet {
-                    default: Some(PermissionMode::Deny),
-                    rules: vec![
-                        FsPermissionRule {
-                            mode: PermissionMode::Allow,
-                            operations: vec![String::from("read")],
-                            paths: vec![String::from("/tmp")],
-                        },
-                        FsPermissionRule {
-                            mode: PermissionMode::Allow,
-                            operations: vec![
-                                String::from("create_dir"),
-                                String::from("read"),
-                                String::from("stat"),
-                            ],
-                            paths: vec![String::from("/tmp/**")],
-                        },
-                    ],
-                },
-            )),
-            network: None,
-            child_process: None,
-            process: None,
-            env: None,
-            binding: None,
-        },
-    );
-
-    let allow_direct_child = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(mkdir_request("/tmp/a", false)),
-        ))
-        .expect("create direct child directory");
-    match allow_direct_child.response.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert_eq!(response.operation, GuestFilesystemOperation::Mkdir);
-            assert_eq!(response.path, "/tmp/a");
-        }
-        other => panic!("expected guest filesystem mkdir response, got {other:?}"),
-    }
-
-    let allow_nested_child = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(mkdir_request("/tmp/a/b/c", true)),
-        ))
-        .expect("create nested child directory");
-    match allow_nested_child.response.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert_eq!(response.operation, GuestFilesystemOperation::Mkdir);
-            assert_eq!(response.path, "/tmp/a/b/c");
-        }
-        other => panic!("expected guest filesystem mkdir response, got {other:?}"),
-    }
-}
diff --git a/crates/sidecar/tests/posix_compliance.rs b/crates/sidecar/tests/posix_compliance.rs
deleted file mode 100644
index b0d181f82..000000000
--- a/crates/sidecar/tests/posix_compliance.rs
+++ /dev/null
@@ -1,555 +0,0 @@
-mod support;
-
-use nix::libc;
-use secure_exec_kernel::command_registry::CommandDriver;
-use secure_exec_kernel::fd_table::O_RDWR;
-use secure_exec_kernel::kernel::{KernelVm, KernelVmConfig, SpawnOptions};
-use secure_exec_kernel::permissions::Permissions;
-use secure_exec_kernel::process_table::{
-    DriverProcess, ProcessContext, ProcessExitCallback, ProcessResult, ProcessTable,
-    ProcessWaitEvent, WaitPidFlags, SIGCHLD, SIGTERM,
-};
-use secure_exec_kernel::vfs::MemoryFileSystem;
-use secure_exec_sidecar::wire::{
-    EventPayload, GetSignalStateRequest, GuestRuntimeKind, KillProcessRequest, RequestPayload,
-    ResponsePayload, SignalDispositionAction, SignalHandlerRegistration,
-};
-use std::collections::BTreeMap;
-use std::fmt::Debug;
-use std::sync::{Arc, Condvar, Mutex};
-use std::time::{Duration, Instant};
-use support::{
-    assert_node_available, authenticate_wire, create_vm_wire, execute_wire, new_sidecar,
-    open_session_wire, temp_dir, wire_request, wire_vm, write_fixture,
-};
-
-fn assert_process_error_code<T: Debug>(result: ProcessResult<T>, expected: &str) {
-    let error = result.expect_err("operation should fail");
-    assert_eq!(error.code(), expected);
-}
-
-fn assert_not_trivial_pattern(bytes: &[u8]) {
-    assert!(bytes.iter().any(|byte| *byte != 0));
-    assert!(
-        bytes.windows(2).any(|window| window[0] != window[1]),
-        "random data should not collapse to a repeated byte"
-    );
-}
-
-fn null_separated_bytes(parts: &[&str]) -> Vec<u8> {
-    if parts.is_empty() {
-        return Vec::new();
-    }
-
-    let mut bytes = parts.join("\0").into_bytes();
-    bytes.push(0);
-    bytes
-}
-
-fn chunk_contains(chunk: &[u8], needle: &str) -> bool {
-    let needle = needle.as_bytes();
-    if needle.is_empty() {
-        return true;
-    }
-    chunk.windows(needle.len()).any(|window| window == needle)
-}
-
-fn new_kernel(name: &str) -> KernelVm<MemoryFileSystem> {
-    let mut config = KernelVmConfig::new(name);
-    config.permissions = Permissions::allow_all();
-    let mut kernel = KernelVm::new(MemoryFileSystem::new(), config);
-    kernel
-        .register_driver(CommandDriver::new("shell", ["sh"]))
-        .expect("register shell driver");
-    kernel
-}
-
-fn spawn_shell(
-    kernel: &mut KernelVm<MemoryFileSystem>,
-    args: Vec<String>,
-    cwd: &str,
-    env: BTreeMap<String, String>,
-) -> secure_exec_kernel::kernel::KernelProcessHandle {
-    kernel
-        .spawn_process(
-            "sh",
-            args,
-            SpawnOptions {
-                requester_driver: Some(String::from("shell")),
-                cwd: Some(String::from(cwd)),
-                env,
-                ..SpawnOptions::default()
-            },
-        )
-        .expect("spawn shell")
-}
-
-fn wait_for_process_output(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    expected: &str,
-) {
-    let ownership = wire_vm(connection_id, session_id, vm_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-
-    loop {
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for process output"
-        );
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll sidecar event");
-        let Some(event) = event else { continue };
-
-        match event.payload {
-            EventPayload::ProcessOutputEvent(output)
-                if output.process_id == process_id && chunk_contains(&output.chunk, expected) =>
-            {
-                return;
-            }
-            _ => {}
-        }
-    }
-}
-
-#[derive(Default)]
-struct MockProcessState {
-    kills: Vec<i32>,
-    exit_code: Option<i32>,
-    on_exit: Option<ProcessExitCallback>,
-}
-
-#[derive(Default)]
-struct MockDriverProcess {
-    state: Mutex<MockProcessState>,
-    exited: Condvar,
-}
-
-impl MockDriverProcess {
-    fn new() -> Arc<Self> {
-        Arc::new(Self::default())
-    }
-
-    fn kills(&self) -> Vec<i32> {
-        self.state
-            .lock()
-            .expect("mock process lock poisoned")
-            .kills
-            .clone()
-    }
-
-    fn exit(&self, exit_code: i32) {
-        let callback = {
-            let mut state = self.state.lock().expect("mock process lock poisoned");
-            if state.exit_code.is_some() {
-                return;
-            }
-            state.exit_code = Some(exit_code);
-            self.exited.notify_all();
-            state.on_exit.clone()
-        };
-
-        if let Some(callback) = callback {
-            callback(exit_code);
-        }
-    }
-}
-
-impl DriverProcess for MockDriverProcess {
-    fn kill(&self, signal: i32) {
-        let should_exit = {
-            let mut state = self.state.lock().expect("mock process lock poisoned");
-            state.kills.push(signal);
-            signal == SIGTERM
-        };
-
-        if should_exit {
-            self.exit(128 + signal);
-        }
-    }
-
-    fn wait(&self, timeout: Duration) -> Option<i32> {
-        let state = self.state.lock().expect("mock process lock poisoned");
-        if state.exit_code.is_some() {
-            return state.exit_code;
-        }
-
-        let (state, _) = self
-            .exited
-            .wait_timeout(state, timeout)
-            .expect("mock process wait lock poisoned");
-        state.exit_code
-    }
-
-    fn set_on_exit(&self, callback: ProcessExitCallback) {
-        self.state
-            .lock()
-            .expect("mock process lock poisoned")
-            .on_exit = Some(callback);
-    }
-}
-
-fn create_context(ppid: u32) -> ProcessContext {
-    ProcessContext {
-        pid: 0,
-        ppid,
-        env: BTreeMap::new(),
-        cwd: String::from("/"),
-        ..ProcessContext::default()
-    }
-}
-
-fn allocate_pid(table: &ProcessTable) -> u32 {
-    table.allocate_pid().expect("allocate pid")
-}
-
-#[test]
-fn proc_filesystem_reports_kernel_identity_and_sanitized_process_metadata() {
-    let mut kernel = new_kernel("vm-posix-procfs");
-    kernel
-        .mkdir("/guest/work", true)
-        .expect("create guest working directory");
-    kernel
-        .write_file("/guest/work/data.txt", b"hello".to_vec())
-        .expect("seed guest file");
-
-    let env = BTreeMap::from([
-        (String::from("KERNEL_ONLY_MARKER"), String::from("present")),
-        (String::from("SECOND_MARKER"), String::from("also-present")),
-    ]);
-    let process = spawn_shell(
-        &mut kernel,
-        vec![String::from("-lc"), String::from("echo ok")],
-        "/guest/work",
-        env,
-    );
-    let pid = process.pid();
-    let data_fd = kernel
-        .fd_open("shell", pid, "/guest/work/data.txt", O_RDWR, None)
-        .expect("open extra guest fd");
-
-    let self_link = kernel
-        .read_link_for_process("shell", pid, "/proc/self")
-        .expect("resolve /proc/self");
-    assert_eq!(self_link, format!("/proc/{pid}"));
-
-    let stat_text = String::from_utf8(
-        kernel
-            .read_file_for_process("shell", pid, "/proc/self/stat")
-            .expect("read /proc/self/stat"),
-    )
-    .expect("proc stat should be utf8");
-    let reported_pid = stat_text
-        .split_whitespace()
-        .next()
-        .expect("proc stat should include pid")
-        .parse::<u32>()
-        .expect("proc stat pid should be numeric");
-    assert_eq!(reported_pid, pid, "proc identity should use kernel pid");
-
-    let cmdline = kernel
-        .read_file_for_process("shell", pid, &format!("/proc/{pid}/cmdline"))
-        .expect("read cmdline");
-    assert_eq!(cmdline, null_separated_bytes(&["sh", "-lc", "echo ok"]));
-
-    let environ = kernel
-        .read_file_for_process("shell", pid, &format!("/proc/{pid}/environ"))
-        .expect("read environ");
-    assert_eq!(
-        environ,
-        null_separated_bytes(&["KERNEL_ONLY_MARKER=present", "SECOND_MARKER=also-present",]),
-        "proc environ should only expose kernel-managed env entries"
-    );
-
-    let cwd = kernel
-        .read_link_for_process("shell", pid, &format!("/proc/{pid}/cwd"))
-        .expect("read cwd");
-    assert_eq!(cwd, "/guest/work");
-
-    let fd_entries = kernel
-        .read_dir_for_process("shell", pid, &format!("/proc/{pid}/fd"))
-        .expect("read fd directory");
-    assert!(fd_entries.contains(&String::from("0")));
-    assert!(fd_entries.contains(&String::from("1")));
-    assert!(fd_entries.contains(&String::from("2")));
-    assert!(fd_entries.contains(&data_fd.to_string()));
-    assert_eq!(
-        kernel
-            .read_link_for_process("shell", pid, &format!("/proc/{pid}/fd/{data_fd}"))
-            .expect("read proc fd link"),
-        String::from("/guest/work/data.txt")
-    );
-
-    process.finish(0);
-    kernel.waitpid(pid).expect("wait procfs shell");
-}
-
-#[test]
-fn device_nodes_match_posix_special_file_semantics() {
-    let mut kernel = new_kernel("vm-posix-devices");
-    let process = spawn_shell(&mut kernel, Vec::new(), "/", BTreeMap::new());
-    let pid = process.pid();
-
-    let null_fd = kernel
-        .fd_open("shell", pid, "/dev/null", O_RDWR, None)
-        .expect("open /dev/null");
-    let written = kernel
-        .fd_write("shell", pid, null_fd, b"discard-me")
-        .expect("write /dev/null");
-    assert_eq!(written, b"discard-me".len());
-    let null_bytes = kernel
-        .fd_read("shell", pid, null_fd, 32)
-        .expect("read /dev/null");
-    assert!(null_bytes.is_empty(), "/dev/null should always read as EOF");
-
-    let zero_fd = kernel
-        .fd_open("shell", pid, "/dev/zero", O_RDWR, None)
-        .expect("open /dev/zero");
-    let zeroes = kernel
-        .fd_read("shell", pid, zero_fd, 64)
-        .expect("read /dev/zero");
-    assert_eq!(zeroes.len(), 64);
-    assert!(zeroes.iter().all(|byte| *byte == 0));
-
-    let random_fd = kernel
-        .fd_open("shell", pid, "/dev/urandom", O_RDWR, None)
-        .expect("open /dev/urandom");
-    let first = kernel
-        .fd_read("shell", pid, random_fd, 1024)
-        .expect("read first urandom chunk");
-    let second = kernel
-        .fd_read("shell", pid, random_fd, 1024)
-        .expect("read second urandom chunk");
-    assert_eq!(first.len(), 1024);
-    assert_eq!(second.len(), 1024);
-    assert_not_trivial_pattern(&first);
-    assert_not_trivial_pattern(&second);
-    assert_ne!(first, second, "urandom reads should vary");
-
-    process.finish(0);
-    kernel.waitpid(pid).expect("wait device shell");
-}
-
-#[test]
-fn v8_guest_process_receives_sigterm_delivery() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("posix-v8-sigterm");
-    let cwd = temp_dir("posix-v8-sigterm-cwd");
-    let entry = cwd.join("sigterm.mjs");
-
-    write_fixture(
-        &entry,
-        [
-            "let deliveries = 0;",
-            "process.on('SIGTERM', () => {",
-            "  deliveries += 1;",
-            "  console.log(`sigterm:${deliveries}`);",
-            "  process.exit(0);",
-            "});",
-            "console.log('ready');",
-            "setInterval(() => {}, 25);",
-        ]
-        .join("\n"),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-posix-sigterm");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "sigterm-guest",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    wait_for_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "sigterm-guest",
-        "ready",
-    );
-
-    let ownership = wire_vm(&connection_id, &session_id, &vm_id);
-    let registration_deadline = Instant::now() + Duration::from_secs(10);
-    loop {
-        let signal_state = sidecar
-            .dispatch_wire_blocking(wire_request(
-                5,
-                ownership.clone(),
-                RequestPayload::GetSignalStateRequest(GetSignalStateRequest {
-                    process_id: String::from("sigterm-guest"),
-                }),
-            ))
-            .expect("query signal state");
-        let ready = match signal_state.response.payload {
-            ResponsePayload::SignalStateResponse(snapshot) => {
-                snapshot.handlers.get(&(libc::SIGTERM as u32))
-                    == Some(&SignalHandlerRegistration {
-                        action: SignalDispositionAction::User,
-                        mask: vec![],
-                        flags: 0,
-                    })
-            }
-            other => panic!("unexpected signal state response: {other:?}"),
-        };
-        if ready {
-            break;
-        }
-
-        let _ = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(25))
-            .expect("pump signal registration");
-        assert!(
-            Instant::now() < registration_deadline,
-            "timed out waiting for SIGTERM handler registration"
-        );
-    }
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            ownership.clone(),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("sigterm-guest"),
-                signal: String::from("SIGTERM"),
-            }),
-        ))
-        .expect("deliver SIGTERM");
-
-    let deadline = Instant::now() + Duration::from_secs(10);
-    let mut saw_sigterm = false;
-    let mut exit_code = None;
-
-    while exit_code.is_none() {
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for SIGTERM delivery"
-        );
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll sigterm events");
-        let Some(event) = event else { continue };
-
-        match event.payload {
-            EventPayload::ProcessOutputEvent(output) if output.process_id == "sigterm-guest" => {
-                saw_sigterm |= chunk_contains(&output.chunk, "sigterm:1");
-            }
-            EventPayload::ProcessExitedEvent(exited) if exited.process_id == "sigterm-guest" => {
-                exit_code = Some(exited.exit_code);
-            }
-            _ => {}
-        }
-    }
-
-    assert!(saw_sigterm, "guest should observe SIGTERM");
-    assert_eq!(exit_code, Some(0));
-}
-
-#[test]
-fn process_table_delivers_sigchld_and_reaps_zombies_via_waitpid() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let parent = MockDriverProcess::new();
-    let child = MockDriverProcess::new();
-    let parent_pid = allocate_pid(&table);
-    let child_pid = allocate_pid(&table);
-
-    table.register(
-        parent_pid,
-        "wasmvm",
-        "parent",
-        Vec::new(),
-        create_context(0),
-        parent.clone(),
-    );
-    table.register(
-        child_pid,
-        "wasmvm",
-        "child",
-        Vec::new(),
-        create_context(parent_pid),
-        child.clone(),
-    );
-
-    assert_eq!(
-        table
-            .waitpid_for(parent_pid, -1, WaitPidFlags::WNOHANG)
-            .expect("initial waitpid should succeed"),
-        None
-    );
-
-    table
-        .kill(child_pid as i32, SIGTERM)
-        .expect("send SIGTERM to child");
-    assert_eq!(child.kills(), vec![SIGTERM]);
-    assert_eq!(parent.kills(), vec![SIGCHLD]);
-
-    let waited = table
-        .waitpid_for(parent_pid, -1, WaitPidFlags::empty())
-        .expect("waitpid should succeed")
-        .expect("waitpid should report exited child");
-    assert_eq!(waited.pid, child_pid);
-    assert_eq!(waited.status, 128 + SIGTERM);
-    assert_eq!(waited.event, ProcessWaitEvent::Exited);
-    assert!(
-        table.get(child_pid).is_none(),
-        "waitpid should clean up child zombies"
-    );
-
-    assert_process_error_code(table.waitpid(child_pid), "ESRCH");
-}
-
-#[test]
-fn process_table_negative_pid_kill_targets_entire_process_groups() {
-    let table = ProcessTable::with_zombie_ttl(Duration::from_secs(3600));
-    let leader = MockDriverProcess::new();
-    let peer = MockDriverProcess::new();
-    let leader_pid = allocate_pid(&table);
-    let peer_pid = allocate_pid(&table);
-
-    table.register(
-        leader_pid,
-        "wasmvm",
-        "leader",
-        Vec::new(),
-        create_context(0),
-        leader.clone(),
-    );
-    table.register(
-        peer_pid,
-        "wasmvm",
-        "peer",
-        Vec::new(),
-        create_context(leader_pid),
-        peer.clone(),
-    );
-    table
-        .setpgid(peer_pid, leader_pid)
-        .expect("peer should join leader process group");
-
-    table
-        .kill(-(leader_pid as i32), SIGTERM)
-        .expect("group kill should succeed");
-
-    assert_eq!(leader.kills(), vec![SIGTERM]);
-    assert_eq!(peer.kills(), vec![SIGTERM]);
-}
diff --git a/crates/sidecar/tests/posix_path_repro.rs b/crates/sidecar/tests/posix_path_repro.rs
deleted file mode 100644
index 426401765..000000000
--- a/crates/sidecar/tests/posix_path_repro.rs
+++ /dev/null
@@ -1,560 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{
-    ConfigureVmRequest, GuestRuntimeKind, MountDescriptor, MountPluginDescriptor, RequestPayload,
-};
-use serde_json::{json, Value};
-use std::collections::HashMap;
-use std::path::{Path, PathBuf};
-use std::process::Command;
-use std::time::Duration;
-use support::{
-    assert_node_available, authenticate_wire, collect_process_output_wire_with_timeout,
-    create_vm_wire_with_metadata, execute_wire, new_sidecar, open_session_wire, temp_dir,
-    wire_request, wire_vm, write_fixture,
-};
-
-const ALLOWED_NODE_BUILTINS: &[&str] = &[
-    "buffer",
-    "child_process",
-    "console",
-    "constants",
-    "events",
-    "fs",
-    "path",
-    "stream",
-    "string_decoder",
-    "timers",
-    "url",
-    "util",
-];
-
-fn strip_benign_child_pid_warnings(stderr: &str) -> String {
-    stderr
-        .lines()
-        .filter(|line| !line.contains("WARN") || !line.contains("could not retrieve pid"))
-        .collect::<Vec<_>>()
-        .join("\n")
-}
-
-fn registry_command_root() -> PathBuf {
-    let repo_root = PathBuf::from(env!("CARGO_MANIFEST_DIR"))
-        .join("../..")
-        .canonicalize()
-        .expect("canonicalize repo root");
-    let copied = repo_root.join("registry/software/coreutils/wasm");
-    if copied.exists() {
-        return copied;
-    }
-
-    let fallback = repo_root.join("registry/native/target/wasm32-wasip1/release/commands");
-    if fallback.exists() {
-        return fallback;
-    }
-
-    panic!(
-        "registry WASM commands are required for posix path repro tests: expected {} or {}",
-        copied.display(),
-        fallback.display()
-    );
-}
-
-fn configure_mounts(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    include_registry_commands: bool,
-    mut mounts: Vec<MountDescriptor>,
-) {
-    if include_registry_commands {
-        let command_root = registry_command_root();
-        mounts.insert(
-            0,
-            MountDescriptor {
-                guest_path: String::from("/__secure_exec/commands/0"),
-                read_only: true,
-                plugin: MountPluginDescriptor {
-                    id: String::from("host_dir"),
-                    config: serde_json::to_string(&json!({
-                        "hostPath": command_root,
-                        "readOnly": true,
-                    }))
-                    .expect("serialize registry command mount config"),
-                },
-            },
-        );
-    }
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            10,
-            wire_vm(connection_id, session_id, vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts,
-                software: Vec::new(),
-                permissions: None,
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: HashMap::new(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ))
-        .expect("configure registry command mount");
-}
-
-fn run_host_probe(cwd: &Path, entrypoint: &Path) -> Value {
-    let output = Command::new("node")
-        .arg(entrypoint)
-        .current_dir(cwd)
-        .output()
-        .expect("run host node probe");
-
-    assert!(
-        output.status.success(),
-        "host probe failed with status {:?}\nstdout:\n{}\nstderr:\n{}",
-        output.status.code(),
-        String::from_utf8_lossy(&output.stdout),
-        String::from_utf8_lossy(&output.stderr)
-    );
-
-    serde_json::from_slice(&output.stdout).expect("parse host probe JSON")
-}
-
-fn run_guest_probe_process(
-    case_name: &str,
-    cwd: &Path,
-    entrypoint: &Path,
-    mount_registry_commands: bool,
-    extra_metadata: HashMap<String, String>,
-    extra_mounts: Vec<MountDescriptor>,
-) -> (String, String, i32) {
-    let mut sidecar = new_sidecar(case_name);
-    let connection_id = authenticate_wire(&mut sidecar, &format!("conn-{case_name}"));
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let allowed_builtins =
-        serde_json::to_string(ALLOWED_NODE_BUILTINS).expect("serialize builtin allowlist");
-    let mut metadata = HashMap::from([(
-        String::from("env.AGENTOS_ALLOWED_NODE_BUILTINS"),
-        allowed_builtins,
-    )]);
-    metadata.extend(extra_metadata);
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        cwd,
-        metadata,
-    );
-
-    if mount_registry_commands || !extra_mounts.is_empty() {
-        configure_mounts(
-            &mut sidecar,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            mount_registry_commands,
-            extra_mounts,
-        );
-    }
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        &format!("proc-{case_name}"),
-        GuestRuntimeKind::JavaScript,
-        entrypoint,
-        Vec::new(),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_wire_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        &format!("proc-{case_name}"),
-        Duration::from_secs(30),
-    );
-
-    (stdout, stderr, exit_code)
-}
-
-fn run_guest_probe(
-    case_name: &str,
-    cwd: &Path,
-    entrypoint: &Path,
-    mount_registry_commands: bool,
-    extra_metadata: HashMap<String, String>,
-    extra_mounts: Vec<MountDescriptor>,
-) -> Value {
-    let (stdout, stderr, exit_code) = run_guest_probe_process(
-        case_name,
-        cwd,
-        entrypoint,
-        mount_registry_commands,
-        extra_metadata,
-        extra_mounts,
-    );
-
-    assert_eq!(
-        exit_code, 0,
-        "guest probe failed for {case_name}\nstdout:\n{stdout}\nstderr:\n{stderr}"
-    );
-    assert!(
-        stderr.trim().is_empty(),
-        "guest probe stderr for {case_name}:\n{stderr}"
-    );
-
-    serde_json::from_str(stdout.trim()).expect("parse guest probe JSON")
-}
-
-fn write_probe(case_name: &str, script: &str) -> (PathBuf, PathBuf) {
-    let cwd = temp_dir(&format!("posix-path-repro-{case_name}"));
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(&entrypoint, script);
-    (cwd, entrypoint)
-}
-
-fn assert_guest_matches_host(case_name: &str, script: &str) {
-    assert_node_available();
-
-    let (cwd, entrypoint) = write_probe(case_name, script);
-    let host = run_host_probe(&cwd, &entrypoint);
-    let guest = run_guest_probe(
-        case_name,
-        &cwd,
-        &entrypoint,
-        false,
-        HashMap::new(),
-        Vec::new(),
-    );
-
-    assert_eq!(
-        guest,
-        host,
-        "guest V8 result diverged from host Node for {case_name}\nhost: {}\nguest: {}",
-        serde_json::to_string_pretty(&host).expect("pretty host JSON"),
-        serde_json::to_string_pretty(&guest).expect("pretty guest JSON")
-    );
-}
-
-fn guest_shell_relative_paths_follow_cwd_after_cd() {
-    assert_node_available();
-
-    let (cwd, entrypoint) = write_probe(
-        "relative-shell",
-        r#"
-import childProcess from "node:child_process";
-import fs from "node:fs";
-
-const worktree = process.env.WORKTREE;
-if (!worktree) {
-  throw new Error("WORKTREE env missing");
-}
-const notePath = `${worktree}/note.txt`;
-const writtenPath = `${worktree}/written.txt`;
-fs.writeFileSync(notePath, "hello from repro\n");
-const childScript = `
-const fs = require("node:fs");
-console.log(process.cwd());
-console.log(fs.readFileSync("note.txt", "utf8").trimEnd());
-fs.writeFileSync("written.txt", "hi\\n");
-console.log(fs.readFileSync("written.txt", "utf8").trimEnd());
-`;
-
-const result = childProcess.spawnSync(
-  "node",
-  [
-    "-e",
-    childScript,
-  ],
-  {
-    cwd: worktree,
-    encoding: "utf8",
-  },
-);
-
-const stdoutText = Buffer.from(result.stdout ?? []).toString("utf8");
-const stderrText = Buffer.from(result.stderr ?? []).toString("utf8");
-const stdoutLines = stdoutText
-  .split("\n")
-  .map((line) => line.trimEnd())
-  .filter((line) => line.length > 0);
-let written = null;
-let writtenReadError = null;
-try {
-  written = fs.readFileSync(writtenPath, "utf8");
-} catch (error) {
-  writtenReadError = {
-    code: error?.code ?? null,
-    path: error?.path ?? null,
-  };
-}
-
-console.log(JSON.stringify({
-  worktree,
-  notePath,
-  writtenPath,
-  status: result.status,
-  signal: result.signal,
-  stdoutLines,
-  stderr: stderrText,
-  written,
-  writtenReadError,
-}));
-"#,
-    );
-    let guest = run_guest_probe(
-        "relative-shell",
-        &cwd,
-        &entrypoint,
-        false,
-        HashMap::from([(String::from("env.WORKTREE"), String::from("/workspace"))]),
-        vec![MountDescriptor {
-            guest_path: String::from("/workspace"),
-            read_only: false,
-            plugin: MountPluginDescriptor {
-                id: String::from("host_dir"),
-                config: serde_json::to_string(&json!({
-                    "hostPath": cwd,
-                    "readOnly": false,
-                }))
-                .expect("serialize relative shell mount config"),
-            },
-        }],
-    );
-
-    assert_eq!(
-        guest["status"],
-        json!(0),
-        "guest repro should exit cleanly: {guest}"
-    );
-    assert_eq!(
-        guest["signal"],
-        Value::Null,
-        "guest repro should not be signaled: {guest}"
-    );
-    assert_eq!(
-        guest["stdoutLines"],
-        json!([
-            guest["worktree"]
-                .as_str()
-                .expect("worktree should be a string"),
-            "hello from repro",
-            "hi"
-        ]),
-        "guest shell should resolve relative paths inside the cwd: {guest}"
-    );
-    assert_eq!(
-        strip_benign_child_pid_warnings(
-            guest["stderr"]
-                .as_str()
-                .expect("child stderr should be encoded as a string")
-        ),
-        "",
-        "guest shell should not emit unexpected stderr: {guest}"
-    );
-    assert_eq!(
-        guest["written"],
-        json!("hi\n"),
-        "relative write should land in the cwd: {guest}"
-    );
-}
-
-fn guest_shell_absolute_paths_still_work_after_cd() {
-    assert_node_available();
-
-    let (cwd, entrypoint) = write_probe(
-        "absolute-shell",
-        r#"
-import childProcess from "node:child_process";
-import fs from "node:fs";
-import path from "node:path";
-
-const worktree = process.env.WORKTREE;
-if (!worktree) {
-  throw new Error("WORKTREE env missing");
-}
-const notePath = path.join(worktree, "note.txt");
-const writtenPath = path.join(worktree, "written.txt");
-fs.writeFileSync(notePath, "hello from repro\n");
-const childScript = `
-const fs = require("node:fs");
-console.log(process.cwd());
-console.log(fs.readFileSync(${JSON.stringify(notePath)}, "utf8").trimEnd());
-fs.writeFileSync(${JSON.stringify(writtenPath)}, "hi\\n");
-console.log(fs.readFileSync(${JSON.stringify(writtenPath)}, "utf8").trimEnd());
-`;
-
-const result = childProcess.spawnSync(
-  "node",
-  [
-    "-e",
-    childScript,
-  ],
-  {
-    cwd: worktree,
-    encoding: "utf8",
-  },
-);
-
-const stdoutText = Buffer.from(result.stdout ?? []).toString("utf8");
-const stderrText = Buffer.from(result.stderr ?? []).toString("utf8");
-const stdoutLines = stdoutText
-  .split("\n")
-  .map((line) => line.trimEnd())
-  .filter((line) => line.length > 0);
-let written = null;
-let writtenReadError = null;
-try {
-  written = fs.readFileSync(writtenPath, "utf8");
-} catch (error) {
-  writtenReadError = {
-    code: error?.code ?? null,
-    path: error?.path ?? null,
-  };
-}
-
-console.log(JSON.stringify({
-  worktree,
-  notePath,
-  writtenPath,
-  status: result.status,
-  signal: result.signal,
-  stdoutLines,
-  stderr: stderrText,
-  written,
-  writtenReadError,
-}));
-"#,
-    );
-    let guest = run_guest_probe(
-        "absolute-shell",
-        &cwd,
-        &entrypoint,
-        false,
-        HashMap::from([(String::from("env.WORKTREE"), String::from("/workspace"))]),
-        vec![MountDescriptor {
-            guest_path: String::from("/workspace"),
-            read_only: false,
-            plugin: MountPluginDescriptor {
-                id: String::from("host_dir"),
-                config: serde_json::to_string(&json!({
-                    "hostPath": cwd,
-                    "readOnly": false,
-                }))
-                .expect("serialize absolute shell mount config"),
-            },
-        }],
-    );
-
-    assert_eq!(
-        guest["status"],
-        json!(0),
-        "guest repro should exit cleanly: {guest}"
-    );
-    assert_eq!(
-        guest["signal"],
-        Value::Null,
-        "guest repro should not be signaled: {guest}"
-    );
-    assert_eq!(
-        guest["stdoutLines"],
-        json!([
-            guest["worktree"]
-                .as_str()
-                .expect("worktree should be a string"),
-            "hello from repro",
-            "hi"
-        ]),
-        "guest shell should still succeed with absolute paths: {guest}"
-    );
-    assert_eq!(
-        strip_benign_child_pid_warnings(
-            guest["stderr"]
-                .as_str()
-                .expect("child stderr should be encoded as a string")
-        ),
-        "",
-        "guest shell should not emit unexpected stderr: {guest}"
-    );
-    assert_eq!(
-        guest["written"],
-        json!("hi\n"),
-        "absolute write should land in the cwd: {guest}"
-    );
-}
-
-fn node_path_posix_edge_cases_match_host_node() {
-    assert_guest_matches_host(
-        "path-builtins",
-        r#"
-import path from "node:path";
-
-console.log(JSON.stringify({
-  resolve: path.resolve("/workspace/project/", "./src", "../tests", "spec.ts"),
-  join: path.join("/workspace", "project", "..", "project", "note.txt"),
-  normalize: path.normalize("/workspace//project/tests/../nested//file.txt"),
-  relativeSibling: path.relative("/workspace/project/src/", "/workspace/project/tests/spec.ts"),
-  relativeSame: path.relative("/workspace/project/", "/workspace/project"),
-  dirname: path.dirname("/workspace/project/tests/spec.ts/"),
-  basename: path.basename("/workspace/project/tests/spec.ts/"),
-}));
-"#,
-    );
-}
-
-fn filesystem_path_edge_cases_match_host_node() {
-    assert_guest_matches_host(
-        "filesystem-paths",
-        r#"
-import fs from "node:fs";
-import path from "node:path";
-
-fs.mkdirSync("workspace/nested", { recursive: true });
-fs.writeFileSync("workspace/nested/note.txt", "hello through nested path\n");
-fs.symlinkSync("nested", "workspace/link");
-
-const viaRelative = fs.readFileSync("./workspace/./nested/../nested/note.txt", "utf8");
-const viaSymlinkTraversal = fs.readFileSync("workspace/link/../nested/note.txt", "utf8");
-const realpathRelativeToCwd = path.relative(
-  process.cwd(),
-  fs.realpathSync("workspace/link/../nested/note.txt"),
-);
-const readlink = fs.readlinkSync("workspace/link");
-const trailingSlashEntries = fs.readdirSync("workspace/nested/");
-const trailingSlashIsDir = fs.statSync("workspace/nested/").isDirectory();
-const lstatIsSymlink = fs.lstatSync("workspace/link").isSymbolicLink();
-
-console.log(JSON.stringify({
-  viaRelative,
-  viaSymlinkTraversal,
-  realpathRelativeToCwd,
-  readlink,
-  trailingSlashEntries,
-  trailingSlashIsDir,
-  lstatIsSymlink,
-}));
-"#,
-    );
-}
-
-#[test]
-fn posix_path_repro_suite() {
-    // Multiple libtest cases in this V8-backed integration binary still trip
-    // teardown/init crashes, so keep the coverage in one top-level suite.
-    filesystem_path_edge_cases_match_host_node();
-    guest_shell_absolute_paths_still_work_after_cd();
-    guest_shell_relative_paths_follow_cwd_after_cd();
-    node_path_posix_edge_cases_match_host_node();
-}
diff --git a/crates/sidecar/tests/process_isolation.rs b/crates/sidecar/tests/process_isolation.rs
deleted file mode 100644
index 4d2bcc39b..000000000
--- a/crates/sidecar/tests/process_isolation.rs
+++ /dev/null
@@ -1,142 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{EventPayload, GuestRuntimeKind, OwnershipScope, StreamChannel};
-use std::collections::BTreeMap;
-use std::time::{Duration, Instant};
-use support::{
-    assert_node_available, authenticate_wire, create_vm_wire, execute_wire, new_sidecar,
-    open_session_wire, temp_dir, wire_session, write_fixture,
-};
-
-const MAX_PROCESS_STDERR_BYTES: usize = 1024 * 1024;
-
-#[derive(Debug, Default)]
-struct ProcessResult {
-    stderr: Vec<u8>,
-    exit_code: Option<i32>,
-}
-
-fn append_stderr(result: &mut ProcessResult, chunk: &[u8]) {
-    assert!(
-        result.stderr.len().saturating_add(chunk.len()) <= MAX_PROCESS_STDERR_BYTES,
-        "process stderr exceeded {MAX_PROCESS_STDERR_BYTES} bytes"
-    );
-    result.stderr.extend_from_slice(chunk);
-}
-
-#[test]
-fn concurrent_vm_processes_stay_isolated_with_vm_scoped_events() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("process-isolation");
-    let cwd = temp_dir("process-isolation-cwd");
-    let slow_entry = cwd.join("slow.cjs");
-    let fast_entry = cwd.join("fast.cjs");
-
-    write_fixture(&slow_entry, "setTimeout(() => {}, 150);\n");
-    write_fixture(&fast_entry, "void 0;\n");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (slow_vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-    let (fast_vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    execute_wire(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &slow_vm_id,
-        "proc",
-        GuestRuntimeKind::JavaScript,
-        &slow_entry,
-        Vec::new(),
-    );
-    execute_wire(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &fast_vm_id,
-        "proc",
-        GuestRuntimeKind::JavaScript,
-        &fast_entry,
-        Vec::new(),
-    );
-
-    let mut results = BTreeMap::from([
-        (slow_vm_id.clone(), ProcessResult::default()),
-        (fast_vm_id.clone(), ProcessResult::default()),
-    ]);
-    let deadline = Instant::now() + Duration::from_secs(10);
-    let ownership = wire_session(&connection_id, &session_id);
-
-    while results.values().any(|result| result.exit_code.is_none()) {
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for isolated process events"
-        );
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll process-isolation event");
-        let Some(event) = event else { continue };
-
-        let OwnershipScope::VmOwnership(vm_ownership) = event.ownership else {
-            panic!("expected VM-scoped process event");
-        };
-        let result = results
-            .get_mut(&vm_ownership.vm_id)
-            .unwrap_or_else(|| panic!("unexpected vm event for {}", vm_ownership.vm_id));
-
-        match event.payload {
-            EventPayload::ProcessOutputEvent(output) => {
-                assert_eq!(output.process_id, "proc");
-                match output.channel {
-                    StreamChannel::Stdout => {}
-                    StreamChannel::Stderr => {
-                        append_stderr(result, &output.chunk);
-                    }
-                }
-            }
-            EventPayload::ProcessExitedEvent(exited) => {
-                assert_eq!(exited.process_id, "proc");
-                result.exit_code = Some(exited.exit_code);
-            }
-            EventPayload::VmLifecycleEvent(_)
-            | EventPayload::StructuredEvent(_)
-            | EventPayload::ExtEnvelope(_) => {}
-        }
-    }
-
-    let slow = results.get(&slow_vm_id).expect("slow vm result");
-    let fast = results.get(&fast_vm_id).expect("fast vm result");
-
-    assert_eq!(slow.exit_code, Some(0));
-    assert_eq!(fast.exit_code, Some(0));
-    let slow_stderr = String::from_utf8_lossy(&slow.stderr);
-    let fast_stderr = String::from_utf8_lossy(&fast.stderr);
-    assert!(
-        slow_stderr.is_empty(),
-        "unexpected slow stderr: {}",
-        slow_stderr
-    );
-    assert!(
-        fast_stderr.is_empty(),
-        "unexpected fast stderr: {}",
-        fast_stderr
-    );
-}
diff --git a/crates/sidecar/tests/promisify_module_load.rs b/crates/sidecar/tests/promisify_module_load.rs
deleted file mode 100644
index b44c9cde0..000000000
--- a/crates/sidecar/tests/promisify_module_load.rs
+++ /dev/null
@@ -1,159 +0,0 @@
-//! Regression guard for issue #11: `util.promisify()` throws at module load.
-//!
-//! Original failure mode: a hand-rolled `@secure-exec/core` `util` polyfill exposed many
-//! builtin functions as `undefined`. Adapter dependencies (extract-zip, get-stream) called
-//! `promisify(undefined)` at module-load time, and the polyfill's `promisify` threw a
-//! `TypeError` synchronously, crashing the whole module load before any application code ran.
-//!
-//! The downstream fix removed the eager throw (returning a function that rejects lazily). The
-//! architecture has since changed: `node:util` now comes from the real upstream `util@0.12.5`
-//! bundle (which still throws eagerly on non-functions, matching real Node), and the builtin
-//! surface (`node:fs`, etc.) is now backed by real complete modules rather than `undefined`
-//! stubs.
-//!
-//! This test encodes the CORRECT expected behavior in the redesigned world:
-//!   1. `util.promisify(undefined)` throwing a `TypeError` must be *containable* by user code
-//!      (a try/catch) and must NOT crash the guest at module load (process still exits 0).
-//!   2. The real-world root cause must stay fixed: `promisify` applied to a genuine builtin
-//!      function that the adapters use (`fs.readFile`) must return a function, proving the
-//!      builtin surface is complete enough that adapter deps never receive `undefined`.
-
-mod support;
-
-use std::collections::HashMap;
-use std::time::Duration;
-
-use serde_json::Value;
-use support::{
-    assert_node_available, authenticate_wire, collect_process_output_wire_with_timeout,
-    create_vm_wire_with_metadata, dispose_vm_and_close_session_wire, execute_wire, new_sidecar,
-    open_session_wire, temp_dir, write_fixture,
-};
-
-const ALLOWED_NODE_BUILTINS: &[&str] = &["fs", "util"];
-
-const GUEST_SCRIPT: &str = r#"
-import { createRequire } from "node:module";
-
-const require = createRequire(import.meta.url);
-
-// `node:util` and `node:fs` are resolved at module load. If `util.promisify`
-// throws synchronously on the eager TypeError path *outside* of a guard, this
-// whole module would fail to load and the process would crash (non-zero exit),
-// reproducing issue #11.
-const util = require("node:util");
-const fs = require("node:fs");
-
-// (1) The eager TypeError must be containable by user code rather than tearing
-//     down the module/process. This mirrors `promisify(undefined)` which is what
-//     the old incomplete polyfill handed to extract-zip / get-stream at load time.
-let undefinedThrewTypeError = false;
-try {
-  util.promisify(undefined);
-} catch (error) {
-  undefinedThrewTypeError = error != null && error.name === "TypeError";
-}
-
-// (2) Root-cause regression guard: a genuine builtin function that adapters
-//     actually promisify must be a real function (not an `undefined` stub), so
-//     `promisify` yields a usable function.
-const readFileIsFunction = typeof fs.readFile === "function";
-const promisifiedReadFileIsFunction =
-  typeof util.promisify(fs.readFile) === "function";
-
-console.log(
-  JSON.stringify({
-    undefinedThrewTypeError,
-    readFileIsFunction,
-    promisifiedReadFileIsFunction,
-  }),
-);
-"#;
-
-fn run_guest(case_name: &str, script: &str, allowed_builtins: &[&str]) -> (Value, String, i32) {
-    assert_node_available();
-
-    let cwd = temp_dir(&format!("promisify-{case_name}"));
-    let entrypoint = cwd.join("entry.mjs");
-    write_fixture(&entrypoint, script);
-
-    let mut sidecar = new_sidecar(case_name);
-    let connection_id = authenticate_wire(&mut sidecar, &format!("conn-{case_name}"));
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-
-    let mut metadata = HashMap::new();
-    metadata.insert(
-        String::from("env.AGENTOS_ALLOWED_NODE_BUILTINS"),
-        serde_json::to_string(allowed_builtins).expect("serialize builtin allowlist"),
-    );
-
-    let (vm_id, _create) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        secure_exec_sidecar::wire::GuestRuntimeKind::JavaScript,
-        &cwd,
-        metadata,
-    );
-
-    let process_id = format!("proc-{case_name}");
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        &process_id,
-        secure_exec_sidecar::wire::GuestRuntimeKind::JavaScript,
-        &entrypoint,
-        Vec::new(),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_wire_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        &process_id,
-        Duration::from_secs(30),
-    );
-
-    dispose_vm_and_close_session_wire(&mut sidecar, &connection_id, &session_id, &vm_id);
-
-    let parsed = serde_json::from_str(stdout.trim())
-        .unwrap_or_else(|_| panic!("parse guest JSON\nstdout:\n{stdout}\nstderr:\n{stderr}"));
-    (parsed, stderr, exit_code)
-}
-
-#[test]
-fn promisify_undefined_does_not_crash_module_load() {
-    let (parsed, stderr, exit_code) =
-        run_guest("promisify-module-load", GUEST_SCRIPT, ALLOWED_NODE_BUILTINS);
-
-    // The module must have loaded and the process must have exited cleanly: the
-    // eager TypeError from `promisify(undefined)` must be containable, not fatal.
-    assert_eq!(
-        exit_code, 0,
-        "guest module load crashed (issue #11)\nstderr:\n{stderr}\nparsed:\n{parsed}"
-    );
-
-    assert_eq!(
-        parsed["undefinedThrewTypeError"],
-        Value::Bool(true),
-        "promisify(undefined) should raise a containable TypeError, parsed={parsed}"
-    );
-
-    // Root-cause guard: the builtin surface must be complete, so adapter deps
-    // never receive `undefined` to promisify.
-    assert_eq!(
-        parsed["readFileIsFunction"],
-        Value::Bool(true),
-        "fs.readFile must be a real function, parsed={parsed}"
-    );
-    assert_eq!(
-        parsed["promisifiedReadFileIsFunction"],
-        Value::Bool(true),
-        "promisify(fs.readFile) must return a function, parsed={parsed}"
-    );
-}
diff --git a/crates/sidecar/tests/protocol.rs b/crates/sidecar/tests/protocol.rs
deleted file mode 100644
index a58396233..000000000
--- a/crates/sidecar/tests/protocol.rs
+++ /dev/null
@@ -1,1007 +0,0 @@
-use secure_exec_sidecar::protocol::{
-    validate_frame, AuthenticateRequest, AuthenticatedResponse, CreateVmRequest, EventFrame,
-    EventPayload, ExtEnvelope, GetZombieTimerCountRequest, GuestFilesystemCallRequest,
-    GuestFilesystemOperation, GuestRuntimeKind, HostCallbackRequest, HostCallbackResultResponse,
-    JsBridgeResultResponse, NativeFrameCodec, NativePayloadCodec, OpenSessionRequest,
-    OwnershipScope, PatternPermissionScope, PermissionMode, PermissionsPolicy, ProcessOutputEvent,
-    ProcessStartedResponse, ProjectedModuleDescriptor, ProtocolCodecError, ProtocolFrame,
-    RequestFrame, RequestPayload, ResponseFrame, ResponsePayload, ResponseTracker,
-    ResponseTrackerError, RootFilesystemDescriptor, RootFilesystemEntry, RootFilesystemEntryKind,
-    RootFilesystemLowerDescriptor, SidecarPlacement, SidecarPlacementShared, SidecarRequestFrame,
-    SidecarRequestPayload, SidecarResponseFrame, SidecarResponsePayload, SidecarResponseTracker,
-    SidecarResponseTrackerError, SnapshotRootFilesystemLower, SoftwareDescriptor, StreamChannel,
-    StructuredEvent, VmLifecycleEvent, VmLifecycleState, WriteStdinRequest,
-};
-use serde_json::json;
-use std::hint::black_box;
-use std::time::Instant;
-
-const BARE_SCHEMA_V1: &str =
-    include_str!("../../sidecar-protocol/protocol/secure_exec_sidecar_v1.bare");
-const BARE_MIGRATION_PLAN: &str = include_str!("../../sidecar-protocol/protocol/README.md");
-
-#[test]
-fn guest_runtime_kind_round_trips_through_generated_codec() {
-    // `GuestRuntimeKind` is now the generated wire type. The wire contract is BARE
-    // (positional tags), which is what round-trips here. The previous snake_case
-    // human-readable JSON form was a hand-codec artifact with no production consumer
-    // (the TS side keeps its own live snake_case map under the §6c facade).
-    let encoded = serde_bare::to_vec(&GuestRuntimeKind::Python).expect("bare encode runtime");
-    let decoded: GuestRuntimeKind = serde_bare::from_slice(&encoded).expect("bare decode runtime");
-    assert_eq!(decoded, GuestRuntimeKind::Python);
-}
-
-#[test]
-fn codec_round_trips_authenticated_setup_and_session_messages() {
-    let codec = NativeFrameCodec::default();
-    let frame = ProtocolFrame::Request(RequestFrame::new(
-        1,
-        OwnershipScope::connection("conn-1"),
-        RequestPayload::Authenticate(AuthenticateRequest {
-            client_name: "packages/core".to_string(),
-            auth_token: "signed-token".to_string(),
-            protocol_version: secure_exec_sidecar::wire::PROTOCOL_VERSION,
-            bridge_version: secure_exec_bridge::bridge_contract().version,
-        }),
-    ));
-
-    let encoded = codec.encode(&frame).expect("encode");
-    let decoded = codec.decode(&encoded).expect("decode");
-
-    assert_eq!(decoded, frame);
-
-    let session_frame = ProtocolFrame::Request(RequestFrame::new(
-        2,
-        OwnershipScope::connection("conn-1"),
-        RequestPayload::OpenSession(OpenSessionRequest {
-            placement: SidecarPlacement::SidecarPlacementShared(SidecarPlacementShared {
-                pool: Some("default".to_string()),
-            }),
-            metadata: std::collections::HashMap::from([(
-                String::from("owner"),
-                String::from("packages/core"),
-            )]),
-        }),
-    ));
-
-    let encoded = codec.encode(&session_frame).expect("encode session");
-    let decoded = codec.decode(&encoded).expect("decode session");
-
-    assert_eq!(decoded, session_frame);
-}
-
-#[test]
-fn codec_round_trips_vm_scoped_events_and_responses() {
-    let codec = NativeFrameCodec::default();
-    let response = ProtocolFrame::Response(ResponseFrame::new(
-        44,
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        ResponsePayload::ProcessStarted(ProcessStartedResponse {
-            process_id: "proc-1".to_string(),
-            pid: None,
-        }),
-    ));
-
-    let event = ProtocolFrame::Event(EventFrame::new(
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        secure_exec_sidecar::protocol::EventPayload::VmLifecycle(VmLifecycleEvent {
-            state: VmLifecycleState::Ready,
-        }),
-    ));
-
-    assert_eq!(
-        codec.decode(&codec.encode(&response).unwrap()).unwrap(),
-        response
-    );
-    assert_eq!(codec.decode(&codec.encode(&event).unwrap()).unwrap(), event);
-}
-
-#[test]
-#[ignore = "manual microbench for Ext envelope event encoding overhead"]
-fn ext_envelope_event_encoding_microbench() {
-    let codec = NativeFrameCodec::with_payload_codec(1024 * 1024, NativePayloadCodec::Bare);
-    let ownership = OwnershipScope::vm("conn-1", "session-1", "vm-1");
-    let process_output = ProcessOutputEvent {
-        process_id: String::from("proc-1"),
-        channel: StreamChannel::Stdout,
-        chunk: vec![b'x'; 256],
-    };
-    let direct_frame = ProtocolFrame::Event(EventFrame::new(
-        ownership.clone(),
-        EventPayload::ProcessOutput(process_output.clone()),
-    ));
-    let iterations = 200_000;
-
-    let direct_start = Instant::now();
-    let mut direct_bytes = 0usize;
-    for _ in 0..iterations {
-        let encoded = codec
-            .encode(black_box(&direct_frame))
-            .expect("encode direct");
-        direct_bytes = direct_bytes.wrapping_add(encoded.len());
-        black_box(encoded);
-    }
-    let direct_elapsed = direct_start.elapsed();
-
-    let ext_start = Instant::now();
-    let mut ext_bytes = 0usize;
-    for _ in 0..iterations {
-        let inner = serde_bare::to_vec(black_box(&process_output)).expect("encode inner output");
-        let ext_frame = ProtocolFrame::Event(EventFrame::new(
-            ownership.clone(),
-            EventPayload::Ext(ExtEnvelope {
-                namespace: String::from("dev.rivet.secure-exec.acp"),
-                payload: inner,
-            }),
-        ));
-        let encoded = codec.encode(black_box(&ext_frame)).expect("encode ext");
-        ext_bytes = ext_bytes.wrapping_add(encoded.len());
-        black_box(encoded);
-    }
-    let ext_elapsed = ext_start.elapsed();
-
-    let direct_ns = direct_elapsed.as_nanos() as f64 / iterations as f64;
-    let ext_ns = ext_elapsed.as_nanos() as f64 / iterations as f64;
-    println!(
-        "ext_envelope_event_encoding_microbench direct_ns_per_event={direct_ns:.2} ext_ns_per_event={ext_ns:.2} ratio={:.2} direct_avg_bytes={:.1} ext_avg_bytes={:.1}",
-        ext_ns / direct_ns,
-        direct_bytes as f64 / iterations as f64,
-        ext_bytes as f64 / iterations as f64
-    );
-}
-
-#[test]
-fn codec_round_trips_sidecar_request_and_response_frames() {
-    let codec = NativeFrameCodec::default();
-    let request = ProtocolFrame::SidecarRequest(SidecarRequestFrame::new(
-        -7,
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        SidecarRequestPayload::HostCallback(HostCallbackRequest {
-            invocation_id: "invoke-1".to_string(),
-            callback_key: "toolkit:tool".to_string(),
-            input: json!({ "prompt": "ping" }).to_string(),
-            timeout_ms: 5_000,
-        }),
-    ));
-    let response = ProtocolFrame::SidecarResponse(SidecarResponseFrame::new(
-        -7,
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        SidecarResponsePayload::HostCallbackResult(HostCallbackResultResponse {
-            invocation_id: "invoke-1".to_string(),
-            result: Some(json!({ "ok": true }).to_string()),
-            error: None,
-        }),
-    ));
-
-    assert_eq!(
-        codec.decode(&codec.encode(&request).unwrap()).unwrap(),
-        request
-    );
-    assert_eq!(
-        codec.decode(&codec.encode(&response).unwrap()).unwrap(),
-        response
-    );
-}
-
-#[test]
-fn bare_codec_round_trips_frames_with_json_utf8_fields() {
-    let codec = NativeFrameCodec::with_payload_codec(1024 * 1024, NativePayloadCodec::Bare);
-    let frame = ProtocolFrame::SidecarRequest(SidecarRequestFrame::new(
-        -12,
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        SidecarRequestPayload::HostCallback(HostCallbackRequest {
-            invocation_id: "invoke-12".to_string(),
-            callback_key: "toolkit:search".to_string(),
-            input: json!({
-                "cursor": "abc123",
-                "includeSchema": true,
-            })
-            .to_string(),
-            timeout_ms: 2_000,
-        }),
-    ));
-
-    let encoded = codec.encode(&frame).expect("encode bare frame");
-    assert_eq!(
-        encoded[4], 3,
-        "BARE sidecar_request frames should start with tag 3"
-    );
-
-    let decoded = codec.decode(&encoded).expect("decode bare frame");
-    assert_eq!(decoded, frame);
-}
-
-#[test]
-fn bare_codec_round_trips_authenticate_request_frames() {
-    let codec = NativeFrameCodec::with_payload_codec(1024 * 1024, NativePayloadCodec::Bare);
-    let frame = ProtocolFrame::Request(RequestFrame::new(
-        1,
-        OwnershipScope::connection("client-hint"),
-        RequestPayload::Authenticate(AuthenticateRequest {
-            client_name: "packages-core-vitest".to_string(),
-            auth_token: "packages-core-vitest-token".to_string(),
-            protocol_version: secure_exec_sidecar::wire::PROTOCOL_VERSION,
-            bridge_version: secure_exec_bridge::bridge_contract().version,
-        }),
-    ));
-
-    let encoded = codec
-        .encode(&frame)
-        .expect("encode bare authenticate request");
-    let decoded = codec
-        .decode(&encoded)
-        .expect("decode bare authenticate request");
-
-    assert_eq!(decoded, frame);
-}
-
-#[test]
-fn json_codec_round_trips_guest_filesystem_requests_with_optional_fields() {
-    let codec = NativeFrameCodec::default();
-    let frame = ProtocolFrame::Request(RequestFrame::new(
-        17,
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        RequestPayload::GuestFilesystemCall(GuestFilesystemCallRequest {
-            operation: GuestFilesystemOperation::Truncate,
-            path: String::from("/workspace/hard.txt"),
-            destination_path: Some(String::from("/workspace/note.txt")),
-            target: Some(String::from("/workspace/target.txt")),
-            content: Some(String::from("stdio-sidecar-fs")),
-            encoding: None,
-            recursive: true,
-            max_depth: None,
-            mode: Some(0o644),
-            uid: Some(1000),
-            gid: Some(1000),
-            atime_ms: Some(1_700_000_000_000),
-            mtime_ms: Some(1_710_000_000_000),
-            len: Some(5),
-            offset: None,
-        }),
-    ));
-
-    let encoded = codec
-        .encode(&frame)
-        .expect("encode json guest filesystem request");
-    let decoded = codec
-        .decode(&encoded)
-        .expect("decode json guest filesystem request");
-
-    assert_eq!(decoded, frame);
-}
-
-#[test]
-fn bare_codec_round_trips_guest_filesystem_requests_with_optional_fields() {
-    let codec = NativeFrameCodec::with_payload_codec(1024 * 1024, NativePayloadCodec::Bare);
-    let frame = ProtocolFrame::Request(RequestFrame::new(
-        17,
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        RequestPayload::GuestFilesystemCall(GuestFilesystemCallRequest {
-            operation: GuestFilesystemOperation::Truncate,
-            path: String::from("/workspace/hard.txt"),
-            destination_path: Some(String::from("/workspace/note.txt")),
-            target: Some(String::from("/workspace/target.txt")),
-            content: Some(String::from("stdio-sidecar-fs")),
-            encoding: None,
-            recursive: true,
-            max_depth: None,
-            mode: Some(0o644),
-            uid: Some(1000),
-            gid: Some(1000),
-            atime_ms: Some(1_700_000_000_000),
-            mtime_ms: Some(1_710_000_000_000),
-            len: Some(5),
-            offset: None,
-        }),
-    ));
-
-    let encoded = codec
-        .encode(&frame)
-        .expect("encode bare guest filesystem request");
-    let decoded = codec
-        .decode(&encoded)
-        .expect("decode bare guest filesystem request");
-
-    assert_eq!(decoded, frame);
-}
-
-#[test]
-fn bare_codec_round_trips_root_filesystem_lower_descriptors() {
-    let lower = RootFilesystemLowerDescriptor::BundledBaseFilesystemLower;
-    let encoded = serde_bare::to_vec(&lower).expect("encode bare root filesystem lower");
-    let decoded: RootFilesystemLowerDescriptor =
-        serde_bare::from_slice(&encoded).expect("decode bare root filesystem lower");
-
-    assert_eq!(decoded, lower);
-}
-
-#[test]
-fn bare_codec_round_trips_root_filesystem_descriptors_with_snapshot_lowers() {
-    let descriptor = RootFilesystemDescriptor {
-        disable_default_base_layer: true,
-        lowers: vec![
-            RootFilesystemLowerDescriptor::SnapshotRootFilesystemLower(
-                SnapshotRootFilesystemLower {
-                    entries: vec![RootFilesystemEntry {
-                        path: String::from("/workspace"),
-                        kind: RootFilesystemEntryKind::Directory,
-                        ..Default::default()
-                    }],
-                },
-            ),
-            RootFilesystemLowerDescriptor::BundledBaseFilesystemLower,
-        ],
-        ..Default::default()
-    };
-
-    let encoded = serde_bare::to_vec(&descriptor).expect("encode bare root filesystem descriptor");
-    let decoded: RootFilesystemDescriptor =
-        serde_bare::from_slice(&encoded).expect("decode bare root filesystem descriptor");
-
-    assert_eq!(decoded, descriptor);
-}
-
-#[test]
-fn bare_codec_round_trips_create_vm_requests_with_snapshot_lowers() {
-    let codec = NativeFrameCodec::with_payload_codec(1024 * 1024, NativePayloadCodec::Bare);
-    let frame = ProtocolFrame::Request(RequestFrame::new(
-        2,
-        OwnershipScope::session("conn-1", "session-1"),
-        RequestPayload::CreateVm(CreateVmRequest::legacy_test_config(
-            GuestRuntimeKind::JavaScript,
-            std::collections::HashMap::from([(String::from("cwd"), String::from("/workspace"))]),
-            RootFilesystemDescriptor {
-                disable_default_base_layer: true,
-                lowers: vec![
-                    RootFilesystemLowerDescriptor::SnapshotRootFilesystemLower(
-                        SnapshotRootFilesystemLower {
-                            entries: vec![RootFilesystemEntry {
-                                path: String::from("/workspace"),
-                                kind: RootFilesystemEntryKind::Directory,
-                                ..Default::default()
-                            }],
-                        },
-                    ),
-                    RootFilesystemLowerDescriptor::BundledBaseFilesystemLower,
-                ],
-                ..Default::default()
-            },
-            None,
-        )),
-    ));
-
-    let encoded = codec.encode(&frame).expect("encode bare create_vm request");
-    let decoded = codec
-        .decode(&encoded)
-        .expect("decode bare create_vm request");
-
-    assert_eq!(decoded, frame);
-}
-
-#[test]
-fn codec_auto_detects_json_and_bare_payloads() {
-    let json_codec = NativeFrameCodec::default();
-    let bare_codec = NativeFrameCodec::with_payload_codec(1024 * 1024, NativePayloadCodec::Bare);
-    let frame = ProtocolFrame::SidecarRequest(SidecarRequestFrame::new(
-        -11,
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        SidecarRequestPayload::HostCallback(HostCallbackRequest {
-            invocation_id: "invoke-1".to_string(),
-            callback_key: "toolkit:search".to_string(),
-            input: json!({ "query": "ping" }).to_string(),
-            timeout_ms: 2_000,
-        }),
-    ));
-
-    let json_encoded = json_codec.encode(&frame).expect("encode json frame");
-    let bare_encoded = bare_codec.encode(&frame).expect("encode bare frame");
-
-    assert_eq!(json_codec.decode(&json_encoded).unwrap(), frame);
-    assert_eq!(json_codec.decode(&bare_encoded).unwrap(), frame);
-}
-
-#[test]
-fn codec_rejects_invalid_ownership_binding() {
-    let frame = ProtocolFrame::Request(RequestFrame::new(
-        9,
-        OwnershipScope::connection("conn-1"),
-        RequestPayload::CreateVm(CreateVmRequest::legacy_test_config(
-            GuestRuntimeKind::JavaScript,
-            std::collections::HashMap::new(),
-            Default::default(),
-            None,
-        )),
-    ));
-
-    assert_eq!(
-        validate_frame(&frame),
-        Err(ProtocolCodecError::InvalidOwnershipScope {
-            required: secure_exec_sidecar::protocol::OwnershipRequirement::Session,
-            actual: secure_exec_sidecar::protocol::OwnershipRequirement::Connection,
-        }),
-    );
-}
-
-#[test]
-fn codec_rejects_frames_over_the_configured_limit() {
-    let codec = NativeFrameCodec::new(64);
-    let frame = ProtocolFrame::Request(RequestFrame::new(
-        11,
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        RequestPayload::WriteStdin(WriteStdinRequest {
-            process_id: "proc-1".to_string(),
-            chunk: "x".repeat(256).into_bytes(),
-        }),
-    ));
-
-    assert!(matches!(
-        codec.encode(&frame),
-        Err(ProtocolCodecError::FrameTooLarge { .. })
-    ));
-
-    let oversized_declared_len = 65_u32;
-    let mut encoded = oversized_declared_len.to_be_bytes().to_vec();
-    encoded.extend(std::iter::repeat_n(0_u8, oversized_declared_len as usize));
-    assert_eq!(
-        codec.decode(&encoded),
-        Err(ProtocolCodecError::FrameTooLarge {
-            size: oversized_declared_len as usize,
-            max: 64,
-        })
-    );
-}
-
-#[test]
-fn response_tracker_enforces_request_response_correlation_and_duplicate_hardening() {
-    let mut tracker = ResponseTracker::default();
-    let request = RequestFrame::new(
-        77,
-        OwnershipScope::session("conn-1", "session-1"),
-        RequestPayload::CreateVm(CreateVmRequest::legacy_test_config(
-            GuestRuntimeKind::JavaScript,
-            std::collections::HashMap::new(),
-            Default::default(),
-            None,
-        )),
-    );
-    tracker
-        .register_request(&request)
-        .expect("register request");
-
-    let response = ResponseFrame::new(
-        77,
-        OwnershipScope::session("conn-1", "session-1"),
-        ResponsePayload::VmCreated(secure_exec_sidecar::protocol::VmCreatedResponse {
-            vm_id: "vm-1".to_string(),
-        }),
-    );
-    tracker.accept_response(&response).expect("accept response");
-
-    assert_eq!(
-        tracker.accept_response(&response),
-        Err(ResponseTrackerError::DuplicateResponse { request_id: 77 }),
-    );
-    assert_eq!(
-        tracker.accept_response(&ResponseFrame::new(
-            88,
-            OwnershipScope::session("conn-1", "session-1"),
-            ResponsePayload::VmCreated(secure_exec_sidecar::protocol::VmCreatedResponse {
-                vm_id: "vm-2".to_string(),
-            }),
-        )),
-        Err(ResponseTrackerError::UnmatchedResponse { request_id: 88 }),
-    );
-}
-
-#[test]
-fn response_tracker_rejects_kind_and_ownership_mismatches() {
-    let mut tracker = ResponseTracker::default();
-    let request = RequestFrame::new(
-        90,
-        OwnershipScope::session("conn-1", "session-1"),
-        RequestPayload::CreateVm(CreateVmRequest::legacy_test_config(
-            GuestRuntimeKind::WebAssembly,
-            std::collections::HashMap::from([(String::from("runtime"), String::from("wasm"))]),
-            Default::default(),
-            None,
-        )),
-    );
-    tracker
-        .register_request(&request)
-        .expect("register request");
-
-    assert_eq!(
-        tracker.accept_response(&ResponseFrame::new(
-            90,
-            OwnershipScope::session("conn-1", "session-2"),
-            ResponsePayload::VmCreated(secure_exec_sidecar::protocol::VmCreatedResponse {
-                vm_id: "vm-1".to_string(),
-            }),
-        )),
-        Err(ResponseTrackerError::OwnershipMismatch {
-            request_id: 90,
-            expected: Box::new(OwnershipScope::session("conn-1", "session-1")),
-            actual: Box::new(OwnershipScope::session("conn-1", "session-2")),
-        }),
-    );
-    tracker
-        .accept_response(&ResponseFrame::new(
-            90,
-            OwnershipScope::session("conn-1", "session-1"),
-            ResponsePayload::VmCreated(secure_exec_sidecar::protocol::VmCreatedResponse {
-                vm_id: "vm-1".to_string(),
-            }),
-        ))
-        .expect("valid response should still be pending after ownership mismatch");
-
-    let mut tracker = ResponseTracker::default();
-    tracker
-        .register_request(&request)
-        .expect("register request again");
-
-    assert_eq!(
-        tracker.accept_response(&ResponseFrame::new(
-            90,
-            OwnershipScope::session("conn-1", "session-1"),
-            ResponsePayload::Authenticated(AuthenticatedResponse {
-                sidecar_id: "sidecar-1".to_string(),
-                connection_id: "conn-1".to_string(),
-                max_frame_bytes: 1024,
-            }),
-        )),
-        Err(ResponseTrackerError::ResponseKindMismatch {
-            request_id: 90,
-            expected: "vm_created".to_string(),
-            actual: "authenticated".to_string(),
-        }),
-    );
-    tracker
-        .accept_response(&ResponseFrame::new(
-            90,
-            OwnershipScope::session("conn-1", "session-1"),
-            ResponsePayload::VmCreated(secure_exec_sidecar::protocol::VmCreatedResponse {
-                vm_id: "vm-1".to_string(),
-            }),
-        ))
-        .expect("valid response should still be pending after kind mismatch");
-}
-
-#[test]
-fn response_tracker_accepts_zombie_timer_count_responses() {
-    let mut tracker = ResponseTracker::default();
-    let request = RequestFrame::new(
-        91,
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        RequestPayload::GetZombieTimerCount(GetZombieTimerCountRequest::default()),
-    );
-    tracker
-        .register_request(&request)
-        .expect("register request");
-
-    tracker
-        .accept_response(&ResponseFrame::new(
-            91,
-            OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-            ResponsePayload::ZombieTimerCount(
-                secure_exec_sidecar::protocol::ZombieTimerCountResponse { count: 2 },
-            ),
-        ))
-        .expect("accept response");
-}
-
-#[test]
-fn response_tracker_caps_completed_entries() {
-    let mut tracker = ResponseTracker::with_completed_cap(3);
-
-    for request_id in 1..=10 {
-        let request = RequestFrame::new(
-            request_id,
-            OwnershipScope::connection("conn-1"),
-            RequestPayload::Authenticate(AuthenticateRequest {
-                client_name: "packages/core".to_string(),
-                auth_token: format!("token-{request_id}"),
-                protocol_version: secure_exec_sidecar::wire::PROTOCOL_VERSION,
-                bridge_version: secure_exec_bridge::bridge_contract().version,
-            }),
-        );
-        tracker
-            .register_request(&request)
-            .expect("register request");
-        tracker
-            .accept_response(&ResponseFrame::new(
-                request_id,
-                OwnershipScope::connection("conn-1"),
-                ResponsePayload::Authenticated(AuthenticatedResponse {
-                    sidecar_id: "sidecar-1".to_string(),
-                    connection_id: "conn-1".to_string(),
-                    max_frame_bytes: 1024,
-                }),
-            ))
-            .expect("accept response");
-
-        assert!(
-            tracker.completed_count() <= 3,
-            "completed set should stay bounded"
-        );
-    }
-
-    assert_eq!(tracker.completed_count(), 3);
-}
-
-#[test]
-fn sidecar_response_tracker_enforces_request_response_correlation() {
-    let mut tracker = SidecarResponseTracker::default();
-    let request = SidecarRequestFrame::new(
-        -9,
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        SidecarRequestPayload::HostCallback(HostCallbackRequest {
-            invocation_id: "invoke-1".to_string(),
-            callback_key: "toolkit:tool".to_string(),
-            input: json!({ "value": 1 }).to_string(),
-            timeout_ms: 1_000,
-        }),
-    );
-    tracker
-        .register_request(&request)
-        .expect("register sidecar request");
-
-    tracker
-        .accept_response(&SidecarResponseFrame::new(
-            -9,
-            OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-            SidecarResponsePayload::HostCallbackResult(HostCallbackResultResponse {
-                invocation_id: "invoke-1".to_string(),
-                result: Some(json!({ "ok": true }).to_string()),
-                error: None,
-            }),
-        ))
-        .expect("accept sidecar response");
-
-    assert_eq!(
-        tracker.accept_response(&SidecarResponseFrame::new(
-            -9,
-            OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-            SidecarResponsePayload::HostCallbackResult(HostCallbackResultResponse {
-                invocation_id: "invoke-1".to_string(),
-                result: None,
-                error: Some("duplicate".to_string()),
-            }),
-        )),
-        Err(SidecarResponseTrackerError::DuplicateResponse { request_id: -9 }),
-    );
-}
-
-#[test]
-fn sidecar_response_tracker_keeps_pending_entries_after_mismatches() {
-    let request = SidecarRequestFrame::new(
-        -10,
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        SidecarRequestPayload::HostCallback(HostCallbackRequest {
-            invocation_id: "invoke-10".to_string(),
-            callback_key: "toolkit:tool".to_string(),
-            input: json!({ "value": 10 }).to_string(),
-            timeout_ms: 1_000,
-        }),
-    );
-
-    let mut tracker = SidecarResponseTracker::default();
-    tracker
-        .register_request(&request)
-        .expect("register sidecar request");
-    assert_eq!(
-        tracker.accept_response(&SidecarResponseFrame::new(
-            -10,
-            OwnershipScope::vm("conn-1", "session-1", "vm-2"),
-            SidecarResponsePayload::HostCallbackResult(HostCallbackResultResponse {
-                invocation_id: "invoke-10".to_string(),
-                result: Some(json!({ "ok": true }).to_string()),
-                error: None,
-            }),
-        )),
-        Err(SidecarResponseTrackerError::OwnershipMismatch {
-            request_id: -10,
-            expected: Box::new(OwnershipScope::vm("conn-1", "session-1", "vm-1")),
-            actual: Box::new(OwnershipScope::vm("conn-1", "session-1", "vm-2")),
-        }),
-    );
-    tracker
-        .accept_response(&SidecarResponseFrame::new(
-            -10,
-            OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-            SidecarResponsePayload::HostCallbackResult(HostCallbackResultResponse {
-                invocation_id: "invoke-10".to_string(),
-                result: Some(json!({ "ok": true }).to_string()),
-                error: None,
-            }),
-        ))
-        .expect("valid sidecar response should still be pending after ownership mismatch");
-
-    let mut tracker = SidecarResponseTracker::default();
-    tracker
-        .register_request(&request)
-        .expect("register sidecar request again");
-    assert_eq!(
-        tracker.accept_response(&SidecarResponseFrame::new(
-            -10,
-            OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-            SidecarResponsePayload::JsBridgeResult(JsBridgeResultResponse {
-                call_id: "bridge-10".to_string(),
-                result: Some(json!({ "ok": true }).to_string()),
-                error: None,
-            }),
-        )),
-        Err(SidecarResponseTrackerError::ResponseKindMismatch {
-            request_id: -10,
-            expected: "host_callback_result".to_string(),
-            actual: "js_bridge_result".to_string(),
-        }),
-    );
-    tracker
-        .accept_response(&SidecarResponseFrame::new(
-            -10,
-            OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-            SidecarResponsePayload::HostCallbackResult(HostCallbackResultResponse {
-                invocation_id: "invoke-10".to_string(),
-                result: Some(json!({ "ok": true }).to_string()),
-                error: None,
-            }),
-        ))
-        .expect("valid sidecar response should still be pending after kind mismatch");
-}
-
-#[test]
-fn sidecar_response_tracker_caps_completed_entries() {
-    let mut tracker = SidecarResponseTracker::with_completed_cap(3);
-
-    for sequence in 1..=10 {
-        let request_id = -sequence;
-        let request = SidecarRequestFrame::new(
-            request_id,
-            OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-            SidecarRequestPayload::HostCallback(HostCallbackRequest {
-                invocation_id: format!("invoke-{sequence}"),
-                callback_key: "toolkit:tool".to_string(),
-                input: json!({ "value": sequence }).to_string(),
-                timeout_ms: 1_000,
-            }),
-        );
-        tracker
-            .register_request(&request)
-            .expect("register sidecar request");
-        tracker
-            .accept_response(&SidecarResponseFrame::new(
-                request_id,
-                OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-                SidecarResponsePayload::HostCallbackResult(HostCallbackResultResponse {
-                    invocation_id: format!("invoke-{sequence}"),
-                    result: Some(json!({ "ok": true }).to_string()),
-                    error: None,
-                }),
-            ))
-            .expect("accept sidecar response");
-
-        assert!(
-            tracker.completed_count() <= 3,
-            "sidecar completed set should stay bounded"
-        );
-    }
-
-    assert_eq!(tracker.completed_count(), 3);
-}
-
-#[test]
-fn codec_rejects_request_id_direction_mismatches() {
-    let zero_request = ProtocolFrame::Request(RequestFrame::new(
-        0,
-        OwnershipScope::connection("conn-1"),
-        RequestPayload::Authenticate(AuthenticateRequest {
-            client_name: "packages/core".to_string(),
-            auth_token: "signed-token".to_string(),
-            protocol_version: secure_exec_sidecar::wire::PROTOCOL_VERSION,
-            bridge_version: secure_exec_bridge::bridge_contract().version,
-        }),
-    ));
-    assert_eq!(
-        validate_frame(&zero_request),
-        Err(ProtocolCodecError::InvalidRequestId)
-    );
-
-    let host_response = ProtocolFrame::Response(ResponseFrame::new(
-        -1,
-        OwnershipScope::connection("conn-1"),
-        ResponsePayload::Authenticated(AuthenticatedResponse {
-            sidecar_id: "sidecar-1".to_string(),
-            connection_id: "conn-1".to_string(),
-            max_frame_bytes: 1024,
-        }),
-    ));
-    assert_eq!(
-        validate_frame(&host_response),
-        Err(ProtocolCodecError::InvalidRequestDirection {
-            request_id: -1,
-            expected: secure_exec_sidecar::protocol::RequestDirection::Host,
-        }),
-    );
-
-    let sidecar_request = ProtocolFrame::SidecarRequest(SidecarRequestFrame::new(
-        1,
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        SidecarRequestPayload::HostCallback(HostCallbackRequest {
-            invocation_id: "invoke-2".to_string(),
-            callback_key: "toolkit:tool".to_string(),
-            input: json!({}).to_string(),
-            timeout_ms: 100,
-        }),
-    ));
-    assert_eq!(
-        validate_frame(&sidecar_request),
-        Err(ProtocolCodecError::InvalidRequestDirection {
-            request_id: 1,
-            expected: secure_exec_sidecar::protocol::RequestDirection::Sidecar,
-        }),
-    );
-}
-
-#[test]
-fn schema_supports_configuration_and_structured_events() {
-    let frame = ProtocolFrame::Request(RequestFrame::new(
-        23,
-        OwnershipScope::vm("conn-1", "session-1", "vm-1"),
-        RequestPayload::ConfigureVm(secure_exec_sidecar::protocol::ConfigureVmRequest {
-            mounts: vec![secure_exec_sidecar::protocol::MountDescriptor {
-                guest_path: "/workspace".to_string(),
-                read_only: false,
-                plugin: secure_exec_sidecar::protocol::MountPluginDescriptor {
-                    id: "host_dir".to_string(),
-                    config: json!({
-                        "hostPath": "/tmp/project",
-                        "readOnly": false,
-                    })
-                    .to_string(),
-                },
-            }],
-            software: vec![SoftwareDescriptor {
-                package_name: "@secure-exec/core".to_string(),
-                root: "/pkg".to_string(),
-            }],
-            permissions: Some(PermissionsPolicy {
-                fs: None,
-                network: Some(PatternPermissionScope::PermissionMode(PermissionMode::Ask)),
-                child_process: None,
-                process: None,
-                env: None,
-                binding: None,
-            }),
-            module_access_cwd: None,
-            instructions: vec!["keep timing mitigation enabled".to_string()],
-            projected_modules: vec![ProjectedModuleDescriptor {
-                package_name: "workspace".to_string(),
-                entrypoint: "/workspace/index.ts".to_string(),
-            }],
-            command_permissions: std::collections::HashMap::new(),
-            loopback_exempt_ports: Vec::new(),
-            packages: Vec::new(),
-            packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-        }),
-    ));
-
-    validate_frame(&frame).expect("configuration request is valid");
-
-    let event = EventFrame::new(
-        OwnershipScope::session("conn-1", "session-1"),
-        secure_exec_sidecar::protocol::EventPayload::Structured(StructuredEvent {
-            name: "guest.lifecycle".to_string(),
-            detail: std::collections::HashMap::from([(
-                String::from("state"),
-                String::from("ready"),
-            )]),
-        }),
-    );
-    validate_frame(&ProtocolFrame::Event(event)).expect("structured event is valid");
-}
-
-#[test]
-fn checked_in_bare_schema_covers_all_top_level_frame_payload_types() {
-    for type_name in [
-        "type ProtocolFrame union {",
-        "type RequestPayload union {",
-        "type ResponsePayload union {",
-        "type EventPayload union {",
-        "type SidecarRequestPayload union {",
-        "type SidecarResponsePayload union {",
-        "AuthenticateRequest",
-        "OpenSessionRequest",
-        "CreateVmRequest",
-        "DisposeVmRequest",
-        "BootstrapRootFilesystemRequest",
-        "ConfigureVmRequest",
-        "RegisterHostCallbacksRequest",
-        "CreateLayerRequest",
-        "SealLayerRequest",
-        "ImportSnapshotRequest",
-        "ExportSnapshotRequest",
-        "CreateOverlayRequest",
-        "GuestFilesystemCallRequest",
-        "SnapshotRootFilesystemRequest",
-        "ExecuteRequest",
-        "WriteStdinRequest",
-        "CloseStdinRequest",
-        "KillProcessRequest",
-        "GetProcessSnapshotRequest",
-        "GetResourceSnapshotRequest",
-        "FindListenerRequest",
-        "FindBoundUdpRequest",
-        "GetSignalStateRequest",
-        "GetZombieTimerCountRequest",
-        "HostFilesystemCallRequest",
-        "PersistenceLoadRequest",
-        "PersistenceFlushRequest",
-        "VmFetchRequest",
-        "ExtEnvelope",
-        "AuthenticatedResponse",
-        "SessionOpenedResponse",
-        "VmCreatedResponse",
-        "VmDisposedResponse",
-        "RootFilesystemBootstrappedResponse",
-        "VmConfiguredResponse",
-        "HostCallbacksRegisteredResponse",
-        "LayerCreatedResponse",
-        "LayerSealedResponse",
-        "SnapshotImportedResponse",
-        "SnapshotExportedResponse",
-        "OverlayCreatedResponse",
-        "GuestFilesystemResultResponse",
-        "RootFilesystemSnapshotResponse",
-        "ProcessStartedResponse",
-        "StdinWrittenResponse",
-        "StdinClosedResponse",
-        "ProcessKilledResponse",
-        "ProcessSnapshotResponse",
-        "ResourceSnapshotResponse",
-        "ListenerSnapshotResponse",
-        "BoundUdpSnapshotResponse",
-        "SignalStateResponse",
-        "ZombieTimerCountResponse",
-        "FilesystemResultResponse",
-        "PermissionDecisionResponse",
-        "PersistenceStateResponse",
-        "PersistenceFlushedResponse",
-        "RejectedResponse",
-        "VmFetchResponse",
-        "VmLifecycleEvent",
-        "ProcessOutputEvent",
-        "ProcessExitedEvent",
-        "StructuredEvent",
-        "HostCallbackRequest",
-        "JsBridgeCallRequest",
-        "HostCallbackResultResponse",
-        "JsBridgeResultResponse",
-    ] {
-        assert!(
-            BARE_SCHEMA_V1.contains(type_name),
-            "schema is missing `{type_name}`"
-        );
-    }
-}
-
-#[test]
-fn checked_in_bare_migration_plan_documents_dual_stack_constraints() {
-    for needle in [
-        "4-byte big-endian length prefix",
-        "ProtocolSchema.version",
-        "request_id",
-        "positive",
-        "negative",
-        "JsonUtf8",
-        "first successfully decoded frame",
-        "JSON frames begin with `{`",
-        "delete JSON encoding",
-    ] {
-        assert!(
-            BARE_MIGRATION_PLAN.contains(needle),
-            "migration plan is missing `{needle}`"
-        );
-    }
-}
diff --git a/crates/sidecar/tests/python.rs b/crates/sidecar/tests/python.rs
deleted file mode 100644
index 767974d68..000000000
--- a/crates/sidecar/tests/python.rs
+++ /dev/null
@@ -1,4031 +0,0 @@
-mod support;
-
-use nix::libc;
-use secure_exec_sidecar::wire::{
-    BootstrapRootFilesystemRequest, CloseStdinRequest, ConfigureVmRequest, CreateVmRequest,
-    EventPayload, ExecuteRequest, GuestFilesystemCallRequest, GuestFilesystemOperation,
-    GuestRuntimeKind, KillProcessRequest, MountDescriptor, MountPluginDescriptor, OwnershipScope,
-    PatternPermissionRule, PatternPermissionRuleSet, PatternPermissionScope, PermissionMode,
-    PermissionsPolicy, RequestId, RequestPayload, ResponsePayload, RootFilesystemDescriptor,
-    RootFilesystemEntry, RootFilesystemEntryEncoding, RootFilesystemEntryKind, RootFilesystemMode,
-    StreamChannel, WriteStdinRequest,
-};
-use serde_json::{json, Value};
-use std::collections::HashMap;
-use std::fs;
-use std::io::{Read, Write};
-use std::net::{TcpListener, UdpSocket};
-use std::os::unix::fs::symlink;
-use std::path::{Component, Path, PathBuf};
-use std::sync::{
-    atomic::{AtomicBool, Ordering},
-    Arc,
-};
-use std::thread;
-use std::time::{Duration, Instant};
-use support::{
-    assert_node_available, authenticate_wire, create_vm_wire, new_sidecar, open_session_wire,
-    temp_dir, wire_permissions_allow_all, wire_request, wire_session, wire_vm, write_fixture,
-};
-
-const MAX_PROCESS_STREAM_BYTES: usize = 1024 * 1024;
-
-#[derive(Debug, Default)]
-struct ProcessResult {
-    stdout: Vec<u8>,
-    stderr: Vec<u8>,
-    exit_code: Option<i32>,
-}
-
-fn append_stream_chunk(stream: &mut Vec<u8>, chunk: &[u8], label: &str) {
-    assert!(
-        stream.len().saturating_add(chunk.len()) <= MAX_PROCESS_STREAM_BYTES,
-        "{label} exceeded {MAX_PROCESS_STREAM_BYTES} bytes"
-    );
-    stream.extend_from_slice(chunk);
-}
-
-fn chunk_contains(chunk: &[u8], needle: &str) -> bool {
-    let needle = needle.as_bytes();
-    if needle.is_empty() {
-        return true;
-    }
-    chunk.windows(needle.len()).any(|window| window == needle)
-}
-
-fn root_dir(path: impl Into<String>) -> RootFilesystemEntry {
-    root_entry(path, RootFilesystemEntryKind::Directory, None, None)
-}
-
-fn root_file(
-    path: impl Into<String>,
-    content: impl Into<String>,
-    encoding: Option<RootFilesystemEntryEncoding>,
-) -> RootFilesystemEntry {
-    root_entry(
-        path,
-        RootFilesystemEntryKind::File,
-        Some(content.into()),
-        encoding,
-    )
-}
-
-fn root_entry(
-    path: impl Into<String>,
-    kind: RootFilesystemEntryKind,
-    content: Option<String>,
-    encoding: Option<RootFilesystemEntryEncoding>,
-) -> RootFilesystemEntry {
-    RootFilesystemEntry {
-        path: path.into(),
-        kind,
-        mode: None,
-        uid: None,
-        gid: None,
-        content,
-        encoding,
-        target: None,
-        executable: false,
-    }
-}
-
-fn collect_process_output(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-) -> (String, String, i32) {
-    collect_process_output_with_timeout(
-        sidecar,
-        connection_id,
-        session_id,
-        vm_id,
-        process_id,
-        Duration::from_secs(10),
-    )
-}
-
-fn collect_process_output_with_timeout(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    timeout: Duration,
-) -> (String, String, i32) {
-    let ownership = wire_session(connection_id, session_id);
-    let deadline = Instant::now() + timeout;
-    let mut stdout = Vec::new();
-    let mut stderr = Vec::new();
-    let mut exit = None;
-
-    loop {
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for process events\nstdout:\n{}\nstderr:\n{}",
-            String::from_utf8_lossy(&stdout),
-            String::from_utf8_lossy(&stderr)
-        );
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll sidecar wire event");
-        if let Some(event) = event {
-            assert_eq!(event.ownership, wire_vm(connection_id, session_id, vm_id));
-
-            match event.payload {
-                EventPayload::ProcessOutputEvent(output) if output.process_id == process_id => {
-                    match output.channel {
-                        StreamChannel::Stdout => {
-                            append_stream_chunk(&mut stdout, &output.chunk, "stdout");
-                        }
-                        StreamChannel::Stderr => {
-                            append_stream_chunk(&mut stderr, &output.chunk, "stderr");
-                        }
-                    }
-                }
-                EventPayload::ProcessOutputEvent(_) => {}
-                EventPayload::ProcessExitedEvent(exited) if exited.process_id == process_id => {
-                    exit = Some((exited.exit_code, Instant::now()));
-                }
-                EventPayload::ProcessExitedEvent(_)
-                | EventPayload::VmLifecycleEvent(_)
-                | EventPayload::StructuredEvent(_)
-                | EventPayload::ExtEnvelope(_) => {}
-            }
-        }
-
-        if let Some((exit_code, seen_at)) = exit {
-            if Instant::now().duration_since(seen_at) >= Duration::from_millis(200) {
-                return (
-                    String::from_utf8_lossy(&stdout).into_owned(),
-                    String::from_utf8_lossy(&stderr).into_owned(),
-                    exit_code,
-                );
-            }
-        }
-    }
-}
-
-fn pyodide_asset_dir() -> PathBuf {
-    Path::new(env!("CARGO_MANIFEST_DIR"))
-        .parent()
-        .expect("sidecar crate parent")
-        .join("execution")
-        .join("assets")
-        .join("pyodide")
-}
-
-fn static_file_path(root: &Path, request_target: &str) -> Option<PathBuf> {
-    let path = request_target.split('?').next().unwrap_or(request_target);
-    let mut resolved = root.to_path_buf();
-    for component in Path::new(path.trim_start_matches('/')).components() {
-        match component {
-            Component::Normal(segment) => resolved.push(segment),
-            Component::CurDir => {}
-            Component::ParentDir | Component::RootDir | Component::Prefix(_) => return None,
-        }
-    }
-    Some(resolved)
-}
-
-fn static_file_server_rejects_traversal_paths() {
-    let root = Path::new("/tmp/pyodide-assets");
-    assert_eq!(
-        static_file_path(root, "/click-8.3.1-py3-none-any.whl?download=1"),
-        Some(root.join("click-8.3.1-py3-none-any.whl"))
-    );
-    assert_eq!(static_file_path(root, "/../secret.txt"), None);
-    assert_eq!(static_file_path(root, "/packages/../../secret.txt"), None);
-}
-
-fn spawn_tcp_echo_server() -> (u16, thread::JoinHandle<()>) {
-    let listener = TcpListener::bind("127.0.0.1:0").expect("bind tcp echo listener");
-    listener
-        .set_nonblocking(true)
-        .expect("set nonblocking echo listener");
-    let port = listener.local_addr().expect("echo listener address").port();
-    let handle = thread::spawn(move || {
-        let deadline = Instant::now() + Duration::from_secs(180);
-        while Instant::now() < deadline {
-            match listener.accept() {
-                Ok((mut stream, _)) => {
-                    stream.set_read_timeout(Some(Duration::from_secs(5))).ok();
-                    let mut buf = [0_u8; 4096];
-                    loop {
-                        match stream.read(&mut buf) {
-                            Ok(0) => break,
-                            Ok(n) => {
-                                if stream.write_all(&buf[..n]).is_err() {
-                                    break;
-                                }
-                            }
-                            Err(_) => break,
-                        }
-                    }
-                    return;
-                }
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                    thread::sleep(Duration::from_millis(25));
-                }
-                Err(_) => break,
-            }
-        }
-    });
-    (port, handle)
-}
-
-fn spawn_udp_echo_server() -> (u16, thread::JoinHandle<()>) {
-    let socket = UdpSocket::bind("127.0.0.1:0").expect("bind udp echo socket");
-    socket
-        .set_read_timeout(Some(Duration::from_secs(1)))
-        .expect("set udp echo read timeout");
-    let port = socket.local_addr().expect("udp echo address").port();
-    let handle = thread::spawn(move || {
-        let deadline = Instant::now() + Duration::from_secs(180);
-        let mut buf = [0_u8; 4096];
-        while Instant::now() < deadline {
-            match socket.recv_from(&mut buf) {
-                Ok((n, addr)) => {
-                    let _ = socket.send_to(&buf[..n], addr);
-                    return;
-                }
-                Err(error)
-                    if error.kind() == std::io::ErrorKind::WouldBlock
-                        || error.kind() == std::io::ErrorKind::TimedOut => {}
-                Err(_) => break,
-            }
-        }
-    });
-    (port, handle)
-}
-
-fn spawn_static_file_server(root: PathBuf) -> (u16, thread::JoinHandle<()>) {
-    let listener = TcpListener::bind("127.0.0.1:0").expect("bind static file listener");
-    listener
-        .set_nonblocking(true)
-        .expect("set nonblocking listener");
-    let port = listener.local_addr().expect("listener address").port();
-    let handle = thread::spawn(move || {
-        // Generous windows so a slow/contended Pyodide boot (and micropip's
-        // index-then-wheel fetch gap) still lands inside the server's lifetime.
-        let deadline = Instant::now() + Duration::from_secs(120);
-        let mut served_any = false;
-        let mut idle_since: Option<Instant> = None;
-        while Instant::now() < deadline {
-            match listener.accept() {
-                Ok((mut stream, _)) => {
-                    stream
-                        .set_read_timeout(Some(Duration::from_secs(2)))
-                        .expect("set static file stream read timeout");
-                    stream
-                        .set_write_timeout(Some(Duration::from_secs(2)))
-                        .expect("set static file stream write timeout");
-                    served_any = true;
-                    idle_since = None;
-                    let mut request = [0_u8; 4096];
-                    let read = stream.read(&mut request).unwrap_or(0);
-                    let request_text = String::from_utf8_lossy(&request[..read]);
-                    let path = request_text
-                        .lines()
-                        .next()
-                        .and_then(|line| line.split_whitespace().nth(1))
-                        .unwrap_or("/");
-                    let (status_line, body) = match static_file_path(&root, path) {
-                        Some(file_path) => match fs::read(&file_path) {
-                            Ok(body) => ("HTTP/1.1 200 OK", body),
-                            Err(_) => ("HTTP/1.1 404 Not Found", b"missing".to_vec()),
-                        },
-                        None => ("HTTP/1.1 400 Bad Request", b"bad request".to_vec()),
-                    };
-                    let response = format!(
-                        "{status_line}\r\nContent-Length: {}\r\nConnection: close\r\n\r\n",
-                        body.len()
-                    );
-                    let _ = stream.write_all(response.as_bytes());
-                    let _ = stream.write_all(&body);
-                }
-                Err(error) if error.kind() == std::io::ErrorKind::WouldBlock => {
-                    if served_any {
-                        match idle_since {
-                            Some(start) if start.elapsed() >= Duration::from_secs(20) => break,
-                            Some(_) => {}
-                            None => idle_since = Some(Instant::now()),
-                        }
-                    }
-                    thread::sleep(Duration::from_millis(25));
-                }
-                Err(_) => break,
-            }
-        }
-    });
-    (port, handle)
-}
-
-fn execute_inline_python(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    code: &str,
-) {
-    execute_python_entrypoint_with_env(
-        sidecar,
-        request_id,
-        connection_id,
-        session_id,
-        vm_id,
-        process_id,
-        code,
-        HashMap::new(),
-    );
-}
-
-#[allow(clippy::too_many_arguments)]
-fn execute_inline_python_with_env(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    code: &str,
-    env: HashMap<String, String>,
-) {
-    execute_python_entrypoint_with_env(
-        sidecar,
-        request_id,
-        connection_id,
-        session_id,
-        vm_id,
-        process_id,
-        code,
-        env,
-    );
-}
-
-fn execute_python_entrypoint(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    entrypoint: &str,
-) {
-    execute_python_entrypoint_with_env(
-        sidecar,
-        request_id,
-        connection_id,
-        session_id,
-        vm_id,
-        process_id,
-        entrypoint,
-        HashMap::new(),
-    );
-}
-
-#[allow(clippy::too_many_arguments)]
-fn execute_python_entrypoint_with_env(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    entrypoint: &str,
-    env: HashMap<String, String>,
-) {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_vm(connection_id, session_id, vm_id),
-            RequestPayload::ExecuteRequest(ExecuteRequest {
-                process_id: process_id.to_owned(),
-                command: None,
-                runtime: Some(GuestRuntimeKind::Python),
-                entrypoint: Some(entrypoint.to_owned()),
-                args: Vec::new(),
-                env,
-                cwd: None,
-                wasm_permission_tier: None,
-            }),
-        ))
-        .expect("start python execution through wire");
-
-    match result.response.payload {
-        ResponsePayload::ProcessStartedResponse(response) => {
-            assert_eq!(response.process_id, process_id);
-        }
-        other => panic!("unexpected wire execute response: {other:?}"),
-    }
-}
-
-#[allow(clippy::too_many_arguments)]
-fn execute_javascript_with_env(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    entrypoint: &Path,
-    args: Vec<String>,
-    env: HashMap<String, String>,
-) {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_vm(connection_id, session_id, vm_id),
-            RequestPayload::ExecuteRequest(ExecuteRequest {
-                process_id: process_id.to_owned(),
-                command: None,
-                runtime: Some(GuestRuntimeKind::JavaScript),
-                entrypoint: Some(entrypoint.to_string_lossy().into_owned()),
-                args,
-                env,
-                cwd: None,
-                wasm_permission_tier: None,
-            }),
-        ))
-        .expect("start JavaScript execution through wire");
-
-    match result.response.payload {
-        ResponsePayload::ProcessStartedResponse(response) => {
-            assert_eq!(response.process_id, process_id);
-        }
-        other => panic!("unexpected wire execute response: {other:?}"),
-    }
-}
-
-fn create_vm_with_root_filesystem(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    runtime: GuestRuntimeKind,
-    cwd: &Path,
-    root_filesystem: RootFilesystemDescriptor,
-) -> String {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_session(connection_id, session_id),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                runtime,
-                HashMap::from([(String::from("cwd"), cwd.to_string_lossy().into_owned())]),
-                root_filesystem,
-                Some(wire_permissions_allow_all()),
-            )),
-        ))
-        .expect("create sidecar VM through wire");
-
-    match result.response.payload {
-        ResponsePayload::VmCreatedResponse(response) => response.vm_id,
-        other => panic!("unexpected wire vm create response: {other:?}"),
-    }
-}
-
-#[allow(clippy::too_many_arguments)]
-fn create_vm_with_metadata_and_permissions(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    runtime: GuestRuntimeKind,
-    cwd: &Path,
-    mut metadata: HashMap<String, String>,
-    permissions: PermissionsPolicy,
-) -> String {
-    metadata
-        .entry(String::from("cwd"))
-        .or_insert_with(|| cwd.to_string_lossy().into_owned());
-
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_session(connection_id, session_id),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                runtime,
-                metadata,
-                RootFilesystemDescriptor {
-                    mode: RootFilesystemMode::Ephemeral,
-                    disable_default_base_layer: false,
-                    lowers: Vec::new(),
-                    bootstrap_entries: Vec::new(),
-                },
-                Some(permissions),
-            )),
-        ))
-        .expect("create sidecar VM through wire");
-
-    match result.response.payload {
-        ResponsePayload::VmCreatedResponse(response) => response.vm_id,
-        other => panic!("unexpected wire vm create response: {other:?}"),
-    }
-}
-
-fn bootstrap_root_filesystem(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    entries: Vec<RootFilesystemEntry>,
-) {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_vm(connection_id, session_id, vm_id),
-            RequestPayload::BootstrapRootFilesystemRequest(BootstrapRootFilesystemRequest {
-                entries,
-            }),
-        ))
-        .expect("bootstrap root filesystem through wire");
-
-    match result.response.payload {
-        ResponsePayload::RootFilesystemBootstrappedResponse(response) => {
-            assert!(response.entry_count > 0);
-        }
-        other => panic!("unexpected wire bootstrap response: {other:?}"),
-    }
-}
-
-fn guest_filesystem_call(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    payload: GuestFilesystemCallRequest,
-) -> secure_exec_sidecar::wire::GuestFilesystemResultResponse {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_vm(connection_id, session_id, vm_id),
-            RequestPayload::GuestFilesystemCallRequest(payload),
-        ))
-        .expect("guest filesystem call through wire");
-
-    match result.response.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => response,
-        other => panic!("unexpected wire guest filesystem response: {other:?}"),
-    }
-}
-
-fn guest_write_file_utf8(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    path: &str,
-    content: &str,
-) {
-    let response = guest_filesystem_call(
-        sidecar,
-        request_id,
-        connection_id,
-        session_id,
-        vm_id,
-        GuestFilesystemCallRequest {
-            operation: GuestFilesystemOperation::WriteFile,
-            path: path.to_owned(),
-            destination_path: None,
-            target: None,
-            content: Some(content.to_owned()),
-            encoding: Some(RootFilesystemEntryEncoding::Utf8),
-            recursive: false,
-            max_depth: None,
-            mode: None,
-            uid: None,
-            gid: None,
-            atime_ms: None,
-            mtime_ms: None,
-            len: None,
-            offset: None,
-        },
-    );
-
-    assert_eq!(response.operation, GuestFilesystemOperation::WriteFile);
-    assert_eq!(response.path, path);
-}
-
-fn guest_read_file_utf8(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    path: &str,
-) -> String {
-    let response = guest_filesystem_call(
-        sidecar,
-        request_id,
-        connection_id,
-        session_id,
-        vm_id,
-        GuestFilesystemCallRequest {
-            operation: GuestFilesystemOperation::ReadFile,
-            path: path.to_owned(),
-            destination_path: None,
-            target: None,
-            content: None,
-            encoding: None,
-            recursive: false,
-            max_depth: None,
-            mode: None,
-            uid: None,
-            gid: None,
-            atime_ms: None,
-            mtime_ms: None,
-            len: None,
-            offset: None,
-        },
-    );
-
-    assert_eq!(response.operation, GuestFilesystemOperation::ReadFile);
-    assert_eq!(response.path, path);
-    assert_eq!(response.encoding, Some(RootFilesystemEntryEncoding::Utf8));
-    response.content.expect("guest filesystem read content")
-}
-
-fn guest_exists(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    path: &str,
-) -> bool {
-    let response = guest_filesystem_call(
-        sidecar,
-        request_id,
-        connection_id,
-        session_id,
-        vm_id,
-        GuestFilesystemCallRequest {
-            operation: GuestFilesystemOperation::Exists,
-            path: path.to_owned(),
-            destination_path: None,
-            target: None,
-            content: None,
-            encoding: None,
-            recursive: false,
-            max_depth: None,
-            mode: None,
-            uid: None,
-            gid: None,
-            atime_ms: None,
-            mtime_ms: None,
-            len: None,
-            offset: None,
-        },
-    );
-
-    assert_eq!(response.operation, GuestFilesystemOperation::Exists);
-    response.exists.expect("guest filesystem exists flag")
-}
-
-fn guest_readlink(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    path: &str,
-) -> String {
-    let response = guest_filesystem_call(
-        sidecar,
-        request_id,
-        connection_id,
-        session_id,
-        vm_id,
-        GuestFilesystemCallRequest {
-            operation: GuestFilesystemOperation::ReadLink,
-            path: path.to_owned(),
-            destination_path: None,
-            target: None,
-            content: None,
-            encoding: None,
-            recursive: false,
-            max_depth: None,
-            mode: None,
-            uid: None,
-            gid: None,
-            atime_ms: None,
-            mtime_ms: None,
-            len: None,
-            offset: None,
-        },
-    );
-
-    assert_eq!(response.operation, GuestFilesystemOperation::ReadLink);
-    response.target.expect("guest filesystem readlink target")
-}
-
-fn guest_symlink(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    link_path: &str,
-    target: &str,
-) {
-    let response = guest_filesystem_call(
-        sidecar,
-        request_id,
-        connection_id,
-        session_id,
-        vm_id,
-        GuestFilesystemCallRequest {
-            operation: GuestFilesystemOperation::Symlink,
-            path: link_path.to_owned(),
-            destination_path: None,
-            target: Some(target.to_owned()),
-            content: None,
-            encoding: None,
-            recursive: false,
-            max_depth: None,
-            mode: None,
-            uid: None,
-            gid: None,
-            atime_ms: None,
-            mtime_ms: None,
-            len: None,
-            offset: None,
-        },
-    );
-
-    assert_eq!(response.operation, GuestFilesystemOperation::Symlink);
-}
-
-fn guest_stat_mode(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    path: &str,
-) -> u32 {
-    let response = guest_filesystem_call(
-        sidecar,
-        request_id,
-        connection_id,
-        session_id,
-        vm_id,
-        GuestFilesystemCallRequest {
-            operation: GuestFilesystemOperation::Stat,
-            path: path.to_owned(),
-            destination_path: None,
-            target: None,
-            content: None,
-            encoding: None,
-            recursive: false,
-            max_depth: None,
-            mode: None,
-            uid: None,
-            gid: None,
-            atime_ms: None,
-            mtime_ms: None,
-            len: None,
-            offset: None,
-        },
-    );
-
-    response.stat.expect("guest filesystem stat").mode
-}
-
-fn write_process_stdin(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    chunk: &str,
-) {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_vm(connection_id, session_id, vm_id),
-            RequestPayload::WriteStdinRequest(WriteStdinRequest {
-                process_id: process_id.to_owned(),
-                chunk: chunk.as_bytes().to_vec(),
-            }),
-        ))
-        .expect("write python stdin through wire");
-
-    match result.response.payload {
-        ResponsePayload::StdinWrittenResponse(response) => {
-            assert_eq!(response.process_id, process_id);
-            assert_eq!(response.accepted_bytes, chunk.len() as u64);
-        }
-        other => panic!("unexpected wire stdin-written response: {other:?}"),
-    }
-}
-
-fn close_process_stdin(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-) {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_vm(connection_id, session_id, vm_id),
-            RequestPayload::CloseStdinRequest(CloseStdinRequest {
-                process_id: process_id.to_owned(),
-            }),
-        ))
-        .expect("close python stdin through wire");
-
-    match result.response.payload {
-        ResponsePayload::StdinClosedResponse(response) => {
-            assert_eq!(response.process_id, process_id);
-        }
-        other => panic!("unexpected wire stdin-closed response: {other:?}"),
-    }
-}
-
-fn kill_process(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-) {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_vm(connection_id, session_id, vm_id),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: process_id.to_owned(),
-                signal: String::from("SIGTERM"),
-            }),
-        ))
-        .expect("kill python process through wire");
-
-    match result.response.payload {
-        ResponsePayload::ProcessKilledResponse(response) => {
-            assert_eq!(response.process_id, process_id);
-        }
-        other => panic!("unexpected wire process-killed response: {other:?}"),
-    }
-}
-
-fn wait_for_stdout_chunk(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    needle: &str,
-) {
-    let ownership = wire_vm(connection_id, session_id, vm_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-
-    loop {
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for python stdout containing {needle:?}"
-        );
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll python stdout through wire");
-        let Some(event) = event else { continue };
-
-        match event.payload {
-            EventPayload::ProcessOutputEvent(output)
-                if output.process_id == process_id
-                    && output.channel == StreamChannel::Stdout
-                    && chunk_contains(&output.chunk, needle) =>
-            {
-                return;
-            }
-            EventPayload::ProcessOutputEvent(_) => {}
-            EventPayload::ProcessExitedEvent(exited) if exited.process_id == process_id => {
-                panic!(
-                    "python process exited before emitting {needle:?}: {:?}",
-                    exited.exit_code
-                );
-            }
-            EventPayload::ProcessExitedEvent(_)
-            | EventPayload::VmLifecycleEvent(_)
-            | EventPayload::StructuredEvent(_)
-            | EventPayload::ExtEnvelope(_) => {}
-        }
-    }
-}
-
-fn python_runtime_executes_code_end_to_end() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-execute");
-    let cwd = temp_dir("python-execute-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python",
-        "print('hello world')",
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python",
-    );
-
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert_eq!(stdout, "hello world\n");
-    assert!(
-        stderr.is_empty(),
-        "unexpected stderr from successful python execution: {stderr}"
-    );
-}
-
-fn python_runtime_executes_workspace_py_file_by_path() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-file-entrypoint");
-    let cwd = temp_dir("python-file-entrypoint-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_root_filesystem(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        RootFilesystemDescriptor {
-            mode: RootFilesystemMode::Ephemeral,
-            disable_default_base_layer: false,
-            lowers: Vec::new(),
-            bootstrap_entries: vec![
-                root_dir("/workspace"),
-                root_file(
-                    "/workspace/script.py",
-                    "print('hello from file')\n",
-                    Some(RootFilesystemEntryEncoding::Utf8),
-                ),
-            ],
-        },
-    );
-
-    execute_python_entrypoint(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-file",
-        "/workspace/script.py",
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-file",
-    );
-
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert_eq!(stdout, "hello from file\n");
-    assert!(
-        stderr.is_empty(),
-        "unexpected stderr from file-based Python execution: {stderr}"
-    );
-}
-
-fn python_runtime_reports_syntax_errors_over_stderr() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-syntax-error");
-    let cwd = temp_dir("python-syntax-error-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-error",
-        "print(",
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-error",
-    );
-
-    assert_eq!(exit_code, 1);
-    assert!(
-        stdout.is_empty(),
-        "unexpected stdout from syntax error execution: {stdout}"
-    );
-    assert!(
-        stderr.contains("SyntaxError"),
-        "expected SyntaxError in stderr, got: {stderr}"
-    );
-}
-
-fn python_runtime_blocks_pyodide_js_escape_hatches() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-security");
-    let cwd = temp_dir("python-security-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-security",
-        r#"
-import json
-import js
-import pyodide_js
-
-def capture(action):
-    try:
-        action()
-        return {"ok": True}
-    except Exception as error:
-        return {
-            "ok": False,
-            "type": type(error).__name__,
-            "message": str(error),
-            "code": getattr(error, "code", None),
-        }
-
-result = {
-    "js_process_env": capture(lambda: js.process.env),
-    "js_require": capture(lambda: js.require),
-    "js_process_exit": capture(lambda: js.process.exit),
-    "js_process_kill": capture(lambda: js.process.kill),
-    "pyodide_js_eval_code": capture(lambda: pyodide_js.eval_code),
-}
-
-print(json.dumps(result))
-"#,
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-security",
-    );
-
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert!(
-        stderr.is_empty(),
-        "unexpected stderr from python security execution: {stderr}"
-    );
-
-    let json_line = stdout
-        .lines()
-        .rev()
-        .find(|line| !line.trim().is_empty())
-        .expect("python security stdout line");
-    let parsed: Value = serde_json::from_str(json_line).expect("parse python security JSON");
-    for key in [
-        "js_process_env",
-        "js_require",
-        "js_process_exit",
-        "js_process_kill",
-    ] {
-        assert_eq!(parsed[key]["ok"], Value::Bool(false));
-        assert_eq!(
-            parsed[key]["type"],
-            Value::String(String::from("RuntimeError"))
-        );
-        assert_eq!(parsed[key]["code"], Value::Null);
-        assert!(parsed[key]["message"]
-            .as_str()
-            .expect("js hardening message")
-            .contains("js is not available"));
-    }
-    assert_eq!(parsed["pyodide_js_eval_code"]["ok"], Value::Bool(false));
-    assert_eq!(
-        parsed["pyodide_js_eval_code"]["type"],
-        Value::String(String::from("RuntimeError"))
-    );
-    assert_eq!(parsed["pyodide_js_eval_code"]["code"], Value::Null);
-    assert!(parsed["pyodide_js_eval_code"]["message"]
-        .as_str()
-        .expect("pyodide_js hardening message")
-        .contains("pyodide_js is not available"));
-}
-
-fn concurrent_python_processes_stay_isolated_across_vms() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-process-isolation");
-    let cwd = temp_dir("python-process-isolation-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (slow_vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-    let (fast_vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &slow_vm_id,
-        "proc",
-        "print('slow python')",
-    );
-    execute_inline_python(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &fast_vm_id,
-        "proc",
-        "print('fast python')",
-    );
-
-    let mut results = HashMap::from([
-        (slow_vm_id.clone(), ProcessResult::default()),
-        (fast_vm_id.clone(), ProcessResult::default()),
-    ]);
-    let deadline = Instant::now() + Duration::from_secs(15);
-    let ownership = wire_session(&connection_id, &session_id);
-
-    while results.values().any(|result| result.exit_code.is_none()) {
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for concurrent python process events"
-        );
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll python process wire event");
-        let Some(event) = event else { continue };
-
-        let OwnershipScope::VmOwnership(ownership) = event.ownership else {
-            panic!("expected vm-scoped python process event");
-        };
-        let result = results
-            .get_mut(&ownership.vm_id)
-            .unwrap_or_else(|| panic!("unexpected vm event for {}", ownership.vm_id));
-
-        match event.payload {
-            EventPayload::ProcessOutputEvent(output) => {
-                assert_eq!(output.process_id, "proc");
-                match output.channel {
-                    StreamChannel::Stdout => {
-                        append_stream_chunk(&mut result.stdout, &output.chunk, "stdout");
-                    }
-                    StreamChannel::Stderr => {
-                        append_stream_chunk(&mut result.stderr, &output.chunk, "stderr");
-                    }
-                }
-            }
-            EventPayload::ProcessExitedEvent(exited) => {
-                assert_eq!(exited.process_id, "proc");
-                result.exit_code = Some(exited.exit_code);
-            }
-            EventPayload::VmLifecycleEvent(_)
-            | EventPayload::StructuredEvent(_)
-            | EventPayload::ExtEnvelope(_) => {}
-        }
-    }
-
-    let slow = results.get(&slow_vm_id).expect("slow vm result");
-    let fast = results.get(&fast_vm_id).expect("fast vm result");
-
-    assert_eq!(slow.exit_code, Some(0));
-    assert_eq!(fast.exit_code, Some(0));
-    let slow_stdout = String::from_utf8_lossy(&slow.stdout);
-    let fast_stdout = String::from_utf8_lossy(&fast.stdout);
-    let slow_stderr = String::from_utf8_lossy(&slow.stderr);
-    let fast_stderr = String::from_utf8_lossy(&fast.stderr);
-    assert_eq!(slow_stdout, "slow python\n");
-    assert_eq!(fast_stdout, "fast python\n");
-    assert!(
-        slow_stderr.is_empty(),
-        "unexpected slow python stderr: {}",
-        slow_stderr
-    );
-    assert!(
-        fast_stderr.is_empty(),
-        "unexpected fast python stderr: {}",
-        fast_stderr
-    );
-}
-
-fn python_runtime_mounts_workspace_over_the_kernel_vfs() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-workspace-vfs");
-    let cwd = temp_dir("python-workspace-vfs-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    bootstrap_root_filesystem(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        vec![root_dir("/workspace")],
-    );
-    guest_write_file_utf8(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "/workspace/from-kernel.txt",
-        "from kernel",
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-workspace",
-        r#"
-import json
-import os
-
-with open("/workspace/from-kernel.txt", "r", encoding="utf-8") as handle:
-    original = handle.read()
-
-with open("/workspace/from-python.txt", "w", encoding="utf-8") as handle:
-    handle.write("from python")
-
-print(json.dumps({
-    "original": original,
-    "entries": sorted(os.listdir("/workspace")),
-}))
-"#,
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-workspace",
-    );
-
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert!(
-        stderr.is_empty(),
-        "unexpected stderr from workspace mount execution: {stderr}"
-    );
-
-    let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse workspace mount JSON");
-    assert_eq!(parsed["original"], "from kernel");
-    assert_eq!(
-        parsed["entries"],
-        serde_json::json!(["from-kernel.txt", "from-python.txt"])
-    );
-
-    let python_written = guest_read_file_utf8(
-        &mut sidecar,
-        7,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "/workspace/from-python.txt",
-    );
-    assert_eq!(python_written, "from python");
-}
-
-fn python_runtime_supports_file_delete_and_rename() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-file-ops");
-    let cwd = temp_dir("python-file-ops-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    bootstrap_root_filesystem(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        vec![root_dir("/workspace")],
-    );
-    // Seed via the kernel so delete/rename exercise host-backed VFS entries.
-    guest_write_file_utf8(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "/workspace/seed.txt",
-        "seed",
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-file-ops",
-        r#"
-import json
-import os
-
-results = {}
-
-# delete a file
-os.remove("/workspace/seed.txt")
-results["seed_exists"] = os.path.exists("/workspace/seed.txt")
-
-# create then remove a directory
-os.mkdir("/workspace/subdir")
-results["subdir_made"] = os.path.isdir("/workspace/subdir")
-os.rmdir("/workspace/subdir")
-results["subdir_exists"] = os.path.exists("/workspace/subdir")
-
-# rename a file
-with open("/workspace/old.txt", "w", encoding="utf-8") as handle:
-    handle.write("renamed body")
-os.rename("/workspace/old.txt", "/workspace/new.txt")
-results["old_exists"] = os.path.exists("/workspace/old.txt")
-with open("/workspace/new.txt", "r", encoding="utf-8") as handle:
-    results["new_body"] = handle.read()
-
-results["entries"] = sorted(os.listdir("/workspace"))
-print(json.dumps(results))
-"#,
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-file-ops",
-    );
-
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse file-ops JSON");
-    assert_eq!(parsed["seed_exists"], false, "seed.txt should be deleted");
-    assert_eq!(parsed["subdir_made"], true);
-    assert_eq!(parsed["subdir_exists"], false, "subdir should be removed");
-    assert_eq!(
-        parsed["old_exists"], false,
-        "old.txt should be renamed away"
-    );
-    assert_eq!(parsed["new_body"], "renamed body");
-    assert_eq!(parsed["entries"], serde_json::json!(["new.txt"]));
-
-    // Cross-check the HOST kernel VFS reflects the deletes/rename.
-    assert!(
-        !guest_exists(
-            &mut sidecar,
-            7,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            "/workspace/seed.txt"
-        ),
-        "host VFS should not see deleted seed.txt"
-    );
-    assert!(
-        !guest_exists(
-            &mut sidecar,
-            8,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            "/workspace/old.txt"
-        ),
-        "host VFS should not see renamed-away old.txt"
-    );
-    assert!(
-        !guest_exists(
-            &mut sidecar,
-            9,
-            &connection_id,
-            &session_id,
-            &vm_id,
-            "/workspace/subdir"
-        ),
-        "host VFS should not see removed subdir"
-    );
-    let new_body = guest_read_file_utf8(
-        &mut sidecar,
-        10,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "/workspace/new.txt",
-    );
-    assert_eq!(
-        new_body, "renamed body",
-        "host VFS should see the renamed file"
-    );
-}
-
-fn python_runtime_supports_raw_tcp_and_udp_sockets() {
-    assert_node_available();
-
-    let (tcp_port, tcp_server) = spawn_tcp_echo_server();
-    let (udp_port, udp_server) = spawn_udp_echo_server();
-    let mut sidecar = new_sidecar("python-sockets");
-    let cwd = temp_dir("python-sockets-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_metadata_and_permissions(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        HashMap::from([(
-            String::from("env.AGENTOS_LOOPBACK_EXEMPT_PORTS"),
-            serde_json::to_string(&vec![tcp_port.to_string(), udp_port.to_string()])
-                .expect("serialize exempt ports"),
-        )]),
-        wire_permissions_allow_all(),
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-sockets",
-        &format!(
-            r#"
-import json
-import socket
-
-result = {{}}
-
-# Raw outbound TCP against a host echo server.
-tcp = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
-tcp.settimeout(10)
-tcp.connect(("127.0.0.1", {tcp_port}))
-tcp.sendall(b"hello sockets")
-received = b""
-while len(received) < len(b"hello sockets"):
-    chunk = tcp.recv(64)
-    if not chunk:
-        break
-    received += chunk
-tcp.close()
-result["tcp"] = received.decode()
-
-# Raw UDP against a host echo server.
-udp = socket.socket(socket.AF_INET, socket.SOCK_DGRAM)
-udp.settimeout(10)
-udp.sendto(b"ping udp", ("127.0.0.1", {udp_port}))
-data, _addr = udp.recvfrom(64)
-udp.close()
-result["udp"] = data.decode()
-
-print(json.dumps(result))
-"#,
-        ),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-sockets",
-        Duration::from_secs(120),
-    );
-
-    let _ = tcp_server.join();
-    let _ = udp_server.join();
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    let json_line = stdout
-        .lines()
-        .rev()
-        .find(|line| !line.trim().is_empty())
-        .expect("python sockets stdout line");
-    let parsed: Value = serde_json::from_str(json_line).expect("parse sockets JSON");
-    assert_eq!(parsed["tcp"], "hello sockets");
-    assert_eq!(parsed["udp"], "ping udp");
-}
-
-fn python_runtime_supports_symlink_readlink_and_metadata() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-fs-hooks");
-    let cwd = temp_dir("python-fs-hooks-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    bootstrap_root_filesystem(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        vec![root_dir("/workspace")],
-    );
-
-    // A symlink that already exists on the host (created via the wire, not by
-    // Python) — exercises lstat-based detection of pre-existing links.
-    guest_symlink(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "/workspace/hostlink.txt",
-        "file.txt",
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-fs-hooks",
-        r#"
-import json
-import os
-
-result = {}
-
-with open("/workspace/file.txt", "w", encoding="utf-8") as handle:
-    handle.write("data")
-
-# symlink + readlink (created by Python)
-os.symlink("file.txt", "/workspace/link.txt")
-result["readlink"] = os.readlink("/workspace/link.txt")
-result["islink"] = os.path.islink("/workspace/link.txt")
-
-# a symlink that pre-existed on the host is detected as a link
-result["host_islink"] = os.path.islink("/workspace/hostlink.txt")
-result["host_readlink"] = os.readlink("/workspace/hostlink.txt")
-
-# chmod (setattr -> host)
-os.chmod("/workspace/file.txt", 0o640)
-result["mode"] = os.stat("/workspace/file.txt").st_mode & 0o777
-
-# utimes (setattr -> host) — just exercise the hook
-os.utime("/workspace/file.txt", (1700000000, 1710000000))
-
-print(json.dumps(result))
-"#,
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-fs-hooks",
-    );
-
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse fs-hooks JSON");
-    assert_eq!(
-        parsed["readlink"], "file.txt",
-        "os.readlink should return the target"
-    );
-    assert_eq!(parsed["islink"], true, "os.path.islink should be true");
-    assert_eq!(
-        parsed["host_islink"], true,
-        "a host-preexisting symlink should be detected as a link"
-    );
-    assert_eq!(parsed["host_readlink"], "file.txt");
-    assert_eq!(parsed["mode"], 0o640, "os.chmod should be reflected");
-
-    // Cross-check the host kernel VFS.
-    let host_target = guest_readlink(
-        &mut sidecar,
-        7,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "/workspace/link.txt",
-    );
-    assert_eq!(
-        host_target, "file.txt",
-        "host VFS should resolve the symlink"
-    );
-    let host_mode = guest_stat_mode(
-        &mut sidecar,
-        8,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "/workspace/file.txt",
-    );
-    assert_eq!(
-        host_mode & 0o777,
-        0o640,
-        "host VFS should reflect the chmod"
-    );
-}
-
-fn workspace_files_are_shared_between_javascript_and_python_runtimes() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("cross-runtime-workspace");
-    let workspace_host_dir = temp_dir("cross-runtime-workspace-host");
-    let cwd = workspace_host_dir.clone();
-    let js_entry = workspace_host_dir.join("cross-runtime.cjs");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-cross-runtime");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    write_fixture(
-        &js_entry,
-        r#"
-const fs = require('node:fs');
-
-const mode = process.argv[2];
-
-if (mode === 'write') {
-  fs.writeFileSync('/workspace/from-js.txt', Buffer.from('from js'));
-  const result = JSON.stringify({
-    entries: fs.readdirSync('/workspace').sort(),
-  });
-  fs.writeFileSync('/workspace/js-write-result.json', Buffer.from(result));
-} else if (mode === 'read') {
-  const result = JSON.stringify({
-    fromPython: fs.readFileSync('/workspace/from-python.txt', 'utf8'),
-    entries: fs.readdirSync('/workspace').sort(),
-  });
-  fs.writeFileSync('/workspace/js-read-result.json', Buffer.from(result));
-} else {
-  throw new Error(`unknown mode: ${mode}`);
-}
-"#,
-    );
-
-    bootstrap_root_filesystem(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        vec![root_dir("/workspace")],
-    );
-    let configure = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: vec![MountDescriptor {
-                    guest_path: String::from("/workspace"),
-                    read_only: false,
-                    plugin: MountPluginDescriptor {
-                        id: String::from("host_dir"),
-                        config: json!({
-                            "hostPath": workspace_host_dir.to_string_lossy().into_owned(),
-                            "readOnly": false,
-                        })
-                        .to_string(),
-                    },
-                }],
-                software: Vec::new(),
-                permissions: None,
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: HashMap::new(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ))
-        .expect("configure host_dir workspace mount through wire");
-    match configure.response.payload {
-        ResponsePayload::VmConfiguredResponse(response) => {
-            // 1 = just the client mount. With no packages configured there are no
-            // granular /opt/agentos leaf mounts (one tar/bin/current mount is added
-            // per package, not a single always-present staging mount).
-            assert_eq!(response.applied_mounts, 1);
-        }
-        other => panic!("unexpected wire configure-vm response: {other:?}"),
-    }
-
-    let js_fs_env = HashMap::from([
-        (
-            String::from("AGENTOS_GUEST_PATH_MAPPINGS"),
-            json!([{
-                "guestPath": "/workspace",
-                "hostPath": workspace_host_dir.to_string_lossy().into_owned(),
-            }])
-            .to_string(),
-        ),
-        (
-            String::from("AGENTOS_EXTRA_FS_READ_PATHS"),
-            json!([workspace_host_dir.to_string_lossy().into_owned()]).to_string(),
-        ),
-        (
-            String::from("AGENTOS_EXTRA_FS_WRITE_PATHS"),
-            json!([workspace_host_dir.to_string_lossy().into_owned()]).to_string(),
-        ),
-    ]);
-
-    execute_javascript_with_env(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-js-write",
-        &js_entry,
-        vec![String::from("write")],
-        js_fs_env.clone(),
-    );
-    let (js_write_stdout, js_write_stderr, js_write_exit) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-js-write",
-    );
-
-    assert_eq!(
-        js_write_exit, 0,
-        "stdout: {js_write_stdout}\nstderr: {js_write_stderr}"
-    );
-    assert!(
-        js_write_stderr.is_empty(),
-        "unexpected stderr from JavaScript write execution: {js_write_stderr}"
-    );
-    let js_write: Value = serde_json::from_str(
-        &std::fs::read_to_string(workspace_host_dir.join("js-write-result.json"))
-            .expect("read JavaScript write JSON"),
-    )
-    .expect("parse JavaScript write JSON");
-    assert_eq!(
-        js_write["entries"],
-        serde_json::json!(["cross-runtime.cjs", "from-js.txt"])
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        7,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-cross-runtime",
-        r#"
-import json
-import os
-
-with open("/workspace/from-js.txt", "r", encoding="utf-8") as handle:
-    from_js = handle.read()
-
-with open("/workspace/from-python.txt", "w", encoding="utf-8") as handle:
-    handle.write("from python")
-
-print(json.dumps({
-    "fromJs": from_js,
-    "entries": sorted(os.listdir("/workspace")),
-}))
-"#,
-    );
-    let (python_stdout, python_stderr, python_exit) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-cross-runtime",
-    );
-
-    assert_eq!(
-        python_exit, 0,
-        "stdout: {python_stdout}\nstderr: {python_stderr}"
-    );
-    assert!(
-        python_stderr.is_empty(),
-        "unexpected stderr from Python cross-runtime execution: {python_stderr}"
-    );
-    let python_result: Value =
-        serde_json::from_str(python_stdout.trim()).expect("parse Python cross-runtime JSON");
-    assert_eq!(python_result["fromJs"], "from js");
-    assert_eq!(
-        python_result["entries"],
-        serde_json::json!([
-            "cross-runtime.cjs",
-            "from-js.txt",
-            "from-python.txt",
-            "js-write-result.json"
-        ])
-    );
-
-    execute_javascript_with_env(
-        &mut sidecar,
-        8,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-js-read",
-        &js_entry,
-        vec![String::from("read")],
-        js_fs_env,
-    );
-    let (js_read_stdout, js_read_stderr, js_read_exit) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-js-read",
-    );
-
-    assert_eq!(
-        js_read_exit, 0,
-        "stdout: {js_read_stdout}\nstderr: {js_read_stderr}"
-    );
-    assert!(
-        js_read_stderr.is_empty(),
-        "unexpected stderr from JavaScript read execution: {js_read_stderr}"
-    );
-    let js_read: Value = serde_json::from_str(
-        &std::fs::read_to_string(workspace_host_dir.join("js-read-result.json"))
-            .expect("read JavaScript read JSON"),
-    )
-    .expect("parse JavaScript read JSON");
-    assert_eq!(js_read["fromPython"], "from python");
-    assert_eq!(
-        js_read["entries"],
-        serde_json::json!([
-            "cross-runtime.cjs",
-            "from-js.txt",
-            "from-python.txt",
-            "js-write-result.json"
-        ])
-    );
-}
-
-fn python_workspace_mount_respects_read_only_root_permissions() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-workspace-readonly");
-    let cwd = temp_dir("python-workspace-readonly-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_root_filesystem(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        RootFilesystemDescriptor {
-            mode: RootFilesystemMode::ReadOnly,
-            disable_default_base_layer: false,
-            lowers: Vec::new(),
-            bootstrap_entries: vec![
-                root_dir("/workspace"),
-                root_file(
-                    "/workspace/existing.txt",
-                    "seed",
-                    Some(RootFilesystemEntryEncoding::Utf8),
-                ),
-            ],
-        },
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-workspace-readonly",
-        r#"
-from pathlib import Path
-
-try:
-    Path("/workspace/blocked.txt").write_text("blocked", encoding="utf-8")
-    print("write-ok")
-except Exception as error:
-    print(type(error).__name__)
-    print(str(error))
-"#,
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-workspace-readonly",
-    );
-
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert!(
-        stderr.is_empty(),
-        "unexpected stderr from readonly workspace execution: {stderr}"
-    );
-    assert!(
-        !stdout.contains("write-ok"),
-        "python workspace write unexpectedly succeeded: {stdout}"
-    );
-    assert!(
-        stdout.contains("PermissionError") || stdout.contains("OSError"),
-        "expected a Python filesystem error, got: {stdout}"
-    );
-    assert!(
-        stdout.to_ascii_lowercase().contains("read-only")
-            || stdout.to_ascii_lowercase().contains("permission denied"),
-        "expected readonly or permission message, got: {stdout}"
-    );
-}
-
-fn python_runtime_blocks_mapped_pyodide_cache_symlink_metadata_escape() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-pyodide-cache-symlink-escape");
-    let cwd = temp_dir("python-pyodide-cache-symlink-escape-cwd");
-    let mapped_cache_root = temp_dir("python-pyodide-cache-symlink-root");
-    let outside_root = temp_dir("python-pyodide-cache-symlink-outside");
-    let mapped_pkg_dir = mapped_cache_root.join("pkg");
-    let outside_secret = outside_root.join("secret.txt");
-    fs::create_dir_all(&mapped_pkg_dir).expect("create mapped cache package dir");
-    write_fixture(&outside_secret, "outside secret");
-    symlink(&outside_secret, mapped_pkg_dir.join("link"))
-        .expect("create outside symlink in mapped cache");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_inline_python_with_env(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-pyodide-cache-symlink-escape",
-        r#"
-import json
-import os
-
-result = {}
-
-try:
-    stat = os.stat("/__agentos_pyodide_cache/pkg/link")
-    result["stat"] = {
-        "ok": True,
-        "size": stat.st_size,
-        "dev": stat.st_dev,
-        "ino": stat.st_ino,
-    }
-except OSError as error:
-    result["stat"] = {
-        "ok": False,
-        "errno": error.errno,
-        "message": str(error),
-    }
-
-try:
-    result["entries"] = sorted(os.listdir("/__agentos_pyodide_cache/pkg"))
-except OSError as error:
-    result["entries"] = []
-    result["entriesError"] = {
-        "errno": error.errno,
-        "message": str(error),
-    }
-print(json.dumps(result))
-"#,
-        HashMap::from([(
-            String::from("AGENTOS_GUEST_PATH_MAPPINGS"),
-            serde_json::to_string(&vec![json!({
-                "guestPath": "/__agentos_pyodide_cache",
-                "hostPath": mapped_cache_root.to_string_lossy().into_owned(),
-            })])
-            .expect("serialize mapped cache root"),
-        )]),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-pyodide-cache-symlink-escape",
-    );
-
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert!(
-        stderr.is_empty(),
-        "unexpected stderr from python execution: {stderr}"
-    );
-
-    let result_line = stdout
-        .lines()
-        .rev()
-        .find(|line| !line.trim().is_empty())
-        .expect("python symlink-escape JSON line");
-    let parsed: Value =
-        serde_json::from_str(result_line).expect("parse python symlink-escape JSON");
-    assert_eq!(parsed["stat"]["ok"], Value::Bool(false));
-    let errno = parsed["stat"]["errno"]
-        .as_i64()
-        .expect("symlink-escape errno should be numeric");
-    assert!(
-        errno == i64::from(libc::ENOENT)
-            || errno == i64::from(libc::EPERM)
-            || errno == i64::from(libc::EACCES)
-            || errno == 44
-            || parsed["stat"]["message"]
-                .as_str()
-                .is_some_and(|message| message.contains("No such file or directory")),
-        "expected ENOENT/EPERM/EACCES from escaped symlink stat, got: {parsed}"
-    );
-    assert_eq!(parsed["entries"], Value::Array(Vec::new()));
-    if !parsed["entriesError"].is_null() {
-        let entries_errno = parsed["entriesError"]["errno"]
-            .as_i64()
-            .expect("entries errno should be numeric");
-        assert!(
-            entries_errno == i64::from(libc::ENOENT)
-                || entries_errno == i64::from(libc::EPERM)
-                || entries_errno == i64::from(libc::EACCES)
-                || entries_errno == 44
-                || parsed["entriesError"]["message"]
-                    .as_str()
-                    .is_some_and(|message| message.contains("No such file or directory")),
-            "expected ENOENT/EPERM/EACCES-style denial from mapped cache listing, got: {parsed}"
-        );
-    }
-}
-
-fn python_runtime_blocks_mapped_pyodide_cache_symlink_swap_toctou_escape() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-pyodide-cache-symlink-swap-race");
-    let cwd = temp_dir("python-pyodide-cache-symlink-swap-race-cwd");
-    let mapped_cache_root = temp_dir("python-pyodide-cache-symlink-swap-race-root");
-    let outside_root = temp_dir("python-pyodide-cache-symlink-swap-race-outside");
-    let safe_pkg_dir = mapped_cache_root.join("safe-pkg");
-    let pkg_link_path = mapped_cache_root.join("pkg");
-    let safe_secret = safe_pkg_dir.join("secret.txt");
-    let outside_secret = outside_root.join("secret.txt");
-    fs::create_dir_all(&safe_pkg_dir).expect("create mapped safe package dir");
-    fs::create_dir_all(&outside_root).expect("create outside package dir");
-    write_fixture(&safe_secret, "safe secret");
-    write_fixture(&outside_secret, "outside secret");
-    symlink(&safe_pkg_dir, &pkg_link_path).expect("create initial safe package symlink");
-
-    let stop = Arc::new(AtomicBool::new(false));
-    let flapper_stop = Arc::clone(&stop);
-    let flapper_pkg_link_path = pkg_link_path.clone();
-    let flapper_safe_pkg_dir = safe_pkg_dir.clone();
-    let flapper_outside_root = outside_root.clone();
-    let flapper = thread::spawn(move || {
-        let mut swap_index = 0usize;
-        while !flapper_stop.load(Ordering::Relaxed) {
-            let next_target = if swap_index.is_multiple_of(2) {
-                &flapper_outside_root
-            } else {
-                &flapper_safe_pkg_dir
-            };
-            let temp_link =
-                flapper_pkg_link_path.with_file_name(format!(".pkg-swap-{}", swap_index % 2));
-            let _ = fs::remove_file(&temp_link);
-            symlink(next_target, &temp_link).expect("create swap symlink");
-            fs::rename(&temp_link, &flapper_pkg_link_path).expect("swap package symlink");
-            swap_index += 1;
-        }
-    });
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_inline_python_with_env(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-pyodide-cache-symlink-swap-race",
-        r#"
-import json
-
-result = {"safe": 0, "outside": 0, "errors": 0, "unexpected": []}
-for _ in range(4000):
-    try:
-        with open("/__agentos_pyodide_cache/pkg/secret.txt", "r", encoding="utf-8") as handle:
-            value = handle.read().strip()
-        if value == "safe secret":
-            result["safe"] += 1
-        elif value == "outside secret":
-            result["outside"] += 1
-        else:
-            result["unexpected"].append(value)
-    except OSError:
-        result["errors"] += 1
-
-print(json.dumps(result))
-"#,
-        HashMap::from([(
-            String::from("AGENTOS_GUEST_PATH_MAPPINGS"),
-            serde_json::to_string(&vec![json!({
-                "guestPath": "/__agentos_pyodide_cache",
-                "hostPath": mapped_cache_root.to_string_lossy().into_owned(),
-            })])
-            .expect("serialize mapped cache root"),
-        )]),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-pyodide-cache-symlink-swap-race",
-    );
-    stop.store(true, Ordering::Relaxed);
-    flapper.join().expect("join package symlink flapper");
-
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert!(
-        stderr.is_empty(),
-        "unexpected stderr from python execution: {stderr}"
-    );
-
-    let result_line = stdout
-        .lines()
-        .rev()
-        .find(|line| !line.trim().is_empty())
-        .expect("python symlink-swap race JSON line");
-    let parsed: Value =
-        serde_json::from_str(result_line).expect("parse python symlink-swap race JSON");
-    assert_eq!(
-        parsed["outside"],
-        Value::from(0),
-        "mapped cache read escaped to outside root during symlink swap race: {parsed}"
-    );
-    assert_eq!(
-        parsed["unexpected"],
-        Value::Array(Vec::new()),
-        "mapped cache read returned unexpected content during symlink swap race: {parsed}"
-    );
-    assert!(
-        parsed["safe"].as_i64().unwrap_or_default() > 0
-            || parsed["errors"].as_i64().unwrap_or_default() > 0,
-        "expected safe reads or denied race windows, got: {parsed}"
-    );
-}
-
-fn python_runtime_routes_stdin_writes_and_close_to_pyodide() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-stdin");
-    let cwd = temp_dir("python-stdin-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-stdin",
-        r#"
-import sys
-
-print("ready")
-print(f"input:{input()}")
-print(f"read:{sys.stdin.read()!r}")
-"#,
-    );
-
-    wait_for_stdout_chunk(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-stdin",
-        "ready",
-    );
-    assert!(
-        sidecar
-            .poll_event_wire_blocking(
-                &wire_vm(&connection_id, &session_id, &vm_id),
-                Duration::from_millis(200)
-            )
-            .expect("poll stalled python stdin")
-            .is_none(),
-        "python stdin execution should wait for input before exiting"
-    );
-
-    write_process_stdin(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-stdin",
-        "hello\nrest",
-    );
-    close_process_stdin(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-stdin",
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-stdin",
-    );
-
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert!(
-        stderr.is_empty(),
-        "unexpected python stdin stderr: {stderr}"
-    );
-    assert!(
-        stdout.contains("input:hello"),
-        "unexpected stdout: {stdout}"
-    );
-    assert!(
-        stdout.contains("read:'rest'"),
-        "unexpected stdout: {stdout}"
-    );
-}
-
-fn python_runtime_supports_interactive_input_prompts_and_multiple_streaming_writes() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-stdin-interactive");
-    let cwd = temp_dir("python-stdin-interactive-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-stdin-interactive",
-        r#"
-import sys
-
-first = input("prompt-1: ")
-print(f"first:{first}")
-second = input("prompt-2: ")
-print(f"second:{second}")
-print(f"tail:{sys.stdin.read()!r}")
-"#,
-    );
-
-    assert!(
-        sidecar
-            .poll_event_wire_blocking(
-                &wire_vm(&connection_id, &session_id, &vm_id),
-                Duration::from_millis(200)
-            )
-            .expect("poll stalled python interactive stdin before first write")
-            .is_none(),
-        "python interactive stdin execution should wait for the first input"
-    );
-
-    write_process_stdin(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-stdin-interactive",
-        "alpha\n",
-    );
-
-    wait_for_stdout_chunk(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-stdin-interactive",
-        "first:alpha",
-    );
-
-    assert!(
-        sidecar
-            .poll_event_wire_blocking(
-                &wire_vm(&connection_id, &session_id, &vm_id),
-                Duration::from_millis(200)
-            )
-            .expect("poll stalled python interactive stdin before second write")
-            .is_none(),
-        "python interactive stdin execution should stay blocked for the second input"
-    );
-
-    write_process_stdin(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-stdin-interactive",
-        "beta\ngamma",
-    );
-    close_process_stdin(
-        &mut sidecar,
-        7,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-stdin-interactive",
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-stdin-interactive",
-    );
-
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert!(
-        stderr.is_empty(),
-        "unexpected python interactive stdin stderr: {stderr}"
-    );
-    assert!(
-        stdout.contains("second:beta"),
-        "unexpected stdout: {stdout}"
-    );
-    assert!(
-        stdout.contains("tail:'gamma'"),
-        "unexpected stdout: {stdout}"
-    );
-}
-
-fn python_runtime_close_stdin_triggers_input_eof_and_empty_read() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-stdin-eof");
-    let cwd = temp_dir("python-stdin-eof-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-eof",
-        r#"
-import sys
-
-try:
-    input()
-except EOFError:
-    print("input-eof")
-
-print(f"read:{sys.stdin.read()!r}")
-"#,
-    );
-
-    close_process_stdin(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-eof",
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-eof",
-    );
-
-    assert_eq!(exit_code, 0);
-    assert!(stderr.is_empty(), "unexpected python eof stderr: {stderr}");
-    assert!(stdout.contains("input-eof"), "unexpected stdout: {stdout}");
-    assert!(stdout.contains("read:''"), "unexpected stdout: {stdout}");
-}
-
-fn python_runtime_kill_process_terminates_blocked_stdin_reads() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-kill");
-    let cwd = temp_dir("python-kill-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-kill",
-        r#"
-import sys
-
-print("ready")
-sys.stdin.read()
-"#,
-    );
-
-    wait_for_stdout_chunk(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-kill",
-        "ready",
-    );
-
-    kill_process(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-kill",
-    );
-
-    let (_stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-kill",
-    );
-
-    assert_ne!(exit_code, 0);
-    assert!(
-        stderr.is_empty()
-            || stderr.contains("terminated")
-            || stderr.contains("SIGTERM")
-            || stderr.contains("Error: null"),
-        "unexpected python kill stderr: {stderr}"
-    );
-}
-
-fn python_runtime_imports_bundled_numpy_without_network() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-numpy-package");
-    let cwd = temp_dir("python-numpy-package-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_inline_python_with_env(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-numpy",
-        "import numpy\nprint(numpy.__version__)",
-        HashMap::from([(
-            String::from("AGENTOS_PYTHON_PRELOAD_PACKAGES"),
-            String::from("[\"numpy\"]"),
-        )]),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-numpy",
-        Duration::from_secs(30),
-    );
-
-    assert_eq!(exit_code, 0);
-    assert!(
-        stderr.is_empty(),
-        "unexpected stderr from bundled numpy import: {stderr}"
-    );
-    assert!(
-        stdout.lines().any(|line| line.trim() == "2.2.5"),
-        "expected numpy version in stdout, got: {stdout}"
-    );
-}
-
-fn python_runtime_imports_bundled_pandas_without_network() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-pandas-package");
-    let cwd = temp_dir("python-pandas-package-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_inline_python_with_env(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-pandas",
-        "import pandas\nprint(pandas.__version__)",
-        HashMap::from([(
-            String::from("AGENTOS_PYTHON_PRELOAD_PACKAGES"),
-            String::from("[\"pandas\"]"),
-        )]),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-pandas",
-        Duration::from_secs(30),
-    );
-
-    assert_eq!(exit_code, 0);
-    assert!(
-        stderr.is_empty(),
-        "unexpected stderr from bundled pandas import: {stderr}"
-    );
-    assert!(
-        stdout.lines().any(|line| line.trim() == "2.3.3"),
-        "expected pandas version in stdout, got: {stdout}"
-    );
-}
-
-fn python_runtime_supports_micropip_package_installation() {
-    assert_node_available();
-
-    let (port, server) = spawn_static_file_server(pyodide_asset_dir());
-    let mut sidecar = new_sidecar("python-micropip-install");
-    let cwd = temp_dir("python-micropip-install-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_metadata_and_permissions(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        HashMap::from([(
-            String::from("env.AGENTOS_LOOPBACK_EXEMPT_PORTS"),
-            serde_json::to_string(&vec![port.to_string()]).expect("serialize exempt ports"),
-        )]),
-        wire_permissions_allow_all(),
-    );
-
-    execute_inline_python_with_env(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-micropip-install",
-        &format!(
-            r#"
-import json
-import micropip
-
-await micropip.install("http://127.0.0.1:{port}/click-8.3.1-py3-none-any.whl")
-
-import click
-print(json.dumps({{
-    "version": click.__version__,
-    "command_name": click.Command("demo").name,
-}}))
-"#,
-        ),
-        HashMap::from([(
-            String::from("AGENTOS_PYODIDE_PACKAGE_BASE_URL"),
-            format!("http://127.0.0.1:{port}/"),
-        )]),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-micropip-install",
-        Duration::from_secs(90),
-    );
-
-    let _ = server.join();
-    assert_eq!(exit_code, 0, "stderr: {stderr}");
-    let json_line = stdout
-        .lines()
-        .rev()
-        .find(|line| !line.trim().is_empty())
-        .expect("micropip stdout line");
-    let parsed: Value = serde_json::from_str(json_line).expect("parse micropip JSON");
-    assert_eq!(parsed["version"], Value::String(String::from("8.3.1")));
-    assert_eq!(parsed["command_name"], Value::String(String::from("demo")));
-}
-
-fn python_runtime_micropip_install_respects_network_permissions() {
-    assert_node_available();
-
-    let (port, server) = spawn_static_file_server(pyodide_asset_dir());
-    let mut sidecar = new_sidecar("python-micropip-network-denied");
-    let cwd = temp_dir("python-micropip-network-denied-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_metadata_and_permissions(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        HashMap::from([(
-            String::from("env.AGENTOS_LOOPBACK_EXEMPT_PORTS"),
-            serde_json::to_string(&vec![port.to_string()]).expect("serialize exempt ports"),
-        )]),
-        PermissionsPolicy {
-            fs: wire_permissions_allow_all().fs,
-            network: Some(PatternPermissionScope::PermissionMode(PermissionMode::Deny)),
-            child_process: wire_permissions_allow_all().child_process,
-            process: wire_permissions_allow_all().process,
-            env: wire_permissions_allow_all().env,
-            binding: wire_permissions_allow_all().binding,
-        },
-    );
-
-    execute_inline_python_with_env(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-micropip-network-denied",
-        &format!(
-            r#"
-import micropip
-await micropip.install("http://127.0.0.1:{port}/click-8.3.1-py3-none-any.whl")
-"#,
-        ),
-        HashMap::from([(
-            String::from("AGENTOS_PYODIDE_PACKAGE_BASE_URL"),
-            format!("http://127.0.0.1:{port}/"),
-        )]),
-    );
-
-    let (_stdout, stderr, exit_code) = collect_process_output_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-micropip-network-denied",
-        Duration::from_secs(30),
-    );
-
-    let _ = server.join();
-    assert_ne!(exit_code, 0);
-    assert!(
-        stderr.contains("permission") || stderr.contains("denied") || stderr.contains("EACCES"),
-        "expected micropip permission error, got: {stderr}"
-    );
-}
-
-fn python_runtime_routes_dns_and_http_through_sidecar_bridge() {
-    assert_node_available();
-
-    let listener = TcpListener::bind("127.0.0.1:0").expect("bind http listener");
-    let port = listener.local_addr().expect("listener address").port();
-    let server = thread::spawn(move || {
-        let (mut stream, _) = listener.accept().expect("accept http client");
-        let mut request = [0_u8; 1024];
-        let _ = stream.read(&mut request).expect("read http request");
-        stream
-            .write_all(
-                b"HTTP/1.1 200 OK\r\nContent-Length: 11\r\nContent-Type: text/plain\r\nConnection: close\r\n\r\nhello world",
-            )
-            .expect("write http response");
-    });
-
-    let mut sidecar = new_sidecar("python-network-bridge");
-    let cwd = temp_dir("python-network-bridge-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_metadata_and_permissions(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        HashMap::from([
-            (
-                String::from("env.AGENTOS_LOOPBACK_EXEMPT_PORTS"),
-                serde_json::to_string(&vec![port.to_string()]).expect("serialize exempt ports"),
-            ),
-            (
-                String::from("network.dns.override.example.test"),
-                String::from("127.0.0.1"),
-            ),
-        ]),
-        wire_permissions_allow_all(),
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-network",
-        &format!(
-            r#"
-import json
-import socket
-import urllib.request
-
-lookup = socket.getaddrinfo("example.test", {port}, family=socket.AF_INET, type=socket.SOCK_STREAM)
-with urllib.request.urlopen("http://example.test:{port}/urllib") as response:
-    urllib_status = response.status
-    urllib_body = response.read().decode("utf-8")
-
-print(json.dumps({{
-    "lookup": [entry[4][0] for entry in lookup],
-    "urllib": {{"status": urllib_status, "body": urllib_body}},
-}}))
-"#,
-        ),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-network",
-        Duration::from_secs(30),
-    );
-
-    let _ = server;
-    assert_eq!(exit_code, 0, "stderr: {stderr}");
-    let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse python network JSON");
-    assert_eq!(
-        parsed["lookup"][0],
-        Value::String(String::from("127.0.0.1"))
-    );
-    assert_eq!(parsed["urllib"]["status"], Value::from(200));
-    assert_eq!(
-        parsed["urllib"]["body"],
-        Value::String(String::from("hello world"))
-    );
-}
-
-fn python_runtime_routes_requests_through_sidecar_bridge() {
-    assert_node_available();
-
-    let listener = TcpListener::bind("127.0.0.1:0").expect("bind requests listener");
-    let port = listener.local_addr().expect("listener address").port();
-    let server = thread::spawn(move || {
-        let (mut stream, _) = listener.accept().expect("accept requests client");
-        let mut request = [0_u8; 1024];
-        let _ = stream.read(&mut request).expect("read requests payload");
-        stream
-            .write_all(
-                b"HTTP/1.1 200 OK\r\nContent-Length: 11\r\nContent-Type: text/plain\r\nConnection: close\r\n\r\nhello world",
-            )
-            .expect("write requests response");
-    });
-
-    let mut sidecar = new_sidecar("python-requests-bridge");
-    let cwd = temp_dir("python-requests-bridge-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_metadata_and_permissions(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        HashMap::from([
-            (
-                String::from("env.AGENTOS_LOOPBACK_EXEMPT_PORTS"),
-                serde_json::to_string(&vec![port.to_string()]).expect("serialize exempt ports"),
-            ),
-            (
-                String::from("network.dns.override.example.test"),
-                String::from("127.0.0.1"),
-            ),
-        ]),
-        wire_permissions_allow_all(),
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-requests",
-        &format!(
-            r#"
-import json
-import requests
-
-response = requests.get("http://example.test:{port}/requests")
-print(json.dumps({{
-    "status": response.status_code,
-    "body": response.text,
-}}))
-"#,
-        ),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-requests",
-        Duration::from_secs(30),
-    );
-
-    let _ = server;
-    assert_eq!(exit_code, 0, "stderr: {stderr}");
-    let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse requests JSON");
-    assert_eq!(parsed["status"], Value::from(200));
-    assert_eq!(parsed["body"], Value::String(String::from("hello world")));
-}
-
-fn python_runtime_surfaces_network_permission_errors() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-network-denied");
-    let cwd = temp_dir("python-network-denied-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_metadata_and_permissions(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        HashMap::from([(
-            String::from("network.dns.override.example.test"),
-            String::from("127.0.0.1"),
-        )]),
-        PermissionsPolicy {
-            fs: wire_permissions_allow_all().fs,
-            network: Some(PatternPermissionScope::PermissionMode(PermissionMode::Deny)),
-            child_process: wire_permissions_allow_all().child_process,
-            process: wire_permissions_allow_all().process,
-            env: wire_permissions_allow_all().env,
-            binding: wire_permissions_allow_all().binding,
-        },
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-network-denied",
-        r#"
-import json
-import socket
-import urllib.request
-
-result = {}
-for name, operation in {
-    "dns": lambda: socket.getaddrinfo("example.test", 80),
-    "http": lambda: urllib.request.urlopen("http://example.test:80/"),
-}.items():
-    try:
-        operation()
-        result[name] = {"unexpected": True}
-    except Exception as error:
-        result[name] = {"type": type(error).__name__, "message": str(error)}
-
-print(json.dumps(result))
-"#,
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-network-denied",
-    );
-
-    assert_eq!(exit_code, 0, "stderr: {stderr}");
-    let parsed: Value =
-        serde_json::from_str(stdout.trim()).expect("parse python network denied JSON");
-    assert_eq!(
-        parsed["dns"]["type"],
-        Value::String(String::from("PermissionError"))
-    );
-    assert!(
-        parsed["dns"]["message"]
-            .as_str()
-            .is_some_and(|message| message.contains("permission denied")),
-        "stdout: {stdout}"
-    );
-    assert_eq!(
-        parsed["http"]["type"],
-        Value::String(String::from("PermissionError"))
-    );
-}
-
-fn python_runtime_runs_node_subprocesses_through_sidecar_bridge() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-subprocess-bridge");
-    let cwd = temp_dir("python-subprocess-bridge-cwd");
-    write_fixture(&cwd.join("child.mjs"), "console.log('child-ready')\n");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-subprocess",
-        r#"
-import json
-import subprocess
-
-result = subprocess.run(["node", "./child.mjs"], capture_output=True, text=True, check=True)
-print(json.dumps({
-    "code": result.returncode,
-    "stdout": result.stdout.strip(),
-    "stderr": result.stderr.strip(),
-}))
-"#,
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-subprocess",
-        Duration::from_secs(30),
-    );
-
-    assert_eq!(exit_code, 0, "stderr: {stderr}");
-    let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse python subprocess JSON");
-    assert_eq!(parsed["code"], Value::from(0));
-    assert_eq!(parsed["stdout"], Value::String(String::from("child-ready")));
-    assert_eq!(parsed["stderr"], Value::String(String::new()));
-}
-
-fn python_runtime_surfaces_subprocess_permission_errors() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("python-subprocess-denied");
-    let cwd = temp_dir("python-subprocess-denied-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_metadata_and_permissions(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        HashMap::new(),
-        PermissionsPolicy {
-            fs: wire_permissions_allow_all().fs,
-            network: wire_permissions_allow_all().network,
-            child_process: Some(PatternPermissionScope::PatternPermissionRuleSet(
-                PatternPermissionRuleSet {
-                    default: Some(PermissionMode::Allow),
-                    rules: vec![PatternPermissionRule {
-                        mode: PermissionMode::Deny,
-                        operations: vec![String::from("*")],
-                        patterns: vec![String::from("node")],
-                    }],
-                },
-            )),
-            process: wire_permissions_allow_all().process,
-            env: wire_permissions_allow_all().env,
-            binding: wire_permissions_allow_all().binding,
-        },
-    );
-
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-subprocess-denied",
-        r#"
-import json
-import subprocess
-
-try:
-    subprocess.run(["node", "--version"], capture_output=True, text=True, check=True)
-    result = {"unexpected": True}
-except Exception as error:
-    result = {"type": type(error).__name__, "message": str(error)}
-
-print(json.dumps(result))
-"#,
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-python-subprocess-denied",
-    );
-
-    assert_eq!(exit_code, 0, "stderr: {stderr}");
-    let parsed: Value =
-        serde_json::from_str(stdout.trim()).expect("parse python subprocess denied JSON");
-    assert_eq!(
-        parsed["type"],
-        Value::String(String::from("PermissionError"))
-    );
-    assert!(
-        parsed["message"]
-            .as_str()
-            .is_some_and(|message| message.contains("permission denied")),
-        "stdout: {stdout}"
-    );
-}
-
-#[allow(clippy::too_many_arguments)]
-fn execute_python_cli(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    command: &str,
-    args: &[&str],
-) {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_vm(connection_id, session_id, vm_id),
-            RequestPayload::ExecuteRequest(ExecuteRequest {
-                process_id: process_id.to_owned(),
-                command: Some(command.to_owned()),
-                runtime: None,
-                entrypoint: None,
-                args: args.iter().map(|arg| (*arg).to_string()).collect(),
-                env: HashMap::new(),
-                cwd: None,
-                wasm_permission_tier: None,
-            }),
-        ))
-        .expect("start python CLI execution through wire");
-
-    match result.response.payload {
-        ResponsePayload::ProcessStartedResponse(response) => {
-            assert_eq!(response.process_id, process_id);
-        }
-        other => panic!("unexpected wire execute response: {other:?}"),
-    }
-}
-
-#[allow(clippy::too_many_arguments)]
-fn execute_python_cli_with_env(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    command: &str,
-    args: &[&str],
-    env: HashMap<String, String>,
-) {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_vm(connection_id, session_id, vm_id),
-            RequestPayload::ExecuteRequest(ExecuteRequest {
-                process_id: process_id.to_owned(),
-                command: Some(command.to_owned()),
-                runtime: None,
-                entrypoint: None,
-                args: args.iter().map(|arg| (*arg).to_string()).collect(),
-                env,
-                cwd: None,
-                wasm_permission_tier: None,
-            }),
-        ))
-        .expect("start python CLI execution through wire");
-
-    match result.response.payload {
-        ResponsePayload::ProcessStartedResponse(response) => {
-            assert_eq!(response.process_id, process_id);
-        }
-        other => panic!("unexpected wire execute response: {other:?}"),
-    }
-}
-
-fn python_command_pip_installs_via_micropip() {
-    assert_node_available();
-
-    let (port, server) = spawn_static_file_server(pyodide_asset_dir());
-    let mut sidecar = new_sidecar("python-cli-pip");
-    let cwd = temp_dir("python-cli-pip-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_metadata_and_permissions(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        HashMap::from([(
-            String::from("env.AGENTOS_LOOPBACK_EXEMPT_PORTS"),
-            serde_json::to_string(&vec![port.to_string()]).expect("serialize exempt ports"),
-        )]),
-        wire_permissions_allow_all(),
-    );
-
-    execute_python_cli_with_env(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-pip",
-        "pip",
-        &[
-            "install",
-            &format!("http://127.0.0.1:{port}/click-8.3.1-py3-none-any.whl"),
-        ],
-        HashMap::from([(
-            String::from("AGENTOS_PYODIDE_PACKAGE_BASE_URL"),
-            format!("http://127.0.0.1:{port}/"),
-        )]),
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-pip",
-        Duration::from_secs(90),
-    );
-    let _ = server.join();
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert!(
-        stdout.contains("Successfully installed"),
-        "stdout: {stdout}\nstderr: {stderr}"
-    );
-}
-
-fn python_command_runs_inline_code() {
-    assert_node_available();
-    let mut sidecar = new_sidecar("python-cli-inline");
-    let cwd = temp_dir("python-cli-inline-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_python_cli(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-c",
-        "python",
-        &["-c", "print(1 + 1)"],
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-c",
-    );
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert_eq!(stdout, "2\n", "stderr: {stderr}");
-}
-
-fn python_command_runs_script_with_argv() {
-    assert_node_available();
-    let mut sidecar = new_sidecar("python-cli-argv");
-    let cwd = temp_dir("python-cli-argv-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_root_filesystem(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        RootFilesystemDescriptor {
-            mode: RootFilesystemMode::Ephemeral,
-            disable_default_base_layer: false,
-            lowers: Vec::new(),
-            bootstrap_entries: vec![
-                root_dir("/workspace"),
-                root_file(
-                    "/workspace/argv.py",
-                    "import sys\nprint(\",\".join(sys.argv))\n",
-                    Some(RootFilesystemEntryEncoding::Utf8),
-                ),
-            ],
-        },
-    );
-
-    execute_python_cli(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-argv",
-        "python",
-        &["/workspace/argv.py", "alpha", "beta"],
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-argv",
-    );
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert_eq!(
-        stdout, "/workspace/argv.py,alpha,beta\n",
-        "stderr: {stderr}"
-    );
-}
-
-fn python_command_runs_module_with_dash_m() {
-    assert_node_available();
-    let mut sidecar = new_sidecar("python-cli-module");
-    let cwd = temp_dir("python-cli-module-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_python_cli(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-m",
-        "python",
-        &["-m", "this"],
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-m",
-    );
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    // `python -m this` runs the stdlib `this` module as __main__, printing the Zen.
-    assert!(
-        stdout.contains("Beautiful is better than ugly"),
-        "stdout: {stdout}\nstderr: {stderr}"
-    );
-}
-
-fn python_command_reads_program_from_stdin() {
-    assert_node_available();
-    let mut sidecar = new_sidecar("python-cli-stdin");
-    let cwd = temp_dir("python-cli-stdin-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_python_cli(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-stdin",
-        "python",
-        &["-"],
-    );
-    write_process_stdin(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-stdin",
-        "print('from stdin program')\n",
-    );
-    close_process_stdin(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-stdin",
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-stdin",
-    );
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert_eq!(stdout, "from stdin program\n", "stderr: {stderr}");
-}
-
-fn python_command_runs_interactive_repl() {
-    assert_node_available();
-    let mut sidecar = new_sidecar("python-cli-repl");
-    let cwd = temp_dir("python-cli-repl-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-    );
-
-    execute_python_cli(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-repl",
-        "python",
-        &[],
-    );
-    write_process_stdin(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-repl",
-        "print(6 * 7)\n",
-    );
-    close_process_stdin(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-repl",
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-py-repl",
-    );
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert!(stdout.contains("42"), "stdout: {stdout}\nstderr: {stderr}");
-}
-
-fn python_command_runs_as_nested_child_process() {
-    assert_node_available();
-    let mut sidecar = new_sidecar("python-cli-nested");
-    let workspace_host_dir = temp_dir("python-cli-nested-host");
-    let cwd = workspace_host_dir.clone();
-    let js_entry = workspace_host_dir.join("spawn.cjs");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python-nested");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    write_fixture(
-        &js_entry,
-        r#"
-const { spawnSync } = require('node:child_process');
-const result = spawnSync('python', ['-c', 'print(2 + 3)'], { encoding: 'utf8' });
-if (result.error) {
-  process.stderr.write(String(result.error));
-}
-process.stdout.write('status=' + result.status + ';out=' + (result.stdout || '').trim());
-"#,
-    );
-
-    bootstrap_root_filesystem(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        vec![root_dir("/workspace")],
-    );
-    let configure = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: vec![MountDescriptor {
-                    guest_path: String::from("/workspace"),
-                    read_only: false,
-                    plugin: MountPluginDescriptor {
-                        id: String::from("host_dir"),
-                        config: json!({
-                            "hostPath": workspace_host_dir.to_string_lossy().into_owned(),
-                            "readOnly": false,
-                        })
-                        .to_string(),
-                    },
-                }],
-                software: Vec::new(),
-                permissions: None,
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: HashMap::new(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ))
-        .expect("configure host_dir workspace mount through wire");
-    match configure.response.payload {
-        ResponsePayload::VmConfiguredResponse(response) => {
-            // 1 = just the client mount. With no packages configured there are no
-            // granular /opt/agentos leaf mounts (one tar/bin/current mount is added
-            // per package, not a single always-present staging mount).
-            assert_eq!(response.applied_mounts, 1);
-        }
-        other => panic!("unexpected wire configure-vm response: {other:?}"),
-    }
-
-    let js_fs_env = HashMap::from([
-        (
-            String::from("AGENTOS_GUEST_PATH_MAPPINGS"),
-            json!([{
-                "guestPath": "/workspace",
-                "hostPath": workspace_host_dir.to_string_lossy().into_owned(),
-            }])
-            .to_string(),
-        ),
-        (
-            String::from("AGENTOS_EXTRA_FS_READ_PATHS"),
-            json!([workspace_host_dir.to_string_lossy().into_owned()]).to_string(),
-        ),
-    ]);
-
-    execute_javascript_with_env(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-js-spawn",
-        &js_entry,
-        Vec::new(),
-        js_fs_env,
-    );
-
-    let (stdout, stderr, exit_code) = collect_process_output_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-js-spawn",
-        Duration::from_secs(60),
-    );
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert!(
-        stdout.contains("status=0;out=5"),
-        "stdout: {stdout}\nstderr: {stderr}"
-    );
-}
-
-fn python_reads_and_writes_arbitrary_vm_paths() {
-    assert_node_available();
-    let mut sidecar = new_sidecar("python-rootfs-rw");
-    let cwd = temp_dir("python-rootfs-rw-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_root_filesystem(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        RootFilesystemDescriptor {
-            mode: RootFilesystemMode::Ephemeral,
-            disable_default_base_layer: false,
-            lowers: Vec::new(),
-            bootstrap_entries: vec![root_file(
-                "/etc/agentos-test.txt",
-                "hello-from-etc\n",
-                Some(RootFilesystemEntryEncoding::Utf8),
-            )],
-        },
-    );
-
-    // Read from /etc and write to /tmp — both outside the old /workspace window.
-    execute_inline_python(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-rw",
-        "data = open('/etc/agentos-test.txt').read()\nwith open('/tmp/py-out.txt', 'w') as handle:\n    handle.write('written-by-python\\n')\nprint(data.strip())\n",
-    );
-    let (stdout, stderr, exit_code) =
-        collect_process_output(&mut sidecar, &connection_id, &session_id, &vm_id, "proc-rw");
-    assert_eq!(exit_code, 0, "stdout: {stdout}\nstderr: {stderr}");
-    assert_eq!(stdout, "hello-from-etc\n", "stderr: {stderr}");
-
-    // A SEPARATE Python process (fresh Pyodide FS) sees /tmp/py-out.txt — proving
-    // the write landed in the kernel VFS, not the per-process in-memory FS.
-    execute_inline_python(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-reread",
-        "print(open('/tmp/py-out.txt').read().strip())\n",
-    );
-    let (stdout2, stderr2, exit2) = collect_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-reread",
-    );
-    assert_eq!(exit2, 0, "stdout: {stdout2}\nstderr: {stderr2}");
-    assert_eq!(stdout2, "written-by-python\n", "stderr: {stderr2}");
-}
-
-fn python_pip_installs_persist_across_invocations() {
-    assert_node_available();
-    let (port, server) = spawn_static_file_server(pyodide_asset_dir());
-    let mut sidecar = new_sidecar("python-vfs-pip");
-    let cwd = temp_dir("python-vfs-pip-cwd");
-    let connection_id = authenticate_wire(&mut sidecar, "conn-python");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = create_vm_with_metadata_and_permissions(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::Python,
-        &cwd,
-        HashMap::from([(
-            String::from("env.AGENTOS_LOOPBACK_EXEMPT_PORTS"),
-            serde_json::to_string(&vec![port.to_string()]).expect("serialize exempt ports"),
-        )]),
-        wire_permissions_allow_all(),
-    );
-
-    // Process 1: `pip install` a wheel — the shim copies it into the VFS-backed
-    // site-packages so it persists past this interpreter.
-    execute_python_cli_with_env(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-pip-install",
-        "pip",
-        &[
-            "install",
-            &format!("http://127.0.0.1:{port}/click-8.3.1-py3-none-any.whl"),
-        ],
-        HashMap::from([(
-            String::from("AGENTOS_PYODIDE_PACKAGE_BASE_URL"),
-            format!("http://127.0.0.1:{port}/"),
-        )]),
-    );
-    let (stdout1, stderr1, exit1) = collect_process_output_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-pip-install",
-        Duration::from_secs(90),
-    );
-    assert_eq!(exit1, 0, "stdout: {stdout1}\nstderr: {stderr1}");
-    assert!(
-        stdout1.contains("Successfully installed"),
-        "stdout: {stdout1}\nstderr: {stderr1}"
-    );
-
-    // Process 2: a FRESH Python interpreter imports the package from the VFS
-    // site-packages — proving the install persisted across invocations.
-    execute_python_cli(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-pip-import",
-        "python",
-        &["-c", "import click; print(click.__version__)"],
-    );
-    let (stdout2, stderr2, exit2) = collect_process_output_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-pip-import",
-        Duration::from_secs(60),
-    );
-    let _ = server.join();
-    assert_eq!(exit2, 0, "stdout: {stdout2}\nstderr: {stderr2}");
-    assert_eq!(
-        stdout2.trim(),
-        "8.3.1",
-        "stdout: {stdout2}\nstderr: {stderr2}"
-    );
-}
-
-fn python_rootfs_suite() {
-    python_reads_and_writes_arbitrary_vm_paths();
-    python_pip_installs_persist_across_invocations();
-}
-
-fn python_cli_suite() {
-    python_command_runs_inline_code();
-    python_command_runs_script_with_argv();
-    python_command_runs_module_with_dash_m();
-    python_command_reads_program_from_stdin();
-    python_command_runs_interactive_repl();
-    python_command_runs_as_nested_child_process();
-    python_command_pip_installs_via_micropip();
-}
-
-#[test]
-fn python_suite() {
-    // Multiple libtest cases in this V8/Pyodide-backed integration binary still
-    // trip shared-process teardown/init crashes, so under plain `cargo test`
-    // (one process for the whole binary) keep the coverage in one suite.
-    //
-    // cargo-nextest runs every `#[test]` in its OWN process, so that crash
-    // cannot occur there — `mod python_split` below exposes each case as a
-    // separate test that nextest runs in parallel across cores (this suite was
-    // the single longest test in CI at ~400s serial). Skip the collapsed run
-    // under nextest so the work isn't done twice; the split cases skip
-    // themselves under `cargo test`. nextest sets `NEXTEST=1` in each test
-    // process; libtest/`cargo test` does not.
-    if std::env::var_os("NEXTEST").is_some() {
-        return;
-    }
-    static_file_server_rejects_traversal_paths();
-    python_runtime_executes_code_end_to_end();
-    python_runtime_executes_workspace_py_file_by_path();
-    python_runtime_reports_syntax_errors_over_stderr();
-    python_runtime_blocks_pyodide_js_escape_hatches();
-    concurrent_python_processes_stay_isolated_across_vms();
-    python_runtime_mounts_workspace_over_the_kernel_vfs();
-    python_runtime_supports_file_delete_and_rename();
-    python_runtime_supports_raw_tcp_and_udp_sockets();
-    python_runtime_supports_symlink_readlink_and_metadata();
-    workspace_files_are_shared_between_javascript_and_python_runtimes();
-    python_workspace_mount_respects_read_only_root_permissions();
-    python_runtime_blocks_mapped_pyodide_cache_symlink_metadata_escape();
-    python_runtime_blocks_mapped_pyodide_cache_symlink_swap_toctou_escape();
-    python_runtime_routes_stdin_writes_and_close_to_pyodide();
-    python_runtime_supports_interactive_input_prompts_and_multiple_streaming_writes();
-    python_runtime_close_stdin_triggers_input_eof_and_empty_read();
-    python_runtime_kill_process_terminates_blocked_stdin_reads();
-    python_runtime_imports_bundled_numpy_without_network();
-    python_runtime_imports_bundled_pandas_without_network();
-    python_runtime_supports_micropip_package_installation();
-    python_runtime_micropip_install_respects_network_permissions();
-    python_runtime_routes_dns_and_http_through_sidecar_bridge();
-    python_runtime_routes_requests_through_sidecar_bridge();
-    python_runtime_surfaces_network_permission_errors();
-    python_runtime_runs_node_subprocesses_through_sidecar_bridge();
-    python_runtime_surfaces_subprocess_permission_errors();
-    python_cli_suite();
-    python_rootfs_suite();
-}
-
-/// Per-case split of `python_suite` for cargo-nextest (process-per-test).
-///
-/// Each `#[test]` here runs exactly one Pyodide case in its own process, so the
-/// shared-process V8/Pyodide teardown/init crash that forces the collapsed
-/// `python_suite` above does not apply, and the ~36 cases run in parallel across
-/// cores instead of serially. Each case skips itself under plain `cargo test`
-/// (where `NEXTEST` is unset) so the collapsed suite owns the run there; the
-/// collapsed suite likewise skips under nextest so the work isn't duplicated.
-mod python_split {
-    macro_rules! nextest_cases {
-        ($($case:ident),+ $(,)?) => {
-            $(
-                #[test]
-                fn $case() {
-                    // Covered by the collapsed `super::python_suite` under `cargo test`.
-                    if std::env::var_os("NEXTEST").is_none() {
-                        return;
-                    }
-                    super::$case();
-                }
-            )+
-        };
-    }
-
-    nextest_cases!(
-        static_file_server_rejects_traversal_paths,
-        python_runtime_executes_code_end_to_end,
-        python_runtime_executes_workspace_py_file_by_path,
-        python_runtime_reports_syntax_errors_over_stderr,
-        python_runtime_blocks_pyodide_js_escape_hatches,
-        concurrent_python_processes_stay_isolated_across_vms,
-        python_runtime_mounts_workspace_over_the_kernel_vfs,
-        python_runtime_supports_file_delete_and_rename,
-        python_runtime_supports_raw_tcp_and_udp_sockets,
-        python_runtime_supports_symlink_readlink_and_metadata,
-        workspace_files_are_shared_between_javascript_and_python_runtimes,
-        python_workspace_mount_respects_read_only_root_permissions,
-        python_runtime_blocks_mapped_pyodide_cache_symlink_metadata_escape,
-        python_runtime_blocks_mapped_pyodide_cache_symlink_swap_toctou_escape,
-        python_runtime_routes_stdin_writes_and_close_to_pyodide,
-        python_runtime_supports_interactive_input_prompts_and_multiple_streaming_writes,
-        python_runtime_close_stdin_triggers_input_eof_and_empty_read,
-        python_runtime_kill_process_terminates_blocked_stdin_reads,
-        python_runtime_imports_bundled_numpy_without_network,
-        python_runtime_imports_bundled_pandas_without_network,
-        python_runtime_routes_dns_and_http_through_sidecar_bridge,
-        python_runtime_routes_requests_through_sidecar_bridge,
-        python_runtime_surfaces_network_permission_errors,
-        python_runtime_runs_node_subprocesses_through_sidecar_bridge,
-        python_runtime_surfaces_subprocess_permission_errors,
-        python_command_runs_inline_code,
-        python_command_runs_script_with_argv,
-        python_command_runs_module_with_dash_m,
-        python_command_reads_program_from_stdin,
-        python_command_runs_interactive_repl,
-        python_command_runs_as_nested_child_process,
-        python_command_pip_installs_via_micropip,
-        python_reads_and_writes_arbitrary_vm_paths,
-        python_pip_installs_persist_across_invocations,
-    );
-
-    // The network-DENIED micropip case can't load the micropip package on its
-    // own (network is denied, so the fetch hangs); it relies on micropip already
-    // being loaded in the same *process* by a prior network-ALLOWED install
-    // (Pyodide's module state is process-global). Under nextest's
-    // process-per-test model that shared state is gone, so pair it in one
-    // sequential case with a network-allowed install that loads micropip first.
-    // The other micropip/pip installs are self-contained (they load micropip
-    // themselves) and stay split for parallelism. Skips under `cargo test`,
-    // where the collapsed `super::python_suite` owns the run.
-    // Named `*_suite` so it inherits nextest.toml's 600s slow-timeout override
-    // for `test(/python.*_suite/)` when the denied case runs (nightly).
-    #[test]
-    fn python_micropip_suite() {
-        if std::env::var_os("NEXTEST").is_none() {
-            return;
-        }
-        // Both micropip installs are heavy COLD work under process-per-test (no
-        // warm micropip load to reuse): the network-allowed install is ~24s, and
-        // the network-denied variant is timeout-bound (~2min on the denied-op
-        // timeout). Neither is on the critical path, so run the whole group only in
-        // the nightly timing lane (SECURE_EXEC_RUN_TIMING_TESTS=1); `cargo test`'s
-        // collapsed `super::python_suite` still covers both locally. The denied
-        // case also needs the allowed install loaded in the SAME process, so they
-        // stay grouped. See CLAUDE.md > Testing.
-        if std::env::var_os("SECURE_EXEC_RUN_TIMING_TESTS").is_none() {
-            return;
-        }
-        super::python_runtime_supports_micropip_package_installation();
-        super::python_runtime_micropip_install_respects_network_permissions();
-    }
-}
diff --git a/crates/sidecar/tests/sandbox_agent.rs b/crates/sidecar/tests/sandbox_agent.rs
deleted file mode 100644
index d6e8ccace..000000000
--- a/crates/sidecar/tests/sandbox_agent.rs
+++ /dev/null
@@ -1,594 +0,0 @@
-mod sandbox_agent {
-    include!("../src/plugins/sandbox_agent.rs");
-
-    mod tests {
-        use super::test_support::MockSandboxAgentServer;
-        use super::{
-            validate_sandbox_agent_base_url, SandboxAgentFilesystem, SandboxAgentMountConfig,
-            SandboxAgentMountPlugin,
-        };
-        use nix::unistd::{Gid, Uid};
-        use secure_exec_kernel::mount_plugin::{
-            FileSystemPluginFactory, OpenFileSystemPluginRequest,
-        };
-        use secure_exec_kernel::vfs::VirtualFileSystem;
-        use serde_json::json;
-        use std::fs;
-        use std::os::unix::fs::{MetadataExt, PermissionsExt};
-
-        #[test]
-        fn filesystem_round_trips_small_files_and_uses_http_range_for_large_pread() {
-            let server = MockSandboxAgentServer::start("secure-exec-sandbox-plugin", None);
-            fs::write(server.root().join("hello.txt"), "hello from sandbox").expect("seed file");
-            let large_file = (0..100 * 1024)
-                .map(|index| (index % 251) as u8)
-                .collect::<Vec<_>>();
-            fs::write(server.root().join("large.bin"), &large_file).expect("seed large file");
-
-            let mut filesystem = SandboxAgentFilesystem::from_config(SandboxAgentMountConfig {
-                base_url: server.base_url().to_owned(),
-                token: None,
-                headers: None,
-                base_path: None,
-                timeout_ms: Some(5_000),
-                max_full_read_bytes: Some(200 * 1024),
-            })
-            .expect("create sandbox_agent filesystem");
-
-            assert_eq!(
-                filesystem
-                    .read_text_file("/hello.txt")
-                    .expect("read remote file"),
-                "hello from sandbox"
-            );
-
-            filesystem
-                .write_file("/nested/from-vm.txt", b"native sandbox mount".to_vec())
-                .expect("write remote file");
-            assert_eq!(
-                fs::read_to_string(server.root().join("nested/from-vm.txt"))
-                    .expect("read written file"),
-                "native sandbox mount"
-            );
-
-            let chunk = filesystem
-                .pread("/large.bin", 4_096, 1_024)
-                .expect("pread should use a byte range");
-            assert_eq!(chunk, large_file[4_096..5_120].to_vec());
-
-            let logged_requests = server.requests();
-            let pread_request = logged_requests
-                .iter()
-                .find(|request| {
-                    request.method == "GET"
-                        && request.path == "/v1/fs/file"
-                        && request.query.get("path") == Some(&String::from("/large.bin"))
-                })
-                .expect("log pread request");
-            assert_eq!(
-                pread_request.headers.get("range"),
-                Some(&String::from("bytes=4096-5119"))
-            );
-            assert_eq!(pread_request.response_status, 206);
-            assert_eq!(pread_request.response_body_bytes, 1_024);
-        }
-
-        #[test]
-        fn filesystem_pread_falls_back_to_full_fetch_when_remote_ignores_range() {
-            let server = MockSandboxAgentServer::start_without_range_support(
-                "secure-exec-sandbox-plugin",
-                None,
-            );
-            let large_file = (0..100 * 1024)
-                .map(|index| (index % 251) as u8)
-                .collect::<Vec<_>>();
-            fs::write(server.root().join("large.bin"), &large_file).expect("seed large file");
-
-            let mut filesystem = SandboxAgentFilesystem::from_config(SandboxAgentMountConfig {
-                base_url: server.base_url().to_owned(),
-                token: None,
-                headers: None,
-                base_path: None,
-                timeout_ms: Some(5_000),
-                max_full_read_bytes: Some(200 * 1024),
-            })
-            .expect("create sandbox_agent filesystem");
-
-            let chunk = filesystem
-                .pread("/large.bin", 4_096, 1_024)
-                .expect("pread should fall back to the full response");
-            assert_eq!(chunk, large_file[4_096..5_120].to_vec());
-
-            let logged_requests = server.requests();
-            let pread_request = logged_requests
-                .iter()
-                .find(|request| {
-                    request.method == "GET"
-                        && request.path == "/v1/fs/file"
-                        && request.query.get("path") == Some(&String::from("/large.bin"))
-                })
-                .expect("log pread request");
-            assert_eq!(
-                pread_request.headers.get("range"),
-                Some(&String::from("bytes=4096-5119"))
-            );
-            assert_eq!(pread_request.response_status, 200);
-            assert_eq!(pread_request.response_body_bytes, large_file.len());
-        }
-
-        #[test]
-        fn filesystem_pread_rejects_full_fetch_fallback_above_limit() {
-            let server = MockSandboxAgentServer::start_without_range_support(
-                "secure-exec-sandbox-plugin-limit",
-                None,
-            );
-            fs::write(server.root().join("large.bin"), vec![b'x'; 4096]).expect("seed large file");
-
-            let mut filesystem = SandboxAgentFilesystem::from_config(SandboxAgentMountConfig {
-                base_url: server.base_url().to_owned(),
-                token: None,
-                headers: None,
-                base_path: None,
-                timeout_ms: Some(5_000),
-                max_full_read_bytes: Some(128),
-            })
-            .expect("create sandbox_agent filesystem");
-
-            let error = filesystem
-                .pread("/large.bin", 0, 64)
-                .expect_err("full fetch fallback should be capped");
-            assert_eq!(error.code(), "EIO");
-            assert!(
-                error.to_string().contains("exceeded 128 byte limit"),
-                "unexpected error: {error}"
-            );
-        }
-
-        #[test]
-        fn filesystem_pread_rejects_streamed_full_fetch_fallback_above_limit() {
-            let server = MockSandboxAgentServer::start_without_range_support(
-                "secure-exec-sandbox-plugin-stream-limit",
-                None,
-            );
-            fs::write(server.root().join("stream-over-limit"), vec![b'x'; 4096])
-                .expect("seed large file");
-
-            let mut filesystem = SandboxAgentFilesystem::from_config(SandboxAgentMountConfig {
-                base_url: server.base_url().to_owned(),
-                token: None,
-                headers: None,
-                base_path: None,
-                timeout_ms: Some(5_000),
-                max_full_read_bytes: Some(128),
-            })
-            .expect("create sandbox_agent filesystem");
-
-            let error = filesystem
-                .pread("/stream-over-limit", 0, 64)
-                .expect_err("close-delimited full fetch fallback should be capped");
-            assert_eq!(error.code(), "EIO");
-            assert!(
-                error.to_string().contains("exceeded 128 byte limit"),
-                "unexpected error: {error}"
-            );
-
-            let logged_requests = server.requests();
-            let pread_request = logged_requests
-                .iter()
-                .find(|request| {
-                    request.method == "GET"
-                        && request.path == "/v1/fs/file"
-                        && request.query.get("path") == Some(&String::from("/stream-over-limit"))
-                })
-                .expect("log pread request");
-            assert_eq!(pread_request.response_status, 200);
-            assert_eq!(pread_request.response_body_bytes, 4096);
-        }
-
-        #[test]
-        fn sandbox_agent_client_does_not_follow_redirects() {
-            let server = MockSandboxAgentServer::start("secure-exec-sandbox-plugin-redirect", None);
-
-            let mut filesystem = SandboxAgentFilesystem::from_config(SandboxAgentMountConfig {
-                base_url: server.base_url().to_owned(),
-                token: None,
-                headers: None,
-                base_path: None,
-                timeout_ms: Some(5_000),
-                max_full_read_bytes: Some(128),
-            })
-            .expect("create sandbox_agent filesystem");
-
-            let error = filesystem
-                .read_file("/redirect-to-private")
-                .expect_err("sandbox_agent client should not follow redirects");
-            assert_eq!(error.code(), "EIO");
-            assert!(
-                error.to_string().contains("status 302"),
-                "unexpected redirect error: {error}"
-            );
-
-            let logged_requests = server.requests();
-            assert_eq!(logged_requests.len(), 1);
-            assert_eq!(logged_requests[0].response_status, 302);
-        }
-
-        #[test]
-        fn sandbox_agent_base_url_accepts_loopback_over_http() {
-            for base_url in [
-                "http://localhost:1234",
-                "http://127.0.0.1:1234",
-                "http://[::1]:1234",
-            ] {
-                assert_eq!(
-                    validate_sandbox_agent_base_url(base_url)
-                        .expect("loopback baseUrl should be accepted"),
-                    base_url
-                );
-            }
-        }
-
-        #[test]
-        fn sandbox_agent_base_url_allows_private_and_public_https_hosts() {
-            // baseUrl is trusted mount config, not an SSRF surface, so private /
-            // metadata hosts are accepted as long as they are well-formed https.
-            for base_url in [
-                "https://169.254.169.254/latest",
-                "https://10.0.0.1:8080",
-                "https://[2001:db8::1]:8080",
-                "https://sandbox.example.com",
-                "https://93.184.216.34",
-            ] {
-                validate_sandbox_agent_base_url(base_url).unwrap_or_else(|error| {
-                    panic!("https baseUrl {base_url} should be accepted: {error}")
-                });
-            }
-            // Trailing slash is trimmed (request building depends on this).
-            assert_eq!(
-                validate_sandbox_agent_base_url("https://sandbox.example.com/api/")
-                    .expect("trailing slash trimmed"),
-                "https://sandbox.example.com/api"
-            );
-        }
-
-        #[test]
-        fn sandbox_agent_base_url_requires_https_for_non_local_targets() {
-            // The bearer token rides the Authorization header, so non-local http
-            // is still rejected to avoid leaking it over plaintext.
-            for base_url in ["http://sandbox.example.com", "http://93.184.216.34"] {
-                let error = validate_sandbox_agent_base_url(base_url)
-                    .expect_err("non-local http baseUrl should be rejected");
-                assert!(
-                    error.to_string().contains("must use https"),
-                    "unexpected error for {base_url}: {error}"
-                );
-            }
-        }
-
-        #[test]
-        fn sandbox_agent_base_url_rejects_malformed_urls() {
-            for base_url in ["", "not a url", "ftp://sandbox.example.com"] {
-                validate_sandbox_agent_base_url(base_url).expect_err(&format!(
-                    "malformed baseUrl {base_url:?} should be rejected"
-                ));
-            }
-        }
-
-        #[test]
-        fn filesystem_truncate_uses_process_api_without_full_file_buffering() {
-            let server = MockSandboxAgentServer::start("secure-exec-sandbox-plugin-truncate", None);
-            fs::write(server.root().join("large.bin"), vec![b'x'; 512]).expect("seed large file");
-
-            let mut filesystem = SandboxAgentFilesystem::from_config(SandboxAgentMountConfig {
-                base_url: server.base_url().to_owned(),
-                token: None,
-                headers: None,
-                base_path: None,
-                timeout_ms: Some(5_000),
-                max_full_read_bytes: Some(128),
-            })
-            .expect("create sandbox_agent filesystem");
-
-            filesystem
-                .truncate("/large.bin", 3)
-                .expect("truncate large file through process helper");
-            assert_eq!(
-                fs::read(server.root().join("large.bin")).expect("read truncated file"),
-                b"xxx".to_vec()
-            );
-
-            filesystem
-                .truncate("/large.bin", 6)
-                .expect("extend file through process helper");
-            assert_eq!(
-                fs::read(server.root().join("large.bin")).expect("read extended file"),
-                vec![b'x', b'x', b'x', 0, 0, 0]
-            );
-
-            filesystem
-                .truncate("/large.bin", 0)
-                .expect("truncate to zero through write_file path");
-            assert_eq!(
-                fs::metadata(server.root().join("large.bin"))
-                    .expect("stat zero-length file")
-                    .len(),
-                0
-            );
-
-            let logged_requests = server.requests();
-            assert!(
-                logged_requests.iter().any(|request| {
-                    request.method == "POST" && request.path == "/v1/processes/run"
-                }),
-                "non-zero truncate should use process helper"
-            );
-            assert!(
-                !logged_requests.iter().any(|request| {
-                    request.method == "GET"
-                        && request.path == "/v1/fs/file"
-                        && request.query.get("path") == Some(&String::from("/large.bin"))
-                }),
-                "truncate should not issue a full-file GET"
-            );
-            assert!(
-                logged_requests.iter().any(|request| {
-                    request.method == "PUT"
-                        && request.path == "/v1/fs/file"
-                        && request.query.get("path") == Some(&String::from("/large.bin"))
-                }),
-                "truncate(path, 0) should still use the write_file path"
-            );
-        }
-
-        #[test]
-        fn plugin_scopes_base_path_and_preserves_auth_headers() {
-            let server = MockSandboxAgentServer::start(
-                "secure-exec-sandbox-plugin-auth",
-                Some("secret-token"),
-            );
-            fs::create_dir_all(server.root().join("scoped")).expect("create scoped root");
-            fs::write(server.root().join("scoped/hello.txt"), "scoped hello")
-                .expect("seed scoped file");
-
-            let plugin = SandboxAgentMountPlugin;
-            let mut mounted = plugin
-                .open(OpenFileSystemPluginRequest {
-                    vm_id: "vm-1",
-                    guest_path: "/sandbox",
-                    read_only: false,
-                    config: &json!({
-                        "baseUrl": server.base_url(),
-                        "token": "secret-token",
-                        "headers": {
-                            "x-sandbox-test": "enabled"
-                        },
-                        "basePath": "/scoped"
-                    }),
-                    context: &(),
-                })
-                .expect("open sandbox_agent mount");
-
-            assert_eq!(
-                mounted.read_file("/hello.txt").expect("read scoped file"),
-                b"scoped hello".to_vec()
-            );
-            mounted
-                .write_file("/from-plugin.txt", b"written through plugin".to_vec())
-                .expect("write scoped file");
-            assert_eq!(
-                fs::read_to_string(server.root().join("scoped/from-plugin.txt"))
-                    .expect("read plugin output"),
-                "written through plugin"
-            );
-
-            let logged_requests = server.requests();
-            assert!(logged_requests.iter().any(|request| {
-                request.headers.get("x-sandbox-test") == Some(&String::from("enabled"))
-            }));
-        }
-
-        #[test]
-        fn plugin_normalizes_relative_base_path_before_scoping_requests() {
-            let server =
-                MockSandboxAgentServer::start("secure-exec-sandbox-plugin-base-path", None);
-            fs::create_dir_all(server.root().join("scoped")).expect("create scoped root");
-            fs::write(
-                server.root().join("scoped/hello.txt"),
-                "relative scoped hello",
-            )
-            .expect("seed scoped file");
-
-            let mut filesystem = SandboxAgentFilesystem::from_config(SandboxAgentMountConfig {
-                base_url: server.base_url().to_owned(),
-                token: None,
-                headers: None,
-                base_path: Some(String::from("raw/../scoped/")),
-                timeout_ms: Some(5_000),
-                max_full_read_bytes: Some(128),
-            })
-            .expect("create sandbox_agent filesystem");
-
-            assert_eq!(
-                filesystem
-                    .read_text_file("/hello.txt")
-                    .expect("read scoped file"),
-                "relative scoped hello"
-            );
-
-            let logged_requests = server.requests();
-            let read_request = logged_requests
-                .iter()
-                .find(|request| request.method == "GET" && request.path == "/v1/fs/file")
-                .expect("log read request");
-            assert_eq!(
-                read_request.query.get("path"),
-                Some(&String::from("scoped/hello.txt"))
-            );
-        }
-
-        #[test]
-        fn plugin_unscopes_process_helper_targets_for_relative_base_path() {
-            let server =
-                MockSandboxAgentServer::start("secure-exec-sandbox-plugin-relative-process", None);
-            fs::create_dir_all(server.root().join("scoped")).expect("create scoped root");
-            fs::write(
-                server.root().join("scoped/original.txt"),
-                "relative symlink target",
-            )
-            .expect("seed scoped file");
-
-            let mut filesystem = SandboxAgentFilesystem::from_config(SandboxAgentMountConfig {
-                base_url: server.base_url().to_owned(),
-                token: None,
-                headers: None,
-                base_path: Some(String::from("raw/../scoped/")),
-                timeout_ms: Some(5_000),
-                max_full_read_bytes: Some(128),
-            })
-            .expect("create sandbox_agent filesystem");
-
-            filesystem
-                .symlink("/original.txt", "/alias.txt")
-                .expect("create scoped symlink");
-            assert_eq!(
-                filesystem.read_link("/alias.txt").expect("read symlink"),
-                "/original.txt"
-            );
-            assert_eq!(
-                filesystem.realpath("/alias.txt").expect("resolve symlink"),
-                "/original.txt"
-            );
-
-            filesystem
-                .symlink("scoped/original.txt", "/relative-alias.txt")
-                .expect("create relative scoped symlink");
-            assert_eq!(
-                filesystem
-                    .read_link("/relative-alias.txt")
-                    .expect("read relative symlink"),
-                "scoped/original.txt"
-            );
-        }
-
-        #[test]
-        fn filesystem_uses_process_api_for_symlink_and_metadata_operations() {
-            let server = MockSandboxAgentServer::start("secure-exec-sandbox-plugin-process", None);
-            fs::write(server.root().join("original.txt"), "hello from sandbox")
-                .expect("seed original file");
-
-            let mut filesystem = SandboxAgentFilesystem::from_config(SandboxAgentMountConfig {
-                base_url: server.base_url().to_owned(),
-                token: None,
-                headers: None,
-                base_path: None,
-                timeout_ms: Some(5_000),
-                max_full_read_bytes: Some(128),
-            })
-            .expect("create sandbox_agent filesystem");
-
-            filesystem
-                .symlink("/original.txt", "/alias.txt")
-                .expect("create remote symlink");
-            assert_eq!(
-                filesystem
-                    .read_link("/alias.txt")
-                    .expect("read remote symlink"),
-                "/original.txt"
-            );
-            assert_eq!(
-                filesystem
-                    .realpath("/alias.txt")
-                    .expect("resolve remote symlink"),
-                "/original.txt"
-            );
-
-            filesystem
-                .link("/original.txt", "/linked.txt")
-                .expect("create remote hard link");
-            let original_metadata =
-                fs::metadata(server.root().join("original.txt")).expect("stat original hard link");
-            let linked_metadata =
-                fs::metadata(server.root().join("linked.txt")).expect("stat linked hard link");
-            assert_eq!(original_metadata.ino(), linked_metadata.ino());
-
-            filesystem
-                .write_file("/linked.txt", b"updated through hard link".to_vec())
-                .expect("write through hard link");
-            assert_eq!(
-                fs::read_to_string(server.root().join("original.txt"))
-                    .expect("read original after linked write"),
-                "updated through hard link"
-            );
-
-            filesystem
-                .chmod("/original.txt", 0o600)
-                .expect("chmod remote file");
-            assert_eq!(
-                fs::metadata(server.root().join("original.txt"))
-                    .expect("stat chmod result")
-                    .permissions()
-                    .mode()
-                    & 0o777,
-                0o600
-            );
-
-            let uid = Uid::current().as_raw();
-            let gid = Gid::current().as_raw();
-            filesystem
-                .chown("/original.txt", uid, gid)
-                .expect("chown remote file to current owner");
-            let chown_metadata =
-                fs::metadata(server.root().join("original.txt")).expect("stat chown result");
-            assert_eq!(chown_metadata.uid(), uid);
-            assert_eq!(chown_metadata.gid(), gid);
-
-            let atime_ms = 1_700_000_000_000_u64;
-            let mtime_ms = 1_710_000_000_000_u64;
-            filesystem
-                .utimes("/original.txt", atime_ms, mtime_ms)
-                .expect("update remote timestamps");
-            let utimes_metadata =
-                fs::metadata(server.root().join("original.txt")).expect("stat utimes result");
-            let observed_atime_ms =
-                utimes_metadata.atime() * 1000 + utimes_metadata.atime_nsec() / 1_000_000;
-            let observed_mtime_ms =
-                utimes_metadata.mtime() * 1000 + utimes_metadata.mtime_nsec() / 1_000_000;
-            assert_eq!(observed_atime_ms, atime_ms as i64);
-            assert_eq!(observed_mtime_ms, mtime_ms as i64);
-
-            let logged_requests = server.requests();
-            assert!(logged_requests.iter().any(|request| {
-                request.method == "POST" && request.path == "/v1/processes/run"
-            }));
-        }
-
-        #[test]
-        fn filesystem_reports_clear_error_when_process_api_is_unavailable() {
-            let server = MockSandboxAgentServer::start_without_process_api(
-                "secure-exec-sandbox-plugin-no-proc",
-                None,
-            );
-            fs::write(server.root().join("original.txt"), "hello from sandbox")
-                .expect("seed original file");
-
-            let mut filesystem = SandboxAgentFilesystem::from_config(SandboxAgentMountConfig {
-                base_url: server.base_url().to_owned(),
-                token: None,
-                headers: None,
-                base_path: None,
-                timeout_ms: Some(5_000),
-                max_full_read_bytes: Some(128),
-            })
-            .expect("create sandbox_agent filesystem");
-
-            let error = filesystem
-                .symlink("/original.txt", "/alias.txt")
-                .expect_err("symlink should fail clearly without process API");
-            assert_eq!(error.code(), "ENOSYS");
-            assert!(
-                error.to_string().contains("process API"),
-                "error should mention process API availability: {error}"
-            );
-        }
-    }
-}
diff --git a/crates/sidecar/tests/security_audit.rs b/crates/sidecar/tests/security_audit.rs
deleted file mode 100644
index 48f890303..000000000
--- a/crates/sidecar/tests/security_audit.rs
+++ /dev/null
@@ -1,396 +0,0 @@
-mod support;
-
-use secure_exec_bridge::StructuredEventRecord;
-use secure_exec_sidecar::wire::{
-    BootstrapRootFilesystemRequest, ConfigureVmRequest, FsPermissionRule, FsPermissionRuleSet,
-    FsPermissionScope, GuestFilesystemCallRequest, GuestFilesystemOperation, GuestRuntimeKind,
-    KillProcessRequest, MountDescriptor, MountPluginDescriptor, PermissionMode, PermissionsPolicy,
-    RequestPayload, ResponsePayload, RootFilesystemEntry, RootFilesystemEntryEncoding,
-    RootFilesystemEntryKind,
-};
-use std::collections::HashMap;
-use std::time::Duration;
-use support::{
-    assert_node_available, authenticate_wire, authenticate_wire_with_token,
-    collect_process_output_wire_with_timeout, create_vm_wire, execute_wire, open_session_wire,
-    temp_dir, wire_request, wire_vm, write_fixture, RecordingBridge,
-};
-
-fn structured_events(
-    sidecar: &secure_exec_sidecar::NativeSidecar<RecordingBridge>,
-) -> Vec<StructuredEventRecord> {
-    sidecar
-        .with_bridge_mut(|bridge| bridge.structured_events.clone())
-        .expect("inspect structured events")
-}
-
-fn find_event<'a>(events: &'a [StructuredEventRecord], name: &str) -> &'a StructuredEventRecord {
-    events
-        .iter()
-        .find(|event| event.name == name)
-        .unwrap_or_else(|| panic!("missing structured event: {name}"))
-}
-
-fn assert_timestamp(event: &StructuredEventRecord) {
-    event.fields["timestamp"]
-        .parse::<u128>()
-        .unwrap_or_else(|error| panic!("invalid audit timestamp: {error}"));
-}
-
-fn wait_for_process_exit_bounded(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-) -> i32 {
-    let (_, _, exit_code) = collect_process_output_wire_with_timeout(
-        sidecar,
-        connection_id,
-        session_id,
-        vm_id,
-        process_id,
-        Duration::from_secs(10),
-    );
-    exit_code
-}
-
-#[test]
-fn auth_failures_emit_security_audit_events() {
-    let mut sidecar = support::new_sidecar("security-audit-auth");
-
-    let result = authenticate_wire_with_token(&mut sidecar, 1, "conn-hint", "wrong-token");
-    match result.response.payload {
-        ResponsePayload::RejectedResponse(rejected) => {
-            assert_eq!(rejected.code, "unauthorized");
-            assert!(rejected.message.contains("invalid auth token"));
-        }
-        other => panic!("unexpected auth failure response: {other:?}"),
-    }
-
-    let events = structured_events(&sidecar);
-    let event = find_event(&events, "security.auth.failed");
-    assert_eq!(event.vm_id, "sidecar-security-audit-auth");
-    assert_eq!(event.fields["source"], "sidecar-tests");
-    assert_eq!(event.fields["connection_id"], "conn-hint");
-    assert!(event.fields["reason"].contains("invalid auth token"));
-    assert_timestamp(event);
-}
-
-#[test]
-fn filesystem_permission_denials_emit_security_audit_events() {
-    let mut sidecar = support::new_sidecar("security-audit-permissions");
-    let cwd = temp_dir("security-audit-permissions-cwd");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    let denied_vm_id = vm_id.clone();
-    let sidecar = &mut sidecar;
-    let _ = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: Vec::new(),
-                software: Vec::new(),
-                permissions: Some(PermissionsPolicy {
-                    fs: Some(FsPermissionScope::FsPermissionRuleSet(
-                        FsPermissionRuleSet {
-                            default: Some(PermissionMode::Allow),
-                            rules: vec![FsPermissionRule {
-                                mode: PermissionMode::Deny,
-                                operations: vec![String::from("read")],
-                                paths: vec![String::from("/blocked.txt")],
-                            }],
-                        },
-                    )),
-                    network: None,
-                    child_process: None,
-                    process: None,
-                    env: None,
-                    binding: None,
-                }),
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: HashMap::new(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ))
-        .expect("configure vm permissions");
-
-    let write = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &denied_vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::WriteFile,
-                path: String::from("/blocked.txt"),
-                destination_path: None,
-                target: None,
-                content: Some(String::from("blocked")),
-                encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ))
-        .expect("write blocked file");
-    match write.response.payload {
-        ResponsePayload::GuestFilesystemResultResponse(_) => {}
-        other => panic!("unexpected write response: {other:?}"),
-    }
-
-    let read = sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            wire_vm(&connection_id, &session_id, &denied_vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::ReadFile,
-                path: String::from("/blocked.txt"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ))
-        .expect("dispatch denied read");
-    match read.response.payload {
-        ResponsePayload::RejectedResponse(rejected) => {
-            // Which layer surfaces the denial (a POSIX-coded kernel error ->
-            // "kernel_error", any other message -> "invalid_state") depends on
-            // the host environment; the audit event below is the contract.
-            assert!(
-                rejected.code == "invalid_state" || rejected.code == "kernel_error",
-                "unexpected rejection code: {}",
-                rejected.code
-            );
-            assert!(rejected.message.contains("EACCES"));
-        }
-        other => panic!("unexpected read response: {other:?}"),
-    }
-
-    let events = structured_events(sidecar);
-    let event = find_event(&events, "security.permission.denied");
-    assert_eq!(event.vm_id, denied_vm_id);
-    assert_eq!(event.fields["operation"], "read");
-    assert_eq!(event.fields["path"], "/blocked.txt");
-    assert_eq!(event.fields["policy"], "fs.read");
-    assert!(event.fields["reason"].contains("fs.read"));
-    assert_timestamp(event);
-}
-
-#[test]
-fn mount_operations_emit_security_audit_events() {
-    let mut sidecar = support::new_sidecar("security-audit-mounts");
-    let cwd = temp_dir("security-audit-mounts-cwd");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::BootstrapRootFilesystemRequest(BootstrapRootFilesystemRequest {
-                entries: vec![RootFilesystemEntry {
-                    path: String::from("/workspace"),
-                    kind: RootFilesystemEntryKind::Directory,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    content: None,
-                    encoding: None,
-                    target: None,
-                    executable: false,
-                }],
-            }),
-        ))
-        .expect("bootstrap workspace");
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: vec![MountDescriptor {
-                    guest_path: String::from("/workspace"),
-                    read_only: false,
-                    plugin: MountPluginDescriptor {
-                        id: String::from("memory"),
-                        config: serde_json::to_string(&serde_json::json!({}))
-                            .expect("serialize memory mount config"),
-                    },
-                }],
-                software: Vec::new(),
-                permissions: None,
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: HashMap::new(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ))
-        .expect("mount workspace");
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: Vec::new(),
-                software: Vec::new(),
-                permissions: None,
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: HashMap::new(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ))
-        .expect("unmount workspace");
-
-    let events = structured_events(&sidecar);
-    // VM creation auto-mounts /opt/agentos (package projection) first; find
-    // the audit event for THIS test's explicit /workspace mount.
-    let mounted = events
-        .iter()
-        .find(|event| {
-            event.name == "security.mount.mounted"
-                && event.fields.get("guest_path").map(String::as_str) == Some("/workspace")
-        })
-        .expect("missing /workspace mount audit event");
-    assert_eq!(mounted.vm_id, vm_id);
-    assert_eq!(mounted.fields["guest_path"], "/workspace");
-    assert_eq!(mounted.fields["plugin_id"], "memory");
-    assert_eq!(mounted.fields["read_only"], "false");
-    assert_timestamp(mounted);
-
-    let unmounted = events
-        .iter()
-        .rfind(|event| {
-            event.name == "security.mount.unmounted"
-                && event.fields.get("guest_path").map(String::as_str) == Some("/workspace")
-        })
-        .expect("missing /workspace unmount audit event");
-    assert_eq!(unmounted.vm_id, vm_id);
-    assert_eq!(unmounted.fields["guest_path"], "/workspace");
-    assert_eq!(unmounted.fields["plugin_id"], "memory");
-    assert_eq!(unmounted.fields["read_only"], "false");
-    assert_timestamp(unmounted);
-}
-
-#[test]
-fn kill_requests_emit_security_audit_events() {
-    assert_node_available();
-
-    let mut sidecar = support::new_sidecar("security-audit-kill");
-    let cwd = temp_dir("security-audit-kill-cwd");
-    let entry = cwd.join("sleep.cjs");
-    write_fixture(
-        &entry,
-        "setInterval(() => { process.stdout.write('tick\\n'); }, 1000);\n",
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-kill",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("proc-kill"),
-                signal: String::from("SIGTERM"),
-            }),
-        ))
-        .expect("kill js process");
-    match result.response.payload {
-        ResponsePayload::ProcessKilledResponse(_) => {}
-        other => panic!("unexpected kill response: {other:?}"),
-    }
-
-    let exit_code = wait_for_process_exit_bounded(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-kill",
-    );
-    assert_eq!(exit_code, 143);
-
-    let events = structured_events(&sidecar);
-    let event = find_event(&events, "security.process.kill");
-    assert_eq!(event.vm_id, vm_id);
-    assert_eq!(event.fields["source"], "control_plane");
-    assert_eq!(event.fields["source_pid"], "0");
-    assert_eq!(event.fields["process_id"], "proc-kill");
-    assert_eq!(event.fields["signal"], "SIGTERM");
-    assert!(event.fields.contains_key("target_pid"));
-    assert!(event.fields.contains_key("host_pid"));
-    assert_timestamp(event);
-}
diff --git a/crates/sidecar/tests/security_hardening.rs b/crates/sidecar/tests/security_hardening.rs
deleted file mode 100644
index b7d44cdc7..000000000
--- a/crates/sidecar/tests/security_hardening.rs
+++ /dev/null
@@ -1,621 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{
-    ConfigureVmRequest, CreateVmRequest, EventPayload, ExecuteRequest, GuestRuntimeKind,
-    RequestPayload, ResponsePayload, RootFilesystemDescriptor, RootFilesystemMode, StreamChannel,
-    WriteStdinRequest,
-};
-use secure_exec_sidecar::{NativeSidecar, NativeSidecarConfig};
-use serde_json::Value;
-use std::collections::HashMap;
-use std::ffi::OsStr;
-use std::fs;
-use std::os::unix::fs::PermissionsExt;
-use std::path::Path;
-use std::time::{Duration, Instant};
-use support::{
-    acquire_sidecar_runtime_test_lock, assert_node_available, authenticate_wire, create_vm_wire,
-    create_vm_wire_with_metadata, execute_wire, open_session_wire, temp_dir,
-    wire_permissions_allow_all, wire_request, wire_session, wire_vm, write_fixture,
-    RecordingBridge, TEST_AUTH_TOKEN,
-};
-
-const ARG_PREFIX: &str = "ARG=";
-const INVOCATION_BREAK: &str = "--END--";
-const DEFAULT_GUEST_PATH_ENV: &str =
-    "/usr/local/sbin:/usr/local/bin:/opt/agentos/bin:/usr/sbin:/usr/bin:/sbin:/bin";
-const DEFAULT_GUEST_HOME: &str = "/home/agentos";
-const MAX_SECURITY_HARDENING_STREAM_BYTES: usize = 1024 * 1024;
-struct EnvVarGuard {
-    key: &'static str,
-    previous: Option<String>,
-}
-
-impl EnvVarGuard {
-    fn set_value(key: &'static str, value: impl AsRef<OsStr>) -> Self {
-        let previous = std::env::var(key).ok();
-        // SAFETY: These sidecar integration tests mutate process env within a single test scope.
-        unsafe {
-            std::env::set_var(key, value);
-        }
-        Self { key, previous }
-    }
-
-    fn set_path(key: &'static str, value: &Path) -> Self {
-        Self::set_value(key, value.as_os_str())
-    }
-}
-
-impl Drop for EnvVarGuard {
-    fn drop(&mut self) {
-        match &self.previous {
-            Some(value) => unsafe {
-                std::env::set_var(self.key, value);
-            },
-            None => unsafe {
-                std::env::remove_var(self.key);
-            },
-        }
-    }
-}
-
-fn write_fake_node_binary(path: &Path, log_path: &Path) {
-    let script = format!(
-        "#!/bin/sh\nset -eu\nlog=\"{}\"\nfor arg in \"$@\"; do\n  printf 'ARG=%s\\n' \"$arg\" >> \"$log\"\ndone\nprintf '%s\\n' '{}' >> \"$log\"\nexit 0\n",
-        log_path.display(),
-        INVOCATION_BREAK,
-    );
-    fs::write(path, script).expect("write fake node binary");
-    let mut permissions = fs::metadata(path)
-        .expect("fake node metadata")
-        .permissions();
-    permissions.set_mode(0o755);
-    fs::set_permissions(path, permissions).expect("chmod fake node binary");
-}
-
-fn parse_invocations(log_path: &Path) -> Vec<Vec<String>> {
-    let contents = fs::read_to_string(log_path).expect("read invocation log");
-    let separator = format!("{INVOCATION_BREAK}\n");
-    contents
-        .split(&separator)
-        .filter(|block| !block.trim().is_empty())
-        .map(|block| {
-            block
-                .lines()
-                .filter_map(|line| line.strip_prefix(ARG_PREFIX))
-                .map(str::to_owned)
-                .collect::<Vec<_>>()
-        })
-        .collect()
-}
-
-fn append_process_chunk(stream: &mut Vec<u8>, chunk: &[u8], label: &str) {
-    assert!(
-        stream.len().saturating_add(chunk.len()) <= MAX_SECURITY_HARDENING_STREAM_BYTES,
-        "{label} exceeded {MAX_SECURITY_HARDENING_STREAM_BYTES} bytes"
-    );
-    stream.extend_from_slice(chunk);
-}
-
-fn collect_process_output_bounded(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-) -> (String, String, i32) {
-    let ownership = wire_session(connection_id, session_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-    let mut stdout = Vec::new();
-    let mut stderr = Vec::new();
-    let mut exit = None;
-
-    loop {
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for process events; stdout bytes: {}; stderr bytes: {}",
-            stdout.len(),
-            stderr.len()
-        );
-
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll sidecar wire event");
-        if let Some(event) = event {
-            assert_eq!(event.ownership, wire_vm(connection_id, session_id, vm_id));
-
-            match event.payload {
-                EventPayload::ProcessOutputEvent(output) if output.process_id == process_id => {
-                    match output.channel {
-                        StreamChannel::Stdout => {
-                            append_process_chunk(&mut stdout, &output.chunk, "stdout");
-                        }
-                        StreamChannel::Stderr => {
-                            append_process_chunk(&mut stderr, &output.chunk, "stderr");
-                        }
-                    }
-                }
-                EventPayload::ProcessExitedEvent(exited) if exited.process_id == process_id => {
-                    exit = Some((exited.exit_code, Instant::now()));
-                }
-                EventPayload::ProcessOutputEvent(_)
-                | EventPayload::ProcessExitedEvent(_)
-                | EventPayload::VmLifecycleEvent(_)
-                | EventPayload::StructuredEvent(_)
-                | EventPayload::ExtEnvelope(_) => {}
-            }
-        }
-
-        if let Some((exit_code, seen_at)) = exit {
-            if Instant::now().duration_since(seen_at) >= Duration::from_millis(200) {
-                return (
-                    String::from_utf8_lossy(&stdout).into_owned(),
-                    String::from_utf8_lossy(&stderr).into_owned(),
-                    exit_code,
-                );
-            }
-        }
-    }
-}
-
-fn sidecar_rejects_oversized_request_frames_before_dispatch() {
-    acquire_sidecar_runtime_test_lock();
-    let root = temp_dir("frame-limit");
-    let mut sidecar = NativeSidecar::with_config(
-        RecordingBridge::default(),
-        NativeSidecarConfig {
-            sidecar_id: String::from("sidecar-frame-limit"),
-            max_frame_bytes: 512,
-            compile_cache_root: Some(root.join("cache")),
-            expected_auth_token: Some(String::from(TEST_AUTH_TOKEN)),
-            acp_termination_grace: Duration::from_secs(3),
-        },
-    )
-    .expect("create frame-limited sidecar");
-    let cwd = temp_dir("frame-limit-cwd");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let vm_id = match sidecar
-        .dispatch_wire_blocking(wire_request(
-            3,
-            wire_session(&connection_id, &session_id),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                GuestRuntimeKind::JavaScript,
-                HashMap::from([
-                    (String::from("cwd"), cwd.to_string_lossy().into_owned()),
-                    (
-                        String::from("limits.http.max_fetch_response_bytes"),
-                        String::from("512"),
-                    ),
-                ]),
-                RootFilesystemDescriptor {
-                    mode: RootFilesystemMode::Ephemeral,
-                    disable_default_base_layer: false,
-                    lowers: Vec::new(),
-                    bootstrap_entries: Vec::new(),
-                },
-                None,
-            )),
-        ))
-        .expect("create frame-limit vm")
-        .response
-        .payload
-    {
-        ResponsePayload::VmCreatedResponse(response) => response.vm_id,
-        other => panic!("unexpected vm create response: {other:?}"),
-    };
-
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::WriteStdinRequest(WriteStdinRequest {
-                process_id: String::from("proc-1"),
-                chunk: "x".repeat(1024).into_bytes(),
-            }),
-        ))
-        .expect("dispatch oversized request");
-
-    match result.response.payload {
-        ResponsePayload::RejectedResponse(rejected) => {
-            assert_eq!(rejected.code, "frame_too_large");
-            assert!(rejected.message.contains("limit is 512"));
-        }
-        other => panic!("unexpected oversized frame response: {other:?}"),
-    }
-}
-
-fn guest_execution_clears_host_env_and_blocks_escape_paths() {
-    assert_node_available();
-
-    let _host_path = EnvVarGuard::set_value("PATH", "/host/sbin:/host/bin");
-    let _host_home = EnvVarGuard::set_value("HOME", "/host/home");
-    let _host_internal = EnvVarGuard::set_value("AGENTOS_ALLOWED", "host-internal");
-    let mut sidecar = support::new_sidecar("security-hardening");
-    let cwd = temp_dir("security-hardening-cwd");
-    let entry = cwd.join("entry.cjs");
-
-    write_fixture(
-        &entry,
-        r#"
-const result = {
-  path: process.env.PATH ?? null,
-  home: process.env.HOME ?? null,
-  pwd: process.env.PWD ?? null,
-  marker: process.env.VISIBLE_MARKER ?? null,
-  internalMarker: process.env.AGENTOS_ALLOWED ?? null,
-  guestPathMappings: process.env.AGENTOS_GUEST_PATH_MAPPINGS ?? null,
-  importCachePath: process.env.AGENTOS_NODE_IMPORT_CACHE_PATH ?? null,
-  hasInternalMarker: 'AGENTOS_ALLOWED' in process.env,
-  keys: Object.keys(process.env).filter((key) => key.startsWith('AGENTOS_')),
-};
-
-try {
-  process.binding('fs');
-  result.binding = 'unexpected';
-} catch (error) {
-  result.binding = { code: error.code ?? null, message: error.message };
-}
-
-console.log(JSON.stringify(result));
-"#,
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::from([(String::from("env.VISIBLE_MARKER"), String::from("present"))]),
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-security",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-    let (_stdout, stderr, exit_code) = collect_process_output_bounded(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-security",
-    );
-    assert_eq!(exit_code, 0, "stderr: {stderr}");
-    assert!(stderr.is_empty(), "unexpected security stderr: {stderr}");
-
-    let parsed: Value = serde_json::from_str(_stdout.trim()).expect("parse security JSON");
-    assert_eq!(
-        parsed["path"],
-        Value::String(String::from(DEFAULT_GUEST_PATH_ENV))
-    );
-    assert_eq!(
-        parsed["home"],
-        Value::String(String::from(DEFAULT_GUEST_HOME))
-    );
-    assert_eq!(parsed["pwd"], Value::String(String::from("/")));
-    assert_eq!(parsed["marker"], Value::String(String::from("present")));
-    assert_eq!(parsed["internalMarker"], Value::Null);
-    assert_eq!(parsed["guestPathMappings"], Value::Null);
-    assert_eq!(parsed["importCachePath"], Value::Null);
-    assert_eq!(parsed["hasInternalMarker"], Value::Bool(false));
-    assert_eq!(parsed["keys"], Value::Array(Vec::new()));
-    assert_ne!(
-        parsed["path"],
-        Value::String(String::from("/host/sbin:/host/bin"))
-    );
-    assert_ne!(parsed["home"], Value::String(String::from("/host/home")));
-    assert_eq!(
-        parsed["binding"]["code"],
-        Value::String(String::from("ERR_ACCESS_DENIED"))
-    );
-}
-
-fn vm_resource_limits_cap_active_processes_without_poisoning_followup_execs() {
-    assert_node_available();
-
-    let mut sidecar = support::new_sidecar("resource-budgets");
-    let cwd = temp_dir("resource-budgets-cwd");
-    let slow_entry = cwd.join("slow.cjs");
-    let fast_entry = cwd.join("fast.cjs");
-
-    write_fixture(&slow_entry, "setTimeout(() => {}, 200);\n");
-    write_fixture(&fast_entry, "void 0;\n");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::from([(String::from("resource.max_processes"), String::from("1"))]),
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-slow",
-        GuestRuntimeKind::JavaScript,
-        &slow_entry,
-        Vec::new(),
-    );
-
-    let second = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ExecuteRequest(ExecuteRequest {
-                process_id: String::from("proc-fast"),
-                command: None,
-                runtime: Some(GuestRuntimeKind::JavaScript),
-                entrypoint: Some(fast_entry.to_string_lossy().into_owned()),
-                args: Vec::new(),
-                env: HashMap::new(),
-                cwd: None,
-                wasm_permission_tier: None,
-            }),
-        ))
-        .expect("dispatch second execute");
-    match second.response.payload {
-        ResponsePayload::RejectedResponse(rejected) => {
-            assert_eq!(rejected.code, "kernel_error");
-            assert!(rejected.message.contains("maximum process limit reached"));
-        }
-        other => panic!("unexpected resource-limit response: {other:?}"),
-    }
-
-    let (_stdout, stderr, exit_code) = collect_process_output_bounded(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-slow",
-    );
-    assert_eq!(exit_code, 0);
-    assert!(stderr.is_empty(), "unexpected slow stderr: {stderr}");
-
-    execute_wire(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-fast-2",
-        GuestRuntimeKind::JavaScript,
-        &fast_entry,
-        Vec::new(),
-    );
-    let (_stdout, stderr, exit_code) = collect_process_output_bounded(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "proc-fast-2",
-    );
-    assert_eq!(exit_code, 0);
-    assert!(stderr.is_empty(), "unexpected fast stderr: {stderr}");
-}
-
-fn execute_rejects_cwd_outside_vm_sandbox_root() {
-    let mut sidecar = support::new_sidecar("execute-cwd-validation");
-    let cwd = temp_dir("execute-cwd-validation-root");
-    let entry = cwd.join("entry.mjs");
-    write_fixture(&entry, "console.log('ignored');\n");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ExecuteRequest(ExecuteRequest {
-                process_id: String::from("proc-1"),
-                command: None,
-                runtime: Some(GuestRuntimeKind::JavaScript),
-                entrypoint: Some(entry.to_string_lossy().into_owned()),
-                args: Vec::new(),
-                env: HashMap::new(),
-                cwd: Some(String::from("/")),
-                wasm_permission_tier: None,
-            }),
-        ))
-        .expect("dispatch execute request");
-
-    match result.response.payload {
-        ResponsePayload::RejectedResponse(rejected) => {
-            assert_eq!(rejected.code, "invalid_state");
-            assert!(rejected.message.contains("sandbox root"));
-            assert!(rejected.message.contains(cwd.to_string_lossy().as_ref()));
-        }
-        other => panic!("unexpected execute response: {other:?}"),
-    }
-}
-
-fn execute_rejects_host_only_absolute_command_path() {
-    let mut sidecar = support::new_sidecar("execute-host-only-command");
-    let cwd = temp_dir("execute-host-only-command-cwd");
-    let host_only_root = temp_dir("execute-host-only-command-host");
-    let host_only_command = host_only_root.join("host-only-command.sh");
-    write_fixture(
-        &host_only_command,
-        "#!/bin/sh\nprintf 'host-only command should stay hidden\\n'\n",
-    );
-    let mut permissions = fs::metadata(&host_only_command)
-        .expect("host-only command metadata")
-        .permissions();
-    permissions.set_mode(0o755);
-    fs::set_permissions(&host_only_command, permissions).expect("chmod host-only command");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: Vec::new(),
-                software: Vec::new(),
-                permissions: Some(wire_permissions_allow_all()),
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: HashMap::new(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ))
-        .expect("configure host-only command permissions");
-
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ExecuteRequest(ExecuteRequest {
-                process_id: String::from("proc-host-only"),
-                command: Some(host_only_command.to_string_lossy().into_owned()),
-                runtime: None,
-                entrypoint: None,
-                args: Vec::new(),
-                env: HashMap::new(),
-                cwd: None,
-                wasm_permission_tier: None,
-            }),
-        ))
-        .expect("dispatch host-only command execute");
-
-    match result.response.payload {
-        ResponsePayload::RejectedResponse(rejected) => {
-            assert!(
-                rejected.code == "kernel_error"
-                    || rejected.code == "execution_error"
-                    || rejected.code == "invalid_state",
-                "unexpected rejection code: {rejected:?}"
-            );
-            if rejected.code == "invalid_state" {
-                assert!(
-                    rejected
-                        .message
-                        .contains("command not found on native sidecar path"),
-                    "unexpected invalid_state rejection: {rejected:?}"
-                );
-            }
-            assert!(
-                !rejected
-                    .message
-                    .contains("host-only command should stay hidden"),
-                "host-only command output should not leak through the rejection: {rejected:?}"
-            );
-        }
-        other => panic!("unexpected execute response: {other:?}"),
-    }
-}
-
-fn execute_ignores_host_node_binary_override_for_javascript_runtime() {
-    let root = temp_dir("execute-cwd-permission-root");
-    let fake_node_path = root.join("fake-node.sh");
-    let log_path = root.join("node-args.log");
-    write_fake_node_binary(&fake_node_path, &log_path);
-    let _node_binary = EnvVarGuard::set_path("AGENTOS_NODE_BINARY", &fake_node_path);
-
-    let mut sidecar = support::new_sidecar("execute-cwd-permission-root");
-    let cwd = root.join("workspace");
-    let nested_cwd = cwd.join("nested");
-    fs::create_dir_all(&nested_cwd).expect("create nested cwd");
-    let entry = cwd.join("entry.mjs");
-    write_fixture(&entry, "console.log('ignored');\n");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ExecuteRequest(ExecuteRequest {
-                process_id: String::from("proc-1"),
-                command: None,
-                runtime: Some(GuestRuntimeKind::JavaScript),
-                entrypoint: Some(entry.to_string_lossy().into_owned()),
-                args: Vec::new(),
-                env: HashMap::new(),
-                cwd: Some(nested_cwd.to_string_lossy().into_owned()),
-                wasm_permission_tier: None,
-            }),
-        ))
-        .expect("dispatch execute request");
-
-    match result.response.payload {
-        ResponsePayload::ProcessStartedResponse(response) => {
-            assert_eq!(response.process_id, "proc-1");
-        }
-        other => panic!("unexpected execute response: {other:?}"),
-    }
-
-    let (_stdout, stderr, exit_code) =
-        collect_process_output_bounded(&mut sidecar, &connection_id, &session_id, &vm_id, "proc-1");
-    assert_eq!(exit_code, 0);
-    assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-
-    assert!(
-        !log_path.exists(),
-        "javascript guest execution should stay inside the V8 runtime instead of invoking host node: {:?}",
-        parse_invocations(&log_path)
-    );
-}
-
-#[test]
-fn security_hardening_suite() {
-    // Multiple libtest cases in this V8-backed integration binary still trip
-    // teardown/init crashes, so keep the coverage in one top-level suite.
-    execute_ignores_host_node_binary_override_for_javascript_runtime();
-    execute_rejects_cwd_outside_vm_sandbox_root();
-    execute_rejects_host_only_absolute_command_path();
-    guest_execution_clears_host_env_and_blocks_escape_paths();
-    sidecar_rejects_oversized_request_frames_before_dispatch();
-    vm_resource_limits_cap_active_processes_without_poisoning_followup_execs();
-}
diff --git a/crates/sidecar/tests/service.rs b/crates/sidecar/tests/service.rs
deleted file mode 100644
index fb8846f32..000000000
--- a/crates/sidecar/tests/service.rs
+++ /dev/null
@@ -1,21483 +0,0 @@
-pub trait NativeSidecarBridge: secure_exec_bridge::HostBridge {}
-impl<T> NativeSidecarBridge for T where T: secure_exec_bridge::HostBridge {}
-
-#[allow(dead_code, unused_imports)]
-#[path = "acp_legacy/mod.rs"]
-mod acp;
-#[allow(dead_code)]
-#[path = "../src/bootstrap.rs"]
-mod bootstrap;
-#[path = "../src/bridge.rs"]
-mod bridge;
-#[allow(dead_code)]
-#[path = "../src/crypto_cipher.rs"]
-mod crypto_cipher;
-#[allow(dead_code)]
-#[path = "../src/execution.rs"]
-mod execution;
-#[allow(dead_code)]
-#[path = "../src/extension.rs"]
-mod extension;
-#[allow(dead_code)]
-#[path = "../src/filesystem.rs"]
-mod filesystem;
-#[allow(dead_code, unused_imports)]
-#[path = "../src/json_rpc.rs"]
-mod json_rpc;
-#[allow(dead_code, unused_imports)]
-#[path = "../src/limits.rs"]
-mod limits;
-// macOS-only: `filesystem`/`plugins::host_dir` (included above) reference
-// `crate::macos_fs::…`, which must resolve in this source-included test crate
-// too. Unused on Linux (those references are `#[cfg]`d out there).
-#[cfg(target_os = "macos")]
-#[allow(dead_code)]
-#[path = "../src/macos_fs.rs"]
-mod macos_fs;
-#[allow(dead_code)]
-#[path = "../src/metadata/mod.rs"]
-mod metadata;
-#[allow(dead_code)]
-#[path = "../src/package_projection.rs"]
-mod package_projection;
-#[allow(dead_code)]
-#[path = "../src/plugins/mod.rs"]
-mod plugins;
-#[allow(dead_code, unused_imports, clippy::enum_variant_names)]
-mod protocol {
-    pub use secure_exec_sidecar_protocol::protocol::*;
-}
-#[allow(dead_code)]
-#[path = "../src/state.rs"]
-mod state;
-#[allow(dead_code)]
-#[path = "../src/tools.rs"]
-mod tools;
-#[allow(dead_code)]
-#[path = "../src/vm.rs"]
-mod vm;
-#[allow(dead_code, unused_imports)]
-mod wire {
-    pub use secure_exec_sidecar_protocol::wire::*;
-}
-
-// The unit tests include!d from src/service.rs reference crate::stdio::LocalBridge,
-// and stdio.rs in turn uses these crate-root re-exports (mirrored from lib.rs) so it
-// compiles inside this integration-test crate too.
-use extension::{
-    Extension, ExtensionContext, ExtensionFuture, ExtensionInterruptRequest,
-    ExtensionInterruptResponse, ExtensionResponse,
-};
-use service::NativeSidecarConfig;
-use state::{EventSinkTransport, SidecarRequestTransport};
-
-#[allow(dead_code)]
-#[path = "../src/stdio.rs"]
-mod stdio;
-
-mod service {
-    include!("../src/service.rs");
-
-    mod tests {
-        mod bridge_support {
-            include!(concat!(
-                env!("CARGO_MANIFEST_DIR"),
-                "/../bridge/tests/support.rs"
-            ));
-        }
-
-        use super::*;
-        use crate::bridge::{bridge_permissions, HostFilesystem, ScopedHostFilesystem};
-        use crate::execution::{
-            clamp_javascript_net_poll_wait, format_dns_resource, format_tcp_resource,
-            runtime_child_is_alive,
-            service_javascript_net_sync_rpc as service_javascript_net_sync_rpc_inner,
-            signal_runtime_process, JavascriptNetSyncRpcServiceRequest,
-            JavascriptSyncRpcServiceRequest, JavascriptSyncRpcServiceResponse,
-        };
-        use crate::filesystem::service_javascript_fs_sync_rpc;
-        use crate::plugins::s3_common::test_support::MockS3Server;
-        use crate::plugins::sandbox_agent::test_support::MockSandboxAgentServer;
-        use crate::protocol::VmCreatedResponse;
-        use crate::protocol::{
-            AuthenticateRequest, BootstrapRootFilesystemRequest, CloseStdinRequest,
-            ConfigureVmRequest, CreateVmRequest, DisposeReason, DisposeVmRequest, EventPayload,
-            FindBoundUdpRequest, FindListenerRequest, FsPermissionRule, FsPermissionRuleSet,
-            FsPermissionScope, GetProcessSnapshotRequest, GetResourceSnapshotRequest,
-            GetZombieTimerCountRequest, GuestFilesystemCallRequest, GuestFilesystemOperation,
-            GuestRuntimeKind, HostCallbackResultResponse, MountDescriptor, MountPluginDescriptor,
-            OpenSessionRequest, OwnershipScope, PatternPermissionRule, PatternPermissionRuleSet,
-            PatternPermissionScope, PermissionMode, PermissionsPolicy,
-            RegisterHostCallbacksRequest, RegisteredHostCallbackDefinition, RejectedResponse,
-            RequestFrame, RequestPayload, ResponsePayload, RootFilesystemEntry,
-            RootFilesystemEntryEncoding, RootFilesystemEntryKind, SessionOpenedResponse,
-            SidecarPlacement, SidecarPlacementShared, SidecarRequestFrame, SidecarRequestPayload,
-            SidecarResponsePayload, WriteStdinRequest,
-        };
-        use crate::state::{
-            ActiveCipherSession, ActiveDiffieHellmanSession, ActiveEcdhSession, ActiveExecution,
-            ActiveExecutionEvent, ActiveProcess, ActiveSqliteDatabase, ActiveSqliteStatement,
-            ActiveTcpListener, ActiveUdpSocket, ProcessEventEnvelope, SidecarKernel, ToolExecution,
-            VmListenPolicy, EXECUTION_SANDBOX_ROOT_ENV, JAVASCRIPT_COMMAND,
-            LOOPBACK_EXEMPT_PORTS_ENV, PYTHON_COMMAND, VM_DNS_SERVERS_METADATA_KEY,
-            VM_LISTEN_ALLOW_PRIVILEGED_METADATA_KEY, VM_LISTEN_PORT_MAX_METADATA_KEY,
-            VM_LISTEN_PORT_MIN_METADATA_KEY, WASM_COMMAND, WASM_STDIO_SYNC_RPC_ENV,
-        };
-        use crate::state::{NetworkResourceCounts, VmDnsConfig};
-        use base64::Engine;
-        use bridge_support::RecordingBridge;
-        use hickory_resolver::proto::op::{Message, Query};
-        use hickory_resolver::proto::rr::domain::Name;
-        use hickory_resolver::proto::rr::rdata::{
-            A, AAAA, CAA, CNAME, MX, NAPTR, NS, PTR, SOA, SRV, TXT,
-        };
-        use hickory_resolver::proto::rr::{RData, Record, RecordType};
-        use nix::libc;
-        use rustls::client::danger::{
-            HandshakeSignatureValid, ServerCertVerified, ServerCertVerifier,
-        };
-        use rustls::crypto::aws_lc_rs;
-        use rustls::pki_types::{CertificateDer, ServerName};
-        use rustls::{
-            ClientConfig, ClientConnection, DigitallySignedStruct, RootCertStore, ServerConfig,
-            ServerConnection, SignatureScheme,
-        };
-        use secure_exec_bridge::SymlinkRequest;
-        use secure_exec_execution::{
-            CreateJavascriptContextRequest, CreatePythonContextRequest, CreateWasmContextRequest,
-            JavascriptSyncRpcRequest, PythonVfsRpcMethod, PythonVfsRpcRequest,
-            StartJavascriptExecutionRequest, StartPythonExecutionRequest,
-            StartWasmExecutionRequest, WasmPermissionTier,
-        };
-        use secure_exec_kernel::command_registry::CommandDriver;
-        use secure_exec_kernel::kernel::{KernelVmConfig, SpawnOptions, VirtualProcessOptions};
-        use secure_exec_kernel::mount_table::{MountEntry, MountOptions, MountTable};
-        use secure_exec_kernel::permissions::{
-            CommandAccessRequest, EnvAccessRequest, EnvironmentOperation, FsAccessRequest,
-            FsOperation, NetworkAccessRequest, NetworkOperation, Permissions,
-        };
-        use secure_exec_kernel::poll::{PollTargetEntry, POLLIN};
-        use secure_exec_kernel::process_table::{SIGKILL, SIGTERM};
-        use secure_exec_kernel::resource_accounting::ResourceLimits;
-        use secure_exec_kernel::vfs::{
-            MemoryFileSystem, VirtualDirEntry, VirtualFileSystem, VirtualStat,
-        };
-        use serde_json::{json, Value};
-        use std::collections::BTreeMap;
-        use std::fs;
-        use std::io::{BufReader, Read, Write};
-        use std::net::{SocketAddr, TcpListener, UdpSocket};
-        use std::os::unix::fs::PermissionsExt;
-        use std::path::{Path, PathBuf};
-        use std::process::Command;
-        use std::sync::{
-            atomic::{AtomicUsize, Ordering},
-            mpsc, Arc, Barrier, Mutex, OnceLock,
-        };
-        use std::thread;
-        use std::time::{Duration, SystemTime, UNIX_EPOCH};
-
-        const TEST_AUTH_TOKEN: &str = "sidecar-test-token";
-        const ISOLATED_SERVICE_TEST_ENV: &str = "AGENTOS_SERVICE_ISOLATED_TEST";
-        const ISOLATED_SERVICE_CACHE_SUFFIX_ENV: &str = "AGENTOS_SERVICE_ISOLATED_CACHE_SUFFIX";
-        const MAX_SERVICE_PROCESS_STREAM_BYTES: usize = 1024 * 1024;
-        const TLS_TEST_KEY_PEM: &str = "-----BEGIN PRIVATE KEY-----\n\
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQClvETzHfSyd1Y+\n\
-sjCfGkuyGxFMzwQlYjUrE0iwdMF774LYHFdpvtEo3sLOW6/b1xfXS/55jq+aggxS\n\
-v+vgtjrhGf/y33XzdrjxcVBRWIsgAtxMHsNKO4EQ/uA1g6zlbaSIu+ZWX3bkDuTi\n\
-K45VW69M0XSVyv8XFGYOcf8LTI87gTtXHuT92iej77IM2lHqLXCzQVr+NQ9yvXld\n\
-9yHlA2ZfYqhkSTLdDablqfgirrQIzZzLypSGQwZUU06nCtZ+dg6SNV4TGL4NqekD\n\
-jXR3BvmZu5l4sGAsNfFVjLx6hxsLt8uqn65sCAwBDdfucR+39+pHA+esj6NAWAFO\n\
-J9CB94sfAgMBAAECggEABQTA772x+a98aJSbvU2eCiwgp3tDTGB/bKj+U/2NGFQl\n\
-2aZuDTEugzbPnlEPb7BBNA9EiujDr4GNnvnZyimqecOASRn0J+Wp7wG35Waxe8wq\n\
-YJGz5y0LGPkmz+gHVcEusMdDz8y/PGOpEaIxAquukLxs89Y8SDYhawGPsAdm9O3F\n\
-4a+aosyQwS26mkZ/1WZOTsOVd4A1/1pxBvsANURj+pq7ed/1WqgrZBN/BG1TX5Xm\n\
-DZeYy01kTCMWtcAb4f8PxGpbkSGMvBb+Mj5XtZByvfQeC+Cs5ECXhmJtVaYVUHhT\n\
-vI0oTMGvit9ffoYNds0qTeZpEeineaDH3sD16D037QKBgQDX5b65KfIVH0/WvcbJ\n\
-Gx2Wh7knXdDBky40wdq4buKK+ImzPPRxOsQ+xEMgEaZs8gb7LBapbB0cZ+YsKBOt\n\
-4FY86XQU5V5ju2ntldIIIaugIGgvGS0jdRMH3ux6iEjPZE6Fm7/s8bjIgqB7keWh\n\
-1rcZwDrwMzqwAUoBTJX58OY/fQKBgQDEhT5U7TqgEFVSspYh8c8yVRV9udiphPH3\n\
-3XIbo9iV3xzNFdwtNHC+2eLM+4J3WKjhB0UvzrlIegSqKPIsy+0nD1uzaU+O72gg\n\
-7+NKSh0RT61UDolk+P4s/2+5tnZqSNYO7Sd/svE/rkwIEtDEI5tb1nqq75h/HDEW\n\
-k56GHAxvywKBgGmGmTdmIjZizKJYti4b+9VU15I/T8ceCmqtChw1zrNAkgWy2IPz\n\
-xnIreefV2LPNhM4GGbmL55q3yhBxMlU9nsk9DokcJ4u10ivXnAZvdrTYwjOrKZ34\n\
-HmotcwbdUEFWdO7nVuMYr0oKVyivAj+ddHe4ttYrJBddOe/yoCe/sLr9AoGBAKHL\n\
-IVpCRXXqfJStOzWPI4rIyfzMuTg3oA71XjCrYHFjUw715GPDPN+j+znQB8XCVKeP\n\
-mMKXa6vj6Vs+gsOm0QTLfC/lj/6Z1Bzp4zMSeYP7GTSPE0bySDE7y/wV4L/4X2PC\n\
-lDZqWHyZPzeWZhJVTl754dxBjkd4KmHv/x9ikEqpAoGBAJNA0u0fKhdWDz32+a2F\n\
-+plJ18kQvGuwKFWIIVHBDc0wCxLKWKr5wgkhdcAEpy4mgosiZ09DzV/OpQBBHVWZ\n\
-v/Cn/DwZyoiXIi5onf7AqWIhw+aem+oMbugbSIYqDwYkwnN79tsza0KC1ScphIuf\n\
-vKoOAdY4xOcG9BEZZoKVOa8R\n\
------END PRIVATE KEY-----\n";
-        const TLS_TEST_CERT_PEM: &str = "-----BEGIN CERTIFICATE-----\n\
-MIIDCTCCAfGgAwIBAgIUJqRgTEIlpbfqbQnyo9hxLyIn3qYwDQYJKoZIhvcNAQEL\n\
-BQAwFDESMBAGA1UEAwwJbG9jYWxob3N0MB4XDTI2MDQwNTA3MTAwOVoXDTI2MDQw\n\
-NjA3MTAwOVowFDESMBAGA1UEAwwJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEF\n\
-AAOCAQ8AMIIBCgKCAQEApbxE8x30sndWPrIwnxpLshsRTM8EJWI1KxNIsHTBe++C\n\
-2BxXab7RKN7Czluv29cX10v+eY6vmoIMUr/r4LY64Rn/8t9183a48XFQUViLIALc\n\
-TB7DSjuBEP7gNYOs5W2kiLvmVl925A7k4iuOVVuvTNF0lcr/FxRmDnH/C0yPO4E7\n\
-Vx7k/dono++yDNpR6i1ws0Fa/jUPcr15Xfch5QNmX2KoZEky3Q2m5an4Iq60CM2c\n\
-y8qUhkMGVFNOpwrWfnYOkjVeExi+DanpA410dwb5mbuZeLBgLDXxVYy8eocbC7fL\n\
-qp+ubAgMAQ3X7nEft/fqRwPnrI+jQFgBTifQgfeLHwIDAQABo1MwUTAdBgNVHQ4E\n\
-FgQUwViZyKE6S2vgTAkexnZFccSwoPMwHwYDVR0jBBgwFoAUwViZyKE6S2vgTAke\n\
-xnZFccSwoPMwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAadmK\n\
-3Ugrvep6glHAfgPP54um9cjJZQZDPn5I7yvgDr/Zp/u/UMW/OUKSfL1VNHlbAVLc\n\
-Yzq2RVTrJKObiTSoy99OzYkEdgfuEBBP7XBEQlqoOGYNRR+IZXBBiQ+m9CtajNwQ\n\
-G6mr9//zZtV1y2UUBgtxVpry5iOekpkr8iXyDLnGpS2gKL5dwXCzWCKVCO3qVotn\n\
-r6FBg4DCBMkwO6xOVN2yInPd6CPy/JAUPW50zWPnn4DKfeAAU0C+E75HN65jozdi\n\
-12yT4K772P8oSecGPInZhqJgOv1q0BDG8gccOxX1PA4sE00Enqlbvxz7sku9y4zp\n\
-ykAheWCsAteSEWVc0w==\n\
------END CERTIFICATE-----\n";
-        fn request(
-            request_id: secure_exec_sidecar::protocol::RequestId,
-            ownership: OwnershipScope,
-            payload: RequestPayload,
-        ) -> RequestFrame {
-            RequestFrame::new(request_id, ownership, payload)
-        }
-
-        // Timing-sensitive assertions flake under the CPU contention of a parallel
-        // test run (see CLAUDE.md > Testing). Gated off by default; the nightly
-        // timing lane sets SECURE_EXEC_RUN_TIMING_TESTS=1 to enforce them.
-        fn run_timing_sensitive_tests() -> bool {
-            std::env::var_os("SECURE_EXEC_RUN_TIMING_TESTS").is_some()
-        }
-
-        fn acquire_sidecar_runtime_test_lock() {
-            // No-op under cargo-nextest: each test runs in its own process, so the
-            // process-global V8 platform, env, and (now per-process) compile cache
-            // are already isolated. Previously an exclusive flock serialized
-            // runtime-touching tests across binaries to guard the shared fixed
-            // compile-cache path; that path is now unique per process. See
-            // CLAUDE.md > Testing.
-        }
-
-        fn create_test_sidecar_with_config(
-            config: NativeSidecarConfig,
-        ) -> NativeSidecar<RecordingBridge> {
-            // Unique compile-cache dir per test process (a re-exec child supplies an
-            // explicit suffix; otherwise derive one from PID + a sequence counter).
-            // Under cargo-nextest each test is its own process, so this gives every
-            // test an isolated cache instead of the old fixed shared path — no flock
-            // needed. See CLAUDE.md > Testing.
-            let cache_suffix = std::env::var(ISOLATED_SERVICE_CACHE_SUFFIX_ENV)
-                .ok()
-                .unwrap_or_else(|| {
-                    static CACHE_SEQ: std::sync::atomic::AtomicU64 =
-                        std::sync::atomic::AtomicU64::new(0);
-                    format!(
-                        "{}-{}",
-                        std::process::id(),
-                        CACHE_SEQ.fetch_add(1, std::sync::atomic::Ordering::Relaxed)
-                    )
-                });
-            let compile_cache_root =
-                std::env::temp_dir().join(format!("secure-exec-sidecar-test-cache-{cache_suffix}"));
-            NativeSidecar::with_config(
-                RecordingBridge::default(),
-                NativeSidecarConfig {
-                    sidecar_id: String::from("sidecar-test"),
-                    compile_cache_root: Some(compile_cache_root),
-                    expected_auth_token: Some(String::from(TEST_AUTH_TOKEN)),
-                    ..config
-                },
-            )
-            .expect("create sidecar")
-        }
-        fn create_test_sidecar() -> NativeSidecar<RecordingBridge> {
-            create_test_sidecar_with_config(NativeSidecarConfig::default())
-        }
-
-        fn test_process_event(index: usize) -> ProcessEventEnvelope {
-            ProcessEventEnvelope {
-                connection_id: String::from("conn-queue"),
-                session_id: String::from("session-queue"),
-                vm_id: String::from("vm-queue"),
-                process_id: format!("proc-queue-{index}"),
-                event: ActiveExecutionEvent::Stdout(Vec::new()),
-            }
-        }
-
-        fn insert_tool_process(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            process_id: &str,
-        ) {
-            let kernel_handle = create_kernel_process_handle_for_tests();
-            let process = ActiveProcess::new(
-                kernel_handle.pid(),
-                kernel_handle,
-                GuestRuntimeKind::JavaScript,
-                ActiveExecution::Tool(ToolExecution::default()),
-            );
-            sidecar
-                .vms
-                .get_mut(vm_id)
-                .expect("test vm")
-                .active_processes
-                .insert(process_id.to_owned(), process);
-        }
-
-        fn ext_sidecar_request_payload() -> SidecarRequestPayload {
-            SidecarRequestPayload::Ext(crate::protocol::ExtEnvelope {
-                namespace: String::from("test.completion.evict"),
-                payload: Vec::new(),
-            })
-        }
-
-        fn ext_sidecar_response_frame(
-            request_id: crate::protocol::RequestId,
-            ownership: &OwnershipScope,
-        ) -> crate::protocol::SidecarResponseFrame {
-            crate::protocol::SidecarResponseFrame::new(
-                request_id,
-                ownership.clone(),
-                SidecarResponsePayload::ExtResult(crate::protocol::ExtEnvelope {
-                    namespace: String::from("test.completion.evict"),
-                    payload: Vec::new(),
-                }),
-            )
-        }
-
-        // Drive one full sidecar request -> outbound drain -> response-accept
-        // cycle, mirroring how the stdio loop hands a request to the host and
-        // then records the host's reply. Returns the request id so the caller
-        // can later assert whether that completed response is still retrievable.
-        fn complete_one_sidecar_response(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            ownership: &OwnershipScope,
-        ) -> crate::protocol::RequestId {
-            let request_id = sidecar
-                .queue_sidecar_request(ownership.clone(), ext_sidecar_request_payload())
-                .expect("queue sidecar request");
-            sidecar
-                .pop_sidecar_request()
-                .expect("outbound sidecar request should be queued for the host");
-            sidecar
-                .accept_sidecar_response(ext_sidecar_response_frame(request_id, ownership))
-                .expect("accept sidecar response");
-            request_id
-        }
-
-        // The completed-response map is bounded: once more responses complete
-        // than the cap, the oldest *unretrieved* response is evicted (and the
-        // host can no longer fetch it) so the map cannot grow without bound.
-        fn completed_sidecar_responses_evict_oldest_beyond_cap() {
-            let mut sidecar = create_test_sidecar();
-            let ownership = OwnershipScope::connection("conn-completion-evict");
-            let cap = crate::service::MAX_COMPLETED_SIDECAR_RESPONSES;
-
-            // The first completion is the oldest; everything after it pushes the
-            // map past the cap and must evict from the front.
-            let oldest_request_id = complete_one_sidecar_response(&mut sidecar, &ownership);
-            for _ in 1..(cap + 5) {
-                complete_one_sidecar_response(&mut sidecar, &ownership);
-            }
-
-            assert_eq!(
-                sidecar.completed_sidecar_responses.len(),
-                cap,
-                "completed sidecar responses must stay bounded at the cap"
-            );
-            assert_eq!(
-                sidecar.completed_sidecar_responses_gauge.depth(),
-                cap,
-                "the completion gauge must track the bounded map depth"
-            );
-            assert!(
-                sidecar.take_sidecar_response(oldest_request_id).is_none(),
-                "the oldest unretrieved response should be evicted once the cap is exceeded"
-            );
-
-            // A response completed after the cap was reached is still retrievable,
-            // proving eviction drops the front and keeps the most recent entries.
-            let recent_request_id = complete_one_sidecar_response(&mut sidecar, &ownership);
-            assert!(
-                sidecar.take_sidecar_response(recent_request_id).is_some(),
-                "a freshly completed response should remain retrievable after eviction"
-            );
-        }
-
-        // Retrieving completed responses must keep the gauge in sync so the
-        // limit registry never reports phantom backlog after the host drains.
-        fn taking_sidecar_responses_releases_completion_gauge() {
-            let mut sidecar = create_test_sidecar();
-            let ownership = OwnershipScope::connection("conn-completion-drain");
-
-            let mut request_ids = Vec::new();
-            for _ in 0..8 {
-                request_ids.push(complete_one_sidecar_response(&mut sidecar, &ownership));
-            }
-            assert_eq!(sidecar.completed_sidecar_responses_gauge.depth(), 8);
-
-            for request_id in request_ids {
-                assert!(
-                    sidecar.take_sidecar_response(request_id).is_some(),
-                    "each completed response should be retrievable exactly once"
-                );
-            }
-            assert_eq!(
-                sidecar.completed_sidecar_responses_gauge.depth(),
-                0,
-                "draining every completed response must return the gauge to zero"
-            );
-            assert_eq!(sidecar.completed_sidecar_responses.len(), 0);
-        }
-
-        fn process_event_sender_is_bounded() {
-            let sidecar = create_test_sidecar();
-
-            for index in 0..MAX_PROCESS_EVENT_QUEUE {
-                sidecar
-                    .process_event_sender
-                    .try_send(test_process_event(index))
-                    .expect("bounded process event sender should accept capacity");
-            }
-
-            assert!(matches!(
-                sidecar
-                    .process_event_sender
-                    .try_send(test_process_event(MAX_PROCESS_EVENT_QUEUE)),
-                Err(tokio::sync::mpsc::error::TrySendError::Full(_))
-            ));
-        }
-
-        fn pending_process_events_are_bounded() {
-            let mut sidecar = create_test_sidecar();
-
-            for index in 0..MAX_PROCESS_EVENT_QUEUE {
-                sidecar
-                    .queue_pending_process_event(test_process_event(index))
-                    .expect("pending process event queue should accept capacity");
-            }
-
-            let error = sidecar
-                .queue_pending_process_event(test_process_event(MAX_PROCESS_EVENT_QUEUE))
-                .expect_err("pending process event queue should reject overflow");
-            assert!(
-                error.to_string().contains("process event queue exceeded"),
-                "unexpected overflow error: {error}"
-            );
-        }
-
-        fn process_event_receiver_overflow_preserves_queued_event() {
-            let mut sidecar = create_test_sidecar();
-
-            for index in 0..MAX_PROCESS_EVENT_QUEUE {
-                sidecar
-                    .queue_pending_process_event(test_process_event(index))
-                    .expect("pending process event queue should accept capacity");
-            }
-
-            let expected_process_id = format!("proc-queue-{MAX_PROCESS_EVENT_QUEUE}");
-            sidecar
-                .process_event_sender
-                .try_send(test_process_event(MAX_PROCESS_EVENT_QUEUE))
-                .expect("queue process event behind full pending queue");
-
-            let error = sidecar
-                .take_matching_process_event_envelope("vm-queue", &expected_process_id)
-                .expect_err("receiver drain should reject overflow before consuming event");
-            assert!(
-                error.to_string().contains("process event queue exceeded"),
-                "unexpected overflow error: {error}"
-            );
-
-            let preserved = sidecar
-                .process_event_receiver
-                .as_mut()
-                .expect("process event receiver")
-                .try_recv()
-                .expect("overflowing receiver event should remain queued");
-            assert_eq!(preserved.process_id, expected_process_id);
-        }
-
-        fn tool_execution_event_overflow_is_reported() {
-            let tool_execution = ToolExecution::default();
-            for _ in 0..MAX_PROCESS_EVENT_QUEUE {
-                assert!(crate::execution::send_tool_process_event(
-                    &tool_execution.pending_events,
-                    &tool_execution.events_overflowed,
-                    ActiveExecutionEvent::Stdout(Vec::new()),
-                ));
-            }
-            assert!(!crate::execution::send_tool_process_event(
-                &tool_execution.pending_events,
-                &tool_execution.events_overflowed,
-                ActiveExecutionEvent::Exited(0),
-            ));
-
-            let runtime = tokio::runtime::Builder::new_current_thread()
-                .enable_all()
-                .build()
-                .expect("create tokio runtime");
-            let local = tokio::task::LocalSet::new();
-            runtime.block_on(local.run_until(async move {
-                let mut execution = ActiveExecution::Tool(tool_execution);
-                for _ in 0..MAX_PROCESS_EVENT_QUEUE {
-                    assert!(matches!(
-                        execution
-                            .poll_event(Duration::ZERO)
-                            .await
-                            .expect("poll queued tool event"),
-                        Some(ActiveExecutionEvent::Stdout(_))
-                    ));
-                }
-                let error = execution
-                    .poll_event(Duration::ZERO)
-                    .await
-                    .expect_err("tool event overflow should be reported");
-                assert!(
-                    error.to_string().contains("process event queue exceeded"),
-                    "unexpected overflow error: {error}"
-                );
-            }));
-        }
-
-        fn descendant_transfer_overflow_preserves_global_queue() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate sidecar");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::new(),
-            )
-            .expect("create vm");
-            insert_tool_process(&mut sidecar, &vm_id, "root-proc");
-            let child = {
-                let kernel_handle = create_kernel_process_handle_for_tests();
-                let mut child = ActiveProcess::new(
-                    kernel_handle.pid(),
-                    kernel_handle,
-                    GuestRuntimeKind::JavaScript,
-                    ActiveExecution::Tool(ToolExecution::default()),
-                );
-                for _ in 0..MAX_PROCESS_EVENT_QUEUE {
-                    child
-                        .queue_pending_execution_event(ActiveExecutionEvent::Stdout(Vec::new()))
-                        .expect("fill child event queue");
-                }
-                child
-            };
-            sidecar
-                .vms
-                .get_mut(&vm_id)
-                .expect("test vm")
-                .active_processes
-                .get_mut("root-proc")
-                .expect("root process")
-                .child_processes
-                .insert(String::from("child-1"), child);
-
-            sidecar
-                .queue_pending_process_event(ProcessEventEnvelope {
-                    connection_id: connection_id.clone(),
-                    session_id: session_id.clone(),
-                    vm_id: vm_id.clone(),
-                    process_id: String::from("root-proc/child-1"),
-                    event: ActiveExecutionEvent::Stdout(b"preserve".to_vec()),
-                })
-                .expect("queue descendant event");
-
-            let error = sidecar
-                .drain_queued_descendant_javascript_child_process_events(
-                    &vm_id,
-                    "root-proc",
-                    &["child-1"],
-                )
-                .expect_err("full child queue should reject transfer");
-            assert!(
-                error.to_string().contains("process event queue exceeded"),
-                "unexpected overflow error: {error}"
-            );
-            assert_eq!(sidecar.pending_process_events.len(), 1);
-            assert_eq!(
-                sidecar
-                    .pending_process_events
-                    .front()
-                    .expect("preserved global event")
-                    .process_id,
-                "root-proc/child-1"
-            );
-        }
-
-        fn exit_trailing_requeue_preserves_exit_when_queue_is_full() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate sidecar");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::new(),
-            )
-            .expect("create vm");
-            insert_tool_process(&mut sidecar, &vm_id, "proc-exit");
-
-            for index in 0..(MAX_PROCESS_EVENT_QUEUE - 1) {
-                sidecar
-                    .queue_pending_process_event(test_process_event(index))
-                    .expect("fill unrelated global queue");
-            }
-            sidecar
-                .queue_pending_process_event(ProcessEventEnvelope {
-                    connection_id: connection_id.clone(),
-                    session_id: session_id.clone(),
-                    vm_id: vm_id.clone(),
-                    process_id: String::from("proc-exit"),
-                    event: ActiveExecutionEvent::Stdout(b"trailing".to_vec()),
-                })
-                .expect("queue trailing process event");
-
-            let frame = sidecar
-                .handle_process_event_envelope(ProcessEventEnvelope {
-                    connection_id,
-                    session_id,
-                    vm_id: vm_id.clone(),
-                    process_id: String::from("proc-exit"),
-                    event: ActiveExecutionEvent::Exited(0),
-                })
-                .expect("handle exit with full queue")
-                .expect("trailing output should emit immediately");
-
-            assert!(matches!(frame.payload, EventPayload::ProcessOutput(_)));
-            let preserved_exit = sidecar
-                .pending_process_events
-                .iter()
-                .find(|envelope| envelope.process_id == "proc-exit")
-                .expect("exit should remain queued");
-            assert!(matches!(
-                preserved_exit.event,
-                ActiveExecutionEvent::Exited(0)
-            ));
-        }
-
-        fn assert_handle_limit_error(error: SidecarError) {
-            assert!(
-                error.to_string().contains("handle limit exceeded"),
-                "unexpected handle limit error: {error}"
-            );
-        }
-
-        fn cipher_session_handles_are_bounded() {
-            let mut process = create_crypto_test_process();
-            for index in 0..crate::execution::MAX_PER_PROCESS_STATE_HANDLES {
-                let context = crate::crypto_cipher::StreamCipherSession::new(
-                    "aes-256-cbc",
-                    &[0_u8; 32],
-                    Some(&[0_u8; 16]),
-                    false,
-                    true,
-                    None,
-                    None,
-                    16,
-                )
-                .expect("create cipher context");
-                process
-                    .cipher_sessions
-                    .insert(index as u64, ActiveCipherSession { context });
-            }
-
-            let error = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("crypto.cipherivCreate"),
-                    args: vec![
-                        json!("cipher"),
-                        json!("aes-256-cbc"),
-                        json!(base64::engine::general_purpose::STANDARD.encode([9_u8; 32])),
-                        json!(base64::engine::general_purpose::STANDARD.encode([4_u8; 16])),
-                        json!(r#"{}"#),
-                    ],
-                },
-            )
-            .expect_err("cipher session creation should be bounded");
-            assert_handle_limit_error(error);
-        }
-
-        fn diffie_hellman_session_handles_are_bounded() {
-            let mut process = create_crypto_test_process();
-            for index in 0..crate::execution::MAX_PER_PROCESS_STATE_HANDLES {
-                process.diffie_hellman_sessions.insert(
-                    index as u64,
-                    ActiveDiffieHellmanSession::Ecdh(ActiveEcdhSession {
-                        curve: String::from("P-256"),
-                        key_pair: None,
-                    }),
-                );
-            }
-            process.next_diffie_hellman_session_id =
-                crate::execution::MAX_PER_PROCESS_STATE_HANDLES as u64;
-
-            let error = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("crypto.diffieHellmanSessionCreate"),
-                    args: vec![json!(r#"{"type":"ecdh","name":"P-256"}"#)],
-                },
-            )
-            .expect_err("diffie-hellman session creation should be bounded");
-            assert_handle_limit_error(error);
-
-            crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 20,
-                    method: String::from("crypto.diffieHellmanSessionDestroy"),
-                    args: vec![json!(0)],
-                },
-            )
-            .expect("destroy diffie-hellman session");
-            let session_id = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 21,
-                    method: String::from("crypto.diffieHellmanSessionCreate"),
-                    args: vec![json!(r#"{"type":"ecdh","name":"P-256"}"#)],
-                },
-            )
-            .expect("diffie-hellman session creation should recover after destroy")
-            .as_u64()
-            .expect("new session id");
-            assert!(session_id > crate::execution::MAX_PER_PROCESS_STATE_HANDLES as u64);
-        }
-
-        fn create_sqlite_handle_test_sidecar() -> (NativeSidecar<RecordingBridge>, String) {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate sidecar");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::new(),
-            )
-            .expect("create vm");
-            insert_tool_process(&mut sidecar, &vm_id, "proc-sqlite-handles");
-            (sidecar, vm_id)
-        }
-
-        fn sqlite_database_handles_are_bounded() {
-            let (mut sidecar, vm_id) = create_sqlite_handle_test_sidecar();
-            {
-                let process = sidecar
-                    .vms
-                    .get_mut(&vm_id)
-                    .expect("sqlite vm")
-                    .active_processes
-                    .get_mut("proc-sqlite-handles")
-                    .expect("sqlite process");
-                for index in 0..crate::execution::MAX_PER_PROCESS_STATE_HANDLES {
-                    process.sqlite_databases.insert(
-                        index as u64,
-                        ActiveSqliteDatabase {
-                            connection: rusqlite::Connection::open_in_memory()
-                                .expect("open in-memory sqlite"),
-                            host_path: None,
-                            vm_path: None,
-                            dirty: false,
-                            transaction_depth: 0,
-                            read_only: false,
-                        },
-                    );
-                }
-            }
-
-            let error = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-sqlite-handles",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("sqlite.open"),
-                    args: vec![json!(":memory:"), json!({})],
-                },
-            )
-            .expect_err("sqlite database creation should be bounded");
-            assert_handle_limit_error(error);
-        }
-
-        fn sqlite_statement_handles_are_bounded() {
-            let (mut sidecar, vm_id) = create_sqlite_handle_test_sidecar();
-            {
-                let process = sidecar
-                    .vms
-                    .get_mut(&vm_id)
-                    .expect("sqlite vm")
-                    .active_processes
-                    .get_mut("proc-sqlite-handles")
-                    .expect("sqlite process");
-                process.sqlite_databases.insert(
-                    1,
-                    ActiveSqliteDatabase {
-                        connection: rusqlite::Connection::open_in_memory()
-                            .expect("open in-memory sqlite"),
-                        host_path: None,
-                        vm_path: None,
-                        dirty: false,
-                        transaction_depth: 0,
-                        read_only: false,
-                    },
-                );
-                for index in 0..crate::execution::MAX_PER_PROCESS_STATE_HANDLES {
-                    process.sqlite_statements.insert(
-                        index as u64,
-                        ActiveSqliteStatement {
-                            database_id: 1,
-                            sql: String::from("SELECT 1"),
-                            return_arrays: false,
-                            read_bigints: false,
-                            allow_bare_named_parameters: false,
-                            allow_unknown_named_parameters: false,
-                        },
-                    );
-                }
-            }
-
-            let error = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-sqlite-handles",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 4,
-                    method: String::from("sqlite.prepare"),
-                    args: vec![json!(1), json!("SELECT 1")],
-                },
-            )
-            .expect_err("sqlite statement creation should be bounded");
-            assert_handle_limit_error(error);
-        }
-
-        fn create_kernel_process_handle_for_tests(
-        ) -> secure_exec_kernel::kernel::KernelProcessHandle {
-            let mut config = KernelVmConfig::new("vm-js-crypto-rpc");
-            config.permissions = Permissions::allow_all();
-            let mut kernel = SidecarKernel::new(MountTable::new(MemoryFileSystem::new()), config);
-            kernel
-                .register_driver(CommandDriver::new(
-                    EXECUTION_DRIVER_NAME,
-                    [JAVASCRIPT_COMMAND],
-                ))
-                .expect("register execution driver");
-            kernel
-                .spawn_process(
-                    JAVASCRIPT_COMMAND,
-                    Vec::new(),
-                    SpawnOptions {
-                        requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                        ..SpawnOptions::default()
-                    },
-                )
-                .expect("spawn javascript kernel process")
-        }
-
-        #[allow(dead_code)]
-        fn create_active_execution_for_tests() -> ActiveExecution {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate sidecar");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::new(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-crypto-rpc");
-            write_fixture(&cwd.join("entry.mjs"), "export {};\n");
-            let context = sidecar.javascript_engine.create_context(
-                secure_exec_execution::CreateJavascriptContextRequest {
-                    vm_id: vm_id.clone(),
-                    bootstrap_module: None,
-                    compile_cache_root: None,
-                },
-            );
-            let execution = sidecar
-                .javascript_engine
-                .start_execution(secure_exec_execution::StartJavascriptExecutionRequest {
-                    guest_runtime: Default::default(),
-                    vm_id,
-                    context_id: context.context_id,
-                    argv: vec![String::from("./entry.mjs")],
-                    env: BTreeMap::new(),
-                    cwd,
-                    limits: Default::default(),
-                    inline_code: Some(String::from("")),
-                    wasm_module_bytes: None,
-                })
-                .expect("start javascript execution");
-            ActiveExecution::Javascript(execution)
-        }
-
-        fn create_crypto_test_process() -> ActiveProcess {
-            let kernel_handle = create_kernel_process_handle_for_tests();
-            ActiveProcess::new(
-                kernel_handle.pid(),
-                kernel_handle,
-                GuestRuntimeKind::JavaScript,
-                ActiveExecution::Tool(ToolExecution::default()),
-            )
-        }
-
-        #[derive(Debug, Clone, PartialEq, Eq)]
-        struct JsBridgeCallRecord {
-            ownership: OwnershipScope,
-            mount_id: String,
-            operation: String,
-            path: Option<String>,
-        }
-
-        fn js_bridge_result(
-            request: SidecarRequestFrame,
-            result: Option<Value>,
-            error: Option<&str>,
-        ) -> Result<SidecarResponsePayload, SidecarError> {
-            let SidecarRequestPayload::JsBridgeCall(call) = request.payload else {
-                return Err(SidecarError::InvalidState(String::from(
-                    "expected js_bridge_call payload",
-                )));
-            };
-            Ok(SidecarResponsePayload::JsBridgeResult(
-                crate::protocol::JsBridgeResultResponse {
-                    call_id: call.call_id,
-                    result: result.map(|value| value.to_string()),
-                    error: error.map(String::from),
-                },
-            ))
-        }
-
-        fn stat_json(stat: VirtualStat) -> Value {
-            json!({
-                "mode": stat.mode,
-                "size": stat.size,
-                "blocks": stat.blocks,
-                "dev": stat.dev,
-                "rdev": stat.rdev,
-                "isDirectory": stat.is_directory,
-                "isSymbolicLink": stat.is_symbolic_link,
-                "atimeMs": stat.atime_ms,
-                "mtimeMs": stat.mtime_ms,
-                "ctimeMs": stat.ctime_ms,
-                "birthtimeMs": stat.birthtime_ms,
-                "ino": stat.ino,
-                "nlink": stat.nlink,
-                "uid": stat.uid,
-                "gid": stat.gid,
-            })
-        }
-
-        fn dir_entry_json(entry: VirtualDirEntry) -> Value {
-            json!({
-                "name": entry.name,
-                "isDirectory": entry.is_directory,
-                "isSymbolicLink": entry.is_symbolic_link,
-            })
-        }
-
-        fn install_memory_js_bridge_handler(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-        ) -> (
-            Arc<Mutex<MemoryFileSystem>>,
-            Arc<Mutex<Vec<JsBridgeCallRecord>>>,
-        ) {
-            let filesystem = Arc::new(Mutex::new(MemoryFileSystem::new()));
-            let calls = Arc::new(Mutex::new(Vec::<JsBridgeCallRecord>::new()));
-            let handler_filesystem = filesystem.clone();
-            let handler_calls = calls.clone();
-
-            sidecar.set_sidecar_request_handler(move |request| {
-                let ownership = request.ownership.clone();
-                let SidecarRequestPayload::JsBridgeCall(call) = &request.payload else {
-                    return Err(SidecarError::InvalidState(String::from(
-                        "expected js_bridge_call payload",
-                    )));
-                };
-                let call_args: Value =
-                    serde_json::from_str(&call.args).expect("js bridge args json");
-                handler_calls
-                    .lock()
-                    .expect("lock js bridge calls")
-                    .push(JsBridgeCallRecord {
-                        ownership,
-                        mount_id: call.mount_id.clone(),
-                        operation: call.operation.clone(),
-                        path: call_args
-                            .get("path")
-                            .and_then(Value::as_str)
-                            .map(String::from),
-                    });
-
-                let mut filesystem = handler_filesystem.lock().expect("lock js bridge fs");
-                let response: Result<Option<Value>, String> = match call.operation.as_str() {
-                    "readFile" => {
-                        let path = call_args["path"].as_str().expect("readFile path");
-                        filesystem
-                            .read_file(path)
-                            .map(|bytes| {
-                                Some(Value::String(
-                                    base64::engine::general_purpose::STANDARD.encode(bytes),
-                                ))
-                            })
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "readDir" => {
-                        let path = call_args["path"].as_str().expect("readDir path");
-                        filesystem
-                            .read_dir(path)
-                            .map(|entries| Some(json!(entries)))
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "readDirWithTypes" => {
-                        let path = call_args["path"].as_str().expect("readDirWithTypes path");
-                        filesystem
-                            .read_dir_with_types(path)
-                            .map(|entries| {
-                                Some(Value::Array(
-                                    entries.into_iter().map(dir_entry_json).collect(),
-                                ))
-                            })
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "writeFile" => {
-                        let path = call_args["path"].as_str().expect("writeFile path");
-                        let content = call_args["content"].as_str().expect("writeFile content");
-                        let bytes = base64::engine::general_purpose::STANDARD
-                            .decode(content)
-                            .expect("decode js bridge write content");
-                        filesystem
-                            .write_file(path, bytes)
-                            .map(|()| None)
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "createDir" => {
-                        let path = call_args["path"].as_str().expect("createDir path");
-                        filesystem
-                            .create_dir(path)
-                            .map(|()| None)
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "mkdir" => {
-                        let path = call_args["path"].as_str().expect("mkdir path");
-                        let recursive = call_args["recursive"].as_bool().unwrap_or(false);
-                        filesystem
-                            .mkdir(path, recursive)
-                            .map(|()| None)
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "exists" => {
-                        let path = call_args["path"].as_str().expect("exists path");
-                        Ok(Some(Value::Bool(filesystem.exists(path))))
-                    }
-                    "stat" => {
-                        let path = call_args["path"].as_str().expect("stat path");
-                        filesystem
-                            .stat(path)
-                            .map(|stat| Some(stat_json(stat)))
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "removeFile" => {
-                        let path = call_args["path"].as_str().expect("removeFile path");
-                        filesystem
-                            .remove_file(path)
-                            .map(|()| None)
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "removeDir" => {
-                        let path = call_args["path"].as_str().expect("removeDir path");
-                        filesystem
-                            .remove_dir(path)
-                            .map(|()| None)
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "rename" => {
-                        let old_path = call_args["oldPath"].as_str().expect("rename oldPath");
-                        let new_path = call_args["newPath"].as_str().expect("rename newPath");
-                        filesystem
-                            .rename(old_path, new_path)
-                            .map(|()| None)
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "realpath" => {
-                        let path = call_args["path"].as_str().expect("realpath path");
-                        filesystem
-                            .realpath(path)
-                            .map(|resolved| Some(json!(resolved)))
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "symlink" => {
-                        let target = call_args["target"].as_str().expect("symlink target");
-                        let link_path = call_args["linkPath"].as_str().expect("symlink linkPath");
-                        filesystem
-                            .symlink(target, link_path)
-                            .map(|()| None)
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "readlink" => {
-                        let path = call_args["path"].as_str().expect("readlink path");
-                        filesystem
-                            .read_link(path)
-                            .map(|target| Some(json!(target)))
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "lstat" => {
-                        let path = call_args["path"].as_str().expect("lstat path");
-                        filesystem
-                            .lstat(path)
-                            .map(|stat| Some(stat_json(stat)))
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "link" => {
-                        let old_path = call_args["oldPath"].as_str().expect("link oldPath");
-                        let new_path = call_args["newPath"].as_str().expect("link newPath");
-                        filesystem
-                            .link(old_path, new_path)
-                            .map(|()| None)
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "chmod" => {
-                        let path = call_args["path"].as_str().expect("chmod path");
-                        let mode = call_args["mode"].as_u64().expect("chmod mode") as u32;
-                        filesystem
-                            .chmod(path, mode)
-                            .map(|()| None)
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "chown" => {
-                        let path = call_args["path"].as_str().expect("chown path");
-                        let uid = call_args["uid"].as_u64().expect("chown uid") as u32;
-                        let gid = call_args["gid"].as_u64().expect("chown gid") as u32;
-                        filesystem
-                            .chown(path, uid, gid)
-                            .map(|()| None)
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "utimes" => {
-                        let path = call_args["path"].as_str().expect("utimes path");
-                        let atime = call_args["atimeMs"].as_u64().expect("utimes atimeMs");
-                        let mtime = call_args["mtimeMs"].as_u64().expect("utimes mtimeMs");
-                        filesystem
-                            .utimes(path, atime, mtime)
-                            .map(|()| None)
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "truncate" => {
-                        let path = call_args["path"].as_str().expect("truncate path");
-                        let length = call_args["length"].as_u64().expect("truncate length");
-                        filesystem
-                            .truncate(path, length)
-                            .map(|()| None)
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "pread" => {
-                        let path = call_args["path"].as_str().expect("pread path");
-                        let offset = call_args["offset"].as_u64().expect("pread offset");
-                        let length = call_args["length"].as_u64().expect("pread length") as usize;
-                        filesystem
-                            .pread(path, offset, length)
-                            .map(|bytes| {
-                                Some(Value::String(
-                                    base64::engine::general_purpose::STANDARD.encode(bytes),
-                                ))
-                            })
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    "pwrite" => {
-                        let path = call_args["path"].as_str().expect("pwrite path");
-                        let offset = call_args["offset"].as_u64().expect("pwrite offset");
-                        let content = call_args["content"].as_str().expect("pwrite content");
-                        let bytes = base64::engine::general_purpose::STANDARD
-                            .decode(content)
-                            .expect("decode js bridge pwrite content");
-                        filesystem
-                            .pwrite(path, bytes, offset)
-                            .map(|()| None)
-                            .map_err(|error| format!("{}: {error}", error.code()))
-                    }
-                    other => {
-                        return Err(SidecarError::Unsupported(format!(
-                            "unsupported op: {other}"
-                        )));
-                    }
-                };
-
-                match response {
-                    Ok(result) => js_bridge_result(request, result, None),
-                    Err(error) => js_bridge_result(request, None, Some(&error)),
-                }
-            });
-
-            (filesystem, calls)
-        }
-
-        fn unexpected_response_error(expected: &str, other: ResponsePayload) -> SidecarError {
-            SidecarError::InvalidState(format!("expected {expected} response, got {other:?}"))
-        }
-
-        fn authenticated_connection_id(auth: DispatchResult) -> Result<String, SidecarError> {
-            match auth.response.payload {
-                ResponsePayload::Authenticated(response) => {
-                    assert_eq!(
-                        auth.response.ownership,
-                        OwnershipScope::connection(&response.connection_id)
-                    );
-                    Ok(response.connection_id)
-                }
-                other => Err(unexpected_response_error("authenticated", other)),
-            }
-        }
-
-        fn opened_session_id(session: DispatchResult) -> Result<String, SidecarError> {
-            match session.response.payload {
-                ResponsePayload::SessionOpened(response) => Ok(response.session_id),
-                other => Err(unexpected_response_error("session_opened", other)),
-            }
-        }
-
-        fn created_vm_id(response: DispatchResult) -> Result<String, SidecarError> {
-            match response.response.payload {
-                ResponsePayload::VmCreated(response) => Ok(response.vm_id),
-                other => Err(unexpected_response_error("vm_created", other)),
-            }
-        }
-
-        fn authenticate_and_open_session(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-        ) -> Result<(String, String), SidecarError> {
-            let auth = sidecar
-                .dispatch_blocking(request(
-                    1,
-                    OwnershipScope::connection("conn-1"),
-                    RequestPayload::Authenticate(AuthenticateRequest {
-                        client_name: String::from("service-tests"),
-                        auth_token: String::from(TEST_AUTH_TOKEN),
-                        protocol_version: secure_exec_sidecar::wire::PROTOCOL_VERSION,
-                        bridge_version: secure_exec_bridge::bridge_contract().version,
-                    }),
-                ))
-                .expect("authenticate");
-            let connection_id = authenticated_connection_id(auth)?;
-
-            let session = sidecar
-                .dispatch_blocking(request(
-                    2,
-                    OwnershipScope::connection(&connection_id),
-                    RequestPayload::OpenSession(OpenSessionRequest {
-                        placement: SidecarPlacement::SidecarPlacementShared(
-                            SidecarPlacementShared { pool: None },
-                        ),
-                        metadata: std::collections::HashMap::new(),
-                    }),
-                ))
-                .expect("open session");
-            let session_id = opened_session_id(session)?;
-            Ok((connection_id, session_id))
-        }
-
-        fn create_vm(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            connection_id: &str,
-            session_id: &str,
-            permissions: PermissionsPolicy,
-        ) -> Result<String, SidecarError> {
-            create_vm_with_metadata(
-                sidecar,
-                connection_id,
-                session_id,
-                permissions,
-                BTreeMap::new(),
-            )
-        }
-
-        fn create_vm_with_metadata(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            connection_id: &str,
-            session_id: &str,
-            permissions: PermissionsPolicy,
-            metadata: BTreeMap<String, String>,
-        ) -> Result<String, SidecarError> {
-            let response = sidecar
-                .dispatch_blocking(request(
-                    3,
-                    OwnershipScope::session(connection_id, session_id),
-                    RequestPayload::CreateVm(CreateVmRequest::legacy_test_config(
-                        GuestRuntimeKind::JavaScript,
-                        metadata.into_iter().collect(),
-                        Default::default(),
-                        Some(permissions),
-                    )),
-                ))
-                .expect("create vm");
-
-            created_vm_id(response)
-        }
-
-        fn registry_command_root() -> PathBuf {
-            let repo_root = PathBuf::from(env!("CARGO_MANIFEST_DIR"))
-                .join("../..")
-                .canonicalize()
-                .expect("canonicalize repo root");
-            let copied = repo_root.join("registry/software/coreutils/wasm");
-            if copied.exists() {
-                return copied;
-            }
-
-            let fallback = repo_root.join("registry/native/target/wasm32-wasip1/release/commands");
-            if fallback.exists() {
-                return fallback;
-            }
-
-            let vendored = repo_root.join("packages/core/commands");
-            if vendored.exists() {
-                let staged = temp_dir("secure-exec-sidecar-vendored-commands");
-                for command in ["bash", "cat", "mkdir", "printf", "sh"] {
-                    let source = vendored.join(command);
-                    let target = staged.join(command);
-                    fs::copy(&source, &target).unwrap_or_else(|error| {
-                        panic!(
-                            "copy vendored command {} -> {}: {error}",
-                            source.display(),
-                            target.display()
-                        )
-                    });
-                    let mut permissions = fs::metadata(&target)
-                        .expect("stat staged vendored command")
-                        .permissions();
-                    permissions.set_mode(0o755);
-                    fs::set_permissions(&target, permissions)
-                        .expect("chmod staged vendored command");
-                }
-                return staged;
-            }
-
-            panic!(
-                "registry WASM commands are required for service fs regression tests: expected {}, {}, or {}",
-                copied.display(),
-                fallback.display(),
-                vendored.display()
-            );
-        }
-
-        fn configure_registry_command_mount(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            connection_id: &str,
-            session_id: &str,
-            vm_id: &str,
-            request_id: secure_exec_sidecar::protocol::RequestId,
-        ) {
-            let command_root = registry_command_root();
-            sidecar
-                .dispatch_blocking(request(
-                    request_id,
-                    OwnershipScope::vm(connection_id, session_id, vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/__secure_exec/commands/0"),
-                            read_only: true,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("host_dir"),
-                                config: json!({
-                                    "hostPath": command_root,
-                                    "readOnly": true,
-                                })
-                                .to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure registry command mount");
-        }
-
-        #[allow(clippy::too_many_arguments)] // test helper mirroring the exec surface
-        fn run_guest_command(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            connection_id: &str,
-            session_id: &str,
-            next_request_id: &mut secure_exec_sidecar::protocol::RequestId,
-            process_id: &str,
-            command: &str,
-            args: &[&str],
-            env: BTreeMap<String, String>,
-        ) -> (String, String, Option<i32>) {
-            let request_id = *next_request_id;
-            *next_request_id += 1;
-            let response = sidecar
-                .dispatch_blocking(request(
-                    request_id,
-                    OwnershipScope::vm(connection_id, session_id, vm_id),
-                    RequestPayload::Execute(crate::protocol::ExecuteRequest {
-                        process_id: process_id.to_owned(),
-                        command: Some(command.to_owned()),
-                        runtime: None,
-                        entrypoint: None,
-                        args: args.iter().map(|arg| (*arg).to_owned()).collect(),
-                        env: env.into_iter().collect(),
-                        cwd: None,
-                        wasm_permission_tier: None,
-                    }),
-                ))
-                .expect("dispatch guest command");
-
-            match response.response.payload {
-                ResponsePayload::ProcessStarted(response) => {
-                    assert_eq!(response.process_id, process_id);
-                }
-                other => panic!("unexpected execute response: {other:?}"),
-            }
-
-            drain_process_output(sidecar, vm_id, process_id)
-        }
-
-        fn run_guest_node_eval(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            connection_id: &str,
-            session_id: &str,
-            next_request_id: &mut secure_exec_sidecar::protocol::RequestId,
-            process_id: &str,
-            source: &str,
-        ) -> (String, String, Option<i32>) {
-            run_guest_command(
-                sidecar,
-                vm_id,
-                connection_id,
-                session_id,
-                next_request_id,
-                process_id,
-                "node",
-                &["-e", source],
-                BTreeMap::from([(
-                    String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                    String::from("[\"buffer\",\"console\",\"fs\",\"path\"]"),
-                )]),
-            )
-        }
-
-        fn stdout_json(stdout: &str) -> Value {
-            let line = stdout
-                .lines()
-                .rev()
-                .find(|line| line.trim_start().starts_with('{'))
-                .unwrap_or_else(|| panic!("stdout did not contain a JSON object line: {stdout:?}"));
-            serde_json::from_str(line).expect("parse stdout JSON")
-        }
-
-        fn isolated_service_test_spawn_lock() -> std::sync::MutexGuard<'static, ()> {
-            static ISOLATED_SERVICE_TEST_SPAWN_LOCK: OnceLock<Mutex<()>> = OnceLock::new();
-            ISOLATED_SERVICE_TEST_SPAWN_LOCK
-                .get_or_init(|| Mutex::new(()))
-                .lock()
-                .expect("isolated service test spawn lock")
-        }
-
-        fn run_isolated_service_test(test_name: &str) {
-            let _guard = isolated_service_test_spawn_lock();
-            let current_exe = std::env::current_exe().expect("current service test binary path");
-            let status = Command::new(&current_exe)
-                .arg("--exact")
-                .arg("service::tests::__service_isolated_runner")
-                .arg("--nocapture")
-                .env(ISOLATED_SERVICE_TEST_ENV, test_name)
-                .env(
-                    ISOLATED_SERVICE_CACHE_SUFFIX_ENV,
-                    format!("{}-{}", std::process::id(), test_name.replace('-', "_")),
-                )
-                .status()
-                .unwrap_or_else(|error| panic!("spawn isolated service test {test_name}: {error}"));
-
-            assert!(
-                status.success(),
-                "isolated service test {test_name} failed with status {status}"
-            );
-        }
-
-        fn empty_permissions_policy() -> PermissionsPolicy {
-            PermissionsPolicy {
-                fs: None,
-                network: None,
-                child_process: None,
-                process: None,
-                env: None,
-                binding: None,
-            }
-        }
-
-        fn capability_permissions(entries: &[(&str, PermissionMode)]) -> PermissionsPolicy {
-            let mut policy = empty_permissions_policy();
-
-            for (capability, mode) in entries {
-                match *capability {
-                    "fs" => policy.fs = Some(FsPermissionScope::PermissionMode(mode.clone())),
-                    "network" => {
-                        policy.network = Some(PatternPermissionScope::PermissionMode(mode.clone()))
-                    }
-                    "child_process" => {
-                        policy.child_process =
-                            Some(PatternPermissionScope::PermissionMode(mode.clone()));
-                    }
-                    "process" => {
-                        policy.process = Some(PatternPermissionScope::PermissionMode(mode.clone()));
-                    }
-                    "env" => {
-                        policy.env = Some(PatternPermissionScope::PermissionMode(mode.clone()))
-                    }
-                    "binding" => {
-                        policy.binding = Some(PatternPermissionScope::PermissionMode(mode.clone()))
-                    }
-                    _ if capability.starts_with("fs.") => {
-                        append_fs_rule(
-                            &mut policy,
-                            capability.trim_start_matches("fs."),
-                            mode.clone(),
-                        );
-                    }
-                    _ if capability.starts_with("network.") => {
-                        append_pattern_rule(
-                            &mut policy.network,
-                            capability.trim_start_matches("network."),
-                            mode.clone(),
-                        );
-                    }
-                    _ if capability.starts_with("child_process.") => {
-                        append_pattern_rule(
-                            &mut policy.child_process,
-                            capability.trim_start_matches("child_process."),
-                            mode.clone(),
-                        );
-                    }
-                    _ if capability.starts_with("process.") => {
-                        append_pattern_rule(
-                            &mut policy.process,
-                            capability.trim_start_matches("process."),
-                            mode.clone(),
-                        );
-                    }
-                    _ if capability.starts_with("env.") => {
-                        append_pattern_rule(
-                            &mut policy.env,
-                            capability.trim_start_matches("env."),
-                            mode.clone(),
-                        );
-                    }
-                    _ if capability.starts_with("binding.") => {
-                        append_pattern_rule(
-                            &mut policy.binding,
-                            capability.trim_start_matches("binding."),
-                            mode.clone(),
-                        );
-                    }
-                    _ => panic!("unsupported test capability {capability}"),
-                }
-            }
-
-            policy
-        }
-
-        fn test_toolkit_payload(
-            name: &str,
-            description: &str,
-            tool_name: &str,
-        ) -> RegisterHostCallbacksRequest {
-            test_toolkit_payload_with_schema(
-                name,
-                description,
-                tool_name,
-                json!({
-                    "type": "object",
-                    "properties": {},
-                    "additionalProperties": false,
-                }),
-            )
-        }
-
-        fn test_toolkit_payload_with_schema(
-            name: &str,
-            description: &str,
-            tool_name: &str,
-            input_schema: Value,
-        ) -> RegisterHostCallbacksRequest {
-            RegisterHostCallbacksRequest {
-                name: String::from(name),
-                description: String::from(description),
-                command_aliases: vec![format!("agentos-{name}")],
-                registry_command_aliases: vec![String::from("agentos")],
-                callbacks: std::collections::HashMap::from([(
-                    String::from(tool_name),
-                    RegisteredHostCallbackDefinition {
-                        description: format!("{tool_name} tool"),
-                        input_schema: input_schema.to_string(),
-                        timeout_ms: None,
-                        examples: Vec::new(),
-                    },
-                )]),
-            }
-        }
-
-        fn append_fs_rule(policy: &mut PermissionsPolicy, operation: &str, mode: PermissionMode) {
-            let scope = policy
-                .fs
-                .take()
-                .unwrap_or(FsPermissionScope::FsPermissionRuleSet(
-                    FsPermissionRuleSet {
-                        default: None,
-                        rules: Vec::new(),
-                    },
-                ));
-            policy.fs = Some(match scope {
-                FsPermissionScope::PermissionMode(existing) => {
-                    FsPermissionScope::FsPermissionRuleSet(FsPermissionRuleSet {
-                        default: Some(existing),
-                        rules: vec![FsPermissionRule {
-                            mode,
-                            operations: vec![operation.to_owned()],
-                            paths: vec![String::from("/**")],
-                        }],
-                    })
-                }
-                FsPermissionScope::FsPermissionRuleSet(mut rules) => {
-                    rules.rules.push(FsPermissionRule {
-                        mode,
-                        operations: vec![operation.to_owned()],
-                        paths: vec![String::from("/**")],
-                    });
-                    FsPermissionScope::FsPermissionRuleSet(rules)
-                }
-            });
-        }
-
-        fn append_pattern_rule(
-            scope: &mut Option<PatternPermissionScope>,
-            operation: &str,
-            mode: PermissionMode,
-        ) {
-            let existing =
-                scope
-                    .take()
-                    .unwrap_or(PatternPermissionScope::PatternPermissionRuleSet(
-                        PatternPermissionRuleSet {
-                            default: None,
-                            rules: Vec::new(),
-                        },
-                    ));
-            *scope = Some(match existing {
-                PatternPermissionScope::PermissionMode(default) => {
-                    PatternPermissionScope::PatternPermissionRuleSet(PatternPermissionRuleSet {
-                        default: Some(default),
-                        rules: vec![PatternPermissionRule {
-                            mode,
-                            operations: vec![operation.to_owned()],
-                            patterns: vec![String::from("**")],
-                        }],
-                    })
-                }
-                PatternPermissionScope::PatternPermissionRuleSet(mut rules) => {
-                    rules.rules.push(PatternPermissionRule {
-                        mode,
-                        operations: vec![operation.to_owned()],
-                        patterns: vec![String::from("**")],
-                    });
-                    PatternPermissionScope::PatternPermissionRuleSet(rules)
-                }
-            });
-        }
-
-        fn inspect_permissions(network: bool, process: bool) -> PermissionsPolicy {
-            PermissionsPolicy {
-                fs: None,
-                network: Some(PatternPermissionScope::PatternPermissionRuleSet(
-                    PatternPermissionRuleSet {
-                        default: Some(PermissionMode::Deny),
-                        rules: vec![
-                            PatternPermissionRule {
-                                mode: PermissionMode::Allow,
-                                operations: vec![String::from("listen")],
-                                patterns: vec![String::from("**")],
-                            },
-                            PatternPermissionRule {
-                                mode: if network {
-                                    PermissionMode::Allow
-                                } else {
-                                    PermissionMode::Deny
-                                },
-                                operations: vec![String::from("inspect")],
-                                patterns: vec![String::from("**")],
-                            },
-                        ],
-                    },
-                )),
-                child_process: Some(PatternPermissionScope::PermissionMode(
-                    PermissionMode::Allow,
-                )),
-                process: Some(PatternPermissionScope::PatternPermissionRuleSet(
-                    PatternPermissionRuleSet {
-                        default: Some(PermissionMode::Deny),
-                        rules: vec![PatternPermissionRule {
-                            mode: if process {
-                                PermissionMode::Allow
-                            } else {
-                                PermissionMode::Deny
-                            },
-                            operations: vec![String::from("inspect")],
-                            patterns: vec![String::from("**")],
-                        }],
-                    },
-                )),
-                env: None,
-                binding: None,
-            }
-        }
-
-        fn temp_dir(prefix: &str) -> PathBuf {
-            let suffix = SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("clock should be monotonic enough for temp paths")
-                .as_nanos();
-            let path = std::env::temp_dir().join(format!("{prefix}-{suffix}"));
-            fs::create_dir_all(&path).expect("create temp dir");
-            path
-        }
-
-        fn write_fixture(path: &Path, contents: impl AsRef<[u8]>) {
-            fs::write(path, contents).expect("write fixture");
-        }
-
-        fn cleanup_fake_runtime_process(process: ActiveProcess) {
-            let child_pid = process.execution.child_pid();
-            let uses_shared_v8_runtime = match &process.execution {
-                ActiveExecution::Javascript(execution) => execution.uses_shared_v8_runtime(),
-                ActiveExecution::Python(execution) => execution.uses_shared_v8_runtime(),
-                ActiveExecution::Wasm(_) => false,
-                ActiveExecution::Tool(_) => false,
-            };
-            if !uses_shared_v8_runtime {
-                let _ = signal_runtime_process(child_pid, SIGTERM);
-            }
-        }
-
-        fn allow_synthetic_python_vfs_reply_drop(result: Result<(), SidecarError>, context: &str) {
-            match result {
-                Ok(()) => {}
-                Err(SidecarError::Execution(message))
-                    if message
-                        .contains("failed to reply to guest Python VFS RPC request: session ")
-                        && message.contains(" does not exist") => {}
-                Err(error) => panic!("{context}: {error}"),
-            }
-        }
-
-        fn assert_node_available() {
-            let output = Command::new("node")
-                .arg("--version")
-                .output()
-                .expect("spawn node --version");
-            assert!(
-                output.status.success(),
-                "node must be available for python dispatch tests"
-            );
-        }
-
-        fn run_javascript_entry(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            cwd: &Path,
-            process_id: &str,
-        ) -> (String, String, Option<i32>) {
-            let mut env = BTreeMap::new();
-            if let Ok(value) = std::env::var("SECURE_EXEC_HTTP2_RETAIN_TRACE") {
-                env.insert(String::from("SECURE_EXEC_HTTP2_RETAIN_TRACE"), value);
-            }
-            run_javascript_entry_with_env(sidecar, vm_id, cwd, process_id, env)
-        }
-
-        fn run_javascript_entry_with_env(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            cwd: &Path,
-            process_id: &str,
-            env: BTreeMap<String, String>,
-        ) -> (String, String, Option<i32>) {
-            let context =
-                sidecar
-                    .javascript_engine
-                    .create_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.to_owned(),
-                        bootstrap_module: None,
-                        compile_cache_root: None,
-                    });
-            let execution = sidecar
-                .javascript_engine
-                .start_execution(StartJavascriptExecutionRequest {
-                    limits: Default::default(),
-                    guest_runtime: Default::default(),
-                    vm_id: vm_id.to_owned(),
-                    context_id: context.context_id,
-                    argv: vec![String::from("./entry.mjs")],
-                    env: env.clone(),
-                    cwd: cwd.to_path_buf(),
-                    inline_code: None,
-                    wasm_module_bytes: None,
-                })
-                .expect("start fake javascript execution");
-
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(vm_id).expect("javascript vm");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel javascript process")
-            };
-
-            {
-                let vm = sidecar.vms.get_mut(vm_id).expect("javascript vm");
-                vm.active_processes.insert(
-                    process_id.to_owned(),
-                    ActiveProcess::new(
-                        kernel_handle.pid(),
-                        kernel_handle,
-                        GuestRuntimeKind::JavaScript,
-                        ActiveExecution::Javascript(execution),
-                    )
-                    .with_env(env)
-                    .with_host_cwd(cwd.to_path_buf()),
-                );
-            }
-
-            let output = drain_process_output(sidecar, vm_id, process_id);
-            if std::env::var("SECURE_EXEC_HTTP2_RETAIN_TRACE").as_deref() == Ok("1")
-                && !output.1.is_empty()
-            {
-                eprint!("{}", output.1);
-            }
-            output
-        }
-
-        struct FixtureDnsServer {
-            addr: SocketAddr,
-            running: Arc<std::sync::atomic::AtomicBool>,
-            thread: Option<thread::JoinHandle<()>>,
-        }
-
-        impl FixtureDnsServer {
-            fn start() -> Self {
-                let socket = UdpSocket::bind("127.0.0.1:0").expect("bind fixture DNS server");
-                socket
-                    .set_read_timeout(Some(Duration::from_millis(100)))
-                    .expect("set fixture DNS timeout");
-                let addr = socket.local_addr().expect("fixture DNS local addr");
-                let running = Arc::new(std::sync::atomic::AtomicBool::new(true));
-                let thread_running = Arc::clone(&running);
-                let thread = thread::spawn(move || {
-                    let mut buffer = [0_u8; 2048];
-                    while thread_running.load(Ordering::SeqCst) {
-                        let Ok((len, peer)) = socket.recv_from(&mut buffer) else {
-                            continue;
-                        };
-                        let Ok(request) = Message::from_vec(&buffer[..len]) else {
-                            continue;
-                        };
-                        let response = fixture_dns_response(&request);
-                        let bytes = response.to_vec().expect("encode fixture DNS response");
-                        let _ = socket.send_to(&bytes, peer);
-                    }
-                });
-                Self {
-                    addr,
-                    running,
-                    thread: Some(thread),
-                }
-            }
-        }
-
-        impl Drop for FixtureDnsServer {
-            fn drop(&mut self) {
-                self.running.store(false, Ordering::SeqCst);
-                if let Ok(socket) = UdpSocket::bind("127.0.0.1:0") {
-                    let _ = socket.send_to(&[0], self.addr);
-                }
-                if let Some(thread) = self.thread.take() {
-                    thread.join().expect("join fixture DNS thread");
-                }
-            }
-        }
-
-        fn fixture_dns_response(request: &Message) -> Message {
-            let mut response = Message::response(request.metadata.id, request.metadata.op_code);
-            response.metadata.authoritative = true;
-            response.metadata.recursion_available = true;
-            response.add_queries(request.queries.iter().cloned());
-            if let Some(query) = request.queries.first() {
-                response.add_answers(fixture_dns_answers(query));
-            }
-            response
-        }
-
-        fn fixture_dns_answers(query: &Query) -> Vec<Record> {
-            let name = query.name().to_ascii();
-            match (name.as_str(), query.query_type()) {
-                ("bundle.example.test.", RecordType::A) => vec![fixture_dns_record(
-                    "bundle.example.test.",
-                    RData::A(A::new(203, 0, 113, 10)),
-                )],
-                ("bundle.example.test.", RecordType::AAAA) => vec![fixture_dns_record(
-                    "bundle.example.test.",
-                    RData::AAAA(AAAA::new(0x2001, 0x0db8, 0, 0, 0, 0, 0, 0x0010)),
-                )],
-                ("bundle.example.test.", RecordType::MX) => vec![fixture_dns_record(
-                    "bundle.example.test.",
-                    RData::MX(MX::new(10, fixture_dns_name("mail.example.test."))),
-                )],
-                ("bundle.example.test.", RecordType::TXT) => vec![
-                    fixture_dns_record(
-                        "bundle.example.test.",
-                        RData::TXT(TXT::new(vec![String::from("v=spf1"), String::from("-all")])),
-                    ),
-                    fixture_dns_record(
-                        "bundle.example.test.",
-                        RData::TXT(TXT::new(vec![String::from("secure-exec")])),
-                    ),
-                ],
-                ("bundle.example.test.", RecordType::ANY) => vec![
-                    fixture_dns_record("bundle.example.test.", RData::A(A::new(203, 0, 113, 10))),
-                    fixture_dns_record(
-                        "bundle.example.test.",
-                        RData::AAAA(AAAA::new(0x2001, 0x0db8, 0, 0, 0, 0, 0, 0x0010)),
-                    ),
-                    fixture_dns_record(
-                        "bundle.example.test.",
-                        RData::MX(MX::new(10, fixture_dns_name("mail.example.test."))),
-                    ),
-                    fixture_dns_record(
-                        "bundle.example.test.",
-                        RData::TXT(TXT::new(vec![String::from("v=spf1"), String::from("-all")])),
-                    ),
-                ],
-                ("alias.example.test.", RecordType::CNAME) => vec![fixture_dns_record(
-                    "alias.example.test.",
-                    RData::CNAME(CNAME(fixture_dns_name("bundle.example.test."))),
-                )],
-                ("ptr.example.test.", RecordType::PTR) => vec![fixture_dns_record(
-                    "ptr.example.test.",
-                    RData::PTR(PTR(fixture_dns_name("host.example.test."))),
-                )],
-                ("zone.example.test.", RecordType::NS) => vec![fixture_dns_record(
-                    "zone.example.test.",
-                    RData::NS(NS(fixture_dns_name("ns1.example.test."))),
-                )],
-                ("zone.example.test.", RecordType::SOA) => vec![fixture_dns_record(
-                    "zone.example.test.",
-                    RData::SOA(SOA::new(
-                        fixture_dns_name("ns1.example.test."),
-                        fixture_dns_name("hostmaster.example.test."),
-                        2026041601,
-                        3600,
-                        600,
-                        86400,
-                        60,
-                    )),
-                )],
-                ("_svc._tcp.example.test.", RecordType::SRV) => vec![fixture_dns_record(
-                    "_svc._tcp.example.test.",
-                    RData::SRV(SRV::new(
-                        1,
-                        5,
-                        8443,
-                        fixture_dns_name("svc-target.example.test."),
-                    )),
-                )],
-                ("naptr.example.test.", RecordType::NAPTR) => vec![fixture_dns_record(
-                    "naptr.example.test.",
-                    RData::NAPTR(NAPTR::new(
-                        10,
-                        20,
-                        b"s".to_vec().into_boxed_slice(),
-                        b"SIP+D2U".to_vec().into_boxed_slice(),
-                        b"!^.*$!sip:service@example.test!"
-                            .to_vec()
-                            .into_boxed_slice(),
-                        fixture_dns_name("_sip._udp.example.test."),
-                    )),
-                )],
-                ("caa.example.test.", RecordType::CAA) => vec![
-                    fixture_dns_record(
-                        "caa.example.test.",
-                        RData::CAA(CAA::new_issue(
-                            false,
-                            Some(fixture_dns_name("letsencrypt.org.")),
-                            vec![],
-                        )),
-                    ),
-                    fixture_dns_record(
-                        "caa.example.test.",
-                        RData::CAA(CAA::new_iodef(
-                            false,
-                            url::Url::parse("https://iodef.example.test/report")
-                                .expect("fixture CAA iodef URL"),
-                        )),
-                    ),
-                ],
-                _ => Vec::new(),
-            }
-        }
-
-        fn fixture_dns_record(name: &str, data: RData) -> Record {
-            Record::from_rdata(fixture_dns_name(name), 60, data)
-        }
-
-        fn fixture_dns_name(name: &str) -> Name {
-            name.parse().expect("valid fixture DNS name")
-        }
-
-        fn append_process_stream_chunk(
-            stream: &mut Vec<u8>,
-            chunk: &[u8],
-            process_id: &str,
-            stream_name: &str,
-        ) {
-            assert!(
-                process_stream_chunk_fits(stream.len(), chunk.len()),
-                "process {process_id} {stream_name} exceeded {MAX_SERVICE_PROCESS_STREAM_BYTES} bytes"
-            );
-            stream.extend_from_slice(chunk);
-        }
-
-        fn process_stream_chunk_fits(current_len: usize, chunk_len: usize) -> bool {
-            current_len.saturating_add(chunk_len) <= MAX_SERVICE_PROCESS_STREAM_BYTES
-        }
-
-        fn process_stream_to_string(stream: &[u8]) -> String {
-            String::from_utf8_lossy(stream).into_owned()
-        }
-
-        fn drain_process_output(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            process_id: &str,
-        ) -> (String, String, Option<i32>) {
-            let mut stdout = Vec::new();
-            let mut stderr = Vec::new();
-            let mut exit_code = None;
-            let deadline = Instant::now() + Duration::from_secs(30);
-            let mut events_drained = 0;
-            while events_drained < 10_000 && Instant::now() < deadline {
-                events_drained += 1;
-                pump_sibling_internal_process_events(sidecar, vm_id, process_id);
-                let next_event = {
-                    let vm = sidecar.vms.get_mut(vm_id).expect("active vm");
-                    vm.active_processes.get_mut(process_id).and_then(|process| {
-                        if let Some(event) = process.pending_execution_events.pop_front() {
-                            Some(event)
-                        } else {
-                            process
-                                .execution
-                                .poll_event_blocking(Duration::from_secs(5))
-                                .expect("poll process event")
-                        }
-                    })
-                };
-                let Some(event) = next_event else {
-                    if exit_code.is_some() {
-                        break;
-                    }
-                    panic!("process {process_id} disappeared before exit");
-                };
-
-                match &event {
-                    ActiveExecutionEvent::Stdout(chunk) => {
-                        append_process_stream_chunk(&mut stdout, chunk, process_id, "stdout");
-                    }
-                    ActiveExecutionEvent::Stderr(chunk) => {
-                        append_process_stream_chunk(&mut stderr, chunk, process_id, "stderr");
-                    }
-                    ActiveExecutionEvent::Exited(code) => {
-                        exit_code = Some(*code);
-                    }
-                    ActiveExecutionEvent::JavascriptSyncRpcRequest(_)
-                    | ActiveExecutionEvent::PythonVfsRpcRequest(_)
-                    | ActiveExecutionEvent::SignalState { .. } => {}
-                }
-
-                sidecar
-                    .handle_execution_event(vm_id, process_id, event)
-                    .expect("handle process event");
-                pump_sibling_internal_process_events(sidecar, vm_id, process_id);
-            }
-
-            (
-                process_stream_to_string(&stdout),
-                process_stream_to_string(&stderr),
-                exit_code,
-            )
-        }
-
-        fn pump_sibling_internal_process_events(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            target_process_id: &str,
-        ) {
-            for _ in 0..64 {
-                let process_ids = sidecar
-                    .vms
-                    .get(vm_id)
-                    .map(|vm| vm.active_processes.keys().cloned().collect::<Vec<_>>())
-                    .unwrap_or_default();
-                let mut progressed = false;
-
-                for process_id in process_ids {
-                    if process_id == target_process_id {
-                        continue;
-                    }
-                    let event = {
-                        let Some(vm) = sidecar.vms.get_mut(vm_id) else {
-                            continue;
-                        };
-                        let Some(process) = vm.active_processes.get_mut(&process_id) else {
-                            continue;
-                        };
-                        if let Some(event) = process.pending_execution_events.pop_front() {
-                            Some(event)
-                        } else {
-                            process
-                                .execution
-                                .poll_event_blocking(Duration::from_millis(10))
-                                .expect("poll sibling process event")
-                        }
-                    };
-                    let Some(event) = event else {
-                        continue;
-                    };
-
-                    if matches!(
-                        event,
-                        ActiveExecutionEvent::JavascriptSyncRpcRequest(_)
-                            | ActiveExecutionEvent::PythonVfsRpcRequest(_)
-                            | ActiveExecutionEvent::SignalState { .. }
-                    ) {
-                        sidecar
-                            .handle_execution_event(vm_id, &process_id, event)
-                            .expect("handle sibling internal process event");
-                        progressed = true;
-                    } else if let Some(process) = sidecar
-                        .vms
-                        .get_mut(vm_id)
-                        .and_then(|vm| vm.active_processes.get_mut(&process_id))
-                    {
-                        process
-                            .queue_pending_execution_event(event)
-                            .expect("requeue sibling public process event");
-                    }
-                }
-
-                if !progressed {
-                    break;
-                }
-            }
-        }
-
-        fn wait_for_process_stdout_contains(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            process_id: &str,
-            needle: &str,
-        ) -> String {
-            let mut stdout = Vec::new();
-            for _ in 0..64 {
-                let next_event = {
-                    let vm = sidecar.vms.get_mut(vm_id).expect("active vm");
-                    vm.active_processes.get_mut(process_id).and_then(|process| {
-                        if let Some(event) = process.pending_execution_events.pop_front() {
-                            Some(event)
-                        } else {
-                            process
-                                .execution
-                                .poll_event_blocking(Duration::from_secs(5))
-                                .expect("poll process event")
-                        }
-                    })
-                };
-                let Some(event) = next_event else {
-                    panic!("process {process_id} disappeared before writing {needle:?}");
-                };
-                if let ActiveExecutionEvent::Stdout(chunk) = &event {
-                    append_process_stream_chunk(&mut stdout, chunk, process_id, "stdout");
-                    if process_stream_to_string(&stdout).contains(needle) {
-                        sidecar
-                            .handle_execution_event(vm_id, process_id, event)
-                            .expect("handle process event");
-                        return process_stream_to_string(&stdout);
-                    }
-                }
-                if let ActiveExecutionEvent::Exited(code) = &event {
-                    panic!("process {process_id} exited with {code} before writing {needle:?}");
-                }
-                sidecar
-                    .handle_execution_event(vm_id, process_id, event)
-                    .expect("handle process event");
-            }
-            panic!("process {process_id} did not write {needle:?}");
-        }
-
-        fn wasm_stdout_module(message: &str) -> Vec<u8> {
-            wat::parse_str(format!(
-                r#"
-(module
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 16) "{message}\n")
-  (func $_start (export "_start")
-    (i32.store (i32.const 0) (i32.const 16))
-    (i32.store (i32.const 4) (i32.const {length}))
-    (drop
-      (call $fd_write
-        (i32.const 1)
-        (i32.const 0)
-        (i32.const 1)
-        (i32.const 32)
-      )
-    )
-  )
-)
-"#,
-                length = message.len() + 1,
-            ))
-            .expect("compile wasm stdout fixture")
-        }
-
-        fn wat_escape_ascii(input: &str) -> String {
-            let mut escaped = String::new();
-            for ch in input.chars() {
-                match ch {
-                    '\\' => escaped.push_str("\\\\"),
-                    '"' => escaped.push_str("\\\""),
-                    '\n' => escaped.push_str("\\n"),
-                    '\r' => escaped.push_str("\\0d"),
-                    _ => escaped.push(ch),
-                }
-            }
-            escaped
-        }
-
-        fn wasm_expect_read_errno_module(path: &str, expected_errno: u32) -> Vec<u8> {
-            wat::parse_str(format!(
-                r#"
-(module
-  (type $path_open_t (func (param i32 i32 i32 i32 i32 i64 i64 i32 i32) (result i32)))
-  (type $fd_read_t (func (param i32 i32 i32 i32) (result i32)))
-  (type $fd_close_t (func (param i32) (result i32)))
-  (import "wasi_snapshot_preview1" "path_open" (func $path_open (type $path_open_t)))
-  (import "wasi_snapshot_preview1" "fd_read" (func $fd_read (type $fd_read_t)))
-  (import "wasi_snapshot_preview1" "fd_close" (func $fd_close (type $fd_close_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 64) "{path}")
-  (func $_start (export "_start")
-    (local $errno i32)
-    (local $fd i32)
-    (local.set $errno
-      (call $path_open
-        (i32.const 3)
-        (i32.const 0)
-        (i32.const 64)
-        (i32.const {path_len})
-        (i32.const 0)
-        (i64.const 2)
-        (i64.const 2)
-        (i32.const 0)
-        (i32.const 8)
-      )
-    )
-    (if
-      (i32.ne
-        (local.get $errno)
-        (i32.const 0)
-      )
-      (then unreachable)
-    )
-    (local.set $fd (i32.load (i32.const 8)))
-    (i32.store (i32.const 16) (i32.const 128))
-    (i32.store (i32.const 20) (i32.const 8))
-    (local.set $errno
-      (call $fd_read
-        (local.get $fd)
-        (i32.const 16)
-        (i32.const 1)
-        (i32.const 24)
-      )
-    )
-    (if
-      (i32.ne
-        (local.get $errno)
-        (i32.const {expected_errno})
-      )
-      (then unreachable)
-    )
-    (drop (call $fd_close (local.get $fd)))
-  )
-)
-"#,
-                path = wat_escape_ascii(path),
-                path_len = path.len(),
-            ))
-            .expect("compile wasm read errno fixture")
-        }
-
-        fn wasm_expect_write_open_errno_module(path: &str, expected_errno: u32) -> Vec<u8> {
-            wat::parse_str(format!(
-                r#"
-(module
-  (type $path_open_t (func (param i32 i32 i32 i32 i32 i64 i64 i32 i32) (result i32)))
-  (type $fd_close_t (func (param i32) (result i32)))
-  (import "wasi_snapshot_preview1" "path_open" (func $path_open (type $path_open_t)))
-  (import "wasi_snapshot_preview1" "fd_close" (func $fd_close (type $fd_close_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 64) "{path}")
-  (func $_start (export "_start")
-    (local $errno i32)
-    (local.set $errno
-      (call $path_open
-        (i32.const 3)
-        (i32.const 0)
-        (i32.const 64)
-        (i32.const {path_len})
-        (i32.const 1)
-        (i64.const 64)
-        (i64.const 64)
-        (i32.const 0)
-        (i32.const 8)
-      )
-    )
-    (if
-      (i32.ne
-        (local.get $errno)
-        (i32.const {expected_errno})
-      )
-      (then unreachable)
-    )
-    (if
-      (i32.eq (local.get $errno) (i32.const 0))
-      (then
-        (drop (call $fd_close (i32.load (i32.const 8))))
-      )
-    )
-  )
-)
-"#,
-                path = wat_escape_ascii(path),
-                path_len = path.len(),
-            ))
-            .expect("compile wasm write-open errno fixture")
-        }
-
-        fn start_fake_wasm_process(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            cwd: &Path,
-            process_id: &str,
-            attach_stdout_pty: bool,
-        ) -> Option<u32> {
-            let context = sidecar
-                .wasm_engine
-                .create_context(CreateWasmContextRequest {
-                    vm_id: vm_id.to_owned(),
-                    module_path: Some(String::from("./guest.wasm")),
-                });
-
-            let env = {
-                let vm = sidecar.vms.get(vm_id).expect("wasm vm");
-                BTreeMap::from([
-                    (
-                        String::from(EXECUTION_SANDBOX_ROOT_ENV),
-                        normalize_host_path(&vm.cwd).to_string_lossy().into_owned(),
-                    ),
-                    (String::from(WASM_STDIO_SYNC_RPC_ENV), String::from("1")),
-                ])
-            };
-
-            let execution = sidecar
-                .wasm_engine
-                .start_execution(StartWasmExecutionRequest {
-                    guest_runtime: Default::default(),
-                    limits: Default::default(),
-                    vm_id: vm_id.to_owned(),
-                    context_id: context.context_id,
-                    argv: vec![String::from("./guest.wasm")],
-                    env: env.clone(),
-                    cwd: cwd.to_path_buf(),
-                    permission_tier: WasmPermissionTier::Full,
-                })
-                .expect("start fake wasm execution");
-
-            let (kernel_handle, master_fd) = {
-                let vm = sidecar.vms.get_mut(vm_id).expect("wasm vm");
-                let kernel_handle = vm
-                    .kernel
-                    .spawn_process(
-                        WASM_COMMAND,
-                        vec![String::from("./guest.wasm")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel wasm process");
-                let kernel_pid = kernel_handle.pid();
-                let master_fd = if attach_stdout_pty {
-                    let (master_fd, slave_fd, _pty_path) = vm
-                        .kernel
-                        .open_pty(EXECUTION_DRIVER_NAME, kernel_pid)
-                        .expect("open kernel pty");
-                    vm.kernel
-                        .fd_dup2(EXECUTION_DRIVER_NAME, kernel_pid, slave_fd, 1)
-                        .expect("dup kernel pty slave onto fd 1");
-                    vm.kernel
-                        .fd_close(EXECUTION_DRIVER_NAME, kernel_pid, slave_fd)
-                        .expect("close extra kernel pty slave fd");
-                    Some(master_fd)
-                } else {
-                    None
-                };
-                (kernel_handle, master_fd)
-            };
-
-            let vm = sidecar.vms.get_mut(vm_id).expect("wasm vm");
-            let kernel_pid = kernel_handle.pid();
-            vm.active_processes.insert(
-                process_id.to_owned(),
-                ActiveProcess::new(
-                    kernel_pid,
-                    kernel_handle,
-                    GuestRuntimeKind::WebAssembly,
-                    ActiveExecution::Wasm(Box::new(execution)),
-                )
-                .with_guest_cwd(String::from("/"))
-                .with_env(env)
-                .with_host_cwd(cwd.to_path_buf()),
-            );
-
-            master_fd
-        }
-
-        fn start_fake_javascript_process(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            cwd: &Path,
-            process_id: &str,
-        ) {
-            let context =
-                sidecar
-                    .javascript_engine
-                    .create_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.to_owned(),
-                        bootstrap_module: None,
-                        compile_cache_root: None,
-                    });
-            let execution = sidecar
-                .javascript_engine
-                .start_execution(StartJavascriptExecutionRequest {
-                    limits: Default::default(),
-                    guest_runtime: Default::default(),
-                    vm_id: vm_id.to_owned(),
-                    context_id: context.context_id,
-                    argv: vec![String::from("./entry.mjs")],
-                    env: BTreeMap::new(),
-                    cwd: cwd.to_path_buf(),
-                    inline_code: None,
-                    wasm_module_bytes: None,
-                })
-                .expect("start fake javascript execution");
-
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(vm_id).expect("javascript vm");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel javascript process")
-            };
-
-            let vm = sidecar.vms.get_mut(vm_id).expect("javascript vm");
-            vm.active_processes.insert(
-                process_id.to_owned(),
-                ActiveProcess::new(
-                    kernel_handle.pid(),
-                    kernel_handle,
-                    GuestRuntimeKind::JavaScript,
-                    ActiveExecution::Javascript(execution),
-                )
-                .with_host_cwd(cwd.to_path_buf()),
-            );
-        }
-
-        fn insert_fake_javascript_parent_process(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            cwd: &Path,
-            process_id: &str,
-        ) {
-            let (kernel_handle, guest_env) = {
-                let vm = sidecar.vms.get_mut(vm_id).expect("javascript vm");
-                let handle = vm
-                    .kernel
-                    .create_virtual_process(
-                        EXECUTION_DRIVER_NAME,
-                        EXECUTION_DRIVER_NAME,
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from(JAVASCRIPT_COMMAND)],
-                        VirtualProcessOptions {
-                            env: vm.guest_env.clone(),
-                            cwd: Some(String::from("/")),
-                            ..VirtualProcessOptions::default()
-                        },
-                    )
-                    .expect("create virtual javascript parent");
-                (handle, vm.guest_env.clone())
-            };
-
-            let vm = sidecar.vms.get_mut(vm_id).expect("javascript vm");
-            vm.active_processes.insert(
-                process_id.to_owned(),
-                ActiveProcess::new(
-                    kernel_handle.pid(),
-                    kernel_handle,
-                    GuestRuntimeKind::JavaScript,
-                    ActiveExecution::Tool(ToolExecution::default()),
-                )
-                .with_env(guest_env)
-                .with_host_cwd(cwd.to_path_buf()),
-            );
-        }
-
-        fn call_javascript_sync_rpc_response(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            process_id: &str,
-            request: JavascriptSyncRpcRequest,
-        ) -> Result<JavascriptSyncRpcServiceResponse, SidecarError> {
-            let bridge = sidecar.bridge.clone();
-            let (dns, socket_paths, counts, limits, kernel_readiness) = {
-                let vm = sidecar.vms.get(vm_id).expect("javascript vm");
-                (
-                    vm.dns.clone(),
-                    build_javascript_socket_path_context(vm).expect("build socket path context"),
-                    vm.active_processes
-                        .get(process_id)
-                        .expect("javascript process")
-                        .network_resource_counts(),
-                    ResourceLimits::default(),
-                    vm.kernel_socket_readiness.clone(),
-                )
-            };
-
-            let vm = sidecar.vms.get_mut(vm_id).expect("javascript vm");
-            let process = vm
-                .active_processes
-                .get_mut(process_id)
-                .expect("javascript process");
-            service_javascript_sync_rpc(JavascriptSyncRpcServiceRequest {
-                bridge: &bridge,
-                vm_id,
-                dns: &dns,
-                socket_paths: &socket_paths,
-                kernel: &mut vm.kernel,
-                kernel_readiness,
-                process,
-                sync_request: &request,
-                resource_limits: &limits,
-                network_counts: counts,
-            })
-        }
-
-        fn call_javascript_sync_rpc(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            process_id: &str,
-            request: JavascriptSyncRpcRequest,
-        ) -> Result<Value, SidecarError> {
-            call_javascript_sync_rpc_response(sidecar, vm_id, process_id, request).and_then(
-                |response| match response {
-                    JavascriptSyncRpcServiceResponse::Json(value) => Ok(value),
-                    JavascriptSyncRpcServiceResponse::Raw(_) => Err(SidecarError::Execution(
-                        String::from("expected JSON sync RPC response"),
-                    )),
-                },
-            )
-        }
-
-        fn read_javascript_socket_chunk(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            process_id: &str,
-            socket_id: &str,
-            request_id_start: u64,
-            attempts: u64,
-            context: &str,
-        ) -> Vec<u8> {
-            for attempt in 0..attempts {
-                let response = call_javascript_sync_rpc_response(
-                    sidecar,
-                    vm_id,
-                    process_id,
-                    JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: request_id_start + attempt,
-                        method: String::from("net.socket_read"),
-                        args: vec![json!(socket_id)],
-                    },
-                )
-                .unwrap_or_else(|error| panic!("{context}: {error}"));
-                match response {
-                    JavascriptSyncRpcServiceResponse::Raw(chunk) => return chunk,
-                    JavascriptSyncRpcServiceResponse::Json(value)
-                        if value == "__secure_exec_net_timeout__" =>
-                    {
-                        thread::sleep(std::time::Duration::from_millis(10));
-                    }
-                    JavascriptSyncRpcServiceResponse::Json(value) => {
-                        panic!("{context}: expected socket data chunk, got {value}");
-                    }
-                }
-            }
-
-            panic!("{context}: timed out waiting for socket data chunk");
-        }
-
-        #[allow(clippy::too_many_arguments)]
-        fn service_javascript_net_sync_rpc<B>(
-            bridge: &SharedBridge<B>,
-            vm_id: &str,
-            dns: &VmDnsConfig,
-            socket_paths: &JavascriptSocketPathContext,
-            kernel: &mut SidecarKernel,
-            process: &mut ActiveProcess,
-            request: &JavascriptSyncRpcRequest,
-            resource_limits: &ResourceLimits,
-            network_counts: NetworkResourceCounts,
-        ) -> Result<Value, SidecarError>
-        where
-            B: NativeSidecarBridge + Send + 'static,
-            BridgeError<B>: fmt::Debug + Send + Sync + 'static,
-        {
-            service_javascript_net_sync_rpc_inner(JavascriptNetSyncRpcServiceRequest {
-                bridge,
-                vm_id,
-                dns,
-                socket_paths,
-                kernel,
-                kernel_readiness: Default::default(),
-                process,
-                sync_request: request,
-                resource_limits,
-                network_counts,
-            })
-        }
-
-        fn kernel_socket_queries_ignore_stale_sidecar_guest_addresses() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-kernel-socket-query-state");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-kernel-query");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-kernel-query",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 43111,
-                    })],
-                },
-            )
-            .expect("listen on kernel-backed tcp socket");
-            let listener_id = listen["serverId"]
-                .as_str()
-                .expect("listener id")
-                .to_string();
-
-            let udp_socket = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-kernel-query",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("dgram.createSocket"),
-                    args: vec![json!({ "type": "udp4" })],
-                },
-            )
-            .expect("create kernel-backed udp socket");
-            let udp_socket_id = udp_socket["socketId"]
-                .as_str()
-                .expect("udp socket id")
-                .to_string();
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-kernel-query",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("dgram.bind"),
-                    args: vec![
-                        json!(udp_socket_id.clone()),
-                        json!({
-                            "address": "127.0.0.1",
-                            "port": 43112,
-                        }),
-                    ],
-                },
-            )
-            .expect("bind kernel-backed udp socket");
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("vm state");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-kernel-query")
-                    .expect("javascript process");
-                let listener = process
-                    .tcp_listeners
-                    .get_mut(&listener_id)
-                    .expect("tcp listener state");
-                listener.local_addr = Some(SocketAddr::from(([127, 0, 0, 1], 49991)));
-                listener.guest_local_addr = SocketAddr::from(([127, 0, 0, 1], 49991));
-
-                let udp_socket = process
-                    .udp_sockets
-                    .get_mut(&udp_socket_id)
-                    .expect("udp socket state");
-                udp_socket.guest_local_addr = Some(SocketAddr::from(([127, 0, 0, 1], 49992)));
-            }
-
-            let listener_response = sidecar
-                .dispatch_blocking(request(
-                    10,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::FindListener(FindListenerRequest {
-                        host: Some(String::from("127.0.0.1")),
-                        port: Some(43111),
-                        path: None,
-                    }),
-                ))
-                .expect("query kernel-backed listener");
-            match listener_response.response.payload {
-                ResponsePayload::ListenerSnapshot(snapshot) => {
-                    let listener = snapshot.listener.expect("listener snapshot");
-                    assert_eq!(listener.process_id, "proc-js-kernel-query");
-                    assert_eq!(listener.host.as_deref(), Some("127.0.0.1"));
-                    assert_eq!(listener.port, Some(43111));
-                }
-                other => panic!("unexpected listener response payload: {other:?}"),
-            }
-
-            let udp_response = sidecar
-                .dispatch_blocking(request(
-                    11,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::FindBoundUdp(FindBoundUdpRequest {
-                        host: Some(String::from("127.0.0.1")),
-                        port: Some(43112),
-                    }),
-                ))
-                .expect("query kernel-backed udp socket");
-            match udp_response.response.payload {
-                ResponsePayload::BoundUdpSnapshot(snapshot) => {
-                    let socket = snapshot.socket.expect("bound udp snapshot");
-                    assert_eq!(socket.process_id, "proc-js-kernel-query");
-                    assert_eq!(socket.host.as_deref(), Some("127.0.0.1"));
-                    assert_eq!(socket.port, Some(43112));
-                }
-                other => panic!("unexpected bound udp response payload: {other:?}"),
-            }
-        }
-        fn find_listener_rejects_without_network_inspect_permission() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                inspect_permissions(false, false),
-            )
-            .expect("create vm");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    12,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::FindListener(FindListenerRequest {
-                        host: Some(String::from("127.0.0.1")),
-                        port: Some(43111),
-                        path: None,
-                    }),
-                ))
-                .expect("dispatch listener query");
-
-            match response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "execution_error");
-                    assert!(
-                        rejected
-                            .message
-                            .contains("blocked by network.inspect policy"),
-                        "unexpected rejection: {rejected:?}"
-                    );
-                }
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-        }
-        fn find_listener_returns_listener_with_network_inspect_permission() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                inspect_permissions(true, false),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-inspect-listener");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-inspect-listener");
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-inspect-listener",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 43111,
-                    })],
-                },
-            )
-            .expect("listen on kernel-backed tcp socket");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    13,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::FindListener(FindListenerRequest {
-                        host: Some(String::from("127.0.0.1")),
-                        port: Some(43111),
-                        path: None,
-                    }),
-                ))
-                .expect("query listener");
-
-            match response.response.payload {
-                ResponsePayload::ListenerSnapshot(snapshot) => {
-                    let listener = snapshot.listener.expect("listener snapshot");
-                    assert_eq!(listener.process_id, "proc-js-inspect-listener");
-                    assert_eq!(listener.host.as_deref(), Some("127.0.0.1"));
-                    assert_eq!(listener.port, Some(43111));
-                }
-                other => panic!("unexpected listener response payload: {other:?}"),
-            }
-        }
-        fn find_bound_udp_rejects_without_network_inspect_permission() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                inspect_permissions(false, false),
-            )
-            .expect("create vm");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    14,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::FindBoundUdp(FindBoundUdpRequest {
-                        host: Some(String::from("127.0.0.1")),
-                        port: Some(43112),
-                    }),
-                ))
-                .expect("dispatch udp query");
-
-            match response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "execution_error");
-                    assert!(
-                        rejected
-                            .message
-                            .contains("blocked by network.inspect policy"),
-                        "unexpected rejection: {rejected:?}"
-                    );
-                }
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-        }
-        fn find_bound_udp_returns_socket_with_network_inspect_permission() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                inspect_permissions(true, false),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-inspect-udp");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-inspect-udp");
-
-            let udp_socket = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-inspect-udp",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("dgram.createSocket"),
-                    args: vec![json!({ "type": "udp4" })],
-                },
-            )
-            .expect("create kernel-backed udp socket");
-            let udp_socket_id = udp_socket["socketId"]
-                .as_str()
-                .expect("udp socket id")
-                .to_string();
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-inspect-udp",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("dgram.bind"),
-                    args: vec![
-                        json!(udp_socket_id),
-                        json!({
-                            "address": "127.0.0.1",
-                            "port": 43112,
-                        }),
-                    ],
-                },
-            )
-            .expect("bind kernel-backed udp socket");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    15,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::FindBoundUdp(FindBoundUdpRequest {
-                        host: Some(String::from("127.0.0.1")),
-                        port: Some(43112),
-                    }),
-                ))
-                .expect("query bound udp socket");
-
-            match response.response.payload {
-                ResponsePayload::BoundUdpSnapshot(snapshot) => {
-                    let socket = snapshot.socket.expect("bound udp snapshot");
-                    assert_eq!(socket.process_id, "proc-js-inspect-udp");
-                    assert_eq!(socket.host.as_deref(), Some("127.0.0.1"));
-                    assert_eq!(socket.port, Some(43112));
-                }
-                other => panic!("unexpected bound udp response payload: {other:?}"),
-            }
-        }
-        fn get_process_snapshot_rejects_without_process_inspect_permission() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                inspect_permissions(false, false),
-            )
-            .expect("create vm");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    16,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::GetProcessSnapshot(GetProcessSnapshotRequest {}),
-                ))
-                .expect("dispatch process snapshot");
-
-            match response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "execution_error");
-                    assert!(
-                        rejected
-                            .message
-                            .contains("blocked by process.inspect policy"),
-                        "unexpected rejection: {rejected:?}"
-                    );
-                }
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-        }
-        fn get_process_snapshot_returns_processes_with_process_inspect_permission() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                inspect_permissions(false, true),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-inspect-processes");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-inspect-processes");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    17,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::GetProcessSnapshot(GetProcessSnapshotRequest {}),
-                ))
-                .expect("query process snapshot");
-
-            match response.response.payload {
-                ResponsePayload::ProcessSnapshot(snapshot) => {
-                    assert!(
-                        snapshot
-                            .processes
-                            .iter()
-                            .any(|entry| entry.process_id == "proc-js-inspect-processes"),
-                        "expected active process in snapshot: {:?}",
-                        snapshot.processes
-                    );
-                }
-                other => panic!("unexpected process snapshot response payload: {other:?}"),
-            }
-        }
-        fn get_resource_snapshot_rejects_without_process_inspect_permission() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                inspect_permissions(false, false),
-            )
-            .expect("create vm");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    18,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::GetResourceSnapshot(GetResourceSnapshotRequest {}),
-                ))
-                .expect("dispatch resource snapshot");
-
-            match response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "execution_error");
-                    assert!(
-                        rejected
-                            .message
-                            .contains("blocked by process.inspect policy"),
-                        "unexpected rejection: {rejected:?}"
-                    );
-                }
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-        }
-        fn get_resource_snapshot_returns_kernel_and_queue_counts_with_process_inspect_permission() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                inspect_permissions(false, true),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-inspect-resources");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-inspect-resources");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    19,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::GetResourceSnapshot(GetResourceSnapshotRequest {}),
-                ))
-                .expect("query resource snapshot");
-
-            match response.response.payload {
-                ResponsePayload::ResourceSnapshot(snapshot) => {
-                    assert!(
-                        snapshot.running_processes >= 1,
-                        "expected running kernel process in snapshot: {snapshot:?}"
-                    );
-                    assert!(
-                        snapshot.fd_tables >= 1,
-                        "expected fd table accounting in snapshot: {snapshot:?}"
-                    );
-                    assert!(
-                        snapshot
-                            .queue_snapshots
-                            .iter()
-                            .any(|entry| entry.name == "pending_process_events"),
-                        "expected sidecar queue gauges in snapshot: {snapshot:?}"
-                    );
-                }
-                other => panic!("unexpected resource snapshot response payload: {other:?}"),
-            }
-        }
-        fn vm_network_resource_counts_ignore_duplicate_sidecar_kernel_entries() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-kernel-network-counts");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-kernel-counts");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-kernel-counts",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 43121,
-                    })],
-                },
-            )
-            .expect("listen on kernel-backed tcp socket");
-            let listener_id = listen["serverId"]
-                .as_str()
-                .expect("listener id")
-                .to_string();
-
-            let udp_socket = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-kernel-counts",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("dgram.createSocket"),
-                    args: vec![json!({ "type": "udp4" })],
-                },
-            )
-            .expect("create kernel-backed udp socket");
-            let udp_socket_id = udp_socket["socketId"]
-                .as_str()
-                .expect("udp socket id")
-                .to_string();
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-kernel-counts",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("dgram.bind"),
-                    args: vec![
-                        json!(udp_socket_id.clone()),
-                        json!({
-                            "address": "127.0.0.1",
-                            "port": 43122,
-                        }),
-                    ],
-                },
-            )
-            .expect("bind kernel-backed udp socket");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("vm state");
-            let process = vm
-                .active_processes
-                .get_mut("proc-js-kernel-counts")
-                .expect("javascript process");
-
-            let duplicate_listener = {
-                let listener = process
-                    .tcp_listeners
-                    .get(&listener_id)
-                    .expect("tcp listener state");
-                ActiveTcpListener {
-                    listener: None,
-                    kernel_socket_id: listener.kernel_socket_id,
-                    local_addr: Some(SocketAddr::from(([127, 0, 0, 1], 49993))),
-                    guest_local_addr: SocketAddr::from(([127, 0, 0, 1], 49993)),
-                    backlog: listener.backlog,
-                    active_connection_ids: std::collections::BTreeSet::new(),
-                }
-            };
-            process
-                .tcp_listeners
-                .insert(String::from("listener-dup"), duplicate_listener);
-
-            let duplicate_udp = {
-                let socket = process
-                    .udp_sockets
-                    .get(&udp_socket_id)
-                    .expect("udp socket state");
-                ActiveUdpSocket {
-                    family: socket.family,
-                    socket: None,
-                    kernel_socket_id: socket.kernel_socket_id,
-                    guest_local_addr: Some(SocketAddr::from(([127, 0, 0, 1], 49994))),
-                    recv_buffer_size: socket.recv_buffer_size,
-                    send_buffer_size: socket.send_buffer_size,
-                }
-            };
-            process
-                .udp_sockets
-                .insert(String::from("udp-socket-dup"), duplicate_udp);
-
-            let kernel_snapshot = vm.kernel.resource_snapshot();
-            assert_eq!(kernel_snapshot.sockets, 2);
-            assert_eq!(kernel_snapshot.socket_connections, 0);
-
-            let counts = vm_network_resource_counts(vm);
-            assert_eq!(counts.sockets, 2);
-            assert_eq!(counts.connections, 0);
-        }
-
-        fn poll_http2_event(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-            process_id: &str,
-            method: &str,
-            id: u64,
-            kind: &str,
-        ) -> Value {
-            for _ in 0..200 {
-                let value = call_javascript_sync_rpc(
-                    sidecar,
-                    vm_id,
-                    process_id,
-                    JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 9_000,
-                        method: String::from(method),
-                        args: vec![json!(id), json!(25)],
-                    },
-                )
-                .expect("poll http2 event");
-                if value.is_null() {
-                    thread::sleep(Duration::from_millis(10));
-                    continue;
-                }
-                let event: Value = serde_json::from_str(value.as_str().expect("event payload"))
-                    .expect("parse http2 event");
-                if event["kind"] == Value::String(String::from(kind)) {
-                    return event;
-                }
-            }
-            panic!("timed out waiting for {method} {kind}");
-        }
-
-        fn tls_test_certificates() -> Vec<rustls::pki_types::CertificateDer<'static>> {
-            rustls_pemfile::certs(&mut BufReader::new(TLS_TEST_CERT_PEM.as_bytes()))
-                .collect::<Result<Vec<_>, _>>()
-                .expect("parse TLS test certificate")
-        }
-
-        fn tls_test_private_key() -> rustls::pki_types::PrivateKeyDer<'static> {
-            rustls_pemfile::private_key(&mut BufReader::new(TLS_TEST_KEY_PEM.as_bytes()))
-                .expect("parse TLS test private key")
-                .expect("TLS test private key")
-        }
-
-        fn tls_test_server_config(alpn: &[&str]) -> Arc<ServerConfig> {
-            let mut config =
-                ServerConfig::builder_with_provider(Arc::new(aws_lc_rs::default_provider()))
-                    .with_safe_default_protocol_versions()
-                    .expect("TLS server protocol versions")
-                    .with_no_client_auth()
-                    .with_single_cert(tls_test_certificates(), tls_test_private_key())
-                    .expect("build TLS test server config");
-            config.alpn_protocols = alpn
-                .iter()
-                .map(|protocol| protocol.as_bytes().to_vec())
-                .collect();
-            Arc::new(config)
-        }
-
-        #[derive(Debug)]
-        struct TestInsecureTlsVerifier {
-            supported_schemes: Vec<SignatureScheme>,
-        }
-
-        impl ServerCertVerifier for TestInsecureTlsVerifier {
-            fn verify_server_cert(
-                &self,
-                _end_entity: &CertificateDer<'_>,
-                _intermediates: &[CertificateDer<'_>],
-                _server_name: &ServerName<'_>,
-                _ocsp_response: &[u8],
-                _now: rustls::pki_types::UnixTime,
-            ) -> Result<ServerCertVerified, rustls::Error> {
-                Ok(ServerCertVerified::assertion())
-            }
-
-            fn verify_tls12_signature(
-                &self,
-                _message: &[u8],
-                _cert: &CertificateDer<'_>,
-                _dss: &DigitallySignedStruct,
-            ) -> Result<HandshakeSignatureValid, rustls::Error> {
-                Ok(HandshakeSignatureValid::assertion())
-            }
-
-            fn verify_tls13_signature(
-                &self,
-                _message: &[u8],
-                _cert: &CertificateDer<'_>,
-                _dss: &DigitallySignedStruct,
-            ) -> Result<HandshakeSignatureValid, rustls::Error> {
-                Ok(HandshakeSignatureValid::assertion())
-            }
-
-            fn supported_verify_schemes(&self) -> Vec<SignatureScheme> {
-                self.supported_schemes.clone()
-            }
-        }
-
-        fn tls_test_client_config(trust_test_cert: bool, alpn: &[&str]) -> Arc<ClientConfig> {
-            let provider = Arc::new(aws_lc_rs::default_provider());
-            let builder = ClientConfig::builder_with_provider(provider.clone())
-                .with_safe_default_protocol_versions()
-                .expect("TLS client protocol versions");
-            let mut config = if trust_test_cert {
-                let mut roots = RootCertStore::empty();
-                for certificate in tls_test_certificates() {
-                    roots.add(certificate).expect("add TLS test certificate");
-                }
-                builder.with_root_certificates(roots).with_no_client_auth()
-            } else {
-                let verifier = Arc::new(TestInsecureTlsVerifier {
-                    supported_schemes: provider
-                        .signature_verification_algorithms
-                        .supported_schemes(),
-                });
-                builder
-                    .dangerous()
-                    .with_custom_certificate_verifier(verifier)
-                    .with_no_client_auth()
-            };
-            config.alpn_protocols = alpn
-                .iter()
-                .map(|protocol| protocol.as_bytes().to_vec())
-                .collect();
-            Arc::new(config)
-        }
-
-        fn loopback_tls_endpoints() -> (
-            crate::state::LoopbackTlsEndpoint,
-            crate::state::LoopbackTlsEndpoint,
-        ) {
-            let pair = Arc::new(crate::state::LoopbackTlsTransportPair {
-                state: Mutex::new(crate::state::LoopbackTlsTransportPairState::default()),
-                ready: std::sync::Condvar::new(),
-            });
-            (
-                crate::state::LoopbackTlsEndpoint {
-                    pair: Arc::clone(&pair),
-                    is_lower_socket: true,
-                    poll_timeout: Duration::from_millis(100),
-                    registry_key: None,
-                },
-                crate::state::LoopbackTlsEndpoint {
-                    pair,
-                    is_lower_socket: false,
-                    poll_timeout: Duration::from_millis(100),
-                    registry_key: None,
-                },
-            )
-        }
-
-        fn with_panic_counter<T>(
-            operation: impl FnOnce(Arc<AtomicUsize>) -> T + std::panic::UnwindSafe,
-        ) -> T {
-            static PANIC_HOOK_LOCK: OnceLock<Mutex<()>> = OnceLock::new();
-
-            let _hook_guard = PANIC_HOOK_LOCK
-                .get_or_init(|| Mutex::new(()))
-                .lock()
-                .expect("panic hook lock");
-            let panic_counter = Arc::new(AtomicUsize::new(0));
-            let previous_hook = Arc::new(Mutex::new(Some(std::panic::take_hook())));
-            let hook_counter = Arc::clone(&panic_counter);
-            let hook_previous = Arc::clone(&previous_hook);
-            std::panic::set_hook(Box::new(move |info| {
-                hook_counter.fetch_add(1, Ordering::SeqCst);
-                if let Some(previous_hook) = hook_previous
-                    .lock()
-                    .expect("previous panic hook lock")
-                    .as_ref()
-                {
-                    previous_hook(info);
-                }
-            }));
-
-            let result = std::panic::catch_unwind(|| operation(Arc::clone(&panic_counter)));
-            let _ = std::panic::take_hook();
-            let previous_hook = previous_hook
-                .lock()
-                .expect("previous panic hook lock")
-                .take()
-                .expect("previous panic hook");
-            std::panic::set_hook(previous_hook);
-            match result {
-                Ok(value) => value,
-                Err(payload) => std::panic::resume_unwind(payload),
-            }
-        }
-
-        fn tls_service_test_lock() -> std::sync::MutexGuard<'static, ()> {
-            static TLS_TEST_LOCK: OnceLock<Mutex<()>> = OnceLock::new();
-            TLS_TEST_LOCK
-                .get_or_init(|| Mutex::new(()))
-                .lock()
-                .expect("TLS service test lock")
-        }
-
-        fn complete_loopback_tls_handshake(start: Arc<Barrier>) {
-            let (client_transport, server_transport) = loopback_tls_endpoints();
-            let server_start = Arc::clone(&start);
-            let server = thread::spawn(move || {
-                server_start.wait();
-                let mut stream = rustls::StreamOwned::new(
-                    ServerConnection::new(tls_test_server_config(&["h2"]))
-                        .expect("create loopback TLS server"),
-                    server_transport,
-                );
-                while stream.conn.is_handshaking() {
-                    match stream.conn.complete_io(&mut stream.sock) {
-                        Ok(_) => {}
-                        Err(error)
-                            if {
-                                let kind = error.kind();
-                                kind == std::io::ErrorKind::WouldBlock
-                                    || kind == std::io::ErrorKind::TimedOut
-                            } =>
-                        {
-                            thread::yield_now()
-                        }
-                        Err(error) => panic!("complete loopback TLS server handshake: {error}"),
-                    }
-                }
-
-                let mut payload = [0_u8; 4];
-                stream
-                    .read_exact(&mut payload)
-                    .expect("read loopback TLS client payload");
-                assert_eq!(&payload, b"ping");
-                stream
-                    .write_all(b"pong")
-                    .expect("write loopback TLS server payload");
-                stream.flush().expect("flush loopback TLS server payload");
-            });
-
-            let client = thread::spawn(move || {
-                start.wait();
-                let mut stream = rustls::StreamOwned::new(
-                    ClientConnection::new(
-                        tls_test_client_config(false, &["h2"]),
-                        ServerName::try_from("localhost").expect("loopback TLS server name"),
-                    )
-                    .expect("create loopback TLS client"),
-                    client_transport,
-                );
-                while stream.conn.is_handshaking() {
-                    match stream.conn.complete_io(&mut stream.sock) {
-                        Ok(_) => {}
-                        Err(error)
-                            if {
-                                let kind = error.kind();
-                                kind == std::io::ErrorKind::WouldBlock
-                                    || kind == std::io::ErrorKind::TimedOut
-                            } =>
-                        {
-                            thread::yield_now()
-                        }
-                        Err(error) => panic!("complete loopback TLS client handshake: {error}"),
-                    }
-                }
-
-                stream
-                    .write_all(b"ping")
-                    .expect("write loopback TLS client payload");
-                stream.flush().expect("flush loopback TLS client payload");
-                let mut payload = [0_u8; 4];
-                stream
-                    .read_exact(&mut payload)
-                    .expect("read loopback TLS server payload");
-                assert_eq!(&payload, b"pong");
-            });
-
-            client.join().expect("join loopback TLS client");
-            server.join().expect("join loopback TLS server");
-        }
-        fn loopback_tls_transport_survives_concurrent_handshakes_without_panicking() {
-            let _tls_lock = tls_service_test_lock();
-            with_panic_counter(|panic_counter| {
-                let concurrency = 4;
-                let start = Arc::new(Barrier::new(concurrency * 2));
-                let workers = (0..concurrency)
-                    .map(|_| {
-                        let start = Arc::clone(&start);
-                        thread::spawn(move || complete_loopback_tls_handshake(start))
-                    })
-                    .collect::<Vec<_>>();
-
-                for worker in workers {
-                    worker
-                        .join()
-                        .expect("join loopback TLS handshake stress worker");
-                }
-
-                assert_eq!(
-                    panic_counter.load(Ordering::SeqCst),
-                    0,
-                    "loopback TLS handshake stress triggered a panic"
-                );
-            });
-        }
-        fn loopback_tls_endpoint_read_survives_competing_drain_and_peer_drop() {
-            with_panic_counter(|panic_counter| {
-                let (reader_endpoint, peer_endpoint) = loopback_tls_endpoints();
-                {
-                    let mut state = reader_endpoint
-                        .pair
-                        .state
-                        .lock()
-                        .expect("loopback TLS state");
-                    state
-                        .higher_to_lower
-                        .extend((0..4096).map(|value| (value % 251) as u8));
-                }
-
-                let competing_reader = crate::state::LoopbackTlsEndpoint {
-                    pair: Arc::clone(&reader_endpoint.pair),
-                    is_lower_socket: reader_endpoint.is_lower_socket,
-                    poll_timeout: Duration::from_millis(100),
-                    registry_key: None,
-                };
-                let start = Arc::new(Barrier::new(3));
-
-                let primary_reader = {
-                    let start = Arc::clone(&start);
-                    thread::spawn(move || {
-                        start.wait();
-                        let mut endpoint = reader_endpoint;
-                        let mut buffer = [0_u8; 64];
-                        let mut total = 0;
-                        loop {
-                            match endpoint.read(&mut buffer) {
-                                Ok(0) => return total,
-                                Ok(read) => total += read,
-                                Err(error)
-                                    if {
-                                        let kind = error.kind();
-                                        kind == std::io::ErrorKind::WouldBlock
-                                            || kind == std::io::ErrorKind::TimedOut
-                                    } =>
-                                {
-                                    thread::yield_now()
-                                }
-                                Err(error) => panic!("primary loopback TLS read failed: {error}"),
-                            }
-                        }
-                    })
-                };
-
-                let drain_racer = {
-                    let start = Arc::clone(&start);
-                    thread::spawn(move || {
-                        start.wait();
-                        let mut endpoint = competing_reader;
-                        let mut buffer = [0_u8; 31];
-                        loop {
-                            match endpoint.read(&mut buffer) {
-                                Ok(0) => return,
-                                Ok(_) => thread::yield_now(),
-                                Err(error)
-                                    if {
-                                        let kind = error.kind();
-                                        kind == std::io::ErrorKind::WouldBlock
-                                            || kind == std::io::ErrorKind::TimedOut
-                                    } =>
-                                {
-                                    thread::yield_now()
-                                }
-                                Err(error) => {
-                                    panic!("competing loopback TLS read failed: {error}")
-                                }
-                            }
-                        }
-                    })
-                };
-
-                let closer = {
-                    let start = Arc::clone(&start);
-                    thread::spawn(move || {
-                        start.wait();
-                        thread::sleep(std::time::Duration::from_millis(5));
-                        drop(peer_endpoint);
-                    })
-                };
-
-                primary_reader.join().expect("join primary loopback reader");
-                drain_racer.join().expect("join competing loopback reader");
-                closer.join().expect("join loopback peer closer");
-
-                assert_eq!(
-                    panic_counter.load(Ordering::SeqCst),
-                    0,
-                    "loopback TLS endpoint race triggered a panic"
-                );
-            });
-        }
-
-        fn loopback_tls_pending_write_buffer_cap_is_typed_limit_error_work() {
-            let (endpoint, _peer_endpoint) = loopback_tls_endpoints();
-            let pending_write = crate::state::LoopbackTlsPendingWriteHandle::new(&endpoint);
-            let at_limit = vec![b'a'; 4 * 1024 * 1024];
-            pending_write
-                .append_write(&at_limit)
-                .expect("write exactly at pending buffer limit");
-
-            let error = pending_write
-                .append_write(b"b")
-                .expect_err("extra byte should exceed pending write buffer limit");
-            let message = error.to_string();
-            assert!(
-                message.contains("loopback TLS pending write buffer exceeded"),
-                "unexpected cap error: {message}"
-            );
-            assert!(
-                message.contains("4194305 bytes > 4194304 bytes"),
-                "unexpected cap units: {message}"
-            );
-        }
-        fn javascript_net_socket_wait_connect_reports_tcp_socket_info() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-net-wait-connect-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-net-wait-connect");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-wait-connect",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 0,
-                        "backlog": 1,
-                    })],
-                },
-            )
-            .expect("listen through sidecar net RPC");
-            let server_id = listen["serverId"].as_str().expect("server id").to_string();
-            let guest_port = listen["localPort"]
-                .as_u64()
-                .and_then(|value| u16::try_from(value).ok())
-                .expect("guest listener port");
-
-            let connect = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-wait-connect",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.connect"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": guest_port,
-                    })],
-                },
-            )
-            .expect("connect to vm-owned listener");
-            let socket_id = connect["socketId"].as_str().expect("socket id").to_string();
-
-            let info = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-wait-connect",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("net.socket_wait_connect"),
-                    args: vec![json!(socket_id.clone())],
-                },
-            )
-            .expect("wait for connect");
-            let parsed: Value = serde_json::from_str(info.as_str().expect("socket info string"))
-                .expect("parse socket info");
-            assert_eq!(parsed["remoteAddress"], Value::from("127.0.0.1"));
-            assert_eq!(parsed["remotePort"], Value::from(guest_port));
-            assert_eq!(parsed["remoteFamily"], Value::from("IPv4"));
-            assert_eq!(parsed["localFamily"], Value::from("IPv4"));
-            assert!(
-                parsed["localPort"].as_u64().is_some_and(|port| port > 0),
-                "socket info: {parsed}"
-            );
-
-            let accepted = (0..20)
-                .find_map(|attempt| {
-                    let value = call_javascript_sync_rpc(
-                        &mut sidecar,
-                        &vm_id,
-                        "proc-js-net-wait-connect",
-                        JavascriptSyncRpcRequest {
-                            raw_bytes_args: std::collections::HashMap::new(),
-                            id: 4 + attempt,
-                            method: String::from("net.server_accept"),
-                            args: vec![json!(server_id.clone())],
-                        },
-                    )
-                    .expect("accept connected client");
-                    (value != "__secure_exec_net_timeout__").then_some(value)
-                })
-                .expect("eventually accept connected client");
-            let accepted: Value =
-                serde_json::from_str(accepted.as_str().expect("accepted payload string"))
-                    .expect("parse accepted payload");
-            let accepted_socket_id = accepted["socketId"]
-                .as_str()
-                .expect("accepted socket id")
-                .to_string();
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-wait-connect",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 50,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(socket_id)],
-                },
-            )
-            .expect("destroy connected socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-wait-connect",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 51,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(accepted_socket_id)],
-                },
-            )
-            .expect("destroy accepted socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-wait-connect",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 52,
-                    method: String::from("net.server_close"),
-                    args: vec![json!(server_id)],
-                },
-            )
-            .expect("close listener");
-        }
-        fn javascript_net_socket_read_and_socket_options_work_for_tcp_sockets() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-net-read-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-net-read");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-read",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 0,
-                        "backlog": 1,
-                    })],
-                },
-            )
-            .expect("listen through sidecar net RPC");
-            let server_id = listen["serverId"].as_str().expect("server id").to_string();
-            let guest_port = listen["localPort"]
-                .as_u64()
-                .and_then(|value| u16::try_from(value).ok())
-                .expect("guest listener port");
-
-            let connect = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-read",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.connect"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": guest_port,
-                    })],
-                },
-            )
-            .expect("connect to vm-owned listener");
-            let socket_id = connect["socketId"].as_str().expect("socket id").to_string();
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-read",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("net.socket_set_no_delay"),
-                    args: vec![json!(socket_id.clone()), Value::Bool(true)],
-                },
-            )
-            .expect("enable TCP_NODELAY");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-read",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 4,
-                    method: String::from("net.socket_set_keep_alive"),
-                    args: vec![json!(socket_id.clone()), Value::Bool(true), json!(1)],
-                },
-            )
-            .expect("enable SO_KEEPALIVE");
-
-            let mut accepted = None;
-            for attempt in 0..20 {
-                let value = call_javascript_sync_rpc(
-                    &mut sidecar,
-                    &vm_id,
-                    "proc-js-net-read",
-                    JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 5 + attempt,
-                        method: String::from("net.server_accept"),
-                        args: vec![json!(server_id.clone())],
-                    },
-                )
-                .expect("accept connected client");
-                if value != "__secure_exec_net_timeout__" {
-                    accepted = Some(value);
-                    break;
-                }
-                thread::sleep(std::time::Duration::from_millis(10));
-            }
-            let accepted = accepted.expect("eventually accept connected client");
-            let accepted: Value =
-                serde_json::from_str(accepted.as_str().expect("accepted payload string"))
-                    .expect("parse accepted payload");
-            let server_socket_id = accepted["socketId"]
-                .as_str()
-                .expect("accepted socket id")
-                .to_string();
-
-            {
-                let vm = sidecar.vms.get(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get("proc-js-net-read")
-                    .expect("javascript process");
-                let socket = process.tcp_sockets.get(&socket_id).expect("tcp socket");
-                assert!(
-                    socket.kernel_socket_id.is_some(),
-                    "expected loopback net.connect to use kernel socket state"
-                );
-                assert!(socket.no_delay, "expected TCP_NODELAY flag to be tracked");
-                assert!(
-                    socket.keep_alive,
-                    "expected SO_KEEPALIVE flag to be tracked"
-                );
-                assert_eq!(socket.keep_alive_initial_delay_secs, Some(1));
-            }
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-read",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 60,
-                    method: String::from("net.write"),
-                    args: vec![
-                        json!(server_socket_id.clone()),
-                        json!({
-                            "__agentOSType": "bytes",
-                            "base64": base64::engine::general_purpose::STANDARD.encode("ping"),
-                        }),
-                    ],
-                },
-            )
-            .expect("write server payload");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-read",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 61,
-                    method: String::from("net.shutdown"),
-                    args: vec![json!(server_socket_id.clone())],
-                },
-            )
-            .expect("shutdown server write half");
-
-            let mut payload = None;
-            for attempt in 0..20 {
-                let response = call_javascript_sync_rpc_response(
-                    &mut sidecar,
-                    &vm_id,
-                    "proc-js-net-read",
-                    JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 10 + attempt,
-                        method: String::from("net.socket_read"),
-                        args: vec![json!(socket_id.clone())],
-                    },
-                )
-                .expect("read bridged socket chunk");
-                match response {
-                    JavascriptSyncRpcServiceResponse::Raw(chunk) => {
-                        payload = Some(chunk);
-                        break;
-                    }
-                    JavascriptSyncRpcServiceResponse::Json(value)
-                        if value == "__secure_exec_net_timeout__" => {}
-                    JavascriptSyncRpcServiceResponse::Json(value) => {
-                        panic!("expected bridged socket data chunk, got {value}");
-                    }
-                }
-                thread::sleep(std::time::Duration::from_millis(10));
-            }
-            let payload = payload.expect("eventually receive bridged socket data");
-            assert_eq!(payload, b"ping");
-
-            let mut end = None;
-            for attempt in 0..20 {
-                let value = call_javascript_sync_rpc(
-                    &mut sidecar,
-                    &vm_id,
-                    "proc-js-net-read",
-                    JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 40 + attempt,
-                        method: String::from("net.socket_read"),
-                        args: vec![json!(socket_id.clone())],
-                    },
-                )
-                .expect("read bridged socket end");
-                if value != "__secure_exec_net_timeout__" {
-                    end = Some(value);
-                    break;
-                }
-                thread::sleep(std::time::Duration::from_millis(10));
-            }
-            let end = end.expect("eventually receive bridged socket EOF");
-            assert_eq!(end, Value::Null);
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-read",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 99,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(socket_id)],
-                },
-            )
-            .expect("destroy connected socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-read",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 100,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(server_socket_id)],
-                },
-            )
-            .expect("destroy accepted socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-net-read",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 101,
-                    method: String::from("net.server_close"),
-                    args: vec![json!(server_id)],
-                },
-            )
-            .expect("close listener");
-        }
-        // Regression for #88: a server in one guest exec process and a client in a
-        // *different* guest exec process inside the SAME VM must talk over loopback.
-        // The fix builds the per-VM socket-path context from every concurrent exec's
-        // listeners (`build_javascript_socket_path_context` iterates all
-        // `active_processes`), so the client's `net.connect` resolves the server
-        // process's listener and routes through the shared kernel socket table.
-        fn javascript_net_cross_exec_loopback_routes_through_kernel_socket_table() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            // Two distinct guest exec processes in one VM.
-            let server_cwd = temp_dir("secure-exec-sidecar-js-cross-exec-server-cwd");
-            write_fixture(
-                &server_cwd.join("entry.mjs"),
-                "setInterval(() => {}, 1000);",
-            );
-            start_fake_javascript_process(&mut sidecar, &vm_id, &server_cwd, "proc-server");
-
-            let client_cwd = temp_dir("secure-exec-sidecar-js-cross-exec-client-cwd");
-            write_fixture(
-                &client_cwd.join("entry.mjs"),
-                "setInterval(() => {}, 1000);",
-            );
-            start_fake_javascript_process(&mut sidecar, &vm_id, &client_cwd, "proc-client");
-
-            // Process A (server) listens on loopback.
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 0,
-                        "backlog": 1,
-                    })],
-                },
-            )
-            .expect("server listen through sidecar net RPC");
-            let server_id = listen["serverId"].as_str().expect("server id").to_string();
-            let guest_port = listen["localPort"]
-                .as_u64()
-                .and_then(|value| u16::try_from(value).ok())
-                .expect("server listener guest port");
-
-            // Process B (client, a SEPARATE exec) connects to A's listener.
-            let connect = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-client",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.connect"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": guest_port,
-                    })],
-                },
-            )
-            .expect("client connect to the other exec's listener");
-            let client_socket_id = connect["socketId"]
-                .as_str()
-                .expect("client socket id")
-                .to_string();
-
-            // The client socket must be routed through the shared kernel socket
-            // table, not a host-only loopback shortcut.
-            {
-                let vm = sidecar.vms.get(&vm_id).expect("javascript vm");
-                let client = vm
-                    .active_processes
-                    .get("proc-client")
-                    .expect("client process");
-                let socket = client
-                    .tcp_sockets
-                    .get(&client_socket_id)
-                    .expect("client tcp socket");
-                assert!(
-                    socket.kernel_socket_id.is_some(),
-                    "cross-exec net.connect must route through the kernel socket table"
-                );
-            }
-
-            // Process A accepts the connection from the other exec.
-            let mut accepted = None;
-            for attempt in 0..40 {
-                let value = call_javascript_sync_rpc(
-                    &mut sidecar,
-                    &vm_id,
-                    "proc-server",
-                    JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 10 + attempt,
-                        method: String::from("net.server_accept"),
-                        args: vec![json!(server_id.clone())],
-                    },
-                )
-                .expect("server accept client from other exec");
-                if value != "__secure_exec_net_timeout__" {
-                    accepted = Some(value);
-                    break;
-                }
-                thread::sleep(std::time::Duration::from_millis(10));
-            }
-            let accepted = accepted.expect("eventually accept the cross-exec connection");
-            let accepted: Value =
-                serde_json::from_str(accepted.as_str().expect("accepted payload string"))
-                    .expect("parse accepted payload");
-            let server_socket_id = accepted["socketId"]
-                .as_str()
-                .expect("accepted socket id")
-                .to_string();
-
-            // Client (exec B) writes a byte; it must cross the exec boundary and be
-            // read by the server (exec A).
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-client",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 100,
-                    method: String::from("net.write"),
-                    args: vec![
-                        json!(client_socket_id.clone()),
-                        json!({
-                            "__agentOSType": "bytes",
-                            "base64": base64::engine::general_purpose::STANDARD.encode("ping"),
-                        }),
-                    ],
-                },
-            )
-            .expect("client write payload across exec boundary");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-client",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 101,
-                    method: String::from("net.shutdown"),
-                    args: vec![json!(client_socket_id.clone())],
-                },
-            )
-            .expect("client shutdown write half");
-
-            let payload = read_javascript_socket_chunk(
-                &mut sidecar,
-                &vm_id,
-                "proc-server",
-                &server_socket_id,
-                200,
-                40,
-                "server read bridged chunk from the other exec",
-            );
-            assert_eq!(
-                payload, b"ping",
-                "server (exec A) must read the byte sent by client (exec B)"
-            );
-
-            // Tear everything down.
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-client",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 300,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(client_socket_id)],
-                },
-            )
-            .expect("destroy client socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 301,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(server_socket_id)],
-                },
-            )
-            .expect("destroy server-accepted socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 302,
-                    method: String::from("net.server_close"),
-                    args: vec![json!(server_id)],
-                },
-            )
-            .expect("close listener");
-        }
-        fn javascript_net_upgrade_socket_aliases_use_tcp_socket_state() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-upgrade-socket-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-upgrade-socket");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-upgrade-socket",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 0,
-                        "backlog": 1,
-                    })],
-                },
-            )
-            .expect("listen through sidecar net RPC");
-            let server_id = listen["serverId"].as_str().expect("server id").to_string();
-            let guest_port = listen["localPort"]
-                .as_u64()
-                .and_then(|value| u16::try_from(value).ok())
-                .expect("guest listener port");
-
-            let connect = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-upgrade-socket",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.connect"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": guest_port,
-                    })],
-                },
-            )
-            .expect("connect to vm-owned listener");
-            let client_socket_id = connect["socketId"].as_str().expect("socket id").to_string();
-
-            let accepted = (0..20)
-                .find_map(|attempt| {
-                    let value = call_javascript_sync_rpc(
-                        &mut sidecar,
-                        &vm_id,
-                        "proc-js-upgrade-socket",
-                        JavascriptSyncRpcRequest {
-                            raw_bytes_args: std::collections::HashMap::new(),
-                            id: 10 + attempt,
-                            method: String::from("net.server_accept"),
-                            args: vec![json!(server_id.clone())],
-                        },
-                    )
-                    .expect("accept connected client");
-                    (value != "__secure_exec_net_timeout__").then_some(value)
-                })
-                .expect("eventually accept connected client");
-            let accepted: Value =
-                serde_json::from_str(accepted.as_str().expect("accepted payload string"))
-                    .expect("parse accepted payload");
-            let server_socket_id = accepted["socketId"]
-                .as_str()
-                .expect("accepted socket id")
-                .to_string();
-
-            let written = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-upgrade-socket",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 50,
-                    method: String::from("net.upgrade_socket_write"),
-                    args: vec![
-                        json!(server_socket_id.clone()),
-                        json!(base64::engine::general_purpose::STANDARD.encode("ping")),
-                    ],
-                },
-            )
-            .expect("write upgrade socket payload");
-            assert_eq!(written, Value::from(4));
-
-            let payload = read_javascript_socket_chunk(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-upgrade-socket",
-                &client_socket_id,
-                60,
-                20,
-                "read upgrade socket payload",
-            );
-            assert_eq!(payload, b"ping");
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-upgrade-socket",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 80,
-                    method: String::from("net.upgrade_socket_end"),
-                    args: vec![json!(server_socket_id.clone())],
-                },
-            )
-            .expect("end upgrade socket");
-
-            let mut end = None;
-            for attempt in 0..20 {
-                let value = call_javascript_sync_rpc(
-                    &mut sidecar,
-                    &vm_id,
-                    "proc-js-upgrade-socket",
-                    JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 90 + attempt,
-                        method: String::from("net.socket_read"),
-                        args: vec![json!(client_socket_id.clone())],
-                    },
-                )
-                .expect("read upgrade socket EOF");
-                if value != "__secure_exec_net_timeout__" {
-                    end = Some(value);
-                    break;
-                }
-                thread::sleep(std::time::Duration::from_millis(10));
-            }
-            let end = end.expect("eventually receive upgrade socket EOF");
-            assert_eq!(end, Value::Null);
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-upgrade-socket",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 120,
-                    method: String::from("net.upgrade_socket_destroy"),
-                    args: vec![json!(client_socket_id)],
-                },
-            )
-            .expect("destroy client upgrade socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-upgrade-socket",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 121,
-                    method: String::from("net.upgrade_socket_destroy"),
-                    args: vec![json!(server_socket_id)],
-                },
-            )
-            .expect("destroy accepted upgrade socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-upgrade-socket",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 122,
-                    method: String::from("net.server_close"),
-                    args: vec![json!(server_id)],
-                },
-            )
-            .expect("close listener");
-        }
-        fn javascript_dgram_address_and_buffer_size_sync_rpcs_work() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-dgram-options-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-dgram-options");
-
-            let socket = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-dgram-options",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("dgram.createSocket"),
-                    args: vec![json!({ "type": "udp4" })],
-                },
-            )
-            .expect("create udp socket");
-            let socket_id = socket["socketId"]
-                .as_str()
-                .expect("udp socket id")
-                .to_string();
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-dgram-options",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("dgram.bind"),
-                    args: vec![
-                        json!(socket_id.clone()),
-                        json!({
-                            "address": "127.0.0.1",
-                            "port": 0,
-                        }),
-                    ],
-                },
-            )
-            .expect("bind udp socket");
-
-            let address = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-dgram-options",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("dgram.address"),
-                    args: vec![json!(socket_id.clone())],
-                },
-            )
-            .expect("get udp socket address");
-            let address: Value =
-                serde_json::from_str(address.as_str().expect("address payload string"))
-                    .expect("parse address payload");
-            assert_eq!(address["address"], Value::from("127.0.0.1"));
-            assert_eq!(address["family"], Value::from("IPv4"));
-            assert!(
-                address["port"].as_u64().is_some_and(|port| port > 0),
-                "socket address: {address}"
-            );
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-dgram-options",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 4,
-                    method: String::from("dgram.setBufferSize"),
-                    args: vec![json!(socket_id.clone()), json!("recv"), json!(4096)],
-                },
-            )
-            .expect("set recv buffer size");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-dgram-options",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 5,
-                    method: String::from("dgram.setBufferSize"),
-                    args: vec![json!(socket_id.clone()), json!("send"), json!(2048)],
-                },
-            )
-            .expect("set send buffer size");
-
-            let recv_size = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-dgram-options",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 6,
-                    method: String::from("dgram.getBufferSize"),
-                    args: vec![json!(socket_id.clone()), json!("recv")],
-                },
-            )
-            .expect("get recv buffer size");
-            assert!(
-                recv_size.as_u64().is_some_and(|size| size >= 4096),
-                "recv buffer size: {recv_size}"
-            );
-
-            let send_size = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-dgram-options",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 7,
-                    method: String::from("dgram.getBufferSize"),
-                    args: vec![json!(socket_id.clone()), json!("send")],
-                },
-            )
-            .expect("get send buffer size");
-            assert!(
-                send_size.as_u64().is_some_and(|size| size >= 2048),
-                "send buffer size: {send_size}"
-            );
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-dgram-options",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 8,
-                    method: String::from("dgram.close"),
-                    args: vec![json!(socket_id)],
-                },
-            )
-            .expect("close udp socket");
-        }
-        fn javascript_tls_client_upgrade_query_and_cipher_list_work() {
-            let _tls_lock = tls_service_test_lock();
-            assert_node_available();
-
-            let listener = TcpListener::bind("127.0.0.1:0").expect("bind TLS listener");
-            let port = listener.local_addr().expect("listener address").port();
-            let server = thread::spawn(move || {
-                let config = tls_test_server_config(&["http/1.1"]);
-                let (stream, _) = listener.accept().expect("accept TLS client");
-                let mut stream = rustls::StreamOwned::new(
-                    ServerConnection::new(config).expect("create TLS server connection"),
-                    stream,
-                );
-                while stream.conn.is_handshaking() {
-                    stream
-                        .conn
-                        .complete_io(&mut stream.sock)
-                        .expect("complete TLS server handshake");
-                }
-                assert_eq!(stream.conn.alpn_protocol(), Some(b"http/1.1".as_slice()));
-
-                let mut payload = [0_u8; 4];
-                stream
-                    .read_exact(&mut payload)
-                    .expect("read client payload");
-                assert_eq!(&payload, b"ping");
-                stream
-                    .write_all(b"pong")
-                    .expect("write TLS server response");
-                stream.flush().expect("flush TLS server response");
-            });
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([(
-                    format!("env.{LOOPBACK_EXEMPT_PORTS_ENV}"),
-                    serde_json::to_string(&vec![port.to_string()]).expect("serialize exempt ports"),
-                )]),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-tls-client-rpc-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-tls-client");
-
-            let ciphers = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-client",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("tls.get_ciphers"),
-                    args: Vec::new(),
-                },
-            )
-            .expect("list TLS ciphers");
-            let ciphers: Value = serde_json::from_str(ciphers.as_str().expect("cipher JSON"))
-                .expect("parse ciphers");
-            assert!(
-                ciphers
-                    .as_array()
-                    .is_some_and(|entries| !entries.is_empty()),
-                "ciphers: {ciphers}"
-            );
-
-            let connect = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-client",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.connect"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": port,
-                    })],
-                },
-            )
-            .expect("connect to host TLS server");
-            let socket_id = connect["socketId"].as_str().expect("socket id").to_string();
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-client",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("net.socket_upgrade_tls"),
-                    args: vec![
-                        json!(socket_id.clone()),
-                        json!(serde_json::to_string(&json!({
-                            "isServer": false,
-                            "servername": "localhost",
-                            "rejectUnauthorized": false,
-                            "ALPNProtocols": ["http/1.1"],
-                        }))
-                        .expect("serialize client TLS options")),
-                    ],
-                },
-            )
-            .expect("upgrade client socket to TLS");
-
-            let protocol = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-client",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 4,
-                    method: String::from("net.socket_tls_query"),
-                    args: vec![json!(socket_id.clone()), json!("getProtocol")],
-                },
-            )
-            .expect("query TLS protocol");
-            let protocol: Value =
-                serde_json::from_str(protocol.as_str().expect("TLS protocol query JSON"))
-                    .expect("parse TLS protocol");
-            assert!(
-                protocol == Value::String(String::from("TLSv1.3"))
-                    || protocol == Value::String(String::from("TLSv1.2")),
-                "protocol: {protocol}"
-            );
-
-            let cipher = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-client",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 5,
-                    method: String::from("net.socket_tls_query"),
-                    args: vec![json!(socket_id.clone()), json!("getCipher")],
-                },
-            )
-            .expect("query TLS cipher");
-            let cipher: Value =
-                serde_json::from_str(cipher.as_str().expect("TLS cipher query JSON"))
-                    .expect("parse TLS cipher");
-            assert_eq!(cipher["type"], Value::from("object"));
-
-            let peer_certificate = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-client",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 6,
-                    method: String::from("net.socket_tls_query"),
-                    args: vec![
-                        json!(socket_id.clone()),
-                        json!("getPeerCertificate"),
-                        Value::Bool(true),
-                    ],
-                },
-            )
-            .expect("query TLS peer certificate");
-            let peer_certificate: Value = serde_json::from_str(
-                peer_certificate
-                    .as_str()
-                    .expect("TLS peer certificate query JSON"),
-            )
-            .expect("parse TLS peer certificate");
-            assert_eq!(peer_certificate["type"], Value::from("object"));
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-client",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 7,
-                    method: String::from("net.write"),
-                    args: vec![
-                        json!(socket_id.clone()),
-                        json!({
-                            "__agentOSType": "bytes",
-                            "base64": base64::engine::general_purpose::STANDARD.encode("ping"),
-                        }),
-                    ],
-                },
-            )
-            .expect("write TLS client payload");
-
-            let payload = read_javascript_socket_chunk(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-client",
-                &socket_id,
-                20,
-                30,
-                "read TLS client payload",
-            );
-            assert_eq!(payload, b"pong");
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-client",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 99,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(socket_id)],
-                },
-            )
-            .expect("destroy TLS client socket");
-
-            server.join().expect("join TLS server");
-        }
-        fn javascript_tls_server_client_hello_and_server_upgrade_work() {
-            let _tls_lock = tls_service_test_lock();
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-tls-server-rpc-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-tls-server");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 0,
-                        "backlog": 1,
-                    })],
-                },
-            )
-            .expect("listen through sidecar net RPC");
-            let server_id = listen["serverId"].as_str().expect("server id").to_string();
-            let guest_port = listen["localPort"]
-                .as_u64()
-                .and_then(|value| u16::try_from(value).ok())
-                .expect("guest listener port");
-            let client_connect = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.connect"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": guest_port,
-                    })],
-                },
-            )
-            .expect("connect guest TLS client");
-            let client_socket_id = client_connect["socketId"]
-                .as_str()
-                .expect("client socket id")
-                .to_string();
-
-            let accepted = (0..30)
-                .find_map(|attempt| {
-                    let value = call_javascript_sync_rpc(
-                        &mut sidecar,
-                        &vm_id,
-                        "proc-js-tls-server",
-                        JavascriptSyncRpcRequest {
-                            raw_bytes_args: std::collections::HashMap::new(),
-                            id: 10 + attempt,
-                            method: String::from("net.server_accept"),
-                            args: vec![json!(server_id.clone())],
-                        },
-                    )
-                    .expect("accept TLS client");
-                    if value == "__secure_exec_net_timeout__" {
-                        thread::sleep(Duration::from_millis(10));
-                        None
-                    } else {
-                        Some(value)
-                    }
-                })
-                .expect("eventually accept TLS client");
-            let accepted: Value =
-                serde_json::from_str(accepted.as_str().expect("accepted payload string"))
-                    .expect("parse accepted payload");
-            let socket_id = accepted["socketId"]
-                .as_str()
-                .expect("accepted socket id")
-                .to_string();
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 40,
-                    method: String::from("net.socket_upgrade_tls"),
-                    args: vec![
-                        json!(client_socket_id.clone()),
-                        json!(serde_json::to_string(&json!({
-                            "isServer": false,
-                            "servername": "localhost",
-                            "rejectUnauthorized": false,
-                            "ALPNProtocols": ["h2", "http/1.1"],
-                        }))
-                        .expect("serialize client TLS options")),
-                    ],
-                },
-            )
-            .expect("upgrade guest TLS client socket");
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 45,
-                    method: String::from("net.write"),
-                    args: vec![
-                        json!(client_socket_id.clone()),
-                        json!({
-                            "__agentOSType": "bytes",
-                            "base64": base64::engine::general_purpose::STANDARD.encode("ping"),
-                        }),
-                    ],
-                },
-            )
-            .expect("buffer guest TLS client payload while handshake is pending");
-
-            let client_hello = (0..30)
-                .find_map(|attempt| {
-                    let value = call_javascript_sync_rpc(
-                        &mut sidecar,
-                        &vm_id,
-                        "proc-js-tls-server",
-                        JavascriptSyncRpcRequest {
-                            raw_bytes_args: std::collections::HashMap::new(),
-                            id: 50 + attempt,
-                            method: String::from("net.socket_get_tls_client_hello"),
-                            args: vec![json!(socket_id.clone())],
-                        },
-                    )
-                    .expect("get TLS client hello");
-                    let parsed: Value =
-                        serde_json::from_str(value.as_str().expect("TLS client hello JSON"))
-                            .expect("parse TLS client hello");
-                    if parsed["servername"] == "localhost" {
-                        Some(parsed)
-                    } else {
-                        thread::sleep(Duration::from_millis(10));
-                        None
-                    }
-                })
-                .expect("eventually parse TLS client hello");
-            assert_eq!(client_hello["servername"], Value::from("localhost"));
-            assert!(
-                client_hello["ALPNProtocols"]
-                    .as_array()
-                    .is_some_and(|protocols| protocols.contains(&Value::from("h2"))),
-                "client hello: {client_hello}"
-            );
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 80,
-                    method: String::from("net.socket_upgrade_tls"),
-                    args: vec![
-                        json!(socket_id.clone()),
-                        json!(serde_json::to_string(&json!({
-                            "isServer": true,
-                            "key": { "kind": "string", "data": TLS_TEST_KEY_PEM },
-                            "cert": { "kind": "string", "data": TLS_TEST_CERT_PEM },
-                            "ALPNProtocols": ["h2"],
-                        }))
-                        .expect("serialize server TLS options")),
-                    ],
-                },
-            )
-            .expect("upgrade accepted socket to TLS");
-
-            let certificate = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 81,
-                    method: String::from("net.socket_tls_query"),
-                    args: vec![json!(socket_id.clone()), json!("getCertificate")],
-                },
-            )
-            .expect("query local TLS certificate");
-            let certificate: Value =
-                serde_json::from_str(certificate.as_str().expect("TLS certificate JSON"))
-                    .expect("parse TLS certificate");
-            assert_eq!(certificate["type"], Value::from("object"));
-
-            (0..30)
-                .find_map(|attempt| {
-                    let server_protocol = call_javascript_sync_rpc(
-                        &mut sidecar,
-                        &vm_id,
-                        "proc-js-tls-server",
-                        JavascriptSyncRpcRequest {
-                            raw_bytes_args: std::collections::HashMap::new(),
-                            id: 82 + attempt * 2,
-                            method: String::from("net.socket_tls_query"),
-                            args: vec![json!(socket_id.clone()), json!("getProtocol")],
-                        },
-                    )
-                    .expect("query server TLS protocol");
-                    let server_protocol: Value = serde_json::from_str(
-                        server_protocol.as_str().expect("server protocol JSON"),
-                    )
-                    .expect("parse server protocol");
-
-                    let client_protocol = call_javascript_sync_rpc(
-                        &mut sidecar,
-                        &vm_id,
-                        "proc-js-tls-server",
-                        JavascriptSyncRpcRequest {
-                            raw_bytes_args: std::collections::HashMap::new(),
-                            id: 83 + attempt * 2,
-                            method: String::from("net.socket_tls_query"),
-                            args: vec![json!(client_socket_id.clone()), json!("getProtocol")],
-                        },
-                    )
-                    .expect("query client TLS protocol");
-                    let client_protocol: Value = serde_json::from_str(
-                        client_protocol.as_str().expect("client protocol JSON"),
-                    )
-                    .expect("parse client protocol");
-
-                    if server_protocol.is_null() || client_protocol.is_null() {
-                        thread::sleep(Duration::from_millis(10));
-                        None
-                    } else {
-                        Some(())
-                    }
-                })
-                .expect("eventually complete guest TLS handshake");
-
-            let payload = read_javascript_socket_chunk(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-server",
-                &socket_id,
-                150,
-                30,
-                "read TLS server payload",
-            );
-            assert_eq!(payload, b"ping");
-
-            let protocol = (0..30)
-                .find_map(|attempt| {
-                    let value = call_javascript_sync_rpc(
-                        &mut sidecar,
-                        &vm_id,
-                        "proc-js-tls-server",
-                        JavascriptSyncRpcRequest {
-                            raw_bytes_args: std::collections::HashMap::new(),
-                            id: 190 + attempt,
-                            method: String::from("net.socket_tls_query"),
-                            args: vec![json!(socket_id.clone()), json!("getProtocol")],
-                        },
-                    )
-                    .expect("query TLS protocol");
-                    let parsed: Value =
-                        serde_json::from_str(value.as_str().expect("TLS protocol JSON"))
-                            .expect("parse TLS protocol");
-                    if parsed.is_null() {
-                        thread::sleep(Duration::from_millis(10));
-                        None
-                    } else {
-                        Some(parsed)
-                    }
-                })
-                .expect("eventually negotiate TLS protocol");
-            assert!(
-                protocol == Value::String(String::from("TLSv1.3"))
-                    || protocol == Value::String(String::from("TLSv1.2")),
-                "protocol: {protocol}"
-            );
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 120,
-                    method: String::from("net.write"),
-                    args: vec![
-                        json!(socket_id.clone()),
-                        json!({
-                            "__agentOSType": "bytes",
-                            "base64": base64::engine::general_purpose::STANDARD.encode("pong"),
-                        }),
-                    ],
-                },
-            )
-            .expect("write TLS server payload");
-
-            let client_payload = read_javascript_socket_chunk(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-server",
-                &client_socket_id,
-                220,
-                30,
-                "read guest TLS client payload",
-            );
-            assert_eq!(client_payload, b"pong");
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 121,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(socket_id)],
-                },
-            )
-            .expect("destroy accepted TLS socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 122,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(client_socket_id)],
-                },
-            )
-            .expect("destroy guest TLS client socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-tls-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 123,
-                    method: String::from("net.server_close"),
-                    args: vec![json!(server_id)],
-                },
-            )
-            .expect("close TLS listener");
-        }
-        fn javascript_net_server_accept_returns_timeout_then_pending_connection() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-server-accept-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-server-accept");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server-accept",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 0,
-                        "backlog": 1,
-                    })],
-                },
-            )
-            .expect("listen through sidecar net RPC");
-            let server_id = listen["serverId"].as_str().expect("server id").to_string();
-            let guest_port = listen["localPort"]
-                .as_u64()
-                .and_then(|value| u16::try_from(value).ok())
-                .expect("guest listener port");
-            let timeout = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server-accept",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.server_accept"),
-                    args: vec![json!(server_id.clone())],
-                },
-            )
-            .expect("accept timeout sentinel");
-            assert_eq!(timeout, Value::from("__secure_exec_net_timeout__"));
-
-            let connect = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server-accept",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("net.connect"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": guest_port,
-                    })],
-                },
-            )
-            .expect("connect to vm-owned listener");
-            let client_socket_id = connect["socketId"]
-                .as_str()
-                .expect("client socket id")
-                .to_string();
-
-            let mut accepted = None;
-            for attempt in 0..20 {
-                let value = call_javascript_sync_rpc(
-                    &mut sidecar,
-                    &vm_id,
-                    "proc-js-server-accept",
-                    JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 10 + attempt,
-                        method: String::from("net.server_accept"),
-                        args: vec![json!(server_id.clone())],
-                    },
-                )
-                .expect("accept pending connection");
-                if value != "__secure_exec_net_timeout__" {
-                    accepted = Some(value);
-                    break;
-                }
-                thread::sleep(std::time::Duration::from_millis(10));
-            }
-            let accepted = accepted.expect("eventually accept pending TCP connection");
-            let parsed: Value =
-                serde_json::from_str(accepted.as_str().expect("accepted payload string"))
-                    .expect("parse accepted payload");
-            assert!(
-                parsed["socketId"].as_str().is_some(),
-                "accepted payload: {parsed}"
-            );
-            assert_eq!(parsed["info"]["localAddress"], Value::from("127.0.0.1"));
-            assert_eq!(parsed["info"]["localPort"], Value::from(guest_port));
-            assert_eq!(parsed["info"]["localFamily"], Value::from("IPv4"));
-            assert_eq!(parsed["info"]["remoteFamily"], Value::from("IPv4"));
-            assert!(
-                parsed["info"]["remotePort"]
-                    .as_u64()
-                    .is_some_and(|port| port > 0),
-                "accepted payload: {parsed}"
-            );
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server-accept",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 40,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(client_socket_id)],
-                },
-            )
-            .expect("destroy client socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server-accept",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 41,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(parsed["socketId"]
-                        .as_str()
-                        .expect("accepted socket id"))],
-                },
-            )
-            .expect("destroy accepted socket");
-        }
-        fn javascript_kernel_stdin_reads_buffered_input_and_reports_timeout_and_eof() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-kernel-stdin-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            let context =
-                sidecar
-                    .javascript_engine
-                    .create_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.clone(),
-                        bootstrap_module: None,
-                        compile_cache_root: None,
-                    });
-            let execution = sidecar
-                .javascript_engine
-                .start_execution(StartJavascriptExecutionRequest {
-                    limits: Default::default(),
-                    guest_runtime: Default::default(),
-                    vm_id: vm_id.clone(),
-                    context_id: context.context_id,
-                    argv: vec![String::from("./entry.mjs")],
-                    env: BTreeMap::from([(
-                        String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                        String::from(
-                            "[\"assert\",\"buffer\",\"console\",\"events\",\"fs\",\"path\",\"readline\",\"stream\",\"string_decoder\",\"timers\",\"util\"]",
-                        ),
-                    )]),
-                    cwd: cwd.clone(),
-                    inline_code: None,
-                    wasm_module_bytes: None,
-                })
-                .expect("start fake javascript execution");
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel javascript process")
-            };
-            let kernel_stdin_writer_fd = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let (read_fd, write_fd) = vm
-                    .kernel
-                    .open_pipe(EXECUTION_DRIVER_NAME, kernel_handle.pid())
-                    .expect("open kernel stdin pipe");
-                vm.kernel
-                    .fd_dup2(EXECUTION_DRIVER_NAME, kernel_handle.pid(), read_fd, 0)
-                    .expect("dup kernel stdin pipe onto fd 0");
-                vm.kernel
-                    .fd_close(EXECUTION_DRIVER_NAME, kernel_handle.pid(), read_fd)
-                    .expect("close extra kernel stdin read fd");
-                write_fd
-            };
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.active_processes.insert(
-                    String::from("proc-js-stdin"),
-                    ActiveProcess::new(
-                        kernel_handle.pid(),
-                        kernel_handle,
-                        GuestRuntimeKind::JavaScript,
-                        ActiveExecution::Javascript(execution),
-                    )
-                    .with_kernel_stdin_writer_fd(kernel_stdin_writer_fd)
-                    .with_host_cwd(cwd.clone()),
-                );
-            }
-
-            let initial = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-stdin",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("__kernel_stdin_read"),
-                    args: vec![json!(1024), json!(10)],
-                },
-            )
-            .expect("poll empty kernel stdin");
-            assert_eq!(initial, Value::Null);
-
-            let write = sidecar
-                .dispatch_blocking(request(
-                    11,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::WriteStdin(WriteStdinRequest {
-                        process_id: String::from("proc-js-stdin"),
-                        chunk: b"hello from stdin".to_vec(),
-                    }),
-                ))
-                .expect("write stdin");
-            match write.response.payload {
-                ResponsePayload::StdinWritten(response) => {
-                    assert_eq!(response.process_id, "proc-js-stdin");
-                    assert_eq!(response.accepted_bytes, "hello from stdin".len() as u64);
-                }
-                other => panic!("unexpected stdin_written response: {other:?}"),
-            }
-
-            let next = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-stdin",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("__kernel_stdin_read"),
-                    args: vec![json!(1024), json!(10)],
-                },
-            )
-            .expect("read kernel stdin payload");
-            assert_eq!(
-                next,
-                json!({
-                    "dataBase64": base64::engine::general_purpose::STANDARD
-                        .encode("hello from stdin"),
-                })
-            );
-
-            let close = sidecar
-                .dispatch_blocking(request(
-                    12,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::CloseStdin(CloseStdinRequest {
-                        process_id: String::from("proc-js-stdin"),
-                    }),
-                ))
-                .expect("close stdin");
-            match close.response.payload {
-                ResponsePayload::StdinClosed(response) => {
-                    assert_eq!(response.process_id, "proc-js-stdin");
-                }
-                other => panic!("unexpected stdin_closed response: {other:?}"),
-            }
-
-            let eof = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-stdin",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("__kernel_stdin_read"),
-                    args: vec![json!(1024), json!(10)],
-                },
-            )
-            .expect("read kernel stdin eof");
-            assert_eq!(eof, json!({ "done": true }));
-
-            sidecar
-                .kill_process_internal(&vm_id, "proc-js-stdin", "SIGKILL")
-                .expect("kill javascript stdin process");
-        }
-        fn javascript_sync_rpc_pty_set_raw_mode_toggles_kernel_tty_discipline() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-pty-raw-mode");
-            write_fixture(&cwd.join("entry.mjs"), "export {};\n");
-
-            let context =
-                sidecar
-                    .javascript_engine
-                    .create_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.clone(),
-                        bootstrap_module: None,
-                        compile_cache_root: None,
-                    });
-            let execution = sidecar
-                .javascript_engine
-                .start_execution(StartJavascriptExecutionRequest {
-                    limits: Default::default(),
-                    guest_runtime: Default::default(),
-                    vm_id: vm_id.clone(),
-                    context_id: context.context_id,
-                    argv: vec![String::from("./entry.mjs")],
-                    env: BTreeMap::new(),
-                    cwd: cwd.clone(),
-                    inline_code: None,
-                    wasm_module_bytes: None,
-                })
-                .expect("start fake javascript execution");
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel javascript process")
-            };
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let (_master_fd, slave_fd, _pty_path) = vm
-                    .kernel
-                    .open_pty(EXECUTION_DRIVER_NAME, kernel_handle.pid())
-                    .expect("open kernel pty");
-                vm.kernel
-                    .fd_dup2(EXECUTION_DRIVER_NAME, kernel_handle.pid(), slave_fd, 0)
-                    .expect("dup kernel pty slave onto fd 0");
-                vm.kernel
-                    .fd_close(EXECUTION_DRIVER_NAME, kernel_handle.pid(), slave_fd)
-                    .expect("close extra kernel pty slave fd");
-                vm.active_processes.insert(
-                    String::from("proc-js-pty"),
-                    ActiveProcess::new(
-                        kernel_handle.pid(),
-                        kernel_handle,
-                        GuestRuntimeKind::JavaScript,
-                        ActiveExecution::Javascript(execution),
-                    )
-                    .with_host_cwd(cwd.clone()),
-                );
-            }
-
-            {
-                let vm = sidecar.vms.get(&vm_id).expect("javascript vm");
-                let kernel_pid = vm.active_processes["proc-js-pty"].kernel_pid;
-                let termios = vm
-                    .kernel
-                    .tcgetattr(EXECUTION_DRIVER_NAME, kernel_pid, 0)
-                    .expect("read cooked termios");
-                assert!(termios.icanon);
-                assert!(termios.echo);
-                assert!(termios.isig);
-            }
-
-            let raw = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-pty",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("__pty_set_raw_mode"),
-                    args: vec![json!(true)],
-                },
-            )
-            .expect("enable raw mode");
-            assert_eq!(raw, Value::Null);
-
-            {
-                let vm = sidecar.vms.get(&vm_id).expect("javascript vm");
-                let kernel_pid = vm.active_processes["proc-js-pty"].kernel_pid;
-                let termios = vm
-                    .kernel
-                    .tcgetattr(EXECUTION_DRIVER_NAME, kernel_pid, 0)
-                    .expect("read raw termios");
-                assert!(!termios.icanon);
-                assert!(!termios.echo);
-                assert!(!termios.isig);
-            }
-
-            let cooked = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-pty",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("__pty_set_raw_mode"),
-                    args: vec![json!(false)],
-                },
-            )
-            .expect("disable raw mode");
-            assert_eq!(cooked, Value::Null);
-
-            {
-                let vm = sidecar.vms.get(&vm_id).expect("javascript vm");
-                let kernel_pid = vm.active_processes["proc-js-pty"].kernel_pid;
-                let termios = vm
-                    .kernel
-                    .tcgetattr(EXECUTION_DRIVER_NAME, kernel_pid, 0)
-                    .expect("read restored cooked termios");
-                assert!(termios.icanon);
-                assert!(termios.echo);
-                assert!(termios.isig);
-            }
-
-            sidecar
-                .kill_process_internal(&vm_id, "proc-js-pty", "SIGKILL")
-                .expect("kill javascript pty process");
-        }
-        fn dispose_vm_removes_per_vm_javascript_import_cache_directory() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_a = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm a");
-            let vm_b = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm b");
-
-            let cache_path_a = sidecar
-                .javascript_engine
-                .materialize_import_cache_for_vm(&vm_a)
-                .expect("materialize vm a import cache")
-                .to_path_buf();
-            let cache_path_b = sidecar
-                .javascript_engine
-                .materialize_import_cache_for_vm(&vm_b)
-                .expect("materialize vm b import cache")
-                .to_path_buf();
-            let cache_root_a = cache_path_a
-                .parent()
-                .expect("vm a cache parent")
-                .to_path_buf();
-            let cache_root_b = cache_path_b
-                .parent()
-                .expect("vm b cache parent")
-                .to_path_buf();
-
-            assert_ne!(cache_root_a, cache_root_b);
-            assert!(cache_root_a.exists(), "vm a cache root should exist");
-            assert!(cache_root_b.exists(), "vm b cache root should exist");
-
-            sidecar
-                .dispose_vm_internal_blocking(
-                    &connection_id,
-                    &session_id,
-                    &vm_a,
-                    DisposeReason::Requested,
-                )
-                .expect("dispose vm a");
-
-            assert!(
-                !cache_root_a.exists(),
-                "vm a cache root should be removed on dispose"
-            );
-            assert!(
-                cache_root_b.exists(),
-                "vm b cache root should remain until that VM is disposed"
-            );
-            assert!(
-                sidecar
-                    .javascript_engine
-                    .import_cache_path_for_vm(&vm_a)
-                    .is_none(),
-                "vm a cache entry should be removed from the engine"
-            );
-            assert_eq!(
-                sidecar.javascript_engine.import_cache_path_for_vm(&vm_b),
-                Some(cache_path_b.as_path())
-            );
-
-            sidecar
-                .dispose_vm_internal_blocking(
-                    &connection_id,
-                    &session_id,
-                    &vm_b,
-                    DisposeReason::Requested,
-                )
-                .expect("dispose vm b");
-            assert!(
-                !cache_root_b.exists(),
-                "vm b cache root should be removed on dispose"
-            );
-        }
-        fn execution_dispose_vm_race_skips_stale_process_events_without_panicking() {
-            with_panic_counter(|panic_counter| {
-                let mut sidecar = create_test_sidecar();
-                let (connection_id, session_id) = authenticate_and_open_session(&mut sidecar)
-                    .expect("authenticate and open session");
-
-                for _iteration in 0..16 {
-                    let vm_id = create_vm(
-                        &mut sidecar,
-                        &connection_id,
-                        &session_id,
-                        PermissionsPolicy::allow_all(),
-                    )
-                    .expect("create vm");
-
-                    sidecar
-                        .dispose_vm_internal_blocking(
-                            &connection_id,
-                            &session_id,
-                            &vm_id,
-                            DisposeReason::Requested,
-                        )
-                        .expect("dispose vm");
-
-                    assert!(sidecar
-                        .handle_execution_event(
-                            &vm_id,
-                            "proc-js-race",
-                            crate::state::ActiveExecutionEvent::Exited(0),
-                        )
-                        .expect("handle stale exited event")
-                        .is_none());
-                    assert!(sidecar
-                        .handle_execution_event(
-                            &vm_id,
-                            "proc-js-race",
-                            crate::state::ActiveExecutionEvent::Stdout(b"stale stdout".to_vec(),),
-                        )
-                        .expect("handle stale stdout event")
-                        .is_none());
-                    assert_eq!(
-                        panic_counter.load(Ordering::SeqCst),
-                        0,
-                        "stale VM/process events should not panic after dispose"
-                    );
-
-                    let live_vm_id = create_vm(
-                        &mut sidecar,
-                        &connection_id,
-                        &session_id,
-                        PermissionsPolicy::allow_all(),
-                    )
-                    .expect("create live vm");
-                    let vm = sidecar.vms.get_mut(&live_vm_id).expect("live vm");
-                    vm.active_processes.remove("proc-js-race");
-                    assert!(sidecar
-                        .handle_execution_event(
-                            &live_vm_id,
-                            "proc-js-race",
-                            crate::state::ActiveExecutionEvent::Exited(0),
-                        )
-                        .expect("handle stale process event")
-                        .is_none());
-                    sidecar
-                        .dispose_vm_internal_blocking(
-                            &connection_id,
-                            &session_id,
-                            &live_vm_id,
-                            DisposeReason::Requested,
-                        )
-                        .expect("dispose live vm");
-                }
-            });
-        }
-        fn execution_javascript_sync_rpc_handler_ignores_stale_vm_and_process_races() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let request = JavascriptSyncRpcRequest {
-                raw_bytes_args: std::collections::HashMap::new(),
-                id: 1,
-                method: String::from("process.kill"),
-                args: vec![json!(999_999u32), json!("SIGTERM")],
-            };
-
-            let disposed_vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create disposed vm");
-            sidecar
-                .dispose_vm_internal_blocking(
-                    &connection_id,
-                    &session_id,
-                    &disposed_vm_id,
-                    DisposeReason::Requested,
-                )
-                .expect("dispose vm");
-            sidecar
-                .handle_javascript_sync_rpc_request(
-                    &disposed_vm_id,
-                    "proc-js-race",
-                    request.clone(),
-                )
-                .expect("ignore stale vm javascript sync rpc");
-
-            let live_vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create live vm");
-            sidecar
-                .handle_javascript_sync_rpc_request(&live_vm_id, "proc-js-race", request)
-                .expect("ignore stale process javascript sync rpc");
-        }
-        fn execution_poll_event_smoke_skips_queued_stale_process_envelopes_after_dispose() {
-            with_panic_counter(|panic_counter| {
-                let mut sidecar = create_test_sidecar();
-                let (connection_id, session_id) = authenticate_and_open_session(&mut sidecar)
-                    .expect("authenticate and open session");
-
-                for _iteration in 0..16 {
-                    let vm_id = create_vm(
-                        &mut sidecar,
-                        &connection_id,
-                        &session_id,
-                        PermissionsPolicy::allow_all(),
-                    )
-                    .expect("create vm");
-                    let ownership = OwnershipScope::vm(&connection_id, &session_id, &vm_id);
-
-                    sidecar
-                        .process_event_sender
-                        .try_send(crate::state::ProcessEventEnvelope {
-                            connection_id: connection_id.clone(),
-                            session_id: session_id.clone(),
-                            vm_id: vm_id.clone(),
-                            process_id: String::from("proc-js-race"),
-                            event: crate::state::ActiveExecutionEvent::Stdout(
-                                b"stale stdout".to_vec(),
-                            ),
-                        })
-                        .expect("queue stale stdout envelope");
-                    sidecar
-                        .process_event_sender
-                        .try_send(crate::state::ProcessEventEnvelope {
-                            connection_id: connection_id.clone(),
-                            session_id: session_id.clone(),
-                            vm_id: vm_id.clone(),
-                            process_id: String::from("proc-js-race"),
-                            event: crate::state::ActiveExecutionEvent::Exited(0),
-                        })
-                        .expect("queue stale exited envelope");
-
-                    sidecar
-                        .dispose_vm_internal_blocking(
-                            &connection_id,
-                            &session_id,
-                            &vm_id,
-                            DisposeReason::Requested,
-                        )
-                        .expect("dispose vm");
-
-                    assert!(sidecar
-                        .poll_event_blocking(&ownership, Duration::ZERO)
-                        .expect("poll stale envelopes")
-                        .is_none());
-                    assert_eq!(
-                        panic_counter.load(Ordering::SeqCst),
-                        0,
-                        "queued stale process envelopes should not panic after dispose"
-                    );
-                }
-            });
-        }
-        fn execution_poll_event_concurrent_dispose_logs_stale_process_event() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-
-            for _iteration in 0..16 {
-                let vm_id = create_vm(
-                    &mut sidecar,
-                    &connection_id,
-                    &session_id,
-                    PermissionsPolicy::allow_all(),
-                )
-                .expect("create vm");
-                let ownership = OwnershipScope::vm(&connection_id, &session_id, &vm_id);
-                let initial_log_count = sidecar
-                    .with_bridge_mut(|bridge| bridge.log_events.len())
-                    .expect("read initial log count");
-                let barrier = Arc::new(Barrier::new(2));
-                let sender = sidecar.process_event_sender.clone();
-                let sender_barrier = Arc::clone(&barrier);
-                let sender_connection_id = connection_id.clone();
-                let sender_session_id = session_id.clone();
-                let sender_vm_id = vm_id.clone();
-
-                let send_thread = thread::spawn(move || {
-                    sender_barrier.wait();
-                    sender
-                        .try_send(crate::state::ProcessEventEnvelope {
-                            connection_id: sender_connection_id,
-                            session_id: sender_session_id,
-                            vm_id: sender_vm_id,
-                            process_id: String::from("proc-js-race"),
-                            event: crate::state::ActiveExecutionEvent::Stdout(
-                                b"stale stdout".to_vec(),
-                            ),
-                        })
-                        .expect("queue concurrent stale stdout envelope");
-                });
-
-                barrier.wait();
-                sidecar
-                    .dispose_vm_internal_blocking(
-                        &connection_id,
-                        &session_id,
-                        &vm_id,
-                        DisposeReason::Requested,
-                    )
-                    .expect("dispose vm");
-                send_thread.join().expect("join sender thread");
-
-                assert!(sidecar
-                    .poll_event_blocking(&ownership, Duration::ZERO)
-                    .expect("poll concurrent stale envelope")
-                    .is_none());
-
-                let stale_logs = sidecar
-                    .with_bridge_mut(|bridge| {
-                        bridge.log_events[initial_log_count..]
-                            .iter()
-                            .filter(|log| {
-                                log.vm_id == vm_id
-                                    && log.message.contains(
-                                        "Ignoring stale process event during execution event dispatch",
-                                    )
-                                    && log.message.contains("proc-js-race")
-                            })
-                            .map(|log| log.message.clone())
-                            .collect::<Vec<_>>()
-                    })
-                    .expect("read stale log events");
-                assert!(
-                    !stale_logs.is_empty(),
-                    "expected stale process event log after concurrent dispose race"
-                );
-            }
-        }
-        fn filesystem_requests_ignore_stale_vm_and_process_races() {
-            with_panic_counter(|panic_counter| {
-                let mut sidecar = create_test_sidecar();
-                let (connection_id, session_id) = authenticate_and_open_session(&mut sidecar)
-                    .expect("authenticate and open session");
-
-                let disposed_vm_id = create_vm(
-                    &mut sidecar,
-                    &connection_id,
-                    &session_id,
-                    PermissionsPolicy::allow_all(),
-                )
-                .expect("create disposed vm");
-                let disposed_ownership =
-                    OwnershipScope::vm(&connection_id, &session_id, &disposed_vm_id);
-
-                sidecar
-                    .dispose_vm_internal_blocking(
-                        &connection_id,
-                        &session_id,
-                        &disposed_vm_id,
-                        DisposeReason::Requested,
-                    )
-                    .expect("dispose vm");
-
-                let stale_guest_request = sidecar
-                    .dispatch_blocking(request(
-                        4,
-                        disposed_ownership,
-                        RequestPayload::GuestFilesystemCall(GuestFilesystemCallRequest {
-                            operation: GuestFilesystemOperation::WriteFile,
-                            path: String::from("/stale.txt"),
-                            destination_path: None,
-                            target: None,
-                            content: Some(String::from("stale")),
-                            encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                            recursive: false,
-            max_depth: None,
-                            mode: None,
-                            uid: None,
-                            gid: None,
-                            atime_ms: None,
-                            mtime_ms: None,
-                            len: None,
-                            offset: None,
-                        }),
-                    ))
-                    .expect("dispatch stale guest filesystem request");
-                match stale_guest_request.response.payload {
-                    ResponsePayload::Rejected(rejected) => {
-                        assert_eq!(rejected.code, "invalid_state");
-                        assert!(
-                            rejected.message.contains("unknown sidecar VM"),
-                            "unexpected stale guest filesystem rejection: {rejected:?}"
-                        );
-                    }
-                    other => panic!("unexpected stale guest filesystem response: {other:?}"),
-                }
-
-                let live_vm_id = create_vm(
-                    &mut sidecar,
-                    &connection_id,
-                    &session_id,
-                    PermissionsPolicy::allow_all(),
-                )
-                .expect("create live vm");
-
-                {
-                    let vm = sidecar.vms.get(&live_vm_id).expect("live vm");
-                    assert!(
-                        !vm.kernel
-                            .exists("/tmp/stale-python-rpc")
-                            .expect("check missing workspace before stale python rpc"),
-                        "stale python request precondition failed"
-                    );
-                }
-
-                sidecar
-                    .handle_python_vfs_rpc_request(
-                        &live_vm_id,
-                        "proc-stale-python",
-                        PythonVfsRpcRequest {
-                            id: 1,
-                            method: PythonVfsRpcMethod::Mkdir,
-                            path: String::from("/tmp/stale-python-rpc"),
-                            destination: None,
-                            target: None,
-                            mode: None,
-                            uid: None,
-                            gid: None,
-                            atime_ms: None,
-                            mtime_ms: None,
-                            content_base64: None,
-                            recursive: false,
-                            url: None,
-                            http_method: None,
-                            headers: BTreeMap::new(),
-                            body_base64: None,
-                            hostname: None,
-                            family: None,
-                            port: None,
-                            socket_id: None,
-                            command: None,
-                            args: Vec::new(),
-                            cwd: None,
-                            env: BTreeMap::new(),
-                            shell: false,
-                            max_buffer: None,
-                        },
-                    )
-                    .expect("ignore stale python vfs process");
-
-                {
-                    let vm = sidecar.vms.get(&live_vm_id).expect("live vm");
-                    assert!(
-                        !vm.kernel
-                            .exists("/tmp/stale-python-rpc")
-                            .expect("check stale python rpc did not mutate kernel"),
-                        "stale python VFS request should not mutate the kernel"
-                    );
-                }
-
-                sidecar
-                    .handle_python_vfs_rpc_request(
-                        &disposed_vm_id,
-                        "proc-stale-python",
-                        PythonVfsRpcRequest {
-                            id: 2,
-                            method: PythonVfsRpcMethod::Mkdir,
-                            path: String::from("/tmp/stale-python-rpc"),
-                            destination: None,
-                            target: None,
-                            mode: None,
-                            uid: None,
-                            gid: None,
-                            atime_ms: None,
-                            mtime_ms: None,
-                            content_base64: None,
-                            recursive: false,
-                            url: None,
-                            http_method: None,
-                            headers: BTreeMap::new(),
-                            body_base64: None,
-                            hostname: None,
-                            family: None,
-                            port: None,
-                            socket_id: None,
-                            command: None,
-                            args: Vec::new(),
-                            cwd: None,
-                            env: BTreeMap::new(),
-                            shell: false,
-                            max_buffer: None,
-                        },
-                    )
-                    .expect("ignore stale python vfs vm");
-
-                let write_response = sidecar
-                    .dispatch_blocking(request(
-                        5,
-                        OwnershipScope::vm(&connection_id, &session_id, &live_vm_id),
-                        RequestPayload::GuestFilesystemCall(GuestFilesystemCallRequest {
-                            operation: GuestFilesystemOperation::WriteFile,
-                            path: String::from("/note.txt"),
-                            destination_path: None,
-                            target: None,
-                            content: Some(String::from("hello from live vm")),
-                            encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                            recursive: false,
-            max_depth: None,
-                            mode: None,
-                            uid: None,
-                            gid: None,
-                            atime_ms: None,
-                            mtime_ms: None,
-                            len: None,
-                            offset: None,
-                        }),
-                    ))
-                    .expect("dispatch live guest filesystem write");
-                match write_response.response.payload {
-                    ResponsePayload::GuestFilesystemResult(response) => {
-                        assert_eq!(response.operation, GuestFilesystemOperation::WriteFile);
-                        assert_eq!(response.path, "/note.txt");
-                    }
-                    other => panic!("unexpected live guest filesystem write response: {other:?}"),
-                }
-
-                let read_response = sidecar
-                    .dispatch_blocking(request(
-                        6,
-                        OwnershipScope::vm(&connection_id, &session_id, &live_vm_id),
-                        RequestPayload::GuestFilesystemCall(GuestFilesystemCallRequest {
-                            operation: GuestFilesystemOperation::ReadFile,
-                            path: String::from("/note.txt"),
-                            destination_path: None,
-                            target: None,
-                            content: None,
-                            encoding: None,
-                            recursive: false,
-            max_depth: None,
-                            mode: None,
-                            uid: None,
-                            gid: None,
-                            atime_ms: None,
-                            mtime_ms: None,
-                            len: None,
-                            offset: None,
-                        }),
-                    ))
-                    .expect("dispatch live guest filesystem read");
-                match read_response.response.payload {
-                    ResponsePayload::GuestFilesystemResult(response) => {
-                        assert_eq!(response.operation, GuestFilesystemOperation::ReadFile);
-                        assert_eq!(response.path, "/note.txt");
-                        assert_eq!(response.content.as_deref(), Some("hello from live vm"));
-                        assert_eq!(response.encoding, Some(RootFilesystemEntryEncoding::Utf8));
-                    }
-                    other => panic!("unexpected live guest filesystem read response: {other:?}"),
-                }
-
-                assert_eq!(
-                    panic_counter.load(Ordering::SeqCst),
-                    0,
-                    "stale filesystem races should not panic"
-                );
-            });
-        }
-        fn get_zombie_timer_count_reports_kernel_state_before_and_after_waitpid() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            let zombie_pid = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-                vm.kernel
-                    .register_driver(CommandDriver::new("test-driver", ["test-zombie"]))
-                    .expect("register test driver");
-                let process = vm
-                    .kernel
-                    .spawn_process(
-                        "test-zombie",
-                        Vec::new(),
-                        SpawnOptions {
-                            requester_driver: Some(String::from("test-driver")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn test process");
-                process.finish(17);
-                assert_eq!(vm.kernel.zombie_timer_count(), 1);
-                process.pid()
-            };
-
-            let zombie_count = sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::GetZombieTimerCount(GetZombieTimerCountRequest::default()),
-                ))
-                .expect("query zombie count");
-            match zombie_count.response.payload {
-                ResponsePayload::ZombieTimerCount(response) => assert_eq!(response.count, 1),
-                other => panic!("unexpected zombie count response: {other:?}"),
-            }
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-                let waited = vm.kernel.waitpid(zombie_pid).expect("waitpid");
-                assert_eq!(waited.pid, zombie_pid);
-                assert_eq!(waited.status, 17);
-                assert_eq!(vm.kernel.zombie_timer_count(), 0);
-            }
-
-            let reaped_count = sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::GetZombieTimerCount(GetZombieTimerCountRequest::default()),
-                ))
-                .expect("query reaped zombie count");
-            match reaped_count.response.payload {
-                ResponsePayload::ZombieTimerCount(response) => assert_eq!(response.count, 0),
-                other => panic!("unexpected zombie count response: {other:?}"),
-            }
-        }
-        fn parse_signal_accepts_full_guest_signal_table() {
-            assert_eq!(parse_signal("SIGINT").expect("parse SIGINT"), libc::SIGINT);
-            assert_eq!(parse_signal("kill").expect("parse SIGKILL"), SIGKILL);
-            assert_eq!(parse_signal("15").expect("parse numeric SIGTERM"), SIGTERM);
-            assert_eq!(
-                parse_signal("SIGCONT").expect("parse SIGCONT"),
-                libc::SIGCONT
-            );
-            assert_eq!(
-                parse_signal("SIGSTOP").expect("parse SIGSTOP"),
-                libc::SIGSTOP
-            );
-            assert_eq!(parse_signal("0").expect("parse signal 0"), 0);
-            assert_eq!(
-                parse_signal("SIGUSR1").expect("parse SIGUSR1"),
-                libc::SIGUSR1
-            );
-            assert_eq!(parse_signal("SIGIOT").expect("parse SIGIOT"), libc::SIGABRT);
-            assert_eq!(parse_signal("SIGPOLL").expect("parse SIGPOLL"), libc::SIGIO);
-            assert!(parse_signal("32").is_err());
-        }
-        fn runtime_child_liveness_only_tracks_owned_children() {
-            assert!(
-                !runtime_child_is_alive(std::process::id()).expect("current pid is not a child"),
-                "current process should not be treated as a guest runtime child"
-            );
-
-            let mut child = Command::new("sh")
-                .arg("-c")
-                .arg("sleep 10")
-                .spawn()
-                .expect("spawn child process");
-            let child_pid = child.id();
-
-            assert!(
-                runtime_child_is_alive(child_pid).expect("inspect running child"),
-                "running child should be considered alive"
-            );
-
-            signal_runtime_process(child_pid, SIGTERM).expect("signal running child");
-            child.wait().expect("wait for signaled child");
-
-            assert!(
-                !runtime_child_is_alive(child_pid).expect("inspect reaped child"),
-                "reaped child should no longer be considered alive"
-            );
-            signal_runtime_process(child_pid, SIGTERM).expect("ignore reaped child");
-        }
-        fn authenticated_connection_id_returns_error_for_unexpected_response() {
-            let error = authenticated_connection_id(DispatchResult {
-                response: ResponseFrame::new(
-                    1,
-                    OwnershipScope::connection("conn-1"),
-                    ResponsePayload::SessionOpened(SessionOpenedResponse {
-                        session_id: String::from("session-1"),
-                        owner_connection_id: String::from("conn-1"),
-                    }),
-                ),
-                events: Vec::new(),
-            })
-            .expect_err("unexpected auth payload should return an error");
-
-            match error {
-                SidecarError::InvalidState(message) => {
-                    assert!(message.contains("expected authenticated response"));
-                    assert!(message.contains("SessionOpened"));
-                }
-                other => panic!("expected invalid_state error, got {other:?}"),
-            }
-        }
-        fn opened_session_id_returns_error_for_unexpected_response() {
-            let error = opened_session_id(DispatchResult {
-                response: ResponseFrame::new(
-                    2,
-                    OwnershipScope::connection("conn-1"),
-                    ResponsePayload::VmCreated(VmCreatedResponse {
-                        vm_id: String::from("vm-1"),
-                    }),
-                ),
-                events: Vec::new(),
-            })
-            .expect_err("unexpected session payload should return an error");
-
-            match error {
-                SidecarError::InvalidState(message) => {
-                    assert!(message.contains("expected session_opened response"));
-                    assert!(message.contains("VmCreated"));
-                }
-                other => panic!("expected invalid_state error, got {other:?}"),
-            }
-        }
-        fn created_vm_id_returns_error_for_unexpected_response() {
-            let error = created_vm_id(DispatchResult {
-                response: ResponseFrame::new(
-                    3,
-                    OwnershipScope::session("conn-1", "session-1"),
-                    ResponsePayload::Rejected(RejectedResponse {
-                        code: String::from("invalid_state"),
-                        message: String::from("not owned"),
-                    }),
-                ),
-                events: Vec::new(),
-            })
-            .expect_err("unexpected vm payload should return an error");
-
-            match error {
-                SidecarError::InvalidState(message) => {
-                    assert!(message.contains("expected vm_created response"));
-                    assert!(message.contains("Rejected"));
-                }
-                other => panic!("expected invalid_state error, got {other:?}"),
-            }
-        }
-        fn configure_vm_instantiates_memory_mounts_through_the_plugin_registry() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::BootstrapRootFilesystem(BootstrapRootFilesystemRequest {
-                        entries: vec![
-                            RootFilesystemEntry {
-                                path: String::from("/workspace"),
-                                kind: RootFilesystemEntryKind::Directory,
-                                ..Default::default()
-                            },
-                            RootFilesystemEntry {
-                                path: String::from("/workspace/root-only.txt"),
-                                kind: RootFilesystemEntryKind::File,
-                                content: Some(String::from("root bootstrap file")),
-                                ..Default::default()
-                            },
-                        ],
-                    }),
-                ))
-                .expect("bootstrap root workspace");
-
-            sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/workspace"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("memory"),
-                                config: json!({}).to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure mounts");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            let hidden = vm
-                .kernel
-                .filesystem_mut()
-                .read_file("/workspace/root-only.txt")
-                .expect_err("mounted filesystem should hide root-backed file");
-            assert_eq!(hidden.code(), "ENOENT");
-
-            vm.kernel
-                .filesystem_mut()
-                .write_file("/workspace/from-mount.txt", b"native mount".to_vec())
-                .expect("write mounted file");
-            assert_eq!(
-                vm.kernel
-                    .filesystem_mut()
-                    .read_file("/workspace/from-mount.txt")
-                    .expect("read mounted file"),
-                b"native mount".to_vec()
-            );
-            assert_eq!(
-                vm.kernel.mounted_filesystems(),
-                // No packages configured, so there are no granular /opt/agentos
-                // leaf mounts (one tar/bin/current mount is added per package).
-                vec![
-                    MountEntry {
-                        path: String::from("/workspace"),
-                        plugin_id: String::from("memory"),
-                        read_only: false,
-                    },
-                    MountEntry {
-                        path: String::from("/"),
-                        plugin_id: String::from("root"),
-                        read_only: false,
-                    },
-                ]
-            );
-        }
-        fn configure_vm_applies_read_only_mount_wrappers() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/readonly"),
-                            read_only: true,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("memory"),
-                                config: json!({}).to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure readonly mount");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            let error = vm
-                .kernel
-                .filesystem_mut()
-                .write_file("/readonly/blocked.txt", b"nope".to_vec())
-                .expect_err("readonly mount should reject writes");
-            assert_eq!(error.code(), "EROFS");
-        }
-        fn configure_vm_instantiates_host_dir_mounts_through_the_plugin_registry() {
-            let host_dir = temp_dir("secure-exec-sidecar-host-dir");
-            fs::write(host_dir.join("hello.txt"), "hello from host").expect("seed host dir");
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::BootstrapRootFilesystem(BootstrapRootFilesystemRequest {
-                        entries: vec![
-                            RootFilesystemEntry {
-                                path: String::from("/workspace"),
-                                kind: RootFilesystemEntryKind::Directory,
-                                ..Default::default()
-                            },
-                            RootFilesystemEntry {
-                                path: String::from("/workspace/root-only.txt"),
-                                kind: RootFilesystemEntryKind::File,
-                                content: Some(String::from("root bootstrap file")),
-                                ..Default::default()
-                            },
-                        ],
-                    }),
-                ))
-                .expect("bootstrap root workspace");
-
-            sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/workspace"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("host_dir"),
-                                config: json!({
-                                    "hostPath": host_dir,
-                                    "readOnly": false,
-                                })
-                                .to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure host_dir mount");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            let hidden = vm
-                .kernel
-                .filesystem_mut()
-                .read_file("/workspace/root-only.txt")
-                .expect_err("mounted host dir should hide root-backed file");
-            assert_eq!(hidden.code(), "ENOENT");
-            assert_eq!(
-                vm.kernel
-                    .filesystem_mut()
-                    .read_file("/workspace/hello.txt")
-                    .expect("read mounted host file"),
-                b"hello from host".to_vec()
-            );
-
-            vm.kernel
-                .filesystem_mut()
-                .write_file("/workspace/from-vm.txt", b"native host dir".to_vec())
-                .expect("write host dir file");
-            assert_eq!(
-                fs::read_to_string(host_dir.join("from-vm.txt")).expect("read host output"),
-                "native host dir"
-            );
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-        }
-
-        fn configure_vm_passes_resource_read_limits_to_host_dir_mounts() {
-            let host_dir = temp_dir("secure-exec-sidecar-host-dir-read-limit");
-            fs::write(host_dir.join("hello.txt"), "hello from host").expect("seed host dir");
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([(String::from("resource.max_pread_bytes"), String::from("4"))]),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/workspace"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("host_dir"),
-                                config: json!({
-                                    "hostPath": host_dir,
-                                    "readOnly": false,
-                                })
-                                .to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure host_dir mount");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            let error = vm
-                .kernel
-                .filesystem_mut()
-                .read_file("/workspace/hello.txt")
-                .expect_err("host_dir full read should honor VM read limit");
-            assert_eq!(error.code(), "EINVAL");
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-        }
-
-        #[test]
-        fn configure_vm_host_dir_mount_receives_configured_read_limit() {
-            configure_vm_passes_resource_read_limits_to_host_dir_mounts();
-        }
-
-        fn configure_vm_passes_resource_read_limits_to_module_access_mounts() {
-            let module_access_cwd = temp_dir("secure-exec-sidecar-module-access-read-limit");
-            let package_root = module_access_cwd.join("node_modules/fixture-pkg");
-            fs::create_dir_all(&package_root).expect("create package root");
-            fs::write(
-                package_root.join("package.json"),
-                r#"{"name":"fixture-pkg"}"#,
-            )
-            .expect("seed package json");
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([(String::from("resource.max_pread_bytes"), String::from("4"))]),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: Vec::new(),
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: Some(module_access_cwd.to_string_lossy().into_owned()),
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure module_access mount");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            let error = vm
-                .kernel
-                .filesystem_mut()
-                .read_file("/root/node_modules/fixture-pkg/package.json")
-                .expect_err("module_access read should honor VM read limit");
-            assert_eq!(error.code(), "EINVAL");
-
-            fs::remove_dir_all(module_access_cwd).expect("remove temp dir");
-        }
-
-        #[test]
-        fn configure_vm_module_access_mount_receives_configured_read_limit() {
-            configure_vm_passes_resource_read_limits_to_module_access_mounts();
-        }
-
-        // Regression guard for the read-side shadow-walk fix.
-        //
-        // Every read-side guest fs op (Exists/Stat/Lstat/ReadFile) reconciles the host
-        // shadow tree into the kernel VFS first. The reconciliation walks the whole tree
-        // from `vm.cwd`, but it must now SKIP files the kernel already holds an identical
-        // copy of (same size/mode/mtime) instead of unconditionally re-reading every
-        // file's bytes and re-writing them into the kernel. Without the skip a single
-        // `exists("/anything")` costs O(whole tree) and is super-linear as the shadow
-        // grows -- the session-creation/runtime latency this fixes.
-        //
-        // We prove two things:
-        //   1. A warm read op over an UNCHANGED tree is far cheaper than the first
-        //      (cold) one, i.e. unchanged files are skipped, not re-copied.
-        //   2. The skip is self-correcting: after a file's content changes, a read still
-        //      observes the new bytes (no stale skip).
-        fn read_side_ops_skip_unchanged_shadow_files_repro() {
-            use std::time::{Duration, Instant};
-
-            fn fs_payload(
-                operation: GuestFilesystemOperation,
-                path: &str,
-                content: Option<String>,
-            ) -> RequestPayload {
-                RequestPayload::GuestFilesystemCall(GuestFilesystemCallRequest {
-                    operation,
-                    path: String::from(path),
-                    destination_path: None,
-                    target: None,
-                    content,
-                    encoding: Some(RootFilesystemEntryEncoding::Utf8),
-                    recursive: true,
-            max_depth: None,
-                    mode: None,
-                    uid: None,
-                    gid: None,
-                    atime_ms: None,
-                    mtime_ms: None,
-                    len: None,
-                    offset: None,
-                })
-            }
-
-            fn dispatch(
-                sidecar: &mut NativeSidecar<RecordingBridge>,
-                ownership: &OwnershipScope,
-                next_id: &mut i64,
-                payload: RequestPayload,
-            ) -> ResponsePayload {
-                *next_id += 1;
-                sidecar
-                    .dispatch_blocking(request(*next_id, ownership.clone(), payload))
-                    .expect("dispatch guest fs op")
-                    .response
-                    .payload
-            }
-
-            // Seed flat files `from..to` via guest WriteFile (mirrors into the host
-            // shadow root). Write-side ops do not walk, so seeding is O(count).
-            fn seed_to(
-                sidecar: &mut NativeSidecar<RecordingBridge>,
-                ownership: &OwnershipScope,
-                next_id: &mut i64,
-                body: &str,
-                from: usize,
-                to: usize,
-            ) {
-                for i in from..to {
-                    let path = format!("/seed-{i:05}.txt");
-                    let payload = fs_payload(
-                        GuestFilesystemOperation::WriteFile,
-                        &path,
-                        Some(String::from(body)),
-                    );
-                    match dispatch(sidecar, ownership, next_id, payload) {
-                        ResponsePayload::GuestFilesystemResult(_) => {}
-                        other => panic!("seed write failed: {other:?}"),
-                    }
-                }
-            }
-
-            fn time_exists(
-                sidecar: &mut NativeSidecar<RecordingBridge>,
-                ownership: &OwnershipScope,
-                next_id: &mut i64,
-            ) -> Duration {
-                let payload = fs_payload(GuestFilesystemOperation::Exists, "/zzz-not-here", None);
-                let start = Instant::now();
-                match dispatch(sidecar, ownership, next_id, payload) {
-                    ResponsePayload::GuestFilesystemResult(r) => assert_eq!(r.exists, Some(false)),
-                    other => panic!("exists failed: {other:?}"),
-                }
-                start.elapsed()
-            }
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let ownership = OwnershipScope::vm(&connection_id, &session_id, &vm_id);
-            let mut next_id: i64 = 1000;
-
-            let file_body = "a".repeat(8 * 1024);
-            const COUNT: usize = 800;
-            seed_to(&mut sidecar, &ownership, &mut next_id, &file_body, 0, COUNT);
-
-            // Cold: first read op reconciles the whole tree (reads + writes every file).
-            let cold = time_exists(&mut sidecar, &ownership, &mut next_id);
-            // Warm: tree is unchanged, so every file must be skipped.
-            let warm = time_exists(&mut sidecar, &ownership, &mut next_id);
-
-            eprintln!("[shadow-skip] cold={cold:?} warm={warm:?}");
-
-            // Symptom-1 guard: the warm walk skips unchanged files, so it is far cheaper
-            // than the cold walk that copied them all. (Lenient 4x; observed >>10x.)
-            assert!(
-                cold >= warm * 4,
-                "warm read op over an unchanged shadow tree should skip re-copying files: \
-                 cold={cold:?} warm={warm:?}"
-            );
-
-            // End-to-end smoke: overwrite a seeded file (different length) then read it
-            // back and observe the new bytes. NOTE: this is a guest WriteFile, which
-            // updates the kernel directly, so it does not exercise the host-shadow->kernel
-            // skip predicate itself -- it only guards that overwrite-then-read is coherent.
-            // A true stale-skip test (host-side rewrite that keeps size+mode+mtime) is not
-            // reachable through the public wire API and would need an in-crate unit test
-            // with direct shadow-root access; see the skip-limitation note in
-            // sync_host_directory_tree_to_kernel_inner.
-            let changed_path = "/seed-00042.txt";
-            let new_body = "b".repeat(16 * 1024);
-            match dispatch(
-                &mut sidecar,
-                &ownership,
-                &mut next_id,
-                fs_payload(
-                    GuestFilesystemOperation::WriteFile,
-                    changed_path,
-                    Some(new_body.clone()),
-                ),
-            ) {
-                ResponsePayload::GuestFilesystemResult(_) => {}
-                other => panic!("overwrite failed: {other:?}"),
-            }
-            match dispatch(
-                &mut sidecar,
-                &ownership,
-                &mut next_id,
-                fs_payload(GuestFilesystemOperation::ReadFile, changed_path, None),
-            ) {
-                ResponsePayload::GuestFilesystemResult(r) => {
-                    assert_eq!(
-                        r.content.as_deref(),
-                        Some(new_body.as_str()),
-                        "changed shadow file must not be served stale by the skip"
-                    );
-                }
-                other => panic!("read after overwrite failed: {other:?}"),
-            }
-        }
-
-        // Expensive: seeds hundreds of files and pays one cold full-tree reconciliation
-        // (seconds in debug). Gated out of the default suite; run with `--ignored`.
-        #[test]
-        #[ignore = "expensive: cold shadow-tree reconciliation; run with --ignored"]
-        fn read_side_ops_skip_unchanged_shadow_files() {
-            read_side_ops_skip_unchanged_shadow_files_repro();
-        }
-
-        fn configure_vm_rejects_module_access_root_symlink_to_non_node_modules() {
-            let module_access_cwd = temp_dir("secure-exec-sidecar-module-access-symlink-cwd");
-            let outside_root = temp_dir("secure-exec-sidecar-module-access-outside");
-            std::os::unix::fs::symlink(&outside_root, module_access_cwd.join("node_modules"))
-                .expect("create node_modules symlink");
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: Vec::new(),
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: Some(module_access_cwd.to_string_lossy().into_owned()),
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure module_access mount");
-
-            match response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "plugin_error");
-                    assert!(
-                        rejected.message.contains(
-                            "module_access roots must resolve to a node_modules directory"
-                        ),
-                        "unexpected rejection: {rejected:?}"
-                    );
-                }
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-
-            fs::remove_dir_all(module_access_cwd).expect("remove cwd temp dir");
-            fs::remove_dir_all(outside_root).expect("remove outside temp dir");
-        }
-
-        #[test]
-        fn configure_vm_rejects_module_access_symlinked_root_escape() {
-            configure_vm_rejects_module_access_root_symlink_to_non_node_modules();
-        }
-
-        fn configure_vm_js_bridge_mount_dispatches_filesystem_calls_via_sidecar_requests() {
-            let mut sidecar = create_test_sidecar();
-            let (filesystem, calls) = install_memory_js_bridge_handler(&mut sidecar);
-            filesystem
-                .lock()
-                .expect("lock js bridge fs")
-                .write_file("/original.txt", b"hello world".to_vec())
-                .expect("seed js bridge fs");
-
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/workspace"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("js_bridge"),
-                                config: json!({ "mountId": "mount-1" }).to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure js_bridge mount");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            vm.kernel
-                .filesystem_mut()
-                .link("/workspace/original.txt", "/workspace/linked.txt")
-                .expect("create js bridge hard link");
-            vm.kernel
-                .filesystem_mut()
-                .write_file("/workspace/linked.txt", b"updated".to_vec())
-                .expect("write through linked file");
-            vm.kernel
-                .filesystem_mut()
-                .chown("/workspace/original.txt", 2000, 3000)
-                .expect("update ownership");
-            vm.kernel
-                .filesystem_mut()
-                .utimes(
-                    "/workspace/linked.txt",
-                    1_700_000_000_000,
-                    1_710_000_000_000,
-                )
-                .expect("update timestamps");
-
-            let original = vm
-                .kernel
-                .filesystem_mut()
-                .stat("/workspace/original.txt")
-                .expect("stat original");
-            let linked = vm
-                .kernel
-                .filesystem_mut()
-                .stat("/workspace/linked.txt")
-                .expect("stat linked");
-            assert_eq!(original.ino, linked.ino);
-            assert_eq!(original.nlink, 2);
-            assert_eq!(linked.nlink, 2);
-            assert_eq!(original.uid, 2000);
-            assert_eq!(original.gid, 3000);
-            assert_eq!(linked.uid, 2000);
-            assert_eq!(linked.gid, 3000);
-            assert_eq!(original.atime_ms, 1_700_000_000_000);
-            assert_eq!(original.mtime_ms, 1_710_000_000_000);
-            assert_eq!(
-                vm.kernel
-                    .filesystem_mut()
-                    .read_file("/workspace/original.txt")
-                    .expect("read original through js bridge"),
-                b"updated".to_vec()
-            );
-
-            let calls = calls.lock().expect("lock js bridge calls");
-            assert!(calls.iter().any(|call| {
-                call.mount_id == "mount-1"
-                    && call.operation == "link"
-                    && call.path.is_none()
-                    && call.ownership == OwnershipScope::vm(&connection_id, &session_id, &vm_id)
-            }));
-            assert!(calls.iter().any(|call| {
-                call.mount_id == "mount-1"
-                    && call.operation == "writeFile"
-                    && call.path.as_deref() == Some("/linked.txt")
-            }));
-            assert!(calls.iter().any(|call| {
-                call.mount_id == "mount-1"
-                    && call.operation == "stat"
-                    && call.path.as_deref() == Some("/original.txt")
-            }));
-        }
-
-        fn configure_vm_js_bridge_mount_rejects_oversized_read_payloads() {
-            let mut sidecar = create_test_sidecar();
-            sidecar.set_sidecar_request_handler(|request| {
-                let SidecarRequestPayload::JsBridgeCall(call) = &request.payload else {
-                    return Err(SidecarError::InvalidState(String::from(
-                        "expected js_bridge_call payload",
-                    )));
-                };
-                let call_args: Value =
-                    serde_json::from_str(&call.args).expect("js bridge args json");
-                match call.operation.as_str() {
-                    "exists" => js_bridge_result(request, Some(Value::Bool(true)), None),
-                    "realpath" => {
-                        let path = call_args
-                            .get("path")
-                            .and_then(Value::as_str)
-                            .map(|path| Value::String(path.to_owned()));
-                        js_bridge_result(request, path, None)
-                    }
-                    "readFile" | "pread" => js_bridge_result(
-                        request,
-                        Some(Value::String(
-                            base64::engine::general_purpose::STANDARD.encode(b"hello"),
-                        )),
-                        None,
-                    ),
-                    _ => js_bridge_result(request, None, None),
-                }
-            });
-
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([(String::from("resource.max_pread_bytes"), String::from("4"))]),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/workspace"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("js_bridge"),
-                                config: json!({ "mountId": "mount-sized" }).to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure js_bridge mount");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            let read_error = vm
-                .kernel
-                .filesystem_mut()
-                .read_file("/workspace/too-big.txt")
-                .expect_err("readFile callback payload should honor VM read limit");
-            assert_eq!(read_error.code(), "EINVAL", "read error: {read_error}");
-
-            let pread_error = vm
-                .kernel
-                .filesystem_mut()
-                .pread("/workspace/too-big.txt", 0, 4)
-                .expect_err("pread callback payload should honor VM read limit");
-            assert_eq!(pread_error.code(), "EINVAL", "pread error: {pread_error}");
-        }
-
-        #[test]
-        fn configure_vm_js_bridge_mount_bounds_read_payloads() {
-            configure_vm_js_bridge_mount_rejects_oversized_read_payloads();
-        }
-
-        fn configure_vm_js_bridge_mount_rejects_pread_payloads_above_requested_length() {
-            let mut sidecar = create_test_sidecar();
-            sidecar.set_sidecar_request_handler(|request| {
-                let SidecarRequestPayload::JsBridgeCall(call) = &request.payload else {
-                    return Err(SidecarError::InvalidState(String::from(
-                        "expected js_bridge_call payload",
-                    )));
-                };
-                let call_args: Value =
-                    serde_json::from_str(&call.args).expect("js bridge args json");
-                match call.operation.as_str() {
-                    "exists" => js_bridge_result(request, Some(Value::Bool(true)), None),
-                    "realpath" => {
-                        let path = call_args
-                            .get("path")
-                            .and_then(Value::as_str)
-                            .map(|path| Value::String(path.to_owned()));
-                        js_bridge_result(request, path, None)
-                    }
-                    "readFile" | "pread" => js_bridge_result(
-                        request,
-                        Some(Value::String(
-                            base64::engine::general_purpose::STANDARD.encode(b"hello"),
-                        )),
-                        None,
-                    ),
-                    _ => js_bridge_result(request, None, None),
-                }
-            });
-
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([(String::from("resource.max_pread_bytes"), String::from("8"))]),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/workspace"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("js_bridge"),
-                                config: json!({ "mountId": "mount-pread-sized" }).to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure js_bridge mount");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            assert_eq!(
-                vm.kernel
-                    .filesystem_mut()
-                    .read_file("/workspace/within-limit.txt")
-                    .expect("full read should fit VM read limit"),
-                b"hello".to_vec()
-            );
-
-            let pread_error = vm
-                .kernel
-                .filesystem_mut()
-                .pread("/workspace/too-long-for-pread.txt", 0, 4)
-                .expect_err("pread callback payload must not exceed requested length");
-            assert_eq!(pread_error.code(), "EINVAL", "pread error: {pread_error}");
-        }
-
-        #[test]
-        fn configure_vm_js_bridge_mount_bounds_pread_payloads_to_requested_length() {
-            configure_vm_js_bridge_mount_rejects_pread_payloads_above_requested_length();
-        }
-
-        fn configure_vm_js_bridge_mount_maps_callback_errors_to_errno_codes() {
-            let mut sidecar = create_test_sidecar();
-            sidecar.set_sidecar_request_handler(|request| {
-                let SidecarRequestPayload::JsBridgeCall(call) = &request.payload else {
-                    return Err(SidecarError::InvalidState(String::from(
-                        "expected js_bridge_call payload",
-                    )));
-                };
-                let call_args: Value =
-                    serde_json::from_str(&call.args).expect("js bridge args json");
-                let path = call_args.get("path").and_then(Value::as_str);
-                if path == Some("/") {
-                    return match call.operation.as_str() {
-                        "exists" => js_bridge_result(request, Some(Value::Bool(true)), None),
-                        "stat" | "lstat" => js_bridge_result(
-                            request,
-                            Some(stat_json(VirtualStat {
-                                mode: 0o755,
-                                size: 0,
-                                blocks: 0,
-                                dev: 1,
-                                rdev: 0,
-                                is_directory: true,
-                                is_symbolic_link: false,
-                                atime_ms: 0,
-                                atime_nsec: 0,
-                                mtime_ms: 0,
-                                mtime_nsec: 0,
-                                ctime_ms: 0,
-                                ctime_nsec: 0,
-                                birthtime_ms: 0,
-                                ino: 1,
-                                nlink: 1,
-                                uid: 0,
-                                gid: 0,
-                            })),
-                            None,
-                        ),
-                        "readDir" => js_bridge_result(request, Some(json!([])), None),
-                        "readDirWithTypes" => {
-                            js_bridge_result(request, Some(Value::Array(Vec::new())), None)
-                        }
-                        "realpath" => js_bridge_result(request, Some(json!("/")), None),
-                        _ => js_bridge_result(request, None, None),
-                    };
-                }
-
-                let error = match (call.operation.as_str(), path) {
-                    ("realpath", Some("/missing.txt")) | ("readFile", Some("/missing.txt")) => {
-                        "not found"
-                    }
-                    ("writeFile", Some("/output.txt")) => "permission denied",
-                    ("rename", _) => "already exists",
-                    ("stat", Some("/anything.txt")) => "unexpected js bridge failure",
-                    _ => return js_bridge_result(request, None, None),
-                };
-                js_bridge_result(request, None, Some(error))
-            });
-
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/workspace"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("js_bridge"),
-                                config: json!({ "mountId": "mount-errors" }).to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure js_bridge mount");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            let read_error = vm
-                .kernel
-                .filesystem_mut()
-                .read_file("/workspace/missing.txt")
-                .expect_err("read should fail");
-            assert_eq!(read_error.code(), "ENOENT");
-
-            let write_error = vm
-                .kernel
-                .filesystem_mut()
-                .write_file("/workspace/output.txt", b"blocked".to_vec())
-                .expect_err("write should fail");
-            assert_eq!(write_error.code(), "EACCES");
-
-            let rename_error = vm
-                .kernel
-                .filesystem_mut()
-                .rename("/workspace/a.txt", "/workspace/b.txt")
-                .expect_err("rename should fail");
-            assert_eq!(rename_error.code(), "EEXIST");
-
-            let stat_error = vm
-                .kernel
-                .filesystem_mut()
-                .stat("/workspace/anything.txt")
-                .expect_err("stat should fail");
-            assert_eq!(stat_error.code(), "EIO");
-        }
-        fn configure_vm_instantiates_sandbox_agent_mounts_through_the_plugin_registry() {
-            let server = MockSandboxAgentServer::start("secure-exec-sidecar-sandbox", None);
-            fs::write(server.root().join("hello.txt"), "hello from sandbox")
-                .expect("seed sandbox file");
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::BootstrapRootFilesystem(BootstrapRootFilesystemRequest {
-                        entries: vec![
-                            RootFilesystemEntry {
-                                path: String::from("/sandbox"),
-                                kind: RootFilesystemEntryKind::Directory,
-                                ..Default::default()
-                            },
-                            RootFilesystemEntry {
-                                path: String::from("/sandbox/root-only.txt"),
-                                kind: RootFilesystemEntryKind::File,
-                                content: Some(String::from("root bootstrap file")),
-                                ..Default::default()
-                            },
-                        ],
-                    }),
-                ))
-                .expect("bootstrap root sandbox dir");
-
-            sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/sandbox"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("sandbox_agent"),
-                                config: json!({
-                                    "baseUrl": server.base_url(),
-                                })
-                                .to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure sandbox_agent mount");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            let hidden = vm
-                .kernel
-                .filesystem_mut()
-                .read_file("/sandbox/root-only.txt")
-                .expect_err("mounted sandbox should hide root-backed file");
-            assert_eq!(hidden.code(), "ENOENT");
-            assert_eq!(
-                vm.kernel
-                    .filesystem_mut()
-                    .read_file("/sandbox/hello.txt")
-                    .expect("read mounted sandbox file"),
-                b"hello from sandbox".to_vec()
-            );
-
-            vm.kernel
-                .filesystem_mut()
-                .write_file("/sandbox/from-vm.txt", b"native sandbox mount".to_vec())
-                .expect("write sandbox file");
-            assert_eq!(
-                fs::read_to_string(server.root().join("from-vm.txt")).expect("read sandbox output"),
-                "native sandbox mount"
-            );
-        }
-        fn configure_vm_instantiates_s3_mounts_through_the_plugin_registry() {
-            let server = MockS3Server::start();
-            let unique = SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("clock should be monotonic")
-                .as_nanos();
-            let metadata_path =
-                std::env::temp_dir().join(format!("secure-exec-service-s3-{unique}.sqlite"));
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::BootstrapRootFilesystem(BootstrapRootFilesystemRequest {
-                        entries: vec![
-                            RootFilesystemEntry {
-                                path: String::from("/data"),
-                                kind: RootFilesystemEntryKind::Directory,
-                                ..Default::default()
-                            },
-                            RootFilesystemEntry {
-                                path: String::from("/data/root-only.txt"),
-                                kind: RootFilesystemEntryKind::File,
-                                content: Some(String::from("root bootstrap file")),
-                                ..Default::default()
-                            },
-                        ],
-                    }),
-                ))
-                .expect("bootstrap root s3 dir");
-
-            sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/data"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("chunked_s3"),
-                                config: json!({
-                                    "bucket": "test-bucket",
-                                    "prefix": "service-test",
-                                    "metadataPath": metadata_path.to_string_lossy(),
-                                    "region": "us-east-1",
-                                    "endpoint": server.base_url(),
-                                    "credentials": {
-                                        "accessKeyId": "minioadmin",
-                                        "secretAccessKey": "minioadmin",
-                                    },
-                                    "chunkSize": 8,
-                                    "inlineThreshold": 4,
-                                })
-                                .to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure s3 mount");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            let hidden = vm
-                .kernel
-                .filesystem_mut()
-                .read_file("/data/root-only.txt")
-                .expect_err("mounted s3 fs should hide root-backed file");
-            assert_eq!(hidden.code(), "ENOENT");
-
-            vm.kernel
-                .filesystem_mut()
-                .write_file("/data/from-vm.txt", b"native s3 mount".to_vec())
-                .expect("write s3-backed file");
-            assert_eq!(
-                vm.kernel
-                    .filesystem_mut()
-                    .read_file("/data/from-vm.txt")
-                    .expect("read s3-backed file"),
-                b"native s3 mount".to_vec()
-            );
-            drop(sidecar);
-
-            let requests = server.requests();
-            assert!(
-                requests.iter().any(|request| request.method == "PUT"),
-                "expected the native plugin to persist data back to S3"
-            );
-            assert!(
-                requests
-                    .iter()
-                    .any(|request| request.path.contains("service-test/blocks/")),
-                "expected the native plugin to store block objects"
-            );
-            let _ = fs::remove_file(metadata_path);
-        }
-        fn configure_vm_instantiates_object_s3_mounts_through_the_plugin_registry() {
-            let server = MockS3Server::start();
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::BootstrapRootFilesystem(BootstrapRootFilesystemRequest {
-                        entries: vec![RootFilesystemEntry {
-                            path: String::from("/objects"),
-                            kind: RootFilesystemEntryKind::Directory,
-                            ..Default::default()
-                        }],
-                    }),
-                ))
-                .expect("bootstrap root object dir");
-
-            sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/objects"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("object_s3"),
-                                config: json!({
-                                    "bucket": "test-bucket",
-                                    "prefix": "object-service-test",
-                                    "region": "us-east-1",
-                                    "endpoint": server.base_url(),
-                                    "credentials": {
-                                        "accessKeyId": "minioadmin",
-                                        "secretAccessKey": "minioadmin",
-                                    },
-                                })
-                                .to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure object_s3 mount");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            vm.kernel
-                .filesystem_mut()
-                .write_file("/objects/file.txt", b"native object mount".to_vec())
-                .expect("write object s3-backed file");
-            assert_eq!(
-                vm.kernel
-                    .filesystem_mut()
-                    .read_file("/objects/file.txt")
-                    .expect("read object s3-backed file"),
-                b"native object mount".to_vec()
-            );
-            drop(sidecar);
-
-            assert!(server
-                .object_keys()
-                .iter()
-                .any(|key| key == "test-bucket/object-service-test/file.txt"));
-        }
-        fn configure_vm_instantiates_chunked_local_mounts_through_the_plugin_registry() {
-            let root = temp_dir("secure-exec-sidecar-chunked-local");
-            let metadata_path = root.join("metadata.sqlite");
-            let block_root = root.join("blocks");
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::BootstrapRootFilesystem(BootstrapRootFilesystemRequest {
-                        entries: vec![RootFilesystemEntry {
-                            path: String::from("/local"),
-                            kind: RootFilesystemEntryKind::Directory,
-                            ..Default::default()
-                        }],
-                    }),
-                ))
-                .expect("bootstrap root local dir");
-
-            sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/local"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("chunked_local"),
-                                config: json!({
-                                    "metadataPath": metadata_path,
-                                    "blockRoot": block_root,
-                                    "chunkSize": 4,
-                                    "inlineThreshold": 1,
-                                })
-                                .to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure chunked_local mount");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            vm.kernel
-                .filesystem_mut()
-                .write_file("/local/file.txt", b"native local mount".to_vec())
-                .expect("write chunked local file");
-            assert_eq!(
-                vm.kernel
-                    .filesystem_mut()
-                    .read_file("/local/file.txt")
-                    .expect("read chunked local file"),
-                b"native local mount".to_vec()
-            );
-            drop(sidecar);
-
-            assert!(metadata_path.exists());
-            assert!(
-                fs::read_dir(block_root)
-                    .expect("read block root")
-                    .next()
-                    .is_some(),
-                "chunked_local should persist block files"
-            );
-        }
-        fn assert_kernel_permission_decision(
-            decision: secure_exec_kernel::permissions::PermissionDecision,
-            expected_allow: bool,
-            expected_reason: Option<&str>,
-        ) {
-            assert_eq!(decision.allow, expected_allow);
-            if let Some(expected_reason) = expected_reason {
-                assert!(
-                    decision
-                        .reason
-                        .as_deref()
-                        .is_some_and(|reason| reason.contains(expected_reason)),
-                    "expected reason to contain {expected_reason:?}, got {:?}",
-                    decision.reason
-                );
-            } else {
-                assert_eq!(decision.reason, None);
-            }
-        }
-
-        #[test]
-        fn bridge_permissions_map_symlink_operations_to_symlink_access() {
-            let bridge = SharedBridge::new(RecordingBridge::default());
-            let permissions = bridge_permissions(bridge.clone(), "vm-symlink");
-            let check = permissions
-                .filesystem
-                .as_ref()
-                .expect("filesystem permission callback");
-
-            let decision = check(&FsAccessRequest {
-                vm_id: String::from("ignored-by-bridge"),
-                op: FsOperation::Symlink,
-                path: String::from("/workspace/link.txt"),
-            });
-            assert!(decision.allow);
-
-            let recorded = bridge
-                .inspect(|bridge| bridge.filesystem_permission_requests.clone())
-                .expect("inspect bridge");
-            assert_eq!(
-                recorded,
-                vec![FilesystemPermissionRequest {
-                    vm_id: String::from("vm-symlink"),
-                    path: String::from("/workspace/link.txt"),
-                    access: FilesystemAccess::Symlink,
-                }]
-            );
-        }
-
-        #[test]
-        fn bridge_permissions_map_readlink_operations_to_readlink_access() {
-            let bridge = SharedBridge::new(RecordingBridge::default());
-            let permissions = bridge_permissions(bridge.clone(), "vm-readlink");
-            let check = permissions
-                .filesystem
-                .as_ref()
-                .expect("filesystem permission callback");
-
-            let decision = check(&FsAccessRequest {
-                vm_id: String::from("ignored-by-bridge"),
-                op: FsOperation::ReadLink,
-                path: String::from("/workspace/link.txt"),
-            });
-            assert!(decision.allow);
-
-            let recorded = bridge
-                .inspect(|bridge| bridge.filesystem_permission_requests.clone())
-                .expect("inspect bridge");
-            assert_eq!(
-                recorded,
-                vec![FilesystemPermissionRequest {
-                    vm_id: String::from("vm-readlink"),
-                    path: String::from("/workspace/link.txt"),
-                    access: FilesystemAccess::ReadLink,
-                }]
-            );
-        }
-
-        #[test]
-        fn bridge_permissions_map_truncate_operations_to_truncate_access() {
-            let bridge = SharedBridge::new(RecordingBridge::default());
-            let permissions = bridge_permissions(bridge.clone(), "vm-truncate");
-            let check = permissions
-                .filesystem
-                .as_ref()
-                .expect("filesystem permission callback");
-
-            let decision = check(&FsAccessRequest {
-                vm_id: String::from("ignored-by-bridge"),
-                op: FsOperation::Truncate,
-                path: String::from("/workspace/file.txt"),
-            });
-            assert!(decision.allow);
-
-            let recorded = bridge
-                .inspect(|bridge| bridge.filesystem_permission_requests.clone())
-                .expect("inspect bridge");
-            assert_eq!(
-                recorded,
-                vec![FilesystemPermissionRequest {
-                    vm_id: String::from("vm-truncate"),
-                    path: String::from("/workspace/file.txt"),
-                    access: FilesystemAccess::Truncate,
-                }]
-            );
-        }
-
-        #[test]
-        fn bridge_permissions_fail_closed_for_missing_mount_sensitive_policy() {
-            let bridge = SharedBridge::new(RecordingBridge::default());
-            let permissions = bridge_permissions(bridge, "vm-mount-sensitive");
-            let check = permissions
-                .filesystem
-                .as_ref()
-                .expect("filesystem permission callback");
-
-            let decision = check(&FsAccessRequest {
-                vm_id: String::from("ignored-by-bridge"),
-                op: FsOperation::MountSensitive,
-                path: String::from("/workspace"),
-            });
-
-            assert_kernel_permission_decision(
-                decision,
-                false,
-                Some("missing fs.mount_sensitive permission policy"),
-            );
-        }
-
-        #[test]
-        fn bridge_permissions_propagate_host_permission_outcomes() {
-            let cases = [
-                (secure_exec_bridge::PermissionDecision::allow(), true, None),
-                (
-                    secure_exec_bridge::PermissionDecision::deny("blocked by host"),
-                    false,
-                    Some("blocked by host"),
-                ),
-                (
-                    secure_exec_bridge::PermissionDecision::prompt("prompt required"),
-                    false,
-                    Some("prompt required"),
-                ),
-                (
-                    secure_exec_bridge::PermissionDecision {
-                        verdict: secure_exec_bridge::PermissionVerdict::Deny,
-                        reason: None,
-                    },
-                    false,
-                    Some("denied by host"),
-                ),
-                (
-                    secure_exec_bridge::PermissionDecision {
-                        verdict: secure_exec_bridge::PermissionVerdict::Prompt,
-                        reason: None,
-                    },
-                    false,
-                    Some("permission prompt required"),
-                ),
-            ];
-
-            for (host_decision, expected_allow, expected_reason) in cases {
-                let bridge = SharedBridge::new(RecordingBridge::default());
-                bridge
-                    .inspect(|bridge| {
-                        for _ in 0..4 {
-                            bridge.push_permission_decision(host_decision.clone());
-                        }
-                    })
-                    .expect("seed permission decisions");
-
-                assert_kernel_permission_decision(
-                    bridge.filesystem_decision(
-                        "vm-permissions",
-                        "/workspace/file.txt",
-                        FilesystemAccess::Read,
-                    ),
-                    expected_allow,
-                    expected_reason,
-                );
-                assert_kernel_permission_decision(
-                    bridge.command_decision(
-                        "vm-permissions",
-                        &CommandAccessRequest {
-                            vm_id: String::from("ignored-by-bridge"),
-                            command: String::from("node"),
-                            args: vec![String::from("--version")],
-                            cwd: Some(String::from("/workspace")),
-                            env: BTreeMap::new(),
-                        },
-                    ),
-                    expected_allow,
-                    expected_reason,
-                );
-                assert_kernel_permission_decision(
-                    bridge.environment_decision(
-                        "vm-permissions",
-                        &EnvAccessRequest {
-                            vm_id: String::from("ignored-by-bridge"),
-                            op: EnvironmentOperation::Read,
-                            key: String::from("PATH"),
-                            value: None,
-                        },
-                    ),
-                    expected_allow,
-                    expected_reason,
-                );
-                assert_kernel_permission_decision(
-                    bridge.network_decision(
-                        "vm-permissions",
-                        &NetworkAccessRequest {
-                            vm_id: String::from("ignored-by-bridge"),
-                            op: NetworkOperation::Fetch,
-                            resource: String::from("https://example.test"),
-                        },
-                    ),
-                    expected_allow,
-                    expected_reason,
-                );
-            }
-        }
-
-        #[test]
-        fn bridge_permissions_fail_closed_when_host_permission_checks_error() {
-            let bridge = SharedBridge::new(RecordingBridge::default());
-            bridge
-                .inspect(|bridge| {
-                    for _ in 0..4 {
-                        bridge.push_permission_error("permission backend unavailable");
-                    }
-                })
-                .expect("seed permission errors");
-
-            for decision in [
-                bridge.filesystem_decision(
-                    "vm-permissions",
-                    "/workspace/file.txt",
-                    FilesystemAccess::Read,
-                ),
-                bridge.command_decision(
-                    "vm-permissions",
-                    &CommandAccessRequest {
-                        vm_id: String::from("ignored-by-bridge"),
-                        command: String::from("node"),
-                        args: vec![String::from("--version")],
-                        cwd: Some(String::from("/workspace")),
-                        env: BTreeMap::new(),
-                    },
-                ),
-                bridge.environment_decision(
-                    "vm-permissions",
-                    &EnvAccessRequest {
-                        vm_id: String::from("ignored-by-bridge"),
-                        op: EnvironmentOperation::Read,
-                        key: String::from("PATH"),
-                        value: None,
-                    },
-                ),
-                bridge.network_decision(
-                    "vm-permissions",
-                    &NetworkAccessRequest {
-                        vm_id: String::from("ignored-by-bridge"),
-                        op: NetworkOperation::Fetch,
-                        resource: String::from("https://example.test"),
-                    },
-                ),
-            ] {
-                assert_kernel_permission_decision(
-                    decision,
-                    false,
-                    Some("permission backend unavailable"),
-                );
-            }
-        }
-        #[test]
-        fn vm_limits_config_reads_filesystem_limits() {
-            let config = secure_exec_vm_config::VmLimitsConfig {
-                resources: Some(secure_exec_vm_config::ResourceLimitsConfig {
-                    max_sockets: Some(8),
-                    max_connections: Some(4),
-                    max_socket_buffered_bytes: Some(2048),
-                    max_socket_datagram_queue_len: Some(16),
-                    max_filesystem_bytes: Some(4096),
-                    max_inode_count: Some(128),
-                    max_blocking_read_ms: Some(250),
-                    max_pread_bytes: Some(8192),
-                    max_fd_write_bytes: Some(4096),
-                    max_process_argv_bytes: Some(2048),
-                    max_process_env_bytes: Some(1024),
-                    max_readdir_entries: Some(32),
-                    max_wasm_fuel: Some(5000),
-                    max_wasm_memory_bytes: Some(131_072),
-                    max_wasm_stack_bytes: Some(262_144),
-                    ..Default::default()
-                }),
-                ..Default::default()
-            };
-
-            let limits = crate::limits::vm_limits_from_config(
-                Some(&config),
-                crate::wire::DEFAULT_MAX_FRAME_BYTES,
-            )
-            .expect("parse resource limits");
-            let limits = limits.resources;
-            assert_eq!(limits.max_sockets, Some(8));
-            assert_eq!(limits.max_connections, Some(4));
-            assert_eq!(limits.max_socket_buffered_bytes, Some(2048));
-            assert_eq!(limits.max_socket_datagram_queue_len, Some(16));
-            assert_eq!(limits.max_filesystem_bytes, Some(4096));
-            assert_eq!(limits.max_inode_count, Some(128));
-            assert_eq!(limits.max_blocking_read_ms, Some(250));
-            assert_eq!(limits.max_pread_bytes, Some(8192));
-            assert_eq!(limits.max_fd_write_bytes, Some(4096));
-            assert_eq!(limits.max_process_argv_bytes, Some(2048));
-            assert_eq!(limits.max_process_env_bytes, Some(1024));
-            assert_eq!(limits.max_readdir_entries, Some(32));
-            assert_eq!(limits.max_wasm_fuel, Some(5000));
-            assert_eq!(limits.max_wasm_memory_bytes, Some(131072));
-            assert_eq!(limits.max_wasm_stack_bytes, Some(262144));
-        }
-        fn create_vm_applies_filesystem_permission_descriptors_to_kernel_access() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                capability_permissions(&[
-                    ("fs", PermissionMode::Allow),
-                    ("fs.read", PermissionMode::Deny),
-                ]),
-            )
-            .expect("create vm");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            vm.kernel
-                .filesystem_mut()
-                .write_file("/blocked.txt", b"nope".to_vec())
-                .expect("write should be allowed");
-
-            let read_error = vm
-                .kernel
-                .filesystem_mut()
-                .read_file("/blocked.txt")
-                .expect_err("read should be denied");
-            assert_eq!(read_error.code(), "EACCES");
-        }
-        fn create_vm_without_permissions_defaults_to_static_deny_all() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let response = sidecar
-                .dispatch_blocking(request(
-                    3,
-                    OwnershipScope::session(&connection_id, &session_id),
-                    RequestPayload::CreateVm(CreateVmRequest::legacy_test_config(
-                        GuestRuntimeKind::JavaScript,
-                        std::collections::HashMap::new(),
-                        Default::default(),
-                        None,
-                    )),
-                ))
-                .expect("create vm");
-            let vm_id = created_vm_id(response).expect("vm created");
-            let permission_check_count_before_write = sidecar
-                .with_bridge_mut(|bridge| bridge.permission_checks.len())
-                .expect("read bootstrap permission checks");
-
-            let write_error = sidecar
-                .vms
-                .get_mut(&vm_id)
-                .expect("configured vm")
-                .kernel
-                .filesystem_mut()
-                .write_file("/blocked.txt", b"nope".to_vec())
-                .expect_err("write should be denied");
-            assert_eq!(write_error.code(), "EACCES");
-
-            let permission_check_count_after_write = sidecar
-                .with_bridge_mut(|bridge| bridge.permission_checks.len())
-                .expect("read bridge permission checks");
-            assert_eq!(
-                permission_check_count_after_write, permission_check_count_before_write,
-                "guest writes under default-deny should not fall through to bridge callbacks"
-            );
-        }
-        fn configure_vm_rollback_restore_failure_falls_back_to_static_deny_all() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            sidecar
-                .bridge
-                .queue_set_vm_permissions_result(Ok(()))
-                .expect("queue allow-all bootstrap permission set");
-            sidecar
-                .bridge
-                .queue_set_vm_permissions_result(Err(SidecarError::Bridge(String::from(
-                    "injected restore failure",
-                ))))
-                .expect("queue restore failure");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/workspace"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("host_dir"),
-                                config: json!({
-                                    "readOnly": false,
-                                })
-                                .to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("dispatch configure_vm failure");
-
-            match response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "invalid_state");
-                    let message = rejected.message;
-                    assert!(message.contains("configure_vm rollback failed"));
-                    assert!(message.contains("injected restore failure"));
-                    assert!(message.contains("applied deny-all fallback"));
-                }
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-
-            let stored_permissions = sidecar
-                .bridge
-                .permissions
-                .lock()
-                .expect("read stored permissions")
-                .get(&vm_id)
-                .cloned()
-                .expect("vm permissions tracked");
-            assert_eq!(
-                stored_permissions,
-                secure_exec_sidecar_core::permissions::deny_all_policy()
-            );
-            assert_eq!(
-                sidecar
-                    .vms
-                    .get(&vm_id)
-                    .expect("configured vm")
-                    .configuration
-                    .permissions,
-                secure_exec_sidecar_core::permissions::deny_all_policy()
-            );
-
-            let permission_check_count_before_write = sidecar
-                .with_bridge_mut(|bridge| bridge.permission_checks.len())
-                .expect("read bridge permission checks");
-            let write_error = sidecar
-                .vms
-                .get_mut(&vm_id)
-                .expect("configured vm")
-                .kernel
-                .filesystem_mut()
-                .write_file("/blocked.txt", b"nope".to_vec())
-                .expect_err("write should be denied after failed rollback");
-            assert_eq!(write_error.code(), "EACCES");
-            let permission_check_count_after_write = sidecar
-                .with_bridge_mut(|bridge| bridge.permission_checks.len())
-                .expect("read bridge permission checks");
-            assert_eq!(
-                permission_check_count_after_write, permission_check_count_before_write,
-                "guest writes under deny-all fallback should not fall through to bridge callbacks"
-            );
-        }
-        fn toolkit_registration_rollback_restore_failure_keeps_registry_consistent() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            let original_toolkit =
-                test_toolkit_payload("browser", "Browser automation", "screenshot");
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(original_toolkit.clone()),
-                ))
-                .expect("register original toolkit");
-
-            let (toolkits_before, command_paths_before) = {
-                let vm = sidecar.vms.get(&vm_id).expect("configured vm");
-                (vm.toolkits.clone(), vm.command_guest_paths.clone())
-            };
-
-            sidecar
-                .bridge
-                .queue_set_vm_permissions_result(Ok(()))
-                .expect("queue allow-all toolkit refresh");
-            sidecar
-                .bridge
-                .queue_set_vm_permissions_result(Err(SidecarError::Bridge(String::from(
-                    "injected restore failure",
-                ))))
-                .expect("queue toolkit restore failure");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(test_toolkit_payload(
-                        "browser",
-                        "Replacement browser toolkit",
-                        "click",
-                    )),
-                ))
-                .expect("dispatch toolkit registration failure");
-
-            match response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "invalid_state");
-                    let message = rejected.message;
-                    assert!(message.contains("toolkit registration rollback failed"));
-                    assert!(message.contains("injected restore failure"));
-                    assert!(message.contains("applied deny-all fallback"));
-                }
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-
-            let stored_permissions = sidecar
-                .bridge
-                .permissions
-                .lock()
-                .expect("read stored permissions")
-                .get(&vm_id)
-                .cloned()
-                .expect("vm permissions tracked");
-            assert_eq!(
-                stored_permissions,
-                secure_exec_sidecar_core::permissions::deny_all_policy()
-            );
-
-            let vm = sidecar.vms.get(&vm_id).expect("configured vm");
-            assert_eq!(
-                vm.configuration.permissions,
-                secure_exec_sidecar_core::permissions::deny_all_policy()
-            );
-            assert_eq!(vm.toolkits, toolkits_before);
-            assert_eq!(vm.command_guest_paths, command_paths_before);
-        }
-        fn create_vm_rejects_permission_rules_with_empty_operations() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let response = sidecar
-                .dispatch_blocking(request(
-                    3,
-                    OwnershipScope::session(&connection_id, &session_id),
-                    RequestPayload::CreateVm(CreateVmRequest::legacy_test_config(
-                        GuestRuntimeKind::JavaScript,
-                        std::collections::HashMap::new(),
-                        Default::default(),
-                        Some(PermissionsPolicy {
-                            fs: Some(FsPermissionScope::FsPermissionRuleSet(
-                                FsPermissionRuleSet {
-                                    default: Some(PermissionMode::Deny),
-                                    rules: vec![FsPermissionRule {
-                                        mode: PermissionMode::Allow,
-                                        operations: Vec::new(),
-                                        paths: vec![String::from("*")],
-                                    }],
-                                },
-                            )),
-                            network: None,
-                            child_process: None,
-                            process: None,
-                            env: None,
-                            binding: None,
-                        }),
-                    )),
-                ))
-                .expect("dispatch create vm");
-
-            match response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "invalid_state");
-                    assert!(
-                        rejected
-                            .message
-                            .contains("fs.rules[0].operations must not be empty"),
-                        "unexpected rejection: {rejected:?}"
-                    );
-                }
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-        }
-        fn configure_vm_rejects_permission_rules_with_empty_paths_or_patterns() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            let fs_response = sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: Vec::new(),
-                        software: Vec::new(),
-                        permissions: Some(PermissionsPolicy {
-                            fs: Some(FsPermissionScope::FsPermissionRuleSet(
-                                FsPermissionRuleSet {
-                                    default: Some(PermissionMode::Deny),
-                                    rules: vec![FsPermissionRule {
-                                        mode: PermissionMode::Allow,
-                                        operations: vec![String::from("read")],
-                                        paths: Vec::new(),
-                                    }],
-                                },
-                            )),
-                            network: None,
-                            child_process: None,
-                            process: None,
-                            env: None,
-                            binding: None,
-                        }),
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("dispatch fs configure vm");
-
-            match fs_response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "invalid_state");
-                    assert!(
-                        rejected
-                            .message
-                            .contains("fs.rules[0].paths must not be empty"),
-                        "unexpected rejection: {rejected:?}"
-                    );
-                }
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-
-            let network_response = sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: Vec::new(),
-                        software: Vec::new(),
-                        permissions: Some(PermissionsPolicy {
-                            fs: None,
-                            network: Some(PatternPermissionScope::PatternPermissionRuleSet(
-                                PatternPermissionRuleSet {
-                                    default: Some(PermissionMode::Deny),
-                                    rules: vec![PatternPermissionRule {
-                                        mode: PermissionMode::Allow,
-                                        operations: vec![String::from("dns")],
-                                        patterns: Vec::new(),
-                                    }],
-                                },
-                            )),
-                            child_process: None,
-                            process: None,
-                            env: None,
-                            binding: None,
-                        }),
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("dispatch network configure vm");
-
-            match network_response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "invalid_state");
-                    assert!(
-                        rejected
-                            .message
-                            .contains("network.rules[0].patterns must not be empty"),
-                        "unexpected rejection: {rejected:?}"
-                    );
-                }
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-        }
-        fn configure_vm_mounts_bypass_guest_fs_write_policy() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            sidecar
-                .bridge
-                .set_vm_permissions(
-                    &vm_id,
-                    &crate::wire::permissions_policy_config_from_wire(capability_permissions(&[(
-                        "fs.write",
-                        PermissionMode::Deny,
-                    )])),
-                )
-                .expect("set vm permissions");
-
-            let result = sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/workspace"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("memory"),
-                                config: json!({}).to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("dispatch configure vm");
-
-            match result.response.payload {
-                ResponsePayload::VmConfigured(response) => {
-                    // 1 = just the client mount. No packages configured, so there
-                    // are no granular /opt/agentos leaf mounts (added per package).
-                    assert_eq!(response.applied_mounts, 1);
-                }
-                other => panic!("expected configured response, got {other:?}"),
-            }
-        }
-        fn guest_filesystem_link_and_truncate_preserve_hard_link_semantics() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            for (request_id, payload) in [
-                (
-                    4,
-                    GuestFilesystemCallRequest {
-                        operation: GuestFilesystemOperation::Mkdir,
-                        path: String::from("/workspace"),
-                        destination_path: None,
-                        target: None,
-                        content: None,
-                        encoding: None,
-                        recursive: true,
-            max_depth: None,
-                        mode: None,
-                        uid: None,
-                        gid: None,
-                        atime_ms: None,
-                        mtime_ms: None,
-                        len: None,
-                        offset: None,
-                    },
-                ),
-                (
-                    5,
-                    GuestFilesystemCallRequest {
-                        operation: GuestFilesystemOperation::WriteFile,
-                        path: String::from("/workspace/note.txt"),
-                        destination_path: None,
-                        target: None,
-                        content: Some(String::from("stdio-sidecar-fs")),
-                        encoding: None,
-                        recursive: false,
-            max_depth: None,
-                        mode: None,
-                        uid: None,
-                        gid: None,
-                        atime_ms: None,
-                        mtime_ms: None,
-                        len: None,
-                        offset: None,
-                    },
-                ),
-                (
-                    6,
-                    GuestFilesystemCallRequest {
-                        operation: GuestFilesystemOperation::Link,
-                        path: String::from("/workspace/note.txt"),
-                        destination_path: Some(String::from("/workspace/hard.txt")),
-                        target: None,
-                        content: None,
-                        encoding: None,
-                        recursive: false,
-            max_depth: None,
-                        mode: None,
-                        uid: None,
-                        gid: None,
-                        atime_ms: None,
-                        mtime_ms: None,
-                        len: None,
-                        offset: None,
-                    },
-                ),
-                (
-                    7,
-                    GuestFilesystemCallRequest {
-                        operation: GuestFilesystemOperation::Truncate,
-                        path: String::from("/workspace/hard.txt"),
-                        destination_path: None,
-                        target: None,
-                        content: None,
-                        encoding: None,
-                        recursive: false,
-            max_depth: None,
-                        mode: None,
-                        uid: None,
-                        gid: None,
-                        atime_ms: None,
-                        mtime_ms: None,
-                        len: Some(5),
-                        offset: None,
-                    },
-                ),
-                (
-                    8,
-                    GuestFilesystemCallRequest {
-                        operation: GuestFilesystemOperation::Utimes,
-                        path: String::from("/workspace/note.txt"),
-                        destination_path: None,
-                        target: None,
-                        content: None,
-                        encoding: None,
-                        recursive: false,
-            max_depth: None,
-                        mode: None,
-                        uid: None,
-                        gid: None,
-                        atime_ms: Some(1_700_000_000_000),
-                        mtime_ms: Some(1_710_000_000_000),
-                        len: None,
-                        offset: None,
-                    },
-                ),
-            ] {
-                sidecar
-                    .dispatch_blocking(request(
-                        request_id,
-                        OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                        RequestPayload::GuestFilesystemCall(payload),
-                    ))
-                    .expect("dispatch guest filesystem request");
-            }
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            let note_stat = vm
-                .kernel
-                .stat("/workspace/note.txt")
-                .expect("stat source after truncate");
-            let hard_stat = vm
-                .kernel
-                .stat("/workspace/hard.txt")
-                .expect("stat hard link after truncate");
-            let note = vm
-                .kernel
-                .read_file("/workspace/note.txt")
-                .expect("read source after truncate");
-            let hard = vm
-                .kernel
-                .read_file("/workspace/hard.txt")
-                .expect("read hard link after truncate");
-
-            assert_eq!(note, b"stdio".to_vec());
-            assert_eq!(hard, b"stdio".to_vec());
-            assert_eq!(note_stat.size, 5);
-            assert_eq!(hard_stat.size, 5);
-            assert_eq!(note_stat.ino, hard_stat.ino);
-            assert_eq!(note_stat.nlink, 2);
-            assert_eq!(hard_stat.nlink, 2);
-            assert_eq!(note_stat.mtime_ms, 1_710_000_000_000);
-            assert_eq!(hard_stat.mtime_ms, 1_710_000_000_000);
-        }
-        fn configure_vm_sensitive_mounts_bypass_guest_fs_mount_sensitive_policy() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            sidecar
-                .bridge
-                .set_vm_permissions(
-                    &vm_id,
-                    &crate::wire::permissions_policy_config_from_wire(capability_permissions(&[
-                        ("fs.write", PermissionMode::Allow),
-                        ("fs.mount_sensitive", PermissionMode::Deny),
-                    ])),
-                )
-                .expect("set vm permissions");
-
-            let result = sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/etc"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("memory"),
-                                config: json!({}).to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("dispatch configure vm");
-
-            match result.response.payload {
-                ResponsePayload::VmConfigured(response) => {
-                    // 1 = just the client mount. No packages configured, so there
-                    // are no granular /opt/agentos leaf mounts (added per package).
-                    assert_eq!(response.applied_mounts, 1);
-                }
-                other => panic!("expected configured response, got {other:?}"),
-            }
-        }
-        fn guest_mount_request_default_deny_rejects_without_changing_operator_mounts() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let response = sidecar
-                .dispatch_blocking(request(
-                    3,
-                    OwnershipScope::session(&connection_id, &session_id),
-                    RequestPayload::CreateVm(CreateVmRequest::legacy_test_config(
-                        GuestRuntimeKind::JavaScript,
-                        std::collections::HashMap::new(),
-                        Default::default(),
-                        None,
-                    )),
-                ))
-                .expect("create vm");
-            let vm_id = created_vm_id(response).expect("vm created");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::BootstrapRootFilesystem(BootstrapRootFilesystemRequest {
-                        entries: vec![RootFilesystemEntry {
-                            path: String::from("/guest-mount"),
-                            kind: RootFilesystemEntryKind::Directory,
-                            ..Default::default()
-                        }],
-                    }),
-                ))
-                .expect("bootstrap guest mount directory");
-
-            let configure_response = sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/workspace"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("memory"),
-                                config: json!({}).to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure operator mount");
-
-            match configure_response.response.payload {
-                ResponsePayload::VmConfigured(configured) => {
-                    // 1 = just the client mount. No packages configured, so there
-                    // are no granular /opt/agentos leaf mounts (added per package).
-                    assert_eq!(configured.applied_mounts, 1);
-                }
-                other => panic!("expected configured response, got {other:?}"),
-            }
-
-            let operator_mounts = sidecar
-                .vms
-                .get(&vm_id)
-                .expect("configured vm")
-                .kernel
-                .mounted_filesystems();
-            assert_eq!(
-                operator_mounts.len(),
-                2,
-                "root + operator-applied mount (no packages configured, so no /opt/agentos leaf mounts)"
-            );
-
-            let mount_error = sidecar
-                .vms
-                .get_mut(&vm_id)
-                .expect("configured vm")
-                .kernel
-                .mount_filesystem(
-                    "/guest-mount",
-                    MemoryFileSystem::new(),
-                    MountOptions::new("memory"),
-                )
-                .expect_err("guest mount under default-deny should be rejected");
-            assert_eq!(mount_error.code(), "EACCES");
-
-            let mounts_after_guest_request = sidecar
-                .vms
-                .get(&vm_id)
-                .expect("configured vm")
-                .kernel
-                .mounted_filesystems();
-            assert_eq!(mounts_after_guest_request, operator_mounts);
-        }
-        fn scoped_host_filesystem_unscoped_target_requires_exact_guest_root_prefix() {
-            let filesystem = ScopedHostFilesystem::new(
-                HostFilesystem::new(SharedBridge::new(RecordingBridge::default()), "vm-1"),
-                "/data",
-            );
-
-            assert_eq!(
-                filesystem.unscoped_target(String::from("/database")),
-                "/database"
-            );
-            assert_eq!(
-                filesystem.unscoped_target(String::from("/data/nested.txt")),
-                "/nested.txt"
-            );
-            assert_eq!(filesystem.unscoped_target(String::from("/data")), "/");
-        }
-        fn scoped_host_filesystem_realpath_preserves_paths_outside_guest_root() {
-            let bridge = SharedBridge::new(RecordingBridge::default());
-            bridge
-                .inspect(|bridge| {
-                    secure_exec_bridge::FilesystemBridge::symlink(
-                        bridge,
-                        SymlinkRequest {
-                            vm_id: String::from("vm-1"),
-                            target_path: String::from("/database"),
-                            link_path: String::from("/data/alias"),
-                        },
-                    )
-                    .expect("seed alias symlink");
-                })
-                .expect("inspect bridge");
-
-            let filesystem =
-                ScopedHostFilesystem::new(HostFilesystem::new(bridge, "vm-1"), "/data");
-
-            assert_eq!(
-                filesystem.realpath("/alias").expect("resolve alias"),
-                "/database"
-            );
-        }
-        fn host_filesystem_realpath_fails_closed_on_circular_symlinks() {
-            let bridge = SharedBridge::new(RecordingBridge::default());
-            bridge
-                .inspect(|bridge| {
-                    secure_exec_bridge::FilesystemBridge::symlink(
-                        bridge,
-                        SymlinkRequest {
-                            vm_id: String::from("vm-1"),
-                            target_path: String::from("/loop-b.txt"),
-                            link_path: String::from("/loop-a.txt"),
-                        },
-                    )
-                    .expect("seed loop-a symlink");
-                    secure_exec_bridge::FilesystemBridge::symlink(
-                        bridge,
-                        SymlinkRequest {
-                            vm_id: String::from("vm-1"),
-                            target_path: String::from("/loop-a.txt"),
-                            link_path: String::from("/loop-b.txt"),
-                        },
-                    )
-                    .expect("seed loop-b symlink");
-                })
-                .expect("inspect bridge");
-
-            let filesystem = HostFilesystem::new(bridge, "vm-1");
-            let error = filesystem
-                .realpath("/loop-a.txt")
-                .expect_err("circular symlink chain should fail closed");
-            assert_eq!(error.code(), "ELOOP");
-        }
-        fn configure_vm_host_dir_plugin_fails_closed_for_escape_symlinks() {
-            let host_dir = temp_dir("secure-exec-sidecar-host-dir-escape");
-            std::os::unix::fs::symlink("/etc", host_dir.join("escape"))
-                .expect("seed escape symlink");
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/workspace"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("host_dir"),
-                                config: json!({
-                                    "hostPath": host_dir,
-                                    "readOnly": false,
-                                })
-                                .to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure host_dir mount");
-
-            let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-            let error = vm
-                .kernel
-                .filesystem_mut()
-                .read_file("/workspace/escape/hostname")
-                .expect_err("escape symlink should fail closed");
-            assert_eq!(error.code(), "EACCES");
-
-            fs::remove_dir_all(host_dir).expect("remove temp dir");
-        }
-        fn execute_starts_python_runtime_instead_of_rejecting_it() {
-            assert_node_available();
-
-            let cache_root = temp_dir("secure-exec-sidecar-python-cache");
-
-            acquire_sidecar_runtime_test_lock();
-            let mut sidecar = NativeSidecar::with_config(
-                RecordingBridge::default(),
-                NativeSidecarConfig {
-                    sidecar_id: String::from("sidecar-python-test"),
-                    compile_cache_root: Some(cache_root),
-                    expected_auth_token: Some(String::from(TEST_AUTH_TOKEN)),
-                    ..NativeSidecarConfig::default()
-                },
-            )
-            .expect("create sidecar");
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            let result = sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::Execute(crate::protocol::ExecuteRequest {
-                        process_id: String::from("proc-python"),
-                        command: None,
-                        runtime: Some(GuestRuntimeKind::Python),
-                        entrypoint: Some(String::from("print('hello from python')")),
-                        args: Vec::new(),
-                        env: std::collections::HashMap::new(),
-                        cwd: None,
-                        wasm_permission_tier: None,
-                    }),
-                ))
-                .expect("dispatch python execute");
-
-            match result.response.payload {
-                ResponsePayload::ProcessStarted(response) => {
-                    assert_eq!(response.process_id, "proc-python");
-                    assert!(
-                        response.pid.is_some(),
-                        "python runtime should expose a child pid"
-                    );
-                }
-                other => panic!("unexpected execute response: {other:?}"),
-            }
-
-            let vm = sidecar.vms.get(&vm_id).expect("python vm");
-            let process = vm
-                .active_processes
-                .get("proc-python")
-                .expect("python process should be tracked");
-            assert_eq!(process.runtime, GuestRuntimeKind::Python);
-            match &process.execution {
-                ActiveExecution::Python(_) => {}
-                other => panic!("unexpected active execution variant: {other:?}"),
-            }
-        }
-        fn command_resolution_executes_wasm_command_from_sidecar_path() {
-            let command_root = temp_dir("secure-exec-sidecar-command-resolution-wasm");
-            write_fixture(
-                &command_root.join("hello"),
-                wat::parse_str(
-                    r#"
-(module
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 16) "wasm:ready\n")
-  (func $_start (export "_start")
-    (i32.store (i32.const 0) (i32.const 16))
-    (i32.store (i32.const 4) (i32.const 11))
-    (drop
-      (call $fd_write
-        (i32.const 1)
-        (i32.const 0)
-        (i32.const 1)
-        (i32.const 32)
-      )
-    )
-  )
-)
-"#,
-                )
-                .expect("compile wasm fixture"),
-            );
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/__secure_exec/commands/0"),
-                            read_only: true,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("host_dir"),
-                                config: json!({
-                                    "hostPath": command_root,
-                                    "readOnly": true,
-                                })
-                                .to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure command mount");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::Execute(crate::protocol::ExecuteRequest {
-                        process_id: String::from("proc-command-wasm"),
-                        command: Some(String::from("hello")),
-                        runtime: None,
-                        entrypoint: None,
-                        args: Vec::new(),
-                        env: std::collections::HashMap::new(),
-                        cwd: None,
-                        wasm_permission_tier: None,
-                    }),
-                ))
-                .expect("dispatch wasm command execute");
-
-            match response.response.payload {
-                ResponsePayload::ProcessStarted(response) => {
-                    assert_eq!(response.process_id, "proc-command-wasm");
-                }
-                other => panic!("unexpected execute response: {other:?}"),
-            }
-
-            let (stdout, stderr, exit_code) =
-                drain_process_output(&mut sidecar, &vm_id, "proc-command-wasm");
-
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            assert!(stdout.contains("wasm:ready"), "stdout: {stdout}");
-        }
-
-        fn wasm_command_timeout_is_enforced_by_sidecar_poll_path() {
-            // Timeout-dependent: an infinite-loop wasm module whose termination is
-            // enforced by the sidecar poll path only after ~30s. Gate it to the
-            // nightly timing lane rather than pay ~30s per PR. See CLAUDE.md > Testing.
-            if !run_timing_sensitive_tests() {
-                return;
-            }
-            let command_root = temp_dir("secure-exec-sidecar-command-resolution-wasm-timeout");
-            write_fixture(
-                &command_root.join("spin"),
-                wat::parse_str(
-                    r#"
-(module
-  (memory (export "memory") 1)
-  (func $_start (export "_start")
-    (loop $spin
-      br $spin
-    )
-  )
-)
-"#,
-                )
-                .expect("compile infinite-loop wasm fixture"),
-            );
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([(String::from("resource.max_wasm_fuel"), String::from("25"))]),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/__secure_exec/commands/0"),
-                            read_only: true,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("host_dir"),
-                                config: json!({
-                                    "hostPath": command_root,
-                                    "readOnly": true,
-                                })
-                                .to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure command mount");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::Execute(crate::protocol::ExecuteRequest {
-                        process_id: String::from("proc-command-wasm-timeout"),
-                        command: Some(String::from("spin")),
-                        runtime: None,
-                        entrypoint: None,
-                        args: Vec::new(),
-                        env: std::collections::HashMap::new(),
-                        cwd: None,
-                        wasm_permission_tier: None,
-                    }),
-                ))
-                .expect("dispatch wasm command execute");
-
-            match response.response.payload {
-                ResponsePayload::ProcessStarted(response) => {
-                    assert_eq!(response.process_id, "proc-command-wasm-timeout");
-                }
-                other => panic!("unexpected execute response: {other:?}"),
-            }
-
-            let (stdout, stderr, exit_code) =
-                drain_process_output(&mut sidecar, &vm_id, "proc-command-wasm-timeout");
-
-            assert_eq!(exit_code, Some(124), "stdout: {stdout} stderr: {stderr}");
-            assert!(
-                stderr.contains("fuel budget exhausted"),
-                "stderr should mention timeout: {stderr}"
-            );
-        }
-
-        fn wasm_fd_write_sync_rpc_keeps_stdout_isolated_per_vm() {
-            let cwd_a = temp_dir("secure-exec-sidecar-wasm-stdio-vm-a");
-            let cwd_b = temp_dir("secure-exec-sidecar-wasm-stdio-vm-b");
-            write_fixture(&cwd_a.join("guest.wasm"), wasm_stdout_module("VM_A_MARKER"));
-            write_fixture(&cwd_b.join("guest.wasm"), wasm_stdout_module("VM_B_MARKER"));
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_a = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm A");
-            let vm_b = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm B");
-
-            for (request_id, vm_id, process_id, entrypoint) in [
-                (6, &vm_a, "proc-wasm-a", cwd_a.join("guest.wasm")),
-                (7, &vm_b, "proc-wasm-b", cwd_b.join("guest.wasm")),
-            ] {
-                let response = sidecar
-                    .dispatch_blocking(request(
-                        request_id,
-                        OwnershipScope::vm(&connection_id, &session_id, vm_id),
-                        RequestPayload::Execute(crate::protocol::ExecuteRequest {
-                            process_id: String::from(process_id),
-                            command: None,
-                            runtime: Some(GuestRuntimeKind::WebAssembly),
-                            entrypoint: Some(entrypoint.to_string_lossy().into_owned()),
-                            args: Vec::new(),
-                            env: std::collections::HashMap::new(),
-                            cwd: None,
-                            wasm_permission_tier: None,
-                        }),
-                    ))
-                    .expect("dispatch wasm execute");
-
-                match response.response.payload {
-                    ResponsePayload::ProcessStarted(response) => {
-                        assert_eq!(response.process_id, process_id);
-                    }
-                    other => panic!("unexpected execute response: {other:?}"),
-                }
-            }
-
-            let (stdout_a, stderr_a, exit_a) =
-                drain_process_output(&mut sidecar, &vm_a, "proc-wasm-a");
-            let (stdout_b, stderr_b, exit_b) =
-                drain_process_output(&mut sidecar, &vm_b, "proc-wasm-b");
-
-            assert_eq!(exit_a, Some(0), "stderr A: {stderr_a}");
-            assert_eq!(exit_b, Some(0), "stderr B: {stderr_b}");
-            assert!(stderr_a.is_empty(), "unexpected stderr A: {stderr_a}");
-            assert!(stderr_b.is_empty(), "unexpected stderr B: {stderr_b}");
-            assert!(
-                stdout_a.contains("VM_A_MARKER"),
-                "stdout A missing marker: {stdout_a:?}"
-            );
-            assert!(
-                !stdout_a.contains("VM_B_MARKER"),
-                "stdout A leaked B marker: {stdout_a:?}"
-            );
-            assert!(
-                stdout_b.contains("VM_B_MARKER"),
-                "stdout B missing marker: {stdout_b:?}"
-            );
-            assert!(
-                !stdout_b.contains("VM_A_MARKER"),
-                "stdout B leaked A marker: {stdout_b:?}"
-            );
-        }
-        fn wasm_path_open_read_goes_through_kernel_filesystem_permissions() {
-            let cwd = temp_dir("secure-exec-sidecar-wasm-fs-permissions");
-            write_fixture(
-                &cwd.join("guest.wasm"),
-                wasm_expect_read_errno_module("secret.txt", 2),
-            );
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                capability_permissions(&[
-                    ("fs", PermissionMode::Allow),
-                    ("fs.read", PermissionMode::Deny),
-                    ("child_process.spawn", PermissionMode::Allow),
-                ]),
-            )
-            .expect("create vm");
-
-            sidecar
-                .vms
-                .get_mut(&vm_id)
-                .expect("wasm vm")
-                .kernel
-                .filesystem_mut()
-                .write_file("/secret.txt", b"should-not-read".to_vec())
-                .expect("seed denied-read fixture");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    6,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::Execute(crate::protocol::ExecuteRequest {
-                        process_id: String::from("proc-wasm-fs-permission"),
-                        command: None,
-                        runtime: Some(GuestRuntimeKind::WebAssembly),
-                        entrypoint: Some(cwd.join("guest.wasm").to_string_lossy().into_owned()),
-                        args: Vec::new(),
-                        env: std::collections::HashMap::new(),
-                        cwd: Some(String::from("/")),
-                        wasm_permission_tier: None,
-                    }),
-                ))
-                .expect("dispatch wasm execute");
-
-            match response.response.payload {
-                ResponsePayload::ProcessStarted(response) => {
-                    assert_eq!(response.process_id, "proc-wasm-fs-permission");
-                }
-                other => panic!("unexpected execute response: {other:?}"),
-            }
-
-            let (stdout, stderr, exit_code) =
-                drain_process_output(&mut sidecar, &vm_id, "proc-wasm-fs-permission");
-
-            assert_eq!(exit_code, Some(0), "stdout: {stdout} stderr: {stderr}");
-            assert!(stdout.is_empty(), "unexpected stdout: {stdout}");
-            assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-        }
-
-        fn wasm_path_open_write_goes_through_kernel_filesystem_permissions() {
-            let cwd = temp_dir("secure-exec-sidecar-wasm-fs-write-permissions");
-            write_fixture(
-                &cwd.join("guest.wasm"),
-                wasm_expect_write_open_errno_module("created.txt", 2),
-            );
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                capability_permissions(&[
-                    ("fs", PermissionMode::Allow),
-                    ("fs.read", PermissionMode::Allow),
-                    ("fs.write", PermissionMode::Deny),
-                    ("child_process.spawn", PermissionMode::Allow),
-                ]),
-            )
-            .expect("create vm");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    6,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::Execute(crate::protocol::ExecuteRequest {
-                        process_id: String::from("proc-wasm-fs-write-permission"),
-                        command: None,
-                        runtime: Some(GuestRuntimeKind::WebAssembly),
-                        entrypoint: Some(cwd.join("guest.wasm").to_string_lossy().into_owned()),
-                        args: Vec::new(),
-                        env: std::collections::HashMap::new(),
-                        cwd: Some(String::from("/")),
-                        wasm_permission_tier: None,
-                    }),
-                ))
-                .expect("dispatch wasm execute");
-
-            match response.response.payload {
-                ResponsePayload::ProcessStarted(response) => {
-                    assert_eq!(response.process_id, "proc-wasm-fs-write-permission");
-                }
-                other => panic!("unexpected execute response: {other:?}"),
-            }
-
-            let (stdout, stderr, exit_code) =
-                drain_process_output(&mut sidecar, &vm_id, "proc-wasm-fs-write-permission");
-
-            assert_eq!(exit_code, Some(0), "stdout: {stdout} stderr: {stderr}");
-            assert!(stdout.is_empty(), "unexpected stdout: {stdout}");
-            assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-            assert!(
-                !sidecar
-                    .vms
-                    .get_mut(&vm_id)
-                    .expect("wasm vm")
-                    .kernel
-                    .filesystem_mut()
-                    .exists("/created.txt")
-                    .expect("check denied-created file"),
-                "denied WASI write open should not create a kernel file"
-            );
-        }
-
-        fn wasm_fd_write_sync_rpc_routes_stdout_into_kernel_pty() {
-            let cwd = temp_dir("secure-exec-sidecar-wasm-stdio-pty");
-            write_fixture(&cwd.join("guest.wasm"), wasm_stdout_module("PTY_MARKER"));
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            let master_fd =
-                start_fake_wasm_process(&mut sidecar, &vm_id, &cwd, "proc-wasm-pty", true)
-                    .expect("attach stdout pty");
-
-            let mut pty_text = None;
-            let mut stderr = Vec::new();
-            let mut exit_code = None;
-
-            for _ in 0..64 {
-                let next_event = {
-                    let vm = sidecar.vms.get_mut(&vm_id).expect("active vm");
-                    vm.active_processes
-                        .get_mut("proc-wasm-pty")
-                        .and_then(|process| {
-                            if let Some(event) = process.pending_execution_events.pop_front() {
-                                Some(event)
-                            } else {
-                                process
-                                    .execution
-                                    .poll_event_blocking(Duration::from_secs(5))
-                                    .expect("poll wasm pty process event")
-                            }
-                        })
-                };
-                let Some(event) = next_event else {
-                    break;
-                };
-
-                if let ActiveExecutionEvent::Stderr(chunk) = &event {
-                    append_process_stream_chunk(&mut stderr, chunk, "proc-wasm-pty", "stderr");
-                }
-                if let ActiveExecutionEvent::Exited(code) = &event {
-                    exit_code = Some(*code);
-                }
-
-                sidecar
-                    .handle_execution_event(&vm_id, "proc-wasm-pty", event)
-                    .expect("handle wasm pty process event");
-
-                if pty_text.is_none() {
-                    let maybe_pty = {
-                        let vm = sidecar.vms.get_mut(&vm_id).expect("wasm vm");
-                        let kernel_pid = vm
-                            .active_processes
-                            .get("proc-wasm-pty")
-                            .map(|process| process.kernel_pid)
-                            .unwrap_or_else(|| {
-                                panic!("proc-wasm-pty should stay active until exit is handled")
-                            });
-                        let ready = vm
-                            .kernel
-                            .poll_targets(
-                                EXECUTION_DRIVER_NAME,
-                                kernel_pid,
-                                vec![PollTargetEntry::fd(master_fd, POLLIN)],
-                                0,
-                            )
-                            .expect("poll pty master");
-                        if ready.ready_count == 0 {
-                            None
-                        } else {
-                            Some(
-                                String::from_utf8(
-                                    vm.kernel
-                                        .fd_read(EXECUTION_DRIVER_NAME, kernel_pid, master_fd, 64)
-                                        .expect("read pty master"),
-                                )
-                                .expect("pty output utf8"),
-                            )
-                        }
-                    };
-                    if maybe_pty.is_some() {
-                        pty_text = maybe_pty;
-                    }
-                }
-
-                if exit_code.is_some() && pty_text.is_some() {
-                    break;
-                }
-            }
-
-            let pty_text = pty_text.expect("pty master should receive stdout");
-            let stderr = process_stream_to_string(&stderr);
-            assert!(
-                pty_text.replace("\r\n", "\n").contains("PTY_MARKER\n"),
-                "pty output should contain routed marker: {pty_text:?}"
-            );
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            assert!(stderr.is_empty(), "unexpected stderr: {stderr}");
-        }
-        fn javascript_child_process_searches_path_for_mounted_wasm_commands() {
-            let command_root = temp_dir("secure-exec-sidecar-command-path-root");
-            for command in ["sh", "ls", "cat", "grep", "echo", "sed"] {
-                write_fixture(&command_root.join(command), b"placeholder");
-            }
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/__secure_exec/commands/0"),
-                            read_only: true,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("host_dir"),
-                                config: json!({
-                                    "hostPath": command_root,
-                                    "readOnly": true,
-                                })
-                                .to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure command-path mounts");
-
-            let vm = sidecar.vms.get(&vm_id).expect("configured vm");
-            let path = vm
-                .guest_env
-                .get("PATH")
-                .expect("configured PATH should exist");
-            let path_entries = path.split(':').collect::<Vec<_>>();
-            assert!(
-                path_entries
-                    .first()
-                    .is_some_and(|entry| *entry == "/__secure_exec/commands/0"),
-                "PATH should prioritize mounted command root: {path}"
-            );
-            assert!(
-                path_entries.contains(&"/__secure_exec/commands/0"),
-                "PATH should include mounted command root: {path}"
-            );
-
-            for (command, request, expected_process_args) in [
-                (
-                    "sh",
-                    crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("sh"),
-                        args: vec![String::from("-c"), String::from("echo hello")],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                    vec![
-                        String::from("sh"),
-                        String::from("-c"),
-                        String::from("cd '/workspace' && echo hello"),
-                    ],
-                ),
-                (
-                    "ls",
-                    crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("ls"),
-                        args: vec![String::from("/")],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                    vec![String::from("ls"), String::from("/")],
-                ),
-                (
-                    "cat",
-                    crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("cat"),
-                        args: vec![String::from("/tmp/file")],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                    vec![String::from("cat"), String::from("/tmp/file")],
-                ),
-                (
-                    "grep",
-                    crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("grep"),
-                        args: vec![String::from("pattern"), String::from("/tmp/file")],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                    vec![
-                        String::from("grep"),
-                        String::from("pattern"),
-                        String::from("/tmp/file"),
-                    ],
-                ),
-                (
-                    "echo",
-                    crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("echo"),
-                        args: vec![String::from("hello")],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                    vec![String::from("echo"), String::from("hello")],
-                ),
-                (
-                    "sed",
-                    crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("sed"),
-                        args: vec![String::from("s/a/b/"), String::from("/tmp/file")],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                    vec![
-                        String::from("sed"),
-                        String::from("s/a/b/"),
-                        String::from("/tmp/file"),
-                    ],
-                ),
-            ] {
-                let resolved = sidecar
-                    .resolve_javascript_child_process_execution(
-                        vm,
-                        &vm.guest_env,
-                        &vm.guest_cwd,
-                        &vm.host_cwd,
-                        &request,
-                    )
-                    .unwrap_or_else(|error| panic!("failed to resolve {command}: {error}"));
-                assert_eq!(
-                    resolved.runtime,
-                    GuestRuntimeKind::WebAssembly,
-                    "{command} should resolve as a WASM command"
-                );
-                assert_eq!(
-                    resolved.process_args, expected_process_args,
-                    "{command} process args mismatch: {resolved:?}"
-                );
-                assert!(
-                    resolved.entrypoint.ends_with(&format!("/{command}")),
-                    "{command} entrypoint should end with /{command}: {}",
-                    resolved.entrypoint
-                );
-            }
-
-            let missing = sidecar.resolve_javascript_child_process_execution(
-                vm,
-                &vm.guest_env,
-                &vm.guest_cwd,
-                &vm.host_cwd,
-                &crate::protocol::JavascriptChildProcessSpawnRequest {
-                    command: String::from("definitely-not-a-command"),
-                    args: Vec::new(),
-                    options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                },
-            );
-            let error = missing.expect_err("missing command should fail");
-            assert!(
-                error
-                    .to_string()
-                    .contains("command not found: definitely-not-a-command"),
-                "missing command error should mention the command: {error}"
-            );
-        }
-        fn javascript_child_process_shell_mode_without_guest_sh_fails_loudly() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            let vm = sidecar.vms.get(&vm_id).expect("created vm");
-            assert!(
-                !vm.command_guest_paths.contains_key("sh"),
-                "test VM must not provide a guest sh command"
-            );
-
-            let request = crate::protocol::JavascriptChildProcessSpawnRequest {
-                command: String::from("printf hi > out.txt"),
-                args: Vec::new(),
-                options: crate::protocol::JavascriptChildProcessSpawnOptions {
-                    shell: true,
-                    ..Default::default()
-                },
-            };
-            let error = sidecar
-                .resolve_javascript_child_process_execution(
-                    vm,
-                    &vm.guest_env,
-                    &vm.guest_cwd,
-                    &vm.host_cwd,
-                    &request,
-                )
-                .expect_err("shell-mode command without guest sh must fail instead of tokenizing");
-            assert!(
-                error.to_string().contains("/bin/sh"),
-                "missing-sh error should mention /bin/sh: {error}"
-            );
-        }
-        fn javascript_child_process_spawns_path_resolved_tool_commands() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(test_toolkit_payload(
-                        "math",
-                        "Math utilities",
-                        "add",
-                    )),
-                ))
-                .expect("register math toolkit");
-
-            let cwd = temp_dir("secure-exec-sidecar-tool-command-child-process");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-tool-child");
-
-            let spawned = sidecar
-                .spawn_javascript_child_process(
-                    &vm_id,
-                    "proc-js-tool-child",
-                    crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("/usr/local/bin/agentos-math"),
-                        args: vec![
-                            String::from("add"),
-                            String::from("--a"),
-                            String::from("2"),
-                            String::from("--b"),
-                            String::from("3"),
-                        ],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                )
-                .expect("spawn toolkit child process");
-
-            assert_eq!(
-                spawned["command"],
-                Value::String(String::from("agentos-math"))
-            );
-            assert_eq!(
-                spawned["args"],
-                json!(["agentos-math", "add", "--a", "2", "--b", "3"])
-            );
-        }
-        fn javascript_child_process_resolves_path_resolved_tool_commands_as_tools() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    6,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(test_toolkit_payload(
-                        "math",
-                        "Math utilities",
-                        "add",
-                    )),
-                ))
-                .expect("register math toolkit");
-
-            let vm = sidecar.vms.get(&vm_id).expect("configured vm");
-            let resolved = sidecar
-                .resolve_javascript_child_process_execution(
-                    vm,
-                    &vm.guest_env,
-                    &vm.guest_cwd,
-                    &vm.host_cwd,
-                    &crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("/usr/local/bin/agentos-math"),
-                        args: vec![
-                            String::from("add"),
-                            String::from("--a"),
-                            String::from("2"),
-                            String::from("--b"),
-                            String::from("3"),
-                        ],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                )
-                .expect("resolve toolkit child process");
-
-            assert!(
-                resolved.tool_command,
-                "tool command should stay on the tool path"
-            );
-            assert_eq!(resolved.command, "agentos-math");
-            assert_eq!(
-                resolved.process_args,
-                vec![
-                    String::from("agentos-math"),
-                    String::from("add"),
-                    String::from("--a"),
-                    String::from("2"),
-                    String::from("--b"),
-                    String::from("3"),
-                ]
-            );
-        }
-        fn javascript_child_process_spawns_internal_tool_command_paths() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    7,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(test_toolkit_payload(
-                        "math",
-                        "Math utilities",
-                        "add",
-                    )),
-                ))
-                .expect("register math toolkit");
-
-            let cwd = temp_dir("secure-exec-sidecar-tool-command-sync-rpc");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-tool-rpc");
-
-            let spawned = sidecar
-                .spawn_javascript_child_process(
-                    &vm_id,
-                    "proc-js-tool-rpc",
-                    crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("/__secure_exec/commands/0/agentos-math"),
-                        args: vec![
-                            String::from("add"),
-                            String::from("--a"),
-                            String::from("2"),
-                            String::from("--b"),
-                            String::from("3"),
-                        ],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                )
-                .expect("spawn toolkit child process over internal command path");
-
-            assert_eq!(
-                spawned["command"],
-                Value::String(String::from("agentos-math"))
-            );
-            assert_eq!(
-                spawned["args"],
-                json!(["agentos-math", "add", "--a", "2", "--b", "3"])
-            );
-        }
-        fn javascript_child_process_resolves_internal_tool_command_paths_as_tools() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    8,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(test_toolkit_payload(
-                        "math",
-                        "Math utilities",
-                        "add",
-                    )),
-                ))
-                .expect("register math toolkit");
-
-            let vm = sidecar.vms.get(&vm_id).expect("configured vm");
-            let resolved = sidecar
-                .resolve_javascript_child_process_execution(
-                    vm,
-                    &vm.guest_env,
-                    &vm.guest_cwd,
-                    &vm.host_cwd,
-                    &crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("/__secure_exec/commands/0/agentos-math"),
-                        args: vec![
-                            String::from("add"),
-                            String::from("--a"),
-                            String::from("2"),
-                            String::from("--b"),
-                            String::from("3"),
-                        ],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                )
-                .expect("resolve toolkit child process");
-
-            assert!(
-                resolved.tool_command,
-                "tool command should stay on the tool path"
-            );
-            assert_eq!(resolved.command, "agentos-math");
-            assert_eq!(
-                resolved.process_args,
-                vec![
-                    String::from("agentos-math"),
-                    String::from("add"),
-                    String::from("--a"),
-                    String::from("2"),
-                    String::from("--b"),
-                    String::from("3"),
-                ]
-            );
-        }
-        fn tools_register_host_callbacks_rejects_duplicate_names_without_replacing_existing_toolkit(
-        ) {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            let original_toolkit = test_toolkit_payload("math", "Math utilities", "add");
-            sidecar
-                .dispatch_blocking(request(
-                    9,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(original_toolkit.clone()),
-                ))
-                .expect("register original toolkit");
-
-            let duplicate_response = sidecar
-                .dispatch_blocking(request(
-                    10,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(test_toolkit_payload(
-                        "math",
-                        "Replacement math toolkit",
-                        "subtract",
-                    )),
-                ))
-                .expect("dispatch duplicate toolkit registration");
-
-            match duplicate_response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "conflict");
-                    assert!(
-                        rejected
-                            .message
-                            .contains("toolkit already registered: math"),
-                        "unexpected rejection: {rejected:?}"
-                    );
-                }
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-
-            let vm = sidecar.vms.get(&vm_id).expect("configured vm");
-            assert_eq!(vm.toolkits.get("math"), Some(&original_toolkit));
-        }
-        fn tools_register_host_callbacks_rejects_registry_overflow_without_mutating_vm() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            for index in 0..crate::tools::MAX_REGISTERED_TOOLKITS {
-                sidecar
-                    .dispatch_blocking(request(
-                        20 + index as i64,
-                        OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                        RequestPayload::RegisterHostCallbacks(test_toolkit_payload(
-                            &format!("toolkit-{index}"),
-                            "Bounded test toolkit",
-                            "run",
-                        )),
-                    ))
-                    .expect("register toolkit");
-            }
-
-            let (toolkits_before, command_paths_before) = {
-                let vm = sidecar.vms.get(&vm_id).expect("configured vm");
-                assert_eq!(vm.toolkits.len(), crate::tools::MAX_REGISTERED_TOOLKITS);
-                (vm.toolkits.clone(), vm.command_guest_paths.clone())
-            };
-
-            let overflow_response = sidecar
-                .dispatch_blocking(request(
-                    100,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(test_toolkit_payload(
-                        "overflow",
-                        "Overflow toolkit",
-                        "run",
-                    )),
-                ))
-                .expect("dispatch overflow toolkit registration");
-
-            match overflow_response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "invalid_state");
-                    assert!(
-                        rejected.message.contains("registered toolkits"),
-                        "unexpected rejection: {rejected:?}"
-                    );
-                }
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-
-            let vm = sidecar.vms.get(&vm_id).expect("configured vm");
-            assert_eq!(vm.toolkits, toolkits_before);
-            assert_eq!(vm.command_guest_paths, command_paths_before);
-            assert!(
-                !vm.command_guest_paths.contains_key("agentos-overflow"),
-                "overflow command path should not be registered"
-            );
-        }
-        fn tools_register_host_callbacks_rejects_total_tool_overflow_without_mutating_vm() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            for toolkit_index in 0..4 {
-                let tools = (0..crate::tools::MAX_TOOLS_PER_TOOLKIT)
-                    .map(|tool_index| {
-                        (
-                            format!("tool-{tool_index}"),
-                            RegisteredHostCallbackDefinition {
-                                description: format!("tool {tool_index}"),
-                                input_schema: json!({
-                                    "type": "object",
-                                    "properties": {},
-                                    "additionalProperties": false,
-                                })
-                                .to_string(),
-                                timeout_ms: None,
-                                examples: Vec::new(),
-                            },
-                        )
-                    })
-                    .collect();
-
-                sidecar
-                    .dispatch_blocking(request(
-                        120 + toolkit_index as i64,
-                        OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                        RequestPayload::RegisterHostCallbacks(RegisterHostCallbacksRequest {
-                            name: format!("toolkit-{toolkit_index}"),
-                            description: String::from("Bounded test toolkit"),
-                            command_aliases: vec![format!("agentos-toolkit-{toolkit_index}")],
-                            registry_command_aliases: vec![format!("agentos-{toolkit_index}")],
-                            callbacks: tools,
-                        }),
-                    ))
-                    .expect("register toolkit");
-            }
-
-            let (toolkits_before, command_paths_before) = {
-                let vm = sidecar.vms.get(&vm_id).expect("configured vm");
-                assert_eq!(vm.toolkits.len(), 4);
-                assert_eq!(
-                    vm.toolkits
-                        .values()
-                        .map(|toolkit| toolkit.callbacks.len())
-                        .sum::<usize>(),
-                    crate::tools::MAX_REGISTERED_TOOLS_PER_VM
-                );
-                (vm.toolkits.clone(), vm.command_guest_paths.clone())
-            };
-
-            let overflow_response = sidecar
-                .dispatch_blocking(request(
-                    200,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(test_toolkit_payload(
-                        "overflow",
-                        "Overflow toolkit",
-                        "run",
-                    )),
-                ))
-                .expect("dispatch total-tool overflow toolkit registration");
-
-            match overflow_response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "invalid_state");
-                    assert!(
-                        rejected.message.contains("registered host callbacks"),
-                        "unexpected rejection: {rejected:?}"
-                    );
-                }
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-
-            let vm = sidecar.vms.get(&vm_id).expect("configured vm");
-            assert_eq!(vm.toolkits, toolkits_before);
-            assert_eq!(vm.command_guest_paths, command_paths_before);
-            assert!(
-                !vm.command_guest_paths.contains_key("agentos-overflow"),
-                "overflow command path should not be registered"
-            );
-        }
-        fn tools_javascript_child_process_denies_host_callback_without_permission() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy {
-                    fs: Some(FsPermissionScope::PermissionMode(PermissionMode::Allow)),
-                    network: None,
-                    child_process: Some(PatternPermissionScope::PermissionMode(
-                        PermissionMode::Allow,
-                    )),
-                    process: None,
-                    env: None,
-                    binding: Some(PatternPermissionScope::PermissionMode(PermissionMode::Deny)),
-                },
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    11,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(test_toolkit_payload(
-                        "math",
-                        "Math utilities",
-                        "add",
-                    )),
-                ))
-                .expect("register math toolkit");
-
-            let cwd = temp_dir("secure-exec-sidecar-tool-command-denied");
-            insert_fake_javascript_parent_process(
-                &mut sidecar,
-                &vm_id,
-                &cwd,
-                "proc-js-tool-denied",
-            );
-
-            let result = sidecar
-                .spawn_javascript_child_process_sync(
-                    &vm_id,
-                    "proc-js-tool-denied",
-                    crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("/usr/local/bin/agentos-math"),
-                        args: vec![String::from("add")],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                    None,
-                )
-                .expect("spawn denied tool command");
-
-            assert_eq!(result["code"], json!(1));
-            assert_eq!(result["stdout"], json!(""));
-            let stderr = result["stderr"]
-                .as_str()
-                .expect("stderr should be captured as a string");
-            assert!(
-                stderr.contains("blocked by binding.invoke policy for math:add"),
-                "unexpected denied stderr: {stderr:?}"
-            );
-        }
-        fn tools_javascript_child_process_invokes_tool_with_matching_permission() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let permissions = PermissionsPolicy {
-                fs: Some(FsPermissionScope::PermissionMode(PermissionMode::Allow)),
-                network: None,
-                child_process: Some(PatternPermissionScope::PermissionMode(
-                    PermissionMode::Allow,
-                )),
-                process: None,
-                env: None,
-                binding: Some(PatternPermissionScope::PatternPermissionRuleSet(
-                    PatternPermissionRuleSet {
-                        default: Some(PermissionMode::Deny),
-                        rules: vec![PatternPermissionRule {
-                            mode: PermissionMode::Allow,
-                            operations: vec![String::from("invoke")],
-                            patterns: vec![String::from("math:add")],
-                        }],
-                    },
-                )),
-            };
-            let vm_id = create_vm(&mut sidecar, &connection_id, &session_id, permissions)
-                .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    12,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(test_toolkit_payload(
-                        "math",
-                        "Math utilities",
-                        "add",
-                    )),
-                ))
-                .expect("register math toolkit");
-
-            sidecar.set_sidecar_request_handler(|request| match request.payload {
-                SidecarRequestPayload::HostCallback(invocation) => {
-                    assert_eq!(invocation.callback_key, "math:add");
-                    assert_eq!(
-                        serde_json::from_str::<Value>(&invocation.input).expect("input json"),
-                        json!({})
-                    );
-                    Ok(SidecarResponsePayload::HostCallbackResult(
-                        HostCallbackResultResponse {
-                            invocation_id: invocation.invocation_id,
-                            result: Some(json!({ "sum": 5 }).to_string()),
-                            error: None,
-                        },
-                    ))
-                }
-                other => panic!("unexpected sidecar request payload: {other:?}"),
-            });
-
-            let cwd = temp_dir("secure-exec-sidecar-tool-command-allowed");
-            insert_fake_javascript_parent_process(
-                &mut sidecar,
-                &vm_id,
-                &cwd,
-                "proc-js-tool-allowed",
-            );
-
-            let result = sidecar
-                .spawn_javascript_child_process_sync(
-                    &vm_id,
-                    "proc-js-tool-allowed",
-                    crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("/usr/local/bin/agentos-math"),
-                        args: vec![String::from("add")],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                    None,
-                )
-                .expect("spawn allowed tool command");
-
-            assert_eq!(result["code"], json!(0));
-            assert_eq!(result["stderr"], json!(""));
-            let stdout = result["stdout"]
-                .as_str()
-                .expect("stdout should be captured as a string");
-            let payload: Value =
-                serde_json::from_str(stdout).expect("parse successful tool invocation payload");
-            assert_eq!(
-                payload,
-                json!({
-                    "ok": true,
-                    "result": { "sum": 5 },
-                })
-            );
-        }
-        fn tools_javascript_child_process_rejects_invalid_json_file_input_before_dispatch() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let permissions = PermissionsPolicy {
-                fs: Some(FsPermissionScope::PermissionMode(PermissionMode::Allow)),
-                network: None,
-                child_process: Some(PatternPermissionScope::PermissionMode(
-                    PermissionMode::Allow,
-                )),
-                process: None,
-                env: None,
-                binding: Some(PatternPermissionScope::PatternPermissionRuleSet(
-                    PatternPermissionRuleSet {
-                        default: Some(PermissionMode::Deny),
-                        rules: vec![PatternPermissionRule {
-                            mode: PermissionMode::Allow,
-                            operations: vec![String::from("invoke")],
-                            patterns: vec![String::from("math:add")],
-                        }],
-                    },
-                )),
-            };
-            let vm_id = create_vm(&mut sidecar, &connection_id, &session_id, permissions)
-                .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    13,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(test_toolkit_payload_with_schema(
-                        "math",
-                        "Math utilities",
-                        "add",
-                        json!({
-                            "type": "object",
-                            "properties": {
-                                "count": { "type": "integer", "minimum": 0 },
-                                "label": { "type": "string" }
-                            },
-                            "required": ["count", "label"],
-                            "additionalProperties": false,
-                        }),
-                    )),
-                ))
-                .expect("register math toolkit");
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("configured vm");
-                vm.kernel
-                    .write_file(
-                        "/workspace/invalid-tool-input.json",
-                        br#"{"count":"oops","label":4}"#.to_vec(),
-                    )
-                    .expect("write invalid tool input");
-            }
-
-            let invocation_count = Arc::new(AtomicUsize::new(0));
-            let seen_invocation_count = Arc::clone(&invocation_count);
-            sidecar.set_sidecar_request_handler(move |request| match request.payload {
-                SidecarRequestPayload::HostCallback(_) => {
-                    seen_invocation_count.fetch_add(1, Ordering::SeqCst);
-                    Err(SidecarError::InvalidState(String::from(
-                        "tool invocation should not run for invalid JSON-file input",
-                    )))
-                }
-                other => panic!("unexpected sidecar request payload: {other:?}"),
-            });
-
-            let cwd = temp_dir("secure-exec-sidecar-tool-command-invalid-json-file");
-            insert_fake_javascript_parent_process(
-                &mut sidecar,
-                &vm_id,
-                &cwd,
-                "proc-js-tool-invalid-json-file",
-            );
-
-            let result = sidecar
-                .spawn_javascript_child_process_sync(
-                    &vm_id,
-                    "proc-js-tool-invalid-json-file",
-                    crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("/usr/local/bin/agentos-math"),
-                        args: vec![
-                            String::from("add"),
-                            String::from("--json-file"),
-                            String::from("/workspace/invalid-tool-input.json"),
-                        ],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                    None,
-                )
-                .expect("spawn invalid json-file tool command");
-
-            assert_eq!(result["code"], json!(1));
-            assert_eq!(result["stdout"], json!(""));
-            let stderr = result["stderr"]
-                .as_str()
-                .expect("stderr should be captured as a string");
-            assert!(
-                stderr.contains("ToolInputSchemaViolation at $.count"),
-                "unexpected schema violation stderr: {stderr:?}"
-            );
-            assert!(
-                stderr.contains("expected integer"),
-                "unexpected schema violation stderr: {stderr:?}"
-            );
-            assert_eq!(invocation_count.load(Ordering::SeqCst), 0);
-        }
-        fn tools_javascript_child_process_accepts_valid_json_input() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let permissions = PermissionsPolicy {
-                fs: Some(FsPermissionScope::PermissionMode(PermissionMode::Allow)),
-                network: None,
-                child_process: Some(PatternPermissionScope::PermissionMode(
-                    PermissionMode::Allow,
-                )),
-                process: None,
-                env: None,
-                binding: Some(PatternPermissionScope::PatternPermissionRuleSet(
-                    PatternPermissionRuleSet {
-                        default: Some(PermissionMode::Deny),
-                        rules: vec![PatternPermissionRule {
-                            mode: PermissionMode::Allow,
-                            operations: vec![String::from("invoke")],
-                            patterns: vec![String::from("math:add")],
-                        }],
-                    },
-                )),
-            };
-            let vm_id = create_vm(&mut sidecar, &connection_id, &session_id, permissions)
-                .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    14,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::RegisterHostCallbacks(test_toolkit_payload_with_schema(
-                        "math",
-                        "Math utilities",
-                        "add",
-                        json!({
-                            "type": "object",
-                            "properties": {
-                                "count": { "type": "integer", "minimum": 0 },
-                                "label": { "type": "string" }
-                            },
-                            "required": ["count", "label"],
-                            "additionalProperties": false,
-                        }),
-                    )),
-                ))
-                .expect("register math toolkit");
-
-            let invocation_count = Arc::new(AtomicUsize::new(0));
-            let seen_invocation_count = Arc::clone(&invocation_count);
-            sidecar.set_sidecar_request_handler(move |request| match request.payload {
-                SidecarRequestPayload::HostCallback(invocation) => {
-                    seen_invocation_count.fetch_add(1, Ordering::SeqCst);
-                    assert_eq!(invocation.callback_key, "math:add");
-                    assert_eq!(
-                        serde_json::from_str::<Value>(&invocation.input).expect("input json"),
-                        json!({ "count": 2, "label": "ok" })
-                    );
-                    Ok(SidecarResponsePayload::HostCallbackResult(
-                        HostCallbackResultResponse {
-                            invocation_id: invocation.invocation_id,
-                            result: Some(json!({ "sum": 2 }).to_string()),
-                            error: None,
-                        },
-                    ))
-                }
-                other => panic!("unexpected sidecar request payload: {other:?}"),
-            });
-
-            let cwd = temp_dir("secure-exec-sidecar-tool-command-valid-json");
-            insert_fake_javascript_parent_process(
-                &mut sidecar,
-                &vm_id,
-                &cwd,
-                "proc-js-tool-valid-json",
-            );
-
-            let result = sidecar
-                .spawn_javascript_child_process_sync(
-                    &vm_id,
-                    "proc-js-tool-valid-json",
-                    crate::protocol::JavascriptChildProcessSpawnRequest {
-                        command: String::from("/usr/local/bin/agentos-math"),
-                        args: vec![
-                            String::from("add"),
-                            String::from("--json"),
-                            String::from(r#"{"count":2,"label":"ok"}"#),
-                        ],
-                        options: crate::protocol::JavascriptChildProcessSpawnOptions::default(),
-                    },
-                    None,
-                )
-                .expect("spawn valid json tool command");
-
-            assert_eq!(result["code"], json!(0));
-            assert_eq!(result["stderr"], json!(""));
-            let stdout = result["stdout"]
-                .as_str()
-                .expect("stdout should be captured as a string");
-            let payload: Value =
-                serde_json::from_str(stdout).expect("parse successful tool invocation payload");
-            assert_eq!(
-                payload,
-                json!({
-                    "ok": true,
-                    "result": { "sum": 2 },
-                })
-            );
-            assert_eq!(invocation_count.load(Ordering::SeqCst), 1);
-        }
-        fn command_resolution_executes_javascript_path_command_with_sidecar_mappings() {
-            let workspace = temp_dir("secure-exec-sidecar-command-resolution-js");
-            write_fixture(
-                &workspace.join("entry.js"),
-                r#"
-const { message } = require("./message.js");
-
-process.stdout.write(`${JSON.stringify({
-  message,
-})}\n`);
-"#,
-            );
-            write_fixture(
-                &workspace.join("message.js"),
-                r#"module.exports = { message: "resolved-from-mounted-workspace" };"#,
-            );
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: vec![MountDescriptor {
-                            guest_path: String::from("/workspace"),
-                            read_only: false,
-                            plugin: MountPluginDescriptor {
-                                id: String::from("host_dir"),
-                                config: json!({
-                                    "hostPath": workspace,
-                                    "readOnly": false,
-                                })
-                                .to_string(),
-                            },
-                        }],
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: vec![4312],
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure workspace mount");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::Execute(crate::protocol::ExecuteRequest {
-                        process_id: String::from("proc-command-js"),
-                        command: Some(String::from("./entry.js")),
-                        runtime: None,
-                        entrypoint: None,
-                        args: Vec::new(),
-                        env: std::collections::HashMap::new(),
-                        cwd: Some(String::from("/workspace")),
-                        wasm_permission_tier: None,
-                    }),
-                ))
-                .expect("dispatch javascript command execute");
-
-            match response.response.payload {
-                ResponsePayload::ProcessStarted(response) => {
-                    assert_eq!(response.process_id, "proc-command-js");
-                }
-                other => panic!("unexpected execute response: {other:?}"),
-            }
-
-            let (stdout, stderr, exit_code) =
-                drain_process_output(&mut sidecar, &vm_id, "proc-command-js");
-
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            let payload: Value =
-                serde_json::from_str(stdout.trim()).expect("parse javascript command JSON");
-            assert_eq!(
-                payload["message"],
-                Value::String(String::from("resolved-from-mounted-workspace"))
-            );
-        }
-
-        fn write_agentos_package_launch_fixture() -> PathBuf {
-            let package = temp_dir("secure-exec-sidecar-agentos-package-launch");
-            fs::create_dir_all(package.join("node_modules/t1-dep"))
-                .expect("create bundled dependency");
-
-            write_fixture(
-                &package.join("agentos-package.json"),
-                r#"{"name":"t1-agent","version":"1.0.0","agent":{"acpEntrypoint":"x"}}"#,
-            );
-            fs::create_dir_all(package.join("bin")).expect("create bin");
-            std::os::unix::fs::symlink("../adapter.mjs", package.join("bin/x"))
-                .expect("symlink bin/x");
-            write_fixture(
-                &package.join("node_modules/t1-dep/package.json"),
-                r#"{"name":"t1-dep","version":"1.0.0","type":"module","exports":"./index.mjs"}"#,
-            );
-            write_fixture(
-                &package.join("node_modules/t1-dep/index.mjs"),
-                r#"export const marker = "dep-ok";"#,
-            );
-            write_fixture(
-                &package.join("child.mjs"),
-                r#"
-import { marker } from "t1-dep";
-
-console.log(`child-ok:${marker}`);
-"#,
-            );
-            write_fixture(
-                &package.join("adapter.mjs"),
-                r#"#!/usr/bin/env node
-import childProcess from "node:child_process";
-import { fileURLToPath } from "node:url";
-import { marker } from "t1-dep";
-
-const entrypoint = fileURLToPath(import.meta.url);
-console.log(`entrypoint:${entrypoint}`);
-console.log(`adapter-ok:${marker}`);
-
-const child = childProcess.spawnSync("node", [
-  fileURLToPath(new URL("./child.mjs", import.meta.url)),
-], {
-  encoding: "utf8",
-});
-
-if (child.stdout) {
-  process.stdout.write(child.stdout);
-}
-if (child.stderr) {
-  process.stderr.write(child.stderr);
-}
-if (child.error) {
-  throw child.error;
-}
-if (child.status !== 0) {
-  process.exit(child.status ?? 1);
-}
-"#,
-            );
-            // The command entry must be executable in the tar, exactly as the
-            // toolchain's pack step emits `bin/*` at 0755 (npm ships 0644). The
-            // tar builder follows `bin/x -> ../adapter.mjs`, so the launcher's
-            // mode is adapter.mjs's mode.
-            {
-                use std::os::unix::fs::PermissionsExt;
-                let mut perms = fs::metadata(package.join("adapter.mjs"))
-                    .expect("stat adapter.mjs")
-                    .permissions();
-                perms.set_mode(0o755);
-                fs::set_permissions(package.join("adapter.mjs"), perms).expect("chmod adapter.mjs");
-            }
-
-            write_agentos_package_tar(&package);
-            package
-        }
-
-        fn write_agentos_package_tar(package: &Path) {
-            let tar_path = package.join("package.tar");
-            let _ = fs::remove_file(&tar_path);
-            let file = fs::File::create(&tar_path).expect("create package tar");
-            let mut builder = tar::Builder::new(file);
-            // Match the toolchain's `tar -cf`, which stores symlinks as symlinks
-            // (e.g. `bin/x -> ../adapter.mjs`). Following them would flatten the
-            // launcher into a regular file and break `import.meta.url`-relative
-            // resolution inside the package.
-            builder.follow_symlinks(false);
-            append_agentos_package_tree(&mut builder, package, package)
-                .expect("append package tree");
-            builder.finish().expect("finish package tar");
-            builder
-                .into_inner()
-                .expect("finish package tar file")
-                .flush()
-                .expect("flush package tar");
-        }
-
-        fn append_agentos_package_tree(
-            builder: &mut tar::Builder<fs::File>,
-            root: &Path,
-            path: &Path,
-        ) -> std::io::Result<()> {
-            for entry in fs::read_dir(path)? {
-                let entry = entry?;
-                let entry_path = entry.path();
-                if entry_path.file_name().and_then(|name| name.to_str()) == Some("package.tar") {
-                    continue;
-                }
-                let name = entry_path
-                    .strip_prefix(root)
-                    .expect("package-relative path");
-                if entry_path.is_dir() {
-                    builder.append_dir(name, &entry_path)?;
-                    append_agentos_package_tree(builder, root, &entry_path)?;
-                } else {
-                    builder.append_path_with_name(&entry_path, name)?;
-                }
-            }
-            Ok(())
-        }
-
-        fn clean_legacy_agentos_projection_temps() {
-            let temp = std::env::temp_dir();
-            if let Ok(entries) = fs::read_dir(&temp) {
-                for entry in entries.flatten() {
-                    let name = entry.file_name();
-                    let name = name.to_string_lossy();
-                    if name.starts_with("agentos-pkgsrc-") || name.starts_with("agentos-opt-") {
-                        let _ = fs::remove_dir_all(entry.path());
-                    }
-                }
-            }
-        }
-
-        fn assert_no_legacy_agentos_projection_temps() {
-            let temp = std::env::temp_dir();
-            let mut leftovers = Vec::new();
-            if let Ok(entries) = fs::read_dir(&temp) {
-                for entry in entries.flatten() {
-                    let name = entry.file_name();
-                    let name = name.to_string_lossy();
-                    if name.starts_with("agentos-pkgsrc-") || name.starts_with("agentos-opt-") {
-                        leftovers.push(entry.path());
-                    }
-                }
-            }
-            assert!(
-                leftovers.is_empty(),
-                "legacy extraction/staging dirs should not be created: {leftovers:?}"
-            );
-        }
-
-        #[test]
-        fn agentos_packages_launch_keeps_adapter_and_child_entrypoints_guest_native() {
-            clean_legacy_agentos_projection_temps();
-            let package = write_agentos_package_launch_fixture();
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            let applied_mounts = match sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: Vec::new(),
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: Vec::new(),
-                        packages: vec![crate::protocol::PackageDescriptor {
-                            dir: Some(package.to_string_lossy().into_owned()),
-                            tar: None,
-                        }],
-                        packages_mount_at: String::from("/opt/agentos"),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure agentos package mount")
-                .response
-                .payload
-            {
-                ResponsePayload::VmConfigured(response) => response.applied_mounts,
-                other => panic!("unexpected configure response: {other:?}"),
-            };
-            assert!(
-                applied_mounts >= 3,
-                "expected package tar/current/bin leaf mounts, got {applied_mounts}"
-            );
-            assert_no_legacy_agentos_projection_temps();
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    5,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::Execute(crate::protocol::ExecuteRequest {
-                        process_id: String::from("proc-agentos-package-launch"),
-                        command: Some(String::from("/opt/agentos/bin/x")),
-                        runtime: None,
-                        entrypoint: None,
-                        args: Vec::new(),
-                        env: std::collections::HashMap::new(),
-                        cwd: Some(String::from("/")),
-                        wasm_permission_tier: None,
-                    }),
-                ))
-                .expect("dispatch agentos package execute");
-
-            match response.response.payload {
-                ResponsePayload::ProcessStarted(response) => {
-                    assert_eq!(response.process_id, "proc-agentos-package-launch");
-                }
-                other => panic!("unexpected execute response: {other:?}"),
-            }
-
-            let (stdout, stderr, exit_code) =
-                drain_process_output(&mut sidecar, &vm_id, "proc-agentos-package-launch");
-            let combined_output = format!("{stdout}\n{stderr}");
-
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            assert!(
-                stdout.contains("entrypoint:/opt/agentos/"),
-                "stdout should report a guest-native /opt/agentos entrypoint: {stdout}"
-            );
-            assert!(
-                stdout.contains("adapter-ok:dep-ok"),
-                "adapter did not import its bundled bare dependency: {stdout}"
-            );
-            assert!(
-                stdout.contains("child-ok:dep-ok"),
-                "child process did not import the bundled bare dependency: {stdout}"
-            );
-            assert!(
-                !combined_output.contains("/unknown"),
-                "launch should not translate to /unknown\nstdout: {stdout}\nstderr: {stderr}"
-            );
-            assert!(
-                !stderr.contains("Cannot use import statement"),
-                "adapter should execute as ESM\nstderr: {stderr}"
-            );
-            assert!(
-                !stderr.contains("escape the mount root"),
-                "package launch should stay confined within /opt/agentos\nstderr: {stderr}"
-            );
-        }
-
-        fn command_resolution_executes_node_eval_command() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::Execute(crate::protocol::ExecuteRequest {
-                        process_id: String::from("proc-command-node-eval"),
-                        command: Some(String::from("node")),
-                        runtime: None,
-                        entrypoint: None,
-                        args: vec![
-                            String::from("-e"),
-                            String::from("process.stdout.write('node-eval-ok\\n')"),
-                        ],
-                        env: std::collections::HashMap::new(),
-                        cwd: None,
-                        wasm_permission_tier: None,
-                    }),
-                ))
-                .expect("dispatch node eval execute");
-
-            match response.response.payload {
-                ResponsePayload::ProcessStarted(response) => {
-                    assert_eq!(response.process_id, "proc-command-node-eval");
-                }
-                other => panic!("unexpected execute response: {other:?}"),
-            }
-
-            let (stdout, stderr, exit_code) =
-                drain_process_output(&mut sidecar, &vm_id, "proc-command-node-eval");
-
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            assert!(stdout.contains("node-eval-ok"), "stdout: {stdout}");
-        }
-        fn command_resolution_rejects_unknown_command() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::Execute(crate::protocol::ExecuteRequest {
-                        process_id: String::from("proc-command-missing"),
-                        command: Some(String::from("definitely-not-a-command")),
-                        runtime: None,
-                        entrypoint: None,
-                        args: Vec::new(),
-                        env: std::collections::HashMap::new(),
-                        cwd: None,
-                        wasm_permission_tier: None,
-                    }),
-                ))
-                .expect("dispatch missing command execute");
-
-            match response.response.payload {
-                ResponsePayload::Rejected(rejected) => {
-                    assert_eq!(rejected.code, "invalid_state");
-                    assert!(
-                        rejected
-                            .message
-                            .contains("command not found on native sidecar path"),
-                        "unexpected rejection: {rejected:?}"
-                    );
-                }
-                other => panic!("unexpected execute response: {other:?}"),
-            }
-        }
-        fn python_vfs_rpc_requests_proxy_into_the_vm_kernel_filesystem() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-python-vfs-rpc-cwd");
-            let pyodide_dir = temp_dir("secure-exec-sidecar-python-vfs-rpc-pyodide");
-            write_fixture(
-                &pyodide_dir.join("pyodide.mjs"),
-                r#"
-export async function loadPyodide() {
-  return {
-    setStdin(_stdin) {},
-    async runPythonAsync(_code) {
-      await new Promise(() => {
-        setInterval(() => {}, 1_000);
-      });
-    },
-  };
-}
-"#,
-            );
-            write_fixture(
-                &pyodide_dir.join("pyodide-lock.json"),
-                "{\"packages\":[]}\n",
-            );
-            write_fixture(&pyodide_dir.join("python_stdlib.zip"), "");
-            write_fixture(&pyodide_dir.join("pyodide.asm.js"), "");
-            write_fixture(&pyodide_dir.join("pyodide.asm.wasm"), "");
-
-            let context = sidecar
-                .python_engine
-                .create_context(CreatePythonContextRequest {
-                    vm_id: vm_id.clone(),
-                    pyodide_dist_path: pyodide_dir,
-                });
-            let execution = sidecar
-                .python_engine
-                .start_execution(StartPythonExecutionRequest {
-                    guest_runtime: Default::default(),
-                    limits: Default::default(),
-                    vm_id: vm_id.clone(),
-                    context_id: context.context_id,
-                    code: String::from("print('hold-open')"),
-                    file_path: None,
-                    env: BTreeMap::new(),
-                    cwd: cwd.clone(),
-                })
-                .expect("start fake python execution");
-
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("python vm");
-                vm.kernel
-                    .spawn_process(
-                        PYTHON_COMMAND,
-                        vec![String::from("print('hold-open')")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel python process")
-            };
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("python vm");
-                vm.active_processes.insert(
-                    String::from("proc-python-vfs"),
-                    ActiveProcess::new(
-                        kernel_handle.pid(),
-                        kernel_handle,
-                        GuestRuntimeKind::Python,
-                        ActiveExecution::Python(execution),
-                    ),
-                );
-            }
-
-            for _ in 0..16 {
-                let event = {
-                    let vm = sidecar.vms.get_mut(&vm_id).expect("python vm");
-                    let process = vm
-                        .active_processes
-                        .get_mut("proc-python-vfs")
-                        .expect("python process should be tracked");
-                    process
-                        .execution
-                        .poll_event_blocking(Duration::from_millis(100))
-                        .expect("poll python bootstrap event")
-                };
-                let Some(event) = event else {
-                    break;
-                };
-                if let ActiveExecutionEvent::Exited(code) = &event {
-                    panic!("python bootstrap exited unexpectedly with status {code}");
-                }
-                sidecar
-                    .handle_execution_event(&vm_id, "proc-python-vfs", event)
-                    .expect("handle python bootstrap event");
-            }
-
-            allow_synthetic_python_vfs_reply_drop(
-                sidecar.handle_python_vfs_rpc_request(
-                    &vm_id,
-                    "proc-python-vfs",
-                    PythonVfsRpcRequest {
-                        id: 1,
-                        method: PythonVfsRpcMethod::Mkdir,
-                        path: String::from("/workspace"),
-                        destination: None,
-                        target: None,
-                        mode: None,
-                        uid: None,
-                        gid: None,
-                        atime_ms: None,
-                        mtime_ms: None,
-                        content_base64: None,
-                        recursive: false,
-                        url: None,
-                        http_method: None,
-                        headers: BTreeMap::new(),
-                        body_base64: None,
-                        hostname: None,
-                        family: None,
-                        port: None,
-                        socket_id: None,
-                        command: None,
-                        args: Vec::new(),
-                        cwd: None,
-                        env: BTreeMap::new(),
-                        shell: false,
-                        max_buffer: None,
-                    },
-                ),
-                "handle python mkdir rpc",
-            );
-            allow_synthetic_python_vfs_reply_drop(
-                sidecar.handle_python_vfs_rpc_request(
-                    &vm_id,
-                    "proc-python-vfs",
-                    PythonVfsRpcRequest {
-                        id: 2,
-                        method: PythonVfsRpcMethod::Write,
-                        path: String::from("/workspace/note.txt"),
-                        destination: None,
-                        target: None,
-                        mode: None,
-                        uid: None,
-                        gid: None,
-                        atime_ms: None,
-                        mtime_ms: None,
-                        content_base64: Some(String::from("aGVsbG8gZnJvbSBzaWRlY2FyIHJwYw==")),
-                        recursive: false,
-                        url: None,
-                        http_method: None,
-                        headers: BTreeMap::new(),
-                        body_base64: None,
-                        hostname: None,
-                        family: None,
-                        port: None,
-                        socket_id: None,
-                        command: None,
-                        args: Vec::new(),
-                        cwd: None,
-                        env: BTreeMap::new(),
-                        shell: false,
-                        max_buffer: None,
-                    },
-                ),
-                "handle python write rpc",
-            );
-
-            let content = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("python vm");
-                String::from_utf8(
-                    vm.kernel
-                        .read_file("/workspace/note.txt")
-                        .expect("read bridged file from kernel"),
-                )
-                .expect("utf8 file contents")
-            };
-            assert_eq!(content, "hello from sidecar rpc");
-
-            let process = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("python vm");
-                vm.active_processes
-                    .remove("proc-python-vfs")
-                    .expect("remove fake python process")
-            };
-            cleanup_fake_runtime_process(process);
-        }
-        fn javascript_sync_rpc_requests_proxy_into_the_vm_kernel_filesystem() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-sync-rpc-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import fs from "node:fs";
-
-fs.writeFileSync("/rpc/note.txt", "hello from sidecar rpc");
-fs.mkdirSync("/rpc/subdir", { recursive: true });
-fs.symlinkSync("/rpc/note.txt", "/rpc/link.txt");
-const linkTarget = fs.readlinkSync("/rpc/link.txt");
-const existsBefore = fs.existsSync("/rpc/note.txt");
-const lstat = fs.lstatSync("/rpc/link.txt");
-fs.linkSync("/rpc/note.txt", "/rpc/hard.txt");
-fs.renameSync("/rpc/hard.txt", "/rpc/renamed.txt");
-const contents = fs.readFileSync("/rpc/renamed.txt", "utf8");
-fs.unlinkSync("/rpc/renamed.txt");
-fs.rmdirSync("/rpc/subdir");
-console.log(JSON.stringify({ existsBefore, linkTarget, linkIsSymlink: lstat.isSymbolicLink(), contents }));
-await new Promise(() => {});
-"#,
-            );
-
-            let context =
-                sidecar
-                    .javascript_engine
-                    .create_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.clone(),
-                        bootstrap_module: None,
-                        compile_cache_root: None,
-                    });
-            let execution = sidecar
-                .javascript_engine
-                .start_execution(StartJavascriptExecutionRequest {
-                    limits: Default::default(),
-                    guest_runtime: Default::default(),
-                    vm_id: vm_id.clone(),
-                    context_id: context.context_id,
-                    argv: vec![String::from("./entry.mjs")],
-                    env: BTreeMap::from([(
-                        String::from("AGENTOS_NODE_SYNC_RPC_ENABLE"),
-                        String::from("1"),
-                    )]),
-                    cwd: cwd.clone(),
-                    inline_code: None,
-                    wasm_module_bytes: None,
-                })
-                .expect("start fake javascript execution");
-
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel javascript process")
-            };
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.active_processes.insert(
-                    String::from("proc-js-sync"),
-                    ActiveProcess::new(
-                        kernel_handle.pid(),
-                        kernel_handle,
-                        GuestRuntimeKind::JavaScript,
-                        ActiveExecution::Javascript(execution),
-                    )
-                    .with_host_cwd(cwd.clone()),
-                );
-            }
-
-            let mut saw_stdout = false;
-            for _ in 0..16 {
-                let event = {
-                    let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                    let process = vm
-                        .active_processes
-                        .get_mut("proc-js-sync")
-                        .expect("javascript process should be tracked");
-                    process
-                        .execution
-                        .poll_event_blocking(Duration::from_secs(5))
-                        .expect("poll javascript sync rpc event")
-                        .expect("javascript sync rpc event")
-                };
-
-                if let ActiveExecutionEvent::Stdout(chunk) = &event {
-                    let stdout = String::from_utf8(chunk.clone()).expect("stdout utf8");
-                    if stdout.contains("\"contents\":\"hello from sidecar rpc\"")
-                        && stdout.contains("\"existsBefore\":true")
-                        && stdout.contains("\"linkTarget\":\"/rpc/note.txt\"")
-                        && stdout.contains("\"linkIsSymlink\":true")
-                    {
-                        saw_stdout = true;
-                        break;
-                    }
-                }
-
-                sidecar
-                    .handle_execution_event(&vm_id, "proc-js-sync", event)
-                    .expect("handle javascript sync rpc event");
-            }
-
-            let content = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                String::from_utf8(
-                    vm.kernel
-                        .read_file("/rpc/note.txt")
-                        .expect("read bridged file from kernel"),
-                )
-                .expect("utf8 file contents")
-            };
-            assert_eq!(content, "hello from sidecar rpc");
-            let link_target = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .read_link("/rpc/link.txt")
-                    .expect("read bridged symlink")
-            };
-            assert_eq!(link_target, "/rpc/note.txt");
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                assert!(
-                    !vm.kernel
-                        .exists("/rpc/renamed.txt")
-                        .expect("renamed file should be gone"),
-                    "expected renamed file to be removed",
-                );
-                assert!(
-                    !vm.kernel
-                        .exists("/rpc/subdir")
-                        .expect("subdir should be gone"),
-                    "expected subdir to be removed",
-                );
-            }
-            assert!(saw_stdout, "expected guest stdout after sync fs round-trip");
-
-            let process = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.active_processes
-                    .remove("proc-js-sync")
-                    .expect("remove fake javascript process")
-            };
-            cleanup_fake_runtime_process(process);
-        }
-
-        fn javascript_fs_promises_hot_metadata_ops_use_sync_semantics() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let mut next_request_id = 4;
-
-            let (stdout, stderr, exit_code) = run_guest_node_eval(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-js-promises-hot-metadata",
-                r#"
-(async () => {
-  const fs = require("node:fs");
-  const fsp = fs.promises;
-  const root = "/tmp/promises-hot-metadata";
-  const file = `${root}/file.txt`;
-  const link = `${root}/link.txt`;
-
-  const errorCode = async (fn) => {
-    try {
-      await fn();
-      return "OK";
-    } catch (error) {
-      return error.code;
-    }
-  };
-
-  await fsp.mkdir(root, { recursive: true });
-  await fsp.writeFile(file, "hello");
-  fs.symlinkSync("file.txt", link);
-
-  const fileStat = await fsp.stat(file);
-  const dirStat = await fsp.stat(root);
-  const fileLstat = await fsp.lstat(file);
-  const dirLstat = await fsp.lstat(root);
-  const statMissing = await errorCode(() => fsp.stat(`${root}/missing.txt`));
-  const lstatMissing = await errorCode(() => fsp.lstat(`${root}/missing.txt`));
-
-  await fsp.writeFile(`${root}/rename-from.txt`, "move");
-  await fsp.rename(`${root}/rename-from.txt`, `${root}/rename-to.txt`);
-  const renamedText = await fsp.readFile(`${root}/rename-to.txt`, "utf8");
-  await fsp.unlink(`${root}/rename-to.txt`);
-  const unlinkedMissing = await errorCode(() => fsp.stat(`${root}/rename-to.txt`));
-
-  await fsp.mkdir(`${root}/nested/leaf`, { recursive: true });
-  const mkdirExisting = await errorCode(() => fsp.mkdir(`${root}/nested/leaf`));
-  await fsp.rmdir(`${root}/nested/leaf`);
-  const rmdirMissing = await errorCode(() => fsp.rmdir(`${root}/nested/leaf`));
-  const accessMissing = await errorCode(() => fsp.access(`${root}/missing.txt`));
-
-  await fsp.chmod(file, 0o600);
-  const chmodStat = await fsp.stat(file);
-  const stamp = new Date("2024-01-02T03:04:05.000Z");
-  await fsp.utimes(file, stamp, stamp);
-  const utimesStat = await fsp.stat(file);
-
-  const linkTarget = await fsp.readlink(link);
-  const realpath = await fsp.realpath(link);
-
-  process.stdout.write(`${JSON.stringify({
-    fileIsFile: fileStat.isFile(),
-    dirIsDirectory: dirStat.isDirectory(),
-    fileLstatIsFile: fileLstat.isFile(),
-    dirLstatIsDirectory: dirLstat.isDirectory(),
-    statMissing,
-    lstatMissing,
-    renamedText,
-    unlinkedMissing,
-    mkdirExisting,
-    rmdirMissing,
-    accessMissing,
-    chmodMode: chmodStat.mode & 0o777,
-    utimesMtimeMs: Math.round(utimesStat.mtimeMs),
-    linkTarget,
-    realpath,
-  })}\n`);
-})().catch((error) => {
-  console.error(error && error.stack ? error.stack : String(error));
-  process.exitCode = 1;
-});
-"#,
-            );
-
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            let payload = stdout_json(&stdout);
-            assert_eq!(payload["fileIsFile"], json!(true), "stdout: {stdout}");
-            assert_eq!(payload["dirIsDirectory"], json!(true), "stdout: {stdout}");
-            assert_eq!(payload["fileLstatIsFile"], json!(true), "stdout: {stdout}");
-            assert_eq!(
-                payload["dirLstatIsDirectory"],
-                json!(true),
-                "stdout: {stdout}"
-            );
-            assert_eq!(payload["statMissing"], json!("ENOENT"), "stdout: {stdout}");
-            assert_eq!(payload["lstatMissing"], json!("ENOENT"), "stdout: {stdout}");
-            assert_eq!(payload["renamedText"], json!("move"), "stdout: {stdout}");
-            assert_eq!(
-                payload["unlinkedMissing"],
-                json!("ENOENT"),
-                "stdout: {stdout}"
-            );
-            assert_eq!(
-                payload["mkdirExisting"],
-                json!("EEXIST"),
-                "stdout: {stdout}"
-            );
-            assert_eq!(payload["rmdirMissing"], json!("ENOENT"), "stdout: {stdout}");
-            assert_eq!(
-                payload["accessMissing"],
-                json!("ENOENT"),
-                "stdout: {stdout}"
-            );
-            assert_eq!(payload["chmodMode"], json!(0o600), "stdout: {stdout}");
-            assert_eq!(
-                payload["utimesMtimeMs"],
-                json!(1704164645000i64),
-                "stdout: {stdout}"
-            );
-            assert_eq!(payload["linkTarget"], json!("file.txt"), "stdout: {stdout}");
-            assert_eq!(
-                payload["realpath"],
-                json!("/tmp/promises-hot-metadata/file.txt"),
-                "stdout: {stdout}"
-            );
-        }
-
-        fn python_vfs_rpc_paths_resolve_textually_and_defer_to_kernel_confinement() {
-            // Root is `/`: any absolute guest path is addressable and textual
-            // `.`/`..` segments are resolved here; confinement is enforced at the
-            // kernel/mount layer (openat2 RESOLVE_BENEATH), not by a prefix check.
-            assert_eq!(
-                crate::filesystem::normalize_python_vfs_rpc_path("/workspace/./note.txt")
-                    .expect("normalize workspace path"),
-                String::from("/workspace/note.txt")
-            );
-            assert_eq!(
-                crate::filesystem::normalize_python_vfs_rpc_path("/workspace/../etc/passwd")
-                    .expect("normalize resolves .. textually"),
-                String::from("/etc/passwd")
-            );
-            assert_eq!(
-                crate::filesystem::normalize_python_vfs_rpc_path("/etc/passwd")
-                    .expect("absolute guest paths are addressable"),
-                String::from("/etc/passwd")
-            );
-            assert!(
-                crate::filesystem::normalize_python_vfs_rpc_path("workspace/note.txt").is_err(),
-                "relative paths must be rejected",
-            );
-        }
-        fn javascript_fs_sync_rpc_resolves_proc_self_against_the_kernel_process() {
-            let mut config = KernelVmConfig::new("vm-js-procfs-rpc");
-            config.permissions = Permissions::allow_all();
-            let mut kernel = SidecarKernel::new(MountTable::new(MemoryFileSystem::new()), config);
-            kernel
-                .register_driver(CommandDriver::new(
-                    EXECUTION_DRIVER_NAME,
-                    [JAVASCRIPT_COMMAND],
-                ))
-                .expect("register execution driver");
-
-            let kernel_handle = kernel
-                .spawn_process(
-                    JAVASCRIPT_COMMAND,
-                    Vec::new(),
-                    SpawnOptions {
-                        requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                        ..SpawnOptions::default()
-                    },
-                )
-                .expect("spawn javascript kernel process");
-            let kernel_pid = kernel_handle.pid();
-            let mut process = ActiveProcess::new(
-                kernel_pid,
-                kernel_handle,
-                GuestRuntimeKind::JavaScript,
-                ActiveExecution::Tool(ToolExecution::default()),
-            );
-
-            let link = service_javascript_fs_sync_rpc(
-                &mut kernel,
-                &mut process,
-                kernel_pid,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("fs.readlinkSync"),
-                    args: vec![json!("/proc/self")],
-                },
-            )
-            .expect("resolve /proc/self");
-            assert_eq!(link, Value::String(format!("/proc/{kernel_pid}")));
-
-            let entries = service_javascript_fs_sync_rpc(
-                &mut kernel,
-                &mut process,
-                kernel_pid,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("fs.readdirSync"),
-                    args: vec![json!("/proc/self/fd")],
-                },
-            )
-            .expect("read /proc/self/fd");
-            let entry_names = entries
-                .as_array()
-                .expect("readdir should return an array")
-                .iter()
-                .filter_map(|entry| {
-                    // Raw sidecar readdir RPCs may return typed entries so the JS
-                    // bridge can implement `withFileTypes` without per-entry stat
-                    // RPCs; plain guest `readdirSync()` normalizes these to names.
-                    entry
-                        .as_str()
-                        .or_else(|| entry.get("name").and_then(Value::as_str))
-                })
-                .collect::<Vec<_>>();
-            assert!(entry_names.contains(&"0"));
-            assert!(entry_names.contains(&"1"));
-            assert!(entry_names.contains(&"2"));
-
-            process.kernel_handle.finish(0);
-            kernel.waitpid(kernel_pid).expect("wait javascript process");
-        }
-        fn javascript_fd_and_stream_rpc_requests_proxy_into_the_vm_kernel_filesystem() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .write_file("/rpc/input.txt", b"abcdefg")
-                    .expect("seed input file");
-            }
-            let cwd = temp_dir("secure-exec-sidecar-js-fd-rpc-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import fs from "node:fs";
-import { once } from "node:events";
-
-const inFd = fs.openSync("/rpc/input.txt", "r");
-const buffer = Buffer.alloc(5);
-const bytesRead = fs.readSync(inFd, buffer, 0, buffer.length, 1);
-const stat = fs.fstatSync(inFd);
-fs.closeSync(inFd);
-
-const defaultUmask = process.umask();
-const previousUmask = process.umask(0o027);
-const outFd = fs.openSync("/rpc/output.txt", "w", 0o666);
-const written = fs.writeSync(outFd, Buffer.from("kernel"), 0, 6, 0);
-fs.closeSync(outFd);
-fs.mkdirSync("/rpc/private", { mode: 0o777 });
-const outputStat = fs.statSync("/rpc/output.txt");
-const privateDirStat = fs.statSync("/rpc/private");
-
-const asyncSummary = await new Promise((resolve, reject) => {
-  fs.open("/rpc/input.txt", "r", (openError, asyncFd) => {
-    if (openError) {
-      reject(openError);
-      return;
-    }
-
-    const target = Buffer.alloc(5);
-    fs.read(asyncFd, target, 0, 5, 0, (readError, asyncBytesRead) => {
-      if (readError) {
-        reject(readError);
-        return;
-      }
-
-      fs.fstat(asyncFd, (statError, asyncStat) => {
-        if (statError) {
-          reject(statError);
-          return;
-        }
-
-        fs.close(asyncFd, (closeError) => {
-          if (closeError) {
-            reject(closeError);
-            return;
-          }
-
-          resolve({
-            asyncBytesRead,
-            asyncText: target.toString("utf8"),
-            asyncSize: asyncStat.size,
-          });
-        });
-      });
-    });
-  });
-});
-
-const reader = fs.createReadStream("/rpc/input.txt", {
-  encoding: "utf8",
-  start: 0,
-  end: 4,
-  highWaterMark: 3,
-});
-const streamChunks = [];
-reader.on("data", (chunk) => streamChunks.push(chunk));
-await once(reader, "close");
-
-const writer = fs.createWriteStream("/rpc/stream.txt", { start: 0 });
-writer.write("ab");
-writer.end("cd");
-await once(writer, "close");
-
-let watchCode = "";
-let watchFileCode = "";
-let watchSupported = false;
-let watchFileSupported = false;
-try {
-  const watcher = fs.watch("/rpc/input.txt");
-  watchSupported = typeof watcher.close === "function";
-  watcher.close();
-} catch (error) {
-  watchCode = error.code;
-}
-try {
-  const watchFileListener = () => {};
-  fs.watchFile("/rpc/input.txt", watchFileListener);
-  watchFileSupported = true;
-  fs.unwatchFile("/rpc/input.txt", watchFileListener);
-} catch (error) {
-  watchFileCode = error.code;
-}
-
-console.log(
-  JSON.stringify({
-    text: buffer.toString("utf8"),
-    bytesRead,
-    size: stat.size,
-    blocks: stat.blocks,
-    dev: stat.dev,
-    rdev: stat.rdev,
-    written,
-    defaultUmask,
-    previousUmask,
-    outputMode: outputStat.mode & 0o777,
-    privateDirMode: privateDirStat.mode & 0o777,
-    asyncSummary,
-    streamChunks,
-    watchSupported,
-    watchFileSupported,
-    watchCode,
-    watchFileCode,
-  }),
-);
-"#,
-            );
-
-            let context =
-                sidecar
-                    .javascript_engine
-                    .create_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.clone(),
-                        bootstrap_module: None,
-                        compile_cache_root: None,
-                    });
-            let execution = sidecar
-            .javascript_engine
-            .start_execution(StartJavascriptExecutionRequest {
-                limits: Default::default(),
-                guest_runtime: Default::default(),
-                vm_id: vm_id.clone(),
-                context_id: context.context_id,
-                argv: vec![String::from("./entry.mjs")],
-                env: BTreeMap::from([(
-                    String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                    String::from(
-                        "[\"assert\",\"buffer\",\"child_process\",\"console\",\"crypto\",\"events\",\"fs\",\"path\",\"querystring\",\"stream\",\"string_decoder\",\"timers\",\"url\",\"util\",\"zlib\"]",
-                    ),
-                )]),
-                cwd: cwd.clone(),
-                inline_code: None,
-                wasm_module_bytes: None,
-            })
-            .expect("start fake javascript execution");
-
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel javascript process")
-            };
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.active_processes.insert(
-                    String::from("proc-js-fd"),
-                    ActiveProcess::new(
-                        kernel_handle.pid(),
-                        kernel_handle,
-                        GuestRuntimeKind::JavaScript,
-                        ActiveExecution::Javascript(execution),
-                    )
-                    .with_host_cwd(cwd.clone()),
-                );
-            }
-
-            let mut stdout = Vec::new();
-            let mut stderr = Vec::new();
-            let mut exit_code = None;
-            for _ in 0..64 {
-                let next_event = {
-                    let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                    vm.active_processes
-                        .get_mut("proc-js-fd")
-                        .and_then(|process| {
-                            process
-                                .execution
-                                .poll_event_blocking(Duration::from_secs(5))
-                                .expect("poll javascript fd rpc event")
-                        })
-                };
-                let Some(event) = next_event else {
-                    if exit_code.is_some() {
-                        break;
-                    }
-                    panic!("javascript fd process disappeared before exit");
-                };
-
-                match &event {
-                    ActiveExecutionEvent::Stdout(chunk) => {
-                        append_process_stream_chunk(&mut stdout, chunk, "proc-js-fd", "stdout");
-                    }
-                    ActiveExecutionEvent::Stderr(chunk) => {
-                        append_process_stream_chunk(&mut stderr, chunk, "proc-js-fd", "stderr");
-                    }
-                    ActiveExecutionEvent::Exited(code) => {
-                        exit_code = Some(*code);
-                    }
-                    ActiveExecutionEvent::JavascriptSyncRpcRequest(_)
-                    | ActiveExecutionEvent::PythonVfsRpcRequest(_)
-                    | ActiveExecutionEvent::SignalState { .. } => {}
-                }
-
-                sidecar
-                    .handle_execution_event(&vm_id, "proc-js-fd", event)
-                    .expect("handle javascript fd rpc event");
-            }
-
-            let stdout = process_stream_to_string(&stdout);
-            let stderr = process_stream_to_string(&stderr);
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            let stdout_json: Value = serde_json::from_str(stdout.trim()).expect("stdout json");
-            assert!(stdout.contains("\"text\":\"bcdef\""), "stdout: {stdout}");
-            assert!(stdout.contains("\"bytesRead\":5"), "stdout: {stdout}");
-            assert!(stdout.contains("\"size\":7"), "stdout: {stdout}");
-            assert!(stdout.contains("\"blocks\":1"), "stdout: {stdout}");
-            assert!(
-                stdout_json
-                    .get("dev")
-                    .and_then(Value::as_u64)
-                    .is_some_and(|dev| dev != 0),
-                "stdout: {stdout}"
-            );
-            assert!(stdout.contains("\"rdev\":0"), "stdout: {stdout}");
-            assert!(stdout.contains("\"written\":6"), "stdout: {stdout}");
-            assert!(stdout.contains("\"defaultUmask\":18"), "stdout: {stdout}");
-            assert!(stdout.contains("\"previousUmask\":18"), "stdout: {stdout}");
-            assert!(stdout.contains("\"outputMode\":416"), "stdout: {stdout}");
-            assert!(
-                stdout.contains("\"privateDirMode\":488"),
-                "stdout: {stdout}"
-            );
-            assert!(
-                stdout.contains("\"asyncText\":\"abcde\""),
-                "stdout: {stdout}"
-            );
-            assert!(stdout.contains("\"asyncSize\":7"), "stdout: {stdout}");
-            assert!(
-                stdout.contains("\"streamChunks\":[\"abc\",\"de\"]"),
-                "stdout: {stdout}"
-            );
-            assert!(
-                stdout.contains("\"watchSupported\":true"),
-                "stdout: {stdout}"
-            );
-            assert!(
-                stdout.contains("\"watchFileSupported\":true"),
-                "stdout: {stdout}"
-            );
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let output = String::from_utf8(
-                    vm.kernel
-                        .read_file("/rpc/output.txt")
-                        .expect("read fd output file"),
-                )
-                .expect("utf8 output contents");
-                assert_eq!(output, "kernel");
-
-                let stream = String::from_utf8(
-                    vm.kernel
-                        .read_file("/rpc/stream.txt")
-                        .expect("read stream output file"),
-                )
-                .expect("utf8 stream contents");
-                assert_eq!(stream, "abcd");
-            }
-        }
-
-        fn javascript_mapped_tmp_open_wx_uses_exclusive_create_once() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-open-wx-cwd");
-            let mapped_tmp = temp_dir("secure-exec-sidecar-js-open-wx-mapped-tmp");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import fs from "node:fs";
-import os from "node:os";
-import path from "node:path";
-
-const target = path.join(os.tmpdir(), "exclusive-mapped.lock");
-try {
-  fs.unlinkSync(target);
-} catch {}
-
-const fd = fs.openSync(target, "wx", 0o600);
-fs.writeSync(fd, "lock");
-fs.closeSync(fd);
-
-let secondOpenCode = "";
-try {
-  fs.openSync(target, "wx", 0o600);
-  secondOpenCode = "opened";
-} catch (error) {
-  secondOpenCode = error.code;
-}
-
-console.log(
-  JSON.stringify({
-    tmpdir: os.tmpdir(),
-    text: fs.readFileSync(target, "utf8"),
-    secondOpenCode,
-    exists: fs.existsSync(target),
-  }),
-);
-"#,
-            );
-
-            let mapped_tmp_json = serde_json::to_string(&vec![mapped_tmp.display().to_string()])
-                .expect("serialize mapped tmp access roots");
-            let (stdout, stderr, exit_code) = run_javascript_entry_with_env(
-                &mut sidecar,
-                &vm_id,
-                &cwd,
-                "proc-js-open-wx",
-                BTreeMap::from([
-                    (
-                        String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                        String::from("[\"buffer\",\"console\",\"fs\",\"os\",\"path\"]"),
-                    ),
-                    (
-                        String::from("AGENTOS_GUEST_PATH_MAPPINGS"),
-                        serde_json::to_string(&vec![json!({
-                            "guestPath": "/tmp",
-                            "hostPath": mapped_tmp.display().to_string(),
-                        })])
-                        .expect("serialize mapped tmp path"),
-                    ),
-                    (
-                        String::from("AGENTOS_EXTRA_FS_READ_PATHS"),
-                        mapped_tmp_json.clone(),
-                    ),
-                    (
-                        String::from("AGENTOS_EXTRA_FS_WRITE_PATHS"),
-                        mapped_tmp_json,
-                    ),
-                ]),
-            );
-
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            assert!(stdout.contains("\"text\":\"lock\""), "stdout: {stdout}");
-            assert!(
-                stdout.contains("\"secondOpenCode\":\"EEXIST\""),
-                "stdout: {stdout}"
-            );
-            assert!(stdout.contains("\"exists\":true"), "stdout: {stdout}");
-            assert_eq!(
-                fs::read_to_string(mapped_tmp.join("exclusive-mapped.lock"))
-                    .expect("read mapped host lock file"),
-                "lock"
-            );
-        }
-
-        fn with_wasm_shell_redirect_vm(
-            test: impl FnOnce(
-                &mut NativeSidecar<RecordingBridge>,
-                &str,
-                &str,
-                &str,
-                &mut secure_exec_sidecar::protocol::RequestId,
-            ),
-        ) {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let mut next_request_id = 4;
-            configure_registry_command_mount(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                next_request_id,
-            );
-            next_request_id += 1;
-
-            test(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-            );
-        }
-
-        fn wasm_shell_external_stdout_redirect_writes_file() {
-            with_wasm_shell_redirect_vm(
-                |sidecar, vm_id, connection_id, session_id, next_request_id| {
-                    let (_stdout, stderr, exit_code) = run_guest_command(
-                        sidecar,
-                        vm_id,
-                        connection_id,
-                        session_id,
-                        next_request_id,
-                        "proc-wasm-redirect-stdout",
-                        "sh",
-                        &[
-                            "-c",
-                            "mkdir -p /tmp/rp && printf 'aaaaaaaaaa' > /tmp/rp/printf.txt",
-                        ],
-                        BTreeMap::new(),
-                    );
-                    assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-
-                    let (stdout, stderr, exit_code) = run_guest_node_eval(
-                        sidecar,
-                        vm_id,
-                        connection_id,
-                        session_id,
-                        next_request_id,
-                        "proc-js-read-redirect-stdout",
-                        r#"
-const fs = require("node:fs");
-const path = "/tmp/rp/printf.txt";
-process.stdout.write(`${JSON.stringify({
-  text: fs.readFileSync(path, "utf8"),
-  size: fs.statSync(path).size,
-})}\n`);
-"#,
-                    );
-                    assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-                    let payload = stdout_json(&stdout);
-                    assert_eq!(payload["text"], json!("aaaaaaaaaa"), "stdout: {stdout}");
-                    assert_eq!(payload["size"], json!(10), "stdout: {stdout}");
-                },
-            );
-        }
-
-        fn wasm_shell_external_append_redirect_creates_and_concatenates() {
-            with_wasm_shell_redirect_vm(
-                |sidecar, vm_id, connection_id, session_id, next_request_id| {
-                    let (_stdout, stderr, exit_code) = run_guest_command(
-                        sidecar,
-                        vm_id,
-                        connection_id,
-                        session_id,
-                        next_request_id,
-                        "proc-wasm-redirect-append",
-                        "sh",
-                        &[
-                            "-c",
-                            "mkdir -p /tmp/rp && printf 'abc' >> /tmp/rp/append.txt && printf 'xyz' >> /tmp/rp/append.txt",
-                        ],
-                        BTreeMap::new(),
-                    );
-                    assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-
-                    let (stdout, stderr, exit_code) = run_guest_node_eval(
-                        sidecar,
-                        vm_id,
-                        connection_id,
-                        session_id,
-                        next_request_id,
-                        "proc-js-read-redirect-append",
-                        r#"
-const fs = require("node:fs");
-const path = "/tmp/rp/append.txt";
-process.stdout.write(`${JSON.stringify({
-  text: fs.readFileSync(path, "utf8"),
-  size: fs.statSync(path).size,
-})}\n`);
-"#,
-                    );
-                    assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-                    let payload = stdout_json(&stdout);
-                    assert_eq!(payload["text"], json!("abcxyz"), "stdout: {stdout}");
-                    assert_eq!(payload["size"], json!(6), "stdout: {stdout}");
-                },
-            );
-        }
-
-        fn wasm_shell_external_stderr_redirect_writes_file() {
-            with_wasm_shell_redirect_vm(
-                |sidecar, vm_id, connection_id, session_id, next_request_id| {
-                    let (_stdout, stderr, exit_code) = run_guest_command(
-                        sidecar,
-                        vm_id,
-                        connection_id,
-                        session_id,
-                        next_request_id,
-                        "proc-wasm-redirect-stderr",
-                        "sh",
-                        &[
-                            "-c",
-                            "mkdir -p /tmp/rp && cat /tmp/rp/does-not-exist 2> /tmp/rp/stderr.txt || true",
-                        ],
-                        BTreeMap::new(),
-                    );
-                    assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-
-                    let (stdout, stderr, exit_code) = run_guest_node_eval(
-                        sidecar,
-                        vm_id,
-                        connection_id,
-                        session_id,
-                        next_request_id,
-                        "proc-js-read-redirect-stderr",
-                        r#"
-const fs = require("node:fs");
-const path = "/tmp/rp/stderr.txt";
-const text = fs.readFileSync(path, "utf8");
-process.stdout.write(`${JSON.stringify({
-  text,
-  size: fs.statSync(path).size,
-})}\n`);
-"#,
-                    );
-                    assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-                    let payload = stdout_json(&stdout);
-                    assert!(
-                        payload["text"]
-                            .as_str()
-                            .is_some_and(|text| text.contains("does-not-exist")),
-                        "stdout: {stdout}"
-                    );
-                    assert!(
-                        payload["size"].as_u64().is_some_and(|size| size > 0),
-                        "stdout: {stdout}"
-                    );
-                },
-            );
-        }
-
-        fn wasm_shell_builtin_and_external_redirects_match() {
-            with_wasm_shell_redirect_vm(
-                |sidecar, vm_id, connection_id, session_id, next_request_id| {
-                    let (_stdout, stderr, exit_code) = run_guest_command(
-                        sidecar,
-                        vm_id,
-                        connection_id,
-                        session_id,
-                        next_request_id,
-                        "proc-wasm-redirect-parity",
-                        "sh",
-                        &[
-                            "-c",
-                            "mkdir -p /tmp/rp && echo hi > /tmp/rp/builtin.txt && printf 'hi\n' > /tmp/rp/external.txt",
-                        ],
-                        BTreeMap::new(),
-                    );
-                    assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-
-                    let (stdout, stderr, exit_code) = run_guest_node_eval(
-                        sidecar,
-                        vm_id,
-                        connection_id,
-                        session_id,
-                        next_request_id,
-                        "proc-js-read-redirect-parity",
-                        r#"
-const fs = require("node:fs");
-process.stdout.write(`${JSON.stringify({
-  builtin: fs.readFileSync("/tmp/rp/builtin.txt", "utf8"),
-  external: fs.readFileSync("/tmp/rp/external.txt", "utf8"),
-})}\n`);
-"#,
-                    );
-                    assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-                    let payload = stdout_json(&stdout);
-                    assert_eq!(payload["builtin"], json!("hi\n"), "stdout: {stdout}");
-                    assert_eq!(payload["external"], json!("hi\n"), "stdout: {stdout}");
-                },
-            );
-        }
-
-        fn javascript_mapped_shadow_readdir_sees_wasm_created_directory() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let mut next_request_id = 4;
-            configure_registry_command_mount(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                next_request_id,
-            );
-            next_request_id += 1;
-
-            let (_stdout, stderr, exit_code) = run_guest_command(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-wasm-mkdir-x",
-                "mkdir",
-                &["/tmp/x"],
-                BTreeMap::new(),
-            );
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-
-            let client_entries = sidecar
-                .vms
-                .get_mut(&vm_id)
-                .expect("vm")
-                .kernel
-                .read_dir("/tmp")
-                .expect("client readdir /tmp");
-            assert!(
-                client_entries.iter().any(|entry| entry == "x"),
-                "kernel /tmp entries should include x: {client_entries:?}"
-            );
-
-            let (stdout, stderr, exit_code) = run_guest_node_eval(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-js-read-x",
-                r#"
-const fs = require("node:fs");
-const entries = fs.readdirSync("/tmp/x");
-const isDirectory = fs.statSync("/tmp/x").isDirectory();
-process.stdout.write(`${JSON.stringify({ entries, isDirectory })}\n`);
-"#,
-            );
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            let payload = stdout_json(&stdout);
-            assert_eq!(payload["entries"], json!([]), "stdout: {stdout}");
-            assert_eq!(payload["isDirectory"], json!(true), "stdout: {stdout}");
-        }
-
-        fn javascript_mapped_shadow_readdir_merges_wasm_created_children() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let mut next_request_id = 4;
-            configure_registry_command_mount(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                next_request_id,
-            );
-            next_request_id += 1;
-
-            let (_stdout, stderr, exit_code) = run_guest_command(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-wasm-write-y",
-                "sh",
-                &["-c", "mkdir -p /tmp/y && echo hi > /tmp/y/f.txt"],
-                BTreeMap::new(),
-            );
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-
-            let (stdout, stderr, exit_code) = run_guest_node_eval(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-js-read-y",
-                r#"
-const fs = require("node:fs");
-const entries = fs.readdirSync("/tmp/y").sort();
-const text = fs.readFileSync("/tmp/y/f.txt", "utf8");
-process.stdout.write(`${JSON.stringify({ entries, text })}\n`);
-"#,
-            );
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            let payload = stdout_json(&stdout);
-            assert_eq!(payload["entries"], json!(["f.txt"]), "stdout: {stdout}");
-            assert_eq!(payload["text"], json!("hi\n"), "stdout: {stdout}");
-        }
-
-        fn javascript_mapped_shadow_readdir_unions_shadow_and_kernel_children() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let mut next_request_id = 4;
-
-            let (_stdout, stderr, exit_code) = run_guest_node_eval(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-js-write-z-a",
-                r#"
-const fs = require("node:fs");
-fs.mkdirSync("/tmp/z", { recursive: true });
-fs.writeFileSync("/tmp/z/a.txt", "a\n");
-"#,
-            );
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .mkdir("/tmp/z", true)
-                    .expect("create kernel merge dir");
-                vm.kernel
-                    .write_file("/tmp/z/b.txt", b"x\n".to_vec())
-                    .expect("create kernel merge child");
-            }
-
-            let (stdout, stderr, exit_code) = run_guest_node_eval(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-js-read-z",
-                r#"
-const fs = require("node:fs");
-const entries = fs.readdirSync("/tmp/z").sort();
-process.stdout.write(`${JSON.stringify({ entries })}\n`);
-"#,
-            );
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            let payload = stdout_json(&stdout);
-            assert_eq!(
-                payload["entries"],
-                json!(["a.txt", "b.txt"]),
-                "stdout: {stdout}"
-            );
-        }
-
-        // A kernel-backed file (created by a wasm command) unlinked from JS must
-        // stay deleted in the SAME process's merged readdir view and for later
-        // processes — the mapped unlink now mirrors the removal into the kernel,
-        // otherwise the readdir kernel-merge would resurrect it.
-        fn javascript_mapped_unlink_of_kernel_backed_file_does_not_resurrect() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let mut next_request_id = 4;
-            configure_registry_command_mount(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                next_request_id,
-            );
-            next_request_id += 1;
-
-            let (_stdout, stderr, exit_code) = run_guest_command(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-wasm-write-w",
-                "sh",
-                &["-c", "mkdir -p /tmp/w && echo hi > /tmp/w/gone.txt"],
-                BTreeMap::new(),
-            );
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-
-            let (stdout, stderr, exit_code) = run_guest_node_eval(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-js-unlink-w",
-                r#"
-const fs = require("node:fs");
-fs.unlinkSync("/tmp/w/gone.txt");
-const entries = fs.readdirSync("/tmp/w").sort();
-process.stdout.write(`${JSON.stringify({ entries })}\n`);
-"#,
-            );
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            let payload = stdout_json(&stdout);
-            assert_eq!(payload["entries"], json!([]), "stdout: {stdout}");
-
-            let (stdout, stderr, exit_code) = run_guest_node_eval(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-js-recheck-w",
-                r#"
-const fs = require("node:fs");
-const entries = fs.readdirSync("/tmp/w").sort();
-process.stdout.write(`${JSON.stringify({ entries })}\n`);
-"#,
-            );
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            let payload = stdout_json(&stdout);
-            assert_eq!(payload["entries"], json!([]), "stdout: {stdout}");
-        }
-
-        fn javascript_mapped_shadow_readdir_sees_same_process_shadow_directory() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let mut next_request_id = 4;
-
-            let (stdout, stderr, exit_code) = run_guest_node_eval(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-js-readdir-own-shadow-dir",
-                r#"
-const fs = require("node:fs");
-const dir = "/tmp/fuzz-perf-readdir-32";
-if (!fs.existsSync(dir)) fs.mkdirSync(dir);
-for (let i = 0; i < 3; i++) {
-  const path = `${dir}/${i}.txt`;
-  if (!fs.existsSync(path)) fs.writeFileSync(path, "hi");
-}
-const entries = fs.readdirSync(dir).sort();
-process.stdout.write(`${JSON.stringify({ entries })}\n`);
-"#,
-            );
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            let payload = stdout_json(&stdout);
-            assert_eq!(
-                payload["entries"],
-                json!(["0.txt", "1.txt", "2.txt"]),
-                "stdout: {stdout}"
-            );
-        }
-
-        fn javascript_readdir_raw_payload_preserves_dirent_semantics() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let mut next_request_id = 4;
-
-            let (_stdout, stderr, exit_code) = run_guest_node_eval(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-js-seed-readdir-raw",
-                r#"
-const fs = require("node:fs");
-const dir = "/tmp/readdir-raw-dirents";
-fs.mkdirSync(dir, { recursive: true });
-fs.mkdirSync(`${dir}/dir`);
-fs.mkdirSync(`${dir}/empty`);
-fs.writeFileSync(`${dir}/file.txt`, "file");
-fs.symlinkSync("dir", `${dir}/link-dir`);
-fs.symlinkSync("file.txt", `${dir}/link-file`);
-"#,
-            );
-            assert_eq!(exit_code, Some(0), "stdout: {_stdout}\nstderr: {stderr}");
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .mkdir("/tmp/readdir-raw-dirents", true)
-                    .expect("create kernel merge dir");
-                vm.kernel
-                    .write_file("/tmp/readdir-raw-dirents/kernel.txt", b"kernel\n".to_vec())
-                    .expect("create kernel merge child");
-            }
-
-            let (stdout, stderr, exit_code) = run_guest_node_eval(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-js-read-readdir-raw",
-                r#"
-const fs = require("node:fs");
-const dir = "/tmp/readdir-raw-dirents";
-const typed = fs.readdirSync(dir, { withFileTypes: true })
-  .map((entry) => ({
-    name: entry.name,
-    isDirectory: entry.isDirectory(),
-    parentPath: entry.parentPath,
-    path: entry.path,
-  }))
-  .sort((a, b) => a.name.localeCompare(b.name));
-const plain = fs.readdirSync(dir).sort();
-const empty = fs.readdirSync(`${dir}/empty`);
-process.stdout.write(`${JSON.stringify({ plain, typed, empty })}\n`);
-"#,
-            );
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            let payload = stdout_json(&stdout);
-            assert_eq!(
-                payload["plain"],
-                json!([
-                    "dir",
-                    "empty",
-                    "file.txt",
-                    "kernel.txt",
-                    "link-dir",
-                    "link-file"
-                ]),
-                "stdout: {stdout}"
-            );
-            assert_eq!(payload["empty"], json!([]), "stdout: {stdout}");
-            let typed = payload["typed"].as_array().expect("typed entries");
-            let by_name = |name: &str| {
-                typed
-                    .iter()
-                    .find(|entry| entry["name"] == json!(name))
-                    .unwrap_or_else(|| panic!("missing dirent {name}: {typed:?}"))
-            };
-            assert_eq!(by_name("dir")["isDirectory"], json!(true));
-            assert_eq!(by_name("empty")["isDirectory"], json!(true));
-            assert_eq!(by_name("file.txt")["isDirectory"], json!(false));
-            assert_eq!(by_name("kernel.txt")["isDirectory"], json!(false));
-            assert_eq!(by_name("link-dir")["isDirectory"], json!(true));
-            assert_eq!(by_name("link-file")["isDirectory"], json!(false));
-            for entry in typed {
-                assert_eq!(
-                    entry["parentPath"],
-                    json!("/tmp/readdir-raw-dirents"),
-                    "stdout: {stdout}"
-                );
-                assert_eq!(
-                    entry["path"],
-                    json!("/tmp/readdir-raw-dirents"),
-                    "stdout: {stdout}"
-                );
-            }
-        }
-
-        fn javascript_writev_raw_payload_preserves_stream_copy_order() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let mut next_request_id = 4;
-
-            let (stdout, stderr, exit_code) = run_guest_node_eval(
-                &mut sidecar,
-                &vm_id,
-                &connection_id,
-                &session_id,
-                &mut next_request_id,
-                "proc-js-writev-stream-copy",
-                r#"
-(async () => {
-  const fs = require("node:fs");
-  const chunkSize = 16 * 1024;
-  const chunkCount = 64;
-  const chunks = [];
-  for (let i = 0; i < chunkCount; i++) {
-    chunks.push(Buffer.alloc(chunkSize, i));
-  }
-  fs.writeFileSync("/tmp/writev-source.bin", Buffer.concat(chunks));
-
-  await new Promise((resolve, reject) => {
-    const reader = fs.createReadStream("/tmp/writev-source.bin", { highWaterMark: chunkSize });
-    const writer = fs.createWriteStream("/tmp/writev-dest.bin", { highWaterMark: chunkSize });
-    reader.on("data", (chunk) => {
-      if (!writer.write(chunk)) {
-        reader.pause();
-        writer.once("drain", () => reader.resume());
-      }
-    });
-    reader.on("error", reject);
-    writer.on("error", reject);
-    reader.on("end", () => writer.end());
-    writer.on("close", resolve);
-  });
-
-	  const copied = fs.readFileSync("/tmp/writev-dest.bin");
-	  const source = fs.readFileSync("/tmp/writev-source.bin");
-	  const makePattern = (size) => {
-	    const buffer = Buffer.alloc(size);
-	    for (let i = 0; i < buffer.length; i++) {
-	      buffer[i] = (i * 31 + 7) & 0xff;
-	    }
-	    return buffer;
-	  };
-	  const readStream = (path, options = {}) => new Promise((resolve, reject) => {
-	    const chunks = [];
-	    const sizes = [];
-	    const reader = fs.createReadStream(path, options);
-	    reader.on("data", (chunk) => {
-	      chunks.push(Buffer.from(chunk));
-	      sizes.push(chunk.length);
-	    });
-	    reader.on("error", reject);
-	    reader.on("end", () => resolve({ buffer: Buffer.concat(chunks), sizes }));
-	  });
-	
-	  const bigSource = makePattern(2 * 1024 * 1024 + 12345);
-	  fs.writeFileSync("/tmp/read-ahead-big.bin", bigSource);
-	  const bigRead = await readStream("/tmp/read-ahead-big.bin", { highWaterMark: 64 * 1024 });
-	  const partialTailSource = makePattern(1024 * 1024 + 17);
-	  fs.writeFileSync("/tmp/read-ahead-tail.bin", partialTailSource);
-	  const partialTailRead = await readStream("/tmp/read-ahead-tail.bin", { highWaterMark: 64 * 1024 });
-	  const rangeStart = 12345;
-	  const rangeEnd = 234567;
-	  const rangeRead = await readStream("/tmp/read-ahead-big.bin", {
-	    start: rangeStart,
-	    end: rangeEnd,
-	    highWaterMark: 7777,
-	  });
-	  const smallSource = makePattern(123);
-	  fs.writeFileSync("/tmp/read-ahead-small.bin", smallSource);
-	  const smallRead = await readStream("/tmp/read-ahead-small.bin", { highWaterMark: 64 * 1024 });
-	  const orderedFd = fs.openSync("/tmp/writev-ordered.txt", "w");
-	  const orderedBytes = fs.writevSync(orderedFd, [
-	    Buffer.from("aa"),
-	    Buffer.from("bb"),
-    Buffer.from("cc"),
-  ]);
-  fs.closeSync(orderedFd);
-
-  const closedFd = fs.openSync("/tmp/writev-closed.txt", "w");
-  fs.closeSync(closedFd);
-  let closedCode = null;
-  try {
-    fs.writevSync(closedFd, [Buffer.from("x")]);
-  } catch (error) {
-    closedCode = error.code;
-  }
-
-  process.stdout.write(`${JSON.stringify({
-    equal: copied.equals(source),
-    size: copied.length,
-	    first: copied[0],
-	    last: copied[copied.length - 1],
-	    bigEqual: bigRead.buffer.equals(bigSource),
-	    bigSize: bigRead.buffer.length,
-	    bigChunks: bigRead.sizes.length,
-	    bigLastChunk: bigRead.sizes[bigRead.sizes.length - 1],
-	    bigFullChunks: bigRead.sizes.slice(0, -1).every((size) => size === 64 * 1024),
-	    partialTailEqual: partialTailRead.buffer.equals(partialTailSource),
-	    partialTailLastChunk: partialTailRead.sizes[partialTailRead.sizes.length - 1],
-	    rangeEqual: rangeRead.buffer.equals(bigSource.subarray(rangeStart, rangeEnd + 1)),
-	    rangeSize: rangeRead.buffer.length,
-	    rangeMaxChunk: Math.max(...rangeRead.sizes),
-	    smallEqual: smallRead.buffer.equals(smallSource),
-	    smallChunks: smallRead.sizes,
-	    ordered: fs.readFileSync("/tmp/writev-ordered.txt", "utf8"),
-	    orderedBytes,
-	    closedCode,
-	  })}\n`);
-})().catch((error) => {
-  console.error(error && error.stack ? error.stack : String(error));
-  process.exit(1);
-});
-"#,
-            );
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            let payload = stdout_json(&stdout);
-            assert_eq!(payload["equal"], json!(true), "stdout: {stdout}");
-            assert_eq!(payload["size"], json!(64 * 16 * 1024), "stdout: {stdout}");
-            assert_eq!(payload["first"], json!(0), "stdout: {stdout}");
-            assert_eq!(payload["last"], json!(63), "stdout: {stdout}");
-            assert_eq!(payload["bigEqual"], json!(true), "stdout: {stdout}");
-            assert_eq!(
-                payload["bigSize"],
-                json!(2 * 1024 * 1024 + 12345),
-                "stdout: {stdout}"
-            );
-            assert_eq!(payload["bigChunks"], json!(33), "stdout: {stdout}");
-            assert_eq!(payload["bigLastChunk"], json!(12345), "stdout: {stdout}");
-            assert_eq!(payload["bigFullChunks"], json!(true), "stdout: {stdout}");
-            assert_eq!(payload["partialTailEqual"], json!(true), "stdout: {stdout}");
-            assert_eq!(
-                payload["partialTailLastChunk"],
-                json!(17),
-                "stdout: {stdout}"
-            );
-            assert_eq!(payload["rangeEqual"], json!(true), "stdout: {stdout}");
-            assert_eq!(
-                payload["rangeSize"],
-                json!(234567 - 12345 + 1),
-                "stdout: {stdout}"
-            );
-            assert_eq!(payload["rangeMaxChunk"], json!(7777), "stdout: {stdout}");
-            assert_eq!(payload["smallEqual"], json!(true), "stdout: {stdout}");
-            assert_eq!(payload["smallChunks"], json!([123]), "stdout: {stdout}");
-            assert_eq!(payload["ordered"], json!("aabbcc"), "stdout: {stdout}");
-            assert_eq!(payload["orderedBytes"], json!(6), "stdout: {stdout}");
-            assert_eq!(payload["closedCode"], json!("EBADF"), "stdout: {stdout}");
-        }
-
-        fn javascript_imports_guest_written_modules_after_miss_work() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel.mkdir("/app", true).expect("create app dir");
-                vm.kernel
-                    .mkdir("/fixtures", true)
-                    .expect("create fixtures dir");
-                vm.kernel
-                    .write_file(
-                        "/tmp/preexisting.mjs",
-                        b"export const value = 'preexisting';\n".to_vec(),
-                    )
-                    .expect("write preexisting module");
-                vm.kernel
-                    .write_file(
-                        "/app/main.js",
-                        br#"
-import fs from "node:fs";
-
-const seen = [];
-async function expectImport(label, specifier, expected) {
-  const mod = await import(specifier);
-  if (mod.value !== expected) {
-    throw new Error(`${label}: expected ${expected}, got ${mod.value}`);
-  }
-  seen.push(label);
-}
-
-await expectImport("PRE_OK", "/tmp/preexisting.mjs", "preexisting");
-
-fs.writeFileSync("/tmp/fresh-path.mjs", "export const value = 'fresh-path';\n");
-await expectImport("FRESH_PATH_OK", "/tmp/fresh-path.mjs", "fresh-path");
-
-fs.writeFileSync("/tmp/fresh-url.mjs", "export const value = 'fresh-url';\n");
-await expectImport("FRESH_URL_OK", "file:///tmp/fresh-url.mjs", "fresh-url");
-
-let missed = false;
-try {
-  await import("/tmp/retry-after-miss.mjs");
-} catch {
-  missed = true;
-}
-if (!missed) {
-  throw new Error("NEG_RETRY did not miss before write");
-}
-fs.writeFileSync("/tmp/retry-after-miss.mjs", "export const value = 'retry';\n");
-await expectImport("NEG_RETRY_OK", "/tmp/retry-after-miss.mjs", "retry");
-
-console.log(seen.join("\n"));
-"#,
-                    )
-                    .expect("write entrypoint");
-            }
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::Execute(crate::protocol::ExecuteRequest {
-                        process_id: String::from("proc-js-import-fresh"),
-                        command: Some(String::from("node")),
-                        runtime: None,
-                        entrypoint: None,
-                        args: vec![String::from("/app/main.js")],
-                        env: std::collections::HashMap::new(),
-                        cwd: None,
-                        wasm_permission_tier: None,
-                    }),
-                ))
-                .expect("dispatch import fresh execute");
-
-            match response.response.payload {
-                ResponsePayload::ProcessStarted(response) => {
-                    assert_eq!(response.process_id, "proc-js-import-fresh");
-                }
-                other => panic!("unexpected execute response: {other:?}"),
-            }
-
-            let (stdout, stderr, exit_code) =
-                drain_process_output(&mut sidecar, &vm_id, "proc-js-import-fresh");
-
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            for marker in ["PRE_OK", "FRESH_PATH_OK", "FRESH_URL_OK", "NEG_RETRY_OK"] {
-                assert!(
-                    stdout.contains(marker),
-                    "missing {marker} in stdout: {stdout}"
-                );
-            }
-        }
-
-        fn javascript_fs_promises_batch_requests_before_waiting_on_sidecar_responses() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-promises-rpc-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import fs from "node:fs/promises";
-
-await Promise.all(
-  Array.from({ length: 10 }, (_, index) =>
-    fs.writeFile(`/rpc/write-${index}.txt`, `value-${index}`)
-  )
-);
-console.log("writes-complete");
-const contents = await Promise.all(
-  Array.from({ length: 10 }, (_, index) =>
-    fs.readFile(`/rpc/write-${index}.txt`, "utf8")
-  )
-);
-console.log(JSON.stringify(contents));
-await new Promise(() => {});
-"#,
-            );
-
-            let context =
-                sidecar
-                    .javascript_engine
-                    .create_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.clone(),
-                        bootstrap_module: None,
-                        compile_cache_root: None,
-                    });
-            let execution = sidecar
-            .javascript_engine
-            .start_execution(StartJavascriptExecutionRequest {
-                limits: Default::default(),
-                guest_runtime: Default::default(),
-                vm_id: vm_id.clone(),
-                context_id: context.context_id,
-                argv: vec![String::from("./entry.mjs")],
-                env: BTreeMap::from([(
-                    String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                    String::from(
-                        "[\"assert\",\"buffer\",\"console\",\"child_process\",\"crypto\",\"events\",\"fs\",\"path\",\"querystring\",\"stream\",\"string_decoder\",\"timers\",\"url\",\"util\",\"zlib\"]",
-                    ),
-                )]),
-                cwd: cwd.clone(),
-                inline_code: None,
-                wasm_module_bytes: None,
-            })
-            .expect("start fake javascript execution");
-
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel javascript process")
-            };
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                // ActiveProcess::new defaults host_cwd to "/", which would
-                // identity-map the whole host filesystem for this process;
-                // real execute paths always set it, so mirror that here.
-                let mut process = ActiveProcess::new(
-                    kernel_handle.pid(),
-                    kernel_handle,
-                    GuestRuntimeKind::JavaScript,
-                    ActiveExecution::Javascript(execution),
-                );
-                process.host_cwd = cwd.clone();
-                vm.active_processes
-                    .insert(String::from("proc-js-promises"), process);
-            }
-
-            let mut saw_write_batch = false;
-            let mut saw_read_batch = false;
-            let mut saw_stdout = false;
-            let mut held_exit = None;
-            let mut pending_requests = Vec::new();
-
-            for _ in 0..40 {
-                let event = {
-                    let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                    let process = vm
-                        .active_processes
-                        .get_mut("proc-js-promises")
-                        .expect("javascript process should be tracked");
-                    match process
-                        .execution
-                        .poll_event_blocking(Duration::from_secs(5))
-                        .expect("poll javascript promises event")
-                    {
-                        Some(event) => event,
-                        // Stream end: exit observed and trailing output done.
-                        None => break,
-                    }
-                };
-
-                match event {
-                    ActiveExecutionEvent::JavascriptSyncRpcRequest(request) => {
-                        if !request.method.starts_with("fs.promises.") {
-                            sidecar
-                                .handle_execution_event(
-                                    &vm_id,
-                                    "proc-js-promises",
-                                    ActiveExecutionEvent::JavascriptSyncRpcRequest(request),
-                                )
-                                .expect("handle javascript promises setup rpc event");
-                            continue;
-                        }
-
-                        pending_requests.push(request);
-
-                        let expected_method = if !saw_write_batch {
-                            "fs.promises.writeFile"
-                        } else if !saw_read_batch {
-                            "fs.promises.readFile"
-                        } else {
-                            panic!("received unexpected extra fs.promises request batch");
-                        };
-
-                        if pending_requests.len() == 10 {
-                            assert!(
-                                pending_requests
-                                    .iter()
-                                    .all(|request| request.method == expected_method),
-                                "expected batched {expected_method} requests, got {:?}",
-                                pending_requests
-                                    .iter()
-                                    .map(|request| request.method.as_str())
-                                    .collect::<Vec<_>>()
-                            );
-
-                            for request in pending_requests.drain(..) {
-                                sidecar
-                                    .handle_execution_event(
-                                        &vm_id,
-                                        "proc-js-promises",
-                                        ActiveExecutionEvent::JavascriptSyncRpcRequest(request),
-                                    )
-                                    .expect("handle batched javascript promises rpc event");
-                            }
-
-                            if !saw_write_batch {
-                                saw_write_batch = true;
-                            } else {
-                                saw_read_batch = true;
-                            }
-                        }
-                    }
-                    ActiveExecutionEvent::Stdout(chunk) => {
-                        let stdout = String::from_utf8(chunk).expect("stdout utf8");
-                        if stdout.contains(r#"["value-0","value-1","value-2","value-3","value-4","value-5","value-6","value-7","value-8","value-9"]"#) {
-                            saw_stdout = true;
-                            break;
-                        }
-                    }
-                    // Exit can arrive ahead of trailing stdout (event-driven
-                    // exit); hold it (the tail removes the process itself) and
-                    // keep polling for trailing output until the stream ends.
-                    ActiveExecutionEvent::Exited(code) => {
-                        held_exit = Some(code);
-                    }
-                    other => {
-                        let _ = sidecar
-                            .handle_execution_event(&vm_id, "proc-js-promises", other)
-                            .expect("handle javascript promises side event");
-                    }
-                }
-            }
-
-            let content = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                (0..10)
-                    .map(|index| {
-                        String::from_utf8(
-                            vm.kernel
-                                .read_file(&format!("/rpc/write-{index}.txt"))
-                                .expect("read bridged file from kernel"),
-                        )
-                        .expect("utf8 file contents")
-                    })
-                    .collect::<Vec<_>>()
-            };
-            assert_eq!(
-                content,
-                (0..10)
-                    .map(|index| format!("value-{index}"))
-                    .collect::<Vec<_>>()
-            );
-            assert!(
-                saw_write_batch,
-                "expected Promise.all(writeFile) to issue a full batch before the first response"
-            );
-            assert!(
-                saw_read_batch,
-                "expected Promise.all(readFile) to issue a full batch before the first response"
-            );
-            assert!(
-                saw_stdout || held_exit == Some(0),
-                "expected guest stdout marker or clean exit after the concurrent fs.promises round-trip (saw_stdout={saw_stdout}, exit={held_exit:?})"
-            );
-
-            let process = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.active_processes
-                    .remove("proc-js-promises")
-                    .expect("remove fake javascript process")
-            };
-            cleanup_fake_runtime_process(process);
-        }
-        #[test]
-        fn javascript_crypto_basic_sync_rpcs_match_shared_conformance_fixture() {
-            #[derive(serde::Deserialize)]
-            struct CryptoScryptFixture {
-                #[serde(rename = "N")]
-                n: u64,
-                r: u32,
-                p: u32,
-            }
-
-            #[derive(serde::Deserialize)]
-            struct CryptoAesCbcFixture {
-                algorithm: String,
-                plaintext: String,
-                #[serde(rename = "keyHex")]
-                key_hex: String,
-                #[serde(rename = "ivHex")]
-                iv_hex: String,
-            }
-
-            #[derive(serde::Deserialize)]
-            struct CryptoAesGcmFixture {
-                algorithm: String,
-                plaintext: String,
-                aad: String,
-                #[serde(rename = "keyHex")]
-                key_hex: String,
-                #[serde(rename = "ivHex")]
-                iv_hex: String,
-                #[serde(rename = "authTagLength")]
-                auth_tag_length: usize,
-            }
-
-            #[derive(serde::Deserialize)]
-            struct CryptoExpectedFixture {
-                md5: String,
-                sha224: String,
-                sha256: String,
-                sha384: String,
-                #[serde(rename = "hmacSha256")]
-                hmac_sha256: String,
-                #[serde(rename = "hmacSha384")]
-                hmac_sha384: String,
-                #[serde(rename = "pbkdf2Sha256")]
-                pbkdf2_sha256: String,
-                #[serde(rename = "pbkdf2Sha384")]
-                pbkdf2_sha384: String,
-                scrypt: String,
-                #[serde(rename = "aes256CbcCiphertext")]
-                aes256_cbc_ciphertext: String,
-                #[serde(rename = "aes256GcmCiphertext")]
-                aes256_gcm_ciphertext: String,
-                #[serde(rename = "aes256GcmAuthTag")]
-                aes256_gcm_auth_tag: String,
-                #[serde(rename = "aes256GcmWebCryptoCiphertext")]
-                aes256_gcm_web_crypto_ciphertext: String,
-                primes: CryptoPrimeFixture,
-            }
-
-            #[derive(serde::Deserialize)]
-            struct CryptoPrimeFixture {
-                bits: u64,
-                #[serde(rename = "safeBits")]
-                safe_bits: u64,
-                #[serde(rename = "bufferBits")]
-                buffer_bits: u64,
-                #[serde(rename = "bufferByteLength")]
-                buffer_byte_length: usize,
-            }
-
-            #[derive(serde::Deserialize)]
-            struct CryptoBasicFixture {
-                message: String,
-                #[serde(rename = "hmacKey")]
-                hmac_key: String,
-                password: String,
-                salt: String,
-                iterations: u32,
-                #[serde(rename = "keyLength")]
-                key_length: u32,
-                scrypt: CryptoScryptFixture,
-                #[serde(rename = "aesCbc")]
-                aes_cbc: CryptoAesCbcFixture,
-                #[serde(rename = "aesGcm")]
-                aes_gcm: CryptoAesGcmFixture,
-                expected: CryptoExpectedFixture,
-            }
-
-            fn decode_hex(input: &str) -> Vec<u8> {
-                input
-                    .as_bytes()
-                    .chunks_exact(2)
-                    .map(|chunk| {
-                        u8::from_str_radix(std::str::from_utf8(chunk).expect("hex utf8"), 16)
-                            .expect("hex byte")
-                    })
-                    .collect()
-            }
-
-            fn decode_base64_response(value: Value) -> String {
-                let bytes = base64::engine::general_purpose::STANDARD
-                    .decode(value.as_str().expect("crypto response string"))
-                    .expect("crypto response base64");
-                bytes
-                    .iter()
-                    .map(|byte| format!("{byte:02x}"))
-                    .collect::<String>()
-            }
-
-            fn base64_arg(value: &str) -> Value {
-                json!(base64::engine::general_purpose::STANDARD.encode(value))
-            }
-
-            fn base64_bytes_arg(value: &[u8]) -> Value {
-                json!(base64::engine::general_purpose::STANDARD.encode(value))
-            }
-
-            fn base64_bytes(value: &[u8]) -> String {
-                base64::engine::general_purpose::STANDARD.encode(value)
-            }
-
-            fn parse_json_string(value: Value) -> Value {
-                serde_json::from_str(value.as_str().expect("crypto response string"))
-                    .expect("crypto response json")
-            }
-
-            fn bit_len_decimal(value: &Value) -> usize {
-                let mut number = value
-                    .as_str()
-                    .expect("prime decimal string")
-                    .parse::<u128>()
-                    .expect("prime decimal fits fixture range");
-                let mut bits = 0;
-                while number > 0 {
-                    bits += 1;
-                    number >>= 1;
-                }
-                bits
-            }
-
-            let fixture: CryptoBasicFixture = serde_json::from_str(include_str!(
-                "../../../tests/fixtures/crypto-basic-conformance.json"
-            ))
-            .expect("crypto fixture");
-            let mut process = create_crypto_test_process();
-            let mut next_id = 1;
-
-            for (algorithm, expected) in [
-                ("md5", fixture.expected.md5.as_str()),
-                ("sha224", fixture.expected.sha224.as_str()),
-                ("sha256", fixture.expected.sha256.as_str()),
-                ("sha384", fixture.expected.sha384.as_str()),
-            ] {
-                let response = crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut process,
-                    &JavascriptSyncRpcRequest {
-                        id: next_id,
-                        method: String::from("crypto.hashDigest"),
-                        args: vec![json!(algorithm), base64_arg(&fixture.message)],
-                        raw_bytes_args: std::collections::HashMap::new(),
-                    },
-                )
-                .expect("hashDigest response");
-                next_id += 1;
-                assert_eq!(decode_base64_response(response), expected, "{algorithm}");
-            }
-
-            for (algorithm, expected) in [
-                ("sha256", fixture.expected.hmac_sha256.as_str()),
-                ("sha384", fixture.expected.hmac_sha384.as_str()),
-            ] {
-                let response = crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut process,
-                    &JavascriptSyncRpcRequest {
-                        id: next_id,
-                        method: String::from("crypto.hmacDigest"),
-                        args: vec![
-                            json!(algorithm),
-                            base64_arg(&fixture.hmac_key),
-                            base64_arg(&fixture.message),
-                        ],
-                        raw_bytes_args: std::collections::HashMap::new(),
-                    },
-                )
-                .expect("hmacDigest response");
-                next_id += 1;
-                assert_eq!(decode_base64_response(response), expected, "{algorithm}");
-            }
-
-            for (algorithm, expected) in [
-                ("sha256", fixture.expected.pbkdf2_sha256.as_str()),
-                ("sha384", fixture.expected.pbkdf2_sha384.as_str()),
-            ] {
-                let response = crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut process,
-                    &JavascriptSyncRpcRequest {
-                        id: next_id,
-                        method: String::from("crypto.pbkdf2"),
-                        args: vec![
-                            base64_arg(&fixture.password),
-                            base64_arg(&fixture.salt),
-                            json!(fixture.iterations),
-                            json!(fixture.key_length),
-                            json!(algorithm),
-                        ],
-                        raw_bytes_args: std::collections::HashMap::new(),
-                    },
-                )
-                .expect("pbkdf2 response");
-                next_id += 1;
-                assert_eq!(decode_base64_response(response), expected, "{algorithm}");
-            }
-
-            let scrypt_options = json!({
-                "N": fixture.scrypt.n,
-                "r": fixture.scrypt.r,
-                "p": fixture.scrypt.p,
-            })
-            .to_string();
-            let scrypt = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    id: next_id,
-                    method: String::from("crypto.scrypt"),
-                    args: vec![
-                        base64_arg(&fixture.password),
-                        base64_arg(&fixture.salt),
-                        json!(fixture.key_length),
-                        json!(scrypt_options),
-                    ],
-                    raw_bytes_args: std::collections::HashMap::new(),
-                },
-            )
-            .expect("scrypt response");
-            assert_eq!(decode_base64_response(scrypt), fixture.expected.scrypt);
-
-            let cipher = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    id: next_id + 1,
-                    method: String::from("crypto.cipheriv"),
-                    args: vec![
-                        json!(fixture.aes_cbc.algorithm.clone()),
-                        base64_bytes_arg(&decode_hex(&fixture.aes_cbc.key_hex)),
-                        base64_bytes_arg(&decode_hex(&fixture.aes_cbc.iv_hex)),
-                        base64_arg(&fixture.aes_cbc.plaintext),
-                        json!("{}"),
-                    ],
-                    raw_bytes_args: std::collections::HashMap::new(),
-                },
-            )
-            .expect("cipheriv response");
-            let cipher_payload: Value =
-                serde_json::from_str(cipher.as_str().expect("cipheriv string response"))
-                    .expect("cipheriv json");
-            let ciphertext = cipher_payload["data"].as_str().expect("cipher data");
-            assert_eq!(
-                decode_base64_response(Value::String(ciphertext.to_string())),
-                fixture.expected.aes256_cbc_ciphertext
-            );
-
-            let decipher = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    id: next_id + 2,
-                    method: String::from("crypto.decipheriv"),
-                    args: vec![
-                        json!(fixture.aes_cbc.algorithm.clone()),
-                        base64_bytes_arg(&decode_hex(&fixture.aes_cbc.key_hex)),
-                        base64_bytes_arg(&decode_hex(&fixture.aes_cbc.iv_hex)),
-                        json!(ciphertext),
-                        json!("{}"),
-                    ],
-                    raw_bytes_args: std::collections::HashMap::new(),
-                },
-            )
-            .expect("decipheriv response");
-            let plaintext = base64::engine::general_purpose::STANDARD
-                .decode(decipher.as_str().expect("decipher response"))
-                .expect("decipher base64");
-            assert_eq!(plaintext, fixture.aes_cbc.plaintext.as_bytes());
-
-            let gcm_options = json!({
-                "aad": base64::engine::general_purpose::STANDARD.encode(&fixture.aes_gcm.aad),
-                "authTagLength": fixture.aes_gcm.auth_tag_length,
-            })
-            .to_string();
-            let gcm_cipher = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    id: next_id + 3,
-                    method: String::from("crypto.cipheriv"),
-                    args: vec![
-                        json!(fixture.aes_gcm.algorithm.clone()),
-                        base64_bytes_arg(&decode_hex(&fixture.aes_gcm.key_hex)),
-                        base64_bytes_arg(&decode_hex(&fixture.aes_gcm.iv_hex)),
-                        base64_arg(&fixture.aes_gcm.plaintext),
-                        json!(gcm_options),
-                    ],
-                    raw_bytes_args: std::collections::HashMap::new(),
-                },
-            )
-            .expect("gcm cipheriv response");
-            let gcm_payload: Value =
-                serde_json::from_str(gcm_cipher.as_str().expect("gcm cipheriv string response"))
-                    .expect("gcm cipheriv json");
-            let gcm_ciphertext = gcm_payload["data"].as_str().expect("gcm cipher data");
-            let gcm_auth_tag = gcm_payload["authTag"].as_str().expect("gcm auth tag");
-            assert_eq!(
-                decode_base64_response(Value::String(gcm_ciphertext.to_string())),
-                fixture.expected.aes256_gcm_ciphertext
-            );
-            assert_eq!(
-                decode_base64_response(Value::String(gcm_auth_tag.to_string())),
-                fixture.expected.aes256_gcm_auth_tag
-            );
-
-            let gcm_decipher_options = json!({
-                "aad": base64::engine::general_purpose::STANDARD.encode(&fixture.aes_gcm.aad),
-                "authTag": gcm_auth_tag,
-                "authTagLength": fixture.aes_gcm.auth_tag_length,
-            })
-            .to_string();
-            let gcm_decipher = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    id: next_id + 4,
-                    method: String::from("crypto.decipheriv"),
-                    args: vec![
-                        json!(fixture.aes_gcm.algorithm.clone()),
-                        base64_bytes_arg(&decode_hex(&fixture.aes_gcm.key_hex)),
-                        base64_bytes_arg(&decode_hex(&fixture.aes_gcm.iv_hex)),
-                        json!(gcm_ciphertext),
-                        json!(gcm_decipher_options),
-                    ],
-                    raw_bytes_args: std::collections::HashMap::new(),
-                },
-            )
-            .expect("gcm decipheriv response");
-            let gcm_plaintext = base64::engine::general_purpose::STANDARD
-                .decode(gcm_decipher.as_str().expect("gcm decipher response"))
-                .expect("gcm decipher base64");
-            assert_eq!(gcm_plaintext, fixture.aes_gcm.plaintext.as_bytes());
-
-            let aes_gcm_key = decode_hex(&fixture.aes_gcm.key_hex);
-            let aes_gcm_iv = decode_hex(&fixture.aes_gcm.iv_hex);
-            let subtle_imported_key = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut process,
-                    &JavascriptSyncRpcRequest {
-                        id: next_id + 5,
-                        method: String::from("crypto.subtle"),
-                        args: vec![json!(serde_json::to_string(&json!({
-                            "op": "importKey",
-                            "format": "raw",
-                            "keyData": base64_bytes(&aes_gcm_key),
-                            "algorithm": { "name": "AES-GCM" },
-                            "extractable": false,
-                            "usages": ["encrypt", "decrypt"],
-                        }))
-                        .expect("serialize subtle importKey request"))],
-                        raw_bytes_args: std::collections::HashMap::new(),
-                    },
-                )
-                .expect("fixture crypto.subtle importKey response"),
-            )["key"]
-                .clone();
-            let subtle_algorithm = json!({
-                "name": "AES-GCM",
-                "iv": base64_bytes(&aes_gcm_iv),
-                "additionalData": base64_bytes(fixture.aes_gcm.aad.as_bytes()),
-                "tagLength": fixture.aes_gcm.auth_tag_length * 8,
-            });
-            let subtle_encrypted = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut process,
-                    &JavascriptSyncRpcRequest {
-                        id: next_id + 6,
-                        method: String::from("crypto.subtle"),
-                        args: vec![json!(serde_json::to_string(&json!({
-                            "op": "encrypt",
-                            "algorithm": subtle_algorithm,
-                            "key": subtle_imported_key,
-                            "data": base64_bytes(fixture.aes_gcm.plaintext.as_bytes()),
-                        }))
-                        .expect("serialize subtle encrypt request"))],
-                        raw_bytes_args: std::collections::HashMap::new(),
-                    },
-                )
-                .expect("fixture crypto.subtle encrypt response"),
-            );
-            let subtle_ciphertext = subtle_encrypted["data"]
-                .as_str()
-                .expect("subtle encrypted data");
-            assert_eq!(
-                decode_base64_response(Value::String(subtle_ciphertext.to_string())),
-                fixture.expected.aes256_gcm_web_crypto_ciphertext
-            );
-            let subtle_decrypted = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut process,
-                    &JavascriptSyncRpcRequest {
-                        id: next_id + 7,
-                        method: String::from("crypto.subtle"),
-                        args: vec![json!(serde_json::to_string(&json!({
-                            "op": "decrypt",
-                            "algorithm": subtle_algorithm,
-                            "key": subtle_imported_key,
-                            "data": subtle_ciphertext,
-                        }))
-                        .expect("serialize subtle decrypt request"))],
-                        raw_bytes_args: std::collections::HashMap::new(),
-                    },
-                )
-                .expect("fixture crypto.subtle decrypt response"),
-            );
-            let subtle_plaintext = base64::engine::general_purpose::STANDARD
-                .decode(
-                    subtle_decrypted["data"]
-                        .as_str()
-                        .expect("subtle decrypted data"),
-                )
-                .expect("subtle decrypt base64");
-            assert_eq!(subtle_plaintext, fixture.aes_gcm.plaintext.as_bytes());
-
-            let generated_prime = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut process,
-                    &JavascriptSyncRpcRequest {
-                        id: next_id + 8,
-                        method: String::from("crypto.generatePrimeSync"),
-                        args: vec![
-                            json!(fixture.expected.primes.bits),
-                            json!(r#"{"hasOptions":true,"options":{"bigint":true}}"#),
-                        ],
-                        raw_bytes_args: std::collections::HashMap::new(),
-                    },
-                )
-                .expect("generatePrimeSync bigint response"),
-            );
-            assert_eq!(generated_prime["__type"], json!("bigint"));
-            assert_eq!(
-                bit_len_decimal(&generated_prime["value"]),
-                fixture.expected.primes.bits as usize
-            );
-
-            let generated_safe_prime = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut process,
-                    &JavascriptSyncRpcRequest {
-                        id: next_id + 9,
-                        method: String::from("crypto.generatePrimeSync"),
-                        args: vec![
-                            json!(fixture.expected.primes.safe_bits),
-                            json!(r#"{"hasOptions":true,"options":{"bigint":true,"safe":true}}"#),
-                        ],
-                        raw_bytes_args: std::collections::HashMap::new(),
-                    },
-                )
-                .expect("generatePrimeSync safe bigint response"),
-            );
-            assert_eq!(generated_safe_prime["__type"], json!("bigint"));
-            assert_eq!(
-                bit_len_decimal(&generated_safe_prime["value"]),
-                fixture.expected.primes.safe_bits as usize
-            );
-
-            let generated_prime_buffer = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut process,
-                    &JavascriptSyncRpcRequest {
-                        id: next_id + 10,
-                        method: String::from("crypto.generatePrimeSync"),
-                        args: vec![
-                            json!(fixture.expected.primes.buffer_bits),
-                            json!(r#"{"hasOptions":true,"options":{}}"#),
-                        ],
-                        raw_bytes_args: std::collections::HashMap::new(),
-                    },
-                )
-                .expect("generatePrimeSync buffer response"),
-            );
-            assert_eq!(generated_prime_buffer["__type"], json!("buffer"));
-            let generated_prime_buffer = base64::engine::general_purpose::STANDARD
-                .decode(
-                    generated_prime_buffer["value"]
-                        .as_str()
-                        .expect("prime buffer base64"),
-                )
-                .expect("prime buffer decode");
-            assert_eq!(
-                generated_prime_buffer.len(),
-                fixture.expected.primes.buffer_byte_length
-            );
-        }
-
-        #[test]
-        fn javascript_crypto_basic_sync_rpcs_round_trip_through_sidecar() {
-            fn decode_hex(input: &str) -> Vec<u8> {
-                input
-                    .as_bytes()
-                    .chunks_exact(2)
-                    .map(|chunk| {
-                        u8::from_str_radix(std::str::from_utf8(chunk).expect("hex utf8"), 16)
-                            .expect("hex byte")
-                    })
-                    .collect()
-            }
-
-            fn decode_base64_response(value: Value) -> Vec<u8> {
-                base64::engine::general_purpose::STANDARD
-                    .decode(value.as_str().expect("crypto response string"))
-                    .expect("crypto response base64")
-            }
-
-            let mut process = create_crypto_test_process();
-
-            let sha256 = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("crypto.hashDigest"),
-                    args: vec![json!("sha256"), json!("YWdlbnQtb3M=")],
-                },
-            )
-            .expect("hashDigest response");
-            assert_eq!(
-                decode_base64_response(sha256),
-                decode_hex("c242c43a13eb523ec02bb1de36d3d467947790e3f005eb7a9cefff357ca54101")
-            );
-
-            let sha512 = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("crypto.hashDigest"),
-                    args: vec![json!("sha512"), json!("YWdlbnQtb3M=")],
-                },
-            )
-            .expect("hashDigest response");
-            assert_eq!(
-                decode_base64_response(sha512),
-                decode_hex(
-                    "9a2983f6cda25d03276e1d2e4bbeff3dee90d4f549a9f4ea4894569998382be6323a7dd86bcef6f83c1b66ab5d9656da1fde2d1682438cdbe58af61fa5de0bb5",
-                )
-            );
-
-            let sha1 = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("crypto.hashDigest"),
-                    args: vec![json!("sha1"), json!("YWdlbnQtb3M=")],
-                },
-            )
-            .expect("hashDigest response");
-            assert_eq!(
-                decode_base64_response(sha1),
-                decode_hex("1d43407501651ea75bc63085f352f99bdcc6e364")
-            );
-
-            let sha224 = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    id: 8,
-                    method: String::from("crypto.hashDigest"),
-                    args: vec![json!("sha224"), json!("YWdlbnQtb3M=")],
-                    raw_bytes_args: std::collections::HashMap::new(),
-                },
-            )
-            .expect("hashDigest response");
-            assert_eq!(
-                decode_base64_response(sha224),
-                decode_hex("eb0fa702ceaabc1849b424fb402cdb2a1cf07e1ec51e151873b397a0")
-            );
-
-            let sha384 = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    id: 9,
-                    method: String::from("crypto.hashDigest"),
-                    args: vec![json!("sha384"), json!("YWdlbnQtb3M=")],
-                    raw_bytes_args: std::collections::HashMap::new(),
-                },
-            )
-            .expect("hashDigest response");
-            assert_eq!(
-                decode_base64_response(sha384),
-                decode_hex(
-                    "68c265442956e3bae3ff6698ef43570023fd1060553d4d1aeaecee42186c6f94353a107d45e680bffb7ef2ad7f81e082"
-                )
-            );
-
-            let md5 = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 4,
-                    method: String::from("crypto.hashDigest"),
-                    args: vec![json!("md5"), json!("YWdlbnQtb3M=")],
-                },
-            )
-            .expect("hashDigest response");
-            assert_eq!(
-                decode_base64_response(md5),
-                decode_hex("43e0189b46f53703cf6cb1e6e93ff10d")
-            );
-
-            let hmac = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 5,
-                    method: String::from("crypto.hmacDigest"),
-                    args: vec![
-                        json!("sha256"),
-                        json!("YnJpZGdlLWtleQ=="),
-                        json!("YWdlbnQtb3M="),
-                    ],
-                },
-            )
-            .expect("hmacDigest response");
-            assert_eq!(
-                decode_base64_response(hmac),
-                decode_hex("c24fdd6215522cb3e716855135a1dec9402a3b13be243892c2192d17c57db3a3")
-            );
-
-            let hmac_sha384 = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    id: 10,
-                    method: String::from("crypto.hmacDigest"),
-                    args: vec![
-                        json!("sha384"),
-                        json!("YnJpZGdlLWtleQ=="),
-                        json!("YWdlbnQtb3M="),
-                    ],
-                    raw_bytes_args: std::collections::HashMap::new(),
-                },
-            )
-            .expect("hmacDigest response");
-            assert_eq!(
-                decode_base64_response(hmac_sha384),
-                decode_hex("fe3cf09b6f8cf9b78849c4429f54eda460b8c99bb1569ae376a45bbe64386df38b16164387ee263f9fa1dc5ef24e6bcf")
-            );
-
-            let pbkdf2 = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 6,
-                    method: String::from("crypto.pbkdf2"),
-                    args: vec![
-                        json!("aHVudGVyMg=="),
-                        json!("YWdlbnQtb3Mtc2FsdA=="),
-                        json!(1000),
-                        json!(32),
-                        json!("sha256"),
-                    ],
-                },
-            )
-            .expect("pbkdf2 response");
-            assert_eq!(
-                decode_base64_response(pbkdf2),
-                decode_hex("8e97a9f68ca2ebf44885a7a82d1ec3185cf2d6dcfde51a90278f793f9e57f0e8")
-            );
-
-            let pbkdf2_sha384 = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    id: 11,
-                    method: String::from("crypto.pbkdf2"),
-                    args: vec![
-                        json!("aHVudGVyMg=="),
-                        json!("YWdlbnQtb3Mtc2FsdA=="),
-                        json!(1000),
-                        json!(32),
-                        json!("sha384"),
-                    ],
-                    raw_bytes_args: std::collections::HashMap::new(),
-                },
-            )
-            .expect("pbkdf2 response");
-            assert_eq!(
-                decode_base64_response(pbkdf2_sha384),
-                decode_hex("92c0016509e37027704e1c797e38d05d5ab49f0548e78073366889e2f7242be3")
-            );
-
-            let scrypt = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut process,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 7,
-                    method: String::from("crypto.scrypt"),
-                    args: vec![
-                        json!("aHVudGVyMg=="),
-                        json!("YWdlbnQtb3Mtc2FsdA=="),
-                        json!(32),
-                        json!(r#"{"cost":16384,"blockSize":8,"parallelization":1}"#),
-                    ],
-                },
-            )
-            .expect("scrypt response");
-            assert_eq!(
-                decode_base64_response(scrypt),
-                decode_hex("1d0e6ac5c075c16c94c156480f725eb1c041e531fbb7f61f294f1d4fa50c14d9")
-            );
-        }
-        fn javascript_crypto_advanced_sync_rpcs_round_trip_through_sidecar() {
-            fn decode_base64(input: &str) -> Vec<u8> {
-                base64::engine::general_purpose::STANDARD
-                    .decode(input)
-                    .expect("base64 decode")
-            }
-
-            fn parse_json_string(value: Value) -> Value {
-                serde_json::from_str(value.as_str().expect("json string response"))
-                    .expect("parse json string")
-            }
-
-            let cipher_response = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut create_crypto_test_process(),
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 10,
-                    method: String::from("crypto.cipheriv"),
-                    args: vec![
-                        json!("aes-256-gcm"),
-                        json!(base64::engine::general_purpose::STANDARD.encode([7_u8; 32])),
-                        json!(base64::engine::general_purpose::STANDARD.encode([3_u8; 12])),
-                        json!(base64::engine::general_purpose::STANDARD.encode(b"secure-exec")),
-                        json!(r#"{"aad":"YWR2YW5jZWQ=","authTagLength":16}"#),
-                    ],
-                },
-            )
-            .expect("cipheriv response");
-            let cipher_payload = parse_json_string(cipher_response);
-            let ciphertext = cipher_payload["data"].as_str().expect("cipher data");
-            let auth_tag = cipher_payload["authTag"].as_str().expect("auth tag");
-
-            let decipher_response = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut create_crypto_test_process(),
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 11,
-                    method: String::from("crypto.decipheriv"),
-                    args: vec![
-                        json!("aes-256-gcm"),
-                        json!(base64::engine::general_purpose::STANDARD.encode([7_u8; 32])),
-                        json!(base64::engine::general_purpose::STANDARD.encode([3_u8; 12])),
-                        json!(ciphertext),
-                        json!(format!(
-                            r#"{{"aad":"YWR2YW5jZWQ=","authTag":"{auth_tag}","authTagLength":16}}"#
-                        )),
-                    ],
-                },
-            )
-            .expect("decipheriv response");
-            assert_eq!(
-                decode_base64(decipher_response.as_str().expect("decipher response")),
-                b"secure-exec"
-            );
-
-            let mut streaming_process = create_crypto_test_process();
-            let session_id = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut streaming_process,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 12,
-                    method: String::from("crypto.cipherivCreate"),
-                    args: vec![
-                        json!("cipher"),
-                        json!("aes-256-cbc"),
-                        json!(base64::engine::general_purpose::STANDARD.encode([9_u8; 32])),
-                        json!(base64::engine::general_purpose::STANDARD.encode([4_u8; 16])),
-                        json!(r#"{}"#),
-                    ],
-                },
-            )
-            .expect("cipherivCreate")
-            .as_u64()
-            .expect("session id");
-            let update =
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut streaming_process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 13,
-                        method: String::from("crypto.cipherivUpdate"),
-                        args: vec![
-                            json!(session_id),
-                            json!(base64::engine::general_purpose::STANDARD
-                                .encode(b"hello world 1234")),
-                        ],
-                    },
-                )
-                .expect("cipherivUpdate");
-            let final_payload = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut streaming_process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 14,
-                        method: String::from("crypto.cipherivFinal"),
-                        args: vec![json!(session_id)],
-                    },
-                )
-                .expect("cipherivFinal"),
-            );
-            assert!(!update.as_str().expect("update string").is_empty());
-            assert!(!final_payload["data"]
-                .as_str()
-                .expect("final data")
-                .is_empty());
-
-            let rsa = openssl::rsa::Rsa::generate(2048).expect("generate rsa");
-            let private_key = openssl::pkey::PKey::from_rsa(rsa).expect("private pkey from rsa");
-            let private_pem = String::from_utf8(
-                private_key
-                    .private_key_to_pem_pkcs8()
-                    .expect("private key to pem"),
-            )
-            .expect("private pem utf8");
-            let public_pem =
-                String::from_utf8(private_key.public_key_to_pem().expect("public key to pem"))
-                    .expect("public pem utf8");
-            let sign_key_json = serde_json::to_string(&public_pem).expect("public pem json");
-            let private_key_json = serde_json::to_string(&private_pem).expect("private pem json");
-
-            let signature = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut create_crypto_test_process(),
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 15,
-                    method: String::from("crypto.sign"),
-                    args: vec![
-                        json!("sha256"),
-                        json!(base64::engine::general_purpose::STANDARD.encode(b"signed")),
-                        json!(private_key_json),
-                    ],
-                },
-            )
-            .expect("crypto.sign");
-            let verified = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut create_crypto_test_process(),
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 16,
-                    method: String::from("crypto.verify"),
-                    args: vec![
-                        json!("sha256"),
-                        json!(base64::engine::general_purpose::STANDARD.encode(b"signed")),
-                        json!(sign_key_json),
-                        signature,
-                    ],
-                },
-            )
-            .expect("crypto.verify");
-            assert_eq!(verified, json!(true));
-
-            let encrypted = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut create_crypto_test_process(),
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 17,
-                    method: String::from("crypto.asymmetricOp"),
-                    args: vec![
-                        json!("publicEncrypt"),
-                        json!(sign_key_json),
-                        json!(base64::engine::general_purpose::STANDARD.encode(b"secret")),
-                    ],
-                },
-            )
-            .expect("publicEncrypt");
-            let decrypted = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut create_crypto_test_process(),
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 18,
-                    method: String::from("crypto.asymmetricOp"),
-                    args: vec![json!("privateDecrypt"), json!(private_key_json), encrypted],
-                },
-            )
-            .expect("privateDecrypt");
-            assert_eq!(
-                decode_base64(decrypted.as_str().expect("privateDecrypt string")),
-                b"secret"
-            );
-
-            let key_object = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut create_crypto_test_process(),
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 19,
-                        method: String::from("crypto.createKeyObject"),
-                        args: vec![json!("createPrivateKey"), json!(private_key_json)],
-                    },
-                )
-                .expect("createKeyObject"),
-            );
-            assert_eq!(key_object["type"], json!("private"));
-
-            let generated_pair = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut create_crypto_test_process(),
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 20,
-                        method: String::from("crypto.generateKeyPairSync"),
-                        args: vec![
-                            json!("rsa"),
-                            json!(r#"{"hasOptions":true,"options":{"modulusLength":1024,"publicExponent":{"__type":"buffer","value":"AQAB"},"publicKeyEncoding":{"format":"pem","type":"spki"},"privateKeyEncoding":{"format":"pem","type":"pkcs8"}}}"#),
-                        ],
-                    },
-                )
-                .expect("generateKeyPairSync"),
-            );
-            assert_eq!(generated_pair["publicKey"]["kind"], json!("string"));
-            assert_eq!(generated_pair["privateKey"]["kind"], json!("string"));
-
-            let generated_secret = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut create_crypto_test_process(),
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 21,
-                        method: String::from("crypto.generateKeySync"),
-                        args: vec![
-                            json!("aes"),
-                            json!(r#"{"hasOptions":true,"options":{"length":256}}"#),
-                        ],
-                    },
-                )
-                .expect("generateKeySync"),
-            );
-            assert_eq!(generated_secret["type"], json!("secret"));
-
-            let generated_prime = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut create_crypto_test_process(),
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 22,
-                        method: String::from("crypto.generatePrimeSync"),
-                        args: vec![
-                            json!(64),
-                            json!(r#"{"hasOptions":true,"options":{"bigint":true}}"#),
-                        ],
-                    },
-                )
-                .expect("generatePrimeSync"),
-            );
-            assert_eq!(generated_prime["__type"], json!("bigint"));
-
-            let mut alice = create_crypto_test_process();
-            let alice_id = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut alice,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 23,
-                    method: String::from("crypto.diffieHellmanSessionCreate"),
-                    args: vec![json!(r#"{"type":"ecdh","name":"P-256"}"#)],
-                },
-            )
-            .expect("alice session")
-            .as_u64()
-            .expect("alice session id");
-            let mut bob = create_crypto_test_process();
-            let bob_id = crate::execution::service_javascript_crypto_sync_rpc(
-                &mut bob,
-                &JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 24,
-                    method: String::from("crypto.diffieHellmanSessionCreate"),
-                    args: vec![json!(r#"{"type":"ecdh","name":"P-256"}"#)],
-                },
-            )
-            .expect("bob session")
-            .as_u64()
-            .expect("bob session id");
-            let alice_public = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut alice,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 25,
-                        method: String::from("crypto.diffieHellmanSessionCall"),
-                        args: vec![json!(alice_id), json!(r#"{"method":"generateKeys"}"#)],
-                    },
-                )
-                .expect("alice generate keys"),
-            )["result"]
-                .clone();
-            let bob_public = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut bob,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 26,
-                        method: String::from("crypto.diffieHellmanSessionCall"),
-                        args: vec![json!(bob_id), json!(r#"{"method":"generateKeys"}"#)],
-                    },
-                )
-                .expect("bob generate keys"),
-            )["result"]
-                .clone();
-            let alice_secret = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut alice,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 27,
-                        method: String::from("crypto.diffieHellmanSessionCall"),
-                        args: vec![
-                            json!(alice_id),
-                            json!(format!(
-                                r#"{{"method":"computeSecret","args":[{}]}}"#,
-                                serde_json::to_string(&bob_public).expect("serialize bob public")
-                            )),
-                        ],
-                    },
-                )
-                .expect("alice compute secret"),
-            )["result"]
-                .clone();
-            let bob_secret = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut bob,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 28,
-                        method: String::from("crypto.diffieHellmanSessionCall"),
-                        args: vec![
-                            json!(bob_id),
-                            json!(format!(
-                                r#"{{"method":"computeSecret","args":[{}]}}"#,
-                                serde_json::to_string(&alice_public)
-                                    .expect("serialize alice public")
-                            )),
-                        ],
-                    },
-                )
-                .expect("bob compute secret"),
-            )["result"]
-                .clone();
-            assert_eq!(alice_secret, bob_secret);
-
-            let subtle_digest = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut create_crypto_test_process(),
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 29,
-                        method: String::from("crypto.subtle"),
-                        args: vec![json!(
-                            r#"{"op":"digest","algorithm":"SHA-256","data":"YWdlbnQtb3M="}"#
-                        )],
-                    },
-                )
-                .expect("crypto.subtle digest"),
-            );
-            assert_eq!(
-                decode_base64(subtle_digest["data"].as_str().expect("subtle digest")),
-                decode_base64("wkLEOhPrUj7AK7HeNtPUZ5R3kOPwBet6nO//NXylQQE=")
-            );
-
-            let subtle_generated_key = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut create_crypto_test_process(),
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 30,
-                        method: String::from("crypto.subtle"),
-                        args: vec![json!(serde_json::to_string(&json!({
-                            "op": "generateKey",
-                            "algorithm": { "name": "AES-GCM", "length": 256 },
-                            "extractable": true,
-                            "usages": ["encrypt", "decrypt"],
-                        }))
-                        .expect("serialize subtle generateKey request"))],
-                    },
-                )
-                .expect("crypto.subtle generateKey"),
-            )["key"]
-                .clone();
-            assert_eq!(subtle_generated_key["type"], json!("secret"));
-            assert_eq!(subtle_generated_key["algorithm"]["name"], json!("AES-GCM"));
-            assert_eq!(subtle_generated_key["algorithm"]["length"], json!(256));
-
-            let subtle_exported_key = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut create_crypto_test_process(),
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 31,
-                        method: String::from("crypto.subtle"),
-                        args: vec![json!(serde_json::to_string(&json!({
-                            "op": "exportKey",
-                            "format": "raw",
-                            "key": subtle_generated_key,
-                        }))
-                        .expect("serialize subtle exportKey request"))],
-                    },
-                )
-                .expect("crypto.subtle exportKey"),
-            );
-            let exported_key_bytes =
-                decode_base64(subtle_exported_key["data"].as_str().expect("exported key"));
-            assert_eq!(exported_key_bytes.len(), 32);
-
-            let subtle_imported_key = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut create_crypto_test_process(),
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 32,
-                        method: String::from("crypto.subtle"),
-                        args: vec![json!(serde_json::to_string(&json!({
-                            "op": "importKey",
-                            "format": "raw",
-                            "keyData": subtle_exported_key["data"],
-                            "algorithm": { "name": "AES-GCM" },
-                            "extractable": true,
-                            "usages": ["encrypt", "decrypt"],
-                        }))
-                        .expect("serialize subtle importKey request"))],
-                    },
-                )
-                .expect("crypto.subtle importKey"),
-            )["key"]
-                .clone();
-            assert_eq!(subtle_imported_key["algorithm"]["length"], json!(256));
-
-            let subtle_encrypted = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut create_crypto_test_process(),
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 33,
-                        method: String::from("crypto.subtle"),
-                        args: vec![json!(serde_json::to_string(&json!({
-                            "op": "encrypt",
-                            "algorithm": {
-                                "name": "AES-GCM",
-                                "iv": "AAAAAAAAAAAAAAAA",
-                            },
-                            "key": subtle_imported_key,
-                            "data": "aGVsbG8=",
-                        }))
-                        .expect("serialize subtle encrypt request"))],
-                    },
-                )
-                .expect("crypto.subtle encrypt"),
-            );
-            assert!(
-                decode_base64(subtle_encrypted["data"].as_str().expect("encrypted data")).len()
-                    > b"hello".len()
-            );
-
-            let subtle_decrypted = parse_json_string(
-                crate::execution::service_javascript_crypto_sync_rpc(
-                    &mut create_crypto_test_process(),
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 34,
-                        method: String::from("crypto.subtle"),
-                        args: vec![json!(serde_json::to_string(&json!({
-                            "op": "decrypt",
-                            "algorithm": {
-                                "name": "AES-GCM",
-                                "iv": "AAAAAAAAAAAAAAAA",
-                            },
-                            "key": subtle_imported_key,
-                            "data": subtle_encrypted["data"],
-                        }))
-                        .expect("serialize subtle decrypt request"))],
-                    },
-                )
-                .expect("crypto.subtle decrypt"),
-            );
-            assert_eq!(
-                decode_base64(subtle_decrypted["data"].as_str().expect("decrypted data")),
-                b"hello"
-            );
-        }
-        fn javascript_sqlite_sync_rpcs_round_trip_and_persist_vm_files() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-sqlite-rpc-cwd");
-            let process_id = "proc-js-sqlite-rpc";
-
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("sqlite vm");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn sqlite kernel process")
-            };
-            let vm = sidecar.vms.get_mut(&vm_id).expect("sqlite vm");
-            vm.active_processes.insert(
-                String::from(process_id),
-                ActiveProcess::new(
-                    kernel_handle.pid(),
-                    kernel_handle,
-                    GuestRuntimeKind::JavaScript,
-                    ActiveExecution::Tool(ToolExecution::default()),
-                )
-                .with_host_cwd(cwd.clone()),
-            );
-
-            let database_id = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                process_id,
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("sqlite.open"),
-                    args: vec![json!("/workspace/app.db"), json!({})],
-                },
-            )
-            .expect("open sqlite database")
-            .as_u64()
-            .expect("database id");
-
-            let created = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                process_id,
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("sqlite.exec"),
-                    args: vec![
-                        json!(database_id),
-                        json!("CREATE TABLE items (id INTEGER PRIMARY KEY, payload BLOB NOT NULL)"),
-                    ],
-                },
-            )
-            .expect("create sqlite table");
-            assert_eq!(created, json!(0));
-
-            let statement_id = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                process_id,
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("sqlite.prepare"),
-                    args: vec![
-                        json!(database_id),
-                        json!("INSERT INTO items(id, payload) VALUES (?, ?)"),
-                    ],
-                },
-            )
-            .expect("prepare sqlite insert")
-            .as_u64()
-            .expect("statement id");
-
-            let insert = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                process_id,
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 4,
-                    method: String::from("sqlite.statement.run"),
-                    args: vec![
-                        json!(statement_id),
-                        json!([
-                            {
-                                "__agentosSqliteType": "bigint",
-                                "value": "9007199254740993",
-                            },
-                            {
-                                "__agentosSqliteType": "uint8array",
-                                "value": base64::engine::general_purpose::STANDARD.encode([1_u8, 2, 3]),
-                            }
-                        ]),
-                    ],
-                },
-            )
-            .expect("run sqlite insert");
-            assert_eq!(insert["changes"], json!(1));
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                process_id,
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 5,
-                    method: String::from("sqlite.statement.finalize"),
-                    args: vec![json!(statement_id)],
-                },
-            )
-            .expect("finalize sqlite insert");
-
-            let query = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                process_id,
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 6,
-                    method: String::from("sqlite.query"),
-                    args: vec![
-                        json!(database_id),
-                        json!("SELECT id, payload FROM items"),
-                        Value::Null,
-                        json!({ "readBigInts": true }),
-                    ],
-                },
-            )
-            .expect("query sqlite row");
-            assert_eq!(query[0]["id"]["__agentosSqliteType"], json!("bigint"));
-            assert_eq!(query[0]["id"]["value"], json!("9007199254740993"));
-            assert_eq!(
-                query[0]["payload"]["value"],
-                json!(base64::engine::general_purpose::STANDARD.encode([1_u8, 2, 3]))
-            );
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                process_id,
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 7,
-                    method: String::from("sqlite.close"),
-                    args: vec![json!(database_id)],
-                },
-            )
-            .expect("close sqlite database");
-
-            let reopened_id = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                process_id,
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 8,
-                    method: String::from("sqlite.open"),
-                    args: vec![json!("/workspace/app.db"), json!({})],
-                },
-            )
-            .expect("reopen sqlite database")
-            .as_u64()
-            .expect("reopened database id");
-
-            let reopened = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                process_id,
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 9,
-                    method: String::from("sqlite.query"),
-                    args: vec![
-                        json!(reopened_id),
-                        json!("SELECT id, payload FROM items"),
-                        Value::Null,
-                        json!({ "readBigInts": true }),
-                    ],
-                },
-            )
-            .expect("query reopened sqlite row");
-            assert_eq!(reopened, query);
-        }
-        fn javascript_sqlite_builtin_round_trips_through_sidecar_sync_rpc() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-sqlite-builtins-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import { existsSync, readFileSync, statSync } from "node:fs";
-import { DatabaseSync } from "node:sqlite";
-
-const dbPath = "/workspace/sqlite-builtins.db";
-const db = new DatabaseSync(dbPath);
-if (db.location() !== dbPath) {
-  throw new Error(`unexpected sqlite location: ${String(db.location())}`);
-}
-
-const journalModeRows = db.query("PRAGMA journal_mode = WAL");
-if (journalModeRows[0]?.journal_mode !== "wal") {
-  throw new Error(`unexpected journal mode rows: ${JSON.stringify(journalModeRows)}`);
-}
-
-db.exec("CREATE TABLE items (id INTEGER PRIMARY KEY, payload BLOB NOT NULL, quantity INTEGER NOT NULL)");
-const insert = db.prepare("INSERT INTO items(id, payload, quantity) VALUES (:id, :payload, :quantity)");
-insert.setAllowBareNamedParameters(true);
-const insertResult = insert.run({
-  id: 9007199254740993n,
-  payload: new Uint8Array([7, 8, 9]),
-  quantity: 42,
-});
-if (insertResult.changes !== 1) {
-  throw new Error(`unexpected insert result: ${JSON.stringify(insertResult)}`);
-}
-if (typeof insertResult.lastInsertRowid !== "bigint" || insertResult.lastInsertRowid !== 9007199254740993n) {
-  throw new Error(`unexpected lastInsertRowid: ${String(insertResult.lastInsertRowid)}`);
-}
-
-const select = db.prepare("SELECT id, payload, quantity FROM items WHERE id = ?");
-select.setReadBigInts(true);
-const row = select.get(9007199254740993n);
-if (typeof row.id !== "bigint" || row.id !== 9007199254740993n) {
-  throw new Error(`unexpected bigint row id: ${String(row.id)}`);
-}
-if (!Buffer.isBuffer(row.payload) || row.payload.length !== 3 || row.payload[1] !== 8) {
-  throw new Error(`unexpected blob payload: ${JSON.stringify(row.payload)}`);
-}
-if (row.quantity !== 42n) {
-  throw new Error(`unexpected integer payload: id=${String(row.id)} quantity=${String(row.quantity)}`);
-}
-
-const columns = select.columns();
-if (columns.length !== 3 || columns[0]?.name !== "id" || columns[1]?.name !== "payload") {
-  throw new Error(`unexpected statement columns: ${JSON.stringify(columns)}`);
-}
-
-db.checkpoint();
-if (!existsSync(dbPath)) {
-  throw new Error("sqlite database file is not visible in the guest filesystem");
-}
-const fileStat = statSync(dbPath);
-if (fileStat.size <= 0) {
-  throw new Error(`unexpected sqlite file size: ${fileStat.size}`);
-}
-const fileHeader = readFileSync(dbPath).subarray(0, 16).toString("utf8");
-if (!fileHeader.startsWith("SQLite format 3")) {
-  throw new Error(`unexpected sqlite file header: ${JSON.stringify(fileHeader)}`);
-}
-
-db.close();
-
-const reopened = new DatabaseSync(dbPath);
-const verify = reopened.prepare("SELECT COUNT(*) AS count, SUM(quantity) AS totalQuantity FROM items");
-verify.setReadBigInts(true);
-const count = verify.get();
-if (count.count !== 1n) {
-  throw new Error(`unexpected persisted count: count=${String(count.count)} totalQuantity=${String(count.totalQuantity)}`);
-}
-if (count.totalQuantity !== 42n) {
-  throw new Error(`unexpected persisted quantity total: count=${String(count.count)} totalQuantity=${String(count.totalQuantity)}`);
-}
-reopened.close();
-console.log("sqlite-ok");
-"#,
-            );
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-sqlite-builtins");
-
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            assert!(stderr.trim().is_empty(), "stderr: {stderr}");
-            assert_eq!(stdout.trim(), "sqlite-ok");
-            let database_bytes = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .read_file("/workspace/sqlite-builtins.db")
-                    .expect("read sqlite builtins database file")
-            };
-            assert!(
-                !database_bytes.is_empty(),
-                "sqlite builtins database file should be persisted"
-            );
-        }
-        fn javascript_net_rpc_connects_over_vm_loopback() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-net-rpc-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import net from "node:net";
-
-const summary = await new Promise((resolve, reject) => {
-  const server = net.createServer((socket) => {
-    let received = "";
-    socket.setEncoding("utf8");
-    socket.on("data", (chunk) => {
-      received += chunk;
-    });
-    socket.on("end", () => {
-      if (received !== "ping") {
-        reject(new Error(`unexpected server payload: ${received}`));
-        return;
-      }
-      socket.end("pong");
-    });
-    socket.on("error", reject);
-  });
-  server.on("error", reject);
-  server.listen(0, "127.0.0.1", () => {
-    const address = server.address();
-    if (!address || typeof address === "string") {
-      reject(new Error(`unexpected listener address: ${String(address)}`));
-      return;
-    }
-    const socket = net.createConnection({ host: "127.0.0.1", port: address.port });
-    let data = "";
-    socket.setEncoding("utf8");
-    socket.on("connect", () => {
-      socket.end("ping");
-    });
-    socket.on("data", (chunk) => {
-      data += chunk;
-    });
-    socket.on("error", reject);
-    socket.on("close", (hadError) => {
-      server.close(() => {
-        resolve({
-          data,
-          hadError,
-          remoteAddress: socket.remoteAddress,
-          remotePort: socket.remotePort,
-          localPort: socket.localPort,
-          listenerPort: address.port,
-        });
-      });
-    });
-  });
-});
-
-if (summary.data !== "pong") {
-  throw new Error(`unexpected TCP message: ${summary.data}`);
-}
-if (summary.remoteAddress !== "127.0.0.1") {
-  throw new Error(`unexpected TCP remote address: ${JSON.stringify(summary)}`);
-}
-if (summary.remotePort !== summary.listenerPort) {
-  throw new Error(`unexpected TCP remote port: ${JSON.stringify(summary)}`);
-}
-if (typeof summary.localPort !== "number" || summary.localPort <= 0) {
-  throw new Error(`unexpected TCP local port: ${JSON.stringify(summary)}`);
-}
-
-console.log(JSON.stringify(summary));
-"#,
-            );
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-net");
-
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            assert!(
-                stdout.contains("\"remoteAddress\":\"127.0.0.1\""),
-                "stdout: {stdout}"
-            );
-            assert!(stdout.contains("\"listenerPort\":"), "stdout: {stdout}");
-        }
-        fn javascript_net_loopback_socket_churn_releases_kernel_slots() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([(String::from("resource.max_sockets"), String::from("8"))]),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-net-churn-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import net from "node:net";
-
-const iterations = 100;
-let accepted = 0;
-let acceptedClosed = 0;
-
-const server = net.createServer((socket) => {
-  accepted += 1;
-  socket.setEncoding("utf8");
-  let payload = "";
-  socket.on("data", (chunk) => {
-    payload += chunk;
-  });
-  socket.on("end", () => {
-    socket.end(payload);
-  });
-  socket.on("close", () => {
-    acceptedClosed += 1;
-  });
-});
-
-await new Promise((resolve, reject) => {
-  server.once("error", reject);
-  server.listen(0, "127.0.0.1", resolve);
-});
-
-const address = server.address();
-if (!address || typeof address === "string") {
-  throw new Error(`unexpected listener address: ${String(address)}`);
-}
-
-for (let index = 0; index < iterations; index += 1) {
-  const message = `x${index}`;
-  const response = await new Promise((resolve, reject) => {
-    const socket = net.createConnection({ host: "127.0.0.1", port: address.port });
-    let data = "";
-    socket.setEncoding("utf8");
-    socket.on("connect", () => {
-      socket.end(message);
-    });
-    socket.on("data", (chunk) => {
-      data += chunk;
-    });
-    socket.on("error", reject);
-    socket.on("close", (hadError) => {
-      if (hadError) {
-        reject(new Error(`client close reported error at ${index}`));
-        return;
-      }
-      resolve(data);
-    });
-  });
-  if (response !== message) {
-    throw new Error(`unexpected response at ${index}: ${response}`);
-  }
-}
-
-await new Promise((resolve, reject) => {
-  server.close((error) => {
-    if (error) {
-      reject(error);
-    } else {
-      resolve();
-    }
-  });
-});
-
-if (acceptedClosed !== iterations) {
-  throw new Error(`expected ${iterations} accepted closes, got ${acceptedClosed}`);
-}
-
-console.log(JSON.stringify({ iterations, accepted, acceptedClosed }));
-"#,
-            );
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-net-churn");
-
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse churn JSON");
-            assert_eq!(parsed["iterations"], Value::from(100));
-            assert_eq!(parsed["accepted"], Value::from(100));
-            assert_eq!(parsed["acceptedClosed"], Value::from(100));
-        }
-        fn javascript_net_loopback_wakes_reader_parked_before_write() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-net-wake-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import net from "node:net";
-
-const summary = await new Promise((resolve, reject) => {
-  const server = net.createServer((socket) => {
-    socket.setEncoding("utf8");
-    let received = "";
-    socket.once("readable", () => {
-      let chunk;
-      while ((chunk = socket.read()) !== null) {
-        received += chunk;
-      }
-    });
-    socket.on("end", () => {
-      socket.end(`echo:${received}`);
-    });
-    socket.on("error", reject);
-  });
-  server.on("error", reject);
-  server.listen(0, "127.0.0.1", () => {
-    const address = server.address();
-    if (!address || typeof address === "string") {
-      reject(new Error(`unexpected listener address: ${String(address)}`));
-      return;
-    }
-    const socket = net.createConnection({ host: "127.0.0.1", port: address.port });
-    let data = "";
-    socket.setEncoding("utf8");
-    socket.on("data", (chunk) => {
-      data += chunk;
-    });
-    socket.on("connect", () => {
-      setImmediate(() => socket.end("parked"));
-    });
-    socket.on("error", reject);
-    socket.on("close", () => {
-      server.close(() => resolve(data));
-    });
-  });
-});
-
-if (summary !== "echo:parked") {
-  throw new Error(`unexpected parked-reader echo: ${summary}`);
-}
-console.log(summary);
-"#,
-            );
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-net-wake");
-
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            assert_eq!(stdout.trim(), "echo:parked");
-        }
-        fn javascript_net_loopback_reads_back_to_back_and_after_partial_drain() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-net-edge-wake-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import net from "node:net";
-
-const summary = await new Promise((resolve, reject) => {
-  const server = net.createServer((socket) => {
-    const received = [];
-    socket.on("readable", () => {
-      let chunk;
-      while ((chunk = socket.read(1)) !== null) {
-        received.push(chunk.toString("utf8"));
-        if (received.join("") === "ABC") {
-          socket.end("done");
-        }
-      }
-    });
-    socket.on("error", reject);
-  });
-  server.on("error", reject);
-  server.listen(0, "127.0.0.1", () => {
-    const address = server.address();
-    if (!address || typeof address === "string") {
-      reject(new Error(`unexpected listener address: ${String(address)}`));
-      return;
-    }
-    const socket = net.createConnection({ host: "127.0.0.1", port: address.port });
-    let data = "";
-    socket.setEncoding("utf8");
-    socket.on("connect", () => {
-      socket.write("A");
-      socket.write("B");
-      setImmediate(() => socket.end("C"));
-    });
-    socket.on("data", (chunk) => {
-      data += chunk;
-    });
-    socket.on("error", reject);
-    socket.on("close", () => {
-      server.close(() => resolve(data));
-    });
-  });
-});
-
-if (summary !== "done") {
-  throw new Error(`unexpected edge-wake response: ${summary}`);
-}
-console.log(summary);
-"#,
-            );
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-net-edge-wake");
-
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            assert_eq!(stdout.trim(), "done");
-        }
-        fn javascript_dgram_rpc_sends_and_receives_vm_loopback_packets() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-dgram-rpc-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import dgram from "node:dgram";
-
-const receiver = dgram.createSocket("udp4");
-const sender = dgram.createSocket("udp4");
-let receiverAddress;
-const summary = await new Promise((resolve) => {
-  const reject = (error) => {
-    console.error(error.stack ?? error.message);
-    process.exit(1);
-  };
-  receiver.on("error", reject);
-  sender.on("error", reject);
-  receiver.on("message", (message, rinfo) => {
-    receiverAddress = receiver.address();
-    if (message.toString("utf8") !== "ping") {
-      reject(new Error(`unexpected UDP request: ${message.toString("utf8")}`));
-      return;
-    }
-    receiver.send("pong", rinfo.port, rinfo.address, (error) => {
-      if (error) {
-        reject(error);
-      }
-    });
-  });
-  sender.on("message", (message, rinfo) => {
-    const senderAddress = sender.address();
-    sender.close(() => {
-      receiver.close(() => {
-        resolve({
-          senderAddress,
-          receiverAddress,
-          message: message.toString("utf8"),
-          rinfo,
-        });
-      });
-    });
-  });
-  receiver.bind(0, "127.0.0.1", () => {
-    receiverAddress = receiver.address();
-    sender.bind(0, "127.0.0.1", () => {
-      sender.send("ping", receiverAddress.port, "127.0.0.1");
-    });
-  });
-});
-
-if (summary.message !== "pong") {
-  throw new Error(`unexpected udp message: ${summary.message}`);
-}
-if (summary.senderAddress.address !== "127.0.0.1") {
-  throw new Error(`unexpected udp sender address: ${JSON.stringify(summary.senderAddress)}`);
-}
-if (summary.receiverAddress.address !== "127.0.0.1") {
-  throw new Error(`unexpected udp receiver address: ${JSON.stringify(summary.receiverAddress)}`);
-}
-if (summary.rinfo.address !== "127.0.0.1" || summary.rinfo.port !== summary.receiverAddress.port) {
-  throw new Error(`unexpected udp remote info: ${JSON.stringify(summary.rinfo)}`);
-}
-
-console.log(JSON.stringify(summary));
-"#,
-            );
-            let (_stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-dgram");
-
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-        }
-        fn javascript_net_unix_domain_echo_uses_reader_events() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-unix-echo-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import net from "node:net";
-
-const path = "/tmp/secure-exec-unix-echo.sock";
-const summary = await new Promise((resolve, reject) => {
-  const server = net.createServer((socket) => {
-    socket.setEncoding("utf8");
-    let data = "";
-    socket.on("data", (chunk) => {
-      data += chunk;
-    });
-    socket.on("end", () => {
-      socket.end(`unix:${data}`);
-    });
-    socket.on("error", reject);
-  });
-  server.on("error", reject);
-  server.listen(path, () => {
-    const socket = net.createConnection(path);
-    let data = "";
-    socket.setEncoding("utf8");
-    socket.on("connect", () => {
-      socket.end("ping");
-    });
-    socket.on("data", (chunk) => {
-      data += chunk;
-    });
-    socket.on("error", reject);
-    socket.on("close", () => {
-      server.close(() => resolve(data));
-    });
-  });
-});
-
-if (summary !== "unix:ping") {
-  throw new Error(`unexpected unix echo: ${summary}`);
-}
-console.log(summary);
-"#,
-            );
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-unix-echo");
-
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            assert_eq!(stdout.trim(), "unix:ping");
-        }
-        fn javascript_dns_rpc_resolves_localhost() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-dns-rpc-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import dns from "node:dns";
-
-const lookup = await dns.promises.lookup("localhost", { all: true });
-const resolve4 = await dns.promises.resolve4("localhost");
-
-console.log(JSON.stringify({ lookup, resolve4 }));
-"#,
-            );
-
-            let context =
-                sidecar
-                    .javascript_engine
-                    .create_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.clone(),
-                        bootstrap_module: None,
-                        compile_cache_root: None,
-                    });
-            let execution = sidecar
-            .javascript_engine
-            .start_execution(StartJavascriptExecutionRequest {
-                limits: Default::default(),
-                guest_runtime: Default::default(),
-                vm_id: vm_id.clone(),
-                context_id: context.context_id,
-                argv: vec![String::from("./entry.mjs")],
-                env: BTreeMap::from([(
-                    String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                    String::from(
-                        "[\"assert\",\"buffer\",\"console\",\"crypto\",\"dns\",\"events\",\"fs\",\"path\",\"querystring\",\"stream\",\"string_decoder\",\"timers\",\"url\",\"util\",\"zlib\"]",
-                    ),
-                )]),
-                cwd: cwd.clone(),
-                inline_code: None,
-                wasm_module_bytes: None,
-            })
-            .expect("start fake javascript execution");
-
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel javascript process")
-            };
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.active_processes.insert(
-                    String::from("proc-js-dns"),
-                    ActiveProcess::new(
-                        kernel_handle.pid(),
-                        kernel_handle,
-                        GuestRuntimeKind::JavaScript,
-                        ActiveExecution::Javascript(execution),
-                    )
-                    .with_host_cwd(cwd.clone()),
-                );
-            }
-
-            let mut stdout = Vec::new();
-            let mut stderr = Vec::new();
-            let mut exit_code = None;
-            for _ in 0..64 {
-                let next_event = {
-                    let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                    vm.active_processes
-                        .get_mut("proc-js-dns")
-                        .and_then(|process| {
-                            process
-                                .execution
-                                .poll_event_blocking(Duration::from_secs(5))
-                                .expect("poll javascript dns rpc event")
-                        })
-                };
-                let Some(event) = next_event else {
-                    if exit_code.is_some() {
-                        break;
-                    }
-                    panic!("javascript dns process disappeared before exit");
-                };
-
-                match &event {
-                    ActiveExecutionEvent::Stdout(chunk) => {
-                        append_process_stream_chunk(&mut stdout, chunk, "proc-js-dns", "stdout");
-                    }
-                    ActiveExecutionEvent::Stderr(chunk) => {
-                        append_process_stream_chunk(&mut stderr, chunk, "proc-js-dns", "stderr");
-                    }
-                    ActiveExecutionEvent::Exited(code) => {
-                        exit_code = Some(*code);
-                    }
-                    ActiveExecutionEvent::JavascriptSyncRpcRequest(_)
-                    | ActiveExecutionEvent::PythonVfsRpcRequest(_)
-                    | ActiveExecutionEvent::SignalState { .. } => {}
-                }
-
-                sidecar
-                    .handle_execution_event(&vm_id, "proc-js-dns", event)
-                    .expect("handle javascript dns rpc event");
-            }
-
-            let stdout = process_stream_to_string(&stdout);
-            let stderr = process_stream_to_string(&stderr);
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse dns JSON");
-            assert!(
-                parsed["lookup"]
-                    .as_array()
-                    .is_some_and(|entries| !entries.is_empty()),
-                "stdout: {stdout}"
-            );
-            assert!(
-                parsed["resolve4"]
-                    .as_array()
-                    .is_some_and(|entries| entries.iter().any(|entry| entry == "127.0.0.1")),
-                "stdout: {stdout}"
-            );
-        }
-        fn javascript_network_ssrf_protection_blocks_private_dns_and_unowned_loopback_targets() {
-            assert_node_available();
-
-            let loopback_listener =
-                TcpListener::bind("127.0.0.1:0").expect("bind loopback listener");
-            let loopback_port = loopback_listener
-                .local_addr()
-                .expect("loopback listener address")
-                .port();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([(
-                    String::from("network.dns.override.metadata.test"),
-                    String::from("169.254.169.254"),
-                )]),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-ssrf-protection-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                format!(
-                    r#"
-import dns from "node:dns";
-import net from "node:net";
-
-const dnsLookup = await (async () => {{
-  try {{
-    await dns.promises.lookup("metadata.test", {{ family: 4 }});
-    return {{ unexpected: true }};
-  }} catch (error) {{
-    return {{ code: error.code ?? null, message: error.message }};
-  }}
-}})();
-
-const privateConnect = await new Promise((resolve) => {{
-  try {{
-    const socket = net.createConnection({{ host: "metadata.test", port: 80 }});
-    socket.on("connect", () => {{
-      socket.destroy();
-      resolve({{ unexpected: true }});
-    }});
-    socket.on("error", (error) => {{
-      resolve({{ code: error.code ?? null, message: error.message }});
-    }});
-  }} catch (error) {{
-    resolve({{ code: error.code ?? null, message: error.message }});
-  }}
-}});
-
-const loopbackConnect = await new Promise((resolve) => {{
-  try {{
-    const socket = net.createConnection({{ host: "127.0.0.1", port: {loopback_port} }});
-    socket.on("connect", () => {{
-      socket.destroy();
-      resolve({{ unexpected: true }});
-    }});
-    socket.on("error", (error) => {{
-      resolve({{ code: error.code ?? null, message: error.message }});
-    }});
-  }} catch (error) {{
-    resolve({{ code: error.code ?? null, message: error.message }});
-  }}
-}});
-
-console.log(JSON.stringify({{ dnsLookup, privateConnect, loopbackConnect }}));
-process.exit(0);
-"#,
-                ),
-            );
-
-            let context =
-                sidecar
-                    .javascript_engine
-                    .create_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.clone(),
-                        bootstrap_module: None,
-                        compile_cache_root: None,
-                    });
-            let execution = sidecar
-            .javascript_engine
-            .start_execution(StartJavascriptExecutionRequest {
-                limits: Default::default(),
-                guest_runtime: Default::default(),
-                vm_id: vm_id.clone(),
-                context_id: context.context_id,
-                argv: vec![String::from("./entry.mjs")],
-                env: BTreeMap::from([(
-                    String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                    String::from(
-                        "[\"assert\",\"buffer\",\"console\",\"crypto\",\"dns\",\"events\",\"fs\",\"net\",\"path\",\"querystring\",\"stream\",\"string_decoder\",\"timers\",\"url\",\"util\",\"zlib\"]",
-                    ),
-                )]),
-                cwd: cwd.clone(),
-                inline_code: None,
-                wasm_module_bytes: None,
-            })
-            .expect("start fake javascript execution");
-
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel javascript process")
-            };
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.active_processes.insert(
-                    String::from("proc-js-ssrf-protection"),
-                    ActiveProcess::new(
-                        kernel_handle.pid(),
-                        kernel_handle,
-                        GuestRuntimeKind::JavaScript,
-                        ActiveExecution::Javascript(execution),
-                    )
-                    .with_host_cwd(cwd.clone()),
-                );
-            }
-
-            let mut stdout = Vec::new();
-            let mut stderr = Vec::new();
-            let mut exit_code = None;
-            for _ in 0..64 {
-                let next_event = {
-                    let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                    vm.active_processes
-                        .get_mut("proc-js-ssrf-protection")
-                        .and_then(|process| {
-                            process
-                                .execution
-                                .poll_event_blocking(Duration::from_secs(5))
-                                .expect("poll javascript ssrf event")
-                        })
-                };
-                let Some(event) = next_event else {
-                    if exit_code.is_some() {
-                        break;
-                    }
-                    panic!("javascript ssrf process disappeared before exit");
-                };
-
-                match &event {
-                    ActiveExecutionEvent::Stdout(chunk) => {
-                        append_process_stream_chunk(
-                            &mut stdout,
-                            chunk,
-                            "proc-js-ssrf-protection",
-                            "stdout",
-                        );
-                    }
-                    ActiveExecutionEvent::Stderr(chunk) => {
-                        append_process_stream_chunk(
-                            &mut stderr,
-                            chunk,
-                            "proc-js-ssrf-protection",
-                            "stderr",
-                        );
-                    }
-                    ActiveExecutionEvent::Exited(code) => {
-                        exit_code = Some(*code);
-                    }
-                    ActiveExecutionEvent::JavascriptSyncRpcRequest(_)
-                    | ActiveExecutionEvent::PythonVfsRpcRequest(_)
-                    | ActiveExecutionEvent::SignalState { .. } => {}
-                }
-
-                sidecar
-                    .handle_execution_event(&vm_id, "proc-js-ssrf-protection", event)
-                    .expect("handle javascript ssrf event");
-            }
-
-            let stdout = process_stream_to_string(&stdout);
-            let stderr = process_stream_to_string(&stderr);
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse ssrf JSON");
-            assert_eq!(
-                parsed["dnsLookup"]["code"],
-                Value::String(String::from("EACCES"))
-            );
-            assert!(
-                parsed["dnsLookup"]["message"]
-                    .as_str()
-                    .is_some_and(|message| message.contains("169.254.0.0/16")),
-                "stdout: {stdout}"
-            );
-            assert_eq!(
-                parsed["privateConnect"]["code"],
-                Value::String(String::from("EACCES"))
-            );
-            assert!(
-                parsed["privateConnect"]["message"]
-                    .as_str()
-                    .is_some_and(|message| message.contains("169.254.0.0/16")),
-                "stdout: {stdout}"
-            );
-            assert_eq!(
-                parsed["loopbackConnect"]["code"],
-                Value::String(String::from("EACCES"))
-            );
-            assert!(
-                parsed["loopbackConnect"]["message"]
-                    .as_str()
-                    .is_some_and(|message| message.contains(LOOPBACK_EXEMPT_PORTS_ENV)),
-                "stdout: {stdout}"
-            );
-
-            drop(loopback_listener);
-        }
-        fn javascript_dns_rpc_honors_vm_dns_overrides_and_net_connect_uses_sidecar_dns() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([
-                    (
-                        String::from("network.dns.override.example.test"),
-                        String::from("127.0.0.1"),
-                    ),
-                    (
-                        String::from(VM_DNS_SERVERS_METADATA_KEY),
-                        String::from("203.0.113.53:5353"),
-                    ),
-                ]),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-dns-override-rpc-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import dns from "node:dns";
-import net from "node:net";
-
-const lookup = await dns.promises.lookup("example.test", { family: 4 });
-const resolved = await dns.promises.resolve("example.test", "A");
-const socketSummary = await new Promise((resolve, reject) => {
-  const server = net.createServer((socket) => {
-    let received = "";
-    socket.setEncoding("utf8");
-    socket.on("data", (chunk) => {
-      received += chunk;
-    });
-    socket.on("end", () => {
-      if (received !== "ping") {
-        reject(new Error(`unexpected DNS server payload: ${received}`));
-        return;
-      }
-      socket.end("pong");
-    });
-    socket.on("error", reject);
-  });
-  server.on("error", reject);
-  server.listen(0, "127.0.0.1", () => {
-    const address = server.address();
-    if (!address || typeof address === "string") {
-      reject(new Error(`unexpected DNS listener address: ${String(address)}`));
-      return;
-    }
-    const socket = net.createConnection({ host: "example.test", port: address.port });
-    let data = "";
-    socket.setEncoding("utf8");
-    socket.on("connect", () => {
-      socket.end("ping");
-    });
-    socket.on("data", (chunk) => {
-      data += chunk;
-    });
-    socket.on("error", reject);
-    socket.on("close", (hadError) => {
-      server.close(() => {
-        resolve({
-          data,
-          hadError,
-          remoteAddress: socket.remoteAddress,
-          remotePort: socket.remotePort,
-          listenerPort: address.port,
-        });
-      });
-    });
-  });
-});
-
-console.log(JSON.stringify({ lookup, resolved, socketSummary }));
-"#,
-            );
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-dns-override");
-
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse dns JSON");
-            assert_eq!(parsed["lookup"]["address"], Value::from("127.0.0.1"));
-            assert_eq!(parsed["lookup"]["family"], Value::from(4));
-            assert_eq!(parsed["resolved"][0], Value::from("127.0.0.1"));
-            assert_eq!(parsed["socketSummary"]["data"], Value::from("pong"));
-            assert_eq!(parsed["socketSummary"]["hadError"], Value::from(false));
-            assert_eq!(
-                parsed["socketSummary"]["remoteAddress"],
-                Value::from("127.0.0.1")
-            );
-            assert_eq!(
-                parsed["socketSummary"]["remotePort"],
-                parsed["socketSummary"]["listenerPort"]
-            );
-
-            let events = sidecar
-                .with_bridge_mut(|bridge| bridge.structured_events.clone())
-                .expect("collect structured events");
-            let dns_events = events
-                .iter()
-                .filter(|event| event.name == "network.dns.resolved")
-                .filter(|event| {
-                    event.fields.get("hostname").map(String::as_str) == Some("example.test")
-                })
-                .collect::<Vec<_>>();
-            assert!(
-                dns_events.len() >= 3,
-                "expected dns events for lookup, resolve, and net.connect: {dns_events:?}"
-            );
-            for event in dns_events {
-                assert_eq!(event.fields["source"], "override");
-                assert_eq!(event.fields["addresses"], "127.0.0.1");
-                assert_eq!(event.fields["resolver_count"], "1");
-                assert_eq!(event.fields["resolvers"], "203.0.113.53:5353");
-            }
-        }
-
-        fn javascript_network_dns_resolve_supports_standard_rrtypes() {
-            assert_node_available();
-
-            let dns_server = FixtureDnsServer::start();
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([(
-                    String::from(VM_DNS_SERVERS_METADATA_KEY),
-                    dns_server.addr.to_string(),
-                )]),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-dns-rrtype-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import dns from "node:dns";
-
-const resolveMxCallback = await new Promise((resolve, reject) => {
-  dns.resolveMx("bundle.example.test", (error, records) => {
-    if (error) reject(error);
-    else resolve(records);
-  });
-});
-
-const data = {
-  resolve4: await dns.promises.resolve4("bundle.example.test"),
-  resolve6: await dns.promises.resolve6("bundle.example.test"),
-  resolveMxCallback,
-  resolveTxt: await dns.promises.resolveTxt("bundle.example.test"),
-  resolveSrv: await dns.promises.resolveSrv("_svc._tcp.example.test"),
-  resolveCname: await dns.promises.resolve("alias.example.test", "CNAME"),
-  resolvePtr: await dns.promises.resolvePtr("ptr.example.test"),
-  resolveNs: await dns.promises.resolveNs("zone.example.test"),
-  resolveSoa: await dns.promises.resolveSoa("zone.example.test"),
-  resolveNaptr: await dns.promises.resolveNaptr("naptr.example.test"),
-  resolveCaa: await dns.promises.resolveCaa("caa.example.test"),
-  resolveAny: await dns.promises.resolveAny("bundle.example.test"),
-};
-
-try {
-  await dns.promises.resolve("bundle.example.test", "TLSA");
-  data.unsupported = { unexpected: true };
-} catch (error) {
-  data.unsupported = { code: error.code ?? null, message: error.message };
-}
-
-console.log(JSON.stringify(data));
-"#,
-            );
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-dns-rrtype");
-
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse dns rrtype JSON");
-            assert_eq!(parsed["resolve4"][0], Value::from("203.0.113.10"));
-            assert_eq!(parsed["resolve6"][0], Value::from("2001:db8::10"));
-            assert_eq!(parsed["resolveMxCallback"][0]["priority"], Value::from(10));
-            assert_eq!(
-                parsed["resolveMxCallback"][0]["exchange"],
-                Value::from("mail.example.test")
-            );
-            assert_eq!(
-                parsed["resolveTxt"][0],
-                json!([String::from("v=spf1"), String::from("-all")])
-            );
-            assert_eq!(parsed["resolveSrv"][0]["port"], Value::from(8443));
-            assert_eq!(
-                parsed["resolveSrv"][0]["name"],
-                Value::from("svc-target.example.test")
-            );
-            assert_eq!(
-                parsed["resolveCname"][0],
-                Value::from("bundle.example.test")
-            );
-            assert_eq!(parsed["resolvePtr"][0], Value::from("host.example.test"));
-            assert_eq!(parsed["resolveNs"][0], Value::from("ns1.example.test"));
-            assert_eq!(
-                parsed["resolveSoa"],
-                json!({
-                    "nsname": "ns1.example.test",
-                    "hostmaster": "hostmaster.example.test",
-                    "serial": 2026041601_u32,
-                    "refresh": 3600,
-                    "retry": 600,
-                    "expire": 86400,
-                    "minttl": 60_u32
-                })
-            );
-            assert_eq!(
-                parsed["resolveNaptr"][0],
-                json!({
-                    "flags": "s",
-                    "service": "SIP+D2U",
-                    "regexp": "!^.*$!sip:service@example.test!",
-                    "replacement": "_sip._udp.example.test",
-                    "order": 10,
-                    "preference": 20
-                })
-            );
-            assert_eq!(parsed["resolveCaa"][0]["critical"], Value::from(0));
-            assert_eq!(
-                parsed["resolveCaa"][0]["issue"],
-                Value::from("letsencrypt.org.")
-            );
-            assert_eq!(
-                parsed["resolveCaa"][1]["iodef"],
-                Value::from("https://iodef.example.test/report")
-            );
-
-            let any_types = parsed["resolveAny"]
-                .as_array()
-                .expect("resolveAny array")
-                .iter()
-                .filter_map(|entry| entry.get("type").and_then(Value::as_str))
-                .collect::<Vec<_>>();
-            assert!(any_types.contains(&"A"), "stdout: {stdout}");
-            assert!(any_types.contains(&"AAAA"), "stdout: {stdout}");
-            assert!(any_types.contains(&"MX"), "stdout: {stdout}");
-            assert!(any_types.contains(&"TXT"), "stdout: {stdout}");
-            assert_eq!(
-                parsed["unsupported"]["code"],
-                Value::from("ERR_NOT_IMPLEMENTED")
-            );
-            assert!(
-                parsed["unsupported"]["message"]
-                    .as_str()
-                    .is_some_and(|message| message.contains("TLSA")),
-                "stdout: {stdout}"
-            );
-        }
-
-        fn javascript_network_permission_callbacks_fire_for_dns_lookup_connect_and_listen() {
-            assert_node_available();
-
-            let listener = TcpListener::bind("127.0.0.1:0").expect("bind tcp listener");
-            let port = listener.local_addr().expect("listener address").port();
-            let server = thread::spawn(move || {
-                let (mut stream, _) = listener.accept().expect("accept tcp client");
-                let mut received = Vec::new();
-                stream
-                    .read_to_end(&mut received)
-                    .expect("read client payload");
-                assert_eq!(String::from_utf8(received).expect("client utf8"), "ping");
-            });
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([
-                    (
-                        format!("env.{LOOPBACK_EXEMPT_PORTS_ENV}"),
-                        serde_json::to_string(&vec![port.to_string()])
-                            .expect("serialize exempt ports"),
-                    ),
-                    (
-                        String::from("network.dns.override.example.test"),
-                        String::from("127.0.0.1"),
-                    ),
-                ]),
-            )
-            .expect("create vm");
-            sidecar
-                .bridge
-                .clear_vm_permissions(&vm_id)
-                .expect("clear static vm permissions");
-            let cwd = temp_dir("secure-exec-sidecar-js-network-permission-callbacks");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                format!(
-                    r#"
-import dns from "node:dns";
-import net from "node:net";
-
-const lookup = await dns.promises.lookup("example.test", {{ family: 4 }});
-const listenAddress = await new Promise((resolve, reject) => {{
-  const server = net.createServer();
-  server.on("error", reject);
-  server.listen(0, "127.0.0.1", () => {{
-    const address = server.address();
-    server.close((error) => {{
-      if (error) {{
-        reject(error);
-        return;
-      }}
-      resolve(address);
-    }});
-  }});
-}});
-const connectResult = await new Promise((resolve, reject) => {{
-  const socket = net.createConnection({{ host: "127.0.0.1", port: {port} }});
-  socket.on("error", reject);
-  socket.on("connect", () => {{
-    socket.end("ping");
-  }});
-  socket.on("close", (hadError) => {{
-    resolve({{ hadError }});
-  }});
-}});
-
-console.log(JSON.stringify({{ lookup, listenAddress, connectResult }}));
-process.exit(0);
-"#,
-                ),
-            );
-
-            let (stdout, stderr, exit_code) = run_javascript_entry(
-                &mut sidecar,
-                &vm_id,
-                &cwd,
-                "proc-js-network-permission-callbacks",
-            );
-
-            server.join().expect("join tcp server");
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse callback JSON");
-            assert_eq!(
-                parsed["lookup"]["address"],
-                Value::String(String::from("127.0.0.1"))
-            );
-            assert_eq!(parsed["connectResult"]["hadError"], Value::Bool(false));
-            assert!(
-                parsed["listenAddress"]["port"]
-                    .as_u64()
-                    .is_some_and(|value| value > 0),
-                "stdout: {stdout}"
-            );
-
-            let expected = [
-                format!("net:{vm_id}:{}", format_dns_resource("example.test")),
-                format!("net:{vm_id}:{}", format_tcp_resource("127.0.0.1", 0)),
-                format!("net:{vm_id}:{}", format_tcp_resource("127.0.0.1", port)),
-            ];
-            let checks = sidecar
-                .with_bridge_mut(|bridge| {
-                    bridge
-                        .permission_checks
-                        .iter()
-                        .filter(|entry| entry.starts_with("net:"))
-                        .cloned()
-                        .collect::<Vec<_>>()
-                })
-                .expect("read permission checks");
-            for check in expected {
-                assert!(
-                    checks.iter().any(|entry| entry == &check),
-                    "missing permission check {check:?} in {checks:?}"
-                );
-            }
-        }
-        fn javascript_network_permission_denials_surface_eacces_to_guest_code() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                capability_permissions(&[
-                    ("fs", PermissionMode::Allow),
-                    ("env", PermissionMode::Allow),
-                    ("child_process", PermissionMode::Allow),
-                    ("network", PermissionMode::Allow),
-                    ("network.dns", PermissionMode::Deny),
-                    ("network.http", PermissionMode::Deny),
-                    ("network.listen", PermissionMode::Deny),
-                ]),
-                BTreeMap::from([(
-                    String::from("network.dns.override.example.test"),
-                    String::from("127.0.0.1"),
-                )]),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-network-permission-denials");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import dns from "node:dns";
-import net from "node:net";
-
-let dnsResult = null;
-try {
-  dnsResult = { unexpected: await dns.promises.lookup("example.test", { family: 4 }) };
-} catch (error) {
-  dnsResult = { code: error.code ?? null, message: error.message };
-}
-const listenResult = await new Promise((resolve) => {
-  const server = net.createServer();
-  server.on("error", (error) => {
-    resolve({ code: error.code ?? null, message: error.message });
-  });
-  try {
-    server.listen(0, "127.0.0.1", () => {
-      resolve({ unexpected: true });
-    });
-  } catch (error) {
-    resolve({ code: error.code ?? null, message: error.message });
-  }
-});
-const connectResult = await new Promise((resolve) => {
-  try {
-    const socket = net.createConnection({ host: "127.0.0.1", port: 43111 });
-    socket.on("connect", () => resolve({ unexpected: true }));
-    socket.on("error", (error) => {
-      resolve({ code: error.code ?? null, message: error.message });
-    });
-  } catch (error) {
-    resolve({ code: error.code ?? null, message: error.message });
-  }
-});
-
-console.log(JSON.stringify({ dnsResult, listenResult, connectResult }));
-process.exit(0);
-"#,
-            );
-
-            let (stdout, stderr, exit_code) = run_javascript_entry(
-                &mut sidecar,
-                &vm_id,
-                &cwd,
-                "proc-js-network-permission-denials",
-            );
-
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse denial JSON");
-            for field in ["dnsResult", "listenResult", "connectResult"] {
-                assert_eq!(parsed[field]["code"], Value::String(String::from("EACCES")));
-                assert!(
-                    parsed[field]["message"]
-                        .as_str()
-                        .is_some_and(|message| message.contains("blocked by network.")),
-                    "missing policy detail for {field}: {stdout}"
-                );
-            }
-        }
-        fn javascript_tls_rpc_connects_and_serves_over_guest_net() {
-            let _tls_lock = tls_service_test_lock();
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-tls-rpc-cwd");
-            let entry = format!(
-                r#"
-import tls from "node:tls";
-
-const key = {key:?};
-const cert = {cert:?};
-
-const summary = await new Promise((resolve, reject) => {{
-  const server = tls.createServer({{ key, cert }}, (socket) => {{
-    let received = "";
-    socket.setEncoding("utf8");
-    socket.on("data", (chunk) => {{
-      received += chunk;
-      socket.end(`pong:${{chunk}}`);
-    }});
-    socket.on("error", reject);
-    socket.on("close", () => {{
-      server.close(() => {{
-        resolve({{
-          authorized: client.authorized,
-          encrypted: client.encrypted,
-          hadError: closeState.hadError,
-          localPort: client.localPort,
-          received,
-          remoteAddress: client.remoteAddress,
-          response,
-          serverPort: port,
-          serverSecure: secureConnectionSeen,
-        }});
-      }});
-    }});
-  }});
-  let response = "";
-  let port = null;
-  let secureConnectionSeen = false;
-  let closeState = {{ hadError: false }};
-  let client = null;
-
-  server.on("secureConnection", () => {{
-    secureConnectionSeen = true;
-  }});
-  server.on("error", reject);
-  server.listen(0, "127.0.0.1", () => {{
-    port = server.address().port;
-    client = tls.connect({{
-      host: "127.0.0.1",
-      port,
-      rejectUnauthorized: false,
-    }}, () => {{
-      client.write("ping");
-    }});
-    client.setEncoding("utf8");
-    client.on("data", (chunk) => {{
-      response += chunk;
-    }});
-    client.on("error", reject);
-    client.on("close", (hadError) => {{
-      closeState = {{ hadError }};
-    }});
-  }});
-}});
-
-console.log(JSON.stringify(summary));
-process.exit(0);
-"#,
-                key = TLS_TEST_KEY_PEM,
-                cert = TLS_TEST_CERT_PEM,
-            );
-            write_fixture(&cwd.join("entry.mjs"), &entry);
-
-            let context =
-                sidecar
-                    .javascript_engine
-                    .create_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.clone(),
-                        bootstrap_module: None,
-                        compile_cache_root: None,
-                    });
-            let execution = sidecar
-            .javascript_engine
-            .start_execution(StartJavascriptExecutionRequest {
-                limits: Default::default(),
-                guest_runtime: Default::default(),
-                vm_id: vm_id.clone(),
-                context_id: context.context_id,
-                argv: vec![String::from("./entry.mjs")],
-                env: BTreeMap::from([(
-                    String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                    String::from(
-                        "[\"assert\",\"buffer\",\"console\",\"crypto\",\"events\",\"fs\",\"net\",\"path\",\"querystring\",\"stream\",\"string_decoder\",\"timers\",\"tls\",\"url\",\"util\",\"zlib\"]",
-                    ),
-                )]),
-                cwd: cwd.clone(),
-                inline_code: None,
-                wasm_module_bytes: None,
-            })
-            .expect("start fake javascript execution");
-
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel javascript process")
-            };
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.active_processes.insert(
-                    String::from("proc-js-tls"),
-                    ActiveProcess::new(
-                        kernel_handle.pid(),
-                        kernel_handle,
-                        GuestRuntimeKind::JavaScript,
-                        ActiveExecution::Javascript(execution),
-                    )
-                    .with_host_cwd(cwd.clone()),
-                );
-            }
-
-            let mut stdout = Vec::new();
-            let mut stderr = Vec::new();
-            let mut exit_code = None;
-            for _ in 0..192 {
-                let next_event = {
-                    let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                    vm.active_processes
-                        .get_mut("proc-js-tls")
-                        .and_then(|process| {
-                            process
-                                .execution
-                                .poll_event_blocking(Duration::from_secs(5))
-                                .expect("poll javascript tls rpc event")
-                        })
-                };
-                let Some(event) = next_event else {
-                    if exit_code.is_some() {
-                        break;
-                    }
-                    continue;
-                };
-
-                match &event {
-                    ActiveExecutionEvent::Stdout(chunk) => {
-                        append_process_stream_chunk(&mut stdout, chunk, "proc-js-tls", "stdout");
-                    }
-                    ActiveExecutionEvent::Stderr(chunk) => {
-                        append_process_stream_chunk(&mut stderr, chunk, "proc-js-tls", "stderr");
-                    }
-                    ActiveExecutionEvent::Exited(code) => {
-                        exit_code = Some(*code);
-                    }
-                    ActiveExecutionEvent::JavascriptSyncRpcRequest(_)
-                    | ActiveExecutionEvent::PythonVfsRpcRequest(_)
-                    | ActiveExecutionEvent::SignalState { .. } => {}
-                }
-
-                sidecar
-                    .handle_execution_event(&vm_id, "proc-js-tls", event)
-                    .expect("handle javascript tls rpc event");
-            }
-
-            let stdout = process_stream_to_string(&stdout);
-            let stderr = process_stream_to_string(&stderr);
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse tls JSON");
-            assert_eq!(parsed["response"], Value::String(String::from("pong:ping")));
-            assert_eq!(parsed["received"], Value::String(String::from("ping")));
-            assert_eq!(parsed["serverSecure"], Value::Bool(true));
-            assert_eq!(parsed["encrypted"], Value::Bool(true));
-            assert_eq!(parsed["hadError"], Value::Bool(false));
-            assert_eq!(
-                parsed["remoteAddress"],
-                Value::String(String::from("127.0.0.1"))
-            );
-            assert!(
-                parsed["serverPort"].as_u64().is_some_and(|port| port > 0),
-                "stdout: {stdout}"
-            );
-        }
-        fn javascript_http_listen_and_close_registers_server() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-http-listen");
-            write_fixture(&cwd.join("entry.mjs"), "");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-http-listen");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http-listen",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.http_listen"),
-                    args: vec![Value::String(String::from(
-                        "{\"serverId\":7,\"hostname\":\"127.0.0.1\",\"port\":0}",
-                    ))],
-                },
-            )
-            .expect("listen via http bridge");
-
-            let payload: Value =
-                serde_json::from_str(listen.as_str().expect("listen payload string"))
-                    .expect("parse listen payload");
-            assert_eq!(
-                payload["address"]["family"],
-                Value::String(String::from("IPv4"))
-            );
-            assert!(
-                payload["address"]["port"]
-                    .as_u64()
-                    .is_some_and(|port| port > 0),
-                "payload: {payload}"
-            );
-            assert!(
-                sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-http-listen"))
-                    .is_some_and(|process| process.http_servers.contains_key(&7)),
-                "HTTP server was not registered",
-            );
-
-            let close = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http-listen",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.http_close"),
-                    args: vec![json!(7)],
-                },
-            )
-            .expect("close http bridge server");
-            assert_eq!(close, Value::Null);
-            assert!(
-                sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-http-listen"))
-                    .is_some_and(|process| process.http_servers.is_empty()),
-                "HTTP server should be removed after close",
-            );
-        }
-        fn javascript_http_respond_records_pending_response() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-http-respond");
-            write_fixture(&cwd.join("entry.mjs"), "");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-http-respond");
-
-            let response_json = String::from(
-                "{\"status\":200,\"headers\":[[\"content-type\",\"text/plain\"]],\"body\":\"cG9uZw==\",\"bodyEncoding\":\"base64\"}",
-            );
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-http-respond")
-                    .expect("javascript process");
-                process.pending_http_requests.insert((7, 9), None);
-            }
-
-            let response = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http-respond",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 4,
-                    method: String::from("net.http_respond"),
-                    args: vec![json!(7), json!(9), Value::String(response_json.clone())],
-                },
-            )
-            .expect("record http response");
-            assert_eq!(response, Value::Null);
-            assert_eq!(
-                sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-http-respond"))
-                    .and_then(|process| process.pending_http_requests.get(&(7, 9)))
-                    .cloned(),
-                Some(Some(response_json)),
-            );
-        }
-
-        fn javascript_http_respond_rejects_oversized_pending_response() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-http-respond-oversized");
-            write_fixture(&cwd.join("entry.mjs"), "");
-            start_fake_javascript_process(
-                &mut sidecar,
-                &vm_id,
-                &cwd,
-                "proc-js-http-respond-oversized",
-            );
-
-            let oversized_body = "a".repeat(crate::wire::DEFAULT_MAX_FRAME_BYTES);
-            let response_json = format!(r#"{{"status":200,"body":"{oversized_body}"}}"#);
-            assert!(response_json.len() > crate::wire::DEFAULT_MAX_FRAME_BYTES);
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-http-respond-oversized")
-                    .expect("javascript process");
-                process.pending_http_requests.insert((7, 10), None);
-            }
-
-            let error = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http-respond-oversized",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 5,
-                    method: String::from("net.http_respond"),
-                    args: vec![json!(7), json!(10), Value::String(response_json)],
-                },
-            )
-            .expect_err("oversized http response should be rejected");
-            assert!(
-                error.to_string().contains("net.http_respond payload is"),
-                "unexpected error: {error}"
-            );
-            assert_eq!(
-                sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-http-respond-oversized"))
-                    .and_then(|process| process.pending_http_requests.get(&(7, 10)))
-                    .cloned(),
-                Some(None),
-            );
-        }
-
-        #[test]
-        fn vm_fetch_response_frame_limit_counts_protocol_overhead() {
-            let response = crate::protocol::ResponseFrame::new(
-                1,
-                OwnershipScope::vm("conn", "session", "vm"),
-                ResponsePayload::VmFetchResult(crate::protocol::VmFetchResponse {
-                    response_json: "a".repeat(crate::wire::DEFAULT_MAX_FRAME_BYTES),
-                }),
-            );
-
-            let error = crate::execution::ensure_vm_fetch_response_frame_within_limit(
-                &response,
-                crate::wire::DEFAULT_MAX_FRAME_BYTES,
-            )
-            .expect_err("frame overhead should exceed the fetch response cap");
-            assert!(
-                error.to_string().contains("protocol frame is"),
-                "unexpected error: {error}"
-            );
-        }
-
-        fn javascript_http_socket_backed_server_rejects_oversized_incomplete_headers() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-http-oversized-incomplete-header");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import http from "node:http";
-import net from "node:net";
-
-let requests = 0;
-const server = http.createServer((_req, res) => {
-  requests += 1;
-  res.end("unexpected");
-});
-
-await new Promise((resolve, reject) => {
-  server.once("error", reject);
-  server.listen(3000, "127.0.0.1", resolve);
-});
-
-const result = await new Promise((resolve, reject) => {
-  const client = net.connect({ host: "127.0.0.1", port: 3000 });
-  let data = "";
-  let error = null;
-  client.setEncoding("latin1");
-  client.on("data", (chunk) => {
-    data += chunk;
-    if (data.startsWith("HTTP/1.1 400 Bad Request")) {
-      client.destroy();
-      resolve({ data, error, requests });
-    }
-  });
-  client.on("error", (err) => {
-    error = err.code || err.name || String(err);
-  });
-  client.on("close", () => {
-    resolve({ data, error, requests });
-  });
-  client.on("connect", () => {
-    client.write("GET / HTTP/1.1\r\nX-Oversized: " + "a".repeat(70 * 1024));
-  });
-  setTimeout(() => reject(new Error("client did not close")), 5000);
-});
-
-await new Promise((resolve) => server.close(resolve));
-console.log(JSON.stringify(result || { data: "", error: "missing-result", requests }));
-"#,
-            );
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-http-oversized-header");
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            let parsed: Value =
-                serde_json::from_str(stdout.trim()).expect("parse oversized header JSON");
-            assert!(
-                parsed["data"]
-                    .as_str()
-                    .is_some_and(|data| data.starts_with("HTTP/1.1 400 Bad Request")),
-                "stdout: {stdout}"
-            );
-            assert_eq!(parsed["requests"], Value::from(0));
-        }
-
-        #[test]
-        fn request_frame_limit_counts_generated_wire_overhead() {
-            let sidecar = create_test_sidecar_with_config(NativeSidecarConfig {
-                max_frame_bytes: 64,
-                ..NativeSidecarConfig::default()
-            });
-            let request = RequestFrame::new(
-                1,
-                OwnershipScope::connection("connection".repeat(16)),
-                RequestPayload::OpenSession(OpenSessionRequest {
-                    placement: SidecarPlacement::SidecarPlacementShared(SidecarPlacementShared {
-                        pool: None,
-                    }),
-                    metadata: std::collections::HashMap::new(),
-                }),
-            );
-
-            let error = sidecar
-                .ensure_request_within_frame_limit(&request)
-                .expect_err("oversized request frame should be rejected");
-            assert!(
-                error.to_string().contains("protocol frame is"),
-                "unexpected error: {error}"
-            );
-        }
-
-        fn javascript_http2_listen_connect_request_and_respond_round_trip() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-http2-round-trip");
-            write_fixture(&cwd.join("entry.mjs"), "");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-http2");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.http2_server_listen"),
-                    args: vec![Value::String(String::from(
-                        "{\"serverId\":11,\"secure\":false,\"host\":\"127.0.0.1\",\"port\":0,\"backlog\":8,\"settings\":{}}",
-                    ))],
-                },
-            )
-            .expect("listen via http2 bridge");
-            let listen_payload: Value =
-                serde_json::from_str(listen.as_str().expect("listen payload"))
-                    .expect("parse http2 listen payload");
-            let port = listen_payload["address"]["port"]
-                .as_u64()
-                .expect("http2 listen port") as u16;
-
-            let connect = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.http2_session_connect"),
-                    args: vec![Value::String(format!(
-                        "{{\"authority\":\"http://127.0.0.1:{port}\",\"protocol\":\"http:\",\"host\":\"127.0.0.1\",\"port\":{port},\"settings\":{{}}}}"
-                    ))],
-                },
-            )
-            .expect("connect via http2 bridge");
-            let connect_payload: Value =
-                serde_json::from_str(connect.as_str().expect("connect payload"))
-                    .expect("parse http2 connect payload");
-            let client_session_id = connect_payload["sessionId"]
-                .as_u64()
-                .expect("client session id");
-
-            let server_session = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                "net.http2_server_poll",
-                11,
-                "serverSession",
-            );
-            let server_session_id = server_session["extraNumber"]
-                .as_u64()
-                .or_else(|| server_session["id"].as_u64())
-                .unwrap_or_default();
-            assert!(server_session_id > 0, "event: {server_session}");
-
-            let stream_id = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("net.http2_session_request"),
-                    args: vec![
-                        json!(client_session_id),
-                        Value::String(String::from("{\":method\":\"GET\",\":path\":\"/ping\"}")),
-                        Value::String(String::from("{\"endStream\":true}")),
-                    ],
-                },
-            )
-            .expect("issue http2 request")
-            .as_u64()
-            .expect("client stream id");
-
-            let server_stream = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                "net.http2_server_poll",
-                11,
-                "serverStream",
-            );
-            let server_stream_id = server_stream["data"]
-                .as_str()
-                .expect("server stream data")
-                .parse::<u64>()
-                .expect("server stream id");
-            assert!(server_stream_id > 0, "event: {server_stream}");
-            let _ = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                "net.http2_server_poll",
-                11,
-                "serverStreamEnd",
-            );
-
-            let respond = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 4,
-                    method: String::from("net.http2_stream_respond"),
-                    args: vec![
-                        json!(server_stream_id),
-                        Value::String(String::from(
-                            "{\":status\":200,\"content-type\":\"text/plain\"}",
-                        )),
-                    ],
-                },
-            )
-            .expect("respond over http2");
-            assert_eq!(respond, Value::Null);
-
-            let wrote = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 5,
-                    method: String::from("net.http2_stream_write"),
-                    args: vec![
-                        json!(server_stream_id),
-                        json!(base64::engine::general_purpose::STANDARD.encode("pong")),
-                    ],
-                },
-            )
-            .expect("write http2 body");
-            assert_eq!(wrote, Value::Bool(true));
-
-            let ended = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 6,
-                    method: String::from("net.http2_stream_end"),
-                    args: vec![json!(server_stream_id), Value::Null],
-                },
-            )
-            .expect("end http2 stream");
-            assert_eq!(ended, Value::Bool(true));
-
-            let response_headers = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                "net.http2_session_poll",
-                client_session_id,
-                "clientResponseHeaders",
-            );
-            assert_eq!(
-                response_headers["id"].as_u64(),
-                Some(stream_id),
-                "response event: {response_headers}"
-            );
-
-            let response_data = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                "net.http2_session_poll",
-                client_session_id,
-                "clientData",
-            );
-            let body = base64::engine::general_purpose::STANDARD
-                .decode(response_data["data"].as_str().expect("response body"))
-                .expect("decode http2 body");
-            assert_eq!(String::from_utf8(body).expect("utf8 body"), "pong");
-
-            let _ = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                "net.http2_session_poll",
-                client_session_id,
-                "clientEnd",
-            );
-
-            let close = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 7,
-                    method: String::from("net.http2_session_close"),
-                    args: vec![json!(client_session_id)],
-                },
-            )
-            .expect("close http2 client session");
-            assert_eq!(close, Value::Null);
-
-            let server_close = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 8,
-                    method: String::from("net.http2_server_close"),
-                    args: vec![json!(11)],
-                },
-            )
-            .expect("close http2 server");
-            assert_eq!(server_close, Value::Null);
-        }
-
-        fn javascript_http2_guest_h2c_round_trip_does_not_deadlock() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-http2-guest-h2c");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import { createRequire } from "module";
-
-const require = createRequire(import.meta.url);
-const http2 = require("node:http2");
-const server = http2.createServer();
-
-server.on("stream", (stream, headers) => {
-  if (headers[":path"] !== "/") {
-    stream.respond({ ":status": 404 });
-    stream.end("missing");
-    return;
-  }
-  stream.respond({ ":status": 200, "content-type": "text/plain" });
-  stream.end("hello-h2c");
-});
-
-server.listen(0, "127.0.0.1", () => {
-  const address = server.address();
-  const session = http2.connect(`http://127.0.0.1:${address.port}`);
-  const req = session.request({ ":path": "/" });
-  let body = "";
-  req.setEncoding("utf8");
-  req.on("data", (chunk) => {
-    body += chunk;
-  });
-  req.on("end", () => {
-    console.log(`BODY:${body}`);
-    session.close();
-    server.close(() => process.exit(body === "hello-h2c" ? 0 : 2));
-  });
-  req.on("error", (error) => {
-    console.error(`REQ_ERROR:${error.message}`);
-    process.exit(1);
-  });
-  session.on("error", (error) => {
-    console.error(`SESSION_ERROR:${error.message}`);
-    process.exit(1);
-  });
-  req.end();
-});
-
-setTimeout(() => {
-  console.error("TIMEOUT:http2 round trip did not finish");
-  process.exit(3);
-}, 4_000);
-"#,
-            );
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-http2-guest-h2c");
-            assert_eq!(exit_code, Some(0), "stdout:\n{stdout}\nstderr:\n{stderr}");
-            assert!(
-                stdout.contains("BODY:hello-h2c"),
-                "stdout:\n{stdout}\nstderr:\n{stderr}"
-            );
-        }
-
-        fn javascript_http2_request_handler_round_trip_runs_twice_in_one_vm() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-http2-request-handler-twice");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import { createRequire } from "module";
-
-const require = createRequire(import.meta.url);
-const http2 = require("node:http2");
-const server = http2.createServer();
-const bodies = [];
-
-server.on("request", (req, res) => {
-  res.setHeader("content-type", "text/plain");
-  res.end(`reply:${req.url}`);
-});
-
-function once(session, path) {
-  return new Promise((resolve, reject) => {
-    const req = session.request({ ":path": path });
-    let body = "";
-    req.setEncoding("utf8");
-    req.on("data", (chunk) => {
-      body += chunk;
-    });
-    req.on("end", () => resolve(body));
-    req.on("error", reject);
-    req.end();
-  });
-}
-
-server.listen(0, "127.0.0.1", async () => {
-  const address = server.address();
-  const session = http2.connect(`http://127.0.0.1:${address.port}`);
-  session.on("error", (error) => {
-    console.error(`SESSION_ERROR:${error.message}`);
-    process.exit(1);
-  });
-  try {
-    bodies.push(await once(session, "/first"));
-    bodies.push(await once(session, "/second"));
-    console.log(`BODIES:${bodies.join(",")}`);
-    session.close();
-    server.close(() => process.exit(
-      bodies.join(",") === "reply:/first,reply:/second" ? 0 : 2
-    ));
-  } catch (error) {
-    console.error(`REQ_ERROR:${error.message}`);
-    process.exit(1);
-  }
-});
-
-setTimeout(() => {
-  console.error("TIMEOUT:http2 request handler round trips did not finish");
-  process.exit(3);
-}, 4_000);
-"#,
-            );
-
-            let (stdout, stderr, exit_code) = run_javascript_entry(
-                &mut sidecar,
-                &vm_id,
-                &cwd,
-                "proc-js-http2-request-handler-twice",
-            );
-            assert_eq!(exit_code, Some(0), "stdout:\n{stdout}\nstderr:\n{stderr}");
-            assert!(
-                stdout.contains("BODIES:reply:/first,reply:/second"),
-                "stdout:\n{stdout}\nstderr:\n{stderr}"
-            );
-        }
-
-        fn javascript_http2_settings_pause_push_and_file_response_surfaces_work() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-http2-surfaces");
-            write_fixture(&cwd.join("entry.mjs"), "");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-http2-surfaces");
-            sidecar
-                .vms
-                .get_mut(&vm_id)
-                .expect("javascript vm")
-                .active_processes
-                .get_mut("proc-js-http2-surfaces")
-                .expect("javascript process")
-                .guest_cwd = String::from("/workspace");
-            let host_only_path = cwd.join("host-only-reply.txt");
-            write_fixture(&host_only_path, "host-only");
-            sidecar
-                .vms
-                .get_mut(&vm_id)
-                .expect("javascript vm")
-                .kernel
-                .write_file("/workspace/reply.txt", b"from-vm-file".to_vec())
-                .expect("seed VM response file");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 10,
-                    method: String::from("net.http2_server_listen"),
-                    args: vec![Value::String(String::from(
-                        "{\"serverId\":22,\"secure\":false,\"host\":\"127.0.0.1\",\"port\":0,\"settings\":{}}",
-                    ))],
-                },
-            )
-            .expect("listen via http2 bridge");
-            let port = serde_json::from_str::<Value>(listen.as_str().expect("listen payload"))
-                .expect("parse listen payload")["address"]["port"]
-                .as_u64()
-                .expect("port") as u16;
-
-            let connect = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 11,
-                    method: String::from("net.http2_session_connect"),
-                    args: vec![Value::String(format!(
-                        "{{\"authority\":\"http://127.0.0.1:{port}\",\"protocol\":\"http:\",\"host\":\"127.0.0.1\",\"port\":{port},\"settings\":{{}}}}"
-                    ))],
-                },
-            )
-            .expect("connect via http2 bridge");
-            let session_id = serde_json::from_str::<Value>(connect.as_str().expect("connect"))
-                .expect("parse connect payload")["sessionId"]
-                .as_u64()
-                .expect("session id");
-
-            let _ = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                "net.http2_server_poll",
-                22,
-                "serverSession",
-            );
-
-            let settings = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 12,
-                    method: String::from("net.http2_session_settings"),
-                    args: vec![
-                        json!(session_id),
-                        Value::String(String::from("{\"initialWindowSize\":1234}")),
-                    ],
-                },
-            )
-            .expect("update http2 settings");
-            assert_eq!(settings, Value::Null);
-            let settings_event = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                "net.http2_session_poll",
-                session_id,
-                "sessionLocalSettings",
-            );
-            assert!(
-                settings_event["data"]
-                    .as_str()
-                    .is_some_and(|payload| payload.contains("1234")),
-                "settings event: {settings_event}"
-            );
-
-            let local_window = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 13,
-                    method: String::from("net.http2_session_set_local_window_size"),
-                    args: vec![json!(session_id), json!(4096)],
-                },
-            )
-            .expect("set local window size");
-            let local_window_payload: Value =
-                serde_json::from_str(local_window.as_str().expect("window payload"))
-                    .expect("parse local window payload");
-            assert_eq!(
-                local_window_payload["state"]["localWindowSize"],
-                json!(4096)
-            );
-
-            let stream_id = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 14,
-                    method: String::from("net.http2_session_request"),
-                    args: vec![
-                        json!(session_id),
-                        Value::String(String::from("{\":method\":\"GET\",\":path\":\"/file\"}")),
-                        Value::String(String::from("{\"endStream\":true}")),
-                    ],
-                },
-            )
-            .expect("request file response")
-            .as_u64()
-            .expect("stream id");
-            let server_stream = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                "net.http2_server_poll",
-                22,
-                "serverStream",
-            );
-            let server_stream_id = server_stream["data"]
-                .as_str()
-                .expect("server stream data")
-                .parse::<u64>()
-                .expect("server stream id");
-
-            let pause = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 15,
-                    method: String::from("net.http2_stream_pause"),
-                    args: vec![json!(server_stream_id)],
-                },
-            )
-            .expect("pause http2 stream");
-            assert_eq!(pause, Value::Null);
-            let resume = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 16,
-                    method: String::from("net.http2_stream_resume"),
-                    args: vec![json!(server_stream_id)],
-                },
-            )
-            .expect("resume http2 stream");
-            assert_eq!(resume, Value::Null);
-
-            let push_result = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 17,
-                    method: String::from("net.http2_stream_push_stream"),
-                    args: vec![
-                        json!(server_stream_id),
-                        Value::String(String::from("{\":method\":\"GET\",\":path\":\"/pushed\"}")),
-                        Value::String(String::from("{}")),
-                    ],
-                },
-            )
-            .expect("push http2 stream");
-            let push_payload: Value =
-                serde_json::from_str(push_result.as_str().expect("push payload"))
-                    .expect("parse push payload");
-            let pushed_stream_id = push_payload["streamId"].as_u64().expect("pushed stream id");
-
-            let pushed_close = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 18,
-                    method: String::from("net.http2_stream_close"),
-                    args: vec![json!(pushed_stream_id), json!(0)],
-                },
-            )
-            .expect("close pushed stream");
-            assert_eq!(pushed_close, Value::Null);
-
-            let host_file_response = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 19,
-                    method: String::from("net.http2_stream_respond_with_file"),
-                    args: vec![
-                        json!(server_stream_id),
-                        Value::String(host_only_path.to_string_lossy().into_owned()),
-                        Value::String(String::from(
-                            "{\":status\":200,\"content-type\":\"text/plain\"}",
-                        )),
-                        Value::String(String::from("{}")),
-                    ],
-                },
-            )
-            .expect_err("host-only file path should not be readable by HTTP/2 file response");
-            match host_file_response {
-                SidecarError::Kernel(message) => {
-                    assert!(message.contains("ENOENT"), "{message}");
-                }
-                other => panic!("unexpected host file response error: {other:?}"),
-            }
-
-            let file_response = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 20,
-                    method: String::from("net.http2_stream_respond_with_file"),
-                    args: vec![
-                        json!(server_stream_id),
-                        Value::String(String::from("reply.txt")),
-                        Value::String(String::from(
-                            "{\":status\":200,\"content-type\":\"text/plain\"}",
-                        )),
-                        Value::String(String::from("{}")),
-                    ],
-                },
-            )
-            .expect("respond with file");
-            assert_eq!(file_response, Value::Null);
-
-            let response_headers = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                "net.http2_session_poll",
-                session_id,
-                "clientResponseHeaders",
-            );
-            assert_eq!(response_headers["id"].as_u64(), Some(stream_id));
-            let response_data = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                "net.http2_session_poll",
-                session_id,
-                "clientData",
-            );
-            let body = base64::engine::general_purpose::STANDARD
-                .decode(response_data["data"].as_str().expect("response body"))
-                .expect("decode file body");
-            assert_eq!(String::from_utf8(body).expect("utf8 body"), "from-vm-file");
-
-            let close = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 21,
-                    method: String::from("net.http2_session_close"),
-                    args: vec![json!(session_id), json!(0)],
-                },
-            )
-            .expect("close http2 client session");
-            assert_eq!(close, Value::Null);
-
-            let server_close = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-surfaces",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 22,
-                    method: String::from("net.http2_server_close"),
-                    args: vec![json!(22)],
-                },
-            )
-            .expect("close http2 server");
-            assert_eq!(server_close, Value::Null);
-        }
-        fn javascript_http2_secure_listen_connect_request_and_respond_round_trip() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-http2-secure-round-trip");
-            write_fixture(&cwd.join("entry.mjs"), "");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-http2-secure");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-secure",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 20,
-                    method: String::from("net.http2_server_listen"),
-                    args: vec![Value::String(
-                        json!({
-                            "serverId": 33,
-                            "secure": true,
-                            "host": "127.0.0.1",
-                            "port": 0,
-                            "backlog": 8,
-                            "settings": {},
-                            "tls": {
-                                "isServer": true,
-                                "key": { "kind": "string", "data": TLS_TEST_KEY_PEM },
-                                "cert": { "kind": "string", "data": TLS_TEST_CERT_PEM },
-                                "ALPNProtocols": ["h2"],
-                            }
-                        })
-                        .to_string(),
-                    )],
-                },
-            )
-            .expect("listen via secure http2 bridge");
-            let listen_payload: Value =
-                serde_json::from_str(listen.as_str().expect("listen payload"))
-                    .expect("parse http2 listen payload");
-            let port = listen_payload["address"]["port"]
-                .as_u64()
-                .expect("http2 secure listen port") as u16;
-
-            let connect = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-secure",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 21,
-                    method: String::from("net.http2_session_connect"),
-                    args: vec![Value::String(
-                        json!({
-                            "authority": format!("https://127.0.0.1:{port}"),
-                            "protocol": "https:",
-                            "host": "127.0.0.1",
-                            "port": port,
-                            "settings": {},
-                            "tls": {
-                                "servername": "localhost",
-                                "rejectUnauthorized": false,
-                                "ALPNProtocols": ["h2"],
-                            }
-                        })
-                        .to_string(),
-                    )],
-                },
-            )
-            .expect("connect via secure http2 bridge");
-            let connect_payload: Value =
-                serde_json::from_str(connect.as_str().expect("connect payload"))
-                    .expect("parse secure http2 connect payload");
-            let client_session_id = connect_payload["sessionId"]
-                .as_u64()
-                .expect("client session id");
-
-            let server_session = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-secure",
-                "net.http2_server_poll",
-                33,
-                "serverSession",
-            );
-            let server_session_id = server_session["extraNumber"]
-                .as_u64()
-                .or_else(|| server_session["id"].as_u64())
-                .unwrap_or_default();
-            assert!(server_session_id > 0, "event: {server_session}");
-
-            let stream_id = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-secure",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 22,
-                    method: String::from("net.http2_session_request"),
-                    args: vec![
-                        json!(client_session_id),
-                        Value::String(String::from("{\":method\":\"GET\",\":path\":\"/secure\"}")),
-                        Value::String(String::from("{\"endStream\":true}")),
-                    ],
-                },
-            )
-            .expect("issue secure http2 request")
-            .as_u64()
-            .expect("client stream id");
-
-            let server_stream = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-secure",
-                "net.http2_server_poll",
-                33,
-                "serverStream",
-            );
-            let server_stream_id = server_stream["data"]
-                .as_str()
-                .expect("server stream data")
-                .parse::<u64>()
-                .expect("server stream id");
-
-            let respond = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-secure",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 23,
-                    method: String::from("net.http2_stream_respond"),
-                    args: vec![
-                        json!(server_stream_id),
-                        Value::String(String::from(
-                            "{\":status\":200,\"content-type\":\"text/plain\"}",
-                        )),
-                    ],
-                },
-            )
-            .expect("respond over secure http2");
-            assert_eq!(respond, Value::Null);
-
-            let ended = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-secure",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 24,
-                    method: String::from("net.http2_stream_end"),
-                    args: vec![
-                        json!(server_stream_id),
-                        json!(base64::engine::general_purpose::STANDARD.encode("secure-pong")),
-                    ],
-                },
-            )
-            .expect("end secure http2 stream");
-            assert_eq!(ended, Value::Bool(true));
-
-            let response_headers = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-secure",
-                "net.http2_session_poll",
-                client_session_id,
-                "clientResponseHeaders",
-            );
-            assert_eq!(response_headers["id"].as_u64(), Some(stream_id));
-
-            let response_data = poll_http2_event(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-secure",
-                "net.http2_session_poll",
-                client_session_id,
-                "clientData",
-            );
-            let body = base64::engine::general_purpose::STANDARD
-                .decode(response_data["data"].as_str().expect("response body"))
-                .expect("decode secure http2 body");
-            assert_eq!(
-                String::from_utf8(body).expect("utf8 secure http2 body"),
-                "secure-pong"
-            );
-
-            let session_state: Value = serde_json::from_str(
-                connect_payload["state"]
-                    .as_str()
-                    .expect("session state payload"),
-            )
-            .expect("parse secure session state");
-            assert_eq!(session_state["encrypted"], json!(true));
-            assert_eq!(session_state["socket"]["encrypted"], json!(true));
-        }
-        fn javascript_http2_server_respond_records_pending_response() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-http2-respond");
-            write_fixture(&cwd.join("entry.mjs"), "");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-http2-respond");
-
-            let response_json = String::from(
-                "{\"status\":200,\"headers\":[[\"content-type\",\"text/plain\"]],\"body\":\"c2VjdXJlLXBvbmc=\",\"bodyEncoding\":\"base64\"}",
-            );
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-http2-respond")
-                    .expect("javascript process");
-                process.pending_http_requests.insert((33, 44), None);
-            }
-
-            let response = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-http2-respond",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 25,
-                    method: String::from("net.http2_server_respond"),
-                    args: vec![json!(33), json!(44), Value::String(response_json.clone())],
-                },
-            )
-            .expect("record http2 response");
-            assert_eq!(response, Value::Bool(true));
-            assert_eq!(
-                sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-http2-respond"))
-                    .and_then(|process| process.pending_http_requests.get(&(33, 44)))
-                    .cloned(),
-                Some(Some(response_json)),
-            );
-        }
-        fn javascript_http_rpc_requests_gets_and_serves_over_guest_net() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-http-rpc-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import http from "node:http";
-
-const summary = await new Promise((resolve, reject) => {
-  const requests = [];
-  let requestResponse = "";
-  let getResponse = "";
-
-  const server = http.createServer((req, res) => {
-    let body = "";
-    req.setEncoding("utf8");
-    req.on("data", (chunk) => {
-      body += chunk;
-    });
-    req.on("end", () => {
-      requests.push({
-        method: req.method,
-        url: req.url,
-        body,
-      });
-      res.end(`pong:${req.method}:${body || req.url}`);
-    });
-  });
-
-  let port = null;
-  server.on("error", reject);
-  server.listen(0, "127.0.0.1", () => {
-    port = server.address().port;
-    const req = http.request(
-      {
-        host: "127.0.0.1",
-        method: "POST",
-        path: "/submit",
-        port,
-      },
-      (res) => {
-        res.setEncoding("utf8");
-        res.on("data", (chunk) => {
-          requestResponse += chunk;
-        });
-        res.on("end", () => {
-          http
-            .get(`http://127.0.0.1:${port}/health`, (getRes) => {
-              getRes.setEncoding("utf8");
-              getRes.on("data", (chunk) => {
-                getResponse += chunk;
-              });
-              getRes.on("end", () => {
-                server.close(() => {
-                  resolve({
-                    getResponse,
-                    port,
-                    requestResponse,
-                    requests,
-                  });
-                });
-              });
-            })
-            .on("error", reject);
-        });
-      },
-    );
-    req.on("error", reject);
-    req.end("ping");
-  });
-});
-
-console.log(JSON.stringify(summary));
-"#,
-            );
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-http");
-
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse http JSON");
-            assert_eq!(
-                parsed["requestResponse"],
-                Value::String(String::from("pong:POST:ping"))
-            );
-            assert_eq!(
-                parsed["getResponse"],
-                Value::String(String::from("pong:GET:/health"))
-            );
-            assert_eq!(
-                parsed["requests"][0]["url"],
-                Value::String(String::from("/submit"))
-            );
-            assert_eq!(
-                parsed["requests"][1]["url"],
-                Value::String(String::from("/health"))
-            );
-            assert!(
-                parsed["port"].as_u64().is_some_and(|port| port > 0),
-                "stdout: {stdout}"
-            );
-        }
-
-        fn javascript_http_external_get_reaches_host_listener() {
-            assert_node_available();
-
-            let listener = TcpListener::bind("127.0.0.1:0").expect("bind host HTTP listener");
-            let port = listener
-                .local_addr()
-                .expect("host HTTP listener address")
-                .port();
-            let (server_done_tx, server_done_rx) = mpsc::channel();
-            let server = thread::spawn(move || {
-                let (mut stream, _) = listener.accept().expect("accept host HTTP request");
-                let mut request = [0_u8; 1024];
-                let read = stream.read(&mut request).expect("read host HTTP request");
-                let request_text = String::from_utf8_lossy(&request[..read]);
-                assert!(
-                    request_text.starts_with("GET /external HTTP/1.1\r\n"),
-                    "unexpected request: {request_text:?}"
-                );
-                stream
-                    .write_all(
-                        b"HTTP/1.1 200 OK\r\n\
-                          Transfer-Encoding: chunked\r\n\
-                          Connection: keep-alive\r\n\
-                          \r\n\
-                          12\r\nexternal-host-body\r\n\
-                          0\r\n\
-                          \r\n",
-                    )
-                    .expect("write host HTTP response");
-                stream.flush().expect("flush host HTTP response");
-                let _ = server_done_rx.recv_timeout(Duration::from_secs(5));
-            });
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            sidecar
-                .dispatch_blocking(request(
-                    4,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::ConfigureVm(ConfigureVmRequest {
-                        mounts: Vec::new(),
-                        software: Vec::new(),
-                        permissions: None,
-                        module_access_cwd: None,
-                        instructions: Vec::new(),
-                        projected_modules: Vec::new(),
-                        command_permissions: std::collections::HashMap::new(),
-                        loopback_exempt_ports: vec![port],
-                        packages: Vec::new(),
-                        packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-                    }),
-                ))
-                .expect("configure loopback-exempt host listener port");
-
-            let cwd = temp_dir("secure-exec-sidecar-js-http-external-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                format!(
-                    r#"
-import http from "node:http";
-
-const result = await Promise.race([
-  new Promise((resolve, reject) => {{
-    const req = http.get(
-      {{
-        host: "127.0.0.1",
-        port: {port},
-        path: "/external",
-      }},
-      (res) => {{
-        let body = "";
-        res.setEncoding("utf8");
-        res.on("data", (chunk) => {{
-          body += chunk;
-        }});
-        res.on("end", () => {{
-          resolve({{ status: res.statusCode, body }});
-        }});
-      }},
-    );
-    req.on("error", reject);
-  }}),
-  new Promise((_, reject) => setTimeout(() => reject(new Error("timeout")), 3000)),
-]);
-
-console.log(JSON.stringify(result));
-"#
-                ),
-            );
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-http-external");
-            let _ = server_done_tx.send(());
-            server.join().expect("join host HTTP listener");
-
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            let parsed: Value =
-                serde_json::from_str(stdout.trim()).expect("parse external http JSON");
-            assert_eq!(parsed["status"], json!(200));
-            assert_eq!(
-                parsed["body"],
-                Value::String(String::from("external-host-body"))
-            );
-        }
-
-        fn javascript_fetch_posts_to_guest_loopback_http_server() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-fetch-loopback-cwd");
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-import http from "node:http";
-
-const summary = await new Promise((resolve, reject) => {
-  const requests = [];
-  const server = http.createServer((req, res) => {
-    let body = "";
-    req.setEncoding("utf8");
-    req.on("data", (chunk) => {
-      body += chunk;
-    });
-    req.on("end", () => {
-      requests.push({ method: req.method, url: req.url, body });
-      res.writeHead(200, { "Content-Type": "application/json" });
-      res.end(JSON.stringify({ ok: true, method: req.method, received: body }));
-    });
-  });
-
-  server.on("error", reject);
-  server.listen(0, "127.0.0.1", async () => {
-    try {
-      const port = server.address().port;
-      const response = await fetch(`http://127.0.0.1:${port}/data`, {
-        method: "POST",
-        headers: { "content-type": "application/json" },
-        body: JSON.stringify({ key: "value" }),
-      });
-      const payload = await response.json();
-      server.close(() => resolve({ payload, requests }));
-    } catch (error) {
-      server.close(() => reject(error));
-    }
-  });
-});
-
-console.log(JSON.stringify(summary));
-"#,
-            );
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-fetch-loopback");
-
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse fetch JSON");
-            assert_eq!(parsed["payload"]["ok"], Value::Bool(true));
-            assert_eq!(
-                parsed["payload"]["received"],
-                Value::String(String::from("{\"key\":\"value\"}"))
-            );
-            assert_eq!(
-                parsed["requests"][0]["method"],
-                Value::String(String::from("POST"))
-            );
-            assert_eq!(
-                parsed["requests"][0]["url"],
-                Value::String(String::from("/data"))
-            );
-        }
-
-        fn javascript_fetch_reaches_http_server_in_parallel_guest_process() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let server_cwd = temp_dir("secure-exec-sidecar-js-cross-process-server-cwd");
-            write_fixture(
-                &server_cwd.join("entry.mjs"),
-                r#"
-import http from "node:http";
-
-const server = http.createServer((req, res) => {
-  let body = "";
-  req.setEncoding("utf8");
-  req.on("data", (chunk) => {
-    body += chunk;
-  });
-  req.on("end", () => {
-    res.writeHead(200, { "content-type": "text/plain" });
-    res.end(`${req.method}:${req.url}:${body}`);
-  });
-});
-
-server.listen(3000, "127.0.0.1", () => {
-  console.log("READY");
-});
-
-await new Promise(() => {});
-"#,
-            );
-            start_fake_javascript_process(&mut sidecar, &vm_id, &server_cwd, "proc-js-server");
-            wait_for_process_stdout_contains(&mut sidecar, &vm_id, "proc-js-server", "READY");
-
-            let client_cwd = temp_dir("secure-exec-sidecar-js-cross-process-client-cwd");
-            write_fixture(
-                &client_cwd.join("entry.mjs"),
-                r#"
-const response = await fetch("http://127.0.0.1:3000/from-client", {
-  method: "POST",
-  body: "hello",
-});
-
-console.log(JSON.stringify({
-  status: response.status,
-  body: await response.text(),
-}));
-"#,
-            );
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &client_cwd, "proc-js-client");
-
-            sidecar
-                .kill_process_internal(&vm_id, "proc-js-server", "SIGKILL")
-                .expect("kill javascript server process");
-
-            assert_eq!(exit_code, Some(0), "stdout: {stdout}\nstderr: {stderr}");
-            let parsed: Value =
-                serde_json::from_str(stdout.trim()).expect("parse client fetch JSON");
-            assert_eq!(parsed["status"], Value::from(200));
-            assert_eq!(
-                parsed["body"],
-                Value::String(String::from("POST:/from-client:hello"))
-            );
-        }
-
-        fn vm_network_counts(
-            sidecar: &NativeSidecar<RecordingBridge>,
-            vm_id: &str,
-        ) -> NetworkResourceCounts {
-            let vm = sidecar.vms.get(vm_id).expect("vm state");
-            vm_network_resource_counts(vm)
-        }
-
-        fn assert_network_counts_unchanged(
-            before: NetworkResourceCounts,
-            after: NetworkResourceCounts,
-        ) {
-            assert_eq!(after.sockets, before.sockets, "socket count changed");
-            assert_eq!(
-                after.connections, before.connections,
-                "connection count changed"
-            );
-        }
-
-        #[allow(clippy::too_many_arguments)]
-        fn dispatch_host_vm_fetch(
-            sidecar: &mut NativeSidecar<RecordingBridge>,
-            request_id: secure_exec_sidecar::protocol::RequestId,
-            connection_id: &str,
-            session_id: &str,
-            vm_id: &str,
-            port: u16,
-            path: &str,
-            body: Option<&str>,
-        ) -> Result<DispatchResult, SidecarError> {
-            sidecar.dispatch_blocking(request(
-                request_id,
-                OwnershipScope::vm(connection_id, session_id, vm_id),
-                RequestPayload::VmFetch(crate::protocol::VmFetchRequest {
-                    port,
-                    method: if body.is_some() {
-                        String::from("POST")
-                    } else {
-                        String::from("GET")
-                    },
-                    path: String::from(path),
-                    headers_json: String::from(r#"{"content-type":"text/plain"}"#),
-                    body: body.map(String::from),
-                }),
-            ))
-        }
-
-        fn rejected_response_message(result: DispatchResult) -> String {
-            match result.response.payload {
-                ResponsePayload::Rejected(rejected) => rejected.message,
-                other => panic!("expected rejected response, got {other:?}"),
-            }
-        }
-
-        #[test]
-        fn vm_fetch_missing_kernel_tcp_listener_does_not_open_host_network() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            let before = vm_network_counts(&sidecar, &vm_id);
-            let rejected = dispatch_host_vm_fetch(
-                &mut sidecar,
-                900,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                3000,
-                "/missing",
-                None,
-            )
-            .map(rejected_response_message)
-            .expect("missing listener should reject vm.fetch");
-            assert!(
-                rejected.contains("could not find a guest HTTP listener on port 3000"),
-                "unexpected error: {rejected}"
-            );
-            let after = vm_network_counts(&sidecar, &vm_id);
-            assert_network_counts_unchanged(before, after);
-        }
-
-        fn vm_fetch_reaches_javascript_http_server_over_kernel_tcp() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let server_cwd = temp_dir("secure-exec-sidecar-host-fetch-js-server-cwd");
-            write_fixture(
-                &server_cwd.join("entry.mjs"),
-                r#"
-import http from "node:http";
-
-const server = http.createServer((req, res) => {
-  let body = "";
-  req.setEncoding("utf8");
-  req.on("data", (chunk) => {
-    body += chunk;
-  });
-  req.on("end", () => {
-    res.writeHead(200, { "content-type": "text/plain" });
-    res.end(`${req.method}:${req.url}:${body}`);
-  });
-});
-
-server.listen(3000, "127.0.0.1", () => {
-  console.log("READY");
-});
-
-await new Promise(() => {});
-"#,
-            );
-            start_fake_javascript_process(&mut sidecar, &vm_id, &server_cwd, "proc-js-server");
-            wait_for_process_stdout_contains(&mut sidecar, &vm_id, "proc-js-server", "READY");
-
-            let process = sidecar
-                .vms
-                .get(&vm_id)
-                .and_then(|vm| vm.active_processes.get("proc-js-server"))
-                .expect("server process");
-            assert!(
-                process.http_servers.is_empty(),
-                "http.createServer should not register a legacy object-mode HTTP server",
-            );
-            assert!(
-                process
-                    .tcp_listeners
-                    .values()
-                    .any(|listener| listener.kernel_socket_id.is_some()),
-                "http.createServer should register a kernel TCP listener",
-            );
-
-            let response = sidecar
-                .dispatch_blocking(request(
-                    1,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::VmFetch(crate::protocol::VmFetchRequest {
-                        port: 3000,
-                        method: String::from("POST"),
-                        path: String::from("/from-host"),
-                        headers_json: String::from(r#"{"content-type":"text/plain"}"#),
-                        body: Some(String::from("hello")),
-                    }),
-                ))
-                .expect("host fetch reaches guest HTTP server");
-
-            sidecar
-                .kill_process_internal(&vm_id, "proc-js-server", "SIGKILL")
-                .expect("kill javascript server process");
-
-            match response.response.payload {
-                ResponsePayload::VmFetchResult(result) => {
-                    let parsed: Value =
-                        serde_json::from_str(&result.response_json).expect("parse fetch response");
-                    assert_eq!(parsed["status"], Value::from(200));
-                    assert_eq!(
-                        parsed["body"],
-                        Value::String(
-                            base64::engine::general_purpose::STANDARD
-                                .encode("POST:/from-host:hello")
-                        )
-                    );
-                    assert_eq!(
-                        parsed["bodyEncoding"],
-                        Value::String(String::from("base64"))
-                    );
-                }
-                other => panic!("unexpected vm_fetch response payload: {other:?}"),
-            }
-        }
-
-        fn vm_fetch_kernel_tcp_decodes_chunked_response_body() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let server_cwd = temp_dir("secure-exec-sidecar-host-fetch-js-chunked-cwd");
-            write_fixture(
-                &server_cwd.join("entry.mjs"),
-                r#"
-import http from "node:http";
-
-const server = http.createServer((_req, res) => {
-  res.writeHead(200, { "content-type": "text/plain" });
-  res.write("hello ");
-  res.write("chunked");
-  res.end();
-});
-
-server.listen(3000, "127.0.0.1", () => {
-  console.log("READY");
-});
-
-await new Promise(() => {});
-"#,
-            );
-            start_fake_javascript_process(&mut sidecar, &vm_id, &server_cwd, "proc-js-server");
-            wait_for_process_stdout_contains(&mut sidecar, &vm_id, "proc-js-server", "READY");
-
-            let response = dispatch_host_vm_fetch(
-                &mut sidecar,
-                907,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                3000,
-                "/chunked",
-                None,
-            )
-            .expect("host fetch reaches chunked guest HTTP server");
-
-            sidecar
-                .kill_process_internal(&vm_id, "proc-js-server", "SIGKILL")
-                .expect("kill javascript server process");
-
-            match response.response.payload {
-                ResponsePayload::VmFetchResult(result) => {
-                    let parsed: Value =
-                        serde_json::from_str(&result.response_json).expect("parse fetch response");
-                    assert_eq!(parsed["status"], Value::from(200));
-                    assert_eq!(
-                        parsed["bodyEncoding"],
-                        Value::String(String::from("base64"))
-                    );
-                    let body = base64::engine::general_purpose::STANDARD
-                        .decode(parsed["body"].as_str().expect("base64 response body"))
-                        .expect("decode response body");
-                    assert_eq!(body, b"hello chunked");
-                    assert!(
-                        !body.windows(3).any(|window| window == b"\r\n6"),
-                        "chunk framing leaked into decoded body: {body:?}"
-                    );
-                }
-                other => panic!("unexpected vm_fetch response payload: {other:?}"),
-            }
-        }
-
-        fn vm_fetch_kernel_tcp_rejects_chunked_with_content_length() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let server_cwd = temp_dir("secure-exec-sidecar-host-fetch-js-chunked-cl-cwd");
-            write_fixture(
-                &server_cwd.join("entry.mjs"),
-                r#"
-import net from "node:net";
-
-const server = net.createServer((socket) => {
-  socket.end(
-    "HTTP/1.1 200 OK\r\n" +
-      "Transfer-Encoding: chunked\r\n" +
-      "Content-Length: 5\r\n" +
-      "\r\n" +
-      "5\r\nhello\r\n0\r\n\r\n"
-  );
-});
-
-server.listen(3000, "127.0.0.1", () => {
-  console.log("READY");
-});
-
-await new Promise(() => {});
-"#,
-            );
-            start_fake_javascript_process(&mut sidecar, &vm_id, &server_cwd, "proc-js-server");
-            wait_for_process_stdout_contains(&mut sidecar, &vm_id, "proc-js-server", "READY");
-
-            let rejected = dispatch_host_vm_fetch(
-                &mut sidecar,
-                908,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                3000,
-                "/invalid",
-                None,
-            )
-            .map(rejected_response_message)
-            .expect("invalid chunked response should reject vm.fetch");
-
-            sidecar
-                .kill_process_internal(&vm_id, "proc-js-server", "SIGKILL")
-                .expect("kill javascript server process");
-
-            assert!(
-                rejected.contains("Transfer-Encoding: chunked")
-                    && rejected.contains("Content-Length"),
-                "unexpected error: {rejected}"
-            );
-        }
-
-        fn vm_fetch_kernel_tcp_socket_cap_failure_closes_no_extra_resources() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([(String::from("resource.max_sockets"), String::from("1"))]),
-            )
-            .expect("create vm");
-            let server_cwd = temp_dir("secure-exec-sidecar-host-fetch-js-cap-cwd");
-            write_fixture(
-                &server_cwd.join("entry.mjs"),
-                r#"
-import http from "node:http";
-
-const server = http.createServer((_req, res) => {
-  res.end("ok");
-});
-
-server.listen(3000, "127.0.0.1", () => {
-  console.log("READY");
-});
-
-await new Promise(() => {});
-"#,
-            );
-            start_fake_javascript_process(&mut sidecar, &vm_id, &server_cwd, "proc-js-server");
-            wait_for_process_stdout_contains(&mut sidecar, &vm_id, "proc-js-server", "READY");
-
-            let before = vm_network_counts(&sidecar, &vm_id);
-            assert_eq!(before.sockets, 1, "server listener should own one socket");
-            let rejected = dispatch_host_vm_fetch(
-                &mut sidecar,
-                901,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                3000,
-                "/cap",
-                None,
-            )
-            .map(rejected_response_message)
-            .expect("vm.fetch should honor socket cap before creating client socket");
-            assert!(
-                rejected.contains("EAGAIN: maximum socket count reached"),
-                "unexpected error: {rejected}"
-            );
-            let after = vm_network_counts(&sidecar, &vm_id);
-            assert_network_counts_unchanged(before, after);
-
-            sidecar
-                .kill_process_internal(&vm_id, "proc-js-server", "SIGKILL")
-                .expect("kill javascript server process");
-        }
-
-        fn vm_fetch_kernel_tcp_oversized_response_closes_client_socket() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let server_cwd = temp_dir("secure-exec-sidecar-host-fetch-js-oversized-cwd");
-            write_fixture(
-                &server_cwd.join("entry.mjs"),
-                format!(
-                    r#"
-import http from "node:http";
-
-const body = "x".repeat({});
-const server = http.createServer((_req, res) => {{
-  res.writeHead(200, {{ "content-type": "text/plain" }});
-  res.end(body);
-}});
-
-server.listen(3000, "127.0.0.1", () => {{
-  console.log("READY");
-}});
-
-await new Promise(() => {{}});
-"#,
-                    crate::wire::DEFAULT_MAX_FRAME_BYTES + 1
-                ),
-            );
-            start_fake_javascript_process(&mut sidecar, &vm_id, &server_cwd, "proc-js-server");
-            wait_for_process_stdout_contains(&mut sidecar, &vm_id, "proc-js-server", "READY");
-
-            let before = vm_network_counts(&sidecar, &vm_id);
-            let rejected = dispatch_host_vm_fetch(
-                &mut sidecar,
-                902,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                3000,
-                "/oversized",
-                None,
-            )
-            .map(rejected_response_message)
-            .expect("oversized vm.fetch response should be rejected");
-            assert!(
-                rejected.contains("vm.fetch raw response buffer is"),
-                "unexpected error: {rejected}"
-            );
-            let after = vm_network_counts(&sidecar, &vm_id);
-            assert_eq!(
-                after.sockets,
-                before.sockets + 1,
-                "host-fetch client socket should close, leaving only the server's accepted socket"
-            );
-            assert!(
-                after.connections <= before.connections + 1,
-                "host-fetch client connection leaked: before={before:?} after={after:?}"
-            );
-
-            sidecar
-                .kill_process_internal(&vm_id, "proc-js-server", "SIGKILL")
-                .expect("kill javascript server process");
-        }
-
-        fn vm_fetch_kernel_tcp_honors_configured_response_limit() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([(
-                    String::from("limits.http.max_fetch_response_bytes"),
-                    String::from("512"),
-                )]),
-            )
-            .expect("create vm");
-            let server_cwd = temp_dir("secure-exec-sidecar-host-fetch-js-config-limit-cwd");
-            write_fixture(
-                &server_cwd.join("entry.mjs"),
-                r#"
-import http from "node:http";
-
-const body = "x".repeat(1024);
-const server = http.createServer((_req, res) => {
-  res.writeHead(200, { "content-type": "text/plain" });
-  res.end(body);
-});
-
-server.listen(3000, "127.0.0.1", () => {
-  console.log("READY");
-});
-
-await new Promise(() => {});
-"#,
-            );
-            start_fake_javascript_process(&mut sidecar, &vm_id, &server_cwd, "proc-js-server");
-            wait_for_process_stdout_contains(&mut sidecar, &vm_id, "proc-js-server", "READY");
-
-            let before = vm_network_counts(&sidecar, &vm_id);
-            let rejected = dispatch_host_vm_fetch(
-                &mut sidecar,
-                905,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                3000,
-                "/configured-limit",
-                None,
-            )
-            .map(rejected_response_message)
-            .expect("configured response limit should reject vm.fetch");
-            assert!(
-                rejected.contains("vm.fetch payload is") && rejected.contains("limit is 512"),
-                "unexpected error: {rejected}"
-            );
-            let after = vm_network_counts(&sidecar, &vm_id);
-            assert!(
-                after.sockets <= before.sockets + 1,
-                "host-fetch client socket leaked: before={before:?} after={after:?}"
-            );
-            assert!(
-                after.connections <= before.connections + 1,
-                "host-fetch client connection leaked: before={before:?} after={after:?}"
-            );
-
-            sidecar
-                .kill_process_internal(&vm_id, "proc-js-server", "SIGKILL")
-                .expect("kill javascript server process");
-        }
-
-        fn vm_fetch_kernel_tcp_malformed_response_closes_client_socket() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let server_cwd = temp_dir("secure-exec-sidecar-host-fetch-js-malformed-cwd");
-            write_fixture(
-                &server_cwd.join("entry.mjs"),
-                r#"
-import net from "node:net";
-
-const server = net.createServer((socket) => {
-  socket.end("not-http\r\n\r\n");
-});
-
-server.listen(3000, "127.0.0.1", () => {
-  console.log("READY");
-});
-
-await new Promise(() => {});
-"#,
-            );
-            start_fake_javascript_process(&mut sidecar, &vm_id, &server_cwd, "proc-js-server");
-            wait_for_process_stdout_contains(&mut sidecar, &vm_id, "proc-js-server", "READY");
-
-            let before = vm_network_counts(&sidecar, &vm_id);
-            let rejected = dispatch_host_vm_fetch(
-                &mut sidecar,
-                906,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                3000,
-                "/malformed",
-                None,
-            )
-            .map(rejected_response_message)
-            .expect("malformed response should reject vm.fetch");
-            assert!(
-                rejected.contains("invalid vm.fetch HTTP response status line"),
-                "unexpected error: {rejected}"
-            );
-            let after = vm_network_counts(&sidecar, &vm_id);
-            assert!(
-                after.sockets <= before.sockets + 1,
-                "host-fetch client socket leaked: before={before:?} after={after:?}"
-            );
-            assert!(
-                after.connections <= before.connections + 1,
-                "host-fetch client connection leaked: before={before:?} after={after:?}"
-            );
-
-            sidecar
-                .kill_process_internal(&vm_id, "proc-js-server", "SIGKILL")
-                .expect("kill javascript server process");
-        }
-
-        fn vm_fetch_kernel_tcp_timeout_closes_client_socket() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let server_cwd = temp_dir("secure-exec-sidecar-host-fetch-js-timeout-cwd");
-            write_fixture(
-                &server_cwd.join("entry.mjs"),
-                r#"
-import http from "node:http";
-
-const server = http.createServer(() => new Promise(() => {}));
-
-server.listen(3000, "127.0.0.1", () => {
-  console.log("READY");
-});
-
-await new Promise(() => {});
-"#,
-            );
-            start_fake_javascript_process(&mut sidecar, &vm_id, &server_cwd, "proc-js-server");
-            wait_for_process_stdout_contains(&mut sidecar, &vm_id, "proc-js-server", "READY");
-
-            let before = vm_network_counts(&sidecar, &vm_id);
-            std::env::set_var("SECURE_EXEC_TEST_HTTP_LOOPBACK_REQUEST_TIMEOUT_MS", "100");
-            let rejected = dispatch_host_vm_fetch(
-                &mut sidecar,
-                904,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                3000,
-                "/timeout",
-                None,
-            )
-            .map(rejected_response_message)
-            .expect("stalled vm.fetch should reject after timeout");
-            std::env::remove_var("SECURE_EXEC_TEST_HTTP_LOOPBACK_REQUEST_TIMEOUT_MS");
-            assert!(
-                rejected.contains("vm.fetch timed out waiting for kernel TCP HTTP response"),
-                "unexpected error: {rejected}"
-            );
-            let after = vm_network_counts(&sidecar, &vm_id);
-            assert_eq!(
-                after.sockets,
-                before.sockets + 1,
-                "host-fetch client socket should close, leaving only the server's stalled accepted socket"
-            );
-            assert!(
-                after.connections <= before.connections + 1,
-                "host-fetch client connection leaked: before={before:?} after={after:?}"
-            );
-
-            sidecar
-                .kill_process_internal(&vm_id, "proc-js-server", "SIGKILL")
-                .expect("kill javascript server process");
-        }
-
-        fn vm_fetch_kernel_tcp_target_exit_cleans_up_process_resources() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let server_cwd = temp_dir("secure-exec-sidecar-host-fetch-js-target-exit-cwd");
-            write_fixture(
-                &server_cwd.join("entry.mjs"),
-                r#"
-import http from "node:http";
-
-const server = http.createServer(() => new Promise(() => {}));
-
-server.listen(3000, "127.0.0.1", () => {
-  console.log("READY");
-  setTimeout(() => {
-    throw new Error("target exited during vm.fetch");
-  }, 10);
-});
-
-await new Promise(() => {});
-"#,
-            );
-            start_fake_javascript_process(&mut sidecar, &vm_id, &server_cwd, "proc-js-server");
-            wait_for_process_stdout_contains(&mut sidecar, &vm_id, "proc-js-server", "READY");
-
-            let rejected = dispatch_host_vm_fetch(
-                &mut sidecar,
-                903,
-                &connection_id,
-                &session_id,
-                &vm_id,
-                3000,
-                "/exit",
-                None,
-            )
-            .map(rejected_response_message)
-            .expect("target exit should reject vm.fetch");
-            assert!(
-                rejected.contains("vm.fetch target exited before responding (exit code 1)"),
-                "unexpected error: {rejected}"
-            );
-
-            let vm = sidecar.vms.get(&vm_id).expect("vm state");
-            assert!(
-                !vm.active_processes.contains_key("proc-js-server"),
-                "target process should be cleaned up after exit"
-            );
-            let after = vm_network_resource_counts(vm);
-            assert_eq!(after.sockets, 0, "target exit should close sockets");
-            assert_eq!(after.connections, 0, "target exit should close connections");
-        }
-
-        fn javascript_https_rpc_requests_and_serves_over_guest_tls() {
-            let _tls_lock = tls_service_test_lock();
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-https-rpc-cwd");
-            let entry = format!(
-                r#"
-import https from "node:https";
-
-const key = {key:?};
-const cert = {cert:?};
-
-const summary = await new Promise((resolve, reject) => {{
-  let received = "";
-  let response = "";
-  const server = https.createServer({{ key, cert }}, (req, res) => {{
-    req.setEncoding("utf8");
-    req.on("data", (chunk) => {{
-      received += chunk;
-    }});
-    req.on("end", () => {{
-      res.end(`pong:${{req.method}}:${{received}}`);
-    }});
-  }});
-
-  let port = null;
-  server.on("error", reject);
-  server.listen(0, "127.0.0.1", () => {{
-    port = server.address().port;
-    const req = https.request({{
-      host: "127.0.0.1",
-      method: "POST",
-      path: "/secure",
-      port,
-      rejectUnauthorized: false,
-    }}, (res) => {{
-      res.setEncoding("utf8");
-      res.on("data", (chunk) => {{
-        response += chunk;
-      }});
-      res.on("end", () => {{
-        server.close(() => {{
-          resolve({{
-            port,
-            received,
-            response,
-          }});
-        }});
-      }});
-    }});
-    req.on("error", reject);
-    req.end("ping");
-  }});
-}});
-
-console.log(JSON.stringify(summary));
-"#,
-                key = TLS_TEST_KEY_PEM,
-                cert = TLS_TEST_CERT_PEM,
-            );
-            write_fixture(&cwd.join("entry.mjs"), &entry);
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-https");
-
-            assert!(
-                !stderr.contains("ERR_AGENTOS_NODE_SYNC_RPC"),
-                "unexpected sync RPC error: {stderr}"
-            );
-            let parsed: Value = serde_json::from_str(stdout.trim()).expect("parse https JSON");
-            assert_eq!(parsed["received"], Value::String(String::from("ping")));
-            assert_eq!(
-                parsed["response"],
-                Value::String(String::from("pong:POST:ping"))
-            );
-            assert!(
-                parsed["port"].as_u64().is_some_and(|port| port > 0),
-                "stdout: {stdout}, exit_code: {exit_code:?}"
-            );
-        }
-
-        fn javascript_loopback_tls_https_get_buffers_handshake_pending_write_work() {
-            let _tls_lock = tls_service_test_lock();
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-loopback-tls-get-cwd");
-            let entry = format!(
-                r#"
-	import https from "node:https";
-
-	const key = {key:?};
-	const cert = {cert:?};
-
-const body = await new Promise((resolve, reject) => {{
-  const server = https.createServer({{ key, cert }}, (_req, res) => {{
-    res.end("hello-loopback-tls");
-  }});
-
-  server.on("error", reject);
-  server.listen(0, "127.0.0.1", () => {{
-    const port = server.address().port;
-    let response = "";
-    const req = https.get({{
-      agent: false,
-      host: "127.0.0.1",
-      port,
-      path: "/",
-      rejectUnauthorized: false,
-    }}, (res) => {{
-      res.setEncoding("utf8");
-      res.on("data", (chunk) => {{
-        response += chunk;
-      }});
-      res.on("end", () => {{
-        server.close(() => resolve(response));
-      }});
-    }});
-    req.on("error", reject);
-  }});
-}});
-
-console.log(`BODY:${{body}}`);
-	"#,
-                key = TLS_TEST_KEY_PEM,
-                cert = TLS_TEST_CERT_PEM,
-            );
-            write_fixture(&cwd.join("entry.mjs"), &entry);
-
-            let (stdout, stderr, exit_code) =
-                run_javascript_entry(&mut sidecar, &vm_id, &cwd, "proc-js-loopback-tls-get");
-
-            assert!(
-                !stderr.contains("ERR_AGENTOS_NODE_SYNC_RPC"),
-                "unexpected sync RPC error: {stderr}"
-            );
-            assert!(
-                stdout.contains("BODY:hello-loopback-tls"),
-                "unexpected stdout: {stdout}, stderr: {stderr}, exit_code: {exit_code:?}"
-            );
-        }
-        fn javascript_net_rpc_listens_accepts_connections_and_reports_listener_state() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-net-server-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-server");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 0,
-                        "backlog": 2,
-                    })],
-                },
-            )
-            .expect("listen through sidecar net RPC");
-            let server_id = listen["serverId"].as_str().expect("server id").to_string();
-            let guest_port = listen["localPort"]
-                .as_u64()
-                .and_then(|value| u16::try_from(value).ok())
-                .expect("guest listener port");
-            let response = sidecar
-                .dispatch_blocking(request(
-                    1,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::FindListener(FindListenerRequest {
-                        host: Some(String::from("127.0.0.1")),
-                        port: Some(guest_port),
-                        path: None,
-                    }),
-                ))
-                .expect("query sidecar listener");
-            match response.response.payload {
-                ResponsePayload::ListenerSnapshot(snapshot) => {
-                    let listener = snapshot.listener.expect("listener snapshot");
-                    assert_eq!(listener.process_id, "proc-js-server");
-                    assert_eq!(listener.host.as_deref(), Some("127.0.0.1"));
-                    assert_eq!(listener.port, Some(guest_port));
-                }
-                other => panic!("unexpected find_listener response payload: {other:?}"),
-            }
-
-            let client = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.connect"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": guest_port,
-                    })],
-                },
-            )
-            .expect("connect guest tcp client");
-            let client_socket_id = client["socketId"]
-                .as_str()
-                .expect("client socket id")
-                .to_string();
-
-            let accepted = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("net.server_poll"),
-                    args: vec![json!(server_id), json!(250)],
-                },
-            )
-            .expect("accept connection");
-            assert_eq!(accepted["type"], Value::from("connection"));
-            assert_eq!(accepted["localAddress"], Value::from("127.0.0.1"));
-            assert_eq!(accepted["localPort"], Value::from(guest_port));
-            let socket_id = accepted["socketId"]
-                .as_str()
-                .expect("socket id")
-                .to_string();
-
-            let written = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 4,
-                    method: String::from("net.write"),
-                    args: vec![
-                        json!(client_socket_id.clone()),
-                        json!({
-                            "__agentOSType": "bytes",
-                            "base64": base64::engine::general_purpose::STANDARD.encode("ping"),
-                        }),
-                    ],
-                },
-            )
-            .expect("write client payload");
-            assert_eq!(written, Value::from(4));
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 5,
-                    method: String::from("net.shutdown"),
-                    args: vec![json!(client_socket_id.clone())],
-                },
-            )
-            .expect("shutdown client write half");
-
-            let data = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 6,
-                    method: String::from("net.poll"),
-                    args: vec![json!(socket_id.clone()), json!(250)],
-                },
-            )
-            .expect("poll socket data");
-            assert_eq!(data["type"], Value::from("data"));
-
-            let bytes = base64::engine::general_purpose::STANDARD
-                .decode(data["data"]["base64"].as_str().expect("base64 payload"))
-                .expect("decode payload");
-            assert_eq!(bytes, b"ping");
-
-            let written = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 7,
-                    method: String::from("net.write"),
-                    args: vec![
-                        json!(socket_id.clone()),
-                        json!({
-                            "__agentOSType": "bytes",
-                            "base64": base64::engine::general_purpose::STANDARD.encode("pong:ping"),
-                        }),
-                    ],
-                },
-            )
-            .expect("write response");
-            assert_eq!(written, Value::from(9));
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 8,
-                    method: String::from("net.shutdown"),
-                    args: vec![json!(socket_id)],
-                },
-            )
-            .expect("shutdown write half");
-
-            let client_data = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 9,
-                    method: String::from("net.poll"),
-                    args: vec![json!(client_socket_id.clone()), json!(250)],
-                },
-            )
-            .expect("poll client response");
-            assert_eq!(client_data["type"], Value::from("data"));
-            let client_bytes = base64::engine::general_purpose::STANDARD
-                .decode(
-                    client_data["data"]["base64"]
-                        .as_str()
-                        .expect("client base64 payload"),
-                )
-                .expect("decode client payload");
-            assert_eq!(client_bytes, b"pong:ping");
-
-            let client_end = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-server",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 10,
-                    method: String::from("net.poll"),
-                    args: vec![json!(client_socket_id), json!(250)],
-                },
-            )
-            .expect("poll client end");
-            assert_eq!(client_end["type"], Value::from("end"));
-        }
-        fn javascript_net_rpc_reports_connection_counts_and_enforces_backlog() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-net-backlog-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-backlog");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-backlog",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 0,
-                        "backlog": 1,
-                    })],
-                },
-            )
-            .expect("listen through sidecar net RPC");
-            let server_id = listen["serverId"].as_str().expect("server id").to_string();
-            let guest_port = listen["localPort"]
-                .as_u64()
-                .and_then(|value| u16::try_from(value).ok())
-                .expect("listener port");
-
-            let first_client = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-backlog",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.connect"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": guest_port,
-                    })],
-                },
-            )
-            .expect("queue first backlog client");
-            let first_client_socket_id = first_client["socketId"]
-                .as_str()
-                .expect("first client socket id")
-                .to_string();
-
-            let second_connect = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-backlog",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("net.connect"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": guest_port,
-                    })],
-                },
-            )
-            .expect_err("reject second queued backlog client");
-            assert!(
-                second_connect.to_string().contains("backlog is full"),
-                "{second_connect}"
-            );
-
-            let first_connection = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-backlog",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 4,
-                    method: String::from("net.server_poll"),
-                    args: vec![json!(server_id.clone()), json!(250)],
-                },
-            )
-            .expect("accept first backlog connection");
-            assert_eq!(first_connection["type"], Value::from("connection"));
-            let first_socket_id = first_connection["socketId"]
-                .as_str()
-                .expect("first socket id")
-                .to_string();
-
-            let connection_count = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-backlog",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 5,
-                    method: String::from("net.server_connections"),
-                    args: vec![json!(server_id.clone())],
-                },
-            )
-            .expect("query server connections");
-            assert_eq!(connection_count, json!(1));
-
-            let second_poll = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-backlog",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 6,
-                    method: String::from("net.server_poll"),
-                    args: vec![json!(server_id.clone()), json!(50)],
-                },
-            )
-            .expect("poll second backlog connection");
-            assert_eq!(second_poll, Value::Null);
-
-            let connection_count = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-backlog",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 7,
-                    method: String::from("net.server_connections"),
-                    args: vec![json!(server_id.clone())],
-                },
-            )
-            .expect("query server connections after backlog rejection");
-            assert_eq!(connection_count, json!(1));
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-backlog",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 8,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(first_socket_id)],
-                },
-            )
-            .expect("destroy first backlog socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-backlog",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 9,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(first_client_socket_id)],
-                },
-            )
-            .expect("destroy first backlog client socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-backlog",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 10,
-                    method: String::from("net.server_close"),
-                    args: vec![json!(server_id)],
-                },
-            )
-            .expect("close backlog listener");
-
-            sidecar
-                .dispose_vm_internal_blocking(
-                    &connection_id,
-                    &session_id,
-                    &vm_id,
-                    DisposeReason::Requested,
-                )
-                .expect("dispose backlog vm");
-        }
-        fn javascript_net_poll_clamps_guest_wait_to_sidecar_ceiling() {
-            assert_eq!(clamp_javascript_net_poll_wait(0), Duration::ZERO);
-            assert_eq!(
-                clamp_javascript_net_poll_wait(10),
-                Duration::from_millis(10)
-            );
-            assert_eq!(
-                clamp_javascript_net_poll_wait(10_000),
-                Duration::from_millis(50)
-            );
-            assert_eq!(
-                clamp_javascript_net_poll_wait(u64::MAX),
-                Duration::from_millis(50)
-            );
-        }
-        fn javascript_net_poll_timeout_does_not_block_concurrent_vm_dispose() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let poll_vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create poll vm");
-            let dispose_vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create dispose vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-net-poll-clamp-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-
-            start_fake_javascript_process(&mut sidecar, &poll_vm_id, &cwd, "proc-js-poll");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &poll_vm_id,
-                "proc-js-poll",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 0,
-                    })],
-                },
-            )
-            .expect("listen for net.poll clamp test");
-            let server_id = listen["serverId"].as_str().expect("server id").to_string();
-            let guest_port = listen["localPort"]
-                .as_u64()
-                .and_then(|value| u16::try_from(value).ok())
-                .expect("listener port");
-
-            let client = call_javascript_sync_rpc(
-                &mut sidecar,
-                &poll_vm_id,
-                "proc-js-poll",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.connect"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": guest_port,
-                    })],
-                },
-            )
-            .expect("connect poll client");
-            let client_socket_id = client["socketId"]
-                .as_str()
-                .expect("client socket id")
-                .to_string();
-
-            let accepted = call_javascript_sync_rpc(
-                &mut sidecar,
-                &poll_vm_id,
-                "proc-js-poll",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("net.server_poll"),
-                    args: vec![json!(server_id.clone()), json!(250)],
-                },
-            )
-            .expect("accept poll client");
-            let server_socket_id = accepted["socketId"]
-                .as_str()
-                .expect("accepted socket id")
-                .to_string();
-
-            let runtime = tokio::runtime::Builder::new_current_thread()
-                .enable_all()
-                .build()
-                .expect("build local runtime for net.poll clamp test");
-            let local = tokio::task::LocalSet::new();
-            let cleanup_connection_id = connection_id.clone();
-            let cleanup_session_id = session_id.clone();
-            let cleanup_poll_vm_id = poll_vm_id.clone();
-            let cleanup_server_socket_id = server_socket_id.clone();
-            let concurrency_elapsed = runtime.block_on(local.run_until(async move {
-                let sidecar = std::rc::Rc::new(std::cell::RefCell::new(sidecar));
-                let dispose_sidecar = std::rc::Rc::clone(&sidecar);
-                let poll_sidecar = std::rc::Rc::clone(&sidecar);
-                let dispose_connection_id = connection_id.clone();
-                let dispose_session_id = session_id.clone();
-                let dispose_vm_id_for_task = dispose_vm_id.clone();
-                let poll_vm_id_for_task = poll_vm_id.clone();
-                let server_socket_id_for_task = server_socket_id.clone();
-
-                let started = std::time::Instant::now();
-                let dispose = tokio::task::spawn_local(async move {
-                    tokio::task::yield_now().await;
-                    let mut sidecar = dispose_sidecar.borrow_mut();
-                    let response = sidecar
-                        .dispatch_blocking(request(
-                            4,
-                            OwnershipScope::vm(
-                                &dispose_connection_id,
-                                &dispose_session_id,
-                                &dispose_vm_id_for_task,
-                            ),
-                            RequestPayload::DisposeVm(DisposeVmRequest {
-                                reason: DisposeReason::Requested,
-                            }),
-                        ))
-                        .expect("dispose second vm while first net.poll waits");
-                    match response.response.payload {
-                        ResponsePayload::VmDisposed(_) => {}
-                        other => panic!("unexpected dispose response payload: {other:?}"),
-                    }
-                });
-                let poll = tokio::task::spawn_local(async move {
-                    let mut sidecar = poll_sidecar.borrow_mut();
-                    let poll_started = std::time::Instant::now();
-                    let response = call_javascript_sync_rpc(
-                        &mut sidecar,
-                        &poll_vm_id_for_task,
-                        "proc-js-poll",
-                        JavascriptSyncRpcRequest {
-                            raw_bytes_args: std::collections::HashMap::new(),
-                            id: 4,
-                            method: String::from("net.poll"),
-                            args: vec![json!(server_socket_id_for_task), json!(u64::MAX)],
-                        },
-                    )
-                    .expect("poll response");
-                    (response, poll_started.elapsed())
-                });
-
-                let (dispose_result, poll_result) = tokio::join!(dispose, poll);
-                dispose_result.expect("join dispose task");
-                let (poll_response, poll_elapsed) = poll_result.expect("join poll task");
-                assert_eq!(poll_response, Value::Null);
-                if run_timing_sensitive_tests() {
-                    assert!(
-                        poll_elapsed <= Duration::from_millis(200),
-                        "net.poll stayed blocked too long: {poll_elapsed:?}"
-                    );
-                }
-                let sidecar = std::rc::Rc::try_unwrap(sidecar)
-                    .expect("recover sidecar after local tasks")
-                    .into_inner();
-                (sidecar, started.elapsed())
-            }));
-            let (mut sidecar, dispose_elapsed) = concurrency_elapsed;
-            if run_timing_sensitive_tests() {
-                assert!(
-                    dispose_elapsed <= Duration::from_millis(200),
-                    "dispose should not wait behind guest net.poll: {dispose_elapsed:?}"
-                );
-            }
-
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &cleanup_poll_vm_id,
-                "proc-js-poll",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 5,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(cleanup_server_socket_id)],
-                },
-            )
-            .expect("destroy accepted socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &cleanup_poll_vm_id,
-                "proc-js-poll",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 6,
-                    method: String::from("net.destroy"),
-                    args: vec![json!(client_socket_id)],
-                },
-            )
-            .expect("destroy client socket");
-            call_javascript_sync_rpc(
-                &mut sidecar,
-                &cleanup_poll_vm_id,
-                "proc-js-poll",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 7,
-                    method: String::from("net.server_close"),
-                    args: vec![json!(server_id)],
-                },
-            )
-            .expect("close poll listener");
-            sidecar
-                .dispose_vm_internal_blocking(
-                    &cleanup_connection_id,
-                    &cleanup_session_id,
-                    &cleanup_poll_vm_id,
-                    DisposeReason::Requested,
-                )
-                .expect("dispose poll vm");
-        }
-        fn javascript_network_bind_policy_restricts_hosts_and_ports() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([
-                    (
-                        String::from(VM_LISTEN_PORT_MIN_METADATA_KEY),
-                        String::from("49152"),
-                    ),
-                    (
-                        String::from(VM_LISTEN_PORT_MAX_METADATA_KEY),
-                        String::from("49160"),
-                    ),
-                ]),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-bind-policy-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-bind-policy");
-
-            let unspecified = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-bind-policy",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "0.0.0.0",
-                        "port": 49152,
-                    })],
-                },
-            )
-            .expect("normalize unspecified TCP listen host onto VM-local loopback");
-            assert_eq!(unspecified["localAddress"], Value::from("0.0.0.0"));
-            assert_eq!(unspecified["localPort"], Value::from(49152));
-
-            let non_loopback = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-bind-policy",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "192.168.1.10",
-                        "port": 49154,
-                    })],
-                },
-            )
-            .expect_err("deny non-loopback TCP listen host");
-            assert!(
-                non_loopback
-                    .to_string()
-                    .contains("must bind to loopback or unspecified addresses"),
-                "{non_loopback}"
-            );
-
-            let privileged = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-bind-policy",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 80,
-                    })],
-                },
-            )
-            .expect_err("deny privileged port");
-            assert!(
-                privileged
-                    .to_string()
-                    .contains("privileged listen port 80 requires"),
-                "{privileged}"
-            );
-
-            let out_of_range = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-bind-policy",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 4,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 40000,
-                    })],
-                },
-            )
-            .expect_err("deny out-of-range port");
-            assert!(
-                out_of_range
-                    .to_string()
-                    .contains("outside the allowed range 49152-49160"),
-                "{out_of_range}"
-            );
-
-            let udp_socket = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-bind-policy",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 5,
-                    method: String::from("dgram.createSocket"),
-                    args: vec![json!({ "type": "udp4" })],
-                },
-            )
-            .expect("create udp socket");
-            let udp_socket_id = udp_socket["socketId"]
-                .as_str()
-                .expect("udp socket id")
-                .to_string();
-
-            let udp_unspecified = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-bind-policy",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 6,
-                    method: String::from("dgram.bind"),
-                    args: vec![
-                        json!(udp_socket_id),
-                        json!({
-                            "address": "0.0.0.0",
-                            "port": 49153,
-                        }),
-                    ],
-                },
-            )
-            .expect("normalize unspecified UDP bind host onto VM-local loopback");
-            assert_eq!(udp_unspecified["localAddress"], Value::from("0.0.0.0"));
-            assert_eq!(udp_unspecified["localPort"], Value::from(49153));
-
-            let success = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-bind-policy",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 7,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 49155,
-                    })],
-                },
-            )
-            .expect("allow loopback listener inside configured range");
-            assert_eq!(success["localAddress"], Value::from("127.0.0.1"));
-            assert_eq!(success["localPort"], Value::from(49155));
-        }
-        fn javascript_network_bind_policy_can_allow_privileged_guest_ports() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm_with_metadata(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-                BTreeMap::from([
-                    (
-                        String::from(VM_LISTEN_PORT_MIN_METADATA_KEY),
-                        String::from("1"),
-                    ),
-                    (
-                        String::from(VM_LISTEN_PORT_MAX_METADATA_KEY),
-                        String::from("128"),
-                    ),
-                    (
-                        String::from(VM_LISTEN_ALLOW_PRIVILEGED_METADATA_KEY),
-                        String::from("true"),
-                    ),
-                ]),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-privileged-listen-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_id, &cwd, "proc-js-privileged");
-
-            let listen = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_id,
-                "proc-js-privileged",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 80,
-                    })],
-                },
-            )
-            .expect("allow privileged guest port");
-            assert_eq!(listen["localAddress"], Value::from("127.0.0.1"));
-            assert_eq!(listen["localPort"], Value::from(80));
-        }
-        fn javascript_network_listeners_are_isolated_per_vm_even_with_same_guest_port() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_a = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm a");
-            let vm_b = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm b");
-            let cwd_a = temp_dir("secure-exec-sidecar-js-net-isolation-a");
-            let cwd_b = temp_dir("secure-exec-sidecar-js-net-isolation-b");
-            write_fixture(&cwd_a.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            write_fixture(&cwd_b.join("entry.mjs"), "setInterval(() => {}, 1000);");
-            start_fake_javascript_process(&mut sidecar, &vm_a, &cwd_a, "proc-a");
-            start_fake_javascript_process(&mut sidecar, &vm_b, &cwd_b, "proc-b");
-
-            let listen_a = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_a,
-                "proc-a",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 43111,
-                    })],
-                },
-            )
-            .expect("listen on vm a");
-            let listen_b = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_b,
-                "proc-b",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 1,
-                    method: String::from("net.listen"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 43111,
-                    })],
-                },
-            )
-            .expect("listen on vm b");
-            assert_eq!(listen_a["localPort"], Value::from(43111));
-            assert_eq!(listen_b["localPort"], Value::from(43111));
-
-            let connect_a = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_a,
-                "proc-a",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.connect"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 43111,
-                    })],
-                },
-            )
-            .expect("connect within vm a");
-            let connect_b = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_b,
-                "proc-b",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 2,
-                    method: String::from("net.connect"),
-                    args: vec![json!({
-                        "host": "127.0.0.1",
-                        "port": 43111,
-                    })],
-                },
-            )
-            .expect("connect within vm b");
-            assert_eq!(connect_a["remotePort"], Value::from(43111));
-            assert_eq!(connect_b["remotePort"], Value::from(43111));
-
-            let server_id_a = listen_a["serverId"]
-                .as_str()
-                .expect("server id a")
-                .to_string();
-            let server_id_b = listen_b["serverId"]
-                .as_str()
-                .expect("server id b")
-                .to_string();
-            let accepted_a = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_a,
-                "proc-a",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("net.server_poll"),
-                    args: vec![json!(server_id_a), json!(250)],
-                },
-            )
-            .expect("accept vm a connection");
-            let accepted_b = call_javascript_sync_rpc(
-                &mut sidecar,
-                &vm_b,
-                "proc-b",
-                JavascriptSyncRpcRequest {
-                    raw_bytes_args: std::collections::HashMap::new(),
-                    id: 3,
-                    method: String::from("net.server_poll"),
-                    args: vec![json!(server_id_b), json!(250)],
-                },
-            )
-            .expect("accept vm b connection");
-            assert_eq!(accepted_a["type"], Value::from("connection"));
-            assert_eq!(accepted_b["type"], Value::from("connection"));
-            assert_eq!(accepted_a["localPort"], Value::from(43111));
-            assert_eq!(accepted_b["localPort"], Value::from(43111));
-
-            let query_a = sidecar
-                .dispatch_blocking(request(
-                    50,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_a),
-                    RequestPayload::FindListener(FindListenerRequest {
-                        host: Some(String::from("127.0.0.1")),
-                        port: Some(43111),
-                        path: None,
-                    }),
-                ))
-                .expect("query vm a listener");
-            let query_b = sidecar
-                .dispatch_blocking(request(
-                    51,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_b),
-                    RequestPayload::FindListener(FindListenerRequest {
-                        host: Some(String::from("127.0.0.1")),
-                        port: Some(43111),
-                        path: None,
-                    }),
-                ))
-                .expect("query vm b listener");
-            match query_a.response.payload {
-                ResponsePayload::ListenerSnapshot(snapshot) => {
-                    let listener = snapshot.listener.expect("vm a listener");
-                    assert_eq!(listener.process_id, "proc-a");
-                    assert_eq!(listener.host.as_deref(), Some("127.0.0.1"));
-                    assert_eq!(listener.port, Some(43111));
-                }
-                other => panic!("unexpected vm a listener response: {other:?}"),
-            }
-            match query_b.response.payload {
-                ResponsePayload::ListenerSnapshot(snapshot) => {
-                    let listener = snapshot.listener.expect("vm b listener");
-                    assert_eq!(listener.process_id, "proc-b");
-                    assert_eq!(listener.host.as_deref(), Some("127.0.0.1"));
-                    assert_eq!(listener.port, Some(43111));
-                }
-                other => panic!("unexpected vm b listener response: {other:?}"),
-            }
-        }
-        fn javascript_net_rpc_listens_and_connects_over_unix_domain_sockets() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-net-unix-cwd");
-            write_fixture(&cwd.join("entry.mjs"), "setInterval(() => {}, 1000);");
-
-            let context =
-                sidecar
-                    .javascript_engine
-                    .create_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.clone(),
-                        bootstrap_module: None,
-                        compile_cache_root: None,
-                    });
-            let execution = sidecar
-            .javascript_engine
-            .start_execution(StartJavascriptExecutionRequest {
-                limits: Default::default(),
-                guest_runtime: Default::default(),
-                vm_id: vm_id.clone(),
-                context_id: context.context_id,
-                argv: vec![String::from("./entry.mjs")],
-                env: BTreeMap::from([(
-                    String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                    String::from(
-                        "[\"assert\",\"buffer\",\"console\",\"crypto\",\"events\",\"fs\",\"net\",\"path\",\"querystring\",\"stream\",\"string_decoder\",\"timers\",\"url\",\"util\",\"zlib\"]",
-                    ),
-                )]),
-                cwd: cwd.clone(),
-                inline_code: None,
-                wasm_module_bytes: None,
-            })
-            .expect("start fake javascript execution");
-
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel javascript process")
-            };
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.active_processes.insert(
-                    String::from("proc-js-unix"),
-                    ActiveProcess::new(
-                        kernel_handle.pid(),
-                        kernel_handle,
-                        GuestRuntimeKind::JavaScript,
-                        ActiveExecution::Javascript(execution),
-                    )
-                    .with_host_cwd(cwd.clone()),
-                );
-            }
-
-            let bridge = sidecar.bridge.clone();
-            let dns = sidecar.vms.get(&vm_id).expect("javascript vm").dns.clone();
-            let limits = ResourceLimits::default();
-            let socket_paths = JavascriptSocketPathContext {
-                sandbox_root: cwd.clone(),
-                mounts: Vec::new(),
-                listen_policy: VmListenPolicy::default(),
-                loopback_exempt_ports: BTreeSet::new(),
-                tcp_loopback_guest_to_host_ports: BTreeMap::new(),
-                http_loopback_targets: BTreeMap::new(),
-                udp_loopback_guest_to_host_ports: BTreeMap::new(),
-                udp_loopback_host_to_guest_ports: BTreeMap::new(),
-                used_tcp_guest_ports: BTreeMap::new(),
-                used_udp_guest_ports: BTreeMap::new(),
-            };
-            let socket_path = "/tmp/secure-exec.sock";
-            let host_socket_path = cwd.join("tmp/secure-exec.sock");
-
-            let listen = {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 1,
-                        method: String::from("net.listen"),
-                        args: vec![json!({
-                            "path": socket_path,
-                            "backlog": 1,
-                        })],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("listen on unix socket")
-            };
-            let server_id = listen["serverId"].as_str().expect("server id").to_string();
-            assert_eq!(listen["path"], Value::String(String::from(socket_path)));
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                assert!(
-                    vm.kernel
-                        .exists(socket_path)
-                        .expect("kernel socket placeholder exists"),
-                    "kernel did not expose unix socket path"
-                );
-            }
-            assert!(host_socket_path.exists(), "host unix socket path missing");
-
-            let listener_lookup = sidecar
-                .dispatch_blocking(request(
-                    2,
-                    OwnershipScope::vm(&connection_id, &session_id, &vm_id),
-                    RequestPayload::FindListener(FindListenerRequest {
-                        host: None,
-                        port: None,
-                        path: Some(String::from(socket_path)),
-                    }),
-                ))
-                .expect("query unix listener");
-            match listener_lookup.response.payload {
-                ResponsePayload::ListenerSnapshot(snapshot) => {
-                    let listener = snapshot.listener.expect("listener snapshot");
-                    assert_eq!(listener.process_id, "proc-js-unix");
-                    assert_eq!(listener.path.as_deref(), Some(socket_path));
-                }
-                other => panic!("unexpected listener response payload: {other:?}"),
-            }
-
-            let connect = {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 3,
-                        method: String::from("net.connect"),
-                        args: vec![json!({
-                            "path": socket_path,
-                        })],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("connect to unix listener")
-            };
-            let client_socket_id = connect["socketId"]
-                .as_str()
-                .expect("client socket id")
-                .to_string();
-            assert_eq!(
-                connect["remotePath"],
-                Value::String(String::from(socket_path))
-            );
-
-            let accepted = {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 4,
-                        method: String::from("net.server_poll"),
-                        args: vec![json!(server_id), json!(250)],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("accept unix socket connection")
-            };
-            let server_socket_id = accepted["socketId"]
-                .as_str()
-                .expect("server socket id")
-                .to_string();
-            assert_eq!(
-                accepted["localPath"],
-                Value::String(String::from(socket_path))
-            );
-
-            {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                let connections = service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 5,
-                        method: String::from("net.server_connections"),
-                        args: vec![json!(server_id)],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("query unix server connections");
-                assert_eq!(connections, json!(1));
-            }
-
-            {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 6,
-                        method: String::from("net.write"),
-                        args: vec![
-                            json!(client_socket_id),
-                            json!({
-                                "__agentOSType": "bytes",
-                                "base64": "cGluZw==",
-                            }),
-                        ],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("write unix client payload");
-            }
-
-            {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 7,
-                        method: String::from("net.shutdown"),
-                        args: vec![json!(client_socket_id)],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("shutdown unix client write half");
-            }
-
-            let server_data = {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 8,
-                        method: String::from("net.poll"),
-                        args: vec![json!(server_socket_id), json!(250)],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("poll unix server socket data")
-            };
-            assert_eq!(
-                server_data["data"]["base64"],
-                Value::String(String::from("cGluZw=="))
-            );
-
-            {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                let server_end = service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 9,
-                        method: String::from("net.poll"),
-                        args: vec![json!(server_socket_id), json!(250)],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("poll unix server socket end");
-                assert_eq!(server_end["type"], Value::String(String::from("end")));
-            }
-
-            {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 10,
-                        method: String::from("net.write"),
-                        args: vec![
-                            json!(server_socket_id),
-                            json!({
-                                "__agentOSType": "bytes",
-                                "base64": "cG9uZw==",
-                            }),
-                        ],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("write unix server payload");
-            }
-
-            {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 11,
-                        method: String::from("net.shutdown"),
-                        args: vec![json!(server_socket_id)],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("shutdown unix server write half");
-            }
-
-            let client_data = {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 12,
-                        method: String::from("net.poll"),
-                        args: vec![json!(client_socket_id), json!(250)],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("poll unix client socket data")
-            };
-            assert_eq!(
-                client_data["data"]["base64"],
-                Value::String(String::from("cG9uZw=="))
-            );
-
-            {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                let client_end = service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 13,
-                        method: String::from("net.poll"),
-                        args: vec![json!(client_socket_id), json!(250)],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("poll unix client socket end");
-                assert_eq!(client_end["type"], Value::String(String::from("end")));
-            }
-
-            for (id, request_id) in [(&client_socket_id, 14_u64), (&server_socket_id, 15_u64)] {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: request_id,
-                        method: String::from("net.destroy"),
-                        args: vec![json!(id)],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("destroy unix socket");
-            }
-
-            {
-                let counts = sidecar
-                    .vms
-                    .get(&vm_id)
-                    .and_then(|vm| vm.active_processes.get("proc-js-unix"))
-                    .expect("unix process")
-                    .network_resource_counts();
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                let process = vm
-                    .active_processes
-                    .get_mut("proc-js-unix")
-                    .expect("unix process");
-                service_javascript_net_sync_rpc(
-                    &bridge,
-                    &vm_id,
-                    &dns,
-                    &socket_paths,
-                    &mut vm.kernel,
-                    process,
-                    &JavascriptSyncRpcRequest {
-                        raw_bytes_args: std::collections::HashMap::new(),
-                        id: 16,
-                        method: String::from("net.server_close"),
-                        args: vec![json!(server_id)],
-                    },
-                    &limits,
-                    counts,
-                )
-                .expect("close unix listener");
-            }
-
-            sidecar
-                .dispose_vm_internal_blocking(
-                    &connection_id,
-                    &session_id,
-                    &vm_id,
-                    DisposeReason::Requested,
-                )
-                .expect("dispose unix vm");
-        }
-        fn javascript_child_process_rpc_spawns_nested_node_processes_inside_vm_kernel() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-child-process-cwd");
-            write_fixture(
-                &cwd.join("child.mjs"),
-                r#"
-import fs from "node:fs";
-
-const note = fs.readFileSync("/rpc/note.txt", "utf8").trim();
-console.log(`${process.argv[2]}:${process.pid}:${process.ppid}:${note}`);
-"#,
-            );
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                r#"
-const { execSync, spawn } = require("node:child_process");
-
-const child = spawn("node", ["./child.mjs", "spawn"], {
-  stdio: ["ignore", "pipe", "pipe"],
-});
-let spawnOutput = "";
-let spawnError = "";
-child.stdout.setEncoding("utf8");
-child.stderr.setEncoding("utf8");
-child.stdout.on("data", (chunk) => {
-  spawnOutput += chunk;
-});
-child.stderr.on("data", (chunk) => {
-  spawnError += chunk;
-});
-await new Promise((resolve, reject) => {
-  child.on("error", reject);
-  child.on("close", (code) => {
-    if (code !== 0) {
-      reject(new Error(`spawn exit ${code}: ${spawnError}`));
-      return;
-    }
-    resolve();
-  });
-});
-
-const execOutput = execSync("node ./child.mjs exec", {
-  encoding: "utf8",
-}).trim();
-
-console.log(JSON.stringify({
-  parentPid: process.pid,
-  childPid: child.pid,
-  spawnOutput: spawnOutput.trim(),
-  execOutput,
-}));
-"#,
-            );
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .write_file("/rpc/note.txt", b"hello from nested child".to_vec())
-                    .expect("seed rpc note");
-                vm.kernel
-                    .write_file(
-                        "/root/child.mjs",
-                        fs::read(cwd.join("child.mjs")).expect("read child fixture"),
-                    )
-                    .expect("seed nested child fixture");
-            }
-
-            let context =
-                sidecar
-                    .javascript_engine
-                    .create_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.clone(),
-                        bootstrap_module: None,
-                        compile_cache_root: None,
-                    });
-            let execution = sidecar
-            .javascript_engine
-            .start_execution(StartJavascriptExecutionRequest {
-                limits: Default::default(),
-                guest_runtime: Default::default(),
-                vm_id: vm_id.clone(),
-                context_id: context.context_id,
-                argv: vec![String::from("./entry.mjs")],
-                env: BTreeMap::from([(
-                    String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                    String::from(
-                        "[\"assert\",\"buffer\",\"console\",\"child_process\",\"crypto\",\"events\",\"fs\",\"path\",\"querystring\",\"stream\",\"string_decoder\",\"timers\",\"url\",\"util\",\"zlib\"]",
-                    ),
-                )]),
-                cwd: cwd.clone(),
-                inline_code: None,
-                wasm_module_bytes: None,
-            })
-            .expect("start fake javascript execution");
-
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel javascript process")
-            };
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.active_processes.insert(
-                    String::from("proc-js-child"),
-                    ActiveProcess::new(
-                        kernel_handle.pid(),
-                        kernel_handle,
-                        GuestRuntimeKind::JavaScript,
-                        ActiveExecution::Javascript(execution),
-                    )
-                    .with_host_cwd(cwd.clone()),
-                );
-            }
-
-            let mut stdout = Vec::new();
-            let mut stderr = Vec::new();
-            let mut exit_code = None;
-            for _ in 0..96 {
-                let next_event = {
-                    let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                    vm.active_processes
-                        .get_mut("proc-js-child")
-                        .and_then(|process| {
-                            process
-                                .execution
-                                .poll_event_blocking(Duration::from_secs(5))
-                                .expect("poll javascript child_process event")
-                        })
-                };
-                let Some(event) = next_event else {
-                    if exit_code.is_some() {
-                        break;
-                    }
-                    continue;
-                };
-
-                match &event {
-                    ActiveExecutionEvent::Stdout(chunk) => {
-                        append_process_stream_chunk(&mut stdout, chunk, "proc-js-child", "stdout");
-                    }
-                    ActiveExecutionEvent::Stderr(chunk) => {
-                        append_process_stream_chunk(&mut stderr, chunk, "proc-js-child", "stderr");
-                    }
-                    ActiveExecutionEvent::Exited(code) => exit_code = Some(*code),
-                    ActiveExecutionEvent::JavascriptSyncRpcRequest(_)
-                    | ActiveExecutionEvent::PythonVfsRpcRequest(_)
-                    | ActiveExecutionEvent::SignalState { .. } => {}
-                }
-
-                sidecar
-                    .handle_execution_event(&vm_id, "proc-js-child", event)
-                    .expect("handle javascript child_process event");
-            }
-
-            let stdout = process_stream_to_string(&stdout);
-            let stderr = process_stream_to_string(&stderr);
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            let parsed: Value =
-                serde_json::from_str(stdout.trim()).expect("parse child_process JSON");
-            let parent_pid = parsed["parentPid"].as_u64().expect("parent pid") as u32;
-            let child_pid = parsed["childPid"].as_u64().expect("child pid") as u32;
-            let spawn_parts = parsed["spawnOutput"]
-                .as_str()
-                .expect("spawn output")
-                .split(':')
-                .map(str::to_owned)
-                .collect::<Vec<_>>();
-            let exec_parts = parsed["execOutput"]
-                .as_str()
-                .expect("exec output")
-                .split(':')
-                .map(str::to_owned)
-                .collect::<Vec<_>>();
-
-            assert_eq!(spawn_parts[0], "spawn");
-            assert_eq!(spawn_parts[1].parse::<u32>().expect("spawn pid"), child_pid);
-            assert_eq!(
-                spawn_parts[2].parse::<u32>().expect("spawn ppid"),
-                parent_pid
-            );
-            assert_eq!(spawn_parts[3], "hello from nested child");
-            assert_eq!(exec_parts[0], "exec");
-            assert_eq!(exec_parts[2].parse::<u32>().expect("exec ppid"), parent_pid);
-            assert_eq!(exec_parts[3], "hello from nested child");
-        }
-        fn javascript_child_process_rpc_preserves_nested_sigchld_registrations() {
-            assert_node_available();
-
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-            let cwd = temp_dir("secure-exec-sidecar-js-nested-sigchld-cwd");
-            write_fixture(
-                &cwd.join("leaf.mjs"),
-                [
-                    "await new Promise((resolve) => setTimeout(resolve, 200));",
-                    "console.log('leaf-exit');",
-                ]
-                .join("\n"),
-            );
-            write_fixture(
-                &cwd.join("child.mjs"),
-                [
-                    "import { spawn } from 'node:child_process';",
-                    "let sigchldCount = 0;",
-                    "process.on('SIGCHLD', () => {",
-                    "  sigchldCount += 1;",
-                    "  console.log(`nested-sigchld:${sigchldCount}`);",
-                    "});",
-                    "console.log('nested-sigchld-registered');",
-                    "await new Promise((resolve) => setTimeout(resolve, 75));",
-                    "const child = spawn('node', ['./leaf.mjs'], { stdio: ['ignore', 'ignore', 'ignore'] });",
-                    "await new Promise((resolve, reject) => {",
-                    "  child.on('error', reject);",
-                    "  child.on('close', (code, signal) => {",
-                    "    if (code !== 0 || signal !== null) {",
-                    "      reject(new Error(`leaf exit ${code} signal ${signal}`));",
-                    "      return;",
-                    "    }",
-                    "    resolve();",
-                    "  });",
-                    "});",
-                    "const deadline = Date.now() + 2000;",
-                    "while (sigchldCount === 0 && Date.now() < deadline) {",
-                    "  await new Promise((resolve) => setTimeout(resolve, 10));",
-                    "}",
-                    "if (sigchldCount === 0) {",
-                    "  throw new Error('nested SIGCHLD was not delivered');",
-                    "}",
-                    "console.log(`nested-sigchld-final:${sigchldCount}`);",
-                ]
-                .join("\n"),
-            );
-            write_fixture(
-                &cwd.join("entry.mjs"),
-                [
-                    "import { spawn } from 'node:child_process';",
-                    "const child = spawn('node', ['./child.mjs'], { stdio: ['ignore', 'pipe', 'pipe'] });",
-                    "let childStdout = '';",
-                    "let childStderr = '';",
-                    "child.stdout.setEncoding('utf8');",
-                    "child.stdout.on('data', (chunk) => {",
-                    "  childStdout += chunk;",
-                    "});",
-                    "child.stderr.setEncoding('utf8');",
-                    "child.stderr.on('data', (chunk) => {",
-                    "  childStderr += chunk;",
-                    "});",
-                    "const result = await new Promise((resolve, reject) => {",
-                    "  child.on('error', reject);",
-                    "  child.on('close', (code, signal) => resolve({ code, signal }));",
-                    "});",
-                    "console.log(JSON.stringify({",
-                    "  code: result.code,",
-                    "  signal: result.signal,",
-                    "  stdout: childStdout.trim(),",
-                    "  stderr: childStderr.trim(),",
-                    "}));",
-                    "if (result.code !== 0 || result.signal !== null) {",
-                    "  process.exitCode = result.code ?? 1;",
-                    "}",
-                ]
-                .join("\n"),
-            );
-
-            let context =
-                sidecar
-                    .javascript_engine
-                    .create_context(CreateJavascriptContextRequest {
-                        vm_id: vm_id.clone(),
-                        bootstrap_module: None,
-                        compile_cache_root: None,
-                    });
-            let execution = sidecar
-                .javascript_engine
-                .start_execution(StartJavascriptExecutionRequest {
-                    limits: Default::default(),
-                    guest_runtime: Default::default(),
-                    vm_id: vm_id.clone(),
-                    context_id: context.context_id,
-                    argv: vec![String::from("./entry.mjs")],
-                    env: BTreeMap::from([(
-                        String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                        String::from(
-                            "[\"assert\",\"buffer\",\"console\",\"child_process\",\"crypto\",\"events\",\"fs\",\"path\",\"querystring\",\"stream\",\"string_decoder\",\"timers\",\"url\",\"util\",\"zlib\"]",
-                        ),
-                    )]),
-                    cwd: cwd.clone(),
-                    inline_code: None,
-                    wasm_module_bytes: None,
-                })
-                .expect("start nested SIGCHLD javascript execution");
-
-            let kernel_handle = {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.kernel
-                    .write_file(
-                        "/root/child.mjs",
-                        fs::read(cwd.join("child.mjs")).expect("read child fixture"),
-                    )
-                    .expect("seed nested child fixture");
-                vm.kernel
-                    .write_file(
-                        "/root/leaf.mjs",
-                        fs::read(cwd.join("leaf.mjs")).expect("read leaf fixture"),
-                    )
-                    .expect("seed nested leaf fixture");
-                vm.kernel
-                    .spawn_process(
-                        JAVASCRIPT_COMMAND,
-                        vec![String::from("./entry.mjs")],
-                        SpawnOptions {
-                            requester_driver: Some(String::from(EXECUTION_DRIVER_NAME)),
-                            cwd: Some(String::from("/")),
-                            ..SpawnOptions::default()
-                        },
-                    )
-                    .expect("spawn kernel javascript process")
-            };
-
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.active_processes.insert(
-                    String::from("proc-js-nested-sigchld"),
-                    ActiveProcess::new(
-                        kernel_handle.pid(),
-                        kernel_handle,
-                        GuestRuntimeKind::JavaScript,
-                        ActiveExecution::Javascript(execution),
-                    )
-                    .with_host_cwd(cwd.clone()),
-                );
-            }
-
-            let mut stdout = Vec::new();
-            let mut stderr = Vec::new();
-            let mut exit_code = None;
-            for _ in 0..128 {
-                let next_event = {
-                    let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                    vm.active_processes
-                        .get_mut("proc-js-nested-sigchld")
-                        .and_then(|process| {
-                            process
-                                .execution
-                                .poll_event_blocking(Duration::from_secs(5))
-                                .expect("poll nested SIGCHLD event")
-                        })
-                };
-                let Some(event) = next_event else {
-                    if exit_code.is_some() {
-                        break;
-                    }
-                    continue;
-                };
-
-                match &event {
-                    ActiveExecutionEvent::Stdout(chunk) => {
-                        append_process_stream_chunk(
-                            &mut stdout,
-                            chunk,
-                            "proc-js-nested-sigchld",
-                            "stdout",
-                        );
-                    }
-                    ActiveExecutionEvent::Stderr(chunk) => {
-                        append_process_stream_chunk(
-                            &mut stderr,
-                            chunk,
-                            "proc-js-nested-sigchld",
-                            "stderr",
-                        );
-                    }
-                    ActiveExecutionEvent::Exited(code) => exit_code = Some(*code),
-                    ActiveExecutionEvent::JavascriptSyncRpcRequest(_)
-                    | ActiveExecutionEvent::PythonVfsRpcRequest(_)
-                    | ActiveExecutionEvent::SignalState { .. } => {}
-                }
-
-                sidecar
-                    .handle_execution_event(&vm_id, "proc-js-nested-sigchld", event)
-                    .expect("handle nested SIGCHLD event");
-            }
-
-            let stdout = process_stream_to_string(&stdout);
-            let stderr = process_stream_to_string(&stderr);
-            assert_eq!(exit_code, Some(0), "stderr: {stderr}");
-            let parsed: Value =
-                serde_json::from_str(stdout.trim()).expect("parse nested SIGCHLD JSON");
-            assert_eq!(parsed["code"].as_i64(), Some(0), "stdout: {stdout}");
-            assert!(parsed["signal"].is_null(), "stdout: {stdout}");
-
-            let nested_stdout = parsed["stdout"].as_str().expect("nested child stdout");
-            assert!(
-                nested_stdout.contains("nested-sigchld-registered"),
-                "missing registration output: {nested_stdout}"
-            );
-            assert!(
-                nested_stdout.contains("nested-sigchld:1"),
-                "missing nested SIGCHLD delivery: {nested_stdout}"
-            );
-            assert!(
-                nested_stdout.contains("nested-sigchld-final:1"),
-                "missing nested SIGCHLD final count: {nested_stdout}"
-            );
-            assert_eq!(
-                parsed["stderr"].as_str(),
-                Some(""),
-                "nested child stderr should stay empty"
-            );
-        }
-        fn javascript_child_process_poll_reports_echild_when_child_disappears_after_drain() {
-            let mut sidecar = create_test_sidecar();
-            let (connection_id, session_id) =
-                authenticate_and_open_session(&mut sidecar).expect("authenticate and open session");
-            let vm_id = create_vm(
-                &mut sidecar,
-                &connection_id,
-                &session_id,
-                PermissionsPolicy::allow_all(),
-            )
-            .expect("create vm");
-
-            let kernel_handle = create_kernel_process_handle_for_tests();
-            {
-                let vm = sidecar.vms.get_mut(&vm_id).expect("javascript vm");
-                vm.active_processes.insert(
-                    String::from("proc-js-child-gone"),
-                    ActiveProcess::new(
-                        kernel_handle.pid(),
-                        kernel_handle,
-                        GuestRuntimeKind::JavaScript,
-                        ActiveExecution::Tool(ToolExecution::default()),
-                    ),
-                );
-            }
-
-            sidecar
-                .pending_process_events
-                .push_back(ProcessEventEnvelope {
-                    connection_id: connection_id.clone(),
-                    session_id: session_id.clone(),
-                    vm_id: vm_id.clone(),
-                    process_id: String::from("proc-js-child-gone/ghost-child"),
-                    event: ActiveExecutionEvent::Stdout(b"queued-but-undeliverable".to_vec()),
-                });
-
-            let error = sidecar
-                .poll_javascript_child_process(&vm_id, "proc-js-child-gone", "ghost-child", 0)
-                .expect_err("missing child should surface ECHILD");
-            match error {
-                SidecarError::Execution(message) => {
-                    assert!(
-                        message.starts_with("ECHILD:"),
-                        "expected ECHILD code, got {message}"
-                    );
-                    assert!(
-                        message.contains("proc-js-child-gone/ghost-child"),
-                        "expected child label in error, got {message}"
-                    );
-                }
-                other => panic!("expected execution error, got {other}"),
-            }
-
-            let queued = sidecar
-                .pending_process_events
-                .front()
-                .expect("queued event should remain deferred");
-            assert_eq!(queued.process_id, "proc-js-child-gone/ghost-child");
-            assert_eq!(sidecar.pending_process_events.len(), 1);
-        }
-        fn javascript_child_process_internal_bootstrap_env_is_allowlisted() {
-            let filtered =
-                sanitize_javascript_child_process_internal_bootstrap_env(&BTreeMap::from([
-                    (
-                        String::from("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                        String::from("[\"fs\"]"),
-                    ),
-                    (
-                        String::from("AGENTOS_GUEST_PATH_MAPPINGS"),
-                        String::from("[]"),
-                    ),
-                    (
-                        String::from("AGENTOS_VIRTUAL_PROCESS_UID"),
-                        String::from("0"),
-                    ),
-                    (
-                        String::from("AGENTOS_VIRTUAL_PROCESS_VERSION"),
-                        String::from("v24.0.0"),
-                    ),
-                    (
-                        String::from("AGENTOS_VIRTUAL_OS_HOSTNAME"),
-                        String::from("secure-exec-test"),
-                    ),
-                    (
-                        String::from("AGENTOS_PARENT_NODE_ALLOW_CHILD_PROCESS"),
-                        String::from("1"),
-                    ),
-                    (
-                        String::from("VISIBLE_MARKER"),
-                        String::from("child-visible"),
-                    ),
-                ]));
-
-            assert_eq!(
-                filtered.get("AGENTOS_ALLOWED_NODE_BUILTINS"),
-                Some(&String::from("[\"fs\"]"))
-            );
-            assert_eq!(
-                filtered.get("AGENTOS_GUEST_PATH_MAPPINGS"),
-                Some(&String::from("[]"))
-            );
-            assert_eq!(
-                filtered.get("AGENTOS_VIRTUAL_PROCESS_UID"),
-                Some(&String::from("0"))
-            );
-            assert_eq!(
-                filtered.get("AGENTOS_VIRTUAL_PROCESS_VERSION"),
-                Some(&String::from("v24.0.0"))
-            );
-            assert_eq!(
-                filtered.get("AGENTOS_VIRTUAL_OS_HOSTNAME"),
-                Some(&String::from("secure-exec-test"))
-            );
-            assert!(!filtered.contains_key("AGENTOS_PARENT_NODE_ALLOW_CHILD_PROCESS"));
-            assert!(!filtered.contains_key("VISIBLE_MARKER"));
-        }
-        fn run_service_suite() {
-            // Multiple libtest cases in this sidecar integration binary still
-            // trip teardown/init crashes around V8-backed execution paths, so
-            // keep the broad coverage in one top-level suite.
-            kernel_socket_queries_ignore_stale_sidecar_guest_addresses();
-            find_listener_rejects_without_network_inspect_permission();
-            find_listener_returns_listener_with_network_inspect_permission();
-            find_bound_udp_rejects_without_network_inspect_permission();
-            find_bound_udp_returns_socket_with_network_inspect_permission();
-            get_process_snapshot_rejects_without_process_inspect_permission();
-            get_process_snapshot_returns_processes_with_process_inspect_permission();
-            get_resource_snapshot_rejects_without_process_inspect_permission();
-            get_resource_snapshot_returns_kernel_and_queue_counts_with_process_inspect_permission();
-            vm_network_resource_counts_ignore_duplicate_sidecar_kernel_entries();
-            loopback_tls_transport_survives_concurrent_handshakes_without_panicking();
-            loopback_tls_endpoint_read_survives_competing_drain_and_peer_drop();
-            javascript_net_socket_wait_connect_reports_tcp_socket_info();
-            javascript_net_socket_read_and_socket_options_work_for_tcp_sockets();
-            javascript_net_cross_exec_loopback_routes_through_kernel_socket_table();
-            javascript_net_upgrade_socket_aliases_use_tcp_socket_state();
-            javascript_dgram_address_and_buffer_size_sync_rpcs_work();
-            javascript_tls_client_upgrade_query_and_cipher_list_work();
-            javascript_tls_server_client_hello_and_server_upgrade_work();
-            javascript_net_server_accept_returns_timeout_then_pending_connection();
-            javascript_kernel_stdin_reads_buffered_input_and_reports_timeout_and_eof();
-            javascript_sync_rpc_pty_set_raw_mode_toggles_kernel_tty_discipline();
-            dispose_vm_removes_per_vm_javascript_import_cache_directory();
-            execution_dispose_vm_race_skips_stale_process_events_without_panicking();
-            execution_javascript_sync_rpc_handler_ignores_stale_vm_and_process_races();
-            execution_poll_event_smoke_skips_queued_stale_process_envelopes_after_dispose();
-            execution_poll_event_concurrent_dispose_logs_stale_process_event();
-            filesystem_requests_ignore_stale_vm_and_process_races();
-            get_zombie_timer_count_reports_kernel_state_before_and_after_waitpid();
-            parse_signal_accepts_full_guest_signal_table();
-            runtime_child_liveness_only_tracks_owned_children();
-            authenticated_connection_id_returns_error_for_unexpected_response();
-            opened_session_id_returns_error_for_unexpected_response();
-            created_vm_id_returns_error_for_unexpected_response();
-            configure_vm_instantiates_memory_mounts_through_the_plugin_registry();
-            configure_vm_applies_read_only_mount_wrappers();
-            configure_vm_instantiates_host_dir_mounts_through_the_plugin_registry();
-            configure_vm_passes_resource_read_limits_to_host_dir_mounts();
-            configure_vm_passes_resource_read_limits_to_module_access_mounts();
-            configure_vm_rejects_module_access_root_symlink_to_non_node_modules();
-            configure_vm_js_bridge_mount_dispatches_filesystem_calls_via_sidecar_requests();
-            configure_vm_js_bridge_mount_rejects_oversized_read_payloads();
-            configure_vm_js_bridge_mount_rejects_pread_payloads_above_requested_length();
-            configure_vm_js_bridge_mount_maps_callback_errors_to_errno_codes();
-            configure_vm_instantiates_sandbox_agent_mounts_through_the_plugin_registry();
-            configure_vm_instantiates_s3_mounts_through_the_plugin_registry();
-            configure_vm_instantiates_object_s3_mounts_through_the_plugin_registry();
-            configure_vm_instantiates_chunked_local_mounts_through_the_plugin_registry();
-            bridge_permissions_map_symlink_operations_to_symlink_access();
-            vm_limits_config_reads_filesystem_limits();
-            create_vm_applies_filesystem_permission_descriptors_to_kernel_access();
-            create_vm_without_permissions_defaults_to_static_deny_all();
-            configure_vm_rollback_restore_failure_falls_back_to_static_deny_all();
-            toolkit_registration_rollback_restore_failure_keeps_registry_consistent();
-            create_vm_rejects_permission_rules_with_empty_operations();
-            configure_vm_rejects_permission_rules_with_empty_paths_or_patterns();
-            configure_vm_mounts_bypass_guest_fs_write_policy();
-            guest_filesystem_link_and_truncate_preserve_hard_link_semantics();
-            configure_vm_sensitive_mounts_bypass_guest_fs_mount_sensitive_policy();
-            guest_mount_request_default_deny_rejects_without_changing_operator_mounts();
-            scoped_host_filesystem_unscoped_target_requires_exact_guest_root_prefix();
-            scoped_host_filesystem_realpath_preserves_paths_outside_guest_root();
-            host_filesystem_realpath_fails_closed_on_circular_symlinks();
-            configure_vm_host_dir_plugin_fails_closed_for_escape_symlinks();
-            execute_starts_python_runtime_instead_of_rejecting_it();
-            command_resolution_executes_wasm_command_from_sidecar_path();
-            wasm_command_timeout_is_enforced_by_sidecar_poll_path();
-            wasm_fd_write_sync_rpc_keeps_stdout_isolated_per_vm();
-            wasm_path_open_read_goes_through_kernel_filesystem_permissions();
-            wasm_path_open_write_goes_through_kernel_filesystem_permissions();
-            wasm_fd_write_sync_rpc_routes_stdout_into_kernel_pty();
-            javascript_child_process_searches_path_for_mounted_wasm_commands();
-            javascript_child_process_shell_mode_without_guest_sh_fails_loudly();
-            javascript_child_process_spawns_path_resolved_tool_commands();
-            javascript_child_process_resolves_path_resolved_tool_commands_as_tools();
-            javascript_child_process_spawns_internal_tool_command_paths();
-            javascript_child_process_resolves_internal_tool_command_paths_as_tools();
-            tools_register_host_callbacks_rejects_duplicate_names_without_replacing_existing_toolkit();
-            tools_register_host_callbacks_rejects_registry_overflow_without_mutating_vm();
-            tools_register_host_callbacks_rejects_total_tool_overflow_without_mutating_vm();
-            tools_javascript_child_process_denies_host_callback_without_permission();
-            tools_javascript_child_process_invokes_tool_with_matching_permission();
-            tools_javascript_child_process_rejects_invalid_json_file_input_before_dispatch();
-            tools_javascript_child_process_accepts_valid_json_input();
-            command_resolution_executes_javascript_path_command_with_sidecar_mappings();
-            command_resolution_executes_node_eval_command();
-            command_resolution_rejects_unknown_command();
-            python_vfs_rpc_requests_proxy_into_the_vm_kernel_filesystem();
-            javascript_sync_rpc_requests_proxy_into_the_vm_kernel_filesystem();
-            javascript_fs_promises_hot_metadata_ops_use_sync_semantics();
-            python_vfs_rpc_paths_resolve_textually_and_defer_to_kernel_confinement();
-            javascript_fs_sync_rpc_resolves_proc_self_against_the_kernel_process();
-            javascript_fd_and_stream_rpc_requests_proxy_into_the_vm_kernel_filesystem();
-            javascript_mapped_tmp_open_wx_uses_exclusive_create_once();
-            wasm_shell_external_stdout_redirect_writes_file();
-            wasm_shell_external_append_redirect_creates_and_concatenates();
-            wasm_shell_external_stderr_redirect_writes_file();
-            wasm_shell_builtin_and_external_redirects_match();
-            javascript_imports_guest_written_modules_after_miss_work();
-            javascript_fs_promises_batch_requests_before_waiting_on_sidecar_responses();
-            javascript_crypto_basic_sync_rpcs_round_trip_through_sidecar();
-            javascript_crypto_advanced_sync_rpcs_round_trip_through_sidecar();
-            javascript_sqlite_sync_rpcs_round_trip_and_persist_vm_files();
-            javascript_sqlite_builtin_round_trips_through_sidecar_sync_rpc();
-            javascript_net_rpc_connects_over_vm_loopback();
-            javascript_dgram_rpc_sends_and_receives_vm_loopback_packets();
-            javascript_dns_rpc_resolves_localhost();
-            javascript_network_ssrf_protection_blocks_private_dns_and_unowned_loopback_targets();
-            javascript_dns_rpc_honors_vm_dns_overrides_and_net_connect_uses_sidecar_dns();
-            javascript_network_dns_resolve_supports_standard_rrtypes();
-            javascript_network_permission_callbacks_fire_for_dns_lookup_connect_and_listen();
-            javascript_network_permission_denials_surface_eacces_to_guest_code();
-            javascript_tls_rpc_connects_and_serves_over_guest_net();
-            javascript_http_listen_and_close_registers_server();
-            javascript_http_respond_records_pending_response();
-            javascript_http_respond_rejects_oversized_pending_response();
-            vm_fetch_response_frame_limit_counts_protocol_overhead();
-            request_frame_limit_counts_generated_wire_overhead();
-            javascript_http2_listen_connect_request_and_respond_round_trip();
-            javascript_http2_guest_h2c_round_trip_does_not_deadlock();
-            javascript_http2_request_handler_round_trip_runs_twice_in_one_vm();
-            javascript_http2_settings_pause_push_and_file_response_surfaces_work();
-            javascript_http2_secure_listen_connect_request_and_respond_round_trip();
-            javascript_http2_server_respond_records_pending_response();
-            javascript_http_rpc_requests_gets_and_serves_over_guest_net();
-            javascript_http_external_get_reaches_host_listener();
-            javascript_fetch_posts_to_guest_loopback_http_server();
-            javascript_fetch_reaches_http_server_in_parallel_guest_process();
-            javascript_net_rpc_listens_accepts_connections_and_reports_listener_state();
-            javascript_net_rpc_reports_connection_counts_and_enforces_backlog();
-            javascript_network_bind_policy_restricts_hosts_and_ports();
-            javascript_network_bind_policy_can_allow_privileged_guest_ports();
-            javascript_network_listeners_are_isolated_per_vm_even_with_same_guest_port();
-            javascript_net_rpc_listens_and_connects_over_unix_domain_sockets();
-            javascript_child_process_rpc_spawns_nested_node_processes_inside_vm_kernel();
-            javascript_child_process_rpc_preserves_nested_sigchld_registrations();
-            process_event_sender_is_bounded();
-            pending_process_events_are_bounded();
-            process_event_receiver_overflow_preserves_queued_event();
-            tool_execution_event_overflow_is_reported();
-            descendant_transfer_overflow_preserves_global_queue();
-            exit_trailing_requeue_preserves_exit_when_queue_is_full();
-            javascript_child_process_poll_reports_echild_when_child_disappears_after_drain();
-            javascript_child_process_internal_bootstrap_env_is_allowlisted();
-            javascript_net_poll_clamps_guest_wait_to_sidecar_ceiling();
-            javascript_net_poll_timeout_does_not_block_concurrent_vm_dispose();
-        }
-
-        #[test]
-        fn service_sidecar_response_completion_is_bounded() {
-            completed_sidecar_responses_evict_oldest_beyond_cap();
-            taking_sidecar_responses_releases_completion_gauge();
-        }
-
-        #[test]
-        fn service_toolkit_registry_is_bounded() {
-            tools_register_host_callbacks_rejects_registry_overflow_without_mutating_vm();
-            tools_register_host_callbacks_rejects_total_tool_overflow_without_mutating_vm();
-        }
-
-        #[test]
-        fn service_process_output_collectors_are_bounded() {
-            let mut stream = Vec::new();
-            append_process_stream_chunk(&mut stream, &[b'a'; 16], "proc-capture-limit", "stdout");
-            assert_eq!(stream.len(), 16);
-
-            assert!(
-                !process_stream_chunk_fits(MAX_SERVICE_PROCESS_STREAM_BYTES, 1),
-                "oversized process output should fail the test harness"
-            );
-        }
-
-        #[test]
-        fn service_process_event_queues_are_bounded() {
-            process_event_sender_is_bounded();
-            pending_process_events_are_bounded();
-            process_event_receiver_overflow_preserves_queued_event();
-            tool_execution_event_overflow_is_reported();
-            descendant_transfer_overflow_preserves_global_queue();
-            exit_trailing_requeue_preserves_exit_when_queue_is_full();
-        }
-
-        #[test]
-        fn service_state_handle_tables_are_bounded() {
-            sqlite_database_handles_are_bounded();
-            sqlite_statement_handles_are_bounded();
-        }
-
-        #[test]
-        fn aad_javascript_network_dns_javascript_net_poll_suite() {
-            run_service_suite();
-        }
-
-        #[test]
-        fn javascript_net_loopback_socket_churn_releases_kernel_slots_regression() {
-            run_isolated_service_test("net-loopback-socket-churn");
-        }
-
-        #[test]
-        fn javascript_net_loopback_wakes_reader_parked_before_write_regression() {
-            run_isolated_service_test("net-loopback-parked-reader-wake");
-        }
-
-        #[test]
-        fn javascript_net_loopback_reads_back_to_back_and_after_partial_drain_regression() {
-            run_isolated_service_test("net-loopback-edge-wake");
-        }
-
-        #[test]
-        fn javascript_net_unix_domain_echo_uses_reader_events_regression() {
-            run_isolated_service_test("net-unix-domain-reader-events");
-        }
-
-        #[test]
-        fn javascript_dgram_rpc_sends_and_receives_vm_loopback_packets_regression() {
-            run_isolated_service_test("dgram-loopback-events");
-        }
-
-        #[test]
-        fn javascript_http_external_get_reaches_host_listener_regression() {
-            javascript_http_external_get_reaches_host_listener();
-        }
-
-        #[test]
-        fn aaa_crypto_handle_tables_are_bounded() {
-            run_isolated_service_test("crypto-handle-tables");
-        }
-
-        #[test]
-        fn aac_http2_respond_with_file_reads_vm_filesystem() {
-            run_isolated_service_test("http2-file-response");
-        }
-
-        #[test]
-        fn aac_http2_guest_h2c_round_trip_does_not_deadlock() {
-            run_isolated_service_test("http2-guest-h2c");
-        }
-
-        #[test]
-        fn aac_http2_request_handler_round_trip_runs_twice_in_one_vm() {
-            run_isolated_service_test("http2-request-handler-twice");
-        }
-
-        #[test]
-        fn aac_javascript_imports_guest_written_modules_after_miss() {
-            run_isolated_service_test("javascript-import-fresh");
-        }
-
-        #[test]
-        fn javascript_fs_promises_hot_metadata_ops_use_sync_semantics_regression() {
-            run_isolated_service_test("javascript-fs-promises-hot-metadata");
-        }
-
-        #[test]
-        fn wasm_shell_external_stdout_redirect_writes_file_regression() {
-            run_isolated_service_test("wasm-shell-external-stdout-redirect");
-        }
-
-        #[test]
-        fn wasm_shell_external_append_redirect_creates_and_concatenates_regression() {
-            run_isolated_service_test("wasm-shell-external-append-redirect");
-        }
-
-        #[test]
-        fn wasm_shell_external_stderr_redirect_writes_file_regression() {
-            run_isolated_service_test("wasm-shell-external-stderr-redirect");
-        }
-
-        #[test]
-        fn wasm_shell_builtin_and_external_redirects_match_regression() {
-            run_isolated_service_test("wasm-shell-builtin-external-redirect-parity");
-        }
-
-        #[test]
-        fn javascript_mapped_shadow_readdir_sees_wasm_created_directory_regression() {
-            run_isolated_service_test("mapped-shadow-readdir-wasm-directory");
-        }
-
-        #[test]
-        fn javascript_mapped_shadow_readdir_merges_wasm_created_children_regression() {
-            run_isolated_service_test("mapped-shadow-readdir-wasm-children");
-        }
-
-        #[test]
-        fn javascript_mapped_shadow_readdir_unions_shadow_and_kernel_children_regression() {
-            run_isolated_service_test("mapped-shadow-readdir-shadow-kernel-union");
-        }
-
-        #[test]
-        fn javascript_mapped_shadow_readdir_sees_same_process_shadow_directory_regression() {
-            run_isolated_service_test("mapped-shadow-readdir-same-process-shadow");
-        }
-
-        #[test]
-        fn javascript_mapped_unlink_kernel_backed_no_resurrect_regression() {
-            run_isolated_service_test("mapped-unlink-kernel-backed-no-resurrect");
-        }
-
-        #[test]
-        fn javascript_readdir_raw_payload_preserves_dirent_semantics_regression() {
-            run_isolated_service_test("javascript-readdir-raw-dirent-semantics");
-        }
-
-        #[test]
-        fn javascript_writev_raw_payload_preserves_stream_copy_order_regression() {
-            run_isolated_service_test("javascript-writev-stream-copy-order");
-        }
-
-        #[test]
-        fn aab_wasm_command_timeout_is_enforced_by_sidecar_poll_path() {
-            run_isolated_service_test("wasm-command-timeout");
-        }
-
-        #[test]
-        fn aab_wasm_path_open_read_uses_kernel_filesystem_permissions() {
-            run_isolated_service_test("wasm-fs-permissions");
-        }
-
-        #[test]
-        fn aab_wasm_path_open_write_uses_kernel_filesystem_permissions() {
-            run_isolated_service_test("wasm-fs-write-permissions");
-        }
-
-        #[test]
-        fn aad_http_socket_backed_server_rejects_oversized_incomplete_headers() {
-            run_isolated_service_test("http-oversized-incomplete-header");
-        }
-
-        #[test]
-        fn aae_vm_fetch_reaches_javascript_http_server_over_kernel_tcp() {
-            run_isolated_service_test("vm-fetch-kernel-tcp-success");
-        }
-
-        #[test]
-        fn aaf_vm_fetch_kernel_tcp_decodes_chunked_response_body() {
-            run_isolated_service_test("vm-fetch-kernel-tcp-chunked");
-        }
-
-        #[test]
-        fn aag_vm_fetch_kernel_tcp_rejects_chunked_with_content_length() {
-            run_isolated_service_test("vm-fetch-kernel-tcp-chunked-content-length");
-        }
-
-        #[test]
-        fn aah_vm_fetch_kernel_tcp_socket_cap_failure_closes_no_extra_resources() {
-            run_isolated_service_test("vm-fetch-kernel-tcp-socket-cap");
-        }
-
-        #[test]
-        fn aai_vm_fetch_kernel_tcp_oversized_response_closes_client_socket() {
-            run_isolated_service_test("vm-fetch-kernel-tcp-oversized");
-        }
-
-        #[test]
-        fn aaj_vm_fetch_kernel_tcp_honors_configured_response_limit() {
-            run_isolated_service_test("vm-fetch-kernel-tcp-configured-limit");
-        }
-
-        #[test]
-        fn aak_vm_fetch_kernel_tcp_malformed_response_closes_client_socket() {
-            run_isolated_service_test("vm-fetch-kernel-tcp-malformed");
-        }
-
-        #[test]
-        fn aal_vm_fetch_kernel_tcp_timeout_closes_client_socket() {
-            run_isolated_service_test("vm-fetch-kernel-tcp-timeout");
-        }
-
-        #[test]
-        fn aam_vm_fetch_kernel_tcp_target_exit_cleans_up_process_resources() {
-            run_isolated_service_test("vm-fetch-kernel-tcp-target-exit");
-        }
-
-        #[test]
-        #[ignore = "flaky: high-level HTTPS over loopback TLS can deadlock the sync RPC bridge; lower-level TLS and dedicated loopback HTTPS regression still run"]
-        fn javascript_https_rpc_requests_and_serves_over_guest_tls_regression() {
-            javascript_https_rpc_requests_and_serves_over_guest_tls();
-        }
-
-        #[test]
-        fn javascript_loopback_tls_https_get_buffers_handshake_pending_write() {
-            run_isolated_service_test("loopback-tls-https-pending-write");
-        }
-
-        #[test]
-        fn loopback_tls_pending_write_buffer_cap_is_typed_limit_error() {
-            loopback_tls_pending_write_buffer_cap_is_typed_limit_error_work();
-        }
-
-        #[test]
-        fn __service_isolated_runner() {
-            let Ok(test_name) = std::env::var(ISOLATED_SERVICE_TEST_ENV) else {
-                return;
-            };
-            match test_name.as_str() {
-                "crypto-handle-tables" => {
-                    cipher_session_handles_are_bounded();
-                    diffie_hellman_session_handles_are_bounded();
-                }
-                "http2-file-response" => {
-                    javascript_http2_settings_pause_push_and_file_response_surfaces_work();
-                }
-                "http2-guest-h2c" => {
-                    javascript_http2_guest_h2c_round_trip_does_not_deadlock();
-                }
-                "http2-request-handler-twice" => {
-                    javascript_http2_request_handler_round_trip_runs_twice_in_one_vm();
-                }
-                "javascript-import-fresh" => {
-                    javascript_imports_guest_written_modules_after_miss_work();
-                }
-                "javascript-fs-promises-hot-metadata" => {
-                    javascript_fs_promises_hot_metadata_ops_use_sync_semantics();
-                }
-                "wasm-shell-external-stdout-redirect" => {
-                    wasm_shell_external_stdout_redirect_writes_file();
-                }
-                "wasm-shell-external-append-redirect" => {
-                    wasm_shell_external_append_redirect_creates_and_concatenates();
-                }
-                "wasm-shell-external-stderr-redirect" => {
-                    wasm_shell_external_stderr_redirect_writes_file();
-                }
-                "wasm-shell-builtin-external-redirect-parity" => {
-                    wasm_shell_builtin_and_external_redirects_match();
-                }
-                "mapped-shadow-readdir-wasm-directory" => {
-                    javascript_mapped_shadow_readdir_sees_wasm_created_directory();
-                }
-                "mapped-shadow-readdir-wasm-children" => {
-                    javascript_mapped_shadow_readdir_merges_wasm_created_children();
-                }
-                "mapped-shadow-readdir-shadow-kernel-union" => {
-                    javascript_mapped_shadow_readdir_unions_shadow_and_kernel_children();
-                }
-                "mapped-shadow-readdir-same-process-shadow" => {
-                    javascript_mapped_shadow_readdir_sees_same_process_shadow_directory();
-                }
-                "mapped-unlink-kernel-backed-no-resurrect" => {
-                    javascript_mapped_unlink_of_kernel_backed_file_does_not_resurrect();
-                }
-                "javascript-readdir-raw-dirent-semantics" => {
-                    javascript_readdir_raw_payload_preserves_dirent_semantics();
-                }
-                "javascript-writev-stream-copy-order" => {
-                    javascript_writev_raw_payload_preserves_stream_copy_order();
-                }
-                "wasm-command-timeout" => {
-                    wasm_command_timeout_is_enforced_by_sidecar_poll_path();
-                }
-                "wasm-fs-permissions" => {
-                    wasm_path_open_read_goes_through_kernel_filesystem_permissions();
-                }
-                "wasm-fs-write-permissions" => {
-                    wasm_path_open_write_goes_through_kernel_filesystem_permissions();
-                }
-                "http-oversized-incomplete-header" => {
-                    javascript_http_socket_backed_server_rejects_oversized_incomplete_headers();
-                }
-                "net-loopback-socket-churn" => {
-                    javascript_net_loopback_socket_churn_releases_kernel_slots();
-                }
-                "net-loopback-parked-reader-wake" => {
-                    javascript_net_loopback_wakes_reader_parked_before_write();
-                }
-                "net-loopback-edge-wake" => {
-                    javascript_net_loopback_reads_back_to_back_and_after_partial_drain();
-                }
-                "net-unix-domain-reader-events" => {
-                    javascript_net_unix_domain_echo_uses_reader_events();
-                }
-                "dgram-loopback-events" => {
-                    javascript_dgram_rpc_sends_and_receives_vm_loopback_packets();
-                }
-                "vm-fetch-kernel-tcp-success" => {
-                    vm_fetch_reaches_javascript_http_server_over_kernel_tcp();
-                }
-                "vm-fetch-kernel-tcp-chunked" => {
-                    vm_fetch_kernel_tcp_decodes_chunked_response_body();
-                }
-                "vm-fetch-kernel-tcp-chunked-content-length" => {
-                    vm_fetch_kernel_tcp_rejects_chunked_with_content_length();
-                }
-                "vm-fetch-kernel-tcp-socket-cap" => {
-                    vm_fetch_kernel_tcp_socket_cap_failure_closes_no_extra_resources();
-                }
-                "vm-fetch-kernel-tcp-oversized" => {
-                    vm_fetch_kernel_tcp_oversized_response_closes_client_socket();
-                }
-                "vm-fetch-kernel-tcp-configured-limit" => {
-                    vm_fetch_kernel_tcp_honors_configured_response_limit();
-                }
-                "vm-fetch-kernel-tcp-malformed" => {
-                    vm_fetch_kernel_tcp_malformed_response_closes_client_socket();
-                }
-                "vm-fetch-kernel-tcp-timeout" => {
-                    vm_fetch_kernel_tcp_timeout_closes_client_socket();
-                }
-                "vm-fetch-kernel-tcp-target-exit" => {
-                    vm_fetch_kernel_tcp_target_exit_cleans_up_process_resources();
-                }
-                "loopback-tls-https-pending-write" => {
-                    javascript_loopback_tls_https_get_buffers_handshake_pending_write_work();
-                }
-                other => panic!("unknown isolated service test {other}"),
-            }
-        }
-    }
-}
-
-pub use crate::service::{DispatchResult, NativeSidecar, SidecarError};
diff --git a/crates/sidecar/tests/session_isolation.rs b/crates/sidecar/tests/session_isolation.rs
deleted file mode 100644
index 897b852c6..000000000
--- a/crates/sidecar/tests/session_isolation.rs
+++ /dev/null
@@ -1,108 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{
-    CreateVmRequest, GetSignalStateRequest, GuestRuntimeKind, RequestPayload, ResponsePayload,
-    RootFilesystemDescriptor,
-};
-use std::collections::HashMap;
-use support::{
-    authenticate_wire, create_vm_wire, new_sidecar, open_session_wire, temp_dir, wire_request,
-    wire_session, wire_vm,
-};
-
-#[test]
-fn sessions_and_vms_reject_cross_connection_access() {
-    let mut sidecar = new_sidecar("session-isolation");
-    let cwd = temp_dir("session-isolation-cwd");
-
-    let connection_a = authenticate_wire(&mut sidecar, "conn-a");
-    let connection_b = authenticate_wire(&mut sidecar, "conn-b");
-
-    let session_a = open_session_wire(&mut sidecar, 2, &connection_a);
-    let session_b = open_session_wire(&mut sidecar, 3, &connection_b);
-    let session_a_other = open_session_wire(&mut sidecar, 4, &connection_a);
-    let (vm_a, _) = create_vm_wire(
-        &mut sidecar,
-        5,
-        &connection_a,
-        &session_a,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-
-    let session_reject = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            wire_session(&connection_b, &session_a),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                GuestRuntimeKind::JavaScript,
-                HashMap::from([(String::from("cwd"), cwd.to_string_lossy().into_owned())]),
-                RootFilesystemDescriptor {
-                    mode: secure_exec_sidecar::wire::RootFilesystemMode::Ephemeral,
-                    disable_default_base_layer: false,
-                    lowers: Vec::new(),
-                    bootstrap_entries: Vec::new(),
-                },
-                None,
-            )),
-        ))
-        .expect("dispatch mismatched session create_vm");
-    match session_reject.response.payload {
-        ResponsePayload::RejectedResponse(response) => {
-            assert_eq!(response.code, "invalid_state");
-            assert!(response.message.contains("not owned"));
-        }
-        other => panic!("unexpected session rejection response: {other:?}"),
-    }
-
-    let vm_reject = sidecar
-        .dispatch_wire_blocking(wire_request(
-            7,
-            wire_vm(&connection_b, &session_b, &vm_a),
-            RequestPayload::GetSignalStateRequest(GetSignalStateRequest {
-                process_id: String::from("missing"),
-            }),
-        ))
-        .expect("dispatch mismatched vm signal-state");
-    match vm_reject.response.payload {
-        ResponsePayload::RejectedResponse(response) => {
-            assert_eq!(response.code, "invalid_state");
-            assert!(response.message.contains("not owned"));
-        }
-        other => panic!("unexpected vm rejection response: {other:?}"),
-    }
-
-    let same_connection_vm_reject = sidecar
-        .dispatch_wire_blocking(wire_request(
-            8,
-            wire_vm(&connection_a, &session_a_other, &vm_a),
-            RequestPayload::GetSignalStateRequest(GetSignalStateRequest {
-                process_id: String::from("missing"),
-            }),
-        ))
-        .expect("dispatch same-connection mismatched-session signal-state");
-    match same_connection_vm_reject.response.payload {
-        ResponsePayload::RejectedResponse(response) => {
-            assert_eq!(response.code, "invalid_state");
-            assert!(response.message.contains("not owned"));
-        }
-        other => panic!("unexpected same-connection vm rejection response: {other:?}"),
-    }
-
-    let owner_signal_state = sidecar
-        .dispatch_wire_blocking(wire_request(
-            9,
-            wire_vm(&connection_a, &session_a, &vm_a),
-            RequestPayload::GetSignalStateRequest(GetSignalStateRequest {
-                process_id: String::from("missing"),
-            }),
-        ))
-        .expect("dispatch owner signal-state");
-    match owner_signal_state.response.payload {
-        ResponsePayload::SignalStateResponse(snapshot) => {
-            assert_eq!(snapshot.process_id, "missing");
-            assert!(snapshot.handlers.is_empty());
-        }
-        other => panic!("unexpected owner signal-state response: {other:?}"),
-    }
-}
diff --git a/crates/sidecar/tests/signal.rs b/crates/sidecar/tests/signal.rs
deleted file mode 100644
index 975e827e1..000000000
--- a/crates/sidecar/tests/signal.rs
+++ /dev/null
@@ -1,891 +0,0 @@
-mod support;
-
-use nix::libc;
-use secure_exec_sidecar::wire::{
-    EventPayload, GetSignalStateRequest, GuestRuntimeKind, KillProcessRequest,
-    ProcessSnapshotStatus, RequestPayload, ResponsePayload, SignalDispositionAction,
-    SignalHandlerRegistration, StreamChannel,
-};
-use std::collections::HashMap;
-use std::time::{Duration, Instant};
-use support::{
-    assert_node_available, authenticate_wire, create_vm_wire_with_metadata, execute_wire,
-    new_sidecar, open_session_wire, temp_dir, wire_request, wire_vm, write_fixture,
-};
-
-fn wait_for_process_output(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    expected: &str,
-) {
-    let ownership = wire_vm(connection_id, session_id, vm_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-
-    loop {
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for process output containing {expected:?}"
-        );
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll sidecar event");
-        let Some(event) = event else {
-            continue;
-        };
-        if let EventPayload::ProcessOutputEvent(output) = event.payload {
-            if output.process_id == process_id
-                && String::from_utf8_lossy(&output.chunk).contains(expected)
-            {
-                return;
-            }
-        }
-    }
-}
-
-fn wait_for_process_status(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    expected: ProcessSnapshotStatus,
-) {
-    let ownership = wire_vm(connection_id, session_id, vm_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-
-    loop {
-        let snapshot = sidecar
-            .dispatch_wire_blocking(wire_request(
-                1,
-                ownership.clone(),
-                RequestPayload::GetProcessSnapshotRequest,
-            ))
-            .expect("query process snapshot");
-        match snapshot.response.payload {
-            ResponsePayload::ProcessSnapshotResponse(snapshot) => {
-                if snapshot
-                    .processes
-                    .iter()
-                    .find(|entry| entry.process_id == process_id)
-                    .is_some_and(|entry| entry.status == expected)
-                {
-                    return;
-                }
-            }
-            other => panic!("unexpected process snapshot response: {other:?}"),
-        }
-
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for process status {expected:?}"
-        );
-        let _ = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(25))
-            .expect("pump process events while waiting for status");
-    }
-}
-
-fn embedded_runtime_signal_routes_sigterm_and_process_kill() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("embedded-runtime-signal-routing");
-    let cwd = temp_dir("embedded-runtime-signal-routing-cwd");
-    let entry = cwd.join("signal-routing.mjs");
-
-    write_fixture(
-        &entry,
-        [
-            "let sigtermCount = 0;",
-            "process.on('SIGHUP', () => {});",
-            "process.on('SIGWINCH', () => {});",
-            "process.on('SIGTERM', () => {",
-            "  sigtermCount += 1;",
-            "  console.log(`sigterm:${sigtermCount}`);",
-            "  if (sigtermCount === 1) {",
-            "    process.kill(process.pid, 'SIGTERM');",
-            "    return;",
-            "  }",
-            "  process.exit(0);",
-            "});",
-            "console.log('signal-handlers-ready');",
-            "setInterval(() => {}, 25);",
-        ]
-        .join("\n"),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-embedded-runtime-signal-routing");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::new(),
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "signal-routing",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    wait_for_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "signal-routing",
-        "signal-handlers-ready",
-    );
-
-    let ownership = wire_vm(&connection_id, &session_id, &vm_id);
-    let registration_deadline = Instant::now() + Duration::from_secs(10);
-    loop {
-        let signal_state = sidecar
-            .dispatch_wire_blocking(wire_request(
-                5,
-                ownership.clone(),
-                RequestPayload::GetSignalStateRequest(GetSignalStateRequest {
-                    process_id: String::from("signal-routing"),
-                }),
-            ))
-            .expect("query signal state");
-        let ready = match signal_state.response.payload {
-            ResponsePayload::SignalStateResponse(snapshot) => {
-                snapshot.handlers.get(&(libc::SIGTERM as u32))
-                    == Some(&SignalHandlerRegistration {
-                        action: SignalDispositionAction::User,
-                        mask: vec![],
-                        flags: 0,
-                    })
-            }
-            other => panic!("unexpected signal state response: {other:?}"),
-        };
-        if ready {
-            break;
-        }
-        let _ = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(25))
-            .expect("pump signal registration events");
-        assert!(
-            Instant::now() < registration_deadline,
-            "timed out waiting for SIGTERM registration"
-        );
-    }
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            ownership.clone(),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("signal-routing"),
-                signal: String::from("SIGTERM"),
-            }),
-        ))
-        .expect("deliver SIGTERM");
-
-    let event_deadline = Instant::now() + Duration::from_secs(10);
-    let mut saw_first_sigterm = false;
-    let mut saw_second_sigterm = false;
-    let mut exit_code = None;
-
-    while exit_code.is_none() {
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll signal events");
-        let Some(event) = event else {
-            assert!(
-                Instant::now() < event_deadline,
-                "timed out waiting for SIGTERM delivery"
-            );
-            continue;
-        };
-
-        match event.payload {
-            EventPayload::ProcessOutputEvent(output) if output.process_id == "signal-routing" => {
-                let chunk = String::from_utf8_lossy(&output.chunk);
-                saw_first_sigterm |= chunk.contains("sigterm:1");
-                saw_second_sigterm |= chunk.contains("sigterm:2");
-            }
-            EventPayload::ProcessExitedEvent(exited) if exited.process_id == "signal-routing" => {
-                exit_code = Some(exited.exit_code);
-            }
-            _ => {}
-        }
-    }
-
-    assert!(saw_first_sigterm, "expected control-plane SIGTERM delivery");
-    assert!(
-        saw_second_sigterm,
-        "expected guest process.kill(SIGTERM) delivery"
-    );
-    assert_eq!(exit_code, Some(0));
-}
-
-fn embedded_runtime_signal_stop_continue_updates_kernel_state_and_guest_handler() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("embedded-runtime-signal-stop-cont");
-    let cwd = temp_dir("embedded-runtime-signal-stop-cont-cwd");
-    let entry = cwd.join("signal-stop-cont.mjs");
-
-    write_fixture(
-        &entry,
-        [
-            "let sigcontCount = 0;",
-            "process.on('SIGCONT', () => {",
-            "  sigcontCount += 1;",
-            "  console.log(`sigcont:${sigcontCount}`);",
-            "});",
-            "console.log('ready');",
-            "setInterval(() => {}, 25);",
-        ]
-        .join("\n"),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-embedded-runtime-signal-stop-cont");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::new(),
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "signal-stop-cont",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    wait_for_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "signal-stop-cont",
-        "ready",
-    );
-
-    let ownership = wire_vm(&connection_id, &session_id, &vm_id);
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            ownership.clone(),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("signal-stop-cont"),
-                signal: String::from("SIGSTOP"),
-            }),
-        ))
-        .expect("deliver SIGSTOP");
-    wait_for_process_status(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "signal-stop-cont",
-        ProcessSnapshotStatus::Stopped,
-    );
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            ownership.clone(),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("signal-stop-cont"),
-                signal: String::from("SIGCONT"),
-            }),
-        ))
-        .expect("deliver SIGCONT");
-    wait_for_process_status(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "signal-stop-cont",
-        ProcessSnapshotStatus::Running,
-    );
-    wait_for_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "signal-stop-cont",
-        "sigcont:1",
-    );
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            7,
-            ownership,
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("signal-stop-cont"),
-                signal: String::from("SIGTERM"),
-            }),
-        ))
-        .expect("terminate stopped/continued process");
-}
-
-fn embedded_runtime_kill_process_rejects_invalid_signal_without_killing_process() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("embedded-runtime-invalid-signal");
-    let cwd = temp_dir("embedded-runtime-invalid-signal-cwd");
-    let entry = cwd.join("invalid-signal.mjs");
-
-    write_fixture(
-        &entry,
-        [
-            "console.log('invalid-signal-ready');",
-            "setInterval(() => {}, 25);",
-        ]
-        .join("\n"),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-embedded-runtime-invalid-signal");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::new(),
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "invalid-signal",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    wait_for_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "invalid-signal",
-        "invalid-signal-ready",
-    );
-
-    let ownership = wire_vm(&connection_id, &session_id, &vm_id);
-    let invalid_signal = sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            ownership.clone(),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("invalid-signal"),
-                signal: String::from("SIGBOGUS"),
-            }),
-        ))
-        .expect("dispatch invalid signal");
-    let ResponsePayload::RejectedResponse(response) = invalid_signal.response.payload else {
-        panic!("unexpected invalid signal response");
-    };
-    assert_eq!(response.code, "invalid_state");
-    assert!(
-        response.message.contains("unsupported kill_process signal"),
-        "unexpected invalid signal rejection: {}",
-        response.message
-    );
-
-    wait_for_process_status(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "invalid-signal",
-        ProcessSnapshotStatus::Running,
-    );
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            ownership,
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("invalid-signal"),
-                signal: String::from("SIGTERM"),
-            }),
-        ))
-        .expect("terminate invalid-signal process");
-}
-
-fn embedded_runtime_process_kill_signal_zero_checks_child_liveness() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("embedded-runtime-process-kill-sig0");
-    let cwd = temp_dir("embedded-runtime-process-kill-sig0-cwd");
-    let entry = cwd.join("process-kill-sig0.mjs");
-
-    write_fixture(
-        &entry,
-        [
-            "const { spawn, spawnSync } = require('node:child_process');",
-            "const live = spawn(process.execPath, ['-e', 'setTimeout(() => {}, 5000)'], { stdio: 'ignore' });",
-            "console.log(`live:${process.kill(live.pid, 0)}`);",
-            "live.kill('SIGTERM');",
-            "const stale = spawnSync(process.execPath, ['-e', ''], { encoding: 'utf8' });",
-            "if (typeof stale.pid !== 'number') {",
-            "  throw new Error('spawnSync result did not include child pid');",
-            "}",
-            "let staleResult = 'alive';",
-            "try {",
-            "  process.kill(stale.pid, 0);",
-            "} catch (error) {",
-            "  staleResult = error && typeof error.code === 'string' ? error.code : 'error';",
-            "}",
-            "console.log(`stale:${staleResult}`);",
-            "process.exit(staleResult === 'alive' ? 1 : 0);",
-        ]
-        .join("\n"),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-embedded-runtime-process-kill-sig0");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::new(),
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "process-kill-sig0",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    let ownership = wire_vm(&connection_id, &session_id, &vm_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-    let mut saw_live = false;
-    let mut saw_stale_esrch = false;
-    let mut exit_code = None;
-
-    while exit_code.is_none() || !saw_live || !saw_stale_esrch {
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll process.kill signal-zero events");
-        let Some(event) = event else {
-            assert!(
-                Instant::now() < deadline,
-                "timed out waiting for process.kill signal-zero output"
-            );
-            continue;
-        };
-
-        match event.payload {
-            EventPayload::ProcessOutputEvent(output)
-                if output.process_id == "process-kill-sig0" =>
-            {
-                let chunk = String::from_utf8_lossy(&output.chunk);
-                saw_live |= chunk.contains("live:true");
-                saw_stale_esrch |= chunk.contains("stale:ESRCH");
-            }
-            EventPayload::ProcessExitedEvent(exited)
-                if exited.process_id == "process-kill-sig0" =>
-            {
-                exit_code = Some(exited.exit_code);
-            }
-            _ => {}
-        }
-
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for process.kill signal-zero completion"
-        );
-    }
-
-    assert!(saw_live, "live child should be visible to signal 0");
-    assert!(
-        saw_stale_esrch,
-        "stale child PID should throw ESRCH for signal 0"
-    );
-    assert_eq!(exit_code, Some(0));
-}
-
-fn embedded_runtime_process_group_kill_terminates_detached_tree() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("embedded-runtime-process-group-kill");
-    let cwd = temp_dir("embedded-runtime-process-group-kill-cwd");
-    let parent_entry = cwd.join("group-parent.mjs");
-    let child_entry = cwd.join("group-child.mjs");
-
-    write_fixture(
-        &child_entry,
-        [
-            "import { spawn } from 'node:child_process';",
-            "const makeChild = () => spawn(",
-            "  process.execPath,",
-            "  ['-e', 'setTimeout(() => {}, 100000)'],",
-            "  { stdio: ['ignore', 'ignore', 'ignore'] },",
-            ");",
-            "const first = makeChild();",
-            "const second = makeChild();",
-            "console.log(`group-ready:${first.pid}:${second.pid}`);",
-            "setInterval(() => {}, 1000);",
-        ]
-        .join("\n"),
-    );
-    write_fixture(
-        &parent_entry,
-        [
-            "import { spawn } from 'node:child_process';",
-            "const child = spawn(process.execPath, ['./group-child.mjs'], {",
-            "  detached: true,",
-            "  stdio: ['ignore', 'pipe', 'pipe'],",
-            "});",
-            "let buffered = '';",
-            "const grandchildPids = await new Promise((resolve, reject) => {",
-            "  child.on('error', reject);",
-            "  child.stdout.on('data', (chunk) => {",
-            "    buffered += chunk.toString();",
-            "    const match = buffered.match(/group-ready:(\\d+):(\\d+)/);",
-            "    if (match) {",
-            "      resolve([Number(match[1]), Number(match[2])]);",
-            "    }",
-            "  });",
-            "});",
-            "const closePromise = new Promise((resolve) => {",
-            "  child.on('close', (code, signal) => resolve({ code, signal }));",
-            "});",
-            "const killResult = process.kill(-child.pid, 'SIGKILL');",
-            "console.log('kill-returned:' + killResult);",
-            "const closed = await closePromise;",
-            "console.log('group-close:' + closed.code + ':' + closed.signal);",
-            "const errorCode = (error) => {",
-            "  if (error && typeof error.code === 'string' && error.syscall === 'kill') {",
-            "    return error.code;",
-            "  }",
-            "  return 'missing-errno-error';",
-            "};",
-            "const probe = (pid) => {",
-            "  try {",
-            "    process.kill(pid, 0);",
-            "    return 'alive';",
-            "  } catch (error) {",
-            "    return errorCode(error);",
-            "  }",
-            "};",
-            "console.log('probe-child:' + probe(child.pid));",
-            "console.log('probe-grandchild-a:' + probe(grandchildPids[0]));",
-            "console.log('probe-grandchild-b:' + probe(grandchildPids[1]));",
-            "let missingGroup;",
-            "try {",
-            "  process.kill(-999999, 'SIGKILL');",
-            "  missingGroup = 'no-error';",
-            "} catch (error) {",
-            "  missingGroup = errorCode(error);",
-            "}",
-            "console.log('probe-missing-group:' + missingGroup);",
-        ]
-        .join("\n"),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-embedded-runtime-process-group-kill");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::new(),
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "group-kill-parent",
-        GuestRuntimeKind::JavaScript,
-        &parent_entry,
-        Vec::new(),
-    );
-
-    let ownership = wire_vm(&connection_id, &session_id, &vm_id);
-    let deadline = Instant::now() + Duration::from_secs(30);
-    let mut stdout = String::new();
-    let mut stderr = String::new();
-    let mut exit_code = None;
-
-    while exit_code.is_none() {
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll process group kill events");
-        let Some(event) = event else {
-            assert!(
-                Instant::now() < deadline,
-                "timed out waiting for group kill completion\nstdout:\n{stdout}\nstderr:\n{stderr}"
-            );
-            continue;
-        };
-
-        match event.payload {
-            EventPayload::ProcessOutputEvent(output)
-                if output.process_id == "group-kill-parent" =>
-            {
-                let chunk = String::from_utf8_lossy(&output.chunk);
-                match output.channel {
-                    StreamChannel::Stdout => stdout.push_str(&chunk),
-                    StreamChannel::Stderr => stderr.push_str(&chunk),
-                }
-            }
-            EventPayload::ProcessExitedEvent(exited)
-                if exited.process_id == "group-kill-parent" =>
-            {
-                exit_code = Some(exited.exit_code);
-            }
-            _ => {}
-        }
-
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for group kill completion\nstdout:\n{stdout}\nstderr:\n{stderr}"
-        );
-    }
-
-    assert_eq!(
-        exit_code,
-        Some(0),
-        "group kill parent should exit cleanly\nstdout:\n{stdout}\nstderr:\n{stderr}"
-    );
-    assert!(
-        stdout.contains("kill-returned:true"),
-        "group kill should report success\nstdout:\n{stdout}\nstderr:\n{stderr}"
-    );
-    assert!(
-        stdout.contains("group-close:"),
-        "detached child should emit close after group kill\nstdout:\n{stdout}\nstderr:\n{stderr}"
-    );
-    assert!(
-        stdout.contains("probe-child:ESRCH"),
-        "killed group leader should probe as ESRCH\nstdout:\n{stdout}\nstderr:\n{stderr}"
-    );
-    assert!(
-        stdout.contains("probe-grandchild-a:ESRCH"),
-        "first grandchild should be killed with the group\nstdout:\n{stdout}\nstderr:\n{stderr}"
-    );
-    assert!(
-        stdout.contains("probe-grandchild-b:ESRCH"),
-        "second grandchild should be killed with the group\nstdout:\n{stdout}\nstderr:\n{stderr}"
-    );
-    assert!(
-        stdout.contains("probe-missing-group:ESRCH"),
-        "missing process group should raise ESRCH\nstdout:\n{stdout}\nstderr:\n{stderr}"
-    );
-}
-
-fn embedded_runtime_signal_delivers_sigchld_on_child_exit() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("embedded-runtime-signal-sigchld");
-    let cwd = temp_dir("embedded-runtime-signal-sigchld-cwd");
-    let parent_entry = cwd.join("parent.mjs");
-    let child_entry = cwd.join("child.mjs");
-
-    write_fixture(
-        &child_entry,
-        [
-            "await new Promise((resolve) => setTimeout(resolve, 200));",
-            "console.log('child-exit');",
-        ]
-        .join("\n"),
-    );
-    write_fixture(
-        &parent_entry,
-        [
-            "import { spawn } from 'node:child_process';",
-            "let sigchldCount = 0;",
-            "process.on('SIGCHLD', () => {",
-            "  sigchldCount += 1;",
-            "  console.log(`sigchld:${sigchldCount}`);",
-            "});",
-            "console.log('sigchld-registered');",
-            "const child = spawn('node', ['./child.mjs'], { stdio: ['ignore', 'ignore', 'ignore'] });",
-            "await new Promise((resolve, reject) => {",
-            "  child.on('error', reject);",
-            "  child.on('close', (code) => {",
-            "    if (code !== 0) {",
-            "      reject(new Error(`child exit ${code}`));",
-            "      return;",
-            "    }",
-            "    resolve();",
-            "  });",
-            "});",
-            "const deadline = Date.now() + 2000;",
-            "while (sigchldCount === 0 && Date.now() < deadline) {",
-            "  await new Promise((resolve) => setTimeout(resolve, 10));",
-            "}",
-            "if (sigchldCount === 0) {",
-            "  throw new Error('SIGCHLD was not delivered');",
-            "}",
-            "console.log(`sigchld-final:${sigchldCount}`);",
-        ]
-        .join("\n"),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-embedded-runtime-signal-sigchld");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let allowed_builtins = serde_json::to_string(&[
-        "assert",
-        "buffer",
-        "child_process",
-        "console",
-        "crypto",
-        "events",
-        "fs",
-        "path",
-        "querystring",
-        "stream",
-        "string_decoder",
-        "timers",
-        "url",
-        "util",
-        "zlib",
-    ])
-    .expect("serialize builtins");
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::from([(
-            String::from("env.AGENTOS_ALLOWED_NODE_BUILTINS"),
-            allowed_builtins,
-        )]),
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "sigchld-parent",
-        GuestRuntimeKind::JavaScript,
-        &parent_entry,
-        Vec::new(),
-    );
-
-    let ownership = wire_vm(&connection_id, &session_id, &vm_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-    let mut signal_registered = false;
-    let mut saw_registered_output = false;
-    let mut saw_sigchld_output = false;
-    let mut saw_final_output = false;
-    let mut exit_code = None;
-
-    while exit_code.is_none() || !signal_registered {
-        let signal_state = sidecar
-            .dispatch_wire_blocking(wire_request(
-                5,
-                ownership.clone(),
-                RequestPayload::GetSignalStateRequest(GetSignalStateRequest {
-                    process_id: String::from("sigchld-parent"),
-                }),
-            ))
-            .expect("query SIGCHLD state");
-        match signal_state.response.payload {
-            ResponsePayload::SignalStateResponse(snapshot) => {
-                if snapshot.handlers.get(&(libc::SIGCHLD as u32))
-                    == Some(&SignalHandlerRegistration {
-                        action: SignalDispositionAction::User,
-                        mask: vec![],
-                        flags: 0,
-                    })
-                {
-                    signal_registered = true;
-                }
-            }
-            other => panic!("unexpected signal state response: {other:?}"),
-        }
-
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll SIGCHLD process");
-        if let Some(event) = event {
-            match event.payload {
-                EventPayload::ProcessOutputEvent(output)
-                    if output.process_id == "sigchld-parent" =>
-                {
-                    let chunk = String::from_utf8_lossy(&output.chunk);
-                    saw_registered_output |= chunk.contains("sigchld-registered");
-                    saw_sigchld_output |= chunk.contains("sigchld:1");
-                    saw_final_output |= chunk.contains("sigchld-final:1");
-                }
-                EventPayload::ProcessExitedEvent(exited)
-                    if exited.process_id == "sigchld-parent" =>
-                {
-                    exit_code = Some(exited.exit_code);
-                }
-                _ => {}
-            }
-        }
-
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for SIGCHLD registration/output"
-        );
-    }
-
-    assert!(signal_registered, "SIGCHLD should be registered");
-    assert!(
-        saw_registered_output,
-        "parent should report SIGCHLD registration"
-    );
-    assert!(saw_sigchld_output, "parent should receive SIGCHLD output");
-    assert!(saw_final_output, "parent should report final SIGCHLD count");
-    assert_eq!(exit_code, Some(0));
-}
-
-#[test]
-fn embedded_runtime_signal_suite() {
-    embedded_runtime_signal_routes_sigterm_and_process_kill();
-    embedded_runtime_signal_stop_continue_updates_kernel_state_and_guest_handler();
-    embedded_runtime_kill_process_rejects_invalid_signal_without_killing_process();
-    embedded_runtime_process_kill_signal_zero_checks_child_liveness();
-    embedded_runtime_process_group_kill_terminates_detached_tree();
-    embedded_runtime_signal_delivers_sigchld_on_child_exit();
-}
diff --git a/crates/sidecar/tests/smoke.rs b/crates/sidecar/tests/smoke.rs
deleted file mode 100644
index 3d65c1b1d..000000000
--- a/crates/sidecar/tests/smoke.rs
+++ /dev/null
@@ -1,20 +0,0 @@
-use secure_exec_sidecar::scaffold;
-use secure_exec_sidecar::wire::{DEFAULT_MAX_FRAME_BYTES, PROTOCOL_NAME, PROTOCOL_VERSION};
-use secure_exec_sidecar::NativeSidecarConfig;
-
-#[test]
-fn native_sidecar_scaffold_tracks_kernel_and_execution_dependencies() {
-    let scaffold = scaffold();
-
-    assert_eq!(scaffold.package_name, "secure-exec-sidecar");
-    assert_eq!(scaffold.binary_name, "secure-exec-sidecar");
-    assert_eq!(scaffold.kernel_package, "secure-exec-kernel");
-    assert_eq!(scaffold.execution_package, "secure-exec-execution");
-    assert_eq!(scaffold.protocol_name, PROTOCOL_NAME);
-    assert_eq!(scaffold.protocol_version, PROTOCOL_VERSION);
-    assert_eq!(scaffold.max_frame_bytes, DEFAULT_MAX_FRAME_BYTES);
-    assert_eq!(
-        NativeSidecarConfig::default().sidecar_id,
-        "secure-exec-sidecar"
-    );
-}
diff --git a/crates/sidecar/tests/socket_state_queries.rs b/crates/sidecar/tests/socket_state_queries.rs
deleted file mode 100644
index dde0a4141..000000000
--- a/crates/sidecar/tests/socket_state_queries.rs
+++ /dev/null
@@ -1,788 +0,0 @@
-mod support;
-
-use nix::libc;
-use secure_exec_sidecar::wire::{
-    EventPayload, FindBoundUdpRequest, FindListenerRequest, GetSignalStateRequest,
-    GuestRuntimeKind, KillProcessRequest, ProcessSnapshotStatus, RequestPayload, ResponsePayload,
-    SignalDispositionAction, SignalHandlerRegistration,
-};
-use std::collections::HashMap;
-use std::fs;
-use std::time::{Duration, Instant};
-use support::{
-    assert_node_available, authenticate_wire, create_vm_wire_with_metadata, execute_wire,
-    new_sidecar, open_session_wire, temp_dir, wasm_signal_state_module, wire_request, wire_vm,
-    write_fixture,
-};
-
-fn wait_for_process_output(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    expected: &str,
-) {
-    let ownership = wire_vm(connection_id, session_id, vm_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-
-    loop {
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for process output"
-        );
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll sidecar process output");
-        let Some(event) = event else {
-            continue;
-        };
-
-        match event.payload {
-            EventPayload::ProcessOutputEvent(output)
-                if output.process_id == process_id
-                    && String::from_utf8_lossy(&output.chunk).contains(expected) =>
-            {
-                return;
-            }
-            _ => {}
-        }
-    }
-}
-
-fn wait_for_process_status(
-    sidecar: &mut secure_exec_sidecar::NativeSidecar<support::RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    expected: ProcessSnapshotStatus,
-) {
-    let ownership = wire_vm(connection_id, session_id, vm_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-
-    loop {
-        let snapshot = sidecar
-            .dispatch_wire_blocking(wire_request(
-                1,
-                ownership.clone(),
-                RequestPayload::GetProcessSnapshotRequest,
-            ))
-            .expect("query process snapshot");
-        match snapshot.response.payload {
-            ResponsePayload::ProcessSnapshotResponse(snapshot) => {
-                if snapshot
-                    .processes
-                    .iter()
-                    .find(|entry| entry.process_id == process_id)
-                    .is_some_and(|entry| entry.status == expected)
-                {
-                    return;
-                }
-            }
-            other => panic!("unexpected process snapshot response: {other:?}"),
-        }
-
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for process status {expected:?}"
-        );
-        let _ = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(25))
-            .expect("pump process events while waiting for status");
-    }
-}
-
-fn v8_signal_delivery_routes_kill_process_and_process_kill() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("v8-signal-routing");
-    let cwd = temp_dir("v8-signal-routing-cwd");
-    let entry = cwd.join("signal-routing.mjs");
-
-    write_fixture(
-        &entry,
-        [
-            "let sigtermCount = 0;",
-            "process.on('SIGHUP', () => {});",
-            "process.on('SIGWINCH', () => {});",
-            "process.on('SIGTERM', () => {",
-            "  sigtermCount += 1;",
-            "  console.log(`sigterm:${sigtermCount}`);",
-            "  if (sigtermCount === 1) {",
-            "    process.kill(process.pid, 'SIGTERM');",
-            "    return;",
-            "  }",
-            "  process.exit(0);",
-            "});",
-            "console.log('signal-handlers-ready');",
-            "setInterval(() => {}, 25);",
-        ]
-        .join("\n"),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-v8-signal-routing");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::new(),
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "signal-routing",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    wait_for_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "signal-routing",
-        "signal-handlers-ready",
-    );
-
-    let ownership = wire_vm(&connection_id, &session_id, &vm_id);
-    let registration_deadline = Instant::now() + Duration::from_secs(10);
-    loop {
-        let signal_state = sidecar
-            .dispatch_wire_blocking(wire_request(
-                5,
-                ownership.clone(),
-                RequestPayload::GetSignalStateRequest(GetSignalStateRequest {
-                    process_id: String::from("signal-routing"),
-                }),
-            ))
-            .expect("query V8 signal state");
-        let ready = match signal_state.response.payload {
-            ResponsePayload::SignalStateResponse(snapshot) => {
-                snapshot.handlers.get(&(libc::SIGTERM as u32))
-                    == Some(&SignalHandlerRegistration {
-                        action: SignalDispositionAction::User,
-                        mask: vec![],
-                        flags: 0,
-                    })
-                    && snapshot.handlers.get(&(libc::SIGHUP as u32))
-                        == Some(&SignalHandlerRegistration {
-                            action: SignalDispositionAction::User,
-                            mask: vec![],
-                            flags: 0,
-                        })
-                    && snapshot.handlers.get(&(libc::SIGWINCH as u32))
-                        == Some(&SignalHandlerRegistration {
-                            action: SignalDispositionAction::User,
-                            mask: vec![],
-                            flags: 0,
-                        })
-            }
-            other => panic!("unexpected signal state response: {other:?}"),
-        };
-        if ready {
-            break;
-        }
-        let _ = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(25))
-            .expect("pump V8 signal registration events");
-        assert!(
-            Instant::now() < registration_deadline,
-            "timed out waiting for V8 signal registrations"
-        );
-    }
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            ownership.clone(),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("signal-routing"),
-                signal: String::from("SIGTERM"),
-            }),
-        ))
-        .expect("deliver SIGTERM to V8 guest");
-
-    let event_deadline = Instant::now() + Duration::from_secs(10);
-    let mut saw_first_sigterm = false;
-    let mut saw_second_sigterm = false;
-    let mut exit_code = None;
-
-    while exit_code.is_none() {
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll V8 signal events");
-        let Some(event) = event else {
-            assert!(
-                Instant::now() < event_deadline,
-                "timed out waiting for V8 signal delivery"
-            );
-            continue;
-        };
-
-        match event.payload {
-            EventPayload::ProcessOutputEvent(output) if output.process_id == "signal-routing" => {
-                let chunk = String::from_utf8_lossy(&output.chunk);
-                saw_first_sigterm |= chunk.contains("sigterm:1");
-                saw_second_sigterm |= chunk.contains("sigterm:2");
-            }
-            EventPayload::ProcessExitedEvent(exited) if exited.process_id == "signal-routing" => {
-                exit_code = Some(exited.exit_code);
-            }
-            _ => {}
-        }
-    }
-
-    assert!(saw_first_sigterm, "expected control-plane SIGTERM delivery");
-    assert!(
-        saw_second_sigterm,
-        "expected guest process.kill(SIGTERM) delivery"
-    );
-    assert_eq!(exit_code, Some(0));
-}
-
-fn v8_signal_stop_and_continue_updates_process_snapshot() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("v8-signal-stop-cont");
-    let cwd = temp_dir("v8-signal-stop-cont-cwd");
-    let entry = cwd.join("signal-stop-cont.mjs");
-
-    write_fixture(
-        &entry,
-        ["console.log('ready');", "setInterval(() => {}, 25);"].join("\n"),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-v8-signal-stop-cont");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::new(),
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "signal-stop-cont",
-        GuestRuntimeKind::JavaScript,
-        &entry,
-        Vec::new(),
-    );
-
-    wait_for_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "signal-stop-cont",
-        "ready",
-    );
-
-    let ownership = wire_vm(&connection_id, &session_id, &vm_id);
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            5,
-            ownership.clone(),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("signal-stop-cont"),
-                signal: String::from("SIGSTOP"),
-            }),
-        ))
-        .expect("deliver SIGSTOP to V8 guest");
-    wait_for_process_status(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "signal-stop-cont",
-        ProcessSnapshotStatus::Stopped,
-    );
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            6,
-            ownership.clone(),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("signal-stop-cont"),
-                signal: String::from("SIGCONT"),
-            }),
-        ))
-        .expect("deliver SIGCONT to V8 guest");
-    wait_for_process_status(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "signal-stop-cont",
-        ProcessSnapshotStatus::Running,
-    );
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            7,
-            ownership,
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("signal-stop-cont"),
-                signal: String::from("SIGTERM"),
-            }),
-        ))
-        .expect("terminate V8 guest after stop/cont");
-}
-
-fn sidecar_queries_listener_udp_and_signal_state() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("socket-state-queries");
-    let cwd = temp_dir("socket-state-queries-cwd");
-    let tcp_entry = cwd.join("tcp-listener.mjs");
-    let udp_entry = cwd.join("udp-listener.mjs");
-    let signal_entry = cwd.join("signal-state.wasm");
-
-    write_fixture(
-        &tcp_entry,
-        [
-            "import net from 'node:net';",
-            "const server = net.createServer(() => {});",
-            "server.listen(43111, '127.0.0.1', () => {",
-            "  console.log('tcp-listening:43111');",
-            "});",
-        ]
-        .join("\n"),
-    );
-    write_fixture(
-        &udp_entry,
-        [
-            "import dgram from 'node:dgram';",
-            "const socket = dgram.createSocket('udp4');",
-            "socket.bind(43112, '127.0.0.1', () => {",
-            "  console.log('udp-bound:43112');",
-            "});",
-        ]
-        .join("\n"),
-    );
-    fs::write(&signal_entry, wasm_signal_state_module()).expect("write signal-state wasm fixture");
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let allowed_builtins = serde_json::to_string(&["net", "dgram"]).expect("serialize builtins");
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::from([(
-            String::from("env.AGENTOS_ALLOWED_NODE_BUILTINS"),
-            allowed_builtins,
-        )]),
-    );
-    let (wasm_vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        30,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::WebAssembly,
-        &cwd,
-        HashMap::new(),
-    );
-    let (other_vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        31,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::new(),
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "tcp-listener",
-        GuestRuntimeKind::JavaScript,
-        &tcp_entry,
-        Vec::new(),
-    );
-    wait_for_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "tcp-listener",
-        "tcp-listening:43111",
-    );
-
-    let listener_deadline = Instant::now() + Duration::from_secs(5);
-    loop {
-        let listener = sidecar
-            .dispatch_wire_blocking(wire_request(
-                7,
-                wire_vm(&connection_id, &session_id, &vm_id),
-                RequestPayload::FindListenerRequest(FindListenerRequest {
-                    host: Some(String::from("127.0.0.1")),
-                    port: Some(43111),
-                    path: None,
-                }),
-            ))
-            .expect("query tcp listener");
-        match listener.response.payload {
-            ResponsePayload::ListenerSnapshotResponse(snapshot) => {
-                if let Some(listener) = snapshot.listener {
-                    assert_eq!(listener.process_id, "tcp-listener");
-                    assert_eq!(listener.host.as_deref(), Some("127.0.0.1"));
-                    assert_eq!(listener.port, Some(43111));
-                    break;
-                }
-            }
-            other => panic!("unexpected listener response: {other:?}"),
-        }
-        assert!(
-            Instant::now() < listener_deadline,
-            "timed out waiting for listener snapshot"
-        );
-        std::thread::sleep(Duration::from_millis(25));
-    }
-
-    let other_vm_listener = sidecar
-        .dispatch_wire_blocking(wire_request(
-            71,
-            wire_vm(&connection_id, &session_id, &other_vm_id),
-            RequestPayload::FindListenerRequest(FindListenerRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(43111),
-                path: None,
-            }),
-        ))
-        .expect("query tcp listener from another vm");
-    match other_vm_listener.response.payload {
-        ResponsePayload::ListenerSnapshotResponse(snapshot) => {
-            assert!(
-                snapshot.listener.is_none(),
-                "listener from vm {vm_id} leaked into vm {other_vm_id}: {:?}",
-                snapshot.listener
-            );
-        }
-        other => panic!("unexpected other-vm listener response: {other:?}"),
-    }
-
-    let kill_listener = sidecar
-        .dispatch_wire_blocking(wire_request(
-            70,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::KillProcessRequest(KillProcessRequest {
-                process_id: String::from("tcp-listener"),
-                signal: String::from("SIGTERM"),
-            }),
-        ))
-        .expect("kill tcp listener");
-    assert!(matches!(
-        kill_listener.response.payload,
-        ResponsePayload::ProcessKilledResponse(_)
-    ));
-
-    execute_wire(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "udp-listener",
-        GuestRuntimeKind::JavaScript,
-        &udp_entry,
-        Vec::new(),
-    );
-    wait_for_process_output(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "udp-listener",
-        "udp-bound:43112",
-    );
-
-    execute_wire(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        &wasm_vm_id,
-        "signal-state",
-        GuestRuntimeKind::WebAssembly,
-        &signal_entry,
-        Vec::new(),
-    );
-    let wasm_ownership = wire_vm(&connection_id, &session_id, &wasm_vm_id);
-
-    let bound_udp = sidecar
-        .dispatch_wire_blocking(wire_request(
-            8,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::FindBoundUdpRequest(FindBoundUdpRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(43112),
-            }),
-        ))
-        .expect("query udp socket");
-    match bound_udp.response.payload {
-        ResponsePayload::BoundUdpSnapshotResponse(snapshot) => {
-            let socket = snapshot.socket.expect("bound udp snapshot");
-            assert_eq!(socket.process_id, "udp-listener");
-            assert_eq!(socket.host.as_deref(), Some("127.0.0.1"));
-            assert_eq!(socket.port, Some(43112));
-        }
-        other => panic!("unexpected bound udp response: {other:?}"),
-    }
-
-    let other_vm_bound_udp = sidecar
-        .dispatch_wire_blocking(wire_request(
-            72,
-            wire_vm(&connection_id, &session_id, &other_vm_id),
-            RequestPayload::FindBoundUdpRequest(FindBoundUdpRequest {
-                host: Some(String::from("127.0.0.1")),
-                port: Some(43112),
-            }),
-        ))
-        .expect("query udp socket from another vm");
-    match other_vm_bound_udp.response.payload {
-        ResponsePayload::BoundUdpSnapshotResponse(snapshot) => {
-            assert!(
-                snapshot.socket.is_none(),
-                "udp socket from vm {vm_id} leaked into vm {other_vm_id}: {:?}",
-                snapshot.socket
-            );
-        }
-        other => panic!("unexpected other-vm udp response: {other:?}"),
-    }
-
-    let signal_deadline = Instant::now() + Duration::from_secs(5);
-    loop {
-        let _ = sidecar
-            .poll_event_wire_blocking(&wasm_ownership, Duration::from_millis(25))
-            .expect("pump wasm signal-state events");
-        let signal_state = sidecar
-            .dispatch_wire_blocking(wire_request(
-                9,
-                wasm_ownership.clone(),
-                RequestPayload::GetSignalStateRequest(GetSignalStateRequest {
-                    process_id: String::from("signal-state"),
-                }),
-            ))
-            .expect("query signal state");
-        match signal_state.response.payload {
-            ResponsePayload::SignalStateResponse(snapshot) => {
-                assert_eq!(snapshot.process_id, "signal-state");
-                if snapshot.handlers.get(&2)
-                    == Some(&SignalHandlerRegistration {
-                        action: SignalDispositionAction::User,
-                        mask: vec![15],
-                        flags: 0x1234,
-                    })
-                {
-                    break;
-                }
-            }
-            other => panic!("unexpected signal state response: {other:?}"),
-        }
-        assert!(
-            Instant::now() < signal_deadline,
-            "timed out waiting for signal state"
-        );
-        std::thread::sleep(Duration::from_millis(25));
-    }
-}
-
-fn sidecar_tracks_javascript_sigchld_and_delivers_it_on_child_exit() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("socket-state-sigchld");
-    let cwd = temp_dir("socket-state-sigchld-cwd");
-    let parent_entry = cwd.join("parent.mjs");
-    let child_entry = cwd.join("child.mjs");
-
-    write_fixture(
-        &child_entry,
-        [
-            "await new Promise((resolve) => setTimeout(resolve, 200));",
-            "console.log('child-exit');",
-        ]
-        .join("\n"),
-    );
-    write_fixture(
-        &parent_entry,
-        [
-            "import { spawn } from 'node:child_process';",
-            "let sigchldCount = 0;",
-            "process.on('SIGCHLD', () => {",
-            "  sigchldCount += 1;",
-            "  console.log(`sigchld:${sigchldCount}`);",
-            "});",
-            "console.log('sigchld-registered');",
-            "const child = spawn('node', ['./child.mjs'], { stdio: ['ignore', 'ignore', 'ignore'] });",
-            "await new Promise((resolve, reject) => {",
-            "  child.on('error', reject);",
-            "  child.on('close', (code) => {",
-            "    if (code !== 0) {",
-            "      reject(new Error(`child exit ${code}`));",
-            "      return;",
-            "    }",
-            "    resolve();",
-            "  });",
-            "});",
-            "const deadline = Date.now() + 2000;",
-            "while (sigchldCount === 0 && Date.now() < deadline) {",
-            "  await new Promise((resolve) => setTimeout(resolve, 10));",
-            "}",
-            "if (sigchldCount === 0) {",
-            "  throw new Error('SIGCHLD was not delivered');",
-            "}",
-            "console.log(`sigchld-final:${sigchldCount}`);",
-        ]
-        .join("\n"),
-    );
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-sigchld");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-    let allowed_builtins = serde_json::to_string(&[
-        "assert",
-        "buffer",
-        "child_process",
-        "console",
-        "crypto",
-        "events",
-        "fs",
-        "path",
-        "querystring",
-        "stream",
-        "string_decoder",
-        "timers",
-        "url",
-        "util",
-        "zlib",
-    ])
-    .expect("serialize builtins");
-    let (vm_id, _) = create_vm_wire_with_metadata(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-        HashMap::from([(
-            String::from("env.AGENTOS_ALLOWED_NODE_BUILTINS"),
-            allowed_builtins,
-        )]),
-    );
-
-    execute_wire(
-        &mut sidecar,
-        4,
-        &connection_id,
-        &session_id,
-        &vm_id,
-        "sigchld-parent",
-        GuestRuntimeKind::JavaScript,
-        &parent_entry,
-        Vec::new(),
-    );
-
-    let ownership = wire_vm(&connection_id, &session_id, &vm_id);
-    let deadline = Instant::now() + Duration::from_secs(10);
-    let mut signal_registered = false;
-    let mut saw_registered_output = false;
-    let mut saw_sigchld_output = false;
-    let mut saw_final_output = false;
-    let mut exit_code = None;
-
-    while exit_code.is_none() || !signal_registered {
-        let signal_state = sidecar
-            .dispatch_wire_blocking(wire_request(
-                5,
-                ownership.clone(),
-                RequestPayload::GetSignalStateRequest(GetSignalStateRequest {
-                    process_id: String::from("sigchld-parent"),
-                }),
-            ))
-            .expect("query sigchld signal state");
-        match signal_state.response.payload {
-            ResponsePayload::SignalStateResponse(snapshot) => {
-                if snapshot.handlers.get(&(libc::SIGCHLD as u32))
-                    == Some(&SignalHandlerRegistration {
-                        action: SignalDispositionAction::User,
-                        mask: vec![],
-                        flags: 0,
-                    })
-                {
-                    signal_registered = true;
-                }
-            }
-            other => panic!("unexpected signal state response: {other:?}"),
-        }
-
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll SIGCHLD process");
-        if let Some(event) = event {
-            match event.payload {
-                EventPayload::ProcessOutputEvent(output)
-                    if output.process_id == "sigchld-parent" =>
-                {
-                    let chunk = String::from_utf8_lossy(&output.chunk);
-                    saw_registered_output |= chunk.contains("sigchld-registered");
-                    saw_sigchld_output |= chunk.contains("sigchld:1");
-                    saw_final_output |= chunk.contains("sigchld-final:1");
-                }
-                EventPayload::ProcessExitedEvent(exited)
-                    if exited.process_id == "sigchld-parent" =>
-                {
-                    exit_code = Some(exited.exit_code);
-                }
-                _ => {}
-            }
-        }
-
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for SIGCHLD registration/output"
-        );
-    }
-
-    assert!(signal_registered, "SIGCHLD should be registered");
-    assert!(
-        saw_registered_output,
-        "parent should report SIGCHLD registration"
-    );
-    assert!(saw_sigchld_output, "parent should receive SIGCHLD output");
-    assert!(saw_final_output, "parent should report final SIGCHLD count");
-    assert_eq!(exit_code, Some(0));
-}
-
-#[test]
-fn socket_state_queries_suite() {
-    // Multiple libtest cases in this V8-backed integration binary still trip
-    // teardown/init crashes, so keep the coverage in one top-level suite.
-    v8_signal_delivery_routes_kill_process_and_process_kill();
-    v8_signal_stop_and_continue_updates_process_snapshot();
-    sidecar_queries_listener_udp_and_signal_state();
-    sidecar_tracks_javascript_sigchld_and_delivers_it_on_child_exit();
-}
diff --git a/crates/sidecar/tests/stdio_binary.rs b/crates/sidecar/tests/stdio_binary.rs
deleted file mode 100644
index 26d116fb2..000000000
--- a/crates/sidecar/tests/stdio_binary.rs
+++ /dev/null
@@ -1,1096 +0,0 @@
-mod support;
-
-use base64::Engine;
-use secure_exec_sidecar::wire::{self, *};
-use serde_json::json;
-use std::collections::HashMap;
-use std::fs;
-use std::io::{Read, Write};
-use std::path::Path;
-use std::process::{Child, ChildStdin, ChildStdout, Command, Stdio};
-use std::time::{Duration, Instant};
-use support::{
-    temp_dir, wire_connection, wire_permissions_allow_all, wire_request, wire_session, wire_vm,
-};
-
-const MAX_STDIO_BINARY_PROCESS_STREAM_BYTES: usize = DEFAULT_MAX_FRAME_BYTES;
-
-fn root_filesystem_descriptor() -> RootFilesystemDescriptor {
-    RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: false,
-        lowers: Vec::new(),
-        bootstrap_entries: Vec::new(),
-    }
-}
-
-fn send_request(stdin: &mut ChildStdin, codec: &WireFrameCodec, request: RequestFrame) {
-    let encoded = codec
-        .encode(&ProtocolFrame::RequestFrame(request))
-        .expect("encode request");
-    stdin.write_all(&encoded).expect("write request");
-    stdin.flush().expect("flush request");
-}
-
-fn declared_frame_payload_len(prefix: &[u8; 4], codec: &WireFrameCodec) -> usize {
-    let declared = u32::from_be_bytes(*prefix) as usize;
-    assert!(
-        declared <= codec.max_frame_bytes(),
-        "declared frame payload {declared} exceeds {} byte limit",
-        codec.max_frame_bytes()
-    );
-    declared
-}
-
-fn read_frame(stdout: &mut ChildStdout, codec: &WireFrameCodec) -> ProtocolFrame {
-    let mut prefix = [0u8; 4];
-    stdout.read_exact(&mut prefix).expect("read length prefix");
-    let declared = declared_frame_payload_len(&prefix, codec);
-    let mut bytes = Vec::with_capacity(4 + declared);
-    bytes.extend_from_slice(&prefix);
-    bytes.resize(4 + declared, 0);
-    stdout
-        .read_exact(&mut bytes[4..])
-        .expect("read framed payload");
-    codec.decode(&bytes).expect("decode frame")
-}
-
-fn recv_response(
-    stdout: &mut ChildStdout,
-    codec: &WireFrameCodec,
-    request_id: RequestId,
-    events: &mut Vec<EventPayload>,
-) -> ResponseFrame {
-    loop {
-        match read_frame(stdout, codec) {
-            ProtocolFrame::ResponseFrame(response) if response.request_id == request_id => {
-                return response;
-            }
-            ProtocolFrame::EventFrame(event) => events.push(event.payload),
-            other => panic!("unexpected frame while waiting for response {request_id}: {other:?}"),
-        }
-    }
-}
-
-fn send_sidecar_response(
-    stdin: &mut ChildStdin,
-    codec: &WireFrameCodec,
-    response: SidecarResponseFrame,
-) {
-    let encoded = codec
-        .encode(&ProtocolFrame::SidecarResponseFrame(response))
-        .expect("encode sidecar response");
-    stdin
-        .write_all(&encoded)
-        .expect("write sidecar response frame");
-    stdin.flush().expect("flush sidecar response frame");
-}
-
-fn recv_response_with_sidecar_handler(
-    stdin: &mut ChildStdin,
-    stdout: &mut ChildStdout,
-    codec: &WireFrameCodec,
-    request_id: RequestId,
-    events: &mut Vec<EventPayload>,
-    mut handle: impl FnMut(&SidecarRequestFrame) -> SidecarResponsePayload,
-) -> ResponseFrame {
-    loop {
-        match read_frame(stdout, codec) {
-            ProtocolFrame::ResponseFrame(response) if response.request_id == request_id => {
-                return response;
-            }
-            ProtocolFrame::EventFrame(event) => events.push(event.payload),
-            ProtocolFrame::SidecarRequestFrame(request) => {
-                let payload = handle(&request);
-                send_sidecar_response(
-                    stdin,
-                    codec,
-                    SidecarResponseFrame {
-                        schema: wire::protocol_schema(),
-                        request_id: request.request_id,
-                        ownership: request.ownership.clone(),
-                        payload,
-                    },
-                );
-            }
-            other => panic!("unexpected frame while waiting for response {request_id}: {other:?}"),
-        }
-    }
-}
-
-fn js_bridge_args(call: &JsBridgeCallRequest) -> serde_json::Value {
-    serde_json::from_str(&call.args).expect("parse js bridge args")
-}
-
-fn js_bridge_result(
-    call: &JsBridgeCallRequest,
-    result: Option<serde_json::Value>,
-    error: Option<String>,
-) -> SidecarResponsePayload {
-    SidecarResponsePayload::JsBridgeResultResponse(JsBridgeResultResponse {
-        call_id: call.call_id.clone(),
-        result: result.map(|value| value.to_string()),
-        error,
-    })
-}
-
-fn js_bridge_root_response(call: &JsBridgeCallRequest) -> Option<SidecarResponsePayload> {
-    let args = js_bridge_args(call);
-    if args["path"].as_str() != Some("/") {
-        return None;
-    }
-    match call.operation.as_str() {
-        "exists" => Some(js_bridge_result(
-            call,
-            Some(serde_json::Value::Bool(true)),
-            None,
-        )),
-        "stat" | "lstat" => Some(js_bridge_result(
-            call,
-            Some(json!({
-                "mode": 0o755,
-                "size": 0,
-                "blocks": 0,
-                "dev": 1,
-                "rdev": 0,
-                "isDirectory": true,
-                "isSymbolicLink": false,
-                "atimeMs": 0,
-                "mtimeMs": 0,
-                "ctimeMs": 0,
-                "birthtimeMs": 0,
-                "ino": 1,
-                "nlink": 1,
-                "uid": 0,
-                "gid": 0,
-            })),
-            None,
-        )),
-        "readDir" => Some(js_bridge_result(call, Some(json!([])), None)),
-        "readDirWithTypes" => Some(js_bridge_result(call, Some(json!([])), None)),
-        "realpath" => Some(js_bridge_result(call, Some(json!("/")), None)),
-        _ => None,
-    }
-}
-
-fn append_process_stream_chunk(stream: &mut Vec<u8>, chunk: &[u8], stream_name: &str) {
-    assert!(
-        stream.len().saturating_add(chunk.len()) <= MAX_STDIO_BINARY_PROCESS_STREAM_BYTES,
-        "{stream_name} exceeded {MAX_STDIO_BINARY_PROCESS_STREAM_BYTES} bytes"
-    );
-    stream.extend_from_slice(chunk);
-}
-
-fn process_stream_to_string(stream: &[u8]) -> String {
-    String::from_utf8_lossy(stream).into_owned()
-}
-
-fn collect_process_events(
-    stdout: &mut ChildStdout,
-    codec: &WireFrameCodec,
-    process_id: &str,
-) -> (String, String, i32) {
-    let deadline = Instant::now() + Duration::from_secs(10);
-    let mut stdout_text = Vec::new();
-    let mut stderr_text = Vec::new();
-
-    loop {
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for process events"
-        );
-        match read_frame(stdout, codec) {
-            ProtocolFrame::EventFrame(event) => match event.payload {
-                EventPayload::ProcessOutputEvent(output) if output.process_id == process_id => {
-                    match output.channel {
-                        StreamChannel::Stdout => {
-                            append_process_stream_chunk(&mut stdout_text, &output.chunk, "stdout");
-                        }
-                        StreamChannel::Stderr => {
-                            append_process_stream_chunk(&mut stderr_text, &output.chunk, "stderr");
-                        }
-                    }
-                }
-                EventPayload::ProcessExitedEvent(exited) if exited.process_id == process_id => {
-                    return (
-                        process_stream_to_string(&stdout_text),
-                        process_stream_to_string(&stderr_text),
-                        exited.exit_code,
-                    );
-                }
-                _ => {}
-            },
-            other => panic!("unexpected frame while waiting for process events: {other:?}"),
-        }
-    }
-}
-
-fn collect_vm_lifecycle_states(
-    stdout: &mut ChildStdout,
-    codec: &WireFrameCodec,
-    count: usize,
-) -> Vec<VmLifecycleState> {
-    let deadline = Instant::now() + Duration::from_secs(2);
-    let mut states = Vec::new();
-
-    while states.len() < count {
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for VM lifecycle events"
-        );
-        match read_frame(stdout, codec) {
-            ProtocolFrame::EventFrame(event) => {
-                if let EventPayload::VmLifecycleEvent(lifecycle) = event.payload {
-                    states.push(lifecycle.state);
-                }
-            }
-            other => panic!("unexpected frame while waiting for lifecycle events: {other:?}"),
-        }
-    }
-
-    states
-}
-
-fn spawn_sidecar_binary() -> (Child, ChildStdin, ChildStdout) {
-    let mut child = Command::new(env!("CARGO_BIN_EXE_secure-exec-sidecar"))
-        .stdin(Stdio::piped())
-        .stdout(Stdio::piped())
-        .stderr(Stdio::piped())
-        .spawn()
-        .expect("spawn native sidecar binary");
-    let stdin = child.stdin.take().expect("capture sidecar stdin");
-    let stdout = child.stdout.take().expect("capture sidecar stdout");
-    (child, stdin, stdout)
-}
-
-fn write_script(root: &Path) {
-    fs::write(root.join("entry.mjs"), "console.log('stdio-binary-ok');\n")
-        .expect("write test entrypoint");
-}
-
-#[test]
-fn stdio_binary_test_helpers_bound_frame_and_stream_buffers() {
-    let codec = WireFrameCodec::default();
-    let max_prefix = (codec.max_frame_bytes() as u32).to_be_bytes();
-    assert_eq!(
-        declared_frame_payload_len(&max_prefix, &codec),
-        codec.max_frame_bytes()
-    );
-
-    let oversized_prefix = ((codec.max_frame_bytes() + 1) as u32).to_be_bytes();
-    let oversized_frame = std::panic::catch_unwind(|| {
-        declared_frame_payload_len(&oversized_prefix, &codec);
-    });
-    assert!(
-        oversized_frame.is_err(),
-        "oversized frame payload should fail before allocation"
-    );
-
-    let mut stream = Vec::new();
-    append_process_stream_chunk(&mut stream, &[b'a'; 16], "stdout");
-    assert_eq!(stream.len(), 16);
-
-    let oversized_stream = std::panic::catch_unwind(|| {
-        let mut stream = vec![b'a'; MAX_STDIO_BINARY_PROCESS_STREAM_BYTES];
-        append_process_stream_chunk(&mut stream, b"!", "stdout");
-    });
-    assert!(
-        oversized_stream.is_err(),
-        "oversized process stream should fail before appending"
-    );
-}
-
-#[test]
-fn native_sidecar_binary_runs_the_framed_protocol_over_stdio() {
-    let temp = temp_dir("stdio-binary");
-    write_script(&temp);
-
-    let (mut child, mut stdin, mut stdout) = spawn_sidecar_binary();
-    let codec = WireFrameCodec::default();
-    let mut buffered_events = Vec::new();
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            1,
-            wire_connection("client-hint"),
-            RequestPayload::AuthenticateRequest(AuthenticateRequest {
-                client_name: String::from("stdio-test"),
-                auth_token: String::from("stdio-test-token"),
-                protocol_version: wire::PROTOCOL_VERSION,
-                bridge_version: secure_exec_bridge::bridge_contract().version,
-            }),
-        ),
-    );
-    let authenticated = recv_response(&mut stdout, &codec, 1, &mut buffered_events);
-    let connection_id = match authenticated.payload {
-        ResponsePayload::AuthenticatedResponse(response) => response.connection_id,
-        other => panic!("unexpected authenticate response: {other:?}"),
-    };
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            2,
-            wire_connection(&connection_id),
-            RequestPayload::OpenSessionRequest(OpenSessionRequest {
-                placement: SidecarPlacement::SidecarPlacementShared(SidecarPlacementShared {
-                    pool: None,
-                }),
-                metadata: HashMap::new(),
-            }),
-        ),
-    );
-    let session_opened = recv_response(&mut stdout, &codec, 2, &mut buffered_events);
-    let session_id = match session_opened.payload {
-        ResponsePayload::SessionOpenedResponse(response) => response.session_id,
-        other => panic!("unexpected open-session response: {other:?}"),
-    };
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            3,
-            wire_session(&connection_id, &session_id),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                GuestRuntimeKind::JavaScript,
-                HashMap::from([(String::from("cwd"), temp.to_string_lossy().into_owned())]),
-                root_filesystem_descriptor(),
-                Some(wire_permissions_allow_all()),
-            )),
-        ),
-    );
-    let created = recv_response(&mut stdout, &codec, 3, &mut buffered_events);
-    let vm_id = match created.payload {
-        ResponsePayload::VmCreatedResponse(response) => response.vm_id,
-        other => panic!("unexpected create-vm response: {other:?}"),
-    };
-    let lifecycle_states = collect_vm_lifecycle_states(&mut stdout, &codec, 2);
-    assert_eq!(
-        lifecycle_states,
-        vec![VmLifecycleState::Creating, VmLifecycleState::Ready,]
-    );
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::Mkdir,
-                path: String::from("/workspace"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: true,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ),
-    );
-    let mkdir = recv_response(&mut stdout, &codec, 4, &mut buffered_events);
-    match mkdir.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert_eq!(response.path, "/workspace");
-            assert_eq!(response.operation, GuestFilesystemOperation::Mkdir);
-        }
-        other => panic!("unexpected mkdir response: {other:?}"),
-    }
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::WriteFile,
-                path: String::from("/workspace/note.txt"),
-                destination_path: None,
-                target: None,
-                content: Some(String::from("stdio-sidecar-fs")),
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ),
-    );
-    let write = recv_response(&mut stdout, &codec, 5, &mut buffered_events);
-    match write.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert_eq!(response.path, "/workspace/note.txt");
-            assert_eq!(response.operation, GuestFilesystemOperation::WriteFile);
-        }
-        other => panic!("unexpected write response: {other:?}"),
-    }
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            6,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::ReadFile,
-                path: String::from("/workspace/note.txt"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ),
-    );
-    let read = recv_response(&mut stdout, &codec, 6, &mut buffered_events);
-    match read.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert_eq!(response.content.as_deref(), Some("stdio-sidecar-fs"));
-        }
-        other => panic!("unexpected read response: {other:?}"),
-    }
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            7,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::Symlink,
-                path: String::from("/workspace/link.txt"),
-                destination_path: None,
-                target: Some(String::from("/workspace/note.txt")),
-                content: None,
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ),
-    );
-    let symlink = recv_response(&mut stdout, &codec, 7, &mut buffered_events);
-    match symlink.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert_eq!(response.operation, GuestFilesystemOperation::Symlink);
-            assert_eq!(response.target.as_deref(), Some("/workspace/note.txt"));
-        }
-        other => panic!("unexpected symlink response: {other:?}"),
-    }
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            8,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::Realpath,
-                path: String::from("/workspace/link.txt"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ),
-    );
-    let realpath = recv_response(&mut stdout, &codec, 8, &mut buffered_events);
-    match realpath.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert_eq!(response.operation, GuestFilesystemOperation::Realpath);
-            assert_eq!(response.target.as_deref(), Some("/workspace/note.txt"));
-        }
-        other => panic!("unexpected realpath response: {other:?}"),
-    }
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            9,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::Link,
-                path: String::from("/workspace/note.txt"),
-                destination_path: Some(String::from("/workspace/hard.txt")),
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ),
-    );
-    let link = recv_response(&mut stdout, &codec, 9, &mut buffered_events);
-    match link.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert_eq!(response.operation, GuestFilesystemOperation::Link);
-            assert_eq!(response.target.as_deref(), Some("/workspace/hard.txt"));
-        }
-        other => panic!("unexpected link response: {other:?}"),
-    }
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            10,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::Truncate,
-                path: String::from("/workspace/hard.txt"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: Some(5),
-                offset: None,
-            }),
-        ),
-    );
-    let truncate = recv_response(&mut stdout, &codec, 10, &mut buffered_events);
-    match truncate.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert_eq!(response.operation, GuestFilesystemOperation::Truncate);
-            assert_eq!(response.path, "/workspace/hard.txt");
-        }
-        other => panic!("unexpected truncate response: {other:?}"),
-    }
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            11,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::Utimes,
-                path: String::from("/workspace/note.txt"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: Some(1_700_000_000_000),
-                mtime_ms: Some(1_710_000_000_000),
-                len: None,
-                offset: None,
-            }),
-        ),
-    );
-    let utimes = recv_response(&mut stdout, &codec, 11, &mut buffered_events);
-    match utimes.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert_eq!(response.operation, GuestFilesystemOperation::Utimes);
-            assert_eq!(response.path, "/workspace/note.txt");
-        }
-        other => panic!("unexpected utimes response: {other:?}"),
-    }
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            12,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::Stat,
-                path: String::from("/workspace/note.txt"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ),
-    );
-    let stat = recv_response(&mut stdout, &codec, 12, &mut buffered_events);
-    match stat.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            let stat = response.stat.expect("stat payload");
-            assert_eq!(stat.size, 5);
-            assert_eq!(stat.atime_ms, 1_700_000_000_000);
-            assert_eq!(stat.mtime_ms, 1_710_000_000_000);
-            assert!(stat.nlink >= 2);
-        }
-        other => panic!("unexpected stat response: {other:?}"),
-    }
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            13,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::SnapshotRootFilesystemRequest,
-        ),
-    );
-    let snapshot = recv_response(&mut stdout, &codec, 13, &mut buffered_events);
-    match snapshot.payload {
-        ResponsePayload::RootFilesystemSnapshotResponse(response) => {
-            assert!(response
-                .entries
-                .iter()
-                .any(|entry| entry.path == "/workspace/note.txt"));
-        }
-        other => panic!("unexpected snapshot response: {other:?}"),
-    }
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            14,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ExecuteRequest(ExecuteRequest {
-                process_id: String::from("proc-1"),
-                command: None,
-                runtime: Some(GuestRuntimeKind::JavaScript),
-                entrypoint: Some(String::from("./entry.mjs")),
-                args: Vec::new(),
-                env: HashMap::new(),
-                cwd: None,
-                wasm_permission_tier: None,
-            }),
-        ),
-    );
-    let started = recv_response(&mut stdout, &codec, 14, &mut buffered_events);
-    match started.payload {
-        ResponsePayload::ProcessStartedResponse(response) => {
-            assert_eq!(response.process_id, "proc-1");
-        }
-        other => panic!("unexpected execute response: {other:?}"),
-    }
-
-    let (stdout_text, stderr_text, exit_code) =
-        collect_process_events(&mut stdout, &codec, "proc-1");
-    assert!(
-        stdout_text.contains("stdio-binary-ok"),
-        "stdout was {stdout_text:?}"
-    );
-    assert_eq!(stderr_text, "");
-    assert_eq!(exit_code, 0);
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            15,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::DisposeVmRequest(DisposeVmRequest {
-                reason: DisposeReason::Requested,
-            }),
-        ),
-    );
-    let disposed = recv_response(&mut stdout, &codec, 15, &mut buffered_events);
-    match disposed.payload {
-        ResponsePayload::VmDisposedResponse(response) => assert_eq!(response.vm_id, vm_id),
-        other => panic!("unexpected dispose response: {other:?}"),
-    }
-
-    drop(stdin);
-    let status = child.wait().expect("wait for sidecar child");
-    assert!(status.success(), "sidecar binary exited with {status}");
-}
-
-#[test]
-fn native_sidecar_binary_supports_js_bridge_host_filesystem_access() {
-    let host_root = temp_dir("stdio-binary-host-bridge");
-    fs::write(host_root.join("existing.txt"), "host-bridge-ok").expect("seed host file");
-
-    let (mut child, mut stdin, mut stdout) = spawn_sidecar_binary();
-    let codec = WireFrameCodec::default();
-    let mut buffered_events = Vec::new();
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            1,
-            wire_connection("client-hint"),
-            RequestPayload::AuthenticateRequest(AuthenticateRequest {
-                client_name: String::from("stdio-test"),
-                auth_token: String::from("stdio-test-token"),
-                protocol_version: wire::PROTOCOL_VERSION,
-                bridge_version: secure_exec_bridge::bridge_contract().version,
-            }),
-        ),
-    );
-    let authenticated = recv_response(&mut stdout, &codec, 1, &mut buffered_events);
-    let connection_id = match authenticated.payload {
-        ResponsePayload::AuthenticatedResponse(response) => response.connection_id,
-        other => panic!("unexpected authenticate response: {other:?}"),
-    };
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            2,
-            wire_connection(&connection_id),
-            RequestPayload::OpenSessionRequest(OpenSessionRequest {
-                placement: SidecarPlacement::SidecarPlacementShared(SidecarPlacementShared {
-                    pool: None,
-                }),
-                metadata: HashMap::new(),
-            }),
-        ),
-    );
-    let session_opened = recv_response(&mut stdout, &codec, 2, &mut buffered_events);
-    let session_id = match session_opened.payload {
-        ResponsePayload::SessionOpenedResponse(response) => response.session_id,
-        other => panic!("unexpected open-session response: {other:?}"),
-    };
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            3,
-            wire_session(&connection_id, &session_id),
-            RequestPayload::CreateVmRequest(CreateVmRequest::legacy_test_config(
-                GuestRuntimeKind::JavaScript,
-                HashMap::new(),
-                root_filesystem_descriptor(),
-                Some(wire_permissions_allow_all()),
-            )),
-        ),
-    );
-    let created = recv_response(&mut stdout, &codec, 3, &mut buffered_events);
-    let vm_id = match created.payload {
-        ResponsePayload::VmCreatedResponse(response) => response.vm_id,
-        other => panic!("unexpected create-vm response: {other:?}"),
-    };
-    let lifecycle_states = collect_vm_lifecycle_states(&mut stdout, &codec, 2);
-    assert_eq!(
-        lifecycle_states,
-        vec![VmLifecycleState::Creating, VmLifecycleState::Ready,]
-    );
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::ConfigureVmRequest(ConfigureVmRequest {
-                mounts: vec![MountDescriptor {
-                    guest_path: String::from("/workspace"),
-                    read_only: false,
-                    plugin: MountPluginDescriptor {
-                        id: String::from("js_bridge"),
-                        config: json!({ "mountId": "mount-1" }).to_string(),
-                    },
-                }],
-                software: Vec::new(),
-                permissions: Some(wire_permissions_allow_all()),
-                module_access_cwd: None,
-                instructions: Vec::new(),
-                projected_modules: Vec::new(),
-                command_permissions: HashMap::new(),
-                loopback_exempt_ports: Vec::new(),
-                packages: Vec::new(),
-                packages_mount_at: String::new(),
-            bootstrap_commands: Vec::new(),
-            tool_shim_commands: Vec::new(),
-            }),
-        ),
-    );
-    let configured = recv_response(&mut stdout, &codec, 4, &mut buffered_events);
-    match configured.payload {
-        ResponsePayload::VmConfiguredResponse(response) => {
-            // 1 = just the client mount. With no packages configured there are no
-            // granular /opt/agentos leaf mounts (one tar/bin/current mount is added
-            // per package, not a single always-present staging mount).
-            assert_eq!(response.applied_mounts, 1);
-            assert_eq!(response.applied_software, 0);
-        }
-        other => panic!("unexpected configure response: {other:?}"),
-    }
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            5,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::ReadFile,
-                path: String::from("/workspace/existing.txt"),
-                destination_path: None,
-                target: None,
-                content: None,
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ),
-    );
-    let read = recv_response_with_sidecar_handler(
-        &mut stdin,
-        &mut stdout,
-        &codec,
-        5,
-        &mut buffered_events,
-        |request| {
-            assert_eq!(
-                request.ownership,
-                wire_vm(&connection_id, &session_id, &vm_id)
-            );
-            let SidecarRequestPayload::JsBridgeCallRequest(call) = &request.payload else {
-                panic!("expected js_bridge_call payload");
-            };
-            assert_eq!(call.mount_id, "mount-1");
-            if let Some(response) = js_bridge_root_response(call) {
-                return response;
-            }
-            let args = js_bridge_args(call);
-            match (
-                call.operation.as_str(),
-                args["path"].as_str().expect("read path"),
-            ) {
-                ("exists", "/existing.txt") => {
-                    js_bridge_result(call, Some(serde_json::Value::Bool(true)), None)
-                }
-                ("realpath", "/existing.txt") => {
-                    js_bridge_result(call, Some(json!("/existing.txt")), None)
-                }
-                ("readFile", "/existing.txt") => js_bridge_result(
-                    call,
-                    Some(serde_json::Value::String(
-                        base64::engine::general_purpose::STANDARD.encode(
-                            fs::read(host_root.join("existing.txt")).expect("read host file"),
-                        ),
-                    )),
-                    None,
-                ),
-                other => panic!("unexpected js bridge read callback: {other:?}"),
-            }
-        },
-    );
-    match read.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert_eq!(response.content.as_deref(), Some("host-bridge-ok"));
-        }
-        other => panic!("unexpected read response: {other:?}"),
-    }
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            6,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::GuestFilesystemCallRequest(GuestFilesystemCallRequest {
-                operation: GuestFilesystemOperation::WriteFile,
-                path: String::from("/workspace/generated.txt"),
-                destination_path: None,
-                target: None,
-                content: Some(String::from("from-js-bridge")),
-                encoding: None,
-                recursive: false,
-            max_depth: None,
-                mode: None,
-                uid: None,
-                gid: None,
-                atime_ms: None,
-                mtime_ms: None,
-                len: None,
-                offset: None,
-            }),
-        ),
-    );
-    let write = recv_response_with_sidecar_handler(
-        &mut stdin,
-        &mut stdout,
-        &codec,
-        6,
-        &mut buffered_events,
-        |request| {
-            let SidecarRequestPayload::JsBridgeCallRequest(call) = &request.payload else {
-                panic!("expected js_bridge_call payload");
-            };
-            assert_eq!(call.mount_id, "mount-1");
-            if let Some(response) = js_bridge_root_response(call) {
-                return response;
-            }
-            let args = js_bridge_args(call);
-            if args["path"].as_str() == Some("/generated.txt") {
-                let generated_path = host_root.join("generated.txt");
-                match call.operation.as_str() {
-                    "exists" => {
-                        return js_bridge_result(
-                            call,
-                            Some(serde_json::Value::Bool(generated_path.exists())),
-                            None,
-                        );
-                    }
-                    "stat" | "lstat" => {
-                        if let Ok(metadata) = fs::metadata(&generated_path) {
-                            return js_bridge_result(
-                                call,
-                                Some(json!({
-                                    "mode": 0o644,
-                                    "size": metadata.len(),
-                                    "blocks": 0,
-                                    "dev": 1,
-                                    "rdev": 0,
-                                    "isDirectory": false,
-                                    "isSymbolicLink": false,
-                                    "atimeMs": 0,
-                                    "mtimeMs": 0,
-                                    "ctimeMs": 0,
-                                    "birthtimeMs": 0,
-                                    "ino": 2,
-                                    "nlink": 1,
-                                    "uid": 0,
-                                    "gid": 0,
-                                })),
-                                None,
-                            );
-                        }
-                        return js_bridge_result(call, None, Some(String::from("not found")));
-                    }
-                    "realpath" => {
-                        return js_bridge_result(call, None, Some(String::from("not found")));
-                    }
-                    _ => {}
-                }
-            }
-            match (
-                call.operation.as_str(),
-                args["path"].as_str().expect("write path"),
-            ) {
-                ("realpath", "/generated.txt") => {
-                    js_bridge_result(call, None, Some(String::from("not found")))
-                }
-                ("writeFile", "/generated.txt") => {
-                    let content = base64::engine::general_purpose::STANDARD
-                        .decode(args["content"].as_str().expect("write content"))
-                        .expect("decode js bridge write");
-                    fs::write(host_root.join("generated.txt"), content).expect("write host file");
-                    js_bridge_result(call, None, None)
-                }
-                other => panic!("unexpected js bridge write callback: {other:?}"),
-            }
-        },
-    );
-    match write.payload {
-        ResponsePayload::GuestFilesystemResultResponse(response) => {
-            assert_eq!(response.operation, GuestFilesystemOperation::WriteFile);
-        }
-        other => panic!("unexpected write response: {other:?}"),
-    }
-    assert_eq!(
-        fs::read_to_string(host_root.join("generated.txt")).expect("read generated host file"),
-        "from-js-bridge"
-    );
-
-    send_request(
-        &mut stdin,
-        &codec,
-        wire_request(
-            7,
-            wire_vm(&connection_id, &session_id, &vm_id),
-            RequestPayload::DisposeVmRequest(DisposeVmRequest {
-                reason: DisposeReason::Requested,
-            }),
-        ),
-    );
-    let disposed = recv_response_with_sidecar_handler(
-        &mut stdin,
-        &mut stdout,
-        &codec,
-        7,
-        &mut buffered_events,
-        |request| {
-            let SidecarRequestPayload::JsBridgeCallRequest(call) = &request.payload else {
-                panic!("expected js_bridge_call payload during dispose");
-            };
-            assert_eq!(call.mount_id, "mount-1");
-            js_bridge_root_response(call)
-                .unwrap_or_else(|| panic!("unexpected js bridge dispose callback: {call:?}"))
-        },
-    );
-    match disposed.payload {
-        ResponsePayload::VmDisposedResponse(response) => assert_eq!(response.vm_id, vm_id),
-        other => panic!("unexpected dispose response: {other:?}"),
-    }
-
-    drop(stdin);
-    let status = child.wait().expect("wait for sidecar child");
-    assert!(status.success(), "sidecar binary exited with {status}");
-}
diff --git a/crates/sidecar/tests/support/mod.rs b/crates/sidecar/tests/support/mod.rs
deleted file mode 100644
index a329769fb..000000000
--- a/crates/sidecar/tests/support/mod.rs
+++ /dev/null
@@ -1,715 +0,0 @@
-#![allow(dead_code)]
-
-#[path = "../../../bridge/tests/support.rs"]
-mod bridge_support;
-
-pub use bridge_support::RecordingBridge;
-use secure_exec_sidecar::protocol::{
-    DisposeReason, EventFrame, GuestRuntimeKind, OwnershipScope, RequestFrame, RequestId,
-    RequestPayload, ResponseFrame,
-};
-use secure_exec_sidecar::{DispatchResult, NativeSidecar, NativeSidecarConfig};
-use std::collections::{BTreeMap, HashMap};
-use std::fs;
-use std::path::{Path, PathBuf};
-use std::process::Command;
-use std::time::{Duration, Instant, SystemTime, UNIX_EPOCH};
-
-pub const TEST_AUTH_TOKEN: &str = "sidecar-test-token";
-const MAX_COLLECTED_PROCESS_STREAM_BYTES: usize = 1024 * 1024;
-
-pub fn acquire_sidecar_runtime_test_lock() {
-    // No-op under cargo-nextest: each test runs in its own process, so the
-    // process-global V8 platform, env, and compile cache are already isolated.
-    // Previously an exclusive flock serialized runtime tests across binaries. See
-    // CLAUDE.md > Testing.
-}
-
-pub fn assert_node_available() {
-    let output = Command::new("node")
-        .arg("--version")
-        .output()
-        .expect("spawn node --version");
-    assert!(
-        output.status.success(),
-        "node must be available for native sidecar execution tests"
-    );
-}
-
-pub fn temp_dir(name: &str) -> PathBuf {
-    let root = std::env::temp_dir().join(format!(
-        "secure-exec-sidecar-{name}-{}",
-        SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("system time before unix epoch")
-            .as_nanos()
-    ));
-    fs::create_dir_all(&root).expect("create temp dir");
-    root
-}
-
-pub fn new_sidecar(name: &str) -> NativeSidecar<RecordingBridge> {
-    new_sidecar_with_auth_token(name, TEST_AUTH_TOKEN)
-}
-
-pub fn new_sidecar_with_auth_token(
-    name: &str,
-    expected_auth_token: &str,
-) -> NativeSidecar<RecordingBridge> {
-    acquire_sidecar_runtime_test_lock();
-    let root = temp_dir(name);
-    NativeSidecar::with_config(
-        RecordingBridge::default(),
-        NativeSidecarConfig {
-            sidecar_id: format!("sidecar-{name}"),
-            compile_cache_root: Some(root.join("cache")),
-            expected_auth_token: Some(expected_auth_token.to_owned()),
-            ..NativeSidecarConfig::default()
-        },
-    )
-    .expect("create native sidecar")
-}
-
-pub fn request(id: RequestId, ownership: OwnershipScope, payload: RequestPayload) -> RequestFrame {
-    RequestFrame::new(id, ownership, payload)
-}
-
-pub fn wire_request(
-    id: secure_exec_sidecar::wire::RequestId,
-    ownership: secure_exec_sidecar::wire::OwnershipScope,
-    payload: secure_exec_sidecar::wire::RequestPayload,
-) -> secure_exec_sidecar::wire::RequestFrame {
-    secure_exec_sidecar::wire::RequestFrame {
-        schema: secure_exec_sidecar::wire::protocol_schema(),
-        request_id: id,
-        ownership,
-        payload,
-    }
-}
-
-pub fn wire_connection(connection_id: &str) -> secure_exec_sidecar::wire::OwnershipScope {
-    secure_exec_sidecar::wire::OwnershipScope::ConnectionOwnership(
-        secure_exec_sidecar::wire::ConnectionOwnership {
-            connection_id: connection_id.to_owned(),
-        },
-    )
-}
-
-pub fn wire_session(
-    connection_id: &str,
-    session_id: &str,
-) -> secure_exec_sidecar::wire::OwnershipScope {
-    secure_exec_sidecar::wire::OwnershipScope::SessionOwnership(
-        secure_exec_sidecar::wire::SessionOwnership {
-            connection_id: connection_id.to_owned(),
-            session_id: session_id.to_owned(),
-        },
-    )
-}
-
-pub fn wire_vm(
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-) -> secure_exec_sidecar::wire::OwnershipScope {
-    secure_exec_sidecar::wire::OwnershipScope::VmOwnership(secure_exec_sidecar::wire::VmOwnership {
-        connection_id: connection_id.to_owned(),
-        session_id: session_id.to_owned(),
-        vm_id: vm_id.to_owned(),
-    })
-}
-
-pub fn wire_permissions_allow_all() -> secure_exec_sidecar::wire::PermissionsPolicy {
-    secure_exec_sidecar::wire::PermissionsPolicy {
-        fs: Some(
-            secure_exec_sidecar::wire::FsPermissionScope::PermissionMode(
-                secure_exec_sidecar::wire::PermissionMode::Allow,
-            ),
-        ),
-        network: Some(
-            secure_exec_sidecar::wire::PatternPermissionScope::PermissionMode(
-                secure_exec_sidecar::wire::PermissionMode::Allow,
-            ),
-        ),
-        child_process: Some(
-            secure_exec_sidecar::wire::PatternPermissionScope::PermissionMode(
-                secure_exec_sidecar::wire::PermissionMode::Allow,
-            ),
-        ),
-        process: Some(
-            secure_exec_sidecar::wire::PatternPermissionScope::PermissionMode(
-                secure_exec_sidecar::wire::PermissionMode::Allow,
-            ),
-        ),
-        env: Some(
-            secure_exec_sidecar::wire::PatternPermissionScope::PermissionMode(
-                secure_exec_sidecar::wire::PermissionMode::Allow,
-            ),
-        ),
-        binding: Some(
-            secure_exec_sidecar::wire::PatternPermissionScope::PermissionMode(
-                secure_exec_sidecar::wire::PermissionMode::Allow,
-            ),
-        ),
-    }
-}
-
-pub fn authenticate_wire(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    connection_hint: &str,
-) -> String {
-    let result = authenticate_wire_with_token(sidecar, 1, connection_hint, TEST_AUTH_TOKEN);
-
-    match result.response.payload {
-        secure_exec_sidecar::wire::ResponsePayload::AuthenticatedResponse(response) => {
-            assert_eq!(
-                result.response.ownership,
-                wire_connection(&response.connection_id)
-            );
-            response.connection_id
-        }
-        other => panic!("unexpected wire auth response: {other:?}"),
-    }
-}
-
-pub fn authenticate_wire_with_token(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    request_id: secure_exec_sidecar::wire::RequestId,
-    connection_hint: &str,
-    auth_token: &str,
-) -> secure_exec_sidecar::wire::WireDispatchResult {
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_connection(connection_hint),
-            secure_exec_sidecar::wire::RequestPayload::AuthenticateRequest(
-                secure_exec_sidecar::wire::AuthenticateRequest {
-                    client_name: String::from("sidecar-tests"),
-                    auth_token: auth_token.to_owned(),
-                    protocol_version: secure_exec_sidecar::wire::PROTOCOL_VERSION,
-                    bridge_version: secure_exec_bridge::bridge_contract().version,
-                },
-            ),
-        ))
-        .expect("authenticate connection through wire")
-}
-
-pub fn open_session_wire(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    request_id: secure_exec_sidecar::wire::RequestId,
-    connection_id: &str,
-) -> String {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_connection(connection_id),
-            secure_exec_sidecar::wire::RequestPayload::OpenSessionRequest(
-                secure_exec_sidecar::wire::OpenSessionRequest {
-                    placement: secure_exec_sidecar::wire::SidecarPlacement::SidecarPlacementShared(
-                        secure_exec_sidecar::wire::SidecarPlacementShared { pool: None },
-                    ),
-                    metadata: HashMap::new(),
-                },
-            ),
-        ))
-        .expect("open sidecar session through wire");
-
-    match result.response.payload {
-        secure_exec_sidecar::wire::ResponsePayload::SessionOpenedResponse(response) => {
-            response.session_id
-        }
-        other => panic!("unexpected wire session response: {other:?}"),
-    }
-}
-
-pub fn create_vm_wire(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    request_id: secure_exec_sidecar::wire::RequestId,
-    connection_id: &str,
-    session_id: &str,
-    runtime: secure_exec_sidecar::wire::GuestRuntimeKind,
-    cwd: &Path,
-) -> (String, secure_exec_sidecar::wire::WireDispatchResult) {
-    create_vm_wire_with_metadata(
-        sidecar,
-        request_id,
-        connection_id,
-        session_id,
-        runtime,
-        cwd,
-        HashMap::new(),
-    )
-}
-
-pub fn create_vm_wire_with_metadata(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    request_id: secure_exec_sidecar::wire::RequestId,
-    connection_id: &str,
-    session_id: &str,
-    runtime: secure_exec_sidecar::wire::GuestRuntimeKind,
-    cwd: &Path,
-    mut metadata: HashMap<String, String>,
-) -> (String, secure_exec_sidecar::wire::WireDispatchResult) {
-    metadata
-        .entry(String::from("cwd"))
-        .or_insert_with(|| cwd.to_string_lossy().into_owned());
-
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_session(connection_id, session_id),
-            secure_exec_sidecar::wire::RequestPayload::CreateVmRequest(
-                secure_exec_sidecar::wire::CreateVmRequest::legacy_test_config(
-                    runtime,
-                    metadata,
-                    secure_exec_sidecar::wire::RootFilesystemDescriptor {
-                        mode: secure_exec_sidecar::wire::RootFilesystemMode::Ephemeral,
-                        disable_default_base_layer: false,
-                        lowers: Vec::new(),
-                        bootstrap_entries: Vec::new(),
-                    },
-                    Some(wire_permissions_allow_all()),
-                ),
-            ),
-        ))
-        .expect("create sidecar VM through wire");
-
-    let vm_id = match &result.response.payload {
-        secure_exec_sidecar::wire::ResponsePayload::VmCreatedResponse(response) => {
-            response.vm_id.clone()
-        }
-        other => panic!("unexpected wire vm create response: {other:?}"),
-    };
-    (vm_id, result)
-}
-
-#[allow(clippy::too_many_arguments)]
-pub fn execute_wire(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    request_id: secure_exec_sidecar::wire::RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    runtime: secure_exec_sidecar::wire::GuestRuntimeKind,
-    entrypoint: &Path,
-    args: Vec<String>,
-) {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            request_id,
-            wire_vm(connection_id, session_id, vm_id),
-            secure_exec_sidecar::wire::RequestPayload::ExecuteRequest(
-                secure_exec_sidecar::wire::ExecuteRequest {
-                    process_id: process_id.to_owned(),
-                    command: None,
-                    runtime: Some(runtime),
-                    entrypoint: Some(entrypoint.to_string_lossy().into_owned()),
-                    args,
-                    env: HashMap::new(),
-                    cwd: None,
-                    wasm_permission_tier: None,
-                },
-            ),
-        ))
-        .expect("start sidecar execution through wire");
-
-    match result.response.payload {
-        secure_exec_sidecar::wire::ResponsePayload::ProcessStartedResponse(response) => {
-            assert_eq!(response.process_id, process_id);
-        }
-        other => panic!("unexpected wire execute response: {other:?}"),
-    }
-}
-
-pub fn collect_process_output_wire_with_timeout(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    timeout: Duration,
-) -> (String, String, i32) {
-    let ownership = wire_session(connection_id, session_id);
-    let deadline = Instant::now() + timeout;
-    let mut stdout = Vec::new();
-    let mut stderr = Vec::new();
-    let mut exit = None;
-
-    loop {
-        let event = sidecar
-            .poll_event_wire_blocking(&ownership, Duration::from_millis(100))
-            .expect("poll sidecar wire event");
-        if let Some(event) = event {
-            assert_eq!(event.ownership, wire_vm(connection_id, session_id, vm_id));
-
-            match event.payload {
-                secure_exec_sidecar::wire::EventPayload::ProcessOutputEvent(output) => {
-                    if output.process_id == process_id {
-                        match output.channel {
-                            secure_exec_sidecar::wire::StreamChannel::Stdout => {
-                                append_process_stream_chunk(
-                                    &mut stdout,
-                                    &output.chunk,
-                                    process_id,
-                                    "stdout",
-                                );
-                            }
-                            secure_exec_sidecar::wire::StreamChannel::Stderr => {
-                                append_process_stream_chunk(
-                                    &mut stderr,
-                                    &output.chunk,
-                                    process_id,
-                                    "stderr",
-                                );
-                            }
-                        }
-                    }
-                }
-                secure_exec_sidecar::wire::EventPayload::ProcessExitedEvent(exited)
-                    if exited.process_id == process_id =>
-                {
-                    exit = Some((exited.exit_code, Instant::now()));
-                }
-                secure_exec_sidecar::wire::EventPayload::ProcessExitedEvent(_)
-                | secure_exec_sidecar::wire::EventPayload::VmLifecycleEvent(_)
-                | secure_exec_sidecar::wire::EventPayload::StructuredEvent(_)
-                | secure_exec_sidecar::wire::EventPayload::ExtEnvelope(_) => {}
-            }
-        }
-
-        if let Some((exit_code, seen_at)) = exit {
-            if Instant::now().duration_since(seen_at) >= Duration::from_millis(200) {
-                return (
-                    process_stream_to_string(&stdout),
-                    process_stream_to_string(&stderr),
-                    exit_code,
-                );
-            }
-        }
-
-        assert!(
-            Instant::now() < deadline,
-            "timed out waiting for wire process events; stdout bytes: {}; stderr bytes: {}",
-            stdout.len(),
-            stderr.len()
-        );
-    }
-}
-
-pub fn authenticate(sidecar: &mut NativeSidecar<RecordingBridge>, connection_hint: &str) -> String {
-    authenticate_wire(sidecar, connection_hint)
-}
-
-pub fn authenticate_with_token(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    request_id: RequestId,
-    connection_hint: &str,
-    auth_token: &str,
-) -> DispatchResult {
-    let result = authenticate_wire_with_token(sidecar, request_id, connection_hint, auth_token);
-    dispatch_result_from_wire(result)
-}
-
-pub fn open_session(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-) -> String {
-    open_session_wire(sidecar, request_id, connection_id)
-}
-
-pub fn create_vm(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    runtime: GuestRuntimeKind,
-    cwd: &Path,
-) -> (String, DispatchResult) {
-    create_vm_with_metadata(
-        sidecar,
-        request_id,
-        connection_id,
-        session_id,
-        runtime,
-        cwd,
-        BTreeMap::new(),
-    )
-}
-
-pub fn create_vm_with_metadata(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    runtime: GuestRuntimeKind,
-    cwd: &Path,
-    metadata: BTreeMap<String, String>,
-) -> (String, DispatchResult) {
-    let (vm_id, result) = create_vm_wire_with_metadata(
-        sidecar,
-        request_id,
-        connection_id,
-        session_id,
-        wire_runtime_kind(runtime),
-        cwd,
-        metadata.into_iter().collect(),
-    );
-    (vm_id, dispatch_result_from_wire(result))
-}
-
-#[allow(clippy::too_many_arguments)]
-pub fn execute(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    request_id: RequestId,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    runtime: GuestRuntimeKind,
-    entrypoint: &Path,
-    args: Vec<String>,
-) {
-    execute_wire(
-        sidecar,
-        request_id,
-        connection_id,
-        session_id,
-        vm_id,
-        process_id,
-        wire_runtime_kind(runtime),
-        entrypoint,
-        args,
-    );
-}
-
-pub fn collect_process_output(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-) -> (String, String, i32) {
-    collect_process_output_with_timeout(
-        sidecar,
-        connection_id,
-        session_id,
-        vm_id,
-        process_id,
-        Duration::from_secs(10),
-    )
-}
-
-pub fn collect_process_output_with_timeout(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-    process_id: &str,
-    timeout: Duration,
-) -> (String, String, i32) {
-    collect_process_output_wire_with_timeout(
-        sidecar,
-        connection_id,
-        session_id,
-        vm_id,
-        process_id,
-        timeout,
-    )
-}
-
-fn dispatch_result_from_wire(
-    result: secure_exec_sidecar::wire::WireDispatchResult,
-) -> DispatchResult {
-    DispatchResult {
-        response: response_frame_from_wire(result.response),
-        events: result
-            .events
-            .into_iter()
-            .map(event_frame_from_wire)
-            .collect(),
-    }
-}
-
-fn response_frame_from_wire(response: secure_exec_sidecar::wire::ResponseFrame) -> ResponseFrame {
-    match secure_exec_sidecar::protocol::from_generated_protocol_frame(
-        secure_exec_sidecar::wire::ProtocolFrame::ResponseFrame(response),
-    )
-    .expect("convert wire response frame to compatibility frame")
-    {
-        secure_exec_sidecar::protocol::ProtocolFrame::Response(response) => response,
-        other => panic!("unexpected compatibility response conversion: {other:?}"),
-    }
-}
-
-fn event_frame_from_wire(event: secure_exec_sidecar::wire::EventFrame) -> EventFrame {
-    match secure_exec_sidecar::protocol::from_generated_protocol_frame(
-        secure_exec_sidecar::wire::ProtocolFrame::EventFrame(event),
-    )
-    .expect("convert wire event frame to compatibility frame")
-    {
-        secure_exec_sidecar::protocol::ProtocolFrame::Event(event) => event,
-        other => panic!("unexpected compatibility event conversion: {other:?}"),
-    }
-}
-
-fn wire_runtime_kind(runtime: GuestRuntimeKind) -> secure_exec_sidecar::wire::GuestRuntimeKind {
-    match runtime {
-        GuestRuntimeKind::JavaScript => secure_exec_sidecar::wire::GuestRuntimeKind::JavaScript,
-        GuestRuntimeKind::Python => secure_exec_sidecar::wire::GuestRuntimeKind::Python,
-        GuestRuntimeKind::WebAssembly => secure_exec_sidecar::wire::GuestRuntimeKind::WebAssembly,
-    }
-}
-
-fn append_process_stream_chunk(
-    stream: &mut Vec<u8>,
-    chunk: &[u8],
-    process_id: &str,
-    stream_name: &str,
-) {
-    assert!(
-        stream.len().saturating_add(chunk.len()) <= MAX_COLLECTED_PROCESS_STREAM_BYTES,
-        "process {process_id} {stream_name} exceeded {MAX_COLLECTED_PROCESS_STREAM_BYTES} bytes"
-    );
-    stream.extend_from_slice(chunk);
-}
-
-fn process_stream_to_string(stream: &[u8]) -> String {
-    String::from_utf8_lossy(stream).into_owned()
-}
-
-#[test]
-fn collect_process_output_stream_append_is_bounded() {
-    let mut stream = Vec::new();
-    append_process_stream_chunk(&mut stream, &[b'a'; 16], "proc-limit", "stdout");
-    assert_eq!(stream.len(), 16);
-
-    let overflow = std::panic::catch_unwind(|| {
-        let mut stream = vec![b'a'; MAX_COLLECTED_PROCESS_STREAM_BYTES];
-        append_process_stream_chunk(&mut stream, b"!", "proc-limit", "stdout");
-    });
-    assert!(
-        overflow.is_err(),
-        "oversized process output should fail the shared test harness"
-    );
-}
-
-pub fn dispose_vm_and_close_session(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-) {
-    sidecar
-        .dispose_vm_internal_blocking(connection_id, session_id, vm_id, DisposeReason::Requested)
-        .expect("dispose sidecar VM");
-    sidecar
-        .close_session_blocking(connection_id, session_id)
-        .expect("close sidecar session");
-    sidecar
-        .remove_connection_blocking(connection_id)
-        .expect("remove sidecar connection");
-}
-
-pub fn dispose_vm_and_close_session_wire(
-    sidecar: &mut NativeSidecar<RecordingBridge>,
-    connection_id: &str,
-    session_id: &str,
-    vm_id: &str,
-) {
-    let result = sidecar
-        .dispatch_wire_blocking(wire_request(
-            900,
-            wire_vm(connection_id, session_id, vm_id),
-            secure_exec_sidecar::wire::RequestPayload::DisposeVmRequest(
-                secure_exec_sidecar::wire::DisposeVmRequest {
-                    reason: secure_exec_sidecar::wire::DisposeReason::Requested,
-                },
-            ),
-        ))
-        .expect("dispose sidecar VM through wire");
-
-    match result.response.payload {
-        secure_exec_sidecar::wire::ResponsePayload::VmDisposedResponse(response) => {
-            assert_eq!(response.vm_id, vm_id);
-        }
-        other => panic!("unexpected wire vm dispose response: {other:?}"),
-    }
-    sidecar
-        .close_session_blocking(connection_id, session_id)
-        .expect("close sidecar session");
-    sidecar
-        .remove_connection_blocking(connection_id)
-        .expect("remove sidecar connection");
-}
-
-pub fn write_fixture(path: &Path, contents: impl AsRef<[u8]>) {
-    if let Some(parent) = path.parent() {
-        fs::create_dir_all(parent).expect("create fixture parent");
-    }
-    fs::write(path, contents).expect("write fixture");
-}
-
-pub fn wasm_stdout_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 16) "wasm:ready\n")
-  (func $_start (export "_start")
-    (i32.store (i32.const 0) (i32.const 16))
-    (i32.store (i32.const 4) (i32.const 11))
-    (drop
-      (call $fd_write
-        (i32.const 1)
-        (i32.const 0)
-        (i32.const 1)
-        (i32.const 32)
-      )
-    )
-  )
-)
-"#,
-    )
-    .expect("compile wasm fixture")
-}
-
-pub fn wasm_signal_state_module() -> Vec<u8> {
-    wat::parse_str(
-        r#"
-(module
-  (type $fd_write_t (func (param i32 i32 i32 i32) (result i32)))
-  (type $proc_sigaction_t (func (param i32 i32 i32 i32 i32) (result i32)))
-  (import "wasi_snapshot_preview1" "fd_write" (func $fd_write (type $fd_write_t)))
-  (import "host_process" "proc_sigaction" (func $proc_sigaction (type $proc_sigaction_t)))
-  (memory (export "memory") 1)
-  (data (i32.const 32) "signal:ready\n")
-  (func $_start (export "_start")
-    (drop
-      (call $proc_sigaction
-        (i32.const 2)
-        (i32.const 2)
-        (i32.const 16384)
-        (i32.const 0)
-        (i32.const 4660)
-      )
-    )
-    (i32.store (i32.const 0) (i32.const 32))
-    (i32.store (i32.const 4) (i32.const 13))
-    (drop
-      (call $fd_write
-        (i32.const 1)
-        (i32.const 0)
-        (i32.const 1)
-        (i32.const 24)
-      )
-    )
-  )
-)
-"#,
-    )
-    .expect("compile signal-state wasm fixture")
-}
diff --git a/crates/sidecar/tests/vm_lifecycle.rs b/crates/sidecar/tests/vm_lifecycle.rs
deleted file mode 100644
index 79080ac0f..000000000
--- a/crates/sidecar/tests/vm_lifecycle.rs
+++ /dev/null
@@ -1,203 +0,0 @@
-mod support;
-
-use secure_exec_bridge::{LoadFilesystemStateRequest, PersistenceBridge};
-use secure_exec_kernel::root_fs::{
-    decode_snapshot as decode_root_snapshot, ROOT_FILESYSTEM_SNAPSHOT_FORMAT,
-};
-use secure_exec_sidecar::wire::{
-    BootstrapRootFilesystemRequest, DisposeReason, DisposeVmRequest, GuestRuntimeKind,
-    RequestPayload, ResponsePayload, RootFilesystemEntry, RootFilesystemEntryKind,
-};
-use std::time::Duration;
-use support::{
-    assert_node_available, authenticate_wire, collect_process_output_wire_with_timeout,
-    create_vm_wire, execute_wire, new_sidecar, open_session_wire, temp_dir, wasm_stdout_module,
-    wire_request, wire_vm, write_fixture,
-};
-
-fn root_entry(path: &str, kind: RootFilesystemEntryKind, executable: bool) -> RootFilesystemEntry {
-    RootFilesystemEntry {
-        path: path.to_owned(),
-        kind,
-        mode: None,
-        uid: None,
-        gid: None,
-        content: None,
-        encoding: None,
-        target: None,
-        executable,
-    }
-}
-
-#[test]
-fn native_sidecar_composes_vm_lifecycle_bridge_callbacks_and_guest_execution() {
-    assert_node_available();
-
-    let mut sidecar = new_sidecar("vm-lifecycle");
-    let cwd = temp_dir("vm-lifecycle-cwd");
-    let js_entry = cwd.join("entry.mjs");
-    let wasm_entry = cwd.join("entry.wasm");
-
-    write_fixture(
-        &js_entry,
-        r#"
-console.log(`js:${process.argv.slice(2).join(",")}`);
-"#,
-    );
-    write_fixture(&wasm_entry, wasm_stdout_module());
-
-    let connection_id = authenticate_wire(&mut sidecar, "conn-1");
-    let session_id = open_session_wire(&mut sidecar, 2, &connection_id);
-
-    let (js_vm_id, js_create) = create_vm_wire(
-        &mut sidecar,
-        3,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::JavaScript,
-        &cwd,
-    );
-    assert_eq!(js_create.events.len(), 2);
-
-    let bootstrap = sidecar
-        .dispatch_wire_blocking(wire_request(
-            4,
-            wire_vm(&connection_id, &session_id, &js_vm_id),
-            RequestPayload::BootstrapRootFilesystemRequest(BootstrapRootFilesystemRequest {
-                entries: vec![
-                    root_entry("/workspace", RootFilesystemEntryKind::Directory, false),
-                    root_entry("/workspace/run.sh", RootFilesystemEntryKind::File, true),
-                ],
-            }),
-        ))
-        .expect("bootstrap root filesystem");
-    match bootstrap.response.payload {
-        ResponsePayload::RootFilesystemBootstrappedResponse(response) => {
-            assert_eq!(response.entry_count, 2);
-        }
-        other => panic!("unexpected bootstrap response: {other:?}"),
-    }
-
-    execute_wire(
-        &mut sidecar,
-        5,
-        &connection_id,
-        &session_id,
-        &js_vm_id,
-        "proc-js",
-        GuestRuntimeKind::JavaScript,
-        &js_entry,
-        vec![String::from("alpha"), String::from("beta")],
-    );
-    let (js_stdout, js_stderr, js_exit) = collect_process_output_wire_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &js_vm_id,
-        "proc-js",
-        Duration::from_secs(10),
-    );
-    assert_eq!(js_stdout.trim(), "js:alpha,beta");
-    assert!(js_stderr.is_empty());
-    assert_eq!(js_exit, 0);
-
-    let (wasm_vm_id, _) = create_vm_wire(
-        &mut sidecar,
-        6,
-        &connection_id,
-        &session_id,
-        GuestRuntimeKind::WebAssembly,
-        &cwd,
-    );
-    execute_wire(
-        &mut sidecar,
-        7,
-        &connection_id,
-        &session_id,
-        &wasm_vm_id,
-        "proc-wasm",
-        GuestRuntimeKind::WebAssembly,
-        &wasm_entry,
-        Vec::new(),
-    );
-    let (wasm_stdout, wasm_stderr, wasm_exit) = collect_process_output_wire_with_timeout(
-        &mut sidecar,
-        &connection_id,
-        &session_id,
-        &wasm_vm_id,
-        "proc-wasm",
-        Duration::from_secs(10),
-    );
-    assert_eq!(wasm_stdout.trim(), "wasm:ready");
-    assert!(wasm_stderr.is_empty());
-    assert_eq!(wasm_exit, 0);
-
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            8,
-            wire_vm(&connection_id, &session_id, &js_vm_id),
-            RequestPayload::DisposeVmRequest(DisposeVmRequest {
-                reason: DisposeReason::Requested,
-            }),
-        ))
-        .expect("dispose js vm");
-    sidecar
-        .dispatch_wire_blocking(wire_request(
-            9,
-            wire_vm(&connection_id, &session_id, &wasm_vm_id),
-            RequestPayload::DisposeVmRequest(DisposeVmRequest {
-                reason: DisposeReason::Requested,
-            }),
-        ))
-        .expect("dispose wasm vm");
-
-    sidecar
-        .with_bridge_mut(|bridge: &mut support::RecordingBridge| {
-            let command_checks = bridge
-                .permission_checks
-                .iter()
-                .filter(|check| check.starts_with("cmd:"))
-                .collect::<Vec<_>>();
-            if !command_checks.is_empty() {
-                assert!(command_checks.iter().any(|check| {
-                    *check == &format!("cmd:{js_vm_id}:node")
-                        || *check == &format!("cmd:{wasm_vm_id}:wasm")
-                }));
-            }
-            let js_snapshot = bridge
-                .load_filesystem_state(LoadFilesystemStateRequest {
-                    vm_id: js_vm_id.clone(),
-                })
-                .expect("load js snapshot")
-                .expect("persisted js snapshot");
-            assert_eq!(js_snapshot.format, ROOT_FILESYSTEM_SNAPSHOT_FORMAT);
-            let js_root =
-                decode_root_snapshot(&js_snapshot.bytes).expect("decode js root snapshot");
-            assert!(js_root
-                .entries
-                .iter()
-                .any(|entry| entry.path == "/bin/node"));
-            assert!(js_root
-                .entries
-                .iter()
-                .any(|entry| entry.path == "/workspace/run.sh"));
-
-            let wasm_snapshot = bridge
-                .load_filesystem_state(LoadFilesystemStateRequest {
-                    vm_id: wasm_vm_id.clone(),
-                })
-                .expect("load wasm snapshot")
-                .expect("persisted wasm snapshot");
-            assert_eq!(wasm_snapshot.format, ROOT_FILESYSTEM_SNAPSHOT_FORMAT);
-            let wasm_root =
-                decode_root_snapshot(&wasm_snapshot.bytes).expect("decode wasm root snapshot");
-            assert!(!wasm_root
-                .entries
-                .iter()
-                .any(|entry| entry.path == "/workspace/run.sh"));
-            assert!(bridge.lifecycle_events.iter().any(|event| {
-                event.vm_id == js_vm_id && event.state == secure_exec_bridge::LifecycleState::Busy
-            }));
-        })
-        .expect("inspect bridge");
-}
diff --git a/crates/sidecar/tests/wire_dispatch.rs b/crates/sidecar/tests/wire_dispatch.rs
deleted file mode 100644
index 5f73c4057..000000000
--- a/crates/sidecar/tests/wire_dispatch.rs
+++ /dev/null
@@ -1,58 +0,0 @@
-mod support;
-
-use secure_exec_sidecar::wire::{
-    AuthenticateRequest, ConnectionOwnership, OwnershipScope, RequestFrame, RequestPayload,
-    ResponsePayload, WireFrameCodec, PROTOCOL_VERSION,
-};
-use support::{new_sidecar, TEST_AUTH_TOKEN};
-
-#[test]
-fn wire_frame_codec_round_trips_generated_request_frames() {
-    let codec = WireFrameCodec::default();
-    let frame = authenticate_request_frame();
-
-    let encoded = codec
-        .encode(&secure_exec_sidecar::wire::ProtocolFrame::RequestFrame(
-            frame.clone(),
-        ))
-        .expect("encode wire frame");
-    let decoded = codec.decode(&encoded).expect("decode wire frame");
-
-    assert_eq!(
-        decoded,
-        secure_exec_sidecar::wire::ProtocolFrame::RequestFrame(frame)
-    );
-}
-
-#[test]
-fn native_sidecar_dispatches_generated_wire_request_frames() {
-    let mut sidecar = new_sidecar("wire-dispatch");
-
-    let result = sidecar
-        .dispatch_wire_blocking(authenticate_request_frame())
-        .expect("dispatch generated wire authenticate request");
-
-    match result.response.payload {
-        ResponsePayload::AuthenticatedResponse(response) => {
-            assert!(!response.connection_id.is_empty());
-            assert_eq!(result.events, Vec::new());
-        }
-        other => panic!("unexpected wire response: {other:?}"),
-    }
-}
-
-fn authenticate_request_frame() -> RequestFrame {
-    RequestFrame {
-        schema: secure_exec_sidecar::wire::protocol_schema(),
-        request_id: 1,
-        ownership: OwnershipScope::ConnectionOwnership(ConnectionOwnership {
-            connection_id: String::from("conn-1"),
-        }),
-        payload: RequestPayload::AuthenticateRequest(AuthenticateRequest {
-            client_name: String::from("generated-wire-test"),
-            auth_token: String::from(TEST_AUTH_TOKEN),
-            protocol_version: PROTOCOL_VERSION,
-            bridge_version: secure_exec_bridge::bridge_contract().version,
-        }),
-    }
-}
diff --git a/crates/v8-runtime/AGENTS.md b/crates/v8-runtime/AGENTS.md
deleted file mode 120000
index 681311eb9..000000000
--- a/crates/v8-runtime/AGENTS.md
+++ /dev/null
@@ -1 +0,0 @@
-CLAUDE.md
\ No newline at end of file
diff --git a/crates/v8-runtime/CLAUDE.md b/crates/v8-runtime/CLAUDE.md
deleted file mode 100644
index 9afca1a2d..000000000
--- a/crates/v8-runtime/CLAUDE.md
+++ /dev/null
@@ -1,15 +0,0 @@
-# V8 Runtime
-
-- Guest WebAssembly compilation is enabled by default. Do not install a `set_allow_wasm_code_generation_callback` deny hook on fresh isolates or snapshot restores; package compatibility depends on `WebAssembly.Module` and `WebAssembly.Instance` working inside the isolate.
-- WebAssembly safety still comes from V8's built-in limits. Conformance coverage should prove guest WASM works while oversized memory declarations still fail with V8 errors instead of reintroducing an embedder-level deny path.
-- Async guest WASM (`await WebAssembly.instantiate(...)` / `await WebAssembly.compile(...)`) only settles once the session driver pumps both halves of V8's deferred work: `run_event_loop()` must keep calling `pump_v8_message_loop()` to drain platform foreground tasks posted by async WASM compilation, then `perform_microtask_checkpoint()` to settle the returned Promise. If either step is skipped, sync `WebAssembly.Module` still works while async WASM appears to hang until the outer wall-clock timeout.
-- Keep `BinaryFrame` at the compatibility boundary only. In-process embedded-runtime session plumbing should use `runtime_protocol::{RuntimeCommand, SessionMessage, RuntimeEvent}` so bridge responses, stream events, and execution results do not bounce through IPC framing inside the same process.
-- In `src/session.rs`, a session may reuse its isolate only while the effective bridge code is unchanged. Snapshot-restored contexts clone the snapshot's default context, so changing bridge code between `Execute` calls must rebuild the isolate or the session will keep restoring the old bridge snapshot.
-- In `src/session.rs`, top-level `SessionMessage` handling must never silently drop late `BridgeResponse`, `StreamEvent`, or `TerminateExecution` frames after an execution finishes. If there is no active event loop to consume them, emit a structured `RuntimeEvent::Log` warning with an explicit `ERR_LATE_*` code so host-side diagnostics can see the loss.
-- In `src/session.rs`, sync bridge waits need the same per-execution abort path for both CPU timeouts and explicit `TerminateExecution` requests. If a terminate signal only hits `isolate_handle.terminate_execution()` and does not also close the active bridge-wait receiver, a guest blocked inside a sync host call will hang until the host replies.
-- In `src/session.rs`, `run_event_loop()` must consult `_getPendingTimerCount()` directly in its exit checks, not only pending promises or `_waitForActiveHandles()`. Some callers enter the loop without first registering the keepalive promise, and otherwise a lone ref'd `setInterval()` can let the session exit between ticks.
-- Session-quota regressions now live in `src/embedded_runtime.rs`, not a removed daemon `main.rs`: keep one `SessionManager` per `EmbeddedV8Runtime`, share it across every runtime handle/connection to that instance, and cover quota behavior in `tests/embedded_runtime_session.rs`.
-- In `tests/embedded_runtime_session.rs`, shared-quota assertions must saturate the runtime slots before registering any session that is supposed to stay queued. `SessionManager` acquires slots during `CreateSession`, so relying on creation order alone makes queued-session tests race with the sessions meant to hold the slots.
-- Guest `process.memoryUsage()`, `process.cpuUsage()`, `process.resourceUsage()`, and live `process.versions.v8` should be resolved locally on the V8 session thread in `src/bridge.rs`, using `v8::HeapStatistics`, `getrusage(RUSAGE_THREAD)`, and the bundled library version APIs. Do not reintroduce stale JS literals or route these per-isolate values back through sidecar RPC.
-- Guest crypto is served by pure-Rust crates (RustCrypto), not OpenSSL, so there is no live OpenSSL library to query. `process.versions.openssl` is therefore a pinned constant (`EMULATED_OPENSSL_VERSION`) matching the OpenSSL release bundled by the emulated Node version; keep it in sync with the browser executor's `process.versions.openssl` so both runtimes present an identical identity.
-- Guest `node:vm` isolation belongs in `src/bridge.rs` local bridge calls (`_vmCreateContext`, `_vmRunInContext`, `_vmRunInThisContext`), not sidecar RPC. Those callbacks must keep sandbox-to-context mirroring, restricted-global scrubbing (`Buffer`, `require`, etc.), and timeout-driven `terminate_execution()` behavior aligned with the JavaScript-facing shims in `crates/execution`.
diff --git a/crates/v8-runtime/Cargo.lock b/crates/v8-runtime/Cargo.lock
deleted file mode 100644
index 86a9efc9b..000000000
--- a/crates/v8-runtime/Cargo.lock
+++ /dev/null
@@ -1,584 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 4
-
-[[package]]
-name = "adler"
-version = "1.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f26201604c87b1e01bd3d98f8d5d9a8fcbb815e8cedb41ffccbeb4bf593a35fe"
-
-[[package]]
-name = "aho-corasick"
-version = "1.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "bindgen"
-version = "0.70.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f49d8fed880d473ea71efb9bf597651e77201bdd4893efe54c9e5d65ae04ce6f"
-dependencies = [
- "bitflags",
- "cexpr",
- "clang-sys",
- "itertools",
- "log",
- "prettyplease",
- "proc-macro2",
- "quote",
- "regex",
- "rustc-hash",
- "shlex",
- "syn",
-]
-
-[[package]]
-name = "bitflags"
-version = "2.11.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "843867be96c8daad0d758b57df9392b6d8d271134fce549de6ce169ff98a92af"
-
-[[package]]
-name = "cexpr"
-version = "0.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6fac387a98bb7c37292057cffc56d62ecb629900026402633ae9160df93a8766"
-dependencies = [
- "nom",
-]
-
-[[package]]
-name = "cfg-if"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
-
-[[package]]
-name = "ciborium"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "42e69ffd6f0917f5c029256a24d0161db17cea3997d185db0d35926308770f0e"
-dependencies = [
- "ciborium-io",
- "ciborium-ll",
- "serde",
-]
-
-[[package]]
-name = "ciborium-io"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "05afea1e0a06c9be33d539b876f1ce3692f4afea2cb41f740e7743225ed1c757"
-
-[[package]]
-name = "ciborium-ll"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "57663b653d948a338bfb3eeba9bb2fd5fcfaecb9e199e87e1eda4d9e8b240fd9"
-dependencies = [
- "ciborium-io",
- "half",
-]
-
-[[package]]
-name = "clang-sys"
-version = "1.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0b023947811758c97c59bf9d1c188fd619ad4718dcaa767947df1cadb14f39f4"
-dependencies = [
- "glob",
- "libc",
- "libloading",
-]
-
-[[package]]
-name = "crc32fast"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
-dependencies = [
- "cfg-if",
-]
-
-[[package]]
-name = "crossbeam-channel"
-version = "0.5.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "82b8f8f868b36967f9606790d1903570de9ceaf870a7bf9fbbd3016d636a2cb2"
-dependencies = [
- "crossbeam-utils",
-]
-
-[[package]]
-name = "crossbeam-utils"
-version = "0.8.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
-
-[[package]]
-name = "crunchy"
-version = "0.2.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
-
-[[package]]
-name = "either"
-version = "1.15.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
-
-[[package]]
-name = "errno"
-version = "0.3.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
-dependencies = [
- "libc",
- "windows-sys",
-]
-
-[[package]]
-name = "fslock"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "04412b8935272e3a9bae6f48c7bfff74c2911f60525404edfdd28e49884c3bfb"
-dependencies = [
- "libc",
- "winapi",
-]
-
-[[package]]
-name = "glob"
-version = "0.3.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0cc23270f6e1808e30a928bdc84dea0b9b4136a8bc82338574f23baf47bbd280"
-
-[[package]]
-name = "gzip-header"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "95cc527b92e6029a62960ad99aa8a6660faa4555fe5f731aab13aa6a921795a2"
-dependencies = [
- "crc32fast",
-]
-
-[[package]]
-name = "half"
-version = "2.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ea2d84b969582b4b1864a92dc5d27cd2b77b622a8d79306834f1be5ba20d84b"
-dependencies = [
- "cfg-if",
- "crunchy",
- "zerocopy",
-]
-
-[[package]]
-name = "home"
-version = "0.5.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "589533453244b0995c858700322199b2becb13b627df2851f64a2775d024abcf"
-dependencies = [
- "windows-sys",
-]
-
-[[package]]
-name = "itertools"
-version = "0.13.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "413ee7dfc52ee1a4949ceeb7dbc8a33f2d6c088194d9f922fb8318faf1f01186"
-dependencies = [
- "either",
-]
-
-[[package]]
-name = "libc"
-version = "0.2.183"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b5b646652bf6661599e1da8901b3b9522896f01e736bad5f723fe7a3a27f899d"
-
-[[package]]
-name = "libloading"
-version = "0.8.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7c4b02199fee7c5d21a5ae7d8cfa79a6ef5bb2fc834d6e9058e89c825efdc55"
-dependencies = [
- "cfg-if",
- "windows-link",
-]
-
-[[package]]
-name = "linux-raw-sys"
-version = "0.4.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab"
-
-[[package]]
-name = "log"
-version = "0.4.29"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
-
-[[package]]
-name = "memchr"
-version = "2.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
-
-[[package]]
-name = "minimal-lexical"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
-
-[[package]]
-name = "miniz_oxide"
-version = "0.7.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b8a240ddb74feaf34a79a7add65a741f3167852fba007066dcac1ca548d89c08"
-dependencies = [
- "adler",
-]
-
-[[package]]
-name = "nom"
-version = "7.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
-dependencies = [
- "memchr",
- "minimal-lexical",
-]
-
-[[package]]
-name = "once_cell"
-version = "1.21.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
-
-[[package]]
-name = "paste"
-version = "1.0.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
-
-[[package]]
-name = "prettyplease"
-version = "0.2.37"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
-dependencies = [
- "proc-macro2",
- "syn",
-]
-
-[[package]]
-name = "proc-macro2"
-version = "1.0.106"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
-dependencies = [
- "unicode-ident",
-]
-
-[[package]]
-name = "quote"
-version = "1.0.45"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
-dependencies = [
- "proc-macro2",
-]
-
-[[package]]
-name = "regex"
-version = "1.12.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e10754a14b9137dd7b1e3e5b0493cc9171fdd105e0ab477f51b72e7f3ac0e276"
-dependencies = [
- "aho-corasick",
- "memchr",
- "regex-automata",
- "regex-syntax",
-]
-
-[[package]]
-name = "regex-automata"
-version = "0.4.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
-dependencies = [
- "aho-corasick",
- "memchr",
- "regex-syntax",
-]
-
-[[package]]
-name = "regex-syntax"
-version = "0.8.10"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc897dd8d9e8bd1ed8cdad82b5966c3e0ecae09fb1907d58efaa013543185d0a"
-
-[[package]]
-name = "rustc-hash"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "08d43f7aa6b08d49f382cde6a7982047c3426db949b1424bc4b7ec9ae12c6ce2"
-
-[[package]]
-name = "rustix"
-version = "0.38.44"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154"
-dependencies = [
- "bitflags",
- "errno",
- "libc",
- "linux-raw-sys",
- "windows-sys",
-]
-
-[[package]]
-name = "secure-exec-v8-runtime"
-version = "0.1.0"
-dependencies = [
- "ciborium",
- "crossbeam-channel",
- "libc",
- "signal-hook",
- "v8",
-]
-
-[[package]]
-name = "serde"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
-dependencies = [
- "serde_core",
- "serde_derive",
-]
-
-[[package]]
-name = "serde_core"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
-dependencies = [
- "serde_derive",
-]
-
-[[package]]
-name = "serde_derive"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "shlex"
-version = "1.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
-
-[[package]]
-name = "signal-hook"
-version = "0.3.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d881a16cf4426aa584979d30bd82cb33429027e42122b169753d6ef1085ed6e2"
-dependencies = [
- "libc",
- "signal-hook-registry",
-]
-
-[[package]]
-name = "signal-hook-registry"
-version = "1.4.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
-dependencies = [
- "errno",
- "libc",
-]
-
-[[package]]
-name = "syn"
-version = "2.0.117"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
-dependencies = [
- "proc-macro2",
- "quote",
- "unicode-ident",
-]
-
-[[package]]
-name = "unicode-ident"
-version = "1.0.24"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
-
-[[package]]
-name = "v8"
-version = "130.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a511192602f7b435b0a241c1947aa743eb7717f20a9195f4b5e8ed1952e01db1"
-dependencies = [
- "bindgen",
- "bitflags",
- "fslock",
- "gzip-header",
- "home",
- "miniz_oxide",
- "once_cell",
- "paste",
- "which",
-]
-
-[[package]]
-name = "which"
-version = "6.0.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b4ee928febd44d98f2f459a4a79bd4d928591333a494a10a868418ac1b39cf1f"
-dependencies = [
- "either",
- "home",
- "rustix",
- "winsafe",
-]
-
-[[package]]
-name = "winapi"
-version = "0.3.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
-dependencies = [
- "winapi-i686-pc-windows-gnu",
- "winapi-x86_64-pc-windows-gnu",
-]
-
-[[package]]
-name = "winapi-i686-pc-windows-gnu"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
-
-[[package]]
-name = "winapi-x86_64-pc-windows-gnu"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
-
-[[package]]
-name = "windows-link"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
-
-[[package]]
-name = "windows-sys"
-version = "0.59.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
-dependencies = [
- "windows-targets",
-]
-
-[[package]]
-name = "windows-targets"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
-dependencies = [
- "windows_aarch64_gnullvm",
- "windows_aarch64_msvc",
- "windows_i686_gnu",
- "windows_i686_gnullvm",
- "windows_i686_msvc",
- "windows_x86_64_gnu",
- "windows_x86_64_gnullvm",
- "windows_x86_64_msvc",
-]
-
-[[package]]
-name = "windows_aarch64_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
-
-[[package]]
-name = "windows_aarch64_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
-
-[[package]]
-name = "windows_i686_gnu"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
-
-[[package]]
-name = "windows_i686_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
-
-[[package]]
-name = "windows_i686_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
-
-[[package]]
-name = "windows_x86_64_gnu"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
-
-[[package]]
-name = "windows_x86_64_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
-
-[[package]]
-name = "windows_x86_64_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
-
-[[package]]
-name = "winsafe"
-version = "0.0.19"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d135d17ab770252ad95e9a872d365cf3090e3be864a34ab46f48555993efc904"
-
-[[package]]
-name = "zerocopy"
-version = "0.8.48"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eed437bf9d6692032087e337407a86f04cd8d6a16a37199ed57949d415bd68e9"
-dependencies = [
- "zerocopy-derive",
-]
-
-[[package]]
-name = "zerocopy-derive"
-version = "0.8.48"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "70e3cd084b1788766f53af483dd21f93881ff30d7320490ec3ef7526d203bad4"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
diff --git a/crates/v8-runtime/Cargo.toml b/crates/v8-runtime/Cargo.toml
index 79ba49c54..be5b3b342 100644
--- a/crates/v8-runtime/Cargo.toml
+++ b/crates/v8-runtime/Cargo.toml
@@ -4,17 +4,10 @@ version.workspace = true
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
-description = "V8 isolate runtime for secure-exec guest JavaScript execution"
+description = "secure-exec-v8-runtime compatibility shim for agentos-v8-runtime"
 
-[dependencies]
-secure-exec-bridge = { workspace = true }
-v8 = "130"
-crossbeam-channel = "0.5"
-signal-hook = "0.3"
-libc = "0.2"
-ciborium = "0.2"
-serde = "1.0"
-sha2 = "0.10"
+[lib]
+name = "secure_exec_v8_runtime"
 
-[build-dependencies]
-secure-exec-build-support = { workspace = true }
+[dependencies]
+agentos_v8_runtime = { package = "agentos-v8-runtime", path = "../../../agentos/crates/v8-runtime", version = "0.0.1" }
diff --git a/crates/v8-runtime/assets/generated/v8-bridge-zlib.js b/crates/v8-runtime/assets/generated/v8-bridge-zlib.js
deleted file mode 100644
index e1b73de4b..000000000
--- a/crates/v8-runtime/assets/generated/v8-bridge-zlib.js
+++ /dev/null
@@ -1,91 +0,0 @@
-if(typeof globalThis.global==="undefined"){globalThis.global=globalThis;}if(typeof globalThis.process==="undefined"){globalThis.process={env:{},argv:["node"],browser:false,version:"v22.0.0",versions:{node:"22.0.0"},nextTick(callback,...args){return Promise.resolve().then(()=>callback(...args));}};}if(typeof globalThis.TextEncoder==="undefined"){globalThis.TextEncoder=class{encode(value=""){const input=String(value??"");const encoded=unescape(encodeURIComponent(input));const out=new Uint8Array(encoded.length);for(let i=0;i<encoded.length;i++){out[i]=encoded.charCodeAt(i);}return out;}};}if(typeof globalThis.TextDecoder==="undefined"){globalThis.TextDecoder=class{decode(value=new Uint8Array()){const view=value instanceof Uint8Array?value:ArrayBuffer.isView(value)?new Uint8Array(value.buffer,value.byteOffset,value.byteLength):value instanceof ArrayBuffer?new Uint8Array(value):new Uint8Array(0);let binary="";for(let i=0;i<view.length;i++){binary+=String.fromCharCode(view[i]);}return decodeURIComponent(escape(binary));}};}if(typeof globalThis.Buffer==="undefined"){const __secureExecTe=typeof TextEncoder==="function"?new TextEncoder():null;const __secureExecTd=typeof TextDecoder==="function"?new TextDecoder():null;class __SecureExecEarlyBuffer extends Uint8Array{static from(value,encoding="utf8"){if(value instanceof ArrayBuffer){return new __SecureExecEarlyBuffer(value);}if(ArrayBuffer.isView(value)){return new __SecureExecEarlyBuffer(value.buffer.slice(value.byteOffset,value.byteOffset+value.byteLength));}if(Array.isArray(value)){return new __SecureExecEarlyBuffer(value);}const stringValue=String(value??"");if(encoding==="base64"&&typeof atob==="function"){const binary=atob(stringValue);const out=new __SecureExecEarlyBuffer(binary.length);for(let i=0;i<binary.length;i++){out[i]=binary.charCodeAt(i);}return out;}if(encoding==="binary"||encoding==="latin1"){const out=new __SecureExecEarlyBuffer(stringValue.length);for(let i=0;i<stringValue.length;i++){out[i]=stringValue.charCodeAt(i)&255;}return out;}if(__secureExecTe){return new __SecureExecEarlyBuffer(__secureExecTe.encode(stringValue));}const out=new __SecureExecEarlyBuffer(stringValue.length);for(let i=0;i<stringValue.length;i++){out[i]=stringValue.charCodeAt(i)&255;}return out;}static alloc(size){return new __SecureExecEarlyBuffer(Number(size)||0);}static concat(list,totalLength){const length=totalLength??list.reduce((sum,item)=>sum+(item?.length??0),0);const out=new __SecureExecEarlyBuffer(length);let offset=0;for(const item of list){const chunk=item instanceof Uint8Array?item:__SecureExecEarlyBuffer.from(item);out.set(chunk,offset);offset+=chunk.length;}return out;}static isBuffer(value){return value instanceof Uint8Array;}static byteLength(value,encoding="utf8"){return __SecureExecEarlyBuffer.from(value,encoding).byteLength;}toString(encoding="utf8"){if(encoding==="base64"&&typeof btoa==="function"){let binary="";for(const byte of this){binary+=String.fromCharCode(byte);}return btoa(binary);}if(encoding==="binary"||encoding==="latin1"){let binary="";for(const byte of this){binary+=String.fromCharCode(byte);}return binary;}if(__secureExecTd){return __secureExecTd.decode(this);}return Array.from(this,byte=>String.fromCharCode(byte)).join("");}}globalThis.Buffer=__SecureExecEarlyBuffer;}if(typeof globalThis.performance==="undefined"){const __secureExecPerformanceStart=Date.now();globalThis.performance={now(){if(typeof globalThis.__secureExecHrNowUs==="function"){return globalThis.__secureExecHrNowUs()/1000;}return Date.now()-__secureExecPerformanceStart;}};}if(typeof globalThis.performance.markResourceTiming!=="function"){globalThis.performance.markResourceTiming=()=>{};}if(typeof TextEncoder==="undefined"&&typeof globalThis.TextEncoder!=="undefined"){var TextEncoder=globalThis.TextEncoder;}if(typeof TextDecoder==="undefined"&&typeof globalThis.TextDecoder!=="undefined"){var TextDecoder=globalThis.TextDecoder;}if(typeof Buffer==="undefined"&&typeof globalThis.Buffer!=="undefined"){var Buffer=globalThis.Buffer;}
-(()=>{var Gd=Object.create;var nn=Object.defineProperty;var $d=Object.getOwnPropertyDescriptor;var Vd=Object.getOwnPropertyNames;var Yd=Object.getPrototypeOf,Kd=Object.prototype.hasOwnProperty;var Xd=(e,r)=>()=>(e&&(r=e(e=0)),r);var y=(e,r)=>()=>(r||e((r={exports:{}}).exports,r),r.exports),Jd=(e,r)=>{for(var t in r)nn(e,t,{get:r[t],enumerable:!0})},tn=(e,r,t,n)=>{if(r&&typeof r=="object"||typeof r=="function")for(let i of Vd(r))!Kd.call(e,i)&&i!==t&&nn(e,i,{get:()=>r[i],enumerable:!(n=$d(r,i))||n.enumerable});return e},re=(e,r,t)=>(tn(e,r,"default"),t&&tn(t,r,"default")),ft=(e,r,t)=>(t=e!=null?Gd(Yd(e)):{},tn(r||!e||!e.__esModule?nn(t,"default",{value:e,enumerable:!0}):t,e)),Qd=e=>tn(nn({},"__esModule",{value:!0}),e);var an=y((Um,of)=>{"use strict";of.exports=function(){if(typeof Symbol!="function"||typeof Object.getOwnPropertySymbols!="function")return!1;if(typeof Symbol.iterator=="symbol")return!0;var r={},t=Symbol("test"),n=Object(t);if(typeof t=="string"||Object.prototype.toString.call(t)!=="[object Symbol]"||Object.prototype.toString.call(n)!=="[object Symbol]")return!1;var i=42;r[t]=i;for(var a in r)return!1;if(typeof Object.keys=="function"&&Object.keys(r).length!==0||typeof Object.getOwnPropertyNames=="function"&&Object.getOwnPropertyNames(r).length!==0)return!1;var o=Object.getOwnPropertySymbols(r);if(o.length!==1||o[0]!==t||!Object.prototype.propertyIsEnumerable.call(r,t))return!1;if(typeof Object.getOwnPropertyDescriptor=="function"){var f=Object.getOwnPropertyDescriptor(r,t);if(f.value!==i||f.enumerable!==!0)return!1}return!0}});var ut=y((Cm,ff)=>{"use strict";var ey=an();ff.exports=function(){return ey()&&!!Symbol.toStringTag}});var on=y((zm,uf)=>{"use strict";uf.exports=Object});var sf=y((Zm,lf)=>{"use strict";lf.exports=Error});var hf=y((Wm,cf)=>{"use strict";cf.exports=EvalError});var df=y((Hm,pf)=>{"use strict";pf.exports=RangeError});var vf=y((Gm,yf)=>{"use strict";yf.exports=ReferenceError});var Ci=y(($m,_f)=>{"use strict";_f.exports=SyntaxError});var kr=y((Vm,gf)=>{"use strict";gf.exports=TypeError});var wf=y((Ym,bf)=>{"use strict";bf.exports=URIError});var mf=y((Km,Ef)=>{"use strict";Ef.exports=Math.abs});var xf=y((Xm,Sf)=>{"use strict";Sf.exports=Math.floor});var Rf=y((Jm,Af)=>{"use strict";Af.exports=Math.max});var Tf=y((Qm,Of)=>{"use strict";Of.exports=Math.min});var Nf=y((e1,If)=>{"use strict";If.exports=Math.pow});var Ff=y((r1,Lf)=>{"use strict";Lf.exports=Math.round});var Pf=y((t1,kf)=>{"use strict";kf.exports=Number.isNaN||function(r){return r!==r}});var Mf=y((n1,Df)=>{"use strict";var ry=Pf();Df.exports=function(r){return ry(r)||r===0?r:r<0?-1:1}});var Bf=y((i1,jf)=>{"use strict";jf.exports=Object.getOwnPropertyDescriptor});var rr=y((a1,qf)=>{"use strict";var fn=Bf();if(fn)try{fn([],"length")}catch{fn=null}qf.exports=fn});var lt=y((o1,Uf)=>{"use strict";var un=Object.defineProperty||!1;if(un)try{un({},"a",{value:1})}catch{un=!1}Uf.exports=un});var Zf=y((f1,zf)=>{"use strict";var Cf=typeof Symbol<"u"&&Symbol,ty=an();zf.exports=function(){return typeof Cf!="function"||typeof Symbol!="function"||typeof Cf("foo")!="symbol"||typeof Symbol("bar")!="symbol"?!1:ty()}});var zi=y((u1,Wf)=>{"use strict";Wf.exports=typeof Reflect<"u"&&Reflect.getPrototypeOf||null});var Zi=y((l1,Hf)=>{"use strict";var ny=on();Hf.exports=ny.getPrototypeOf||null});var Vf=y((s1,$f)=>{"use strict";var iy="Function.prototype.bind called on incompatible ",ay=Object.prototype.toString,oy=Math.max,fy="[object Function]",Gf=function(r,t){for(var n=[],i=0;i<r.length;i+=1)n[i]=r[i];for(var a=0;a<t.length;a+=1)n[a+r.length]=t[a];return n},uy=function(r,t){for(var n=[],i=t||0,a=0;i<r.length;i+=1,a+=1)n[a]=r[i];return n},ly=function(e,r){for(var t="",n=0;n<e.length;n+=1)t+=e[n],n+1<e.length&&(t+=r);return t};$f.exports=function(r){var t=this;if(typeof t!="function"||ay.apply(t)!==fy)throw new TypeError(iy+t);for(var n=uy(arguments,1),i,a=function(){if(this instanceof i){var l=t.apply(this,Gf(n,arguments));return Object(l)===l?l:this}return t.apply(r,Gf(n,arguments))},o=oy(0,t.length-n.length),f=[],s=0;s<o;s++)f[s]="$"+s;if(i=Function("binder","return function ("+ly(f,",")+"){ return binder.apply(this,arguments); }")(a),t.prototype){var u=function(){};u.prototype=t.prototype,i.prototype=new u,u.prototype=null}return i}});var Pr=y((c1,Yf)=>{"use strict";var sy=Vf();Yf.exports=Function.prototype.bind||sy});var ln=y((h1,Kf)=>{"use strict";Kf.exports=Function.prototype.call});var sn=y((p1,Xf)=>{"use strict";Xf.exports=Function.prototype.apply});var Qf=y((d1,Jf)=>{"use strict";Jf.exports=typeof Reflect<"u"&&Reflect&&Reflect.apply});var Wi=y((y1,eu)=>{"use strict";var cy=Pr(),hy=sn(),py=ln(),dy=Qf();eu.exports=dy||cy.call(py,hy)});var cn=y((v1,ru)=>{"use strict";var yy=Pr(),vy=kr(),_y=ln(),gy=Wi();ru.exports=function(r){if(r.length<1||typeof r[0]!="function")throw new vy("a function is required");return gy(yy,_y,r)}});var fu=y((_1,ou)=>{"use strict";var by=cn(),tu=rr(),iu;try{iu=[].__proto__===Array.prototype}catch(e){if(!e||typeof e!="object"||!("code"in e)||e.code!=="ERR_PROTO_ACCESS")throw e}var Hi=!!iu&&tu&&tu(Object.prototype,"__proto__"),au=Object,nu=au.getPrototypeOf;ou.exports=Hi&&typeof Hi.get=="function"?by([Hi.get]):typeof nu=="function"?function(r){return nu(r==null?r:au(r))}:!1});var hn=y((g1,cu)=>{"use strict";var uu=zi(),lu=Zi(),su=fu();cu.exports=uu?function(r){return uu(r)}:lu?function(r){if(!r||typeof r!="object"&&typeof r!="function")throw new TypeError("getProto: not an object");return lu(r)}:su?function(r){return su(r)}:null});var Gi=y((b1,hu)=>{"use strict";var wy=Function.prototype.call,Ey=Object.prototype.hasOwnProperty,my=Pr();hu.exports=my.call(wy,Ey)});var yn=y((w1,gu)=>{"use strict";var F,Sy=on(),xy=sf(),Ay=hf(),Ry=df(),Oy=vf(),Br=Ci(),jr=kr(),Ty=wf(),Iy=mf(),Ny=xf(),Ly=Rf(),Fy=Tf(),ky=Nf(),Py=Ff(),Dy=Mf(),vu=Function,$i=function(e){try{return vu('"use strict"; return ('+e+").constructor;")()}catch{}},st=rr(),My=lt(),Vi=function(){throw new jr},jy=st?(function(){try{return arguments.callee,Vi}catch{try{return st(arguments,"callee").get}catch{return Vi}}})():Vi,Dr=Zf()(),G=hn(),By=Zi(),qy=zi(),_u=sn(),ct=ln(),Mr={},Uy=typeof Uint8Array>"u"||!G?F:G(Uint8Array),tr={__proto__:null,"%AggregateError%":typeof AggregateError>"u"?F:AggregateError,"%Array%":Array,"%ArrayBuffer%":typeof ArrayBuffer>"u"?F:ArrayBuffer,"%ArrayIteratorPrototype%":Dr&&G?G([][Symbol.iterator]()):F,"%AsyncFromSyncIteratorPrototype%":F,"%AsyncFunction%":Mr,"%AsyncGenerator%":Mr,"%AsyncGeneratorFunction%":Mr,"%AsyncIteratorPrototype%":Mr,"%Atomics%":typeof Atomics>"u"?F:Atomics,"%BigInt%":typeof BigInt>"u"?F:BigInt,"%BigInt64Array%":typeof BigInt64Array>"u"?F:BigInt64Array,"%BigUint64Array%":typeof BigUint64Array>"u"?F:BigUint64Array,"%Boolean%":Boolean,"%DataView%":typeof DataView>"u"?F:DataView,"%Date%":Date,"%decodeURI%":decodeURI,"%decodeURIComponent%":decodeURIComponent,"%encodeURI%":encodeURI,"%encodeURIComponent%":encodeURIComponent,"%Error%":xy,"%eval%":eval,"%EvalError%":Ay,"%Float16Array%":typeof Float16Array>"u"?F:Float16Array,"%Float32Array%":typeof Float32Array>"u"?F:Float32Array,"%Float64Array%":typeof Float64Array>"u"?F:Float64Array,"%FinalizationRegistry%":typeof FinalizationRegistry>"u"?F:FinalizationRegistry,"%Function%":vu,"%GeneratorFunction%":Mr,"%Int8Array%":typeof Int8Array>"u"?F:Int8Array,"%Int16Array%":typeof Int16Array>"u"?F:Int16Array,"%Int32Array%":typeof Int32Array>"u"?F:Int32Array,"%isFinite%":isFinite,"%isNaN%":isNaN,"%IteratorPrototype%":Dr&&G?G(G([][Symbol.iterator]())):F,"%JSON%":typeof JSON=="object"?JSON:F,"%Map%":typeof Map>"u"?F:Map,"%MapIteratorPrototype%":typeof Map>"u"||!Dr||!G?F:G(new Map()[Symbol.iterator]()),"%Math%":Math,"%Number%":Number,"%Object%":Sy,"%Object.getOwnPropertyDescriptor%":st,"%parseFloat%":parseFloat,"%parseInt%":parseInt,"%Promise%":typeof Promise>"u"?F:Promise,"%Proxy%":typeof Proxy>"u"?F:Proxy,"%RangeError%":Ry,"%ReferenceError%":Oy,"%Reflect%":typeof Reflect>"u"?F:Reflect,"%RegExp%":RegExp,"%Set%":typeof Set>"u"?F:Set,"%SetIteratorPrototype%":typeof Set>"u"||!Dr||!G?F:G(new Set()[Symbol.iterator]()),"%SharedArrayBuffer%":typeof SharedArrayBuffer>"u"?F:SharedArrayBuffer,"%String%":String,"%StringIteratorPrototype%":Dr&&G?G(""[Symbol.iterator]()):F,"%Symbol%":Dr?Symbol:F,"%SyntaxError%":Br,"%ThrowTypeError%":jy,"%TypedArray%":Uy,"%TypeError%":jr,"%Uint8Array%":typeof Uint8Array>"u"?F:Uint8Array,"%Uint8ClampedArray%":typeof Uint8ClampedArray>"u"?F:Uint8ClampedArray,"%Uint16Array%":typeof Uint16Array>"u"?F:Uint16Array,"%Uint32Array%":typeof Uint32Array>"u"?F:Uint32Array,"%URIError%":Ty,"%WeakMap%":typeof WeakMap>"u"?F:WeakMap,"%WeakRef%":typeof WeakRef>"u"?F:WeakRef,"%WeakSet%":typeof WeakSet>"u"?F:WeakSet,"%Function.prototype.call%":ct,"%Function.prototype.apply%":_u,"%Object.defineProperty%":My,"%Object.getPrototypeOf%":By,"%Math.abs%":Iy,"%Math.floor%":Ny,"%Math.max%":Ly,"%Math.min%":Fy,"%Math.pow%":ky,"%Math.round%":Py,"%Math.sign%":Dy,"%Reflect.getPrototypeOf%":qy};if(G)try{null.error}catch(e){pu=G(G(e)),tr["%Error.prototype%"]=pu}var pu,Cy=function e(r){var t;if(r==="%AsyncFunction%")t=$i("async function () {}");else if(r==="%GeneratorFunction%")t=$i("function* () {}");else if(r==="%AsyncGeneratorFunction%")t=$i("async function* () {}");else if(r==="%AsyncGenerator%"){var n=e("%AsyncGeneratorFunction%");n&&(t=n.prototype)}else if(r==="%AsyncIteratorPrototype%"){var i=e("%AsyncGenerator%");i&&G&&(t=G(i.prototype))}return tr[r]=t,t},du={__proto__:null,"%ArrayBufferPrototype%":["ArrayBuffer","prototype"],"%ArrayPrototype%":["Array","prototype"],"%ArrayProto_entries%":["Array","prototype","entries"],"%ArrayProto_forEach%":["Array","prototype","forEach"],"%ArrayProto_keys%":["Array","prototype","keys"],"%ArrayProto_values%":["Array","prototype","values"],"%AsyncFunctionPrototype%":["AsyncFunction","prototype"],"%AsyncGenerator%":["AsyncGeneratorFunction","prototype"],"%AsyncGeneratorPrototype%":["AsyncGeneratorFunction","prototype","prototype"],"%BooleanPrototype%":["Boolean","prototype"],"%DataViewPrototype%":["DataView","prototype"],"%DatePrototype%":["Date","prototype"],"%ErrorPrototype%":["Error","prototype"],"%EvalErrorPrototype%":["EvalError","prototype"],"%Float32ArrayPrototype%":["Float32Array","prototype"],"%Float64ArrayPrototype%":["Float64Array","prototype"],"%FunctionPrototype%":["Function","prototype"],"%Generator%":["GeneratorFunction","prototype"],"%GeneratorPrototype%":["GeneratorFunction","prototype","prototype"],"%Int8ArrayPrototype%":["Int8Array","prototype"],"%Int16ArrayPrototype%":["Int16Array","prototype"],"%Int32ArrayPrototype%":["Int32Array","prototype"],"%JSONParse%":["JSON","parse"],"%JSONStringify%":["JSON","stringify"],"%MapPrototype%":["Map","prototype"],"%NumberPrototype%":["Number","prototype"],"%ObjectPrototype%":["Object","prototype"],"%ObjProto_toString%":["Object","prototype","toString"],"%ObjProto_valueOf%":["Object","prototype","valueOf"],"%PromisePrototype%":["Promise","prototype"],"%PromiseProto_then%":["Promise","prototype","then"],"%Promise_all%":["Promise","all"],"%Promise_reject%":["Promise","reject"],"%Promise_resolve%":["Promise","resolve"],"%RangeErrorPrototype%":["RangeError","prototype"],"%ReferenceErrorPrototype%":["ReferenceError","prototype"],"%RegExpPrototype%":["RegExp","prototype"],"%SetPrototype%":["Set","prototype"],"%SharedArrayBufferPrototype%":["SharedArrayBuffer","prototype"],"%StringPrototype%":["String","prototype"],"%SymbolPrototype%":["Symbol","prototype"],"%SyntaxErrorPrototype%":["SyntaxError","prototype"],"%TypedArrayPrototype%":["TypedArray","prototype"],"%TypeErrorPrototype%":["TypeError","prototype"],"%Uint8ArrayPrototype%":["Uint8Array","prototype"],"%Uint8ClampedArrayPrototype%":["Uint8ClampedArray","prototype"],"%Uint16ArrayPrototype%":["Uint16Array","prototype"],"%Uint32ArrayPrototype%":["Uint32Array","prototype"],"%URIErrorPrototype%":["URIError","prototype"],"%WeakMapPrototype%":["WeakMap","prototype"],"%WeakSetPrototype%":["WeakSet","prototype"]},ht=Pr(),pn=Gi(),zy=ht.call(ct,Array.prototype.concat),Zy=ht.call(_u,Array.prototype.splice),yu=ht.call(ct,String.prototype.replace),dn=ht.call(ct,String.prototype.slice),Wy=ht.call(ct,RegExp.prototype.exec),Hy=/[^%.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|%$))/g,Gy=/\\(\\)?/g,$y=function(r){var t=dn(r,0,1),n=dn(r,-1);if(t==="%"&&n!=="%")throw new Br("invalid intrinsic syntax, expected closing `%`");if(n==="%"&&t!=="%")throw new Br("invalid intrinsic syntax, expected opening `%`");var i=[];return yu(r,Hy,function(a,o,f,s){i[i.length]=f?yu(s,Gy,"$1"):o||a}),i},Vy=function(r,t){var n=r,i;if(pn(du,n)&&(i=du[n],n="%"+i[0]+"%"),pn(tr,n)){var a=tr[n];if(a===Mr&&(a=Cy(n)),typeof a>"u"&&!t)throw new jr("intrinsic "+r+" exists, but is not available. Please file an issue!");return{alias:i,name:n,value:a}}throw new Br("intrinsic "+r+" does not exist!")};gu.exports=function(r,t){if(typeof r!="string"||r.length===0)throw new jr("intrinsic name must be a non-empty string");if(arguments.length>1&&typeof t!="boolean")throw new jr('"allowMissing" argument must be a boolean');if(Wy(/^%?[^%]*%?$/,r)===null)throw new Br("`%` may not be present anywhere but at the beginning and end of the intrinsic name");var n=$y(r),i=n.length>0?n[0]:"",a=Vy("%"+i+"%",t),o=a.name,f=a.value,s=!1,u=a.alias;u&&(i=u[0],Zy(n,zy([0,1],u)));for(var l=1,c=!0;l<n.length;l+=1){var p=n[l],h=dn(p,0,1),v=dn(p,-1);if((h==='"'||h==="'"||h==="`"||v==='"'||v==="'"||v==="`")&&h!==v)throw new Br("property names with quotes must have matching quotes");if((p==="constructor"||!c)&&(s=!0),i+="."+p,o="%"+i+"%",pn(tr,o))f=tr[o];else if(f!=null){if(!(p in f)){if(!t)throw new jr("base intrinsic for "+r+" exists, but the property is not available.");return}if(st&&l+1>=n.length){var _=st(f,p);c=!!_,c&&"get"in _&&!("originalValue"in _.get)?f=_.get:f=f[p]}else c=pn(f,p),f=f[p];c&&!s&&(tr[o]=f)}}return f}});var nr=y((E1,Eu)=>{"use strict";var bu=yn(),wu=cn(),Yy=wu([bu("%String.prototype.indexOf%")]);Eu.exports=function(r,t){var n=bu(r,!!t);return typeof n=="function"&&Yy(r,".prototype.")>-1?wu([n]):n}});var xu=y((m1,Su)=>{"use strict";var Ky=ut()(),Xy=nr(),Yi=Xy("Object.prototype.toString"),vn=function(r){return Ky&&r&&typeof r=="object"&&Symbol.toStringTag in r?!1:Yi(r)==="[object Arguments]"},mu=function(r){return vn(r)?!0:r!==null&&typeof r=="object"&&"length"in r&&typeof r.length=="number"&&r.length>=0&&Yi(r)!=="[object Array]"&&"callee"in r&&Yi(r.callee)==="[object Function]"},Jy=(function(){return vn(arguments)})();vn.isLegacyArguments=mu;Su.exports=Jy?vn:mu});var Nu=y((S1,Iu)=>{"use strict";var Au=nr(),Qy=ut()(),e0=Gi(),r0=rr(),Ji;Qy?(Ru=Au("RegExp.prototype.exec"),Ki={},_n=function(){throw Ki},Xi={toString:_n,valueOf:_n},typeof Symbol.toPrimitive=="symbol"&&(Xi[Symbol.toPrimitive]=_n),Ji=function(r){if(!r||typeof r!="object")return!1;var t=r0(r,"lastIndex"),n=t&&e0(t,"value");if(!n)return!1;try{Ru(r,Xi)}catch(i){return i===Ki}}):(Ou=Au("Object.prototype.toString"),Tu="[object RegExp]",Ji=function(r){return!r||typeof r!="object"&&typeof r!="function"?!1:Ou(r)===Tu});var Ru,Ki,_n,Xi,Ou,Tu;Iu.exports=Ji});var Fu=y((x1,Lu)=>{"use strict";var t0=nr(),n0=Nu(),i0=t0("RegExp.prototype.exec"),a0=kr();Lu.exports=function(r){if(!n0(r))throw new a0("`regex` must be a RegExp");return function(n){return i0(r,n)!==null}}});var Pu=y((A1,ku)=>{"use strict";var o0=function*(){}.constructor;ku.exports=()=>o0});var Bu=y((R1,ju)=>{"use strict";var Mu=nr(),f0=Fu(),u0=f0(/^\s*(?:function)?\*/),l0=ut()(),Du=hn(),s0=Mu("Object.prototype.toString"),c0=Mu("Function.prototype.toString"),h0=Pu();ju.exports=function(r){if(typeof r!="function")return!1;if(u0(c0(r)))return!0;if(!l0){var t=s0(r);return t==="[object GeneratorFunction]"}if(!Du)return!1;var n=h0();return n&&Du(r)===n.prototype}});var zu=y((O1,Cu)=>{"use strict";var Uu=Function.prototype.toString,qr=typeof Reflect=="object"&&Reflect!==null&&Reflect.apply,ea,gn;if(typeof qr=="function"&&typeof Object.defineProperty=="function")try{ea=Object.defineProperty({},"length",{get:function(){throw gn}}),gn={},qr(function(){throw 42},null,ea)}catch(e){e!==gn&&(qr=null)}else qr=null;var p0=/^\s*class\b/,ra=function(r){try{var t=Uu.call(r);return p0.test(t)}catch{return!1}},Qi=function(r){try{return ra(r)?!1:(Uu.call(r),!0)}catch{return!1}},bn=Object.prototype.toString,d0="[object Object]",y0="[object Function]",v0="[object GeneratorFunction]",_0="[object HTMLAllCollection]",g0="[object HTML document.all class]",b0="[object HTMLCollection]",w0=typeof Symbol=="function"&&!!Symbol.toStringTag,E0=!(0 in[,]),ta=function(){return!1};typeof document=="object"&&(qu=document.all,bn.call(qu)===bn.call(document.all)&&(ta=function(r){if((E0||!r)&&(typeof r>"u"||typeof r=="object"))try{var t=bn.call(r);return(t===_0||t===g0||t===b0||t===d0)&&r("")==null}catch{}return!1}));var qu;Cu.exports=qr?function(r){if(ta(r))return!0;if(!r||typeof r!="function"&&typeof r!="object")return!1;try{qr(r,null,ea)}catch(t){if(t!==gn)return!1}return!ra(r)&&Qi(r)}:function(r){if(ta(r))return!0;if(!r||typeof r!="function"&&typeof r!="object")return!1;if(w0)return Qi(r);if(ra(r))return!1;var t=bn.call(r);return t!==y0&&t!==v0&&!/^\[object HTML/.test(t)?!1:Qi(r)}});var Hu=y((T1,Wu)=>{"use strict";var m0=zu(),S0=Object.prototype.toString,Zu=Object.prototype.hasOwnProperty,x0=function(r,t,n){for(var i=0,a=r.length;i<a;i++)Zu.call(r,i)&&(n==null?t(r[i],i,r):t.call(n,r[i],i,r))},A0=function(r,t,n){for(var i=0,a=r.length;i<a;i++)n==null?t(r.charAt(i),i,r):t.call(n,r.charAt(i),i,r)},R0=function(r,t,n){for(var i in r)Zu.call(r,i)&&(n==null?t(r[i],i,r):t.call(n,r[i],i,r))};function O0(e){return S0.call(e)==="[object Array]"}Wu.exports=function(r,t,n){if(!m0(t))throw new TypeError("iterator must be a function");var i;arguments.length>=3&&(i=n),O0(r)?x0(r,t,i):typeof r=="string"?A0(r,t,i):R0(r,t,i)}});var $u=y((I1,Gu)=>{"use strict";Gu.exports=["Float16Array","Float32Array","Float64Array","Int8Array","Int16Array","Int32Array","Uint8Array","Uint8ClampedArray","Uint16Array","Uint32Array","BigInt64Array","BigUint64Array"]});var Yu=y((N1,Vu)=>{"use strict";var na=$u(),T0=globalThis;Vu.exports=function(){for(var r=[],t=0;t<na.length;t++)typeof T0[na[t]]=="function"&&(r[r.length]=na[t]);return r}});var ia=y((L1,Ju)=>{"use strict";var Ku=lt(),I0=Ci(),Ur=kr(),Xu=rr();Ju.exports=function(r,t,n){if(!r||typeof r!="object"&&typeof r!="function")throw new Ur("`obj` must be an object or a function`");if(typeof t!="string"&&typeof t!="symbol")throw new Ur("`property` must be a string or a symbol`");if(arguments.length>3&&typeof arguments[3]!="boolean"&&arguments[3]!==null)throw new Ur("`nonEnumerable`, if provided, must be a boolean or null");if(arguments.length>4&&typeof arguments[4]!="boolean"&&arguments[4]!==null)throw new Ur("`nonWritable`, if provided, must be a boolean or null");if(arguments.length>5&&typeof arguments[5]!="boolean"&&arguments[5]!==null)throw new Ur("`nonConfigurable`, if provided, must be a boolean or null");if(arguments.length>6&&typeof arguments[6]!="boolean")throw new Ur("`loose`, if provided, must be a boolean");var i=arguments.length>3?arguments[3]:null,a=arguments.length>4?arguments[4]:null,o=arguments.length>5?arguments[5]:null,f=arguments.length>6?arguments[6]:!1,s=!!Xu&&Xu(r,t);if(Ku)Ku(r,t,{configurable:o===null&&s?s.configurable:!o,enumerable:i===null&&s?s.enumerable:!i,value:n,writable:a===null&&s?s.writable:!a});else if(f||!i&&!a&&!o)r[t]=n;else throw new I0("This environment does not support defining a property as non-configurable, non-writable, or non-enumerable.")}});var oa=y((F1,el)=>{"use strict";var aa=lt(),Qu=function(){return!!aa};Qu.hasArrayLengthDefineBug=function(){if(!aa)return null;try{return aa([],"length",{value:1}).length!==1}catch{return!0}};el.exports=Qu});var al=y((k1,il)=>{"use strict";var N0=yn(),rl=ia(),L0=oa()(),tl=rr(),nl=kr(),F0=N0("%Math.floor%");il.exports=function(r,t){if(typeof r!="function")throw new nl("`fn` is not a function");if(typeof t!="number"||t<0||t>4294967295||F0(t)!==t)throw new nl("`length` must be a positive 32-bit integer");var n=arguments.length>2&&!!arguments[2],i=!0,a=!0;if("length"in r&&tl){var o=tl(r,"length");o&&!o.configurable&&(i=!1),o&&!o.writable&&(a=!1)}return(i||a||!n)&&(L0?rl(r,"length",t,!0,!0):rl(r,"length",t)),r}});var fl=y((P1,ol)=>{"use strict";var k0=Pr(),P0=sn(),D0=Wi();ol.exports=function(){return D0(k0,P0,arguments)}});var pt=y((D1,wn)=>{"use strict";var M0=al(),ul=lt(),j0=cn(),ll=fl();wn.exports=function(r){var t=j0(arguments),n=r.length-(arguments.length-1);return M0(t,1+(n>0?n:0),!0)};ul?ul(wn.exports,"apply",{value:ll}):wn.exports.apply=ll});var sa=y((M1,pl)=>{"use strict";var Sn=Hu(),B0=Yu(),sl=pt(),ua=nr(),mn=rr(),En=hn(),q0=ua("Object.prototype.toString"),hl=ut()(),cl=globalThis,fa=B0(),la=ua("String.prototype.slice"),U0=ua("Array.prototype.indexOf",!0)||function(r,t){for(var n=0;n<r.length;n+=1)if(r[n]===t)return n;return-1},xn={__proto__:null};hl&&mn&&En?Sn(fa,function(e){var r=new cl[e];if(Symbol.toStringTag in r&&En){var t=En(r),n=mn(t,Symbol.toStringTag);if(!n&&t){var i=En(t);n=mn(i,Symbol.toStringTag)}if(n&&n.get){var a=sl(n.get);xn["$"+e]=a}}}):Sn(fa,function(e){var r=new cl[e],t=r.slice||r.set;if(t){var n=sl(t);xn["$"+e]=n}});var C0=function(r){var t=!1;return Sn(xn,function(n,i){if(!t)try{"$"+n(r)===i&&(t=la(i,1))}catch{}}),t},z0=function(r){var t=!1;return Sn(xn,function(n,i){if(!t)try{n(r),t=la(i,1)}catch{}}),t};pl.exports=function(r){if(!r||typeof r!="object")return!1;if(!hl){var t=la(q0(r),8,-1);return U0(fa,t)>-1?t:t!=="Object"?!1:z0(r)}return mn?C0(r):null}});var yl=y((j1,dl)=>{"use strict";var Z0=sa();dl.exports=function(r){return!!Z0(r)}});var Il=y(k=>{"use strict";var W0=xu(),H0=Bu(),_e=sa(),vl=yl();function Cr(e){return e.call.bind(e)}var _l=typeof BigInt<"u",gl=typeof Symbol<"u",fe=Cr(Object.prototype.toString),G0=Cr(Number.prototype.valueOf),$0=Cr(String.prototype.valueOf),V0=Cr(Boolean.prototype.valueOf);_l&&(bl=Cr(BigInt.prototype.valueOf));var bl;gl&&(wl=Cr(Symbol.prototype.valueOf));var wl;function yt(e,r){if(typeof e!="object")return!1;try{return r(e),!0}catch{return!1}}k.isArgumentsObject=W0;k.isGeneratorFunction=H0;k.isTypedArray=vl;function Y0(e){return typeof Promise<"u"&&e instanceof Promise||e!==null&&typeof e=="object"&&typeof e.then=="function"&&typeof e.catch=="function"}k.isPromise=Y0;function K0(e){return typeof ArrayBuffer<"u"&&ArrayBuffer.isView?ArrayBuffer.isView(e):vl(e)||ml(e)}k.isArrayBufferView=K0;function X0(e){return _e(e)==="Uint8Array"}k.isUint8Array=X0;function J0(e){return _e(e)==="Uint8ClampedArray"}k.isUint8ClampedArray=J0;function Q0(e){return _e(e)==="Uint16Array"}k.isUint16Array=Q0;function ev(e){return _e(e)==="Uint32Array"}k.isUint32Array=ev;function rv(e){return _e(e)==="Int8Array"}k.isInt8Array=rv;function tv(e){return _e(e)==="Int16Array"}k.isInt16Array=tv;function nv(e){return _e(e)==="Int32Array"}k.isInt32Array=nv;function iv(e){return _e(e)==="Float32Array"}k.isFloat32Array=iv;function av(e){return _e(e)==="Float64Array"}k.isFloat64Array=av;function ov(e){return _e(e)==="BigInt64Array"}k.isBigInt64Array=ov;function fv(e){return _e(e)==="BigUint64Array"}k.isBigUint64Array=fv;function An(e){return fe(e)==="[object Map]"}An.working=typeof Map<"u"&&An(new Map);function uv(e){return typeof Map>"u"?!1:An.working?An(e):e instanceof Map}k.isMap=uv;function Rn(e){return fe(e)==="[object Set]"}Rn.working=typeof Set<"u"&&Rn(new Set);function lv(e){return typeof Set>"u"?!1:Rn.working?Rn(e):e instanceof Set}k.isSet=lv;function On(e){return fe(e)==="[object WeakMap]"}On.working=typeof WeakMap<"u"&&On(new WeakMap);function sv(e){return typeof WeakMap>"u"?!1:On.working?On(e):e instanceof WeakMap}k.isWeakMap=sv;function ha(e){return fe(e)==="[object WeakSet]"}ha.working=typeof WeakSet<"u"&&ha(new WeakSet);function cv(e){return ha(e)}k.isWeakSet=cv;function Tn(e){return fe(e)==="[object ArrayBuffer]"}Tn.working=typeof ArrayBuffer<"u"&&Tn(new ArrayBuffer);function El(e){return typeof ArrayBuffer>"u"?!1:Tn.working?Tn(e):e instanceof ArrayBuffer}k.isArrayBuffer=El;function In(e){return fe(e)==="[object DataView]"}In.working=typeof ArrayBuffer<"u"&&typeof DataView<"u"&&In(new DataView(new ArrayBuffer(1),0,1));function ml(e){return typeof DataView>"u"?!1:In.working?In(e):e instanceof DataView}k.isDataView=ml;var ca=typeof SharedArrayBuffer<"u"?SharedArrayBuffer:void 0;function dt(e){return fe(e)==="[object SharedArrayBuffer]"}function Sl(e){return typeof ca>"u"?!1:(typeof dt.working>"u"&&(dt.working=dt(new ca)),dt.working?dt(e):e instanceof ca)}k.isSharedArrayBuffer=Sl;function hv(e){return fe(e)==="[object AsyncFunction]"}k.isAsyncFunction=hv;function pv(e){return fe(e)==="[object Map Iterator]"}k.isMapIterator=pv;function dv(e){return fe(e)==="[object Set Iterator]"}k.isSetIterator=dv;function yv(e){return fe(e)==="[object Generator]"}k.isGeneratorObject=yv;function vv(e){return fe(e)==="[object WebAssembly.Module]"}k.isWebAssemblyCompiledModule=vv;function xl(e){return yt(e,G0)}k.isNumberObject=xl;function Al(e){return yt(e,$0)}k.isStringObject=Al;function Rl(e){return yt(e,V0)}k.isBooleanObject=Rl;function Ol(e){return _l&&yt(e,bl)}k.isBigIntObject=Ol;function Tl(e){return gl&&yt(e,wl)}k.isSymbolObject=Tl;function _v(e){return xl(e)||Al(e)||Rl(e)||Ol(e)||Tl(e)}k.isBoxedPrimitive=_v;function gv(e){return typeof Uint8Array<"u"&&(El(e)||Sl(e))}k.isAnyArrayBuffer=gv;["isProxy","isExternal","isModuleNamespaceObject"].forEach(function(e){Object.defineProperty(k,e,{enumerable:!1,value:function(){return!1}})})});var Ll=y((q1,Nl)=>{Nl.exports=function(r){return r&&typeof r=="object"&&typeof r.copy=="function"&&typeof r.fill=="function"&&typeof r.readUInt8=="function"}});var Be=y((U1,pa)=>{typeof Object.create=="function"?pa.exports=function(r,t){t&&(r.super_=t,r.prototype=Object.create(t.prototype,{constructor:{value:r,enumerable:!1,writable:!0,configurable:!0}}))}:pa.exports=function(r,t){if(t){r.super_=t;var n=function(){};n.prototype=t.prototype,r.prototype=new n,r.prototype.constructor=r}}});var Se=y(P=>{var Fl=Object.getOwnPropertyDescriptors||function(r){for(var t=Object.keys(r),n={},i=0;i<t.length;i++)n[t[i]]=Object.getOwnPropertyDescriptor(r,t[i]);return n},bv=/%[sdj%]/g;P.format=function(e){if(!Mn(e)){for(var r=[],t=0;t<arguments.length;t++)r.push(qe(arguments[t]));return r.join(" ")}for(var t=1,n=arguments,i=n.length,a=String(e).replace(bv,function(f){if(f==="%%")return"%";if(t>=i)return f;switch(f){case"%s":return String(n[t++]);case"%d":return Number(n[t++]);case"%j":try{return JSON.stringify(n[t++])}catch{return"[Circular]"}default:return f}}),o=n[t];t<i;o=n[++t])Dn(o)||!zr(o)?a+=" "+o:a+=" "+qe(o);return a};P.deprecate=function(e,r){if(typeof process<"u"&&process.noDeprecation===!0)return e;if(typeof process>"u")return function(){return P.deprecate(e,r).apply(this,arguments)};var t=!1;function n(){if(!t){if(process.throwDeprecation)throw new Error(r);process.traceDeprecation?console.trace(r):console.error(r),t=!0}return e.apply(this,arguments)}return n};var Nn={},kl=/^$/;process.env.NODE_DEBUG&&(Ln=process.env.NODE_DEBUG,Ln=Ln.replace(/[|\\{}()[\]^$+?.]/g,"\\$&").replace(/\*/g,".*").replace(/,/g,"$|^").toUpperCase(),kl=new RegExp("^"+Ln+"$","i"));var Ln;P.debuglog=function(e){if(e=e.toUpperCase(),!Nn[e])if(kl.test(e)){var r=process.pid;Nn[e]=function(){var t=P.format.apply(P,arguments);console.error("%s %d: %s",e,r,t)}}else Nn[e]=function(){};return Nn[e]};function qe(e,r){var t={seen:[],stylize:Ev};return arguments.length>=3&&(t.depth=arguments[2]),arguments.length>=4&&(t.colors=arguments[3]),_a(r)?t.showHidden=r:r&&P._extend(t,r),ar(t.showHidden)&&(t.showHidden=!1),ar(t.depth)&&(t.depth=2),ar(t.colors)&&(t.colors=!1),ar(t.customInspect)&&(t.customInspect=!0),t.colors&&(t.stylize=wv),kn(t,e,t.depth)}P.inspect=qe;qe.colors={bold:[1,22],italic:[3,23],underline:[4,24],inverse:[7,27],white:[37,39],grey:[90,39],black:[30,39],blue:[34,39],cyan:[36,39],green:[32,39],magenta:[35,39],red:[31,39],yellow:[33,39]};qe.styles={special:"cyan",number:"yellow",boolean:"yellow",undefined:"grey",null:"bold",string:"green",date:"magenta",regexp:"red"};function wv(e,r){var t=qe.styles[r];return t?"\x1B["+qe.colors[t][0]+"m"+e+"\x1B["+qe.colors[t][1]+"m":e}function Ev(e,r){return e}function mv(e){var r={};return e.forEach(function(t,n){r[t]=!0}),r}function kn(e,r,t){if(e.customInspect&&r&&Fn(r.inspect)&&r.inspect!==P.inspect&&!(r.constructor&&r.constructor.prototype===r)){var n=r.inspect(t,e);return Mn(n)||(n=kn(e,n,t)),n}var i=Sv(e,r);if(i)return i;var a=Object.keys(r),o=mv(a);if(e.showHidden&&(a=Object.getOwnPropertyNames(r)),_t(r)&&(a.indexOf("message")>=0||a.indexOf("description")>=0))return da(r);if(a.length===0){if(Fn(r)){var f=r.name?": "+r.name:"";return e.stylize("[Function"+f+"]","special")}if(vt(r))return e.stylize(RegExp.prototype.toString.call(r),"regexp");if(Pn(r))return e.stylize(Date.prototype.toString.call(r),"date");if(_t(r))return da(r)}var s="",u=!1,l=["{","}"];if(Pl(r)&&(u=!0,l=["[","]"]),Fn(r)){var c=r.name?": "+r.name:"";s=" [Function"+c+"]"}if(vt(r)&&(s=" "+RegExp.prototype.toString.call(r)),Pn(r)&&(s=" "+Date.prototype.toUTCString.call(r)),_t(r)&&(s=" "+da(r)),a.length===0&&(!u||r.length==0))return l[0]+s+l[1];if(t<0)return vt(r)?e.stylize(RegExp.prototype.toString.call(r),"regexp"):e.stylize("[Object]","special");e.seen.push(r);var p;return u?p=xv(e,r,t,o,a):p=a.map(function(h){return va(e,r,t,o,h,u)}),e.seen.pop(),Av(p,s,l)}function Sv(e,r){if(ar(r))return e.stylize("undefined","undefined");if(Mn(r)){var t="'"+JSON.stringify(r).replace(/^"|"$/g,"").replace(/'/g,"\\'").replace(/\\"/g,'"')+"'";return e.stylize(t,"string")}if(Dl(r))return e.stylize(""+r,"number");if(_a(r))return e.stylize(""+r,"boolean");if(Dn(r))return e.stylize("null","null")}function da(e){return"["+Error.prototype.toString.call(e)+"]"}function xv(e,r,t,n,i){for(var a=[],o=0,f=r.length;o<f;++o)Ml(r,String(o))?a.push(va(e,r,t,n,String(o),!0)):a.push("");return i.forEach(function(s){s.match(/^\d+$/)||a.push(va(e,r,t,n,s,!0))}),a}function va(e,r,t,n,i,a){var o,f,s;if(s=Object.getOwnPropertyDescriptor(r,i)||{value:r[i]},s.get?s.set?f=e.stylize("[Getter/Setter]","special"):f=e.stylize("[Getter]","special"):s.set&&(f=e.stylize("[Setter]","special")),Ml(n,i)||(o="["+i+"]"),f||(e.seen.indexOf(s.value)<0?(Dn(t)?f=kn(e,s.value,null):f=kn(e,s.value,t-1),f.indexOf(`
-`)>-1&&(a?f=f.split(`
-`).map(function(u){return"  "+u}).join(`
-`).slice(2):f=`
-`+f.split(`
-`).map(function(u){return"   "+u}).join(`
-`))):f=e.stylize("[Circular]","special")),ar(o)){if(a&&i.match(/^\d+$/))return f;o=JSON.stringify(""+i),o.match(/^"([a-zA-Z_][a-zA-Z_0-9]*)"$/)?(o=o.slice(1,-1),o=e.stylize(o,"name")):(o=o.replace(/'/g,"\\'").replace(/\\"/g,'"').replace(/(^"|"$)/g,"'"),o=e.stylize(o,"string"))}return o+": "+f}function Av(e,r,t){var n=0,i=e.reduce(function(a,o){return n++,o.indexOf(`
-`)>=0&&n++,a+o.replace(/\u001b\[\d\d?m/g,"").length+1},0);return i>60?t[0]+(r===""?"":r+`
- `)+" "+e.join(`,
-  `)+" "+t[1]:t[0]+r+" "+e.join(", ")+" "+t[1]}P.types=Il();function Pl(e){return Array.isArray(e)}P.isArray=Pl;function _a(e){return typeof e=="boolean"}P.isBoolean=_a;function Dn(e){return e===null}P.isNull=Dn;function Rv(e){return e==null}P.isNullOrUndefined=Rv;function Dl(e){return typeof e=="number"}P.isNumber=Dl;function Mn(e){return typeof e=="string"}P.isString=Mn;function Ov(e){return typeof e=="symbol"}P.isSymbol=Ov;function ar(e){return e===void 0}P.isUndefined=ar;function vt(e){return zr(e)&&ga(e)==="[object RegExp]"}P.isRegExp=vt;P.types.isRegExp=vt;function zr(e){return typeof e=="object"&&e!==null}P.isObject=zr;function Pn(e){return zr(e)&&ga(e)==="[object Date]"}P.isDate=Pn;P.types.isDate=Pn;function _t(e){return zr(e)&&(ga(e)==="[object Error]"||e instanceof Error)}P.isError=_t;P.types.isNativeError=_t;function Fn(e){return typeof e=="function"}P.isFunction=Fn;function Tv(e){return e===null||typeof e=="boolean"||typeof e=="number"||typeof e=="string"||typeof e=="symbol"||typeof e>"u"}P.isPrimitive=Tv;P.isBuffer=Ll();function ga(e){return Object.prototype.toString.call(e)}function ya(e){return e<10?"0"+e.toString(10):e.toString(10)}var Iv=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"];function Nv(){var e=new Date,r=[ya(e.getHours()),ya(e.getMinutes()),ya(e.getSeconds())].join(":");return[e.getDate(),Iv[e.getMonth()],r].join(" ")}P.log=function(){console.log("%s - %s",Nv(),P.format.apply(P,arguments))};P.inherits=Be();P._extend=function(e,r){if(!r||!zr(r))return e;for(var t=Object.keys(r),n=t.length;n--;)e[t[n]]=r[t[n]];return e};function Ml(e,r){return Object.prototype.hasOwnProperty.call(e,r)}var ir=typeof Symbol<"u"?Symbol("util.promisify.custom"):void 0;P.promisify=function(r){if(typeof r!="function")throw new TypeError('The "original" argument must be of type Function');if(ir&&r[ir]){var t=r[ir];if(typeof t!="function")throw new TypeError('The "util.promisify.custom" argument must be of type Function');return Object.defineProperty(t,ir,{value:t,enumerable:!1,writable:!1,configurable:!0}),t}function t(){for(var n,i,a=new Promise(function(s,u){n=s,i=u}),o=[],f=0;f<arguments.length;f++)o.push(arguments[f]);o.push(function(s,u){s?i(s):n(u)});try{r.apply(this,o)}catch(s){i(s)}return a}return Object.setPrototypeOf(t,Object.getPrototypeOf(r)),ir&&Object.defineProperty(t,ir,{value:t,enumerable:!1,writable:!1,configurable:!0}),Object.defineProperties(t,Fl(r))};P.promisify.custom=ir;function Lv(e,r){if(!e){var t=new Error("Promise was rejected with a falsy value");t.reason=e,e=t}return r(e)}function Fv(e){if(typeof e!="function")throw new TypeError('The "original" argument must be of type Function');function r(){for(var t=[],n=0;n<arguments.length;n++)t.push(arguments[n]);var i=t.pop();if(typeof i!="function")throw new TypeError("The last argument must be of type Function");var a=this,o=function(){return i.apply(a,arguments)};e.apply(this,t).then(function(f){process.nextTick(o.bind(null,null,f))},function(f){process.nextTick(Lv.bind(null,f,o))})}return Object.setPrototypeOf(r,Object.getPrototypeOf(e)),Object.defineProperties(r,Fl(e)),r}P.callbackify=Fv});var Ea=y((z1,Ul)=>{"use strict";function Ue(e){"@babel/helpers - typeof";return Ue=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(r){return typeof r}:function(r){return r&&typeof Symbol=="function"&&r.constructor===Symbol&&r!==Symbol.prototype?"symbol":typeof r},Ue(e)}function jl(e,r){for(var t=0;t<r.length;t++){var n=r[t];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,Pv(n.key),n)}}function kv(e,r,t){return r&&jl(e.prototype,r),t&&jl(e,t),Object.defineProperty(e,"prototype",{writable:!1}),e}function Pv(e){var r=Dv(e,"string");return Ue(r)==="symbol"?r:String(r)}function Dv(e,r){if(Ue(e)!=="object"||e===null)return e;var t=e[Symbol.toPrimitive];if(t!==void 0){var n=t.call(e,r||"default");if(Ue(n)!=="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(r==="string"?String:Number)(e)}function Mv(e,r){if(!(e instanceof r))throw new TypeError("Cannot call a class as a function")}function jv(e,r){if(typeof r!="function"&&r!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(r&&r.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),Object.defineProperty(e,"prototype",{writable:!1}),r&&wa(e,r)}function wa(e,r){return wa=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(n,i){return n.__proto__=i,n},wa(e,r)}function Bv(e){var r=Cv();return function(){var n=jn(e),i;if(r){var a=jn(this).constructor;i=Reflect.construct(n,arguments,a)}else i=n.apply(this,arguments);return qv(this,i)}}function qv(e,r){if(r&&(Ue(r)==="object"||typeof r=="function"))return r;if(r!==void 0)throw new TypeError("Derived constructors may only return object or undefined");return Uv(e)}function Uv(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function Cv(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch{return!1}}function jn(e){return jn=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(t){return t.__proto__||Object.getPrototypeOf(t)},jn(e)}var ql={},Zr,ba;function gt(e,r,t){t||(t=Error);function n(a,o,f){return typeof r=="string"?r:r(a,o,f)}var i=(function(a){jv(f,a);var o=Bv(f);function f(s,u,l){var c;return Mv(this,f),c=o.call(this,n(s,u,l)),c.code=e,c}return kv(f)})(t);ql[e]=i}function Bl(e,r){if(Array.isArray(e)){var t=e.length;return e=e.map(function(n){return String(n)}),t>2?"one of ".concat(r," ").concat(e.slice(0,t-1).join(", "),", or ")+e[t-1]:t===2?"one of ".concat(r," ").concat(e[0]," or ").concat(e[1]):"of ".concat(r," ").concat(e[0])}else return"of ".concat(r," ").concat(String(e))}function zv(e,r,t){return e.substr(!t||t<0?0:+t,r.length)===r}function Zv(e,r,t){return(t===void 0||t>e.length)&&(t=e.length),e.substring(t-r.length,t)===r}function Wv(e,r,t){return typeof t!="number"&&(t=0),t+r.length>e.length?!1:e.indexOf(r,t)!==-1}gt("ERR_AMBIGUOUS_ARGUMENT",'The "%s" argument is ambiguous. %s',TypeError);gt("ERR_INVALID_ARG_TYPE",function(e,r,t){Zr===void 0&&(Zr=Wr()),Zr(typeof e=="string","'name' must be a string");var n;typeof r=="string"&&zv(r,"not ")?(n="must not be",r=r.replace(/^not /,"")):n="must be";var i;if(Zv(e," argument"))i="The ".concat(e," ").concat(n," ").concat(Bl(r,"type"));else{var a=Wv(e,".")?"property":"argument";i='The "'.concat(e,'" ').concat(a," ").concat(n," ").concat(Bl(r,"type"))}return i+=". Received type ".concat(Ue(t)),i},TypeError);gt("ERR_INVALID_ARG_VALUE",function(e,r){var t=arguments.length>2&&arguments[2]!==void 0?arguments[2]:"is invalid";ba===void 0&&(ba=Se());var n=ba.inspect(r);return n.length>128&&(n="".concat(n.slice(0,128),"...")),"The argument '".concat(e,"' ").concat(t,". Received ").concat(n)},TypeError,RangeError);gt("ERR_INVALID_RETURN_VALUE",function(e,r,t){var n;return t&&t.constructor&&t.constructor.name?n="instance of ".concat(t.constructor.name):n="type ".concat(Ue(t)),"Expected ".concat(e,' to be returned from the "').concat(r,'"')+" function but got ".concat(n,".")},TypeError);gt("ERR_MISSING_ARGS",function(){for(var e=arguments.length,r=new Array(e),t=0;t<e;t++)r[t]=arguments[t];Zr===void 0&&(Zr=Wr()),Zr(r.length>0,"At least one arg needs to be specified");var n="The ",i=r.length;switch(r=r.map(function(a){return'"'.concat(a,'"')}),i){case 1:n+="".concat(r[0]," argument");break;case 2:n+="".concat(r[0]," and ").concat(r[1]," arguments");break;default:n+=r.slice(0,i-1).join(", "),n+=", and ".concat(r[i-1]," arguments");break}return"".concat(n," must be specified")},TypeError);Ul.exports.codes=ql});var Kl=y((Z1,Yl)=>{"use strict";function Cl(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter(function(i){return Object.getOwnPropertyDescriptor(e,i).enumerable})),t.push.apply(t,n)}return t}function zl(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{};r%2?Cl(Object(t),!0).forEach(function(n){Hv(e,n,t[n])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):Cl(Object(t)).forEach(function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))})}return e}function Hv(e,r,t){return r=Gl(r),r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function Gv(e,r){if(!(e instanceof r))throw new TypeError("Cannot call a class as a function")}function Zl(e,r){for(var t=0;t<r.length;t++){var n=r[t];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,Gl(n.key),n)}}function $v(e,r,t){return r&&Zl(e.prototype,r),t&&Zl(e,t),Object.defineProperty(e,"prototype",{writable:!1}),e}function Gl(e){var r=Vv(e,"string");return te(r)==="symbol"?r:String(r)}function Vv(e,r){if(te(e)!=="object"||e===null)return e;var t=e[Symbol.toPrimitive];if(t!==void 0){var n=t.call(e,r||"default");if(te(n)!=="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(r==="string"?String:Number)(e)}function Yv(e,r){if(typeof r!="function"&&r!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(r&&r.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),Object.defineProperty(e,"prototype",{writable:!1}),r&&mt(e,r)}function Kv(e){var r=Vl();return function(){var n=St(e),i;if(r){var a=St(this).constructor;i=Reflect.construct(n,arguments,a)}else i=n.apply(this,arguments);return $l(this,i)}}function $l(e,r){if(r&&(te(r)==="object"||typeof r=="function"))return r;if(r!==void 0)throw new TypeError("Derived constructors may only return object or undefined");return ma(e)}function ma(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function Sa(e){var r=typeof Map=="function"?new Map:void 0;return Sa=function(n){if(n===null||!Xv(n))return n;if(typeof n!="function")throw new TypeError("Super expression must either be null or a function");if(typeof r<"u"){if(r.has(n))return r.get(n);r.set(n,i)}function i(){return Bn(n,arguments,St(this).constructor)}return i.prototype=Object.create(n.prototype,{constructor:{value:i,enumerable:!1,writable:!0,configurable:!0}}),mt(i,n)},Sa(e)}function Bn(e,r,t){return Vl()?Bn=Reflect.construct.bind():Bn=function(i,a,o){var f=[null];f.push.apply(f,a);var s=Function.bind.apply(i,f),u=new s;return o&&mt(u,o.prototype),u},Bn.apply(null,arguments)}function Vl(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch{return!1}}function Xv(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function mt(e,r){return mt=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(n,i){return n.__proto__=i,n},mt(e,r)}function St(e){return St=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(t){return t.__proto__||Object.getPrototypeOf(t)},St(e)}function te(e){"@babel/helpers - typeof";return te=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(r){return typeof r}:function(r){return r&&typeof Symbol=="function"&&r.constructor===Symbol&&r!==Symbol.prototype?"symbol":typeof r},te(e)}var Jv=Se(),xa=Jv.inspect,Qv=Ea(),e_=Qv.codes.ERR_INVALID_ARG_TYPE;function Wl(e,r,t){return(t===void 0||t>e.length)&&(t=e.length),e.substring(t-r.length,t)===r}function r_(e,r){if(r=Math.floor(r),e.length==0||r==0)return"";var t=e.length*r;for(r=Math.floor(Math.log(r)/Math.log(2));r;)e+=e,r--;return e+=e.substring(0,t-e.length),e}var ge="",bt="",wt="",V="",or={deepStrictEqual:"Expected values to be strictly deep-equal:",strictEqual:"Expected values to be strictly equal:",strictEqualObject:'Expected "actual" to be reference-equal to "expected":',deepEqual:"Expected values to be loosely deep-equal:",equal:"Expected values to be loosely equal:",notDeepStrictEqual:'Expected "actual" not to be strictly deep-equal to:',notStrictEqual:'Expected "actual" to be strictly unequal to:',notStrictEqualObject:'Expected "actual" not to be reference-equal to "expected":',notDeepEqual:'Expected "actual" not to be loosely deep-equal to:',notEqual:'Expected "actual" to be loosely unequal to:',notIdentical:"Values identical but not reference-equal:"},t_=10;function Hl(e){var r=Object.keys(e),t=Object.create(Object.getPrototypeOf(e));return r.forEach(function(n){t[n]=e[n]}),Object.defineProperty(t,"message",{value:e.message}),t}function Et(e){return xa(e,{compact:!1,customInspect:!1,depth:1e3,maxArrayLength:1/0,showHidden:!1,breakLength:1/0,showProxy:!1,sorted:!0,getters:!0})}function n_(e,r,t){var n="",i="",a=0,o="",f=!1,s=Et(e),u=s.split(`
-`),l=Et(r).split(`
-`),c=0,p="";if(t==="strictEqual"&&te(e)==="object"&&te(r)==="object"&&e!==null&&r!==null&&(t="strictEqualObject"),u.length===1&&l.length===1&&u[0]!==l[0]){var h=u[0].length+l[0].length;if(h<=t_){if((te(e)!=="object"||e===null)&&(te(r)!=="object"||r===null)&&(e!==0||r!==0))return"".concat(or[t],`
-
-`)+"".concat(u[0]," !== ").concat(l[0],`
-`)}else if(t!=="strictEqualObject"){var v=process.stderr&&process.stderr.isTTY?process.stderr.columns:80;if(h<v){for(;u[0][c]===l[0][c];)c++;c>2&&(p=`
-  `.concat(r_(" ",c),"^"),c=0)}}}for(var _=u[u.length-1],m=l[l.length-1];_===m&&(c++<2?o=`
-  `.concat(_).concat(o):n=_,u.pop(),l.pop(),!(u.length===0||l.length===0));)_=u[u.length-1],m=l[l.length-1];var w=Math.max(u.length,l.length);if(w===0){var L=s.split(`
-`);if(L.length>30)for(L[26]="".concat(ge,"...").concat(V);L.length>27;)L.pop();return"".concat(or.notIdentical,`
-
-`).concat(L.join(`
-`),`
-`)}c>3&&(o=`
-`.concat(ge,"...").concat(V).concat(o),f=!0),n!==""&&(o=`
-  `.concat(n).concat(o),n="");var A=0,T=or[t]+`
-`.concat(bt,"+ actual").concat(V," ").concat(wt,"- expected").concat(V),b=" ".concat(ge,"...").concat(V," Lines skipped");for(c=0;c<w;c++){var R=c-a;if(u.length<c+1)R>1&&c>2&&(R>4?(i+=`
-`.concat(ge,"...").concat(V),f=!0):R>3&&(i+=`
-  `.concat(l[c-2]),A++),i+=`
-  `.concat(l[c-1]),A++),a=c,n+=`
-`.concat(wt,"-").concat(V," ").concat(l[c]),A++;else if(l.length<c+1)R>1&&c>2&&(R>4?(i+=`
-`.concat(ge,"...").concat(V),f=!0):R>3&&(i+=`
-  `.concat(u[c-2]),A++),i+=`
-  `.concat(u[c-1]),A++),a=c,i+=`
-`.concat(bt,"+").concat(V," ").concat(u[c]),A++;else{var I=l[c],S=u[c],D=S!==I&&(!Wl(S,",")||S.slice(0,-1)!==I);D&&Wl(I,",")&&I.slice(0,-1)===S&&(D=!1,S+=","),D?(R>1&&c>2&&(R>4?(i+=`
-`.concat(ge,"...").concat(V),f=!0):R>3&&(i+=`
-  `.concat(u[c-2]),A++),i+=`
-  `.concat(u[c-1]),A++),a=c,i+=`
-`.concat(bt,"+").concat(V," ").concat(S),n+=`
-`.concat(wt,"-").concat(V," ").concat(I),A+=2):(i+=n,n="",(R===1||c===0)&&(i+=`
-  `.concat(S),A++))}if(A>20&&c<w-2)return"".concat(T).concat(b,`
-`).concat(i,`
-`).concat(ge,"...").concat(V).concat(n,`
-`)+"".concat(ge,"...").concat(V)}return"".concat(T).concat(f?b:"",`
-`).concat(i).concat(n).concat(o).concat(p)}var i_=(function(e,r){Yv(n,e);var t=Kv(n);function n(i){var a;if(Gv(this,n),te(i)!=="object"||i===null)throw new e_("options","Object",i);var o=i.message,f=i.operator,s=i.stackStartFn,u=i.actual,l=i.expected,c=Error.stackTraceLimit;if(Error.stackTraceLimit=0,o!=null)a=t.call(this,String(o));else if(process.stderr&&process.stderr.isTTY&&(process.stderr&&process.stderr.getColorDepth&&process.stderr.getColorDepth()!==1?(ge="\x1B[34m",bt="\x1B[32m",V="\x1B[39m",wt="\x1B[31m"):(ge="",bt="",V="",wt="")),te(u)==="object"&&u!==null&&te(l)==="object"&&l!==null&&"stack"in u&&u instanceof Error&&"stack"in l&&l instanceof Error&&(u=Hl(u),l=Hl(l)),f==="deepStrictEqual"||f==="strictEqual")a=t.call(this,n_(u,l,f));else if(f==="notDeepStrictEqual"||f==="notStrictEqual"){var p=or[f],h=Et(u).split(`
-`);if(f==="notStrictEqual"&&te(u)==="object"&&u!==null&&(p=or.notStrictEqualObject),h.length>30)for(h[26]="".concat(ge,"...").concat(V);h.length>27;)h.pop();h.length===1?a=t.call(this,"".concat(p," ").concat(h[0])):a=t.call(this,"".concat(p,`
-
-`).concat(h.join(`
-`),`
-`))}else{var v=Et(u),_="",m=or[f];f==="notDeepEqual"||f==="notEqual"?(v="".concat(or[f],`
-
-`).concat(v),v.length>1024&&(v="".concat(v.slice(0,1021),"..."))):(_="".concat(Et(l)),v.length>512&&(v="".concat(v.slice(0,509),"...")),_.length>512&&(_="".concat(_.slice(0,509),"...")),f==="deepEqual"||f==="equal"?v="".concat(m,`
-
-`).concat(v,`
-
-should equal
-
-`):_=" ".concat(f," ").concat(_)),a=t.call(this,"".concat(v).concat(_))}return Error.stackTraceLimit=c,a.generatedMessage=!o,Object.defineProperty(ma(a),"name",{value:"AssertionError [ERR_ASSERTION]",enumerable:!1,writable:!0,configurable:!0}),a.code="ERR_ASSERTION",a.actual=u,a.expected=l,a.operator=f,Error.captureStackTrace&&Error.captureStackTrace(ma(a),s),a.stack,a.name="AssertionError",$l(a)}return $v(n,[{key:"toString",value:function(){return"".concat(this.name," [").concat(this.code,"]: ").concat(this.message)}},{key:r,value:function(a,o){return xa(this,zl(zl({},o),{},{customInspect:!1,depth:0}))}}]),n})(Sa(Error),xa.custom);Yl.exports=i_});var Aa=y((W1,Jl)=>{"use strict";var Xl=Object.prototype.toString;Jl.exports=function(r){var t=Xl.call(r),n=t==="[object Arguments]";return n||(n=t!=="[object Array]"&&r!==null&&typeof r=="object"&&typeof r.length=="number"&&r.length>=0&&Xl.call(r.callee)==="[object Function]"),n}});var fs=y((H1,os)=>{"use strict";var as;Object.keys||(xt=Object.prototype.hasOwnProperty,Ra=Object.prototype.toString,Ql=Aa(),Oa=Object.prototype.propertyIsEnumerable,es=!Oa.call({toString:null},"toString"),rs=Oa.call(function(){},"prototype"),At=["toString","toLocaleString","valueOf","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","constructor"],qn=function(e){var r=e.constructor;return r&&r.prototype===e},ts={$applicationCache:!0,$console:!0,$external:!0,$frame:!0,$frameElement:!0,$frames:!0,$innerHeight:!0,$innerWidth:!0,$onmozfullscreenchange:!0,$onmozfullscreenerror:!0,$outerHeight:!0,$outerWidth:!0,$pageXOffset:!0,$pageYOffset:!0,$parent:!0,$scrollLeft:!0,$scrollTop:!0,$scrollX:!0,$scrollY:!0,$self:!0,$webkitIndexedDB:!0,$webkitStorageInfo:!0,$window:!0},ns=(function(){if(typeof window>"u")return!1;for(var e in window)try{if(!ts["$"+e]&&xt.call(window,e)&&window[e]!==null&&typeof window[e]=="object")try{qn(window[e])}catch{return!0}}catch{return!0}return!1})(),is=function(e){if(typeof window>"u"||!ns)return qn(e);try{return qn(e)}catch{return!1}},as=function(r){var t=r!==null&&typeof r=="object",n=Ra.call(r)==="[object Function]",i=Ql(r),a=t&&Ra.call(r)==="[object String]",o=[];if(!t&&!n&&!i)throw new TypeError("Object.keys called on a non-object");var f=rs&&n;if(a&&r.length>0&&!xt.call(r,0))for(var s=0;s<r.length;++s)o.push(String(s));if(i&&r.length>0)for(var u=0;u<r.length;++u)o.push(String(u));else for(var l in r)!(f&&l==="prototype")&&xt.call(r,l)&&o.push(String(l));if(es)for(var c=is(r),p=0;p<At.length;++p)!(c&&At[p]==="constructor")&&xt.call(r,At[p])&&o.push(At[p]);return o});var xt,Ra,Ql,Oa,es,rs,At,qn,ts,ns,is;os.exports=as});var Ta=y((G1,ss)=>{"use strict";var a_=Array.prototype.slice,o_=Aa(),us=Object.keys,Un=us?function(r){return us(r)}:fs(),ls=Object.keys;Un.shim=function(){if(Object.keys){var r=(function(){var t=Object.keys(arguments);return t&&t.length===arguments.length})(1,2);r||(Object.keys=function(n){return o_(n)?ls(a_.call(n)):ls(n)})}else Object.keys=Un;return Object.keys||Un};ss.exports=Un});var ys=y(($1,ds)=>{"use strict";var f_=Ta(),hs=an()(),ps=nr(),Cn=on(),u_=ps("Array.prototype.push"),cs=ps("Object.prototype.propertyIsEnumerable"),l_=hs?Cn.getOwnPropertySymbols:null;ds.exports=function(r,t){if(r==null)throw new TypeError("target must be an object");var n=Cn(r);if(arguments.length===1)return n;for(var i=1;i<arguments.length;++i){var a=Cn(arguments[i]),o=f_(a),f=hs&&(Cn.getOwnPropertySymbols||l_);if(f)for(var s=f(a),u=0;u<s.length;++u){var l=s[u];cs(a,l)&&u_(o,l)}for(var c=0;c<o.length;++c){var p=o[c];if(cs(a,p)){var h=a[p];n[p]=h}}}return n}});var _s=y((V1,vs)=>{"use strict";var Ia=ys(),s_=function(){if(!Object.assign)return!1;for(var e="abcdefghijklmnopqrst",r=e.split(""),t={},n=0;n<r.length;++n)t[r[n]]=r[n];var i=Object.assign({},t),a="";for(var o in i)a+=o;return e!==a},c_=function(){if(!Object.assign||!Object.preventExtensions)return!1;var e=Object.preventExtensions({1:2});try{Object.assign(e,"xy")}catch{return e[1]==="y"}return!1};vs.exports=function(){return!Object.assign||s_()||c_()?Ia:Object.assign}});var Na=y((Y1,bs)=>{"use strict";var gs=function(e){return e!==e};bs.exports=function(r,t){return r===0&&t===0?1/r===1/t:!!(r===t||gs(r)&&gs(t))}});var zn=y((K1,ws)=>{"use strict";var h_=Na();ws.exports=function(){return typeof Object.is=="function"?Object.is:h_}});var xs=y((X1,Ss)=>{"use strict";var Es=yn(),ms=pt(),p_=ms(Es("String.prototype.indexOf"));Ss.exports=function(r,t){var n=Es(r,!!t);return typeof n=="function"&&p_(r,".prototype.")>-1?ms(n):n}});var Rt=y((J1,Ts)=>{"use strict";var d_=Ta(),y_=typeof Symbol=="function"&&typeof Symbol("foo")=="symbol",v_=Object.prototype.toString,__=Array.prototype.concat,As=ia(),g_=function(e){return typeof e=="function"&&v_.call(e)==="[object Function]"},Rs=oa()(),b_=function(e,r,t,n){if(r in e){if(n===!0){if(e[r]===t)return}else if(!g_(n)||!n())return}Rs?As(e,r,t,!0):As(e,r,t)},Os=function(e,r){var t=arguments.length>2?arguments[2]:{},n=d_(r);y_&&(n=__.call(n,Object.getOwnPropertySymbols(r)));for(var i=0;i<n.length;i+=1)b_(e,n[i],r[n[i]],t[n[i]])};Os.supportsDescriptors=!!Rs;Ts.exports=Os});var Ns=y((Q1,Is)=>{"use strict";var w_=zn(),E_=Rt();Is.exports=function(){var r=w_();return E_(Object,{is:r},{is:function(){return Object.is!==r}}),r}});var Ps=y((eS,ks)=>{"use strict";var m_=Rt(),S_=pt(),x_=Na(),Ls=zn(),A_=Ns(),Fs=S_(Ls(),Object);m_(Fs,{getPolyfill:Ls,implementation:x_,shim:A_});ks.exports=Fs});var La=y((rS,Ds)=>{"use strict";Ds.exports=function(r){return r!==r}});var Fa=y((tS,Ms)=>{"use strict";var R_=La();Ms.exports=function(){return Number.isNaN&&Number.isNaN(NaN)&&!Number.isNaN("a")?Number.isNaN:R_}});var Bs=y((nS,js)=>{"use strict";var O_=Rt(),T_=Fa();js.exports=function(){var r=T_();return O_(Number,{isNaN:r},{isNaN:function(){return Number.isNaN!==r}}),r}});var zs=y((iS,Cs)=>{"use strict";var I_=pt(),N_=Rt(),L_=La(),qs=Fa(),F_=Bs(),Us=I_(qs(),Number);N_(Us,{getPolyfill:qs,implementation:L_,shim:F_});Cs.exports=Us});var uc=y((aS,fc)=>{"use strict";function Zs(e,r){return M_(e)||D_(e,r)||P_(e,r)||k_()}function k_(){throw new TypeError(`Invalid attempt to destructure non-iterable instance.
-In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function P_(e,r){if(e){if(typeof e=="string")return Ws(e,r);var t=Object.prototype.toString.call(e).slice(8,-1);if(t==="Object"&&e.constructor&&(t=e.constructor.name),t==="Map"||t==="Set")return Array.from(e);if(t==="Arguments"||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(t))return Ws(e,r)}}function Ws(e,r){(r==null||r>e.length)&&(r=e.length);for(var t=0,n=new Array(r);t<r;t++)n[t]=e[t];return n}function D_(e,r){var t=e==null?null:typeof Symbol<"u"&&e[Symbol.iterator]||e["@@iterator"];if(t!=null){var n,i,a,o,f=[],s=!0,u=!1;try{if(a=(t=t.call(e)).next,r===0){if(Object(t)!==t)return;s=!1}else for(;!(s=(n=a.call(t)).done)&&(f.push(n.value),f.length!==r);s=!0);}catch(l){u=!0,i=l}finally{try{if(!s&&t.return!=null&&(o=t.return(),Object(o)!==o))return}finally{if(u)throw i}}return f}}function M_(e){if(Array.isArray(e))return e}function ue(e){"@babel/helpers - typeof";return ue=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(r){return typeof r}:function(r){return r&&typeof Symbol=="function"&&r.constructor===Symbol&&r!==Symbol.prototype?"symbol":typeof r},ue(e)}var j_=/a/g.flags!==void 0,Yn=function(r){var t=[];return r.forEach(function(n){return t.push(n)}),t},Hs=function(r){var t=[];return r.forEach(function(n,i){return t.push([i,n])}),t},tc=Object.is?Object.is:Ps(),$n=Object.getOwnPropertySymbols?Object.getOwnPropertySymbols:function(){return[]},ka=Number.isNaN?Number.isNaN:zs();function Da(e){return e.call.bind(e)}var Tt=Da(Object.prototype.hasOwnProperty),Vn=Da(Object.prototype.propertyIsEnumerable),Gs=Da(Object.prototype.toString),J=Se().types,B_=J.isAnyArrayBuffer,q_=J.isArrayBufferView,$s=J.isDate,Zn=J.isMap,Vs=J.isRegExp,Wn=J.isSet,U_=J.isNativeError,C_=J.isBoxedPrimitive,Ys=J.isNumberObject,Ks=J.isStringObject,Xs=J.isBooleanObject,Js=J.isBigIntObject,z_=J.isSymbolObject,Z_=J.isFloat32Array,W_=J.isFloat64Array;function H_(e){if(e.length===0||e.length>10)return!0;for(var r=0;r<e.length;r++){var t=e.charCodeAt(r);if(t<48||t>57)return!0}return e.length===10&&e>=Math.pow(2,32)}function Hn(e){return Object.keys(e).filter(H_).concat($n(e).filter(Object.prototype.propertyIsEnumerable.bind(e)))}function nc(e,r){if(e===r)return 0;for(var t=e.length,n=r.length,i=0,a=Math.min(t,n);i<a;++i)if(e[i]!==r[i]){t=e[i],n=r[i];break}return t<n?-1:n<t?1:0}var Gn=void 0,G_=!0,$_=!1,Pa=0,Ma=1,ic=2,ac=3;function V_(e,r){return j_?e.source===r.source&&e.flags===r.flags:RegExp.prototype.toString.call(e)===RegExp.prototype.toString.call(r)}function Y_(e,r){if(e.byteLength!==r.byteLength)return!1;for(var t=0;t<e.byteLength;t++)if(e[t]!==r[t])return!1;return!0}function K_(e,r){return e.byteLength!==r.byteLength?!1:nc(new Uint8Array(e.buffer,e.byteOffset,e.byteLength),new Uint8Array(r.buffer,r.byteOffset,r.byteLength))===0}function X_(e,r){return e.byteLength===r.byteLength&&nc(new Uint8Array(e),new Uint8Array(r))===0}function J_(e,r){return Ys(e)?Ys(r)&&tc(Number.prototype.valueOf.call(e),Number.prototype.valueOf.call(r)):Ks(e)?Ks(r)&&String.prototype.valueOf.call(e)===String.prototype.valueOf.call(r):Xs(e)?Xs(r)&&Boolean.prototype.valueOf.call(e)===Boolean.prototype.valueOf.call(r):Js(e)?Js(r)&&BigInt.prototype.valueOf.call(e)===BigInt.prototype.valueOf.call(r):z_(r)&&Symbol.prototype.valueOf.call(e)===Symbol.prototype.valueOf.call(r)}function le(e,r,t,n){if(e===r)return e!==0?!0:t?tc(e,r):!0;if(t){if(ue(e)!=="object")return typeof e=="number"&&ka(e)&&ka(r);if(ue(r)!=="object"||e===null||r===null||Object.getPrototypeOf(e)!==Object.getPrototypeOf(r))return!1}else{if(e===null||ue(e)!=="object")return r===null||ue(r)!=="object"?e==r:!1;if(r===null||ue(r)!=="object")return!1}var i=Gs(e),a=Gs(r);if(i!==a)return!1;if(Array.isArray(e)){if(e.length!==r.length)return!1;var o=Hn(e,Gn),f=Hn(r,Gn);return o.length!==f.length?!1:Ot(e,r,t,n,Ma,o)}if(i==="[object Object]"&&(!Zn(e)&&Zn(r)||!Wn(e)&&Wn(r)))return!1;if($s(e)){if(!$s(r)||Date.prototype.getTime.call(e)!==Date.prototype.getTime.call(r))return!1}else if(Vs(e)){if(!Vs(r)||!V_(e,r))return!1}else if(U_(e)||e instanceof Error){if(e.message!==r.message||e.name!==r.name)return!1}else if(q_(e)){if(!t&&(Z_(e)||W_(e))){if(!Y_(e,r))return!1}else if(!K_(e,r))return!1;var s=Hn(e,Gn),u=Hn(r,Gn);return s.length!==u.length?!1:Ot(e,r,t,n,Pa,s)}else{if(Wn(e))return!Wn(r)||e.size!==r.size?!1:Ot(e,r,t,n,ic);if(Zn(e))return!Zn(r)||e.size!==r.size?!1:Ot(e,r,t,n,ac);if(B_(e)){if(!X_(e,r))return!1}else if(C_(e)&&!J_(e,r))return!1}return Ot(e,r,t,n,Pa)}function Qs(e,r){return r.filter(function(t){return Vn(e,t)})}function Ot(e,r,t,n,i,a){if(arguments.length===5){a=Object.keys(e);var o=Object.keys(r);if(a.length!==o.length)return!1}for(var f=0;f<a.length;f++)if(!Tt(r,a[f]))return!1;if(t&&arguments.length===5){var s=$n(e);if(s.length!==0){var u=0;for(f=0;f<s.length;f++){var l=s[f];if(Vn(e,l)){if(!Vn(r,l))return!1;a.push(l),u++}else if(Vn(r,l))return!1}var c=$n(r);if(s.length!==c.length&&Qs(r,c).length!==u)return!1}else{var p=$n(r);if(p.length!==0&&Qs(r,p).length!==0)return!1}}if(a.length===0&&(i===Pa||i===Ma&&e.length===0||e.size===0))return!0;if(n===void 0)n={val1:new Map,val2:new Map,position:0};else{var h=n.val1.get(e);if(h!==void 0){var v=n.val2.get(r);if(v!==void 0)return h===v}n.position++}n.val1.set(e,n.position),n.val2.set(r,n.position);var _=ng(e,r,t,a,n,i);return n.val1.delete(e),n.val2.delete(r),_}function ec(e,r,t,n){for(var i=Yn(e),a=0;a<i.length;a++){var o=i[a];if(le(r,o,t,n))return e.delete(o),!0}return!1}function oc(e){switch(ue(e)){case"undefined":return null;case"object":return;case"symbol":return!1;case"string":e=+e;case"number":if(ka(e))return!1}return!0}function Q_(e,r,t){var n=oc(t);return n??(r.has(n)&&!e.has(n))}function eg(e,r,t,n,i){var a=oc(t);if(a!=null)return a;var o=r.get(a);return o===void 0&&!r.has(a)||!le(n,o,!1,i)?!1:!e.has(a)&&le(n,o,!1,i)}function rg(e,r,t,n){for(var i=null,a=Yn(e),o=0;o<a.length;o++){var f=a[o];if(ue(f)==="object"&&f!==null)i===null&&(i=new Set),i.add(f);else if(!r.has(f)){if(t||!Q_(e,r,f))return!1;i===null&&(i=new Set),i.add(f)}}if(i!==null){for(var s=Yn(r),u=0;u<s.length;u++){var l=s[u];if(ue(l)==="object"&&l!==null){if(!ec(i,l,t,n))return!1}else if(!t&&!e.has(l)&&!ec(i,l,t,n))return!1}return i.size===0}return!0}function rc(e,r,t,n,i,a){for(var o=Yn(e),f=0;f<o.length;f++){var s=o[f];if(le(t,s,i,a)&&le(n,r.get(s),i,a))return e.delete(s),!0}return!1}function tg(e,r,t,n){for(var i=null,a=Hs(e),o=0;o<a.length;o++){var f=Zs(a[o],2),s=f[0],u=f[1];if(ue(s)==="object"&&s!==null)i===null&&(i=new Set),i.add(s);else{var l=r.get(s);if(l===void 0&&!r.has(s)||!le(u,l,t,n)){if(t||!eg(e,r,s,u,n))return!1;i===null&&(i=new Set),i.add(s)}}}if(i!==null){for(var c=Hs(r),p=0;p<c.length;p++){var h=Zs(c[p],2),v=h[0],_=h[1];if(ue(v)==="object"&&v!==null){if(!rc(i,e,v,_,t,n))return!1}else if(!t&&(!e.has(v)||!le(e.get(v),_,!1,n))&&!rc(i,e,v,_,!1,n))return!1}return i.size===0}return!0}function ng(e,r,t,n,i,a){var o=0;if(a===ic){if(!rg(e,r,t,i))return!1}else if(a===ac){if(!tg(e,r,t,i))return!1}else if(a===Ma)for(;o<e.length;o++)if(Tt(e,o)){if(!Tt(r,o)||!le(e[o],r[o],t,i))return!1}else{if(Tt(r,o))return!1;for(var f=Object.keys(e);o<f.length;o++){var s=f[o];if(!Tt(r,s)||!le(e[s],r[s],t,i))return!1}return f.length===Object.keys(r).length}for(o=0;o<n.length;o++){var u=n[o];if(!le(e[u],r[u],t,i))return!1}return!0}function ig(e,r){return le(e,r,$_)}function ag(e,r){return le(e,r,G_)}fc.exports={isDeepEqual:ig,isDeepStrictEqual:ag}});var Wr=y((oS,Rc)=>{"use strict";function be(e){"@babel/helpers - typeof";return be=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(r){return typeof r}:function(r){return r&&typeof Symbol=="function"&&r.constructor===Symbol&&r!==Symbol.prototype?"symbol":typeof r},be(e)}function lc(e,r){for(var t=0;t<r.length;t++){var n=r[t];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,fg(n.key),n)}}function og(e,r,t){return r&&lc(e.prototype,r),t&&lc(e,t),Object.defineProperty(e,"prototype",{writable:!1}),e}function fg(e){var r=ug(e,"string");return be(r)==="symbol"?r:String(r)}function ug(e,r){if(be(e)!=="object"||e===null)return e;var t=e[Symbol.toPrimitive];if(t!==void 0){var n=t.call(e,r||"default");if(be(n)!=="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(r==="string"?String:Number)(e)}function lg(e,r){if(!(e instanceof r))throw new TypeError("Cannot call a class as a function")}var sg=Ea(),It=sg.codes,sc=It.ERR_AMBIGUOUS_ARGUMENT,Hr=It.ERR_INVALID_ARG_TYPE,cg=It.ERR_INVALID_ARG_VALUE,hg=It.ERR_INVALID_RETURN_VALUE,ze=It.ERR_MISSING_ARGS,Ze=Kl(),pg=Se(),Kn=pg.inspect,dc=Se().types,dg=dc.isPromise,Xn=dc.isRegExp,yg=_s()(),yc=zn()(),Jn=xs()("RegExp.prototype.test"),Ce,Qn;function Nt(){var e=uc();Ce=e.isDeepEqual,Qn=e.isDeepStrictEqual}var cc=!1,U=Rc.exports=ja,ei={};function we(e){throw e.message instanceof Error?e.message:new Ze(e)}function vc(e,r,t,n,i){var a=arguments.length,o;if(a===0)o="Failed";else if(a===1)t=e,e=void 0;else{if(cc===!1){cc=!0;var f=process.emitWarning?process.emitWarning:console.warn.bind(console);f("assert.fail() with more than one argument is deprecated. Please use assert.strictEqual() instead or only pass a message.","DeprecationWarning","DEP0094")}a===2&&(n="!=")}if(t instanceof Error)throw t;var s={actual:e,expected:r,operator:n===void 0?"fail":n,stackStartFn:i||vc};t!==void 0&&(s.message=t);var u=new Ze(s);throw o&&(u.message=o,u.generatedMessage=!0),u}U.fail=vc;U.AssertionError=Ze;function _c(e,r,t,n){if(!t){var i=!1;if(r===0)i=!0,n="No value argument passed to `assert.ok()`";else if(n instanceof Error)throw n;var a=new Ze({actual:t,expected:!0,message:n,operator:"==",stackStartFn:e});throw a.generatedMessage=i,a}}function ja(){for(var e=arguments.length,r=new Array(e),t=0;t<e;t++)r[t]=arguments[t];_c.apply(void 0,[ja,r.length].concat(r))}U.ok=ja;U.equal=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");r!=t&&we({actual:r,expected:t,message:n,operator:"==",stackStartFn:e})};U.notEqual=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");r==t&&we({actual:r,expected:t,message:n,operator:"!=",stackStartFn:e})};U.deepEqual=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");Ce===void 0&&Nt(),Ce(r,t)||we({actual:r,expected:t,message:n,operator:"deepEqual",stackStartFn:e})};U.notDeepEqual=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");Ce===void 0&&Nt(),Ce(r,t)&&we({actual:r,expected:t,message:n,operator:"notDeepEqual",stackStartFn:e})};U.deepStrictEqual=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");Ce===void 0&&Nt(),Qn(r,t)||we({actual:r,expected:t,message:n,operator:"deepStrictEqual",stackStartFn:e})};U.notDeepStrictEqual=gc;function gc(e,r,t){if(arguments.length<2)throw new ze("actual","expected");Ce===void 0&&Nt(),Qn(e,r)&&we({actual:e,expected:r,message:t,operator:"notDeepStrictEqual",stackStartFn:gc})}U.strictEqual=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");yc(r,t)||we({actual:r,expected:t,message:n,operator:"strictEqual",stackStartFn:e})};U.notStrictEqual=function e(r,t,n){if(arguments.length<2)throw new ze("actual","expected");yc(r,t)&&we({actual:r,expected:t,message:n,operator:"notStrictEqual",stackStartFn:e})};var hc=og(function e(r,t,n){var i=this;lg(this,e),t.forEach(function(a){a in r&&(n!==void 0&&typeof n[a]=="string"&&Xn(r[a])&&Jn(r[a],n[a])?i[a]=n[a]:i[a]=r[a])})});function vg(e,r,t,n,i,a){if(!(t in e)||!Qn(e[t],r[t])){if(!n){var o=new hc(e,i),f=new hc(r,i,e),s=new Ze({actual:o,expected:f,operator:"deepStrictEqual",stackStartFn:a});throw s.actual=e,s.expected=r,s.operator=a.name,s}we({actual:e,expected:r,message:n,operator:a.name,stackStartFn:a})}}function bc(e,r,t,n){if(typeof r!="function"){if(Xn(r))return Jn(r,e);if(arguments.length===2)throw new Hr("expected",["Function","RegExp"],r);if(be(e)!=="object"||e===null){var i=new Ze({actual:e,expected:r,message:t,operator:"deepStrictEqual",stackStartFn:n});throw i.operator=n.name,i}var a=Object.keys(r);if(r instanceof Error)a.push("name","message");else if(a.length===0)throw new cg("error",r,"may not be an empty object");return Ce===void 0&&Nt(),a.forEach(function(o){typeof e[o]=="string"&&Xn(r[o])&&Jn(r[o],e[o])||vg(e,r,o,t,a,n)}),!0}return r.prototype!==void 0&&e instanceof r?!0:Error.isPrototypeOf(r)?!1:r.call({},e)===!0}function wc(e){if(typeof e!="function")throw new Hr("fn","Function",e);try{e()}catch(r){return r}return ei}function pc(e){return dg(e)||e!==null&&be(e)==="object"&&typeof e.then=="function"&&typeof e.catch=="function"}function Ec(e){return Promise.resolve().then(function(){var r;if(typeof e=="function"){if(r=e(),!pc(r))throw new hg("instance of Promise","promiseFn",r)}else if(pc(e))r=e;else throw new Hr("promiseFn",["Function","Promise"],e);return Promise.resolve().then(function(){return r}).then(function(){return ei}).catch(function(t){return t})})}function mc(e,r,t,n){if(typeof t=="string"){if(arguments.length===4)throw new Hr("error",["Object","Error","Function","RegExp"],t);if(be(r)==="object"&&r!==null){if(r.message===t)throw new sc("error/message",'The error message "'.concat(r.message,'" is identical to the message.'))}else if(r===t)throw new sc("error/message",'The error "'.concat(r,'" is identical to the message.'));n=t,t=void 0}else if(t!=null&&be(t)!=="object"&&typeof t!="function")throw new Hr("error",["Object","Error","Function","RegExp"],t);if(r===ei){var i="";t&&t.name&&(i+=" (".concat(t.name,")")),i+=n?": ".concat(n):".";var a=e.name==="rejects"?"rejection":"exception";we({actual:void 0,expected:t,operator:e.name,message:"Missing expected ".concat(a).concat(i),stackStartFn:e})}if(t&&!bc(r,t,n,e))throw r}function Sc(e,r,t,n){if(r!==ei){if(typeof t=="string"&&(n=t,t=void 0),!t||bc(r,t)){var i=n?": ".concat(n):".",a=e.name==="doesNotReject"?"rejection":"exception";we({actual:r,expected:t,operator:e.name,message:"Got unwanted ".concat(a).concat(i,`
-`)+'Actual message: "'.concat(r&&r.message,'"'),stackStartFn:e})}throw r}}U.throws=function e(r){for(var t=arguments.length,n=new Array(t>1?t-1:0),i=1;i<t;i++)n[i-1]=arguments[i];mc.apply(void 0,[e,wc(r)].concat(n))};U.rejects=function e(r){for(var t=arguments.length,n=new Array(t>1?t-1:0),i=1;i<t;i++)n[i-1]=arguments[i];return Ec(r).then(function(a){return mc.apply(void 0,[e,a].concat(n))})};U.doesNotThrow=function e(r){for(var t=arguments.length,n=new Array(t>1?t-1:0),i=1;i<t;i++)n[i-1]=arguments[i];Sc.apply(void 0,[e,wc(r)].concat(n))};U.doesNotReject=function e(r){for(var t=arguments.length,n=new Array(t>1?t-1:0),i=1;i<t;i++)n[i-1]=arguments[i];return Ec(r).then(function(a){return Sc.apply(void 0,[e,a].concat(n))})};U.ifError=function e(r){if(r!=null){var t="ifError got unwanted exception: ";be(r)==="object"&&typeof r.message=="string"?r.message.length===0&&r.constructor?t+=r.constructor.name:t+=r.message:t+=Kn(r);var n=new Ze({actual:r,expected:null,operator:"ifError",message:t,stackStartFn:e}),i=r.stack;if(typeof i=="string"){var a=i.split(`
-`);a.shift();for(var o=n.stack.split(`
-`),f=0;f<a.length;f++){var s=o.indexOf(a[f]);if(s!==-1){o=o.slice(0,s);break}}n.stack="".concat(o.join(`
-`),`
-`).concat(a.join(`
-`))}throw n}};function xc(e,r,t,n,i){if(!Xn(r))throw new Hr("regexp","RegExp",r);var a=i==="match";if(typeof e!="string"||Jn(r,e)!==a){if(t instanceof Error)throw t;var o=!t;t=t||(typeof e!="string"?'The "string" argument must be of type string. Received type '+"".concat(be(e)," (").concat(Kn(e),")"):(a?"The input did not match the regular expression ":"The input was expected to not match the regular expression ")+"".concat(Kn(r),`. Input:
-
-`).concat(Kn(e),`
-`));var f=new Ze({actual:e,expected:r,message:t,operator:i,stackStartFn:n});throw f.generatedMessage=o,f}}U.match=function e(r,t,n){xc(r,t,n,e,"match")};U.doesNotMatch=function e(r,t,n){xc(r,t,n,e,"doesNotMatch")};function Ac(){for(var e=arguments.length,r=new Array(e),t=0;t<e;t++)r[t]=arguments[t];_c.apply(void 0,[Ac,r.length].concat(r))}U.strict=yg(Ac,U,{equal:U.strictEqual,deepEqual:U.deepStrictEqual,notEqual:U.notStrictEqual,notDeepEqual:U.notDeepStrictEqual});U.strict.strict=U.strict});var Ic=y(ri=>{"use strict";ri.byteLength=gg;ri.toByteArray=wg;ri.fromByteArray=Sg;var xe=[],se=[],_g=typeof Uint8Array<"u"?Uint8Array:Array,Ba="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";for(fr=0,Oc=Ba.length;fr<Oc;++fr)xe[fr]=Ba[fr],se[Ba.charCodeAt(fr)]=fr;var fr,Oc;se[45]=62;se[95]=63;function Tc(e){var r=e.length;if(r%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var t=e.indexOf("=");t===-1&&(t=r);var n=t===r?0:4-t%4;return[t,n]}function gg(e){var r=Tc(e),t=r[0],n=r[1];return(t+n)*3/4-n}function bg(e,r,t){return(r+t)*3/4-t}function wg(e){var r,t=Tc(e),n=t[0],i=t[1],a=new _g(bg(e,n,i)),o=0,f=i>0?n-4:n,s;for(s=0;s<f;s+=4)r=se[e.charCodeAt(s)]<<18|se[e.charCodeAt(s+1)]<<12|se[e.charCodeAt(s+2)]<<6|se[e.charCodeAt(s+3)],a[o++]=r>>16&255,a[o++]=r>>8&255,a[o++]=r&255;return i===2&&(r=se[e.charCodeAt(s)]<<2|se[e.charCodeAt(s+1)]>>4,a[o++]=r&255),i===1&&(r=se[e.charCodeAt(s)]<<10|se[e.charCodeAt(s+1)]<<4|se[e.charCodeAt(s+2)]>>2,a[o++]=r>>8&255,a[o++]=r&255),a}function Eg(e){return xe[e>>18&63]+xe[e>>12&63]+xe[e>>6&63]+xe[e&63]}function mg(e,r,t){for(var n,i=[],a=r;a<t;a+=3)n=(e[a]<<16&16711680)+(e[a+1]<<8&65280)+(e[a+2]&255),i.push(Eg(n));return i.join("")}function Sg(e){for(var r,t=e.length,n=t%3,i=[],a=16383,o=0,f=t-n;o<f;o+=a)i.push(mg(e,o,o+a>f?f:o+a));return n===1?(r=e[t-1],i.push(xe[r>>2]+xe[r<<4&63]+"==")):n===2&&(r=(e[t-2]<<8)+e[t-1],i.push(xe[r>>10]+xe[r>>4&63]+xe[r<<2&63]+"=")),i.join("")}});var Nc=y(qa=>{qa.read=function(e,r,t,n,i){var a,o,f=i*8-n-1,s=(1<<f)-1,u=s>>1,l=-7,c=t?i-1:0,p=t?-1:1,h=e[r+c];for(c+=p,a=h&(1<<-l)-1,h>>=-l,l+=f;l>0;a=a*256+e[r+c],c+=p,l-=8);for(o=a&(1<<-l)-1,a>>=-l,l+=n;l>0;o=o*256+e[r+c],c+=p,l-=8);if(a===0)a=1-u;else{if(a===s)return o?NaN:(h?-1:1)*(1/0);o=o+Math.pow(2,n),a=a-u}return(h?-1:1)*o*Math.pow(2,a-n)};qa.write=function(e,r,t,n,i,a){var o,f,s,u=a*8-i-1,l=(1<<u)-1,c=l>>1,p=i===23?Math.pow(2,-24)-Math.pow(2,-77):0,h=n?0:a-1,v=n?1:-1,_=r<0||r===0&&1/r<0?1:0;for(r=Math.abs(r),isNaN(r)||r===1/0?(f=isNaN(r)?1:0,o=l):(o=Math.floor(Math.log(r)/Math.LN2),r*(s=Math.pow(2,-o))<1&&(o--,s*=2),o+c>=1?r+=p/s:r+=p*Math.pow(2,1-c),r*s>=2&&(o++,s/=2),o+c>=l?(f=0,o=l):o+c>=1?(f=(r*s-1)*Math.pow(2,i),o=o+c):(f=r*Math.pow(2,c-1)*Math.pow(2,i),o=0));i>=8;e[t+h]=f&255,h+=v,f/=256,i-=8);for(o=o<<i|f,u+=i;u>0;e[t+h]=o&255,h+=v,o/=256,u-=8);e[t+h-v]|=_*128}});var lr=y($r=>{"use strict";var Ua=Ic(),Gr=Nc(),Lc=typeof Symbol=="function"&&typeof Symbol.for=="function"?Symbol.for("nodejs.util.inspect.custom"):null;$r.Buffer=d;$r.SlowBuffer=Ig;$r.INSPECT_MAX_BYTES=50;var ti=2147483647;$r.kMaxLength=ti;d.TYPED_ARRAY_SUPPORT=xg();!d.TYPED_ARRAY_SUPPORT&&typeof console<"u"&&typeof console.error=="function"&&console.error("This browser lacks typed array (Uint8Array) support which is required by `buffer` v5.x. Use `buffer` v4.x if you require old browser support.");function xg(){try{var e=new Uint8Array(1),r={foo:function(){return 42}};return Object.setPrototypeOf(r,Uint8Array.prototype),Object.setPrototypeOf(e,r),e.foo()===42}catch{return!1}}Object.defineProperty(d.prototype,"parent",{enumerable:!0,get:function(){if(d.isBuffer(this))return this.buffer}});Object.defineProperty(d.prototype,"offset",{enumerable:!0,get:function(){if(d.isBuffer(this))return this.byteOffset}});function Pe(e){if(e>ti)throw new RangeError('The value "'+e+'" is invalid for option "size"');var r=new Uint8Array(e);return Object.setPrototypeOf(r,d.prototype),r}function d(e,r,t){if(typeof e=="number"){if(typeof r=="string")throw new TypeError('The "string" argument must be of type string. Received type number');return Wa(e)}return Pc(e,r,t)}d.poolSize=8192;function Pc(e,r,t){if(typeof e=="string")return Rg(e,r);if(ArrayBuffer.isView(e))return Og(e);if(e==null)throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof e);if(Ae(e,ArrayBuffer)||e&&Ae(e.buffer,ArrayBuffer)||typeof SharedArrayBuffer<"u"&&(Ae(e,SharedArrayBuffer)||e&&Ae(e.buffer,SharedArrayBuffer)))return za(e,r,t);if(typeof e=="number")throw new TypeError('The "value" argument must not be of type number. Received type number');var n=e.valueOf&&e.valueOf();if(n!=null&&n!==e)return d.from(n,r,t);var i=Tg(e);if(i)return i;if(typeof Symbol<"u"&&Symbol.toPrimitive!=null&&typeof e[Symbol.toPrimitive]=="function")return d.from(e[Symbol.toPrimitive]("string"),r,t);throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof e)}d.from=function(e,r,t){return Pc(e,r,t)};Object.setPrototypeOf(d.prototype,Uint8Array.prototype);Object.setPrototypeOf(d,Uint8Array);function Dc(e){if(typeof e!="number")throw new TypeError('"size" argument must be of type number');if(e<0)throw new RangeError('The value "'+e+'" is invalid for option "size"')}function Ag(e,r,t){return Dc(e),e<=0?Pe(e):r!==void 0?typeof t=="string"?Pe(e).fill(r,t):Pe(e).fill(r):Pe(e)}d.alloc=function(e,r,t){return Ag(e,r,t)};function Wa(e){return Dc(e),Pe(e<0?0:Ha(e)|0)}d.allocUnsafe=function(e){return Wa(e)};d.allocUnsafeSlow=function(e){return Wa(e)};function Rg(e,r){if((typeof r!="string"||r==="")&&(r="utf8"),!d.isEncoding(r))throw new TypeError("Unknown encoding: "+r);var t=Mc(e,r)|0,n=Pe(t),i=n.write(e,r);return i!==t&&(n=n.slice(0,i)),n}function Ca(e){for(var r=e.length<0?0:Ha(e.length)|0,t=Pe(r),n=0;n<r;n+=1)t[n]=e[n]&255;return t}function Og(e){if(Ae(e,Uint8Array)){var r=new Uint8Array(e);return za(r.buffer,r.byteOffset,r.byteLength)}return Ca(e)}function za(e,r,t){if(r<0||e.byteLength<r)throw new RangeError('"offset" is outside of buffer bounds');if(e.byteLength<r+(t||0))throw new RangeError('"length" is outside of buffer bounds');var n;return r===void 0&&t===void 0?n=new Uint8Array(e):t===void 0?n=new Uint8Array(e,r):n=new Uint8Array(e,r,t),Object.setPrototypeOf(n,d.prototype),n}function Tg(e){if(d.isBuffer(e)){var r=Ha(e.length)|0,t=Pe(r);return t.length===0||e.copy(t,0,0,r),t}if(e.length!==void 0)return typeof e.length!="number"||Ga(e.length)?Pe(0):Ca(e);if(e.type==="Buffer"&&Array.isArray(e.data))return Ca(e.data)}function Ha(e){if(e>=ti)throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+ti.toString(16)+" bytes");return e|0}function Ig(e){return+e!=e&&(e=0),d.alloc(+e)}d.isBuffer=function(r){return r!=null&&r._isBuffer===!0&&r!==d.prototype};d.compare=function(r,t){if(Ae(r,Uint8Array)&&(r=d.from(r,r.offset,r.byteLength)),Ae(t,Uint8Array)&&(t=d.from(t,t.offset,t.byteLength)),!d.isBuffer(r)||!d.isBuffer(t))throw new TypeError('The "buf1", "buf2" arguments must be one of type Buffer or Uint8Array');if(r===t)return 0;for(var n=r.length,i=t.length,a=0,o=Math.min(n,i);a<o;++a)if(r[a]!==t[a]){n=r[a],i=t[a];break}return n<i?-1:i<n?1:0};d.isEncoding=function(r){switch(String(r).toLowerCase()){case"hex":case"utf8":case"utf-8":case"ascii":case"latin1":case"binary":case"base64":case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return!0;default:return!1}};d.concat=function(r,t){if(!Array.isArray(r))throw new TypeError('"list" argument must be an Array of Buffers');if(r.length===0)return d.alloc(0);var n;if(t===void 0)for(t=0,n=0;n<r.length;++n)t+=r[n].length;var i=d.allocUnsafe(t),a=0;for(n=0;n<r.length;++n){var o=r[n];if(Ae(o,Uint8Array))a+o.length>i.length?d.from(o).copy(i,a):Uint8Array.prototype.set.call(i,o,a);else if(d.isBuffer(o))o.copy(i,a);else throw new TypeError('"list" argument must be an Array of Buffers');a+=o.length}return i};function Mc(e,r){if(d.isBuffer(e))return e.length;if(ArrayBuffer.isView(e)||Ae(e,ArrayBuffer))return e.byteLength;if(typeof e!="string")throw new TypeError('The "string" argument must be one of type string, Buffer, or ArrayBuffer. Received type '+typeof e);var t=e.length,n=arguments.length>2&&arguments[2]===!0;if(!n&&t===0)return 0;for(var i=!1;;)switch(r){case"ascii":case"latin1":case"binary":return t;case"utf8":case"utf-8":return Za(e).length;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return t*2;case"hex":return t>>>1;case"base64":return zc(e).length;default:if(i)return n?-1:Za(e).length;r=(""+r).toLowerCase(),i=!0}}d.byteLength=Mc;function Ng(e,r,t){var n=!1;if((r===void 0||r<0)&&(r=0),r>this.length||((t===void 0||t>this.length)&&(t=this.length),t<=0)||(t>>>=0,r>>>=0,t<=r))return"";for(e||(e="utf8");;)switch(e){case"hex":return Ug(this,r,t);case"utf8":case"utf-8":return Bc(this,r,t);case"ascii":return Bg(this,r,t);case"latin1":case"binary":return qg(this,r,t);case"base64":return Mg(this,r,t);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return Cg(this,r,t);default:if(n)throw new TypeError("Unknown encoding: "+e);e=(e+"").toLowerCase(),n=!0}}d.prototype._isBuffer=!0;function ur(e,r,t){var n=e[r];e[r]=e[t],e[t]=n}d.prototype.swap16=function(){var r=this.length;if(r%2!==0)throw new RangeError("Buffer size must be a multiple of 16-bits");for(var t=0;t<r;t+=2)ur(this,t,t+1);return this};d.prototype.swap32=function(){var r=this.length;if(r%4!==0)throw new RangeError("Buffer size must be a multiple of 32-bits");for(var t=0;t<r;t+=4)ur(this,t,t+3),ur(this,t+1,t+2);return this};d.prototype.swap64=function(){var r=this.length;if(r%8!==0)throw new RangeError("Buffer size must be a multiple of 64-bits");for(var t=0;t<r;t+=8)ur(this,t,t+7),ur(this,t+1,t+6),ur(this,t+2,t+5),ur(this,t+3,t+4);return this};d.prototype.toString=function(){var r=this.length;return r===0?"":arguments.length===0?Bc(this,0,r):Ng.apply(this,arguments)};d.prototype.toLocaleString=d.prototype.toString;d.prototype.equals=function(r){if(!d.isBuffer(r))throw new TypeError("Argument must be a Buffer");return this===r?!0:d.compare(this,r)===0};d.prototype.inspect=function(){var r="",t=$r.INSPECT_MAX_BYTES;return r=this.toString("hex",0,t).replace(/(.{2})/g,"$1 ").trim(),this.length>t&&(r+=" ... "),"<Buffer "+r+">"};Lc&&(d.prototype[Lc]=d.prototype.inspect);d.prototype.compare=function(r,t,n,i,a){if(Ae(r,Uint8Array)&&(r=d.from(r,r.offset,r.byteLength)),!d.isBuffer(r))throw new TypeError('The "target" argument must be one of type Buffer or Uint8Array. Received type '+typeof r);if(t===void 0&&(t=0),n===void 0&&(n=r?r.length:0),i===void 0&&(i=0),a===void 0&&(a=this.length),t<0||n>r.length||i<0||a>this.length)throw new RangeError("out of range index");if(i>=a&&t>=n)return 0;if(i>=a)return-1;if(t>=n)return 1;if(t>>>=0,n>>>=0,i>>>=0,a>>>=0,this===r)return 0;for(var o=a-i,f=n-t,s=Math.min(o,f),u=this.slice(i,a),l=r.slice(t,n),c=0;c<s;++c)if(u[c]!==l[c]){o=u[c],f=l[c];break}return o<f?-1:f<o?1:0};function jc(e,r,t,n,i){if(e.length===0)return-1;if(typeof t=="string"?(n=t,t=0):t>2147483647?t=2147483647:t<-2147483648&&(t=-2147483648),t=+t,Ga(t)&&(t=i?0:e.length-1),t<0&&(t=e.length+t),t>=e.length){if(i)return-1;t=e.length-1}else if(t<0)if(i)t=0;else return-1;if(typeof r=="string"&&(r=d.from(r,n)),d.isBuffer(r))return r.length===0?-1:Fc(e,r,t,n,i);if(typeof r=="number")return r=r&255,typeof Uint8Array.prototype.indexOf=="function"?i?Uint8Array.prototype.indexOf.call(e,r,t):Uint8Array.prototype.lastIndexOf.call(e,r,t):Fc(e,[r],t,n,i);throw new TypeError("val must be string, number or Buffer")}function Fc(e,r,t,n,i){var a=1,o=e.length,f=r.length;if(n!==void 0&&(n=String(n).toLowerCase(),n==="ucs2"||n==="ucs-2"||n==="utf16le"||n==="utf-16le")){if(e.length<2||r.length<2)return-1;a=2,o/=2,f/=2,t/=2}function s(h,v){return a===1?h[v]:h.readUInt16BE(v*a)}var u;if(i){var l=-1;for(u=t;u<o;u++)if(s(e,u)===s(r,l===-1?0:u-l)){if(l===-1&&(l=u),u-l+1===f)return l*a}else l!==-1&&(u-=u-l),l=-1}else for(t+f>o&&(t=o-f),u=t;u>=0;u--){for(var c=!0,p=0;p<f;p++)if(s(e,u+p)!==s(r,p)){c=!1;break}if(c)return u}return-1}d.prototype.includes=function(r,t,n){return this.indexOf(r,t,n)!==-1};d.prototype.indexOf=function(r,t,n){return jc(this,r,t,n,!0)};d.prototype.lastIndexOf=function(r,t,n){return jc(this,r,t,n,!1)};function Lg(e,r,t,n){t=Number(t)||0;var i=e.length-t;n?(n=Number(n),n>i&&(n=i)):n=i;var a=r.length;n>a/2&&(n=a/2);for(var o=0;o<n;++o){var f=parseInt(r.substr(o*2,2),16);if(Ga(f))return o;e[t+o]=f}return o}function Fg(e,r,t,n){return ni(Za(r,e.length-t),e,t,n)}function kg(e,r,t,n){return ni(Wg(r),e,t,n)}function Pg(e,r,t,n){return ni(zc(r),e,t,n)}function Dg(e,r,t,n){return ni(Hg(r,e.length-t),e,t,n)}d.prototype.write=function(r,t,n,i){if(t===void 0)i="utf8",n=this.length,t=0;else if(n===void 0&&typeof t=="string")i=t,n=this.length,t=0;else if(isFinite(t))t=t>>>0,isFinite(n)?(n=n>>>0,i===void 0&&(i="utf8")):(i=n,n=void 0);else throw new Error("Buffer.write(string, encoding, offset[, length]) is no longer supported");var a=this.length-t;if((n===void 0||n>a)&&(n=a),r.length>0&&(n<0||t<0)||t>this.length)throw new RangeError("Attempt to write outside buffer bounds");i||(i="utf8");for(var o=!1;;)switch(i){case"hex":return Lg(this,r,t,n);case"utf8":case"utf-8":return Fg(this,r,t,n);case"ascii":case"latin1":case"binary":return kg(this,r,t,n);case"base64":return Pg(this,r,t,n);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return Dg(this,r,t,n);default:if(o)throw new TypeError("Unknown encoding: "+i);i=(""+i).toLowerCase(),o=!0}};d.prototype.toJSON=function(){return{type:"Buffer",data:Array.prototype.slice.call(this._arr||this,0)}};function Mg(e,r,t){return r===0&&t===e.length?Ua.fromByteArray(e):Ua.fromByteArray(e.slice(r,t))}function Bc(e,r,t){t=Math.min(e.length,t);for(var n=[],i=r;i<t;){var a=e[i],o=null,f=a>239?4:a>223?3:a>191?2:1;if(i+f<=t){var s,u,l,c;switch(f){case 1:a<128&&(o=a);break;case 2:s=e[i+1],(s&192)===128&&(c=(a&31)<<6|s&63,c>127&&(o=c));break;case 3:s=e[i+1],u=e[i+2],(s&192)===128&&(u&192)===128&&(c=(a&15)<<12|(s&63)<<6|u&63,c>2047&&(c<55296||c>57343)&&(o=c));break;case 4:s=e[i+1],u=e[i+2],l=e[i+3],(s&192)===128&&(u&192)===128&&(l&192)===128&&(c=(a&15)<<18|(s&63)<<12|(u&63)<<6|l&63,c>65535&&c<1114112&&(o=c))}}o===null?(o=65533,f=1):o>65535&&(o-=65536,n.push(o>>>10&1023|55296),o=56320|o&1023),n.push(o),i+=f}return jg(n)}var kc=4096;function jg(e){var r=e.length;if(r<=kc)return String.fromCharCode.apply(String,e);for(var t="",n=0;n<r;)t+=String.fromCharCode.apply(String,e.slice(n,n+=kc));return t}function Bg(e,r,t){var n="";t=Math.min(e.length,t);for(var i=r;i<t;++i)n+=String.fromCharCode(e[i]&127);return n}function qg(e,r,t){var n="";t=Math.min(e.length,t);for(var i=r;i<t;++i)n+=String.fromCharCode(e[i]);return n}function Ug(e,r,t){var n=e.length;(!r||r<0)&&(r=0),(!t||t<0||t>n)&&(t=n);for(var i="",a=r;a<t;++a)i+=Gg[e[a]];return i}function Cg(e,r,t){for(var n=e.slice(r,t),i="",a=0;a<n.length-1;a+=2)i+=String.fromCharCode(n[a]+n[a+1]*256);return i}d.prototype.slice=function(r,t){var n=this.length;r=~~r,t=t===void 0?n:~~t,r<0?(r+=n,r<0&&(r=0)):r>n&&(r=n),t<0?(t+=n,t<0&&(t=0)):t>n&&(t=n),t<r&&(t=r);var i=this.subarray(r,t);return Object.setPrototypeOf(i,d.prototype),i};function $(e,r,t){if(e%1!==0||e<0)throw new RangeError("offset is not uint");if(e+r>t)throw new RangeError("Trying to access beyond buffer length")}d.prototype.readUintLE=d.prototype.readUIntLE=function(r,t,n){r=r>>>0,t=t>>>0,n||$(r,t,this.length);for(var i=this[r],a=1,o=0;++o<t&&(a*=256);)i+=this[r+o]*a;return i};d.prototype.readUintBE=d.prototype.readUIntBE=function(r,t,n){r=r>>>0,t=t>>>0,n||$(r,t,this.length);for(var i=this[r+--t],a=1;t>0&&(a*=256);)i+=this[r+--t]*a;return i};d.prototype.readUint8=d.prototype.readUInt8=function(r,t){return r=r>>>0,t||$(r,1,this.length),this[r]};d.prototype.readUint16LE=d.prototype.readUInt16LE=function(r,t){return r=r>>>0,t||$(r,2,this.length),this[r]|this[r+1]<<8};d.prototype.readUint16BE=d.prototype.readUInt16BE=function(r,t){return r=r>>>0,t||$(r,2,this.length),this[r]<<8|this[r+1]};d.prototype.readUint32LE=d.prototype.readUInt32LE=function(r,t){return r=r>>>0,t||$(r,4,this.length),(this[r]|this[r+1]<<8|this[r+2]<<16)+this[r+3]*16777216};d.prototype.readUint32BE=d.prototype.readUInt32BE=function(r,t){return r=r>>>0,t||$(r,4,this.length),this[r]*16777216+(this[r+1]<<16|this[r+2]<<8|this[r+3])};d.prototype.readIntLE=function(r,t,n){r=r>>>0,t=t>>>0,n||$(r,t,this.length);for(var i=this[r],a=1,o=0;++o<t&&(a*=256);)i+=this[r+o]*a;return a*=128,i>=a&&(i-=Math.pow(2,8*t)),i};d.prototype.readIntBE=function(r,t,n){r=r>>>0,t=t>>>0,n||$(r,t,this.length);for(var i=t,a=1,o=this[r+--i];i>0&&(a*=256);)o+=this[r+--i]*a;return a*=128,o>=a&&(o-=Math.pow(2,8*t)),o};d.prototype.readInt8=function(r,t){return r=r>>>0,t||$(r,1,this.length),this[r]&128?(255-this[r]+1)*-1:this[r]};d.prototype.readInt16LE=function(r,t){r=r>>>0,t||$(r,2,this.length);var n=this[r]|this[r+1]<<8;return n&32768?n|4294901760:n};d.prototype.readInt16BE=function(r,t){r=r>>>0,t||$(r,2,this.length);var n=this[r+1]|this[r]<<8;return n&32768?n|4294901760:n};d.prototype.readInt32LE=function(r,t){return r=r>>>0,t||$(r,4,this.length),this[r]|this[r+1]<<8|this[r+2]<<16|this[r+3]<<24};d.prototype.readInt32BE=function(r,t){return r=r>>>0,t||$(r,4,this.length),this[r]<<24|this[r+1]<<16|this[r+2]<<8|this[r+3]};d.prototype.readFloatLE=function(r,t){return r=r>>>0,t||$(r,4,this.length),Gr.read(this,r,!0,23,4)};d.prototype.readFloatBE=function(r,t){return r=r>>>0,t||$(r,4,this.length),Gr.read(this,r,!1,23,4)};d.prototype.readDoubleLE=function(r,t){return r=r>>>0,t||$(r,8,this.length),Gr.read(this,r,!0,52,8)};d.prototype.readDoubleBE=function(r,t){return r=r>>>0,t||$(r,8,this.length),Gr.read(this,r,!1,52,8)};function ne(e,r,t,n,i,a){if(!d.isBuffer(e))throw new TypeError('"buffer" argument must be a Buffer instance');if(r>i||r<a)throw new RangeError('"value" argument is out of bounds');if(t+n>e.length)throw new RangeError("Index out of range")}d.prototype.writeUintLE=d.prototype.writeUIntLE=function(r,t,n,i){if(r=+r,t=t>>>0,n=n>>>0,!i){var a=Math.pow(2,8*n)-1;ne(this,r,t,n,a,0)}var o=1,f=0;for(this[t]=r&255;++f<n&&(o*=256);)this[t+f]=r/o&255;return t+n};d.prototype.writeUintBE=d.prototype.writeUIntBE=function(r,t,n,i){if(r=+r,t=t>>>0,n=n>>>0,!i){var a=Math.pow(2,8*n)-1;ne(this,r,t,n,a,0)}var o=n-1,f=1;for(this[t+o]=r&255;--o>=0&&(f*=256);)this[t+o]=r/f&255;return t+n};d.prototype.writeUint8=d.prototype.writeUInt8=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,1,255,0),this[t]=r&255,t+1};d.prototype.writeUint16LE=d.prototype.writeUInt16LE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,2,65535,0),this[t]=r&255,this[t+1]=r>>>8,t+2};d.prototype.writeUint16BE=d.prototype.writeUInt16BE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,2,65535,0),this[t]=r>>>8,this[t+1]=r&255,t+2};d.prototype.writeUint32LE=d.prototype.writeUInt32LE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,4,4294967295,0),this[t+3]=r>>>24,this[t+2]=r>>>16,this[t+1]=r>>>8,this[t]=r&255,t+4};d.prototype.writeUint32BE=d.prototype.writeUInt32BE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,4,4294967295,0),this[t]=r>>>24,this[t+1]=r>>>16,this[t+2]=r>>>8,this[t+3]=r&255,t+4};d.prototype.writeIntLE=function(r,t,n,i){if(r=+r,t=t>>>0,!i){var a=Math.pow(2,8*n-1);ne(this,r,t,n,a-1,-a)}var o=0,f=1,s=0;for(this[t]=r&255;++o<n&&(f*=256);)r<0&&s===0&&this[t+o-1]!==0&&(s=1),this[t+o]=(r/f>>0)-s&255;return t+n};d.prototype.writeIntBE=function(r,t,n,i){if(r=+r,t=t>>>0,!i){var a=Math.pow(2,8*n-1);ne(this,r,t,n,a-1,-a)}var o=n-1,f=1,s=0;for(this[t+o]=r&255;--o>=0&&(f*=256);)r<0&&s===0&&this[t+o+1]!==0&&(s=1),this[t+o]=(r/f>>0)-s&255;return t+n};d.prototype.writeInt8=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,1,127,-128),r<0&&(r=255+r+1),this[t]=r&255,t+1};d.prototype.writeInt16LE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,2,32767,-32768),this[t]=r&255,this[t+1]=r>>>8,t+2};d.prototype.writeInt16BE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,2,32767,-32768),this[t]=r>>>8,this[t+1]=r&255,t+2};d.prototype.writeInt32LE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,4,2147483647,-2147483648),this[t]=r&255,this[t+1]=r>>>8,this[t+2]=r>>>16,this[t+3]=r>>>24,t+4};d.prototype.writeInt32BE=function(r,t,n){return r=+r,t=t>>>0,n||ne(this,r,t,4,2147483647,-2147483648),r<0&&(r=4294967295+r+1),this[t]=r>>>24,this[t+1]=r>>>16,this[t+2]=r>>>8,this[t+3]=r&255,t+4};function qc(e,r,t,n,i,a){if(t+n>e.length)throw new RangeError("Index out of range");if(t<0)throw new RangeError("Index out of range")}function Uc(e,r,t,n,i){return r=+r,t=t>>>0,i||qc(e,r,t,4,34028234663852886e22,-34028234663852886e22),Gr.write(e,r,t,n,23,4),t+4}d.prototype.writeFloatLE=function(r,t,n){return Uc(this,r,t,!0,n)};d.prototype.writeFloatBE=function(r,t,n){return Uc(this,r,t,!1,n)};function Cc(e,r,t,n,i){return r=+r,t=t>>>0,i||qc(e,r,t,8,17976931348623157e292,-17976931348623157e292),Gr.write(e,r,t,n,52,8),t+8}d.prototype.writeDoubleLE=function(r,t,n){return Cc(this,r,t,!0,n)};d.prototype.writeDoubleBE=function(r,t,n){return Cc(this,r,t,!1,n)};d.prototype.copy=function(r,t,n,i){if(!d.isBuffer(r))throw new TypeError("argument should be a Buffer");if(n||(n=0),!i&&i!==0&&(i=this.length),t>=r.length&&(t=r.length),t||(t=0),i>0&&i<n&&(i=n),i===n||r.length===0||this.length===0)return 0;if(t<0)throw new RangeError("targetStart out of bounds");if(n<0||n>=this.length)throw new RangeError("Index out of range");if(i<0)throw new RangeError("sourceEnd out of bounds");i>this.length&&(i=this.length),r.length-t<i-n&&(i=r.length-t+n);var a=i-n;return this===r&&typeof Uint8Array.prototype.copyWithin=="function"?this.copyWithin(t,n,i):Uint8Array.prototype.set.call(r,this.subarray(n,i),t),a};d.prototype.fill=function(r,t,n,i){if(typeof r=="string"){if(typeof t=="string"?(i=t,t=0,n=this.length):typeof n=="string"&&(i=n,n=this.length),i!==void 0&&typeof i!="string")throw new TypeError("encoding must be a string");if(typeof i=="string"&&!d.isEncoding(i))throw new TypeError("Unknown encoding: "+i);if(r.length===1){var a=r.charCodeAt(0);(i==="utf8"&&a<128||i==="latin1")&&(r=a)}}else typeof r=="number"?r=r&255:typeof r=="boolean"&&(r=Number(r));if(t<0||this.length<t||this.length<n)throw new RangeError("Out of range index");if(n<=t)return this;t=t>>>0,n=n===void 0?this.length:n>>>0,r||(r=0);var o;if(typeof r=="number")for(o=t;o<n;++o)this[o]=r;else{var f=d.isBuffer(r)?r:d.from(r,i),s=f.length;if(s===0)throw new TypeError('The value "'+r+'" is invalid for argument "value"');for(o=0;o<n-t;++o)this[o+t]=f[o%s]}return this};var zg=/[^+/0-9A-Za-z-_]/g;function Zg(e){if(e=e.split("=")[0],e=e.trim().replace(zg,""),e.length<2)return"";for(;e.length%4!==0;)e=e+"=";return e}function Za(e,r){r=r||1/0;for(var t,n=e.length,i=null,a=[],o=0;o<n;++o){if(t=e.charCodeAt(o),t>55295&&t<57344){if(!i){if(t>56319){(r-=3)>-1&&a.push(239,191,189);continue}else if(o+1===n){(r-=3)>-1&&a.push(239,191,189);continue}i=t;continue}if(t<56320){(r-=3)>-1&&a.push(239,191,189),i=t;continue}t=(i-55296<<10|t-56320)+65536}else i&&(r-=3)>-1&&a.push(239,191,189);if(i=null,t<128){if((r-=1)<0)break;a.push(t)}else if(t<2048){if((r-=2)<0)break;a.push(t>>6|192,t&63|128)}else if(t<65536){if((r-=3)<0)break;a.push(t>>12|224,t>>6&63|128,t&63|128)}else if(t<1114112){if((r-=4)<0)break;a.push(t>>18|240,t>>12&63|128,t>>6&63|128,t&63|128)}else throw new Error("Invalid code point")}return a}function Wg(e){for(var r=[],t=0;t<e.length;++t)r.push(e.charCodeAt(t)&255);return r}function Hg(e,r){for(var t,n,i,a=[],o=0;o<e.length&&!((r-=2)<0);++o)t=e.charCodeAt(o),n=t>>8,i=t%256,a.push(i),a.push(n);return a}function zc(e){return Ua.toByteArray(Zg(e))}function ni(e,r,t,n){for(var i=0;i<n&&!(i+t>=r.length||i>=e.length);++i)r[i+t]=e[i];return i}function Ae(e,r){return e instanceof r||e!=null&&e.constructor!=null&&e.constructor.name!=null&&e.constructor.name===r.name}function Ga(e){return e!==e}var Gg=(function(){for(var e="0123456789abcdef",r=new Array(256),t=0;t<16;++t)for(var n=t*16,i=0;i<16;++i)r[n+i]=e[t]+e[i];return r})()});var oi=y((sS,$a)=>{"use strict";var Vr=typeof Reflect=="object"?Reflect:null,Zc=Vr&&typeof Vr.apply=="function"?Vr.apply:function(r,t,n){return Function.prototype.apply.call(r,t,n)},ii;Vr&&typeof Vr.ownKeys=="function"?ii=Vr.ownKeys:Object.getOwnPropertySymbols?ii=function(r){return Object.getOwnPropertyNames(r).concat(Object.getOwnPropertySymbols(r))}:ii=function(r){return Object.getOwnPropertyNames(r)};function $g(e){console&&console.warn&&console.warn(e)}var Hc=Number.isNaN||function(r){return r!==r};function q(){q.init.call(this)}$a.exports=q;$a.exports.once=Xg;q.EventEmitter=q;q.prototype._events=void 0;q.prototype._eventsCount=0;q.prototype._maxListeners=void 0;var Wc=10;function ai(e){if(typeof e!="function")throw new TypeError('The "listener" argument must be of type Function. Received type '+typeof e)}Object.defineProperty(q,"defaultMaxListeners",{enumerable:!0,get:function(){return Wc},set:function(e){if(typeof e!="number"||e<0||Hc(e))throw new RangeError('The value of "defaultMaxListeners" is out of range. It must be a non-negative number. Received '+e+".");Wc=e}});q.init=function(){(this._events===void 0||this._events===Object.getPrototypeOf(this)._events)&&(this._events=Object.create(null),this._eventsCount=0),this._maxListeners=this._maxListeners||void 0};q.prototype.setMaxListeners=function(r){if(typeof r!="number"||r<0||Hc(r))throw new RangeError('The value of "n" is out of range. It must be a non-negative number. Received '+r+".");return this._maxListeners=r,this};function Gc(e){return e._maxListeners===void 0?q.defaultMaxListeners:e._maxListeners}q.prototype.getMaxListeners=function(){return Gc(this)};q.prototype.emit=function(r){for(var t=[],n=1;n<arguments.length;n++)t.push(arguments[n]);var i=r==="error",a=this._events;if(a!==void 0)i=i&&a.error===void 0;else if(!i)return!1;if(i){var o;if(t.length>0&&(o=t[0]),o instanceof Error)throw o;var f=new Error("Unhandled error."+(o?" ("+o.message+")":""));throw f.context=o,f}var s=a[r];if(s===void 0)return!1;if(typeof s=="function")Zc(s,this,t);else for(var u=s.length,l=Xc(s,u),n=0;n<u;++n)Zc(l[n],this,t);return!0};function $c(e,r,t,n){var i,a,o;if(ai(t),a=e._events,a===void 0?(a=e._events=Object.create(null),e._eventsCount=0):(a.newListener!==void 0&&(e.emit("newListener",r,t.listener?t.listener:t),a=e._events),o=a[r]),o===void 0)o=a[r]=t,++e._eventsCount;else if(typeof o=="function"?o=a[r]=n?[t,o]:[o,t]:n?o.unshift(t):o.push(t),i=Gc(e),i>0&&o.length>i&&!o.warned){o.warned=!0;var f=new Error("Possible EventEmitter memory leak detected. "+o.length+" "+String(r)+" listeners added. Use emitter.setMaxListeners() to increase limit");f.name="MaxListenersExceededWarning",f.emitter=e,f.type=r,f.count=o.length,$g(f)}return e}q.prototype.addListener=function(r,t){return $c(this,r,t,!1)};q.prototype.on=q.prototype.addListener;q.prototype.prependListener=function(r,t){return $c(this,r,t,!0)};function Vg(){if(!this.fired)return this.target.removeListener(this.type,this.wrapFn),this.fired=!0,arguments.length===0?this.listener.call(this.target):this.listener.apply(this.target,arguments)}function Vc(e,r,t){var n={fired:!1,wrapFn:void 0,target:e,type:r,listener:t},i=Vg.bind(n);return i.listener=t,n.wrapFn=i,i}q.prototype.once=function(r,t){return ai(t),this.on(r,Vc(this,r,t)),this};q.prototype.prependOnceListener=function(r,t){return ai(t),this.prependListener(r,Vc(this,r,t)),this};q.prototype.removeListener=function(r,t){var n,i,a,o,f;if(ai(t),i=this._events,i===void 0)return this;if(n=i[r],n===void 0)return this;if(n===t||n.listener===t)--this._eventsCount===0?this._events=Object.create(null):(delete i[r],i.removeListener&&this.emit("removeListener",r,n.listener||t));else if(typeof n!="function"){for(a=-1,o=n.length-1;o>=0;o--)if(n[o]===t||n[o].listener===t){f=n[o].listener,a=o;break}if(a<0)return this;a===0?n.shift():Yg(n,a),n.length===1&&(i[r]=n[0]),i.removeListener!==void 0&&this.emit("removeListener",r,f||t)}return this};q.prototype.off=q.prototype.removeListener;q.prototype.removeAllListeners=function(r){var t,n,i;if(n=this._events,n===void 0)return this;if(n.removeListener===void 0)return arguments.length===0?(this._events=Object.create(null),this._eventsCount=0):n[r]!==void 0&&(--this._eventsCount===0?this._events=Object.create(null):delete n[r]),this;if(arguments.length===0){var a=Object.keys(n),o;for(i=0;i<a.length;++i)o=a[i],o!=="removeListener"&&this.removeAllListeners(o);return this.removeAllListeners("removeListener"),this._events=Object.create(null),this._eventsCount=0,this}if(t=n[r],typeof t=="function")this.removeListener(r,t);else if(t!==void 0)for(i=t.length-1;i>=0;i--)this.removeListener(r,t[i]);return this};function Yc(e,r,t){var n=e._events;if(n===void 0)return[];var i=n[r];return i===void 0?[]:typeof i=="function"?t?[i.listener||i]:[i]:t?Kg(i):Xc(i,i.length)}q.prototype.listeners=function(r){return Yc(this,r,!0)};q.prototype.rawListeners=function(r){return Yc(this,r,!1)};q.listenerCount=function(e,r){return typeof e.listenerCount=="function"?e.listenerCount(r):Kc.call(e,r)};q.prototype.listenerCount=Kc;function Kc(e){var r=this._events;if(r!==void 0){var t=r[e];if(typeof t=="function")return 1;if(t!==void 0)return t.length}return 0}q.prototype.eventNames=function(){return this._eventsCount>0?ii(this._events):[]};function Xc(e,r){for(var t=new Array(r),n=0;n<r;++n)t[n]=e[n];return t}function Yg(e,r){for(;r+1<e.length;r++)e[r]=e[r+1];e.pop()}function Kg(e){for(var r=new Array(e.length),t=0;t<r.length;++t)r[t]=e[t].listener||e[t];return r}function Xg(e,r){return new Promise(function(t,n){function i(o){e.removeListener(r,a),n(o)}function a(){typeof e.removeListener=="function"&&e.removeListener("error",i),t([].slice.call(arguments))}Jc(e,r,a,{once:!0}),r!=="error"&&Jg(e,i,{once:!0})})}function Jg(e,r,t){typeof e.on=="function"&&Jc(e,"error",r,t)}function Jc(e,r,t,n){if(typeof e.on=="function")n.once?e.once(r,t):e.on(r,t);else if(typeof e.addEventListener=="function")e.addEventListener(r,function i(a){n.once&&e.removeEventListener(r,i),t(a)});else throw new TypeError('The "emitter" argument must be of type EventEmitter. Received type '+typeof e)}});var Va=y((cS,Qc)=>{Qc.exports=oi().EventEmitter});var ah=y((hS,ih)=>{"use strict";function eh(e,r){var t=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);r&&(n=n.filter(function(i){return Object.getOwnPropertyDescriptor(e,i).enumerable})),t.push.apply(t,n)}return t}function rh(e){for(var r=1;r<arguments.length;r++){var t=arguments[r]!=null?arguments[r]:{};r%2?eh(Object(t),!0).forEach(function(n){Qg(e,n,t[n])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(t)):eh(Object(t)).forEach(function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(t,n))})}return e}function Qg(e,r,t){return r=nh(r),r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function eb(e,r){if(!(e instanceof r))throw new TypeError("Cannot call a class as a function")}function th(e,r){for(var t=0;t<r.length;t++){var n=r[t];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,nh(n.key),n)}}function rb(e,r,t){return r&&th(e.prototype,r),t&&th(e,t),Object.defineProperty(e,"prototype",{writable:!1}),e}function nh(e){var r=tb(e,"string");return typeof r=="symbol"?r:String(r)}function tb(e,r){if(typeof e!="object"||e===null)return e;var t=e[Symbol.toPrimitive];if(t!==void 0){var n=t.call(e,r||"default");if(typeof n!="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(r==="string"?String:Number)(e)}var nb=lr(),fi=nb.Buffer,ib=Se(),Ya=ib.inspect,ab=Ya&&Ya.custom||"inspect";function ob(e,r,t){fi.prototype.copy.call(e,r,t)}ih.exports=(function(){function e(){eb(this,e),this.head=null,this.tail=null,this.length=0}return rb(e,[{key:"push",value:function(t){var n={data:t,next:null};this.length>0?this.tail.next=n:this.head=n,this.tail=n,++this.length}},{key:"unshift",value:function(t){var n={data:t,next:this.head};this.length===0&&(this.tail=n),this.head=n,++this.length}},{key:"shift",value:function(){if(this.length!==0){var t=this.head.data;return this.length===1?this.head=this.tail=null:this.head=this.head.next,--this.length,t}}},{key:"clear",value:function(){this.head=this.tail=null,this.length=0}},{key:"join",value:function(t){if(this.length===0)return"";for(var n=this.head,i=""+n.data;n=n.next;)i+=t+n.data;return i}},{key:"concat",value:function(t){if(this.length===0)return fi.alloc(0);for(var n=fi.allocUnsafe(t>>>0),i=this.head,a=0;i;)ob(i.data,n,a),a+=i.data.length,i=i.next;return n}},{key:"consume",value:function(t,n){var i;return t<this.head.data.length?(i=this.head.data.slice(0,t),this.head.data=this.head.data.slice(t)):t===this.head.data.length?i=this.shift():i=n?this._getString(t):this._getBuffer(t),i}},{key:"first",value:function(){return this.head.data}},{key:"_getString",value:function(t){var n=this.head,i=1,a=n.data;for(t-=a.length;n=n.next;){var o=n.data,f=t>o.length?o.length:t;if(f===o.length?a+=o:a+=o.slice(0,t),t-=f,t===0){f===o.length?(++i,n.next?this.head=n.next:this.head=this.tail=null):(this.head=n,n.data=o.slice(f));break}++i}return this.length-=i,a}},{key:"_getBuffer",value:function(t){var n=fi.allocUnsafe(t),i=this.head,a=1;for(i.data.copy(n),t-=i.data.length;i=i.next;){var o=i.data,f=t>o.length?o.length:t;if(o.copy(n,n.length-t,0,f),t-=f,t===0){f===o.length?(++a,i.next?this.head=i.next:this.head=this.tail=null):(this.head=i,i.data=o.slice(f));break}++a}return this.length-=a,n}},{key:ab,value:function(t,n){return Ya(this,rh(rh({},n),{},{depth:0,customInspect:!1}))}}]),e})()});var Xa=y((pS,fh)=>{"use strict";function fb(e,r){var t=this,n=this._readableState&&this._readableState.destroyed,i=this._writableState&&this._writableState.destroyed;return n||i?(r?r(e):e&&(this._writableState?this._writableState.errorEmitted||(this._writableState.errorEmitted=!0,process.nextTick(Ka,this,e)):process.nextTick(Ka,this,e)),this):(this._readableState&&(this._readableState.destroyed=!0),this._writableState&&(this._writableState.destroyed=!0),this._destroy(e||null,function(a){!r&&a?t._writableState?t._writableState.errorEmitted?process.nextTick(ui,t):(t._writableState.errorEmitted=!0,process.nextTick(oh,t,a)):process.nextTick(oh,t,a):r?(process.nextTick(ui,t),r(a)):process.nextTick(ui,t)}),this)}function oh(e,r){Ka(e,r),ui(e)}function ui(e){e._writableState&&!e._writableState.emitClose||e._readableState&&!e._readableState.emitClose||e.emit("close")}function ub(){this._readableState&&(this._readableState.destroyed=!1,this._readableState.reading=!1,this._readableState.ended=!1,this._readableState.endEmitted=!1),this._writableState&&(this._writableState.destroyed=!1,this._writableState.ended=!1,this._writableState.ending=!1,this._writableState.finalCalled=!1,this._writableState.prefinished=!1,this._writableState.finished=!1,this._writableState.errorEmitted=!1)}function Ka(e,r){e.emit("error",r)}function lb(e,r){var t=e._readableState,n=e._writableState;t&&t.autoDestroy||n&&n.autoDestroy?e.destroy(r):e.emit("error",r)}fh.exports={destroy:fb,undestroy:ub,errorOrDestroy:lb}});var sr=y((dS,sh)=>{"use strict";function sb(e,r){e.prototype=Object.create(r.prototype),e.prototype.constructor=e,e.__proto__=r}var lh={};function ce(e,r,t){t||(t=Error);function n(a,o,f){return typeof r=="string"?r:r(a,o,f)}var i=(function(a){sb(o,a);function o(f,s,u){return a.call(this,n(f,s,u))||this}return o})(t);i.prototype.name=t.name,i.prototype.code=e,lh[e]=i}function uh(e,r){if(Array.isArray(e)){var t=e.length;return e=e.map(function(n){return String(n)}),t>2?"one of ".concat(r," ").concat(e.slice(0,t-1).join(", "),", or ")+e[t-1]:t===2?"one of ".concat(r," ").concat(e[0]," or ").concat(e[1]):"of ".concat(r," ").concat(e[0])}else return"of ".concat(r," ").concat(String(e))}function cb(e,r,t){return e.substr(!t||t<0?0:+t,r.length)===r}function hb(e,r,t){return(t===void 0||t>e.length)&&(t=e.length),e.substring(t-r.length,t)===r}function pb(e,r,t){return typeof t!="number"&&(t=0),t+r.length>e.length?!1:e.indexOf(r,t)!==-1}ce("ERR_INVALID_OPT_VALUE",function(e,r){return'The value "'+r+'" is invalid for option "'+e+'"'},TypeError);ce("ERR_INVALID_ARG_TYPE",function(e,r,t){var n;typeof r=="string"&&cb(r,"not ")?(n="must not be",r=r.replace(/^not /,"")):n="must be";var i;if(hb(e," argument"))i="The ".concat(e," ").concat(n," ").concat(uh(r,"type"));else{var a=pb(e,".")?"property":"argument";i='The "'.concat(e,'" ').concat(a," ").concat(n," ").concat(uh(r,"type"))}return i+=". Received type ".concat(typeof t),i},TypeError);ce("ERR_STREAM_PUSH_AFTER_EOF","stream.push() after EOF");ce("ERR_METHOD_NOT_IMPLEMENTED",function(e){return"The "+e+" method is not implemented"});ce("ERR_STREAM_PREMATURE_CLOSE","Premature close");ce("ERR_STREAM_DESTROYED",function(e){return"Cannot call "+e+" after a stream was destroyed"});ce("ERR_MULTIPLE_CALLBACK","Callback called multiple times");ce("ERR_STREAM_CANNOT_PIPE","Cannot pipe, not readable");ce("ERR_STREAM_WRITE_AFTER_END","write after end");ce("ERR_STREAM_NULL_VALUES","May not write null values to stream",TypeError);ce("ERR_UNKNOWN_ENCODING",function(e){return"Unknown encoding: "+e},TypeError);ce("ERR_STREAM_UNSHIFT_AFTER_END_EVENT","stream.unshift() after end event");sh.exports.codes=lh});var Ja=y((yS,ch)=>{"use strict";var db=sr().codes.ERR_INVALID_OPT_VALUE;function yb(e,r,t){return e.highWaterMark!=null?e.highWaterMark:r?e[t]:null}function vb(e,r,t,n){var i=yb(r,n,t);if(i!=null){if(!(isFinite(i)&&Math.floor(i)===i)||i<0){var a=n?t:"highWaterMark";throw new db(a,i)}return Math.floor(i)}return e.objectMode?16:16*1024}ch.exports={getHighWaterMark:vb}});var ph=y((vS,hh)=>{hh.exports=_b;function _b(e,r){if(Qa("noDeprecation"))return e;var t=!1;function n(){if(!t){if(Qa("throwDeprecation"))throw new Error(r);Qa("traceDeprecation")?console.trace(r):console.warn(r),t=!0}return e.apply(this,arguments)}return n}function Qa(e){try{if(!globalThis.localStorage)return!1}catch{return!1}var r=globalThis.localStorage[e];return r==null?!1:String(r).toLowerCase()==="true"}});var to=y((_S,bh)=>{"use strict";bh.exports=z;function yh(e){var r=this;this.next=null,this.entry=null,this.finish=function(){Wb(r,e)}}var Yr;z.WritableState=Ft;var gb={deprecate:ph()},vh=Va(),si=lr().Buffer,bb=(typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof self<"u"?self:{}).Uint8Array||function(){};function wb(e){return si.from(e)}function Eb(e){return si.isBuffer(e)||e instanceof bb}var ro=Xa(),mb=Ja(),Sb=mb.getHighWaterMark,We=sr().codes,xb=We.ERR_INVALID_ARG_TYPE,Ab=We.ERR_METHOD_NOT_IMPLEMENTED,Rb=We.ERR_MULTIPLE_CALLBACK,Ob=We.ERR_STREAM_CANNOT_PIPE,Tb=We.ERR_STREAM_DESTROYED,Ib=We.ERR_STREAM_NULL_VALUES,Nb=We.ERR_STREAM_WRITE_AFTER_END,Lb=We.ERR_UNKNOWN_ENCODING,Kr=ro.errorOrDestroy;Be()(z,vh);function Fb(){}function Ft(e,r,t){Yr=Yr||cr(),e=e||{},typeof t!="boolean"&&(t=r instanceof Yr),this.objectMode=!!e.objectMode,t&&(this.objectMode=this.objectMode||!!e.writableObjectMode),this.highWaterMark=Sb(this,e,"writableHighWaterMark",t),this.finalCalled=!1,this.needDrain=!1,this.ending=!1,this.ended=!1,this.finished=!1,this.destroyed=!1;var n=e.decodeStrings===!1;this.decodeStrings=!n,this.defaultEncoding=e.defaultEncoding||"utf8",this.length=0,this.writing=!1,this.corked=0,this.sync=!0,this.bufferProcessing=!1,this.onwrite=function(i){qb(r,i)},this.writecb=null,this.writelen=0,this.bufferedRequest=null,this.lastBufferedRequest=null,this.pendingcb=0,this.prefinished=!1,this.errorEmitted=!1,this.emitClose=e.emitClose!==!1,this.autoDestroy=!!e.autoDestroy,this.bufferedRequestCount=0,this.corkedRequestsFree=new yh(this)}Ft.prototype.getBuffer=function(){for(var r=this.bufferedRequest,t=[];r;)t.push(r),r=r.next;return t};(function(){try{Object.defineProperty(Ft.prototype,"buffer",{get:gb.deprecate(function(){return this.getBuffer()},"_writableState.buffer is deprecated. Use _writableState.getBuffer instead.","DEP0003")})}catch{}})();var li;typeof Symbol=="function"&&Symbol.hasInstance&&typeof Function.prototype[Symbol.hasInstance]=="function"?(li=Function.prototype[Symbol.hasInstance],Object.defineProperty(z,Symbol.hasInstance,{value:function(r){return li.call(this,r)?!0:this!==z?!1:r&&r._writableState instanceof Ft}})):li=function(r){return r instanceof this};function z(e){Yr=Yr||cr();var r=this instanceof Yr;if(!r&&!li.call(z,this))return new z(e);this._writableState=new Ft(e,this,r),this.writable=!0,e&&(typeof e.write=="function"&&(this._write=e.write),typeof e.writev=="function"&&(this._writev=e.writev),typeof e.destroy=="function"&&(this._destroy=e.destroy),typeof e.final=="function"&&(this._final=e.final)),vh.call(this)}z.prototype.pipe=function(){Kr(this,new Ob)};function kb(e,r){var t=new Nb;Kr(e,t),process.nextTick(r,t)}function Pb(e,r,t,n){var i;return t===null?i=new Ib:typeof t!="string"&&!r.objectMode&&(i=new xb("chunk",["string","Buffer"],t)),i?(Kr(e,i),process.nextTick(n,i),!1):!0}z.prototype.write=function(e,r,t){var n=this._writableState,i=!1,a=!n.objectMode&&Eb(e);return a&&!si.isBuffer(e)&&(e=wb(e)),typeof r=="function"&&(t=r,r=null),a?r="buffer":r||(r=n.defaultEncoding),typeof t!="function"&&(t=Fb),n.ending?kb(this,t):(a||Pb(this,n,e,t))&&(n.pendingcb++,i=Mb(this,n,a,e,r,t)),i};z.prototype.cork=function(){this._writableState.corked++};z.prototype.uncork=function(){var e=this._writableState;e.corked&&(e.corked--,!e.writing&&!e.corked&&!e.bufferProcessing&&e.bufferedRequest&&_h(this,e))};z.prototype.setDefaultEncoding=function(r){if(typeof r=="string"&&(r=r.toLowerCase()),!(["hex","utf8","utf-8","ascii","binary","base64","ucs2","ucs-2","utf16le","utf-16le","raw"].indexOf((r+"").toLowerCase())>-1))throw new Lb(r);return this._writableState.defaultEncoding=r,this};Object.defineProperty(z.prototype,"writableBuffer",{enumerable:!1,get:function(){return this._writableState&&this._writableState.getBuffer()}});function Db(e,r,t){return!e.objectMode&&e.decodeStrings!==!1&&typeof r=="string"&&(r=si.from(r,t)),r}Object.defineProperty(z.prototype,"writableHighWaterMark",{enumerable:!1,get:function(){return this._writableState.highWaterMark}});function Mb(e,r,t,n,i,a){if(!t){var o=Db(r,n,i);n!==o&&(t=!0,i="buffer",n=o)}var f=r.objectMode?1:n.length;r.length+=f;var s=r.length<r.highWaterMark;if(s||(r.needDrain=!0),r.writing||r.corked){var u=r.lastBufferedRequest;r.lastBufferedRequest={chunk:n,encoding:i,isBuf:t,callback:a,next:null},u?u.next=r.lastBufferedRequest:r.bufferedRequest=r.lastBufferedRequest,r.bufferedRequestCount+=1}else eo(e,r,!1,f,n,i,a);return s}function eo(e,r,t,n,i,a,o){r.writelen=n,r.writecb=o,r.writing=!0,r.sync=!0,r.destroyed?r.onwrite(new Tb("write")):t?e._writev(i,r.onwrite):e._write(i,a,r.onwrite),r.sync=!1}function jb(e,r,t,n,i){--r.pendingcb,t?(process.nextTick(i,n),process.nextTick(Lt,e,r),e._writableState.errorEmitted=!0,Kr(e,n)):(i(n),e._writableState.errorEmitted=!0,Kr(e,n),Lt(e,r))}function Bb(e){e.writing=!1,e.writecb=null,e.length-=e.writelen,e.writelen=0}function qb(e,r){var t=e._writableState,n=t.sync,i=t.writecb;if(typeof i!="function")throw new Rb;if(Bb(t),r)jb(e,t,n,r,i);else{var a=gh(t)||e.destroyed;!a&&!t.corked&&!t.bufferProcessing&&t.bufferedRequest&&_h(e,t),n?process.nextTick(dh,e,t,a,i):dh(e,t,a,i)}}function dh(e,r,t,n){t||Ub(e,r),r.pendingcb--,n(),Lt(e,r)}function Ub(e,r){r.length===0&&r.needDrain&&(r.needDrain=!1,e.emit("drain"))}function _h(e,r){r.bufferProcessing=!0;var t=r.bufferedRequest;if(e._writev&&t&&t.next){var n=r.bufferedRequestCount,i=new Array(n),a=r.corkedRequestsFree;a.entry=t;for(var o=0,f=!0;t;)i[o]=t,t.isBuf||(f=!1),t=t.next,o+=1;i.allBuffers=f,eo(e,r,!0,r.length,i,"",a.finish),r.pendingcb++,r.lastBufferedRequest=null,a.next?(r.corkedRequestsFree=a.next,a.next=null):r.corkedRequestsFree=new yh(r),r.bufferedRequestCount=0}else{for(;t;){var s=t.chunk,u=t.encoding,l=t.callback,c=r.objectMode?1:s.length;if(eo(e,r,!1,c,s,u,l),t=t.next,r.bufferedRequestCount--,r.writing)break}t===null&&(r.lastBufferedRequest=null)}r.bufferedRequest=t,r.bufferProcessing=!1}z.prototype._write=function(e,r,t){t(new Ab("_write()"))};z.prototype._writev=null;z.prototype.end=function(e,r,t){var n=this._writableState;return typeof e=="function"?(t=e,e=null,r=null):typeof r=="function"&&(t=r,r=null),e!=null&&this.write(e,r),n.corked&&(n.corked=1,this.uncork()),n.ending||Zb(this,n,t),this};Object.defineProperty(z.prototype,"writableLength",{enumerable:!1,get:function(){return this._writableState.length}});function gh(e){return e.ending&&e.length===0&&e.bufferedRequest===null&&!e.finished&&!e.writing}function Cb(e,r){e._final(function(t){r.pendingcb--,t&&Kr(e,t),r.prefinished=!0,e.emit("prefinish"),Lt(e,r)})}function zb(e,r){!r.prefinished&&!r.finalCalled&&(typeof e._final=="function"&&!r.destroyed?(r.pendingcb++,r.finalCalled=!0,process.nextTick(Cb,e,r)):(r.prefinished=!0,e.emit("prefinish")))}function Lt(e,r){var t=gh(r);if(t&&(zb(e,r),r.pendingcb===0&&(r.finished=!0,e.emit("finish"),r.autoDestroy))){var n=e._readableState;(!n||n.autoDestroy&&n.endEmitted)&&e.destroy()}return t}function Zb(e,r,t){r.ending=!0,Lt(e,r),t&&(r.finished?process.nextTick(t):e.once("finish",t)),r.ended=!0,e.writable=!1}function Wb(e,r,t){var n=e.entry;for(e.entry=null;n;){var i=n.callback;r.pendingcb--,i(t),n=n.next}r.corkedRequestsFree.next=e}Object.defineProperty(z.prototype,"destroyed",{enumerable:!1,get:function(){return this._writableState===void 0?!1:this._writableState.destroyed},set:function(r){this._writableState&&(this._writableState.destroyed=r)}});z.prototype.destroy=ro.destroy;z.prototype._undestroy=ro.undestroy;z.prototype._destroy=function(e,r){r(e)}});var cr=y((gS,Eh)=>{"use strict";var Hb=Object.keys||function(e){var r=[];for(var t in e)r.push(t);return r};Eh.exports=Re;var wh=ao(),io=to();Be()(Re,wh);for(no=Hb(io.prototype),ci=0;ci<no.length;ci++)hi=no[ci],Re.prototype[hi]||(Re.prototype[hi]=io.prototype[hi]);var no,hi,ci;function Re(e){if(!(this instanceof Re))return new Re(e);wh.call(this,e),io.call(this,e),this.allowHalfOpen=!0,e&&(e.readable===!1&&(this.readable=!1),e.writable===!1&&(this.writable=!1),e.allowHalfOpen===!1&&(this.allowHalfOpen=!1,this.once("end",Gb)))}Object.defineProperty(Re.prototype,"writableHighWaterMark",{enumerable:!1,get:function(){return this._writableState.highWaterMark}});Object.defineProperty(Re.prototype,"writableBuffer",{enumerable:!1,get:function(){return this._writableState&&this._writableState.getBuffer()}});Object.defineProperty(Re.prototype,"writableLength",{enumerable:!1,get:function(){return this._writableState.length}});function Gb(){this._writableState.ended||process.nextTick($b,this)}function $b(e){e.end()}Object.defineProperty(Re.prototype,"destroyed",{enumerable:!1,get:function(){return this._readableState===void 0||this._writableState===void 0?!1:this._readableState.destroyed&&this._writableState.destroyed},set:function(r){this._readableState===void 0||this._writableState===void 0||(this._readableState.destroyed=r,this._writableState.destroyed=r)}})});var xh=y((oo,Sh)=>{var pi=lr(),Oe=pi.Buffer;function mh(e,r){for(var t in e)r[t]=e[t]}Oe.from&&Oe.alloc&&Oe.allocUnsafe&&Oe.allocUnsafeSlow?Sh.exports=pi:(mh(pi,oo),oo.Buffer=hr);function hr(e,r,t){return Oe(e,r,t)}hr.prototype=Object.create(Oe.prototype);mh(Oe,hr);hr.from=function(e,r,t){if(typeof e=="number")throw new TypeError("Argument must not be a number");return Oe(e,r,t)};hr.alloc=function(e,r,t){if(typeof e!="number")throw new TypeError("Argument must be a number");var n=Oe(e);return r!==void 0?typeof t=="string"?n.fill(r,t):n.fill(r):n.fill(0),n};hr.allocUnsafe=function(e){if(typeof e!="number")throw new TypeError("Argument must be a number");return Oe(e)};hr.allocUnsafeSlow=function(e){if(typeof e!="number")throw new TypeError("Argument must be a number");return pi.SlowBuffer(e)}});var lo=y(Rh=>{"use strict";var uo=xh().Buffer,Ah=uo.isEncoding||function(e){switch(e=""+e,e&&e.toLowerCase()){case"hex":case"utf8":case"utf-8":case"ascii":case"binary":case"base64":case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":case"raw":return!0;default:return!1}};function Vb(e){if(!e)return"utf8";for(var r;;)switch(e){case"utf8":case"utf-8":return"utf8";case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return"utf16le";case"latin1":case"binary":return"latin1";case"base64":case"ascii":case"hex":return e;default:if(r)return;e=(""+e).toLowerCase(),r=!0}}function Yb(e){var r=Vb(e);if(typeof r!="string"&&(uo.isEncoding===Ah||!Ah(e)))throw new Error("Unknown encoding: "+e);return r||e}Rh.StringDecoder=kt;function kt(e){this.encoding=Yb(e);var r;switch(this.encoding){case"utf16le":this.text=rw,this.end=tw,r=4;break;case"utf8":this.fillLast=Jb,r=4;break;case"base64":this.text=nw,this.end=iw,r=3;break;default:this.write=aw,this.end=ow;return}this.lastNeed=0,this.lastTotal=0,this.lastChar=uo.allocUnsafe(r)}kt.prototype.write=function(e){if(e.length===0)return"";var r,t;if(this.lastNeed){if(r=this.fillLast(e),r===void 0)return"";t=this.lastNeed,this.lastNeed=0}else t=0;return t<e.length?r?r+this.text(e,t):this.text(e,t):r||""};kt.prototype.end=ew;kt.prototype.text=Qb;kt.prototype.fillLast=function(e){if(this.lastNeed<=e.length)return e.copy(this.lastChar,this.lastTotal-this.lastNeed,0,this.lastNeed),this.lastChar.toString(this.encoding,0,this.lastTotal);e.copy(this.lastChar,this.lastTotal-this.lastNeed,0,e.length),this.lastNeed-=e.length};function fo(e){return e<=127?0:e>>5===6?2:e>>4===14?3:e>>3===30?4:e>>6===2?-1:-2}function Kb(e,r,t){var n=r.length-1;if(n<t)return 0;var i=fo(r[n]);return i>=0?(i>0&&(e.lastNeed=i-1),i):--n<t||i===-2?0:(i=fo(r[n]),i>=0?(i>0&&(e.lastNeed=i-2),i):--n<t||i===-2?0:(i=fo(r[n]),i>=0?(i>0&&(i===2?i=0:e.lastNeed=i-3),i):0))}function Xb(e,r,t){if((r[0]&192)!==128)return e.lastNeed=0,"\uFFFD";if(e.lastNeed>1&&r.length>1){if((r[1]&192)!==128)return e.lastNeed=1,"\uFFFD";if(e.lastNeed>2&&r.length>2&&(r[2]&192)!==128)return e.lastNeed=2,"\uFFFD"}}function Jb(e){var r=this.lastTotal-this.lastNeed,t=Xb(this,e,r);if(t!==void 0)return t;if(this.lastNeed<=e.length)return e.copy(this.lastChar,r,0,this.lastNeed),this.lastChar.toString(this.encoding,0,this.lastTotal);e.copy(this.lastChar,r,0,e.length),this.lastNeed-=e.length}function Qb(e,r){var t=Kb(this,e,r);if(!this.lastNeed)return e.toString("utf8",r);this.lastTotal=t;var n=e.length-(t-this.lastNeed);return e.copy(this.lastChar,0,n),e.toString("utf8",r,n)}function ew(e){var r=e&&e.length?this.write(e):"";return this.lastNeed?r+"\uFFFD":r}function rw(e,r){if((e.length-r)%2===0){var t=e.toString("utf16le",r);if(t){var n=t.charCodeAt(t.length-1);if(n>=55296&&n<=56319)return this.lastNeed=2,this.lastTotal=4,this.lastChar[0]=e[e.length-2],this.lastChar[1]=e[e.length-1],t.slice(0,-1)}return t}return this.lastNeed=1,this.lastTotal=2,this.lastChar[0]=e[e.length-1],e.toString("utf16le",r,e.length-1)}function tw(e){var r=e&&e.length?this.write(e):"";if(this.lastNeed){var t=this.lastTotal-this.lastNeed;return r+this.lastChar.toString("utf16le",0,t)}return r}function nw(e,r){var t=(e.length-r)%3;return t===0?e.toString("base64",r):(this.lastNeed=3-t,this.lastTotal=3,t===1?this.lastChar[0]=e[e.length-1]:(this.lastChar[0]=e[e.length-2],this.lastChar[1]=e[e.length-1]),e.toString("base64",r,e.length-t))}function iw(e){var r=e&&e.length?this.write(e):"";return this.lastNeed?r+this.lastChar.toString("base64",0,3-this.lastNeed):r}function aw(e){return e.toString(this.encoding)}function ow(e){return e&&e.length?this.write(e):""}});var di=y((wS,Ih)=>{"use strict";var Oh=sr().codes.ERR_STREAM_PREMATURE_CLOSE;function fw(e){var r=!1;return function(){if(!r){r=!0;for(var t=arguments.length,n=new Array(t),i=0;i<t;i++)n[i]=arguments[i];e.apply(this,n)}}}function uw(){}function lw(e){return e.setHeader&&typeof e.abort=="function"}function Th(e,r,t){if(typeof r=="function")return Th(e,null,r);r||(r={}),t=fw(t||uw);var n=r.readable||r.readable!==!1&&e.readable,i=r.writable||r.writable!==!1&&e.writable,a=function(){e.writable||f()},o=e._writableState&&e._writableState.finished,f=function(){i=!1,o=!0,n||t.call(e)},s=e._readableState&&e._readableState.endEmitted,u=function(){n=!1,s=!0,i||t.call(e)},l=function(v){t.call(e,v)},c=function(){var v;if(n&&!s)return(!e._readableState||!e._readableState.ended)&&(v=new Oh),t.call(e,v);if(i&&!o)return(!e._writableState||!e._writableState.ended)&&(v=new Oh),t.call(e,v)},p=function(){e.req.on("finish",f)};return lw(e)?(e.on("complete",f),e.on("abort",c),e.req?p():e.on("request",p)):i&&!e._writableState&&(e.on("end",a),e.on("close",a)),e.on("end",u),e.on("finish",f),r.error!==!1&&e.on("error",l),e.on("close",c),function(){e.removeListener("complete",f),e.removeListener("abort",c),e.removeListener("request",p),e.req&&e.req.removeListener("finish",f),e.removeListener("end",a),e.removeListener("close",a),e.removeListener("finish",f),e.removeListener("end",u),e.removeListener("error",l),e.removeListener("close",c)}}Ih.exports=Th});var Lh=y((ES,Nh)=>{"use strict";var yi;function He(e,r,t){return r=sw(r),r in e?Object.defineProperty(e,r,{value:t,enumerable:!0,configurable:!0,writable:!0}):e[r]=t,e}function sw(e){var r=cw(e,"string");return typeof r=="symbol"?r:String(r)}function cw(e,r){if(typeof e!="object"||e===null)return e;var t=e[Symbol.toPrimitive];if(t!==void 0){var n=t.call(e,r||"default");if(typeof n!="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(r==="string"?String:Number)(e)}var hw=di(),Ge=Symbol("lastResolve"),pr=Symbol("lastReject"),Pt=Symbol("error"),vi=Symbol("ended"),dr=Symbol("lastPromise"),so=Symbol("handlePromise"),yr=Symbol("stream");function $e(e,r){return{value:e,done:r}}function pw(e){var r=e[Ge];if(r!==null){var t=e[yr].read();t!==null&&(e[dr]=null,e[Ge]=null,e[pr]=null,r($e(t,!1)))}}function dw(e){process.nextTick(pw,e)}function yw(e,r){return function(t,n){e.then(function(){if(r[vi]){t($e(void 0,!0));return}r[so](t,n)},n)}}var vw=Object.getPrototypeOf(function(){}),_w=Object.setPrototypeOf((yi={get stream(){return this[yr]},next:function(){var r=this,t=this[Pt];if(t!==null)return Promise.reject(t);if(this[vi])return Promise.resolve($e(void 0,!0));if(this[yr].destroyed)return new Promise(function(o,f){process.nextTick(function(){r[Pt]?f(r[Pt]):o($e(void 0,!0))})});var n=this[dr],i;if(n)i=new Promise(yw(n,this));else{var a=this[yr].read();if(a!==null)return Promise.resolve($e(a,!1));i=new Promise(this[so])}return this[dr]=i,i}},He(yi,Symbol.asyncIterator,function(){return this}),He(yi,"return",function(){var r=this;return new Promise(function(t,n){r[yr].destroy(null,function(i){if(i){n(i);return}t($e(void 0,!0))})})}),yi),vw),gw=function(r){var t,n=Object.create(_w,(t={},He(t,yr,{value:r,writable:!0}),He(t,Ge,{value:null,writable:!0}),He(t,pr,{value:null,writable:!0}),He(t,Pt,{value:null,writable:!0}),He(t,vi,{value:r._readableState.endEmitted,writable:!0}),He(t,so,{value:function(a,o){var f=n[yr].read();f?(n[dr]=null,n[Ge]=null,n[pr]=null,a($e(f,!1))):(n[Ge]=a,n[pr]=o)},writable:!0}),t));return n[dr]=null,hw(r,function(i){if(i&&i.code!=="ERR_STREAM_PREMATURE_CLOSE"){var a=n[pr];a!==null&&(n[dr]=null,n[Ge]=null,n[pr]=null,a(i)),n[Pt]=i;return}var o=n[Ge];o!==null&&(n[dr]=null,n[Ge]=null,n[pr]=null,o($e(void 0,!0))),n[vi]=!0}),r.on("readable",dw.bind(null,n)),n};Nh.exports=gw});var kh=y((mS,Fh)=>{Fh.exports=function(){throw new Error("Readable.from is not available in the browser")}});var ao=y((xS,Zh)=>{"use strict";Zh.exports=j;var Xr;j.ReadableState=jh;var SS=oi().EventEmitter,Mh=function(r,t){return r.listeners(t).length},Mt=Va(),_i=lr().Buffer,bw=(typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof self<"u"?self:{}).Uint8Array||function(){};function ww(e){return _i.from(e)}function Ew(e){return _i.isBuffer(e)||e instanceof bw}var co=Se(),N;co&&co.debuglog?N=co.debuglog("stream"):N=function(){};var mw=ah(),bo=Xa(),Sw=Ja(),xw=Sw.getHighWaterMark,gi=sr().codes,Aw=gi.ERR_INVALID_ARG_TYPE,Rw=gi.ERR_STREAM_PUSH_AFTER_EOF,Ow=gi.ERR_METHOD_NOT_IMPLEMENTED,Tw=gi.ERR_STREAM_UNSHIFT_AFTER_END_EVENT,Jr,ho,po;Be()(j,Mt);var Dt=bo.errorOrDestroy,yo=["error","close","destroy","pause","resume"];function Iw(e,r,t){if(typeof e.prependListener=="function")return e.prependListener(r,t);!e._events||!e._events[r]?e.on(r,t):Array.isArray(e._events[r])?e._events[r].unshift(t):e._events[r]=[t,e._events[r]]}function jh(e,r,t){Xr=Xr||cr(),e=e||{},typeof t!="boolean"&&(t=r instanceof Xr),this.objectMode=!!e.objectMode,t&&(this.objectMode=this.objectMode||!!e.readableObjectMode),this.highWaterMark=xw(this,e,"readableHighWaterMark",t),this.buffer=new mw,this.length=0,this.pipes=null,this.pipesCount=0,this.flowing=null,this.ended=!1,this.endEmitted=!1,this.reading=!1,this.sync=!0,this.needReadable=!1,this.emittedReadable=!1,this.readableListening=!1,this.resumeScheduled=!1,this.paused=!0,this.emitClose=e.emitClose!==!1,this.autoDestroy=!!e.autoDestroy,this.destroyed=!1,this.defaultEncoding=e.defaultEncoding||"utf8",this.awaitDrain=0,this.readingMore=!1,this.decoder=null,this.encoding=null,e.encoding&&(Jr||(Jr=lo().StringDecoder),this.decoder=new Jr(e.encoding),this.encoding=e.encoding)}function j(e){if(Xr=Xr||cr(),!(this instanceof j))return new j(e);var r=this instanceof Xr;this._readableState=new jh(e,this,r),this.readable=!0,e&&(typeof e.read=="function"&&(this._read=e.read),typeof e.destroy=="function"&&(this._destroy=e.destroy)),Mt.call(this)}Object.defineProperty(j.prototype,"destroyed",{enumerable:!1,get:function(){return this._readableState===void 0?!1:this._readableState.destroyed},set:function(r){this._readableState&&(this._readableState.destroyed=r)}});j.prototype.destroy=bo.destroy;j.prototype._undestroy=bo.undestroy;j.prototype._destroy=function(e,r){r(e)};j.prototype.push=function(e,r){var t=this._readableState,n;return t.objectMode?n=!0:typeof e=="string"&&(r=r||t.defaultEncoding,r!==t.encoding&&(e=_i.from(e,r),r=""),n=!0),Bh(this,e,r,!1,n)};j.prototype.unshift=function(e){return Bh(this,e,null,!0,!1)};function Bh(e,r,t,n,i){N("readableAddChunk",r);var a=e._readableState;if(r===null)a.reading=!1,Fw(e,a);else{var o;if(i||(o=Nw(a,r)),o)Dt(e,o);else if(a.objectMode||r&&r.length>0)if(typeof r!="string"&&!a.objectMode&&Object.getPrototypeOf(r)!==_i.prototype&&(r=ww(r)),n)a.endEmitted?Dt(e,new Tw):vo(e,a,r,!0);else if(a.ended)Dt(e,new Rw);else{if(a.destroyed)return!1;a.reading=!1,a.decoder&&!t?(r=a.decoder.write(r),a.objectMode||r.length!==0?vo(e,a,r,!1):go(e,a)):vo(e,a,r,!1)}else n||(a.reading=!1,go(e,a))}return!a.ended&&(a.length<a.highWaterMark||a.length===0)}function vo(e,r,t,n){r.flowing&&r.length===0&&!r.sync?(r.awaitDrain=0,e.emit("data",t)):(r.length+=r.objectMode?1:t.length,n?r.buffer.unshift(t):r.buffer.push(t),r.needReadable&&bi(e)),go(e,r)}function Nw(e,r){var t;return!Ew(r)&&typeof r!="string"&&r!==void 0&&!e.objectMode&&(t=new Aw("chunk",["string","Buffer","Uint8Array"],r)),t}j.prototype.isPaused=function(){return this._readableState.flowing===!1};j.prototype.setEncoding=function(e){Jr||(Jr=lo().StringDecoder);var r=new Jr(e);this._readableState.decoder=r,this._readableState.encoding=this._readableState.decoder.encoding;for(var t=this._readableState.buffer.head,n="";t!==null;)n+=r.write(t.data),t=t.next;return this._readableState.buffer.clear(),n!==""&&this._readableState.buffer.push(n),this._readableState.length=n.length,this};var Ph=1073741824;function Lw(e){return e>=Ph?e=Ph:(e--,e|=e>>>1,e|=e>>>2,e|=e>>>4,e|=e>>>8,e|=e>>>16,e++),e}function Dh(e,r){return e<=0||r.length===0&&r.ended?0:r.objectMode?1:e!==e?r.flowing&&r.length?r.buffer.head.data.length:r.length:(e>r.highWaterMark&&(r.highWaterMark=Lw(e)),e<=r.length?e:r.ended?r.length:(r.needReadable=!0,0))}j.prototype.read=function(e){N("read",e),e=parseInt(e,10);var r=this._readableState,t=e;if(e!==0&&(r.emittedReadable=!1),e===0&&r.needReadable&&((r.highWaterMark!==0?r.length>=r.highWaterMark:r.length>0)||r.ended))return N("read: emitReadable",r.length,r.ended),r.length===0&&r.ended?_o(this):bi(this),null;if(e=Dh(e,r),e===0&&r.ended)return r.length===0&&_o(this),null;var n=r.needReadable;N("need readable",n),(r.length===0||r.length-e<r.highWaterMark)&&(n=!0,N("length less than watermark",n)),r.ended||r.reading?(n=!1,N("reading or ended",n)):n&&(N("do read"),r.reading=!0,r.sync=!0,r.length===0&&(r.needReadable=!0),this._read(r.highWaterMark),r.sync=!1,r.reading||(e=Dh(t,r)));var i;return e>0?i=Ch(e,r):i=null,i===null?(r.needReadable=r.length<=r.highWaterMark,e=0):(r.length-=e,r.awaitDrain=0),r.length===0&&(r.ended||(r.needReadable=!0),t!==e&&r.ended&&_o(this)),i!==null&&this.emit("data",i),i};function Fw(e,r){if(N("onEofChunk"),!r.ended){if(r.decoder){var t=r.decoder.end();t&&t.length&&(r.buffer.push(t),r.length+=r.objectMode?1:t.length)}r.ended=!0,r.sync?bi(e):(r.needReadable=!1,r.emittedReadable||(r.emittedReadable=!0,qh(e)))}}function bi(e){var r=e._readableState;N("emitReadable",r.needReadable,r.emittedReadable),r.needReadable=!1,r.emittedReadable||(N("emitReadable",r.flowing),r.emittedReadable=!0,process.nextTick(qh,e))}function qh(e){var r=e._readableState;N("emitReadable_",r.destroyed,r.length,r.ended),!r.destroyed&&(r.length||r.ended)&&(e.emit("readable"),r.emittedReadable=!1),r.needReadable=!r.flowing&&!r.ended&&r.length<=r.highWaterMark,wo(e)}function go(e,r){r.readingMore||(r.readingMore=!0,process.nextTick(kw,e,r))}function kw(e,r){for(;!r.reading&&!r.ended&&(r.length<r.highWaterMark||r.flowing&&r.length===0);){var t=r.length;if(N("maybeReadMore read 0"),e.read(0),t===r.length)break}r.readingMore=!1}j.prototype._read=function(e){Dt(this,new Ow("_read()"))};j.prototype.pipe=function(e,r){var t=this,n=this._readableState;switch(n.pipesCount){case 0:n.pipes=e;break;case 1:n.pipes=[n.pipes,e];break;default:n.pipes.push(e);break}n.pipesCount+=1,N("pipe count=%d opts=%j",n.pipesCount,r);var i=(!r||r.end!==!1)&&e!==process.stdout&&e!==process.stderr,a=i?f:_;n.endEmitted?process.nextTick(a):t.once("end",a),e.on("unpipe",o);function o(m,w){N("onunpipe"),m===t&&w&&w.hasUnpiped===!1&&(w.hasUnpiped=!0,l())}function f(){N("onend"),e.end()}var s=Pw(t);e.on("drain",s);var u=!1;function l(){N("cleanup"),e.removeListener("close",h),e.removeListener("finish",v),e.removeListener("drain",s),e.removeListener("error",p),e.removeListener("unpipe",o),t.removeListener("end",f),t.removeListener("end",_),t.removeListener("data",c),u=!0,n.awaitDrain&&(!e._writableState||e._writableState.needDrain)&&s()}t.on("data",c);function c(m){N("ondata");var w=e.write(m);N("dest.write",w),w===!1&&((n.pipesCount===1&&n.pipes===e||n.pipesCount>1&&zh(n.pipes,e)!==-1)&&!u&&(N("false write response, pause",n.awaitDrain),n.awaitDrain++),t.pause())}function p(m){N("onerror",m),_(),e.removeListener("error",p),Mh(e,"error")===0&&Dt(e,m)}Iw(e,"error",p);function h(){e.removeListener("finish",v),_()}e.once("close",h);function v(){N("onfinish"),e.removeListener("close",h),_()}e.once("finish",v);function _(){N("unpipe"),t.unpipe(e)}return e.emit("pipe",t),n.flowing||(N("pipe resume"),t.resume()),e};function Pw(e){return function(){var t=e._readableState;N("pipeOnDrain",t.awaitDrain),t.awaitDrain&&t.awaitDrain--,t.awaitDrain===0&&Mh(e,"data")&&(t.flowing=!0,wo(e))}}j.prototype.unpipe=function(e){var r=this._readableState,t={hasUnpiped:!1};if(r.pipesCount===0)return this;if(r.pipesCount===1)return e&&e!==r.pipes?this:(e||(e=r.pipes),r.pipes=null,r.pipesCount=0,r.flowing=!1,e&&e.emit("unpipe",this,t),this);if(!e){var n=r.pipes,i=r.pipesCount;r.pipes=null,r.pipesCount=0,r.flowing=!1;for(var a=0;a<i;a++)n[a].emit("unpipe",this,{hasUnpiped:!1});return this}var o=zh(r.pipes,e);return o===-1?this:(r.pipes.splice(o,1),r.pipesCount-=1,r.pipesCount===1&&(r.pipes=r.pipes[0]),e.emit("unpipe",this,t),this)};j.prototype.on=function(e,r){var t=Mt.prototype.on.call(this,e,r),n=this._readableState;return e==="data"?(n.readableListening=this.listenerCount("readable")>0,n.flowing!==!1&&this.resume()):e==="readable"&&!n.endEmitted&&!n.readableListening&&(n.readableListening=n.needReadable=!0,n.flowing=!1,n.emittedReadable=!1,N("on readable",n.length,n.reading),n.length?bi(this):n.reading||process.nextTick(Dw,this)),t};j.prototype.addListener=j.prototype.on;j.prototype.removeListener=function(e,r){var t=Mt.prototype.removeListener.call(this,e,r);return e==="readable"&&process.nextTick(Uh,this),t};j.prototype.removeAllListeners=function(e){var r=Mt.prototype.removeAllListeners.apply(this,arguments);return(e==="readable"||e===void 0)&&process.nextTick(Uh,this),r};function Uh(e){var r=e._readableState;r.readableListening=e.listenerCount("readable")>0,r.resumeScheduled&&!r.paused?r.flowing=!0:e.listenerCount("data")>0&&e.resume()}function Dw(e){N("readable nexttick read 0"),e.read(0)}j.prototype.resume=function(){var e=this._readableState;return e.flowing||(N("resume"),e.flowing=!e.readableListening,Mw(this,e)),e.paused=!1,this};function Mw(e,r){r.resumeScheduled||(r.resumeScheduled=!0,process.nextTick(jw,e,r))}function jw(e,r){N("resume",r.reading),r.reading||e.read(0),r.resumeScheduled=!1,e.emit("resume"),wo(e),r.flowing&&!r.reading&&e.read(0)}j.prototype.pause=function(){return N("call pause flowing=%j",this._readableState.flowing),this._readableState.flowing!==!1&&(N("pause"),this._readableState.flowing=!1,this.emit("pause")),this._readableState.paused=!0,this};function wo(e){var r=e._readableState;for(N("flow",r.flowing);r.flowing&&e.read()!==null;);}j.prototype.wrap=function(e){var r=this,t=this._readableState,n=!1;e.on("end",function(){if(N("wrapped end"),t.decoder&&!t.ended){var o=t.decoder.end();o&&o.length&&r.push(o)}r.push(null)}),e.on("data",function(o){if(N("wrapped data"),t.decoder&&(o=t.decoder.write(o)),!(t.objectMode&&o==null)&&!(!t.objectMode&&(!o||!o.length))){var f=r.push(o);f||(n=!0,e.pause())}});for(var i in e)this[i]===void 0&&typeof e[i]=="function"&&(this[i]=(function(f){return function(){return e[f].apply(e,arguments)}})(i));for(var a=0;a<yo.length;a++)e.on(yo[a],this.emit.bind(this,yo[a]));return this._read=function(o){N("wrapped _read",o),n&&(n=!1,e.resume())},this};typeof Symbol=="function"&&(j.prototype[Symbol.asyncIterator]=function(){return ho===void 0&&(ho=Lh()),ho(this)});Object.defineProperty(j.prototype,"readableHighWaterMark",{enumerable:!1,get:function(){return this._readableState.highWaterMark}});Object.defineProperty(j.prototype,"readableBuffer",{enumerable:!1,get:function(){return this._readableState&&this._readableState.buffer}});Object.defineProperty(j.prototype,"readableFlowing",{enumerable:!1,get:function(){return this._readableState.flowing},set:function(r){this._readableState&&(this._readableState.flowing=r)}});j._fromList=Ch;Object.defineProperty(j.prototype,"readableLength",{enumerable:!1,get:function(){return this._readableState.length}});function Ch(e,r){if(r.length===0)return null;var t;return r.objectMode?t=r.buffer.shift():!e||e>=r.length?(r.decoder?t=r.buffer.join(""):r.buffer.length===1?t=r.buffer.first():t=r.buffer.concat(r.length),r.buffer.clear()):t=r.buffer.consume(e,r.decoder),t}function _o(e){var r=e._readableState;N("endReadable",r.endEmitted),r.endEmitted||(r.ended=!0,process.nextTick(Bw,r,e))}function Bw(e,r){if(N("endReadableNT",e.endEmitted,e.length),!e.endEmitted&&e.length===0&&(e.endEmitted=!0,r.readable=!1,r.emit("end"),e.autoDestroy)){var t=r._writableState;(!t||t.autoDestroy&&t.finished)&&r.destroy()}}typeof Symbol=="function"&&(j.from=function(e,r){return po===void 0&&(po=kh()),po(j,e,r)});function zh(e,r){for(var t=0,n=e.length;t<n;t++)if(e[t]===r)return t;return-1}});var Eo=y((AS,Hh)=>{"use strict";Hh.exports=De;var wi=sr().codes,qw=wi.ERR_METHOD_NOT_IMPLEMENTED,Uw=wi.ERR_MULTIPLE_CALLBACK,Cw=wi.ERR_TRANSFORM_ALREADY_TRANSFORMING,zw=wi.ERR_TRANSFORM_WITH_LENGTH_0,Ei=cr();Be()(De,Ei);function Zw(e,r){var t=this._transformState;t.transforming=!1;var n=t.writecb;if(n===null)return this.emit("error",new Uw);t.writechunk=null,t.writecb=null,r!=null&&this.push(r),n(e);var i=this._readableState;i.reading=!1,(i.needReadable||i.length<i.highWaterMark)&&this._read(i.highWaterMark)}function De(e){if(!(this instanceof De))return new De(e);Ei.call(this,e),this._transformState={afterTransform:Zw.bind(this),needTransform:!1,transforming:!1,writecb:null,writechunk:null,writeencoding:null},this._readableState.needReadable=!0,this._readableState.sync=!1,e&&(typeof e.transform=="function"&&(this._transform=e.transform),typeof e.flush=="function"&&(this._flush=e.flush)),this.on("prefinish",Ww)}function Ww(){var e=this;typeof this._flush=="function"&&!this._readableState.destroyed?this._flush(function(r,t){Wh(e,r,t)}):Wh(this,null,null)}De.prototype.push=function(e,r){return this._transformState.needTransform=!1,Ei.prototype.push.call(this,e,r)};De.prototype._transform=function(e,r,t){t(new qw("_transform()"))};De.prototype._write=function(e,r,t){var n=this._transformState;if(n.writecb=t,n.writechunk=e,n.writeencoding=r,!n.transforming){var i=this._readableState;(n.needTransform||i.needReadable||i.length<i.highWaterMark)&&this._read(i.highWaterMark)}};De.prototype._read=function(e){var r=this._transformState;r.writechunk!==null&&!r.transforming?(r.transforming=!0,this._transform(r.writechunk,r.writeencoding,r.afterTransform)):r.needTransform=!0};De.prototype._destroy=function(e,r){Ei.prototype._destroy.call(this,e,function(t){r(t)})};function Wh(e,r,t){if(r)return e.emit("error",r);if(t!=null&&e.push(t),e._writableState.length)throw new zw;if(e._transformState.transforming)throw new Cw;return e.push(null)}});var Vh=y((RS,$h)=>{"use strict";$h.exports=jt;var Gh=Eo();Be()(jt,Gh);function jt(e){if(!(this instanceof jt))return new jt(e);Gh.call(this,e)}jt.prototype._transform=function(e,r,t){t(null,e)}});var Qh=y((OS,Jh)=>{"use strict";var mo;function Hw(e){var r=!1;return function(){r||(r=!0,e.apply(void 0,arguments))}}var Xh=sr().codes,Gw=Xh.ERR_MISSING_ARGS,$w=Xh.ERR_STREAM_DESTROYED;function Yh(e){if(e)throw e}function Vw(e){return e.setHeader&&typeof e.abort=="function"}function Yw(e,r,t,n){n=Hw(n);var i=!1;e.on("close",function(){i=!0}),mo===void 0&&(mo=di()),mo(e,{readable:r,writable:t},function(o){if(o)return n(o);i=!0,n()});var a=!1;return function(o){if(!i&&!a){if(a=!0,Vw(e))return e.abort();if(typeof e.destroy=="function")return e.destroy();n(o||new $w("pipe"))}}}function Kh(e){e()}function Kw(e,r){return e.pipe(r)}function Xw(e){return!e.length||typeof e[e.length-1]!="function"?Yh:e.pop()}function Jw(){for(var e=arguments.length,r=new Array(e),t=0;t<e;t++)r[t]=arguments[t];var n=Xw(r);if(Array.isArray(r[0])&&(r=r[0]),r.length<2)throw new Gw("streams");var i,a=r.map(function(o,f){var s=f<r.length-1,u=f>0;return Yw(o,s,u,function(l){i||(i=l),l&&a.forEach(Kh),!s&&(a.forEach(Kh),n(i))})});return r.reduce(Kw)}Jh.exports=Jw});var xo=y((TS,ep)=>{ep.exports=he;var So=oi().EventEmitter,Qw=Be();Qw(he,So);he.Readable=ao();he.Writable=to();he.Duplex=cr();he.Transform=Eo();he.PassThrough=Vh();he.finished=di();he.pipeline=Qh();he.Stream=he;function he(){So.call(this)}he.prototype.pipe=function(e,r){var t=this;function n(l){e.writable&&e.write(l)===!1&&t.pause&&t.pause()}t.on("data",n);function i(){t.readable&&t.resume&&t.resume()}e.on("drain",i),!e._isStdio&&(!r||r.end!==!1)&&(t.on("end",o),t.on("close",f));var a=!1;function o(){a||(a=!0,e.end())}function f(){a||(a=!0,typeof e.destroy=="function"&&e.destroy())}function s(l){if(u(),So.listenerCount(this,"error")===0)throw l}t.on("error",s),e.on("error",s);function u(){t.removeListener("data",n),e.removeListener("drain",i),t.removeListener("end",o),t.removeListener("close",f),t.removeListener("error",s),e.removeListener("error",s),t.removeListener("end",u),t.removeListener("close",u),e.removeListener("close",u)}return t.on("end",u),t.on("close",u),e.on("close",u),e.emit("pipe",t),e}});var K={};Jd(K,{default:()=>rE,finished:()=>np,isDisturbed:()=>op,isErrored:()=>ap,isReadable:()=>ip});var Qr,tp,rp,mi,Ao,eE,np,ip,ap,op,rE,fp=Xd(()=>{"use strict";Qr=ft(xo());re(K,ft(xo()));tp=Qr.default??Qr.default??{},rp=Qr.finished??tp.finished,mi=e=>!!e&&typeof e.getReader=="function"&&typeof e.cancel=="function",Ao=e=>!!e&&typeof e.getWriter=="function"&&typeof e.abort=="function",eE=e=>e instanceof Error?e:e==null?new Error("stream errored"):new Error(String(e)),np=(e,r,t)=>{let n=r,i=t;if(typeof n=="function"&&(i=n,n={}),!mi(e)&&!Ao(e)&&typeof rp=="function")return rp(e,n,i);let a=typeof i=="function"?i:()=>{},o=n?.readable!==!1,f=n?.writable!==!1,s=!1,u=null,l=()=>{s=!0,u!==null&&(clearTimeout(u),u=null)},c=(h=void 0)=>{s||(l(),queueMicrotask(()=>a(h)))},p=()=>{if(s)return;let h=e?._state;if(h==="errored"){c(eE(e?._storedError));return}if(h==="closed"||mi(e)&&!o||Ao(e)&&!f){c();return}u=setTimeout(p,0)};return p(),l},ip=e=>mi(e)?e._state==="readable":!!e&&e.readable!==!1&&e.destroyed!==!0,ap=e=>mi(e)||Ao(e)?e?._state==="errored":e?.errored!=null,op=e=>!!(e?.locked||e?.disturbed===!0||e?._disturbed===!0||e?.readableDidRead===!0),rE={...tp,finished:np,isReadable:ip,isErrored:ap,isDisturbed:op}});var lp=y((NS,up)=>{"use strict";function tE(){this.input=null,this.next_in=0,this.avail_in=0,this.total_in=0,this.output=null,this.next_out=0,this.avail_out=0,this.total_out=0,this.msg="",this.state=null,this.data_type=2,this.adler=0}up.exports=tE});var Bt=y(Q=>{"use strict";var nE=typeof Uint8Array<"u"&&typeof Uint16Array<"u"&&typeof Int32Array<"u";function iE(e,r){return Object.prototype.hasOwnProperty.call(e,r)}Q.assign=function(e){for(var r=Array.prototype.slice.call(arguments,1);r.length;){var t=r.shift();if(t){if(typeof t!="object")throw new TypeError(t+"must be non-object");for(var n in t)iE(t,n)&&(e[n]=t[n])}}return e};Q.shrinkBuf=function(e,r){return e.length===r?e:e.subarray?e.subarray(0,r):(e.length=r,e)};var aE={arraySet:function(e,r,t,n,i){if(r.subarray&&e.subarray){e.set(r.subarray(t,t+n),i);return}for(var a=0;a<n;a++)e[i+a]=r[t+a]},flattenChunks:function(e){var r,t,n,i,a,o;for(n=0,r=0,t=e.length;r<t;r++)n+=e[r].length;for(o=new Uint8Array(n),i=0,r=0,t=e.length;r<t;r++)a=e[r],o.set(a,i),i+=a.length;return o}},oE={arraySet:function(e,r,t,n,i){for(var a=0;a<n;a++)e[i+a]=r[t+a]},flattenChunks:function(e){return[].concat.apply([],e)}};Q.setTyped=function(e){e?(Q.Buf8=Uint8Array,Q.Buf16=Uint16Array,Q.Buf32=Int32Array,Q.assign(Q,aE)):(Q.Buf8=Array,Q.Buf16=Array,Q.Buf32=Array,Q.assign(Q,oE))};Q.setTyped(nE)});var Fp=y(tt=>{"use strict";var fE=Bt(),uE=4,sp=0,cp=1,lE=2;function rt(e){for(var r=e.length;--r>=0;)e[r]=0}var sE=0,_p=1,cE=2,hE=3,pE=258,Fo=29,Wt=256,Ut=Wt+1+Fo,et=30,ko=19,gp=2*Ut+1,vr=15,Ro=16,dE=7,Po=256,bp=16,wp=17,Ep=18,No=[0,0,0,0,0,0,0,0,1,1,1,1,2,2,2,2,3,3,3,3,4,4,4,4,5,5,5,5,0],Si=[0,0,0,0,1,1,2,2,3,3,4,4,5,5,6,6,7,7,8,8,9,9,10,10,11,11,12,12,13,13],yE=[0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,2,3,7],mp=[16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15],vE=512,Me=new Array((Ut+2)*2);rt(Me);var qt=new Array(et*2);rt(qt);var Ct=new Array(vE);rt(Ct);var zt=new Array(pE-hE+1);rt(zt);var Do=new Array(Fo);rt(Do);var xi=new Array(et);rt(xi);function Oo(e,r,t,n,i){this.static_tree=e,this.extra_bits=r,this.extra_base=t,this.elems=n,this.max_length=i,this.has_stree=e&&e.length}var Sp,xp,Ap;function To(e,r){this.dyn_tree=e,this.max_code=0,this.stat_desc=r}function Rp(e){return e<256?Ct[e]:Ct[256+(e>>>7)]}function Zt(e,r){e.pending_buf[e.pending++]=r&255,e.pending_buf[e.pending++]=r>>>8&255}function ie(e,r,t){e.bi_valid>Ro-t?(e.bi_buf|=r<<e.bi_valid&65535,Zt(e,e.bi_buf),e.bi_buf=r>>Ro-e.bi_valid,e.bi_valid+=t-Ro):(e.bi_buf|=r<<e.bi_valid&65535,e.bi_valid+=t)}function Te(e,r,t){ie(e,t[r*2],t[r*2+1])}function Op(e,r){var t=0;do t|=e&1,e>>>=1,t<<=1;while(--r>0);return t>>>1}function _E(e){e.bi_valid===16?(Zt(e,e.bi_buf),e.bi_buf=0,e.bi_valid=0):e.bi_valid>=8&&(e.pending_buf[e.pending++]=e.bi_buf&255,e.bi_buf>>=8,e.bi_valid-=8)}function gE(e,r){var t=r.dyn_tree,n=r.max_code,i=r.stat_desc.static_tree,a=r.stat_desc.has_stree,o=r.stat_desc.extra_bits,f=r.stat_desc.extra_base,s=r.stat_desc.max_length,u,l,c,p,h,v,_=0;for(p=0;p<=vr;p++)e.bl_count[p]=0;for(t[e.heap[e.heap_max]*2+1]=0,u=e.heap_max+1;u<gp;u++)l=e.heap[u],p=t[t[l*2+1]*2+1]+1,p>s&&(p=s,_++),t[l*2+1]=p,!(l>n)&&(e.bl_count[p]++,h=0,l>=f&&(h=o[l-f]),v=t[l*2],e.opt_len+=v*(p+h),a&&(e.static_len+=v*(i[l*2+1]+h)));if(_!==0){do{for(p=s-1;e.bl_count[p]===0;)p--;e.bl_count[p]--,e.bl_count[p+1]+=2,e.bl_count[s]--,_-=2}while(_>0);for(p=s;p!==0;p--)for(l=e.bl_count[p];l!==0;)c=e.heap[--u],!(c>n)&&(t[c*2+1]!==p&&(e.opt_len+=(p-t[c*2+1])*t[c*2],t[c*2+1]=p),l--)}}function Tp(e,r,t){var n=new Array(vr+1),i=0,a,o;for(a=1;a<=vr;a++)n[a]=i=i+t[a-1]<<1;for(o=0;o<=r;o++){var f=e[o*2+1];f!==0&&(e[o*2]=Op(n[f]++,f))}}function bE(){var e,r,t,n,i,a=new Array(vr+1);for(t=0,n=0;n<Fo-1;n++)for(Do[n]=t,e=0;e<1<<No[n];e++)zt[t++]=n;for(zt[t-1]=n,i=0,n=0;n<16;n++)for(xi[n]=i,e=0;e<1<<Si[n];e++)Ct[i++]=n;for(i>>=7;n<et;n++)for(xi[n]=i<<7,e=0;e<1<<Si[n]-7;e++)Ct[256+i++]=n;for(r=0;r<=vr;r++)a[r]=0;for(e=0;e<=143;)Me[e*2+1]=8,e++,a[8]++;for(;e<=255;)Me[e*2+1]=9,e++,a[9]++;for(;e<=279;)Me[e*2+1]=7,e++,a[7]++;for(;e<=287;)Me[e*2+1]=8,e++,a[8]++;for(Tp(Me,Ut+1,a),e=0;e<et;e++)qt[e*2+1]=5,qt[e*2]=Op(e,5);Sp=new Oo(Me,No,Wt+1,Ut,vr),xp=new Oo(qt,Si,0,et,vr),Ap=new Oo(new Array(0),yE,0,ko,dE)}function Ip(e){var r;for(r=0;r<Ut;r++)e.dyn_ltree[r*2]=0;for(r=0;r<et;r++)e.dyn_dtree[r*2]=0;for(r=0;r<ko;r++)e.bl_tree[r*2]=0;e.dyn_ltree[Po*2]=1,e.opt_len=e.static_len=0,e.last_lit=e.matches=0}function Np(e){e.bi_valid>8?Zt(e,e.bi_buf):e.bi_valid>0&&(e.pending_buf[e.pending++]=e.bi_buf),e.bi_buf=0,e.bi_valid=0}function wE(e,r,t,n){Np(e),n&&(Zt(e,t),Zt(e,~t)),fE.arraySet(e.pending_buf,e.window,r,t,e.pending),e.pending+=t}function hp(e,r,t,n){var i=r*2,a=t*2;return e[i]<e[a]||e[i]===e[a]&&n[r]<=n[t]}function Io(e,r,t){for(var n=e.heap[t],i=t<<1;i<=e.heap_len&&(i<e.heap_len&&hp(r,e.heap[i+1],e.heap[i],e.depth)&&i++,!hp(r,n,e.heap[i],e.depth));)e.heap[t]=e.heap[i],t=i,i<<=1;e.heap[t]=n}function pp(e,r,t){var n,i,a=0,o,f;if(e.last_lit!==0)do n=e.pending_buf[e.d_buf+a*2]<<8|e.pending_buf[e.d_buf+a*2+1],i=e.pending_buf[e.l_buf+a],a++,n===0?Te(e,i,r):(o=zt[i],Te(e,o+Wt+1,r),f=No[o],f!==0&&(i-=Do[o],ie(e,i,f)),n--,o=Rp(n),Te(e,o,t),f=Si[o],f!==0&&(n-=xi[o],ie(e,n,f)));while(a<e.last_lit);Te(e,Po,r)}function Lo(e,r){var t=r.dyn_tree,n=r.stat_desc.static_tree,i=r.stat_desc.has_stree,a=r.stat_desc.elems,o,f,s=-1,u;for(e.heap_len=0,e.heap_max=gp,o=0;o<a;o++)t[o*2]!==0?(e.heap[++e.heap_len]=s=o,e.depth[o]=0):t[o*2+1]=0;for(;e.heap_len<2;)u=e.heap[++e.heap_len]=s<2?++s:0,t[u*2]=1,e.depth[u]=0,e.opt_len--,i&&(e.static_len-=n[u*2+1]);for(r.max_code=s,o=e.heap_len>>1;o>=1;o--)Io(e,t,o);u=a;do o=e.heap[1],e.heap[1]=e.heap[e.heap_len--],Io(e,t,1),f=e.heap[1],e.heap[--e.heap_max]=o,e.heap[--e.heap_max]=f,t[u*2]=t[o*2]+t[f*2],e.depth[u]=(e.depth[o]>=e.depth[f]?e.depth[o]:e.depth[f])+1,t[o*2+1]=t[f*2+1]=u,e.heap[1]=u++,Io(e,t,1);while(e.heap_len>=2);e.heap[--e.heap_max]=e.heap[1],gE(e,r),Tp(t,s,e.bl_count)}function dp(e,r,t){var n,i=-1,a,o=r[1],f=0,s=7,u=4;for(o===0&&(s=138,u=3),r[(t+1)*2+1]=65535,n=0;n<=t;n++)a=o,o=r[(n+1)*2+1],!(++f<s&&a===o)&&(f<u?e.bl_tree[a*2]+=f:a!==0?(a!==i&&e.bl_tree[a*2]++,e.bl_tree[bp*2]++):f<=10?e.bl_tree[wp*2]++:e.bl_tree[Ep*2]++,f=0,i=a,o===0?(s=138,u=3):a===o?(s=6,u=3):(s=7,u=4))}function yp(e,r,t){var n,i=-1,a,o=r[1],f=0,s=7,u=4;for(o===0&&(s=138,u=3),n=0;n<=t;n++)if(a=o,o=r[(n+1)*2+1],!(++f<s&&a===o)){if(f<u)do Te(e,a,e.bl_tree);while(--f!==0);else a!==0?(a!==i&&(Te(e,a,e.bl_tree),f--),Te(e,bp,e.bl_tree),ie(e,f-3,2)):f<=10?(Te(e,wp,e.bl_tree),ie(e,f-3,3)):(Te(e,Ep,e.bl_tree),ie(e,f-11,7));f=0,i=a,o===0?(s=138,u=3):a===o?(s=6,u=3):(s=7,u=4)}}function EE(e){var r;for(dp(e,e.dyn_ltree,e.l_desc.max_code),dp(e,e.dyn_dtree,e.d_desc.max_code),Lo(e,e.bl_desc),r=ko-1;r>=3&&e.bl_tree[mp[r]*2+1]===0;r--);return e.opt_len+=3*(r+1)+5+5+4,r}function mE(e,r,t,n){var i;for(ie(e,r-257,5),ie(e,t-1,5),ie(e,n-4,4),i=0;i<n;i++)ie(e,e.bl_tree[mp[i]*2+1],3);yp(e,e.dyn_ltree,r-1),yp(e,e.dyn_dtree,t-1)}function SE(e){var r=4093624447,t;for(t=0;t<=31;t++,r>>>=1)if(r&1&&e.dyn_ltree[t*2]!==0)return sp;if(e.dyn_ltree[18]!==0||e.dyn_ltree[20]!==0||e.dyn_ltree[26]!==0)return cp;for(t=32;t<Wt;t++)if(e.dyn_ltree[t*2]!==0)return cp;return sp}var vp=!1;function xE(e){vp||(bE(),vp=!0),e.l_desc=new To(e.dyn_ltree,Sp),e.d_desc=new To(e.dyn_dtree,xp),e.bl_desc=new To(e.bl_tree,Ap),e.bi_buf=0,e.bi_valid=0,Ip(e)}function Lp(e,r,t,n){ie(e,(sE<<1)+(n?1:0),3),wE(e,r,t,!0)}function AE(e){ie(e,_p<<1,3),Te(e,Po,Me),_E(e)}function RE(e,r,t,n){var i,a,o=0;e.level>0?(e.strm.data_type===lE&&(e.strm.data_type=SE(e)),Lo(e,e.l_desc),Lo(e,e.d_desc),o=EE(e),i=e.opt_len+3+7>>>3,a=e.static_len+3+7>>>3,a<=i&&(i=a)):i=a=t+5,t+4<=i&&r!==-1?Lp(e,r,t,n):e.strategy===uE||a===i?(ie(e,(_p<<1)+(n?1:0),3),pp(e,Me,qt)):(ie(e,(cE<<1)+(n?1:0),3),mE(e,e.l_desc.max_code+1,e.d_desc.max_code+1,o+1),pp(e,e.dyn_ltree,e.dyn_dtree)),Ip(e),n&&Np(e)}function OE(e,r,t){return e.pending_buf[e.d_buf+e.last_lit*2]=r>>>8&255,e.pending_buf[e.d_buf+e.last_lit*2+1]=r&255,e.pending_buf[e.l_buf+e.last_lit]=t&255,e.last_lit++,r===0?e.dyn_ltree[t*2]++:(e.matches++,r--,e.dyn_ltree[(zt[t]+Wt+1)*2]++,e.dyn_dtree[Rp(r)*2]++),e.last_lit===e.lit_bufsize-1}tt._tr_init=xE;tt._tr_stored_block=Lp;tt._tr_flush_block=RE;tt._tr_tally=OE;tt._tr_align=AE});var Mo=y((kS,kp)=>{"use strict";function TE(e,r,t,n){for(var i=e&65535|0,a=e>>>16&65535|0,o=0;t!==0;){o=t>2e3?2e3:t,t-=o;do i=i+r[n++]|0,a=a+i|0;while(--o);i%=65521,a%=65521}return i|a<<16|0}kp.exports=TE});var jo=y((PS,Pp)=>{"use strict";function IE(){for(var e,r=[],t=0;t<256;t++){e=t;for(var n=0;n<8;n++)e=e&1?3988292384^e>>>1:e>>>1;r[t]=e}return r}var NE=IE();function LE(e,r,t,n){var i=NE,a=n+t;e^=-1;for(var o=n;o<a;o++)e=e>>>8^i[(e^r[o])&255];return e^-1}Pp.exports=LE});var Mp=y((DS,Dp)=>{"use strict";Dp.exports={2:"need dictionary",1:"stream end",0:"","-1":"file error","-2":"stream error","-3":"data error","-4":"insufficient memory","-5":"buffer error","-6":"incompatible version"}});var Hp=y(Le=>{"use strict";var ee=Bt(),pe=Fp(),Up=Mo(),Ve=jo(),FE=Mp(),wr=0,kE=1,PE=3,Qe=4,jp=5,Ne=0,Bp=1,de=-2,DE=-3,Bo=-5,ME=-1,jE=1,Ai=2,BE=3,qE=4,UE=0,CE=2,Ii=8,zE=9,ZE=15,WE=8,HE=29,GE=256,Uo=GE+1+HE,$E=30,VE=19,YE=2*Uo+1,KE=15,M=3,Xe=258,Ee=Xe+M+1,XE=32,Ni=42,Co=69,Ri=73,Oi=91,Ti=103,_r=113,Gt=666,H=1,$t=2,gr=3,at=4,JE=3;function Je(e,r){return e.msg=FE[r],r}function qp(e){return(e<<1)-(e>4?9:0)}function Ke(e){for(var r=e.length;--r>=0;)e[r]=0}function Ye(e){var r=e.state,t=r.pending;t>e.avail_out&&(t=e.avail_out),t!==0&&(ee.arraySet(e.output,r.pending_buf,r.pending_out,t,e.next_out),e.next_out+=t,r.pending_out+=t,e.total_out+=t,e.avail_out-=t,r.pending-=t,r.pending===0&&(r.pending_out=0))}function Y(e,r){pe._tr_flush_block(e,e.block_start>=0?e.block_start:-1,e.strstart-e.block_start,r),e.block_start=e.strstart,Ye(e.strm)}function B(e,r){e.pending_buf[e.pending++]=r}function Ht(e,r){e.pending_buf[e.pending++]=r>>>8&255,e.pending_buf[e.pending++]=r&255}function QE(e,r,t,n){var i=e.avail_in;return i>n&&(i=n),i===0?0:(e.avail_in-=i,ee.arraySet(r,e.input,e.next_in,i,t),e.state.wrap===1?e.adler=Up(e.adler,r,i,t):e.state.wrap===2&&(e.adler=Ve(e.adler,r,i,t)),e.next_in+=i,e.total_in+=i,i)}function Cp(e,r){var t=e.max_chain_length,n=e.strstart,i,a,o=e.prev_length,f=e.nice_match,s=e.strstart>e.w_size-Ee?e.strstart-(e.w_size-Ee):0,u=e.window,l=e.w_mask,c=e.prev,p=e.strstart+Xe,h=u[n+o-1],v=u[n+o];e.prev_length>=e.good_match&&(t>>=2),f>e.lookahead&&(f=e.lookahead);do if(i=r,!(u[i+o]!==v||u[i+o-1]!==h||u[i]!==u[n]||u[++i]!==u[n+1])){n+=2,i++;do;while(u[++n]===u[++i]&&u[++n]===u[++i]&&u[++n]===u[++i]&&u[++n]===u[++i]&&u[++n]===u[++i]&&u[++n]===u[++i]&&u[++n]===u[++i]&&u[++n]===u[++i]&&n<p);if(a=Xe-(p-n),n=p-Xe,a>o){if(e.match_start=r,o=a,a>=f)break;h=u[n+o-1],v=u[n+o]}}while((r=c[r&l])>s&&--t!==0);return o<=e.lookahead?o:e.lookahead}function br(e){var r=e.w_size,t,n,i,a,o;do{if(a=e.window_size-e.lookahead-e.strstart,e.strstart>=r+(r-Ee)){ee.arraySet(e.window,e.window,r,r,0),e.match_start-=r,e.strstart-=r,e.block_start-=r,n=e.hash_size,t=n;do i=e.head[--t],e.head[t]=i>=r?i-r:0;while(--n);n=r,t=n;do i=e.prev[--t],e.prev[t]=i>=r?i-r:0;while(--n);a+=r}if(e.strm.avail_in===0)break;if(n=QE(e.strm,e.window,e.strstart+e.lookahead,a),e.lookahead+=n,e.lookahead+e.insert>=M)for(o=e.strstart-e.insert,e.ins_h=e.window[o],e.ins_h=(e.ins_h<<e.hash_shift^e.window[o+1])&e.hash_mask;e.insert&&(e.ins_h=(e.ins_h<<e.hash_shift^e.window[o+M-1])&e.hash_mask,e.prev[o&e.w_mask]=e.head[e.ins_h],e.head[e.ins_h]=o,o++,e.insert--,!(e.lookahead+e.insert<M)););}while(e.lookahead<Ee&&e.strm.avail_in!==0)}function em(e,r){var t=65535;for(t>e.pending_buf_size-5&&(t=e.pending_buf_size-5);;){if(e.lookahead<=1){if(br(e),e.lookahead===0&&r===wr)return H;if(e.lookahead===0)break}e.strstart+=e.lookahead,e.lookahead=0;var n=e.block_start+t;if((e.strstart===0||e.strstart>=n)&&(e.lookahead=e.strstart-n,e.strstart=n,Y(e,!1),e.strm.avail_out===0)||e.strstart-e.block_start>=e.w_size-Ee&&(Y(e,!1),e.strm.avail_out===0))return H}return e.insert=0,r===Qe?(Y(e,!0),e.strm.avail_out===0?gr:at):(e.strstart>e.block_start&&(Y(e,!1),e.strm.avail_out===0),H)}function qo(e,r){for(var t,n;;){if(e.lookahead<Ee){if(br(e),e.lookahead<Ee&&r===wr)return H;if(e.lookahead===0)break}if(t=0,e.lookahead>=M&&(e.ins_h=(e.ins_h<<e.hash_shift^e.window[e.strstart+M-1])&e.hash_mask,t=e.prev[e.strstart&e.w_mask]=e.head[e.ins_h],e.head[e.ins_h]=e.strstart),t!==0&&e.strstart-t<=e.w_size-Ee&&(e.match_length=Cp(e,t)),e.match_length>=M)if(n=pe._tr_tally(e,e.strstart-e.match_start,e.match_length-M),e.lookahead-=e.match_length,e.match_length<=e.max_lazy_match&&e.lookahead>=M){e.match_length--;do e.strstart++,e.ins_h=(e.ins_h<<e.hash_shift^e.window[e.strstart+M-1])&e.hash_mask,t=e.prev[e.strstart&e.w_mask]=e.head[e.ins_h],e.head[e.ins_h]=e.strstart;while(--e.match_length!==0);e.strstart++}else e.strstart+=e.match_length,e.match_length=0,e.ins_h=e.window[e.strstart],e.ins_h=(e.ins_h<<e.hash_shift^e.window[e.strstart+1])&e.hash_mask;else n=pe._tr_tally(e,0,e.window[e.strstart]),e.lookahead--,e.strstart++;if(n&&(Y(e,!1),e.strm.avail_out===0))return H}return e.insert=e.strstart<M-1?e.strstart:M-1,r===Qe?(Y(e,!0),e.strm.avail_out===0?gr:at):e.last_lit&&(Y(e,!1),e.strm.avail_out===0)?H:$t}function nt(e,r){for(var t,n,i;;){if(e.lookahead<Ee){if(br(e),e.lookahead<Ee&&r===wr)return H;if(e.lookahead===0)break}if(t=0,e.lookahead>=M&&(e.ins_h=(e.ins_h<<e.hash_shift^e.window[e.strstart+M-1])&e.hash_mask,t=e.prev[e.strstart&e.w_mask]=e.head[e.ins_h],e.head[e.ins_h]=e.strstart),e.prev_length=e.match_length,e.prev_match=e.match_start,e.match_length=M-1,t!==0&&e.prev_length<e.max_lazy_match&&e.strstart-t<=e.w_size-Ee&&(e.match_length=Cp(e,t),e.match_length<=5&&(e.strategy===jE||e.match_length===M&&e.strstart-e.match_start>4096)&&(e.match_length=M-1)),e.prev_length>=M&&e.match_length<=e.prev_length){i=e.strstart+e.lookahead-M,n=pe._tr_tally(e,e.strstart-1-e.prev_match,e.prev_length-M),e.lookahead-=e.prev_length-1,e.prev_length-=2;do++e.strstart<=i&&(e.ins_h=(e.ins_h<<e.hash_shift^e.window[e.strstart+M-1])&e.hash_mask,t=e.prev[e.strstart&e.w_mask]=e.head[e.ins_h],e.head[e.ins_h]=e.strstart);while(--e.prev_length!==0);if(e.match_available=0,e.match_length=M-1,e.strstart++,n&&(Y(e,!1),e.strm.avail_out===0))return H}else if(e.match_available){if(n=pe._tr_tally(e,0,e.window[e.strstart-1]),n&&Y(e,!1),e.strstart++,e.lookahead--,e.strm.avail_out===0)return H}else e.match_available=1,e.strstart++,e.lookahead--}return e.match_available&&(n=pe._tr_tally(e,0,e.window[e.strstart-1]),e.match_available=0),e.insert=e.strstart<M-1?e.strstart:M-1,r===Qe?(Y(e,!0),e.strm.avail_out===0?gr:at):e.last_lit&&(Y(e,!1),e.strm.avail_out===0)?H:$t}function rm(e,r){for(var t,n,i,a,o=e.window;;){if(e.lookahead<=Xe){if(br(e),e.lookahead<=Xe&&r===wr)return H;if(e.lookahead===0)break}if(e.match_length=0,e.lookahead>=M&&e.strstart>0&&(i=e.strstart-1,n=o[i],n===o[++i]&&n===o[++i]&&n===o[++i])){a=e.strstart+Xe;do;while(n===o[++i]&&n===o[++i]&&n===o[++i]&&n===o[++i]&&n===o[++i]&&n===o[++i]&&n===o[++i]&&n===o[++i]&&i<a);e.match_length=Xe-(a-i),e.match_length>e.lookahead&&(e.match_length=e.lookahead)}if(e.match_length>=M?(t=pe._tr_tally(e,1,e.match_length-M),e.lookahead-=e.match_length,e.strstart+=e.match_length,e.match_length=0):(t=pe._tr_tally(e,0,e.window[e.strstart]),e.lookahead--,e.strstart++),t&&(Y(e,!1),e.strm.avail_out===0))return H}return e.insert=0,r===Qe?(Y(e,!0),e.strm.avail_out===0?gr:at):e.last_lit&&(Y(e,!1),e.strm.avail_out===0)?H:$t}function tm(e,r){for(var t;;){if(e.lookahead===0&&(br(e),e.lookahead===0)){if(r===wr)return H;break}if(e.match_length=0,t=pe._tr_tally(e,0,e.window[e.strstart]),e.lookahead--,e.strstart++,t&&(Y(e,!1),e.strm.avail_out===0))return H}return e.insert=0,r===Qe?(Y(e,!0),e.strm.avail_out===0?gr:at):e.last_lit&&(Y(e,!1),e.strm.avail_out===0)?H:$t}function Ie(e,r,t,n,i){this.good_length=e,this.max_lazy=r,this.nice_length=t,this.max_chain=n,this.func=i}var it;it=[new Ie(0,0,0,0,em),new Ie(4,4,8,4,qo),new Ie(4,5,16,8,qo),new Ie(4,6,32,32,qo),new Ie(4,4,16,16,nt),new Ie(8,16,32,32,nt),new Ie(8,16,128,128,nt),new Ie(8,32,128,256,nt),new Ie(32,128,258,1024,nt),new Ie(32,258,258,4096,nt)];function nm(e){e.window_size=2*e.w_size,Ke(e.head),e.max_lazy_match=it[e.level].max_lazy,e.good_match=it[e.level].good_length,e.nice_match=it[e.level].nice_length,e.max_chain_length=it[e.level].max_chain,e.strstart=0,e.block_start=0,e.lookahead=0,e.insert=0,e.match_length=e.prev_length=M-1,e.match_available=0,e.ins_h=0}function im(){this.strm=null,this.status=0,this.pending_buf=null,this.pending_buf_size=0,this.pending_out=0,this.pending=0,this.wrap=0,this.gzhead=null,this.gzindex=0,this.method=Ii,this.last_flush=-1,this.w_size=0,this.w_bits=0,this.w_mask=0,this.window=null,this.window_size=0,this.prev=null,this.head=null,this.ins_h=0,this.hash_size=0,this.hash_bits=0,this.hash_mask=0,this.hash_shift=0,this.block_start=0,this.match_length=0,this.prev_match=0,this.match_available=0,this.strstart=0,this.match_start=0,this.lookahead=0,this.prev_length=0,this.max_chain_length=0,this.max_lazy_match=0,this.level=0,this.strategy=0,this.good_match=0,this.nice_match=0,this.dyn_ltree=new ee.Buf16(YE*2),this.dyn_dtree=new ee.Buf16((2*$E+1)*2),this.bl_tree=new ee.Buf16((2*VE+1)*2),Ke(this.dyn_ltree),Ke(this.dyn_dtree),Ke(this.bl_tree),this.l_desc=null,this.d_desc=null,this.bl_desc=null,this.bl_count=new ee.Buf16(KE+1),this.heap=new ee.Buf16(2*Uo+1),Ke(this.heap),this.heap_len=0,this.heap_max=0,this.depth=new ee.Buf16(2*Uo+1),Ke(this.depth),this.l_buf=0,this.lit_bufsize=0,this.last_lit=0,this.d_buf=0,this.opt_len=0,this.static_len=0,this.matches=0,this.insert=0,this.bi_buf=0,this.bi_valid=0}function zp(e){var r;return!e||!e.state?Je(e,de):(e.total_in=e.total_out=0,e.data_type=CE,r=e.state,r.pending=0,r.pending_out=0,r.wrap<0&&(r.wrap=-r.wrap),r.status=r.wrap?Ni:_r,e.adler=r.wrap===2?0:1,r.last_flush=wr,pe._tr_init(r),Ne)}function Zp(e){var r=zp(e);return r===Ne&&nm(e.state),r}function am(e,r){return!e||!e.state||e.state.wrap!==2?de:(e.state.gzhead=r,Ne)}function Wp(e,r,t,n,i,a){if(!e)return de;var o=1;if(r===ME&&(r=6),n<0?(o=0,n=-n):n>15&&(o=2,n-=16),i<1||i>zE||t!==Ii||n<8||n>15||r<0||r>9||a<0||a>qE)return Je(e,de);n===8&&(n=9);var f=new im;return e.state=f,f.strm=e,f.wrap=o,f.gzhead=null,f.w_bits=n,f.w_size=1<<f.w_bits,f.w_mask=f.w_size-1,f.hash_bits=i+7,f.hash_size=1<<f.hash_bits,f.hash_mask=f.hash_size-1,f.hash_shift=~~((f.hash_bits+M-1)/M),f.window=new ee.Buf8(f.w_size*2),f.head=new ee.Buf16(f.hash_size),f.prev=new ee.Buf16(f.w_size),f.lit_bufsize=1<<i+6,f.pending_buf_size=f.lit_bufsize*4,f.pending_buf=new ee.Buf8(f.pending_buf_size),f.d_buf=1*f.lit_bufsize,f.l_buf=3*f.lit_bufsize,f.level=r,f.strategy=a,f.method=t,Zp(e)}function om(e,r){return Wp(e,r,Ii,ZE,WE,UE)}function fm(e,r){var t,n,i,a;if(!e||!e.state||r>jp||r<0)return e?Je(e,de):de;if(n=e.state,!e.output||!e.input&&e.avail_in!==0||n.status===Gt&&r!==Qe)return Je(e,e.avail_out===0?Bo:de);if(n.strm=e,t=n.last_flush,n.last_flush=r,n.status===Ni)if(n.wrap===2)e.adler=0,B(n,31),B(n,139),B(n,8),n.gzhead?(B(n,(n.gzhead.text?1:0)+(n.gzhead.hcrc?2:0)+(n.gzhead.extra?4:0)+(n.gzhead.name?8:0)+(n.gzhead.comment?16:0)),B(n,n.gzhead.time&255),B(n,n.gzhead.time>>8&255),B(n,n.gzhead.time>>16&255),B(n,n.gzhead.time>>24&255),B(n,n.level===9?2:n.strategy>=Ai||n.level<2?4:0),B(n,n.gzhead.os&255),n.gzhead.extra&&n.gzhead.extra.length&&(B(n,n.gzhead.extra.length&255),B(n,n.gzhead.extra.length>>8&255)),n.gzhead.hcrc&&(e.adler=Ve(e.adler,n.pending_buf,n.pending,0)),n.gzindex=0,n.status=Co):(B(n,0),B(n,0),B(n,0),B(n,0),B(n,0),B(n,n.level===9?2:n.strategy>=Ai||n.level<2?4:0),B(n,JE),n.status=_r);else{var o=Ii+(n.w_bits-8<<4)<<8,f=-1;n.strategy>=Ai||n.level<2?f=0:n.level<6?f=1:n.level===6?f=2:f=3,o|=f<<6,n.strstart!==0&&(o|=XE),o+=31-o%31,n.status=_r,Ht(n,o),n.strstart!==0&&(Ht(n,e.adler>>>16),Ht(n,e.adler&65535)),e.adler=1}if(n.status===Co)if(n.gzhead.extra){for(i=n.pending;n.gzindex<(n.gzhead.extra.length&65535)&&!(n.pending===n.pending_buf_size&&(n.gzhead.hcrc&&n.pending>i&&(e.adler=Ve(e.adler,n.pending_buf,n.pending-i,i)),Ye(e),i=n.pending,n.pending===n.pending_buf_size));)B(n,n.gzhead.extra[n.gzindex]&255),n.gzindex++;n.gzhead.hcrc&&n.pending>i&&(e.adler=Ve(e.adler,n.pending_buf,n.pending-i,i)),n.gzindex===n.gzhead.extra.length&&(n.gzindex=0,n.status=Ri)}else n.status=Ri;if(n.status===Ri)if(n.gzhead.name){i=n.pending;do{if(n.pending===n.pending_buf_size&&(n.gzhead.hcrc&&n.pending>i&&(e.adler=Ve(e.adler,n.pending_buf,n.pending-i,i)),Ye(e),i=n.pending,n.pending===n.pending_buf_size)){a=1;break}n.gzindex<n.gzhead.name.length?a=n.gzhead.name.charCodeAt(n.gzindex++)&255:a=0,B(n,a)}while(a!==0);n.gzhead.hcrc&&n.pending>i&&(e.adler=Ve(e.adler,n.pending_buf,n.pending-i,i)),a===0&&(n.gzindex=0,n.status=Oi)}else n.status=Oi;if(n.status===Oi)if(n.gzhead.comment){i=n.pending;do{if(n.pending===n.pending_buf_size&&(n.gzhead.hcrc&&n.pending>i&&(e.adler=Ve(e.adler,n.pending_buf,n.pending-i,i)),Ye(e),i=n.pending,n.pending===n.pending_buf_size)){a=1;break}n.gzindex<n.gzhead.comment.length?a=n.gzhead.comment.charCodeAt(n.gzindex++)&255:a=0,B(n,a)}while(a!==0);n.gzhead.hcrc&&n.pending>i&&(e.adler=Ve(e.adler,n.pending_buf,n.pending-i,i)),a===0&&(n.status=Ti)}else n.status=Ti;if(n.status===Ti&&(n.gzhead.hcrc?(n.pending+2>n.pending_buf_size&&Ye(e),n.pending+2<=n.pending_buf_size&&(B(n,e.adler&255),B(n,e.adler>>8&255),e.adler=0,n.status=_r)):n.status=_r),n.pending!==0){if(Ye(e),e.avail_out===0)return n.last_flush=-1,Ne}else if(e.avail_in===0&&qp(r)<=qp(t)&&r!==Qe)return Je(e,Bo);if(n.status===Gt&&e.avail_in!==0)return Je(e,Bo);if(e.avail_in!==0||n.lookahead!==0||r!==wr&&n.status!==Gt){var s=n.strategy===Ai?tm(n,r):n.strategy===BE?rm(n,r):it[n.level].func(n,r);if((s===gr||s===at)&&(n.status=Gt),s===H||s===gr)return e.avail_out===0&&(n.last_flush=-1),Ne;if(s===$t&&(r===kE?pe._tr_align(n):r!==jp&&(pe._tr_stored_block(n,0,0,!1),r===PE&&(Ke(n.head),n.lookahead===0&&(n.strstart=0,n.block_start=0,n.insert=0))),Ye(e),e.avail_out===0))return n.last_flush=-1,Ne}return r!==Qe?Ne:n.wrap<=0?Bp:(n.wrap===2?(B(n,e.adler&255),B(n,e.adler>>8&255),B(n,e.adler>>16&255),B(n,e.adler>>24&255),B(n,e.total_in&255),B(n,e.total_in>>8&255),B(n,e.total_in>>16&255),B(n,e.total_in>>24&255)):(Ht(n,e.adler>>>16),Ht(n,e.adler&65535)),Ye(e),n.wrap>0&&(n.wrap=-n.wrap),n.pending!==0?Ne:Bp)}function um(e){var r;return!e||!e.state?de:(r=e.state.status,r!==Ni&&r!==Co&&r!==Ri&&r!==Oi&&r!==Ti&&r!==_r&&r!==Gt?Je(e,de):(e.state=null,r===_r?Je(e,DE):Ne))}function lm(e,r){var t=r.length,n,i,a,o,f,s,u,l;if(!e||!e.state||(n=e.state,o=n.wrap,o===2||o===1&&n.status!==Ni||n.lookahead))return de;for(o===1&&(e.adler=Up(e.adler,r,t,0)),n.wrap=0,t>=n.w_size&&(o===0&&(Ke(n.head),n.strstart=0,n.block_start=0,n.insert=0),l=new ee.Buf8(n.w_size),ee.arraySet(l,r,t-n.w_size,n.w_size,0),r=l,t=n.w_size),f=e.avail_in,s=e.next_in,u=e.input,e.avail_in=t,e.next_in=0,e.input=r,br(n);n.lookahead>=M;){i=n.strstart,a=n.lookahead-(M-1);do n.ins_h=(n.ins_h<<n.hash_shift^n.window[i+M-1])&n.hash_mask,n.prev[i&n.w_mask]=n.head[n.ins_h],n.head[n.ins_h]=i,i++;while(--a);n.strstart=i,n.lookahead=M-1,br(n)}return n.strstart+=n.lookahead,n.block_start=n.strstart,n.insert=n.lookahead,n.lookahead=0,n.match_length=n.prev_length=M-1,n.match_available=0,e.next_in=s,e.input=u,e.avail_in=f,n.wrap=o,Ne}Le.deflateInit=om;Le.deflateInit2=Wp;Le.deflateReset=Zp;Le.deflateResetKeep=zp;Le.deflateSetHeader=am;Le.deflate=fm;Le.deflateEnd=um;Le.deflateSetDictionary=lm;Le.deflateInfo="pako deflate (from Nodeca project)"});var $p=y((jS,Gp)=>{"use strict";var Li=30,sm=12;Gp.exports=function(r,t){var n,i,a,o,f,s,u,l,c,p,h,v,_,m,w,L,A,T,b,R,I,S,D,W,O;n=r.state,i=r.next_in,W=r.input,a=i+(r.avail_in-5),o=r.next_out,O=r.output,f=o-(t-r.avail_out),s=o+(r.avail_out-257),u=n.dmax,l=n.wsize,c=n.whave,p=n.wnext,h=n.window,v=n.hold,_=n.bits,m=n.lencode,w=n.distcode,L=(1<<n.lenbits)-1,A=(1<<n.distbits)-1;e:do{_<15&&(v+=W[i++]<<_,_+=8,v+=W[i++]<<_,_+=8),T=m[v&L];r:for(;;){if(b=T>>>24,v>>>=b,_-=b,b=T>>>16&255,b===0)O[o++]=T&65535;else if(b&16){R=T&65535,b&=15,b&&(_<b&&(v+=W[i++]<<_,_+=8),R+=v&(1<<b)-1,v>>>=b,_-=b),_<15&&(v+=W[i++]<<_,_+=8,v+=W[i++]<<_,_+=8),T=w[v&A];t:for(;;){if(b=T>>>24,v>>>=b,_-=b,b=T>>>16&255,b&16){if(I=T&65535,b&=15,_<b&&(v+=W[i++]<<_,_+=8,_<b&&(v+=W[i++]<<_,_+=8)),I+=v&(1<<b)-1,I>u){r.msg="invalid distance too far back",n.mode=Li;break e}if(v>>>=b,_-=b,b=o-f,I>b){if(b=I-b,b>c&&n.sane){r.msg="invalid distance too far back",n.mode=Li;break e}if(S=0,D=h,p===0){if(S+=l-b,b<R){R-=b;do O[o++]=h[S++];while(--b);S=o-I,D=O}}else if(p<b){if(S+=l+p-b,b-=p,b<R){R-=b;do O[o++]=h[S++];while(--b);if(S=0,p<R){b=p,R-=b;do O[o++]=h[S++];while(--b);S=o-I,D=O}}}else if(S+=p-b,b<R){R-=b;do O[o++]=h[S++];while(--b);S=o-I,D=O}for(;R>2;)O[o++]=D[S++],O[o++]=D[S++],O[o++]=D[S++],R-=3;R&&(O[o++]=D[S++],R>1&&(O[o++]=D[S++]))}else{S=o-I;do O[o++]=O[S++],O[o++]=O[S++],O[o++]=O[S++],R-=3;while(R>2);R&&(O[o++]=O[S++],R>1&&(O[o++]=O[S++]))}}else if((b&64)===0){T=w[(T&65535)+(v&(1<<b)-1)];continue t}else{r.msg="invalid distance code",n.mode=Li;break e}break}}else if((b&64)===0){T=m[(T&65535)+(v&(1<<b)-1)];continue r}else if(b&32){n.mode=sm;break e}else{r.msg="invalid literal/length code",n.mode=Li;break e}break}}while(i<a&&o<s);R=_>>3,i-=R,_-=R<<3,v&=(1<<_)-1,r.next_in=i,r.next_out=o,r.avail_in=i<a?5+(a-i):5-(i-a),r.avail_out=o<s?257+(s-o):257-(o-s),n.hold=v,n.bits=_}});var ed=y((BS,Qp)=>{"use strict";var Vp=Bt(),ot=15,Yp=852,Kp=592,Xp=0,zo=1,Jp=2,cm=[3,4,5,6,7,8,9,10,11,13,15,17,19,23,27,31,35,43,51,59,67,83,99,115,131,163,195,227,258,0,0],hm=[16,16,16,16,16,16,16,16,17,17,17,17,18,18,18,18,19,19,19,19,20,20,20,20,21,21,21,21,16,72,78],pm=[1,2,3,4,5,7,9,13,17,25,33,49,65,97,129,193,257,385,513,769,1025,1537,2049,3073,4097,6145,8193,12289,16385,24577,0,0],dm=[16,16,16,16,17,17,18,18,19,19,20,20,21,21,22,22,23,23,24,24,25,25,26,26,27,27,28,28,29,29,64,64];Qp.exports=function(r,t,n,i,a,o,f,s){var u=s.bits,l=0,c=0,p=0,h=0,v=0,_=0,m=0,w=0,L=0,A=0,T,b,R,I,S,D=null,W=0,O,ve=new Vp.Buf16(ot+1),Jt=new Vp.Buf16(ot+1),Qt=null,nf=0,af,en,rn;for(l=0;l<=ot;l++)ve[l]=0;for(c=0;c<i;c++)ve[t[n+c]]++;for(v=u,h=ot;h>=1&&ve[h]===0;h--);if(v>h&&(v=h),h===0)return a[o++]=1<<24|64<<16|0,a[o++]=1<<24|64<<16|0,s.bits=1,0;for(p=1;p<h&&ve[p]===0;p++);for(v<p&&(v=p),w=1,l=1;l<=ot;l++)if(w<<=1,w-=ve[l],w<0)return-1;if(w>0&&(r===Xp||h!==1))return-1;for(Jt[1]=0,l=1;l<ot;l++)Jt[l+1]=Jt[l]+ve[l];for(c=0;c<i;c++)t[n+c]!==0&&(f[Jt[t[n+c]]++]=c);if(r===Xp?(D=Qt=f,O=19):r===zo?(D=cm,W-=257,Qt=hm,nf-=257,O=256):(D=pm,Qt=dm,O=-1),A=0,c=0,l=p,S=o,_=v,m=0,R=-1,L=1<<v,I=L-1,r===zo&&L>Yp||r===Jp&&L>Kp)return 1;for(;;){af=l-m,f[c]<O?(en=0,rn=f[c]):f[c]>O?(en=Qt[nf+f[c]],rn=D[W+f[c]]):(en=96,rn=0),T=1<<l-m,b=1<<_,p=b;do b-=T,a[S+(A>>m)+b]=af<<24|en<<16|rn|0;while(b!==0);for(T=1<<l-1;A&T;)T>>=1;if(T!==0?(A&=T-1,A+=T):A=0,c++,--ve[l]===0){if(l===h)break;l=t[n+f[c]]}if(l>v&&(A&I)!==R){for(m===0&&(m=v),S+=p,_=l-m,w=1<<_;_+m<h&&(w-=ve[_+m],!(w<=0));)_++,w<<=1;if(L+=1<<_,r===zo&&L>Yp||r===Jp&&L>Kp)return 1;R=A&I,a[R]=v<<24|_<<16|S-o|0}}return A!==0&&(a[S+A]=l-m<<24|64<<16|0),s.bits=v,0}});var Dd=y(me=>{"use strict";var ae=Bt(),Vo=Mo(),Fe=jo(),ym=$p(),Vt=ed(),vm=0,Rd=1,Od=2,rd=4,_m=5,Fi=6,Er=0,gm=1,bm=2,ye=-2,Td=-3,Yo=-4,wm=-5,td=8,Id=1,nd=2,id=3,ad=4,od=5,fd=6,ud=7,ld=8,sd=9,cd=10,Di=11,je=12,Zo=13,hd=14,Wo=15,pd=16,dd=17,yd=18,vd=19,ki=20,Pi=21,_d=22,gd=23,bd=24,wd=25,Ed=26,Ho=27,md=28,Sd=29,C=30,Ko=31,Em=32,mm=852,Sm=592,xm=15,Am=xm;function xd(e){return(e>>>24&255)+(e>>>8&65280)+((e&65280)<<8)+((e&255)<<24)}function Rm(){this.mode=0,this.last=!1,this.wrap=0,this.havedict=!1,this.flags=0,this.dmax=0,this.check=0,this.total=0,this.head=null,this.wbits=0,this.wsize=0,this.whave=0,this.wnext=0,this.window=null,this.hold=0,this.bits=0,this.length=0,this.offset=0,this.extra=0,this.lencode=null,this.distcode=null,this.lenbits=0,this.distbits=0,this.ncode=0,this.nlen=0,this.ndist=0,this.have=0,this.next=null,this.lens=new ae.Buf16(320),this.work=new ae.Buf16(288),this.lendyn=null,this.distdyn=null,this.sane=0,this.back=0,this.was=0}function Nd(e){var r;return!e||!e.state?ye:(r=e.state,e.total_in=e.total_out=r.total=0,e.msg="",r.wrap&&(e.adler=r.wrap&1),r.mode=Id,r.last=0,r.havedict=0,r.dmax=32768,r.head=null,r.hold=0,r.bits=0,r.lencode=r.lendyn=new ae.Buf32(mm),r.distcode=r.distdyn=new ae.Buf32(Sm),r.sane=1,r.back=-1,Er)}function Ld(e){var r;return!e||!e.state?ye:(r=e.state,r.wsize=0,r.whave=0,r.wnext=0,Nd(e))}function Fd(e,r){var t,n;return!e||!e.state||(n=e.state,r<0?(t=0,r=-r):(t=(r>>4)+1,r<48&&(r&=15)),r&&(r<8||r>15))?ye:(n.window!==null&&n.wbits!==r&&(n.window=null),n.wrap=t,n.wbits=r,Ld(e))}function kd(e,r){var t,n;return e?(n=new Rm,e.state=n,n.window=null,t=Fd(e,r),t!==Er&&(e.state=null),t):ye}function Om(e){return kd(e,Am)}var Ad=!0,Go,$o;function Tm(e){if(Ad){var r;for(Go=new ae.Buf32(512),$o=new ae.Buf32(32),r=0;r<144;)e.lens[r++]=8;for(;r<256;)e.lens[r++]=9;for(;r<280;)e.lens[r++]=7;for(;r<288;)e.lens[r++]=8;for(Vt(Rd,e.lens,0,288,Go,0,e.work,{bits:9}),r=0;r<32;)e.lens[r++]=5;Vt(Od,e.lens,0,32,$o,0,e.work,{bits:5}),Ad=!1}e.lencode=Go,e.lenbits=9,e.distcode=$o,e.distbits=5}function Pd(e,r,t,n){var i,a=e.state;return a.window===null&&(a.wsize=1<<a.wbits,a.wnext=0,a.whave=0,a.window=new ae.Buf8(a.wsize)),n>=a.wsize?(ae.arraySet(a.window,r,t-a.wsize,a.wsize,0),a.wnext=0,a.whave=a.wsize):(i=a.wsize-a.wnext,i>n&&(i=n),ae.arraySet(a.window,r,t-n,i,a.wnext),n-=i,n?(ae.arraySet(a.window,r,t-n,n,0),a.wnext=n,a.whave=a.wsize):(a.wnext+=i,a.wnext===a.wsize&&(a.wnext=0),a.whave<a.wsize&&(a.whave+=i))),0}function Im(e,r){var t,n,i,a,o,f,s,u,l,c,p,h,v,_,m=0,w,L,A,T,b,R,I,S,D=new ae.Buf8(4),W,O,ve=[16,17,18,0,8,7,9,6,10,5,11,4,12,3,13,2,14,1,15];if(!e||!e.state||!e.output||!e.input&&e.avail_in!==0)return ye;t=e.state,t.mode===je&&(t.mode=Zo),o=e.next_out,i=e.output,s=e.avail_out,a=e.next_in,n=e.input,f=e.avail_in,u=t.hold,l=t.bits,c=f,p=s,S=Er;e:for(;;)switch(t.mode){case Id:if(t.wrap===0){t.mode=Zo;break}for(;l<16;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(t.wrap&2&&u===35615){t.check=0,D[0]=u&255,D[1]=u>>>8&255,t.check=Fe(t.check,D,2,0),u=0,l=0,t.mode=nd;break}if(t.flags=0,t.head&&(t.head.done=!1),!(t.wrap&1)||(((u&255)<<8)+(u>>8))%31){e.msg="incorrect header check",t.mode=C;break}if((u&15)!==td){e.msg="unknown compression method",t.mode=C;break}if(u>>>=4,l-=4,I=(u&15)+8,t.wbits===0)t.wbits=I;else if(I>t.wbits){e.msg="invalid window size",t.mode=C;break}t.dmax=1<<I,e.adler=t.check=1,t.mode=u&512?cd:je,u=0,l=0;break;case nd:for(;l<16;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(t.flags=u,(t.flags&255)!==td){e.msg="unknown compression method",t.mode=C;break}if(t.flags&57344){e.msg="unknown header flags set",t.mode=C;break}t.head&&(t.head.text=u>>8&1),t.flags&512&&(D[0]=u&255,D[1]=u>>>8&255,t.check=Fe(t.check,D,2,0)),u=0,l=0,t.mode=id;case id:for(;l<32;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}t.head&&(t.head.time=u),t.flags&512&&(D[0]=u&255,D[1]=u>>>8&255,D[2]=u>>>16&255,D[3]=u>>>24&255,t.check=Fe(t.check,D,4,0)),u=0,l=0,t.mode=ad;case ad:for(;l<16;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}t.head&&(t.head.xflags=u&255,t.head.os=u>>8),t.flags&512&&(D[0]=u&255,D[1]=u>>>8&255,t.check=Fe(t.check,D,2,0)),u=0,l=0,t.mode=od;case od:if(t.flags&1024){for(;l<16;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}t.length=u,t.head&&(t.head.extra_len=u),t.flags&512&&(D[0]=u&255,D[1]=u>>>8&255,t.check=Fe(t.check,D,2,0)),u=0,l=0}else t.head&&(t.head.extra=null);t.mode=fd;case fd:if(t.flags&1024&&(h=t.length,h>f&&(h=f),h&&(t.head&&(I=t.head.extra_len-t.length,t.head.extra||(t.head.extra=new Array(t.head.extra_len)),ae.arraySet(t.head.extra,n,a,h,I)),t.flags&512&&(t.check=Fe(t.check,n,h,a)),f-=h,a+=h,t.length-=h),t.length))break e;t.length=0,t.mode=ud;case ud:if(t.flags&2048){if(f===0)break e;h=0;do I=n[a+h++],t.head&&I&&t.length<65536&&(t.head.name+=String.fromCharCode(I));while(I&&h<f);if(t.flags&512&&(t.check=Fe(t.check,n,h,a)),f-=h,a+=h,I)break e}else t.head&&(t.head.name=null);t.length=0,t.mode=ld;case ld:if(t.flags&4096){if(f===0)break e;h=0;do I=n[a+h++],t.head&&I&&t.length<65536&&(t.head.comment+=String.fromCharCode(I));while(I&&h<f);if(t.flags&512&&(t.check=Fe(t.check,n,h,a)),f-=h,a+=h,I)break e}else t.head&&(t.head.comment=null);t.mode=sd;case sd:if(t.flags&512){for(;l<16;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(u!==(t.check&65535)){e.msg="header crc mismatch",t.mode=C;break}u=0,l=0}t.head&&(t.head.hcrc=t.flags>>9&1,t.head.done=!0),e.adler=t.check=0,t.mode=je;break;case cd:for(;l<32;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}e.adler=t.check=xd(u),u=0,l=0,t.mode=Di;case Di:if(t.havedict===0)return e.next_out=o,e.avail_out=s,e.next_in=a,e.avail_in=f,t.hold=u,t.bits=l,bm;e.adler=t.check=1,t.mode=je;case je:if(r===_m||r===Fi)break e;case Zo:if(t.last){u>>>=l&7,l-=l&7,t.mode=Ho;break}for(;l<3;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}switch(t.last=u&1,u>>>=1,l-=1,u&3){case 0:t.mode=hd;break;case 1:if(Tm(t),t.mode=ki,r===Fi){u>>>=2,l-=2;break e}break;case 2:t.mode=dd;break;case 3:e.msg="invalid block type",t.mode=C}u>>>=2,l-=2;break;case hd:for(u>>>=l&7,l-=l&7;l<32;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if((u&65535)!==(u>>>16^65535)){e.msg="invalid stored block lengths",t.mode=C;break}if(t.length=u&65535,u=0,l=0,t.mode=Wo,r===Fi)break e;case Wo:t.mode=pd;case pd:if(h=t.length,h){if(h>f&&(h=f),h>s&&(h=s),h===0)break e;ae.arraySet(i,n,a,h,o),f-=h,a+=h,s-=h,o+=h,t.length-=h;break}t.mode=je;break;case dd:for(;l<14;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(t.nlen=(u&31)+257,u>>>=5,l-=5,t.ndist=(u&31)+1,u>>>=5,l-=5,t.ncode=(u&15)+4,u>>>=4,l-=4,t.nlen>286||t.ndist>30){e.msg="too many length or distance symbols",t.mode=C;break}t.have=0,t.mode=yd;case yd:for(;t.have<t.ncode;){for(;l<3;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}t.lens[ve[t.have++]]=u&7,u>>>=3,l-=3}for(;t.have<19;)t.lens[ve[t.have++]]=0;if(t.lencode=t.lendyn,t.lenbits=7,W={bits:t.lenbits},S=Vt(vm,t.lens,0,19,t.lencode,0,t.work,W),t.lenbits=W.bits,S){e.msg="invalid code lengths set",t.mode=C;break}t.have=0,t.mode=vd;case vd:for(;t.have<t.nlen+t.ndist;){for(;m=t.lencode[u&(1<<t.lenbits)-1],w=m>>>24,L=m>>>16&255,A=m&65535,!(w<=l);){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(A<16)u>>>=w,l-=w,t.lens[t.have++]=A;else{if(A===16){for(O=w+2;l<O;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(u>>>=w,l-=w,t.have===0){e.msg="invalid bit length repeat",t.mode=C;break}I=t.lens[t.have-1],h=3+(u&3),u>>>=2,l-=2}else if(A===17){for(O=w+3;l<O;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}u>>>=w,l-=w,I=0,h=3+(u&7),u>>>=3,l-=3}else{for(O=w+7;l<O;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}u>>>=w,l-=w,I=0,h=11+(u&127),u>>>=7,l-=7}if(t.have+h>t.nlen+t.ndist){e.msg="invalid bit length repeat",t.mode=C;break}for(;h--;)t.lens[t.have++]=I}}if(t.mode===C)break;if(t.lens[256]===0){e.msg="invalid code -- missing end-of-block",t.mode=C;break}if(t.lenbits=9,W={bits:t.lenbits},S=Vt(Rd,t.lens,0,t.nlen,t.lencode,0,t.work,W),t.lenbits=W.bits,S){e.msg="invalid literal/lengths set",t.mode=C;break}if(t.distbits=6,t.distcode=t.distdyn,W={bits:t.distbits},S=Vt(Od,t.lens,t.nlen,t.ndist,t.distcode,0,t.work,W),t.distbits=W.bits,S){e.msg="invalid distances set",t.mode=C;break}if(t.mode=ki,r===Fi)break e;case ki:t.mode=Pi;case Pi:if(f>=6&&s>=258){e.next_out=o,e.avail_out=s,e.next_in=a,e.avail_in=f,t.hold=u,t.bits=l,ym(e,p),o=e.next_out,i=e.output,s=e.avail_out,a=e.next_in,n=e.input,f=e.avail_in,u=t.hold,l=t.bits,t.mode===je&&(t.back=-1);break}for(t.back=0;m=t.lencode[u&(1<<t.lenbits)-1],w=m>>>24,L=m>>>16&255,A=m&65535,!(w<=l);){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(L&&(L&240)===0){for(T=w,b=L,R=A;m=t.lencode[R+((u&(1<<T+b)-1)>>T)],w=m>>>24,L=m>>>16&255,A=m&65535,!(T+w<=l);){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}u>>>=T,l-=T,t.back+=T}if(u>>>=w,l-=w,t.back+=w,t.length=A,L===0){t.mode=Ed;break}if(L&32){t.back=-1,t.mode=je;break}if(L&64){e.msg="invalid literal/length code",t.mode=C;break}t.extra=L&15,t.mode=_d;case _d:if(t.extra){for(O=t.extra;l<O;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}t.length+=u&(1<<t.extra)-1,u>>>=t.extra,l-=t.extra,t.back+=t.extra}t.was=t.length,t.mode=gd;case gd:for(;m=t.distcode[u&(1<<t.distbits)-1],w=m>>>24,L=m>>>16&255,A=m&65535,!(w<=l);){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if((L&240)===0){for(T=w,b=L,R=A;m=t.distcode[R+((u&(1<<T+b)-1)>>T)],w=m>>>24,L=m>>>16&255,A=m&65535,!(T+w<=l);){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}u>>>=T,l-=T,t.back+=T}if(u>>>=w,l-=w,t.back+=w,L&64){e.msg="invalid distance code",t.mode=C;break}t.offset=A,t.extra=L&15,t.mode=bd;case bd:if(t.extra){for(O=t.extra;l<O;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}t.offset+=u&(1<<t.extra)-1,u>>>=t.extra,l-=t.extra,t.back+=t.extra}if(t.offset>t.dmax){e.msg="invalid distance too far back",t.mode=C;break}t.mode=wd;case wd:if(s===0)break e;if(h=p-s,t.offset>h){if(h=t.offset-h,h>t.whave&&t.sane){e.msg="invalid distance too far back",t.mode=C;break}h>t.wnext?(h-=t.wnext,v=t.wsize-h):v=t.wnext-h,h>t.length&&(h=t.length),_=t.window}else _=i,v=o-t.offset,h=t.length;h>s&&(h=s),s-=h,t.length-=h;do i[o++]=_[v++];while(--h);t.length===0&&(t.mode=Pi);break;case Ed:if(s===0)break e;i[o++]=t.length,s--,t.mode=Pi;break;case Ho:if(t.wrap){for(;l<32;){if(f===0)break e;f--,u|=n[a++]<<l,l+=8}if(p-=s,e.total_out+=p,t.total+=p,p&&(e.adler=t.check=t.flags?Fe(t.check,i,p,o-p):Vo(t.check,i,p,o-p)),p=s,(t.flags?u:xd(u))!==t.check){e.msg="incorrect data check",t.mode=C;break}u=0,l=0}t.mode=md;case md:if(t.wrap&&t.flags){for(;l<32;){if(f===0)break e;f--,u+=n[a++]<<l,l+=8}if(u!==(t.total&4294967295)){e.msg="incorrect length check",t.mode=C;break}u=0,l=0}t.mode=Sd;case Sd:S=gm;break e;case C:S=Td;break e;case Ko:return Yo;case Em:default:return ye}return e.next_out=o,e.avail_out=s,e.next_in=a,e.avail_in=f,t.hold=u,t.bits=l,(t.wsize||p!==e.avail_out&&t.mode<C&&(t.mode<Ho||r!==rd))&&Pd(e,e.output,e.next_out,p-e.avail_out)?(t.mode=Ko,Yo):(c-=e.avail_in,p-=e.avail_out,e.total_in+=c,e.total_out+=p,t.total+=p,t.wrap&&p&&(e.adler=t.check=t.flags?Fe(t.check,i,p,e.next_out-p):Vo(t.check,i,p,e.next_out-p)),e.data_type=t.bits+(t.last?64:0)+(t.mode===je?128:0)+(t.mode===ki||t.mode===Wo?256:0),(c===0&&p===0||r===rd)&&S===Er&&(S=wm),S)}function Nm(e){if(!e||!e.state)return ye;var r=e.state;return r.window&&(r.window=null),e.state=null,Er}function Lm(e,r){var t;return!e||!e.state||(t=e.state,(t.wrap&2)===0)?ye:(t.head=r,r.done=!1,Er)}function Fm(e,r){var t=r.length,n,i,a;return!e||!e.state||(n=e.state,n.wrap!==0&&n.mode!==Di)?ye:n.mode===Di&&(i=1,i=Vo(i,r,t,0),i!==n.check)?Td:(a=Pd(e,r,t,t),a?(n.mode=Ko,Yo):(n.havedict=1,Er))}me.inflateReset=Ld;me.inflateReset2=Fd;me.inflateResetKeep=Nd;me.inflateInit=Om;me.inflateInit2=kd;me.inflate=Im;me.inflateEnd=Nm;me.inflateGetHeader=Lm;me.inflateSetDictionary=Fm;me.inflateInfo="pako inflate (from Nodeca project)"});var jd=y((US,Md)=>{"use strict";Md.exports={Z_NO_FLUSH:0,Z_PARTIAL_FLUSH:1,Z_SYNC_FLUSH:2,Z_FULL_FLUSH:3,Z_FINISH:4,Z_BLOCK:5,Z_TREES:6,Z_OK:0,Z_STREAM_END:1,Z_NEED_DICT:2,Z_ERRNO:-1,Z_STREAM_ERROR:-2,Z_DATA_ERROR:-3,Z_BUF_ERROR:-5,Z_NO_COMPRESSION:0,Z_BEST_SPEED:1,Z_BEST_COMPRESSION:9,Z_DEFAULT_COMPRESSION:-1,Z_FILTERED:1,Z_HUFFMAN_ONLY:2,Z_RLE:3,Z_FIXED:4,Z_DEFAULT_STRATEGY:0,Z_BINARY:0,Z_TEXT:1,Z_UNKNOWN:2,Z_DEFLATED:8}});var qd=y(g=>{"use strict";var oe=Wr(),km=lp(),Yt=Hp(),mr=Dd(),Bd=jd();for(Xo in Bd)g[Xo]=Bd[Xo];var Xo;g.NONE=0;g.DEFLATE=1;g.INFLATE=2;g.GZIP=3;g.GUNZIP=4;g.DEFLATERAW=5;g.INFLATERAW=6;g.UNZIP=7;var Pm=31,Dm=139;function X(e){if(typeof e!="number"||e<g.DEFLATE||e>g.UNZIP)throw new TypeError("Bad argument");this.dictionary=null,this.err=0,this.flush=0,this.init_done=!1,this.level=0,this.memLevel=0,this.mode=e,this.strategy=0,this.windowBits=0,this.write_in_progress=!1,this.pending_close=!1,this.gzip_id_bytes_read=0}X.prototype.close=function(){if(this.write_in_progress){this.pending_close=!0;return}this.pending_close=!1,oe(this.init_done,"close before init"),oe(this.mode<=g.UNZIP),this.mode===g.DEFLATE||this.mode===g.GZIP||this.mode===g.DEFLATERAW?Yt.deflateEnd(this.strm):(this.mode===g.INFLATE||this.mode===g.GUNZIP||this.mode===g.INFLATERAW||this.mode===g.UNZIP)&&mr.inflateEnd(this.strm),this.mode=g.NONE,this.dictionary=null};X.prototype.write=function(e,r,t,n,i,a,o){return this._write(!0,e,r,t,n,i,a,o)};X.prototype.writeSync=function(e,r,t,n,i,a,o){return this._write(!1,e,r,t,n,i,a,o)};X.prototype._write=function(e,r,t,n,i,a,o,f){if(oe.equal(arguments.length,8),oe(this.init_done,"write before init"),oe(this.mode!==g.NONE,"already finalized"),oe.equal(!1,this.write_in_progress,"write already in progress"),oe.equal(!1,this.pending_close,"close is pending"),this.write_in_progress=!0,oe.equal(!1,r===void 0,"must provide flush value"),this.write_in_progress=!0,r!==g.Z_NO_FLUSH&&r!==g.Z_PARTIAL_FLUSH&&r!==g.Z_SYNC_FLUSH&&r!==g.Z_FULL_FLUSH&&r!==g.Z_FINISH&&r!==g.Z_BLOCK)throw new Error("Invalid flush value");if(t==null&&(t=Buffer.alloc(0),i=0,n=0),this.strm.avail_in=i,this.strm.input=t,this.strm.next_in=n,this.strm.avail_out=f,this.strm.output=a,this.strm.next_out=o,this.flush=r,!e)return this._process(),this._checkError()?this._afterSync():void 0;var s=this;return process.nextTick(function(){s._process(),s._after()}),this};X.prototype._afterSync=function(){var e=this.strm.avail_out,r=this.strm.avail_in;return this.write_in_progress=!1,[r,e]};X.prototype._process=function(){var e=null;switch(this.mode){case g.DEFLATE:case g.GZIP:case g.DEFLATERAW:this.err=Yt.deflate(this.strm,this.flush);break;case g.UNZIP:switch(this.strm.avail_in>0&&(e=this.strm.next_in),this.gzip_id_bytes_read){case 0:if(e===null)break;if(this.strm.input[e]===Pm){if(this.gzip_id_bytes_read=1,e++,this.strm.avail_in===1)break}else{this.mode=g.INFLATE;break}case 1:if(e===null)break;this.strm.input[e]===Dm?(this.gzip_id_bytes_read=2,this.mode=g.GUNZIP):this.mode=g.INFLATE;break;default:throw new Error("invalid number of gzip magic number bytes read")}case g.INFLATE:case g.GUNZIP:case g.INFLATERAW:for(this.err=mr.inflate(this.strm,this.flush),this.err===g.Z_NEED_DICT&&this.dictionary&&(this.err=mr.inflateSetDictionary(this.strm,this.dictionary),this.err===g.Z_OK?this.err=mr.inflate(this.strm,this.flush):this.err===g.Z_DATA_ERROR&&(this.err=g.Z_NEED_DICT));this.strm.avail_in>0&&this.mode===g.GUNZIP&&this.err===g.Z_STREAM_END&&this.strm.next_in[0]!==0;)this.reset(),this.err=mr.inflate(this.strm,this.flush);break;default:throw new Error("Unknown mode "+this.mode)}};X.prototype._checkError=function(){switch(this.err){case g.Z_OK:case g.Z_BUF_ERROR:if(this.strm.avail_out!==0&&this.flush===g.Z_FINISH)return this._error("unexpected end of file"),!1;break;case g.Z_STREAM_END:break;case g.Z_NEED_DICT:return this.dictionary==null?this._error("Missing dictionary"):this._error("Bad dictionary"),!1;default:return this._error("Zlib error"),!1}return!0};X.prototype._after=function(){if(this._checkError()){var e=this.strm.avail_out,r=this.strm.avail_in;this.write_in_progress=!1,this.callback(r,e),this.pending_close&&this.close()}};X.prototype._error=function(e){this.strm.msg&&(e=this.strm.msg),this.onerror(e,this.err),this.write_in_progress=!1,this.pending_close&&this.close()};X.prototype.init=function(e,r,t,n,i){oe(arguments.length===4||arguments.length===5,"init(windowBits, level, memLevel, strategy, [dictionary])"),oe(e>=8&&e<=15,"invalid windowBits"),oe(r>=-1&&r<=9,"invalid compression level"),oe(t>=1&&t<=9,"invalid memlevel"),oe(n===g.Z_FILTERED||n===g.Z_HUFFMAN_ONLY||n===g.Z_RLE||n===g.Z_FIXED||n===g.Z_DEFAULT_STRATEGY,"invalid strategy"),this._init(r,e,t,n,i),this._setDictionary()};X.prototype.params=function(){throw new Error("deflateParams Not supported")};X.prototype.reset=function(){this._reset(),this._setDictionary()};X.prototype._init=function(e,r,t,n,i){switch(this.level=e,this.windowBits=r,this.memLevel=t,this.strategy=n,this.flush=g.Z_NO_FLUSH,this.err=g.Z_OK,(this.mode===g.GZIP||this.mode===g.GUNZIP)&&(this.windowBits+=16),this.mode===g.UNZIP&&(this.windowBits+=32),(this.mode===g.DEFLATERAW||this.mode===g.INFLATERAW)&&(this.windowBits=-1*this.windowBits),this.strm=new km,this.mode){case g.DEFLATE:case g.GZIP:case g.DEFLATERAW:this.err=Yt.deflateInit2(this.strm,this.level,g.Z_DEFLATED,this.windowBits,this.memLevel,this.strategy);break;case g.INFLATE:case g.GUNZIP:case g.INFLATERAW:case g.UNZIP:this.err=mr.inflateInit2(this.strm,this.windowBits);break;default:throw new Error("Unknown mode "+this.mode)}this.err!==g.Z_OK&&this._error("Init error"),this.dictionary=i,this.write_in_progress=!1,this.init_done=!0};X.prototype._setDictionary=function(){if(this.dictionary!=null){switch(this.err=g.Z_OK,this.mode){case g.DEFLATE:case g.DEFLATERAW:this.err=Yt.deflateSetDictionary(this.strm,this.dictionary);break;default:break}this.err!==g.Z_OK&&this._error("Failed to set dictionary")}};X.prototype._reset=function(){switch(this.err=g.Z_OK,this.mode){case g.DEFLATE:case g.DEFLATERAW:case g.GZIP:this.err=Yt.deflateReset(this.strm);break;case g.INFLATE:case g.INFLATERAW:case g.GUNZIP:this.err=mr.inflateReset(this.strm);break;default:break}this.err!==g.Z_OK&&this._error("Failed to reset stream")};g.Zlib=X});var Hd=y(E=>{"use strict";var ke=lr().Buffer,Zd=(fp(),Qd(K)).Transform,x=qd(),er=Se(),Kt=Wr().ok,Qo=lr().kMaxLength,Wd="Cannot create final Buffer. It would be larger than 0x"+Qo.toString(16)+" bytes";x.Z_MIN_WINDOWBITS=8;x.Z_MAX_WINDOWBITS=15;x.Z_DEFAULT_WINDOWBITS=15;x.Z_MIN_CHUNK=64;x.Z_MAX_CHUNK=1/0;x.Z_DEFAULT_CHUNK=16*1024;x.Z_MIN_MEMLEVEL=1;x.Z_MAX_MEMLEVEL=9;x.Z_DEFAULT_MEMLEVEL=8;x.Z_MIN_LEVEL=-1;x.Z_MAX_LEVEL=9;x.Z_DEFAULT_LEVEL=x.Z_DEFAULT_COMPRESSION;var Ud=Object.keys(x);for(Mi=0;Mi<Ud.length;Mi++)ji=Ud[Mi],ji.match(/^Z/)&&Object.defineProperty(E,ji,{enumerable:!0,value:x[ji],writable:!1});var ji,Mi,qi={Z_OK:x.Z_OK,Z_STREAM_END:x.Z_STREAM_END,Z_NEED_DICT:x.Z_NEED_DICT,Z_ERRNO:x.Z_ERRNO,Z_STREAM_ERROR:x.Z_STREAM_ERROR,Z_DATA_ERROR:x.Z_DATA_ERROR,Z_MEM_ERROR:x.Z_MEM_ERROR,Z_BUF_ERROR:x.Z_BUF_ERROR,Z_VERSION_ERROR:x.Z_VERSION_ERROR},Cd=Object.keys(qi);for(Bi=0;Bi<Cd.length;Bi++)Jo=Cd[Bi],qi[qi[Jo]]=Jo;var Jo,Bi;Object.defineProperty(E,"codes",{enumerable:!0,value:Object.freeze(qi),writable:!1});E.Deflate=Sr;E.Inflate=xr;E.Gzip=Ar;E.Gunzip=Rr;E.DeflateRaw=Or;E.InflateRaw=Tr;E.Unzip=Ir;E.createDeflate=function(e){return new Sr(e)};E.createInflate=function(e){return new xr(e)};E.createDeflateRaw=function(e){return new Or(e)};E.createInflateRaw=function(e){return new Tr(e)};E.createGzip=function(e){return new Ar(e)};E.createGunzip=function(e){return new Rr(e)};E.createUnzip=function(e){return new Ir(e)};E.deflate=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new Sr(r),e,t)};E.deflateSync=function(e,r){return Lr(new Sr(r),e)};E.gzip=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new Ar(r),e,t)};E.gzipSync=function(e,r){return Lr(new Ar(r),e)};E.deflateRaw=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new Or(r),e,t)};E.deflateRawSync=function(e,r){return Lr(new Or(r),e)};E.unzip=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new Ir(r),e,t)};E.unzipSync=function(e,r){return Lr(new Ir(r),e)};E.inflate=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new xr(r),e,t)};E.inflateSync=function(e,r){return Lr(new xr(r),e)};E.gunzip=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new Rr(r),e,t)};E.gunzipSync=function(e,r){return Lr(new Rr(r),e)};E.inflateRaw=function(e,r,t){return typeof r=="function"&&(t=r,r={}),Nr(new Tr(r),e,t)};E.inflateRawSync=function(e,r){return Lr(new Tr(r),e)};function Nr(e,r,t){var n=[],i=0;e.on("error",o),e.on("end",f),e.end(r),a();function a(){for(var s;(s=e.read())!==null;)n.push(s),i+=s.length;e.once("readable",a)}function o(s){e.removeListener("end",f),e.removeListener("readable",a),t(s)}function f(){var s,u=null;i>=Qo?u=new RangeError(Wd):s=ke.concat(n,i),n=[],e.close(),t(u,s)}}function Lr(e,r){if(typeof r=="string"&&(r=ke.from(r)),!ke.isBuffer(r))throw new TypeError("Not a string or buffer");var t=e._finishFlushFlag;return e._processChunk(r,t)}function Sr(e){if(!(this instanceof Sr))return new Sr(e);Z.call(this,e,x.DEFLATE)}function xr(e){if(!(this instanceof xr))return new xr(e);Z.call(this,e,x.INFLATE)}function Ar(e){if(!(this instanceof Ar))return new Ar(e);Z.call(this,e,x.GZIP)}function Rr(e){if(!(this instanceof Rr))return new Rr(e);Z.call(this,e,x.GUNZIP)}function Or(e){if(!(this instanceof Or))return new Or(e);Z.call(this,e,x.DEFLATERAW)}function Tr(e){if(!(this instanceof Tr))return new Tr(e);Z.call(this,e,x.INFLATERAW)}function Ir(e){if(!(this instanceof Ir))return new Ir(e);Z.call(this,e,x.UNZIP)}function zd(e){return e===x.Z_NO_FLUSH||e===x.Z_PARTIAL_FLUSH||e===x.Z_SYNC_FLUSH||e===x.Z_FULL_FLUSH||e===x.Z_FINISH||e===x.Z_BLOCK}function Z(e,r){var t=this;if(this._opts=e=e||{},this._chunkSize=e.chunkSize||E.Z_DEFAULT_CHUNK,Zd.call(this,e),e.flush&&!zd(e.flush))throw new Error("Invalid flush flag: "+e.flush);if(e.finishFlush&&!zd(e.finishFlush))throw new Error("Invalid flush flag: "+e.finishFlush);if(this._flushFlag=e.flush||x.Z_NO_FLUSH,this._finishFlushFlag=typeof e.finishFlush<"u"?e.finishFlush:x.Z_FINISH,e.chunkSize&&(e.chunkSize<E.Z_MIN_CHUNK||e.chunkSize>E.Z_MAX_CHUNK))throw new Error("Invalid chunk size: "+e.chunkSize);if(e.windowBits&&(e.windowBits<E.Z_MIN_WINDOWBITS||e.windowBits>E.Z_MAX_WINDOWBITS))throw new Error("Invalid windowBits: "+e.windowBits);if(e.level&&(e.level<E.Z_MIN_LEVEL||e.level>E.Z_MAX_LEVEL))throw new Error("Invalid compression level: "+e.level);if(e.memLevel&&(e.memLevel<E.Z_MIN_MEMLEVEL||e.memLevel>E.Z_MAX_MEMLEVEL))throw new Error("Invalid memLevel: "+e.memLevel);if(e.strategy&&e.strategy!=E.Z_FILTERED&&e.strategy!=E.Z_HUFFMAN_ONLY&&e.strategy!=E.Z_RLE&&e.strategy!=E.Z_FIXED&&e.strategy!=E.Z_DEFAULT_STRATEGY)throw new Error("Invalid strategy: "+e.strategy);if(e.dictionary&&!ke.isBuffer(e.dictionary))throw new Error("Invalid dictionary: it should be a Buffer instance");this._handle=new x.Zlib(r);var n=this;this._hadError=!1,this._handle.onerror=function(o,f){Ui(n),n._hadError=!0;var s=new Error(o);s.errno=f,s.code=E.codes[f],n.emit("error",s)};var i=E.Z_DEFAULT_COMPRESSION;typeof e.level=="number"&&(i=e.level);var a=E.Z_DEFAULT_STRATEGY;typeof e.strategy=="number"&&(a=e.strategy),this._handle.init(e.windowBits||E.Z_DEFAULT_WINDOWBITS,i,e.memLevel||E.Z_DEFAULT_MEMLEVEL,a,e.dictionary),this._buffer=ke.allocUnsafe(this._chunkSize),this._offset=0,this._level=i,this._strategy=a,this.once("end",this.close),Object.defineProperty(this,"_closed",{get:function(){return!t._handle},configurable:!0,enumerable:!0})}er.inherits(Z,Zd);Z.prototype.params=function(e,r,t){if(e<E.Z_MIN_LEVEL||e>E.Z_MAX_LEVEL)throw new RangeError("Invalid compression level: "+e);if(r!=E.Z_FILTERED&&r!=E.Z_HUFFMAN_ONLY&&r!=E.Z_RLE&&r!=E.Z_FIXED&&r!=E.Z_DEFAULT_STRATEGY)throw new TypeError("Invalid strategy: "+r);if(this._level!==e||this._strategy!==r){var n=this;this.flush(x.Z_SYNC_FLUSH,function(){Kt(n._handle,"zlib binding closed"),n._handle.params(e,r),n._hadError||(n._level=e,n._strategy=r,t&&t())})}else process.nextTick(t)};Z.prototype.reset=function(){return Kt(this._handle,"zlib binding closed"),this._handle.reset()};Z.prototype._flush=function(e){this._transform(ke.alloc(0),"",e)};Z.prototype.flush=function(e,r){var t=this,n=this._writableState;(typeof e=="function"||e===void 0&&!r)&&(r=e,e=x.Z_FULL_FLUSH),n.ended?r&&process.nextTick(r):n.ending?r&&this.once("end",r):n.needDrain?r&&this.once("drain",function(){return t.flush(e,r)}):(this._flushFlag=e,this.write(ke.alloc(0),"",r))};Z.prototype.close=function(e){Ui(this,e),process.nextTick(Mm,this)};function Ui(e,r){r&&process.nextTick(r),e._handle&&(e._handle.close(),e._handle=null)}function Mm(e){e.emit("close")}Z.prototype._transform=function(e,r,t){var n,i=this._writableState,a=i.ending||i.ended,o=a&&(!e||i.length===e.length);if(e!==null&&!ke.isBuffer(e))return t(new Error("invalid input"));if(!this._handle)return t(new Error("zlib binding closed"));o?n=this._finishFlushFlag:(n=this._flushFlag,e.length>=i.length&&(this._flushFlag=this._opts.flush||x.Z_NO_FLUSH)),this._processChunk(e,n,t)};Z.prototype._processChunk=function(e,r,t){var n=e&&e.length,i=this._chunkSize-this._offset,a=0,o=this,f=typeof t=="function";if(!f){var s=[],u=0,l;this.on("error",function(_){l=_}),Kt(this._handle,"zlib binding closed");do var c=this._handle.writeSync(r,e,a,n,this._buffer,this._offset,i);while(!this._hadError&&v(c[0],c[1]));if(this._hadError)throw l;if(u>=Qo)throw Ui(this),new RangeError(Wd);var p=ke.concat(s,u);return Ui(this),p}Kt(this._handle,"zlib binding closed");var h=this._handle.write(r,e,a,n,this._buffer,this._offset,i);h.buffer=e,h.callback=v;function v(_,m){if(this&&(this.buffer=null,this.callback=null),!o._hadError){var w=i-m;if(Kt(w>=0,"have should not go down"),w>0){var L=o._buffer.slice(o._offset,o._offset+w);o._offset+=w,f?o.push(L):(s.push(L),u+=L.length)}if((m===0||o._offset>=o._chunkSize)&&(i=o._chunkSize,o._offset=0,o._buffer=ke.allocUnsafe(o._chunkSize)),m===0){if(a+=n-_,n=_,!f)return!0;var A=o._handle.write(r,e,a,n,o._buffer,o._offset,o._chunkSize);A.callback=v,A.buffer=e;return}if(!f)return!1;t()}}};er.inherits(Sr,Z);er.inherits(xr,Z);er.inherits(Ar,Z);er.inherits(Rr,Z);er.inherits(Or,Z);er.inherits(Tr,Z);er.inherits(Ir,Z)});var ef=ft(Wr()),rf=ft(Se()),tf=ft(Hd()),jm=ef.default??ef,Xt=rf.default??rf,Fr=tf.default??tf,Bm=typeof Fr.constants=="object"&&Fr.constants!==null?Fr.constants:Object.fromEntries(Object.entries(Fr).filter(([e,r])=>/^[A-Z0-9_]+$/.test(e)&&typeof r=="number"));typeof Fr.constants>"u"&&(Fr.constants=Bm);typeof Xt.TextEncoder>"u"&&typeof globalThis.TextEncoder=="function"&&(Xt.TextEncoder=globalThis.TextEncoder);typeof Xt.TextDecoder>"u"&&typeof globalThis.TextDecoder=="function"&&(Xt.TextDecoder=globalThis.TextDecoder);globalThis.__secureExecBuiltinAssertModule=jm;globalThis.__secureExecBuiltinUtilModule=Xt;globalThis.__secureExecBuiltinZlibModule=Fr;})();
-/*! Bundled license information:
-
-assert/build/internal/util/comparisons.js:
-  (*!
-   * The buffer module from node.js, for the browser.
-   *
-   * @author   Feross Aboukhadijeh <feross@feross.org> <http://feross.org>
-   * @license  MIT
-   *)
-
-ieee754/index.js:
-  (*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> *)
-
-buffer/index.js:
-  (*!
-   * The buffer module from node.js, for the browser.
-   *
-   * @author   Feross Aboukhadijeh <https://feross.org>
-   * @license  MIT
-   *)
-
-safe-buffer/index.js:
-  (*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> *)
-*/
diff --git a/crates/v8-runtime/assets/generated/v8-bridge.js b/crates/v8-runtime/assets/generated/v8-bridge.js
deleted file mode 100644
index ae2dc65cb..000000000
--- a/crates/v8-runtime/assets/generated/v8-bridge.js
+++ /dev/null
@@ -1,229 +0,0 @@
-if(typeof globalThis.global==="undefined"){globalThis.global=globalThis;}if(typeof globalThis.process==="undefined"){globalThis.process={env:{},argv:["node"],browser:false,version:"v22.0.0",versions:{node:"22.0.0"},nextTick(callback,...args){return Promise.resolve().then(()=>callback(...args));}};}
-(()=>{var Ca=Object.create;var lr=Object.defineProperty;var Ta=Object.getOwnPropertyDescriptor;var Pa=Object.getOwnPropertyNames;var va=Object.getPrototypeOf,Ea=Object.prototype.hasOwnProperty;var qa=(b,s,l)=>s in b?lr(b,s,{enumerable:!0,configurable:!0,writable:!0,value:l}):b[s]=l;var Wa=(b,s)=>()=>(s||b((s={exports:{}}).exports,s),s.exports);var Aa=(b,s,l,g)=>{if(s&&typeof s=="object"||typeof s=="function")for(let c of Pa(s))!Ea.call(b,c)&&c!==l&&lr(b,c,{get:()=>s[c],enumerable:!(g=Ta(s,c))||g.enumerable});return b};var ka=(b,s,l)=>(l=b!=null?Ca(va(b)):{},Aa(s||!b||!b.__esModule?lr(l,"default",{value:b,enumerable:!0}):l,b));var L=(b,s,l)=>qa(b,typeof s!="symbol"?s+"":s,l);var kn=Wa((St,An)=>{(function(b,s){typeof St=="object"&&typeof An<"u"?s(St):typeof define=="function"&&define.amd?define(["exports"],s):(b=typeof globalThis<"u"?globalThis:b||self,s(b.WebStreamsPolyfill={}))})(St,(function(b){"use strict";function s(){}function l(e){return typeof e=="object"&&e!==null||typeof e=="function"}let g=s;function c(e,t){try{Object.defineProperty(e,"name",{value:t,configurable:!0})}catch{}}let pe=Promise,ur=Promise.prototype.then,ie=Promise.reject.bind(pe);function R(e){return new pe(e)}function p(e){return R(t=>t(e))}function d(e){return ie(e)}function I(e,t,r){return ur.call(e,t,r)}function T(e,t,r){I(I(e,t,r),void 0,g)}function Be(e,t){T(e,t)}function gt(e,t){T(e,void 0,t)}function M(e,t,r){return I(e,t,r)}function ye(e){I(e,void 0,g)}let se=e=>{if(typeof queueMicrotask=="function")se=queueMicrotask;else{let t=p(void 0);se=r=>I(t,r)}return se(e)};function le(e,t,r){if(typeof e!="function")throw new TypeError("Argument is not a function");return Function.prototype.apply.call(e,t,r)}function Z(e,t,r){try{return p(le(e,t,r))}catch(n){return d(n)}}let dr=16384;class W{constructor(){this._cursor=0,this._size=0,this._front={_elements:[],_next:void 0},this._back=this._front,this._cursor=0,this._size=0}get length(){return this._size}push(t){let r=this._back,n=r;r._elements.length===dr-1&&(n={_elements:[],_next:void 0}),r._elements.push(t),n!==r&&(this._back=n,r._next=n),++this._size}shift(){let t=this._front,r=t,n=this._cursor,o=n+1,a=t._elements,i=a[n];return o===dr&&(r=t._next,o=0),--this._size,this._cursor=o,t!==r&&(this._front=r),a[n]=void 0,i}forEach(t){let r=this._cursor,n=this._front,o=n._elements;for(;(r!==o.length||n._next!==void 0)&&!(r===o.length&&(n=n._next,o=n._elements,r=0,o.length===0));)t(o[r]),++r}peek(){let t=this._front,r=this._cursor;return t._elements[r]}}let fr=Symbol("[[AbortSteps]]"),cr=Symbol("[[ErrorSteps]]"),Rt=Symbol("[[CancelSteps]]"),wt=Symbol("[[PullSteps]]"),Ct=Symbol("[[ReleaseSteps]]");function hr(e,t){e._ownerReadableStream=t,t._reader=e,t._state==="readable"?Pt(e):t._state==="closed"?Bn(e):br(e,t._storedError)}function Tt(e,t){let r=e._ownerReadableStream;return j(r,t)}function $(e){let t=e._ownerReadableStream;t._state==="readable"?vt(e,new TypeError("Reader was released and can no longer be used to monitor the stream's closedness")):In(e,new TypeError("Reader was released and can no longer be used to monitor the stream's closedness")),t._readableStreamController[Ct](),t._reader=void 0,e._ownerReadableStream=void 0}function Ne(e){return new TypeError("Cannot "+e+" a stream using a released reader")}function Pt(e){e._closedPromise=R((t,r)=>{e._closedPromise_resolve=t,e._closedPromise_reject=r})}function br(e,t){Pt(e),vt(e,t)}function Bn(e){Pt(e),mr(e)}function vt(e,t){e._closedPromise_reject!==void 0&&(ye(e._closedPromise),e._closedPromise_reject(t),e._closedPromise_resolve=void 0,e._closedPromise_reject=void 0)}function In(e,t){br(e,t)}function mr(e){e._closedPromise_resolve!==void 0&&(e._closedPromise_resolve(void 0),e._closedPromise_resolve=void 0,e._closedPromise_reject=void 0)}let _r=Number.isFinite||function(e){return typeof e=="number"&&isFinite(e)},On=Math.trunc||function(e){return e<0?Math.ceil(e):Math.floor(e)};function jn(e){return typeof e=="object"||typeof e=="function"}function F(e,t){if(e!==void 0&&!jn(e))throw new TypeError(`${t} is not an object.`)}function A(e,t){if(typeof e!="function")throw new TypeError(`${t} is not a function.`)}function zn(e){return typeof e=="object"&&e!==null||typeof e=="function"}function pr(e,t){if(!zn(e))throw new TypeError(`${t} is not an object.`)}function U(e,t,r){if(e===void 0)throw new TypeError(`Parameter ${t} is required in '${r}'.`)}function Et(e,t,r){if(e===void 0)throw new TypeError(`${t} is required in '${r}'.`)}function qt(e){return Number(e)}function yr(e){return e===0?0:e}function Fn(e){return yr(On(e))}function Wt(e,t){let n=Number.MAX_SAFE_INTEGER,o=Number(e);if(o=yr(o),!_r(o))throw new TypeError(`${t} is not a finite number`);if(o=Fn(o),o<0||o>n)throw new TypeError(`${t} is outside the accepted range of 0 to ${n}, inclusive`);return!_r(o)||o===0?0:o}function At(e,t){if(!re(e))throw new TypeError(`${t} is not a ReadableStream.`)}function Se(e){return new X(e)}function Sr(e,t){e._reader._readRequests.push(t)}function kt(e,t,r){let o=e._reader._readRequests.shift();r?o._closeSteps():o._chunkSteps(t)}function Qe(e){return e._reader._readRequests.length}function gr(e){let t=e._reader;return!(t===void 0||!J(t))}class X{constructor(t){if(U(t,1,"ReadableStreamDefaultReader"),At(t,"First parameter"),ne(t))throw new TypeError("This stream has already been locked for exclusive reading by another reader");hr(this,t),this._readRequests=new W}get closed(){return J(this)?this._closedPromise:d(Ye("closed"))}cancel(t=void 0){return J(this)?this._ownerReadableStream===void 0?d(Ne("cancel")):Tt(this,t):d(Ye("cancel"))}read(){if(!J(this))return d(Ye("read"));if(this._ownerReadableStream===void 0)return d(Ne("read from"));let t,r,n=R((a,i)=>{t=a,r=i});return Ie(this,{_chunkSteps:a=>t({value:a,done:!1}),_closeSteps:()=>t({value:void 0,done:!0}),_errorSteps:a=>r(a)}),n}releaseLock(){if(!J(this))throw Ye("releaseLock");this._ownerReadableStream!==void 0&&Dn(this)}}Object.defineProperties(X.prototype,{cancel:{enumerable:!0},read:{enumerable:!0},releaseLock:{enumerable:!0},closed:{enumerable:!0}}),c(X.prototype.cancel,"cancel"),c(X.prototype.read,"read"),c(X.prototype.releaseLock,"releaseLock"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(X.prototype,Symbol.toStringTag,{value:"ReadableStreamDefaultReader",configurable:!0});function J(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_readRequests")?!1:e instanceof X}function Ie(e,t){let r=e._ownerReadableStream;r._disturbed=!0,r._state==="closed"?t._closeSteps():r._state==="errored"?t._errorSteps(r._storedError):r._readableStreamController[wt](t)}function Dn(e){$(e);let t=new TypeError("Reader was released");Rr(e,t)}function Rr(e,t){let r=e._readRequests;e._readRequests=new W,r.forEach(n=>{n._errorSteps(t)})}function Ye(e){return new TypeError(`ReadableStreamDefaultReader.prototype.${e} can only be used on a ReadableStreamDefaultReader`)}let Ln=Object.getPrototypeOf(Object.getPrototypeOf(async function*(){}).prototype);class wr{constructor(t,r){this._ongoingPromise=void 0,this._isFinished=!1,this._reader=t,this._preventCancel=r}next(){let t=()=>this._nextSteps();return this._ongoingPromise=this._ongoingPromise?M(this._ongoingPromise,t,t):t(),this._ongoingPromise}return(t){let r=()=>this._returnSteps(t);return this._ongoingPromise?M(this._ongoingPromise,r,r):r()}_nextSteps(){if(this._isFinished)return Promise.resolve({value:void 0,done:!0});let t=this._reader,r,n,o=R((i,u)=>{r=i,n=u});return Ie(t,{_chunkSteps:i=>{this._ongoingPromise=void 0,se(()=>r({value:i,done:!1}))},_closeSteps:()=>{this._ongoingPromise=void 0,this._isFinished=!0,$(t),r({value:void 0,done:!0})},_errorSteps:i=>{this._ongoingPromise=void 0,this._isFinished=!0,$(t),n(i)}}),o}_returnSteps(t){if(this._isFinished)return Promise.resolve({value:t,done:!0});this._isFinished=!0;let r=this._reader;if(!this._preventCancel){let n=Tt(r,t);return $(r),M(n,()=>({value:t,done:!0}))}return $(r),p({value:t,done:!0})}}let Cr={next(){return Tr(this)?this._asyncIteratorImpl.next():d(Pr("next"))},return(e){return Tr(this)?this._asyncIteratorImpl.return(e):d(Pr("return"))}};Object.setPrototypeOf(Cr,Ln);function Mn(e,t){let r=Se(e),n=new wr(r,t),o=Object.create(Cr);return o._asyncIteratorImpl=n,o}function Tr(e){if(!l(e)||!Object.prototype.hasOwnProperty.call(e,"_asyncIteratorImpl"))return!1;try{return e._asyncIteratorImpl instanceof wr}catch{return!1}}function Pr(e){return new TypeError(`ReadableStreamAsyncIterator.${e} can only be used on a ReadableSteamAsyncIterator`)}let vr=Number.isNaN||function(e){return e!==e};var Bt,It,Ot;function Oe(e){return e.slice()}function Er(e,t,r,n,o){new Uint8Array(e).set(new Uint8Array(r,n,o),t)}let N=e=>(typeof e.transfer=="function"?N=t=>t.transfer():typeof structuredClone=="function"?N=t=>structuredClone(t,{transfer:[t]}):N=t=>t,N(e)),K=e=>(typeof e.detached=="boolean"?K=t=>t.detached:K=t=>t.byteLength===0,K(e));function qr(e,t,r){if(e.slice)return e.slice(t,r);let n=r-t,o=new ArrayBuffer(n);return Er(o,0,e,t,n),o}function He(e,t){let r=e[t];if(r!=null){if(typeof r!="function")throw new TypeError(`${String(t)} is not a function`);return r}}function $n(e){let t={[Symbol.iterator]:()=>e.iterator},r=(async function*(){return yield*t})(),n=r.next;return{iterator:r,nextMethod:n,done:!1}}let jt=(Ot=(Bt=Symbol.asyncIterator)!==null&&Bt!==void 0?Bt:(It=Symbol.for)===null||It===void 0?void 0:It.call(Symbol,"Symbol.asyncIterator"))!==null&&Ot!==void 0?Ot:"@@asyncIterator";function Wr(e,t="sync",r){if(r===void 0)if(t==="async"){if(r=He(e,jt),r===void 0){let a=He(e,Symbol.iterator),i=Wr(e,"sync",a);return $n(i)}}else r=He(e,Symbol.iterator);if(r===void 0)throw new TypeError("The object is not iterable");let n=le(r,e,[]);if(!l(n))throw new TypeError("The iterator method must return an object");let o=n.next;return{iterator:n,nextMethod:o,done:!1}}function Un(e){let t=le(e.nextMethod,e.iterator,[]);if(!l(t))throw new TypeError("The iterator.next() method must return an object");return t}function Nn(e){return!!e.done}function Qn(e){return e.value}function Yn(e){return!(typeof e!="number"||vr(e)||e<0)}function Ar(e){let t=qr(e.buffer,e.byteOffset,e.byteOffset+e.byteLength);return new Uint8Array(t)}function zt(e){let t=e._queue.shift();return e._queueTotalSize-=t.size,e._queueTotalSize<0&&(e._queueTotalSize=0),t.value}function Ft(e,t,r){if(!Yn(r)||r===1/0)throw new RangeError("Size must be a finite, non-NaN, non-negative number.");e._queue.push({value:t,size:r}),e._queueTotalSize+=r}function Hn(e){return e._queue.peek().value}function x(e){e._queue=new W,e._queueTotalSize=0}function kr(e){return e===DataView}function Vn(e){return kr(e.constructor)}function Gn(e){return kr(e)?1:e.BYTES_PER_ELEMENT}class ue{constructor(){throw new TypeError("Illegal constructor")}get view(){if(!Dt(this))throw Nt("view");return this._view}respond(t){if(!Dt(this))throw Nt("respond");if(U(t,1,"respond"),t=Wt(t,"First parameter"),this._associatedReadableByteStreamController===void 0)throw new TypeError("This BYOB request has been invalidated");if(K(this._view.buffer))throw new TypeError("The BYOB request's buffer has been detached and so cannot be used as a response");Xe(this._associatedReadableByteStreamController,t)}respondWithNewView(t){if(!Dt(this))throw Nt("respondWithNewView");if(U(t,1,"respondWithNewView"),!ArrayBuffer.isView(t))throw new TypeError("You can only respond with array buffer views");if(this._associatedReadableByteStreamController===void 0)throw new TypeError("This BYOB request has been invalidated");if(K(t.buffer))throw new TypeError("The given view's buffer has been detached and so cannot be used as a response");Je(this._associatedReadableByteStreamController,t)}}Object.defineProperties(ue.prototype,{respond:{enumerable:!0},respondWithNewView:{enumerable:!0},view:{enumerable:!0}}),c(ue.prototype.respond,"respond"),c(ue.prototype.respondWithNewView,"respondWithNewView"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(ue.prototype,Symbol.toStringTag,{value:"ReadableStreamBYOBRequest",configurable:!0});class Q{constructor(){throw new TypeError("Illegal constructor")}get byobRequest(){if(!de(this))throw ze("byobRequest");return Ut(this)}get desiredSize(){if(!de(this))throw ze("desiredSize");return $r(this)}close(){if(!de(this))throw ze("close");if(this._closeRequested)throw new TypeError("The stream has already been closed; do not close it again!");let t=this._controlledReadableByteStream._state;if(t!=="readable")throw new TypeError(`The stream (in ${t} state) is not in the readable state and cannot be closed`);je(this)}enqueue(t){if(!de(this))throw ze("enqueue");if(U(t,1,"enqueue"),!ArrayBuffer.isView(t))throw new TypeError("chunk must be an array buffer view");if(t.byteLength===0)throw new TypeError("chunk must have non-zero byteLength");if(t.buffer.byteLength===0)throw new TypeError("chunk's buffer must have non-zero byteLength");if(this._closeRequested)throw new TypeError("stream is closed or draining");let r=this._controlledReadableByteStream._state;if(r!=="readable")throw new TypeError(`The stream (in ${r} state) is not in the readable state and cannot be enqueued to`);Ze(this,t)}error(t=void 0){if(!de(this))throw ze("error");k(this,t)}[Rt](t){Br(this),x(this);let r=this._cancelAlgorithm(t);return Ge(this),r}[wt](t){let r=this._controlledReadableByteStream;if(this._queueTotalSize>0){Mr(this,t);return}let n=this._autoAllocateChunkSize;if(n!==void 0){let o;try{o=new ArrayBuffer(n)}catch(i){t._errorSteps(i);return}let a={buffer:o,bufferByteLength:n,byteOffset:0,byteLength:n,bytesFilled:0,minimumFill:1,elementSize:1,viewConstructor:Uint8Array,readerType:"default"};this._pendingPullIntos.push(a)}Sr(r,t),fe(this)}[Ct](){if(this._pendingPullIntos.length>0){let t=this._pendingPullIntos.peek();t.readerType="none",this._pendingPullIntos=new W,this._pendingPullIntos.push(t)}}}Object.defineProperties(Q.prototype,{close:{enumerable:!0},enqueue:{enumerable:!0},error:{enumerable:!0},byobRequest:{enumerable:!0},desiredSize:{enumerable:!0}}),c(Q.prototype.close,"close"),c(Q.prototype.enqueue,"enqueue"),c(Q.prototype.error,"error"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Q.prototype,Symbol.toStringTag,{value:"ReadableByteStreamController",configurable:!0});function de(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_controlledReadableByteStream")?!1:e instanceof Q}function Dt(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_associatedReadableByteStreamController")?!1:e instanceof ue}function fe(e){if(!xn(e))return;if(e._pulling){e._pullAgain=!0;return}e._pulling=!0;let r=e._pullAlgorithm();T(r,()=>(e._pulling=!1,e._pullAgain&&(e._pullAgain=!1,fe(e)),null),n=>(k(e,n),null))}function Br(e){Mt(e),e._pendingPullIntos=new W}function Lt(e,t){let r=!1;e._state==="closed"&&(r=!0);let n=Ir(t);t.readerType==="default"?kt(e,n,r):ao(e,n,r)}function Ir(e){let t=e.bytesFilled,r=e.elementSize;return new e.viewConstructor(e.buffer,e.byteOffset,t/r)}function Ve(e,t,r,n){e._queue.push({buffer:t,byteOffset:r,byteLength:n}),e._queueTotalSize+=n}function Or(e,t,r,n){let o;try{o=qr(t,r,r+n)}catch(a){throw k(e,a),a}Ve(e,o,0,n)}function jr(e,t){t.bytesFilled>0&&Or(e,t.buffer,t.byteOffset,t.bytesFilled),ge(e)}function zr(e,t){let r=Math.min(e._queueTotalSize,t.byteLength-t.bytesFilled),n=t.bytesFilled+r,o=r,a=!1,i=n%t.elementSize,u=n-i;u>=t.minimumFill&&(o=u-t.bytesFilled,a=!0);let m=e._queue;for(;o>0;){let f=m.peek(),_=Math.min(o,f.byteLength),y=t.byteOffset+t.bytesFilled;Er(t.buffer,y,f.buffer,f.byteOffset,_),f.byteLength===_?m.shift():(f.byteOffset+=_,f.byteLength-=_),e._queueTotalSize-=_,Fr(e,_,t),o-=_}return a}function Fr(e,t,r){r.bytesFilled+=t}function Dr(e){e._queueTotalSize===0&&e._closeRequested?(Ge(e),Ue(e._controlledReadableByteStream)):fe(e)}function Mt(e){e._byobRequest!==null&&(e._byobRequest._associatedReadableByteStreamController=void 0,e._byobRequest._view=null,e._byobRequest=null)}function $t(e){for(;e._pendingPullIntos.length>0;){if(e._queueTotalSize===0)return;let t=e._pendingPullIntos.peek();zr(e,t)&&(ge(e),Lt(e._controlledReadableByteStream,t))}}function Zn(e){let t=e._controlledReadableByteStream._reader;for(;t._readRequests.length>0;){if(e._queueTotalSize===0)return;let r=t._readRequests.shift();Mr(e,r)}}function Xn(e,t,r,n){let o=e._controlledReadableByteStream,a=t.constructor,i=Gn(a),{byteOffset:u,byteLength:m}=t,f=r*i,_;try{_=N(t.buffer)}catch(w){n._errorSteps(w);return}let y={buffer:_,bufferByteLength:_.byteLength,byteOffset:u,byteLength:m,bytesFilled:0,minimumFill:f,elementSize:i,viewConstructor:a,readerType:"byob"};if(e._pendingPullIntos.length>0){e._pendingPullIntos.push(y),Qr(o,n);return}if(o._state==="closed"){let w=new a(y.buffer,y.byteOffset,0);n._closeSteps(w);return}if(e._queueTotalSize>0){if(zr(e,y)){let w=Ir(y);Dr(e),n._chunkSteps(w);return}if(e._closeRequested){let w=new TypeError("Insufficient bytes to fill elements in the given buffer");k(e,w),n._errorSteps(w);return}}e._pendingPullIntos.push(y),Qr(o,n),fe(e)}function Jn(e,t){t.readerType==="none"&&ge(e);let r=e._controlledReadableByteStream;if(Qt(r))for(;Yr(r)>0;){let n=ge(e);Lt(r,n)}}function Kn(e,t,r){if(Fr(e,t,r),r.readerType==="none"){jr(e,r),$t(e);return}if(r.bytesFilled<r.minimumFill)return;ge(e);let n=r.bytesFilled%r.elementSize;if(n>0){let o=r.byteOffset+r.bytesFilled;Or(e,r.buffer,o-n,n)}r.bytesFilled-=n,Lt(e._controlledReadableByteStream,r),$t(e)}function Lr(e,t){let r=e._pendingPullIntos.peek();Mt(e),e._controlledReadableByteStream._state==="closed"?Jn(e,r):Kn(e,t,r),fe(e)}function ge(e){return e._pendingPullIntos.shift()}function xn(e){let t=e._controlledReadableByteStream;return t._state!=="readable"||e._closeRequested||!e._started?!1:!!(gr(t)&&Qe(t)>0||Qt(t)&&Yr(t)>0||$r(e)>0)}function Ge(e){e._pullAlgorithm=void 0,e._cancelAlgorithm=void 0}function je(e){let t=e._controlledReadableByteStream;if(!(e._closeRequested||t._state!=="readable")){if(e._queueTotalSize>0){e._closeRequested=!0;return}if(e._pendingPullIntos.length>0){let r=e._pendingPullIntos.peek();if(r.bytesFilled%r.elementSize!==0){let n=new TypeError("Insufficient bytes to fill elements in the given buffer");throw k(e,n),n}}Ge(e),Ue(t)}}function Ze(e,t){let r=e._controlledReadableByteStream;if(e._closeRequested||r._state!=="readable")return;let{buffer:n,byteOffset:o,byteLength:a}=t;if(K(n))throw new TypeError("chunk's buffer is detached and so cannot be enqueued");let i=N(n);if(e._pendingPullIntos.length>0){let u=e._pendingPullIntos.peek();if(K(u.buffer))throw new TypeError("The BYOB request's buffer has been detached and so cannot be filled with an enqueued chunk");Mt(e),u.buffer=N(u.buffer),u.readerType==="none"&&jr(e,u)}if(gr(r))if(Zn(e),Qe(r)===0)Ve(e,i,o,a);else{e._pendingPullIntos.length>0&&ge(e);let u=new Uint8Array(i,o,a);kt(r,u,!1)}else Qt(r)?(Ve(e,i,o,a),$t(e)):Ve(e,i,o,a);fe(e)}function k(e,t){let r=e._controlledReadableByteStream;r._state==="readable"&&(Br(e),x(e),Ge(e),_n(r,t))}function Mr(e,t){let r=e._queue.shift();e._queueTotalSize-=r.byteLength,Dr(e);let n=new Uint8Array(r.buffer,r.byteOffset,r.byteLength);t._chunkSteps(n)}function Ut(e){if(e._byobRequest===null&&e._pendingPullIntos.length>0){let t=e._pendingPullIntos.peek(),r=new Uint8Array(t.buffer,t.byteOffset+t.bytesFilled,t.byteLength-t.bytesFilled),n=Object.create(ue.prototype);to(n,e,r),e._byobRequest=n}return e._byobRequest}function $r(e){let t=e._controlledReadableByteStream._state;return t==="errored"?null:t==="closed"?0:e._strategyHWM-e._queueTotalSize}function Xe(e,t){let r=e._pendingPullIntos.peek();if(e._controlledReadableByteStream._state==="closed"){if(t!==0)throw new TypeError("bytesWritten must be 0 when calling respond() on a closed stream")}else{if(t===0)throw new TypeError("bytesWritten must be greater than 0 when calling respond() on a readable stream");if(r.bytesFilled+t>r.byteLength)throw new RangeError("bytesWritten out of range")}r.buffer=N(r.buffer),Lr(e,t)}function Je(e,t){let r=e._pendingPullIntos.peek();if(e._controlledReadableByteStream._state==="closed"){if(t.byteLength!==0)throw new TypeError("The view's length must be 0 when calling respondWithNewView() on a closed stream")}else if(t.byteLength===0)throw new TypeError("The view's length must be greater than 0 when calling respondWithNewView() on a readable stream");if(r.byteOffset+r.bytesFilled!==t.byteOffset)throw new RangeError("The region specified by view does not match byobRequest");if(r.bufferByteLength!==t.buffer.byteLength)throw new RangeError("The buffer of view has different capacity than byobRequest");if(r.bytesFilled+t.byteLength>r.byteLength)throw new RangeError("The region specified by view is larger than byobRequest");let o=t.byteLength;r.buffer=N(t.buffer),Lr(e,o)}function Ur(e,t,r,n,o,a,i){t._controlledReadableByteStream=e,t._pullAgain=!1,t._pulling=!1,t._byobRequest=null,t._queue=t._queueTotalSize=void 0,x(t),t._closeRequested=!1,t._started=!1,t._strategyHWM=a,t._pullAlgorithm=n,t._cancelAlgorithm=o,t._autoAllocateChunkSize=i,t._pendingPullIntos=new W,e._readableStreamController=t;let u=r();T(p(u),()=>(t._started=!0,fe(t),null),m=>(k(t,m),null))}function eo(e,t,r){let n=Object.create(Q.prototype),o,a,i;t.start!==void 0?o=()=>t.start(n):o=()=>{},t.pull!==void 0?a=()=>t.pull(n):a=()=>p(void 0),t.cancel!==void 0?i=m=>t.cancel(m):i=()=>p(void 0);let u=t.autoAllocateChunkSize;if(u===0)throw new TypeError("autoAllocateChunkSize must be greater than 0");Ur(e,n,o,a,i,r,u)}function to(e,t,r){e._associatedReadableByteStreamController=t,e._view=r}function Nt(e){return new TypeError(`ReadableStreamBYOBRequest.prototype.${e} can only be used on a ReadableStreamBYOBRequest`)}function ze(e){return new TypeError(`ReadableByteStreamController.prototype.${e} can only be used on a ReadableByteStreamController`)}function ro(e,t){F(e,t);let r=e?.mode;return{mode:r===void 0?void 0:no(r,`${t} has member 'mode' that`)}}function no(e,t){if(e=`${e}`,e!=="byob")throw new TypeError(`${t} '${e}' is not a valid enumeration value for ReadableStreamReaderMode`);return e}function oo(e,t){var r;F(e,t);let n=(r=e?.min)!==null&&r!==void 0?r:1;return{min:Wt(n,`${t} has member 'min' that`)}}function Nr(e){return new ee(e)}function Qr(e,t){e._reader._readIntoRequests.push(t)}function ao(e,t,r){let o=e._reader._readIntoRequests.shift();r?o._closeSteps(t):o._chunkSteps(t)}function Yr(e){return e._reader._readIntoRequests.length}function Qt(e){let t=e._reader;return!(t===void 0||!ce(t))}class ee{constructor(t){if(U(t,1,"ReadableStreamBYOBReader"),At(t,"First parameter"),ne(t))throw new TypeError("This stream has already been locked for exclusive reading by another reader");if(!de(t._readableStreamController))throw new TypeError("Cannot construct a ReadableStreamBYOBReader for a stream not constructed with a byte source");hr(this,t),this._readIntoRequests=new W}get closed(){return ce(this)?this._closedPromise:d(Ke("closed"))}cancel(t=void 0){return ce(this)?this._ownerReadableStream===void 0?d(Ne("cancel")):Tt(this,t):d(Ke("cancel"))}read(t,r={}){if(!ce(this))return d(Ke("read"));if(!ArrayBuffer.isView(t))return d(new TypeError("view must be an array buffer view"));if(t.byteLength===0)return d(new TypeError("view must have non-zero byteLength"));if(t.buffer.byteLength===0)return d(new TypeError("view's buffer must have non-zero byteLength"));if(K(t.buffer))return d(new TypeError("view's buffer has been detached"));let n;try{n=oo(r,"options")}catch(f){return d(f)}let o=n.min;if(o===0)return d(new TypeError("options.min must be greater than 0"));if(Vn(t)){if(o>t.byteLength)return d(new RangeError("options.min must be less than or equal to view's byteLength"))}else if(o>t.length)return d(new RangeError("options.min must be less than or equal to view's length"));if(this._ownerReadableStream===void 0)return d(Ne("read from"));let a,i,u=R((f,_)=>{a=f,i=_});return Hr(this,t,o,{_chunkSteps:f=>a({value:f,done:!1}),_closeSteps:f=>a({value:f,done:!0}),_errorSteps:f=>i(f)}),u}releaseLock(){if(!ce(this))throw Ke("releaseLock");this._ownerReadableStream!==void 0&&io(this)}}Object.defineProperties(ee.prototype,{cancel:{enumerable:!0},read:{enumerable:!0},releaseLock:{enumerable:!0},closed:{enumerable:!0}}),c(ee.prototype.cancel,"cancel"),c(ee.prototype.read,"read"),c(ee.prototype.releaseLock,"releaseLock"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(ee.prototype,Symbol.toStringTag,{value:"ReadableStreamBYOBReader",configurable:!0});function ce(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_readIntoRequests")?!1:e instanceof ee}function Hr(e,t,r,n){let o=e._ownerReadableStream;o._disturbed=!0,o._state==="errored"?n._errorSteps(o._storedError):Xn(o._readableStreamController,t,r,n)}function io(e){$(e);let t=new TypeError("Reader was released");Vr(e,t)}function Vr(e,t){let r=e._readIntoRequests;e._readIntoRequests=new W,r.forEach(n=>{n._errorSteps(t)})}function Ke(e){return new TypeError(`ReadableStreamBYOBReader.prototype.${e} can only be used on a ReadableStreamBYOBReader`)}function Fe(e,t){let{highWaterMark:r}=e;if(r===void 0)return t;if(vr(r)||r<0)throw new RangeError("Invalid highWaterMark");return r}function xe(e){let{size:t}=e;return t||(()=>1)}function et(e,t){F(e,t);let r=e?.highWaterMark,n=e?.size;return{highWaterMark:r===void 0?void 0:qt(r),size:n===void 0?void 0:so(n,`${t} has member 'size' that`)}}function so(e,t){return A(e,t),r=>qt(e(r))}function lo(e,t){F(e,t);let r=e?.abort,n=e?.close,o=e?.start,a=e?.type,i=e?.write;return{abort:r===void 0?void 0:uo(r,e,`${t} has member 'abort' that`),close:n===void 0?void 0:fo(n,e,`${t} has member 'close' that`),start:o===void 0?void 0:co(o,e,`${t} has member 'start' that`),write:i===void 0?void 0:ho(i,e,`${t} has member 'write' that`),type:a}}function uo(e,t,r){return A(e,r),n=>Z(e,t,[n])}function fo(e,t,r){return A(e,r),()=>Z(e,t,[])}function co(e,t,r){return A(e,r),n=>le(e,t,[n])}function ho(e,t,r){return A(e,r),(n,o)=>Z(e,t,[n,o])}function Gr(e,t){if(!Re(e))throw new TypeError(`${t} is not a WritableStream.`)}function bo(e){if(typeof e!="object"||e===null)return!1;try{return typeof e.aborted=="boolean"}catch{return!1}}let mo=typeof AbortController=="function";function _o(){if(mo)return new AbortController}class te{constructor(t={},r={}){t===void 0?t=null:pr(t,"First parameter");let n=et(r,"Second parameter"),o=lo(t,"First parameter");if(Xr(this),o.type!==void 0)throw new RangeError("Invalid type is specified");let i=xe(n),u=Fe(n,1);Ao(this,o,u,i)}get locked(){if(!Re(this))throw at("locked");return we(this)}abort(t=void 0){return Re(this)?we(this)?d(new TypeError("Cannot abort a stream that already has a writer")):tt(this,t):d(at("abort"))}close(){return Re(this)?we(this)?d(new TypeError("Cannot close a stream that already has a writer")):D(this)?d(new TypeError("Cannot close an already-closing stream")):Jr(this):d(at("close"))}getWriter(){if(!Re(this))throw at("getWriter");return Zr(this)}}Object.defineProperties(te.prototype,{abort:{enumerable:!0},close:{enumerable:!0},getWriter:{enumerable:!0},locked:{enumerable:!0}}),c(te.prototype.abort,"abort"),c(te.prototype.close,"close"),c(te.prototype.getWriter,"getWriter"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(te.prototype,Symbol.toStringTag,{value:"WritableStream",configurable:!0});function Zr(e){return new Y(e)}function po(e,t,r,n,o=1,a=()=>1){let i=Object.create(te.prototype);Xr(i);let u=Object.create(Ce.prototype);return nn(i,u,e,t,r,n,o,a),i}function Xr(e){e._state="writable",e._storedError=void 0,e._writer=void 0,e._writableStreamController=void 0,e._writeRequests=new W,e._inFlightWriteRequest=void 0,e._closeRequest=void 0,e._inFlightCloseRequest=void 0,e._pendingAbortRequest=void 0,e._backpressure=!1}function Re(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_writableStreamController")?!1:e instanceof te}function we(e){return e._writer!==void 0}function tt(e,t){var r;if(e._state==="closed"||e._state==="errored")return p(void 0);e._writableStreamController._abortReason=t,(r=e._writableStreamController._abortController)===null||r===void 0||r.abort(t);let n=e._state;if(n==="closed"||n==="errored")return p(void 0);if(e._pendingAbortRequest!==void 0)return e._pendingAbortRequest._promise;let o=!1;n==="erroring"&&(o=!0,t=void 0);let a=R((i,u)=>{e._pendingAbortRequest={_promise:void 0,_resolve:i,_reject:u,_reason:t,_wasAlreadyErroring:o}});return e._pendingAbortRequest._promise=a,o||Ht(e,t),a}function Jr(e){let t=e._state;if(t==="closed"||t==="errored")return d(new TypeError(`The stream (in ${t} state) is not in the writable state and cannot be closed`));let r=R((o,a)=>{let i={_resolve:o,_reject:a};e._closeRequest=i}),n=e._writer;return n!==void 0&&e._backpressure&&t==="writable"&&er(n),ko(e._writableStreamController),r}function yo(e){return R((r,n)=>{let o={_resolve:r,_reject:n};e._writeRequests.push(o)})}function Yt(e,t){if(e._state==="writable"){Ht(e,t);return}Vt(e)}function Ht(e,t){let r=e._writableStreamController;e._state="erroring",e._storedError=t;let n=e._writer;n!==void 0&&xr(n,t),!Co(e)&&r._started&&Vt(e)}function Vt(e){e._state="errored",e._writableStreamController[cr]();let t=e._storedError;if(e._writeRequests.forEach(o=>{o._reject(t)}),e._writeRequests=new W,e._pendingAbortRequest===void 0){rt(e);return}let r=e._pendingAbortRequest;if(e._pendingAbortRequest=void 0,r._wasAlreadyErroring){r._reject(t),rt(e);return}let n=e._writableStreamController[fr](r._reason);T(n,()=>(r._resolve(),rt(e),null),o=>(r._reject(o),rt(e),null))}function So(e){e._inFlightWriteRequest._resolve(void 0),e._inFlightWriteRequest=void 0}function go(e,t){e._inFlightWriteRequest._reject(t),e._inFlightWriteRequest=void 0,Yt(e,t)}function Ro(e){e._inFlightCloseRequest._resolve(void 0),e._inFlightCloseRequest=void 0,e._state==="erroring"&&(e._storedError=void 0,e._pendingAbortRequest!==void 0&&(e._pendingAbortRequest._resolve(),e._pendingAbortRequest=void 0)),e._state="closed";let r=e._writer;r!==void 0&&ln(r)}function wo(e,t){e._inFlightCloseRequest._reject(t),e._inFlightCloseRequest=void 0,e._pendingAbortRequest!==void 0&&(e._pendingAbortRequest._reject(t),e._pendingAbortRequest=void 0),Yt(e,t)}function D(e){return!(e._closeRequest===void 0&&e._inFlightCloseRequest===void 0)}function Co(e){return!(e._inFlightWriteRequest===void 0&&e._inFlightCloseRequest===void 0)}function To(e){e._inFlightCloseRequest=e._closeRequest,e._closeRequest=void 0}function Po(e){e._inFlightWriteRequest=e._writeRequests.shift()}function rt(e){e._closeRequest!==void 0&&(e._closeRequest._reject(e._storedError),e._closeRequest=void 0);let t=e._writer;t!==void 0&&Kt(t,e._storedError)}function Gt(e,t){let r=e._writer;r!==void 0&&t!==e._backpressure&&(t?Do(r):er(r)),e._backpressure=t}class Y{constructor(t){if(U(t,1,"WritableStreamDefaultWriter"),Gr(t,"First parameter"),we(t))throw new TypeError("This stream has already been locked for exclusive writing by another writer");this._ownerWritableStream=t,t._writer=this;let r=t._state;if(r==="writable")!D(t)&&t._backpressure?st(this):un(this),it(this);else if(r==="erroring")xt(this,t._storedError),it(this);else if(r==="closed")un(this),zo(this);else{let n=t._storedError;xt(this,n),sn(this,n)}}get closed(){return he(this)?this._closedPromise:d(be("closed"))}get desiredSize(){if(!he(this))throw be("desiredSize");if(this._ownerWritableStream===void 0)throw Le("desiredSize");return Wo(this)}get ready(){return he(this)?this._readyPromise:d(be("ready"))}abort(t=void 0){return he(this)?this._ownerWritableStream===void 0?d(Le("abort")):vo(this,t):d(be("abort"))}close(){if(!he(this))return d(be("close"));let t=this._ownerWritableStream;return t===void 0?d(Le("close")):D(t)?d(new TypeError("Cannot close an already-closing stream")):Kr(this)}releaseLock(){if(!he(this))throw be("releaseLock");this._ownerWritableStream!==void 0&&en(this)}write(t=void 0){return he(this)?this._ownerWritableStream===void 0?d(Le("write to")):tn(this,t):d(be("write"))}}Object.defineProperties(Y.prototype,{abort:{enumerable:!0},close:{enumerable:!0},releaseLock:{enumerable:!0},write:{enumerable:!0},closed:{enumerable:!0},desiredSize:{enumerable:!0},ready:{enumerable:!0}}),c(Y.prototype.abort,"abort"),c(Y.prototype.close,"close"),c(Y.prototype.releaseLock,"releaseLock"),c(Y.prototype.write,"write"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Y.prototype,Symbol.toStringTag,{value:"WritableStreamDefaultWriter",configurable:!0});function he(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_ownerWritableStream")?!1:e instanceof Y}function vo(e,t){let r=e._ownerWritableStream;return tt(r,t)}function Kr(e){let t=e._ownerWritableStream;return Jr(t)}function Eo(e){let t=e._ownerWritableStream,r=t._state;return D(t)||r==="closed"?p(void 0):r==="errored"?d(t._storedError):Kr(e)}function qo(e,t){e._closedPromiseState==="pending"?Kt(e,t):Fo(e,t)}function xr(e,t){e._readyPromiseState==="pending"?dn(e,t):Lo(e,t)}function Wo(e){let t=e._ownerWritableStream,r=t._state;return r==="errored"||r==="erroring"?null:r==="closed"?0:on(t._writableStreamController)}function en(e){let t=e._ownerWritableStream,r=new TypeError("Writer was released and can no longer be used to monitor the stream's closedness");xr(e,r),qo(e,r),t._writer=void 0,e._ownerWritableStream=void 0}function tn(e,t){let r=e._ownerWritableStream,n=r._writableStreamController,o=Bo(n,t);if(r!==e._ownerWritableStream)return d(Le("write to"));let a=r._state;if(a==="errored")return d(r._storedError);if(D(r)||a==="closed")return d(new TypeError("The stream is closing or closed and cannot be written to"));if(a==="erroring")return d(r._storedError);let i=yo(r);return Io(n,t,o),i}let rn={};class Ce{constructor(){throw new TypeError("Illegal constructor")}get abortReason(){if(!Zt(this))throw Jt("abortReason");return this._abortReason}get signal(){if(!Zt(this))throw Jt("signal");if(this._abortController===void 0)throw new TypeError("WritableStreamDefaultController.prototype.signal is not supported");return this._abortController.signal}error(t=void 0){if(!Zt(this))throw Jt("error");this._controlledWritableStream._state==="writable"&&an(this,t)}[fr](t){let r=this._abortAlgorithm(t);return nt(this),r}[cr](){x(this)}}Object.defineProperties(Ce.prototype,{abortReason:{enumerable:!0},signal:{enumerable:!0},error:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Ce.prototype,Symbol.toStringTag,{value:"WritableStreamDefaultController",configurable:!0});function Zt(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_controlledWritableStream")?!1:e instanceof Ce}function nn(e,t,r,n,o,a,i,u){t._controlledWritableStream=e,e._writableStreamController=t,t._queue=void 0,t._queueTotalSize=void 0,x(t),t._abortReason=void 0,t._abortController=_o(),t._started=!1,t._strategySizeAlgorithm=u,t._strategyHWM=i,t._writeAlgorithm=n,t._closeAlgorithm=o,t._abortAlgorithm=a;let m=Xt(t);Gt(e,m);let f=r(),_=p(f);T(_,()=>(t._started=!0,ot(t),null),y=>(t._started=!0,Yt(e,y),null))}function Ao(e,t,r,n){let o=Object.create(Ce.prototype),a,i,u,m;t.start!==void 0?a=()=>t.start(o):a=()=>{},t.write!==void 0?i=f=>t.write(f,o):i=()=>p(void 0),t.close!==void 0?u=()=>t.close():u=()=>p(void 0),t.abort!==void 0?m=f=>t.abort(f):m=()=>p(void 0),nn(e,o,a,i,u,m,r,n)}function nt(e){e._writeAlgorithm=void 0,e._closeAlgorithm=void 0,e._abortAlgorithm=void 0,e._strategySizeAlgorithm=void 0}function ko(e){Ft(e,rn,0),ot(e)}function Bo(e,t){try{return e._strategySizeAlgorithm(t)}catch(r){return De(e,r),1}}function on(e){return e._strategyHWM-e._queueTotalSize}function Io(e,t,r){try{Ft(e,t,r)}catch(o){De(e,o);return}let n=e._controlledWritableStream;if(!D(n)&&n._state==="writable"){let o=Xt(e);Gt(n,o)}ot(e)}function ot(e){let t=e._controlledWritableStream;if(!e._started||t._inFlightWriteRequest!==void 0)return;if(t._state==="erroring"){Vt(t);return}if(e._queue.length===0)return;let n=Hn(e);n===rn?Oo(e):jo(e,n)}function De(e,t){e._controlledWritableStream._state==="writable"&&an(e,t)}function Oo(e){let t=e._controlledWritableStream;To(t),zt(e);let r=e._closeAlgorithm();nt(e),T(r,()=>(Ro(t),null),n=>(wo(t,n),null))}function jo(e,t){let r=e._controlledWritableStream;Po(r);let n=e._writeAlgorithm(t);T(n,()=>{So(r);let o=r._state;if(zt(e),!D(r)&&o==="writable"){let a=Xt(e);Gt(r,a)}return ot(e),null},o=>(r._state==="writable"&&nt(e),go(r,o),null))}function Xt(e){return on(e)<=0}function an(e,t){let r=e._controlledWritableStream;nt(e),Ht(r,t)}function at(e){return new TypeError(`WritableStream.prototype.${e} can only be used on a WritableStream`)}function Jt(e){return new TypeError(`WritableStreamDefaultController.prototype.${e} can only be used on a WritableStreamDefaultController`)}function be(e){return new TypeError(`WritableStreamDefaultWriter.prototype.${e} can only be used on a WritableStreamDefaultWriter`)}function Le(e){return new TypeError("Cannot "+e+" a stream using a released writer")}function it(e){e._closedPromise=R((t,r)=>{e._closedPromise_resolve=t,e._closedPromise_reject=r,e._closedPromiseState="pending"})}function sn(e,t){it(e),Kt(e,t)}function zo(e){it(e),ln(e)}function Kt(e,t){e._closedPromise_reject!==void 0&&(ye(e._closedPromise),e._closedPromise_reject(t),e._closedPromise_resolve=void 0,e._closedPromise_reject=void 0,e._closedPromiseState="rejected")}function Fo(e,t){sn(e,t)}function ln(e){e._closedPromise_resolve!==void 0&&(e._closedPromise_resolve(void 0),e._closedPromise_resolve=void 0,e._closedPromise_reject=void 0,e._closedPromiseState="resolved")}function st(e){e._readyPromise=R((t,r)=>{e._readyPromise_resolve=t,e._readyPromise_reject=r}),e._readyPromiseState="pending"}function xt(e,t){st(e),dn(e,t)}function un(e){st(e),er(e)}function dn(e,t){e._readyPromise_reject!==void 0&&(ye(e._readyPromise),e._readyPromise_reject(t),e._readyPromise_resolve=void 0,e._readyPromise_reject=void 0,e._readyPromiseState="rejected")}function Do(e){st(e)}function Lo(e,t){xt(e,t)}function er(e){e._readyPromise_resolve!==void 0&&(e._readyPromise_resolve(void 0),e._readyPromise_resolve=void 0,e._readyPromise_reject=void 0,e._readyPromiseState="fulfilled")}function Mo(){if(typeof globalThis<"u")return globalThis;if(typeof self<"u")return self;if(typeof globalThis<"u")return globalThis}let tr=Mo();function $o(e){if(!(typeof e=="function"||typeof e=="object")||e.name!=="DOMException")return!1;try{return new e,!0}catch{return!1}}function Uo(){let e=tr?.DOMException;return $o(e)?e:void 0}function No(){let e=function(r,n){this.message=r||"",this.name=n||"Error",Error.captureStackTrace&&Error.captureStackTrace(this,this.constructor)};return c(e,"DOMException"),e.prototype=Object.create(Error.prototype),Object.defineProperty(e.prototype,"constructor",{value:e,writable:!0,configurable:!0}),e}let Qo=Uo()||No();function fn(e,t,r,n,o,a){let i=Se(e),u=Zr(t);e._disturbed=!0;let m=!1,f=p(void 0);return R((_,y)=>{let w;if(a!==void 0){if(w=()=>{let h=a.reason!==void 0?a.reason:new Qo("Aborted","AbortError"),S=[];n||S.push(()=>t._state==="writable"?tt(t,h):p(void 0)),o||S.push(()=>e._state==="readable"?j(e,h):p(void 0)),E(()=>Promise.all(S.map(C=>C())),!0,h)},a.aborted){w();return}a.addEventListener("abort",w)}function z(){return R((h,S)=>{function C(q){q?h():I(Ee(),C,S)}C(!1)})}function Ee(){return m?p(!0):I(u._readyPromise,()=>R((h,S)=>{Ie(i,{_chunkSteps:C=>{f=I(tn(u,C),void 0,s),h(!1)},_closeSteps:()=>h(!0),_errorSteps:S})}))}if(V(e,i._closedPromise,h=>(n?B(!0,h):E(()=>tt(t,h),!0,h),null)),V(t,u._closedPromise,h=>(o?B(!0,h):E(()=>j(e,h),!0,h),null)),v(e,i._closedPromise,()=>(r?B():E(()=>Eo(u)),null)),D(t)||t._state==="closed"){let h=new TypeError("the destination writable stream closed before all data could be piped to it");o?B(!0,h):E(()=>j(e,h),!0,h)}ye(z());function ae(){let h=f;return I(f,()=>h!==f?ae():void 0)}function V(h,S,C){h._state==="errored"?C(h._storedError):gt(S,C)}function v(h,S,C){h._state==="closed"?C():Be(S,C)}function E(h,S,C){if(m)return;m=!0,t._state==="writable"&&!D(t)?Be(ae(),q):q();function q(){return T(h(),()=>G(S,C),qe=>G(!0,qe)),null}}function B(h,S){m||(m=!0,t._state==="writable"&&!D(t)?Be(ae(),()=>G(h,S)):G(h,S))}function G(h,S){return en(u),$(i),a!==void 0&&a.removeEventListener("abort",w),h?y(S):_(void 0),null}})}class H{constructor(){throw new TypeError("Illegal constructor")}get desiredSize(){if(!lt(this))throw dt("desiredSize");return rr(this)}close(){if(!lt(this))throw dt("close");if(!Pe(this))throw new TypeError("The stream is not in a state that permits close");me(this)}enqueue(t=void 0){if(!lt(this))throw dt("enqueue");if(!Pe(this))throw new TypeError("The stream is not in a state that permits enqueue");return Te(this,t)}error(t=void 0){if(!lt(this))throw dt("error");O(this,t)}[Rt](t){x(this);let r=this._cancelAlgorithm(t);return ut(this),r}[wt](t){let r=this._controlledReadableStream;if(this._queue.length>0){let n=zt(this);this._closeRequested&&this._queue.length===0?(ut(this),Ue(r)):Me(this),t._chunkSteps(n)}else Sr(r,t),Me(this)}[Ct](){}}Object.defineProperties(H.prototype,{close:{enumerable:!0},enqueue:{enumerable:!0},error:{enumerable:!0},desiredSize:{enumerable:!0}}),c(H.prototype.close,"close"),c(H.prototype.enqueue,"enqueue"),c(H.prototype.error,"error"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(H.prototype,Symbol.toStringTag,{value:"ReadableStreamDefaultController",configurable:!0});function lt(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_controlledReadableStream")?!1:e instanceof H}function Me(e){if(!cn(e))return;if(e._pulling){e._pullAgain=!0;return}e._pulling=!0;let r=e._pullAlgorithm();T(r,()=>(e._pulling=!1,e._pullAgain&&(e._pullAgain=!1,Me(e)),null),n=>(O(e,n),null))}function cn(e){let t=e._controlledReadableStream;return!Pe(e)||!e._started?!1:!!(ne(t)&&Qe(t)>0||rr(e)>0)}function ut(e){e._pullAlgorithm=void 0,e._cancelAlgorithm=void 0,e._strategySizeAlgorithm=void 0}function me(e){if(!Pe(e))return;let t=e._controlledReadableStream;e._closeRequested=!0,e._queue.length===0&&(ut(e),Ue(t))}function Te(e,t){if(!Pe(e))return;let r=e._controlledReadableStream;if(ne(r)&&Qe(r)>0)kt(r,t,!1);else{let n;try{n=e._strategySizeAlgorithm(t)}catch(o){throw O(e,o),o}try{Ft(e,t,n)}catch(o){throw O(e,o),o}}Me(e)}function O(e,t){let r=e._controlledReadableStream;r._state==="readable"&&(x(e),ut(e),_n(r,t))}function rr(e){let t=e._controlledReadableStream._state;return t==="errored"?null:t==="closed"?0:e._strategyHWM-e._queueTotalSize}function Yo(e){return!cn(e)}function Pe(e){let t=e._controlledReadableStream._state;return!e._closeRequested&&t==="readable"}function hn(e,t,r,n,o,a,i){t._controlledReadableStream=e,t._queue=void 0,t._queueTotalSize=void 0,x(t),t._started=!1,t._closeRequested=!1,t._pullAgain=!1,t._pulling=!1,t._strategySizeAlgorithm=i,t._strategyHWM=a,t._pullAlgorithm=n,t._cancelAlgorithm=o,e._readableStreamController=t;let u=r();T(p(u),()=>(t._started=!0,Me(t),null),m=>(O(t,m),null))}function Ho(e,t,r,n){let o=Object.create(H.prototype),a,i,u;t.start!==void 0?a=()=>t.start(o):a=()=>{},t.pull!==void 0?i=()=>t.pull(o):i=()=>p(void 0),t.cancel!==void 0?u=m=>t.cancel(m):u=()=>p(void 0),hn(e,o,a,i,u,r,n)}function dt(e){return new TypeError(`ReadableStreamDefaultController.prototype.${e} can only be used on a ReadableStreamDefaultController`)}function Vo(e,t){return de(e._readableStreamController)?Zo(e):Go(e)}function Go(e,t){let r=Se(e),n=!1,o=!1,a=!1,i=!1,u,m,f,_,y,w=R(v=>{y=v});function z(){return n?(o=!0,p(void 0)):(n=!0,Ie(r,{_chunkSteps:E=>{se(()=>{o=!1;let B=E,G=E;a||Te(f._readableStreamController,B),i||Te(_._readableStreamController,G),n=!1,o&&z()})},_closeSteps:()=>{n=!1,a||me(f._readableStreamController),i||me(_._readableStreamController),(!a||!i)&&y(void 0)},_errorSteps:()=>{n=!1}}),p(void 0))}function Ee(v){if(a=!0,u=v,i){let E=Oe([u,m]),B=j(e,E);y(B)}return w}function ae(v){if(i=!0,m=v,a){let E=Oe([u,m]),B=j(e,E);y(B)}return w}function V(){}return f=$e(V,z,Ee),_=$e(V,z,ae),gt(r._closedPromise,v=>(O(f._readableStreamController,v),O(_._readableStreamController,v),(!a||!i)&&y(void 0),null)),[f,_]}function Zo(e){let t=Se(e),r=!1,n=!1,o=!1,a=!1,i=!1,u,m,f,_,y,w=R(h=>{y=h});function z(h){gt(h._closedPromise,S=>(h!==t||(k(f._readableStreamController,S),k(_._readableStreamController,S),(!a||!i)&&y(void 0)),null))}function Ee(){ce(t)&&($(t),t=Se(e),z(t)),Ie(t,{_chunkSteps:S=>{se(()=>{n=!1,o=!1;let C=S,q=S;if(!a&&!i)try{q=Ar(S)}catch(qe){k(f._readableStreamController,qe),k(_._readableStreamController,qe),y(j(e,qe));return}a||Ze(f._readableStreamController,C),i||Ze(_._readableStreamController,q),r=!1,n?V():o&&v()})},_closeSteps:()=>{r=!1,a||je(f._readableStreamController),i||je(_._readableStreamController),f._readableStreamController._pendingPullIntos.length>0&&Xe(f._readableStreamController,0),_._readableStreamController._pendingPullIntos.length>0&&Xe(_._readableStreamController,0),(!a||!i)&&y(void 0)},_errorSteps:()=>{r=!1}})}function ae(h,S){J(t)&&($(t),t=Nr(e),z(t));let C=S?_:f,q=S?f:_;Hr(t,h,1,{_chunkSteps:We=>{se(()=>{n=!1,o=!1;let Ae=S?i:a;if(S?a:i)Ae||Je(C._readableStreamController,We);else{let Wn;try{Wn=Ar(We)}catch(sr){k(C._readableStreamController,sr),k(q._readableStreamController,sr),y(j(e,sr));return}Ae||Je(C._readableStreamController,We),Ze(q._readableStreamController,Wn)}r=!1,n?V():o&&v()})},_closeSteps:We=>{r=!1;let Ae=S?i:a,yt=S?a:i;Ae||je(C._readableStreamController),yt||je(q._readableStreamController),We!==void 0&&(Ae||Je(C._readableStreamController,We),!yt&&q._readableStreamController._pendingPullIntos.length>0&&Xe(q._readableStreamController,0)),(!Ae||!yt)&&y(void 0)},_errorSteps:()=>{r=!1}})}function V(){if(r)return n=!0,p(void 0);r=!0;let h=Ut(f._readableStreamController);return h===null?Ee():ae(h._view,!1),p(void 0)}function v(){if(r)return o=!0,p(void 0);r=!0;let h=Ut(_._readableStreamController);return h===null?Ee():ae(h._view,!0),p(void 0)}function E(h){if(a=!0,u=h,i){let S=Oe([u,m]),C=j(e,S);y(C)}return w}function B(h){if(i=!0,m=h,a){let S=Oe([u,m]),C=j(e,S);y(C)}return w}function G(){}return f=mn(G,V,E),_=mn(G,v,B),z(t),[f,_]}function Xo(e){return l(e)&&typeof e.getReader<"u"}function Jo(e){return Xo(e)?xo(e.getReader()):Ko(e)}function Ko(e){let t,r=Wr(e,"async"),n=s;function o(){let i;try{i=Un(r)}catch(m){return d(m)}let u=p(i);return M(u,m=>{if(!l(m))throw new TypeError("The promise returned by the iterator.next() method must fulfill with an object");if(Nn(m))me(t._readableStreamController);else{let _=Qn(m);Te(t._readableStreamController,_)}})}function a(i){let u=r.iterator,m;try{m=He(u,"return")}catch(y){return d(y)}if(m===void 0)return p(void 0);let f;try{f=le(m,u,[i])}catch(y){return d(y)}let _=p(f);return M(_,y=>{if(!l(y))throw new TypeError("The promise returned by the iterator.return() method must fulfill with an object")})}return t=$e(n,o,a,0),t}function xo(e){let t,r=s;function n(){let a;try{a=e.read()}catch(i){return d(i)}return M(a,i=>{if(!l(i))throw new TypeError("The promise returned by the reader.read() method must fulfill with an object");if(i.done)me(t._readableStreamController);else{let u=i.value;Te(t._readableStreamController,u)}})}function o(a){try{return p(e.cancel(a))}catch(i){return d(i)}}return t=$e(r,n,o,0),t}function ea(e,t){F(e,t);let r=e,n=r?.autoAllocateChunkSize,o=r?.cancel,a=r?.pull,i=r?.start,u=r?.type;return{autoAllocateChunkSize:n===void 0?void 0:Wt(n,`${t} has member 'autoAllocateChunkSize' that`),cancel:o===void 0?void 0:ta(o,r,`${t} has member 'cancel' that`),pull:a===void 0?void 0:ra(a,r,`${t} has member 'pull' that`),start:i===void 0?void 0:na(i,r,`${t} has member 'start' that`),type:u===void 0?void 0:oa(u,`${t} has member 'type' that`)}}function ta(e,t,r){return A(e,r),n=>Z(e,t,[n])}function ra(e,t,r){return A(e,r),n=>Z(e,t,[n])}function na(e,t,r){return A(e,r),n=>le(e,t,[n])}function oa(e,t){if(e=`${e}`,e!=="bytes")throw new TypeError(`${t} '${e}' is not a valid enumeration value for ReadableStreamType`);return e}function aa(e,t){return F(e,t),{preventCancel:!!e?.preventCancel}}function bn(e,t){F(e,t);let r=e?.preventAbort,n=e?.preventCancel,o=e?.preventClose,a=e?.signal;return a!==void 0&&ia(a,`${t} has member 'signal' that`),{preventAbort:!!r,preventCancel:!!n,preventClose:!!o,signal:a}}function ia(e,t){if(!bo(e))throw new TypeError(`${t} is not an AbortSignal.`)}function sa(e,t){F(e,t);let r=e?.readable;Et(r,"readable","ReadableWritablePair"),At(r,`${t} has member 'readable' that`);let n=e?.writable;return Et(n,"writable","ReadableWritablePair"),Gr(n,`${t} has member 'writable' that`),{readable:r,writable:n}}class P{constructor(t={},r={}){t===void 0?t=null:pr(t,"First parameter");let n=et(r,"Second parameter"),o=ea(t,"First parameter");if(nr(this),o.type==="bytes"){if(n.size!==void 0)throw new RangeError("The strategy for a byte stream cannot have a size function");let a=Fe(n,0);eo(this,o,a)}else{let a=xe(n),i=Fe(n,1);Ho(this,o,i,a)}}get locked(){if(!re(this))throw _e("locked");return ne(this)}cancel(t=void 0){return re(this)?ne(this)?d(new TypeError("Cannot cancel a stream that already has a reader")):j(this,t):d(_e("cancel"))}getReader(t=void 0){if(!re(this))throw _e("getReader");return ro(t,"First parameter").mode===void 0?Se(this):Nr(this)}pipeThrough(t,r={}){if(!re(this))throw _e("pipeThrough");U(t,1,"pipeThrough");let n=sa(t,"First parameter"),o=bn(r,"Second parameter");if(ne(this))throw new TypeError("ReadableStream.prototype.pipeThrough cannot be used on a locked ReadableStream");if(we(n.writable))throw new TypeError("ReadableStream.prototype.pipeThrough cannot be used on a locked WritableStream");let a=fn(this,n.writable,o.preventClose,o.preventAbort,o.preventCancel,o.signal);return ye(a),n.readable}pipeTo(t,r={}){if(!re(this))return d(_e("pipeTo"));if(t===void 0)return d("Parameter 1 is required in 'pipeTo'.");if(!Re(t))return d(new TypeError("ReadableStream.prototype.pipeTo's first argument must be a WritableStream"));let n;try{n=bn(r,"Second parameter")}catch(o){return d(o)}return ne(this)?d(new TypeError("ReadableStream.prototype.pipeTo cannot be used on a locked ReadableStream")):we(t)?d(new TypeError("ReadableStream.prototype.pipeTo cannot be used on a locked WritableStream")):fn(this,t,n.preventClose,n.preventAbort,n.preventCancel,n.signal)}tee(){if(!re(this))throw _e("tee");let t=Vo(this);return Oe(t)}values(t=void 0){if(!re(this))throw _e("values");let r=aa(t,"First parameter");return Mn(this,r.preventCancel)}[jt](t){return this.values(t)}static from(t){return Jo(t)}}Object.defineProperties(P,{from:{enumerable:!0}}),Object.defineProperties(P.prototype,{cancel:{enumerable:!0},getReader:{enumerable:!0},pipeThrough:{enumerable:!0},pipeTo:{enumerable:!0},tee:{enumerable:!0},values:{enumerable:!0},locked:{enumerable:!0}}),c(P.from,"from"),c(P.prototype.cancel,"cancel"),c(P.prototype.getReader,"getReader"),c(P.prototype.pipeThrough,"pipeThrough"),c(P.prototype.pipeTo,"pipeTo"),c(P.prototype.tee,"tee"),c(P.prototype.values,"values"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(P.prototype,Symbol.toStringTag,{value:"ReadableStream",configurable:!0}),Object.defineProperty(P.prototype,jt,{value:P.prototype.values,writable:!0,configurable:!0});function $e(e,t,r,n=1,o=()=>1){let a=Object.create(P.prototype);nr(a);let i=Object.create(H.prototype);return hn(a,i,e,t,r,n,o),a}function mn(e,t,r){let n=Object.create(P.prototype);nr(n);let o=Object.create(Q.prototype);return Ur(n,o,e,t,r,0,void 0),n}function nr(e){e._state="readable",e._reader=void 0,e._storedError=void 0,e._disturbed=!1}function re(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_readableStreamController")?!1:e instanceof P}function ne(e){return e._reader!==void 0}function j(e,t){if(e._disturbed=!0,e._state==="closed")return p(void 0);if(e._state==="errored")return d(e._storedError);Ue(e);let r=e._reader;if(r!==void 0&&ce(r)){let o=r._readIntoRequests;r._readIntoRequests=new W,o.forEach(a=>{a._closeSteps(void 0)})}let n=e._readableStreamController[Rt](t);return M(n,s)}function Ue(e){e._state="closed";let t=e._reader;if(t!==void 0&&(mr(t),J(t))){let r=t._readRequests;t._readRequests=new W,r.forEach(n=>{n._closeSteps()})}}function _n(e,t){e._state="errored",e._storedError=t;let r=e._reader;r!==void 0&&(vt(r,t),J(r)?Rr(r,t):Vr(r,t))}function _e(e){return new TypeError(`ReadableStream.prototype.${e} can only be used on a ReadableStream`)}function pn(e,t){F(e,t);let r=e?.highWaterMark;return Et(r,"highWaterMark","QueuingStrategyInit"),{highWaterMark:qt(r)}}let yn=e=>e.byteLength;c(yn,"size");class ft{constructor(t){U(t,1,"ByteLengthQueuingStrategy"),t=pn(t,"First parameter"),this._byteLengthQueuingStrategyHighWaterMark=t.highWaterMark}get highWaterMark(){if(!gn(this))throw Sn("highWaterMark");return this._byteLengthQueuingStrategyHighWaterMark}get size(){if(!gn(this))throw Sn("size");return yn}}Object.defineProperties(ft.prototype,{highWaterMark:{enumerable:!0},size:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(ft.prototype,Symbol.toStringTag,{value:"ByteLengthQueuingStrategy",configurable:!0});function Sn(e){return new TypeError(`ByteLengthQueuingStrategy.prototype.${e} can only be used on a ByteLengthQueuingStrategy`)}function gn(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_byteLengthQueuingStrategyHighWaterMark")?!1:e instanceof ft}let Rn=()=>1;c(Rn,"size");class ct{constructor(t){U(t,1,"CountQueuingStrategy"),t=pn(t,"First parameter"),this._countQueuingStrategyHighWaterMark=t.highWaterMark}get highWaterMark(){if(!Cn(this))throw wn("highWaterMark");return this._countQueuingStrategyHighWaterMark}get size(){if(!Cn(this))throw wn("size");return Rn}}Object.defineProperties(ct.prototype,{highWaterMark:{enumerable:!0},size:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(ct.prototype,Symbol.toStringTag,{value:"CountQueuingStrategy",configurable:!0});function wn(e){return new TypeError(`CountQueuingStrategy.prototype.${e} can only be used on a CountQueuingStrategy`)}function Cn(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_countQueuingStrategyHighWaterMark")?!1:e instanceof ct}function la(e,t){F(e,t);let r=e?.cancel,n=e?.flush,o=e?.readableType,a=e?.start,i=e?.transform,u=e?.writableType;return{cancel:r===void 0?void 0:ca(r,e,`${t} has member 'cancel' that`),flush:n===void 0?void 0:ua(n,e,`${t} has member 'flush' that`),readableType:o,start:a===void 0?void 0:da(a,e,`${t} has member 'start' that`),transform:i===void 0?void 0:fa(i,e,`${t} has member 'transform' that`),writableType:u}}function ua(e,t,r){return A(e,r),n=>Z(e,t,[n])}function da(e,t,r){return A(e,r),n=>le(e,t,[n])}function fa(e,t,r){return A(e,r),(n,o)=>Z(e,t,[n,o])}function ca(e,t,r){return A(e,r),n=>Z(e,t,[n])}class ht{constructor(t={},r={},n={}){t===void 0&&(t=null);let o=et(r,"Second parameter"),a=et(n,"Third parameter"),i=la(t,"First parameter");if(i.readableType!==void 0)throw new RangeError("Invalid readableType specified");if(i.writableType!==void 0)throw new RangeError("Invalid writableType specified");let u=Fe(a,0),m=xe(a),f=Fe(o,1),_=xe(o),y,w=R(z=>{y=z});ha(this,w,f,_,u,m),ma(this,i),i.start!==void 0?y(i.start(this._transformStreamController)):y(void 0)}get readable(){if(!Tn(this))throw qn("readable");return this._readable}get writable(){if(!Tn(this))throw qn("writable");return this._writable}}Object.defineProperties(ht.prototype,{readable:{enumerable:!0},writable:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(ht.prototype,Symbol.toStringTag,{value:"TransformStream",configurable:!0});function ha(e,t,r,n,o,a){function i(){return t}function u(w){return ya(e,w)}function m(w){return Sa(e,w)}function f(){return ga(e)}e._writable=po(i,u,f,m,r,n);function _(){return Ra(e)}function y(w){return wa(e,w)}e._readable=$e(i,_,y,o,a),e._backpressure=void 0,e._backpressureChangePromise=void 0,e._backpressureChangePromise_resolve=void 0,bt(e,!0),e._transformStreamController=void 0}function Tn(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_transformStreamController")?!1:e instanceof ht}function Pn(e,t){O(e._readable._readableStreamController,t),or(e,t)}function or(e,t){_t(e._transformStreamController),De(e._writable._writableStreamController,t),ar(e)}function ar(e){e._backpressure&&bt(e,!1)}function bt(e,t){e._backpressureChangePromise!==void 0&&e._backpressureChangePromise_resolve(),e._backpressureChangePromise=R(r=>{e._backpressureChangePromise_resolve=r}),e._backpressure=t}class oe{constructor(){throw new TypeError("Illegal constructor")}get desiredSize(){if(!mt(this))throw pt("desiredSize");let t=this._controlledTransformStream._readable._readableStreamController;return rr(t)}enqueue(t=void 0){if(!mt(this))throw pt("enqueue");vn(this,t)}error(t=void 0){if(!mt(this))throw pt("error");_a(this,t)}terminate(){if(!mt(this))throw pt("terminate");pa(this)}}Object.defineProperties(oe.prototype,{enqueue:{enumerable:!0},error:{enumerable:!0},terminate:{enumerable:!0},desiredSize:{enumerable:!0}}),c(oe.prototype.enqueue,"enqueue"),c(oe.prototype.error,"error"),c(oe.prototype.terminate,"terminate"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(oe.prototype,Symbol.toStringTag,{value:"TransformStreamDefaultController",configurable:!0});function mt(e){return!l(e)||!Object.prototype.hasOwnProperty.call(e,"_controlledTransformStream")?!1:e instanceof oe}function ba(e,t,r,n,o){t._controlledTransformStream=e,e._transformStreamController=t,t._transformAlgorithm=r,t._flushAlgorithm=n,t._cancelAlgorithm=o,t._finishPromise=void 0,t._finishPromise_resolve=void 0,t._finishPromise_reject=void 0}function ma(e,t){let r=Object.create(oe.prototype),n,o,a;t.transform!==void 0?n=i=>t.transform(i,r):n=i=>{try{return vn(r,i),p(void 0)}catch(u){return d(u)}},t.flush!==void 0?o=()=>t.flush(r):o=()=>p(void 0),t.cancel!==void 0?a=i=>t.cancel(i):a=()=>p(void 0),ba(e,r,n,o,a)}function _t(e){e._transformAlgorithm=void 0,e._flushAlgorithm=void 0,e._cancelAlgorithm=void 0}function vn(e,t){let r=e._controlledTransformStream,n=r._readable._readableStreamController;if(!Pe(n))throw new TypeError("Readable side is not in a state that permits enqueue");try{Te(n,t)}catch(a){throw or(r,a),r._readable._storedError}Yo(n)!==r._backpressure&&bt(r,!0)}function _a(e,t){Pn(e._controlledTransformStream,t)}function En(e,t){let r=e._transformAlgorithm(t);return M(r,void 0,n=>{throw Pn(e._controlledTransformStream,n),n})}function pa(e){let t=e._controlledTransformStream,r=t._readable._readableStreamController;me(r);let n=new TypeError("TransformStream terminated");or(t,n)}function ya(e,t){let r=e._transformStreamController;if(e._backpressure){let n=e._backpressureChangePromise;return M(n,()=>{let o=e._writable;if(o._state==="erroring")throw o._storedError;return En(r,t)})}return En(r,t)}function Sa(e,t){let r=e._transformStreamController;if(r._finishPromise!==void 0)return r._finishPromise;let n=e._readable;r._finishPromise=R((a,i)=>{r._finishPromise_resolve=a,r._finishPromise_reject=i});let o=r._cancelAlgorithm(t);return _t(r),T(o,()=>(n._state==="errored"?ve(r,n._storedError):(O(n._readableStreamController,t),ir(r)),null),a=>(O(n._readableStreamController,a),ve(r,a),null)),r._finishPromise}function ga(e){let t=e._transformStreamController;if(t._finishPromise!==void 0)return t._finishPromise;let r=e._readable;t._finishPromise=R((o,a)=>{t._finishPromise_resolve=o,t._finishPromise_reject=a});let n=t._flushAlgorithm();return _t(t),T(n,()=>(r._state==="errored"?ve(t,r._storedError):(me(r._readableStreamController),ir(t)),null),o=>(O(r._readableStreamController,o),ve(t,o),null)),t._finishPromise}function Ra(e){return bt(e,!1),e._backpressureChangePromise}function wa(e,t){let r=e._transformStreamController;if(r._finishPromise!==void 0)return r._finishPromise;let n=e._writable;r._finishPromise=R((a,i)=>{r._finishPromise_resolve=a,r._finishPromise_reject=i});let o=r._cancelAlgorithm(t);return _t(r),T(o,()=>(n._state==="errored"?ve(r,n._storedError):(De(n._writableStreamController,t),ar(e),ir(r)),null),a=>(De(n._writableStreamController,a),ar(e),ve(r,a),null)),r._finishPromise}function pt(e){return new TypeError(`TransformStreamDefaultController.prototype.${e} can only be used on a TransformStreamDefaultController`)}function ir(e){e._finishPromise_resolve!==void 0&&(e._finishPromise_resolve(),e._finishPromise_resolve=void 0,e._finishPromise_reject=void 0)}function ve(e,t){e._finishPromise_reject!==void 0&&(ye(e._finishPromise),e._finishPromise_reject(t),e._finishPromise_resolve=void 0,e._finishPromise_reject=void 0)}function qn(e){return new TypeError(`TransformStream.prototype.${e} can only be used on a TransformStream`)}b.ByteLengthQueuingStrategy=ft,b.CountQueuingStrategy=ct,b.ReadableByteStreamController=Q,b.ReadableStream=P,b.ReadableStreamBYOBReader=ee,b.ReadableStreamBYOBRequest=ue,b.ReadableStreamDefaultController=H,b.ReadableStreamDefaultReader=X,b.TransformStream=ht,b.TransformStreamDefaultController=oe,b.WritableStream=te,b.WritableStreamDefaultController=Ce,b.WritableStreamDefaultWriter=Y}))});var ke=ka(kn());typeof globalThis.ReadableStream>"u"&&(globalThis.ReadableStream=ke.ReadableStream);typeof globalThis.WritableStream>"u"&&(globalThis.WritableStream=ke.WritableStream);typeof globalThis.TransformStream>"u"&&(globalThis.TransformStream=ke.TransformStream);typeof globalThis.URLSearchParams>"u"&&(globalThis.URLSearchParams=class{constructor(s=void 0){L(this,"_entries",[]);if(typeof s=="string"){let l=s.startsWith("?")?s.slice(1):s;if(l.length>0)for(let g of l.split("&")){if(!g)continue;let[c,pe=""]=g.split("=");this.append(decodeURIComponent(c),decodeURIComponent(pe))}}else if(Array.isArray(s))for(let[l,g]of s)this.append(l,g);else if(s&&typeof s=="object")for(let[l,g]of Object.entries(s))this.append(l,g)}append(s,l){this._entries.push([String(s),String(l)])}delete(s){let l=String(s);this._entries=this._entries.filter(([g])=>g!==l)}get(s){let l=String(s),g=this._entries.find(([c])=>c===l);return g?g[1]:null}getAll(s){let l=String(s);return this._entries.filter(([g])=>g===l).map(([,g])=>g)}has(s){let l=String(s);return this._entries.some(([g])=>g===l)}set(s,l){this.delete(s),this.append(s,l)}entries(){return this._entries[Symbol.iterator]()}keys(){return this._entries.map(([s])=>s)[Symbol.iterator]()}values(){return this._entries.map(([,s])=>s)[Symbol.iterator]()}forEach(s,l=void 0){for(let[g,c]of this._entries)s.call(l,c,g,this)}toString(){return this._entries.map(([s,l])=>`${encodeURIComponent(s)}=${encodeURIComponent(l)}`).join("&")}[Symbol.iterator](){return this.entries()}},globalThis.URLSearchParams.__secureExecBootstrapStub=!0);typeof globalThis.URL>"u"&&(globalThis.URL=class{constructor(s,l=void 0){let g=String(s??""),c=/^[a-zA-Z][a-zA-Z\d+\-.]*:/.test(g),pe=c||typeof l>"u"?"":String(new globalThis.URL(l).href),ie=(c?g:pe.replace(/\/[^/]*$/,"/")+g).match(/^(\w+:)\/\/([^/:?#]+)(:\d+)?(.*)$/);if(!ie)throw new TypeError(`Invalid URL: ${g}`);this.protocol=ie[1],this.hostname=ie[2],this.port=(ie[3]||"").slice(1);let R=ie[4]||"/",p=R.indexOf("?"),d=R.indexOf("#"),I=[p,d].filter(T=>T>=0).sort((T,Be)=>T-Be)[0]??R.length;this.pathname=R.slice(0,I)||"/",this.search=p>=0?R.slice(p,d>=0&&d>p?d:R.length):"",this.hash=d>=0?R.slice(d):"",this.host=this.hostname+(this.port?`:${this.port}`:""),this.origin=`${this.protocol}//${this.host}`,this.href=`${this.origin}${this.pathname}${this.search}${this.hash}`,this.searchParams=new globalThis.URLSearchParams(this.search)}toString(){return this.href}toJSON(){return this.href}},globalThis.URL.__secureExecBootstrapStub=!0);typeof globalThis.Blob>"u"&&(globalThis.Blob=class{});typeof globalThis.AbortSignal>"u"&&(globalThis.AbortSignal=class{constructor(){L(this,"aborted",!1);L(this,"reason");L(this,"_listeners",new Set)}addEventListener(s,l){s!=="abort"||typeof l!="function"||this._listeners.add(l)}removeEventListener(s,l){s==="abort"&&this._listeners.delete(l)}dispatchEvent(s){for(let l of this._listeners)l.call(this,s);return!0}throwIfAborted(){if(this.aborted)throw this.reason instanceof Error?this.reason:new Error(String(this.reason??"AbortError"))}});typeof globalThis.AbortController>"u"&&(globalThis.AbortController=class{constructor(){this.signal=new globalThis.AbortSignal}abort(s=void 0){this.signal.aborted||(this.signal.aborted=!0,this.signal.reason=s,this.signal.dispatchEvent({type:"abort"}))}});typeof globalThis.File>"u"&&(globalThis.File=class extends Blob{constructor(l=[],g="",c={}){super(l,c);L(this,"name");L(this,"lastModified");L(this,"webkitRelativePath");this.name=String(g),this.lastModified=typeof c.lastModified=="number"?c.lastModified:Date.now(),this.webkitRelativePath=""}});typeof globalThis.FormData>"u"&&(globalThis.FormData=class{constructor(){L(this,"_entries",[])}append(s,l){this._entries.push([s,l])}get(s){let l=this._entries.find(([g])=>g===s);return l?l[1]:null}getAll(s){return this._entries.filter(([l])=>l===s).map(([,l])=>l)}has(s){return this._entries.some(([l])=>l===s)}delete(s){this._entries=this._entries.filter(([l])=>l!==s)}entries(){return this._entries[Symbol.iterator]()}[Symbol.iterator](){return this.entries()}});typeof globalThis.MessagePort>"u"&&(globalThis.MessagePort=class{constructor(){L(this,"onmessage",null)}postMessage(s){}start(){}close(){}addEventListener(){}removeEventListener(){}});typeof globalThis.MessageChannel>"u"&&(globalThis.MessageChannel=class{constructor(){this.port1=new globalThis.MessagePort,this.port2=new globalThis.MessagePort}});if(typeof globalThis.performance>"u"){let b=Date.now();globalThis.performance={now(){return typeof globalThis.__secureExecHrNowUs=="function"?globalThis.__secureExecHrNowUs()/1e3:Date.now()-b}}}typeof globalThis.performance.markResourceTiming!="function"&&(globalThis.performance.markResourceTiming=()=>{});})();
-/*! Bundled license information:
-
-web-streams-polyfill/dist/ponyfill.es2018.js:
-  (**
-   * @license
-   * web-streams-polyfill v3.3.3
-   * Copyright 2024 Mattias Buelens, Diwank Singh Tomer and other contributors.
-   * This code is released under the MIT license.
-   * SPDX-License-Identifier: MIT
-   *)
-*/
-
-if(typeof globalThis.global==="undefined"){globalThis.global=globalThis;}if(typeof globalThis.process==="undefined"){globalThis.process={env:{},argv:["node"],browser:false,version:"v22.0.0",versions:{node:"22.0.0"},nextTick(callback,...args){return Promise.resolve().then(()=>callback(...args));}};}if(typeof globalThis.TextEncoder==="undefined"){globalThis.TextEncoder=class{encode(value=""){const input=String(value??"");const encoded=unescape(encodeURIComponent(input));const out=new Uint8Array(encoded.length);for(let i=0;i<encoded.length;i++){out[i]=encoded.charCodeAt(i);}return out;}};}if(typeof globalThis.TextDecoder==="undefined"){globalThis.TextDecoder=class{decode(value=new Uint8Array()){const view=value instanceof Uint8Array?value:ArrayBuffer.isView(value)?new Uint8Array(value.buffer,value.byteOffset,value.byteLength):value instanceof ArrayBuffer?new Uint8Array(value):new Uint8Array(0);let binary="";for(let i=0;i<view.length;i++){binary+=String.fromCharCode(view[i]);}return decodeURIComponent(escape(binary));}};}if(typeof globalThis.Buffer==="undefined"){const __secureExecTe=typeof TextEncoder==="function"?new TextEncoder():null;const __secureExecTd=typeof TextDecoder==="function"?new TextDecoder():null;class __SecureExecEarlyBuffer extends Uint8Array{static from(value,encoding="utf8"){if(value instanceof ArrayBuffer){return new __SecureExecEarlyBuffer(value);}if(ArrayBuffer.isView(value)){return new __SecureExecEarlyBuffer(value.buffer.slice(value.byteOffset,value.byteOffset+value.byteLength));}if(Array.isArray(value)){return new __SecureExecEarlyBuffer(value);}const stringValue=String(value??"");if(encoding==="base64"&&typeof atob==="function"){const binary=atob(stringValue);const out=new __SecureExecEarlyBuffer(binary.length);for(let i=0;i<binary.length;i++){out[i]=binary.charCodeAt(i);}return out;}if(encoding==="binary"||encoding==="latin1"){const out=new __SecureExecEarlyBuffer(stringValue.length);for(let i=0;i<stringValue.length;i++){out[i]=stringValue.charCodeAt(i)&255;}return out;}if(__secureExecTe){return new __SecureExecEarlyBuffer(__secureExecTe.encode(stringValue));}const out=new __SecureExecEarlyBuffer(stringValue.length);for(let i=0;i<stringValue.length;i++){out[i]=stringValue.charCodeAt(i)&255;}return out;}static alloc(size){return new __SecureExecEarlyBuffer(Number(size)||0);}static concat(list,totalLength){const length=totalLength??list.reduce((sum,item)=>sum+(item?.length??0),0);const out=new __SecureExecEarlyBuffer(length);let offset=0;for(const item of list){const chunk=item instanceof Uint8Array?item:__SecureExecEarlyBuffer.from(item);out.set(chunk,offset);offset+=chunk.length;}return out;}static isBuffer(value){return value instanceof Uint8Array;}static byteLength(value,encoding="utf8"){return __SecureExecEarlyBuffer.from(value,encoding).byteLength;}toString(encoding="utf8"){if(encoding==="base64"&&typeof btoa==="function"){let binary="";for(const byte of this){binary+=String.fromCharCode(byte);}return btoa(binary);}if(encoding==="binary"||encoding==="latin1"){let binary="";for(const byte of this){binary+=String.fromCharCode(byte);}return binary;}if(__secureExecTd){return __secureExecTd.decode(this);}return Array.from(this,byte=>String.fromCharCode(byte)).join("");}}globalThis.Buffer=__SecureExecEarlyBuffer;}if(typeof globalThis.performance==="undefined"){const __secureExecPerformanceStart=Date.now();globalThis.performance={now(){if(typeof globalThis.__secureExecHrNowUs==="function"){return globalThis.__secureExecHrNowUs()/1000;}return Date.now()-__secureExecPerformanceStart;}};}if(typeof globalThis.performance.markResourceTiming!=="function"){globalThis.performance.markResourceTiming=()=>{};}if(typeof TextEncoder==="undefined"&&typeof globalThis.TextEncoder!=="undefined"){var TextEncoder=globalThis.TextEncoder;}if(typeof TextDecoder==="undefined"&&typeof globalThis.TextDecoder!=="undefined"){var TextDecoder=globalThis.TextDecoder;}if(typeof Buffer==="undefined"&&typeof globalThis.Buffer!=="undefined"){var Buffer=globalThis.Buffer;}
-(()=>{var Cj=Object.create;var nh=Object.defineProperty;var Qj=Object.getOwnPropertyDescriptor;var wj=Object.getOwnPropertyNames;var Sj=Object.getPrototypeOf,_j=Object.prototype.hasOwnProperty;var NI=e=>{throw TypeError(e)};var vj=(e,t,r)=>t in e?nh(e,t,{enumerable:!0,configurable:!0,writable:!0,value:r}):e[t]=r;var QD=(e,t)=>()=>(e&&(t=e(e=0)),t);var x=(e,t)=>()=>(t||e((t={exports:{}}).exports,t),t.exports),MI=(e,t)=>{for(var r in t)nh(e,r,{get:t[r],enumerable:!0})},x0=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of wj(t))!_j.call(e,i)&&i!==r&&nh(e,i,{get:()=>t[i],enumerable:!(n=Qj(t,i))||n.enumerable});return e},vn=(e,t,r)=>(x0(e,t,"default"),r&&x0(r,t,"default")),hr=(e,t,r)=>(r=e!=null?Cj(Sj(e)):{},x0(t||!e||!e.__esModule?nh(r,"default",{value:e,enumerable:!0}):r,e)),Gs=e=>x0(nh({},"__esModule",{value:!0}),e);var y=(e,t,r)=>vj(e,typeof t!="symbol"?t+"":t,r),FI=(e,t,r)=>t.has(e)||NI("Cannot "+r),wD=(e,t)=>Object(t)!==t?NI('Cannot use the "in" operator on this value'):e.has(t),te=(e,t,r)=>(FI(e,t,"read from private field"),r?r.call(e):t.get(e)),St=(e,t,r)=>t.has(e)?NI("Cannot add the same private member more than once"):t instanceof WeakSet?t.add(e):t.set(e,r),ft=(e,t,r,n)=>(FI(e,t,"write to private field"),n?n.call(e,r):t.set(e,r),r),SD=(e,t,r)=>(FI(e,t,"access private method"),r);var RD=x(U0=>{"use strict";U0.byteLength=Dj;U0.toByteArray=Nj;U0.fromByteArray=kj;var Ys=[],ci=[],Rj=typeof Uint8Array<"u"?Uint8Array:Array,kI="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";for(XA=0,_D=kI.length;XA<_D;++XA)Ys[XA]=kI[XA],ci[kI.charCodeAt(XA)]=XA;var XA,_D;ci[45]=62;ci[95]=63;function vD(e){var t=e.length;if(t%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var r=e.indexOf("=");r===-1&&(r=t);var n=r===t?0:4-r%4;return[r,n]}function Dj(e){var t=vD(e),r=t[0],n=t[1];return(r+n)*3/4-n}function Tj(e,t,r){return(t+r)*3/4-r}function Nj(e){var t,r=vD(e),n=r[0],i=r[1],s=new Rj(Tj(e,n,i)),o=0,a=i>0?n-4:n,A;for(A=0;A<a;A+=4)t=ci[e.charCodeAt(A)]<<18|ci[e.charCodeAt(A+1)]<<12|ci[e.charCodeAt(A+2)]<<6|ci[e.charCodeAt(A+3)],s[o++]=t>>16&255,s[o++]=t>>8&255,s[o++]=t&255;return i===2&&(t=ci[e.charCodeAt(A)]<<2|ci[e.charCodeAt(A+1)]>>4,s[o++]=t&255),i===1&&(t=ci[e.charCodeAt(A)]<<10|ci[e.charCodeAt(A+1)]<<4|ci[e.charCodeAt(A+2)]>>2,s[o++]=t>>8&255,s[o++]=t&255),s}function Mj(e){return Ys[e>>18&63]+Ys[e>>12&63]+Ys[e>>6&63]+Ys[e&63]}function Fj(e,t,r){for(var n,i=[],s=t;s<r;s+=3)n=(e[s]<<16&16711680)+(e[s+1]<<8&65280)+(e[s+2]&255),i.push(Mj(n));return i.join("")}function kj(e){for(var t,r=e.length,n=r%3,i=[],s=16383,o=0,a=r-n;o<a;o+=s)i.push(Fj(e,o,o+s>a?a:o+s));return n===1?(t=e[r-1],i.push(Ys[t>>2]+Ys[t<<4&63]+"==")):n===2&&(t=(e[r-2]<<8)+e[r-1],i.push(Ys[t>>10]+Ys[t>>4&63]+Ys[t<<2&63]+"=")),i.join("")}});var DD=x(xI=>{xI.read=function(e,t,r,n,i){var s,o,a=i*8-n-1,A=(1<<a)-1,f=A>>1,l=-7,p=r?i-1:0,B=r?-1:1,S=e[t+p];for(p+=B,s=S&(1<<-l)-1,S>>=-l,l+=a;l>0;s=s*256+e[t+p],p+=B,l-=8);for(o=s&(1<<-l)-1,s>>=-l,l+=n;l>0;o=o*256+e[t+p],p+=B,l-=8);if(s===0)s=1-f;else{if(s===A)return o?NaN:(S?-1:1)*(1/0);o=o+Math.pow(2,n),s=s-f}return(S?-1:1)*o*Math.pow(2,s-n)};xI.write=function(e,t,r,n,i,s){var o,a,A,f=s*8-i-1,l=(1<<f)-1,p=l>>1,B=i===23?Math.pow(2,-24)-Math.pow(2,-77):0,S=n?0:s-1,_=n?1:-1,N=t<0||t===0&&1/t<0?1:0;for(t=Math.abs(t),isNaN(t)||t===1/0?(a=isNaN(t)?1:0,o=l):(o=Math.floor(Math.log(t)/Math.LN2),t*(A=Math.pow(2,-o))<1&&(o--,A*=2),o+p>=1?t+=B/A:t+=B*Math.pow(2,1-p),t*A>=2&&(o++,A/=2),o+p>=l?(a=0,o=l):o+p>=1?(a=(t*A-1)*Math.pow(2,i),o=o+p):(a=t*Math.pow(2,p-1)*Math.pow(2,i),o=0));i>=8;e[r+S]=a&255,S+=_,a/=256,i-=8);for(o=o<<i|a,f+=i;f>0;e[r+S]=o&255,S+=_,o/=256,f-=8);e[r+S-_]|=N*128}});var Gr=x(Yu=>{"use strict";var UI=RD(),Gu=DD(),TD=typeof Symbol=="function"&&typeof Symbol.for=="function"?Symbol.for("nodejs.util.inspect.custom"):null;Yu.Buffer=fe;Yu.SlowBuffer=Hj;Yu.INSPECT_MAX_BYTES=50;var L0=2147483647;Yu.kMaxLength=L0;fe.TYPED_ARRAY_SUPPORT=xj();!fe.TYPED_ARRAY_SUPPORT&&typeof console<"u"&&typeof console.error=="function"&&console.error("This browser lacks typed array (Uint8Array) support which is required by `buffer` v5.x. Use `buffer` v4.x if you require old browser support.");function xj(){try{var e=new Uint8Array(1),t={foo:function(){return 42}};return Object.setPrototypeOf(t,Uint8Array.prototype),Object.setPrototypeOf(e,t),e.foo()===42}catch{return!1}}Object.defineProperty(fe.prototype,"parent",{enumerable:!0,get:function(){if(fe.isBuffer(this))return this.buffer}});Object.defineProperty(fe.prototype,"offset",{enumerable:!0,get:function(){if(fe.isBuffer(this))return this.byteOffset}});function Wo(e){if(e>L0)throw new RangeError('The value "'+e+'" is invalid for option "size"');var t=new Uint8Array(e);return Object.setPrototypeOf(t,fe.prototype),t}function fe(e,t,r){if(typeof e=="number"){if(typeof t=="string")throw new TypeError('The "string" argument must be of type string. Received type number');return HI(e)}return FD(e,t,r)}fe.poolSize=8192;function FD(e,t,r){if(typeof e=="string")return Lj(e,t);if(ArrayBuffer.isView(e))return Pj(e);if(e==null)throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof e);if(Ws(e,ArrayBuffer)||e&&Ws(e.buffer,ArrayBuffer)||typeof SharedArrayBuffer<"u"&&(Ws(e,SharedArrayBuffer)||e&&Ws(e.buffer,SharedArrayBuffer)))return PI(e,t,r);if(typeof e=="number")throw new TypeError('The "value" argument must not be of type number. Received type number');var n=e.valueOf&&e.valueOf();if(n!=null&&n!==e)return fe.from(n,t,r);var i=Oj(e);if(i)return i;if(typeof Symbol<"u"&&Symbol.toPrimitive!=null&&typeof e[Symbol.toPrimitive]=="function")return fe.from(e[Symbol.toPrimitive]("string"),t,r);throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof e)}fe.from=function(e,t,r){return FD(e,t,r)};Object.setPrototypeOf(fe.prototype,Uint8Array.prototype);Object.setPrototypeOf(fe,Uint8Array);function kD(e){if(typeof e!="number")throw new TypeError('"size" argument must be of type number');if(e<0)throw new RangeError('The value "'+e+'" is invalid for option "size"')}function Uj(e,t,r){return kD(e),e<=0?Wo(e):t!==void 0?typeof r=="string"?Wo(e).fill(t,r):Wo(e).fill(t):Wo(e)}fe.alloc=function(e,t,r){return Uj(e,t,r)};function HI(e){return kD(e),Wo(e<0?0:qI(e)|0)}fe.allocUnsafe=function(e){return HI(e)};fe.allocUnsafeSlow=function(e){return HI(e)};function Lj(e,t){if((typeof t!="string"||t==="")&&(t="utf8"),!fe.isEncoding(t))throw new TypeError("Unknown encoding: "+t);var r=xD(e,t)|0,n=Wo(r),i=n.write(e,t);return i!==r&&(n=n.slice(0,i)),n}function LI(e){for(var t=e.length<0?0:qI(e.length)|0,r=Wo(t),n=0;n<t;n+=1)r[n]=e[n]&255;return r}function Pj(e){if(Ws(e,Uint8Array)){var t=new Uint8Array(e);return PI(t.buffer,t.byteOffset,t.byteLength)}return LI(e)}function PI(e,t,r){if(t<0||e.byteLength<t)throw new RangeError('"offset" is outside of buffer bounds');if(e.byteLength<t+(r||0))throw new RangeError('"length" is outside of buffer bounds');var n;return t===void 0&&r===void 0?n=new Uint8Array(e):r===void 0?n=new Uint8Array(e,t):n=new Uint8Array(e,t,r),Object.setPrototypeOf(n,fe.prototype),n}function Oj(e){if(fe.isBuffer(e)){var t=qI(e.length)|0,r=Wo(t);return r.length===0||e.copy(r,0,0,t),r}if(e.length!==void 0)return typeof e.length!="number"||GI(e.length)?Wo(0):LI(e);if(e.type==="Buffer"&&Array.isArray(e.data))return LI(e.data)}function qI(e){if(e>=L0)throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+L0.toString(16)+" bytes");return e|0}function Hj(e){return+e!=e&&(e=0),fe.alloc(+e)}fe.isBuffer=function(t){return t!=null&&t._isBuffer===!0&&t!==fe.prototype};fe.compare=function(t,r){if(Ws(t,Uint8Array)&&(t=fe.from(t,t.offset,t.byteLength)),Ws(r,Uint8Array)&&(r=fe.from(r,r.offset,r.byteLength)),!fe.isBuffer(t)||!fe.isBuffer(r))throw new TypeError('The "buf1", "buf2" arguments must be one of type Buffer or Uint8Array');if(t===r)return 0;for(var n=t.length,i=r.length,s=0,o=Math.min(n,i);s<o;++s)if(t[s]!==r[s]){n=t[s],i=r[s];break}return n<i?-1:i<n?1:0};fe.isEncoding=function(t){switch(String(t).toLowerCase()){case"hex":case"utf8":case"utf-8":case"ascii":case"latin1":case"binary":case"base64":case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return!0;default:return!1}};fe.concat=function(t,r){if(!Array.isArray(t))throw new TypeError('"list" argument must be an Array of Buffers');if(t.length===0)return fe.alloc(0);var n;if(r===void 0)for(r=0,n=0;n<t.length;++n)r+=t[n].length;var i=fe.allocUnsafe(r),s=0;for(n=0;n<t.length;++n){var o=t[n];if(Ws(o,Uint8Array))s+o.length>i.length?fe.from(o).copy(i,s):Uint8Array.prototype.set.call(i,o,s);else if(fe.isBuffer(o))o.copy(i,s);else throw new TypeError('"list" argument must be an Array of Buffers');s+=o.length}return i};function xD(e,t){if(fe.isBuffer(e))return e.length;if(ArrayBuffer.isView(e)||Ws(e,ArrayBuffer))return e.byteLength;if(typeof e!="string")throw new TypeError('The "string" argument must be one of type string, Buffer, or ArrayBuffer. Received type '+typeof e);var r=e.length,n=arguments.length>2&&arguments[2]===!0;if(!n&&r===0)return 0;for(var i=!1;;)switch(t){case"ascii":case"latin1":case"binary":return r;case"utf8":case"utf-8":return OI(e).length;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return r*2;case"hex":return r>>>1;case"base64":return qD(e).length;default:if(i)return n?-1:OI(e).length;t=(""+t).toLowerCase(),i=!0}}fe.byteLength=xD;function qj(e,t,r){var n=!1;if((t===void 0||t<0)&&(t=0),t>this.length||((r===void 0||r>this.length)&&(r=this.length),r<=0)||(r>>>=0,t>>>=0,r<=t))return"";for(e||(e="utf8");;)switch(e){case"hex":return Zj(this,t,r);case"utf8":case"utf-8":return LD(this,t,r);case"ascii":return Kj(this,t,r);case"latin1":case"binary":return Xj(this,t,r);case"base64":return jj(this,t,r);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return $j(this,t,r);default:if(n)throw new TypeError("Unknown encoding: "+e);e=(e+"").toLowerCase(),n=!0}}fe.prototype._isBuffer=!0;function ZA(e,t,r){var n=e[t];e[t]=e[r],e[r]=n}fe.prototype.swap16=function(){var t=this.length;if(t%2!==0)throw new RangeError("Buffer size must be a multiple of 16-bits");for(var r=0;r<t;r+=2)ZA(this,r,r+1);return this};fe.prototype.swap32=function(){var t=this.length;if(t%4!==0)throw new RangeError("Buffer size must be a multiple of 32-bits");for(var r=0;r<t;r+=4)ZA(this,r,r+3),ZA(this,r+1,r+2);return this};fe.prototype.swap64=function(){var t=this.length;if(t%8!==0)throw new RangeError("Buffer size must be a multiple of 64-bits");for(var r=0;r<t;r+=8)ZA(this,r,r+7),ZA(this,r+1,r+6),ZA(this,r+2,r+5),ZA(this,r+3,r+4);return this};fe.prototype.toString=function(){var t=this.length;return t===0?"":arguments.length===0?LD(this,0,t):qj.apply(this,arguments)};fe.prototype.toLocaleString=fe.prototype.toString;fe.prototype.equals=function(t){if(!fe.isBuffer(t))throw new TypeError("Argument must be a Buffer");return this===t?!0:fe.compare(this,t)===0};fe.prototype.inspect=function(){var t="",r=Yu.INSPECT_MAX_BYTES;return t=this.toString("hex",0,r).replace(/(.{2})/g,"$1 ").trim(),this.length>r&&(t+=" ... "),"<Buffer "+t+">"};TD&&(fe.prototype[TD]=fe.prototype.inspect);fe.prototype.compare=function(t,r,n,i,s){if(Ws(t,Uint8Array)&&(t=fe.from(t,t.offset,t.byteLength)),!fe.isBuffer(t))throw new TypeError('The "target" argument must be one of type Buffer or Uint8Array. Received type '+typeof t);if(r===void 0&&(r=0),n===void 0&&(n=t?t.length:0),i===void 0&&(i=0),s===void 0&&(s=this.length),r<0||n>t.length||i<0||s>this.length)throw new RangeError("out of range index");if(i>=s&&r>=n)return 0;if(i>=s)return-1;if(r>=n)return 1;if(r>>>=0,n>>>=0,i>>>=0,s>>>=0,this===t)return 0;for(var o=s-i,a=n-r,A=Math.min(o,a),f=this.slice(i,s),l=t.slice(r,n),p=0;p<A;++p)if(f[p]!==l[p]){o=f[p],a=l[p];break}return o<a?-1:a<o?1:0};function UD(e,t,r,n,i){if(e.length===0)return-1;if(typeof r=="string"?(n=r,r=0):r>2147483647?r=2147483647:r<-2147483648&&(r=-2147483648),r=+r,GI(r)&&(r=i?0:e.length-1),r<0&&(r=e.length+r),r>=e.length){if(i)return-1;r=e.length-1}else if(r<0)if(i)r=0;else return-1;if(typeof t=="string"&&(t=fe.from(t,n)),fe.isBuffer(t))return t.length===0?-1:ND(e,t,r,n,i);if(typeof t=="number")return t=t&255,typeof Uint8Array.prototype.indexOf=="function"?i?Uint8Array.prototype.indexOf.call(e,t,r):Uint8Array.prototype.lastIndexOf.call(e,t,r):ND(e,[t],r,n,i);throw new TypeError("val must be string, number or Buffer")}function ND(e,t,r,n,i){var s=1,o=e.length,a=t.length;if(n!==void 0&&(n=String(n).toLowerCase(),n==="ucs2"||n==="ucs-2"||n==="utf16le"||n==="utf-16le")){if(e.length<2||t.length<2)return-1;s=2,o/=2,a/=2,r/=2}function A(S,_){return s===1?S[_]:S.readUInt16BE(_*s)}var f;if(i){var l=-1;for(f=r;f<o;f++)if(A(e,f)===A(t,l===-1?0:f-l)){if(l===-1&&(l=f),f-l+1===a)return l*s}else l!==-1&&(f-=f-l),l=-1}else for(r+a>o&&(r=o-a),f=r;f>=0;f--){for(var p=!0,B=0;B<a;B++)if(A(e,f+B)!==A(t,B)){p=!1;break}if(p)return f}return-1}fe.prototype.includes=function(t,r,n){return this.indexOf(t,r,n)!==-1};fe.prototype.indexOf=function(t,r,n){return UD(this,t,r,n,!0)};fe.prototype.lastIndexOf=function(t,r,n){return UD(this,t,r,n,!1)};function Gj(e,t,r,n){r=Number(r)||0;var i=e.length-r;n?(n=Number(n),n>i&&(n=i)):n=i;var s=t.length;n>s/2&&(n=s/2);for(var o=0;o<n;++o){var a=parseInt(t.substr(o*2,2),16);if(GI(a))return o;e[r+o]=a}return o}function Yj(e,t,r,n){return P0(OI(t,e.length-r),e,r,n)}function Wj(e,t,r,n){return P0(rz(t),e,r,n)}function Vj(e,t,r,n){return P0(qD(t),e,r,n)}function Jj(e,t,r,n){return P0(nz(t,e.length-r),e,r,n)}fe.prototype.write=function(t,r,n,i){if(r===void 0)i="utf8",n=this.length,r=0;else if(n===void 0&&typeof r=="string")i=r,n=this.length,r=0;else if(isFinite(r))r=r>>>0,isFinite(n)?(n=n>>>0,i===void 0&&(i="utf8")):(i=n,n=void 0);else throw new Error("Buffer.write(string, encoding, offset[, length]) is no longer supported");var s=this.length-r;if((n===void 0||n>s)&&(n=s),t.length>0&&(n<0||r<0)||r>this.length)throw new RangeError("Attempt to write outside buffer bounds");i||(i="utf8");for(var o=!1;;)switch(i){case"hex":return Gj(this,t,r,n);case"utf8":case"utf-8":return Yj(this,t,r,n);case"ascii":case"latin1":case"binary":return Wj(this,t,r,n);case"base64":return Vj(this,t,r,n);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return Jj(this,t,r,n);default:if(o)throw new TypeError("Unknown encoding: "+i);i=(""+i).toLowerCase(),o=!0}};fe.prototype.toJSON=function(){return{type:"Buffer",data:Array.prototype.slice.call(this._arr||this,0)}};function jj(e,t,r){return t===0&&r===e.length?UI.fromByteArray(e):UI.fromByteArray(e.slice(t,r))}function LD(e,t,r){r=Math.min(e.length,r);for(var n=[],i=t;i<r;){var s=e[i],o=null,a=s>239?4:s>223?3:s>191?2:1;if(i+a<=r){var A,f,l,p;switch(a){case 1:s<128&&(o=s);break;case 2:A=e[i+1],(A&192)===128&&(p=(s&31)<<6|A&63,p>127&&(o=p));break;case 3:A=e[i+1],f=e[i+2],(A&192)===128&&(f&192)===128&&(p=(s&15)<<12|(A&63)<<6|f&63,p>2047&&(p<55296||p>57343)&&(o=p));break;case 4:A=e[i+1],f=e[i+2],l=e[i+3],(A&192)===128&&(f&192)===128&&(l&192)===128&&(p=(s&15)<<18|(A&63)<<12|(f&63)<<6|l&63,p>65535&&p<1114112&&(o=p))}}o===null?(o=65533,a=1):o>65535&&(o-=65536,n.push(o>>>10&1023|55296),o=56320|o&1023),n.push(o),i+=a}return zj(n)}var MD=4096;function zj(e){var t=e.length;if(t<=MD)return String.fromCharCode.apply(String,e);for(var r="",n=0;n<t;)r+=String.fromCharCode.apply(String,e.slice(n,n+=MD));return r}function Kj(e,t,r){var n="";r=Math.min(e.length,r);for(var i=t;i<r;++i)n+=String.fromCharCode(e[i]&127);return n}function Xj(e,t,r){var n="";r=Math.min(e.length,r);for(var i=t;i<r;++i)n+=String.fromCharCode(e[i]);return n}function Zj(e,t,r){var n=e.length;(!t||t<0)&&(t=0),(!r||r<0||r>n)&&(r=n);for(var i="",s=t;s<r;++s)i+=iz[e[s]];return i}function $j(e,t,r){for(var n=e.slice(t,r),i="",s=0;s<n.length-1;s+=2)i+=String.fromCharCode(n[s]+n[s+1]*256);return i}fe.prototype.slice=function(t,r){var n=this.length;t=~~t,r=r===void 0?n:~~r,t<0?(t+=n,t<0&&(t=0)):t>n&&(t=n),r<0?(r+=n,r<0&&(r=0)):r>n&&(r=n),r<t&&(r=t);var i=this.subarray(t,r);return Object.setPrototypeOf(i,fe.prototype),i};function Dr(e,t,r){if(e%1!==0||e<0)throw new RangeError("offset is not uint");if(e+t>r)throw new RangeError("Trying to access beyond buffer length")}fe.prototype.readUintLE=fe.prototype.readUIntLE=function(t,r,n){t=t>>>0,r=r>>>0,n||Dr(t,r,this.length);for(var i=this[t],s=1,o=0;++o<r&&(s*=256);)i+=this[t+o]*s;return i};fe.prototype.readUintBE=fe.prototype.readUIntBE=function(t,r,n){t=t>>>0,r=r>>>0,n||Dr(t,r,this.length);for(var i=this[t+--r],s=1;r>0&&(s*=256);)i+=this[t+--r]*s;return i};fe.prototype.readUint8=fe.prototype.readUInt8=function(t,r){return t=t>>>0,r||Dr(t,1,this.length),this[t]};fe.prototype.readUint16LE=fe.prototype.readUInt16LE=function(t,r){return t=t>>>0,r||Dr(t,2,this.length),this[t]|this[t+1]<<8};fe.prototype.readUint16BE=fe.prototype.readUInt16BE=function(t,r){return t=t>>>0,r||Dr(t,2,this.length),this[t]<<8|this[t+1]};fe.prototype.readUint32LE=fe.prototype.readUInt32LE=function(t,r){return t=t>>>0,r||Dr(t,4,this.length),(this[t]|this[t+1]<<8|this[t+2]<<16)+this[t+3]*16777216};fe.prototype.readUint32BE=fe.prototype.readUInt32BE=function(t,r){return t=t>>>0,r||Dr(t,4,this.length),this[t]*16777216+(this[t+1]<<16|this[t+2]<<8|this[t+3])};fe.prototype.readIntLE=function(t,r,n){t=t>>>0,r=r>>>0,n||Dr(t,r,this.length);for(var i=this[t],s=1,o=0;++o<r&&(s*=256);)i+=this[t+o]*s;return s*=128,i>=s&&(i-=Math.pow(2,8*r)),i};fe.prototype.readIntBE=function(t,r,n){t=t>>>0,r=r>>>0,n||Dr(t,r,this.length);for(var i=r,s=1,o=this[t+--i];i>0&&(s*=256);)o+=this[t+--i]*s;return s*=128,o>=s&&(o-=Math.pow(2,8*r)),o};fe.prototype.readInt8=function(t,r){return t=t>>>0,r||Dr(t,1,this.length),this[t]&128?(255-this[t]+1)*-1:this[t]};fe.prototype.readInt16LE=function(t,r){t=t>>>0,r||Dr(t,2,this.length);var n=this[t]|this[t+1]<<8;return n&32768?n|4294901760:n};fe.prototype.readInt16BE=function(t,r){t=t>>>0,r||Dr(t,2,this.length);var n=this[t+1]|this[t]<<8;return n&32768?n|4294901760:n};fe.prototype.readInt32LE=function(t,r){return t=t>>>0,r||Dr(t,4,this.length),this[t]|this[t+1]<<8|this[t+2]<<16|this[t+3]<<24};fe.prototype.readInt32BE=function(t,r){return t=t>>>0,r||Dr(t,4,this.length),this[t]<<24|this[t+1]<<16|this[t+2]<<8|this[t+3]};fe.prototype.readFloatLE=function(t,r){return t=t>>>0,r||Dr(t,4,this.length),Gu.read(this,t,!0,23,4)};fe.prototype.readFloatBE=function(t,r){return t=t>>>0,r||Dr(t,4,this.length),Gu.read(this,t,!1,23,4)};fe.prototype.readDoubleLE=function(t,r){return t=t>>>0,r||Dr(t,8,this.length),Gu.read(this,t,!0,52,8)};fe.prototype.readDoubleBE=function(t,r){return t=t>>>0,r||Dr(t,8,this.length),Gu.read(this,t,!1,52,8)};function Rn(e,t,r,n,i,s){if(!fe.isBuffer(e))throw new TypeError('"buffer" argument must be a Buffer instance');if(t>i||t<s)throw new RangeError('"value" argument is out of bounds');if(r+n>e.length)throw new RangeError("Index out of range")}fe.prototype.writeUintLE=fe.prototype.writeUIntLE=function(t,r,n,i){if(t=+t,r=r>>>0,n=n>>>0,!i){var s=Math.pow(2,8*n)-1;Rn(this,t,r,n,s,0)}var o=1,a=0;for(this[r]=t&255;++a<n&&(o*=256);)this[r+a]=t/o&255;return r+n};fe.prototype.writeUintBE=fe.prototype.writeUIntBE=function(t,r,n,i){if(t=+t,r=r>>>0,n=n>>>0,!i){var s=Math.pow(2,8*n)-1;Rn(this,t,r,n,s,0)}var o=n-1,a=1;for(this[r+o]=t&255;--o>=0&&(a*=256);)this[r+o]=t/a&255;return r+n};fe.prototype.writeUint8=fe.prototype.writeUInt8=function(t,r,n){return t=+t,r=r>>>0,n||Rn(this,t,r,1,255,0),this[r]=t&255,r+1};fe.prototype.writeUint16LE=fe.prototype.writeUInt16LE=function(t,r,n){return t=+t,r=r>>>0,n||Rn(this,t,r,2,65535,0),this[r]=t&255,this[r+1]=t>>>8,r+2};fe.prototype.writeUint16BE=fe.prototype.writeUInt16BE=function(t,r,n){return t=+t,r=r>>>0,n||Rn(this,t,r,2,65535,0),this[r]=t>>>8,this[r+1]=t&255,r+2};fe.prototype.writeUint32LE=fe.prototype.writeUInt32LE=function(t,r,n){return t=+t,r=r>>>0,n||Rn(this,t,r,4,4294967295,0),this[r+3]=t>>>24,this[r+2]=t>>>16,this[r+1]=t>>>8,this[r]=t&255,r+4};fe.prototype.writeUint32BE=fe.prototype.writeUInt32BE=function(t,r,n){return t=+t,r=r>>>0,n||Rn(this,t,r,4,4294967295,0),this[r]=t>>>24,this[r+1]=t>>>16,this[r+2]=t>>>8,this[r+3]=t&255,r+4};fe.prototype.writeIntLE=function(t,r,n,i){if(t=+t,r=r>>>0,!i){var s=Math.pow(2,8*n-1);Rn(this,t,r,n,s-1,-s)}var o=0,a=1,A=0;for(this[r]=t&255;++o<n&&(a*=256);)t<0&&A===0&&this[r+o-1]!==0&&(A=1),this[r+o]=(t/a>>0)-A&255;return r+n};fe.prototype.writeIntBE=function(t,r,n,i){if(t=+t,r=r>>>0,!i){var s=Math.pow(2,8*n-1);Rn(this,t,r,n,s-1,-s)}var o=n-1,a=1,A=0;for(this[r+o]=t&255;--o>=0&&(a*=256);)t<0&&A===0&&this[r+o+1]!==0&&(A=1),this[r+o]=(t/a>>0)-A&255;return r+n};fe.prototype.writeInt8=function(t,r,n){return t=+t,r=r>>>0,n||Rn(this,t,r,1,127,-128),t<0&&(t=255+t+1),this[r]=t&255,r+1};fe.prototype.writeInt16LE=function(t,r,n){return t=+t,r=r>>>0,n||Rn(this,t,r,2,32767,-32768),this[r]=t&255,this[r+1]=t>>>8,r+2};fe.prototype.writeInt16BE=function(t,r,n){return t=+t,r=r>>>0,n||Rn(this,t,r,2,32767,-32768),this[r]=t>>>8,this[r+1]=t&255,r+2};fe.prototype.writeInt32LE=function(t,r,n){return t=+t,r=r>>>0,n||Rn(this,t,r,4,2147483647,-2147483648),this[r]=t&255,this[r+1]=t>>>8,this[r+2]=t>>>16,this[r+3]=t>>>24,r+4};fe.prototype.writeInt32BE=function(t,r,n){return t=+t,r=r>>>0,n||Rn(this,t,r,4,2147483647,-2147483648),t<0&&(t=4294967295+t+1),this[r]=t>>>24,this[r+1]=t>>>16,this[r+2]=t>>>8,this[r+3]=t&255,r+4};function PD(e,t,r,n,i,s){if(r+n>e.length)throw new RangeError("Index out of range");if(r<0)throw new RangeError("Index out of range")}function OD(e,t,r,n,i){return t=+t,r=r>>>0,i||PD(e,t,r,4,34028234663852886e22,-34028234663852886e22),Gu.write(e,t,r,n,23,4),r+4}fe.prototype.writeFloatLE=function(t,r,n){return OD(this,t,r,!0,n)};fe.prototype.writeFloatBE=function(t,r,n){return OD(this,t,r,!1,n)};function HD(e,t,r,n,i){return t=+t,r=r>>>0,i||PD(e,t,r,8,17976931348623157e292,-17976931348623157e292),Gu.write(e,t,r,n,52,8),r+8}fe.prototype.writeDoubleLE=function(t,r,n){return HD(this,t,r,!0,n)};fe.prototype.writeDoubleBE=function(t,r,n){return HD(this,t,r,!1,n)};fe.prototype.copy=function(t,r,n,i){if(!fe.isBuffer(t))throw new TypeError("argument should be a Buffer");if(n||(n=0),!i&&i!==0&&(i=this.length),r>=t.length&&(r=t.length),r||(r=0),i>0&&i<n&&(i=n),i===n||t.length===0||this.length===0)return 0;if(r<0)throw new RangeError("targetStart out of bounds");if(n<0||n>=this.length)throw new RangeError("Index out of range");if(i<0)throw new RangeError("sourceEnd out of bounds");i>this.length&&(i=this.length),t.length-r<i-n&&(i=t.length-r+n);var s=i-n;return this===t&&typeof Uint8Array.prototype.copyWithin=="function"?this.copyWithin(r,n,i):Uint8Array.prototype.set.call(t,this.subarray(n,i),r),s};fe.prototype.fill=function(t,r,n,i){if(typeof t=="string"){if(typeof r=="string"?(i=r,r=0,n=this.length):typeof n=="string"&&(i=n,n=this.length),i!==void 0&&typeof i!="string")throw new TypeError("encoding must be a string");if(typeof i=="string"&&!fe.isEncoding(i))throw new TypeError("Unknown encoding: "+i);if(t.length===1){var s=t.charCodeAt(0);(i==="utf8"&&s<128||i==="latin1")&&(t=s)}}else typeof t=="number"?t=t&255:typeof t=="boolean"&&(t=Number(t));if(r<0||this.length<r||this.length<n)throw new RangeError("Out of range index");if(n<=r)return this;r=r>>>0,n=n===void 0?this.length:n>>>0,t||(t=0);var o;if(typeof t=="number")for(o=r;o<n;++o)this[o]=t;else{var a=fe.isBuffer(t)?t:fe.from(t,i),A=a.length;if(A===0)throw new TypeError('The value "'+t+'" is invalid for argument "value"');for(o=0;o<n-r;++o)this[o+r]=a[o%A]}return this};var ez=/[^+/0-9A-Za-z-_]/g;function tz(e){if(e=e.split("=")[0],e=e.trim().replace(ez,""),e.length<2)return"";for(;e.length%4!==0;)e=e+"=";return e}function OI(e,t){t=t||1/0;for(var r,n=e.length,i=null,s=[],o=0;o<n;++o){if(r=e.charCodeAt(o),r>55295&&r<57344){if(!i){if(r>56319){(t-=3)>-1&&s.push(239,191,189);continue}else if(o+1===n){(t-=3)>-1&&s.push(239,191,189);continue}i=r;continue}if(r<56320){(t-=3)>-1&&s.push(239,191,189),i=r;continue}r=(i-55296<<10|r-56320)+65536}else i&&(t-=3)>-1&&s.push(239,191,189);if(i=null,r<128){if((t-=1)<0)break;s.push(r)}else if(r<2048){if((t-=2)<0)break;s.push(r>>6|192,r&63|128)}else if(r<65536){if((t-=3)<0)break;s.push(r>>12|224,r>>6&63|128,r&63|128)}else if(r<1114112){if((t-=4)<0)break;s.push(r>>18|240,r>>12&63|128,r>>6&63|128,r&63|128)}else throw new Error("Invalid code point")}return s}function rz(e){for(var t=[],r=0;r<e.length;++r)t.push(e.charCodeAt(r)&255);return t}function nz(e,t){for(var r,n,i,s=[],o=0;o<e.length&&!((t-=2)<0);++o)r=e.charCodeAt(o),n=r>>8,i=r%256,s.push(i),s.push(n);return s}function qD(e){return UI.toByteArray(tz(e))}function P0(e,t,r,n){for(var i=0;i<n&&!(i+r>=t.length||i>=e.length);++i)t[i+r]=e[i];return i}function Ws(e,t){return e instanceof t||e!=null&&e.constructor!=null&&e.constructor.name!=null&&e.constructor.name===t.name}function GI(e){return e!==e}var iz=(function(){for(var e="0123456789abcdef",t=new Array(256),r=0;r<16;++r)for(var n=r*16,i=0;i<16;++i)t[n+i]=e[r]+e[i];return t})()});var Zi=x((rRe,WI)=>{"use strict";var Wu=typeof Reflect=="object"?Reflect:null,GD=Wu&&typeof Wu.apply=="function"?Wu.apply:function(t,r,n){return Function.prototype.apply.call(t,r,n)},O0;Wu&&typeof Wu.ownKeys=="function"?O0=Wu.ownKeys:Object.getOwnPropertySymbols?O0=function(t){return Object.getOwnPropertyNames(t).concat(Object.getOwnPropertySymbols(t))}:O0=function(t){return Object.getOwnPropertyNames(t)};function XZ(e){console&&console.warn&&console.warn(e)}var WD=Number.isNaN||function(t){return t!==t};function xt(){xt.init.call(this)}WI.exports=xt;WI.exports.once=t$;xt.EventEmitter=xt;xt.prototype._events=void 0;xt.prototype._eventsCount=0;xt.prototype._maxListeners=void 0;var YD=10;function H0(e){if(typeof e!="function")throw new TypeError('The "listener" argument must be of type Function. Received type '+typeof e)}Object.defineProperty(xt,"defaultMaxListeners",{enumerable:!0,get:function(){return YD},set:function(e){if(typeof e!="number"||e<0||WD(e))throw new RangeError('The value of "defaultMaxListeners" is out of range. It must be a non-negative number. Received '+e+".");YD=e}});xt.init=function(){(this._events===void 0||this._events===Object.getPrototypeOf(this)._events)&&(this._events=Object.create(null),this._eventsCount=0),this._maxListeners=this._maxListeners||void 0};xt.prototype.setMaxListeners=function(t){if(typeof t!="number"||t<0||WD(t))throw new RangeError('The value of "n" is out of range. It must be a non-negative number. Received '+t+".");return this._maxListeners=t,this};function VD(e){return e._maxListeners===void 0?xt.defaultMaxListeners:e._maxListeners}xt.prototype.getMaxListeners=function(){return VD(this)};xt.prototype.emit=function(t){for(var r=[],n=1;n<arguments.length;n++)r.push(arguments[n]);var i=t==="error",s=this._events;if(s!==void 0)i=i&&s.error===void 0;else if(!i)return!1;if(i){var o;if(r.length>0&&(o=r[0]),o instanceof Error)throw o;var a=new Error("Unhandled error."+(o?" ("+o.message+")":""));throw a.context=o,a}var A=s[t];if(A===void 0)return!1;if(typeof A=="function")GD(A,this,r);else for(var f=A.length,l=XD(A,f),n=0;n<f;++n)GD(l[n],this,r);return!0};function JD(e,t,r,n){var i,s,o;if(H0(r),s=e._events,s===void 0?(s=e._events=Object.create(null),e._eventsCount=0):(s.newListener!==void 0&&(e.emit("newListener",t,r.listener?r.listener:r),s=e._events),o=s[t]),o===void 0)o=s[t]=r,++e._eventsCount;else if(typeof o=="function"?o=s[t]=n?[r,o]:[o,r]:n?o.unshift(r):o.push(r),i=VD(e),i>0&&o.length>i&&!o.warned){o.warned=!0;var a=new Error("Possible EventEmitter memory leak detected. "+o.length+" "+String(t)+" listeners added. Use emitter.setMaxListeners() to increase limit");a.name="MaxListenersExceededWarning",a.emitter=e,a.type=t,a.count=o.length,XZ(a)}return e}xt.prototype.addListener=function(t,r){return JD(this,t,r,!1)};xt.prototype.on=xt.prototype.addListener;xt.prototype.prependListener=function(t,r){return JD(this,t,r,!0)};function ZZ(){if(!this.fired)return this.target.removeListener(this.type,this.wrapFn),this.fired=!0,arguments.length===0?this.listener.call(this.target):this.listener.apply(this.target,arguments)}function jD(e,t,r){var n={fired:!1,wrapFn:void 0,target:e,type:t,listener:r},i=ZZ.bind(n);return i.listener=r,n.wrapFn=i,i}xt.prototype.once=function(t,r){return H0(r),this.on(t,jD(this,t,r)),this};xt.prototype.prependOnceListener=function(t,r){return H0(r),this.prependListener(t,jD(this,t,r)),this};xt.prototype.removeListener=function(t,r){var n,i,s,o,a;if(H0(r),i=this._events,i===void 0)return this;if(n=i[t],n===void 0)return this;if(n===r||n.listener===r)--this._eventsCount===0?this._events=Object.create(null):(delete i[t],i.removeListener&&this.emit("removeListener",t,n.listener||r));else if(typeof n!="function"){for(s=-1,o=n.length-1;o>=0;o--)if(n[o]===r||n[o].listener===r){a=n[o].listener,s=o;break}if(s<0)return this;s===0?n.shift():$Z(n,s),n.length===1&&(i[t]=n[0]),i.removeListener!==void 0&&this.emit("removeListener",t,a||r)}return this};xt.prototype.off=xt.prototype.removeListener;xt.prototype.removeAllListeners=function(t){var r,n,i;if(n=this._events,n===void 0)return this;if(n.removeListener===void 0)return arguments.length===0?(this._events=Object.create(null),this._eventsCount=0):n[t]!==void 0&&(--this._eventsCount===0?this._events=Object.create(null):delete n[t]),this;if(arguments.length===0){var s=Object.keys(n),o;for(i=0;i<s.length;++i)o=s[i],o!=="removeListener"&&this.removeAllListeners(o);return this.removeAllListeners("removeListener"),this._events=Object.create(null),this._eventsCount=0,this}if(r=n[t],typeof r=="function")this.removeListener(t,r);else if(r!==void 0)for(i=r.length-1;i>=0;i--)this.removeListener(t,r[i]);return this};function zD(e,t,r){var n=e._events;if(n===void 0)return[];var i=n[t];return i===void 0?[]:typeof i=="function"?r?[i.listener||i]:[i]:r?e$(i):XD(i,i.length)}xt.prototype.listeners=function(t){return zD(this,t,!0)};xt.prototype.rawListeners=function(t){return zD(this,t,!1)};xt.listenerCount=function(e,t){return typeof e.listenerCount=="function"?e.listenerCount(t):KD.call(e,t)};xt.prototype.listenerCount=KD;function KD(e){var t=this._events;if(t!==void 0){var r=t[e];if(typeof r=="function")return 1;if(r!==void 0)return r.length}return 0}xt.prototype.eventNames=function(){return this._eventsCount>0?O0(this._events):[]};function XD(e,t){for(var r=new Array(t),n=0;n<t;++n)r[n]=e[n];return r}function $Z(e,t){for(;t+1<e.length;t++)e[t]=e[t+1];e.pop()}function e$(e){for(var t=new Array(e.length),r=0;r<t.length;++r)t[r]=e[r].listener||e[r];return t}function t$(e,t){return new Promise(function(r,n){function i(o){e.removeListener(t,s),n(o)}function s(){typeof e.removeListener=="function"&&e.removeListener("error",i),r([].slice.call(arguments))}ZD(e,t,s,{once:!0}),t!=="error"&&r$(e,i,{once:!0})})}function r$(e,t,r){typeof e.on=="function"&&ZD(e,"error",t,r)}function ZD(e,t,r,n){if(typeof e.on=="function")n.once?e.once(t,r):e.on(t,r);else if(typeof e.addEventListener=="function")e.addEventListener(t,function i(s){n.once&&e.removeEventListener(t,i),r(s)});else throw new TypeError('The "emitter" argument must be of type EventEmitter. Received type '+typeof e)}});var tT=x((nRe,eT)=>{"use strict";function Vs(e){if(typeof e!="string")throw new TypeError("Path must be a string. Received "+JSON.stringify(e))}function $D(e,t){for(var r="",n=0,i=-1,s=0,o,a=0;a<=e.length;++a){if(a<e.length)o=e.charCodeAt(a);else{if(o===47)break;o=47}if(o===47){if(!(i===a-1||s===1))if(i!==a-1&&s===2){if(r.length<2||n!==2||r.charCodeAt(r.length-1)!==46||r.charCodeAt(r.length-2)!==46){if(r.length>2){var A=r.lastIndexOf("/");if(A!==r.length-1){A===-1?(r="",n=0):(r=r.slice(0,A),n=r.length-1-r.lastIndexOf("/")),i=a,s=0;continue}}else if(r.length===2||r.length===1){r="",n=0,i=a,s=0;continue}}t&&(r.length>0?r+="/..":r="..",n=2)}else r.length>0?r+="/"+e.slice(i+1,a):r=e.slice(i+1,a),n=a-i-1;i=a,s=0}else o===46&&s!==-1?++s:s=-1}return r}function n$(e,t){var r=t.dir||t.root,n=t.base||(t.name||"")+(t.ext||"");return r?r===t.root?r+n:r+e+n:n}var Vu={resolve:function(){for(var t="",r=!1,n,i=arguments.length-1;i>=-1&&!r;i--){var s;i>=0?s=arguments[i]:(n===void 0&&(n=process.cwd()),s=n),Vs(s),s.length!==0&&(t=s+"/"+t,r=s.charCodeAt(0)===47)}return t=$D(t,!r),r?t.length>0?"/"+t:"/":t.length>0?t:"."},normalize:function(t){if(Vs(t),t.length===0)return".";var r=t.charCodeAt(0)===47,n=t.charCodeAt(t.length-1)===47;return t=$D(t,!r),t.length===0&&!r&&(t="."),t.length>0&&n&&(t+="/"),r?"/"+t:t},isAbsolute:function(t){return Vs(t),t.length>0&&t.charCodeAt(0)===47},join:function(){if(arguments.length===0)return".";for(var t,r=0;r<arguments.length;++r){var n=arguments[r];Vs(n),n.length>0&&(t===void 0?t=n:t+="/"+n)}return t===void 0?".":Vu.normalize(t)},relative:function(t,r){if(Vs(t),Vs(r),t===r||(t=Vu.resolve(t),r=Vu.resolve(r),t===r))return"";for(var n=1;n<t.length&&t.charCodeAt(n)===47;++n);for(var i=t.length,s=i-n,o=1;o<r.length&&r.charCodeAt(o)===47;++o);for(var a=r.length,A=a-o,f=s<A?s:A,l=-1,p=0;p<=f;++p){if(p===f){if(A>f){if(r.charCodeAt(o+p)===47)return r.slice(o+p+1);if(p===0)return r.slice(o+p)}else s>f&&(t.charCodeAt(n+p)===47?l=p:p===0&&(l=0));break}var B=t.charCodeAt(n+p),S=r.charCodeAt(o+p);if(B!==S)break;B===47&&(l=p)}var _="";for(p=n+l+1;p<=i;++p)(p===i||t.charCodeAt(p)===47)&&(_.length===0?_+="..":_+="/..");return _.length>0?_+r.slice(o+l):(o+=l,r.charCodeAt(o)===47&&++o,r.slice(o))},_makeLong:function(t){return t},dirname:function(t){if(Vs(t),t.length===0)return".";for(var r=t.charCodeAt(0),n=r===47,i=-1,s=!0,o=t.length-1;o>=1;--o)if(r=t.charCodeAt(o),r===47){if(!s){i=o;break}}else s=!1;return i===-1?n?"/":".":n&&i===1?"//":t.slice(0,i)},basename:function(t,r){if(r!==void 0&&typeof r!="string")throw new TypeError('"ext" argument must be a string');Vs(t);var n=0,i=-1,s=!0,o;if(r!==void 0&&r.length>0&&r.length<=t.length){if(r.length===t.length&&r===t)return"";var a=r.length-1,A=-1;for(o=t.length-1;o>=0;--o){var f=t.charCodeAt(o);if(f===47){if(!s){n=o+1;break}}else A===-1&&(s=!1,A=o+1),a>=0&&(f===r.charCodeAt(a)?--a===-1&&(i=o):(a=-1,i=A))}return n===i?i=A:i===-1&&(i=t.length),t.slice(n,i)}else{for(o=t.length-1;o>=0;--o)if(t.charCodeAt(o)===47){if(!s){n=o+1;break}}else i===-1&&(s=!1,i=o+1);return i===-1?"":t.slice(n,i)}},extname:function(t){Vs(t);for(var r=-1,n=0,i=-1,s=!0,o=0,a=t.length-1;a>=0;--a){var A=t.charCodeAt(a);if(A===47){if(!s){n=a+1;break}continue}i===-1&&(s=!1,i=a+1),A===46?r===-1?r=a:o!==1&&(o=1):r!==-1&&(o=-1)}return r===-1||i===-1||o===0||o===1&&r===i-1&&r===n+1?"":t.slice(r,i)},format:function(t){if(t===null||typeof t!="object")throw new TypeError('The "pathObject" argument must be of type Object. Received type '+typeof t);return n$("/",t)},parse:function(t){Vs(t);var r={root:"",dir:"",base:"",ext:"",name:""};if(t.length===0)return r;var n=t.charCodeAt(0),i=n===47,s;i?(r.root="/",s=1):s=0;for(var o=-1,a=0,A=-1,f=!0,l=t.length-1,p=0;l>=s;--l){if(n=t.charCodeAt(l),n===47){if(!f){a=l+1;break}continue}A===-1&&(f=!1,A=l+1),n===46?o===-1?o=l:p!==1&&(p=1):o!==-1&&(p=-1)}return o===-1||A===-1||p===0||p===1&&o===A-1&&o===a+1?A!==-1&&(a===0&&i?r.base=r.name=t.slice(1,A):r.base=r.name=t.slice(a,A)):(a===0&&i?(r.name=t.slice(1,o),r.base=t.slice(1,A)):(r.name=t.slice(a,o),r.base=t.slice(a,A)),r.ext=t.slice(o,A)),a>0?r.dir=t.slice(0,a-1):i&&(r.dir="/"),r},sep:"/",delimiter:":",win32:null,posix:null};Vu.posix=Vu;eT.exports=Vu});var VI=x((Ju,ju)=>{(function(e){var t=typeof Ju=="object"&&Ju&&!Ju.nodeType&&Ju,r=typeof ju=="object"&&ju&&!ju.nodeType&&ju,n=typeof globalThis=="object"&&globalThis;(n.global===n||n.window===n||n.self===n)&&(e=n);var i,s=2147483647,o=36,a=1,A=26,f=38,l=700,p=72,B=128,S="-",_=/^xn--/,N=/[^\x20-\x7E]/,P=/[\x2E\u3002\uFF0E\uFF61]/g,U={overflow:"Overflow: input needs wider integers to process","not-basic":"Illegal input >= 0x80 (not a basic code point)","invalid-input":"Invalid input"},G=o-a,Y=Math.floor,Z=String.fromCharCode,ee;function j(C){throw new RangeError(U[C])}function se(C,h){for(var D=C.length,M=[];D--;)M[D]=h(C[D]);return M}function ie(C,h){var D=C.split("@"),M="";D.length>1&&(M=D[0]+"@",C=D[1]),C=C.replace(P,".");var I=C.split("."),k=se(I,h).join(".");return M+k}function ce(C){for(var h=[],D=0,M=C.length,I,k;D<M;)I=C.charCodeAt(D++),I>=55296&&I<=56319&&D<M?(k=C.charCodeAt(D++),(k&64512)==56320?h.push(((I&1023)<<10)+(k&1023)+65536):(h.push(I),D--)):h.push(I);return h}function H(C){return se(C,function(h){var D="";return h>65535&&(h-=65536,D+=Z(h>>>10&1023|55296),h=56320|h&1023),D+=Z(h),D}).join("")}function E(C){return C-48<10?C-22:C-65<26?C-65:C-97<26?C-97:o}function v(C,h){return C+22+75*(C<26)-((h!=0)<<5)}function b(C,h,D){var M=0;for(C=D?Y(C/l):C>>1,C+=Y(C/h);C>G*A>>1;M+=o)C=Y(C/G);return Y(M+(G+1)*C/(C+f))}function c(C){var h=[],D=C.length,M,I=0,k=B,ne=p,Ae,ue,pe,he,de,wt,Ie,be,yr;for(Ae=C.lastIndexOf(S),Ae<0&&(Ae=0),ue=0;ue<Ae;++ue)C.charCodeAt(ue)>=128&&j("not-basic"),h.push(C.charCodeAt(ue));for(pe=Ae>0?Ae+1:0;pe<D;){for(he=I,de=1,wt=o;pe>=D&&j("invalid-input"),Ie=E(C.charCodeAt(pe++)),(Ie>=o||Ie>Y((s-I)/de))&&j("overflow"),I+=Ie*de,be=wt<=ne?a:wt>=ne+A?A:wt-ne,!(Ie<be);wt+=o)yr=o-be,de>Y(s/yr)&&j("overflow"),de*=yr;M=h.length+1,ne=b(I-he,M,he==0),Y(I/M)>s-k&&j("overflow"),k+=Y(I/M),I%=M,h.splice(I++,0,k)}return H(h)}function g(C){var h,D,M,I,k,ne,Ae,ue,pe,he,de,wt=[],Ie,be,yr,we;for(C=ce(C),Ie=C.length,h=B,D=0,k=p,ne=0;ne<Ie;++ne)de=C[ne],de<128&&wt.push(Z(de));for(M=I=wt.length,I&&wt.push(S);M<Ie;){for(Ae=s,ne=0;ne<Ie;++ne)de=C[ne],de>=h&&de<Ae&&(Ae=de);for(be=M+1,Ae-h>Y((s-D)/be)&&j("overflow"),D+=(Ae-h)*be,h=Ae,ne=0;ne<Ie;++ne)if(de=C[ne],de<h&&++D>s&&j("overflow"),de==h){for(ue=D,pe=o;he=pe<=k?a:pe>=k+A?A:pe-k,!(ue<he);pe+=o)we=ue-he,yr=o-he,wt.push(Z(v(he+we%yr,0))),ue=Y(we/yr);wt.push(Z(v(ue,0))),k=b(D,be,M==I),D=0,++M}++D,++h}return wt.join("")}function w(C){return ie(C,function(h){return _.test(h)?c(h.slice(4).toLowerCase()):h})}function R(C){return ie(C,function(h){return N.test(h)?"xn--"+g(h):h})}if(i={version:"1.4.1",ucs2:{decode:ce,encode:H},decode:c,encode:g,toASCII:R,toUnicode:w},typeof define=="function"&&typeof define.amd=="object"&&define.amd)define("punycode",function(){return i});else if(t&&r)if(ju.exports==t)r.exports=i;else for(ee in i)i.hasOwnProperty(ee)&&(t[ee]=i[ee]);else e.punycode=i})(Ju)});var nT=x((iRe,rT)=>{"use strict";function i$(e,t){return Object.prototype.hasOwnProperty.call(e,t)}rT.exports=function(e,t,r,n){t=t||"&",r=r||"=";var i={};if(typeof e!="string"||e.length===0)return i;var s=/\+/g;e=e.split(t);var o=1e3;n&&typeof n.maxKeys=="number"&&(o=n.maxKeys);var a=e.length;o>0&&a>o&&(a=o);for(var A=0;A<a;++A){var f=e[A].replace(s,"%20"),l=f.indexOf(r),p,B,S,_;l>=0?(p=f.substr(0,l),B=f.substr(l+1)):(p=f,B=""),S=decodeURIComponent(p),_=decodeURIComponent(B),i$(i,S)?s$(i[S])?i[S].push(_):i[S]=[i[S],_]:i[S]=_}return i};var s$=Array.isArray||function(e){return Object.prototype.toString.call(e)==="[object Array]"}});var oT=x((sRe,sT)=>{"use strict";var ih=function(e){switch(typeof e){case"string":return e;case"boolean":return e?"true":"false";case"number":return isFinite(e)?e:"";default:return""}};sT.exports=function(e,t,r,n){return t=t||"&",r=r||"=",e===null&&(e=void 0),typeof e=="object"?iT(a$(e),function(i){var s=encodeURIComponent(ih(i))+r;return o$(e[i])?iT(e[i],function(o){return s+encodeURIComponent(ih(o))}).join(t):s+encodeURIComponent(ih(e[i]))}).join(t):n?encodeURIComponent(ih(n))+r+encodeURIComponent(ih(e)):""};var o$=Array.isArray||function(e){return Object.prototype.toString.call(e)==="[object Array]"};function iT(e,t){if(e.map)return e.map(t);for(var r=[],n=0;n<e.length;n++)r.push(t(e[n],n));return r}var a$=Object.keys||function(e){var t=[];for(var r in e)Object.prototype.hasOwnProperty.call(e,r)&&t.push(r);return t}});var JI=x(sh=>{"use strict";sh.decode=sh.parse=nT();sh.encode=sh.stringify=oT()});var q0={};MI(q0,{decode:()=>ja.decode,default:()=>A$,encode:()=>ja.encode,escape:()=>aT,parse:()=>ja.parse,stringify:()=>ja.stringify,unescape:()=>AT});function aT(e){return encodeURIComponent(e)}function AT(e){return decodeURIComponent(e)}var Ja,ja,A$,jI=QD(()=>{Ja=hr(JI(),1),ja=hr(JI(),1);A$={decode:Ja.decode,encode:Ja.encode,parse:Ja.parse,stringify:Ja.stringify,escape:aT,unescape:AT}});var ze=x((aRe,zI)=>{typeof Object.create=="function"?zI.exports=function(t,r){r&&(t.super_=r,t.prototype=Object.create(r.prototype,{constructor:{value:t,enumerable:!1,writable:!0,configurable:!0}}))}:zI.exports=function(t,r){if(r){t.super_=r;var n=function(){};n.prototype=r.prototype,t.prototype=new n,t.prototype.constructor=t}}});var KI=x((ARe,fT)=>{fT.exports=Zi().EventEmitter});var G0=x((fRe,uT)=>{"use strict";uT.exports=function(){if(typeof Symbol!="function"||typeof Object.getOwnPropertySymbols!="function")return!1;if(typeof Symbol.iterator=="symbol")return!0;var t={},r=Symbol("test"),n=Object(r);if(typeof r=="string"||Object.prototype.toString.call(r)!=="[object Symbol]"||Object.prototype.toString.call(n)!=="[object Symbol]")return!1;var i=42;t[r]=i;for(var s in t)return!1;if(typeof Object.keys=="function"&&Object.keys(t).length!==0||typeof Object.getOwnPropertyNames=="function"&&Object.getOwnPropertyNames(t).length!==0)return!1;var o=Object.getOwnPropertySymbols(t);if(o.length!==1||o[0]!==r||!Object.prototype.propertyIsEnumerable.call(t,r))return!1;if(typeof Object.getOwnPropertyDescriptor=="function"){var a=Object.getOwnPropertyDescriptor(t,r);if(a.value!==i||a.enumerable!==!0)return!1}return!0}});var oh=x((uRe,cT)=>{"use strict";var f$=G0();cT.exports=function(){return f$()&&!!Symbol.toStringTag}});var Y0=x((cRe,lT)=>{"use strict";lT.exports=Object});var dT=x((lRe,hT)=>{"use strict";hT.exports=Error});var pT=x((hRe,gT)=>{"use strict";gT.exports=EvalError});var yT=x((dRe,ET)=>{"use strict";ET.exports=RangeError});var BT=x((gRe,mT)=>{"use strict";mT.exports=ReferenceError});var XI=x((pRe,IT)=>{"use strict";IT.exports=SyntaxError});var $i=x((ERe,bT)=>{"use strict";bT.exports=TypeError});var QT=x((yRe,CT)=>{"use strict";CT.exports=URIError});var ST=x((mRe,wT)=>{"use strict";wT.exports=Math.abs});var vT=x((BRe,_T)=>{"use strict";_T.exports=Math.floor});var DT=x((IRe,RT)=>{"use strict";RT.exports=Math.max});var NT=x((bRe,TT)=>{"use strict";TT.exports=Math.min});var FT=x((CRe,MT)=>{"use strict";MT.exports=Math.pow});var xT=x((QRe,kT)=>{"use strict";kT.exports=Math.round});var LT=x((wRe,UT)=>{"use strict";UT.exports=Number.isNaN||function(t){return t!==t}});var OT=x((SRe,PT)=>{"use strict";var u$=LT();PT.exports=function(t){return u$(t)||t===0?t:t<0?-1:1}});var qT=x((_Re,HT)=>{"use strict";HT.exports=Object.getOwnPropertyDescriptor});var $A=x((vRe,GT)=>{"use strict";var W0=qT();if(W0)try{W0([],"length")}catch{W0=null}GT.exports=W0});var ah=x((RRe,YT)=>{"use strict";var V0=Object.defineProperty||!1;if(V0)try{V0({},"a",{value:1})}catch{V0=!1}YT.exports=V0});var JT=x((DRe,VT)=>{"use strict";var WT=typeof Symbol<"u"&&Symbol,c$=G0();VT.exports=function(){return typeof WT!="function"||typeof Symbol!="function"||typeof WT("foo")!="symbol"||typeof Symbol("bar")!="symbol"?!1:c$()}});var ZI=x((TRe,jT)=>{"use strict";jT.exports=typeof Reflect<"u"&&Reflect.getPrototypeOf||null});var $I=x((NRe,zT)=>{"use strict";var l$=Y0();zT.exports=l$.getPrototypeOf||null});var ZT=x((MRe,XT)=>{"use strict";var h$="Function.prototype.bind called on incompatible ",d$=Object.prototype.toString,g$=Math.max,p$="[object Function]",KT=function(t,r){for(var n=[],i=0;i<t.length;i+=1)n[i]=t[i];for(var s=0;s<r.length;s+=1)n[s+t.length]=r[s];return n},E$=function(t,r){for(var n=[],i=r||0,s=0;i<t.length;i+=1,s+=1)n[s]=t[i];return n},y$=function(e,t){for(var r="",n=0;n<e.length;n+=1)r+=e[n],n+1<e.length&&(r+=t);return r};XT.exports=function(t){var r=this;if(typeof r!="function"||d$.apply(r)!==p$)throw new TypeError(h$+r);for(var n=E$(arguments,1),i,s=function(){if(this instanceof i){var l=r.apply(this,KT(n,arguments));return Object(l)===l?l:this}return r.apply(t,KT(n,arguments))},o=g$(0,r.length-n.length),a=[],A=0;A<o;A++)a[A]="$"+A;if(i=Function("binder","return function ("+y$(a,",")+"){ return binder.apply(this,arguments); }")(s),r.prototype){var f=function(){};f.prototype=r.prototype,i.prototype=new f,f.prototype=null}return i}});var zu=x((FRe,$T)=>{"use strict";var m$=ZT();$T.exports=Function.prototype.bind||m$});var J0=x((kRe,eN)=>{"use strict";eN.exports=Function.prototype.call});var j0=x((xRe,tN)=>{"use strict";tN.exports=Function.prototype.apply});var nN=x((URe,rN)=>{"use strict";rN.exports=typeof Reflect<"u"&&Reflect&&Reflect.apply});var eb=x((LRe,iN)=>{"use strict";var B$=zu(),I$=j0(),b$=J0(),C$=nN();iN.exports=C$||B$.call(b$,I$)});var z0=x((PRe,sN)=>{"use strict";var Q$=zu(),w$=$i(),S$=J0(),_$=eb();sN.exports=function(t){if(t.length<1||typeof t[0]!="function")throw new w$("a function is required");return _$(Q$,S$,t)}});var cN=x((ORe,uN)=>{"use strict";var v$=z0(),oN=$A(),AN;try{AN=[].__proto__===Array.prototype}catch(e){if(!e||typeof e!="object"||!("code"in e)||e.code!=="ERR_PROTO_ACCESS")throw e}var tb=!!AN&&oN&&oN(Object.prototype,"__proto__"),fN=Object,aN=fN.getPrototypeOf;uN.exports=tb&&typeof tb.get=="function"?v$([tb.get]):typeof aN=="function"?function(t){return aN(t==null?t:fN(t))}:!1});var K0=x((HRe,gN)=>{"use strict";var lN=ZI(),hN=$I(),dN=cN();gN.exports=lN?function(t){return lN(t)}:hN?function(t){if(!t||typeof t!="object"&&typeof t!="function")throw new TypeError("getProto: not an object");return hN(t)}:dN?function(t){return dN(t)}:null});var rb=x((qRe,pN)=>{"use strict";var R$=Function.prototype.call,D$=Object.prototype.hasOwnProperty,T$=zu();pN.exports=T$.call(R$,D$)});var ec=x((GRe,bN)=>{"use strict";var gt,N$=Y0(),M$=dT(),F$=pT(),k$=yT(),x$=BT(),$u=XI(),Zu=$i(),U$=QT(),L$=ST(),P$=vT(),O$=DT(),H$=NT(),q$=FT(),G$=xT(),Y$=OT(),BN=Function,nb=function(e){try{return BN('"use strict"; return ('+e+").constructor;")()}catch{}},Ah=$A(),W$=ah(),ib=function(){throw new Zu},V$=Ah?(function(){try{return arguments.callee,ib}catch{try{return Ah(arguments,"callee").get}catch{return ib}}})():ib,Ku=JT()(),Tr=K0(),J$=$I(),j$=ZI(),IN=j0(),fh=J0(),Xu={},z$=typeof Uint8Array>"u"||!Tr?gt:Tr(Uint8Array),ef={__proto__:null,"%AggregateError%":typeof AggregateError>"u"?gt:AggregateError,"%Array%":Array,"%ArrayBuffer%":typeof ArrayBuffer>"u"?gt:ArrayBuffer,"%ArrayIteratorPrototype%":Ku&&Tr?Tr([][Symbol.iterator]()):gt,"%AsyncFromSyncIteratorPrototype%":gt,"%AsyncFunction%":Xu,"%AsyncGenerator%":Xu,"%AsyncGeneratorFunction%":Xu,"%AsyncIteratorPrototype%":Xu,"%Atomics%":typeof Atomics>"u"?gt:Atomics,"%BigInt%":typeof BigInt>"u"?gt:BigInt,"%BigInt64Array%":typeof BigInt64Array>"u"?gt:BigInt64Array,"%BigUint64Array%":typeof BigUint64Array>"u"?gt:BigUint64Array,"%Boolean%":Boolean,"%DataView%":typeof DataView>"u"?gt:DataView,"%Date%":Date,"%decodeURI%":decodeURI,"%decodeURIComponent%":decodeURIComponent,"%encodeURI%":encodeURI,"%encodeURIComponent%":encodeURIComponent,"%Error%":M$,"%eval%":eval,"%EvalError%":F$,"%Float16Array%":typeof Float16Array>"u"?gt:Float16Array,"%Float32Array%":typeof Float32Array>"u"?gt:Float32Array,"%Float64Array%":typeof Float64Array>"u"?gt:Float64Array,"%FinalizationRegistry%":typeof FinalizationRegistry>"u"?gt:FinalizationRegistry,"%Function%":BN,"%GeneratorFunction%":Xu,"%Int8Array%":typeof Int8Array>"u"?gt:Int8Array,"%Int16Array%":typeof Int16Array>"u"?gt:Int16Array,"%Int32Array%":typeof Int32Array>"u"?gt:Int32Array,"%isFinite%":isFinite,"%isNaN%":isNaN,"%IteratorPrototype%":Ku&&Tr?Tr(Tr([][Symbol.iterator]())):gt,"%JSON%":typeof JSON=="object"?JSON:gt,"%Map%":typeof Map>"u"?gt:Map,"%MapIteratorPrototype%":typeof Map>"u"||!Ku||!Tr?gt:Tr(new Map()[Symbol.iterator]()),"%Math%":Math,"%Number%":Number,"%Object%":N$,"%Object.getOwnPropertyDescriptor%":Ah,"%parseFloat%":parseFloat,"%parseInt%":parseInt,"%Promise%":typeof Promise>"u"?gt:Promise,"%Proxy%":typeof Proxy>"u"?gt:Proxy,"%RangeError%":k$,"%ReferenceError%":x$,"%Reflect%":typeof Reflect>"u"?gt:Reflect,"%RegExp%":RegExp,"%Set%":typeof Set>"u"?gt:Set,"%SetIteratorPrototype%":typeof Set>"u"||!Ku||!Tr?gt:Tr(new Set()[Symbol.iterator]()),"%SharedArrayBuffer%":typeof SharedArrayBuffer>"u"?gt:SharedArrayBuffer,"%String%":String,"%StringIteratorPrototype%":Ku&&Tr?Tr(""[Symbol.iterator]()):gt,"%Symbol%":Ku?Symbol:gt,"%SyntaxError%":$u,"%ThrowTypeError%":V$,"%TypedArray%":z$,"%TypeError%":Zu,"%Uint8Array%":typeof Uint8Array>"u"?gt:Uint8Array,"%Uint8ClampedArray%":typeof Uint8ClampedArray>"u"?gt:Uint8ClampedArray,"%Uint16Array%":typeof Uint16Array>"u"?gt:Uint16Array,"%Uint32Array%":typeof Uint32Array>"u"?gt:Uint32Array,"%URIError%":U$,"%WeakMap%":typeof WeakMap>"u"?gt:WeakMap,"%WeakRef%":typeof WeakRef>"u"?gt:WeakRef,"%WeakSet%":typeof WeakSet>"u"?gt:WeakSet,"%Function.prototype.call%":fh,"%Function.prototype.apply%":IN,"%Object.defineProperty%":W$,"%Object.getPrototypeOf%":J$,"%Math.abs%":L$,"%Math.floor%":P$,"%Math.max%":O$,"%Math.min%":H$,"%Math.pow%":q$,"%Math.round%":G$,"%Math.sign%":Y$,"%Reflect.getPrototypeOf%":j$};if(Tr)try{null.error}catch(e){EN=Tr(Tr(e)),ef["%Error.prototype%"]=EN}var EN,K$=function e(t){var r;if(t==="%AsyncFunction%")r=nb("async function () {}");else if(t==="%GeneratorFunction%")r=nb("function* () {}");else if(t==="%AsyncGeneratorFunction%")r=nb("async function* () {}");else if(t==="%AsyncGenerator%"){var n=e("%AsyncGeneratorFunction%");n&&(r=n.prototype)}else if(t==="%AsyncIteratorPrototype%"){var i=e("%AsyncGenerator%");i&&Tr&&(r=Tr(i.prototype))}return ef[t]=r,r},yN={__proto__:null,"%ArrayBufferPrototype%":["ArrayBuffer","prototype"],"%ArrayPrototype%":["Array","prototype"],"%ArrayProto_entries%":["Array","prototype","entries"],"%ArrayProto_forEach%":["Array","prototype","forEach"],"%ArrayProto_keys%":["Array","prototype","keys"],"%ArrayProto_values%":["Array","prototype","values"],"%AsyncFunctionPrototype%":["AsyncFunction","prototype"],"%AsyncGenerator%":["AsyncGeneratorFunction","prototype"],"%AsyncGeneratorPrototype%":["AsyncGeneratorFunction","prototype","prototype"],"%BooleanPrototype%":["Boolean","prototype"],"%DataViewPrototype%":["DataView","prototype"],"%DatePrototype%":["Date","prototype"],"%ErrorPrototype%":["Error","prototype"],"%EvalErrorPrototype%":["EvalError","prototype"],"%Float32ArrayPrototype%":["Float32Array","prototype"],"%Float64ArrayPrototype%":["Float64Array","prototype"],"%FunctionPrototype%":["Function","prototype"],"%Generator%":["GeneratorFunction","prototype"],"%GeneratorPrototype%":["GeneratorFunction","prototype","prototype"],"%Int8ArrayPrototype%":["Int8Array","prototype"],"%Int16ArrayPrototype%":["Int16Array","prototype"],"%Int32ArrayPrototype%":["Int32Array","prototype"],"%JSONParse%":["JSON","parse"],"%JSONStringify%":["JSON","stringify"],"%MapPrototype%":["Map","prototype"],"%NumberPrototype%":["Number","prototype"],"%ObjectPrototype%":["Object","prototype"],"%ObjProto_toString%":["Object","prototype","toString"],"%ObjProto_valueOf%":["Object","prototype","valueOf"],"%PromisePrototype%":["Promise","prototype"],"%PromiseProto_then%":["Promise","prototype","then"],"%Promise_all%":["Promise","all"],"%Promise_reject%":["Promise","reject"],"%Promise_resolve%":["Promise","resolve"],"%RangeErrorPrototype%":["RangeError","prototype"],"%ReferenceErrorPrototype%":["ReferenceError","prototype"],"%RegExpPrototype%":["RegExp","prototype"],"%SetPrototype%":["Set","prototype"],"%SharedArrayBufferPrototype%":["SharedArrayBuffer","prototype"],"%StringPrototype%":["String","prototype"],"%SymbolPrototype%":["Symbol","prototype"],"%SyntaxErrorPrototype%":["SyntaxError","prototype"],"%TypedArrayPrototype%":["TypedArray","prototype"],"%TypeErrorPrototype%":["TypeError","prototype"],"%Uint8ArrayPrototype%":["Uint8Array","prototype"],"%Uint8ClampedArrayPrototype%":["Uint8ClampedArray","prototype"],"%Uint16ArrayPrototype%":["Uint16Array","prototype"],"%Uint32ArrayPrototype%":["Uint32Array","prototype"],"%URIErrorPrototype%":["URIError","prototype"],"%WeakMapPrototype%":["WeakMap","prototype"],"%WeakSetPrototype%":["WeakSet","prototype"]},uh=zu(),X0=rb(),X$=uh.call(fh,Array.prototype.concat),Z$=uh.call(IN,Array.prototype.splice),mN=uh.call(fh,String.prototype.replace),Z0=uh.call(fh,String.prototype.slice),$$=uh.call(fh,RegExp.prototype.exec),eee=/[^%.[\]]+|\[(?:(-?\d+(?:\.\d+)?)|(["'])((?:(?!\2)[^\\]|\\.)*?)\2)\]|(?=(?:\.|\[\])(?:\.|\[\]|%$))/g,tee=/\\(\\)?/g,ree=function(t){var r=Z0(t,0,1),n=Z0(t,-1);if(r==="%"&&n!=="%")throw new $u("invalid intrinsic syntax, expected closing `%`");if(n==="%"&&r!=="%")throw new $u("invalid intrinsic syntax, expected opening `%`");var i=[];return mN(t,eee,function(s,o,a,A){i[i.length]=a?mN(A,tee,"$1"):o||s}),i},nee=function(t,r){var n=t,i;if(X0(yN,n)&&(i=yN[n],n="%"+i[0]+"%"),X0(ef,n)){var s=ef[n];if(s===Xu&&(s=K$(n)),typeof s>"u"&&!r)throw new Zu("intrinsic "+t+" exists, but is not available. Please file an issue!");return{alias:i,name:n,value:s}}throw new $u("intrinsic "+t+" does not exist!")};bN.exports=function(t,r){if(typeof t!="string"||t.length===0)throw new Zu("intrinsic name must be a non-empty string");if(arguments.length>1&&typeof r!="boolean")throw new Zu('"allowMissing" argument must be a boolean');if($$(/^%?[^%]*%?$/,t)===null)throw new $u("`%` may not be present anywhere but at the beginning and end of the intrinsic name");var n=ree(t),i=n.length>0?n[0]:"",s=nee("%"+i+"%",r),o=s.name,a=s.value,A=!1,f=s.alias;f&&(i=f[0],Z$(n,X$([0,1],f)));for(var l=1,p=!0;l<n.length;l+=1){var B=n[l],S=Z0(B,0,1),_=Z0(B,-1);if((S==='"'||S==="'"||S==="`"||_==='"'||_==="'"||_==="`")&&S!==_)throw new $u("property names with quotes must have matching quotes");if((B==="constructor"||!p)&&(A=!0),i+="."+B,o="%"+i+"%",X0(ef,o))a=ef[o];else if(a!=null){if(!(B in a)){if(!r)throw new Zu("base intrinsic for "+t+" exists, but the property is not available.");return}if(Ah&&l+1>=n.length){var N=Ah(a,B);p=!!N,p&&"get"in N&&!("originalValue"in N.get)?a=N.get:a=a[B]}else p=X0(a,B),a=a[B];p&&!A&&(ef[o]=a)}}return a}});var Js=x((YRe,wN)=>{"use strict";var CN=ec(),QN=z0(),iee=QN([CN("%String.prototype.indexOf%")]);wN.exports=function(t,r){var n=CN(t,!!r);return typeof n=="function"&&iee(t,".prototype.")>-1?QN([n]):n}});var vN=x((WRe,_N)=>{"use strict";var see=oh()(),oee=Js(),sb=oee("Object.prototype.toString"),$0=function(t){return see&&t&&typeof t=="object"&&Symbol.toStringTag in t?!1:sb(t)==="[object Arguments]"},SN=function(t){return $0(t)?!0:t!==null&&typeof t=="object"&&"length"in t&&typeof t.length=="number"&&t.length>=0&&sb(t)!=="[object Array]"&&"callee"in t&&sb(t.callee)==="[object Function]"},aee=(function(){return $0(arguments)})();$0.isLegacyArguments=SN;_N.exports=aee?$0:SN});var FN=x((VRe,MN)=>{"use strict";var RN=Js(),Aee=oh()(),fee=rb(),uee=$A(),Ab;Aee?(DN=RN("RegExp.prototype.exec"),ob={},ep=function(){throw ob},ab={toString:ep,valueOf:ep},typeof Symbol.toPrimitive=="symbol"&&(ab[Symbol.toPrimitive]=ep),Ab=function(t){if(!t||typeof t!="object")return!1;var r=uee(t,"lastIndex"),n=r&&fee(r,"value");if(!n)return!1;try{DN(t,ab)}catch(i){return i===ob}}):(TN=RN("Object.prototype.toString"),NN="[object RegExp]",Ab=function(t){return!t||typeof t!="object"&&typeof t!="function"?!1:TN(t)===NN});var DN,ob,ep,ab,TN,NN;MN.exports=Ab});var xN=x((JRe,kN)=>{"use strict";var cee=Js(),lee=FN(),hee=cee("RegExp.prototype.exec"),dee=$i();kN.exports=function(t){if(!lee(t))throw new dee("`regex` must be a RegExp");return function(n){return hee(t,n)!==null}}});var LN=x((jRe,UN)=>{"use strict";var gee=function*(){}.constructor;UN.exports=()=>gee});var qN=x((zRe,HN)=>{"use strict";var ON=Js(),pee=xN(),Eee=pee(/^\s*(?:function)?\*/),yee=oh()(),PN=K0(),mee=ON("Object.prototype.toString"),Bee=ON("Function.prototype.toString"),Iee=LN();HN.exports=function(t){if(typeof t!="function")return!1;if(Eee(Bee(t)))return!0;if(!yee){var r=mee(t);return r==="[object GeneratorFunction]"}if(!PN)return!1;var n=Iee();return n&&PN(t)===n.prototype}});var VN=x((KRe,WN)=>{"use strict";var YN=Function.prototype.toString,tc=typeof Reflect=="object"&&Reflect!==null&&Reflect.apply,ub,tp;if(typeof tc=="function"&&typeof Object.defineProperty=="function")try{ub=Object.defineProperty({},"length",{get:function(){throw tp}}),tp={},tc(function(){throw 42},null,ub)}catch(e){e!==tp&&(tc=null)}else tc=null;var bee=/^\s*class\b/,cb=function(t){try{var r=YN.call(t);return bee.test(r)}catch{return!1}},fb=function(t){try{return cb(t)?!1:(YN.call(t),!0)}catch{return!1}},rp=Object.prototype.toString,Cee="[object Object]",Qee="[object Function]",wee="[object GeneratorFunction]",See="[object HTMLAllCollection]",_ee="[object HTML document.all class]",vee="[object HTMLCollection]",Ree=typeof Symbol=="function"&&!!Symbol.toStringTag,Dee=!(0 in[,]),lb=function(){return!1};typeof document=="object"&&(GN=document.all,rp.call(GN)===rp.call(document.all)&&(lb=function(t){if((Dee||!t)&&(typeof t>"u"||typeof t=="object"))try{var r=rp.call(t);return(r===See||r===_ee||r===vee||r===Cee)&&t("")==null}catch{}return!1}));var GN;WN.exports=tc?function(t){if(lb(t))return!0;if(!t||typeof t!="function"&&typeof t!="object")return!1;try{tc(t,null,ub)}catch(r){if(r!==tp)return!1}return!cb(t)&&fb(t)}:function(t){if(lb(t))return!0;if(!t||typeof t!="function"&&typeof t!="object")return!1;if(Ree)return fb(t);if(cb(t))return!1;var r=rp.call(t);return r!==Qee&&r!==wee&&!/^\[object HTML/.test(r)?!1:fb(t)}});var zN=x((XRe,jN)=>{"use strict";var Tee=VN(),Nee=Object.prototype.toString,JN=Object.prototype.hasOwnProperty,Mee=function(t,r,n){for(var i=0,s=t.length;i<s;i++)JN.call(t,i)&&(n==null?r(t[i],i,t):r.call(n,t[i],i,t))},Fee=function(t,r,n){for(var i=0,s=t.length;i<s;i++)n==null?r(t.charAt(i),i,t):r.call(n,t.charAt(i),i,t)},kee=function(t,r,n){for(var i in t)JN.call(t,i)&&(n==null?r(t[i],i,t):r.call(n,t[i],i,t))};function xee(e){return Nee.call(e)==="[object Array]"}jN.exports=function(t,r,n){if(!Tee(r))throw new TypeError("iterator must be a function");var i;arguments.length>=3&&(i=n),xee(t)?Mee(t,r,i):typeof t=="string"?Fee(t,r,i):kee(t,r,i)}});var XN=x((ZRe,KN)=>{"use strict";KN.exports=["Float16Array","Float32Array","Float64Array","Int8Array","Int16Array","Int32Array","Uint8Array","Uint8ClampedArray","Uint16Array","Uint32Array","BigInt64Array","BigUint64Array"]});var $N=x(($Re,ZN)=>{"use strict";var hb=XN(),Uee=globalThis;ZN.exports=function(){for(var t=[],r=0;r<hb.length;r++)typeof Uee[hb[r]]=="function"&&(t[t.length]=hb[r]);return t}});var db=x((eDe,rM)=>{"use strict";var eM=ah(),Lee=XI(),rc=$i(),tM=$A();rM.exports=function(t,r,n){if(!t||typeof t!="object"&&typeof t!="function")throw new rc("`obj` must be an object or a function`");if(typeof r!="string"&&typeof r!="symbol")throw new rc("`property` must be a string or a symbol`");if(arguments.length>3&&typeof arguments[3]!="boolean"&&arguments[3]!==null)throw new rc("`nonEnumerable`, if provided, must be a boolean or null");if(arguments.length>4&&typeof arguments[4]!="boolean"&&arguments[4]!==null)throw new rc("`nonWritable`, if provided, must be a boolean or null");if(arguments.length>5&&typeof arguments[5]!="boolean"&&arguments[5]!==null)throw new rc("`nonConfigurable`, if provided, must be a boolean or null");if(arguments.length>6&&typeof arguments[6]!="boolean")throw new rc("`loose`, if provided, must be a boolean");var i=arguments.length>3?arguments[3]:null,s=arguments.length>4?arguments[4]:null,o=arguments.length>5?arguments[5]:null,a=arguments.length>6?arguments[6]:!1,A=!!tM&&tM(t,r);if(eM)eM(t,r,{configurable:o===null&&A?A.configurable:!o,enumerable:i===null&&A?A.enumerable:!i,value:n,writable:s===null&&A?A.writable:!s});else if(a||!i&&!s&&!o)t[r]=n;else throw new Lee("This environment does not support defining a property as non-configurable, non-writable, or non-enumerable.")}});var pb=x((tDe,iM)=>{"use strict";var gb=ah(),nM=function(){return!!gb};nM.hasArrayLengthDefineBug=function(){if(!gb)return null;try{return gb([],"length",{value:1}).length!==1}catch{return!0}};iM.exports=nM});var fM=x((rDe,AM)=>{"use strict";var Pee=ec(),sM=db(),Oee=pb()(),oM=$A(),aM=$i(),Hee=Pee("%Math.floor%");AM.exports=function(t,r){if(typeof t!="function")throw new aM("`fn` is not a function");if(typeof r!="number"||r<0||r>4294967295||Hee(r)!==r)throw new aM("`length` must be a positive 32-bit integer");var n=arguments.length>2&&!!arguments[2],i=!0,s=!0;if("length"in t&&oM){var o=oM(t,"length");o&&!o.configurable&&(i=!1),o&&!o.writable&&(s=!1)}return(i||s||!n)&&(Oee?sM(t,"length",r,!0,!0):sM(t,"length",r)),t}});var cM=x((nDe,uM)=>{"use strict";var qee=zu(),Gee=j0(),Yee=eb();uM.exports=function(){return Yee(qee,Gee,arguments)}});var ch=x((iDe,np)=>{"use strict";var Wee=fM(),lM=ah(),Vee=z0(),hM=cM();np.exports=function(t){var r=Vee(arguments),n=t.length-(arguments.length-1);return Wee(r,1+(n>0?n:0),!0)};lM?lM(np.exports,"apply",{value:hM}):np.exports.apply=hM});var Bb=x((sDe,EM)=>{"use strict";var op=zN(),Jee=$N(),dM=ch(),yb=Js(),sp=$A(),ip=K0(),jee=yb("Object.prototype.toString"),pM=oh()(),gM=globalThis,Eb=Jee(),mb=yb("String.prototype.slice"),zee=yb("Array.prototype.indexOf",!0)||function(t,r){for(var n=0;n<t.length;n+=1)if(t[n]===r)return n;return-1},ap={__proto__:null};pM&&sp&&ip?op(Eb,function(e){var t=new gM[e];if(Symbol.toStringTag in t&&ip){var r=ip(t),n=sp(r,Symbol.toStringTag);if(!n&&r){var i=ip(r);n=sp(i,Symbol.toStringTag)}if(n&&n.get){var s=dM(n.get);ap["$"+e]=s}}}):op(Eb,function(e){var t=new gM[e],r=t.slice||t.set;if(r){var n=dM(r);ap["$"+e]=n}});var Kee=function(t){var r=!1;return op(ap,function(n,i){if(!r)try{"$"+n(t)===i&&(r=mb(i,1))}catch{}}),r},Xee=function(t){var r=!1;return op(ap,function(n,i){if(!r)try{n(t),r=mb(i,1)}catch{}}),r};EM.exports=function(t){if(!t||typeof t!="object")return!1;if(!pM){var r=mb(jee(t),8,-1);return zee(Eb,r)>-1?r:r!=="Object"?!1:Xee(t)}return sp?Kee(t):null}});var Ib=x((oDe,yM)=>{"use strict";var Zee=Bb();yM.exports=function(t){return!!Zee(t)}});var NM=x(pt=>{"use strict";var $ee=vN(),ete=qN(),es=Bb(),mM=Ib();function nc(e){return e.call.bind(e)}var BM=typeof BigInt<"u",IM=typeof Symbol<"u",li=nc(Object.prototype.toString),tte=nc(Number.prototype.valueOf),rte=nc(String.prototype.valueOf),nte=nc(Boolean.prototype.valueOf);BM&&(bM=nc(BigInt.prototype.valueOf));var bM;IM&&(CM=nc(Symbol.prototype.valueOf));var CM;function hh(e,t){if(typeof e!="object")return!1;try{return t(e),!0}catch{return!1}}pt.isArgumentsObject=$ee;pt.isGeneratorFunction=ete;pt.isTypedArray=mM;function ite(e){return typeof Promise<"u"&&e instanceof Promise||e!==null&&typeof e=="object"&&typeof e.then=="function"&&typeof e.catch=="function"}pt.isPromise=ite;function ste(e){return typeof ArrayBuffer<"u"&&ArrayBuffer.isView?ArrayBuffer.isView(e):mM(e)||wM(e)}pt.isArrayBufferView=ste;function ote(e){return es(e)==="Uint8Array"}pt.isUint8Array=ote;function ate(e){return es(e)==="Uint8ClampedArray"}pt.isUint8ClampedArray=ate;function Ate(e){return es(e)==="Uint16Array"}pt.isUint16Array=Ate;function fte(e){return es(e)==="Uint32Array"}pt.isUint32Array=fte;function ute(e){return es(e)==="Int8Array"}pt.isInt8Array=ute;function cte(e){return es(e)==="Int16Array"}pt.isInt16Array=cte;function lte(e){return es(e)==="Int32Array"}pt.isInt32Array=lte;function hte(e){return es(e)==="Float32Array"}pt.isFloat32Array=hte;function dte(e){return es(e)==="Float64Array"}pt.isFloat64Array=dte;function gte(e){return es(e)==="BigInt64Array"}pt.isBigInt64Array=gte;function pte(e){return es(e)==="BigUint64Array"}pt.isBigUint64Array=pte;function Ap(e){return li(e)==="[object Map]"}Ap.working=typeof Map<"u"&&Ap(new Map);function Ete(e){return typeof Map>"u"?!1:Ap.working?Ap(e):e instanceof Map}pt.isMap=Ete;function fp(e){return li(e)==="[object Set]"}fp.working=typeof Set<"u"&&fp(new Set);function yte(e){return typeof Set>"u"?!1:fp.working?fp(e):e instanceof Set}pt.isSet=yte;function up(e){return li(e)==="[object WeakMap]"}up.working=typeof WeakMap<"u"&&up(new WeakMap);function mte(e){return typeof WeakMap>"u"?!1:up.working?up(e):e instanceof WeakMap}pt.isWeakMap=mte;function Cb(e){return li(e)==="[object WeakSet]"}Cb.working=typeof WeakSet<"u"&&Cb(new WeakSet);function Bte(e){return Cb(e)}pt.isWeakSet=Bte;function cp(e){return li(e)==="[object ArrayBuffer]"}cp.working=typeof ArrayBuffer<"u"&&cp(new ArrayBuffer);function QM(e){return typeof ArrayBuffer>"u"?!1:cp.working?cp(e):e instanceof ArrayBuffer}pt.isArrayBuffer=QM;function lp(e){return li(e)==="[object DataView]"}lp.working=typeof ArrayBuffer<"u"&&typeof DataView<"u"&&lp(new DataView(new ArrayBuffer(1),0,1));function wM(e){return typeof DataView>"u"?!1:lp.working?lp(e):e instanceof DataView}pt.isDataView=wM;var bb=typeof SharedArrayBuffer<"u"?SharedArrayBuffer:void 0;function lh(e){return li(e)==="[object SharedArrayBuffer]"}function SM(e){return typeof bb>"u"?!1:(typeof lh.working>"u"&&(lh.working=lh(new bb)),lh.working?lh(e):e instanceof bb)}pt.isSharedArrayBuffer=SM;function Ite(e){return li(e)==="[object AsyncFunction]"}pt.isAsyncFunction=Ite;function bte(e){return li(e)==="[object Map Iterator]"}pt.isMapIterator=bte;function Cte(e){return li(e)==="[object Set Iterator]"}pt.isSetIterator=Cte;function Qte(e){return li(e)==="[object Generator]"}pt.isGeneratorObject=Qte;function wte(e){return li(e)==="[object WebAssembly.Module]"}pt.isWebAssemblyCompiledModule=wte;function _M(e){return hh(e,tte)}pt.isNumberObject=_M;function vM(e){return hh(e,rte)}pt.isStringObject=vM;function RM(e){return hh(e,nte)}pt.isBooleanObject=RM;function DM(e){return BM&&hh(e,bM)}pt.isBigIntObject=DM;function TM(e){return IM&&hh(e,CM)}pt.isSymbolObject=TM;function Ste(e){return _M(e)||vM(e)||RM(e)||DM(e)||TM(e)}pt.isBoxedPrimitive=Ste;function _te(e){return typeof Uint8Array<"u"&&(QM(e)||SM(e))}pt.isAnyArrayBuffer=_te;["isProxy","isExternal","isModuleNamespaceObject"].forEach(function(e){Object.defineProperty(pt,e,{enumerable:!1,value:function(){return!1}})})});var FM=x((ADe,MM)=>{MM.exports=function(t){return t&&typeof t=="object"&&typeof t.copy=="function"&&typeof t.fill=="function"&&typeof t.readUInt8=="function"}});var Yr=x(Et=>{var kM=Object.getOwnPropertyDescriptors||function(t){for(var r=Object.keys(t),n={},i=0;i<r.length;i++)n[r[i]]=Object.getOwnPropertyDescriptor(t,r[i]);return n},vte=/%[sdj%]/g;Et.format=function(e){if(!mp(e)){for(var t=[],r=0;r<arguments.length;r++)t.push(za(arguments[r]));return t.join(" ")}for(var r=1,n=arguments,i=n.length,s=String(e).replace(vte,function(a){if(a==="%%")return"%";if(r>=i)return a;switch(a){case"%s":return String(n[r++]);case"%d":return Number(n[r++]);case"%j":try{return JSON.stringify(n[r++])}catch{return"[Circular]"}default:return a}}),o=n[r];r<i;o=n[++r])yp(o)||!ic(o)?s+=" "+o:s+=" "+za(o);return s};Et.deprecate=function(e,t){if(typeof process<"u"&&process.noDeprecation===!0)return e;if(typeof process>"u")return function(){return Et.deprecate(e,t).apply(this,arguments)};var r=!1;function n(){if(!r){if(process.throwDeprecation)throw new Error(t);process.traceDeprecation?console.trace(t):console.error(t),r=!0}return e.apply(this,arguments)}return n};var hp={},xM=/^$/;process.env.NODE_DEBUG&&(dp=process.env.NODE_DEBUG,dp=dp.replace(/[|\\{}()[\]^$+?.]/g,"\\$&").replace(/\*/g,".*").replace(/,/g,"$|^").toUpperCase(),xM=new RegExp("^"+dp+"$","i"));var dp;Et.debuglog=function(e){if(e=e.toUpperCase(),!hp[e])if(xM.test(e)){var t=process.pid;hp[e]=function(){var r=Et.format.apply(Et,arguments);console.error("%s %d: %s",e,t,r)}}else hp[e]=function(){};return hp[e]};function za(e,t){var r={seen:[],stylize:Dte};return arguments.length>=3&&(r.depth=arguments[2]),arguments.length>=4&&(r.colors=arguments[3]),_b(t)?r.showHidden=t:t&&Et._extend(r,t),rf(r.showHidden)&&(r.showHidden=!1),rf(r.depth)&&(r.depth=2),rf(r.colors)&&(r.colors=!1),rf(r.customInspect)&&(r.customInspect=!0),r.colors&&(r.stylize=Rte),pp(r,e,r.depth)}Et.inspect=za;za.colors={bold:[1,22],italic:[3,23],underline:[4,24],inverse:[7,27],white:[37,39],grey:[90,39],black:[30,39],blue:[34,39],cyan:[36,39],green:[32,39],magenta:[35,39],red:[31,39],yellow:[33,39]};za.styles={special:"cyan",number:"yellow",boolean:"yellow",undefined:"grey",null:"bold",string:"green",date:"magenta",regexp:"red"};function Rte(e,t){var r=za.styles[t];return r?"\x1B["+za.colors[r][0]+"m"+e+"\x1B["+za.colors[r][1]+"m":e}function Dte(e,t){return e}function Tte(e){var t={};return e.forEach(function(r,n){t[r]=!0}),t}function pp(e,t,r){if(e.customInspect&&t&&gp(t.inspect)&&t.inspect!==Et.inspect&&!(t.constructor&&t.constructor.prototype===t)){var n=t.inspect(r,e);return mp(n)||(n=pp(e,n,r)),n}var i=Nte(e,t);if(i)return i;var s=Object.keys(t),o=Tte(s);if(e.showHidden&&(s=Object.getOwnPropertyNames(t)),gh(t)&&(s.indexOf("message")>=0||s.indexOf("description")>=0))return Qb(t);if(s.length===0){if(gp(t)){var a=t.name?": "+t.name:"";return e.stylize("[Function"+a+"]","special")}if(dh(t))return e.stylize(RegExp.prototype.toString.call(t),"regexp");if(Ep(t))return e.stylize(Date.prototype.toString.call(t),"date");if(gh(t))return Qb(t)}var A="",f=!1,l=["{","}"];if(UM(t)&&(f=!0,l=["[","]"]),gp(t)){var p=t.name?": "+t.name:"";A=" [Function"+p+"]"}if(dh(t)&&(A=" "+RegExp.prototype.toString.call(t)),Ep(t)&&(A=" "+Date.prototype.toUTCString.call(t)),gh(t)&&(A=" "+Qb(t)),s.length===0&&(!f||t.length==0))return l[0]+A+l[1];if(r<0)return dh(t)?e.stylize(RegExp.prototype.toString.call(t),"regexp"):e.stylize("[Object]","special");e.seen.push(t);var B;return f?B=Mte(e,t,r,o,s):B=s.map(function(S){return Sb(e,t,r,o,S,f)}),e.seen.pop(),Fte(B,A,l)}function Nte(e,t){if(rf(t))return e.stylize("undefined","undefined");if(mp(t)){var r="'"+JSON.stringify(t).replace(/^"|"$/g,"").replace(/'/g,"\\'").replace(/\\"/g,'"')+"'";return e.stylize(r,"string")}if(LM(t))return e.stylize(""+t,"number");if(_b(t))return e.stylize(""+t,"boolean");if(yp(t))return e.stylize("null","null")}function Qb(e){return"["+Error.prototype.toString.call(e)+"]"}function Mte(e,t,r,n,i){for(var s=[],o=0,a=t.length;o<a;++o)PM(t,String(o))?s.push(Sb(e,t,r,n,String(o),!0)):s.push("");return i.forEach(function(A){A.match(/^\d+$/)||s.push(Sb(e,t,r,n,A,!0))}),s}function Sb(e,t,r,n,i,s){var o,a,A;if(A=Object.getOwnPropertyDescriptor(t,i)||{value:t[i]},A.get?A.set?a=e.stylize("[Getter/Setter]","special"):a=e.stylize("[Getter]","special"):A.set&&(a=e.stylize("[Setter]","special")),PM(n,i)||(o="["+i+"]"),a||(e.seen.indexOf(A.value)<0?(yp(r)?a=pp(e,A.value,null):a=pp(e,A.value,r-1),a.indexOf(`
-`)>-1&&(s?a=a.split(`
-`).map(function(f){return"  "+f}).join(`
-`).slice(2):a=`
-`+a.split(`
-`).map(function(f){return"   "+f}).join(`
-`))):a=e.stylize("[Circular]","special")),rf(o)){if(s&&i.match(/^\d+$/))return a;o=JSON.stringify(""+i),o.match(/^"([a-zA-Z_][a-zA-Z_0-9]*)"$/)?(o=o.slice(1,-1),o=e.stylize(o,"name")):(o=o.replace(/'/g,"\\'").replace(/\\"/g,'"').replace(/(^"|"$)/g,"'"),o=e.stylize(o,"string"))}return o+": "+a}function Fte(e,t,r){var n=0,i=e.reduce(function(s,o){return n++,o.indexOf(`
-`)>=0&&n++,s+o.replace(/\u001b\[\d\d?m/g,"").length+1},0);return i>60?r[0]+(t===""?"":t+`
- `)+" "+e.join(`,
-  `)+" "+r[1]:r[0]+t+" "+e.join(", ")+" "+r[1]}Et.types=NM();function UM(e){return Array.isArray(e)}Et.isArray=UM;function _b(e){return typeof e=="boolean"}Et.isBoolean=_b;function yp(e){return e===null}Et.isNull=yp;function kte(e){return e==null}Et.isNullOrUndefined=kte;function LM(e){return typeof e=="number"}Et.isNumber=LM;function mp(e){return typeof e=="string"}Et.isString=mp;function xte(e){return typeof e=="symbol"}Et.isSymbol=xte;function rf(e){return e===void 0}Et.isUndefined=rf;function dh(e){return ic(e)&&vb(e)==="[object RegExp]"}Et.isRegExp=dh;Et.types.isRegExp=dh;function ic(e){return typeof e=="object"&&e!==null}Et.isObject=ic;function Ep(e){return ic(e)&&vb(e)==="[object Date]"}Et.isDate=Ep;Et.types.isDate=Ep;function gh(e){return ic(e)&&(vb(e)==="[object Error]"||e instanceof Error)}Et.isError=gh;Et.types.isNativeError=gh;function gp(e){return typeof e=="function"}Et.isFunction=gp;function Ute(e){return e===null||typeof e=="boolean"||typeof e=="number"||typeof e=="string"||typeof e=="symbol"||typeof e>"u"}Et.isPrimitive=Ute;Et.isBuffer=FM();function vb(e){return Object.prototype.toString.call(e)}function wb(e){return e<10?"0"+e.toString(10):e.toString(10)}var Lte=["Jan","Feb","Mar","Apr","May","Jun","Jul","Aug","Sep","Oct","Nov","Dec"];function Pte(){var e=new Date,t=[wb(e.getHours()),wb(e.getMinutes()),wb(e.getSeconds())].join(":");return[e.getDate(),Lte[e.getMonth()],t].join(" ")}Et.log=function(){console.log("%s - %s",Pte(),Et.format.apply(Et,arguments))};Et.inherits=ze();Et._extend=function(e,t){if(!t||!ic(t))return e;for(var r=Object.keys(t),n=r.length;n--;)e[r[n]]=t[r[n]];return e};function PM(e,t){return Object.prototype.hasOwnProperty.call(e,t)}var tf=typeof Symbol<"u"?Symbol("util.promisify.custom"):void 0;Et.promisify=function(t){if(typeof t!="function")throw new TypeError('The "original" argument must be of type Function');if(tf&&t[tf]){var r=t[tf];if(typeof r!="function")throw new TypeError('The "util.promisify.custom" argument must be of type Function');return Object.defineProperty(r,tf,{value:r,enumerable:!1,writable:!1,configurable:!0}),r}function r(){for(var n,i,s=new Promise(function(A,f){n=A,i=f}),o=[],a=0;a<arguments.length;a++)o.push(arguments[a]);o.push(function(A,f){A?i(A):n(f)});try{t.apply(this,o)}catch(A){i(A)}return s}return Object.setPrototypeOf(r,Object.getPrototypeOf(t)),tf&&Object.defineProperty(r,tf,{value:r,enumerable:!1,writable:!1,configurable:!0}),Object.defineProperties(r,kM(t))};Et.promisify.custom=tf;function Ote(e,t){if(!e){var r=new Error("Promise was rejected with a falsy value");r.reason=e,e=r}return t(e)}function Hte(e){if(typeof e!="function")throw new TypeError('The "original" argument must be of type Function');function t(){for(var r=[],n=0;n<arguments.length;n++)r.push(arguments[n]);var i=r.pop();if(typeof i!="function")throw new TypeError("The last argument must be of type Function");var s=this,o=function(){return i.apply(s,arguments)};e.apply(this,r).then(function(a){process.nextTick(o.bind(null,null,a))},function(a){process.nextTick(Ote.bind(null,a,o))})}return Object.setPrototypeOf(t,Object.getPrototypeOf(e)),Object.defineProperties(t,kM(e)),t}Et.callbackify=Hte});var WM=x((uDe,YM)=>{"use strict";function OM(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter(function(i){return Object.getOwnPropertyDescriptor(e,i).enumerable})),r.push.apply(r,n)}return r}function HM(e){for(var t=1;t<arguments.length;t++){var r=arguments[t]!=null?arguments[t]:{};t%2?OM(Object(r),!0).forEach(function(n){qte(e,n,r[n])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):OM(Object(r)).forEach(function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(r,n))})}return e}function qte(e,t,r){return t=GM(t),t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function Gte(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function qM(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,GM(n.key),n)}}function Yte(e,t,r){return t&&qM(e.prototype,t),r&&qM(e,r),Object.defineProperty(e,"prototype",{writable:!1}),e}function GM(e){var t=Wte(e,"string");return typeof t=="symbol"?t:String(t)}function Wte(e,t){if(typeof e!="object"||e===null)return e;var r=e[Symbol.toPrimitive];if(r!==void 0){var n=r.call(e,t||"default");if(typeof n!="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(t==="string"?String:Number)(e)}var Vte=Gr(),Bp=Vte.Buffer,Jte=Yr(),Rb=Jte.inspect,jte=Rb&&Rb.custom||"inspect";function zte(e,t,r){Bp.prototype.copy.call(e,t,r)}YM.exports=(function(){function e(){Gte(this,e),this.head=null,this.tail=null,this.length=0}return Yte(e,[{key:"push",value:function(r){var n={data:r,next:null};this.length>0?this.tail.next=n:this.head=n,this.tail=n,++this.length}},{key:"unshift",value:function(r){var n={data:r,next:this.head};this.length===0&&(this.tail=n),this.head=n,++this.length}},{key:"shift",value:function(){if(this.length!==0){var r=this.head.data;return this.length===1?this.head=this.tail=null:this.head=this.head.next,--this.length,r}}},{key:"clear",value:function(){this.head=this.tail=null,this.length=0}},{key:"join",value:function(r){if(this.length===0)return"";for(var n=this.head,i=""+n.data;n=n.next;)i+=r+n.data;return i}},{key:"concat",value:function(r){if(this.length===0)return Bp.alloc(0);for(var n=Bp.allocUnsafe(r>>>0),i=this.head,s=0;i;)zte(i.data,n,s),s+=i.data.length,i=i.next;return n}},{key:"consume",value:function(r,n){var i;return r<this.head.data.length?(i=this.head.data.slice(0,r),this.head.data=this.head.data.slice(r)):r===this.head.data.length?i=this.shift():i=n?this._getString(r):this._getBuffer(r),i}},{key:"first",value:function(){return this.head.data}},{key:"_getString",value:function(r){var n=this.head,i=1,s=n.data;for(r-=s.length;n=n.next;){var o=n.data,a=r>o.length?o.length:r;if(a===o.length?s+=o:s+=o.slice(0,r),r-=a,r===0){a===o.length?(++i,n.next?this.head=n.next:this.head=this.tail=null):(this.head=n,n.data=o.slice(a));break}++i}return this.length-=i,s}},{key:"_getBuffer",value:function(r){var n=Bp.allocUnsafe(r),i=this.head,s=1;for(i.data.copy(n),r-=i.data.length;i=i.next;){var o=i.data,a=r>o.length?o.length:r;if(o.copy(n,n.length-r,0,a),r-=a,r===0){a===o.length?(++s,i.next?this.head=i.next:this.head=this.tail=null):(this.head=i,i.data=o.slice(a));break}++s}return this.length-=s,n}},{key:jte,value:function(r,n){return Rb(this,HM(HM({},n),{},{depth:0,customInspect:!1}))}}]),e})()});var Tb=x((cDe,JM)=>{"use strict";function Kte(e,t){var r=this,n=this._readableState&&this._readableState.destroyed,i=this._writableState&&this._writableState.destroyed;return n||i?(t?t(e):e&&(this._writableState?this._writableState.errorEmitted||(this._writableState.errorEmitted=!0,process.nextTick(Db,this,e)):process.nextTick(Db,this,e)),this):(this._readableState&&(this._readableState.destroyed=!0),this._writableState&&(this._writableState.destroyed=!0),this._destroy(e||null,function(s){!t&&s?r._writableState?r._writableState.errorEmitted?process.nextTick(Ip,r):(r._writableState.errorEmitted=!0,process.nextTick(VM,r,s)):process.nextTick(VM,r,s):t?(process.nextTick(Ip,r),t(s)):process.nextTick(Ip,r)}),this)}function VM(e,t){Db(e,t),Ip(e)}function Ip(e){e._writableState&&!e._writableState.emitClose||e._readableState&&!e._readableState.emitClose||e.emit("close")}function Xte(){this._readableState&&(this._readableState.destroyed=!1,this._readableState.reading=!1,this._readableState.ended=!1,this._readableState.endEmitted=!1),this._writableState&&(this._writableState.destroyed=!1,this._writableState.ended=!1,this._writableState.ending=!1,this._writableState.finalCalled=!1,this._writableState.prefinished=!1,this._writableState.finished=!1,this._writableState.errorEmitted=!1)}function Db(e,t){e.emit("error",t)}function Zte(e,t){var r=e._readableState,n=e._writableState;r&&r.autoDestroy||n&&n.autoDestroy?e.destroy(t):e.emit("error",t)}JM.exports={destroy:Kte,undestroy:Xte,errorOrDestroy:Zte}});var nf=x((lDe,KM)=>{"use strict";function $te(e,t){e.prototype=Object.create(t.prototype),e.prototype.constructor=e,e.__proto__=t}var zM={};function hi(e,t,r){r||(r=Error);function n(s,o,a){return typeof t=="string"?t:t(s,o,a)}var i=(function(s){$te(o,s);function o(a,A,f){return s.call(this,n(a,A,f))||this}return o})(r);i.prototype.name=r.name,i.prototype.code=e,zM[e]=i}function jM(e,t){if(Array.isArray(e)){var r=e.length;return e=e.map(function(n){return String(n)}),r>2?"one of ".concat(t," ").concat(e.slice(0,r-1).join(", "),", or ")+e[r-1]:r===2?"one of ".concat(t," ").concat(e[0]," or ").concat(e[1]):"of ".concat(t," ").concat(e[0])}else return"of ".concat(t," ").concat(String(e))}function ere(e,t,r){return e.substr(!r||r<0?0:+r,t.length)===t}function tre(e,t,r){return(r===void 0||r>e.length)&&(r=e.length),e.substring(r-t.length,r)===t}function rre(e,t,r){return typeof r!="number"&&(r=0),r+t.length>e.length?!1:e.indexOf(t,r)!==-1}hi("ERR_INVALID_OPT_VALUE",function(e,t){return'The value "'+t+'" is invalid for option "'+e+'"'},TypeError);hi("ERR_INVALID_ARG_TYPE",function(e,t,r){var n;typeof t=="string"&&ere(t,"not ")?(n="must not be",t=t.replace(/^not /,"")):n="must be";var i;if(tre(e," argument"))i="The ".concat(e," ").concat(n," ").concat(jM(t,"type"));else{var s=rre(e,".")?"property":"argument";i='The "'.concat(e,'" ').concat(s," ").concat(n," ").concat(jM(t,"type"))}return i+=". Received type ".concat(typeof r),i},TypeError);hi("ERR_STREAM_PUSH_AFTER_EOF","stream.push() after EOF");hi("ERR_METHOD_NOT_IMPLEMENTED",function(e){return"The "+e+" method is not implemented"});hi("ERR_STREAM_PREMATURE_CLOSE","Premature close");hi("ERR_STREAM_DESTROYED",function(e){return"Cannot call "+e+" after a stream was destroyed"});hi("ERR_MULTIPLE_CALLBACK","Callback called multiple times");hi("ERR_STREAM_CANNOT_PIPE","Cannot pipe, not readable");hi("ERR_STREAM_WRITE_AFTER_END","write after end");hi("ERR_STREAM_NULL_VALUES","May not write null values to stream",TypeError);hi("ERR_UNKNOWN_ENCODING",function(e){return"Unknown encoding: "+e},TypeError);hi("ERR_STREAM_UNSHIFT_AFTER_END_EVENT","stream.unshift() after end event");KM.exports.codes=zM});var Nb=x((hDe,XM)=>{"use strict";var nre=nf().codes.ERR_INVALID_OPT_VALUE;function ire(e,t,r){return e.highWaterMark!=null?e.highWaterMark:t?e[r]:null}function sre(e,t,r,n){var i=ire(t,n,r);if(i!=null){if(!(isFinite(i)&&Math.floor(i)===i)||i<0){var s=n?r:"highWaterMark";throw new nre(s,i)}return Math.floor(i)}return e.objectMode?16:16*1024}XM.exports={getHighWaterMark:sre}});var Fb=x((dDe,ZM)=>{ZM.exports=ore;function ore(e,t){if(Mb("noDeprecation"))return e;var r=!1;function n(){if(!r){if(Mb("throwDeprecation"))throw new Error(t);Mb("traceDeprecation")?console.trace(t):console.warn(t),r=!0}return e.apply(this,arguments)}return n}function Mb(e){try{if(!globalThis.localStorage)return!1}catch{return!1}var t=globalThis.localStorage[e];return t==null?!1:String(t).toLowerCase()==="true"}});var Ub=x((gDe,iF)=>{"use strict";iF.exports=Ar;function eF(e){var t=this;this.next=null,this.entry=null,this.finish=function(){Mre(t,e)}}var sc;Ar.WritableState=Eh;var are={deprecate:Fb()},tF=KI(),Cp=Gr().Buffer,Are=(typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof self<"u"?self:{}).Uint8Array||function(){};function fre(e){return Cp.from(e)}function ure(e){return Cp.isBuffer(e)||e instanceof Are}var xb=Tb(),cre=Nb(),lre=cre.getHighWaterMark,Ka=nf().codes,hre=Ka.ERR_INVALID_ARG_TYPE,dre=Ka.ERR_METHOD_NOT_IMPLEMENTED,gre=Ka.ERR_MULTIPLE_CALLBACK,pre=Ka.ERR_STREAM_CANNOT_PIPE,Ere=Ka.ERR_STREAM_DESTROYED,yre=Ka.ERR_STREAM_NULL_VALUES,mre=Ka.ERR_STREAM_WRITE_AFTER_END,Bre=Ka.ERR_UNKNOWN_ENCODING,oc=xb.errorOrDestroy;ze()(Ar,tF);function Ire(){}function Eh(e,t,r){sc=sc||sf(),e=e||{},typeof r!="boolean"&&(r=t instanceof sc),this.objectMode=!!e.objectMode,r&&(this.objectMode=this.objectMode||!!e.writableObjectMode),this.highWaterMark=lre(this,e,"writableHighWaterMark",r),this.finalCalled=!1,this.needDrain=!1,this.ending=!1,this.ended=!1,this.finished=!1,this.destroyed=!1;var n=e.decodeStrings===!1;this.decodeStrings=!n,this.defaultEncoding=e.defaultEncoding||"utf8",this.length=0,this.writing=!1,this.corked=0,this.sync=!0,this.bufferProcessing=!1,this.onwrite=function(i){vre(t,i)},this.writecb=null,this.writelen=0,this.bufferedRequest=null,this.lastBufferedRequest=null,this.pendingcb=0,this.prefinished=!1,this.errorEmitted=!1,this.emitClose=e.emitClose!==!1,this.autoDestroy=!!e.autoDestroy,this.bufferedRequestCount=0,this.corkedRequestsFree=new eF(this)}Eh.prototype.getBuffer=function(){for(var t=this.bufferedRequest,r=[];t;)r.push(t),t=t.next;return r};(function(){try{Object.defineProperty(Eh.prototype,"buffer",{get:are.deprecate(function(){return this.getBuffer()},"_writableState.buffer is deprecated. Use _writableState.getBuffer instead.","DEP0003")})}catch{}})();var bp;typeof Symbol=="function"&&Symbol.hasInstance&&typeof Function.prototype[Symbol.hasInstance]=="function"?(bp=Function.prototype[Symbol.hasInstance],Object.defineProperty(Ar,Symbol.hasInstance,{value:function(t){return bp.call(this,t)?!0:this!==Ar?!1:t&&t._writableState instanceof Eh}})):bp=function(t){return t instanceof this};function Ar(e){sc=sc||sf();var t=this instanceof sc;if(!t&&!bp.call(Ar,this))return new Ar(e);this._writableState=new Eh(e,this,t),this.writable=!0,e&&(typeof e.write=="function"&&(this._write=e.write),typeof e.writev=="function"&&(this._writev=e.writev),typeof e.destroy=="function"&&(this._destroy=e.destroy),typeof e.final=="function"&&(this._final=e.final)),tF.call(this)}Ar.prototype.pipe=function(){oc(this,new pre)};function bre(e,t){var r=new mre;oc(e,r),process.nextTick(t,r)}function Cre(e,t,r,n){var i;return r===null?i=new yre:typeof r!="string"&&!t.objectMode&&(i=new hre("chunk",["string","Buffer"],r)),i?(oc(e,i),process.nextTick(n,i),!1):!0}Ar.prototype.write=function(e,t,r){var n=this._writableState,i=!1,s=!n.objectMode&&ure(e);return s&&!Cp.isBuffer(e)&&(e=fre(e)),typeof t=="function"&&(r=t,t=null),s?t="buffer":t||(t=n.defaultEncoding),typeof r!="function"&&(r=Ire),n.ending?bre(this,r):(s||Cre(this,n,e,r))&&(n.pendingcb++,i=wre(this,n,s,e,t,r)),i};Ar.prototype.cork=function(){this._writableState.corked++};Ar.prototype.uncork=function(){var e=this._writableState;e.corked&&(e.corked--,!e.writing&&!e.corked&&!e.bufferProcessing&&e.bufferedRequest&&rF(this,e))};Ar.prototype.setDefaultEncoding=function(t){if(typeof t=="string"&&(t=t.toLowerCase()),!(["hex","utf8","utf-8","ascii","binary","base64","ucs2","ucs-2","utf16le","utf-16le","raw"].indexOf((t+"").toLowerCase())>-1))throw new Bre(t);return this._writableState.defaultEncoding=t,this};Object.defineProperty(Ar.prototype,"writableBuffer",{enumerable:!1,get:function(){return this._writableState&&this._writableState.getBuffer()}});function Qre(e,t,r){return!e.objectMode&&e.decodeStrings!==!1&&typeof t=="string"&&(t=Cp.from(t,r)),t}Object.defineProperty(Ar.prototype,"writableHighWaterMark",{enumerable:!1,get:function(){return this._writableState.highWaterMark}});function wre(e,t,r,n,i,s){if(!r){var o=Qre(t,n,i);n!==o&&(r=!0,i="buffer",n=o)}var a=t.objectMode?1:n.length;t.length+=a;var A=t.length<t.highWaterMark;if(A||(t.needDrain=!0),t.writing||t.corked){var f=t.lastBufferedRequest;t.lastBufferedRequest={chunk:n,encoding:i,isBuf:r,callback:s,next:null},f?f.next=t.lastBufferedRequest:t.bufferedRequest=t.lastBufferedRequest,t.bufferedRequestCount+=1}else kb(e,t,!1,a,n,i,s);return A}function kb(e,t,r,n,i,s,o){t.writelen=n,t.writecb=o,t.writing=!0,t.sync=!0,t.destroyed?t.onwrite(new Ere("write")):r?e._writev(i,t.onwrite):e._write(i,s,t.onwrite),t.sync=!1}function Sre(e,t,r,n,i){--t.pendingcb,r?(process.nextTick(i,n),process.nextTick(ph,e,t),e._writableState.errorEmitted=!0,oc(e,n)):(i(n),e._writableState.errorEmitted=!0,oc(e,n),ph(e,t))}function _re(e){e.writing=!1,e.writecb=null,e.length-=e.writelen,e.writelen=0}function vre(e,t){var r=e._writableState,n=r.sync,i=r.writecb;if(typeof i!="function")throw new gre;if(_re(r),t)Sre(e,r,n,t,i);else{var s=nF(r)||e.destroyed;!s&&!r.corked&&!r.bufferProcessing&&r.bufferedRequest&&rF(e,r),n?process.nextTick($M,e,r,s,i):$M(e,r,s,i)}}function $M(e,t,r,n){r||Rre(e,t),t.pendingcb--,n(),ph(e,t)}function Rre(e,t){t.length===0&&t.needDrain&&(t.needDrain=!1,e.emit("drain"))}function rF(e,t){t.bufferProcessing=!0;var r=t.bufferedRequest;if(e._writev&&r&&r.next){var n=t.bufferedRequestCount,i=new Array(n),s=t.corkedRequestsFree;s.entry=r;for(var o=0,a=!0;r;)i[o]=r,r.isBuf||(a=!1),r=r.next,o+=1;i.allBuffers=a,kb(e,t,!0,t.length,i,"",s.finish),t.pendingcb++,t.lastBufferedRequest=null,s.next?(t.corkedRequestsFree=s.next,s.next=null):t.corkedRequestsFree=new eF(t),t.bufferedRequestCount=0}else{for(;r;){var A=r.chunk,f=r.encoding,l=r.callback,p=t.objectMode?1:A.length;if(kb(e,t,!1,p,A,f,l),r=r.next,t.bufferedRequestCount--,t.writing)break}r===null&&(t.lastBufferedRequest=null)}t.bufferedRequest=r,t.bufferProcessing=!1}Ar.prototype._write=function(e,t,r){r(new dre("_write()"))};Ar.prototype._writev=null;Ar.prototype.end=function(e,t,r){var n=this._writableState;return typeof e=="function"?(r=e,e=null,t=null):typeof t=="function"&&(r=t,t=null),e!=null&&this.write(e,t),n.corked&&(n.corked=1,this.uncork()),n.ending||Nre(this,n,r),this};Object.defineProperty(Ar.prototype,"writableLength",{enumerable:!1,get:function(){return this._writableState.length}});function nF(e){return e.ending&&e.length===0&&e.bufferedRequest===null&&!e.finished&&!e.writing}function Dre(e,t){e._final(function(r){t.pendingcb--,r&&oc(e,r),t.prefinished=!0,e.emit("prefinish"),ph(e,t)})}function Tre(e,t){!t.prefinished&&!t.finalCalled&&(typeof e._final=="function"&&!t.destroyed?(t.pendingcb++,t.finalCalled=!0,process.nextTick(Dre,e,t)):(t.prefinished=!0,e.emit("prefinish")))}function ph(e,t){var r=nF(t);if(r&&(Tre(e,t),t.pendingcb===0&&(t.finished=!0,e.emit("finish"),t.autoDestroy))){var n=e._readableState;(!n||n.autoDestroy&&n.endEmitted)&&e.destroy()}return r}function Nre(e,t,r){t.ending=!0,ph(e,t),r&&(t.finished?process.nextTick(r):e.once("finish",r)),t.ended=!0,e.writable=!1}function Mre(e,t,r){var n=e.entry;for(e.entry=null;n;){var i=n.callback;t.pendingcb--,i(r),n=n.next}t.corkedRequestsFree.next=e}Object.defineProperty(Ar.prototype,"destroyed",{enumerable:!1,get:function(){return this._writableState===void 0?!1:this._writableState.destroyed},set:function(t){this._writableState&&(this._writableState.destroyed=t)}});Ar.prototype.destroy=xb.destroy;Ar.prototype._undestroy=xb.undestroy;Ar.prototype._destroy=function(e,t){t(e)}});var sf=x((pDe,oF)=>{"use strict";var Fre=Object.keys||function(e){var t=[];for(var r in e)t.push(r);return t};oF.exports=js;var sF=Ob(),Pb=Ub();ze()(js,sF);for(Lb=Fre(Pb.prototype),Qp=0;Qp<Lb.length;Qp++)wp=Lb[Qp],js.prototype[wp]||(js.prototype[wp]=Pb.prototype[wp]);var Lb,wp,Qp;function js(e){if(!(this instanceof js))return new js(e);sF.call(this,e),Pb.call(this,e),this.allowHalfOpen=!0,e&&(e.readable===!1&&(this.readable=!1),e.writable===!1&&(this.writable=!1),e.allowHalfOpen===!1&&(this.allowHalfOpen=!1,this.once("end",kre)))}Object.defineProperty(js.prototype,"writableHighWaterMark",{enumerable:!1,get:function(){return this._writableState.highWaterMark}});Object.defineProperty(js.prototype,"writableBuffer",{enumerable:!1,get:function(){return this._writableState&&this._writableState.getBuffer()}});Object.defineProperty(js.prototype,"writableLength",{enumerable:!1,get:function(){return this._writableState.length}});function kre(){this._writableState.ended||process.nextTick(xre,this)}function xre(e){e.end()}Object.defineProperty(js.prototype,"destroyed",{enumerable:!1,get:function(){return this._readableState===void 0||this._writableState===void 0?!1:this._readableState.destroyed&&this._writableState.destroyed},set:function(t){this._readableState===void 0||this._writableState===void 0||(this._readableState.destroyed=t,this._writableState.destroyed=t)}})});var at=x((Hb,AF)=>{var Sp=Gr(),zs=Sp.Buffer;function aF(e,t){for(var r in e)t[r]=e[r]}zs.from&&zs.alloc&&zs.allocUnsafe&&zs.allocUnsafeSlow?AF.exports=Sp:(aF(Sp,Hb),Hb.Buffer=of);function of(e,t,r){return zs(e,t,r)}of.prototype=Object.create(zs.prototype);aF(zs,of);of.from=function(e,t,r){if(typeof e=="number")throw new TypeError("Argument must not be a number");return zs(e,t,r)};of.alloc=function(e,t,r){if(typeof e!="number")throw new TypeError("Argument must be a number");var n=zs(e);return t!==void 0?typeof r=="string"?n.fill(t,r):n.fill(t):n.fill(0),n};of.allocUnsafe=function(e){if(typeof e!="number")throw new TypeError("Argument must be a number");return zs(e)};of.allocUnsafeSlow=function(e){if(typeof e!="number")throw new TypeError("Argument must be a number");return Sp.SlowBuffer(e)}});var af=x(uF=>{"use strict";var Gb=at().Buffer,fF=Gb.isEncoding||function(e){switch(e=""+e,e&&e.toLowerCase()){case"hex":case"utf8":case"utf-8":case"ascii":case"binary":case"base64":case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":case"raw":return!0;default:return!1}};function Ure(e){if(!e)return"utf8";for(var t;;)switch(e){case"utf8":case"utf-8":return"utf8";case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return"utf16le";case"latin1":case"binary":return"latin1";case"base64":case"ascii":case"hex":return e;default:if(t)return;e=(""+e).toLowerCase(),t=!0}}function Lre(e){var t=Ure(e);if(typeof t!="string"&&(Gb.isEncoding===fF||!fF(e)))throw new Error("Unknown encoding: "+e);return t||e}uF.StringDecoder=yh;function yh(e){this.encoding=Lre(e);var t;switch(this.encoding){case"utf16le":this.text=Yre,this.end=Wre,t=4;break;case"utf8":this.fillLast=Hre,t=4;break;case"base64":this.text=Vre,this.end=Jre,t=3;break;default:this.write=jre,this.end=zre;return}this.lastNeed=0,this.lastTotal=0,this.lastChar=Gb.allocUnsafe(t)}yh.prototype.write=function(e){if(e.length===0)return"";var t,r;if(this.lastNeed){if(t=this.fillLast(e),t===void 0)return"";r=this.lastNeed,this.lastNeed=0}else r=0;return r<e.length?t?t+this.text(e,r):this.text(e,r):t||""};yh.prototype.end=Gre;yh.prototype.text=qre;yh.prototype.fillLast=function(e){if(this.lastNeed<=e.length)return e.copy(this.lastChar,this.lastTotal-this.lastNeed,0,this.lastNeed),this.lastChar.toString(this.encoding,0,this.lastTotal);e.copy(this.lastChar,this.lastTotal-this.lastNeed,0,e.length),this.lastNeed-=e.length};function qb(e){return e<=127?0:e>>5===6?2:e>>4===14?3:e>>3===30?4:e>>6===2?-1:-2}function Pre(e,t,r){var n=t.length-1;if(n<r)return 0;var i=qb(t[n]);return i>=0?(i>0&&(e.lastNeed=i-1),i):--n<r||i===-2?0:(i=qb(t[n]),i>=0?(i>0&&(e.lastNeed=i-2),i):--n<r||i===-2?0:(i=qb(t[n]),i>=0?(i>0&&(i===2?i=0:e.lastNeed=i-3),i):0))}function Ore(e,t,r){if((t[0]&192)!==128)return e.lastNeed=0,"\uFFFD";if(e.lastNeed>1&&t.length>1){if((t[1]&192)!==128)return e.lastNeed=1,"\uFFFD";if(e.lastNeed>2&&t.length>2&&(t[2]&192)!==128)return e.lastNeed=2,"\uFFFD"}}function Hre(e){var t=this.lastTotal-this.lastNeed,r=Ore(this,e,t);if(r!==void 0)return r;if(this.lastNeed<=e.length)return e.copy(this.lastChar,t,0,this.lastNeed),this.lastChar.toString(this.encoding,0,this.lastTotal);e.copy(this.lastChar,t,0,e.length),this.lastNeed-=e.length}function qre(e,t){var r=Pre(this,e,t);if(!this.lastNeed)return e.toString("utf8",t);this.lastTotal=r;var n=e.length-(r-this.lastNeed);return e.copy(this.lastChar,0,n),e.toString("utf8",t,n)}function Gre(e){var t=e&&e.length?this.write(e):"";return this.lastNeed?t+"\uFFFD":t}function Yre(e,t){if((e.length-t)%2===0){var r=e.toString("utf16le",t);if(r){var n=r.charCodeAt(r.length-1);if(n>=55296&&n<=56319)return this.lastNeed=2,this.lastTotal=4,this.lastChar[0]=e[e.length-2],this.lastChar[1]=e[e.length-1],r.slice(0,-1)}return r}return this.lastNeed=1,this.lastTotal=2,this.lastChar[0]=e[e.length-1],e.toString("utf16le",t,e.length-1)}function Wre(e){var t=e&&e.length?this.write(e):"";if(this.lastNeed){var r=this.lastTotal-this.lastNeed;return t+this.lastChar.toString("utf16le",0,r)}return t}function Vre(e,t){var r=(e.length-t)%3;return r===0?e.toString("base64",t):(this.lastNeed=3-r,this.lastTotal=3,r===1?this.lastChar[0]=e[e.length-1]:(this.lastChar[0]=e[e.length-2],this.lastChar[1]=e[e.length-1]),e.toString("base64",t,e.length-r))}function Jre(e){var t=e&&e.length?this.write(e):"";return this.lastNeed?t+this.lastChar.toString("base64",0,3-this.lastNeed):t}function jre(e){return e.toString(this.encoding)}function zre(e){return e&&e.length?this.write(e):""}});var _p=x((yDe,hF)=>{"use strict";var cF=nf().codes.ERR_STREAM_PREMATURE_CLOSE;function Kre(e){var t=!1;return function(){if(!t){t=!0;for(var r=arguments.length,n=new Array(r),i=0;i<r;i++)n[i]=arguments[i];e.apply(this,n)}}}function Xre(){}function Zre(e){return e.setHeader&&typeof e.abort=="function"}function lF(e,t,r){if(typeof t=="function")return lF(e,null,t);t||(t={}),r=Kre(r||Xre);var n=t.readable||t.readable!==!1&&e.readable,i=t.writable||t.writable!==!1&&e.writable,s=function(){e.writable||a()},o=e._writableState&&e._writableState.finished,a=function(){i=!1,o=!0,n||r.call(e)},A=e._readableState&&e._readableState.endEmitted,f=function(){n=!1,A=!0,i||r.call(e)},l=function(_){r.call(e,_)},p=function(){var _;if(n&&!A)return(!e._readableState||!e._readableState.ended)&&(_=new cF),r.call(e,_);if(i&&!o)return(!e._writableState||!e._writableState.ended)&&(_=new cF),r.call(e,_)},B=function(){e.req.on("finish",a)};return Zre(e)?(e.on("complete",a),e.on("abort",p),e.req?B():e.on("request",B)):i&&!e._writableState&&(e.on("end",s),e.on("close",s)),e.on("end",f),e.on("finish",a),t.error!==!1&&e.on("error",l),e.on("close",p),function(){e.removeListener("complete",a),e.removeListener("abort",p),e.removeListener("request",B),e.req&&e.req.removeListener("finish",a),e.removeListener("end",s),e.removeListener("close",s),e.removeListener("finish",a),e.removeListener("end",f),e.removeListener("error",l),e.removeListener("close",p)}}hF.exports=lF});var gF=x((mDe,dF)=>{"use strict";var vp;function Xa(e,t,r){return t=$re(t),t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function $re(e){var t=ene(e,"string");return typeof t=="symbol"?t:String(t)}function ene(e,t){if(typeof e!="object"||e===null)return e;var r=e[Symbol.toPrimitive];if(r!==void 0){var n=r.call(e,t||"default");if(typeof n!="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(t==="string"?String:Number)(e)}var tne=_p(),Za=Symbol("lastResolve"),Af=Symbol("lastReject"),mh=Symbol("error"),Rp=Symbol("ended"),ff=Symbol("lastPromise"),Yb=Symbol("handlePromise"),uf=Symbol("stream");function $a(e,t){return{value:e,done:t}}function rne(e){var t=e[Za];if(t!==null){var r=e[uf].read();r!==null&&(e[ff]=null,e[Za]=null,e[Af]=null,t($a(r,!1)))}}function nne(e){process.nextTick(rne,e)}function ine(e,t){return function(r,n){e.then(function(){if(t[Rp]){r($a(void 0,!0));return}t[Yb](r,n)},n)}}var sne=Object.getPrototypeOf(function(){}),one=Object.setPrototypeOf((vp={get stream(){return this[uf]},next:function(){var t=this,r=this[mh];if(r!==null)return Promise.reject(r);if(this[Rp])return Promise.resolve($a(void 0,!0));if(this[uf].destroyed)return new Promise(function(o,a){process.nextTick(function(){t[mh]?a(t[mh]):o($a(void 0,!0))})});var n=this[ff],i;if(n)i=new Promise(ine(n,this));else{var s=this[uf].read();if(s!==null)return Promise.resolve($a(s,!1));i=new Promise(this[Yb])}return this[ff]=i,i}},Xa(vp,Symbol.asyncIterator,function(){return this}),Xa(vp,"return",function(){var t=this;return new Promise(function(r,n){t[uf].destroy(null,function(i){if(i){n(i);return}r($a(void 0,!0))})})}),vp),sne),ane=function(t){var r,n=Object.create(one,(r={},Xa(r,uf,{value:t,writable:!0}),Xa(r,Za,{value:null,writable:!0}),Xa(r,Af,{value:null,writable:!0}),Xa(r,mh,{value:null,writable:!0}),Xa(r,Rp,{value:t._readableState.endEmitted,writable:!0}),Xa(r,Yb,{value:function(s,o){var a=n[uf].read();a?(n[ff]=null,n[Za]=null,n[Af]=null,s($a(a,!1))):(n[Za]=s,n[Af]=o)},writable:!0}),r));return n[ff]=null,tne(t,function(i){if(i&&i.code!=="ERR_STREAM_PREMATURE_CLOSE"){var s=n[Af];s!==null&&(n[ff]=null,n[Za]=null,n[Af]=null,s(i)),n[mh]=i;return}var o=n[Za];o!==null&&(n[ff]=null,n[Za]=null,n[Af]=null,o($a(void 0,!0))),n[Rp]=!0}),t.on("readable",nne.bind(null,n)),n};dF.exports=ane});var EF=x((BDe,pF)=>{pF.exports=function(){throw new Error("Readable.from is not available in the browser")}});var Ob=x((bDe,_F)=>{"use strict";_F.exports=Qt;var ac;Qt.ReadableState=IF;var IDe=Zi().EventEmitter,BF=function(t,r){return t.listeners(r).length},Ih=KI(),Dp=Gr().Buffer,Ane=(typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof self<"u"?self:{}).Uint8Array||function(){};function fne(e){return Dp.from(e)}function une(e){return Dp.isBuffer(e)||e instanceof Ane}var Wb=Yr(),dt;Wb&&Wb.debuglog?dt=Wb.debuglog("stream"):dt=function(){};var cne=WM(),Zb=Tb(),lne=Nb(),hne=lne.getHighWaterMark,Tp=nf().codes,dne=Tp.ERR_INVALID_ARG_TYPE,gne=Tp.ERR_STREAM_PUSH_AFTER_EOF,pne=Tp.ERR_METHOD_NOT_IMPLEMENTED,Ene=Tp.ERR_STREAM_UNSHIFT_AFTER_END_EVENT,Ac,Vb,Jb;ze()(Qt,Ih);var Bh=Zb.errorOrDestroy,jb=["error","close","destroy","pause","resume"];function yne(e,t,r){if(typeof e.prependListener=="function")return e.prependListener(t,r);!e._events||!e._events[t]?e.on(t,r):Array.isArray(e._events[t])?e._events[t].unshift(r):e._events[t]=[r,e._events[t]]}function IF(e,t,r){ac=ac||sf(),e=e||{},typeof r!="boolean"&&(r=t instanceof ac),this.objectMode=!!e.objectMode,r&&(this.objectMode=this.objectMode||!!e.readableObjectMode),this.highWaterMark=hne(this,e,"readableHighWaterMark",r),this.buffer=new cne,this.length=0,this.pipes=null,this.pipesCount=0,this.flowing=null,this.ended=!1,this.endEmitted=!1,this.reading=!1,this.sync=!0,this.needReadable=!1,this.emittedReadable=!1,this.readableListening=!1,this.resumeScheduled=!1,this.paused=!0,this.emitClose=e.emitClose!==!1,this.autoDestroy=!!e.autoDestroy,this.destroyed=!1,this.defaultEncoding=e.defaultEncoding||"utf8",this.awaitDrain=0,this.readingMore=!1,this.decoder=null,this.encoding=null,e.encoding&&(Ac||(Ac=af().StringDecoder),this.decoder=new Ac(e.encoding),this.encoding=e.encoding)}function Qt(e){if(ac=ac||sf(),!(this instanceof Qt))return new Qt(e);var t=this instanceof ac;this._readableState=new IF(e,this,t),this.readable=!0,e&&(typeof e.read=="function"&&(this._read=e.read),typeof e.destroy=="function"&&(this._destroy=e.destroy)),Ih.call(this)}Object.defineProperty(Qt.prototype,"destroyed",{enumerable:!1,get:function(){return this._readableState===void 0?!1:this._readableState.destroyed},set:function(t){this._readableState&&(this._readableState.destroyed=t)}});Qt.prototype.destroy=Zb.destroy;Qt.prototype._undestroy=Zb.undestroy;Qt.prototype._destroy=function(e,t){t(e)};Qt.prototype.push=function(e,t){var r=this._readableState,n;return r.objectMode?n=!0:typeof e=="string"&&(t=t||r.defaultEncoding,t!==r.encoding&&(e=Dp.from(e,t),t=""),n=!0),bF(this,e,t,!1,n)};Qt.prototype.unshift=function(e){return bF(this,e,null,!0,!1)};function bF(e,t,r,n,i){dt("readableAddChunk",t);var s=e._readableState;if(t===null)s.reading=!1,Ine(e,s);else{var o;if(i||(o=mne(s,t)),o)Bh(e,o);else if(s.objectMode||t&&t.length>0)if(typeof t!="string"&&!s.objectMode&&Object.getPrototypeOf(t)!==Dp.prototype&&(t=fne(t)),n)s.endEmitted?Bh(e,new Ene):zb(e,s,t,!0);else if(s.ended)Bh(e,new gne);else{if(s.destroyed)return!1;s.reading=!1,s.decoder&&!r?(t=s.decoder.write(t),s.objectMode||t.length!==0?zb(e,s,t,!1):Xb(e,s)):zb(e,s,t,!1)}else n||(s.reading=!1,Xb(e,s))}return!s.ended&&(s.length<s.highWaterMark||s.length===0)}function zb(e,t,r,n){t.flowing&&t.length===0&&!t.sync?(t.awaitDrain=0,e.emit("data",r)):(t.length+=t.objectMode?1:r.length,n?t.buffer.unshift(r):t.buffer.push(r),t.needReadable&&Np(e)),Xb(e,t)}function mne(e,t){var r;return!une(t)&&typeof t!="string"&&t!==void 0&&!e.objectMode&&(r=new dne("chunk",["string","Buffer","Uint8Array"],t)),r}Qt.prototype.isPaused=function(){return this._readableState.flowing===!1};Qt.prototype.setEncoding=function(e){Ac||(Ac=af().StringDecoder);var t=new Ac(e);this._readableState.decoder=t,this._readableState.encoding=this._readableState.decoder.encoding;for(var r=this._readableState.buffer.head,n="";r!==null;)n+=t.write(r.data),r=r.next;return this._readableState.buffer.clear(),n!==""&&this._readableState.buffer.push(n),this._readableState.length=n.length,this};var yF=1073741824;function Bne(e){return e>=yF?e=yF:(e--,e|=e>>>1,e|=e>>>2,e|=e>>>4,e|=e>>>8,e|=e>>>16,e++),e}function mF(e,t){return e<=0||t.length===0&&t.ended?0:t.objectMode?1:e!==e?t.flowing&&t.length?t.buffer.head.data.length:t.length:(e>t.highWaterMark&&(t.highWaterMark=Bne(e)),e<=t.length?e:t.ended?t.length:(t.needReadable=!0,0))}Qt.prototype.read=function(e){dt("read",e),e=parseInt(e,10);var t=this._readableState,r=e;if(e!==0&&(t.emittedReadable=!1),e===0&&t.needReadable&&((t.highWaterMark!==0?t.length>=t.highWaterMark:t.length>0)||t.ended))return dt("read: emitReadable",t.length,t.ended),t.length===0&&t.ended?Kb(this):Np(this),null;if(e=mF(e,t),e===0&&t.ended)return t.length===0&&Kb(this),null;var n=t.needReadable;dt("need readable",n),(t.length===0||t.length-e<t.highWaterMark)&&(n=!0,dt("length less than watermark",n)),t.ended||t.reading?(n=!1,dt("reading or ended",n)):n&&(dt("do read"),t.reading=!0,t.sync=!0,t.length===0&&(t.needReadable=!0),this._read(t.highWaterMark),t.sync=!1,t.reading||(e=mF(r,t)));var i;return e>0?i=wF(e,t):i=null,i===null?(t.needReadable=t.length<=t.highWaterMark,e=0):(t.length-=e,t.awaitDrain=0),t.length===0&&(t.ended||(t.needReadable=!0),r!==e&&t.ended&&Kb(this)),i!==null&&this.emit("data",i),i};function Ine(e,t){if(dt("onEofChunk"),!t.ended){if(t.decoder){var r=t.decoder.end();r&&r.length&&(t.buffer.push(r),t.length+=t.objectMode?1:r.length)}t.ended=!0,t.sync?Np(e):(t.needReadable=!1,t.emittedReadable||(t.emittedReadable=!0,CF(e)))}}function Np(e){var t=e._readableState;dt("emitReadable",t.needReadable,t.emittedReadable),t.needReadable=!1,t.emittedReadable||(dt("emitReadable",t.flowing),t.emittedReadable=!0,process.nextTick(CF,e))}function CF(e){var t=e._readableState;dt("emitReadable_",t.destroyed,t.length,t.ended),!t.destroyed&&(t.length||t.ended)&&(e.emit("readable"),t.emittedReadable=!1),t.needReadable=!t.flowing&&!t.ended&&t.length<=t.highWaterMark,$b(e)}function Xb(e,t){t.readingMore||(t.readingMore=!0,process.nextTick(bne,e,t))}function bne(e,t){for(;!t.reading&&!t.ended&&(t.length<t.highWaterMark||t.flowing&&t.length===0);){var r=t.length;if(dt("maybeReadMore read 0"),e.read(0),r===t.length)break}t.readingMore=!1}Qt.prototype._read=function(e){Bh(this,new pne("_read()"))};Qt.prototype.pipe=function(e,t){var r=this,n=this._readableState;switch(n.pipesCount){case 0:n.pipes=e;break;case 1:n.pipes=[n.pipes,e];break;default:n.pipes.push(e);break}n.pipesCount+=1,dt("pipe count=%d opts=%j",n.pipesCount,t);var i=(!t||t.end!==!1)&&e!==process.stdout&&e!==process.stderr,s=i?a:N;n.endEmitted?process.nextTick(s):r.once("end",s),e.on("unpipe",o);function o(P,U){dt("onunpipe"),P===r&&U&&U.hasUnpiped===!1&&(U.hasUnpiped=!0,l())}function a(){dt("onend"),e.end()}var A=Cne(r);e.on("drain",A);var f=!1;function l(){dt("cleanup"),e.removeListener("close",S),e.removeListener("finish",_),e.removeListener("drain",A),e.removeListener("error",B),e.removeListener("unpipe",o),r.removeListener("end",a),r.removeListener("end",N),r.removeListener("data",p),f=!0,n.awaitDrain&&(!e._writableState||e._writableState.needDrain)&&A()}r.on("data",p);function p(P){dt("ondata");var U=e.write(P);dt("dest.write",U),U===!1&&((n.pipesCount===1&&n.pipes===e||n.pipesCount>1&&SF(n.pipes,e)!==-1)&&!f&&(dt("false write response, pause",n.awaitDrain),n.awaitDrain++),r.pause())}function B(P){dt("onerror",P),N(),e.removeListener("error",B),BF(e,"error")===0&&Bh(e,P)}yne(e,"error",B);function S(){e.removeListener("finish",_),N()}e.once("close",S);function _(){dt("onfinish"),e.removeListener("close",S),N()}e.once("finish",_);function N(){dt("unpipe"),r.unpipe(e)}return e.emit("pipe",r),n.flowing||(dt("pipe resume"),r.resume()),e};function Cne(e){return function(){var r=e._readableState;dt("pipeOnDrain",r.awaitDrain),r.awaitDrain&&r.awaitDrain--,r.awaitDrain===0&&BF(e,"data")&&(r.flowing=!0,$b(e))}}Qt.prototype.unpipe=function(e){var t=this._readableState,r={hasUnpiped:!1};if(t.pipesCount===0)return this;if(t.pipesCount===1)return e&&e!==t.pipes?this:(e||(e=t.pipes),t.pipes=null,t.pipesCount=0,t.flowing=!1,e&&e.emit("unpipe",this,r),this);if(!e){var n=t.pipes,i=t.pipesCount;t.pipes=null,t.pipesCount=0,t.flowing=!1;for(var s=0;s<i;s++)n[s].emit("unpipe",this,{hasUnpiped:!1});return this}var o=SF(t.pipes,e);return o===-1?this:(t.pipes.splice(o,1),t.pipesCount-=1,t.pipesCount===1&&(t.pipes=t.pipes[0]),e.emit("unpipe",this,r),this)};Qt.prototype.on=function(e,t){var r=Ih.prototype.on.call(this,e,t),n=this._readableState;return e==="data"?(n.readableListening=this.listenerCount("readable")>0,n.flowing!==!1&&this.resume()):e==="readable"&&!n.endEmitted&&!n.readableListening&&(n.readableListening=n.needReadable=!0,n.flowing=!1,n.emittedReadable=!1,dt("on readable",n.length,n.reading),n.length?Np(this):n.reading||process.nextTick(Qne,this)),r};Qt.prototype.addListener=Qt.prototype.on;Qt.prototype.removeListener=function(e,t){var r=Ih.prototype.removeListener.call(this,e,t);return e==="readable"&&process.nextTick(QF,this),r};Qt.prototype.removeAllListeners=function(e){var t=Ih.prototype.removeAllListeners.apply(this,arguments);return(e==="readable"||e===void 0)&&process.nextTick(QF,this),t};function QF(e){var t=e._readableState;t.readableListening=e.listenerCount("readable")>0,t.resumeScheduled&&!t.paused?t.flowing=!0:e.listenerCount("data")>0&&e.resume()}function Qne(e){dt("readable nexttick read 0"),e.read(0)}Qt.prototype.resume=function(){var e=this._readableState;return e.flowing||(dt("resume"),e.flowing=!e.readableListening,wne(this,e)),e.paused=!1,this};function wne(e,t){t.resumeScheduled||(t.resumeScheduled=!0,process.nextTick(Sne,e,t))}function Sne(e,t){dt("resume",t.reading),t.reading||e.read(0),t.resumeScheduled=!1,e.emit("resume"),$b(e),t.flowing&&!t.reading&&e.read(0)}Qt.prototype.pause=function(){return dt("call pause flowing=%j",this._readableState.flowing),this._readableState.flowing!==!1&&(dt("pause"),this._readableState.flowing=!1,this.emit("pause")),this._readableState.paused=!0,this};function $b(e){var t=e._readableState;for(dt("flow",t.flowing);t.flowing&&e.read()!==null;);}Qt.prototype.wrap=function(e){var t=this,r=this._readableState,n=!1;e.on("end",function(){if(dt("wrapped end"),r.decoder&&!r.ended){var o=r.decoder.end();o&&o.length&&t.push(o)}t.push(null)}),e.on("data",function(o){if(dt("wrapped data"),r.decoder&&(o=r.decoder.write(o)),!(r.objectMode&&o==null)&&!(!r.objectMode&&(!o||!o.length))){var a=t.push(o);a||(n=!0,e.pause())}});for(var i in e)this[i]===void 0&&typeof e[i]=="function"&&(this[i]=(function(a){return function(){return e[a].apply(e,arguments)}})(i));for(var s=0;s<jb.length;s++)e.on(jb[s],this.emit.bind(this,jb[s]));return this._read=function(o){dt("wrapped _read",o),n&&(n=!1,e.resume())},this};typeof Symbol=="function"&&(Qt.prototype[Symbol.asyncIterator]=function(){return Vb===void 0&&(Vb=gF()),Vb(this)});Object.defineProperty(Qt.prototype,"readableHighWaterMark",{enumerable:!1,get:function(){return this._readableState.highWaterMark}});Object.defineProperty(Qt.prototype,"readableBuffer",{enumerable:!1,get:function(){return this._readableState&&this._readableState.buffer}});Object.defineProperty(Qt.prototype,"readableFlowing",{enumerable:!1,get:function(){return this._readableState.flowing},set:function(t){this._readableState&&(this._readableState.flowing=t)}});Qt._fromList=wF;Object.defineProperty(Qt.prototype,"readableLength",{enumerable:!1,get:function(){return this._readableState.length}});function wF(e,t){if(t.length===0)return null;var r;return t.objectMode?r=t.buffer.shift():!e||e>=t.length?(t.decoder?r=t.buffer.join(""):t.buffer.length===1?r=t.buffer.first():r=t.buffer.concat(t.length),t.buffer.clear()):r=t.buffer.consume(e,t.decoder),r}function Kb(e){var t=e._readableState;dt("endReadable",t.endEmitted),t.endEmitted||(t.ended=!0,process.nextTick(_ne,t,e))}function _ne(e,t){if(dt("endReadableNT",e.endEmitted,e.length),!e.endEmitted&&e.length===0&&(e.endEmitted=!0,t.readable=!1,t.emit("end"),e.autoDestroy)){var r=t._writableState;(!r||r.autoDestroy&&r.finished)&&t.destroy()}}typeof Symbol=="function"&&(Qt.from=function(e,t){return Jb===void 0&&(Jb=EF()),Jb(Qt,e,t)});function SF(e,t){for(var r=0,n=e.length;r<n;r++)if(e[r]===t)return r;return-1}});var eC=x((CDe,RF)=>{"use strict";RF.exports=Vo;var Mp=nf().codes,vne=Mp.ERR_METHOD_NOT_IMPLEMENTED,Rne=Mp.ERR_MULTIPLE_CALLBACK,Dne=Mp.ERR_TRANSFORM_ALREADY_TRANSFORMING,Tne=Mp.ERR_TRANSFORM_WITH_LENGTH_0,Fp=sf();ze()(Vo,Fp);function Nne(e,t){var r=this._transformState;r.transforming=!1;var n=r.writecb;if(n===null)return this.emit("error",new Rne);r.writechunk=null,r.writecb=null,t!=null&&this.push(t),n(e);var i=this._readableState;i.reading=!1,(i.needReadable||i.length<i.highWaterMark)&&this._read(i.highWaterMark)}function Vo(e){if(!(this instanceof Vo))return new Vo(e);Fp.call(this,e),this._transformState={afterTransform:Nne.bind(this),needTransform:!1,transforming:!1,writecb:null,writechunk:null,writeencoding:null},this._readableState.needReadable=!0,this._readableState.sync=!1,e&&(typeof e.transform=="function"&&(this._transform=e.transform),typeof e.flush=="function"&&(this._flush=e.flush)),this.on("prefinish",Mne)}function Mne(){var e=this;typeof this._flush=="function"&&!this._readableState.destroyed?this._flush(function(t,r){vF(e,t,r)}):vF(this,null,null)}Vo.prototype.push=function(e,t){return this._transformState.needTransform=!1,Fp.prototype.push.call(this,e,t)};Vo.prototype._transform=function(e,t,r){r(new vne("_transform()"))};Vo.prototype._write=function(e,t,r){var n=this._transformState;if(n.writecb=r,n.writechunk=e,n.writeencoding=t,!n.transforming){var i=this._readableState;(n.needTransform||i.needReadable||i.length<i.highWaterMark)&&this._read(i.highWaterMark)}};Vo.prototype._read=function(e){var t=this._transformState;t.writechunk!==null&&!t.transforming?(t.transforming=!0,this._transform(t.writechunk,t.writeencoding,t.afterTransform)):t.needTransform=!0};Vo.prototype._destroy=function(e,t){Fp.prototype._destroy.call(this,e,function(r){t(r)})};function vF(e,t,r){if(t)return e.emit("error",t);if(r!=null&&e.push(r),e._writableState.length)throw new Tne;if(e._transformState.transforming)throw new Dne;return e.push(null)}});var NF=x((QDe,TF)=>{"use strict";TF.exports=bh;var DF=eC();ze()(bh,DF);function bh(e){if(!(this instanceof bh))return new bh(e);DF.call(this,e)}bh.prototype._transform=function(e,t,r){r(null,e)}});var UF=x((wDe,xF)=>{"use strict";var tC;function Fne(e){var t=!1;return function(){t||(t=!0,e.apply(void 0,arguments))}}var kF=nf().codes,kne=kF.ERR_MISSING_ARGS,xne=kF.ERR_STREAM_DESTROYED;function MF(e){if(e)throw e}function Une(e){return e.setHeader&&typeof e.abort=="function"}function Lne(e,t,r,n){n=Fne(n);var i=!1;e.on("close",function(){i=!0}),tC===void 0&&(tC=_p()),tC(e,{readable:t,writable:r},function(o){if(o)return n(o);i=!0,n()});var s=!1;return function(o){if(!i&&!s){if(s=!0,Une(e))return e.abort();if(typeof e.destroy=="function")return e.destroy();n(o||new xne("pipe"))}}}function FF(e){e()}function Pne(e,t){return e.pipe(t)}function One(e){return!e.length||typeof e[e.length-1]!="function"?MF:e.pop()}function Hne(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];var n=One(t);if(Array.isArray(t[0])&&(t=t[0]),t.length<2)throw new kne("streams");var i,s=t.map(function(o,a){var A=a<t.length-1,f=a>0;return Lne(o,A,f,function(l){i||(i=l),l&&s.forEach(FF),!A&&(s.forEach(FF),n(i))})});return t.reduce(Pne)}xF.exports=Hne});var nC=x((SDe,LF)=>{LF.exports=di;var rC=Zi().EventEmitter,qne=ze();qne(di,rC);di.Readable=Ob();di.Writable=Ub();di.Duplex=sf();di.Transform=eC();di.PassThrough=NF();di.finished=_p();di.pipeline=UF();di.Stream=di;function di(){rC.call(this)}di.prototype.pipe=function(e,t){var r=this;function n(l){e.writable&&e.write(l)===!1&&r.pause&&r.pause()}r.on("data",n);function i(){r.readable&&r.resume&&r.resume()}e.on("drain",i),!e._isStdio&&(!t||t.end!==!1)&&(r.on("end",o),r.on("close",a));var s=!1;function o(){s||(s=!0,e.end())}function a(){s||(s=!0,typeof e.destroy=="function"&&e.destroy())}function A(l){if(f(),rC.listenerCount(this,"error")===0)throw l}r.on("error",A),e.on("error",A);function f(){r.removeListener("data",n),e.removeListener("drain",i),r.removeListener("end",o),r.removeListener("close",a),r.removeListener("error",A),e.removeListener("error",A),r.removeListener("end",f),r.removeListener("close",f),e.removeListener("close",f)}return r.on("end",f),r.on("close",f),e.on("close",f),e.emit("pipe",r),e}});var Yt={};MI(Yt,{default:()=>Yne,finished:()=>HF,isDisturbed:()=>YF,isErrored:()=>GF,isReadable:()=>qF});var fc,OF,PF,kp,iC,Gne,HF,qF,GF,YF,Yne,ts=QD(()=>{"use strict";fc=hr(nC());vn(Yt,hr(nC()));OF=fc.default??fc.default??{},PF=fc.finished??OF.finished,kp=e=>!!e&&typeof e.getReader=="function"&&typeof e.cancel=="function",iC=e=>!!e&&typeof e.getWriter=="function"&&typeof e.abort=="function",Gne=e=>e instanceof Error?e:e==null?new Error("stream errored"):new Error(String(e)),HF=(e,t,r)=>{let n=t,i=r;if(typeof n=="function"&&(i=n,n={}),!kp(e)&&!iC(e)&&typeof PF=="function")return PF(e,n,i);let s=typeof i=="function"?i:()=>{},o=n?.readable!==!1,a=n?.writable!==!1,A=!1,f=null,l=()=>{A=!0,f!==null&&(clearTimeout(f),f=null)},p=(S=void 0)=>{A||(l(),queueMicrotask(()=>s(S)))},B=()=>{if(A)return;let S=e?._state;if(S==="errored"){p(Gne(e?._storedError));return}if(S==="closed"||kp(e)&&!o||iC(e)&&!a){p();return}f=setTimeout(B,0)};return B(),l},qF=e=>kp(e)?e._state==="readable":!!e&&e.readable!==!1&&e.destroyed!==!0,GF=e=>kp(e)||iC(e)?e?._state==="errored":e?.errored!=null,YF=e=>!!(e?.locked||e?.disturbed===!0||e?._disturbed===!0||e?.readableDidRead===!0),Yne={...OF,finished:HF,isReadable:qF,isErrored:GF,isDisturbed:YF}});var WF=x(()=>{});var _h=x((DDe,ck)=>{var dC=typeof Map=="function"&&Map.prototype,sC=Object.getOwnPropertyDescriptor&&dC?Object.getOwnPropertyDescriptor(Map.prototype,"size"):null,Up=dC&&sC&&typeof sC.get=="function"?sC.get:null,VF=dC&&Map.prototype.forEach,gC=typeof Set=="function"&&Set.prototype,oC=Object.getOwnPropertyDescriptor&&gC?Object.getOwnPropertyDescriptor(Set.prototype,"size"):null,Lp=gC&&oC&&typeof oC.get=="function"?oC.get:null,JF=gC&&Set.prototype.forEach,Wne=typeof WeakMap=="function"&&WeakMap.prototype,Qh=Wne?WeakMap.prototype.has:null,Vne=typeof WeakSet=="function"&&WeakSet.prototype,wh=Vne?WeakSet.prototype.has:null,Jne=typeof WeakRef=="function"&&WeakRef.prototype,jF=Jne?WeakRef.prototype.deref:null,jne=Boolean.prototype.valueOf,zne=Object.prototype.toString,Kne=Function.prototype.toString,Xne=String.prototype.match,pC=String.prototype.slice,eA=String.prototype.replace,Zne=String.prototype.toUpperCase,zF=String.prototype.toLowerCase,ik=RegExp.prototype.test,KF=Array.prototype.concat,Ks=Array.prototype.join,$ne=Array.prototype.slice,XF=Math.floor,fC=typeof BigInt=="function"?BigInt.prototype.valueOf:null,aC=Object.getOwnPropertySymbols,uC=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?Symbol.prototype.toString:null,uc=typeof Symbol=="function"&&typeof Symbol.iterator=="object",Sh=typeof Symbol=="function"&&Symbol.toStringTag&&(typeof Symbol.toStringTag===uc||!0)?Symbol.toStringTag:null,sk=Object.prototype.propertyIsEnumerable,ZF=(typeof Reflect=="function"?Reflect.getPrototypeOf:Object.getPrototypeOf)||([].__proto__===Array.prototype?function(e){return e.__proto__}:null);function $F(e,t){if(e===1/0||e===-1/0||e!==e||e&&e>-1e3&&e<1e3||ik.call(/e/,t))return t;var r=/[0-9](?=(?:[0-9]{3})+(?![0-9]))/g;if(typeof e=="number"){var n=e<0?-XF(-e):XF(e);if(n!==e){var i=String(n),s=pC.call(t,i.length+1);return eA.call(i,r,"$&_")+"."+eA.call(eA.call(s,/([0-9]{3})/g,"$&_"),/_$/,"")}}return eA.call(t,r,"$&_")}var cC=WF(),ek=cC.custom,tk=Ak(ek)?ek:null,ok={__proto__:null,double:'"',single:"'"},eie={__proto__:null,double:/(["\\])/g,single:/(['\\])/g};ck.exports=function e(t,r,n,i){var s=r||{};if(Jo(s,"quoteStyle")&&!Jo(ok,s.quoteStyle))throw new TypeError('option "quoteStyle" must be "single" or "double"');if(Jo(s,"maxStringLength")&&(typeof s.maxStringLength=="number"?s.maxStringLength<0&&s.maxStringLength!==1/0:s.maxStringLength!==null))throw new TypeError('option "maxStringLength", if provided, must be a positive integer, Infinity, or `null`');var o=Jo(s,"customInspect")?s.customInspect:!0;if(typeof o!="boolean"&&o!=="symbol")throw new TypeError("option \"customInspect\", if provided, must be `true`, `false`, or `'symbol'`");if(Jo(s,"indent")&&s.indent!==null&&s.indent!=="	"&&!(parseInt(s.indent,10)===s.indent&&s.indent>0))throw new TypeError('option "indent" must be "\\t", an integer > 0, or `null`');if(Jo(s,"numericSeparator")&&typeof s.numericSeparator!="boolean")throw new TypeError('option "numericSeparator", if provided, must be `true` or `false`');var a=s.numericSeparator;if(typeof t>"u")return"undefined";if(t===null)return"null";if(typeof t=="boolean")return t?"true":"false";if(typeof t=="string")return uk(t,s);if(typeof t=="number"){if(t===0)return 1/0/t>0?"0":"-0";var A=String(t);return a?$F(t,A):A}if(typeof t=="bigint"){var f=String(t)+"n";return a?$F(t,f):f}var l=typeof s.depth>"u"?5:s.depth;if(typeof n>"u"&&(n=0),n>=l&&l>0&&typeof t=="object")return lC(t)?"[Array]":"[Object]";var p=yie(s,n);if(typeof i>"u")i=[];else if(fk(i,t)>=0)return"[Circular]";function B(b,c,g){if(c&&(i=$ne.call(i),i.push(c)),g){var w={depth:s.depth};return Jo(s,"quoteStyle")&&(w.quoteStyle=s.quoteStyle),e(b,w,n+1,i)}return e(b,s,n+1,i)}if(typeof t=="function"&&!rk(t)){var S=fie(t),_=xp(t,B);return"[Function"+(S?": "+S:" (anonymous)")+"]"+(_.length>0?" { "+Ks.call(_,", ")+" }":"")}if(Ak(t)){var N=uc?eA.call(String(t),/^(Symbol\(.*\))_[^)]*$/,"$1"):uC.call(t);return typeof t=="object"&&!uc?Ch(N):N}if(gie(t)){for(var P="<"+zF.call(String(t.nodeName)),U=t.attributes||[],G=0;G<U.length;G++)P+=" "+U[G].name+"="+ak(tie(U[G].value),"double",s);return P+=">",t.childNodes&&t.childNodes.length&&(P+="..."),P+="</"+zF.call(String(t.nodeName))+">",P}if(lC(t)){if(t.length===0)return"[]";var Y=xp(t,B);return p&&!Eie(Y)?"["+hC(Y,p)+"]":"[ "+Ks.call(Y,", ")+" ]"}if(nie(t)){var Z=xp(t,B);return!("cause"in Error.prototype)&&"cause"in t&&!sk.call(t,"cause")?"{ ["+String(t)+"] "+Ks.call(KF.call("[cause]: "+B(t.cause),Z),", ")+" }":Z.length===0?"["+String(t)+"]":"{ ["+String(t)+"] "+Ks.call(Z,", ")+" }"}if(typeof t=="object"&&o){if(tk&&typeof t[tk]=="function"&&cC)return cC(t,{depth:l-n});if(o!=="symbol"&&typeof t.inspect=="function")return t.inspect()}if(uie(t)){var ee=[];return VF&&VF.call(t,function(b,c){ee.push(B(c,t,!0)+" => "+B(b,t))}),nk("Map",Up.call(t),ee,p)}if(hie(t)){var j=[];return JF&&JF.call(t,function(b){j.push(B(b,t))}),nk("Set",Lp.call(t),j,p)}if(cie(t))return AC("WeakMap");if(die(t))return AC("WeakSet");if(lie(t))return AC("WeakRef");if(sie(t))return Ch(B(Number(t)));if(aie(t))return Ch(B(fC.call(t)));if(oie(t))return Ch(jne.call(t));if(iie(t))return Ch(B(String(t)));if(typeof window<"u"&&t===window)return"{ [object Window] }";if(typeof globalThis<"u"&&t===globalThis||typeof globalThis<"u"&&t===globalThis)return"{ [object globalThis] }";if(!rie(t)&&!rk(t)){var se=xp(t,B),ie=ZF?ZF(t)===Object.prototype:t instanceof Object||t.constructor===Object,ce=t instanceof Object?"":"null prototype",H=!ie&&Sh&&Object(t)===t&&Sh in t?pC.call(tA(t),8,-1):ce?"Object":"",E=ie||typeof t.constructor!="function"?"":t.constructor.name?t.constructor.name+" ":"",v=E+(H||ce?"["+Ks.call(KF.call([],H||[],ce||[]),": ")+"] ":"");return se.length===0?v+"{}":p?v+"{"+hC(se,p)+"}":v+"{ "+Ks.call(se,", ")+" }"}return String(t)};function ak(e,t,r){var n=r.quoteStyle||t,i=ok[n];return i+e+i}function tie(e){return eA.call(String(e),/"/g,"&quot;")}function cf(e){return!Sh||!(typeof e=="object"&&(Sh in e||typeof e[Sh]<"u"))}function lC(e){return tA(e)==="[object Array]"&&cf(e)}function rie(e){return tA(e)==="[object Date]"&&cf(e)}function rk(e){return tA(e)==="[object RegExp]"&&cf(e)}function nie(e){return tA(e)==="[object Error]"&&cf(e)}function iie(e){return tA(e)==="[object String]"&&cf(e)}function sie(e){return tA(e)==="[object Number]"&&cf(e)}function oie(e){return tA(e)==="[object Boolean]"&&cf(e)}function Ak(e){if(uc)return e&&typeof e=="object"&&e instanceof Symbol;if(typeof e=="symbol")return!0;if(!e||typeof e!="object"||!uC)return!1;try{return uC.call(e),!0}catch{}return!1}function aie(e){if(!e||typeof e!="object"||!fC)return!1;try{return fC.call(e),!0}catch{}return!1}var Aie=Object.prototype.hasOwnProperty||function(e){return e in this};function Jo(e,t){return Aie.call(e,t)}function tA(e){return zne.call(e)}function fie(e){if(e.name)return e.name;var t=Xne.call(Kne.call(e),/^function\s*([\w$]+)/);return t?t[1]:null}function fk(e,t){if(e.indexOf)return e.indexOf(t);for(var r=0,n=e.length;r<n;r++)if(e[r]===t)return r;return-1}function uie(e){if(!Up||!e||typeof e!="object")return!1;try{Up.call(e);try{Lp.call(e)}catch{return!0}return e instanceof Map}catch{}return!1}function cie(e){if(!Qh||!e||typeof e!="object")return!1;try{Qh.call(e,Qh);try{wh.call(e,wh)}catch{return!0}return e instanceof WeakMap}catch{}return!1}function lie(e){if(!jF||!e||typeof e!="object")return!1;try{return jF.call(e),!0}catch{}return!1}function hie(e){if(!Lp||!e||typeof e!="object")return!1;try{Lp.call(e);try{Up.call(e)}catch{return!0}return e instanceof Set}catch{}return!1}function die(e){if(!wh||!e||typeof e!="object")return!1;try{wh.call(e,wh);try{Qh.call(e,Qh)}catch{return!0}return e instanceof WeakSet}catch{}return!1}function gie(e){return!e||typeof e!="object"?!1:typeof HTMLElement<"u"&&e instanceof HTMLElement?!0:typeof e.nodeName=="string"&&typeof e.getAttribute=="function"}function uk(e,t){if(e.length>t.maxStringLength){var r=e.length-t.maxStringLength,n="... "+r+" more character"+(r>1?"s":"");return uk(pC.call(e,0,t.maxStringLength),t)+n}var i=eie[t.quoteStyle||"single"];i.lastIndex=0;var s=eA.call(eA.call(e,i,"\\$1"),/[\x00-\x1f]/g,pie);return ak(s,"single",t)}function pie(e){var t=e.charCodeAt(0),r={8:"b",9:"t",10:"n",12:"f",13:"r"}[t];return r?"\\"+r:"\\x"+(t<16?"0":"")+Zne.call(t.toString(16))}function Ch(e){return"Object("+e+")"}function AC(e){return e+" { ? }"}function nk(e,t,r,n){var i=n?hC(r,n):Ks.call(r,", ");return e+" ("+t+") {"+i+"}"}function Eie(e){for(var t=0;t<e.length;t++)if(fk(e[t],`
-`)>=0)return!1;return!0}function yie(e,t){var r;if(e.indent==="	")r="	";else if(typeof e.indent=="number"&&e.indent>0)r=Ks.call(Array(e.indent+1)," ");else return null;return{base:r,prev:Ks.call(Array(t+1),r)}}function hC(e,t){if(e.length===0)return"";var r=`
-`+t.prev+t.base;return r+Ks.call(e,","+r)+`
-`+t.prev}function xp(e,t){var r=lC(e),n=[];if(r){n.length=e.length;for(var i=0;i<e.length;i++)n[i]=Jo(e,i)?t(e[i],e):""}var s=typeof aC=="function"?aC(e):[],o;if(uc){o={};for(var a=0;a<s.length;a++)o["$"+s[a]]=s[a]}for(var A in e)Jo(e,A)&&(r&&String(Number(A))===A&&A<e.length||uc&&o["$"+A]instanceof Symbol||(ik.call(/[^\w$]/,A)?n.push(t(A,e)+": "+t(e[A],e)):n.push(A+": "+t(e[A],e))));if(typeof aC=="function")for(var f=0;f<s.length;f++)sk.call(e,s[f])&&n.push("["+t(s[f])+"]: "+t(e[s[f]],e));return n}});var hk=x((TDe,lk)=>{"use strict";var mie=_h(),Bie=$i(),Pp=function(e,t,r){for(var n=e,i;(i=n.next)!=null;n=i)if(i.key===t)return n.next=i.next,r||(i.next=e.next,e.next=i),i},Iie=function(e,t){if(e){var r=Pp(e,t);return r&&r.value}},bie=function(e,t,r){var n=Pp(e,t);n?n.value=r:e.next={key:t,next:e.next,value:r}},Cie=function(e,t){return e?!!Pp(e,t):!1},Qie=function(e,t){if(e)return Pp(e,t,!0)};lk.exports=function(){var t,r={assert:function(n){if(!r.has(n))throw new Bie("Side channel does not contain "+mie(n))},delete:function(n){var i=t&&t.next,s=Qie(t,n);return s&&i&&i===s&&(t=void 0),!!s},get:function(n){return Iie(t,n)},has:function(n){return Cie(t,n)},set:function(n,i){t||(t={next:void 0}),bie(t,n,i)}};return r}});var EC=x((NDe,gk)=>{"use strict";var wie=ec(),vh=Js(),Sie=_h(),_ie=$i(),dk=wie("%Map%",!0),vie=vh("Map.prototype.get",!0),Rie=vh("Map.prototype.set",!0),Die=vh("Map.prototype.has",!0),Tie=vh("Map.prototype.delete",!0),Nie=vh("Map.prototype.size",!0);gk.exports=!!dk&&function(){var t,r={assert:function(n){if(!r.has(n))throw new _ie("Side channel does not contain "+Sie(n))},delete:function(n){if(t){var i=Tie(t,n);return Nie(t)===0&&(t=void 0),i}return!1},get:function(n){if(t)return vie(t,n)},has:function(n){return t?Die(t,n):!1},set:function(n,i){t||(t=new dk),Rie(t,n,i)}};return r}});var Ek=x((MDe,pk)=>{"use strict";var Mie=ec(),Hp=Js(),Fie=_h(),Op=EC(),kie=$i(),cc=Mie("%WeakMap%",!0),xie=Hp("WeakMap.prototype.get",!0),Uie=Hp("WeakMap.prototype.set",!0),Lie=Hp("WeakMap.prototype.has",!0),Pie=Hp("WeakMap.prototype.delete",!0);pk.exports=cc?function(){var t,r,n={assert:function(i){if(!n.has(i))throw new kie("Side channel does not contain "+Fie(i))},delete:function(i){if(cc&&i&&(typeof i=="object"||typeof i=="function")){if(t)return Pie(t,i)}else if(Op&&r)return r.delete(i);return!1},get:function(i){return cc&&i&&(typeof i=="object"||typeof i=="function")&&t?xie(t,i):r&&r.get(i)},has:function(i){return cc&&i&&(typeof i=="object"||typeof i=="function")&&t?Lie(t,i):!!r&&r.has(i)},set:function(i,s){cc&&i&&(typeof i=="object"||typeof i=="function")?(t||(t=new cc),Uie(t,i,s)):Op&&(r||(r=Op()),r.set(i,s))}};return n}:Op});var yC=x((FDe,yk)=>{"use strict";var Oie=$i(),Hie=_h(),qie=hk(),Gie=EC(),Yie=Ek(),Wie=Yie||Gie||qie;yk.exports=function(){var t,r={assert:function(n){if(!r.has(n))throw new Oie("Side channel does not contain "+Hie(n))},delete:function(n){return!!t&&t.delete(n)},get:function(n){return t&&t.get(n)},has:function(n){return!!t&&t.has(n)},set:function(n,i){t||(t=Wie()),t.set(n,i)}};return r}});var qp=x((kDe,mk)=>{"use strict";var Vie=String.prototype.replace,Jie=/%20/g,mC={RFC1738:"RFC1738",RFC3986:"RFC3986"};mk.exports={default:mC.RFC3986,formatters:{RFC1738:function(e){return Vie.call(e,Jie,"+")},RFC3986:function(e){return String(e)}},RFC1738:mC.RFC1738,RFC3986:mC.RFC3986}});var CC=x((xDe,Bk)=>{"use strict";var jie=qp(),zie=yC(),BC=Object.prototype.hasOwnProperty,lf=Array.isArray,Gp=zie(),lc=function(t,r){return Gp.set(t,r),t},hf=function(t){return Gp.has(t)},Rh=function(t){return Gp.get(t)},bC=function(t,r){Gp.set(t,r)},Xs=(function(){for(var e=[],t=0;t<256;++t)e[e.length]="%"+((t<16?"0":"")+t.toString(16)).toUpperCase();return e})(),Kie=function(t){for(;t.length>1;){var r=t.pop(),n=r.obj[r.prop];if(lf(n)){for(var i=[],s=0;s<n.length;++s)typeof n[s]<"u"&&(i[i.length]=n[s]);r.obj[r.prop]=i}}},Dh=function(t,r){for(var n=r&&r.plainObjects?{__proto__:null}:{},i=0;i<t.length;++i)typeof t[i]<"u"&&(n[i]=t[i]);return n},Xie=function e(t,r,n){if(!r)return t;if(typeof r!="object"&&typeof r!="function"){if(lf(t)){var i=t.length;if(n&&typeof n.arrayLimit=="number"&&i>n.arrayLimit)return lc(Dh(t.concat(r),n),i);t[i]=r}else if(t&&typeof t=="object")if(hf(t)){var s=Rh(t)+1;t[s]=r,bC(t,s)}else{if(n&&n.strictMerge)return[t,r];(n&&(n.plainObjects||n.allowPrototypes)||!BC.call(Object.prototype,r))&&(t[r]=!0)}else return[t,r];return t}if(!t||typeof t!="object"){if(hf(r)){for(var o=Object.keys(r),a=n&&n.plainObjects?{__proto__:null,0:t}:{0:t},A=0;A<o.length;A++){var f=parseInt(o[A],10);a[f+1]=r[o[A]]}return lc(a,Rh(r)+1)}var l=[t].concat(r);return n&&typeof n.arrayLimit=="number"&&l.length>n.arrayLimit?lc(Dh(l,n),l.length-1):l}var p=t;return lf(t)&&!lf(r)&&(p=Dh(t,n)),lf(t)&&lf(r)?(r.forEach(function(B,S){if(BC.call(t,S)){var _=t[S];_&&typeof _=="object"&&B&&typeof B=="object"?t[S]=e(_,B,n):t[t.length]=B}else t[S]=B}),t):Object.keys(r).reduce(function(B,S){var _=r[S];if(BC.call(B,S)?B[S]=e(B[S],_,n):B[S]=_,hf(r)&&!hf(B)&&lc(B,Rh(r)),hf(B)){var N=parseInt(S,10);String(N)===S&&N>=0&&N>Rh(B)&&bC(B,N)}return B},p)},Zie=function(t,r){return Object.keys(r).reduce(function(n,i){return n[i]=r[i],n},t)},$ie=function(e,t,r){var n=e.replace(/\+/g," ");if(r==="iso-8859-1")return n.replace(/%[0-9a-f]{2}/gi,unescape);try{return decodeURIComponent(n)}catch{return n}},IC=1024,ese=function(t,r,n,i,s){if(t.length===0)return t;var o=t;if(typeof t=="symbol"?o=Symbol.prototype.toString.call(t):typeof t!="string"&&(o=String(t)),n==="iso-8859-1")return escape(o).replace(/%u[0-9a-f]{4}/gi,function(S){return"%26%23"+parseInt(S.slice(2),16)+"%3B"});for(var a="",A=0;A<o.length;A+=IC){for(var f=o.length>=IC?o.slice(A,A+IC):o,l=[],p=0;p<f.length;++p){var B=f.charCodeAt(p);if(B===45||B===46||B===95||B===126||B>=48&&B<=57||B>=65&&B<=90||B>=97&&B<=122||s===jie.RFC1738&&(B===40||B===41)){l[l.length]=f.charAt(p);continue}if(B<128){l[l.length]=Xs[B];continue}if(B<2048){l[l.length]=Xs[192|B>>6]+Xs[128|B&63];continue}if(B<55296||B>=57344){l[l.length]=Xs[224|B>>12]+Xs[128|B>>6&63]+Xs[128|B&63];continue}p+=1,B=65536+((B&1023)<<10|f.charCodeAt(p)&1023),l[l.length]=Xs[240|B>>18]+Xs[128|B>>12&63]+Xs[128|B>>6&63]+Xs[128|B&63]}a+=l.join("")}return a},tse=function(t){for(var r=[{obj:{o:t},prop:"o"}],n=[],i=0;i<r.length;++i)for(var s=r[i],o=s.obj[s.prop],a=Object.keys(o),A=0;A<a.length;++A){var f=a[A],l=o[f];typeof l=="object"&&l!==null&&n.indexOf(l)===-1&&(r[r.length]={obj:o,prop:f},n[n.length]=l)}return Kie(r),t},rse=function(t){return Object.prototype.toString.call(t)==="[object RegExp]"},nse=function(t){return!t||typeof t!="object"?!1:!!(t.constructor&&t.constructor.isBuffer&&t.constructor.isBuffer(t))},ise=function(t,r,n,i){if(hf(t)){var s=Rh(t)+1;return t[s]=r,bC(t,s),t}var o=[].concat(t,r);return o.length>n?lc(Dh(o,{plainObjects:i}),o.length-1):o},sse=function(t,r){if(lf(t)){for(var n=[],i=0;i<t.length;i+=1)n[n.length]=r(t[i]);return n}return r(t)};Bk.exports={arrayToObject:Dh,assign:Zie,combine:ise,compact:tse,decode:$ie,encode:ese,isBuffer:nse,isOverflow:hf,isRegExp:rse,markOverflow:lc,maybeMap:sse,merge:Xie}});var Sk=x((UDe,wk)=>{"use strict";var bk=yC(),Yp=CC(),Th=qp(),ose=Object.prototype.hasOwnProperty,Ck={brackets:function(t){return t+"[]"},comma:"comma",indices:function(t,r){return t+"["+r+"]"},repeat:function(t){return t}},Zs=Array.isArray,ase=Array.prototype.push,Qk=function(e,t){ase.apply(e,Zs(t)?t:[t])},Ase=Date.prototype.toISOString,Ik=Th.default,Sr={addQueryPrefix:!1,allowDots:!1,allowEmptyArrays:!1,arrayFormat:"indices",charset:"utf-8",charsetSentinel:!1,commaRoundTrip:!1,delimiter:"&",encode:!0,encodeDotInKeys:!1,encoder:Yp.encode,encodeValuesOnly:!1,filter:void 0,format:Ik,formatter:Th.formatters[Ik],indices:!1,serializeDate:function(t){return Ase.call(t)},skipNulls:!1,strictNullHandling:!1},fse=function(t){return typeof t=="string"||typeof t=="number"||typeof t=="boolean"||typeof t=="symbol"||typeof t=="bigint"},QC={},use=function e(t,r,n,i,s,o,a,A,f,l,p,B,S,_,N,P,U,G){for(var Y=t,Z=G,ee=0,j=!1;(Z=Z.get(QC))!==void 0&&!j;){var se=Z.get(t);if(ee+=1,typeof se<"u"){if(se===ee)throw new RangeError("Cyclic object value");j=!0}typeof Z.get(QC)>"u"&&(ee=0)}if(typeof l=="function"?Y=l(r,Y):Y instanceof Date?Y=S(Y):n==="comma"&&Zs(Y)&&(Y=Yp.maybeMap(Y,function(D){return D instanceof Date?S(D):D})),Y===null){if(o)return f&&!P?f(r,Sr.encoder,U,"key",_):r;Y=""}if(fse(Y)||Yp.isBuffer(Y)){if(f){var ie=P?r:f(r,Sr.encoder,U,"key",_);return[N(ie)+"="+N(f(Y,Sr.encoder,U,"value",_))]}return[N(r)+"="+N(String(Y))]}var ce=[];if(typeof Y>"u")return ce;var H;if(n==="comma"&&Zs(Y))P&&f&&(Y=Yp.maybeMap(Y,f)),H=[{value:Y.length>0?Y.join(",")||null:void 0}];else if(Zs(l))H=l;else{var E=Object.keys(Y);H=p?E.sort(p):E}var v=A?String(r).replace(/\./g,"%2E"):String(r),b=i&&Zs(Y)&&Y.length===1?v+"[]":v;if(s&&Zs(Y)&&Y.length===0)return b+"[]";for(var c=0;c<H.length;++c){var g=H[c],w=typeof g=="object"&&g&&typeof g.value<"u"?g.value:Y[g];if(!(a&&w===null)){var R=B&&A?String(g).replace(/\./g,"%2E"):String(g),C=Zs(Y)?typeof n=="function"?n(b,R):b:b+(B?"."+R:"["+R+"]");G.set(t,ee);var h=bk();h.set(QC,G),Qk(ce,e(w,C,n,i,s,o,a,A,n==="comma"&&P&&Zs(Y)?null:f,l,p,B,S,_,N,P,U,h))}}return ce},cse=function(t){if(!t)return Sr;if(typeof t.allowEmptyArrays<"u"&&typeof t.allowEmptyArrays!="boolean")throw new TypeError("`allowEmptyArrays` option can only be `true` or `false`, when provided");if(typeof t.encodeDotInKeys<"u"&&typeof t.encodeDotInKeys!="boolean")throw new TypeError("`encodeDotInKeys` option can only be `true` or `false`, when provided");if(t.encoder!==null&&typeof t.encoder<"u"&&typeof t.encoder!="function")throw new TypeError("Encoder has to be a function.");var r=t.charset||Sr.charset;if(typeof t.charset<"u"&&t.charset!=="utf-8"&&t.charset!=="iso-8859-1")throw new TypeError("The charset option must be either utf-8, iso-8859-1, or undefined");var n=Th.default;if(typeof t.format<"u"){if(!ose.call(Th.formatters,t.format))throw new TypeError("Unknown format option provided.");n=t.format}var i=Th.formatters[n],s=Sr.filter;(typeof t.filter=="function"||Zs(t.filter))&&(s=t.filter);var o;if(t.arrayFormat in Ck?o=t.arrayFormat:"indices"in t?o=t.indices?"indices":"repeat":o=Sr.arrayFormat,"commaRoundTrip"in t&&typeof t.commaRoundTrip!="boolean")throw new TypeError("`commaRoundTrip` must be a boolean, or absent");var a=typeof t.allowDots>"u"?t.encodeDotInKeys===!0?!0:Sr.allowDots:!!t.allowDots;return{addQueryPrefix:typeof t.addQueryPrefix=="boolean"?t.addQueryPrefix:Sr.addQueryPrefix,allowDots:a,allowEmptyArrays:typeof t.allowEmptyArrays=="boolean"?!!t.allowEmptyArrays:Sr.allowEmptyArrays,arrayFormat:o,charset:r,charsetSentinel:typeof t.charsetSentinel=="boolean"?t.charsetSentinel:Sr.charsetSentinel,commaRoundTrip:!!t.commaRoundTrip,delimiter:typeof t.delimiter>"u"?Sr.delimiter:t.delimiter,encode:typeof t.encode=="boolean"?t.encode:Sr.encode,encodeDotInKeys:typeof t.encodeDotInKeys=="boolean"?t.encodeDotInKeys:Sr.encodeDotInKeys,encoder:typeof t.encoder=="function"?t.encoder:Sr.encoder,encodeValuesOnly:typeof t.encodeValuesOnly=="boolean"?t.encodeValuesOnly:Sr.encodeValuesOnly,filter:s,format:n,formatter:i,serializeDate:typeof t.serializeDate=="function"?t.serializeDate:Sr.serializeDate,skipNulls:typeof t.skipNulls=="boolean"?t.skipNulls:Sr.skipNulls,sort:typeof t.sort=="function"?t.sort:null,strictNullHandling:typeof t.strictNullHandling=="boolean"?t.strictNullHandling:Sr.strictNullHandling}};wk.exports=function(e,t){var r=e,n=cse(t),i,s;typeof n.filter=="function"?(s=n.filter,r=s("",r)):Zs(n.filter)&&(s=n.filter,i=s);var o=[];if(typeof r!="object"||r===null)return"";var a=Ck[n.arrayFormat],A=a==="comma"&&n.commaRoundTrip;i||(i=Object.keys(r)),n.sort&&i.sort(n.sort);for(var f=bk(),l=0;l<i.length;++l){var p=i[l],B=r[p];n.skipNulls&&B===null||Qk(o,use(B,p,a,A,n.allowEmptyArrays,n.strictNullHandling,n.skipNulls,n.encodeDotInKeys,n.encode?n.encoder:null,n.filter,n.sort,n.allowDots,n.serializeDate,n.format,n.formatter,n.encodeValuesOnly,n.charset,f))}var S=o.join(n.delimiter),_=n.addQueryPrefix===!0?"?":"";return n.charsetSentinel&&(n.charset==="iso-8859-1"?_+="utf8=%26%2310003%3B&":_+="utf8=%E2%9C%93&"),S.length>0?_+S:""}});var Rk=x((LDe,vk)=>{"use strict";var $s=CC(),Wp=Object.prototype.hasOwnProperty,wC=Array.isArray,sr={allowDots:!1,allowEmptyArrays:!1,allowPrototypes:!1,allowSparse:!1,arrayLimit:20,charset:"utf-8",charsetSentinel:!1,comma:!1,decodeDotInKeys:!1,decoder:$s.decode,delimiter:"&",depth:5,duplicates:"combine",ignoreQueryPrefix:!1,interpretNumericEntities:!1,parameterLimit:1e3,parseArrays:!0,plainObjects:!1,strictDepth:!1,strictMerge:!0,strictNullHandling:!1,throwOnLimitExceeded:!1},lse=function(e){return e.replace(/&#(\d+);/g,function(t,r){return String.fromCharCode(parseInt(r,10))})},_k=function(e,t,r){if(e&&typeof e=="string"&&t.comma&&e.indexOf(",")>-1)return e.split(",");if(t.throwOnLimitExceeded&&r>=t.arrayLimit)throw new RangeError("Array limit exceeded. Only "+t.arrayLimit+" element"+(t.arrayLimit===1?"":"s")+" allowed in an array.");return e},hse="utf8=%26%2310003%3B",dse="utf8=%E2%9C%93",gse=function(t,r){var n={__proto__:null},i=r.ignoreQueryPrefix?t.replace(/^\?/,""):t;i=i.replace(/%5B/gi,"[").replace(/%5D/gi,"]");var s=r.parameterLimit===1/0?void 0:r.parameterLimit,o=i.split(r.delimiter,r.throwOnLimitExceeded?s+1:s);if(r.throwOnLimitExceeded&&o.length>s)throw new RangeError("Parameter limit exceeded. Only "+s+" parameter"+(s===1?"":"s")+" allowed.");var a=-1,A,f=r.charset;if(r.charsetSentinel)for(A=0;A<o.length;++A)o[A].indexOf("utf8=")===0&&(o[A]===dse?f="utf-8":o[A]===hse&&(f="iso-8859-1"),a=A,A=o.length);for(A=0;A<o.length;++A)if(A!==a){var l=o[A],p=l.indexOf("]="),B=p===-1?l.indexOf("="):p+1,S,_;if(B===-1?(S=r.decoder(l,sr.decoder,f,"key"),_=r.strictNullHandling?null:""):(S=r.decoder(l.slice(0,B),sr.decoder,f,"key"),S!==null&&(_=$s.maybeMap(_k(l.slice(B+1),r,wC(n[S])?n[S].length:0),function(P){return r.decoder(P,sr.decoder,f,"value")}))),_&&r.interpretNumericEntities&&f==="iso-8859-1"&&(_=lse(String(_))),l.indexOf("[]=")>-1&&(_=wC(_)?[_]:_),r.comma&&wC(_)&&_.length>r.arrayLimit){if(r.throwOnLimitExceeded)throw new RangeError("Array limit exceeded. Only "+r.arrayLimit+" element"+(r.arrayLimit===1?"":"s")+" allowed in an array.");_=$s.combine([],_,r.arrayLimit,r.plainObjects)}if(S!==null){var N=Wp.call(n,S);N&&(r.duplicates==="combine"||l.indexOf("[]=")>-1)?n[S]=$s.combine(n[S],_,r.arrayLimit,r.plainObjects):(!N||r.duplicates==="last")&&(n[S]=_)}}return n},pse=function(e,t,r,n){var i=0;if(e.length>0&&e[e.length-1]==="[]"){var s=e.slice(0,-1).join("");i=Array.isArray(t)&&t[s]?t[s].length:0}for(var o=n?t:_k(t,r,i),a=e.length-1;a>=0;--a){var A,f=e[a];if(f==="[]"&&r.parseArrays)$s.isOverflow(o)?A=o:A=r.allowEmptyArrays&&(o===""||r.strictNullHandling&&o===null)?[]:$s.combine([],o,r.arrayLimit,r.plainObjects);else{A=r.plainObjects?{__proto__:null}:{};var l=f.charAt(0)==="["&&f.charAt(f.length-1)==="]"?f.slice(1,-1):f,p=r.decodeDotInKeys?l.replace(/%2E/g,"."):l,B=parseInt(p,10),S=!isNaN(B)&&f!==p&&String(B)===p&&B>=0&&r.parseArrays;if(!r.parseArrays&&p==="")A={0:o};else if(S&&B<r.arrayLimit)A=[],A[B]=o;else{if(S&&r.throwOnLimitExceeded)throw new RangeError("Array limit exceeded. Only "+r.arrayLimit+" element"+(r.arrayLimit===1?"":"s")+" allowed in an array.");S?(A[B]=o,$s.markOverflow(A,B)):p!=="__proto__"&&(A[p]=o)}}o=A}return o},Ese=function(t,r){var n=r.allowDots?t.replace(/\.([^.[]+)/g,"[$1]"):t;if(r.depth<=0)return!r.plainObjects&&Wp.call(Object.prototype,n)&&!r.allowPrototypes?void 0:[n];var i=/(\[[^[\]]*])/,s=/(\[[^[\]]*])/g,o=i.exec(n),a=o?n.slice(0,o.index):n,A=[];if(a){if(!r.plainObjects&&Wp.call(Object.prototype,a)&&!r.allowPrototypes)return;A[A.length]=a}for(var f=0;(o=s.exec(n))!==null&&f<r.depth;){f+=1;var l=o[1].slice(1,-1);if(!r.plainObjects&&Wp.call(Object.prototype,l)&&!r.allowPrototypes)return;A[A.length]=o[1]}if(o){if(r.strictDepth===!0)throw new RangeError("Input depth exceeded depth option of "+r.depth+" and strictDepth is true");A[A.length]="["+n.slice(o.index)+"]"}return A},yse=function(t,r,n,i){if(t){var s=Ese(t,n);if(s)return pse(s,r,n,i)}},mse=function(t){if(!t)return sr;if(typeof t.allowEmptyArrays<"u"&&typeof t.allowEmptyArrays!="boolean")throw new TypeError("`allowEmptyArrays` option can only be `true` or `false`, when provided");if(typeof t.decodeDotInKeys<"u"&&typeof t.decodeDotInKeys!="boolean")throw new TypeError("`decodeDotInKeys` option can only be `true` or `false`, when provided");if(t.decoder!==null&&typeof t.decoder<"u"&&typeof t.decoder!="function")throw new TypeError("Decoder has to be a function.");if(typeof t.charset<"u"&&t.charset!=="utf-8"&&t.charset!=="iso-8859-1")throw new TypeError("The charset option must be either utf-8, iso-8859-1, or undefined");if(typeof t.throwOnLimitExceeded<"u"&&typeof t.throwOnLimitExceeded!="boolean")throw new TypeError("`throwOnLimitExceeded` option must be a boolean");var r=typeof t.charset>"u"?sr.charset:t.charset,n=typeof t.duplicates>"u"?sr.duplicates:t.duplicates;if(n!=="combine"&&n!=="first"&&n!=="last")throw new TypeError("The duplicates option must be either combine, first, or last");var i=typeof t.allowDots>"u"?t.decodeDotInKeys===!0?!0:sr.allowDots:!!t.allowDots;return{allowDots:i,allowEmptyArrays:typeof t.allowEmptyArrays=="boolean"?!!t.allowEmptyArrays:sr.allowEmptyArrays,allowPrototypes:typeof t.allowPrototypes=="boolean"?t.allowPrototypes:sr.allowPrototypes,allowSparse:typeof t.allowSparse=="boolean"?t.allowSparse:sr.allowSparse,arrayLimit:typeof t.arrayLimit=="number"?t.arrayLimit:sr.arrayLimit,charset:r,charsetSentinel:typeof t.charsetSentinel=="boolean"?t.charsetSentinel:sr.charsetSentinel,comma:typeof t.comma=="boolean"?t.comma:sr.comma,decodeDotInKeys:typeof t.decodeDotInKeys=="boolean"?t.decodeDotInKeys:sr.decodeDotInKeys,decoder:typeof t.decoder=="function"?t.decoder:sr.decoder,delimiter:typeof t.delimiter=="string"||$s.isRegExp(t.delimiter)?t.delimiter:sr.delimiter,depth:typeof t.depth=="number"||t.depth===!1?+t.depth:sr.depth,duplicates:n,ignoreQueryPrefix:t.ignoreQueryPrefix===!0,interpretNumericEntities:typeof t.interpretNumericEntities=="boolean"?t.interpretNumericEntities:sr.interpretNumericEntities,parameterLimit:typeof t.parameterLimit=="number"?t.parameterLimit:sr.parameterLimit,parseArrays:t.parseArrays!==!1,plainObjects:typeof t.plainObjects=="boolean"?t.plainObjects:sr.plainObjects,strictDepth:typeof t.strictDepth=="boolean"?!!t.strictDepth:sr.strictDepth,strictMerge:typeof t.strictMerge=="boolean"?!!t.strictMerge:sr.strictMerge,strictNullHandling:typeof t.strictNullHandling=="boolean"?t.strictNullHandling:sr.strictNullHandling,throwOnLimitExceeded:typeof t.throwOnLimitExceeded=="boolean"?t.throwOnLimitExceeded:!1}};vk.exports=function(e,t){var r=mse(t);if(e===""||e===null||typeof e>"u")return r.plainObjects?{__proto__:null}:{};for(var n=typeof e=="string"?gse(e,r):e,i=r.plainObjects?{__proto__:null}:{},s=Object.keys(n),o=0;o<s.length;++o){var a=s[o],A=yse(a,n[a],r,typeof e=="string");i=$s.merge(i,A,r)}return r.allowSparse===!0?i:$s.compact(i)}});var Tk=x((PDe,Dk)=>{"use strict";var Bse=Sk(),Ise=Rk(),bse=qp();Dk.exports={formats:bse,parse:Ise,stringify:Bse}});var kk=x(dc=>{"use strict";var Cse=VI();function gi(){this.protocol=null,this.slashes=null,this.auth=null,this.host=null,this.port=null,this.hostname=null,this.hash=null,this.search=null,this.query=null,this.pathname=null,this.path=null,this.href=null}var Qse=/^([a-z0-9.+-]+:)/i,wse=/:[0-9]*$/,Sse=/^(\/\/?(?!\/)[^?\s]*)(\?[^\s]*)?$/,_se=["<",">",'"',"`"," ","\r",`
-`,"	"],vse=["{","}","|","\\","^","`"].concat(_se),SC=["'"].concat(vse),Nk=["%","/","?",";","#"].concat(SC),Mk=["/","?","#"],Rse=255,Fk=/^[+a-z0-9A-Z_-]{0,63}$/,Dse=/^([+a-z0-9A-Z_-]{0,63})(.*)$/,Tse={javascript:!0,"javascript:":!0},_C={javascript:!0,"javascript:":!0},hc={http:!0,https:!0,ftp:!0,gopher:!0,file:!0,"http:":!0,"https:":!0,"ftp:":!0,"gopher:":!0,"file:":!0},vC=Tk();function Nh(e,t,r){if(e&&typeof e=="object"&&e instanceof gi)return e;var n=new gi;return n.parse(e,t,r),n}gi.prototype.parse=function(e,t,r){if(typeof e!="string")throw new TypeError("Parameter 'url' must be a string, not "+typeof e);var n=e.indexOf("?"),i=n!==-1&&n<e.indexOf("#")?"?":"#",s=e.split(i),o=/\\/g;s[0]=s[0].replace(o,"/"),e=s.join(i);var a=e;if(a=a.trim(),!r&&e.split("#").length===1){var A=Sse.exec(a);if(A)return this.path=a,this.href=a,this.pathname=A[1],A[2]?(this.search=A[2],t?this.query=vC.parse(this.search.substr(1)):this.query=this.search.substr(1)):t&&(this.search="",this.query={}),this}var f=Qse.exec(a);if(f){f=f[0];var l=f.toLowerCase();this.protocol=l,a=a.substr(f.length)}if(r||f||a.match(/^\/\/[^@/]+@[^@/]+/)){var p=a.substr(0,2)==="//";p&&!(f&&_C[f])&&(a=a.substr(2),this.slashes=!0)}if(!_C[f]&&(p||f&&!hc[f])){for(var B=-1,S=0;S<Mk.length;S++){var _=a.indexOf(Mk[S]);_!==-1&&(B===-1||_<B)&&(B=_)}var N,P;B===-1?P=a.lastIndexOf("@"):P=a.lastIndexOf("@",B),P!==-1&&(N=a.slice(0,P),a=a.slice(P+1),this.auth=decodeURIComponent(N)),B=-1;for(var S=0;S<Nk.length;S++){var _=a.indexOf(Nk[S]);_!==-1&&(B===-1||_<B)&&(B=_)}B===-1&&(B=a.length),this.host=a.slice(0,B),a=a.slice(B),this.parseHost(),this.hostname=this.hostname||"";var U=this.hostname[0]==="["&&this.hostname[this.hostname.length-1]==="]";if(!U)for(var G=this.hostname.split(/\./),S=0,Y=G.length;S<Y;S++){var Z=G[S];if(Z&&!Z.match(Fk)){for(var ee="",j=0,se=Z.length;j<se;j++)Z.charCodeAt(j)>127?ee+="x":ee+=Z[j];if(!ee.match(Fk)){var ie=G.slice(0,S),ce=G.slice(S+1),H=Z.match(Dse);H&&(ie.push(H[1]),ce.unshift(H[2])),ce.length&&(a="/"+ce.join(".")+a),this.hostname=ie.join(".");break}}}this.hostname.length>Rse?this.hostname="":this.hostname=this.hostname.toLowerCase(),U||(this.hostname=Cse.toASCII(this.hostname));var E=this.port?":"+this.port:"",v=this.hostname||"";this.host=v+E,this.href+=this.host,U&&(this.hostname=this.hostname.substr(1,this.hostname.length-2),a[0]!=="/"&&(a="/"+a))}if(!Tse[l])for(var S=0,Y=SC.length;S<Y;S++){var b=SC[S];if(a.indexOf(b)!==-1){var c=encodeURIComponent(b);c===b&&(c=escape(b)),a=a.split(b).join(c)}}var g=a.indexOf("#");g!==-1&&(this.hash=a.substr(g),a=a.slice(0,g));var w=a.indexOf("?");if(w!==-1?(this.search=a.substr(w),this.query=a.substr(w+1),t&&(this.query=vC.parse(this.query)),a=a.slice(0,w)):t&&(this.search="",this.query={}),a&&(this.pathname=a),hc[l]&&this.hostname&&!this.pathname&&(this.pathname="/"),this.pathname||this.search){var E=this.pathname||"",R=this.search||"";this.path=E+R}return this.href=this.format(),this};function Nse(e){return typeof e=="string"&&(e=Nh(e)),e instanceof gi?e.format():gi.prototype.format.call(e)}gi.prototype.format=function(){var e=this.auth||"";e&&(e=encodeURIComponent(e),e=e.replace(/%3A/i,":"),e+="@");var t=this.protocol||"",r=this.pathname||"",n=this.hash||"",i=!1,s="";this.host?i=e+this.host:this.hostname&&(i=e+(this.hostname.indexOf(":")===-1?this.hostname:"["+this.hostname+"]"),this.port&&(i+=":"+this.port)),this.query&&typeof this.query=="object"&&Object.keys(this.query).length&&(s=vC.stringify(this.query,{arrayFormat:"repeat",addQueryPrefix:!1}));var o=this.search||s&&"?"+s||"";return t&&t.substr(-1)!==":"&&(t+=":"),this.slashes||(!t||hc[t])&&i!==!1?(i="//"+(i||""),r&&r.charAt(0)!=="/"&&(r="/"+r)):i||(i=""),n&&n.charAt(0)!=="#"&&(n="#"+n),o&&o.charAt(0)!=="?"&&(o="?"+o),r=r.replace(/[?#]/g,function(a){return encodeURIComponent(a)}),o=o.replace("#","%23"),t+i+r+o+n};function Mse(e,t){return Nh(e,!1,!0).resolve(t)}gi.prototype.resolve=function(e){return this.resolveObject(Nh(e,!1,!0)).format()};function Fse(e,t){return e?Nh(e,!1,!0).resolveObject(t):t}gi.prototype.resolveObject=function(e){if(typeof e=="string"){var t=new gi;t.parse(e,!1,!0),e=t}for(var r=new gi,n=Object.keys(this),i=0;i<n.length;i++){var s=n[i];r[s]=this[s]}if(r.hash=e.hash,e.href==="")return r.href=r.format(),r;if(e.slashes&&!e.protocol){for(var o=Object.keys(e),a=0;a<o.length;a++){var A=o[a];A!=="protocol"&&(r[A]=e[A])}return hc[r.protocol]&&r.hostname&&!r.pathname&&(r.pathname="/",r.path=r.pathname),r.href=r.format(),r}if(e.protocol&&e.protocol!==r.protocol){if(!hc[e.protocol]){for(var f=Object.keys(e),l=0;l<f.length;l++){var p=f[l];r[p]=e[p]}return r.href=r.format(),r}if(r.protocol=e.protocol,!e.host&&!_C[e.protocol]){for(var Y=(e.pathname||"").split("/");Y.length&&!(e.host=Y.shift()););e.host||(e.host=""),e.hostname||(e.hostname=""),Y[0]!==""&&Y.unshift(""),Y.length<2&&Y.unshift(""),r.pathname=Y.join("/")}else r.pathname=e.pathname;if(r.search=e.search,r.query=e.query,r.host=e.host||"",r.auth=e.auth,r.hostname=e.hostname||e.host,r.port=e.port,r.pathname||r.search){var B=r.pathname||"",S=r.search||"";r.path=B+S}return r.slashes=r.slashes||e.slashes,r.href=r.format(),r}var _=r.pathname&&r.pathname.charAt(0)==="/",N=e.host||e.pathname&&e.pathname.charAt(0)==="/",P=N||_||r.host&&e.pathname,U=P,G=r.pathname&&r.pathname.split("/")||[],Y=e.pathname&&e.pathname.split("/")||[],Z=r.protocol&&!hc[r.protocol];if(Z&&(r.hostname="",r.port=null,r.host&&(G[0]===""?G[0]=r.host:G.unshift(r.host)),r.host="",e.protocol&&(e.hostname=null,e.port=null,e.host&&(Y[0]===""?Y[0]=e.host:Y.unshift(e.host)),e.host=null),P=P&&(Y[0]===""||G[0]==="")),N)r.host=e.host||e.host===""?e.host:r.host,r.hostname=e.hostname||e.hostname===""?e.hostname:r.hostname,r.search=e.search,r.query=e.query,G=Y;else if(Y.length)G||(G=[]),G.pop(),G=G.concat(Y),r.search=e.search,r.query=e.query;else if(e.search!=null){if(Z){r.host=G.shift(),r.hostname=r.host;var ee=r.host&&r.host.indexOf("@")>0?r.host.split("@"):!1;ee&&(r.auth=ee.shift(),r.hostname=ee.shift(),r.host=r.hostname)}return r.search=e.search,r.query=e.query,(r.pathname!==null||r.search!==null)&&(r.path=(r.pathname?r.pathname:"")+(r.search?r.search:"")),r.href=r.format(),r}if(!G.length)return r.pathname=null,r.search?r.path="/"+r.search:r.path=null,r.href=r.format(),r;for(var j=G.slice(-1)[0],se=(r.host||e.host||G.length>1)&&(j==="."||j==="..")||j==="",ie=0,ce=G.length;ce>=0;ce--)j=G[ce],j==="."?G.splice(ce,1):j===".."?(G.splice(ce,1),ie++):ie&&(G.splice(ce,1),ie--);if(!P&&!U)for(;ie--;ie)G.unshift("..");P&&G[0]!==""&&(!G[0]||G[0].charAt(0)!=="/")&&G.unshift(""),se&&G.join("/").substr(-1)!=="/"&&G.push("");var H=G[0]===""||G[0]&&G[0].charAt(0)==="/";if(Z){r.hostname=H?"":G.length?G.shift():"",r.host=r.hostname;var ee=r.host&&r.host.indexOf("@")>0?r.host.split("@"):!1;ee&&(r.auth=ee.shift(),r.hostname=ee.shift(),r.host=r.hostname)}return P=P||r.host&&G.length,P&&!H&&G.unshift(""),G.length>0?r.pathname=G.join("/"):(r.pathname=null,r.path=null),(r.pathname!==null||r.search!==null)&&(r.path=(r.pathname?r.pathname:"")+(r.search?r.search:"")),r.auth=e.auth||r.auth,r.slashes=r.slashes||e.slashes,r.href=r.format(),r};gi.prototype.parseHost=function(){var e=this.host,t=wse.exec(e);t&&(t=t[0],t!==":"&&(this.port=t.substr(1)),e=e.substr(0,e.length-t.length)),e&&(this.hostname=e)};dc.parse=Nh;dc.resolve=Mse;dc.resolveObject=Fse;dc.format=Nse;dc.Url=gi});var Uk=x((Vp,xk)=>{(function(e,t){typeof Vp=="object"&&typeof xk<"u"?t(Vp):typeof define=="function"&&define.amd?define(["exports"],t):(e=typeof globalThis<"u"?globalThis:e||self,t(e.WebStreamsPolyfill={}))})(Vp,(function(e){"use strict";function t(){}function r(u){return typeof u=="object"&&u!==null||typeof u=="function"}let n=t;function i(u,d){try{Object.defineProperty(u,"name",{value:d,configurable:!0})}catch{}}let s=Promise,o=Promise.prototype.then,a=Promise.reject.bind(s);function A(u){return new s(u)}function f(u){return A(d=>d(u))}function l(u){return a(u)}function p(u,d,T){return o.call(u,d,T)}function B(u,d,T){p(p(u,d,T),void 0,n)}function S(u,d){B(u,d)}function _(u,d){B(u,void 0,d)}function N(u,d,T){return p(u,d,T)}function P(u){p(u,void 0,n)}let U=u=>{if(typeof queueMicrotask=="function")U=queueMicrotask;else{let d=f(void 0);U=T=>p(d,T)}return U(u)};function G(u,d,T){if(typeof u!="function")throw new TypeError("Argument is not a function");return Function.prototype.apply.call(u,d,T)}function Y(u,d,T){try{return f(G(u,d,T))}catch(O){return l(O)}}let Z=16384;class ee{constructor(){this._cursor=0,this._size=0,this._front={_elements:[],_next:void 0},this._back=this._front,this._cursor=0,this._size=0}get length(){return this._size}push(d){let T=this._back,O=T;T._elements.length===Z-1&&(O={_elements:[],_next:void 0}),T._elements.push(d),O!==T&&(this._back=O,T._next=O),++this._size}shift(){let d=this._front,T=d,O=this._cursor,J=O+1,re=d._elements,oe=re[O];return J===Z&&(T=d._next,J=0),--this._size,this._cursor=J,d!==T&&(this._front=T),re[O]=void 0,oe}forEach(d){let T=this._cursor,O=this._front,J=O._elements;for(;(T!==J.length||O._next!==void 0)&&!(T===J.length&&(O=O._next,J=O._elements,T=0,J.length===0));)d(J[T]),++T}peek(){let d=this._front,T=this._cursor;return d._elements[T]}}let j=Symbol("[[AbortSteps]]"),se=Symbol("[[ErrorSteps]]"),ie=Symbol("[[CancelSteps]]"),ce=Symbol("[[PullSteps]]"),H=Symbol("[[ReleaseSteps]]");function E(u,d){u._ownerReadableStream=d,d._reader=u,d._state==="readable"?g(u):d._state==="closed"?R(u):w(u,d._storedError)}function v(u,d){let T=u._ownerReadableStream;return Ki(T,d)}function b(u){let d=u._ownerReadableStream;d._state==="readable"?C(u,new TypeError("Reader was released and can no longer be used to monitor the stream's closedness")):h(u,new TypeError("Reader was released and can no longer be used to monitor the stream's closedness")),d._readableStreamController[H](),d._reader=void 0,u._ownerReadableStream=void 0}function c(u){return new TypeError("Cannot "+u+" a stream using a released reader")}function g(u){u._closedPromise=A((d,T)=>{u._closedPromise_resolve=d,u._closedPromise_reject=T})}function w(u,d){g(u),C(u,d)}function R(u){g(u),D(u)}function C(u,d){u._closedPromise_reject!==void 0&&(P(u._closedPromise),u._closedPromise_reject(d),u._closedPromise_resolve=void 0,u._closedPromise_reject=void 0)}function h(u,d){w(u,d)}function D(u){u._closedPromise_resolve!==void 0&&(u._closedPromise_resolve(void 0),u._closedPromise_resolve=void 0,u._closedPromise_reject=void 0)}let M=Number.isFinite||function(u){return typeof u=="number"&&isFinite(u)},I=Math.trunc||function(u){return u<0?Math.ceil(u):Math.floor(u)};function k(u){return typeof u=="object"||typeof u=="function"}function ne(u,d){if(u!==void 0&&!k(u))throw new TypeError(`${d} is not an object.`)}function Ae(u,d){if(typeof u!="function")throw new TypeError(`${d} is not a function.`)}function ue(u){return typeof u=="object"&&u!==null||typeof u=="function"}function pe(u,d){if(!ue(u))throw new TypeError(`${d} is not an object.`)}function he(u,d,T){if(u===void 0)throw new TypeError(`Parameter ${d} is required in '${T}'.`)}function de(u,d,T){if(u===void 0)throw new TypeError(`${d} is required in '${T}'.`)}function wt(u){return Number(u)}function Ie(u){return u===0?0:u}function be(u){return Ie(I(u))}function yr(u,d){let O=Number.MAX_SAFE_INTEGER,J=Number(u);if(J=Ie(J),!M(J))throw new TypeError(`${d} is not a finite number`);if(J=be(J),J<0||J>O)throw new TypeError(`${d} is outside the accepted range of 0 to ${O}, inclusive`);return!M(J)||J===0?0:J}function we(u,d){if(!Ga(u))throw new TypeError(`${d} is not a ReadableStream.`)}function ve(u){return new Te(u)}function Ms(u,d){u._reader._readRequests.push(d)}function Ye(u,d,T){let J=u._reader._readRequests.shift();T?J._closeSteps():J._chunkSteps(d)}function xe(u){return u._reader._readRequests.length}function Fs(u){let d=u._reader;return!(d===void 0||!De(d))}class Te{constructor(d){if(he(d,1,"ReadableStreamDefaultReader"),we(d,"First parameter"),Ya(d))throw new TypeError("This stream has already been locked for exclusive reading by another reader");E(this,d),this._readRequests=new ee}get closed(){return De(this)?this._closedPromise:l(ai("closed"))}cancel(d=void 0){return De(this)?this._ownerReadableStream===void 0?l(c("cancel")):v(this,d):l(ai("cancel"))}read(){if(!De(this))return l(ai("read"));if(this._ownerReadableStream===void 0)return l(c("read from"));let d,T,O=A((re,oe)=>{d=re,T=oe});return en(this,{_chunkSteps:re=>d({value:re,done:!1}),_closeSteps:()=>d({value:void 0,done:!0}),_errorSteps:re=>T(re)}),O}releaseLock(){if(!De(this))throw ai("releaseLock");this._ownerReadableStream!==void 0&&Re(this)}}Object.defineProperties(Te.prototype,{cancel:{enumerable:!0},read:{enumerable:!0},releaseLock:{enumerable:!0},closed:{enumerable:!0}}),i(Te.prototype.cancel,"cancel"),i(Te.prototype.read,"read"),i(Te.prototype.releaseLock,"releaseLock"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Te.prototype,Symbol.toStringTag,{value:"ReadableStreamDefaultReader",configurable:!0});function De(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_readRequests")?!1:u instanceof Te}function en(u,d){let T=u._ownerReadableStream;T._disturbed=!0,T._state==="closed"?d._closeSteps():T._state==="errored"?d._errorSteps(T._storedError):T._readableStreamController[ce](d)}function Re(u){b(u);let d=new TypeError("Reader was released");He(u,d)}function He(u,d){let T=u._readRequests;u._readRequests=new ee,T.forEach(O=>{O._errorSteps(d)})}function ai(u){return new TypeError(`ReadableStreamDefaultReader.prototype.${u} can only be used on a ReadableStreamDefaultReader`)}let Ne=Object.getPrototypeOf(Object.getPrototypeOf(async function*(){}).prototype);class Je{constructor(d,T){this._ongoingPromise=void 0,this._isFinished=!1,this._reader=d,this._preventCancel=T}next(){let d=()=>this._nextSteps();return this._ongoingPromise=this._ongoingPromise?N(this._ongoingPromise,d,d):d(),this._ongoingPromise}return(d){let T=()=>this._returnSteps(d);return this._ongoingPromise?N(this._ongoingPromise,T,T):T()}_nextSteps(){if(this._isFinished)return Promise.resolve({value:void 0,done:!0});let d=this._reader,T,O,J=A((oe,me)=>{T=oe,O=me});return en(d,{_chunkSteps:oe=>{this._ongoingPromise=void 0,U(()=>T({value:oe,done:!1}))},_closeSteps:()=>{this._ongoingPromise=void 0,this._isFinished=!0,b(d),T({value:void 0,done:!0})},_errorSteps:oe=>{this._ongoingPromise=void 0,this._isFinished=!0,b(d),O(oe)}}),J}_returnSteps(d){if(this._isFinished)return Promise.resolve({value:d,done:!0});this._isFinished=!0;let T=this._reader;if(!this._preventCancel){let O=v(T,d);return b(T),N(O,()=>({value:d,done:!0}))}return b(T),f({value:d,done:!0})}}let F={next(){return Q(this)?this._asyncIteratorImpl.next():l(L("next"))},return(u){return Q(this)?this._asyncIteratorImpl.return(u):l(L("return"))}};Object.setPrototypeOf(F,Ne);function m(u,d){let T=ve(u),O=new Je(T,d),J=Object.create(F);return J._asyncIteratorImpl=O,J}function Q(u){if(!r(u)||!Object.prototype.hasOwnProperty.call(u,"_asyncIteratorImpl"))return!1;try{return u._asyncIteratorImpl instanceof Je}catch{return!1}}function L(u){return new TypeError(`ReadableStreamAsyncIterator.${u} can only be used on a ReadableSteamAsyncIterator`)}let W=Number.isNaN||function(u){return u!==u};var z,ae,le;function ye(u){return u.slice()}function Ct(u,d,T,O,J){new Uint8Array(u).set(new Uint8Array(T,O,J),d)}let Ee=u=>(typeof u.transfer=="function"?Ee=d=>d.transfer():typeof structuredClone=="function"?Ee=d=>structuredClone(d,{transfer:[d]}):Ee=d=>d,Ee(u)),ge=u=>(typeof u.detached=="boolean"?ge=d=>d.detached:ge=d=>d.byteLength===0,ge(u));function Ua(u,d,T){if(u.slice)return u.slice(d,T);let O=T-d,J=new ArrayBuffer(O);return Ct(J,0,u,d,O),J}function je(u,d){let T=u[d];if(T!=null){if(typeof T!="function")throw new TypeError(`${String(d)} is not a function`);return T}}function tt(u){let d={[Symbol.iterator]:()=>u.iterator},T=(async function*(){return yield*d})(),O=T.next;return{iterator:T,nextMethod:O,done:!1}}let Fo=(le=(z=Symbol.asyncIterator)!==null&&z!==void 0?z:(ae=Symbol.for)===null||ae===void 0?void 0:ae.call(Symbol,"Symbol.asyncIterator"))!==null&&le!==void 0?le:"@@asyncIterator";function $e(u,d="sync",T){if(T===void 0)if(d==="async"){if(T=je(u,Fo),T===void 0){let re=je(u,Symbol.iterator),oe=$e(u,"sync",re);return tt(oe)}}else T=je(u,Symbol.iterator);if(T===void 0)throw new TypeError("The object is not iterable");let O=G(T,u,[]);if(!r(O))throw new TypeError("The iterator method must return an object");let J=O.next;return{iterator:O,nextMethod:J,done:!1}}function rt(u){let d=G(u.nextMethod,u.iterator,[]);if(!r(d))throw new TypeError("The iterator.next() method must return an object");return d}function GA(u){return!!u.done}function nt(u){return u.value}function it(u){return!(typeof u!="number"||W(u)||u<0)}function La(u){let d=Ua(u.buffer,u.byteOffset,u.byteOffset+u.byteLength);return new Uint8Array(d)}function Ke(u){let d=u._queue.shift();return u._queueTotalSize-=d.size,u._queueTotalSize<0&&(u._queueTotalSize=0),d.value}function Xe(u,d,T){if(!it(T)||T===1/0)throw new RangeError("Size must be a finite, non-NaN, non-negative number.");u._queue.push({value:d,size:T}),u._queueTotalSize+=T}function YA(u){return u._queue.peek().value}function Ue(u){u._queue=new ee,u._queueTotalSize=0}function et(u){return u===DataView}function WA(u){return et(u.constructor)}function st(u){return et(u)?1:u.BYTES_PER_ELEMENT}class Le{constructor(){throw new TypeError("Illegal constructor")}get view(){if(!Ze(this))throw hI("view");return this._view}respond(d){if(!Ze(this))throw hI("respond");if(he(d,1,"respond"),d=yr(d,"First parameter"),this._associatedReadableByteStreamController===void 0)throw new TypeError("This BYOB request has been invalidated");if(ge(this._view.buffer))throw new TypeError("The BYOB request's buffer has been detached and so cannot be used as a response");h0(this._associatedReadableByteStreamController,d)}respondWithNewView(d){if(!Ze(this))throw hI("respondWithNewView");if(he(d,1,"respondWithNewView"),!ArrayBuffer.isView(d))throw new TypeError("You can only respond with array buffer views");if(this._associatedReadableByteStreamController===void 0)throw new TypeError("This BYOB request has been invalidated");if(ge(d.buffer))throw new TypeError("The given view's buffer has been detached and so cannot be used as a response");d0(this._associatedReadableByteStreamController,d)}}Object.defineProperties(Le.prototype,{respond:{enumerable:!0},respondWithNewView:{enumerable:!0},view:{enumerable:!0}}),i(Le.prototype.respond,"respond"),i(Le.prototype.respondWithNewView,"respondWithNewView"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Le.prototype,Symbol.toStringTag,{value:"ReadableStreamBYOBRequest",configurable:!0});class hn{constructor(){throw new TypeError("Illegal constructor")}get byobRequest(){if(!Pe(this))throw Kl("byobRequest");return lI(this)}get desiredSize(){if(!Pe(this))throw Kl("desiredSize");return xR(this)}close(){if(!Pe(this))throw Kl("close");if(this._closeRequested)throw new TypeError("The stream has already been closed; do not close it again!");let d=this._controlledReadableByteStream._state;if(d!=="readable")throw new TypeError(`The stream (in ${d} state) is not in the readable state and cannot be closed`);Oo(this)}enqueue(d){if(!Pe(this))throw Kl("enqueue");if(he(d,1,"enqueue"),!ArrayBuffer.isView(d))throw new TypeError("chunk must be an array buffer view");if(d.byteLength===0)throw new TypeError("chunk must have non-zero byteLength");if(d.buffer.byteLength===0)throw new TypeError("chunk's buffer must have non-zero byteLength");if(this._closeRequested)throw new TypeError("stream is closed or draining");let T=this._controlledReadableByteStream._state;if(T!=="readable")throw new TypeError(`The stream (in ${T} state) is not in the readable state and cannot be enqueued to`);Oa(this,d)}error(d=void 0){if(!Pe(this))throw Kl("error");fi(this,d)}[ie](d){Pt(this),Ue(this);let T=this._cancelAlgorithm(d);return Pa(this),T}[ce](d){let T=this._controlledReadableByteStream;if(this._queueTotalSize>0){kR(this,d);return}let O=this._autoAllocateChunkSize;if(O!==void 0){let J;try{J=new ArrayBuffer(O)}catch(oe){d._errorSteps(oe);return}let re={buffer:J,bufferByteLength:O,byteOffset:0,byteLength:O,bytesFilled:0,minimumFill:1,elementSize:1,viewConstructor:Uint8Array,readerType:"default"};this._pendingPullIntos.push(re)}Ms(T,d),wn(this)}[H](){if(this._pendingPullIntos.length>0){let d=this._pendingPullIntos.peek();d.readerType="none",this._pendingPullIntos=new ee,this._pendingPullIntos.push(d)}}}Object.defineProperties(hn.prototype,{close:{enumerable:!0},enqueue:{enumerable:!0},error:{enumerable:!0},byobRequest:{enumerable:!0},desiredSize:{enumerable:!0}}),i(hn.prototype.close,"close"),i(hn.prototype.enqueue,"enqueue"),i(hn.prototype.error,"error"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(hn.prototype,Symbol.toStringTag,{value:"ReadableByteStreamController",configurable:!0});function Pe(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_controlledReadableByteStream")?!1:u instanceof hn}function Ze(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_associatedReadableByteStreamController")?!1:u instanceof Le}function wn(u){if(!Po(u))return;if(u._pulling){u._pullAgain=!0;return}u._pulling=!0;let T=u._pullAlgorithm();B(T,()=>(u._pulling=!1,u._pullAgain&&(u._pullAgain=!1,wn(u)),null),O=>(fi(u,O),null))}function Pt(u){Ji(u),u._pendingPullIntos=new ee}function kt(u,d){let T=!1;u._state==="closed"&&(T=!0);let O=ks(d);d.readerType==="default"?Ye(u,O,T):oJ(u,O,T)}function ks(u){let d=u.bytesFilled,T=u.elementSize;return new u.viewConstructor(u.buffer,u.byteOffset,d/T)}function Ai(u,d,T,O){u._queue.push({buffer:d,byteOffset:T,byteLength:O}),u._queueTotalSize+=O}function xs(u,d,T,O){let J;try{J=Ua(d,T,T+O)}catch(re){throw fi(u,re),re}Ai(u,J,0,O)}function Us(u,d){d.bytesFilled>0&&xs(u,d.buffer,d.byteOffset,d.bytesFilled),Sn(u)}function Ls(u,d){let T=Math.min(u._queueTotalSize,d.byteLength-d.bytesFilled),O=d.bytesFilled+T,J=T,re=!1,oe=O%d.elementSize,me=O-oe;me>=d.minimumFill&&(J=me-d.bytesFilled,re=!0);let We=u._queue;for(;J>0;){let Se=We.peek(),ot=Math.min(J,Se.byteLength),lt=d.byteOffset+d.bytesFilled;Ct(d.buffer,lt,Se.buffer,Se.byteOffset,ot),Se.byteLength===ot?We.shift():(Se.byteOffset+=ot,Se.byteLength-=ot),u._queueTotalSize-=ot,Ps(u,ot,d),J-=ot}return re}function Ps(u,d,T){T.bytesFilled+=d}function Os(u){u._queueTotalSize===0&&u._closeRequested?(Pa(u),rh(u._controlledReadableByteStream)):wn(u)}function Ji(u){u._byobRequest!==null&&(u._byobRequest._associatedReadableByteStreamController=void 0,u._byobRequest._view=null,u._byobRequest=null)}function ji(u){for(;u._pendingPullIntos.length>0;){if(u._queueTotalSize===0)return;let d=u._pendingPullIntos.peek();Ls(u,d)&&(Sn(u),kt(u._controlledReadableByteStream,d))}}function ko(u){let d=u._controlledReadableByteStream._reader;for(;d._readRequests.length>0;){if(u._queueTotalSize===0)return;let T=d._readRequests.shift();kR(u,T)}}function xo(u,d,T,O){let J=u._controlledReadableByteStream,re=d.constructor,oe=st(re),{byteOffset:me,byteLength:We}=d,Se=T*oe,ot;try{ot=Ee(d.buffer)}catch(Ot){O._errorSteps(Ot);return}let lt={buffer:ot,bufferByteLength:ot.byteLength,byteOffset:me,byteLength:We,bytesFilled:0,minimumFill:Se,elementSize:oe,viewConstructor:re,readerType:"byob"};if(u._pendingPullIntos.length>0){u._pendingPullIntos.push(lt),PR(J,O);return}if(J._state==="closed"){let Ot=new re(lt.buffer,lt.byteOffset,0);O._closeSteps(Ot);return}if(u._queueTotalSize>0){if(Ls(u,lt)){let Ot=ks(lt);Os(u),O._chunkSteps(Ot);return}if(u._closeRequested){let Ot=new TypeError("Insufficient bytes to fill elements in the given buffer");fi(u,Ot),O._errorSteps(Ot);return}}u._pendingPullIntos.push(lt),PR(J,O),wn(u)}function Uo(u,d){d.readerType==="none"&&Sn(u);let T=u._controlledReadableByteStream;if(dI(T))for(;OR(T)>0;){let O=Sn(u);kt(T,O)}}function Lo(u,d,T){if(Ps(u,d,T),T.readerType==="none"){Us(u,T),ji(u);return}if(T.bytesFilled<T.minimumFill)return;Sn(u);let O=T.bytesFilled%T.elementSize;if(O>0){let J=T.byteOffset+T.bytesFilled;xs(u,T.buffer,J-O,O)}T.bytesFilled-=O,kt(u._controlledReadableByteStream,T),ji(u)}function Hs(u,d){let T=u._pendingPullIntos.peek();Ji(u),u._controlledReadableByteStream._state==="closed"?Uo(u,T):Lo(u,d,T),wn(u)}function Sn(u){return u._pendingPullIntos.shift()}function Po(u){let d=u._controlledReadableByteStream;return d._state!=="readable"||u._closeRequested||!u._started?!1:!!(Fs(d)&&xe(d)>0||dI(d)&&OR(d)>0||xR(u)>0)}function Pa(u){u._pullAlgorithm=void 0,u._cancelAlgorithm=void 0}function Oo(u){let d=u._controlledReadableByteStream;if(!(u._closeRequested||d._state!=="readable")){if(u._queueTotalSize>0){u._closeRequested=!0;return}if(u._pendingPullIntos.length>0){let T=u._pendingPullIntos.peek();if(T.bytesFilled%T.elementSize!==0){let O=new TypeError("Insufficient bytes to fill elements in the given buffer");throw fi(u,O),O}}Pa(u),rh(d)}}function Oa(u,d){let T=u._controlledReadableByteStream;if(u._closeRequested||T._state!=="readable")return;let{buffer:O,byteOffset:J,byteLength:re}=d;if(ge(O))throw new TypeError("chunk's buffer is detached and so cannot be enqueued");let oe=Ee(O);if(u._pendingPullIntos.length>0){let me=u._pendingPullIntos.peek();if(ge(me.buffer))throw new TypeError("The BYOB request's buffer has been detached and so cannot be filled with an enqueued chunk");Ji(u),me.buffer=Ee(me.buffer),me.readerType==="none"&&Us(u,me)}if(Fs(T))if(ko(u),xe(T)===0)Ai(u,oe,J,re);else{u._pendingPullIntos.length>0&&Sn(u);let me=new Uint8Array(oe,J,re);Ye(T,me,!1)}else dI(T)?(Ai(u,oe,J,re),ji(u)):Ai(u,oe,J,re);wn(u)}function fi(u,d){let T=u._controlledReadableByteStream;T._state==="readable"&&(Pt(u),Ue(u),Pa(u),uD(T,d))}function kR(u,d){let T=u._queue.shift();u._queueTotalSize-=T.byteLength,Os(u);let O=new Uint8Array(T.buffer,T.byteOffset,T.byteLength);d._chunkSteps(O)}function lI(u){if(u._byobRequest===null&&u._pendingPullIntos.length>0){let d=u._pendingPullIntos.peek(),T=new Uint8Array(d.buffer,d.byteOffset+d.bytesFilled,d.byteLength-d.bytesFilled),O=Object.create(Le.prototype);rJ(O,u,T),u._byobRequest=O}return u._byobRequest}function xR(u){let d=u._controlledReadableByteStream._state;return d==="errored"?null:d==="closed"?0:u._strategyHWM-u._queueTotalSize}function h0(u,d){let T=u._pendingPullIntos.peek();if(u._controlledReadableByteStream._state==="closed"){if(d!==0)throw new TypeError("bytesWritten must be 0 when calling respond() on a closed stream")}else{if(d===0)throw new TypeError("bytesWritten must be greater than 0 when calling respond() on a readable stream");if(T.bytesFilled+d>T.byteLength)throw new RangeError("bytesWritten out of range")}T.buffer=Ee(T.buffer),Hs(u,d)}function d0(u,d){let T=u._pendingPullIntos.peek();if(u._controlledReadableByteStream._state==="closed"){if(d.byteLength!==0)throw new TypeError("The view's length must be 0 when calling respondWithNewView() on a closed stream")}else if(d.byteLength===0)throw new TypeError("The view's length must be greater than 0 when calling respondWithNewView() on a readable stream");if(T.byteOffset+T.bytesFilled!==d.byteOffset)throw new RangeError("The region specified by view does not match byobRequest");if(T.bufferByteLength!==d.buffer.byteLength)throw new RangeError("The buffer of view has different capacity than byobRequest");if(T.bytesFilled+d.byteLength>T.byteLength)throw new RangeError("The region specified by view is larger than byobRequest");let J=d.byteLength;T.buffer=Ee(d.buffer),Hs(u,J)}function UR(u,d,T,O,J,re,oe){d._controlledReadableByteStream=u,d._pullAgain=!1,d._pulling=!1,d._byobRequest=null,d._queue=d._queueTotalSize=void 0,Ue(d),d._closeRequested=!1,d._started=!1,d._strategyHWM=re,d._pullAlgorithm=O,d._cancelAlgorithm=J,d._autoAllocateChunkSize=oe,d._pendingPullIntos=new ee,u._readableStreamController=d;let me=T();B(f(me),()=>(d._started=!0,wn(d),null),We=>(fi(d,We),null))}function tJ(u,d,T){let O=Object.create(hn.prototype),J,re,oe;d.start!==void 0?J=()=>d.start(O):J=()=>{},d.pull!==void 0?re=()=>d.pull(O):re=()=>f(void 0),d.cancel!==void 0?oe=We=>d.cancel(We):oe=()=>f(void 0);let me=d.autoAllocateChunkSize;if(me===0)throw new TypeError("autoAllocateChunkSize must be greater than 0");UR(u,O,J,re,oe,T,me)}function rJ(u,d,T){u._associatedReadableByteStreamController=d,u._view=T}function hI(u){return new TypeError(`ReadableStreamBYOBRequest.prototype.${u} can only be used on a ReadableStreamBYOBRequest`)}function Kl(u){return new TypeError(`ReadableByteStreamController.prototype.${u} can only be used on a ReadableByteStreamController`)}function nJ(u,d){ne(u,d);let T=u?.mode;return{mode:T===void 0?void 0:iJ(T,`${d} has member 'mode' that`)}}function iJ(u,d){if(u=`${u}`,u!=="byob")throw new TypeError(`${d} '${u}' is not a valid enumeration value for ReadableStreamReaderMode`);return u}function sJ(u,d){var T;ne(u,d);let O=(T=u?.min)!==null&&T!==void 0?T:1;return{min:yr(O,`${d} has member 'min' that`)}}function LR(u){return new Ha(u)}function PR(u,d){u._reader._readIntoRequests.push(d)}function oJ(u,d,T){let J=u._reader._readIntoRequests.shift();T?J._closeSteps(d):J._chunkSteps(d)}function OR(u){return u._reader._readIntoRequests.length}function dI(u){let d=u._reader;return!(d===void 0||!VA(d))}class Ha{constructor(d){if(he(d,1,"ReadableStreamBYOBReader"),we(d,"First parameter"),Ya(d))throw new TypeError("This stream has already been locked for exclusive reading by another reader");if(!Pe(d._readableStreamController))throw new TypeError("Cannot construct a ReadableStreamBYOBReader for a stream not constructed with a byte source");E(this,d),this._readIntoRequests=new ee}get closed(){return VA(this)?this._closedPromise:l(g0("closed"))}cancel(d=void 0){return VA(this)?this._ownerReadableStream===void 0?l(c("cancel")):v(this,d):l(g0("cancel"))}read(d,T={}){if(!VA(this))return l(g0("read"));if(!ArrayBuffer.isView(d))return l(new TypeError("view must be an array buffer view"));if(d.byteLength===0)return l(new TypeError("view must have non-zero byteLength"));if(d.buffer.byteLength===0)return l(new TypeError("view's buffer must have non-zero byteLength"));if(ge(d.buffer))return l(new TypeError("view's buffer has been detached"));let O;try{O=sJ(T,"options")}catch(Se){return l(Se)}let J=O.min;if(J===0)return l(new TypeError("options.min must be greater than 0"));if(WA(d)){if(J>d.byteLength)return l(new RangeError("options.min must be less than or equal to view's byteLength"))}else if(J>d.length)return l(new RangeError("options.min must be less than or equal to view's length"));if(this._ownerReadableStream===void 0)return l(c("read from"));let re,oe,me=A((Se,ot)=>{re=Se,oe=ot});return HR(this,d,J,{_chunkSteps:Se=>re({value:Se,done:!1}),_closeSteps:Se=>re({value:Se,done:!0}),_errorSteps:Se=>oe(Se)}),me}releaseLock(){if(!VA(this))throw g0("releaseLock");this._ownerReadableStream!==void 0&&aJ(this)}}Object.defineProperties(Ha.prototype,{cancel:{enumerable:!0},read:{enumerable:!0},releaseLock:{enumerable:!0},closed:{enumerable:!0}}),i(Ha.prototype.cancel,"cancel"),i(Ha.prototype.read,"read"),i(Ha.prototype.releaseLock,"releaseLock"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Ha.prototype,Symbol.toStringTag,{value:"ReadableStreamBYOBReader",configurable:!0});function VA(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_readIntoRequests")?!1:u instanceof Ha}function HR(u,d,T,O){let J=u._ownerReadableStream;J._disturbed=!0,J._state==="errored"?O._errorSteps(J._storedError):xo(J._readableStreamController,d,T,O)}function aJ(u){b(u);let d=new TypeError("Reader was released");qR(u,d)}function qR(u,d){let T=u._readIntoRequests;u._readIntoRequests=new ee,T.forEach(O=>{O._errorSteps(d)})}function g0(u){return new TypeError(`ReadableStreamBYOBReader.prototype.${u} can only be used on a ReadableStreamBYOBReader`)}function Xl(u,d){let{highWaterMark:T}=u;if(T===void 0)return d;if(W(T)||T<0)throw new RangeError("Invalid highWaterMark");return T}function p0(u){let{size:d}=u;return d||(()=>1)}function E0(u,d){ne(u,d);let T=u?.highWaterMark,O=u?.size;return{highWaterMark:T===void 0?void 0:wt(T),size:O===void 0?void 0:AJ(O,`${d} has member 'size' that`)}}function AJ(u,d){return Ae(u,d),T=>wt(u(T))}function fJ(u,d){ne(u,d);let T=u?.abort,O=u?.close,J=u?.start,re=u?.type,oe=u?.write;return{abort:T===void 0?void 0:uJ(T,u,`${d} has member 'abort' that`),close:O===void 0?void 0:cJ(O,u,`${d} has member 'close' that`),start:J===void 0?void 0:lJ(J,u,`${d} has member 'start' that`),write:oe===void 0?void 0:hJ(oe,u,`${d} has member 'write' that`),type:re}}function uJ(u,d,T){return Ae(u,T),O=>Y(u,d,[O])}function cJ(u,d,T){return Ae(u,T),()=>Y(u,d,[])}function lJ(u,d,T){return Ae(u,T),O=>G(u,d,[O])}function hJ(u,d,T){return Ae(u,T),(O,J)=>Y(u,d,[O,J])}function GR(u,d){if(!Mu(u))throw new TypeError(`${d} is not a WritableStream.`)}function dJ(u){if(typeof u!="object"||u===null)return!1;try{return typeof u.aborted=="boolean"}catch{return!1}}let gJ=typeof AbortController=="function";function pJ(){if(gJ)return new AbortController}class qa{constructor(d={},T={}){d===void 0?d=null:pe(d,"First parameter");let O=E0(T,"Second parameter"),J=fJ(d,"First parameter");if(WR(this),J.type!==void 0)throw new RangeError("Invalid type is specified");let oe=p0(O),me=Xl(O,1);DJ(this,J,me,oe)}get locked(){if(!Mu(this))throw b0("locked");return Fu(this)}abort(d=void 0){return Mu(this)?Fu(this)?l(new TypeError("Cannot abort a stream that already has a writer")):y0(this,d):l(b0("abort"))}close(){return Mu(this)?Fu(this)?l(new TypeError("Cannot close a stream that already has a writer")):qs(this)?l(new TypeError("Cannot close an already-closing stream")):VR(this):l(b0("close"))}getWriter(){if(!Mu(this))throw b0("getWriter");return YR(this)}}Object.defineProperties(qa.prototype,{abort:{enumerable:!0},close:{enumerable:!0},getWriter:{enumerable:!0},locked:{enumerable:!0}}),i(qa.prototype.abort,"abort"),i(qa.prototype.close,"close"),i(qa.prototype.getWriter,"getWriter"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(qa.prototype,Symbol.toStringTag,{value:"WritableStream",configurable:!0});function YR(u){return new Ho(u)}function EJ(u,d,T,O,J=1,re=()=>1){let oe=Object.create(qa.prototype);WR(oe);let me=Object.create(ku.prototype);return ZR(oe,me,u,d,T,O,J,re),oe}function WR(u){u._state="writable",u._storedError=void 0,u._writer=void 0,u._writableStreamController=void 0,u._writeRequests=new ee,u._inFlightWriteRequest=void 0,u._closeRequest=void 0,u._inFlightCloseRequest=void 0,u._pendingAbortRequest=void 0,u._backpressure=!1}function Mu(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_writableStreamController")?!1:u instanceof qa}function Fu(u){return u._writer!==void 0}function y0(u,d){var T;if(u._state==="closed"||u._state==="errored")return f(void 0);u._writableStreamController._abortReason=d,(T=u._writableStreamController._abortController)===null||T===void 0||T.abort(d);let O=u._state;if(O==="closed"||O==="errored")return f(void 0);if(u._pendingAbortRequest!==void 0)return u._pendingAbortRequest._promise;let J=!1;O==="erroring"&&(J=!0,d=void 0);let re=A((oe,me)=>{u._pendingAbortRequest={_promise:void 0,_resolve:oe,_reject:me,_reason:d,_wasAlreadyErroring:J}});return u._pendingAbortRequest._promise=re,J||pI(u,d),re}function VR(u){let d=u._state;if(d==="closed"||d==="errored")return l(new TypeError(`The stream (in ${d} state) is not in the writable state and cannot be closed`));let T=A((J,re)=>{let oe={_resolve:J,_reject:re};u._closeRequest=oe}),O=u._writer;return O!==void 0&&u._backpressure&&d==="writable"&&QI(O),TJ(u._writableStreamController),T}function yJ(u){return A((T,O)=>{let J={_resolve:T,_reject:O};u._writeRequests.push(J)})}function gI(u,d){if(u._state==="writable"){pI(u,d);return}EI(u)}function pI(u,d){let T=u._writableStreamController;u._state="erroring",u._storedError=d;let O=u._writer;O!==void 0&&jR(O,d),!CJ(u)&&T._started&&EI(u)}function EI(u){u._state="errored",u._writableStreamController[se]();let d=u._storedError;if(u._writeRequests.forEach(J=>{J._reject(d)}),u._writeRequests=new ee,u._pendingAbortRequest===void 0){m0(u);return}let T=u._pendingAbortRequest;if(u._pendingAbortRequest=void 0,T._wasAlreadyErroring){T._reject(d),m0(u);return}let O=u._writableStreamController[j](T._reason);B(O,()=>(T._resolve(),m0(u),null),J=>(T._reject(J),m0(u),null))}function mJ(u){u._inFlightWriteRequest._resolve(void 0),u._inFlightWriteRequest=void 0}function BJ(u,d){u._inFlightWriteRequest._reject(d),u._inFlightWriteRequest=void 0,gI(u,d)}function IJ(u){u._inFlightCloseRequest._resolve(void 0),u._inFlightCloseRequest=void 0,u._state==="erroring"&&(u._storedError=void 0,u._pendingAbortRequest!==void 0&&(u._pendingAbortRequest._resolve(),u._pendingAbortRequest=void 0)),u._state="closed";let T=u._writer;T!==void 0&&rD(T)}function bJ(u,d){u._inFlightCloseRequest._reject(d),u._inFlightCloseRequest=void 0,u._pendingAbortRequest!==void 0&&(u._pendingAbortRequest._reject(d),u._pendingAbortRequest=void 0),gI(u,d)}function qs(u){return!(u._closeRequest===void 0&&u._inFlightCloseRequest===void 0)}function CJ(u){return!(u._inFlightWriteRequest===void 0&&u._inFlightCloseRequest===void 0)}function QJ(u){u._inFlightCloseRequest=u._closeRequest,u._closeRequest=void 0}function wJ(u){u._inFlightWriteRequest=u._writeRequests.shift()}function m0(u){u._closeRequest!==void 0&&(u._closeRequest._reject(u._storedError),u._closeRequest=void 0);let d=u._writer;d!==void 0&&bI(d,u._storedError)}function yI(u,d){let T=u._writer;T!==void 0&&d!==u._backpressure&&(d?LJ(T):QI(T)),u._backpressure=d}class Ho{constructor(d){if(he(d,1,"WritableStreamDefaultWriter"),GR(d,"First parameter"),Fu(d))throw new TypeError("This stream has already been locked for exclusive writing by another writer");this._ownerWritableStream=d,d._writer=this;let T=d._state;if(T==="writable")!qs(d)&&d._backpressure?Q0(this):nD(this),C0(this);else if(T==="erroring")CI(this,d._storedError),C0(this);else if(T==="closed")nD(this),xJ(this);else{let O=d._storedError;CI(this,O),tD(this,O)}}get closed(){return JA(this)?this._closedPromise:l(jA("closed"))}get desiredSize(){if(!JA(this))throw jA("desiredSize");if(this._ownerWritableStream===void 0)throw $l("desiredSize");return RJ(this)}get ready(){return JA(this)?this._readyPromise:l(jA("ready"))}abort(d=void 0){return JA(this)?this._ownerWritableStream===void 0?l($l("abort")):SJ(this,d):l(jA("abort"))}close(){if(!JA(this))return l(jA("close"));let d=this._ownerWritableStream;return d===void 0?l($l("close")):qs(d)?l(new TypeError("Cannot close an already-closing stream")):JR(this)}releaseLock(){if(!JA(this))throw jA("releaseLock");this._ownerWritableStream!==void 0&&zR(this)}write(d=void 0){return JA(this)?this._ownerWritableStream===void 0?l($l("write to")):KR(this,d):l(jA("write"))}}Object.defineProperties(Ho.prototype,{abort:{enumerable:!0},close:{enumerable:!0},releaseLock:{enumerable:!0},write:{enumerable:!0},closed:{enumerable:!0},desiredSize:{enumerable:!0},ready:{enumerable:!0}}),i(Ho.prototype.abort,"abort"),i(Ho.prototype.close,"close"),i(Ho.prototype.releaseLock,"releaseLock"),i(Ho.prototype.write,"write"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Ho.prototype,Symbol.toStringTag,{value:"WritableStreamDefaultWriter",configurable:!0});function JA(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_ownerWritableStream")?!1:u instanceof Ho}function SJ(u,d){let T=u._ownerWritableStream;return y0(T,d)}function JR(u){let d=u._ownerWritableStream;return VR(d)}function _J(u){let d=u._ownerWritableStream,T=d._state;return qs(d)||T==="closed"?f(void 0):T==="errored"?l(d._storedError):JR(u)}function vJ(u,d){u._closedPromiseState==="pending"?bI(u,d):UJ(u,d)}function jR(u,d){u._readyPromiseState==="pending"?iD(u,d):PJ(u,d)}function RJ(u){let d=u._ownerWritableStream,T=d._state;return T==="errored"||T==="erroring"?null:T==="closed"?0:$R(d._writableStreamController)}function zR(u){let d=u._ownerWritableStream,T=new TypeError("Writer was released and can no longer be used to monitor the stream's closedness");jR(u,T),vJ(u,T),d._writer=void 0,u._ownerWritableStream=void 0}function KR(u,d){let T=u._ownerWritableStream,O=T._writableStreamController,J=NJ(O,d);if(T!==u._ownerWritableStream)return l($l("write to"));let re=T._state;if(re==="errored")return l(T._storedError);if(qs(T)||re==="closed")return l(new TypeError("The stream is closing or closed and cannot be written to"));if(re==="erroring")return l(T._storedError);let oe=yJ(T);return MJ(O,d,J),oe}let XR={};class ku{constructor(){throw new TypeError("Illegal constructor")}get abortReason(){if(!mI(this))throw II("abortReason");return this._abortReason}get signal(){if(!mI(this))throw II("signal");if(this._abortController===void 0)throw new TypeError("WritableStreamDefaultController.prototype.signal is not supported");return this._abortController.signal}error(d=void 0){if(!mI(this))throw II("error");this._controlledWritableStream._state==="writable"&&eD(this,d)}[j](d){let T=this._abortAlgorithm(d);return B0(this),T}[se](){Ue(this)}}Object.defineProperties(ku.prototype,{abortReason:{enumerable:!0},signal:{enumerable:!0},error:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(ku.prototype,Symbol.toStringTag,{value:"WritableStreamDefaultController",configurable:!0});function mI(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_controlledWritableStream")?!1:u instanceof ku}function ZR(u,d,T,O,J,re,oe,me){d._controlledWritableStream=u,u._writableStreamController=d,d._queue=void 0,d._queueTotalSize=void 0,Ue(d),d._abortReason=void 0,d._abortController=pJ(),d._started=!1,d._strategySizeAlgorithm=me,d._strategyHWM=oe,d._writeAlgorithm=O,d._closeAlgorithm=J,d._abortAlgorithm=re;let We=BI(d);yI(u,We);let Se=T(),ot=f(Se);B(ot,()=>(d._started=!0,I0(d),null),lt=>(d._started=!0,gI(u,lt),null))}function DJ(u,d,T,O){let J=Object.create(ku.prototype),re,oe,me,We;d.start!==void 0?re=()=>d.start(J):re=()=>{},d.write!==void 0?oe=Se=>d.write(Se,J):oe=()=>f(void 0),d.close!==void 0?me=()=>d.close():me=()=>f(void 0),d.abort!==void 0?We=Se=>d.abort(Se):We=()=>f(void 0),ZR(u,J,re,oe,me,We,T,O)}function B0(u){u._writeAlgorithm=void 0,u._closeAlgorithm=void 0,u._abortAlgorithm=void 0,u._strategySizeAlgorithm=void 0}function TJ(u){Xe(u,XR,0),I0(u)}function NJ(u,d){try{return u._strategySizeAlgorithm(d)}catch(T){return Zl(u,T),1}}function $R(u){return u._strategyHWM-u._queueTotalSize}function MJ(u,d,T){try{Xe(u,d,T)}catch(J){Zl(u,J);return}let O=u._controlledWritableStream;if(!qs(O)&&O._state==="writable"){let J=BI(u);yI(O,J)}I0(u)}function I0(u){let d=u._controlledWritableStream;if(!u._started||d._inFlightWriteRequest!==void 0)return;if(d._state==="erroring"){EI(d);return}if(u._queue.length===0)return;let O=YA(u);O===XR?FJ(u):kJ(u,O)}function Zl(u,d){u._controlledWritableStream._state==="writable"&&eD(u,d)}function FJ(u){let d=u._controlledWritableStream;QJ(d),Ke(u);let T=u._closeAlgorithm();B0(u),B(T,()=>(IJ(d),null),O=>(bJ(d,O),null))}function kJ(u,d){let T=u._controlledWritableStream;wJ(T);let O=u._writeAlgorithm(d);B(O,()=>{mJ(T);let J=T._state;if(Ke(u),!qs(T)&&J==="writable"){let re=BI(u);yI(T,re)}return I0(u),null},J=>(T._state==="writable"&&B0(u),BJ(T,J),null))}function BI(u){return $R(u)<=0}function eD(u,d){let T=u._controlledWritableStream;B0(u),pI(T,d)}function b0(u){return new TypeError(`WritableStream.prototype.${u} can only be used on a WritableStream`)}function II(u){return new TypeError(`WritableStreamDefaultController.prototype.${u} can only be used on a WritableStreamDefaultController`)}function jA(u){return new TypeError(`WritableStreamDefaultWriter.prototype.${u} can only be used on a WritableStreamDefaultWriter`)}function $l(u){return new TypeError("Cannot "+u+" a stream using a released writer")}function C0(u){u._closedPromise=A((d,T)=>{u._closedPromise_resolve=d,u._closedPromise_reject=T,u._closedPromiseState="pending"})}function tD(u,d){C0(u),bI(u,d)}function xJ(u){C0(u),rD(u)}function bI(u,d){u._closedPromise_reject!==void 0&&(P(u._closedPromise),u._closedPromise_reject(d),u._closedPromise_resolve=void 0,u._closedPromise_reject=void 0,u._closedPromiseState="rejected")}function UJ(u,d){tD(u,d)}function rD(u){u._closedPromise_resolve!==void 0&&(u._closedPromise_resolve(void 0),u._closedPromise_resolve=void 0,u._closedPromise_reject=void 0,u._closedPromiseState="resolved")}function Q0(u){u._readyPromise=A((d,T)=>{u._readyPromise_resolve=d,u._readyPromise_reject=T}),u._readyPromiseState="pending"}function CI(u,d){Q0(u),iD(u,d)}function nD(u){Q0(u),QI(u)}function iD(u,d){u._readyPromise_reject!==void 0&&(P(u._readyPromise),u._readyPromise_reject(d),u._readyPromise_resolve=void 0,u._readyPromise_reject=void 0,u._readyPromiseState="rejected")}function LJ(u){Q0(u)}function PJ(u,d){CI(u,d)}function QI(u){u._readyPromise_resolve!==void 0&&(u._readyPromise_resolve(void 0),u._readyPromise_resolve=void 0,u._readyPromise_reject=void 0,u._readyPromiseState="fulfilled")}function OJ(){if(typeof globalThis<"u")return globalThis;if(typeof self<"u")return self;if(typeof globalThis<"u")return globalThis}let wI=OJ();function HJ(u){if(!(typeof u=="function"||typeof u=="object")||u.name!=="DOMException")return!1;try{return new u,!0}catch{return!1}}function qJ(){let u=wI?.DOMException;return HJ(u)?u:void 0}function GJ(){let u=function(T,O){this.message=T||"",this.name=O||"Error",Error.captureStackTrace&&Error.captureStackTrace(this,this.constructor)};return i(u,"DOMException"),u.prototype=Object.create(Error.prototype),Object.defineProperty(u.prototype,"constructor",{value:u,writable:!0,configurable:!0}),u}let YJ=qJ()||GJ();function sD(u,d,T,O,J,re){let oe=ve(u),me=YR(d);u._disturbed=!0;let We=!1,Se=f(void 0);return A((ot,lt)=>{let Ot;if(re!==void 0){if(Ot=()=>{let Me=re.reason!==void 0?re.reason:new YJ("Aborted","AbortError"),mt=[];O||mt.push(()=>d._state==="writable"?y0(d,Me):f(void 0)),J||mt.push(()=>u._state==="readable"?Ki(u,Me):f(void 0)),_n(()=>Promise.all(mt.map(Gt=>Gt())),!0,Me)},re.aborted){Ot();return}re.addEventListener("abort",Ot)}function Xi(){return A((Me,mt)=>{function Gt(Wn){Wn?Me():p(Pu(),Gt,mt)}Gt(!1)})}function Pu(){return We?f(!0):p(me._readyPromise,()=>A((Me,mt)=>{en(oe,{_chunkSteps:Gt=>{Se=p(KR(me,Gt),void 0,t),Me(!1)},_closeSteps:()=>Me(!0),_errorSteps:mt})}))}if(Go(u,oe._closedPromise,Me=>(O?ui(!0,Me):_n(()=>y0(d,Me),!0,Me),null)),Go(d,me._closedPromise,Me=>(J?ui(!0,Me):_n(()=>Ki(u,Me),!0,Me),null)),dn(u,oe._closedPromise,()=>(T?ui():_n(()=>_J(me)),null)),qs(d)||d._state==="closed"){let Me=new TypeError("the destination writable stream closed before all data could be piped to it");J?ui(!0,Me):_n(()=>Ki(u,Me),!0,Me)}P(Xi());function Va(){let Me=Se;return p(Se,()=>Me!==Se?Va():void 0)}function Go(Me,mt,Gt){Me._state==="errored"?Gt(Me._storedError):_(mt,Gt)}function dn(Me,mt,Gt){Me._state==="closed"?Gt():S(mt,Gt)}function _n(Me,mt,Gt){if(We)return;We=!0,d._state==="writable"&&!qs(d)?S(Va(),Wn):Wn();function Wn(){return B(Me(),()=>Yo(mt,Gt),Ou=>Yo(!0,Ou)),null}}function ui(Me,mt){We||(We=!0,d._state==="writable"&&!qs(d)?S(Va(),()=>Yo(Me,mt)):Yo(Me,mt))}function Yo(Me,mt){return zR(me),b(oe),re!==void 0&&re.removeEventListener("abort",Ot),Me?lt(mt):ot(void 0),null}})}class qo{constructor(){throw new TypeError("Illegal constructor")}get desiredSize(){if(!w0(this))throw _0("desiredSize");return SI(this)}close(){if(!w0(this))throw _0("close");if(!Uu(this))throw new TypeError("The stream is not in a state that permits close");zA(this)}enqueue(d=void 0){if(!w0(this))throw _0("enqueue");if(!Uu(this))throw new TypeError("The stream is not in a state that permits enqueue");return xu(this,d)}error(d=void 0){if(!w0(this))throw _0("error");zi(this,d)}[ie](d){Ue(this);let T=this._cancelAlgorithm(d);return S0(this),T}[ce](d){let T=this._controlledReadableStream;if(this._queue.length>0){let O=Ke(this);this._closeRequested&&this._queue.length===0?(S0(this),rh(T)):eh(this),d._chunkSteps(O)}else Ms(T,d),eh(this)}[H](){}}Object.defineProperties(qo.prototype,{close:{enumerable:!0},enqueue:{enumerable:!0},error:{enumerable:!0},desiredSize:{enumerable:!0}}),i(qo.prototype.close,"close"),i(qo.prototype.enqueue,"enqueue"),i(qo.prototype.error,"error"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(qo.prototype,Symbol.toStringTag,{value:"ReadableStreamDefaultController",configurable:!0});function w0(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_controlledReadableStream")?!1:u instanceof qo}function eh(u){if(!oD(u))return;if(u._pulling){u._pullAgain=!0;return}u._pulling=!0;let T=u._pullAlgorithm();B(T,()=>(u._pulling=!1,u._pullAgain&&(u._pullAgain=!1,eh(u)),null),O=>(zi(u,O),null))}function oD(u){let d=u._controlledReadableStream;return!Uu(u)||!u._started?!1:!!(Ya(d)&&xe(d)>0||SI(u)>0)}function S0(u){u._pullAlgorithm=void 0,u._cancelAlgorithm=void 0,u._strategySizeAlgorithm=void 0}function zA(u){if(!Uu(u))return;let d=u._controlledReadableStream;u._closeRequested=!0,u._queue.length===0&&(S0(u),rh(d))}function xu(u,d){if(!Uu(u))return;let T=u._controlledReadableStream;if(Ya(T)&&xe(T)>0)Ye(T,d,!1);else{let O;try{O=u._strategySizeAlgorithm(d)}catch(J){throw zi(u,J),J}try{Xe(u,d,O)}catch(J){throw zi(u,J),J}}eh(u)}function zi(u,d){let T=u._controlledReadableStream;T._state==="readable"&&(Ue(u),S0(u),uD(T,d))}function SI(u){let d=u._controlledReadableStream._state;return d==="errored"?null:d==="closed"?0:u._strategyHWM-u._queueTotalSize}function WJ(u){return!oD(u)}function Uu(u){let d=u._controlledReadableStream._state;return!u._closeRequested&&d==="readable"}function aD(u,d,T,O,J,re,oe){d._controlledReadableStream=u,d._queue=void 0,d._queueTotalSize=void 0,Ue(d),d._started=!1,d._closeRequested=!1,d._pullAgain=!1,d._pulling=!1,d._strategySizeAlgorithm=oe,d._strategyHWM=re,d._pullAlgorithm=O,d._cancelAlgorithm=J,u._readableStreamController=d;let me=T();B(f(me),()=>(d._started=!0,eh(d),null),We=>(zi(d,We),null))}function VJ(u,d,T,O){let J=Object.create(qo.prototype),re,oe,me;d.start!==void 0?re=()=>d.start(J):re=()=>{},d.pull!==void 0?oe=()=>d.pull(J):oe=()=>f(void 0),d.cancel!==void 0?me=We=>d.cancel(We):me=()=>f(void 0),aD(u,J,re,oe,me,T,O)}function _0(u){return new TypeError(`ReadableStreamDefaultController.prototype.${u} can only be used on a ReadableStreamDefaultController`)}function JJ(u,d){return Pe(u._readableStreamController)?zJ(u):jJ(u)}function jJ(u,d){let T=ve(u),O=!1,J=!1,re=!1,oe=!1,me,We,Se,ot,lt,Ot=A(dn=>{lt=dn});function Xi(){return O?(J=!0,f(void 0)):(O=!0,en(T,{_chunkSteps:_n=>{U(()=>{J=!1;let ui=_n,Yo=_n;re||xu(Se._readableStreamController,ui),oe||xu(ot._readableStreamController,Yo),O=!1,J&&Xi()})},_closeSteps:()=>{O=!1,re||zA(Se._readableStreamController),oe||zA(ot._readableStreamController),(!re||!oe)&&lt(void 0)},_errorSteps:()=>{O=!1}}),f(void 0))}function Pu(dn){if(re=!0,me=dn,oe){let _n=ye([me,We]),ui=Ki(u,_n);lt(ui)}return Ot}function Va(dn){if(oe=!0,We=dn,re){let _n=ye([me,We]),ui=Ki(u,_n);lt(ui)}return Ot}function Go(){}return Se=th(Go,Xi,Pu),ot=th(Go,Xi,Va),_(T._closedPromise,dn=>(zi(Se._readableStreamController,dn),zi(ot._readableStreamController,dn),(!re||!oe)&&lt(void 0),null)),[Se,ot]}function zJ(u){let d=ve(u),T=!1,O=!1,J=!1,re=!1,oe=!1,me,We,Se,ot,lt,Ot=A(Me=>{lt=Me});function Xi(Me){_(Me._closedPromise,mt=>(Me!==d||(fi(Se._readableStreamController,mt),fi(ot._readableStreamController,mt),(!re||!oe)&&lt(void 0)),null))}function Pu(){VA(d)&&(b(d),d=ve(u),Xi(d)),en(d,{_chunkSteps:mt=>{U(()=>{O=!1,J=!1;let Gt=mt,Wn=mt;if(!re&&!oe)try{Wn=La(mt)}catch(Ou){fi(Se._readableStreamController,Ou),fi(ot._readableStreamController,Ou),lt(Ki(u,Ou));return}re||Oa(Se._readableStreamController,Gt),oe||Oa(ot._readableStreamController,Wn),T=!1,O?Go():J&&dn()})},_closeSteps:()=>{T=!1,re||Oo(Se._readableStreamController),oe||Oo(ot._readableStreamController),Se._readableStreamController._pendingPullIntos.length>0&&h0(Se._readableStreamController,0),ot._readableStreamController._pendingPullIntos.length>0&&h0(ot._readableStreamController,0),(!re||!oe)&&lt(void 0)},_errorSteps:()=>{T=!1}})}function Va(Me,mt){De(d)&&(b(d),d=LR(u),Xi(d));let Gt=mt?ot:Se,Wn=mt?Se:ot;HR(d,Me,1,{_chunkSteps:Hu=>{U(()=>{O=!1,J=!1;let qu=mt?oe:re;if(mt?re:oe)qu||d0(Gt._readableStreamController,Hu);else{let CD;try{CD=La(Hu)}catch(TI){fi(Gt._readableStreamController,TI),fi(Wn._readableStreamController,TI),lt(Ki(u,TI));return}qu||d0(Gt._readableStreamController,Hu),Oa(Wn._readableStreamController,CD)}T=!1,O?Go():J&&dn()})},_closeSteps:Hu=>{T=!1;let qu=mt?oe:re,k0=mt?re:oe;qu||Oo(Gt._readableStreamController),k0||Oo(Wn._readableStreamController),Hu!==void 0&&(qu||d0(Gt._readableStreamController,Hu),!k0&&Wn._readableStreamController._pendingPullIntos.length>0&&h0(Wn._readableStreamController,0)),(!qu||!k0)&&lt(void 0)},_errorSteps:()=>{T=!1}})}function Go(){if(T)return O=!0,f(void 0);T=!0;let Me=lI(Se._readableStreamController);return Me===null?Pu():Va(Me._view,!1),f(void 0)}function dn(){if(T)return J=!0,f(void 0);T=!0;let Me=lI(ot._readableStreamController);return Me===null?Pu():Va(Me._view,!0),f(void 0)}function _n(Me){if(re=!0,me=Me,oe){let mt=ye([me,We]),Gt=Ki(u,mt);lt(Gt)}return Ot}function ui(Me){if(oe=!0,We=Me,re){let mt=ye([me,We]),Gt=Ki(u,mt);lt(Gt)}return Ot}function Yo(){}return Se=fD(Yo,Go,_n),ot=fD(Yo,dn,ui),Xi(d),[Se,ot]}function KJ(u){return r(u)&&typeof u.getReader<"u"}function XJ(u){return KJ(u)?$J(u.getReader()):ZJ(u)}function ZJ(u){let d,T=$e(u,"async"),O=t;function J(){let oe;try{oe=rt(T)}catch(We){return l(We)}let me=f(oe);return N(me,We=>{if(!r(We))throw new TypeError("The promise returned by the iterator.next() method must fulfill with an object");if(GA(We))zA(d._readableStreamController);else{let ot=nt(We);xu(d._readableStreamController,ot)}})}function re(oe){let me=T.iterator,We;try{We=je(me,"return")}catch(lt){return l(lt)}if(We===void 0)return f(void 0);let Se;try{Se=G(We,me,[oe])}catch(lt){return l(lt)}let ot=f(Se);return N(ot,lt=>{if(!r(lt))throw new TypeError("The promise returned by the iterator.return() method must fulfill with an object")})}return d=th(O,J,re,0),d}function $J(u){let d,T=t;function O(){let re;try{re=u.read()}catch(oe){return l(oe)}return N(re,oe=>{if(!r(oe))throw new TypeError("The promise returned by the reader.read() method must fulfill with an object");if(oe.done)zA(d._readableStreamController);else{let me=oe.value;xu(d._readableStreamController,me)}})}function J(re){try{return f(u.cancel(re))}catch(oe){return l(oe)}}return d=th(T,O,J,0),d}function ej(u,d){ne(u,d);let T=u,O=T?.autoAllocateChunkSize,J=T?.cancel,re=T?.pull,oe=T?.start,me=T?.type;return{autoAllocateChunkSize:O===void 0?void 0:yr(O,`${d} has member 'autoAllocateChunkSize' that`),cancel:J===void 0?void 0:tj(J,T,`${d} has member 'cancel' that`),pull:re===void 0?void 0:rj(re,T,`${d} has member 'pull' that`),start:oe===void 0?void 0:nj(oe,T,`${d} has member 'start' that`),type:me===void 0?void 0:ij(me,`${d} has member 'type' that`)}}function tj(u,d,T){return Ae(u,T),O=>Y(u,d,[O])}function rj(u,d,T){return Ae(u,T),O=>Y(u,d,[O])}function nj(u,d,T){return Ae(u,T),O=>G(u,d,[O])}function ij(u,d){if(u=`${u}`,u!=="bytes")throw new TypeError(`${d} '${u}' is not a valid enumeration value for ReadableStreamType`);return u}function sj(u,d){return ne(u,d),{preventCancel:!!u?.preventCancel}}function AD(u,d){ne(u,d);let T=u?.preventAbort,O=u?.preventCancel,J=u?.preventClose,re=u?.signal;return re!==void 0&&oj(re,`${d} has member 'signal' that`),{preventAbort:!!T,preventCancel:!!O,preventClose:!!J,signal:re}}function oj(u,d){if(!dJ(u))throw new TypeError(`${d} is not an AbortSignal.`)}function aj(u,d){ne(u,d);let T=u?.readable;de(T,"readable","ReadableWritablePair"),we(T,`${d} has member 'readable' that`);let O=u?.writable;return de(O,"writable","ReadableWritablePair"),GR(O,`${d} has member 'writable' that`),{readable:T,writable:O}}class tn{constructor(d={},T={}){d===void 0?d=null:pe(d,"First parameter");let O=E0(T,"Second parameter"),J=ej(d,"First parameter");if(_I(this),J.type==="bytes"){if(O.size!==void 0)throw new RangeError("The strategy for a byte stream cannot have a size function");let re=Xl(O,0);tJ(this,J,re)}else{let re=p0(O),oe=Xl(O,1);VJ(this,J,oe,re)}}get locked(){if(!Ga(this))throw KA("locked");return Ya(this)}cancel(d=void 0){return Ga(this)?Ya(this)?l(new TypeError("Cannot cancel a stream that already has a reader")):Ki(this,d):l(KA("cancel"))}getReader(d=void 0){if(!Ga(this))throw KA("getReader");return nJ(d,"First parameter").mode===void 0?ve(this):LR(this)}pipeThrough(d,T={}){if(!Ga(this))throw KA("pipeThrough");he(d,1,"pipeThrough");let O=aj(d,"First parameter"),J=AD(T,"Second parameter");if(Ya(this))throw new TypeError("ReadableStream.prototype.pipeThrough cannot be used on a locked ReadableStream");if(Fu(O.writable))throw new TypeError("ReadableStream.prototype.pipeThrough cannot be used on a locked WritableStream");let re=sD(this,O.writable,J.preventClose,J.preventAbort,J.preventCancel,J.signal);return P(re),O.readable}pipeTo(d,T={}){if(!Ga(this))return l(KA("pipeTo"));if(d===void 0)return l("Parameter 1 is required in 'pipeTo'.");if(!Mu(d))return l(new TypeError("ReadableStream.prototype.pipeTo's first argument must be a WritableStream"));let O;try{O=AD(T,"Second parameter")}catch(J){return l(J)}return Ya(this)?l(new TypeError("ReadableStream.prototype.pipeTo cannot be used on a locked ReadableStream")):Fu(d)?l(new TypeError("ReadableStream.prototype.pipeTo cannot be used on a locked WritableStream")):sD(this,d,O.preventClose,O.preventAbort,O.preventCancel,O.signal)}tee(){if(!Ga(this))throw KA("tee");let d=JJ(this);return ye(d)}values(d=void 0){if(!Ga(this))throw KA("values");let T=sj(d,"First parameter");return m(this,T.preventCancel)}[Fo](d){return this.values(d)}static from(d){return XJ(d)}}Object.defineProperties(tn,{from:{enumerable:!0}}),Object.defineProperties(tn.prototype,{cancel:{enumerable:!0},getReader:{enumerable:!0},pipeThrough:{enumerable:!0},pipeTo:{enumerable:!0},tee:{enumerable:!0},values:{enumerable:!0},locked:{enumerable:!0}}),i(tn.from,"from"),i(tn.prototype.cancel,"cancel"),i(tn.prototype.getReader,"getReader"),i(tn.prototype.pipeThrough,"pipeThrough"),i(tn.prototype.pipeTo,"pipeTo"),i(tn.prototype.tee,"tee"),i(tn.prototype.values,"values"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(tn.prototype,Symbol.toStringTag,{value:"ReadableStream",configurable:!0}),Object.defineProperty(tn.prototype,Fo,{value:tn.prototype.values,writable:!0,configurable:!0});function th(u,d,T,O=1,J=()=>1){let re=Object.create(tn.prototype);_I(re);let oe=Object.create(qo.prototype);return aD(re,oe,u,d,T,O,J),re}function fD(u,d,T){let O=Object.create(tn.prototype);_I(O);let J=Object.create(hn.prototype);return UR(O,J,u,d,T,0,void 0),O}function _I(u){u._state="readable",u._reader=void 0,u._storedError=void 0,u._disturbed=!1}function Ga(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_readableStreamController")?!1:u instanceof tn}function Ya(u){return u._reader!==void 0}function Ki(u,d){if(u._disturbed=!0,u._state==="closed")return f(void 0);if(u._state==="errored")return l(u._storedError);rh(u);let T=u._reader;if(T!==void 0&&VA(T)){let J=T._readIntoRequests;T._readIntoRequests=new ee,J.forEach(re=>{re._closeSteps(void 0)})}let O=u._readableStreamController[ie](d);return N(O,t)}function rh(u){u._state="closed";let d=u._reader;if(d!==void 0&&(D(d),De(d))){let T=d._readRequests;d._readRequests=new ee,T.forEach(O=>{O._closeSteps()})}}function uD(u,d){u._state="errored",u._storedError=d;let T=u._reader;T!==void 0&&(C(T,d),De(T)?He(T,d):qR(T,d))}function KA(u){return new TypeError(`ReadableStream.prototype.${u} can only be used on a ReadableStream`)}function cD(u,d){ne(u,d);let T=u?.highWaterMark;return de(T,"highWaterMark","QueuingStrategyInit"),{highWaterMark:wt(T)}}let lD=u=>u.byteLength;i(lD,"size");class v0{constructor(d){he(d,1,"ByteLengthQueuingStrategy"),d=cD(d,"First parameter"),this._byteLengthQueuingStrategyHighWaterMark=d.highWaterMark}get highWaterMark(){if(!dD(this))throw hD("highWaterMark");return this._byteLengthQueuingStrategyHighWaterMark}get size(){if(!dD(this))throw hD("size");return lD}}Object.defineProperties(v0.prototype,{highWaterMark:{enumerable:!0},size:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(v0.prototype,Symbol.toStringTag,{value:"ByteLengthQueuingStrategy",configurable:!0});function hD(u){return new TypeError(`ByteLengthQueuingStrategy.prototype.${u} can only be used on a ByteLengthQueuingStrategy`)}function dD(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_byteLengthQueuingStrategyHighWaterMark")?!1:u instanceof v0}let gD=()=>1;i(gD,"size");class R0{constructor(d){he(d,1,"CountQueuingStrategy"),d=cD(d,"First parameter"),this._countQueuingStrategyHighWaterMark=d.highWaterMark}get highWaterMark(){if(!ED(this))throw pD("highWaterMark");return this._countQueuingStrategyHighWaterMark}get size(){if(!ED(this))throw pD("size");return gD}}Object.defineProperties(R0.prototype,{highWaterMark:{enumerable:!0},size:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(R0.prototype,Symbol.toStringTag,{value:"CountQueuingStrategy",configurable:!0});function pD(u){return new TypeError(`CountQueuingStrategy.prototype.${u} can only be used on a CountQueuingStrategy`)}function ED(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_countQueuingStrategyHighWaterMark")?!1:u instanceof R0}function Aj(u,d){ne(u,d);let T=u?.cancel,O=u?.flush,J=u?.readableType,re=u?.start,oe=u?.transform,me=u?.writableType;return{cancel:T===void 0?void 0:lj(T,u,`${d} has member 'cancel' that`),flush:O===void 0?void 0:fj(O,u,`${d} has member 'flush' that`),readableType:J,start:re===void 0?void 0:uj(re,u,`${d} has member 'start' that`),transform:oe===void 0?void 0:cj(oe,u,`${d} has member 'transform' that`),writableType:me}}function fj(u,d,T){return Ae(u,T),O=>Y(u,d,[O])}function uj(u,d,T){return Ae(u,T),O=>G(u,d,[O])}function cj(u,d,T){return Ae(u,T),(O,J)=>Y(u,d,[O,J])}function lj(u,d,T){return Ae(u,T),O=>Y(u,d,[O])}class D0{constructor(d={},T={},O={}){d===void 0&&(d=null);let J=E0(T,"Second parameter"),re=E0(O,"Third parameter"),oe=Aj(d,"First parameter");if(oe.readableType!==void 0)throw new RangeError("Invalid readableType specified");if(oe.writableType!==void 0)throw new RangeError("Invalid writableType specified");let me=Xl(re,0),We=p0(re),Se=Xl(J,1),ot=p0(J),lt,Ot=A(Xi=>{lt=Xi});hj(this,Ot,Se,ot,me,We),gj(this,oe),oe.start!==void 0?lt(oe.start(this._transformStreamController)):lt(void 0)}get readable(){if(!yD(this))throw bD("readable");return this._readable}get writable(){if(!yD(this))throw bD("writable");return this._writable}}Object.defineProperties(D0.prototype,{readable:{enumerable:!0},writable:{enumerable:!0}}),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(D0.prototype,Symbol.toStringTag,{value:"TransformStream",configurable:!0});function hj(u,d,T,O,J,re){function oe(){return d}function me(Ot){return yj(u,Ot)}function We(Ot){return mj(u,Ot)}function Se(){return Bj(u)}u._writable=EJ(oe,me,Se,We,T,O);function ot(){return Ij(u)}function lt(Ot){return bj(u,Ot)}u._readable=th(oe,ot,lt,J,re),u._backpressure=void 0,u._backpressureChangePromise=void 0,u._backpressureChangePromise_resolve=void 0,T0(u,!0),u._transformStreamController=void 0}function yD(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_transformStreamController")?!1:u instanceof D0}function mD(u,d){zi(u._readable._readableStreamController,d),vI(u,d)}function vI(u,d){M0(u._transformStreamController),Zl(u._writable._writableStreamController,d),RI(u)}function RI(u){u._backpressure&&T0(u,!1)}function T0(u,d){u._backpressureChangePromise!==void 0&&u._backpressureChangePromise_resolve(),u._backpressureChangePromise=A(T=>{u._backpressureChangePromise_resolve=T}),u._backpressure=d}class Wa{constructor(){throw new TypeError("Illegal constructor")}get desiredSize(){if(!N0(this))throw F0("desiredSize");let d=this._controlledTransformStream._readable._readableStreamController;return SI(d)}enqueue(d=void 0){if(!N0(this))throw F0("enqueue");BD(this,d)}error(d=void 0){if(!N0(this))throw F0("error");pj(this,d)}terminate(){if(!N0(this))throw F0("terminate");Ej(this)}}Object.defineProperties(Wa.prototype,{enqueue:{enumerable:!0},error:{enumerable:!0},terminate:{enumerable:!0},desiredSize:{enumerable:!0}}),i(Wa.prototype.enqueue,"enqueue"),i(Wa.prototype.error,"error"),i(Wa.prototype.terminate,"terminate"),typeof Symbol.toStringTag=="symbol"&&Object.defineProperty(Wa.prototype,Symbol.toStringTag,{value:"TransformStreamDefaultController",configurable:!0});function N0(u){return!r(u)||!Object.prototype.hasOwnProperty.call(u,"_controlledTransformStream")?!1:u instanceof Wa}function dj(u,d,T,O,J){d._controlledTransformStream=u,u._transformStreamController=d,d._transformAlgorithm=T,d._flushAlgorithm=O,d._cancelAlgorithm=J,d._finishPromise=void 0,d._finishPromise_resolve=void 0,d._finishPromise_reject=void 0}function gj(u,d){let T=Object.create(Wa.prototype),O,J,re;d.transform!==void 0?O=oe=>d.transform(oe,T):O=oe=>{try{return BD(T,oe),f(void 0)}catch(me){return l(me)}},d.flush!==void 0?J=()=>d.flush(T):J=()=>f(void 0),d.cancel!==void 0?re=oe=>d.cancel(oe):re=()=>f(void 0),dj(u,T,O,J,re)}function M0(u){u._transformAlgorithm=void 0,u._flushAlgorithm=void 0,u._cancelAlgorithm=void 0}function BD(u,d){let T=u._controlledTransformStream,O=T._readable._readableStreamController;if(!Uu(O))throw new TypeError("Readable side is not in a state that permits enqueue");try{xu(O,d)}catch(re){throw vI(T,re),T._readable._storedError}WJ(O)!==T._backpressure&&T0(T,!0)}function pj(u,d){mD(u._controlledTransformStream,d)}function ID(u,d){let T=u._transformAlgorithm(d);return N(T,void 0,O=>{throw mD(u._controlledTransformStream,O),O})}function Ej(u){let d=u._controlledTransformStream,T=d._readable._readableStreamController;zA(T);let O=new TypeError("TransformStream terminated");vI(d,O)}function yj(u,d){let T=u._transformStreamController;if(u._backpressure){let O=u._backpressureChangePromise;return N(O,()=>{let J=u._writable;if(J._state==="erroring")throw J._storedError;return ID(T,d)})}return ID(T,d)}function mj(u,d){let T=u._transformStreamController;if(T._finishPromise!==void 0)return T._finishPromise;let O=u._readable;T._finishPromise=A((re,oe)=>{T._finishPromise_resolve=re,T._finishPromise_reject=oe});let J=T._cancelAlgorithm(d);return M0(T),B(J,()=>(O._state==="errored"?Lu(T,O._storedError):(zi(O._readableStreamController,d),DI(T)),null),re=>(zi(O._readableStreamController,re),Lu(T,re),null)),T._finishPromise}function Bj(u){let d=u._transformStreamController;if(d._finishPromise!==void 0)return d._finishPromise;let T=u._readable;d._finishPromise=A((J,re)=>{d._finishPromise_resolve=J,d._finishPromise_reject=re});let O=d._flushAlgorithm();return M0(d),B(O,()=>(T._state==="errored"?Lu(d,T._storedError):(zA(T._readableStreamController),DI(d)),null),J=>(zi(T._readableStreamController,J),Lu(d,J),null)),d._finishPromise}function Ij(u){return T0(u,!1),u._backpressureChangePromise}function bj(u,d){let T=u._transformStreamController;if(T._finishPromise!==void 0)return T._finishPromise;let O=u._writable;T._finishPromise=A((re,oe)=>{T._finishPromise_resolve=re,T._finishPromise_reject=oe});let J=T._cancelAlgorithm(d);return M0(T),B(J,()=>(O._state==="errored"?Lu(T,O._storedError):(Zl(O._writableStreamController,d),RI(u),DI(T)),null),re=>(Zl(O._writableStreamController,re),RI(u),Lu(T,re),null)),T._finishPromise}function F0(u){return new TypeError(`TransformStreamDefaultController.prototype.${u} can only be used on a TransformStreamDefaultController`)}function DI(u){u._finishPromise_resolve!==void 0&&(u._finishPromise_resolve(),u._finishPromise_resolve=void 0,u._finishPromise_reject=void 0)}function Lu(u,d){u._finishPromise_reject!==void 0&&(P(u._finishPromise),u._finishPromise_reject(d),u._finishPromise_resolve=void 0,u._finishPromise_reject=void 0)}function bD(u){return new TypeError(`TransformStream.prototype.${u} can only be used on a TransformStream`)}e.ByteLengthQueuingStrategy=v0,e.CountQueuingStrategy=R0,e.ReadableByteStreamController=hn,e.ReadableStream=tn,e.ReadableStreamBYOBReader=Ha,e.ReadableStreamBYOBRequest=Le,e.ReadableStreamDefaultController=qo,e.ReadableStreamDefaultReader=Te,e.TransformStream=D0,e.TransformStreamDefaultController=Wa,e.WritableStream=qa,e.WritableStreamDefaultController=ku,e.WritableStreamDefaultWriter=Ho}))});var MC=x((qDe,Hk)=>{"use strict";function rA(e){"@babel/helpers - typeof";return rA=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(t){return typeof t}:function(t){return t&&typeof Symbol=="function"&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},rA(e)}function Lk(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,xse(n.key),n)}}function kse(e,t,r){return t&&Lk(e.prototype,t),r&&Lk(e,r),Object.defineProperty(e,"prototype",{writable:!1}),e}function xse(e){var t=Use(e,"string");return rA(t)==="symbol"?t:String(t)}function Use(e,t){if(rA(e)!=="object"||e===null)return e;var r=e[Symbol.toPrimitive];if(r!==void 0){var n=r.call(e,t||"default");if(rA(n)!=="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(t==="string"?String:Number)(e)}function Lse(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function Pse(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),Object.defineProperty(e,"prototype",{writable:!1}),t&&NC(e,t)}function NC(e,t){return NC=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(n,i){return n.__proto__=i,n},NC(e,t)}function Ose(e){var t=Gse();return function(){var n=zp(e),i;if(t){var s=zp(this).constructor;i=Reflect.construct(n,arguments,s)}else i=n.apply(this,arguments);return Hse(this,i)}}function Hse(e,t){if(t&&(rA(t)==="object"||typeof t=="function"))return t;if(t!==void 0)throw new TypeError("Derived constructors may only return object or undefined");return qse(e)}function qse(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function Gse(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch{return!1}}function zp(e){return zp=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(r){return r.__proto__||Object.getPrototypeOf(r)},zp(e)}var Ok={},gc,TC;function Mh(e,t,r){r||(r=Error);function n(s,o,a){return typeof t=="string"?t:t(s,o,a)}var i=(function(s){Pse(a,s);var o=Ose(a);function a(A,f,l){var p;return Lse(this,a),p=o.call(this,n(A,f,l)),p.code=e,p}return kse(a)})(r);Ok[e]=i}function Pk(e,t){if(Array.isArray(e)){var r=e.length;return e=e.map(function(n){return String(n)}),r>2?"one of ".concat(t," ").concat(e.slice(0,r-1).join(", "),", or ")+e[r-1]:r===2?"one of ".concat(t," ").concat(e[0]," or ").concat(e[1]):"of ".concat(t," ").concat(e[0])}else return"of ".concat(t," ").concat(String(e))}function Yse(e,t,r){return e.substr(!r||r<0?0:+r,t.length)===t}function Wse(e,t,r){return(r===void 0||r>e.length)&&(r=e.length),e.substring(r-t.length,r)===t}function Vse(e,t,r){return typeof r!="number"&&(r=0),r+t.length>e.length?!1:e.indexOf(t,r)!==-1}Mh("ERR_AMBIGUOUS_ARGUMENT",'The "%s" argument is ambiguous. %s',TypeError);Mh("ERR_INVALID_ARG_TYPE",function(e,t,r){gc===void 0&&(gc=Wt()),gc(typeof e=="string","'name' must be a string");var n;typeof t=="string"&&Yse(t,"not ")?(n="must not be",t=t.replace(/^not /,"")):n="must be";var i;if(Wse(e," argument"))i="The ".concat(e," ").concat(n," ").concat(Pk(t,"type"));else{var s=Vse(e,".")?"property":"argument";i='The "'.concat(e,'" ').concat(s," ").concat(n," ").concat(Pk(t,"type"))}return i+=". Received type ".concat(rA(r)),i},TypeError);Mh("ERR_INVALID_ARG_VALUE",function(e,t){var r=arguments.length>2&&arguments[2]!==void 0?arguments[2]:"is invalid";TC===void 0&&(TC=Yr());var n=TC.inspect(t);return n.length>128&&(n="".concat(n.slice(0,128),"...")),"The argument '".concat(e,"' ").concat(r,". Received ").concat(n)},TypeError,RangeError);Mh("ERR_INVALID_RETURN_VALUE",function(e,t,r){var n;return r&&r.constructor&&r.constructor.name?n="instance of ".concat(r.constructor.name):n="type ".concat(rA(r)),"Expected ".concat(e,' to be returned from the "').concat(t,'"')+" function but got ".concat(n,".")},TypeError);Mh("ERR_MISSING_ARGS",function(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];gc===void 0&&(gc=Wt()),gc(t.length>0,"At least one arg needs to be specified");var n="The ",i=t.length;switch(t=t.map(function(s){return'"'.concat(s,'"')}),i){case 1:n+="".concat(t[0]," argument");break;case 2:n+="".concat(t[0]," and ").concat(t[1]," arguments");break;default:n+=t.slice(0,i-1).join(", "),n+=", and ".concat(t[i-1]," arguments");break}return"".concat(n," must be specified")},TypeError);Hk.exports.codes=Ok});var Xk=x((GDe,Kk)=>{"use strict";function qk(e,t){var r=Object.keys(e);if(Object.getOwnPropertySymbols){var n=Object.getOwnPropertySymbols(e);t&&(n=n.filter(function(i){return Object.getOwnPropertyDescriptor(e,i).enumerable})),r.push.apply(r,n)}return r}function Gk(e){for(var t=1;t<arguments.length;t++){var r=arguments[t]!=null?arguments[t]:{};t%2?qk(Object(r),!0).forEach(function(n){Jse(e,n,r[n])}):Object.getOwnPropertyDescriptors?Object.defineProperties(e,Object.getOwnPropertyDescriptors(r)):qk(Object(r)).forEach(function(n){Object.defineProperty(e,n,Object.getOwnPropertyDescriptor(r,n))})}return e}function Jse(e,t,r){return t=Jk(t),t in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}function jse(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}function Yk(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,Jk(n.key),n)}}function zse(e,t,r){return t&&Yk(e.prototype,t),r&&Yk(e,r),Object.defineProperty(e,"prototype",{writable:!1}),e}function Jk(e){var t=Kse(e,"string");return Dn(t)==="symbol"?t:String(t)}function Kse(e,t){if(Dn(e)!=="object"||e===null)return e;var r=e[Symbol.toPrimitive];if(r!==void 0){var n=r.call(e,t||"default");if(Dn(n)!=="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(t==="string"?String:Number)(e)}function Xse(e,t){if(typeof t!="function"&&t!==null)throw new TypeError("Super expression must either be null or a function");e.prototype=Object.create(t&&t.prototype,{constructor:{value:e,writable:!0,configurable:!0}}),Object.defineProperty(e,"prototype",{writable:!1}),t&&Uh(e,t)}function Zse(e){var t=zk();return function(){var n=Lh(e),i;if(t){var s=Lh(this).constructor;i=Reflect.construct(n,arguments,s)}else i=n.apply(this,arguments);return jk(this,i)}}function jk(e,t){if(t&&(Dn(t)==="object"||typeof t=="function"))return t;if(t!==void 0)throw new TypeError("Derived constructors may only return object or undefined");return FC(e)}function FC(e){if(e===void 0)throw new ReferenceError("this hasn't been initialised - super() hasn't been called");return e}function kC(e){var t=typeof Map=="function"?new Map:void 0;return kC=function(n){if(n===null||!$se(n))return n;if(typeof n!="function")throw new TypeError("Super expression must either be null or a function");if(typeof t<"u"){if(t.has(n))return t.get(n);t.set(n,i)}function i(){return Kp(n,arguments,Lh(this).constructor)}return i.prototype=Object.create(n.prototype,{constructor:{value:i,enumerable:!1,writable:!0,configurable:!0}}),Uh(i,n)},kC(e)}function Kp(e,t,r){return zk()?Kp=Reflect.construct.bind():Kp=function(i,s,o){var a=[null];a.push.apply(a,s);var A=Function.bind.apply(i,a),f=new A;return o&&Uh(f,o.prototype),f},Kp.apply(null,arguments)}function zk(){if(typeof Reflect>"u"||!Reflect.construct||Reflect.construct.sham)return!1;if(typeof Proxy=="function")return!0;try{return Boolean.prototype.valueOf.call(Reflect.construct(Boolean,[],function(){})),!0}catch{return!1}}function $se(e){return Function.toString.call(e).indexOf("[native code]")!==-1}function Uh(e,t){return Uh=Object.setPrototypeOf?Object.setPrototypeOf.bind():function(n,i){return n.__proto__=i,n},Uh(e,t)}function Lh(e){return Lh=Object.setPrototypeOf?Object.getPrototypeOf.bind():function(r){return r.__proto__||Object.getPrototypeOf(r)},Lh(e)}function Dn(e){"@babel/helpers - typeof";return Dn=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(t){return typeof t}:function(t){return t&&typeof Symbol=="function"&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},Dn(e)}var eoe=Yr(),xC=eoe.inspect,toe=MC(),roe=toe.codes.ERR_INVALID_ARG_TYPE;function Wk(e,t,r){return(r===void 0||r>e.length)&&(r=e.length),e.substring(r-t.length,r)===t}function noe(e,t){if(t=Math.floor(t),e.length==0||t==0)return"";var r=e.length*t;for(t=Math.floor(Math.log(t)/Math.log(2));t;)e+=e,t--;return e+=e.substring(0,r-e.length),e}var rs="",Fh="",kh="",Vr="",df={deepStrictEqual:"Expected values to be strictly deep-equal:",strictEqual:"Expected values to be strictly equal:",strictEqualObject:'Expected "actual" to be reference-equal to "expected":',deepEqual:"Expected values to be loosely deep-equal:",equal:"Expected values to be loosely equal:",notDeepStrictEqual:'Expected "actual" not to be strictly deep-equal to:',notStrictEqual:'Expected "actual" to be strictly unequal to:',notStrictEqualObject:'Expected "actual" not to be reference-equal to "expected":',notDeepEqual:'Expected "actual" not to be loosely deep-equal to:',notEqual:'Expected "actual" to be loosely unequal to:',notIdentical:"Values identical but not reference-equal:"},ioe=10;function Vk(e){var t=Object.keys(e),r=Object.create(Object.getPrototypeOf(e));return t.forEach(function(n){r[n]=e[n]}),Object.defineProperty(r,"message",{value:e.message}),r}function xh(e){return xC(e,{compact:!1,customInspect:!1,depth:1e3,maxArrayLength:1/0,showHidden:!1,breakLength:1/0,showProxy:!1,sorted:!0,getters:!0})}function soe(e,t,r){var n="",i="",s=0,o="",a=!1,A=xh(e),f=A.split(`
-`),l=xh(t).split(`
-`),p=0,B="";if(r==="strictEqual"&&Dn(e)==="object"&&Dn(t)==="object"&&e!==null&&t!==null&&(r="strictEqualObject"),f.length===1&&l.length===1&&f[0]!==l[0]){var S=f[0].length+l[0].length;if(S<=ioe){if((Dn(e)!=="object"||e===null)&&(Dn(t)!=="object"||t===null)&&(e!==0||t!==0))return"".concat(df[r],`
-
-`)+"".concat(f[0]," !== ").concat(l[0],`
-`)}else if(r!=="strictEqualObject"){var _=process.stderr&&process.stderr.isTTY?process.stderr.columns:80;if(S<_){for(;f[0][p]===l[0][p];)p++;p>2&&(B=`
-  `.concat(noe(" ",p),"^"),p=0)}}}for(var N=f[f.length-1],P=l[l.length-1];N===P&&(p++<2?o=`
-  `.concat(N).concat(o):n=N,f.pop(),l.pop(),!(f.length===0||l.length===0));)N=f[f.length-1],P=l[l.length-1];var U=Math.max(f.length,l.length);if(U===0){var G=A.split(`
-`);if(G.length>30)for(G[26]="".concat(rs,"...").concat(Vr);G.length>27;)G.pop();return"".concat(df.notIdentical,`
-
-`).concat(G.join(`
-`),`
-`)}p>3&&(o=`
-`.concat(rs,"...").concat(Vr).concat(o),a=!0),n!==""&&(o=`
-  `.concat(n).concat(o),n="");var Y=0,Z=df[r]+`
-`.concat(Fh,"+ actual").concat(Vr," ").concat(kh,"- expected").concat(Vr),ee=" ".concat(rs,"...").concat(Vr," Lines skipped");for(p=0;p<U;p++){var j=p-s;if(f.length<p+1)j>1&&p>2&&(j>4?(i+=`
-`.concat(rs,"...").concat(Vr),a=!0):j>3&&(i+=`
-  `.concat(l[p-2]),Y++),i+=`
-  `.concat(l[p-1]),Y++),s=p,n+=`
-`.concat(kh,"-").concat(Vr," ").concat(l[p]),Y++;else if(l.length<p+1)j>1&&p>2&&(j>4?(i+=`
-`.concat(rs,"...").concat(Vr),a=!0):j>3&&(i+=`
-  `.concat(f[p-2]),Y++),i+=`
-  `.concat(f[p-1]),Y++),s=p,i+=`
-`.concat(Fh,"+").concat(Vr," ").concat(f[p]),Y++;else{var se=l[p],ie=f[p],ce=ie!==se&&(!Wk(ie,",")||ie.slice(0,-1)!==se);ce&&Wk(se,",")&&se.slice(0,-1)===ie&&(ce=!1,ie+=","),ce?(j>1&&p>2&&(j>4?(i+=`
-`.concat(rs,"...").concat(Vr),a=!0):j>3&&(i+=`
-  `.concat(f[p-2]),Y++),i+=`
-  `.concat(f[p-1]),Y++),s=p,i+=`
-`.concat(Fh,"+").concat(Vr," ").concat(ie),n+=`
-`.concat(kh,"-").concat(Vr," ").concat(se),Y+=2):(i+=n,n="",(j===1||p===0)&&(i+=`
-  `.concat(ie),Y++))}if(Y>20&&p<U-2)return"".concat(Z).concat(ee,`
-`).concat(i,`
-`).concat(rs,"...").concat(Vr).concat(n,`
-`)+"".concat(rs,"...").concat(Vr)}return"".concat(Z).concat(a?ee:"",`
-`).concat(i).concat(n).concat(o).concat(B)}var ooe=(function(e,t){Xse(n,e);var r=Zse(n);function n(i){var s;if(jse(this,n),Dn(i)!=="object"||i===null)throw new roe("options","Object",i);var o=i.message,a=i.operator,A=i.stackStartFn,f=i.actual,l=i.expected,p=Error.stackTraceLimit;if(Error.stackTraceLimit=0,o!=null)s=r.call(this,String(o));else if(process.stderr&&process.stderr.isTTY&&(process.stderr&&process.stderr.getColorDepth&&process.stderr.getColorDepth()!==1?(rs="\x1B[34m",Fh="\x1B[32m",Vr="\x1B[39m",kh="\x1B[31m"):(rs="",Fh="",Vr="",kh="")),Dn(f)==="object"&&f!==null&&Dn(l)==="object"&&l!==null&&"stack"in f&&f instanceof Error&&"stack"in l&&l instanceof Error&&(f=Vk(f),l=Vk(l)),a==="deepStrictEqual"||a==="strictEqual")s=r.call(this,soe(f,l,a));else if(a==="notDeepStrictEqual"||a==="notStrictEqual"){var B=df[a],S=xh(f).split(`
-`);if(a==="notStrictEqual"&&Dn(f)==="object"&&f!==null&&(B=df.notStrictEqualObject),S.length>30)for(S[26]="".concat(rs,"...").concat(Vr);S.length>27;)S.pop();S.length===1?s=r.call(this,"".concat(B," ").concat(S[0])):s=r.call(this,"".concat(B,`
-
-`).concat(S.join(`
-`),`
-`))}else{var _=xh(f),N="",P=df[a];a==="notDeepEqual"||a==="notEqual"?(_="".concat(df[a],`
-
-`).concat(_),_.length>1024&&(_="".concat(_.slice(0,1021),"..."))):(N="".concat(xh(l)),_.length>512&&(_="".concat(_.slice(0,509),"...")),N.length>512&&(N="".concat(N.slice(0,509),"...")),a==="deepEqual"||a==="equal"?_="".concat(P,`
-
-`).concat(_,`
-
-should equal
-
-`):N=" ".concat(a," ").concat(N)),s=r.call(this,"".concat(_).concat(N))}return Error.stackTraceLimit=p,s.generatedMessage=!o,Object.defineProperty(FC(s),"name",{value:"AssertionError [ERR_ASSERTION]",enumerable:!1,writable:!0,configurable:!0}),s.code="ERR_ASSERTION",s.actual=f,s.expected=l,s.operator=a,Error.captureStackTrace&&Error.captureStackTrace(FC(s),A),s.stack,s.name="AssertionError",jk(s)}return zse(n,[{key:"toString",value:function(){return"".concat(this.name," [").concat(this.code,"]: ").concat(this.message)}},{key:t,value:function(s,o){return xC(this,Gk(Gk({},o),{},{customInspect:!1,depth:0}))}}]),n})(kC(Error),xC.custom);Kk.exports=ooe});var UC=x((YDe,$k)=>{"use strict";var Zk=Object.prototype.toString;$k.exports=function(t){var r=Zk.call(t),n=r==="[object Arguments]";return n||(n=r!=="[object Array]"&&t!==null&&typeof t=="object"&&typeof t.length=="number"&&t.length>=0&&Zk.call(t.callee)==="[object Function]"),n}});var A4=x((WDe,a4)=>{"use strict";var o4;Object.keys||(Ph=Object.prototype.hasOwnProperty,LC=Object.prototype.toString,e4=UC(),PC=Object.prototype.propertyIsEnumerable,t4=!PC.call({toString:null},"toString"),r4=PC.call(function(){},"prototype"),Oh=["toString","toLocaleString","valueOf","hasOwnProperty","isPrototypeOf","propertyIsEnumerable","constructor"],Xp=function(e){var t=e.constructor;return t&&t.prototype===e},n4={$applicationCache:!0,$console:!0,$external:!0,$frame:!0,$frameElement:!0,$frames:!0,$innerHeight:!0,$innerWidth:!0,$onmozfullscreenchange:!0,$onmozfullscreenerror:!0,$outerHeight:!0,$outerWidth:!0,$pageXOffset:!0,$pageYOffset:!0,$parent:!0,$scrollLeft:!0,$scrollTop:!0,$scrollX:!0,$scrollY:!0,$self:!0,$webkitIndexedDB:!0,$webkitStorageInfo:!0,$window:!0},i4=(function(){if(typeof window>"u")return!1;for(var e in window)try{if(!n4["$"+e]&&Ph.call(window,e)&&window[e]!==null&&typeof window[e]=="object")try{Xp(window[e])}catch{return!0}}catch{return!0}return!1})(),s4=function(e){if(typeof window>"u"||!i4)return Xp(e);try{return Xp(e)}catch{return!1}},o4=function(t){var r=t!==null&&typeof t=="object",n=LC.call(t)==="[object Function]",i=e4(t),s=r&&LC.call(t)==="[object String]",o=[];if(!r&&!n&&!i)throw new TypeError("Object.keys called on a non-object");var a=r4&&n;if(s&&t.length>0&&!Ph.call(t,0))for(var A=0;A<t.length;++A)o.push(String(A));if(i&&t.length>0)for(var f=0;f<t.length;++f)o.push(String(f));else for(var l in t)!(a&&l==="prototype")&&Ph.call(t,l)&&o.push(String(l));if(t4)for(var p=s4(t),B=0;B<Oh.length;++B)!(p&&Oh[B]==="constructor")&&Ph.call(t,Oh[B])&&o.push(Oh[B]);return o});var Ph,LC,e4,PC,t4,r4,Oh,Xp,n4,i4,s4;a4.exports=o4});var OC=x((VDe,c4)=>{"use strict";var aoe=Array.prototype.slice,Aoe=UC(),f4=Object.keys,Zp=f4?function(t){return f4(t)}:A4(),u4=Object.keys;Zp.shim=function(){if(Object.keys){var t=(function(){var r=Object.keys(arguments);return r&&r.length===arguments.length})(1,2);t||(Object.keys=function(n){return Aoe(n)?u4(aoe.call(n)):u4(n)})}else Object.keys=Zp;return Object.keys||Zp};c4.exports=Zp});var p4=x((JDe,g4)=>{"use strict";var foe=OC(),h4=G0()(),d4=Js(),$p=Y0(),uoe=d4("Array.prototype.push"),l4=d4("Object.prototype.propertyIsEnumerable"),coe=h4?$p.getOwnPropertySymbols:null;g4.exports=function(t,r){if(t==null)throw new TypeError("target must be an object");var n=$p(t);if(arguments.length===1)return n;for(var i=1;i<arguments.length;++i){var s=$p(arguments[i]),o=foe(s),a=h4&&($p.getOwnPropertySymbols||coe);if(a)for(var A=a(s),f=0;f<A.length;++f){var l=A[f];l4(s,l)&&uoe(o,l)}for(var p=0;p<o.length;++p){var B=o[p];if(l4(s,B)){var S=s[B];n[B]=S}}}return n}});var y4=x((jDe,E4)=>{"use strict";var HC=p4(),loe=function(){if(!Object.assign)return!1;for(var e="abcdefghijklmnopqrst",t=e.split(""),r={},n=0;n<t.length;++n)r[t[n]]=t[n];var i=Object.assign({},r),s="";for(var o in i)s+=o;return e!==s},hoe=function(){if(!Object.assign||!Object.preventExtensions)return!1;var e=Object.preventExtensions({1:2});try{Object.assign(e,"xy")}catch{return e[1]==="y"}return!1};E4.exports=function(){return!Object.assign||loe()||hoe()?HC:Object.assign}});var qC=x((zDe,B4)=>{"use strict";var m4=function(e){return e!==e};B4.exports=function(t,r){return t===0&&r===0?1/t===1/r:!!(t===r||m4(t)&&m4(r))}});var eE=x((KDe,I4)=>{"use strict";var doe=qC();I4.exports=function(){return typeof Object.is=="function"?Object.is:doe}});var w4=x((XDe,Q4)=>{"use strict";var b4=ec(),C4=ch(),goe=C4(b4("String.prototype.indexOf"));Q4.exports=function(t,r){var n=b4(t,!!r);return typeof n=="function"&&goe(t,".prototype.")>-1?C4(n):n}});var Hh=x((ZDe,R4)=>{"use strict";var poe=OC(),Eoe=typeof Symbol=="function"&&typeof Symbol("foo")=="symbol",yoe=Object.prototype.toString,moe=Array.prototype.concat,S4=db(),Boe=function(e){return typeof e=="function"&&yoe.call(e)==="[object Function]"},_4=pb()(),Ioe=function(e,t,r,n){if(t in e){if(n===!0){if(e[t]===r)return}else if(!Boe(n)||!n())return}_4?S4(e,t,r,!0):S4(e,t,r)},v4=function(e,t){var r=arguments.length>2?arguments[2]:{},n=poe(t);Eoe&&(n=moe.call(n,Object.getOwnPropertySymbols(t)));for(var i=0;i<n.length;i+=1)Ioe(e,n[i],t[n[i]],r[n[i]])};v4.supportsDescriptors=!!_4;R4.exports=v4});var T4=x(($De,D4)=>{"use strict";var boe=eE(),Coe=Hh();D4.exports=function(){var t=boe();return Coe(Object,{is:t},{is:function(){return Object.is!==t}}),t}});var k4=x((eTe,F4)=>{"use strict";var Qoe=Hh(),woe=ch(),Soe=qC(),N4=eE(),_oe=T4(),M4=woe(N4(),Object);Qoe(M4,{getPolyfill:N4,implementation:Soe,shim:_oe});F4.exports=M4});var GC=x((tTe,x4)=>{"use strict";x4.exports=function(t){return t!==t}});var YC=x((rTe,U4)=>{"use strict";var voe=GC();U4.exports=function(){return Number.isNaN&&Number.isNaN(NaN)&&!Number.isNaN("a")?Number.isNaN:voe}});var P4=x((nTe,L4)=>{"use strict";var Roe=Hh(),Doe=YC();L4.exports=function(){var t=Doe();return Roe(Number,{isNaN:t},{isNaN:function(){return Number.isNaN!==t}}),t}});var G4=x((iTe,q4)=>{"use strict";var Toe=ch(),Noe=Hh(),Moe=GC(),O4=YC(),Foe=P4(),H4=Toe(O4(),Number);Noe(H4,{getPolyfill:O4,implementation:Moe,shim:Foe});q4.exports=H4});var fx=x((sTe,Ax)=>{"use strict";function Y4(e,t){return Loe(e)||Uoe(e,t)||xoe(e,t)||koe()}function koe(){throw new TypeError(`Invalid attempt to destructure non-iterable instance.
-In order to be iterable, non-array objects must have a [Symbol.iterator]() method.`)}function xoe(e,t){if(e){if(typeof e=="string")return W4(e,t);var r=Object.prototype.toString.call(e).slice(8,-1);if(r==="Object"&&e.constructor&&(r=e.constructor.name),r==="Map"||r==="Set")return Array.from(e);if(r==="Arguments"||/^(?:Ui|I)nt(?:8|16|32)(?:Clamped)?Array$/.test(r))return W4(e,t)}}function W4(e,t){(t==null||t>e.length)&&(t=e.length);for(var r=0,n=new Array(t);r<t;r++)n[r]=e[r];return n}function Uoe(e,t){var r=e==null?null:typeof Symbol<"u"&&e[Symbol.iterator]||e["@@iterator"];if(r!=null){var n,i,s,o,a=[],A=!0,f=!1;try{if(s=(r=r.call(e)).next,t===0){if(Object(r)!==r)return;A=!1}else for(;!(A=(n=s.call(r)).done)&&(a.push(n.value),a.length!==t);A=!0);}catch(l){f=!0,i=l}finally{try{if(!A&&r.return!=null&&(o=r.return(),Object(o)!==o))return}finally{if(f)throw i}}return a}}function Loe(e){if(Array.isArray(e))return e}function pi(e){"@babel/helpers - typeof";return pi=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(t){return typeof t}:function(t){return t&&typeof Symbol=="function"&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},pi(e)}var Poe=/a/g.flags!==void 0,aE=function(t){var r=[];return t.forEach(function(n){return r.push(n)}),r},V4=function(t){var r=[];return t.forEach(function(n,i){return r.push([i,n])}),r},nx=Object.is?Object.is:k4(),sE=Object.getOwnPropertySymbols?Object.getOwnPropertySymbols:function(){return[]},WC=Number.isNaN?Number.isNaN:G4();function JC(e){return e.call.bind(e)}var Gh=JC(Object.prototype.hasOwnProperty),oE=JC(Object.prototype.propertyIsEnumerable),J4=JC(Object.prototype.toString),gn=Yr().types,Ooe=gn.isAnyArrayBuffer,Hoe=gn.isArrayBufferView,j4=gn.isDate,tE=gn.isMap,z4=gn.isRegExp,rE=gn.isSet,qoe=gn.isNativeError,Goe=gn.isBoxedPrimitive,K4=gn.isNumberObject,X4=gn.isStringObject,Z4=gn.isBooleanObject,$4=gn.isBigIntObject,Yoe=gn.isSymbolObject,Woe=gn.isFloat32Array,Voe=gn.isFloat64Array;function Joe(e){if(e.length===0||e.length>10)return!0;for(var t=0;t<e.length;t++){var r=e.charCodeAt(t);if(r<48||r>57)return!0}return e.length===10&&e>=Math.pow(2,32)}function nE(e){return Object.keys(e).filter(Joe).concat(sE(e).filter(Object.prototype.propertyIsEnumerable.bind(e)))}function ix(e,t){if(e===t)return 0;for(var r=e.length,n=t.length,i=0,s=Math.min(r,n);i<s;++i)if(e[i]!==t[i]){r=e[i],n=t[i];break}return r<n?-1:n<r?1:0}var iE=void 0,joe=!0,zoe=!1,VC=0,jC=1,sx=2,ox=3;function Koe(e,t){return Poe?e.source===t.source&&e.flags===t.flags:RegExp.prototype.toString.call(e)===RegExp.prototype.toString.call(t)}function Xoe(e,t){if(e.byteLength!==t.byteLength)return!1;for(var r=0;r<e.byteLength;r++)if(e[r]!==t[r])return!1;return!0}function Zoe(e,t){return e.byteLength!==t.byteLength?!1:ix(new Uint8Array(e.buffer,e.byteOffset,e.byteLength),new Uint8Array(t.buffer,t.byteOffset,t.byteLength))===0}function $oe(e,t){return e.byteLength===t.byteLength&&ix(new Uint8Array(e),new Uint8Array(t))===0}function eae(e,t){return K4(e)?K4(t)&&nx(Number.prototype.valueOf.call(e),Number.prototype.valueOf.call(t)):X4(e)?X4(t)&&String.prototype.valueOf.call(e)===String.prototype.valueOf.call(t):Z4(e)?Z4(t)&&Boolean.prototype.valueOf.call(e)===Boolean.prototype.valueOf.call(t):$4(e)?$4(t)&&BigInt.prototype.valueOf.call(e)===BigInt.prototype.valueOf.call(t):Yoe(t)&&Symbol.prototype.valueOf.call(e)===Symbol.prototype.valueOf.call(t)}function Ei(e,t,r,n){if(e===t)return e!==0?!0:r?nx(e,t):!0;if(r){if(pi(e)!=="object")return typeof e=="number"&&WC(e)&&WC(t);if(pi(t)!=="object"||e===null||t===null||Object.getPrototypeOf(e)!==Object.getPrototypeOf(t))return!1}else{if(e===null||pi(e)!=="object")return t===null||pi(t)!=="object"?e==t:!1;if(t===null||pi(t)!=="object")return!1}var i=J4(e),s=J4(t);if(i!==s)return!1;if(Array.isArray(e)){if(e.length!==t.length)return!1;var o=nE(e,iE),a=nE(t,iE);return o.length!==a.length?!1:qh(e,t,r,n,jC,o)}if(i==="[object Object]"&&(!tE(e)&&tE(t)||!rE(e)&&rE(t)))return!1;if(j4(e)){if(!j4(t)||Date.prototype.getTime.call(e)!==Date.prototype.getTime.call(t))return!1}else if(z4(e)){if(!z4(t)||!Koe(e,t))return!1}else if(qoe(e)||e instanceof Error){if(e.message!==t.message||e.name!==t.name)return!1}else if(Hoe(e)){if(!r&&(Woe(e)||Voe(e))){if(!Xoe(e,t))return!1}else if(!Zoe(e,t))return!1;var A=nE(e,iE),f=nE(t,iE);return A.length!==f.length?!1:qh(e,t,r,n,VC,A)}else{if(rE(e))return!rE(t)||e.size!==t.size?!1:qh(e,t,r,n,sx);if(tE(e))return!tE(t)||e.size!==t.size?!1:qh(e,t,r,n,ox);if(Ooe(e)){if(!$oe(e,t))return!1}else if(Goe(e)&&!eae(e,t))return!1}return qh(e,t,r,n,VC)}function ex(e,t){return t.filter(function(r){return oE(e,r)})}function qh(e,t,r,n,i,s){if(arguments.length===5){s=Object.keys(e);var o=Object.keys(t);if(s.length!==o.length)return!1}for(var a=0;a<s.length;a++)if(!Gh(t,s[a]))return!1;if(r&&arguments.length===5){var A=sE(e);if(A.length!==0){var f=0;for(a=0;a<A.length;a++){var l=A[a];if(oE(e,l)){if(!oE(t,l))return!1;s.push(l),f++}else if(oE(t,l))return!1}var p=sE(t);if(A.length!==p.length&&ex(t,p).length!==f)return!1}else{var B=sE(t);if(B.length!==0&&ex(t,B).length!==0)return!1}}if(s.length===0&&(i===VC||i===jC&&e.length===0||e.size===0))return!0;if(n===void 0)n={val1:new Map,val2:new Map,position:0};else{var S=n.val1.get(e);if(S!==void 0){var _=n.val2.get(t);if(_!==void 0)return S===_}n.position++}n.val1.set(e,n.position),n.val2.set(t,n.position);var N=sae(e,t,r,s,n,i);return n.val1.delete(e),n.val2.delete(t),N}function tx(e,t,r,n){for(var i=aE(e),s=0;s<i.length;s++){var o=i[s];if(Ei(t,o,r,n))return e.delete(o),!0}return!1}function ax(e){switch(pi(e)){case"undefined":return null;case"object":return;case"symbol":return!1;case"string":e=+e;case"number":if(WC(e))return!1}return!0}function tae(e,t,r){var n=ax(r);return n??(t.has(n)&&!e.has(n))}function rae(e,t,r,n,i){var s=ax(r);if(s!=null)return s;var o=t.get(s);return o===void 0&&!t.has(s)||!Ei(n,o,!1,i)?!1:!e.has(s)&&Ei(n,o,!1,i)}function nae(e,t,r,n){for(var i=null,s=aE(e),o=0;o<s.length;o++){var a=s[o];if(pi(a)==="object"&&a!==null)i===null&&(i=new Set),i.add(a);else if(!t.has(a)){if(r||!tae(e,t,a))return!1;i===null&&(i=new Set),i.add(a)}}if(i!==null){for(var A=aE(t),f=0;f<A.length;f++){var l=A[f];if(pi(l)==="object"&&l!==null){if(!tx(i,l,r,n))return!1}else if(!r&&!e.has(l)&&!tx(i,l,r,n))return!1}return i.size===0}return!0}function rx(e,t,r,n,i,s){for(var o=aE(e),a=0;a<o.length;a++){var A=o[a];if(Ei(r,A,i,s)&&Ei(n,t.get(A),i,s))return e.delete(A),!0}return!1}function iae(e,t,r,n){for(var i=null,s=V4(e),o=0;o<s.length;o++){var a=Y4(s[o],2),A=a[0],f=a[1];if(pi(A)==="object"&&A!==null)i===null&&(i=new Set),i.add(A);else{var l=t.get(A);if(l===void 0&&!t.has(A)||!Ei(f,l,r,n)){if(r||!rae(e,t,A,f,n))return!1;i===null&&(i=new Set),i.add(A)}}}if(i!==null){for(var p=V4(t),B=0;B<p.length;B++){var S=Y4(p[B],2),_=S[0],N=S[1];if(pi(_)==="object"&&_!==null){if(!rx(i,e,_,N,r,n))return!1}else if(!r&&(!e.has(_)||!Ei(e.get(_),N,!1,n))&&!rx(i,e,_,N,!1,n))return!1}return i.size===0}return!0}function sae(e,t,r,n,i,s){var o=0;if(s===sx){if(!nae(e,t,r,i))return!1}else if(s===ox){if(!iae(e,t,r,i))return!1}else if(s===jC)for(;o<e.length;o++)if(Gh(e,o)){if(!Gh(t,o)||!Ei(e[o],t[o],r,i))return!1}else{if(Gh(t,o))return!1;for(var a=Object.keys(e);o<a.length;o++){var A=a[o];if(!Gh(t,A)||!Ei(e[A],t[A],r,i))return!1}return a.length===Object.keys(t).length}for(o=0;o<n.length;o++){var f=n[o];if(!Ei(e[f],t[f],r,i))return!1}return!0}function oae(e,t){return Ei(e,t,zoe)}function aae(e,t){return Ei(e,t,joe)}Ax.exports={isDeepEqual:oae,isDeepStrictEqual:aae}});var Wt=x((oTe,_x)=>{"use strict";function ns(e){"@babel/helpers - typeof";return ns=typeof Symbol=="function"&&typeof Symbol.iterator=="symbol"?function(t){return typeof t}:function(t){return t&&typeof Symbol=="function"&&t.constructor===Symbol&&t!==Symbol.prototype?"symbol":typeof t},ns(e)}function ux(e,t){for(var r=0;r<t.length;r++){var n=t[r];n.enumerable=n.enumerable||!1,n.configurable=!0,"value"in n&&(n.writable=!0),Object.defineProperty(e,fae(n.key),n)}}function Aae(e,t,r){return t&&ux(e.prototype,t),r&&ux(e,r),Object.defineProperty(e,"prototype",{writable:!1}),e}function fae(e){var t=uae(e,"string");return ns(t)==="symbol"?t:String(t)}function uae(e,t){if(ns(e)!=="object"||e===null)return e;var r=e[Symbol.toPrimitive];if(r!==void 0){var n=r.call(e,t||"default");if(ns(n)!=="object")return n;throw new TypeError("@@toPrimitive must return a primitive value.")}return(t==="string"?String:Number)(e)}function cae(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}var lae=MC(),Yh=lae.codes,cx=Yh.ERR_AMBIGUOUS_ARGUMENT,pc=Yh.ERR_INVALID_ARG_TYPE,hae=Yh.ERR_INVALID_ARG_VALUE,dae=Yh.ERR_INVALID_RETURN_VALUE,iA=Yh.ERR_MISSING_ARGS,sA=Xk(),gae=Yr(),AE=gae.inspect,gx=Yr().types,pae=gx.isPromise,fE=gx.isRegExp,Eae=y4()(),px=eE()(),uE=w4()("RegExp.prototype.test"),nA,cE;function Wh(){var e=fx();nA=e.isDeepEqual,cE=e.isDeepStrictEqual}var lx=!1,Vt=_x.exports=zC,lE={};function is(e){throw e.message instanceof Error?e.message:new sA(e)}function Ex(e,t,r,n,i){var s=arguments.length,o;if(s===0)o="Failed";else if(s===1)r=e,e=void 0;else{if(lx===!1){lx=!0;var a=process.emitWarning?process.emitWarning:console.warn.bind(console);a("assert.fail() with more than one argument is deprecated. Please use assert.strictEqual() instead or only pass a message.","DeprecationWarning","DEP0094")}s===2&&(n="!=")}if(r instanceof Error)throw r;var A={actual:e,expected:t,operator:n===void 0?"fail":n,stackStartFn:i||Ex};r!==void 0&&(A.message=r);var f=new sA(A);throw o&&(f.message=o,f.generatedMessage=!0),f}Vt.fail=Ex;Vt.AssertionError=sA;function yx(e,t,r,n){if(!r){var i=!1;if(t===0)i=!0,n="No value argument passed to `assert.ok()`";else if(n instanceof Error)throw n;var s=new sA({actual:r,expected:!0,message:n,operator:"==",stackStartFn:e});throw s.generatedMessage=i,s}}function zC(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];yx.apply(void 0,[zC,t.length].concat(t))}Vt.ok=zC;Vt.equal=function e(t,r,n){if(arguments.length<2)throw new iA("actual","expected");t!=r&&is({actual:t,expected:r,message:n,operator:"==",stackStartFn:e})};Vt.notEqual=function e(t,r,n){if(arguments.length<2)throw new iA("actual","expected");t==r&&is({actual:t,expected:r,message:n,operator:"!=",stackStartFn:e})};Vt.deepEqual=function e(t,r,n){if(arguments.length<2)throw new iA("actual","expected");nA===void 0&&Wh(),nA(t,r)||is({actual:t,expected:r,message:n,operator:"deepEqual",stackStartFn:e})};Vt.notDeepEqual=function e(t,r,n){if(arguments.length<2)throw new iA("actual","expected");nA===void 0&&Wh(),nA(t,r)&&is({actual:t,expected:r,message:n,operator:"notDeepEqual",stackStartFn:e})};Vt.deepStrictEqual=function e(t,r,n){if(arguments.length<2)throw new iA("actual","expected");nA===void 0&&Wh(),cE(t,r)||is({actual:t,expected:r,message:n,operator:"deepStrictEqual",stackStartFn:e})};Vt.notDeepStrictEqual=mx;function mx(e,t,r){if(arguments.length<2)throw new iA("actual","expected");nA===void 0&&Wh(),cE(e,t)&&is({actual:e,expected:t,message:r,operator:"notDeepStrictEqual",stackStartFn:mx})}Vt.strictEqual=function e(t,r,n){if(arguments.length<2)throw new iA("actual","expected");px(t,r)||is({actual:t,expected:r,message:n,operator:"strictEqual",stackStartFn:e})};Vt.notStrictEqual=function e(t,r,n){if(arguments.length<2)throw new iA("actual","expected");px(t,r)&&is({actual:t,expected:r,message:n,operator:"notStrictEqual",stackStartFn:e})};var hx=Aae(function e(t,r,n){var i=this;cae(this,e),r.forEach(function(s){s in t&&(n!==void 0&&typeof n[s]=="string"&&fE(t[s])&&uE(t[s],n[s])?i[s]=n[s]:i[s]=t[s])})});function yae(e,t,r,n,i,s){if(!(r in e)||!cE(e[r],t[r])){if(!n){var o=new hx(e,i),a=new hx(t,i,e),A=new sA({actual:o,expected:a,operator:"deepStrictEqual",stackStartFn:s});throw A.actual=e,A.expected=t,A.operator=s.name,A}is({actual:e,expected:t,message:n,operator:s.name,stackStartFn:s})}}function Bx(e,t,r,n){if(typeof t!="function"){if(fE(t))return uE(t,e);if(arguments.length===2)throw new pc("expected",["Function","RegExp"],t);if(ns(e)!=="object"||e===null){var i=new sA({actual:e,expected:t,message:r,operator:"deepStrictEqual",stackStartFn:n});throw i.operator=n.name,i}var s=Object.keys(t);if(t instanceof Error)s.push("name","message");else if(s.length===0)throw new hae("error",t,"may not be an empty object");return nA===void 0&&Wh(),s.forEach(function(o){typeof e[o]=="string"&&fE(t[o])&&uE(t[o],e[o])||yae(e,t,o,r,s,n)}),!0}return t.prototype!==void 0&&e instanceof t?!0:Error.isPrototypeOf(t)?!1:t.call({},e)===!0}function Ix(e){if(typeof e!="function")throw new pc("fn","Function",e);try{e()}catch(t){return t}return lE}function dx(e){return pae(e)||e!==null&&ns(e)==="object"&&typeof e.then=="function"&&typeof e.catch=="function"}function bx(e){return Promise.resolve().then(function(){var t;if(typeof e=="function"){if(t=e(),!dx(t))throw new dae("instance of Promise","promiseFn",t)}else if(dx(e))t=e;else throw new pc("promiseFn",["Function","Promise"],e);return Promise.resolve().then(function(){return t}).then(function(){return lE}).catch(function(r){return r})})}function Cx(e,t,r,n){if(typeof r=="string"){if(arguments.length===4)throw new pc("error",["Object","Error","Function","RegExp"],r);if(ns(t)==="object"&&t!==null){if(t.message===r)throw new cx("error/message",'The error message "'.concat(t.message,'" is identical to the message.'))}else if(t===r)throw new cx("error/message",'The error "'.concat(t,'" is identical to the message.'));n=r,r=void 0}else if(r!=null&&ns(r)!=="object"&&typeof r!="function")throw new pc("error",["Object","Error","Function","RegExp"],r);if(t===lE){var i="";r&&r.name&&(i+=" (".concat(r.name,")")),i+=n?": ".concat(n):".";var s=e.name==="rejects"?"rejection":"exception";is({actual:void 0,expected:r,operator:e.name,message:"Missing expected ".concat(s).concat(i),stackStartFn:e})}if(r&&!Bx(t,r,n,e))throw t}function Qx(e,t,r,n){if(t!==lE){if(typeof r=="string"&&(n=r,r=void 0),!r||Bx(t,r)){var i=n?": ".concat(n):".",s=e.name==="doesNotReject"?"rejection":"exception";is({actual:t,expected:r,operator:e.name,message:"Got unwanted ".concat(s).concat(i,`
-`)+'Actual message: "'.concat(t&&t.message,'"'),stackStartFn:e})}throw t}}Vt.throws=function e(t){for(var r=arguments.length,n=new Array(r>1?r-1:0),i=1;i<r;i++)n[i-1]=arguments[i];Cx.apply(void 0,[e,Ix(t)].concat(n))};Vt.rejects=function e(t){for(var r=arguments.length,n=new Array(r>1?r-1:0),i=1;i<r;i++)n[i-1]=arguments[i];return bx(t).then(function(s){return Cx.apply(void 0,[e,s].concat(n))})};Vt.doesNotThrow=function e(t){for(var r=arguments.length,n=new Array(r>1?r-1:0),i=1;i<r;i++)n[i-1]=arguments[i];Qx.apply(void 0,[e,Ix(t)].concat(n))};Vt.doesNotReject=function e(t){for(var r=arguments.length,n=new Array(r>1?r-1:0),i=1;i<r;i++)n[i-1]=arguments[i];return bx(t).then(function(s){return Qx.apply(void 0,[e,s].concat(n))})};Vt.ifError=function e(t){if(t!=null){var r="ifError got unwanted exception: ";ns(t)==="object"&&typeof t.message=="string"?t.message.length===0&&t.constructor?r+=t.constructor.name:r+=t.message:r+=AE(t);var n=new sA({actual:t,expected:null,operator:"ifError",message:r,stackStartFn:e}),i=t.stack;if(typeof i=="string"){var s=i.split(`
-`);s.shift();for(var o=n.stack.split(`
-`),a=0;a<s.length;a++){var A=o.indexOf(s[a]);if(A!==-1){o=o.slice(0,A);break}}n.stack="".concat(o.join(`
-`),`
-`).concat(s.join(`
-`))}throw n}};function wx(e,t,r,n,i){if(!fE(t))throw new pc("regexp","RegExp",t);var s=i==="match";if(typeof e!="string"||uE(t,e)!==s){if(r instanceof Error)throw r;var o=!r;r=r||(typeof e!="string"?'The "string" argument must be of type string. Received type '+"".concat(ns(e)," (").concat(AE(e),")"):(s?"The input did not match the regular expression ":"The input was expected to not match the regular expression ")+"".concat(AE(t),`. Input:
-
-`).concat(AE(e),`
-`));var a=new sA({actual:e,expected:t,message:r,operator:i,stackStartFn:n});throw a.generatedMessage=o,a}}Vt.match=function e(t,r,n){wx(t,r,n,e,"match")};Vt.doesNotMatch=function e(t,r,n){wx(t,r,n,e,"doesNotMatch")};function Sx(){for(var e=arguments.length,t=new Array(e),r=0;r<e;r++)t[r]=arguments[r];yx.apply(void 0,[Sx,t.length].concat(t))}Vt.strict=Eae(Sx,Vt,{equal:Vt.strictEqual,deepEqual:Vt.deepStrictEqual,notEqual:Vt.notStrictEqual,notDeepEqual:Vt.notDeepStrictEqual});Vt.strict.strict=Vt.strict});var Ec=x((aTe,vx)=>{"use strict";var KC=class{constructor(){this._enabled=!1,this._store=void 0}disable(){this._enabled=!1,this._store=void 0}enterWith(t){this._enabled=!0,this._store=t}exit(t,...r){let n=this._enabled,i=this._store;this._enabled=!1,this._store=void 0;try{return t(...r)}finally{this._enabled=n,this._store=i}}getStore(){return this._enabled?this._store:void 0}run(t,r,...n){let i=this._enabled,s=this._store;this._enabled=!0,this._store=t;try{return r(...n)}finally{this._enabled=i,this._store=s}}},XC=class{constructor(t="SecureExecAsyncResource"){this.type=t}bind(t,r=void 0){return typeof t!="function"?t:(...n)=>this.runInAsyncScope(t,r??this,...n)}emitDestroy(){}runInAsyncScope(t,r,...n){return t.apply(r,n)}};function mae(){return{enable(){return this},disable(){return this}}}function Bae(){return 0}function Iae(){return 0}vx.exports={AsyncLocalStorage:KC,AsyncResource:XC,createHook:mae,executionAsyncId:Bae,triggerAsyncId:Iae}});var mr=x((ATe,$x)=>{"use strict";var Rx=Symbol.for("undici.error.UND_ERR"),Zt=class extends Error{constructor(t,r){super(t,r),this.name="UndiciError",this.code="UND_ERR"}static[Symbol.hasInstance](t){return t&&t[Rx]===!0}get[Rx](){return!0}},Dx=Symbol.for("undici.error.UND_ERR_CONNECT_TIMEOUT"),ZC=class extends Zt{constructor(t){super(t),this.name="ConnectTimeoutError",this.message=t||"Connect Timeout Error",this.code="UND_ERR_CONNECT_TIMEOUT"}static[Symbol.hasInstance](t){return t&&t[Dx]===!0}get[Dx](){return!0}},Tx=Symbol.for("undici.error.UND_ERR_HEADERS_TIMEOUT"),$C=class extends Zt{constructor(t){super(t),this.name="HeadersTimeoutError",this.message=t||"Headers Timeout Error",this.code="UND_ERR_HEADERS_TIMEOUT"}static[Symbol.hasInstance](t){return t&&t[Tx]===!0}get[Tx](){return!0}},Nx=Symbol.for("undici.error.UND_ERR_HEADERS_OVERFLOW"),eQ=class extends Zt{constructor(t){super(t),this.name="HeadersOverflowError",this.message=t||"Headers Overflow Error",this.code="UND_ERR_HEADERS_OVERFLOW"}static[Symbol.hasInstance](t){return t&&t[Nx]===!0}get[Nx](){return!0}},Mx=Symbol.for("undici.error.UND_ERR_BODY_TIMEOUT"),tQ=class extends Zt{constructor(t){super(t),this.name="BodyTimeoutError",this.message=t||"Body Timeout Error",this.code="UND_ERR_BODY_TIMEOUT"}static[Symbol.hasInstance](t){return t&&t[Mx]===!0}get[Mx](){return!0}},Fx=Symbol.for("undici.error.UND_ERR_INVALID_ARG"),rQ=class extends Zt{constructor(t){super(t),this.name="InvalidArgumentError",this.message=t||"Invalid Argument Error",this.code="UND_ERR_INVALID_ARG"}static[Symbol.hasInstance](t){return t&&t[Fx]===!0}get[Fx](){return!0}},kx=Symbol.for("undici.error.UND_ERR_INVALID_RETURN_VALUE"),nQ=class extends Zt{constructor(t){super(t),this.name="InvalidReturnValueError",this.message=t||"Invalid Return Value Error",this.code="UND_ERR_INVALID_RETURN_VALUE"}static[Symbol.hasInstance](t){return t&&t[kx]===!0}get[kx](){return!0}},xx=Symbol.for("undici.error.UND_ERR_ABORT"),hE=class extends Zt{constructor(t){super(t),this.name="AbortError",this.message=t||"The operation was aborted",this.code="UND_ERR_ABORT"}static[Symbol.hasInstance](t){return t&&t[xx]===!0}get[xx](){return!0}},Ux=Symbol.for("undici.error.UND_ERR_ABORTED"),iQ=class extends hE{constructor(t){super(t),this.name="AbortError",this.message=t||"Request aborted",this.code="UND_ERR_ABORTED"}static[Symbol.hasInstance](t){return t&&t[Ux]===!0}get[Ux](){return!0}},Lx=Symbol.for("undici.error.UND_ERR_INFO"),sQ=class extends Zt{constructor(t){super(t),this.name="InformationalError",this.message=t||"Request information",this.code="UND_ERR_INFO"}static[Symbol.hasInstance](t){return t&&t[Lx]===!0}get[Lx](){return!0}},Px=Symbol.for("undici.error.UND_ERR_REQ_CONTENT_LENGTH_MISMATCH"),oQ=class extends Zt{constructor(t){super(t),this.name="RequestContentLengthMismatchError",this.message=t||"Request body length does not match content-length header",this.code="UND_ERR_REQ_CONTENT_LENGTH_MISMATCH"}static[Symbol.hasInstance](t){return t&&t[Px]===!0}get[Px](){return!0}},Ox=Symbol.for("undici.error.UND_ERR_RES_CONTENT_LENGTH_MISMATCH"),aQ=class extends Zt{constructor(t){super(t),this.name="ResponseContentLengthMismatchError",this.message=t||"Response body length does not match content-length header",this.code="UND_ERR_RES_CONTENT_LENGTH_MISMATCH"}static[Symbol.hasInstance](t){return t&&t[Ox]===!0}get[Ox](){return!0}},Hx=Symbol.for("undici.error.UND_ERR_DESTROYED"),AQ=class extends Zt{constructor(t){super(t),this.name="ClientDestroyedError",this.message=t||"The client is destroyed",this.code="UND_ERR_DESTROYED"}static[Symbol.hasInstance](t){return t&&t[Hx]===!0}get[Hx](){return!0}},qx=Symbol.for("undici.error.UND_ERR_CLOSED"),fQ=class extends Zt{constructor(t){super(t),this.name="ClientClosedError",this.message=t||"The client is closed",this.code="UND_ERR_CLOSED"}static[Symbol.hasInstance](t){return t&&t[qx]===!0}get[qx](){return!0}},Gx=Symbol.for("undici.error.UND_ERR_SOCKET"),uQ=class extends Zt{constructor(t,r){super(t),this.name="SocketError",this.message=t||"Socket error",this.code="UND_ERR_SOCKET",this.socket=r}static[Symbol.hasInstance](t){return t&&t[Gx]===!0}get[Gx](){return!0}},Yx=Symbol.for("undici.error.UND_ERR_NOT_SUPPORTED"),cQ=class extends Zt{constructor(t){super(t),this.name="NotSupportedError",this.message=t||"Not supported error",this.code="UND_ERR_NOT_SUPPORTED"}static[Symbol.hasInstance](t){return t&&t[Yx]===!0}get[Yx](){return!0}},Wx=Symbol.for("undici.error.UND_ERR_BPL_MISSING_UPSTREAM"),lQ=class extends Zt{constructor(t){super(t),this.name="MissingUpstreamError",this.message=t||"No upstream has been added to the BalancedPool",this.code="UND_ERR_BPL_MISSING_UPSTREAM"}static[Symbol.hasInstance](t){return t&&t[Wx]===!0}get[Wx](){return!0}},Vx=Symbol.for("undici.error.UND_ERR_HTTP_PARSER"),hQ=class extends Error{constructor(t,r,n){super(t),this.name="HTTPParserError",this.code=r?`HPE_${r}`:void 0,this.data=n?n.toString():void 0}static[Symbol.hasInstance](t){return t&&t[Vx]===!0}get[Vx](){return!0}},Jx=Symbol.for("undici.error.UND_ERR_RES_EXCEEDED_MAX_SIZE"),dQ=class extends Zt{constructor(t){super(t),this.name="ResponseExceededMaxSizeError",this.message=t||"Response content exceeded max size",this.code="UND_ERR_RES_EXCEEDED_MAX_SIZE"}static[Symbol.hasInstance](t){return t&&t[Jx]===!0}get[Jx](){return!0}},jx=Symbol.for("undici.error.UND_ERR_REQ_RETRY"),gQ=class extends Zt{constructor(t,r,{headers:n,data:i}){super(t),this.name="RequestRetryError",this.message=t||"Request retry error",this.code="UND_ERR_REQ_RETRY",this.statusCode=r,this.data=i,this.headers=n}static[Symbol.hasInstance](t){return t&&t[jx]===!0}get[jx](){return!0}},zx=Symbol.for("undici.error.UND_ERR_RESPONSE"),pQ=class extends Zt{constructor(t,r,{headers:n,body:i}){super(t),this.name="ResponseError",this.message=t||"Response error",this.code="UND_ERR_RESPONSE",this.statusCode=r,this.body=i,this.headers=n}static[Symbol.hasInstance](t){return t&&t[zx]===!0}get[zx](){return!0}},Kx=Symbol.for("undici.error.UND_ERR_PRX_TLS"),EQ=class extends Zt{constructor(t,r,n={}){super(r,{cause:t,...n}),this.name="SecureProxyConnectionError",this.message=r||"Secure Proxy Connection failed",this.code="UND_ERR_PRX_TLS",this.cause=t}static[Symbol.hasInstance](t){return t&&t[Kx]===!0}get[Kx](){return!0}},Xx=Symbol.for("undici.error.UND_ERR_MAX_ORIGINS_REACHED"),yQ=class extends Zt{constructor(t){super(t),this.name="MaxOriginsReachedError",this.message=t||"Maximum allowed origins reached",this.code="UND_ERR_MAX_ORIGINS_REACHED"}static[Symbol.hasInstance](t){return t&&t[Xx]===!0}get[Xx](){return!0}},mQ=class extends Zt{constructor(t,r){super(t),this.name="Socks5ProxyError",this.message=t||"SOCKS5 proxy error",this.code=r||"UND_ERR_SOCKS5"}},Zx=Symbol.for("undici.error.UND_ERR_WS_MESSAGE_SIZE_EXCEEDED"),BQ=class extends Zt{constructor(t){super(t),this.name="MessageSizeExceededError",this.message=t||"Max decompressed message size exceeded",this.code="UND_ERR_WS_MESSAGE_SIZE_EXCEEDED"}static[Symbol.hasInstance](t){return t&&t[Zx]===!0}get[Zx](){return!0}};$x.exports={AbortError:hE,HTTPParserError:hQ,UndiciError:Zt,HeadersTimeoutError:$C,HeadersOverflowError:eQ,BodyTimeoutError:tQ,RequestContentLengthMismatchError:oQ,ConnectTimeoutError:ZC,InvalidArgumentError:rQ,InvalidReturnValueError:nQ,RequestAbortedError:iQ,ClientDestroyedError:AQ,ClientClosedError:fQ,InformationalError:sQ,SocketError:uQ,NotSupportedError:cQ,ResponseContentLengthMismatchError:aQ,BalancedPoolMissingUpstreamError:lQ,ResponseExceededMaxSizeError:dQ,RequestRetryError:gQ,ResponseError:pQ,SecureProxyConnectionError:EQ,MaxOriginsReachedError:yQ,Socks5ProxyError:mQ,MessageSizeExceededError:BQ}});var Tn=x((fTe,eU)=>{"use strict";eU.exports={kClose:Symbol("close"),kDestroy:Symbol("destroy"),kDispatch:Symbol("dispatch"),kUrl:Symbol("url"),kWriting:Symbol("writing"),kResuming:Symbol("resuming"),kQueue:Symbol("queue"),kConnect:Symbol("connect"),kConnecting:Symbol("connecting"),kKeepAliveDefaultTimeout:Symbol("default keep alive timeout"),kKeepAliveMaxTimeout:Symbol("max keep alive timeout"),kKeepAliveTimeoutThreshold:Symbol("keep alive timeout threshold"),kKeepAliveTimeoutValue:Symbol("keep alive timeout"),kKeepAlive:Symbol("keep alive"),kHeadersTimeout:Symbol("headers timeout"),kBodyTimeout:Symbol("body timeout"),kServerName:Symbol("server name"),kLocalAddress:Symbol("local address"),kHost:Symbol("host"),kNoRef:Symbol("no ref"),kBodyUsed:Symbol("used"),kBody:Symbol("abstracted request body"),kRunning:Symbol("running"),kBlocking:Symbol("blocking"),kPending:Symbol("pending"),kSize:Symbol("size"),kBusy:Symbol("busy"),kQueued:Symbol("queued"),kFree:Symbol("free"),kConnected:Symbol("connected"),kClosed:Symbol("closed"),kNeedDrain:Symbol("need drain"),kReset:Symbol("reset"),kDestroyed:Symbol.for("nodejs.stream.destroyed"),kResume:Symbol("resume"),kOnError:Symbol("on error"),kMaxHeadersSize:Symbol("max headers size"),kRunningIdx:Symbol("running index"),kPendingIdx:Symbol("pending index"),kError:Symbol("error"),kClients:Symbol("clients"),kClient:Symbol("client"),kParser:Symbol("parser"),kOnDestroyed:Symbol("destroy callbacks"),kPipelining:Symbol("pipelining"),kSocket:Symbol("socket"),kHostHeader:Symbol("host header"),kConnector:Symbol("connector"),kStrictContentLength:Symbol("strict content length"),kMaxRedirections:Symbol("maxRedirections"),kMaxRequests:Symbol("maxRequestsPerClient"),kProxy:Symbol("proxy agent options"),kCounter:Symbol("socket request counter"),kMaxResponseSize:Symbol("max response size"),kHTTP2Session:Symbol("http2Session"),kHTTP2SessionState:Symbol("http2Session state"),kRetryHandlerDefaultRetry:Symbol("retry agent default retry"),kConstruct:Symbol("constructable"),kListeners:Symbol("listeners"),kHTTPContext:Symbol("http context"),kMaxConcurrentStreams:Symbol("max concurrent streams"),kHTTP2InitialWindowSize:Symbol("http2 initial window size"),kHTTP2ConnectionWindowSize:Symbol("http2 connection window size"),kEnableConnectProtocol:Symbol("http2session connect protocol"),kRemoteSettings:Symbol("http2session remote settings"),kHTTP2Stream:Symbol("http2session client stream"),kPingInterval:Symbol("ping interval"),kNoProxyAgent:Symbol("no proxy agent"),kHttpProxyAgent:Symbol("http proxy agent"),kHttpsProxyAgent:Symbol("https proxy agent"),kSocks5ProxyAgent:Symbol("socks5 proxy agent")}});var gE=x((uTe,tU)=>{"use strict";function gf(){if(!globalThis._httpModule)throw new Error("node:http bridge module is not available");return globalThis._httpModule}var dE=class{},IQ=class{},bQ=class{},CQ=class{},QQ=class{},bae=["CHECKOUT","CONNECT","COPY","DELETE","GET","HEAD","LOCK","M-SEARCH","MERGE","MKACTIVITY","MKCOL","MOVE","NOTIFY","OPTIONS","PATCH","POST","PROPFIND","PROPPATCH","PURGE","PUT","REPORT","SEARCH","SUBSCRIBE","TRACE","UNLOCK","UNSUBSCRIBE"];tU.exports={Agent:dE,ClientRequest:IQ,IncomingMessage:bQ,METHODS:bae,STATUS_CODES:{},Server:CQ,ServerResponse:QQ,_checkInvalidHeaderChar(e){return gf()._checkInvalidHeaderChar(e)},_checkIsHttpToken(e){return gf()._checkIsHttpToken(e)},createServer(...e){return gf().createServer(...e)},get(...e){return gf().get(...e)},globalAgent:new dE,maxHeaderSize:65535,request(...e){return gf().request(...e)},validateHeaderName(e,t){return gf().validateHeaderName(e,t)},validateHeaderValue(e,t){return gf().validateHeaderValue(e,t)}}});var pE=x((cTe,nU)=>{"use strict";function Cae(){let e=globalThis._netModule;if(!e)throw new Error("node:net bridge module is not available");return e}var rU={};for(let e of["BlockList","Socket","SocketAddress","Server","Stream","connect","createConnection","createServer","getDefaultAutoSelectFamily","getDefaultAutoSelectFamilyAttemptTimeout","isIP","isIPv4","isIPv6","setDefaultAutoSelectFamily","setDefaultAutoSelectFamilyAttemptTimeout"])Object.defineProperty(rU,e,{enumerable:!0,get(){return Cae()[e]}});nU.exports=rU});var TQ=x((lTe,AU)=>{"use strict";var yc=0,wQ=1e3,SQ=(wQ>>1)-1,oA,_Q=Symbol("kFastTimer"),jo=[],vQ=-2,RQ=-1,oU=0,iU=1;function DQ(){yc+=SQ;let e=0,t=jo.length;for(;e<t;){let r=jo[e];r._state===oU?(r._idleStart=yc-SQ,r._state=iU):r._state===iU&&yc>=r._idleStart+r._idleTimeout&&(r._state=RQ,r._idleStart=-1,r._onTimeout(r._timerArg)),r._state===RQ?(r._state=vQ,--t!==0&&(jo[e]=jo[t])):++e}jo.length=t,jo.length!==0&&aU()}function aU(){oA?.refresh?oA.refresh():(clearTimeout(oA),oA=setTimeout(DQ,SQ),oA?.unref())}var sU;sU=_Q;var EE=class{constructor(t,r,n){y(this,sU,!0);y(this,"_state",vQ);y(this,"_idleTimeout",-1);y(this,"_idleStart",-1);y(this,"_onTimeout");y(this,"_timerArg");this._onTimeout=t,this._idleTimeout=r,this._timerArg=n,this.refresh()}refresh(){this._state===vQ&&jo.push(this),(!oA||jo.length===1)&&aU(),this._state=oU}clear(){this._state=RQ,this._idleStart=-1}};AU.exports={setTimeout(e,t,r){return t<=wQ?setTimeout(e,t,r):new EE(e,t,r)},clearTimeout(e){e[_Q]?e.clear():clearTimeout(e)},setFastTimeout(e,t,r){return new EE(e,t,r)},clearFastTimeout(e){e.clear()},now(){return yc},tick(e=0){yc+=e-wQ+1,DQ(),DQ()},reset(){yc=0,jo.length=0,clearTimeout(oA),oA=null},kFastTimer:_Q}});var mE=x((dTe,uU)=>{"use strict";var NQ=["Accept","Accept-Encoding","Accept-Language","Accept-Ranges","Access-Control-Allow-Credentials","Access-Control-Allow-Headers","Access-Control-Allow-Methods","Access-Control-Allow-Origin","Access-Control-Expose-Headers","Access-Control-Max-Age","Access-Control-Request-Headers","Access-Control-Request-Method","Age","Allow","Alt-Svc","Alt-Used","Authorization","Cache-Control","Clear-Site-Data","Connection","Content-Disposition","Content-Encoding","Content-Language","Content-Length","Content-Location","Content-Range","Content-Security-Policy","Content-Security-Policy-Report-Only","Content-Type","Cookie","Cross-Origin-Embedder-Policy","Cross-Origin-Opener-Policy","Cross-Origin-Resource-Policy","Date","Device-Memory","Downlink","ECT","ETag","Expect","Expect-CT","Expires","Forwarded","From","Host","If-Match","If-Modified-Since","If-None-Match","If-Range","If-Unmodified-Since","Keep-Alive","Last-Modified","Link","Location","Max-Forwards","Origin","Permissions-Policy","Pragma","Proxy-Authenticate","Proxy-Authorization","RTT","Range","Referer","Referrer-Policy","Refresh","Retry-After","Sec-WebSocket-Accept","Sec-WebSocket-Extensions","Sec-WebSocket-Key","Sec-WebSocket-Protocol","Sec-WebSocket-Version","Server","Server-Timing","Service-Worker-Allowed","Service-Worker-Navigation-Preload","Set-Cookie","SourceMap","Strict-Transport-Security","Supports-Loading-Mode","TE","Timing-Allow-Origin","Trailer","Transfer-Encoding","Upgrade","Upgrade-Insecure-Requests","User-Agent","Vary","Via","WWW-Authenticate","X-Content-Type-Options","X-DNS-Prefetch-Control","X-Frame-Options","X-Permitted-Cross-Domain-Policies","X-Powered-By","X-Requested-With","X-XSS-Protection"],yE={};Object.setPrototypeOf(yE,null);var fU={};Object.setPrototypeOf(fU,null);function Qae(e){let t=fU[e];return t===void 0&&(t=Buffer.from(e)),t}for(let e=0;e<NQ.length;++e){let t=NQ[e],r=t.toLowerCase();yE[t]=yE[r]=r}uU.exports={wellknownHeaderNames:NQ,headerNameLowerCasedRecord:yE,getHeaderNameAsBuffer:Qae}});var dU=x((gTe,hU)=>{"use strict";var{wellknownHeaderNames:cU,headerNameLowerCasedRecord:wae}=mE(),MQ=class e{constructor(t,r,n){y(this,"value",null);y(this,"left",null);y(this,"middle",null);y(this,"right",null);y(this,"code");if(n===void 0||n>=t.length)throw new TypeError("Unreachable");if((this.code=t.charCodeAt(n))>127)throw new TypeError("key must be ascii string");t.length!==++n?this.middle=new e(t,r,n):this.value=r}add(t,r){let n=t.length;if(n===0)throw new TypeError("Unreachable");let i=0,s=this;for(;;){let o=t.charCodeAt(i);if(o>127)throw new TypeError("key must be ascii string");if(s.code===o)if(n===++i){s.value=r;break}else if(s.middle!==null)s=s.middle;else{s.middle=new e(t,r,i);break}else if(s.code<o)if(s.left!==null)s=s.left;else{s.left=new e(t,r,i);break}else if(s.right!==null)s=s.right;else{s.right=new e(t,r,i);break}}}search(t){let r=t.length,n=0,i=this;for(;i!==null&&n<r;){let s=t[n];for(s<=90&&s>=65&&(s|=32);i!==null;){if(s===i.code){if(r===++n)return i;i=i.middle;break}i=i.code<s?i.left:i.right}}return null}},BE=class{constructor(){y(this,"node",null)}insert(t,r){this.node===null?this.node=new MQ(t,r,0):this.node.add(t,r)}lookup(t){return this.node?.search(t)?.value??null}},lU=new BE;for(let e=0;e<cU.length;++e){let t=wae[cU[e]];lU.insert(t,t)}hU.exports={TernarySearchTree:BE,tree:lU}});var $t=x((ETe,kU)=>{"use strict";var Vh=Wt(),{kDestroyed:yU,kBodyUsed:mc,kListeners:Bc,kBody:gU}=Tn(),{IncomingMessage:Sae}=gE(),mU=(ts(),Gs(Yt)),_ae=pE(),{stringify:vae}=(jI(),Gs(q0)),{EventEmitter:Rae}=Zi(),IE=TQ(),{InvalidArgumentError:Nr,ConnectTimeoutError:Dae}=mr(),{headerNameLowerCasedRecord:Tae}=mE(),{tree:BU}=dU(),[Nae,Mae]=process.versions.node.split(".",2).map(e=>Number(e)),CE=class{constructor(t){this[gU]=t,this[mc]=!1}async*[Symbol.asyncIterator](){Vh(!this[mc],"disturbed"),this[mc]=!0,yield*this[gU]}};function pU(){}function Fae(e){return QE(e)?(SU(e)===0&&e.on("data",function(){Vh(!1)}),typeof e.readableDidRead!="boolean"&&(e[mc]=!1,Rae.prototype.on.call(e,"data",function(){this[mc]=!0})),e):e&&typeof e.pipeTo=="function"?new CE(e):e&&TU(e)?e:e&&typeof e!="string"&&!ArrayBuffer.isView(e)&&wU(e)?new CE(e):e}function QE(e){return e&&typeof e=="object"&&typeof e.pipe=="function"&&typeof e.on=="function"}function IU(e){if(e===null)return!1;if(e instanceof Blob)return!0;if(typeof e!="object")return!1;{let t=e[Symbol.toStringTag];return(t==="Blob"||t==="File")&&("stream"in e&&typeof e.stream=="function"||"arrayBuffer"in e&&typeof e.arrayBuffer=="function")}}function bU(e){return e.includes("?")||e.includes("#")}function kae(e,t){if(bU(e))throw new Error('Query params cannot be passed when url already contains "?" or "#".');let r=vae(t);return r&&(e+="?"+r),e}function CU(e){let t=parseInt(e,10);return t===Number(e)&&t>=0&&t<=65535}function bE(e){return e!=null&&e[0]==="h"&&e[1]==="t"&&e[2]==="t"&&e[3]==="p"&&(e[4]===":"||e[4]==="s"&&e[5]===":")}function QU(e){if(typeof e=="string"){if(e=new URL(e),!bE(e.origin||e.protocol))throw new Nr("Invalid URL protocol: the URL must start with `http:` or `https:`.");return e}if(!e||typeof e!="object")throw new Nr("Invalid URL: The URL argument must be a non-null object.");if(!(e instanceof URL)){if(e.port!=null&&e.port!==""&&CU(e.port)===!1)throw new Nr("Invalid URL: port must be a valid integer or a string representation of an integer.");if(e.path!=null&&typeof e.path!="string")throw new Nr("Invalid URL path: the path must be a string or null/undefined.");if(e.pathname!=null&&typeof e.pathname!="string")throw new Nr("Invalid URL pathname: the pathname must be a string or null/undefined.");if(e.hostname!=null&&typeof e.hostname!="string")throw new Nr("Invalid URL hostname: the hostname must be a string or null/undefined.");if(e.origin!=null&&typeof e.origin!="string")throw new Nr("Invalid URL origin: the origin must be a string or null/undefined.");if(!bE(e.origin||e.protocol))throw new Nr("Invalid URL protocol: the URL must start with `http:` or `https:`.");let t=e.port!=null?e.port:e.protocol==="https:"?443:80,r=e.origin!=null?e.origin:`${e.protocol||""}//${e.hostname||""}:${t}`,n=e.path!=null?e.path:`${e.pathname||""}${e.search||""}`;return r[r.length-1]==="/"&&(r=r.slice(0,r.length-1)),n&&n[0]!=="/"&&(n=`/${n}`),new URL(`${r}${n}`)}if(!bE(e.origin||e.protocol))throw new Nr("Invalid URL protocol: the URL must start with `http:` or `https:`.");return e}function xae(e){if(e=QU(e),e.pathname!=="/"||e.search||e.hash)throw new Nr("invalid url");return e}function Uae(e){if(e[0]==="["){let r=e.indexOf("]");return Vh(r!==-1),e.substring(1,r)}let t=e.indexOf(":");return t===-1?e:e.substring(0,t)}function Lae(e){if(!e)return null;Vh(typeof e=="string");let t=Uae(e);return _ae.isIP(t)?"":t}function Pae(e){return JSON.parse(JSON.stringify(e))}function Oae(e){return e!=null&&typeof e[Symbol.asyncIterator]=="function"}function wU(e){return e!=null&&(typeof e[Symbol.iterator]=="function"||typeof e[Symbol.asyncIterator]=="function")}function Hae(e){let t=Object.getPrototypeOf(e);return Object.prototype.hasOwnProperty.call(e,Symbol.iterator)||t!=null&&t!==Object.prototype&&typeof e[Symbol.iterator]=="function"}function SU(e){if(e==null)return 0;if(QE(e)){let t=e._readableState;return t&&t.objectMode===!1&&t.ended===!0&&Number.isFinite(t.length)?t.length:null}else{if(IU(e))return e.size!=null?e.size:null;if(DU(e))return e.byteLength}return null}function _U(e){return e&&!!(e.destroyed||e[yU]||mU.isDestroyed?.(e))}function vU(e,t){e==null||!QE(e)||_U(e)||(typeof e.destroy=="function"?(Object.getPrototypeOf(e).constructor===Sae&&(e.socket=null),e.destroy(t)):t&&queueMicrotask(()=>{e.emit("error",t)}),e.destroyed!==!0&&(e[yU]=!0))}var qae=/timeout=(\d+)/;function Gae(e){let t=e.match(qae);return t?parseInt(t[1],10)*1e3:null}function RU(e){return typeof e=="string"?Tae[e]??e.toLowerCase():BU.lookup(e)??e.toString("latin1").toLowerCase()}function Yae(e){return BU.lookup(e)??e.toString("latin1").toLowerCase()}function Wae(e,t){t===void 0&&(t={});for(let r=0;r<e.length;r+=2){let n=RU(e[r]),i=t[n];if(i!==void 0)if(Object.hasOwn(t,n))typeof i=="string"&&(i=[i],t[n]=i),i.push(e[r+1].toString("latin1"));else{let s=typeof e[r+1]=="string"?e[r+1]:Array.isArray(e[r+1])?e[r+1].map(o=>o.toString("latin1")):e[r+1].toString("latin1");n==="__proto__"?Object.defineProperty(t,n,{value:s,enumerable:!0,configurable:!0,writable:!0}):t[n]=s}else{let s=typeof e[r+1]=="string"?e[r+1]:Array.isArray(e[r+1])?e[r+1].map(o=>o.toString("latin1")):e[r+1].toString("latin1");t[n]=s}}return t}function Vae(e){let t=e.length,r=new Array(t),n,i;for(let s=0;s<t;s+=2)n=e[s],i=e[s+1],typeof n!="string"&&(n=n.toString()),typeof i!="string"&&(i=i.toString("latin1")),r[s]=n,r[s+1]=i;return r}function Jae(e){if(!Array.isArray(e))throw new TypeError("expected headers to be an array");return e.map(t=>Buffer.from(t))}function DU(e){return e instanceof Uint8Array||Buffer.isBuffer(e)}function jae(e,t,r){if(!e||typeof e!="object")throw new Nr("handler must be an object");if(typeof e.onRequestStart!="function"){if(typeof e.onConnect!="function")throw new Nr("invalid onConnect method");if(typeof e.onError!="function")throw new Nr("invalid onError method");if(typeof e.onBodySent!="function"&&e.onBodySent!==void 0)throw new Nr("invalid onBodySent method");if(r||t==="CONNECT"){if(typeof e.onUpgrade!="function")throw new Nr("invalid onUpgrade method")}else{if(typeof e.onHeaders!="function")throw new Nr("invalid onHeaders method");if(typeof e.onData!="function")throw new Nr("invalid onData method");if(typeof e.onComplete!="function")throw new Nr("invalid onComplete method")}}}function zae(e){return!!(e&&(mU.isDisturbed(e)||e[mc]))}function Kae(e){return{localAddress:e.localAddress,localPort:e.localPort,remoteAddress:e.remoteAddress,remotePort:e.remotePort,remoteFamily:e.remoteFamily,timeout:e.timeout,bytesWritten:e.bytesWritten,bytesRead:e.bytesRead}}function Xae(e){let t;return new ReadableStream({start(){t=e[Symbol.asyncIterator]()},pull(r){return t.next().then(({done:n,value:i})=>{if(n)return queueMicrotask(()=>{r.close(),r.byobRequest?.respond(0)});{let s=Buffer.isBuffer(i)?i:Buffer.from(i);return s.byteLength?r.enqueue(new Uint8Array(s)):this.pull(r)}})},cancel(){return t.return()},type:"bytes"})}function TU(e){return e&&typeof e=="object"&&typeof e.append=="function"&&typeof e.delete=="function"&&typeof e.get=="function"&&typeof e.getAll=="function"&&typeof e.has=="function"&&typeof e.set=="function"&&e[Symbol.toStringTag]==="FormData"}function Zae(e,t){return"addEventListener"in e?(e.addEventListener("abort",t,{once:!0}),()=>e.removeEventListener("abort",t)):(e.once("abort",t),()=>e.removeListener("abort",t))}var NU=new Uint8Array([0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,1,0,1,1,1,1,1,0,0,1,1,0,1,1,0,1,1,1,1,1,1,1,1,1,1,0,0,0,0,0,0,0,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,0,0,0,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,1,0,1,0,1,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0,0]);function $ae(e){return NU[e]===1}var eAe=/^[\^_`a-zA-Z\-0-9!#$%&'*+.|~]+$/;function tAe(e){if(e.length>=12)return eAe.test(e);if(e.length===0)return!1;for(let t=0;t<e.length;t++)if(NU[e.charCodeAt(t)]!==1)return!1;return!0}var rAe=/[^\t\x20-\x7e\x80-\xff]/;function nAe(e){return!rAe.test(e)}var iAe=/^bytes (\d+)-(\d+)\/(\d+)?$/;function sAe(e){if(e==null||e==="")return{start:0,end:null,size:null};let t=e?e.match(iAe):null;return t?{start:parseInt(t[1]),end:t[2]?parseInt(t[2]):null,size:t[3]?parseInt(t[3]):null}:null}function oAe(e,t,r){return(e[Bc]??(e[Bc]=[])).push([t,r]),e.on(t,r),e}function aAe(e){if(e[Bc]!=null){for(let[t,r]of e[Bc])e.removeListener(t,r);e[Bc]=null}return e}function AAe(e,t,r){try{t.onError(r),Vh(t.aborted)}catch(n){e.emit("error",n)}}var fAe=process.platform==="win32"?(e,t)=>{if(!t.timeout)return pU;let r=null,n=null,i=IE.setFastTimeout(()=>{r=setImmediate(()=>{n=setImmediate(()=>EU(e.deref(),t))})},t.timeout);return()=>{IE.clearFastTimeout(i),clearImmediate(r),clearImmediate(n)}}:(e,t)=>{if(!t.timeout)return pU;let r=null,n=IE.setFastTimeout(()=>{r=setImmediate(()=>{EU(e.deref(),t)})},t.timeout);return()=>{IE.clearFastTimeout(n),clearImmediate(r)}};function EU(e,t){if(e==null)return;let r="Connect Timeout Error";Array.isArray(e.autoSelectFamilyAttemptedAddresses)?r+=` (attempted addresses: ${e.autoSelectFamilyAttemptedAddresses.join(", ")},`:r+=` (attempted address: ${t.hostname}:${t.port},`,r+=` timeout: ${t.timeout}ms)`,vU(e,new Dae(r))}function uAe(e){if(e[0]==="h"&&e[1]==="t"&&e[2]==="t"&&e[3]==="p")switch(e[4]){case":":return"http:";case"s":if(e[5]===":")return"https:"}return e.slice(0,e.indexOf(":")+1)}var MU=Object.create(null);MU.enumerable=!0;var FQ={delete:"DELETE",DELETE:"DELETE",get:"GET",GET:"GET",head:"HEAD",HEAD:"HEAD",options:"OPTIONS",OPTIONS:"OPTIONS",post:"POST",POST:"POST",put:"PUT",PUT:"PUT"},FU={...FQ,patch:"patch",PATCH:"PATCH"};Object.setPrototypeOf(FQ,null);Object.setPrototypeOf(FU,null);kU.exports={kEnumerableProperty:MU,isDisturbed:zae,isBlobLike:IU,parseOrigin:xae,parseURL:QU,getServerName:Lae,isStream:QE,isIterable:wU,hasSafeIterator:Hae,isAsyncIterable:Oae,isDestroyed:_U,headerNameToString:RU,bufferToLowerCasedHeaderName:Yae,addListener:oAe,removeAllListeners:aAe,errorRequest:AAe,parseRawHeaders:Vae,encodeRawHeaders:Jae,parseHeaders:Wae,parseKeepAliveTimeout:Gae,destroy:vU,bodyLength:SU,deepClone:Pae,ReadableStreamFrom:Xae,isBuffer:DU,assertRequestHandler:jae,getSocketInfo:Kae,isFormDataLike:TU,pathHasQueryOrFragment:bU,serializePathWithQuery:kae,addAbortListener:Zae,isValidHTTPToken:tAe,isValidHeaderValue:nAe,isTokenCharCode:$ae,parseRangeHeader:sAe,normalizedMethodRecordsBase:FQ,normalizedMethodRecords:FU,isValidPort:CU,isHttpOrHttpsPrefixed:bE,nodeMajor:Nae,nodeMinor:Mae,safeHTTPMethods:Object.freeze(["GET","HEAD","OPTIONS","TRACE"]),wrapRequestBody:Fae,setupConnectTimeout:fAe,getProtocolFromUrlString:uAe}});var YU=x((yTe,GU)=>{"use strict";var PU=Wt(),{Readable:cAe}=(ts(),Gs(Yt)),{RequestAbortedError:OU,NotSupportedError:lAe,InvalidArgumentError:hAe,AbortError:wE}=mr(),HU=$t(),{ReadableStreamFrom:dAe}=$t(),Vn=Symbol("kConsume"),SE=Symbol("kReading"),pf=Symbol("kBody"),xU=Symbol("kAbort"),qU=Symbol("kContentType"),kQ=Symbol("kContentLength"),xQ=Symbol("kUsed"),_E=Symbol("kBytesRead"),gAe=()=>{},UQ=class extends cAe{constructor({resume:t,abort:r,contentType:n="",contentLength:i,highWaterMark:s=64*1024}){super({autoDestroy:!0,read:t,highWaterMark:s}),this._readableState.dataEmitted=!1,this[xU]=r,this[Vn]=null,this[_E]=0,this[pf]=null,this[xQ]=!1,this[qU]=n,this[kQ]=Number.isFinite(i)?i:null,this[SE]=!1}_destroy(t,r){!t&&!this._readableState.endEmitted&&(t=new OU),t&&this[xU](),this[xQ]?r(t):setImmediate(r,t)}on(t,r){return(t==="data"||t==="readable")&&(this[SE]=!0,this[xQ]=!0),super.on(t,r)}addListener(t,r){return this.on(t,r)}off(t,r){let n=super.off(t,r);return(t==="data"||t==="readable")&&(this[SE]=this.listenerCount("data")>0||this.listenerCount("readable")>0),n}removeListener(t,r){return this.off(t,r)}push(t){return t&&(this[_E]+=t.length,this[Vn])?(PQ(this[Vn],t),this[SE]?super.push(t):!0):super.push(t)}text(){return Jh(this,"text")}json(){return Jh(this,"json")}blob(){return Jh(this,"blob")}bytes(){return Jh(this,"bytes")}arrayBuffer(){return Jh(this,"arrayBuffer")}async formData(){throw new lAe}get bodyUsed(){return HU.isDisturbed(this)}get body(){return this[pf]||(this[pf]=dAe(this),this[Vn]&&(this[pf].getReader(),PU(this[pf].locked))),this[pf]}dump(t){let r=t?.signal;if(r!=null&&(typeof r!="object"||!("aborted"in r)))return Promise.reject(new hAe("signal must be an AbortSignal"));let n=t?.limit&&Number.isFinite(t.limit)?t.limit:128*1024;return r?.aborted?Promise.reject(r.reason??new wE):this._readableState.closeEmitted?Promise.resolve(null):new Promise((i,s)=>{if((this[kQ]&&this[kQ]>n||this[_E]>n)&&this.destroy(new wE),r){let o=()=>{this.destroy(r.reason??new wE)};r.addEventListener("abort",o),this.on("close",function(){r.removeEventListener("abort",o),r.aborted?s(r.reason??new wE):i(null)})}else this.on("close",i);this.on("error",gAe).on("data",()=>{this[_E]>n&&this.destroy()}).resume()})}setEncoding(t){return Buffer.isEncoding(t)&&(this._readableState.encoding=t),this}};function pAe(e){return e[pf]?.locked===!0||e[Vn]!==null}function EAe(e){return HU.isDisturbed(e)||pAe(e)}function Jh(e,t){return PU(!e[Vn]),new Promise((r,n)=>{if(EAe(e)){let i=e._readableState;i.destroyed&&i.closeEmitted===!1?e.on("error",n).on("close",()=>{n(new TypeError("unusable"))}):n(i.errored??new TypeError("unusable"))}else queueMicrotask(()=>{e[Vn]={type:t,stream:e,resolve:r,reject:n,length:0,body:[]},e.on("error",function(i){OQ(this[Vn],i)}).on("close",function(){this[Vn].body!==null&&OQ(this[Vn],new OU)}),yAe(e[Vn])})})}function yAe(e){if(e.body===null)return;let{_readableState:t}=e.stream;if(t.bufferIndex){let r=t.bufferIndex,n=t.buffer.length;for(let i=r;i<n;i++)PQ(e,t.buffer[i])}else for(let r of t.buffer)PQ(e,r);for(t.endEmitted?LU(this[Vn],this._readableState.encoding):e.stream.on("end",function(){LU(this[Vn],this._readableState.encoding)}),e.stream.resume();e.stream.read()!=null;);}function LQ(e,t,r){if(e.length===0||t===0)return"";let n=e.length===1?e[0]:Buffer.concat(e,t),i=n.length,s=i>2&&n[0]===239&&n[1]===187&&n[2]===191?3:0;return!r||r==="utf8"||r==="utf-8"?n.utf8Slice(s,i):n.subarray(s,i).toString(r)}function UU(e,t){if(e.length===0||t===0)return new Uint8Array(0);if(e.length===1)return new Uint8Array(e[0]);let r=new Uint8Array(Buffer.allocUnsafeSlow(t).buffer),n=0;for(let i=0;i<e.length;++i){let s=e[i];r.set(s,n),n+=s.length}return r}function LU(e,t){let{type:r,body:n,resolve:i,stream:s,length:o}=e;try{r==="text"?i(LQ(n,o,t)):r==="json"?i(JSON.parse(LQ(n,o,t))):r==="arrayBuffer"?i(UU(n,o).buffer):r==="blob"?i(new Blob(n,{type:s[qU]})):r==="bytes"&&i(UU(n,o)),OQ(e)}catch(a){s.destroy(a)}}function PQ(e,t){e.length+=t.length,e.body.push(t)}function OQ(e,t){e.body!==null&&(t?e.reject(t):e.resolve(),e.type=null,e.stream=null,e.resolve=null,e.reject=null,e.length=0,e.body=null)}GU.exports={Readable:UQ,chunksDecode:LQ}});var JU=x((mTe,HQ)=>{"use strict";var mAe=Wt(),{AsyncResource:BAe}=Ec(),{Readable:IAe}=YU(),{InvalidArgumentError:Ic,RequestAbortedError:WU}=mr(),yi=$t();function jh(){}var vE=class extends BAe{constructor(t,r){if(!t||typeof t!="object")throw new Ic("invalid opts");let{signal:n,method:i,opaque:s,body:o,onInfo:a,responseHeaders:A,highWaterMark:f}=t;try{if(typeof r!="function")throw new Ic("invalid callback");if(f&&(typeof f!="number"||f<0))throw new Ic("invalid highWaterMark");if(n&&typeof n.on!="function"&&typeof n.addEventListener!="function")throw new Ic("signal must be an EventEmitter or EventTarget");if(i==="CONNECT")throw new Ic("invalid method");if(a&&typeof a!="function")throw new Ic("invalid onInfo callback");super("UNDICI_REQUEST")}catch(l){throw yi.isStream(o)&&yi.destroy(o.on("error",jh),l),l}this.method=i,this.responseHeaders=A||null,this.opaque=s||null,this.callback=r,this.res=null,this.abort=null,this.body=o,this.trailers={},this.context=null,this.onInfo=a||null,this.highWaterMark=f,this.reason=null,this.removeAbortListener=null,n?.aborted?this.reason=n.reason??new WU:n&&(this.removeAbortListener=yi.addAbortListener(n,()=>{this.reason=n.reason??new WU,this.res?yi.destroy(this.res.on("error",jh),this.reason):this.abort&&this.abort(this.reason)}))}onConnect(t,r){if(this.reason){t(this.reason);return}mAe(this.callback),this.abort=t,this.context=r}onHeaders(t,r,n,i){let{callback:s,opaque:o,abort:a,context:A,responseHeaders:f,highWaterMark:l}=this,p=f==="raw"?yi.parseRawHeaders(r):yi.parseHeaders(r);if(t<200){this.onInfo&&this.onInfo({statusCode:t,headers:p});return}let B=f==="raw"?yi.parseHeaders(r):p,S=B["content-type"],_=B["content-length"],N=new IAe({resume:n,abort:a,contentType:S,contentLength:this.method!=="HEAD"&&_?Number(_):null,highWaterMark:l});if(this.removeAbortListener&&(N.on("close",this.removeAbortListener),this.removeAbortListener=null),this.callback=null,this.res=N,s!==null)try{this.runInAsyncScope(s,null,null,{statusCode:t,statusText:i,headers:p,trailers:this.trailers,opaque:o,body:N,context:A})}catch(P){this.res=null,yi.destroy(N.on("error",jh),P),queueMicrotask(()=>{throw P})}}onData(t){return this.res.push(t)}onComplete(t){yi.parseHeaders(t,this.trailers),this.res.push(null)}onError(t){let{res:r,callback:n,body:i,opaque:s}=this;n&&(this.callback=null,queueMicrotask(()=>{this.runInAsyncScope(n,null,t,{opaque:s})})),r&&(this.res=null,queueMicrotask(()=>{yi.destroy(r.on("error",jh),t)})),i&&(this.body=null,yi.isStream(i)&&(i.on("error",jh),yi.destroy(i,t))),this.removeAbortListener&&(this.removeAbortListener(),this.removeAbortListener=null)}};function VU(e,t){if(t===void 0)return new Promise((r,n)=>{VU.call(this,e,(i,s)=>i?n(i):r(s))});try{let r=new vE(e,t);this.dispatch(e,r)}catch(r){if(typeof t!="function")throw r;let n=e?.opaque;queueMicrotask(()=>t(r,{opaque:n}))}}HQ.exports=VU;HQ.exports.RequestHandler=vE});var zh=x((BTe,KU)=>{"use strict";var{addAbortListener:bAe}=$t(),{RequestAbortedError:CAe}=mr(),bc=Symbol("kListener"),eo=Symbol("kSignal");function jU(e){e.abort?e.abort(e[eo]?.reason):e.reason=e[eo]?.reason??new CAe,zU(e)}function QAe(e,t){if(e.reason=null,e[eo]=null,e[bc]=null,!!t){if(t.aborted){jU(e);return}e[eo]=t,e[bc]=()=>{jU(e)},bAe(e[eo],e[bc])}}function zU(e){e[eo]&&("removeEventListener"in e[eo]?e[eo].removeEventListener("abort",e[bc]):e[eo].removeListener("abort",e[bc]),e[eo]=null,e[bc]=null)}KU.exports={addSignal:QAe,removeSignal:zU}});var e6=x((ITe,$U)=>{"use strict";var wAe=Wt(),{finished:SAe}=(ts(),Gs(Yt)),{AsyncResource:_Ae}=Ec(),{InvalidArgumentError:Cc,InvalidReturnValueError:vAe}=mr(),zo=$t(),{addSignal:RAe,removeSignal:XU}=zh();function DAe(){}var qQ=class extends _Ae{constructor(t,r,n){if(!t||typeof t!="object")throw new Cc("invalid opts");let{signal:i,method:s,opaque:o,body:a,onInfo:A,responseHeaders:f}=t;try{if(typeof n!="function")throw new Cc("invalid callback");if(typeof r!="function")throw new Cc("invalid factory");if(i&&typeof i.on!="function"&&typeof i.addEventListener!="function")throw new Cc("signal must be an EventEmitter or EventTarget");if(s==="CONNECT")throw new Cc("invalid method");if(A&&typeof A!="function")throw new Cc("invalid onInfo callback");super("UNDICI_STREAM")}catch(l){throw zo.isStream(a)&&zo.destroy(a.on("error",DAe),l),l}this.responseHeaders=f||null,this.opaque=o||null,this.factory=r,this.callback=n,this.res=null,this.abort=null,this.context=null,this.trailers=null,this.body=a,this.onInfo=A||null,zo.isStream(a)&&a.on("error",l=>{this.onError(l)}),RAe(this,i)}onConnect(t,r){if(this.reason){t(this.reason);return}wAe(this.callback),this.abort=t,this.context=r}onHeaders(t,r,n,i){let{factory:s,opaque:o,context:a,responseHeaders:A}=this,f=A==="raw"?zo.parseRawHeaders(r):zo.parseHeaders(r);if(t<200){this.onInfo&&this.onInfo({statusCode:t,headers:f});return}if(this.factory=null,s===null)return;let l=this.runInAsyncScope(s,null,{statusCode:t,headers:f,opaque:o,context:a});if(!l||typeof l.write!="function"||typeof l.end!="function"||typeof l.on!="function")throw new vAe("expected Writable");return SAe(l,{readable:!1},B=>{let{callback:S,res:_,opaque:N,trailers:P,abort:U}=this;this.res=null,(B||!_?.readable)&&zo.destroy(_,B),this.callback=null,this.runInAsyncScope(S,null,B||null,{opaque:N,trailers:P}),B&&U()}),l.on("drain",n),this.res=l,(l.writableNeedDrain!==void 0?l.writableNeedDrain:l._writableState?.needDrain)!==!0}onData(t){let{res:r}=this;return r?r.write(t):!0}onComplete(t){let{res:r}=this;XU(this),r&&(this.trailers=zo.parseHeaders(t),r.end())}onError(t){let{res:r,callback:n,opaque:i,body:s}=this;XU(this),this.factory=null,r?(this.res=null,zo.destroy(r,t)):n&&(this.callback=null,queueMicrotask(()=>{this.runInAsyncScope(n,null,t,{opaque:i})})),s&&(this.body=null,zo.destroy(s,t))}};function ZU(e,t,r){if(r===void 0)return new Promise((n,i)=>{ZU.call(this,e,t,(s,o)=>s?i(s):n(o))});try{let n=new qQ(e,t,r);this.dispatch(e,n)}catch(n){if(typeof r!="function")throw n;let i=e?.opaque;queueMicrotask(()=>r(n,{opaque:i}))}}$U.exports=ZU});var i6=x((bTe,n6)=>{"use strict";var{Readable:r6,Duplex:TAe,PassThrough:NAe}=(ts(),Gs(Yt)),MAe=Wt(),{AsyncResource:FAe}=Ec(),{InvalidArgumentError:Kh,InvalidReturnValueError:kAe,RequestAbortedError:GQ}=mr(),to=$t(),{addSignal:xAe,removeSignal:UAe}=zh();function t6(){}var Qc=Symbol("resume"),YQ=class extends r6{constructor(){super({autoDestroy:!0}),this[Qc]=null}_read(){let{[Qc]:t}=this;t&&(this[Qc]=null,t())}_destroy(t,r){this._read(),r(t)}},WQ=class extends r6{constructor(t){super({autoDestroy:!0}),this[Qc]=t}_read(){this[Qc]()}_destroy(t,r){!t&&!this._readableState.endEmitted&&(t=new GQ),r(t)}},VQ=class extends FAe{constructor(t,r){if(!t||typeof t!="object")throw new Kh("invalid opts");if(typeof r!="function")throw new Kh("invalid handler");let{signal:n,method:i,opaque:s,onInfo:o,responseHeaders:a}=t;if(n&&typeof n.on!="function"&&typeof n.addEventListener!="function")throw new Kh("signal must be an EventEmitter or EventTarget");if(i==="CONNECT")throw new Kh("invalid method");if(o&&typeof o!="function")throw new Kh("invalid onInfo callback");super("UNDICI_PIPELINE"),this.opaque=s||null,this.responseHeaders=a||null,this.handler=r,this.abort=null,this.context=null,this.onInfo=o||null,this.req=new YQ().on("error",t6),this.ret=new TAe({readableObjectMode:t.objectMode,autoDestroy:!0,read:()=>{let{body:A}=this;A?.resume&&A.resume()},write:(A,f,l)=>{let{req:p}=this;p.push(A,f)||p._readableState.destroyed?l():p[Qc]=l},destroy:(A,f)=>{let{body:l,req:p,res:B,ret:S,abort:_}=this;!A&&!S._readableState.endEmitted&&(A=new GQ),_&&A&&_(),to.destroy(l,A),to.destroy(p,A),to.destroy(B,A),UAe(this),f(A)}}).on("prefinish",()=>{let{req:A}=this;A.push(null)}),this.res=null,xAe(this,n)}onConnect(t,r){let{res:n}=this;if(this.reason){t(this.reason);return}MAe(!n,"pipeline cannot be retried"),this.abort=t,this.context=r}onHeaders(t,r,n){let{opaque:i,handler:s,context:o}=this;if(t<200){if(this.onInfo){let A=this.responseHeaders==="raw"?to.parseRawHeaders(r):to.parseHeaders(r);this.onInfo({statusCode:t,headers:A})}return}this.res=new WQ(n);let a;try{this.handler=null;let A=this.responseHeaders==="raw"?to.parseRawHeaders(r):to.parseHeaders(r);a=this.runInAsyncScope(s,null,{statusCode:t,headers:A,opaque:i,body:this.res,context:o})}catch(A){throw this.res.on("error",t6),A}if(!a||typeof a.on!="function")throw new kAe("expected Readable");a.on("data",A=>{let{ret:f,body:l}=this;!f.push(A)&&l.pause&&l.pause()}).on("error",A=>{let{ret:f}=this;to.destroy(f,A)}).on("end",()=>{let{ret:A}=this;A.push(null)}).on("close",()=>{let{ret:A}=this;A._readableState.ended||to.destroy(A,new GQ)}),this.body=a}onData(t){let{res:r}=this;return r.push(t)}onComplete(t){let{res:r}=this;r.push(null)}onError(t){let{ret:r}=this;this.handler=null,to.destroy(r,t)}};function LAe(e,t){try{let r=new VQ(e,t);return this.dispatch({...e,body:r.req},r),r.ret}catch(r){return new NAe().destroy(r)}}n6.exports=LAe});var u6=x((CTe,f6)=>{"use strict";var{InvalidArgumentError:JQ,SocketError:PAe}=mr(),{AsyncResource:OAe}=Ec(),s6=Wt(),o6=$t(),{kHTTP2Stream:HAe}=Tn(),{addSignal:qAe,removeSignal:a6}=zh(),jQ=class extends OAe{constructor(t,r){if(!t||typeof t!="object")throw new JQ("invalid opts");if(typeof r!="function")throw new JQ("invalid callback");let{signal:n,opaque:i,responseHeaders:s}=t;if(n&&typeof n.on!="function"&&typeof n.addEventListener!="function")throw new JQ("signal must be an EventEmitter or EventTarget");super("UNDICI_UPGRADE"),this.responseHeaders=s||null,this.opaque=i||null,this.callback=r,this.abort=null,this.context=null,qAe(this,n)}onConnect(t,r){if(this.reason){t(this.reason);return}s6(this.callback),this.abort=t,this.context=null}onHeaders(){throw new PAe("bad upgrade",null)}onUpgrade(t,r,n){s6(n[HAe]===!0?t===200:t===101);let{callback:i,opaque:s,context:o}=this;a6(this),this.callback=null;let a=this.responseHeaders==="raw"?o6.parseRawHeaders(r):o6.parseHeaders(r);this.runInAsyncScope(i,null,null,{headers:a,socket:n,opaque:s,context:o})}onError(t){let{callback:r,opaque:n}=this;a6(this),r&&(this.callback=null,queueMicrotask(()=>{this.runInAsyncScope(r,null,t,{opaque:n})}))}};function A6(e,t){if(t===void 0)return new Promise((r,n)=>{A6.call(this,e,(i,s)=>i?n(i):r(s))});try{let r=new jQ(e,t),n={...e,method:e.method||"GET",upgrade:e.protocol||"Websocket"};this.dispatch(n,r)}catch(r){if(typeof t!="function")throw r;let n=e?.opaque;queueMicrotask(()=>t(r,{opaque:n}))}}f6.exports=A6});var g6=x((QTe,d6)=>{"use strict";var GAe=Wt(),{AsyncResource:YAe}=Ec(),{InvalidArgumentError:zQ,SocketError:WAe}=mr(),c6=$t(),{addSignal:VAe,removeSignal:l6}=zh(),KQ=class extends YAe{constructor(t,r){if(!t||typeof t!="object")throw new zQ("invalid opts");if(typeof r!="function")throw new zQ("invalid callback");let{signal:n,opaque:i,responseHeaders:s}=t;if(n&&typeof n.on!="function"&&typeof n.addEventListener!="function")throw new zQ("signal must be an EventEmitter or EventTarget");super("UNDICI_CONNECT"),this.opaque=i||null,this.responseHeaders=s||null,this.callback=r,this.abort=null,VAe(this,n)}onConnect(t,r){if(this.reason){t(this.reason);return}GAe(this.callback),this.abort=t,this.context=r}onHeaders(){throw new WAe("bad connect",null)}onUpgrade(t,r,n){let{callback:i,opaque:s,context:o}=this;l6(this),this.callback=null;let a=r;a!=null&&(a=this.responseHeaders==="raw"?c6.parseRawHeaders(r):c6.parseHeaders(r)),this.runInAsyncScope(i,null,null,{statusCode:t,headers:a,socket:n,opaque:s,context:o})}onError(t){let{callback:r,opaque:n}=this;l6(this),r&&(this.callback=null,queueMicrotask(()=>{this.runInAsyncScope(r,null,t,{opaque:n})}))}};function h6(e,t){if(t===void 0)return new Promise((r,n)=>{h6.call(this,e,(i,s)=>i?n(i):r(s))});try{let r=new KQ(e,t),n={...e,method:"CONNECT"};this.dispatch(n,r)}catch(r){if(typeof t!="function")throw r;let n=e?.opaque;queueMicrotask(()=>t(r,{opaque:n}))}}d6.exports=h6});var p6=x((wTe,wc)=>{"use strict";wc.exports.request=JU();wc.exports.stream=e6();wc.exports.pipeline=i6();wc.exports.upgrade=u6();wc.exports.connect=g6()});var y6=x((STe,E6)=>{"use strict";var{InvalidArgumentError:JAe}=mr(),_r,Sc;E6.exports=(Sc=class{constructor(t){St(this,_r);ft(this,_r,t)}static wrap(t){return t.onRequestStart?t:new Sc(t)}onConnect(t,r){return te(this,_r).onConnect?.(t,r)}onResponseStarted(){return te(this,_r).onResponseStarted?.()}onHeaders(t,r,n,i){return te(this,_r).onHeaders?.(t,r,n,i)}onUpgrade(t,r,n){return te(this,_r).onUpgrade?.(t,r,n)}onData(t){return te(this,_r).onData?.(t)}onComplete(t){return te(this,_r).onComplete?.(t)}onError(t){if(!te(this,_r).onError)throw t;return te(this,_r).onError?.(t)}onRequestStart(t,r){te(this,_r).onConnect?.(n=>t.abort(n),r)}onRequestUpgrade(t,r,n,i){let s=[];for(let[o,a]of Object.entries(n))s.push(Buffer.from(o,"latin1"),XQ(a));te(this,_r).onUpgrade?.(r,s,i)}onResponseStart(t,r,n,i){let s=[];for(let[o,a]of Object.entries(n))s.push(Buffer.from(o,"latin1"),XQ(a));te(this,_r).onHeaders?.(r,s,()=>t.resume(),i)===!1&&t.pause()}onResponseData(t,r){te(this,_r).onData?.(r)===!1&&t.pause()}onResponseEnd(t,r){let n=[];for(let[i,s]of Object.entries(r))n.push(Buffer.from(i,"latin1"),XQ(s));te(this,_r).onComplete?.(n)}onResponseError(t,r){if(!te(this,_r).onError)throw new JAe("invalid onError method");te(this,_r).onError?.(r)}},_r=new WeakMap,Sc);function XQ(e){return Array.isArray(e)?e.map(t=>Buffer.from(t,"latin1")):Buffer.from(e,"latin1")}});var B6=x((vTe,m6)=>{"use strict";var jAe=Zi(),zAe=y6(),KAe=e=>(t,r)=>e(t,zAe.wrap(r)),ZQ=class extends jAe{dispatch(){throw new Error("not implemented")}close(){throw new Error("not implemented")}destroy(){throw new Error("not implemented")}compose(...t){let r=Array.isArray(t[0])?t[0]:t,n=this.dispatch.bind(this);for(let i of r)if(i!=null){if(typeof i!="function")throw new TypeError(`invalid interceptor, expected function received ${typeof i}`);if(n=i(n),n=KAe(n),n==null||typeof n!="function"||n.length!==2)throw new TypeError("invalid interceptor")}return new Proxy(this,{get:(i,s)=>s==="dispatch"?n:i[s]})}};m6.exports=ZQ});var C6=x((RTe,b6)=>{"use strict";var{parseHeaders:$Q}=$t(),{InvalidArgumentError:XAe}=mr(),ew=Symbol("resume"),I6,Ef,Xh,_c,Zh;I6=ew;var tw=class{constructor(t){St(this,Ef,!1);St(this,Xh,null);St(this,_c,!1);St(this,Zh);y(this,I6,null);ft(this,Zh,t)}pause(){ft(this,Ef,!0)}resume(){te(this,Ef)&&(ft(this,Ef,!1),this[ew]?.())}abort(t){te(this,_c)||(ft(this,_c,!0),ft(this,Xh,t),te(this,Zh).call(this,t))}get aborted(){return te(this,_c)}get reason(){return te(this,Xh)}get paused(){return te(this,Ef)}};Ef=new WeakMap,Xh=new WeakMap,_c=new WeakMap,Zh=new WeakMap;var mi,Jn,vc;b6.exports=(vc=class{constructor(t){St(this,mi);St(this,Jn);ft(this,mi,t)}static unwrap(t){return t.onRequestStart?new vc(t):t}onConnect(t,r){ft(this,Jn,new tw(t)),te(this,mi).onRequestStart?.(te(this,Jn),r)}onResponseStarted(){return te(this,mi).onResponseStarted?.()}onUpgrade(t,r,n){te(this,mi).onRequestUpgrade?.(te(this,Jn),t,$Q(r),n)}onHeaders(t,r,n,i){return te(this,Jn)[ew]=n,te(this,mi).onResponseStart?.(te(this,Jn),t,$Q(r),i),!te(this,Jn).paused}onData(t){return te(this,mi).onResponseData?.(te(this,Jn),t),!te(this,Jn).paused}onComplete(t){te(this,mi).onResponseEnd?.(te(this,Jn),$Q(t))}onError(t){if(!te(this,mi).onResponseError)throw new XAe("invalid onError method");te(this,mi).onResponseError?.(te(this,Jn),t)}},mi=new WeakMap,Jn=new WeakMap,vc)});var DE=x((TTe,R6)=>{"use strict";var ZAe=B6(),$Ae=C6(),{ClientDestroyedError:rw,ClientClosedError:efe,InvalidArgumentError:RE}=mr(),{kDestroy:tfe,kClose:rfe,kClosed:$h,kDestroyed:Rc,kDispatch:nfe}=Tn(),ro=Symbol("onDestroyed"),Ko=Symbol("onClosed"),Q6,w6,S6,_6,v6,nw=class extends(v6=ZAe,_6=Rc,S6=ro,w6=$h,Q6=Ko,v6){constructor(){super(...arguments);y(this,_6,!1);y(this,S6,null);y(this,w6,!1);y(this,Q6,null)}get destroyed(){return this[Rc]}get closed(){return this[$h]}close(r){if(r===void 0)return new Promise((i,s)=>{this.close((o,a)=>o?s(o):i(a))});if(typeof r!="function")throw new RE("invalid callback");if(this[Rc]){let i=new rw;queueMicrotask(()=>r(i,null));return}if(this[$h]){this[Ko]?this[Ko].push(r):queueMicrotask(()=>r(null,null));return}this[$h]=!0,this[Ko]??(this[Ko]=[]),this[Ko].push(r);let n=()=>{let i=this[Ko];this[Ko]=null;for(let s=0;s<i.length;s++)i[s](null,null)};this[rfe]().then(()=>this.destroy()).then(()=>queueMicrotask(n))}destroy(r,n){if(typeof r=="function"&&(n=r,r=null),n===void 0)return new Promise((s,o)=>{this.destroy(r,(a,A)=>a?o(a):s(A))});if(typeof n!="function")throw new RE("invalid callback");if(this[Rc]){this[ro]?this[ro].push(n):queueMicrotask(()=>n(null,null));return}r||(r=new rw),this[Rc]=!0,this[ro]??(this[ro]=[]),this[ro].push(n);let i=()=>{let s=this[ro];this[ro]=null;for(let o=0;o<s.length;o++)s[o](null,null)};this[tfe](r).then(()=>queueMicrotask(i))}dispatch(r,n){if(!n||typeof n!="object")throw new RE("handler must be an object");n=$Ae.unwrap(n);try{if(!r||typeof r!="object")throw new RE("opts must be an object.");if(this[Rc]||this[ro])throw new rw;if(this[$h])throw new efe;return this[nfe](r,n)}catch(i){if(typeof n.onError!="function")throw i;return n.onError(i),!1}}};R6.exports=nw});var ow=x((MTe,F6)=>{"use strict";var{kConnected:D6,kPending:T6,kRunning:N6,kSize:M6,kFree:ife,kQueued:sfe}=Tn(),iw=class{constructor(t){this.connected=t[D6],this.pending=t[T6],this.running=t[N6],this.size=t[M6]}},sw=class{constructor(t){this.connected=t[D6],this.free=t[ife],this.pending=t[T6],this.queued=t[sfe],this.running=t[N6],this.size=t[M6]}};F6.exports={ClientStats:iw,PoolStats:sw}});var x6=x((kTe,k6)=>{"use strict";var TE=class{constructor(){y(this,"bottom",0);y(this,"top",0);y(this,"list",new Array(2048).fill(void 0));y(this,"next",null)}isEmpty(){return this.top===this.bottom}isFull(){return(this.top+1&2047)===this.bottom}push(t){this.list[this.top]=t,this.top=this.top+1&2047}shift(){let t=this.list[this.bottom];return t===void 0?null:(this.list[this.bottom]=void 0,this.bottom=this.bottom+1&2047,t)}};k6.exports=class{constructor(){this.head=this.tail=new TE}isEmpty(){return this.head.isEmpty()}push(t){this.head.isFull()&&(this.head=this.head.next=new TE),this.head.push(t)}shift(){let t=this.tail,r=t.shift();return t.isEmpty()&&t.next!==null&&(this.tail=t.next,t.next=null),r}}});var $6=x((UTe,Z6)=>{"use strict";var{PoolStats:ofe}=ow(),afe=DE(),Afe=x6(),{kConnected:aw,kSize:U6,kRunning:L6,kPending:P6,kQueued:ed,kBusy:ffe,kFree:ufe,kUrl:cfe,kClose:lfe,kDestroy:hfe,kDispatch:dfe}=Tn(),Mr=Symbol("clients"),pn=Symbol("needDrain"),td=Symbol("queue"),Aw=Symbol("closed resolve"),fw=Symbol("onDrain"),O6=Symbol("onConnect"),H6=Symbol("onDisconnect"),q6=Symbol("onConnectionError"),uw=Symbol("get dispatcher"),K6=Symbol("add client"),X6=Symbol("remove client"),G6,Y6,W6,V6,J6,j6,z6,cw=class extends afe{constructor(){super(...arguments);y(this,z6,new Afe);y(this,j6,0);y(this,J6,[]);y(this,V6,!1);y(this,W6,(r,n)=>{this.emit("connect",r,[this,...n])});y(this,Y6,(r,n,i)=>{this.emit("disconnect",r,[this,...n],i)});y(this,G6,(r,n,i)=>{this.emit("connectionError",r,[this,...n],i)})}[(z6=td,j6=ed,J6=Mr,V6=pn,fw)](r,n,i){let s=this[td],o=!1;for(;!o;){let a=s.shift();if(!a)break;this[ed]--,o=!r.dispatch(a.opts,a.handler)}if(r[pn]=o,!o&&this[pn]&&(this[pn]=!1,this.emit("drain",n,[this,...i])),this[Aw]&&s.isEmpty()){let a=[];for(let A=0;A<this[Mr].length;A++){let f=this[Mr][A];f.destroyed||a.push(f.close())}return Promise.all(a).then(this[Aw])}}get[(W6=O6,Y6=H6,G6=q6,ffe)](){return this[pn]}get[aw](){let r=0;for(let{[aw]:n}of this[Mr])r+=n;return r}get[ufe](){let r=0;for(let{[aw]:n,[pn]:i}of this[Mr])r+=n&&!i;return r}get[P6](){let r=this[ed];for(let{[P6]:n}of this[Mr])r+=n;return r}get[L6](){let r=0;for(let{[L6]:n}of this[Mr])r+=n;return r}get[U6](){let r=this[ed];for(let{[U6]:n}of this[Mr])r+=n;return r}get stats(){return new ofe(this)}[lfe](){if(this[td].isEmpty()){let r=[];for(let n=0;n<this[Mr].length;n++){let i=this[Mr][n];i.destroyed||r.push(i.close())}return Promise.all(r)}else return new Promise(r=>{this[Aw]=r})}[hfe](r){for(;;){let i=this[td].shift();if(!i)break;i.handler.onError(r)}let n=new Array(this[Mr].length);for(let i=0;i<this[Mr].length;i++)n[i]=this[Mr][i].destroy(r);return Promise.all(n)}[dfe](r,n){let i=this[uw]();return i?i.dispatch(r,n)||(i[pn]=!0,this[pn]=!this[uw]()):(this[pn]=!0,this[td].push({opts:r,handler:n}),this[ed]++),!this[pn]}[K6](r){return r.on("drain",this[fw].bind(this,r)).on("connect",this[O6]).on("disconnect",this[H6]).on("connectionError",this[q6]),this[Mr].push(r),this[pn]&&queueMicrotask(()=>{this[pn]&&this[fw](r,r[cfe],[r,this])}),this}[X6](r){r.close(()=>{let n=this[Mr].indexOf(r);n!==-1&&this[Mr].splice(n,1)}),this[pn]=this[Mr].some(n=>!n[pn]&&n.closed!==!0&&n.destroyed!==!0)}};Z6.exports={PoolBase:cw,kClients:Mr,kNeedDrain:pn,kAddClient:K6,kRemoveClient:X6,kGetDispatcher:uw}});var r3=x((PTe,t3)=>{"use strict";var e3=new Map,lw=new Map;function NE(e){let t=e3.get(e);return t||(t=new Set,e3.set(e,t)),t}function gfe(e){return{name:e,get hasSubscribers(){return NE(e).size>0},publish(t){for(let r of NE(e))r(t,e)},subscribe(t){return NE(e).add(t),this},unsubscribe(t){return NE(e).delete(t),this}}}function ME(e){return lw.has(e)||lw.set(e,gfe(e)),lw.get(e)}function pfe(e,t){ME(e).subscribe(t)}function Efe(e,t){ME(e).unsubscribe(t)}t3.exports={channel:ME,hasSubscribers(e){return ME(e).hasSubscribers},subscribe:pfe,unsubscribe:Efe}});var nd=x((OTe,i3)=>{"use strict";var Ft=r3(),pw=Yr(),yf=pw.debuglog("undici"),rd=pw.debuglog("fetch"),FE=pw.debuglog("websocket"),jn={beforeConnect:Ft.channel("undici:client:beforeConnect"),connected:Ft.channel("undici:client:connected"),connectError:Ft.channel("undici:client:connectError"),sendHeaders:Ft.channel("undici:client:sendHeaders"),create:Ft.channel("undici:request:create"),bodySent:Ft.channel("undici:request:bodySent"),bodyChunkSent:Ft.channel("undici:request:bodyChunkSent"),bodyChunkReceived:Ft.channel("undici:request:bodyChunkReceived"),headers:Ft.channel("undici:request:headers"),trailers:Ft.channel("undici:request:trailers"),error:Ft.channel("undici:request:error"),open:Ft.channel("undici:websocket:open"),close:Ft.channel("undici:websocket:close"),socketError:Ft.channel("undici:websocket:socket_error"),ping:Ft.channel("undici:websocket:ping"),pong:Ft.channel("undici:websocket:pong"),proxyConnected:Ft.channel("undici:proxy:connected")},hw=!1;function n3(e=yf){if(!hw){if(jn.beforeConnect.hasSubscribers||jn.connected.hasSubscribers||jn.connectError.hasSubscribers||jn.sendHeaders.hasSubscribers){hw=!0;return}hw=!0,Ft.subscribe("undici:client:beforeConnect",t=>{let{connectParams:{version:r,protocol:n,port:i,host:s}}=t;e("connecting to %s%s using %s%s",s,i?`:${i}`:"",n,r)}),Ft.subscribe("undici:client:connected",t=>{let{connectParams:{version:r,protocol:n,port:i,host:s}}=t;e("connected to %s%s using %s%s",s,i?`:${i}`:"",n,r)}),Ft.subscribe("undici:client:connectError",t=>{let{connectParams:{version:r,protocol:n,port:i,host:s},error:o}=t;e("connection to %s%s using %s%s errored - %s",s,i?`:${i}`:"",n,r,o.message)}),Ft.subscribe("undici:client:sendHeaders",t=>{let{request:{method:r,path:n,origin:i}}=t;e("sending request to %s %s%s",r,i,n)})}}var dw=!1;function yfe(e=yf){if(!dw){if(jn.headers.hasSubscribers||jn.trailers.hasSubscribers||jn.error.hasSubscribers){dw=!0;return}dw=!0,Ft.subscribe("undici:request:headers",t=>{let{request:{method:r,path:n,origin:i},response:{statusCode:s}}=t;e("received response to %s %s%s - HTTP %d",r,i,n,s)}),Ft.subscribe("undici:request:trailers",t=>{let{request:{method:r,path:n,origin:i}}=t;e("trailers received from %s %s%s",r,i,n)}),Ft.subscribe("undici:request:error",t=>{let{request:{method:r,path:n,origin:i},error:s}=t;e("request to %s %s%s errored - %s",r,i,n,s.message)})}}var gw=!1;function mfe(e=FE){if(!gw){if(jn.open.hasSubscribers||jn.close.hasSubscribers||jn.socketError.hasSubscribers||jn.ping.hasSubscribers||jn.pong.hasSubscribers){gw=!0;return}gw=!0,Ft.subscribe("undici:websocket:open",t=>{if(t.address!=null){let{address:r,port:n}=t.address;e("connection opened %s%s",r,n?`:${n}`:"")}else e("connection opened")}),Ft.subscribe("undici:websocket:close",t=>{let{websocket:r,code:n,reason:i}=t;e("closed connection to %s - %s %s",r.url,n,i)}),Ft.subscribe("undici:websocket:socket_error",t=>{e("connection errored - %s",t.message)}),Ft.subscribe("undici:websocket:ping",t=>{e("ping received")}),Ft.subscribe("undici:websocket:pong",t=>{e("pong received")})}}(yf.enabled||rd.enabled)&&(n3(rd.enabled?rd:yf),yfe(rd.enabled?rd:yf));FE.enabled&&(n3(yf.enabled?yf:FE),mfe(FE));i3.exports={channels:jn}});var a3=x((HTe,o3)=>{"use strict";var{InvalidArgumentError:Nt,NotSupportedError:Bfe}=mr(),no=Wt(),{isValidHTTPToken:Ew,isValidHeaderValue:yw,isStream:Ife,destroy:bfe,isBuffer:Cfe,isFormDataLike:Qfe,isIterable:wfe,hasSafeIterator:Sfe,isBlobLike:_fe,serializePathWithQuery:vfe,assertRequestHandler:Rfe,getServerName:Dfe,normalizedMethodRecords:Tfe,getProtocolFromUrlString:Nfe}=$t(),{channels:Nn}=nd(),{headerNameLowerCasedRecord:s3}=mE(),Mfe=/[^\u0021-\u00ff]/,Bi=Symbol("handler"),mw=class{constructor(t,{path:r,method:n,body:i,headers:s,query:o,idempotent:a,blocking:A,upgrade:f,headersTimeout:l,bodyTimeout:p,reset:B,expectContinue:S,servername:_,throwOnError:N,maxRedirections:P,typeOfService:U},G){if(typeof r!="string")throw new Nt("path must be a string");if(r[0]!=="/"&&!(r.startsWith("http://")||r.startsWith("https://"))&&n!=="CONNECT")throw new Nt("path must be an absolute URL or start with a slash");if(Mfe.test(r))throw new Nt("invalid request path");if(typeof n!="string")throw new Nt("method must be a string");if(Tfe[n]===void 0&&!Ew(n))throw new Nt("invalid request method");if(f&&typeof f!="string")throw new Nt("upgrade must be a string");if(f&&!yw(f))throw new Nt("invalid upgrade header");if(l!=null&&(!Number.isFinite(l)||l<0))throw new Nt("invalid headersTimeout");if(p!=null&&(!Number.isFinite(p)||p<0))throw new Nt("invalid bodyTimeout");if(B!=null&&typeof B!="boolean")throw new Nt("invalid reset");if(S!=null&&typeof S!="boolean")throw new Nt("invalid expectContinue");if(N!=null)throw new Nt("invalid throwOnError");if(P!=null&&P!==0)throw new Nt("maxRedirections is not supported, use the redirect interceptor");if(U!=null&&(!Number.isInteger(U)||U<0||U>255))throw new Nt("typeOfService must be an integer between 0 and 255");if(this.headersTimeout=l,this.bodyTimeout=p,this.method=n,this.typeOfService=U??0,this.abort=null,i==null)this.body=null;else if(Ife(i)){this.body=i;let Y=this.body._readableState;(!Y||!Y.autoDestroy)&&(this.endHandler=function(){bfe(this)},this.body.on("end",this.endHandler)),this.errorHandler=Z=>{this.abort?this.abort(Z):this.error=Z},this.body.on("error",this.errorHandler)}else if(Cfe(i))this.body=i.byteLength?i:null;else if(ArrayBuffer.isView(i))this.body=i.buffer.byteLength?Buffer.from(i.buffer,i.byteOffset,i.byteLength):null;else if(i instanceof ArrayBuffer)this.body=i.byteLength?Buffer.from(i):null;else if(typeof i=="string")this.body=i.length?Buffer.from(i):null;else if(Qfe(i)||wfe(i)||_fe(i))this.body=i;else throw new Nt("body must be a string, a Buffer, a Readable stream, an iterable, or an async iterable");if(this.completed=!1,this.aborted=!1,this.upgrade=f||null,this.path=o?vfe(r,o):r,this.origin=t,this.protocol=Nfe(t),this.idempotent=a??(n==="HEAD"||n==="GET"),this.blocking=A??this.method!=="HEAD",this.reset=B??null,this.host=null,this.contentLength=null,this.contentType=null,this.headers=[],this.expectContinue=S??!1,Array.isArray(s)){if(s.length%2!==0)throw new Nt("headers array must be even");for(let Y=0;Y<s.length;Y+=2)kE(this,s[Y],s[Y+1])}else if(s&&typeof s=="object")if(Sfe(s))for(let Y of s){if(!Array.isArray(Y)||Y.length!==2)throw new Nt("headers must be in key-value pair format");kE(this,Y[0],Y[1])}else{let Y=Object.keys(s);for(let Z=0;Z<Y.length;++Z)kE(this,Y[Z],s[Y[Z]])}else if(s!=null)throw new Nt("headers must be an object or an array");Rfe(G,n,f),this.servername=_||Dfe(this.host)||null,this[Bi]=G,Nn.create.hasSubscribers&&Nn.create.publish({request:this})}onBodySent(t){if(Nn.bodyChunkSent.hasSubscribers&&Nn.bodyChunkSent.publish({request:this,chunk:t}),this[Bi].onBodySent)try{return this[Bi].onBodySent(t)}catch(r){this.abort(r)}}onRequestSent(){if(Nn.bodySent.hasSubscribers&&Nn.bodySent.publish({request:this}),this[Bi].onRequestSent)try{return this[Bi].onRequestSent()}catch(t){this.abort(t)}}onConnect(t){if(no(!this.aborted),no(!this.completed),this.error)t(this.error);else return this.abort=t,this[Bi].onConnect(t)}onResponseStarted(){return this[Bi].onResponseStarted?.()}onHeaders(t,r,n,i){no(!this.aborted),no(!this.completed),Nn.headers.hasSubscribers&&Nn.headers.publish({request:this,response:{statusCode:t,headers:r,statusText:i}});try{return this[Bi].onHeaders(t,r,n,i)}catch(s){this.abort(s)}}onData(t){no(!this.aborted),no(!this.completed),Nn.bodyChunkReceived.hasSubscribers&&Nn.bodyChunkReceived.publish({request:this,chunk:t});try{return this[Bi].onData(t)}catch(r){return this.abort(r),!1}}onUpgrade(t,r,n){return no(!this.aborted),no(!this.completed),this[Bi].onUpgrade(t,r,n)}onComplete(t){this.onFinally(),no(!this.aborted),no(!this.completed),this.completed=!0,Nn.trailers.hasSubscribers&&Nn.trailers.publish({request:this,trailers:t});try{return this[Bi].onComplete(t)}catch(r){this.onError(r)}}onError(t){if(this.onFinally(),Nn.error.hasSubscribers&&Nn.error.publish({request:this,error:t}),!this.aborted)return this.aborted=!0,this[Bi].onError(t)}onFinally(){this.errorHandler&&(this.body.off("error",this.errorHandler),this.errorHandler=null),this.endHandler&&(this.body.off("end",this.endHandler),this.endHandler=null)}addHeader(t,r){return kE(this,t,r),this}};function kE(e,t,r){if(r&&typeof r=="object"&&!Array.isArray(r))throw new Nt(`invalid ${t} header`);if(r===void 0)return;let n=s3[t];if(n===void 0&&(n=t.toLowerCase(),s3[n]===void 0&&!Ew(n)))throw new Nt("invalid header key");if(Array.isArray(r)){let i=[];for(let s=0;s<r.length;s++)if(typeof r[s]=="string"){if(!yw(r[s]))throw new Nt(`invalid ${t} header`);i.push(r[s])}else if(r[s]===null)i.push("");else{if(typeof r[s]=="object")throw new Nt(`invalid ${t} header`);i.push(`${r[s]}`)}r=i}else if(typeof r=="string"){if(!yw(r))throw new Nt(`invalid ${t} header`)}else r===null?r="":r=`${r}`;if(n==="host"){if(e.host!==null)throw new Nt("duplicate host header");if(typeof r!="string")throw new Nt("invalid host header");e.host=r}else if(n==="content-length"){if(e.contentLength!==null)throw new Nt("duplicate content-length header");if(e.contentLength=parseInt(r,10),!Number.isFinite(e.contentLength))throw new Nt("invalid content-length header")}else if(e.contentType===null&&n==="content-type")e.contentType=r,e.headers.push(t,r);else{if(n==="transfer-encoding"||n==="keep-alive"||n==="upgrade")throw new Nt(`invalid ${n} header`);if(n==="connection"){let i=typeof r=="string"?r:null;if(i===null)throw new Nt("invalid connection header");for(let s of i.toLowerCase().split(",")){let o=s.trim();if(!Ew(o))throw new Nt("invalid connection header");o==="close"&&(e.reset=!0)}}else{if(n==="expect")throw new Bfe("expect header not supported");e.headers.push(t,r)}}}o3.exports=mw});var u3=x((qTe,f3)=>{"use strict";function Ffe(){let e=globalThis._tlsModule;if(!e)throw new Error("node:tls bridge module is not available");return e}var A3={};for(let e of["connect","createServer","createSecureContext","TLSSocket","Server","checkServerIdentity","getCiphers","rootCertificates"])Object.defineProperty(A3,e,{enumerable:!0,get(){return Ffe()[e]}});f3.exports=A3});var Iw=x((YTe,h3)=>{"use strict";var kfe=pE(),c3=Wt(),l3=$t(),{InvalidArgumentError:xfe}=mr(),Bw,Ufe=class{constructor(t){this._maxCachedSessions=t,this._sessionCache=new Map,this._sessionRegistry=new FinalizationRegistry(r=>{if(this._sessionCache.size<this._maxCachedSessions)return;let n=this._sessionCache.get(r);n!==void 0&&n.deref()===void 0&&this._sessionCache.delete(r)})}get(t){let r=this._sessionCache.get(t);return r?r.deref():null}set(t,r){this._maxCachedSessions!==0&&(this._sessionCache.set(t,new WeakRef(r)),this._sessionRegistry.register(r,t))}};function Lfe({allowH2:e,useH2c:t,maxCachedSessions:r,socketPath:n,timeout:i,session:s,...o}){if(r!=null&&(!Number.isInteger(r)||r<0))throw new xfe("maxCachedSessions must be a positive integer or zero");let a={path:n,...o},A=new Ufe(r??100);return i=i??1e4,e=e??!1,function({hostname:l,host:p,protocol:B,port:S,servername:_,localAddress:N,httpSocket:P},U){let G;if(B==="https:"){Bw||(Bw=u3()),_=_||a.servername||l3.getServerName(p)||null;let Z=_||l;c3(Z);let ee=s||A.get(Z)||null;S=S||443,G=Bw.connect({highWaterMark:16384,...a,servername:_,session:ee,localAddress:N,ALPNProtocols:e?["http/1.1","h2"]:["http/1.1"],socket:P,port:S,host:l}),G.on("session",function(j){A.set(Z,j)})}else c3(!P,"httpSocket can only be sent on TLS update"),S=S||80,G=kfe.connect({highWaterMark:64*1024,...a,localAddress:N,port:S,host:l}),t===!0&&(G.alpnProtocol="h2");if(a.keepAlive==null||a.keepAlive){let Z=a.keepAliveInitialDelay===void 0?6e4:a.keepAliveInitialDelay;G.setKeepAlive(!0,Z)}let Y=l3.setupConnectTimeout(new WeakRef(G),{timeout:i,hostname:l,port:S});return G.setNoDelay(!0).once(B==="https:"?"secureConnect":"connect",function(){if(queueMicrotask(Y),U){let Z=U;U=null,Z(null,this)}}).on("error",function(Z){if(queueMicrotask(Y),U){let ee=U;U=null,ee(Z)}}),G}}h3.exports=Lfe});var d3=x(bw=>{"use strict";Object.defineProperty(bw,"__esModule",{value:!0});bw.enumToMap=Pfe;function Pfe(e,t=[],r=[]){let n=(t?.length??0)===0,i=(r?.length??0)===0;return Object.fromEntries(Object.entries(e).filter(([,s])=>typeof s=="number"&&(n||t.includes(s))&&(i||!r.includes(s))))}});var g3=x(q=>{"use strict";Object.defineProperty(q,"__esModule",{value:!0});q.SPECIAL_HEADERS=q.MINOR=q.MAJOR=q.HTAB_SP_VCHAR_OBS_TEXT=q.QUOTED_STRING=q.CONNECTION_TOKEN_CHARS=q.HEADER_CHARS=q.TOKEN=q.HEX=q.URL_CHAR=q.USERINFO_CHARS=q.MARK=q.ALPHANUM=q.NUM=q.HEX_MAP=q.NUM_MAP=q.ALPHA=q.STATUSES_HTTP=q.H_METHOD_MAP=q.METHOD_MAP=q.METHODS_RTSP=q.METHODS_ICE=q.METHODS_HTTP=q.HEADER_STATE=q.FINISH=q.STATUSES=q.METHODS=q.LENIENT_FLAGS=q.FLAGS=q.TYPE=q.ERROR=void 0;var Ofe=d3();q.ERROR={OK:0,INTERNAL:1,STRICT:2,CR_EXPECTED:25,LF_EXPECTED:3,UNEXPECTED_CONTENT_LENGTH:4,UNEXPECTED_SPACE:30,CLOSED_CONNECTION:5,INVALID_METHOD:6,INVALID_URL:7,INVALID_CONSTANT:8,INVALID_VERSION:9,INVALID_HEADER_TOKEN:10,INVALID_CONTENT_LENGTH:11,INVALID_CHUNK_SIZE:12,INVALID_STATUS:13,INVALID_EOF_STATE:14,INVALID_TRANSFER_ENCODING:15,CB_MESSAGE_BEGIN:16,CB_HEADERS_COMPLETE:17,CB_MESSAGE_COMPLETE:18,CB_CHUNK_HEADER:19,CB_CHUNK_COMPLETE:20,PAUSED:21,PAUSED_UPGRADE:22,PAUSED_H2_UPGRADE:23,USER:24,CB_URL_COMPLETE:26,CB_STATUS_COMPLETE:27,CB_METHOD_COMPLETE:32,CB_VERSION_COMPLETE:33,CB_HEADER_FIELD_COMPLETE:28,CB_HEADER_VALUE_COMPLETE:29,CB_CHUNK_EXTENSION_NAME_COMPLETE:34,CB_CHUNK_EXTENSION_VALUE_COMPLETE:35,CB_RESET:31,CB_PROTOCOL_COMPLETE:38};q.TYPE={BOTH:0,REQUEST:1,RESPONSE:2};q.FLAGS={CONNECTION_KEEP_ALIVE:1,CONNECTION_CLOSE:2,CONNECTION_UPGRADE:4,CHUNKED:8,UPGRADE:16,CONTENT_LENGTH:32,SKIPBODY:64,TRAILING:128,TRANSFER_ENCODING:512};q.LENIENT_FLAGS={HEADERS:1,CHUNKED_LENGTH:2,KEEP_ALIVE:4,TRANSFER_ENCODING:8,VERSION:16,DATA_AFTER_CLOSE:32,OPTIONAL_LF_AFTER_CR:64,OPTIONAL_CRLF_AFTER_CHUNK:128,OPTIONAL_CR_BEFORE_LF:256,SPACES_AFTER_CHUNK_SIZE:512};q.METHODS={DELETE:0,GET:1,HEAD:2,POST:3,PUT:4,CONNECT:5,OPTIONS:6,TRACE:7,COPY:8,LOCK:9,MKCOL:10,MOVE:11,PROPFIND:12,PROPPATCH:13,SEARCH:14,UNLOCK:15,BIND:16,REBIND:17,UNBIND:18,ACL:19,REPORT:20,MKACTIVITY:21,CHECKOUT:22,MERGE:23,"M-SEARCH":24,NOTIFY:25,SUBSCRIBE:26,UNSUBSCRIBE:27,PATCH:28,PURGE:29,MKCALENDAR:30,LINK:31,UNLINK:32,SOURCE:33,PRI:34,DESCRIBE:35,ANNOUNCE:36,SETUP:37,PLAY:38,PAUSE:39,TEARDOWN:40,GET_PARAMETER:41,SET_PARAMETER:42,REDIRECT:43,RECORD:44,FLUSH:45,QUERY:46};q.STATUSES={CONTINUE:100,SWITCHING_PROTOCOLS:101,PROCESSING:102,EARLY_HINTS:103,RESPONSE_IS_STALE:110,REVALIDATION_FAILED:111,DISCONNECTED_OPERATION:112,HEURISTIC_EXPIRATION:113,MISCELLANEOUS_WARNING:199,OK:200,CREATED:201,ACCEPTED:202,NON_AUTHORITATIVE_INFORMATION:203,NO_CONTENT:204,RESET_CONTENT:205,PARTIAL_CONTENT:206,MULTI_STATUS:207,ALREADY_REPORTED:208,TRANSFORMATION_APPLIED:214,IM_USED:226,MISCELLANEOUS_PERSISTENT_WARNING:299,MULTIPLE_CHOICES:300,MOVED_PERMANENTLY:301,FOUND:302,SEE_OTHER:303,NOT_MODIFIED:304,USE_PROXY:305,SWITCH_PROXY:306,TEMPORARY_REDIRECT:307,PERMANENT_REDIRECT:308,BAD_REQUEST:400,UNAUTHORIZED:401,PAYMENT_REQUIRED:402,FORBIDDEN:403,NOT_FOUND:404,METHOD_NOT_ALLOWED:405,NOT_ACCEPTABLE:406,PROXY_AUTHENTICATION_REQUIRED:407,REQUEST_TIMEOUT:408,CONFLICT:409,GONE:410,LENGTH_REQUIRED:411,PRECONDITION_FAILED:412,PAYLOAD_TOO_LARGE:413,URI_TOO_LONG:414,UNSUPPORTED_MEDIA_TYPE:415,RANGE_NOT_SATISFIABLE:416,EXPECTATION_FAILED:417,IM_A_TEAPOT:418,PAGE_EXPIRED:419,ENHANCE_YOUR_CALM:420,MISDIRECTED_REQUEST:421,UNPROCESSABLE_ENTITY:422,LOCKED:423,FAILED_DEPENDENCY:424,TOO_EARLY:425,UPGRADE_REQUIRED:426,PRECONDITION_REQUIRED:428,TOO_MANY_REQUESTS:429,REQUEST_HEADER_FIELDS_TOO_LARGE_UNOFFICIAL:430,REQUEST_HEADER_FIELDS_TOO_LARGE:431,LOGIN_TIMEOUT:440,NO_RESPONSE:444,RETRY_WITH:449,BLOCKED_BY_PARENTAL_CONTROL:450,UNAVAILABLE_FOR_LEGAL_REASONS:451,CLIENT_CLOSED_LOAD_BALANCED_REQUEST:460,INVALID_X_FORWARDED_FOR:463,REQUEST_HEADER_TOO_LARGE:494,SSL_CERTIFICATE_ERROR:495,SSL_CERTIFICATE_REQUIRED:496,HTTP_REQUEST_SENT_TO_HTTPS_PORT:497,INVALID_TOKEN:498,CLIENT_CLOSED_REQUEST:499,INTERNAL_SERVER_ERROR:500,NOT_IMPLEMENTED:501,BAD_GATEWAY:502,SERVICE_UNAVAILABLE:503,GATEWAY_TIMEOUT:504,HTTP_VERSION_NOT_SUPPORTED:505,VARIANT_ALSO_NEGOTIATES:506,INSUFFICIENT_STORAGE:507,LOOP_DETECTED:508,BANDWIDTH_LIMIT_EXCEEDED:509,NOT_EXTENDED:510,NETWORK_AUTHENTICATION_REQUIRED:511,WEB_SERVER_UNKNOWN_ERROR:520,WEB_SERVER_IS_DOWN:521,CONNECTION_TIMEOUT:522,ORIGIN_IS_UNREACHABLE:523,TIMEOUT_OCCURED:524,SSL_HANDSHAKE_FAILED:525,INVALID_SSL_CERTIFICATE:526,RAILGUN_ERROR:527,SITE_IS_OVERLOADED:529,SITE_IS_FROZEN:530,IDENTITY_PROVIDER_AUTHENTICATION_ERROR:561,NETWORK_READ_TIMEOUT:598,NETWORK_CONNECT_TIMEOUT:599};q.FINISH={SAFE:0,SAFE_WITH_CB:1,UNSAFE:2};q.HEADER_STATE={GENERAL:0,CONNECTION:1,CONTENT_LENGTH:2,TRANSFER_ENCODING:3,UPGRADE:4,CONNECTION_KEEP_ALIVE:5,CONNECTION_CLOSE:6,CONNECTION_UPGRADE:7,TRANSFER_ENCODING_CHUNKED:8};q.METHODS_HTTP=[q.METHODS.DELETE,q.METHODS.GET,q.METHODS.HEAD,q.METHODS.POST,q.METHODS.PUT,q.METHODS.CONNECT,q.METHODS.OPTIONS,q.METHODS.TRACE,q.METHODS.COPY,q.METHODS.LOCK,q.METHODS.MKCOL,q.METHODS.MOVE,q.METHODS.PROPFIND,q.METHODS.PROPPATCH,q.METHODS.SEARCH,q.METHODS.UNLOCK,q.METHODS.BIND,q.METHODS.REBIND,q.METHODS.UNBIND,q.METHODS.ACL,q.METHODS.REPORT,q.METHODS.MKACTIVITY,q.METHODS.CHECKOUT,q.METHODS.MERGE,q.METHODS["M-SEARCH"],q.METHODS.NOTIFY,q.METHODS.SUBSCRIBE,q.METHODS.UNSUBSCRIBE,q.METHODS.PATCH,q.METHODS.PURGE,q.METHODS.MKCALENDAR,q.METHODS.LINK,q.METHODS.UNLINK,q.METHODS.PRI,q.METHODS.SOURCE,q.METHODS.QUERY];q.METHODS_ICE=[q.METHODS.SOURCE];q.METHODS_RTSP=[q.METHODS.OPTIONS,q.METHODS.DESCRIBE,q.METHODS.ANNOUNCE,q.METHODS.SETUP,q.METHODS.PLAY,q.METHODS.PAUSE,q.METHODS.TEARDOWN,q.METHODS.GET_PARAMETER,q.METHODS.SET_PARAMETER,q.METHODS.REDIRECT,q.METHODS.RECORD,q.METHODS.FLUSH,q.METHODS.GET,q.METHODS.POST];q.METHOD_MAP=(0,Ofe.enumToMap)(q.METHODS);q.H_METHOD_MAP=Object.fromEntries(Object.entries(q.METHODS).filter(([e])=>e.startsWith("H")));q.STATUSES_HTTP=[q.STATUSES.CONTINUE,q.STATUSES.SWITCHING_PROTOCOLS,q.STATUSES.PROCESSING,q.STATUSES.EARLY_HINTS,q.STATUSES.RESPONSE_IS_STALE,q.STATUSES.REVALIDATION_FAILED,q.STATUSES.DISCONNECTED_OPERATION,q.STATUSES.HEURISTIC_EXPIRATION,q.STATUSES.MISCELLANEOUS_WARNING,q.STATUSES.OK,q.STATUSES.CREATED,q.STATUSES.ACCEPTED,q.STATUSES.NON_AUTHORITATIVE_INFORMATION,q.STATUSES.NO_CONTENT,q.STATUSES.RESET_CONTENT,q.STATUSES.PARTIAL_CONTENT,q.STATUSES.MULTI_STATUS,q.STATUSES.ALREADY_REPORTED,q.STATUSES.TRANSFORMATION_APPLIED,q.STATUSES.IM_USED,q.STATUSES.MISCELLANEOUS_PERSISTENT_WARNING,q.STATUSES.MULTIPLE_CHOICES,q.STATUSES.MOVED_PERMANENTLY,q.STATUSES.FOUND,q.STATUSES.SEE_OTHER,q.STATUSES.NOT_MODIFIED,q.STATUSES.USE_PROXY,q.STATUSES.SWITCH_PROXY,q.STATUSES.TEMPORARY_REDIRECT,q.STATUSES.PERMANENT_REDIRECT,q.STATUSES.BAD_REQUEST,q.STATUSES.UNAUTHORIZED,q.STATUSES.PAYMENT_REQUIRED,q.STATUSES.FORBIDDEN,q.STATUSES.NOT_FOUND,q.STATUSES.METHOD_NOT_ALLOWED,q.STATUSES.NOT_ACCEPTABLE,q.STATUSES.PROXY_AUTHENTICATION_REQUIRED,q.STATUSES.REQUEST_TIMEOUT,q.STATUSES.CONFLICT,q.STATUSES.GONE,q.STATUSES.LENGTH_REQUIRED,q.STATUSES.PRECONDITION_FAILED,q.STATUSES.PAYLOAD_TOO_LARGE,q.STATUSES.URI_TOO_LONG,q.STATUSES.UNSUPPORTED_MEDIA_TYPE,q.STATUSES.RANGE_NOT_SATISFIABLE,q.STATUSES.EXPECTATION_FAILED,q.STATUSES.IM_A_TEAPOT,q.STATUSES.PAGE_EXPIRED,q.STATUSES.ENHANCE_YOUR_CALM,q.STATUSES.MISDIRECTED_REQUEST,q.STATUSES.UNPROCESSABLE_ENTITY,q.STATUSES.LOCKED,q.STATUSES.FAILED_DEPENDENCY,q.STATUSES.TOO_EARLY,q.STATUSES.UPGRADE_REQUIRED,q.STATUSES.PRECONDITION_REQUIRED,q.STATUSES.TOO_MANY_REQUESTS,q.STATUSES.REQUEST_HEADER_FIELDS_TOO_LARGE_UNOFFICIAL,q.STATUSES.REQUEST_HEADER_FIELDS_TOO_LARGE,q.STATUSES.LOGIN_TIMEOUT,q.STATUSES.NO_RESPONSE,q.STATUSES.RETRY_WITH,q.STATUSES.BLOCKED_BY_PARENTAL_CONTROL,q.STATUSES.UNAVAILABLE_FOR_LEGAL_REASONS,q.STATUSES.CLIENT_CLOSED_LOAD_BALANCED_REQUEST,q.STATUSES.INVALID_X_FORWARDED_FOR,q.STATUSES.REQUEST_HEADER_TOO_LARGE,q.STATUSES.SSL_CERTIFICATE_ERROR,q.STATUSES.SSL_CERTIFICATE_REQUIRED,q.STATUSES.HTTP_REQUEST_SENT_TO_HTTPS_PORT,q.STATUSES.INVALID_TOKEN,q.STATUSES.CLIENT_CLOSED_REQUEST,q.STATUSES.INTERNAL_SERVER_ERROR,q.STATUSES.NOT_IMPLEMENTED,q.STATUSES.BAD_GATEWAY,q.STATUSES.SERVICE_UNAVAILABLE,q.STATUSES.GATEWAY_TIMEOUT,q.STATUSES.HTTP_VERSION_NOT_SUPPORTED,q.STATUSES.VARIANT_ALSO_NEGOTIATES,q.STATUSES.INSUFFICIENT_STORAGE,q.STATUSES.LOOP_DETECTED,q.STATUSES.BANDWIDTH_LIMIT_EXCEEDED,q.STATUSES.NOT_EXTENDED,q.STATUSES.NETWORK_AUTHENTICATION_REQUIRED,q.STATUSES.WEB_SERVER_UNKNOWN_ERROR,q.STATUSES.WEB_SERVER_IS_DOWN,q.STATUSES.CONNECTION_TIMEOUT,q.STATUSES.ORIGIN_IS_UNREACHABLE,q.STATUSES.TIMEOUT_OCCURED,q.STATUSES.SSL_HANDSHAKE_FAILED,q.STATUSES.INVALID_SSL_CERTIFICATE,q.STATUSES.RAILGUN_ERROR,q.STATUSES.SITE_IS_OVERLOADED,q.STATUSES.SITE_IS_FROZEN,q.STATUSES.IDENTITY_PROVIDER_AUTHENTICATION_ERROR,q.STATUSES.NETWORK_READ_TIMEOUT,q.STATUSES.NETWORK_CONNECT_TIMEOUT];q.ALPHA=[];for(let e=65;e<=90;e++)q.ALPHA.push(String.fromCharCode(e)),q.ALPHA.push(String.fromCharCode(e+32));q.NUM_MAP={0:0,1:1,2:2,3:3,4:4,5:5,6:6,7:7,8:8,9:9};q.HEX_MAP={0:0,1:1,2:2,3:3,4:4,5:5,6:6,7:7,8:8,9:9,A:10,B:11,C:12,D:13,E:14,F:15,a:10,b:11,c:12,d:13,e:14,f:15};q.NUM=["0","1","2","3","4","5","6","7","8","9"];q.ALPHANUM=q.ALPHA.concat(q.NUM);q.MARK=["-","_",".","!","~","*","'","(",")"];q.USERINFO_CHARS=q.ALPHANUM.concat(q.MARK).concat(["%",";",":","&","=","+","$",","]);q.URL_CHAR=["!",'"',"$","%","&","'","(",")","*","+",",","-",".","/",":",";","<","=",">","@","[","\\","]","^","_","`","{","|","}","~"].concat(q.ALPHANUM);q.HEX=q.NUM.concat(["a","b","c","d","e","f","A","B","C","D","E","F"]);q.TOKEN=["!","#","$","%","&","'","*","+","-",".","^","_","`","|","~"].concat(q.ALPHANUM);q.HEADER_CHARS=["	"];for(let e=32;e<=255;e++)e!==127&&q.HEADER_CHARS.push(e);q.CONNECTION_TOKEN_CHARS=q.HEADER_CHARS.filter(e=>e!==44);q.QUOTED_STRING=["	"," "];for(let e=33;e<=255;e++)e!==34&&e!==92&&q.QUOTED_STRING.push(e);q.HTAB_SP_VCHAR_OBS_TEXT=["	"," "];for(let e=33;e<=126;e++)q.HTAB_SP_VCHAR_OBS_TEXT.push(e);for(let e=128;e<=255;e++)q.HTAB_SP_VCHAR_OBS_TEXT.push(e);q.MAJOR=q.NUM_MAP;q.MINOR=q.MAJOR;q.SPECIAL_HEADERS={connection:q.HEADER_STATE.CONNECTION,"content-length":q.HEADER_STATE.CONTENT_LENGTH,"proxy-connection":q.HEADER_STATE.CONNECTION,"transfer-encoding":q.HEADER_STATE.TRANSFER_ENCODING,upgrade:q.HEADER_STATE.UPGRADE};q.default={ERROR:q.ERROR,TYPE:q.TYPE,FLAGS:q.FLAGS,LENIENT_FLAGS:q.LENIENT_FLAGS,METHODS:q.METHODS,STATUSES:q.STATUSES,FINISH:q.FINISH,HEADER_STATE:q.HEADER_STATE,ALPHA:q.ALPHA,NUM_MAP:q.NUM_MAP,HEX_MAP:q.HEX_MAP,NUM:q.NUM,ALPHANUM:q.ALPHANUM,MARK:q.MARK,USERINFO_CHARS:q.USERINFO_CHARS,URL_CHAR:q.URL_CHAR,HEX:q.HEX,TOKEN:q.TOKEN,HEADER_CHARS:q.HEADER_CHARS,CONNECTION_TOKEN_CHARS:q.CONNECTION_TOKEN_CHARS,QUOTED_STRING:q.QUOTED_STRING,HTAB_SP_VCHAR_OBS_TEXT:q.HTAB_SP_VCHAR_OBS_TEXT,MAJOR:q.MAJOR,MINOR:q.MINOR,SPECIAL_HEADERS:q.SPECIAL_HEADERS,METHODS_HTTP:q.METHODS_HTTP,METHODS_ICE:q.METHODS_ICE,METHODS_RTSP:q.METHODS_RTSP,METHOD_MAP:q.METHOD_MAP,H_METHOD_MAP:q.H_METHOD_MAP,STATUSES_HTTP:q.STATUSES_HTTP}});var Qw=x((JTe,p3)=>{"use strict";var{Buffer:Hfe}=Gr(),qfe="AGFzbQEAAAABJwdgAX8Bf2ADf39/AX9gAn9/AGABfwBgBH9/f38Bf2AAAGADf39/AALLAQgDZW52GHdhc21fb25faGVhZGVyc19jb21wbGV0ZQAEA2VudhV3YXNtX29uX21lc3NhZ2VfYmVnaW4AAANlbnYLd2FzbV9vbl91cmwAAQNlbnYOd2FzbV9vbl9zdGF0dXMAAQNlbnYUd2FzbV9vbl9oZWFkZXJfZmllbGQAAQNlbnYUd2FzbV9vbl9oZWFkZXJfdmFsdWUAAQNlbnYMd2FzbV9vbl9ib2R5AAEDZW52GHdhc21fb25fbWVzc2FnZV9jb21wbGV0ZQAAAzU0BQYAAAMAAAAAAAADAQMAAwMDAAACAAAAAAICAgICAgICAgIBAQEBAQEBAQEBAwAAAwAAAAQFAXABExMFAwEAAgYIAX8BQcDZBAsHxQcoBm1lbW9yeQIAC19pbml0aWFsaXplAAgZX19pbmRpcmVjdF9mdW5jdGlvbl90YWJsZQEAC2xsaHR0cF9pbml0AAkYbGxodHRwX3Nob3VsZF9rZWVwX2FsaXZlADcMbGxodHRwX2FsbG9jAAsGbWFsbG9jADkLbGxodHRwX2ZyZWUADARmcmVlAAwPbGxodHRwX2dldF90eXBlAA0VbGxodHRwX2dldF9odHRwX21ham9yAA4VbGxodHRwX2dldF9odHRwX21pbm9yAA8RbGxodHRwX2dldF9tZXRob2QAEBZsbGh0dHBfZ2V0X3N0YXR1c19jb2RlABESbGxodHRwX2dldF91cGdyYWRlABIMbGxodHRwX3Jlc2V0ABMObGxodHRwX2V4ZWN1dGUAFBRsbGh0dHBfc2V0dGluZ3NfaW5pdAAVDWxsaHR0cF9maW5pc2gAFgxsbGh0dHBfcGF1c2UAFw1sbGh0dHBfcmVzdW1lABgbbGxodHRwX3Jlc3VtZV9hZnRlcl91cGdyYWRlABkQbGxodHRwX2dldF9lcnJubwAaF2xsaHR0cF9nZXRfZXJyb3JfcmVhc29uABsXbGxodHRwX3NldF9lcnJvcl9yZWFzb24AHBRsbGh0dHBfZ2V0X2Vycm9yX3BvcwAdEWxsaHR0cF9lcnJub19uYW1lAB4SbGxodHRwX21ldGhvZF9uYW1lAB8SbGxodHRwX3N0YXR1c19uYW1lACAabGxodHRwX3NldF9sZW5pZW50X2hlYWRlcnMAISFsbGh0dHBfc2V0X2xlbmllbnRfY2h1bmtlZF9sZW5ndGgAIh1sbGh0dHBfc2V0X2xlbmllbnRfa2VlcF9hbGl2ZQAjJGxsaHR0cF9zZXRfbGVuaWVudF90cmFuc2Zlcl9lbmNvZGluZwAkGmxsaHR0cF9zZXRfbGVuaWVudF92ZXJzaW9uACUjbGxodHRwX3NldF9sZW5pZW50X2RhdGFfYWZ0ZXJfY2xvc2UAJidsbGh0dHBfc2V0X2xlbmllbnRfb3B0aW9uYWxfbGZfYWZ0ZXJfY3IAJyxsbGh0dHBfc2V0X2xlbmllbnRfb3B0aW9uYWxfY3JsZl9hZnRlcl9jaHVuawAoKGxsaHR0cF9zZXRfbGVuaWVudF9vcHRpb25hbF9jcl9iZWZvcmVfbGYAKSpsbGh0dHBfc2V0X2xlbmllbnRfc3BhY2VzX2FmdGVyX2NodW5rX3NpemUAKhhsbGh0dHBfbWVzc2FnZV9uZWVkc19lb2YANgkYAQBBAQsSAQIDBAUKBgcyNDMuKy8tLDAxCq/ZAjQWAEHA1QAoAgAEQAALQcDVAEEBNgIACxQAIAAQOCAAIAI2AjggACABOgAoCxQAIAAgAC8BNCAALQAwIAAQNxAACx4BAX9BwAAQOiIBEDggAUGACDYCOCABIAA6ACggAQuPDAEHfwJAIABFDQAgAEEIayIBIABBBGsoAgAiAEF4cSIEaiEFAkAgAEEBcQ0AIABBA3FFDQEgASABKAIAIgBrIgFB1NUAKAIASQ0BIAAgBGohBAJAAkBB2NUAKAIAIAFHBEAgAEH/AU0EQCAAQQN2IQMgASgCCCIAIAEoAgwiAkYEQEHE1QBBxNUAKAIAQX4gA3dxNgIADAULIAIgADYCCCAAIAI2AgwMBAsgASgCGCEGIAEgASgCDCIARwRAIAAgASgCCCICNgIIIAIgADYCDAwDCyABQRRqIgMoAgAiAkUEQCABKAIQIgJFDQIgAUEQaiEDCwNAIAMhByACIgBBFGoiAygCACICDQAgAEEQaiEDIAAoAhAiAg0ACyAHQQA2AgAMAgsgBSgCBCIAQQNxQQNHDQIgBSAAQX5xNgIEQczVACAENgIAIAUgBDYCACABIARBAXI2AgQMAwtBACEACyAGRQ0AAkAgASgCHCICQQJ0QfTXAGoiAygCACABRgRAIAMgADYCACAADQFByNUAQcjVACgCAEF+IAJ3cTYCAAwCCyAGQRBBFCAGKAIQIAFGG2ogADYCACAARQ0BCyAAIAY2AhggASgCECICBEAgACACNgIQIAIgADYCGAsgAUEUaigCACICRQ0AIABBFGogAjYCACACIAA2AhgLIAEgBU8NACAFKAIEIgBBAXFFDQACQAJAAkACQCAAQQJxRQRAQdzVACgCACAFRgRAQdzVACABNgIAQdDVAEHQ1QAoAgAgBGoiADYCACABIABBAXI2AgQgAUHY1QAoAgBHDQZBzNUAQQA2AgBB2NUAQQA2AgAMBgtB2NUAKAIAIAVGBEBB2NUAIAE2AgBBzNUAQczVACgCACAEaiIANgIAIAEgAEEBcjYCBCAAIAFqIAA2AgAMBgsgAEF4cSAEaiEEIABB/wFNBEAgAEEDdiEDIAUoAggiACAFKAIMIgJGBEBBxNUAQcTVACgCAEF+IAN3cTYCAAwFCyACIAA2AgggACACNgIMDAQLIAUoAhghBiAFIAUoAgwiAEcEQEHU1QAoAgAaIAAgBSgCCCICNgIIIAIgADYCDAwDCyAFQRRqIgMoAgAiAkUEQCAFKAIQIgJFDQIgBUEQaiEDCwNAIAMhByACIgBBFGoiAygCACICDQAgAEEQaiEDIAAoAhAiAg0ACyAHQQA2AgAMAgsgBSAAQX5xNgIEIAEgBGogBDYCACABIARBAXI2AgQMAwtBACEACyAGRQ0AAkAgBSgCHCICQQJ0QfTXAGoiAygCACAFRgRAIAMgADYCACAADQFByNUAQcjVACgCAEF+IAJ3cTYCAAwCCyAGQRBBFCAGKAIQIAVGG2ogADYCACAARQ0BCyAAIAY2AhggBSgCECICBEAgACACNgIQIAIgADYCGAsgBUEUaigCACICRQ0AIABBFGogAjYCACACIAA2AhgLIAEgBGogBDYCACABIARBAXI2AgQgAUHY1QAoAgBHDQBBzNUAIAQ2AgAMAQsgBEH/AU0EQCAEQXhxQezVAGohAAJ/QcTVACgCACICQQEgBEEDdnQiA3FFBEBBxNUAIAIgA3I2AgAgAAwBCyAAKAIICyICIAE2AgwgACABNgIIIAEgADYCDCABIAI2AggMAQtBHyECIARB////B00EQCAEQSYgBEEIdmciAGt2QQFxIABBAXRrQT5qIQILIAEgAjYCHCABQgA3AhAgAkECdEH01wBqIQACQEHI1QAoAgAiA0EBIAJ0IgdxRQRAIAAgATYCAEHI1QAgAyAHcjYCACABIAA2AhggASABNgIIIAEgATYCDAwBCyAEQRkgAkEBdmtBACACQR9HG3QhAiAAKAIAIQACQANAIAAiAygCBEF4cSAERg0BIAJBHXYhACACQQF0IQIgAyAAQQRxakEQaiIHKAIAIgANAAsgByABNgIAIAEgAzYCGCABIAE2AgwgASABNgIIDAELIAMoAggiACABNgIMIAMgATYCCCABQQA2AhggASADNgIMIAEgADYCCAtB5NUAQeTVACgCAEEBayIAQX8gABs2AgALCwcAIAAtACgLBwAgAC0AKgsHACAALQArCwcAIAAtACkLBwAgAC8BNAsHACAALQAwC0ABBH8gACgCGCEBIAAvAS4hAiAALQAoIQMgACgCOCEEIAAQOCAAIAQ2AjggACADOgAoIAAgAjsBLiAAIAE2AhgL5YUCAgd/A34gASACaiEEAkAgACIDKAIMIgANACADKAIEBEAgAyABNgIECyMAQRBrIgkkAAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAn8CQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkAgAygCHCICQQJrDvwBAfkBAgMEBQYHCAkKCwwNDg8QERL4ARP3ARQV9gEWF/UBGBkaGxwdHh8g/QH7ASH0ASIjJCUmJygpKivzASwtLi8wMTLyAfEBMzTwAe8BNTY3ODk6Ozw9Pj9AQUJDREVGR0hJSktMTU5P+gFQUVJT7gHtAVTsAVXrAVZXWFla6gFbXF1eX2BhYmNkZWZnaGlqa2xtbm9wcXJzdHV2d3h5ent8fX5/gAGBAYIBgwGEAYUBhgGHAYgBiQGKAYsBjAGNAY4BjwGQAZEBkgGTAZQBlQGWAZcBmAGZAZoBmwGcAZ0BngGfAaABoQGiAaMBpAGlAaYBpwGoAakBqgGrAawBrQGuAa8BsAGxAbIBswG0AbUBtgG3AbgBuQG6AbsBvAG9Ab4BvwHAAcEBwgHDAcQBxQHGAccByAHJAcoBywHMAc0BzgHpAegBzwHnAdAB5gHRAdIB0wHUAeUB1QHWAdcB2AHZAdoB2wHcAd0B3gHfAeAB4QHiAeMBAPwBC0EADOMBC0EODOIBC0ENDOEBC0EPDOABC0EQDN8BC0ETDN4BC0EUDN0BC0EVDNwBC0EWDNsBC0EXDNoBC0EYDNkBC0EZDNgBC0EaDNcBC0EbDNYBC0EcDNUBC0EdDNQBC0EeDNMBC0EfDNIBC0EgDNEBC0EhDNABC0EIDM8BC0EiDM4BC0EkDM0BC0EjDMwBC0EHDMsBC0ElDMoBC0EmDMkBC0EnDMgBC0EoDMcBC0ESDMYBC0ERDMUBC0EpDMQBC0EqDMMBC0ErDMIBC0EsDMEBC0HeAQzAAQtBLgy/AQtBLwy+AQtBMAy9AQtBMQy8AQtBMgy7AQtBMwy6AQtBNAy5AQtB3wEMuAELQTUMtwELQTkMtgELQQwMtQELQTYMtAELQTcMswELQTgMsgELQT4MsQELQToMsAELQeABDK8BC0ELDK4BC0E/DK0BC0E7DKwBC0EKDKsBC0E8DKoBC0E9DKkBC0HhAQyoAQtBwQAMpwELQcAADKYBC0HCAAylAQtBCQykAQtBLQyjAQtBwwAMogELQcQADKEBC0HFAAygAQtBxgAMnwELQccADJ4BC0HIAAydAQtByQAMnAELQcoADJsBC0HLAAyaAQtBzAAMmQELQc0ADJgBC0HOAAyXAQtBzwAMlgELQdAADJUBC0HRAAyUAQtB0gAMkwELQdMADJIBC0HVAAyRAQtB1AAMkAELQdYADI8BC0HXAAyOAQtB2AAMjQELQdkADIwBC0HaAAyLAQtB2wAMigELQdwADIkBC0HdAAyIAQtB3gAMhwELQd8ADIYBC0HgAAyFAQtB4QAMhAELQeIADIMBC0HjAAyCAQtB5AAMgQELQeUADIABC0HiAQx/C0HmAAx+C0HnAAx9C0EGDHwLQegADHsLQQUMegtB6QAMeQtBBAx4C0HqAAx3C0HrAAx2C0HsAAx1C0HtAAx0C0EDDHMLQe4ADHILQe8ADHELQfAADHALQfIADG8LQfEADG4LQfMADG0LQfQADGwLQfUADGsLQfYADGoLQQIMaQtB9wAMaAtB+AAMZwtB+QAMZgtB+gAMZQtB+wAMZAtB/AAMYwtB/QAMYgtB/gAMYQtB/wAMYAtBgAEMXwtBgQEMXgtBggEMXQtBgwEMXAtBhAEMWwtBhQEMWgtBhgEMWQtBhwEMWAtBiAEMVwtBiQEMVgtBigEMVQtBiwEMVAtBjAEMUwtBjQEMUgtBjgEMUQtBjwEMUAtBkAEMTwtBkQEMTgtBkgEMTQtBkwEMTAtBlAEMSwtBlQEMSgtBlgEMSQtBlwEMSAtBmAEMRwtBmQEMRgtBmgEMRQtBmwEMRAtBnAEMQwtBnQEMQgtBngEMQQtBnwEMQAtBoAEMPwtBoQEMPgtBogEMPQtBowEMPAtBpAEMOwtBpQEMOgtBpgEMOQtBpwEMOAtBqAEMNwtBqQEMNgtBqgEMNQtBqwEMNAtBrAEMMwtBrQEMMgtBrgEMMQtBrwEMMAtBsAEMLwtBsQEMLgtBsgEMLQtBswEMLAtBtAEMKwtBtQEMKgtBtgEMKQtBtwEMKAtBuAEMJwtBuQEMJgtBugEMJQtBuwEMJAtBvAEMIwtBvQEMIgtBvgEMIQtBvwEMIAtBwAEMHwtBwQEMHgtBwgEMHQtBAQwcC0HDAQwbC0HEAQwaC0HFAQwZC0HGAQwYC0HHAQwXC0HIAQwWC0HJAQwVC0HKAQwUC0HLAQwTC0HMAQwSC0HNAQwRC0HOAQwQC0HPAQwPC0HQAQwOC0HRAQwNC0HSAQwMC0HTAQwLC0HUAQwKC0HVAQwJC0HWAQwIC0HjAQwHC0HXAQwGC0HYAQwFC0HZAQwEC0HaAQwDC0HbAQwCC0HdAQwBC0HcAQshAgNAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQCADAn8CQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAn8CQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAn8CQAJAAkACQAJAAkACQAJ/AkACQAJAAn8CQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAIAMCfwJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACfwJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkAgAg7jAQABAgMEBQYHCAkKCwwNDg8QERITFBUWFxgZGhscHR4fICEjJCUnKCmeA5sDmgORA4oDgwOAA/0C+wL4AvIC8QLvAu0C6ALnAuYC5QLkAtwC2wLaAtkC2ALXAtYC1QLPAs4CzALLAsoCyQLIAscCxgLEAsMCvgK8AroCuQK4ArcCtgK1ArQCswKyArECsAKuAq0CqQKoAqcCpgKlAqQCowKiAqECoAKfApgCkAKMAosCigKBAv4B/QH8AfsB+gH5AfgB9wH1AfMB8AHrAekB6AHnAeYB5QHkAeMB4gHhAeAB3wHeAd0B3AHaAdkB2AHXAdYB1QHUAdMB0gHRAdABzwHOAc0BzAHLAcoByQHIAccBxgHFAcQBwwHCAcEBwAG/Ab4BvQG8AbsBugG5AbgBtwG2AbUBtAGzAbIBsQGwAa8BrgGtAawBqwGqAakBqAGnAaYBpQGkAaMBogGfAZ4BmQGYAZcBlgGVAZQBkwGSAZEBkAGPAY0BjAGHAYYBhQGEAYMBggF9fHt6eXZ1dFBRUlNUVQsgASAERw1yQf0BIQIMvgMLIAEgBEcNmAFB2wEhAgy9AwsgASAERw3xAUGOASECDLwDCyABIARHDfwBQYQBIQIMuwMLIAEgBEcNigJB/wAhAgy6AwsgASAERw2RAkH9ACECDLkDCyABIARHDZQCQfsAIQIMuAMLIAEgBEcNHkEeIQIMtwMLIAEgBEcNGUEYIQIMtgMLIAEgBEcNygJBzQAhAgy1AwsgASAERw3VAkHGACECDLQDCyABIARHDdYCQcMAIQIMswMLIAEgBEcN3AJBOCECDLIDCyADLQAwQQFGDa0DDIkDC0EAIQACQAJAAkAgAy0AKkUNACADLQArRQ0AIAMvATIiAkECcUUNAQwCCyADLwEyIgJBAXFFDQELQQEhACADLQAoQQFGDQAgAy8BNCIGQeQAa0HkAEkNACAGQcwBRg0AIAZBsAJGDQAgAkHAAHENAEEAIQAgAkGIBHFBgARGDQAgAkEocUEARyEACyADQQA7ATIgA0EAOgAxAkAgAEUEQCADQQA6ADEgAy0ALkEEcQ0BDLEDCyADQgA3AyALIANBADoAMSADQQE6ADYMSAtBACEAAkAgAygCOCICRQ0AIAIoAjAiAkUNACADIAIRAAAhAAsgAEUNSCAAQRVHDWIgA0EENgIcIAMgATYCFCADQdIbNgIQIANBFTYCDEEAIQIMrwMLIAEgBEYEQEEGIQIMrwMLIAEtAABBCkcNGSABQQFqIQEMGgsgA0IANwMgQRIhAgyUAwsgASAERw2KA0EjIQIMrAMLIAEgBEYEQEEHIQIMrAMLAkACQCABLQAAQQprDgQBGBgAGAsgAUEBaiEBQRAhAgyTAwsgAUEBaiEBIANBL2otAABBAXENF0EAIQIgA0EANgIcIAMgATYCFCADQZkgNgIQIANBGTYCDAyrAwsgAyADKQMgIgwgBCABa60iCn0iC0IAIAsgDFgbNwMgIAogDFoNGEEIIQIMqgMLIAEgBEcEQCADQQk2AgggAyABNgIEQRQhAgyRAwtBCSECDKkDCyADKQMgUA2uAgxDCyABIARGBEBBCyECDKgDCyABLQAAQQpHDRYgAUEBaiEBDBcLIANBL2otAABBAXFFDRkMJgtBACEAAkAgAygCOCICRQ0AIAIoAlAiAkUNACADIAIRAAAhAAsgAA0ZDEILQQAhAAJAIAMoAjgiAkUNACACKAJQIgJFDQAgAyACEQAAIQALIAANGgwkC0EAIQACQCADKAI4IgJFDQAgAigCUCICRQ0AIAMgAhEAACEACyAADRsMMgsgA0Evai0AAEEBcUUNHAwiC0EAIQACQCADKAI4IgJFDQAgAigCVCICRQ0AIAMgAhEAACEACyAADRwMQgtBACEAAkAgAygCOCICRQ0AIAIoAlQiAkUNACADIAIRAAAhAAsgAA0dDCALIAEgBEYEQEETIQIMoAMLAkAgAS0AACIAQQprDgQfIyMAIgsgAUEBaiEBDB8LQQAhAAJAIAMoAjgiAkUNACACKAJUIgJFDQAgAyACEQAAIQALIAANIgxCCyABIARGBEBBFiECDJ4DCyABLQAAQcDBAGotAABBAUcNIwyDAwsCQANAIAEtAABBsDtqLQAAIgBBAUcEQAJAIABBAmsOAgMAJwsgAUEBaiEBQSEhAgyGAwsgBCABQQFqIgFHDQALQRghAgydAwsgAygCBCEAQQAhAiADQQA2AgQgAyAAIAFBAWoiARA0IgANIQxBC0EAIQACQCADKAI4IgJFDQAgAigCVCICRQ0AIAMgAhEAACEACyAADSMMKgsgASAERgRAQRwhAgybAwsgA0EKNgIIIAMgATYCBEEAIQACQCADKAI4IgJFDQAgAigCUCICRQ0AIAMgAhEAACEACyAADSVBJCECDIEDCyABIARHBEADQCABLQAAQbA9ai0AACIAQQNHBEAgAEEBaw4FGBomggMlJgsgBCABQQFqIgFHDQALQRshAgyaAwtBGyECDJkDCwNAIAEtAABBsD9qLQAAIgBBA0cEQCAAQQFrDgUPEScTJicLIAQgAUEBaiIBRw0AC0EeIQIMmAMLIAEgBEcEQCADQQs2AgggAyABNgIEQQchAgz/AgtBHyECDJcDCyABIARGBEBBICECDJcDCwJAIAEtAABBDWsOFC4/Pz8/Pz8/Pz8/Pz8/Pz8/Pz8APwtBACECIANBADYCHCADQb8LNgIQIANBAjYCDCADIAFBAWo2AhQMlgMLIANBL2ohAgNAIAEgBEYEQEEhIQIMlwMLAkACQAJAIAEtAAAiAEEJaw4YAgApKQEpKSkpKSkpKSkpKSkpKSkpKSkCJwsgAUEBaiEBIANBL2otAABBAXFFDQoMGAsgAUEBaiEBDBcLIAFBAWohASACLQAAQQJxDQALQQAhAiADQQA2AhwgAyABNgIUIANBnxU2AhAgA0EMNgIMDJUDCyADLQAuQYABcUUNAQtBACEAAkAgAygCOCICRQ0AIAIoAlwiAkUNACADIAIRAAAhAAsgAEUN5gIgAEEVRgRAIANBJDYCHCADIAE2AhQgA0GbGzYCECADQRU2AgxBACECDJQDC0EAIQIgA0EANgIcIAMgATYCFCADQZAONgIQIANBFDYCDAyTAwtBACECIANBADYCHCADIAE2AhQgA0G+IDYCECADQQI2AgwMkgMLIAMoAgQhAEEAIQIgA0EANgIEIAMgACABIAynaiIBEDIiAEUNKyADQQc2AhwgAyABNgIUIAMgADYCDAyRAwsgAy0ALkHAAHFFDQELQQAhAAJAIAMoAjgiAkUNACACKAJYIgJFDQAgAyACEQAAIQALIABFDSsgAEEVRgRAIANBCjYCHCADIAE2AhQgA0HrGTYCECADQRU2AgxBACECDJADC0EAIQIgA0EANgIcIAMgATYCFCADQZMMNgIQIANBEzYCDAyPAwtBACECIANBADYCHCADIAE2AhQgA0GCFTYCECADQQI2AgwMjgMLQQAhAiADQQA2AhwgAyABNgIUIANB3RQ2AhAgA0EZNgIMDI0DC0EAIQIgA0EANgIcIAMgATYCFCADQeYdNgIQIANBGTYCDAyMAwsgAEEVRg09QQAhAiADQQA2AhwgAyABNgIUIANB0A82AhAgA0EiNgIMDIsDCyADKAIEIQBBACECIANBADYCBCADIAAgARAzIgBFDSggA0ENNgIcIAMgATYCFCADIAA2AgwMigMLIABBFUYNOkEAIQIgA0EANgIcIAMgATYCFCADQdAPNgIQIANBIjYCDAyJAwsgAygCBCEAQQAhAiADQQA2AgQgAyAAIAEQMyIARQRAIAFBAWohAQwoCyADQQ42AhwgAyAANgIMIAMgAUEBajYCFAyIAwsgAEEVRg03QQAhAiADQQA2AhwgAyABNgIUIANB0A82AhAgA0EiNgIMDIcDCyADKAIEIQBBACECIANBADYCBCADIAAgARAzIgBFBEAgAUEBaiEBDCcLIANBDzYCHCADIAA2AgwgAyABQQFqNgIUDIYDC0EAIQIgA0EANgIcIAMgATYCFCADQeIXNgIQIANBGTYCDAyFAwsgAEEVRg0zQQAhAiADQQA2AhwgAyABNgIUIANB1gw2AhAgA0EjNgIMDIQDCyADKAIEIQBBACECIANBADYCBCADIAAgARA0IgBFDSUgA0ERNgIcIAMgATYCFCADIAA2AgwMgwMLIABBFUYNMEEAIQIgA0EANgIcIAMgATYCFCADQdYMNgIQIANBIzYCDAyCAwsgAygCBCEAQQAhAiADQQA2AgQgAyAAIAEQNCIARQRAIAFBAWohAQwlCyADQRI2AhwgAyAANgIMIAMgAUEBajYCFAyBAwsgA0Evai0AAEEBcUUNAQtBFyECDOYCC0EAIQIgA0EANgIcIAMgATYCFCADQeIXNgIQIANBGTYCDAz+AgsgAEE7Rw0AIAFBAWohAQwMC0EAIQIgA0EANgIcIAMgATYCFCADQZIYNgIQIANBAjYCDAz8AgsgAEEVRg0oQQAhAiADQQA2AhwgAyABNgIUIANB1gw2AhAgA0EjNgIMDPsCCyADQRQ2AhwgAyABNgIUIAMgADYCDAz6AgsgAygCBCEAQQAhAiADQQA2AgQgAyAAIAEQNCIARQRAIAFBAWohAQz1AgsgA0EVNgIcIAMgADYCDCADIAFBAWo2AhQM+QILIAMoAgQhAEEAIQIgA0EANgIEIAMgACABEDQiAEUEQCABQQFqIQEM8wILIANBFzYCHCADIAA2AgwgAyABQQFqNgIUDPgCCyAAQRVGDSNBACECIANBADYCHCADIAE2AhQgA0HWDDYCECADQSM2AgwM9wILIAMoAgQhAEEAIQIgA0EANgIEIAMgACABEDQiAEUEQCABQQFqIQEMHQsgA0EZNgIcIAMgADYCDCADIAFBAWo2AhQM9gILIAMoAgQhAEEAIQIgA0EANgIEIAMgACABEDQiAEUEQCABQQFqIQEM7wILIANBGjYCHCADIAA2AgwgAyABQQFqNgIUDPUCCyAAQRVGDR9BACECIANBADYCHCADIAE2AhQgA0HQDzYCECADQSI2AgwM9AILIAMoAgQhACADQQA2AgQgAyAAIAEQMyIARQRAIAFBAWohAQwbCyADQRw2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIM8wILIAMoAgQhACADQQA2AgQgAyAAIAEQMyIARQRAIAFBAWohAQzrAgsgA0EdNgIcIAMgADYCDCADIAFBAWo2AhRBACECDPICCyAAQTtHDQEgAUEBaiEBC0EmIQIM1wILQQAhAiADQQA2AhwgAyABNgIUIANBnxU2AhAgA0EMNgIMDO8CCyABIARHBEADQCABLQAAQSBHDYQCIAQgAUEBaiIBRw0AC0EsIQIM7wILQSwhAgzuAgsgASAERgRAQTQhAgzuAgsCQAJAA0ACQCABLQAAQQprDgQCAAADAAsgBCABQQFqIgFHDQALQTQhAgzvAgsgAygCBCEAIANBADYCBCADIAAgARAxIgBFDZ8CIANBMjYCHCADIAE2AhQgAyAANgIMQQAhAgzuAgsgAygCBCEAIANBADYCBCADIAAgARAxIgBFBEAgAUEBaiEBDJ8CCyADQTI2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIM7QILIAEgBEcEQAJAA0AgAS0AAEEwayIAQf8BcUEKTwRAQTohAgzXAgsgAykDICILQpmz5syZs+bMGVYNASADIAtCCn4iCjcDICAKIACtQv8BgyILQn+FVg0BIAMgCiALfDcDICAEIAFBAWoiAUcNAAtBwAAhAgzuAgsgAygCBCEAIANBADYCBCADIAAgAUEBaiIBEDEiAA0XDOICC0HAACECDOwCCyABIARGBEBByQAhAgzsAgsCQANAAkAgAS0AAEEJaw4YAAKiAqICqQKiAqICogKiAqICogKiAqICogKiAqICogKiAqICogKiAqICogIAogILIAQgAUEBaiIBRw0AC0HJACECDOwCCyABQQFqIQEgA0Evai0AAEEBcQ2lAiADQQA2AhwgAyABNgIUIANBlxA2AhAgA0EKNgIMQQAhAgzrAgsgASAERwRAA0AgAS0AAEEgRw0VIAQgAUEBaiIBRw0AC0H4ACECDOsCC0H4ACECDOoCCyADQQI6ACgMOAtBACECIANBADYCHCADQb8LNgIQIANBAjYCDCADIAFBAWo2AhQM6AILQQAhAgzOAgtBDSECDM0CC0ETIQIMzAILQRUhAgzLAgtBFiECDMoCC0EYIQIMyQILQRkhAgzIAgtBGiECDMcCC0EbIQIMxgILQRwhAgzFAgtBHSECDMQCC0EeIQIMwwILQR8hAgzCAgtBICECDMECC0EiIQIMwAILQSMhAgy/AgtBJSECDL4CC0HlACECDL0CCyADQT02AhwgAyABNgIUIAMgADYCDEEAIQIM1QILIANBGzYCHCADIAE2AhQgA0GkHDYCECADQRU2AgxBACECDNQCCyADQSA2AhwgAyABNgIUIANBmBo2AhAgA0EVNgIMQQAhAgzTAgsgA0ETNgIcIAMgATYCFCADQZgaNgIQIANBFTYCDEEAIQIM0gILIANBCzYCHCADIAE2AhQgA0GYGjYCECADQRU2AgxBACECDNECCyADQRA2AhwgAyABNgIUIANBmBo2AhAgA0EVNgIMQQAhAgzQAgsgA0EgNgIcIAMgATYCFCADQaQcNgIQIANBFTYCDEEAIQIMzwILIANBCzYCHCADIAE2AhQgA0GkHDYCECADQRU2AgxBACECDM4CCyADQQw2AhwgAyABNgIUIANBpBw2AhAgA0EVNgIMQQAhAgzNAgtBACECIANBADYCHCADIAE2AhQgA0HdDjYCECADQRI2AgwMzAILAkADQAJAIAEtAABBCmsOBAACAgACCyAEIAFBAWoiAUcNAAtB/QEhAgzMAgsCQAJAIAMtADZBAUcNAEEAIQACQCADKAI4IgJFDQAgAigCYCICRQ0AIAMgAhEAACEACyAARQ0AIABBFUcNASADQfwBNgIcIAMgATYCFCADQdwZNgIQIANBFTYCDEEAIQIMzQILQdwBIQIMswILIANBADYCHCADIAE2AhQgA0H5CzYCECADQR82AgxBACECDMsCCwJAAkAgAy0AKEEBaw4CBAEAC0HbASECDLICC0HUASECDLECCyADQQI6ADFBACEAAkAgAygCOCICRQ0AIAIoAgAiAkUNACADIAIRAAAhAAsgAEUEQEHdASECDLECCyAAQRVHBEAgA0EANgIcIAMgATYCFCADQbQMNgIQIANBEDYCDEEAIQIMygILIANB+wE2AhwgAyABNgIUIANBgRo2AhAgA0EVNgIMQQAhAgzJAgsgASAERgRAQfoBIQIMyQILIAEtAABByABGDQEgA0EBOgAoC0HAASECDK4CC0HaASECDK0CCyABIARHBEAgA0EMNgIIIAMgATYCBEHZASECDK0CC0H5ASECDMUCCyABIARGBEBB+AEhAgzFAgsgAS0AAEHIAEcNBCABQQFqIQFB2AEhAgyrAgsgASAERgRAQfcBIQIMxAILAkACQCABLQAAQcUAaw4QAAUFBQUFBQUFBQUFBQUFAQULIAFBAWohAUHWASECDKsCCyABQQFqIQFB1wEhAgyqAgtB9gEhAiABIARGDcICIAMoAgAiACAEIAFraiEFIAEgAGtBAmohBgJAA0AgAS0AACAAQbrVAGotAABHDQMgAEECRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADMMCCyADKAIEIQAgA0IANwMAIAMgACAGQQFqIgEQLiIARQRAQeMBIQIMqgILIANB9QE2AhwgAyABNgIUIAMgADYCDEEAIQIMwgILQfQBIQIgASAERg3BAiADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEG41QBqLQAARw0CIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzCAgsgA0GBBDsBKCADKAIEIQAgA0IANwMAIAMgACAGQQFqIgEQLiIADQMMAgsgA0EANgIAC0EAIQIgA0EANgIcIAMgATYCFCADQeUfNgIQIANBCDYCDAy/AgtB1QEhAgylAgsgA0HzATYCHCADIAE2AhQgAyAANgIMQQAhAgy9AgtBACEAAkAgAygCOCICRQ0AIAIoAkAiAkUNACADIAIRAAAhAAsgAEUNbiAAQRVHBEAgA0EANgIcIAMgATYCFCADQYIPNgIQIANBIDYCDEEAIQIMvQILIANBjwE2AhwgAyABNgIUIANB7Bs2AhAgA0EVNgIMQQAhAgy8AgsgASAERwRAIANBDTYCCCADIAE2AgRB0wEhAgyjAgtB8gEhAgy7AgsgASAERgRAQfEBIQIMuwILAkACQAJAIAEtAABByABrDgsAAQgICAgICAgIAggLIAFBAWohAUHQASECDKMCCyABQQFqIQFB0QEhAgyiAgsgAUEBaiEBQdIBIQIMoQILQfABIQIgASAERg25AiADKAIAIgAgBCABa2ohBiABIABrQQJqIQUDQCABLQAAIABBtdUAai0AAEcNBCAAQQJGDQMgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAY2AgAMuQILQe8BIQIgASAERg24AiADKAIAIgAgBCABa2ohBiABIABrQQFqIQUDQCABLQAAIABBs9UAai0AAEcNAyAAQQFGDQIgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAY2AgAMuAILQe4BIQIgASAERg23AiADKAIAIgAgBCABa2ohBiABIABrQQJqIQUDQCABLQAAIABBsNUAai0AAEcNAiAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAY2AgAMtwILIAMoAgQhACADQgA3AwAgAyAAIAVBAWoiARArIgBFDQIgA0HsATYCHCADIAE2AhQgAyAANgIMQQAhAgy2AgsgA0EANgIACyADKAIEIQAgA0EANgIEIAMgACABECsiAEUNnAIgA0HtATYCHCADIAE2AhQgAyAANgIMQQAhAgy0AgtBzwEhAgyaAgtBACEAAkAgAygCOCICRQ0AIAIoAjQiAkUNACADIAIRAAAhAAsCQCAABEAgAEEVRg0BIANBADYCHCADIAE2AhQgA0HqDTYCECADQSY2AgxBACECDLQCC0HOASECDJoCCyADQesBNgIcIAMgATYCFCADQYAbNgIQIANBFTYCDEEAIQIMsgILIAEgBEYEQEHrASECDLICCyABLQAAQS9GBEAgAUEBaiEBDAELIANBADYCHCADIAE2AhQgA0GyODYCECADQQg2AgxBACECDLECC0HNASECDJcCCyABIARHBEAgA0EONgIIIAMgATYCBEHMASECDJcCC0HqASECDK8CCyABIARGBEBB6QEhAgyvAgsgAS0AAEEwayIAQf8BcUEKSQRAIAMgADoAKiABQQFqIQFBywEhAgyWAgsgAygCBCEAIANBADYCBCADIAAgARAvIgBFDZcCIANB6AE2AhwgAyABNgIUIAMgADYCDEEAIQIMrgILIAEgBEYEQEHnASECDK4CCwJAIAEtAABBLkYEQCABQQFqIQEMAQsgAygCBCEAIANBADYCBCADIAAgARAvIgBFDZgCIANB5gE2AhwgAyABNgIUIAMgADYCDEEAIQIMrgILQcoBIQIMlAILIAEgBEYEQEHlASECDK0CC0EAIQBBASEFQQEhB0EAIQICQAJAAkACQAJAAn8CQAJAAkACQAJAAkACQCABLQAAQTBrDgoKCQABAgMEBQYICwtBAgwGC0EDDAULQQQMBAtBBQwDC0EGDAILQQcMAQtBCAshAkEAIQVBACEHDAILQQkhAkEBIQBBACEFQQAhBwwBC0EAIQVBASECCyADIAI6ACsgAUEBaiEBAkACQCADLQAuQRBxDQACQAJAAkAgAy0AKg4DAQACBAsgB0UNAwwCCyAADQEMAgsgBUUNAQsgAygCBCEAIANBADYCBCADIAAgARAvIgBFDQIgA0HiATYCHCADIAE2AhQgAyAANgIMQQAhAgyvAgsgAygCBCEAIANBADYCBCADIAAgARAvIgBFDZoCIANB4wE2AhwgAyABNgIUIAMgADYCDEEAIQIMrgILIAMoAgQhACADQQA2AgQgAyAAIAEQLyIARQ2YAiADQeQBNgIcIAMgATYCFCADIAA2AgwMrQILQckBIQIMkwILQQAhAAJAIAMoAjgiAkUNACACKAJEIgJFDQAgAyACEQAAIQALAkAgAARAIABBFUYNASADQQA2AhwgAyABNgIUIANBpA02AhAgA0EhNgIMQQAhAgytAgtByAEhAgyTAgsgA0HhATYCHCADIAE2AhQgA0HQGjYCECADQRU2AgxBACECDKsCCyABIARGBEBB4QEhAgyrAgsCQCABLQAAQSBGBEAgA0EAOwE0IAFBAWohAQwBCyADQQA2AhwgAyABNgIUIANBmRE2AhAgA0EJNgIMQQAhAgyrAgtBxwEhAgyRAgsgASAERgRAQeABIQIMqgILAkAgAS0AAEEwa0H/AXEiAkEKSQRAIAFBAWohAQJAIAMvATQiAEGZM0sNACADIABBCmwiADsBNCAAQf7/A3EgAkH//wNzSw0AIAMgACACajsBNAwCC0EAIQIgA0EANgIcIAMgATYCFCADQZUeNgIQIANBDTYCDAyrAgsgA0EANgIcIAMgATYCFCADQZUeNgIQIANBDTYCDEEAIQIMqgILQcYBIQIMkAILIAEgBEYEQEHfASECDKkCCwJAIAEtAABBMGtB/wFxIgJBCkkEQCABQQFqIQECQCADLwE0IgBBmTNLDQAgAyAAQQpsIgA7ATQgAEH+/wNxIAJB//8Dc0sNACADIAAgAmo7ATQMAgtBACECIANBADYCHCADIAE2AhQgA0GVHjYCECADQQ02AgwMqgILIANBADYCHCADIAE2AhQgA0GVHjYCECADQQ02AgxBACECDKkCC0HFASECDI8CCyABIARGBEBB3gEhAgyoAgsCQCABLQAAQTBrQf8BcSICQQpJBEAgAUEBaiEBAkAgAy8BNCIAQZkzSw0AIAMgAEEKbCIAOwE0IABB/v8DcSACQf//A3NLDQAgAyAAIAJqOwE0DAILQQAhAiADQQA2AhwgAyABNgIUIANBlR42AhAgA0ENNgIMDKkCCyADQQA2AhwgAyABNgIUIANBlR42AhAgA0ENNgIMQQAhAgyoAgtBxAEhAgyOAgsgASAERgRAQd0BIQIMpwILAkACQAJAAkAgAS0AAEEKaw4XAgMDAAMDAwMDAwMDAwMDAwMDAwMDAwEDCyABQQFqDAULIAFBAWohAUHDASECDI8CCyABQQFqIQEgA0Evai0AAEEBcQ0IIANBADYCHCADIAE2AhQgA0GNCzYCECADQQ02AgxBACECDKcCCyADQQA2AhwgAyABNgIUIANBjQs2AhAgA0ENNgIMQQAhAgymAgsgASAERwRAIANBDzYCCCADIAE2AgRBASECDI0CC0HcASECDKUCCwJAAkADQAJAIAEtAABBCmsOBAIAAAMACyAEIAFBAWoiAUcNAAtB2wEhAgymAgsgAygCBCEAIANBADYCBCADIAAgARAtIgBFBEAgAUEBaiEBDAQLIANB2gE2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIMpQILIAMoAgQhACADQQA2AgQgAyAAIAEQLSIADQEgAUEBagshAUHBASECDIoCCyADQdkBNgIcIAMgADYCDCADIAFBAWo2AhRBACECDKICC0HCASECDIgCCyADQS9qLQAAQQFxDQEgA0EANgIcIAMgATYCFCADQeQcNgIQIANBGTYCDEEAIQIMoAILIAEgBEYEQEHZASECDKACCwJAAkACQCABLQAAQQprDgQBAgIAAgsgAUEBaiEBDAILIAFBAWohAQwBCyADLQAuQcAAcUUNAQtBACEAAkAgAygCOCICRQ0AIAIoAjwiAkUNACADIAIRAAAhAAsgAEUNoAEgAEEVRgRAIANB2QA2AhwgAyABNgIUIANBtxo2AhAgA0EVNgIMQQAhAgyfAgsgA0EANgIcIAMgATYCFCADQYANNgIQIANBGzYCDEEAIQIMngILIANBADYCHCADIAE2AhQgA0HcKDYCECADQQI2AgxBACECDJ0CCyABIARHBEAgA0EMNgIIIAMgATYCBEG/ASECDIQCC0HYASECDJwCCyABIARGBEBB1wEhAgycAgsCQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAIAEtAABBwQBrDhUAAQIDWgQFBlpaWgcICQoLDA0ODxBaCyABQQFqIQFB+wAhAgySAgsgAUEBaiEBQfwAIQIMkQILIAFBAWohAUGBASECDJACCyABQQFqIQFBhQEhAgyPAgsgAUEBaiEBQYYBIQIMjgILIAFBAWohAUGJASECDI0CCyABQQFqIQFBigEhAgyMAgsgAUEBaiEBQY0BIQIMiwILIAFBAWohAUGWASECDIoCCyABQQFqIQFBlwEhAgyJAgsgAUEBaiEBQZgBIQIMiAILIAFBAWohAUGlASECDIcCCyABQQFqIQFBpgEhAgyGAgsgAUEBaiEBQawBIQIMhQILIAFBAWohAUG0ASECDIQCCyABQQFqIQFBtwEhAgyDAgsgAUEBaiEBQb4BIQIMggILIAEgBEYEQEHWASECDJsCCyABLQAAQc4ARw1IIAFBAWohAUG9ASECDIECCyABIARGBEBB1QEhAgyaAgsCQAJAAkAgAS0AAEHCAGsOEgBKSkpKSkpKSkoBSkpKSkpKAkoLIAFBAWohAUG4ASECDIICCyABQQFqIQFBuwEhAgyBAgsgAUEBaiEBQbwBIQIMgAILQdQBIQIgASAERg2YAiADKAIAIgAgBCABa2ohBSABIABrQQdqIQYCQANAIAEtAAAgAEGo1QBqLQAARw1FIABBB0YNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyZAgsgA0EANgIAIAZBAWohAUEbDEULIAEgBEYEQEHTASECDJgCCwJAAkAgAS0AAEHJAGsOBwBHR0dHRwFHCyABQQFqIQFBuQEhAgz/AQsgAUEBaiEBQboBIQIM/gELQdIBIQIgASAERg2WAiADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEGm1QBqLQAARw1DIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyXAgsgA0EANgIAIAZBAWohAUEPDEMLQdEBIQIgASAERg2VAiADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEGk1QBqLQAARw1CIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyWAgsgA0EANgIAIAZBAWohAUEgDEILQdABIQIgASAERg2UAiADKAIAIgAgBCABa2ohBSABIABrQQJqIQYCQANAIAEtAAAgAEGh1QBqLQAARw1BIABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAyVAgsgA0EANgIAIAZBAWohAUESDEELIAEgBEYEQEHPASECDJQCCwJAAkAgAS0AAEHFAGsODgBDQ0NDQ0NDQ0NDQ0MBQwsgAUEBaiEBQbUBIQIM+wELIAFBAWohAUG2ASECDPoBC0HOASECIAEgBEYNkgIgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABBntUAai0AAEcNPyAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMkwILIANBADYCACAGQQFqIQFBBww/C0HNASECIAEgBEYNkQIgAygCACIAIAQgAWtqIQUgASAAa0EFaiEGAkADQCABLQAAIABBmNUAai0AAEcNPiAAQQVGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMkgILIANBADYCACAGQQFqIQFBKAw+CyABIARGBEBBzAEhAgyRAgsCQAJAAkAgAS0AAEHFAGsOEQBBQUFBQUFBQUEBQUFBQUECQQsgAUEBaiEBQbEBIQIM+QELIAFBAWohAUGyASECDPgBCyABQQFqIQFBswEhAgz3AQtBywEhAiABIARGDY8CIAMoAgAiACAEIAFraiEFIAEgAGtBBmohBgJAA0AgAS0AACAAQZHVAGotAABHDTwgAEEGRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADJACCyADQQA2AgAgBkEBaiEBQRoMPAtBygEhAiABIARGDY4CIAMoAgAiACAEIAFraiEFIAEgAGtBA2ohBgJAA0AgAS0AACAAQY3VAGotAABHDTsgAEEDRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADI8CCyADQQA2AgAgBkEBaiEBQSEMOwsgASAERgRAQckBIQIMjgILAkACQCABLQAAQcEAaw4UAD09PT09PT09PT09PT09PT09PQE9CyABQQFqIQFBrQEhAgz1AQsgAUEBaiEBQbABIQIM9AELIAEgBEYEQEHIASECDI0CCwJAAkAgAS0AAEHVAGsOCwA8PDw8PDw8PDwBPAsgAUEBaiEBQa4BIQIM9AELIAFBAWohAUGvASECDPMBC0HHASECIAEgBEYNiwIgAygCACIAIAQgAWtqIQUgASAAa0EIaiEGAkADQCABLQAAIABBhNUAai0AAEcNOCAAQQhGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMjAILIANBADYCACAGQQFqIQFBKgw4CyABIARGBEBBxgEhAgyLAgsgAS0AAEHQAEcNOCABQQFqIQFBJQw3C0HFASECIAEgBEYNiQIgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABBgdUAai0AAEcNNiAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMigILIANBADYCACAGQQFqIQFBDgw2CyABIARGBEBBxAEhAgyJAgsgAS0AAEHFAEcNNiABQQFqIQFBqwEhAgzvAQsgASAERgRAQcMBIQIMiAILAkACQAJAAkAgAS0AAEHCAGsODwABAjk5OTk5OTk5OTk5AzkLIAFBAWohAUGnASECDPEBCyABQQFqIQFBqAEhAgzwAQsgAUEBaiEBQakBIQIM7wELIAFBAWohAUGqASECDO4BC0HCASECIAEgBEYNhgIgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABB/tQAai0AAEcNMyAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMhwILIANBADYCACAGQQFqIQFBFAwzC0HBASECIAEgBEYNhQIgAygCACIAIAQgAWtqIQUgASAAa0EEaiEGAkADQCABLQAAIABB+dQAai0AAEcNMiAAQQRGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMhgILIANBADYCACAGQQFqIQFBKwwyC0HAASECIAEgBEYNhAIgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABB9tQAai0AAEcNMSAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMhQILIANBADYCACAGQQFqIQFBLAwxC0G/ASECIAEgBEYNgwIgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABBodUAai0AAEcNMCAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMhAILIANBADYCACAGQQFqIQFBEQwwC0G+ASECIAEgBEYNggIgAygCACIAIAQgAWtqIQUgASAAa0EDaiEGAkADQCABLQAAIABB8tQAai0AAEcNLyAAQQNGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMgwILIANBADYCACAGQQFqIQFBLgwvCyABIARGBEBBvQEhAgyCAgsCQAJAAkACQAJAIAEtAABBwQBrDhUANDQ0NDQ0NDQ0NAE0NAI0NAM0NAQ0CyABQQFqIQFBmwEhAgzsAQsgAUEBaiEBQZwBIQIM6wELIAFBAWohAUGdASECDOoBCyABQQFqIQFBogEhAgzpAQsgAUEBaiEBQaQBIQIM6AELIAEgBEYEQEG8ASECDIECCwJAAkAgAS0AAEHSAGsOAwAwATALIAFBAWohAUGjASECDOgBCyABQQFqIQFBBAwtC0G7ASECIAEgBEYN/wEgAygCACIAIAQgAWtqIQUgASAAa0EBaiEGAkADQCABLQAAIABB8NQAai0AAEcNLCAAQQFGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMgAILIANBADYCACAGQQFqIQFBHQwsCyABIARGBEBBugEhAgz/AQsCQAJAIAEtAABByQBrDgcBLi4uLi4ALgsgAUEBaiEBQaEBIQIM5gELIAFBAWohAUEiDCsLIAEgBEYEQEG5ASECDP4BCyABLQAAQdAARw0rIAFBAWohAUGgASECDOQBCyABIARGBEBBuAEhAgz9AQsCQAJAIAEtAABBxgBrDgsALCwsLCwsLCwsASwLIAFBAWohAUGeASECDOQBCyABQQFqIQFBnwEhAgzjAQtBtwEhAiABIARGDfsBIAMoAgAiACAEIAFraiEFIAEgAGtBA2ohBgJAA0AgAS0AACAAQezUAGotAABHDSggAEEDRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADPwBCyADQQA2AgAgBkEBaiEBQQ0MKAtBtgEhAiABIARGDfoBIAMoAgAiACAEIAFraiEFIAEgAGtBAmohBgJAA0AgAS0AACAAQaHVAGotAABHDScgAEECRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADPsBCyADQQA2AgAgBkEBaiEBQQwMJwtBtQEhAiABIARGDfkBIAMoAgAiACAEIAFraiEFIAEgAGtBAWohBgJAA0AgAS0AACAAQerUAGotAABHDSYgAEEBRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADPoBCyADQQA2AgAgBkEBaiEBQQMMJgtBtAEhAiABIARGDfgBIAMoAgAiACAEIAFraiEFIAEgAGtBAWohBgJAA0AgAS0AACAAQejUAGotAABHDSUgAEEBRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADPkBCyADQQA2AgAgBkEBaiEBQSYMJQsgASAERgRAQbMBIQIM+AELAkACQCABLQAAQdQAaw4CAAEnCyABQQFqIQFBmQEhAgzfAQsgAUEBaiEBQZoBIQIM3gELQbIBIQIgASAERg32ASADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEHm1ABqLQAARw0jIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAz3AQsgA0EANgIAIAZBAWohAUEnDCMLQbEBIQIgASAERg31ASADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEHk1ABqLQAARw0iIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAz2AQsgA0EANgIAIAZBAWohAUEcDCILQbABIQIgASAERg30ASADKAIAIgAgBCABa2ohBSABIABrQQVqIQYCQANAIAEtAAAgAEHe1ABqLQAARw0hIABBBUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAz1AQsgA0EANgIAIAZBAWohAUEGDCELQa8BIQIgASAERg3zASADKAIAIgAgBCABa2ohBSABIABrQQRqIQYCQANAIAEtAAAgAEHZ1ABqLQAARw0gIABBBEYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAz0AQsgA0EANgIAIAZBAWohAUEZDCALIAEgBEYEQEGuASECDPMBCwJAAkACQAJAIAEtAABBLWsOIwAkJCQkJCQkJCQkJCQkJCQkJCQkJCQkJAEkJCQkJAIkJCQDJAsgAUEBaiEBQY4BIQIM3AELIAFBAWohAUGPASECDNsBCyABQQFqIQFBlAEhAgzaAQsgAUEBaiEBQZUBIQIM2QELQa0BIQIgASAERg3xASADKAIAIgAgBCABa2ohBSABIABrQQFqIQYCQANAIAEtAAAgAEHX1ABqLQAARw0eIABBAUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzyAQsgA0EANgIAIAZBAWohAUELDB4LIAEgBEYEQEGsASECDPEBCwJAAkAgAS0AAEHBAGsOAwAgASALIAFBAWohAUGQASECDNgBCyABQQFqIQFBkwEhAgzXAQsgASAERgRAQasBIQIM8AELAkACQCABLQAAQcEAaw4PAB8fHx8fHx8fHx8fHx8BHwsgAUEBaiEBQZEBIQIM1wELIAFBAWohAUGSASECDNYBCyABIARGBEBBqgEhAgzvAQsgAS0AAEHMAEcNHCABQQFqIQFBCgwbC0GpASECIAEgBEYN7QEgAygCACIAIAQgAWtqIQUgASAAa0EFaiEGAkADQCABLQAAIABB0dQAai0AAEcNGiAAQQVGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM7gELIANBADYCACAGQQFqIQFBHgwaC0GoASECIAEgBEYN7AEgAygCACIAIAQgAWtqIQUgASAAa0EGaiEGAkADQCABLQAAIABBytQAai0AAEcNGSAAQQZGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM7QELIANBADYCACAGQQFqIQFBFQwZC0GnASECIAEgBEYN6wEgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABBx9QAai0AAEcNGCAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM7AELIANBADYCACAGQQFqIQFBFwwYC0GmASECIAEgBEYN6gEgAygCACIAIAQgAWtqIQUgASAAa0EFaiEGAkADQCABLQAAIABBwdQAai0AAEcNFyAAQQVGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM6wELIANBADYCACAGQQFqIQFBGAwXCyABIARGBEBBpQEhAgzqAQsCQAJAIAEtAABByQBrDgcAGRkZGRkBGQsgAUEBaiEBQYsBIQIM0QELIAFBAWohAUGMASECDNABC0GkASECIAEgBEYN6AEgAygCACIAIAQgAWtqIQUgASAAa0EBaiEGAkADQCABLQAAIABBptUAai0AAEcNFSAAQQFGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM6QELIANBADYCACAGQQFqIQFBCQwVC0GjASECIAEgBEYN5wEgAygCACIAIAQgAWtqIQUgASAAa0EBaiEGAkADQCABLQAAIABBpNUAai0AAEcNFCAAQQFGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM6AELIANBADYCACAGQQFqIQFBHwwUC0GiASECIAEgBEYN5gEgAygCACIAIAQgAWtqIQUgASAAa0ECaiEGAkADQCABLQAAIABBvtQAai0AAEcNEyAAQQJGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM5wELIANBADYCACAGQQFqIQFBAgwTC0GhASECIAEgBEYN5QEgAygCACIAIAQgAWtqIQUgASAAa0EBaiEGA0AgAS0AACAAQbzUAGotAABHDREgAEEBRg0CIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADOUBCyABIARGBEBBoAEhAgzlAQtBASABLQAAQd8ARw0RGiABQQFqIQFBhwEhAgzLAQsgA0EANgIAIAZBAWohAUGIASECDMoBC0GfASECIAEgBEYN4gEgAygCACIAIAQgAWtqIQUgASAAa0EIaiEGAkADQCABLQAAIABBhNUAai0AAEcNDyAAQQhGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM4wELIANBADYCACAGQQFqIQFBKQwPC0GeASECIAEgBEYN4QEgAygCACIAIAQgAWtqIQUgASAAa0EDaiEGAkADQCABLQAAIABBuNQAai0AAEcNDiAAQQNGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAM4gELIANBADYCACAGQQFqIQFBLQwOCyABIARGBEBBnQEhAgzhAQsgAS0AAEHFAEcNDiABQQFqIQFBhAEhAgzHAQsgASAERgRAQZwBIQIM4AELAkACQCABLQAAQcwAaw4IAA8PDw8PDwEPCyABQQFqIQFBggEhAgzHAQsgAUEBaiEBQYMBIQIMxgELQZsBIQIgASAERg3eASADKAIAIgAgBCABa2ohBSABIABrQQRqIQYCQANAIAEtAAAgAEGz1ABqLQAARw0LIABBBEYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzfAQsgA0EANgIAIAZBAWohAUEjDAsLQZoBIQIgASAERg3dASADKAIAIgAgBCABa2ohBSABIABrQQJqIQYCQANAIAEtAAAgAEGw1ABqLQAARw0KIABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzeAQsgA0EANgIAIAZBAWohAUEADAoLIAEgBEYEQEGZASECDN0BCwJAAkAgAS0AAEHIAGsOCAAMDAwMDAwBDAsgAUEBaiEBQf0AIQIMxAELIAFBAWohAUGAASECDMMBCyABIARGBEBBmAEhAgzcAQsCQAJAIAEtAABBzgBrDgMACwELCyABQQFqIQFB/gAhAgzDAQsgAUEBaiEBQf8AIQIMwgELIAEgBEYEQEGXASECDNsBCyABLQAAQdkARw0IIAFBAWohAUEIDAcLQZYBIQIgASAERg3ZASADKAIAIgAgBCABa2ohBSABIABrQQNqIQYCQANAIAEtAAAgAEGs1ABqLQAARw0GIABBA0YNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzaAQsgA0EANgIAIAZBAWohAUEFDAYLQZUBIQIgASAERg3YASADKAIAIgAgBCABa2ohBSABIABrQQVqIQYCQANAIAEtAAAgAEGm1ABqLQAARw0FIABBBUYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzZAQsgA0EANgIAIAZBAWohAUEWDAULQZQBIQIgASAERg3XASADKAIAIgAgBCABa2ohBSABIABrQQJqIQYCQANAIAEtAAAgAEGh1QBqLQAARw0EIABBAkYNASAAQQFqIQAgBCABQQFqIgFHDQALIAMgBTYCAAzYAQsgA0EANgIAIAZBAWohAUEQDAQLIAEgBEYEQEGTASECDNcBCwJAAkAgAS0AAEHDAGsODAAGBgYGBgYGBgYGAQYLIAFBAWohAUH5ACECDL4BCyABQQFqIQFB+gAhAgy9AQtBkgEhAiABIARGDdUBIAMoAgAiACAEIAFraiEFIAEgAGtBBWohBgJAA0AgAS0AACAAQaDUAGotAABHDQIgAEEFRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADNYBCyADQQA2AgAgBkEBaiEBQSQMAgsgA0EANgIADAILIAEgBEYEQEGRASECDNQBCyABLQAAQcwARw0BIAFBAWohAUETCzoAKSADKAIEIQAgA0EANgIEIAMgACABEC4iAA0CDAELQQAhAiADQQA2AhwgAyABNgIUIANB/h82AhAgA0EGNgIMDNEBC0H4ACECDLcBCyADQZABNgIcIAMgATYCFCADIAA2AgxBACECDM8BC0EAIQACQCADKAI4IgJFDQAgAigCQCICRQ0AIAMgAhEAACEACyAARQ0AIABBFUYNASADQQA2AhwgAyABNgIUIANBgg82AhAgA0EgNgIMQQAhAgzOAQtB9wAhAgy0AQsgA0GPATYCHCADIAE2AhQgA0HsGzYCECADQRU2AgxBACECDMwBCyABIARGBEBBjwEhAgzMAQsCQCABLQAAQSBGBEAgAUEBaiEBDAELIANBADYCHCADIAE2AhQgA0GbHzYCECADQQY2AgxBACECDMwBC0ECIQIMsgELA0AgAS0AAEEgRw0CIAQgAUEBaiIBRw0AC0GOASECDMoBCyABIARGBEBBjQEhAgzKAQsCQCABLQAAQQlrDgRKAABKAAtB9QAhAgywAQsgAy0AKUEFRgRAQfYAIQIMsAELQfQAIQIMrwELIAEgBEYEQEGMASECDMgBCyADQRA2AgggAyABNgIEDAoLIAEgBEYEQEGLASECDMcBCwJAIAEtAABBCWsOBEcAAEcAC0HzACECDK0BCyABIARHBEAgA0EQNgIIIAMgATYCBEHxACECDK0BC0GKASECDMUBCwJAIAEgBEcEQANAIAEtAABBoNAAai0AACIAQQNHBEACQCAAQQFrDgJJAAQLQfAAIQIMrwELIAQgAUEBaiIBRw0AC0GIASECDMYBC0GIASECDMUBCyADQQA2AhwgAyABNgIUIANB2yA2AhAgA0EHNgIMQQAhAgzEAQsgASAERgRAQYkBIQIMxAELAkACQAJAIAEtAABBoNIAai0AAEEBaw4DRgIAAQtB8gAhAgysAQsgA0EANgIcIAMgATYCFCADQbQSNgIQIANBBzYCDEEAIQIMxAELQeoAIQIMqgELIAEgBEcEQCABQQFqIQFB7wAhAgyqAQtBhwEhAgzCAQsgBCABIgBGBEBBhgEhAgzCAQsgAC0AACIBQS9GBEAgAEEBaiEBQe4AIQIMqQELIAFBCWsiAkEXSw0BIAAhAUEBIAJ0QZuAgARxDUEMAQsgBCABIgBGBEBBhQEhAgzBAQsgAC0AAEEvRw0AIABBAWohAQwDC0EAIQIgA0EANgIcIAMgADYCFCADQdsgNgIQIANBBzYCDAy/AQsCQAJAAkACQAJAA0AgAS0AAEGgzgBqLQAAIgBBBUcEQAJAAkAgAEEBaw4IRwUGBwgABAEIC0HrACECDK0BCyABQQFqIQFB7QAhAgysAQsgBCABQQFqIgFHDQALQYQBIQIMwwELIAFBAWoMFAsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDR4gA0HbADYCHCADIAE2AhQgAyAANgIMQQAhAgzBAQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDR4gA0HdADYCHCADIAE2AhQgAyAANgIMQQAhAgzAAQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDR4gA0H6ADYCHCADIAE2AhQgAyAANgIMQQAhAgy/AQsgA0EANgIcIAMgATYCFCADQfkPNgIQIANBBzYCDEEAIQIMvgELIAEgBEYEQEGDASECDL4BCwJAIAEtAABBoM4Aai0AAEEBaw4IPgQFBgAIAgMHCyABQQFqIQELQQMhAgyjAQsgAUEBagwNC0EAIQIgA0EANgIcIANB0RI2AhAgA0EHNgIMIAMgAUEBajYCFAy6AQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDRYgA0HbADYCHCADIAE2AhQgAyAANgIMQQAhAgy5AQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDRYgA0HdADYCHCADIAE2AhQgAyAANgIMQQAhAgy4AQsgAygCBCEAIANBADYCBCADIAAgARAsIgBFDRYgA0H6ADYCHCADIAE2AhQgAyAANgIMQQAhAgy3AQsgA0EANgIcIAMgATYCFCADQfkPNgIQIANBBzYCDEEAIQIMtgELQewAIQIMnAELIAEgBEYEQEGCASECDLUBCyABQQFqDAILIAEgBEYEQEGBASECDLQBCyABQQFqDAELIAEgBEYNASABQQFqCyEBQQQhAgyYAQtBgAEhAgywAQsDQCABLQAAQaDMAGotAAAiAEECRwRAIABBAUcEQEHpACECDJkBCwwxCyAEIAFBAWoiAUcNAAtB/wAhAgyvAQsgASAERgRAQf4AIQIMrwELAkAgAS0AAEEJaw43LwMGLwQGBgYGBgYGBgYGBgYGBgYGBgYFBgYCBgYGBgYGBgYGBgYGBgYGBgYGBgYGBgYGBgYGAAYLIAFBAWoLIQFBBSECDJQBCyABQQFqDAYLIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0IIANB2wA2AhwgAyABNgIUIAMgADYCDEEAIQIMqwELIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0IIANB3QA2AhwgAyABNgIUIAMgADYCDEEAIQIMqgELIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0IIANB+gA2AhwgAyABNgIUIAMgADYCDEEAIQIMqQELIANBADYCHCADIAE2AhQgA0GNFDYCECADQQc2AgxBACECDKgBCwJAAkACQAJAA0AgAS0AAEGgygBqLQAAIgBBBUcEQAJAIABBAWsOBi4DBAUGAAYLQegAIQIMlAELIAQgAUEBaiIBRw0AC0H9ACECDKsBCyADKAIEIQAgA0EANgIEIAMgACABECwiAEUNByADQdsANgIcIAMgATYCFCADIAA2AgxBACECDKoBCyADKAIEIQAgA0EANgIEIAMgACABECwiAEUNByADQd0ANgIcIAMgATYCFCADIAA2AgxBACECDKkBCyADKAIEIQAgA0EANgIEIAMgACABECwiAEUNByADQfoANgIcIAMgATYCFCADIAA2AgxBACECDKgBCyADQQA2AhwgAyABNgIUIANB5Ag2AhAgA0EHNgIMQQAhAgynAQsgASAERg0BIAFBAWoLIQFBBiECDIwBC0H8ACECDKQBCwJAAkACQAJAA0AgAS0AAEGgyABqLQAAIgBBBUcEQCAAQQFrDgQpAgMEBQsgBCABQQFqIgFHDQALQfsAIQIMpwELIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0DIANB2wA2AhwgAyABNgIUIAMgADYCDEEAIQIMpgELIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0DIANB3QA2AhwgAyABNgIUIAMgADYCDEEAIQIMpQELIAMoAgQhACADQQA2AgQgAyAAIAEQLCIARQ0DIANB+gA2AhwgAyABNgIUIAMgADYCDEEAIQIMpAELIANBADYCHCADIAE2AhQgA0G8CjYCECADQQc2AgxBACECDKMBC0HPACECDIkBC0HRACECDIgBC0HnACECDIcBCyABIARGBEBB+gAhAgygAQsCQCABLQAAQQlrDgQgAAAgAAsgAUEBaiEBQeYAIQIMhgELIAEgBEYEQEH5ACECDJ8BCwJAIAEtAABBCWsOBB8AAB8AC0EAIQACQCADKAI4IgJFDQAgAigCOCICRQ0AIAMgAhEAACEACyAARQRAQeIBIQIMhgELIABBFUcEQCADQQA2AhwgAyABNgIUIANByQ02AhAgA0EaNgIMQQAhAgyfAQsgA0H4ADYCHCADIAE2AhQgA0HqGjYCECADQRU2AgxBACECDJ4BCyABIARHBEAgA0ENNgIIIAMgATYCBEHkACECDIUBC0H3ACECDJ0BCyABIARGBEBB9gAhAgydAQsCQAJAAkAgAS0AAEHIAGsOCwABCwsLCwsLCwsCCwsgAUEBaiEBQd0AIQIMhQELIAFBAWohAUHgACECDIQBCyABQQFqIQFB4wAhAgyDAQtB9QAhAiABIARGDZsBIAMoAgAiACAEIAFraiEFIAEgAGtBAmohBgJAA0AgAS0AACAAQbXVAGotAABHDQggAEECRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADJwBCyADKAIEIQAgA0IANwMAIAMgACAGQQFqIgEQKyIABEAgA0H0ADYCHCADIAE2AhQgAyAANgIMQQAhAgycAQtB4gAhAgyCAQtBACEAAkAgAygCOCICRQ0AIAIoAjQiAkUNACADIAIRAAAhAAsCQCAABEAgAEEVRg0BIANBADYCHCADIAE2AhQgA0HqDTYCECADQSY2AgxBACECDJwBC0HhACECDIIBCyADQfMANgIcIAMgATYCFCADQYAbNgIQIANBFTYCDEEAIQIMmgELIAMtACkiAEEja0ELSQ0JAkAgAEEGSw0AQQEgAHRBygBxRQ0ADAoLQQAhAiADQQA2AhwgAyABNgIUIANB7Qk2AhAgA0EINgIMDJkBC0HyACECIAEgBEYNmAEgAygCACIAIAQgAWtqIQUgASAAa0EBaiEGAkADQCABLQAAIABBs9UAai0AAEcNBSAAQQFGDQEgAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMmQELIAMoAgQhACADQgA3AwAgAyAAIAZBAWoiARArIgAEQCADQfEANgIcIAMgATYCFCADIAA2AgxBACECDJkBC0HfACECDH8LQQAhAAJAIAMoAjgiAkUNACACKAI0IgJFDQAgAyACEQAAIQALAkAgAARAIABBFUYNASADQQA2AhwgAyABNgIUIANB6g02AhAgA0EmNgIMQQAhAgyZAQtB3gAhAgx/CyADQfAANgIcIAMgATYCFCADQYAbNgIQIANBFTYCDEEAIQIMlwELIAMtAClBIUYNBiADQQA2AhwgAyABNgIUIANBkQo2AhAgA0EINgIMQQAhAgyWAQtB7wAhAiABIARGDZUBIAMoAgAiACAEIAFraiEFIAEgAGtBAmohBgJAA0AgAS0AACAAQbDVAGotAABHDQIgAEECRg0BIABBAWohACAEIAFBAWoiAUcNAAsgAyAFNgIADJYBCyADKAIEIQAgA0IANwMAIAMgACAGQQFqIgEQKyIARQ0CIANB7QA2AhwgAyABNgIUIAMgADYCDEEAIQIMlQELIANBADYCAAsgAygCBCEAIANBADYCBCADIAAgARArIgBFDYABIANB7gA2AhwgAyABNgIUIAMgADYCDEEAIQIMkwELQdwAIQIMeQtBACEAAkAgAygCOCICRQ0AIAIoAjQiAkUNACADIAIRAAAhAAsCQCAABEAgAEEVRg0BIANBADYCHCADIAE2AhQgA0HqDTYCECADQSY2AgxBACECDJMBC0HbACECDHkLIANB7AA2AhwgAyABNgIUIANBgBs2AhAgA0EVNgIMQQAhAgyRAQsgAy0AKSIAQSNJDQAgAEEuRg0AIANBADYCHCADIAE2AhQgA0HJCTYCECADQQg2AgxBACECDJABC0HaACECDHYLIAEgBEYEQEHrACECDI8BCwJAIAEtAABBL0YEQCABQQFqIQEMAQsgA0EANgIcIAMgATYCFCADQbI4NgIQIANBCDYCDEEAIQIMjwELQdkAIQIMdQsgASAERwRAIANBDjYCCCADIAE2AgRB2AAhAgx1C0HqACECDI0BCyABIARGBEBB6QAhAgyNAQsgAS0AAEEwayIAQf8BcUEKSQRAIAMgADoAKiABQQFqIQFB1wAhAgx0CyADKAIEIQAgA0EANgIEIAMgACABEC8iAEUNeiADQegANgIcIAMgATYCFCADIAA2AgxBACECDIwBCyABIARGBEBB5wAhAgyMAQsCQCABLQAAQS5GBEAgAUEBaiEBDAELIAMoAgQhACADQQA2AgQgAyAAIAEQLyIARQ17IANB5gA2AhwgAyABNgIUIAMgADYCDEEAIQIMjAELQdYAIQIMcgsgASAERgRAQeUAIQIMiwELQQAhAEEBIQVBASEHQQAhAgJAAkACQAJAAkACfwJAAkACQAJAAkACQAJAIAEtAABBMGsOCgoJAAECAwQFBggLC0ECDAYLQQMMBQtBBAwEC0EFDAMLQQYMAgtBBwwBC0EICyECQQAhBUEAIQcMAgtBCSECQQEhAEEAIQVBACEHDAELQQAhBUEBIQILIAMgAjoAKyABQQFqIQECQAJAIAMtAC5BEHENAAJAAkACQCADLQAqDgMBAAIECyAHRQ0DDAILIAANAQwCCyAFRQ0BCyADKAIEIQAgA0EANgIEIAMgACABEC8iAEUNAiADQeIANgIcIAMgATYCFCADIAA2AgxBACECDI0BCyADKAIEIQAgA0EANgIEIAMgACABEC8iAEUNfSADQeMANgIcIAMgATYCFCADIAA2AgxBACECDIwBCyADKAIEIQAgA0EANgIEIAMgACABEC8iAEUNeyADQeQANgIcIAMgATYCFCADIAA2AgwMiwELQdQAIQIMcQsgAy0AKUEiRg2GAUHTACECDHALQQAhAAJAIAMoAjgiAkUNACACKAJEIgJFDQAgAyACEQAAIQALIABFBEBB1QAhAgxwCyAAQRVHBEAgA0EANgIcIAMgATYCFCADQaQNNgIQIANBITYCDEEAIQIMiQELIANB4QA2AhwgAyABNgIUIANB0Bo2AhAgA0EVNgIMQQAhAgyIAQsgASAERgRAQeAAIQIMiAELAkACQAJAAkACQCABLQAAQQprDgQBBAQABAsgAUEBaiEBDAELIAFBAWohASADQS9qLQAAQQFxRQ0BC0HSACECDHALIANBADYCHCADIAE2AhQgA0G2ETYCECADQQk2AgxBACECDIgBCyADQQA2AhwgAyABNgIUIANBthE2AhAgA0EJNgIMQQAhAgyHAQsgASAERgRAQd8AIQIMhwELIAEtAABBCkYEQCABQQFqIQEMCQsgAy0ALkHAAHENCCADQQA2AhwgAyABNgIUIANBthE2AhAgA0ECNgIMQQAhAgyGAQsgASAERgRAQd0AIQIMhgELIAEtAAAiAkENRgRAIAFBAWohAUHQACECDG0LIAEhACACQQlrDgQFAQEFAQsgBCABIgBGBEBB3AAhAgyFAQsgAC0AAEEKRw0AIABBAWoMAgtBACECIANBADYCHCADIAA2AhQgA0HKLTYCECADQQc2AgwMgwELIAEgBEYEQEHbACECDIMBCwJAIAEtAABBCWsOBAMAAAMACyABQQFqCyEBQc4AIQIMaAsgASAERgRAQdoAIQIMgQELIAEtAABBCWsOBAABAQABC0EAIQIgA0EANgIcIANBmhI2AhAgA0EHNgIMIAMgAUEBajYCFAx/CyADQYASOwEqQQAhAAJAIAMoAjgiAkUNACACKAI4IgJFDQAgAyACEQAAIQALIABFDQAgAEEVRw0BIANB2QA2AhwgAyABNgIUIANB6ho2AhAgA0EVNgIMQQAhAgx+C0HNACECDGQLIANBADYCHCADIAE2AhQgA0HJDTYCECADQRo2AgxBACECDHwLIAEgBEYEQEHZACECDHwLIAEtAABBIEcNPSABQQFqIQEgAy0ALkEBcQ09IANBADYCHCADIAE2AhQgA0HCHDYCECADQR42AgxBACECDHsLIAEgBEYEQEHYACECDHsLAkACQAJAAkACQCABLQAAIgBBCmsOBAIDAwABCyABQQFqIQFBLCECDGULIABBOkcNASADQQA2AhwgAyABNgIUIANB5xE2AhAgA0EKNgIMQQAhAgx9CyABQQFqIQEgA0Evai0AAEEBcUUNcyADLQAyQYABcUUEQCADQTJqIQIgAxA1QQAhAAJAIAMoAjgiBkUNACAGKAIoIgZFDQAgAyAGEQAAIQALAkACQCAADhZNTEsBAQEBAQEBAQEBAQEBAQEBAQEAAQsgA0EpNgIcIAMgATYCFCADQawZNgIQIANBFTYCDEEAIQIMfgsgA0EANgIcIAMgATYCFCADQeULNgIQIANBETYCDEEAIQIMfQtBACEAAkAgAygCOCICRQ0AIAIoAlwiAkUNACADIAIRAAAhAAsgAEUNWSAAQRVHDQEgA0EFNgIcIAMgATYCFCADQZsbNgIQIANBFTYCDEEAIQIMfAtBywAhAgxiC0EAIQIgA0EANgIcIAMgATYCFCADQZAONgIQIANBFDYCDAx6CyADIAMvATJBgAFyOwEyDDsLIAEgBEcEQCADQRE2AgggAyABNgIEQcoAIQIMYAtB1wAhAgx4CyABIARGBEBB1gAhAgx4CwJAAkACQAJAIAEtAAAiAEEgciAAIABBwQBrQf8BcUEaSRtB/wFxQeMAaw4TAEBAQEBAQEBAQEBAQAFAQEACA0ALIAFBAWohAUHGACECDGELIAFBAWohAUHHACECDGALIAFBAWohAUHIACECDF8LIAFBAWohAUHJACECDF4LQdUAIQIgBCABIgBGDXYgBCABayADKAIAIgFqIQYgACABa0EFaiEHA0AgAUGQyABqLQAAIAAtAAAiBUEgciAFIAVBwQBrQf8BcUEaSRtB/wFxRw0IQQQgAUEFRg0KGiABQQFqIQEgBCAAQQFqIgBHDQALIAMgBjYCAAx2C0HUACECIAQgASIARg11IAQgAWsgAygCACIBaiEGIAAgAWtBD2ohBwNAIAFBgMgAai0AACAALQAAIgVBIHIgBSAFQcEAa0H/AXFBGkkbQf8BcUcNB0EDIAFBD0YNCRogAUEBaiEBIAQgAEEBaiIARw0ACyADIAY2AgAMdQtB0wAhAiAEIAEiAEYNdCAEIAFrIAMoAgAiAWohBiAAIAFrQQ5qIQcDQCABQeLHAGotAAAgAC0AACIFQSByIAUgBUHBAGtB/wFxQRpJG0H/AXFHDQYgAUEORg0HIAFBAWohASAEIABBAWoiAEcNAAsgAyAGNgIADHQLQdIAIQIgBCABIgBGDXMgBCABayADKAIAIgFqIQUgACABa0EBaiEGA0AgAUHgxwBqLQAAIAAtAAAiB0EgciAHIAdBwQBrQf8BcUEaSRtB/wFxRw0FIAFBAUYNAiABQQFqIQEgBCAAQQFqIgBHDQALIAMgBTYCAAxzCyABIARGBEBB0QAhAgxzCwJAAkAgAS0AACIAQSByIAAgAEHBAGtB/wFxQRpJG0H/AXFB7gBrDgcAOTk5OTkBOQsgAUEBaiEBQcMAIQIMWgsgAUEBaiEBQcQAIQIMWQsgA0EANgIAIAZBAWohAUHFACECDFgLQdAAIQIgBCABIgBGDXAgBCABayADKAIAIgFqIQYgACABa0EJaiEHA0AgAUHWxwBqLQAAIAAtAAAiBUEgciAFIAVBwQBrQf8BcUEaSRtB/wFxRw0CQQIgAUEJRg0EGiABQQFqIQEgBCAAQQFqIgBHDQALIAMgBjYCAAxwC0HPACECIAQgASIARg1vIAQgAWsgAygCACIBaiEGIAAgAWtBBWohBwNAIAFB0McAai0AACAALQAAIgVBIHIgBSAFQcEAa0H/AXFBGkkbQf8BcUcNASABQQVGDQIgAUEBaiEBIAQgAEEBaiIARw0ACyADIAY2AgAMbwsgACEBIANBADYCAAwzC0EBCzoALCADQQA2AgAgB0EBaiEBC0EtIQIMUgsCQANAIAEtAABB0MUAai0AAEEBRw0BIAQgAUEBaiIBRw0AC0HNACECDGsLQcIAIQIMUQsgASAERgRAQcwAIQIMagsgAS0AAEE6RgRAIAMoAgQhACADQQA2AgQgAyAAIAEQMCIARQ0zIANBywA2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIMagsgA0EANgIcIAMgATYCFCADQecRNgIQIANBCjYCDEEAIQIMaQsCQAJAIAMtACxBAmsOAgABJwsgA0Ezai0AAEECcUUNJiADLQAuQQJxDSYgA0EANgIcIAMgATYCFCADQaYUNgIQIANBCzYCDEEAIQIMaQsgAy0AMkEgcUUNJSADLQAuQQJxDSUgA0EANgIcIAMgATYCFCADQb0TNgIQIANBDzYCDEEAIQIMaAtBACEAAkAgAygCOCICRQ0AIAIoAkgiAkUNACADIAIRAAAhAAsgAEUEQEHBACECDE8LIABBFUcEQCADQQA2AhwgAyABNgIUIANBpg82AhAgA0EcNgIMQQAhAgxoCyADQcoANgIcIAMgATYCFCADQYUcNgIQIANBFTYCDEEAIQIMZwsgASAERwRAA0AgAS0AAEHAwQBqLQAAQQFHDRcgBCABQQFqIgFHDQALQcQAIQIMZwtBxAAhAgxmCyABIARHBEADQAJAIAEtAAAiAEEgciAAIABBwQBrQf8BcUEaSRtB/wFxIgBBCUYNACAAQSBGDQACQAJAAkACQCAAQeMAaw4TAAMDAwMDAwMBAwMDAwMDAwMDAgMLIAFBAWohAUE2IQIMUgsgAUEBaiEBQTchAgxRCyABQQFqIQFBOCECDFALDBULIAQgAUEBaiIBRw0AC0E8IQIMZgtBPCECDGULIAEgBEYEQEHIACECDGULIANBEjYCCCADIAE2AgQCQAJAAkACQAJAIAMtACxBAWsOBBQAAQIJCyADLQAyQSBxDQNB4AEhAgxPCwJAIAMvATIiAEEIcUUNACADLQAoQQFHDQAgAy0ALkEIcUUNAgsgAyAAQff7A3FBgARyOwEyDAsLIAMgAy8BMkEQcjsBMgwECyADQQA2AgQgAyABIAEQMSIABEAgA0HBADYCHCADIAA2AgwgAyABQQFqNgIUQQAhAgxmCyABQQFqIQEMWAsgA0EANgIcIAMgATYCFCADQfQTNgIQIANBBDYCDEEAIQIMZAtBxwAhAiABIARGDWMgAygCACIAIAQgAWtqIQUgASAAa0EGaiEGAkADQCAAQcDFAGotAAAgAS0AAEEgckcNASAAQQZGDUogAEEBaiEAIAQgAUEBaiIBRw0ACyADIAU2AgAMZAsgA0EANgIADAULAkAgASAERwRAA0AgAS0AAEHAwwBqLQAAIgBBAUcEQCAAQQJHDQMgAUEBaiEBDAULIAQgAUEBaiIBRw0AC0HFACECDGQLQcUAIQIMYwsLIANBADoALAwBC0ELIQIMRwtBPyECDEYLAkACQANAIAEtAAAiAEEgRwRAAkAgAEEKaw4EAwUFAwALIABBLEYNAwwECyAEIAFBAWoiAUcNAAtBxgAhAgxgCyADQQg6ACwMDgsgAy0AKEEBRw0CIAMtAC5BCHENAiADKAIEIQAgA0EANgIEIAMgACABEDEiAARAIANBwgA2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIMXwsgAUEBaiEBDFALQTshAgxECwJAA0AgAS0AACIAQSBHIABBCUdxDQEgBCABQQFqIgFHDQALQcMAIQIMXQsLQTwhAgxCCwJAAkAgASAERwRAA0AgAS0AACIAQSBHBEAgAEEKaw4EAwQEAwQLIAQgAUEBaiIBRw0AC0E/IQIMXQtBPyECDFwLIAMgAy8BMkEgcjsBMgwKCyADKAIEIQAgA0EANgIEIAMgACABEDEiAEUNTiADQT42AhwgAyABNgIUIAMgADYCDEEAIQIMWgsCQCABIARHBEADQCABLQAAQcDDAGotAAAiAEEBRwRAIABBAkYNAwwMCyAEIAFBAWoiAUcNAAtBNyECDFsLQTchAgxaCyABQQFqIQEMBAtBOyECIAQgASIARg1YIAQgAWsgAygCACIBaiEGIAAgAWtBBWohBwJAA0AgAUGQyABqLQAAIAAtAAAiBUEgciAFIAVBwQBrQf8BcUEaSRtB/wFxRw0BIAFBBUYEQEEHIQEMPwsgAUEBaiEBIAQgAEEBaiIARw0ACyADIAY2AgAMWQsgA0EANgIAIAAhAQwFC0E6IQIgBCABIgBGDVcgBCABayADKAIAIgFqIQYgACABa0EIaiEHAkADQCABQbTBAGotAAAgAC0AACIFQSByIAUgBUHBAGtB/wFxQRpJG0H/AXFHDQEgAUEIRgRAQQUhAQw+CyABQQFqIQEgBCAAQQFqIgBHDQALIAMgBjYCAAxYCyADQQA2AgAgACEBDAQLQTkhAiAEIAEiAEYNViAEIAFrIAMoAgAiAWohBiAAIAFrQQNqIQcCQANAIAFBsMEAai0AACAALQAAIgVBIHIgBSAFQcEAa0H/AXFBGkkbQf8BcUcNASABQQNGBEBBBiEBDD0LIAFBAWohASAEIABBAWoiAEcNAAsgAyAGNgIADFcLIANBADYCACAAIQEMAwsCQANAIAEtAAAiAEEgRwRAIABBCmsOBAcEBAcCCyAEIAFBAWoiAUcNAAtBOCECDFYLIABBLEcNASABQQFqIQBBASEBAkACQAJAAkACQCADLQAsQQVrDgQDAQIEAAsgACEBDAQLQQIhAQwBC0EEIQELIANBAToALCADIAMvATIgAXI7ATIgACEBDAELIAMgAy8BMkEIcjsBMiAAIQELQT4hAgw7CyADQQA6ACwLQTkhAgw5CyABIARGBEBBNiECDFILAkACQAJAAkACQCABLQAAQQprDgQAAgIBAgsgAygCBCEAIANBADYCBCADIAAgARAxIgBFDQIgA0EzNgIcIAMgATYCFCADIAA2AgxBACECDFULIAMoAgQhACADQQA2AgQgAyAAIAEQMSIARQRAIAFBAWohAQwGCyADQTI2AhwgAyAANgIMIAMgAUEBajYCFEEAIQIMVAsgAy0ALkEBcQRAQd8BIQIMOwsgAygCBCEAIANBADYCBCADIAAgARAxIgANAQxJC0E0IQIMOQsgA0E1NgIcIAMgATYCFCADIAA2AgxBACECDFELQTUhAgw3CyADQS9qLQAAQQFxDQAgA0EANgIcIAMgATYCFCADQesWNgIQIANBGTYCDEEAIQIMTwtBMyECDDULIAEgBEYEQEEyIQIMTgsCQCABLQAAQQpGBEAgAUEBaiEBDAELIANBADYCHCADIAE2AhQgA0GSFzYCECADQQM2AgxBACECDE4LQTIhAgw0CyABIARGBEBBMSECDE0LAkAgAS0AACIAQQlGDQAgAEEgRg0AQQEhAgJAIAMtACxBBWsOBAYEBQANCyADIAMvATJBCHI7ATIMDAsgAy0ALkEBcUUNASADLQAsQQhHDQAgA0EAOgAsC0E9IQIMMgsgA0EANgIcIAMgATYCFCADQcIWNgIQIANBCjYCDEEAIQIMSgtBAiECDAELQQQhAgsgA0EBOgAsIAMgAy8BMiACcjsBMgwGCyABIARGBEBBMCECDEcLIAEtAABBCkYEQCABQQFqIQEMAQsgAy0ALkEBcQ0AIANBADYCHCADIAE2AhQgA0HcKDYCECADQQI2AgxBACECDEYLQTAhAgwsCyABQQFqIQFBMSECDCsLIAEgBEYEQEEvIQIMRAsgAS0AACIAQQlHIABBIEdxRQRAIAFBAWohASADLQAuQQFxDQEgA0EANgIcIAMgATYCFCADQZcQNgIQIANBCjYCDEEAIQIMRAtBASECAkACQAJAAkACQAJAIAMtACxBAmsOBwUEBAMBAgAECyADIAMvATJBCHI7ATIMAwtBAiECDAELQQQhAgsgA0EBOgAsIAMgAy8BMiACcjsBMgtBLyECDCsLIANBADYCHCADIAE2AhQgA0GEEzYCECADQQs2AgxBACECDEMLQeEBIQIMKQsgASAERgRAQS4hAgxCCyADQQA2AgQgA0ESNgIIIAMgASABEDEiAA0BC0EuIQIMJwsgA0EtNgIcIAMgATYCFCADIAA2AgxBACECDD8LQQAhAAJAIAMoAjgiAkUNACACKAJMIgJFDQAgAyACEQAAIQALIABFDQAgAEEVRw0BIANB2AA2AhwgAyABNgIUIANBsxs2AhAgA0EVNgIMQQAhAgw+C0HMACECDCQLIANBADYCHCADIAE2AhQgA0GzDjYCECADQR02AgxBACECDDwLIAEgBEYEQEHOACECDDwLIAEtAAAiAEEgRg0CIABBOkYNAQsgA0EAOgAsQQkhAgwhCyADKAIEIQAgA0EANgIEIAMgACABEDAiAA0BDAILIAMtAC5BAXEEQEHeASECDCALIAMoAgQhACADQQA2AgQgAyAAIAEQMCIARQ0CIANBKjYCHCADIAA2AgwgAyABQQFqNgIUQQAhAgw4CyADQcsANgIcIAMgADYCDCADIAFBAWo2AhRBACECDDcLIAFBAWohAUHAACECDB0LIAFBAWohAQwsCyABIARGBEBBKyECDDULAkAgAS0AAEEKRgRAIAFBAWohAQwBCyADLQAuQcAAcUUNBgsgAy0AMkGAAXEEQEEAIQACQCADKAI4IgJFDQAgAigCXCICRQ0AIAMgAhEAACEACyAARQ0SIABBFUYEQCADQQU2AhwgAyABNgIUIANBmxs2AhAgA0EVNgIMQQAhAgw2CyADQQA2AhwgAyABNgIUIANBkA42AhAgA0EUNgIMQQAhAgw1CyADQTJqIQIgAxA1QQAhAAJAIAMoAjgiBkUNACAGKAIoIgZFDQAgAyAGEQAAIQALIAAOFgIBAAQEBAQEBAQEBAQEBAQEBAQEBAMECyADQQE6ADALIAIgAi8BAEHAAHI7AQALQSshAgwYCyADQSk2AhwgAyABNgIUIANBrBk2AhAgA0EVNgIMQQAhAgwwCyADQQA2AhwgAyABNgIUIANB5Qs2AhAgA0ERNgIMQQAhAgwvCyADQQA2AhwgAyABNgIUIANBpQs2AhAgA0ECNgIMQQAhAgwuC0EBIQcgAy8BMiIFQQhxRQRAIAMpAyBCAFIhBwsCQCADLQAwBEBBASEAIAMtAClBBUYNASAFQcAAcUUgB3FFDQELAkAgAy0AKCICQQJGBEBBASEAIAMvATQiBkHlAEYNAkEAIQAgBUHAAHENAiAGQeQARg0CIAZB5gBrQQJJDQIgBkHMAUYNAiAGQbACRg0CDAELQQAhACAFQcAAcQ0BC0ECIQAgBUEIcQ0AIAVBgARxBEACQCACQQFHDQAgAy0ALkEKcQ0AQQUhAAwCC0EEIQAMAQsgBUEgcUUEQCADEDZBAEdBAnQhAAwBC0EAQQMgAykDIFAbIQALIABBAWsOBQIABwEDBAtBESECDBMLIANBAToAMQwpC0EAIQICQCADKAI4IgBFDQAgACgCMCIARQ0AIAMgABEAACECCyACRQ0mIAJBFUYEQCADQQM2AhwgAyABNgIUIANB0hs2AhAgA0EVNgIMQQAhAgwrC0EAIQIgA0EANgIcIAMgATYCFCADQd0ONgIQIANBEjYCDAwqCyADQQA2AhwgAyABNgIUIANB+SA2AhAgA0EPNgIMQQAhAgwpC0EAIQACQCADKAI4IgJFDQAgAigCMCICRQ0AIAMgAhEAACEACyAADQELQQ4hAgwOCyAAQRVGBEAgA0ECNgIcIAMgATYCFCADQdIbNgIQIANBFTYCDEEAIQIMJwsgA0EANgIcIAMgATYCFCADQd0ONgIQIANBEjYCDEEAIQIMJgtBKiECDAwLIAEgBEcEQCADQQk2AgggAyABNgIEQSkhAgwMC0EmIQIMJAsgAyADKQMgIgwgBCABa60iCn0iC0IAIAsgDFgbNwMgIAogDFQEQEElIQIMJAsgAygCBCEAIANBADYCBCADIAAgASAMp2oiARAyIgBFDQAgA0EFNgIcIAMgATYCFCADIAA2AgxBACECDCMLQQ8hAgwJC0IAIQoCQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkAgAS0AAEEwaw43FxYAAQIDBAUGBxQUFBQUFBQICQoLDA0UFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFA4PEBESExQLQgIhCgwWC0IDIQoMFQtCBCEKDBQLQgUhCgwTC0IGIQoMEgtCByEKDBELQgghCgwQC0IJIQoMDwtCCiEKDA4LQgshCgwNC0IMIQoMDAtCDSEKDAsLQg4hCgwKC0IPIQoMCQtCCiEKDAgLQgshCgwHC0IMIQoMBgtCDSEKDAULQg4hCgwEC0IPIQoMAwsgA0EANgIcIAMgATYCFCADQZ8VNgIQIANBDDYCDEEAIQIMIQsgASAERgRAQSIhAgwhC0IAIQoCQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAIAEtAABBMGsONxUUAAECAwQFBgcWFhYWFhYWCAkKCwwNFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYODxAREhMWC0ICIQoMFAtCAyEKDBMLQgQhCgwSC0IFIQoMEQtCBiEKDBALQgchCgwPC0IIIQoMDgtCCSEKDA0LQgohCgwMC0ILIQoMCwtCDCEKDAoLQg0hCgwJC0IOIQoMCAtCDyEKDAcLQgohCgwGC0ILIQoMBQtCDCEKDAQLQg0hCgwDC0IOIQoMAgtCDyEKDAELQgEhCgsgAUEBaiEBIAMpAyAiC0L//////////w9YBEAgAyALQgSGIAqENwMgDAILIANBADYCHCADIAE2AhQgA0G1CTYCECADQQw2AgxBACECDB4LQSchAgwEC0EoIQIMAwsgAyABOgAsIANBADYCACAHQQFqIQFBDCECDAILIANBADYCACAGQQFqIQFBCiECDAELIAFBAWohAUEIIQIMAAsAC0EAIQIgA0EANgIcIAMgATYCFCADQbI4NgIQIANBCDYCDAwXC0EAIQIgA0EANgIcIAMgATYCFCADQYMRNgIQIANBCTYCDAwWC0EAIQIgA0EANgIcIAMgATYCFCADQd8KNgIQIANBCTYCDAwVC0EAIQIgA0EANgIcIAMgATYCFCADQe0QNgIQIANBCTYCDAwUC0EAIQIgA0EANgIcIAMgATYCFCADQdIRNgIQIANBCTYCDAwTC0EAIQIgA0EANgIcIAMgATYCFCADQbI4NgIQIANBCDYCDAwSC0EAIQIgA0EANgIcIAMgATYCFCADQYMRNgIQIANBCTYCDAwRC0EAIQIgA0EANgIcIAMgATYCFCADQd8KNgIQIANBCTYCDAwQC0EAIQIgA0EANgIcIAMgATYCFCADQe0QNgIQIANBCTYCDAwPC0EAIQIgA0EANgIcIAMgATYCFCADQdIRNgIQIANBCTYCDAwOC0EAIQIgA0EANgIcIAMgATYCFCADQbkXNgIQIANBDzYCDAwNC0EAIQIgA0EANgIcIAMgATYCFCADQbkXNgIQIANBDzYCDAwMC0EAIQIgA0EANgIcIAMgATYCFCADQZkTNgIQIANBCzYCDAwLC0EAIQIgA0EANgIcIAMgATYCFCADQZ0JNgIQIANBCzYCDAwKC0EAIQIgA0EANgIcIAMgATYCFCADQZcQNgIQIANBCjYCDAwJC0EAIQIgA0EANgIcIAMgATYCFCADQbEQNgIQIANBCjYCDAwIC0EAIQIgA0EANgIcIAMgATYCFCADQbsdNgIQIANBAjYCDAwHC0EAIQIgA0EANgIcIAMgATYCFCADQZYWNgIQIANBAjYCDAwGC0EAIQIgA0EANgIcIAMgATYCFCADQfkYNgIQIANBAjYCDAwFC0EAIQIgA0EANgIcIAMgATYCFCADQcQYNgIQIANBAjYCDAwECyADQQI2AhwgAyABNgIUIANBqR42AhAgA0EWNgIMQQAhAgwDC0HeACECIAEgBEYNAiAJQQhqIQcgAygCACEFAkACQCABIARHBEAgBUGWyABqIQggBCAFaiABayEGIAVBf3NBCmoiBSABaiEAA0AgAS0AACAILQAARwRAQQIhCAwDCyAFRQRAQQAhCCAAIQEMAwsgBUEBayEFIAhBAWohCCAEIAFBAWoiAUcNAAsgBiEFIAQhAQsgB0EBNgIAIAMgBTYCAAwBCyADQQA2AgAgByAINgIACyAHIAE2AgQgCSgCDCEAAkACQCAJKAIIQQFrDgIEAQALIANBADYCHCADQcIeNgIQIANBFzYCDCADIABBAWo2AhRBACECDAMLIANBADYCHCADIAA2AhQgA0HXHjYCECADQQk2AgxBACECDAILIAEgBEYEQEEoIQIMAgsgA0EJNgIIIAMgATYCBEEnIQIMAQsgASAERgRAQQEhAgwBCwNAAkACQAJAIAEtAABBCmsOBAABAQABCyABQQFqIQEMAQsgAUEBaiEBIAMtAC5BIHENAEEAIQIgA0EANgIcIAMgATYCFCADQaEhNgIQIANBBTYCDAwCC0EBIQIgASAERw0ACwsgCUEQaiQAIAJFBEAgAygCDCEADAELIAMgAjYCHEEAIQAgAygCBCIBRQ0AIAMgASAEIAMoAggRAQAiAUUNACADIAQ2AhQgAyABNgIMIAEhAAsgAAu+AgECfyAAQQA6AAAgAEHkAGoiAUEBa0EAOgAAIABBADoAAiAAQQA6AAEgAUEDa0EAOgAAIAFBAmtBADoAACAAQQA6AAMgAUEEa0EAOgAAQQAgAGtBA3EiASAAaiIAQQA2AgBB5AAgAWtBfHEiAiAAaiIBQQRrQQA2AgACQCACQQlJDQAgAEEANgIIIABBADYCBCABQQhrQQA2AgAgAUEMa0EANgIAIAJBGUkNACAAQQA2AhggAEEANgIUIABBADYCECAAQQA2AgwgAUEQa0EANgIAIAFBFGtBADYCACABQRhrQQA2AgAgAUEca0EANgIAIAIgAEEEcUEYciICayIBQSBJDQAgACACaiEAA0AgAEIANwMYIABCADcDECAAQgA3AwggAEIANwMAIABBIGohACABQSBrIgFBH0sNAAsLC1YBAX8CQCAAKAIMDQACQAJAAkACQCAALQAxDgMBAAMCCyAAKAI4IgFFDQAgASgCMCIBRQ0AIAAgAREAACIBDQMLQQAPCwALIABByhk2AhBBDiEBCyABCxoAIAAoAgxFBEAgAEHeHzYCECAAQRU2AgwLCxQAIAAoAgxBFUYEQCAAQQA2AgwLCxQAIAAoAgxBFkYEQCAAQQA2AgwLCwcAIAAoAgwLBwAgACgCEAsJACAAIAE2AhALBwAgACgCFAsrAAJAIABBJ08NAEL//////wkgAK2IQgGDUA0AIABBAnRB0DhqKAIADwsACxcAIABBL08EQAALIABBAnRB7DlqKAIAC78JAQF/QfQtIQECQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQCAAQeQAaw70A2NiAAFhYWFhYWECAwQFYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYQYHCAkKCwwNDg9hYWFhYRBhYWFhYWFhYWFhYRFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWESExQVFhcYGRobYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYRwdHh8gISIjJCUmJygpKissLS4vMDEyMzQ1NmE3ODk6YWFhYWFhYWE7YWFhPGFhYWE9Pj9hYWFhYWFhYUBhYUFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFCQ0RFRkdISUpLTE1OT1BRUlNhYWFhYWFhYVRVVldYWVpbYVxdYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhXmFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYWFhYV9gYQtB6iwPC0GYJg8LQe0xDwtBoDcPC0HJKQ8LQbQpDwtBli0PC0HrKw8LQaI1DwtB2zQPC0HgKQ8LQeMkDwtB1SQPC0HuJA8LQeYlDwtByjQPC0HQNw8LQao1DwtB9SwPC0H2Jg8LQYIiDwtB8jMPC0G+KA8LQec3DwtBzSEPC0HAIQ8LQbglDwtByyUPC0GWJA8LQY80DwtBzTUPC0HdKg8LQe4zDwtBnDQPC0GeMQ8LQfQ1DwtB5SIPC0GvJQ8LQZkxDwtBsjYPC0H5Ng8LQcQyDwtB3SwPC0GCMQ8LQcExDwtBjTcPC0HJJA8LQew2DwtB5yoPC0HIIw8LQeIhDwtByTcPC0GlIg8LQZQiDwtB2zYPC0HeNQ8LQYYmDwtBvCsPC0GLMg8LQaAjDwtB9jAPC0GALA8LQYkrDwtBpCYPC0HyIw8LQYEoDwtBqzIPC0HrJw8LQcI2DwtBoiQPC0HPKg8LQdwjDwtBhycPC0HkNA8LQbciDwtBrTEPC0HVIg8LQa80DwtB3iYPC0HWMg8LQfQ0DwtBgTgPC0H0Nw8LQZI2DwtBnScPC0GCKQ8LQY0jDwtB1zEPC0G9NQ8LQbQ3DwtB2DAPC0G2Jw8LQZo4DwtBpyoPC0HEJw8LQa4jDwtB9SIPCwALQcomIQELIAELFwAgACAALwEuQf7/A3EgAUEAR3I7AS4LGgAgACAALwEuQf3/A3EgAUEAR0EBdHI7AS4LGgAgACAALwEuQfv/A3EgAUEAR0ECdHI7AS4LGgAgACAALwEuQff/A3EgAUEAR0EDdHI7AS4LGgAgACAALwEuQe//A3EgAUEAR0EEdHI7AS4LGgAgACAALwEuQd//A3EgAUEAR0EFdHI7AS4LGgAgACAALwEuQb//A3EgAUEAR0EGdHI7AS4LGgAgACAALwEuQf/+A3EgAUEAR0EHdHI7AS4LGgAgACAALwEuQf/9A3EgAUEAR0EIdHI7AS4LGgAgACAALwEuQf/7A3EgAUEAR0EJdHI7AS4LPgECfwJAIAAoAjgiA0UNACADKAIEIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEHhEjYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIIIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEH8ETYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIMIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEHsCjYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIQIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEH6HjYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIUIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEHLEDYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIYIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEG3HzYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIcIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEG/FTYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIsIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEH+CDYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIgIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEGMHTYCEEEYIQQLIAQLPgECfwJAIAAoAjgiA0UNACADKAIkIgNFDQAgACABIAIgAWsgAxEBACIEQX9HDQAgAEHmFTYCEEEYIQQLIAQLOAAgAAJ/IAAvATJBFHFBFEYEQEEBIAAtAChBAUYNARogAC8BNEHlAEYMAQsgAC0AKUEFRgs6ADALWQECfwJAIAAtAChBAUYNACAALwE0IgFB5ABrQeQASQ0AIAFBzAFGDQAgAUGwAkYNACAALwEyIgBBwABxDQBBASECIABBiARxQYAERg0AIABBKHFFIQILIAILjAEBAn8CQAJAAkAgAC0AKkUNACAALQArRQ0AIAAvATIiAUECcUUNAQwCCyAALwEyIgFBAXFFDQELQQEhAiAALQAoQQFGDQAgAC8BNCIAQeQAa0HkAEkNACAAQcwBRg0AIABBsAJGDQAgAUHAAHENAEEAIQIgAUGIBHFBgARGDQAgAUEocUEARyECCyACC1cAIABBGGpCADcDACAAQgA3AwAgAEE4akIANwMAIABBMGpCADcDACAAQShqQgA3AwAgAEEgakIANwMAIABBEGpCADcDACAAQQhqQgA3AwAgAEH9ATYCHAsGACAAEDoLmi0BC38jAEEQayIKJABB3NUAKAIAIglFBEBBnNkAKAIAIgVFBEBBqNkAQn83AgBBoNkAQoCAhICAgMAANwIAQZzZACAKQQhqQXBxQdiq1aoFcyIFNgIAQbDZAEEANgIAQYDZAEEANgIAC0GE2QBBwNkENgIAQdTVAEHA2QQ2AgBB6NUAIAU2AgBB5NUAQX82AgBBiNkAQcCmAzYCAANAIAFBgNYAaiABQfTVAGoiAjYCACACIAFB7NUAaiIDNgIAIAFB+NUAaiADNgIAIAFBiNYAaiABQfzVAGoiAzYCACADIAI2AgAgAUGQ1gBqIAFBhNYAaiICNgIAIAIgAzYCACABQYzWAGogAjYCACABQSBqIgFBgAJHDQALQczZBEGBpgM2AgBB4NUAQazZACgCADYCAEHQ1QBBgKYDNgIAQdzVAEHI2QQ2AgBBzP8HQTg2AgBByNkEIQkLAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkACQAJAAkAgAEHsAU0EQEHE1QAoAgAiBkEQIABBE2pBcHEgAEELSRsiBEEDdiIAdiIBQQNxBEACQCABQQFxIAByQQFzIgJBA3QiAEHs1QBqIgEgAEH01QBqKAIAIgAoAggiA0YEQEHE1QAgBkF+IAJ3cTYCAAwBCyABIAM2AgggAyABNgIMCyAAQQhqIQEgACACQQN0IgJBA3I2AgQgACACaiIAIAAoAgRBAXI2AgQMEQtBzNUAKAIAIgggBE8NASABBEACQEECIAB0IgJBACACa3IgASAAdHFoIgBBA3QiAkHs1QBqIgEgAkH01QBqKAIAIgIoAggiA0YEQEHE1QAgBkF+IAB3cSIGNgIADAELIAEgAzYCCCADIAE2AgwLIAIgBEEDcjYCBCAAQQN0IgAgBGshBSAAIAJqIAU2AgAgAiAEaiIEIAVBAXI2AgQgCARAIAhBeHFB7NUAaiEAQdjVACgCACEDAn9BASAIQQN2dCIBIAZxRQRAQcTVACABIAZyNgIAIAAMAQsgACgCCAsiASADNgIMIAAgAzYCCCADIAA2AgwgAyABNgIICyACQQhqIQFB2NUAIAQ2AgBBzNUAIAU2AgAMEQtByNUAKAIAIgtFDQEgC2hBAnRB9NcAaigCACIAKAIEQXhxIARrIQUgACECA0ACQCACKAIQIgFFBEAgAkEUaigCACIBRQ0BCyABKAIEQXhxIARrIgMgBUkhAiADIAUgAhshBSABIAAgAhshACABIQIMAQsLIAAoAhghCSAAKAIMIgMgAEcEQEHU1QAoAgAaIAMgACgCCCIBNgIIIAEgAzYCDAwQCyAAQRRqIgIoAgAiAUUEQCAAKAIQIgFFDQMgAEEQaiECCwNAIAIhByABIgNBFGoiAigCACIBDQAgA0EQaiECIAMoAhAiAQ0ACyAHQQA2AgAMDwtBfyEEIABBv39LDQAgAEETaiIBQXBxIQRByNUAKAIAIghFDQBBACAEayEFAkACQAJAAn9BACAEQYACSQ0AGkEfIARB////B0sNABogBEEmIAFBCHZnIgBrdkEBcSAAQQF0a0E+agsiBkECdEH01wBqKAIAIgJFBEBBACEBQQAhAwwBC0EAIQEgBEEZIAZBAXZrQQAgBkEfRxt0IQBBACEDA0ACQCACKAIEQXhxIARrIgcgBU8NACACIQMgByIFDQBBACEFIAIhAQwDCyABIAJBFGooAgAiByAHIAIgAEEddkEEcWpBEGooAgAiAkYbIAEgBxshASAAQQF0IQAgAg0ACwsgASADckUEQEEAIQNBAiAGdCIAQQAgAGtyIAhxIgBFDQMgAGhBAnRB9NcAaigCACEBCyABRQ0BCwNAIAEoAgRBeHEgBGsiAiAFSSEAIAIgBSAAGyEFIAEgAyAAGyEDIAEoAhAiAAR/IAAFIAFBFGooAgALIgENAAsLIANFDQAgBUHM1QAoAgAgBGtPDQAgAygCGCEHIAMgAygCDCIARwRAQdTVACgCABogACADKAIIIgE2AgggASAANgIMDA4LIANBFGoiAigCACIBRQRAIAMoAhAiAUUNAyADQRBqIQILA0AgAiEGIAEiAEEUaiICKAIAIgENACAAQRBqIQIgACgCECIBDQALIAZBADYCAAwNC0HM1QAoAgAiAyAETwRAQdjVACgCACEBAkAgAyAEayICQRBPBEAgASAEaiIAIAJBAXI2AgQgASADaiACNgIAIAEgBEEDcjYCBAwBCyABIANBA3I2AgQgASADaiIAIAAoAgRBAXI2AgRBACEAQQAhAgtBzNUAIAI2AgBB2NUAIAA2AgAgAUEIaiEBDA8LQdDVACgCACIDIARLBEAgBCAJaiIAIAMgBGsiAUEBcjYCBEHc1QAgADYCAEHQ1QAgATYCACAJIARBA3I2AgQgCUEIaiEBDA8LQQAhASAEAn9BnNkAKAIABEBBpNkAKAIADAELQajZAEJ/NwIAQaDZAEKAgISAgIDAADcCAEGc2QAgCkEMakFwcUHYqtWqBXM2AgBBsNkAQQA2AgBBgNkAQQA2AgBBgIAECyIAIARBxwBqIgVqIgZBACAAayIHcSICTwRAQbTZAEEwNgIADA8LAkBB/NgAKAIAIgFFDQBB9NgAKAIAIgggAmohACAAIAFNIAAgCEtxDQBBACEBQbTZAEEwNgIADA8LQYDZAC0AAEEEcQ0EAkACQCAJBEBBhNkAIQEDQCABKAIAIgAgCU0EQCAAIAEoAgRqIAlLDQMLIAEoAggiAQ0ACwtBABA7IgBBf0YNBSACIQZBoNkAKAIAIgFBAWsiAyAAcQRAIAIgAGsgACADakEAIAFrcWohBgsgBCAGTw0FIAZB/v///wdLDQVB/NgAKAIAIgMEQEH02AAoAgAiByAGaiEBIAEgB00NBiABIANLDQYLIAYQOyIBIABHDQEMBwsgBiADayAHcSIGQf7///8HSw0EIAYQOyEAIAAgASgCACABKAIEakYNAyAAIQELAkAgBiAEQcgAak8NACABQX9GDQBBpNkAKAIAIgAgBSAGa2pBACAAa3EiAEH+////B0sEQCABIQAMBwsgABA7QX9HBEAgACAGaiEGIAEhAAwHC0EAIAZrEDsaDAQLIAEiAEF/Rw0FDAMLQQAhAwwMC0EAIQAMCgsgAEF/Rw0CC0GA2QBBgNkAKAIAQQRyNgIACyACQf7///8HSw0BIAIQOyEAQQAQOyEBIABBf0YNASABQX9GDQEgACABTw0BIAEgAGsiBiAEQThqTQ0BC0H02ABB9NgAKAIAIAZqIgE2AgBB+NgAKAIAIAFJBEBB+NgAIAE2AgALAkACQAJAQdzVACgCACICBEBBhNkAIQEDQCAAIAEoAgAiAyABKAIEIgVqRg0CIAEoAggiAQ0ACwwCC0HU1QAoAgAiAUEARyAAIAFPcUUEQEHU1QAgADYCAAtBACEBQYjZACAGNgIAQYTZACAANgIAQeTVAEF/NgIAQejVAEGc2QAoAgA2AgBBkNkAQQA2AgADQCABQYDWAGogAUH01QBqIgI2AgAgAiABQezVAGoiAzYCACABQfjVAGogAzYCACABQYjWAGogAUH81QBqIgM2AgAgAyACNgIAIAFBkNYAaiABQYTWAGoiAjYCACACIAM2AgAgAUGM1gBqIAI2AgAgAUEgaiIBQYACRw0AC0F4IABrQQ9xIgEgAGoiAiAGQThrIgMgAWsiAUEBcjYCBEHg1QBBrNkAKAIANgIAQdDVACABNgIAQdzVACACNgIAIAAgA2pBODYCBAwCCyAAIAJNDQAgAiADSQ0AIAEoAgxBCHENAEF4IAJrQQ9xIgAgAmoiA0HQ1QAoAgAgBmoiByAAayIAQQFyNgIEIAEgBSAGajYCBEHg1QBBrNkAKAIANgIAQdDVACAANgIAQdzVACADNgIAIAIgB2pBODYCBAwBCyAAQdTVACgCAEkEQEHU1QAgADYCAAsgACAGaiEDQYTZACEBAkACQAJAA0AgAyABKAIARwRAIAEoAggiAQ0BDAILCyABLQAMQQhxRQ0BC0GE2QAhAQNAIAEoAgAiAyACTQRAIAMgASgCBGoiBSACSw0DCyABKAIIIQEMAAsACyABIAA2AgAgASABKAIEIAZqNgIEIABBeCAAa0EPcWoiCSAEQQNyNgIEIANBeCADa0EPcWoiBiAEIAlqIgRrIQEgAiAGRgRAQdzVACAENgIAQdDVAEHQ1QAoAgAgAWoiADYCACAEIABBAXI2AgQMCAtB2NUAKAIAIAZGBEBB2NUAIAQ2AgBBzNUAQczVACgCACABaiIANgIAIAQgAEEBcjYCBCAAIARqIAA2AgAMCAsgBigCBCIFQQNxQQFHDQYgBUF4cSEIIAVB/wFNBEAgBUEDdiEDIAYoAggiACAGKAIMIgJGBEBBxNUAQcTVACgCAEF+IAN3cTYCAAwHCyACIAA2AgggACACNgIMDAYLIAYoAhghByAGIAYoAgwiAEcEQCAAIAYoAggiAjYCCCACIAA2AgwMBQsgBkEUaiICKAIAIgVFBEAgBigCECIFRQ0EIAZBEGohAgsDQCACIQMgBSIAQRRqIgIoAgAiBQ0AIABBEGohAiAAKAIQIgUNAAsgA0EANgIADAQLQXggAGtBD3EiASAAaiIHIAZBOGsiAyABayIBQQFyNgIEIAAgA2pBODYCBCACIAVBNyAFa0EPcWpBP2siAyADIAJBEGpJGyIDQSM2AgRB4NUAQazZACgCADYCAEHQ1QAgATYCAEHc1QAgBzYCACADQRBqQYzZACkCADcCACADQYTZACkCADcCCEGM2QAgA0EIajYCAEGI2QAgBjYCAEGE2QAgADYCAEGQ2QBBADYCACADQSRqIQEDQCABQQc2AgAgBSABQQRqIgFLDQALIAIgA0YNACADIAMoAgRBfnE2AgQgAyADIAJrIgU2AgAgAiAFQQFyNgIEIAVB/wFNBEAgBUF4cUHs1QBqIQACf0HE1QAoAgAiAUEBIAVBA3Z0IgNxRQRAQcTVACABIANyNgIAIAAMAQsgACgCCAsiASACNgIMIAAgAjYCCCACIAA2AgwgAiABNgIIDAELQR8hASAFQf///wdNBEAgBUEmIAVBCHZnIgBrdkEBcSAAQQF0a0E+aiEBCyACIAE2AhwgAkIANwIQIAFBAnRB9NcAaiEAQcjVACgCACIDQQEgAXQiBnFFBEAgACACNgIAQcjVACADIAZyNgIAIAIgADYCGCACIAI2AgggAiACNgIMDAELIAVBGSABQQF2a0EAIAFBH0cbdCEBIAAoAgAhAwJAA0AgAyIAKAIEQXhxIAVGDQEgAUEddiEDIAFBAXQhASAAIANBBHFqQRBqIgYoAgAiAw0ACyAGIAI2AgAgAiAANgIYIAIgAjYCDCACIAI2AggMAQsgACgCCCIBIAI2AgwgACACNgIIIAJBADYCGCACIAA2AgwgAiABNgIIC0HQ1QAoAgAiASAETQ0AQdzVACgCACIAIARqIgIgASAEayIBQQFyNgIEQdDVACABNgIAQdzVACACNgIAIAAgBEEDcjYCBCAAQQhqIQEMCAtBACEBQbTZAEEwNgIADAcLQQAhAAsgB0UNAAJAIAYoAhwiAkECdEH01wBqIgMoAgAgBkYEQCADIAA2AgAgAA0BQcjVAEHI1QAoAgBBfiACd3E2AgAMAgsgB0EQQRQgBygCECAGRhtqIAA2AgAgAEUNAQsgACAHNgIYIAYoAhAiAgRAIAAgAjYCECACIAA2AhgLIAZBFGooAgAiAkUNACAAQRRqIAI2AgAgAiAANgIYCyABIAhqIQEgBiAIaiIGKAIEIQULIAYgBUF+cTYCBCABIARqIAE2AgAgBCABQQFyNgIEIAFB/wFNBEAgAUF4cUHs1QBqIQACf0HE1QAoAgAiAkEBIAFBA3Z0IgFxRQRAQcTVACABIAJyNgIAIAAMAQsgACgCCAsiASAENgIMIAAgBDYCCCAEIAA2AgwgBCABNgIIDAELQR8hBSABQf///wdNBEAgAUEmIAFBCHZnIgBrdkEBcSAAQQF0a0E+aiEFCyAEIAU2AhwgBEIANwIQIAVBAnRB9NcAaiEAQcjVACgCACICQQEgBXQiA3FFBEAgACAENgIAQcjVACACIANyNgIAIAQgADYCGCAEIAQ2AgggBCAENgIMDAELIAFBGSAFQQF2a0EAIAVBH0cbdCEFIAAoAgAhAAJAA0AgACICKAIEQXhxIAFGDQEgBUEddiEAIAVBAXQhBSACIABBBHFqQRBqIgMoAgAiAA0ACyADIAQ2AgAgBCACNgIYIAQgBDYCDCAEIAQ2AggMAQsgAigCCCIAIAQ2AgwgAiAENgIIIARBADYCGCAEIAI2AgwgBCAANgIICyAJQQhqIQEMAgsCQCAHRQ0AAkAgAygCHCIBQQJ0QfTXAGoiAigCACADRgRAIAIgADYCACAADQFByNUAIAhBfiABd3EiCDYCAAwCCyAHQRBBFCAHKAIQIANGG2ogADYCACAARQ0BCyAAIAc2AhggAygCECIBBEAgACABNgIQIAEgADYCGAsgA0EUaigCACIBRQ0AIABBFGogATYCACABIAA2AhgLAkAgBUEPTQRAIAMgBCAFaiIAQQNyNgIEIAAgA2oiACAAKAIEQQFyNgIEDAELIAMgBGoiAiAFQQFyNgIEIAMgBEEDcjYCBCACIAVqIAU2AgAgBUH/AU0EQCAFQXhxQezVAGohAAJ/QcTVACgCACIBQQEgBUEDdnQiBXFFBEBBxNUAIAEgBXI2AgAgAAwBCyAAKAIICyIBIAI2AgwgACACNgIIIAIgADYCDCACIAE2AggMAQtBHyEBIAVB////B00EQCAFQSYgBUEIdmciAGt2QQFxIABBAXRrQT5qIQELIAIgATYCHCACQgA3AhAgAUECdEH01wBqIQBBASABdCIEIAhxRQRAIAAgAjYCAEHI1QAgBCAIcjYCACACIAA2AhggAiACNgIIIAIgAjYCDAwBCyAFQRkgAUEBdmtBACABQR9HG3QhASAAKAIAIQQCQANAIAQiACgCBEF4cSAFRg0BIAFBHXYhBCABQQF0IQEgACAEQQRxakEQaiIGKAIAIgQNAAsgBiACNgIAIAIgADYCGCACIAI2AgwgAiACNgIIDAELIAAoAggiASACNgIMIAAgAjYCCCACQQA2AhggAiAANgIMIAIgATYCCAsgA0EIaiEBDAELAkAgCUUNAAJAIAAoAhwiAUECdEH01wBqIgIoAgAgAEYEQCACIAM2AgAgAw0BQcjVACALQX4gAXdxNgIADAILIAlBEEEUIAkoAhAgAEYbaiADNgIAIANFDQELIAMgCTYCGCAAKAIQIgEEQCADIAE2AhAgASADNgIYCyAAQRRqKAIAIgFFDQAgA0EUaiABNgIAIAEgAzYCGAsCQCAFQQ9NBEAgACAEIAVqIgFBA3I2AgQgACABaiIBIAEoAgRBAXI2AgQMAQsgACAEaiIHIAVBAXI2AgQgACAEQQNyNgIEIAUgB2ogBTYCACAIBEAgCEF4cUHs1QBqIQFB2NUAKAIAIQMCf0EBIAhBA3Z0IgIgBnFFBEBBxNUAIAIgBnI2AgAgAQwBCyABKAIICyICIAM2AgwgASADNgIIIAMgATYCDCADIAI2AggLQdjVACAHNgIAQczVACAFNgIACyAAQQhqIQELIApBEGokACABC0MAIABFBEA/AEEQdA8LAkAgAEH//wNxDQAgAEEASA0AIABBEHZAACIAQX9GBEBBtNkAQTA2AgBBfw8LIABBEHQPCwALC5lCIgBBgAgLDQEAAAAAAAAAAgAAAAMAQZgICwUEAAAABQBBqAgLCQYAAAAHAAAACABB5AgLwjJJbnZhbGlkIGNoYXIgaW4gdXJsIHF1ZXJ5AFNwYW4gY2FsbGJhY2sgZXJyb3IgaW4gb25fYm9keQBDb250ZW50LUxlbmd0aCBvdmVyZmxvdwBDaHVuayBzaXplIG92ZXJmbG93AEludmFsaWQgbWV0aG9kIGZvciBIVFRQL3gueCByZXF1ZXN0AEludmFsaWQgbWV0aG9kIGZvciBSVFNQL3gueCByZXF1ZXN0AEV4cGVjdGVkIFNPVVJDRSBtZXRob2QgZm9yIElDRS94LnggcmVxdWVzdABJbnZhbGlkIGNoYXIgaW4gdXJsIGZyYWdtZW50IHN0YXJ0AEV4cGVjdGVkIGRvdABTcGFuIGNhbGxiYWNrIGVycm9yIGluIG9uX3N0YXR1cwBJbnZhbGlkIHJlc3BvbnNlIHN0YXR1cwBFeHBlY3RlZCBMRiBhZnRlciBoZWFkZXJzAEludmFsaWQgY2hhcmFjdGVyIGluIGNodW5rIGV4dGVuc2lvbnMAVXNlciBjYWxsYmFjayBlcnJvcgBgb25fcmVzZXRgIGNhbGxiYWNrIGVycm9yAGBvbl9jaHVua19oZWFkZXJgIGNhbGxiYWNrIGVycm9yAGBvbl9tZXNzYWdlX2JlZ2luYCBjYWxsYmFjayBlcnJvcgBgb25fY2h1bmtfZXh0ZW5zaW9uX3ZhbHVlYCBjYWxsYmFjayBlcnJvcgBgb25fc3RhdHVzX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25fdmVyc2lvbl9jb21wbGV0ZWAgY2FsbGJhY2sgZXJyb3IAYG9uX3VybF9jb21wbGV0ZWAgY2FsbGJhY2sgZXJyb3IAYG9uX3Byb3RvY29sX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25fY2h1bmtfY29tcGxldGVgIGNhbGxiYWNrIGVycm9yAGBvbl9oZWFkZXJfdmFsdWVfY29tcGxldGVgIGNhbGxiYWNrIGVycm9yAGBvbl9tZXNzYWdlX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25fbWV0aG9kX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25faGVhZGVyX2ZpZWxkX2NvbXBsZXRlYCBjYWxsYmFjayBlcnJvcgBgb25fY2h1bmtfZXh0ZW5zaW9uX25hbWVgIGNhbGxiYWNrIGVycm9yAFVuZXhwZWN0ZWQgY2hhciBpbiB1cmwgc2VydmVyAEludmFsaWQgaGVhZGVyIHZhbHVlIGNoYXIASW52YWxpZCBoZWFkZXIgZmllbGQgY2hhcgBTcGFuIGNhbGxiYWNrIGVycm9yIGluIG9uX3ZlcnNpb24ASW52YWxpZCBtaW5vciB2ZXJzaW9uAEludmFsaWQgbWFqb3IgdmVyc2lvbgBFeHBlY3RlZCBzcGFjZSBhZnRlciB2ZXJzaW9uAEV4cGVjdGVkIENSTEYgYWZ0ZXIgdmVyc2lvbgBJbnZhbGlkIEhUVFAgdmVyc2lvbgBJbnZhbGlkIGhlYWRlciB0b2tlbgBTcGFuIGNhbGxiYWNrIGVycm9yIGluIG9uX3VybABJbnZhbGlkIGNoYXJhY3RlcnMgaW4gdXJsAFVuZXhwZWN0ZWQgc3RhcnQgY2hhciBpbiB1cmwARG91YmxlIEAgaW4gdXJsAFNwYW4gY2FsbGJhY2sgZXJyb3IgaW4gb25fcHJvdG9jb2wARW1wdHkgQ29udGVudC1MZW5ndGgASW52YWxpZCBjaGFyYWN0ZXIgaW4gQ29udGVudC1MZW5ndGgAVHJhbnNmZXItRW5jb2RpbmcgY2FuJ3QgYmUgcHJlc2VudCB3aXRoIENvbnRlbnQtTGVuZ3RoAER1cGxpY2F0ZSBDb250ZW50LUxlbmd0aABJbnZhbGlkIGNoYXIgaW4gdXJsIHBhdGgAQ29udGVudC1MZW5ndGggY2FuJ3QgYmUgcHJlc2VudCB3aXRoIFRyYW5zZmVyLUVuY29kaW5nAE1pc3NpbmcgZXhwZWN0ZWQgQ1IgYWZ0ZXIgY2h1bmsgc2l6ZQBFeHBlY3RlZCBMRiBhZnRlciBjaHVuayBzaXplAEludmFsaWQgY2hhcmFjdGVyIGluIGNodW5rIHNpemUAU3BhbiBjYWxsYmFjayBlcnJvciBpbiBvbl9oZWFkZXJfdmFsdWUAU3BhbiBjYWxsYmFjayBlcnJvciBpbiBvbl9jaHVua19leHRlbnNpb25fdmFsdWUASW52YWxpZCBjaGFyYWN0ZXIgaW4gY2h1bmsgZXh0ZW5zaW9ucyB2YWx1ZQBVbmV4cGVjdGVkIHdoaXRlc3BhY2UgYWZ0ZXIgaGVhZGVyIHZhbHVlAE1pc3NpbmcgZXhwZWN0ZWQgQ1IgYWZ0ZXIgaGVhZGVyIHZhbHVlAE1pc3NpbmcgZXhwZWN0ZWQgTEYgYWZ0ZXIgaGVhZGVyIHZhbHVlAEludmFsaWQgYFRyYW5zZmVyLUVuY29kaW5nYCBoZWFkZXIgdmFsdWUATWlzc2luZyBleHBlY3RlZCBDUiBhZnRlciBjaHVuayBleHRlbnNpb24gdmFsdWUASW52YWxpZCBjaGFyYWN0ZXIgaW4gY2h1bmsgZXh0ZW5zaW9ucyBxdW90ZSB2YWx1ZQBJbnZhbGlkIHF1b3RlZC1wYWlyIGluIGNodW5rIGV4dGVuc2lvbnMgcXVvdGVkIHZhbHVlAEludmFsaWQgY2hhcmFjdGVyIGluIGNodW5rIGV4dGVuc2lvbnMgcXVvdGVkIHZhbHVlAFBhdXNlZCBieSBvbl9oZWFkZXJzX2NvbXBsZXRlAEludmFsaWQgRU9GIHN0YXRlAG9uX3Jlc2V0IHBhdXNlAG9uX2NodW5rX2hlYWRlciBwYXVzZQBvbl9tZXNzYWdlX2JlZ2luIHBhdXNlAG9uX2NodW5rX2V4dGVuc2lvbl92YWx1ZSBwYXVzZQBvbl9zdGF0dXNfY29tcGxldGUgcGF1c2UAb25fdmVyc2lvbl9jb21wbGV0ZSBwYXVzZQBvbl91cmxfY29tcGxldGUgcGF1c2UAb25fcHJvdG9jb2xfY29tcGxldGUgcGF1c2UAb25fY2h1bmtfY29tcGxldGUgcGF1c2UAb25faGVhZGVyX3ZhbHVlX2NvbXBsZXRlIHBhdXNlAG9uX21lc3NhZ2VfY29tcGxldGUgcGF1c2UAb25fbWV0aG9kX2NvbXBsZXRlIHBhdXNlAG9uX2hlYWRlcl9maWVsZF9jb21wbGV0ZSBwYXVzZQBvbl9jaHVua19leHRlbnNpb25fbmFtZSBwYXVzZQBVbmV4cGVjdGVkIHNwYWNlIGFmdGVyIHN0YXJ0IGxpbmUATWlzc2luZyBleHBlY3RlZCBDUiBhZnRlciByZXNwb25zZSBsaW5lAFNwYW4gY2FsbGJhY2sgZXJyb3IgaW4gb25fY2h1bmtfZXh0ZW5zaW9uX25hbWUASW52YWxpZCBjaGFyYWN0ZXIgaW4gY2h1bmsgZXh0ZW5zaW9ucyBuYW1lAE1pc3NpbmcgZXhwZWN0ZWQgQ1IgYWZ0ZXIgY2h1bmsgZXh0ZW5zaW9uIG5hbWUASW52YWxpZCBzdGF0dXMgY29kZQBQYXVzZSBvbiBDT05ORUNUL1VwZ3JhZGUAUGF1c2Ugb24gUFJJL1VwZ3JhZGUARXhwZWN0ZWQgSFRUUC8yIENvbm5lY3Rpb24gUHJlZmFjZQBTcGFuIGNhbGxiYWNrIGVycm9yIGluIG9uX21ldGhvZABFeHBlY3RlZCBzcGFjZSBhZnRlciBtZXRob2QAU3BhbiBjYWxsYmFjayBlcnJvciBpbiBvbl9oZWFkZXJfZmllbGQAUGF1c2VkAEludmFsaWQgd29yZCBlbmNvdW50ZXJlZABJbnZhbGlkIG1ldGhvZCBlbmNvdW50ZXJlZABNaXNzaW5nIGV4cGVjdGVkIENSIGFmdGVyIGNodW5rIGRhdGEARXhwZWN0ZWQgTEYgYWZ0ZXIgY2h1bmsgZGF0YQBVbmV4cGVjdGVkIGNoYXIgaW4gdXJsIHNjaGVtYQBSZXF1ZXN0IGhhcyBpbnZhbGlkIGBUcmFuc2Zlci1FbmNvZGluZ2AARGF0YSBhZnRlciBgQ29ubmVjdGlvbjogY2xvc2VgAFNXSVRDSF9QUk9YWQBVU0VfUFJPWFkATUtBQ1RJVklUWQBVTlBST0NFU1NBQkxFX0VOVElUWQBRVUVSWQBDT1BZAE1PVkVEX1BFUk1BTkVOVExZAFRPT19FQVJMWQBOT1RJRlkARkFJTEVEX0RFUEVOREVOQ1kAQkFEX0dBVEVXQVkAUExBWQBQVVQAQ0hFQ0tPVVQAR0FURVdBWV9USU1FT1VUAFJFUVVFU1RfVElNRU9VVABORVRXT1JLX0NPTk5FQ1RfVElNRU9VVABDT05ORUNUSU9OX1RJTUVPVVQATE9HSU5fVElNRU9VVABORVRXT1JLX1JFQURfVElNRU9VVABQT1NUAE1JU0RJUkVDVEVEX1JFUVVFU1QAQ0xJRU5UX0NMT1NFRF9SRVFVRVNUAENMSUVOVF9DTE9TRURfTE9BRF9CQUxBTkNFRF9SRVFVRVNUAEJBRF9SRVFVRVNUAEhUVFBfUkVRVUVTVF9TRU5UX1RPX0hUVFBTX1BPUlQAUkVQT1JUAElNX0FfVEVBUE9UAFJFU0VUX0NPTlRFTlQATk9fQ09OVEVOVABQQVJUSUFMX0NPTlRFTlQASFBFX0lOVkFMSURfQ09OU1RBTlQASFBFX0NCX1JFU0VUAEdFVABIUEVfU1RSSUNUAENPTkZMSUNUAFRFTVBPUkFSWV9SRURJUkVDVABQRVJNQU5FTlRfUkVESVJFQ1QAQ09OTkVDVABNVUxUSV9TVEFUVVMASFBFX0lOVkFMSURfU1RBVFVTAFRPT19NQU5ZX1JFUVVFU1RTAEVBUkxZX0hJTlRTAFVOQVZBSUxBQkxFX0ZPUl9MRUdBTF9SRUFTT05TAE9QVElPTlMAU1dJVENISU5HX1BST1RPQ09MUwBWQVJJQU5UX0FMU09fTkVHT1RJQVRFUwBNVUxUSVBMRV9DSE9JQ0VTAElOVEVSTkFMX1NFUlZFUl9FUlJPUgBXRUJfU0VSVkVSX1VOS05PV05fRVJST1IAUkFJTEdVTl9FUlJPUgBJREVOVElUWV9QUk9WSURFUl9BVVRIRU5USUNBVElPTl9FUlJPUgBTU0xfQ0VSVElGSUNBVEVfRVJST1IASU5WQUxJRF9YX0ZPUldBUkRFRF9GT1IAU0VUX1BBUkFNRVRFUgBHRVRfUEFSQU1FVEVSAEhQRV9VU0VSAFNFRV9PVEhFUgBIUEVfQ0JfQ0hVTktfSEVBREVSAEV4cGVjdGVkIExGIGFmdGVyIENSAE1LQ0FMRU5EQVIAU0VUVVAAV0VCX1NFUlZFUl9JU19ET1dOAFRFQVJET1dOAEhQRV9DTE9TRURfQ09OTkVDVElPTgBIRVVSSVNUSUNfRVhQSVJBVElPTgBESVNDT05ORUNURURfT1BFUkFUSU9OAE5PTl9BVVRIT1JJVEFUSVZFX0lORk9STUFUSU9OAEhQRV9JTlZBTElEX1ZFUlNJT04ASFBFX0NCX01FU1NBR0VfQkVHSU4AU0lURV9JU19GUk9aRU4ASFBFX0lOVkFMSURfSEVBREVSX1RPS0VOAElOVkFMSURfVE9LRU4ARk9SQklEREVOAEVOSEFOQ0VfWU9VUl9DQUxNAEhQRV9JTlZBTElEX1VSTABCTE9DS0VEX0JZX1BBUkVOVEFMX0NPTlRST0wATUtDT0wAQUNMAEhQRV9JTlRFUk5BTABSRVFVRVNUX0hFQURFUl9GSUVMRFNfVE9PX0xBUkdFX1VOT0ZGSUNJQUwASFBFX09LAFVOTElOSwBVTkxPQ0sAUFJJAFJFVFJZX1dJVEgASFBFX0lOVkFMSURfQ09OVEVOVF9MRU5HVEgASFBFX1VORVhQRUNURURfQ09OVEVOVF9MRU5HVEgARkxVU0gAUFJPUFBBVENIAE0tU0VBUkNIAFVSSV9UT09fTE9ORwBQUk9DRVNTSU5HAE1JU0NFTExBTkVPVVNfUEVSU0lTVEVOVF9XQVJOSU5HAE1JU0NFTExBTkVPVVNfV0FSTklORwBIUEVfSU5WQUxJRF9UUkFOU0ZFUl9FTkNPRElORwBFeHBlY3RlZCBDUkxGAEhQRV9JTlZBTElEX0NIVU5LX1NJWkUATU9WRQBDT05USU5VRQBIUEVfQ0JfU1RBVFVTX0NPTVBMRVRFAEhQRV9DQl9IRUFERVJTX0NPTVBMRVRFAEhQRV9DQl9WRVJTSU9OX0NPTVBMRVRFAEhQRV9DQl9VUkxfQ09NUExFVEUASFBFX0NCX1BST1RPQ09MX0NPTVBMRVRFAEhQRV9DQl9DSFVOS19DT01QTEVURQBIUEVfQ0JfSEVBREVSX1ZBTFVFX0NPTVBMRVRFAEhQRV9DQl9DSFVOS19FWFRFTlNJT05fVkFMVUVfQ09NUExFVEUASFBFX0NCX0NIVU5LX0VYVEVOU0lPTl9OQU1FX0NPTVBMRVRFAEhQRV9DQl9NRVNTQUdFX0NPTVBMRVRFAEhQRV9DQl9NRVRIT0RfQ09NUExFVEUASFBFX0NCX0hFQURFUl9GSUVMRF9DT01QTEVURQBERUxFVEUASFBFX0lOVkFMSURfRU9GX1NUQVRFAElOVkFMSURfU1NMX0NFUlRJRklDQVRFAFBBVVNFAE5PX1JFU1BPTlNFAFVOU1VQUE9SVEVEX01FRElBX1RZUEUAR09ORQBOT1RfQUNDRVBUQUJMRQBTRVJWSUNFX1VOQVZBSUxBQkxFAFJBTkdFX05PVF9TQVRJU0ZJQUJMRQBPUklHSU5fSVNfVU5SRUFDSEFCTEUAUkVTUE9OU0VfSVNfU1RBTEUAUFVSR0UATUVSR0UAUkVRVUVTVF9IRUFERVJfRklFTERTX1RPT19MQVJHRQBSRVFVRVNUX0hFQURFUl9UT09fTEFSR0UAUEFZTE9BRF9UT09fTEFSR0UASU5TVUZGSUNJRU5UX1NUT1JBR0UASFBFX1BBVVNFRF9VUEdSQURFAEhQRV9QQVVTRURfSDJfVVBHUkFERQBTT1VSQ0UAQU5OT1VOQ0UAVFJBQ0UASFBFX1VORVhQRUNURURfU1BBQ0UAREVTQ1JJQkUAVU5TVUJTQ1JJQkUAUkVDT1JEAEhQRV9JTlZBTElEX01FVEhPRABOT1RfRk9VTkQAUFJPUEZJTkQAVU5CSU5EAFJFQklORABVTkFVVEhPUklaRUQATUVUSE9EX05PVF9BTExPV0VEAEhUVFBfVkVSU0lPTl9OT1RfU1VQUE9SVEVEAEFMUkVBRFlfUkVQT1JURUQAQUNDRVBURUQATk9UX0lNUExFTUVOVEVEAExPT1BfREVURUNURUQASFBFX0NSX0VYUEVDVEVEAEhQRV9MRl9FWFBFQ1RFRABDUkVBVEVEAElNX1VTRUQASFBFX1BBVVNFRABUSU1FT1VUX09DQ1VSRUQAUEFZTUVOVF9SRVFVSVJFRABQUkVDT05ESVRJT05fUkVRVUlSRUQAUFJPWFlfQVVUSEVOVElDQVRJT05fUkVRVUlSRUQATkVUV09SS19BVVRIRU5USUNBVElPTl9SRVFVSVJFRABMRU5HVEhfUkVRVUlSRUQAU1NMX0NFUlRJRklDQVRFX1JFUVVJUkVEAFVQR1JBREVfUkVRVUlSRUQAUEFHRV9FWFBJUkVEAFBSRUNPTkRJVElPTl9GQUlMRUQARVhQRUNUQVRJT05fRkFJTEVEAFJFVkFMSURBVElPTl9GQUlMRUQAU1NMX0hBTkRTSEFLRV9GQUlMRUQATE9DS0VEAFRSQU5TRk9STUFUSU9OX0FQUExJRUQATk9UX01PRElGSUVEAE5PVF9FWFRFTkRFRABCQU5EV0lEVEhfTElNSVRfRVhDRUVERUQAU0lURV9JU19PVkVSTE9BREVEAEhFQUQARXhwZWN0ZWQgSFRUUC8sIFJUU1AvIG9yIElDRS8A5xUAAK8VAACkEgAAkhoAACYWAACeFAAA2xkAAHkVAAB+EgAA/hQAADYVAAALFgAA2BYAAPMSAABCGAAArBYAABIVAAAUFwAA7xcAAEgUAABxFwAAshoAAGsZAAB+GQAANRQAAIIaAABEFwAA/RYAAB4YAACHFwAAqhkAAJMSAAAHGAAALBcAAMoXAACkFwAA5xUAAOcVAABYFwAAOxgAAKASAAAtHAAAwxEAAEgRAADeEgAAQhMAAKQZAAD9EAAA9xUAAKUVAADvFgAA+BkAAEoWAABWFgAA9RUAAAoaAAAIGgAAARoAAKsVAABCEgAA1xAAAEwRAAAFGQAAVBYAAB4RAADKGQAAyBkAAE4WAAD/GAAAcRQAAPAVAADuFQAAlBkAAPwVAAC/GQAAmxkAAHwUAABDEQAAcBgAAJUUAAAnFAAAGRQAANUSAADUGQAARBYAAPcQAEG5OwsBAQBB0DsL4AEBAQIBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEDAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQBBuj0LBAEAAAIAQdE9C14DBAMDAwMDAAADAwADAwADAwMDAwMDAwMDAAUAAAAAAAMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAAAAAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMAAwADAEG6PwsEAQAAAgBB0T8LXgMAAwMDAwMAAAMDAAMDAAMDAwMDAwMDAwMABAAFAAAAAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMAAAADAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwADAAMAQbDBAAsNbG9zZWVlcC1hbGl2ZQBBycEACwEBAEHgwQAL4AEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQBBycMACwEBAEHgwwAL5wEBAQEBAQEBAQEBAQECAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAWNodW5rZWQAQfHFAAteAQABAQEBAQAAAQEAAQEAAQEBAQEBAQEBAQAAAAAAAAABAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQAAAAEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAQEBAAEAAQBB0McACyFlY3Rpb25lbnQtbGVuZ3Rob25yb3h5LWNvbm5lY3Rpb24AQYDIAAsgcmFuc2Zlci1lbmNvZGluZ3BncmFkZQ0KDQpTTQ0KDQoAQanIAAsFAQIAAQMAQcDIAAtfBAUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUAQanKAAsFAQIAAQMAQcDKAAtfBAUFBgUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUAQanMAAsEAQAAAQBBwcwAC14CAgACAgICAgICAgICAgICAgICAgICAgICAgICAgIAAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAEGpzgALBQECAAEDAEHAzgALXwQFAAAFBQUFBQUFBQUFBQYFBQUFBQUFBQUFBQUABQAHCAUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQAFAAUABQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUFBQUAAAAFAEGp0AALBQEBAAEBAEHA0AALAQEAQdrQAAtBAgAAAAAAAAMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAAAAAAAAAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMAQanSAAsFAQEAAQEAQcDSAAsBAQBBytIACwYCAAAAAAIAQeHSAAs6AwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMAAAAAAAADAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwMDAwBBoNQAC50BTk9VTkNFRUNLT1VUTkVDVEVURUNSSUJFTFVTSEVURUFEU0VBUkNIUkdFQ1RJVklUWUxFTkRBUlZFT1RJRllQVElPTlNDSFNFQVlTVEFUQ0hHRVVFUllPUkRJUkVDVE9SVFJDSFBBUkFNRVRFUlVSQ0VCU0NSSUJFQVJET1dOQUNFSU5ETktDS1VCU0NSSUJFVFRQQ0VUU1BBRFRQLw==",Cw;Object.defineProperty(p3,"exports",{get:()=>Cw||(Cw=Hfe.from(qfe,"base64"))})});var y3=x((jTe,E3)=>{"use strict";var{Buffer:Gfe}=Gr(),Yfe="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",ww;Object.defineProperty(E3,"exports",{get:()=>ww||(ww=Gfe.from(Yfe,"base64"))})});var UE=x((zTe,m3)=>{"use strict";function xE(){let e=globalThis.__secureExecBuiltinZlibModule;if(!e)throw new Error("node:zlib bridge module is not available");return e}m3.exports=new Proxy({},{get(e,t){return xE()[t]},has(e,t){return t in xE()},ownKeys(){return Reflect.ownKeys(xE())},getOwnPropertyDescriptor(e,t){let r=Object.getOwnPropertyDescriptor(xE(),t);return r||{configurable:!0,enumerable:!0,value:void 0,writable:!1}}})});var id=x((KTe,_3)=>{"use strict";var B3=["GET","HEAD","POST"],Wfe=new Set(B3),Vfe=[101,204,205,304],I3=[301,302,303,307,308],Jfe=new Set(I3),b3=["1","7","9","11","13","15","17","19","20","21","22","23","25","37","42","43","53","69","77","79","87","95","101","102","103","104","109","110","111","113","115","117","119","123","135","137","139","143","161","179","389","427","465","512","513","514","515","526","530","531","532","540","548","554","556","563","587","601","636","989","990","993","995","1719","1720","1723","2049","3659","4045","4190","5060","5061","6000","6566","6665","6666","6667","6668","6669","6679","6697","10080"],jfe=new Set(b3),C3=["no-referrer","no-referrer-when-downgrade","same-origin","origin","strict-origin","origin-when-cross-origin","strict-origin-when-cross-origin","unsafe-url"],zfe=["",...C3],Kfe=new Set(C3),Xfe=["follow","manual","error"],Q3=["GET","HEAD","OPTIONS","TRACE"],Zfe=new Set(Q3),$fe=["navigate","same-origin","no-cors","cors"],eue=["omit","same-origin","include"],tue=["default","no-store","reload","no-cache","force-cache","only-if-cached"],rue=["content-encoding","content-language","content-location","content-type","content-length"],nue=["half"],w3=["CONNECT","TRACE","TRACK"],iue=new Set(w3),S3=["audio","audioworklet","font","image","manifest","paintworklet","script","style","track","video","xslt",""],sue=new Set(S3);_3.exports={subresource:S3,forbiddenMethods:w3,requestBodyHeader:rue,referrerPolicy:zfe,requestRedirect:Xfe,requestMode:$fe,requestCredentials:eue,requestCache:tue,redirectStatus:I3,corsSafeListedMethods:B3,nullBodyStatus:Vfe,safeMethods:Q3,badPorts:b3,requestDuplex:nue,subresourceSet:sue,badPortsSet:jfe,redirectStatusSet:Jfe,corsSafeListedMethodsSet:Wfe,safeMethodsSet:Zfe,forbiddenMethodsSet:iue,referrerPolicyTokens:Kfe}});var R3=x((XTe,v3)=>{"use strict";var Sw=Symbol.for("undici.globalOrigin.1");function oue(){return globalThis[Sw]}function aue(e){if(e===void 0){Object.defineProperty(globalThis,Sw,{value:void 0,writable:!0,enumerable:!1,configurable:!1});return}let t=new URL(e);if(t.protocol!=="http:"&&t.protocol!=="https:")throw new TypeError(`Only http & https urls are allowed, received ${t.protocol}`);Object.defineProperty(globalThis,Sw,{value:t,writable:!0,enumerable:!1,configurable:!1})}v3.exports={getGlobalOrigin:oue,setGlobalOrigin:aue}});var _w=x((ZTe,D3)=>{"use strict";var Aue=new TextDecoder;function fue(e){return e.length===0?"":(e[0]===239&&e[1]===187&&e[2]===191&&(e=e.subarray(3)),Aue.decode(e))}D3.exports={utf8DecodeBytes:fue}});var mf=x(($Te,F3)=>{"use strict";var T3=Wt(),{utf8DecodeBytes:uue}=_w();function cue(e,t,r){let n="";for(;r.position<t.length&&e(t[r.position]);)n+=t[r.position],r.position++;return n}function lue(e,t,r){let n=t.indexOf(e,r.position),i=r.position;return n===-1?(r.position=t.length,t.slice(i)):(r.position=n,t.slice(i,r.position))}var hue=/[\u0009\u000A\u000C\u000D\u0020]/g;function due(e){e=e.replace(hue,"");let t=e.length;if(t%4===0&&e.charCodeAt(t-1)===61&&(--t,e.charCodeAt(t-1)===61&&--t),t%4===1||/[^+/0-9A-Za-z]/.test(e.length===t?e:e.substring(0,t)))return"failure";let r=Buffer.from(e,"base64");return new Uint8Array(r.buffer,r.byteOffset,r.byteLength)}function N3(e){return e===9||e===10||e===12||e===13||e===32}function gue(e){let t=e.length;if(65535>t)return String.fromCharCode.apply(null,e);let r="",n=0,i=65535;for(;n<t;)n+i>t&&(i=t-n),r+=String.fromCharCode.apply(null,e.subarray(n,n+=i));return r}var pue=/[^\x00-\xFF]/;function Eue(e){return T3(!pue.test(e)),e}function yue(e){return JSON.parse(uue(e))}function mue(e,t=!0,r=!0){return M3(e,t,r,N3)}function M3(e,t,r,n){let i=0,s=e.length-1;if(t)for(;i<e.length&&n(e.charCodeAt(i));)i++;if(r)for(;s>0&&n(e.charCodeAt(s));)s--;return i===0&&s===e.length-1?e:e.slice(i,s+1)}function Bue(e){let t=JSON.stringify(e);if(t===void 0)throw new TypeError("Value is not JSON serializable");return T3(typeof t=="string"),t}F3.exports={collectASequenceOfCodePoints:cue,collectASequenceOfCodePointsFast:lue,forgivingBase64:due,isASCIIWhitespace:N3,isomorphicDecode:gue,isomorphicEncode:Eue,parseJSONFromBytes:yue,removeASCIIWhitespace:mue,removeChars:M3,serializeJavascriptValueToJSONString:Bue}});var Bf=x((eNe,O3)=>{"use strict";var PE=Wt(),{forgivingBase64:Iue,collectASequenceOfCodePoints:vw,collectASequenceOfCodePointsFast:sd,isomorphicDecode:bue,removeASCIIWhitespace:Cue,removeChars:Que}=mf(),wue=new TextEncoder,od=/^[-!#$%&'*+.^_|~A-Za-z0-9]+$/u,Sue=/[\u000A\u000D\u0009\u0020]/u,_ue=/^[\u0009\u0020-\u007E\u0080-\u00FF]+$/u;function vue(e){PE(e.protocol==="data:");let t=U3(e,!0);t=t.slice(5);let r={position:0},n=sd(",",t,r),i=n.length;if(n=Cue(n,!0,!0),r.position>=t.length)return"failure";r.position++;let s=t.slice(i+1),o=L3(s);if(/;(?:\u0020*)base64$/ui.test(n)){let A=bue(o);if(o=Iue(A),o==="failure")return"failure";n=n.slice(0,-6),n=n.replace(/(\u0020+)$/u,""),n=n.slice(0,-1)}n.startsWith(";")&&(n="text/plain"+n);let a=Rw(n);return a==="failure"&&(a=Rw("text/plain;charset=US-ASCII")),{mimeType:a,body:o}}function U3(e,t=!1){if(!t)return e.href;let r=e.href,n=e.hash.length,i=n===0?r:r.substring(0,r.length-n);return!n&&r.endsWith("#")?i.slice(0,-1):i}function L3(e){let t=wue.encode(e);return Rue(t)}function k3(e){return e>=48&&e<=57||e>=65&&e<=70||e>=97&&e<=102}function x3(e){return e>=48&&e<=57?e-48:(e&223)-55}function Rue(e){let t=e.length,r=new Uint8Array(t),n=0,i=0;for(;i<t;){let s=e[i];s!==37?r[n++]=s:s===37&&!(k3(e[i+1])&&k3(e[i+2]))?r[n++]=37:(r[n++]=x3(e[i+1])<<4|x3(e[i+2]),i+=2),++i}return t===n?r:r.subarray(0,n)}function Rw(e){e=LE(e,!0,!0);let t={position:0},r=sd("/",e,t);if(r.length===0||!od.test(r)||t.position>=e.length)return"failure";t.position++;let n=sd(";",e,t);if(n=LE(n,!1,!0),n.length===0||!od.test(n))return"failure";let i=r.toLowerCase(),s=n.toLowerCase(),o={type:i,subtype:s,parameters:new Map,essence:`${i}/${s}`};for(;t.position<e.length;){t.position++,vw(f=>Sue.test(f),e,t);let a=vw(f=>f!==";"&&f!=="=",e,t);if(a=a.toLowerCase(),t.position<e.length){if(e[t.position]===";")continue;t.position++}if(t.position>=e.length)break;let A=null;if(e[t.position]==='"')A=P3(e,t,!0),sd(";",e,t);else if(A=sd(";",e,t),A=LE(A,!1,!0),A.length===0)continue;a.length!==0&&od.test(a)&&(A.length===0||_ue.test(A))&&!o.parameters.has(a)&&o.parameters.set(a,A)}return o}function P3(e,t,r=!1){let n=t.position,i="";for(PE(e[t.position]==='"'),t.position++;i+=vw(o=>o!=='"'&&o!=="\\",e,t),!(t.position>=e.length);){let s=e[t.position];if(t.position++,s==="\\"){if(t.position>=e.length){i+="\\";break}i+=e[t.position],t.position++}else{PE(s==='"');break}}return r?i:e.slice(n,t.position)}function Due(e){PE(e!=="failure");let{parameters:t,essence:r}=e,n=r;for(let[i,s]of t.entries())n+=";",n+=i,n+="=",od.test(s)||(s=s.replace(/[\\"]/ug,"\\$&"),s='"'+s,s+='"'),n+=s;return n}function Tue(e){return e===13||e===10||e===9||e===32}function LE(e,t=!0,r=!0){return Que(e,t,r,Tue)}function Nue(e){switch(e.essence){case"application/ecmascript":case"application/javascript":case"application/x-ecmascript":case"application/x-javascript":case"text/ecmascript":case"text/javascript":case"text/javascript1.0":case"text/javascript1.1":case"text/javascript1.2":case"text/javascript1.3":case"text/javascript1.4":case"text/javascript1.5":case"text/jscript":case"text/livescript":case"text/x-ecmascript":case"text/x-javascript":return"text/javascript";case"application/json":case"text/json":return"application/json";case"image/svg+xml":return"image/svg+xml";case"text/xml":case"application/xml":return"application/xml"}return e.subtype.endsWith("+json")?"application/json":e.subtype.endsWith("+xml")?"application/xml":""}O3.exports={dataURLProcessor:vue,URLSerializer:U3,stringPercentDecode:L3,parseMIMEType:Rw,collectAnHTTPQuotedString:P3,serializeAMimeType:Due,removeHTTPWhitespace:LE,minimizeSupportedMimeType:Nue,HTTP_TOKEN_CODEPOINTS:od}});var q3=x((tNe,H3)=>{"use strict";var Mue=globalThis.performance??{now(){return Date.now()},timeOrigin:Date.now()};H3.exports={performance:Mue}});var Dw=x((rNe,G3)=>{"use strict";function Fue(e){return e instanceof ArrayBuffer}function kue(e){return ArrayBuffer.isView(e)}function xue(e){return e instanceof Uint8Array}function Uue(e){return!1}G3.exports={isArrayBuffer:Fue,isArrayBufferView:kue,isProxy:Uue,isUint8Array:xue}});var If=x((nNe,Nw)=>{"use strict";var Tw=65536,Lue=4294967295;function Pue(){throw new Error(`Secure random number generation is not supported by this browser.
-Use Chrome, Firefox or Internet Explorer 11`)}var Oue=at().Buffer,OE=globalThis.crypto||globalThis.msCrypto;OE&&OE.getRandomValues?Nw.exports=Hue:Nw.exports=Pue;function Hue(e,t){if(e>Lue)throw new RangeError("requested too many random bytes");var r=Oue.allocUnsafe(e);if(e>0)if(e>Tw)for(var n=0;n<e;n+=Tw)OE.getRandomValues(r.slice(n,n+Tw));else OE.getRandomValues(r);return typeof t=="function"?process.nextTick(function(){t(null,r)}):r}});var W3=x((iNe,Y3)=>{var que={}.toString;Y3.exports=Array.isArray||function(e){return que.call(e)=="[object Array]"}});var J3=x((sNe,V3)=>{"use strict";var Gue=$i(),Yue=Js(),Wue=Yue("TypedArray.prototype.buffer",!0),Vue=Ib();V3.exports=Wue||function(t){if(!Vue(t))throw new Gue("Not a Typed Array");return t.buffer}});var ad=x((oNe,z3)=>{"use strict";var ss=at().Buffer,Jue=W3(),jue=J3(),zue=ArrayBuffer.isView||function(t){try{return jue(t),!0}catch{return!1}},Kue=typeof Uint8Array<"u",j3=typeof ArrayBuffer<"u"&&typeof Uint8Array<"u",Xue=j3&&(ss.prototype instanceof Uint8Array||ss.TYPED_ARRAY_SUPPORT);z3.exports=function(t,r){if(ss.isBuffer(t))return t.constructor&&!("isBuffer"in t)?ss.from(t):t;if(typeof t=="string")return ss.from(t,r);if(j3&&zue(t)){if(t.byteLength===0)return ss.alloc(0);if(Xue){var n=ss.from(t.buffer,t.byteOffset,t.byteLength);if(n.byteLength===t.byteLength)return n}var i=t instanceof Uint8Array?t:new Uint8Array(t.buffer,t.byteOffset,t.byteLength),s=ss.from(i);if(s.length===t.byteLength)return s}if(Kue&&t instanceof Uint8Array)return ss.from(t);var o=Jue(t);if(o)for(var a=0;a<t.length;a+=1){var A=t[a];if(typeof A!="number"||A<0||A>255||~~A!==A)throw new RangeError("Array items must be numbers in the range 0-255.")}if(o||ss.isBuffer(t)&&t.constructor&&typeof t.constructor.isBuffer=="function"&&t.constructor.isBuffer(t))return ss.from(t);throw new TypeError('The "data" argument must be a string, an Array, a Buffer, a Uint8Array, or a DataView.')}});var $3=x((aNe,Z3)=>{"use strict";var Zue=at().Buffer,$ue=ad(),X3=typeof Uint8Array<"u",ece=X3&&typeof ArrayBuffer<"u",K3=ece&&ArrayBuffer.isView;Z3.exports=function(e,t){if(typeof e=="string"||Zue.isBuffer(e)||X3&&e instanceof Uint8Array||K3&&K3(e))return $ue(e,t);throw new TypeError('The "data" argument must be a string, a Buffer, a Uint8Array, or a DataView')}});var Ad=x((ANe,Mw)=>{"use strict";typeof process>"u"||!process.version||process.version.indexOf("v0.")===0||process.version.indexOf("v1.")===0&&process.version.indexOf("v1.8.")!==0?Mw.exports={nextTick:tce}:Mw.exports=process;function tce(e,t,r,n){if(typeof e!="function")throw new TypeError('"callback" argument must be a function');var i=arguments.length,s,o;switch(i){case 0:case 1:return process.nextTick(e);case 2:return process.nextTick(function(){e.call(null,t)});case 3:return process.nextTick(function(){e.call(null,t,r)});case 4:return process.nextTick(function(){e.call(null,t,r,n)});default:for(s=new Array(i-1),o=0;o<s.length;)s[o++]=arguments[o];return process.nextTick(function(){e.apply(null,s)})}}});var tL=x((fNe,eL)=>{var rce={}.toString;eL.exports=Array.isArray||function(e){return rce.call(e)=="[object Array]"}});var Fw=x((uNe,rL)=>{rL.exports=Zi().EventEmitter});var qE=x((kw,iL)=>{var HE=Gr(),Xo=HE.Buffer;function nL(e,t){for(var r in e)t[r]=e[r]}Xo.from&&Xo.alloc&&Xo.allocUnsafe&&Xo.allocUnsafeSlow?iL.exports=HE:(nL(HE,kw),kw.Buffer=Dc);function Dc(e,t,r){return Xo(e,t,r)}nL(Xo,Dc);Dc.from=function(e,t,r){if(typeof e=="number")throw new TypeError("Argument must not be a number");return Xo(e,t,r)};Dc.alloc=function(e,t,r){if(typeof e!="number")throw new TypeError("Argument must be a number");var n=Xo(e);return t!==void 0?typeof r=="string"?n.fill(t,r):n.fill(t):n.fill(0),n};Dc.allocUnsafe=function(e){if(typeof e!="number")throw new TypeError("Argument must be a number");return Xo(e)};Dc.allocUnsafeSlow=function(e){if(typeof e!="number")throw new TypeError("Argument must be a number");return HE.SlowBuffer(e)}});var Tc=x(rn=>{function nce(e){return Array.isArray?Array.isArray(e):GE(e)==="[object Array]"}rn.isArray=nce;function ice(e){return typeof e=="boolean"}rn.isBoolean=ice;function sce(e){return e===null}rn.isNull=sce;function oce(e){return e==null}rn.isNullOrUndefined=oce;function ace(e){return typeof e=="number"}rn.isNumber=ace;function Ace(e){return typeof e=="string"}rn.isString=Ace;function fce(e){return typeof e=="symbol"}rn.isSymbol=fce;function uce(e){return e===void 0}rn.isUndefined=uce;function cce(e){return GE(e)==="[object RegExp]"}rn.isRegExp=cce;function lce(e){return typeof e=="object"&&e!==null}rn.isObject=lce;function hce(e){return GE(e)==="[object Date]"}rn.isDate=hce;function dce(e){return GE(e)==="[object Error]"||e instanceof Error}rn.isError=dce;function gce(e){return typeof e=="function"}rn.isFunction=gce;function pce(e){return e===null||typeof e=="boolean"||typeof e=="number"||typeof e=="string"||typeof e=="symbol"||typeof e>"u"}rn.isPrimitive=pce;rn.isBuffer=Gr().Buffer.isBuffer;function GE(e){return Object.prototype.toString.call(e)}});var oL=x((lNe,xw)=>{"use strict";function Ece(e,t){if(!(e instanceof t))throw new TypeError("Cannot call a class as a function")}var sL=qE().Buffer,fd=Yr();function yce(e,t,r){e.copy(t,r)}xw.exports=(function(){function e(){Ece(this,e),this.head=null,this.tail=null,this.length=0}return e.prototype.push=function(r){var n={data:r,next:null};this.length>0?this.tail.next=n:this.head=n,this.tail=n,++this.length},e.prototype.unshift=function(r){var n={data:r,next:this.head};this.length===0&&(this.tail=n),this.head=n,++this.length},e.prototype.shift=function(){if(this.length!==0){var r=this.head.data;return this.length===1?this.head=this.tail=null:this.head=this.head.next,--this.length,r}},e.prototype.clear=function(){this.head=this.tail=null,this.length=0},e.prototype.join=function(r){if(this.length===0)return"";for(var n=this.head,i=""+n.data;n=n.next;)i+=r+n.data;return i},e.prototype.concat=function(r){if(this.length===0)return sL.alloc(0);for(var n=sL.allocUnsafe(r>>>0),i=this.head,s=0;i;)yce(i.data,n,s),s+=i.data.length,i=i.next;return n},e})();fd&&fd.inspect&&fd.inspect.custom&&(xw.exports.prototype[fd.inspect.custom]=function(){var e=fd.inspect({length:this.length});return this.constructor.name+" "+e})});var Uw=x((hNe,aL)=>{"use strict";var YE=Ad();function mce(e,t){var r=this,n=this._readableState&&this._readableState.destroyed,i=this._writableState&&this._writableState.destroyed;return n||i?(t?t(e):e&&(this._writableState?this._writableState.errorEmitted||(this._writableState.errorEmitted=!0,YE.nextTick(WE,this,e)):YE.nextTick(WE,this,e)),this):(this._readableState&&(this._readableState.destroyed=!0),this._writableState&&(this._writableState.destroyed=!0),this._destroy(e||null,function(s){!t&&s?r._writableState?r._writableState.errorEmitted||(r._writableState.errorEmitted=!0,YE.nextTick(WE,r,s)):YE.nextTick(WE,r,s):t&&t(s)}),this)}function Bce(){this._readableState&&(this._readableState.destroyed=!1,this._readableState.reading=!1,this._readableState.ended=!1,this._readableState.endEmitted=!1),this._writableState&&(this._writableState.destroyed=!1,this._writableState.ended=!1,this._writableState.ending=!1,this._writableState.finalCalled=!1,this._writableState.prefinished=!1,this._writableState.finished=!1,this._writableState.errorEmitted=!1)}function WE(e,t){e.emit("error",t)}aL.exports={destroy:mce,undestroy:Bce}});var Pw=x((dNe,gL)=>{"use strict";var bf=Ad();gL.exports=Br;function fL(e){var t=this;this.next=null,this.entry=null,this.finish=function(){Lce(t,e)}}var Ice=!process.browser&&["v0.10","v0.9."].indexOf(process.version.slice(0,5))>-1?setImmediate:bf.nextTick,Nc;Br.WritableState=cd;var uL=Object.create(Tc());uL.inherits=ze();var bce={deprecate:Fb()},cL=Fw(),JE=qE().Buffer,Cce=(typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof self<"u"?self:{}).Uint8Array||function(){};function Qce(e){return JE.from(e)}function wce(e){return JE.isBuffer(e)||e instanceof Cce}var lL=Uw();uL.inherits(Br,cL);function Sce(){}function cd(e,t){Nc=Nc||Cf(),e=e||{};var r=t instanceof Nc;this.objectMode=!!e.objectMode,r&&(this.objectMode=this.objectMode||!!e.writableObjectMode);var n=e.highWaterMark,i=e.writableHighWaterMark,s=this.objectMode?16:16*1024;n||n===0?this.highWaterMark=n:r&&(i||i===0)?this.highWaterMark=i:this.highWaterMark=s,this.highWaterMark=Math.floor(this.highWaterMark),this.finalCalled=!1,this.needDrain=!1,this.ending=!1,this.ended=!1,this.finished=!1,this.destroyed=!1;var o=e.decodeStrings===!1;this.decodeStrings=!o,this.defaultEncoding=e.defaultEncoding||"utf8",this.length=0,this.writing=!1,this.corked=0,this.sync=!0,this.bufferProcessing=!1,this.onwrite=function(a){Mce(t,a)},this.writecb=null,this.writelen=0,this.bufferedRequest=null,this.lastBufferedRequest=null,this.pendingcb=0,this.prefinished=!1,this.errorEmitted=!1,this.bufferedRequestCount=0,this.corkedRequestsFree=new fL(this)}cd.prototype.getBuffer=function(){for(var t=this.bufferedRequest,r=[];t;)r.push(t),t=t.next;return r};(function(){try{Object.defineProperty(cd.prototype,"buffer",{get:bce.deprecate(function(){return this.getBuffer()},"_writableState.buffer is deprecated. Use _writableState.getBuffer instead.","DEP0003")})}catch{}})();var VE;typeof Symbol=="function"&&Symbol.hasInstance&&typeof Function.prototype[Symbol.hasInstance]=="function"?(VE=Function.prototype[Symbol.hasInstance],Object.defineProperty(Br,Symbol.hasInstance,{value:function(e){return VE.call(this,e)?!0:this!==Br?!1:e&&e._writableState instanceof cd}})):VE=function(e){return e instanceof this};function Br(e){if(Nc=Nc||Cf(),!VE.call(Br,this)&&!(this instanceof Nc))return new Br(e);this._writableState=new cd(e,this),this.writable=!0,e&&(typeof e.write=="function"&&(this._write=e.write),typeof e.writev=="function"&&(this._writev=e.writev),typeof e.destroy=="function"&&(this._destroy=e.destroy),typeof e.final=="function"&&(this._final=e.final)),cL.call(this)}Br.prototype.pipe=function(){this.emit("error",new Error("Cannot pipe, not readable"))};function _ce(e,t){var r=new Error("write after end");e.emit("error",r),bf.nextTick(t,r)}function vce(e,t,r,n){var i=!0,s=!1;return r===null?s=new TypeError("May not write null values to stream"):typeof r!="string"&&r!==void 0&&!t.objectMode&&(s=new TypeError("Invalid non-string/buffer chunk")),s&&(e.emit("error",s),bf.nextTick(n,s),i=!1),i}Br.prototype.write=function(e,t,r){var n=this._writableState,i=!1,s=!n.objectMode&&wce(e);return s&&!JE.isBuffer(e)&&(e=Qce(e)),typeof t=="function"&&(r=t,t=null),s?t="buffer":t||(t=n.defaultEncoding),typeof r!="function"&&(r=Sce),n.ended?_ce(this,r):(s||vce(this,n,e,r))&&(n.pendingcb++,i=Dce(this,n,s,e,t,r)),i};Br.prototype.cork=function(){var e=this._writableState;e.corked++};Br.prototype.uncork=function(){var e=this._writableState;e.corked&&(e.corked--,!e.writing&&!e.corked&&!e.bufferProcessing&&e.bufferedRequest&&hL(this,e))};Br.prototype.setDefaultEncoding=function(t){if(typeof t=="string"&&(t=t.toLowerCase()),!(["hex","utf8","utf-8","ascii","binary","base64","ucs2","ucs-2","utf16le","utf-16le","raw"].indexOf((t+"").toLowerCase())>-1))throw new TypeError("Unknown encoding: "+t);return this._writableState.defaultEncoding=t,this};function Rce(e,t,r){return!e.objectMode&&e.decodeStrings!==!1&&typeof t=="string"&&(t=JE.from(t,r)),t}Object.defineProperty(Br.prototype,"writableHighWaterMark",{enumerable:!1,get:function(){return this._writableState.highWaterMark}});function Dce(e,t,r,n,i,s){if(!r){var o=Rce(t,n,i);n!==o&&(r=!0,i="buffer",n=o)}var a=t.objectMode?1:n.length;t.length+=a;var A=t.length<t.highWaterMark;if(A||(t.needDrain=!0),t.writing||t.corked){var f=t.lastBufferedRequest;t.lastBufferedRequest={chunk:n,encoding:i,isBuf:r,callback:s,next:null},f?f.next=t.lastBufferedRequest:t.bufferedRequest=t.lastBufferedRequest,t.bufferedRequestCount+=1}else Lw(e,t,!1,a,n,i,s);return A}function Lw(e,t,r,n,i,s,o){t.writelen=n,t.writecb=o,t.writing=!0,t.sync=!0,r?e._writev(i,t.onwrite):e._write(i,s,t.onwrite),t.sync=!1}function Tce(e,t,r,n,i){--t.pendingcb,r?(bf.nextTick(i,n),bf.nextTick(ud,e,t),e._writableState.errorEmitted=!0,e.emit("error",n)):(i(n),e._writableState.errorEmitted=!0,e.emit("error",n),ud(e,t))}function Nce(e){e.writing=!1,e.writecb=null,e.length-=e.writelen,e.writelen=0}function Mce(e,t){var r=e._writableState,n=r.sync,i=r.writecb;if(Nce(r),t)Tce(e,r,n,t,i);else{var s=dL(r);!s&&!r.corked&&!r.bufferProcessing&&r.bufferedRequest&&hL(e,r),n?Ice(AL,e,r,s,i):AL(e,r,s,i)}}function AL(e,t,r,n){r||Fce(e,t),t.pendingcb--,n(),ud(e,t)}function Fce(e,t){t.length===0&&t.needDrain&&(t.needDrain=!1,e.emit("drain"))}function hL(e,t){t.bufferProcessing=!0;var r=t.bufferedRequest;if(e._writev&&r&&r.next){var n=t.bufferedRequestCount,i=new Array(n),s=t.corkedRequestsFree;s.entry=r;for(var o=0,a=!0;r;)i[o]=r,r.isBuf||(a=!1),r=r.next,o+=1;i.allBuffers=a,Lw(e,t,!0,t.length,i,"",s.finish),t.pendingcb++,t.lastBufferedRequest=null,s.next?(t.corkedRequestsFree=s.next,s.next=null):t.corkedRequestsFree=new fL(t),t.bufferedRequestCount=0}else{for(;r;){var A=r.chunk,f=r.encoding,l=r.callback,p=t.objectMode?1:A.length;if(Lw(e,t,!1,p,A,f,l),r=r.next,t.bufferedRequestCount--,t.writing)break}r===null&&(t.lastBufferedRequest=null)}t.bufferedRequest=r,t.bufferProcessing=!1}Br.prototype._write=function(e,t,r){r(new Error("_write() is not implemented"))};Br.prototype._writev=null;Br.prototype.end=function(e,t,r){var n=this._writableState;typeof e=="function"?(r=e,e=null,t=null):typeof t=="function"&&(r=t,t=null),e!=null&&this.write(e,t),n.corked&&(n.corked=1,this.uncork()),n.ending||Uce(this,n,r)};function dL(e){return e.ending&&e.length===0&&e.bufferedRequest===null&&!e.finished&&!e.writing}function kce(e,t){e._final(function(r){t.pendingcb--,r&&e.emit("error",r),t.prefinished=!0,e.emit("prefinish"),ud(e,t)})}function xce(e,t){!t.prefinished&&!t.finalCalled&&(typeof e._final=="function"?(t.pendingcb++,t.finalCalled=!0,bf.nextTick(kce,e,t)):(t.prefinished=!0,e.emit("prefinish")))}function ud(e,t){var r=dL(t);return r&&(xce(e,t),t.pendingcb===0&&(t.finished=!0,e.emit("finish"))),r}function Uce(e,t,r){t.ending=!0,ud(e,t),r&&(t.finished?bf.nextTick(r):e.once("finish",r)),t.ended=!0,e.writable=!1}function Lce(e,t,r){var n=e.entry;for(e.entry=null;n;){var i=n.callback;t.pendingcb--,i(r),n=n.next}t.corkedRequestsFree.next=e}Object.defineProperty(Br.prototype,"destroyed",{get:function(){return this._writableState===void 0?!1:this._writableState.destroyed},set:function(e){this._writableState&&(this._writableState.destroyed=e)}});Br.prototype.destroy=lL.destroy;Br.prototype._undestroy=lL.undestroy;Br.prototype._destroy=function(e,t){this.end(),t(e)}});var Cf=x((gNe,mL)=>{"use strict";var pL=Ad(),Pce=Object.keys||function(e){var t=[];for(var r in e)t.push(r);return t};mL.exports=Zo;var EL=Object.create(Tc());EL.inherits=ze();var yL=qw(),Hw=Pw();EL.inherits(Zo,yL);for(Ow=Pce(Hw.prototype),jE=0;jE<Ow.length;jE++)zE=Ow[jE],Zo.prototype[zE]||(Zo.prototype[zE]=Hw.prototype[zE]);var Ow,zE,jE;function Zo(e){if(!(this instanceof Zo))return new Zo(e);yL.call(this,e),Hw.call(this,e),e&&e.readable===!1&&(this.readable=!1),e&&e.writable===!1&&(this.writable=!1),this.allowHalfOpen=!0,e&&e.allowHalfOpen===!1&&(this.allowHalfOpen=!1),this.once("end",Oce)}Object.defineProperty(Zo.prototype,"writableHighWaterMark",{enumerable:!1,get:function(){return this._writableState.highWaterMark}});function Oce(){this.allowHalfOpen||this._writableState.ended||pL.nextTick(Hce,this)}function Hce(e){e.end()}Object.defineProperty(Zo.prototype,"destroyed",{get:function(){return this._readableState===void 0||this._writableState===void 0?!1:this._readableState.destroyed&&this._writableState.destroyed},set:function(e){this._readableState===void 0||this._writableState===void 0||(this._readableState.destroyed=e,this._writableState.destroyed=e)}});Zo.prototype._destroy=function(e,t){this.push(null),this.end(),pL.nextTick(t,e)}});var qw=x((ENe,TL)=>{"use strict";var Fc=Ad();TL.exports=er;var qce=tL(),ld;er.ReadableState=SL;var pNe=Zi().EventEmitter,CL=function(e,t){return e.listeners(t).length},Jw=Fw(),hd=qE().Buffer,Gce=(typeof globalThis<"u"?globalThis:typeof window<"u"?window:typeof self<"u"?self:{}).Uint8Array||function(){};function Yce(e){return hd.from(e)}function Wce(e){return hd.isBuffer(e)||e instanceof Gce}var QL=Object.create(Tc());QL.inherits=ze();var Gw=Yr(),_t=void 0;Gw&&Gw.debuglog?_t=Gw.debuglog("stream"):_t=function(){};var Vce=oL(),wL=Uw(),Mc;QL.inherits(er,Jw);var Yw=["error","close","destroy","pause","resume"];function Jce(e,t,r){if(typeof e.prependListener=="function")return e.prependListener(t,r);!e._events||!e._events[t]?e.on(t,r):qce(e._events[t])?e._events[t].unshift(r):e._events[t]=[r,e._events[t]]}function SL(e,t){ld=ld||Cf(),e=e||{};var r=t instanceof ld;this.objectMode=!!e.objectMode,r&&(this.objectMode=this.objectMode||!!e.readableObjectMode);var n=e.highWaterMark,i=e.readableHighWaterMark,s=this.objectMode?16:16*1024;n||n===0?this.highWaterMark=n:r&&(i||i===0)?this.highWaterMark=i:this.highWaterMark=s,this.highWaterMark=Math.floor(this.highWaterMark),this.buffer=new Vce,this.length=0,this.pipes=null,this.pipesCount=0,this.flowing=null,this.ended=!1,this.endEmitted=!1,this.reading=!1,this.sync=!0,this.needReadable=!1,this.emittedReadable=!1,this.readableListening=!1,this.resumeScheduled=!1,this.destroyed=!1,this.defaultEncoding=e.defaultEncoding||"utf8",this.awaitDrain=0,this.readingMore=!1,this.decoder=null,this.encoding=null,e.encoding&&(Mc||(Mc=af().StringDecoder),this.decoder=new Mc(e.encoding),this.encoding=e.encoding)}function er(e){if(ld=ld||Cf(),!(this instanceof er))return new er(e);this._readableState=new SL(e,this),this.readable=!0,e&&(typeof e.read=="function"&&(this._read=e.read),typeof e.destroy=="function"&&(this._destroy=e.destroy)),Jw.call(this)}Object.defineProperty(er.prototype,"destroyed",{get:function(){return this._readableState===void 0?!1:this._readableState.destroyed},set:function(e){this._readableState&&(this._readableState.destroyed=e)}});er.prototype.destroy=wL.destroy;er.prototype._undestroy=wL.undestroy;er.prototype._destroy=function(e,t){this.push(null),t(e)};er.prototype.push=function(e,t){var r=this._readableState,n;return r.objectMode?n=!0:typeof e=="string"&&(t=t||r.defaultEncoding,t!==r.encoding&&(e=hd.from(e,t),t=""),n=!0),_L(this,e,t,!1,n)};er.prototype.unshift=function(e){return _L(this,e,null,!0,!1)};function _L(e,t,r,n,i){var s=e._readableState;if(t===null)s.reading=!1,Xce(e,s);else{var o;i||(o=jce(s,t)),o?e.emit("error",o):s.objectMode||t&&t.length>0?(typeof t!="string"&&!s.objectMode&&Object.getPrototypeOf(t)!==hd.prototype&&(t=Yce(t)),n?s.endEmitted?e.emit("error",new Error("stream.unshift() after end event")):Ww(e,s,t,!0):s.ended?e.emit("error",new Error("stream.push() after EOF")):(s.reading=!1,s.decoder&&!r?(t=s.decoder.write(t),s.objectMode||t.length!==0?Ww(e,s,t,!1):vL(e,s)):Ww(e,s,t,!1))):n||(s.reading=!1)}return zce(s)}function Ww(e,t,r,n){t.flowing&&t.length===0&&!t.sync?(e.emit("data",r),e.read(0)):(t.length+=t.objectMode?1:r.length,n?t.buffer.unshift(r):t.buffer.push(r),t.needReadable&&KE(e)),vL(e,t)}function jce(e,t){var r;return!Wce(t)&&typeof t!="string"&&t!==void 0&&!e.objectMode&&(r=new TypeError("Invalid non-string/buffer chunk")),r}function zce(e){return!e.ended&&(e.needReadable||e.length<e.highWaterMark||e.length===0)}er.prototype.isPaused=function(){return this._readableState.flowing===!1};er.prototype.setEncoding=function(e){return Mc||(Mc=af().StringDecoder),this._readableState.decoder=new Mc(e),this._readableState.encoding=e,this};var BL=8388608;function Kce(e){return e>=BL?e=BL:(e--,e|=e>>>1,e|=e>>>2,e|=e>>>4,e|=e>>>8,e|=e>>>16,e++),e}function IL(e,t){return e<=0||t.length===0&&t.ended?0:t.objectMode?1:e!==e?t.flowing&&t.length?t.buffer.head.data.length:t.length:(e>t.highWaterMark&&(t.highWaterMark=Kce(e)),e<=t.length?e:t.ended?t.length:(t.needReadable=!0,0))}er.prototype.read=function(e){_t("read",e),e=parseInt(e,10);var t=this._readableState,r=e;if(e!==0&&(t.emittedReadable=!1),e===0&&t.needReadable&&(t.length>=t.highWaterMark||t.ended))return _t("read: emitReadable",t.length,t.ended),t.length===0&&t.ended?Vw(this):KE(this),null;if(e=IL(e,t),e===0&&t.ended)return t.length===0&&Vw(this),null;var n=t.needReadable;_t("need readable",n),(t.length===0||t.length-e<t.highWaterMark)&&(n=!0,_t("length less than watermark",n)),t.ended||t.reading?(n=!1,_t("reading or ended",n)):n&&(_t("do read"),t.reading=!0,t.sync=!0,t.length===0&&(t.needReadable=!0),this._read(t.highWaterMark),t.sync=!1,t.reading||(e=IL(r,t)));var i;return e>0?i=RL(e,t):i=null,i===null?(t.needReadable=!0,e=0):t.length-=e,t.length===0&&(t.ended||(t.needReadable=!0),r!==e&&t.ended&&Vw(this)),i!==null&&this.emit("data",i),i};function Xce(e,t){if(!t.ended){if(t.decoder){var r=t.decoder.end();r&&r.length&&(t.buffer.push(r),t.length+=t.objectMode?1:r.length)}t.ended=!0,KE(e)}}function KE(e){var t=e._readableState;t.needReadable=!1,t.emittedReadable||(_t("emitReadable",t.flowing),t.emittedReadable=!0,t.sync?Fc.nextTick(bL,e):bL(e))}function bL(e){_t("emit readable"),e.emit("readable"),jw(e)}function vL(e,t){t.readingMore||(t.readingMore=!0,Fc.nextTick(Zce,e,t))}function Zce(e,t){for(var r=t.length;!t.reading&&!t.flowing&&!t.ended&&t.length<t.highWaterMark&&(_t("maybeReadMore read 0"),e.read(0),r!==t.length);)r=t.length;t.readingMore=!1}er.prototype._read=function(e){this.emit("error",new Error("_read() is not implemented"))};er.prototype.pipe=function(e,t){var r=this,n=this._readableState;switch(n.pipesCount){case 0:n.pipes=e;break;case 1:n.pipes=[n.pipes,e];break;default:n.pipes.push(e);break}n.pipesCount+=1,_t("pipe count=%d opts=%j",n.pipesCount,t);var i=(!t||t.end!==!1)&&e!==process.stdout&&e!==process.stderr,s=i?a:P;n.endEmitted?Fc.nextTick(s):r.once("end",s),e.on("unpipe",o);function o(U,G){_t("onunpipe"),U===r&&G&&G.hasUnpiped===!1&&(G.hasUnpiped=!0,l())}function a(){_t("onend"),e.end()}var A=$ce(r);e.on("drain",A);var f=!1;function l(){_t("cleanup"),e.removeListener("close",_),e.removeListener("finish",N),e.removeListener("drain",A),e.removeListener("error",S),e.removeListener("unpipe",o),r.removeListener("end",a),r.removeListener("end",P),r.removeListener("data",B),f=!0,n.awaitDrain&&(!e._writableState||e._writableState.needDrain)&&A()}var p=!1;r.on("data",B);function B(U){_t("ondata"),p=!1;var G=e.write(U);G===!1&&!p&&((n.pipesCount===1&&n.pipes===e||n.pipesCount>1&&DL(n.pipes,e)!==-1)&&!f&&(_t("false write response, pause",n.awaitDrain),n.awaitDrain++,p=!0),r.pause())}function S(U){_t("onerror",U),P(),e.removeListener("error",S),CL(e,"error")===0&&e.emit("error",U)}Jce(e,"error",S);function _(){e.removeListener("finish",N),P()}e.once("close",_);function N(){_t("onfinish"),e.removeListener("close",_),P()}e.once("finish",N);function P(){_t("unpipe"),r.unpipe(e)}return e.emit("pipe",r),n.flowing||(_t("pipe resume"),r.resume()),e};function $ce(e){return function(){var t=e._readableState;_t("pipeOnDrain",t.awaitDrain),t.awaitDrain&&t.awaitDrain--,t.awaitDrain===0&&CL(e,"data")&&(t.flowing=!0,jw(e))}}er.prototype.unpipe=function(e){var t=this._readableState,r={hasUnpiped:!1};if(t.pipesCount===0)return this;if(t.pipesCount===1)return e&&e!==t.pipes?this:(e||(e=t.pipes),t.pipes=null,t.pipesCount=0,t.flowing=!1,e&&e.emit("unpipe",this,r),this);if(!e){var n=t.pipes,i=t.pipesCount;t.pipes=null,t.pipesCount=0,t.flowing=!1;for(var s=0;s<i;s++)n[s].emit("unpipe",this,{hasUnpiped:!1});return this}var o=DL(t.pipes,e);return o===-1?this:(t.pipes.splice(o,1),t.pipesCount-=1,t.pipesCount===1&&(t.pipes=t.pipes[0]),e.emit("unpipe",this,r),this)};er.prototype.on=function(e,t){var r=Jw.prototype.on.call(this,e,t);if(e==="data")this._readableState.flowing!==!1&&this.resume();else if(e==="readable"){var n=this._readableState;!n.endEmitted&&!n.readableListening&&(n.readableListening=n.needReadable=!0,n.emittedReadable=!1,n.reading?n.length&&KE(this):Fc.nextTick(ele,this))}return r};er.prototype.addListener=er.prototype.on;function ele(e){_t("readable nexttick read 0"),e.read(0)}er.prototype.resume=function(){var e=this._readableState;return e.flowing||(_t("resume"),e.flowing=!0,tle(this,e)),this};function tle(e,t){t.resumeScheduled||(t.resumeScheduled=!0,Fc.nextTick(rle,e,t))}function rle(e,t){t.reading||(_t("resume read 0"),e.read(0)),t.resumeScheduled=!1,t.awaitDrain=0,e.emit("resume"),jw(e),t.flowing&&!t.reading&&e.read(0)}er.prototype.pause=function(){return _t("call pause flowing=%j",this._readableState.flowing),this._readableState.flowing!==!1&&(_t("pause"),this._readableState.flowing=!1,this.emit("pause")),this};function jw(e){var t=e._readableState;for(_t("flow",t.flowing);t.flowing&&e.read()!==null;);}er.prototype.wrap=function(e){var t=this,r=this._readableState,n=!1;e.on("end",function(){if(_t("wrapped end"),r.decoder&&!r.ended){var o=r.decoder.end();o&&o.length&&t.push(o)}t.push(null)}),e.on("data",function(o){if(_t("wrapped data"),r.decoder&&(o=r.decoder.write(o)),!(r.objectMode&&o==null)&&!(!r.objectMode&&(!o||!o.length))){var a=t.push(o);a||(n=!0,e.pause())}});for(var i in e)this[i]===void 0&&typeof e[i]=="function"&&(this[i]=(function(o){return function(){return e[o].apply(e,arguments)}})(i));for(var s=0;s<Yw.length;s++)e.on(Yw[s],this.emit.bind(this,Yw[s]));return this._read=function(o){_t("wrapped _read",o),n&&(n=!1,e.resume())},this};Object.defineProperty(er.prototype,"readableHighWaterMark",{enumerable:!1,get:function(){return this._readableState.highWaterMark}});er._fromList=RL;function RL(e,t){if(t.length===0)return null;var r;return t.objectMode?r=t.buffer.shift():!e||e>=t.length?(t.decoder?r=t.buffer.join(""):t.buffer.length===1?r=t.buffer.head.data:r=t.buffer.concat(t.length),t.buffer.clear()):r=nle(e,t.buffer,t.decoder),r}function nle(e,t,r){var n;return e<t.head.data.length?(n=t.head.data.slice(0,e),t.head.data=t.head.data.slice(e)):e===t.head.data.length?n=t.shift():n=r?ile(e,t):sle(e,t),n}function ile(e,t){var r=t.head,n=1,i=r.data;for(e-=i.length;r=r.next;){var s=r.data,o=e>s.length?s.length:e;if(o===s.length?i+=s:i+=s.slice(0,e),e-=o,e===0){o===s.length?(++n,r.next?t.head=r.next:t.head=t.tail=null):(t.head=r,r.data=s.slice(o));break}++n}return t.length-=n,i}function sle(e,t){var r=hd.allocUnsafe(e),n=t.head,i=1;for(n.data.copy(r),e-=n.data.length;n=n.next;){var s=n.data,o=e>s.length?s.length:e;if(s.copy(r,r.length-e,0,o),e-=o,e===0){o===s.length?(++i,n.next?t.head=n.next:t.head=t.tail=null):(t.head=n,n.data=s.slice(o));break}++i}return t.length-=i,r}function Vw(e){var t=e._readableState;if(t.length>0)throw new Error('"endReadable()" called on non-empty stream');t.endEmitted||(t.ended=!0,Fc.nextTick(ole,t,e))}function ole(e,t){!e.endEmitted&&e.length===0&&(e.endEmitted=!0,t.readable=!1,t.emit("end"))}function DL(e,t){for(var r=0,n=e.length;r<n;r++)if(e[r]===t)return r;return-1}});var zw=x((yNe,FL)=>{"use strict";FL.exports=$o;var XE=Cf(),ML=Object.create(Tc());ML.inherits=ze();ML.inherits($o,XE);function ale(e,t){var r=this._transformState;r.transforming=!1;var n=r.writecb;if(!n)return this.emit("error",new Error("write callback called multiple times"));r.writechunk=null,r.writecb=null,t!=null&&this.push(t),n(e);var i=this._readableState;i.reading=!1,(i.needReadable||i.length<i.highWaterMark)&&this._read(i.highWaterMark)}function $o(e){if(!(this instanceof $o))return new $o(e);XE.call(this,e),this._transformState={afterTransform:ale.bind(this),needTransform:!1,transforming:!1,writecb:null,writechunk:null,writeencoding:null},this._readableState.needReadable=!0,this._readableState.sync=!1,e&&(typeof e.transform=="function"&&(this._transform=e.transform),typeof e.flush=="function"&&(this._flush=e.flush)),this.on("prefinish",Ale)}function Ale(){var e=this;typeof this._flush=="function"?this._flush(function(t,r){NL(e,t,r)}):NL(this,null,null)}$o.prototype.push=function(e,t){return this._transformState.needTransform=!1,XE.prototype.push.call(this,e,t)};$o.prototype._transform=function(e,t,r){throw new Error("_transform() is not implemented")};$o.prototype._write=function(e,t,r){var n=this._transformState;if(n.writecb=r,n.writechunk=e,n.writeencoding=t,!n.transforming){var i=this._readableState;(n.needTransform||i.needReadable||i.length<i.highWaterMark)&&this._read(i.highWaterMark)}};$o.prototype._read=function(e){var t=this._transformState;t.writechunk!==null&&t.writecb&&!t.transforming?(t.transforming=!0,this._transform(t.writechunk,t.writeencoding,t.afterTransform)):t.needTransform=!0};$o.prototype._destroy=function(e,t){var r=this;XE.prototype._destroy.call(this,e,function(n){t(n),r.emit("close")})};function NL(e,t,r){if(t)return e.emit("error",t);if(r!=null&&e.push(r),e._writableState.length)throw new Error("Calling transform done when ws.length != 0");if(e._transformState.transforming)throw new Error("Calling transform done when still transforming");return e.push(null)}});var LL=x((mNe,UL)=>{"use strict";UL.exports=dd;var kL=zw(),xL=Object.create(Tc());xL.inherits=ze();xL.inherits(dd,kL);function dd(e){if(!(this instanceof dd))return new dd(e);kL.call(this,e)}dd.prototype._transform=function(e,t,r){r(null,e)}});var Kw=x((io,PL)=>{io=PL.exports=qw();io.Stream=io;io.Readable=io;io.Writable=Pw();io.Duplex=Cf();io.Transform=zw();io.PassThrough=LL()});var Xw=x((BNe,HL)=>{"use strict";var fle=at().Buffer,ule=$3(),OL=Kw().Transform,cle=ze();function aA(e){OL.call(this),this._block=fle.allocUnsafe(e),this._blockSize=e,this._blockOffset=0,this._length=[0,0,0,0],this._finalized=!1}cle(aA,OL);aA.prototype._transform=function(e,t,r){var n=null;try{this.update(e,t)}catch(i){n=i}r(n)};aA.prototype._flush=function(e){var t=null;try{this.push(this.digest())}catch(r){t=r}e(t)};aA.prototype.update=function(e,t){if(this._finalized)throw new Error("Digest already called");for(var r=ule(e,t),n=this._block,i=0;this._blockOffset+r.length-i>=this._blockSize;){for(var s=this._blockOffset;s<this._blockSize;)n[s]=r[i],s+=1,i+=1;this._update(),this._blockOffset=0}for(;i<r.length;)n[this._blockOffset]=r[i],this._blockOffset+=1,i+=1;for(var o=0,a=r.length*8;a>0;++o)this._length[o]+=a,a=this._length[o]/4294967296|0,a>0&&(this._length[o]-=4294967296*a);return this};aA.prototype._update=function(){throw new Error("_update is not implemented")};aA.prototype.digest=function(e){if(this._finalized)throw new Error("Digest already called");this._finalized=!0;var t=this._digest();e!==void 0&&(t=t.toString(e)),this._block.fill(0),this._blockOffset=0;for(var r=0;r<4;++r)this._length[r]=0;return t};aA.prototype._digest=function(){throw new Error("_digest is not implemented")};HL.exports=aA});var ey=x((INe,GL)=>{"use strict";var lle=ze(),qL=Xw(),hle=at().Buffer,dle=new Array(16);function ZE(){qL.call(this,64),this._a=1732584193,this._b=4023233417,this._c=2562383102,this._d=271733878}lle(ZE,qL);ZE.prototype._update=function(){for(var e=dle,t=0;t<16;++t)e[t]=this._block.readInt32LE(t*4);var r=this._a,n=this._b,i=this._c,s=this._d;r=nn(r,n,i,s,e[0],3614090360,7),s=nn(s,r,n,i,e[1],3905402710,12),i=nn(i,s,r,n,e[2],606105819,17),n=nn(n,i,s,r,e[3],3250441966,22),r=nn(r,n,i,s,e[4],4118548399,7),s=nn(s,r,n,i,e[5],1200080426,12),i=nn(i,s,r,n,e[6],2821735955,17),n=nn(n,i,s,r,e[7],4249261313,22),r=nn(r,n,i,s,e[8],1770035416,7),s=nn(s,r,n,i,e[9],2336552879,12),i=nn(i,s,r,n,e[10],4294925233,17),n=nn(n,i,s,r,e[11],2304563134,22),r=nn(r,n,i,s,e[12],1804603682,7),s=nn(s,r,n,i,e[13],4254626195,12),i=nn(i,s,r,n,e[14],2792965006,17),n=nn(n,i,s,r,e[15],1236535329,22),r=sn(r,n,i,s,e[1],4129170786,5),s=sn(s,r,n,i,e[6],3225465664,9),i=sn(i,s,r,n,e[11],643717713,14),n=sn(n,i,s,r,e[0],3921069994,20),r=sn(r,n,i,s,e[5],3593408605,5),s=sn(s,r,n,i,e[10],38016083,9),i=sn(i,s,r,n,e[15],3634488961,14),n=sn(n,i,s,r,e[4],3889429448,20),r=sn(r,n,i,s,e[9],568446438,5),s=sn(s,r,n,i,e[14],3275163606,9),i=sn(i,s,r,n,e[3],4107603335,14),n=sn(n,i,s,r,e[8],1163531501,20),r=sn(r,n,i,s,e[13],2850285829,5),s=sn(s,r,n,i,e[2],4243563512,9),i=sn(i,s,r,n,e[7],1735328473,14),n=sn(n,i,s,r,e[12],2368359562,20),r=on(r,n,i,s,e[5],4294588738,4),s=on(s,r,n,i,e[8],2272392833,11),i=on(i,s,r,n,e[11],1839030562,16),n=on(n,i,s,r,e[14],4259657740,23),r=on(r,n,i,s,e[1],2763975236,4),s=on(s,r,n,i,e[4],1272893353,11),i=on(i,s,r,n,e[7],4139469664,16),n=on(n,i,s,r,e[10],3200236656,23),r=on(r,n,i,s,e[13],681279174,4),s=on(s,r,n,i,e[0],3936430074,11),i=on(i,s,r,n,e[3],3572445317,16),n=on(n,i,s,r,e[6],76029189,23),r=on(r,n,i,s,e[9],3654602809,4),s=on(s,r,n,i,e[12],3873151461,11),i=on(i,s,r,n,e[15],530742520,16),n=on(n,i,s,r,e[2],3299628645,23),r=an(r,n,i,s,e[0],4096336452,6),s=an(s,r,n,i,e[7],1126891415,10),i=an(i,s,r,n,e[14],2878612391,15),n=an(n,i,s,r,e[5],4237533241,21),r=an(r,n,i,s,e[12],1700485571,6),s=an(s,r,n,i,e[3],2399980690,10),i=an(i,s,r,n,e[10],4293915773,15),n=an(n,i,s,r,e[1],2240044497,21),r=an(r,n,i,s,e[8],1873313359,6),s=an(s,r,n,i,e[15],4264355552,10),i=an(i,s,r,n,e[6],2734768916,15),n=an(n,i,s,r,e[13],1309151649,21),r=an(r,n,i,s,e[4],4149444226,6),s=an(s,r,n,i,e[11],3174756917,10),i=an(i,s,r,n,e[2],718787259,15),n=an(n,i,s,r,e[9],3951481745,21),this._a=this._a+r|0,this._b=this._b+n|0,this._c=this._c+i|0,this._d=this._d+s|0};ZE.prototype._digest=function(){this._block[this._blockOffset++]=128,this._blockOffset>56&&(this._block.fill(0,this._blockOffset,64),this._update(),this._blockOffset=0),this._block.fill(0,this._blockOffset,56),this._block.writeUInt32LE(this._length[0],56),this._block.writeUInt32LE(this._length[1],60),this._update();var e=hle.allocUnsafe(16);return e.writeInt32LE(this._a,0),e.writeInt32LE(this._b,4),e.writeInt32LE(this._c,8),e.writeInt32LE(this._d,12),e};function $E(e,t){return e<<t|e>>>32-t}function nn(e,t,r,n,i,s,o){return $E(e+(t&r|~t&n)+i+s|0,o)+t|0}function sn(e,t,r,n,i,s,o){return $E(e+(t&n|r&~n)+i+s|0,o)+t|0}function on(e,t,r,n,i,s,o){return $E(e+(t^r^n)+i+s|0,o)+t|0}function an(e,t,r,n,i,s,o){return $E(e+(r^(t|~n))+i+s|0,o)+t|0}GL.exports=ZE});var ry=x((bNe,KL)=>{"use strict";var Zw=Gr().Buffer,gle=ze(),zL=Xw(),ple=new Array(16),gd=[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8,3,10,14,4,9,15,8,1,2,7,0,6,13,11,5,12,1,9,11,10,0,8,12,4,13,3,7,15,14,5,6,2,4,0,5,9,7,12,2,10,14,1,3,8,11,6,15,13],pd=[5,14,7,0,9,2,11,4,13,6,15,8,1,10,3,12,6,11,3,7,0,13,5,10,14,15,8,12,4,9,1,2,15,5,1,3,7,14,6,9,11,8,12,2,10,0,4,13,8,6,4,1,3,11,15,0,5,12,2,13,9,7,10,14,12,15,10,4,1,5,8,7,6,2,13,14,0,3,9,11],Ed=[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8,7,6,8,13,11,9,7,15,7,12,15,9,11,7,13,12,11,13,6,7,14,9,13,15,14,8,13,6,5,12,7,5,11,12,14,15,14,15,9,8,9,14,5,6,8,6,5,12,9,15,5,11,6,8,13,12,5,12,13,14,11,8,5,6],yd=[8,9,9,11,13,15,15,5,7,7,8,11,14,14,12,6,9,13,15,7,12,8,9,11,7,7,12,7,6,15,13,11,9,7,15,11,8,6,6,14,12,13,5,14,13,13,7,5,15,5,8,11,14,14,6,14,6,9,12,9,12,5,15,8,8,5,12,9,12,5,14,6,8,13,6,5,15,13,11,11],md=[0,1518500249,1859775393,2400959708,2840853838],Bd=[1352829926,1548603684,1836072691,2053994217,0];function Qf(e,t){return e<<t|e>>>32-t}function YL(e,t,r,n,i,s,o,a){return Qf(e+(t^r^n)+s+o|0,a)+i|0}function WL(e,t,r,n,i,s,o,a){return Qf(e+(t&r|~t&n)+s+o|0,a)+i|0}function VL(e,t,r,n,i,s,o,a){return Qf(e+((t|~r)^n)+s+o|0,a)+i|0}function JL(e,t,r,n,i,s,o,a){return Qf(e+(t&n|r&~n)+s+o|0,a)+i|0}function jL(e,t,r,n,i,s,o,a){return Qf(e+(t^(r|~n))+s+o|0,a)+i|0}function ty(){zL.call(this,64),this._a=1732584193,this._b=4023233417,this._c=2562383102,this._d=271733878,this._e=3285377520}gle(ty,zL);ty.prototype._update=function(){for(var e=ple,t=0;t<16;++t)e[t]=this._block.readInt32LE(t*4);for(var r=this._a|0,n=this._b|0,i=this._c|0,s=this._d|0,o=this._e|0,a=this._a|0,A=this._b|0,f=this._c|0,l=this._d|0,p=this._e|0,B=0;B<80;B+=1){var S,_;B<16?(S=YL(r,n,i,s,o,e[gd[B]],md[0],Ed[B]),_=jL(a,A,f,l,p,e[pd[B]],Bd[0],yd[B])):B<32?(S=WL(r,n,i,s,o,e[gd[B]],md[1],Ed[B]),_=JL(a,A,f,l,p,e[pd[B]],Bd[1],yd[B])):B<48?(S=VL(r,n,i,s,o,e[gd[B]],md[2],Ed[B]),_=VL(a,A,f,l,p,e[pd[B]],Bd[2],yd[B])):B<64?(S=JL(r,n,i,s,o,e[gd[B]],md[3],Ed[B]),_=WL(a,A,f,l,p,e[pd[B]],Bd[3],yd[B])):(S=jL(r,n,i,s,o,e[gd[B]],md[4],Ed[B]),_=YL(a,A,f,l,p,e[pd[B]],Bd[4],yd[B])),r=o,o=s,s=Qf(i,10),i=n,n=S,a=p,p=l,l=Qf(f,10),f=A,A=_}var N=this._b+i+l|0;this._b=this._c+s+p|0,this._c=this._d+o+a|0,this._d=this._e+r+A|0,this._e=this._a+n+f|0,this._a=N};ty.prototype._digest=function(){this._block[this._blockOffset]=128,this._blockOffset+=1,this._blockOffset>56&&(this._block.fill(0,this._blockOffset,64),this._update(),this._blockOffset=0),this._block.fill(0,this._blockOffset,56),this._block.writeUInt32LE(this._length[0],56),this._block.writeUInt32LE(this._length[1],60),this._update();var e=Zw.alloc?Zw.alloc(20):new Zw(20);return e.writeInt32LE(this._a,0),e.writeInt32LE(this._b,4),e.writeInt32LE(this._c,8),e.writeInt32LE(this._d,12),e.writeInt32LE(this._e,16),e};KL.exports=ty});var wf=x((CNe,XL)=>{"use strict";var Ele=at().Buffer,yle=ad();function ny(e,t){this._block=Ele.alloc(e),this._finalSize=t,this._blockSize=e,this._len=0}ny.prototype.update=function(e,t){e=yle(e,t||"utf8");for(var r=this._block,n=this._blockSize,i=e.length,s=this._len,o=0;o<i;){for(var a=s%n,A=Math.min(i-o,n-a),f=0;f<A;f++)r[a+f]=e[o+f];s+=A,o+=A,s%n===0&&this._update(r)}return this._len+=i,this};ny.prototype.digest=function(e){var t=this._len%this._blockSize;this._block[t]=128,this._block.fill(0,t+1),t>=this._finalSize&&(this._update(this._block),this._block.fill(0));var r=this._len*8;if(r<=4294967295)this._block.writeUInt32BE(r,this._blockSize-4);else{var n=(r&4294967295)>>>0,i=(r-n)/4294967296;this._block.writeUInt32BE(i,this._blockSize-8),this._block.writeUInt32BE(n,this._blockSize-4)}this._update(this._block);var s=this._hash();return e?s.toString(e):s};ny.prototype._update=function(){throw new Error("_update must be implemented by subclass")};XL.exports=ny});var e8=x((QNe,$L)=>{"use strict";var mle=ze(),ZL=wf(),Ble=at().Buffer,Ile=[1518500249,1859775393,-1894007588,-899497514],ble=new Array(80);function Id(){this.init(),this._w=ble,ZL.call(this,64,56)}mle(Id,ZL);Id.prototype.init=function(){return this._a=1732584193,this._b=4023233417,this._c=2562383102,this._d=271733878,this._e=3285377520,this};function Cle(e){return e<<5|e>>>27}function Qle(e){return e<<30|e>>>2}function wle(e,t,r,n){return e===0?t&r|~t&n:e===2?t&r|t&n|r&n:t^r^n}Id.prototype._update=function(e){for(var t=this._w,r=this._a|0,n=this._b|0,i=this._c|0,s=this._d|0,o=this._e|0,a=0;a<16;++a)t[a]=e.readInt32BE(a*4);for(;a<80;++a)t[a]=t[a-3]^t[a-8]^t[a-14]^t[a-16];for(var A=0;A<80;++A){var f=~~(A/20),l=Cle(r)+wle(f,n,i,s)+o+t[A]+Ile[f]|0;o=s,s=i,i=Qle(n),n=r,r=l}this._a=r+this._a|0,this._b=n+this._b|0,this._c=i+this._c|0,this._d=s+this._d|0,this._e=o+this._e|0};Id.prototype._hash=function(){var e=Ble.allocUnsafe(20);return e.writeInt32BE(this._a|0,0),e.writeInt32BE(this._b|0,4),e.writeInt32BE(this._c|0,8),e.writeInt32BE(this._d|0,12),e.writeInt32BE(this._e|0,16),e};$L.exports=Id});var n8=x((wNe,r8)=>{"use strict";var Sle=ze(),t8=wf(),_le=at().Buffer,vle=[1518500249,1859775393,-1894007588,-899497514],Rle=new Array(80);function bd(){this.init(),this._w=Rle,t8.call(this,64,56)}Sle(bd,t8);bd.prototype.init=function(){return this._a=1732584193,this._b=4023233417,this._c=2562383102,this._d=271733878,this._e=3285377520,this};function Dle(e){return e<<1|e>>>31}function Tle(e){return e<<5|e>>>27}function Nle(e){return e<<30|e>>>2}function Mle(e,t,r,n){return e===0?t&r|~t&n:e===2?t&r|t&n|r&n:t^r^n}bd.prototype._update=function(e){for(var t=this._w,r=this._a|0,n=this._b|0,i=this._c|0,s=this._d|0,o=this._e|0,a=0;a<16;++a)t[a]=e.readInt32BE(a*4);for(;a<80;++a)t[a]=Dle(t[a-3]^t[a-8]^t[a-14]^t[a-16]);for(var A=0;A<80;++A){var f=~~(A/20),l=Tle(r)+Mle(f,n,i,s)+o+t[A]+vle[f]|0;o=s,s=i,i=Nle(n),n=r,r=l}this._a=r+this._a|0,this._b=n+this._b|0,this._c=i+this._c|0,this._d=s+this._d|0,this._e=o+this._e|0};bd.prototype._hash=function(){var e=_le.allocUnsafe(20);return e.writeInt32BE(this._a|0,0),e.writeInt32BE(this._b|0,4),e.writeInt32BE(this._c|0,8),e.writeInt32BE(this._d|0,12),e.writeInt32BE(this._e|0,16),e};r8.exports=bd});var $w=x((SNe,s8)=>{"use strict";var Fle=ze(),i8=wf(),kle=at().Buffer,xle=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298],Ule=new Array(64);function Cd(){this.init(),this._w=Ule,i8.call(this,64,56)}Fle(Cd,i8);Cd.prototype.init=function(){return this._a=1779033703,this._b=3144134277,this._c=1013904242,this._d=2773480762,this._e=1359893119,this._f=2600822924,this._g=528734635,this._h=1541459225,this};function Lle(e,t,r){return r^e&(t^r)}function Ple(e,t,r){return e&t|r&(e|t)}function Ole(e){return(e>>>2|e<<30)^(e>>>13|e<<19)^(e>>>22|e<<10)}function Hle(e){return(e>>>6|e<<26)^(e>>>11|e<<21)^(e>>>25|e<<7)}function qle(e){return(e>>>7|e<<25)^(e>>>18|e<<14)^e>>>3}function Gle(e){return(e>>>17|e<<15)^(e>>>19|e<<13)^e>>>10}Cd.prototype._update=function(e){for(var t=this._w,r=this._a|0,n=this._b|0,i=this._c|0,s=this._d|0,o=this._e|0,a=this._f|0,A=this._g|0,f=this._h|0,l=0;l<16;++l)t[l]=e.readInt32BE(l*4);for(;l<64;++l)t[l]=Gle(t[l-2])+t[l-7]+qle(t[l-15])+t[l-16]|0;for(var p=0;p<64;++p){var B=f+Hle(o)+Lle(o,a,A)+xle[p]+t[p]|0,S=Ole(r)+Ple(r,n,i)|0;f=A,A=a,a=o,o=s+B|0,s=i,i=n,n=r,r=B+S|0}this._a=r+this._a|0,this._b=n+this._b|0,this._c=i+this._c|0,this._d=s+this._d|0,this._e=o+this._e|0,this._f=a+this._f|0,this._g=A+this._g|0,this._h=f+this._h|0};Cd.prototype._hash=function(){var e=kle.allocUnsafe(32);return e.writeInt32BE(this._a,0),e.writeInt32BE(this._b,4),e.writeInt32BE(this._c,8),e.writeInt32BE(this._d,12),e.writeInt32BE(this._e,16),e.writeInt32BE(this._f,20),e.writeInt32BE(this._g,24),e.writeInt32BE(this._h,28),e};s8.exports=Cd});var a8=x((_Ne,o8)=>{"use strict";var Yle=ze(),Wle=$w(),Vle=wf(),Jle=at().Buffer,jle=new Array(64);function iy(){this.init(),this._w=jle,Vle.call(this,64,56)}Yle(iy,Wle);iy.prototype.init=function(){return this._a=3238371032,this._b=914150663,this._c=812702999,this._d=4144912697,this._e=4290775857,this._f=1750603025,this._g=1694076839,this._h=3204075428,this};iy.prototype._hash=function(){var e=Jle.allocUnsafe(28);return e.writeInt32BE(this._a,0),e.writeInt32BE(this._b,4),e.writeInt32BE(this._c,8),e.writeInt32BE(this._d,12),e.writeInt32BE(this._e,16),e.writeInt32BE(this._f,20),e.writeInt32BE(this._g,24),e};o8.exports=iy});var eS=x((vNe,d8)=>{"use strict";var zle=ze(),h8=wf(),Kle=at().Buffer,A8=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591],Xle=new Array(160);function Qd(){this.init(),this._w=Xle,h8.call(this,128,112)}zle(Qd,h8);Qd.prototype.init=function(){return this._ah=1779033703,this._bh=3144134277,this._ch=1013904242,this._dh=2773480762,this._eh=1359893119,this._fh=2600822924,this._gh=528734635,this._hh=1541459225,this._al=4089235720,this._bl=2227873595,this._cl=4271175723,this._dl=1595750129,this._el=2917565137,this._fl=725511199,this._gl=4215389547,this._hl=327033209,this};function f8(e,t,r){return r^e&(t^r)}function u8(e,t,r){return e&t|r&(e|t)}function c8(e,t){return(e>>>28|t<<4)^(t>>>2|e<<30)^(t>>>7|e<<25)}function l8(e,t){return(e>>>14|t<<18)^(e>>>18|t<<14)^(t>>>9|e<<23)}function Zle(e,t){return(e>>>1|t<<31)^(e>>>8|t<<24)^e>>>7}function $le(e,t){return(e>>>1|t<<31)^(e>>>8|t<<24)^(e>>>7|t<<25)}function ehe(e,t){return(e>>>19|t<<13)^(t>>>29|e<<3)^e>>>6}function the(e,t){return(e>>>19|t<<13)^(t>>>29|e<<3)^(e>>>6|t<<26)}function Fr(e,t){return e>>>0<t>>>0?1:0}Qd.prototype._update=function(e){for(var t=this._w,r=this._ah|0,n=this._bh|0,i=this._ch|0,s=this._dh|0,o=this._eh|0,a=this._fh|0,A=this._gh|0,f=this._hh|0,l=this._al|0,p=this._bl|0,B=this._cl|0,S=this._dl|0,_=this._el|0,N=this._fl|0,P=this._gl|0,U=this._hl|0,G=0;G<32;G+=2)t[G]=e.readInt32BE(G*4),t[G+1]=e.readInt32BE(G*4+4);for(;G<160;G+=2){var Y=t[G-30],Z=t[G-30+1],ee=Zle(Y,Z),j=$le(Z,Y);Y=t[G-4],Z=t[G-4+1];var se=ehe(Y,Z),ie=the(Z,Y),ce=t[G-14],H=t[G-14+1],E=t[G-32],v=t[G-32+1],b=j+H|0,c=ee+ce+Fr(b,j)|0;b=b+ie|0,c=c+se+Fr(b,ie)|0,b=b+v|0,c=c+E+Fr(b,v)|0,t[G]=c,t[G+1]=b}for(var g=0;g<160;g+=2){c=t[g],b=t[g+1];var w=u8(r,n,i),R=u8(l,p,B),C=c8(r,l),h=c8(l,r),D=l8(o,_),M=l8(_,o),I=A8[g],k=A8[g+1],ne=f8(o,a,A),Ae=f8(_,N,P),ue=U+M|0,pe=f+D+Fr(ue,U)|0;ue=ue+Ae|0,pe=pe+ne+Fr(ue,Ae)|0,ue=ue+k|0,pe=pe+I+Fr(ue,k)|0,ue=ue+b|0,pe=pe+c+Fr(ue,b)|0;var he=h+R|0,de=C+w+Fr(he,h)|0;f=A,U=P,A=a,P=N,a=o,N=_,_=S+ue|0,o=s+pe+Fr(_,S)|0,s=i,S=B,i=n,B=p,n=r,p=l,l=ue+he|0,r=pe+de+Fr(l,ue)|0}this._al=this._al+l|0,this._bl=this._bl+p|0,this._cl=this._cl+B|0,this._dl=this._dl+S|0,this._el=this._el+_|0,this._fl=this._fl+N|0,this._gl=this._gl+P|0,this._hl=this._hl+U|0,this._ah=this._ah+r+Fr(this._al,l)|0,this._bh=this._bh+n+Fr(this._bl,p)|0,this._ch=this._ch+i+Fr(this._cl,B)|0,this._dh=this._dh+s+Fr(this._dl,S)|0,this._eh=this._eh+o+Fr(this._el,_)|0,this._fh=this._fh+a+Fr(this._fl,N)|0,this._gh=this._gh+A+Fr(this._gl,P)|0,this._hh=this._hh+f+Fr(this._hl,U)|0};Qd.prototype._hash=function(){var e=Kle.allocUnsafe(64);function t(r,n,i){e.writeInt32BE(r,i),e.writeInt32BE(n,i+4)}return t(this._ah,this._al,0),t(this._bh,this._bl,8),t(this._ch,this._cl,16),t(this._dh,this._dl,24),t(this._eh,this._el,32),t(this._fh,this._fl,40),t(this._gh,this._gl,48),t(this._hh,this._hl,56),e};d8.exports=Qd});var p8=x((RNe,g8)=>{"use strict";var rhe=ze(),nhe=eS(),ihe=wf(),she=at().Buffer,ohe=new Array(160);function sy(){this.init(),this._w=ohe,ihe.call(this,128,112)}rhe(sy,nhe);sy.prototype.init=function(){return this._ah=3418070365,this._bh=1654270250,this._ch=2438529370,this._dh=355462360,this._eh=1731405415,this._fh=2394180231,this._gh=3675008525,this._hh=1203062813,this._al=3238371032,this._bl=914150663,this._cl=812702999,this._dl=4144912697,this._el=4290775857,this._fl=1750603025,this._gl=1694076839,this._hl=3204075428,this};sy.prototype._hash=function(){var e=she.allocUnsafe(48);function t(r,n,i){e.writeInt32BE(r,i),e.writeInt32BE(n,i+4)}return t(this._ah,this._al,0),t(this._bh,this._bl,8),t(this._ch,this._cl,16),t(this._dh,this._dl,24),t(this._eh,this._el,32),t(this._fh,this._fl,40),e};g8.exports=sy});var oy=x((DNe,ea)=>{"use strict";ea.exports=function(t){var r=t.toLowerCase(),n=ea.exports[r];if(!n)throw new Error(r+" is not supported (we accept pull requests)");return new n};ea.exports.sha=e8();ea.exports.sha1=n8();ea.exports.sha224=a8();ea.exports.sha256=$w();ea.exports.sha384=p8();ea.exports.sha512=eS()});var ta=x((TNe,y8)=>{"use strict";var ahe=at().Buffer,E8=(ts(),Gs(Yt)).Transform,Ahe=af().StringDecoder,fhe=ze(),uhe=ad();function os(e){E8.call(this),this.hashMode=typeof e=="string",this.hashMode?this[e]=this._finalOrDigest:this.final=this._finalOrDigest,this._final&&(this.__final=this._final,this._final=null),this._decoder=null,this._encoding=null}fhe(os,E8);os.prototype.update=function(e,t,r){var n=uhe(e,t),i=this._update(n);return this.hashMode?this:(r&&(i=this._toString(i,r)),i)};os.prototype.setAutoPadding=function(){};os.prototype.getAuthTag=function(){throw new Error("trying to get auth tag in unsupported state")};os.prototype.setAuthTag=function(){throw new Error("trying to set auth tag in unsupported state")};os.prototype.setAAD=function(){throw new Error("trying to set aad in unsupported state")};os.prototype._transform=function(e,t,r){var n;try{this.hashMode?this._update(e):this.push(this._update(e))}catch(i){n=i}finally{r(n)}};os.prototype._flush=function(e){var t;try{this.push(this.__final())}catch(r){t=r}e(t)};os.prototype._finalOrDigest=function(e){var t=this.__final()||ahe.alloc(0);return e&&(t=this._toString(t,e,!0)),t};os.prototype._toString=function(e,t,r){if(this._decoder||(this._decoder=new Ahe(t),this._encoding=t),this._encoding!==t)throw new Error("can\u2019t switch encodings");var n=this._decoder.write(e);return r&&(n+=this._decoder.end()),n};y8.exports=os});var kc=x((NNe,B8)=>{"use strict";var che=ze(),lhe=ey(),hhe=ry(),dhe=oy(),m8=ta();function ay(e){m8.call(this,"digest"),this._hash=e}che(ay,m8);ay.prototype._update=function(e){this._hash.update(e)};ay.prototype._final=function(){return this._hash.digest()};B8.exports=function(t){return t=t.toLowerCase(),t==="md5"?new lhe:t==="rmd160"||t==="ripemd160"?new hhe:new ay(dhe(t))}});var C8=x((MNe,b8)=>{"use strict";var ghe=ze(),Sf=at().Buffer,I8=ta(),phe=Sf.alloc(128),xc=64;function Ay(e,t){I8.call(this,"digest"),typeof t=="string"&&(t=Sf.from(t)),this._alg=e,this._key=t,t.length>xc?t=e(t):t.length<xc&&(t=Sf.concat([t,phe],xc));for(var r=this._ipad=Sf.allocUnsafe(xc),n=this._opad=Sf.allocUnsafe(xc),i=0;i<xc;i++)r[i]=t[i]^54,n[i]=t[i]^92;this._hash=[r]}ghe(Ay,I8);Ay.prototype._update=function(e){this._hash.push(e)};Ay.prototype._final=function(){var e=this._alg(Sf.concat(this._hash));return this._alg(Sf.concat([this._opad,e]))};b8.exports=Ay});var tS=x((FNe,Q8)=>{var Ehe=ey();Q8.exports=function(e){return new Ehe().update(e).digest()}});var iS=x((kNe,S8)=>{"use strict";var yhe=ze(),mhe=C8(),w8=ta(),wd=at().Buffer,Bhe=tS(),rS=ry(),nS=oy(),Ihe=wd.alloc(128);function Sd(e,t){w8.call(this,"digest"),typeof t=="string"&&(t=wd.from(t));var r=e==="sha512"||e==="sha384"?128:64;if(this._alg=e,this._key=t,t.length>r){var n=e==="rmd160"?new rS:nS(e);t=n.update(t).digest()}else t.length<r&&(t=wd.concat([t,Ihe],r));for(var i=this._ipad=wd.allocUnsafe(r),s=this._opad=wd.allocUnsafe(r),o=0;o<r;o++)i[o]=t[o]^54,s[o]=t[o]^92;this._hash=e==="rmd160"?new rS:nS(e),this._hash.update(i)}yhe(Sd,w8);Sd.prototype._update=function(e){this._hash.update(e)};Sd.prototype._final=function(){var e=this._hash.digest(),t=this._alg==="rmd160"?new rS:nS(this._alg);return t.update(this._opad).update(e).digest()};S8.exports=function(t,r){return t=t.toLowerCase(),t==="rmd160"||t==="ripemd160"?new Sd("rmd160",r):t==="md5"?new mhe(Bhe,r):new Sd(t,r)}});var sS=x((xNe,bhe)=>{bhe.exports={sha224WithRSAEncryption:{sign:"rsa",hash:"sha224",id:"302d300d06096086480165030402040500041c"},"RSA-SHA224":{sign:"ecdsa/rsa",hash:"sha224",id:"302d300d06096086480165030402040500041c"},sha256WithRSAEncryption:{sign:"rsa",hash:"sha256",id:"3031300d060960864801650304020105000420"},"RSA-SHA256":{sign:"ecdsa/rsa",hash:"sha256",id:"3031300d060960864801650304020105000420"},sha384WithRSAEncryption:{sign:"rsa",hash:"sha384",id:"3041300d060960864801650304020205000430"},"RSA-SHA384":{sign:"ecdsa/rsa",hash:"sha384",id:"3041300d060960864801650304020205000430"},sha512WithRSAEncryption:{sign:"rsa",hash:"sha512",id:"3051300d060960864801650304020305000440"},"RSA-SHA512":{sign:"ecdsa/rsa",hash:"sha512",id:"3051300d060960864801650304020305000440"},"RSA-SHA1":{sign:"rsa",hash:"sha1",id:"3021300906052b0e03021a05000414"},"ecdsa-with-SHA1":{sign:"ecdsa",hash:"sha1",id:""},sha256:{sign:"ecdsa",hash:"sha256",id:""},sha224:{sign:"ecdsa",hash:"sha224",id:""},sha384:{sign:"ecdsa",hash:"sha384",id:""},sha512:{sign:"ecdsa",hash:"sha512",id:""},"DSA-SHA":{sign:"dsa",hash:"sha1",id:""},"DSA-SHA1":{sign:"dsa",hash:"sha1",id:""},DSA:{sign:"dsa",hash:"sha1",id:""},"DSA-WITH-SHA224":{sign:"dsa",hash:"sha224",id:""},"DSA-SHA224":{sign:"dsa",hash:"sha224",id:""},"DSA-WITH-SHA256":{sign:"dsa",hash:"sha256",id:""},"DSA-SHA256":{sign:"dsa",hash:"sha256",id:""},"DSA-WITH-SHA384":{sign:"dsa",hash:"sha384",id:""},"DSA-SHA384":{sign:"dsa",hash:"sha384",id:""},"DSA-WITH-SHA512":{sign:"dsa",hash:"sha512",id:""},"DSA-SHA512":{sign:"dsa",hash:"sha512",id:""},"DSA-RIPEMD160":{sign:"dsa",hash:"rmd160",id:""},ripemd160WithRSA:{sign:"rsa",hash:"rmd160",id:"3021300906052b2403020105000414"},"RSA-RIPEMD160":{sign:"rsa",hash:"rmd160",id:"3021300906052b2403020105000414"},md5WithRSAEncryption:{sign:"rsa",hash:"md5",id:"3020300c06082a864886f70d020505000410"},"RSA-MD5":{sign:"rsa",hash:"md5",id:"3020300c06082a864886f70d020505000410"}}});var v8=x((UNe,_8)=>{"use strict";_8.exports=sS()});var oS=x((LNe,R8)=>{"use strict";var Che=isFinite,Qhe=Math.pow(2,30)-1;R8.exports=function(e,t){if(typeof e!="number")throw new TypeError("Iterations not a number");if(e<0||!Che(e))throw new TypeError("Bad iterations");if(typeof t!="number")throw new TypeError("Key length not a number");if(t<0||t>Qhe||t!==t)throw new TypeError("Bad key length")}});var aS=x((PNe,T8)=>{"use strict";var fy;globalThis.process&&globalThis.process.browser?fy="utf-8":globalThis.process&&globalThis.process.version?(D8=parseInt(process.version.split(".")[0].slice(1),10),fy=D8>=6?"utf-8":"binary"):fy="utf-8";var D8;T8.exports=fy});var AS=x((ONe,F8)=>{"use strict";var whe=at().Buffer,She=ad(),M8=typeof Uint8Array<"u",_he=M8&&typeof ArrayBuffer<"u",N8=_he&&ArrayBuffer.isView;F8.exports=function(e,t,r){if(typeof e=="string"||whe.isBuffer(e)||M8&&e instanceof Uint8Array||N8&&N8(e))return She(e,t);throw new TypeError(r+" must be a string, a Buffer, a Uint8Array, or a DataView")}});var fS=x((HNe,L8)=>{"use strict";var vhe=tS(),Rhe=ry(),Dhe=oy(),_f=at().Buffer,The=oS(),k8=aS(),x8=AS(),Nhe=_f.alloc(128),uy={__proto__:null,md5:16,sha1:20,sha224:28,sha256:32,sha384:48,sha512:64,"sha512-256":32,ripemd160:20,rmd160:20},Mhe={__proto__:null,"sha-1":"sha1","sha-224":"sha224","sha-256":"sha256","sha-384":"sha384","sha-512":"sha512","ripemd-160":"ripemd160"};function Fhe(e){return new Rhe().update(e).digest()}function khe(e){function t(r){return Dhe(e).update(r).digest()}return e==="rmd160"||e==="ripemd160"?Fhe:e==="md5"?vhe:t}function U8(e,t,r){var n=khe(e),i=e==="sha512"||e==="sha384"?128:64;t.length>i?t=n(t):t.length<i&&(t=_f.concat([t,Nhe],i));for(var s=_f.allocUnsafe(i+uy[e]),o=_f.allocUnsafe(i+uy[e]),a=0;a<i;a++)s[a]=t[a]^54,o[a]=t[a]^92;var A=_f.allocUnsafe(i+r+4);s.copy(A,0,0,i),this.ipad1=A,this.ipad2=s,this.opad=o,this.alg=e,this.blocksize=i,this.hash=n,this.size=uy[e]}U8.prototype.run=function(e,t){e.copy(t,this.blocksize);var r=this.hash(t);return r.copy(this.opad,this.blocksize),this.hash(this.opad)};function xhe(e,t,r,n,i){The(r,n),e=x8(e,k8,"Password"),t=x8(t,k8,"Salt");var s=(i||"sha1").toLowerCase(),o=Mhe[s]||s,a=uy[o];if(typeof a!="number"||!a)throw new TypeError("Digest algorithm not supported: "+i);var A=new U8(o,e,t.length),f=_f.allocUnsafe(n),l=_f.allocUnsafe(t.length+4);t.copy(l,0,0,t.length);for(var p=0,B=a,S=Math.ceil(n/B),_=1;_<=S;_++){l.writeUInt32BE(_,t.length);for(var N=A.run(l,A.ipad1),P=N,U=1;U<r;U++){P=A.run(P,A.ipad2);for(var G=0;G<B;G++)N[G]^=P[G]}N.copy(f,p),p+=B}return f}L8.exports=xhe});var W8=x((qNe,Y8)=>{"use strict";var q8=at().Buffer,Uhe=oS(),P8=aS(),O8=fS(),H8=AS(),cy,_d=globalThis.crypto&&globalThis.crypto.subtle,Lhe={sha:"SHA-1","sha-1":"SHA-1",sha1:"SHA-1",sha256:"SHA-256","sha-256":"SHA-256",sha384:"SHA-384","sha-384":"SHA-384","sha-512":"SHA-512",sha512:"SHA-512"},uS=[],vf;function cS(){return vf||(globalThis.process&&globalThis.process.nextTick?vf=globalThis.process.nextTick:globalThis.queueMicrotask?vf=globalThis.queueMicrotask:globalThis.setImmediate?vf=globalThis.setImmediate:vf=globalThis.setTimeout,vf)}function G8(e,t,r,n,i){return _d.importKey("raw",e,{name:"PBKDF2"},!1,["deriveBits"]).then(function(s){return _d.deriveBits({name:"PBKDF2",salt:t,iterations:r,hash:{name:i}},s,n<<3)}).then(function(s){return q8.from(s)})}function Phe(e){if(globalThis.process&&!globalThis.process.browser||!_d||!_d.importKey||!_d.deriveBits)return Promise.resolve(!1);if(uS[e]!==void 0)return uS[e];cy=cy||q8.alloc(8);var t=G8(cy,cy,10,128,e).then(function(){return!0},function(){return!1});return uS[e]=t,t}function Ohe(e,t){e.then(function(r){cS()(function(){t(null,r)})},function(r){cS()(function(){t(r)})})}Y8.exports=function(e,t,r,n,i,s){if(typeof i=="function"&&(s=i,i=void 0),Uhe(r,n),e=H8(e,P8,"Password"),t=H8(t,P8,"Salt"),typeof s!="function")throw new Error("No callback provided to pbkdf2");i=i||"sha1";var o=Lhe[i.toLowerCase()];if(!o||typeof globalThis.Promise!="function"){cS()(function(){var a;try{a=O8(e,t,r,n,i)}catch(A){s(A);return}s(null,a)});return}Ohe(Phe(o).then(function(a){return a?G8(e,t,r,n,o):O8(e,t,r,n,i)}),s)}});var hS=x(lS=>{"use strict";lS.pbkdf2=W8();lS.pbkdf2Sync=fS()});var dS=x(Ii=>{"use strict";Ii.readUInt32BE=function(t,r){var n=t[0+r]<<24|t[1+r]<<16|t[2+r]<<8|t[3+r];return n>>>0};Ii.writeUInt32BE=function(t,r,n){t[0+n]=r>>>24,t[1+n]=r>>>16&255,t[2+n]=r>>>8&255,t[3+n]=r&255};Ii.ip=function(t,r,n,i){for(var s=0,o=0,a=6;a>=0;a-=2){for(var A=0;A<=24;A+=8)s<<=1,s|=r>>>A+a&1;for(var A=0;A<=24;A+=8)s<<=1,s|=t>>>A+a&1}for(var a=6;a>=0;a-=2){for(var A=1;A<=25;A+=8)o<<=1,o|=r>>>A+a&1;for(var A=1;A<=25;A+=8)o<<=1,o|=t>>>A+a&1}n[i+0]=s>>>0,n[i+1]=o>>>0};Ii.rip=function(t,r,n,i){for(var s=0,o=0,a=0;a<4;a++)for(var A=24;A>=0;A-=8)s<<=1,s|=r>>>A+a&1,s<<=1,s|=t>>>A+a&1;for(var a=4;a<8;a++)for(var A=24;A>=0;A-=8)o<<=1,o|=r>>>A+a&1,o<<=1,o|=t>>>A+a&1;n[i+0]=s>>>0,n[i+1]=o>>>0};Ii.pc1=function(t,r,n,i){for(var s=0,o=0,a=7;a>=5;a--){for(var A=0;A<=24;A+=8)s<<=1,s|=r>>A+a&1;for(var A=0;A<=24;A+=8)s<<=1,s|=t>>A+a&1}for(var A=0;A<=24;A+=8)s<<=1,s|=r>>A+a&1;for(var a=1;a<=3;a++){for(var A=0;A<=24;A+=8)o<<=1,o|=r>>A+a&1;for(var A=0;A<=24;A+=8)o<<=1,o|=t>>A+a&1}for(var A=0;A<=24;A+=8)o<<=1,o|=t>>A+a&1;n[i+0]=s>>>0,n[i+1]=o>>>0};Ii.r28shl=function(t,r){return t<<r&268435455|t>>>28-r};var ly=[14,11,17,4,27,23,25,0,13,22,7,18,5,9,16,24,2,20,12,21,1,8,15,26,15,4,25,19,9,1,26,16,5,11,23,8,12,7,17,0,22,3,10,14,6,20,27,24];Ii.pc2=function(t,r,n,i){for(var s=0,o=0,a=ly.length>>>1,A=0;A<a;A++)s<<=1,s|=t>>>ly[A]&1;for(var A=a;A<ly.length;A++)o<<=1,o|=r>>>ly[A]&1;n[i+0]=s>>>0,n[i+1]=o>>>0};Ii.expand=function(t,r,n){var i=0,s=0;i=(t&1)<<5|t>>>27;for(var o=23;o>=15;o-=4)i<<=6,i|=t>>>o&63;for(var o=11;o>=3;o-=4)s|=t>>>o&63,s<<=6;s|=(t&31)<<1|t>>>31,r[n+0]=i>>>0,r[n+1]=s>>>0};var V8=[14,0,4,15,13,7,1,4,2,14,15,2,11,13,8,1,3,10,10,6,6,12,12,11,5,9,9,5,0,3,7,8,4,15,1,12,14,8,8,2,13,4,6,9,2,1,11,7,15,5,12,11,9,3,7,14,3,10,10,0,5,6,0,13,15,3,1,13,8,4,14,7,6,15,11,2,3,8,4,14,9,12,7,0,2,1,13,10,12,6,0,9,5,11,10,5,0,13,14,8,7,10,11,1,10,3,4,15,13,4,1,2,5,11,8,6,12,7,6,12,9,0,3,5,2,14,15,9,10,13,0,7,9,0,14,9,6,3,3,4,15,6,5,10,1,2,13,8,12,5,7,14,11,12,4,11,2,15,8,1,13,1,6,10,4,13,9,0,8,6,15,9,3,8,0,7,11,4,1,15,2,14,12,3,5,11,10,5,14,2,7,12,7,13,13,8,14,11,3,5,0,6,6,15,9,0,10,3,1,4,2,7,8,2,5,12,11,1,12,10,4,14,15,9,10,3,6,15,9,0,0,6,12,10,11,1,7,13,13,8,15,9,1,4,3,5,14,11,5,12,2,7,8,2,4,14,2,14,12,11,4,2,1,12,7,4,10,7,11,13,6,1,8,5,5,0,3,15,15,10,13,3,0,9,14,8,9,6,4,11,2,8,1,12,11,7,10,1,13,14,7,2,8,13,15,6,9,15,12,0,5,9,6,10,3,4,0,5,14,3,12,10,1,15,10,4,15,2,9,7,2,12,6,9,8,5,0,6,13,1,3,13,4,14,14,0,7,11,5,3,11,8,9,4,14,3,15,2,5,12,2,9,8,5,12,15,3,10,7,11,0,14,4,1,10,7,1,6,13,0,11,8,6,13,4,13,11,0,2,11,14,7,15,4,0,9,8,1,13,10,3,14,12,3,9,5,7,12,5,2,10,15,6,8,1,6,1,6,4,11,11,13,13,8,12,1,3,4,7,10,14,7,10,9,15,5,6,0,8,15,0,14,5,2,9,3,2,12,13,1,2,15,8,13,4,8,6,10,15,3,11,7,1,4,10,12,9,5,3,6,14,11,5,0,0,14,12,9,7,2,7,2,11,1,4,14,1,7,9,4,12,10,14,8,2,13,0,15,6,12,10,9,13,0,15,3,3,5,5,6,8,11];Ii.substitute=function(t,r){for(var n=0,i=0;i<4;i++){var s=t>>>18-i*6&63,o=V8[i*64+s];n<<=4,n|=o}for(var i=0;i<4;i++){var s=r>>>18-i*6&63,o=V8[256+i*64+s];n<<=4,n|=o}return n>>>0};var J8=[16,25,12,11,3,20,4,15,31,17,9,6,27,14,1,22,30,24,8,18,0,5,29,23,13,19,2,26,10,21,28,7];Ii.permute=function(t){for(var r=0,n=0;n<J8.length;n++)r<<=1,r|=t>>>J8[n]&1;return r>>>0};Ii.padSplit=function(t,r,n){for(var i=t.toString(2);i.length<r;)i="0"+i;for(var s=[],o=0;o<r;o+=n)s.push(i.slice(o,o+n));return s.join(" ")}});var zn=x((WNe,z8)=>{z8.exports=j8;function j8(e,t){if(!e)throw new Error(t||"Assertion failed")}j8.equal=function(t,r,n){if(t!=r)throw new Error(n||"Assertion failed: "+t+" != "+r)}});var hy=x((VNe,K8)=>{"use strict";var Hhe=zn();function bi(e){this.options=e,this.type=this.options.type,this.blockSize=8,this._init(),this.buffer=new Array(this.blockSize),this.bufferOff=0,this.padding=e.padding!==!1}K8.exports=bi;bi.prototype._init=function(){};bi.prototype.update=function(t){return t.length===0?[]:this.type==="decrypt"?this._updateDecrypt(t):this._updateEncrypt(t)};bi.prototype._buffer=function(t,r){for(var n=Math.min(this.buffer.length-this.bufferOff,t.length-r),i=0;i<n;i++)this.buffer[this.bufferOff+i]=t[r+i];return this.bufferOff+=n,n};bi.prototype._flushBuffer=function(t,r){return this._update(this.buffer,0,t,r),this.bufferOff=0,this.blockSize};bi.prototype._updateEncrypt=function(t){var r=0,n=0,i=(this.bufferOff+t.length)/this.blockSize|0,s=new Array(i*this.blockSize);this.bufferOff!==0&&(r+=this._buffer(t,r),this.bufferOff===this.buffer.length&&(n+=this._flushBuffer(s,n)));for(var o=t.length-(t.length-r)%this.blockSize;r<o;r+=this.blockSize)this._update(t,r,s,n),n+=this.blockSize;for(;r<t.length;r++,this.bufferOff++)this.buffer[this.bufferOff]=t[r];return s};bi.prototype._updateDecrypt=function(t){for(var r=0,n=0,i=Math.ceil((this.bufferOff+t.length)/this.blockSize)-1,s=new Array(i*this.blockSize);i>0;i--)r+=this._buffer(t,r),n+=this._flushBuffer(s,n);return r+=this._buffer(t,r),s};bi.prototype.final=function(t){var r;t&&(r=this.update(t));var n;return this.type==="encrypt"?n=this._finalEncrypt():n=this._finalDecrypt(),r?r.concat(n):n};bi.prototype._pad=function(t,r){if(r===0)return!1;for(;r<t.length;)t[r++]=0;return!0};bi.prototype._finalEncrypt=function(){if(!this._pad(this.buffer,this.bufferOff))return[];var t=new Array(this.blockSize);return this._update(this.buffer,0,t,0),t};bi.prototype._unpad=function(t){return t};bi.prototype._finalDecrypt=function(){Hhe.equal(this.bufferOff,this.blockSize,"Not enough data to decrypt");var t=new Array(this.blockSize);return this._flushBuffer(t,0),this._unpad(t)}});var gS=x((JNe,$8)=>{"use strict";var X8=zn(),qhe=ze(),vr=dS(),Z8=hy();function Ghe(){this.tmp=new Array(2),this.keys=null}function so(e){Z8.call(this,e);var t=new Ghe;this._desState=t,this.deriveKeys(t,e.key)}qhe(so,Z8);$8.exports=so;so.create=function(t){return new so(t)};var Yhe=[1,1,2,2,2,2,2,2,1,2,2,2,2,2,2,1];so.prototype.deriveKeys=function(t,r){t.keys=new Array(32),X8.equal(r.length,this.blockSize,"Invalid key length");var n=vr.readUInt32BE(r,0),i=vr.readUInt32BE(r,4);vr.pc1(n,i,t.tmp,0),n=t.tmp[0],i=t.tmp[1];for(var s=0;s<t.keys.length;s+=2){var o=Yhe[s>>>1];n=vr.r28shl(n,o),i=vr.r28shl(i,o),vr.pc2(n,i,t.keys,s)}};so.prototype._update=function(t,r,n,i){var s=this._desState,o=vr.readUInt32BE(t,r),a=vr.readUInt32BE(t,r+4);vr.ip(o,a,s.tmp,0),o=s.tmp[0],a=s.tmp[1],this.type==="encrypt"?this._encrypt(s,o,a,s.tmp,0):this._decrypt(s,o,a,s.tmp,0),o=s.tmp[0],a=s.tmp[1],vr.writeUInt32BE(n,o,i),vr.writeUInt32BE(n,a,i+4)};so.prototype._pad=function(t,r){if(this.padding===!1)return!1;for(var n=t.length-r,i=r;i<t.length;i++)t[i]=n;return!0};so.prototype._unpad=function(t){if(this.padding===!1)return t;for(var r=t[t.length-1],n=t.length-r;n<t.length;n++)X8.equal(t[n],r);return t.slice(0,t.length-r)};so.prototype._encrypt=function(t,r,n,i,s){for(var o=r,a=n,A=0;A<t.keys.length;A+=2){var f=t.keys[A],l=t.keys[A+1];vr.expand(a,t.tmp,0),f^=t.tmp[0],l^=t.tmp[1];var p=vr.substitute(f,l),B=vr.permute(p),S=a;a=(o^B)>>>0,o=S}vr.rip(a,o,i,s)};so.prototype._decrypt=function(t,r,n,i,s){for(var o=n,a=r,A=t.keys.length-2;A>=0;A-=2){var f=t.keys[A],l=t.keys[A+1];vr.expand(o,t.tmp,0),f^=t.tmp[0],l^=t.tmp[1];var p=vr.substitute(f,l),B=vr.permute(p),S=o;o=(a^B)>>>0,a=S}vr.rip(o,a,i,s)}});var t5=x(e5=>{"use strict";var Whe=zn(),Vhe=ze(),dy={};function Jhe(e){Whe.equal(e.length,8,"Invalid IV length"),this.iv=new Array(8);for(var t=0;t<this.iv.length;t++)this.iv[t]=e[t]}function jhe(e){function t(s){e.call(this,s),this._cbcInit()}Vhe(t,e);for(var r=Object.keys(dy),n=0;n<r.length;n++){var i=r[n];t.prototype[i]=dy[i]}return t.create=function(o){return new t(o)},t}e5.instantiate=jhe;dy._cbcInit=function(){var t=new Jhe(this.options.iv);this._cbcState=t};dy._update=function(t,r,n,i){var s=this._cbcState,o=this.constructor.super_.prototype,a=s.iv;if(this.type==="encrypt"){for(var A=0;A<this.blockSize;A++)a[A]^=t[r+A];o._update.call(this,a,0,n,i);for(var A=0;A<this.blockSize;A++)a[A]=n[i+A]}else{o._update.call(this,t,r,n,i);for(var A=0;A<this.blockSize;A++)n[i+A]^=a[A];for(var A=0;A<this.blockSize;A++)a[A]=t[r+A]}}});var i5=x((zNe,n5)=>{"use strict";var zhe=zn(),Khe=ze(),r5=hy(),AA=gS();function Xhe(e,t){zhe.equal(t.length,24,"Invalid key length");var r=t.slice(0,8),n=t.slice(8,16),i=t.slice(16,24);e==="encrypt"?this.ciphers=[AA.create({type:"encrypt",key:r}),AA.create({type:"decrypt",key:n}),AA.create({type:"encrypt",key:i})]:this.ciphers=[AA.create({type:"decrypt",key:i}),AA.create({type:"encrypt",key:n}),AA.create({type:"decrypt",key:r})]}function Rf(e){r5.call(this,e);var t=new Xhe(this.type,this.options.key);this._edeState=t}Khe(Rf,r5);n5.exports=Rf;Rf.create=function(t){return new Rf(t)};Rf.prototype._update=function(t,r,n,i){var s=this._edeState;s.ciphers[0]._update(t,r,n,i),s.ciphers[1]._update(n,i,n,i),s.ciphers[2]._update(n,i,n,i)};Rf.prototype._pad=AA.prototype._pad;Rf.prototype._unpad=AA.prototype._unpad});var s5=x(Uc=>{"use strict";Uc.utils=dS();Uc.Cipher=hy();Uc.DES=gS();Uc.CBC=t5();Uc.EDE=i5()});var A5=x((XNe,a5)=>{var o5=ta(),ra=s5(),Zhe=ze(),Df=at().Buffer,vd={"des-ede3-cbc":ra.CBC.instantiate(ra.EDE),"des-ede3":ra.EDE,"des-ede-cbc":ra.CBC.instantiate(ra.EDE),"des-ede":ra.EDE,"des-cbc":ra.CBC.instantiate(ra.DES),"des-ecb":ra.DES};vd.des=vd["des-cbc"];vd.des3=vd["des-ede3-cbc"];a5.exports=gy;Zhe(gy,o5);function gy(e){o5.call(this);var t=e.mode.toLowerCase(),r=vd[t],n;e.decrypt?n="decrypt":n="encrypt";var i=e.key;Df.isBuffer(i)||(i=Df.from(i)),(t==="des-ede"||t==="des-ede-cbc")&&(i=Df.concat([i,i.slice(0,8)]));var s=e.iv;Df.isBuffer(s)||(s=Df.from(s)),this._des=r.create({key:i,iv:s,type:n})}gy.prototype._update=function(e){return Df.from(this._des.update(e))};gy.prototype._final=function(){return Df.from(this._des.final())}});var f5=x(pS=>{pS.encrypt=function(e,t){return e._cipher.encryptBlock(t)};pS.decrypt=function(e,t){return e._cipher.decryptBlock(t)}});var Lc=x(($Ne,u5)=>{u5.exports=function(t,r){for(var n=Math.min(t.length,r.length),i=new Buffer(n),s=0;s<n;++s)i[s]=t[s]^r[s];return i}});var l5=x(ES=>{var c5=Lc();ES.encrypt=function(e,t){var r=c5(t,e._prev);return e._prev=e._cipher.encryptBlock(r),e._prev};ES.decrypt=function(e,t){var r=e._prev;e._prev=t;var n=e._cipher.decryptBlock(t);return c5(n,r)}});var g5=x(d5=>{var Rd=at().Buffer,$he=Lc();function h5(e,t,r){var n=t.length,i=$he(t,e._cache);return e._cache=e._cache.slice(n),e._prev=Rd.concat([e._prev,r?t:i]),i}d5.encrypt=function(e,t,r){for(var n=Rd.allocUnsafe(0),i;t.length;)if(e._cache.length===0&&(e._cache=e._cipher.encryptBlock(e._prev),e._prev=Rd.allocUnsafe(0)),e._cache.length<=t.length)i=e._cache.length,n=Rd.concat([n,h5(e,t.slice(0,i),r)]),t=t.slice(i);else{n=Rd.concat([n,h5(e,t,r)]);break}return n}});var E5=x(p5=>{var yS=at().Buffer;function ede(e,t,r){var n=e._cipher.encryptBlock(e._prev),i=n[0]^t;return e._prev=yS.concat([e._prev.slice(1),yS.from([r?t:i])]),i}p5.encrypt=function(e,t,r){for(var n=t.length,i=yS.allocUnsafe(n),s=-1;++s<n;)i[s]=ede(e,t[s],r);return i}});var m5=x(y5=>{var py=at().Buffer;function tde(e,t,r){for(var n,i=-1,s=8,o=0,a,A;++i<s;)n=e._cipher.encryptBlock(e._prev),a=t&1<<7-i?128:0,A=n[0]^a,o+=(A&128)>>i%8,e._prev=rde(e._prev,r?a:A);return o}function rde(e,t){var r=e.length,n=-1,i=py.allocUnsafe(e.length);for(e=py.concat([e,py.from([t])]);++n<r;)i[n]=e[n]<<1|e[n+1]>>7;return i}y5.encrypt=function(e,t,r){for(var n=t.length,i=py.allocUnsafe(n),s=-1;++s<n;)i[s]=tde(e,t[s],r);return i}});var I5=x(B5=>{var nde=Lc();function ide(e){return e._prev=e._cipher.encryptBlock(e._prev),e._prev}B5.encrypt=function(e,t){for(;e._cache.length<t.length;)e._cache=Buffer.concat([e._cache,ide(e)]);var r=e._cache.slice(0,t.length);return e._cache=e._cache.slice(t.length),nde(t,r)}});var mS=x((sMe,b5)=>{function sde(e){for(var t=e.length,r;t--;)if(r=e.readUInt8(t),r===255)e.writeUInt8(0,t);else{r++,e.writeUInt8(r,t);break}}b5.exports=sde});var IS=x(Q5=>{var ode=Lc(),C5=at().Buffer,ade=mS();function Ade(e){var t=e._cipher.encryptBlockRaw(e._prev);return ade(e._prev),t}var BS=16;Q5.encrypt=function(e,t){var r=Math.ceil(t.length/BS),n=e._cache.length;e._cache=C5.concat([e._cache,C5.allocUnsafe(r*BS)]);for(var i=0;i<r;i++){var s=Ade(e),o=n+i*BS;e._cache.writeUInt32BE(s[0],o+0),e._cache.writeUInt32BE(s[1],o+4),e._cache.writeUInt32BE(s[2],o+8),e._cache.writeUInt32BE(s[3],o+12)}var a=e._cache.slice(0,t.length);return e._cache=e._cache.slice(t.length),ode(t,a)}});var bS=x((aMe,fde)=>{fde.exports={"aes-128-ecb":{cipher:"AES",key:128,iv:0,mode:"ECB",type:"block"},"aes-192-ecb":{cipher:"AES",key:192,iv:0,mode:"ECB",type:"block"},"aes-256-ecb":{cipher:"AES",key:256,iv:0,mode:"ECB",type:"block"},"aes-128-cbc":{cipher:"AES",key:128,iv:16,mode:"CBC",type:"block"},"aes-192-cbc":{cipher:"AES",key:192,iv:16,mode:"CBC",type:"block"},"aes-256-cbc":{cipher:"AES",key:256,iv:16,mode:"CBC",type:"block"},aes128:{cipher:"AES",key:128,iv:16,mode:"CBC",type:"block"},aes192:{cipher:"AES",key:192,iv:16,mode:"CBC",type:"block"},aes256:{cipher:"AES",key:256,iv:16,mode:"CBC",type:"block"},"aes-128-cfb":{cipher:"AES",key:128,iv:16,mode:"CFB",type:"stream"},"aes-192-cfb":{cipher:"AES",key:192,iv:16,mode:"CFB",type:"stream"},"aes-256-cfb":{cipher:"AES",key:256,iv:16,mode:"CFB",type:"stream"},"aes-128-cfb8":{cipher:"AES",key:128,iv:16,mode:"CFB8",type:"stream"},"aes-192-cfb8":{cipher:"AES",key:192,iv:16,mode:"CFB8",type:"stream"},"aes-256-cfb8":{cipher:"AES",key:256,iv:16,mode:"CFB8",type:"stream"},"aes-128-cfb1":{cipher:"AES",key:128,iv:16,mode:"CFB1",type:"stream"},"aes-192-cfb1":{cipher:"AES",key:192,iv:16,mode:"CFB1",type:"stream"},"aes-256-cfb1":{cipher:"AES",key:256,iv:16,mode:"CFB1",type:"stream"},"aes-128-ofb":{cipher:"AES",key:128,iv:16,mode:"OFB",type:"stream"},"aes-192-ofb":{cipher:"AES",key:192,iv:16,mode:"OFB",type:"stream"},"aes-256-ofb":{cipher:"AES",key:256,iv:16,mode:"OFB",type:"stream"},"aes-128-ctr":{cipher:"AES",key:128,iv:16,mode:"CTR",type:"stream"},"aes-192-ctr":{cipher:"AES",key:192,iv:16,mode:"CTR",type:"stream"},"aes-256-ctr":{cipher:"AES",key:256,iv:16,mode:"CTR",type:"stream"},"aes-128-gcm":{cipher:"AES",key:128,iv:12,mode:"GCM",type:"auth"},"aes-192-gcm":{cipher:"AES",key:192,iv:12,mode:"GCM",type:"auth"},"aes-256-gcm":{cipher:"AES",key:256,iv:12,mode:"GCM",type:"auth"}}});var yy=x((AMe,w5)=>{var ude={ECB:f5(),CBC:l5(),CFB:g5(),CFB8:E5(),CFB1:m5(),OFB:I5(),CTR:IS(),GCM:IS()},Ey=bS();for(CS in Ey)Ey[CS].module=ude[Ey[CS].mode];var CS;w5.exports=Ey});var Dd=x((fMe,_5)=>{var my=at().Buffer;function wS(e){my.isBuffer(e)||(e=my.from(e));for(var t=e.length/4|0,r=new Array(t),n=0;n<t;n++)r[n]=e.readUInt32BE(n*4);return r}function QS(e){for(var t=0;t<e.length;e++)e[t]=0}function S5(e,t,r,n,i){for(var s=r[0],o=r[1],a=r[2],A=r[3],f=e[0]^t[0],l=e[1]^t[1],p=e[2]^t[2],B=e[3]^t[3],S,_,N,P,U=4,G=1;G<i;G++)S=s[f>>>24]^o[l>>>16&255]^a[p>>>8&255]^A[B&255]^t[U++],_=s[l>>>24]^o[p>>>16&255]^a[B>>>8&255]^A[f&255]^t[U++],N=s[p>>>24]^o[B>>>16&255]^a[f>>>8&255]^A[l&255]^t[U++],P=s[B>>>24]^o[f>>>16&255]^a[l>>>8&255]^A[p&255]^t[U++],f=S,l=_,p=N,B=P;return S=(n[f>>>24]<<24|n[l>>>16&255]<<16|n[p>>>8&255]<<8|n[B&255])^t[U++],_=(n[l>>>24]<<24|n[p>>>16&255]<<16|n[B>>>8&255]<<8|n[f&255])^t[U++],N=(n[p>>>24]<<24|n[B>>>16&255]<<16|n[f>>>8&255]<<8|n[l&255])^t[U++],P=(n[B>>>24]<<24|n[f>>>16&255]<<16|n[l>>>8&255]<<8|n[p&255])^t[U++],S=S>>>0,_=_>>>0,N=N>>>0,P=P>>>0,[S,_,N,P]}var cde=[0,1,2,4,8,16,32,64,128,27,54],Ir=(function(){for(var e=new Array(256),t=0;t<256;t++)t<128?e[t]=t<<1:e[t]=t<<1^283;for(var r=[],n=[],i=[[],[],[],[]],s=[[],[],[],[]],o=0,a=0,A=0;A<256;++A){var f=a^a<<1^a<<2^a<<3^a<<4;f=f>>>8^f&255^99,r[o]=f,n[f]=o;var l=e[o],p=e[l],B=e[p],S=e[f]*257^f*16843008;i[0][o]=S<<24|S>>>8,i[1][o]=S<<16|S>>>16,i[2][o]=S<<8|S>>>24,i[3][o]=S,S=B*16843009^p*65537^l*257^o*16843008,s[0][f]=S<<24|S>>>8,s[1][f]=S<<16|S>>>16,s[2][f]=S<<8|S>>>24,s[3][f]=S,o===0?o=a=1:(o=l^e[e[e[B^l]]],a^=e[e[a]])}return{SBOX:r,INV_SBOX:n,SUB_MIX:i,INV_SUB_MIX:s}})();function Ci(e){this._key=wS(e),this._reset()}Ci.blockSize=16;Ci.keySize=256/8;Ci.prototype.blockSize=Ci.blockSize;Ci.prototype.keySize=Ci.keySize;Ci.prototype._reset=function(){for(var e=this._key,t=e.length,r=t+6,n=(r+1)*4,i=[],s=0;s<t;s++)i[s]=e[s];for(s=t;s<n;s++){var o=i[s-1];s%t===0?(o=o<<8|o>>>24,o=Ir.SBOX[o>>>24]<<24|Ir.SBOX[o>>>16&255]<<16|Ir.SBOX[o>>>8&255]<<8|Ir.SBOX[o&255],o^=cde[s/t|0]<<24):t>6&&s%t===4&&(o=Ir.SBOX[o>>>24]<<24|Ir.SBOX[o>>>16&255]<<16|Ir.SBOX[o>>>8&255]<<8|Ir.SBOX[o&255]),i[s]=i[s-t]^o}for(var a=[],A=0;A<n;A++){var f=n-A,l=i[f-(A%4?0:4)];A<4||f<=4?a[A]=l:a[A]=Ir.INV_SUB_MIX[0][Ir.SBOX[l>>>24]]^Ir.INV_SUB_MIX[1][Ir.SBOX[l>>>16&255]]^Ir.INV_SUB_MIX[2][Ir.SBOX[l>>>8&255]]^Ir.INV_SUB_MIX[3][Ir.SBOX[l&255]]}this._nRounds=r,this._keySchedule=i,this._invKeySchedule=a};Ci.prototype.encryptBlockRaw=function(e){return e=wS(e),S5(e,this._keySchedule,Ir.SUB_MIX,Ir.SBOX,this._nRounds)};Ci.prototype.encryptBlock=function(e){var t=this.encryptBlockRaw(e),r=my.allocUnsafe(16);return r.writeUInt32BE(t[0],0),r.writeUInt32BE(t[1],4),r.writeUInt32BE(t[2],8),r.writeUInt32BE(t[3],12),r};Ci.prototype.decryptBlock=function(e){e=wS(e);var t=e[1];e[1]=e[3],e[3]=t;var r=S5(e,this._invKeySchedule,Ir.INV_SUB_MIX,Ir.INV_SBOX,this._nRounds),n=my.allocUnsafe(16);return n.writeUInt32BE(r[0],0),n.writeUInt32BE(r[3],4),n.writeUInt32BE(r[2],8),n.writeUInt32BE(r[1],12),n};Ci.prototype.scrub=function(){QS(this._keySchedule),QS(this._invKeySchedule),QS(this._key)};_5.exports.AES=Ci});var D5=x((uMe,R5)=>{var Pc=at().Buffer,lde=Pc.alloc(16,0);function hde(e){return[e.readUInt32BE(0),e.readUInt32BE(4),e.readUInt32BE(8),e.readUInt32BE(12)]}function v5(e){var t=Pc.allocUnsafe(16);return t.writeUInt32BE(e[0]>>>0,0),t.writeUInt32BE(e[1]>>>0,4),t.writeUInt32BE(e[2]>>>0,8),t.writeUInt32BE(e[3]>>>0,12),t}function Td(e){this.h=e,this.state=Pc.alloc(16,0),this.cache=Pc.allocUnsafe(0)}Td.prototype.ghash=function(e){for(var t=-1;++t<e.length;)this.state[t]^=e[t];this._multiply()};Td.prototype._multiply=function(){for(var e=hde(this.h),t=[0,0,0,0],r,n,i,s=-1;++s<128;){for(n=(this.state[~~(s/8)]&1<<7-s%8)!==0,n&&(t[0]^=e[0],t[1]^=e[1],t[2]^=e[2],t[3]^=e[3]),i=(e[3]&1)!==0,r=3;r>0;r--)e[r]=e[r]>>>1|(e[r-1]&1)<<31;e[0]=e[0]>>>1,i&&(e[0]=e[0]^225<<24)}this.state=v5(t)};Td.prototype.update=function(e){this.cache=Pc.concat([this.cache,e]);for(var t;this.cache.length>=16;)t=this.cache.slice(0,16),this.cache=this.cache.slice(16),this.ghash(t)};Td.prototype.final=function(e,t){return this.cache.length&&this.ghash(Pc.concat([this.cache,lde],16)),this.ghash(v5([0,e,0,t])),this.state};R5.exports=Td});var SS=x((cMe,M5)=>{var dde=Dd(),Mn=at().Buffer,T5=ta(),gde=ze(),N5=D5(),pde=Lc(),Ede=mS();function yde(e,t){var r=0;e.length!==t.length&&r++;for(var n=Math.min(e.length,t.length),i=0;i<n;++i)r+=e[i]^t[i];return r}function mde(e,t,r){if(t.length===12)return e._finID=Mn.concat([t,Mn.from([0,0,0,1])]),Mn.concat([t,Mn.from([0,0,0,2])]);var n=new N5(r),i=t.length,s=i%16;n.update(t),s&&(s=16-s,n.update(Mn.alloc(s,0))),n.update(Mn.alloc(8,0));var o=i*8,a=Mn.alloc(8);a.writeUIntBE(o,0,8),n.update(a),e._finID=n.state;var A=Mn.from(e._finID);return Ede(A),A}function Tf(e,t,r,n){T5.call(this);var i=Mn.alloc(4,0);this._cipher=new dde.AES(t);var s=this._cipher.encryptBlock(i);this._ghash=new N5(s),r=mde(this,r,s),this._prev=Mn.from(r),this._cache=Mn.allocUnsafe(0),this._secCache=Mn.allocUnsafe(0),this._decrypt=n,this._alen=0,this._len=0,this._mode=e,this._authTag=null,this._called=!1}gde(Tf,T5);Tf.prototype._update=function(e){if(!this._called&&this._alen){var t=16-this._alen%16;t<16&&(t=Mn.alloc(t,0),this._ghash.update(t))}this._called=!0;var r=this._mode.encrypt(this,e);return this._decrypt?this._ghash.update(e):this._ghash.update(r),this._len+=e.length,r};Tf.prototype._final=function(){if(this._decrypt&&!this._authTag)throw new Error("Unsupported state or unable to authenticate data");var e=pde(this._ghash.final(this._alen*8,this._len*8),this._cipher.encryptBlock(this._finID));if(this._decrypt&&yde(e,this._authTag))throw new Error("Unsupported state or unable to authenticate data");this._authTag=e,this._cipher.scrub()};Tf.prototype.getAuthTag=function(){if(this._decrypt||!Mn.isBuffer(this._authTag))throw new Error("Attempting to get auth tag in unsupported state");return this._authTag};Tf.prototype.setAuthTag=function(t){if(!this._decrypt)throw new Error("Attempting to set auth tag in unsupported state");this._authTag=t};Tf.prototype.setAAD=function(t){if(this._called)throw new Error("Attempting to set AAD in unsupported state");this._ghash.update(t),this._alen+=t.length};M5.exports=Tf});var vS=x((lMe,k5)=>{var Bde=Dd(),_S=at().Buffer,F5=ta(),Ide=ze();function By(e,t,r,n){F5.call(this),this._cipher=new Bde.AES(t),this._prev=_S.from(r),this._cache=_S.allocUnsafe(0),this._secCache=_S.allocUnsafe(0),this._decrypt=n,this._mode=e}Ide(By,F5);By.prototype._update=function(e){return this._mode.encrypt(this,e,this._decrypt)};By.prototype._final=function(){this._cipher.scrub()};k5.exports=By});var Nd=x((hMe,x5)=>{var Nf=at().Buffer,bde=ey();function Cde(e,t,r,n){if(Nf.isBuffer(e)||(e=Nf.from(e,"binary")),t&&(Nf.isBuffer(t)||(t=Nf.from(t,"binary")),t.length!==8))throw new RangeError("salt should be Buffer with 8 byte length");for(var i=r/8,s=Nf.alloc(i),o=Nf.alloc(n||0),a=Nf.alloc(0);i>0||n>0;){var A=new bde;A.update(a),A.update(e),t&&A.update(t),a=A.digest();var f=0;if(i>0){var l=s.length-i;f=Math.min(i,a.length),a.copy(s,l,0,f),i-=f}if(f<a.length&&n>0){var p=o.length-n,B=Math.min(n,a.length-f);a.copy(o,p,f,f+B),n-=B}}return a.fill(0),{key:s,iv:o}}x5.exports=Cde});var O5=x(RS=>{var U5=yy(),Qde=SS(),na=at().Buffer,wde=vS(),L5=ta(),Sde=Dd(),_de=Nd(),vde=ze();function Md(e,t,r){L5.call(this),this._cache=new Iy,this._cipher=new Sde.AES(t),this._prev=na.from(r),this._mode=e,this._autopadding=!0}vde(Md,L5);Md.prototype._update=function(e){this._cache.add(e);for(var t,r,n=[];t=this._cache.get();)r=this._mode.encrypt(this,t),n.push(r);return na.concat(n)};var Rde=na.alloc(16,16);Md.prototype._final=function(){var e=this._cache.flush();if(this._autopadding)return e=this._mode.encrypt(this,e),this._cipher.scrub(),e;if(!e.equals(Rde))throw this._cipher.scrub(),new Error("data not multiple of block length")};Md.prototype.setAutoPadding=function(e){return this._autopadding=!!e,this};function Iy(){this.cache=na.allocUnsafe(0)}Iy.prototype.add=function(e){this.cache=na.concat([this.cache,e])};Iy.prototype.get=function(){if(this.cache.length>15){var e=this.cache.slice(0,16);return this.cache=this.cache.slice(16),e}return null};Iy.prototype.flush=function(){for(var e=16-this.cache.length,t=na.allocUnsafe(e),r=-1;++r<e;)t.writeUInt8(e,r);return na.concat([this.cache,t])};function P5(e,t,r){var n=U5[e.toLowerCase()];if(!n)throw new TypeError("invalid suite type");if(typeof t=="string"&&(t=na.from(t)),t.length!==n.key/8)throw new TypeError("invalid key length "+t.length);if(typeof r=="string"&&(r=na.from(r)),n.mode!=="GCM"&&r.length!==n.iv)throw new TypeError("invalid iv length "+r.length);return n.type==="stream"?new wde(n.module,t,r):n.type==="auth"?new Qde(n.module,t,r):new Md(n.module,t,r)}function Dde(e,t){var r=U5[e.toLowerCase()];if(!r)throw new TypeError("invalid suite type");var n=_de(t,!1,r.key,r.iv);return P5(e,n.key,n.iv)}RS.createCipheriv=P5;RS.createCipher=Dde});var Y5=x(DS=>{var Tde=SS(),Oc=at().Buffer,H5=yy(),Nde=vS(),q5=ta(),Mde=Dd(),Fde=Nd(),kde=ze();function Fd(e,t,r){q5.call(this),this._cache=new by,this._last=void 0,this._cipher=new Mde.AES(t),this._prev=Oc.from(r),this._mode=e,this._autopadding=!0}kde(Fd,q5);Fd.prototype._update=function(e){this._cache.add(e);for(var t,r,n=[];t=this._cache.get(this._autopadding);)r=this._mode.decrypt(this,t),n.push(r);return Oc.concat(n)};Fd.prototype._final=function(){var e=this._cache.flush();if(this._autopadding)return xde(this._mode.decrypt(this,e));if(e)throw new Error("data not multiple of block length")};Fd.prototype.setAutoPadding=function(e){return this._autopadding=!!e,this};function by(){this.cache=Oc.allocUnsafe(0)}by.prototype.add=function(e){this.cache=Oc.concat([this.cache,e])};by.prototype.get=function(e){var t;if(e){if(this.cache.length>16)return t=this.cache.slice(0,16),this.cache=this.cache.slice(16),t}else if(this.cache.length>=16)return t=this.cache.slice(0,16),this.cache=this.cache.slice(16),t;return null};by.prototype.flush=function(){if(this.cache.length)return this.cache};function xde(e){var t=e[15];if(t<1||t>16)throw new Error("unable to decrypt data");for(var r=-1;++r<t;)if(e[r+(16-t)]!==t)throw new Error("unable to decrypt data");if(t!==16)return e.slice(0,16-t)}function G5(e,t,r){var n=H5[e.toLowerCase()];if(!n)throw new TypeError("invalid suite type");if(typeof r=="string"&&(r=Oc.from(r)),n.mode!=="GCM"&&r.length!==n.iv)throw new TypeError("invalid iv length "+r.length);if(typeof t=="string"&&(t=Oc.from(t)),t.length!==n.key/8)throw new TypeError("invalid key length "+t.length);return n.type==="stream"?new Nde(n.module,t,r,!0):n.type==="auth"?new Tde(n.module,t,r,!0):new Fd(n.module,t,r)}function Ude(e,t){var r=H5[e.toLowerCase()];if(!r)throw new TypeError("invalid suite type");var n=Fde(t,!1,r.key,r.iv);return G5(e,n.key,n.iv)}DS.createDecipher=Ude;DS.createDecipheriv=G5});var Cy=x(as=>{var W5=O5(),V5=Y5(),Lde=bS();function Pde(){return Object.keys(Lde)}as.createCipher=as.Cipher=W5.createCipher;as.createCipheriv=as.Cipheriv=W5.createCipheriv;as.createDecipher=as.Decipher=V5.createDecipher;as.createDecipheriv=as.Decipheriv=V5.createDecipheriv;as.listCiphers=as.getCiphers=Pde});var J5=x(ia=>{ia["des-ecb"]={key:8,iv:0};ia["des-cbc"]=ia.des={key:8,iv:8};ia["des-ede3-cbc"]=ia.des3={key:24,iv:8};ia["des-ede3"]={key:24,iv:0};ia["des-ede-cbc"]={key:16,iv:8};ia["des-ede"]={key:16,iv:0}});var Z5=x(As=>{var j5=A5(),TS=Cy(),fA=yy(),sa=J5(),z5=Nd();function Ode(e,t){e=e.toLowerCase();var r,n;if(fA[e])r=fA[e].key,n=fA[e].iv;else if(sa[e])r=sa[e].key*8,n=sa[e].iv;else throw new TypeError("invalid suite type");var i=z5(t,!1,r,n);return K5(e,i.key,i.iv)}function Hde(e,t){e=e.toLowerCase();var r,n;if(fA[e])r=fA[e].key,n=fA[e].iv;else if(sa[e])r=sa[e].key*8,n=sa[e].iv;else throw new TypeError("invalid suite type");var i=z5(t,!1,r,n);return X5(e,i.key,i.iv)}function K5(e,t,r){if(e=e.toLowerCase(),fA[e])return TS.createCipheriv(e,t,r);if(sa[e])return new j5({key:t,iv:r,mode:e});throw new TypeError("invalid suite type")}function X5(e,t,r){if(e=e.toLowerCase(),fA[e])return TS.createDecipheriv(e,t,r);if(sa[e])return new j5({key:t,iv:r,mode:e,decrypt:!0});throw new TypeError("invalid suite type")}function qde(){return Object.keys(sa).concat(TS.getCiphers())}As.createCipher=As.Cipher=Ode;As.createCipheriv=As.Cipheriv=K5;As.createDecipher=As.Decipher=Hde;As.createDecipheriv=As.Decipheriv=X5;As.listCiphers=As.getCiphers=qde});var kr=x(($5,NS)=>{(function(e,t){"use strict";function r(H,E){if(!H)throw new Error(E||"Assertion failed")}function n(H,E){H.super_=E;var v=function(){};v.prototype=E.prototype,H.prototype=new v,H.prototype.constructor=H}function i(H,E,v){if(i.isBN(H))return H;this.negative=0,this.words=null,this.length=0,this.red=null,H!==null&&((E==="le"||E==="be")&&(v=E,E=10),this._init(H||0,E||10,v||"be"))}typeof e=="object"?e.exports=i:t.BN=i,i.BN=i,i.wordSize=26;var s;try{typeof window<"u"&&typeof window.Buffer<"u"?s=window.Buffer:s=Gr().Buffer}catch{}i.isBN=function(E){return E instanceof i?!0:E!==null&&typeof E=="object"&&E.constructor.wordSize===i.wordSize&&Array.isArray(E.words)},i.max=function(E,v){return E.cmp(v)>0?E:v},i.min=function(E,v){return E.cmp(v)<0?E:v},i.prototype._init=function(E,v,b){if(typeof E=="number")return this._initNumber(E,v,b);if(typeof E=="object")return this._initArray(E,v,b);v==="hex"&&(v=16),r(v===(v|0)&&v>=2&&v<=36),E=E.toString().replace(/\s+/g,"");var c=0;E[0]==="-"&&(c++,this.negative=1),c<E.length&&(v===16?this._parseHex(E,c,b):(this._parseBase(E,v,c),b==="le"&&this._initArray(this.toArray(),v,b)))},i.prototype._initNumber=function(E,v,b){E<0&&(this.negative=1,E=-E),E<67108864?(this.words=[E&67108863],this.length=1):E<4503599627370496?(this.words=[E&67108863,E/67108864&67108863],this.length=2):(r(E<9007199254740992),this.words=[E&67108863,E/67108864&67108863,1],this.length=3),b==="le"&&this._initArray(this.toArray(),v,b)},i.prototype._initArray=function(E,v,b){if(r(typeof E.length=="number"),E.length<=0)return this.words=[0],this.length=1,this;this.length=Math.ceil(E.length/3),this.words=new Array(this.length);for(var c=0;c<this.length;c++)this.words[c]=0;var g,w,R=0;if(b==="be")for(c=E.length-1,g=0;c>=0;c-=3)w=E[c]|E[c-1]<<8|E[c-2]<<16,this.words[g]|=w<<R&67108863,this.words[g+1]=w>>>26-R&67108863,R+=24,R>=26&&(R-=26,g++);else if(b==="le")for(c=0,g=0;c<E.length;c+=3)w=E[c]|E[c+1]<<8|E[c+2]<<16,this.words[g]|=w<<R&67108863,this.words[g+1]=w>>>26-R&67108863,R+=24,R>=26&&(R-=26,g++);return this.strip()};function o(H,E){var v=H.charCodeAt(E);return v>=65&&v<=70?v-55:v>=97&&v<=102?v-87:v-48&15}function a(H,E,v){var b=o(H,v);return v-1>=E&&(b|=o(H,v-1)<<4),b}i.prototype._parseHex=function(E,v,b){this.length=Math.ceil((E.length-v)/6),this.words=new Array(this.length);for(var c=0;c<this.length;c++)this.words[c]=0;var g=0,w=0,R;if(b==="be")for(c=E.length-1;c>=v;c-=2)R=a(E,v,c)<<g,this.words[w]|=R&67108863,g>=18?(g-=18,w+=1,this.words[w]|=R>>>26):g+=8;else{var C=E.length-v;for(c=C%2===0?v+1:v;c<E.length;c+=2)R=a(E,v,c)<<g,this.words[w]|=R&67108863,g>=18?(g-=18,w+=1,this.words[w]|=R>>>26):g+=8}this.strip()};function A(H,E,v,b){for(var c=0,g=Math.min(H.length,v),w=E;w<g;w++){var R=H.charCodeAt(w)-48;c*=b,R>=49?c+=R-49+10:R>=17?c+=R-17+10:c+=R}return c}i.prototype._parseBase=function(E,v,b){this.words=[0],this.length=1;for(var c=0,g=1;g<=67108863;g*=v)c++;c--,g=g/v|0;for(var w=E.length-b,R=w%c,C=Math.min(w,w-R)+b,h=0,D=b;D<C;D+=c)h=A(E,D,D+c,v),this.imuln(g),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h);if(R!==0){var M=1;for(h=A(E,D,E.length,v),D=0;D<R;D++)M*=v;this.imuln(M),this.words[0]+h<67108864?this.words[0]+=h:this._iaddn(h)}this.strip()},i.prototype.copy=function(E){E.words=new Array(this.length);for(var v=0;v<this.length;v++)E.words[v]=this.words[v];E.length=this.length,E.negative=this.negative,E.red=this.red},i.prototype.clone=function(){var E=new i(null);return this.copy(E),E},i.prototype._expand=function(E){for(;this.length<E;)this.words[this.length++]=0;return this},i.prototype.strip=function(){for(;this.length>1&&this.words[this.length-1]===0;)this.length--;return this._normSign()},i.prototype._normSign=function(){return this.length===1&&this.words[0]===0&&(this.negative=0),this},i.prototype.inspect=function(){return(this.red?"<BN-R: ":"<BN: ")+this.toString(16)+">"};var f=["","0","00","000","0000","00000","000000","0000000","00000000","000000000","0000000000","00000000000","000000000000","0000000000000","00000000000000","000000000000000","0000000000000000","00000000000000000","000000000000000000","0000000000000000000","00000000000000000000","000000000000000000000","0000000000000000000000","00000000000000000000000","000000000000000000000000","0000000000000000000000000"],l=[0,0,25,16,12,11,10,9,8,8,7,7,7,7,6,6,6,6,6,6,6,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5],p=[0,0,33554432,43046721,16777216,48828125,60466176,40353607,16777216,43046721,1e7,19487171,35831808,62748517,7529536,11390625,16777216,24137569,34012224,47045881,64e6,4084101,5153632,6436343,7962624,9765625,11881376,14348907,17210368,20511149,243e5,28629151,33554432,39135393,45435424,52521875,60466176];i.prototype.toString=function(E,v){E=E||10,v=v|0||1;var b;if(E===16||E==="hex"){b="";for(var c=0,g=0,w=0;w<this.length;w++){var R=this.words[w],C=((R<<c|g)&16777215).toString(16);g=R>>>24-c&16777215,c+=2,c>=26&&(c-=26,w--),g!==0||w!==this.length-1?b=f[6-C.length]+C+b:b=C+b}for(g!==0&&(b=g.toString(16)+b);b.length%v!==0;)b="0"+b;return this.negative!==0&&(b="-"+b),b}if(E===(E|0)&&E>=2&&E<=36){var h=l[E],D=p[E];b="";var M=this.clone();for(M.negative=0;!M.isZero();){var I=M.modn(D).toString(E);M=M.idivn(D),M.isZero()?b=I+b:b=f[h-I.length]+I+b}for(this.isZero()&&(b="0"+b);b.length%v!==0;)b="0"+b;return this.negative!==0&&(b="-"+b),b}r(!1,"Base should be between 2 and 36")},i.prototype.toNumber=function(){var E=this.words[0];return this.length===2?E+=this.words[1]*67108864:this.length===3&&this.words[2]===1?E+=4503599627370496+this.words[1]*67108864:this.length>2&&r(!1,"Number can only safely store up to 53 bits"),this.negative!==0?-E:E},i.prototype.toJSON=function(){return this.toString(16)},i.prototype.toBuffer=function(E,v){return r(typeof s<"u"),this.toArrayLike(s,E,v)},i.prototype.toArray=function(E,v){return this.toArrayLike(Array,E,v)},i.prototype.toArrayLike=function(E,v,b){var c=this.byteLength(),g=b||Math.max(1,c);r(c<=g,"byte array longer than desired length"),r(g>0,"Requested array length <= 0"),this.strip();var w=v==="le",R=new E(g),C,h,D=this.clone();if(w){for(h=0;!D.isZero();h++)C=D.andln(255),D.iushrn(8),R[h]=C;for(;h<g;h++)R[h]=0}else{for(h=0;h<g-c;h++)R[h]=0;for(h=0;!D.isZero();h++)C=D.andln(255),D.iushrn(8),R[g-h-1]=C}return R},Math.clz32?i.prototype._countBits=function(E){return 32-Math.clz32(E)}:i.prototype._countBits=function(E){var v=E,b=0;return v>=4096&&(b+=13,v>>>=13),v>=64&&(b+=7,v>>>=7),v>=8&&(b+=4,v>>>=4),v>=2&&(b+=2,v>>>=2),b+v},i.prototype._zeroBits=function(E){if(E===0)return 26;var v=E,b=0;return(v&8191)===0&&(b+=13,v>>>=13),(v&127)===0&&(b+=7,v>>>=7),(v&15)===0&&(b+=4,v>>>=4),(v&3)===0&&(b+=2,v>>>=2),(v&1)===0&&b++,b},i.prototype.bitLength=function(){var E=this.words[this.length-1],v=this._countBits(E);return(this.length-1)*26+v};function B(H){for(var E=new Array(H.bitLength()),v=0;v<E.length;v++){var b=v/26|0,c=v%26;E[v]=(H.words[b]&1<<c)>>>c}return E}i.prototype.zeroBits=function(){if(this.isZero())return 0;for(var E=0,v=0;v<this.length;v++){var b=this._zeroBits(this.words[v]);if(E+=b,b!==26)break}return E},i.prototype.byteLength=function(){return Math.ceil(this.bitLength()/8)},i.prototype.toTwos=function(E){return this.negative!==0?this.abs().inotn(E).iaddn(1):this.clone()},i.prototype.fromTwos=function(E){return this.testn(E-1)?this.notn(E).iaddn(1).ineg():this.clone()},i.prototype.isNeg=function(){return this.negative!==0},i.prototype.neg=function(){return this.clone().ineg()},i.prototype.ineg=function(){return this.isZero()||(this.negative^=1),this},i.prototype.iuor=function(E){for(;this.length<E.length;)this.words[this.length++]=0;for(var v=0;v<E.length;v++)this.words[v]=this.words[v]|E.words[v];return this.strip()},i.prototype.ior=function(E){return r((this.negative|E.negative)===0),this.iuor(E)},i.prototype.or=function(E){return this.length>E.length?this.clone().ior(E):E.clone().ior(this)},i.prototype.uor=function(E){return this.length>E.length?this.clone().iuor(E):E.clone().iuor(this)},i.prototype.iuand=function(E){var v;this.length>E.length?v=E:v=this;for(var b=0;b<v.length;b++)this.words[b]=this.words[b]&E.words[b];return this.length=v.length,this.strip()},i.prototype.iand=function(E){return r((this.negative|E.negative)===0),this.iuand(E)},i.prototype.and=function(E){return this.length>E.length?this.clone().iand(E):E.clone().iand(this)},i.prototype.uand=function(E){return this.length>E.length?this.clone().iuand(E):E.clone().iuand(this)},i.prototype.iuxor=function(E){var v,b;this.length>E.length?(v=this,b=E):(v=E,b=this);for(var c=0;c<b.length;c++)this.words[c]=v.words[c]^b.words[c];if(this!==v)for(;c<v.length;c++)this.words[c]=v.words[c];return this.length=v.length,this.strip()},i.prototype.ixor=function(E){return r((this.negative|E.negative)===0),this.iuxor(E)},i.prototype.xor=function(E){return this.length>E.length?this.clone().ixor(E):E.clone().ixor(this)},i.prototype.uxor=function(E){return this.length>E.length?this.clone().iuxor(E):E.clone().iuxor(this)},i.prototype.inotn=function(E){r(typeof E=="number"&&E>=0);var v=Math.ceil(E/26)|0,b=E%26;this._expand(v),b>0&&v--;for(var c=0;c<v;c++)this.words[c]=~this.words[c]&67108863;return b>0&&(this.words[c]=~this.words[c]&67108863>>26-b),this.strip()},i.prototype.notn=function(E){return this.clone().inotn(E)},i.prototype.setn=function(E,v){r(typeof E=="number"&&E>=0);var b=E/26|0,c=E%26;return this._expand(b+1),v?this.words[b]=this.words[b]|1<<c:this.words[b]=this.words[b]&~(1<<c),this.strip()},i.prototype.iadd=function(E){var v;if(this.negative!==0&&E.negative===0)return this.negative=0,v=this.isub(E),this.negative^=1,this._normSign();if(this.negative===0&&E.negative!==0)return E.negative=0,v=this.isub(E),E.negative=1,v._normSign();var b,c;this.length>E.length?(b=this,c=E):(b=E,c=this);for(var g=0,w=0;w<c.length;w++)v=(b.words[w]|0)+(c.words[w]|0)+g,this.words[w]=v&67108863,g=v>>>26;for(;g!==0&&w<b.length;w++)v=(b.words[w]|0)+g,this.words[w]=v&67108863,g=v>>>26;if(this.length=b.length,g!==0)this.words[this.length]=g,this.length++;else if(b!==this)for(;w<b.length;w++)this.words[w]=b.words[w];return this},i.prototype.add=function(E){var v;return E.negative!==0&&this.negative===0?(E.negative=0,v=this.sub(E),E.negative^=1,v):E.negative===0&&this.negative!==0?(this.negative=0,v=E.sub(this),this.negative=1,v):this.length>E.length?this.clone().iadd(E):E.clone().iadd(this)},i.prototype.isub=function(E){if(E.negative!==0){E.negative=0;var v=this.iadd(E);return E.negative=1,v._normSign()}else if(this.negative!==0)return this.negative=0,this.iadd(E),this.negative=1,this._normSign();var b=this.cmp(E);if(b===0)return this.negative=0,this.length=1,this.words[0]=0,this;var c,g;b>0?(c=this,g=E):(c=E,g=this);for(var w=0,R=0;R<g.length;R++)v=(c.words[R]|0)-(g.words[R]|0)+w,w=v>>26,this.words[R]=v&67108863;for(;w!==0&&R<c.length;R++)v=(c.words[R]|0)+w,w=v>>26,this.words[R]=v&67108863;if(w===0&&R<c.length&&c!==this)for(;R<c.length;R++)this.words[R]=c.words[R];return this.length=Math.max(this.length,R),c!==this&&(this.negative=1),this.strip()},i.prototype.sub=function(E){return this.clone().isub(E)};function S(H,E,v){v.negative=E.negative^H.negative;var b=H.length+E.length|0;v.length=b,b=b-1|0;var c=H.words[0]|0,g=E.words[0]|0,w=c*g,R=w&67108863,C=w/67108864|0;v.words[0]=R;for(var h=1;h<b;h++){for(var D=C>>>26,M=C&67108863,I=Math.min(h,E.length-1),k=Math.max(0,h-H.length+1);k<=I;k++){var ne=h-k|0;c=H.words[ne]|0,g=E.words[k]|0,w=c*g+M,D+=w/67108864|0,M=w&67108863}v.words[h]=M|0,C=D|0}return C!==0?v.words[h]=C|0:v.length--,v.strip()}var _=function(E,v,b){var c=E.words,g=v.words,w=b.words,R=0,C,h,D,M=c[0]|0,I=M&8191,k=M>>>13,ne=c[1]|0,Ae=ne&8191,ue=ne>>>13,pe=c[2]|0,he=pe&8191,de=pe>>>13,wt=c[3]|0,Ie=wt&8191,be=wt>>>13,yr=c[4]|0,we=yr&8191,ve=yr>>>13,Ms=c[5]|0,Ye=Ms&8191,xe=Ms>>>13,Fs=c[6]|0,Te=Fs&8191,De=Fs>>>13,en=c[7]|0,Re=en&8191,He=en>>>13,ai=c[8]|0,Ne=ai&8191,Je=ai>>>13,F=c[9]|0,m=F&8191,Q=F>>>13,L=g[0]|0,W=L&8191,z=L>>>13,ae=g[1]|0,le=ae&8191,ye=ae>>>13,Ct=g[2]|0,Ee=Ct&8191,ge=Ct>>>13,Ua=g[3]|0,je=Ua&8191,tt=Ua>>>13,Fo=g[4]|0,$e=Fo&8191,rt=Fo>>>13,GA=g[5]|0,nt=GA&8191,it=GA>>>13,La=g[6]|0,Ke=La&8191,Xe=La>>>13,YA=g[7]|0,Ue=YA&8191,et=YA>>>13,WA=g[8]|0,st=WA&8191,Le=WA>>>13,hn=g[9]|0,Pe=hn&8191,Ze=hn>>>13;b.negative=E.negative^v.negative,b.length=19,C=Math.imul(I,W),h=Math.imul(I,z),h=h+Math.imul(k,W)|0,D=Math.imul(k,z);var wn=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(wn>>>26)|0,wn&=67108863,C=Math.imul(Ae,W),h=Math.imul(Ae,z),h=h+Math.imul(ue,W)|0,D=Math.imul(ue,z),C=C+Math.imul(I,le)|0,h=h+Math.imul(I,ye)|0,h=h+Math.imul(k,le)|0,D=D+Math.imul(k,ye)|0;var Pt=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Pt>>>26)|0,Pt&=67108863,C=Math.imul(he,W),h=Math.imul(he,z),h=h+Math.imul(de,W)|0,D=Math.imul(de,z),C=C+Math.imul(Ae,le)|0,h=h+Math.imul(Ae,ye)|0,h=h+Math.imul(ue,le)|0,D=D+Math.imul(ue,ye)|0,C=C+Math.imul(I,Ee)|0,h=h+Math.imul(I,ge)|0,h=h+Math.imul(k,Ee)|0,D=D+Math.imul(k,ge)|0;var kt=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(kt>>>26)|0,kt&=67108863,C=Math.imul(Ie,W),h=Math.imul(Ie,z),h=h+Math.imul(be,W)|0,D=Math.imul(be,z),C=C+Math.imul(he,le)|0,h=h+Math.imul(he,ye)|0,h=h+Math.imul(de,le)|0,D=D+Math.imul(de,ye)|0,C=C+Math.imul(Ae,Ee)|0,h=h+Math.imul(Ae,ge)|0,h=h+Math.imul(ue,Ee)|0,D=D+Math.imul(ue,ge)|0,C=C+Math.imul(I,je)|0,h=h+Math.imul(I,tt)|0,h=h+Math.imul(k,je)|0,D=D+Math.imul(k,tt)|0;var ks=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(ks>>>26)|0,ks&=67108863,C=Math.imul(we,W),h=Math.imul(we,z),h=h+Math.imul(ve,W)|0,D=Math.imul(ve,z),C=C+Math.imul(Ie,le)|0,h=h+Math.imul(Ie,ye)|0,h=h+Math.imul(be,le)|0,D=D+Math.imul(be,ye)|0,C=C+Math.imul(he,Ee)|0,h=h+Math.imul(he,ge)|0,h=h+Math.imul(de,Ee)|0,D=D+Math.imul(de,ge)|0,C=C+Math.imul(Ae,je)|0,h=h+Math.imul(Ae,tt)|0,h=h+Math.imul(ue,je)|0,D=D+Math.imul(ue,tt)|0,C=C+Math.imul(I,$e)|0,h=h+Math.imul(I,rt)|0,h=h+Math.imul(k,$e)|0,D=D+Math.imul(k,rt)|0;var Ai=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Ai>>>26)|0,Ai&=67108863,C=Math.imul(Ye,W),h=Math.imul(Ye,z),h=h+Math.imul(xe,W)|0,D=Math.imul(xe,z),C=C+Math.imul(we,le)|0,h=h+Math.imul(we,ye)|0,h=h+Math.imul(ve,le)|0,D=D+Math.imul(ve,ye)|0,C=C+Math.imul(Ie,Ee)|0,h=h+Math.imul(Ie,ge)|0,h=h+Math.imul(be,Ee)|0,D=D+Math.imul(be,ge)|0,C=C+Math.imul(he,je)|0,h=h+Math.imul(he,tt)|0,h=h+Math.imul(de,je)|0,D=D+Math.imul(de,tt)|0,C=C+Math.imul(Ae,$e)|0,h=h+Math.imul(Ae,rt)|0,h=h+Math.imul(ue,$e)|0,D=D+Math.imul(ue,rt)|0,C=C+Math.imul(I,nt)|0,h=h+Math.imul(I,it)|0,h=h+Math.imul(k,nt)|0,D=D+Math.imul(k,it)|0;var xs=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(xs>>>26)|0,xs&=67108863,C=Math.imul(Te,W),h=Math.imul(Te,z),h=h+Math.imul(De,W)|0,D=Math.imul(De,z),C=C+Math.imul(Ye,le)|0,h=h+Math.imul(Ye,ye)|0,h=h+Math.imul(xe,le)|0,D=D+Math.imul(xe,ye)|0,C=C+Math.imul(we,Ee)|0,h=h+Math.imul(we,ge)|0,h=h+Math.imul(ve,Ee)|0,D=D+Math.imul(ve,ge)|0,C=C+Math.imul(Ie,je)|0,h=h+Math.imul(Ie,tt)|0,h=h+Math.imul(be,je)|0,D=D+Math.imul(be,tt)|0,C=C+Math.imul(he,$e)|0,h=h+Math.imul(he,rt)|0,h=h+Math.imul(de,$e)|0,D=D+Math.imul(de,rt)|0,C=C+Math.imul(Ae,nt)|0,h=h+Math.imul(Ae,it)|0,h=h+Math.imul(ue,nt)|0,D=D+Math.imul(ue,it)|0,C=C+Math.imul(I,Ke)|0,h=h+Math.imul(I,Xe)|0,h=h+Math.imul(k,Ke)|0,D=D+Math.imul(k,Xe)|0;var Us=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Us>>>26)|0,Us&=67108863,C=Math.imul(Re,W),h=Math.imul(Re,z),h=h+Math.imul(He,W)|0,D=Math.imul(He,z),C=C+Math.imul(Te,le)|0,h=h+Math.imul(Te,ye)|0,h=h+Math.imul(De,le)|0,D=D+Math.imul(De,ye)|0,C=C+Math.imul(Ye,Ee)|0,h=h+Math.imul(Ye,ge)|0,h=h+Math.imul(xe,Ee)|0,D=D+Math.imul(xe,ge)|0,C=C+Math.imul(we,je)|0,h=h+Math.imul(we,tt)|0,h=h+Math.imul(ve,je)|0,D=D+Math.imul(ve,tt)|0,C=C+Math.imul(Ie,$e)|0,h=h+Math.imul(Ie,rt)|0,h=h+Math.imul(be,$e)|0,D=D+Math.imul(be,rt)|0,C=C+Math.imul(he,nt)|0,h=h+Math.imul(he,it)|0,h=h+Math.imul(de,nt)|0,D=D+Math.imul(de,it)|0,C=C+Math.imul(Ae,Ke)|0,h=h+Math.imul(Ae,Xe)|0,h=h+Math.imul(ue,Ke)|0,D=D+Math.imul(ue,Xe)|0,C=C+Math.imul(I,Ue)|0,h=h+Math.imul(I,et)|0,h=h+Math.imul(k,Ue)|0,D=D+Math.imul(k,et)|0;var Ls=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Ls>>>26)|0,Ls&=67108863,C=Math.imul(Ne,W),h=Math.imul(Ne,z),h=h+Math.imul(Je,W)|0,D=Math.imul(Je,z),C=C+Math.imul(Re,le)|0,h=h+Math.imul(Re,ye)|0,h=h+Math.imul(He,le)|0,D=D+Math.imul(He,ye)|0,C=C+Math.imul(Te,Ee)|0,h=h+Math.imul(Te,ge)|0,h=h+Math.imul(De,Ee)|0,D=D+Math.imul(De,ge)|0,C=C+Math.imul(Ye,je)|0,h=h+Math.imul(Ye,tt)|0,h=h+Math.imul(xe,je)|0,D=D+Math.imul(xe,tt)|0,C=C+Math.imul(we,$e)|0,h=h+Math.imul(we,rt)|0,h=h+Math.imul(ve,$e)|0,D=D+Math.imul(ve,rt)|0,C=C+Math.imul(Ie,nt)|0,h=h+Math.imul(Ie,it)|0,h=h+Math.imul(be,nt)|0,D=D+Math.imul(be,it)|0,C=C+Math.imul(he,Ke)|0,h=h+Math.imul(he,Xe)|0,h=h+Math.imul(de,Ke)|0,D=D+Math.imul(de,Xe)|0,C=C+Math.imul(Ae,Ue)|0,h=h+Math.imul(Ae,et)|0,h=h+Math.imul(ue,Ue)|0,D=D+Math.imul(ue,et)|0,C=C+Math.imul(I,st)|0,h=h+Math.imul(I,Le)|0,h=h+Math.imul(k,st)|0,D=D+Math.imul(k,Le)|0;var Ps=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Ps>>>26)|0,Ps&=67108863,C=Math.imul(m,W),h=Math.imul(m,z),h=h+Math.imul(Q,W)|0,D=Math.imul(Q,z),C=C+Math.imul(Ne,le)|0,h=h+Math.imul(Ne,ye)|0,h=h+Math.imul(Je,le)|0,D=D+Math.imul(Je,ye)|0,C=C+Math.imul(Re,Ee)|0,h=h+Math.imul(Re,ge)|0,h=h+Math.imul(He,Ee)|0,D=D+Math.imul(He,ge)|0,C=C+Math.imul(Te,je)|0,h=h+Math.imul(Te,tt)|0,h=h+Math.imul(De,je)|0,D=D+Math.imul(De,tt)|0,C=C+Math.imul(Ye,$e)|0,h=h+Math.imul(Ye,rt)|0,h=h+Math.imul(xe,$e)|0,D=D+Math.imul(xe,rt)|0,C=C+Math.imul(we,nt)|0,h=h+Math.imul(we,it)|0,h=h+Math.imul(ve,nt)|0,D=D+Math.imul(ve,it)|0,C=C+Math.imul(Ie,Ke)|0,h=h+Math.imul(Ie,Xe)|0,h=h+Math.imul(be,Ke)|0,D=D+Math.imul(be,Xe)|0,C=C+Math.imul(he,Ue)|0,h=h+Math.imul(he,et)|0,h=h+Math.imul(de,Ue)|0,D=D+Math.imul(de,et)|0,C=C+Math.imul(Ae,st)|0,h=h+Math.imul(Ae,Le)|0,h=h+Math.imul(ue,st)|0,D=D+Math.imul(ue,Le)|0,C=C+Math.imul(I,Pe)|0,h=h+Math.imul(I,Ze)|0,h=h+Math.imul(k,Pe)|0,D=D+Math.imul(k,Ze)|0;var Os=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Os>>>26)|0,Os&=67108863,C=Math.imul(m,le),h=Math.imul(m,ye),h=h+Math.imul(Q,le)|0,D=Math.imul(Q,ye),C=C+Math.imul(Ne,Ee)|0,h=h+Math.imul(Ne,ge)|0,h=h+Math.imul(Je,Ee)|0,D=D+Math.imul(Je,ge)|0,C=C+Math.imul(Re,je)|0,h=h+Math.imul(Re,tt)|0,h=h+Math.imul(He,je)|0,D=D+Math.imul(He,tt)|0,C=C+Math.imul(Te,$e)|0,h=h+Math.imul(Te,rt)|0,h=h+Math.imul(De,$e)|0,D=D+Math.imul(De,rt)|0,C=C+Math.imul(Ye,nt)|0,h=h+Math.imul(Ye,it)|0,h=h+Math.imul(xe,nt)|0,D=D+Math.imul(xe,it)|0,C=C+Math.imul(we,Ke)|0,h=h+Math.imul(we,Xe)|0,h=h+Math.imul(ve,Ke)|0,D=D+Math.imul(ve,Xe)|0,C=C+Math.imul(Ie,Ue)|0,h=h+Math.imul(Ie,et)|0,h=h+Math.imul(be,Ue)|0,D=D+Math.imul(be,et)|0,C=C+Math.imul(he,st)|0,h=h+Math.imul(he,Le)|0,h=h+Math.imul(de,st)|0,D=D+Math.imul(de,Le)|0,C=C+Math.imul(Ae,Pe)|0,h=h+Math.imul(Ae,Ze)|0,h=h+Math.imul(ue,Pe)|0,D=D+Math.imul(ue,Ze)|0;var Ji=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Ji>>>26)|0,Ji&=67108863,C=Math.imul(m,Ee),h=Math.imul(m,ge),h=h+Math.imul(Q,Ee)|0,D=Math.imul(Q,ge),C=C+Math.imul(Ne,je)|0,h=h+Math.imul(Ne,tt)|0,h=h+Math.imul(Je,je)|0,D=D+Math.imul(Je,tt)|0,C=C+Math.imul(Re,$e)|0,h=h+Math.imul(Re,rt)|0,h=h+Math.imul(He,$e)|0,D=D+Math.imul(He,rt)|0,C=C+Math.imul(Te,nt)|0,h=h+Math.imul(Te,it)|0,h=h+Math.imul(De,nt)|0,D=D+Math.imul(De,it)|0,C=C+Math.imul(Ye,Ke)|0,h=h+Math.imul(Ye,Xe)|0,h=h+Math.imul(xe,Ke)|0,D=D+Math.imul(xe,Xe)|0,C=C+Math.imul(we,Ue)|0,h=h+Math.imul(we,et)|0,h=h+Math.imul(ve,Ue)|0,D=D+Math.imul(ve,et)|0,C=C+Math.imul(Ie,st)|0,h=h+Math.imul(Ie,Le)|0,h=h+Math.imul(be,st)|0,D=D+Math.imul(be,Le)|0,C=C+Math.imul(he,Pe)|0,h=h+Math.imul(he,Ze)|0,h=h+Math.imul(de,Pe)|0,D=D+Math.imul(de,Ze)|0;var ji=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(ji>>>26)|0,ji&=67108863,C=Math.imul(m,je),h=Math.imul(m,tt),h=h+Math.imul(Q,je)|0,D=Math.imul(Q,tt),C=C+Math.imul(Ne,$e)|0,h=h+Math.imul(Ne,rt)|0,h=h+Math.imul(Je,$e)|0,D=D+Math.imul(Je,rt)|0,C=C+Math.imul(Re,nt)|0,h=h+Math.imul(Re,it)|0,h=h+Math.imul(He,nt)|0,D=D+Math.imul(He,it)|0,C=C+Math.imul(Te,Ke)|0,h=h+Math.imul(Te,Xe)|0,h=h+Math.imul(De,Ke)|0,D=D+Math.imul(De,Xe)|0,C=C+Math.imul(Ye,Ue)|0,h=h+Math.imul(Ye,et)|0,h=h+Math.imul(xe,Ue)|0,D=D+Math.imul(xe,et)|0,C=C+Math.imul(we,st)|0,h=h+Math.imul(we,Le)|0,h=h+Math.imul(ve,st)|0,D=D+Math.imul(ve,Le)|0,C=C+Math.imul(Ie,Pe)|0,h=h+Math.imul(Ie,Ze)|0,h=h+Math.imul(be,Pe)|0,D=D+Math.imul(be,Ze)|0;var ko=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(ko>>>26)|0,ko&=67108863,C=Math.imul(m,$e),h=Math.imul(m,rt),h=h+Math.imul(Q,$e)|0,D=Math.imul(Q,rt),C=C+Math.imul(Ne,nt)|0,h=h+Math.imul(Ne,it)|0,h=h+Math.imul(Je,nt)|0,D=D+Math.imul(Je,it)|0,C=C+Math.imul(Re,Ke)|0,h=h+Math.imul(Re,Xe)|0,h=h+Math.imul(He,Ke)|0,D=D+Math.imul(He,Xe)|0,C=C+Math.imul(Te,Ue)|0,h=h+Math.imul(Te,et)|0,h=h+Math.imul(De,Ue)|0,D=D+Math.imul(De,et)|0,C=C+Math.imul(Ye,st)|0,h=h+Math.imul(Ye,Le)|0,h=h+Math.imul(xe,st)|0,D=D+Math.imul(xe,Le)|0,C=C+Math.imul(we,Pe)|0,h=h+Math.imul(we,Ze)|0,h=h+Math.imul(ve,Pe)|0,D=D+Math.imul(ve,Ze)|0;var xo=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(xo>>>26)|0,xo&=67108863,C=Math.imul(m,nt),h=Math.imul(m,it),h=h+Math.imul(Q,nt)|0,D=Math.imul(Q,it),C=C+Math.imul(Ne,Ke)|0,h=h+Math.imul(Ne,Xe)|0,h=h+Math.imul(Je,Ke)|0,D=D+Math.imul(Je,Xe)|0,C=C+Math.imul(Re,Ue)|0,h=h+Math.imul(Re,et)|0,h=h+Math.imul(He,Ue)|0,D=D+Math.imul(He,et)|0,C=C+Math.imul(Te,st)|0,h=h+Math.imul(Te,Le)|0,h=h+Math.imul(De,st)|0,D=D+Math.imul(De,Le)|0,C=C+Math.imul(Ye,Pe)|0,h=h+Math.imul(Ye,Ze)|0,h=h+Math.imul(xe,Pe)|0,D=D+Math.imul(xe,Ze)|0;var Uo=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Uo>>>26)|0,Uo&=67108863,C=Math.imul(m,Ke),h=Math.imul(m,Xe),h=h+Math.imul(Q,Ke)|0,D=Math.imul(Q,Xe),C=C+Math.imul(Ne,Ue)|0,h=h+Math.imul(Ne,et)|0,h=h+Math.imul(Je,Ue)|0,D=D+Math.imul(Je,et)|0,C=C+Math.imul(Re,st)|0,h=h+Math.imul(Re,Le)|0,h=h+Math.imul(He,st)|0,D=D+Math.imul(He,Le)|0,C=C+Math.imul(Te,Pe)|0,h=h+Math.imul(Te,Ze)|0,h=h+Math.imul(De,Pe)|0,D=D+Math.imul(De,Ze)|0;var Lo=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Lo>>>26)|0,Lo&=67108863,C=Math.imul(m,Ue),h=Math.imul(m,et),h=h+Math.imul(Q,Ue)|0,D=Math.imul(Q,et),C=C+Math.imul(Ne,st)|0,h=h+Math.imul(Ne,Le)|0,h=h+Math.imul(Je,st)|0,D=D+Math.imul(Je,Le)|0,C=C+Math.imul(Re,Pe)|0,h=h+Math.imul(Re,Ze)|0,h=h+Math.imul(He,Pe)|0,D=D+Math.imul(He,Ze)|0;var Hs=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Hs>>>26)|0,Hs&=67108863,C=Math.imul(m,st),h=Math.imul(m,Le),h=h+Math.imul(Q,st)|0,D=Math.imul(Q,Le),C=C+Math.imul(Ne,Pe)|0,h=h+Math.imul(Ne,Ze)|0,h=h+Math.imul(Je,Pe)|0,D=D+Math.imul(Je,Ze)|0;var Sn=(R+C|0)+((h&8191)<<13)|0;R=(D+(h>>>13)|0)+(Sn>>>26)|0,Sn&=67108863,C=Math.imul(m,Pe),h=Math.imul(m,Ze),h=h+Math.imul(Q,Pe)|0,D=Math.imul(Q,Ze);var Po=(R+C|0)+((h&8191)<<13)|0;return R=(D+(h>>>13)|0)+(Po>>>26)|0,Po&=67108863,w[0]=wn,w[1]=Pt,w[2]=kt,w[3]=ks,w[4]=Ai,w[5]=xs,w[6]=Us,w[7]=Ls,w[8]=Ps,w[9]=Os,w[10]=Ji,w[11]=ji,w[12]=ko,w[13]=xo,w[14]=Uo,w[15]=Lo,w[16]=Hs,w[17]=Sn,w[18]=Po,R!==0&&(w[19]=R,b.length++),b};Math.imul||(_=S);function N(H,E,v){v.negative=E.negative^H.negative,v.length=H.length+E.length;for(var b=0,c=0,g=0;g<v.length-1;g++){var w=c;c=0;for(var R=b&67108863,C=Math.min(g,E.length-1),h=Math.max(0,g-H.length+1);h<=C;h++){var D=g-h,M=H.words[D]|0,I=E.words[h]|0,k=M*I,ne=k&67108863;w=w+(k/67108864|0)|0,ne=ne+R|0,R=ne&67108863,w=w+(ne>>>26)|0,c+=w>>>26,w&=67108863}v.words[g]=R,b=w,w=c}return b!==0?v.words[g]=b:v.length--,v.strip()}function P(H,E,v){var b=new U;return b.mulp(H,E,v)}i.prototype.mulTo=function(E,v){var b,c=this.length+E.length;return this.length===10&&E.length===10?b=_(this,E,v):c<63?b=S(this,E,v):c<1024?b=N(this,E,v):b=P(this,E,v),b};function U(H,E){this.x=H,this.y=E}U.prototype.makeRBT=function(E){for(var v=new Array(E),b=i.prototype._countBits(E)-1,c=0;c<E;c++)v[c]=this.revBin(c,b,E);return v},U.prototype.revBin=function(E,v,b){if(E===0||E===b-1)return E;for(var c=0,g=0;g<v;g++)c|=(E&1)<<v-g-1,E>>=1;return c},U.prototype.permute=function(E,v,b,c,g,w){for(var R=0;R<w;R++)c[R]=v[E[R]],g[R]=b[E[R]]},U.prototype.transform=function(E,v,b,c,g,w){this.permute(w,E,v,b,c,g);for(var R=1;R<g;R<<=1)for(var C=R<<1,h=Math.cos(2*Math.PI/C),D=Math.sin(2*Math.PI/C),M=0;M<g;M+=C)for(var I=h,k=D,ne=0;ne<R;ne++){var Ae=b[M+ne],ue=c[M+ne],pe=b[M+ne+R],he=c[M+ne+R],de=I*pe-k*he;he=I*he+k*pe,pe=de,b[M+ne]=Ae+pe,c[M+ne]=ue+he,b[M+ne+R]=Ae-pe,c[M+ne+R]=ue-he,ne!==C&&(de=h*I-D*k,k=h*k+D*I,I=de)}},U.prototype.guessLen13b=function(E,v){var b=Math.max(v,E)|1,c=b&1,g=0;for(b=b/2|0;b;b=b>>>1)g++;return 1<<g+1+c},U.prototype.conjugate=function(E,v,b){if(!(b<=1))for(var c=0;c<b/2;c++){var g=E[c];E[c]=E[b-c-1],E[b-c-1]=g,g=v[c],v[c]=-v[b-c-1],v[b-c-1]=-g}},U.prototype.normalize13b=function(E,v){for(var b=0,c=0;c<v/2;c++){var g=Math.round(E[2*c+1]/v)*8192+Math.round(E[2*c]/v)+b;E[c]=g&67108863,g<67108864?b=0:b=g/67108864|0}return E},U.prototype.convert13b=function(E,v,b,c){for(var g=0,w=0;w<v;w++)g=g+(E[w]|0),b[2*w]=g&8191,g=g>>>13,b[2*w+1]=g&8191,g=g>>>13;for(w=2*v;w<c;++w)b[w]=0;r(g===0),r((g&-8192)===0)},U.prototype.stub=function(E){for(var v=new Array(E),b=0;b<E;b++)v[b]=0;return v},U.prototype.mulp=function(E,v,b){var c=2*this.guessLen13b(E.length,v.length),g=this.makeRBT(c),w=this.stub(c),R=new Array(c),C=new Array(c),h=new Array(c),D=new Array(c),M=new Array(c),I=new Array(c),k=b.words;k.length=c,this.convert13b(E.words,E.length,R,c),this.convert13b(v.words,v.length,D,c),this.transform(R,w,C,h,c,g),this.transform(D,w,M,I,c,g);for(var ne=0;ne<c;ne++){var Ae=C[ne]*M[ne]-h[ne]*I[ne];h[ne]=C[ne]*I[ne]+h[ne]*M[ne],C[ne]=Ae}return this.conjugate(C,h,c),this.transform(C,h,k,w,c,g),this.conjugate(k,w,c),this.normalize13b(k,c),b.negative=E.negative^v.negative,b.length=E.length+v.length,b.strip()},i.prototype.mul=function(E){var v=new i(null);return v.words=new Array(this.length+E.length),this.mulTo(E,v)},i.prototype.mulf=function(E){var v=new i(null);return v.words=new Array(this.length+E.length),P(this,E,v)},i.prototype.imul=function(E){return this.clone().mulTo(E,this)},i.prototype.imuln=function(E){r(typeof E=="number"),r(E<67108864);for(var v=0,b=0;b<this.length;b++){var c=(this.words[b]|0)*E,g=(c&67108863)+(v&67108863);v>>=26,v+=c/67108864|0,v+=g>>>26,this.words[b]=g&67108863}return v!==0&&(this.words[b]=v,this.length++),this.length=E===0?1:this.length,this},i.prototype.muln=function(E){return this.clone().imuln(E)},i.prototype.sqr=function(){return this.mul(this)},i.prototype.isqr=function(){return this.imul(this.clone())},i.prototype.pow=function(E){var v=B(E);if(v.length===0)return new i(1);for(var b=this,c=0;c<v.length&&v[c]===0;c++,b=b.sqr());if(++c<v.length)for(var g=b.sqr();c<v.length;c++,g=g.sqr())v[c]!==0&&(b=b.mul(g));return b},i.prototype.iushln=function(E){r(typeof E=="number"&&E>=0);var v=E%26,b=(E-v)/26,c=67108863>>>26-v<<26-v,g;if(v!==0){var w=0;for(g=0;g<this.length;g++){var R=this.words[g]&c,C=(this.words[g]|0)-R<<v;this.words[g]=C|w,w=R>>>26-v}w&&(this.words[g]=w,this.length++)}if(b!==0){for(g=this.length-1;g>=0;g--)this.words[g+b]=this.words[g];for(g=0;g<b;g++)this.words[g]=0;this.length+=b}return this.strip()},i.prototype.ishln=function(E){return r(this.negative===0),this.iushln(E)},i.prototype.iushrn=function(E,v,b){r(typeof E=="number"&&E>=0);var c;v?c=(v-v%26)/26:c=0;var g=E%26,w=Math.min((E-g)/26,this.length),R=67108863^67108863>>>g<<g,C=b;if(c-=w,c=Math.max(0,c),C){for(var h=0;h<w;h++)C.words[h]=this.words[h];C.length=w}if(w!==0)if(this.length>w)for(this.length-=w,h=0;h<this.length;h++)this.words[h]=this.words[h+w];else this.words[0]=0,this.length=1;var D=0;for(h=this.length-1;h>=0&&(D!==0||h>=c);h--){var M=this.words[h]|0;this.words[h]=D<<26-g|M>>>g,D=M&R}return C&&D!==0&&(C.words[C.length++]=D),this.length===0&&(this.words[0]=0,this.length=1),this.strip()},i.prototype.ishrn=function(E,v,b){return r(this.negative===0),this.iushrn(E,v,b)},i.prototype.shln=function(E){return this.clone().ishln(E)},i.prototype.ushln=function(E){return this.clone().iushln(E)},i.prototype.shrn=function(E){return this.clone().ishrn(E)},i.prototype.ushrn=function(E){return this.clone().iushrn(E)},i.prototype.testn=function(E){r(typeof E=="number"&&E>=0);var v=E%26,b=(E-v)/26,c=1<<v;if(this.length<=b)return!1;var g=this.words[b];return!!(g&c)},i.prototype.imaskn=function(E){r(typeof E=="number"&&E>=0);var v=E%26,b=(E-v)/26;if(r(this.negative===0,"imaskn works only with positive numbers"),this.length<=b)return this;if(v!==0&&b++,this.length=Math.min(b,this.length),v!==0){var c=67108863^67108863>>>v<<v;this.words[this.length-1]&=c}return this.length===0&&(this.words[0]=0,this.length=1),this.strip()},i.prototype.maskn=function(E){return this.clone().imaskn(E)},i.prototype.iaddn=function(E){return r(typeof E=="number"),r(E<67108864),E<0?this.isubn(-E):this.negative!==0?this.length===1&&(this.words[0]|0)<E?(this.words[0]=E-(this.words[0]|0),this.negative=0,this):(this.negative=0,this.isubn(E),this.negative=1,this):this._iaddn(E)},i.prototype._iaddn=function(E){this.words[0]+=E;for(var v=0;v<this.length&&this.words[v]>=67108864;v++)this.words[v]-=67108864,v===this.length-1?this.words[v+1]=1:this.words[v+1]++;return this.length=Math.max(this.length,v+1),this},i.prototype.isubn=function(E){if(r(typeof E=="number"),r(E<67108864),E<0)return this.iaddn(-E);if(this.negative!==0)return this.negative=0,this.iaddn(E),this.negative=1,this;if(this.words[0]-=E,this.length===1&&this.words[0]<0)this.words[0]=-this.words[0],this.negative=1;else for(var v=0;v<this.length&&this.words[v]<0;v++)this.words[v]+=67108864,this.words[v+1]-=1;return this.strip()},i.prototype.addn=function(E){return this.clone().iaddn(E)},i.prototype.subn=function(E){return this.clone().isubn(E)},i.prototype.iabs=function(){return this.negative=0,this},i.prototype.abs=function(){return this.clone().iabs()},i.prototype._ishlnsubmul=function(E,v,b){var c=E.length+b,g;this._expand(c);var w,R=0;for(g=0;g<E.length;g++){w=(this.words[g+b]|0)+R;var C=(E.words[g]|0)*v;w-=C&67108863,R=(w>>26)-(C/67108864|0),this.words[g+b]=w&67108863}for(;g<this.length-b;g++)w=(this.words[g+b]|0)+R,R=w>>26,this.words[g+b]=w&67108863;if(R===0)return this.strip();for(r(R===-1),R=0,g=0;g<this.length;g++)w=-(this.words[g]|0)+R,R=w>>26,this.words[g]=w&67108863;return this.negative=1,this.strip()},i.prototype._wordDiv=function(E,v){var b=this.length-E.length,c=this.clone(),g=E,w=g.words[g.length-1]|0,R=this._countBits(w);b=26-R,b!==0&&(g=g.ushln(b),c.iushln(b),w=g.words[g.length-1]|0);var C=c.length-g.length,h;if(v!=="mod"){h=new i(null),h.length=C+1,h.words=new Array(h.length);for(var D=0;D<h.length;D++)h.words[D]=0}var M=c.clone()._ishlnsubmul(g,1,C);M.negative===0&&(c=M,h&&(h.words[C]=1));for(var I=C-1;I>=0;I--){var k=(c.words[g.length+I]|0)*67108864+(c.words[g.length+I-1]|0);for(k=Math.min(k/w|0,67108863),c._ishlnsubmul(g,k,I);c.negative!==0;)k--,c.negative=0,c._ishlnsubmul(g,1,I),c.isZero()||(c.negative^=1);h&&(h.words[I]=k)}return h&&h.strip(),c.strip(),v!=="div"&&b!==0&&c.iushrn(b),{div:h||null,mod:c}},i.prototype.divmod=function(E,v,b){if(r(!E.isZero()),this.isZero())return{div:new i(0),mod:new i(0)};var c,g,w;return this.negative!==0&&E.negative===0?(w=this.neg().divmod(E,v),v!=="mod"&&(c=w.div.neg()),v!=="div"&&(g=w.mod.neg(),b&&g.negative!==0&&g.iadd(E)),{div:c,mod:g}):this.negative===0&&E.negative!==0?(w=this.divmod(E.neg(),v),v!=="mod"&&(c=w.div.neg()),{div:c,mod:w.mod}):(this.negative&E.negative)!==0?(w=this.neg().divmod(E.neg(),v),v!=="div"&&(g=w.mod.neg(),b&&g.negative!==0&&g.isub(E)),{div:w.div,mod:g}):E.length>this.length||this.cmp(E)<0?{div:new i(0),mod:this}:E.length===1?v==="div"?{div:this.divn(E.words[0]),mod:null}:v==="mod"?{div:null,mod:new i(this.modn(E.words[0]))}:{div:this.divn(E.words[0]),mod:new i(this.modn(E.words[0]))}:this._wordDiv(E,v)},i.prototype.div=function(E){return this.divmod(E,"div",!1).div},i.prototype.mod=function(E){return this.divmod(E,"mod",!1).mod},i.prototype.umod=function(E){return this.divmod(E,"mod",!0).mod},i.prototype.divRound=function(E){var v=this.divmod(E);if(v.mod.isZero())return v.div;var b=v.div.negative!==0?v.mod.isub(E):v.mod,c=E.ushrn(1),g=E.andln(1),w=b.cmp(c);return w<0||g===1&&w===0?v.div:v.div.negative!==0?v.div.isubn(1):v.div.iaddn(1)},i.prototype.modn=function(E){r(E<=67108863);for(var v=(1<<26)%E,b=0,c=this.length-1;c>=0;c--)b=(v*b+(this.words[c]|0))%E;return b},i.prototype.idivn=function(E){r(E<=67108863);for(var v=0,b=this.length-1;b>=0;b--){var c=(this.words[b]|0)+v*67108864;this.words[b]=c/E|0,v=c%E}return this.strip()},i.prototype.divn=function(E){return this.clone().idivn(E)},i.prototype.egcd=function(E){r(E.negative===0),r(!E.isZero());var v=this,b=E.clone();v.negative!==0?v=v.umod(E):v=v.clone();for(var c=new i(1),g=new i(0),w=new i(0),R=new i(1),C=0;v.isEven()&&b.isEven();)v.iushrn(1),b.iushrn(1),++C;for(var h=b.clone(),D=v.clone();!v.isZero();){for(var M=0,I=1;(v.words[0]&I)===0&&M<26;++M,I<<=1);if(M>0)for(v.iushrn(M);M-- >0;)(c.isOdd()||g.isOdd())&&(c.iadd(h),g.isub(D)),c.iushrn(1),g.iushrn(1);for(var k=0,ne=1;(b.words[0]&ne)===0&&k<26;++k,ne<<=1);if(k>0)for(b.iushrn(k);k-- >0;)(w.isOdd()||R.isOdd())&&(w.iadd(h),R.isub(D)),w.iushrn(1),R.iushrn(1);v.cmp(b)>=0?(v.isub(b),c.isub(w),g.isub(R)):(b.isub(v),w.isub(c),R.isub(g))}return{a:w,b:R,gcd:b.iushln(C)}},i.prototype._invmp=function(E){r(E.negative===0),r(!E.isZero());var v=this,b=E.clone();v.negative!==0?v=v.umod(E):v=v.clone();for(var c=new i(1),g=new i(0),w=b.clone();v.cmpn(1)>0&&b.cmpn(1)>0;){for(var R=0,C=1;(v.words[0]&C)===0&&R<26;++R,C<<=1);if(R>0)for(v.iushrn(R);R-- >0;)c.isOdd()&&c.iadd(w),c.iushrn(1);for(var h=0,D=1;(b.words[0]&D)===0&&h<26;++h,D<<=1);if(h>0)for(b.iushrn(h);h-- >0;)g.isOdd()&&g.iadd(w),g.iushrn(1);v.cmp(b)>=0?(v.isub(b),c.isub(g)):(b.isub(v),g.isub(c))}var M;return v.cmpn(1)===0?M=c:M=g,M.cmpn(0)<0&&M.iadd(E),M},i.prototype.gcd=function(E){if(this.isZero())return E.abs();if(E.isZero())return this.abs();var v=this.clone(),b=E.clone();v.negative=0,b.negative=0;for(var c=0;v.isEven()&&b.isEven();c++)v.iushrn(1),b.iushrn(1);do{for(;v.isEven();)v.iushrn(1);for(;b.isEven();)b.iushrn(1);var g=v.cmp(b);if(g<0){var w=v;v=b,b=w}else if(g===0||b.cmpn(1)===0)break;v.isub(b)}while(!0);return b.iushln(c)},i.prototype.invm=function(E){return this.egcd(E).a.umod(E)},i.prototype.isEven=function(){return(this.words[0]&1)===0},i.prototype.isOdd=function(){return(this.words[0]&1)===1},i.prototype.andln=function(E){return this.words[0]&E},i.prototype.bincn=function(E){r(typeof E=="number");var v=E%26,b=(E-v)/26,c=1<<v;if(this.length<=b)return this._expand(b+1),this.words[b]|=c,this;for(var g=c,w=b;g!==0&&w<this.length;w++){var R=this.words[w]|0;R+=g,g=R>>>26,R&=67108863,this.words[w]=R}return g!==0&&(this.words[w]=g,this.length++),this},i.prototype.isZero=function(){return this.length===1&&this.words[0]===0},i.prototype.cmpn=function(E){var v=E<0;if(this.negative!==0&&!v)return-1;if(this.negative===0&&v)return 1;this.strip();var b;if(this.length>1)b=1;else{v&&(E=-E),r(E<=67108863,"Number is too big");var c=this.words[0]|0;b=c===E?0:c<E?-1:1}return this.negative!==0?-b|0:b},i.prototype.cmp=function(E){if(this.negative!==0&&E.negative===0)return-1;if(this.negative===0&&E.negative!==0)return 1;var v=this.ucmp(E);return this.negative!==0?-v|0:v},i.prototype.ucmp=function(E){if(this.length>E.length)return 1;if(this.length<E.length)return-1;for(var v=0,b=this.length-1;b>=0;b--){var c=this.words[b]|0,g=E.words[b]|0;if(c!==g){c<g?v=-1:c>g&&(v=1);break}}return v},i.prototype.gtn=function(E){return this.cmpn(E)===1},i.prototype.gt=function(E){return this.cmp(E)===1},i.prototype.gten=function(E){return this.cmpn(E)>=0},i.prototype.gte=function(E){return this.cmp(E)>=0},i.prototype.ltn=function(E){return this.cmpn(E)===-1},i.prototype.lt=function(E){return this.cmp(E)===-1},i.prototype.lten=function(E){return this.cmpn(E)<=0},i.prototype.lte=function(E){return this.cmp(E)<=0},i.prototype.eqn=function(E){return this.cmpn(E)===0},i.prototype.eq=function(E){return this.cmp(E)===0},i.red=function(E){return new ie(E)},i.prototype.toRed=function(E){return r(!this.red,"Already a number in reduction context"),r(this.negative===0,"red works only with positives"),E.convertTo(this)._forceRed(E)},i.prototype.fromRed=function(){return r(this.red,"fromRed works only with numbers in reduction context"),this.red.convertFrom(this)},i.prototype._forceRed=function(E){return this.red=E,this},i.prototype.forceRed=function(E){return r(!this.red,"Already a number in reduction context"),this._forceRed(E)},i.prototype.redAdd=function(E){return r(this.red,"redAdd works only with red numbers"),this.red.add(this,E)},i.prototype.redIAdd=function(E){return r(this.red,"redIAdd works only with red numbers"),this.red.iadd(this,E)},i.prototype.redSub=function(E){return r(this.red,"redSub works only with red numbers"),this.red.sub(this,E)},i.prototype.redISub=function(E){return r(this.red,"redISub works only with red numbers"),this.red.isub(this,E)},i.prototype.redShl=function(E){return r(this.red,"redShl works only with red numbers"),this.red.shl(this,E)},i.prototype.redMul=function(E){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,E),this.red.mul(this,E)},i.prototype.redIMul=function(E){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,E),this.red.imul(this,E)},i.prototype.redSqr=function(){return r(this.red,"redSqr works only with red numbers"),this.red._verify1(this),this.red.sqr(this)},i.prototype.redISqr=function(){return r(this.red,"redISqr works only with red numbers"),this.red._verify1(this),this.red.isqr(this)},i.prototype.redSqrt=function(){return r(this.red,"redSqrt works only with red numbers"),this.red._verify1(this),this.red.sqrt(this)},i.prototype.redInvm=function(){return r(this.red,"redInvm works only with red numbers"),this.red._verify1(this),this.red.invm(this)},i.prototype.redNeg=function(){return r(this.red,"redNeg works only with red numbers"),this.red._verify1(this),this.red.neg(this)},i.prototype.redPow=function(E){return r(this.red&&!E.red,"redPow(normalNum)"),this.red._verify1(this),this.red.pow(this,E)};var G={k256:null,p224:null,p192:null,p25519:null};function Y(H,E){this.name=H,this.p=new i(E,16),this.n=this.p.bitLength(),this.k=new i(1).iushln(this.n).isub(this.p),this.tmp=this._tmp()}Y.prototype._tmp=function(){var E=new i(null);return E.words=new Array(Math.ceil(this.n/13)),E},Y.prototype.ireduce=function(E){var v=E,b;do this.split(v,this.tmp),v=this.imulK(v),v=v.iadd(this.tmp),b=v.bitLength();while(b>this.n);var c=b<this.n?-1:v.ucmp(this.p);return c===0?(v.words[0]=0,v.length=1):c>0?v.isub(this.p):v.strip!==void 0?v.strip():v._strip(),v},Y.prototype.split=function(E,v){E.iushrn(this.n,0,v)},Y.prototype.imulK=function(E){return E.imul(this.k)};function Z(){Y.call(this,"k256","ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe fffffc2f")}n(Z,Y),Z.prototype.split=function(E,v){for(var b=4194303,c=Math.min(E.length,9),g=0;g<c;g++)v.words[g]=E.words[g];if(v.length=c,E.length<=9){E.words[0]=0,E.length=1;return}var w=E.words[9];for(v.words[v.length++]=w&b,g=10;g<E.length;g++){var R=E.words[g]|0;E.words[g-10]=(R&b)<<4|w>>>22,w=R}w>>>=22,E.words[g-10]=w,w===0&&E.length>10?E.length-=10:E.length-=9},Z.prototype.imulK=function(E){E.words[E.length]=0,E.words[E.length+1]=0,E.length+=2;for(var v=0,b=0;b<E.length;b++){var c=E.words[b]|0;v+=c*977,E.words[b]=v&67108863,v=c*64+(v/67108864|0)}return E.words[E.length-1]===0&&(E.length--,E.words[E.length-1]===0&&E.length--),E};function ee(){Y.call(this,"p224","ffffffff ffffffff ffffffff ffffffff 00000000 00000000 00000001")}n(ee,Y);function j(){Y.call(this,"p192","ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff")}n(j,Y);function se(){Y.call(this,"25519","7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed")}n(se,Y),se.prototype.imulK=function(E){for(var v=0,b=0;b<E.length;b++){var c=(E.words[b]|0)*19+v,g=c&67108863;c>>>=26,E.words[b]=g,v=c}return v!==0&&(E.words[E.length++]=v),E},i._prime=function(E){if(G[E])return G[E];var v;if(E==="k256")v=new Z;else if(E==="p224")v=new ee;else if(E==="p192")v=new j;else if(E==="p25519")v=new se;else throw new Error("Unknown prime "+E);return G[E]=v,v};function ie(H){if(typeof H=="string"){var E=i._prime(H);this.m=E.p,this.prime=E}else r(H.gtn(1),"modulus must be greater than 1"),this.m=H,this.prime=null}ie.prototype._verify1=function(E){r(E.negative===0,"red works only with positives"),r(E.red,"red works only with red numbers")},ie.prototype._verify2=function(E,v){r((E.negative|v.negative)===0,"red works only with positives"),r(E.red&&E.red===v.red,"red works only with red numbers")},ie.prototype.imod=function(E){return this.prime?this.prime.ireduce(E)._forceRed(this):E.umod(this.m)._forceRed(this)},ie.prototype.neg=function(E){return E.isZero()?E.clone():this.m.sub(E)._forceRed(this)},ie.prototype.add=function(E,v){this._verify2(E,v);var b=E.add(v);return b.cmp(this.m)>=0&&b.isub(this.m),b._forceRed(this)},ie.prototype.iadd=function(E,v){this._verify2(E,v);var b=E.iadd(v);return b.cmp(this.m)>=0&&b.isub(this.m),b},ie.prototype.sub=function(E,v){this._verify2(E,v);var b=E.sub(v);return b.cmpn(0)<0&&b.iadd(this.m),b._forceRed(this)},ie.prototype.isub=function(E,v){this._verify2(E,v);var b=E.isub(v);return b.cmpn(0)<0&&b.iadd(this.m),b},ie.prototype.shl=function(E,v){return this._verify1(E),this.imod(E.ushln(v))},ie.prototype.imul=function(E,v){return this._verify2(E,v),this.imod(E.imul(v))},ie.prototype.mul=function(E,v){return this._verify2(E,v),this.imod(E.mul(v))},ie.prototype.isqr=function(E){return this.imul(E,E.clone())},ie.prototype.sqr=function(E){return this.mul(E,E)},ie.prototype.sqrt=function(E){if(E.isZero())return E.clone();var v=this.m.andln(3);if(r(v%2===1),v===3){var b=this.m.add(new i(1)).iushrn(2);return this.pow(E,b)}for(var c=this.m.subn(1),g=0;!c.isZero()&&c.andln(1)===0;)g++,c.iushrn(1);r(!c.isZero());var w=new i(1).toRed(this),R=w.redNeg(),C=this.m.subn(1).iushrn(1),h=this.m.bitLength();for(h=new i(2*h*h).toRed(this);this.pow(h,C).cmp(R)!==0;)h.redIAdd(R);for(var D=this.pow(h,c),M=this.pow(E,c.addn(1).iushrn(1)),I=this.pow(E,c),k=g;I.cmp(w)!==0;){for(var ne=I,Ae=0;ne.cmp(w)!==0;Ae++)ne=ne.redSqr();r(Ae<k);var ue=this.pow(D,new i(1).iushln(k-Ae-1));M=M.redMul(ue),D=ue.redSqr(),I=I.redMul(D),k=Ae}return M},ie.prototype.invm=function(E){var v=E._invmp(this.m);return v.negative!==0?(v.negative=0,this.imod(v).redNeg()):this.imod(v)},ie.prototype.pow=function(E,v){if(v.isZero())return new i(1).toRed(this);if(v.cmpn(1)===0)return E.clone();var b=4,c=new Array(1<<b);c[0]=new i(1).toRed(this),c[1]=E;for(var g=2;g<c.length;g++)c[g]=this.mul(c[g-1],E);var w=c[0],R=0,C=0,h=v.bitLength()%26;for(h===0&&(h=26),g=v.length-1;g>=0;g--){for(var D=v.words[g],M=h-1;M>=0;M--){var I=D>>M&1;if(w!==c[0]&&(w=this.sqr(w)),I===0&&R===0){C=0;continue}R<<=1,R|=I,C++,!(C!==b&&(g!==0||M!==0))&&(w=this.mul(w,c[R]),C=0,R=0)}h=26}return w},ie.prototype.convertTo=function(E){var v=E.umod(this.m);return v===E?v.clone():v},ie.prototype.convertFrom=function(E){var v=E.clone();return v.red=null,v},i.mont=function(E){return new ce(E)};function ce(H){ie.call(this,H),this.shift=this.m.bitLength(),this.shift%26!==0&&(this.shift+=26-this.shift%26),this.r=new i(1).iushln(this.shift),this.r2=this.imod(this.r.sqr()),this.rinv=this.r._invmp(this.m),this.minv=this.rinv.mul(this.r).isubn(1).div(this.m),this.minv=this.minv.umod(this.r),this.minv=this.r.sub(this.minv)}n(ce,ie),ce.prototype.convertTo=function(E){return this.imod(E.ushln(this.shift))},ce.prototype.convertFrom=function(E){var v=this.imod(E.mul(this.rinv));return v.red=null,v},ce.prototype.imul=function(E,v){if(E.isZero()||v.isZero())return E.words[0]=0,E.length=1,E;var b=E.imul(v),c=b.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),g=b.isub(c).iushrn(this.shift),w=g;return g.cmp(this.m)>=0?w=g.isub(this.m):g.cmpn(0)<0&&(w=g.iadd(this.m)),w._forceRed(this)},ce.prototype.mul=function(E,v){if(E.isZero()||v.isZero())return new i(0)._forceRed(this);var b=E.mul(v),c=b.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),g=b.isub(c).iushrn(this.shift),w=g;return g.cmp(this.m)>=0?w=g.isub(this.m):g.cmpn(0)<0&&(w=g.iadd(this.m)),w._forceRed(this)},ce.prototype.invm=function(E){var v=this.imod(E._invmp(this.m).mul(this.r2));return v._forceRed(this)}})(typeof NS>"u"||NS,$5)});var Qy=x((mMe,kS)=>{var MS;kS.exports=function(t){return MS||(MS=new uA(null)),MS.generate(t)};function uA(e){this.rand=e}kS.exports.Rand=uA;uA.prototype.generate=function(t){return this._rand(t)};uA.prototype._rand=function(t){if(this.rand.getBytes)return this.rand.getBytes(t);for(var r=new Uint8Array(t),n=0;n<r.length;n++)r[n]=this.rand.getByte();return r};if(typeof self=="object")self.crypto&&self.crypto.getRandomValues?uA.prototype._rand=function(t){var r=new Uint8Array(t);return self.crypto.getRandomValues(r),r}:self.msCrypto&&self.msCrypto.getRandomValues?uA.prototype._rand=function(t){var r=new Uint8Array(t);return self.msCrypto.getRandomValues(r),r}:typeof window=="object"&&(uA.prototype._rand=function(){throw new Error("Not implemented yet")});else try{if(FS=kd(),typeof FS.randomBytes!="function")throw new Error("Not supported");uA.prototype._rand=function(t){return FS.randomBytes(t)}}catch{}var FS});var xS=x((BMe,eP)=>{var Mf=kr(),Gde=Qy();function Ff(e){this.rand=e||new Gde.Rand}eP.exports=Ff;Ff.create=function(t){return new Ff(t)};Ff.prototype._randbelow=function(t){var r=t.bitLength(),n=Math.ceil(r/8);do var i=new Mf(this.rand.generate(n));while(i.cmp(t)>=0);return i};Ff.prototype._randrange=function(t,r){var n=r.sub(t);return t.add(this._randbelow(n))};Ff.prototype.test=function(t,r,n){var i=t.bitLength(),s=Mf.mont(t),o=new Mf(1).toRed(s);r||(r=Math.max(1,i/48|0));for(var a=t.subn(1),A=0;!a.testn(A);A++);for(var f=t.shrn(A),l=a.toRed(s),p=!0;r>0;r--){var B=this._randrange(new Mf(2),a);n&&n(B);var S=B.toRed(s).redPow(f);if(!(S.cmp(o)===0||S.cmp(l)===0)){for(var _=1;_<A;_++){if(S=S.redSqr(),S.cmp(o)===0)return!1;if(S.cmp(l)===0)break}if(_===A)return!1}}return p};Ff.prototype.getDivisor=function(t,r){var n=t.bitLength(),i=Mf.mont(t),s=new Mf(1).toRed(i);r||(r=Math.max(1,n/48|0));for(var o=t.subn(1),a=0;!o.testn(a);a++);for(var A=t.shrn(a),f=o.toRed(i);r>0;r--){var l=this._randrange(new Mf(2),o),p=t.gcd(l);if(p.cmpn(1)!==0)return p;var B=l.toRed(i).redPow(A);if(!(B.cmp(s)===0||B.cmp(f)===0)){for(var S=1;S<a;S++){if(B=B.redSqr(),B.cmp(s)===0)return B.fromRed().subn(1).gcd(t);if(B.cmp(f)===0)break}if(S===a)return B=B.redSqr(),B.fromRed().subn(1).gcd(t)}}return!1}});var qS=x((wMe,nP)=>{var Yde=If();nP.exports=HS;HS.simpleSieve=PS;HS.fermatTest=OS;var Jr=kr(),Wde=new Jr(24),Vde=xS(),tP=new Vde,Jde=new Jr(1),LS=new Jr(2),jde=new Jr(5),IMe=new Jr(16),bMe=new Jr(8),zde=new Jr(10),Kde=new Jr(3),CMe=new Jr(7),Xde=new Jr(11),rP=new Jr(4),QMe=new Jr(12),US=null;function Zde(){if(US!==null)return US;var e=1048576,t=[];t[0]=2;for(var r=1,n=3;n<e;n+=2){for(var i=Math.ceil(Math.sqrt(n)),s=0;s<r&&t[s]<=i&&n%t[s]!==0;s++);r!==s&&t[s]<=i||(t[r++]=n)}return US=t,t}function PS(e){for(var t=Zde(),r=0;r<t.length;r++)if(e.modn(t[r])===0)return e.cmpn(t[r])===0;return!0}function OS(e){var t=Jr.mont(e);return LS.toRed(t).redPow(e.subn(1)).fromRed().cmpn(1)===0}function HS(e,t){if(e<16)return t===2||t===5?new Jr([140,123]):new Jr([140,39]);t=new Jr(t);for(var r,n;;){for(r=new Jr(Yde(Math.ceil(e/8)));r.bitLength()>e;)r.ishrn(1);if(r.isEven()&&r.iadd(Jde),r.testn(1)||r.iadd(LS),t.cmp(LS)){if(!t.cmp(jde))for(;r.mod(zde).cmp(Kde);)r.iadd(rP)}else for(;r.mod(Wde).cmp(Xde);)r.iadd(rP);if(n=r.shrn(1),PS(n)&&PS(r)&&OS(n)&&OS(r)&&tP.test(n)&&tP.test(r))return r}}});var iP=x((SMe,$de)=>{$de.exports={modp1:{gen:"02",prime:"ffffffffffffffffc90fdaa22168c234c4c6628b80dc1cd129024e088a67cc74020bbea63b139b22514a08798e3404ddef9519b3cd3a431b302b0a6df25f14374fe1356d6d51c245e485b576625e7ec6f44c42e9a63a3620ffffffffffffffff"},modp2:{gen:"02",prime:"ffffffffffffffffc90fdaa22168c234c4c6628b80dc1cd129024e088a67cc74020bbea63b139b22514a08798e3404ddef9519b3cd3a431b302b0a6df25f14374fe1356d6d51c245e485b576625e7ec6f44c42e9a637ed6b0bff5cb6f406b7edee386bfb5a899fa5ae9f24117c4b1fe649286651ece65381ffffffffffffffff"},modp5:{gen:"02",prime:"ffffffffffffffffc90fdaa22168c234c4c6628b80dc1cd129024e088a67cc74020bbea63b139b22514a08798e3404ddef9519b3cd3a431b302b0a6df25f14374fe1356d6d51c245e485b576625e7ec6f44c42e9a637ed6b0bff5cb6f406b7edee386bfb5a899fa5ae9f24117c4b1fe649286651ece45b3dc2007cb8a163bf0598da48361c55d39a69163fa8fd24cf5f83655d23dca3ad961c62f356208552bb9ed529077096966d670c354e4abc9804f1746c08ca237327ffffffffffffffff"},modp14:{gen:"02",prime:"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"},modp15:{gen:"02",prime:"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"},modp16:{gen:"02",prime:"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"},modp17:{gen:"02",prime:"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"},modp18:{gen:"02",prime:"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"}}});var AP=x((_Me,aP)=>{var Qi=kr(),ege=xS(),sP=new ege,tge=new Qi(24),rge=new Qi(11),nge=new Qi(10),ige=new Qi(3),sge=new Qi(7),oP=qS(),oge=If();aP.exports=oa;function age(e,t){return t=t||"utf8",Buffer.isBuffer(e)||(e=new Buffer(e,t)),this._pub=new Qi(e),this}function Age(e,t){return t=t||"utf8",Buffer.isBuffer(e)||(e=new Buffer(e,t)),this._priv=new Qi(e),this}var wy={};function fge(e,t){var r=t.toString("hex"),n=[r,e.toString(16)].join("_");if(n in wy)return wy[n];var i=0;if(e.isEven()||!oP.simpleSieve||!oP.fermatTest(e)||!sP.test(e))return i+=1,r==="02"||r==="05"?i+=8:i+=4,wy[n]=i,i;sP.test(e.shrn(1))||(i+=2);var s;switch(r){case"02":e.mod(tge).cmp(rge)&&(i+=8);break;case"05":s=e.mod(nge),s.cmp(ige)&&s.cmp(sge)&&(i+=8);break;default:i+=4}return wy[n]=i,i}function oa(e,t,r){this.setGenerator(t),this.__prime=new Qi(e),this._prime=Qi.mont(this.__prime),this._primeLen=e.length,this._pub=void 0,this._priv=void 0,this._primeCode=void 0,r?(this.setPublicKey=age,this.setPrivateKey=Age):this._primeCode=8}Object.defineProperty(oa.prototype,"verifyError",{enumerable:!0,get:function(){return typeof this._primeCode!="number"&&(this._primeCode=fge(this.__prime,this.__gen)),this._primeCode}});oa.prototype.generateKeys=function(){return this._priv||(this._priv=new Qi(oge(this._primeLen))),this._pub=this._gen.toRed(this._prime).redPow(this._priv).fromRed(),this.getPublicKey()};oa.prototype.computeSecret=function(e){e=new Qi(e),e=e.toRed(this._prime);var t=e.redPow(this._priv).fromRed(),r=new Buffer(t.toArray()),n=this.getPrime();if(r.length<n.length){var i=new Buffer(n.length-r.length);i.fill(0),r=Buffer.concat([i,r])}return r};oa.prototype.getPublicKey=function(t){return Sy(this._pub,t)};oa.prototype.getPrivateKey=function(t){return Sy(this._priv,t)};oa.prototype.getPrime=function(e){return Sy(this.__prime,e)};oa.prototype.getGenerator=function(e){return Sy(this._gen,e)};oa.prototype.setGenerator=function(e,t){return t=t||"utf8",Buffer.isBuffer(e)||(e=new Buffer(e,t)),this.__gen=e,this._gen=new Qi(e),this};function Sy(e,t){var r=new Buffer(e.toArray());return t?r.toString(t):r}});var cP=x(Hc=>{var uge=qS(),fP=iP(),GS=AP();function cge(e){var t=new Buffer(fP[e].prime,"hex"),r=new Buffer(fP[e].gen,"hex");return new GS(t,r)}var lge={binary:!0,hex:!0,base64:!0};function uP(e,t,r,n){return Buffer.isBuffer(t)||lge[t]===void 0?uP(e,"binary",t,r):(t=t||"binary",n=n||"binary",r=r||new Buffer([2]),Buffer.isBuffer(r)||(r=new Buffer(r,n)),typeof e=="number"?new GS(uge(e,r),r,!0):(Buffer.isBuffer(e)||(e=new Buffer(e,t)),new GS(e,r,!0)))}Hc.DiffieHellmanGroup=Hc.createDiffieHellmanGroup=Hc.getDiffieHellman=cge;Hc.createDiffieHellman=Hc.DiffieHellman=uP});var _y=x((lP,YS)=>{(function(e,t){"use strict";function r(b,c){if(!b)throw new Error(c||"Assertion failed")}function n(b,c){b.super_=c;var g=function(){};g.prototype=c.prototype,b.prototype=new g,b.prototype.constructor=b}function i(b,c,g){if(i.isBN(b))return b;this.negative=0,this.words=null,this.length=0,this.red=null,b!==null&&((c==="le"||c==="be")&&(g=c,c=10),this._init(b||0,c||10,g||"be"))}typeof e=="object"?e.exports=i:t.BN=i,i.BN=i,i.wordSize=26;var s;try{typeof window<"u"&&typeof window.Buffer<"u"?s=window.Buffer:s=Gr().Buffer}catch{}i.isBN=function(c){return c instanceof i?!0:c!==null&&typeof c=="object"&&c.constructor.wordSize===i.wordSize&&Array.isArray(c.words)},i.max=function(c,g){return c.cmp(g)>0?c:g},i.min=function(c,g){return c.cmp(g)<0?c:g},i.prototype._init=function(c,g,w){if(typeof c=="number")return this._initNumber(c,g,w);if(typeof c=="object")return this._initArray(c,g,w);g==="hex"&&(g=16),r(g===(g|0)&&g>=2&&g<=36),c=c.toString().replace(/\s+/g,"");var R=0;c[0]==="-"&&(R++,this.negative=1),R<c.length&&(g===16?this._parseHex(c,R,w):(this._parseBase(c,g,R),w==="le"&&this._initArray(this.toArray(),g,w)))},i.prototype._initNumber=function(c,g,w){c<0&&(this.negative=1,c=-c),c<67108864?(this.words=[c&67108863],this.length=1):c<4503599627370496?(this.words=[c&67108863,c/67108864&67108863],this.length=2):(r(c<9007199254740992),this.words=[c&67108863,c/67108864&67108863,1],this.length=3),w==="le"&&this._initArray(this.toArray(),g,w)},i.prototype._initArray=function(c,g,w){if(r(typeof c.length=="number"),c.length<=0)return this.words=[0],this.length=1,this;this.length=Math.ceil(c.length/3),this.words=new Array(this.length);for(var R=0;R<this.length;R++)this.words[R]=0;var C,h,D=0;if(w==="be")for(R=c.length-1,C=0;R>=0;R-=3)h=c[R]|c[R-1]<<8|c[R-2]<<16,this.words[C]|=h<<D&67108863,this.words[C+1]=h>>>26-D&67108863,D+=24,D>=26&&(D-=26,C++);else if(w==="le")for(R=0,C=0;R<c.length;R+=3)h=c[R]|c[R+1]<<8|c[R+2]<<16,this.words[C]|=h<<D&67108863,this.words[C+1]=h>>>26-D&67108863,D+=24,D>=26&&(D-=26,C++);return this._strip()};function o(b,c){var g=b.charCodeAt(c);if(g>=48&&g<=57)return g-48;if(g>=65&&g<=70)return g-55;if(g>=97&&g<=102)return g-87;r(!1,"Invalid character in "+b)}function a(b,c,g){var w=o(b,g);return g-1>=c&&(w|=o(b,g-1)<<4),w}i.prototype._parseHex=function(c,g,w){this.length=Math.ceil((c.length-g)/6),this.words=new Array(this.length);for(var R=0;R<this.length;R++)this.words[R]=0;var C=0,h=0,D;if(w==="be")for(R=c.length-1;R>=g;R-=2)D=a(c,g,R)<<C,this.words[h]|=D&67108863,C>=18?(C-=18,h+=1,this.words[h]|=D>>>26):C+=8;else{var M=c.length-g;for(R=M%2===0?g+1:g;R<c.length;R+=2)D=a(c,g,R)<<C,this.words[h]|=D&67108863,C>=18?(C-=18,h+=1,this.words[h]|=D>>>26):C+=8}this._strip()};function A(b,c,g,w){for(var R=0,C=0,h=Math.min(b.length,g),D=c;D<h;D++){var M=b.charCodeAt(D)-48;R*=w,M>=49?C=M-49+10:M>=17?C=M-17+10:C=M,r(M>=0&&C<w,"Invalid character"),R+=C}return R}i.prototype._parseBase=function(c,g,w){this.words=[0],this.length=1;for(var R=0,C=1;C<=67108863;C*=g)R++;R--,C=C/g|0;for(var h=c.length-w,D=h%R,M=Math.min(h,h-D)+w,I=0,k=w;k<M;k+=R)I=A(c,k,k+R,g),this.imuln(C),this.words[0]+I<67108864?this.words[0]+=I:this._iaddn(I);if(D!==0){var ne=1;for(I=A(c,k,c.length,g),k=0;k<D;k++)ne*=g;this.imuln(ne),this.words[0]+I<67108864?this.words[0]+=I:this._iaddn(I)}this._strip()},i.prototype.copy=function(c){c.words=new Array(this.length);for(var g=0;g<this.length;g++)c.words[g]=this.words[g];c.length=this.length,c.negative=this.negative,c.red=this.red};function f(b,c){b.words=c.words,b.length=c.length,b.negative=c.negative,b.red=c.red}if(i.prototype._move=function(c){f(c,this)},i.prototype.clone=function(){var c=new i(null);return this.copy(c),c},i.prototype._expand=function(c){for(;this.length<c;)this.words[this.length++]=0;return this},i.prototype._strip=function(){for(;this.length>1&&this.words[this.length-1]===0;)this.length--;return this._normSign()},i.prototype._normSign=function(){return this.length===1&&this.words[0]===0&&(this.negative=0),this},typeof Symbol<"u"&&typeof Symbol.for=="function")try{i.prototype[Symbol.for("nodejs.util.inspect.custom")]=l}catch{i.prototype.inspect=l}else i.prototype.inspect=l;function l(){return(this.red?"<BN-R: ":"<BN: ")+this.toString(16)+">"}var p=["","0","00","000","0000","00000","000000","0000000","00000000","000000000","0000000000","00000000000","000000000000","0000000000000","00000000000000","000000000000000","0000000000000000","00000000000000000","000000000000000000","0000000000000000000","00000000000000000000","000000000000000000000","0000000000000000000000","00000000000000000000000","000000000000000000000000","0000000000000000000000000"],B=[0,0,25,16,12,11,10,9,8,8,7,7,7,7,6,6,6,6,6,6,6,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5,5],S=[0,0,33554432,43046721,16777216,48828125,60466176,40353607,16777216,43046721,1e7,19487171,35831808,62748517,7529536,11390625,16777216,24137569,34012224,47045881,64e6,4084101,5153632,6436343,7962624,9765625,11881376,14348907,17210368,20511149,243e5,28629151,33554432,39135393,45435424,52521875,60466176];i.prototype.toString=function(c,g){c=c||10,g=g|0||1;var w;if(c===16||c==="hex"){w="";for(var R=0,C=0,h=0;h<this.length;h++){var D=this.words[h],M=((D<<R|C)&16777215).toString(16);C=D>>>24-R&16777215,R+=2,R>=26&&(R-=26,h--),C!==0||h!==this.length-1?w=p[6-M.length]+M+w:w=M+w}for(C!==0&&(w=C.toString(16)+w);w.length%g!==0;)w="0"+w;return this.negative!==0&&(w="-"+w),w}if(c===(c|0)&&c>=2&&c<=36){var I=B[c],k=S[c];w="";var ne=this.clone();for(ne.negative=0;!ne.isZero();){var Ae=ne.modrn(k).toString(c);ne=ne.idivn(k),ne.isZero()?w=Ae+w:w=p[I-Ae.length]+Ae+w}for(this.isZero()&&(w="0"+w);w.length%g!==0;)w="0"+w;return this.negative!==0&&(w="-"+w),w}r(!1,"Base should be between 2 and 36")},i.prototype.toNumber=function(){var c=this.words[0];return this.length===2?c+=this.words[1]*67108864:this.length===3&&this.words[2]===1?c+=4503599627370496+this.words[1]*67108864:this.length>2&&r(!1,"Number can only safely store up to 53 bits"),this.negative!==0?-c:c},i.prototype.toJSON=function(){return this.toString(16,2)},s&&(i.prototype.toBuffer=function(c,g){return this.toArrayLike(s,c,g)}),i.prototype.toArray=function(c,g){return this.toArrayLike(Array,c,g)};var _=function(c,g){return c.allocUnsafe?c.allocUnsafe(g):new c(g)};i.prototype.toArrayLike=function(c,g,w){this._strip();var R=this.byteLength(),C=w||Math.max(1,R);r(R<=C,"byte array longer than desired length"),r(C>0,"Requested array length <= 0");var h=_(c,C),D=g==="le"?"LE":"BE";return this["_toArrayLike"+D](h,R),h},i.prototype._toArrayLikeLE=function(c,g){for(var w=0,R=0,C=0,h=0;C<this.length;C++){var D=this.words[C]<<h|R;c[w++]=D&255,w<c.length&&(c[w++]=D>>8&255),w<c.length&&(c[w++]=D>>16&255),h===6?(w<c.length&&(c[w++]=D>>24&255),R=0,h=0):(R=D>>>24,h+=2)}if(w<c.length)for(c[w++]=R;w<c.length;)c[w++]=0},i.prototype._toArrayLikeBE=function(c,g){for(var w=c.length-1,R=0,C=0,h=0;C<this.length;C++){var D=this.words[C]<<h|R;c[w--]=D&255,w>=0&&(c[w--]=D>>8&255),w>=0&&(c[w--]=D>>16&255),h===6?(w>=0&&(c[w--]=D>>24&255),R=0,h=0):(R=D>>>24,h+=2)}if(w>=0)for(c[w--]=R;w>=0;)c[w--]=0},Math.clz32?i.prototype._countBits=function(c){return 32-Math.clz32(c)}:i.prototype._countBits=function(c){var g=c,w=0;return g>=4096&&(w+=13,g>>>=13),g>=64&&(w+=7,g>>>=7),g>=8&&(w+=4,g>>>=4),g>=2&&(w+=2,g>>>=2),w+g},i.prototype._zeroBits=function(c){if(c===0)return 26;var g=c,w=0;return(g&8191)===0&&(w+=13,g>>>=13),(g&127)===0&&(w+=7,g>>>=7),(g&15)===0&&(w+=4,g>>>=4),(g&3)===0&&(w+=2,g>>>=2),(g&1)===0&&w++,w},i.prototype.bitLength=function(){var c=this.words[this.length-1],g=this._countBits(c);return(this.length-1)*26+g};function N(b){for(var c=new Array(b.bitLength()),g=0;g<c.length;g++){var w=g/26|0,R=g%26;c[g]=b.words[w]>>>R&1}return c}i.prototype.zeroBits=function(){if(this.isZero())return 0;for(var c=0,g=0;g<this.length;g++){var w=this._zeroBits(this.words[g]);if(c+=w,w!==26)break}return c},i.prototype.byteLength=function(){return Math.ceil(this.bitLength()/8)},i.prototype.toTwos=function(c){return this.negative!==0?this.abs().inotn(c).iaddn(1):this.clone()},i.prototype.fromTwos=function(c){return this.testn(c-1)?this.notn(c).iaddn(1).ineg():this.clone()},i.prototype.isNeg=function(){return this.negative!==0},i.prototype.neg=function(){return this.clone().ineg()},i.prototype.ineg=function(){return this.isZero()||(this.negative^=1),this},i.prototype.iuor=function(c){for(;this.length<c.length;)this.words[this.length++]=0;for(var g=0;g<c.length;g++)this.words[g]=this.words[g]|c.words[g];return this._strip()},i.prototype.ior=function(c){return r((this.negative|c.negative)===0),this.iuor(c)},i.prototype.or=function(c){return this.length>c.length?this.clone().ior(c):c.clone().ior(this)},i.prototype.uor=function(c){return this.length>c.length?this.clone().iuor(c):c.clone().iuor(this)},i.prototype.iuand=function(c){var g;this.length>c.length?g=c:g=this;for(var w=0;w<g.length;w++)this.words[w]=this.words[w]&c.words[w];return this.length=g.length,this._strip()},i.prototype.iand=function(c){return r((this.negative|c.negative)===0),this.iuand(c)},i.prototype.and=function(c){return this.length>c.length?this.clone().iand(c):c.clone().iand(this)},i.prototype.uand=function(c){return this.length>c.length?this.clone().iuand(c):c.clone().iuand(this)},i.prototype.iuxor=function(c){var g,w;this.length>c.length?(g=this,w=c):(g=c,w=this);for(var R=0;R<w.length;R++)this.words[R]=g.words[R]^w.words[R];if(this!==g)for(;R<g.length;R++)this.words[R]=g.words[R];return this.length=g.length,this._strip()},i.prototype.ixor=function(c){return r((this.negative|c.negative)===0),this.iuxor(c)},i.prototype.xor=function(c){return this.length>c.length?this.clone().ixor(c):c.clone().ixor(this)},i.prototype.uxor=function(c){return this.length>c.length?this.clone().iuxor(c):c.clone().iuxor(this)},i.prototype.inotn=function(c){r(typeof c=="number"&&c>=0);var g=Math.ceil(c/26)|0,w=c%26;this._expand(g),w>0&&g--;for(var R=0;R<g;R++)this.words[R]=~this.words[R]&67108863;return w>0&&(this.words[R]=~this.words[R]&67108863>>26-w),this._strip()},i.prototype.notn=function(c){return this.clone().inotn(c)},i.prototype.setn=function(c,g){r(typeof c=="number"&&c>=0);var w=c/26|0,R=c%26;return this._expand(w+1),g?this.words[w]=this.words[w]|1<<R:this.words[w]=this.words[w]&~(1<<R),this._strip()},i.prototype.iadd=function(c){var g;if(this.negative!==0&&c.negative===0)return this.negative=0,g=this.isub(c),this.negative^=1,this._normSign();if(this.negative===0&&c.negative!==0)return c.negative=0,g=this.isub(c),c.negative=1,g._normSign();var w,R;this.length>c.length?(w=this,R=c):(w=c,R=this);for(var C=0,h=0;h<R.length;h++)g=(w.words[h]|0)+(R.words[h]|0)+C,this.words[h]=g&67108863,C=g>>>26;for(;C!==0&&h<w.length;h++)g=(w.words[h]|0)+C,this.words[h]=g&67108863,C=g>>>26;if(this.length=w.length,C!==0)this.words[this.length]=C,this.length++;else if(w!==this)for(;h<w.length;h++)this.words[h]=w.words[h];return this},i.prototype.add=function(c){var g;return c.negative!==0&&this.negative===0?(c.negative=0,g=this.sub(c),c.negative^=1,g):c.negative===0&&this.negative!==0?(this.negative=0,g=c.sub(this),this.negative=1,g):this.length>c.length?this.clone().iadd(c):c.clone().iadd(this)},i.prototype.isub=function(c){if(c.negative!==0){c.negative=0;var g=this.iadd(c);return c.negative=1,g._normSign()}else if(this.negative!==0)return this.negative=0,this.iadd(c),this.negative=1,this._normSign();var w=this.cmp(c);if(w===0)return this.negative=0,this.length=1,this.words[0]=0,this;var R,C;w>0?(R=this,C=c):(R=c,C=this);for(var h=0,D=0;D<C.length;D++)g=(R.words[D]|0)-(C.words[D]|0)+h,h=g>>26,this.words[D]=g&67108863;for(;h!==0&&D<R.length;D++)g=(R.words[D]|0)+h,h=g>>26,this.words[D]=g&67108863;if(h===0&&D<R.length&&R!==this)for(;D<R.length;D++)this.words[D]=R.words[D];return this.length=Math.max(this.length,D),R!==this&&(this.negative=1),this._strip()},i.prototype.sub=function(c){return this.clone().isub(c)};function P(b,c,g){g.negative=c.negative^b.negative;var w=b.length+c.length|0;g.length=w,w=w-1|0;var R=b.words[0]|0,C=c.words[0]|0,h=R*C,D=h&67108863,M=h/67108864|0;g.words[0]=D;for(var I=1;I<w;I++){for(var k=M>>>26,ne=M&67108863,Ae=Math.min(I,c.length-1),ue=Math.max(0,I-b.length+1);ue<=Ae;ue++){var pe=I-ue|0;R=b.words[pe]|0,C=c.words[ue]|0,h=R*C+ne,k+=h/67108864|0,ne=h&67108863}g.words[I]=ne|0,M=k|0}return M!==0?g.words[I]=M|0:g.length--,g._strip()}var U=function(c,g,w){var R=c.words,C=g.words,h=w.words,D=0,M,I,k,ne=R[0]|0,Ae=ne&8191,ue=ne>>>13,pe=R[1]|0,he=pe&8191,de=pe>>>13,wt=R[2]|0,Ie=wt&8191,be=wt>>>13,yr=R[3]|0,we=yr&8191,ve=yr>>>13,Ms=R[4]|0,Ye=Ms&8191,xe=Ms>>>13,Fs=R[5]|0,Te=Fs&8191,De=Fs>>>13,en=R[6]|0,Re=en&8191,He=en>>>13,ai=R[7]|0,Ne=ai&8191,Je=ai>>>13,F=R[8]|0,m=F&8191,Q=F>>>13,L=R[9]|0,W=L&8191,z=L>>>13,ae=C[0]|0,le=ae&8191,ye=ae>>>13,Ct=C[1]|0,Ee=Ct&8191,ge=Ct>>>13,Ua=C[2]|0,je=Ua&8191,tt=Ua>>>13,Fo=C[3]|0,$e=Fo&8191,rt=Fo>>>13,GA=C[4]|0,nt=GA&8191,it=GA>>>13,La=C[5]|0,Ke=La&8191,Xe=La>>>13,YA=C[6]|0,Ue=YA&8191,et=YA>>>13,WA=C[7]|0,st=WA&8191,Le=WA>>>13,hn=C[8]|0,Pe=hn&8191,Ze=hn>>>13,wn=C[9]|0,Pt=wn&8191,kt=wn>>>13;w.negative=c.negative^g.negative,w.length=19,M=Math.imul(Ae,le),I=Math.imul(Ae,ye),I=I+Math.imul(ue,le)|0,k=Math.imul(ue,ye);var ks=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(ks>>>26)|0,ks&=67108863,M=Math.imul(he,le),I=Math.imul(he,ye),I=I+Math.imul(de,le)|0,k=Math.imul(de,ye),M=M+Math.imul(Ae,Ee)|0,I=I+Math.imul(Ae,ge)|0,I=I+Math.imul(ue,Ee)|0,k=k+Math.imul(ue,ge)|0;var Ai=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(Ai>>>26)|0,Ai&=67108863,M=Math.imul(Ie,le),I=Math.imul(Ie,ye),I=I+Math.imul(be,le)|0,k=Math.imul(be,ye),M=M+Math.imul(he,Ee)|0,I=I+Math.imul(he,ge)|0,I=I+Math.imul(de,Ee)|0,k=k+Math.imul(de,ge)|0,M=M+Math.imul(Ae,je)|0,I=I+Math.imul(Ae,tt)|0,I=I+Math.imul(ue,je)|0,k=k+Math.imul(ue,tt)|0;var xs=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(xs>>>26)|0,xs&=67108863,M=Math.imul(we,le),I=Math.imul(we,ye),I=I+Math.imul(ve,le)|0,k=Math.imul(ve,ye),M=M+Math.imul(Ie,Ee)|0,I=I+Math.imul(Ie,ge)|0,I=I+Math.imul(be,Ee)|0,k=k+Math.imul(be,ge)|0,M=M+Math.imul(he,je)|0,I=I+Math.imul(he,tt)|0,I=I+Math.imul(de,je)|0,k=k+Math.imul(de,tt)|0,M=M+Math.imul(Ae,$e)|0,I=I+Math.imul(Ae,rt)|0,I=I+Math.imul(ue,$e)|0,k=k+Math.imul(ue,rt)|0;var Us=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(Us>>>26)|0,Us&=67108863,M=Math.imul(Ye,le),I=Math.imul(Ye,ye),I=I+Math.imul(xe,le)|0,k=Math.imul(xe,ye),M=M+Math.imul(we,Ee)|0,I=I+Math.imul(we,ge)|0,I=I+Math.imul(ve,Ee)|0,k=k+Math.imul(ve,ge)|0,M=M+Math.imul(Ie,je)|0,I=I+Math.imul(Ie,tt)|0,I=I+Math.imul(be,je)|0,k=k+Math.imul(be,tt)|0,M=M+Math.imul(he,$e)|0,I=I+Math.imul(he,rt)|0,I=I+Math.imul(de,$e)|0,k=k+Math.imul(de,rt)|0,M=M+Math.imul(Ae,nt)|0,I=I+Math.imul(Ae,it)|0,I=I+Math.imul(ue,nt)|0,k=k+Math.imul(ue,it)|0;var Ls=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(Ls>>>26)|0,Ls&=67108863,M=Math.imul(Te,le),I=Math.imul(Te,ye),I=I+Math.imul(De,le)|0,k=Math.imul(De,ye),M=M+Math.imul(Ye,Ee)|0,I=I+Math.imul(Ye,ge)|0,I=I+Math.imul(xe,Ee)|0,k=k+Math.imul(xe,ge)|0,M=M+Math.imul(we,je)|0,I=I+Math.imul(we,tt)|0,I=I+Math.imul(ve,je)|0,k=k+Math.imul(ve,tt)|0,M=M+Math.imul(Ie,$e)|0,I=I+Math.imul(Ie,rt)|0,I=I+Math.imul(be,$e)|0,k=k+Math.imul(be,rt)|0,M=M+Math.imul(he,nt)|0,I=I+Math.imul(he,it)|0,I=I+Math.imul(de,nt)|0,k=k+Math.imul(de,it)|0,M=M+Math.imul(Ae,Ke)|0,I=I+Math.imul(Ae,Xe)|0,I=I+Math.imul(ue,Ke)|0,k=k+Math.imul(ue,Xe)|0;var Ps=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(Ps>>>26)|0,Ps&=67108863,M=Math.imul(Re,le),I=Math.imul(Re,ye),I=I+Math.imul(He,le)|0,k=Math.imul(He,ye),M=M+Math.imul(Te,Ee)|0,I=I+Math.imul(Te,ge)|0,I=I+Math.imul(De,Ee)|0,k=k+Math.imul(De,ge)|0,M=M+Math.imul(Ye,je)|0,I=I+Math.imul(Ye,tt)|0,I=I+Math.imul(xe,je)|0,k=k+Math.imul(xe,tt)|0,M=M+Math.imul(we,$e)|0,I=I+Math.imul(we,rt)|0,I=I+Math.imul(ve,$e)|0,k=k+Math.imul(ve,rt)|0,M=M+Math.imul(Ie,nt)|0,I=I+Math.imul(Ie,it)|0,I=I+Math.imul(be,nt)|0,k=k+Math.imul(be,it)|0,M=M+Math.imul(he,Ke)|0,I=I+Math.imul(he,Xe)|0,I=I+Math.imul(de,Ke)|0,k=k+Math.imul(de,Xe)|0,M=M+Math.imul(Ae,Ue)|0,I=I+Math.imul(Ae,et)|0,I=I+Math.imul(ue,Ue)|0,k=k+Math.imul(ue,et)|0;var Os=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(Os>>>26)|0,Os&=67108863,M=Math.imul(Ne,le),I=Math.imul(Ne,ye),I=I+Math.imul(Je,le)|0,k=Math.imul(Je,ye),M=M+Math.imul(Re,Ee)|0,I=I+Math.imul(Re,ge)|0,I=I+Math.imul(He,Ee)|0,k=k+Math.imul(He,ge)|0,M=M+Math.imul(Te,je)|0,I=I+Math.imul(Te,tt)|0,I=I+Math.imul(De,je)|0,k=k+Math.imul(De,tt)|0,M=M+Math.imul(Ye,$e)|0,I=I+Math.imul(Ye,rt)|0,I=I+Math.imul(xe,$e)|0,k=k+Math.imul(xe,rt)|0,M=M+Math.imul(we,nt)|0,I=I+Math.imul(we,it)|0,I=I+Math.imul(ve,nt)|0,k=k+Math.imul(ve,it)|0,M=M+Math.imul(Ie,Ke)|0,I=I+Math.imul(Ie,Xe)|0,I=I+Math.imul(be,Ke)|0,k=k+Math.imul(be,Xe)|0,M=M+Math.imul(he,Ue)|0,I=I+Math.imul(he,et)|0,I=I+Math.imul(de,Ue)|0,k=k+Math.imul(de,et)|0,M=M+Math.imul(Ae,st)|0,I=I+Math.imul(Ae,Le)|0,I=I+Math.imul(ue,st)|0,k=k+Math.imul(ue,Le)|0;var Ji=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(Ji>>>26)|0,Ji&=67108863,M=Math.imul(m,le),I=Math.imul(m,ye),I=I+Math.imul(Q,le)|0,k=Math.imul(Q,ye),M=M+Math.imul(Ne,Ee)|0,I=I+Math.imul(Ne,ge)|0,I=I+Math.imul(Je,Ee)|0,k=k+Math.imul(Je,ge)|0,M=M+Math.imul(Re,je)|0,I=I+Math.imul(Re,tt)|0,I=I+Math.imul(He,je)|0,k=k+Math.imul(He,tt)|0,M=M+Math.imul(Te,$e)|0,I=I+Math.imul(Te,rt)|0,I=I+Math.imul(De,$e)|0,k=k+Math.imul(De,rt)|0,M=M+Math.imul(Ye,nt)|0,I=I+Math.imul(Ye,it)|0,I=I+Math.imul(xe,nt)|0,k=k+Math.imul(xe,it)|0,M=M+Math.imul(we,Ke)|0,I=I+Math.imul(we,Xe)|0,I=I+Math.imul(ve,Ke)|0,k=k+Math.imul(ve,Xe)|0,M=M+Math.imul(Ie,Ue)|0,I=I+Math.imul(Ie,et)|0,I=I+Math.imul(be,Ue)|0,k=k+Math.imul(be,et)|0,M=M+Math.imul(he,st)|0,I=I+Math.imul(he,Le)|0,I=I+Math.imul(de,st)|0,k=k+Math.imul(de,Le)|0,M=M+Math.imul(Ae,Pe)|0,I=I+Math.imul(Ae,Ze)|0,I=I+Math.imul(ue,Pe)|0,k=k+Math.imul(ue,Ze)|0;var ji=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(ji>>>26)|0,ji&=67108863,M=Math.imul(W,le),I=Math.imul(W,ye),I=I+Math.imul(z,le)|0,k=Math.imul(z,ye),M=M+Math.imul(m,Ee)|0,I=I+Math.imul(m,ge)|0,I=I+Math.imul(Q,Ee)|0,k=k+Math.imul(Q,ge)|0,M=M+Math.imul(Ne,je)|0,I=I+Math.imul(Ne,tt)|0,I=I+Math.imul(Je,je)|0,k=k+Math.imul(Je,tt)|0,M=M+Math.imul(Re,$e)|0,I=I+Math.imul(Re,rt)|0,I=I+Math.imul(He,$e)|0,k=k+Math.imul(He,rt)|0,M=M+Math.imul(Te,nt)|0,I=I+Math.imul(Te,it)|0,I=I+Math.imul(De,nt)|0,k=k+Math.imul(De,it)|0,M=M+Math.imul(Ye,Ke)|0,I=I+Math.imul(Ye,Xe)|0,I=I+Math.imul(xe,Ke)|0,k=k+Math.imul(xe,Xe)|0,M=M+Math.imul(we,Ue)|0,I=I+Math.imul(we,et)|0,I=I+Math.imul(ve,Ue)|0,k=k+Math.imul(ve,et)|0,M=M+Math.imul(Ie,st)|0,I=I+Math.imul(Ie,Le)|0,I=I+Math.imul(be,st)|0,k=k+Math.imul(be,Le)|0,M=M+Math.imul(he,Pe)|0,I=I+Math.imul(he,Ze)|0,I=I+Math.imul(de,Pe)|0,k=k+Math.imul(de,Ze)|0,M=M+Math.imul(Ae,Pt)|0,I=I+Math.imul(Ae,kt)|0,I=I+Math.imul(ue,Pt)|0,k=k+Math.imul(ue,kt)|0;var ko=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(ko>>>26)|0,ko&=67108863,M=Math.imul(W,Ee),I=Math.imul(W,ge),I=I+Math.imul(z,Ee)|0,k=Math.imul(z,ge),M=M+Math.imul(m,je)|0,I=I+Math.imul(m,tt)|0,I=I+Math.imul(Q,je)|0,k=k+Math.imul(Q,tt)|0,M=M+Math.imul(Ne,$e)|0,I=I+Math.imul(Ne,rt)|0,I=I+Math.imul(Je,$e)|0,k=k+Math.imul(Je,rt)|0,M=M+Math.imul(Re,nt)|0,I=I+Math.imul(Re,it)|0,I=I+Math.imul(He,nt)|0,k=k+Math.imul(He,it)|0,M=M+Math.imul(Te,Ke)|0,I=I+Math.imul(Te,Xe)|0,I=I+Math.imul(De,Ke)|0,k=k+Math.imul(De,Xe)|0,M=M+Math.imul(Ye,Ue)|0,I=I+Math.imul(Ye,et)|0,I=I+Math.imul(xe,Ue)|0,k=k+Math.imul(xe,et)|0,M=M+Math.imul(we,st)|0,I=I+Math.imul(we,Le)|0,I=I+Math.imul(ve,st)|0,k=k+Math.imul(ve,Le)|0,M=M+Math.imul(Ie,Pe)|0,I=I+Math.imul(Ie,Ze)|0,I=I+Math.imul(be,Pe)|0,k=k+Math.imul(be,Ze)|0,M=M+Math.imul(he,Pt)|0,I=I+Math.imul(he,kt)|0,I=I+Math.imul(de,Pt)|0,k=k+Math.imul(de,kt)|0;var xo=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(xo>>>26)|0,xo&=67108863,M=Math.imul(W,je),I=Math.imul(W,tt),I=I+Math.imul(z,je)|0,k=Math.imul(z,tt),M=M+Math.imul(m,$e)|0,I=I+Math.imul(m,rt)|0,I=I+Math.imul(Q,$e)|0,k=k+Math.imul(Q,rt)|0,M=M+Math.imul(Ne,nt)|0,I=I+Math.imul(Ne,it)|0,I=I+Math.imul(Je,nt)|0,k=k+Math.imul(Je,it)|0,M=M+Math.imul(Re,Ke)|0,I=I+Math.imul(Re,Xe)|0,I=I+Math.imul(He,Ke)|0,k=k+Math.imul(He,Xe)|0,M=M+Math.imul(Te,Ue)|0,I=I+Math.imul(Te,et)|0,I=I+Math.imul(De,Ue)|0,k=k+Math.imul(De,et)|0,M=M+Math.imul(Ye,st)|0,I=I+Math.imul(Ye,Le)|0,I=I+Math.imul(xe,st)|0,k=k+Math.imul(xe,Le)|0,M=M+Math.imul(we,Pe)|0,I=I+Math.imul(we,Ze)|0,I=I+Math.imul(ve,Pe)|0,k=k+Math.imul(ve,Ze)|0,M=M+Math.imul(Ie,Pt)|0,I=I+Math.imul(Ie,kt)|0,I=I+Math.imul(be,Pt)|0,k=k+Math.imul(be,kt)|0;var Uo=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(Uo>>>26)|0,Uo&=67108863,M=Math.imul(W,$e),I=Math.imul(W,rt),I=I+Math.imul(z,$e)|0,k=Math.imul(z,rt),M=M+Math.imul(m,nt)|0,I=I+Math.imul(m,it)|0,I=I+Math.imul(Q,nt)|0,k=k+Math.imul(Q,it)|0,M=M+Math.imul(Ne,Ke)|0,I=I+Math.imul(Ne,Xe)|0,I=I+Math.imul(Je,Ke)|0,k=k+Math.imul(Je,Xe)|0,M=M+Math.imul(Re,Ue)|0,I=I+Math.imul(Re,et)|0,I=I+Math.imul(He,Ue)|0,k=k+Math.imul(He,et)|0,M=M+Math.imul(Te,st)|0,I=I+Math.imul(Te,Le)|0,I=I+Math.imul(De,st)|0,k=k+Math.imul(De,Le)|0,M=M+Math.imul(Ye,Pe)|0,I=I+Math.imul(Ye,Ze)|0,I=I+Math.imul(xe,Pe)|0,k=k+Math.imul(xe,Ze)|0,M=M+Math.imul(we,Pt)|0,I=I+Math.imul(we,kt)|0,I=I+Math.imul(ve,Pt)|0,k=k+Math.imul(ve,kt)|0;var Lo=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(Lo>>>26)|0,Lo&=67108863,M=Math.imul(W,nt),I=Math.imul(W,it),I=I+Math.imul(z,nt)|0,k=Math.imul(z,it),M=M+Math.imul(m,Ke)|0,I=I+Math.imul(m,Xe)|0,I=I+Math.imul(Q,Ke)|0,k=k+Math.imul(Q,Xe)|0,M=M+Math.imul(Ne,Ue)|0,I=I+Math.imul(Ne,et)|0,I=I+Math.imul(Je,Ue)|0,k=k+Math.imul(Je,et)|0,M=M+Math.imul(Re,st)|0,I=I+Math.imul(Re,Le)|0,I=I+Math.imul(He,st)|0,k=k+Math.imul(He,Le)|0,M=M+Math.imul(Te,Pe)|0,I=I+Math.imul(Te,Ze)|0,I=I+Math.imul(De,Pe)|0,k=k+Math.imul(De,Ze)|0,M=M+Math.imul(Ye,Pt)|0,I=I+Math.imul(Ye,kt)|0,I=I+Math.imul(xe,Pt)|0,k=k+Math.imul(xe,kt)|0;var Hs=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(Hs>>>26)|0,Hs&=67108863,M=Math.imul(W,Ke),I=Math.imul(W,Xe),I=I+Math.imul(z,Ke)|0,k=Math.imul(z,Xe),M=M+Math.imul(m,Ue)|0,I=I+Math.imul(m,et)|0,I=I+Math.imul(Q,Ue)|0,k=k+Math.imul(Q,et)|0,M=M+Math.imul(Ne,st)|0,I=I+Math.imul(Ne,Le)|0,I=I+Math.imul(Je,st)|0,k=k+Math.imul(Je,Le)|0,M=M+Math.imul(Re,Pe)|0,I=I+Math.imul(Re,Ze)|0,I=I+Math.imul(He,Pe)|0,k=k+Math.imul(He,Ze)|0,M=M+Math.imul(Te,Pt)|0,I=I+Math.imul(Te,kt)|0,I=I+Math.imul(De,Pt)|0,k=k+Math.imul(De,kt)|0;var Sn=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(Sn>>>26)|0,Sn&=67108863,M=Math.imul(W,Ue),I=Math.imul(W,et),I=I+Math.imul(z,Ue)|0,k=Math.imul(z,et),M=M+Math.imul(m,st)|0,I=I+Math.imul(m,Le)|0,I=I+Math.imul(Q,st)|0,k=k+Math.imul(Q,Le)|0,M=M+Math.imul(Ne,Pe)|0,I=I+Math.imul(Ne,Ze)|0,I=I+Math.imul(Je,Pe)|0,k=k+Math.imul(Je,Ze)|0,M=M+Math.imul(Re,Pt)|0,I=I+Math.imul(Re,kt)|0,I=I+Math.imul(He,Pt)|0,k=k+Math.imul(He,kt)|0;var Po=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(Po>>>26)|0,Po&=67108863,M=Math.imul(W,st),I=Math.imul(W,Le),I=I+Math.imul(z,st)|0,k=Math.imul(z,Le),M=M+Math.imul(m,Pe)|0,I=I+Math.imul(m,Ze)|0,I=I+Math.imul(Q,Pe)|0,k=k+Math.imul(Q,Ze)|0,M=M+Math.imul(Ne,Pt)|0,I=I+Math.imul(Ne,kt)|0,I=I+Math.imul(Je,Pt)|0,k=k+Math.imul(Je,kt)|0;var Pa=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(Pa>>>26)|0,Pa&=67108863,M=Math.imul(W,Pe),I=Math.imul(W,Ze),I=I+Math.imul(z,Pe)|0,k=Math.imul(z,Ze),M=M+Math.imul(m,Pt)|0,I=I+Math.imul(m,kt)|0,I=I+Math.imul(Q,Pt)|0,k=k+Math.imul(Q,kt)|0;var Oo=(D+M|0)+((I&8191)<<13)|0;D=(k+(I>>>13)|0)+(Oo>>>26)|0,Oo&=67108863,M=Math.imul(W,Pt),I=Math.imul(W,kt),I=I+Math.imul(z,Pt)|0,k=Math.imul(z,kt);var Oa=(D+M|0)+((I&8191)<<13)|0;return D=(k+(I>>>13)|0)+(Oa>>>26)|0,Oa&=67108863,h[0]=ks,h[1]=Ai,h[2]=xs,h[3]=Us,h[4]=Ls,h[5]=Ps,h[6]=Os,h[7]=Ji,h[8]=ji,h[9]=ko,h[10]=xo,h[11]=Uo,h[12]=Lo,h[13]=Hs,h[14]=Sn,h[15]=Po,h[16]=Pa,h[17]=Oo,h[18]=Oa,D!==0&&(h[19]=D,w.length++),w};Math.imul||(U=P);function G(b,c,g){g.negative=c.negative^b.negative,g.length=b.length+c.length;for(var w=0,R=0,C=0;C<g.length-1;C++){var h=R;R=0;for(var D=w&67108863,M=Math.min(C,c.length-1),I=Math.max(0,C-b.length+1);I<=M;I++){var k=C-I,ne=b.words[k]|0,Ae=c.words[I]|0,ue=ne*Ae,pe=ue&67108863;h=h+(ue/67108864|0)|0,pe=pe+D|0,D=pe&67108863,h=h+(pe>>>26)|0,R+=h>>>26,h&=67108863}g.words[C]=D,w=h,h=R}return w!==0?g.words[C]=w:g.length--,g._strip()}function Y(b,c,g){return G(b,c,g)}i.prototype.mulTo=function(c,g){var w,R=this.length+c.length;return this.length===10&&c.length===10?w=U(this,c,g):R<63?w=P(this,c,g):R<1024?w=G(this,c,g):w=Y(this,c,g),w};function Z(b,c){this.x=b,this.y=c}Z.prototype.makeRBT=function(c){for(var g=new Array(c),w=i.prototype._countBits(c)-1,R=0;R<c;R++)g[R]=this.revBin(R,w,c);return g},Z.prototype.revBin=function(c,g,w){if(c===0||c===w-1)return c;for(var R=0,C=0;C<g;C++)R|=(c&1)<<g-C-1,c>>=1;return R},Z.prototype.permute=function(c,g,w,R,C,h){for(var D=0;D<h;D++)R[D]=g[c[D]],C[D]=w[c[D]]},Z.prototype.transform=function(c,g,w,R,C,h){this.permute(h,c,g,w,R,C);for(var D=1;D<C;D<<=1)for(var M=D<<1,I=Math.cos(2*Math.PI/M),k=Math.sin(2*Math.PI/M),ne=0;ne<C;ne+=M)for(var Ae=I,ue=k,pe=0;pe<D;pe++){var he=w[ne+pe],de=R[ne+pe],wt=w[ne+pe+D],Ie=R[ne+pe+D],be=Ae*wt-ue*Ie;Ie=Ae*Ie+ue*wt,wt=be,w[ne+pe]=he+wt,R[ne+pe]=de+Ie,w[ne+pe+D]=he-wt,R[ne+pe+D]=de-Ie,pe!==M&&(be=I*Ae-k*ue,ue=I*ue+k*Ae,Ae=be)}},Z.prototype.guessLen13b=function(c,g){var w=Math.max(g,c)|1,R=w&1,C=0;for(w=w/2|0;w;w=w>>>1)C++;return 1<<C+1+R},Z.prototype.conjugate=function(c,g,w){if(!(w<=1))for(var R=0;R<w/2;R++){var C=c[R];c[R]=c[w-R-1],c[w-R-1]=C,C=g[R],g[R]=-g[w-R-1],g[w-R-1]=-C}},Z.prototype.normalize13b=function(c,g){for(var w=0,R=0;R<g/2;R++){var C=Math.round(c[2*R+1]/g)*8192+Math.round(c[2*R]/g)+w;c[R]=C&67108863,C<67108864?w=0:w=C/67108864|0}return c},Z.prototype.convert13b=function(c,g,w,R){for(var C=0,h=0;h<g;h++)C=C+(c[h]|0),w[2*h]=C&8191,C=C>>>13,w[2*h+1]=C&8191,C=C>>>13;for(h=2*g;h<R;++h)w[h]=0;r(C===0),r((C&-8192)===0)},Z.prototype.stub=function(c){for(var g=new Array(c),w=0;w<c;w++)g[w]=0;return g},Z.prototype.mulp=function(c,g,w){var R=2*this.guessLen13b(c.length,g.length),C=this.makeRBT(R),h=this.stub(R),D=new Array(R),M=new Array(R),I=new Array(R),k=new Array(R),ne=new Array(R),Ae=new Array(R),ue=w.words;ue.length=R,this.convert13b(c.words,c.length,D,R),this.convert13b(g.words,g.length,k,R),this.transform(D,h,M,I,R,C),this.transform(k,h,ne,Ae,R,C);for(var pe=0;pe<R;pe++){var he=M[pe]*ne[pe]-I[pe]*Ae[pe];I[pe]=M[pe]*Ae[pe]+I[pe]*ne[pe],M[pe]=he}return this.conjugate(M,I,R),this.transform(M,I,ue,h,R,C),this.conjugate(ue,h,R),this.normalize13b(ue,R),w.negative=c.negative^g.negative,w.length=c.length+g.length,w._strip()},i.prototype.mul=function(c){var g=new i(null);return g.words=new Array(this.length+c.length),this.mulTo(c,g)},i.prototype.mulf=function(c){var g=new i(null);return g.words=new Array(this.length+c.length),Y(this,c,g)},i.prototype.imul=function(c){return this.clone().mulTo(c,this)},i.prototype.imuln=function(c){var g=c<0;g&&(c=-c),r(typeof c=="number"),r(c<67108864);for(var w=0,R=0;R<this.length;R++){var C=(this.words[R]|0)*c,h=(C&67108863)+(w&67108863);w>>=26,w+=C/67108864|0,w+=h>>>26,this.words[R]=h&67108863}return w!==0&&(this.words[R]=w,this.length++),this.length=c===0?1:this.length,g?this.ineg():this},i.prototype.muln=function(c){return this.clone().imuln(c)},i.prototype.sqr=function(){return this.mul(this)},i.prototype.isqr=function(){return this.imul(this.clone())},i.prototype.pow=function(c){var g=N(c);if(g.length===0)return new i(1);for(var w=this,R=0;R<g.length&&g[R]===0;R++,w=w.sqr());if(++R<g.length)for(var C=w.sqr();R<g.length;R++,C=C.sqr())g[R]!==0&&(w=w.mul(C));return w},i.prototype.iushln=function(c){r(typeof c=="number"&&c>=0);var g=c%26,w=(c-g)/26,R=67108863>>>26-g<<26-g,C;if(g!==0){var h=0;for(C=0;C<this.length;C++){var D=this.words[C]&R,M=(this.words[C]|0)-D<<g;this.words[C]=M|h,h=D>>>26-g}h&&(this.words[C]=h,this.length++)}if(w!==0){for(C=this.length-1;C>=0;C--)this.words[C+w]=this.words[C];for(C=0;C<w;C++)this.words[C]=0;this.length+=w}return this._strip()},i.prototype.ishln=function(c){return r(this.negative===0),this.iushln(c)},i.prototype.iushrn=function(c,g,w){r(typeof c=="number"&&c>=0);var R;g?R=(g-g%26)/26:R=0;var C=c%26,h=Math.min((c-C)/26,this.length),D=67108863^67108863>>>C<<C,M=w;if(R-=h,R=Math.max(0,R),M){for(var I=0;I<h;I++)M.words[I]=this.words[I];M.length=h}if(h!==0)if(this.length>h)for(this.length-=h,I=0;I<this.length;I++)this.words[I]=this.words[I+h];else this.words[0]=0,this.length=1;var k=0;for(I=this.length-1;I>=0&&(k!==0||I>=R);I--){var ne=this.words[I]|0;this.words[I]=k<<26-C|ne>>>C,k=ne&D}return M&&k!==0&&(M.words[M.length++]=k),this.length===0&&(this.words[0]=0,this.length=1),this._strip()},i.prototype.ishrn=function(c,g,w){return r(this.negative===0),this.iushrn(c,g,w)},i.prototype.shln=function(c){return this.clone().ishln(c)},i.prototype.ushln=function(c){return this.clone().iushln(c)},i.prototype.shrn=function(c){return this.clone().ishrn(c)},i.prototype.ushrn=function(c){return this.clone().iushrn(c)},i.prototype.testn=function(c){r(typeof c=="number"&&c>=0);var g=c%26,w=(c-g)/26,R=1<<g;if(this.length<=w)return!1;var C=this.words[w];return!!(C&R)},i.prototype.imaskn=function(c){r(typeof c=="number"&&c>=0);var g=c%26,w=(c-g)/26;if(r(this.negative===0,"imaskn works only with positive numbers"),this.length<=w)return this;if(g!==0&&w++,this.length=Math.min(w,this.length),g!==0){var R=67108863^67108863>>>g<<g;this.words[this.length-1]&=R}return this.length===0&&(this.words[0]=0,this.length=1),this._strip()},i.prototype.maskn=function(c){return this.clone().imaskn(c)},i.prototype.iaddn=function(c){return r(typeof c=="number"),r(c<67108864),c<0?this.isubn(-c):this.negative!==0?this.length===1&&(this.words[0]|0)<=c?(this.words[0]=c-(this.words[0]|0),this.negative=0,this):(this.negative=0,this.isubn(c),this.negative=1,this):this._iaddn(c)},i.prototype._iaddn=function(c){this.words[0]+=c;for(var g=0;g<this.length&&this.words[g]>=67108864;g++)this.words[g]-=67108864,g===this.length-1?this.words[g+1]=1:this.words[g+1]++;return this.length=Math.max(this.length,g+1),this},i.prototype.isubn=function(c){if(r(typeof c=="number"),r(c<67108864),c<0)return this.iaddn(-c);if(this.negative!==0)return this.negative=0,this.iaddn(c),this.negative=1,this;if(this.words[0]-=c,this.length===1&&this.words[0]<0)this.words[0]=-this.words[0],this.negative=1;else for(var g=0;g<this.length&&this.words[g]<0;g++)this.words[g]+=67108864,this.words[g+1]-=1;return this._strip()},i.prototype.addn=function(c){return this.clone().iaddn(c)},i.prototype.subn=function(c){return this.clone().isubn(c)},i.prototype.iabs=function(){return this.negative=0,this},i.prototype.abs=function(){return this.clone().iabs()},i.prototype._ishlnsubmul=function(c,g,w){var R=c.length+w,C;this._expand(R);var h,D=0;for(C=0;C<c.length;C++){h=(this.words[C+w]|0)+D;var M=(c.words[C]|0)*g;h-=M&67108863,D=(h>>26)-(M/67108864|0),this.words[C+w]=h&67108863}for(;C<this.length-w;C++)h=(this.words[C+w]|0)+D,D=h>>26,this.words[C+w]=h&67108863;if(D===0)return this._strip();for(r(D===-1),D=0,C=0;C<this.length;C++)h=-(this.words[C]|0)+D,D=h>>26,this.words[C]=h&67108863;return this.negative=1,this._strip()},i.prototype._wordDiv=function(c,g){var w=this.length-c.length,R=this.clone(),C=c,h=C.words[C.length-1]|0,D=this._countBits(h);w=26-D,w!==0&&(C=C.ushln(w),R.iushln(w),h=C.words[C.length-1]|0);var M=R.length-C.length,I;if(g!=="mod"){I=new i(null),I.length=M+1,I.words=new Array(I.length);for(var k=0;k<I.length;k++)I.words[k]=0}var ne=R.clone()._ishlnsubmul(C,1,M);ne.negative===0&&(R=ne,I&&(I.words[M]=1));for(var Ae=M-1;Ae>=0;Ae--){var ue=(R.words[C.length+Ae]|0)*67108864+(R.words[C.length+Ae-1]|0);for(ue=Math.min(ue/h|0,67108863),R._ishlnsubmul(C,ue,Ae);R.negative!==0;)ue--,R.negative=0,R._ishlnsubmul(C,1,Ae),R.isZero()||(R.negative^=1);I&&(I.words[Ae]=ue)}return I&&I._strip(),R._strip(),g!=="div"&&w!==0&&R.iushrn(w),{div:I||null,mod:R}},i.prototype.divmod=function(c,g,w){if(r(!c.isZero()),this.isZero())return{div:new i(0),mod:new i(0)};var R,C,h;return this.negative!==0&&c.negative===0?(h=this.neg().divmod(c,g),g!=="mod"&&(R=h.div.neg()),g!=="div"&&(C=h.mod.neg(),w&&C.negative!==0&&C.iadd(c)),{div:R,mod:C}):this.negative===0&&c.negative!==0?(h=this.divmod(c.neg(),g),g!=="mod"&&(R=h.div.neg()),{div:R,mod:h.mod}):(this.negative&c.negative)!==0?(h=this.neg().divmod(c.neg(),g),g!=="div"&&(C=h.mod.neg(),w&&C.negative!==0&&C.isub(c)),{div:h.div,mod:C}):c.length>this.length||this.cmp(c)<0?{div:new i(0),mod:this}:c.length===1?g==="div"?{div:this.divn(c.words[0]),mod:null}:g==="mod"?{div:null,mod:new i(this.modrn(c.words[0]))}:{div:this.divn(c.words[0]),mod:new i(this.modrn(c.words[0]))}:this._wordDiv(c,g)},i.prototype.div=function(c){return this.divmod(c,"div",!1).div},i.prototype.mod=function(c){return this.divmod(c,"mod",!1).mod},i.prototype.umod=function(c){return this.divmod(c,"mod",!0).mod},i.prototype.divRound=function(c){var g=this.divmod(c);if(g.mod.isZero())return g.div;var w=g.div.negative!==0?g.mod.isub(c):g.mod,R=c.ushrn(1),C=c.andln(1),h=w.cmp(R);return h<0||C===1&&h===0?g.div:g.div.negative!==0?g.div.isubn(1):g.div.iaddn(1)},i.prototype.modrn=function(c){var g=c<0;g&&(c=-c),r(c<=67108863);for(var w=(1<<26)%c,R=0,C=this.length-1;C>=0;C--)R=(w*R+(this.words[C]|0))%c;return g?-R:R},i.prototype.modn=function(c){return this.modrn(c)},i.prototype.idivn=function(c){var g=c<0;g&&(c=-c),r(c<=67108863);for(var w=0,R=this.length-1;R>=0;R--){var C=(this.words[R]|0)+w*67108864;this.words[R]=C/c|0,w=C%c}return this._strip(),g?this.ineg():this},i.prototype.divn=function(c){return this.clone().idivn(c)},i.prototype.egcd=function(c){r(c.negative===0),r(!c.isZero());var g=this,w=c.clone();g.negative!==0?g=g.umod(c):g=g.clone();for(var R=new i(1),C=new i(0),h=new i(0),D=new i(1),M=0;g.isEven()&&w.isEven();)g.iushrn(1),w.iushrn(1),++M;for(var I=w.clone(),k=g.clone();!g.isZero();){for(var ne=0,Ae=1;(g.words[0]&Ae)===0&&ne<26;++ne,Ae<<=1);if(ne>0)for(g.iushrn(ne);ne-- >0;)(R.isOdd()||C.isOdd())&&(R.iadd(I),C.isub(k)),R.iushrn(1),C.iushrn(1);for(var ue=0,pe=1;(w.words[0]&pe)===0&&ue<26;++ue,pe<<=1);if(ue>0)for(w.iushrn(ue);ue-- >0;)(h.isOdd()||D.isOdd())&&(h.iadd(I),D.isub(k)),h.iushrn(1),D.iushrn(1);g.cmp(w)>=0?(g.isub(w),R.isub(h),C.isub(D)):(w.isub(g),h.isub(R),D.isub(C))}return{a:h,b:D,gcd:w.iushln(M)}},i.prototype._invmp=function(c){r(c.negative===0),r(!c.isZero());var g=this,w=c.clone();g.negative!==0?g=g.umod(c):g=g.clone();for(var R=new i(1),C=new i(0),h=w.clone();g.cmpn(1)>0&&w.cmpn(1)>0;){for(var D=0,M=1;(g.words[0]&M)===0&&D<26;++D,M<<=1);if(D>0)for(g.iushrn(D);D-- >0;)R.isOdd()&&R.iadd(h),R.iushrn(1);for(var I=0,k=1;(w.words[0]&k)===0&&I<26;++I,k<<=1);if(I>0)for(w.iushrn(I);I-- >0;)C.isOdd()&&C.iadd(h),C.iushrn(1);g.cmp(w)>=0?(g.isub(w),R.isub(C)):(w.isub(g),C.isub(R))}var ne;return g.cmpn(1)===0?ne=R:ne=C,ne.cmpn(0)<0&&ne.iadd(c),ne},i.prototype.gcd=function(c){if(this.isZero())return c.abs();if(c.isZero())return this.abs();var g=this.clone(),w=c.clone();g.negative=0,w.negative=0;for(var R=0;g.isEven()&&w.isEven();R++)g.iushrn(1),w.iushrn(1);do{for(;g.isEven();)g.iushrn(1);for(;w.isEven();)w.iushrn(1);var C=g.cmp(w);if(C<0){var h=g;g=w,w=h}else if(C===0||w.cmpn(1)===0)break;g.isub(w)}while(!0);return w.iushln(R)},i.prototype.invm=function(c){return this.egcd(c).a.umod(c)},i.prototype.isEven=function(){return(this.words[0]&1)===0},i.prototype.isOdd=function(){return(this.words[0]&1)===1},i.prototype.andln=function(c){return this.words[0]&c},i.prototype.bincn=function(c){r(typeof c=="number");var g=c%26,w=(c-g)/26,R=1<<g;if(this.length<=w)return this._expand(w+1),this.words[w]|=R,this;for(var C=R,h=w;C!==0&&h<this.length;h++){var D=this.words[h]|0;D+=C,C=D>>>26,D&=67108863,this.words[h]=D}return C!==0&&(this.words[h]=C,this.length++),this},i.prototype.isZero=function(){return this.length===1&&this.words[0]===0},i.prototype.cmpn=function(c){var g=c<0;if(this.negative!==0&&!g)return-1;if(this.negative===0&&g)return 1;this._strip();var w;if(this.length>1)w=1;else{g&&(c=-c),r(c<=67108863,"Number is too big");var R=this.words[0]|0;w=R===c?0:R<c?-1:1}return this.negative!==0?-w|0:w},i.prototype.cmp=function(c){if(this.negative!==0&&c.negative===0)return-1;if(this.negative===0&&c.negative!==0)return 1;var g=this.ucmp(c);return this.negative!==0?-g|0:g},i.prototype.ucmp=function(c){if(this.length>c.length)return 1;if(this.length<c.length)return-1;for(var g=0,w=this.length-1;w>=0;w--){var R=this.words[w]|0,C=c.words[w]|0;if(R!==C){R<C?g=-1:R>C&&(g=1);break}}return g},i.prototype.gtn=function(c){return this.cmpn(c)===1},i.prototype.gt=function(c){return this.cmp(c)===1},i.prototype.gten=function(c){return this.cmpn(c)>=0},i.prototype.gte=function(c){return this.cmp(c)>=0},i.prototype.ltn=function(c){return this.cmpn(c)===-1},i.prototype.lt=function(c){return this.cmp(c)===-1},i.prototype.lten=function(c){return this.cmpn(c)<=0},i.prototype.lte=function(c){return this.cmp(c)<=0},i.prototype.eqn=function(c){return this.cmpn(c)===0},i.prototype.eq=function(c){return this.cmp(c)===0},i.red=function(c){return new E(c)},i.prototype.toRed=function(c){return r(!this.red,"Already a number in reduction context"),r(this.negative===0,"red works only with positives"),c.convertTo(this)._forceRed(c)},i.prototype.fromRed=function(){return r(this.red,"fromRed works only with numbers in reduction context"),this.red.convertFrom(this)},i.prototype._forceRed=function(c){return this.red=c,this},i.prototype.forceRed=function(c){return r(!this.red,"Already a number in reduction context"),this._forceRed(c)},i.prototype.redAdd=function(c){return r(this.red,"redAdd works only with red numbers"),this.red.add(this,c)},i.prototype.redIAdd=function(c){return r(this.red,"redIAdd works only with red numbers"),this.red.iadd(this,c)},i.prototype.redSub=function(c){return r(this.red,"redSub works only with red numbers"),this.red.sub(this,c)},i.prototype.redISub=function(c){return r(this.red,"redISub works only with red numbers"),this.red.isub(this,c)},i.prototype.redShl=function(c){return r(this.red,"redShl works only with red numbers"),this.red.shl(this,c)},i.prototype.redMul=function(c){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,c),this.red.mul(this,c)},i.prototype.redIMul=function(c){return r(this.red,"redMul works only with red numbers"),this.red._verify2(this,c),this.red.imul(this,c)},i.prototype.redSqr=function(){return r(this.red,"redSqr works only with red numbers"),this.red._verify1(this),this.red.sqr(this)},i.prototype.redISqr=function(){return r(this.red,"redISqr works only with red numbers"),this.red._verify1(this),this.red.isqr(this)},i.prototype.redSqrt=function(){return r(this.red,"redSqrt works only with red numbers"),this.red._verify1(this),this.red.sqrt(this)},i.prototype.redInvm=function(){return r(this.red,"redInvm works only with red numbers"),this.red._verify1(this),this.red.invm(this)},i.prototype.redNeg=function(){return r(this.red,"redNeg works only with red numbers"),this.red._verify1(this),this.red.neg(this)},i.prototype.redPow=function(c){return r(this.red&&!c.red,"redPow(normalNum)"),this.red._verify1(this),this.red.pow(this,c)};var ee={k256:null,p224:null,p192:null,p25519:null};function j(b,c){this.name=b,this.p=new i(c,16),this.n=this.p.bitLength(),this.k=new i(1).iushln(this.n).isub(this.p),this.tmp=this._tmp()}j.prototype._tmp=function(){var c=new i(null);return c.words=new Array(Math.ceil(this.n/13)),c},j.prototype.ireduce=function(c){var g=c,w;do this.split(g,this.tmp),g=this.imulK(g),g=g.iadd(this.tmp),w=g.bitLength();while(w>this.n);var R=w<this.n?-1:g.ucmp(this.p);return R===0?(g.words[0]=0,g.length=1):R>0?g.isub(this.p):g.strip!==void 0?g.strip():g._strip(),g},j.prototype.split=function(c,g){c.iushrn(this.n,0,g)},j.prototype.imulK=function(c){return c.imul(this.k)};function se(){j.call(this,"k256","ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe fffffc2f")}n(se,j),se.prototype.split=function(c,g){for(var w=4194303,R=Math.min(c.length,9),C=0;C<R;C++)g.words[C]=c.words[C];if(g.length=R,c.length<=9){c.words[0]=0,c.length=1;return}var h=c.words[9];for(g.words[g.length++]=h&w,C=10;C<c.length;C++){var D=c.words[C]|0;c.words[C-10]=(D&w)<<4|h>>>22,h=D}h>>>=22,c.words[C-10]=h,h===0&&c.length>10?c.length-=10:c.length-=9},se.prototype.imulK=function(c){c.words[c.length]=0,c.words[c.length+1]=0,c.length+=2;for(var g=0,w=0;w<c.length;w++){var R=c.words[w]|0;g+=R*977,c.words[w]=g&67108863,g=R*64+(g/67108864|0)}return c.words[c.length-1]===0&&(c.length--,c.words[c.length-1]===0&&c.length--),c};function ie(){j.call(this,"p224","ffffffff ffffffff ffffffff ffffffff 00000000 00000000 00000001")}n(ie,j);function ce(){j.call(this,"p192","ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff")}n(ce,j);function H(){j.call(this,"25519","7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed")}n(H,j),H.prototype.imulK=function(c){for(var g=0,w=0;w<c.length;w++){var R=(c.words[w]|0)*19+g,C=R&67108863;R>>>=26,c.words[w]=C,g=R}return g!==0&&(c.words[c.length++]=g),c},i._prime=function(c){if(ee[c])return ee[c];var g;if(c==="k256")g=new se;else if(c==="p224")g=new ie;else if(c==="p192")g=new ce;else if(c==="p25519")g=new H;else throw new Error("Unknown prime "+c);return ee[c]=g,g};function E(b){if(typeof b=="string"){var c=i._prime(b);this.m=c.p,this.prime=c}else r(b.gtn(1),"modulus must be greater than 1"),this.m=b,this.prime=null}E.prototype._verify1=function(c){r(c.negative===0,"red works only with positives"),r(c.red,"red works only with red numbers")},E.prototype._verify2=function(c,g){r((c.negative|g.negative)===0,"red works only with positives"),r(c.red&&c.red===g.red,"red works only with red numbers")},E.prototype.imod=function(c){return this.prime?this.prime.ireduce(c)._forceRed(this):(f(c,c.umod(this.m)._forceRed(this)),c)},E.prototype.neg=function(c){return c.isZero()?c.clone():this.m.sub(c)._forceRed(this)},E.prototype.add=function(c,g){this._verify2(c,g);var w=c.add(g);return w.cmp(this.m)>=0&&w.isub(this.m),w._forceRed(this)},E.prototype.iadd=function(c,g){this._verify2(c,g);var w=c.iadd(g);return w.cmp(this.m)>=0&&w.isub(this.m),w},E.prototype.sub=function(c,g){this._verify2(c,g);var w=c.sub(g);return w.cmpn(0)<0&&w.iadd(this.m),w._forceRed(this)},E.prototype.isub=function(c,g){this._verify2(c,g);var w=c.isub(g);return w.cmpn(0)<0&&w.iadd(this.m),w},E.prototype.shl=function(c,g){return this._verify1(c),this.imod(c.ushln(g))},E.prototype.imul=function(c,g){return this._verify2(c,g),this.imod(c.imul(g))},E.prototype.mul=function(c,g){return this._verify2(c,g),this.imod(c.mul(g))},E.prototype.isqr=function(c){return this.imul(c,c.clone())},E.prototype.sqr=function(c){return this.mul(c,c)},E.prototype.sqrt=function(c){if(c.isZero())return c.clone();var g=this.m.andln(3);if(r(g%2===1),g===3){var w=this.m.add(new i(1)).iushrn(2);return this.pow(c,w)}for(var R=this.m.subn(1),C=0;!R.isZero()&&R.andln(1)===0;)C++,R.iushrn(1);r(!R.isZero());var h=new i(1).toRed(this),D=h.redNeg(),M=this.m.subn(1).iushrn(1),I=this.m.bitLength();for(I=new i(2*I*I).toRed(this);this.pow(I,M).cmp(D)!==0;)I.redIAdd(D);for(var k=this.pow(I,R),ne=this.pow(c,R.addn(1).iushrn(1)),Ae=this.pow(c,R),ue=C;Ae.cmp(h)!==0;){for(var pe=Ae,he=0;pe.cmp(h)!==0;he++)pe=pe.redSqr();r(he<ue);var de=this.pow(k,new i(1).iushln(ue-he-1));ne=ne.redMul(de),k=de.redSqr(),Ae=Ae.redMul(k),ue=he}return ne},E.prototype.invm=function(c){var g=c._invmp(this.m);return g.negative!==0?(g.negative=0,this.imod(g).redNeg()):this.imod(g)},E.prototype.pow=function(c,g){if(g.isZero())return new i(1).toRed(this);if(g.cmpn(1)===0)return c.clone();var w=4,R=new Array(1<<w);R[0]=new i(1).toRed(this),R[1]=c;for(var C=2;C<R.length;C++)R[C]=this.mul(R[C-1],c);var h=R[0],D=0,M=0,I=g.bitLength()%26;for(I===0&&(I=26),C=g.length-1;C>=0;C--){for(var k=g.words[C],ne=I-1;ne>=0;ne--){var Ae=k>>ne&1;if(h!==R[0]&&(h=this.sqr(h)),Ae===0&&D===0){M=0;continue}D<<=1,D|=Ae,M++,!(M!==w&&(C!==0||ne!==0))&&(h=this.mul(h,R[D]),M=0,D=0)}I=26}return h},E.prototype.convertTo=function(c){var g=c.umod(this.m);return g===c?g.clone():g},E.prototype.convertFrom=function(c){var g=c.clone();return g.red=null,g},i.mont=function(c){return new v(c)};function v(b){E.call(this,b),this.shift=this.m.bitLength(),this.shift%26!==0&&(this.shift+=26-this.shift%26),this.r=new i(1).iushln(this.shift),this.r2=this.imod(this.r.sqr()),this.rinv=this.r._invmp(this.m),this.minv=this.rinv.mul(this.r).isubn(1).div(this.m),this.minv=this.minv.umod(this.r),this.minv=this.r.sub(this.minv)}n(v,E),v.prototype.convertTo=function(c){return this.imod(c.ushln(this.shift))},v.prototype.convertFrom=function(c){var g=this.imod(c.mul(this.rinv));return g.red=null,g},v.prototype.imul=function(c,g){if(c.isZero()||g.isZero())return c.words[0]=0,c.length=1,c;var w=c.imul(g),R=w.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),C=w.isub(R).iushrn(this.shift),h=C;return C.cmp(this.m)>=0?h=C.isub(this.m):C.cmpn(0)<0&&(h=C.iadd(this.m)),h._forceRed(this)},v.prototype.mul=function(c,g){if(c.isZero()||g.isZero())return new i(0)._forceRed(this);var w=c.mul(g),R=w.maskn(this.shift).mul(this.minv).imaskn(this.shift).mul(this.m),C=w.isub(R).iushrn(this.shift),h=C;return C.cmp(this.m)>=0?h=C.isub(this.m):C.cmpn(0)<0&&(h=C.iadd(this.m)),h._forceRed(this)},v.prototype.invm=function(c){var g=this.imod(c._invmp(this.m).mul(this.r2));return g._forceRed(this)}})(typeof YS>"u"||YS,lP)});var vy=x((RMe,gP)=>{"use strict";var qc=_y(),hge=If(),dge=at().Buffer;function hP(e){var t=e.modulus.byteLength(),r;do r=new qc(hge(t));while(r.cmp(e.modulus)>=0||!r.umod(e.prime1)||!r.umod(e.prime2));return r}function gge(e){var t=hP(e),r=t.toRed(qc.mont(e.modulus)).redPow(new qc(e.publicExponent)).fromRed();return{blinder:r,unblinder:t.invm(e.modulus)}}function dP(e,t){var r=gge(t),n=t.modulus.byteLength(),i=new qc(e).mul(r.blinder).umod(t.modulus),s=i.toRed(qc.mont(t.prime1)),o=i.toRed(qc.mont(t.prime2)),a=t.coefficient,A=t.prime1,f=t.prime2,l=s.redPow(t.exponent1).fromRed(),p=o.redPow(t.exponent2).fromRed(),B=l.isub(p).imul(a).umod(A).imul(f);return p.iadd(B).imul(r.unblinder).umod(t.modulus).toArrayLike(dge,"be",n)}dP.getr=hP;gP.exports=dP});var pP=x((DMe,pge)=>{pge.exports={name:"elliptic",version:"6.6.1",description:"EC cryptography",main:"lib/elliptic.js",files:["lib"],scripts:{lint:"eslint lib test","lint:fix":"npm run lint -- --fix",unit:"istanbul test _mocha --reporter=spec test/index.js",test:"npm run lint && npm run unit",version:"grunt dist && git add dist/"},repository:{type:"git",url:"git@github.com:indutny/elliptic"},keywords:["EC","Elliptic","curve","Cryptography"],author:"Fedor Indutny <fedor@indutny.com>",license:"MIT",bugs:{url:"https://github.com/indutny/elliptic/issues"},homepage:"https://github.com/indutny/elliptic",devDependencies:{brfs:"^2.0.2",coveralls:"^3.1.0",eslint:"^7.6.0",grunt:"^1.2.1","grunt-browserify":"^5.3.0","grunt-cli":"^1.3.2","grunt-contrib-connect":"^3.0.0","grunt-contrib-copy":"^1.0.0","grunt-contrib-uglify":"^5.0.0","grunt-mocha-istanbul":"^5.0.2","grunt-saucelabs":"^9.0.1",istanbul:"^0.4.5",mocha:"^8.0.1"},dependencies:{"bn.js":"^4.11.9",brorand:"^1.1.0","hash.js":"^1.0.0","hmac-drbg":"^1.0.1",inherits:"^2.0.4","minimalistic-assert":"^1.0.1","minimalistic-crypto-utils":"^1.0.1"}}});var WS=x(mP=>{"use strict";var Ry=mP;function Ege(e,t){if(Array.isArray(e))return e.slice();if(!e)return[];var r=[];if(typeof e!="string"){for(var n=0;n<e.length;n++)r[n]=e[n]|0;return r}if(t==="hex"){e=e.replace(/[^a-z0-9]+/ig,""),e.length%2!==0&&(e="0"+e);for(var n=0;n<e.length;n+=2)r.push(parseInt(e[n]+e[n+1],16))}else for(var n=0;n<e.length;n++){var i=e.charCodeAt(n),s=i>>8,o=i&255;s?r.push(s,o):r.push(o)}return r}Ry.toArray=Ege;function EP(e){return e.length===1?"0"+e:e}Ry.zero2=EP;function yP(e){for(var t="",r=0;r<e.length;r++)t+=EP(e[r].toString(16));return t}Ry.toHex=yP;Ry.encode=function(t,r){return r==="hex"?yP(t):t}});var Kn=x(BP=>{"use strict";var fs=BP,yge=kr(),mge=zn(),Dy=WS();fs.assert=mge;fs.toArray=Dy.toArray;fs.zero2=Dy.zero2;fs.toHex=Dy.toHex;fs.encode=Dy.encode;function Bge(e,t,r){var n=new Array(Math.max(e.bitLength(),r)+1),i;for(i=0;i<n.length;i+=1)n[i]=0;var s=1<<t+1,o=e.clone();for(i=0;i<n.length;i++){var a,A=o.andln(s-1);o.isOdd()?(A>(s>>1)-1?a=(s>>1)-A:a=A,o.isubn(a)):a=0,n[i]=a,o.iushrn(1)}return n}fs.getNAF=Bge;function Ige(e,t){var r=[[],[]];e=e.clone(),t=t.clone();for(var n=0,i=0,s;e.cmpn(-n)>0||t.cmpn(-i)>0;){var o=e.andln(3)+n&3,a=t.andln(3)+i&3;o===3&&(o=-1),a===3&&(a=-1);var A;(o&1)===0?A=0:(s=e.andln(7)+n&7,(s===3||s===5)&&a===2?A=-o:A=o),r[0].push(A);var f;(a&1)===0?f=0:(s=t.andln(7)+i&7,(s===3||s===5)&&o===2?f=-a:f=a),r[1].push(f),2*n===A+1&&(n=1-n),2*i===f+1&&(i=1-i),e.iushrn(1),t.iushrn(1)}return r}fs.getJSF=Ige;function bge(e,t,r){var n="_"+t;e.prototype[t]=function(){return this[n]!==void 0?this[n]:this[n]=r.call(this)}}fs.cachedProperty=bge;function Cge(e){return typeof e=="string"?fs.toArray(e,"hex"):e}fs.parseBytes=Cge;function Qge(e){return new yge(e,"hex","le")}fs.intFromLE=Qge});var Ud=x((MMe,IP)=>{"use strict";var kf=kr(),xd=Kn(),Ty=xd.getNAF,wge=xd.getJSF,Ny=xd.assert;function cA(e,t){this.type=e,this.p=new kf(t.p,16),this.red=t.prime?kf.red(t.prime):kf.mont(this.p),this.zero=new kf(0).toRed(this.red),this.one=new kf(1).toRed(this.red),this.two=new kf(2).toRed(this.red),this.n=t.n&&new kf(t.n,16),this.g=t.g&&this.pointFromJSON(t.g,t.gRed),this._wnafT1=new Array(4),this._wnafT2=new Array(4),this._wnafT3=new Array(4),this._wnafT4=new Array(4),this._bitLength=this.n?this.n.bitLength():0;var r=this.n&&this.p.div(this.n);!r||r.cmpn(100)>0?this.redN=null:(this._maxwellTrick=!0,this.redN=this.n.toRed(this.red))}IP.exports=cA;cA.prototype.point=function(){throw new Error("Not implemented")};cA.prototype.validate=function(){throw new Error("Not implemented")};cA.prototype._fixedNafMul=function(t,r){Ny(t.precomputed);var n=t._getDoubles(),i=Ty(r,1,this._bitLength),s=(1<<n.step+1)-(n.step%2===0?2:1);s/=3;var o=[],a,A;for(a=0;a<i.length;a+=n.step){A=0;for(var f=a+n.step-1;f>=a;f--)A=(A<<1)+i[f];o.push(A)}for(var l=this.jpoint(null,null,null),p=this.jpoint(null,null,null),B=s;B>0;B--){for(a=0;a<o.length;a++)A=o[a],A===B?p=p.mixedAdd(n.points[a]):A===-B&&(p=p.mixedAdd(n.points[a].neg()));l=l.add(p)}return l.toP()};cA.prototype._wnafMul=function(t,r){var n=4,i=t._getNAFPoints(n);n=i.wnd;for(var s=i.points,o=Ty(r,n,this._bitLength),a=this.jpoint(null,null,null),A=o.length-1;A>=0;A--){for(var f=0;A>=0&&o[A]===0;A--)f++;if(A>=0&&f++,a=a.dblp(f),A<0)break;var l=o[A];Ny(l!==0),t.type==="affine"?l>0?a=a.mixedAdd(s[l-1>>1]):a=a.mixedAdd(s[-l-1>>1].neg()):l>0?a=a.add(s[l-1>>1]):a=a.add(s[-l-1>>1].neg())}return t.type==="affine"?a.toP():a};cA.prototype._wnafMulAdd=function(t,r,n,i,s){var o=this._wnafT1,a=this._wnafT2,A=this._wnafT3,f=0,l,p,B;for(l=0;l<i;l++){B=r[l];var S=B._getNAFPoints(t);o[l]=S.wnd,a[l]=S.points}for(l=i-1;l>=1;l-=2){var _=l-1,N=l;if(o[_]!==1||o[N]!==1){A[_]=Ty(n[_],o[_],this._bitLength),A[N]=Ty(n[N],o[N],this._bitLength),f=Math.max(A[_].length,f),f=Math.max(A[N].length,f);continue}var P=[r[_],null,null,r[N]];r[_].y.cmp(r[N].y)===0?(P[1]=r[_].add(r[N]),P[2]=r[_].toJ().mixedAdd(r[N].neg())):r[_].y.cmp(r[N].y.redNeg())===0?(P[1]=r[_].toJ().mixedAdd(r[N]),P[2]=r[_].add(r[N].neg())):(P[1]=r[_].toJ().mixedAdd(r[N]),P[2]=r[_].toJ().mixedAdd(r[N].neg()));var U=[-3,-1,-5,-7,0,7,5,1,3],G=wge(n[_],n[N]);for(f=Math.max(G[0].length,f),A[_]=new Array(f),A[N]=new Array(f),p=0;p<f;p++){var Y=G[0][p]|0,Z=G[1][p]|0;A[_][p]=U[(Y+1)*3+(Z+1)],A[N][p]=0,a[_]=P}}var ee=this.jpoint(null,null,null),j=this._wnafT4;for(l=f;l>=0;l--){for(var se=0;l>=0;){var ie=!0;for(p=0;p<i;p++)j[p]=A[p][l]|0,j[p]!==0&&(ie=!1);if(!ie)break;se++,l--}if(l>=0&&se++,ee=ee.dblp(se),l<0)break;for(p=0;p<i;p++){var ce=j[p];ce!==0&&(ce>0?B=a[p][ce-1>>1]:ce<0&&(B=a[p][-ce-1>>1].neg()),B.type==="affine"?ee=ee.mixedAdd(B):ee=ee.add(B))}}for(l=0;l<i;l++)a[l]=null;return s?ee:ee.toP()};function wi(e,t){this.curve=e,this.type=t,this.precomputed=null}cA.BasePoint=wi;wi.prototype.eq=function(){throw new Error("Not implemented")};wi.prototype.validate=function(){return this.curve.validate(this)};cA.prototype.decodePoint=function(t,r){t=xd.toArray(t,r);var n=this.p.byteLength();if((t[0]===4||t[0]===6||t[0]===7)&&t.length-1===2*n){t[0]===6?Ny(t[t.length-1]%2===0):t[0]===7&&Ny(t[t.length-1]%2===1);var i=this.point(t.slice(1,1+n),t.slice(1+n,1+2*n));return i}else if((t[0]===2||t[0]===3)&&t.length-1===n)return this.pointFromX(t.slice(1,1+n),t[0]===3);throw new Error("Unknown point format")};wi.prototype.encodeCompressed=function(t){return this.encode(t,!0)};wi.prototype._encode=function(t){var r=this.curve.p.byteLength(),n=this.getX().toArray("be",r);return t?[this.getY().isEven()?2:3].concat(n):[4].concat(n,this.getY().toArray("be",r))};wi.prototype.encode=function(t,r){return xd.encode(this._encode(r),t)};wi.prototype.precompute=function(t){if(this.precomputed)return this;var r={doubles:null,naf:null,beta:null};return r.naf=this._getNAFPoints(8),r.doubles=this._getDoubles(4,t),r.beta=this._getBeta(),this.precomputed=r,this};wi.prototype._hasDoubles=function(t){if(!this.precomputed)return!1;var r=this.precomputed.doubles;return r?r.points.length>=Math.ceil((t.bitLength()+1)/r.step):!1};wi.prototype._getDoubles=function(t,r){if(this.precomputed&&this.precomputed.doubles)return this.precomputed.doubles;for(var n=[this],i=this,s=0;s<r;s+=t){for(var o=0;o<t;o++)i=i.dbl();n.push(i)}return{step:t,points:n}};wi.prototype._getNAFPoints=function(t){if(this.precomputed&&this.precomputed.naf)return this.precomputed.naf;for(var r=[this],n=(1<<t)-1,i=n===1?null:this.dbl(),s=1;s<n;s++)r[s]=r[s-1].add(i);return{wnd:t,points:r}};wi.prototype._getBeta=function(){return null};wi.prototype.dblp=function(t){for(var r=this,n=0;n<t;n++)r=r.dbl();return r}});var CP=x((FMe,bP)=>{"use strict";var Sge=Kn(),fr=kr(),VS=ze(),Gc=Ud(),_ge=Sge.assert;function Si(e){Gc.call(this,"short",e),this.a=new fr(e.a,16).toRed(this.red),this.b=new fr(e.b,16).toRed(this.red),this.tinv=this.two.redInvm(),this.zeroA=this.a.fromRed().cmpn(0)===0,this.threeA=this.a.fromRed().sub(this.p).cmpn(-3)===0,this.endo=this._getEndomorphism(e),this._endoWnafT1=new Array(4),this._endoWnafT2=new Array(4)}VS(Si,Gc);bP.exports=Si;Si.prototype._getEndomorphism=function(t){if(!(!this.zeroA||!this.g||!this.n||this.p.modn(3)!==1)){var r,n;if(t.beta)r=new fr(t.beta,16).toRed(this.red);else{var i=this._getEndoRoots(this.p);r=i[0].cmp(i[1])<0?i[0]:i[1],r=r.toRed(this.red)}if(t.lambda)n=new fr(t.lambda,16);else{var s=this._getEndoRoots(this.n);this.g.mul(s[0]).x.cmp(this.g.x.redMul(r))===0?n=s[0]:(n=s[1],_ge(this.g.mul(n).x.cmp(this.g.x.redMul(r))===0))}var o;return t.basis?o=t.basis.map(function(a){return{a:new fr(a.a,16),b:new fr(a.b,16)}}):o=this._getEndoBasis(n),{beta:r,lambda:n,basis:o}}};Si.prototype._getEndoRoots=function(t){var r=t===this.p?this.red:fr.mont(t),n=new fr(2).toRed(r).redInvm(),i=n.redNeg(),s=new fr(3).toRed(r).redNeg().redSqrt().redMul(n),o=i.redAdd(s).fromRed(),a=i.redSub(s).fromRed();return[o,a]};Si.prototype._getEndoBasis=function(t){for(var r=this.n.ushrn(Math.floor(this.n.bitLength()/2)),n=t,i=this.n.clone(),s=new fr(1),o=new fr(0),a=new fr(0),A=new fr(1),f,l,p,B,S,_,N,P=0,U,G;n.cmpn(0)!==0;){var Y=i.div(n);U=i.sub(Y.mul(n)),G=a.sub(Y.mul(s));var Z=A.sub(Y.mul(o));if(!p&&U.cmp(r)<0)f=N.neg(),l=s,p=U.neg(),B=G;else if(p&&++P===2)break;N=U,i=n,n=U,a=s,s=G,A=o,o=Z}S=U.neg(),_=G;var ee=p.sqr().add(B.sqr()),j=S.sqr().add(_.sqr());return j.cmp(ee)>=0&&(S=f,_=l),p.negative&&(p=p.neg(),B=B.neg()),S.negative&&(S=S.neg(),_=_.neg()),[{a:p,b:B},{a:S,b:_}]};Si.prototype._endoSplit=function(t){var r=this.endo.basis,n=r[0],i=r[1],s=i.b.mul(t).divRound(this.n),o=n.b.neg().mul(t).divRound(this.n),a=s.mul(n.a),A=o.mul(i.a),f=s.mul(n.b),l=o.mul(i.b),p=t.sub(a).sub(A),B=f.add(l).neg();return{k1:p,k2:B}};Si.prototype.pointFromX=function(t,r){t=new fr(t,16),t.red||(t=t.toRed(this.red));var n=t.redSqr().redMul(t).redIAdd(t.redMul(this.a)).redIAdd(this.b),i=n.redSqrt();if(i.redSqr().redSub(n).cmp(this.zero)!==0)throw new Error("invalid point");var s=i.fromRed().isOdd();return(r&&!s||!r&&s)&&(i=i.redNeg()),this.point(t,i)};Si.prototype.validate=function(t){if(t.inf)return!0;var r=t.x,n=t.y,i=this.a.redMul(r),s=r.redSqr().redMul(r).redIAdd(i).redIAdd(this.b);return n.redSqr().redISub(s).cmpn(0)===0};Si.prototype._endoWnafMulAdd=function(t,r,n){for(var i=this._endoWnafT1,s=this._endoWnafT2,o=0;o<t.length;o++){var a=this._endoSplit(r[o]),A=t[o],f=A._getBeta();a.k1.negative&&(a.k1.ineg(),A=A.neg(!0)),a.k2.negative&&(a.k2.ineg(),f=f.neg(!0)),i[o*2]=A,i[o*2+1]=f,s[o*2]=a.k1,s[o*2+1]=a.k2}for(var l=this._wnafMulAdd(1,i,s,o*2,n),p=0;p<o*2;p++)i[p]=null,s[p]=null;return l};function xr(e,t,r,n){Gc.BasePoint.call(this,e,"affine"),t===null&&r===null?(this.x=null,this.y=null,this.inf=!0):(this.x=new fr(t,16),this.y=new fr(r,16),n&&(this.x.forceRed(this.curve.red),this.y.forceRed(this.curve.red)),this.x.red||(this.x=this.x.toRed(this.curve.red)),this.y.red||(this.y=this.y.toRed(this.curve.red)),this.inf=!1)}VS(xr,Gc.BasePoint);Si.prototype.point=function(t,r,n){return new xr(this,t,r,n)};Si.prototype.pointFromJSON=function(t,r){return xr.fromJSON(this,t,r)};xr.prototype._getBeta=function(){if(this.curve.endo){var t=this.precomputed;if(t&&t.beta)return t.beta;var r=this.curve.point(this.x.redMul(this.curve.endo.beta),this.y);if(t){var n=this.curve,i=function(s){return n.point(s.x.redMul(n.endo.beta),s.y)};t.beta=r,r.precomputed={beta:null,naf:t.naf&&{wnd:t.naf.wnd,points:t.naf.points.map(i)},doubles:t.doubles&&{step:t.doubles.step,points:t.doubles.points.map(i)}}}return r}};xr.prototype.toJSON=function(){return this.precomputed?[this.x,this.y,this.precomputed&&{doubles:this.precomputed.doubles&&{step:this.precomputed.doubles.step,points:this.precomputed.doubles.points.slice(1)},naf:this.precomputed.naf&&{wnd:this.precomputed.naf.wnd,points:this.precomputed.naf.points.slice(1)}}]:[this.x,this.y]};xr.fromJSON=function(t,r,n){typeof r=="string"&&(r=JSON.parse(r));var i=t.point(r[0],r[1],n);if(!r[2])return i;function s(a){return t.point(a[0],a[1],n)}var o=r[2];return i.precomputed={beta:null,doubles:o.doubles&&{step:o.doubles.step,points:[i].concat(o.doubles.points.map(s))},naf:o.naf&&{wnd:o.naf.wnd,points:[i].concat(o.naf.points.map(s))}},i};xr.prototype.inspect=function(){return this.isInfinity()?"<EC Point Infinity>":"<EC Point x: "+this.x.fromRed().toString(16,2)+" y: "+this.y.fromRed().toString(16,2)+">"};xr.prototype.isInfinity=function(){return this.inf};xr.prototype.add=function(t){if(this.inf)return t;if(t.inf)return this;if(this.eq(t))return this.dbl();if(this.neg().eq(t))return this.curve.point(null,null);if(this.x.cmp(t.x)===0)return this.curve.point(null,null);var r=this.y.redSub(t.y);r.cmpn(0)!==0&&(r=r.redMul(this.x.redSub(t.x).redInvm()));var n=r.redSqr().redISub(this.x).redISub(t.x),i=r.redMul(this.x.redSub(n)).redISub(this.y);return this.curve.point(n,i)};xr.prototype.dbl=function(){if(this.inf)return this;var t=this.y.redAdd(this.y);if(t.cmpn(0)===0)return this.curve.point(null,null);var r=this.curve.a,n=this.x.redSqr(),i=t.redInvm(),s=n.redAdd(n).redIAdd(n).redIAdd(r).redMul(i),o=s.redSqr().redISub(this.x.redAdd(this.x)),a=s.redMul(this.x.redSub(o)).redISub(this.y);return this.curve.point(o,a)};xr.prototype.getX=function(){return this.x.fromRed()};xr.prototype.getY=function(){return this.y.fromRed()};xr.prototype.mul=function(t){return t=new fr(t,16),this.isInfinity()?this:this._hasDoubles(t)?this.curve._fixedNafMul(this,t):this.curve.endo?this.curve._endoWnafMulAdd([this],[t]):this.curve._wnafMul(this,t)};xr.prototype.mulAdd=function(t,r,n){var i=[this,r],s=[t,n];return this.curve.endo?this.curve._endoWnafMulAdd(i,s):this.curve._wnafMulAdd(1,i,s,2)};xr.prototype.jmulAdd=function(t,r,n){var i=[this,r],s=[t,n];return this.curve.endo?this.curve._endoWnafMulAdd(i,s,!0):this.curve._wnafMulAdd(1,i,s,2,!0)};xr.prototype.eq=function(t){return this===t||this.inf===t.inf&&(this.inf||this.x.cmp(t.x)===0&&this.y.cmp(t.y)===0)};xr.prototype.neg=function(t){if(this.inf)return this;var r=this.curve.point(this.x,this.y.redNeg());if(t&&this.precomputed){var n=this.precomputed,i=function(s){return s.neg()};r.precomputed={naf:n.naf&&{wnd:n.naf.wnd,points:n.naf.points.map(i)},doubles:n.doubles&&{step:n.doubles.step,points:n.doubles.points.map(i)}}}return r};xr.prototype.toJ=function(){if(this.inf)return this.curve.jpoint(null,null,null);var t=this.curve.jpoint(this.x,this.y,this.curve.one);return t};function jr(e,t,r,n){Gc.BasePoint.call(this,e,"jacobian"),t===null&&r===null&&n===null?(this.x=this.curve.one,this.y=this.curve.one,this.z=new fr(0)):(this.x=new fr(t,16),this.y=new fr(r,16),this.z=new fr(n,16)),this.x.red||(this.x=this.x.toRed(this.curve.red)),this.y.red||(this.y=this.y.toRed(this.curve.red)),this.z.red||(this.z=this.z.toRed(this.curve.red)),this.zOne=this.z===this.curve.one}VS(jr,Gc.BasePoint);Si.prototype.jpoint=function(t,r,n){return new jr(this,t,r,n)};jr.prototype.toP=function(){if(this.isInfinity())return this.curve.point(null,null);var t=this.z.redInvm(),r=t.redSqr(),n=this.x.redMul(r),i=this.y.redMul(r).redMul(t);return this.curve.point(n,i)};jr.prototype.neg=function(){return this.curve.jpoint(this.x,this.y.redNeg(),this.z)};jr.prototype.add=function(t){if(this.isInfinity())return t;if(t.isInfinity())return this;var r=t.z.redSqr(),n=this.z.redSqr(),i=this.x.redMul(r),s=t.x.redMul(n),o=this.y.redMul(r.redMul(t.z)),a=t.y.redMul(n.redMul(this.z)),A=i.redSub(s),f=o.redSub(a);if(A.cmpn(0)===0)return f.cmpn(0)!==0?this.curve.jpoint(null,null,null):this.dbl();var l=A.redSqr(),p=l.redMul(A),B=i.redMul(l),S=f.redSqr().redIAdd(p).redISub(B).redISub(B),_=f.redMul(B.redISub(S)).redISub(o.redMul(p)),N=this.z.redMul(t.z).redMul(A);return this.curve.jpoint(S,_,N)};jr.prototype.mixedAdd=function(t){if(this.isInfinity())return t.toJ();if(t.isInfinity())return this;var r=this.z.redSqr(),n=this.x,i=t.x.redMul(r),s=this.y,o=t.y.redMul(r).redMul(this.z),a=n.redSub(i),A=s.redSub(o);if(a.cmpn(0)===0)return A.cmpn(0)!==0?this.curve.jpoint(null,null,null):this.dbl();var f=a.redSqr(),l=f.redMul(a),p=n.redMul(f),B=A.redSqr().redIAdd(l).redISub(p).redISub(p),S=A.redMul(p.redISub(B)).redISub(s.redMul(l)),_=this.z.redMul(a);return this.curve.jpoint(B,S,_)};jr.prototype.dblp=function(t){if(t===0)return this;if(this.isInfinity())return this;if(!t)return this.dbl();var r;if(this.curve.zeroA||this.curve.threeA){var n=this;for(r=0;r<t;r++)n=n.dbl();return n}var i=this.curve.a,s=this.curve.tinv,o=this.x,a=this.y,A=this.z,f=A.redSqr().redSqr(),l=a.redAdd(a);for(r=0;r<t;r++){var p=o.redSqr(),B=l.redSqr(),S=B.redSqr(),_=p.redAdd(p).redIAdd(p).redIAdd(i.redMul(f)),N=o.redMul(B),P=_.redSqr().redISub(N.redAdd(N)),U=N.redISub(P),G=_.redMul(U);G=G.redIAdd(G).redISub(S);var Y=l.redMul(A);r+1<t&&(f=f.redMul(S)),o=P,A=Y,l=G}return this.curve.jpoint(o,l.redMul(s),A)};jr.prototype.dbl=function(){return this.isInfinity()?this:this.curve.zeroA?this._zeroDbl():this.curve.threeA?this._threeDbl():this._dbl()};jr.prototype._zeroDbl=function(){var t,r,n;if(this.zOne){var i=this.x.redSqr(),s=this.y.redSqr(),o=s.redSqr(),a=this.x.redAdd(s).redSqr().redISub(i).redISub(o);a=a.redIAdd(a);var A=i.redAdd(i).redIAdd(i),f=A.redSqr().redISub(a).redISub(a),l=o.redIAdd(o);l=l.redIAdd(l),l=l.redIAdd(l),t=f,r=A.redMul(a.redISub(f)).redISub(l),n=this.y.redAdd(this.y)}else{var p=this.x.redSqr(),B=this.y.redSqr(),S=B.redSqr(),_=this.x.redAdd(B).redSqr().redISub(p).redISub(S);_=_.redIAdd(_);var N=p.redAdd(p).redIAdd(p),P=N.redSqr(),U=S.redIAdd(S);U=U.redIAdd(U),U=U.redIAdd(U),t=P.redISub(_).redISub(_),r=N.redMul(_.redISub(t)).redISub(U),n=this.y.redMul(this.z),n=n.redIAdd(n)}return this.curve.jpoint(t,r,n)};jr.prototype._threeDbl=function(){var t,r,n;if(this.zOne){var i=this.x.redSqr(),s=this.y.redSqr(),o=s.redSqr(),a=this.x.redAdd(s).redSqr().redISub(i).redISub(o);a=a.redIAdd(a);var A=i.redAdd(i).redIAdd(i).redIAdd(this.curve.a),f=A.redSqr().redISub(a).redISub(a);t=f;var l=o.redIAdd(o);l=l.redIAdd(l),l=l.redIAdd(l),r=A.redMul(a.redISub(f)).redISub(l),n=this.y.redAdd(this.y)}else{var p=this.z.redSqr(),B=this.y.redSqr(),S=this.x.redMul(B),_=this.x.redSub(p).redMul(this.x.redAdd(p));_=_.redAdd(_).redIAdd(_);var N=S.redIAdd(S);N=N.redIAdd(N);var P=N.redAdd(N);t=_.redSqr().redISub(P),n=this.y.redAdd(this.z).redSqr().redISub(B).redISub(p);var U=B.redSqr();U=U.redIAdd(U),U=U.redIAdd(U),U=U.redIAdd(U),r=_.redMul(N.redISub(t)).redISub(U)}return this.curve.jpoint(t,r,n)};jr.prototype._dbl=function(){var t=this.curve.a,r=this.x,n=this.y,i=this.z,s=i.redSqr().redSqr(),o=r.redSqr(),a=n.redSqr(),A=o.redAdd(o).redIAdd(o).redIAdd(t.redMul(s)),f=r.redAdd(r);f=f.redIAdd(f);var l=f.redMul(a),p=A.redSqr().redISub(l.redAdd(l)),B=l.redISub(p),S=a.redSqr();S=S.redIAdd(S),S=S.redIAdd(S),S=S.redIAdd(S);var _=A.redMul(B).redISub(S),N=n.redAdd(n).redMul(i);return this.curve.jpoint(p,_,N)};jr.prototype.trpl=function(){if(!this.curve.zeroA)return this.dbl().add(this);var t=this.x.redSqr(),r=this.y.redSqr(),n=this.z.redSqr(),i=r.redSqr(),s=t.redAdd(t).redIAdd(t),o=s.redSqr(),a=this.x.redAdd(r).redSqr().redISub(t).redISub(i);a=a.redIAdd(a),a=a.redAdd(a).redIAdd(a),a=a.redISub(o);var A=a.redSqr(),f=i.redIAdd(i);f=f.redIAdd(f),f=f.redIAdd(f),f=f.redIAdd(f);var l=s.redIAdd(a).redSqr().redISub(o).redISub(A).redISub(f),p=r.redMul(l);p=p.redIAdd(p),p=p.redIAdd(p);var B=this.x.redMul(A).redISub(p);B=B.redIAdd(B),B=B.redIAdd(B);var S=this.y.redMul(l.redMul(f.redISub(l)).redISub(a.redMul(A)));S=S.redIAdd(S),S=S.redIAdd(S),S=S.redIAdd(S);var _=this.z.redAdd(a).redSqr().redISub(n).redISub(A);return this.curve.jpoint(B,S,_)};jr.prototype.mul=function(t,r){return t=new fr(t,r),this.curve._wnafMul(this,t)};jr.prototype.eq=function(t){if(t.type==="affine")return this.eq(t.toJ());if(this===t)return!0;var r=this.z.redSqr(),n=t.z.redSqr();if(this.x.redMul(n).redISub(t.x.redMul(r)).cmpn(0)!==0)return!1;var i=r.redMul(this.z),s=n.redMul(t.z);return this.y.redMul(s).redISub(t.y.redMul(i)).cmpn(0)===0};jr.prototype.eqXToP=function(t){var r=this.z.redSqr(),n=t.toRed(this.curve.red).redMul(r);if(this.x.cmp(n)===0)return!0;for(var i=t.clone(),s=this.curve.redN.redMul(r);;){if(i.iadd(this.curve.n),i.cmp(this.curve.p)>=0)return!1;if(n.redIAdd(s),this.x.cmp(n)===0)return!0}};jr.prototype.inspect=function(){return this.isInfinity()?"<EC JPoint Infinity>":"<EC JPoint x: "+this.x.toString(16,2)+" y: "+this.y.toString(16,2)+" z: "+this.z.toString(16,2)+">"};jr.prototype.isInfinity=function(){return this.z.cmpn(0)===0}});var SP=x((kMe,wP)=>{"use strict";var Yc=kr(),QP=ze(),My=Ud(),vge=Kn();function Wc(e){My.call(this,"mont",e),this.a=new Yc(e.a,16).toRed(this.red),this.b=new Yc(e.b,16).toRed(this.red),this.i4=new Yc(4).toRed(this.red).redInvm(),this.two=new Yc(2).toRed(this.red),this.a24=this.i4.redMul(this.a.redAdd(this.two))}QP(Wc,My);wP.exports=Wc;Wc.prototype.validate=function(t){var r=t.normalize().x,n=r.redSqr(),i=n.redMul(r).redAdd(n.redMul(this.a)).redAdd(r),s=i.redSqrt();return s.redSqr().cmp(i)===0};function Ur(e,t,r){My.BasePoint.call(this,e,"projective"),t===null&&r===null?(this.x=this.curve.one,this.z=this.curve.zero):(this.x=new Yc(t,16),this.z=new Yc(r,16),this.x.red||(this.x=this.x.toRed(this.curve.red)),this.z.red||(this.z=this.z.toRed(this.curve.red)))}QP(Ur,My.BasePoint);Wc.prototype.decodePoint=function(t,r){return this.point(vge.toArray(t,r),1)};Wc.prototype.point=function(t,r){return new Ur(this,t,r)};Wc.prototype.pointFromJSON=function(t){return Ur.fromJSON(this,t)};Ur.prototype.precompute=function(){};Ur.prototype._encode=function(){return this.getX().toArray("be",this.curve.p.byteLength())};Ur.fromJSON=function(t,r){return new Ur(t,r[0],r[1]||t.one)};Ur.prototype.inspect=function(){return this.isInfinity()?"<EC Point Infinity>":"<EC Point x: "+this.x.fromRed().toString(16,2)+" z: "+this.z.fromRed().toString(16,2)+">"};Ur.prototype.isInfinity=function(){return this.z.cmpn(0)===0};Ur.prototype.dbl=function(){var t=this.x.redAdd(this.z),r=t.redSqr(),n=this.x.redSub(this.z),i=n.redSqr(),s=r.redSub(i),o=r.redMul(i),a=s.redMul(i.redAdd(this.curve.a24.redMul(s)));return this.curve.point(o,a)};Ur.prototype.add=function(){throw new Error("Not supported on Montgomery curve")};Ur.prototype.diffAdd=function(t,r){var n=this.x.redAdd(this.z),i=this.x.redSub(this.z),s=t.x.redAdd(t.z),o=t.x.redSub(t.z),a=o.redMul(n),A=s.redMul(i),f=r.z.redMul(a.redAdd(A).redSqr()),l=r.x.redMul(a.redISub(A).redSqr());return this.curve.point(f,l)};Ur.prototype.mul=function(t){for(var r=t.clone(),n=this,i=this.curve.point(null,null),s=this,o=[];r.cmpn(0)!==0;r.iushrn(1))o.push(r.andln(1));for(var a=o.length-1;a>=0;a--)o[a]===0?(n=n.diffAdd(i,s),i=i.dbl()):(i=n.diffAdd(i,s),n=n.dbl());return i};Ur.prototype.mulAdd=function(){throw new Error("Not supported on Montgomery curve")};Ur.prototype.jumlAdd=function(){throw new Error("Not supported on Montgomery curve")};Ur.prototype.eq=function(t){return this.getX().cmp(t.getX())===0};Ur.prototype.normalize=function(){return this.x=this.x.redMul(this.z.redInvm()),this.z=this.curve.one,this};Ur.prototype.getX=function(){return this.normalize(),this.x.fromRed()}});var RP=x((xMe,vP)=>{"use strict";var Rge=Kn(),aa=kr(),_P=ze(),Fy=Ud(),Dge=Rge.assert;function oo(e){this.twisted=(e.a|0)!==1,this.mOneA=this.twisted&&(e.a|0)===-1,this.extended=this.mOneA,Fy.call(this,"edwards",e),this.a=new aa(e.a,16).umod(this.red.m),this.a=this.a.toRed(this.red),this.c=new aa(e.c,16).toRed(this.red),this.c2=this.c.redSqr(),this.d=new aa(e.d,16).toRed(this.red),this.dd=this.d.redAdd(this.d),Dge(!this.twisted||this.c.fromRed().cmpn(1)===0),this.oneC=(e.c|0)===1}_P(oo,Fy);vP.exports=oo;oo.prototype._mulA=function(t){return this.mOneA?t.redNeg():this.a.redMul(t)};oo.prototype._mulC=function(t){return this.oneC?t:this.c.redMul(t)};oo.prototype.jpoint=function(t,r,n,i){return this.point(t,r,n,i)};oo.prototype.pointFromX=function(t,r){t=new aa(t,16),t.red||(t=t.toRed(this.red));var n=t.redSqr(),i=this.c2.redSub(this.a.redMul(n)),s=this.one.redSub(this.c2.redMul(this.d).redMul(n)),o=i.redMul(s.redInvm()),a=o.redSqrt();if(a.redSqr().redSub(o).cmp(this.zero)!==0)throw new Error("invalid point");var A=a.fromRed().isOdd();return(r&&!A||!r&&A)&&(a=a.redNeg()),this.point(t,a)};oo.prototype.pointFromY=function(t,r){t=new aa(t,16),t.red||(t=t.toRed(this.red));var n=t.redSqr(),i=n.redSub(this.c2),s=n.redMul(this.d).redMul(this.c2).redSub(this.a),o=i.redMul(s.redInvm());if(o.cmp(this.zero)===0){if(r)throw new Error("invalid point");return this.point(this.zero,t)}var a=o.redSqrt();if(a.redSqr().redSub(o).cmp(this.zero)!==0)throw new Error("invalid point");return a.fromRed().isOdd()!==r&&(a=a.redNeg()),this.point(a,t)};oo.prototype.validate=function(t){if(t.isInfinity())return!0;t.normalize();var r=t.x.redSqr(),n=t.y.redSqr(),i=r.redMul(this.a).redAdd(n),s=this.c2.redMul(this.one.redAdd(this.d.redMul(r).redMul(n)));return i.cmp(s)===0};function Jt(e,t,r,n,i){Fy.BasePoint.call(this,e,"projective"),t===null&&r===null&&n===null?(this.x=this.curve.zero,this.y=this.curve.one,this.z=this.curve.one,this.t=this.curve.zero,this.zOne=!0):(this.x=new aa(t,16),this.y=new aa(r,16),this.z=n?new aa(n,16):this.curve.one,this.t=i&&new aa(i,16),this.x.red||(this.x=this.x.toRed(this.curve.red)),this.y.red||(this.y=this.y.toRed(this.curve.red)),this.z.red||(this.z=this.z.toRed(this.curve.red)),this.t&&!this.t.red&&(this.t=this.t.toRed(this.curve.red)),this.zOne=this.z===this.curve.one,this.curve.extended&&!this.t&&(this.t=this.x.redMul(this.y),this.zOne||(this.t=this.t.redMul(this.z.redInvm()))))}_P(Jt,Fy.BasePoint);oo.prototype.pointFromJSON=function(t){return Jt.fromJSON(this,t)};oo.prototype.point=function(t,r,n,i){return new Jt(this,t,r,n,i)};Jt.fromJSON=function(t,r){return new Jt(t,r[0],r[1],r[2])};Jt.prototype.inspect=function(){return this.isInfinity()?"<EC Point Infinity>":"<EC Point x: "+this.x.fromRed().toString(16,2)+" y: "+this.y.fromRed().toString(16,2)+" z: "+this.z.fromRed().toString(16,2)+">"};Jt.prototype.isInfinity=function(){return this.x.cmpn(0)===0&&(this.y.cmp(this.z)===0||this.zOne&&this.y.cmp(this.curve.c)===0)};Jt.prototype._extDbl=function(){var t=this.x.redSqr(),r=this.y.redSqr(),n=this.z.redSqr();n=n.redIAdd(n);var i=this.curve._mulA(t),s=this.x.redAdd(this.y).redSqr().redISub(t).redISub(r),o=i.redAdd(r),a=o.redSub(n),A=i.redSub(r),f=s.redMul(a),l=o.redMul(A),p=s.redMul(A),B=a.redMul(o);return this.curve.point(f,l,B,p)};Jt.prototype._projDbl=function(){var t=this.x.redAdd(this.y).redSqr(),r=this.x.redSqr(),n=this.y.redSqr(),i,s,o,a,A,f;if(this.curve.twisted){a=this.curve._mulA(r);var l=a.redAdd(n);this.zOne?(i=t.redSub(r).redSub(n).redMul(l.redSub(this.curve.two)),s=l.redMul(a.redSub(n)),o=l.redSqr().redSub(l).redSub(l)):(A=this.z.redSqr(),f=l.redSub(A).redISub(A),i=t.redSub(r).redISub(n).redMul(f),s=l.redMul(a.redSub(n)),o=l.redMul(f))}else a=r.redAdd(n),A=this.curve._mulC(this.z).redSqr(),f=a.redSub(A).redSub(A),i=this.curve._mulC(t.redISub(a)).redMul(f),s=this.curve._mulC(a).redMul(r.redISub(n)),o=a.redMul(f);return this.curve.point(i,s,o)};Jt.prototype.dbl=function(){return this.isInfinity()?this:this.curve.extended?this._extDbl():this._projDbl()};Jt.prototype._extAdd=function(t){var r=this.y.redSub(this.x).redMul(t.y.redSub(t.x)),n=this.y.redAdd(this.x).redMul(t.y.redAdd(t.x)),i=this.t.redMul(this.curve.dd).redMul(t.t),s=this.z.redMul(t.z.redAdd(t.z)),o=n.redSub(r),a=s.redSub(i),A=s.redAdd(i),f=n.redAdd(r),l=o.redMul(a),p=A.redMul(f),B=o.redMul(f),S=a.redMul(A);return this.curve.point(l,p,S,B)};Jt.prototype._projAdd=function(t){var r=this.z.redMul(t.z),n=r.redSqr(),i=this.x.redMul(t.x),s=this.y.redMul(t.y),o=this.curve.d.redMul(i).redMul(s),a=n.redSub(o),A=n.redAdd(o),f=this.x.redAdd(this.y).redMul(t.x.redAdd(t.y)).redISub(i).redISub(s),l=r.redMul(a).redMul(f),p,B;return this.curve.twisted?(p=r.redMul(A).redMul(s.redSub(this.curve._mulA(i))),B=a.redMul(A)):(p=r.redMul(A).redMul(s.redSub(i)),B=this.curve._mulC(a).redMul(A)),this.curve.point(l,p,B)};Jt.prototype.add=function(t){return this.isInfinity()?t:t.isInfinity()?this:this.curve.extended?this._extAdd(t):this._projAdd(t)};Jt.prototype.mul=function(t){return this._hasDoubles(t)?this.curve._fixedNafMul(this,t):this.curve._wnafMul(this,t)};Jt.prototype.mulAdd=function(t,r,n){return this.curve._wnafMulAdd(1,[this,r],[t,n],2,!1)};Jt.prototype.jmulAdd=function(t,r,n){return this.curve._wnafMulAdd(1,[this,r],[t,n],2,!0)};Jt.prototype.normalize=function(){if(this.zOne)return this;var t=this.z.redInvm();return this.x=this.x.redMul(t),this.y=this.y.redMul(t),this.t&&(this.t=this.t.redMul(t)),this.z=this.curve.one,this.zOne=!0,this};Jt.prototype.neg=function(){return this.curve.point(this.x.redNeg(),this.y,this.z,this.t&&this.t.redNeg())};Jt.prototype.getX=function(){return this.normalize(),this.x.fromRed()};Jt.prototype.getY=function(){return this.normalize(),this.y.fromRed()};Jt.prototype.eq=function(t){return this===t||this.getX().cmp(t.getX())===0&&this.getY().cmp(t.getY())===0};Jt.prototype.eqXToP=function(t){var r=t.toRed(this.curve.red).redMul(this.z);if(this.x.cmp(r)===0)return!0;for(var n=t.clone(),i=this.curve.redN.redMul(this.z);;){if(n.iadd(this.curve.n),n.cmp(this.curve.p)>=0)return!1;if(r.redIAdd(i),this.x.cmp(r)===0)return!0}};Jt.prototype.toP=Jt.prototype.normalize;Jt.prototype.mixedAdd=Jt.prototype.add});var JS=x(DP=>{"use strict";var ky=DP;ky.base=Ud();ky.short=CP();ky.mont=SP();ky.edwards=RP()});var us=x(Ht=>{"use strict";var Tge=zn(),Nge=ze();Ht.inherits=Nge;function Mge(e,t){return(e.charCodeAt(t)&64512)!==55296||t<0||t+1>=e.length?!1:(e.charCodeAt(t+1)&64512)===56320}function Fge(e,t){if(Array.isArray(e))return e.slice();if(!e)return[];var r=[];if(typeof e=="string")if(t){if(t==="hex")for(e=e.replace(/[^a-z0-9]+/ig,""),e.length%2!==0&&(e="0"+e),i=0;i<e.length;i+=2)r.push(parseInt(e[i]+e[i+1],16))}else for(var n=0,i=0;i<e.length;i++){var s=e.charCodeAt(i);s<128?r[n++]=s:s<2048?(r[n++]=s>>6|192,r[n++]=s&63|128):Mge(e,i)?(s=65536+((s&1023)<<10)+(e.charCodeAt(++i)&1023),r[n++]=s>>18|240,r[n++]=s>>12&63|128,r[n++]=s>>6&63|128,r[n++]=s&63|128):(r[n++]=s>>12|224,r[n++]=s>>6&63|128,r[n++]=s&63|128)}else for(i=0;i<e.length;i++)r[i]=e[i]|0;return r}Ht.toArray=Fge;function kge(e){for(var t="",r=0;r<e.length;r++)t+=NP(e[r].toString(16));return t}Ht.toHex=kge;function TP(e){var t=e>>>24|e>>>8&65280|e<<8&16711680|(e&255)<<24;return t>>>0}Ht.htonl=TP;function xge(e,t){for(var r="",n=0;n<e.length;n++){var i=e[n];t==="little"&&(i=TP(i)),r+=MP(i.toString(16))}return r}Ht.toHex32=xge;function NP(e){return e.length===1?"0"+e:e}Ht.zero2=NP;function MP(e){return e.length===7?"0"+e:e.length===6?"00"+e:e.length===5?"000"+e:e.length===4?"0000"+e:e.length===3?"00000"+e:e.length===2?"000000"+e:e.length===1?"0000000"+e:e}Ht.zero8=MP;function Uge(e,t,r,n){var i=r-t;Tge(i%4===0);for(var s=new Array(i/4),o=0,a=t;o<s.length;o++,a+=4){var A;n==="big"?A=e[a]<<24|e[a+1]<<16|e[a+2]<<8|e[a+3]:A=e[a+3]<<24|e[a+2]<<16|e[a+1]<<8|e[a],s[o]=A>>>0}return s}Ht.join32=Uge;function Lge(e,t){for(var r=new Array(e.length*4),n=0,i=0;n<e.length;n++,i+=4){var s=e[n];t==="big"?(r[i]=s>>>24,r[i+1]=s>>>16&255,r[i+2]=s>>>8&255,r[i+3]=s&255):(r[i+3]=s>>>24,r[i+2]=s>>>16&255,r[i+1]=s>>>8&255,r[i]=s&255)}return r}Ht.split32=Lge;function Pge(e,t){return e>>>t|e<<32-t}Ht.rotr32=Pge;function Oge(e,t){return e<<t|e>>>32-t}Ht.rotl32=Oge;function Hge(e,t){return e+t>>>0}Ht.sum32=Hge;function qge(e,t,r){return e+t+r>>>0}Ht.sum32_3=qge;function Gge(e,t,r,n){return e+t+r+n>>>0}Ht.sum32_4=Gge;function Yge(e,t,r,n,i){return e+t+r+n+i>>>0}Ht.sum32_5=Yge;function Wge(e,t,r,n){var i=e[t],s=e[t+1],o=n+s>>>0,a=(o<n?1:0)+r+i;e[t]=a>>>0,e[t+1]=o}Ht.sum64=Wge;function Vge(e,t,r,n){var i=t+n>>>0,s=(i<t?1:0)+e+r;return s>>>0}Ht.sum64_hi=Vge;function Jge(e,t,r,n){var i=t+n;return i>>>0}Ht.sum64_lo=Jge;function jge(e,t,r,n,i,s,o,a){var A=0,f=t;f=f+n>>>0,A+=f<t?1:0,f=f+s>>>0,A+=f<s?1:0,f=f+a>>>0,A+=f<a?1:0;var l=e+r+i+o+A;return l>>>0}Ht.sum64_4_hi=jge;function zge(e,t,r,n,i,s,o,a){var A=t+n+s+a;return A>>>0}Ht.sum64_4_lo=zge;function Kge(e,t,r,n,i,s,o,a,A,f){var l=0,p=t;p=p+n>>>0,l+=p<t?1:0,p=p+s>>>0,l+=p<s?1:0,p=p+a>>>0,l+=p<a?1:0,p=p+f>>>0,l+=p<f?1:0;var B=e+r+i+o+A+l;return B>>>0}Ht.sum64_5_hi=Kge;function Xge(e,t,r,n,i,s,o,a,A,f){var l=t+n+s+a+f;return l>>>0}Ht.sum64_5_lo=Xge;function Zge(e,t,r){var n=t<<32-r|e>>>r;return n>>>0}Ht.rotr64_hi=Zge;function $ge(e,t,r){var n=e<<32-r|t>>>r;return n>>>0}Ht.rotr64_lo=$ge;function e0e(e,t,r){return e>>>r}Ht.shr64_hi=e0e;function t0e(e,t,r){var n=e<<32-r|t>>>r;return n>>>0}Ht.shr64_lo=t0e});var Vc=x(kP=>{"use strict";var FP=us(),r0e=zn();function xy(){this.pending=null,this.pendingTotal=0,this.blockSize=this.constructor.blockSize,this.outSize=this.constructor.outSize,this.hmacStrength=this.constructor.hmacStrength,this.padLength=this.constructor.padLength/8,this.endian="big",this._delta8=this.blockSize/8,this._delta32=this.blockSize/32}kP.BlockHash=xy;xy.prototype.update=function(t,r){if(t=FP.toArray(t,r),this.pending?this.pending=this.pending.concat(t):this.pending=t,this.pendingTotal+=t.length,this.pending.length>=this._delta8){t=this.pending;var n=t.length%this._delta8;this.pending=t.slice(t.length-n,t.length),this.pending.length===0&&(this.pending=null),t=FP.join32(t,0,t.length-n,this.endian);for(var i=0;i<t.length;i+=this._delta32)this._update(t,i,i+this._delta32)}return this};xy.prototype.digest=function(t){return this.update(this._pad()),r0e(this.pending===null),this._digest(t)};xy.prototype._pad=function(){var t=this.pendingTotal,r=this._delta8,n=r-(t+this.padLength)%r,i=new Array(n+this.padLength);i[0]=128;for(var s=1;s<n;s++)i[s]=0;if(t<<=3,this.endian==="big"){for(var o=8;o<this.padLength;o++)i[s++]=0;i[s++]=0,i[s++]=0,i[s++]=0,i[s++]=0,i[s++]=t>>>24&255,i[s++]=t>>>16&255,i[s++]=t>>>8&255,i[s++]=t&255}else for(i[s++]=t&255,i[s++]=t>>>8&255,i[s++]=t>>>16&255,i[s++]=t>>>24&255,i[s++]=0,i[s++]=0,i[s++]=0,i[s++]=0,o=8;o<this.padLength;o++)i[s++]=0;return i}});var jS=x(Aa=>{"use strict";var n0e=us(),ao=n0e.rotr32;function i0e(e,t,r,n){if(e===0)return xP(t,r,n);if(e===1||e===3)return LP(t,r,n);if(e===2)return UP(t,r,n)}Aa.ft_1=i0e;function xP(e,t,r){return e&t^~e&r}Aa.ch32=xP;function UP(e,t,r){return e&t^e&r^t&r}Aa.maj32=UP;function LP(e,t,r){return e^t^r}Aa.p32=LP;function s0e(e){return ao(e,2)^ao(e,13)^ao(e,22)}Aa.s0_256=s0e;function o0e(e){return ao(e,6)^ao(e,11)^ao(e,25)}Aa.s1_256=o0e;function a0e(e){return ao(e,7)^ao(e,18)^e>>>3}Aa.g0_256=a0e;function A0e(e){return ao(e,17)^ao(e,19)^e>>>10}Aa.g1_256=A0e});var HP=x((HMe,OP)=>{"use strict";var Jc=us(),f0e=Vc(),u0e=jS(),zS=Jc.rotl32,Ld=Jc.sum32,c0e=Jc.sum32_5,l0e=u0e.ft_1,PP=f0e.BlockHash,h0e=[1518500249,1859775393,2400959708,3395469782];function Ao(){if(!(this instanceof Ao))return new Ao;PP.call(this),this.h=[1732584193,4023233417,2562383102,271733878,3285377520],this.W=new Array(80)}Jc.inherits(Ao,PP);OP.exports=Ao;Ao.blockSize=512;Ao.outSize=160;Ao.hmacStrength=80;Ao.padLength=64;Ao.prototype._update=function(t,r){for(var n=this.W,i=0;i<16;i++)n[i]=t[r+i];for(;i<n.length;i++)n[i]=zS(n[i-3]^n[i-8]^n[i-14]^n[i-16],1);var s=this.h[0],o=this.h[1],a=this.h[2],A=this.h[3],f=this.h[4];for(i=0;i<n.length;i++){var l=~~(i/20),p=c0e(zS(s,5),l0e(l,o,a,A),f,n[i],h0e[l]);f=A,A=a,a=zS(o,30),o=s,s=p}this.h[0]=Ld(this.h[0],s),this.h[1]=Ld(this.h[1],o),this.h[2]=Ld(this.h[2],a),this.h[3]=Ld(this.h[3],A),this.h[4]=Ld(this.h[4],f)};Ao.prototype._digest=function(t){return t==="hex"?Jc.toHex32(this.h,"big"):Jc.split32(this.h,"big")}});var KS=x((qMe,GP)=>{"use strict";var jc=us(),d0e=Vc(),zc=jS(),g0e=zn(),cs=jc.sum32,p0e=jc.sum32_4,E0e=jc.sum32_5,y0e=zc.ch32,m0e=zc.maj32,B0e=zc.s0_256,I0e=zc.s1_256,b0e=zc.g0_256,C0e=zc.g1_256,qP=d0e.BlockHash,Q0e=[1116352408,1899447441,3049323471,3921009573,961987163,1508970993,2453635748,2870763221,3624381080,310598401,607225278,1426881987,1925078388,2162078206,2614888103,3248222580,3835390401,4022224774,264347078,604807628,770255983,1249150122,1555081692,1996064986,2554220882,2821834349,2952996808,3210313671,3336571891,3584528711,113926993,338241895,666307205,773529912,1294757372,1396182291,1695183700,1986661051,2177026350,2456956037,2730485921,2820302411,3259730800,3345764771,3516065817,3600352804,4094571909,275423344,430227734,506948616,659060556,883997877,958139571,1322822218,1537002063,1747873779,1955562222,2024104815,2227730452,2361852424,2428436474,2756734187,3204031479,3329325298];function fo(){if(!(this instanceof fo))return new fo;qP.call(this),this.h=[1779033703,3144134277,1013904242,2773480762,1359893119,2600822924,528734635,1541459225],this.k=Q0e,this.W=new Array(64)}jc.inherits(fo,qP);GP.exports=fo;fo.blockSize=512;fo.outSize=256;fo.hmacStrength=192;fo.padLength=64;fo.prototype._update=function(t,r){for(var n=this.W,i=0;i<16;i++)n[i]=t[r+i];for(;i<n.length;i++)n[i]=p0e(C0e(n[i-2]),n[i-7],b0e(n[i-15]),n[i-16]);var s=this.h[0],o=this.h[1],a=this.h[2],A=this.h[3],f=this.h[4],l=this.h[5],p=this.h[6],B=this.h[7];for(g0e(this.k.length===n.length),i=0;i<n.length;i++){var S=E0e(B,I0e(f),y0e(f,l,p),this.k[i],n[i]),_=cs(B0e(s),m0e(s,o,a));B=p,p=l,l=f,f=cs(A,S),A=a,a=o,o=s,s=cs(S,_)}this.h[0]=cs(this.h[0],s),this.h[1]=cs(this.h[1],o),this.h[2]=cs(this.h[2],a),this.h[3]=cs(this.h[3],A),this.h[4]=cs(this.h[4],f),this.h[5]=cs(this.h[5],l),this.h[6]=cs(this.h[6],p),this.h[7]=cs(this.h[7],B)};fo.prototype._digest=function(t){return t==="hex"?jc.toHex32(this.h,"big"):jc.split32(this.h,"big")}});var VP=x((GMe,WP)=>{"use strict";var XS=us(),YP=KS();function fa(){if(!(this instanceof fa))return new fa;YP.call(this),this.h=[3238371032,914150663,812702999,4144912697,4290775857,1750603025,1694076839,3204075428]}XS.inherits(fa,YP);WP.exports=fa;fa.blockSize=512;fa.outSize=224;fa.hmacStrength=192;fa.padLength=64;fa.prototype._digest=function(t){return t==="hex"?XS.toHex32(this.h.slice(0,7),"big"):XS.split32(this.h.slice(0,7),"big")}});var e_=x((YMe,KP)=>{"use strict";var Fn=us(),w0e=Vc(),S0e=zn(),uo=Fn.rotr64_hi,co=Fn.rotr64_lo,JP=Fn.shr64_hi,jP=Fn.shr64_lo,lA=Fn.sum64,ZS=Fn.sum64_hi,$S=Fn.sum64_lo,_0e=Fn.sum64_4_hi,v0e=Fn.sum64_4_lo,R0e=Fn.sum64_5_hi,D0e=Fn.sum64_5_lo,zP=w0e.BlockHash,T0e=[1116352408,3609767458,1899447441,602891725,3049323471,3964484399,3921009573,2173295548,961987163,4081628472,1508970993,3053834265,2453635748,2937671579,2870763221,3664609560,3624381080,2734883394,310598401,1164996542,607225278,1323610764,1426881987,3590304994,1925078388,4068182383,2162078206,991336113,2614888103,633803317,3248222580,3479774868,3835390401,2666613458,4022224774,944711139,264347078,2341262773,604807628,2007800933,770255983,1495990901,1249150122,1856431235,1555081692,3175218132,1996064986,2198950837,2554220882,3999719339,2821834349,766784016,2952996808,2566594879,3210313671,3203337956,3336571891,1034457026,3584528711,2466948901,113926993,3758326383,338241895,168717936,666307205,1188179964,773529912,1546045734,1294757372,1522805485,1396182291,2643833823,1695183700,2343527390,1986661051,1014477480,2177026350,1206759142,2456956037,344077627,2730485921,1290863460,2820302411,3158454273,3259730800,3505952657,3345764771,106217008,3516065817,3606008344,3600352804,1432725776,4094571909,1467031594,275423344,851169720,430227734,3100823752,506948616,1363258195,659060556,3750685593,883997877,3785050280,958139571,3318307427,1322822218,3812723403,1537002063,2003034995,1747873779,3602036899,1955562222,1575990012,2024104815,1125592928,2227730452,2716904306,2361852424,442776044,2428436474,593698344,2756734187,3733110249,3204031479,2999351573,3329325298,3815920427,3391569614,3928383900,3515267271,566280711,3940187606,3454069534,4118630271,4000239992,116418474,1914138554,174292421,2731055270,289380356,3203993006,460393269,320620315,685471733,587496836,852142971,1086792851,1017036298,365543100,1126000580,2618297676,1288033470,3409855158,1501505948,4234509866,1607167915,987167468,1816402316,1246189591];function ls(){if(!(this instanceof ls))return new ls;zP.call(this),this.h=[1779033703,4089235720,3144134277,2227873595,1013904242,4271175723,2773480762,1595750129,1359893119,2917565137,2600822924,725511199,528734635,4215389547,1541459225,327033209],this.k=T0e,this.W=new Array(160)}Fn.inherits(ls,zP);KP.exports=ls;ls.blockSize=1024;ls.outSize=512;ls.hmacStrength=192;ls.padLength=128;ls.prototype._prepareBlock=function(t,r){for(var n=this.W,i=0;i<32;i++)n[i]=t[r+i];for(;i<n.length;i+=2){var s=q0e(n[i-4],n[i-3]),o=G0e(n[i-4],n[i-3]),a=n[i-14],A=n[i-13],f=O0e(n[i-30],n[i-29]),l=H0e(n[i-30],n[i-29]),p=n[i-32],B=n[i-31];n[i]=_0e(s,o,a,A,f,l,p,B),n[i+1]=v0e(s,o,a,A,f,l,p,B)}};ls.prototype._update=function(t,r){this._prepareBlock(t,r);var n=this.W,i=this.h[0],s=this.h[1],o=this.h[2],a=this.h[3],A=this.h[4],f=this.h[5],l=this.h[6],p=this.h[7],B=this.h[8],S=this.h[9],_=this.h[10],N=this.h[11],P=this.h[12],U=this.h[13],G=this.h[14],Y=this.h[15];S0e(this.k.length===n.length);for(var Z=0;Z<n.length;Z+=2){var ee=G,j=Y,se=L0e(B,S),ie=P0e(B,S),ce=N0e(B,S,_,N,P,U),H=M0e(B,S,_,N,P,U),E=this.k[Z],v=this.k[Z+1],b=n[Z],c=n[Z+1],g=R0e(ee,j,se,ie,ce,H,E,v,b,c),w=D0e(ee,j,se,ie,ce,H,E,v,b,c);ee=x0e(i,s),j=U0e(i,s),se=F0e(i,s,o,a,A,f),ie=k0e(i,s,o,a,A,f);var R=ZS(ee,j,se,ie),C=$S(ee,j,se,ie);G=P,Y=U,P=_,U=N,_=B,N=S,B=ZS(l,p,g,w),S=$S(p,p,g,w),l=A,p=f,A=o,f=a,o=i,a=s,i=ZS(g,w,R,C),s=$S(g,w,R,C)}lA(this.h,0,i,s),lA(this.h,2,o,a),lA(this.h,4,A,f),lA(this.h,6,l,p),lA(this.h,8,B,S),lA(this.h,10,_,N),lA(this.h,12,P,U),lA(this.h,14,G,Y)};ls.prototype._digest=function(t){return t==="hex"?Fn.toHex32(this.h,"big"):Fn.split32(this.h,"big")};function N0e(e,t,r,n,i){var s=e&r^~e&i;return s<0&&(s+=4294967296),s}function M0e(e,t,r,n,i,s){var o=t&n^~t&s;return o<0&&(o+=4294967296),o}function F0e(e,t,r,n,i){var s=e&r^e&i^r&i;return s<0&&(s+=4294967296),s}function k0e(e,t,r,n,i,s){var o=t&n^t&s^n&s;return o<0&&(o+=4294967296),o}function x0e(e,t){var r=uo(e,t,28),n=uo(t,e,2),i=uo(t,e,7),s=r^n^i;return s<0&&(s+=4294967296),s}function U0e(e,t){var r=co(e,t,28),n=co(t,e,2),i=co(t,e,7),s=r^n^i;return s<0&&(s+=4294967296),s}function L0e(e,t){var r=uo(e,t,14),n=uo(e,t,18),i=uo(t,e,9),s=r^n^i;return s<0&&(s+=4294967296),s}function P0e(e,t){var r=co(e,t,14),n=co(e,t,18),i=co(t,e,9),s=r^n^i;return s<0&&(s+=4294967296),s}function O0e(e,t){var r=uo(e,t,1),n=uo(e,t,8),i=JP(e,t,7),s=r^n^i;return s<0&&(s+=4294967296),s}function H0e(e,t){var r=co(e,t,1),n=co(e,t,8),i=jP(e,t,7),s=r^n^i;return s<0&&(s+=4294967296),s}function q0e(e,t){var r=uo(e,t,19),n=uo(t,e,29),i=JP(e,t,6),s=r^n^i;return s<0&&(s+=4294967296),s}function G0e(e,t){var r=co(e,t,19),n=co(t,e,29),i=jP(e,t,6),s=r^n^i;return s<0&&(s+=4294967296),s}});var $P=x((WMe,ZP)=>{"use strict";var t_=us(),XP=e_();function ua(){if(!(this instanceof ua))return new ua;XP.call(this),this.h=[3418070365,3238371032,1654270250,914150663,2438529370,812702999,355462360,4144912697,1731405415,4290775857,2394180231,1750603025,3675008525,1694076839,1203062813,3204075428]}t_.inherits(ua,XP);ZP.exports=ua;ua.blockSize=1024;ua.outSize=384;ua.hmacStrength=192;ua.padLength=128;ua.prototype._digest=function(t){return t==="hex"?t_.toHex32(this.h.slice(0,12),"big"):t_.split32(this.h.slice(0,12),"big")}});var e9=x(Kc=>{"use strict";Kc.sha1=HP();Kc.sha224=VP();Kc.sha256=KS();Kc.sha384=$P();Kc.sha512=e_()});var o9=x(s9=>{"use strict";var xf=us(),Y0e=Vc(),Uy=xf.rotl32,t9=xf.sum32,Pd=xf.sum32_3,r9=xf.sum32_4,i9=Y0e.BlockHash;function lo(){if(!(this instanceof lo))return new lo;i9.call(this),this.h=[1732584193,4023233417,2562383102,271733878,3285377520],this.endian="little"}xf.inherits(lo,i9);s9.ripemd160=lo;lo.blockSize=512;lo.outSize=160;lo.hmacStrength=192;lo.padLength=64;lo.prototype._update=function(t,r){for(var n=this.h[0],i=this.h[1],s=this.h[2],o=this.h[3],a=this.h[4],A=n,f=i,l=s,p=o,B=a,S=0;S<80;S++){var _=t9(Uy(r9(n,n9(S,i,s,o),t[J0e[S]+r],W0e(S)),z0e[S]),a);n=a,a=o,o=Uy(s,10),s=i,i=_,_=t9(Uy(r9(A,n9(79-S,f,l,p),t[j0e[S]+r],V0e(S)),K0e[S]),B),A=B,B=p,p=Uy(l,10),l=f,f=_}_=Pd(this.h[1],s,p),this.h[1]=Pd(this.h[2],o,B),this.h[2]=Pd(this.h[3],a,A),this.h[3]=Pd(this.h[4],n,f),this.h[4]=Pd(this.h[0],i,l),this.h[0]=_};lo.prototype._digest=function(t){return t==="hex"?xf.toHex32(this.h,"little"):xf.split32(this.h,"little")};function n9(e,t,r,n){return e<=15?t^r^n:e<=31?t&r|~t&n:e<=47?(t|~r)^n:e<=63?t&n|r&~n:t^(r|~n)}function W0e(e){return e<=15?0:e<=31?1518500249:e<=47?1859775393:e<=63?2400959708:2840853838}function V0e(e){return e<=15?1352829926:e<=31?1548603684:e<=47?1836072691:e<=63?2053994217:0}var J0e=[0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15,7,4,13,1,10,6,15,3,12,0,9,5,2,14,11,8,3,10,14,4,9,15,8,1,2,7,0,6,13,11,5,12,1,9,11,10,0,8,12,4,13,3,7,15,14,5,6,2,4,0,5,9,7,12,2,10,14,1,3,8,11,6,15,13],j0e=[5,14,7,0,9,2,11,4,13,6,15,8,1,10,3,12,6,11,3,7,0,13,5,10,14,15,8,12,4,9,1,2,15,5,1,3,7,14,6,9,11,8,12,2,10,0,4,13,8,6,4,1,3,11,15,0,5,12,2,13,9,7,10,14,12,15,10,4,1,5,8,7,6,2,13,14,0,3,9,11],z0e=[11,14,15,12,5,8,7,9,11,13,14,15,6,7,9,8,7,6,8,13,11,9,7,15,7,12,15,9,11,7,13,12,11,13,6,7,14,9,13,15,14,8,13,6,5,12,7,5,11,12,14,15,14,15,9,8,9,14,5,6,8,6,5,12,9,15,5,11,6,8,13,12,5,12,13,14,11,8,5,6],K0e=[8,9,9,11,13,15,15,5,7,7,8,11,14,14,12,6,9,13,15,7,12,8,9,11,7,7,12,7,6,15,13,11,9,7,15,11,8,6,6,14,12,13,5,14,13,13,7,5,15,5,8,11,14,14,6,14,6,9,12,9,12,5,15,8,8,5,12,9,12,5,14,6,8,13,6,5,15,13,11,11]});var A9=x((jMe,a9)=>{"use strict";var X0e=us(),Z0e=zn();function Xc(e,t,r){if(!(this instanceof Xc))return new Xc(e,t,r);this.Hash=e,this.blockSize=e.blockSize/8,this.outSize=e.outSize/8,this.inner=null,this.outer=null,this._init(X0e.toArray(t,r))}a9.exports=Xc;Xc.prototype._init=function(t){t.length>this.blockSize&&(t=new this.Hash().update(t).digest()),Z0e(t.length<=this.blockSize);for(var r=t.length;r<this.blockSize;r++)t.push(0);for(r=0;r<t.length;r++)t[r]^=54;for(this.inner=new this.Hash().update(t),r=0;r<t.length;r++)t[r]^=106;this.outer=new this.Hash().update(t)};Xc.prototype.update=function(t,r){return this.inner.update(t,r),this};Xc.prototype.digest=function(t){return this.outer.update(this.inner.digest()),this.outer.digest(t)}});var Ly=x(f9=>{var zr=f9;zr.utils=us();zr.common=Vc();zr.sha=e9();zr.ripemd=o9();zr.hmac=A9();zr.sha1=zr.sha.sha1;zr.sha256=zr.sha.sha256;zr.sha224=zr.sha.sha224;zr.sha384=zr.sha.sha384;zr.sha512=zr.sha.sha512;zr.ripemd160=zr.ripemd.ripemd160});var c9=x((KMe,u9)=>{u9.exports={doubles:{step:4,points:[["e60fce93b59e9ec53011aabc21c23e97b2a31369b87a5ae9c44ee89e2a6dec0a","f7e3507399e595929db99f34f57937101296891e44d23f0be1f32cce69616821"],["8282263212c609d9ea2a6e3e172de238d8c39cabd5ac1ca10646e23fd5f51508","11f8a8098557dfe45e8256e830b60ace62d613ac2f7b17bed31b6eaff6e26caf"],["175e159f728b865a72f99cc6c6fc846de0b93833fd2222ed73fce5b551e5b739","d3506e0d9e3c79eba4ef97a51ff71f5eacb5955add24345c6efa6ffee9fed695"],["363d90d447b00c9c99ceac05b6262ee053441c7e55552ffe526bad8f83ff4640","4e273adfc732221953b445397f3363145b9a89008199ecb62003c7f3bee9de9"],["8b4b5f165df3c2be8c6244b5b745638843e4a781a15bcd1b69f79a55dffdf80c","4aad0a6f68d308b4b3fbd7813ab0da04f9e336546162ee56b3eff0c65fd4fd36"],["723cbaa6e5db996d6bf771c00bd548c7b700dbffa6c0e77bcb6115925232fcda","96e867b5595cc498a921137488824d6e2660a0653779494801dc069d9eb39f5f"],["eebfa4d493bebf98ba5feec812c2d3b50947961237a919839a533eca0e7dd7fa","5d9a8ca3970ef0f269ee7edaf178089d9ae4cdc3a711f712ddfd4fdae1de8999"],["100f44da696e71672791d0a09b7bde459f1215a29b3c03bfefd7835b39a48db0","cdd9e13192a00b772ec8f3300c090666b7ff4a18ff5195ac0fbd5cd62bc65a09"],["e1031be262c7ed1b1dc9227a4a04c017a77f8d4464f3b3852c8acde6e534fd2d","9d7061928940405e6bb6a4176597535af292dd419e1ced79a44f18f29456a00d"],["feea6cae46d55b530ac2839f143bd7ec5cf8b266a41d6af52d5e688d9094696d","e57c6b6c97dce1bab06e4e12bf3ecd5c981c8957cc41442d3155debf18090088"],["da67a91d91049cdcb367be4be6ffca3cfeed657d808583de33fa978bc1ec6cb1","9bacaa35481642bc41f463f7ec9780e5dec7adc508f740a17e9ea8e27a68be1d"],["53904faa0b334cdda6e000935ef22151ec08d0f7bb11069f57545ccc1a37b7c0","5bc087d0bc80106d88c9eccac20d3c1c13999981e14434699dcb096b022771c8"],["8e7bcd0bd35983a7719cca7764ca906779b53a043a9b8bcaeff959f43ad86047","10b7770b2a3da4b3940310420ca9514579e88e2e47fd68b3ea10047e8460372a"],["385eed34c1cdff21e6d0818689b81bde71a7f4f18397e6690a841e1599c43862","283bebc3e8ea23f56701de19e9ebf4576b304eec2086dc8cc0458fe5542e5453"],["6f9d9b803ecf191637c73a4413dfa180fddf84a5947fbc9c606ed86c3fac3a7","7c80c68e603059ba69b8e2a30e45c4d47ea4dd2f5c281002d86890603a842160"],["3322d401243c4e2582a2147c104d6ecbf774d163db0f5e5313b7e0e742d0e6bd","56e70797e9664ef5bfb019bc4ddaf9b72805f63ea2873af624f3a2e96c28b2a0"],["85672c7d2de0b7da2bd1770d89665868741b3f9af7643397721d74d28134ab83","7c481b9b5b43b2eb6374049bfa62c2e5e77f17fcc5298f44c8e3094f790313a6"],["948bf809b1988a46b06c9f1919413b10f9226c60f668832ffd959af60c82a0a","53a562856dcb6646dc6b74c5d1c3418c6d4dff08c97cd2bed4cb7f88d8c8e589"],["6260ce7f461801c34f067ce0f02873a8f1b0e44dfc69752accecd819f38fd8e8","bc2da82b6fa5b571a7f09049776a1ef7ecd292238051c198c1a84e95b2b4ae17"],["e5037de0afc1d8d43d8348414bbf4103043ec8f575bfdc432953cc8d2037fa2d","4571534baa94d3b5f9f98d09fb990bddbd5f5b03ec481f10e0e5dc841d755bda"],["e06372b0f4a207adf5ea905e8f1771b4e7e8dbd1c6a6c5b725866a0ae4fce725","7a908974bce18cfe12a27bb2ad5a488cd7484a7787104870b27034f94eee31dd"],["213c7a715cd5d45358d0bbf9dc0ce02204b10bdde2a3f58540ad6908d0559754","4b6dad0b5ae462507013ad06245ba190bb4850f5f36a7eeddff2c27534b458f2"],["4e7c272a7af4b34e8dbb9352a5419a87e2838c70adc62cddf0cc3a3b08fbd53c","17749c766c9d0b18e16fd09f6def681b530b9614bff7dd33e0b3941817dcaae6"],["fea74e3dbe778b1b10f238ad61686aa5c76e3db2be43057632427e2840fb27b6","6e0568db9b0b13297cf674deccb6af93126b596b973f7b77701d3db7f23cb96f"],["76e64113f677cf0e10a2570d599968d31544e179b760432952c02a4417bdde39","c90ddf8dee4e95cf577066d70681f0d35e2a33d2b56d2032b4b1752d1901ac01"],["c738c56b03b2abe1e8281baa743f8f9a8f7cc643df26cbee3ab150242bcbb891","893fb578951ad2537f718f2eacbfbbbb82314eef7880cfe917e735d9699a84c3"],["d895626548b65b81e264c7637c972877d1d72e5f3a925014372e9f6588f6c14b","febfaa38f2bc7eae728ec60818c340eb03428d632bb067e179363ed75d7d991f"],["b8da94032a957518eb0f6433571e8761ceffc73693e84edd49150a564f676e03","2804dfa44805a1e4d7c99cc9762808b092cc584d95ff3b511488e4e74efdf6e7"],["e80fea14441fb33a7d8adab9475d7fab2019effb5156a792f1a11778e3c0df5d","eed1de7f638e00771e89768ca3ca94472d155e80af322ea9fcb4291b6ac9ec78"],["a301697bdfcd704313ba48e51d567543f2a182031efd6915ddc07bbcc4e16070","7370f91cfb67e4f5081809fa25d40f9b1735dbf7c0a11a130c0d1a041e177ea1"],["90ad85b389d6b936463f9d0512678de208cc330b11307fffab7ac63e3fb04ed4","e507a3620a38261affdcbd9427222b839aefabe1582894d991d4d48cb6ef150"],["8f68b9d2f63b5f339239c1ad981f162ee88c5678723ea3351b7b444c9ec4c0da","662a9f2dba063986de1d90c2b6be215dbbea2cfe95510bfdf23cbf79501fff82"],["e4f3fb0176af85d65ff99ff9198c36091f48e86503681e3e6686fd5053231e11","1e63633ad0ef4f1c1661a6d0ea02b7286cc7e74ec951d1c9822c38576feb73bc"],["8c00fa9b18ebf331eb961537a45a4266c7034f2f0d4e1d0716fb6eae20eae29e","efa47267fea521a1a9dc343a3736c974c2fadafa81e36c54e7d2a4c66702414b"],["e7a26ce69dd4829f3e10cec0a9e98ed3143d084f308b92c0997fddfc60cb3e41","2a758e300fa7984b471b006a1aafbb18d0a6b2c0420e83e20e8a9421cf2cfd51"],["b6459e0ee3662ec8d23540c223bcbdc571cbcb967d79424f3cf29eb3de6b80ef","67c876d06f3e06de1dadf16e5661db3c4b3ae6d48e35b2ff30bf0b61a71ba45"],["d68a80c8280bb840793234aa118f06231d6f1fc67e73c5a5deda0f5b496943e8","db8ba9fff4b586d00c4b1f9177b0e28b5b0e7b8f7845295a294c84266b133120"],["324aed7df65c804252dc0270907a30b09612aeb973449cea4095980fc28d3d5d","648a365774b61f2ff130c0c35aec1f4f19213b0c7e332843967224af96ab7c84"],["4df9c14919cde61f6d51dfdbe5fee5dceec4143ba8d1ca888e8bd373fd054c96","35ec51092d8728050974c23a1d85d4b5d506cdc288490192ebac06cad10d5d"],["9c3919a84a474870faed8a9c1cc66021523489054d7f0308cbfc99c8ac1f98cd","ddb84f0f4a4ddd57584f044bf260e641905326f76c64c8e6be7e5e03d4fc599d"],["6057170b1dd12fdf8de05f281d8e06bb91e1493a8b91d4cc5a21382120a959e5","9a1af0b26a6a4807add9a2daf71df262465152bc3ee24c65e899be932385a2a8"],["a576df8e23a08411421439a4518da31880cef0fba7d4df12b1a6973eecb94266","40a6bf20e76640b2c92b97afe58cd82c432e10a7f514d9f3ee8be11ae1b28ec8"],["7778a78c28dec3e30a05fe9629de8c38bb30d1f5cf9a3a208f763889be58ad71","34626d9ab5a5b22ff7098e12f2ff580087b38411ff24ac563b513fc1fd9f43ac"],["928955ee637a84463729fd30e7afd2ed5f96274e5ad7e5cb09eda9c06d903ac","c25621003d3f42a827b78a13093a95eeac3d26efa8a8d83fc5180e935bcd091f"],["85d0fef3ec6db109399064f3a0e3b2855645b4a907ad354527aae75163d82751","1f03648413a38c0be29d496e582cf5663e8751e96877331582c237a24eb1f962"],["ff2b0dce97eece97c1c9b6041798b85dfdfb6d8882da20308f5404824526087e","493d13fef524ba188af4c4dc54d07936c7b7ed6fb90e2ceb2c951e01f0c29907"],["827fbbe4b1e880ea9ed2b2e6301b212b57f1ee148cd6dd28780e5e2cf856e241","c60f9c923c727b0b71bef2c67d1d12687ff7a63186903166d605b68baec293ec"],["eaa649f21f51bdbae7be4ae34ce6e5217a58fdce7f47f9aa7f3b58fa2120e2b3","be3279ed5bbbb03ac69a80f89879aa5a01a6b965f13f7e59d47a5305ba5ad93d"],["e4a42d43c5cf169d9391df6decf42ee541b6d8f0c9a137401e23632dda34d24f","4d9f92e716d1c73526fc99ccfb8ad34ce886eedfa8d8e4f13a7f7131deba9414"],["1ec80fef360cbdd954160fadab352b6b92b53576a88fea4947173b9d4300bf19","aeefe93756b5340d2f3a4958a7abbf5e0146e77f6295a07b671cdc1cc107cefd"],["146a778c04670c2f91b00af4680dfa8bce3490717d58ba889ddb5928366642be","b318e0ec3354028add669827f9d4b2870aaa971d2f7e5ed1d0b297483d83efd0"],["fa50c0f61d22e5f07e3acebb1aa07b128d0012209a28b9776d76a8793180eef9","6b84c6922397eba9b72cd2872281a68a5e683293a57a213b38cd8d7d3f4f2811"],["da1d61d0ca721a11b1a5bf6b7d88e8421a288ab5d5bba5220e53d32b5f067ec2","8157f55a7c99306c79c0766161c91e2966a73899d279b48a655fba0f1ad836f1"],["a8e282ff0c9706907215ff98e8fd416615311de0446f1e062a73b0610d064e13","7f97355b8db81c09abfb7f3c5b2515888b679a3e50dd6bd6cef7c73111f4cc0c"],["174a53b9c9a285872d39e56e6913cab15d59b1fa512508c022f382de8319497c","ccc9dc37abfc9c1657b4155f2c47f9e6646b3a1d8cb9854383da13ac079afa73"],["959396981943785c3d3e57edf5018cdbe039e730e4918b3d884fdff09475b7ba","2e7e552888c331dd8ba0386a4b9cd6849c653f64c8709385e9b8abf87524f2fd"],["d2a63a50ae401e56d645a1153b109a8fcca0a43d561fba2dbb51340c9d82b151","e82d86fb6443fcb7565aee58b2948220a70f750af484ca52d4142174dcf89405"],["64587e2335471eb890ee7896d7cfdc866bacbdbd3839317b3436f9b45617e073","d99fcdd5bf6902e2ae96dd6447c299a185b90a39133aeab358299e5e9faf6589"],["8481bde0e4e4d885b3a546d3e549de042f0aa6cea250e7fd358d6c86dd45e458","38ee7b8cba5404dd84a25bf39cecb2ca900a79c42b262e556d64b1b59779057e"],["13464a57a78102aa62b6979ae817f4637ffcfed3c4b1ce30bcd6303f6caf666b","69be159004614580ef7e433453ccb0ca48f300a81d0942e13f495a907f6ecc27"],["bc4a9df5b713fe2e9aef430bcc1dc97a0cd9ccede2f28588cada3a0d2d83f366","d3a81ca6e785c06383937adf4b798caa6e8a9fbfa547b16d758d666581f33c1"],["8c28a97bf8298bc0d23d8c749452a32e694b65e30a9472a3954ab30fe5324caa","40a30463a3305193378fedf31f7cc0eb7ae784f0451cb9459e71dc73cbef9482"],["8ea9666139527a8c1dd94ce4f071fd23c8b350c5a4bb33748c4ba111faccae0","620efabbc8ee2782e24e7c0cfb95c5d735b783be9cf0f8e955af34a30e62b945"],["dd3625faef5ba06074669716bbd3788d89bdde815959968092f76cc4eb9a9787","7a188fa3520e30d461da2501045731ca941461982883395937f68d00c644a573"],["f710d79d9eb962297e4f6232b40e8f7feb2bc63814614d692c12de752408221e","ea98e67232d3b3295d3b535532115ccac8612c721851617526ae47a9c77bfc82"]]},naf:{wnd:7,points:[["f9308a019258c31049344f85f89d5229b531c845836f99b08601f113bce036f9","388f7b0f632de8140fe337e62a37f3566500a99934c2231b6cb9fd7584b8e672"],["2f8bde4d1a07209355b4a7250a5c5128e88b84bddc619ab7cba8d569b240efe4","d8ac222636e5e3d6d4dba9dda6c9c426f788271bab0d6840dca87d3aa6ac62d6"],["5cbdf0646e5db4eaa398f365f2ea7a0e3d419b7e0330e39ce92bddedcac4f9bc","6aebca40ba255960a3178d6d861a54dba813d0b813fde7b5a5082628087264da"],["acd484e2f0c7f65309ad178a9f559abde09796974c57e714c35f110dfc27ccbe","cc338921b0a7d9fd64380971763b61e9add888a4375f8e0f05cc262ac64f9c37"],["774ae7f858a9411e5ef4246b70c65aac5649980be5c17891bbec17895da008cb","d984a032eb6b5e190243dd56d7b7b365372db1e2dff9d6a8301d74c9c953c61b"],["f28773c2d975288bc7d1d205c3748651b075fbc6610e58cddeeddf8f19405aa8","ab0902e8d880a89758212eb65cdaf473a1a06da521fa91f29b5cb52db03ed81"],["d7924d4f7d43ea965a465ae3095ff41131e5946f3c85f79e44adbcf8e27e080e","581e2872a86c72a683842ec228cc6defea40af2bd896d3a5c504dc9ff6a26b58"],["defdea4cdb677750a420fee807eacf21eb9898ae79b9768766e4faa04a2d4a34","4211ab0694635168e997b0ead2a93daeced1f4a04a95c0f6cfb199f69e56eb77"],["2b4ea0a797a443d293ef5cff444f4979f06acfebd7e86d277475656138385b6c","85e89bc037945d93b343083b5a1c86131a01f60c50269763b570c854e5c09b7a"],["352bbf4a4cdd12564f93fa332ce333301d9ad40271f8107181340aef25be59d5","321eb4075348f534d59c18259dda3e1f4a1b3b2e71b1039c67bd3d8bcf81998c"],["2fa2104d6b38d11b0230010559879124e42ab8dfeff5ff29dc9cdadd4ecacc3f","2de1068295dd865b64569335bd5dd80181d70ecfc882648423ba76b532b7d67"],["9248279b09b4d68dab21a9b066edda83263c3d84e09572e269ca0cd7f5453714","73016f7bf234aade5d1aa71bdea2b1ff3fc0de2a887912ffe54a32ce97cb3402"],["daed4f2be3a8bf278e70132fb0beb7522f570e144bf615c07e996d443dee8729","a69dce4a7d6c98e8d4a1aca87ef8d7003f83c230f3afa726ab40e52290be1c55"],["c44d12c7065d812e8acf28d7cbb19f9011ecd9e9fdf281b0e6a3b5e87d22e7db","2119a460ce326cdc76c45926c982fdac0e106e861edf61c5a039063f0e0e6482"],["6a245bf6dc698504c89a20cfded60853152b695336c28063b61c65cbd269e6b4","e022cf42c2bd4a708b3f5126f16a24ad8b33ba48d0423b6efd5e6348100d8a82"],["1697ffa6fd9de627c077e3d2fe541084ce13300b0bec1146f95ae57f0d0bd6a5","b9c398f186806f5d27561506e4557433a2cf15009e498ae7adee9d63d01b2396"],["605bdb019981718b986d0f07e834cb0d9deb8360ffb7f61df982345ef27a7479","2972d2de4f8d20681a78d93ec96fe23c26bfae84fb14db43b01e1e9056b8c49"],["62d14dab4150bf497402fdc45a215e10dcb01c354959b10cfe31c7e9d87ff33d","80fc06bd8cc5b01098088a1950eed0db01aa132967ab472235f5642483b25eaf"],["80c60ad0040f27dade5b4b06c408e56b2c50e9f56b9b8b425e555c2f86308b6f","1c38303f1cc5c30f26e66bad7fe72f70a65eed4cbe7024eb1aa01f56430bd57a"],["7a9375ad6167ad54aa74c6348cc54d344cc5dc9487d847049d5eabb0fa03c8fb","d0e3fa9eca8726909559e0d79269046bdc59ea10c70ce2b02d499ec224dc7f7"],["d528ecd9b696b54c907a9ed045447a79bb408ec39b68df504bb51f459bc3ffc9","eecf41253136e5f99966f21881fd656ebc4345405c520dbc063465b521409933"],["49370a4b5f43412ea25f514e8ecdad05266115e4a7ecb1387231808f8b45963","758f3f41afd6ed428b3081b0512fd62a54c3f3afbb5b6764b653052a12949c9a"],["77f230936ee88cbbd73df930d64702ef881d811e0e1498e2f1c13eb1fc345d74","958ef42a7886b6400a08266e9ba1b37896c95330d97077cbbe8eb3c7671c60d6"],["f2dac991cc4ce4b9ea44887e5c7c0bce58c80074ab9d4dbaeb28531b7739f530","e0dedc9b3b2f8dad4da1f32dec2531df9eb5fbeb0598e4fd1a117dba703a3c37"],["463b3d9f662621fb1b4be8fbbe2520125a216cdfc9dae3debcba4850c690d45b","5ed430d78c296c3543114306dd8622d7c622e27c970a1de31cb377b01af7307e"],["f16f804244e46e2a09232d4aff3b59976b98fac14328a2d1a32496b49998f247","cedabd9b82203f7e13d206fcdf4e33d92a6c53c26e5cce26d6579962c4e31df6"],["caf754272dc84563b0352b7a14311af55d245315ace27c65369e15f7151d41d1","cb474660ef35f5f2a41b643fa5e460575f4fa9b7962232a5c32f908318a04476"],["2600ca4b282cb986f85d0f1709979d8b44a09c07cb86d7c124497bc86f082120","4119b88753c15bd6a693b03fcddbb45d5ac6be74ab5f0ef44b0be9475a7e4b40"],["7635ca72d7e8432c338ec53cd12220bc01c48685e24f7dc8c602a7746998e435","91b649609489d613d1d5e590f78e6d74ecfc061d57048bad9e76f302c5b9c61"],["754e3239f325570cdbbf4a87deee8a66b7f2b33479d468fbc1a50743bf56cc18","673fb86e5bda30fb3cd0ed304ea49a023ee33d0197a695d0c5d98093c536683"],["e3e6bd1071a1e96aff57859c82d570f0330800661d1c952f9fe2694691d9b9e8","59c9e0bba394e76f40c0aa58379a3cb6a5a2283993e90c4167002af4920e37f5"],["186b483d056a033826ae73d88f732985c4ccb1f32ba35f4b4cc47fdcf04aa6eb","3b952d32c67cf77e2e17446e204180ab21fb8090895138b4a4a797f86e80888b"],["df9d70a6b9876ce544c98561f4be4f725442e6d2b737d9c91a8321724ce0963f","55eb2dafd84d6ccd5f862b785dc39d4ab157222720ef9da217b8c45cf2ba2417"],["5edd5cc23c51e87a497ca815d5dce0f8ab52554f849ed8995de64c5f34ce7143","efae9c8dbc14130661e8cec030c89ad0c13c66c0d17a2905cdc706ab7399a868"],["290798c2b6476830da12fe02287e9e777aa3fba1c355b17a722d362f84614fba","e38da76dcd440621988d00bcf79af25d5b29c094db2a23146d003afd41943e7a"],["af3c423a95d9f5b3054754efa150ac39cd29552fe360257362dfdecef4053b45","f98a3fd831eb2b749a93b0e6f35cfb40c8cd5aa667a15581bc2feded498fd9c6"],["766dbb24d134e745cccaa28c99bf274906bb66b26dcf98df8d2fed50d884249a","744b1152eacbe5e38dcc887980da38b897584a65fa06cedd2c924f97cbac5996"],["59dbf46f8c94759ba21277c33784f41645f7b44f6c596a58ce92e666191abe3e","c534ad44175fbc300f4ea6ce648309a042ce739a7919798cd85e216c4a307f6e"],["f13ada95103c4537305e691e74e9a4a8dd647e711a95e73cb62dc6018cfd87b8","e13817b44ee14de663bf4bc808341f326949e21a6a75c2570778419bdaf5733d"],["7754b4fa0e8aced06d4167a2c59cca4cda1869c06ebadfb6488550015a88522c","30e93e864e669d82224b967c3020b8fa8d1e4e350b6cbcc537a48b57841163a2"],["948dcadf5990e048aa3874d46abef9d701858f95de8041d2a6828c99e2262519","e491a42537f6e597d5d28a3224b1bc25df9154efbd2ef1d2cbba2cae5347d57e"],["7962414450c76c1689c7b48f8202ec37fb224cf5ac0bfa1570328a8a3d7c77ab","100b610ec4ffb4760d5c1fc133ef6f6b12507a051f04ac5760afa5b29db83437"],["3514087834964b54b15b160644d915485a16977225b8847bb0dd085137ec47ca","ef0afbb2056205448e1652c48e8127fc6039e77c15c2378b7e7d15a0de293311"],["d3cc30ad6b483e4bc79ce2c9dd8bc54993e947eb8df787b442943d3f7b527eaf","8b378a22d827278d89c5e9be8f9508ae3c2ad46290358630afb34db04eede0a4"],["1624d84780732860ce1c78fcbfefe08b2b29823db913f6493975ba0ff4847610","68651cf9b6da903e0914448c6cd9d4ca896878f5282be4c8cc06e2a404078575"],["733ce80da955a8a26902c95633e62a985192474b5af207da6df7b4fd5fc61cd4","f5435a2bd2badf7d485a4d8b8db9fcce3e1ef8e0201e4578c54673bc1dc5ea1d"],["15d9441254945064cf1a1c33bbd3b49f8966c5092171e699ef258dfab81c045c","d56eb30b69463e7234f5137b73b84177434800bacebfc685fc37bbe9efe4070d"],["a1d0fcf2ec9de675b612136e5ce70d271c21417c9d2b8aaaac138599d0717940","edd77f50bcb5a3cab2e90737309667f2641462a54070f3d519212d39c197a629"],["e22fbe15c0af8ccc5780c0735f84dbe9a790badee8245c06c7ca37331cb36980","a855babad5cd60c88b430a69f53a1a7a38289154964799be43d06d77d31da06"],["311091dd9860e8e20ee13473c1155f5f69635e394704eaa74009452246cfa9b3","66db656f87d1f04fffd1f04788c06830871ec5a64feee685bd80f0b1286d8374"],["34c1fd04d301be89b31c0442d3e6ac24883928b45a9340781867d4232ec2dbdf","9414685e97b1b5954bd46f730174136d57f1ceeb487443dc5321857ba73abee"],["f219ea5d6b54701c1c14de5b557eb42a8d13f3abbcd08affcc2a5e6b049b8d63","4cb95957e83d40b0f73af4544cccf6b1f4b08d3c07b27fb8d8c2962a400766d1"],["d7b8740f74a8fbaab1f683db8f45de26543a5490bca627087236912469a0b448","fa77968128d9c92ee1010f337ad4717eff15db5ed3c049b3411e0315eaa4593b"],["32d31c222f8f6f0ef86f7c98d3a3335ead5bcd32abdd94289fe4d3091aa824bf","5f3032f5892156e39ccd3d7915b9e1da2e6dac9e6f26e961118d14b8462e1661"],["7461f371914ab32671045a155d9831ea8793d77cd59592c4340f86cbc18347b5","8ec0ba238b96bec0cbdddcae0aa442542eee1ff50c986ea6b39847b3cc092ff6"],["ee079adb1df1860074356a25aa38206a6d716b2c3e67453d287698bad7b2b2d6","8dc2412aafe3be5c4c5f37e0ecc5f9f6a446989af04c4e25ebaac479ec1c8c1e"],["16ec93e447ec83f0467b18302ee620f7e65de331874c9dc72bfd8616ba9da6b5","5e4631150e62fb40d0e8c2a7ca5804a39d58186a50e497139626778e25b0674d"],["eaa5f980c245f6f038978290afa70b6bd8855897f98b6aa485b96065d537bd99","f65f5d3e292c2e0819a528391c994624d784869d7e6ea67fb18041024edc07dc"],["78c9407544ac132692ee1910a02439958ae04877151342ea96c4b6b35a49f51","f3e0319169eb9b85d5404795539a5e68fa1fbd583c064d2462b675f194a3ddb4"],["494f4be219a1a77016dcd838431aea0001cdc8ae7a6fc688726578d9702857a5","42242a969283a5f339ba7f075e36ba2af925ce30d767ed6e55f4b031880d562c"],["a598a8030da6d86c6bc7f2f5144ea549d28211ea58faa70ebf4c1e665c1fe9b5","204b5d6f84822c307e4b4a7140737aec23fc63b65b35f86a10026dbd2d864e6b"],["c41916365abb2b5d09192f5f2dbeafec208f020f12570a184dbadc3e58595997","4f14351d0087efa49d245b328984989d5caf9450f34bfc0ed16e96b58fa9913"],["841d6063a586fa475a724604da03bc5b92a2e0d2e0a36acfe4c73a5514742881","73867f59c0659e81904f9a1c7543698e62562d6744c169ce7a36de01a8d6154"],["5e95bb399a6971d376026947f89bde2f282b33810928be4ded112ac4d70e20d5","39f23f366809085beebfc71181313775a99c9aed7d8ba38b161384c746012865"],["36e4641a53948fd476c39f8a99fd974e5ec07564b5315d8bf99471bca0ef2f66","d2424b1b1abe4eb8164227b085c9aa9456ea13493fd563e06fd51cf5694c78fc"],["336581ea7bfbbb290c191a2f507a41cf5643842170e914faeab27c2c579f726","ead12168595fe1be99252129b6e56b3391f7ab1410cd1e0ef3dcdcabd2fda224"],["8ab89816dadfd6b6a1f2634fcf00ec8403781025ed6890c4849742706bd43ede","6fdcef09f2f6d0a044e654aef624136f503d459c3e89845858a47a9129cdd24e"],["1e33f1a746c9c5778133344d9299fcaa20b0938e8acff2544bb40284b8c5fb94","60660257dd11b3aa9c8ed618d24edff2306d320f1d03010e33a7d2057f3b3b6"],["85b7c1dcb3cec1b7ee7f30ded79dd20a0ed1f4cc18cbcfcfa410361fd8f08f31","3d98a9cdd026dd43f39048f25a8847f4fcafad1895d7a633c6fed3c35e999511"],["29df9fbd8d9e46509275f4b125d6d45d7fbe9a3b878a7af872a2800661ac5f51","b4c4fe99c775a606e2d8862179139ffda61dc861c019e55cd2876eb2a27d84b"],["a0b1cae06b0a847a3fea6e671aaf8adfdfe58ca2f768105c8082b2e449fce252","ae434102edde0958ec4b19d917a6a28e6b72da1834aff0e650f049503a296cf2"],["4e8ceafb9b3e9a136dc7ff67e840295b499dfb3b2133e4ba113f2e4c0e121e5","cf2174118c8b6d7a4b48f6d534ce5c79422c086a63460502b827ce62a326683c"],["d24a44e047e19b6f5afb81c7ca2f69080a5076689a010919f42725c2b789a33b","6fb8d5591b466f8fc63db50f1c0f1c69013f996887b8244d2cdec417afea8fa3"],["ea01606a7a6c9cdd249fdfcfacb99584001edd28abbab77b5104e98e8e3b35d4","322af4908c7312b0cfbfe369f7a7b3cdb7d4494bc2823700cfd652188a3ea98d"],["af8addbf2b661c8a6c6328655eb96651252007d8c5ea31be4ad196de8ce2131f","6749e67c029b85f52a034eafd096836b2520818680e26ac8f3dfbcdb71749700"],["e3ae1974566ca06cc516d47e0fb165a674a3dabcfca15e722f0e3450f45889","2aeabe7e4531510116217f07bf4d07300de97e4874f81f533420a72eeb0bd6a4"],["591ee355313d99721cf6993ffed1e3e301993ff3ed258802075ea8ced397e246","b0ea558a113c30bea60fc4775460c7901ff0b053d25ca2bdeee98f1a4be5d196"],["11396d55fda54c49f19aa97318d8da61fa8584e47b084945077cf03255b52984","998c74a8cd45ac01289d5833a7beb4744ff536b01b257be4c5767bea93ea57a4"],["3c5d2a1ba39c5a1790000738c9e0c40b8dcdfd5468754b6405540157e017aa7a","b2284279995a34e2f9d4de7396fc18b80f9b8b9fdd270f6661f79ca4c81bd257"],["cc8704b8a60a0defa3a99a7299f2e9c3fbc395afb04ac078425ef8a1793cc030","bdd46039feed17881d1e0862db347f8cf395b74fc4bcdc4e940b74e3ac1f1b13"],["c533e4f7ea8555aacd9777ac5cad29b97dd4defccc53ee7ea204119b2889b197","6f0a256bc5efdf429a2fb6242f1a43a2d9b925bb4a4b3a26bb8e0f45eb596096"],["c14f8f2ccb27d6f109f6d08d03cc96a69ba8c34eec07bbcf566d48e33da6593","c359d6923bb398f7fd4473e16fe1c28475b740dd098075e6c0e8649113dc3a38"],["a6cbc3046bc6a450bac24789fa17115a4c9739ed75f8f21ce441f72e0b90e6ef","21ae7f4680e889bb130619e2c0f95a360ceb573c70603139862afd617fa9b9f"],["347d6d9a02c48927ebfb86c1359b1caf130a3c0267d11ce6344b39f99d43cc38","60ea7f61a353524d1c987f6ecec92f086d565ab687870cb12689ff1e31c74448"],["da6545d2181db8d983f7dcb375ef5866d47c67b1bf31c8cf855ef7437b72656a","49b96715ab6878a79e78f07ce5680c5d6673051b4935bd897fea824b77dc208a"],["c40747cc9d012cb1a13b8148309c6de7ec25d6945d657146b9d5994b8feb1111","5ca560753be2a12fc6de6caf2cb489565db936156b9514e1bb5e83037e0fa2d4"],["4e42c8ec82c99798ccf3a610be870e78338c7f713348bd34c8203ef4037f3502","7571d74ee5e0fb92a7a8b33a07783341a5492144cc54bcc40a94473693606437"],["3775ab7089bc6af823aba2e1af70b236d251cadb0c86743287522a1b3b0dedea","be52d107bcfa09d8bcb9736a828cfa7fac8db17bf7a76a2c42ad961409018cf7"],["cee31cbf7e34ec379d94fb814d3d775ad954595d1314ba8846959e3e82f74e26","8fd64a14c06b589c26b947ae2bcf6bfa0149ef0be14ed4d80f448a01c43b1c6d"],["b4f9eaea09b6917619f6ea6a4eb5464efddb58fd45b1ebefcdc1a01d08b47986","39e5c9925b5a54b07433a4f18c61726f8bb131c012ca542eb24a8ac07200682a"],["d4263dfc3d2df923a0179a48966d30ce84e2515afc3dccc1b77907792ebcc60e","62dfaf07a0f78feb30e30d6295853ce189e127760ad6cf7fae164e122a208d54"],["48457524820fa65a4f8d35eb6930857c0032acc0a4a2de422233eeda897612c4","25a748ab367979d98733c38a1fa1c2e7dc6cc07db2d60a9ae7a76aaa49bd0f77"],["dfeeef1881101f2cb11644f3a2afdfc2045e19919152923f367a1767c11cceda","ecfb7056cf1de042f9420bab396793c0c390bde74b4bbdff16a83ae09a9a7517"],["6d7ef6b17543f8373c573f44e1f389835d89bcbc6062ced36c82df83b8fae859","cd450ec335438986dfefa10c57fea9bcc521a0959b2d80bbf74b190dca712d10"],["e75605d59102a5a2684500d3b991f2e3f3c88b93225547035af25af66e04541f","f5c54754a8f71ee540b9b48728473e314f729ac5308b06938360990e2bfad125"],["eb98660f4c4dfaa06a2be453d5020bc99a0c2e60abe388457dd43fefb1ed620c","6cb9a8876d9cb8520609af3add26cd20a0a7cd8a9411131ce85f44100099223e"],["13e87b027d8514d35939f2e6892b19922154596941888336dc3563e3b8dba942","fef5a3c68059a6dec5d624114bf1e91aac2b9da568d6abeb2570d55646b8adf1"],["ee163026e9fd6fe017c38f06a5be6fc125424b371ce2708e7bf4491691e5764a","1acb250f255dd61c43d94ccc670d0f58f49ae3fa15b96623e5430da0ad6c62b2"],["b268f5ef9ad51e4d78de3a750c2dc89b1e626d43505867999932e5db33af3d80","5f310d4b3c99b9ebb19f77d41c1dee018cf0d34fd4191614003e945a1216e423"],["ff07f3118a9df035e9fad85eb6c7bfe42b02f01ca99ceea3bf7ffdba93c4750d","438136d603e858a3a5c440c38eccbaddc1d2942114e2eddd4740d098ced1f0d8"],["8d8b9855c7c052a34146fd20ffb658bea4b9f69e0d825ebec16e8c3ce2b526a1","cdb559eedc2d79f926baf44fb84ea4d44bcf50fee51d7ceb30e2e7f463036758"],["52db0b5384dfbf05bfa9d472d7ae26dfe4b851ceca91b1eba54263180da32b63","c3b997d050ee5d423ebaf66a6db9f57b3180c902875679de924b69d84a7b375"],["e62f9490d3d51da6395efd24e80919cc7d0f29c3f3fa48c6fff543becbd43352","6d89ad7ba4876b0b22c2ca280c682862f342c8591f1daf5170e07bfd9ccafa7d"],["7f30ea2476b399b4957509c88f77d0191afa2ff5cb7b14fd6d8e7d65aaab1193","ca5ef7d4b231c94c3b15389a5f6311e9daff7bb67b103e9880ef4bff637acaec"],["5098ff1e1d9f14fb46a210fada6c903fef0fb7b4a1dd1d9ac60a0361800b7a00","9731141d81fc8f8084d37c6e7542006b3ee1b40d60dfe5362a5b132fd17ddc0"],["32b78c7de9ee512a72895be6b9cbefa6e2f3c4ccce445c96b9f2c81e2778ad58","ee1849f513df71e32efc3896ee28260c73bb80547ae2275ba497237794c8753c"],["e2cb74fddc8e9fbcd076eef2a7c72b0ce37d50f08269dfc074b581550547a4f7","d3aa2ed71c9dd2247a62df062736eb0baddea9e36122d2be8641abcb005cc4a4"],["8438447566d4d7bedadc299496ab357426009a35f235cb141be0d99cd10ae3a8","c4e1020916980a4da5d01ac5e6ad330734ef0d7906631c4f2390426b2edd791f"],["4162d488b89402039b584c6fc6c308870587d9c46f660b878ab65c82c711d67e","67163e903236289f776f22c25fb8a3afc1732f2b84b4e95dbda47ae5a0852649"],["3fad3fa84caf0f34f0f89bfd2dcf54fc175d767aec3e50684f3ba4a4bf5f683d","cd1bc7cb6cc407bb2f0ca647c718a730cf71872e7d0d2a53fa20efcdfe61826"],["674f2600a3007a00568c1a7ce05d0816c1fb84bf1370798f1c69532faeb1a86b","299d21f9413f33b3edf43b257004580b70db57da0b182259e09eecc69e0d38a5"],["d32f4da54ade74abb81b815ad1fb3b263d82d6c692714bcff87d29bd5ee9f08f","f9429e738b8e53b968e99016c059707782e14f4535359d582fc416910b3eea87"],["30e4e670435385556e593657135845d36fbb6931f72b08cb1ed954f1e3ce3ff6","462f9bce619898638499350113bbc9b10a878d35da70740dc695a559eb88db7b"],["be2062003c51cc3004682904330e4dee7f3dcd10b01e580bf1971b04d4cad297","62188bc49d61e5428573d48a74e1c655b1c61090905682a0d5558ed72dccb9bc"],["93144423ace3451ed29e0fb9ac2af211cb6e84a601df5993c419859fff5df04a","7c10dfb164c3425f5c71a3f9d7992038f1065224f72bb9d1d902a6d13037b47c"],["b015f8044f5fcbdcf21ca26d6c34fb8197829205c7b7d2a7cb66418c157b112c","ab8c1e086d04e813744a655b2df8d5f83b3cdc6faa3088c1d3aea1454e3a1d5f"],["d5e9e1da649d97d89e4868117a465a3a4f8a18de57a140d36b3f2af341a21b52","4cb04437f391ed73111a13cc1d4dd0db1693465c2240480d8955e8592f27447a"],["d3ae41047dd7ca065dbf8ed77b992439983005cd72e16d6f996a5316d36966bb","bd1aeb21ad22ebb22a10f0303417c6d964f8cdd7df0aca614b10dc14d125ac46"],["463e2763d885f958fc66cdd22800f0a487197d0a82e377b49f80af87c897b065","bfefacdb0e5d0fd7df3a311a94de062b26b80c61fbc97508b79992671ef7ca7f"],["7985fdfd127c0567c6f53ec1bb63ec3158e597c40bfe747c83cddfc910641917","603c12daf3d9862ef2b25fe1de289aed24ed291e0ec6708703a5bd567f32ed03"],["74a1ad6b5f76e39db2dd249410eac7f99e74c59cb83d2d0ed5ff1543da7703e9","cc6157ef18c9c63cd6193d83631bbea0093e0968942e8c33d5737fd790e0db08"],["30682a50703375f602d416664ba19b7fc9bab42c72747463a71d0896b22f6da3","553e04f6b018b4fa6c8f39e7f311d3176290d0e0f19ca73f17714d9977a22ff8"],["9e2158f0d7c0d5f26c3791efefa79597654e7a2b2464f52b1ee6c1347769ef57","712fcdd1b9053f09003a3481fa7762e9ffd7c8ef35a38509e2fbf2629008373"],["176e26989a43c9cfeba4029c202538c28172e566e3c4fce7322857f3be327d66","ed8cc9d04b29eb877d270b4878dc43c19aefd31f4eee09ee7b47834c1fa4b1c3"],["75d46efea3771e6e68abb89a13ad747ecf1892393dfc4f1b7004788c50374da8","9852390a99507679fd0b86fd2b39a868d7efc22151346e1a3ca4726586a6bed8"],["809a20c67d64900ffb698c4c825f6d5f2310fb0451c869345b7319f645605721","9e994980d9917e22b76b061927fa04143d096ccc54963e6a5ebfa5f3f8e286c1"],["1b38903a43f7f114ed4500b4eac7083fdefece1cf29c63528d563446f972c180","4036edc931a60ae889353f77fd53de4a2708b26b6f5da72ad3394119daf408f9"]]}}});var Py=x(d9=>{"use strict";var n_=d9,hA=Ly(),r_=JS(),$0e=Kn(),l9=$0e.assert;function h9(e){e.type==="short"?this.curve=new r_.short(e):e.type==="edwards"?this.curve=new r_.edwards(e):this.curve=new r_.mont(e),this.g=this.curve.g,this.n=this.curve.n,this.hash=e.hash,l9(this.g.validate(),"Invalid curve"),l9(this.g.mul(this.n).isInfinity(),"Invalid curve, G*N != O")}n_.PresetCurve=h9;function dA(e,t){Object.defineProperty(n_,e,{configurable:!0,enumerable:!0,get:function(){var r=new h9(t);return Object.defineProperty(n_,e,{configurable:!0,enumerable:!0,value:r}),r}})}dA("p192",{type:"short",prime:"p192",p:"ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff",a:"ffffffff ffffffff ffffffff fffffffe ffffffff fffffffc",b:"64210519 e59c80e7 0fa7e9ab 72243049 feb8deec c146b9b1",n:"ffffffff ffffffff ffffffff 99def836 146bc9b1 b4d22831",hash:hA.sha256,gRed:!1,g:["188da80e b03090f6 7cbf20eb 43a18800 f4ff0afd 82ff1012","07192b95 ffc8da78 631011ed 6b24cdd5 73f977a1 1e794811"]});dA("p224",{type:"short",prime:"p224",p:"ffffffff ffffffff ffffffff ffffffff 00000000 00000000 00000001",a:"ffffffff ffffffff ffffffff fffffffe ffffffff ffffffff fffffffe",b:"b4050a85 0c04b3ab f5413256 5044b0b7 d7bfd8ba 270b3943 2355ffb4",n:"ffffffff ffffffff ffffffff ffff16a2 e0b8f03e 13dd2945 5c5c2a3d",hash:hA.sha256,gRed:!1,g:["b70e0cbd 6bb4bf7f 321390b9 4a03c1d3 56c21122 343280d6 115c1d21","bd376388 b5f723fb 4c22dfe6 cd4375a0 5a074764 44d58199 85007e34"]});dA("p256",{type:"short",prime:null,p:"ffffffff 00000001 00000000 00000000 00000000 ffffffff ffffffff ffffffff",a:"ffffffff 00000001 00000000 00000000 00000000 ffffffff ffffffff fffffffc",b:"5ac635d8 aa3a93e7 b3ebbd55 769886bc 651d06b0 cc53b0f6 3bce3c3e 27d2604b",n:"ffffffff 00000000 ffffffff ffffffff bce6faad a7179e84 f3b9cac2 fc632551",hash:hA.sha256,gRed:!1,g:["6b17d1f2 e12c4247 f8bce6e5 63a440f2 77037d81 2deb33a0 f4a13945 d898c296","4fe342e2 fe1a7f9b 8ee7eb4a 7c0f9e16 2bce3357 6b315ece cbb64068 37bf51f5"]});dA("p384",{type:"short",prime:null,p:"ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe ffffffff 00000000 00000000 ffffffff",a:"ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe ffffffff 00000000 00000000 fffffffc",b:"b3312fa7 e23ee7e4 988e056b e3f82d19 181d9c6e fe814112 0314088f 5013875a c656398d 8a2ed19d 2a85c8ed d3ec2aef",n:"ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff c7634d81 f4372ddf 581a0db2 48b0a77a ecec196a ccc52973",hash:hA.sha384,gRed:!1,g:["aa87ca22 be8b0537 8eb1c71e f320ad74 6e1d3b62 8ba79b98 59f741e0 82542a38 5502f25d bf55296c 3a545e38 72760ab7","3617de4a 96262c6f 5d9e98bf 9292dc29 f8f41dbd 289a147c e9da3113 b5f0b8c0 0a60b1ce 1d7e819d 7a431d7c 90ea0e5f"]});dA("p521",{type:"short",prime:null,p:"000001ff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff",a:"000001ff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffc",b:"00000051 953eb961 8e1c9a1f 929a21a0 b68540ee a2da725b 99b315f3 b8b48991 8ef109e1 56193951 ec7e937b 1652c0bd 3bb1bf07 3573df88 3d2c34f1 ef451fd4 6b503f00",n:"000001ff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffa 51868783 bf2f966b 7fcc0148 f709a5d0 3bb5c9b8 899c47ae bb6fb71e 91386409",hash:hA.sha512,gRed:!1,g:["000000c6 858e06b7 0404e9cd 9e3ecb66 2395b442 9c648139 053fb521 f828af60 6b4d3dba a14b5e77 efe75928 fe1dc127 a2ffa8de 3348b3c1 856a429b f97e7e31 c2e5bd66","00000118 39296a78 9a3bc004 5c8a5fb4 2c7d1bd9 98f54449 579b4468 17afbd17 273e662c 97ee7299 5ef42640 c550b901 3fad0761 353c7086 a272c240 88be9476 9fd16650"]});dA("curve25519",{type:"mont",prime:"p25519",p:"7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed",a:"76d06",b:"1",n:"1000000000000000 0000000000000000 14def9dea2f79cd6 5812631a5cf5d3ed",hash:hA.sha256,gRed:!1,g:["9"]});dA("ed25519",{type:"edwards",prime:"p25519",p:"7fffffffffffffff ffffffffffffffff ffffffffffffffff ffffffffffffffed",a:"-1",c:"1",d:"52036cee2b6ffe73 8cc740797779e898 00700a4d4141d8ab 75eb4dca135978a3",n:"1000000000000000 0000000000000000 14def9dea2f79cd6 5812631a5cf5d3ed",hash:hA.sha256,gRed:!1,g:["216936d3cd6e53fec0a4e231fdd6dc5c692cc7609525a7b2c9562d608f25d51a","6666666666666666666666666666666666666666666666666666666666666658"]});var i_;try{i_=c9()}catch{i_=void 0}dA("secp256k1",{type:"short",prime:"k256",p:"ffffffff ffffffff ffffffff ffffffff ffffffff ffffffff fffffffe fffffc2f",a:"0",b:"7",n:"ffffffff ffffffff ffffffff fffffffe baaedce6 af48a03b bfd25e8c d0364141",h:"1",hash:hA.sha256,beta:"7ae96a2b657c07106e64479eac3434e99cf0497512f58995c1396c28719501ee",lambda:"5363ad4cc05c30e0a5261c028812645a122e22ea20816678df02967c1b23bd72",basis:[{a:"3086d221a7d46bcde86c90e49284eb15",b:"-e4437ed6010e88286f547fa90abfe4c3"},{a:"114ca50f7a8e2f3f657c1108d9d44cfd8",b:"3086d221a7d46bcde86c90e49284eb15"}],gRed:!1,g:["79be667ef9dcbbac55a06295ce870b07029bfcdb2dce28d959f2815b16f81798","483ada7726a3c4655da4fbfc0e1108a8fd17b448a68554199c47d08ffb10d4b8",i_]})});var E9=x((ZMe,p9)=>{"use strict";var epe=Ly(),Uf=WS(),g9=zn();function gA(e){if(!(this instanceof gA))return new gA(e);this.hash=e.hash,this.predResist=!!e.predResist,this.outLen=this.hash.outSize,this.minEntropy=e.minEntropy||this.hash.hmacStrength,this._reseed=null,this.reseedInterval=null,this.K=null,this.V=null;var t=Uf.toArray(e.entropy,e.entropyEnc||"hex"),r=Uf.toArray(e.nonce,e.nonceEnc||"hex"),n=Uf.toArray(e.pers,e.persEnc||"hex");g9(t.length>=this.minEntropy/8,"Not enough entropy. Minimum is: "+this.minEntropy+" bits"),this._init(t,r,n)}p9.exports=gA;gA.prototype._init=function(t,r,n){var i=t.concat(r).concat(n);this.K=new Array(this.outLen/8),this.V=new Array(this.outLen/8);for(var s=0;s<this.V.length;s++)this.K[s]=0,this.V[s]=1;this._update(i),this._reseed=1,this.reseedInterval=281474976710656};gA.prototype._hmac=function(){return new epe.hmac(this.hash,this.K)};gA.prototype._update=function(t){var r=this._hmac().update(this.V).update([0]);t&&(r=r.update(t)),this.K=r.digest(),this.V=this._hmac().update(this.V).digest(),t&&(this.K=this._hmac().update(this.V).update([1]).update(t).digest(),this.V=this._hmac().update(this.V).digest())};gA.prototype.reseed=function(t,r,n,i){typeof r!="string"&&(i=n,n=r,r=null),t=Uf.toArray(t,r),n=Uf.toArray(n,i),g9(t.length>=this.minEntropy/8,"Not enough entropy. Minimum is: "+this.minEntropy+" bits"),this._update(t.concat(n||[])),this._reseed=1};gA.prototype.generate=function(t,r,n,i){if(this._reseed>this.reseedInterval)throw new Error("Reseed is required");typeof r!="string"&&(i=n,n=r,r=null),n&&(n=Uf.toArray(n,i||"hex"),this._update(n));for(var s=[];s.length<t;)this.V=this._hmac().update(this.V).digest(),s=s.concat(this.V);var o=s.slice(0,t);return this._update(n),this._reseed++,Uf.encode(o,r)}});var m9=x(($Me,y9)=>{"use strict";var tpe=kr(),rpe=Kn(),s_=rpe.assert;function An(e,t){this.ec=e,this.priv=null,this.pub=null,t.priv&&this._importPrivate(t.priv,t.privEnc),t.pub&&this._importPublic(t.pub,t.pubEnc)}y9.exports=An;An.fromPublic=function(t,r,n){return r instanceof An?r:new An(t,{pub:r,pubEnc:n})};An.fromPrivate=function(t,r,n){return r instanceof An?r:new An(t,{priv:r,privEnc:n})};An.prototype.validate=function(){var t=this.getPublic();return t.isInfinity()?{result:!1,reason:"Invalid public key"}:t.validate()?t.mul(this.ec.curve.n).isInfinity()?{result:!0,reason:null}:{result:!1,reason:"Public key * N != O"}:{result:!1,reason:"Public key is not a point"}};An.prototype.getPublic=function(t,r){return typeof t=="string"&&(r=t,t=null),this.pub||(this.pub=this.ec.g.mul(this.priv)),r?this.pub.encode(r,t):this.pub};An.prototype.getPrivate=function(t){return t==="hex"?this.priv.toString(16,2):this.priv};An.prototype._importPrivate=function(t,r){this.priv=new tpe(t,r||16),this.priv=this.priv.umod(this.ec.curve.n)};An.prototype._importPublic=function(t,r){if(t.x||t.y){this.ec.curve.type==="mont"?s_(t.x,"Need x coordinate"):(this.ec.curve.type==="short"||this.ec.curve.type==="edwards")&&s_(t.x&&t.y,"Need both x and y coordinate"),this.pub=this.ec.curve.point(t.x,t.y);return}this.pub=this.ec.curve.decodePoint(t,r)};An.prototype.derive=function(t){return t.validate()||s_(t.validate(),"public point not validated"),t.mul(this.priv).getX()};An.prototype.sign=function(t,r,n){return this.ec.sign(t,this,r,n)};An.prototype.verify=function(t,r,n){return this.ec.verify(t,r,this,void 0,n)};An.prototype.inspect=function(){return"<Key priv: "+(this.priv&&this.priv.toString(16,2))+" pub: "+(this.pub&&this.pub.inspect())+" >"}});var b9=x((eFe,I9)=>{"use strict";var Oy=kr(),A_=Kn(),npe=A_.assert;function Hy(e,t){if(e instanceof Hy)return e;this._importDER(e,t)||(npe(e.r&&e.s,"Signature without r or s"),this.r=new Oy(e.r,16),this.s=new Oy(e.s,16),e.recoveryParam===void 0?this.recoveryParam=null:this.recoveryParam=e.recoveryParam)}I9.exports=Hy;function ipe(){this.place=0}function o_(e,t){var r=e[t.place++];if(!(r&128))return r;var n=r&15;if(n===0||n>4||e[t.place]===0)return!1;for(var i=0,s=0,o=t.place;s<n;s++,o++)i<<=8,i|=e[o],i>>>=0;return i<=127?!1:(t.place=o,i)}function B9(e){for(var t=0,r=e.length-1;!e[t]&&!(e[t+1]&128)&&t<r;)t++;return t===0?e:e.slice(t)}Hy.prototype._importDER=function(t,r){t=A_.toArray(t,r);var n=new ipe;if(t[n.place++]!==48)return!1;var i=o_(t,n);if(i===!1||i+n.place!==t.length||t[n.place++]!==2)return!1;var s=o_(t,n);if(s===!1||(t[n.place]&128)!==0)return!1;var o=t.slice(n.place,s+n.place);if(n.place+=s,t[n.place++]!==2)return!1;var a=o_(t,n);if(a===!1||t.length!==a+n.place||(t[n.place]&128)!==0)return!1;var A=t.slice(n.place,a+n.place);if(o[0]===0)if(o[1]&128)o=o.slice(1);else return!1;if(A[0]===0)if(A[1]&128)A=A.slice(1);else return!1;return this.r=new Oy(o),this.s=new Oy(A),this.recoveryParam=null,!0};function a_(e,t){if(t<128){e.push(t);return}var r=1+(Math.log(t)/Math.LN2>>>3);for(e.push(r|128);--r;)e.push(t>>>(r<<3)&255);e.push(t)}Hy.prototype.toDER=function(t){var r=this.r.toArray(),n=this.s.toArray();for(r[0]&128&&(r=[0].concat(r)),n[0]&128&&(n=[0].concat(n)),r=B9(r),n=B9(n);!n[0]&&!(n[1]&128);)n=n.slice(1);var i=[2];a_(i,r.length),i=i.concat(r),i.push(2),a_(i,n.length);var s=i.concat(n),o=[48];return a_(o,s.length),o=o.concat(s),A_.encode(o,t)}});var w9=x((tFe,Q9)=>{"use strict";var hs=kr(),C9=E9(),spe=Kn(),f_=Py(),ope=Qy(),Lf=spe.assert,u_=m9(),qy=b9();function _i(e){if(!(this instanceof _i))return new _i(e);typeof e=="string"&&(Lf(Object.prototype.hasOwnProperty.call(f_,e),"Unknown curve "+e),e=f_[e]),e instanceof f_.PresetCurve&&(e={curve:e}),this.curve=e.curve.curve,this.n=this.curve.n,this.nh=this.n.ushrn(1),this.g=this.curve.g,this.g=e.curve.g,this.g.precompute(e.curve.n.bitLength()+1),this.hash=e.hash||e.curve.hash}Q9.exports=_i;_i.prototype.keyPair=function(t){return new u_(this,t)};_i.prototype.keyFromPrivate=function(t,r){return u_.fromPrivate(this,t,r)};_i.prototype.keyFromPublic=function(t,r){return u_.fromPublic(this,t,r)};_i.prototype.genKeyPair=function(t){t||(t={});for(var r=new C9({hash:this.hash,pers:t.pers,persEnc:t.persEnc||"utf8",entropy:t.entropy||ope(this.hash.hmacStrength),entropyEnc:t.entropy&&t.entropyEnc||"utf8",nonce:this.n.toArray()}),n=this.n.byteLength(),i=this.n.sub(new hs(2));;){var s=new hs(r.generate(n));if(!(s.cmp(i)>0))return s.iaddn(1),this.keyFromPrivate(s)}};_i.prototype._truncateToN=function(t,r,n){var i;if(hs.isBN(t)||typeof t=="number")t=new hs(t,16),i=t.byteLength();else if(typeof t=="object")i=t.length,t=new hs(t,16);else{var s=t.toString();i=s.length+1>>>1,t=new hs(s,16)}typeof n!="number"&&(n=i*8);var o=n-this.n.bitLength();return o>0&&(t=t.ushrn(o)),!r&&t.cmp(this.n)>=0?t.sub(this.n):t};_i.prototype.sign=function(t,r,n,i){if(typeof n=="object"&&(i=n,n=null),i||(i={}),typeof t!="string"&&typeof t!="number"&&!hs.isBN(t)){Lf(typeof t=="object"&&t&&typeof t.length=="number","Expected message to be an array-like, a hex string, or a BN instance"),Lf(t.length>>>0===t.length);for(var s=0;s<t.length;s++)Lf((t[s]&255)===t[s])}r=this.keyFromPrivate(r,n),t=this._truncateToN(t,!1,i.msgBitLength),Lf(!t.isNeg(),"Can not sign a negative message");var o=this.n.byteLength(),a=r.getPrivate().toArray("be",o),A=t.toArray("be",o);Lf(new hs(A).eq(t),"Can not sign message");for(var f=new C9({hash:this.hash,entropy:a,nonce:A,pers:i.pers,persEnc:i.persEnc||"utf8"}),l=this.n.sub(new hs(1)),p=0;;p++){var B=i.k?i.k(p):new hs(f.generate(this.n.byteLength()));if(B=this._truncateToN(B,!0),!(B.cmpn(1)<=0||B.cmp(l)>=0)){var S=this.g.mul(B);if(!S.isInfinity()){var _=S.getX(),N=_.umod(this.n);if(N.cmpn(0)!==0){var P=B.invm(this.n).mul(N.mul(r.getPrivate()).iadd(t));if(P=P.umod(this.n),P.cmpn(0)!==0){var U=(S.getY().isOdd()?1:0)|(_.cmp(N)!==0?2:0);return i.canonical&&P.cmp(this.nh)>0&&(P=this.n.sub(P),U^=1),new qy({r:N,s:P,recoveryParam:U})}}}}}};_i.prototype.verify=function(t,r,n,i,s){s||(s={}),t=this._truncateToN(t,!1,s.msgBitLength),n=this.keyFromPublic(n,i),r=new qy(r,"hex");var o=r.r,a=r.s;if(o.cmpn(1)<0||o.cmp(this.n)>=0||a.cmpn(1)<0||a.cmp(this.n)>=0)return!1;var A=a.invm(this.n),f=A.mul(t).umod(this.n),l=A.mul(o).umod(this.n),p;return this.curve._maxwellTrick?(p=this.g.jmulAdd(f,n.getPublic(),l),p.isInfinity()?!1:p.eqXToP(o)):(p=this.g.mulAdd(f,n.getPublic(),l),p.isInfinity()?!1:p.getX().umod(this.n).cmp(o)===0)};_i.prototype.recoverPubKey=function(e,t,r,n){Lf((3&r)===r,"The recovery param is more than two bits"),t=new qy(t,n);var i=this.n,s=new hs(e),o=t.r,a=t.s,A=r&1,f=r>>1;if(o.cmp(this.curve.p.umod(this.curve.n))>=0&&f)throw new Error("Unable to find sencond key candinate");f?o=this.curve.pointFromX(o.add(this.curve.n),A):o=this.curve.pointFromX(o,A);var l=t.r.invm(i),p=i.sub(s).mul(l).umod(i),B=a.mul(l).umod(i);return this.g.mulAdd(p,o,B)};_i.prototype.getKeyRecoveryParam=function(e,t,r,n){if(t=new qy(t,n),t.recoveryParam!==null)return t.recoveryParam;for(var i=0;i<4;i++){var s;try{s=this.recoverPubKey(e,t,i)}catch{continue}if(s.eq(r))return i}throw new Error("Unable to find valid recovery factor")}});var R9=x((rFe,v9)=>{"use strict";var Od=Kn(),_9=Od.assert,S9=Od.parseBytes,Zc=Od.cachedProperty;function Lr(e,t){this.eddsa=e,this._secret=S9(t.secret),e.isPoint(t.pub)?this._pub=t.pub:this._pubBytes=S9(t.pub)}Lr.fromPublic=function(t,r){return r instanceof Lr?r:new Lr(t,{pub:r})};Lr.fromSecret=function(t,r){return r instanceof Lr?r:new Lr(t,{secret:r})};Lr.prototype.secret=function(){return this._secret};Zc(Lr,"pubBytes",function(){return this.eddsa.encodePoint(this.pub())});Zc(Lr,"pub",function(){return this._pubBytes?this.eddsa.decodePoint(this._pubBytes):this.eddsa.g.mul(this.priv())});Zc(Lr,"privBytes",function(){var t=this.eddsa,r=this.hash(),n=t.encodingLength-1,i=r.slice(0,t.encodingLength);return i[0]&=248,i[n]&=127,i[n]|=64,i});Zc(Lr,"priv",function(){return this.eddsa.decodeInt(this.privBytes())});Zc(Lr,"hash",function(){return this.eddsa.hash().update(this.secret()).digest()});Zc(Lr,"messagePrefix",function(){return this.hash().slice(this.eddsa.encodingLength)});Lr.prototype.sign=function(t){return _9(this._secret,"KeyPair can only verify"),this.eddsa.sign(t,this)};Lr.prototype.verify=function(t,r){return this.eddsa.verify(t,r,this)};Lr.prototype.getSecret=function(t){return _9(this._secret,"KeyPair is public only"),Od.encode(this.secret(),t)};Lr.prototype.getPublic=function(t){return Od.encode(this.pubBytes(),t)};v9.exports=Lr});var N9=x((nFe,T9)=>{"use strict";var ape=kr(),Gy=Kn(),D9=Gy.assert,Yy=Gy.cachedProperty,Ape=Gy.parseBytes;function Pf(e,t){this.eddsa=e,typeof t!="object"&&(t=Ape(t)),Array.isArray(t)&&(D9(t.length===e.encodingLength*2,"Signature has invalid size"),t={R:t.slice(0,e.encodingLength),S:t.slice(e.encodingLength)}),D9(t.R&&t.S,"Signature without R or S"),e.isPoint(t.R)&&(this._R=t.R),t.S instanceof ape&&(this._S=t.S),this._Rencoded=Array.isArray(t.R)?t.R:t.Rencoded,this._Sencoded=Array.isArray(t.S)?t.S:t.Sencoded}Yy(Pf,"S",function(){return this.eddsa.decodeInt(this.Sencoded())});Yy(Pf,"R",function(){return this.eddsa.decodePoint(this.Rencoded())});Yy(Pf,"Rencoded",function(){return this.eddsa.encodePoint(this.R())});Yy(Pf,"Sencoded",function(){return this.eddsa.encodeInt(this.S())});Pf.prototype.toBytes=function(){return this.Rencoded().concat(this.Sencoded())};Pf.prototype.toHex=function(){return Gy.encode(this.toBytes(),"hex").toUpperCase()};T9.exports=Pf});var U9=x((iFe,x9)=>{"use strict";var fpe=Ly(),upe=Py(),$c=Kn(),cpe=$c.assert,F9=$c.parseBytes,k9=R9(),M9=N9();function kn(e){if(cpe(e==="ed25519","only tested with ed25519 so far"),!(this instanceof kn))return new kn(e);e=upe[e].curve,this.curve=e,this.g=e.g,this.g.precompute(e.n.bitLength()+1),this.pointClass=e.point().constructor,this.encodingLength=Math.ceil(e.n.bitLength()/8),this.hash=fpe.sha512}x9.exports=kn;kn.prototype.sign=function(t,r){t=F9(t);var n=this.keyFromSecret(r),i=this.hashInt(n.messagePrefix(),t),s=this.g.mul(i),o=this.encodePoint(s),a=this.hashInt(o,n.pubBytes(),t).mul(n.priv()),A=i.add(a).umod(this.curve.n);return this.makeSignature({R:s,S:A,Rencoded:o})};kn.prototype.verify=function(t,r,n){if(t=F9(t),r=this.makeSignature(r),r.S().gte(r.eddsa.curve.n)||r.S().isNeg())return!1;var i=this.keyFromPublic(n),s=this.hashInt(r.Rencoded(),i.pubBytes(),t),o=this.g.mul(r.S()),a=r.R().add(i.pub().mul(s));return a.eq(o)};kn.prototype.hashInt=function(){for(var t=this.hash(),r=0;r<arguments.length;r++)t.update(arguments[r]);return $c.intFromLE(t.digest()).umod(this.curve.n)};kn.prototype.keyFromPublic=function(t){return k9.fromPublic(this,t)};kn.prototype.keyFromSecret=function(t){return k9.fromSecret(this,t)};kn.prototype.makeSignature=function(t){return t instanceof M9?t:new M9(this,t)};kn.prototype.encodePoint=function(t){var r=t.getY().toArray("le",this.encodingLength);return r[this.encodingLength-1]|=t.getX().isOdd()?128:0,r};kn.prototype.decodePoint=function(t){t=$c.parseBytes(t);var r=t.length-1,n=t.slice(0,r).concat(t[r]&-129),i=(t[r]&128)!==0,s=$c.intFromLE(n);return this.curve.pointFromY(s,i)};kn.prototype.encodeInt=function(t){return t.toArray("le",this.encodingLength)};kn.prototype.decodeInt=function(t){return $c.intFromLE(t)};kn.prototype.isPoint=function(t){return t instanceof this.pointClass}});var Wy=x(L9=>{"use strict";var Of=L9;Of.version=pP().version;Of.utils=Kn();Of.rand=Qy();Of.curve=JS();Of.curves=Py();Of.ec=w9();Of.eddsa=U9()});var P9=x((exports,module)=>{var indexOf=function(e,t){if(e.indexOf)return e.indexOf(t);for(var r=0;r<e.length;r++)if(e[r]===t)return r;return-1},Object_keys=function(e){if(Object.keys)return Object.keys(e);var t=[];for(var r in e)t.push(r);return t},forEach=function(e,t){if(e.forEach)return e.forEach(t);for(var r=0;r<e.length;r++)t(e[r],r,e)},defineProp=(function(){try{return Object.defineProperty({},"_",{}),function(e,t,r){Object.defineProperty(e,t,{writable:!0,enumerable:!1,configurable:!0,value:r})}}catch{return function(t,r,n){t[r]=n}}})(),globals=["Array","Boolean","Date","Error","EvalError","Function","Infinity","JSON","Math","NaN","Number","Object","RangeError","ReferenceError","RegExp","String","SyntaxError","TypeError","URIError","decodeURI","decodeURIComponent","encodeURI","encodeURIComponent","escape","eval","isFinite","isNaN","parseFloat","parseInt","undefined","unescape"];function Context(){}Context.prototype={};var Script=exports.Script=function(t){if(!(this instanceof Script))return new Script(t);this.code=t};Script.prototype.runInContext=function(e){if(!(e instanceof Context))throw new TypeError("needs a 'context' argument.");var t=document.createElement("iframe");t.style||(t.style={}),t.style.display="none",document.body.appendChild(t);var r=t.contentWindow,n=r.eval,i=r.execScript;!n&&i&&(i.call(r,"null"),n=r.eval),forEach(Object_keys(e),function(a){r[a]=e[a]}),forEach(globals,function(a){e[a]&&(r[a]=e[a])});var s=Object_keys(r),o=n.call(r,this.code);return forEach(Object_keys(r),function(a){(a in e||indexOf(s,a)===-1)&&(e[a]=r[a])}),forEach(globals,function(a){a in e||defineProp(e,a,r[a])}),document.body.removeChild(t),o};Script.prototype.runInThisContext=function(){return eval(this.code)};Script.prototype.runInNewContext=function(e){var t=Script.createContext(e),r=this.runInContext(t);return e&&forEach(Object_keys(t),function(n){e[n]=t[n]}),r};forEach(Object_keys(Script.prototype),function(e){exports[e]=Script[e]=function(t){var r=Script(t);return r[e].apply(r,[].slice.call(arguments,1))}});exports.isContext=function(e){return e instanceof Context};exports.createScript=function(e){return exports.Script(e)};exports.createContext=Script.createContext=function(e){var t=new Context;return typeof e=="object"&&forEach(Object_keys(e),function(r){t[r]=e[r]}),t}});var q9=x(H9=>{var O9=tl(),lpe=ze(),hpe=H9;hpe.define=function(t,r){return new el(t,r)};function el(e,t){this.name=e,this.body=t,this.decoders={},this.encoders={}}el.prototype._createNamed=function(t){var r;try{r=P9().runInThisContext("(function "+this.name+`(entity) {
-  this._initNamed(entity);
-})`)}catch{r=function(i){this._initNamed(i)}}return lpe(r,t),r.prototype._initNamed=function(i){t.call(this,i)},new r(this)};el.prototype._getDecoder=function(t){return t=t||"der",this.decoders.hasOwnProperty(t)||(this.decoders[t]=this._createNamed(O9.decoders[t])),this.decoders[t]};el.prototype.decode=function(t,r,n){return this._getDecoder(r).decode(t,n)};el.prototype._getEncoder=function(t){return t=t||"der",this.encoders.hasOwnProperty(t)||(this.encoders[t]=this._createNamed(O9.encoders[t])),this.encoders[t]};el.prototype.encode=function(t,r,n){return this._getEncoder(r).encode(t,n)}});var Y9=x(G9=>{var dpe=ze();function vi(e){this._reporterState={obj:null,path:[],options:e||{},errors:[]}}G9.Reporter=vi;vi.prototype.isError=function(t){return t instanceof rl};vi.prototype.save=function(){var t=this._reporterState;return{obj:t.obj,pathLen:t.path.length}};vi.prototype.restore=function(t){var r=this._reporterState;r.obj=t.obj,r.path=r.path.slice(0,t.pathLen)};vi.prototype.enterKey=function(t){return this._reporterState.path.push(t)};vi.prototype.exitKey=function(t){var r=this._reporterState;r.path=r.path.slice(0,t-1)};vi.prototype.leaveKey=function(t,r,n){var i=this._reporterState;this.exitKey(t),i.obj!==null&&(i.obj[r]=n)};vi.prototype.path=function(){return this._reporterState.path.join("/")};vi.prototype.enterObject=function(){var t=this._reporterState,r=t.obj;return t.obj={},r};vi.prototype.leaveObject=function(t){var r=this._reporterState,n=r.obj;return r.obj=t,n};vi.prototype.error=function(t){var r,n=this._reporterState,i=t instanceof rl;if(i?r=t:r=new rl(n.path.map(function(s){return"["+JSON.stringify(s)+"]"}).join(""),t.message||t,t.stack),!n.options.partial)throw r;return i||n.errors.push(r),r};vi.prototype.wrapResult=function(t){var r=this._reporterState;return r.options.partial?{result:this.isError(t)?null:t,errors:r.errors}:t};function rl(e,t){this.path=e,this.rethrow(t)}dpe(rl,Error);rl.prototype.rethrow=function(t){if(this.message=t+" at: "+(this.path||"(shallow)"),Error.captureStackTrace&&Error.captureStackTrace(this,rl),!this.stack)try{throw new Error(this.message)}catch(r){this.stack=r.stack}return this}});var l_=x(c_=>{var gpe=ze(),Jy=nl().Reporter,Hd=Gr().Buffer;function ho(e,t){if(Jy.call(this,t),!Hd.isBuffer(e)){this.error("Input not Buffer");return}this.base=e,this.offset=0,this.length=e.length}gpe(ho,Jy);c_.DecoderBuffer=ho;ho.prototype.save=function(){return{offset:this.offset,reporter:Jy.prototype.save.call(this)}};ho.prototype.restore=function(t){var r=new ho(this.base);return r.offset=t.offset,r.length=this.offset,this.offset=t.offset,Jy.prototype.restore.call(this,t.reporter),r};ho.prototype.isEmpty=function(){return this.offset===this.length};ho.prototype.readUInt8=function(t){return this.offset+1<=this.length?this.base.readUInt8(this.offset++,!0):this.error(t||"DecoderBuffer overrun")};ho.prototype.skip=function(t,r){if(!(this.offset+t<=this.length))return this.error(r||"DecoderBuffer overrun");var n=new ho(this.base);return n._reporterState=this._reporterState,n.offset=this.offset,n.length=this.offset+t,this.offset+=t,n};ho.prototype.raw=function(t){return this.base.slice(t?t.offset:this.offset,this.length)};function Vy(e,t){if(Array.isArray(e))this.length=0,this.value=e.map(function(r){return r instanceof Vy||(r=new Vy(r,t)),this.length+=r.length,r},this);else if(typeof e=="number"){if(!(0<=e&&e<=255))return t.error("non-byte EncoderBuffer value");this.value=e,this.length=1}else if(typeof e=="string")this.value=e,this.length=Hd.byteLength(e);else if(Hd.isBuffer(e))this.value=e,this.length=e.length;else return t.error("Unsupported type: "+typeof e)}c_.EncoderBuffer=Vy;Vy.prototype.join=function(t,r){return t||(t=new Hd(this.length)),r||(r=0),this.length===0||(Array.isArray(this.value)?this.value.forEach(function(n){n.join(t,r),r+=n.length}):(typeof this.value=="number"?t[r]=this.value:typeof this.value=="string"?t.write(this.value,r):Hd.isBuffer(this.value)&&this.value.copy(t,r),r+=this.length)),t}});var J9=x((fFe,V9)=>{var ppe=nl().Reporter,Epe=nl().EncoderBuffer,ype=nl().DecoderBuffer,En=zn(),W9=["seq","seqof","set","setof","objid","bool","gentime","utctime","null_","enum","int","objDesc","bitstr","bmpstr","charstr","genstr","graphstr","ia5str","iso646str","numstr","octstr","printstr","t61str","unistr","utf8str","videostr"],mpe=["key","obj","use","optional","explicit","implicit","def","choice","any","contains"].concat(W9),Bpe=["_peekTag","_decodeTag","_use","_decodeStr","_decodeObjid","_decodeTime","_decodeNull","_decodeInt","_decodeBool","_decodeList","_encodeComposite","_encodeStr","_encodeObjid","_encodeTime","_encodeNull","_encodeInt","_encodeBool"];function Ut(e,t){var r={};this._baseState=r,r.enc=e,r.parent=t||null,r.children=null,r.tag=null,r.args=null,r.reverseArgs=null,r.choice=null,r.optional=!1,r.any=!1,r.obj=!1,r.use=null,r.useDecoder=null,r.key=null,r.default=null,r.explicit=null,r.implicit=null,r.contains=null,r.parent||(r.children=[],this._wrap())}V9.exports=Ut;var Ipe=["enc","parent","children","tag","args","reverseArgs","choice","optional","any","obj","use","alteredUse","key","default","explicit","implicit","contains"];Ut.prototype.clone=function(){var t=this._baseState,r={};Ipe.forEach(function(i){r[i]=t[i]});var n=new this.constructor(r.parent);return n._baseState=r,n};Ut.prototype._wrap=function(){var t=this._baseState;mpe.forEach(function(r){this[r]=function(){var i=new this.constructor(this);return t.children.push(i),i[r].apply(i,arguments)}},this)};Ut.prototype._init=function(t){var r=this._baseState;En(r.parent===null),t.call(this),r.children=r.children.filter(function(n){return n._baseState.parent===this},this),En.equal(r.children.length,1,"Root node can have only one child")};Ut.prototype._useArgs=function(t){var r=this._baseState,n=t.filter(function(i){return i instanceof this.constructor},this);t=t.filter(function(i){return!(i instanceof this.constructor)},this),n.length!==0&&(En(r.children===null),r.children=n,n.forEach(function(i){i._baseState.parent=this},this)),t.length!==0&&(En(r.args===null),r.args=t,r.reverseArgs=t.map(function(i){if(typeof i!="object"||i.constructor!==Object)return i;var s={};return Object.keys(i).forEach(function(o){o==(o|0)&&(o|=0);var a=i[o];s[a]=o}),s}))};Bpe.forEach(function(e){Ut.prototype[e]=function(){var r=this._baseState;throw new Error(e+" not implemented for encoding: "+r.enc)}});W9.forEach(function(e){Ut.prototype[e]=function(){var r=this._baseState,n=Array.prototype.slice.call(arguments);return En(r.tag===null),r.tag=e,this._useArgs(n),this}});Ut.prototype.use=function(t){En(t);var r=this._baseState;return En(r.use===null),r.use=t,this};Ut.prototype.optional=function(){var t=this._baseState;return t.optional=!0,this};Ut.prototype.def=function(t){var r=this._baseState;return En(r.default===null),r.default=t,r.optional=!0,this};Ut.prototype.explicit=function(t){var r=this._baseState;return En(r.explicit===null&&r.implicit===null),r.explicit=t,this};Ut.prototype.implicit=function(t){var r=this._baseState;return En(r.explicit===null&&r.implicit===null),r.implicit=t,this};Ut.prototype.obj=function(){var t=this._baseState,r=Array.prototype.slice.call(arguments);return t.obj=!0,r.length!==0&&this._useArgs(r),this};Ut.prototype.key=function(t){var r=this._baseState;return En(r.key===null),r.key=t,this};Ut.prototype.any=function(){var t=this._baseState;return t.any=!0,this};Ut.prototype.choice=function(t){var r=this._baseState;return En(r.choice===null),r.choice=t,this._useArgs(Object.keys(t).map(function(n){return t[n]})),this};Ut.prototype.contains=function(t){var r=this._baseState;return En(r.use===null),r.contains=t,this};Ut.prototype._decode=function(t,r){var n=this._baseState;if(n.parent===null)return t.wrapResult(n.children[0]._decode(t,r));var i=n.default,s=!0,o=null;if(n.key!==null&&(o=t.enterKey(n.key)),n.optional){var a=null;if(n.explicit!==null?a=n.explicit:n.implicit!==null?a=n.implicit:n.tag!==null&&(a=n.tag),a===null&&!n.any){var A=t.save();try{n.choice===null?this._decodeGeneric(n.tag,t,r):this._decodeChoice(t,r),s=!0}catch{s=!1}t.restore(A)}else if(s=this._peekTag(t,a,n.any),t.isError(s))return s}var f;if(n.obj&&s&&(f=t.enterObject()),s){if(n.explicit!==null){var l=this._decodeTag(t,n.explicit);if(t.isError(l))return l;t=l}var p=t.offset;if(n.use===null&&n.choice===null){if(n.any)var A=t.save();var B=this._decodeTag(t,n.implicit!==null?n.implicit:n.tag,n.any);if(t.isError(B))return B;n.any?i=t.raw(A):t=B}if(r&&r.track&&n.tag!==null&&r.track(t.path(),p,t.length,"tagged"),r&&r.track&&n.tag!==null&&r.track(t.path(),t.offset,t.length,"content"),n.any?i=i:n.choice===null?i=this._decodeGeneric(n.tag,t,r):i=this._decodeChoice(t,r),t.isError(i))return i;if(!n.any&&n.choice===null&&n.children!==null&&n.children.forEach(function(N){N._decode(t,r)}),n.contains&&(n.tag==="octstr"||n.tag==="bitstr")){var S=new ype(i);i=this._getUse(n.contains,t._reporterState.obj)._decode(S,r)}}return n.obj&&s&&(i=t.leaveObject(f)),n.key!==null&&(i!==null||s===!0)?t.leaveKey(o,n.key,i):o!==null&&t.exitKey(o),i};Ut.prototype._decodeGeneric=function(t,r,n){var i=this._baseState;return t==="seq"||t==="set"?null:t==="seqof"||t==="setof"?this._decodeList(r,t,i.args[0],n):/str$/.test(t)?this._decodeStr(r,t,n):t==="objid"&&i.args?this._decodeObjid(r,i.args[0],i.args[1],n):t==="objid"?this._decodeObjid(r,null,null,n):t==="gentime"||t==="utctime"?this._decodeTime(r,t,n):t==="null_"?this._decodeNull(r,n):t==="bool"?this._decodeBool(r,n):t==="objDesc"?this._decodeStr(r,t,n):t==="int"||t==="enum"?this._decodeInt(r,i.args&&i.args[0],n):i.use!==null?this._getUse(i.use,r._reporterState.obj)._decode(r,n):r.error("unknown tag: "+t)};Ut.prototype._getUse=function(t,r){var n=this._baseState;return n.useDecoder=this._use(t,r),En(n.useDecoder._baseState.parent===null),n.useDecoder=n.useDecoder._baseState.children[0],n.implicit!==n.useDecoder._baseState.implicit&&(n.useDecoder=n.useDecoder.clone(),n.useDecoder._baseState.implicit=n.implicit),n.useDecoder};Ut.prototype._decodeChoice=function(t,r){var n=this._baseState,i=null,s=!1;return Object.keys(n.choice).some(function(o){var a=t.save(),A=n.choice[o];try{var f=A._decode(t,r);if(t.isError(f))return!1;i={type:o,value:f},s=!0}catch{return t.restore(a),!1}return!0},this),s?i:t.error("Choice not matched")};Ut.prototype._createEncoderBuffer=function(t){return new Epe(t,this.reporter)};Ut.prototype._encode=function(t,r,n){var i=this._baseState;if(!(i.default!==null&&i.default===t)){var s=this._encodeValue(t,r,n);if(s!==void 0&&!this._skipDefault(s,r,n))return s}};Ut.prototype._encodeValue=function(t,r,n){var i=this._baseState;if(i.parent===null)return i.children[0]._encode(t,r||new ppe);var A=null;if(this.reporter=r,i.optional&&t===void 0)if(i.default!==null)t=i.default;else return;var s=null,o=!1;if(i.any)A=this._createEncoderBuffer(t);else if(i.choice)A=this._encodeChoice(t,r);else if(i.contains)s=this._getUse(i.contains,n)._encode(t,r),o=!0;else if(i.children)s=i.children.map(function(p){if(p._baseState.tag==="null_")return p._encode(null,r,t);if(p._baseState.key===null)return r.error("Child should have a key");var B=r.enterKey(p._baseState.key);if(typeof t!="object")return r.error("Child expected, but input is not object");var S=p._encode(t[p._baseState.key],r,t);return r.leaveKey(B),S},this).filter(function(p){return p}),s=this._createEncoderBuffer(s);else if(i.tag==="seqof"||i.tag==="setof"){if(!(i.args&&i.args.length===1))return r.error("Too many args for : "+i.tag);if(!Array.isArray(t))return r.error("seqof/setof, but data is not Array");var a=this.clone();a._baseState.implicit=null,s=this._createEncoderBuffer(t.map(function(p){var B=this._baseState;return this._getUse(B.args[0],t)._encode(p,r)},a))}else i.use!==null?A=this._getUse(i.use,n)._encode(t,r):(s=this._encodePrimitive(i.tag,t),o=!0);var A;if(!i.any&&i.choice===null){var f=i.implicit!==null?i.implicit:i.tag,l=i.implicit===null?"universal":"context";f===null?i.use===null&&r.error("Tag could be omitted only for .use()"):i.use===null&&(A=this._encodeComposite(f,o,l,s))}return i.explicit!==null&&(A=this._encodeComposite(i.explicit,!1,"context",A)),A};Ut.prototype._encodeChoice=function(t,r){var n=this._baseState,i=n.choice[t.type];return i||En(!1,t.type+" not found in "+JSON.stringify(Object.keys(n.choice))),i._encode(t.value,r)};Ut.prototype._encodePrimitive=function(t,r){var n=this._baseState;if(/str$/.test(t))return this._encodeStr(r,t);if(t==="objid"&&n.args)return this._encodeObjid(r,n.reverseArgs[0],n.args[1]);if(t==="objid")return this._encodeObjid(r,null,null);if(t==="gentime"||t==="utctime")return this._encodeTime(r,t);if(t==="null_")return this._encodeNull();if(t==="int"||t==="enum")return this._encodeInt(r,n.args&&n.reverseArgs[0]);if(t==="bool")return this._encodeBool(r);if(t==="objDesc")return this._encodeStr(r,t);throw new Error("Unsupported tag: "+t)};Ut.prototype._isNumstr=function(t){return/^[0-9 ]*$/.test(t)};Ut.prototype._isPrintstr=function(t){return/^[A-Za-z0-9 '\(\)\+,\-\.\/:=\?]*$/.test(t)}});var nl=x(j9=>{var jy=j9;jy.Reporter=Y9().Reporter;jy.DecoderBuffer=l_().DecoderBuffer;jy.EncoderBuffer=l_().EncoderBuffer;jy.Node=J9()});var K9=x(Hf=>{var z9=h_();Hf.tagClass={0:"universal",1:"application",2:"context",3:"private"};Hf.tagClassByName=z9._reverse(Hf.tagClass);Hf.tag={0:"end",1:"bool",2:"int",3:"bitstr",4:"octstr",5:"null_",6:"objid",7:"objDesc",8:"external",9:"real",10:"enum",11:"embed",12:"utf8str",13:"relativeOid",16:"seq",17:"set",18:"numstr",19:"printstr",20:"t61str",21:"videostr",22:"ia5str",23:"utctime",24:"gentime",25:"graphstr",26:"iso646str",27:"genstr",28:"unistr",29:"charstr",30:"bmpstr"};Hf.tagByName=z9._reverse(Hf.tag)});var h_=x(Z9=>{var X9=Z9;X9._reverse=function(t){var r={};return Object.keys(t).forEach(function(n){(n|0)==n&&(n=n|0);var i=t[n];r[i]=n}),r};X9.der=K9()});var p_=x((hFe,rO)=>{var bpe=ze(),d_=tl(),zy=d_.base,Cpe=d_.bignum,$9=d_.constants.der;function eO(e){this.enc="der",this.name=e.name,this.entity=e,this.tree=new Xn,this.tree._init(e.body)}rO.exports=eO;eO.prototype.decode=function(t,r){return t instanceof zy.DecoderBuffer||(t=new zy.DecoderBuffer(t,r)),this.tree._decode(t,r)};function Xn(e){zy.Node.call(this,"der",e)}bpe(Xn,zy.Node);Xn.prototype._peekTag=function(t,r,n){if(t.isEmpty())return!1;var i=t.save(),s=g_(t,'Failed to peek tag: "'+r+'"');return t.isError(s)?s:(t.restore(i),s.tag===r||s.tagStr===r||s.tagStr+"of"===r||n)};Xn.prototype._decodeTag=function(t,r,n){var i=g_(t,'Failed to decode tag of "'+r+'"');if(t.isError(i))return i;var s=tO(t,i.primitive,'Failed to get length of "'+r+'"');if(t.isError(s))return s;if(!n&&i.tag!==r&&i.tagStr!==r&&i.tagStr+"of"!==r)return t.error('Failed to match tag: "'+r+'"');if(i.primitive||s!==null)return t.skip(s,'Failed to match body of: "'+r+'"');var o=t.save(),a=this._skipUntilEnd(t,'Failed to skip indefinite length body: "'+this.tag+'"');return t.isError(a)?a:(s=t.offset-o.offset,t.restore(o),t.skip(s,'Failed to match body of: "'+r+'"'))};Xn.prototype._skipUntilEnd=function(t,r){for(;;){var n=g_(t,r);if(t.isError(n))return n;var i=tO(t,n.primitive,r);if(t.isError(i))return i;var s;if(n.primitive||i!==null?s=t.skip(i):s=this._skipUntilEnd(t,r),t.isError(s))return s;if(n.tagStr==="end")break}};Xn.prototype._decodeList=function(t,r,n,i){for(var s=[];!t.isEmpty();){var o=this._peekTag(t,"end");if(t.isError(o))return o;var a=n.decode(t,"der",i);if(t.isError(a)&&o)break;s.push(a)}return s};Xn.prototype._decodeStr=function(t,r){if(r==="bitstr"){var n=t.readUInt8();return t.isError(n)?n:{unused:n,data:t.raw()}}else if(r==="bmpstr"){var i=t.raw();if(i.length%2===1)return t.error("Decoding of string type: bmpstr length mismatch");for(var s="",o=0;o<i.length/2;o++)s+=String.fromCharCode(i.readUInt16BE(o*2));return s}else if(r==="numstr"){var a=t.raw().toString("ascii");return this._isNumstr(a)?a:t.error("Decoding of string type: numstr unsupported characters")}else{if(r==="octstr")return t.raw();if(r==="objDesc")return t.raw();if(r==="printstr"){var A=t.raw().toString("ascii");return this._isPrintstr(A)?A:t.error("Decoding of string type: printstr unsupported characters")}else return/str$/.test(r)?t.raw().toString():t.error("Decoding of string type: "+r+" unsupported")}};Xn.prototype._decodeObjid=function(t,r,n){for(var i,s=[],o=0;!t.isEmpty();){var a=t.readUInt8();o<<=7,o|=a&127,(a&128)===0&&(s.push(o),o=0)}a&128&&s.push(o);var A=s[0]/40|0,f=s[0]%40;if(n?i=s:i=[A,f].concat(s.slice(1)),r){var l=r[i.join(" ")];l===void 0&&(l=r[i.join(".")]),l!==void 0&&(i=l)}return i};Xn.prototype._decodeTime=function(t,r){var n=t.raw().toString();if(r==="gentime")var i=n.slice(0,4)|0,s=n.slice(4,6)|0,o=n.slice(6,8)|0,a=n.slice(8,10)|0,A=n.slice(10,12)|0,f=n.slice(12,14)|0;else if(r==="utctime"){var i=n.slice(0,2)|0,s=n.slice(2,4)|0,o=n.slice(4,6)|0,a=n.slice(6,8)|0,A=n.slice(8,10)|0,f=n.slice(10,12)|0;i<70?i=2e3+i:i=1900+i}else return t.error("Decoding "+r+" time is not supported yet");return Date.UTC(i,s-1,o,a,A,f,0)};Xn.prototype._decodeNull=function(t){return null};Xn.prototype._decodeBool=function(t){var r=t.readUInt8();return t.isError(r)?r:r!==0};Xn.prototype._decodeInt=function(t,r){var n=t.raw(),i=new Cpe(n);return r&&(i=r[i.toString(10)]||i),i};Xn.prototype._use=function(t,r){return typeof t=="function"&&(t=t(r)),t._getDecoder("der").tree};function g_(e,t){var r=e.readUInt8(t);if(e.isError(r))return r;var n=$9.tagClass[r>>6],i=(r&32)===0;if((r&31)===31){var s=r;for(r=0;(s&128)===128;){if(s=e.readUInt8(t),e.isError(s))return s;r<<=7,r|=s&127}}else r&=31;var o=$9.tag[r];return{cls:n,primitive:i,tag:r,tagStr:o}}function tO(e,t,r){var n=e.readUInt8(r);if(e.isError(n))return n;if(!t&&n===128)return null;if((n&128)===0)return n;var i=n&127;if(i>4)return e.error("length octect is too long");n=0;for(var s=0;s<i;s++){n<<=8;var o=e.readUInt8(r);if(e.isError(o))return o;n|=o}return n}});var iO=x((dFe,nO)=>{var Qpe=ze(),wpe=Gr().Buffer,E_=p_();function y_(e){E_.call(this,e),this.enc="pem"}Qpe(y_,E_);nO.exports=y_;y_.prototype.decode=function(t,r){for(var n=t.toString().split(/[\r\n]+/g),i=r.label.toUpperCase(),s=/^-----(BEGIN|END) ([^-]+)-----$/,o=-1,a=-1,A=0;A<n.length;A++){var f=n[A].match(s);if(f!==null&&f[2]===i)if(o===-1){if(f[1]!=="BEGIN")break;o=A}else{if(f[1]!=="END")break;a=A;break}}if(o===-1||a===-1)throw new Error("PEM section not found for: "+i);var l=n.slice(o+1,a).join("");l.replace(/[^a-z0-9\+\/=]+/gi,"");var p=new wpe(l,"base64");return E_.prototype.decode.call(this,p,r)}});var aO=x(oO=>{var sO=oO;sO.der=p_();sO.pem=iO()});var B_=x((pFe,cO)=>{var Spe=ze(),ca=Gr().Buffer,AO=tl(),fO=AO.base,m_=AO.constants.der;function uO(e){this.enc="der",this.name=e.name,this.entity=e,this.tree=new ds,this.tree._init(e.body)}cO.exports=uO;uO.prototype.encode=function(t,r){return this.tree._encode(t,r).join()};function ds(e){fO.Node.call(this,"der",e)}Spe(ds,fO.Node);ds.prototype._encodeComposite=function(t,r,n,i){var s=_pe(t,r,n,this.reporter);if(i.length<128){var A=new ca(2);return A[0]=s,A[1]=i.length,this._createEncoderBuffer([A,i])}for(var o=1,a=i.length;a>=256;a>>=8)o++;var A=new ca(2+o);A[0]=s,A[1]=128|o;for(var a=1+o,f=i.length;f>0;a--,f>>=8)A[a]=f&255;return this._createEncoderBuffer([A,i])};ds.prototype._encodeStr=function(t,r){if(r==="bitstr")return this._createEncoderBuffer([t.unused|0,t.data]);if(r==="bmpstr"){for(var n=new ca(t.length*2),i=0;i<t.length;i++)n.writeUInt16BE(t.charCodeAt(i),i*2);return this._createEncoderBuffer(n)}else return r==="numstr"?this._isNumstr(t)?this._createEncoderBuffer(t):this.reporter.error("Encoding of string type: numstr supports only digits and space"):r==="printstr"?this._isPrintstr(t)?this._createEncoderBuffer(t):this.reporter.error("Encoding of string type: printstr supports only latin upper and lower case letters, digits, space, apostrophe, left and rigth parenthesis, plus sign, comma, hyphen, dot, slash, colon, equal sign, question mark"):/str$/.test(r)?this._createEncoderBuffer(t):r==="objDesc"?this._createEncoderBuffer(t):this.reporter.error("Encoding of string type: "+r+" unsupported")};ds.prototype._encodeObjid=function(t,r,n){if(typeof t=="string"){if(!r)return this.reporter.error("string objid given, but no values map found");if(!r.hasOwnProperty(t))return this.reporter.error("objid not found in values map");t=r[t].split(/[\s\.]+/g);for(var i=0;i<t.length;i++)t[i]|=0}else if(Array.isArray(t)){t=t.slice();for(var i=0;i<t.length;i++)t[i]|=0}if(!Array.isArray(t))return this.reporter.error("objid() should be either array or string, got: "+JSON.stringify(t));if(!n){if(t[1]>=40)return this.reporter.error("Second objid identifier OOB");t.splice(0,2,t[0]*40+t[1])}for(var s=0,i=0;i<t.length;i++){var o=t[i];for(s++;o>=128;o>>=7)s++}for(var a=new ca(s),A=a.length-1,i=t.length-1;i>=0;i--){var o=t[i];for(a[A--]=o&127;(o>>=7)>0;)a[A--]=128|o&127}return this._createEncoderBuffer(a)};function Ri(e){return e<10?"0"+e:e}ds.prototype._encodeTime=function(t,r){var n,i=new Date(t);return r==="gentime"?n=[Ri(i.getFullYear()),Ri(i.getUTCMonth()+1),Ri(i.getUTCDate()),Ri(i.getUTCHours()),Ri(i.getUTCMinutes()),Ri(i.getUTCSeconds()),"Z"].join(""):r==="utctime"?n=[Ri(i.getFullYear()%100),Ri(i.getUTCMonth()+1),Ri(i.getUTCDate()),Ri(i.getUTCHours()),Ri(i.getUTCMinutes()),Ri(i.getUTCSeconds()),"Z"].join(""):this.reporter.error("Encoding "+r+" time is not supported yet"),this._encodeStr(n,"octstr")};ds.prototype._encodeNull=function(){return this._createEncoderBuffer("")};ds.prototype._encodeInt=function(t,r){if(typeof t=="string"){if(!r)return this.reporter.error("String int or enum given, but no values map");if(!r.hasOwnProperty(t))return this.reporter.error("Values map doesn't contain: "+JSON.stringify(t));t=r[t]}if(typeof t!="number"&&!ca.isBuffer(t)){var n=t.toArray();!t.sign&&n[0]&128&&n.unshift(0),t=new ca(n)}if(ca.isBuffer(t)){var i=t.length;t.length===0&&i++;var o=new ca(i);return t.copy(o),t.length===0&&(o[0]=0),this._createEncoderBuffer(o)}if(t<128)return this._createEncoderBuffer(t);if(t<256)return this._createEncoderBuffer([0,t]);for(var i=1,s=t;s>=256;s>>=8)i++;for(var o=new Array(i),s=o.length-1;s>=0;s--)o[s]=t&255,t>>=8;return o[0]&128&&o.unshift(0),this._createEncoderBuffer(new ca(o))};ds.prototype._encodeBool=function(t){return this._createEncoderBuffer(t?255:0)};ds.prototype._use=function(t,r){return typeof t=="function"&&(t=t(r)),t._getEncoder("der").tree};ds.prototype._skipDefault=function(t,r,n){var i=this._baseState,s;if(i.default===null)return!1;var o=t.join();if(i.defaultBuffer===void 0&&(i.defaultBuffer=this._encodeValue(i.default,r,n).join()),o.length!==i.defaultBuffer.length)return!1;for(s=0;s<o.length;s++)if(o[s]!==i.defaultBuffer[s])return!1;return!0};function _pe(e,t,r,n){var i;if(e==="seqof"?e="seq":e==="setof"&&(e="set"),m_.tagByName.hasOwnProperty(e))i=m_.tagByName[e];else if(typeof e=="number"&&(e|0)===e)i=e;else return n.error("Unknown tag: "+e);return i>=31?n.error("Multi-octet tag encoding unsupported"):(t||(i|=32),i|=m_.tagClassByName[r||"universal"]<<6,i)}});var hO=x((EFe,lO)=>{var vpe=ze(),I_=B_();function b_(e){I_.call(this,e),this.enc="pem"}vpe(b_,I_);lO.exports=b_;b_.prototype.encode=function(t,r){for(var n=I_.prototype.encode.call(this,t),i=n.toString("base64"),s=["-----BEGIN "+r.label+"-----"],o=0;o<i.length;o+=64)s.push(i.slice(o,o+64));return s.push("-----END "+r.label+"-----"),s.join(`
-`)}});var pO=x(gO=>{var dO=gO;dO.der=B_();dO.pem=hO()});var tl=x(EO=>{var il=EO;il.bignum=kr();il.define=q9().define;il.base=nl();il.constants=h_();il.decoders=aO();il.encoders=pO()});var IO=x((BFe,BO)=>{"use strict";var gs=tl(),yO=gs.define("Time",function(){this.choice({utcTime:this.utctime(),generalTime:this.gentime()})}),Rpe=gs.define("AttributeTypeValue",function(){this.seq().obj(this.key("type").objid(),this.key("value").any())}),C_=gs.define("AlgorithmIdentifier",function(){this.seq().obj(this.key("algorithm").objid(),this.key("parameters").optional(),this.key("curve").objid().optional())}),Dpe=gs.define("SubjectPublicKeyInfo",function(){this.seq().obj(this.key("algorithm").use(C_),this.key("subjectPublicKey").bitstr())}),Tpe=gs.define("RelativeDistinguishedName",function(){this.setof(Rpe)}),Npe=gs.define("RDNSequence",function(){this.seqof(Tpe)}),mO=gs.define("Name",function(){this.choice({rdnSequence:this.use(Npe)})}),Mpe=gs.define("Validity",function(){this.seq().obj(this.key("notBefore").use(yO),this.key("notAfter").use(yO))}),Fpe=gs.define("Extension",function(){this.seq().obj(this.key("extnID").objid(),this.key("critical").bool().def(!1),this.key("extnValue").octstr())}),kpe=gs.define("TBSCertificate",function(){this.seq().obj(this.key("version").explicit(0).int().optional(),this.key("serialNumber").int(),this.key("signature").use(C_),this.key("issuer").use(mO),this.key("validity").use(Mpe),this.key("subject").use(mO),this.key("subjectPublicKeyInfo").use(Dpe),this.key("issuerUniqueID").implicit(1).bitstr().optional(),this.key("subjectUniqueID").implicit(2).bitstr().optional(),this.key("extensions").explicit(3).seqof(Fpe).optional())}),xpe=gs.define("X509Certificate",function(){this.seq().obj(this.key("tbsCertificate").use(kpe),this.key("signatureAlgorithm").use(C_),this.key("signatureValue").bitstr())});BO.exports=xpe});var CO=x(Es=>{"use strict";var ps=tl();Es.certificate=IO();var Upe=ps.define("RSAPrivateKey",function(){this.seq().obj(this.key("version").int(),this.key("modulus").int(),this.key("publicExponent").int(),this.key("privateExponent").int(),this.key("prime1").int(),this.key("prime2").int(),this.key("exponent1").int(),this.key("exponent2").int(),this.key("coefficient").int())});Es.RSAPrivateKey=Upe;var Lpe=ps.define("RSAPublicKey",function(){this.seq().obj(this.key("modulus").int(),this.key("publicExponent").int())});Es.RSAPublicKey=Lpe;var bO=ps.define("AlgorithmIdentifier",function(){this.seq().obj(this.key("algorithm").objid(),this.key("none").null_().optional(),this.key("curve").objid().optional(),this.key("params").seq().obj(this.key("p").int(),this.key("q").int(),this.key("g").int()).optional())}),Ppe=ps.define("SubjectPublicKeyInfo",function(){this.seq().obj(this.key("algorithm").use(bO),this.key("subjectPublicKey").bitstr())});Es.PublicKey=Ppe;var Ope=ps.define("PrivateKeyInfo",function(){this.seq().obj(this.key("version").int(),this.key("algorithm").use(bO),this.key("subjectPrivateKey").octstr())});Es.PrivateKey=Ope;var Hpe=ps.define("EncryptedPrivateKeyInfo",function(){this.seq().obj(this.key("algorithm").seq().obj(this.key("id").objid(),this.key("decrypt").seq().obj(this.key("kde").seq().obj(this.key("id").objid(),this.key("kdeparams").seq().obj(this.key("salt").octstr(),this.key("iters").int())),this.key("cipher").seq().obj(this.key("algo").objid(),this.key("iv").octstr()))),this.key("subjectPrivateKey").octstr())});Es.EncryptedPrivateKey=Hpe;var qpe=ps.define("DSAPrivateKey",function(){this.seq().obj(this.key("version").int(),this.key("p").int(),this.key("q").int(),this.key("g").int(),this.key("pub_key").int(),this.key("priv_key").int())});Es.DSAPrivateKey=qpe;Es.DSAparam=ps.define("DSAparam",function(){this.int()});var Gpe=ps.define("ECParameters",function(){this.choice({namedCurve:this.objid()})}),Ype=ps.define("ECPrivateKey",function(){this.seq().obj(this.key("version").int(),this.key("privateKey").octstr(),this.key("parameters").optional().explicit(0).use(Gpe),this.key("publicKey").optional().explicit(1).bitstr())});Es.ECPrivateKey=Ype;Es.signature=ps.define("signature",function(){this.seq().obj(this.key("r").int(),this.key("s").int())})});var QO=x((bFe,Wpe)=>{Wpe.exports={"2.16.840.1.101.3.4.1.1":"aes-128-ecb","2.16.840.1.101.3.4.1.2":"aes-128-cbc","2.16.840.1.101.3.4.1.3":"aes-128-ofb","2.16.840.1.101.3.4.1.4":"aes-128-cfb","2.16.840.1.101.3.4.1.21":"aes-192-ecb","2.16.840.1.101.3.4.1.22":"aes-192-cbc","2.16.840.1.101.3.4.1.23":"aes-192-ofb","2.16.840.1.101.3.4.1.24":"aes-192-cfb","2.16.840.1.101.3.4.1.41":"aes-256-ecb","2.16.840.1.101.3.4.1.42":"aes-256-cbc","2.16.840.1.101.3.4.1.43":"aes-256-ofb","2.16.840.1.101.3.4.1.44":"aes-256-cfb"}});var SO=x((CFe,wO)=>{"use strict";var Vpe=/Proc-Type: 4,ENCRYPTED[\n\r]+DEK-Info: AES-((?:128)|(?:192)|(?:256))-CBC,([0-9A-H]+)[\n\r]+([0-9A-z\n\r+/=]+)[\n\r]+/m,Jpe=/^-----BEGIN ((?:.*? KEY)|CERTIFICATE)-----/m,jpe=/^-----BEGIN ((?:.*? KEY)|CERTIFICATE)-----([0-9A-z\n\r+/=]+)-----END \1-----$/m,zpe=Nd(),Kpe=Cy(),Ky=at().Buffer;wO.exports=function(e,t){var r=e.toString(),n=r.match(Vpe),i;if(n){var o="aes"+n[1],a=Ky.from(n[2],"hex"),A=Ky.from(n[3].replace(/[\r\n]/g,""),"base64"),f=zpe(t,a.slice(0,8),parseInt(n[1],10)).key,l=[],p=Kpe.createDecipheriv(o,f,a);l.push(p.update(A)),l.push(p.final()),i=Ky.concat(l)}else{var s=r.match(jpe);i=Ky.from(s[2].replace(/[\r\n]/g,""),"base64")}var B=r.match(Jpe)[1];return{tag:B,data:i}}});var qd=x((QFe,vO)=>{"use strict";var xn=CO(),Xpe=QO(),Zpe=SO(),$pe=Cy(),eEe=hS().pbkdf2Sync,Q_=at().Buffer;function tEe(e,t){var r=e.algorithm.decrypt.kde.kdeparams.salt,n=parseInt(e.algorithm.decrypt.kde.kdeparams.iters.toString(),10),i=Xpe[e.algorithm.decrypt.cipher.algo.join(".")],s=e.algorithm.decrypt.cipher.iv,o=e.subjectPrivateKey,a=parseInt(i.split("-")[1],10)/8,A=eEe(t,r,n,a,"sha1"),f=$pe.createDecipheriv(i,A,s),l=[];return l.push(f.update(o)),l.push(f.final()),Q_.concat(l)}function _O(e){var t;typeof e=="object"&&!Q_.isBuffer(e)&&(t=e.passphrase,e=e.key),typeof e=="string"&&(e=Q_.from(e));var r=Zpe(e,t),n=r.tag,i=r.data,s,o;switch(n){case"CERTIFICATE":o=xn.certificate.decode(i,"der").tbsCertificate.subjectPublicKeyInfo;case"PUBLIC KEY":switch(o||(o=xn.PublicKey.decode(i,"der")),s=o.algorithm.algorithm.join("."),s){case"1.2.840.113549.1.1.1":return xn.RSAPublicKey.decode(o.subjectPublicKey.data,"der");case"1.2.840.10045.2.1":return o.subjectPrivateKey=o.subjectPublicKey,{type:"ec",data:o};case"1.2.840.10040.4.1":return o.algorithm.params.pub_key=xn.DSAparam.decode(o.subjectPublicKey.data,"der"),{type:"dsa",data:o.algorithm.params};default:throw new Error("unknown key id "+s)}case"ENCRYPTED PRIVATE KEY":i=xn.EncryptedPrivateKey.decode(i,"der"),i=tEe(i,t);case"PRIVATE KEY":switch(o=xn.PrivateKey.decode(i,"der"),s=o.algorithm.algorithm.join("."),s){case"1.2.840.113549.1.1.1":return xn.RSAPrivateKey.decode(o.subjectPrivateKey,"der");case"1.2.840.10045.2.1":return{curve:o.algorithm.curve,privateKey:xn.ECPrivateKey.decode(o.subjectPrivateKey,"der").privateKey};case"1.2.840.10040.4.1":return o.algorithm.params.priv_key=xn.DSAparam.decode(o.subjectPrivateKey,"der"),{type:"dsa",params:o.algorithm.params};default:throw new Error("unknown key id "+s)}case"RSA PUBLIC KEY":return xn.RSAPublicKey.decode(i,"der");case"RSA PRIVATE KEY":return xn.RSAPrivateKey.decode(i,"der");case"DSA PRIVATE KEY":return{type:"dsa",params:xn.DSAPrivateKey.decode(i,"der")};case"EC PRIVATE KEY":return i=xn.ECPrivateKey.decode(i,"der"),{curve:i.parameters.value,privateKey:i.privateKey};default:throw new Error("unknown key type "+n)}}_O.signature=xn.signature;vO.exports=_O});var w_=x((wFe,rEe)=>{rEe.exports={"1.3.132.0.10":"secp256k1","1.3.132.0.33":"p224","1.2.840.10045.3.1.1":"p192","1.2.840.10045.3.1.7":"p256","1.3.132.0.34":"p384","1.3.132.0.35":"p521"}});var TO=x((SFe,Zy)=>{"use strict";var fn=at().Buffer,qf=iS(),nEe=vy(),iEe=Wy().ec,Xy=_y(),sEe=qd(),oEe=w_(),aEe=1;function AEe(e,t,r,n,i){var s=sEe(t);if(s.curve){if(n!=="ecdsa"&&n!=="ecdsa/rsa")throw new Error("wrong private key type");return fEe(e,s)}else if(s.type==="dsa"){if(n!=="dsa")throw new Error("wrong private key type");return uEe(e,s,r)}if(n!=="rsa"&&n!=="ecdsa/rsa")throw new Error("wrong private key type");if(t.padding!==void 0&&t.padding!==aEe)throw new Error("illegal or unsupported padding mode");e=fn.concat([i,e]);for(var o=s.modulus.byteLength(),a=[0,1];e.length+a.length+1<o;)a.push(255);a.push(0);for(var A=-1;++A<e.length;)a.push(e[A]);var f=nEe(a,s);return f}function fEe(e,t){var r=oEe[t.curve.join(".")];if(!r)throw new Error("unknown curve "+t.curve.join("."));var n=new iEe(r),i=n.keyFromPrivate(t.privateKey),s=i.sign(e);return fn.from(s.toDER())}function uEe(e,t,r){for(var n=t.params.priv_key,i=t.params.p,s=t.params.q,o=t.params.g,a=new Xy(0),A,f=S_(e,s).mod(s),l=!1,p=RO(n,s,e,r);l===!1;)A=DO(s,p,r),a=hEe(o,A,i,s),l=A.invm(s).imul(f.add(n.mul(a))).mod(s),l.cmpn(0)===0&&(l=!1,a=new Xy(0));return cEe(a,l)}function cEe(e,t){e=e.toArray(),t=t.toArray(),e[0]&128&&(e=[0].concat(e)),t[0]&128&&(t=[0].concat(t));var r=e.length+t.length+4,n=[48,r,2,e.length];return n=n.concat(e,[2,t.length],t),fn.from(n)}function RO(e,t,r,n){if(e=fn.from(e.toArray()),e.length<t.byteLength()){var i=fn.alloc(t.byteLength()-e.length);e=fn.concat([i,e])}var s=r.length,o=lEe(r,t),a=fn.alloc(s);a.fill(1);var A=fn.alloc(s);return A=qf(n,A).update(a).update(fn.from([0])).update(e).update(o).digest(),a=qf(n,A).update(a).digest(),A=qf(n,A).update(a).update(fn.from([1])).update(e).update(o).digest(),a=qf(n,A).update(a).digest(),{k:A,v:a}}function S_(e,t){var r=new Xy(e),n=(e.length<<3)-t.bitLength();return n>0&&r.ishrn(n),r}function lEe(e,t){e=S_(e,t),e=e.mod(t);var r=fn.from(e.toArray());if(r.length<t.byteLength()){var n=fn.alloc(t.byteLength()-r.length);r=fn.concat([n,r])}return r}function DO(e,t,r){var n,i;do{for(n=fn.alloc(0);n.length*8<e.bitLength();)t.v=qf(r,t.k).update(t.v).digest(),n=fn.concat([n,t.v]);i=S_(n,e),t.k=qf(r,t.k).update(t.v).update(fn.from([0])).digest(),t.v=qf(r,t.k).update(t.v).digest()}while(i.cmp(e)!==-1);return i}function hEe(e,t,r,n){return e.toRed(Xy.mont(r)).redPow(t).fromRed().mod(n)}Zy.exports=AEe;Zy.exports.getKey=RO;Zy.exports.makeKey=DO});var kO=x((_Fe,FO)=>{"use strict";var __=at().Buffer,Gd=_y(),dEe=Wy().ec,MO=qd(),gEe=w_();function pEe(e,t,r,n,i){var s=MO(r);if(s.type==="ec"){if(n!=="ecdsa"&&n!=="ecdsa/rsa")throw new Error("wrong public key type");return EEe(e,t,s)}else if(s.type==="dsa"){if(n!=="dsa")throw new Error("wrong public key type");return yEe(e,t,s)}if(n!=="rsa"&&n!=="ecdsa/rsa")throw new Error("wrong public key type");t=__.concat([i,t]);for(var o=s.modulus.byteLength(),a=[1],A=0;t.length+a.length+2<o;)a.push(255),A+=1;a.push(0);for(var f=-1;++f<t.length;)a.push(t[f]);a=__.from(a);var l=Gd.mont(s.modulus);e=new Gd(e).toRed(l),e=e.redPow(new Gd(s.publicExponent)),e=__.from(e.fromRed().toArray());var p=A<8?1:0;for(o=Math.min(e.length,a.length),e.length!==a.length&&(p=1),f=-1;++f<o;)p|=e[f]^a[f];return p===0}function EEe(e,t,r){var n=gEe[r.data.algorithm.curve.join(".")];if(!n)throw new Error("unknown curve "+r.data.algorithm.curve.join("."));var i=new dEe(n),s=r.data.subjectPrivateKey.data;return i.verify(t,e,s)}function yEe(e,t,r){var n=r.data.p,i=r.data.q,s=r.data.g,o=r.data.pub_key,a=MO.signature.decode(e,"der"),A=a.s,f=a.r;NO(A,i),NO(f,i);var l=Gd.mont(n),p=A.invm(i),B=s.toRed(l).redPow(new Gd(t).mul(p).mod(i)).fromRed().mul(o.toRed(l).redPow(f.mul(p).mod(i)).fromRed()).mod(n).mod(i);return B.cmp(f)===0}function NO(e,t){if(e.cmpn(0)<=0)throw new Error("invalid sig");if(e.cmp(t)>=0)throw new Error("invalid sig")}FO.exports=pEe});var HO=x((vFe,OO)=>{"use strict";var $y=at().Buffer,LO=kc(),em=Kw(),PO=ze(),mEe=TO(),BEe=kO(),Gf=sS();Object.keys(Gf).forEach(function(e){Gf[e].id=$y.from(Gf[e].id,"hex"),Gf[e.toLowerCase()]=Gf[e]});function Yd(e){em.Writable.call(this);var t=Gf[e];if(!t)throw new Error("Unknown message digest");this._hashType=t.hash,this._hash=LO(t.hash),this._tag=t.id,this._signType=t.sign}PO(Yd,em.Writable);Yd.prototype._write=function(t,r,n){this._hash.update(t),n()};Yd.prototype.update=function(t,r){return this._hash.update(typeof t=="string"?$y.from(t,r):t),this};Yd.prototype.sign=function(t,r){this.end();var n=this._hash.digest(),i=mEe(n,t,this._hashType,this._signType,this._tag);return r?i.toString(r):i};function Wd(e){em.Writable.call(this);var t=Gf[e];if(!t)throw new Error("Unknown message digest");this._hash=LO(t.hash),this._tag=t.id,this._signType=t.sign}PO(Wd,em.Writable);Wd.prototype._write=function(t,r,n){this._hash.update(t),n()};Wd.prototype.update=function(t,r){return this._hash.update(typeof t=="string"?$y.from(t,r):t),this};Wd.prototype.verify=function(t,r,n){var i=typeof r=="string"?$y.from(r,n):r;this.end();var s=this._hash.digest();return BEe(i,s,t,this._signType,this._tag)};function xO(e){return new Yd(e)}function UO(e){return new Wd(e)}OO.exports={Sign:xO,Verify:UO,createSign:xO,createVerify:UO}});var GO=x((RFe,qO)=>{var IEe=Wy(),bEe=kr();qO.exports=function(t){return new Yf(t)};var Zn={secp256k1:{name:"secp256k1",byteLength:32},secp224r1:{name:"p224",byteLength:28},prime256v1:{name:"p256",byteLength:32},prime192v1:{name:"p192",byteLength:24},ed25519:{name:"ed25519",byteLength:32},secp384r1:{name:"p384",byteLength:48},secp521r1:{name:"p521",byteLength:66}};Zn.p224=Zn.secp224r1;Zn.p256=Zn.secp256r1=Zn.prime256v1;Zn.p192=Zn.secp192r1=Zn.prime192v1;Zn.p384=Zn.secp384r1;Zn.p521=Zn.secp521r1;function Yf(e){this.curveType=Zn[e],this.curveType||(this.curveType={name:e}),this.curve=new IEe.ec(this.curveType.name),this.keys=void 0}Yf.prototype.generateKeys=function(e,t){return this.keys=this.curve.genKeyPair(),this.getPublicKey(e,t)};Yf.prototype.computeSecret=function(e,t,r){t=t||"utf8",Buffer.isBuffer(e)||(e=new Buffer(e,t));var n=this.curve.keyFromPublic(e).getPublic(),i=n.mul(this.keys.getPrivate()).getX();return v_(i,r,this.curveType.byteLength)};Yf.prototype.getPublicKey=function(e,t){var r=this.keys.getPublic(t==="compressed",!0);return t==="hybrid"&&(r[r.length-1]%2?r[0]=7:r[0]=6),v_(r,e)};Yf.prototype.getPrivateKey=function(e){return v_(this.keys.getPrivate(),e)};Yf.prototype.setPublicKey=function(e,t){return t=t||"utf8",Buffer.isBuffer(e)||(e=new Buffer(e,t)),this.keys._importPublic(e),this};Yf.prototype.setPrivateKey=function(e,t){t=t||"utf8",Buffer.isBuffer(e)||(e=new Buffer(e,t));var r=new bEe(e);return r=r.toString(16),this.keys=this.curve.genKeyPair(),this.keys._importPrivate(r),this};function v_(e,t,r){Array.isArray(e)||(e=e.toArray());var n=new Buffer(e);if(r&&n.length<r){var i=new Buffer(r-n.length);i.fill(0),n=Buffer.concat([i,n])}return t?n.toString(t):n}});var D_=x((DFe,YO)=>{var CEe=kc(),R_=at().Buffer;YO.exports=function(e,t){for(var r=R_.alloc(0),n=0,i;r.length<t;)i=QEe(n++),r=R_.concat([r,CEe("sha1").update(e).update(i).digest()]);return r.slice(0,t)};function QEe(e){var t=R_.allocUnsafe(4);return t.writeUInt32BE(e,0),t}});var T_=x((TFe,WO)=>{WO.exports=function(t,r){for(var n=t.length,i=-1;++i<n;)t[i]^=r[i];return t}});var N_=x((NFe,JO)=>{var VO=kr(),wEe=at().Buffer;function SEe(e,t){return wEe.from(e.toRed(VO.mont(t.modulus)).redPow(new VO(t.publicExponent)).fromRed().toArray())}JO.exports=SEe});var XO=x((MFe,KO)=>{var _Ee=qd(),M_=If(),vEe=kc(),jO=D_(),zO=T_(),F_=kr(),REe=N_(),DEe=vy(),ys=at().Buffer;KO.exports=function(t,r,n){var i;t.padding?i=t.padding:n?i=1:i=4;var s=_Ee(t),o;if(i===4)o=TEe(s,r);else if(i===1)o=NEe(s,r,n);else if(i===3){if(o=new F_(r),o.cmp(s.modulus)>=0)throw new Error("data too long for modulus")}else throw new Error("unknown padding");return n?DEe(o,s):REe(o,s)};function TEe(e,t){var r=e.modulus.byteLength(),n=t.length,i=vEe("sha1").update(ys.alloc(0)).digest(),s=i.length,o=2*s;if(n>r-o-2)throw new Error("message too long");var a=ys.alloc(r-n-o-2),A=r-s-1,f=M_(s),l=zO(ys.concat([i,a,ys.alloc(1,1),t],A),jO(f,A)),p=zO(f,jO(l,s));return new F_(ys.concat([ys.alloc(1),p,l],r))}function NEe(e,t,r){var n=t.length,i=e.modulus.byteLength();if(n>i-11)throw new Error("message too long");var s;return r?s=ys.alloc(i-n-3,255):s=MEe(i-n-3),new F_(ys.concat([ys.from([0,r?1:2]),s,ys.alloc(1),t],i))}function MEe(e){for(var t=ys.allocUnsafe(e),r=0,n=M_(e*2),i=0,s;r<e;)i===n.length&&(n=M_(e*2),i=0),s=n[i++],s&&(t[r++]=s);return t}});var rH=x((FFe,tH)=>{var FEe=qd(),ZO=D_(),$O=T_(),eH=kr(),kEe=vy(),xEe=kc(),UEe=N_(),Vd=at().Buffer;tH.exports=function(t,r,n){var i;t.padding?i=t.padding:n?i=1:i=4;var s=FEe(t),o=s.modulus.byteLength();if(r.length>o||new eH(r).cmp(s.modulus)>=0)throw new Error("decryption error");var a;n?a=UEe(new eH(r),s):a=kEe(r,s);var A=Vd.alloc(o-a.length);if(a=Vd.concat([A,a],o),i===4)return LEe(s,a);if(i===1)return PEe(s,a,n);if(i===3)return a;throw new Error("unknown padding")};function LEe(e,t){var r=e.modulus.byteLength(),n=xEe("sha1").update(Vd.alloc(0)).digest(),i=n.length;if(t[0]!==0)throw new Error("decryption error");var s=t.slice(1,i+1),o=t.slice(i+1),a=$O(s,ZO(o,i)),A=$O(o,ZO(a,r-i-1));if(OEe(n,A.slice(0,i)))throw new Error("decryption error");for(var f=i;A[f]===0;)f++;if(A[f++]!==1)throw new Error("decryption error");return A.slice(f)}function PEe(e,t,r){for(var n=t.slice(0,2),i=2,s=0;t[i++]!==0;)if(i>=t.length){s++;break}var o=t.slice(2,i-1);if((n.toString("hex")!=="0002"&&!r||n.toString("hex")!=="0001"&&r)&&s++,o.length<8&&s++,s)throw new Error("decryption error");return t.slice(i)}function OEe(e,t){e=Vd.from(e),t=Vd.from(t);var r=0,n=e.length;e.length!==t.length&&(r++,n=Math.min(e.length,t.length));for(var i=-1;++i<n;)r+=e[i]^t[i];return r}});var nH=x(Wf=>{Wf.publicEncrypt=XO();Wf.privateDecrypt=rH();Wf.privateEncrypt=function(t,r){return Wf.publicEncrypt(t,r,!0)};Wf.publicDecrypt=function(t,r){return Wf.privateDecrypt(t,r,!0)}});var hH=x(Jd=>{"use strict";function iH(){throw new Error(`secure random number generation not supported by this browser
-use chrome, FireFox or Internet Explorer 11`)}var oH=at(),sH=If(),aH=oH.Buffer,AH=oH.kMaxLength,k_=globalThis.crypto||globalThis.msCrypto,fH=Math.pow(2,32)-1;function uH(e,t){if(typeof e!="number"||e!==e)throw new TypeError("offset must be a number");if(e>fH||e<0)throw new TypeError("offset must be a uint32");if(e>AH||e>t)throw new RangeError("offset out of range")}function cH(e,t,r){if(typeof e!="number"||e!==e)throw new TypeError("size must be a number");if(e>fH||e<0)throw new TypeError("size must be a uint32");if(e+t>r||e>AH)throw new RangeError("buffer too small")}k_&&k_.getRandomValues||!process.browser?(Jd.randomFill=HEe,Jd.randomFillSync=qEe):(Jd.randomFill=iH,Jd.randomFillSync=iH);function HEe(e,t,r,n){if(!aH.isBuffer(e)&&!(e instanceof globalThis.Uint8Array))throw new TypeError('"buf" argument must be a Buffer or Uint8Array');if(typeof t=="function")n=t,t=0,r=e.length;else if(typeof r=="function")n=r,r=e.length-t;else if(typeof n!="function")throw new TypeError('"cb" argument must be a function');return uH(t,e.length),cH(r,t,e.length),lH(e,t,r,n)}function lH(e,t,r,n){if(process.browser){var i=e.buffer,s=new Uint8Array(i,t,r);if(k_.getRandomValues(s),n){process.nextTick(function(){n(null,e)});return}return e}if(n){sH(r,function(a,A){if(a)return n(a);A.copy(e,t),n(null,e)});return}var o=sH(r);return o.copy(e,t),e}function qEe(e,t,r){if(typeof t>"u"&&(t=0),!aH.isBuffer(e)&&!(e instanceof globalThis.Uint8Array))throw new TypeError('"buf" argument must be a Buffer or Uint8Array');return uH(t,e.length),r===void 0&&(r=e.length-t),cH(r,t,e.length),lH(e,t,r)}});var kd=x(ut=>{"use strict";ut.randomBytes=ut.rng=ut.pseudoRandomBytes=ut.prng=If();ut.createHash=ut.Hash=kc();ut.createHmac=ut.Hmac=iS();var GEe=v8(),YEe=Object.keys(GEe),WEe=["sha1","sha224","sha256","sha384","sha512","md5","rmd160"].concat(YEe);ut.getHashes=function(){return WEe};var dH=hS();ut.pbkdf2=dH.pbkdf2;ut.pbkdf2Sync=dH.pbkdf2Sync;var go=Z5();ut.Cipher=go.Cipher;ut.createCipher=go.createCipher;ut.Cipheriv=go.Cipheriv;ut.createCipheriv=go.createCipheriv;ut.Decipher=go.Decipher;ut.createDecipher=go.createDecipher;ut.Decipheriv=go.Decipheriv;ut.createDecipheriv=go.createDecipheriv;ut.getCiphers=go.getCiphers;ut.listCiphers=go.listCiphers;var jd=cP();ut.DiffieHellmanGroup=jd.DiffieHellmanGroup;ut.createDiffieHellmanGroup=jd.createDiffieHellmanGroup;ut.getDiffieHellman=jd.getDiffieHellman;ut.createDiffieHellman=jd.createDiffieHellman;ut.DiffieHellman=jd.DiffieHellman;var tm=HO();ut.createSign=tm.createSign;ut.Sign=tm.Sign;ut.createVerify=tm.createVerify;ut.Verify=tm.Verify;ut.createECDH=GO();var rm=nH();ut.publicEncrypt=rm.publicEncrypt;ut.privateEncrypt=rm.privateEncrypt;ut.publicDecrypt=rm.publicDecrypt;ut.privateDecrypt=rm.privateDecrypt;var gH=hH();ut.randomFill=gH.randomFill;ut.randomFillSync=gH.randomFillSync;ut.createCredentials=function(){throw new Error(`sorry, createCredentials is not implemented yet
-we accept pull requests
-https://github.com/browserify/crypto-browserify`)};ut.constants={DH_CHECK_P_NOT_SAFE_PRIME:2,DH_CHECK_P_NOT_PRIME:1,DH_UNABLE_TO_CHECK_GENERATOR:4,DH_NOT_SUITABLE_GENERATOR:8,NPN_ENABLED:1,ALPN_ENABLED:1,RSA_PKCS1_PADDING:1,RSA_SSLV23_PADDING:2,RSA_NO_PADDING:3,RSA_PKCS1_OAEP_PADDING:4,RSA_X931_PADDING:5,RSA_PKCS1_PSS_PADDING:6,POINT_CONVERSION_COMPRESSED:2,POINT_CONVERSION_UNCOMPRESSED:4,POINT_CONVERSION_HYBRID:6}});var EH=x(()=>{"use strict";var pH=new Error("No such built-in module: node:sqlite");pH.code="ERR_UNKNOWN_BUILTIN_MODULE";throw pH});var x_=x((OFe,yH)=>{"use strict";yH.exports={isMainThread:!0,parentPort:null,workerData:null}});var P_=x((_,L_)=>{"use strict";var e=new Set(["crypto","sqlite","markAsUncloneable","zstd"]),t=new Map([["crypto",!0],["sqlite",!1],["markAsUncloneable",!1],["zstd",!1]]),r={clear(){t.clear()},has(n){if(!e.has(n))throw new TypeError(`unknown feature: ${n}`);return t.get(n)??!1},set(n,i){if(!e.has(n))throw new TypeError(`unknown feature: ${n}`);t.set(n,!!i)}};L_.exports.runtimeFeatures=r;L_.exports.default=r});var po=x((GFe,wH)=>{"use strict";var XEe=Wt(),{types:ur,inspect:ZEe}=Yr(),{runtimeFeatures:$Ee}=P_(),O_=1,H_=2,im=3,sm=4,q_=5,om=6,G_=7,$n=8,QH=Function.call.bind(Function.prototype[Symbol.hasInstance]),K={converters:{},util:{},errors:{},is:{}};K.errors.exception=function(e){return new TypeError(`${e.header}: ${e.message}`)};K.errors.conversionFailed=function(e){let t=e.types.length===1?"":" one of",r=`${e.argument} could not be converted to${t}: ${e.types.join(", ")}.`;return K.errors.exception({header:e.prefix,message:r})};K.errors.invalidArgument=function(e){return K.errors.exception({header:e.prefix,message:`"${e.value}" is an invalid ${e.type}.`})};K.brandCheck=function(e,t){if(!QH(t,e)){let r=new TypeError("Illegal invocation");throw r.code="ERR_INVALID_THIS",r}};K.brandCheckMultiple=function(e){let t=e.map(r=>K.util.MakeTypeAssertion(r));return r=>{if(t.every(n=>!n(r))){let n=new TypeError("Illegal invocation");throw n.code="ERR_INVALID_THIS",n}}};K.argumentLengthCheck=function({length:e},t,r){if(e<t)throw K.errors.exception({message:`${t} argument${t!==1?"s":""} required, but${e?" only":""} ${e} found.`,header:r})};K.illegalConstructor=function(){throw K.errors.exception({header:"TypeError",message:"Illegal constructor"})};K.util.MakeTypeAssertion=function(e){return t=>QH(e,t)};K.util.Type=function(e){switch(typeof e){case"undefined":return O_;case"boolean":return H_;case"string":return im;case"symbol":return sm;case"number":return q_;case"bigint":return om;case"function":case"object":return e===null?G_:$n}};K.util.Types={UNDEFINED:O_,BOOLEAN:H_,STRING:im,SYMBOL:sm,NUMBER:q_,BIGINT:om,NULL:G_,OBJECT:$n};K.util.TypeValueToString=function(e){switch(K.util.Type(e)){case O_:return"Undefined";case H_:return"Boolean";case im:return"String";case sm:return"Symbol";case q_:return"Number";case om:return"BigInt";case G_:return"Null";case $n:return"Object"}};K.util.markAsUncloneable=$Ee.has("markAsUncloneable")?x_().markAsUncloneable:()=>{};K.util.ConvertToInt=function(e,t,r,n){let i,s;t===64?(i=Math.pow(2,53)-1,r==="unsigned"?s=0:s=Math.pow(-2,53)+1):r==="unsigned"?(s=0,i=Math.pow(2,t)-1):(s=Math.pow(-2,t)-1,i=Math.pow(2,t-1)-1);let o=Number(e);if(o===0&&(o=0),K.util.HasFlag(n,K.attributes.EnforceRange)){if(Number.isNaN(o)||o===Number.POSITIVE_INFINITY||o===Number.NEGATIVE_INFINITY)throw K.errors.exception({header:"Integer conversion",message:`Could not convert ${K.util.Stringify(e)} to an integer.`});if(o=K.util.IntegerPart(o),o<s||o>i)throw K.errors.exception({header:"Integer conversion",message:`Value must be between ${s}-${i}, got ${o}.`});return o}return!Number.isNaN(o)&&K.util.HasFlag(n,K.attributes.Clamp)?(o=Math.min(Math.max(o,s),i),Math.floor(o)%2===0?o=Math.floor(o):o=Math.ceil(o),o):Number.isNaN(o)||o===0&&Object.is(0,o)||o===Number.POSITIVE_INFINITY||o===Number.NEGATIVE_INFINITY?0:(o=K.util.IntegerPart(o),o=o%Math.pow(2,t),r==="signed"&&o>=Math.pow(2,t)-1?o-Math.pow(2,t):o)};K.util.IntegerPart=function(e){let t=Math.floor(Math.abs(e));return e<0?-1*t:t};K.util.Stringify=function(e){switch(K.util.Type(e)){case sm:return`Symbol(${e.description})`;case $n:return ZEe(e);case im:return`"${e}"`;case om:return`${e}n`;default:return`${e}`}};K.util.IsResizableArrayBuffer=function(e){if(ur.isArrayBuffer(e))return e.resizable;if(ur.isSharedArrayBuffer(e))return e.growable;throw K.errors.exception({header:"IsResizableArrayBuffer",message:`"${K.util.Stringify(e)}" is not an array buffer.`})};K.util.HasFlag=function(e,t){return typeof e=="number"&&(e&t)===t};K.sequenceConverter=function(e){return(t,r,n,i)=>{if(K.util.Type(t)!==$n)throw K.errors.exception({header:r,message:`${n} (${K.util.Stringify(t)}) is not iterable.`});let s=typeof i=="function"?i():t?.[Symbol.iterator]?.(),o=[],a=0;if(s===void 0||typeof s.next!="function")throw K.errors.exception({header:r,message:`${n} is not iterable.`});for(;;){let{done:A,value:f}=s.next();if(A)break;o.push(e(f,r,`${n}[${a++}]`))}return o}};K.recordConverter=function(e,t){return(r,n,i)=>{if(K.util.Type(r)!==$n)throw K.errors.exception({header:n,message:`${i} ("${K.util.TypeValueToString(r)}") is not an Object.`});let s={};if(!ur.isProxy(r)){let a=[...Object.getOwnPropertyNames(r),...Object.getOwnPropertySymbols(r)];for(let A of a){let f=K.util.Stringify(A),l=e(A,n,`Key ${f} in ${i}`),p=t(r[A],n,`${i}[${f}]`);s[l]=p}return s}let o=Reflect.ownKeys(r);for(let a of o)if(Reflect.getOwnPropertyDescriptor(r,a)?.enumerable){let f=e(a,n,i),l=t(r[a],n,i);s[f]=l}return s}};K.interfaceConverter=function(e,t){return(r,n,i)=>{if(!e(r))throw K.errors.exception({header:n,message:`Expected ${i} ("${K.util.Stringify(r)}") to be an instance of ${t}.`});return r}};K.dictionaryConverter=function(e){return e.sort((t,r)=>(t.key>r.key)-(t.key<r.key)),(t,r,n)=>{let i={};if(t!=null&&K.util.Type(t)!==$n)throw K.errors.exception({header:r,message:`Expected ${t} to be one of: Null, Undefined, Object.`});for(let s of e){let{key:o,defaultValue:a,required:A,converter:f}=s;if(A===!0&&(t==null||!Object.hasOwn(t,o)))throw K.errors.exception({header:r,message:`Missing required key "${o}".`});let l=t?.[o],p=a!==void 0;if(p&&l===void 0&&(l=a()),A||p||l!==void 0){if(l=f(l,r,`${n}.${o}`),s.allowedValues&&!s.allowedValues.includes(l))throw K.errors.exception({header:r,message:`${l} is not an accepted type. Expected one of ${s.allowedValues.join(", ")}.`});i[o]=l}}return i}};K.nullableConverter=function(e){return(t,r,n)=>t===null?t:e(t,r,n)};K.is.USVString=function(e){return typeof e=="string"&&e.isWellFormed()};K.is.ReadableStream=K.util.MakeTypeAssertion(ReadableStream);K.is.Blob=K.util.MakeTypeAssertion(Blob);K.is.URLSearchParams=K.util.MakeTypeAssertion(URLSearchParams);K.is.File=K.util.MakeTypeAssertion(File);K.is.URL=K.util.MakeTypeAssertion(URL);K.is.AbortSignal=K.util.MakeTypeAssertion(AbortSignal);K.is.MessagePort=K.util.MakeTypeAssertion(MessagePort);K.is.BufferSource=function(e){return ur.isArrayBuffer(e)||ArrayBuffer.isView(e)&&ur.isArrayBuffer(e.buffer)};K.util.getCopyOfBytesHeldByBufferSource=function(e){let t=e,r=t,n=0,i=0;if(ur.isTypedArray(t)||ur.isDataView(t)?(r=t.buffer,n=t.byteOffset,i=t.byteLength):(XEe(ur.isAnyArrayBuffer(t)),i=t.byteLength),r.detached)return new Uint8Array(0);let s=new Uint8Array(i),o=new Uint8Array(r,n,i);return s.set(o),s};K.converters.DOMString=function(e,t,r,n){if(e===null&&K.util.HasFlag(n,K.attributes.LegacyNullToEmptyString))return"";if(typeof e=="symbol")throw K.errors.exception({header:t,message:`${r} is a symbol, which cannot be converted to a DOMString.`});return String(e)};K.converters.ByteString=function(e,t,r){if(typeof e=="symbol")throw K.errors.exception({header:t,message:`${r} is a symbol, which cannot be converted to a ByteString.`});let n=String(e);for(let i=0;i<n.length;i++)if(n.charCodeAt(i)>255)throw new TypeError(`Cannot convert argument to a ByteString because the character at index ${i} has a value of ${n.charCodeAt(i)} which is greater than 255.`);return n};K.converters.USVString=function(e){return typeof e=="string"?e.toWellFormed():`${e}`.toWellFormed()};K.converters.boolean=function(e){return!!e};K.converters.any=function(e){return e};K.converters["long long"]=function(e,t,r){return K.util.ConvertToInt(e,64,"signed",0,t,r)};K.converters["unsigned long long"]=function(e,t,r){return K.util.ConvertToInt(e,64,"unsigned",0,t,r)};K.converters["unsigned long"]=function(e,t,r){return K.util.ConvertToInt(e,32,"unsigned",0,t,r)};K.converters["unsigned short"]=function(e,t,r,n){return K.util.ConvertToInt(e,16,"unsigned",n,t,r)};K.converters.ArrayBuffer=function(e,t,r,n){if(K.util.Type(e)!==$n||!ur.isArrayBuffer(e))throw K.errors.conversionFailed({prefix:t,argument:`${r} ("${K.util.Stringify(e)}")`,types:["ArrayBuffer"]});if(!K.util.HasFlag(n,K.attributes.AllowResizable)&&K.util.IsResizableArrayBuffer(e))throw K.errors.exception({header:t,message:`${r} cannot be a resizable ArrayBuffer.`});return e};K.converters.SharedArrayBuffer=function(e,t,r,n){if(K.util.Type(e)!==$n||!ur.isSharedArrayBuffer(e))throw K.errors.conversionFailed({prefix:t,argument:`${r} ("${K.util.Stringify(e)}")`,types:["SharedArrayBuffer"]});if(!K.util.HasFlag(n,K.attributes.AllowResizable)&&K.util.IsResizableArrayBuffer(e))throw K.errors.exception({header:t,message:`${r} cannot be a resizable SharedArrayBuffer.`});return e};K.converters.TypedArray=function(e,t,r,n,i){if(K.util.Type(e)!==$n||!ur.isTypedArray(e)||e.constructor.name!==t.name)throw K.errors.conversionFailed({prefix:r,argument:`${n} ("${K.util.Stringify(e)}")`,types:[t.name]});if(!K.util.HasFlag(i,K.attributes.AllowShared)&&ur.isSharedArrayBuffer(e.buffer))throw K.errors.exception({header:r,message:`${n} cannot be a view on a shared array buffer.`});if(!K.util.HasFlag(i,K.attributes.AllowResizable)&&K.util.IsResizableArrayBuffer(e.buffer))throw K.errors.exception({header:r,message:`${n} cannot be a view on a resizable array buffer.`});return e};K.converters.DataView=function(e,t,r,n){if(K.util.Type(e)!==$n||!ur.isDataView(e))throw K.errors.conversionFailed({prefix:t,argument:`${r} ("${K.util.Stringify(e)}")`,types:["DataView"]});if(!K.util.HasFlag(n,K.attributes.AllowShared)&&ur.isSharedArrayBuffer(e.buffer))throw K.errors.exception({header:t,message:`${r} cannot be a view on a shared array buffer.`});if(!K.util.HasFlag(n,K.attributes.AllowResizable)&&K.util.IsResizableArrayBuffer(e.buffer))throw K.errors.exception({header:t,message:`${r} cannot be a view on a resizable array buffer.`});return e};K.converters.ArrayBufferView=function(e,t,r,n){if(K.util.Type(e)!==$n||!ur.isArrayBufferView(e))throw K.errors.conversionFailed({prefix:t,argument:`${r} ("${K.util.Stringify(e)}")`,types:["ArrayBufferView"]});if(!K.util.HasFlag(n,K.attributes.AllowShared)&&ur.isSharedArrayBuffer(e.buffer))throw K.errors.exception({header:t,message:`${r} cannot be a view on a shared array buffer.`});if(!K.util.HasFlag(n,K.attributes.AllowResizable)&&K.util.IsResizableArrayBuffer(e.buffer))throw K.errors.exception({header:t,message:`${r} cannot be a view on a resizable array buffer.`});return e};K.converters.BufferSource=function(e,t,r,n){if(ur.isArrayBuffer(e))return K.converters.ArrayBuffer(e,t,r,n);if(ur.isArrayBufferView(e))return n&=~K.attributes.AllowShared,K.converters.ArrayBufferView(e,t,r,n);throw ur.isSharedArrayBuffer(e)?K.errors.exception({header:t,message:`${r} cannot be a SharedArrayBuffer.`}):K.errors.conversionFailed({prefix:t,argument:`${r} ("${K.util.Stringify(e)}")`,types:["ArrayBuffer","ArrayBufferView"]})};K.converters.AllowSharedBufferSource=function(e,t,r,n){if(ur.isArrayBuffer(e))return K.converters.ArrayBuffer(e,t,r,n);if(ur.isSharedArrayBuffer(e))return K.converters.SharedArrayBuffer(e,t,r,n);if(ur.isArrayBufferView(e))return n|=K.attributes.AllowShared,K.converters.ArrayBufferView(e,t,r,n);throw K.errors.conversionFailed({prefix:t,argument:`${r} ("${K.util.Stringify(e)}")`,types:["ArrayBuffer","SharedArrayBuffer","ArrayBufferView"]})};K.converters["sequence<ByteString>"]=K.sequenceConverter(K.converters.ByteString);K.converters["sequence<sequence<ByteString>>"]=K.sequenceConverter(K.converters["sequence<ByteString>"]);K.converters["record<ByteString, ByteString>"]=K.recordConverter(K.converters.ByteString,K.converters.ByteString);K.converters.Blob=K.interfaceConverter(K.is.Blob,"Blob");K.converters.AbortSignal=K.interfaceConverter(K.is.AbortSignal,"AbortSignal");K.converters.EventHandlerNonNull=function(e){return K.util.Type(e)!==$n?null:typeof e=="function"?e:()=>{}};K.attributes={Clamp:1,EnforceRange:2,AllowShared:4,AllowResizable:8,LegacyNullToEmptyString:16};wH.exports={webidl:K}});var Kf=x((YFe,PH)=>{"use strict";var{Transform:eye}=(ts(),Gs(Yt)),SH=UE(),{redirectStatusSet:tye,referrerPolicyTokens:rye,badPortsSet:nye}=id(),{getGlobalOrigin:_H}=R3(),{collectAnHTTPQuotedString:iye,parseMIMEType:sye}=Bf(),{performance:oye}=q3(),{ReadableStreamFrom:aye,isValidHTTPToken:vH,normalizedMethodRecordsBase:Aye}=$t(),Kd=Wt(),{isUint8Array:fye}=Dw(),{webidl:pA}=po(),{isomorphicEncode:Y_,collectASequenceOfCodePoints:Jf,removeChars:uye}=mf();function RH(e){let t=e.urlList,r=t.length;return r===0?null:t[r-1].toString()}function cye(e,t){if(!tye.has(e.status))return null;let r=e.headersList.get("location",!0);return r!==null&&TH(r)&&(DH(r)||(r=lye(r)),r=new URL(r,RH(e))),r&&!r.hash&&(r.hash=t),r}function DH(e){for(let t=0;t<e.length;++t){let r=e.charCodeAt(t);if(r>126||r<32)return!1}return!0}function lye(e){return Buffer.from(e,"binary").toString("utf8")}function zf(e){return e.urlList[e.urlList.length-1]}function hye(e){let t=zf(e);return UH(t)&&nye.has(t.port)?"blocked":"allowed"}function dye(e){return e instanceof Error||e?.constructor?.name==="Error"||e?.constructor?.name==="DOMException"}function gye(e){for(let t=0;t<e.length;++t){let r=e.charCodeAt(t);if(!(r===9||r>=32&&r<=126||r>=128&&r<=255))return!1}return!0}var pye=vH;function TH(e){return(e[0]==="	"||e[0]===" "||e[e.length-1]==="	"||e[e.length-1]===" "||e.includes(`
-`)||e.includes("\r")||e.includes("\0"))===!1}function Eye(e){let t=(e.headersList.get("referrer-policy",!0)??"").split(","),r="";if(t.length)for(let n=t.length;n!==0;n--){let i=t[n-1].trim();if(rye.has(i)){r=i;break}}return r}function yye(e,t){let r=Eye(t);r!==""&&(e.referrerPolicy=r)}function mye(){return"allowed"}function Bye(){return"success"}function Iye(){return"success"}function bye(e){let t=null;t=e.mode,e.headersList.set("sec-fetch-mode",t,!0)}function Cye(e){let t=e.origin;if(!(t==="client"||t===void 0)){if(e.responseTainting==="cors"||e.mode==="websocket")e.headersList.append("origin",t,!0);else if(e.method!=="GET"&&e.method!=="HEAD"){switch(e.referrerPolicy){case"no-referrer":t=null;break;case"no-referrer-when-downgrade":case"strict-origin":case"strict-origin-when-cross-origin":e.origin&&V_(e.origin)&&!V_(zf(e))&&(t=null);break;case"same-origin":zd(e,zf(e))||(t=null);break;default:}e.headersList.append("origin",t,!0)}}}function sl(e,t){return e}function Qye(e,t,r){return!e?.startTime||e.startTime<t?{domainLookupStartTime:t,domainLookupEndTime:t,connectionStartTime:t,connectionEndTime:t,secureConnectionStartTime:t,ALPNNegotiatedProtocol:e?.ALPNNegotiatedProtocol}:{domainLookupStartTime:sl(e.domainLookupStartTime,r),domainLookupEndTime:sl(e.domainLookupEndTime,r),connectionStartTime:sl(e.connectionStartTime,r),connectionEndTime:sl(e.connectionEndTime,r),secureConnectionStartTime:sl(e.secureConnectionStartTime,r),ALPNNegotiatedProtocol:e.ALPNNegotiatedProtocol}}function wye(e){return sl(oye.now(),e)}function Sye(e){return{startTime:e.startTime??0,redirectStartTime:0,redirectEndTime:0,postRedirectStartTime:e.startTime??0,finalServiceWorkerStartTime:0,finalNetworkResponseStartTime:0,finalNetworkRequestStartTime:0,endTime:0,encodedBodySize:0,decodedBodySize:0,finalConnectionTimingInfo:null}}function NH(){return{referrerPolicy:"strict-origin-when-cross-origin"}}function _ye(e){return{referrerPolicy:e.referrerPolicy}}function vye(e){let t=e.referrerPolicy;Kd(t);let r=null;if(e.referrer==="client"){let s=_H();if(!s||s.origin==="null")return"no-referrer";r=new URL(s)}else pA.is.URL(e.referrer)&&(r=e.referrer);let n=W_(r),i=W_(r,!0);switch(n.toString().length>4096&&(n=i),t){case"no-referrer":return"no-referrer";case"origin":return i??W_(r,!0);case"unsafe-url":return n;case"strict-origin":{let s=zf(e);return jf(n)&&!jf(s)?"no-referrer":i}case"strict-origin-when-cross-origin":{let s=zf(e);return zd(n,s)?n:jf(n)&&!jf(s)?"no-referrer":i}case"same-origin":return zd(e,n)?n:"no-referrer";case"origin-when-cross-origin":return zd(e,n)?n:i;case"no-referrer-when-downgrade":{let s=zf(e);return jf(n)&&!jf(s)?"no-referrer":n}}}function W_(e,t=!1){return Kd(pA.is.URL(e)),e=new URL(e),xH(e)?"no-referrer":(e.username="",e.password="",e.hash="",t===!0&&(e.pathname="",e.search=""),e)}var Rye=RegExp.prototype.test.bind(/^127\.(?:(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]\d|\d)\.){2}(?:25[0-5]|2[0-4]\d|1\d\d|[1-9]\d|\d)$/),Dye=RegExp.prototype.test.bind(/^(?:(?:0{1,4}:){7}|(?:0{1,4}:){1,6}:|::)0{0,3}1$/);function MH(e){return e.includes(":")?(e[0]==="["&&e[e.length-1]==="]"&&(e=e.slice(1,-1)),Dye(e)):Rye(e)}function Tye(e){return e==null||e==="null"?!1:(e=new URL(e),!!(e.protocol==="https:"||e.protocol==="wss:"||MH(e.hostname)||e.hostname==="localhost"||e.hostname==="localhost."||e.hostname.endsWith(".localhost")||e.hostname.endsWith(".localhost.")||e.protocol==="file:"))}function jf(e){return pA.is.URL(e)?e.href==="about:blank"||e.href==="about:srcdoc"||e.protocol==="data:"||e.protocol==="blob:"?!0:Tye(e.origin):!1}function Nye(e){}function zd(e,t){return e.origin===t.origin&&e.origin==="null"||e.protocol===t.protocol&&e.hostname===t.hostname&&e.port===t.port}function Mye(e){return e.controller.state==="aborted"}function Fye(e){return e.controller.state==="aborted"||e.controller.state==="terminated"}function kye(e){return Aye[e.toLowerCase()]??e}var xye=Object.getPrototypeOf(Object.getPrototypeOf([][Symbol.iterator]()));function FH(e,t,r=0,n=1){var s,o,a;class i{constructor(f,l){St(this,s);St(this,o);St(this,a);ft(this,s,f),ft(this,o,l),ft(this,a,0)}next(){if(typeof this!="object"||this===null||!wD(s,this))throw new TypeError(`'next' called on an object that does not implement interface ${e} Iterator.`);let f=te(this,a),l=t(te(this,s)),p=l.length;if(f>=p)return{value:void 0,done:!0};let{[r]:B,[n]:S}=l[f];ft(this,a,f+1);let _;switch(te(this,o)){case"key":_=B;break;case"value":_=S;break;case"key+value":_=[B,S];break}return{value:_,done:!1}}}return s=new WeakMap,o=new WeakMap,a=new WeakMap,delete i.prototype.constructor,Object.setPrototypeOf(i.prototype,xye),Object.defineProperties(i.prototype,{[Symbol.toStringTag]:{writable:!1,enumerable:!1,configurable:!0,value:`${e} Iterator`},next:{writable:!0,enumerable:!0,configurable:!0}}),function(A,f){return new i(A,f)}}function Uye(e,t,r,n=0,i=1){let s=FH(e,r,n,i),o={keys:{writable:!0,enumerable:!0,configurable:!0,value:function(){return pA.brandCheck(this,t),s(this,"key")}},values:{writable:!0,enumerable:!0,configurable:!0,value:function(){return pA.brandCheck(this,t),s(this,"value")}},entries:{writable:!0,enumerable:!0,configurable:!0,value:function(){return pA.brandCheck(this,t),s(this,"key+value")}},forEach:{writable:!0,enumerable:!0,configurable:!0,value:function(A,f=globalThis){if(pA.brandCheck(this,t),pA.argumentLengthCheck(arguments,1,`${e}.forEach`),typeof A!="function")throw new TypeError(`Failed to execute 'forEach' on '${e}': parameter 1 is not of type 'Function'.`);for(let{0:l,1:p}of s(this,"key+value"))A.call(f,p,l,this)}}};return Object.defineProperties(t.prototype,{...o,[Symbol.iterator]:{writable:!0,enumerable:!1,configurable:!0,value:o.entries.value}})}function Lye(e,t,r){let n=t,i=r;try{let s=e.stream.getReader();kH(s,n,i)}catch(s){i(s)}}function Pye(e){try{e.close(),e.byobRequest?.respond(0)}catch(t){if(!t.message.includes("Controller is already closed")&&!t.message.includes("ReadableStream is already closed"))throw t}}async function kH(e,t,r){try{let n=[],i=0;do{let{done:s,value:o}=await e.read();if(s){t(Buffer.concat(n,i));return}if(!fye(o)){r(new TypeError("Received non-Uint8Array chunk"));return}n.push(o),i+=o.length}while(!0)}catch(n){r(n)}}function xH(e){Kd("protocol"in e);let t=e.protocol;return t==="about:"||t==="blob:"||t==="data:"}function V_(e){return typeof e=="string"&&e[5]===":"&&e[0]==="h"&&e[1]==="t"&&e[2]==="t"&&e[3]==="p"&&e[4]==="s"||e.protocol==="https:"}function UH(e){Kd("protocol"in e);let t=e.protocol;return t==="http:"||t==="https:"}function Oye(e,t){let r=e;if(!r.startsWith("bytes"))return"failure";let n={position:5};if(t&&Jf(A=>A==="	"||A===" ",r,n),r.charCodeAt(n.position)!==61)return"failure";n.position++,t&&Jf(A=>A==="	"||A===" ",r,n);let i=Jf(A=>{let f=A.charCodeAt(0);return f>=48&&f<=57},r,n),s=i.length?Number(i):null;if(t&&Jf(A=>A==="	"||A===" ",r,n),r.charCodeAt(n.position)!==45)return"failure";n.position++,t&&Jf(A=>A==="	"||A===" ",r,n);let o=Jf(A=>{let f=A.charCodeAt(0);return f>=48&&f<=57},r,n),a=o.length?Number(o):null;return n.position<r.length||a===null&&s===null||s>a?"failure":{rangeStartValue:s,rangeEndValue:a}}function Hye(e,t,r){let n="bytes ";return n+=Y_(`${e}`),n+="-",n+=Y_(`${t}`),n+="/",n+=Y_(`${r}`),n}var ol,J_=class extends eye{constructor(r){super();St(this,ol);ft(this,ol,r)}_transform(r,n,i){if(!this._inflateStream){if(r.length===0){i();return}this._inflateStream=(r[0]&15)===8?SH.createInflate(te(this,ol)):SH.createInflateRaw(te(this,ol)),this._inflateStream.on("data",this.push.bind(this)),this._inflateStream.on("end",()=>this.push(null)),this._inflateStream.on("error",s=>this.destroy(s))}this._inflateStream.write(r,n,i)}_final(r){this._inflateStream&&(this._inflateStream.end(),this._inflateStream=null),r()}};ol=new WeakMap;function qye(e){return new J_(e)}function Gye(e){let t=null,r=null,n=null,i=LH("content-type",e);if(i===null)return"failure";for(let s of i){let o=sye(s);o==="failure"||o.essence==="*/*"||(n=o,n.essence!==r?(t=null,n.parameters.has("charset")&&(t=n.parameters.get("charset")),r=n.essence):!n.parameters.has("charset")&&t!==null&&n.parameters.set("charset",t))}return n??"failure"}function Yye(e){let t=e,r={position:0},n=[],i="";for(;r.position<t.length;){if(i+=Jf(s=>s!=='"'&&s!==",",t,r),r.position<t.length)if(t.charCodeAt(r.position)===34){if(i+=iye(t,r),r.position<t.length)continue}else Kd(t.charCodeAt(r.position)===44),r.position++;i=uye(i,!0,!0,s=>s===9||s===32),n.push(i),i=""}return n}function LH(e,t){let r=t.get(e,!0);return r===null?null:Yye(r)}function Wye(e){return!1}function Vye(e){return!!(e.username||e.password)}function Jye(e){return!0}var j_=class{constructor(){y(this,"policyContainer",NH())}get baseUrl(){return _H()}get origin(){return this.baseUrl?.origin}},z_=class{constructor(){y(this,"settingsObject",new j_)}},jye=new z_;PH.exports={isAborted:Mye,isCancelled:Fye,isValidEncodedURL:DH,ReadableStreamFrom:aye,tryUpgradeRequestToAPotentiallyTrustworthyURL:Nye,clampAndCoarsenConnectionTimingInfo:Qye,coarsenedSharedCurrentTime:wye,determineRequestsReferrer:vye,makePolicyContainer:NH,clonePolicyContainer:_ye,appendFetchMetadata:bye,appendRequestOriginHeader:Cye,TAOCheck:Iye,corsCheck:Bye,crossOriginResourcePolicyCheck:mye,createOpaqueTimingInfo:Sye,setRequestReferrerPolicyOnRedirect:yye,isValidHTTPToken:vH,requestBadPort:hye,requestCurrentURL:zf,responseURL:RH,responseLocationURL:cye,isURLPotentiallyTrustworthy:jf,isValidReasonPhrase:gye,sameOrigin:zd,normalizeMethod:kye,iteratorMixin:Uye,createIterator:FH,isValidHeaderName:pye,isValidHeaderValue:TH,isErrorLike:dye,fullyReadBody:Lye,readableStreamClose:Pye,urlIsLocal:xH,urlHasHttpsScheme:V_,urlIsHttpHttpsScheme:UH,readAllBytes:kH,simpleRangeHeaderValue:Oye,buildContentRange:Hye,createInflate:qye,extractMimeType:Gye,getDecodeSplit:LH,environmentSettingsObject:jye,isOriginIPPotentiallyTrustworthy:MH,hasAuthenticationEntry:Wye,includesCredentials:Vye,isTraversableNavigable:Jye}});var X_=x((VFe,HH)=>{"use strict";var{iteratorMixin:zye}=Kf(),{kEnumerableProperty:al}=$t(),{webidl:vt}=po(),OH=Yr(),Pr,EA=class EA{constructor(t=void 0){St(this,Pr,[]);if(vt.util.markAsUncloneable(this),t!==void 0)throw vt.errors.conversionFailed({prefix:"FormData constructor",argument:"Argument 1",types:["undefined"]})}append(t,r,n=void 0){vt.brandCheck(this,EA);let i="FormData.append";vt.argumentLengthCheck(arguments,2,i),t=vt.converters.USVString(t),arguments.length===3||vt.is.Blob(r)?(r=vt.converters.Blob(r,i,"value"),n!==void 0&&(n=vt.converters.USVString(n))):r=vt.converters.USVString(r);let s=K_(t,r,n);te(this,Pr).push(s)}delete(t){vt.brandCheck(this,EA),vt.argumentLengthCheck(arguments,1,"FormData.delete"),t=vt.converters.USVString(t),ft(this,Pr,te(this,Pr).filter(n=>n.name!==t))}get(t){vt.brandCheck(this,EA),vt.argumentLengthCheck(arguments,1,"FormData.get"),t=vt.converters.USVString(t);let n=te(this,Pr).findIndex(i=>i.name===t);return n===-1?null:te(this,Pr)[n].value}getAll(t){return vt.brandCheck(this,EA),vt.argumentLengthCheck(arguments,1,"FormData.getAll"),t=vt.converters.USVString(t),te(this,Pr).filter(n=>n.name===t).map(n=>n.value)}has(t){return vt.brandCheck(this,EA),vt.argumentLengthCheck(arguments,1,"FormData.has"),t=vt.converters.USVString(t),te(this,Pr).findIndex(n=>n.name===t)!==-1}set(t,r,n=void 0){vt.brandCheck(this,EA);let i="FormData.set";vt.argumentLengthCheck(arguments,2,i),t=vt.converters.USVString(t),arguments.length===3||vt.is.Blob(r)?(r=vt.converters.Blob(r,i,"value"),n!==void 0&&(n=vt.converters.USVString(n))):r=vt.converters.USVString(r);let s=K_(t,r,n),o=te(this,Pr).findIndex(a=>a.name===t);o!==-1?ft(this,Pr,[...te(this,Pr).slice(0,o),s,...te(this,Pr).slice(o+1).filter(a=>a.name!==t)]):te(this,Pr).push(s)}[OH.inspect.custom](t,r){let n=te(this,Pr).reduce((s,o)=>(s[o.name]?Array.isArray(s[o.name])?s[o.name].push(o.value):s[o.name]=[s[o.name],o.value]:s[o.name]=o.value,s),{__proto__:null});r.depth??(r.depth=t),r.colors??(r.colors=!0);let i=OH.formatWithOptions(r,n);return`FormData ${i.slice(i.indexOf("]")+2)}`}static getFormDataState(t){return te(t,Pr)}static setFormDataState(t,r){ft(t,Pr,r)}};Pr=new WeakMap;var la=EA,{getFormDataState:Kye,setFormDataState:Xye}=la;Reflect.deleteProperty(la,"getFormDataState");Reflect.deleteProperty(la,"setFormDataState");zye("FormData",la,Kye,"name","value");Object.defineProperties(la.prototype,{append:al,delete:al,get:al,getAll:al,has:al,set:al,[Symbol.toStringTag]:{value:"FormData",configurable:!0}});function K_(e,t,r){if(typeof t!="string"){if(vt.is.File(t)||(t=new File([t],"blob",{type:t.type})),r!==void 0){let n={type:t.type,lastModified:t.lastModified};t=new File([t],r,n)}}return{name:e,value:t}}vt.is.FormData=vt.util.MakeTypeAssertion(la);HH.exports={FormData:la,makeEntry:K_,setFormDataState:Xye}});var YH=x((jFe,GH)=>{"use strict";var{bufferToLowerCasedHeaderName:Zye}=$t(),{HTTP_TOKEN_CODEPOINTS:$ye}=Bf(),{makeEntry:eme}=X_(),{webidl:Z_}=po(),$_=Wt(),{isomorphicDecode:qH}=mf(),tme=Buffer.from("--"),ev=new TextDecoder,rme=new TextDecoder("utf-8",{ignoreBOM:!0});function nme(e){for(let t=0;t<e.length;++t)if((e.charCodeAt(t)&-128)!==0)return!1;return!0}function ime(e){let t=e.length;if(t<27||t>70)return!1;for(let r=0;r<t;++r){let n=e.charCodeAt(r);if(!(n>=48&&n<=57||n>=65&&n<=90||n>=97&&n<=122||n===39||n===45||n===95))return!1}return!0}function sme(e,t){$_(t!=="failure"&&t.essence==="multipart/form-data");let r=t.parameters.get("boundary");if(r===void 0)throw Un("missing boundary in content-type header");let n=Buffer.from(`--${r}`,"utf8"),i=[],s={position:0},o=e.indexOf(n);if(o===-1)throw Un("no boundary found in multipart body");for(s.position=o;;){if(e.subarray(s.position,s.position+n.length).equals(n))s.position+=n.length;else throw Un("expected a value starting with -- and the boundary");if(Ame(e,tme,s))return i;if(e[s.position]!==13||e[s.position+1]!==10)throw Un("expected CRLF");s.position+=2;let a=ame(e,s),{name:A,filename:f,contentType:l,encoding:p}=a;s.position+=2;let B;{let _=e.indexOf(n.subarray(2),s.position);if(_===-1)throw Un("expected boundary after body");B=e.subarray(s.position,_-4),s.position+=B.length,p==="base64"&&(B=Buffer.from(B.toString(),"base64"))}if(e[s.position]!==13||e[s.position+1]!==10)throw Un("expected CRLF");s.position+=2;let S;f!==null?(l??(l="text/plain"),nme(l)||(l=""),S=new File([B],f,{type:l})):S=rme.decode(Buffer.from(B)),$_(Z_.is.USVString(A)),$_(typeof S=="string"&&Z_.is.USVString(S)||Z_.is.File(S)),i.push(eme(A,S,f))}}function ome(e,t){e[t.position]===59&&t.position++,Di(o=>o===32||o===9,e,t);let r=Di(o=>rv(o)&&o!==61&&o!==42,e,t);if(r.length===0)return null;let n=r.toString("ascii").toLowerCase(),i=e[t.position]===42;if(i&&t.position++,e[t.position]!==61)return null;t.position++,Di(o=>o===32||o===9,e,t);let s;if(i){let o=Di(a=>a!==32&&a!==13&&a!==10&&a!==59,e,t);if(o[0]!==117&&o[0]!==85||o[1]!==116&&o[1]!==84||o[2]!==102&&o[2]!==70||o[3]!==45||o[4]!==56)throw Un("unknown encoding, expected utf-8''");s=decodeURIComponent(ev.decode(o.subarray(7)))}else if(e[t.position]===34){t.position++;let o=Di(a=>a!==10&&a!==13&&a!==34,e,t);if(e[t.position]!==34)throw Un("Closing quote not found");t.position++,s=ev.decode(o).replace(/%0A/ig,`
-`).replace(/%0D/ig,"\r").replace(/%22/g,'"')}else{let o=Di(a=>rv(a)&&a!==59,e,t);s=ev.decode(o)}return{name:n,value:s}}function ame(e,t){let r=null,n=null,i=null,s=null;for(;;){if(e[t.position]===13&&e[t.position+1]===10){if(r===null)throw Un("header name is null");return{name:r,filename:n,contentType:i,encoding:s}}let o=Di(a=>a!==10&&a!==13&&a!==58,e,t);if(o=tv(o,!0,!0,a=>a===9||a===32),!$ye.test(o.toString()))throw Un("header name does not match the field-name token production");if(e[t.position]!==58)throw Un("expected :");switch(t.position++,Di(a=>a===32||a===9,e,t),Zye(o)){case"content-disposition":{if(r=n=null,Di(A=>rv(A),e,t).toString("ascii").toLowerCase()!=="form-data")throw Un("expected form-data for content-disposition header");for(;t.position<e.length&&e[t.position]!==13&&e[t.position+1]!==10;){let A=ome(e,t);if(!A)break;A.name==="name"?r=A.value:A.name==="filename"&&(n=A.value)}if(r===null)throw Un("name attribute is required in content-disposition header");break}case"content-type":{let a=Di(A=>A!==10&&A!==13,e,t);a=tv(a,!1,!0,A=>A===9||A===32),i=qH(a);break}case"content-transfer-encoding":{let a=Di(A=>A!==10&&A!==13,e,t);a=tv(a,!1,!0,A=>A===9||A===32),s=qH(a);break}default:Di(a=>a!==10&&a!==13,e,t)}if(e[t.position]!==13&&e[t.position+1]!==10)throw Un("expected CRLF");t.position+=2}}function Di(e,t,r){let n=r.position;for(;n<t.length&&e(t[n]);)++n;return t.subarray(r.position,r.position=n)}function tv(e,t,r,n){let i=0,s=e.length-1;if(t)for(;i<e.length&&n(e[i]);)i++;if(r)for(;s>0&&n(e[s]);)s--;return i===0&&s===e.length-1?e:e.subarray(i,s+1)}function Ame(e,t,r){if(e.length<t.length)return!1;for(let n=0;n<t.length;n++)if(t[n]!==e[r.position+n])return!1;return!0}function Un(e){return new TypeError("Failed to parse body as FormData.",{cause:new TypeError(e)})}function fme(e){return e<=31||e===127}function ume(e){return e===40||e===41||e===60||e===62||e===64||e===44||e===59||e===58||e===92||e===34||e===47||e===91||e===93||e===63||e===61}function rv(e){return e<=127&&e!==32&&e!==9&&!fme(e)&&!ume(e)}GH.exports={multipartFormDataParser:sme,validateBoundary:ime}});var nv=x((zFe,WH)=>{"use strict";function cme(){let e,t;return{promise:new Promise((n,i)=>{e=n,t=i}),resolve:e,reject:t}}WH.exports={createDeferredPromise:cme}});var sv=x((KFe,jH)=>{"use strict";var VH=new Set(["crypto","sqlite","markAsUncloneable","zstd"]),Al,iv=class{constructor(){St(this,Al,new Map([["crypto",!0],["sqlite",!1],["markAsUncloneable",!1],["zstd",!1]]))}clear(){te(this,Al).clear()}has(t){if(!VH.has(t))throw new TypeError(`unknown feature: ${t}`);return te(this,Al).get(t)??!1}set(t,r){if(!VH.has(t))throw new TypeError(`unknown feature: ${t}`);te(this,Al).set(t,!!r)}};Al=new WeakMap;var JH=new iv;jH.exports={runtimeFeatures:JH,default:JH}});var ul=x((ZFe,$H)=>{"use strict";var Av=$t(),{ReadableStreamFrom:lme,readableStreamClose:hme,fullyReadBody:dme,extractMimeType:gme}=Kf(),{FormData:zH,setFormDataState:pme}=X_(),{webidl:ms}=po(),ov=Wt(),{isErrored:av,isDisturbed:Eme}=(ts(),Gs(Yt)),{isUint8Array:yme}=Dw(),{serializeAMimeType:mme}=Bf(),{multipartFormDataParser:Bme}=YH(),{createDeferredPromise:Ime}=nv(),{parseJSONFromBytes:bme}=mf(),{utf8DecodeBytes:Cme}=_w(),{runtimeFeatures:Qme}=sv(),wme=Qme.has("crypto")?kd().randomInt:e=>Math.floor(Math.random()*e),am=new TextEncoder;function Sme(){}var _me=new FinalizationRegistry(e=>{let t=e.deref();t&&!t.locked&&!Eme(t)&&!av(t)&&t.cancel("Response object has been garbage collected").catch(Sme)});function XH(e,t=!1){let r=null,n=null;ms.is.ReadableStream(e)?r=e:ms.is.Blob(e)?r=e.stream():r=new ReadableStream({pull(){},start(f){n=f},cancel(){},type:"bytes"}),ov(ms.is.ReadableStream(r));let i=null,s=null,o=null,a=null;if(typeof e=="string")s=e,a="text/plain;charset=UTF-8";else if(ms.is.URLSearchParams(e))s=e.toString(),a="application/x-www-form-urlencoded;charset=UTF-8";else if(ms.is.BufferSource(e))s=ms.util.getCopyOfBytesHeldByBufferSource(e);else if(ms.is.FormData(e)){let f=`----formdata-undici-0${`${wme(1e11)}`.padStart(11,"0")}`,l=`--${f}\r
-Content-Disposition: form-data`;let p=U=>U.replace(/\n/g,"%0A").replace(/\r/g,"%0D").replace(/"/g,"%22"),B=U=>U.replace(/\r?\n|\r/g,`\r
-`),S=[],_=new Uint8Array([13,10]);o=0;let N=!1;for(let[U,G]of e)if(typeof G=="string"){let Y=am.encode(l+`; name="${p(B(U))}"\r
-\r
-${B(G)}\r
-`);S.push(Y),o+=Y.byteLength}else{let Y=am.encode(`${l}; name="${p(B(U))}"`+(G.name?`; filename="${p(G.name)}"`:"")+`\r
-Content-Type: ${G.type||"application/octet-stream"}\r
-\r
-`);S.push(Y,G,_),typeof G.size=="number"?o+=Y.byteLength+G.size+_.byteLength:N=!0}let P=am.encode(`--${f}--\r
-`);S.push(P),o+=P.byteLength,N&&(o=null),s=e,i=async function*(){for(let U of S)U.stream?yield*U.stream():yield U},a=`multipart/form-data; boundary=${f}`}else if(ms.is.Blob(e))s=e,o=e.size,e.type&&(a=e.type);else if(typeof e[Symbol.asyncIterator]=="function"){if(t)throw new TypeError("keepalive");if(Av.isDisturbed(e)||e.locked)throw new TypeError("Response body object should not be disturbed or locked");r=ms.is.ReadableStream(e)?e:lme(e)}return(typeof s=="string"||yme(s))&&(i=()=>(o=typeof s=="string"?Buffer.byteLength(s):s.length,s)),i!=null&&(async()=>{let f=i(),l=f?.[Symbol.asyncIterator]?.();if(l)for await(let p of l){if(av(r))break;p.length&&n.enqueue(new Uint8Array(p))}else f?.length&&!av(r)&&n.enqueue(typeof f=="string"?am.encode(f):new Uint8Array(f));queueMicrotask(()=>hme(n))})(),[{stream:r,source:s,length:o},a]}function vme(e,t=!1){return ms.is.ReadableStream(e)&&(ov(!Av.isDisturbed(e),"The body has already been consumed."),ov(!e.locked,"The stream is locked.")),XH(e,t)}function Rme(e){let{0:t,1:r}=e.stream.tee();return e.stream=t,{stream:r,length:e.length,source:e.source}}function Dme(e,t){return{blob(){return fl(this,n=>{let i=KH(t(this));return i===null?i="":i&&(i=mme(i)),new Blob([n],{type:i})},e,t)},arrayBuffer(){return fl(this,n=>new Uint8Array(n).buffer,e,t)},text(){return fl(this,Cme,e,t)},json(){return fl(this,bme,e,t)},formData(){return fl(this,n=>{let i=KH(t(this));if(i!==null)switch(i.essence){case"multipart/form-data":{let s=Bme(n,i),o=new zH;return pme(o,s),o}case"application/x-www-form-urlencoded":{let s=new URLSearchParams(n.toString()),o=new zH;for(let[a,A]of s)o.append(a,A);return o}}throw new TypeError('Content-Type was not one of "multipart/form-data" or "application/x-www-form-urlencoded".')},e,t)},bytes(){return fl(this,n=>new Uint8Array(n),e,t)}}}function Tme(e,t){Object.assign(e.prototype,Dme(e,t))}function fl(e,t,r,n){try{ms.brandCheck(e,r)}catch(a){return Promise.reject(a)}if(e=n(e),ZH(e))return Promise.reject(new TypeError("Body is unusable: Body has already been read"));let i=Ime(),s=i.reject,o=a=>{try{i.resolve(t(a))}catch(A){s(A)}};return e.body==null?(o(Buffer.allocUnsafe(0)),i.promise):(dme(e.body,o,s),i.promise)}function ZH(e){let t=e.body;return t!=null&&(t.stream.locked||Av.isDisturbed(t.stream))}function KH(e){let t=e.headersList,r=gme(t);return r==="failure"?null:r}$H.exports={extractBody:XH,safelyExtractBody:vme,cloneBody:Rme,mixinBody:Tme,streamRegistry:_me,bodyUnusable:ZH}});var u7=x(($Fe,f7)=>{"use strict";var Oe=Wt(),qe=$t(),{channels:e7}=nd(),fv=TQ(),{RequestContentLengthMismatchError:Xf,ResponseContentLengthMismatchError:Nme,RequestAbortedError:o7,HeadersTimeoutError:Mme,HeadersOverflowError:Fme,SocketError:$d,InformationalError:cl,BodyTimeoutError:kme,HTTPParserError:xme,ResponseExceededMaxSizeError:Ume}=mr(),{kUrl:a7,kReset:Ln,kClient:pv,kParser:cr,kBlocking:eg,kRunning:un,kPending:Lme,kSize:t7,kWriting:mA,kQueue:Bs,kNoRef:Xd,kKeepAliveDefaultTimeout:Pme,kHostHeader:Ome,kPendingIdx:Hme,kRunningIdx:Ti,kError:Ni,kPipelining:um,kSocket:ll,kKeepAliveTimeoutValue:lm,kMaxHeadersSize:qme,kKeepAliveMaxTimeout:Gme,kKeepAliveTimeoutThreshold:Yme,kHeadersTimeout:Wme,kBodyTimeout:Vme,kStrictContentLength:lv,kMaxRequests:r7,kCounter:Jme,kMaxResponseSize:jme,kOnError:zme,kResume:yA,kHTTPContext:A7,kClosed:hv}=Tn(),Eo=g3(),Kme=Buffer.alloc(0),Am=Buffer[Symbol.species],Xme=qe.removeAllListeners,uv;function Zme(){let e=process.env.JEST_WORKER_ID?Qw():void 0,t,r=process.arch!=="ppc64";if(process.env.UNDICI_NO_WASM_SIMD==="1"?r=!0:process.env.UNDICI_NO_WASM_SIMD==="0"&&(r=!1),r)try{t=new WebAssembly.Module(y3())}catch{}return t||(t=new WebAssembly.Module(e||Qw())),new WebAssembly.Instance(t,{env:{wasm_on_url:(n,i,s)=>0,wasm_on_status:(n,i,s)=>{Oe(Rr.ptr===n);let o=i-mo+yo.byteOffset;return Rr.onStatus(new Am(yo.buffer,o,s))},wasm_on_message_begin:n=>(Oe(Rr.ptr===n),Rr.onMessageBegin()),wasm_on_header_field:(n,i,s)=>{Oe(Rr.ptr===n);let o=i-mo+yo.byteOffset;return Rr.onHeaderField(new Am(yo.buffer,o,s))},wasm_on_header_value:(n,i,s)=>{Oe(Rr.ptr===n);let o=i-mo+yo.byteOffset;return Rr.onHeaderValue(new Am(yo.buffer,o,s))},wasm_on_headers_complete:(n,i,s,o)=>(Oe(Rr.ptr===n),Rr.onHeadersComplete(i,s===1,o===1)),wasm_on_body:(n,i,s)=>{Oe(Rr.ptr===n);let o=i-mo+yo.byteOffset;return Rr.onBody(new Am(yo.buffer,o,s))},wasm_on_message_complete:n=>(Oe(Rr.ptr===n),Rr.onMessageComplete())}})}var cv=null,Rr=null,yo=null,fm=0,mo=null,$me=0,Zd=1,hl=2|Zd,cm=4|Zd,dv=8|$me,gv=class{constructor(t,r,{exports:n}){this.llhttp=n,this.ptr=this.llhttp.llhttp_alloc(Eo.TYPE.RESPONSE),this.client=t,this.socket=r,this.timeout=null,this.timeoutValue=null,this.timeoutType=null,this.statusCode=0,this.statusText="",this.upgrade=!1,this.headers=[],this.headersSize=0,this.headersMaxSize=t[qme],this.shouldKeepAlive=!1,this.paused=!1,this.resume=this.resume.bind(this),this.bytesRead=0,this.keepAlive="",this.contentLength="",this.connection="",this.maxResponseSize=t[jme]}setTimeout(t,r){t!==this.timeoutValue||r&Zd^this.timeoutType&Zd?(this.timeout&&(fv.clearTimeout(this.timeout),this.timeout=null),t&&(r&Zd?this.timeout=fv.setFastTimeout(n7,t,new WeakRef(this)):(this.timeout=setTimeout(n7,t,new WeakRef(this)),this.timeout?.unref())),this.timeoutValue=t):this.timeout&&this.timeout.refresh&&this.timeout.refresh(),this.timeoutType=r}resume(){this.socket.destroyed||!this.paused||(Oe(this.ptr!=null),Oe(Rr===null),this.llhttp.llhttp_resume(this.ptr),Oe(this.timeoutType===cm),this.timeout&&this.timeout.refresh&&this.timeout.refresh(),this.paused=!1,this.execute(this.socket.read()||Kme),this.readMore())}readMore(){for(;!this.paused&&this.ptr;){let t=this.socket.read();if(t===null)break;this.execute(t)}}execute(t){Oe(Rr===null),Oe(this.ptr!=null),Oe(!this.paused);let{socket:r,llhttp:n}=this;t.length>fm&&(mo&&n.free(mo),fm=Math.ceil(t.length/4096)*4096,mo=n.malloc(fm)),new Uint8Array(n.memory.buffer,mo,fm).set(t);try{let i;try{yo=t,Rr=this,i=n.llhttp_execute(this.ptr,mo,t.length)}finally{Rr=null,yo=null}if(i!==Eo.ERROR.OK){let s=t.subarray(n.llhttp_get_error_pos(this.ptr)-mo);if(i===Eo.ERROR.PAUSED_UPGRADE)this.onUpgrade(s);else if(i===Eo.ERROR.PAUSED)this.paused=!0,r.unshift(s);else{let o=n.llhttp_get_error_reason(this.ptr),a="";if(o){let A=new Uint8Array(n.memory.buffer,o).indexOf(0);a="Response does not match the HTTP/1.1 protocol ("+Buffer.from(n.memory.buffer,o,A).toString()+")"}throw new xme(a,Eo.ERROR[i],s)}}}catch(i){qe.destroy(r,i)}}destroy(){Oe(Rr===null),Oe(this.ptr!=null),this.llhttp.llhttp_free(this.ptr),this.ptr=null,this.timeout&&fv.clearTimeout(this.timeout),this.timeout=null,this.timeoutValue=null,this.timeoutType=null,this.paused=!1}onStatus(t){return this.statusText=t.toString(),0}onMessageBegin(){let{socket:t,client:r}=this;if(t.destroyed)return-1;let n=r[Bs][r[Ti]];return n?(n.onResponseStarted(),0):-1}onHeaderField(t){let r=this.headers.length;return(r&1)===0?this.headers.push(t):this.headers[r-1]=Buffer.concat([this.headers[r-1],t]),this.trackHeader(t.length),0}onHeaderValue(t){let r=this.headers.length;(r&1)===1?(this.headers.push(t),r+=1):this.headers[r-1]=Buffer.concat([this.headers[r-1],t]);let n=this.headers[r-2];if(n.length===10){let i=qe.bufferToLowerCasedHeaderName(n);i==="keep-alive"?this.keepAlive+=t.toString():i==="connection"&&(this.connection+=t.toString())}else n.length===14&&qe.bufferToLowerCasedHeaderName(n)==="content-length"&&(this.contentLength+=t.toString());return this.trackHeader(t.length),0}trackHeader(t){this.headersSize+=t,this.headersSize>=this.headersMaxSize&&qe.destroy(this.socket,new Fme)}onUpgrade(t){let{upgrade:r,client:n,socket:i,headers:s,statusCode:o}=this;Oe(r),Oe(n[ll]===i),Oe(!i.destroyed),Oe(!this.paused),Oe((s.length&1)===0);let a=n[Bs][n[Ti]];Oe(a),Oe(a.upgrade||a.method==="CONNECT"),this.statusCode=0,this.statusText="",this.shouldKeepAlive=!1,this.headers=[],this.headersSize=0,i.unshift(t),i[cr].destroy(),i[cr]=null,i[pv]=null,i[Ni]=null,Xme(i),n[ll]=null,n[A7]=null,n[Bs][n[Ti]++]=null,n.emit("disconnect",n[a7],[n],new cl("upgrade"));try{a.onUpgrade(o,s,i)}catch(A){qe.destroy(i,A)}n[yA]()}onHeadersComplete(t,r,n){let{client:i,socket:s,headers:o,statusText:a}=this;if(s.destroyed)return-1;let A=i[Bs][i[Ti]];if(!A)return-1;if(Oe(!this.upgrade),Oe(this.statusCode<200),t===100)return qe.destroy(s,new $d("bad response",qe.getSocketInfo(s))),-1;if(r&&!A.upgrade)return qe.destroy(s,new $d("bad upgrade",qe.getSocketInfo(s))),-1;if(Oe(this.timeoutType===hl),this.statusCode=t,this.shouldKeepAlive=n||A.method==="HEAD"&&!s[Ln]&&this.connection.toLowerCase()==="keep-alive",this.statusCode>=200){let l=A.bodyTimeout!=null?A.bodyTimeout:i[Vme];this.setTimeout(l,cm)}else this.timeout&&this.timeout.refresh&&this.timeout.refresh();if(A.method==="CONNECT")return Oe(i[un]===1),this.upgrade=!0,2;if(r)return Oe(i[un]===1),this.upgrade=!0,2;if(Oe((this.headers.length&1)===0),this.headers=[],this.headersSize=0,this.shouldKeepAlive&&i[um]){let l=this.keepAlive?qe.parseKeepAliveTimeout(this.keepAlive):null;if(l!=null){let p=Math.min(l-i[Yme],i[Gme]);p<=0?s[Ln]=!0:i[lm]=p}else i[lm]=i[Pme]}else s[Ln]=!0;let f=A.onHeaders(t,o,this.resume,a)===!1;return A.aborted?-1:A.method==="HEAD"||t<200?1:(s[eg]&&(s[eg]=!1,i[yA]()),f?Eo.ERROR.PAUSED:0)}onBody(t){let{client:r,socket:n,statusCode:i,maxResponseSize:s}=this;if(n.destroyed)return-1;let o=r[Bs][r[Ti]];return Oe(o),Oe(this.timeoutType===cm),this.timeout&&this.timeout.refresh&&this.timeout.refresh(),Oe(i>=200),s>-1&&this.bytesRead+t.length>s?(qe.destroy(n,new Ume),-1):(this.bytesRead+=t.length,o.onData(t)===!1?Eo.ERROR.PAUSED:0)}onMessageComplete(){let{client:t,socket:r,statusCode:n,upgrade:i,headers:s,contentLength:o,bytesRead:a,shouldKeepAlive:A}=this;if(r.destroyed&&(!n||A))return-1;if(i)return 0;Oe(n>=100),Oe((this.headers.length&1)===0);let f=t[Bs][t[Ti]];if(Oe(f),this.statusCode=0,this.statusText="",this.bytesRead=0,this.contentLength="",this.keepAlive="",this.connection="",this.headers=[],this.headersSize=0,n<200)return 0;if(f.method!=="HEAD"&&o&&a!==parseInt(o,10))return qe.destroy(r,new Nme),-1;if(f.onComplete(s),t[Bs][t[Ti]++]=null,r[mA])return Oe(t[un]===0),qe.destroy(r,new cl("reset")),Eo.ERROR.PAUSED;if(A){if(r[Ln]&&t[un]===0)return qe.destroy(r,new cl("reset")),Eo.ERROR.PAUSED;t[um]==null||t[um]===1?setImmediate(t[yA]):t[yA]()}else return qe.destroy(r,new cl("reset")),Eo.ERROR.PAUSED;return 0}};function n7(e){let t=e.deref();if(!t)return;let{socket:r,timeoutType:n,client:i,paused:s}=t;n===hl?(!r[mA]||r.writableNeedDrain||i[un]>1)&&(Oe(!s,"cannot be paused while waiting for headers"),qe.destroy(r,new Mme)):n===cm?s||qe.destroy(r,new kme):n===dv&&(Oe(i[un]===0&&i[lm]),qe.destroy(r,new cl("socket idle timeout")))}function eBe(e,t){if(e[ll]=t,cv||(cv=Zme()),t.errored)throw t.errored;if(t.destroyed)throw new $d("destroyed");return t[Xd]=!1,t[mA]=!1,t[Ln]=!1,t[eg]=!1,t[cr]=new gv(e,t,cv),qe.addListener(t,"error",tBe),qe.addListener(t,"readable",rBe),qe.addListener(t,"end",nBe),qe.addListener(t,"close",iBe),t[hv]=!1,t.on("close",sBe),{version:"h1",defaultPipelining:1,write(r){return ABe(e,r)},resume(){oBe(e)},destroy(r,n){t[hv]?queueMicrotask(n):(t.on("close",n),t.destroy(r))},get destroyed(){return t.destroyed},busy(r){return!!(t[mA]||t[Ln]||t[eg]||r&&(e[un]>0&&!r.idempotent||e[un]>0&&(r.upgrade||r.method==="CONNECT")||e[un]>0&&qe.bodyLength(r.body)!==0&&(qe.isStream(r.body)||qe.isAsyncIterable(r.body)||qe.isFormDataLike(r.body))))}}}function tBe(e){Oe(e.code!=="ERR_TLS_CERT_ALTNAME_INVALID");let t=this[cr];if(e.code==="ECONNRESET"&&t.statusCode&&!t.shouldKeepAlive){t.onMessageComplete();return}this[Ni]=e,this[pv][zme](e)}function rBe(){this[cr]?.readMore()}function nBe(){let e=this[cr];if(e.statusCode&&!e.shouldKeepAlive){e.onMessageComplete();return}qe.destroy(this,new $d("other side closed",qe.getSocketInfo(this)))}function iBe(){let e=this[cr];e&&(!this[Ni]&&e.statusCode&&!e.shouldKeepAlive&&e.onMessageComplete(),this[cr].destroy(),this[cr]=null);let t=this[Ni]||new $d("closed",qe.getSocketInfo(this)),r=this[pv];if(r[ll]=null,r[A7]=null,r.destroyed){Oe(r[Lme]===0);let n=r[Bs].splice(r[Ti]);for(let i=0;i<n.length;i++){let s=n[i];qe.errorRequest(r,s,t)}}else if(r[un]>0&&t.code!=="UND_ERR_INFO"){let n=r[Bs][r[Ti]];r[Bs][r[Ti]++]=null,qe.errorRequest(r,n,t)}r[Hme]=r[Ti],Oe(r[un]===0),r.emit("disconnect",r[a7],[r],t),r[yA]()}function sBe(){this[hv]=!0}function oBe(e){let t=e[ll];if(t&&!t.destroyed){if(e[t7]===0?!t[Xd]&&t.unref&&(t.unref(),t[Xd]=!0):t[Xd]&&t.ref&&(t.ref(),t[Xd]=!1),e[t7]===0)t[cr].timeoutType!==dv&&t[cr].setTimeout(e[lm],dv);else if(e[un]>0&&t[cr].statusCode<200&&t[cr].timeoutType!==hl){let r=e[Bs][e[Ti]],n=r.headersTimeout!=null?r.headersTimeout:e[Wme];t[cr].setTimeout(n,hl)}}}function aBe(e){return e!=="GET"&&e!=="HEAD"&&e!=="OPTIONS"&&e!=="TRACE"&&e!=="CONNECT"}function ABe(e,t){let{method:r,path:n,host:i,upgrade:s,blocking:o,reset:a}=t,{body:A,headers:f,contentLength:l}=t,p=r==="PUT"||r==="POST"||r==="PATCH"||r==="QUERY"||r==="PROPFIND"||r==="PROPPATCH";if(qe.isFormDataLike(A)){uv||(uv=ul().extractBody);let[P,U]=uv(A);t.contentType==null&&f.push("content-type",U),A=P.stream,l=P.length}else qe.isBlobLike(A)&&t.contentType==null&&A.type&&f.push("content-type",A.type);A&&typeof A.read=="function"&&A.read(0);let B=qe.bodyLength(A);if(l=B??l,l===null&&(l=t.contentLength),l===0&&!p&&(l=null),aBe(r)&&l>0&&t.contentLength!==null&&t.contentLength!==l){if(e[lv])return qe.errorRequest(e,t,new Xf),!1;process.emitWarning(new Xf)}let S=e[ll],_=P=>{t.aborted||t.completed||(qe.errorRequest(e,t,P||new o7),qe.destroy(A),qe.destroy(S,new cl("aborted")))};try{t.onConnect(_)}catch(P){qe.errorRequest(e,t,P)}if(t.aborted)return!1;r==="HEAD"&&(S[Ln]=!0),(s||r==="CONNECT")&&(S[Ln]=!0),a!=null&&(S[Ln]=a),e[r7]&&S[Jme]++>=e[r7]&&(S[Ln]=!0),o&&(S[eg]=!0),S.setTypeOfService&&S.setTypeOfService(t.typeOfService);let N=`${r} ${n} HTTP/1.1\r
-`;if(typeof i=="string"?N+=`host: ${i}\r
-`:N+=e[Ome],s?N+=`connection: upgrade\r
-upgrade: ${s}\r
-`:e[um]&&!S[Ln]?N+=`connection: keep-alive\r
-`:N+=`connection: close\r
-`,Array.isArray(f))for(let P=0;P<f.length;P+=2){let U=f[P+0],G=f[P+1];if(Array.isArray(G))for(let Y=0;Y<G.length;Y++)N+=`${U}: ${G[Y]}\r
-`;else N+=`${U}: ${G}\r
-`}return e7.sendHeaders.hasSubscribers&&e7.sendHeaders.publish({request:t,headers:N,socket:S}),!A||B===0?i7(_,null,e,t,S,l,N,p):qe.isBuffer(A)?i7(_,A,e,t,S,l,N,p):qe.isBlobLike(A)?typeof A.stream=="function"?s7(_,A.stream(),e,t,S,l,N,p):uBe(_,A,e,t,S,l,N,p):qe.isStream(A)?fBe(_,A,e,t,S,l,N,p):qe.isIterable(A)?s7(_,A,e,t,S,l,N,p):Oe(!1),!0}function fBe(e,t,r,n,i,s,o,a){Oe(s!==0||r[un]===0,"stream body cannot be pipelined");let A=!1,f=new hm({abort:e,socket:i,request:n,contentLength:s,client:r,expectsPayload:a,header:o}),l=function(_){if(!A)try{!f.write(_)&&this.pause&&this.pause()}catch(N){qe.destroy(this,N)}},p=function(){A||t.resume&&t.resume()},B=function(){if(queueMicrotask(()=>{t.removeListener("error",S)}),!A){let _=new o7;queueMicrotask(()=>S(_))}},S=function(_){if(!A){if(A=!0,Oe(i.destroyed||i[mA]&&r[un]<=1),i.off("drain",p).off("error",S),t.removeListener("data",l).removeListener("end",S).removeListener("close",B),!_)try{f.end()}catch(N){_=N}f.destroy(_),_&&(_.code!=="UND_ERR_INFO"||_.message!=="reset")?qe.destroy(t,_):qe.destroy(t)}};t.on("data",l).on("end",S).on("error",S).on("close",B),t.resume&&t.resume(),i.on("drain",p).on("error",S),t.errorEmitted??t.errored?setImmediate(S,t.errored):(t.endEmitted??t.readableEnded)&&setImmediate(S,null),(t.closeEmitted??t.closed)&&setImmediate(B)}function i7(e,t,r,n,i,s,o,a){try{t?qe.isBuffer(t)&&(Oe(s===t.byteLength,"buffer body must have content length"),i.cork(),i.write(`${o}content-length: ${s}\r
-\r
-`,"latin1"),i.write(t),i.uncork(),n.onBodySent(t),!a&&n.reset!==!1&&(i[Ln]=!0)):s===0?i.write(`${o}content-length: 0\r
-\r
-`,"latin1"):(Oe(s===null,"no body must not have content length"),i.write(`${o}\r
-`,"latin1")),n.onRequestSent(),r[yA]()}catch(A){e(A)}}async function uBe(e,t,r,n,i,s,o,a){Oe(s===t.size,"blob body must have content length");try{if(s!=null&&s!==t.size)throw new Xf;let A=Buffer.from(await t.arrayBuffer());i.cork(),i.write(`${o}content-length: ${s}\r
-\r
-`,"latin1"),i.write(A),i.uncork(),n.onBodySent(A),n.onRequestSent(),!a&&n.reset!==!1&&(i[Ln]=!0),r[yA]()}catch(A){e(A)}}async function s7(e,t,r,n,i,s,o,a){Oe(s!==0||r[un]===0,"iterator body cannot be pipelined");let A=null;function f(){if(A){let B=A;A=null,B()}}let l=()=>new Promise((B,S)=>{Oe(A===null),i[Ni]?S(i[Ni]):A=B});i.on("close",f).on("drain",f);let p=new hm({abort:e,socket:i,request:n,contentLength:s,client:r,expectsPayload:a,header:o});try{for await(let B of t){if(i[Ni])throw i[Ni];p.write(B)||await l()}p.end()}catch(B){p.destroy(B)}finally{i.off("close",f).off("drain",f)}}var hm=class{constructor({abort:t,socket:r,request:n,contentLength:i,client:s,expectsPayload:o,header:a}){this.socket=r,this.request=n,this.contentLength=i,this.client=s,this.bytesWritten=0,this.expectsPayload=o,this.header=a,this.abort=t,r[mA]=!0}write(t){let{socket:r,request:n,contentLength:i,client:s,bytesWritten:o,expectsPayload:a,header:A}=this;if(r[Ni])throw r[Ni];if(r.destroyed)return!1;let f=Buffer.byteLength(t);if(!f)return!0;if(i!==null&&o+f>i){if(s[lv])throw new Xf;process.emitWarning(new Xf)}r.cork(),o===0&&(!a&&n.reset!==!1&&(r[Ln]=!0),i===null?r.write(`${A}transfer-encoding: chunked\r
-`,"latin1"):r.write(`${A}content-length: ${i}\r
-\r
-`,"latin1")),i===null&&r.write(`\r
-${f.toString(16)}\r
-`,"latin1"),this.bytesWritten+=f;let l=r.write(t);return r.uncork(),n.onBodySent(t),l||r[cr].timeout&&r[cr].timeoutType===hl&&r[cr].timeout.refresh&&r[cr].timeout.refresh(),l}end(){let{socket:t,contentLength:r,client:n,bytesWritten:i,expectsPayload:s,header:o,request:a}=this;if(a.onRequestSent(),t[mA]=!1,t[Ni])throw t[Ni];if(!t.destroyed){if(i===0?s?t.write(`${o}content-length: 0\r
-\r
-`,"latin1"):t.write(`${o}\r
-`,"latin1"):r===null&&t.write(`\r
-0\r
-\r
-`,"latin1"),r!==null&&i!==r){if(n[lv])throw new Xf;process.emitWarning(new Xf)}t[cr].timeout&&t[cr].timeoutType===hl&&t[cr].timeout.refresh&&t[cr].timeout.refresh(),n[yA]()}}destroy(t){let{socket:r,client:n,abort:i}=this;r[mA]=!1,t&&(Oe(n[un]<=1,"pipeline should only contain this request"),i(t))}};f7.exports=eBe});var h7=x((eke,l7)=>{"use strict";var c7={HTTP2_HEADER_METHOD:":method",HTTP2_HEADER_PATH:":path",HTTP2_HEADER_SCHEME:":scheme",HTTP2_HEADER_AUTHORITY:":authority",HTTP2_HEADER_STATUS:":status",HTTP2_HEADER_CONTENT_TYPE:"content-type",HTTP2_HEADER_CONTENT_LENGTH:"content-length",HTTP2_HEADER_LAST_MODIFIED:"last-modified",HTTP2_HEADER_ACCEPT:"accept",HTTP2_HEADER_ACCEPT_ENCODING:"accept-encoding",HTTP2_METHOD_GET:"GET",HTTP2_METHOD_POST:"POST",HTTP2_METHOD_PUT:"PUT",HTTP2_METHOD_DELETE:"DELETE",DEFAULT_SETTINGS_MAX_HEADER_LIST_SIZE:65535};function Ev(e){let t=new Error(`node:http2 ${e} is not available in the secure-exec bridge bootstrap`);throw t.code="ERR_NOT_IMPLEMENTED",t}function cBe(){Ev("connect")}function lBe(){Ev("createServer")}function hBe(){Ev("createSecureServer")}function dBe(){return{maxHeaderListSize:c7.DEFAULT_SETTINGS_MAX_HEADER_LIST_SIZE}}l7.exports={constants:c7,connect:cBe,createServer:lBe,createSecureServer:hBe,getDefaultSettings:dBe}});var b7=x((tke,I7)=>{"use strict";var Fi=Wt(),{pipeline:gBe}=(ts(),Gs(Yt)),ct=$t(),{RequestContentLengthMismatchError:Iv,RequestAbortedError:pBe,SocketError:ig,InformationalError:BA,InvalidArgumentError:EBe}=mr(),{kUrl:ng,kReset:Em,kClient:ei,kRunning:sg,kPending:yBe,kQueue:IA,kPendingIdx:Cv,kRunningIdx:Is,kError:ti,kSocket:or,kStrictContentLength:mBe,kOnError:dl,kMaxConcurrentStreams:gm,kPingInterval:d7,kHTTP2Session:ha,kHTTP2InitialWindowSize:BBe,kHTTP2ConnectionWindowSize:IBe,kResume:Bo,kSize:bBe,kHTTPContext:Qv,kClosed:bv,kBodyTimeout:CBe,kEnableConnectProtocol:tg,kRemoteSettings:rg,kHTTP2Stream:dm,kHTTP2SessionState:wv}=Tn(),{channels:g7}=nd(),Mi=Symbol("open streams"),p7,pm;try{pm=h7()}catch{pm={constants:{}}}var{constants:{HTTP2_HEADER_AUTHORITY:QBe,HTTP2_HEADER_METHOD:E7,HTTP2_HEADER_PATH:y7,HTTP2_HEADER_SCHEME:yv,HTTP2_HEADER_CONTENT_LENGTH:wBe,HTTP2_HEADER_EXPECT:SBe,HTTP2_HEADER_STATUS:mv,HTTP2_HEADER_PROTOCOL:_Be,NGHTTP2_REFUSED_STREAM:vBe,NGHTTP2_CANCEL:RBe}}=pm;function Bv(e){let t=[];for(let[r,n]of Object.entries(e))if(Array.isArray(n))for(let i of n)t.push(Buffer.from(r),Buffer.from(i));else t.push(Buffer.from(r),Buffer.from(n));return t}function DBe(e,t){e[or]=t;let r=e[BBe],n=e[IBe],i=pm.connect(e[ng],{createConnection:()=>t,peerMaxConcurrentStreams:e[gm],settings:{enablePush:!1,...r!=null?{initialWindowSize:r}:null}});return e[or]=t,i[Mi]=0,i[ei]=e,i[or]=t,i[wv]={ping:{interval:e[d7]===0?null:setInterval(FBe,e[d7],i).unref()}},i[tg]=!1,i[rg]=!1,n&&ct.addListener(i,"connect",NBe.bind(i,n)),ct.addListener(i,"error",kBe),ct.addListener(i,"frameError",xBe),ct.addListener(i,"end",UBe),ct.addListener(i,"goaway",LBe),ct.addListener(i,"close",PBe),ct.addListener(i,"remoteSettings",MBe),i.unref(),e[ha]=i,t[ha]=i,ct.addListener(t,"error",HBe),ct.addListener(t,"end",qBe),ct.addListener(t,"close",OBe),t[bv]=!1,t.on("close",GBe),{version:"h2",defaultPipelining:1/0,write(s){return WBe(e,s)},resume(){TBe(e)},destroy(s,o){t[bv]?queueMicrotask(o):t.destroy(s).on("close",o)},get destroyed(){return t.destroyed},busy(s){if(s!=null)if(e[sg]>0){if(s.idempotent===!1||(s.upgrade==="websocket"||s.method==="CONNECT")&&i[rg]===!1||ct.bodyLength(s.body)!==0&&(ct.isStream(s.body)||ct.isAsyncIterable(s.body)||ct.isFormDataLike(s.body)))return!0}else return(s.upgrade==="websocket"||s.method==="CONNECT")&&i[rg]===!1;return!1}}}function TBe(e){let t=e[or];t?.destroyed===!1&&(e[bBe]===0||e[gm]===0?(t.unref(),e[ha].unref()):(t.ref(),e[ha].ref()))}function NBe(e){try{typeof this.setLocalWindowSize=="function"&&this.setLocalWindowSize(e)}catch{}}function MBe(e){if(this[ei][gm]=e.maxConcurrentStreams??this[ei][gm],this[rg]===!0&&this[tg]===!0&&e.enableConnectProtocol===!1){let t=new BA("HTTP/2: Server disabled extended CONNECT protocol against RFC-8441");this[or][ti]=t,this[ei][dl](t);return}this[tg]=e.enableConnectProtocol??this[tg],this[rg]=!0,this[ei][Bo]()}function FBe(e){let t=e[wv];if((e.closed||e.destroyed)&&t.ping.interval!=null){clearInterval(t.ping.interval),t.ping.interval=null;return}e.ping(r.bind(e));function r(n,i){let s=this[ei],o=this[ei];if(n!=null){let a=new BA(`HTTP/2: "PING" errored - type ${n.message}`);o[ti]=a,s[dl](a)}else s.emit("ping",i)}}function kBe(e){Fi(e.code!=="ERR_TLS_CERT_ALTNAME_INVALID"),this[or][ti]=e,this[ei][dl](e)}function xBe(e,t,r){if(r===0){let n=new BA(`HTTP/2: "frameError" received - type ${e}, code ${t}`);this[or][ti]=n,this[ei][dl](n)}}function UBe(){let e=new ig("other side closed",ct.getSocketInfo(this[or]));this.destroy(e),ct.destroy(this[or],e)}function LBe(e){let t=this[ti]||new ig(`HTTP/2: "GOAWAY" frame received with code ${e}`,ct.getSocketInfo(this[or])),r=this[ei];if(r[or]=null,r[Qv]=null,this.close(),this[ha]=null,ct.destroy(this[or],t),r[Is]<r[IA].length){let n=r[IA][r[Is]];r[IA][r[Is]++]=null,ct.errorRequest(r,n,t),r[Cv]=r[Is]}Fi(r[sg]===0),r.emit("disconnect",r[ng],[r],t),r.emit("connectionError",r[ng],[r],t),r[Bo]()}function PBe(){let{[ei]:e,[wv]:t}=this,{[or]:r}=e,n=this[or][ti]||this[ti]||new ig("closed",ct.getSocketInfo(r));if(e[or]=null,e[Qv]=null,t.ping.interval!=null&&(clearInterval(t.ping.interval),t.ping.interval=null),e.destroyed){Fi(e[yBe]===0);let i=e[IA].splice(e[Is]);for(let s=0;s<i.length;s++){let o=i[s];ct.errorRequest(e,o,n)}}}function OBe(){let e=this[ti]||new ig("closed",ct.getSocketInfo(this)),t=this[ha][ei];t[or]=null,t[Qv]=null,this[ha]!==null&&this[ha].destroy(e),t[Cv]=t[Is],Fi(t[sg]===0),t.emit("disconnect",t[ng],[t],e),t[Bo]()}function HBe(e){Fi(e.code!=="ERR_TLS_CERT_ALTNAME_INVALID"),this[ti]=e,this[ei][dl](e)}function qBe(){ct.destroy(this,new ig("other side closed",ct.getSocketInfo(this)))}function GBe(){this[bv]=!0}function YBe(e){return e!=="GET"&&e!=="HEAD"&&e!=="OPTIONS"&&e!=="TRACE"&&e!=="CONNECT"}function WBe(e,t){let r=t.bodyTimeout??e[CBe],n=e[ha],{method:i,path:s,host:o,upgrade:a,expectContinue:A,signal:f,protocol:l,headers:p}=t,{body:B}=t;if(a!=null&&a!=="websocket")return ct.errorRequest(e,t,new EBe(`Custom upgrade "${a}" not supported over HTTP/2`)),!1;let S={};for(let se=0;se<p.length;se+=2){let ie=p[se+0],ce=p[se+1];if(ie==="cookie"){S[ie]!=null?S[ie]=Array.isArray(S[ie])?(S[ie].push(ce),S[ie]):[S[ie],ce]:S[ie]=ce;continue}if(Array.isArray(ce))for(let H=0;H<ce.length;H++)S[ie]?S[ie]+=`, ${ce[H]}`:S[ie]=ce[H];else S[ie]?S[ie]+=`, ${ce}`:S[ie]=ce}let _=null,{hostname:N,port:P}=e[ng];S[QBe]=o||`${N}${P?`:${P}`:""}`,S[E7]=i;let U=se=>{t.aborted||t.completed||(se=se||new pBe,ct.errorRequest(e,t,se),_!=null&&(_.removeAllListeners("data"),_.close(),e[dl](se),e[Bo]()),ct.destroy(B,se))};try{t.onConnect(U)}catch(se){ct.errorRequest(e,t,se)}if(t.aborted)return!1;if(a||i==="CONNECT")return n.ref(),a==="websocket"?n[tg]===!1?(ct.errorRequest(e,t,new BA("HTTP/2: Extended CONNECT protocol not supported by server")),n.unref(),!1):(S[E7]="CONNECT",S[_Be]="websocket",S[y7]=s,l==="ws:"||l==="wss:"?S[yv]=l==="ws:"?"http":"https":S[yv]=l==="http:"?"http":"https",_=n.request(S,{endStream:!1,signal:f}),_[dm]=!0,_.once("response",(se,ie)=>{let{[mv]:ce,...H}=se;t.onUpgrade(ce,Bv(H),_),++n[Mi],e[IA][e[Is]++]=null}),_.on("error",()=>{(_.rstCode===vBe||_.rstCode===RBe)&&U(new BA(`HTTP/2: "stream error" received - code ${_.rstCode}`))}),_.once("close",()=>{n[Mi]-=1,n[Mi]===0&&n.unref()}),_.setTimeout(r),!0):(_=n.request(S,{endStream:!1,signal:f}),_[dm]=!0,_.on("response",se=>{let{[mv]:ie,...ce}=se;t.onUpgrade(ie,Bv(ce),_),++n[Mi],e[IA][e[Is]++]=null}),_.once("close",()=>{n[Mi]-=1,n[Mi]===0&&n.unref()}),_.setTimeout(r),!0);S[y7]=s,S[yv]=l==="http:"?"http":"https";let G=i==="PUT"||i==="POST"||i==="PATCH";B&&typeof B.read=="function"&&B.read(0);let Y=ct.bodyLength(B);if(ct.isFormDataLike(B)){p7??(p7=ul().extractBody);let[se,ie]=p7(B);S["content-type"]=ie,B=se.stream,Y=se.length}if(Y==null&&(Y=t.contentLength),G||(Y=null),YBe(i)&&Y>0&&t.contentLength!=null&&t.contentLength!==Y){if(e[mBe])return ct.errorRequest(e,t,new Iv),!1;process.emitWarning(new Iv)}if(Y!=null&&(Fi(B||Y===0,"no body must not have content length"),S[wBe]=`${Y}`),n.ref(),g7.sendHeaders.hasSubscribers){let se="";for(let ie in S)se+=`${ie}: ${S[ie]}\r
-`;g7.sendHeaders.publish({request:t,headers:se,socket:n[or]})}let Z=i==="GET"||i==="HEAD"||B===null;A?(S[SBe]="100-continue",_=n.request(S,{endStream:Z,signal:f}),_[dm]=!0,_.once("continue",j)):(_=n.request(S,{endStream:Z,signal:f}),_[dm]=!0,j()),++n[Mi],_.setTimeout(r);let ee=!1;return _.once("response",se=>{let{[mv]:ie,...ce}=se;if(t.onResponseStarted(),ee=!0,t.aborted){_.removeAllListeners("data");return}t.onHeaders(Number(ie),Bv(ce),_.resume.bind(_),"")===!1&&_.pause(),_.on("data",H=>{t.aborted||t.completed||t.onData(H)===!1&&_.pause()})}),_.once("end",()=>{_.removeAllListeners("data"),ee?(!t.aborted&&!t.completed&&t.onComplete({}),e[IA][e[Is]++]=null,e[Bo]()):(U(new BA("HTTP/2: stream half-closed (remote)")),e[IA][e[Is]++]=null,e[Cv]=e[Is],e[Bo]())}),_.once("close",()=>{_.removeAllListeners("data"),n[Mi]-=1,n[Mi]===0&&n.unref()}),_.once("error",function(se){_.removeAllListeners("data"),U(se)}),_.once("frameError",(se,ie)=>{_.removeAllListeners("data"),U(new BA(`HTTP/2: "frameError" received - type ${se}, code ${ie}`))}),_.on("aborted",()=>{_.removeAllListeners("data")}),_.on("timeout",()=>{let se=new BA(`HTTP/2: "stream timeout after ${r}"`);_.removeAllListeners("data"),n[Mi]-=1,n[Mi]===0&&n.unref(),U(se)}),_.once("trailers",se=>{t.aborted||t.completed||(_.removeAllListeners("data"),t.onComplete(se))}),!0;function j(){!B||Y===0?m7(U,_,null,e,t,e[or],Y,G):ct.isBuffer(B)?m7(U,_,B,e,t,e[or],Y,G):ct.isBlobLike(B)?typeof B.stream=="function"?B7(U,_,B.stream(),e,t,e[or],Y,G):JBe(U,_,B,e,t,e[or],Y,G):ct.isStream(B)?VBe(U,e[or],G,_,B,e,t,Y):ct.isIterable(B)?B7(U,_,B,e,t,e[or],Y,G):Fi(!1)}}function m7(e,t,r,n,i,s,o,a){try{r!=null&&ct.isBuffer(r)&&(Fi(o===r.byteLength,"buffer body must have content length"),t.cork(),t.write(r),t.uncork(),t.end(),i.onBodySent(r)),a||(s[Em]=!0),i.onRequestSent(),n[Bo]()}catch(A){e(A)}}function VBe(e,t,r,n,i,s,o,a){Fi(a!==0||s[sg]===0,"stream body cannot be pipelined");let A=gBe(i,n,l=>{l?(ct.destroy(A,l),e(l)):(ct.removeAllListeners(A),o.onRequestSent(),r||(t[Em]=!0),s[Bo]())});ct.addListener(A,"data",f);function f(l){o.onBodySent(l)}}async function JBe(e,t,r,n,i,s,o,a){Fi(o===r.size,"blob body must have content length");try{if(o!=null&&o!==r.size)throw new Iv;let A=Buffer.from(await r.arrayBuffer());t.cork(),t.write(A),t.uncork(),t.end(),i.onBodySent(A),i.onRequestSent(),a||(s[Em]=!0),n[Bo]()}catch(A){e(A)}}async function B7(e,t,r,n,i,s,o,a){Fi(o!==0||n[sg]===0,"iterator body cannot be pipelined");let A=null;function f(){if(A){let p=A;A=null,p()}}let l=()=>new Promise((p,B)=>{Fi(A===null),s[ti]?B(s[ti]):A=p});t.on("close",f).on("drain",f);try{for await(let p of r){if(s[ti])throw s[ti];let B=t.write(p);i.onBodySent(p),B||await l()}t.end(),i.onRequestSent(),a||(s[Em]=!0),n[Bo]()}catch(p){e(p)}finally{t.off("close",f).off("drain",f)}}I7.exports=DBe});var mm=x((rke,D7)=>{"use strict";var da=Wt(),S7=pE(),og=gE(),Zf=$t(),{ClientStats:jBe}=ow(),{channels:gl}=nd(),zBe=a3(),KBe=DE(),{InvalidArgumentError:tr,InformationalError:XBe,ClientDestroyedError:ZBe}=mr(),$Be=Iw(),{kUrl:Io,kServerName:QA,kClient:eIe,kBusy:_v,kConnect:tIe,kResuming:$f,kRunning:ug,kPending:cg,kSize:ag,kQueue:bs,kConnected:rIe,kConnecting:pl,kNeedDrain:CA,kKeepAliveDefaultTimeout:C7,kHostHeader:nIe,kPendingIdx:Cs,kRunningIdx:pa,kError:iIe,kPipelining:ym,kKeepAliveTimeoutValue:sIe,kMaxHeadersSize:oIe,kKeepAliveMaxTimeout:aIe,kKeepAliveTimeoutThreshold:AIe,kHeadersTimeout:fIe,kBodyTimeout:uIe,kStrictContentLength:cIe,kConnector:Ag,kMaxRequests:vv,kCounter:lIe,kClose:hIe,kDestroy:dIe,kDispatch:gIe,kLocalAddress:fg,kMaxResponseSize:pIe,kOnError:EIe,kHTTPContext:dr,kMaxConcurrentStreams:yIe,kHTTP2InitialWindowSize:mIe,kHTTP2ConnectionWindowSize:BIe,kResume:ga,kPingInterval:IIe}=Tn(),bIe=u7(),CIe=b7(),bA=Symbol("kClosedResolve"),QIe=og&&og.maxHeaderSize&&Number.isInteger(og.maxHeaderSize)&&og.maxHeaderSize>0?()=>og.maxHeaderSize:()=>{throw new tr("http module not available or http.maxHeaderSize invalid")},Q7=()=>{};function _7(e){return e[ym]??e[dr]?.defaultPipelining??1}var Rv=class extends KBe{constructor(t,{maxHeaderSize:r,headersTimeout:n,socketTimeout:i,requestTimeout:s,connectTimeout:o,bodyTimeout:a,idleTimeout:A,keepAlive:f,keepAliveTimeout:l,maxKeepAliveTimeout:p,keepAliveMaxTimeout:B,keepAliveTimeoutThreshold:S,socketPath:_,pipelining:N,tls:P,strictContentLength:U,maxCachedSessions:G,connect:Y,maxRequestsPerClient:Z,localAddress:ee,maxResponseSize:j,autoSelectFamily:se,autoSelectFamilyAttemptTimeout:ie,maxConcurrentStreams:ce,allowH2:H,useH2c:E,initialWindowSize:v,connectionWindowSize:b,pingInterval:c}={}){if(f!==void 0)throw new tr("unsupported keepAlive, use pipelining=0 instead");if(i!==void 0)throw new tr("unsupported socketTimeout, use headersTimeout & bodyTimeout instead");if(s!==void 0)throw new tr("unsupported requestTimeout, use headersTimeout & bodyTimeout instead");if(A!==void 0)throw new tr("unsupported idleTimeout, use keepAliveTimeout instead");if(p!==void 0)throw new tr("unsupported maxKeepAliveTimeout, use keepAliveMaxTimeout instead");if(r!=null){if(!Number.isInteger(r)||r<1)throw new tr("invalid maxHeaderSize")}else r=QIe();if(_!=null&&typeof _!="string")throw new tr("invalid socketPath");if(o!=null&&(!Number.isFinite(o)||o<0))throw new tr("invalid connectTimeout");if(l!=null&&(!Number.isFinite(l)||l<=0))throw new tr("invalid keepAliveTimeout");if(B!=null&&(!Number.isFinite(B)||B<=0))throw new tr("invalid keepAliveMaxTimeout");if(S!=null&&!Number.isFinite(S))throw new tr("invalid keepAliveTimeoutThreshold");if(n!=null&&(!Number.isInteger(n)||n<0))throw new tr("headersTimeout must be a positive integer or zero");if(a!=null&&(!Number.isInteger(a)||a<0))throw new tr("bodyTimeout must be a positive integer or zero");if(Y!=null&&typeof Y!="function"&&typeof Y!="object")throw new tr("connect must be a function or an object");if(Z!=null&&(!Number.isInteger(Z)||Z<0))throw new tr("maxRequestsPerClient must be a positive number");if(ee!=null&&(typeof ee!="string"||S7.isIP(ee)===0))throw new tr("localAddress must be valid string IP address");if(j!=null&&(!Number.isInteger(j)||j<-1))throw new tr("maxResponseSize must be a positive number");if(ie!=null&&(!Number.isInteger(ie)||ie<-1))throw new tr("autoSelectFamilyAttemptTimeout must be a positive number");if(H!=null&&typeof H!="boolean")throw new tr("allowH2 must be a valid boolean value");if(ce!=null&&(typeof ce!="number"||ce<1))throw new tr("maxConcurrentStreams must be a positive integer, greater than 0");if(E!=null&&typeof E!="boolean")throw new tr("useH2c must be a valid boolean value");if(v!=null&&(!Number.isInteger(v)||v<1))throw new tr("initialWindowSize must be a positive integer, greater than 0");if(b!=null&&(!Number.isInteger(b)||b<1))throw new tr("connectionWindowSize must be a positive integer, greater than 0");if(c!=null&&(typeof c!="number"||!Number.isInteger(c)||c<0))throw new tr("pingInterval must be a positive integer, greater or equal to 0");if(super(),typeof Y!="function")Y=$Be({...P,maxCachedSessions:G,allowH2:H,useH2c:E,socketPath:_,timeout:o,...typeof se=="boolean"?{autoSelectFamily:se,autoSelectFamilyAttemptTimeout:ie}:void 0,...Y});else if(_!=null){let g=Y;Y=(w,R)=>g({...w,socketPath:_},R)}this[Io]=Zf.parseOrigin(t),this[Ag]=Y,this[ym]=N??1,this[oIe]=r,this[C7]=l??4e3,this[aIe]=B??6e5,this[AIe]=S??2e3,this[sIe]=this[C7],this[QA]=null,this[fg]=ee??null,this[$f]=0,this[CA]=0,this[nIe]=`host: ${this[Io].hostname}${this[Io].port?`:${this[Io].port}`:""}\r
-`,this[uIe]=a??3e5,this[fIe]=n??3e5,this[cIe]=U??!0,this[vv]=Z,this[bA]=null,this[pIe]=j>-1?j:-1,this[dr]=null,this[yIe]=ce??100,this[mIe]=v??262144,this[BIe]=b??524288,this[IIe]=c??6e4,this[bs]=[],this[pa]=0,this[Cs]=0,this[ga]=g=>Dv(this,g),this[EIe]=g=>v7(this,g)}get pipelining(){return this[ym]}set pipelining(t){this[ym]=t,this[ga](!0)}get stats(){return new jBe(this)}get[cg](){return this[bs].length-this[Cs]}get[ug](){return this[Cs]-this[pa]}get[ag](){return this[bs].length-this[pa]}get[rIe](){return!!this[dr]&&!this[pl]&&!this[dr].destroyed}get[_v](){return!!(this[dr]?.busy(null)||this[ag]>=(_7(this)||1)||this[cg]>0)}[tIe](t){R7(this),this.once("connect",t)}[gIe](t,r){let n=new zBe(this[Io].origin,t,r);return this[bs].push(n),this[$f]||(Zf.bodyLength(n.body)==null&&Zf.isIterable(n.body)?(this[$f]=1,queueMicrotask(()=>Dv(this))):this[ga](!0)),this[$f]&&this[CA]!==2&&this[_v]&&(this[CA]=2),this[CA]<2}[hIe](){return new Promise(t=>{this[ag]?this[bA]=t:t(null)})}[dIe](t){return new Promise(r=>{let n=this[bs].splice(this[Cs]);for(let s=0;s<n.length;s++){let o=n[s];Zf.errorRequest(this,o,t)}let i=()=>{this[bA]&&(this[bA](),this[bA]=null),r(null)};this[dr]?(this[dr].destroy(t,i),this[dr]=null):queueMicrotask(i),this[ga]()})}};function v7(e,t){if(e[ug]===0&&t.code!=="UND_ERR_INFO"&&t.code!=="UND_ERR_SOCKET"){da(e[Cs]===e[pa]);let r=e[bs].splice(e[pa]);for(let n=0;n<r.length;n++){let i=r[n];Zf.errorRequest(e,i,t)}da(e[ag]===0)}}function R7(e){da(!e[pl]),da(!e[dr]);let{host:t,hostname:r,protocol:n,port:i}=e[Io];if(r[0]==="["){let s=r.indexOf("]");da(s!==-1);let o=r.substring(1,s);da(S7.isIPv6(o)),r=o}e[pl]=!0,gl.beforeConnect.hasSubscribers&&gl.beforeConnect.publish({connectParams:{host:t,hostname:r,protocol:n,port:i,version:e[dr]?.version,servername:e[QA],localAddress:e[fg]},connector:e[Ag]});try{e[Ag]({host:t,hostname:r,protocol:n,port:i,servername:e[QA],localAddress:e[fg]},(s,o)=>{if(s){Sv(e,s,{host:t,hostname:r,protocol:n,port:i}),e[ga]();return}if(e.destroyed){Zf.destroy(o.on("error",Q7),new ZBe),e[ga]();return}da(o);try{e[dr]=o.alpnProtocol==="h2"?CIe(e,o):bIe(e,o)}catch(a){o.destroy().on("error",Q7),Sv(e,a,{host:t,hostname:r,protocol:n,port:i}),e[ga]();return}e[pl]=!1,o[lIe]=0,o[vv]=e[vv],o[eIe]=e,o[iIe]=null,gl.connected.hasSubscribers&&gl.connected.publish({connectParams:{host:t,hostname:r,protocol:n,port:i,version:e[dr]?.version,servername:e[QA],localAddress:e[fg]},connector:e[Ag],socket:o}),e.emit("connect",e[Io],[e]),e[ga]()})}catch(s){Sv(e,s,{host:t,hostname:r,protocol:n,port:i}),e[ga]()}}function Sv(e,t,{host:r,hostname:n,protocol:i,port:s}){if(!e.destroyed){if(e[pl]=!1,gl.connectError.hasSubscribers&&gl.connectError.publish({connectParams:{host:r,hostname:n,protocol:i,port:s,version:e[dr]?.version,servername:e[QA],localAddress:e[fg]},connector:e[Ag],error:t}),t.code==="ERR_TLS_CERT_ALTNAME_INVALID")for(da(e[ug]===0);e[cg]>0&&e[bs][e[Cs]].servername===e[QA];){let o=e[bs][e[Cs]++];Zf.errorRequest(e,o,t)}else v7(e,t);e.emit("connectionError",e[Io],[e],t)}}function w7(e){e[CA]=0,e.emit("drain",e[Io],[e])}function Dv(e,t){e[$f]!==2&&(e[$f]=2,wIe(e,t),e[$f]=0,e[pa]>256&&(e[bs].splice(0,e[pa]),e[Cs]-=e[pa],e[pa]=0))}function wIe(e,t){for(;;){if(e.destroyed){da(e[cg]===0);return}if(e[bA]&&!e[ag]){e[bA](),e[bA]=null;return}if(e[dr]&&e[dr].resume(),e[_v])e[CA]=2;else if(e[CA]===2){t?(e[CA]=1,queueMicrotask(()=>w7(e))):w7(e);continue}if(e[cg]===0||e[ug]>=(_7(e)||1))return;let r=e[bs][e[Cs]];if(r===null)return;if(e[Io].protocol==="https:"&&e[QA]!==r.servername){if(e[ug]>0)return;e[QA]=r.servername,e[dr]?.destroy(new XBe("servername changed"),()=>{e[dr]=null,Dv(e)})}if(e[pl])return;if(!e[dr]){R7(e);return}if(e[dr].destroyed||e[dr].busy(r))return;!r.aborted&&e[dr].write(r)?e[Cs]++:e[bs].splice(e[Cs],1)}}D7.exports=Rv});var k7=x((nke,F7)=>{"use strict";var{PoolBase:SIe,kClients:Bm,kNeedDrain:_Ie,kAddClient:vIe,kGetDispatcher:RIe,kRemoveClient:DIe}=$6(),TIe=mm(),{InvalidArgumentError:Tv}=mr(),T7=$t(),{kUrl:N7}=Tn(),NIe=Iw(),Im=Symbol("options"),Nv=Symbol("connections"),M7=Symbol("factory");function MIe(e,t){return new TIe(e,t)}var Mv=class extends SIe{constructor(t,{connections:r,factory:n=MIe,connect:i,connectTimeout:s,tls:o,maxCachedSessions:a,socketPath:A,autoSelectFamily:f,autoSelectFamilyAttemptTimeout:l,allowH2:p,clientTtl:B,...S}={}){if(r!=null&&(!Number.isFinite(r)||r<0))throw new Tv("invalid connections");if(typeof n!="function")throw new Tv("factory must be a function.");if(i!=null&&typeof i!="function"&&typeof i!="object")throw new Tv("connect must be a function or an object");typeof i!="function"&&(i=NIe({...o,maxCachedSessions:a,allowH2:p,socketPath:A,timeout:s,...typeof f=="boolean"?{autoSelectFamily:f,autoSelectFamilyAttemptTimeout:l}:void 0,...i})),super(),this[Nv]=r||null,this[N7]=T7.parseOrigin(t),this[Im]={...T7.deepClone(S),connect:i,allowH2:p,clientTtl:B,socketPath:A},this[Im].interceptors=S.interceptors?{...S.interceptors}:void 0,this[M7]=n,this.on("connect",(_,N)=>{if(B!=null&&B>0)for(let P of N)Object.assign(P,{ttl:Date.now()})}),this.on("connectionError",(_,N,P)=>{for(let U of N){let G=this[Bm].indexOf(U);G!==-1&&this[Bm].splice(G,1)}})}[RIe](){let t=this[Im].clientTtl;for(let r of this[Bm])if(t!=null&&t>0&&r.ttl&&Date.now()-r.ttl>t)this[DIe](r);else if(!r[_Ie])return r;if(!this[Nv]||this[Bm].length<this[Nv]){let r=this[M7](this[N7],this[Im]);return this[vIe](r),r}}};F7.exports=Mv});var xv=x((ike,q7)=>{"use strict";var{InvalidArgumentError:bm,MaxOriginsReachedError:FIe}=mr(),{kClients:ki,kRunning:x7,kClose:kIe,kDestroy:xIe,kDispatch:UIe,kUrl:LIe}=Tn(),PIe=DE(),OIe=k7(),HIe=mm(),qIe=$t(),U7=Symbol("onConnect"),L7=Symbol("onDisconnect"),P7=Symbol("onConnectionError"),O7=Symbol("onDrain"),H7=Symbol("factory"),Fv=Symbol("options"),lg=Symbol("origins");function GIe(e,t){return t&&t.connections===1?new HIe(e,t):new OIe(e,t)}var kv=class extends PIe{constructor({factory:t=GIe,maxOrigins:r=1/0,connect:n,...i}={}){if(typeof t!="function")throw new bm("factory must be a function.");if(n!=null&&typeof n!="function"&&typeof n!="object")throw new bm("connect must be a function or an object");if(typeof r!="number"||Number.isNaN(r)||r<=0)throw new bm("maxOrigins must be a number greater than 0");super(),n&&typeof n!="function"&&(n={...n}),this[Fv]={...qIe.deepClone(i),maxOrigins:r,connect:n},this[H7]=t,this[ki]=new Map,this[lg]=new Set,this[O7]=(s,o)=>{this.emit("drain",s,[this,...o])},this[U7]=(s,o)=>{this.emit("connect",s,[this,...o])},this[L7]=(s,o,a)=>{this.emit("disconnect",s,[this,...o],a)},this[P7]=(s,o,a)=>{this.emit("connectionError",s,[this,...o],a)}}get[x7](){let t=0;for(let{dispatcher:r}of this[ki].values())t+=r[x7];return t}[UIe](t,r){let n;if(t.origin&&(typeof t.origin=="string"||t.origin instanceof URL))n=String(t.origin);else throw new bm("opts.origin must be a non-empty string or URL.");if(this[lg].size>=this[Fv].maxOrigins&&!this[lg].has(n))throw new FIe;let i=this[ki].get(n),s=i&&i.dispatcher;if(!s){let o=a=>{let A=this[ki].get(n);A&&(a&&(A.count-=1),A.count<=0&&(this[ki].delete(n),A.dispatcher.destroyed||A.dispatcher.close()),this[lg].delete(n))};s=this[H7](t.origin,this[Fv]).on("drain",this[O7]).on("connect",(a,A)=>{let f=this[ki].get(n);f&&(f.count+=1),this[U7](a,A)}).on("disconnect",(a,A,f)=>{o(!0),this[L7](a,A,f)}).on("connectionError",(a,A,f)=>{o(!1),this[P7](a,A,f)}),this[ki].set(n,{count:0,dispatcher:s}),this[lg].add(n)}return s.dispatch(t,r)}[kIe](){let t=[];for(let{dispatcher:r}of this[ki].values())t.push(r.close());return this[ki].clear(),Promise.all(t)}[xIe](t){let r=[];for(let{dispatcher:n}of this[ki].values())r.push(n.destroy(t));return this[ki].clear(),Promise.all(r)}get stats(){let t={};for(let{dispatcher:r}of this[ki].values())r.stats&&(t[r[LIe].origin]=r.stats);return t}};q7.exports=kv});var dg=x((ske,z7)=>{"use strict";var{kConstruct:YIe}=Tn(),{kEnumerableProperty:El}=$t(),{iteratorMixin:WIe,isValidHeaderName:hg,isValidHeaderValue:Y7}=Kf(),{webidl:Bt}=po(),Uv=Wt(),Cm=Yr();function G7(e){return e===10||e===13||e===9||e===32}function W7(e){let t=0,r=e.length;for(;r>t&&G7(e.charCodeAt(r-1));)--r;for(;r>t&&G7(e.charCodeAt(t));)++t;return t===0&&r===e.length?e:e.substring(t,r)}function V7(e,t){if(Array.isArray(t))for(let r=0;r<t.length;++r){let n=t[r];if(n.length!==2)throw Bt.errors.exception({header:"Headers constructor",message:`expected name/value pair to be length 2, found ${n.length}.`});Lv(e,n[0],n[1])}else if(typeof t=="object"&&t!==null){let r=Object.keys(t);for(let n=0;n<r.length;++n)Lv(e,r[n],t[r[n]])}else throw Bt.errors.conversionFailed({prefix:"Headers constructor",argument:"Argument 1",types:["sequence<sequence<ByteString>>","record<ByteString, ByteString>"]})}function Lv(e,t,r){if(r=W7(r),hg(t)){if(!Y7(r))throw Bt.errors.invalidArgument({prefix:"Headers.append",value:r,type:"header value"})}else throw Bt.errors.invalidArgument({prefix:"Headers.append",value:t,type:"header name"});if(j7(e)==="immutable")throw new TypeError("immutable");return wm(e).append(t,r,!1)}function VIe(e){let t=wm(e);if(!t)return[];if(t.sortedMap)return t.sortedMap;let r=[],n=t.toSortedArray(),i=t.cookies;if(i===null||i.length===1)return t.sortedMap=n;for(let s=0;s<n.length;++s){let{0:o,1:a}=n[s];if(o==="set-cookie")for(let A=0;A<i.length;++A)r.push([o,i[A]]);else r.push([o,a])}return t.sortedMap=r}function J7(e,t){return e[0]<t[0]?-1:1}var Qm=class e{constructor(t){y(this,"cookies",null);y(this,"sortedMap");y(this,"headersMap");t instanceof e?(this.headersMap=new Map(t.headersMap),this.sortedMap=t.sortedMap,this.cookies=t.cookies===null?null:[...t.cookies]):(this.headersMap=new Map(t),this.sortedMap=null)}contains(t,r){return this.headersMap.has(r?t:t.toLowerCase())}clear(){this.headersMap.clear(),this.sortedMap=null,this.cookies=null}append(t,r,n){this.sortedMap=null;let i=n?t:t.toLowerCase(),s=this.headersMap.get(i);if(s){let o=i==="cookie"?"; ":", ";this.headersMap.set(i,{name:s.name,value:`${s.value}${o}${r}`})}else this.headersMap.set(i,{name:t,value:r});i==="set-cookie"&&(this.cookies??(this.cookies=[])).push(r)}set(t,r,n){this.sortedMap=null;let i=n?t:t.toLowerCase();i==="set-cookie"&&(this.cookies=[r]),this.headersMap.set(i,{name:t,value:r})}delete(t,r){this.sortedMap=null,r||(t=t.toLowerCase()),t==="set-cookie"&&(this.cookies=null),this.headersMap.delete(t)}get(t,r){return this.headersMap.get(r?t:t.toLowerCase())?.value??null}*[Symbol.iterator](){for(let{0:t,1:{value:r}}of this.headersMap)yield[t,r]}get entries(){let t={};if(this.headersMap.size!==0)for(let{name:r,value:n}of this.headersMap.values())t[r]=n;return t}rawValues(){return this.headersMap.values()}get entriesList(){let t=[];if(this.headersMap.size!==0)for(let{0:r,1:{name:n,value:i}}of this.headersMap)if(r==="set-cookie")for(let s of this.cookies)t.push([n,s]);else t.push([n,i]);return t}toSortedArray(){let t=this.headersMap.size,r=new Array(t);if(t<=32){if(t===0)return r;let n=this.headersMap[Symbol.iterator](),i=n.next().value;r[0]=[i[0],i[1].value],Uv(i[1].value!==null);for(let s=1,o=0,a=0,A=0,f=0,l,p;s<t;++s){for(p=n.next().value,l=r[s]=[p[0],p[1].value],Uv(l[1]!==null),A=0,a=s;A<a;)f=A+(a-A>>1),r[f][0]<=l[0]?A=f+1:a=f;if(s!==f){for(o=s;o>A;)r[o]=r[--o];r[A]=l}}if(!n.next().done)throw new TypeError("Unreachable");return r}else{let n=0;for(let{0:i,1:{value:s}}of this.headersMap)r[n++]=[i,s],Uv(s!==null);return r.sort(J7)}}},SA,ri,wA=class wA{constructor(t=void 0){St(this,SA);St(this,ri);Bt.util.markAsUncloneable(this),t!==YIe&&(ft(this,ri,new Qm),ft(this,SA,"none"),t!==void 0&&(t=Bt.converters.HeadersInit(t,"Headers constructor","init"),V7(this,t)))}append(t,r){Bt.brandCheck(this,wA),Bt.argumentLengthCheck(arguments,2,"Headers.append");let n="Headers.append";return t=Bt.converters.ByteString(t,n,"name"),r=Bt.converters.ByteString(r,n,"value"),Lv(this,t,r)}delete(t){if(Bt.brandCheck(this,wA),Bt.argumentLengthCheck(arguments,1,"Headers.delete"),t=Bt.converters.ByteString(t,"Headers.delete","name"),!hg(t))throw Bt.errors.invalidArgument({prefix:"Headers.delete",value:t,type:"header name"});if(te(this,SA)==="immutable")throw new TypeError("immutable");te(this,ri).contains(t,!1)&&te(this,ri).delete(t,!1)}get(t){Bt.brandCheck(this,wA),Bt.argumentLengthCheck(arguments,1,"Headers.get");let r="Headers.get";if(t=Bt.converters.ByteString(t,r,"name"),!hg(t))throw Bt.errors.invalidArgument({prefix:r,value:t,type:"header name"});return te(this,ri).get(t,!1)}has(t){Bt.brandCheck(this,wA),Bt.argumentLengthCheck(arguments,1,"Headers.has");let r="Headers.has";if(t=Bt.converters.ByteString(t,r,"name"),!hg(t))throw Bt.errors.invalidArgument({prefix:r,value:t,type:"header name"});return te(this,ri).contains(t,!1)}set(t,r){Bt.brandCheck(this,wA),Bt.argumentLengthCheck(arguments,2,"Headers.set");let n="Headers.set";if(t=Bt.converters.ByteString(t,n,"name"),r=Bt.converters.ByteString(r,n,"value"),r=W7(r),hg(t)){if(!Y7(r))throw Bt.errors.invalidArgument({prefix:n,value:r,type:"header value"})}else throw Bt.errors.invalidArgument({prefix:n,value:t,type:"header name"});if(te(this,SA)==="immutable")throw new TypeError("immutable");te(this,ri).set(t,r,!1)}getSetCookie(){Bt.brandCheck(this,wA);let t=te(this,ri).cookies;return t?[...t]:[]}[Cm.inspect.custom](t,r){return r.depth??(r.depth=t),`Headers ${Cm.formatWithOptions(r,te(this,ri).entries)}`}static getHeadersGuard(t){return te(t,SA)}static setHeadersGuard(t,r){ft(t,SA,r)}static getHeadersList(t){return te(t,ri)}static setHeadersList(t,r){ft(t,ri,r)}};SA=new WeakMap,ri=new WeakMap;var Qs=wA,{getHeadersGuard:j7,setHeadersGuard:JIe,getHeadersList:wm,setHeadersList:jIe}=Qs;Reflect.deleteProperty(Qs,"getHeadersGuard");Reflect.deleteProperty(Qs,"setHeadersGuard");Reflect.deleteProperty(Qs,"getHeadersList");Reflect.deleteProperty(Qs,"setHeadersList");WIe("Headers",Qs,VIe,0,1);Object.defineProperties(Qs.prototype,{append:El,delete:El,get:El,has:El,set:El,getSetCookie:El,[Symbol.toStringTag]:{value:"Headers",configurable:!0},[Cm.inspect.custom]:{enumerable:!1}});Bt.converters.HeadersInit=function(e,t,r){if(Bt.util.Type(e)===Bt.util.Types.OBJECT){let n=Reflect.get(e,Symbol.iterator);if(!Cm.types.isProxy(e)&&n===Qs.prototype.entries)try{return wm(e).entriesList}catch{}return typeof n=="function"?Bt.converters["sequence<sequence<ByteString>>"](e,t,r,n.bind(e)):Bt.converters["record<ByteString, ByteString>"](e,t,r)}throw Bt.errors.conversionFailed({prefix:"Headers constructor",argument:"Argument 1",types:["sequence<sequence<ByteString>>","record<ByteString, ByteString>"]})};z7.exports={fill:V7,compareHeaderName:J7,Headers:Qs,HeadersList:Qm,getHeadersGuard:j7,setHeadersGuard:JIe,setHeadersList:jIe,getHeadersList:wm}});var Hv=x((ake,aq)=>{"use strict";var{Headers:tq,HeadersList:K7,fill:zIe,getHeadersGuard:KIe,setHeadersGuard:rq,setHeadersList:nq}=dg(),{extractBody:X7,cloneBody:XIe,mixinBody:ZIe,streamRegistry:iq,bodyUnusable:$Ie}=ul(),sq=$t(),Z7=Yr(),{kEnumerableProperty:ni}=sq,{isValidReasonPhrase:ebe,isCancelled:tbe,isAborted:rbe,isErrorLike:nbe,environmentSettingsObject:ibe}=Kf(),{redirectStatusSet:sbe,nullBodyStatus:obe}=id(),{webidl:yt}=po(),{URLSerializer:$7}=Bf(),{kConstruct:_m}=Tn(),Pv=Wt(),{isomorphicEncode:abe,serializeJavascriptValueToJSONString:Abe}=mf(),fbe=new TextEncoder("utf-8"),bo,rr,xi=class xi{constructor(t=null,r=void 0){St(this,bo);St(this,rr);if(yt.util.markAsUncloneable(this),t===_m)return;t!==null&&(t=yt.converters.BodyInit(t,"Response","body")),r=yt.converters.ResponseInit(r),ft(this,rr,yl({})),ft(this,bo,new tq(_m)),rq(te(this,bo),"response"),nq(te(this,bo),te(this,rr).headersList);let n=null;if(t!=null){let[i,s]=X7(t);n={body:i,type:s}}eq(this,r,n)}static error(){return gg(vm(),"immutable")}static json(t,r=void 0){yt.argumentLengthCheck(arguments,1,"Response.json"),r!==null&&(r=yt.converters.ResponseInit(r));let n=fbe.encode(Abe(t)),i=X7(n),s=gg(yl({}),"response");return eq(s,r,{body:i[0],type:"application/json"}),s}static redirect(t,r=302){yt.argumentLengthCheck(arguments,1,"Response.redirect"),t=yt.converters.USVString(t),r=yt.converters["unsigned short"](r);let n;try{n=new URL(t,ibe.settingsObject.baseUrl)}catch(o){throw new TypeError(`Failed to parse URL from ${t}`,{cause:o})}if(!sbe.has(r))throw new RangeError(`Invalid status code ${r}`);let i=gg(yl({}),"immutable");te(i,rr).status=r;let s=abe($7(n));return te(i,rr).headersList.append("location",s,!0),i}get type(){return yt.brandCheck(this,xi),te(this,rr).type}get url(){yt.brandCheck(this,xi);let t=te(this,rr).urlList,r=t[t.length-1]??null;return r===null?"":$7(r,!0)}get redirected(){return yt.brandCheck(this,xi),te(this,rr).urlList.length>1}get status(){return yt.brandCheck(this,xi),te(this,rr).status}get ok(){return yt.brandCheck(this,xi),te(this,rr).status>=200&&te(this,rr).status<=299}get statusText(){return yt.brandCheck(this,xi),te(this,rr).statusText}get headers(){return yt.brandCheck(this,xi),te(this,bo)}get body(){return yt.brandCheck(this,xi),te(this,rr).body?te(this,rr).body.stream:null}get bodyUsed(){return yt.brandCheck(this,xi),!!te(this,rr).body&&sq.isDisturbed(te(this,rr).body.stream)}clone(){if(yt.brandCheck(this,xi),$Ie(te(this,rr)))throw yt.errors.exception({header:"Response.clone",message:"Body has already been consumed."});let t=Ov(te(this,rr));return te(this,rr).urlList.length!==0&&te(this,rr).body?.stream&&iq.register(this,new WeakRef(te(this,rr).body.stream)),gg(t,KIe(te(this,bo)))}[Z7.inspect.custom](t,r){r.depth===null&&(r.depth=2),r.colors??(r.colors=!0);let n={status:this.status,statusText:this.statusText,headers:this.headers,body:this.body,bodyUsed:this.bodyUsed,ok:this.ok,redirected:this.redirected,type:this.type,url:this.url};return`Response ${Z7.formatWithOptions(r,n)}`}static getResponseHeaders(t){return te(t,bo)}static setResponseHeaders(t,r){ft(t,bo,r)}static getResponseState(t){return te(t,rr)}static setResponseState(t,r){ft(t,rr,r)}};bo=new WeakMap,rr=new WeakMap;var ii=xi,{getResponseHeaders:ube,setResponseHeaders:cbe,getResponseState:eu,setResponseState:lbe}=ii;Reflect.deleteProperty(ii,"getResponseHeaders");Reflect.deleteProperty(ii,"setResponseHeaders");Reflect.deleteProperty(ii,"getResponseState");Reflect.deleteProperty(ii,"setResponseState");ZIe(ii,eu);Object.defineProperties(ii.prototype,{type:ni,url:ni,status:ni,ok:ni,redirected:ni,statusText:ni,headers:ni,clone:ni,body:ni,bodyUsed:ni,[Symbol.toStringTag]:{value:"Response",configurable:!0}});Object.defineProperties(ii,{json:ni,redirect:ni,error:ni});function Ov(e){if(e.internalResponse)return oq(Ov(e.internalResponse),e.type);let t=yl({...e,body:null});return e.body!=null&&(t.body=XIe(e.body)),t}function yl(e){return{aborted:!1,rangeRequested:!1,timingAllowPassed:!1,requestIncludesCredentials:!1,type:"default",status:200,timingInfo:null,cacheState:"",statusText:"",...e,headersList:e?.headersList?new K7(e?.headersList):new K7,urlList:e?.urlList?[...e.urlList]:[]}}function vm(e){let t=nbe(e);return yl({type:"error",status:0,error:t?e:new Error(e&&String(e)),aborted:e&&e.name==="AbortError"})}function hbe(e){return e.type==="error"&&e.status===0}function Sm(e,t){return t={internalResponse:e,...t},new Proxy(e,{get(r,n){return n in t?t[n]:r[n]},set(r,n,i){return Pv(!(n in t)),r[n]=i,!0}})}function oq(e,t){if(t==="basic")return Sm(e,{type:"basic",headersList:e.headersList});if(t==="cors")return Sm(e,{type:"cors",headersList:e.headersList});if(t==="opaque")return Sm(e,{type:"opaque",urlList:[],status:0,statusText:"",body:null});if(t==="opaqueredirect")return Sm(e,{type:"opaqueredirect",status:0,statusText:"",headersList:[],body:null});Pv(!1)}function dbe(e,t=null){return Pv(tbe(e)),rbe(e)?vm(Object.assign(new DOMException("The operation was aborted.","AbortError"),{cause:t})):vm(Object.assign(new DOMException("Request was cancelled."),{cause:t}))}function eq(e,t,r){if(t.status!==null&&(t.status<200||t.status>599))throw new RangeError('init["status"] must be in the range of 200 to 599, inclusive.');if("statusText"in t&&t.statusText!=null&&!ebe(String(t.statusText)))throw new TypeError("Invalid statusText");if("status"in t&&t.status!=null&&(eu(e).status=t.status),"statusText"in t&&t.statusText!=null&&(eu(e).statusText=t.statusText),"headers"in t&&t.headers!=null&&zIe(ube(e),t.headers),r){if(obe.includes(e.status))throw yt.errors.exception({header:"Response constructor",message:`Invalid response status code ${e.status}`});eu(e).body=r.body,r.type!=null&&!eu(e).headersList.contains("content-type",!0)&&eu(e).headersList.append("content-type",r.type,!0)}}function gg(e,t){let r=new ii(_m);lbe(r,e);let n=new tq(_m);return cbe(r,n),nq(n,e.headersList),rq(n,t),e.urlList.length!==0&&e.body?.stream&&iq.register(r,new WeakRef(e.body.stream)),r}yt.converters.XMLHttpRequestBodyInit=function(e,t,r){return typeof e=="string"?yt.converters.USVString(e,t,r):yt.is.Blob(e)||yt.is.BufferSource(e)||yt.is.FormData(e)||yt.is.URLSearchParams(e)?e:yt.converters.DOMString(e,t,r)};yt.converters.BodyInit=function(e,t,r){return yt.is.ReadableStream(e)||e?.[Symbol.asyncIterator]?e:yt.converters.XMLHttpRequestBodyInit(e,t,r)};yt.converters.ResponseInit=yt.dictionaryConverter([{key:"status",converter:yt.converters["unsigned short"],defaultValue:()=>200},{key:"statusText",converter:yt.converters.ByteString,defaultValue:()=>""},{key:"headers",converter:yt.converters.HeadersInit}]);yt.is.Response=yt.util.MakeTypeAssertion(ii);aq.exports={isNetworkError:hbe,makeNetworkError:vm,makeResponse:yl,makeAppropriateNetworkError:dbe,filterResponse:oq,Response:ii,cloneResponse:Ov,fromInnerResponse:gg,getResponseState:eu}});var Yv=x((fke,Iq)=>{"use strict";var{extractBody:gbe,mixinBody:pbe,cloneBody:Ebe,bodyUnusable:Aq}=ul(),{Headers:dq,fill:ybe,HeadersList:Tm,setHeadersGuard:qv,getHeadersGuard:mbe,setHeadersList:gq,getHeadersList:fq}=dg(),Dm=$t(),uq=Yr(),{isValidHTTPToken:Bbe,sameOrigin:cq,environmentSettingsObject:Rm}=Kf(),{forbiddenMethodsSet:Ibe,corsSafeListedMethodsSet:bbe,referrerPolicy:Cbe,requestRedirect:Qbe,requestMode:wbe,requestCredentials:Sbe,requestCache:_be,requestDuplex:vbe}=id(),{kEnumerableProperty:br,normalizedMethodRecordsBase:Rbe,normalizedMethodRecords:Dbe}=Dm,{webidl:Fe}=po(),{URLSerializer:Tbe}=Bf(),{kConstruct:Nm}=Tn(),Nbe=Wt(),{getMaxListeners:pq,setMaxListeners:Mbe,defaultMaxListeners:Fbe}=Zi(),kbe=Symbol("abortController"),Eq=new FinalizationRegistry(({signal:e,abort:t})=>{e.removeEventListener("abort",t)}),Mm=new WeakMap,Gv;try{Gv=pq(new AbortController().signal)>0}catch{Gv=!1}function lq(e){return t;function t(){let r=e.deref();if(r!==void 0){Eq.unregister(t),this.removeEventListener("abort",t),r.abort(this.reason);let n=Mm.get(r.signal);if(n!==void 0){if(n.size!==0){for(let i of n){let s=i.deref();s!==void 0&&s.abort(this.reason)}n.clear()}Mm.delete(r.signal)}}}}var hq=!1,tu,Ea,Pn,Rt,gr=class gr{constructor(t,r=void 0){St(this,tu);St(this,Ea);St(this,Pn);St(this,Rt);if(Fe.util.markAsUncloneable(this),t===Nm)return;Fe.argumentLengthCheck(arguments,1,"Request constructor"),t=Fe.converters.RequestInfo(t),r=Fe.converters.RequestInit(r);let i=null,s=null,o=Rm.settingsObject.baseUrl,a=null;if(typeof t=="string"){ft(this,Ea,r.dispatcher);let U;try{U=new URL(t,o)}catch(G){throw new TypeError("Failed to parse URL from "+t,{cause:G})}if(U.username||U.password)throw new TypeError("Request cannot be constructed from a URL that includes credentials: "+t);i=Fm({urlList:[U]}),s="cors"}else Nbe(Fe.is.Request(t)),i=te(t,Rt),a=te(t,tu),ft(this,Ea,r.dispatcher||te(t,Ea));let A=Rm.settingsObject.origin,f="client";if(i.window?.constructor?.name==="EnvironmentSettingsObject"&&cq(i.window,A)&&(f=i.window),r.window!=null)throw new TypeError(`'window' option '${f}' must be null`);"window"in r&&(f="no-window"),i=Fm({method:i.method,headersList:i.headersList,unsafeRequest:i.unsafeRequest,client:Rm.settingsObject,window:f,priority:i.priority,origin:i.origin,referrer:i.referrer,referrerPolicy:i.referrerPolicy,mode:i.mode,credentials:i.credentials,cache:i.cache,redirect:i.redirect,integrity:i.integrity,keepalive:i.keepalive,reloadNavigation:i.reloadNavigation,historyNavigation:i.historyNavigation,urlList:[...i.urlList]});let l=Object.keys(r).length!==0;if(l&&(i.mode==="navigate"&&(i.mode="same-origin"),i.reloadNavigation=!1,i.historyNavigation=!1,i.origin="client",i.referrer="client",i.referrerPolicy="",i.url=i.urlList[i.urlList.length-1],i.urlList=[i.url]),r.referrer!==void 0){let U=r.referrer;if(U==="")i.referrer="no-referrer";else{let G;try{G=new URL(U,o)}catch(Y){throw new TypeError(`Referrer "${U}" is not a valid URL.`,{cause:Y})}G.protocol==="about:"&&G.hostname==="client"||A&&!cq(G,Rm.settingsObject.baseUrl)?i.referrer="client":i.referrer=G}}r.referrerPolicy!==void 0&&(i.referrerPolicy=r.referrerPolicy);let p;if(r.mode!==void 0?p=r.mode:p=s,p==="navigate")throw Fe.errors.exception({header:"Request constructor",message:"invalid request mode navigate."});if(p!=null&&(i.mode=p),r.credentials!==void 0&&(i.credentials=r.credentials),r.cache!==void 0&&(i.cache=r.cache),i.cache==="only-if-cached"&&i.mode!=="same-origin")throw new TypeError("'only-if-cached' can be set only with 'same-origin' mode");if(r.redirect!==void 0&&(i.redirect=r.redirect),r.integrity!=null&&(i.integrity=String(r.integrity)),r.keepalive!==void 0&&(i.keepalive=!!r.keepalive),r.method!==void 0){let U=r.method,G=Dbe[U];if(G!==void 0)i.method=G;else{if(!Bbe(U))throw new TypeError(`'${U}' is not a valid HTTP method.`);let Y=U.toUpperCase();if(Ibe.has(Y))throw new TypeError(`'${U}' HTTP method is unsupported.`);U=Rbe[Y]??U,i.method=U}!hq&&i.method==="patch"&&(process.emitWarning("Using `patch` is highly likely to result in a `405 Method Not Allowed`. `PATCH` is much more likely to succeed.",{code:"UNDICI-FETCH-patch"}),hq=!0)}r.signal!==void 0&&(a=r.signal),ft(this,Rt,i);let B=new AbortController;if(ft(this,tu,B.signal),a!=null)if(a.aborted)B.abort(a.reason);else{this[kbe]=B;let U=new WeakRef(B),G=lq(U);Gv&&pq(a)===Fbe&&Mbe(1500,a),Dm.addAbortListener(a,G),Eq.register(B,{signal:a,abort:G},G)}if(ft(this,Pn,new dq(Nm)),gq(te(this,Pn),i.headersList),qv(te(this,Pn),"request"),p==="no-cors"){if(!bbe.has(i.method))throw new TypeError(`'${i.method} is unsupported in no-cors mode.`);qv(te(this,Pn),"request-no-cors")}if(l){let U=fq(te(this,Pn)),G=r.headers!==void 0?r.headers:new Tm(U);if(U.clear(),G instanceof Tm){for(let{name:Y,value:Z}of G.rawValues())U.append(Y,Z,!1);U.cookies=G.cookies}else ybe(te(this,Pn),G)}let S=Fe.is.Request(t)?te(t,Rt).body:null;if((r.body!=null||S!=null)&&(i.method==="GET"||i.method==="HEAD"))throw new TypeError("Request with GET/HEAD method cannot have body.");let _=null;if(r.body!=null){let[U,G]=gbe(r.body,i.keepalive);_=U,G&&!fq(te(this,Pn)).contains("content-type",!0)&&te(this,Pn).append("content-type",G,!0)}let N=_??S;if(N!=null&&N.source==null){if(_!=null&&r.duplex==null)throw new TypeError("RequestInit: duplex option is required when sending a body.");if(i.mode!=="same-origin"&&i.mode!=="cors")throw new TypeError('If request is made from ReadableStream, mode should be "same-origin" or "cors"');i.useCORSPreflightFlag=!0}let P=N;if(_==null&&S!=null){if(Aq(te(t,Rt)))throw new TypeError("Cannot construct a Request with a Request object that has already been used.");let U=new TransformStream;S.stream.pipeThrough(U),P={source:S.source,length:S.length,stream:U.readable}}te(this,Rt).body=P}get method(){return Fe.brandCheck(this,gr),te(this,Rt).method}get url(){return Fe.brandCheck(this,gr),Tbe(te(this,Rt).url)}get headers(){return Fe.brandCheck(this,gr),te(this,Pn)}get destination(){return Fe.brandCheck(this,gr),te(this,Rt).destination}get referrer(){return Fe.brandCheck(this,gr),te(this,Rt).referrer==="no-referrer"?"":te(this,Rt).referrer==="client"?"about:client":te(this,Rt).referrer.toString()}get referrerPolicy(){return Fe.brandCheck(this,gr),te(this,Rt).referrerPolicy}get mode(){return Fe.brandCheck(this,gr),te(this,Rt).mode}get credentials(){return Fe.brandCheck(this,gr),te(this,Rt).credentials}get cache(){return Fe.brandCheck(this,gr),te(this,Rt).cache}get redirect(){return Fe.brandCheck(this,gr),te(this,Rt).redirect}get integrity(){return Fe.brandCheck(this,gr),te(this,Rt).integrity}get keepalive(){return Fe.brandCheck(this,gr),te(this,Rt).keepalive}get isReloadNavigation(){return Fe.brandCheck(this,gr),te(this,Rt).reloadNavigation}get isHistoryNavigation(){return Fe.brandCheck(this,gr),te(this,Rt).historyNavigation}get signal(){return Fe.brandCheck(this,gr),te(this,tu)}get body(){return Fe.brandCheck(this,gr),te(this,Rt).body?te(this,Rt).body.stream:null}get bodyUsed(){return Fe.brandCheck(this,gr),!!te(this,Rt).body&&Dm.isDisturbed(te(this,Rt).body.stream)}get duplex(){return Fe.brandCheck(this,gr),"half"}clone(){if(Fe.brandCheck(this,gr),Aq(te(this,Rt)))throw new TypeError("unusable");let t=mq(te(this,Rt)),r=new AbortController;if(this.signal.aborted)r.abort(this.signal.reason);else{let n=Mm.get(this.signal);n===void 0&&(n=new Set,Mm.set(this.signal,n));let i=new WeakRef(r);n.add(i),Dm.addAbortListener(r.signal,lq(i))}return Bq(t,te(this,Ea),r.signal,mbe(te(this,Pn)))}[uq.inspect.custom](t,r){r.depth===null&&(r.depth=2),r.colors??(r.colors=!0);let n={method:this.method,url:this.url,headers:this.headers,destination:this.destination,referrer:this.referrer,referrerPolicy:this.referrerPolicy,mode:this.mode,credentials:this.credentials,cache:this.cache,redirect:this.redirect,integrity:this.integrity,keepalive:this.keepalive,isReloadNavigation:this.isReloadNavigation,isHistoryNavigation:this.isHistoryNavigation,signal:this.signal};return`Request ${uq.formatWithOptions(r,n)}`}static setRequestSignal(t,r){return ft(t,tu,r),t}static getRequestDispatcher(t){return te(t,Ea)}static setRequestDispatcher(t,r){ft(t,Ea,r)}static setRequestHeaders(t,r){ft(t,Pn,r)}static getRequestState(t){return te(t,Rt)}static setRequestState(t,r){ft(t,Rt,r)}};tu=new WeakMap,Ea=new WeakMap,Pn=new WeakMap,Rt=new WeakMap;var On=gr,{setRequestSignal:xbe,getRequestDispatcher:Ube,setRequestDispatcher:Lbe,setRequestHeaders:Pbe,getRequestState:yq,setRequestState:Obe}=On;Reflect.deleteProperty(On,"setRequestSignal");Reflect.deleteProperty(On,"getRequestDispatcher");Reflect.deleteProperty(On,"setRequestDispatcher");Reflect.deleteProperty(On,"setRequestHeaders");Reflect.deleteProperty(On,"getRequestState");Reflect.deleteProperty(On,"setRequestState");pbe(On,yq);function Fm(e){return{method:e.method??"GET",localURLsOnly:e.localURLsOnly??!1,unsafeRequest:e.unsafeRequest??!1,body:e.body??null,client:e.client??null,reservedClient:e.reservedClient??null,replacesClientId:e.replacesClientId??"",window:e.window??"client",keepalive:e.keepalive??!1,serviceWorkers:e.serviceWorkers??"all",initiator:e.initiator??"",destination:e.destination??"",priority:e.priority??null,origin:e.origin??"client",policyContainer:e.policyContainer??"client",referrer:e.referrer??"client",referrerPolicy:e.referrerPolicy??"",mode:e.mode??"no-cors",useCORSPreflightFlag:e.useCORSPreflightFlag??!1,credentials:e.credentials??"same-origin",useCredentials:e.useCredentials??!1,cache:e.cache??"default",redirect:e.redirect??"follow",integrity:e.integrity??"",cryptoGraphicsNonceMetadata:e.cryptoGraphicsNonceMetadata??"",parserMetadata:e.parserMetadata??"",reloadNavigation:e.reloadNavigation??!1,historyNavigation:e.historyNavigation??!1,userActivation:e.userActivation??!1,taintedOrigin:e.taintedOrigin??!1,redirectCount:e.redirectCount??0,responseTainting:e.responseTainting??"basic",preventNoCacheCacheControlHeaderModification:e.preventNoCacheCacheControlHeaderModification??!1,done:e.done??!1,timingAllowFailed:e.timingAllowFailed??!1,useURLCredentials:e.useURLCredentials??void 0,traversableForUserPrompts:e.traversableForUserPrompts??"client",urlList:e.urlList,url:e.urlList[0],headersList:e.headersList?new Tm(e.headersList):new Tm}}function mq(e){let t=Fm({...e,body:null});return e.body!=null&&(t.body=Ebe(e.body)),t}function Bq(e,t,r,n){let i=new On(Nm);Obe(i,e),Lbe(i,t),xbe(i,r);let s=new dq(Nm);return Pbe(i,s),gq(s,e.headersList),qv(s,n),i}Object.defineProperties(On.prototype,{method:br,url:br,headers:br,redirect:br,clone:br,signal:br,duplex:br,destination:br,body:br,bodyUsed:br,isHistoryNavigation:br,isReloadNavigation:br,keepalive:br,integrity:br,cache:br,credentials:br,attribute:br,referrerPolicy:br,referrer:br,mode:br,[Symbol.toStringTag]:{value:"Request",configurable:!0}});Fe.is.Request=Fe.util.MakeTypeAssertion(On);Fe.converters.RequestInfo=function(e){return typeof e=="string"?Fe.converters.USVString(e):Fe.is.Request(e)?e:Fe.converters.USVString(e)};Fe.converters.RequestInit=Fe.dictionaryConverter([{key:"method",converter:Fe.converters.ByteString},{key:"headers",converter:Fe.converters.HeadersInit},{key:"body",converter:Fe.nullableConverter(Fe.converters.BodyInit)},{key:"referrer",converter:Fe.converters.USVString},{key:"referrerPolicy",converter:Fe.converters.DOMString,allowedValues:Cbe},{key:"mode",converter:Fe.converters.DOMString,allowedValues:wbe},{key:"credentials",converter:Fe.converters.DOMString,allowedValues:Sbe},{key:"cache",converter:Fe.converters.DOMString,allowedValues:_be},{key:"redirect",converter:Fe.converters.DOMString,allowedValues:Qbe},{key:"integrity",converter:Fe.converters.DOMString},{key:"keepalive",converter:Fe.converters.boolean},{key:"signal",converter:Fe.nullableConverter(e=>Fe.converters.AbortSignal(e,"RequestInit","signal"))},{key:"window",converter:Fe.converters.any},{key:"duplex",converter:Fe.converters.DOMString,allowedValues:vbe},{key:"dispatcher",converter:Fe.converters.any},{key:"priority",converter:Fe.converters.DOMString,allowedValues:["high","low","auto"],defaultValue:()=>"auto"}]);Iq.exports={Request:On,makeRequest:Fm,fromInnerRequest:Bq,cloneRequest:mq,getRequestDispatcher:Ube,getRequestState:yq}});var Wv=x((cke,wq)=>{"use strict";var bq=Symbol.for("undici.globalDispatcher.1"),{InvalidArgumentError:Hbe}=mr(),qbe=xv();Qq()===void 0&&Cq(new qbe);function Cq(e){if(!e||typeof e.dispatch!="function")throw new Hbe("Argument agent must implement Agent");Object.defineProperty(globalThis,bq,{value:e,writable:!0,enumerable:!1,configurable:!1})}function Qq(){return globalThis[bq]}var Gbe=["fetch","Headers","Response","Request","FormData","WebSocket","CloseEvent","ErrorEvent","MessageEvent","EventSource"];wq.exports={setGlobalDispatcher:Cq,getGlobalDispatcher:Qq,installedExports:Gbe}});var Mq=x((lke,Nq)=>{"use strict";var Ybe=Wt(),{runtimeFeatures:_q}=sv(),ru=new Map([["sha256",0],["sha384",1],["sha512",2]]),Vv;if(_q.has("crypto")){Vv=kd();let e=Vv.getHashes();e.length===0&&ru.clear();for(let t of ru.keys())e.includes(t)===!1&&ru.delete(t)}else ru.clear();var Sq=Map.prototype.get.bind(ru),Jv=Map.prototype.has.bind(ru),Wbe=_q.has("crypto")===!1||ru.size===0?()=>!0:(e,t)=>{let r=Rq(t);if(r.length===0)return!0;let n=vq(r);for(let i of n){let s=i.alg,o=i.val,a=Dq(s,e);if(Tq(a,o))return!0}return!1};function vq(e){let t=[],r=null;for(let n of e){if(Ybe(Jv(n.alg),"Invalid SRI hash algorithm token"),t.length===0){t.push(n),r=n;continue}let i=r.alg,s=Sq(i),o=n.alg,a=Sq(o);a<s||(a>s?(r=n,t[0]=n,t.length=1):t.push(n))}return t}function Rq(e){let t=[];for(let r of e.split(" ")){let i=r.split("?",1)[0],s="",o=[i.slice(0,6),i.slice(7)],a=o[0];if(!Jv(a))continue;o[1]&&(s=o[1]);let A={alg:a,val:s};t.push(A)}return t}var Dq=(e,t)=>Vv.hash(e,t,"base64");function Tq(e,t){let r=e.length;r!==0&&e[r-1]==="="&&(r-=1),r!==0&&e[r-1]==="="&&(r-=1);let n=t.length;if(n!==0&&t[n-1]==="="&&(n-=1),n!==0&&t[n-1]==="="&&(n-=1),r!==n)return!1;for(let i=0;i<r;++i)if(!(e[i]===t[i]||e[i]==="+"&&t[i]==="-"||e[i]==="/"&&t[i]==="_"))return!1;return!0}Nq.exports={applyAlgorithmToBytes:Dq,bytesMatch:Wbe,caseSensitiveMatch:Tq,isValidSRIHashAlgorithm:Jv,getStrongestMetadata:vq,parseMetadata:Rq}});var jq=x((hke,Jq)=>{"use strict";var{makeNetworkError:Mt,makeAppropriateNetworkError:pg,filterResponse:jv,makeResponse:km,fromInnerResponse:Vbe,getResponseState:Jbe}=Hv(),{HeadersList:zv}=dg(),{Request:jbe,cloneRequest:zbe,getRequestDispatcher:Kbe,getRequestState:Xbe}=Yv(),ws=UE(),{makePolicyContainer:Zbe,clonePolicyContainer:$be,requestBadPort:eCe,TAOCheck:tCe,appendRequestOriginHeader:rCe,responseLocationURL:nCe,requestCurrentURL:si,setRequestReferrerPolicyOnRedirect:iCe,tryUpgradeRequestToAPotentiallyTrustworthyURL:sCe,createOpaqueTimingInfo:t1,appendFetchMetadata:oCe,corsCheck:aCe,crossOriginResourcePolicyCheck:ACe,determineRequestsReferrer:fCe,coarsenedSharedCurrentTime:Eg,sameOrigin:$v,isCancelled:_A,isAborted:Fq,isErrorLike:uCe,fullyReadBody:cCe,readableStreamClose:lCe,urlIsLocal:hCe,urlIsHttpHttpsScheme:Pm,urlHasHttpsScheme:dCe,clampAndCoarsenConnectionTimingInfo:gCe,simpleRangeHeaderValue:pCe,buildContentRange:ECe,createInflate:yCe,extractMimeType:mCe,hasAuthenticationEntry:BCe,includesCredentials:kq,isTraversableNavigable:ICe}=Kf(),nu=Wt(),{safelyExtractBody:Om,extractBody:xq}=ul(),{redirectStatusSet:Oq,nullBodyStatus:Hq,safeMethodsSet:bCe,requestBodyHeader:CCe,subresourceSet:QCe}=id(),wCe=Zi(),{Readable:SCe,pipeline:_Ce,finished:vCe,isErrored:RCe,isReadable:xm}=(ts(),Gs(Yt)),{addAbortListener:DCe,bufferToLowerCasedHeaderName:Uq}=$t(),{dataURLProcessor:TCe,serializeAMimeType:NCe,minimizeSupportedMimeType:MCe}=Bf(),{getGlobalDispatcher:FCe}=Wv(),{webidl:r1}=po(),{STATUS_CODES:Lq}=gE(),{bytesMatch:kCe}=Mq(),{createDeferredPromise:xCe}=nv(),{isomorphicEncode:Um}=mf(),{runtimeFeatures:UCe}=P_(),LCe=UCe.has("zstd"),PCe=["GET","HEAD"],OCe=typeof __UNDICI_IS_NODE__<"u"||typeof esbuildDetection<"u"?"node":"undici",Kv,Lm=class extends wCe{constructor(t){super(),this.dispatcher=t,this.connection=null,this.dump=!1,this.state="ongoing"}terminate(t){this.state==="ongoing"&&(this.state="terminated",this.connection?.destroy(t),this.emit("terminated",t))}abort(t){this.state==="ongoing"&&(this.state="aborted",t||(t=new DOMException("The operation was aborted.","AbortError")),this.serializedAbortReason=t,this.connection?.destroy(t),this.emit("terminated",t))}};function HCe(e){qq(e,"fetch")}function qCe(e,t=void 0){r1.argumentLengthCheck(arguments,1,"globalThis.fetch");let r=xCe(),n;try{n=new jbe(e,t)}catch(l){return r.reject(l),r.promise}let i=Xbe(n);if(n.signal.aborted)return Xv(r,i,null,n.signal.reason,null),r.promise;i.client.globalObject?.constructor?.name==="ServiceWorkerGlobalScope"&&(i.serviceWorkers="none");let o=null,a=!1,A=null;return DCe(n.signal,()=>{a=!0,nu(A!=null),A.abort(n.signal.reason);let l=o?.deref();Xv(r,i,l,n.signal.reason,A.controller)}),A=Yq({request:i,processResponseEndOfBody:HCe,processResponse:l=>{if(!a){if(l.aborted){Xv(r,i,o,A.serializedAbortReason,A.controller);return}if(l.type==="error"){r.reject(new TypeError("fetch failed",{cause:l.error}));return}o=new WeakRef(Vbe(l,"immutable")),r.resolve(o.deref()),r=null}},dispatcher:Kbe(n),requestObject:n}),r.promise}function qq(e,t="other"){if(e.type==="error"&&e.aborted||!e.urlList?.length)return;let r=e.urlList[0],n=e.timingInfo,i=e.cacheState;Pm(r)&&n!==null&&(e.timingAllowPassed||(n=t1({startTime:n.startTime}),i=""),n.endTime=Eg(),e.timingInfo=n,Gq(n,r.href,t,globalThis,i,"",e.status))}var Gq=performance.markResourceTiming;function Xv(e,t,r,n,i){if(e&&e.reject(n),t.body?.stream!=null&&xm(t.body.stream)&&t.body.stream.cancel(n).catch(o=>{if(o.code!=="ERR_INVALID_STATE")throw o}),r==null)return;let s=Jbe(r);s.body?.stream!=null&&xm(s.body.stream)&&i.error(n)}function Yq({request:e,processRequestBodyChunkLength:t,processRequestEndOfBody:r,processResponse:n,processResponseEndOfBody:i,processResponseConsumeBody:s,useParallelQueue:o=!1,dispatcher:a=FCe(),requestObject:A=null}){nu(a);let f=null,l=!1;e.client!=null&&(f=e.client.globalObject,l=e.client.crossOriginIsolatedCapability);let p=Eg(l),B=t1({startTime:p}),S={controller:new Lm(a),request:e,timingInfo:B,processRequestBodyChunkLength:t,processRequestEndOfBody:r,processResponse:n,processResponseConsumeBody:s,processResponseEndOfBody:i,taskDestination:f,crossOriginIsolatedCapability:l,requestObject:A};return nu(!e.body||e.body.stream),e.window==="client"&&(e.window=e.client?.globalObject?.constructor?.name==="Window"?e.client:"no-window"),e.origin==="client"&&(e.origin=e.client.origin),e.policyContainer==="client"&&(e.client!=null?e.policyContainer=$be(e.client.policyContainer):e.policyContainer=Zbe()),e.headersList.contains("accept",!0)||e.headersList.append("accept","*/*",!0),e.headersList.contains("accept-language",!0)||e.headersList.append("accept-language","*",!0),e.priority,QCe.has(e.destination),Wq(S,!1),S.controller}async function Wq(e,t){try{let r=e.request,n=null;if(r.localURLsOnly&&!hCe(si(r))&&(n=Mt("local URLs only")),sCe(r),eCe(r)==="blocked"&&(n=Mt("bad port")),r.referrerPolicy===""&&(r.referrerPolicy=r.policyContainer.referrerPolicy),r.referrer!=="no-referrer"&&(r.referrer=fCe(r)),n===null){let s=si(r);$v(s,r.url)&&r.responseTainting==="basic"||s.protocol==="data:"||r.mode==="navigate"||r.mode==="websocket"?(r.responseTainting="basic",n=await Pq(e)):r.mode==="same-origin"?n=Mt('request mode cannot be "same-origin"'):r.mode==="no-cors"?r.redirect!=="follow"?n=Mt('redirect mode cannot be "follow" for "no-cors" request'):(r.responseTainting="opaque",n=await Pq(e)):Pm(si(r))?(r.responseTainting="cors",n=await Vq(e)):n=Mt("URL scheme must be a HTTP(S) scheme")}if(t)return n;n.status!==0&&!n.internalResponse&&(r.responseTainting,r.responseTainting==="basic"?n=jv(n,"basic"):r.responseTainting==="cors"?n=jv(n,"cors"):r.responseTainting==="opaque"?n=jv(n,"opaque"):nu(!1));let i=n.status===0?n:n.internalResponse;if(i.urlList.length===0&&i.urlList.push(...r.urlList),r.timingAllowFailed||(n.timingAllowPassed=!0),n.type==="opaque"&&i.status===206&&i.rangeRequested&&!r.headers.contains("range",!0)&&(n=i=Mt()),n.status!==0&&(r.method==="HEAD"||r.method==="CONNECT"||Hq.includes(i.status))&&(i.body=null,e.controller.dump=!0),r.integrity){let s=a=>Zv(e,Mt(a));if(r.responseTainting==="opaque"||n.body==null){s(n.error);return}let o=a=>{if(!kCe(a,r.integrity)){s("integrity mismatch");return}n.body=Om(a)[0],Zv(e,n)};cCe(n.body,o,s)}else Zv(e,n)}catch(r){e.controller.terminate(r)}}function Pq(e){if(_A(e)&&e.request.redirectCount===0)return Promise.resolve(pg(e));let{request:t}=e,{protocol:r}=si(t);switch(r){case"about:":return Promise.resolve(Mt("about scheme is not supported"));case"blob:":{Kv||(Kv=Gr().resolveObjectURL);let n=si(t);if(n.search.length!==0)return Promise.resolve(Mt("NetworkError when attempting to fetch resource."));let i=Kv(n.toString());if(t.method!=="GET"||!r1.is.Blob(i))return Promise.resolve(Mt("invalid method"));let s=km(),o=i.size,a=Um(`${o}`),A=i.type;if(t.headersList.contains("range",!0)){s.rangeRequested=!0;let f=t.headersList.get("range",!0),l=pCe(f,!0);if(l==="failure")return Promise.resolve(Mt("failed to fetch the data URL"));let{rangeStartValue:p,rangeEndValue:B}=l;if(p===null)p=o-B,B=p+B-1;else{if(p>=o)return Promise.resolve(Mt("Range start is greater than the blob's size."));(B===null||B>=o)&&(B=o-1)}let S=i.slice(p,B+1,A),_=xq(S);s.body=_[0];let N=Um(`${S.size}`),P=ECe(p,B,o);s.status=206,s.statusText="Partial Content",s.headersList.set("content-length",N,!0),s.headersList.set("content-type",A,!0),s.headersList.set("content-range",P,!0)}else{let f=xq(i);s.statusText="OK",s.body=f[0],s.headersList.set("content-length",a,!0),s.headersList.set("content-type",A,!0)}return Promise.resolve(s)}case"data:":{let n=si(t),i=TCe(n);if(i==="failure")return Promise.resolve(Mt("failed to fetch the data URL"));let s=NCe(i.mimeType);return Promise.resolve(km({statusText:"OK",headersList:[["content-type",{name:"Content-Type",value:s}]],body:Om(i.body)[0]}))}case"file:":return Promise.resolve(Mt("not implemented... yet..."));case"http:":case"https:":return Vq(e).catch(n=>Mt(n));default:return Promise.resolve(Mt("unknown scheme"))}}function GCe(e,t){e.request.done=!0,e.processResponseDone!=null&&queueMicrotask(()=>e.processResponseDone(t))}function Zv(e,t){let r=e.timingInfo,n=()=>{let s=Date.now();e.request.destination==="document"&&(e.controller.fullTimingInfo=r),e.controller.reportTimingSteps=()=>{if(!Pm(e.request.url))return;r.endTime=s;let a=t.cacheState,A=t.bodyInfo;t.timingAllowPassed||(r=t1(r),a="");let f=0;if(e.request.mode!=="navigator"||!t.hasCrossOriginRedirects){f=t.status;let l=mCe(t.headersList);l!=="failure"&&(A.contentType=MCe(l))}e.request.initiatorType!=null&&Gq(r,e.request.url.href,e.request.initiatorType,globalThis,a,A,f)};let o=()=>{e.request.done=!0,e.processResponseEndOfBody!=null&&queueMicrotask(()=>e.processResponseEndOfBody(t)),e.request.initiatorType!=null&&e.controller.reportTimingSteps()};queueMicrotask(()=>o())};e.processResponse!=null&&queueMicrotask(()=>{e.processResponse(t),e.processResponse=null});let i=t.type==="error"?t:t.internalResponse??t;i.body==null?n():vCe(i.body.stream,()=>{n()})}async function Vq(e){let t=e.request,r=null,n=null,i=e.timingInfo;if(t.serviceWorkers,r===null){if(t.redirect==="follow"&&(t.serviceWorkers="none"),n=r=await e1(e),t.responseTainting==="cors"&&aCe(t,r)==="failure")return Mt("cors failure");tCe(t,r)==="failure"&&(t.timingAllowFailed=!0)}return(t.responseTainting==="opaque"||r.type==="opaque")&&ACe(t.origin,t.client,t.destination,n)==="blocked"?Mt("blocked"):(Oq.has(n.status)&&(t.redirect!=="manual"&&e.controller.connection.destroy(void 0,!1),t.redirect==="error"?r=Mt("unexpected redirect"):t.redirect==="manual"?r=n:t.redirect==="follow"?r=await YCe(e,r):nu(!1)),r.timingInfo=i,r)}function YCe(e,t){let r=e.request,n=t.internalResponse?t.internalResponse:t,i;try{if(i=nCe(n,si(r).hash),i==null)return t}catch(o){return Promise.resolve(Mt(o))}if(!Pm(i))return Promise.resolve(Mt("URL scheme must be a HTTP(S) scheme"));if(r.redirectCount===20)return Promise.resolve(Mt("redirect count exceeded"));if(r.redirectCount+=1,r.mode==="cors"&&(i.username||i.password)&&!$v(r,i))return Promise.resolve(Mt('cross origin not allowed for request mode "cors"'));if(r.responseTainting==="cors"&&(i.username||i.password))return Promise.resolve(Mt('URL cannot contain credentials for request mode "cors"'));if(n.status!==303&&r.body!=null&&r.body.source==null)return Promise.resolve(Mt());if([301,302].includes(n.status)&&r.method==="POST"||n.status===303&&!PCe.includes(r.method)){r.method="GET",r.body=null;for(let o of CCe)r.headersList.delete(o)}$v(si(r),i)||(r.headersList.delete("authorization",!0),r.headersList.delete("proxy-authorization",!0),r.headersList.delete("cookie",!0),r.headersList.delete("host",!0)),r.body!=null&&(nu(r.body.source!=null),r.body=Om(r.body.source)[0]);let s=e.timingInfo;return s.redirectEndTime=s.postRedirectStartTime=Eg(e.crossOriginIsolatedCapability),s.redirectStartTime===0&&(s.redirectStartTime=s.startTime),r.urlList.push(i),iCe(r,n),Wq(e,!0)}async function e1(e,t=!1,r=!1){let n=e.request,i=null,s=null,o=null,a=null,A=!1;n.window==="no-window"&&n.redirect==="error"?(i=e,s=n):(s=zbe(n),i={...e},i.request=s);let f=n.credentials==="include"||n.credentials==="same-origin"&&n.responseTainting==="basic",l=s.body?s.body.length:null,p=null;if(s.body==null&&["POST","PUT"].includes(s.method)&&(p="0"),l!=null&&(p=Um(`${l}`)),p!=null&&s.headersList.append("content-length",p,!0),l!=null&&s.keepalive,r1.is.URL(s.referrer)&&s.headersList.append("referer",Um(s.referrer.href),!0),rCe(s),oCe(s),s.headersList.contains("user-agent",!0)||s.headersList.append("user-agent",OCe,!0),s.cache==="default"&&(s.headersList.contains("if-modified-since",!0)||s.headersList.contains("if-none-match",!0)||s.headersList.contains("if-unmodified-since",!0)||s.headersList.contains("if-match",!0)||s.headersList.contains("if-range",!0))&&(s.cache="no-store"),s.cache==="no-cache"&&!s.preventNoCacheCacheControlHeaderModification&&!s.headersList.contains("cache-control",!0)&&s.headersList.append("cache-control","max-age=0",!0),(s.cache==="no-store"||s.cache==="reload")&&(s.headersList.contains("pragma",!0)||s.headersList.append("pragma","no-cache",!0),s.headersList.contains("cache-control",!0)||s.headersList.append("cache-control","no-cache",!0)),s.headersList.contains("range",!0)&&s.headersList.append("accept-encoding","identity",!0),s.headersList.contains("accept-encoding",!0)||(dCe(si(s))?s.headersList.append("accept-encoding","br, gzip, deflate",!0):s.headersList.append("accept-encoding","gzip, deflate",!0)),s.headersList.delete("host",!0),f&&!s.headersList.contains("authorization",!0)){let B=null;if(!(BCe(s)&&(s.useURLCredentials===void 0||!kq(si(s))))){if(kq(si(s))&&t){let{username:S,password:_}=si(s);B=`Basic ${Buffer.from(`${S}:${_}`).toString("base64")}`}}B!==null&&s.headersList.append("Authorization",B,!1)}if(a==null&&(s.cache="no-store"),s.cache!=="no-store"&&s.cache,o==null){if(s.cache==="only-if-cached")return Mt("only if cached");let B=await WCe(i,f,r);!bCe.has(s.method)&&B.status>=200&&B.status<=399,A&&B.status,o==null&&(o=B)}if(o.urlList=[...s.urlList],s.headersList.contains("range",!0)&&(o.rangeRequested=!0),o.requestIncludesCredentials=f,o.status===401&&s.responseTainting!=="cors"&&f&&ICe(n.traversableForUserPrompts)){if(n.body!=null){if(n.body.source==null)return Mt("expected non-null body source");n.body=Om(n.body.source)[0]}if(n.useURLCredentials===void 0||t)return _A(e)?pg(e):o;e.controller.connection.destroy(),o=await e1(e,!0)}if(o.status===407)return n.window==="no-window"?Mt():_A(e)?pg(e):Mt("proxy authentication required");if(o.status===421&&!r&&(n.body==null||n.body.source!=null)){if(_A(e))return pg(e);e.controller.connection.destroy(),o=await e1(e,t,!0)}return o}async function WCe(e,t=!1,r=!1){nu(!e.controller.connection||e.controller.connection.destroyed),e.controller.connection={abort:null,destroyed:!1,destroy(_,N=!0){this.destroyed||(this.destroyed=!0,N&&this.abort?.(_??new DOMException("The operation was aborted.","AbortError")))}};let n=e.request,i=null,s=e.timingInfo;null==null&&(n.cache="no-store");let a=r?"yes":"no";n.mode;let A=null;if(n.body==null&&e.processRequestEndOfBody)queueMicrotask(()=>e.processRequestEndOfBody());else if(n.body!=null){let _=async function*(U){_A(e)||(yield U,e.processRequestBodyChunkLength?.(U.byteLength))},N=()=>{_A(e)||e.processRequestEndOfBody&&e.processRequestEndOfBody()},P=U=>{_A(e)||(U.name==="AbortError"?e.controller.abort():e.controller.terminate(U))};A=(async function*(){try{for await(let U of n.body.stream)yield*_(U);N()}catch(U){P(U)}})()}try{let{body:_,status:N,statusText:P,headersList:U,socket:G}=await S({body:A});if(G)i=km({status:N,statusText:P,headersList:U,socket:G});else{let Y=_[Symbol.asyncIterator]();e.controller.next=()=>Y.next(),i=km({status:N,statusText:P,headersList:U})}}catch(_){return _.name==="AbortError"?(e.controller.connection.destroy(),pg(e,_)):Mt(_)}let f=()=>e.controller.resume(),l=_=>{_A(e)||e.controller.abort(_)},p=new ReadableStream({start(_){e.controller.controller=_},pull:f,cancel:l,type:"bytes"});i.body={stream:p,source:null,length:null},e.controller.resume||e.controller.on("terminated",B),e.controller.resume=async()=>{for(;;){let _,N;try{let{done:U,value:G}=await e.controller.next();if(Fq(e))break;_=U?void 0:G}catch(U){e.controller.ended&&!s.encodedBodySize?_=void 0:(_=U,N=!0)}if(_===void 0){lCe(e.controller.controller),GCe(e,i);return}if(s.decodedBodySize+=_?.byteLength??0,N){e.controller.terminate(_);return}let P=new Uint8Array(_);if(P.byteLength&&e.controller.controller.enqueue(P),RCe(p)){e.controller.terminate();return}if(e.controller.controller.desiredSize<=0)return}};function B(_){Fq(e)?(i.aborted=!0,xm(p)&&e.controller.controller.error(e.controller.serializedAbortReason)):xm(p)&&e.controller.controller.error(new TypeError("terminated",{cause:uCe(_)?_:void 0})),e.controller.connection.destroy()}return i;function S({body:_}){let N=si(n),P=e.controller.dispatcher,U=N.pathname+N.search,G=N.search.length===0&&N.href[N.href.length-N.hash.length-1]==="?";return new Promise((Y,Z)=>P.dispatch({path:G?`${U}?`:U,origin:N.origin,method:n.method,body:P.isMockActive?n.body&&(n.body.source||n.body.stream):_,headers:n.headersList.entries,maxRedirections:0,upgrade:n.mode==="websocket"?"websocket":void 0},{body:null,abort:null,onConnect(ee){let{connection:j}=e.controller;s.finalConnectionTimingInfo=gCe(void 0,s.postRedirectStartTime,e.crossOriginIsolatedCapability),j.destroyed?ee(new DOMException("The operation was aborted.","AbortError")):(e.controller.on("terminated",ee),this.abort=j.abort=ee),s.finalNetworkRequestStartTime=Eg(e.crossOriginIsolatedCapability)},onResponseStarted(){s.finalNetworkResponseStartTime=Eg(e.crossOriginIsolatedCapability)},onHeaders(ee,j,se,ie){if(ee<200)return!1;let ce=new zv;for(let c=0;c<j.length;c+=2)ce.append(Uq(j[c]),j[c+1].toString("latin1"),!0);let H=ce.get("location",!0);this.body=new SCe({read:se});let E=H&&n.redirect==="follow"&&Oq.has(ee),v=[];if(n.method!=="HEAD"&&n.method!=="CONNECT"&&!Hq.includes(ee)&&!E){let c=ce.get("content-encoding",!0),g=c?c.toLowerCase().split(","):[],w=5;if(g.length>w)return Z(new Error(`too many content-encodings in response: ${g.length}, maximum allowed is ${w}`)),!0;for(let R=g.length-1;R>=0;--R){let C=g[R].trim();if(C==="x-gzip"||C==="gzip")v.push(ws.createGunzip({flush:ws.constants.Z_SYNC_FLUSH,finishFlush:ws.constants.Z_SYNC_FLUSH}));else if(C==="deflate")v.push(yCe({flush:ws.constants.Z_SYNC_FLUSH,finishFlush:ws.constants.Z_SYNC_FLUSH}));else if(C==="br")v.push(ws.createBrotliDecompress({flush:ws.constants.BROTLI_OPERATION_FLUSH,finishFlush:ws.constants.BROTLI_OPERATION_FLUSH}));else if(C==="zstd"&&LCe)v.push(ws.createZstdDecompress({flush:ws.constants.ZSTD_e_continue,finishFlush:ws.constants.ZSTD_e_end}));else{v.length=0;break}}}let b=this.onError.bind(this);return Y({status:ee,statusText:ie,headersList:ce,body:v.length?_Ce(this.body,...v,c=>{c&&this.onError(c)}).on("error",b):this.body.on("error",b)}),!0},onData(ee){if(e.controller.dump)return;let j=ee;return s.encodedBodySize+=j.byteLength,this.body.push(j)},onComplete(){this.abort&&e.controller.off("terminated",this.abort),e.controller.ended=!0,this.body.push(null)},onError(ee){this.abort&&e.controller.off("terminated",this.abort),this.body?.destroy(ee),e.controller.terminate(ee),Z(ee)},onRequestUpgrade(ee,j,se,ie){if(ie.session!=null&&j!==200||ie.session==null&&j!==101)return!1;let ce=new zv;for(let[H,E]of Object.entries(se)){if(E==null)continue;let v=H.toLowerCase();if(Array.isArray(E))for(let b of E)ce.append(v,String(b),!0);else ce.append(v,String(E),!0)}return Y({status:j,statusText:Lq[j],headersList:ce,socket:ie}),!0},onUpgrade(ee,j,se){if(se.session!=null&&ee!==200||se.session==null&&ee!==101)return!1;let ie=new zv;for(let ce=0;ce<j.length;ce+=2)ie.append(Uq(j[ce]),j[ce+1].toString("latin1"),!0);return Y({status:ee,statusText:Lq[ee],headersList:ie,socket:se}),!0}}))}}Jq.exports={fetch:qCe,Fetch:Lm,fetching:Yq,finalizeAndReportTiming:qq}});var xl=hr(Gr());var YI={};MI(YI,{DH_CHECK_P_NOT_PRIME:()=>NZ,DH_CHECK_P_NOT_SAFE_PRIME:()=>TZ,DH_NOT_SUITABLE_GENERATOR:()=>FZ,DH_UNABLE_TO_CHECK_GENERATOR:()=>MZ,E2BIG:()=>Lz,EACCES:()=>Pz,EADDRINUSE:()=>Oz,EADDRNOTAVAIL:()=>Hz,EAFNOSUPPORT:()=>qz,EAGAIN:()=>Gz,EALREADY:()=>Yz,EBADF:()=>Wz,EBADMSG:()=>Vz,EBUSY:()=>Jz,ECANCELED:()=>jz,ECHILD:()=>zz,ECONNABORTED:()=>Kz,ECONNREFUSED:()=>Xz,ECONNRESET:()=>Zz,EDEADLK:()=>$z,EDESTADDRREQ:()=>eK,EDOM:()=>tK,EDQUOT:()=>rK,EEXIST:()=>nK,EFAULT:()=>iK,EFBIG:()=>sK,EHOSTUNREACH:()=>oK,EIDRM:()=>aK,EILSEQ:()=>AK,EINPROGRESS:()=>fK,EINTR:()=>uK,EINVAL:()=>cK,EIO:()=>lK,EISCONN:()=>hK,EISDIR:()=>dK,ELOOP:()=>gK,EMFILE:()=>pK,EMLINK:()=>EK,EMSGSIZE:()=>yK,EMULTIHOP:()=>mK,ENAMETOOLONG:()=>BK,ENETDOWN:()=>IK,ENETRESET:()=>bK,ENETUNREACH:()=>CK,ENFILE:()=>QK,ENGINE_METHOD_ALL:()=>RZ,ENGINE_METHOD_CIPHERS:()=>QZ,ENGINE_METHOD_DH:()=>BZ,ENGINE_METHOD_DIGESTS:()=>wZ,ENGINE_METHOD_DSA:()=>mZ,ENGINE_METHOD_ECDH:()=>bZ,ENGINE_METHOD_ECDSA:()=>CZ,ENGINE_METHOD_NONE:()=>DZ,ENGINE_METHOD_PKEY_ASN1_METHS:()=>vZ,ENGINE_METHOD_PKEY_METHS:()=>_Z,ENGINE_METHOD_RAND:()=>IZ,ENGINE_METHOD_STORE:()=>SZ,ENOBUFS:()=>wK,ENODATA:()=>SK,ENODEV:()=>_K,ENOENT:()=>vK,ENOEXEC:()=>RK,ENOLCK:()=>DK,ENOLINK:()=>TK,ENOMEM:()=>NK,ENOMSG:()=>MK,ENOPROTOOPT:()=>FK,ENOSPC:()=>kK,ENOSR:()=>xK,ENOSTR:()=>UK,ENOSYS:()=>LK,ENOTCONN:()=>PK,ENOTDIR:()=>OK,ENOTEMPTY:()=>HK,ENOTSOCK:()=>qK,ENOTSUP:()=>GK,ENOTTY:()=>YK,ENXIO:()=>WK,EOPNOTSUPP:()=>VK,EOVERFLOW:()=>JK,EPERM:()=>jK,EPIPE:()=>zK,EPROTO:()=>KK,EPROTONOSUPPORT:()=>XK,EPROTOTYPE:()=>ZK,ERANGE:()=>$K,EROFS:()=>eX,ESPIPE:()=>tX,ESRCH:()=>rX,ESTALE:()=>nX,ETIME:()=>iX,ETIMEDOUT:()=>sX,ETXTBSY:()=>oX,EWOULDBLOCK:()=>aX,EXDEV:()=>AX,F_OK:()=>WZ,NPN_ENABLED:()=>kZ,O_APPEND:()=>Bz,O_CREAT:()=>pz,O_DIRECTORY:()=>Iz,O_EXCL:()=>Ez,O_NOCTTY:()=>yz,O_NOFOLLOW:()=>bz,O_NONBLOCK:()=>wz,O_RDONLY:()=>sz,O_RDWR:()=>az,O_SYMLINK:()=>Qz,O_SYNC:()=>Cz,O_TRUNC:()=>mz,O_WRONLY:()=>oz,POINT_CONVERSION_COMPRESSED:()=>qZ,POINT_CONVERSION_HYBRID:()=>YZ,POINT_CONVERSION_UNCOMPRESSED:()=>GZ,RSA_NO_PADDING:()=>LZ,RSA_PKCS1_OAEP_PADDING:()=>PZ,RSA_PKCS1_PADDING:()=>xZ,RSA_PKCS1_PSS_PADDING:()=>HZ,RSA_SSLV23_PADDING:()=>UZ,RSA_X931_PADDING:()=>OZ,R_OK:()=>VZ,SIGABRT:()=>dX,SIGALRM:()=>CX,SIGBUS:()=>pX,SIGCHLD:()=>wX,SIGCONT:()=>SX,SIGFPE:()=>EX,SIGHUP:()=>fX,SIGILL:()=>lX,SIGINT:()=>uX,SIGIO:()=>UX,SIGIOT:()=>gX,SIGKILL:()=>yX,SIGPIPE:()=>bX,SIGPROF:()=>kX,SIGQUIT:()=>cX,SIGSEGV:()=>BX,SIGSTOP:()=>_X,SIGSYS:()=>LX,SIGTERM:()=>QX,SIGTRAP:()=>hX,SIGTSTP:()=>vX,SIGTTIN:()=>RX,SIGTTOU:()=>DX,SIGURG:()=>TX,SIGUSR1:()=>mX,SIGUSR2:()=>IX,SIGVTALRM:()=>FX,SIGWINCH:()=>xX,SIGXCPU:()=>NX,SIGXFSZ:()=>MX,SSL_OP_ALL:()=>PX,SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION:()=>OX,SSL_OP_CIPHER_SERVER_PREFERENCE:()=>HX,SSL_OP_CISCO_ANYCONNECT:()=>qX,SSL_OP_COOKIE_EXCHANGE:()=>GX,SSL_OP_CRYPTOPRO_TLSEXT_BUG:()=>YX,SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS:()=>WX,SSL_OP_EPHEMERAL_RSA:()=>VX,SSL_OP_LEGACY_SERVER_CONNECT:()=>JX,SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER:()=>jX,SSL_OP_MICROSOFT_SESS_ID_BUG:()=>zX,SSL_OP_MSIE_SSLV2_RSA_PADDING:()=>KX,SSL_OP_NETSCAPE_CA_DN_BUG:()=>XX,SSL_OP_NETSCAPE_CHALLENGE_BUG:()=>ZX,SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG:()=>$X,SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG:()=>eZ,SSL_OP_NO_COMPRESSION:()=>tZ,SSL_OP_NO_QUERY_MTU:()=>rZ,SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION:()=>nZ,SSL_OP_NO_SSLv2:()=>iZ,SSL_OP_NO_SSLv3:()=>sZ,SSL_OP_NO_TICKET:()=>oZ,SSL_OP_NO_TLSv1:()=>aZ,SSL_OP_NO_TLSv1_1:()=>AZ,SSL_OP_NO_TLSv1_2:()=>fZ,SSL_OP_PKCS1_CHECK_1:()=>uZ,SSL_OP_PKCS1_CHECK_2:()=>cZ,SSL_OP_SINGLE_DH_USE:()=>lZ,SSL_OP_SINGLE_ECDH_USE:()=>hZ,SSL_OP_SSLEAY_080_CLIENT_DH_BUG:()=>dZ,SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG:()=>gZ,SSL_OP_TLS_BLOCK_PADDING_BUG:()=>pZ,SSL_OP_TLS_D5_BUG:()=>EZ,SSL_OP_TLS_ROLLBACK_BUG:()=>yZ,S_IFBLK:()=>lz,S_IFCHR:()=>cz,S_IFDIR:()=>uz,S_IFIFO:()=>hz,S_IFLNK:()=>dz,S_IFMT:()=>Az,S_IFREG:()=>fz,S_IFSOCK:()=>gz,S_IRGRP:()=>Tz,S_IROTH:()=>kz,S_IRUSR:()=>_z,S_IRWXG:()=>Dz,S_IRWXO:()=>Fz,S_IRWXU:()=>Sz,S_IWGRP:()=>Nz,S_IWOTH:()=>xz,S_IWUSR:()=>vz,S_IXGRP:()=>Mz,S_IXOTH:()=>Uz,S_IXUSR:()=>Rz,UV_UDP_REUSEADDR:()=>zZ,W_OK:()=>JZ,X_OK:()=>jZ,default:()=>KZ});var sz=0,oz=1,az=2,Az=61440,fz=32768,uz=16384,cz=8192,lz=24576,hz=4096,dz=40960,gz=49152,pz=512,Ez=2048,yz=131072,mz=1024,Bz=8,Iz=1048576,bz=256,Cz=128,Qz=2097152,wz=4,Sz=448,_z=256,vz=128,Rz=64,Dz=56,Tz=32,Nz=16,Mz=8,Fz=7,kz=4,xz=2,Uz=1,Lz=7,Pz=13,Oz=48,Hz=49,qz=47,Gz=35,Yz=37,Wz=9,Vz=94,Jz=16,jz=89,zz=10,Kz=53,Xz=61,Zz=54,$z=11,eK=39,tK=33,rK=69,nK=17,iK=14,sK=27,oK=65,aK=90,AK=92,fK=36,uK=4,cK=22,lK=5,hK=56,dK=21,gK=62,pK=24,EK=31,yK=40,mK=95,BK=63,IK=50,bK=52,CK=51,QK=23,wK=55,SK=96,_K=19,vK=2,RK=8,DK=77,TK=97,NK=12,MK=91,FK=42,kK=28,xK=98,UK=99,LK=78,PK=57,OK=20,HK=66,qK=38,GK=45,YK=25,WK=6,VK=102,JK=84,jK=1,zK=32,KK=100,XK=43,ZK=41,$K=34,eX=30,tX=29,rX=3,nX=70,iX=101,sX=60,oX=26,aX=35,AX=18,fX=1,uX=2,cX=3,lX=4,hX=5,dX=6,gX=6,pX=10,EX=8,yX=9,mX=30,BX=11,IX=31,bX=13,CX=14,QX=15,wX=20,SX=19,_X=17,vX=18,RX=21,DX=22,TX=16,NX=24,MX=25,FX=26,kX=27,xX=28,UX=23,LX=12,PX=2147486719,OX=262144,HX=4194304,qX=32768,GX=8192,YX=2147483648,WX=2048,VX=0,JX=4,jX=32,zX=1,KX=0,XX=536870912,ZX=2,$X=1073741824,eZ=8,tZ=131072,rZ=4096,nZ=65536,iZ=16777216,sZ=33554432,oZ=16384,aZ=67108864,AZ=268435456,fZ=134217728,uZ=0,cZ=0,lZ=1048576,hZ=524288,dZ=128,gZ=0,pZ=512,EZ=256,yZ=8388608,mZ=2,BZ=4,IZ=8,bZ=16,CZ=32,QZ=64,wZ=128,SZ=256,_Z=512,vZ=1024,RZ=65535,DZ=0,TZ=2,NZ=1,MZ=4,FZ=8,kZ=1,xZ=1,UZ=2,LZ=3,PZ=4,OZ=5,HZ=6,qZ=2,GZ=4,YZ=6,WZ=0,VZ=4,JZ=2,jZ=1,zZ=4,KZ={O_RDONLY:sz,O_WRONLY:oz,O_RDWR:az,S_IFMT:Az,S_IFREG:fz,S_IFDIR:uz,S_IFCHR:cz,S_IFBLK:lz,S_IFIFO:hz,S_IFLNK:dz,S_IFSOCK:gz,O_CREAT:pz,O_EXCL:Ez,O_NOCTTY:yz,O_TRUNC:mz,O_APPEND:Bz,O_DIRECTORY:Iz,O_NOFOLLOW:bz,O_SYNC:Cz,O_SYMLINK:Qz,O_NONBLOCK:wz,S_IRWXU:Sz,S_IRUSR:_z,S_IWUSR:vz,S_IXUSR:Rz,S_IRWXG:Dz,S_IRGRP:Tz,S_IWGRP:Nz,S_IXGRP:Mz,S_IRWXO:Fz,S_IROTH:kz,S_IWOTH:xz,S_IXOTH:Uz,E2BIG:Lz,EACCES:Pz,EADDRINUSE:Oz,EADDRNOTAVAIL:Hz,EAFNOSUPPORT:qz,EAGAIN:Gz,EALREADY:Yz,EBADF:Wz,EBADMSG:Vz,EBUSY:Jz,ECANCELED:jz,ECHILD:zz,ECONNABORTED:Kz,ECONNREFUSED:Xz,ECONNRESET:Zz,EDEADLK:$z,EDESTADDRREQ:eK,EDOM:tK,EDQUOT:rK,EEXIST:nK,EFAULT:iK,EFBIG:sK,EHOSTUNREACH:oK,EIDRM:aK,EILSEQ:AK,EINPROGRESS:fK,EINTR:uK,EINVAL:cK,EIO:lK,EISCONN:hK,EISDIR:dK,ELOOP:gK,EMFILE:pK,EMLINK:EK,EMSGSIZE:yK,EMULTIHOP:mK,ENAMETOOLONG:BK,ENETDOWN:IK,ENETRESET:bK,ENETUNREACH:CK,ENFILE:QK,ENOBUFS:wK,ENODATA:SK,ENODEV:_K,ENOENT:vK,ENOEXEC:RK,ENOLCK:DK,ENOLINK:TK,ENOMEM:NK,ENOMSG:MK,ENOPROTOOPT:FK,ENOSPC:kK,ENOSR:xK,ENOSTR:UK,ENOSYS:LK,ENOTCONN:PK,ENOTDIR:OK,ENOTEMPTY:HK,ENOTSOCK:qK,ENOTSUP:GK,ENOTTY:YK,ENXIO:WK,EOPNOTSUPP:VK,EOVERFLOW:JK,EPERM:jK,EPIPE:zK,EPROTO:KK,EPROTONOSUPPORT:XK,EPROTOTYPE:ZK,ERANGE:$K,EROFS:eX,ESPIPE:tX,ESRCH:rX,ESTALE:nX,ETIME:iX,ETIMEDOUT:sX,ETXTBSY:oX,EWOULDBLOCK:aX,EXDEV:AX,SIGHUP:fX,SIGINT:uX,SIGQUIT:cX,SIGILL:lX,SIGTRAP:hX,SIGABRT:dX,SIGIOT:gX,SIGBUS:pX,SIGFPE:EX,SIGKILL:yX,SIGUSR1:mX,SIGSEGV:BX,SIGUSR2:IX,SIGPIPE:bX,SIGALRM:CX,SIGTERM:QX,SIGCHLD:wX,SIGCONT:SX,SIGSTOP:_X,SIGTSTP:vX,SIGTTIN:RX,SIGTTOU:DX,SIGURG:TX,SIGXCPU:NX,SIGXFSZ:MX,SIGVTALRM:FX,SIGPROF:kX,SIGWINCH:xX,SIGIO:UX,SIGSYS:LX,SSL_OP_ALL:PX,SSL_OP_ALLOW_UNSAFE_LEGACY_RENEGOTIATION:OX,SSL_OP_CIPHER_SERVER_PREFERENCE:HX,SSL_OP_CISCO_ANYCONNECT:qX,SSL_OP_COOKIE_EXCHANGE:GX,SSL_OP_CRYPTOPRO_TLSEXT_BUG:YX,SSL_OP_DONT_INSERT_EMPTY_FRAGMENTS:WX,SSL_OP_EPHEMERAL_RSA:VX,SSL_OP_LEGACY_SERVER_CONNECT:JX,SSL_OP_MICROSOFT_BIG_SSLV3_BUFFER:jX,SSL_OP_MICROSOFT_SESS_ID_BUG:zX,SSL_OP_MSIE_SSLV2_RSA_PADDING:KX,SSL_OP_NETSCAPE_CA_DN_BUG:XX,SSL_OP_NETSCAPE_CHALLENGE_BUG:ZX,SSL_OP_NETSCAPE_DEMO_CIPHER_CHANGE_BUG:$X,SSL_OP_NETSCAPE_REUSE_CIPHER_CHANGE_BUG:eZ,SSL_OP_NO_COMPRESSION:tZ,SSL_OP_NO_QUERY_MTU:rZ,SSL_OP_NO_SESSION_RESUMPTION_ON_RENEGOTIATION:nZ,SSL_OP_NO_SSLv2:iZ,SSL_OP_NO_SSLv3:sZ,SSL_OP_NO_TICKET:oZ,SSL_OP_NO_TLSv1:aZ,SSL_OP_NO_TLSv1_1:AZ,SSL_OP_NO_TLSv1_2:fZ,SSL_OP_PKCS1_CHECK_1:uZ,SSL_OP_PKCS1_CHECK_2:cZ,SSL_OP_SINGLE_DH_USE:lZ,SSL_OP_SINGLE_ECDH_USE:hZ,SSL_OP_SSLEAY_080_CLIENT_DH_BUG:dZ,SSL_OP_SSLREF2_REUSE_CERT_TYPE_BUG:gZ,SSL_OP_TLS_BLOCK_PADDING_BUG:pZ,SSL_OP_TLS_D5_BUG:EZ,SSL_OP_TLS_ROLLBACK_BUG:yZ,ENGINE_METHOD_DSA:mZ,ENGINE_METHOD_DH:BZ,ENGINE_METHOD_RAND:IZ,ENGINE_METHOD_ECDH:bZ,ENGINE_METHOD_ECDSA:CZ,ENGINE_METHOD_CIPHERS:QZ,ENGINE_METHOD_DIGESTS:wZ,ENGINE_METHOD_STORE:SZ,ENGINE_METHOD_PKEY_METHS:_Z,ENGINE_METHOD_PKEY_ASN1_METHS:vZ,ENGINE_METHOD_ALL:RZ,ENGINE_METHOD_NONE:DZ,DH_CHECK_P_NOT_SAFE_PRIME:TZ,DH_CHECK_P_NOT_PRIME:NZ,DH_UNABLE_TO_CHECK_GENERATOR:MZ,DH_NOT_SUITABLE_GENERATOR:FZ,NPN_ENABLED:kZ,RSA_PKCS1_PADDING:xZ,RSA_SSLV23_PADDING:UZ,RSA_NO_PADDING:LZ,RSA_PKCS1_OAEP_PADDING:PZ,RSA_X931_PADDING:OZ,RSA_PKCS1_PSS_PADDING:HZ,POINT_CONVERSION_COMPRESSED:qZ,POINT_CONVERSION_UNCOMPRESSED:GZ,POINT_CONVERSION_HYBRID:YZ,F_OK:WZ,R_OK:VZ,W_OK:JZ,X_OK:jZ,UV_UDP_REUSEADDR:zZ};var VCe=hr(Zi()),qg=hr(tT()),JCe=hr(VI());jI();ts();var jCe=hr(af()),wu=hr(kk()),JB=hr(Yr());var Wr=hr(Uk()),RC=class{constructor(){let t=new globalThis.TextEncoder,r=new Wr.TransformStream({transform(n,i){i.enqueue(t.encode(n))}});this.encoding="utf-8",this.readable=r.readable,this.writable=r.writable}},DC=class{constructor(t="utf-8",r=void 0){let n=new globalThis.TextDecoder(t,r),i=new Wr.TransformStream({transform(s,o){let a=n.decode(s,{stream:!0});a.length>0&&o.enqueue(a)},flush(s){let o=n.decode();o.length>0&&s.enqueue(o)}});this.encoding=n.encoding,this.fatal=n.fatal,this.ignoreBOM=n.ignoreBOM,this.readable=i.readable,this.writable=i.writable}},Jp=typeof globalThis.TextEncoderStream=="function"?globalThis.TextEncoderStream:RC,jp=typeof globalThis.TextDecoderStream=="function"?globalThis.TextDecoderStream:DC;typeof globalThis.ReadableStream>"u"&&(globalThis.ReadableStream=Wr.ReadableStream);typeof globalThis.WritableStream>"u"&&(globalThis.WritableStream=Wr.WritableStream);typeof globalThis.TransformStream>"u"&&(globalThis.TransformStream=Wr.TransformStream);typeof globalThis.TextEncoderStream>"u"&&(globalThis.TextEncoderStream=Jp);typeof globalThis.TextDecoderStream>"u"&&(globalThis.TextDecoderStream=jp);var Sg=hr(p6()),k1=hr(xv()),x1=hr(mm()),eB=hr(jq()),M2=hr(Wv()),yu=hr(dg()),mu=hr(Yv()),Bu=hr(Hv()),U1=hr(po());var BY=e=>{throw TypeError(e)},IY=(e,t,r)=>t.has(e)||BY("Cannot "+r),jt=(e,t,r)=>(IY(e,t,"read from private field"),r?r.call(e):t.get(e)),zq=(e,t,r)=>t.has(e)?BY("Cannot add the same private member more than once"):t instanceof WeakSet?t.add(e):t.set(e,r),Kq=(e,t,r,n)=>(IY(e,t,"write to private field"),n?n.call(e,r):t.set(e,r),r),Xq=globalThis.AbortController,Zq=globalThis.AbortSignal,L1=xl.Buffer??xl.default?.Buffer??xl.default;function Hm(e){return typeof e=="string"&&e.toLowerCase()==="base64url"?"base64":e}function zCe(e){return String(e).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/g,"")}function KCe(e){if(typeof e!="function"||e.__agentOSBase64UrlPatched)return;let t=typeof e.isEncoding=="function"?e.isEncoding.bind(e):null,r=typeof e.byteLength=="function"?e.byteLength.bind(e):null,n=typeof e.prototype?.toString=="function"?e.prototype.toString:null,i=typeof e.prototype?.write=="function"?e.prototype.write:null;e.isEncoding=function(o){return typeof o=="string"&&o.toLowerCase()==="base64url"||t?.(o)===!0},r&&(e.byteLength=function(o,a,...A){return r(o,Hm(a),...A)}),n&&(e.prototype.toString=function(o,...a){return typeof o=="string"&&o.toLowerCase()==="base64url"?zCe(n.call(this,"base64",...a)):n.call(this,o,...a)}),i&&(e.prototype.write=function(o,a,A,f){return typeof a=="string"?a=Hm(a):typeof A=="string"?A=Hm(A):typeof f=="string"&&(f=Hm(f)),i.call(this,o,a,A,f)}),e.__agentOSBase64UrlPatched=!0}KCe(L1);typeof L1=="function"&&(globalThis.Buffer=L1);var ml=JB.types??JB.default?.types,XCe=new Map([["[object Int8Array]",Int8Array],["[object Uint8Array]",Uint8Array],["[object Uint8ClampedArray]",Uint8ClampedArray],["[object Int16Array]",Int16Array],["[object Uint16Array]",Uint16Array],["[object Int32Array]",Int32Array],["[object Uint32Array]",Uint32Array],["[object Float32Array]",Float32Array],["[object Float64Array]",Float64Array],["[object BigInt64Array]",BigInt64Array],["[object BigUint64Array]",BigUint64Array]]);function $q(e="The object could not be cloned."){if(typeof globalThis.DOMException=="function")return new globalThis.DOMException(e,"DataCloneError");let t=new Error(e);return t.name="DataCloneError",t.code=25,t}function ZCe(e){let t=new ArrayBuffer(e.byteLength);return new Uint8Array(t).set(new Uint8Array(e)),t}function RA(e,t){if(e===null)return e;let r=typeof e;if(r==="function"||r==="symbol")throw $q();if(r!=="object")return e;let n=t.get(e);if(n!==void 0)return n;let i=Object.prototype.toString.call(e),s=XCe.get(i);if(s){let o=RA(e.buffer,t),a=new s(o,e.byteOffset,e.length);return t.set(e,a),a}if(i==="[object ArrayBuffer]"){let o=ZCe(e);return t.set(e,o),o}if(i==="[object DataView]"){let o=RA(e.buffer,t),a=new DataView(o,e.byteOffset,e.byteLength);return t.set(e,a),a}if(i==="[object Date]"){let o=new Date(e.getTime());return t.set(e,o),o}if(i==="[object RegExp]"){let o=new RegExp(e.source,e.flags);return o.lastIndex=e.lastIndex,t.set(e,o),o}if(i==="[object Map]"){let o=new Map;t.set(e,o);for(let[a,A]of e.entries())o.set(RA(a,t),RA(A,t));return o}if(i==="[object Set]"){let o=new Set;t.set(e,o);for(let a of e.values())o.add(RA(a,t));return o}if(i==="[object Array]"){let o=new Array(e.length);t.set(e,o);for(let a of Object.keys(e))o[a]=RA(e[a],t);return o}if(i==="[object Object]"){let o=Object.getPrototypeOf(e)===null?Object.create(null):{};t.set(e,o);for(let a of Object.keys(e))o[a]=RA(e[a],t);return o}throw $q()}function $Ce(e,t=void 0){return t!=null&&typeof t=="object"&&"transfer"in t&&t.transfer,RA(e,new Map)}if(ml&&typeof ml.isProxy!="function")ml.isProxy=()=>!1;else if(ml)try{ml.isProxy({})}catch{ml.isProxy=()=>!1}function eQe(e){if(typeof e=="boolean")return{capture:e,once:!1,passive:!1};if(e==null)return{capture:!1,once:!1,passive:!1};let t=Object(e);return{capture:!!t.capture,once:!!t.once,passive:!!t.passive,signal:t.signal}}function tQe(e){return typeof e=="boolean"?e:e==null?!1:!!Object(e).capture}function rQe(e){return typeof e=="object"&&e!==null&&"aborted"in e&&typeof e.addEventListener=="function"&&typeof e.removeEventListener=="function"}var wl,bY=(wl=class{constructor(e,t){y(this,"type");y(this,"bubbles");y(this,"cancelable");y(this,"composed");y(this,"detail",null);y(this,"defaultPrevented",!1);y(this,"target",null);y(this,"currentTarget",null);y(this,"eventPhase",0);y(this,"returnValue",!0);y(this,"cancelBubble",!1);y(this,"timeStamp",Date.now());y(this,"isTrusted",!1);y(this,"srcElement",null);y(this,"inPassiveListener",!1);y(this,"propagationStopped",!1);y(this,"immediatePropagationStopped",!1);if(arguments.length===0)throw new TypeError("The event type must be provided");let r=t==null?{}:Object(t);this.type=String(e),this.bubbles=!!r.bubbles,this.cancelable=!!r.cancelable,this.composed=!!r.composed}get[Symbol.toStringTag](){return"Event"}preventDefault(){this.cancelable&&!this.inPassiveListener&&(this.defaultPrevented=!0,this.returnValue=!1)}stopPropagation(){this.propagationStopped=!0,this.cancelBubble=!0}stopImmediatePropagation(){this.propagationStopped=!0,this.immediatePropagationStopped=!0,this.cancelBubble=!0}composedPath(){return this.target?[this.target]:[]}_setPassive(e){this.inPassiveListener=e}_isPropagationStopped(){return this.propagationStopped}_isImmediatePropagationStopped(){return this.immediatePropagationStopped}},y(wl,"NONE",0),y(wl,"CAPTURING_PHASE",1),y(wl,"AT_TARGET",2),y(wl,"BUBBLING_PHASE",3),wl),nQe=class extends bY{constructor(e,t){super(e,t);let r=t==null?null:Object(t);this.detail=r&&"detail"in r?r.detail:null}get[Symbol.toStringTag](){return"CustomEvent"}},iQe=class{constructor(){y(this,"listeners",new Map)}addEventListener(e,t,r){let n=eQe(r);if(n.signal!==void 0&&!rQe(n.signal))throw new TypeError('The "signal" option must be an instance of AbortSignal.');if(t==null||typeof t!="function"&&(typeof t!="object"||t===null)||n.signal?.aborted)return;let i=this.listeners.get(e)??[];if(i.find(a=>a.listener===t&&a.capture===n.capture))return;let o={listener:t,capture:n.capture,once:n.once,passive:n.passive,kind:typeof t=="function"?"function":"object",signal:n.signal};n.signal&&(o.abortListener=()=>{this.removeEventListener(e,t,n.capture)},n.signal.addEventListener("abort",o.abortListener,{once:!0})),i.push(o),this.listeners.set(e,i)}removeEventListener(e,t,r){if(t==null)return;let n=tQe(r),i=this.listeners.get(e);if(!i)return;let s=i.filter(o=>{let a=o.listener===t&&o.capture===n;return a&&o.signal&&o.abortListener&&o.signal.removeEventListener("abort",o.abortListener),!a});if(s.length===0){this.listeners.delete(e);return}this.listeners.set(e,s)}dispatchEvent(e){if(typeof e!="object"||e===null||typeof e.type!="string")throw new TypeError("Argument 1 must be an Event");let t=e,r=(this.listeners.get(t.type)??[]).slice();t.target=this,t.currentTarget=this,t.eventPhase=2;for(let n of r)if(this.listeners.get(t.type)?.includes(n)){if(n.once&&this.removeEventListener(t.type,n.listener,n.capture),t._setPassive(n.passive),n.kind==="function")n.listener.call(this,t);else{let s=n.listener.handleEvent;typeof s=="function"&&s.call(n.listener,t)}if(t._setPassive(!1),t._isImmediatePropagationStopped()||t._isPropagationStopped())break}return t.currentTarget=null,t.eventPhase=0,!t.defaultPrevented}},Ul=bY,F2=nQe,jB=iQe,Do=typeof Zq=="function"?Zq:class extends jB{constructor(){super(),this.aborted=!1,this.reason=void 0}throwIfAborted(){if(this.aborted)throw this.reason instanceof Error?this.reason:new Error(String(this.reason??"AbortError"))}},vu=typeof Xq=="function"?Xq:class{constructor(){this.signal=new Do}abort(e){this.signal.aborted||(this.signal.aborted=!0,this.signal.reason=e,this.signal.dispatchEvent(new Ul("abort")))}};function k2(e,t){if(typeof e=="function")try{e.name!==t&&Object.defineProperty(e,"name",{configurable:!0,value:t})}catch{}}k2(Do,"AbortSignal");k2(vu,"AbortController");try{let e=Object.getPrototypeOf(new vu().signal)?.constructor;k2(e,"AbortSignal")}catch{}try{globalThis.AbortSignal=Do}catch{}try{globalThis.AbortController=vu}catch{}function CY(e){if(e!==void 0)return e;if(typeof globalThis.DOMException=="function")return new globalThis.DOMException("This operation was aborted","AbortError");let t=new Error("This operation was aborted");return t.name="AbortError",t}function sQe(e){let t=new vu;return t.abort(CY(e)),t.signal}function oQe(e){if(typeof e!="number")throw new TypeError(`The "delay" argument must be of type number. Received ${typeof e}`);if(!Number.isFinite(e)||e<0)throw new RangeError(`The value of "delay" is out of range. It must be >= 0. Received ${String(e)}`);return Math.trunc(e)}typeof Do.abort!="function"&&Object.defineProperty(Do,"abort",{configurable:!0,writable:!0,value(e=void 0){return sQe(e)}});typeof Do.timeout!="function"&&Object.defineProperty(Do,"timeout",{configurable:!0,writable:!0,value(e){let t=oQe(e),r=new vu,n=setTimeout(()=>{r.abort(CY())},t);return typeof n?.unref=="function"&&n.unref(),r.signal.addEventListener("abort",()=>{clearTimeout(n)},{once:!0}),r.signal}});typeof Do.any!="function"&&Object.defineProperty(Do,"any",{configurable:!0,writable:!0,value(e){if(!e||typeof e[Symbol.iterator]!="function")throw new TypeError('The "signals" argument must be an iterable');let t=Array.from(e),r=new vu;if(t.length===0)return r.signal;let n=[],i=s=>{for(;n.length>0;){let[o,a]=n.pop();o.removeEventListener?.("abort",a)}r.abort(s.reason)};for(let s of t){if(!s||typeof s.aborted!="boolean"||typeof s.addEventListener!="function")throw new TypeError('The "signals" argument must contain AbortSignal instances');if(s.aborted)return i(s),r.signal;let o=()=>i(s);n.push([s,o]),s.addEventListener("abort",o,{once:!0})}return r.signal}});var aQe=class{constructor(e={}){this._sink=e}getWriter(){let e=this._sink;return{write(t){return Promise.resolve(typeof e.write=="function"?e.write(t):void 0)},close(){return Promise.resolve(typeof e.close=="function"?e.close():void 0)},releaseLock(){}}}},AQe=class{constructor(e={}){this._queue=[],this._pending=[],this._closed=!1,this._error=null;let t=()=>{for(;this._pending.length>0;){let n=this._pending.shift();if(this._error){n.reject(this._error);continue}if(this._queue.length>0){n.resolve({value:this._queue.shift(),done:!1});continue}if(this._closed){n.resolve({value:void 0,done:!0});continue}this._pending.unshift(n);break}},r={enqueue:n=>{this._closed||this._error||(this._queue.push(n),t())},close:()=>{this._closed||this._error||(this._closed=!0,t())},error:n=>{this._closed||this._error||(this._error=n instanceof Error?n:new Error(String(n)),t())}};typeof e.start=="function"&&Promise.resolve().then(()=>e.start(r)).catch(n=>r.error(n))}getReader(){return{read:()=>this._error?Promise.reject(this._error):this._queue.length>0?Promise.resolve({value:this._queue.shift(),done:!1}):this._closed?Promise.resolve({value:void 0,done:!0}):new Promise((e,t)=>{this._pending.push({resolve:e,reject:t})}),releaseLock(){}}}};function x2(e,t){return e.code=t,e}function fQe(e){return x2(new RangeError(`The "${e}" encoding is not supported`),"ERR_ENCODING_NOT_SUPPORTED")}function qi(e){return x2(new TypeError(`The encoded data was not valid for encoding ${e}`),"ERR_ENCODING_INVALID_ENCODED_DATA")}function uQe(){return x2(new TypeError('The "input" argument must be an instance of ArrayBuffer, SharedArrayBuffer, or ArrayBufferView.'),"ERR_INVALID_ARG_TYPE")}function cQe(e){return e.replace(/^[\t\n\f\r ]+|[\t\n\f\r ]+$/g,"")}function lQe(e){let t=cQe(e===void 0?"utf-8":String(e)).toLowerCase();switch(t){case"utf-8":case"utf8":case"unicode-1-1-utf-8":case"unicode11utf8":case"unicode20utf8":case"x-unicode20utf8":return"utf-8";case"utf-16":case"utf-16le":case"ucs-2":case"ucs2":case"csunicode":case"iso-10646-ucs-2":case"unicode":case"unicodefeff":return"utf-16le";case"utf-16be":case"unicodefffe":return"utf-16be";default:throw fQe(t)}}function hQe(e){if(e===void 0)return new Uint8Array(0);if(ArrayBuffer.isView(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);if(e instanceof ArrayBuffer)return new Uint8Array(e);if(typeof SharedArrayBuffer<"u"&&e instanceof SharedArrayBuffer)return new Uint8Array(e);throw uQe()}function qm(e,t){if(e<=127){t.push(e);return}if(e<=2047){t.push(192|e>>6,128|e&63);return}if(e<=65535){t.push(224|e>>12,128|e>>6&63,128|e&63);return}t.push(240|e>>18,128|e>>12&63,128|e>>6&63,128|e&63)}function eG(e=""){let t=String(e),r=[];for(let n=0;n<t.length;n+=1){let i=t.charCodeAt(n);if(i>=55296&&i<=56319){let s=n+1;if(s<t.length){let o=t.charCodeAt(s);if(o>=56320&&o<=57343){let a=65536+(i-55296<<10)+(o-56320);qm(a,r),n=s;continue}}qm(65533,r);continue}if(i>=56320&&i<=57343){qm(65533,r);continue}qm(i,r)}return new Uint8Array(r)}function QY(e,t){if(t<=65535){e.push(String.fromCharCode(t));return}let r=t-65536;e.push(String.fromCharCode(55296+(r>>10)),String.fromCharCode(56320+(r&1023)))}function n1(e){return e>=128&&e<=191}function dQe(e,t,r,n){let i=[];for(let s=0;s<e.length;){let o=e[s];if(o<=127){i.push(String.fromCharCode(o)),s+=1;continue}let a=0,A=0;if(o>=194&&o<=223)a=1,A=o&31;else if(o>=224&&o<=239)a=2,A=o&15;else if(o>=240&&o<=244)a=3,A=o&7;else{if(t)throw qi(n);i.push("\uFFFD"),s+=1;continue}if(s+a>=e.length){if(r)return{text:i.join(""),pending:Array.from(e.slice(s))};if(t)throw qi(n);i.push("\uFFFD");break}let f=e[s+1];if(!n1(f)){if(t)throw qi(n);i.push("\uFFFD"),s+=1;continue}if(o===224&&f<160||o===237&&f>159||o===240&&f<144||o===244&&f>143){if(t)throw qi(n);i.push("\uFFFD"),s+=1;continue}if(A=A<<6|f&63,a>=2){let l=e[s+2];if(!n1(l)){if(t)throw qi(n);i.push("\uFFFD"),s+=1;continue}A=A<<6|l&63}if(a===3){let l=e[s+3];if(!n1(l)){if(t)throw qi(n);i.push("\uFFFD"),s+=1;continue}A=A<<6|l&63}if(A>=55296&&A<=57343){if(t)throw qi(n);i.push("\uFFFD"),s+=a+1;continue}QY(i,A),s+=a+1}return{text:i.join(""),pending:[]}}function gQe(e,t,r,n,i){let s=[],o=t==="utf-16be"?"be":"le";!i&&t==="utf-16le"&&e.length>=2&&e[0]===254&&e[1]===255&&(o="be");for(let a=0;a<e.length;){if(a+1>=e.length){if(n)return{text:s.join(""),pending:Array.from(e.slice(a))};if(r)throw qi(t);s.push("\uFFFD");break}let A=e[a],f=e[a+1],l=o==="le"?A|f<<8:A<<8|f;if(a+=2,l>=55296&&l<=56319){if(a+1>=e.length){if(n)return{text:s.join(""),pending:Array.from(e.slice(a-2))};if(r)throw qi(t);s.push("\uFFFD");continue}let p=e[a],B=e[a+1],S=o==="le"?p|B<<8:p<<8|B;if(S>=56320&&S<=57343){let _=65536+(l-55296<<10)+(S-56320);QY(s,_),a+=2;continue}if(r)throw qi(t);s.push("\uFFFD");continue}if(l>=56320&&l<=57343){if(r)throw qi(t);s.push("\uFFFD");continue}s.push(String.fromCharCode(l))}return{text:s.join(""),pending:[]}}var pQe=class{encode(e=""){return eG(e)}encodeInto(e,t){let r=String(e),n=0,i=0;for(let s=0;s<r.length;s+=1){let o=r.charCodeAt(s),a="";if(o>=55296&&o<=56319&&s+1<r.length){let f=r.charCodeAt(s+1);f>=56320&&f<=57343&&(a=r.slice(s,s+2))}a===""&&(a=r[s]??"");let A=eG(a);if(i+A.length>t.length)break;t.set(A,i),i+=A.length,n+=a.length,a.length===2&&(s+=1)}return{read:n,written:i}}get encoding(){return"utf-8"}get[Symbol.toStringTag](){return"TextEncoder"}},EQe=class{constructor(e,t){y(this,"normalizedEncoding");y(this,"fatalFlag");y(this,"ignoreBOMFlag");y(this,"pendingBytes",[]);y(this,"bomSeen",!1);let r=t==null?{}:Object(t);this.normalizedEncoding=lQe(e),this.fatalFlag=!!r.fatal,this.ignoreBOMFlag=!!r.ignoreBOM}get encoding(){return this.normalizedEncoding}get fatal(){return this.fatalFlag}get ignoreBOM(){return this.ignoreBOMFlag}get[Symbol.toStringTag](){return"TextDecoder"}decode(e,t){let n=!!(t==null?{}:Object(t)).stream,i=hQe(e),s=new Uint8Array(this.pendingBytes.length+i.length);s.set(this.pendingBytes,0),s.set(i,this.pendingBytes.length);let o=this.normalizedEncoding==="utf-8"?dQe(s,this.fatalFlag,n,this.normalizedEncoding):gQe(s,this.normalizedEncoding,this.fatalFlag,n,this.bomSeen);this.pendingBytes=o.pending;let a=o.text;if(!this.bomSeen&&a.length>0&&(!this.ignoreBOMFlag&&a.charCodeAt(0)===65279&&(a=a.slice(1)),this.bomSeen=!0),!n&&this.pendingBytes.length>0){let A=this.pendingBytes;if(this.pendingBytes=[],this.fatalFlag)throw qi(this.normalizedEncoding);return a+"\uFFFD".repeat(Math.ceil(A.length/2))}return a}},U2=pQe,Ru=EQe;function ln(e,t){globalThis[e]=t}typeof globalThis.global>"u"&&ln("global",globalThis);if(typeof globalThis.RegExp=="function"&&!("__secureExecRgiEmojiCompat"in globalThis.RegExp)){let e=globalThis.RegExp,t="^\\p{RGI_Emoji}$",r="[\\u{00A9}\\u{00AE}\\u{203C}\\u{2049}\\u{2122}\\u{2139}\\u{2194}-\\u{21AA}\\u{231A}-\\u{23FF}\\u{24C2}\\u{25AA}-\\u{27BF}\\u{2934}-\\u{2935}\\u{2B05}-\\u{2B55}\\u{3030}\\u{303D}\\u{3297}\\u{3299}\\u{1F000}-\\u{1FAFF}]",n="[#*0-9]\\uFE0F?\\u20E3",i="^(?:"+n+"|\\p{Regional_Indicator}{2}|"+r+"(?:\\uFE0F|\\u200D(?:"+n+"|"+r+")|[\\u{1F3FB}-\\u{1F3FF}])*)$";try{new e(t,"v")}catch(s){if(String(s?.message??s).includes("RGI_Emoji")){let o=function(A,f){let l=A instanceof e&&f===void 0?A.source:String(A),p=f===void 0?A instanceof e?A.flags:"":String(f);try{return new e(A,f)}catch(B){if(l===t&&p==="v")return new e(i,"u");throw B}};Object.setPrototypeOf(o,e),o.prototype=e.prototype,Object.defineProperty(o.prototype,"constructor",{value:o,writable:!0,configurable:!0}),ln("RegExp",Object.assign(o,{__secureExecRgiEmojiCompat:!0}))}}}ln("TextEncoder",U2);ln("TextDecoder",Ru);ln("Event",Ul);ln("CustomEvent",F2);ln("EventTarget",jB);ln("AbortSignal",Do);ln("AbortController",vu);ln("structuredClone",$Ce);globalThis.WebAssembly&&typeof globalThis.WebAssembly.instantiateStreaming!="function"&&(globalThis.WebAssembly.instantiateStreaming=async function(t,r){let n=await t;if(n==null||typeof n.arrayBuffer!="function")throw new TypeError("WebAssembly.instantiateStreaming requires a Response or promise for one");let i=new Uint8Array(await n.arrayBuffer());return globalThis.WebAssembly.instantiate(i,r)});ln("ReadableStream",typeof Wr.ReadableStream=="function"?Wr.ReadableStream:AQe);ln("WritableStream",typeof Wr.WritableStream=="function"?Wr.WritableStream:aQe);typeof Wr.TransformStream=="function"&&ln("TransformStream",Wr.TransformStream);typeof Jp=="function"&&ln("TextEncoderStream",Jp);typeof jp=="function"&&ln("TextDecoderStream",jp);var lu=U1.default?.webidl??U1.default;lu?.is&&(lu.is.ReadableStream=e=>e!=null&&(e instanceof globalThis.ReadableStream||typeof e.getReader=="function"),lu.is.AbortSignal=e=>e!=null&&(e instanceof globalThis.AbortSignal||typeof e.aborted=="boolean"&&typeof e.addEventListener=="function"));lu?.converters?.AbortSignal&&(lu.converters.AbortSignal=(e,...t)=>e!=null&&(e instanceof globalThis.AbortSignal||typeof e.aborted=="boolean"&&typeof e.addEventListener=="function")?e:lu.interfaceConverter(lu.is.AbortSignal,"AbortSignal")(e,...t));var wY=[{name:"_processConfig",c:"h"},{name:"__secureExecHrNowUs",c:"h"},{name:"process.cpuUsage",c:"h"},{name:"process.memoryUsage",c:"h"},{name:"process.resourceUsage",c:"h"},{name:"process.versions",c:"h"},{name:"_processKill",c:"h"},{name:"_processSignalState",c:"h"},{name:"_osConfig",c:"h"},{name:"bridge",c:"h"},{name:"_registerHandle",c:"h"},{name:"_unregisterHandle",c:"h"},{name:"_waitForActiveHandles",c:"h"},{name:"_getActiveHandles",c:"h"},{name:"_childProcessDispatch",c:"h"},{name:"_childProcessModule",c:"h"},{name:"_osModule",c:"h"},{name:"_moduleModule",c:"h"},{name:"_httpModule",c:"h"},{name:"_httpsModule",c:"h"},{name:"_http2Module",c:"h"},{name:"_dnsModule",c:"h"},{name:"_dgramModule",c:"h"},{name:"_netModule",c:"h"},{name:"_tlsModule",c:"h"},{name:"_vmCreateContext",c:"h"},{name:"_vmRunInContext",c:"h"},{name:"_vmRunInThisContext",c:"h"},{name:"_netSocketDispatch",c:"h"},{name:"_dgramSocketDispatch",c:"h"},{name:"_http2RetainDispatch",c:"h"},{name:"_httpServerDispatch",c:"h"},{name:"_httpServerUpgradeDispatch",c:"h"},{name:"_httpServerConnectDispatch",c:"h"},{name:"_http2Dispatch",c:"h"},{name:"_timerDispatch",c:"h"},{name:"_drainImmediates",c:"h"},{name:"_getPendingImmediateCount",c:"h"},{name:"_upgradeSocketData",c:"h"},{name:"_upgradeSocketEnd",c:"h"},{name:"ProcessExitError",c:"h"},{name:"_log",c:"h"},{name:"_error",c:"h"},{name:"_pythonRpc",c:"h"},{name:"_pythonStdinRead",c:"h"},{name:"_loadPolyfill",c:"h"},{name:"_resolveModule",c:"h"},{name:"_loadFile",c:"h"},{name:"_resolveModuleSync",c:"h"},{name:"_loadFileSync",c:"h"},{name:"_moduleFormat",c:"h"},{name:"_scheduleTimer",c:"h"},{name:"_cryptoRandomFill",c:"h"},{name:"_cryptoRandomUUID",c:"h"},{name:"_cryptoHashDigest",c:"h"},{name:"_cryptoHmacDigest",c:"h"},{name:"_cryptoPbkdf2",c:"h"},{name:"_cryptoScrypt",c:"h"},{name:"_cryptoCipheriv",c:"h"},{name:"_cryptoDecipheriv",c:"h"},{name:"_cryptoCipherivCreate",c:"h"},{name:"_cryptoCipherivUpdate",c:"h"},{name:"_cryptoCipherivFinal",c:"h"},{name:"_cryptoSign",c:"h"},{name:"_cryptoVerify",c:"h"},{name:"_cryptoAsymmetricOp",c:"h"},{name:"_cryptoCreateKeyObject",c:"h"},{name:"_cryptoGenerateKeyPairSync",c:"h"},{name:"_cryptoGenerateKeySync",c:"h"},{name:"_cryptoGeneratePrimeSync",c:"h"},{name:"_cryptoDiffieHellman",c:"h"},{name:"_cryptoDiffieHellmanGroup",c:"h"},{name:"_cryptoDiffieHellmanSessionCreate",c:"h"},{name:"_cryptoDiffieHellmanSessionCall",c:"h"},{name:"_cryptoDiffieHellmanSessionDestroy",c:"h"},{name:"_cryptoSubtle",c:"h"},{name:"_benchNoop",c:"h"},{name:"_fsReadFile",c:"h"},{name:"_fsReadFileAsync",c:"h"},{name:"_fsWriteFile",c:"h"},{name:"_fsWriteFileAsync",c:"h"},{name:"_fsReadFileBinary",c:"h"},{name:"_fsReadFileBinaryAsync",c:"h"},{name:"_fsWriteFileBinary",c:"h"},{name:"_fsWriteFileBinaryRaw",c:"h"},{name:"_fsWriteFileBinaryAsync",c:"h"},{name:"_fsReadDir",c:"h"},{name:"_fsReadDirAsync",c:"h"},{name:"_fsMkdir",c:"h"},{name:"_fsMkdirAsync",c:"h"},{name:"_fsRmdir",c:"h"},{name:"_fsRmdirAsync",c:"h"},{name:"_fsExists",c:"h"},{name:"_fsAccessAsync",c:"h"},{name:"_fsStat",c:"h"},{name:"_fsStatAsync",c:"h"},{name:"_fsUnlink",c:"h"},{name:"_fsUnlinkAsync",c:"h"},{name:"_fsRename",c:"h"},{name:"_fsRenameAsync",c:"h"},{name:"_fsChmod",c:"h"},{name:"_fsChmodAsync",c:"h"},{name:"_fsChown",c:"h"},{name:"_fsChownAsync",c:"h"},{name:"_fsLink",c:"h"},{name:"_fsLinkAsync",c:"h"},{name:"_fsSymlink",c:"h"},{name:"_fsSymlinkAsync",c:"h"},{name:"_fsReadlink",c:"h"},{name:"_fsReadlinkAsync",c:"h"},{name:"_fsLstat",c:"h"},{name:"_fsLstatAsync",c:"h"},{name:"_fsTruncate",c:"h"},{name:"_fsTruncateAsync",c:"h"},{name:"_fsUtimes",c:"h"},{name:"_fsLutimes",c:"h"},{name:"_fsUtimesAsync",c:"h"},{name:"_fsLutimesAsync",c:"h"},{name:"fs.futimesSync",c:"h"},{name:"fs.openSync",c:"h"},{name:"fs.closeSync",c:"h"},{name:"fs.readSync",c:"h"},{name:"_fsReadRaw",c:"h"},{name:"fs.writeSync",c:"h"},{name:"_fsWriteRaw",c:"h"},{name:"_fsWritevRaw",c:"h"},{name:"fs.fstatSync",c:"h"},{name:"_fs",c:"h"},{name:"_childProcessSpawnStart",c:"h"},{name:"_childProcessPoll",c:"h"},{name:"_childProcessStdinWrite",c:"h"},{name:"_childProcessStdinClose",c:"h"},{name:"_childProcessKill",c:"h"},{name:"_childProcessSpawnSync",c:"h"},{name:"_benchNetTcpMetricsResetRaw",c:"h"},{name:"_benchNetTcpMetricsSnapshotRaw",c:"h"},{name:"_networkDnsLookupRaw",c:"h"},{name:"_networkDnsLookupSyncRaw",c:"h"},{name:"_networkDnsResolveRaw",c:"h"},{name:"_networkHttpServerListenRaw",c:"h"},{name:"_networkHttpServerCloseRaw",c:"h"},{name:"_networkHttpServerRespondRaw",c:"h"},{name:"_networkHttpServerRequestRaw",c:"h"},{name:"_networkHttpServerWaitRaw",c:"h"},{name:"_networkHttp2ServerListenRaw",c:"h"},{name:"_networkHttp2ServerCloseRaw",c:"h"},{name:"_networkHttp2ServerWaitRaw",c:"h"},{name:"_networkHttp2SessionConnectRaw",c:"h"},{name:"_networkHttp2SessionRequestRaw",c:"h"},{name:"_networkHttp2SessionSettingsRaw",c:"h"},{name:"_networkHttp2SessionSetLocalWindowSizeRaw",c:"h"},{name:"_networkHttp2SessionGoawayRaw",c:"h"},{name:"_networkHttp2SessionCloseRaw",c:"h"},{name:"_networkHttp2SessionDestroyRaw",c:"h"},{name:"_networkHttp2SessionWaitRaw",c:"h"},{name:"_networkHttp2ServerPollRaw",c:"h"},{name:"_networkHttp2SessionPollRaw",c:"h"},{name:"_networkHttp2StreamRespondRaw",c:"h"},{name:"_networkHttp2StreamPushStreamRaw",c:"h"},{name:"_networkHttp2StreamWriteRaw",c:"h"},{name:"_networkHttp2StreamEndRaw",c:"h"},{name:"_networkHttp2StreamCloseRaw",c:"h"},{name:"_networkHttp2StreamPauseRaw",c:"h"},{name:"_networkHttp2StreamResumeRaw",c:"h"},{name:"_networkHttp2StreamRespondWithFileRaw",c:"h"},{name:"_networkHttp2ServerRespondRaw",c:"h"},{name:"_upgradeSocketWriteRaw",c:"h"},{name:"_upgradeSocketEndRaw",c:"h"},{name:"_upgradeSocketDestroyRaw",c:"h"},{name:"_netSocketConnectRaw",c:"h"},{name:"_netSocketPollRaw",c:"h"},{name:"_netSocketWaitConnectRaw",c:"h"},{name:"_netSocketReadRaw",c:"h"},{name:"_netSocketSetNoDelayRaw",c:"h"},{name:"_netSocketSetKeepAliveRaw",c:"h"},{name:"_netSocketWriteRaw",c:"h"},{name:"_netSocketEndRaw",c:"h"},{name:"_netSocketDestroyRaw",c:"h"},{name:"_netSocketUpgradeTlsRaw",c:"h"},{name:"_netSocketGetTlsClientHelloRaw",c:"h"},{name:"_netSocketTlsQueryRaw",c:"h"},{name:"_tlsGetCiphersRaw",c:"h"},{name:"_netReserveTcpPortRaw",c:"h"},{name:"_netReleaseTcpPortRaw",c:"h"},{name:"_netServerListenRaw",c:"h"},{name:"_netServerAcceptRaw",c:"h"},{name:"_netServerCloseRaw",c:"h"},{name:"_dgramSocketCreateRaw",c:"h"},{name:"_dgramSocketBindRaw",c:"h"},{name:"_dgramSocketRecvRaw",c:"h"},{name:"_dgramSocketSendRaw",c:"h"},{name:"_dgramSocketCloseRaw",c:"h"},{name:"_dgramSocketAddressRaw",c:"h"},{name:"_dgramSocketSetBufferSizeRaw",c:"h"},{name:"_dgramSocketGetBufferSizeRaw",c:"h"},{name:"_sqliteConstantsRaw",c:"h"},{name:"_sqliteDatabaseOpenRaw",c:"h"},{name:"_sqliteDatabaseCloseRaw",c:"h"},{name:"_sqliteDatabaseExecRaw",c:"h"},{name:"_sqliteDatabaseQueryRaw",c:"h"},{name:"_sqliteDatabasePrepareRaw",c:"h"},{name:"_sqliteDatabaseLocationRaw",c:"h"},{name:"_sqliteDatabaseCheckpointRaw",c:"h"},{name:"_sqliteStatementRunRaw",c:"h"},{name:"_sqliteStatementGetRaw",c:"h"},{name:"_sqliteStatementAllRaw",c:"h"},{name:"_sqliteStatementColumnsRaw",c:"h"},{name:"_sqliteStatementSetReturnArraysRaw",c:"h"},{name:"_sqliteStatementSetReadBigIntsRaw",c:"h"},{name:"_sqliteStatementSetAllowBareNamedParametersRaw",c:"h"},{name:"_sqliteStatementSetAllowUnknownNamedParametersRaw",c:"h"},{name:"_sqliteStatementFinalizeRaw",c:"h"},{name:"_batchResolveModules",c:"h"},{name:"_kernelPollRaw",c:"h"},{name:"_kernelIsattyRaw",c:"h"},{name:"_kernelTtySizeRaw",c:"h"},{name:"_kernelStdioWriteRaw",c:"h"},{name:"_kernelStdinReadRaw",c:"h"},{name:"_kernelStdinRead",c:"h"},{name:"_ptySetRawMode",c:"h"},{name:"require",c:"h"},{name:"_requireFrom",c:"h"},{name:"_dynamicImport",c:"h"},{name:"__dynamicImport",c:"h"},{name:"_moduleCache",c:"h"},{name:"_pendingModules",c:"m"},{name:"_currentModule",c:"m"},{name:"_stdinData",c:"m"},{name:"_stdinPosition",c:"m"},{name:"_stdinEnded",c:"m"},{name:"_stdinFlowMode",c:"m"},{name:"module",c:"m"},{name:"exports",c:"m"},{name:"__filename",c:"m"},{name:"__dirname",c:"m"},{name:"fetch",c:"h"},{name:"Headers",c:"h"},{name:"Request",c:"h"},{name:"Response",c:"h"},{name:"DOMException",c:"h"},{name:"__importMetaResolve",c:"h"},{name:"Blob",c:"h"},{name:"File",c:"h"},{name:"FormData",c:"h"}],gke=wY.filter(e=>e.c==="h").map(e=>e.name),pke=wY.filter(e=>e.c==="m").map(e=>e.name);function SY(e,t,r,n={}){let i=n.mutable===!0,s=n.enumerable!==!1;Object.defineProperty(e,t,{value:r,writable:i,configurable:!0,enumerable:s})}function Ge(e,t){SY(globalThis,e,t)}function Du(e,t){SY(globalThis,e,t,{mutable:!0})}function yQe(e){return JSON.stringify(e,(t,r)=>r===void 0?{__secureExecDispatchType:"undefined"}:r)}function mQe(e,t){return`__bd:${e}:${yQe(t)}`}function BQe(e){if(e===null)return;let t=JSON.parse(e);if(t.__bd_error){let r=new Error(t.__bd_error.message);throw r.name=t.__bd_error.name??"Error",t.__bd_error.code!==void 0&&(r.code=t.__bd_error.code),t.__bd_error.stack&&(r.stack=t.__bd_error.stack),r}return t.__bd_result}function IQe(){if(!_loadPolyfill)throw new Error("_loadPolyfill is not available in sandbox");return _loadPolyfill}function s0(e,...t){let r=IQe();return BQe(r.applySyncPromise(void 0,[mQe(e,t)]))}var bQe=Object.create,L2=Object.defineProperty,CQe=Object.getOwnPropertyDescriptor,_Y=Object.getOwnPropertyNames,QQe=Object.getPrototypeOf,wQe=Object.prototype.hasOwnProperty,P2=(e,t)=>function(){return t||(0,e[_Y(e)[0]])((t={exports:{}}).exports,t),t.exports},O2=(e,t)=>{for(var r in t)L2(e,r,{get:t[r],enumerable:!0})},SQe=(e,t,r,n)=>{if(t&&typeof t=="object"||typeof t=="function")for(let i of _Y(t))!wQe.call(e,i)&&i!==r&&L2(e,i,{get:()=>t[i],enumerable:!(n=CQe(t,i))||n.enumerable});return e},H2=(e,t,r)=>(r=e!=null?bQe(QQe(e)):{},SQe(t||!e||!e.__esModule?L2(r,"default",{value:e,enumerable:!0}):r,e));var vY=P2({"../../../tmp/buffer-build/node_modules/base64-js/index.js"(e){"use strict";e.byteLength=A,e.toByteArray=l,e.fromByteArray=S;var t=[],r=[],n=typeof Uint8Array<"u"?Uint8Array:Array,i="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";for(s=0,o=i.length;s<o;++s)t[s]=i[s],r[i.charCodeAt(s)]=s;var s,o;r[45]=62,r[95]=63;function a(_){var N=_.length;if(N%4>0)throw new Error("Invalid string. Length must be a multiple of 4");var P=_.indexOf("=");P===-1&&(P=N);var U=P===N?0:4-P%4;return[P,U]}function A(_){var N=a(_),P=N[0],U=N[1];return(P+U)*3/4-U}function f(_,N,P){return(N+P)*3/4-P}function l(_){var N,P=a(_),U=P[0],G=P[1],Y=new n(f(_,U,G)),Z=0,ee=G>0?U-4:U,j;for(j=0;j<ee;j+=4)N=r[_.charCodeAt(j)]<<18|r[_.charCodeAt(j+1)]<<12|r[_.charCodeAt(j+2)]<<6|r[_.charCodeAt(j+3)],Y[Z++]=N>>16&255,Y[Z++]=N>>8&255,Y[Z++]=N&255;return G===2&&(N=r[_.charCodeAt(j)]<<2|r[_.charCodeAt(j+1)]>>4,Y[Z++]=N&255),G===1&&(N=r[_.charCodeAt(j)]<<10|r[_.charCodeAt(j+1)]<<4|r[_.charCodeAt(j+2)]>>2,Y[Z++]=N>>8&255,Y[Z++]=N&255),Y}function p(_){return t[_>>18&63]+t[_>>12&63]+t[_>>6&63]+t[_&63]}function B(_,N,P){for(var U,G=[],Y=N;Y<P;Y+=3)U=(_[Y]<<16&16711680)+(_[Y+1]<<8&65280)+(_[Y+2]&255),G.push(p(U));return G.join("")}function S(_){for(var N,P=_.length,U=P%3,G=[],Y=16383,Z=0,ee=P-U;Z<ee;Z+=Y)G.push(B(_,Z,Z+Y>ee?ee:Z+Y));return U===1?(N=_[P-1],G.push(t[N>>2]+t[N<<4&63]+"==")):U===2&&(N=(_[P-2]<<8)+_[P-1],G.push(t[N>>10]+t[N>>4&63]+t[N<<2&63]+"=")),G.join("")}}}),_Qe=P2({"../../../tmp/buffer-build/node_modules/ieee754/index.js"(e){e.read=function(t,r,n,i,s){var o,a,A=s*8-i-1,f=(1<<A)-1,l=f>>1,p=-7,B=n?s-1:0,S=n?-1:1,_=t[r+B];for(B+=S,o=_&(1<<-p)-1,_>>=-p,p+=A;p>0;o=o*256+t[r+B],B+=S,p-=8);for(a=o&(1<<-p)-1,o>>=-p,p+=i;p>0;a=a*256+t[r+B],B+=S,p-=8);if(o===0)o=1-l;else{if(o===f)return a?NaN:(_?-1:1)*(1/0);a=a+Math.pow(2,i),o=o-l}return(_?-1:1)*a*Math.pow(2,o-i)},e.write=function(t,r,n,i,s,o){var a,A,f,l=o*8-s-1,p=(1<<l)-1,B=p>>1,S=s===23?Math.pow(2,-24)-Math.pow(2,-77):0,_=i?0:o-1,N=i?1:-1,P=r<0||r===0&&1/r<0?1:0;for(r=Math.abs(r),isNaN(r)||r===1/0?(A=isNaN(r)?1:0,a=p):(a=Math.floor(Math.log(r)/Math.LN2),r*(f=Math.pow(2,-a))<1&&(a--,f*=2),a+B>=1?r+=S/f:r+=S*Math.pow(2,1-B),r*f>=2&&(a++,f/=2),a+B>=p?(A=0,a=p):a+B>=1?(A=(r*f-1)*Math.pow(2,s),a=a+B):(A=r*Math.pow(2,B-1)*Math.pow(2,s),a=0));s>=8;t[n+_]=A&255,_+=N,A/=256,s-=8);for(a=a<<s|A,l+=s;l>0;t[n+_]=a&255,_+=N,a/=256,l-=8);t[n+_-N]|=P*128}}}),q2=P2({"../../../tmp/buffer-build/node_modules/buffer/index.js"(e){"use strict";var t=vY(),r=_Qe(),n=typeof Symbol=="function"&&typeof Symbol.for=="function"?Symbol.for("nodejs.util.inspect.custom"):null;e.Buffer=a,e.SlowBuffer=G,e.INSPECT_MAX_BYTES=50;var i=2147483647;e.kMaxLength=i,a.TYPED_ARRAY_SUPPORT=s(),!a.TYPED_ARRAY_SUPPORT&&typeof console<"u"&&typeof console.error=="function"&&console.error("This browser lacks typed array (Uint8Array) support which is required by `buffer` v5.x. Use `buffer` v4.x if you require old browser support.");function s(){try{let F=new Uint8Array(1),m={foo:function(){return 42}};return Object.setPrototypeOf(m,Uint8Array.prototype),Object.setPrototypeOf(F,m),F.foo()===42}catch{return!1}}Object.defineProperty(a.prototype,"parent",{enumerable:!0,get:function(){if(a.isBuffer(this))return this.buffer}}),Object.defineProperty(a.prototype,"offset",{enumerable:!0,get:function(){if(a.isBuffer(this))return this.byteOffset}});function o(F){if(F>i)throw new RangeError('The value "'+F+'" is invalid for option "size"');let m=new Uint8Array(F);return Object.setPrototypeOf(m,a.prototype),m}function a(F,m,Q){if(typeof F=="number"){if(typeof m=="string")throw new TypeError('The "string" argument must be of type string. Received type number');return p(F)}return A(F,m,Q)}a.poolSize=8192;function A(F,m,Q){if(typeof F=="string")return B(F,m);if(ArrayBuffer.isView(F))return _(F);if(F==null)throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof F);if(Re(F,ArrayBuffer)||F&&Re(F.buffer,ArrayBuffer)||typeof SharedArrayBuffer<"u"&&(Re(F,SharedArrayBuffer)||F&&Re(F.buffer,SharedArrayBuffer)))return N(F,m,Q);if(typeof F=="number")throw new TypeError('The "value" argument must not be of type number. Received type number');let L=F.valueOf&&F.valueOf();if(L!=null&&L!==F)return a.from(L,m,Q);let W=P(F);if(W)return W;if(typeof Symbol<"u"&&Symbol.toPrimitive!=null&&typeof F[Symbol.toPrimitive]=="function")return a.from(F[Symbol.toPrimitive]("string"),m,Q);throw new TypeError("The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof F)}a.from=function(F,m,Q){return A(F,m,Q)},Object.setPrototypeOf(a.prototype,Uint8Array.prototype),Object.setPrototypeOf(a,Uint8Array);function f(F){if(typeof F!="number")throw new TypeError('"size" argument must be of type number');if(F<0)throw new RangeError('The value "'+F+'" is invalid for option "size"')}function l(F,m,Q){return f(F),F<=0?o(F):m!==void 0?typeof Q=="string"?o(F).fill(m,Q):o(F).fill(m):o(F)}a.alloc=function(F,m,Q){return l(F,m,Q)};function p(F){return f(F),o(F<0?0:U(F)|0)}a.allocUnsafe=function(F){return p(F)},a.allocUnsafeSlow=function(F){return p(F)};function B(F,m){if((typeof m!="string"||m==="")&&(m="utf8"),!a.isEncoding(m))throw new TypeError("Unknown encoding: "+m);let Q=Y(F,m)|0,L=o(Q),W=L.write(F,m);return W!==Q&&(L=L.slice(0,W)),L}function S(F){let m=F.length<0?0:U(F.length)|0,Q=o(m);for(let L=0;L<m;L+=1)Q[L]=F[L]&255;return Q}function _(F){if(Re(F,Uint8Array)){let m=new Uint8Array(F);return N(m.buffer,m.byteOffset,m.byteLength)}return S(F)}function N(F,m,Q){if(m<0||F.byteLength<m)throw new RangeError('"offset" is outside of buffer bounds');if(F.byteLength<m+(Q||0))throw new RangeError('"length" is outside of buffer bounds');let L;return m===void 0&&Q===void 0?L=new Uint8Array(F):Q===void 0?L=new Uint8Array(F,m):L=new Uint8Array(F,m,Q),Object.setPrototypeOf(L,a.prototype),L}function P(F){if(a.isBuffer(F)){let m=U(F.length)|0,Q=o(m);return Q.length===0||F.copy(Q,0,0,m),Q}if(F.length!==void 0)return typeof F.length!="number"||He(F.length)?o(0):S(F);if(F.type==="Buffer"&&Array.isArray(F.data))return S(F.data)}function U(F){if(F>=i)throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x"+i.toString(16)+" bytes");return F|0}function G(F){return+F!=F&&(F=0),a.alloc(+F)}a.isBuffer=function(m){return m!=null&&m._isBuffer===!0&&m!==a.prototype},a.compare=function(m,Q){if(Re(m,Uint8Array)&&(m=a.from(m,m.offset,m.byteLength)),Re(Q,Uint8Array)&&(Q=a.from(Q,Q.offset,Q.byteLength)),!a.isBuffer(m)||!a.isBuffer(Q))throw new TypeError('The "buf1", "buf2" arguments must be one of type Buffer or Uint8Array');if(m===Q)return 0;let L=m.length,W=Q.length;for(let z=0,ae=Math.min(L,W);z<ae;++z)if(m[z]!==Q[z]){L=m[z],W=Q[z];break}return L<W?-1:W<L?1:0},a.isEncoding=function(m){switch(String(m).toLowerCase()){case"hex":case"utf8":case"utf-8":case"ascii":case"latin1":case"binary":case"base64":case"base64url":case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return!0;default:return!1}},a.concat=function(m,Q){if(!Array.isArray(m))throw new TypeError('"list" argument must be an Array of Buffers');if(m.length===0)return a.alloc(0);let L;if(Q===void 0)for(Q=0,L=0;L<m.length;++L)Q+=m[L].length;let W=a.alloc(Q),z=0;for(L=0;L<m.length;++L){let ae=m[L];if(!Re(ae,Uint8Array))throw new TypeError('"list" argument must be an Array of Buffers');if(a.isBuffer(ae)||(ae=a.from(ae)),z>=W.length)break;let le=W.length-z,ye=ae.length>le?le:ae.length;Uint8Array.prototype.set.call(W,ae.subarray(0,ye),z),z+=ye}return W};function Y(F,m){if(a.isBuffer(F))return F.length;if(ArrayBuffer.isView(F)||Re(F,ArrayBuffer))return F.byteLength;if(typeof F!="string")throw new TypeError('The "string" argument must be one of type string, Buffer, or ArrayBuffer. Received type '+typeof F);let Q=F.length,L=arguments.length>2&&arguments[2]===!0;if(!L&&Q===0)return 0;let W=!1;for(;;)switch(m){case"ascii":case"latin1":case"binary":return Q;case"utf8":case"utf-8":return xe(F).length;case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return Q*2;case"hex":return Q>>>1;case"base64":case"base64url":return De(F).length;default:if(W)return L?-1:xe(F).length;m=(""+m).toLowerCase(),W=!0}}a.byteLength=Y;function Z(F,m,Q){let L=!1;if((m===void 0||m<0)&&(m=0),m>this.length||((Q===void 0||Q>this.length)&&(Q=this.length),Q<=0)||(Q>>>=0,m>>>=0,Q<=m))return"";for(F||(F="utf8");;)switch(F){case"hex":return D(this,m,Q);case"utf8":case"utf-8":return g(this,m,Q);case"ascii":return C(this,m,Q);case"latin1":case"binary":return h(this,m,Q);case"base64":return b(this,m,Q);case"base64url":return c(this,m,Q);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return M(this,m,Q);default:if(L)throw new TypeError("Unknown encoding: "+F);F=(F+"").toLowerCase(),L=!0}}a.prototype._isBuffer=!0;function ee(F,m,Q){let L=F[m];F[m]=F[Q],F[Q]=L}a.prototype.swap16=function(){let m=this.length;if(m%2!==0)throw new RangeError("Buffer size must be a multiple of 16-bits");for(let Q=0;Q<m;Q+=2)ee(this,Q,Q+1);return this},a.prototype.swap32=function(){let m=this.length;if(m%4!==0)throw new RangeError("Buffer size must be a multiple of 32-bits");for(let Q=0;Q<m;Q+=4)ee(this,Q,Q+3),ee(this,Q+1,Q+2);return this},a.prototype.swap64=function(){let m=this.length;if(m%8!==0)throw new RangeError("Buffer size must be a multiple of 64-bits");for(let Q=0;Q<m;Q+=8)ee(this,Q,Q+7),ee(this,Q+1,Q+6),ee(this,Q+2,Q+5),ee(this,Q+3,Q+4);return this},a.prototype.toString=function(){let m=this.length;return m===0?"":arguments.length===0?g(this,0,m):Z.apply(this,arguments)},a.prototype.toLocaleString=a.prototype.toString,a.prototype.equals=function(m){if(!a.isBuffer(m))throw new TypeError("Argument must be a Buffer");return this===m?!0:a.compare(this,m)===0},a.prototype.inspect=function(){let m="",Q=e.INSPECT_MAX_BYTES;return m=this.toString("hex",0,Q).replace(/(.{2})/g,"$1 ").trim(),this.length>Q&&(m+=" ... "),"<Buffer "+m+">"},n&&(a.prototype[n]=a.prototype.inspect),a.prototype.compare=function(m,Q,L,W,z){if(Re(m,Uint8Array)&&(m=a.from(m,m.offset,m.byteLength)),!a.isBuffer(m))throw new TypeError('The "target" argument must be one of type Buffer or Uint8Array. Received type '+typeof m);if(Q===void 0&&(Q=0),L===void 0&&(L=m?m.length:0),W===void 0&&(W=0),z===void 0&&(z=this.length),Q<0||L>m.length||W<0||z>this.length)throw new RangeError("out of range index");if(W>=z&&Q>=L)return 0;if(W>=z)return-1;if(Q>=L)return 1;if(Q>>>=0,L>>>=0,W>>>=0,z>>>=0,this===m)return 0;let ae=z-W,le=L-Q,ye=Math.min(ae,le),Ct=this.slice(W,z),Ee=m.slice(Q,L);for(let ge=0;ge<ye;++ge)if(Ct[ge]!==Ee[ge]){ae=Ct[ge],le=Ee[ge];break}return ae<le?-1:le<ae?1:0};function j(F,m,Q,L,W){if(F.length===0)return-1;if(typeof Q=="string"?(L=Q,Q=0):Q>2147483647?Q=2147483647:Q<-2147483648&&(Q=-2147483648),Q=+Q,He(Q)&&(Q=W?0:F.length-1),Q<0&&(Q=F.length+Q),Q>=F.length){if(W)return-1;Q=F.length-1}else if(Q<0)if(W)Q=0;else return-1;if(typeof m=="string"&&(m=a.from(m,L)),a.isBuffer(m))return m.length===0?-1:se(F,m,Q,L,W);if(typeof m=="number")return m=m&255,typeof Uint8Array.prototype.indexOf=="function"?W?Uint8Array.prototype.indexOf.call(F,m,Q):Uint8Array.prototype.lastIndexOf.call(F,m,Q):se(F,[m],Q,L,W);throw new TypeError("val must be string, number or Buffer")}function se(F,m,Q,L,W){let z=1,ae=F.length,le=m.length;if(L!==void 0&&(L=String(L).toLowerCase(),L==="ucs2"||L==="ucs-2"||L==="utf16le"||L==="utf-16le")){if(F.length<2||m.length<2)return-1;z=2,ae/=2,le/=2,Q/=2}function ye(Ee,ge){return z===1?Ee[ge]:Ee.readUInt16BE(ge*z)}let Ct;if(W){let Ee=-1;for(Ct=Q;Ct<ae;Ct++)if(ye(F,Ct)===ye(m,Ee===-1?0:Ct-Ee)){if(Ee===-1&&(Ee=Ct),Ct-Ee+1===le)return Ee*z}else Ee!==-1&&(Ct-=Ct-Ee),Ee=-1}else for(Q+le>ae&&(Q=ae-le),Ct=Q;Ct>=0;Ct--){let Ee=!0;for(let ge=0;ge<le;ge++)if(ye(F,Ct+ge)!==ye(m,ge)){Ee=!1;break}if(Ee)return Ct}return-1}a.prototype.includes=function(m,Q,L){return this.indexOf(m,Q,L)!==-1},a.prototype.indexOf=function(m,Q,L){return j(this,m,Q,L,!0)},a.prototype.lastIndexOf=function(m,Q,L){return j(this,m,Q,L,!1)};function ie(F,m,Q,L){Q=Number(Q)||0;let W=F.length-Q;L?(L=Number(L),L>W&&(L=W)):L=W;let z=m.length;L>z/2&&(L=z/2);let ae;for(ae=0;ae<L;++ae){let le=parseInt(m.substr(ae*2,2),16);if(He(le))return ae;F[Q+ae]=le}return ae}function ce(F,m,Q,L){return en(xe(m,F.length-Q),F,Q,L)}function H(F,m,Q,L){return en(Fs(m),F,Q,L)}function E(F,m,Q,L){return en(De(m),F,Q,L)}function v(F,m,Q,L){return en(Te(m,F.length-Q),F,Q,L)}a.prototype.write=function(m,Q,L,W){if(Q===void 0)W="utf8",L=this.length,Q=0;else if(L===void 0&&typeof Q=="string")W=Q,L=this.length,Q=0;else if(isFinite(Q))Q=Q>>>0,isFinite(L)?(L=L>>>0,W===void 0&&(W="utf8")):(W=L,L=void 0);else throw new Error("Buffer.write(string, encoding, offset[, length]) is no longer supported");let z=this.length-Q;if((L===void 0||L>z)&&(L=z),m.length>0&&(L<0||Q<0)||Q>this.length)throw new RangeError("Attempt to write outside buffer bounds");W||(W="utf8");let ae=!1;for(;;)switch(W){case"hex":return ie(this,m,Q,L);case"utf8":case"utf-8":return ce(this,m,Q,L);case"ascii":case"latin1":case"binary":return H(this,m,Q,L);case"base64":case"base64url":return E(this,m,Q,L);case"ucs2":case"ucs-2":case"utf16le":case"utf-16le":return v(this,m,Q,L);default:if(ae)throw new TypeError("Unknown encoding: "+W);W=(""+W).toLowerCase(),ae=!0}},a.prototype.toJSON=function(){return{type:"Buffer",data:Array.prototype.slice.call(this._arr||this,0)}};function b(F,m,Q){return m===0&&Q===F.length?t.fromByteArray(F):t.fromByteArray(F.slice(m,Q))}function c(F,m,Q){return b(F,m,Q).replace(/\+/g,"-").replace(/\//g,"_").replace(/=+$/g,"")}function g(F,m,Q){Q=Math.min(F.length,Q);let L=[],W=m;for(;W<Q;){let z=F[W],ae=null,le=z>239?4:z>223?3:z>191?2:1;if(W+le<=Q){let ye,Ct,Ee,ge;switch(le){case 1:z<128&&(ae=z);break;case 2:ye=F[W+1],(ye&192)===128&&(ge=(z&31)<<6|ye&63,ge>127&&(ae=ge));break;case 3:ye=F[W+1],Ct=F[W+2],(ye&192)===128&&(Ct&192)===128&&(ge=(z&15)<<12|(ye&63)<<6|Ct&63,ge>2047&&(ge<55296||ge>57343)&&(ae=ge));break;case 4:ye=F[W+1],Ct=F[W+2],Ee=F[W+3],(ye&192)===128&&(Ct&192)===128&&(Ee&192)===128&&(ge=(z&15)<<18|(ye&63)<<12|(Ct&63)<<6|Ee&63,ge>65535&&ge<1114112&&(ae=ge))}}ae===null?(ae=65533,le=1):ae>65535&&(ae-=65536,L.push(ae>>>10&1023|55296),ae=56320|ae&1023),L.push(ae),W+=le}return R(L)}var w=4096;function R(F){let m=F.length;if(m<=w)return String.fromCharCode.apply(String,F);let Q="",L=0;for(;L<m;)Q+=String.fromCharCode.apply(String,F.slice(L,L+=w));return Q}function C(F,m,Q){let L="";Q=Math.min(F.length,Q);for(let W=m;W<Q;++W)L+=String.fromCharCode(F[W]&127);return L}function h(F,m,Q){let L="";Q=Math.min(F.length,Q);for(let W=m;W<Q;++W)L+=String.fromCharCode(F[W]);return L}function D(F,m,Q){let L=F.length;(!m||m<0)&&(m=0),(!Q||Q<0||Q>L)&&(Q=L);let W="";for(let z=m;z<Q;++z)W+=ai[F[z]];return W}function M(F,m,Q){let L=F.slice(m,Q),W="";for(let z=0;z<L.length-1;z+=2)W+=String.fromCharCode(L[z]+L[z+1]*256);return W}a.prototype.slice=function(m,Q){let L=this.length;m=~~m,Q=Q===void 0?L:~~Q,m<0?(m+=L,m<0&&(m=0)):m>L&&(m=L),Q<0?(Q+=L,Q<0&&(Q=0)):Q>L&&(Q=L),Q<m&&(Q=m);let W=this.subarray(m,Q);return Object.setPrototypeOf(W,a.prototype),W};function I(F,m,Q){if(F%1!==0||F<0)throw new RangeError("offset is not uint");if(F+m>Q)throw new RangeError("Trying to access beyond buffer length")}a.prototype.readUintLE=a.prototype.readUIntLE=function(m,Q,L){m=m>>>0,Q=Q>>>0,L||I(m,Q,this.length);let W=this[m],z=1,ae=0;for(;++ae<Q&&(z*=256);)W+=this[m+ae]*z;return W},a.prototype.readUintBE=a.prototype.readUIntBE=function(m,Q,L){m=m>>>0,Q=Q>>>0,L||I(m,Q,this.length);let W=this[m+--Q],z=1;for(;Q>0&&(z*=256);)W+=this[m+--Q]*z;return W},a.prototype.readUint8=a.prototype.readUInt8=function(m,Q){return m=m>>>0,Q||I(m,1,this.length),this[m]},a.prototype.readUint16LE=a.prototype.readUInt16LE=function(m,Q){return m=m>>>0,Q||I(m,2,this.length),this[m]|this[m+1]<<8},a.prototype.readUint16BE=a.prototype.readUInt16BE=function(m,Q){return m=m>>>0,Q||I(m,2,this.length),this[m]<<8|this[m+1]},a.prototype.readUint32LE=a.prototype.readUInt32LE=function(m,Q){return m=m>>>0,Q||I(m,4,this.length),(this[m]|this[m+1]<<8|this[m+2]<<16)+this[m+3]*16777216},a.prototype.readUint32BE=a.prototype.readUInt32BE=function(m,Q){return m=m>>>0,Q||I(m,4,this.length),this[m]*16777216+(this[m+1]<<16|this[m+2]<<8|this[m+3])},a.prototype.readBigUInt64LE=Ne(function(m){m=m>>>0,we(m,"offset");let Q=this[m],L=this[m+7];(Q===void 0||L===void 0)&&ve(m,this.length-8);let W=Q+this[++m]*2**8+this[++m]*2**16+this[++m]*2**24,z=this[++m]+this[++m]*2**8+this[++m]*2**16+L*2**24;return BigInt(W)+(BigInt(z)<<BigInt(32))}),a.prototype.readBigUInt64BE=Ne(function(m){m=m>>>0,we(m,"offset");let Q=this[m],L=this[m+7];(Q===void 0||L===void 0)&&ve(m,this.length-8);let W=Q*2**24+this[++m]*2**16+this[++m]*2**8+this[++m],z=this[++m]*2**24+this[++m]*2**16+this[++m]*2**8+L;return(BigInt(W)<<BigInt(32))+BigInt(z)}),a.prototype.readIntLE=function(m,Q,L){m=m>>>0,Q=Q>>>0,L||I(m,Q,this.length);let W=this[m],z=1,ae=0;for(;++ae<Q&&(z*=256);)W+=this[m+ae]*z;return z*=128,W>=z&&(W-=Math.pow(2,8*Q)),W},a.prototype.readIntBE=function(m,Q,L){m=m>>>0,Q=Q>>>0,L||I(m,Q,this.length);let W=Q,z=1,ae=this[m+--W];for(;W>0&&(z*=256);)ae+=this[m+--W]*z;return z*=128,ae>=z&&(ae-=Math.pow(2,8*Q)),ae},a.prototype.readInt8=function(m,Q){return m=m>>>0,Q||I(m,1,this.length),this[m]&128?(255-this[m]+1)*-1:this[m]},a.prototype.readInt16LE=function(m,Q){m=m>>>0,Q||I(m,2,this.length);let L=this[m]|this[m+1]<<8;return L&32768?L|4294901760:L},a.prototype.readInt16BE=function(m,Q){m=m>>>0,Q||I(m,2,this.length);let L=this[m+1]|this[m]<<8;return L&32768?L|4294901760:L},a.prototype.readInt32LE=function(m,Q){return m=m>>>0,Q||I(m,4,this.length),this[m]|this[m+1]<<8|this[m+2]<<16|this[m+3]<<24},a.prototype.readInt32BE=function(m,Q){return m=m>>>0,Q||I(m,4,this.length),this[m]<<24|this[m+1]<<16|this[m+2]<<8|this[m+3]},a.prototype.readBigInt64LE=Ne(function(m){m=m>>>0,we(m,"offset");let Q=this[m],L=this[m+7];(Q===void 0||L===void 0)&&ve(m,this.length-8);let W=this[m+4]+this[m+5]*2**8+this[m+6]*2**16+(L<<24);return(BigInt(W)<<BigInt(32))+BigInt(Q+this[++m]*2**8+this[++m]*2**16+this[++m]*2**24)}),a.prototype.readBigInt64BE=Ne(function(m){m=m>>>0,we(m,"offset");let Q=this[m],L=this[m+7];(Q===void 0||L===void 0)&&ve(m,this.length-8);let W=(Q<<24)+this[++m]*2**16+this[++m]*2**8+this[++m];return(BigInt(W)<<BigInt(32))+BigInt(this[++m]*2**24+this[++m]*2**16+this[++m]*2**8+L)}),a.prototype.readFloatLE=function(m,Q){return m=m>>>0,Q||I(m,4,this.length),r.read(this,m,!0,23,4)},a.prototype.readFloatBE=function(m,Q){return m=m>>>0,Q||I(m,4,this.length),r.read(this,m,!1,23,4)},a.prototype.readDoubleLE=function(m,Q){return m=m>>>0,Q||I(m,8,this.length),r.read(this,m,!0,52,8)},a.prototype.readDoubleBE=function(m,Q){return m=m>>>0,Q||I(m,8,this.length),r.read(this,m,!1,52,8)};function k(F,m,Q,L,W,z){if(!a.isBuffer(F))throw new TypeError('"buffer" argument must be a Buffer instance');if(m>W||m<z)throw new RangeError('"value" argument is out of bounds');if(Q+L>F.length)throw new RangeError("Index out of range")}a.prototype.writeUintLE=a.prototype.writeUIntLE=function(m,Q,L,W){if(m=+m,Q=Q>>>0,L=L>>>0,!W){let le=Math.pow(2,8*L)-1;k(this,m,Q,L,le,0)}let z=1,ae=0;for(this[Q]=m&255;++ae<L&&(z*=256);)this[Q+ae]=m/z&255;return Q+L},a.prototype.writeUintBE=a.prototype.writeUIntBE=function(m,Q,L,W){if(m=+m,Q=Q>>>0,L=L>>>0,!W){let le=Math.pow(2,8*L)-1;k(this,m,Q,L,le,0)}let z=L-1,ae=1;for(this[Q+z]=m&255;--z>=0&&(ae*=256);)this[Q+z]=m/ae&255;return Q+L},a.prototype.writeUint8=a.prototype.writeUInt8=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,1,255,0),this[Q]=m&255,Q+1},a.prototype.writeUint16LE=a.prototype.writeUInt16LE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,2,65535,0),this[Q]=m&255,this[Q+1]=m>>>8,Q+2},a.prototype.writeUint16BE=a.prototype.writeUInt16BE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,2,65535,0),this[Q]=m>>>8,this[Q+1]=m&255,Q+2},a.prototype.writeUint32LE=a.prototype.writeUInt32LE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,4,4294967295,0),this[Q+3]=m>>>24,this[Q+2]=m>>>16,this[Q+1]=m>>>8,this[Q]=m&255,Q+4},a.prototype.writeUint32BE=a.prototype.writeUInt32BE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,4,4294967295,0),this[Q]=m>>>24,this[Q+1]=m>>>16,this[Q+2]=m>>>8,this[Q+3]=m&255,Q+4};function ne(F,m,Q,L,W){yr(m,L,W,F,Q,7);let z=Number(m&BigInt(4294967295));F[Q++]=z,z=z>>8,F[Q++]=z,z=z>>8,F[Q++]=z,z=z>>8,F[Q++]=z;let ae=Number(m>>BigInt(32)&BigInt(4294967295));return F[Q++]=ae,ae=ae>>8,F[Q++]=ae,ae=ae>>8,F[Q++]=ae,ae=ae>>8,F[Q++]=ae,Q}function Ae(F,m,Q,L,W){yr(m,L,W,F,Q,7);let z=Number(m&BigInt(4294967295));F[Q+7]=z,z=z>>8,F[Q+6]=z,z=z>>8,F[Q+5]=z,z=z>>8,F[Q+4]=z;let ae=Number(m>>BigInt(32)&BigInt(4294967295));return F[Q+3]=ae,ae=ae>>8,F[Q+2]=ae,ae=ae>>8,F[Q+1]=ae,ae=ae>>8,F[Q]=ae,Q+8}a.prototype.writeBigUInt64LE=Ne(function(m,Q=0){return ne(this,m,Q,BigInt(0),BigInt("0xffffffffffffffff"))}),a.prototype.writeBigUInt64BE=Ne(function(m,Q=0){return Ae(this,m,Q,BigInt(0),BigInt("0xffffffffffffffff"))}),a.prototype.writeIntLE=function(m,Q,L,W){if(m=+m,Q=Q>>>0,!W){let ye=Math.pow(2,8*L-1);k(this,m,Q,L,ye-1,-ye)}let z=0,ae=1,le=0;for(this[Q]=m&255;++z<L&&(ae*=256);)m<0&&le===0&&this[Q+z-1]!==0&&(le=1),this[Q+z]=(m/ae>>0)-le&255;return Q+L},a.prototype.writeIntBE=function(m,Q,L,W){if(m=+m,Q=Q>>>0,!W){let ye=Math.pow(2,8*L-1);k(this,m,Q,L,ye-1,-ye)}let z=L-1,ae=1,le=0;for(this[Q+z]=m&255;--z>=0&&(ae*=256);)m<0&&le===0&&this[Q+z+1]!==0&&(le=1),this[Q+z]=(m/ae>>0)-le&255;return Q+L},a.prototype.writeInt8=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,1,127,-128),m<0&&(m=255+m+1),this[Q]=m&255,Q+1},a.prototype.writeInt16LE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,2,32767,-32768),this[Q]=m&255,this[Q+1]=m>>>8,Q+2},a.prototype.writeInt16BE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,2,32767,-32768),this[Q]=m>>>8,this[Q+1]=m&255,Q+2},a.prototype.writeInt32LE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,4,2147483647,-2147483648),this[Q]=m&255,this[Q+1]=m>>>8,this[Q+2]=m>>>16,this[Q+3]=m>>>24,Q+4},a.prototype.writeInt32BE=function(m,Q,L){return m=+m,Q=Q>>>0,L||k(this,m,Q,4,2147483647,-2147483648),m<0&&(m=4294967295+m+1),this[Q]=m>>>24,this[Q+1]=m>>>16,this[Q+2]=m>>>8,this[Q+3]=m&255,Q+4},a.prototype.writeBigInt64LE=Ne(function(m,Q=0){return ne(this,m,Q,-BigInt("0x8000000000000000"),BigInt("0x7fffffffffffffff"))}),a.prototype.writeBigInt64BE=Ne(function(m,Q=0){return Ae(this,m,Q,-BigInt("0x8000000000000000"),BigInt("0x7fffffffffffffff"))});function ue(F,m,Q,L,W,z){if(Q+L>F.length)throw new RangeError("Index out of range");if(Q<0)throw new RangeError("Index out of range")}function pe(F,m,Q,L,W){return m=+m,Q=Q>>>0,W||ue(F,m,Q,4,34028234663852886e22,-34028234663852886e22),r.write(F,m,Q,L,23,4),Q+4}a.prototype.writeFloatLE=function(m,Q,L){return pe(this,m,Q,!0,L)},a.prototype.writeFloatBE=function(m,Q,L){return pe(this,m,Q,!1,L)};function he(F,m,Q,L,W){return m=+m,Q=Q>>>0,W||ue(F,m,Q,8,17976931348623157e292,-17976931348623157e292),r.write(F,m,Q,L,52,8),Q+8}a.prototype.writeDoubleLE=function(m,Q,L){return he(this,m,Q,!0,L)},a.prototype.writeDoubleBE=function(m,Q,L){return he(this,m,Q,!1,L)},a.prototype.copy=function(m,Q,L,W){if(!a.isBuffer(m))throw new TypeError("argument should be a Buffer");if(L||(L=0),!W&&W!==0&&(W=this.length),Q>=m.length&&(Q=m.length),Q||(Q=0),W>0&&W<L&&(W=L),W===L||m.length===0||this.length===0)return 0;if(Q<0)throw new RangeError("targetStart out of bounds");if(L<0||L>=this.length)throw new RangeError("Index out of range");if(W<0)throw new RangeError("sourceEnd out of bounds");W>this.length&&(W=this.length),m.length-Q<W-L&&(W=m.length-Q+L);let z=W-L;return this===m&&typeof Uint8Array.prototype.copyWithin=="function"?this.copyWithin(Q,L,W):Uint8Array.prototype.set.call(m,this.subarray(L,W),Q),z},a.prototype.fill=function(m,Q,L,W){if(typeof m=="string"){if(typeof Q=="string"?(W=Q,Q=0,L=this.length):typeof L=="string"&&(W=L,L=this.length),W!==void 0&&typeof W!="string")throw new TypeError("encoding must be a string");if(typeof W=="string"&&!a.isEncoding(W))throw new TypeError("Unknown encoding: "+W);if(m.length===1){let ae=m.charCodeAt(0);(W==="utf8"&&ae<128||W==="latin1")&&(m=ae)}}else typeof m=="number"?m=m&255:typeof m=="boolean"&&(m=Number(m));if(Q<0||this.length<Q||this.length<L)throw new RangeError("Out of range index");if(L<=Q)return this;Q=Q>>>0,L=L===void 0?this.length:L>>>0,m||(m=0);let z;if(typeof m=="number")for(z=Q;z<L;++z)this[z]=m;else{let ae=a.isBuffer(m)?m:a.from(m,W),le=ae.length;if(le===0)throw new TypeError('The value "'+m+'" is invalid for argument "value"');for(z=0;z<L-Q;++z)this[z+Q]=ae[z%le]}return this};var de={};function wt(F,m,Q){de[F]=class extends Q{constructor(){super(),Object.defineProperty(this,"message",{value:m.apply(this,arguments),writable:!0,configurable:!0}),this.name=`${this.name} [${F}]`,this.stack,delete this.name}get code(){return F}set code(W){Object.defineProperty(this,"code",{configurable:!0,enumerable:!0,value:W,writable:!0})}toString(){return`${this.name} [${F}]: ${this.message}`}}}wt("ERR_BUFFER_OUT_OF_BOUNDS",function(F){return F?`${F} is outside of buffer bounds`:"Attempt to access memory outside buffer bounds"},RangeError),wt("ERR_INVALID_ARG_TYPE",function(F,m){return`The "${F}" argument must be of type number. Received type ${typeof m}`},TypeError),wt("ERR_OUT_OF_RANGE",function(F,m,Q){let L=`The value of "${F}" is out of range.`,W=Q;return Number.isInteger(Q)&&Math.abs(Q)>2**32?W=Ie(String(Q)):typeof Q=="bigint"&&(W=String(Q),(Q>BigInt(2)**BigInt(32)||Q<-(BigInt(2)**BigInt(32)))&&(W=Ie(W)),W+="n"),L+=` It must be ${m}. Received ${W}`,L},RangeError);function Ie(F){let m="",Q=F.length,L=F[0]==="-"?1:0;for(;Q>=L+4;Q-=3)m=`_${F.slice(Q-3,Q)}${m}`;return`${F.slice(0,Q)}${m}`}function be(F,m,Q){we(m,"offset"),(F[m]===void 0||F[m+Q]===void 0)&&ve(m,F.length-(Q+1))}function yr(F,m,Q,L,W,z){if(F>Q||F<m){let ae=typeof m=="bigint"?"n":"",le;throw z>3?m===0||m===BigInt(0)?le=`>= 0${ae} and < 2${ae} ** ${(z+1)*8}${ae}`:le=`>= -(2${ae} ** ${(z+1)*8-1}${ae}) and < 2 ** ${(z+1)*8-1}${ae}`:le=`>= ${m}${ae} and <= ${Q}${ae}`,new de.ERR_OUT_OF_RANGE("value",le,F)}be(L,W,z)}function we(F,m){if(typeof F!="number")throw new de.ERR_INVALID_ARG_TYPE(m,"number",F)}function ve(F,m,Q){throw Math.floor(F)!==F?(we(F,Q),new de.ERR_OUT_OF_RANGE(Q||"offset","an integer",F)):m<0?new de.ERR_BUFFER_OUT_OF_BOUNDS:new de.ERR_OUT_OF_RANGE(Q||"offset",`>= ${Q?1:0} and <= ${m}`,F)}var Ms=/[^+/0-9A-Za-z-_]/g;function Ye(F){if(F=F.split("=")[0],F=F.trim().replace(Ms,""),F.length<2)return"";for(;F.length%4!==0;)F=F+"=";return F}function xe(F,m){m=m||1/0;let Q,L=F.length,W=null,z=[];for(let ae=0;ae<L;++ae){if(Q=F.charCodeAt(ae),Q>55295&&Q<57344){if(!W){if(Q>56319){(m-=3)>-1&&z.push(239,191,189);continue}else if(ae+1===L){(m-=3)>-1&&z.push(239,191,189);continue}W=Q;continue}if(Q<56320){(m-=3)>-1&&z.push(239,191,189),W=Q;continue}Q=(W-55296<<10|Q-56320)+65536}else W&&(m-=3)>-1&&z.push(239,191,189);if(W=null,Q<128){if((m-=1)<0)break;z.push(Q)}else if(Q<2048){if((m-=2)<0)break;z.push(Q>>6|192,Q&63|128)}else if(Q<65536){if((m-=3)<0)break;z.push(Q>>12|224,Q>>6&63|128,Q&63|128)}else if(Q<1114112){if((m-=4)<0)break;z.push(Q>>18|240,Q>>12&63|128,Q>>6&63|128,Q&63|128)}else throw new Error("Invalid code point")}return z}function Fs(F){let m=[];for(let Q=0;Q<F.length;++Q)m.push(F.charCodeAt(Q)&255);return m}function Te(F,m){let Q,L,W,z=[];for(let ae=0;ae<F.length&&!((m-=2)<0);++ae)Q=F.charCodeAt(ae),L=Q>>8,W=Q%256,z.push(W),z.push(L);return z}function De(F){return t.toByteArray(Ye(F))}function en(F,m,Q,L){let W;for(W=0;W<L&&!(W+Q>=m.length||W>=F.length);++W)m[W+Q]=F[W];return W}function Re(F,m){return F instanceof m||F!=null&&F.constructor!=null&&F.constructor.name!=null&&F.constructor.name===m.name}function He(F){return F!==F}var ai=(function(){let F="0123456789abcdef",m=new Array(256);for(let Q=0;Q<16;++Q){let L=Q*16;for(let W=0;W<16;++W)m[L+W]=F[Q]+F[W]}return m})();function Ne(F){return typeof BigInt>"u"?Je:F}function Je(){throw new Error("BigInt not supported")}}}),BB=H2(q2(),1),Yl=typeof BB.Buffer.kMaxLength=="number"?BB.Buffer.kMaxLength:2147483647,o0=typeof BB.Buffer.kStringMaxLength=="number"?BB.Buffer.kStringMaxLength:536870888,RY=Object.freeze({MAX_LENGTH:Yl,MAX_STRING_LENGTH:o0}),DY=Symbol("events.errorMonitor"),LA=10;function a0(e,t,r){return t==="newListener"&&r[0]==="newListener"||t==="removeListener"&&r[0]==="removeListener"?!1:P1(e,t,r)}function A0(e,t){HA(e);let r=e._events[t];return Array.isArray(r)?r.slice():[]}function f0(e,t,r,n=!1){HA(e);let i=e._events[t];if(!Array.isArray(i)||i.length===0)return e;let s=null,o=i.slice();for(let a=o.length-1;a>=0;a-=1){let A=o[a];if(!(A.listener!==r&&A.rawListener!==r)&&!(n&&!A.once)){s=A,o.splice(a,1);break}}return s===null||(o.length===0?delete e._events[t]:e._events[t]=o,a0(e,"removeListener",[t,s.listener])),e}function tG(e,t){let r=String(t),n=A0(e,r);for(let i=n.length-1;i>=0;i-=1)f0(e,r,n[i].listener);return e}function P1(e,t,r){let n=A0(e,t);if(n.length===0)return!1;for(let i of n){i.once&&f0(e,t,i.listener,!0);try{i.listener.apply(e,r)}catch(s){let o=jl(s);if(!o.handled&&o.rethrow!==null)throw o.rethrow;return!0}}return!0}function G2(e,t){return A0(e,t).length}function Y2(e,t){return A0(e,t).map(r=>r.listener)}function vQe(e,t){return A0(e,t).map(r=>r.rawListener??r.listener)}function TY(e,t,r){function n(...i){return f0(e,t,n,!0),r.apply(e,i)}return Object.defineProperty(n,"listener",{value:r,configurable:!0,enumerable:!1,writable:!1}),n}function NY(e){return e&&typeof e.getMaxListeners=="function"?e.getMaxListeners():LA}function MY(e,...t){for(let r of t)r&&typeof r.setMaxListeners=="function"&&r.setMaxListeners(e)}function RQe(e,t){if(!e||typeof e.addEventListener!="function")throw new TypeError("AbortSignal is required");let r=()=>t();return e.aborted?(queueMicrotask(r),{dispose(){}}):(e.addEventListener("abort",r,{once:!0}),{dispose(){e.removeEventListener("abort",r)}})}function FY(e,t){return new Promise((r,n)=>{let i=(...o)=>{typeof e.removeListener=="function"&&e.removeListener("error",s),r(o)},s=o=>{typeof e.removeListener=="function"&&e.removeListener(t,i),n(o)};e.once(t,i),t!=="error"&&typeof e.once=="function"&&e.once("error",s)})}function kY(e){e._events=Object.create(null),e._maxListeners=LA,e._maxListenersWarned=new Set}function HA(e){if(!(!e||typeof e!="object"&&typeof e!="function")){if(typeof e._events>"u"){kY(e);return}e._maxListenersWarned instanceof Set||(e._maxListenersWarned=new Set),typeof e._maxListeners!="number"&&(e._maxListeners=LA)}}function DQe(e,t,r){let n=Number.isFinite(e._maxListeners)?e._maxListeners:LA,i=new Error(`Possible EventEmitter memory leak detected. ${r} ${t} listeners added to [EventEmitter]. MaxListeners is ${n}. Use emitter.setMaxListeners() to increase limit`);return i.name="MaxListenersExceededWarning",i.emitter=e,i.type=t,i.count=r,i}function TQe(e,t,r){if(HA(e),e._maxListenersWarned instanceof Set||(e._maxListenersWarned=new Set),e._maxListeners<=0||e._maxListenersWarned.has(t)||r<=e._maxListeners)return;e._maxListenersWarned.add(t);let n=DQe(e,t,r);if(Qe&&typeof Qe.emitWarning=="function"){Qe.emitWarning(n);return}typeof _error<"u"&&_error.applySync(void 0,[`${n.name}: ${n.message}`])}function zB(e,t,r,n=!1){HA(e);let i=e._events[t]??[];n?i.unshift(r):i.push(r),e._events[t]=i,TQe(e,t,i.length)}function Xt(){if(!this||typeof this!="object"&&typeof this!="function")return new Xt;kY(this)}Xt.prototype.addListener=function(e,t){return this.on(e,t)};Xt.prototype.on=function(e,t){if(typeof t!="function")throw new TypeError("listener must be a function");let r=String(e);return a0(this,"newListener",[r,t]),zB(this,r,{listener:t,once:!1}),this};Xt.prototype.once=function(e,t){if(typeof t!="function")throw new TypeError("listener must be a function");let r=String(e);return a0(this,"newListener",[r,t]),zB(this,r,{listener:t,rawListener:TY(this,r,t),once:!0}),this};Xt.prototype.prependListener=function(e,t){if(typeof t!="function")throw new TypeError("listener must be a function");let r=String(e);return a0(this,"newListener",[r,t]),zB(this,r,{listener:t,once:!1},!0),this};Xt.prototype.prependOnceListener=function(e,t){if(typeof t!="function")throw new TypeError("listener must be a function");let r=String(e);return a0(this,"newListener",[r,t]),zB(this,r,{listener:t,rawListener:TY(this,r,t),once:!0},!0),this};Xt.prototype.removeListener=function(e,t){return f0(this,String(e),t)};Xt.prototype.off=function(e,t){return f0(this,String(e),t)};Xt.prototype.removeAllListeners=function(e){if(HA(this),typeof e>"u"){for(let t of Object.keys(this._events))t!=="removeListener"&&tG(this,t);delete this._events.removeListener}else tG(this,String(e));return this};Xt.prototype.emit=function(e,...t){let r=String(e);if(r==="error"&&G2(this,r)===0)throw t[0]instanceof Error?t[0]:new Error(String(t[0]??"Unhandled error event"));let n=P1(this,r,t);return r==="error"&&(n=P1(this,String(DY),t)||n),n};Xt.prototype.listeners=function(e){return Y2(this,String(e))};Xt.prototype.rawListeners=function(e){return vQe(this,String(e))};Xt.prototype.listenerCount=function(e){return G2(this,String(e))};Xt.prototype.eventNames=function(){return HA(this),Object.keys(this._events)};Xt.prototype.setMaxListeners=function(e){return HA(this),this._maxListeners=Number(e),this};Xt.prototype.getMaxListeners=function(){return HA(this),Number.isFinite(this._maxListeners)?this._maxListeners:LA};Xt.once=FY;Xt.on=function(t,r,n){let i=n&&n.signal;if(i&&i.aborted)throw i.reason??new Error("The operation was aborted");let s=(N,P)=>(t.off??t.removeListener).call(t,N,P),o=[],a=[],A=null,f=!1,l=()=>{s(r,B),s("error",S),i&&i.removeEventListener&&i.removeEventListener("abort",_)},p={next(){let N=o.shift();if(N!==void 0)return Promise.resolve({value:N,done:!1});if(A){let P=A;return A=null,l(),Promise.reject(P)}return f?Promise.resolve({value:void 0,done:!0}):new Promise((P,U)=>a.push({resolve:P,reject:U}))},return(){f=!0,l();for(let N of a)N.resolve({value:void 0,done:!0});return a.length=0,Promise.resolve({value:void 0,done:!0})},throw(N){return A=N,l(),Promise.reject(N)},[Symbol.asyncIterator](){return this}};function B(...N){let P=a.shift();P?P.resolve({value:N,done:!1}):o.push(N)}function S(N){let P=a.shift();P?(l(),P.reject(N)):A=N}function _(){p.return()}return t.on(r,B),t.on("error",S),i&&i.addEventListener&&i.addEventListener("abort",_,{once:!0}),p};Xt.addAbortListener=function(t,r){return t&&t.aborted?queueMicrotask(()=>r(typeof Ul=="function"?new Ul("abort"):{type:"abort"})):t&&t.addEventListener&&t.addEventListener("abort",r,{once:!0}),{[Symbol.dispose](){t&&t.removeEventListener&&t.removeEventListener("abort",r)}}};Xt.getEventListeners=Y2;Xt.getMaxListeners=NY;Xt.setMaxListeners=MY;Object.defineProperty(Xt,"defaultMaxListeners",{get(){return LA},set(e){LA=Number(e)}});var Sl={addAbortListener:RQe,defaultMaxListeners:LA,errorMonitor:DY,EventEmitter:Xt,getEventListeners:Y2,getMaxListeners:NY,listenerCount:G2,once:FY,setMaxListeners:MY};Ge("_eventsModule",Sl);var _e=H2(q2(),1),Iu=_e.Buffer;typeof Iu.kMaxLength!="number"&&(Iu.kMaxLength=Yl);typeof Iu.kStringMaxLength!="number"&&(Iu.kStringMaxLength=o0);(typeof Iu.constants!="object"||Iu.constants===null)&&(Iu.constants={MAX_LENGTH:Yl,MAX_STRING_LENGTH:o0});var yg=_e.Buffer.prototype;if(typeof yg.utf8Slice!="function"){let e=["utf8","latin1","ascii","hex","base64","ucs2","utf16le"];for(let t of e)typeof yg[t+"Slice"]!="function"&&(yg[t+"Slice"]=function(r,n){return this.toString(t,r,n)}),typeof yg[t+"Write"]!="function"&&(yg[t+"Write"]=function(r,n,i){return this.write(r,n??0,i??this.length-(n??0),t)})}var mg=_e.Buffer;if(typeof mg.allocUnsafe=="function"&&!mg.allocUnsafe._secureExecPatched){let e=mg.allocUnsafe;mg.allocUnsafe=function(r){try{return e.call(this,r)}catch(n){throw n instanceof RangeError&&typeof r=="number"&&r>Yl?new Error("Array buffer allocation failed"):n}},mg.allocUnsafe._secureExecPatched=!0}var xY=_e.Buffer,tB={scheduler:{wait(e=0,t=void 0){return tB.setTimeout(e,void 0,t)},yield(){return tB.setImmediate()}},setImmediate(e=void 0,t=void 0){return t?.signal?.aborted?Promise.reject(t.signal.reason??new Error("The operation was aborted")):new Promise((r,n)=>{let i=()=>n(t.signal.reason??new Error("The operation was aborted"));t?.signal?.addEventListener?.("abort",i,{once:!0}),globalThis.setImmediate?.(()=>{t?.signal?.removeEventListener?.("abort",i),r(e)})??globalThis.setTimeout?.(()=>{t?.signal?.removeEventListener?.("abort",i),r(e)},0)})},setInterval(e=1,t=void 0,r=void 0){let n=!0,i=r?.signal;return i?.aborted&&(n=!1),{[Symbol.asyncIterator](){return this},async next(){if(!n)return{done:!0,value:void 0};try{let s=await tB.setTimeout(e,t,{signal:i});return n?{done:!1,value:s}:{done:!0,value:void 0}}catch(s){throw n=!1,s}},async return(){return n=!1,{done:!0,value:void 0}}}},setTimeout(e=1,t=void 0,r=void 0){return r?.signal?.aborted?Promise.reject(r.signal.reason??new Error("The operation was aborted")):new Promise((n,i)=>{let s=globalThis.setTimeout?.(()=>{r?.signal?.removeEventListener?.("abort",o),n(t)},e??0),o=()=>{typeof globalThis.clearTimeout=="function"&&globalThis.clearTimeout(s),i(r.signal.reason??new Error("The operation was aborted"))};r?.signal?.addEventListener?.("abort",o,{once:!0})})}},UY=new Set;function xa(){return Array.from(UY,e=>({storage:e,hasStore:e._hasStore===!0,store:e._store}))}function rG(e){for(let t of e)t.storage._hasStore=t.hasStore,t.storage._store=t.store}function KB(e,t,r,n){if(typeof t!="function")return t;let i=xa();rG(e);try{return t.apply(r,n)}finally{rG(i)}}function Ll(e,t){return typeof e!="function"?e:function(...r){try{return KB(t,e,this,r)}catch(n){throw uI(n),n}}}var LY={AsyncLocalStorage:class{constructor(){this._hasStore=!1,this._store=void 0,UY.add(this)}disable(){this._hasStore=!1,this._store=void 0}enterWith(e){this._hasStore=!0,this._store=e}exit(e,...t){let r={hasStore:this._hasStore,store:this._store};this._hasStore=!1,this._store=void 0;let n=!0;try{let i=e(...t);return i&&typeof i.then=="function"?(n=!1,Promise.resolve(i).finally(()=>{this._hasStore=r.hasStore,this._store=r.store})):i}finally{n&&(this._hasStore=r.hasStore,this._store=r.store)}}getStore(){return this._hasStore?this._store:void 0}run(e,t,...r){let n={hasStore:this._hasStore,store:this._store};this._hasStore=!0,this._store=e;let i=!0;try{let s=t(...r);return s&&typeof s.then=="function"?(i=!1,Promise.resolve(s).finally(()=>{this._hasStore=n.hasStore,this._store=n.store})):s}finally{i&&(this._hasStore=n.hasStore,this._store=n.store)}}},AsyncResource:class{constructor(e="SecureExecAsyncResource"){this.type=e,this._asyncLocalStorageSnapshot=xa()}emitBefore(){}emitAfter(){}emitDestroy(){}asyncId(){return 0}triggerAsyncId(){return 0}runInAsyncScope(e,t,...r){return KB(this._asyncLocalStorageSnapshot,e,t,r)}},createHook(){return{enable(){return this},disable(){return this}}},executionAsyncId(){return 0},triggerAsyncId(){return 0}};if(!Promise.prototype.__agentOSAsyncLocalStoragePatched){let e=Promise.prototype.then;Promise.prototype.then=function(t,r){let n=xa(),i=typeof r=="function"?s=>{if(uI(s))throw s;return r(s)}:r;return e.call(this,Ll(t,n),Ll(i,n))},Object.defineProperty(Promise.prototype,"__agentOSAsyncLocalStoragePatched",{value:!0,configurable:!0})}var W2={create:"kernelTimerCreate",arm:"kernelTimerArm",clear:"kernelTimerClear"};Ge("_asyncHooksModule",LY);var _a=typeof queueMicrotask=="function"?queueMicrotask:function(e){Promise.resolve().then(e)};function PY(e){let t=Number(e??0);return!Number.isFinite(t)||t<=0?0:Math.floor(t)}function OY(e){if(e&&typeof e=="object"&&e._id!==void 0)return e._id;if(typeof e=="number")return e}function HY(e,t){try{return s0(W2.create,e,t)}catch(r){throw r instanceof Error&&r.message.includes("EAGAIN")?new Error("ERR_RESOURCE_BUDGET_EXCEEDED: maximum number of timers exceeded"):r}}function XB(e){s0(W2.arm,e)}var V2=class{constructor(e){y(this,"_id");y(this,"_destroyed");y(this,"_refed");this._id=e,this._destroyed=!1,this._refed=!0}ref(){return this._refed=!0,this}unref(){return this._refed=!1,this}hasRef(){return this._refed}refresh(){return!this._destroyed&&Fa.has(this._id)&&XB(this._id),this}[Symbol.toPrimitive](){return this._id}},Fa=new Map,bu=new Map,NQe=-1,rB=[];function MQe(){if(typeof Ts<"u"&&Ts)return 0;let e=0;for(let t of Fa.values())t.handle?.hasRef?.()!==!1&&(e+=1);return e}function qY(){return typeof Ts<"u"&&Ts?0:bu.size}function J2(){return MQe()+qY()}function Su(){if(J2()===0&&rB.length>0){let e=rB;rB=[],e.forEach(t=>t())}}function FQe(){return J2()}function kQe(){return qY()}function xQe(){return J2()===0?Promise.resolve():new Promise(e=>{rB.push(e),Su()})}var nB=[],O1=!1;function UQe(){for(O1=!1;nB.length>0;){let e=nB.shift();if(!e)break;try{e.callback(...e.args)}catch(t){let r=jl(t);!r.handled&&r.rethrow!==null&&(nB.length=0,PV(r.rethrow));return}}}function LQe(){if(O1)return;O1=!0;let e=xa();_a(()=>KB(e,UQe,globalThis,[]))}function PQe(e,t){let r=typeof t=="number"?t:Number(t?.timerId);if(!Number.isFinite(r))return;let n=Fa.get(r);if(n){n.repeat||(n.handle._destroyed=!0,Fa.delete(r));try{n.callback(...n.args)}catch(i){let s=jl(i);if(!s.handled&&s.rethrow!==null)throw s.rethrow;return}if(typeof Ts<"u"&&Ts){Su();return}n.repeat&&Fa.has(r)&&XB(r),Su()}}function j2(e,t,...r){let n=Math.max(1,PY(t)),i=HY(n,!1),s=new V2(i),o=xa();return Fa.set(i,{handle:s,callback:Ll(e,o),args:r,repeat:!1}),XB(i),s}function ZB(e){let t=OY(e);if(t===void 0)return;let r=Fa.get(t);r&&(r.handle._destroyed=!0,Fa.delete(t)),s0(W2.clear,t),Su()}function z2(e,t,...r){let n=Math.max(1,PY(t)),i=HY(n,!0),s=new V2(i),o=xa();return Fa.set(i,{handle:s,callback:Ll(e,o),args:r,repeat:!0}),XB(i),s}function K2(e){ZB(e)}Ge("_timerDispatch",PQe);function OQe(){let e=Array.from(bu.entries());for(let[t,r]of e)if(bu.get(t)===r){r.handle._destroyed=!0,bu.delete(t);try{r.callback(...r.args)}catch(n){let i=jl(n);if(!i.handled&&i.rethrow!==null)throw i.rethrow;return}if(typeof Ts<"u"&&Ts){Su();return}}Su()}Ge("_getPendingTimerCount",FQe);Ge("_drainImmediates",OQe);Ge("_getPendingImmediateCount",kQe);Ge("_waitForTimerDrain",xQe);function IB(e,...t){let r=NQe--,n=new V2(r),i=xa();return bu.set(r,{handle:n,callback:Ll(e,i),args:t,repeat:!1}),n}function GY(e){let t=OY(e);if(t===void 0)return;let r=bu.get(t);if(r){r.handle._destroyed=!0,bu.delete(t),Su();return}t<0||ZB(e)}var HQe={stdinIsTTY:!1,stdoutIsTTY:!1,stderrIsTTY:!1,cols:80,rows:24},Co;function i1(e){if(typeof _kernelIsattyRaw>"u")throw new Error("_kernelIsattyRaw is unavailable");return _kernelIsattyRaw.applySync(void 0,[e])===!0}function qQe(e){if(typeof _kernelTtySizeRaw>"u")throw new Error("_kernelTtySizeRaw is unavailable");let t=_kernelTtySizeRaw.applySync(void 0,[e]);if(!t||typeof t.cols!="number"||typeof t.rows!="number")throw new Error("_kernelTtySizeRaw returned an invalid size");return t}function Gg(){if(Co)return Co;if(typeof __runtimeTtyConfig<"u")return Co=__runtimeTtyConfig,Co;try{Co={stdinIsTTY:i1(0),stdoutIsTTY:i1(1),stderrIsTTY:i1(2),cols:80,rows:24}}catch{return Co=HQe,Co}for(let e of[1,0])try{let t=qQe(e);Co.cols=t.cols,Co.rows=t.rows;break}catch{}return Co}function GQe(){return Gg().stdoutIsTTY}function YQe(){return Gg().stderrIsTTY}function WQe(e,t){if(typeof e=="function")return e;if(typeof t=="function")return t}function Gm(e,t,r,n){let i=e[r]?e[r].slice():[],s=t[r]?t[r].slice():[];s.length>0&&(t[r]=[]);for(let o of i)o(...n);for(let o of s)o(...n);return i.length+s.length>0}function YY(e){let t={},r={},n=(s,o)=>{if(t[s]){let a=t[s].indexOf(o);a!==-1&&t[s].splice(a,1)}if(r[s]){let a=r[s].indexOf(o);a!==-1&&r[s].splice(a,1)}},i={write(s,o,a){s instanceof Uint8Array||typeof _e.Buffer<"u"&&_e.Buffer.isBuffer(s)?e.write(s):e.write(String(s));let A=WQe(o,a);return A&&_a(()=>A(null)),!0},end(s,o,a){return typeof s=="function"?(a=s,s=void 0):typeof o=="function"&&(a=o),s!=null&&i.write(s),i.writableEnded=!0,typeof a=="function"&&_a(()=>a()),_a(()=>Gm(t,r,"finish",[])),i},destroyed:!1,destroy(s){return i.destroyed||(i.destroyed=!0,s&&_a(()=>Gm(t,r,"error",[s])),_a(()=>Gm(t,r,"close",[]))),i},cork(){},uncork(){},setDefaultEncoding(){return i},on(s,o){return t[s]||(t[s]=[]),t[s].push(o),i},once(s,o){return r[s]||(r[s]=[]),r[s].push(o),i},off(s,o){return n(s,o),i},removeListener(s,o){return n(s,o),i},addListener(s,o){return i.on(s,o)},emit(s,...o){return Gm(t,r,s,o)},writable:!0,get isTTY(){return e.isTTY()},get columns(){return Gg().cols},get rows(){return Gg().rows}};return i}var X2=YY({write(e){typeof _log<"u"&&_log.applySync(void 0,[e])},isTTY:GQe}),Z2=YY({write(e){typeof _error<"u"&&_error.applySync(void 0,[e])},isTTY:YQe});function VQe(e){if(typeof e=="string")return e;if(typeof e=="bigint")return`${e}n`;if(e instanceof Error)return e.stack||e.message||String(e);if(typeof e=="object"&&e!==null)try{return JSON.stringify(e)}catch{}return String(e)}function H1(e){return typeof builtinUtilModule<"u"&&typeof builtinUtilModule?.formatWithOptions=="function"?builtinUtilModule.formatWithOptions({colors:!1},...e):e.map(t=>VQe(t)).join(" ")}function Bl(e){return`${H1(e)}
-`}var $2=class{constructor(e=X2,t=Z2){this._stdout=e,this._stderr=t,this._counts=new Map,this._times=new Map;for(let r of["assert","clear","count","countReset","debug","dir","dirxml","error","group","groupCollapsed","groupEnd","info","log","table","time","timeEnd","timeLog","trace","warn"])this[r]=this[r].bind(this)}log(...e){this._stdout.write(Bl(e))}info(...e){this._stdout.write(Bl(e))}debug(...e){this._stdout.write(Bl(e))}warn(...e){this._stderr.write(Bl(e))}error(...e){this._stderr.write(Bl(e))}dir(e){this._stdout.write(Bl([e]))}dirxml(...e){this.log(...e)}trace(...e){let t=H1(e),r=new Error(t);this._stderr.write(`${r.stack||t}
-`)}assert(e,...t){if(!e){let r=t.length>0?H1(t):"Assertion failed";this._stderr.write(`${r}
-`)}}clear(){}count(e="default"){let t=(this._counts.get(e)??0)+1;this._counts.set(e,t),this.log(`${e}: ${t}`)}countReset(e="default"){this._counts.delete(e)}group(...e){e.length>0&&this.log(...e)}groupCollapsed(...e){e.length>0&&this.log(...e)}groupEnd(){}table(e){this.log(e)}time(e="default"){this._times.set(e,Date.now())}timeEnd(e="default"){if(!this._times.has(e))return;let t=this._times.get(e);this._times.delete(e),this.log(`${e}: ${Date.now()-t}ms`)}timeLog(e="default",...t){if(!this._times.has(e))return;let r=this._times.get(e);this.log(`${e}: ${Date.now()-r}ms`,...t)}},ht=new $2;globalThis.console=ht;function JQe(){return{run(e,...t){return typeof e=="function"?e(...t):void 0}}}function jQe(e=X2,t=Z2){return new $2(e,t)}var zQe={Console:$2,assert:ht.assert.bind(ht),clear:ht.clear.bind(ht),context:jQe,count:ht.count.bind(ht),countReset:ht.countReset.bind(ht),createTask:JQe,debug:ht.debug.bind(ht),dir:ht.dir.bind(ht),dirxml:ht.dirxml.bind(ht),error:ht.error.bind(ht),group:ht.group.bind(ht),groupCollapsed:ht.groupCollapsed.bind(ht),groupEnd:ht.groupEnd.bind(ht),info:ht.info.bind(ht),log:ht.log.bind(ht),profile:void 0,profileEnd:void 0,table:ht.table.bind(ht),time:ht.time.bind(ht),timeEnd:ht.timeEnd.bind(ht),timeLog:ht.timeLog.bind(ht),timeStamp:void 0,trace:ht.trace.bind(ht),warn:ht.warn.bind(ht)};function iB(e){return!e||typeof e.formatWithOptions=="function"||(e.formatWithOptions=function(r,n,...i){let s=f=>{if(typeof e.inspect=="function")return e.inspect(f,r);try{return JSON.stringify(f)}catch{return String(f)}},o=f=>typeof f=="string"?f:s(f);if(typeof n!="string")return[n,...i].map(o).join(" ");let a=0,A=n.replace(/%[sdifjoO%]/g,f=>{if(f==="%%")return"%";if(a>=i.length)return f;let l=i[a++];switch(f){case"%s":return String(l);case"%d":return Number(l).toString();case"%i":return Number.parseInt(l,10).toString();case"%f":return Number.parseFloat(l).toString();case"%j":try{return JSON.stringify(l)}catch{return"[Circular]"}case"%o":case"%O":return s(l);default:return f}});return a>=i.length?A:[A,...i.slice(a).map(o)].join(" ")}),e}function q1(e){let t=new Error(`node:worker_threads ${e} is not available in the secure-exec guest runtime`);return t.code="ERR_NOT_IMPLEMENTED",t}var G1=class extends Xt{postMessage(){}start(){}close(){this.emit("close")}unref(){return this}ref(){return this}},KQe=class{constructor(){this.port1=new G1,this.port2=new G1}},XQe=class extends Xt{constructor(){throw super(),q1("Worker")}},ZQe={BroadcastChannel:globalThis.BroadcastChannel,MessageChannel:globalThis.MessageChannel??KQe,MessagePort:globalThis.MessagePort??G1,SHARE_ENV:Symbol.for("secure-exec.worker_threads.SHARE_ENV"),Worker:XQe,getEnvironmentData(){},isMainThread:!0,markAsUncloneable(){},markAsUntransferable(){},moveMessagePortToContext(){throw q1("moveMessagePortToContext")},parentPort:null,postMessageToThread(){throw q1("postMessageToThread")},receiveMessageOnPort(){},resourceLimits:{},setEnvironmentData(){},threadId:0,workerData:null};function $Qe(e){return e===0?!!Qe.stdin?.isTTY:e===1?!!Qe.stdout?.isTTY:e===2?!!Qe.stderr?.isTTY:!1}function ewe(e){return e===0?Qe.stdin:void 0}function twe(e){if(e===1)return Qe.stdout;if(e===2)return Qe.stderr}var rwe={ReadStream:class{constructor(t){return ewe(t)}},WriteStream:class{constructor(t){return twe(t)}},isatty:$Qe};async function nG(e){let t=WY(e);if(t){let r=[];for await(let n of t)r.push(Buffer.isBuffer(n)?n:Buffer.from(n??[]));return r}if(e&&typeof e[Symbol.asyncIterator]=="function"){let r=[];for await(let n of e)r.push(Buffer.isBuffer(n)?n:Buffer.from(n??[]));return r}if(e&&typeof e.getReader=="function"){let r=e.getReader(),n=[];try{for(;;){let{value:i,done:s}=await r.read();if(s)break;n.push(Buffer.from(i??[]))}}finally{r.releaseLock?.()}return n}throw new TypeError("expected an async iterable or WHATWG ReadableStream")}function nwe(e,t=""){return{size:e.byteLength,type:t,async arrayBuffer(){return e.buffer.slice(e.byteOffset,e.byteOffset+e.byteLength)},stream(){return new ReadableStream({start(r){r.enqueue(e),r.close()}})},async text(){return e.toString("utf8")}}}var sB={async arrayBuffer(e){let t=await nG(e),r=Buffer.concat(t);return r.buffer.slice(r.byteOffset,r.byteOffset+r.byteLength)},async blob(e){return nwe(await sB.buffer(e))},async buffer(e){return Buffer.concat(await nG(e))},async json(e){return JSON.parse(await sB.text(e))},async text(e){return(await sB.buffer(e)).toString("utf8")}};function WY(e){return!e||typeof e.on!="function"||typeof e.read!="function"&&typeof e.pipe!="function"&&typeof e.resume!="function"?null:{async*[Symbol.asyncIterator](){let t=[],r=[],n=!1,i=null,s=[],o=typeof e.off=="function"?e.off.bind(e):typeof e.removeListener=="function"?e.removeListener.bind(e):null,a=()=>{for(;r.length>0;){if(i){r.shift()?.(Promise.reject(i));continue}if(t.length>0){r.shift()?.(Promise.resolve({done:!1,value:t.shift()}));continue}if(n){r.shift()?.(Promise.resolve({done:!0,value:void 0}));continue}break}},A=(B,S)=>{e.on(B,S),s.push(()=>o?.(B,S))},f=B=>{t.push(B),a()},l=()=>{n=!0,a()},p=B=>{i=B,n=!0,a()};A("data",f),A("end",l),A("close",l),A("error",p),e.resume?.();try{for(;;){if(i)throw i;if(t.length>0){yield t.shift();continue}if(n)return;let B=await new Promise(S=>{r.push(S)});if(B.done)return;yield B.value}}finally{for(;s.length>0;)s.pop()?.()}}}}var VY={finished(e){return new Promise((t,r)=>{if(!e||typeof e!="object"){r(new TypeError("finished() expects a stream"));return}let n=[],i=(o,a)=>{e?.once?.(o,a),n.push(()=>e?.off?.(o,a))},s=o=>a=>{for(;n.length>0;)n.pop()?.();o(a)};i("finish",s(t)),i("end",s(t)),i("close",s(t)),i("error",s(r))})},async pipeline(e,t){let r=WY(e)??(e&&typeof e[Symbol.asyncIterator]=="function"?e:e&&typeof e.getReader=="function"?{async*[Symbol.asyncIterator](){let i=e.getReader();try{for(;;){let{value:s,done:o}=await i.read();if(o)break;yield Buffer.from(s??[])}}finally{i.releaseLock?.()}}}:null);if(r==null)throw new TypeError("pipeline source must be async iterable or a WHATWG ReadableStream");if(!t||typeof t.write!="function")throw new TypeError("pipeline destination must provide write()");for await(let i of r)await new Promise((s,o)=>{try{t.write(i,a=>a?o(a):s())}catch(a){o(a)}});let n=VY.finished(t);return typeof t.end=="function"&&await new Promise((i,s)=>{try{t.end(o=>o?s(o):i())}catch(o){s(o)}}),await n,t}};function ou(e){let t=String(e).replace(/^node:/,""),r=new Error(`node:${t} is not available in the secure-exec guest runtime`);return r.code="ERR_ACCESS_DENIED",r}var JY=class{constructor(e=""){this.name=String(e),this._subscribers=new Set}get hasSubscribers(){return this._subscribers.size>0}publish(e){for(let t of Array.from(this._subscribers))t(e,this.name)}subscribe(e){typeof e=="function"&&this._subscribers.add(e)}unsubscribe(e){return this._subscribers.delete(e)}runStores(e,t,r,...n){return typeof t!="function"?t:t.apply(r,n)}},iG=new Map;function va(e=""){let t=String(e),r=iG.get(t);return r||(r=new JY(t),iG.set(t,r)),r}function iwe(e=""){let t=String(e),r={start:va(`tracing:${t}:start`),end:va(`tracing:${t}:end`),asyncStart:va(`tracing:${t}:asyncStart`),asyncEnd:va(`tracing:${t}:asyncEnd`),error:va(`tracing:${t}:error`),subscribe(){},unsubscribe(){return!0},traceSync(n,i,s,...o){return typeof n!="function"?n:n.apply(s,o)},tracePromise(n,i,s,...o){return typeof n!="function"?Promise.resolve(n):Promise.resolve(n.apply(s,o))},traceCallback(n,i,s,o,...a){return typeof n!="function"?n:n.apply(o,a)}};return Object.defineProperty(r,"hasSubscribers",{get(){return r.start.hasSubscribers||r.end.hasSubscribers||r.asyncStart.hasSubscribers||r.asyncEnd.hasSubscribers||r.error.hasSubscribers},enumerable:!1,configurable:!0}),r}var swe={Channel:JY,channel:va,hasSubscribers(e=""){return va(e).hasSubscribers},subscribe(e="",t){return va(e).subscribe(t)},tracingChannel:iwe,unsubscribe(e="",t){return va(e).unsubscribe(t)}};function Il(e,t=2){return String(Math.trunc(e)).padStart(t,"0")}function owe(e){let t=e instanceof Date?e:new Date(e??Date.now());if(Number.isNaN(t.getTime()))throw new RangeError("Invalid time value");return t}function awe(e,t={}){let r=owe(e),n=t&&typeof t=="object"?t:{},i=Il(r.getUTCFullYear(),4),s=Il(r.getUTCMonth()+1),o=Il(r.getUTCDate()),a=Il(r.getUTCHours()),A=Il(r.getUTCMinutes()),f=Il(r.getUTCSeconds()),l=`${i}-${s}-${o}`,p=`${a}:${A}:${f}`,B=n.dateStyle||n.year||n.month||n.day||!n.timeStyle&&!n.hour&&!n.minute&&!n.second,S=n.timeStyle||n.hour||n.minute||n.second;return B&&S?`${l}, ${p}`:S?p:l}var Awe=class{constructor(e="en-US",t={}){this.locales=e,this.options=t&&typeof t=="object"?{...t}:{},this.format=this.format.bind(this)}format(e=Date.now()){return awe(e,this.options)}formatToParts(e=Date.now()){return[{type:"literal",value:this.format(e)}]}formatRange(e,t){return`${this.format(e)} \u2013 ${this.format(t)}`}formatRangeToParts(e,t){return[{type:"literal",value:this.formatRange(e,t),source:"shared"}]}resolvedOptions(){return{locale:Array.isArray(this.locales)?this.locales.find(t=>typeof t=="string")||"en-US":typeof this.locales=="string"?this.locales:"en-US",calendar:"gregory",numberingSystem:"latn",timeZone:"UTC",...this.options}}static supportedLocalesOf(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"):typeof e=="string"?[e]:[]}};function Ym(e,t){let r=Number(e);return Number.isFinite(r)?Math.min(20,Math.max(0,Math.trunc(r))):t}function fwe(e){let[t,r]=e.split("."),n=t.startsWith("-")?"-":"",s=(n?t.slice(1):t).replace(/\B(?=(\d{3})+(?!\d))/g,",");return r===void 0?`${n}${s}`:`${n}${s}.${r}`}var uwe=class{constructor(e="en-US",t={}){this.locales=e,this.options=t&&typeof t=="object"?{...t}:{},this.format=this.format.bind(this)}format(e){let t=Number(e);if(Number.isNaN(t))return"NaN";if(t===1/0)return"\u221E";if(t===-1/0)return"-\u221E";let r=Ym(this.options.minimumFractionDigits,0),n=Math.max(r,Ym(this.options.maximumFractionDigits,Math.max(r,3))),i=t.toFixed(n);if(n>r){i=i.replace(/(\.\d*?)0+$/,"$1").replace(/\.$/,"");let s=i.includes(".")?i.length-i.indexOf(".")-1:0;s<r&&(i+=`${s===0?".":""}${"0".repeat(r-s)}`)}return this.options.useGrouping===!1?i:fwe(i)}formatToParts(e){return[{type:"literal",value:this.format(e)}]}resolvedOptions(){return{locale:Array.isArray(this.locales)?this.locales.find(t=>typeof t=="string")||"en-US":typeof this.locales=="string"?this.locales:"en-US",numberingSystem:"latn",style:"decimal",minimumFractionDigits:Ym(this.options.minimumFractionDigits,0),maximumFractionDigits:Ym(this.options.maximumFractionDigits,3),useGrouping:this.options.useGrouping!==!1,...this.options}}static supportedLocalesOf(e){return Array.isArray(e)?e.filter(t=>typeof t=="string"):typeof e=="string"?[e]:[]}};function cwe(e){let t=e.Intl&&typeof e.Intl=="object"?e.Intl:{};t.DateTimeFormat=Awe,t.NumberFormat=uwe,e.Intl=t,Date.prototype.toLocaleString=function(r,n){return new e.Intl.DateTimeFormat(r,n).format(this)},Date.prototype.toLocaleDateString=function(r,n){return new e.Intl.DateTimeFormat(r,{...n||{},hour:void 0,minute:void 0,second:void 0}).format(this)},Date.prototype.toLocaleTimeString=function(r,n){return new e.Intl.DateTimeFormat(r,{hour:"2-digit",minute:"2-digit",second:"2-digit",...n||{}}).format(this)},Number.prototype.toLocaleString=function(r,n){return new e.Intl.NumberFormat(r,n).format(this.valueOf())}}function s1(e,t,r){let n=new RangeError(`The value of "${e}" is out of range. It must be ${t}. Received ${String(r)}`);return n.code="ERR_OUT_OF_RANGE",n}function jY(e){return{name:String(e?.name??""),entryType:String(e?.entryType??""),startTime:Number(e?.startTime??0),duration:Number(e?.duration??0)}}function zY(e){return{getEntries(){return e.slice()},getEntriesByName(t,r=void 0){let n=String(t??""),i=e.filter(s=>s.name===n);return typeof r=="string"?i.filter(s=>s.entryType===r):i},getEntriesByType(t){let r=String(t??"");return e.filter(n=>n.entryType===r)}}}function lwe(){let e=[];return{percentile(t){let r=Number(t);if(!Number.isFinite(r)||r<=0||r>100)throw s1("percentile","> 0 && <= 100",t);if(e.length===0)return 0;let n=e.slice().sort((s,o)=>s-o),i=Math.min(n.length-1,Math.max(0,Math.ceil(r/100*n.length)-1));return n[i]},record(t){let r=Number(t);if(!Number.isInteger(r))throw s1("val","an integer",t);if(r<1||r>Number.MAX_SAFE_INTEGER)throw s1("val",`>= 1 && <= ${Number.MAX_SAFE_INTEGER}`,t);e.push(r)}}}var Wm=(()=>{let e=new Map,t=[],r=new Set,n=typeof performance<"u"&&performance&&typeof performance.now=="function"?performance:{now(){return Gl()},timeOrigin:Date.now()-Gl()};typeof n.mark!="function"&&(n.mark=function(A){let f={name:String(A??""),entryType:"mark",startTime:n.now(),duration:0},l=e.get(f.name)??[];return l.push(f),e.set(f.name,l),f}),typeof n.measure!="function"&&(n.measure=function(A,f,l){let p=String(A??""),B=0,S=n.now();if(typeof f=="string"){let N=e.get(f);if(N?.length&&(B=N[N.length-1].startTime),typeof l=="string"){let P=e.get(l);P?.length&&(S=P[P.length-1].startTime)}}else if(f&&typeof f=="object"){if(typeof f.start=="number")B=f.start;else if(typeof f.startMark=="string"){let N=e.get(f.startMark);N?.length&&(B=N[N.length-1].startTime)}if(typeof f.end=="number")S=f.end;else if(typeof f.endMark=="string"){let N=e.get(f.endMark);N?.length&&(S=N[N.length-1].startTime)}}let _={name:p,entryType:"measure",startTime:B,duration:Math.max(0,S-B)};return t.push(_),_}),typeof n.getEntriesByName!="function"&&(n.getEntriesByName=function(A,f=void 0){let l=String(A??""),B=[...e.get(l)??[],...t.filter(S=>S.name===l)];return typeof f=="string"?B.filter(S=>S.entryType===f):B}),typeof n.getEntries!="function"&&(n.getEntries=function(){return[...e.values()].flatMap(A=>[...A]).concat(t)}),typeof n.getEntriesByType!="function"&&(n.getEntriesByType=function(A){let f=String(A??"");return n.getEntries().filter(l=>l.entryType===f)}),typeof n.clearMarks!="function"&&(n.clearMarks=function(A=void 0){if(typeof A>"u"){e.clear();return}e.delete(String(A))}),typeof n.clearMeasures!="function"&&(n.clearMeasures=function(A=void 0){if(typeof A>"u"){t.length=0;return}let f=String(A);for(let l=t.length-1;l>=0;l-=1)t[l]?.name===f&&t.splice(l,1)});let i=A=>{A._deliveryQueued||(A._deliveryQueued=!0,_a(()=>{if(A._deliveryQueued=!1,!A._connected)return;let f=A.takeRecords();A._callback(zY(f),A)}))},s=A=>{let f=jY(A);for(let l of r)l._entryTypes.has(f.entryType)&&(l._records.push(f),i(l))},o=n.mark.bind(n);n.mark=function(...A){let f=o(...A);return s(f),f};let a=n.measure.bind(n);return n.measure=function(...A){let f=a(...A);return s(f),f},n.__agentOSObservers=r,n})(),hwe={PerformanceObserver:class{constructor(e){if(typeof e!="function")throw new TypeError("PerformanceObserver callback must be a function");this._callback=e,this._connected=!1,this._deliveryQueued=!1,this._entryTypes=new Set,this._records=[]}static get supportedEntryTypes(){return["mark","measure"]}observe(e={}){let t=Array.isArray(e?.entryTypes)?e.entryTypes.map(r=>String(r)):typeof e?.type=="string"?[String(e.type)]:[];if(t.length===0)throw new TypeError("PerformanceObserver.observe() requires an entryTypes array or type string");if(this.disconnect(),this._entryTypes=new Set(t),this._connected=!0,Wm.__agentOSObservers.add(this),e?.buffered){for(let r of this._entryTypes)for(let n of Wm.getEntriesByType(r))this._records.push(jY(n));this._records.length>0&&(this._deliveryQueued=!0,_a(()=>{if(this._deliveryQueued=!1,!this._connected)return;let r=this.takeRecords();this._callback(zY(r),this)}))}}disconnect(){this._connected=!1,Wm.__agentOSObservers.delete(this)}takeRecords(){let e=this._records.slice();return this._records.length=0,e}},constants:{},createHistogram(){return lwe()},performance:Wm};function KY(e){let t=JSON.stringify(e??null);return Buffer.from(t,"utf8")}function XY(e){let t=Buffer.isBuffer(e)?e:Buffer.from(e??[]);return JSON.parse(t.toString("utf8"))}var sG=class{constructor(){this._value=null}writeHeader(){}writeValue(e){this._value=e}releaseBuffer(){return KY(this._value)}transferArrayBuffer(){}},oG=class{constructor(e){this._buffer=e}readHeader(){}readValue(){return XY(this._buffer)}transferArrayBuffer(){}};function dwe(){let e=Number(globalThis.__agentOSV8HeapLimitBytes);return Number.isFinite(e)&&e>0?e:128*1024*1024}function gwe(){let e=dwe();return{total_heap_size:Math.max(64*1024*1024,Math.floor(e/2)),total_heap_size_executable:1024*1024,total_physical_size:Math.max(64*1024*1024,Math.floor(e/2)),total_available_size:Math.max(0,e-64*1024*1024),used_heap_size:Math.max(0,Math.min(e,Math.floor(e*.4))),heap_size_limit:e,malloced_memory:8192,peak_malloced_memory:16384,does_zap_garbage:0,number_of_native_contexts:1,number_of_detached_contexts:0,total_global_handles_size:16384,used_global_handles_size:8192,external_memory:0}}function pwe(){return[]}function Ewe(){return{code_and_metadata_size:0,bytecode_and_metadata_size:0,external_script_source_size:0,cpu_profiler_metadata_size:0}}function ywe(){return{committed_size_bytes:0,resident_size_bytes:0,used_size_bytes:0,space_statistics:[]}}function mwe(){return Readable.fromWeb(new ReadableStream({start(e){e.enqueue(Buffer.from("{}")),e.close()}}))}var Bwe={cachedDataVersionTag(){return 0},DefaultDeserializer:oG,DefaultSerializer:sG,Deserializer:oG,GCProfiler:class{start(){}stop(){return[]}},Serializer:sG,deserialize:XY,getCppHeapStatistics:ywe,getHeapCodeStatistics:Ewe,getHeapSnapshot:mwe,getHeapSpaceStatistics:pwe,getHeapStatistics:gwe,isStringOneByteRepresentation(e){return typeof e=="string"&&!/[^\x00-\xff]/.test(e)},promiseHooks:{},queryObjects(){return[]},serialize:KY,setFlagsFromString(){},setHeapSnapshotNearHeapLimit(){return[]},startCpuProfile(){return{stop(){return{}}}},startupSnapshot:{},stopCoverage(){return[]},takeCoverage(){return[]},writeHeapSnapshot(){return""}},Y1=typeof Symbol=="function"?Symbol.for("secure-exec.vm.context"):"__secure_exec_vm_context__",bB=typeof Symbol=="function"?Symbol.for("secure-exec.vm.context.id"):"__secure_exec_vm_context_id__";function aG(e){let t=new Error(`node:vm ${e} is not implemented in the secure-exec guest runtime`);return t.code="ERR_NOT_IMPLEMENTED",t}function eR(e){return e!==null&&(typeof e=="object"||typeof e=="function")}function Yg(e=void 0){if(typeof e=="string")return{filename:e};if(!e||typeof e!="object")return{};let t={};return typeof e.filename=="string"&&(t.filename=e.filename),Number.isInteger(e.lineOffset)&&(t.lineOffset=e.lineOffset),Number.isInteger(e.columnOffset)&&(t.columnOffset=e.columnOffset),Number.isInteger(e.timeout)&&e.timeout>0&&(t.timeout=e.timeout),e.cachedData!==void 0&&(t.cachedData=e.cachedData),e.produceCachedData===!0&&(t.produceCachedData=!0),t}function o1(e,t){let r=Yg(e),n=Yg(t);return{...r,...n}}function ZY(e={}){if(!eR(e))throw new TypeError('The "object" argument must be of type object.');if(e[Y1]===!0&&Number.isInteger(e[bB]))return e;let t=_vmCreateContext(e);return Object.defineProperty(e,Y1,{value:!0,configurable:!0,enumerable:!1,writable:!1}),Object.defineProperty(e,bB,{value:t,configurable:!1,enumerable:!1,writable:!1}),e}function $Y(e){return eR(e)&&e[Y1]===!0&&Number.isInteger(e[bB])}function Iwe(e){if(!$Y(e))throw new TypeError('The "contextifiedObject" argument must be a vm context.');return e}function eW(e,t=void 0){return _vmRunInThisContext(String(e),Yg(t))}function tR(e,t,r=void 0){let n=Iwe(t);return _vmRunInContext(n[bB],String(e),Yg(r),n)}function tW(e,t={},r=void 0){let n=eR(t),i=n?t:{},s=n?r:t;return tR(e,ZY(i),s)}var bwe=class{constructor(e,t=void 0){this.code=String(e),this.options=Yg(t),this.filename=this.options.filename??"evalmachine.<anonymous>",this.lineOffset=this.options.lineOffset??0,this.columnOffset=this.options.columnOffset??0,this.cachedData=this.options.cachedData,this.cachedDataProduced=!1,this.cachedDataRejected=!1}createCachedData(){return typeof Buffer=="function"?Buffer.alloc(0):new Uint8Array(0)}runInThisContext(e=void 0){return eW(this.code,o1(this.options,e))}runInContext(e,t=void 0){return tR(this.code,e,o1(this.options,t))}runInNewContext(e={},t=void 0){return tW(this.code,e,o1(this.options,t))}},Cwe={Script:bwe,compileFunction(){throw aG("compileFunction")},createContext:ZY,isContext:$Y,measureMemory(){throw aG("measureMemory")},runInContext:tR,runInNewContext:tW,runInThisContext:eW},rW=k1.default?.default??k1.default,AG=x1.default?.default??x1.default,nW=Sg.default?.request??Sg.default?.default?.request??Sg.default?.default??Sg.default,fG=eB.default?.fetch??eB.default?.default??eB.default,Qwe=yu.default?.Headers??yu.default?.default??yu.default,wwe=mu.default?.Request??mu.default?.default??mu.default,Swe=Bu.default?.Response??Bu.default?.default??Bu.default,uG=M2.default?.setGlobalDispatcher,cG=M2.default?.getGlobalDispatcher,a1=null;function _we(){return new rW({connections:6,connect(e,t){try{let r=e?.protocol==="https:"||e?.protocol==="https"?"https:":"http:",n=e?.hostname||e?.host||e?.servername||"localhost",i=e?.port;if(e?.origin){let p=new URL(String(e.origin));r=p.protocol==="https:"?"https:":"http:",n=p.hostname||n,i=p.port||i}typeof n=="string"&&n.startsWith("[")&&n.endsWith("]")&&(n=n.slice(1,-1));let s=eI({protocol:r,hostname:n,host:n,port:i?Number(i):r==="https:"?443:80,servername:e?.servername||n,rejectUnauthorized:e?.rejectUnauthorized}),o=cR(r),a=!1,A=()=>{s.off?.(o,f),s.removeListener?.(o,f),s.off?.("error",l),s.removeListener?.("error",l)},f=()=>{a||(a=!0,A(),t(null,s))},l=p=>{a||(a=!0,A(),t(p instanceof Error?p:new Error(String(p))))};return s.once(o,f),s.once("error",l),s}catch(r){return t(r instanceof Error?r:new Error(String(r))),null}}})}function W1(){return a1||(a1=_we()),a1}typeof uG=="function"&&typeof rW=="function"&&(typeof cG=="function"?cG():null)==null&&uG(W1());var rR="__secureExecNetSocket:",vwe="net-server:",Wg=new Map,CB=new Map,QB=new Map,Vg=new Map;function A1(e){return globalThis[`${rR}${e}`]}function lG(e,t){globalThis[`${rR}${e}`]=t,Wg.set(e,t)}function Rwe(e){delete globalThis[`${rR}${e}`],Wg.delete(e)}function _g(e){return!!e&&e._socketId!==0&&Wg.get(e._socketId)===e}function kg(e,t){if(e._bridgeReadPumpQueued){X("readPumpQueueCoalesced");return}e._bridgeReadPumpQueued=!0,queueMicrotask(()=>{e._bridgeReadPumpQueued=!1,!e.destroyed&&_g(e)&&e._socketId!==0&&(e._nextReadPumpOrigin=t,e._pumpBridgeReads())})}function iW(e){let t=e?._address;if(typeof t=="string")return t;let r=t?.path;return typeof r=="string"?r:void 0}function Dwe(e){e?._serverId&&Vg.set(e._serverId,e);let t=e?._address?.port;typeof t=="number"&&CB.set(t,e);let r=iW(e);typeof r=="string"&&QB.set(r,e)}function Twe(e){e?._serverId&&Vg.get(e._serverId)===e&&Vg.delete(e._serverId);let t=e?._address?.port;typeof t=="number"&&CB.get(t)===e&&CB.delete(t);let r=iW(e);typeof r=="string"&&QB.get(r)===e&&QB.delete(r)}function wB(e){if(X("readWakeAttempts"),!e||e.destroyed||e._socketId===0||e._loopbackServer||e._loopbackHttpTarget){X("readWakeInvalidTargets");return}if(e._pendingBridgeWake=!0,e._pendingBridgeWakeRetries=0,e._bridgeReadLoopRunning&&X("readWakeAlreadyRunning"),!e._bridgeReadPollTimer){X("readWakeNoTimer"),X(e._bridgeReadPumpStarted?"readWakeNoTimerAfterFirstPump":"readWakeNoTimerBeforeFirstPump"),e._connected&&X("readWakeNoTimerConnected"),e.connecting&&X("readWakeNoTimerConnecting"),X(e._refed?"readWakeNoTimerRefed":"readWakeNoTimerUnrefed");let t=(e._listeners?.data?.length??0)>0,r=(e._listeners?.readable?.length??0)>0;if(t&&X("readWakeNoTimerHasDataListener"),r&&X("readWakeNoTimerHasReadableListener"),e._bridgeWriteFlushScheduled&&(X("readWakeNoTimerPendingWriteFlush"),X("readWakeNoTimerPendingWriteBytes",e._pendingBridgeWriteBytes)),!e._bridgeReadPumpStarted&&e._firstReadNoTimerWakeAtUs===0&&It()&&(e._firstReadNoTimerWakeAtUs=At()),!e._bridgeReadPumpStarted&&e._connected&&e._refed&&(t||r))if(It()&&X("readFirstPumpScheduleCandidates"),e._bridgeReadFirstPumpBenchmarkScheduled)It()&&X("readFirstPumpScheduleAlreadyScheduled");else{It()&&X("readFirstPumpScheduleQueued"),e._bridgeReadFirstPumpBenchmarkScheduled=!0;let n=At();queueMicrotask(()=>{It()&&X("readFirstPumpScheduleRuns");let i=At(),s=Math.max(0,i-n);if(It()&&(X("readFirstPumpScheduleQueuedToRunUs",s),Qr("readFirstPumpScheduleQueuedToRunMaxUs",s)),e._bridgeReadFirstPumpBenchmarkScheduled=!1,e.destroyed){It()&&X("readFirstPumpScheduleSkipDestroyed");return}if(e._tlsUpgrading){It()&&X("readFirstPumpScheduleSkipTlsUpgrading");return}if(e._bridgeReadPumpStarted){It()&&X("readFirstPumpScheduleSkipPumpStarted");return}if(e._bridgeReadLoopRunning){It()&&X("readFirstPumpScheduleSkipLoopRunning");return}if(e._socketId===0){It()&&X("readFirstPumpScheduleSkipSocketClosed");return}It()&&X("readFirstPumpSchedulePumpCalls"),e._nextReadPumpOrigin="eventWake",e._readFirstPumpScheduleActive=!0,e._readFirstPumpScheduleQueuedAtUs=n,e._pumpBridgeReads()})}!e._bridgeReadLoopRunning&&e._connected&&e._refed&&kg(e,"eventWake");return}clearTimeout(e._bridgeReadPollTimer),e._bridgeReadPollTimer=null,X("readEventWakeups"),It()&&(e._readWakeQueuedAtUs=At()),kg(e,"eventWake")}function oB(e){if(X("peerWakeScans"),!e||e._socketId===0){X("peerWakeInvalidTargets");return}if(typeof e.remotePort=="number"&&typeof e.localPort=="number"){for(let i of Wg.values())if(!(i===e||i.destroyed)&&i.localPort===e.remotePort&&i.remotePort===e.localPort){X("peerWakeFound"),wB(i);return}X("peerWakeMiss");return}let t=typeof e.localPath=="string"?e.localPath:void 0,r=typeof e.remotePath=="string"?e.remotePath:void 0;if(t===void 0&&r===void 0){X("peerWakeInvalidTargets");return}let n=!1;for(let i of Wg.values()){if(i===e||i.destroyed)continue;let s=typeof i.localPath=="string"?i.localPath:void 0,o=typeof i.remotePath=="string"?i.remotePath:void 0;(t!==void 0&&r!==void 0&&s!==void 0&&o!==void 0&&s===r&&o===t||r!==void 0&&s!==void 0&&s===r||t!==void 0&&o!==void 0&&o===t)&&(n=!0,X("peerWakeUnixFound"),wB(i))}n||X("peerWakeUnixMiss")}function SB(e){if(X("acceptWakeAttempts"),!e||!e.listening||e._serverId===0||!e._acceptPollTimer){if(!e||!e.listening||e._serverId===0)X("acceptWakeInvalidTargets");else{e._pendingAcceptWake=!0,X("acceptWakeNoTimer"),X(e._acceptPumpStarted?"acceptWakeNoTimerAfterFirstPump":"acceptWakeNoTimerBeforeFirstPump"),e._acceptLoopRunning&&X("acceptWakeNoTimerLoopRunning"),e._acceptLoopActive&&X("acceptWakeNoTimerLoopActive"),X(e._refed?"acceptWakeNoTimerRefed":"acceptWakeNoTimerUnrefed");let t=e._connections?.size??0;X("acceptWakeNoTimerConnections",t),Qr("acceptWakeNoTimerConnectionsMax",t),!e._acceptPumpStarted&&e._firstAcceptNoTimerWakeAtUs===0&&It()&&(e._firstAcceptNoTimerWakeAtUs=At()),e._acceptLoopActive&&!e._acceptLoopRunning&&queueMicrotask(()=>{if(e.listening&&e._serverId!==0&&!e._acceptLoopRunning)return e._nextAcceptPumpOrigin="eventWake",e._pumpAccepts()})}return}e._acceptLoopRunning&&X("acceptWakeAlreadyRunning"),clearTimeout(e._acceptPollTimer),e._acceptPollTimer=null,X("acceptEventWakeups"),It()&&(e._acceptWakeQueuedAtUs=At()),queueMicrotask(()=>{if(e.listening&&e._serverId!==0)return e._nextAcceptPumpOrigin="eventWake",e._pumpAccepts()})}function Nwe(e){X("acceptWakeSocketScans");let t=e?.remotePort;if(typeof t=="number"){let i=CB.get(t);return X(i?"acceptWakeSocketFound":"acceptWakeSocketMiss"),i?._acceptLoopActive&&!i._acceptLoopRunning?(i._nextAcceptPumpOrigin="eventWake",i._pumpAccepts()):SB(i)}let r=e?.remotePath;if(typeof r!="string"){X("acceptWakeSocketInvalidTargets");return}let n=QB.get(r);return n?(X("acceptWakeSocketFound"),X("acceptWakeSocketUnixFound")):(X("acceptWakeSocketMiss"),X("acceptWakeSocketUnixMiss")),n?._acceptLoopActive&&!n._acceptLoopRunning?(n._nextAcceptPumpOrigin="eventWake",n._pumpAccepts()):SB(n)}function hG(e){return e===void 0?!0:!!e}function _B(e){return typeof e!="number"||!Number.isFinite(e)?0:Math.max(0,Math.floor(e/1e3))}function Mwe(e,t){return lr(`The "${e}" argument must be of type number. Received ${Yn(t)}`,"ERR_INVALID_ARG_TYPE")}function Pl(e,t){return lr(`The "${e}" argument must be of type function. Received ${Yn(t)}`,"ERR_INVALID_ARG_TYPE")}function Fwe(e){let t=new RangeError(`The value of "timeout" is out of range. It must be a non-negative finite number. Received ${String(e)}`);return t.code="ERR_OUT_OF_RANGE",t}function _l(e){return lr(e,"ERR_INVALID_ARG_VALUE")}function V1(e){let t=new RangeError(`options.port should be >= 0 and < 65536. Received ${Yn(e)}.`);return t.code="ERR_SOCKET_BAD_PORT",t}function J1(e){return Number.isInteger(e)&&e>=0&&e<65536}function sW(e){return/^[0-9]+$/.test(e)}function dG(e){if(e==null)return 0;if(typeof e=="string"&&e.length>0){let t=Number(e);if(J1(t))return t;throw V1(e)}if(typeof e=="number"){if(J1(e))return e;throw V1(e)}throw _l(`The argument 'options' is invalid. Received ${String(e)}`)}function oW(e,t,r,n){let i={port:0,host:"127.0.0.1",backlog:511,readableAll:!1,writableAll:!1};if(typeof e=="function")return{...i,callback:e};if(e!==null&&typeof e=="object"){let s=e,o=Object.prototype.hasOwnProperty.call(s,"port"),a=Object.prototype.hasOwnProperty.call(s,"path");if(!o&&!a)throw _l(`The argument 'options' must have the property "port" or "path". Received ${String(e)}`);if(o&&a)throw _l(`The argument 'options' is invalid. Received ${String(e)}`);if(o&&s.port!==void 0&&s.port!==null&&typeof s.port!="number"&&typeof s.port!="string")throw _l(`The argument 'options' is invalid. Received ${String(e)}`);if(a){if(typeof s.path!="string"||s.path.length===0)throw _l(`The argument 'options' is invalid. Received ${String(e)}`);return{path:s.path,backlog:typeof s.backlog=="number"&&Number.isFinite(s.backlog)?s.backlog:i.backlog,readableAll:s.readableAll===!0,writableAll:s.writableAll===!0,callback:typeof t=="function"?t:typeof r=="function"?r:n}}return{port:dG(s.port),host:typeof s.host=="string"&&s.host.length>0?s.host:i.host,backlog:typeof s.backlog=="number"&&Number.isFinite(s.backlog)?s.backlog:i.backlog,readableAll:!1,writableAll:!1,callback:typeof t=="function"?t:typeof r=="function"?r:n}}if(e!=null&&typeof e!="number"&&typeof e!="string")throw _l(`The argument 'options' is invalid. Received ${String(e)}`);return typeof e=="string"&&e.length>0&&!sW(e)?{path:e,backlog:i.backlog,readableAll:!1,writableAll:!1,callback:typeof t=="function"?t:typeof r=="function"?r:n}:{port:dG(e),host:typeof t=="string"?t:i.host,backlog:typeof r=="number"?r:i.backlog,readableAll:!1,writableAll:!1,callback:typeof t=="function"?t:typeof r=="function"?r:n}}function kwe(e,t,r){if(e!==null&&typeof e=="object"){let n=typeof e.port=="string"?Number(e.port):e.port;return{host:typeof e.host=="string"&&e.host.length>0?e.host:void 0,port:n,path:typeof e.path=="string"&&e.path.length>0?e.path:void 0,localAddress:typeof e.localAddress=="string"&&e.localAddress.length>0?e.localAddress:void 0,localPort:typeof e.localPort=="number"?e.localPort:void 0,keepAlive:e.keepAlive,keepAliveInitialDelay:e.keepAliveInitialDelay,callback:typeof t=="function"?t:r}}return typeof e=="string"&&!sW(e)?{path:e,callback:typeof t=="function"?t:r}:{port:typeof e=="number"?e:Number(e),host:typeof t=="string"?t:"127.0.0.1",callback:typeof t=="function"?t:r}}function xwe(e){if(!/^[0-9]{1,3}$/.test(e)||e.length>1&&e.startsWith("0"))return!1;let t=Number(e);return Number.isInteger(t)&&t>=0&&t<=255}function u0(e){let t=e.split(".");return t.length===4&&t.every(r=>xwe(r))}function Uwe(e){return e.length>0&&/^[0-9A-Za-z_.-]+$/.test(e)}function f1(e){if(e.length===0)return 0;let t=e.split(":"),r=0;for(let n of t){if(n.length===0)return null;if(n.includes(".")){if(n!==t[t.length-1]||!u0(n))return null;r+=2;continue}if(!/^[0-9A-Fa-f]{1,4}$/.test(n))return null;r+=1}return r}function $B(e){if(e.length===0)return!1;let t=e,r=t.indexOf("%");if(r!==-1){if(t.indexOf("%",r+1)!==-1)return!1;let s=t.slice(r+1);if(!Uwe(s))return!1;t=t.slice(0,r)}let n=t.indexOf("::");if(n!==-1){if(t.indexOf("::",n+2)!==-1)return!1;let[s,o]=t.split("::");if(s.includes("."))return!1;let a=f1(s),A=f1(o);return a===null||A===null?!1:a+A<8}return f1(t)===8}function Lwe(e){return e==null?"":String(e)}function Ml(e){let t=Lwe(e);return u0(t)?4:$B(t)?6:0}function vl(e,t){if(t==="ipv4"||t===4)return"ipv4";if(t==="ipv6"||t===6)return"ipv6";let r=Ml(e);if(r===4)return"ipv4";if(r===6)return"ipv6";throw new TypeError(`Invalid IP address: ${e}`)}function aW(e){return e.split(".").reduce((t,r)=>(t<<8n)+BigInt(Number(r)),0n)}function Pwe(e){let t=String(e),r=t.indexOf("%");if(r!==-1&&(t=t.slice(0,r)),t.includes(".")){let l=t.lastIndexOf(":"),p=t.slice(l+1),B=aW(p),S=Number(B>>16n&65535n).toString(16),_=Number(B&65535n).toString(16);t=`${t.slice(0,l)}:${S}:${_}`}let n=t.includes("::"),[i,s]=n?t.split("::"):[t,""],o=i.length>0?i.split(":"):[],a=s.length>0?s.split(":"):[],A=n?Math.max(0,8-(o.length+a.length)):0,f=[...o,...new Array(A).fill("0"),...a];if(f.length!==8)throw new TypeError(`Invalid IPv6 address: ${e}`);return f.map(l=>l.length===0?"0":l)}function Owe(e){return Pwe(e).reduce((t,r)=>(t<<16n)+BigInt(parseInt(r,16)),0n)}function Bg(e,t){return t==="ipv4"?aW(e):Owe(e)}function Hwe(e){return e.type==="address"?`Address: ${e.family==="ipv4"?"IPv4":"IPv6"} ${e.address}`:e.type==="range"?`Range: ${e.family==="ipv4"?"IPv4":"IPv6"} ${e.start}-${e.end}`:`Subnet: ${e.family==="ipv4"?"IPv4":"IPv6"} ${e.network}/${e.prefix}`}var qwe=class{constructor(){y(this,"_rules",[])}addAddress(e,t){let r=vl(e,t);return this._rules.push({type:"address",family:r,address:String(e)}),this}addRange(e,t,r){let n=vl(e,r);if(vl(t,n)!==n)throw new TypeError("BlockList range family mismatch");return this._rules.push({type:"range",family:n,start:String(e),end:String(t)}),this}addSubnet(e,t,r){let n=vl(e,r),i=Number(t),s=n==="ipv4"?32:128;if(!Number.isInteger(i)||i<0||i>s)throw new RangeError(`Invalid subnet prefix: ${t}`);return this._rules.push({type:"subnet",family:n,network:String(e),prefix:i}),this}check(e,t){let r=vl(e,t),n=Bg(String(e),r);for(let i of this._rules)if(i.family===r){if(i.type==="address"&&n===Bg(i.address,r))return!0;if(i.type==="range"){let s=Bg(i.start,r),o=Bg(i.end,r);if(n>=s&&n<=o)return!0}if(i.type==="subnet"){let s=r==="ipv4"?32n:128n,o=BigInt(i.prefix),a=s-o,A=o===0n?0n:(1n<<s)-1n^(1n<<a)-1n,f=Bg(i.network,r);if((n&A)===(f&A))return!0}}return!1}toJSON(){return this._rules.map(e=>({...e}))}fromJSON(e){if(!Array.isArray(e))throw new TypeError("BlockList JSON must be an array");return this._rules=e.map(t=>({...t})),this}get rules(){return this._rules.map(e=>Hwe(e))}},gG=!0,pG=250,Gwe=class vg{constructor(t={}){let r=String(t.address??""),n=vl(r,t.family),i=Number(t.port??0),s=Number(t.flowlabel??0);if(!Number.isInteger(i)||i<0||i>65535)throw new RangeError(`Invalid port: ${t.port}`);if(!Number.isInteger(s)||s<0)throw new RangeError(`Invalid flowlabel: ${t.flowlabel}`);this.address=r,this.port=i,this.family=n,this.flowlabel=s}toJSON(){return{address:this.address,port:this.port,family:this.family,flowlabel:this.flowlabel}}static isSocketAddress(t){return t instanceof vg}static parse(t){let r=String(t);if(r.startsWith("[")){let i=r.indexOf("]");if(i===-1)return;let s=r.slice(1,i),o=r[i+1]===":"?Number(r.slice(i+2)):0;return new vg({address:s,family:"ipv6",port:o})}let n=r.lastIndexOf(":");if(n!==-1&&r.indexOf(":")===n){let i=r.slice(0,n),s=Number(r.slice(n+1));if(Ml(i)!==0&&Number.isInteger(s))return new vg({address:i,port:s})}if(Ml(r)!==0)return new vg({address:r})}};function AW(e){if(typeof e!="number")throw Mwe("timeout",e);if(!Number.isFinite(e)||e<0)throw Fwe(e);return e}function fW(e){if(!e)return null;try{let t=JSON.parse(e);return t&&typeof t=="object"?t:null}catch{return null}}function Ywe(e){if(!e)throw new Error("net.connect bridge returned an empty socket handle");if(typeof e=="string")return{socketId:e};if(typeof e=="object"&&(typeof e.socketId=="string"||typeof e.socketId=="number")||typeof e=="object"&&e.loopbackHttpTarget)return e;throw new Error("net.connect bridge returned an invalid socket handle")}function aB(e){if(e!=null){if(Array.isArray(e)){let t=e.map(r=>aB(r)).flatMap(r=>Array.isArray(r)?r:r?[r]:[]);return t.length>0?t:void 0}if(typeof e=="string")return{kind:"string",data:e};if(Buffer.isBuffer(e)||e instanceof Uint8Array)return{kind:"buffer",data:Buffer.from(e).toString("base64")}}}function j1(e){return!!e&&typeof e=="object"&&"__secureExecTlsContext"in e}function Wl(e,t){let n={...(j1(e?.secureContext)?e.secureContext.__secureExecTlsContext:void 0)??{},...t},i=aB(e?.key),s=aB(e?.cert),o=aB(e?.ca);if(i!==void 0&&(n.key=i),s!==void 0&&(n.cert=s),o!==void 0&&(n.ca=o),typeof e?.passphrase=="string"&&(n.passphrase=e.passphrase),typeof e?.ciphers=="string"&&(n.ciphers=e.ciphers),(Buffer.isBuffer(e?.session)||e?.session instanceof Uint8Array)&&(n.session=Buffer.from(e.session).toString("base64")),Array.isArray(e?.ALPNProtocols)){let a=e.ALPNProtocols.filter(A=>typeof A=="string");a.length>0&&(n.ALPNProtocols=a)}return typeof e?.minVersion=="string"&&(n.minVersion=e.minVersion),typeof e?.maxVersion=="string"&&(n.maxVersion=e.maxVersion),typeof e?.servername=="string"&&(n.servername=e.servername),typeof e?.rejectUnauthorized=="boolean"&&(n.rejectUnauthorized=e.rejectUnauthorized),typeof e?.requestCert=="boolean"&&(n.requestCert=e.requestCert),n}function Wwe(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}function Vwe(e){if(!e)return null;try{return JSON.parse(e)}catch{return null}}function Jwe(e){if(!e)return new Error("socket error");try{let t=JSON.parse(e),r=new Error(t.message);return t.name&&(r.name=t.name),t.code&&(r.code=t.code),t.stack&&(r.stack=t.stack),r}catch{return new Error(e)}}function z1(e,t=new Map){if(e===null||typeof e=="boolean"||typeof e=="number"||typeof e=="string")return e;if(e.type==="undefined")return;if(e.type==="buffer")return Buffer.from(e.data,"base64");if(e.type==="array")return e.value.map(n=>z1(n,t));if(e.type==="ref")return t.get(e.id);let r={};t.set(e.id,r);for(let[n,i]of Object.entries(e.value))r[n]=z1(i,t);return r}function ba(e,t,r){if(typeof _netSocketTlsQueryRaw>"u")return;let n=_netSocketTlsQueryRaw.applySync(void 0,r===void 0?[e,t]:[e,t,r]);return z1(JSON.parse(n))}function AB(e,t="secureConnect",r=!0){if(e._tlsUpgrading=!1,e.encrypted=!0,e.authorized=e.authorizationError==null,typeof e._socketId=="string"&&e._socketId.length>0){let n=ba(e._socketId,"getProtocol");(typeof n=="string"||n===null)&&(e._tlsProtocol=n);let i=ba(e._socketId,"getCipher");i!==void 0&&(e._tlsCipher=i);let s=ba(e._socketId,"isSessionReused");typeof s=="boolean"&&(e._tlsSessionReused=s)}e._touchTimeout(),e._emitNet(t),t!=="secure"&&e._emitNet("secure"),r&&!e.destroyed&&!e._bridgeReadLoopRunning&&(e._nextReadPumpOrigin="tls",e._pumpBridgeReads())}function EG(e){return{socketId:e,setNoDelay(t){return _netSocketSetNoDelayRaw?.applySync(void 0,[e,t!==!1]),this},setKeepAlive(t,r){return _netSocketSetKeepAliveRaw?.applySync(void 0,[e,t!==!1,_B(r)]),this},ref(){return this},unref(){return this}}}function jwe(e,t){return{socketId:e,info:t,setNoDelay(r){return _netSocketSetNoDelayRaw?.applySync(void 0,[e,r!==!1]),this},setKeepAlive(r,n){return _netSocketSetKeepAliveRaw?.applySync(void 0,[e,r!==!1,_B(n)]),this},ref(){return this},unref(){return this}}}var nR="__secure_exec_net_timeout__",vB=10,K1=null;function zwe(){return(typeof process<"u"?process.env:globalThis.__agentOSProcessConfigEnv)?.AGENTOS_NET_BRIDGE_TRACE==="1"}function Kwe(e){let t=Number(e);return!Number.isFinite(t)||t<0?vB:Math.trunc(t)}function iR(){return K1??vB}function Xwe(){let e=typeof process<"u"?process.env:void 0,t=globalThis.__agentOSProcessConfigEnv;return e?.AGENTOS_NET_RETAIN_OWNED_WRITE_BUFFER!=="0"&&t?.AGENTOS_NET_RETAIN_OWNED_WRITE_BUFFER!=="0"}function uW(){return{userWriteCalls:0,userWriteBytes:0,queuedWriteChunks:0,queuedWriteBytes:0,queuedWriteCopiedChunks:0,queuedWriteCopiedBytes:0,queuedWriteRetainedChunks:0,queuedWriteRetainedBytes:0,flushCalls:0,flushChunks:0,flushBytes:0,writeBufferedBytesMax:0,writeBufferedChunksMax:0,writeBase64EncodeCalls:0,writeBase64EncodeBytes:0,writeBase64EncodeUs:0,writeRawCalls:0,writeRawBytes:0,writeRawElapsedUs:0,readRawCalls:0,readRawElapsedUs:0,readPumpRuns:0,readTimeoutSentinels:0,readPollTimersScheduled:0,readPollTimerFires:0,readPollTimerFireLagUs:0,readPollTimerFireLagMaxUs:0,readDataEvents:0,readBytes:0,readBase64DecodeCalls:0,readBase64DecodeBytes:0,readBase64DecodeChars:0,readBase64DecodeUs:0,readPayloadMaterializeCalls:0,readPayloadMaterializeBytes:0,readPayloadMaterializeUs:0,readEndEvents:0,readMacrotaskYields:0,readMacrotaskYieldElapsedUs:0,readMacrotaskYieldMaxUs:0,queueReadablePayloads:0,queueReadablePayloadElapsedUs:0,queueReadablePayloadMaxUs:0,queueReadableBytes:0,queueReadableBytesMax:0,queueReadableImmediateReadCalls:0,queueReadableImmediateReadUs:0,queueReadableImmediateReadMaxUs:0,socketReadableEmits:0,socketReadableEmitUs:0,socketReadableEmitMaxUs:0,socketDataEmits:0,socketDataEmitUs:0,socketDataEmitMaxUs:0,readPostDeliveryProbeCalls:0,readPostDeliveryProbeTimeoutSentinels:0,readPostDeliveryProbeDataEvents:0,readPostDeliveryNextRawCalls:0,readPostDeliveryNextRawTimeoutSentinels:0,readPostDeliveryNextRawDataEvents:0,readPostDeliveryToProbeStartUs:0,readPostDeliveryProbeElapsedUs:0,readPostDeliveryProbeMaxUs:0,readPostDeliveryPendingWriteFlushes:0,readPostDeliveryPendingWriteBytes:0,userWriteDuringDataEmitCalls:0,dataEmitStartToUserWriteUs:0,dataEmitEndToUserWriteUs:0,writeQueuedToFlushStartUs:0,writeQueuedToFlushStartMaxUs:0,writeFlushQueuedToRawUs:0,writeFlushQueuedToRawMaxUs:0,readWakeQueuedToPumpStartUs:0,readWakeQueuedToPumpStartMaxUs:0,acceptWakeQueuedToPumpStartUs:0,acceptWakeQueuedToPumpStartMaxUs:0,socketEndEmits:0,socketCloseEmits:0,socketConnectEmits:0,acceptRawCalls:0,acceptRawElapsedUs:0,acceptPumpRuns:0,acceptLoopAlreadyRunning:0,acceptTimeoutSentinels:0,acceptPollTimersScheduled:0,acceptPollTimerFires:0,acceptPollTimerFireLagUs:0,acceptPollTimerFireLagMaxUs:0,acceptConnections:0,acceptJsonParseUs:0,acceptOnConnectionUs:0,connectionEmits:0,readEventWakeups:0,readWakeAttempts:0,readWakeInvalidTargets:0,readWakeAlreadyRunning:0,readWakeNoTimer:0,readWakeNoTimerBeforeFirstPump:0,readWakeNoTimerAfterFirstPump:0,readWakeNoTimerConnected:0,readWakeNoTimerConnecting:0,readWakeNoTimerRefed:0,readWakeNoTimerUnrefed:0,readWakeNoTimerHasDataListener:0,readWakeNoTimerHasReadableListener:0,readWakeNoTimerPendingWriteFlush:0,readWakeNoTimerPendingWriteBytes:0,readFirstPumpAfterNoTimerWakeCalls:0,readFirstPumpAfterNoTimerWakeUs:0,readFirstPumpAfterNoTimerWakeMaxUs:0,readFirstPumpOriginConnectWait:0,readFirstPumpOriginAcceptedHandle:0,readFirstPumpOriginEventWake:0,readFirstPumpOriginTimer:0,readFirstPumpOriginRef:0,readFirstPumpOriginTls:0,readFirstPumpOriginUnknown:0,readFirstPumpResultData:0,readFirstPumpResultEnd:0,readFirstPumpResultTimeout:0,readFirstPumpScheduleCandidates:0,readFirstPumpScheduleQueued:0,readFirstPumpScheduleAlreadyScheduled:0,readFirstPumpScheduleRuns:0,readFirstPumpSchedulePumpCalls:0,readFirstPumpScheduleSkipDestroyed:0,readFirstPumpScheduleSkipTlsUpgrading:0,readFirstPumpScheduleSkipPumpStarted:0,readFirstPumpScheduleSkipLoopRunning:0,readFirstPumpScheduleSkipSocketClosed:0,readFirstPumpScheduleQueuedToRunUs:0,readFirstPumpScheduleQueuedToRunMaxUs:0,readFirstPumpScheduleQueuedToPumpStartUs:0,readFirstPumpScheduleQueuedToPumpStartMaxUs:0,readFirstPumpScheduleResultData:0,readFirstPumpScheduleResultTimeout:0,readFirstPumpScheduleResultEnd:0,peerWakeScans:0,peerWakeInvalidTargets:0,peerWakeFound:0,peerWakeMiss:0,peerWakeUnixFound:0,peerWakeUnixMiss:0,peerWakeOnShutdown:0,peerWakeOnDestroy:0,acceptEventWakeups:0,acceptWakeAttempts:0,acceptWakeInvalidTargets:0,acceptWakeNoTimer:0,acceptWakeNoTimerBeforeFirstPump:0,acceptWakeNoTimerAfterFirstPump:0,acceptWakeNoTimerLoopRunning:0,acceptWakeNoTimerLoopActive:0,acceptWakeNoTimerRefed:0,acceptWakeNoTimerUnrefed:0,acceptWakeNoTimerConnections:0,acceptWakeNoTimerConnectionsMax:0,acceptFirstPumpAfterNoTimerWakeCalls:0,acceptFirstPumpAfterNoTimerWakeUs:0,acceptFirstPumpAfterNoTimerWakeMaxUs:0,acceptFirstPumpOriginListen:0,acceptFirstPumpOriginEventWake:0,acceptFirstPumpOriginTimer:0,acceptFirstPumpOriginRef:0,acceptFirstPumpOriginUnknown:0,acceptFirstPumpResultConnection:0,acceptFirstPumpResultTimeout:0,acceptFirstPumpResultEmpty:0,acceptWakeAlreadyRunning:0,acceptWakeSocketScans:0,acceptWakeSocketInvalidTargets:0,acceptWakeSocketFound:0,acceptWakeSocketMiss:0,acceptWakeSocketUnixFound:0,acceptWakeSocketUnixMiss:0,dgramWakeAttempts:0,dgramWakeInvalidTargets:0,dgramWakeAlreadyRunning:0,dgramWakeNoTimer:0,dgramEventWakeups:0,dgramWakeLoopbackHits:0,dgramWakeLoopbackMisses:0}}var X1=!1,Ol=uW();function It(){return X1||zwe()}function At(){return typeof __secureExecHrNowUs=="function"?Math.round(__secureExecHrNowUs()):typeof performance<"u"&&typeof performance.now=="function"?Math.round(performance.now()*1e3):Date.now()*1e3}function X(e,t=1){It()&&(Ol[e]=(Ol[e]??0)+t)}function Qr(e,t){if(!It())return;let r=Number(t);Number.isFinite(r)&&(Ol[e]=Math.max(Ol[e]??0,r))}function Zwe(e){switch(e){case"connectWait":X("readFirstPumpOriginConnectWait");break;case"acceptedHandle":X("readFirstPumpOriginAcceptedHandle");break;case"eventWake":X("readFirstPumpOriginEventWake");break;case"timer":X("readFirstPumpOriginTimer");break;case"ref":X("readFirstPumpOriginRef");break;case"tls":X("readFirstPumpOriginTls");break;default:X("readFirstPumpOriginUnknown");break}}function $we(e){switch(e){case"listen":X("acceptFirstPumpOriginListen");break;case"eventWake":X("acceptFirstPumpOriginEventWake");break;case"timer":X("acceptFirstPumpOriginTimer");break;case"ref":X("acceptFirstPumpOriginRef");break;default:X("acceptFirstPumpOriginUnknown");break}}Ge("__agentOSNetBridgeMetrics",{get enabled(){return It()},enable(){X1=!0},disable(){X1=!1},setPollDelayMs(e){K1=Kwe(e)},resetPollDelayMs(){K1=null},pollDelayMs(){return iR()},reset(){Ol=uW(),typeof _benchNetTcpMetricsResetRaw<"u"&&_benchNetTcpMetricsResetRaw.applySync(void 0,[])},snapshot(){let e;return typeof _benchNetTcpMetricsSnapshotRaw<"u"&&(e=_benchNetTcpMetricsSnapshotRaw.applySync(void 0,[])),{...Ol,...e?{sidecarNetTrace:e}:{}}}});function eSe(){return new Promise(e=>{typeof IB=="function"?IB(e):setTimeout(e,0)})}function tSe(e,t,r){if(e==="net_socket"&&t&&typeof t=="object"){let i=t;if(i.event==="accept"){let o=Vg.get(i.serverId);o&&SB(o);return}if(i.event==="dgram"){globalThis._dgramSocketDispatch?.(i);return}if(i.event==="http2"){globalThis._http2RetainDispatch?.(i);return}let s=A1(i.socketId);s&&(X("readEventWakeups"),wB(s));return}if(e&&typeof e=="object"){let i=e;if(i.event==="accept"){let o=Vg.get(i.serverId);o&&SB(o);return}if(i.event==="dgram"){globalThis._dgramSocketDispatch?.(i);return}if(i.event==="http2"){globalThis._http2RetainDispatch?.(i);return}let s=A1(i.socketId);s&&(X("readEventWakeups"),wB(s));return}if(e===0&&t.startsWith("http2:")){nr("http2 dispatch via netSocket",t);try{let i=r?JSON.parse(r):{};aR(t.slice(6),Number(i.id??0),i.data,i.extra,i.extraNumber,i.extraHeaders,i.flags)}catch{}return}let n=A1(e);if(n)switch(t){case"connect":{n._applySocketInfo(fW(r)),n._connected=!0,n.connecting=!1,n._touchTimeout(),n._emitNet("connect"),n._emitNet("ready");break}case"secureConnect":case"secure":{let i=Wwe(r);i&&(n.authorized=i.authorized===!0,n.authorizationError=i.authorizationError,n.alpnProtocol=i.alpnProtocol??!1,n.servername=i.servername??n.servername,n._tlsProtocol=i.protocol??null,n._tlsSessionReused=i.sessionReused===!0,n._tlsCipher=i.cipher??null),AB(n,t);break}case"data":{let i=typeof Buffer<"u"?Buffer.from(r,"base64"):new Uint8Array(0);n._touchTimeout(),n._emitNet("data",i);break}case"end":n._handleRemoteReadableEnd();break;case"session":{let i=typeof Buffer<"u"?Buffer.from(r??"","base64"):new Uint8Array(0);n._tlsSession=Buffer.from(i),n._emitNet("session",i);break}case"error":if(r)try{let i=JSON.parse(r);n.authorized=i.authorized===!0,n.authorizationError=i.authorizationError}catch{}n._emitNet("error",Jwe(r));break;case"close":n._emitSocketClose(!1);break}}Ge("_netSocketDispatch",tSe);var Vm=256*1024,To=class cW{constructor(t){y(this,"_listeners",{});y(this,"_onceListeners",{});y(this,"_socketId",0);y(this,"_loopbackServer",null);y(this,"_loopbackBuffer",Buffer.alloc(0));y(this,"_loopbackDispatchRunning",!1);y(this,"_loopbackDispatchPending",!1);y(this,"_loopbackReadableEnded",!1);y(this,"_loopbackUpgradeSocket",null);y(this,"_loopbackEventQueue",Promise.resolve());y(this,"_encoding");y(this,"_noDelayState",!1);y(this,"_keepAliveState",!1);y(this,"_keepAliveDelaySeconds",0);y(this,"_refed",!0);y(this,"_bridgeReadLoopRunning",!1);y(this,"_bridgeReadPumpQueued",!1);y(this,"_bridgeReadPollTimer",null);y(this,"_pendingBridgeWake",!1);y(this,"_pendingBridgeWakeRetries",0);y(this,"_bridgeReadPumpStarted",!1);y(this,"_bridgeReadFirstPumpBenchmarkScheduled",!1);y(this,"_readFirstPumpScheduleActive",!1);y(this,"_readFirstPumpScheduleQueuedAtUs",0);y(this,"_nextReadPumpOrigin",null);y(this,"_firstReadNoTimerWakeAtUs",0);y(this,"_timeoutMs",0);y(this,"_timeoutTimer",null);y(this,"_pendingBridgeWriteChunks",null);y(this,"_pendingBridgeWriteCallbacks",null);y(this,"_pendingBridgeWriteBytes",0);y(this,"_bridgeWriteFlushScheduled",!1);y(this,"_bridgeWriteFlushQueuedAtUs",0);y(this,"_lastReadDeliveryEndUs",0);y(this,"_currentDataEmitStartUs",0);y(this,"_wroteDuringDataEmit",!1);y(this,"_lastDataEmitEndUs",0);y(this,"_readWakeQueuedAtUs",0);y(this,"_tlsUpgrading",!1);y(this,"_remoteEnded",!1);y(this,"_writableEnded",!1);y(this,"_closeEmitted",!1);y(this,"_bridgeReleased",!1);y(this,"_connected",!1);y(this,"connecting",!1);y(this,"destroyed",!1);y(this,"writable",!0);y(this,"readable",!0);y(this,"readyState","open");y(this,"readableLength",0);y(this,"writableLength",0);y(this,"remoteAddress");y(this,"remotePort");y(this,"remoteFamily");y(this,"localAddress","0.0.0.0");y(this,"localPort",0);y(this,"localFamily","IPv4");y(this,"localPath");y(this,"remotePath");y(this,"bytesRead",0);y(this,"bytesWritten",0);y(this,"bufferSize",0);y(this,"pending",!0);y(this,"allowHalfOpen",!1);y(this,"encrypted",!1);y(this,"authorized",!1);y(this,"authorizationError");y(this,"servername");y(this,"alpnProtocol",!1);y(this,"writableHighWaterMark",16*1024);y(this,"server");y(this,"_tlsCipher",null);y(this,"_tlsProtocol",null);y(this,"_tlsSession",null);y(this,"_tlsSessionReused",!1);y(this,"_readableState",{endEmitted:!1,ended:!1});y(this,"_readQueue",[]);y(this,"_handle",null);t?.allowHalfOpen&&(this.allowHalfOpen=!0),t?.handle&&(this._handle=t.handle)}connect(t,r,n){if(typeof _netSocketConnectRaw>"u")throw new Error("net.Socket is not supported in sandbox (bridge not available)");let{host:i="127.0.0.1",port:s=0,path:o,localAddress:a,localPort:A,keepAlive:f,keepAliveInitialDelay:l,callback:p}=kwe(t,r,n);p&&this.once("connect",p),this.connecting=!0,this.remoteAddress=o??i,this.remotePort=o?void 0:s,this.remotePath=o,this.pending=!1;let B;try{B=Ywe(_netSocketConnectRaw.applySync(void 0,[o?{path:o}:{host:i,port:s,localAddress:a,localPort:A}]))}catch(S){return this.connecting=!1,this.pending=!1,queueMicrotask(()=>{this.destroyed||this.destroy(S)}),this}return B.loopbackHttpTarget?(this._loopbackHttpTarget=B.loopbackHttpTarget,this._applySocketInfo(B),this._connected=!0,this.connecting=!1,queueMicrotask(()=>{this._touchTimeout(),this._emitNet("connect"),this._emitNet("ready")}),this):(nr("socket connect",B.socketId,i,s,o??null),this._socketId=B.socketId,this._handle=EG(this._socketId),this._applySocketInfo(B),lG(this._socketId,this),this._waitForConnect(),f&&this.once("connect",()=>{this.setKeepAlive(!0,l)}),this)}write(t,r,n){let i,s=!1;if(Buffer.isBuffer(t))i=t;else if(typeof t=="string"){let a=typeof r=="string"?r:"utf-8";i=Buffer.from(t,a),s=Xwe()}else i=Buffer.from(t);if(this._loopbackServer||this._loopbackHttpTarget){if(nr("socket write loopback",this._socketId,i.length),this.bytesWritten+=i.length,this._loopbackUpgradeSocket){this._touchTimeout(),this._loopbackUpgradeSocket._pushData(i);let A=typeof r=="function"?r:n;return A&&A(),!0}this._loopbackBuffer=Buffer.concat([this._loopbackBuffer,i]),this._touchTimeout(),this._dispatchLoopbackHttpRequest();let a=typeof r=="function"?r:n;return a&&a(),!0}if(typeof _netSocketWriteRaw>"u"||this.destroyed||!this._socketId)return!1;if(X("userWriteCalls"),X("userWriteBytes",i.length),It()){let a=At();this._currentDataEmitStartUs>0?(X("userWriteDuringDataEmitCalls"),X("dataEmitStartToUserWriteUs",a-this._currentDataEmitStartUs),this._wroteDuringDataEmit=!0):this._lastDataEmitEndUs>0&&X("dataEmitEndToUserWriteUs",a-this._lastDataEmitEndUs)}this.bytesWritten+=i.length;let o=typeof r=="function"?r:n;return this._queueBridgeWrite(i,o,s),!0}end(t,r,n){return typeof t=="function"?this.once("finish",t):t!=null&&this.write(t,r,n),this._writableEnded||this.destroyed?this:(this._writableEnded=!0,this.writable=!1,queueMicrotask(()=>{this.destroyed||(this._emitNet("finish"),this._remoteEnded&&this._emitSocketClose(!1))}),this._loopbackServer||this._loopbackHttpTarget?(this._loopbackUpgradeSocket?queueMicrotask(()=>{this._loopbackUpgradeSocket?._pushEnd()}):this._loopbackReadableEnded||queueMicrotask(()=>{this._closeLoopbackReadable()}),this):(typeof _netSocketEndRaw<"u"&&this._socketId&&!this.destroyed&&(this._flushBridgeWrites(),nr("socket end",this._socketId),_netSocketEndRaw.applySync(void 0,[this._socketId]),X("peerWakeOnShutdown"),oB(this),this._touchTimeout()),this))}destroy(t){return this.destroyed?this:(nr("socket destroy",this._socketId,t?.message??null),this.destroyed=!0,this._writableEnded=!0,this.writable=!1,this.readable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,this._clearTimeoutTimer(),this._bridgeReadPollTimer&&(clearTimeout(this._bridgeReadPollTimer),this._bridgeReadPollTimer=null),this._loopbackServer||this._loopbackHttpTarget?(this._loopbackUpgradeSocket?.destroy(t),this._loopbackUpgradeSocket=null,this._loopbackServer=null,this._loopbackHttpTarget=null,t&&this._emitNet("error",t),this._emitSocketClose(!!t),this):(this._releaseBridgeSocket(),t&&this._emitNet("error",t),this._emitSocketClose(!!t),this))}_queueBridgeWrite(t,r,n=!1){this._pendingBridgeWriteChunks||(this._pendingBridgeWriteChunks=[],this._pendingBridgeWriteCallbacks=[]);let i=n?t:Buffer.from(t);this._pendingBridgeWriteChunks.push(i),this._pendingBridgeWriteBytes+=i.length,X("queuedWriteChunks"),X("queuedWriteBytes",i.length),n?(X("queuedWriteRetainedChunks"),X("queuedWriteRetainedBytes",i.length)):(X("queuedWriteCopiedChunks"),X("queuedWriteCopiedBytes",i.length)),Qr("writeBufferedBytesMax",this._pendingBridgeWriteBytes),Qr("writeBufferedChunksMax",this._pendingBridgeWriteChunks.length),r&&this._pendingBridgeWriteCallbacks.push(r),this._currentDataEmitStartUs>0?(X("writeFlushInlineDuringDataEmit"),this._flushBridgeWrites()):this._bridgeWriteFlushScheduled||(this._bridgeWriteFlushScheduled=!0,It()&&(this._bridgeWriteFlushQueuedAtUs=At()),queueMicrotask(()=>{this._flushBridgeWrites()}))}_flushBridgeWrites(){let t=this._pendingBridgeWriteChunks;if(!t||t.length===0){this._bridgeWriteFlushScheduled=!1,this._bridgeWriteFlushQueuedAtUs=0;return}let r=this._pendingBridgeWriteCallbacks??[],n=this._pendingBridgeWriteBytes;if(this._pendingBridgeWriteChunks=null,this._pendingBridgeWriteCallbacks=null,this._pendingBridgeWriteBytes=0,this._bridgeWriteFlushScheduled=!1,this.destroyed||!this._socketId||typeof _netSocketWriteRaw>"u")return;let i=It();if(i&&this._bridgeWriteFlushQueuedAtUs>0){let f=Math.max(0,At()-this._bridgeWriteFlushQueuedAtUs);X("writeQueuedToFlushStartUs",f),Qr("writeQueuedToFlushStartMaxUs",f),X("writeFlushQueuedToRawUs",f),Qr("writeFlushQueuedToRawMaxUs",f),this._bridgeWriteFlushQueuedAtUs=0}nr("socket write",this._socketId,n,t.length),X("flushCalls"),X("flushChunks",t.length),X("flushBytes",n);let s=i?At():0,o=[],a=0,A=()=>{if(a===0)return;let f=o.length===1?o[0]:Buffer.concat(o,a);X("writeRawCalls"),X("writeRawBytes",f.length),_netSocketWriteRaw.applySync(void 0,[this._socketId,f]),o=[],a=0};for(let f of t)for(let l=0;l<f.length;l+=Vm){let p=f.subarray(l,l+Vm);a>0&&a+p.length>Vm&&A(),o.push(p),a+=p.length,a>=Vm&&A()}A(),i&&X("writeRawElapsedUs",At()-s),oB(this),this._touchTimeout();for(let f of r)f()}_emitSocketClose(t=!1){this._closeEmitted||(this._closeEmitted=!0,this._connected=!1,this.connecting=!1,this.pending=!1,this.readable=!1,this.writable=!1,this._clearTimeoutTimer(),this._socketId&&Rwe(this._socketId),this.readableLength>0?this._deferBridgeReleaseUntilReadDrained=!0:this._releaseBridgeSocket(),this._emitNet("close",t))}_releaseDeferredBridgeSocket(){!this._deferBridgeReleaseUntilReadDrained||this.readableLength>0||(this._deferBridgeReleaseUntilReadDrained=!1,this._releaseBridgeSocket())}_releaseBridgeSocket(){if(!(this._bridgeReleased||!this._socketId||typeof _netSocketDestroyRaw>"u")){this._bridgeReleased=!0;try{_netSocketDestroyRaw.applySync(void 0,[this._socketId])}catch{}X("peerWakeOnDestroy"),oB(this)}}_handleRemoteReadableEnd(){this.destroyed||this._remoteEnded||(nr("socket remote end",this._socketId),this._remoteEnded=!0,this.readable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,queueMicrotask(()=>{if(!this.destroyed&&(this._emitNet("end"),!this.destroyed)){if(!this.allowHalfOpen&&!this._writableEnded){this.end();return}this._writableEnded&&this._emitSocketClose(!1)}}))}_applySocketInfo(t){t&&(this.localAddress=t.localAddress,this.localPort=t.localPort,this.localFamily=t.localFamily,this.localPath=t.localPath,this.remoteAddress=t.remoteAddress??this.remoteAddress,this.remotePort=t.remotePort??this.remotePort,this.remoteFamily=t.remoteFamily??this.remoteFamily,this.remotePath=t.remotePath??this.remotePath)}_applyAcceptedKeepAlive(t){this._keepAliveState=!0,this._keepAliveDelaySeconds=_B(t)}static fromAcceptedHandle(t,r){let n=new cW({allowHalfOpen:r?.allowHalfOpen});return n._socketId=t.socketId,n._handle=EG(t.socketId),n._applySocketInfo(t.info),n._connected=!0,n.connecting=!1,n.pending=!1,lG(t.socketId,n),queueMicrotask(()=>{!n.destroyed&&!n._tlsUpgrading&&(n._nextReadPumpOrigin="acceptedHandle",n._pumpBridgeReads())}),n}setKeepAlive(t,r){let n=hG(t),i=_B(r);return n===this._keepAliveState&&(!n||i===this._keepAliveDelaySeconds)?this:(this._keepAliveState=n,this._keepAliveDelaySeconds=n?i:0,nr("socket setKeepAlive",this._socketId,n,i),this._handle?.setKeepAlive?.(n,i),this)}setNoDelay(t){let r=hG(t);return r===this._noDelayState?this:(this._noDelayState=r,nr("socket setNoDelay",this._socketId,r),this._handle?.setNoDelay?.(r),this)}setTimeout(t,r){let n=AW(t);if(r!==void 0&&typeof r!="function")throw Pl("callback",r);return r&&this.once("timeout",r),this._timeoutMs=n,n===0?(this._clearTimeoutTimer(),this):(this._touchTimeout(),this)}ref(){return this._refed=!0,this._handle?.ref?.(),this._timeoutTimer&&typeof this._timeoutTimer.ref=="function"&&this._timeoutTimer.ref(),!this.destroyed&&this._connected&&!this._loopbackServer&&!this._loopbackHttpTarget&&!this._bridgeReadLoopRunning&&(this._nextReadPumpOrigin="ref",this._pumpBridgeReads()),this}unref(){return this._refed=!1,this._handle?.unref?.(),this._timeoutTimer&&typeof this._timeoutTimer.unref=="function"&&this._timeoutTimer.unref(),this._bridgeReadPollTimer&&(clearTimeout(this._bridgeReadPollTimer),this._bridgeReadPollTimer=null),this}pause(){return this}resume(){return this}read(t){if(this._readQueue.length===0)return null;let r;if(t==null||t<=0)r=this._readQueue.shift()??null,r&&(this.readableLength=Math.max(0,this.readableLength-r.length));else{let n=this._readQueue[0];if(!n)return null;n.length<=t?(this._readQueue.shift(),this.readableLength=Math.max(0,this.readableLength-n.length),r=n):(r=n.subarray(0,t),this._readQueue[0]=n.subarray(t),this.readableLength=Math.max(0,this.readableLength-r.length))}return this.readableLength===0&&this._releaseDeferredBridgeSocket(),r}unshift(t){let r=Buffer.isBuffer(t)?t:Buffer.from(t);return r.length===0?this:(this._readQueue.unshift(r),this.readableLength+=r.length,this)}cork(){}uncork(){}address(){return{port:this.localPort,family:this.localFamily,address:this.localAddress}}getCipher(){return ba(this._socketId,"getCipher")??this._tlsCipher}getSession(){let t=ba(this._socketId,"getSession");return Buffer.isBuffer(t)?(this._tlsSession=Buffer.from(t),Buffer.from(t)):this._tlsSession?Buffer.from(this._tlsSession):null}isSessionReused(){let t=ba(this._socketId,"isSessionReused");return typeof t=="boolean"?t:this._tlsSessionReused}getPeerCertificate(t){let r=ba(this._socketId,"getPeerCertificate",t===!0);return r&&typeof r=="object"?r:{}}getCertificate(){let t=ba(this._socketId,"getCertificate");return t&&typeof t=="object"?t:{}}getProtocol(){let t=ba(this._socketId,"getProtocol");return typeof t=="string"?t:this._tlsProtocol}setEncoding(t){return this._encoding=t,this}pipe(t){return t}on(t,r){return this._listeners[t]||(this._listeners[t]=[]),this._listeners[t].push(r),this}addListener(t,r){return this.on(t,r)}once(t,r){return this._onceListeners[t]||(this._onceListeners[t]=[]),this._onceListeners[t].push(r),this}removeListener(t,r){let n=this._listeners[t];if(n){let s=n.indexOf(r);s>=0&&n.splice(s,1)}let i=this._onceListeners[t];if(i){let s=i.indexOf(r);s>=0&&i.splice(s,1)}return this}off(t,r){return this.removeListener(t,r)}removeAllListeners(t){return t?(delete this._listeners[t],delete this._onceListeners[t]):(this._listeners={},this._onceListeners={}),this}listeners(t){return[...this._listeners[t]??[],...this._onceListeners[t]??[]]}listenerCount(t){return(this._listeners[t]?.length??0)+(this._onceListeners[t]?.length??0)}setMaxListeners(t){return this}getMaxListeners(){return 10}prependListener(t,r){return this._listeners[t]||(this._listeners[t]=[]),this._listeners[t].unshift(r),this}prependOnceListener(t,r){return this._onceListeners[t]||(this._onceListeners[t]=[]),this._onceListeners[t].unshift(r),this}eventNames(){return[...new Set([...Object.keys(this._listeners),...Object.keys(this._onceListeners)])]}rawListeners(t){return this.listeners(t)}emit(t,...r){return this._emitNet(t,...r)}_emitNet(t,...r){let n=It()&&(t==="readable"||t==="data"),i=n?At():0;n&&t==="data"&&(this._currentDataEmitStartUs=i),t==="readable"?X("socketReadableEmits"):t==="data"?X("socketDataEmits"):t==="end"?X("socketEndEmits"):t==="close"?X("socketCloseEmits"):t==="connect"&&X("socketConnectEmits"),t==="data"&&this._encoding&&r[0]&&Buffer.isBuffer(r[0])&&(r[0]=r[0].toString(this._encoding));let s=!1;try{let o=this._listeners[t];if(o)for(let A of[...o])A.call(this,...r),s=!0;let a=this._onceListeners[t];if(a){let A=[...a];this._onceListeners[t]=[];for(let f of A)f.call(this,...r),s=!0}}finally{if(n){let o=At()-i;t==="readable"?(X("socketReadableEmitUs",o),Qr("socketReadableEmitMaxUs",o)):t==="data"&&(X("socketDataEmitUs",o),Qr("socketDataEmitMaxUs",o),this._lastDataEmitEndUs=At(),this._currentDataEmitStartUs=0)}}return s}_queueReadablePayload(t){if(!t||t.length===0)return;let r=It(),n=r?At():0;try{if(this._readQueue.push(t),this.readableLength+=t.length,X("queueReadablePayloads"),X("queueReadableBytes",t.length),Qr("queueReadableBytesMax",this.readableLength),this._emitNet("readable"),this.listenerCount("data")>0){let i=r?At():0,s=this.read();if(r){let o=At()-i;X("queueReadableImmediateReadCalls"),X("queueReadableImmediateReadUs",o),Qr("queueReadableImmediateReadMaxUs",o)}s!==null&&this._emitNet("data",s)}}finally{if(r){let i=At()-n;X("queueReadablePayloadElapsedUs",i),Qr("queueReadablePayloadMaxUs",i)}}}async _waitForConnect(){if(!(typeof _netSocketWaitConnectRaw>"u"||this._socketId===0))try{let t=await _netSocketWaitConnectRaw.apply(void 0,[this._socketId],{result:{promise:!0}});if(this.destroyed)return;this._applySocketInfo(fW(t)),await Nwe(this),this._connected=!0,this.connecting=!1,nr("socket connected",this._socketId,this.localAddress,this.localPort,this.remoteAddress,this.remotePort),this._touchTimeout(),nr("socket emit connect",this._socketId,this.listenerCount("connect")),this._emitNet("connect"),nr("socket emit ready",this._socketId,this.listenerCount("ready")),this._emitNet("ready"),this._tlsUpgrading||(this._nextReadPumpOrigin="connectWait",await this._pumpBridgeReads())}catch(t){if(this.destroyed)return;let r=t instanceof Error?t:new Error(String(t));nr("socket connect error",this._socketId,r.message,r.stack??null),this._emitNet("error",r),this.destroy()}}async _pumpBridgeReads(){if(this._bridgeReadLoopRunning||typeof _netSocketReadRaw>"u"||!_g(this))return;X("readPumpRuns");let t=!this._bridgeReadPumpStarted,r=this._readFirstPumpScheduleActive===!0;if(t){if(Zwe(this._nextReadPumpOrigin),this._firstReadNoTimerWakeAtUs>0&&It()){let o=Math.max(0,At()-this._firstReadNoTimerWakeAtUs);X("readFirstPumpAfterNoTimerWakeCalls"),X("readFirstPumpAfterNoTimerWakeUs",o),Qr("readFirstPumpAfterNoTimerWakeMaxUs",o)}if(r&&this._readFirstPumpScheduleQueuedAtUs>0&&It()){let o=Math.max(0,At()-this._readFirstPumpScheduleQueuedAtUs);X("readFirstPumpScheduleQueuedToPumpStartUs",o),Qr("readFirstPumpScheduleQueuedToPumpStartMaxUs",o)}}this._readFirstPumpScheduleActive=!1,this._readFirstPumpScheduleQueuedAtUs=0,this._nextReadPumpOrigin=null,this._bridgeReadPumpStarted=!0;let n=!1,i=!1;if(It()&&this._readWakeQueuedAtUs>0){let o=Math.max(0,At()-this._readWakeQueuedAtUs);X("readWakeQueuedToPumpStartUs",o),Qr("readWakeQueuedToPumpStartMaxUs",o),this._readWakeQueuedAtUs=0}this._bridgeReadLoopRunning=!0;let s=0;try{for(;!this.destroyed&&_g(this);){X("readRawCalls");let o=It(),a=o&&this._lastReadDeliveryEndUs>0?At():0;if(a>0&&(X("readPostDeliveryProbeCalls"),X("readPostDeliveryNextRawCalls"),X("readPostDeliveryToProbeStartUs",a-this._lastReadDeliveryEndUs),this._bridgeWriteFlushScheduled&&(X("readPostDeliveryPendingWriteFlushes"),X("readPostDeliveryPendingWriteBytes",this._pendingBridgeWriteBytes)),this._lastReadDeliveryEndUs=0),!_g(this))return;let A=o?At():0,f=_netSocketReadRaw.applySync(void 0,[this._socketId]);if(o){let p=At()-A;X("readRawElapsedUs",p),a>0&&(X("readPostDeliveryProbeElapsedUs",p),Qr("readPostDeliveryProbeMaxUs",p))}if(this.destroyed)return;if(f===nR){if(t&&!n&&(n=!0,X("readFirstPumpResultTimeout")),r&&!i&&(i=!0,X("readFirstPumpScheduleResultTimeout")),X("readTimeoutSentinels"),a>0&&(X("readPostDeliveryProbeTimeoutSentinels"),X("readPostDeliveryNextRawTimeoutSentinels")),!this._refed)return;if(this._pendingBridgeWake){if(this._pendingBridgeWakeRetries<2){this._pendingBridgeWakeRetries++,X("readPendingWakeImmediateRetries"),this._nextReadPumpOrigin="eventWake",await Promise.resolve();continue}this._pendingBridgeWake=!1,this._pendingBridgeWakeRetries=0,X("readPendingWakeShortRetryTimers"),this._bridgeReadPollTimer=setTimeout(()=>{this._bridgeReadPollTimer=null,this._nextReadPumpOrigin="eventWake",this._pumpBridgeReads()},1);return}X("readPollTimersScheduled");let p=iR(),B=It()?At():0;this._bridgeReadPollTimer=setTimeout(()=>{if(It()){let S=Math.max(0,At()-B-p*1e3);X("readPollTimerFires"),X("readPollTimerFireLagUs",S),Qr("readPollTimerFireLagMaxUs",S)}this._bridgeReadPollTimer=null,this._nextReadPumpOrigin="timer",this._pumpBridgeReads()},p);return}if(f===null){t&&!n&&(n=!0,X("readFirstPumpResultEnd")),r&&!i&&(i=!0,X("readFirstPumpScheduleResultEnd")),X("readEndEvents"),this._pendingBridgeWake=!1,this._pendingBridgeWakeRetries=0,this._handleRemoteReadableEnd();return}a>0&&(X("readPostDeliveryProbeDataEvents"),X("readPostDeliveryNextRawDataEvents")),t&&!n&&(n=!0,X("readFirstPumpResultData")),r&&!i&&(i=!0,X("readFirstPumpScheduleResultData"));let l;if(typeof f=="string"){let p=o?At():0;l=Buffer.from(f,"base64"),o&&(X("readBase64DecodeCalls"),X("readBase64DecodeBytes",l.length),X("readBase64DecodeChars",f.length),X("readBase64DecodeUs",At()-p))}else{let p=o?At():0;l=Buffer.from(f),o&&(X("readPayloadMaterializeCalls"),X("readPayloadMaterializeBytes",l.length),X("readPayloadMaterializeUs",At()-p))}if(nr("socket data",this._socketId,l.length),X("readDataEvents"),X("readBytes",l.length),this.bytesRead+=l.length,this._touchTimeout(),s>0){X("readMacrotaskYields");let p=o?At():0;if(await eSe(),o){let B=At()-p;X("readMacrotaskYieldElapsedUs",B),Qr("readMacrotaskYieldMaxUs",B)}if(this.destroyed)return}else X("readFirstPayloadImmediateDeliveries");if(this._pendingBridgeWake=!1,this._pendingBridgeWakeRetries=0,s++,this._queueReadablePayload(l),this._wroteDuringDataEmit){this._wroteDuringDataEmit=!1,X("readPumpYieldAfterInlineDataWrite"),kg(this,"postDeliveryInlineWrite");return}if(this._bridgeWriteFlushScheduled){X("readPumpYieldToPendingWriteFlush"),kg(this,"postDeliveryWriteFlush");return}o&&(this._lastReadDeliveryEndUs=At())}}finally{this._bridgeReadLoopRunning=!1,this._pendingBridgeWake&&!this.destroyed&&_g(this)&&kg(this,"eventWake")}}_dispatchLoopbackHttpRequest(){if(!(!this._loopbackServer&&!this._loopbackHttpTarget||this.destroyed)){if(this._loopbackDispatchRunning){this._loopbackDispatchPending=!0;return}this._loopbackDispatchRunning=!0,this._processLoopbackHttpRequests().finally(()=>{this._loopbackDispatchRunning=!1,this._loopbackDispatchPending&&this._loopbackBuffer.length>0?(this._loopbackDispatchPending=!1,this._dispatchLoopbackHttpRequest()):this._loopbackDispatchPending=!1})}}async _processLoopbackHttpRequests(){let t=!1;for(;(this._loopbackServer||this._loopbackHttpTarget)&&!this.destroyed;){let r=this._loopbackServer??{listenerCount:()=>0},n=FW(this._loopbackBuffer,r);if(n.kind==="incomplete"){t&&this._closeLoopbackReadable();return}if(n.kind==="bad-request"){this._pushLoopbackData(a2()),n.closeConnection&&this._closeLoopbackReadable(),this._loopbackBuffer=Buffer.alloc(0);return}if(this._loopbackBuffer=this._loopbackBuffer.subarray(n.bytesConsumed),n.upgradeHead){this._dispatchLoopbackUpgrade(n.request,n.upgradeHead);return}let i;if(this._loopbackHttpTarget){if(typeof _networkHttpServerRequestRaw>"u")throw new Error("HTTP loopback bridge is not available");i=_networkHttpServerRequestRaw.applySync(void 0,[{...this._loopbackHttpTarget,request:JSON.stringify(n.request)}])}else({responseJson:i}=await u_e(this._loopbackServer,n.request));let s=JSON.parse(i),o=hR(s,n.request,n.closeConnection);if(!t&&o.payload.length>0&&this._pushLoopbackData(o.payload),o.closeConnection&&(t=!0,this._loopbackBuffer.length===0)){this._closeLoopbackReadable();return}}}_pushLoopbackData(t){if(t.length===0||this._loopbackReadableEnded)return;let r=Buffer.from(t);this._queueLoopbackEvent(()=>{this.destroyed||(this.bytesRead+=r.length,this._touchTimeout(),this._queueReadablePayload(r))})}_closeLoopbackReadable(){this._loopbackReadableEnded||(this._loopbackReadableEnded=!0,this.readable=!1,this.writable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,this._clearTimeoutTimer(),this._queueLoopbackEvent(()=>{this._emitNet("end"),this._emitNet("close")}))}_queueLoopbackEvent(t){this._loopbackEventQueue=this._loopbackEventQueue.then(()=>new Promise(r=>{queueMicrotask(()=>{try{t()}finally{r()}})}))}_dispatchLoopbackUpgrade(t,r){if(this._loopbackServer)try{let n=new GSe({host:this.remoteAddress,port:this.remotePort});n._attachPeer({_pushData:i=>this._pushLoopbackData(i),_pushEnd:()=>this._closeLoopbackReadable()}),this._loopbackUpgradeSocket=n,this._loopbackServer._emit("upgrade",new Nu(t),n,r)}catch(n){let i=n instanceof Error?n:new Error(String(n)),s=!1,o=null;if(typeof process<"u"&&typeof process.emit=="function"){let a=process;try{s=a.emit("uncaughtException",i,"uncaughtException")}catch(A){if(A&&typeof A=="object"&&A.name==="ProcessExitError"){s=!0;let f=Number(A.code);o=Number.isFinite(f)?f:0}else throw A}}if(s){o!==null&&(process.exitCode=o),this._loopbackServer?.close(),this.destroy();return}throw i}}_upgradeTls(t){if(typeof _netSocketUpgradeTlsRaw>"u")throw new Error("tls.connect is not supported in sandbox (bridge not available)");if(this._tlsUpgrading=!0,this._loopbackServer&&(typeof this._socketId!="string"||this._socketId.length===0)){queueMicrotask(()=>{this.destroyed||AB(this)});return}_netSocketUpgradeTlsRaw.applySync(void 0,[this._socketId,JSON.stringify(t??{})]);let r=()=>{this.destroyed||AB(this)};t?.isServer?queueMicrotask(r):setTimeout(()=>{this.destroyed||AB(this,"secureConnect",!1)},0)}_touchTimeout(){this._timeoutMs===0||this.destroyed||(this._clearTimeoutTimer(),this._timeoutTimer=setTimeout(()=>{this._timeoutTimer=null,!this.destroyed&&this._emitNet("timeout")},this._timeoutMs),!this._refed&&typeof this._timeoutTimer.unref=="function"&&this._timeoutTimer.unref())}_clearTimeoutTimer(){this._timeoutTimer&&(clearTimeout(this._timeoutTimer),this._timeoutTimer=null)}};function Z1(e,t,r){let n=new To;return n.connect(e,t,r),n}var Jg=class{constructor(e,t){y(this,"_listeners",{});y(this,"_onceListeners",{});y(this,"_serverId",0);y(this,"_address",null);y(this,"_acceptLoopActive",!1);y(this,"_acceptLoopRunning",!1);y(this,"_acceptPollTimer",null);y(this,"_pendingAcceptWake",!1);y(this,"_acceptPumpStarted",!1);y(this,"_nextAcceptPumpOrigin",null);y(this,"_firstAcceptNoTimerWakeAtUs",0);y(this,"_acceptWakeQueuedAtUs",0);y(this,"_handleRefId",null);y(this,"_connections",new Set);y(this,"_refed",!0);y(this,"listening",!1);y(this,"keepAlive",!1);y(this,"keepAliveInitialDelay",0);y(this,"allowHalfOpen",!1);y(this,"maxConnections");y(this,"_handle");typeof e=="function"?this.on("connection",e):(this.allowHalfOpen=e?.allowHalfOpen===!0,this.keepAlive=e?.keepAlive===!0,this.keepAliveInitialDelay=e?.keepAliveInitialDelay??0,t&&this.on("connection",t)),this._handle={onconnection:(r,n)=>{if(r){this._emit("error",r);return}if(!n)return;if(typeof this.maxConnections=="number"&&this.maxConnections>=0&&this._connections.size>=this.maxConnections){this._emit("drop",{localAddress:n.info.localAddress,localPort:n.info.localPort,localFamily:n.info.localFamily,remoteAddress:n.info.remoteAddress,remotePort:n.info.remotePort,remoteFamily:n.info.remoteFamily}),_netSocketDestroyRaw?.applySync(void 0,[n.socketId]),X("peerWakeOnDestroy"),oB({_socketId:n.socketId,localPort:n.info.localPort,remotePort:n.info.remotePort,localPath:n.info.localPath,remotePath:n.info.remotePath});return}this.keepAlive&&n.setKeepAlive?.(!0,this.keepAliveInitialDelay);let i=To.fromAcceptedHandle(n,{allowHalfOpen:this.allowHalfOpen});i.server=this,this._connections.add(i),i.once("close",()=>{this._connections.delete(i)}),this.keepAlive&&i._applyAcceptedKeepAlive(this.keepAliveInitialDelay),X("connectionEmits"),this._emit("connection",i)}}}listen(e,t,r,n){if(typeof _netServerListenRaw>"u"||typeof _netServerAcceptRaw>"u")throw new Error("net.createServer is not supported in sandbox");let{port:i,host:s,path:o,backlog:a,readableAll:A,writableAll:f,callback:l}=oW(e,t,r,n);l&&this.once("listening",l);try{let p=_netServerListenRaw.applySyncPromise(void 0,[{port:i,host:s,path:o,backlog:a,readableAll:A,writableAll:f}]),B=typeof p=="string"?JSON.parse(p):p,S=B.address??B;this._serverId=B.serverId,this._address=S.localPath?S.localPath:{address:S.localAddress,family:S.localFamily??S.family,port:S.localPort},this.listening=!0,Dwe(this),this._syncHandleRef(),this._acceptLoopActive=!0,queueMicrotask(()=>{!this.listening||this._serverId===0||(this._emit("listening"),this._nextAcceptPumpOrigin="listen",this._pumpAccepts())})}catch(p){queueMicrotask(()=>{this._emit("error",p)})}return this}close(e){if(e&&this.once("close",e),!this.listening||typeof _netServerCloseRaw>"u")return queueMicrotask(()=>{this._emit("close")}),this;this.listening=!1,this._acceptLoopActive=!1,Twe(this),this._acceptPollTimer&&(clearTimeout(this._acceptPollTimer),this._acceptPollTimer=null),this._syncHandleRef();let t=this._serverId;return this._serverId=0,(async()=>{try{await _netServerCloseRaw.apply(void 0,[t],{result:{promise:!0}})}finally{this._address=null,this._emit("close")}})(),this}address(){return this._address}getConnections(e){if(typeof e!="function")throw Pl("callback",e);return queueMicrotask(()=>{e(null,this._connections.size)}),this}ref(){return this._refed=!0,this._syncHandleRef(),this.listening&&this._acceptLoopActive&&!this._acceptLoopRunning&&(this._nextAcceptPumpOrigin="ref",this._pumpAccepts()),this}unref(){return this._refed=!1,this._acceptPollTimer&&(clearTimeout(this._acceptPollTimer),this._acceptPollTimer=null),this._syncHandleRef(),this}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),this}emit(e,...t){return this._emit(e,...t)}_emit(e,...t){let r=!1,n=this._listeners[e];if(n)for(let s of[...n])s.call(this,...t),r=!0;let i=this._onceListeners[e];if(i){this._onceListeners[e]=[];for(let s of[...i])s.call(this,...t),r=!0}return r}_syncHandleRef(){if(!this.listening||this._serverId===0||!this._refed){this._handleRefId&&typeof _unregisterHandle=="function"&&_unregisterHandle(this._handleRefId),this._handleRefId=null;return}let e=`${vwe}${this._serverId}`;this._handleRefId!==e&&(this._handleRefId&&typeof _unregisterHandle=="function"&&_unregisterHandle(this._handleRefId),this._handleRefId=e,typeof _registerHandle=="function"&&_registerHandle(this._handleRefId,"net server"))}async _pumpAccepts(){if(typeof _netServerAcceptRaw>"u"||this._acceptLoopRunning){this._acceptLoopRunning&&X("acceptLoopAlreadyRunning");return}X("acceptPumpRuns");let e=!this._acceptPumpStarted;if(e&&($we(this._nextAcceptPumpOrigin),this._firstAcceptNoTimerWakeAtUs>0&&It())){let r=Math.max(0,At()-this._firstAcceptNoTimerWakeAtUs);X("acceptFirstPumpAfterNoTimerWakeCalls"),X("acceptFirstPumpAfterNoTimerWakeUs",r),Qr("acceptFirstPumpAfterNoTimerWakeMaxUs",r)}this._nextAcceptPumpOrigin=null,this._acceptPumpStarted=!0;let t=!1;if(It()&&this._acceptWakeQueuedAtUs>0){let r=Math.max(0,At()-this._acceptWakeQueuedAtUs);X("acceptWakeQueuedToPumpStartUs",r),Qr("acceptWakeQueuedToPumpStartMaxUs",r),this._acceptWakeQueuedAtUs=0}this._acceptLoopRunning=!0;try{for(;this._acceptLoopActive&&this._serverId!==0;){X("acceptRawCalls");let r=It(),n=r?At():0,i=_netServerAcceptRaw.applySync(void 0,[this._serverId]);if(r&&X("acceptRawElapsedUs",At()-n),i===nR){if(e&&!t&&(t=!0,X("acceptFirstPumpResultTimeout")),X("acceptTimeoutSentinels"),!this._refed)return;if(this._pendingAcceptWake){this._pendingAcceptWake=!1,this._nextAcceptPumpOrigin="eventWake";continue}X("acceptPollTimersScheduled");let s=iR(),o=It()?At():0;this._acceptPollTimer=setTimeout(()=>{if(It()){let a=Math.max(0,At()-o-s*1e3);X("acceptPollTimerFires"),X("acceptPollTimerFireLagUs",a),Qr("acceptPollTimerFireLagMaxUs",a)}this._acceptPollTimer=null,this._nextAcceptPumpOrigin="timer",this._pumpAccepts()},s);return}if(!i){e&&!t&&(t=!0,X("acceptFirstPumpResultEmpty"));return}try{let s=r?At():0,o=JSON.parse(i);r&&X("acceptJsonParseUs",At()-s),X("acceptConnections"),e&&!t&&(t=!0,X("acceptFirstPumpResultConnection"));let a=jwe(o.socketId,o.info),A=r?At():0;this._handle.onconnection(null,a),r&&X("acceptOnConnectionUs",At()-A)}catch(s){this._emit("error",s)}}}finally{this._acceptLoopRunning=!1,this._pendingAcceptWake&&this.listening&&this._serverId!==0&&(this._pendingAcceptWake=!1,this._nextAcceptPumpOrigin="eventWake",queueMicrotask(()=>{this.listening&&this._serverId!==0&&this._pumpAccepts()}))}}};function rSe(e,t){return new Jg(e,t)}var lW={BlockList:qwe,Socket:To,SocketAddress:Gwe,Server:rSe,Stream:To,connect:Z1,createConnection:Z1,createServer(e,t){return new Jg(e,t)},getDefaultAutoSelectFamily(){return gG},getDefaultAutoSelectFamilyAttemptTimeout(){return pG},isIP(e){return Ml(e)},isIPv4(e){return Ml(e)===4},isIPv6(e){return Ml(e)===6},setDefaultAutoSelectFamily(e){gG=e!==!1},setDefaultAutoSelectFamilyAttemptTimeout(e){let t=Number(e);if(!Number.isFinite(t)||t<0)throw new RangeError(`Invalid auto-select family attempt timeout: ${e}`);pG=Math.trunc(t)}},nSe=Symbol.for("secure-exec.http2.kSocket"),yG=Symbol("options"),_s=new Map,Bn=new Map,bn=new Map,RB=new Map,u1=new Set,$1=[],e2=new Map,c1=!1,Ta=new Map,iSe=1,Tu=class{constructor(){y(this,"_listeners",{});y(this,"_onceListeners",{})}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}addListener(e,t){return this.on(e,t)}once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),this}removeListener(e,t){let r=n=>{if(!n)return;let i=n.indexOf(t);i!==-1&&n.splice(i,1)};return r(this._listeners[e]),r(this._onceListeners[e]),this}off(e,t){return this.removeListener(e,t)}listenerCount(e){return(this._listeners[e]?.length??0)+(this._onceListeners[e]?.length??0)}setMaxListeners(e){return this}emit(e,...t){let r=!1,n=this._listeners[e];if(n)for(let s of[...n])s.call(this,...t),r=!0;let i=this._onceListeners[e];if(i){this._onceListeners[e]=[];for(let s of[...i])s.call(this,...t),r=!0}return r}},t2=class extends Tu{constructor(t,r){super();y(this,"allowHalfOpen",!1);y(this,"encrypted",!1);y(this,"localAddress","127.0.0.1");y(this,"localPort",0);y(this,"localFamily","IPv4");y(this,"remoteAddress","127.0.0.1");y(this,"remotePort",0);y(this,"remoteFamily","IPv4");y(this,"servername");y(this,"alpnProtocol",!1);y(this,"readable",!0);y(this,"writable",!0);y(this,"destroyed",!1);y(this,"_bridgeReadPollTimer",null);y(this,"_loopbackServer",null);y(this,"_onDestroy");y(this,"_destroyCallbackInvoked",!1);this._onDestroy=r,this._applyState(t)}_applyState(t){t&&(this.allowHalfOpen=t.allowHalfOpen===!0,this.encrypted=t.encrypted===!0,this.localAddress=t.localAddress??this.localAddress,this.localPort=t.localPort??this.localPort,this.localFamily=t.localFamily??this.localFamily,this.remoteAddress=t.remoteAddress??this.remoteAddress,this.remotePort=t.remotePort??this.remotePort,this.remoteFamily=t.remoteFamily??this.remoteFamily,this.servername=t.servername,this.alpnProtocol=t.alpnProtocol??this.alpnProtocol)}_clearTimeoutTimer(){}_emitNet(t,r){if(t==="error"&&r){this.emit("error",r);return}t==="close"&&(this._destroyCallbackInvoked||(this._destroyCallbackInvoked=!0,queueMicrotask(()=>{this._onDestroy?.()})),this.emit("close"))}end(){return this.destroyed=!0,this.readable=!1,this.writable=!1,this.emit("close"),this}destroy(){return this.destroyed?this:(this.destroyed=!0,this.readable=!1,this.writable=!1,this._emitNet("close"),this)}};function Hl(e,t,r){return lr(`The "${e}" argument must be of type ${t}. Received ${Yn(r)}`,"ERR_INVALID_ARG_TYPE")}function Qo(e,t){return MB(t,e)}function Rg(e,t){let r=new RangeError(`Invalid value for setting "${e}": ${String(t)}`);return r.code="ERR_HTTP2_INVALID_SETTING_VALUE",r}function sSe(e,t){let r=new TypeError(`Invalid value for setting "${e}": ${String(t)}`);return r.code="ERR_HTTP2_INVALID_SETTING_VALUE",r}var So={NGHTTP2_NO_ERROR:0,NGHTTP2_PROTOCOL_ERROR:1,NGHTTP2_INTERNAL_ERROR:2,NGHTTP2_FLOW_CONTROL_ERROR:3,NGHTTP2_SETTINGS_TIMEOUT:4,NGHTTP2_STREAM_CLOSED:5,NGHTTP2_FRAME_SIZE_ERROR:6,NGHTTP2_REFUSED_STREAM:7,NGHTTP2_CANCEL:8,NGHTTP2_COMPRESSION_ERROR:9,NGHTTP2_CONNECT_ERROR:10,NGHTTP2_ENHANCE_YOUR_CALM:11,NGHTTP2_INADEQUATE_SECURITY:12,NGHTTP2_HTTP_1_1_REQUIRED:13,NGHTTP2_NV_FLAG_NONE:0,NGHTTP2_NV_FLAG_NO_INDEX:1,NGHTTP2_ERR_DEFERRED:-508,NGHTTP2_ERR_STREAM_ID_NOT_AVAILABLE:-509,NGHTTP2_ERR_STREAM_CLOSED:-510,NGHTTP2_ERR_INVALID_ARGUMENT:-501,NGHTTP2_ERR_FRAME_SIZE_ERROR:-522,NGHTTP2_ERR_NOMEM:-901,NGHTTP2_FLAG_NONE:0,NGHTTP2_FLAG_END_STREAM:1,NGHTTP2_FLAG_END_HEADERS:4,NGHTTP2_FLAG_ACK:1,NGHTTP2_FLAG_PADDED:8,NGHTTP2_FLAG_PRIORITY:32,NGHTTP2_DEFAULT_WEIGHT:16,NGHTTP2_SETTINGS_HEADER_TABLE_SIZE:1,NGHTTP2_SETTINGS_ENABLE_PUSH:2,NGHTTP2_SETTINGS_MAX_CONCURRENT_STREAMS:3,NGHTTP2_SETTINGS_INITIAL_WINDOW_SIZE:4,NGHTTP2_SETTINGS_MAX_FRAME_SIZE:5,NGHTTP2_SETTINGS_MAX_HEADER_LIST_SIZE:6,NGHTTP2_SETTINGS_ENABLE_CONNECT_PROTOCOL:8},oSe={[So.NGHTTP2_ERR_DEFERRED]:"Data deferred",[So.NGHTTP2_ERR_STREAM_ID_NOT_AVAILABLE]:"Stream ID is not available",[So.NGHTTP2_ERR_STREAM_CLOSED]:"Stream was already closed or invalid",[So.NGHTTP2_ERR_INVALID_ARGUMENT]:"Invalid argument",[So.NGHTTP2_ERR_FRAME_SIZE_ERROR]:"Frame size error",[So.NGHTTP2_ERR_NOMEM]:"Out of memory"},hW=class extends Error{constructor(t){super(t);y(this,"code","ERR_HTTP2_ERROR");this.name="Error"}};function dW(e){return oSe[e]??`HTTP/2 error (${String(e)})`}function l1(e,t){return lr(`The property 'options.${e}' is invalid. Received ${aSe(t)}`,"ERR_INVALID_ARG_VALUE")}function aSe(e){return typeof e=="function"?`[Function${e.name?`: ${e.name}`:": function"}]`:typeof e=="symbol"?e.toString():Array.isArray(e)?"[]":e===null?"null":typeof e=="object"?"{}":String(e)}function ASe(e){return Qo("ERR_HTTP2_PAYLOAD_FORBIDDEN",`Responses with ${String(e)} status must not have a payload`)}var fSe=61440,uSe=16384,cSe=32768,lSe=4096,hSe=49152,dSe=40960;function gSe(e){let t=e.atimeMs??0,r=e.mtimeMs??t,n=e.ctimeMs??r,i=e.birthtimeMs??n,s=e.mode&fSe;return{size:e.size,mode:e.mode,atimeMs:t,mtimeMs:r,ctimeMs:n,birthtimeMs:i,atime:new Date(t),mtime:new Date(r),ctime:new Date(n),birthtime:new Date(i),isFile:()=>s===cSe,isDirectory:()=>s===uSe,isFIFO:()=>s===lSe,isSocket:()=>s===hSe,isSymbolicLink:()=>s===dSe}}function pSe(e){let t=e??{},r=t.offset;if(r!==void 0&&(typeof r!="number"||!Number.isFinite(r)))throw l1("offset",r);let n=t.length;if(n!==void 0&&(typeof n!="number"||!Number.isFinite(n)))throw l1("length",n);let i=t.statCheck;if(i!==void 0&&typeof i!="function")throw l1("statCheck",i);let s=t.onError;return{offset:r===void 0?0:Math.max(0,Math.trunc(r)),length:typeof n=="number"?Math.trunc(n):void 0,statCheck:typeof i=="function"?i:void 0,onError:typeof s=="function"?s:void 0}}function ESe(e,t,r){let n=Math.max(0,Math.min(t,e.length));return r===void 0||r<0?e.subarray(n):e.subarray(n,Math.min(e.length,n+r))}var gW=class{constructor(e){y(this,"_streamId");this._streamId=e}respond(e){if(typeof _networkHttp2StreamRespondRaw>"u")throw new Error("http2 server stream respond bridge is not available");return _networkHttp2StreamRespondRaw.applySync(void 0,[this._streamId,sR(e)]),0}},r2={headerTableSize:4096,enablePush:!0,initialWindowSize:65535,maxFrameSize:16384,maxConcurrentStreams:4294967295,maxHeaderListSize:65535,maxHeaderSize:65535,enableConnectProtocol:!1},pW={effectiveLocalWindowSize:65535,localWindowSize:65535,remoteWindowSize:65535,nextStreamID:1,outboundQueueSize:1,deflateDynamicTableSize:0,inflateDynamicTableSize:0};function Wi(e){let t={};for(let[r,n]of Object.entries(e??{})){if(r==="customSettings"&&n&&typeof n=="object"){let i={};for(let[s,o]of Object.entries(n))i[Number(s)]=Number(o);t.customSettings=i;continue}t[r]=n}return t}function mG(e){return{...pW,...e??{}}}function ySe(e){if(!e||typeof e!="object")return;let t=e,r={},n=["effectiveLocalWindowSize","localWindowSize","remoteWindowSize","nextStreamID","outboundQueueSize","deflateDynamicTableSize","inflateDynamicTableSize"];for(let i of n)typeof t[i]=="number"&&(r[i]=t[i]);return r}function EW(e,t="settings"){if(!e||typeof e!="object"||Array.isArray(e))throw Hl(t,"object",e);let r=e,n={},i={headerTableSize:[0,4294967295],initialWindowSize:[0,4294967295],maxFrameSize:[16384,16777215],maxConcurrentStreams:[0,4294967295],maxHeaderListSize:[0,4294967295],maxHeaderSize:[0,4294967295]};for(let[s,o]of Object.entries(r))if(o!==void 0){if(s==="enablePush"||s==="enableConnectProtocol"){if(typeof o!="boolean")throw sSe(s,o);n[s]=o;continue}if(s==="customSettings"){if(!o||typeof o!="object"||Array.isArray(o))throw Rg(s,o);let a={};for(let[A,f]of Object.entries(o)){let l=Number(A);if(!Number.isInteger(l)||l<0||l>65535||typeof f!="number"||!Number.isInteger(f)||f<0||f>4294967295)throw Rg(s,o);a[l]=f}n.customSettings=a;continue}if(s in i){let[a,A]=i[s];if(typeof o!="number"||!Number.isInteger(o)||o<a||o>A)throw Rg(s,o);n[s]=o;continue}n[s]=o}return n}function sR(e){return JSON.stringify(e??{})}function FA(e){if(!e)return{};try{let t=JSON.parse(e);return t&&typeof t=="object"?t:{}}catch{return{}}}function xg(e){if(!e)return null;try{let t=JSON.parse(e);return t&&typeof t=="object"?t:null}catch{return null}}function BG(e){if(!e)return null;try{let t=JSON.parse(e);return t&&typeof t=="object"?t:null}catch{return null}}function DB(e){if(!e)return new Error("Unknown HTTP/2 bridge error");try{let t=JSON.parse(e),r=new Error(t.message??"Unknown HTTP/2 bridge error");return t.name&&(r.name=t.name),t.code&&(r.code=t.code),r}catch{return new Error(e)}}function yW(e){let t={};if(!e||typeof e!="object")return t;for(let[r,n]of Object.entries(e))t[String(r)]=n;return t}function mSe(e){if(!e)return;let t={endStream:"boolean",weight:"number",parent:"number",exclusive:"boolean",silent:"boolean"};for(let[r,n]of Object.entries(t)){if(!(r in e)||e[r]===void 0)continue;let i=e[r];if(n==="boolean"&&typeof i!="boolean")throw Hl(r,"boolean",i);if(n==="number"&&typeof i!="number")throw Hl(r,"number",i)}}function BSe(e){if(!e||!e.settings||typeof e.settings!="object")return;let t=e.settings;if("maxFrameSize"in t){let r=t.maxFrameSize;if(typeof r!="number"||!Number.isInteger(r)||r<16384||r>16777215)throw Rg("maxFrameSize",r)}}function oR(e,t){t&&(e.encrypted=t.encrypted===!0,e.alpnProtocol=t.alpnProtocol??(e.encrypted?"h2":"h2c"),e.originSet=Array.isArray(t.originSet)&&t.originSet.length>0?[...t.originSet]:e.encrypted?[]:void 0,t.localSettings&&typeof t.localSettings=="object"&&(e.localSettings=Wi(t.localSettings)),t.remoteSettings&&typeof t.remoteSettings=="object"&&(e.remoteSettings=Wi(t.remoteSettings)),t.state&&typeof t.state=="object"&&e._applyRuntimeState(ySe(t.state)),e.socket._applyState(t.socket))}function ISe(e,t){if(e instanceof URL)return e;if(typeof e=="string")return new URL(e);if(e&&typeof e=="object"){let r=e,n=typeof(t?.protocol??r.protocol)=="string"?String(t?.protocol??r.protocol):"http:",i=typeof(t?.host??r.host??t?.hostname??r.hostname)=="string"?String(t?.host??r.host??t?.hostname??r.hostname):"localhost",s=t?.port??r.port,o=s===void 0?"":String(s);return new URL(`${n}//${i}${o?`:${o}`:""}`)}return new URL("http://localhost")}function bSe(e,t,r){let n=typeof t=="function"?t:typeof r=="function"?r:void 0,i=typeof t=="function"?{}:t??{};return{authority:ISe(e,i),options:i,listener:n}}function CSe(e){if(!e||typeof e!="object")return;let t=e._socketId;return typeof t=="number"&&Number.isFinite(t)?t:void 0}var mW=class extends Tu{constructor(t,r,n=!1){super();y(this,"_streamId");y(this,"_encoding");y(this,"_utf8Remainder");y(this,"_isPushStream");y(this,"_session");y(this,"_receivedResponse",!1);y(this,"_needsDrain",!1);y(this,"_pendingWritableBytes",0);y(this,"_drainScheduled",!1);y(this,"_writableHighWaterMark",16*1024);y(this,"rstCode",0);y(this,"readable",!0);y(this,"writable",!0);y(this,"writableEnded",!1);y(this,"writableFinished",!1);y(this,"destroyed",!1);y(this,"_writableState",{ended:!1,finished:!1,objectMode:!1,corked:0,length:0});this._streamId=t,this._session=r,this._isPushStream=n,n||queueMicrotask(()=>{this.emit("ready")})}setEncoding(t){return this._encoding=t,this._utf8Remainder=this._encoding==="utf8"||this._encoding==="utf-8"?Buffer.alloc(0):void 0,this}close(){return this.end(),this}destroy(t){return this.destroyed?this:(this.destroyed=!0,t&&this.emit("error",t),this.end(),this)}_scheduleDrain(){!this._needsDrain||this._drainScheduled||(this._drainScheduled=!0,queueMicrotask(()=>{this._drainScheduled=!1,this._needsDrain&&(this._needsDrain=!1,this._pendingWritableBytes=0,this.emit("drain"))}))}write(t,r,n){if(typeof _networkHttp2StreamWriteRaw>"u")throw new Error("http2 session stream write bridge is not available");let i=Buffer.isBuffer(t)?t:typeof t=="string"?Buffer.from(t,typeof r=="string"?r:"utf8"):Buffer.from(t),s=_networkHttp2StreamWriteRaw.applySync(void 0,[this._streamId,i.toString("base64")]);this._pendingWritableBytes+=i.byteLength;let o=s===!1||this._pendingWritableBytes>=this._writableHighWaterMark;return o&&(this._needsDrain=!0),(typeof r=="function"?r:n)?.(),!o}end(t){if(typeof _networkHttp2StreamEndRaw>"u")throw new Error("http2 session stream end bridge is not available");let r=null;return t!==void 0&&(r=(Buffer.isBuffer(t)?t:Buffer.from(t)).toString("base64")),_networkHttp2StreamEndRaw.applySync(void 0,[this._streamId,r]),this.writableEnded=!0,this._writableState.ended=!0,queueMicrotask(()=>{this.writable=!1,this.writableFinished=!0,this._writableState.finished=!0,this.emit("finish")}),this}resume(){return this}_emitPush(t,r){process.env.SECURE_EXEC_DEBUG_HTTP2_BRIDGE==="1"&&console.error("[secure-exec http2 isolate] push",this._streamId),this.emit("push",t,r??0)}_hasReceivedResponse(){return this._receivedResponse}_belongsTo(t){return this._session===t}_emitResponseHeaders(t){this._receivedResponse=!0,process.env.SECURE_EXEC_DEBUG_HTTP2_BRIDGE==="1"&&console.error("[secure-exec http2 isolate] response headers",this._streamId,this._isPushStream),this._isPushStream||this.emit("response",t)}_emitDataChunk(t){if(!t)return;let r=Buffer.from(t,"base64");if(this._utf8Remainder!==void 0){let n=this._utf8Remainder.length>0?Buffer.concat([this._utf8Remainder,r]):r,i=QSe(n),s=n.subarray(0,i).toString("utf8");this._utf8Remainder=i<n.length?n.subarray(i):Buffer.alloc(0),s.length>0&&this.emit("data",s)}else this._encoding?this.emit("data",r.toString(this._encoding)):this.emit("data",r);this._scheduleDrain()}_emitEnd(){if(this._utf8Remainder&&this._utf8Remainder.length>0){let t=this._utf8Remainder.toString("utf8");this._utf8Remainder=Buffer.alloc(0),t.length>0&&this.emit("data",t)}this.readable=!1,this.emit("end"),this._scheduleDrain()}_emitClose(t){typeof t=="number"&&(this.rstCode=t),this.destroyed=!0,this.readable=!1,this.writable=!1,this._scheduleDrain(),this.emit("close")}};function QSe(e){if(e.length===0)return 0;let t=0;for(let r=e.length-1;r>=0&&t<3;r-=1){if((e[r]&192)!==128){let n=e.length-r,i=e[r],s=(i&128)===0?1:(i&224)===192?2:(i&240)===224?3:(i&248)===240?4:1;return n<s?r:e.length}t+=1}return t>0?e.length-t:e.length}var wSe=class BW extends Tu{constructor(r,n,i,s=!1){super();y(this,"_streamId");y(this,"_binding");y(this,"_responded",!1);y(this,"_endQueued",!1);y(this,"_pendingSyntheticErrorSuppressions",0);y(this,"_requestHeaders");y(this,"_isPushStream");y(this,"session");y(this,"rstCode",0);y(this,"readable",!0);y(this,"writable",!0);y(this,"destroyed",!1);y(this,"_readableState");y(this,"_writableState");this._streamId=r,this._binding=new gW(r),this.session=n,this._requestHeaders=i,this._isPushStream=s,this._readableState={flowing:null,ended:!1,highWaterMark:16*1024},this._writableState={ended:i?.[":method"]==="HEAD"}}_closeWithCode(r){this.rstCode=r,_networkHttp2StreamCloseRaw?.applySync(void 0,[this._streamId,r])}_markSyntheticClose(){this.destroyed=!0,this.readable=!1,this.writable=!1}_shouldSuppressHostError(){return this._pendingSyntheticErrorSuppressions<=0?!1:(this._pendingSyntheticErrorSuppressions-=1,!0)}_emitNghttp2Error(r){let n=new hW(dW(r));this._pendingSyntheticErrorSuppressions+=1,this._markSyntheticClose(),this.emit("error",n),this._closeWithCode(So.NGHTTP2_INTERNAL_ERROR)}_emitInternalStreamError(){let r=Qo("ERR_HTTP2_STREAM_ERROR","Stream closed with error code NGHTTP2_INTERNAL_ERROR");this._pendingSyntheticErrorSuppressions+=1,this._markSyntheticClose(),this.emit("error",r),this._closeWithCode(So.NGHTTP2_INTERNAL_ERROR)}_submitResponse(r){this._responded=!0;let n=this._binding.respond(r);return typeof n=="number"&&n!==0?(this._emitNghttp2Error(n),!1):!0}respond(r){if(this.destroyed)throw Qo("ERR_HTTP2_INVALID_STREAM","The stream has been destroyed");if(this._responded)throw Qo("ERR_HTTP2_HEADERS_SENT","Response has already been initiated.");this._submitResponse(r)}pushStream(r,n,i){if(this._isPushStream)throw Qo("ERR_HTTP2_NESTED_PUSH","A push stream cannot initiate another push stream.");let s=typeof n=="function"?n:i;if(typeof s!="function")throw Hl("callback","function",s);if(typeof _networkHttp2StreamPushStreamRaw>"u")throw new Error("http2 server stream push bridge is not available");let o=n&&typeof n=="object"&&!Array.isArray(n)?n:{},a=_networkHttp2StreamPushStreamRaw.applySync(void 0,[this._streamId,sR(yW(r)),JSON.stringify(o??{})]),A=JSON.parse(a);if(A.error){s(DB(A.error));return}let f=new BW(Number(A.streamId),this.session,FA(A.headers),!0);bn.set(Number(A.streamId),f),s(null,f,FA(A.headers))}write(r){if(this._writableState.ended)return queueMicrotask(()=>{this.emit("error",Qo("ERR_STREAM_WRITE_AFTER_END","write after end"))}),!1;if(typeof _networkHttp2StreamWriteRaw>"u")throw new Error("http2 server stream write bridge is not available");let n=Buffer.isBuffer(r)?r:Buffer.from(r);return _networkHttp2StreamWriteRaw.applySync(void 0,[this._streamId,n.toString("base64")])}end(r){if(!this._responded&&!this._submitResponse({":status":200})||this._endQueued)return;if(typeof _networkHttp2StreamEndRaw>"u")throw new Error("http2 server stream end bridge is not available");this._writableState.ended=!0;let n=null;r!==void 0&&(n=(Buffer.isBuffer(r)?r:Buffer.from(r)).toString("base64")),this._endQueued=!0,queueMicrotask(()=>{!this._endQueued||this.destroyed||(this._endQueued=!1,_networkHttp2StreamEndRaw.applySync(void 0,[this._streamId,n]))})}pause(){return this._readableState.flowing=!1,_networkHttp2StreamPauseRaw?.applySync(void 0,[this._streamId]),this}resume(){return this._readableState.flowing=!0,_networkHttp2StreamResumeRaw?.applySync(void 0,[this._streamId]),this}respondWithFile(r,n,i){if(this.destroyed)throw Qo("ERR_HTTP2_INVALID_STREAM","The stream has been destroyed");if(this._responded)throw Qo("ERR_HTTP2_HEADERS_SENT","Response has already been initiated.");let s=pSe(i),o={...n??{}},a=o[":status"];if(a===204||a===205||a===304)throw ASe(Number(a));try{let A=Lt.stat.applySyncPromise(void 0,[r]),f=Lt.readFileBinary.applySyncPromise(void 0,[r]),l=gSe(Ma(A)),p={offset:s.offset,length:s.length??Math.max(0,l.size-s.offset)};s.statCheck?.(l,o,p);let B=Buffer.from(f,"base64"),S=ESe(B,s.offset,s.length);if(o["content-length"]===void 0&&(o["content-length"]=S.byteLength),!this._submitResponse({":status":200,...o}))return;this.end(S);return}catch{}if(typeof _networkHttp2StreamRespondWithFileRaw>"u")throw new Error("http2 server stream respondWithFile bridge is not available");this._responded=!0,_networkHttp2StreamRespondWithFileRaw.applySync(void 0,[this._streamId,r,JSON.stringify(n??{}),JSON.stringify(i??{})])}respondWithFD(r,n,i){let s=typeof r=="number"?r:typeof r?.fd=="number"?r.fd:NaN,o=Number.isFinite(s)?xA.applySync(void 0,[s]):null;if(!o){this._emitInternalStreamError();return}this.respondWithFile(o,n,i)}destroy(r){return this.destroyed?this:(this.destroyed=!0,r&&this.emit("error",r),this._closeWithCode(So.NGHTTP2_CANCEL),this)}_emitData(r){r&&this.emit("data",Buffer.from(r,"base64"))}_emitEnd(){this._readableState.ended=!0,this.emit("end")}_emitDrain(){this.emit("drain")}_emitClose(r){typeof r=="number"&&(this.rstCode=r),this.destroyed=!0,this.emit("close")}},IW=class extends Tu{constructor(t,r,n){super();y(this,"headers");y(this,"method");y(this,"url");y(this,"connection");y(this,"socket");y(this,"stream");y(this,"destroyed",!1);y(this,"readable",!0);y(this,"_readableState",{flowing:null,length:0,ended:!1,objectMode:!1});this.headers=t,this.method=typeof t[":method"]=="string"?String(t[":method"]):"GET",this.url=typeof t[":path"]=="string"?String(t[":path"]):"/",this.connection=r,this.socket=r,this.stream=n}on(t,r){return super.on(t,r),t==="data"&&this._readableState.flowing!==!1&&this.resume(),this}once(t,r){return super.once(t,r),t==="data"&&this._readableState.flowing!==!1&&this.resume(),this}resume(){return this._readableState.flowing=!0,this.stream.resume(),this}pause(){return this._readableState.flowing=!1,this.stream.pause(),this}pipe(t){return this.on("data",r=>{t.write(r)===!1&&typeof t.once=="function"&&(this.pause(),t.once("drain",()=>this.resume()))}),this.on("end",()=>t.end()),this.resume(),t}unpipe(){return this}read(){return null}isPaused(){return this._readableState.flowing===!1}setEncoding(){return this}_emitData(t){this._readableState.length+=t.byteLength,this.emit("data",t)}_emitEnd(){this._readableState.ended=!0,this.emit("end"),this.emit("close")}_emitError(t){this.emit("error",t)}destroy(t){return this.destroyed=!0,t&&this.emit("error",t),this.emit("close"),this}},bW=class extends Tu{constructor(t){super();y(this,"_stream");y(this,"_headers",{});y(this,"_statusCode",200);y(this,"headersSent",!1);y(this,"writable",!0);y(this,"writableEnded",!1);y(this,"writableFinished",!1);y(this,"socket");y(this,"connection");y(this,"stream");y(this,"_writableState",{ended:!1,finished:!1,objectMode:!1,corked:0,length:0});this._stream=t,this.stream=t,this.socket=t.session.socket,this.connection=this.socket}writeHead(t,r){return this._statusCode=t,this._headers={...this._headers,...r??{},":status":t},this._stream.respond(this._headers),this.headersSent=!0,this}setHeader(t,r){return this._headers[t]=r,this}getHeader(t){return this._headers[t]}hasHeader(t){return Object.prototype.hasOwnProperty.call(this._headers,t)}removeHeader(t){delete this._headers[t]}write(t,r,n){":status"in this._headers||(this._headers[":status"]=this._statusCode,this._stream.respond(this._headers),this.headersSent=!0);let i=this._stream.write(typeof t=="string"&&typeof r=="string"?Buffer.from(t,r):t);return(typeof r=="function"?r:n)?.(),i}end(t){return":status"in this._headers||(this._headers[":status"]=this._statusCode,this._stream.respond(this._headers),this.headersSent=!0),this.writableEnded=!0,this._writableState.ended=!0,this._stream.end(t),queueMicrotask(()=>{this.writable=!1,this.writableFinished=!0,this._writableState.finished=!0,this.emit("finish"),this.emit("close")}),this}destroy(t){return t&&this.emit("error",t),this.writable=!1,this.writableEnded=!0,this.writableFinished=!0,this.emit("close"),this}},CW=class extends Tu{constructor(t,r){super();y(this,"encrypted",!1);y(this,"alpnProtocol",!1);y(this,"originSet");y(this,"localSettings",Wi(r2));y(this,"remoteSettings",Wi(r2));y(this,"pendingSettingsAck",!1);y(this,"socket");y(this,"state",mG(pW));y(this,"_sessionId");y(this,"_waitStarted",!1);y(this,"_pendingSettingsAckCount",0);y(this,"_awaitingInitialSettingsAck",!1);y(this,"_settingsCallbacks",[]);this._sessionId=t,this.socket=new t2(r,()=>{setTimeout(()=>{this.destroy()},0)}),this[nSe]=this.socket}_retain(){this._waitStarted||typeof _networkHttp2SessionPollRaw>"u"||(this._waitStarted=!0,QW("session",this._sessionId,()=>this._waitStarted&&Bn.get(this._sessionId)===this,()=>_networkHttp2SessionPollRaw.applySyncPromise(void 0,[this._sessionId,0]),t=>this.emit("error",t instanceof Error?t:new Error(String(t)))))}_release(){this._waitStarted=!1,Ta.delete(`session:${this._sessionId}`)}_beginInitialSettingsAck(){this._awaitingInitialSettingsAck=!0,this._pendingSettingsAckCount+=1,this.pendingSettingsAck=!0}_applyLocalSettings(t){this.localSettings=Wi(t),this._awaitingInitialSettingsAck&&(this._awaitingInitialSettingsAck=!1,this._pendingSettingsAckCount=Math.max(0,this._pendingSettingsAckCount-1),this.pendingSettingsAck=this._pendingSettingsAckCount>0),this.emit("localSettings",this.localSettings)}_applyRemoteSettings(t){this.remoteSettings=Wi(t),this.emit("remoteSettings",this.remoteSettings)}_applyRuntimeState(t){this.state=mG(t)}_ackSettings(){this._pendingSettingsAckCount=Math.max(0,this._pendingSettingsAckCount-1),this.pendingSettingsAck=this._pendingSettingsAckCount>0,this._settingsCallbacks.shift()?.()}request(t,r){if(typeof _networkHttp2SessionRequestRaw>"u")throw new Error("http2 session request bridge is not available");mSe(r);let n=_networkHttp2SessionRequestRaw.applySync(void 0,[this._sessionId,sR(yW(t)),JSON.stringify(r??{})]),i=new mW(n,this);return bn.set(n,i),i}settings(t,r){if(r!==void 0&&typeof r!="function")throw Hl("callback","function",r);if(typeof _networkHttp2SessionSettingsRaw>"u")throw new Error("http2 session settings bridge is not available");let n=EW(t);_networkHttp2SessionSettingsRaw.applySync(void 0,[this._sessionId,JSON.stringify(n)]),this._pendingSettingsAckCount+=1,this.pendingSettingsAck=!0,r&&this._settingsCallbacks.push(r)}setLocalWindowSize(t){if(typeof t!="number"||Number.isNaN(t))throw Hl("windowSize","number",t);if(!Number.isInteger(t)||t<0||t>2147483647){let n=new RangeError(`The value of "windowSize" is out of range. It must be >= 0 && <= 2147483647. Received ${t}`);throw n.code="ERR_OUT_OF_RANGE",n}if(typeof _networkHttp2SessionSetLocalWindowSizeRaw>"u")throw new Error("http2 session setLocalWindowSize bridge is not available");let r=_networkHttp2SessionSetLocalWindowSizeRaw.applySync(void 0,[this._sessionId,t]);this._applyRuntimeState(xg(r)?.state)}goaway(t=0,r=0,n){let i=n===void 0?null:Buffer.isBuffer(n)?n.toString("base64"):Buffer.from(n).toString("base64");_networkHttp2SessionGoawayRaw?.applySync(void 0,[this._sessionId,t,r,i])}close(){let t=Array.from(bn.entries()).filter(([,r])=>typeof r._belongsTo=="function"&&r._belongsTo(this)&&!r._hasReceivedResponse());if(t.length>0){let r=Qo("ERR_HTTP2_GOAWAY_SESSION","The HTTP/2 session is closing before the stream could be established.");if(queueMicrotask(()=>{for(let[n,i]of t)bn.get(n)===i&&(i.emit("error",r),i.emit("close"),bn.delete(n))}),typeof _networkHttp2SessionDestroyRaw<"u"){_networkHttp2SessionDestroyRaw.applySync(void 0,[this._sessionId]);return}}_networkHttp2SessionCloseRaw?.applySync(void 0,[this._sessionId]),setTimeout(()=>{Bn.has(this._sessionId)&&(this._release(),this.emit("close"),Bn.delete(this._sessionId),_unregisterHandle?.(`http2:session:${this._sessionId}`))},50)}destroy(){if(typeof _networkHttp2SessionDestroyRaw<"u"){_networkHttp2SessionDestroyRaw.applySync(void 0,[this._sessionId]);return}this.close()}},SSe=class extends Tu{constructor(t,r,n){super();y(this,"allowHalfOpen");y(this,"allowHTTP1");y(this,"encrypted");y(this,"_serverId");y(this,"listening",!1);y(this,"_address",null);y(this,"_options");y(this,"_timeoutMs",0);y(this,"_waitStarted",!1);this.allowHalfOpen=t?.allowHalfOpen===!0,this.allowHTTP1=t?.allowHTTP1===!0,this.encrypted=n;let i=t?.settings&&typeof t.settings=="object"&&!Array.isArray(t.settings)?Wi(t.settings):{};this._options={...t??{},settings:i},this._serverId=iSe++,this[yG]={settings:Wi(i),unknownProtocolTimeout:1e4,...n?{ALPNProtocols:["h2"]}:{}},r&&this.on("request",r),_s.set(this._serverId,this)}address(){return this._address}_retain(){this._waitStarted||typeof _networkHttp2ServerPollRaw>"u"||(this._waitStarted=!0,QW("server",this._serverId,()=>this._waitStarted&&_s.get(this._serverId)===this,()=>_networkHttp2ServerPollRaw.applySyncPromise(void 0,[this._serverId,0]),t=>this.emit("error",t instanceof Error?t:new Error(String(t)))))}_release(){this._waitStarted=!1,Ta.delete(`server:${this._serverId}`)}setTimeout(t,r){return this._timeoutMs=AW(t),r&&this.on("timeout",r),this}updateSettings(t){let r=EW(t),n={...Wi(this._options.settings),...Wi(r)};this._options={...this._options,settings:n};let i=this[yG];return i.settings=Wi(n),this}listen(t,r,n,i){if(typeof _networkHttp2ServerListenRaw>"u")throw new Error(`http2.${this.encrypted?"createSecureServer":"createServer"} is not supported in sandbox`);let s=oW(t,r,n,i);s.callback&&this.once("listening",s.callback);let o={serverId:this._serverId,secure:this.encrypted,port:s.port,host:s.host,backlog:s.backlog,allowHalfOpen:this.allowHalfOpen,allowHTTP1:this._options.allowHTTP1===!0,timeout:this._timeoutMs,settings:this._options.settings,remoteCustomSettings:this._options.remoteCustomSettings,tls:this.encrypted?Wl({...this._options,...t&&typeof t=="object"?t:{}},{isServer:!0}):void 0},a=JSON.parse(_networkHttp2ServerListenRaw.applySyncPromise(void 0,[JSON.stringify(o)]));return this._address=a.address??null,this.listening=!0,this._retain(),_registerHandle?.(`http2:server:${this._serverId}`,"http2 server"),this.emit("listening"),this}close(t){return t&&this.once("close",t),this.listening?(_networkHttp2ServerCloseRaw?.apply(void 0,[this._serverId],{result:{promise:!0}}),setTimeout(()=>{this.listening&&(this.listening=!1,this._release(),this.emit("close"),_s.delete(this._serverId),_unregisterHandle?.(`http2:server:${this._serverId}`))},50),this):(this._release(),queueMicrotask(()=>this.emit("close")),this)}};function IG(e,t,r){let n=typeof t=="function"?t:r,i=t&&typeof t=="object"&&!Array.isArray(t)?t:void 0;return new SSe(i,n,e)}function _Se(e,t,r){if(typeof _networkHttp2SessionConnectRaw>"u")throw new Error("http2.connect is not supported in sandbox");let{authority:n,options:i,listener:s}=bSe(e,t,r);if(n.protocol!=="http:"&&n.protocol!=="https:")throw Qo("ERR_HTTP2_UNSUPPORTED_PROTOCOL",`protocol "${n.protocol}" is unsupported.`);BSe(i);let o=i.createConnection?CSe(i.createConnection()):void 0,a=i.port??n.port,A=a===""||a===void 0||a===null?void 0:Number(a),f=JSON.parse(_networkHttp2SessionConnectRaw.applySyncPromise(void 0,[JSON.stringify({authority:n.toString(),protocol:n.protocol,host:i.host??i.hostname??n.hostname,port:A,localAddress:i.localAddress,family:i.family,socketId:o,settings:i.settings,remoteCustomSettings:i.remoteCustomSettings,tls:n.protocol==="https:"?Wl(i,{servername:typeof i.servername=="string"?i.servername:n.hostname}):void 0})])),l=xg(f.state),p=new CW(f.sessionId,l?.socket??void 0);return oR(p,l),p._beginInitialSettingsAck(),p._retain(),s&&p.once("connect",()=>s(p)),Bn.set(f.sessionId,p),_registerHandle?.(`http2:session:${f.sessionId}`,"http2 session"),n.protocol==="https:"&&p.socket.once("secureConnect",()=>{}),p}function bG(e,t){let r=Bn.get(e);return r||(r=new CW(e,t?.socket??void 0),Bn.set(e,r)),oR(r,t),r}function bl(e,t){let r=RB.get(e)??[];r.push(t),RB.set(e,r)}function iu(e){if(u1.has(e))return;u1.add(e);let t=()=>{u1.delete(e),vSe(e)},r=globalThis.setImmediate;if(typeof r=="function"){r(t);return}setTimeout(t,0)}function vSe(e){let t=bn.get(e);if(!t||typeof t._emitResponseHeaders!="function")return;let r=RB.get(e);if(!(!r||r.length===0)){RB.delete(e);for(let n of r){if(n.kind==="push"){t._emitPush(FA(n.data),n.extraNumber);continue}if(n.kind==="responseHeaders"){t._emitResponseHeaders(FA(n.data));continue}if(n.kind==="data"){t._emitDataChunk(n.data);continue}if(n.kind==="end"){t._emitEnd();continue}if(n.kind==="error"){t.emit("error",DB(n.data));continue}typeof t._emitClose=="function"?t._emitClose(n.extraNumber):t.emit("close"),bn.delete(e)}}}function aR(e,t,r,n,i,s,o){if(e==="sessionConnect"){let a=Bn.get(t);if(!a)return;let A=xg(r);oR(a,A),a.encrypted&&a.socket.emit("secureConnect"),a.emit("connect");return}if(e==="sessionClose"){let a=Bn.get(t);if(!a)return;a._release(),a.emit("close"),Bn.delete(t),_unregisterHandle?.(`http2:session:${t}`);return}if(e==="sessionError"){let a=Bn.get(t);if(!a)return;a.emit("error",DB(r));return}if(e==="sessionLocalSettings"){let a=Bn.get(t);if(!a)return;a._applyLocalSettings(FA(r));return}if(e==="sessionRemoteSettings"){let a=Bn.get(t);if(!a)return;a._applyRemoteSettings(FA(r));return}if(e==="sessionSettingsAck"){let a=Bn.get(t);if(!a)return;a._ackSettings();return}if(e==="sessionGoaway"){let a=Bn.get(t);if(!a)return;a.emit("goaway",Number(i??0),Number(o??0),r?Buffer.from(r,"base64"):Buffer.alloc(0));return}if(e==="clientPushStream"){let a=Bn.get(t);if(!a)return;let A=Number(r),f=new mW(A,a,!0);bn.set(A,f),a.emit("stream",f,FA(s),Number(o??0)),iu(A);return}if(e==="clientPushHeaders"){bl(t,{kind:"push",data:r,extraNumber:Number(i??0)}),iu(t);return}if(e==="clientResponseHeaders"){bl(t,{kind:"responseHeaders",data:r}),iu(t);return}if(e==="clientData"){bl(t,{kind:"data",data:r}),iu(t);return}if(e==="clientEnd"){bl(t,{kind:"end"}),iu(t);return}if(e==="clientClose"){bl(t,{kind:"close",extraNumber:Number(i??0)}),iu(t);return}if(e==="clientError"){bl(t,{kind:"error",data:r}),iu(t);return}if(e==="serverStream"){let a=_s.get(t);if(!a)return;let A=xg(n),f=Number(i),l=bG(f,A),p=Number(r),B=FA(s),S=Number(o??0),_=new wSe(p,l,B);if(bn.set(p,_),a.emit("stream",_,B,S),a.listenerCount("request")>0){let N=new IW(B,l.socket,_),P=new bW(_);_.on("data",U=>{N._emitData(U)}),_.on("end",()=>{N._emitEnd()}),_.on("error",U=>{N._emitError(U)}),_.on("drain",()=>{P.emit("drain")}),a.emit("request",N,P)}return}if(e==="serverStreamData"){let a=bn.get(t);if(!a||typeof a._emitData!="function")return;a._emitData(r);return}if(e==="serverStreamEnd"){let a=bn.get(t);if(!a||typeof a._emitEnd!="function")return;a._emitEnd();return}if(e==="serverStreamDrain"){let a=bn.get(t);if(!a||typeof a._emitDrain!="function")return;a._emitDrain();return}if(e==="serverStreamError"){let a=bn.get(t);if(!a||typeof a._shouldSuppressHostError=="function"&&a._shouldSuppressHostError())return;a.emit("error",DB(r));return}if(e==="serverStreamClose"){let a=bn.get(t);if(!a||typeof a._emitClose!="function")return;a._emitClose(Number(i??0)),bn.delete(t);return}if(e==="serverSession"){let a=_s.get(t);if(!a)return;let A=Number(i),f=bG(A,xg(r));a.emit("session",f);return}if(e==="serverTimeout"){_s.get(t)?.emit("timeout");return}if(e==="serverConnection"){_s.get(t)?.emit("connection",new t2(BG(r)??void 0));return}if(e==="serverSecureConnection"){_s.get(t)?.emit("secureConnection",new t2(BG(r)??void 0));return}if(e==="serverClose"){let a=_s.get(t);if(!a)return;a.listening=!1,a._release(),a.emit("close"),_s.delete(t),_unregisterHandle?.(`http2:server:${t}`);return}e==="serverCompatRequest"&&(e2.set(Number(i),{serverId:t,requestJson:r??"{}"}),f_e(t,Number(i)))}function RSe(e){if(typeof e=="string"&&(e=JSON.parse(e)),!e||typeof e!="object"||typeof e.kind!="string")return!1;let t=Number(e.id);return Number.isFinite(t)?(aR(e.kind,t,typeof e.data=="string"?e.data:void 0,typeof e.extra=="string"?e.extra:void 0,typeof e.extraNumber=="string"||typeof e.extraNumber=="number"?e.extraNumber:void 0,typeof e.extraHeaders=="string"?e.extraHeaders:void 0,typeof e.flags=="string"||typeof e.flags=="number"?e.flags:void 0),e.kind==="serverClose"||e.kind==="sessionClose"):!1}function QW(e,t,r,n,i){let s=`${e}:${t}`,o={active:!0,running:!1,pendingWake:!1,fallbackTimer:null,poll:n,tick:null},a=()=>{o.fallbackTimer!==null&&(clearTimeout(o.fallbackTimer),o.fallbackTimer=null)},A=()=>{if(a(),!r()){o.active=!1,Ta.delete(s);return}if(o.running){o.pendingWake=!0;return}o.running=!0;try{let f=!1,l=!1;do{o.pendingWake=!1,l=!1;let p=0;for(;p<64&&r();p++){let B=n();if(!B||(f=RSe(B),f))break}l=p===64}while(!f&&o.pendingWake&&r());!f&&l&&r()?o.fallbackTimer=setTimeout(A,0):!f&&r()?o.fallbackTimer=setTimeout(A,10):f&&(o.active=!1,Ta.delete(s))}catch(f){i(f),r()?o.fallbackTimer=setTimeout(A,10):(o.active=!1,Ta.delete(s))}finally{o.running=!1,o.pendingWake&&o.active&&r()&&(a(),o.fallbackTimer=setTimeout(A,0))}};o.tick=A,Ta.set(s,o),setTimeout(A,0)}function DSe(e,t){let r=Ta.get(`${e}:${t}`);if(!(!r||!r.active)&&(r.pendingWake=!0,!r.running)){if(typeof queueMicrotask=="function"){queueMicrotask(()=>{Ta.get(`${e}:${t}`)===r&&r.tick?.()});return}setTimeout(()=>{Ta.get(`${e}:${t}`)===r&&r.tick?.()},0)}}function TSe(e){if(!e||e.event!=="http2")return;let t=e.kind==="server"?"server":e.kind==="session"?"session":null,r=Number(e.id);!t||!Number.isFinite(r)||DSe(t,r)}function NSe(){if(c1)return;c1=!0,queueMicrotask(()=>{for(c1=!1;$1.length>0;){let t=$1.shift();t&&aR(t.kind,t.id,t.data,t.extra,t.extraNumber,t.extraHeaders,t.flags)}})}function MSe(e,t){if(!t||typeof t!="object")return;let r=t;if(typeof r.kind!="string"||typeof r.id!="number")return;process.env.SECURE_EXEC_DEBUG_HTTP2_BRIDGE==="1"&&console.error("[secure-exec http2 isolate dispatch]",r.kind,r.id);let n=r.kind,i=r.id,s=typeof r.data=="string"?r.data:void 0,o=typeof r.extra=="string"?r.extra:void 0,a=typeof r.extraNumber=="string"||typeof r.extraNumber=="number"?r.extraNumber:void 0,A=typeof r.extraHeaders=="string"?r.extraHeaders:void 0,f=typeof r.flags=="string"||typeof r.flags=="number"?r.flags:void 0;$1.push({kind:n,id:i,data:s,extra:o,extraNumber:a,extraHeaders:A,flags:f}),NSe()}Ge("_http2RetainDispatch",TSe);var AR={Http2ServerRequest:IW,Http2ServerResponse:bW,Http2Stream:gW,NghttpError:hW,nghttp2ErrorString:dW,constants:{HTTP2_HEADER_METHOD:":method",HTTP2_HEADER_PATH:":path",HTTP2_HEADER_SCHEME:":scheme",HTTP2_HEADER_AUTHORITY:":authority",HTTP2_HEADER_STATUS:":status",HTTP2_HEADER_CONTENT_TYPE:"content-type",HTTP2_HEADER_CONTENT_LENGTH:"content-length",HTTP2_HEADER_LAST_MODIFIED:"last-modified",HTTP2_HEADER_ACCEPT:"accept",HTTP2_HEADER_ACCEPT_ENCODING:"accept-encoding",HTTP2_METHOD_GET:"GET",HTTP2_METHOD_POST:"POST",HTTP2_METHOD_PUT:"PUT",HTTP2_METHOD_DELETE:"DELETE",...So,DEFAULT_SETTINGS_MAX_HEADER_LIST_SIZE:65535},getDefaultSettings(){return Wi(r2)},connect:_Se,createServer:IG.bind(void 0,!1),createSecureServer:IG.bind(void 0,!0)};function FSe(e,t,r){let n={},i=r;if(typeof t=="function")i=t;else if(typeof t=="number")n={family:t};else if(t==null)n={};else if(typeof t=="object")n={...t};else throw new TypeError("dns.lookup options must be a number, object, or callback");let s=n.family===4||n.family===6?n.family:void 0;return{callback:i,options:{hostname:String(e),family:s,all:n.all===!0}}}function fB(e){let t=new Error(`${e} is not supported by the secure-exec dns polyfill`);return t.code="ERR_NOT_IMPLEMENTED",t}function kSe(e,t,r,n){let i=r,s=n;typeof r=="function"&&(s=r,i=void 0);let o=String(i??"A").toUpperCase();if(!["A","AAAA","MX","TXT","SRV","CNAME","PTR","NS","SOA","NAPTR","CAA","ANY"].includes(o))throw fB(`${e}(${o})`);return{callback:s,options:{hostname:String(t),rrtype:o}}}function xSe(e){let t=e;return typeof t=="string"&&(t=JSON.parse(t)),t&&typeof t=="object"&&Array.isArray(t.records)?t=t.records:t&&typeof t=="object"&&typeof t.address=="string"&&(t=[t]),Array.isArray(t)?t.filter(r=>r&&typeof r.address=="string").map(r=>({address:r.address,family:r.family===6?6:4})):[]}function USe(e){let t=e;return typeof t=="string"&&(t=JSON.parse(t)),t}function CG(e){let t=new TypeError(`${e} expects an array of non-empty server strings`);return t.code="ERR_INVALID_ARG_TYPE",t}function wW(e,t){if(!Array.isArray(t))throw CG(e);return t.map(r=>{if(typeof r!="string"||r.length===0)throw CG(e);return r})}function TB(e,t,r){let n=FSe(e,t,r);return _networkDnsLookupRaw.apply(void 0,[n.options],{result:{promise:!0}}).then(i=>{let s=xSe(i);if(typeof n.callback=="function")if(n.options.all)n.callback(null,s);else{let o=s[0]??{address:null,family:n.options.family??0};n.callback(null,o.address,o.family)}return n.options.all?s:s[0]??{address:"",family:n.options.family??0}})}function ke(e,t,r,n){let i=kSe(e,t,r,n);return _networkDnsResolveRaw.apply(void 0,[i.options],{result:{promise:!0}}).then(s=>{let o=USe(s);return typeof i.callback=="function"&&queueMicrotask(()=>i.callback(null,o)),o}).catch(s=>{throw typeof i.callback=="function"&&queueMicrotask(()=>i.callback(s)),s})}var LSe=class{constructor(){this._servers=[]}cancel(){}getServers(){return this._servers.slice()}lookup(e,t,r){return TB(e,t,r)}resolve(e,t,r){return ke("dns.resolve",e,t,r)}resolve4(e,t){return ke("dns.resolve4",e,"A",t)}resolve6(e,t){return ke("dns.resolve6",e,"AAAA",t)}resolveAny(e,t){return ke("dns.resolveAny",e,"ANY",t)}resolveMx(e,t){return ke("dns.resolveMx",e,"MX",t)}resolveTxt(e,t){return ke("dns.resolveTxt",e,"TXT",t)}resolveSrv(e,t){return ke("dns.resolveSrv",e,"SRV",t)}resolveCname(e,t){return ke("dns.resolveCname",e,"CNAME",t)}resolvePtr(e,t){return ke("dns.resolvePtr",e,"PTR",t)}resolveNs(e,t){return ke("dns.resolveNs",e,"NS",t)}resolveSoa(e,t){return ke("dns.resolveSoa",e,"SOA",t)}resolveNaptr(e,t){return ke("dns.resolveNaptr",e,"NAPTR",t)}resolveCaa(e,t){return ke("dns.resolveCaa",e,"CAA",t)}setServers(e){this._servers=wW("dns.Resolver.setServers",e)}},PSe=class{constructor(){this._servers=[]}cancel(){}getServers(){return this._servers.slice()}lookup(e,t){return TB(e,t)}resolve(e,t){return ke("dns.resolve",e,t)}resolve4(e){return ke("dns.resolve4",e,"A")}resolve6(e){return ke("dns.resolve6",e,"AAAA")}resolveAny(e){return ke("dns.resolveAny",e,"ANY")}resolveMx(e){return ke("dns.resolveMx",e,"MX")}resolveTxt(e){return ke("dns.resolveTxt",e,"TXT")}resolveSrv(e){return ke("dns.resolveSrv",e,"SRV")}resolveCname(e){return ke("dns.resolveCname",e,"CNAME")}resolvePtr(e){return ke("dns.resolvePtr",e,"PTR")}resolveNs(e){return ke("dns.resolveNs",e,"NS")}resolveSoa(e){return ke("dns.resolveSoa",e,"SOA")}resolveNaptr(e){return ke("dns.resolveNaptr",e,"NAPTR")}resolveCaa(e){return ke("dns.resolveCaa",e,"CAA")}setServers(e){this._servers=wW("dns.promises.Resolver.setServers",e)}},fR={lookup(e,t,r){TB(e,t,r).catch(n=>{(typeof t=="function"?t:r)?.(n)})},resolve(e,t,r){ke("dns.resolve",e,t,r).catch(()=>{})},resolve4(e,t){ke("dns.resolve4",e,"A",t).catch(()=>{})},resolve6(e,t){ke("dns.resolve6",e,"AAAA",t).catch(()=>{})},resolveAny(e,t){ke("dns.resolveAny",e,"ANY",t).catch(()=>{})},resolveMx(e,t){ke("dns.resolveMx",e,"MX",t).catch(()=>{})},resolveTxt(e,t){ke("dns.resolveTxt",e,"TXT",t).catch(()=>{})},resolveSrv(e,t){ke("dns.resolveSrv",e,"SRV",t).catch(()=>{})},resolveCname(e,t){ke("dns.resolveCname",e,"CNAME",t).catch(()=>{})},resolvePtr(e,t){ke("dns.resolvePtr",e,"PTR",t).catch(()=>{})},resolveNs(e,t){ke("dns.resolveNs",e,"NS",t).catch(()=>{})},resolveSoa(e,t){ke("dns.resolveSoa",e,"SOA",t).catch(()=>{})},resolveNaptr(e,t){ke("dns.resolveNaptr",e,"NAPTR",t).catch(()=>{})},resolveCaa(e,t){ke("dns.resolveCaa",e,"CAA",t).catch(()=>{})},promises:{Resolver:PSe,lookup(e,t){return TB(e,t)},resolve(e,t){return ke("dns.resolve",e,t||"A")},resolve4(e){return ke("dns.resolve4",e,"A")},resolve6(e){return ke("dns.resolve6",e,"AAAA")},resolveAny(e){return ke("dns.resolveAny",e,"ANY")},resolveMx(e){return ke("dns.resolveMx",e,"MX")},resolveTxt(e){return ke("dns.resolveTxt",e,"TXT")},resolveSrv(e){return ke("dns.resolveSrv",e,"SRV")},resolveCname(e){return ke("dns.resolveCname",e,"CNAME")},resolvePtr(e){return ke("dns.resolvePtr",e,"PTR")},resolveNs(e){return ke("dns.resolveNs",e,"NS")},resolveSoa(e){return ke("dns.resolveSoa",e,"SOA")},resolveNaptr(e){return ke("dns.resolveNaptr",e,"NAPTR")},resolveCaa(e){return ke("dns.resolveCaa",e,"CAA")}},Resolver:LSe,getServers(){return[]},lookupService(){throw fB("dns.lookupService")},reverse(){throw fB("dns.reverse")},setServers(){throw fB("dns.setServers")}};Ge("_http2Module",AR);function n2(e){return{__secureExecTlsContext:Wl(e),context:{}}}function OSe(e,t){if(!(e instanceof To))throw new TypeError("tls.TLSSocket requires a net.Socket instance");let r=t&&typeof t=="object"?{...t}:{};Object.setPrototypeOf(e,uR.prototype);let n=Wl(r,{isServer:r.isServer===!0,servername:r.servername??e.servername??e.remoteAddress??"127.0.0.1"});return n.isServer||(e.servername=n.servername),e._connected?e._upgradeTls(n):e.once("connect",()=>{e._upgradeTls(n)}),e}var uR=class extends To{constructor(e,t){if(e instanceof To)return super({allowHalfOpen:e.allowHalfOpen===!0}),OSe(e,t);super(e&&typeof e=="object"?e:t)}};function SW(...e){let t,r,n=[...e],i=typeof n[n.length-1]=="function"?n.pop():void 0;if(n[0]!=null&&typeof n[0]=="object")r={...n[0]},r.socket?t=r.socket:(t=new To,t.connect({host:r.host??"127.0.0.1",port:r.port,localAddress:r.localAddress,localPort:r.localPort}));else{let o={};n.length>0&&(o.port=n.shift()),typeof n[0]=="string"&&(o.host=n.shift()),r={...n[0]!=null&&typeof n[0]=="object"?{...n[0]}:{},...o},t=new To,t.connect({host:r.host??"127.0.0.1",port:r.port,localAddress:r.localAddress,localPort:r.localPort})}i&&t.once("secureConnect",i);let s=Wl(r,{isServer:!1,servername:r.servername??r.host??"127.0.0.1"});return t.servername=s.servername,t._connected?t._upgradeTls(s):t.once("connect",()=>{t._upgradeTls(s)}),t}function HSe(e,t){if(!e.startsWith("*."))return e===t;let r=e.slice(1);if(!t.endsWith(r))return!1;let n=t.slice(0,-r.length);return n.length>0&&!n.includes(".")}var _W=class{constructor(e,t){y(this,"_listeners",{});y(this,"_onceListeners",{});y(this,"_server");y(this,"_tlsOptions");y(this,"_sniCallback");y(this,"_alpnCallback");y(this,"_contexts",[]);let r=typeof e=="function"||e===void 0?void 0:e,n=typeof e=="function"?e:t;if(r?.ALPNCallback&&r?.ALPNProtocols){let i=new Error("The ALPNCallback and ALPNProtocols TLS options are mutually exclusive");throw i.code="ERR_TLS_ALPN_CALLBACK_WITH_PROTOCOLS",i}this._tlsOptions=Wl(r,{isServer:!0}),this._sniCallback=r?.SNICallback,this._alpnCallback=r?.ALPNCallback,this._server=new Jg(r?{allowHalfOpen:r.allowHalfOpen,keepAlive:r.keepAlive,keepAliveInitialDelay:r.keepAliveInitialDelay}:void 0,(i=>{let s=i;s.server=this,this._handleSecureSocket(s)})),n&&this.on("secureConnection",n),this._server.on("listening",(...i)=>this._emit("listening",...i)),this._server.on("close",(...i)=>this._emit("close",...i)),this._server.on("error",(...i)=>this._emit("error",...i)),this._server.on("drop",(...i)=>this._emit("drop",...i))}listen(e,t,r,n){return this._server.listen(e,t,r,n),this}close(e){return e&&this.once("close",e),this._server.close(),this}address(){return this._server.address()}getConnections(e){return this._server.getConnections(e),this}ref(){return this._server.ref(),this}unref(){return this._server.unref(),this}addContext(e,t){let r=j1(t)?t:n2(t&&typeof t=="object"?t:void 0);return this._contexts.push({servername:e,context:r}),this}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),this}emit(e,...t){return this._emit(e,...t)}_emit(e,...t){let r=!1,n=this._listeners[e];if(n)for(let s of[...n])s.call(this,...t),r=!0;let i=this._onceListeners[e];if(i){this._onceListeners[e]=[];for(let s of[...i])s.call(this,...t),r=!0}return r}async _handleSecureSocket(e){let t=this._getClientHello(e),r=t?.servername;r&&(e.servername=r);try{let n=await this._resolveTlsOptions(r,t?.ALPNProtocols??[]);if(!n){this._emitTlsClientError(e,"Invalid SNI context");return}e._upgradeTls(n),e.once("secure",()=>{this._emit("secureConnection",e),this._emit("connection",e)}),e.on("error",i=>{this._emit("tlsClientError",i,e)})}catch(n){let i=n instanceof Error?n:new Error(String(n));this._emitTlsClientError(e,i.message,i),i.uncaught&&process.emit?.("uncaughtException",i,"uncaughtException")}}_getClientHello(e){if(typeof _netSocketGetTlsClientHelloRaw>"u")return null;let t=e._socketId;return typeof t!="number"||t===0?null:Vwe(_netSocketGetTlsClientHelloRaw.applySync(void 0,[t]))}async _resolveTlsOptions(e,t){let r=null,n=!1;if(e&&this._sniCallback){if(r=await new Promise((s,o)=>{this._sniCallback?.(e,(a,A)=>{if(a){o(a);return}if(A==null){s(null);return}if(j1(A)){s(A);return}if(A&&typeof A=="object"&&Object.keys(A).length>0){s(n2(A));return}n=!0,s(null)})}),n)return null}else e&&(r=this._findContext(e));let i={...this._tlsOptions,...r?.__secureExecTlsContext??{},isServer:!0};if(this._alpnCallback){let s=this._alpnCallback({servername:e,protocols:t});if(s===void 0){let o=new Error("ALPN callback rejected the client protocol list");throw o.code="ERR_SSL_TLSV1_ALERT_NO_APPLICATION_PROTOCOL",o}if(!t.includes(s)){let o=new Error("The ALPNCallback callback returned an invalid protocol");throw o.code="ERR_TLS_ALPN_CALLBACK_INVALID_RESULT",o.uncaught=!0,o}i.ALPNProtocols=[s]}return i}_findContext(e){for(let t=this._contexts.length-1;t>=0;t-=1){let r=this._contexts[t];if(HSe(r.servername,e))return r.context}return null}_emitTlsClientError(e,t,r){let n=r??new Error(t);e.servername??(e.servername=this._getClientHello(e)?.servername),this._emit("tlsClientError",n,e),e.destroy()}};function qSe(e,t){return new _W(e,t)}var vW={connect:SW,TLSSocket:uR,Server:qSe,createServer(e,t){return new _W(e,t)},createSecureContext(e){return n2(e)},getCiphers(){if(typeof _tlsGetCiphersRaw>"u")throw new Error("tls.getCiphers is not supported in sandbox");try{return JSON.parse(_tlsGetCiphersRaw.applySync(void 0,[]))}catch{return[]}},DEFAULT_MIN_VERSION:"TLSv1.2",DEFAULT_MAX_VERSION:"TLSv1.3"};Ge("_netModule",lW);function Na(e="socket hang up"){let t=new Error(e);return t.code="ECONNRESET",t}function QG(){let e=new Error("The operation was aborted");return e.name="AbortError",e.code="ABORT_ERR",e}var hu=class{constructor(e){y(this,"headers");y(this,"rawHeaders");y(this,"trailers");y(this,"rawTrailers");y(this,"httpVersion");y(this,"httpVersionMajor");y(this,"httpVersionMinor");y(this,"method");y(this,"url");y(this,"statusCode");y(this,"statusMessage");y(this,"_body");y(this,"_isBinary");y(this,"_listeners");y(this,"complete");y(this,"aborted");y(this,"socket");y(this,"_bodyConsumed");y(this,"_ended");y(this,"_flowing");y(this,"readable");y(this,"readableEnded");y(this,"readableFlowing");y(this,"destroyed");y(this,"_encoding");y(this,"_closeEmitted");let t={};if(Array.isArray(e?.headers)?e.headers.forEach(([i,s])=>{vo(t,i.toLowerCase(),s)}):e?.headers&&Object.entries(e.headers).forEach(([i,s])=>{t[i]=Array.isArray(s)?[...s]:s}),this.rawHeaders=Array.isArray(e?.rawHeaders)?[...e.rawHeaders]:[],this.rawHeaders.length>0){this.headers={};for(let i=0;i<this.rawHeaders.length;i+=2){let s=this.rawHeaders[i],o=this.rawHeaders[i+1];s!==void 0&&o!==void 0&&vo(this.headers,s.toLowerCase(),o)}}else this.headers=t;this.rawHeaders.length===0&&this.headers&&typeof this.headers=="object"&&Object.entries(this.headers).forEach(([i,s])=>{if(Array.isArray(s)){s.forEach(o=>{this.rawHeaders.push(i,o)});return}this.rawHeaders.push(i,s)}),e?.trailers&&typeof e.trailers=="object"?(this.trailers=e.trailers,this.rawTrailers=[],Object.entries(e.trailers).forEach(([i,s])=>{this.rawTrailers.push(i,s)})):(this.trailers={},this.rawTrailers=[]),this.httpVersion="1.1",this.httpVersionMajor=1,this.httpVersionMinor=1,this.method=null,this.url=e?.url||"",this.statusCode=e?.status,this.statusMessage=e?.statusText;let r=this.headers["x-body-encoding"];(e?.bodyEncoding||(Array.isArray(r)?r[0]:r))==="base64"&&e?.body&&typeof Buffer<"u"?(this._body=Buffer.from(e.body,"base64").toString("binary"),this._isBinary=!0):(this._body=e?.body||"",this._isBinary=!1),this._listeners={},this.complete=!1,this.aborted=!1,this.socket=null,this._bodyConsumed=!1,this._ended=!1,this._flowing=!1,this.readable=!0,this.readableEnded=!1,this.readableFlowing=null,this.destroyed=!1,this._closeEmitted=!1}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),e==="data"&&!this._bodyConsumed&&(this._flowing=!0,this.readableFlowing=!0,Promise.resolve().then(()=>{if(!this._bodyConsumed){if(this._bodyConsumed=!0,this._body&&this._body.length>0){let r;typeof Buffer<"u"?r=this._isBinary?Buffer.from(this._body,"binary"):Buffer.from(this._body):r=this._body,this.emit("data",r)}Promise.resolve().then(()=>{this._ended||(this._ended=!0,this.complete=!0,this.readable=!1,this.readableEnded=!0,this.emit("end"))})}})),e==="end"&&this._bodyConsumed&&!this._ended&&Promise.resolve().then(()=>{this._ended||(this._ended=!0,this.complete=!0,this.readable=!1,this.readableEnded=!0,t())}),this}once(e,t){let r=(...n)=>{this.off(e,r),t(...n)};return r._originalListener=t,this.on(e,r)}off(e,t){if(this._listeners[e]){let r=this._listeners[e].findIndex(n=>n===t||n._originalListener===t);r!==-1&&this._listeners[e].splice(r,1)}return this}removeListener(e,t){return this.off(e,t)}removeAllListeners(e){return e?delete this._listeners[e]:this._listeners={},this}emit(e,...t){return zl(this,this._listeners[e],t)}setEncoding(e){return this._encoding=e,this}read(e){if(this._bodyConsumed)return null;this._bodyConsumed=!0;let t;return typeof Buffer<"u"?t=this._isBinary?Buffer.from(this._body,"binary"):Buffer.from(this._body):t=this._body,Promise.resolve().then(()=>{this._ended||(this._ended=!0,this.complete=!0,this.readable=!1,this.readableEnded=!0,this.emit("end"))}),t}pipe(e){let t;return typeof Buffer<"u"?t=this._isBinary?Buffer.from(this._body||"","binary"):Buffer.from(this._body||""):t=this._body||"",typeof e.write=="function"&&t.length>0&&e.write(t),typeof e.end=="function"&&Promise.resolve().then(()=>e.end()),this._bodyConsumed=!0,this._ended=!0,this.complete=!0,this.readable=!1,this.readableEnded=!0,e}pause(){return this._flowing=!1,this.readableFlowing=!1,this}resume(){return this._flowing=!0,this.readableFlowing=!0,this._bodyConsumed||Promise.resolve().then(()=>{if(!this._bodyConsumed){if(this._bodyConsumed=!0,this._body){let e;typeof Buffer<"u"?e=this._isBinary?Buffer.from(this._body,"binary"):Buffer.from(this._body):e=this._body,this.emit("data",e)}Promise.resolve().then(()=>{this._ended||(this._ended=!0,this.complete=!0,this.readable=!1,this.readableEnded=!0,this.emit("end"))})}}),this}unpipe(e){return this}destroy(e){return this.destroyed=!0,this.readable=!1,e&&this.emit("error",e),this._emitClose(),this}_abort(e=Na("aborted")){this.aborted||(this.aborted=!0,this.complete=!1,this.destroyed=!0,this.readable=!1,this.readableEnded=!0,this.emit("aborted"),e&&this.emit("error",e),this._emitClose())}_emitClose(){this._closeEmitted||(this._closeEmitted=!0,this.emit("close"))}[Symbol.asyncIterator](){let e=this,t=!1,r=!1;return{async next(){if(r||e._ended)return{done:!0,value:void 0};if(!t&&!e._bodyConsumed){t=!0,e._bodyConsumed=!0;let n;return typeof Buffer<"u"?n=e._isBinary?Buffer.from(e._body||"","binary"):Buffer.from(e._body||""):n=e._body||"",{done:!1,value:n}}return r=!0,e._ended=!0,e.complete=!0,e.readable=!1,e.readableEnded=!0,{done:!0,value:void 0}},return(){return r=!0,Promise.resolve({done:!0,value:void 0})},throw(n){return r=!0,e.emit("error",n),Promise.resolve({done:!0,value:void 0})}}}},Ug=class{constructor(e,t){y(this,"_options");y(this,"_callback");y(this,"_listeners",{});y(this,"_headers",{});y(this,"_rawHeaderNames",new Map);y(this,"_body","");y(this,"_bodyBytes",0);y(this,"_ended",!1);y(this,"_agent");y(this,"_hostKey");y(this,"_socketEndListener",null);y(this,"_socketCloseListener",null);y(this,"_loopbackAbort");y(this,"_response",null);y(this,"_closeEmitted",!1);y(this,"_abortEmitted",!1);y(this,"_signalAbortHandler");y(this,"_signalPollTimer",null);y(this,"_skipExecute",!1);y(this,"_destroyError");y(this,"_errorEmitted",!1);y(this,"socket");y(this,"finished",!1);y(this,"aborted",!1);y(this,"destroyed",!1);y(this,"path");y(this,"method");y(this,"reusedSocket",!1);y(this,"timeoutCb");let r=zSe(e.method);this._options={...e,method:r,path:KSe(e.path)},this._callback=t,this._validateTimeoutOption(),this._setOutgoingHeaders(e.headers),this._headers.host||this._setHeaderValue("Host",XSe(this._options)),this.path=String(this._options.path||"/"),this.method=String(this._options.method||"GET").toUpperCase();let n=this._options.agent;n===!1?this._agent=null:n instanceof NB?this._agent=n:this._options._agentOSDefaultAgent instanceof NB?this._agent=this._options._agentOSDefaultAgent:this._agent=null,this._hostKey=this._agent?this._agent._getHostKey(this._options):"",this._bindAbortSignal(),typeof this._options.timeout=="number"&&this.setTimeout(this._options.timeout),Promise.resolve().then(()=>this._execute())}_assignSocket(e,t){this.socket=e,this.reusedSocket=t;let r=e;if(r._agentPermanentListenersInstalled||(r._agentPermanentListenersInstalled=!0,e.on("error",()=>{}),e.on("end",()=>{})),this._socketEndListener=()=>{},e.on("end",this._socketEndListener),this._socketCloseListener=()=>{this.destroyed=!0,this._clearTimeout(),this._emitClose()},e.on("close",this._socketCloseListener),this._applyTimeoutToSocket(e),this._emit("socket",e),this.destroyed){this._destroyError&&!this._errorEmitted&&(this._errorEmitted=!0,queueMicrotask(()=>{this._emit("error",this._destroyError)})),e.destroy();return}this._dispatchWithSocket(e)}_handleSocketError(e){this._emit("error",e)}_finalizeSocket(e,t){this._socketEndListener&&(e.off?.("end",this._socketEndListener),e.removeListener?.("end",this._socketEndListener),this._socketEndListener=null),this._socketCloseListener&&(e.off?.("close",this._socketCloseListener),e.removeListener?.("close",this._socketCloseListener),this._socketCloseListener=null),this._agent?this._agent._releaseSocket(this._hostKey,e,this._options,t):e.destroyed||e.destroy()}async _dispatchWithSocket(e){try{let t=ZSe(this._options.headers),r=String(this._options.method||"GET").toUpperCase();e instanceof To||typeof e?._socketId=="string"&&e._socketId.length>0||typeof e?._socketId=="number"&&e._socketId>0||e?._loopbackServer||$Se(r,t)||this._options.socketPath||this._agent?.keepAlive===!0?await this._dispatchRawSocketRequest(e,r,t):await this._dispatchUndiciRequest(e,r)}catch(t){this._clearTimeout(),this._emit("error",t),this._finalizeSocket(e,!1)}}async _dispatchUndiciRequest(e,t){await SG(e,this._options.protocol||"http:");let r=r_e(e,this._options),n=this._body?Buffer.from(this._body):Buffer.alloc(0),i=_G(this._headers,this._rawHeaderNames);n.length>0&&!this._headers["content-length"]&&!this._headers["transfer-encoding"]&&i.push(["Content-Length",String(n.length)]);let s=await new Promise((A,f)=>{try{nW.call(r,{path:this._options.path||"/",method:t,headers:n_e(i),body:n.length>0?n:null,signal:this._options.signal,responseHeaders:"raw"},(l,p)=>{if(l){f(l);return}A(p)})}catch(l){f(l)}}),o=await s_e(s?.body);await new Promise(A=>{queueMicrotask(A)}),this.finished=!0,this._clearTimeout();let a=new hu({status:s?.statusCode,statusText:s?.statusText,headers:Array.isArray(s?.headers)?s.headers:[],rawHeaders:Array.isArray(s?.headers)?s.headers:[],trailers:s?.trailers&&typeof s.trailers=="object"?s.trailers:{},body:o.length>0?o.toString("base64"):"",bodyEncoding:"base64",url:this._buildUrl()});this._response=a,a.socket=e,a.once("end",()=>{process.nextTick(()=>{this._finalizeSocket(e,this._agent?.keepAlive===!0&&!this.aborted)})}),this._callback&&this._callback(a),this._emit("response",a),!this._callback&&this._listenerCount("response")===0&&queueMicrotask(()=>{a.resume()})}async _dispatchRawSocketRequest(e,t,r){let n=this._options.protocol||"http:";await SG(e,n);let i=this._body?Buffer.from(this._body):Buffer.alloc(0),s=_G(this._headers,this._rawHeaderNames);i.length>0&&!r["content-length"]&&!r["transfer-encoding"]&&s.push(["Content-Length",String(i.length)]);let o=i_e(t,this._options.path||"/",s,i),a=typeof this._options.timeout=="number"&&this._options.timeout>0?this._options.timeout:3e4,A=a_e(e,t,a);e.write(o);let f=await A;if(this.finished=!0,this._clearTimeout(),f.status===101){let p=new hu({status:f.status,statusText:f.statusText,headers:f.headers,rawHeaders:f.rawHeaders,body:"",bodyEncoding:"base64",url:this._buildUrl()});this._response=p,p.socket=e;let B=f.head??Buffer.alloc(0);if(this._listenerCount("upgrade")===0){e.destroy();return}this._emit("upgrade",p,e,B);return}if(t==="CONNECT"){let p=new hu({status:f.status,statusText:f.statusText,headers:f.headers,rawHeaders:f.rawHeaders,body:"",bodyEncoding:"base64",url:this._buildUrl()});this._response=p,p.socket=e;let B=f.head??Buffer.alloc(0);this._emit("connect",p,e,B);return}let l=new hu({status:f.status,statusText:f.statusText,headers:f.headers,rawHeaders:f.rawHeaders,body:f.body&&f.body.length>0?f.body.toString("base64"):"",bodyEncoding:"base64",url:this._buildUrl()});this._response=l,l.socket=e,l.once("end",()=>{process.nextTick(()=>{this._finalizeSocket(e,this._agent?.keepAlive===!0&&!this.aborted)})}),this._callback&&this._callback(l),this._emit("response",l),!this._callback&&this._listenerCount("response")===0&&queueMicrotask(()=>{l.resume()})}_execute(){if(this._skipExecute)return;if(this._agent){this._agent.addRequest(this,this._options);return}let e=r=>{if(!r){this._handleSocketError(new Error("Failed to create socket")),this._emitClose();return}this._assignSocket(r,!1)},t=this._options.createConnection;if(typeof t=="function"){let r=t(this._options,(n,i)=>{e(i)});e(r);return}e(eI(this._options))}_buildUrl(){let e=this._options,t=e.protocol||(e.port===443?"https:":"http:"),r=e.hostname||e.host||"localhost",n=e.port?":"+e.port:"",i=e.path||"/";return t+"//"+r+n+i}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}addListener(e,t){return this.on(e,t)}once(e,t){let r=(...n)=>{this.off(e,r),t(...n)};return r.listener=t,this.on(e,r)}off(e,t){if(this._listeners[e]){let r=this._listeners[e].findIndex(n=>n===t||n.listener===t);r!==-1&&this._listeners[e].splice(r,1)}return this}removeListener(e,t){return this.off(e,t)}getHeader(e){if(typeof e!="string")throw lr(`The "name" argument must be of type string. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");return this._headers[e.toLowerCase()]}getHeaders(){let e=Object.create(null);for(let[t,r]of Object.entries(this._headers))e[t]=Array.isArray(r)?[...r]:r;return e}getHeaderNames(){return Object.keys(this._headers)}getRawHeaderNames(){return Object.keys(this._headers).map(e=>this._rawHeaderNames.get(e)||e)}hasHeader(e){if(typeof e!="string")throw lr(`The "name" argument must be of type string. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");return Object.prototype.hasOwnProperty.call(this._headers,e.toLowerCase())}removeHeader(e){if(typeof e!="string")throw lr(`The "name" argument must be of type string. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");let t=e.toLowerCase();delete this._headers[t],this._rawHeaderNames.delete(t),this._options.headers={...this._headers}}_emit(e,...t){zl(this,this._listeners[e],t)}_listenerCount(e){return this._listeners[e]?.length||0}_setOutgoingHeaders(e){if(this._headers={},this._rawHeaderNames=new Map,!e){this._options.headers={};return}if(Array.isArray(e)){for(let t=0;t<e.length;t+=2){let r=e[t],n=e[t+1];r!==void 0&&n!==void 0&&this._setHeaderValue(String(r),n)}return}Object.entries(e).forEach(([t,r])=>{r!==void 0&&this._setHeaderValue(t,r)})}_setHeaderValue(e,t){let r=Gi(e).toLowerCase();Yi(r,t),this._headers[r]=Array.isArray(t)?t.map(n=>String(n)):String(t),this._rawHeaderNames.has(r)||this._rawHeaderNames.set(r,e),this._options.headers={...this._headers}}write(e){let t=typeof Buffer<"u"?Buffer.byteLength(e):e.length;if(this._bodyBytes+t>ql)throw new Error("ERR_HTTP_BODY_TOO_LARGE: request body exceeds "+ql+" byte limit");return this._body+=e,this._bodyBytes+=t,!0}end(e){return e&&this.write(e),this._ended=!0,this}abort(){this.aborted||(this.aborted=!0,this._abortEmitted||(this._abortEmitted=!0,queueMicrotask(()=>{this._emit("abort")})),this._loopbackAbort?.(),this.destroy())}destroy(e){if(this.destroyed)return this;this.destroyed=!0,this._clearTimeout(),this._unbindAbortSignal(),this._loopbackAbort?.(),this._loopbackAbort=void 0,!this.socket&&e&&e.code==="ABORT_ERR"&&(this._skipExecute=!0);let t=this._response!=null,r=e??(!this.aborted&&!t?Na():void 0);return this._destroyError=r,this._response&&!this._response.complete&&!this._response.aborted&&this._response._abort(r??Na("aborted")),this.socket&&!this.socket.destroyed?(r&&!this._errorEmitted&&(this._errorEmitted=!0,queueMicrotask(()=>{this._emit("error",r)})),this.socket.destroy(r)):(r&&(this._errorEmitted=!0,queueMicrotask(()=>{this._emit("error",r)})),queueMicrotask(()=>{this._emitClose()})),this}setTimeout(e,t){if(t&&this.once("timeout",t),this.timeoutCb=()=>{this._emit("timeout")},this._clearTimeout(),e===0)return this;if(!Number.isFinite(e)||e<0)throw new TypeError(`The "timeout" argument must be of type number. Received ${String(e)}`);return this._options.timeout=e,this.socket&&this._applyTimeoutToSocket(this.socket),this}setNoDelay(){return this}setSocketKeepAlive(){return this}flushHeaders(){}_emitClose(){this._closeEmitted||(this._closeEmitted=!0,this._emit("close"))}_applyTimeoutToSocket(e){let t=this._options.timeout;typeof t!="number"||t===0||(this.timeoutCb||(this.timeoutCb=()=>{this._emit("timeout")}),e.off?.("timeout",this.timeoutCb),e.removeListener?.("timeout",this.timeoutCb),e.setTimeout?.(t,this.timeoutCb))}_validateTimeoutOption(){let e=this._options.timeout;if(e!==void 0&&typeof e!="number"){let t=e===null?"null":typeof e=="string"?`type string ('${e}')`:`type ${typeof e} (${JSON.stringify(e)})`,r=new TypeError(`The "timeout" argument must be of type number. Received ${t}`);throw r.code="ERR_INVALID_ARG_TYPE",r}}_bindAbortSignal(){let e=this._options.signal;if(!e)return;if(this._signalAbortHandler=()=>{this.destroy(QG())},e.aborted){this.destroyed=!0,this._skipExecute=!0,queueMicrotask(()=>{this._emit("error",QG()),this._emitClose()});return}if(typeof e.addEventListener=="function"){e.addEventListener("abort",this._signalAbortHandler,{once:!0});return}let t=e;t.__secureExecPrevOnAbort__=t.onabort??null,t.onabort=(r=>{t.__secureExecPrevOnAbort__?.call(e,r),this._signalAbortHandler?.()}),this._startAbortSignalPoll(e)}_unbindAbortSignal(){let e=this._options.signal;if(!e||!this._signalAbortHandler)return;if(this._signalPollTimer&&(clearTimeout(this._signalPollTimer),this._signalPollTimer=null),typeof e.removeEventListener=="function"){e.removeEventListener("abort",this._signalAbortHandler),this._signalAbortHandler=void 0;return}let t=e;(t.onabort===this._signalAbortHandler||t.__secureExecPrevOnAbort__!==void 0)&&(t.onabort=t.__secureExecPrevOnAbort__??null),delete t.__secureExecPrevOnAbort__,this._signalAbortHandler=void 0}_startAbortSignalPoll(e){let t=()=>{if(this.destroyed){this._signalPollTimer=null;return}if(e.aborted){this._signalPollTimer=null,this._signalAbortHandler?.();return}this._signalPollTimer=setTimeout(t,5)};this._signalPollTimer||(this._signalPollTimer=setTimeout(t,5))}_clearTimeout(){this.socket&&this.timeoutCb&&(this.socket.off?.("timeout",this.timeoutCb),this.socket.removeListener?.("timeout",this.timeoutCb)),this.socket?.setTimeout&&this.socket.setTimeout(0)}};var GSe=class{constructor(e){y(this,"remoteAddress");y(this,"remotePort");y(this,"localAddress","127.0.0.1");y(this,"localPort",0);y(this,"connecting",!1);y(this,"destroyed",!1);y(this,"writable",!0);y(this,"readable",!0);y(this,"readyState","open");y(this,"bytesWritten",0);y(this,"_listeners",{});y(this,"_encoding");y(this,"_peer",null);y(this,"_readableState",{endEmitted:!1,ended:!1});y(this,"_writableState",{finished:!1,errorEmitted:!1});this.remoteAddress=e?.host||"127.0.0.1",this.remotePort=e?.port||80}_attachPeer(e){this._peer=e}setTimeout(e,t){return this}setNoDelay(e){return this}setKeepAlive(e,t){return this}setEncoding(e){return this._encoding=e,this}ref(){return this}unref(){return this}cork(){}uncork(){}pause(){return this}resume(){return this}address(){return{address:this.localAddress,family:"IPv4",port:this.localPort}}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}once(e,t){let r=(...n)=>{this.off(e,r),t.call(this,...n)};return this.on(e,r)}off(e,t){let r=this._listeners[e];if(!r)return this;let n=r.indexOf(t);return n!==-1&&r.splice(n,1),this}removeListener(e,t){return this.off(e,t)}removeAllListeners(e){return e?delete this._listeners[e]:this._listeners={},this}emit(e,...t){let r=this._listeners[e];return zl(this,r,t)}listenerCount(e){return this._listeners[e]?.length||0}write(e,t,r){if(this.destroyed||!this._peer)return!1;let n=typeof t=="function"?t:r,i=YSe(e);return this.bytesWritten+=i.length,queueMicrotask(()=>{this._peer?._pushData(i)}),n?.(),!0}end(e){return e!==void 0&&this.write(e),this.writable=!1,this._writableState.finished=!0,queueMicrotask(()=>{this._peer?._pushEnd()}),this.emit("finish"),this}destroy(e){return this.destroyed?this:(this.destroyed=!0,this.readable=!1,this.writable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,this._writableState.finished=!0,e&&this.emit("error",e),queueMicrotask(()=>{this._peer?._pushEnd()}),this.emit("close",!1),this)}_pushData(e){!this.readable||this.destroyed||this.emit("data",this._encoding?e.toString(this._encoding):e)}_pushEnd(){this.destroyed||(this.readable=!1,this.writable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,this._writableState.finished=!0,this.emit("end"),this.emit("close",!1))}};function YSe(e){return typeof Buffer<"u"&&Buffer.isBuffer(e)?e:e instanceof Uint8Array?Buffer.from(e):Buffer.from(String(e))}var Eu,NB=(Eu=class{constructor(t){y(this,"options");y(this,"maxSockets");y(this,"maxTotalSockets");y(this,"maxFreeSockets");y(this,"keepAlive");y(this,"keepAliveMsecs");y(this,"timeout");y(this,"requests");y(this,"sockets");y(this,"freeSockets");y(this,"totalSocketCount");y(this,"_listeners",{});this.options={...t},this._validateSocketCountOption("maxSockets",t?.maxSockets),this._validateSocketCountOption("maxFreeSockets",t?.maxFreeSockets),this._validateSocketCountOption("maxTotalSockets",t?.maxTotalSockets),this.keepAlive=t?.keepAlive??!1,this.keepAliveMsecs=t?.keepAliveMsecs??1e3,this.maxSockets=t?.maxSockets??Eu.defaultMaxSockets,this.maxTotalSockets=t?.maxTotalSockets??1/0,this.maxFreeSockets=t?.maxFreeSockets??256,this.timeout=t?.timeout??-1,this.requests={},this.sockets={},this.freeSockets={},this.totalSocketCount=0}_validateSocketCountOption(t,r){if(r!==void 0){if(typeof r!="number"){let n=typeof r=="string"?`type string ('${r}')`:`type ${typeof r} (${JSON.stringify(r)})`,i=new TypeError(`The "${t}" argument must be of type number. Received ${n}`);throw i.code="ERR_INVALID_ARG_TYPE",i}if(Number.isNaN(r)||r<=0){let n=new RangeError(`The value of "${t}" is out of range. It must be > 0. Received ${String(r)}`);throw n.code="ERR_OUT_OF_RANGE",n}}}getName(t){let r=t?.hostname||t?.host||"localhost",n=t?.port??"",i=t?.localAddress??"",s="";return t?.socketPath?s=`:${t.socketPath}`:(t?.family===4||t?.family===6)&&(s=`:${t.family}`),`${r}:${n}:${i}${s}`}_getHostKey(t){return this.getName(t)}on(t,r){return this._listeners[t]||(this._listeners[t]=[]),this._listeners[t].push(r),this}once(t,r){let n=(...i)=>{this.off(t,n),r(...i)};return this.on(t,n)}off(t,r){let n=this._listeners[t];if(!n)return this;let i=n.indexOf(r);return i!==-1&&n.splice(i,1),this}removeListener(t,r){return this.off(t,r)}emit(t,...r){let n=this._listeners[t];return zl(this,n,r)}createConnection(t,r){let n=typeof t.createConnection=="function"?t.createConnection:typeof this.options.createConnection=="function"?this.options.createConnection:null;return n?n(t,r??(()=>{})):eI(t,r)}addRequest(t,r){let n=this.getName(r),i=this._takeFreeSocket(n);if(i){this._activateSocket(n,i),t._assignSocket(i,!0);return}if(this._canCreateSocket(n)){this._createSocketForRequest(n,t,r);return}this.requests[n]||(this.requests[n]=[]),this.requests[n].push({request:t,options:r})}_releaseSocket(t,r,n,i){let s=this._removeSocket(this.sockets,t,r);if(i&&!r.destroyed){let o=this.freeSockets[t]??(this.freeSockets[t]=[]);o.length<this.maxFreeSockets?(r._freeTimer&&(clearTimeout(r._freeTimer),r._freeTimer=null),o.push(r),this.timeout>0&&(r._freeTimer=setTimeout(()=>{r._freeTimer=null,r.destroy()},this.timeout)),r.emit("free"),this.emit("free",r,n)):(s&&(this.totalSocketCount=Math.max(0,this.totalSocketCount-1)),r.destroy())}else r.destroyed||(s&&(this.totalSocketCount=Math.max(0,this.totalSocketCount-1)),r.destroy());Promise.resolve().then(()=>this._processPendingRequests())}_removeSocketCompletely(t,r){r._freeTimer&&(clearTimeout(r._freeTimer),r._freeTimer=null),(this._removeSocket(this.sockets,t,r)||this._removeSocket(this.freeSockets,t,r))&&(this.totalSocketCount=Math.max(0,this.totalSocketCount-1),Promise.resolve().then(()=>this._processPendingRequests()))}_canCreateSocket(t){return(this.sockets[t]?.length??0)>=this.maxSockets?!1:this.totalSocketCount<this.maxTotalSockets?!0:(this._evictFreeSocket(t),this.totalSocketCount<this.maxTotalSockets)}_takeFreeSocket(t){let r=this.freeSockets[t];for(;r&&r.length>0;){let n=r.shift();if(!n.destroyed)return n._freeTimer&&(clearTimeout(n._freeTimer),n._freeTimer=null),r.length===0&&delete this.freeSockets[t],n;this.totalSocketCount=Math.max(0,this.totalSocketCount-1)}return r&&r.length===0&&delete this.freeSockets[t],null}_activateSocket(t,r){(this.sockets[t]??(this.sockets[t]=[])).push(r)}_createSocketForRequest(t,r,n){let i=!1,s=(a,A)=>{if(!i){if(i=!0,a||!A){r._handleSocketError(a??new Error("Failed to create socket")),this._processPendingRequests();return}if(r.destroyed){this.totalSocketCount+=1,this._activateSocket(t,A),A.once("close",()=>{this._removeSocketCompletely(t,A)}),r._assignSocket(A,!1);return}this.totalSocketCount+=1,this._activateSocket(t,A),A.once("close",()=>{this._removeSocketCompletely(t,A)}),r._assignSocket(A,!1)}},o={...n,keepAlive:this.keepAlive,keepAliveInitialDelay:this.keepAliveMsecs};try{let a=this.createConnection(o,(A,f)=>{s(A,f)});a&&s(null,a)}catch(a){s(a instanceof Error?a:new Error(String(a)))}}_processPendingRequests(){for(let t of Object.keys(this.requests)){let r=this.requests[t];for(;r&&r.length>0;){let n=this._takeFreeSocket(t);if(n){let s=r.shift();if(s.request.destroyed){this._activateSocket(t,n),this._releaseSocket(t,n,s.options,!0);continue}this._activateSocket(t,n),s.request._assignSocket(n,!0);continue}if(!this._canCreateSocket(t))break;let i=r.shift();i.request.destroyed||this._createSocketForRequest(t,i.request,i.options)}(!r||r.length===0)&&delete this.requests[t]}}_removeSocket(t,r,n){let i=t[r];if(!i)return!1;let s=i.indexOf(n);return s===-1?!1:(i.splice(s,1),i.length===0&&delete t[r],!0)}_evictFreeSocket(t){let r=Object.keys(this.freeSockets),n=r.includes(t)?[...r.filter(i=>i!==t),t]:r;for(let i of n){let s=this.freeSockets[i]?.[0];if(s){s.destroy();return}}}destroy(){for(let t of Object.values(this.sockets).flat())t.destroy();for(let t of Object.values(this.freeSockets).flat())t.destroy();this.requests={},this.sockets={},this.freeSockets={},this.totalSocketCount=0}},y(Eu,"defaultMaxSockets",1/0),Eu);function nr(...e){process.env.SECURE_EXEC_DEBUG_HTTP_BRIDGE==="1"&&console.error("[secure-exec bridge network]",...e)}var WSe=1,jg=new Map,VSe=["ACL","BIND","CHECKOUT","CONNECT","COPY","DELETE","GET","HEAD","LINK","LOCK","M-SEARCH","MERGE","MKACTIVITY","MKCALENDAR","MKCOL","MOVE","NOTIFY","OPTIONS","PATCH","POST","PROPFIND","PROPPATCH","PURGE","PUT","QUERY","REBIND","REPORT","SEARCH","SOURCE","SUBSCRIBE","TRACE","UNBIND","UNLINK","UNLOCK","UNSUBSCRIBE"],JSe=/[^\u0021-\u00ff]/,jSe=new Set(["!","#","$","%","&","'","*","+","-",".","^","_","`","|","~"]);function lr(e,t){let r=new TypeError(e);return r.code=t,r}function MB(e,t){let r=new Error(e);return r.code=t,r}function Yn(e){if(e===null)return"null";if(Array.isArray(e))return"an instance of Array";let t=typeof e;return t==="function"?`function ${typeof e.name=="string"&&e.name.length>0?e.name:"anonymous"}`:t==="object"?`an instance of ${e&&typeof e=="object"&&typeof e.constructor?.name=="string"?e.constructor.name:"Object"}`:t==="string"?`type string ('${String(e)}')`:t==="symbol"?`type symbol (${String(e)})`:`type ${t} (${String(e)})`}function i2(e,t,r){return lr(`The "${e}" property must be of type ${t}. Received ${Yn(r)}`,"ERR_INVALID_ARG_TYPE")}function RW(e){if(e.length===0)return!1;for(let t=0;t<e.length;t+=1){let r=e[t],n=e.charCodeAt(t);if(!(n>=48&&n<=57||n>=65&&n<=90||n>=97&&n<=122)&&!jSe.has(r))return!1}return!0}function DW(e){for(let t=0;t<e.length;t+=1){let r=e.charCodeAt(t);if(r!==9&&(r<32||r===127||r>255))return!0}return!1}function Gi(e,t="Header name"){let r=String(e);if(!RW(r))throw lr(`${t} must be a valid HTTP token [${JSON.stringify(r)}]`,"ERR_INVALID_HTTP_TOKEN");return r}function Yi(e,t){if(t===void 0)throw lr(`Invalid value "undefined" for header "${e}"`,"ERR_HTTP_INVALID_HEADER_VALUE");if(Array.isArray(t)){for(let r of t)Yi(e,r);return}if(DW(String(t)))throw lr(`Invalid character in header content [${JSON.stringify(e)}]`,"ERR_INVALID_CHAR")}function Cl(e){return Array.isArray(e)?e.map(t=>String(t)):String(e)}function _u(e){return Array.isArray(e)?e.join(", "):e}function wG(e){return Array.isArray(e)?[...e]:e}function vo(e,t,r){if(t==="set-cookie"){let i=e[t];i===void 0?e[t]=[r]:Array.isArray(i)?i.push(r):e[t]=[i,r];return}let n=e[t];e[t]=n===void 0?r:`${_u(n)}, ${r}`}function zSe(e){if(!(e==null||e==="")){if(typeof e!="string")throw i2("options.method","string",e);return Gi(e,"Method")}}function KSe(e){let t=e==null||e===""?"/":String(e);if(JSe.test(t))throw lr("Request path contains unescaped characters","ERR_UNESCAPED_CHARACTERS");return t}function XSe(e){let t=String(e.hostname||e.host||"localhost"),r=e.protocol==="https:"||Number(e.port)===443?443:80,n=e.port!=null?Number(e.port):r;return n===r?t:`${t}:${n}`}function s2(e){return Array.isArray(e)&&(e.length===0||typeof e[0]=="string")}function ZSe(e){if(!e)return{};if(Array.isArray(e)){let r={};for(let n=0;n<e.length;n+=2){let i=e[n],s=e[n+1];if(i!==void 0&&s!==void 0){let o=Gi(i).toLowerCase();Yi(o,s),vo(r,o,String(s))}}return r}let t={};return Object.entries(e).forEach(([r,n])=>{if(n===void 0)return;let i=Gi(r).toLowerCase();if(Yi(i,n),Array.isArray(n)){n.forEach(s=>vo(t,i,String(s)));return}vo(t,i,String(n))}),t}function TW(e){return _u(e.connection||"").toLowerCase().includes("upgrade")&&!!e.upgrade}function $Se(e,t){return String(e||"GET").toUpperCase()==="CONNECT"?!0:TW(t)}function cR(e){return e==="https:"?"secureConnect":"connect"}function e_e(e,t){return!e||e.destroyed===!0?!1:t==="https:"?e.encrypted===!0&&e._tlsUpgrading!==!0:e._connected===!0||e._loopbackServer?!0:typeof e._socketId=="number"?!1:e.connecting===!1}function SG(e,t){return e_e(e,t)?Promise.resolve():new Promise((r,n)=>{let i=cR(t),s=()=>{A(),r()},o=f=>{A(),n(f instanceof Error?f:new Error(String(f)))},a=()=>{A(),n(Na("socket closed before request was ready"))},A=()=>{e.off?.(i,s),e.removeListener?.(i,s),e.off?.("error",o),e.removeListener?.("error",o),e.off?.("close",a),e.removeListener?.("close",a)};e.once(i,s),e.once("error",o),e.once("close",a)})}function t_e(e){let t=e?.protocol==="https:"?"https:":"http:",r=String(e?.hostname||e?.host||"localhost"),n=t==="https:"?443:80,i=Number(e?.port)||n,s=new URL(`${t}//${r}`);return i!==n&&(s.port=String(i)),s.origin}function r_e(e,t){if(typeof AG!="function"||typeof nW!="function")throw new Error("Undici request transport is not available");let r=t_e(t);if(e._agentOSUndiciClient&&e._agentOSUndiciOrigin===r&&e._agentOSUndiciClient.destroyed!==!0)return e._agentOSUndiciClient;let n=new AG(r,{pipelining:1,connect(s,o){return o(null,e),e}}),i=()=>{e._agentOSUndiciClient===n&&(e._agentOSUndiciClient=null,e._agentOSUndiciOrigin=null)};return e.once?.("close",i),e._agentOSUndiciClient=n,e._agentOSUndiciOrigin=r,n}function eI(e,t){let r=e?.protocol==="https:"?"https:":"http:",n=String(e?.hostname||e?.host||"localhost"),i=Number(e?.port)||(r==="https:"?443:80),s=r==="https:"?SW({host:n,localAddress:e?.localAddress,localPort:e?.localPort,port:i,servername:e?.servername||n,rejectUnauthorized:e?.rejectUnauthorized,socket:e?.socket}):Z1({host:n,localAddress:e?.localAddress,localPort:e?.localPort,port:i,path:e?.socketPath,keepAlive:e?.keepAlive,keepAliveInitialDelay:e?.keepAliveInitialDelay});if(t){let o=cR(r),a=()=>{f(),t(null,s)},A=l=>{f(),t(l instanceof Error?l:new Error(String(l)))},f=()=>{s.off?.(o,a),s.removeListener?.(o,a),s.off?.("error",A),s.removeListener?.("error",A)};s.once(o,a),s.once("error",A)}return s}function n_e(e){let t=[];for(let[r,n]of e)t.push(r,n);return t}function _G(e,t){let r=[];return Object.entries(e).forEach(([n,i])=>{let s=t.get(n)||n;if(Array.isArray(i)){i.forEach(o=>{r.push([s,String(o)])});return}r.push([s,String(i)])}),r}function i_e(e,t,r,n){let i=[`${e} ${t} HTTP/1.1`];r.forEach(([o,a])=>{i.push(`${o}: ${a}`)}),i.push("","");let s=Buffer.from(i.join(`\r
-`),"latin1");return!n||n.length===0?s:Buffer.concat([s,n])}async function s_e(e){if(!e)return Buffer.alloc(0);let t=[];for await(let r of e)typeof Buffer<"u"&&Buffer.isBuffer(r)?t.push(r):r instanceof Uint8Array?t.push(Buffer.from(r)):t.push(Buffer.from(String(r)));return t.length===0?Buffer.alloc(0):t.length===1?t[0]:Buffer.concat(t)}function o_e(e){let t=e.indexOf(`\r
-\r
-`);if(t===-1)return null;let n=e.subarray(0,t).toString("latin1").split(`\r
-`),i=n.shift()||"",s=/^HTTP\/(\d)\.(\d)\s+(\d{3})(?:\s+(.*))?$/.exec(i);if(!s)throw new Error(`Invalid HTTP response status line: ${i}`);let o={},a=[],A=null;for(let f of n){if(!f)continue;if((f.startsWith(" ")||f.startsWith("	"))&&a.length>=2&&A){let S=f.trim();a[a.length-1]+=` ${S}`,o[A]=_u(o[A])+` ${S}`;continue}let l=f.indexOf(":");if(l===-1)throw new Error(`Invalid HTTP response header line: ${f}`);let p=f.slice(0,l),B=f.slice(l+1).trim();A=p.toLowerCase(),a.push(p,B),vo(o,A,B)}return{status:Number(s[3]),statusText:s[4]||"",headers:o,rawHeaders:a,head:e.subarray(t+4)}}function a_e(e,t,r){return new Promise((n,i)=>{let s=null,o=Buffer.alloc(0),a=null,A=!1,f=!1,l=!1,p=(Z,ee)=>{if(!l){if(l=!0,B(),Z){i(Z);return}n(ee)}},B=()=>{clearTimeout(Y),e.off?.("data",N),e.removeListener?.("data",N),e.off?.("error",P),e.removeListener?.("error",P),e.off?.("end",U),e.removeListener?.("end",U),e.off?.("close",G),e.removeListener?.("close",G)},S=()=>{if(!s)return!1;if(!o2(s.status,t))return p(null,{...s,body:Buffer.alloc(0)}),!0;if(A){let Z=MW(o);return Z===null?(p(new Error("Invalid chunked HTTP response body")),!0):Z.complete?(p(null,{...s,body:Z.body}),!0):!1}return a!==null?o.length<a?!1:(p(null,{...s,body:o.subarray(0,a)}),!0):!1},_=()=>{if(!s||!o2(s.status,t))return;let Z=s.headers["transfer-encoding"],ee=s.headers["content-length"];if(Z!==void 0){let j=lR(_u(Z)),se=j.filter(H=>H==="chunked").length,ie=se>0,ce=ie&&j[j.length-1]==="chunked";if(!ie||se!==1||!ce||ee!==void 0)throw new Error("Unsupported transfer-encoding in HTTP response");A=!0;return}if(ee!==void 0){let j=NW(ee);if(j===null)throw new Error("Invalid content-length in HTTP response");a=j;return}f=!0},N=Z=>{let ee=Buffer.isBuffer(Z)?Z:Buffer.from(Z);if(!s){o=Buffer.concat([o,ee]);try{let j=o_e(o);if(!j)return;s=j,o=Buffer.from(j.head),_(),S()}catch(j){p(j instanceof Error?j:new Error(String(j)))}return}o=Buffer.concat([o,ee]);try{S()}catch(j){p(j instanceof Error?j:new Error(String(j)))}},P=Z=>{p(Z instanceof Error?Z:new Error(String(Z)))},U=()=>{if(!s){p(Na("socket ended before receiving HTTP response head"));return}if(f){p(null,{...s,body:o});return}S()||p(Na("socket ended before receiving complete HTTP response body"))},G=()=>{if(!s){p(Na("socket closed before receiving HTTP response head"));return}if(f){p(null,{...s,body:o});return}S()||p(Na("socket closed before receiving complete HTTP response body"))},Y=setTimeout(()=>{p(new Error(`Timed out waiting for HTTP response after ${r}ms`))},r);e.on("data",N),e.once("error",P),e.once("end",U),e.once("close",G)})}function o2(e,t){return!(t==="HEAD"||e>=100&&e<200||e===204||e===304)}function lR(e){return e.split(",").map(t=>t.trim().toLowerCase()).filter(t=>t.length>0)}function NW(e){if(e===void 0)return 0;let t=Array.isArray(e)?e:[e],r=null;for(let n of t){if(!/^\d+$/.test(n))return null;let i=Number(n);if(!Number.isSafeInteger(i)||i<0||r!==null&&r!==i)return null;r=i}return r??0}function MW(e,t=ql){let r=0,n=0,i=[];for(;;){let s=e.indexOf(`\r
-`,r);if(s===-1)return{complete:!1};let o=e.subarray(r,s).toString("latin1");if(o.length===0||/[\r\n]/.test(o))return null;let[a,A]=o.split(";",2);if(!/^[0-9A-Fa-f]+$/.test(a)||A!==void 0&&/[\r\n]/.test(A))return null;let f=Number.parseInt(a,16);if(!Number.isSafeInteger(f)||f<0||n+f>t)return null;let l=s+2;if(f===0){let S=l;if(S===e.length)return{complete:!1};if(e[S]===13&&e[S+1]===10)return{complete:!0,bytesConsumed:S+2,body:i.length>0?Buffer.concat(i):Buffer.alloc(0)};let _=e.indexOf(`\r
-\r
-`,S);if(_===-1)return{complete:!1};let N=e.subarray(S,_).toString("latin1");if(N.length>0){for(let P of N.split(`\r
-`))if(P.length!==0&&(P.startsWith(" ")||P.startsWith("	")||P.indexOf(":")===-1))return null}return{complete:!0,bytesConsumed:_+4,body:i.length>0?Buffer.concat(i):Buffer.alloc(0)}}let p=l+f,B=p+2;if(B>e.length)return{complete:!1};if(e[p]!==13||e[p+1]!==10)return null;n+=f,i.push(e.subarray(l,p)),r=B}}function FW(e,t){let r=0;for(;r+1<e.length&&e[r]===13&&e[r+1]===10;)r+=2;let n=e.indexOf(`\r
-\r
-`,r);if(n===-1)return e.length-r>RG?{kind:"bad-request",closeConnection:!0}:{kind:"incomplete"};if(n-r>RG)return{kind:"bad-request",closeConnection:!0};let i=e.subarray(r,n).toString("latin1"),[s,...o]=i.split(`\r
-`);if(o.length>y_e)return{kind:"bad-request",closeConnection:!0};let a=/^([A-Z]+)\s+(\S+)\s+HTTP\/(1)\.(0|1)$/.exec(s);if(!a)return{kind:"bad-request",closeConnection:!0};let A={},f=[],l=null;try{for(let Z of o){if(Z.length===0)continue;if(Z.startsWith(" ")||Z.startsWith("	"))return{kind:"bad-request",closeConnection:!0};let ee=Z.indexOf(":");if(ee===-1)return{kind:"bad-request",closeConnection:!0};let j=Z.slice(0,ee).trim(),se=Z.slice(ee+1).trim(),ie=Gi(j).toLowerCase();Yi(ie,se),vo(A,ie,se),f.push(j,se),l=ie}}catch{return{kind:"bad-request",closeConnection:!0}}let p=a[1],B=a[2],S=Number(a[4]),_=_u(A.connection||"").toLowerCase(),N=S===0?!_.includes("keep-alive"):_.includes("close");if(TW(A)&&t.listenerCount("upgrade")>0)return{kind:"request",bytesConsumed:e.length,closeConnection:!1,request:{method:p,url:B,headers:A,rawHeaders:f,bodyBase64:n+4<e.length?e.subarray(n+4).toString("base64"):void 0},upgradeHead:n+4<e.length?e.subarray(n+4):Buffer.alloc(0)};let P=A["transfer-encoding"],U=A["content-length"],G=Buffer.alloc(0),Y=n+4;if(P!==void 0){let Z=lR(_u(P)),ee=Z.filter(ce=>ce==="chunked").length,j=ee>0,se=j&&Z[Z.length-1]==="chunked";if(!j||ee!==1||!se||U!==void 0)return{kind:"bad-request",closeConnection:!0};let ie=MW(e.subarray(n+4));if(ie===null)return{kind:"bad-request",closeConnection:!0};if(!ie.complete)return{kind:"incomplete"};G=ie.body,Y=n+4+ie.bytesConsumed}else if(U!==void 0){let Z=NW(U);if(Z===null||Z>ql)return{kind:"bad-request",closeConnection:!0};let ee=n+4+Z;if(ee>e.length)return{kind:"incomplete"};G=e.subarray(n+4,ee),Y=ee}return{kind:"request",bytesConsumed:Y,closeConnection:N,request:{method:p,url:B,headers:A,rawHeaders:f,bodyBase64:G.length>0?G.toString("base64"):void 0}}}function Ig(e,t){let r={},n=new Map,i=[];if(Array.isArray(e)&&e.length>0){for(let s=0;s<e.length;s+=2){let o=e[s],a=e[s+1];if(o===void 0||a===void 0)continue;let A=o.toLowerCase();vo(r,A,a),n.has(A)||(n.set(A,o),i.push(A))}return{headers:r,rawNameMap:n,order:i}}if(Array.isArray(t))for(let[s,o]of t){let a=s.toLowerCase();vo(r,a,o),n.has(a)||(n.set(a,s),i.push(a))}return{headers:r,rawNameMap:n,order:i}}function h1(e,t,r){let n=[],i=new Set;for(let s of r){let o=e[s];if(o===void 0)continue;let a=t.get(s)||s,A=Array.isArray(o)?s==="set-cookie"?o:[o.join(", ")]:[o];for(let f of A)n.push([a,f]);i.add(s)}for(let[s,o]of Object.entries(e)){if(i.has(s))continue;let a=t.get(s)||s,A=Array.isArray(o)?s==="set-cookie"?o:[o.join(", ")]:[o];for(let f of A)n.push([a,f])}return n}function a2(){return Buffer.from(`HTTP/1.1 400 Bad Request\r
-Connection: close\r
-\r
-`,"latin1")}function hR(e,t,r){let n=e.status||200,i=zg[n]||"OK",{headers:s,rawNameMap:o,order:a}=Ig(e.rawHeaders,e.headers),A=Ig(e.rawTrailers,e.trailers),f=e.body==null?Buffer.alloc(0):e.bodyEncoding==="base64"?Buffer.from(e.body,"base64"):Buffer.from(e.body,"utf8"),l=o2(n,t.method),B=(s["transfer-encoding"]?lR(_u(s["transfer-encoding"])):[]).includes("chunked"),S=s["content-length"]!==void 0,_=r||e.connectionEnded===!0||e.connectionReset===!0;l?!B&&!S&&(e.streamed===!0?(s["transfer-encoding"]="chunked",o.set("transfer-encoding","Transfer-Encoding"),a.push("transfer-encoding"),B=!0):(s["content-length"]=String(f.length),o.set("content-length","Content-Length"),a.push("content-length"))):(B&&(_=!0),delete s["content-length"]),_?(s.connection="close",o.has("connection")||(o.set("connection","Connection"),a.push("connection"))):s.connection===void 0&&t.headers.connection!==void 0&&(s.connection="keep-alive",o.set("connection","Connection"),a.push("connection"));let N=[];for(let G of e.informational??[]){let Z=h1(Ig(G.rawHeaders,G.headers).headers,Ig(G.rawHeaders,G.headers).rawNameMap,Ig(G.rawHeaders,G.headers).order).map(([ee,j])=>`${ee}: ${j}\r
-`).join("");N.push(Buffer.from(`HTTP/1.1 ${G.status} ${G.statusText||zg[G.status]||""}\r
-${Z}\r
-`,"latin1"))}let U=h1(s,o,a).map(([G,Y])=>`${G}: ${Y}\r
-`).join("");if(N.push(Buffer.from(`HTTP/1.1 ${n} ${i}\r
-${U}\r
-`,"latin1")),l)if(B){if(f.length>0&&(N.push(Buffer.from(f.length.toString(16)+`\r
-`,"latin1")),N.push(f),N.push(Buffer.from(`\r
-`,"latin1"))),N.push(Buffer.from(`0\r
-`,"latin1")),Object.keys(A.headers).length>0){let G=h1(A.headers,A.rawNameMap,A.order);for(let[Y,Z]of G)N.push(Buffer.from(`${Y}: ${Z}\r
-`,"latin1"))}N.push(Buffer.from(`\r
-`,"latin1"))}else f.length>0&&N.push(f);return{payload:N.length===1?N[0]:Buffer.concat(N),closeConnection:_}}var zg={100:"Continue",101:"Switching Protocols",102:"Processing",103:"Early Hints",200:"OK",201:"Created",204:"No Content",301:"Moved Permanently",302:"Found",304:"Not Modified",400:"Bad Request",401:"Unauthorized",403:"Forbidden",404:"Not Found",500:"Internal Server Error"};var Nu=class{constructor(e){y(this,"headers");y(this,"rawHeaders");y(this,"method");y(this,"url");y(this,"socket");y(this,"connection");y(this,"rawBody");y(this,"destroyed",!1);y(this,"errored");y(this,"readable",!0);y(this,"httpVersion","1.1");y(this,"httpVersionMajor",1);y(this,"httpVersionMinor",1);y(this,"complete",!0);y(this,"aborted",!1);y(this,"_readableState",{flowing:null,length:0,ended:!1,objectMode:!1});y(this,"_listeners",{});this.headers=e.headers||{},this.rawHeaders=e.rawHeaders||[],(!Array.isArray(this.rawHeaders)||this.rawHeaders.length%2!==0)&&(this.rawHeaders=[]),this.method=e.method||"GET",this.url=e.url||"/";let t={encrypted:!1,remoteAddress:"127.0.0.1",remotePort:0,writable:!0,on(){return t},once(){return t},removeListener(){return t},destroy(){},end(){}};this.socket=t,this.connection=t;let r=this.headers.host;typeof r=="string"&&r.includes(",")&&(this.headers.host=r.split(",")[0].trim()),this.headers.host||(this.headers.host="127.0.0.1"),this.rawHeaders.length===0&&Object.entries(this.headers).forEach(([n,i])=>{if(Array.isArray(i)){i.forEach(s=>{this.rawHeaders.push(n,s)});return}this.rawHeaders.push(n,i)}),e.bodyBase64&&typeof Buffer<"u"&&(this.rawBody=Buffer.from(e.bodyBase64,"base64"))}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}once(e,t){let r=(...n)=>{this.off(e,r),t.call(this,...n)};return this.on(e,r)}off(e,t){let r=this._listeners[e];if(!r)return this;let n=r.indexOf(t);return n!==-1&&r.splice(n,1),this}removeListener(e,t){return this.off(e,t)}emit(e,...t){let r=this._listeners[e];return zl(this,r,t)}unpipe(){return this}pause(){return this}resume(){return this}read(){return null}pipe(e){return e}isPaused(){return!1}setEncoding(){return this}destroy(e){return this.destroyed=!0,this.errored=e,e&&this.emit("error",e),this.emit("close"),this}_abort(){if(this.aborted)return;this.aborted=!0;let e=Na("aborted");this.emit("aborted"),this.emit("error",e),this.emit("close")}},c0=class{constructor(){y(this,"statusCode",200);y(this,"statusMessage","OK");y(this,"headersSent",!1);y(this,"writable",!0);y(this,"writableFinished",!1);y(this,"outputSize",0);y(this,"_headers",new Map);y(this,"_trailers",new Map);y(this,"_chunks",[]);y(this,"_chunksBytes",0);y(this,"_streamed",!1);y(this,"_listeners",{});y(this,"_closedPromise");y(this,"_resolveClosed",null);y(this,"_connectionEnded",!1);y(this,"_connectionReset",!1);y(this,"_rawHeaderNames",new Map);y(this,"_rawTrailerNames",new Map);y(this,"_informational",[]);y(this,"_pendingRawInfoBuffer","");y(this,"_streamSocket",null);y(this,"_streamRequest",null);y(this,"_streamedDirectly",!1);y(this,"_streamCloseConnection",!1);y(this,"_writableState",{length:0,ended:!1,finished:!1,objectMode:!1,corked:0});y(this,"socket",{writable:!0,writableCorked:0,writableHighWaterMark:16*1024,on:()=>this.socket,once:()=>this.socket,removeListener:()=>this.socket,destroy:()=>{this._connectionReset=!0,this._finalize()},end:()=>{this._connectionEnded=!0},cork:()=>{this._writableState.corked+=1,this.socket.writableCorked=this._writableState.corked},uncork:()=>{this._writableState.corked=Math.max(0,this._writableState.corked-1),this.socket.writableCorked=this._writableState.corked},write:(e,t,r)=>this.write(e,t,r)});y(this,"connection",this.socket);this._closedPromise=new Promise(e=>{this._resolveClosed=e})}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}once(e,t){let r=(...n)=>{this.off(e,r),t.call(this,...n)};return this.on(e,r)}off(e,t){let r=this._listeners[e];if(!r)return this;let n=r.indexOf(t);return n!==-1&&r.splice(n,1),this}removeListener(e,t){return this.off(e,t)}emit(e,...t){let r=this._listeners[e];return!r||r.length===0?!1:(r.slice().forEach(n=>n.call(this,...t)),!0)}_emit(e,...t){this.emit(e,...t)}writeHead(e,t){if(e>=100&&e<200&&e!==101){let r=new Map,n=new Map;if(t)if(s2(t))for(let o=0;o<t.length;o+=2){let a=t[o],A=t[o+1];if(a===void 0||A===void 0)continue;let f=Gi(a).toLowerCase();Yi(f,A),r.set(f,String(A)),n.has(f)||n.set(f,a)}else Array.isArray(t)?t.forEach(([o,a])=>{let A=Gi(o).toLowerCase();Yi(A,a),r.set(A,String(a)),n.has(A)||n.set(A,o)}):Object.entries(t).forEach(([o,a])=>{let A=Gi(o).toLowerCase();Yi(A,a),r.set(A,String(a)),n.has(A)||n.set(A,o)});let i=Array.from(r.entries()).flatMap(([o,a])=>{let A=Cl(a);return Array.isArray(A)?A.map(f=>[o,f]):[[o,A]]}),s=Array.from(r.entries()).flatMap(([o,a])=>{let A=n.get(o)||o,f=Cl(a);return Array.isArray(f)?f.flatMap(l=>[A,l]):[A,f]});return this._informational.push({status:e,statusText:zg[e],headers:i,rawHeaders:s}),this}if(this.statusCode=e,t)if(s2(t))for(let r=0;r<t.length;r+=2){let n=t[r],i=t[r+1];n!==void 0&&i!==void 0&&this.setHeader(n,i)}else Array.isArray(t)?t.forEach(([r,n])=>this.setHeader(r,n)):Object.entries(t).forEach(([r,n])=>this.setHeader(r,n));return this.headersSent=!0,this.outputSize+=64,this}setHeader(e,t){if(this.headersSent)throw MB("Cannot set headers after they are sent to the client","ERR_HTTP_HEADERS_SENT");let r=Gi(e).toLowerCase();Yi(r,t);let n=Array.isArray(t)?Array.from(t):t;return this._headers.set(r,n),this._rawHeaderNames.has(r)||this._rawHeaderNames.set(r,e),this}setHeaders(e){if(this.headersSent)throw MB("Cannot set headers after they are sent to the client","ERR_HTTP_HEADERS_SENT");if(!(e instanceof PA)&&!(e instanceof Map))throw lr(`The "headers" argument must be an instance of Headers or Map. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");if(e instanceof PA){let t=Object.create(null);return e.forEach((r,n)=>{vo(t,n.toLowerCase(),r)}),Object.entries(t).forEach(([r,n])=>{this.setHeader(r,n)}),this}return e.forEach((t,r)=>{this.setHeader(r,t)}),this}getHeader(e){if(typeof e!="string")throw lr(`The "name" argument must be of type string. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");let t=this._headers.get(e.toLowerCase());return t===void 0?void 0:wG(t)}hasHeader(e){if(typeof e!="string")throw lr(`The "name" argument must be of type string. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");return this._headers.has(e.toLowerCase())}removeHeader(e){if(typeof e!="string")throw lr(`The "name" argument must be of type string. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE");let t=e.toLowerCase();this._headers.delete(t),this._rawHeaderNames.delete(t)}_appendChunk(e,t,r){if(e==null)return!0;let n=typeof e=="string"?Buffer.from(e,typeof t=="string"?t:void 0):e;if(this._chunksBytes+n.byteLength>ql)throw new Error("ERR_HTTP_BODY_TOO_LARGE: response body exceeds "+ql+" byte limit");return this._chunks.push(n),this._chunksBytes+=n.byteLength,this._streamed||(this._streamed=r),this.headersSent=!0,this.outputSize+=n.byteLength,!0}write(e,t,r){this._appendChunk(e,typeof t=="string"?t:void 0,!0);let n=typeof t=="function"?t:r;return typeof n=="function"&&queueMicrotask(n),!0}end(e,t,r){let n,i;if(typeof e=="function"?i=e:(n=e,i=typeof t=="function"?t:r),this._streamSocket&&this._chunks.length===0&&!this.writableFinished&&!this._streamedDirectly){let s=typeof t=="string"?t:void 0;return this._streamEndBody(n,s),typeof i=="function"&&queueMicrotask(i),this}return n!=null&&(typeof n=="string"&&typeof t=="string"?this._appendChunk(n,t,!1):this._appendChunk(n,void 0,!1)),this._finalize(),typeof i=="function"&&queueMicrotask(i),this}_streamEndBody(e,t){let r=typeof e=="string",n=256*1024,i=0;if(e!=null)if(r)for(let a=0;a<e.length;a+=n)i+=Buffer.byteLength(e.slice(a,a+n),t);else i=e.length;!this._headers.has("content-length")&&!this._headers.has("transfer-encoding")&&(this._headers.set("content-length",String(i)),this._rawHeaderNames.set("content-length","Content-Length")),this.headersSent=!0;let s=this.serialize(),o=hR(s,this._streamRequest,!0);if(this._streamCloseConnection=o.closeConnection,this._streamedDirectly=!0,this.outputSize+=i,!this._streamSocket.destroyed&&o.payload.length>0&&this._streamSocket.write(o.payload),e!=null&&i>0)if(r)for(let a=0;a<e.length&&!this._streamSocket.destroyed;a+=n)this._streamSocket.write(Buffer.from(e.slice(a,a+n),t));else for(let a=0;a<e.length&&!this._streamSocket.destroyed;a+=n)this._streamSocket.write(e.subarray(a,a+n));this._finalize()}getHeaderNames(){return Array.from(this._headers.keys())}getRawHeaderNames(){return Array.from(this._headers.keys()).map(e=>this._rawHeaderNames.get(e)||e)}getHeaders(){let e=Object.create(null);for(let[t,r]of this._headers)e[t]=wG(r);return e}assignSocket(){}detachSocket(){}writeContinue(){this.writeHead(100)}writeProcessing(){this.writeHead(102)}addTrailers(e){if(Array.isArray(e)){for(let t=0;t<e.length;t+=2){let r=e[t],n=e[t+1];if(r===void 0||n===void 0)continue;let i=Gi(r).toLowerCase();Yi(i,n),this._trailers.set(i,String(n)),this._rawTrailerNames.has(i)||this._rawTrailerNames.set(i,r)}return}Object.entries(e).forEach(([t,r])=>{let n=Gi(t).toLowerCase();Yi(n,r),this._trailers.set(n,String(r)),this._rawTrailerNames.has(n)||this._rawTrailerNames.set(n,t)})}cork(){this.socket.cork()}uncork(){this.socket.uncork()}setTimeout(e){return this}get writableCorked(){return Number(this.socket.writableCorked||0)}flushHeaders(){this.headersSent=!0}destroy(e){this._connectionReset=!0,e&&this._emit("error",e),this._finalize()}async waitForClose(){await this._closedPromise}serialize(){let e=this._chunks.length>0?Buffer.concat(this._chunks):Buffer.alloc(0),t=Array.from(this._headers.entries()).flatMap(([s,o])=>{let a=Cl(o);return Array.isArray(a)?s==="set-cookie"?a.map(A=>[s,A]):[[s,a.join(", ")]]:[[s,a]]}),r=Array.from(this._headers.entries()).flatMap(([s,o])=>{let a=this._rawHeaderNames.get(s)||s,A=Cl(o);return Array.isArray(A)?s==="set-cookie"?A.flatMap(f=>[a,f]):[a,A.join(", ")]:[a,A]}),n=Array.from(this._trailers.entries()).flatMap(([s,o])=>{let a=Cl(o);return Array.isArray(a)?a.map(A=>[s,A]):[[s,a]]}),i=Array.from(this._trailers.entries()).flatMap(([s,o])=>{let a=this._rawTrailerNames.get(s)||s,A=Cl(o);return Array.isArray(A)?A.flatMap(f=>[a,f]):[a,A]});return{status:this.statusCode,headers:t,rawHeaders:r,informational:this._informational.length>0?[...this._informational]:void 0,body:e.toString("base64"),bodyEncoding:"base64",trailers:n.length>0?n:void 0,rawTrailers:i.length>0?i:void 0,connectionEnded:this._connectionEnded,connectionReset:this._connectionReset,streamed:this._streamed}}_writeRaw(e,t){return this._pendingRawInfoBuffer+=String(e),this._flushPendingRawInformational(),typeof t=="function"&&queueMicrotask(t),!0}_finalize(){this.writableFinished||(this.writableFinished=!0,this.writable=!1,this._writableState.ended=!0,this._writableState.finished=!0,this._emit("finish"),this._emit("close"),this._resolveClosed?.(),this._resolveClosed=null)}_flushPendingRawInformational(){let e=this._pendingRawInfoBuffer.indexOf(`\r
-\r
-`);for(;e!==-1;){let t=this._pendingRawInfoBuffer.slice(0,e);this._pendingRawInfoBuffer=this._pendingRawInfoBuffer.slice(e+4);let[r,...n]=t.split(`\r
-`),i=/^HTTP\/1\.[01]\s+(\d{3})(?:\s+(.*))?$/.exec(r);if(!i){e=this._pendingRawInfoBuffer.indexOf(`\r
-\r
-`);continue}let s=Number(i[1]);if(s>=100&&s<200&&s!==101){let o=[],a=[];for(let A of n){let f=A.indexOf(":");if(f===-1)continue;let l=A.slice(0,f).trim(),p=A.slice(f+1).trim();o.push([l.toLowerCase(),p]),a.push(l,p)}this._informational.push({status:s,statusText:i[2]||zg[s]||void 0,headers:o,rawHeaders:a})}e=this._pendingRawInfoBuffer.indexOf(`\r
-\r
-`)}}},dR=class{constructor(e,t=null){y(this,"listening",!1);y(this,"_listeners",{});y(this,"_serverId");y(this,"_netServer",null);y(this,"_listenPromise",null);y(this,"_address",null);y(this,"_handleId",null);y(this,"_hostCloseWaitStarted",!1);y(this,"_activeRequestDispatches",0);y(this,"_closePending",!1);y(this,"_closeRunning",!1);y(this,"_closeCallbacks",[]);y(this,"_tlsOptions",null);y(this,"_requestListener");y(this,"keepAliveTimeout",5e3);y(this,"requestTimeout",3e5);y(this,"headersTimeout",6e4);y(this,"timeout",0);y(this,"maxRequestsPerSocket",0);this._serverId=WSe++,this._requestListener=e??(()=>{}),this._tlsOptions=t,jg.set(this._serverId,this)}get _bridgeServerId(){return this._serverId}_emit(e,...t){let r=this._listeners[e];!r||r.length===0||r.slice().forEach(n=>n.call(this,...t))}_finishStart(e){let t=JSON.parse(e);this._address=t.address,this.listening=!0,this._handleId=`http-server:${this._serverId}`,nr("server listening",this._serverId,this._address),typeof _registerHandle=="function"&&_registerHandle(this._handleId,"http server"),this._startHostCloseWait()}_completeClose(){this.listening=!1,this._address=null,jg.delete(this._serverId),this._handleId&&typeof _unregisterHandle=="function"&&_unregisterHandle(this._handleId),this._handleId=null}_beginRequestDispatch(){this._activeRequestDispatches+=1}_endRequestDispatch(){this._activeRequestDispatches=Math.max(0,this._activeRequestDispatches-1),this._closePending&&this._activeRequestDispatches===0&&(this._closePending=!1,queueMicrotask(()=>{this._startClose()}))}_startHostCloseWait(){this._hostCloseWaitStarted=!0}async _start(e,t){if(typeof Jg>"u")throw new Error("http.createServer requires kernel-backed network bridge support");nr("server listen start",this._serverId,e,t);let r=new Jg({allowHalfOpen:!0});this._netServer=r,r.on("connection",n=>{if(this._tlsOptions){let i=new uR(n,{...this._tlsOptions,isServer:!0});i.server=this,i.once("secure",()=>{this._emit("secureConnection",i),this._emit("connection",i),vG(this,i)}),i.on("error",s=>{this._emit("tlsClientError",s,i)});return}this._emit("connection",n),vG(this,n)}),r.on("error",n=>{this._emit("error",n)}),await new Promise((n,i)=>{let s=!1,o=()=>{r.removeListener?.("listening",a),r.removeListener?.("error",A)},a=()=>{s||(s=!0,o(),n())},A=f=>{s||(s=!0,o(),i(f instanceof Error?f:new Error(String(f))))};r.once("listening",a),r.once("error",A),r.listen(e??0,t)}),this._address=r.address(),this.listening=!0,this._startHostCloseWait(),nr("server listening",this._serverId,this._address)}listen(e,t,r){let n=typeof e=="number"?e:void 0,i=typeof t=="string"?t:void 0,s=typeof r=="function"?r:typeof t=="function"?t:typeof e=="function"?e:void 0;return this._listenPromise||(this._listenPromise=this._start(n,i).then(()=>{this._emit("listening"),s?.call(this)}).catch(o=>{this._emit("error",o)})),this}close(e){return nr("server close requested",this._serverId,this.listening),e&&this._closeCallbacks.push(e),this._activeRequestDispatches>0?(this._closePending=!0,this):(queueMicrotask(()=>{this._startClose()}),this)}_startClose(){if(this._closeRunning)return;this._closeRunning=!0,(async()=>{try{this._listenPromise&&await this._listenPromise;let t=this._netServer;this.listening&&t&&(nr("server close net server",this._serverId),await new Promise((n,i)=>{t.close(s=>{s?i(s):n()})})),this._netServer=null,this._completeClose(),nr("server close complete",this._serverId),this._closeCallbacks.splice(0).forEach(n=>n()),this._emit("close")}catch(t){let r=t instanceof Error?t:new Error(String(t));nr("server close error",this._serverId,r.message),this._closeCallbacks.splice(0).forEach(i=>i(r)),this._emit("error",r)}finally{this._closeRunning=!1}})()}address(){return this._address}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}once(e,t){let r=(...n)=>{this.off(e,r),t.call(this,...n)};return this.on(e,r)}off(e,t){let r=this._listeners[e];if(!r)return this;let n=r.indexOf(t);return n!==-1&&r.splice(n,1),this}removeListener(e,t){return this.off(e,t)}removeAllListeners(e){return e?delete this._listeners[e]:this._listeners={},this}listenerCount(e){return this._listeners[e]?.length||0}setTimeout(e,t){return typeof e=="number"&&(this.timeout=e),this}ref(){return this}unref(){return this}};function kW(e){return new dR(e)}kW.prototype=dR.prototype;async function A_e(e,t){let r=jg.get(e);if(!r)throw new Error(`Unknown HTTP server: ${e}`);let n=r._requestListener;r._beginRequestDispatch();let i=JSON.parse(t),s=new Nu(i),o=new c0;s.socket=o.socket,s.connection=o.socket;let a=[],A=[],f=new Map,l=0,p=0;try{try{let B=globalThis.setImmediate,S=globalThis.setTimeout,_=globalThis.clearTimeout;typeof B=="function"&&(globalThis.setImmediate=((N,...P)=>{let U=new Promise(G=>{queueMicrotask(()=>{try{N(...P)}finally{G()}})});return a.push(U),0})),typeof S=="function"&&(globalThis.setTimeout=((N,P,...U)=>{if(typeof N!="function")return S(N,P,...U);let G=typeof P=="number"&&Number.isFinite(P)?Math.max(0,P):0;if(G>1e3)return S(N,G,...U);let Y,Z=new Promise(j=>{Y=j}),ee;return ee=S(()=>{f.delete(ee);try{N(...U)}finally{Y()}},G),f.set(ee,Y),A.push(Z),ee})),typeof _=="function"&&(globalThis.clearTimeout=(N=>{if(N!=null){let P=f.get(N);P&&(f.delete(N),P())}return _(N)}));try{let N=n(s,o);for(s.rawBody&&s.rawBody.length>0&&s.emit("data",s.rawBody),s.emit("end"),await Promise.resolve(N);l<A.length||p<a.length;){let P=[...A.slice(l),...a.slice(p)];l=A.length,p=a.length,await Promise.allSettled(P)}}finally{typeof B=="function"&&(globalThis.setImmediate=B),typeof S=="function"&&(globalThis.setTimeout=S),typeof _=="function"&&(globalThis.clearTimeout=_)}}catch(B){o.statusCode=500;try{o.end(B instanceof Error?`Error: ${B.message}`:"Error")}catch{o.writableFinished||o.end()}}return o.writableFinished||o.end(),await o.waitForClose(),await Promise.allSettled([...A,...a]),JSON.stringify(o.serialize())}finally{r._endRequestDispatch()}}async function f_e(e,t){let r=e2.get(t);if(!r||r.serverId!==e||typeof _networkHttp2ServerRespondRaw>"u")return;e2.delete(t);let n=_s.get(e);if(!n){_networkHttp2ServerRespondRaw.applySync(void 0,[e,t,JSON.stringify({status:500,headers:[["content-type","text/plain"]],body:"Unknown HTTP/2 server",bodyEncoding:"utf8"})]);return}let i=JSON.parse(r.requestJson),s=new Nu(i),o=new c0;s.socket=o.socket,s.connection=o.socket;try{n.emit("request",s,o),s.rawBody&&s.rawBody.length>0&&s.emit("data",s.rawBody),s.emit("end"),o.writableFinished||o.end(),await o.waitForClose(),_networkHttp2ServerRespondRaw.applySync(void 0,[e,t,JSON.stringify(o.serialize())])}catch(a){let A=a instanceof Error?a.message:String(a);_networkHttp2ServerRespondRaw.applySync(void 0,[e,t,JSON.stringify({status:500,headers:[["content-type","text/plain"]],body:`Error: ${A}`,bodyEncoding:"utf8"})])}}async function u_e(e,t){let r=typeof e=="number"?jg.get(e):e;if(!r)throw new Error(`Unknown HTTP server: ${typeof e=="number"?e:"<detached>"}`);let n=typeof t=="string"?JSON.parse(t):t,i=new Nu(n),s=new c0;i.socket=s.socket,i.connection=s.socket;let o=[],a=[],A=new Map,f=0,l=0;r._beginRequestDispatch();try{try{let B=globalThis.setImmediate,S=globalThis.setTimeout,_=globalThis.clearTimeout;typeof B=="function"&&(globalThis.setImmediate=((N,...P)=>{let U=new Promise(G=>{queueMicrotask(()=>{try{N(...P)}finally{G()}})});return o.push(U),0})),typeof S=="function"&&(globalThis.setTimeout=((N,P,...U)=>{if(typeof N!="function")return S(N,P,...U);let G=typeof P=="number"&&Number.isFinite(P)?Math.max(0,P):0;if(G>1e3)return S(N,G,...U);let Y,Z=new Promise(j=>{Y=j}),ee;return ee=S(()=>{A.delete(ee);try{N(...U)}finally{Y()}},G),A.set(ee,Y),a.push(Z),ee})),typeof _=="function"&&(globalThis.clearTimeout=(N=>{if(N!=null){let P=A.get(N);P&&(A.delete(N),P())}return _(N)}));try{let N=r._requestListener(i,s);for(i.rawBody&&i.rawBody.length>0&&i.emit("data",i.rawBody),i.emit("end"),await Promise.resolve(N);f<a.length||l<o.length;){let P=[...a.slice(f),...o.slice(l)];f=a.length,l=o.length,await Promise.allSettled(P)}}finally{typeof B=="function"&&(globalThis.setImmediate=B),typeof S=="function"&&(globalThis.setTimeout=S),typeof _=="function"&&(globalThis.clearTimeout=_)}}catch(B){s.statusCode=500;try{s.end(B instanceof Error?`Error: ${B.message}`:"Error")}catch{s.writableFinished||s.end()}}s.writableFinished||s.end(),await s.waitForClose(),await Promise.allSettled([...a,...o]);let p=!1;return{responseJson:JSON.stringify(s.serialize()),abortRequest:()=>{p||(p=!0,i._abort())}}}finally{r._endRequestDispatch()}}async function c_e(e,t,r){let n=typeof t=="string"?JSON.parse(t):t,i=new Nu(n),s=new c0;i.socket=s.socket,i.connection=s.socket,r&&(s._streamSocket=r,s._streamRequest=n),e._beginRequestDispatch();try{try{let A=e._requestListener(i,s);i.rawBody&&i.rawBody.length>0&&i.emit("data",i.rawBody),i.emit("end"),await Promise.resolve(A)}catch(A){s.statusCode=500;try{s.end(A instanceof Error?`Error: ${A.message}`:"Error")}catch{s.writableFinished||s.end()}}s.writableFinished||s.end(),await s.waitForClose();let o=!1,a=()=>{o||(o=!0,i._abort())};return s._streamedDirectly?{streamedDirectly:!0,closeConnection:s._streamCloseConnection,abortRequest:a}:{responseJson:JSON.stringify(s.serialize()),abortRequest:a}}finally{e._endRequestDispatch()}}function vG(e,t){let r=Buffer.alloc(0),n=!1,i=!1,s=!1,o=!1,a=()=>{o||(o=!0,t.off?.("data",l),t.removeListener?.("data",l),t.off?.("end",p),t.removeListener?.("end",p),t.off?.("close",B),t.removeListener?.("close",B),t.off?.("error",S),t.removeListener?.("error",S))},A=()=>{if(n){i=!0;return}n=!0,_().finally(()=>{n=!1,i&&!o?(i=!1,A()):i=!1})},f=()=>{a(),!t.destroyed&&!t._writableEnded&&t.end()},l=N=>{let P=Buffer.isBuffer(N)?N:Buffer.from(N);r=r.length===0?P:Buffer.concat([r,P]),A()},p=()=>{if(s=!0,r.length===0){a();return}A()},B=()=>{a()},S=()=>{a()};async function _(){let N=!1;for(;!o&&!t.destroyed;){let P=FW(r,e);if(P.kind==="incomplete"){s&&r.length>0&&(t.write(a2()),f());return}if(P.kind==="bad-request"){t.write(a2()),f(),r=Buffer.alloc(0);return}if(r=r.subarray(P.bytesConsumed),P.upgradeHead){a();let Y=new Nu(P.request);Y.socket=t,Y.connection=t,e._emit("upgrade",Y,t,P.upgradeHead);return}let U=await c_e(e,P.request,t);if(o||t.destroyed)return;let G;if(U.streamedDirectly)G=U.closeConnection;else{let Y=JSON.parse(U.responseJson),Z=hR(Y,P.request,!0);!N&&Z.payload.length>0&&t.write(Z.payload),G=Z.closeConnection}if(G&&(N=!0,r.length===0)){f();return}}}t.on("data",l),t.once("end",p),t.once("close",B),t.once("error",S)}function xW(e,t,r,n,i){let s=jg.get(t);if(!s)throw new Error(`Unknown HTTP server for ${e}: ${t}`);let o=JSON.parse(r),a=new Nu(o),A=typeof Buffer<"u"?Buffer.from(n,"base64"):new Uint8Array(0),f=a.headers.host,l=new l_e(i,{host:(Array.isArray(f)?f[0]:f)?.split(":")[0]||"127.0.0.1"});Kg.set(i,l),s._emit(e,a,l,A)}var Kg=new Map,l_e=class{constructor(e,t){y(this,"remoteAddress");y(this,"remotePort");y(this,"localAddress","127.0.0.1");y(this,"localPort",0);y(this,"connecting",!1);y(this,"destroyed",!1);y(this,"writable",!0);y(this,"readable",!0);y(this,"readyState","open");y(this,"bytesWritten",0);y(this,"_listeners",{});y(this,"_socketId");y(this,"_readableState",{endEmitted:!1,ended:!1});y(this,"_writableState",{finished:!1,errorEmitted:!1});this._socketId=e,this.remoteAddress=t?.host||"127.0.0.1",this.remotePort=t?.port||80}setTimeout(e,t){return this}setNoDelay(e){return this}setKeepAlive(e,t){return this}ref(){return this}unref(){return this}cork(){}uncork(){}pause(){return this}resume(){return this}address(){return{address:this.localAddress,family:"IPv4",port:this.localPort}}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}addListener(e,t){return this.on(e,t)}once(e,t){let r=(...n)=>{this.off(e,r),t(...n)};return this.on(e,r)}off(e,t){if(this._listeners[e]){let r=this._listeners[e].indexOf(t);r!==-1&&this._listeners[e].splice(r,1)}return this}removeListener(e,t){return this.off(e,t)}removeAllListeners(e){return e?delete this._listeners[e]:this._listeners={},this}emit(e,...t){let r=this._listeners[e];return zl(this,r,t)}listenerCount(e){return this._listeners[e]?.length||0}write(e,t,r){if(this.destroyed)return!1;let n=typeof t=="function"?t:r;if(typeof _upgradeSocketWriteRaw<"u"){let i;typeof Buffer<"u"&&Buffer.isBuffer(e)?i=e.toString("base64"):typeof e=="string"?i=typeof Buffer<"u"?Buffer.from(e).toString("base64"):btoa(e):e instanceof Uint8Array?i=typeof Buffer<"u"?Buffer.from(e).toString("base64"):btoa(String.fromCharCode(...e)):i=typeof Buffer<"u"?Buffer.from(String(e)).toString("base64"):btoa(String(e)),this.bytesWritten+=i.length,_upgradeSocketWriteRaw.applySync(void 0,[this._socketId,i])}return n&&n(),!0}end(e){return e&&this.write(e),typeof _upgradeSocketEndRaw<"u"&&!this.destroyed&&_upgradeSocketEndRaw.applySync(void 0,[this._socketId]),this.writable=!1,this.emit("finish"),this}destroy(e){return this.destroyed?this:(this.destroyed=!0,this.writable=!1,this.readable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,this._writableState.finished=!0,typeof _upgradeSocketDestroyRaw<"u"&&_upgradeSocketDestroyRaw.applySync(void 0,[this._socketId]),Kg.delete(this._socketId),e&&this.emit("error",e),this.emit("close",!1),this)}_pushData(e){this.emit("data",e)}_pushEnd(){this.readable=!1,this._readableState.endEmitted=!0,this._readableState.ended=!0,this._writableState.finished=!0,this.emit("end"),this.emit("close",!1),Kg.delete(this._socketId)}};function h_e(e,t,r,n){xW("upgrade",e,t,r,n)}function d_e(e,t,r,n){xW("connect",e,t,r,n)}function g_e(e,t){let r=Kg.get(e);if(r){let n=typeof Buffer<"u"?Buffer.from(t,"base64"):new Uint8Array(0);r._pushData(n)}}function p_e(e){let t=Kg.get(e);t&&t._pushEnd()}function A2(){this.statusCode=200,this.statusMessage="OK",this.headersSent=!1,this.writable=!0,this.writableFinished=!1,this.outputSize=0,this._headers=new Map,this._trailers=new Map,this._rawHeaderNames=new Map,this._rawTrailerNames=new Map,this._informational=[],this._pendingRawInfoBuffer="",this._chunks=[],this._chunksBytes=0,this._listeners={},this._closedPromise=new Promise(t=>{this._resolveClosed=t}),this._connectionEnded=!1,this._connectionReset=!1,this._writableState={length:0,ended:!1,finished:!1,objectMode:!1,corked:0};let e={writable:!0,writableCorked:0,writableHighWaterMark:16*1024,on(){return e},once(){return e},removeListener(){return e},destroy(){},end(){},cork(){},uncork(){},write:(t,r,n)=>this.write(t,r,n)};this.socket=e,this.connection=e}A2.prototype=Object.create(c0.prototype,{constructor:{value:A2,writable:!0,configurable:!0}});function UW(e){let t=e==="https"?"https:":"http:",r=new NB({keepAlive:!1,createConnection(s,o){return eI({...s,protocol:t},o)}});function n(s){return s.protocol?s:{...s,protocol:t}}function i(s){return s.agent!==void 0?s:{...s,_agentOSDefaultAgent:r}}return{request(s,o,a){let A,f=typeof o=="function"?o:a;if(typeof s=="string"){let l=new URL(s);A={protocol:l.protocol,hostname:l.hostname,port:l.port,path:l.pathname+l.search,...typeof o=="object"&&o?o:{}}}else s instanceof URL?A={protocol:s.protocol,hostname:s.hostname,port:s.port,path:s.pathname+s.search,...typeof o=="object"&&o?o:{}}:A={...s,...typeof o=="object"&&o?o:{}};return new Ug(i(n(A)),f)},get(s,o,a){let A,f=typeof o=="function"?o:a;if(typeof s=="string"){let p=new URL(s);A={protocol:p.protocol,hostname:p.hostname,port:p.port,path:p.pathname+p.search,method:"GET",...typeof o=="object"&&o?o:{}}}else s instanceof URL?A={protocol:s.protocol,hostname:s.hostname,port:s.port,path:s.pathname+s.search,method:"GET",...typeof o=="object"&&o?o:{}}:A={...s,...typeof o=="object"&&o?o:{},method:"GET"};let l=new Ug(i(n(A)),f);return l.end(),l},createServer(s,o){let a=typeof s=="function"?s:o,A=typeof s=="function"?null:s;return new dR(a,e==="https"?A:null)},Agent:NB,globalAgent:r,Server:kW,ServerResponse:A2,IncomingMessage:hu,ClientRequest:Ug,validateHeaderName:Gi,validateHeaderValue:Yi,_checkIsHttpToken:RW,_checkInvalidHeaderChar:DW,maxHeaderSize:65535,METHODS:[...VSe],STATUS_CODES:zg}}var gR=UW("http");Ge("_httpModule",gR);Ge("_dnsModule",fR);function E_e(e,t){if(nr("http stream event",e,t),e==="http_request"&&!(!t||t.serverId===void 0||t.requestId===void 0||typeof t.request!="string")){if(typeof _networkHttpServerRespondRaw>"u"){nr("http stream missing respond bridge");return}A_e(t.serverId,t.request).then(r=>{nr("http stream response",t.serverId,t.requestId),_networkHttpServerRespondRaw.applySync(void 0,[t.serverId,t.requestId,r])}).catch(r=>{let n=r instanceof Error?r.message:String(r);nr("http stream error",t.serverId,t.requestId,n),_networkHttpServerRespondRaw.applySync(void 0,[t.serverId,t.requestId,JSON.stringify({status:500,headers:[["content-type","text/plain"]],body:`Error: ${n}`,bodyEncoding:"utf8"})])})}}Ge("_httpServerDispatch",E_e);Ge("_httpServerUpgradeDispatch",h_e);Ge("_httpServerConnectDispatch",d_e);Ge("_http2Dispatch",MSe);Ge("_upgradeSocketData",g_e);var pR=UW("https");Ge("_httpsModule",pR);var ql=50*1024*1024,RG=64*1024,y_e=2e3,m_e=0,f2=yu.default?.Headers??yu.default?.default??yu.default,B_e=mu.default?.Request??mu.default?.default??mu.default,I_e=Bu.default?.Response??Bu.default?.default??Bu.default;function tI(e){if(!e)return{};if(e instanceof PA||typeof f2=="function"&&e instanceof f2)return Object.fromEntries(e.entries());if(s2(e)){let t={};for(let r=0;r<e.length;r+=2){let n=e[r],i=e[r+1];n!==void 0&&i!==void 0&&(t[n]=i)}return t}return typeof e.entries=="function"?Object.fromEntries(e.entries()):typeof e[Symbol.iterator]=="function"?Object.fromEntries(e):Object.fromEntries(new PA(e).entries())}function b_e(e){return new PA(tI(e))}function C_e(e={}){let t={...e};return Object.prototype.hasOwnProperty.call(t,"agent")&&delete t.agent,Object.prototype.hasOwnProperty.call(t,"headers")&&(t.headers=tI(t.headers)),t.body!=null&&t.duplex==null&&String(t.method??"GET").toUpperCase()!=="GET"&&String(t.method??"GET").toUpperCase()!=="HEAD"&&(t.duplex="half"),t}function Q_e(e){let t=tI(e?.headers);return Object.keys(t).some(n=>n.toLowerCase()==="accept-encoding")||(t["accept-encoding"]="gzip, deflate"),{...e||{},headers:t}}async function rI(e,t={}){if(typeof fG!="function")throw new Error("fetch requires undici to be configured");let r=e,n=t;e instanceof ER&&(r=e.url,n={method:e.method,headers:tI(e.headers),body:e.body,...t}),n=C_e(n),n=Q_e(n);let i=typeof r=="string"?r:r?.url?String(r.url):String(r),s=typeof _registerHandle=="function"?`fetch:${++m_e}`:null;s&&_registerHandle?.(s,`fetch ${i}`);let o=n.dispatcher==null&&typeof W1=="function"?W1():null;try{return await fG(r,o?{...n,dispatcher:o}:n)}finally{s&&_unregisterHandle?.(s)}}var PA=class LW{constructor(t){y(this,"_headers",{});t&&t!==null&&(t instanceof LW?this._headers={...t._headers}:Array.isArray(t)?t.forEach(([r,n])=>{this._headers[r.toLowerCase()]=n}):typeof t=="object"&&Object.entries(t).forEach(([r,n])=>{this._headers[r.toLowerCase()]=n}))}get(t){return this._headers[t.toLowerCase()]||null}set(t,r){this._headers[t.toLowerCase()]=r}has(t){return t.toLowerCase()in this._headers}delete(t){delete this._headers[t.toLowerCase()]}entries(){return Object.entries(this._headers)[Symbol.iterator]()}[Symbol.iterator](){return this.entries()}keys(){return Object.keys(this._headers)[Symbol.iterator]()}values(){return Object.values(this._headers)[Symbol.iterator]()}append(t,r){let n=t.toLowerCase();n in this._headers?this._headers[n]=this._headers[n]+", "+r:this._headers[n]=r}forEach(t){Object.entries(this._headers).forEach(([r,n])=>t(n,r,this))}},ER=class PW{constructor(t,r={}){y(this,"url");y(this,"method");y(this,"headers");y(this,"body");y(this,"mode");y(this,"credentials");y(this,"cache");y(this,"redirect");y(this,"referrer");y(this,"integrity");this.url=typeof t=="string"?t:t.url,this.method=r.method||(typeof t!="string"?t.method:void 0)||"GET",this.headers=b_e(r.headers||(typeof t!="string"?t.headers:void 0)),this.body=r.body||null,this.mode=r.mode||"cors",this.credentials=r.credentials||"same-origin",this.cache=r.cache||"default",this.redirect=r.redirect||"follow",this.referrer=r.referrer||"about:client",this.integrity=r.integrity||""}clone(){return new PW(this.url,this)}},OW=class uB{constructor(t,r={}){y(this,"_body");y(this,"status");y(this,"statusText");y(this,"headers");y(this,"ok");y(this,"type");y(this,"url");y(this,"redirected");this._body=t||null,this.status=r.status||200,this.statusText=r.statusText||"OK",this.headers=new PA(r.headers),this.ok=this.status>=200&&this.status<300,this.type="default",this.url="",this.redirected=!1}async text(){return String(this._body||"")}async json(){return JSON.parse(this._body||"{}")}get body(){let t=this._body;return t===null?null:{getReader(){let r=!1;return{async read(){return r?{done:!0}:(r=!0,{done:!1,value:new TextEncoder().encode(t)})}}}}}clone(){return new uB(this._body,{status:this.status,statusText:this.statusText})}static error(){return new uB(null,{status:0,statusText:""})}static redirect(t,r=302){return new uB(null,{status:r,headers:{Location:t}})}};Ge("_upgradeSocketEnd",p_e);Ge("fetch",rI);Ge("Headers",f2);Ge("Request",B_e);Ge("Response",I_e);var Fl=globalThis.Blob;typeof Fl>"u"&&(Fl=class{},Ge("Blob",Fl));var d1=globalThis.File;typeof d1>"u"&&(d1=class extends Fl{constructor(r=[],n="",i={}){super(r,i);y(this,"name");y(this,"lastModified");y(this,"webkitRelativePath");this.name=String(n),this.lastModified=typeof i.lastModified=="number"?i.lastModified:Date.now(),this.webkitRelativePath=""}},Ge("File",d1));if(typeof globalThis.FormData>"u"){class e{constructor(){y(this,"_entries",[])}append(r,n){this._entries.push([r,n])}get(r){let n=this._entries.find(([i])=>i===r);return n?n[1]:null}getAll(r){return this._entries.filter(([n])=>n===r).map(([,n])=>n)}has(r){return this._entries.some(([n])=>n===r)}delete(r){this._entries=this._entries.filter(([n])=>n!==r)}entries(){return this._entries[Symbol.iterator]()}[Symbol.iterator](){return this.entries()}}Ge("FormData",e)}var w_e="dgram-socket:",Xg=new Map,FB=new Map;function S_e(e){e?._socketId&&FB.set(e._socketId,e);let t=e?._localPort;if(typeof t!="number")return;let r=Xg.get(t);r||(r=new Set,Xg.set(t,r)),r.add(e)}function __e(e){e?._socketId&&FB.get(e._socketId)===e&&FB.delete(e._socketId);let t=e?._localPort;if(typeof t!="number")return;let r=Xg.get(t);r&&(r.delete(e),r.size===0&&Xg.delete(t))}function v_e(e){return e==="127.0.0.1"||e==="::1"||e==="localhost"}function HW(e){if(X("dgramWakeAttempts"),!e||e._closed||!e._bound){X("dgramWakeInvalidTargets");return}if(e._receiveLoopRunning){X("dgramWakeAlreadyRunning"),e._pendingReceiveWake=!0;return}if(!e._receivePollTimer){X("dgramWakeNoTimer"),e._pendingReceiveWake=!0,queueMicrotask(()=>{!e._closed&&e._bound&&e._pendingReceiveWake&&!e._receiveLoopRunning&&(e._pendingReceiveWake=!1,e._nextReceivePumpOrigin="eventWake",e._pumpMessages())});return}clearTimeout(e._receivePollTimer),e._receivePollTimer=null,X("dgramEventWakeups"),queueMicrotask(()=>{!e._closed&&e._bound&&(e._nextReceivePumpOrigin="eventWake",e._pumpMessages())})}function qW(){return lr("Bad socket type specified. Valid types are: udp4, udp6","ERR_SOCKET_BAD_TYPE")}function R_e(){let e=new Error("Socket is already bound");return e.code="ERR_SOCKET_ALREADY_BOUND",e}function DG(){return new Error("getsockname EBADF")}function In(e,t,r){return lr(`The "${e}" argument must be of type ${t}. Received ${Yn(r)}`,"ERR_INVALID_ARG_TYPE")}function TG(e){return lr(`The "${e}" argument must be specified`,"ERR_MISSING_ARGS")}function bg(){return MB("Not running","ERR_SOCKET_DGRAM_NOT_RUNNING")}function D_e(e){switch(e){case"EBADF":return-9;case"EINVAL":return-22;case"EADDRNOTAVAIL":return-99;case"ENOPROTOOPT":return-92}}function Ca(e,t){let r=new Error(`${e} ${t}`);return r.code=t,r.errno=D_e(t),r.syscall=e,r}function T_e(e){return lr(`The "ttl" argument must be of type number. Received ${Yn(e)}`,"ERR_INVALID_ARG_TYPE")}function N_e(){return lr("Buffer size must be a positive integer","ERR_SOCKET_BAD_BUFFER_SIZE")}function g1(e,t){let r=`uv_${e}_buffer_size`,n={errno:t==="EBADF"?-9:-22,code:t,message:t==="EBADF"?"bad file descriptor":"invalid argument",syscall:r},i=new Error(`Could not get or set buffer size: ${r} returned ${t} (${n.message})`);i.name="SystemError [ERR_SOCKET_BUFFER_SIZE]",i.code="ERR_SOCKET_BUFFER_SIZE",i.info=n;let s=n.errno,o=r;return Object.defineProperty(i,"errno",{enumerable:!0,configurable:!0,get(){return s},set(a){s=a}}),Object.defineProperty(i,"syscall",{enumerable:!0,configurable:!0,get(){return o},set(a){o=a}}),i}function NG(e){return e<=0?e:process.platform==="linux"?e*2:e}function MG(e,t){if(typeof e!="number")throw T_e(e);if(!Number.isInteger(e)||e<=0||e>=256)throw Ca(t,"EINVAL");return e}function GW(e){if(!u0(e))return!1;let t=Number(e.split(".")[0]);return t>=224&&t<=239}function YW(e){return u0(e)&&!GW(e)&&e!=="255.255.255.255"}function WW(e){let t=e.indexOf("%"),r=t===-1?e:e.slice(0,t);return $B(e)&&r.toLowerCase().startsWith("ff")}function Jm(e,t,r){if(typeof r!="string")throw In(t==="addSourceSpecificMembership"||t==="dropSourceSpecificMembership"?"groupAddress":"multicastAddress","string",r);if(!(e==="udp6"?WW(r):GW(r)))throw Ca(t,"EINVAL");return r}function FG(e,t,r){if(typeof r!="string")throw In("sourceAddress","string",r);if(!(e==="udp6"?$B(r)&&!WW(r):YW(r)))throw Ca(t,"EINVAL");return r}function kG(e){if(e==="udp4"||e==="udp6")return e;throw qW()}function M_e(e){if(typeof e=="string")return{type:kG(e)};if(!e||typeof e!="object"||Array.isArray(e))throw qW();let t=e,r={type:kG(t.type)};if(t.recvBufferSize!==void 0){if(typeof t.recvBufferSize!="number")throw i2("options.recvBufferSize","number",t.recvBufferSize);r.recvBufferSize=t.recvBufferSize}if(t.sendBufferSize!==void 0){if(typeof t.sendBufferSize!="number")throw i2("options.sendBufferSize","number",t.sendBufferSize);r.sendBufferSize=t.sendBufferSize}return r}function u2(e,t,r){if(e==null||e==="")return r;if(typeof e!="string")throw In("address","string",e);return e==="localhost"?t==="udp6"?"::1":"127.0.0.1":e}function c2(e){if(typeof e!="number")throw In("port","number",e);if(!J1(e))throw V1(e);return e}function l2(e){if(typeof e=="string"||Buffer.isBuffer(e))return Buffer.from(e);if(ArrayBuffer.isView(e))return Buffer.from(e.buffer,e.byteOffset,e.byteLength);throw In("msg","string or Buffer or Uint8Array or DataView",e)}function F_e(e){return Array.isArray(e)?Buffer.concat(e.map(t=>l2(t))):l2(e)}function Cg(e){if(typeof e!="string")return e;try{return JSON.parse(e)}catch{return e}}function k_e(e){if(Buffer.isBuffer(e)||e instanceof Uint8Array)return Buffer.from(e);if(typeof e=="string")return Buffer.from(e,"base64");if(e&&typeof e=="object"){if(e.__type==="Buffer"&&typeof e.data=="string")return Buffer.from(e.data,"base64");if(e.__agentOSType==="bytes"&&typeof e.base64=="string")return Buffer.from(e.base64,"base64")}return Buffer.alloc(0)}function x_e(e,t){let r,n,i;if(typeof e[0]=="function")i=e[0];else if(e[0]&&typeof e[0]=="object"&&!Array.isArray(e[0])){let s=e[0];r=s.port,n=s.address,i=e[1]}else r=e[0],typeof e[1]=="function"?i=e[1]:(n=e[1],i=e[2]);if(i!==void 0&&typeof i!="function")throw Pl("callback",i);return{port:r===void 0?0:c2(r),address:u2(n,t,t==="udp6"?"::":"0.0.0.0"),callback:i}}function U_e(e,t){if(e.length===0)throw In("msg","string or Buffer or Uint8Array or DataView",void 0);let r=e[0];if(typeof e[1]=="number"&&typeof e[2]=="number"&&e.length>=4){let s=l2(r),o=e[1],a=e[2],A=typeof e[4]=="function"?e[4]:e[5];if(A!==void 0&&typeof A!="function")throw Pl("callback",A);return{data:Buffer.from(s.subarray(o,o+a)),port:c2(e[3]),address:u2(typeof e[4]=="function"?void 0:e[4],t,t==="udp6"?"::1":"127.0.0.1"),callback:A}}let i=typeof e[2]=="function"?e[2]:e[3];if(i!==void 0&&typeof i!="function")throw Pl("callback",i);return{data:F_e(r),port:c2(e[1]),address:u2(typeof e[2]=="function"?void 0:e[2],t,t==="udp6"?"::1":"127.0.0.1"),callback:i}}var xG=class{constructor(e,t){y(this,"_type");y(this,"_socketId");y(this,"_listeners",{});y(this,"_onceListeners",{});y(this,"_bindPromise",null);y(this,"_receiveLoopRunning",!1);y(this,"_receivePollTimer",null);y(this,"_pendingReceiveWake",!1);y(this,"_nextReceivePumpOrigin",null);y(this,"_refed",!0);y(this,"_closed",!1);y(this,"_bound",!1);y(this,"_handleRefId",null);y(this,"_localAddress");y(this,"_localPort");y(this,"_localFamily");y(this,"_recvBufferSize");y(this,"_sendBufferSize");y(this,"_memberships",new Set);y(this,"_multicastInterface");y(this,"_broadcast",!1);y(this,"_multicastLoopback",1);y(this,"_multicastTtl",1);y(this,"_ttl",64);if(typeof _dgramSocketCreateRaw>"u")throw new Error("dgram.createSocket is not supported in sandbox");let r=M_e(e);this._type=r.type;let n=Cg(_dgramSocketCreateRaw.applySync(void 0,[{type:this._type}]));this._socketId=String(n?.socketId??n),t&&this.on("message",t),r.recvBufferSize!==void 0&&this._setBufferSize("recv",r.recvBufferSize,!1),r.sendBufferSize!==void 0&&this._setBufferSize("send",r.sendBufferSize,!1)}bind(...e){let{port:t,address:r,callback:n}=x_e(e,this._type);return this._bindInternal(t,r,n),this}send(...e){let{data:t,port:r,address:n,callback:i}=U_e(e,this._type);this._sendInternal(t,r,n,i)}sendto(...e){this.send(...e)}address(){if(typeof _dgramSocketAddressRaw>"u")throw DG();try{return Cg(_dgramSocketAddressRaw.applySync(void 0,[this._socketId]))}catch{throw DG()}}close(e){if(e!==void 0&&typeof e!="function")throw Pl("callback",e);if(e&&this.once("close",e),this._closed)return this;if(this._closed=!0,__e(this),this._bound=!1,this._clearReceivePollTimer(),this._syncHandleRef(),typeof _dgramSocketCloseRaw>"u")return queueMicrotask(()=>{this._emit("close")}),this;try{_dgramSocketCloseRaw.applySyncPromise(void 0,[this._socketId])}finally{queueMicrotask(()=>{this._emit("close")})}return this}ref(){return this._refed=!0,this._syncHandleRef(),this._receivePollTimer&&typeof this._receivePollTimer.ref=="function"&&this._receivePollTimer.ref(),this._bound&&!this._closed&&!this._receiveLoopRunning&&this._pumpMessages(),this}unref(){return this._refed=!1,this._syncHandleRef(),this._receivePollTimer&&typeof this._receivePollTimer.unref=="function"&&this._receivePollTimer.unref(),this}setRecvBufferSize(e){this._setBufferSize("recv",e)}setSendBufferSize(e){this._setBufferSize("send",e)}getRecvBufferSize(){return this._getBufferSize("recv")}getSendBufferSize(){return this._getBufferSize("send")}setBroadcast(e){this._ensureBoundForSocketOption("setBroadcast"),this._broadcast=!!e}setTTL(e){return this._ensureBoundForSocketOption("setTTL"),this._ttl=MG(e,"setTTL"),this._ttl}setMulticastTTL(e){return this._ensureBoundForSocketOption("setMulticastTTL"),this._multicastTtl=MG(e,"setMulticastTTL"),this._multicastTtl}setMulticastLoopback(e){return this._ensureBoundForSocketOption("setMulticastLoopback"),this._multicastLoopback=Number(e),this._multicastLoopback}addMembership(e,t){if(e===void 0)throw TG("multicastAddress");if(this._closed)throw bg();let r=Jm(this._type,"addMembership",e);if(t!==void 0&&typeof t!="string")throw In("multicastInterface","string",t);this._memberships.add(`${r}|${t??""}`)}dropMembership(e,t){if(e===void 0)throw TG("multicastAddress");if(this._closed)throw bg();let r=Jm(this._type,"dropMembership",e);if(t!==void 0&&typeof t!="string")throw In("multicastInterface","string",t);let n=`${r}|${t??""}`;if(!this._memberships.has(n))throw Ca("dropMembership","EADDRNOTAVAIL");this._memberships.delete(n)}addSourceSpecificMembership(e,t,r){if(this._closed)throw bg();if(typeof e!="string")throw In("sourceAddress","string",e);if(typeof t!="string")throw In("groupAddress","string",t);let n=FG(this._type,"addSourceSpecificMembership",e),i=Jm(this._type,"addSourceSpecificMembership",t);if(r!==void 0&&typeof r!="string")throw In("multicastInterface","string",r);this._memberships.add(`${n}>${i}|${r??""}`)}dropSourceSpecificMembership(e,t,r){if(this._closed)throw bg();if(typeof e!="string")throw In("sourceAddress","string",e);if(typeof t!="string")throw In("groupAddress","string",t);let n=FG(this._type,"dropSourceSpecificMembership",e),i=Jm(this._type,"dropSourceSpecificMembership",t);if(r!==void 0&&typeof r!="string")throw In("multicastInterface","string",r);let s=`${n}>${i}|${r??""}`;if(!this._memberships.has(s))throw Ca("dropSourceSpecificMembership","EADDRNOTAVAIL");this._memberships.delete(s)}setMulticastInterface(e){if(typeof e!="string")throw In("interfaceAddress","string",e);if(this._closed)throw bg();if(this._ensureBoundForSocketOption("setMulticastInterface"),this._type==="udp4"){if(e==="0.0.0.0"){this._multicastInterface=e;return}if(!u0(e))throw Ca("setMulticastInterface","ENOPROTOOPT");if(!YW(e))throw Ca("setMulticastInterface","EADDRNOTAVAIL");this._multicastInterface=e;return}if(e===""||e==="undefined"||!$B(e))throw Ca("setMulticastInterface","EINVAL");this._multicastInterface=e}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this}addListener(e,t){return this.on(e,t)}once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),this}removeListener(e,t){let r=this._listeners[e];if(r){let i=r.indexOf(t);i>=0&&r.splice(i,1)}let n=this._onceListeners[e];if(n){let i=n.indexOf(t);i>=0&&n.splice(i,1)}return this}off(e,t){return this.removeListener(e,t)}emit(e,...t){return this._emit(e,...t)}async _bindInternal(e,t,r){if(!this._closed){if(this._bound||this._bindPromise)throw R_e();if(typeof _dgramSocketBindRaw>"u")throw new Error("dgram.bind is not supported in sandbox");return this._bindPromise=(async()=>{try{let n=Cg(_dgramSocketBindRaw.applySyncPromise(void 0,[this._socketId,{port:e,address:t}]));this._applyBoundAddress(n),this._bound=!0,S_e(this),this._applyInitialBufferSizes(),this._syncHandleRef(),queueMicrotask(()=>{this._closed||(this._emit("listening"),r?.call(this),this._nextReceivePumpOrigin="bind",this._pumpMessages())})}catch(n){throw queueMicrotask(()=>{this._emit("error",n)}),n}finally{this._bindPromise=null}})(),this._bindPromise}}async _ensureBound(){if(!this._bound){if(this._bindPromise){await this._bindPromise;return}await this._bindInternal(0,this._type==="udp6"?"::":"0.0.0.0")}}async _sendInternal(e,t,r,n){try{if(await this._ensureBound(),this._closed||typeof _dgramSocketSendRaw>"u")return;let i=Cg(_dgramSocketSendRaw.applySyncPromise(void 0,[this._socketId,e,{port:t,address:r}]));if(this._applyBoundAddress(i),v_e(r)){let s=Xg.get(t);if(s){X("dgramWakeLoopbackHits");for(let o of s)HW(o)}else X("dgramWakeLoopbackMisses")}n&&queueMicrotask(()=>{n(null,typeof i?.bytes=="number"?i.bytes:e.length)})}catch(i){if(n){queueMicrotask(()=>{n(i)});return}queueMicrotask(()=>{this._emit("error",i)})}}async _pumpMessages(){if(this._receiveLoopRunning||this._closed||!this._bound||typeof _dgramSocketRecvRaw>"u")return;let e=this._nextReceivePumpOrigin;this._nextReceivePumpOrigin=null;let t=e==="timer"?vB:0;this._receiveLoopRunning=!0;try{for(;!this._closed&&this._bound;){let r=Cg(_dgramSocketRecvRaw.applySync(void 0,[this._socketId,t]));if(r===nR||!r){if(this._pendingReceiveWake){this._pendingReceiveWake=!1,this._nextReceivePumpOrigin="eventWake";continue}this._receivePollTimer=setTimeout(()=>{this._receivePollTimer=null,this._nextReceivePumpOrigin="timer",this._pumpMessages()},vB),!this._refed&&typeof this._receivePollTimer.unref=="function"&&this._receivePollTimer.unref();return}if(r.type==="message"){let n=k_e(r.data);this._emit("message",n,{address:r.remoteAddress,family:r.remoteFamily??socketFamilyForAddress(r.remoteAddress),port:r.remotePort,size:n.length});continue}if(r.type==="error"){let n=new Error(typeof r.message=="string"?r.message:"secure-exec dgram socket error");typeof r.code=="string"&&r.code.length>0&&(n.code=r.code),this._emit("error",n)}}}catch(r){this._emit("error",r)}finally{this._receiveLoopRunning=!1,this._pendingReceiveWake&&!this._closed&&this._bound&&(this._pendingReceiveWake=!1,this._nextReceivePumpOrigin="eventWake",queueMicrotask(()=>{!this._closed&&this._bound&&this._pumpMessages()}))}}_applyBoundAddress(e){if(!e||typeof e!="object")return;let t=typeof e.localPort=="number"?e.localPort:e.port;typeof t=="number"&&(this._localPort=t);let r=typeof e.localAddress=="string"?e.localAddress:e.address;typeof r=="string"&&(this._localAddress=r);let n=typeof e.localFamily=="string"?e.localFamily:e.family;typeof n=="string"&&(this._localFamily=n)}_clearReceivePollTimer(){this._receivePollTimer&&(clearTimeout(this._receivePollTimer),this._receivePollTimer=null)}_ensureBoundForSocketOption(e){if(!this._bound||this._closed)throw Ca(e,"EBADF")}_setBufferSize(e,t,r=!0){if(!Number.isInteger(t)||t<=0||!Number.isFinite(t))throw N_e();if(t>2147483647)throw g1(e,"EINVAL");if(r&&(!this._bound||this._closed))throw g1(e,"EBADF");if(typeof _dgramSocketSetBufferSizeRaw<"u"&&this._bound&&!this._closed&&_dgramSocketSetBufferSizeRaw.applySync(void 0,[this._socketId,e,t]),e==="recv"){this._recvBufferSize=t;return}this._sendBufferSize=t}_getBufferSize(e){if(!this._bound||this._closed)throw g1(e,"EBADF");let t=e==="recv"?this._recvBufferSize??0:this._sendBufferSize??0;if(typeof _dgramSocketGetBufferSizeRaw>"u")return NG(t);let r=_dgramSocketGetBufferSizeRaw.applySync(void 0,[this._socketId,e]);return NG(r>0?r:t)}_applyInitialBufferSizes(){this._recvBufferSize!==void 0&&this._setBufferSize("recv",this._recvBufferSize),this._sendBufferSize!==void 0&&this._setBufferSize("send",this._sendBufferSize)}_syncHandleRef(){if(!this._bound||this._closed||!this._refed){this._handleRefId&&typeof _unregisterHandle=="function"&&_unregisterHandle(this._handleRefId),this._handleRefId=null;return}let e=`${w_e}${this._socketId}`;this._handleRefId!==e&&(this._handleRefId&&typeof _unregisterHandle=="function"&&_unregisterHandle(this._handleRefId),this._handleRefId=e,typeof _registerHandle=="function"&&_registerHandle(this._handleRefId,"dgram socket"))}_emit(e,...t){let r=!1,n=this._listeners[e];if(n)for(let s of[...n])s(...t),r=!0;let i=this._onceListeners[e];if(i){this._onceListeners[e]=[];for(let s of[...i])s(...t),r=!0}return r}},VW={Socket:xG,createSocket(e,t){return new xG(e,t)}};Ge("_tlsModule",vW);Ge("_dgramSocketDispatch",e=>{let t=FB.get(e?.socketId);t&&HW(t)});function L_e(e){if(!e||typeof e!="object"||Array.isArray(e)||Buffer.isBuffer(e)||e instanceof Uint8Array)return!1;let t=Object.getPrototypeOf(e);return t===Object.prototype||t===null}function kB(e){return e==null||typeof e=="boolean"||typeof e=="number"||typeof e=="string"?e??null:typeof e=="bigint"?{__agentosSqliteType:"bigint",value:e.toString()}:Buffer.isBuffer(e)||e instanceof Uint8Array?{__agentosSqliteType:"uint8array",value:Buffer.from(e).toString("base64")}:Array.isArray(e)?e.map(t=>kB(t)):e&&typeof e=="object"?Object.fromEntries(Object.entries(e).map(([t,r])=>[t,kB(r)])):null}function Lg(e){return e==null||typeof e=="boolean"||typeof e=="number"||typeof e=="string"?e??null:Array.isArray(e)?e.map(t=>Lg(t)):e&&typeof e=="object"?e.__agentosSqliteType==="bigint"&&typeof e.value=="string"?BigInt(e.value):e.__agentosSqliteType==="uint8array"&&typeof e.value=="string"?Buffer.from(e.value,"base64"):Object.fromEntries(Object.entries(e).map(([t,r])=>[t,Lg(r)])):e}function cB(e){return!Array.isArray(e)||e.length===0?null:e.length===1&&L_e(e[0])?kB(e[0]):e.map(t=>kB(t))}function Zr(e,t,r){if(typeof e=="function")return Lg(e(...t));if(!e)throw new Error(`sqlite bridge is not available for ${r}`);if(typeof e.applySync=="function")return Lg(e.applySync(void 0,t));if(typeof e.applySyncPromise=="function")return Lg(e.applySyncPromise(void 0,t));throw new Error(`sqlite bridge is not available for ${r}`)}var P_e=Ce("_sqliteConstantsRaw"),O_e=Ce("_sqliteDatabaseOpenRaw"),H_e=Ce("_sqliteDatabaseCloseRaw"),q_e=Ce("_sqliteDatabaseExecRaw"),G_e=Ce("_sqliteDatabaseQueryRaw"),Y_e=Ce("_sqliteDatabasePrepareRaw"),W_e=Ce("_sqliteDatabaseLocationRaw"),V_e=Ce("_sqliteDatabaseCheckpointRaw"),J_e=Ce("_sqliteStatementRunRaw"),j_e=Ce("_sqliteStatementGetRaw"),z_e=Ce("_sqliteStatementAllRaw"),K_e=Ce("_sqliteStatementColumnsRaw"),X_e=Ce("_sqliteStatementSetReturnArraysRaw"),Z_e=Ce("_sqliteStatementSetReadBigIntsRaw"),$_e=Ce("_sqliteStatementSetAllowBareNamedParametersRaw"),eve=Ce("_sqliteStatementSetAllowUnknownNamedParametersRaw"),tve=Ce("_sqliteStatementFinalizeRaw"),xB=class{constructor(e,t){this._database=e,this._statementId=t,this._finalized=!1}_assertOpen(){if(this._database._assertOpen(),this._finalized)throw new Error("SQLite statement is already finalized")}run(...e){return this._assertOpen(),Zr(J_e,[this._statementId,cB(e)],"statement.run")}get(...e){return this._assertOpen(),Zr(j_e,[this._statementId,cB(e)],"statement.get")}all(...e){return this._assertOpen(),Zr(z_e,[this._statementId,cB(e)],"statement.all")}iterate(...e){return this.all(...e)[Symbol.iterator]()}columns(){return this._assertOpen(),Zr(K_e,[this._statementId],"statement.columns")}setReturnArrays(e){this._assertOpen(),Zr(X_e,[this._statementId,!!e],"statement.setReturnArrays")}setReadBigInts(e){this._assertOpen(),Zr(Z_e,[this._statementId,!!e],"statement.setReadBigInts")}setAllowBareNamedParameters(e){this._assertOpen(),Zr($_e,[this._statementId,!!e],"statement.setAllowBareNamedParameters")}setAllowUnknownNamedParameters(e){this._assertOpen(),Zr(eve,[this._statementId,!!e],"statement.setAllowUnknownNamedParameters")}finalize(){return this._finalized||(this._database._assertOpen(),Zr(tve,[this._statementId],"statement.finalize"),this._finalized=!0),null}},h2=class{constructor(e=":memory:",t=void 0){this._closed=!1,this._databaseId=Zr(O_e,[typeof e=="string"?e:":memory:",t??null],"database.open")}_assertOpen(){if(this._closed)throw new Error("SQLite database is already closed")}close(){return this._closed||(Zr(H_e,[this._databaseId],"database.close"),this._closed=!0),null}exec(e){return this._assertOpen(),Zr(q_e,[this._databaseId,String(e??"")],"database.exec")}query(e,t=null,r=null){this._assertOpen();let n=t===null?null:cB(Array.isArray(t)?t:[t]);return Zr(G_e,[this._databaseId,String(e??""),n,r??null],"database.query")}prepare(e){this._assertOpen();let t=Zr(Y_e,[this._databaseId,String(e??"")],"database.prepare");return new xB(this,t)}location(){return this._assertOpen(),Zr(W_e,[this._databaseId],"database.location")}checkpoint(){return this._assertOpen(),Zr(V_e,[this._databaseId],"database.checkpoint")}};h2.prototype[Symbol.dispose]=h2.prototype.close;xB.prototype[Symbol.dispose]=xB.prototype.finalize;var p1;function rve(){return p1===void 0&&(p1=Object.freeze(Zr(P_e,[],"constants")??{})),p1}var nve={DatabaseSync:h2,StatementSync:xB,get constants(){return rve()}};Ge("_dgramModule",VW);Ge("_sqliteModule",nve);var JW={};O2(JW,{ClientRequest:()=>Ug,Headers:()=>PA,IncomingMessage:()=>hu,Request:()=>ER,Response:()=>OW,default:()=>ive,dns:()=>fR,fetch:()=>rI,http:()=>gR,http2:()=>AR,https:()=>pR});var ive={fetch:rI,Headers:PA,Request:ER,Response:OW,dns:fR,http:gR,https:pR,http2:AR,IncomingMessage:hu,ClientRequest:Ug,net:lW,tls:vW,dgram:VW},qt,Qg,ya,No=Symbol.for("nodejs.util.inspect.custom"),ka=Symbol.toStringTag,yR="ERR_INVALID_THIS",sve="ERR_MISSING_ARGS",ove="ERR_INVALID_URL",ave="ERR_ARG_NOT_ITERABLE",Ave="ERR_INVALID_TUPLE",fve="URLSearchParams",UB=Symbol("secureExecLinkedURLSearchParams"),UG=Symbol.for("secureExec.blobUrlStore"),E1=Symbol.for("secureExec.blobUrlCounter"),uve=["append","delete","get","getAll","has"],cve=["append","set"],lve={"http:":0,"https:":2,"ws:":4,"wss:":5,"file:":6,"ftp:":8},jW=new WeakSet,d2=new WeakMap,zW=new WeakSet,y1=new WeakMap;function qA(e,t){let r=new TypeError(e);return r.code=t,r}function hve(){let e=new TypeError("Invalid URL");return e.code=ove,e}function jm(){return new TypeError("Receiver must be an instance of class URL")}function Qa(e){return qA(e,sve)}function dve(){return qA("Query pairs must be iterable",ave)}function m1(){return qA("Each query pair must be an iterable [name, value] tuple",Ave)}function gve(){return new TypeError("Cannot convert a Symbol value to a string")}function pve(e){if(typeof e=="symbol")throw gve();return String(e)}function Eve(e){let t="";for(let r=0;r<e.length;r+=1){let n=e.charCodeAt(r);if(n>=55296&&n<=56319){let i=r+1;if(i<e.length){let s=e.charCodeAt(i);if(s>=56320&&s<=57343){t+=e[r]+e[i],r=i;continue}}t+="\uFFFD";continue}if(n>=56320&&n<=57343){t+="\uFFFD";continue}t+=e[r]}return t}function Kt(e){return Eve(pve(e))}function yn(e){if(!jW.has(e))throw qA('Value of "this" must be of type URLSearchParams',yR)}function lB(e){if(!zW.has(e))throw qA('Value of "this" must be of type URLSearchParamsIterator',yR)}function Hn(e){let t=d2.get(e);if(!t)throw qA('Value of "this" must be of type URLSearchParams',yR);return t.getImpl()}function yve(e){let t=0;for(let r of e)t++;return t}function LG(e){return e>=48&&e<=57||e>=65&&e<=70||e>=97&&e<=102}function PG(e){return e>=48&&e<=57?e-48:e>=65&&e<=70?e-55:e-87}function mve(e,t){if(t<=127){e.push(t);return}if(t<=2047){e.push(192|t>>6,128|t&63);return}if(t<=65535){e.push(224|t>>12,128|t>>6&63,128|t&63);return}e.push(240|t>>18,128|t>>12&63,128|t>>6&63,128|t&63)}function OG(e){let t=String(e).replace(/\+/g," "),r="";for(let n=0;n<t.length;n+=1){if(t.charCodeAt(n)===37&&n+2<t.length){let s=[],o=n;for(;o+2<t.length&&t.charCodeAt(o)===37;){let a=t.charCodeAt(o+1),A=t.charCodeAt(o+2);if(!LG(a)||!LG(A))break;s.push((PG(a)<<4)+PG(A)),o+=3}if(s.length>0){r+=new Ru().decode(Uint8Array.from(s)),n=o-1;continue}}let i=t.codePointAt(n);r+=String.fromCodePoint(i),i>65535&&(n+=1)}return r}function HG(e){let t=String(e),r=[];for(let i=0;i<t.length;i+=1){let s=t.codePointAt(i);mve(r,s),s>65535&&(i+=1)}let n="";for(let i of r){if(i===32){n+="+";continue}if(i>=48&&i<=57||i>=65&&i<=90||i>=97&&i<=122||i===42||i===45||i===46||i===95){n+=String.fromCharCode(i);continue}n+=`%${i.toString(16).toUpperCase().padStart(2,"0")}`}return n}function Bve(e,t){let r=Math.min(e.length,t.length);for(let n=0;n<r;n+=1){let i=e.charCodeAt(n)-t.charCodeAt(n);if(i!==0)return i}return e.length-t.length}function Ive(e){if(e&&typeof e=="object"&&UB in e)return e;if(e!=null){if(typeof e=="string")return Kt(e);if(typeof e=="object"||typeof e=="function"){let t=e[Symbol.iterator];if(t!==void 0){if(typeof t!="function")throw dve();let n=[];for(let i of e){if(i==null||typeof i[Symbol.iterator]!="function")throw m1();let o=Array.from(i);if(o.length!==2)throw m1();n.push([Kt(o[0]),Kt(o[1])])}return n}let r=[];for(let n of Reflect.ownKeys(e))Object.prototype.propertyIsEnumerable.call(e,n)&&r.push([Kt(n),Kt(e[n])]);return r}return Kt(e)}}var B1=typeof globalThis.URLSearchParams=="function"&&globalThis.URLSearchParams.__secureExecBootstrapStub!==!0?globalThis.URLSearchParams:class{constructor(t=""){if(this._pairs=[],typeof t=="string"){let r=t.replace(/^\?/,"");if(!r)return;for(let n of r.split("&")){if(!n)continue;let[i,...s]=n.split("=");this._pairs.push([OG(i),OG(s.join("="))])}return}if(Array.isArray(t)){for(let r of t)r==null||r.length!==2||this._pairs.push([String(r[0]),String(r[1])]);return}if(t&&typeof t=="object")for(let[r,n]of Object.entries(t))this._pairs.push([String(r),String(n)])}append(t,r){this._pairs.push([String(t),String(r)])}delete(t){let r=String(t);this._pairs=this._pairs.filter(([n])=>n!==r)}get(t){let r=String(t),n=this._pairs.find(([i])=>i===r);return n?n[1]:null}getAll(t){let r=String(t);return this._pairs.filter(([n])=>n===r).map(([,n])=>n)}has(t){let r=String(t);return this._pairs.some(([n])=>n===r)}set(t,r){let n=String(t),i=String(r),s=[],o=!1;for(let[a,A]of this._pairs){if(a!==n){s.push([a,A]);continue}o||(o=!0,s.push([n,i]))}o||s.push([n,i]),this._pairs=s}sort(){this._pairs=this._pairs.map((t,r)=>({pair:t,index:r})).sort((t,r)=>{let n=Bve(t.pair[0],r.pair[0]);return n!==0?n:t.index-r.index}).map(({pair:t})=>t)}entries(){return this._pairs[Symbol.iterator]()}keys(){return this._pairs.map(([t])=>t)[Symbol.iterator]()}values(){return this._pairs.map(([,t])=>t)[Symbol.iterator]()}[Symbol.iterator](){return this.entries()}toString(){return this._pairs.map(([t,r])=>`${HG(t)}=${HG(r)}`).join("&")}};function bve(e){return typeof e=="string"?new B1(e):e===void 0?new B1:new B1(e)}function KW(e,t,r){if(e.length===0)return r;let n=`{ ${e.join(", ")} }`,i=t?.breakLength??1/0;return n.length<=i?n:`{
-${e.join(`,
-  `)} }`}function Cve(e){let t=e.href,r=t.indexOf(":")+1,n=t.indexOf("@"),i=t.indexOf("/",r+2),s=t.indexOf("?"),o=t.indexOf("#"),a=e.username.length>0?t.indexOf(":",r+2):r+2,A=n===-1?r+2:n,f=i===-1?t.length:i-(e.port.length>0?e.port.length+1:0),l=e.port.length>0?Number(e.port):null;return{href:t,protocol_end:r,username_end:a,host_start:A,host_end:f,pathname_start:i===-1?t.length:i,search_start:s===-1?t.length:s,hash_start:o===-1?t.length:o,port:l,scheme_type:lve[e.protocol]??1,hasPort:e.port.length>0,hasSearch:e.search.length>0,hasHash:e.hash.length>0}}function Qve(e,t,r){let n=Cve(e),i=typeof t=="function"?o=>t(o,r):o=>JSON.stringify(o),s=n.port===null?"null":String(n.port);return["URLContext {",`    href: ${i(n.href)},`,`    protocol_end: ${n.protocol_end},`,`    username_end: ${n.username_end},`,`    host_start: ${n.host_start},`,`    host_end: ${n.host_end},`,`    pathname_start: ${n.pathname_start},`,`    search_start: ${n.search_start},`,`    hash_start: ${n.hash_start},`,`    port: ${s},`,`    scheme_type: ${n.scheme_type},`,"    [hasPort]: [Getter],","    [hasSearch]: [Getter],","    [hasHash]: [Getter]","  }"].join(`
-`)}function qG(){let e=globalThis,t=e[UG];if(t instanceof Map)return t;let r=new Map;return e[UG]=r,r}function wve(){let e=globalThis,t=typeof e[E1]=="number"?e[E1]:1;return e[E1]=t+1,t}var kA=class XW{constructor(t){zW.add(this),y1.set(this,{values:t,index:0})}next(){lB(this);let t=y1.get(this);if(t.index>=t.values.length)return{value:void 0,done:!0};let r=t.values[t.index];return t.index+=1,{value:r,done:!1}}[No](t,r,n){if(lB(this),t<0)return"[Object]";let i=y1.get(this),s=typeof n=="function"?a=>n(a,r):a=>JSON.stringify(a),o=i.values.slice(i.index).map(a=>s(a));return`URLSearchParams Iterator ${KW(o,r,"{  }")}`}get[ka](){return this!==XW.prototype&&lB(this),"URLSearchParams Iterator"}};Object.defineProperties(kA.prototype,{next:{value:kA.prototype.next,writable:!0,configurable:!0,enumerable:!0},[Symbol.iterator]:{value:function(){return lB(this),this},writable:!0,configurable:!0,enumerable:!1},[No]:{value:kA.prototype[No],writable:!0,configurable:!0,enumerable:!1},[ka]:{get:Object.getOwnPropertyDescriptor(kA.prototype,ka)?.get,configurable:!0,enumerable:!1}});Object.defineProperty(Object.getOwnPropertyDescriptor(kA.prototype,Symbol.iterator)?.value,"name",{value:"entries",configurable:!0});var Hr=class ZW{constructor(t){jW.add(this);let r=Ive(t);if(r&&typeof r=="object"&&UB in r){d2.set(this,{getImpl:r[UB]});return}let n=bve(r);d2.set(this,{getImpl:()=>n})}append(t,r){if(yn(this),arguments.length<2)throw Qa('The "name" and "value" arguments must be specified');Hn(this).append(Kt(t),Kt(r))}delete(t){if(yn(this),arguments.length<1)throw Qa('The "name" argument must be specified');Hn(this).delete(Kt(t))}get(t){if(yn(this),arguments.length<1)throw Qa('The "name" argument must be specified');return Hn(this).get(Kt(t))}getAll(t){if(yn(this),arguments.length<1)throw Qa('The "name" argument must be specified');return Hn(this).getAll(Kt(t))}has(t){if(yn(this),arguments.length<1)throw Qa('The "name" argument must be specified');return Hn(this).has(Kt(t))}set(t,r){if(yn(this),arguments.length<2)throw Qa('The "name" and "value" arguments must be specified');Hn(this).set(Kt(t),Kt(r))}sort(){yn(this),Hn(this).sort()}entries(){return yn(this),new kA(Array.from(Hn(this)))}keys(){return yn(this),new kA(Array.from(Hn(this).keys()))}values(){return yn(this),new kA(Array.from(Hn(this).values()))}forEach(t,r){if(yn(this),typeof t!="function")throw qA('The "callback" argument must be of type function. Received '+(t===void 0?"undefined":typeof t),"ERR_INVALID_ARG_TYPE");for(let[n,i]of Hn(this))t.call(r,i,n,this)}toString(){return yn(this),Hn(this).toString()}get size(){return yn(this),yve(Hn(this))}[No](t,r,n){if(yn(this),t<0)return"[Object]";let i=typeof n=="function"?o=>n(o,r):o=>JSON.stringify(o),s=Array.from(Hn(this)).map(([o,a])=>`${i(o)} => ${i(a)}`);return`URLSearchParams ${KW(s,r,"{}")}`}get[ka](){return this!==ZW.prototype&&yn(this),fve}};for(let e of uve)Object.defineProperty(Hr.prototype,e,{value:Hr.prototype[e],writable:!0,configurable:!0,enumerable:!0});for(let e of cve)Object.defineProperty(Hr.prototype,e,{value:Hr.prototype[e],writable:!0,configurable:!0,enumerable:!0});for(let e of["sort","entries","forEach","keys","values","toString"])Object.defineProperty(Hr.prototype,e,{value:Hr.prototype[e],writable:!0,configurable:!0,enumerable:!0});Object.defineProperties(Hr.prototype,{size:{get:Object.getOwnPropertyDescriptor(Hr.prototype,"size")?.get,configurable:!0,enumerable:!0},[Symbol.iterator]:{value:Hr.prototype.entries,writable:!0,configurable:!0,enumerable:!1},[No]:{value:Hr.prototype[No],writable:!0,configurable:!0,enumerable:!1},[ka]:{get:Object.getOwnPropertyDescriptor(Hr.prototype,ka)?.get,configurable:!0,enumerable:!1}});function Sve(e){if(typeof e!="function"||e.__secureExecBootstrapStub===!0)return!1;try{return String(new e("./child.mjs","file:///root/base/entry.mjs").href)==="file:///root/base/child.mjs"}catch{return!1}}function _ve(e){return e.endsWith("/")?e:`${e}/`}function vve(e,t){let r=String(e??"");if(!r.startsWith("file:"))return{input:r,base:t};let n=/^file:(\.\.?(?:\/[^?#]*)?)([?#].*)?$/.exec(r);if(!n)return{input:r,base:t};let i=n[1],s=n[2]??"",o=typeof t>"u"?"file:///":String(t);try{let a=new globalThis.URL(o);if(a.protocol!=="file:")return{input:r,base:t};let A=a.pathname||"/";A.startsWith("/")||(A=`/${A}`);let f=A.endsWith("/")?A:qr.posix.dirname(A),l=qr.posix.resolve(f,i);return{input:`file://${i==="."||i===".."||i.endsWith("/")?_ve(l):l}${s}`,base:void 0}}catch{return{input:r,base:t}}}var GG=typeof wu?.URL=="function"?wu.URL:typeof wu?.default?.URL=="function"?wu.default.URL:globalThis.URL,YG=Sve(GG)?GG:class $W{constructor(t,r){let n=String(t??""),i=/^[a-zA-Z][a-zA-Z\d+\-.]*:/.test(n);if(!i&&typeof r>"u")throw new TypeError(`Invalid URL: ${n}`);let s=n;if(!i){let N=new $W(r);if(N.protocol==="file:"){let P=n.indexOf("?"),U=n.indexOf("#"),G=P===-1?n.length:P,Y=U===-1?n.length:U,Z=Math.min(G,Y),ee=n.slice(0,Z),j=n.slice(Z),se=N.pathname||"/";se.startsWith("/")||(se=`/${se}`);let ie=se.endsWith("/")?se:qr.posix.dirname(se),ce=qr.posix.resolve(ie,ee);(ee.endsWith("/")||/(^|\/)\.\.?$/.test(ee))&&!ce.endsWith("/")&&(ce+="/"),s=`file://${ce}${j}`}else s=String(N.href).replace(/\/[^/]*$/,"/")+n}let o=s.indexOf("?"),a=s.indexOf("#"),A=o===-1?s.length:o,f=a===-1?s.length:a,l=Math.min(A,f),p=o===-1?"":s.slice(o,f),B=a===-1?"":s.slice(a);if(s.startsWith("file:")){let N=s.slice(5,l);N.startsWith("//")&&(N=/^\/\/[^/]*(.*)$/.exec(N)?.[1]||"/"),N.startsWith("/")||(N=`/${N}`),this.protocol="file:",this.hostname="",this.port="",this.pathname=N||"/",this.search=p,this.hash=B,this.host="",this.href=`file://${this.pathname}${this.search}${this.hash}`,this.origin="null",this.searchParams=new Hr(this.search);let P=()=>{let U=this.searchParams.toString();this.search=U?`?${U}`:"",this.href=`file://${this.pathname}${this.search}${this.hash}`};for(let U of["append","delete","set","sort"]){let G=this.searchParams[U]?.bind(this.searchParams);G&&(this.searchParams[U]=(...Y)=>{let Z=G(...Y);return P(),Z})}return}let S=s.match(/^(\w+:)\/\/([^/:?#]+)(:\d+)?(.*)$/);this.protocol=S?.[1]||"",this.hostname=S?.[2]||"",this.port=(S?.[3]||"").slice(1),this.pathname=(S?.[4]||"/").split("?")[0].split("#")[0]||"/",this.search=s.includes("?")?"?"+s.split("?")[1].split("#")[0]:"",this.hash=s.includes("#")?"#"+s.split("#")[1]:"",this.host=this.hostname+(this.port?":"+this.port:""),this.href=this.protocol+"//"+this.host+this.pathname+this.search+this.hash,this.origin=this.protocol+"//"+this.host,this.searchParams=new Hr(this.search);let _=()=>{let N=this.searchParams.toString();this.search=N?`?${N}`:"",this.href=this.protocol+"//"+this.host+this.pathname+this.search+this.hash};for(let N of["append","delete","set","sort"]){let P=this.searchParams[N]?.bind(this.searchParams);P&&(this.searchParams[N]=(...U)=>{let G=P(...U);return _(),G})}}toString(){return this.href}},Qn=(ya=class{constructor(e,t){if(zq(this,qt),zq(this,Qg),arguments.length<1)throw Qa('The "url" argument must be specified');let r=vve(Kt(e),arguments.length>=2?Kt(t):void 0);try{Kq(this,qt,r.base!==void 0?new YG(r.input,r.base):new YG(r.input))}catch{throw hve()}}static canParse(e,t){if(arguments.length<1)throw Qa('The "url" argument must be specified');try{return arguments.length>=2?new ya(e,t):new ya(e),!0}catch{return!1}}static createObjectURL(e){if(typeof Fl>"u"||!(e instanceof Fl))throw qA('The "obj" argument must be an instance of Blob. Received '+(e===null?"null":typeof e),"ERR_INVALID_ARG_TYPE");let t=`blob:nodedata:${wve()}`;return qG().set(t,e),t}static revokeObjectURL(e){if(arguments.length<1)throw Qa('The "url" argument must be specified');typeof e=="string"&&qG().delete(e)}get href(){if(!(this instanceof ya))throw jm();return jt(this,qt).href}set href(e){jt(this,qt).href=Kt(e)}get origin(){return jt(this,qt).origin}get protocol(){return jt(this,qt).protocol}set protocol(e){jt(this,qt).protocol=Kt(e)}get username(){return jt(this,qt).username}set username(e){jt(this,qt).username=Kt(e)}get password(){return jt(this,qt).password}set password(e){jt(this,qt).password=Kt(e)}get host(){return jt(this,qt).host}set host(e){jt(this,qt).host=Kt(e)}get hostname(){return jt(this,qt).hostname}set hostname(e){jt(this,qt).hostname=Kt(e)}get port(){return jt(this,qt).port}set port(e){jt(this,qt).port=Kt(e)}get pathname(){return jt(this,qt).pathname}set pathname(e){jt(this,qt).pathname=Kt(e)}get search(){if(!(this instanceof ya))throw jm();return jt(this,qt).search}set search(e){jt(this,qt).search=Kt(e)}get searchParams(){return jt(this,Qg)||Kq(this,Qg,new Hr({[UB]:()=>jt(this,qt).searchParams})),jt(this,Qg)}get hash(){return jt(this,qt).hash}set hash(e){jt(this,qt).hash=Kt(e)}toString(){if(!(this instanceof ya))throw jm();return jt(this,qt).href}toJSON(){if(!(this instanceof ya))throw jm();return jt(this,qt).href}[No](e,t,r){let n=this.constructor===ya?"URL":this.constructor.name;if(e<0)return`${n} {}`;let i=typeof r=="function"?o=>r(o,t):o=>JSON.stringify(o),s=[`${n} {`,`  href: ${i(this.href)},`,`  origin: ${i(this.origin)},`,`  protocol: ${i(this.protocol)},`,`  username: ${i(this.username)},`,`  password: ${i(this.password)},`,`  host: ${i(this.host)},`,`  hostname: ${i(this.hostname)},`,`  port: ${i(this.port)},`,`  pathname: ${i(this.pathname)},`,`  search: ${i(this.search)},`,`  searchParams: ${this.searchParams[No](e-1,void 0,r)},`,`  hash: ${i(this.hash)}`];return t?.showHidden&&(s[s.length-1]+=",",s.push(`  [Symbol(context)]: ${Qve(this,r,t)}`)),s.push("}"),s.join(`
-`)}get[ka](){return"URL"}},qt=new WeakMap,Qg=new WeakMap,ya);for(let e of["toString","toJSON"])Object.defineProperty(Qn.prototype,e,{value:Qn.prototype[e],writable:!0,configurable:!0,enumerable:!0});for(let e of["href","protocol","username","password","host","hostname","port","pathname","search","hash","origin","searchParams"]){let t=Object.getOwnPropertyDescriptor(Qn.prototype,e);t&&(t.enumerable=!0,Object.defineProperty(Qn.prototype,e,t))}Object.defineProperties(Qn.prototype,{[No]:{value:Qn.prototype[No],writable:!0,configurable:!0,enumerable:!1},[ka]:{get:Object.getOwnPropertyDescriptor(Qn.prototype,ka)?.get,configurable:!0,enumerable:!1}});for(let e of["canParse","createObjectURL","revokeObjectURL"])Object.defineProperty(Qn,e,{value:Qn[e],writable:!0,configurable:!0,enumerable:!0});function Rve(e=globalThis){Object.defineProperty(e,"URL",{value:Qn,writable:!0,configurable:!0,enumerable:!1}),Object.defineProperty(e,"URLSearchParams",{value:Hr,writable:!0,configurable:!0,enumerable:!1})}var F1,Dve=(F1=class{},y(F1,"builtinModules",["assert","async_hooks","buffer","child_process","console","cluster","constants","crypto","dgram","diagnostics_channel","domain","dns","dns/promises","events","fs","fs/promises","http","http2","https","inspector","module","net","os","path","path/posix","path/win32","perf_hooks","process","punycode","querystring","readline","repl","sqlite","stream","stream/consumers","stream/promises","stream/web","string_decoder","sys","timers","timers/promises","trace_events","tls","tty","url","util","util/types","v8","wasi","worker_threads","zlib","vm"]),F1),Tve=Dve.builtinModules,Nve={clearImmediate:globalThis.clearImmediate??function(){},clearInterval:globalThis.clearInterval??function(){},clearTimeout:globalThis.clearTimeout??function(){},setImmediate:globalThis.setImmediate??function(e,...t){return globalThis.setTimeout?.(()=>e(...t),0)},setInterval:globalThis.setInterval??function(e,t,...r){return globalThis.setTimeout?.(()=>e(...r),t??0)},setTimeout:globalThis.setTimeout??function(){}};function Mve(e){return e&&typeof e=="object"&&e.default!=null?e.default:e}function Ns(e){let t=Mve(e);return t==null||typeof t=="function"?t:typeof t=="object"?{...t}:t}function Mo(e,t,r){e!=null&&typeof e[t]>"u"&&(e[t]=r)}function Fve(e){return typeof e=="string"&&e.length>1&&e.endsWith("/")?e.slice(0,-1):e}var UA=Ns(xl);Mo(UA,"constants",RY);Mo(UA,"kMaxLength",Yl);Mo(UA,"kStringMaxLength",o0);Mo(UA,"Blob",globalThis.Blob);Mo(UA,"File",globalThis.File);var eV=Ns(YI),Ss=Ns(VCe),I1=null,WG=!1;function kve(){return WG||(WG=!0,I1=typeof Ss=="function"?Ss:Ss?.EventEmitter,typeof I1=="function"?(Object.assign(I1.prototype,Sl.EventEmitter.prototype),Object.assign(Sl.EventEmitter,Ss,Sl),Ss=Sl.EventEmitter,Ss.EventEmitter=Ss):Ss={...Ss,...Sl}),Ss}var qr=Ns(qg);qr?.posix||(qr.posix=Ns(qg?.posix??qg?.default?.posix)??qr);qr?.win32||(qr.win32=Ns(qg?.win32??qg?.default?.win32)??qr);if(qr?.normalize){let e=qr.normalize.bind(qr);qr.normalize=function(t){return Fve(e(t))}}var xve=Ns(JCe),Uve=Ns(q0),zt=Ns(Yt);typeof zt?.Stream=="function"&&(Object.assign(zt.Stream,zt),zt=zt.Stream,zt.Stream=zt,Object.defineProperty(zt,Symbol.hasInstance,{configurable:!0,value:t=>!t||typeof t!="object"&&typeof t!="function"?!1:typeof zt.Readable=="function"&&t instanceof zt.Readable||typeof zt.Writable=="function"&&t instanceof zt.Writable||typeof zt.Duplex=="function"&&t instanceof zt.Duplex||typeof zt.Transform=="function"&&t instanceof zt.Transform||typeof zt.PassThrough=="function"&&t instanceof zt.PassThrough}));function nI(e){!e||typeof e[Symbol.asyncIterator]=="function"||Object.defineProperty(e,Symbol.asyncIterator,{configurable:!0,value:function(){let t=this,r=[],n=[],i=!1,s=null,o=()=>{for(;n.length>0;){if(s){n.shift()(Promise.reject(s));continue}if(r.length>0){n.shift()(Promise.resolve({done:!1,value:r.shift()}));continue}if(i){n.shift()(Promise.resolve({done:!0,value:void 0}));continue}break}},a=l=>{r.push(l),o()},A=()=>{i=!0,o()},f=l=>{s=l,i=!0,o()};return t.on?.("data",a),t.on?.("end",A),t.on?.("close",A),t.on?.("error",f),t.resume?.(),{next(){return s?Promise.reject(s):r.length>0?Promise.resolve({done:!1,value:r.shift()}):i?Promise.resolve({done:!0,value:void 0}):new Promise(l=>{n.push(l)})},return(){return i=!0,t.off?.("data",a),t.off?.("end",A),t.off?.("close",A),t.off?.("error",f),o(),Promise.resolve({done:!0,value:void 0})},[Symbol.asyncIterator](){return this}}}})}nI(zt?.Readable?.prototype);nI(zt?.PassThrough?.prototype);nI(zt?.Transform?.prototype);nI(zt?.Duplex?.prototype);Mo(zt,"isReadable",e=>!!e&&e.readable!==!1&&e.destroyed!==!0);Mo(zt,"isErrored",e=>e?.errored!=null);Mo(zt,"isDisturbed",e=>!!(e?.locked||e?.disturbed===!0||e?.readableDidRead===!0));var Lve=Ns(jCe),Ui=Ns(wu),VG=!1;function Pve(){return VG||(VG=!0,Ui.URL=Qn,Ui.URLSearchParams=Hr,Ui.fileURLToPath=EY,Ui.pathToFileURL=pY,Ui?.default&&typeof Ui.default=="object"&&(Ui.default.URL=Qn,Ui.default.URLSearchParams=Hr,Ui.default.fileURLToPath=EY,Ui.default.pathToFileURL=pY)),Ui}function Ove(e){return String(e).replace(/^node:/,"")}var tV=null;function rV(e){let t=Ove(e),r=tV;if(Array.isArray(r)){let n=String(t??e).replace(/^node:/,"").split("/")[0];if(!r.includes(n))throw ou(e)}return t}Ge("__agentOSInitJsRuntime",function(e){tV=Array.isArray(e)?e.map(t=>String(t).replace(/^node:/,"").split("/")[0]):null});function Hve(e){switch(rV(e)){case"assert":return globalThis.__secureExecBuiltinAssertModule;case"async_hooks":return LY;case"buffer":return Mo(UA,"Blob",globalThis.Blob),Mo(UA,"File",globalThis.File),UA;case"cluster":throw ou(e);case"crypto":return Ra;case"diagnostics_channel":return swe;case"domain":throw ou(e);case"http":return _httpModule;case"http2":return _http2Module;case"events":return kve();case"fs":return _fsModule;case"fs/promises":return _fsModule.promises;case"os":return _osModule;case"path":return qr;case"path/posix":return qr.posix;case"path/win32":return qr.win32;case"perf_hooks":return hwe;case"process":return GV;case"punycode":return xve;case"querystring":return Uve;case"readline":return{createInterface(r={}){let n=r.input??null,i=r.output??null,s=new Map,o=!1,a=!1,A="",f=[],l=null,p=[],B=new Ru,S=(j,...se)=>{let ie=s.get(j)??[];for(let ce of[...ie])ce(...se)},_=j=>{if(p.length>0){p.shift()(j);return}if(l){let se=l;l=null,se({done:!1,value:j});return}f.push(j)},N=j=>{S("line",j),_(j)},P=()=>{let j=A.indexOf(`
-`);for(;j!==-1;){let se=A.slice(0,j);se.endsWith("\r")&&(se=se.slice(0,-1)),A=A.slice(j+1),N(se),j=A.indexOf(`
-`)}},U=()=>{!n||typeof n.off!="function"||(n.off("data",G),n.off("end",Y))},G=j=>{o||(typeof j=="string"?A+=j:j instanceof Uint8Array?A+=B.decode(j,{stream:!0}):j!=null&&(A+=String(j)),P())},Y=()=>{if(a)return;a=!0;let j=B.decode();j&&(A+=j),P(),A.length>0&&(N(A),A=""),ee.close()};n&&typeof n.on=="function"&&(n.on("data",G),n.on("end",Y),typeof n.resume=="function"&&n.resume());let Z={next(){return f.length>0?Promise.resolve({done:!1,value:f.shift()}):o||a?Promise.resolve({done:!0,value:void 0}):new Promise(j=>{l=j})},return(){return ee.close(),Promise.resolve({done:!0,value:void 0})},[Symbol.asyncIterator](){return this}},ee={addListener(j,se){return this.on(j,se)},on(j,se){let ie=s.get(j)??[];return ie.push(se),s.set(j,ie),this},once(j,se){let ie=(...ce)=>{this.off(j,ie),se(...ce)};return this.on(j,ie)},off(j,se){let ie=s.get(j)??[];return s.set(j,ie.filter(ce=>ce!==se)),this},removeListener(j,se){return this.off(j,se)},close(){if(!o){for(o=!0,U();p.length>0;)p.shift()("");if(l){let j=l;l=null,j({done:!0,value:void 0})}S("close")}},question(j,se){i&&typeof i.write=="function"&&j&&i.write(String(j));let ie=()=>f.length>0?Promise.resolve(f.shift()):o||a?Promise.resolve(""):new Promise(ce=>{p.push(ce)});if(typeof se=="function"){ie().then(ce=>{se(ce)});return}return ie()},[Symbol.asyncIterator](){return Z}};return ee}};case"repl":throw ou(e);case"stream":return zt;case"stream/consumers":return sB;case"stream/promises":return VY;case"string_decoder":return Lve;case"stream/web":return{ReadableStream:globalThis.ReadableStream,WritableStream:globalThis.WritableStream,TransformStream:globalThis.TransformStream,TextEncoderStream:globalThis.TextEncoderStream,TextDecoderStream:globalThis.TextDecoderStream,CompressionStream:globalThis.CompressionStream,DecompressionStream:globalThis.DecompressionStream};case"timers":return Nve;case"timers/promises":return tB;case"trace_events":throw ou(e);case"url":return Pve();case"sys":return iB(globalThis.__secureExecBuiltinUtilModule);case"util":return iB(globalThis.__secureExecBuiltinUtilModule);case"util/types":return iB(globalThis.__secureExecBuiltinUtilModule).types;case"child_process":return _childProcessModule;case"console":return zQe;case"constants":return eV;case"dns":return _dnsModule;case"dns/promises":return _dnsModule.promises;case"net":return _netModule;case"tls":return _tlsModule;case"tty":return rwe;case"dgram":return _dgramModule;case"sqlite":return _sqliteModule;case"https":return _httpsModule;case"inspector":throw ou(e);case"module":return _moduleModule;case"wasi":throw ou(e);case"zlib":return globalThis.__secureExecBuiltinZlibModule;case"v8":return Bwe;case"vm":return Cwe;case"worker_threads":return ZQe;default:{let r=new Error(`Cannot find module '${e}'`);throw r.code="MODULE_NOT_FOUND",r}}}function mR(e){let t=new Error(`${e} is not supported in sandbox`);return t.code="ERR_NOT_IMPLEMENTED",t}function du(e){throw mR(`crypto.${e}`)}var Pg=Symbol("secureExecCryptoKey"),BR=Symbol("secureExecCrypto"),IR=Symbol("secureExecSubtle"),nV="ERR_INVALID_THIS",iI="ERR_ILLEGAL_CONSTRUCTOR";function Vl(e,t){let r=new TypeError(e);return r.code=t,r}var qve=class extends Error{constructor(e="",t="Error"){super(e),this.name=String(t),this.code=0}};function JG(e,t,r){let n=new Error(r);return n.name=e,n.code=t,n}function b1(e){if(!(e instanceof CR)||e._token!==BR)throw Vl('Value of "this" must be of type Crypto',nV)}function Li(e){if(!(e instanceof bR)||e._token!==IR)throw Vl('Value of "this" must be of type SubtleCrypto',nV)}function Gve(e){return!ArrayBuffer.isView(e)||e instanceof DataView?!1:e instanceof Int8Array||e instanceof Int16Array||e instanceof Int32Array||e instanceof Uint8Array||e instanceof Uint16Array||e instanceof Uint32Array||e instanceof Uint8ClampedArray||e instanceof BigInt64Array||e instanceof BigUint64Array||_e.Buffer.isBuffer(e)}function Gn(e){return typeof e=="string"?_e.Buffer.from(e).toString("base64"):e instanceof ArrayBuffer?_e.Buffer.from(new Uint8Array(e)).toString("base64"):ArrayBuffer.isView(e)?_e.Buffer.from(new Uint8Array(e.buffer,e.byteOffset,e.byteLength)).toString("base64"):_e.Buffer.from(e).toString("base64")}function su(e){let t=_e.Buffer.from(e,"base64");return t.buffer.slice(t.byteOffset,t.byteOffset+t.byteLength)}function g2(e){return typeof e=="string"?{name:e}:e??{}}function Pi(e){let t={...g2(e)},r=t.hash,n=t.publicExponent,i=t.iv,s=t.additionalData,o=t.salt,a=t.info,A=t.context,f=t.label,l=t.public;return r&&(t.hash=g2(r)),n&&ArrayBuffer.isView(n)&&(t.publicExponent=_e.Buffer.from(new Uint8Array(n.buffer,n.byteOffset,n.byteLength)).toString("base64")),i&&(t.iv=Gn(i)),s&&(t.additionalData=Gn(s)),o&&(t.salt=Gn(o)),a&&(t.info=Gn(a)),A&&(t.context=Gn(A)),f&&(t.label=Gn(f)),l&&typeof l=="object"&&"_keyData"in l&&(t.public=l._keyData),t}var yY,Zg=(yY=Pg,class{constructor(e,t){y(this,"type");y(this,"extractable");y(this,"algorithm");y(this,"usages");y(this,"_keyData");y(this,"_pem");y(this,"_jwk");y(this,"_raw");y(this,"_sourceKeyObjectData");y(this,yY);if(t!==Pg||!e)throw Vl("Illegal constructor",iI);this.type=e.type,this.extractable=e.extractable,this.algorithm=e.algorithm,this.usages=e.usages,this._keyData=e,this._pem=e._pem,this._jwk=e._jwk,this._raw=e._raw,this._sourceKeyObjectData=e._sourceKeyObjectData,this[Pg]=!0}});Object.defineProperty(Zg.prototype,Symbol.toStringTag,{value:"CryptoKey",configurable:!0});Object.defineProperty(Zg,Symbol.hasInstance,{value(e){return!!(e&&typeof e=="object"&&(e[Pg]===!0||"_keyData"in e&&e[Symbol.toStringTag]==="CryptoKey"))},configurable:!0});function Ql(e){let t=globalThis.CryptoKey;if(typeof t=="function"&&t.prototype&&t.prototype!==Zg.prototype){let r=Object.create(t.prototype);return r.type=e.type,r.extractable=e.extractable,r.algorithm=e.algorithm,r.usages=e.usages,r._keyData=e,r._pem=e._pem,r._jwk=e._jwk,r._raw=e._raw,r._sourceKeyObjectData=e._sourceKeyObjectData,r}return new Zg(e,Pg)}function Oi(e){if(typeof _cryptoSubtle>"u")throw new Error("crypto.subtle is not supported in sandbox");return _cryptoSubtle.applySync(void 0,[JSON.stringify(e)])}var bR=class{constructor(e){y(this,"_token");if(e!==IR)throw Vl("Illegal constructor",iI);this._token=e}digest(e,t){return Li(this),Promise.resolve().then(()=>{let r=JSON.parse(Oi({op:"digest",algorithm:g2(e).name,data:Gn(t)}));return su(r.data)})}generateKey(e,t,r){return Li(this),Promise.resolve().then(()=>{let n=JSON.parse(Oi({op:"generateKey",algorithm:Pi(e),extractable:t,usages:Array.from(r)}));return"publicKey"in n&&"privateKey"in n?{publicKey:Ql(n.publicKey),privateKey:Ql(n.privateKey)}:Ql(n.key)})}importKey(e,t,r,n,i){return Li(this),Promise.resolve().then(()=>{let s=JSON.parse(Oi({op:"importKey",format:e,keyData:e==="jwk"?t:Gn(t),algorithm:Pi(r),extractable:n,usages:Array.from(i)}));return Ql(s.key)})}exportKey(e,t){return Li(this),Promise.resolve().then(()=>{let r=JSON.parse(Oi({op:"exportKey",format:e,key:t._keyData}));return e==="jwk"?r.jwk:su(r.data??"")})}encrypt(e,t,r){return Li(this),Promise.resolve().then(()=>{let n=JSON.parse(Oi({op:"encrypt",algorithm:Pi(e),key:t._keyData,data:Gn(r)}));return su(n.data)})}decrypt(e,t,r){return Li(this),Promise.resolve().then(()=>{let n=JSON.parse(Oi({op:"decrypt",algorithm:Pi(e),key:t._keyData,data:Gn(r)}));return su(n.data)})}sign(e,t,r){return Li(this),Promise.resolve().then(()=>{let n=JSON.parse(Oi({op:"sign",algorithm:Pi(e),key:t._keyData,data:Gn(r)}));return su(n.data)})}verify(e,t,r,n){return Li(this),Promise.resolve().then(()=>JSON.parse(Oi({op:"verify",algorithm:Pi(e),key:t._keyData,signature:Gn(r),data:Gn(n)})).result)}deriveBits(e,t,r){return Li(this),Promise.resolve().then(()=>{let n=JSON.parse(Oi({op:"deriveBits",algorithm:Pi(e),baseKey:t._keyData,length:r}));return su(n.data)})}deriveKey(e,t,r,n,i){return Li(this),Promise.resolve().then(()=>{let s=JSON.parse(Oi({op:"deriveKey",algorithm:Pi(e),baseKey:t._keyData,derivedKeyAlgorithm:Pi(r),extractable:n,usages:Array.from(i)}));return Ql(s.key)})}wrapKey(e,t,r,n){return Li(this),Promise.resolve().then(()=>{let i=JSON.parse(Oi({op:"wrapKey",format:e,key:t._keyData,wrappingKey:r._keyData,wrapAlgorithm:Pi(n)}));return su(i.data)})}unwrapKey(e,t,r,n,i,s,o){return Li(this),Promise.resolve().then(()=>{let a=JSON.parse(Oi({op:"unwrapKey",format:e,wrappedKey:Gn(t),unwrappingKey:r._keyData,unwrapAlgorithm:Pi(n),unwrappedKeyAlgorithm:Pi(i),extractable:s,usages:Array.from(o)}));return Ql(a.key)})}},iV=new bR(IR),CR=class{constructor(e){y(this,"_token");if(e!==BR)throw Vl("Illegal constructor",iI);this._token=e}get subtle(){return b1(this),iV}getRandomValues(e){if(b1(this),!Gve(e))throw JG("TypeMismatchError",17,"The data argument must be an integer-type TypedArray");if(typeof _cryptoRandomFill>"u"&&du("getRandomValues"),e.byteLength>65536)throw JG("QuotaExceededError",22,`The ArrayBufferView's byte length (${e.byteLength}) exceeds the number of bytes of entropy available via this API (65536)`);let t=new Uint8Array(e.buffer,e.byteOffset,e.byteLength);try{let r=_cryptoRandomFill.applySync(void 0,[t.byteLength]),n=_e.Buffer.from(r,"base64");if(n.byteLength!==t.byteLength)throw new Error("invalid host entropy size");return t.set(n),e}catch{du("getRandomValues")}}randomUUID(){b1(this),typeof _cryptoRandomUUID>"u"&&du("randomUUID");try{let e=_cryptoRandomUUID.applySync(void 0,[]);if(typeof e!="string")throw new Error("invalid host uuid");return e}catch{du("randomUUID")}}},Yve=new CR(BR),Rl=Yve;function Wve(e){let t=[];return{update(r,n){let i=typeof r=="string"?_e.Buffer.from(r,n||"utf8"):_e.Buffer.from(r);return t.push(i),this},digest(r){typeof _cryptoHashDigest>"u"&&du("createHash");let n=t.length===1?t[0]:_e.Buffer.concat(t),i=_cryptoHashDigest.applySync(void 0,[String(e),n.toString("base64")]),s=_e.Buffer.from(String(i||""),"base64");return r?s.toString(r):s}}}function sV(e){if(Jl(e)){if(e.type!=="secret")throw new TypeError("Symmetric crypto operations require a secret KeyObject");return _e.Buffer.from(String(e._serialized.raw||""),"base64")}return e&&typeof e=="object"&&e[Symbol.toStringTag]==="CryptoKey"&&typeof e._raw=="string"?_e.Buffer.from(String(e._raw||""),"base64"):typeof e=="string"?_e.Buffer.from(e):Dt(e)}function Vve(e,t){let r=[],n=sV(t);return{update(i,s){let o=typeof i=="string"?_e.Buffer.from(i,s||"utf8"):_e.Buffer.from(i);return r.push(o),this},digest(i){typeof _cryptoHmacDigest>"u"&&du("createHmac");let s=r.length===1?r[0]:_e.Buffer.concat(r),o=_cryptoHmacDigest.applySync(void 0,[String(e),n.toString("base64"),s.toString("base64")]),a=_e.Buffer.from(String(o||""),"base64");return i?a.toString(i):a}}}var Og=Symbol("secureExecBuiltinKeyObject");function p2(e){return _e.Buffer.isBuffer(e)||e instanceof ArrayBuffer||ArrayBuffer.isView(e)}function Dt(e,t=void 0){return _e.Buffer.isBuffer(e)?_e.Buffer.from(e):typeof e=="string"?_e.Buffer.from(e,t||"utf8"):e instanceof ArrayBuffer?_e.Buffer.from(new Uint8Array(e)):ArrayBuffer.isView(e)?_e.Buffer.from(new Uint8Array(e.buffer,e.byteOffset,e.byteLength)):_e.Buffer.from(e??[])}function wa(e,t=void 0){return t?e.toString(t):e}function Jl(e){return!!(e&&typeof e=="object"&&(e[Og]===!0||e[Symbol.toStringTag]==="KeyObject"&&"_serialized"in e))}function Ds(e){if(Jl(e))return e._serialized;if(e&&typeof e=="object"&&e[Symbol.toStringTag]==="CryptoKey"&&"_keyData"in e)return e._keyData;if(typeof e=="bigint")return{__type:"bigint",value:e.toString()};if(p2(e))return{__type:"buffer",value:Dt(e).toString("base64")};if(Array.isArray(e))return e.map(t=>Ds(t));if(e&&typeof e=="object"){let t={};for(let[r,n]of Object.entries(e))n!==void 0&&(t[r]=Ds(n));return t}return e}function $g(e){if(Array.isArray(e))return e.map(r=>$g(r));if(!e||typeof e!="object")return e;if(e.__type==="buffer")return _e.Buffer.from(String(e.value||""),"base64");if(e.__type==="bigint")return BigInt(String(e.value||"0"));if(e.__type==="keyObject")return Tl(e.value);let t={};for(let[r,n]of Object.entries(e))t[r]=$g(n);return t}function oV(e){if(Jl(e))return e._serialized;if(e&&typeof e=="object"&&e[Symbol.toStringTag]==="CryptoKey"&&"_keyData"in e)return e._keyData;if(e&&typeof e=="object"&&!Array.isArray(e)&&"key"in e){let{key:t,...r}=e,n=oV(t);return n&&typeof n=="object"&&!Array.isArray(n)&&"type"in n&&("pem"in n||"raw"in n)?{...n,...Object.fromEntries(Object.entries(r).map(([i,s])=>[i,Ds(s)]))}:{...Object.fromEntries(Object.entries(r).map(([i,s])=>[i,Ds(s)])),key:Ds(t)}}return Ds(e)}function TA(e){return JSON.stringify(oV(e))}function C1(e){return JSON.stringify({hasOptions:e!==void 0,options:e===void 0?null:Ds(e)})}function aV(e){return e==null?null:typeof e=="string"?e:typeof e=="object"&&e&&typeof e.name=="string"?e.name:String(e)}function pr(e,t,r){return typeof e>"u"&&du(t),e.applySync(void 0,r)}function jG(e){return e&&typeof e=="object"&&e.kind==="buffer"?_e.Buffer.from(String(e.value||""),"base64"):e&&typeof e=="object"&&e.kind==="string"?String(e.value||""):Tl(e)}var mY,sI=(mY=Og,class{constructor(e,t){y(this,"type");y(this,"asymmetricKeyType");y(this,"asymmetricKeyDetails");y(this,"symmetricKeySize");y(this,"_serialized");y(this,mY);if(t!==Og||!e||typeof e!="object")throw Vl("Illegal constructor",iI);this.type=e.type,this.asymmetricKeyType=e.asymmetricKeyType,this.asymmetricKeyDetails=e.asymmetricKeyDetails,this.symmetricKeySize=e.raw?_e.Buffer.from(String(e.raw),"base64").length:void 0,this._serialized=e,this[Og]=!0}export(e=void 0){if(this.type==="secret")return e&&e.format==="jwk"&&this._serialized.jwk?{...this._serialized.jwk}:_e.Buffer.from(String(this._serialized.raw||""),"base64");if(e==null||typeof e!="object"){let t=new TypeError('The "options" argument must be of type object. Received undefined');throw t.code="ERR_INVALID_ARG_TYPE",t}if(e.format==="jwk"&&this._serialized.jwk)return{...this._serialized.jwk};if(e.format&&e.format!=="pem")throw mR(`crypto.KeyObject.export(${e.format})`);return String(this._serialized.pem||"")}equals(e){return Jl(e)&&JSON.stringify(this._serialized)===JSON.stringify(e._serialized)}});Object.defineProperty(sI.prototype,Symbol.toStringTag,{value:"KeyObject",configurable:!0});Object.defineProperty(sI,Symbol.hasInstance,{value(e){return Jl(e)},configurable:!0});function Tl(e){return Jl(e)?e:new sI(e,Og)}function Jve(e){if(!e||typeof e!="object")return{};let t={};return"aad"in e&&e.aad!=null&&(t.aad=Dt(e.aad).toString("base64")),"authTag"in e&&e.authTag!=null&&(t.authTag=Dt(e.authTag).toString("base64")),"authTagLength"in e&&e.authTagLength!=null&&(t.authTagLength=Number(e.authTagLength)),"autoPadding"in e&&(t.autoPadding=!!e.autoPadding),t}var zG=class{constructor(e,t,r,n,i=void 0){y(this,"_mode");y(this,"_algorithm");y(this,"_key");y(this,"_iv");y(this,"_options");y(this,"_sessionId");y(this,"_authTag");this._mode=e,this._algorithm=String(t),this._key=sV(r),this._iv=n==null?null:Dt(n),this._options=Jve(i),this._sessionId=null,this._authTag=null}_ensureSession(){return this._sessionId!=null?this._sessionId:(this._sessionId=Number(pr(_cryptoCipherivCreate,this._mode==="cipher"?"createCipheriv":"createDecipheriv",[this._mode,this._algorithm,this._key.toString("base64"),this._iv?this._iv.toString("base64"):null,Object.keys(this._options).length>0?JSON.stringify(this._options):null])),this._sessionId)}_assertMutable(e){if(this._sessionId!=null)throw mR(`crypto.${e} after update()`)}update(e,t=void 0,r=void 0){let n=Dt(e,t),i=pr(_cryptoCipherivUpdate,this._mode==="cipher"?"createCipheriv":"createDecipheriv",[this._ensureSession(),n.toString("base64")]);return wa(_e.Buffer.from(String(i||""),"base64"),r)}final(e=void 0){let t=JSON.parse(String(pr(_cryptoCipherivFinal,this._mode==="cipher"?"createCipheriv":"createDecipheriv",[this._ensureSession()])||"{}"));return t.authTag&&(this._authTag=_e.Buffer.from(String(t.authTag),"base64")),wa(_e.Buffer.from(String(t.data||""),"base64"),e)}setAAD(e,t=void 0){return this._assertMutable(this._mode==="cipher"?"createCipheriv":"createDecipheriv"),this._options.aad=Dt(e).toString("base64"),t&&typeof t=="object"&&t.authTagLength!=null&&(this._options.authTagLength=Number(t.authTagLength)),this}setAuthTag(e){return this._assertMutable("createDecipheriv"),this._authTag=Dt(e),this._options.authTag=this._authTag.toString("base64"),this}getAuthTag(){if(!this._authTag)throw new Error("Invalid state for operation getAuthTag");return _e.Buffer.from(this._authTag)}setAutoPadding(e=!0){return this._assertMutable(this._mode==="cipher"?"createCipheriv":"createDecipheriv"),this._options.autoPadding=!!e,this}},E2=class{constructor(e){y(this,"_algorithm");y(this,"_chunks");this._algorithm=e,this._chunks=[]}update(e,t=void 0){return this._chunks.push(Dt(e,t)),this}write(e,t=void 0){return this.update(e,t),!0}end(e=void 0,t=void 0){return e!==void 0&&this.update(e,t),this}_inputBuffer(){return this._chunks.length===0?_e.Buffer.alloc(0):this._chunks.length===1?this._chunks[0]:_e.Buffer.concat(this._chunks)}sign(e,t=void 0){let r=pr(_cryptoSign,"sign",[aV(this._algorithm),this._inputBuffer().toString("base64"),TA(e)]);return wa(_e.Buffer.from(String(r||""),"base64"),t)}},KG=class extends E2{verify(e,t,r=void 0){let n=Dt(t,r);return!!pr(_cryptoVerify,"verify",[aV(this._algorithm),this._inputBuffer().toString("base64"),TA(e),n.toString("base64")])}};function jve(e,t=void 0,r=void 0,n=void 0){let i=[];return typeof e=="string"?(i.push(Dt(e,typeof t=="string"?t:void 0)),r!==void 0?i.push(typeof r=="string"?Dt(r,typeof n=="string"?n:void 0):r):(typeof t=="number"||p2(t))&&i.push(t),i):(i.push(e),r!==void 0?i.push(r):(typeof t=="number"||p2(t))&&i.push(t),i)}var XG=typeof FinalizationRegistry=="function"?new FinalizationRegistry(e=>{try{pr(_cryptoDiffieHellmanSessionDestroy,"createDiffieHellman",[e])}catch{}}):null,wg=class{constructor(e){y(this,"_sessionId");this._sessionId=Number(pr(_cryptoDiffieHellmanSessionCreate,"createDiffieHellman",[JSON.stringify({type:e.type,name:e.name,args:(e.args||[]).map(t=>Ds(t))})])),XG?.register(this,this._sessionId,this)}_destroySession(){if(this._sessionId==null)return;let e=this._sessionId;this._sessionId=null,XG?.unregister(this),pr(_cryptoDiffieHellmanSessionDestroy,"createDiffieHellman",[e])}dispose(){this._destroySession()}[Symbol.dispose||Symbol.for("Symbol.dispose")](){this._destroySession()}_call(e,t=[]){if(this._sessionId==null)throw new Error("Diffie-Hellman session has been destroyed");let r=JSON.parse(String(pr(_cryptoDiffieHellmanSessionCall,"createDiffieHellman",[this._sessionId,JSON.stringify({method:e,args:t.map(n=>Ds(n))})])||"{}"));return r.hasResult?$g(r.result):void 0}get verifyError(){let e=this._call("verifyError");return e==null?0:Number(e)}generateKeys(e=void 0){return wa(Dt(this._call("generateKeys")),e)}computeSecret(e,t=void 0,r=void 0){let n=this._call("computeSecret",[Dt(e,t)]);return wa(Dt(n),r)}getPrime(e=void 0){return wa(Dt(this._call("getPrime")),e)}getGenerator(e=void 0){return wa(Dt(this._call("getGenerator")),e)}getPublicKey(e=void 0){return wa(Dt(this._call("getPublicKey")),e)}getPrivateKey(e=void 0){return wa(Dt(this._call("getPrivateKey")),e)}setPrivateKey(e,t=void 0){this._call("setPrivateKey",[Dt(e,t)])}setPublicKey(e,t=void 0){this._call("setPublicKey",[Dt(e,t)])}},Ra={KeyObject:sI,DiffieHellman:wg,ECDH:wg,randomFillSync(e,t=0,r=void 0){let n=e instanceof ArrayBuffer?new Uint8Array(e):e;if(!ArrayBuffer.isView(n))throw new TypeError('The "buffer" argument must be an instance of ArrayBuffer, Buffer, TypedArray, or DataView');let i=Number(t)||0;if(!Number.isInteger(i)||i<0||i>n.byteLength)throw new RangeError('The value of "offset" is out of range');let s=r===void 0?n.byteLength-i:Number(r);if(!Number.isInteger(s)||s<0||i+s>n.byteLength)throw new RangeError('The value of "size" is out of range');let o=new Uint8Array(n.buffer,n.byteOffset+i,s);return Rl.getRandomValues(o),e},randomFill(e,t,r,n){let i=t,s=r,o=n;if(typeof i=="function"?(o=i,i=0,s=void 0):typeof s=="function"&&(o=s,s=void 0),typeof o!="function")throw new TypeError('The "callback" argument must be of type function');try{let a=Ra.randomFillSync(e,i,s);queueMicrotask(()=>o(null,a))}catch(a){queueMicrotask(()=>o(a))}},createHash(e){return Wve(e)},createHmac(e,t){return Vve(e,t)},createCipheriv(e,t,r,n=void 0){return new zG("cipher",e,t,r,n)},createDecipheriv(e,t,r,n=void 0){return new zG("decipher",e,t,r,n)},createSign(e){return new E2(e)},createVerify(e){return new KG(e)},sign(e,t,r){let n=new E2(e);return n.update(t),n.sign(r)},verify(e,t,r,n){let i=new KG(e);return i.update(t),i.verify(r,n)},createPrivateKey(e){let t=pr(_cryptoCreateKeyObject,"createPrivateKey",["createPrivateKey",TA(e)]);return Tl(JSON.parse(String(t||"{}")))},createPublicKey(e){let t=pr(_cryptoCreateKeyObject,"createPublicKey",["createPublicKey",TA(e)]);return Tl(JSON.parse(String(t||"{}")))},createSecretKey(e){return Tl({type:"secret",raw:Dt(e).toString("base64")})},publicEncrypt(e,t){let r=pr(_cryptoAsymmetricOp,"publicEncrypt",["publicEncrypt",TA(e),Dt(t).toString("base64")]);return _e.Buffer.from(String(r||""),"base64")},publicDecrypt(e,t){let r=pr(_cryptoAsymmetricOp,"publicDecrypt",["publicDecrypt",TA(e),Dt(t).toString("base64")]);return _e.Buffer.from(String(r||""),"base64")},privateEncrypt(e,t){let r=pr(_cryptoAsymmetricOp,"privateEncrypt",["privateEncrypt",TA(e),Dt(t).toString("base64")]);return _e.Buffer.from(String(r||""),"base64")},privateDecrypt(e,t){let r=pr(_cryptoAsymmetricOp,"privateDecrypt",["privateDecrypt",TA(e),Dt(t).toString("base64")]);return _e.Buffer.from(String(r||""),"base64")},pbkdf2Sync(e,t,r,n,i){let s=pr(_cryptoPbkdf2,"pbkdf2Sync",[Dt(e).toString("base64"),Dt(t).toString("base64"),Number(r),Number(n),String(i)]);return _e.Buffer.from(String(s||""),"base64")},pbkdf2(e,t,r,n,i,s){let o=i,a=s;if(typeof o=="function"&&(a=o,o="sha1"),typeof a!="function")throw new TypeError('The "callback" argument must be of type function');queueMicrotask(()=>{try{a(null,Ra.pbkdf2Sync(e,t,r,n,o))}catch(A){a(A)}})},scryptSync(e,t,r,n=void 0){let i=pr(_cryptoScrypt,"scryptSync",[Dt(e).toString("base64"),Dt(t).toString("base64"),Number(r),JSON.stringify(Ds(n||{}))]);return _e.Buffer.from(String(i||""),"base64")},scrypt(e,t,r,n,i){let s=n,o=i;if(typeof s=="function"&&(o=s,s=void 0),typeof o!="function")throw new TypeError('The "callback" argument must be of type function');queueMicrotask(()=>{try{o(null,Ra.scryptSync(e,t,r,s))}catch(a){o(a)}})},generateKeyPairSync(e,t=void 0){let r=JSON.parse(String(pr(_cryptoGenerateKeyPairSync,"generateKeyPairSync",[String(e),C1(t)])||"{}"));return{publicKey:jG(r.publicKey),privateKey:jG(r.privateKey)}},generateKeyPair(e,t,r){let n=t,i=r;if(typeof n=="function"&&(i=n,n=void 0),typeof i!="function")throw new TypeError('The "callback" argument must be of type function');queueMicrotask(()=>{try{let s=Ra.generateKeyPairSync(e,n);i(null,s.publicKey,s.privateKey)}catch(s){i(s)}})},generateKeySync(e,t=void 0){let r=JSON.parse(String(pr(_cryptoGenerateKeySync,"generateKeySync",[String(e),C1(t)])||"{}"));return Tl(r)},generatePrimeSync(e,t=void 0){let r=JSON.parse(String(pr(_cryptoGeneratePrimeSync,"generatePrimeSync",[Number(e),C1(t)])||"null"));return $g(r)},generatePrime(e,t,r){let n=t,i=r;if(typeof n=="function"&&(i=n,n=void 0),typeof i!="function")throw new TypeError('The "callback" argument must be of type function');queueMicrotask(()=>{try{i(null,Ra.generatePrimeSync(e,n))}catch(s){i(s)}})},diffieHellman(e){let t=JSON.parse(String(pr(_cryptoDiffieHellman,"diffieHellman",[JSON.stringify(Ds(e))])||"null"));return Dt($g(t))},getDiffieHellman(e){return new wg({type:"group",name:String(e)})},createDiffieHellman(e,t=void 0,r=void 0,n=void 0){return new wg({type:"dh",args:jve(e,t,r,n)})},createECDH(e){return new wg({type:"ecdh",name:String(e)})},getFips(){return 0},getHashes(){return["md5","sha1","sha224","sha256","sha384","sha512"]},getCiphers(){return["aes-128-cbc","aes-128-ctr","aes-128-gcm","aes-192-cbc","aes-192-ctr","aes-192-gcm","aes-256-cbc","aes-256-ctr","aes-256-gcm","aes128","aes192","aes256"]},getCurves(){return["prime256v1","secp256k1","secp384r1","secp521r1"]},getRandomValues(e){return Rl.getRandomValues(e)},randomBytes(e){let t=Math.max(0,Number(e)||0),r=new Uint8Array(t);return Rl.getRandomValues(r),_e.Buffer.from(r)},randomUUID(){return Rl.randomUUID()},get constants(){return eV},subtle:iV,webcrypto:Rl},Tt=H2(q2(),1),y2=0,au=1,ma=2,qn=64,Ba=128,Au=512,fu=1024,gu=class{constructor(e){y(this,"dev");y(this,"ino");y(this,"mode");y(this,"nlink");y(this,"uid");y(this,"gid");y(this,"rdev");y(this,"size");y(this,"blksize");y(this,"blocks");y(this,"atimeMs");y(this,"mtimeMs");y(this,"ctimeMs");y(this,"birthtimeMs");y(this,"atime");y(this,"mtime");y(this,"ctime");y(this,"birthtime");this.dev=e.dev??0,this.ino=e.ino??0,this.mode=e.mode,this.nlink=e.nlink??1,this.uid=e.uid??0,this.gid=e.gid??0,this.rdev=e.rdev??0,this.size=e.size,this.blksize=e.blksize??4096,this.blocks=e.blocks??Math.ceil(e.size/512);let t=e.atimeMs??Date.now(),r=e.mtimeMs??Date.now(),n=e.ctimeMs??Date.now();this.atimeMs=t+(e.atimeNsec??0)%1e6/1e6,this.mtimeMs=r+(e.mtimeNsec??0)%1e6/1e6,this.ctimeMs=n+(e.ctimeNsec??0)%1e6/1e6,this.birthtimeMs=e.birthtimeMs??Date.now(),this.atime=new Date(this.atimeMs),this.mtime=new Date(this.mtimeMs),this.ctime=new Date(this.ctimeMs),this.birthtime=new Date(this.birthtimeMs)}isFile(){return(this.mode&61440)===32768}isDirectory(){return(this.mode&61440)===16384}isSymbolicLink(){return(this.mode&61440)===40960}isBlockDevice(){return!1}isCharacterDevice(){return!1}isFIFO(){return!1}isSocket(){return!1}},LB=class{constructor(e,t,r=""){y(this,"name");y(this,"parentPath");y(this,"path");y(this,"_isDir");this.name=e,this._isDir=t,this.parentPath=r,this.path=r}isFile(){return!this._isDir}isDirectory(){return this._isDir}isSymbolicLink(){return!1}isBlockDevice(){return!1}isCharacterDevice(){return!1}isFIFO(){return!1}isSocket(){return!1}},ZG=class{constructor(e){y(this,"path");y(this,"_entries",null);y(this,"_index",0);y(this,"_closed",!1);this.path=e}_load(){return this._entries===null&&(this._entries=$.readdirSync(this.path,{withFileTypes:!0})),this._entries}readSync(){if(this._closed)throw new Error("Directory handle was closed");let e=this._load();return this._index>=e.length?null:e[this._index++]}async read(){return this.readSync()}closeSync(){this._closed=!0}async close(){this.closeSync()}async*[Symbol.asyncIterator](){let e=this._load();for(let t of e){if(this._closed)return;yield t}this._closed=!0}},m2=64*1024,zve=16*1024,$G=2**31-1;function AV(e){let t=new Error("The operation was aborted");return t.name="AbortError",t.code="ABORT_ERR",e!==void 0&&(t.cause=e),t}function B2(e){if(e!==void 0){if(e===null||typeof e!="object"||typeof e.aborted!="boolean"||typeof e.addEventListener!="function"||typeof e.removeEventListener!="function"){let t=new TypeError('The "signal" argument must be an instance of AbortSignal');throw t.code="ERR_INVALID_ARG_TYPE",t}return e}}function Dg(e){if(e?.aborted)throw AV(e.reason)}function zm(){return new Promise(e=>process.nextTick(e))}function Kve(e){let t=new Error(e);return t.code="ERR_INTERNAL_ASSERTION",t}function Ro(e,t,r){let n=new RangeError(`The value of "${e}" is out of range. It must be ${t}. Received ${String(r)}`);return n.code="ERR_OUT_OF_RANGE",n}function fV(e){if(e===null)return"Received null";if(e===void 0)return"Received undefined";if(typeof e=="string")return`Received type string ('${e}')`;if(typeof e=="number")return`Received type number (${String(e)})`;if(typeof e=="boolean")return`Received type boolean (${String(e)})`;if(typeof e=="bigint")return`Received type bigint (${e.toString()}n)`;if(typeof e=="symbol")return`Received type symbol (${String(e)})`;if(typeof e=="function")return e.name?`Received function ${e.name}`:"Received function";if(Array.isArray(e))return"Received an instance of Array";if(e&&typeof e=="object"){let t=e.constructor?.name;if(t)return`Received an instance of ${t}`}return`Received type ${typeof e} (${String(e)})`}function bt(e,t,r){let n=new TypeError(`The "${e}" argument must be ${t}. ${fV(r)}`);return n.code="ERR_INVALID_ARG_TYPE",n}function uV(e,t){let r=new TypeError(`The argument '${e}' ${t}`);return r.code="ERR_INVALID_ARG_VALUE",r}function Xve(e){let t=typeof e=="string"?`'${e}'`:e===void 0?"undefined":e===null?"null":String(e),r=new TypeError(`The argument 'encoding' is invalid encoding. Received ${t}`);return r.code="ERR_INVALID_ARG_VALUE",r}function Q1(e,t){if(typeof e=="string")return Tt.Buffer.from(e,t??"utf8");if(Tt.Buffer.isBuffer(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);if(e instanceof Uint8Array)return e;if(ArrayBuffer.isView(e))return new Uint8Array(e.buffer,e.byteOffset,e.byteLength);throw bt("data","a string, Buffer, TypedArray, or DataView",e)}async function*Zve(e,t){if(typeof e=="string"||ArrayBuffer.isView(e)){yield Q1(e,t);return}if(e&&typeof e[Symbol.asyncIterator]=="function"){for await(let r of e)yield Q1(r,t);return}if(e&&typeof e[Symbol.iterator]=="function"){for(let r of e)yield Q1(r,t);return}throw bt("data","a string, Buffer, TypedArray, DataView, or Iterable",e)}var pu=class mn{constructor(t){y(this,"_fd");y(this,"_closing",!1);y(this,"_closed",!1);y(this,"_listeners",new Map);this._fd=t}static _assertHandle(t){if(!(t instanceof mn))throw Kve("handle must be an instance of FileHandle");return t}_emitCloseOnce(){if(this._closed){this._fd=-1,this.emit("close");return}this._closed=!0,this._fd=-1,this.emit("close")}_resolvePath(){return this._fd<0?null:xA.applySync(void 0,[this._fd])}get fd(){return this._fd}get closed(){return this._closed}on(t,r){let n=this._listeners.get(t)??[];return n.push(r),this._listeners.set(t,n),this}once(t,r){let n=(...i)=>{this.off(t,n),r(...i)};return n._originalListener=r,this.on(t,n)}off(t,r){let n=this._listeners.get(t);if(!n)return this;let i=n.findIndex(s=>s===r||s._originalListener===r);return i!==-1&&n.splice(i,1),this}removeListener(t,r){return this.off(t,r)}emit(t,...r){let n=this._listeners.get(t);if(!n||n.length===0)return!1;for(let i of n.slice())i(...r);return!0}async close(){let t=mn._assertHandle(this);if((t._closing||t._closed)&&t._fd<0)throw Ve("EBADF","EBADF: bad file descriptor, close","close");t._closing=!0;try{$.closeSync(t._fd),t._emitCloseOnce()}finally{t._closing=!1}}async stat(){let t=mn._assertHandle(this);return $.fstatSync(t.fd)}async sync(){let t=mn._assertHandle(this);$.fsyncSync(t.fd)}async datasync(){return this.sync()}async truncate(t){let r=mn._assertHandle(this);$.ftruncateSync(r.fd,t)}async chmod(t){let n=mn._assertHandle(this)._resolvePath();if(!n)throw Ve("EBADF","EBADF: bad file descriptor","chmod");$.chmodSync(n,t)}async chown(t,r){let i=mn._assertHandle(this)._resolvePath();if(!i)throw Ve("EBADF","EBADF: bad file descriptor","chown");$.chownSync(i,t,r)}async utimes(t,r){let n=mn._assertHandle(this);$.futimesSync(n.fd,t,r)}async read(t,r,n,i){let s=mn._assertHandle(this),o=t,a=r,A=n,f=i;if(o!==null&&typeof o=="object"&&!ArrayBuffer.isView(o)&&(a=o.offset,A=o.length,f=o.position,o=o.buffer??null),o===null&&(o=Tt.Buffer.alloc(zve)),!ArrayBuffer.isView(o))throw bt("buffer","an instance of ArrayBufferView",o);let l=a??0,p=A??o.byteLength-l;return{bytesRead:$.readSync(s.fd,o,l,p,f??null),buffer:o}}async write(t,r,n,i){let s=mn._assertHandle(this);if(typeof t=="string"){let f=typeof n=="string"?n:"utf8";if(f==="hex"&&t.length%2!==0)throw uV("encoding",`is invalid for data of length ${t.length}`);return{bytesWritten:$.writeSync(s.fd,Tt.Buffer.from(t,f),0,void 0,r??null),buffer:t}}if(!ArrayBuffer.isView(t))throw bt("buffer","a string, Buffer, TypedArray, or DataView",t);let o=r??0,a=typeof n=="number"?n:void 0;return{bytesWritten:$.writeSync(s.fd,t,o,a,i??null),buffer:t}}async readFile(t){let r=mn._assertHandle(this),n=typeof t=="string"?{encoding:t}:t??void 0,i=B2(n?.signal),s=n?.encoding??void 0;if((await r.stat()).size>$G){let l=new RangeError("File size is greater than 2 GiB");throw l.code="ERR_FS_FILE_TOO_LARGE",l}await zm(),Dg(i);let a=[],A=0;for(;;){Dg(i);let l=Tt.Buffer.alloc(m2),{bytesRead:p}=await r.read(l,0,l.byteLength,null);if(p===0)break;if(a.push(l.subarray(0,p)),A+=p,A>$G){let B=new RangeError("File size is greater than 2 GiB");throw B.code="ERR_FS_FILE_TOO_LARGE",B}await zm()}let f=Tt.Buffer.concat(a,A);return s?f.toString(s):f}async writeFile(t,r){let n=mn._assertHandle(this),i=typeof r=="string"?{encoding:r}:r??void 0,s=B2(i?.signal),o=i?.encoding??void 0;await zm(),Dg(s);for await(let a of Zve(t,o))Dg(s),await n.write(a,0,a.byteLength,void 0),await zm()}async appendFile(t,r){return this.writeFile(t,r)}createReadStream(t){return mn._assertHandle(this),new aI(null,{...t??{},fd:this})}createWriteStream(t){return mn._assertHandle(this),new AI(null,{...t??{},fd:this})}};function oI(e){return ArrayBuffer.isView(e)}function $ve(e,t){let r;t===null?r="Received null":typeof t=="string"?r=`Received type string ('${t}')`:r=`Received type ${typeof t} (${String(t)})`;let n=new TypeError(`The "${e}" property must be of type function. ${r}`);return n.code="ERR_INVALID_ARG_TYPE",n}function vA(e,t="cb"){if(typeof e!="function")throw bt(t,"of type function",e)}function I2(e){if(e!=null&&(typeof e!="string"||!Tt.Buffer.isEncoding(e)))throw Xve(e)}function ir(e){if(typeof e=="string"){I2(e);return}e&&typeof e=="object"&&"encoding"in e&&I2(e.encoding)}function Be(e,t="path"){if(typeof e=="string")return e;if(Tt.Buffer.isBuffer(e))return e.toString("utf8");if(e instanceof URL){if(e.protocol==="file:")return e.pathname;throw bt(t,"of type string or an instance of Buffer or URL",e)}throw bt(t,"of type string or an instance of Buffer or URL",e)}function eY(e){try{return Be(e)}catch{return null}}function Kr(e,t,r={}){let{min:n=0,max:i=2147483647,allowNegativeOne:s=!1}=r;if(typeof t!="number")throw bt(e,"of type number",t);if(!Number.isFinite(t)||!Number.isInteger(t))throw Ro(e,"an integer",t);if(s&&t===-1||t>=n&&t<=i)return t;throw Ro(e,`>= ${n} && <= ${i}`,t)}function Sa(e,t="mode"){if(typeof e=="string"){if(!/^[0-7]+$/.test(e))throw uV(t,"must be a 32-bit unsigned integer or an octal string. Received '"+e+"'");return parseInt(e,8)}return Kr(t,e,{min:0,max:4294967295})}function tY(e){if(e!=null)return Sa(e)}function w1(e){return e&-512|e&511&~(EB&511)}function cV(e){if(e?.start!==void 0){if(typeof e.start!="number")throw bt("start","of type number",e.start);if(!Number.isFinite(e.start)||!Number.isInteger(e.start)||e.start<0)throw Ro("start",">= 0",e.start)}}function PB(e,t){if(t!==void 0){if(typeof t!="boolean")throw bt(e,"of type boolean",t);return t}}function e1e(e,t){if(t!==void 0){if(t===null||typeof t!="object"||typeof t.aborted!="boolean"||typeof t.addEventListener!="function"||typeof t.removeEventListener!="function"){let r=new TypeError(`The "${e}" property must be an instance of AbortSignal. ${fV(t)}`);throw r.code="ERR_INVALID_ARG_TYPE",r}return t}}function t1e(e,t){let r;if(e==null)r={};else if(typeof e=="string"){if(!t)throw bt("options","of type object",e);I2(e),r={encoding:e}}else if(typeof e=="object")r=e;else throw bt("options",t?"one of type string or object":"of type object",e);PB("options.persistent",r.persistent),PB("options.recursive",r.recursive),ir(r);let n=e1e("options.signal",r.signal);return{persistent:r.persistent,recursive:r.recursive,encoding:r.encoding,signal:n}}function r1e(e,t,r){let n=Be(e),i=t,s=r;if(typeof t=="function"&&(i=void 0,s=t),s!==void 0&&typeof s!="function")throw bt("listener","of type function",s);return{path:n,listener:s,options:t1e(i,!0)}}function n1e(e,t,r){let n=Be(e),i={},s=r;if(typeof t=="function")s=t;else if(t==null)i={};else if(typeof t=="object")i=t;else throw bt("listener","of type function",t);if(typeof s!="function")throw bt("listener","of type function",s);if(PB("persistent",i.persistent),PB("bigint",i.bigint),i.interval!==void 0&&typeof i.interval!="number")throw bt("interval","of type number",i.interval);return{path:n,listener:s,options:{persistent:i.persistent,bigint:i.bigint,interval:i.interval}}}function i1e(){return new gu({mode:0,size:0,dev:0,ino:0,nlink:0,uid:0,gid:0,rdev:0,blksize:0,blocks:0,atimeMs:0,mtimeMs:0,ctimeMs:0,birthtimeMs:0})}function rY(e){try{let t=$.statSync(e);return{exists:!0,stats:t,signature:JSON.stringify({dev:t.dev,ino:t.ino,mode:t.mode,nlink:t.nlink,uid:t.uid,gid:t.gid,rdev:t.rdev,size:t.size,atimeMs:t.atimeMs,mtimeMs:t.mtimeMs,ctimeMs:t.ctimeMs,birthtimeMs:t.birthtimeMs})}}catch(t){if(t?.code==="ENOENT"||t?.code==="ENOTDIR")return{exists:!1,stats:i1e(),signature:"missing"};throw t}}function s1e(e,t){let r=e==="/"?"":e.split("/").filter(Boolean).pop()??"";return t==="buffer"?Tt.Buffer.from(r):r}function o1e(e,t){return e.exists!==t.exists?"rename":"change"}var a1e=50,A1e=5007,e0=new Map,lV=class{constructor(e,t){y(this,"_path");y(this,"_intervalMs");y(this,"_onChange");y(this,"_onClose");y(this,"_listeners");y(this,"_timer");y(this,"_closed");y(this,"_signal");y(this,"_handleAbort");y(this,"_snapshot");y(this,"_poll");this._path=e,this._intervalMs=t.interval,this._onChange=t.onChange,this._onClose=t.onClose,this._listeners=new Map,this._closed=!1,this._signal=t.signal,this._snapshot=rY(e),this._poll=()=>{if(this._closed)return;let r;try{r=rY(this._path)}catch(i){this.emit("error",i);return}if(r.signature===this._snapshot.signature)return;let n=this._snapshot;this._snapshot=r,this._onChange(r,n)},this._handleAbort=()=>{this.close()},this._timer=z2(this._poll,this._intervalMs),t.persistent===!1&&this._timer?.unref?.(),this._signal&&(this._signal.aborted?queueMicrotask(()=>this.close()):this._signal.addEventListener("abort",this._handleAbort,{once:!0}))}on(e,t){let r=this._listeners.get(e)??[];return r.push(t),this._listeners.set(e,r),this}addListener(e,t){return this.on(e,t)}once(e,t){let r=(...n)=>{this.removeListener(e,r),t(...n)};return r._originalListener=t,this.on(e,r)}off(e,t){return this.removeListener(e,t)}removeListener(e,t){let r=this._listeners.get(e);if(!r)return this;let n=r.findIndex(i=>i===t||i._originalListener===t);return n>=0&&r.splice(n,1),r.length===0&&this._listeners.delete(e),this}removeAllListeners(e){return e===void 0?this._listeners.clear():this._listeners.delete(e),this}emit(e,...t){let r=this._listeners.get(e);return r?.length?(r.slice().forEach(n=>n(...t)),!0):!1}ref(){return this._timer?.ref?.(),this}unref(){return this._timer?.unref?.(),this}close(){this._closed||(this._closed=!0,this._timer!==void 0&&(K2(this._timer),this._timer=void 0),this._signal&&this._signal.removeEventListener("abort",this._handleAbort),this._onClose?.(),this.emit("close"))}};function f1e(e,t){let r=e0.get(e)??new Set;r.add(t),e0.set(e,r)}function u1e(e,t){let r=e0.get(e);r&&(r.delete(t),r.size===0&&e0.delete(e))}function c1e(e,t){let r=s1e(e,t.encoding),n=new lV(e,{interval:a1e,persistent:t.persistent,signal:t.signal,onChange(i,s){n.emit("change",o1e(s,i),r)}});return n}function l1e(e,t,r){let n=new lV(e,{interval:t.interval??A1e,persistent:t.persistent,onChange(i,s){n.emit("change",i.stats,s.stats)},onClose(){u1e(e,n)}});return n.on("change",r),f1e(e,n),n}async function*h1e(e,t){let r=[],n=null,i=!1,s=null,o=$.watch(e,t,(a,A)=>{r.push({eventType:a,filename:A}),n?.(),n=null});o.on("close",()=>{i=!0,n?.(),n=null}),o.on("error",a=>{s=a,n?.(),n=null});try{for(;;){if(r.length>0){yield r.shift();continue}if(s)throw s;if(i)return;await new Promise(a=>{n=a})}}finally{o.close()}}function b2(e){return e==null||typeof e=="object"&&!Array.isArray(e)}function Rs(e){if(e==null||e===-1)return null;if(typeof e=="bigint")return Number(e);if(typeof e!="number"||!Number.isInteger(e))throw bt("position","an integer",e);return e}function OB(e,t,r){let n=t??0;if(typeof n!="number"||!Number.isInteger(n))throw bt("offset","an integer",n);if(n<0||n>e)throw Ro("offset",`>= 0 && <= ${e}`,n);let i=e-n,s=r??i;if(typeof s!="number"||!Number.isInteger(s))throw bt("length","an integer",s);if(s<0||s>2147483647)throw Ro("length",">= 0 && <= 2147483647",s);if(n+s>e)throw Ro("length",`>= 0 && <= ${e-n}`,s);return{offset:n,length:s}}function d1e(e,t,r,n){if(!oI(e))throw bt("buffer","an instance of Buffer, TypedArray, or DataView",e);if(r===void 0&&n===void 0&&b2(t)){let o=t??{},{offset:a,length:A}=OB(e.byteLength,o.offset,o.length);return{buffer:e,offset:a,length:A,position:Rs(o.position)}}let{offset:i,length:s}=OB(e.byteLength,t,r);return{buffer:e,offset:i,length:s,position:Rs(n)}}function nY(e,t,r,n){if(typeof e=="string"){if(r===void 0&&n===void 0&&b2(t)){let o=t??{},a=typeof o.encoding=="string"?o.encoding:void 0;return{buffer:e,offset:0,length:Tt.Buffer.byteLength(e,a),position:Rs(o.position),encoding:a}}if(t!=null&&typeof t!="number")throw bt("position","an integer",t);return{buffer:e,offset:0,length:Tt.Buffer.byteLength(e,typeof r=="string"?r:void 0),position:Rs(t),encoding:typeof r=="string"?r:void 0}}if(!oI(e))throw bt("buffer","a string, Buffer, TypedArray, or DataView",e);if(r===void 0&&n===void 0&&b2(t)){let o=t??{},{offset:a,length:A}=OB(e.byteLength,o.offset,o.length);return{buffer:e,offset:a,length:A,position:Rs(o.position)}}let{offset:i,length:s}=OB(e.byteLength,t,typeof r=="number"?r:void 0);return{buffer:e,offset:i,length:s,position:Rs(n)}}function ar(e){return Kr("fd",e)}function Km(e){if(!Array.isArray(e))throw bt("buffers","an ArrayBufferView[]",e);for(let t of e)if(!oI(t))throw bt("buffers","an ArrayBufferView[]",e);return e}function C2(e,t){if(e===void 0)return;if(e===null||typeof e!="object")throw bt("options.fs","an object",e);let r=e;for(let n of t)if(typeof r[n]!="function")throw $ve(`options.fs.${String(n)}`,r[n]);return r}function HB(e){if(e!==void 0)return e instanceof pu?e:Kr("fd",e)}function iY(e,t){if(e===null){if(t===void 0)throw bt("path","of type string or an instance of Buffer or URL",e);return null}if(typeof e=="string"||Tt.Buffer.isBuffer(e))return e;if(e instanceof URL){if(e.protocol==="file:")return e.pathname;throw bt("path","of type string or an instance of Buffer or URL",e)}throw bt("path","of type string or an instance of Buffer or URL",e)}function g1e(e){let t=e?.start,r=e?.end;if(t!==void 0&&typeof t!="number")throw bt("start","of type number",t);if(r!==void 0&&typeof r!="number")throw bt("end","of type number",r);let n=t,i=r;if(n!==void 0&&(!Number.isFinite(n)||n<0))throw Ro("start",">= 0",t);if(i!==void 0&&(!Number.isFinite(i)||i<0))throw Ro("end",">= 0",r);if(n!==void 0&&i!==void 0&&n>i)throw Ro("start",`<= "end" (here: ${i})`,n);let s=e?.highWaterMark??e?.bufferSize,o=typeof s=="number"&&Number.isFinite(s)&&s>0?Math.floor(s):65536;return{start:n,end:i,highWaterMark:o,autoClose:e?.autoClose!==!1}}var aI=class{constructor(e,t){y(this,"_options");y(this,"bytesRead",0);y(this,"path");y(this,"pending",!0);y(this,"readable",!0);y(this,"readableAborted",!1);y(this,"readableDidRead",!1);y(this,"readableEncoding",null);y(this,"readableEnded",!1);y(this,"readableFlowing",null);y(this,"readableHighWaterMark",65536);y(this,"readableLength",0);y(this,"readableObjectMode",!1);y(this,"destroyed",!1);y(this,"closed",!1);y(this,"errored",null);y(this,"fd",null);y(this,"autoClose",!0);y(this,"start");y(this,"end");y(this,"_listeners",new Map);y(this,"_started",!1);y(this,"_reading",!1);y(this,"_readScheduled",!1);y(this,"_opening",!1);y(this,"_remaining",null);y(this,"_position",null);y(this,"_fileHandle",null);y(this,"_streamFs");y(this,"_signal");y(this,"_handleCloseListener");this._options=t;let r=HB(t?.fd),i=g1e(t??{});if(this.path=e,this.start=i.start,this.end=i.end,this.autoClose=i.autoClose,this.readableHighWaterMark=i.highWaterMark,this.readableEncoding=t?.encoding??null,this._position=this.start??null,this._remaining=this.end!==void 0?this.end-(this.start??0)+1:null,this._signal=B2(t?.signal),r instanceof pu){if(t?.fs!==void 0){let s=new Error("The FileHandle with fs method is not implemented");throw s.code="ERR_METHOD_NOT_IMPLEMENTED",s}this._fileHandle=r,this.fd=r.fd,this.pending=!1,this._handleCloseListener=()=>{this.closed||(this.closed=!0,this.destroyed=!0,this.readable=!1,this.emit("close"))},this._fileHandle.on("close",this._handleCloseListener)}else this._streamFs=C2(t?.fs,["open","read","close"]),typeof r=="number"&&(this.fd=r,this.pending=!1);this._signal&&(this._signal.aborted?queueMicrotask(()=>{this._abort(this._signal?.reason)}):this._signal.addEventListener("abort",()=>{this._abort(this._signal?.reason)})),this.fd===null&&queueMicrotask(()=>{this._openIfNeeded()})}_emitOpen(e){this.fd=e,this.pending=!1,this.emit("open",e),(this._started||this.readableFlowing)&&this._scheduleRead()}async _openIfNeeded(){if(this.fd!==null||this._opening||this.destroyed||this.closed)return;let e=typeof this.path=="string"?this.path:this.path instanceof Tt.Buffer?this.path.toString():null;if(!e){this._handleStreamError(Ve("EBADF","EBADF: bad file descriptor","read"));return}this._opening=!0,(this._streamFs?.open??$.open).bind(this._streamFs??$)(e,"r",438,(r,n)=>{if(this._opening=!1,r||typeof n!="number"){this._handleStreamError(r??Ve("EBADF","EBADF: bad file descriptor","open"));return}this._emitOpen(n)})}async _closeUnderlying(){if(this._fileHandle){this._fileHandle.closed||await this._fileHandle.close();return}if(this.fd!==null&&this.fd>=0){let e=this.fd,t=(this._streamFs?.close??$.close).bind(this._streamFs??$);await new Promise(r=>{t(e,()=>r())}),this.fd=-1}}_scheduleRead(){this._readScheduled||this._reading||this.readableFlowing===!1||this.destroyed||this.closed||(this._readScheduled=!0,queueMicrotask(()=>{this._readScheduled=!1,this._readNextChunk()}))}async _readNextChunk(){if(this._reading||this.destroyed||this.closed||this.readableFlowing===!1)return;if(Dg(this._signal),this.fd===null){await this._openIfNeeded();return}if(this._remaining===0){await this._finishReadable();return}let e=this._remaining===null?this.readableHighWaterMark:Math.min(this.readableHighWaterMark,this._remaining),t=Tt.Buffer.alloc(e);this._reading=!0;let r=async(i,s=0)=>{if(this._reading=!1,i){this._handleStreamError(i);return}if(s===0){await this._finishReadable();return}this.bytesRead+=s,this.readableDidRead=!0,typeof this._position=="number"&&(this._position+=s),this._remaining!==null&&(this._remaining-=s);let o=t.subarray(0,s);if(this.emit("data",this.readableEncoding?o.toString(this.readableEncoding):Tt.Buffer.from(o)),this._remaining===0){await this._finishReadable();return}this._scheduleRead()};if(this._fileHandle){try{let i=await this._fileHandle.read(t,0,e,this._position);await r(null,i.bytesRead)}catch(i){await r(i)}return}(this._streamFs?.read??$.read).bind(this._streamFs??$)(this.fd,t,0,e,this._position,(i,s)=>{r(i,s??0)})}async _finishReadable(){this.readableEnded||(this.readable=!1,this.readableEnded=!0,this.emit("end"),this.autoClose&&this.destroy())}_handleStreamError(e){this.closed||(this.errored=e,this.emit("error",e),this.autoClose?this.destroy():this.readable=!1)}async _abort(e){if(!(this.closed||this.destroyed)){if(this.readableAborted=!0,this.errored=AV(e),this.emit("error",this.errored),this._fileHandle){this.destroyed=!0,this.readable=!1,this.closed=!0,this.emit("close");return}if(this.autoClose){this.destroy();return}this.closed=!0,this.emit("close")}}async _readAllContent(){let e=[],t=0,r=this.readableFlowing;for(this.readableFlowing=!1;this._remaining!==0&&(this.fd===null&&await this._openIfNeeded(),this.fd!==null);){let n=this._remaining===null?m2:Math.min(m2,this._remaining),i=Tt.Buffer.alloc(n),s=0;if(this._fileHandle?s=(await this._fileHandle.read(i,0,n,this._position)).bytesRead:s=$.readSync(this.fd,i,0,n,this._position),s===0)break;let o=i.subarray(0,s);e.push(o),t+=s,typeof this._position=="number"&&(this._position+=s),this._remaining!==null&&(this._remaining-=s)}return this.readableFlowing=r,Tt.Buffer.concat(e,t)}on(e,t){let r=this._listeners.get(e)??[];return r.push(t),this._listeners.set(e,r),e==="data"&&(this._started=!0,this.readableFlowing!==!1&&(this.readableFlowing=!0,this._scheduleRead())),this}once(e,t){let r=(...n)=>{this.off(e,r),t(...n)};return r._originalListener=t,this.on(e,r)}off(e,t){let r=this._listeners.get(e);if(!r)return this;let n=r.findIndex(i=>i===t||i._originalListener===t);return n>=0&&r.splice(n,1),this}removeListener(e,t){return this.off(e,t)}removeAllListeners(e){return e===void 0?this._listeners.clear():this._listeners.delete(e),this}emit(e,...t){let r=this._listeners.get(e);return r?.length?(r.slice().forEach(n=>n(...t)),!0):!1}read(){return null}pipe(e,t){return this.on("data",r=>{e.write(r)}),this.on("end",()=>{e.end?.()}),this.resume(),e}unpipe(e){return this}pause(){return this.readableFlowing=!1,this}resume(){return this._started=!0,this.readableFlowing=!0,this._scheduleRead(),this}setEncoding(e){return this.readableEncoding=e,this}destroy(e){return this.destroyed?this:(this.destroyed=!0,this.readable=!1,e&&(this.errored=e,this.emit("error",e)),queueMicrotask(()=>{this._closeUnderlying().then(()=>{this.closed||(this.closed=!0,this.emit("close"))})}),this)}close(e){this.destroy(),e&&queueMicrotask(()=>e(null))}async*[Symbol.asyncIterator](){let e=await this._readAllContent();yield this.readableEncoding?e.toString(this.readableEncoding):e}},sY=16*1024*1024,AI=class{constructor(e,t){y(this,"_options");y(this,"bytesWritten",0);y(this,"path");y(this,"pending",!1);y(this,"writable",!0);y(this,"writableAborted",!1);y(this,"writableEnded",!1);y(this,"writableFinished",!1);y(this,"writableHighWaterMark",16384);y(this,"writableLength",0);y(this,"writableObjectMode",!1);y(this,"writableCorked",0);y(this,"destroyed",!1);y(this,"closed",!1);y(this,"errored",null);y(this,"writableNeedDrain",!1);y(this,"fd",null);y(this,"autoClose",!0);y(this,"_chunks",[]);y(this,"_listeners",new Map);y(this,"_fileHandle",null);y(this,"_streamFs");y(this,"_position",null);this._options=t;let r=HB(t?.fd),n=t?.start,i=t?.highWaterMark??t?.bufferSize,s=t?.flags??"w";if(this.path=e,this.autoClose=t?.autoClose!==!1,this.writableHighWaterMark=typeof i=="number"&&Number.isFinite(i)&&i>0?Math.floor(i):16384,this._position=typeof n=="number"?n:null,this._streamFs=C2(t?.fs,["open","close","write"]),t?.fs!==void 0&&C2(t?.fs,["writev"]),r instanceof pu){this._fileHandle=r,this.fd=r.fd;return}if(typeof r=="number"){this.fd=r;return}let o=typeof this.path=="string"?this.path:this.path instanceof Tt.Buffer?this.path.toString():null;if(!o)throw Ve("EBADF","EBADF: bad file descriptor","write");this.fd=$.openSync(o,s,t?.mode),queueMicrotask(()=>{this.fd!==null&&this.fd>=0&&this.emit("open",this.fd)})}async _closeUnderlying(){if(this._fileHandle){this._fileHandle.closed||await this._fileHandle.close();return}if(this.fd!==null&&this.fd>=0){let e=this.fd,t=(this._streamFs?.close??$.close).bind(this._streamFs??$);await new Promise(r=>{t(e,()=>r())}),this.fd=-1}}close(e){queueMicrotask(()=>{this._closeUnderlying().then(()=>{this.closed||(this.closed=!0,this.writable=!1,this.emit("close")),e?.(null)})})}write(e,t,r){if(this.writableEnded||this.destroyed){let s=new Error("write after end"),o=typeof t=="function"?t:r;return queueMicrotask(()=>o?.(s)),!1}let n;if(typeof e=="string")n=Tt.Buffer.from(e,typeof t=="string"?t:"utf8");else if(oI(e))n=new Uint8Array(e.buffer,e.byteOffset,e.byteLength);else throw bt("chunk","a string, Buffer, TypedArray, or DataView",e);if(this.writableLength+n.length>sY){let s=new Error(`WriteStream buffer exceeded ${sY} bytes`);this.errored=s,this.destroyed=!0,this.writable=!1;let o=typeof t=="function"?t:r;return queueMicrotask(()=>{o?.(s),this.emit("error",s)}),!1}this._chunks.push(n),this.bytesWritten+=n.length,this.writableLength+=n.length;let i=typeof t=="function"?t:r;return queueMicrotask(()=>i?.(null)),!0}end(e,t,r){if(this.writableEnded)return this;let n;return typeof e=="function"?n=e:typeof t=="function"?(n=t,e!=null&&this.write(e)):(n=r,e!=null&&this.write(e,t)),this.writableEnded=!0,this.writable=!1,this.writableFinished=!0,this.writableLength=0,queueMicrotask(()=>{(async()=>{try{if(this._fileHandle){for(let i of this._chunks){let s=await this._fileHandle.write(i,0,i.byteLength,this._position);typeof this._position=="number"&&(this._position+=s?.bytesWritten??i.byteLength)}this.autoClose&&!this._fileHandle.closed&&await this._fileHandle.close()}else{let i=typeof this.path=="string"?this.path:this.path instanceof Tt.Buffer?this.path.toString():null;if(this.fd!==null&&this.fd>=0){let s=$.writevSync(this.fd,this._chunks,this._position);typeof this._position=="number"&&(this._position+=s),this.autoClose&&await this._closeUnderlying()}else if(i){let s=this._chunks.map(o=>Tt.Buffer.from(o));if(typeof this._position=="number"){let o=$.readFileSync(i),a=Math.max(o.length,this._position+s.reduce((l,p)=>l+p.length,0)),A=Tt.Buffer.alloc(a);o.copy(A);let f=this._position;for(let l of s)l.copy(A,f),f+=l.length;$.writeFileSync(i,A)}else $.writeFileSync(i,Tt.Buffer.concat(s));this.autoClose&&this.fd!==null&&this.fd>=0&&await this._closeUnderlying()}else throw Ve("EBADF","EBADF: bad file descriptor","write")}this.emit("finish"),this.autoClose&&!this.closed&&(this.closed=!0,this.emit("close")),n?.()}catch(i){this.errored=i,this.emit("error",i)}})()}),this}setDefaultEncoding(e){return this}cork(){this.writableCorked++}uncork(){this.writableCorked>0&&this.writableCorked--}destroy(e){return this.destroyed?this:(this.destroyed=!0,this.writable=!1,e&&(this.errored=e,this.emit("error",e)),queueMicrotask(()=>{this._closeUnderlying().then(()=>{this.closed||(this.closed=!0,this.emit("close"))})}),this)}addListener(e,t){return this.on(e,t)}on(e,t){let r=this._listeners.get(e)??[];return r.push(t),this._listeners.set(e,r),this}once(e,t){let r=(...n)=>{this.removeListener(e,r),t(...n)};return this.on(e,r)}removeListener(e,t){let r=this._listeners.get(e);if(!r)return this;let n=r.indexOf(t);return n>=0&&r.splice(n,1),this}off(e,t){return this.removeListener(e,t)}removeAllListeners(e){return e===void 0?this._listeners.clear():this._listeners.delete(e),this}emit(e,...t){let r=this._listeners.get(e);return r?.length?(r.slice().forEach(n=>n(...t)),!0):!1}pipe(e,t){return e}unpipe(e){return this}[Symbol.asyncDispose](){return Promise.resolve()}},p1e=aI,E1e=AI,hV=function(t,r){return ir(r),new p1e(t,r)};hV.prototype=aI.prototype;var dV=function(t,r){return ir(r),cV(r??{}),new E1e(t,r)};dV.prototype=AI.prototype;function y1e(e){if(typeof e=="number")return e;let t={r:y2,"r+":ma,rs:y2,"rs+":ma,w:au|qn|Au,"w+":ma|qn|Au,a:au|fu|qn,"a+":ma|fu|qn,wx:au|qn|Au|Ba,xw:au|qn|Au|Ba,"wx+":ma|qn|Au|Ba,"xw+":ma|qn|Au|Ba,ax:au|fu|qn|Ba,xa:au|fu|qn|Ba,"ax+":ma|fu|qn|Ba,"xa+":ma|fu|qn|Ba};if(e in t)return t[e];throw new Error("Unknown file flag: "+e)}var oY={EPERM:1,ENOENT:2,ESRCH:3,EINTR:4,EIO:5,ENXIO:6,E2BIG:7,ENOEXEC:8,EBADF:9,ECHILD:10,EAGAIN:11,EWOULDBLOCK:11,ENOMEM:12,EACCES:13,EFAULT:14,ENOTBLK:15,EBUSY:16,EEXIST:17,EXDEV:18,ENODEV:19,ENOTDIR:20,EISDIR:21,EINVAL:22,ENFILE:23,EMFILE:24,ENOTTY:25,ETXTBSY:26,EFBIG:27,ENOSPC:28,ESPIPE:29,EROFS:30,EMLINK:31,EPIPE:32,EDOM:33,ERANGE:34,ENAMETOOLONG:36,ENOSYS:38,ENOTEMPTY:39,ELOOP:40,EOVERFLOW:75,ENOTSOCK:88,EDESTADDRREQ:89,EMSGSIZE:90,EPROTOTYPE:91,ENOPROTOOPT:92,EPROTONOSUPPORT:93,ENOTSUP:95,EOPNOTSUPP:95,EAFNOSUPPORT:97,EADDRINUSE:98,EADDRNOTAVAIL:99,ENETDOWN:100,ENETUNREACH:101,ECONNABORTED:103,ECONNRESET:104,ENOBUFS:105,EISCONN:106,ENOTCONN:107,ETIMEDOUT:110,ECONNREFUSED:111,EHOSTUNREACH:113,EALREADY:114,EINPROGRESS:115};function m1e(e){return Object.prototype.hasOwnProperty.call(oY,e)?-oY[e]:-1}function Ve(e,t,r,n){let i=new Error(t);return i.code=e,i.errno=m1e(e),i.syscall=r,n&&(i.path=n),i}function B1e(e){return String(e?.message??e??"")}function Vi(e){let t=B1e(e);return t.includes("ENOENT")||t.includes("entry not found")||t.includes("no such file or directory")||t.includes("not found")?"ENOENT":t.includes("EROFS")||t.includes("read-only file system")?"EROFS":t.includes("ERR_ACCESS_DENIED")?"ERR_ACCESS_DENIED":t.includes("EACCES")||t.includes("permission denied")?"EACCES":t.includes("EEXIST")||t.includes("file already exists")?"EEXIST":t.includes("EINVAL")||t.includes("invalid argument")?"EINVAL":t.includes("EXDEV")||t.includes("cross-device link")?"EXDEV":typeof e?.code=="string"&&e.code.length>0?e.code:null}function Hi(e,t,r){try{return e()}catch(n){let i=Vi(n);throw i==="ENOENT"?Ve("ENOENT",`ENOENT: no such file or directory, ${t} '${r}'`,t,r):i==="EACCES"?Ve("EACCES",`EACCES: permission denied, ${t} '${r}'`,t,r):i==="EEXIST"?Ve("EEXIST",`EEXIST: file already exists, ${t} '${r}'`,t,r):i==="EINVAL"?Ve("EINVAL",`EINVAL: invalid argument, ${t} '${r}'`,t,r):i==="EXDEV"?Ve("EXDEV",`EXDEV: cross-device link not permitted, ${t} '${r}'`,t,r):n}}function I1e(e){let t="",r=0;for(;r<e.length;){let n=e[r];if(n==="*"&&e[r+1]==="*")e[r+2]==="/"?(t+="(?:.+/)?",r+=3):(t+=".*",r+=2);else if(n==="*")t+="[^/]*",r++;else if(n==="?")t+="[^/]",r++;else if(n==="{"){let i=e.indexOf("}",r);if(i!==-1){let s=e.slice(r+1,i).split(",");t+="(?:"+s.map(o=>o.replace(/[.*+?^${}()|[\]\\]/g,"\\$&").replace(/\\\*/g,"[^/]*")).join("|")+")",r=i+1}else t+="\\{",r++}else if(n==="["){let i=e.indexOf("]",r);i!==-1?(t+=e.slice(r,i+1),r=i+1):(t+="\\[",r++)}else".+^${}()|[]\\".includes(n)?(t+="\\"+n,r++):(t+=n,r++)}return new RegExp("^"+t+"$")}function b1e(e){let t=e.split("/"),r=[];for(let n of t){if(/[*?{}\[\]]/.test(n))break;r.push(n)}return r.join("/")||"/"}var C1e=100;function Q1e(e,t){let r=I1e(e),n=b1e(e),i=(s,o)=>{if(o>C1e)return;let a;try{a=gV(s)}catch{return}for(let A of a){let f=s==="/"?"/"+A:s+"/"+A;r.test(f)&&t.push(f);try{Q2(f).isDirectory()&&i(f,o+1)}catch{}}};try{if(r.test(n)&&!Q2(n).isDirectory()){t.push(n);return}i(n,0)}catch{}}var gV,Q2;function S1(e){return Be(e)}function qB(e){return typeof globalThis<"u"?globalThis[e]:void 0}function Ce(e){return{applySync(t,r){let n=qB(e);if(typeof n=="function")return n(...r||[]);if(n&&typeof n.applySync=="function")return n.applySync(t,r)},applySyncPromise(t,r){let n=qB(e);if(typeof n=="function")return n(...r||[]);if(n&&typeof n.applySync=="function")return n.applySync(t,r);if(n&&typeof n.applySyncPromise=="function")return n.applySyncPromise(t,r)}}}function Tg(e){let t=qB(e);return typeof t=="function"||!!(t&&(typeof t.applySync=="function"||typeof t.applySyncPromise=="function"))}function Cr(e){return{apply(t,r){let n=qB(e);return typeof n=="function"?n(...r||[]):n&&typeof n.apply=="function"?n.apply(t,r):Promise.resolve(void 0)}}}var Lt={readFile:Ce("_fsReadFile"),writeFile:Ce("_fsWriteFile"),readFileBinary:Ce("_fsReadFileBinary"),writeFileBinary:Ce("_fsWriteFileBinary"),writeFileBinaryRaw:Ce("_fsWriteFileBinaryRaw"),readDir:Ce("_fsReadDir"),mkdir:Ce("_fsMkdir"),rmdir:Ce("_fsRmdir"),exists:Ce("_fsExists"),stat:Ce("_fsStat"),unlink:Ce("_fsUnlink"),rename:Ce("_fsRename"),chmod:Ce("_fsChmod"),chown:Ce("_fsChown"),link:Ce("_fsLink"),symlink:Ce("_fsSymlink"),readlink:Ce("_fsReadlink"),lstat:Ce("_fsLstat"),truncate:Ce("_fsTruncate"),utimes:Ce("_fsUtimes"),lutimes:Ce("_fsLutimes")},Er={readFile:Cr("_fsReadFileAsync"),writeFile:Cr("_fsWriteFileAsync"),readFileBinary:Cr("_fsReadFileBinaryAsync"),writeFileBinary:Cr("_fsWriteFileBinaryAsync"),readDir:Cr("_fsReadDirAsync"),mkdir:Cr("_fsMkdirAsync"),rmdir:Cr("_fsRmdirAsync"),stat:Cr("_fsStatAsync"),unlink:Cr("_fsUnlinkAsync"),rename:Cr("_fsRenameAsync"),chmod:Cr("_fsChmodAsync"),chown:Cr("_fsChownAsync"),link:Cr("_fsLinkAsync"),symlink:Cr("_fsSymlinkAsync"),readlink:Cr("_fsReadlinkAsync"),lstat:Cr("_fsLstatAsync"),truncate:Cr("_fsTruncateAsync"),utimes:Cr("_fsUtimesAsync"),lutimes:Cr("_fsLutimesAsync"),access:Cr("_fsAccessAsync")},w1e=Ce("fs.openSync"),pV=Ce("fs.closeSync"),S1e=Ce("fs.readSync"),_1e=Ce("_fsReadRaw"),v1e=Ce("fs.writeSync"),R1e=Ce("_fsWriteRaw"),D1e=Ce("_fsWritevRaw"),T1e=Ce("fs.fstatSync"),N1e=Ce("fs.ftruncateSync"),aY=Ce("fs.fsyncSync"),M1e=Ce("fs.futimesSync"),xA=Ce("fs._getPathSync"),F1e=Ce("process.umask"),k1e=Ce("process.memoryUsage"),x1e=Ce("process.cpuUsage"),U1e=Ce("process.resourceUsage"),L1e=Ce("process.versions"),Qke=Ce("_kernelPollRaw"),wke=Ce("_kernelIsattyRaw"),Ske=Ce("_kernelTtySizeRaw");function Ma(e){return typeof e=="string"?JSON.parse(e):e}function t0(e){return{__agentOSType:"bytes",base64:Tt.Buffer.from(e).toString("base64")}}function hB(e,t,r){let n=Vi(e);if(n==="ENOENT")throw Ve("ENOENT",`ENOENT: no such file or directory, ${t} '${r}'`,t,r);if(n==="EROFS")throw Ve("EROFS",`EROFS: read-only file system, ${t} '${r}'`,t,r);if(n==="ERR_ACCESS_DENIED"){let i=Ve("ERR_ACCESS_DENIED",`ERR_ACCESS_DENIED: permission denied, ${t} '${r}'`,t,r);throw i.code="ERR_ACCESS_DENIED",i}throw n==="EACCES"?Ve("EACCES",`EACCES: permission denied, ${t} '${r}'`,t,r):e}function P1e(e,t){return e==="/"?`/${t}`:e.endsWith("/")?`${e}${t}`:`${e}/${t}`}function QR(e,t,r){return Array.isArray(e)?r?e.map(n=>{if(typeof n=="string"){let i=$.statSync(P1e(t,n));return new LB(n,i.isDirectory(),t)}return new LB(n.name,n.isDirectory,t)}):e.map(n=>typeof n=="string"?n:n?.name):[]}function O1e(e,t,r){if(!(e instanceof Uint8Array))return QR(e,t,r);let n=[],i=0;for(;i<e.byteLength;){if(i+5>e.byteLength)throw new Error("Invalid raw readdir payload");let s=e[i++],o=e[i]|e[i+1]<<8|e[i+2]<<16|e[i+3]<<24;if(i+=4,o<0||i+o>e.byteLength)throw new Error("Invalid raw readdir entry");let a=Tt.Buffer.from(e.buffer,e.byteOffset+i,o).toString("utf8");i+=o,n.push(r?new LB(a,s===1,t):a)}return n}async function _1(e,t){ir(t);let r=typeof e=="number"?xA.applySync(void 0,[ar(e)]):Be(e);if(!r)throw Ve("EBADF","EBADF: bad file descriptor","read");let n=r,i=typeof t=="string"?t:t?.encoding;try{if(i)return await Er.readFile.apply(void 0,[n,i]);let s=await Er.readFileBinary.apply(void 0,[n]);return Tt.Buffer.from(s,"base64")}catch(s){throw Vi(s)==="ENOENT"?Ve("ENOENT",`ENOENT: no such file or directory, open '${r}'`,"open",r):Vi(s)==="EACCES"?Ve("EACCES",`EACCES: permission denied, open '${r}'`,"open",r):s}}async function v1(e,t,r){ir(r);let n=typeof e=="number"?xA.applySync(void 0,[ar(e)]):Be(e);if(!n)throw Ve("EBADF","EBADF: bad file descriptor","write");let i=n;try{if(typeof t=="string")return await Er.writeFile.apply(void 0,[i,t]);if(ArrayBuffer.isView(t)){let s=new Uint8Array(t.buffer,t.byteOffset,t.byteLength);return Tg("_fsWriteFileBinaryRaw")?Lt.writeFileBinaryRaw.applySyncPromise(void 0,[i,s]):await Er.writeFileBinary.apply(void 0,[i,t0(s)])}return await Er.writeFile.apply(void 0,[i,String(t)])}catch(s){hB(s,"write",n)}}async function H1e(e,t){ir(t);let r=Be(e);try{let n=await Er.readDir.apply(void 0,[r]);return QR(Ma(n),r,t?.withFileTypes)}catch(n){throw Vi(n)==="ENOENT"?Ve("ENOENT",`ENOENT: no such file or directory, scandir '${r}'`,"scandir",r):n}}async function q1e(e,t){let r=Be(e),n=typeof t=="object"?t?.recursive??!1:!1;return await Er.mkdir.apply(void 0,[r,n]),n?r:void 0}async function G1e(e){let t=Be(e);await Er.rmdir.apply(void 0,[t])}async function Y1e(e){let t=Be(e);try{let r=await Er.stat.apply(void 0,[t]);return new gu(Ma(r))}catch(r){throw Vi(r)==="ENOENT"?Ve("ENOENT",`ENOENT: no such file or directory, stat '${t}'`,"stat",t):r}}async function W1e(e){let t=Be(e),r=await Er.lstat.apply(void 0,[t]);return new gu(Ma(r))}async function V1e(e){let t=Be(e);await Er.unlink.apply(void 0,[t])}async function J1e(e,t){let r=Be(e,"oldPath"),n=Be(t,"newPath");await Er.rename.apply(void 0,[r,n])}async function j1e(e){let t=Be(e);try{await Er.access.apply(void 0,[t])}catch(r){throw Vi(r)==="ENOENT"?Ve("ENOENT",`ENOENT: no such file or directory, access '${t}'`,"access",t):r}}async function z1e(e,t){let r=Be(e),n=Sa(t,"mode");await Er.chmod.apply(void 0,[r,n])}async function K1e(e,t,r){let n=Be(e),i=Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),s=Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0});await Er.chown.apply(void 0,[n,i,s])}async function X1e(e,t){let r=Be(e,"existingPath"),n=Be(t,"newPath");await Er.link.apply(void 0,[r,n])}async function Z1e(e,t){let r=Be(e,"target"),n=Be(t);await Er.symlink.apply(void 0,[r,n])}async function $1e(e){let t=Be(e);return await Er.readlink.apply(void 0,[t])}async function e2e(e,t){let r=Be(e);await Er.truncate.apply(void 0,[r,t??0])}function _o(e,t){if(e&&typeof e=="object"&&!(e instanceof Date)){let o=typeof e.kind=="string"?e.kind:null;if(o==="now"||o==="UTIME_NOW")return{kind:"now"};if(o==="omit"||o==="UTIME_OMIT")return{kind:"omit"};if("nsec"in e){if(e.nsec===$.constants.UTIME_NOW||e.nsec==="UTIME_NOW")return{kind:"now"};if(e.nsec===$.constants.UTIME_OMIT||e.nsec==="UTIME_OMIT")return{kind:"omit"}}let a=Number(e.sec),A=Number(e.nsec??0);if(!Number.isInteger(a))throw bt(t,"an integer sec field",e);if(!Number.isInteger(A)||A<0||A>=1e9)throw createRangeError(`${t}.nsec must be an integer between 0 and 999999999`);return{sec:a,nsec:A}}let r=typeof e=="number"?e:new Date(e).getTime()/1e3;if(!Number.isFinite(r))throw createRangeError(`${t} must be a finite timestamp`);let n=Math.floor(r),i=n,s=Math.round((r-n)*1e9);return s>=1e9&&(i+=1,s-=1e9),{sec:i,nsec:s}}async function t2e(e,t,r){let n=Be(e);await Er.utimes.apply(void 0,[n,_o(t,"atime"),_o(r,"mtime")])}async function r2e(e,t,r){let n=Be(e);await Er.lutimes.apply(void 0,[n,_o(t,"atime"),_o(r,"mtime")])}function n2e(e){let t=4;for(let s of e){if(s.byteLength>4294967295)throw Ro("buffer.byteLength","<= 4294967295",s.byteLength);t+=4+s.byteLength}let r=new Uint8Array(t),n=new DataView(r.buffer,r.byteOffset,r.byteLength);n.setUint32(0,e.length,!0);let i=4;for(let s of e){let o=s instanceof Uint8Array?s:new Uint8Array(s.buffer,s.byteOffset,s.byteLength);n.setUint32(i,o.byteLength,!0),i+=4,r.set(o,i),i+=o.byteLength}return r}var $={constants:{F_OK:0,R_OK:4,W_OK:2,X_OK:1,COPYFILE_EXCL:1,COPYFILE_FICLONE:2,COPYFILE_FICLONE_FORCE:4,O_RDONLY:y2,O_WRONLY:au,O_RDWR:ma,O_CREAT:qn,O_EXCL:Ba,O_NOCTTY:256,O_TRUNC:Au,O_APPEND:fu,O_DIRECTORY:65536,O_NOATIME:262144,O_NOFOLLOW:131072,O_SYNC:1052672,O_DSYNC:4096,O_SYMLINK:2097152,O_DIRECT:16384,O_NONBLOCK:2048,UTIME_NOW:1073741823,UTIME_OMIT:1073741822,S_IFMT:61440,S_IFREG:32768,S_IFDIR:16384,S_IFCHR:8192,S_IFBLK:24576,S_IFIFO:4096,S_IFLNK:40960,S_IFSOCK:49152,S_IRWXU:448,S_IRUSR:256,S_IWUSR:128,S_IXUSR:64,S_IRWXG:56,S_IRGRP:32,S_IWGRP:16,S_IXGRP:8,S_IRWXO:7,S_IROTH:4,S_IWOTH:2,S_IXOTH:1,UV_FS_O_FILEMAP:536870912},Stats:gu,Dirent:LB,Dir:ZG,readFileSync(e,t){ir(t);let r=typeof e=="number"?xA.applySync(void 0,[ar(e)]):Be(e);if(!r)throw Ve("EBADF","EBADF: bad file descriptor","read");let n=r,i=typeof t=="string"?t:t?.encoding;try{if(i)return Lt.readFile.applySyncPromise(void 0,[n,i]);{let s=Lt.readFileBinary.applySyncPromise(void 0,[n]);return Tt.Buffer.from(s,"base64")}}catch(s){throw Vi(s)==="ENOENT"?Ve("ENOENT",`ENOENT: no such file or directory, open '${r}'`,"open",r):Vi(s)==="EACCES"?Ve("EACCES",`EACCES: permission denied, open '${r}'`,"open",r):s}},writeFileSync(e,t,r){ir(r);let n=typeof e=="number"?xA.applySync(void 0,[ar(e)]):Be(e);if(!n)throw Ve("EBADF","EBADF: bad file descriptor","write");let i=n;try{if(typeof t=="string")return Lt.writeFile.applySyncPromise(void 0,[i,t]);if(ArrayBuffer.isView(t)){let s=new Uint8Array(t.buffer,t.byteOffset,t.byteLength);return Tg("_fsWriteFileBinaryRaw")?Lt.writeFileBinaryRaw.applySyncPromise(void 0,[i,s]):Lt.writeFileBinary.applySyncPromise(void 0,[i,t0(s)])}else return Lt.writeFile.applySyncPromise(void 0,[i,String(t)])}catch(s){hB(s,"write",n)}},appendFileSync(e,t,r){ir(r);let n=Be(e),i="";try{i=$.existsSync(e)?$.readFileSync(e,"utf8"):""}catch(o){hB(o,"open",n)}let s=typeof t=="string"?t:String(t);try{$.writeFileSync(e,i+s,r)}catch(o){if(!o?.code)throw Ve("EACCES",`EACCES: permission denied, write '${n}'`,"write",n);hB(o,"write",n)}},readdirSync(e,t){ir(t);let r=Be(e),n=r,i;try{i=Lt.readDir.applySyncPromise(void 0,[n])}catch(s){throw Vi(s)==="ENOENT"?Ve("ENOENT",`ENOENT: no such file or directory, scandir '${r}'`,"scandir",r):s}return i instanceof Uint8Array?O1e(i,r,t?.withFileTypes):QR(Ma(i),r,t?.withFileTypes)},mkdirSync(e,t){let r=Be(e),n=r,i=typeof t=="object"?t?.recursive??!1:!1,s=typeof t=="object"?t?.mode:t,o=s===void 0?void 0:Sa(s);return Lt.mkdir.applySyncPromise(void 0,[n,{recursive:i,mode:w1(o??511)}]),i?r:void 0},rmdirSync(e,t){let r=Be(e);Lt.rmdir.applySyncPromise(void 0,[r])},rmSync(e,t){let r=S1(e),n=t||{};try{if($.statSync(r).isDirectory())if(n.recursive){let s=$.readdirSync(r);for(let o of s){let a=r.endsWith("/")?r+o:r+"/"+o;$.statSync(a).isDirectory()?$.rmSync(a,{recursive:!0}):$.unlinkSync(a)}$.rmdirSync(r)}else $.rmdirSync(r);else $.unlinkSync(r)}catch(i){if(n.force&&i.code==="ENOENT")return;throw i}},existsSync(e){let t=eY(e);return t?t==="/dev/null"||t==="/dev/zero"||t==="/dev/urandom"||t==="/dev/stdin"||t==="/dev/stdout"||t==="/dev/stderr"?!0:Lt.exists.applySyncPromise(void 0,[t]):!1},statSync(e,t){let r=Be(e),n=r,i;try{i=Lt.stat.applySyncPromise(void 0,[n])}catch(o){throw Vi(o)==="ENOENT"?Ve("ENOENT",`ENOENT: no such file or directory, stat '${r}'`,"stat",r):o}let s=Ma(i);return new gu(s)},lstatSync(e,t){let r=Be(e),n=Hi(()=>Lt.lstat.applySyncPromise(void 0,[r]),"lstat",r),i=Ma(n);return new gu(i)},unlinkSync(e){let t=Be(e);Lt.unlink.applySyncPromise(void 0,[t])},renameSync(e,t){let r=Be(e,"oldPath"),n=Be(t,"newPath");Lt.rename.applySyncPromise(void 0,[r,n])},copyFileSync(e,t,r){let n=$.readFileSync(e);$.writeFileSync(t,n)},cpSync(e,t,r){let n=S1(e),i=S1(t),s=r||{};if($.statSync(n).isDirectory()){if(!s.recursive)throw Ve("ERR_FS_EISDIR",`Path is a directory: cp '${n}'`,"cp",n);try{$.mkdirSync(i,{recursive:!0})}catch{}let a=$.readdirSync(n);for(let A of a){let f=n.endsWith("/")?n+A:n+"/"+A,l=i.endsWith("/")?i+A:i+"/"+A;$.cpSync(f,l,s)}}else{if(s.errorOnExist&&$.existsSync(i))throw Ve("EEXIST",`EEXIST: file already exists, cp '${n}' -> '${i}'`,"cp",i);if(!s.force&&s.force!==void 0&&$.existsSync(i))return;$.copyFileSync(n,i)}},mkdtempSync(e,t){ir(t);let r=Be(e,"prefix"),n="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";for(let i=0;i<10;i+=1){let s=Ra.randomBytes(6),o="";for(let A of s)o+=n[A%n.length];let a=r+o;try{return Hi(()=>Lt.mkdir.applySyncPromise(void 0,[a,{recursive:!1,mode:w1(511)}]),"mkdir",a),a}catch(A){if(i<9&&(A?.code==="EEXIST"||Vi(A)==="EEXIST"))continue;throw A}}throw Ve("EEXIST",`EEXIST: file already exists, mkdtemp '${r}'`,"mkdtemp",r)},opendirSync(e,t){let r=Be(e);if(!$.statSync(r).isDirectory())throw Ve("ENOTDIR",`ENOTDIR: not a directory, opendir '${r}'`,"opendir",r);return new ZG(r)},openSync(e,t,r){let n=Be(e),i=y1e(t??"r"),s=tY(r),o=i&qn?w1(s??438):s;try{return w1e.applySyncPromise(void 0,[n,i,o])}catch(a){let A=a?.message??String(a);throw A.includes("ENOENT")?Ve("ENOENT",A,"open",n):A.includes("EMFILE")?Ve("EMFILE",A,"open",n):a}},closeSync(e){if(ar(e),!l2e(e))try{pV.applySyncPromise(void 0,[e])}catch(t){throw(t?.message??String(t)).includes("EBADF")?Ve("EBADF","EBADF: bad file descriptor, close","close"):t}},readSync(e,t,r,n,i){let s=d1e(t,r,n,i),o;try{if(Tg("_fsReadRaw")){let f=_1e.applySyncPromise(void 0,[e,s.length,s.position??null]);o=f instanceof Uint8Array?f:Tt.Buffer.from(f)}else{let f=S1e.applySyncPromise(void 0,[e,s.length,s.position??null]);o=Tt.Buffer.from(f,"base64")}}catch(f){let l=f?.message??String(f);throw l.includes("EBADF")?Ve("EBADF",l,"read"):f}let a=new Uint8Array(s.buffer.buffer,s.buffer.byteOffset,s.buffer.byteLength),A=Math.min(o.length,s.length);return a.set(o.subarray(0,A),s.offset),A},writeSync(e,t,r,n,i){let s=nY(t,r,n,i),o;typeof s.buffer=="string"?o=Tt.Buffer.from(s.buffer,s.encoding):o=new Uint8Array(s.buffer.buffer,s.buffer.byteOffset+s.offset,s.length);let a=s.position??null;try{return Tg("_fsWriteRaw")?R1e.applySyncPromise(void 0,[e,o,a]):v1e.applySyncPromise(void 0,[e,t0(o),a])}catch(A){let f=A?.message??String(A);throw f.includes("EBADF")?Ve("EBADF",f,"write"):A}},fstatSync(e){ar(e);let t;try{t=T1e.applySyncPromise(void 0,[e])}catch(r){throw(r?.message??String(r)).includes("EBADF")?Ve("EBADF","EBADF: bad file descriptor, fstat","fstat"):r}return new gu(Ma(t))},ftruncateSync(e,t){ar(e);try{N1e.applySyncPromise(void 0,[e,t])}catch(r){throw(r?.message??String(r)).includes("EBADF")?Ve("EBADF","EBADF: bad file descriptor, ftruncate","ftruncate"):r}},fsyncSync(e){ar(e);try{aY.applySyncPromise(void 0,[e])}catch(t){throw(t?.message??String(t)).includes("EBADF")?Ve("EBADF","EBADF: bad file descriptor, fsync","fsync"):t}},fdatasyncSync(e){ar(e);try{aY.applySyncPromise(void 0,[e])}catch(t){throw(t?.message??String(t)).includes("EBADF")?Ve("EBADF","EBADF: bad file descriptor, fdatasync","fdatasync"):t}},readvSync(e,t,r){let n=ar(e),i=Km(t),s=0,a=Rs(r);for(let A of i){let f=A instanceof Uint8Array?A:new Uint8Array(A.buffer,A.byteOffset,A.byteLength),l=$.readSync(n,f,0,f.byteLength,a);if(s+=l,a!==null&&(a+=l),l<f.byteLength)break}return s},statfsSync(e,t){let r=Be(e);if(!$.existsSync(r))throw Ve("ENOENT",`ENOENT: no such file or directory, statfs '${r}'`,"statfs",r);return{type:16914839,bsize:4096,blocks:262144,bfree:262144,bavail:262144,files:1e6,ffree:999999}},globSync(e,t){let r=Array.isArray(e)?e:[e],n=[];for(let i of r)Q1e(i,n);return[...new Set(n)].sort()},chmodSync(e,t){let r=Be(e),n=Sa(t);Hi(()=>Lt.chmod.applySyncPromise(void 0,[r,n]),"chmod",r)},chownSync(e,t,r){let n=Be(e),i=Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),s=Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0});Hi(()=>Lt.chown.applySyncPromise(void 0,[n,i,s]),"chown",n)},fchmodSync(e,t){let r=ar(e),n=xA.applySync(void 0,[r]);if(!n)throw Ve("EBADF","EBADF: bad file descriptor","chmod");$.chmodSync(n,Sa(t))},fchownSync(e,t,r){let n=ar(e),i=xA.applySync(void 0,[n]);if(!i)throw Ve("EBADF","EBADF: bad file descriptor","chown");$.chownSync(i,t,r)},lchownSync(e,t,r){let n=Be(e),i=Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),s=Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0});Hi(()=>Lt.chown.applySyncPromise(void 0,[n,i,s]),"chown",n)},linkSync(e,t){let r=Be(e,"existingPath"),n=Be(t,"newPath");Hi(()=>Lt.link.applySyncPromise(void 0,[r,n]),"link",n)},symlinkSync(e,t,r){let n=Be(e,"target"),i=Be(t);Hi(()=>Lt.symlink.applySyncPromise(void 0,[n,i]),"symlink",i)},readlinkSync(e,t){ir(t);let r=Be(e);return Hi(()=>Lt.readlink.applySyncPromise(void 0,[r]),"readlink",r)},truncateSync(e,t){let r=Be(e);Hi(()=>Lt.truncate.applySyncPromise(void 0,[r,t??0]),"truncate",r)},utimesSync(e,t,r){let n=Be(e);Hi(()=>Lt.utimes.applySyncPromise(void 0,[n,_o(t,"atime"),_o(r,"mtime")]),"utimes",n)},lutimesSync(e,t,r){let n=Be(e);Hi(()=>Lt.lutimes.applySyncPromise(void 0,[n,_o(t,"atime"),_o(r,"mtime")]),"lutimes",n)},futimesSync(e,t,r){let n=ar(e);Hi(()=>M1e.applySyncPromise(void 0,[n,_o(t,"atime"),_o(r,"mtime")]),"futimes")},readFile(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r){Be(e),ir(t);try{r(null,$.readFileSync(e,t))}catch(n){r(n)}}else return Promise.resolve($.readFileSync(e,t))},writeFile(e,t,r,n){if(typeof r=="function"&&(n=r,r=void 0),n){Be(e),ir(r);try{$.writeFileSync(e,t,r),n(null)}catch(i){n(i)}}else return Promise.resolve($.writeFileSync(e,t,r))},appendFile(e,t,r,n){if(typeof r=="function"&&(n=r,r=void 0),n){Be(e),ir(r);try{$.appendFileSync(e,t,r),n(null)}catch(i){n(i)}}else return Promise.resolve($.appendFileSync(e,t,r))},readdir(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r){Be(e),ir(t);try{r(null,$.readdirSync(e,t))}catch(n){r(n)}}else return Promise.resolve($.readdirSync(e,t))},mkdir(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r){Be(e);try{$.mkdirSync(e,t),r(null)}catch(n){r(n)}}else return $.mkdirSync(e,t),Promise.resolve()},rmdir(e,t){if(t){Be(e);let r=t;try{$.rmdirSync(e),queueMicrotask(()=>r(null))}catch(n){queueMicrotask(()=>r(n))}}else return Promise.resolve($.rmdirSync(e))},rm(e,t,r){let n={},i;typeof t=="function"?i=t:(t&&(n=t),i=r);let s=()=>{try{if($.statSync(e).isDirectory())if(n.recursive){let a=$.readdirSync(e);for(let A of a){let f=e.endsWith("/")?e+A:e+"/"+A;$.statSync(f).isDirectory()?$.rmSync(f,{recursive:!0}):$.unlinkSync(f)}$.rmdirSync(e)}else $.rmdirSync(e);else $.unlinkSync(e)}catch(o){if(n.force&&o.code==="ENOENT")return;throw o}};if(i)try{s(),queueMicrotask(()=>i(null))}catch(o){queueMicrotask(()=>i(o))}else return s(),Promise.resolve()},exists(e,t){if(vA(t,"cb"),e===void 0)throw bt("path","of type string or an instance of Buffer or URL",e);queueMicrotask(()=>t(!!(eY(e)&&$.existsSync(e))))},stat(e,t){vA(t,"cb"),Be(e);let r=t;try{let n=$.statSync(e);queueMicrotask(()=>r(null,n))}catch(n){queueMicrotask(()=>r(n))}},lstat(e,t){if(t){let r=t;try{let n=$.lstatSync(e);queueMicrotask(()=>r(null,n))}catch(n){queueMicrotask(()=>r(n))}}else return Promise.resolve($.lstatSync(e))},unlink(e,t){if(t){Be(e);let r=t;try{$.unlinkSync(e),queueMicrotask(()=>r(null))}catch(n){queueMicrotask(()=>r(n))}}else return Promise.resolve($.unlinkSync(e))},rename(e,t,r){if(r){Be(e,"oldPath"),Be(t,"newPath");let n=r;try{$.renameSync(e,t),queueMicrotask(()=>n(null))}catch(i){queueMicrotask(()=>n(i))}}else return Promise.resolve($.renameSync(e,t))},copyFile(e,t,r){if(r)try{$.copyFileSync(e,t),r(null)}catch(n){r(n)}else return Promise.resolve($.copyFileSync(e,t))},cp(e,t,r,n){if(typeof r=="function"&&(n=r,r=void 0),n)try{$.cpSync(e,t,r),n(null)}catch(i){n(i)}else return Promise.resolve($.cpSync(e,t,r))},mkdtemp(e,t,r){typeof t=="function"&&(r=t,t=void 0),vA(r,"cb"),ir(t);try{r(null,$.mkdtempSync(e,t))}catch(n){r(n)}},opendir(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r)try{r(null,$.opendirSync(e,t))}catch(n){r(n)}else return Promise.resolve($.opendirSync(e,t))},open(e,t,r,n){let i="r",s=r;typeof t=="function"?(n=t,s=void 0):i=t??"r",typeof r=="function"&&(n=r,s=void 0),vA(n,"cb"),Be(e),tY(s);let o=n;try{let a=$.openSync(e,i,s);queueMicrotask(()=>o(null,a))}catch(a){queueMicrotask(()=>o(a))}},close(e,t){ar(e),vA(t,"cb");let r=t;try{$.closeSync(e),queueMicrotask(()=>r(null))}catch(n){queueMicrotask(()=>r(n))}},read(e,t,r,n,i,s){if(s){let o=s;if(e===0&&i==null&&typeof _kernelStdinRead<"u"){let A=new Uint8Array(t.buffer,t.byteOffset+r,n),f=()=>{_kernelStdinRead.apply(void 0,[n,100],{result:{promise:!0}}).then(l=>{if(l==null){setTimeout(f,1);return}if(l?.done){queueMicrotask(()=>o(null,0,t));return}let p=String(l?.dataBase64??"");if(!p){setTimeout(f,1);return}let B=Tt.Buffer.from(p,"base64"),S=Math.min(n,B.length);A.set(B.subarray(0,S),0),queueMicrotask(()=>o(null,S,t))},l=>{queueMicrotask(()=>o(l))})};f();return}let a=()=>{try{let A=$.readSync(e,t,r,n,i);queueMicrotask(()=>o(null,A,t))}catch(A){if((A?.message??String(A)).includes("EAGAIN")){setTimeout(a,1);return}queueMicrotask(()=>o(A))}};a()}else return Promise.resolve($.readSync(e,t,r,n,i))},write(e,t,r,n,i,s){if(typeof r=="function"?(s=r,r=void 0,n=void 0,i=void 0):typeof n=="function"?(s=n,n=void 0,i=void 0):typeof i=="function"&&(s=i,i=void 0),s){let o=nY(t,r,n,i),a=s;try{let A=$.writeSync(e,t,r,n,i);queueMicrotask(()=>a(null,A))}catch(A){queueMicrotask(()=>a(A))}}else return Promise.resolve($.writeSync(e,t,r,n,i))},writev(e,t,r,n){typeof r=="function"&&(n=r,r=null);let i=ar(e),s=Km(t),o=Rs(r);if(n)try{let a=$.writevSync(i,s,o);queueMicrotask(()=>n(null,a,s))}catch(a){queueMicrotask(()=>n(a))}else return Promise.resolve($.writevSync(i,s,o))},writevSync(e,t,r){let n=ar(e),i=Km(t);if(Tg("_fsWritevRaw")){let a=Rs(r),A=n2e(i);return D1e.applySyncPromise(void 0,[n,A,a])}let s=Rs(r),o=0;for(let a of i){let A=a instanceof Uint8Array?a:new Uint8Array(a.buffer,a.byteOffset,a.byteLength);o+=$.writeSync(n,A,0,A.length,s),s!==null&&(s+=A.length)}return o},fstat(e,t){if(t)try{t(null,$.fstatSync(e))}catch(r){t(r)}else return Promise.resolve($.fstatSync(e))},fsync(e,t){ar(e),vA(t,"cb");try{$.fsyncSync(e),t(null)}catch(r){t(r)}},fdatasync(e,t){ar(e),vA(t,"cb");try{$.fdatasyncSync(e),t(null)}catch(r){t(r)}},readv(e,t,r,n){typeof r=="function"&&(n=r,r=null);let i=ar(e),s=Km(t),o=Rs(r);if(n)try{let a=$.readvSync(i,s,o);queueMicrotask(()=>n(null,a,s))}catch(a){queueMicrotask(()=>n(a))}},statfs(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r)try{r(null,$.statfsSync(e,t))}catch(n){r(n)}else return Promise.resolve($.statfsSync(e,t))},glob(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r)try{r(null,$.globSync(e,t))}catch(n){r(n)}},promises:{async readFile(e,t){return e instanceof pu?e.readFile(t):_1(e,t)},async writeFile(e,t,r){return e instanceof pu?e.writeFile(t,r):v1(e,t,r)},async appendFile(e,t,r){if(e instanceof pu)return e.appendFile(t,r);let n=await _1(e,"utf8").catch(s=>s?.code==="ENOENT"?"":Promise.reject(s)),i=typeof t=="string"?t:String(t);await v1(e,n+i,r)},async readdir(e,t){return H1e(e,t)},async mkdir(e,t){return q1e(e,t)},async rmdir(e){return G1e(e)},async stat(e){return Y1e(e)},async lstat(e){return W1e(e)},async unlink(e){return V1e(e)},async rename(e,t){return J1e(e,t)},async copyFile(e,t){let r=await _1(e);await v1(t,r)},async cp(e,t,r){return $.cpSync(e,t,r)},async mkdtemp(e,t){return $.mkdtempSync(e,t)},async opendir(e,t){return $.opendirSync(e,t)},async open(e,t,r){return new pu($.openSync(e,t??"r",r))},async statfs(e,t){return $.statfsSync(e,t)},async glob(e,t){return $.globSync(e,t)},async access(e){return j1e(e)},async rm(e,t){return $.rmSync(e,t)},async chmod(e,t){return z1e(e,t)},async chown(e,t,r){return K1e(e,t,r)},async lchown(e,t,r){return $.lchownSync(e,t,r)},async lutimes(e,t,r){return r2e(e,t,r)},async link(e,t){return X1e(e,t)},async symlink(e,t){return Z1e(e,t)},async readlink(e){return $1e(e)},async realpath(e,t){return $.realpathSync(e,t)},async truncate(e,t){return e2e(e,t)},async utimes(e,t,r){return t2e(e,t,r)},watch(e,t){return h1e(e,t)}},accessSync(e){if(!$.existsSync(e))throw Ve("ENOENT",`ENOENT: no such file or directory, access '${e}'`,"access",e)},access(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r)try{$.accessSync(e),r(null)}catch(n){r(n)}else return $.promises.access(e)},realpathSync:Object.assign(function(t,r){ir(r);let n=40,i=0,s=Be(t),o=[];for(let A of s.split("/"))!A||A==="."||(A===".."?o.length>0&&o.pop():o.push(A));let a=[];for(;o.length>0;){let A=o.shift();if(A===".")continue;if(A===".."){a.length>0&&a.pop();continue}a.push(A);let f="/"+a.join("/");try{if($.lstatSync(f).isSymbolicLink()){if(++i>n){let S=new Error(`ELOOP: too many levels of symbolic links, realpath '${s}'`);throw S.code="ELOOP",S.syscall="realpath",S.path=s,S}let p=$.readlinkSync(f),B=p.split("/").filter(Boolean);p.startsWith("/")?a.length=0:a.pop(),o.unshift(...B)}}catch(l){let p=l;if(p.code==="ELOOP")throw l;if(p.code==="ENOENT"||p.code==="ENOTDIR"){let B=new Error(`ENOENT: no such file or directory, realpath '${s}'`);throw B.code="ENOENT",B.syscall="realpath",B.path=s,B}break}}return"/"+a.join("/")||"/"},{native(e,t){return ir(t),$.realpathSync(e)}}),realpath:Object.assign(function(t,r,n){let i;if(typeof r=="function"?n=r:i=r,n)ir(i),n(null,$.realpathSync(t,i));else return Promise.resolve($.realpathSync(t,i))},{native(e,t,r){let n;if(typeof t=="function"?r=t:n=t,r)ir(n),r(null,$.realpathSync.native(e,n));else return Promise.resolve($.realpathSync.native(e,n))}}),ReadStream:hV,WriteStream:dV,createReadStream:function(t,r){let n=typeof r=="string"?{encoding:r}:r;ir(n);let i=HB(n?.fd),s=iY(t,i);return new aI(s,n)},createWriteStream:function(t,r){let n=typeof r=="string"?{encoding:r}:r;ir(n),cV(n??{});let i=HB(n?.fd),s=iY(t,i);return new AI(s,n)},watch(...e){let{path:t,listener:r,options:n}=r1e(e[0],e[1],e[2]),i=c1e(t,n);return r&&i.on("change",r),i},watchFile(...e){let{path:t,listener:r,options:n}=n1e(e[0],e[1],e[2]);return l1e(t,n,r)},unwatchFile(...e){let t=Be(e[0]),r=e[1];if(r!==void 0&&typeof r!="function")throw bt("listener","of type function",r);let n=e0.get(t);if(n)for(let i of[...n]){let s=i._listeners.get("change")??[];(r===void 0||s.some(o=>o===r||o._originalListener===r))&&i.close()}},chmod(e,t,r){if(r){Be(e),Sa(t);try{$.chmodSync(e,t),r(null)}catch(n){r(n)}}else return Promise.resolve($.chmodSync(e,t))},chown(e,t,r,n){if(n){Be(e),Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0});try{$.chownSync(e,t,r),n(null)}catch(i){n(i)}}else return Promise.resolve($.chownSync(e,t,r))},fchmod(e,t,r){if(r){ar(e),Sa(t);try{$.fchmodSync(e,t),r(null)}catch(n){r(n)}}else return ar(e),Sa(t),Promise.resolve($.fchmodSync(e,t))},fchown(e,t,r,n){if(n){ar(e),Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0});try{$.fchownSync(e,t,r),n(null)}catch(i){n(i)}}else return ar(e),Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0}),Promise.resolve($.fchownSync(e,t,r))},lchown(e,t,r,n){if(arguments.length>=4){vA(n,"cb"),Be(e),Kr("uid",t,{min:-1,max:4294967295,allowNegativeOne:!0}),Kr("gid",r,{min:-1,max:4294967295,allowNegativeOne:!0});try{$.lchownSync(e,t,r),n(null)}catch(i){n(i)}}else return Promise.resolve($.lchownSync(e,t,r))},link(e,t,r){if(r){Be(e,"existingPath"),Be(t,"newPath");try{$.linkSync(e,t),r(null)}catch(n){r(n)}}else return Promise.resolve($.linkSync(e,t))},symlink(e,t,r,n){if(typeof r=="function"&&(n=r),n)try{$.symlinkSync(e,t),n(null)}catch(i){n(i)}else return Promise.resolve($.symlinkSync(e,t))},readlink(e,t,r){if(typeof t=="function"&&(r=t,t=void 0),r){Be(e),ir(t);try{r(null,$.readlinkSync(e,t))}catch(n){r(n)}}else return Promise.resolve($.readlinkSync(e,t))},truncate(e,t,r){if(typeof t=="function"&&(r=t,t=0),r)try{$.truncateSync(e,t),r(null)}catch(n){r(n)}else return Promise.resolve($.truncateSync(e,t))},utimes(e,t,r,n){if(n)try{$.utimesSync(e,t,r),n(null)}catch(i){n(i)}else return Promise.resolve($.utimesSync(e,t,r))},lutimes(e,t,r,n){if(n)try{$.lutimesSync(e,t,r),n(null)}catch(i){n(i)}else return Promise.resolve($.lutimesSync(e,t,r))},futimes(e,t,r,n){if(n)try{$.futimesSync(e,t,r),n(null)}catch(i){n(i)}else return Promise.resolve($.futimesSync(e,t,r))}};gV=e=>$.readdirSync(e);Q2=e=>$.statSync(e);var wR=$;Ge("_fsModule",wR);var Ia={platform:typeof _osConfig<"u"&&_osConfig.platform||"linux",arch:typeof _osConfig<"u"&&_osConfig.arch||"x64",type:typeof _osConfig<"u"&&_osConfig.type||"Linux",release:typeof _osConfig<"u"&&_osConfig.release||"6.8.0-secure-exec",version:typeof _osConfig<"u"&&_osConfig.version||"#1 SMP PREEMPT_DYNAMIC secure-exec",homedir:typeof _osConfig<"u"&&_osConfig.homedir||"/home/user",tmpdir:typeof _osConfig<"u"&&_osConfig.tmpdir||"/tmp",hostname:typeof _osConfig<"u"&&_osConfig.hostname||"secure-exec",machine:typeof _osConfig<"u"&&_osConfig.machine||"x86_64"};function AY(){return vs("homedir",globalThis.process?.env?.HOME||Ia.homedir)}function i2e(){return vs("tmpdir",globalThis.process?.env?.TMPDIR||Ia.tmpdir)}function s2e(){return vs("user",globalThis.process?.env?.USER||globalThis.process?.env?.LOGNAME||"user")}function o2e(){return vs("shell",globalThis.process?.env?.SHELL||"/bin/sh")}function w2(){let e=globalThis.process?.uid;return Number.isFinite(e)?e:0}function dB(){let e=globalThis.process?.gid;return Number.isFinite(e)?e:0}function EV(){return globalThis.__agentOSVirtualOs||{}}function vs(e,t){let r=EV()[e];return typeof r=="string"&&r.length>0?r:t}function SR(e,t){let r=Number(EV()[e]);return Number.isSafeInteger(r)&&r>0?r:t}function fY(){return SR("cpuCount",1)}function yV(){return SR("totalmem",1073741824)}function a2e(){return Math.min(SR("freemem",536870912),yV())}var mV={SIGHUP:1,SIGINT:2,SIGQUIT:3,SIGILL:4,SIGTRAP:5,SIGABRT:6,SIGIOT:6,SIGBUS:7,SIGFPE:8,SIGKILL:9,SIGUSR1:10,SIGSEGV:11,SIGUSR2:12,SIGPIPE:13,SIGALRM:14,SIGTERM:15,SIGSTKFLT:16,SIGCHLD:17,SIGCONT:18,SIGSTOP:19,SIGTSTP:20,SIGTTIN:21,SIGTTOU:22,SIGURG:23,SIGXCPU:24,SIGXFSZ:25,SIGVTALRM:26,SIGPROF:27,SIGWINCH:28,SIGIO:29,SIGPOLL:29,SIGPWR:30,SIGSYS:31},uY={1:"SIGHUP",2:"SIGINT",3:"SIGQUIT",4:"SIGILL",5:"SIGTRAP",6:"SIGABRT",7:"SIGBUS",8:"SIGFPE",9:"SIGKILL",10:"SIGUSR1",11:"SIGSEGV",12:"SIGUSR2",13:"SIGPIPE",14:"SIGALRM",15:"SIGTERM",16:"SIGSTKFLT",17:"SIGCHLD",18:"SIGCONT",19:"SIGSTOP",20:"SIGTSTP",21:"SIGTTIN",22:"SIGTTOU",23:"SIGURG",24:"SIGXCPU",25:"SIGXFSZ",26:"SIGVTALRM",27:"SIGPROF",28:"SIGWINCH",29:"SIGIO",30:"SIGPWR",31:"SIGSYS"};function _R(e){if(e==null)return{bridgeSignal:"SIGTERM",signalCode:"SIGTERM"};if(e===0||e==="0")return{bridgeSignal:"0",signalCode:null};if(typeof e=="number"){let t=uY[e];if(t)return{bridgeSignal:t,signalCode:t};throw new Error("Unknown signal: "+e)}if(typeof e=="string"){let t=mV[e];if(t!==void 0){let r=uY[t]??e;return{bridgeSignal:r,signalCode:r}}}throw new Error("Unknown signal: "+e)}var A2e={E2BIG:7,EACCES:13,EADDRINUSE:98,EADDRNOTAVAIL:99,EAFNOSUPPORT:97,EAGAIN:11,EALREADY:114,EBADF:9,EBADMSG:74,EBUSY:16,ECANCELED:125,ECHILD:10,ECONNABORTED:103,ECONNREFUSED:111,ECONNRESET:104,EDEADLK:35,EDESTADDRREQ:89,EDOM:33,EDQUOT:122,EEXIST:17,EFAULT:14,EFBIG:27,EHOSTUNREACH:113,EIDRM:43,EILSEQ:84,EINPROGRESS:115,EINTR:4,EINVAL:22,EIO:5,EISCONN:106,EISDIR:21,ELOOP:40,EMFILE:24,EMLINK:31,EMSGSIZE:90,EMULTIHOP:72,ENAMETOOLONG:36,ENETDOWN:100,ENETRESET:102,ENETUNREACH:101,ENFILE:23,ENOBUFS:105,ENODATA:61,ENODEV:19,ENOENT:2,ENOEXEC:8,ENOLCK:37,ENOLINK:67,ENOMEM:12,ENOMSG:42,ENOPROTOOPT:92,ENOSPC:28,ENOSR:63,ENOSTR:60,ENOSYS:38,ENOTCONN:107,ENOTDIR:20,ENOTEMPTY:39,ENOTSOCK:88,ENOTSUP:95,ENOTTY:25,ENXIO:6,EOPNOTSUPP:95,EOVERFLOW:75,EPERM:1,EPIPE:32,EPROTO:71,EPROTONOSUPPORT:93,EPROTOTYPE:91,ERANGE:34,EROFS:30,ESPIPE:29,ESRCH:3,ESTALE:116,ETIME:62,ETIMEDOUT:110,ETXTBSY:26,EWOULDBLOCK:11,EXDEV:18},f2e={PRIORITY_LOW:19,PRIORITY_BELOW_NORMAL:10,PRIORITY_NORMAL:0,PRIORITY_ABOVE_NORMAL:-7,PRIORITY_HIGH:-14,PRIORITY_HIGHEST:-20},BV={platform(){return vs("platform",Ia.platform)},arch(){return vs("arch",Ia.arch)},type(){return vs("type",Ia.type)},release(){return vs("release",Ia.release)},version(){return vs("version",Ia.version)},homedir(){return AY()},tmpdir(){return i2e()},hostname(){return vs("hostname",Ia.hostname)},userInfo(e){return{username:s2e(),uid:w2(),gid:dB(),shell:o2e(),homedir:AY()}},cpus(){return Array.from({length:fY()},()=>({model:"Virtual CPU",speed:2e3,times:{user:1e5,nice:0,sys:5e4,idle:8e5,irq:0}}))},totalmem(){return yV()},freemem(){return a2e()},loadavg(){return[.1,.1,.1]},uptime(){return 3600},networkInterfaces(){return{}},endianness(){return"LE"},EOL:`
-`,devNull:"/dev/null",machine(){return vs("machine",Ia.machine)},constants:{signals:mV,errno:A2e,priority:f2e,dlopen:{RTLD_LAZY:1,RTLD_NOW:2,RTLD_GLOBAL:256,RTLD_LOCAL:0},UV_UDP_REUSEADDR:4},getPriority(e){return 0},setPriority(e,t){},availableParallelism(){return fY()}};Ge("_osModule",BV);var u2e=BV,IV={};O2(IV,{ChildProcess:()=>RR,default:()=>B2e,exec:()=>_V,execFile:()=>RV,execFileSync:()=>DV,execSync:()=>vV,fork:()=>TV,spawn:()=>l0,spawnSync:()=>DR});var Cu=new Map,r0=new Map;function c2e(e){if(typeof e!="number")return;let t=r0.get(e);t?t.holders+=1:r0.set(e,{holders:1,closePending:!1})}function l2e(e){let t=r0.get(e);return t?(t.closePending=!0,!0):!1}function h2e(e){let t=r0.get(e);if(t&&(t.holders-=1,!(t.holders>0)&&(r0.delete(e),t.closePending)))try{pV.applySyncPromise(void 0,[e])}catch{}}var d2e=200,g2e=25;function p2e(e){return!e||typeof e!="object"?null:typeof e.sessionId=="string"&&e.sessionId.length>0||typeof e.sessionId=="number"&&Number.isFinite(e.sessionId)?e.sessionId:null}function vR(e){if(e&&typeof e=="object")return e;if(typeof e=="string")try{let t=JSON.parse(e);return t&&typeof t=="object"?t:e}catch{}return e}var S2="AGENTOS_IPC:";function bV(e){let t=JSON.stringify(e),r=typeof Buffer<"u"?Buffer.from(t,"utf8").toString("base64"):btoa(t);return`${S2}${r}
-`}function E2e(e){let t=typeof Buffer<"u"?Buffer.from(e,"base64").toString("utf8"):atob(e);return JSON.parse(t)}function CV(e,t){let r=`${e}${typeof Buffer<"u"?Buffer.from(t).toString("utf8"):String(t)}`,n=[],i=[],s=0;for(;;){let o=r.indexOf(S2,s);if(o===-1)return i.push(r.slice(s)),{buffer:"",messages:n,output:i.join("")};i.push(r.slice(s,o));let a=o+S2.length,A=r.indexOf(`
-`,a);if(A===-1)return{buffer:r.slice(o),messages:n,output:i.join("")};try{n.push(E2e(r.slice(a,A)))}catch{i.push(r.slice(o,A+1))}s=A+1}}function QV(e,t){if(!t||typeof t!="object")return!1;if(t.type==="stdout"||t.type==="stderr"){let r={sessionId:e};return typeof t.data=="string"?r.data=t.data:typeof Buffer<"u"&&Buffer.isBuffer(t.data)?r.dataBase64=t.data.toString("base64"):t.data instanceof Uint8Array||ArrayBuffer.isView(t.data)?r.dataBase64=Buffer.from(t.data.buffer,t.data.byteOffset,t.data.byteLength).toString("base64"):t.data?.__agentOSType==="bytes"&&typeof t.data.base64=="string"&&(r.dataBase64=t.data.base64),_2(`child_${t.type}`,r),!0}return t.type==="exit"?(_2("child_exit",{sessionId:e,code:t.exitCode,signal:t.signal??null}),!0):!1}function wV(e){e?._detachedBootstrapPending&&(e._detachedBootstrapPending=!1,e._detachedBootstrapPollsRemaining=0,e._detachedBootstrapTimer!=null&&(clearTimeout(e._detachedBootstrapTimer),e._detachedBootstrapTimer=null),e._pollRefed||(e._pollTimer?.unref?.(),e._handleRefed&&e._handleId&&typeof _unregisterHandle=="function"&&(_unregisterHandle(e._handleId),e._handleRefed=!1)))}function SV(e){e?._detachedBootstrapPending&&(e._detachedBootstrapPollsRemaining>0&&(e._detachedBootstrapPollsRemaining-=1),e._detachedBootstrapPollsRemaining===0&&wV(e))}function y2e(e,t=g2e){if(!e?.detached||e._sessionId==null||typeof _childProcessPoll>"u")return!1;if(!e._detachedBootstrapPending)return!0;for(let r=0;r<t;r+=1){if(!Cu.has(e._sessionId))return!0;let n=vR(_childProcessPoll.applySync(void 0,[e._sessionId,10]));if(SV(e),!n||typeof n!="object"){if(!e._detachedBootstrapPending)return!0;continue}if(QV(e._sessionId,n)&&n?.type==="exit"||!e._detachedBootstrapPending)return!0}return!e._detachedBootstrapPending}function R1(e,t){if(typeof e!="number")return!1;try{let r=typeof Buffer<"u"&&Buffer.isBuffer(t)?t:typeof Buffer<"u"?Buffer.from(t):t;$.writeSync(e,r,0,r.length,null)}catch{}return!0}function GB(e,t){if(typeof e!="number"||t==null)return!1;try{let r=typeof t=="string"?typeof Buffer<"u"?Buffer.from(t):t:typeof Buffer<"u"&&Buffer.isBuffer(t)?t:typeof Buffer<"u"?Buffer.from(t):t;$.writeSync(e,r,0,r.length,null)}catch{}return!0}function D1(e,t,r){let n=Cu.get(e);if(n){if(t==="stdout"){let i=typeof Buffer<"u"?Buffer.from(r):r;if(n._ipcEnabled){let s=CV(n._ipcStdoutBuffer,i);n._ipcStdoutBuffer=s.buffer;for(let a of s.messages)n._emitOrQueueIpcMessage(a);if(s.output.length===0)return;let o=typeof Buffer<"u"?Buffer.from(s.output,"utf8"):s.output;if(R1(n._stdoutFd,o))return;n.stdout.emit("data",o);return}if(R1(n._stdoutFd,i))return;n.stdout.emit("data",i)}else if(t==="stderr"){let i=typeof Buffer<"u"?Buffer.from(r):r;if(R1(n._stderrFd,i))return;n.stderr.emit("data",i)}else if(t==="exit"){wV(n);let i=n.connected;n.connected=!1;let s=n._pendingSignalCode??(r&&typeof r=="object"?r.signal??null:null),o=r&&typeof r=="object"?r.code:r;if(n._pendingSignalCode=null,n.signalCode=s,n.exitCode=s==null?o:null,n.stdout.emit("end"),n.stderr.emit("end"),i&&n.emit("disconnect"),n.emit("close",n.exitCode,n.signalCode),n.emit("exit",n.exitCode,n.signalCode),Array.isArray(n._inheritedFds)){for(let a of n._inheritedFds)h2e(a);n._inheritedFds=[]}Cu.delete(e),typeof _unregisterHandle=="function"&&_unregisterHandle(`child:${e}`)}}}var _2=(e,t,r)=>{if(typeof e=="number"){D1(e,t,r);return}let n=(()=>{if(t&&typeof t=="object")return t;if(typeof t=="string")try{return JSON.parse(t)}catch{return null}return null})(),i=p2e(n);if(i!=null){if(e==="child_stdout"||e==="child_stderr"){let s=n?.data,o;if(typeof Buffer<"u"&&Buffer.isBuffer(s))o=Buffer.from(s);else if(s instanceof Uint8Array)o=typeof Buffer<"u"?Buffer.from(s.buffer,s.byteOffset,s.byteLength):s;else if(ArrayBuffer.isView(s))o=typeof Buffer<"u"?Buffer.from(s.buffer,s.byteOffset,s.byteLength):new Uint8Array(s.buffer,s.byteOffset,s.byteLength);else{let a=typeof n?.dataBase64=="string"?n.dataBase64:typeof s=="string"?s:s?.__agentOSType==="bytes"&&typeof s?.base64=="string"?s.base64:"";o=typeof Buffer<"u"?Buffer.from(a,"base64"):new Uint8Array(atob(a).split("").map(A=>A.charCodeAt(0)))}D1(i,e==="child_stdout"?"stdout":"stderr",o);return}if(e==="child_exit"){let s=typeof n?.code=="number"?n.code:Number(n?.code??1),o=typeof n?.signal=="string"?n.signal:null;D1(i,"exit",{code:s,signal:o})}}};Ge("_childProcessDispatch",_2);var m2e=64;function v2(e,t=0){let r=Cu.get(e);if(!r||typeof _childProcessPoll>"u"||r._pollScheduled)return;r._pollScheduled=!0;let n=setTimeout(()=>{if(r._pollTimer=null,r._pollScheduled=!1,!Cu.has(e))return;let i=0;for(;i<m2e&&Cu.has(e);){SV(r);let s=vR(_childProcessPoll.applySync(void 0,[e,i===0?10:0]));if(!s||typeof s!="object"){v2(e,i===0?5:0);return}if(i+=1,QV(e,s)&&s.type==="exit")return}v2(e,0)},t);r._pollTimer=n,!r._pollRefed&&!r._detachedBootstrapPending&&typeof n?.unref=="function"&&n.unref()}function Nl(e,t){return(e._listeners[t]?.length??0)>0||(e._onceListeners[t]?.length??0)>0}function cY(e,t){let r=e._readableEncoding;return!r||typeof t=="string"?t:typeof Buffer<"u"&&Buffer.isBuffer(t)?t.toString(r):t instanceof Uint8Array?typeof Buffer<"u"?Buffer.from(t).toString(r):String(t):t}function Ng(e){e._flushScheduled||(e._flushScheduled=!0,queueMicrotask(()=>{if(e._flushScheduled=!1,e._bufferedChunks.length>0&&Nl(e,"data")){let t=e._bufferedChunks.splice(0,e._bufferedChunks.length);for(let r of t)e.emit("data",r)}e._ended&&e._bufferedChunks.length===0&&Nl(e,"end")&&e.emit("end")}))}function Xm(e,t){if(e._maxListenersWarned instanceof Set||(e._maxListenersWarned=new Set),e._maxListeners>0&&!e._maxListenersWarned.has(t)){let r=(e._listeners[t]?.length??0)+(e._onceListeners[t]?.length??0);if(r>e._maxListeners){e._maxListenersWarned.add(t);let n=`MaxListenersExceededWarning: Possible EventEmitter memory leak detected. ${r} ${t} listeners added. MaxListeners is ${e._maxListeners}. Use emitter.setMaxListeners() to increase limit`;typeof console<"u"&&console.error&&console.error(n)}}}function lY(e){let t=[],r=[],n=[],i=!1,s=()=>{for(;n.length>0;){let f=n.shift();if(r.length>0){f(Promise.reject(r.shift()));continue}if(t.length>0){f(Promise.resolve({done:!1,value:t.shift()}));continue}if(i){f(Promise.resolve({done:!0,value:void 0}));continue}n.unshift(f);break}},o=f=>{t.push(f),s()},a=()=>{i=!0,s()},A=f=>{r.push(f),i=!0,s()};return e.on("data",o),e.on("end",a),e.on("close",a),e.on("error",A),Ng(e),{next(){return r.length>0?Promise.reject(r.shift()):t.length>0?Promise.resolve({done:!1,value:t.shift()}):i?Promise.resolve({done:!0,value:void 0}):new Promise(f=>{n.push(f)})},return(){return e.off("data",o),e.off("end",a),e.off("close",a),e.off("error",A),i=!0,s(),Promise.resolve({done:!0,value:void 0})},[Symbol.asyncIterator](){return this}}}var Dl=1e3,RR=class{constructor(){y(this,"_listeners",{});y(this,"_onceListeners",{});y(this,"_maxListeners",10);y(this,"_maxListenersWarned",new Set);y(this,"pid",Dl++);y(this,"killed",!1);y(this,"exitCode",null);y(this,"signalCode",null);y(this,"_pendingSignalCode",null);y(this,"connected",!1);y(this,"_pollScheduled",!1);y(this,"_pollRefed",!0);y(this,"_pollTimer",null);y(this,"_detachedBootstrapPending",!1);y(this,"_detachedBootstrapPollsRemaining",0);y(this,"_detachedBootstrapTimer",null);y(this,"_sessionId",null);y(this,"_handleId",null);y(this,"_handleDescription","");y(this,"_handleRefed",!1);y(this,"_ipcEnabled",!1);y(this,"_ipcStdoutBuffer","");y(this,"_ipcQueuedMessages",[]);y(this,"spawnfile","");y(this,"spawnargs",[]);y(this,"stdin");y(this,"stdout");y(this,"stderr");y(this,"stdio");this.stdin={writable:!0,destroyed:!1,_listeners:{},_onceListeners:{},write(e,t,r){let n=typeof t=="function"?t:r;return n&&queueMicrotask(()=>n(null)),!0},end(e,t,r){let n=typeof e=="function"?e:typeof t=="function"?t:r;this.writable=!1,n&&queueMicrotask(()=>n())},destroy(){return this.writable=!1,this.destroyed=!0,this.emit("close"),this},on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this},once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),this},off(e,t){if(this._listeners[e]){let r=this._listeners[e].indexOf(t);r!==-1&&this._listeners[e].splice(r,1)}if(this._onceListeners[e]){let r=this._onceListeners[e].indexOf(t);r!==-1&&this._onceListeners[e].splice(r,1)}return this},removeListener(e,t){return this.off(e,t)},emit(e,...t){let r=!1;return this._listeners[e]&&this._listeners[e].forEach(n=>{n(...t),r=!0}),this._onceListeners[e]&&(this._onceListeners[e].forEach(n=>{n(...t),r=!0}),this._onceListeners[e]=[]),r}},this.stdout={readable:!0,isTTY:!1,destroyed:!1,_listeners:{},_onceListeners:{},_bufferedChunks:[],_ended:!1,_flushScheduled:!1,_maxListeners:10,_maxListenersWarned:new Set,on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),Xm(this,e),(e==="data"||e==="end")&&Ng(this),this},once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),Xm(this,e),(e==="data"||e==="end")&&Ng(this),this},off(e,t){if(this._listeners[e]){let r=this._listeners[e].indexOf(t);r!==-1&&this._listeners[e].splice(r,1)}if(this._onceListeners[e]){let r=this._onceListeners[e].indexOf(t);r!==-1&&this._onceListeners[e].splice(r,1)}return this},removeListener(e,t){return this.off(e,t)},emit(e,...t){return e==="data"&&(t[0]=cY(this,t[0]),!Nl(this,"data"))?(this._bufferedChunks.push(t[0]),!1):e==="end"&&(this._ended=!0,!Nl(this,"end"))?!1:(this._listeners[e]&&this._listeners[e].forEach(r=>r(...t)),this._onceListeners[e]&&(this._onceListeners[e].forEach(r=>r(...t)),this._onceListeners[e]=[]),!0)},read(){return null},setEncoding(e){return this._readableEncoding=e==null||e==="buffer"?null:String(e),this},setMaxListeners(e){return this._maxListeners=e,this},getMaxListeners(){return this._maxListeners},pipe(e){return e},pause(){return this},resume(){return this},destroy(){return this.readable=!1,this._ended=!0,this.destroyed=!0,this.emit("close"),this},[Symbol.asyncIterator](){return lY(this)}},this.stderr={readable:!0,isTTY:!1,destroyed:!1,_listeners:{},_onceListeners:{},_bufferedChunks:[],_ended:!1,_flushScheduled:!1,_maxListeners:10,_maxListenersWarned:new Set,on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),Xm(this,e),(e==="data"||e==="end")&&Ng(this),this},once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),Xm(this,e),(e==="data"||e==="end")&&Ng(this),this},off(e,t){if(this._listeners[e]){let r=this._listeners[e].indexOf(t);r!==-1&&this._listeners[e].splice(r,1)}if(this._onceListeners[e]){let r=this._onceListeners[e].indexOf(t);r!==-1&&this._onceListeners[e].splice(r,1)}return this},removeListener(e,t){return this.off(e,t)},emit(e,...t){return e==="data"&&(t[0]=cY(this,t[0]),!Nl(this,"data"))?(this._bufferedChunks.push(t[0]),!1):e==="end"&&(this._ended=!0,!Nl(this,"end"))?!1:(this._listeners[e]&&this._listeners[e].forEach(r=>r(...t)),this._onceListeners[e]&&(this._onceListeners[e].forEach(r=>r(...t)),this._onceListeners[e]=[]),!0)},read(){return null},setEncoding(e){return this._readableEncoding=e==null||e==="buffer"?null:String(e),this},setMaxListeners(e){return this._maxListeners=e,this},getMaxListeners(){return this._maxListeners},pipe(e){return e},pause(){return this},resume(){return this},destroy(){return this.readable=!1,this._ended=!0,this.destroyed=!0,this.emit("close"),this},[Symbol.asyncIterator](){return lY(this)}},this.stdio=[this.stdin,this.stdout,this.stderr]}on(e,t){return this._listeners[e]||(this._listeners[e]=[]),this._listeners[e].push(t),this._checkMaxListeners(e),e==="message"&&this._flushQueuedIpcMessages(),this}once(e,t){return this._onceListeners[e]||(this._onceListeners[e]=[]),this._onceListeners[e].push(t),this._checkMaxListeners(e),e==="message"&&this._flushQueuedIpcMessages(),this}off(e,t){if(this._listeners[e]){let r=this._listeners[e].indexOf(t);r!==-1&&this._listeners[e].splice(r,1)}return this}removeListener(e,t){return this.off(e,t)}setMaxListeners(e){return this._maxListeners=e,this}getMaxListeners(){return this._maxListeners}_checkMaxListeners(e){if(this._maxListenersWarned instanceof Set||(this._maxListenersWarned=new Set),this._maxListeners>0&&!this._maxListenersWarned.has(e)){let t=(this._listeners[e]?.length??0)+(this._onceListeners[e]?.length??0);if(t>this._maxListeners){this._maxListenersWarned.add(e);let r=`MaxListenersExceededWarning: Possible EventEmitter memory leak detected. ${t} ${e} listeners added to [ChildProcess]. MaxListeners is ${this._maxListeners}. Use emitter.setMaxListeners() to increase limit`;typeof console<"u"&&console.error&&console.error(r)}}}_hasIpcMessageListeners(){return(this._listeners.message?.length??0)>0||(this._onceListeners.message?.length??0)>0}_emitOrQueueIpcMessage(e){return this._hasIpcMessageListeners()?this.emit("message",e,void 0):(this._ipcQueuedMessages.push(e),!1)}_flushQueuedIpcMessages(){this._ipcQueuedMessages.length!==0&&queueMicrotask(()=>{for(;this._ipcQueuedMessages.length>0&&this._hasIpcMessageListeners();)this.emit("message",this._ipcQueuedMessages.shift(),void 0)})}emit(e,...t){let r=!1;return this._listeners[e]&&this._listeners[e].forEach(n=>{n(...t),r=!0}),this._onceListeners[e]&&(this._onceListeners[e].forEach(n=>{n(...t),r=!0}),this._onceListeners[e]=[]),r}kill(e){let t=_R(e);return this.killed=!0,this._pendingSignalCode=t.signalCode,!0}ref(){return this._pollRefed=!0,this._pollTimer?.ref?.(),!this._handleRefed&&this._handleId&&typeof _registerHandle=="function"&&(_registerHandle(this._handleId,this._handleDescription),this._handleRefed=!0),this}unref(){return this._pollRefed=!1,this._detachedBootstrapPending&&y2e(this),this._detachedBootstrapPending||this._pollTimer?.unref?.(),!this._detachedBootstrapPending&&this._handleRefed&&this._handleId&&typeof _unregisterHandle=="function"&&(_unregisterHandle(this._handleId),this._handleRefed=!1),this}disconnect(){this.connected=!1,this.emit("disconnect")}send(e,t,r,n){if(!this.connected||!this._ipcEnabled||this._sessionId==null)return!1;let i=typeof t=="function"?t:typeof r=="function"?r:n;try{let s=bV(e);return this.stdin.write(s,"utf8",i),!0}catch(s){return i?(queueMicrotask(()=>i(s)),!1):(this.emit("error",s),!1)}}_complete(e,t,r){let n=this._pendingSignalCode??this.signalCode;if(this._pendingSignalCode=null,this.signalCode=n??null,this.exitCode=n==null?r:null,e){let i=typeof Buffer<"u"?Buffer.from(e):e;this.stdout.emit("data",i)}if(t){let i=typeof Buffer<"u"?Buffer.from(t):t;this.stderr.emit("data",i)}this.stdout.emit("end"),this.stderr.emit("end"),this.emit("close",this.exitCode,this.signalCode),this.emit("exit",this.exitCode,this.signalCode)}};function _V(e,t,r){typeof t=="function"&&(r=t,t={});let n=l0(e,[],{...t,shell:!0});n.spawnargs=[e],n.spawnfile=e;let i=t?.maxBuffer??1024*1024,s="",o="",a=0,A=0,f=!1,l=!1,p=null,B=S=>{!r||l||(l=!0,r(S,s,o))};return n.stdout.on("data",S=>{if(f)return;let _=String(S);s+=_,a+=_.length,a>i&&(f=!0,n.kill("SIGTERM"))}),n.stderr.on("data",S=>{if(f)return;let _=String(S);o+=_,A+=_.length,A>i&&(f=!0,n.kill("SIGTERM"))}),n.on("close",(...S)=>{let _=S[0];if(r)if(f){let N=new Error("stdout maxBuffer length exceeded");N.code="ERR_CHILD_PROCESS_STDIO_MAXBUFFER",N.killed=!0,N.cmd=e,N.stdout=s,N.stderr=o,B(N)}else if(_!==0&&p==null){let N=new Error("Command failed: "+e);N.code=_,N.killed=!1,N.signal=null,N.cmd=e,N.stdout=s,N.stderr=o,B(N)}else B(null)}),n.on("error",S=>{if(r){let _=S instanceof Error?S:new Error(String(S));p=_,_.cmd=e,_.stdout=s,_.stderr=o,B(_)}}),n}function vV(e,t){let r=t||{};if(typeof _childProcessSpawnSync>"u")throw new Error("child_process.execSync requires CommandExecutor to be configured");let n=r.cwd??(typeof process<"u"?process.cwd():"/"),i=r.maxBuffer??1024*1024,s=_childProcessSpawnSync.applySyncPromise(void 0,[e,JSON.stringify([]),JSON.stringify({cwd:n,env:r.env,input:r.input==null?null:t0(r.input),maxBuffer:i,shell:!0})]),o=typeof s=="string"?JSON.parse(s):s,a=Array.isArray(r.stdio)?r.stdio:r.stdio==="inherit"?["inherit","inherit","inherit"]:[];if(GB(a[1],o.stdout)&&(o.stdout=typeof o.stdout=="string"?"":Buffer.from("")),GB(a[2],o.stderr),o.maxBufferExceeded){let A=new Error("stdout maxBuffer length exceeded");throw A.code="ERR_CHILD_PROCESS_STDIO_MAXBUFFER",A.stdout=o.stdout,A.stderr=o.stderr,A}if(o.code!==0){let A=new Error("Command failed: "+e);throw A.status=o.code,A.stdout=o.stdout,A.stderr=o.stderr,A.output=[null,o.stdout,o.stderr],A}return(r.encoding==="buffer"||!r.encoding)&&typeof Buffer<"u"?Buffer.from(o.stdout):o.stdout}function l0(e,t,r){let n=[],i={};Array.isArray(t)?(n=t,i=r||{}):i=t||{};let s=new RR;s.spawnfile=e,s.spawnargs=[e,...n],s.detached=i.detached===!0,s._detachedBootstrapPending=s.detached,s._detachedBootstrapPollsRemaining=s.detached?d2e:0;let o=Array.isArray(i.stdio)?i.stdio:i.stdio==="inherit"?["inherit","inherit","inherit"]:[];s._stdoutFd=typeof o[1]=="number"?o[1]:null,s._stderrFd=typeof o[2]=="number"?o[2]:null,s._inheritedFds=[];for(let A of[s._stdoutFd,s._stderrFd])typeof A=="number"&&(c2e(A),s._inheritedFds.push(A));if(typeof _childProcessSpawnStart<"u"){let A;try{let l=i.cwd??(typeof process<"u"?process.cwd():"/");A=vR(_childProcessSpawnStart.applySync(void 0,[e,JSON.stringify(n),JSON.stringify({cwd:l,env:i.env,shell:i.shell===!0||typeof i.shell=="string",detached:i.detached===!0})]))}catch(l){let p=l instanceof Error?l:new Error(String(l));return p.code==null&&/command not found:/i.test(String(p.message||""))?p.code="ENOENT":p.code==null&&/ERR_NATIVE_BINARY_NOT_SUPPORTED\b/i.test(String(p.message||""))&&(p.code="ERR_NATIVE_BINARY_NOT_SUPPORTED"),queueMicrotask(()=>{s.emit("error",p)}),s}let f=typeof A=="object"&&A!==null?A.childId:A;return Cu.set(f,s),s._sessionId=f,typeof _registerHandle=="function"&&(s._handleId=`child:${f}`,s._handleDescription=`child_process: ${e} ${n.join(" ")}`,_registerHandle(s._handleId,s._handleDescription),s._handleRefed=!0),s.stdin.write=(l,p,B)=>{let S=typeof p=="function"?p:B;if(typeof _childProcessStdinWrite>"u")return!1;let _=typeof l=="string"?new TextEncoder().encode(l):l;try{_childProcessStdinWrite.applySync(void 0,[f,_])}catch(N){return S?(queueMicrotask(()=>S(N)),!1):(s.stdin.emit("error",N),!1)}return S&&queueMicrotask(()=>S(null)),!0},s.stdin.end=(l,p,B)=>{let S=typeof l=="function"?l:typeof p=="function"?p:B;if(l!=null&&typeof l!="function"&&s.stdin.write(l,typeof p=="string"?p:void 0),typeof _childProcessStdinClose<"u")try{_childProcessStdinClose.applySync(void 0,[f])}catch(_){if(S){queueMicrotask(()=>S(_));return}s.stdin.emit("error",_);return}s.stdin.writable=!1,S&&queueMicrotask(()=>S())},s.stdin.destroy=()=>(s.stdin.end(),s.stdin.destroyed=!0,s.stdin.emit("close"),s.stdin),s.kill=l=>{if(typeof _childProcessKill>"u")return!1;let p=_R(l);return _childProcessKill.applySync(void 0,[f,p.bridgeSignal]),s.killed=!0,s._pendingSignalCode=p.signalCode,!0},s.pid=typeof A=="object"&&A!==null?Number(A.pid)||-1:Number(f)||-1,(o[1]==="inherit"||o[1]===1)&&s.stdout.on("data",l=>process.stdout.write(l)),(o[2]==="inherit"||o[2]===2)&&s.stderr.on("data",l=>process.stderr.write(l)),setTimeout(()=>s.emit("spawn"),0),v2(f,0),s}let a=new Error("child_process.spawn requires CommandExecutor to be configured");return setTimeout(()=>{s.emit("error",a),s._complete("",a.message,1)},0),s}function DR(e,t,r){let n=[],i={};if(Array.isArray(t)?(n=t,i=r||{}):i=t||{},typeof _childProcessSpawnSync>"u")return{pid:Dl++,output:[null,"","child_process.spawnSync requires CommandExecutor to be configured"],stdout:"",stderr:"child_process.spawnSync requires CommandExecutor to be configured",status:1,signal:null,error:new Error("child_process.spawnSync requires CommandExecutor to be configured")};try{let s=i.cwd??(typeof process<"u"?process.cwd():"/"),o=i.maxBuffer,a=i.encoding==null||i.encoding==="buffer",A=Number.isInteger(i.timeout)&&i.timeout>0?i.timeout:null,f=_R(i.killSignal).signalCode??"SIGTERM",l=_childProcessSpawnSync.applySyncPromise(void 0,[e,JSON.stringify(n),JSON.stringify({cwd:s,env:i.env,input:i.input==null?null:t0(i.input),maxBuffer:o,shell:i.shell===!0||typeof i.shell=="string",timeout:A,killSignal:f})]),p=typeof l=="string"?JSON.parse(l):l,B=Array.isArray(i.stdio)?i.stdio:i.stdio==="inherit"?["inherit","inherit","inherit"]:[],S=a&&typeof Buffer<"u"?Buffer.from(p.stdout):p.stdout,_=a&&typeof Buffer<"u"?Buffer.from(p.stderr):p.stderr;if(GB(B[1],S)&&(S=a&&typeof Buffer<"u"?Buffer.from(""):""),GB(B[2],_)&&(_=a&&typeof Buffer<"u"?Buffer.from(""):""),p.timedOut){let N=new Error(`spawnSync ${e} ETIMEDOUT`);return N.code="ETIMEDOUT",{pid:Dl++,output:[null,S,_],stdout:S,stderr:_,status:null,signal:p.signal??f,error:N}}if(p.maxBufferExceeded){let N=new Error("stdout maxBuffer length exceeded");return N.code="ERR_CHILD_PROCESS_STDIO_MAXBUFFER",{pid:Dl++,output:[null,S,_],stdout:S,stderr:_,status:p.code,signal:null,error:N}}return{pid:Dl++,output:[null,S,_],stdout:S,stderr:_,status:p.code,signal:null,error:void 0}}catch(s){s&&typeof s=="object"&&s.code==null&&/ERR_NATIVE_BINARY_NOT_SUPPORTED\b/i.test(String(s.message||s))&&(s.code="ERR_NATIVE_BINARY_NOT_SUPPORTED");let o=s instanceof Error?s.message:String(s),a=i.encoding==null||i.encoding==="buffer",A=a&&typeof Buffer<"u"?Buffer.from(""):"",f=a&&typeof Buffer<"u"?Buffer.from(o):o;return{pid:Dl++,output:[null,A,f],stdout:A,stderr:f,status:1,signal:null,error:s instanceof Error?s:new Error(String(s))}}}function RV(e,t,r,n){let i=[],s={},o;typeof t=="function"?o=t:typeof r=="function"?(i=t.slice(),o=r):(i=Array.isArray(t)?t:[],s=r||{},o=n);let a=s.maxBuffer??1024*1024,A=l0(e,i,s),f="",l="",p=0,B=0,S=!1;return A.stdout.on("data",_=>{let N=String(_);f+=N,p+=N.length,p>a&&!S&&(S=!0,A.kill("SIGTERM"))}),A.stderr.on("data",_=>{let N=String(_);l+=N,B+=N.length,B>a&&!S&&(S=!0,A.kill("SIGTERM"))}),A.on("close",(..._)=>{let N=_[0];if(o)if(S){let P=new Error("stdout maxBuffer length exceeded");P.code="ERR_CHILD_PROCESS_STDIO_MAXBUFFER",P.killed=!0,P.stdout=f,P.stderr=l,o(P,f,l)}else if(N!==0){let P=new Error("Command failed: "+e);P.code=N,P.stdout=f,P.stderr=l,o(P,f,l)}else o(null,f,l)}),A.on("error",_=>{o&&o(_,f,l)}),A}function DV(e,t,r){let n=[],i={};Array.isArray(t)?(n=t,i=r||{}):i=t||{};let s=i.maxBuffer??1024*1024,o=DR(e,n,{...i,maxBuffer:s});if(o.error&&String(o.error.code)==="ERR_CHILD_PROCESS_STDIO_MAXBUFFER")throw o.error;if(o.status!==0){let a=new Error("Command failed: "+e);throw a.status=o.status??void 0,a.stdout=String(o.stdout),a.stderr=String(o.stderr),a}return i.encoding==="buffer"||!i.encoding||typeof o.stdout=="string"?o.stdout:o.stdout.toString(i.encoding)}function TV(e,t,r){if(typeof e!="string"||e.length===0)throw new TypeError('The "modulePath" argument must be of type string');let n=[],i={};Array.isArray(t)?(n=t.slice(),i=r||{}):i=t||{};let s=i.cwd??(typeof process<"u"?process.cwd():"/"),o=Array.isArray(i.execArgv)?i.execArgv:typeof process<"u"&&Array.isArray(process.execArgv)?process.execArgv:[],a={...typeof process<"u"?process.env:{},...i.env||{},AGENTOS_NODE_IPC:"1"},A=l0(i.execPath||(typeof process<"u"?process.execPath:"node"),[...o,e,...n],{...i,cwd:s,env:a,shell:!1});return A._ipcEnabled=!0,A.connected=!0,A}var NV={ChildProcess:RR,exec:_V,execSync:vV,spawn:l0,spawnSync:DR,execFile:RV,execFileSync:DV,fork:TV};Ge("_childProcessModule",NV);var B2e=NV,oi={},Cn={},R2=new Ru,hY="process.stdin",Or="",D2=!1,Zm=!1,gB=!1,pB=!1;Du("_stdinData",typeof _processConfig<"u"&&_processConfig.stdin||"");Du("_stdinPosition",0);Du("_stdinEnded",!1);Du("_stdinFlowMode",!1);function Da(){return globalThis._stdinData}function I2e(e){globalThis._stdinData=e}function uu(){return globalThis._stdinPosition}function TR(e){globalThis._stdinPosition=e}function OA(){return globalThis._stdinEnded}function NR(e){globalThis._stdinEnded=e}function YB(){return globalThis._stdinFlowMode}function Mg(e){globalThis._stdinFlowMode=e}function b2e(e){Or="",D2=!1,R2=e,gB=!1,pB=!1}function T1(){if(!(OA()||!Da())&&YB()&&uu()<Da().length){let e=Da().slice(uu());TR(Da().length);let t=[...oi.data||[],...Cn.data||[]];Cn.data=[];for(let i of t)i(e);NR(!0);let r=[...oi.end||[],...Cn.end||[]];Cn.end=[];for(let i of r)i();let n=[...oi.close||[],...Cn.close||[]];Cn.close=[];for(let i of n)i()}}function n0(e,t){let r=[...oi[e]||[],...Cn[e]||[]];Cn[e]=[];for(let n of r)try{n(t)}catch(i){let s=jl(i);if(!s.handled&&s.rethrow!==null){if(uI(s.rethrow))return PV(s.rethrow),!0;throw s.rethrow}return!0}return r.length>0}function i0(e){if(e){if(!Zm&&typeof _registerHandle=="function")try{_registerHandle(hY,"process.stdin"),Zm=!0}catch{}return}if(Zm&&typeof _unregisterHandle=="function"){try{_unregisterHandle(hY)}catch{}Zm=!1}}function fI(){if(!YB()||Or.length===0)return;let e=Or;Or="";let t=NA.encoding?e:_e.Buffer.from(e);n0("data",t),Qu()}function Qu(){!OA()||pB||Or.length>0||gB||(gB=!0,queueMicrotask(()=>{gB=!1,!(!OA()||pB||Or.length>0)&&(pB=!0,n0("end"),n0("close"),i0(!1))}))}function MV(){OA()||(NR(!0),fI(),Qu())}function cu(){return typeof __runtimeStreamStdin<"u"&&!!__runtimeStreamStdin}function N1(){D2||!DA()&&!cu()||(D2=!0,i0(!NA.paused),!cu()&&(typeof _kernelStdinRead>"u"||(async()=>{try{for(;!OA()&&!(typeof _kernelStdinRead>"u");){let e=await _kernelStdinRead.apply(void 0,[65536,100],{result:{promise:!0}});if(e?.done)break;let t=String(e?.dataBase64??"");t&&(Or+=R2.decode(_e.Buffer.from(t,"base64"),{stream:!0}),fI())}}catch{}Or+=R2.decode(),MV()})()))}function C2e(e,t){if(e==="stdin_end"){MV();return}if(e!=="stdin"||OA())return;let r,n=!1;if(t&&typeof t=="object"&&typeof t.dataBase64=="string"){let i=_e.Buffer.from(t.dataBase64,"base64");if(i.length===0)return;if(!NA.encoding&&YB()){n0("data",i),Qu();return}r=NA.encoding?i.toString(NA.encoding):i.toString("latin1"),n=!NA.encoding}else r=typeof t=="string"?t:t==null?"":_e.Buffer.from(t).toString("utf8");if(r){if(Or+=r,n&&!NA.encoding&&YB()){let i=Or;Or="",n0("data",_e.Buffer.from(i,"latin1")),Qu();return}fI()}}var NA={readable:!0,paused:!0,encoding:null,isRaw:!1,read(e){if(Or.length>0){if(!e||e>=Or.length){let n=Or;return Or="",n}let r=Or.slice(0,e);return Or=Or.slice(e),r}if(uu()>=Da().length)return null;let t=e?Da().slice(uu(),uu()+e):Da().slice(uu());return TR(uu()+t.length),t},on(e,t){return oi[e]||(oi[e]=[]),oi[e].push(t),(DA()||cu())&&(e==="data"||e==="end"||e==="close")&&N1(),e==="data"&&this.paused&&this.resume(),(e==="end"||e==="close")&&(DA()||cu())&&Qu(),e==="end"&&Da()&&!OA()&&(Mg(!0),T1()),this},once(e,t){return Cn[e]||(Cn[e]=[]),Cn[e].push(t),(DA()||cu())&&(e==="data"||e==="end"||e==="close")&&N1(),e==="data"&&this.paused&&this.resume(),(e==="end"||e==="close")&&(DA()||cu())&&Qu(),e==="end"&&Da()&&!OA()&&(Mg(!0),T1()),this},off(e,t){if(oi[e]){let r=oi[e].indexOf(t);r!==-1&&oi[e].splice(r,1)}return this},removeListener(e,t){return this.off(e,t)},emit(e,...t){let r=[...oi[e]||[],...Cn[e]||[]];Cn[e]=[];for(let n of r)n(t[0]);return r.length>0},pause(){return this.paused=!0,Mg(!1),i0(!1),this},resume(){return(DA()||cu())&&(N1(),i0(!0)),this.paused=!1,Mg(!0),fI(),T1(),Qu(),this},setEncoding(e){return this.encoding=e,this},setRawMode(e){if(!DA())throw new Error("setRawMode is not supported when stdin is not a TTY");return typeof _ptySetRawMode<"u"&&_ptySetRawMode.applySync(void 0,[e]),this.isRaw=e,this},get isTTY(){return DA()},[Symbol.asyncIterator]:function(){let e=this,t=[],r=[],n=!1,i=null,s=()=>{for(;r.length>0;){if(i){r.shift()(Promise.reject(i));continue}if(t.length>0){r.shift()(Promise.resolve({done:!1,value:t.shift()}));continue}if(n){r.shift()(Promise.resolve({done:!0,value:void 0}));continue}break}},o=f=>{t.push(f),s()},a=()=>{n=!0,s()},A=f=>{i=f,n=!0,s()};return e.on("end",a),e.on("close",a),e.on("error",A),e.on("data",o),e.resume(),{next(){return i?Promise.reject(i):t.length>0?Promise.resolve({done:!1,value:t.shift()}):n?Promise.resolve({done:!0,value:void 0}):new Promise(f=>{r.push(f)})},return(){return n=!0,e.off?.("data",o),e.off?.("end",a),e.off?.("close",a),e.off?.("error",A),s(),Promise.resolve({done:!0,value:void 0})},[Symbol.asyncIterator](){return this}}}};function FV(){return{platform:typeof _processConfig<"u"&&_processConfig.platform||"linux",arch:typeof _processConfig<"u"&&_processConfig.arch||"x64",version:typeof _processConfig<"u"&&_processConfig.version||"v22.0.0",cwd:typeof _processConfig<"u"&&_processConfig.cwd||"/root",env:typeof _processConfig<"u"&&_processConfig.env||{},argv:typeof _processConfig<"u"&&_processConfig.argv||["node","script.js"],execPath:typeof _processConfig<"u"&&_processConfig.execPath||"/usr/bin/node",pid:typeof _processConfig<"u"&&_processConfig.pid||1,ppid:typeof _processConfig<"u"&&_processConfig.ppid||0,uid:typeof _processConfig<"u"&&_processConfig.uid||0,gid:typeof _processConfig<"u"&&_processConfig.gid||0,stdin:typeof _processConfig<"u"?_processConfig.stdin:void 0,timingMitigation:typeof _processConfig<"u"&&_processConfig.timingMitigation||"off",frozenTimeMs:typeof _processConfig<"u"?_processConfig.frozenTimeMs:void 0,highResolutionTime:typeof _processConfig<"u"&&_processConfig.high_resolution_time===!0}}var wr=FV(),Q2e=typeof performance<"u"&&performance&&typeof performance.now=="function"?performance.now.bind(performance):Date.now,w2e=()=>typeof __secureExecHrNowUs=="function"?__secureExecHrNowUs()/1e3:Q2e();function Gl(){return wr.timingMitigation==="freeze"&&typeof wr.frozenTimeMs=="number"?wr.frozenTimeMs:w2e()}var S2e=Gl(),$m=void 0,Ts=!1,MR=class extends Error{constructor(t){super("process.exit("+t+")");y(this,"code");y(this,"_isProcessExit");this.name="ProcessExitError",this.code=t,this._isProcessExit=!0}};Ge("ProcessExitError",MR);var FR={SIGHUP:1,SIGINT:2,SIGQUIT:3,SIGILL:4,SIGTRAP:5,SIGABRT:6,SIGBUS:7,SIGFPE:8,SIGKILL:9,SIGUSR1:10,SIGSEGV:11,SIGUSR2:12,SIGPIPE:13,SIGALRM:14,SIGTERM:15,SIGCHLD:17,SIGCONT:18,SIGSTOP:19,SIGTSTP:20,SIGTTIN:21,SIGTTOU:22,SIGURG:23,SIGXCPU:24,SIGXFSZ:25,SIGVTALRM:26,SIGPROF:27,SIGWINCH:28,SIGIO:29,SIGPWR:30,SIGSYS:31},kV=Object.fromEntries(Object.entries(FR).map(([e,t])=>[t,e])),_2e=new Set(["SIGWINCH","SIGCHLD","SIGCONT","SIGURG"]),xV=new Set(["SIGHUP","SIGINT","SIGTERM","SIGWINCH","SIGCHLD"]);function UV(e){if(e==null)return 15;if(typeof e=="number")return e;let t=FR[e];if(t!==void 0)return t;throw new Error("Unknown signal: "+e)}function v2e(e){return typeof e=="string"&&xV.has(e)}var dY={ESRCH:3,EPERM:1,EINVAL:22};function R2e(e){let t=String(e&&e.message||e||""),r=null;if(e&&typeof e.code=="string"&&Object.prototype.hasOwnProperty.call(dY,e.code)?r=e.code:/\bESRCH\b/.test(t)?r="ESRCH":/\bEINVAL\b/.test(t)?r="EINVAL":(/\bEPERM\b/.test(t)||/permission denied/i.test(t))&&(r="EPERM"),r===null)return e instanceof Error?e:new Error(t);let n=new Error(`kill ${r}`);return n.code=r,n.errno=-dY[r],n.syscall="kill",n}var cn={},$r={},Hg=10,gY=new Set;function LV(e){return(cn[e]||[]).length+($r[e]||[]).length}function kl(e){if(!v2e(e)||typeof _processSignalState>"u")return;let t=FR[e];if(typeof t!="number")return;let r=LV(e)>0?"user":"default";try{_processSignalState.applySyncPromise(void 0,[t,r,JSON.stringify([]),0])}catch{}}function D2e(){for(let e of xV)kl(e)}function T2(e,t="default"){let r=UV(e);if(r===0)return!0;let n=kV[r]??`SIG${r}`;return t==="ignore"||MA(n,n)||_2e.has(n)?!0:Qe.exit(128+r)}function T2e(e,t){if(e!=="signal"||t===null||typeof t!="object")return;let r=t.signal??t.number,n=typeof t.action=="string"?t.action:"default";T2(r,n)}function M1(e,t,r=!1){let n=r?$r:cn;if(n[e]||(n[e]=[]),n[e].push(t),Hg>0&&!gY.has(e)){let i=(cn[e]?.length??0)+($r[e]?.length??0);if(i>Hg){gY.add(e);let s=`MaxListenersExceededWarning: Possible EventEmitter memory leak detected. ${i} ${e} listeners added to [process]. MaxListeners is ${Hg}. Use emitter.setMaxListeners() to increase limit`;typeof _error<"u"&&_error.applySync(void 0,[s])}}return kl(e),Qe}function N2e(e,t){if(cn[e]){let r=cn[e].indexOf(t);r!==-1&&cn[e].splice(r,1)}if($r[e]){let r=$r[e].indexOf(t);r!==-1&&$r[e].splice(r,1)}return kl(e),Qe}function MA(e,...t){let r=!1;if(cn[e])for(let n of cn[e])n.call(Qe,...t),r=!0;if($r[e]){let n=$r[e].slice();$r[e]=[];for(let i of n)i.call(Qe,...t),r=!0}return r}function uI(e){return!!(e&&typeof e=="object"&&(e._isProcessExit===!0||e.name==="ProcessExitError"))}function M2e(e){return e instanceof Error?e:new Error(String(e))}function jl(e){if(uI(e))return{handled:!1,rethrow:e};let t=M2e(e);try{if(MA("uncaughtException",t,"uncaughtException"))return{handled:!0,rethrow:null}}catch(r){return{handled:!1,rethrow:r}}return{handled:!1,rethrow:t}}function PV(e){j2(()=>{throw e},0)}function zl(e,t,r){if(!t||t.length===0)return!1;for(let n of t.slice())try{n.call(e,...r)}catch(i){let s=jl(i);if(!s.handled&&s.rethrow!==null)throw s.rethrow;return!0}return!0}function DA(){return Gg().stdinIsTTY}Ge("_stdinDispatch",C2e);Ge("_signalDispatch",T2e);function OV(e){let t=Gl(),r=Math.floor(t/1e3),n=Math.floor(t%1e3*1e6);if(e){let i=r-e[0],s=n-e[1];return s<0&&(i-=1,s+=1e9),[i,s]}return[r,n]}OV.bigint=function(){let e=Gl();return BigInt(Math.floor(e*1e6))};var N2=wr.cwd,EB=18,Fg={node:wr.version.replace(/^v/,""),v8:"11.3.244.8",uv:"1.44.2",zlib:"1.2.13",brotli:"1.0.9",ares:"1.19.0",modules:"108",nghttp2:"1.52.0",napi:"8",llhttp:"8.1.0",openssl:"3.0.8",cldr:"42.0",icu:"72.1",tz:"2022g",unicode:"15.0"};function F2e(){return{rss:50*1024*1024,heapTotal:20*1024*1024,heapUsed:10*1024*1024,external:1*1024*1024,arrayBuffers:500*1024}}function HV(){let e=F2e(),t=k1e.applySyncPromise(void 0,[]);return!t||typeof t!="object"?e:{rss:Number.isFinite(t.rss)?Number(t.rss):e.rss,heapTotal:Number.isFinite(t.heapTotal)?Number(t.heapTotal):e.heapTotal,heapUsed:Number.isFinite(t.heapUsed)?Number(t.heapUsed):e.heapUsed,external:Number.isFinite(t.external)?Number(t.external):e.external,arrayBuffers:Number.isFinite(t.arrayBuffers)?Number(t.arrayBuffers):e.arrayBuffers}}function k2e(e){let t=x1e.applySyncPromise(void 0,[e??null]);if(t&&typeof t=="object")return{user:Number.isFinite(t.user)?Number(t.user):1e6,system:Number.isFinite(t.system)?Number(t.system):5e5};let r={user:1e6,system:5e5};return e&&typeof e=="object"?{user:r.user-Number(e.user||0),system:r.system-Number(e.system||0)}:r}function x2e(){return{userCPUTime:1e6,systemCPUTime:5e5,maxRSS:50*1024,sharedMemorySize:0,unsharedDataSize:0,unsharedStackSize:0,minorPageFault:0,majorPageFault:0,swappedOut:0,fsRead:0,fsWrite:0,ipcSent:0,ipcReceived:0,signalsCount:0,voluntaryContextSwitches:0,involuntaryContextSwitches:0}}function U2e(){let e=x2e(),t=U1e.applySyncPromise(void 0,[]);return!t||typeof t!="object"?e:{userCPUTime:Number.isFinite(t.userCPUTime)?Number(t.userCPUTime):e.userCPUTime,systemCPUTime:Number.isFinite(t.systemCPUTime)?Number(t.systemCPUTime):e.systemCPUTime,maxRSS:Number.isFinite(t.maxRSS)?Number(t.maxRSS):e.maxRSS,sharedMemorySize:Number.isFinite(t.sharedMemorySize)?Number(t.sharedMemorySize):e.sharedMemorySize,unsharedDataSize:Number.isFinite(t.unsharedDataSize)?Number(t.unsharedDataSize):e.unsharedDataSize,unsharedStackSize:Number.isFinite(t.unsharedStackSize)?Number(t.unsharedStackSize):e.unsharedStackSize,minorPageFault:Number.isFinite(t.minorPageFault)?Number(t.minorPageFault):e.minorPageFault,majorPageFault:Number.isFinite(t.majorPageFault)?Number(t.majorPageFault):e.majorPageFault,swappedOut:Number.isFinite(t.swappedOut)?Number(t.swappedOut):e.swappedOut,fsRead:Number.isFinite(t.fsRead)?Number(t.fsRead):e.fsRead,fsWrite:Number.isFinite(t.fsWrite)?Number(t.fsWrite):e.fsWrite,ipcSent:Number.isFinite(t.ipcSent)?Number(t.ipcSent):e.ipcSent,ipcReceived:Number.isFinite(t.ipcReceived)?Number(t.ipcReceived):e.ipcReceived,signalsCount:Number.isFinite(t.signalsCount)?Number(t.signalsCount):e.signalsCount,voluntaryContextSwitches:Number.isFinite(t.voluntaryContextSwitches)?Number(t.voluntaryContextSwitches):e.voluntaryContextSwitches,involuntaryContextSwitches:Number.isFinite(t.involuntaryContextSwitches)?Number(t.involuntaryContextSwitches):e.involuntaryContextSwitches}}function L2e(){Fg.node=wr.version.replace(/^v/,"");let e=L1e.applySyncPromise(void 0,[]);return e&&typeof e=="object"&&(Object.assign(Fg,e),Fg.node=wr.version.replace(/^v/,"")),Fg}var Qe={platform:wr.platform,arch:wr.arch,version:wr.version,get versions(){return L2e()},pid:wr.pid,ppid:wr.ppid,execPath:wr.execPath,execArgv:[],argv:wr.argv,argv0:wr.argv[0]||"node",title:"node",env:wr.env,config:{target_defaults:{cflags:[],default_configuration:"Release",defines:[],include_dirs:[],libraries:[]},variables:{node_prefix:"/usr",node_shared_libuv:!1}},release:{name:"node",sourceUrl:"https://nodejs.org/download/release/v20.0.0/node-v20.0.0.tar.gz",headersUrl:"https://nodejs.org/download/release/v20.0.0/node-v20.0.0-headers.tar.gz"},features:{inspector:!1,debug:!1,uv:!0,ipv6:!0,tls_alpn:!0,tls_sni:!0,tls_ocsp:!0,tls:!0},cwd(){return N2},chdir(e){let t;try{t=Lt.stat.applySyncPromise(void 0,[e])}catch{let n=new Error(`ENOENT: no such file or directory, chdir '${e}'`);throw n.code="ENOENT",n.errno=-2,n.syscall="chdir",n.path=e,n}if(!Ma(t).isDirectory){let n=new Error(`ENOTDIR: not a directory, chdir '${e}'`);throw n.code="ENOTDIR",n.errno=-20,n.syscall="chdir",n.path=e,n}N2=e},get exitCode(){return $m},set exitCode(e){$m=e??void 0},exit(e){let t=e!==void 0?e:$m??0;$m=t,Ts=!0;try{MA("exit",t)}catch{}throw new MR(t)},abort(){return Qe.kill(Qe.pid,"SIGABRT")},nextTick(e,...t){let r=xa();nB.push({callback:Ll(e,r),args:t}),LQe()},hrtime:OV,getuid(){return w2()},getgid(){return dB()},geteuid(){let e=globalThis.process?.euid;return Number.isFinite(e)?e:w2()},getegid(){let e=globalThis.process?.egid;return Number.isFinite(e)?e:dB()},getgroups(){return Array.isArray(globalThis.process?.groups)&&globalThis.process.groups.length>0?[...globalThis.process.groups]:[dB()]},setuid(){},setgid(){},seteuid(){},setegid(){},setgroups(){},umask(e){let t=e===void 0?void 0:Sa(e,"mask"),r=Number(F1e.applySyncPromise(void 0,[t??null]));if(Number.isFinite(r))return EB=t??r,r;let n=EB;return t!==void 0&&(EB=t),n},uptime(){return(Gl()-S2e)/1e3},memoryUsage(){return HV()},cpuUsage(e){return k2e(e)},resourceUsage(){return U2e()},kill(e,t){if(typeof e!="number"||!Number.isFinite(e)||!Number.isInteger(e))throw new TypeError(`The "pid" argument must be an integer. Received ${String(e)}`);let r=UV(t),n=kV[r]??`SIG${r}`;if(typeof _processKill<"u"){let i;try{i=_processKill.applySyncPromise(void 0,[e,n])}catch(o){throw R2e(o)}let s=i;if(typeof s=="string")try{s=JSON.parse(s)}catch{s=null}if(s&&typeof s=="object"&&s.self===!0){let o=typeof s.action=="string"?s.action:"default";return T2(r,o)}return!0}if(e!==Qe.pid){let i=new Error("Operation not permitted");throw i.code="EPERM",i.errno=-1,i.syscall="kill",i}return T2(r,"default")},on(e,t){return M1(e,t)},once(e,t){return M1(e,t,!0)},removeListener(e,t){return N2e(e,t)},off:null,removeAllListeners(e){return e?(delete cn[e],delete $r[e],kl(e)):(Object.keys(cn).forEach(t=>delete cn[t]),Object.keys($r).forEach(t=>delete $r[t]),D2e()),Qe},addListener(e,t){return M1(e,t)},emit(e,...t){return MA(e,...t)},listeners(e){return[...cn[e]||[],...$r[e]||[]]},listenerCount(e){return LV(e)},prependListener(e,t){return cn[e]||(cn[e]=[]),cn[e].unshift(t),kl(e),Qe},prependOnceListener(e,t){return $r[e]||($r[e]=[]),$r[e].unshift(t),kl(e),Qe},eventNames(){return[...new Set([...Object.keys(cn),...Object.keys($r)])]},setMaxListeners(e){return Hg=e,Qe},getMaxListeners(){return Hg},rawListeners(e){return Qe.listeners(e)},stdout:X2,stderr:Z2,stdin:NA,connected:wr.env?.AGENTOS_NODE_IPC==="1",mainModule:void 0,emitWarning(e){if(e&&typeof e=="object"){typeof e.message!="string"&&(e.message=String(e.message??"")),(typeof e.name!="string"||e.name.length===0)&&(e.name="Warning"),MA("warning",e);return}MA("warning",{message:String(e??""),name:"Warning"})},binding(e){let t=new Error("process.binding is not supported in sandbox");throw t.code="ERR_ACCESS_DENIED",t},_linkedBinding(e){let t=new Error("process._linkedBinding is not supported in sandbox");throw t.code="ERR_ACCESS_DENIED",t},dlopen(){throw new Error("process.dlopen is not supported")},hasUncaughtExceptionCaptureCallback(){return!1},setUncaughtExceptionCaptureCallback(){},send(e,t,r,n){let i=typeof t=="function"?t:typeof r=="function"?r:n;if(!Qe.connected)return!1;try{return Qe.stdout.write(bV(e)),i&&queueMicrotask(()=>i(null)),!0}catch(s){if(i)return queueMicrotask(()=>i(s)),!1;throw s}},disconnect(){Qe.connected&&(Qe.connected=!1,Qe._agentOSIpcHandleId&&typeof _unregisterHandle=="function"&&(_unregisterHandle(Qe._agentOSIpcHandleId),Qe._agentOSIpcHandleId=null),MA("disconnect"))},report:{directory:"",filename:"",compact:!1,signal:"SIGUSR2",reportOnFatalError:!1,reportOnSignal:!1,reportOnUncaughtException:!1,getReport(){return{}},writeReport(){return""}},debugPort:9229,_cwd:wr.cwd,_umask:18};function qV(){if(!(wr.env?.AGENTOS_NODE_IPC==="1"||globalThis.__agentOSProcessConfigEnv?.AGENTOS_NODE_IPC==="1")||Qe._agentOSIpcInstalled)return;Qe._agentOSIpcInstalled=!0,Qe.connected=!0,!Qe._agentOSIpcHandleId&&typeof _registerHandle=="function"&&(Qe._agentOSIpcHandleId=`process-ipc:${Qe.pid}`,_registerHandle(Qe._agentOSIpcHandleId,"child_process IPC channel"));let t="";Qe.stdin.on("data",r=>{let n=CV(t,r);t=n.buffer;for(let i of n.messages)MA("message",i,void 0)})}function P2e(e){i0(!1),b2e(new Ru);for(let t of Object.keys(oi))oi[t]=[];for(let t of Object.keys(Cn))Cn[t]=[];I2e(e.stdin??""),TR(0),NR(!1),Mg(!1),wr=e,N2=e.cwd,Qe.platform=e.platform,Qe.arch=e.arch,Qe.version=e.version,Qe.pid=e.pid,Qe.ppid=e.ppid,Qe.execPath=e.execPath,Qe.argv=e.argv,Qe.argv0=e.argv[0]||"node",Qe.env=e.env,Qe.connected=e.env?.AGENTOS_NODE_IPC==="1",Qe._cwd=e.cwd,Qe.stdin.paused=!0,Qe.stdin.encoding=null,Qe.stdin.isRaw=!1,Fg.node=e.version.replace(/^v/,"")}Ge("__runtimeRefreshProcessConfig",()=>{P2e(FV())});Qe.off=Qe.removeListener;Ge("__runtimeInstallProcessIpcBridge",qV);qV();Qe.memoryUsage.rss=function(){return HV().rss};Object.defineProperty(Qe,Symbol.toStringTag,{value:"process",writable:!1,configurable:!0,enumerable:!1});var GV=Qe;function O2e(e){return encodeURIComponent(String(e)).replace(/%2F/g,"/")}function pY(e){let t=qr.posix.resolve(String(e||"/")),r=O2e(t);return new Qn(`file://${r.startsWith("/")?r:`/${r}`}`)}function EY(e){let t=e instanceof Qn?e.href:String(e??"");if(!t.startsWith("file:"))throw new TypeError("The URL must be of scheme file");let r=t.slice(5);return r.startsWith("//")&&(r=/^\/\/[^/]*(.*)$/.exec(r)?.[1]||"/"),r=r.split(/[?#]/,1)[0]||"/",r=decodeURIComponent(r),r.startsWith("/")||(r=`/${r}`),r}function YV(){let e=globalThis;e.process=Qe,e.setTimeout=j2,e.clearTimeout=ZB,e.setInterval=z2,e.clearInterval=K2,e.setImmediate=IB,e.clearImmediate=GY;let t=typeof e.queueMicrotask=="function"?e.queueMicrotask.bind(e):_a;e.queueMicrotask=i=>{let s=xa();return t(()=>KB(s,i,e,[]))},Rve(e),e.TextEncoder=U2,e.TextDecoder=Ru,e.Event=Ul,e.CustomEvent=F2,e.EventTarget=jB,typeof e.Buffer>"u"&&(e.Buffer=xY);let r=e.Buffer;typeof r.kMaxLength!="number"&&(r.kMaxLength=Yl),typeof r.kStringMaxLength!="number"&&(r.kStringMaxLength=o0),(typeof r.constants!="object"||r.constants===null)&&(r.constants=RY);let n=globalThis.__secureExecBuiltinUtilModule;if(n?.types&&(n.types.isProxy=()=>!1),iB(n),typeof e.atob>"u"||typeof e.btoa>"u"){let i=vY();typeof e.atob>"u"&&(e.atob=s=>{let o=i.toByteArray(String(s)),a="";for(let A of o)a+=String.fromCharCode(A);return a}),typeof e.btoa>"u"&&(e.btoa=s=>{let o=String(s),a=new Uint8Array(o.length);for(let A=0;A<o.length;A+=1){let f=o.charCodeAt(A);if(f>255)throw new TypeError("Invalid character");a[A]=f}return i.fromByteArray(a)})}if(typeof e.Crypto>"u"&&(e.Crypto=CR),typeof e.SubtleCrypto>"u"&&(e.SubtleCrypto=bR),typeof e.CryptoKey>"u"&&(e.CryptoKey=Zg),typeof e.DOMException>"u"&&(e.DOMException=qve),typeof e.crypto>"u")e.crypto=Ra;else{let i=e.crypto;for(let[s,o]of Object.entries(Ra))typeof i[s]>"u"&&(i[s]=o)}e.fetch=rI,e.Headers=Qwe,e.Request=wwe,e.Response=Swe,cwe(e)}var WV={register:"kernelHandleRegister",unregister:"kernelHandleUnregister",list:"kernelHandleList"},WB=new Map,yB=[];function VV(e,t){try{s0(WV.register,e,t)}catch(r){throw r instanceof Error&&r.message.includes("EAGAIN")?new Error("ERR_RESOURCE_BUDGET_EXCEEDED: maximum active handles exceeded"):r}WB.set(e,t)}function JV(e){WB.delete(e);let t=WB.size;try{s0(WV.unregister,e)}catch{}if(t===0&&yB.length>0){let r=yB;yB=[],r.forEach(n=>n())}}function jV(){if(typeof Ts<"u"&&Ts)return Promise.resolve();let e=globalThis._getPendingTimerCount,t=globalThis._waitForTimerDrain,r=VB().length>0,n=typeof e=="function"&&e()>0;if(!r&&!n)return Promise.resolve();let i=[];return r&&i.push(new Promise(s=>{let o=!1,a=()=>{o||(o=!0,s())};yB.push(a),VB().length===0&&a()})),n&&typeof t=="function"&&i.push(t()),Promise.all(i).then(()=>{})}function VB(){return Array.from(WB.values())}Ge("_registerHandle",VV);Ge("_unregisterHandle",JV);Ge("_waitForActiveHandles",jV);Ge("_getActiveHandles",VB);var H2e={},q2e={},G2e={id:"/<entry>.js",filename:"/<entry>.js",dirname:"/",exports:{},loaded:!1};Du("_moduleCache",H2e);Du("_pendingModules",q2e);Du("_currentModule",G2e);function mB(e){let t=e.lastIndexOf("/");return t===-1?".":t===0?"/":e.slice(0,t)}function Y2e(e){if(e.startsWith("file://")){let t=e.slice(7);return t.startsWith("/")?t:"/"+t}return e}function W2e(e,t){return Xr.isBuiltin(t)?null:t.startsWith("./")||t.startsWith("../")||t.startsWith("/")?[e]:Xr._nodeModulePaths(e)}function zV(e){let t=function(r,n){let i=_resolveModule.applySyncPromise(void 0,[r,e,"require"]);if(i===null){let s=new Error("Cannot find module '"+r+"'");throw s.code="MODULE_NOT_FOUND",s}return i};return t.paths=function(r){return W2e(e,r)},t}var KV={".js":function(e,t){},".json":function(e,t){},".node":function(e,t){throw new Error(".node extensions are not supported in sandbox")}};function XV(e){return e.cache=_moduleCache,e.main=globalThis.process?.mainModule,e.extensions=KV,e}function V2e(e){let t=new Error(`require() of ES Module ${e} is not supported.`);return t.code="ERR_REQUIRE_ESM",t}function J2e(e){let t=new Error(`secure-exec module format bridge is not registered; cannot require ${e}.`);return t.code="ERR_AGENTOS_MODULE_FORMAT_BRIDGE_MISSING",t}function ZV(e){if(typeof _moduleFormat>"u"||typeof _moduleFormat.applySyncPromise!="function")throw J2e(e);if(_moduleFormat.applySyncPromise(void 0,[e])==="module")throw V2e(e)}function cI(e){if(typeof e!="string"&&!(e instanceof URL))throw new TypeError("filename must be a string or URL");let t=Y2e(String(e)),r=mB(t),n=zV(r),i=function(o){},s=function(o){return i(o),_requireFrom(o,r)};return s.resolve=n,XV(s)}ln("__secureExecGuestCreateRequire",cI);var wo,Xr=(wo=class{constructor(t,r){y(this,"id");y(this,"path");y(this,"exports");y(this,"filename");y(this,"loaded");y(this,"children");y(this,"paths");y(this,"parent");y(this,"isPreloading");this.id=t,this.path=mB(t),this.exports={},this.filename=t,this.loaded=!1,this.children=[],this.paths=[],this.parent=r,this.isPreloading=!1;let n=this.path;for(;n!=="/";)this.paths.push(n+"/node_modules"),n=mB(n);this.paths.push("/node_modules")}require(t){return _requireFrom(t,this.path)}_compile(t,r){let n=String(t)+`
-//# sourceURL=`+String(r),i=new Function("exports","require","module","__filename","__dirname",n),s=a=>(rV(a),_requireFrom(a,this.path));s.resolve=zV(this.path),XV(s);let o=globalThis._currentModule;globalThis._currentModule=this;try{return i(this.exports,s,this,r,this.path),this.loaded=!0,this.exports}finally{globalThis._currentModule=o}}static _resolveFilename(t,r,n,i){let s=r&&r.path?r.path:"/",o=_resolveModule.applySyncPromise(void 0,[t,s,"require"]);if(o===null){let a=new Error("Cannot find module '"+t+"'");throw a.code="MODULE_NOT_FOUND",a}return o}static wrap(t){return"(function (exports, require, module, __filename, __dirname) { "+t+`
-});`}static isBuiltin(t){let r=t.replace(/^node:/,"");return wo.builtinModules.includes(r)}static syncBuiltinESMExports(){}static findSourceMap(t){}static _nodeModulePaths(t){let r=[],n=t;for(;n!=="/"&&(r.push(n+"/node_modules"),n=mB(n),n!=="."););return r.push("/node_modules"),r}static _load(t,r,n){let i=r&&r.path?r.path:"/";return _requireFrom(t,i)}static runMain(){}},y(wo,"_extensions",{...KV,".js":function(t,r){ZV(r);let n=typeof _loadFile<"u"?_loadFile.applySyncPromise(void 0,[r]):_requireFrom("fs","/").readFileSync(r,"utf8");t._compile(n,r)},".json":function(t,r){let n=typeof _loadFile<"u"?_loadFile.applySyncPromise(void 0,[r]):_requireFrom("fs","/").readFileSync(r,"utf8");t.exports=JSON.parse(n)}}),y(wo,"_cache",typeof _moduleCache<"u"?_moduleCache:{}),y(wo,"builtinModules",Tve),y(wo,"createRequire",cI),wo),$V=class{constructor(e){throw new Error("SourceMap is not implemented in sandbox")}get payload(){throw new Error("SourceMap is not implemented in sandbox")}set payload(e){throw new Error("SourceMap is not implemented in sandbox")}findEntry(e,t){throw new Error("SourceMap is not implemented in sandbox")}},eJ=Object.assign(Xr,{Module:Xr,createRequire:cI,_extensions:Xr._extensions,_cache:Xr._cache,builtinModules:Xr.builtinModules,isBuiltin:Xr.isBuiltin,_resolveFilename:Xr._resolveFilename,wrap:Xr.wrap,syncBuiltinESMExports:Xr.syncBuiltinESMExports,findSourceMap:Xr.findSourceMap,SourceMap:$V});Ge("_moduleModule",eJ);function j2e(e,t){let r=typeof t=="string"?t:"/";if(Xr.isBuiltin(e))try{return Hve(e)}catch(s){if(s?.code!=="MODULE_NOT_FOUND")throw s}let n=_resolveModule.applySyncPromise(void 0,[e,r,"require"]);if(n===null){let s=new Error(`Cannot find module '${e}'`);throw s.code="MODULE_NOT_FOUND",s}if(Object.prototype.hasOwnProperty.call(_moduleCache,n))return _moduleCache[n].exports;ZV(n);let i=new Xr(n,{path:r});_moduleCache[n]=i;try{let s=n.endsWith(".json")?".json":n.endsWith(".node")?".node":".js";return(Xr._extensions[s]??Xr._extensions[".js"])(i,n),i.loaded=!0,i.exports}catch(s){throw delete _moduleCache[n],s}}Ge("_requireFrom",j2e);var z2e=eJ,K2e={};O2(K2e,{Buffer:()=>xY,CustomEvent:()=>F2,Event:()=>Ul,EventTarget:()=>jB,Module:()=>Xr,ProcessExitError:()=>MR,SourceMap:()=>$V,TextDecoder:()=>Ru,TextEncoder:()=>U2,URL:()=>Qn,URLSearchParams:()=>Hr,_getActiveHandles:()=>VB,_registerHandle:()=>VV,_unregisterHandle:()=>JV,_waitForActiveHandles:()=>jV,childProcess:()=>IV,clearImmediate:()=>GY,clearInterval:()=>K2,clearTimeout:()=>ZB,createRequire:()=>cI,cryptoPolyfill:()=>Rl,default:()=>X2e,fs:()=>wR,module:()=>z2e,network:()=>JW,os:()=>u2e,process:()=>GV,setImmediate:()=>IB,setInterval:()=>z2,setTimeout:()=>j2,setupGlobals:()=>YV});var X2e=wR;YV();})();
-/*! Bundled license information:
-
-ieee754/index.js:
-(*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> *)
-
-buffer/index.js:
-(*!
- * The buffer module from node.js, for the browser.
- *
- * @author   Feross Aboukhadijeh <https://feross.org>
- * @license  MIT
- *)
-*/
-/*! Bundled license information:
-
-ieee754/index.js:
-  (*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> *)
-
-buffer/index.js:
-  (*!
-   * The buffer module from node.js, for the browser.
-   *
-   * @author   Feross Aboukhadijeh <https://feross.org>
-   * @license  MIT
-   *)
-
-punycode/punycode.js:
-  (*! https://mths.be/punycode v1.4.1 by @mathias *)
-
-safe-buffer/index.js:
-  (*! safe-buffer. MIT License. Feross Aboukhadijeh <https://feross.org/opensource> *)
-
-web-streams-polyfill/dist/ponyfill.es2018.js:
-  (**
-   * @license
-   * web-streams-polyfill v3.3.3
-   * Copyright 2024 Mattias Buelens, Diwank Singh Tomer and other contributors.
-   * This code is released under the MIT license.
-   * SPDX-License-Identifier: MIT
-   *)
-
-assert/build/internal/util/comparisons.js:
-  (*!
-   * The buffer module from node.js, for the browser.
-   *
-   * @author   Feross Aboukhadijeh <feross@feross.org> <http://feross.org>
-   * @license  MIT
-   *)
-
-undici/lib/web/fetch/body.js:
-  (*! formdata-polyfill. MIT License. Jimmy Wärting <https://jimmy.warting.se/opensource> *)
-*/
diff --git a/crates/v8-runtime/build.rs b/crates/v8-runtime/build.rs
deleted file mode 100644
index 13f4d29d5..000000000
--- a/crates/v8-runtime/build.rs
+++ /dev/null
@@ -1,95 +0,0 @@
-use std::env;
-use std::fs;
-use std::path::{Path, PathBuf};
-
-fn cargo_home() -> PathBuf {
-    if let Some(home) = env::var_os("CARGO_HOME") {
-        return PathBuf::from(home);
-    }
-
-    let home = env::var_os("HOME").expect("HOME must be set when CARGO_HOME is unset");
-    PathBuf::from(home).join(".cargo")
-}
-
-fn read_v8_version(lock_path: &Path) -> String {
-    let lock = fs::read_to_string(lock_path)
-        .unwrap_or_else(|error| panic!("failed to read {}: {}", lock_path.display(), error));
-
-    let mut in_v8_package = false;
-    for line in lock.lines() {
-        match line.trim() {
-            "[[package]]" => in_v8_package = false,
-            "name = \"v8\"" => in_v8_package = true,
-            _ if in_v8_package && line.trim_start().starts_with("version = \"") => {
-                let version = line
-                    .trim()
-                    .trim_start_matches("version = \"")
-                    .trim_end_matches('"');
-                return version.to_owned();
-            }
-            _ => {}
-        }
-    }
-
-    panic!("failed to locate v8 version in {}", lock_path.display());
-}
-
-fn find_v8_icu_data(v8_version: &str) -> PathBuf {
-    let registry_src = cargo_home().join("registry").join("src");
-    let candidates = [
-        Path::new("third_party/icu/common/icudtl.dat"),
-        Path::new("third_party/icu/flutter_desktop/icudtl.dat"),
-        Path::new("third_party/icu/chromecast_video/icudtl.dat"),
-    ];
-
-    let entries = fs::read_dir(&registry_src).unwrap_or_else(|error| {
-        panic!(
-            "failed to read cargo registry src {}: {}",
-            registry_src.display(),
-            error
-        )
-    });
-
-    for entry in entries {
-        let entry = entry
-            .unwrap_or_else(|error| panic!("failed to inspect cargo registry entry: {}", error));
-        let crate_root = entry.path().join(format!("v8-{}", v8_version));
-        for relative in candidates {
-            let candidate = crate_root.join(relative);
-            if candidate.exists() {
-                return candidate;
-            }
-        }
-    }
-
-    panic!(
-        "failed to locate ICU data for v8-{} under {}",
-        v8_version,
-        registry_src.display(),
-    );
-}
-
-fn main() {
-    let manifest_dir =
-        PathBuf::from(env::var_os("CARGO_MANIFEST_DIR").expect("CARGO_MANIFEST_DIR must be set"));
-    let lock_path = manifest_dir.join("Cargo.lock");
-    let out_dir = PathBuf::from(env::var_os("OUT_DIR").expect("OUT_DIR must be set"));
-
-    println!("cargo:rerun-if-changed={}", lock_path.display());
-    println!("cargo:rerun-if-changed=build.rs");
-
-    secure_exec_build_support::build_v8_bridge(&manifest_dir, &out_dir);
-
-    let v8_version = read_v8_version(&lock_path);
-    let icu_data = find_v8_icu_data(&v8_version);
-    let dest_path = out_dir.join("icudtl.dat");
-
-    fs::copy(&icu_data, &dest_path).unwrap_or_else(|error| {
-        panic!(
-            "failed to copy ICU data from {} to {}: {}",
-            icu_data.display(),
-            dest_path.display(),
-            error,
-        )
-    });
-}
diff --git a/crates/v8-runtime/npm/.gitignore b/crates/v8-runtime/npm/.gitignore
deleted file mode 100644
index c37406f79..000000000
--- a/crates/v8-runtime/npm/.gitignore
+++ /dev/null
@@ -1,3 +0,0 @@
-# Platform binaries are placed here by CI, not committed
-*/secure-exec-v8
-*/secure-exec-v8.exe
diff --git a/crates/v8-runtime/npm/linux-x64-gnu/README.md b/crates/v8-runtime/npm/linux-x64-gnu/README.md
deleted file mode 100644
index 92e31968e..000000000
--- a/crates/v8-runtime/npm/linux-x64-gnu/README.md
+++ /dev/null
@@ -1,9 +0,0 @@
-# @secure-exec/v8-linux-x64-gnu
-
-Linux x64 (glibc) binary for [@secure-exec/v8](https://secureexec.dev).
-
-This package is installed automatically by `@secure-exec/v8` as a platform-specific optional dependency.
-
-- Website: https://secureexec.dev
-- Docs: https://secureexec.dev/docs
-- GitHub: https://github.com/rivet-dev/secure-exec
diff --git a/crates/v8-runtime/rust-toolchain.toml b/crates/v8-runtime/rust-toolchain.toml
deleted file mode 100644
index c1bc0a694..000000000
--- a/crates/v8-runtime/rust-toolchain.toml
+++ /dev/null
@@ -1,2 +0,0 @@
-[toolchain]
-channel = "1.85.0"
diff --git a/crates/v8-runtime/src/bridge.rs b/crates/v8-runtime/src/bridge.rs
deleted file mode 100644
index 4fbae2cf9..000000000
--- a/crates/v8-runtime/src/bridge.rs
+++ /dev/null
@@ -1,2671 +0,0 @@
-// Host function injection via v8::FunctionTemplate
-
-use std::cell::{Cell, RefCell};
-use std::collections::{HashMap, HashSet};
-use std::ffi::c_void;
-use std::mem::MaybeUninit;
-use std::sync::atomic::{AtomicBool, AtomicUsize, Ordering};
-use std::sync::OnceLock;
-
-use serde::de;
-use v8::MapFnTo;
-use v8::ValueDeserializerHelper;
-use v8::ValueSerializerHelper;
-
-use crate::host_call::BridgeCallContext;
-
-// CBOR codec flag: when true, use CBOR (via ciborium) instead of V8
-// ValueSerializer/ValueDeserializer for IPC payloads. Activated by
-// SECURE_EXEC_V8_CODEC=cbor for runtimes whose node:v8 module doesn't
-// produce real V8 serialization format (e.g. Bun).
-static USE_CBOR_CODEC: AtomicBool = AtomicBool::new(false);
-static EMBEDDED_CBOR_USERS: AtomicUsize = AtomicUsize::new(0);
-const MAX_CBOR_BRIDGE_DEPTH: usize = 64;
-const MAX_CBOR_BRIDGE_CONTAINER_ITEMS: usize = 100_000;
-const MAX_VM_CONTEXTS: usize = 1024;
-const MAX_PENDING_PROMISES: usize = 1024;
-
-/// Initialize the codec from the SECURE_EXEC_V8_CODEC environment variable.
-/// Call once at process startup before any sessions are created.
-pub fn init_codec() {
-    USE_CBOR_CODEC.store(configured_cbor_codec_enabled(), Ordering::Relaxed);
-}
-
-pub fn enable_cbor_codec() {
-    USE_CBOR_CODEC.store(true, Ordering::Relaxed);
-}
-
-pub fn acquire_embedded_cbor_codec() {
-    EMBEDDED_CBOR_USERS.fetch_add(1, Ordering::AcqRel);
-    USE_CBOR_CODEC.store(true, Ordering::Relaxed);
-}
-
-pub fn release_embedded_cbor_codec() {
-    let previous = EMBEDDED_CBOR_USERS.fetch_sub(1, Ordering::AcqRel);
-    if previous <= 1 {
-        USE_CBOR_CODEC.store(configured_cbor_codec_enabled(), Ordering::Relaxed);
-    }
-}
-
-/// Returns true if the CBOR codec is active.
-pub fn is_cbor_codec() -> bool {
-    USE_CBOR_CODEC.load(Ordering::Relaxed)
-}
-
-fn configured_cbor_codec_enabled() -> bool {
-    std::env::var("SECURE_EXEC_V8_CODEC")
-        .map(|val| val == "cbor")
-        .unwrap_or(false)
-}
-
-/// External references for V8 snapshot serialization.
-/// Maps function pointer indices in the snapshot to current addresses.
-/// Must be identical at snapshot creation and restore time.
-pub fn external_refs() -> &'static v8::ExternalReferences {
-    static REFS: OnceLock<v8::ExternalReferences> = OnceLock::new();
-    REFS.get_or_init(|| {
-        v8::ExternalReferences::new(&[
-            v8::ExternalReference {
-                function: sync_bridge_callback.map_fn_to(),
-            },
-            v8::ExternalReference {
-                function: async_bridge_callback.map_fn_to(),
-            },
-        ])
-    })
-}
-
-// Minimal delegate for V8 ValueSerializer — throws DataCloneError as a V8 exception
-struct DefaultSerializerDelegate;
-
-impl v8::ValueSerializerImpl for DefaultSerializerDelegate {
-    fn throw_data_clone_error<'s>(
-        &self,
-        scope: &mut v8::HandleScope<'s>,
-        message: v8::Local<'s, v8::String>,
-    ) {
-        let exc = v8::Exception::error(scope, message);
-        scope.throw_exception(exc);
-    }
-}
-
-// Minimal delegate for V8 ValueDeserializer — default callbacks are sufficient
-struct DefaultDeserializerDelegate;
-
-impl v8::ValueDeserializerImpl for DefaultDeserializerDelegate {}
-
-/// Serialize a V8 value to bytes using V8's built-in ValueSerializer.
-/// Handles all V8 types natively: primitives, strings, arrays, objects,
-/// Uint8Array, Date, Map, Set, RegExp, Error, and circular references.
-/// When CBOR codec is active, uses ciborium instead.
-pub fn serialize_v8_value(
-    scope: &mut v8::HandleScope,
-    value: v8::Local<v8::Value>,
-) -> Result<Vec<u8>, String> {
-    if is_cbor_codec() {
-        return serialize_cbor_value(scope, value);
-    }
-    serialize_v8_wire_value(scope, value)
-}
-
-/// Serialize a V8 value to bytes using V8's native wire format regardless of
-/// the process-wide codec toggle.
-pub fn serialize_v8_wire_value(
-    scope: &mut v8::HandleScope,
-    value: v8::Local<v8::Value>,
-) -> Result<Vec<u8>, String> {
-    let context = scope.get_current_context();
-    let serializer = v8::ValueSerializer::new(scope, Box::new(DefaultSerializerDelegate));
-    serializer.write_header();
-    serializer
-        .write_value(context, value)
-        .ok_or_else(|| "V8 ValueSerializer: failed to serialize value".to_string())?;
-    Ok(serializer.release())
-}
-
-/// Deserialize bytes back to a V8 value using V8's built-in ValueDeserializer.
-/// The bytes must have been produced by serialize_v8_value() or node:v8.serialize().
-pub fn deserialize_v8_value<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    data: &[u8],
-) -> Result<v8::Local<'s, v8::Value>, String> {
-    if is_cbor_codec() {
-        return deserialize_cbor_value(scope, data);
-    }
-    deserialize_v8_wire_value(scope, data)
-}
-
-/// Deserialize bytes from V8's native wire format regardless of the
-/// process-wide codec toggle.
-pub fn deserialize_v8_wire_value<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    data: &[u8],
-) -> Result<v8::Local<'s, v8::Value>, String> {
-    let context = scope.get_current_context();
-    let deserializer =
-        v8::ValueDeserializer::new(scope, Box::new(DefaultDeserializerDelegate), data);
-    deserializer
-        .read_header(context)
-        .ok_or_else(|| "V8 ValueDeserializer: invalid header".to_string())?;
-    deserializer
-        .read_value(context)
-        .ok_or_else(|| "V8 ValueDeserializer: failed to deserialize value".to_string())
-}
-
-// ── CBOR codec ──
-
-/// Convert a V8 value to a ciborium::Value for CBOR serialization.
-fn v8_to_cbor(
-    scope: &mut v8::HandleScope,
-    value: v8::Local<v8::Value>,
-) -> Result<ciborium::Value, String> {
-    let mut object_stack = Vec::new();
-    v8_to_cbor_inner(scope, value, 0, &mut object_stack)
-}
-
-fn v8_to_cbor_inner(
-    scope: &mut v8::HandleScope,
-    value: v8::Local<v8::Value>,
-    depth: usize,
-    object_stack: &mut Vec<v8::Global<v8::Object>>,
-) -> Result<ciborium::Value, String> {
-    if depth > MAX_CBOR_BRIDGE_DEPTH {
-        return Err(format!(
-            "CBOR encode depth exceeds limit of {MAX_CBOR_BRIDGE_DEPTH}"
-        ));
-    }
-
-    if value.is_null_or_undefined() {
-        return Ok(ciborium::Value::Null);
-    }
-    if value.is_boolean() {
-        return Ok(ciborium::Value::Bool(value.boolean_value(scope)));
-    }
-    if value.is_int32() {
-        return Ok(ciborium::Value::Integer(
-            value.int32_value(scope).unwrap_or(0).into(),
-        ));
-    }
-    if value.is_number() {
-        return Ok(ciborium::Value::Float(
-            value.number_value(scope).unwrap_or(0.0),
-        ));
-    }
-    if value.is_string() {
-        let s = value.to_rust_string_lossy(scope);
-        return Ok(ciborium::Value::Text(s));
-    }
-    if value.is_array_buffer_view() {
-        let view = v8::Local::<v8::ArrayBufferView>::try_from(value).unwrap();
-        let len = view.byte_length();
-        let mut buf = vec![0u8; len];
-        view.copy_contents(&mut buf);
-        return Ok(ciborium::Value::Bytes(buf));
-    }
-    if value.is_array() {
-        let obj = value
-            .to_object(scope)
-            .ok_or_else(|| "CBOR encode failed to convert array to object".to_string())?;
-        enter_cbor_object(scope, object_stack, obj)?;
-        let arr = v8::Local::<v8::Array>::try_from(value).unwrap();
-        let len = arr.length();
-        let item_count = cbor_container_item_count("array", len as usize)?;
-        let mut items = Vec::with_capacity(item_count);
-        let result = (|| {
-            for i in 0..len {
-                if let Some(elem) = arr.get_index(scope, i) {
-                    items.push(v8_to_cbor_inner(scope, elem, depth + 1, object_stack)?);
-                } else {
-                    items.push(ciborium::Value::Null);
-                }
-            }
-            Ok(ciborium::Value::Array(items))
-        })();
-        object_stack.pop();
-        return result;
-    }
-    if value.is_object() {
-        let obj = value.to_object(scope).unwrap();
-        enter_cbor_object(scope, object_stack, obj)?;
-        let names = obj
-            .get_own_property_names(scope, v8::GetPropertyNamesArgs::default())
-            .unwrap_or_else(|| v8::Array::new(scope, 0));
-        let len = names.length();
-        let item_count = cbor_container_item_count("object", len as usize)?;
-        let mut entries = Vec::with_capacity(item_count);
-        let result = (|| {
-            for i in 0..len {
-                let key = names.get_index(scope, i).unwrap();
-                let key_str = key.to_rust_string_lossy(scope);
-                let val = obj
-                    .get(scope, key)
-                    .unwrap_or_else(|| v8::undefined(scope).into());
-                entries.push((
-                    ciborium::Value::Text(key_str),
-                    v8_to_cbor_inner(scope, val, depth + 1, object_stack)?,
-                ));
-            }
-            Ok(ciborium::Value::Map(entries))
-        })();
-        object_stack.pop();
-        return result;
-    }
-    Ok(ciborium::Value::Null)
-}
-
-fn enter_cbor_object(
-    scope: &mut v8::HandleScope,
-    object_stack: &mut Vec<v8::Global<v8::Object>>,
-    object: v8::Local<v8::Object>,
-) -> Result<(), String> {
-    for previous in object_stack.iter() {
-        let previous = v8::Local::new(scope, previous);
-        if previous.strict_equals(object.into()) {
-            return Err("CBOR encode rejected circular object graph".to_string());
-        }
-    }
-    object_stack.push(v8::Global::new(scope, object));
-    Ok(())
-}
-
-fn cbor_container_item_count(kind: &str, item_count: usize) -> Result<usize, String> {
-    if item_count > MAX_CBOR_BRIDGE_CONTAINER_ITEMS {
-        return Err(format!(
-            "CBOR {kind} item count {item_count} exceeds limit of {MAX_CBOR_BRIDGE_CONTAINER_ITEMS}"
-        ));
-    }
-    Ok(item_count)
-}
-
-struct LimitedCborValue(ciborium::Value);
-
-impl<'de> de::Deserialize<'de> for LimitedCborValue {
-    fn deserialize<D>(deserializer: D) -> Result<Self, D::Error>
-    where
-        D: de::Deserializer<'de>,
-    {
-        deserializer.deserialize_any(LimitedCborVisitor).map(Self)
-    }
-}
-
-struct LimitedCborSeed;
-
-impl<'de> de::DeserializeSeed<'de> for LimitedCborSeed {
-    type Value = ciborium::Value;
-
-    fn deserialize<D>(self, deserializer: D) -> Result<Self::Value, D::Error>
-    where
-        D: de::Deserializer<'de>,
-    {
-        deserializer.deserialize_any(LimitedCborVisitor)
-    }
-}
-
-struct LimitedCborVisitor;
-
-impl<'de> de::Visitor<'de> for LimitedCborVisitor {
-    type Value = ciborium::Value;
-
-    fn expecting(&self, formatter: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        formatter.write_str("a bounded CBOR bridge value")
-    }
-
-    fn visit_bool<E>(self, value: bool) -> Result<Self::Value, E> {
-        Ok(ciborium::Value::Bool(value))
-    }
-
-    fn visit_f32<E>(self, value: f32) -> Result<Self::Value, E> {
-        Ok(ciborium::Value::Float(value.into()))
-    }
-
-    fn visit_f64<E>(self, value: f64) -> Result<Self::Value, E> {
-        Ok(ciborium::Value::Float(value))
-    }
-
-    fn visit_i8<E>(self, value: i8) -> Result<Self::Value, E> {
-        Ok(value.into())
-    }
-
-    fn visit_i16<E>(self, value: i16) -> Result<Self::Value, E> {
-        Ok(value.into())
-    }
-
-    fn visit_i32<E>(self, value: i32) -> Result<Self::Value, E> {
-        Ok(value.into())
-    }
-
-    fn visit_i64<E>(self, value: i64) -> Result<Self::Value, E> {
-        Ok(value.into())
-    }
-
-    fn visit_i128<E>(self, value: i128) -> Result<Self::Value, E> {
-        Ok(value.into())
-    }
-
-    fn visit_u8<E>(self, value: u8) -> Result<Self::Value, E> {
-        Ok(value.into())
-    }
-
-    fn visit_u16<E>(self, value: u16) -> Result<Self::Value, E> {
-        Ok(value.into())
-    }
-
-    fn visit_u32<E>(self, value: u32) -> Result<Self::Value, E> {
-        Ok(value.into())
-    }
-
-    fn visit_u64<E>(self, value: u64) -> Result<Self::Value, E> {
-        Ok(value.into())
-    }
-
-    fn visit_u128<E>(self, value: u128) -> Result<Self::Value, E> {
-        Ok(value.into())
-    }
-
-    fn visit_char<E>(self, value: char) -> Result<Self::Value, E> {
-        Ok(value.into())
-    }
-
-    fn visit_str<E>(self, value: &str) -> Result<Self::Value, E>
-    where
-        E: de::Error,
-    {
-        Ok(value.into())
-    }
-
-    fn visit_borrowed_str<E>(self, value: &'de str) -> Result<Self::Value, E>
-    where
-        E: de::Error,
-    {
-        Ok(value.into())
-    }
-
-    fn visit_string<E>(self, value: String) -> Result<Self::Value, E> {
-        Ok(value.into())
-    }
-
-    fn visit_bytes<E>(self, value: &[u8]) -> Result<Self::Value, E>
-    where
-        E: de::Error,
-    {
-        Ok(value.into())
-    }
-
-    fn visit_borrowed_bytes<E>(self, value: &'de [u8]) -> Result<Self::Value, E>
-    where
-        E: de::Error,
-    {
-        Ok(value.into())
-    }
-
-    fn visit_byte_buf<E>(self, value: Vec<u8>) -> Result<Self::Value, E> {
-        Ok(value.into())
-    }
-
-    fn visit_none<E>(self) -> Result<Self::Value, E> {
-        Ok(ciborium::Value::Null)
-    }
-
-    fn visit_some<D>(self, deserializer: D) -> Result<Self::Value, D::Error>
-    where
-        D: de::Deserializer<'de>,
-    {
-        deserializer.deserialize_any(self)
-    }
-
-    fn visit_unit<E>(self) -> Result<Self::Value, E> {
-        Ok(ciborium::Value::Null)
-    }
-
-    fn visit_newtype_struct<D>(self, deserializer: D) -> Result<Self::Value, D::Error>
-    where
-        D: de::Deserializer<'de>,
-    {
-        deserializer.deserialize_any(self)
-    }
-
-    fn visit_seq<A>(self, mut access: A) -> Result<Self::Value, A::Error>
-    where
-        A: de::SeqAccess<'de>,
-    {
-        if let Some(item_count) = access.size_hint() {
-            limited_cbor_item_count("array", item_count)?;
-        }
-
-        let mut items = Vec::new();
-        while let Some(item) = access.next_element_seed(LimitedCborSeed)? {
-            limited_cbor_item_count("array", items.len() + 1)?;
-            items.push(item);
-        }
-        Ok(ciborium::Value::Array(items))
-    }
-
-    fn visit_map<A>(self, mut access: A) -> Result<Self::Value, A::Error>
-    where
-        A: de::MapAccess<'de>,
-    {
-        if let Some(item_count) = access.size_hint() {
-            limited_cbor_item_count("map", item_count)?;
-        }
-
-        let mut entries = Vec::new();
-        while let Some(key) = access.next_key_seed(LimitedCborSeed)? {
-            limited_cbor_item_count("map", entries.len() + 1)?;
-            let value = access.next_value_seed(LimitedCborSeed)?;
-            entries.push((key, value));
-        }
-        Ok(ciborium::Value::Map(entries))
-    }
-
-    fn visit_enum<A>(self, access: A) -> Result<Self::Value, A::Error>
-    where
-        A: de::EnumAccess<'de>,
-    {
-        use serde::de::VariantAccess;
-
-        struct TaggedValueVisitor;
-
-        impl<'de> de::Visitor<'de> for TaggedValueVisitor {
-            type Value = ciborium::Value;
-
-            fn expecting(&self, formatter: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-                formatter.write_str("a tagged CBOR bridge value")
-            }
-
-            fn visit_seq<A>(self, mut access: A) -> Result<Self::Value, A::Error>
-            where
-                A: de::SeqAccess<'de>,
-            {
-                let tag = access
-                    .next_element()?
-                    .ok_or_else(|| de::Error::custom("expected tag"))?;
-                let value = access
-                    .next_element_seed(LimitedCborSeed)?
-                    .ok_or_else(|| de::Error::custom("expected tagged value"))?;
-                Ok(ciborium::Value::Tag(tag, Box::new(value)))
-            }
-        }
-
-        let (name, data): (String, _) = access.variant()?;
-        if name != "@@TAGGED@@" {
-            return Err(de::Error::custom("expected CBOR tag"));
-        }
-        data.tuple_variant(2, TaggedValueVisitor)
-    }
-}
-
-fn limited_cbor_item_count<E: de::Error>(kind: &str, item_count: usize) -> Result<usize, E> {
-    cbor_container_item_count(kind, item_count).map_err(de::Error::custom)
-}
-
-/// Convert a ciborium::Value to a V8 value.
-fn cbor_to_v8<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    value: &ciborium::Value,
-) -> Result<v8::Local<'s, v8::Value>, String> {
-    cbor_to_v8_inner(scope, value, 0)
-}
-
-fn cbor_to_v8_inner<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    value: &ciborium::Value,
-    depth: usize,
-) -> Result<v8::Local<'s, v8::Value>, String> {
-    if depth > MAX_CBOR_BRIDGE_DEPTH {
-        return Err(format!(
-            "CBOR decode depth exceeds limit of {MAX_CBOR_BRIDGE_DEPTH}"
-        ));
-    }
-
-    match value {
-        ciborium::Value::Null => Ok(v8::null(scope).into()),
-        ciborium::Value::Bool(b) => Ok(v8::Boolean::new(scope, *b).into()),
-        ciborium::Value::Integer(n) => {
-            let n: i128 = (*n).into();
-            if n >= i32::MIN as i128 && n <= i32::MAX as i128 {
-                Ok(v8::Integer::new(scope, n as i32).into())
-            } else {
-                Ok(v8::Number::new(scope, n as f64).into())
-            }
-        }
-        ciborium::Value::Float(f) => Ok(v8::Number::new(scope, *f).into()),
-        ciborium::Value::Text(s) => Ok(v8::String::new(scope, s)
-            .ok_or_else(|| "CBOR decode failed to allocate string".to_string())?
-            .into()),
-        ciborium::Value::Bytes(b) => {
-            let len = b.len();
-            let ab = v8::ArrayBuffer::new(scope, len);
-            if len > 0 {
-                let bs = ab.get_backing_store();
-                unsafe {
-                    std::ptr::copy_nonoverlapping(
-                        b.as_ptr(),
-                        bs.data().unwrap().as_ptr() as *mut u8,
-                        len,
-                    );
-                }
-            }
-            Ok(v8::Uint8Array::new(scope, ab, 0, len)
-                .ok_or_else(|| "CBOR decode failed to allocate byte array".to_string())?
-                .into())
-        }
-        ciborium::Value::Array(items) => {
-            cbor_container_item_count("array", items.len())?;
-            let arr = v8::Array::new(scope, items.len() as i32);
-            for (i, item) in items.iter().enumerate() {
-                let val = cbor_to_v8_inner(scope, item, depth + 1)?;
-                arr.set_index(scope, i as u32, val);
-            }
-            Ok(arr.into())
-        }
-        ciborium::Value::Map(entries) => {
-            cbor_container_item_count("map", entries.len())?;
-            let obj = v8::Object::new(scope);
-            for (k, v) in entries {
-                let key = cbor_to_v8_inner(scope, k, depth + 1)?;
-                let val = cbor_to_v8_inner(scope, v, depth + 1)?;
-                obj.set(scope, key, val);
-            }
-            Ok(obj.into())
-        }
-        ciborium::Value::Tag(_, inner) => cbor_to_v8_inner(scope, inner, depth + 1),
-        _ => Ok(v8::undefined(scope).into()),
-    }
-}
-
-fn raw_bytes_to_uint8array<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    bytes: &[u8],
-) -> Option<v8::Local<'s, v8::Value>> {
-    let len = bytes.len();
-    let ab = v8::ArrayBuffer::new(scope, len);
-    if len > 0 {
-        let bs = ab.get_backing_store();
-        unsafe {
-            std::ptr::copy_nonoverlapping(bytes.as_ptr(), bs.data()?.as_ptr() as *mut u8, len);
-        }
-    }
-    v8::Uint8Array::new(scope, ab, 0, len).map(Into::into)
-}
-
-fn bridge_response_payload_to_v8<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    status: u8,
-    payload: &[u8],
-) -> Option<v8::Local<'s, v8::Value>> {
-    if status == 2 {
-        return raw_bytes_to_uint8array(scope, payload);
-    }
-
-    let v8_val = {
-        let tc = &mut v8::TryCatch::new(scope);
-        deserialize_v8_value(tc, payload).ok()
-    };
-    if v8_val.is_some() {
-        return v8_val;
-    }
-
-    // Preserve the historical compatibility fallback for malformed/non-native
-    // status=0 responses, but never let status=2 raw bytes take this path.
-    raw_bytes_to_uint8array(scope, payload)
-}
-
-/// Serialize a V8 value to CBOR bytes.
-pub fn serialize_cbor_value(
-    scope: &mut v8::HandleScope,
-    value: v8::Local<v8::Value>,
-) -> Result<Vec<u8>, String> {
-    let cbor_val = v8_to_cbor(scope, value)?;
-    let mut buf = Vec::new();
-    ciborium::into_writer(&cbor_val, &mut buf).map_err(|e| format!("CBOR encode failed: {}", e))?;
-    Ok(buf)
-}
-
-/// Deserialize CBOR bytes to a V8 value.
-pub fn deserialize_cbor_value<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    data: &[u8],
-) -> Result<v8::Local<'s, v8::Value>, String> {
-    let LimitedCborValue(cbor_val) =
-        ciborium::de::from_reader_with_recursion_limit(data, MAX_CBOR_BRIDGE_DEPTH)
-            .map_err(|e| format!("CBOR decode failed: {}", e))?;
-    cbor_to_v8(scope, &cbor_val)
-}
-
-/// Data attached to each sync bridge function via v8::External.
-/// BridgeFnStore keeps these heap allocations alive for the session.
-struct SyncBridgeFnData {
-    ctx: *const BridgeCallContext,
-    method: String,
-}
-
-/// Opaque store that keeps bridge function data alive.
-/// Must be held for the lifetime of the V8 context.
-pub struct BridgeFnStore {
-    // Box ensures stable pointer address for v8::External data when Vec grows
-    #[allow(clippy::vec_box)]
-    _data: Vec<Box<SyncBridgeFnData>>,
-}
-
-/// Data attached to each async bridge function via v8::External.
-struct AsyncBridgeFnData {
-    ctx: *const BridgeCallContext,
-    pending: *const PendingPromises,
-    method: String,
-}
-
-/// Opaque store that keeps async bridge function data alive.
-/// Must be held for the lifetime of the V8 context.
-pub struct AsyncBridgeFnStore {
-    // Box ensures stable pointer address for v8::External data when Vec grows
-    #[allow(clippy::vec_box)]
-    _data: Vec<Box<AsyncBridgeFnData>>,
-}
-
-/// Stores pending promise resolvers keyed by call_id.
-/// Single-threaded: only accessed from the session thread.
-pub struct PendingPromises {
-    map: RefCell<HashMap<u64, v8::Global<v8::PromiseResolver>>>,
-    reserved: Cell<usize>,
-}
-
-impl PendingPromises {
-    pub fn new() -> Self {
-        PendingPromises {
-            map: RefCell::new(HashMap::new()),
-            reserved: Cell::new(0),
-        }
-    }
-
-    fn capacity_error(&self) -> Option<String> {
-        let len = self.map.borrow().len().saturating_add(self.reserved.get());
-        if len >= MAX_PENDING_PROMISES {
-            return Some(format!(
-                "async bridge pending promise registry exceeded limit of {MAX_PENDING_PROMISES} promises"
-            ));
-        }
-        None
-    }
-
-    fn reserve(&self) -> Result<PendingPromiseReservation<'_>, String> {
-        if let Some(error) = self.capacity_error() {
-            return Err(error);
-        }
-        self.reserved.set(self.reserved.get().saturating_add(1));
-        Ok(PendingPromiseReservation {
-            pending: self,
-            active: true,
-        })
-    }
-
-    fn release_reservation(&self) {
-        self.reserved.set(self.reserved.get().saturating_sub(1));
-    }
-
-    fn insert_reserved(
-        &self,
-        call_id: u64,
-        resolver: v8::Global<v8::PromiseResolver>,
-        mut reservation: PendingPromiseReservation<'_>,
-    ) {
-        self.map.borrow_mut().insert(call_id, resolver);
-        reservation.active = false;
-        self.release_reservation();
-    }
-
-    /// Remove and return the resolver for a given call_id.
-    pub fn remove(&self, call_id: u64) -> Option<v8::Global<v8::PromiseResolver>> {
-        self.map.borrow_mut().remove(&call_id)
-    }
-
-    /// Number of pending promises.
-    pub fn len(&self) -> usize {
-        self.map.borrow().len()
-    }
-
-    /// Whether there are no pending promises.
-    pub fn is_empty(&self) -> bool {
-        self.map.borrow().is_empty()
-    }
-}
-
-impl Default for PendingPromises {
-    fn default() -> Self {
-        Self::new()
-    }
-}
-
-struct PendingPromiseReservation<'a> {
-    pending: &'a PendingPromises,
-    active: bool,
-}
-
-impl Drop for PendingPromiseReservation<'_> {
-    fn drop(&mut self) {
-        if self.active {
-            self.pending.release_reservation();
-        }
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-struct ThreadResourceUsageSnapshot {
-    user_cpu_us: u64,
-    system_cpu_us: u64,
-    max_rss_kib: i64,
-    shared_memory_size: i64,
-    unshared_data_size: i64,
-    unshared_stack_size: i64,
-    minor_page_faults: i64,
-    major_page_faults: i64,
-    swapped_out: i64,
-    fs_read: i64,
-    fs_write: i64,
-    ipc_sent: i64,
-    ipc_received: i64,
-    signals_count: i64,
-    voluntary_context_switches: i64,
-    involuntary_context_switches: i64,
-}
-
-fn non_negative_c_long(value: libc::c_long) -> i64 {
-    let normalized = i128::from(value).max(0);
-    normalized.min(i128::from(i64::MAX)) as i64
-}
-
-// Used only by the non-macOS `getrusage(RUSAGE_THREAD)` path; macOS reads CPU
-// time from Mach `time_value_t` instead.
-#[cfg(not(target_os = "macos"))]
-fn timeval_to_micros(value: libc::timeval) -> u64 {
-    let seconds = i128::from(value.tv_sec).max(0);
-    let micros = i128::from(value.tv_usec).max(0);
-    (seconds
-        .saturating_mul(1_000_000)
-        .saturating_add(micros)
-        .min(i128::from(u64::MAX))) as u64
-}
-
-#[cfg(not(target_os = "macos"))]
-fn current_thread_resource_usage() -> Result<ThreadResourceUsageSnapshot, String> {
-    let mut usage = MaybeUninit::<libc::rusage>::uninit();
-    let result = unsafe { libc::getrusage(libc::RUSAGE_THREAD, usage.as_mut_ptr()) };
-    if result != 0 {
-        return Err(format!(
-            "getrusage(RUSAGE_THREAD) failed: {}",
-            std::io::Error::last_os_error()
-        ));
-    }
-    let usage = unsafe { usage.assume_init() };
-    Ok(ThreadResourceUsageSnapshot {
-        user_cpu_us: timeval_to_micros(usage.ru_utime),
-        system_cpu_us: timeval_to_micros(usage.ru_stime),
-        max_rss_kib: non_negative_c_long(usage.ru_maxrss),
-        shared_memory_size: non_negative_c_long(usage.ru_ixrss),
-        unshared_data_size: non_negative_c_long(usage.ru_idrss),
-        unshared_stack_size: non_negative_c_long(usage.ru_isrss),
-        minor_page_faults: non_negative_c_long(usage.ru_minflt),
-        major_page_faults: non_negative_c_long(usage.ru_majflt),
-        swapped_out: non_negative_c_long(usage.ru_nswap),
-        fs_read: non_negative_c_long(usage.ru_inblock),
-        fs_write: non_negative_c_long(usage.ru_oublock),
-        ipc_sent: non_negative_c_long(usage.ru_msgsnd),
-        ipc_received: non_negative_c_long(usage.ru_msgrcv),
-        signals_count: non_negative_c_long(usage.ru_nsignals),
-        voluntary_context_switches: non_negative_c_long(usage.ru_nvcsw),
-        involuntary_context_switches: non_negative_c_long(usage.ru_nivcsw),
-    })
-}
-
-// macOS has no `RUSAGE_THREAD`, so per-thread CPU time comes from the Mach
-// `thread_info(THREAD_BASIC_INFO)` call. The remaining rusage fields have no
-// per-thread source on Apple platforms, so they are filled best-effort from the
-// process-wide `getrusage(RUSAGE_SELF)` (mirroring libuv's macOS behaviour).
-#[cfg(target_os = "macos")]
-fn macos_thread_cpu_micros() -> Result<(u64, u64), String> {
-    // SAFETY: `pthread_mach_thread_np` yields the calling thread's Mach port;
-    // `thread_info` fully initialises `info` on KERN_SUCCESS.
-    unsafe {
-        let port = libc::pthread_mach_thread_np(libc::pthread_self());
-        if port == 0 {
-            return Err("pthread_mach_thread_np returned MACH_PORT_NULL".to_string());
-        }
-        let mut info = MaybeUninit::<libc::thread_basic_info>::zeroed();
-        let mut count = (std::mem::size_of::<libc::thread_basic_info>()
-            / std::mem::size_of::<libc::integer_t>())
-            as libc::mach_msg_type_number_t;
-        let rc = libc::thread_info(
-            port,
-            libc::THREAD_BASIC_INFO as libc::thread_flavor_t,
-            info.as_mut_ptr() as libc::thread_info_t,
-            &mut count,
-        );
-        if rc != libc::KERN_SUCCESS {
-            return Err(format!("thread_info(THREAD_BASIC_INFO) failed: {rc}"));
-        }
-        let info = info.assume_init();
-        let to_micros = |t: libc::time_value_t| -> u64 {
-            let secs = i128::from(t.seconds).max(0);
-            let micros = i128::from(t.microseconds).max(0);
-            (secs
-                .saturating_mul(1_000_000)
-                .saturating_add(micros)
-                .min(i128::from(u64::MAX))) as u64
-        };
-        Ok((to_micros(info.user_time), to_micros(info.system_time)))
-    }
-}
-
-#[cfg(target_os = "macos")]
-fn current_thread_resource_usage() -> Result<ThreadResourceUsageSnapshot, String> {
-    let (user_cpu_us, system_cpu_us) = macos_thread_cpu_micros()?;
-
-    let mut usage = MaybeUninit::<libc::rusage>::uninit();
-    let result = unsafe { libc::getrusage(libc::RUSAGE_SELF, usage.as_mut_ptr()) };
-    if result != 0 {
-        return Err(format!(
-            "getrusage(RUSAGE_SELF) failed: {}",
-            std::io::Error::last_os_error()
-        ));
-    }
-    let usage = unsafe { usage.assume_init() };
-    Ok(ThreadResourceUsageSnapshot {
-        // Per-thread CPU time (accurate, from Mach thread_info).
-        user_cpu_us,
-        system_cpu_us,
-        // macOS reports ru_maxrss in bytes; normalise to KiB to match Linux.
-        max_rss_kib: non_negative_c_long(usage.ru_maxrss) / 1024,
-        // Process-wide best-effort: no per-thread source on macOS.
-        shared_memory_size: non_negative_c_long(usage.ru_ixrss),
-        unshared_data_size: non_negative_c_long(usage.ru_idrss),
-        unshared_stack_size: non_negative_c_long(usage.ru_isrss),
-        minor_page_faults: non_negative_c_long(usage.ru_minflt),
-        major_page_faults: non_negative_c_long(usage.ru_majflt),
-        swapped_out: non_negative_c_long(usage.ru_nswap),
-        fs_read: non_negative_c_long(usage.ru_inblock),
-        fs_write: non_negative_c_long(usage.ru_oublock),
-        ipc_sent: non_negative_c_long(usage.ru_msgsnd),
-        ipc_received: non_negative_c_long(usage.ru_msgrcv),
-        signals_count: non_negative_c_long(usage.ru_nsignals),
-        voluntary_context_switches: non_negative_c_long(usage.ru_nvcsw),
-        involuntary_context_switches: non_negative_c_long(usage.ru_nivcsw),
-    })
-}
-
-// Guest crypto is served by pure-Rust crates (RustCrypto), not OpenSSL, so there
-// is no live OpenSSL library to query. We still surface a `process.versions.openssl`
-// string for guest compatibility, pinned to the OpenSSL release vendored by the
-// sidecar (openssl-sys 300.6.0+3.6.2). The browser executor reports the same
-// constant so both runtimes present an identical identity.
-const EMULATED_OPENSSL_VERSION: &str = "3.6.2";
-
-fn set_object_string_property<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    object: v8::Local<'s, v8::Object>,
-    key: &str,
-    value: &str,
-) {
-    let key = v8::String::new(scope, key).expect("V8 string key");
-    let value = v8::String::new(scope, value).expect("V8 string value");
-    let _ = object.set(scope, key.into(), value.into());
-}
-
-fn set_object_number_property<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    object: v8::Local<'s, v8::Object>,
-    key: &str,
-    value: f64,
-) {
-    let key = v8::String::new(scope, key).expect("V8 string key");
-    let value = v8::Number::new(scope, value);
-    let _ = object.set(scope, key.into(), value.into());
-}
-
-fn number_property_or_zero<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    object: v8::Local<'s, v8::Object>,
-    key: &str,
-) -> u64 {
-    let key = v8::String::new(scope, key).expect("V8 string key");
-    object
-        .get(scope, key.into())
-        .and_then(|value| value.integer_value(scope))
-        .and_then(|value| u64::try_from(value).ok())
-        .unwrap_or_default()
-}
-
-fn process_memory_usage_value<'s>(scope: &mut v8::HandleScope<'s>) -> v8::Local<'s, v8::Value> {
-    let mut stats = v8::HeapStatistics::default();
-    scope.get_heap_statistics(&mut stats);
-
-    let object = v8::Object::new(scope);
-    set_object_number_property(scope, object, "rss", stats.total_physical_size() as f64);
-    set_object_number_property(scope, object, "heapTotal", stats.total_heap_size() as f64);
-    set_object_number_property(scope, object, "heapUsed", stats.used_heap_size() as f64);
-    set_object_number_property(scope, object, "external", stats.external_memory() as f64);
-    set_object_number_property(
-        scope,
-        object,
-        "arrayBuffers",
-        stats.external_memory() as f64,
-    );
-    object.into()
-}
-
-fn process_cpu_usage_value<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    args: &v8::FunctionCallbackArguments,
-) -> Result<v8::Local<'s, v8::Value>, String> {
-    let usage = current_thread_resource_usage()?;
-    let current_user = usage.user_cpu_us;
-    let current_system = usage.system_cpu_us;
-
-    let (user, system) = if args.length() > 0 {
-        let prev = args.get(0);
-        if prev.is_null_or_undefined() {
-            (current_user, current_system)
-        } else if let Some(prev) = prev.to_object(scope) {
-            let previous_user = number_property_or_zero(scope, prev, "user");
-            let previous_system = number_property_or_zero(scope, prev, "system");
-            (
-                current_user.saturating_sub(previous_user),
-                current_system.saturating_sub(previous_system),
-            )
-        } else {
-            (current_user, current_system)
-        }
-    } else {
-        (current_user, current_system)
-    };
-
-    let object = v8::Object::new(scope);
-    set_object_number_property(scope, object, "user", user as f64);
-    set_object_number_property(scope, object, "system", system as f64);
-    Ok(object.into())
-}
-
-fn process_resource_usage_value<'s>(
-    scope: &mut v8::HandleScope<'s>,
-) -> Result<v8::Local<'s, v8::Value>, String> {
-    let usage = current_thread_resource_usage()?;
-    let object = v8::Object::new(scope);
-    set_object_number_property(scope, object, "userCPUTime", usage.user_cpu_us as f64);
-    set_object_number_property(scope, object, "systemCPUTime", usage.system_cpu_us as f64);
-    set_object_number_property(scope, object, "maxRSS", usage.max_rss_kib as f64);
-    set_object_number_property(
-        scope,
-        object,
-        "sharedMemorySize",
-        usage.shared_memory_size as f64,
-    );
-    set_object_number_property(
-        scope,
-        object,
-        "unsharedDataSize",
-        usage.unshared_data_size as f64,
-    );
-    set_object_number_property(
-        scope,
-        object,
-        "unsharedStackSize",
-        usage.unshared_stack_size as f64,
-    );
-    set_object_number_property(
-        scope,
-        object,
-        "minorPageFault",
-        usage.minor_page_faults as f64,
-    );
-    set_object_number_property(
-        scope,
-        object,
-        "majorPageFault",
-        usage.major_page_faults as f64,
-    );
-    set_object_number_property(scope, object, "swappedOut", usage.swapped_out as f64);
-    set_object_number_property(scope, object, "fsRead", usage.fs_read as f64);
-    set_object_number_property(scope, object, "fsWrite", usage.fs_write as f64);
-    set_object_number_property(scope, object, "ipcSent", usage.ipc_sent as f64);
-    set_object_number_property(scope, object, "ipcReceived", usage.ipc_received as f64);
-    set_object_number_property(scope, object, "signalsCount", usage.signals_count as f64);
-    set_object_number_property(
-        scope,
-        object,
-        "voluntaryContextSwitches",
-        usage.voluntary_context_switches as f64,
-    );
-    set_object_number_property(
-        scope,
-        object,
-        "involuntaryContextSwitches",
-        usage.involuntary_context_switches as f64,
-    );
-    Ok(object.into())
-}
-
-fn process_versions_value<'s>(scope: &mut v8::HandleScope<'s>) -> v8::Local<'s, v8::Value> {
-    let object = v8::Object::new(scope);
-    set_object_string_property(scope, object, "v8", v8::V8::get_version());
-    set_object_string_property(scope, object, "openssl", EMULATED_OPENSSL_VERSION);
-    object.into()
-}
-
-#[derive(Clone)]
-struct VmContextState {
-    context: v8::Global<v8::Context>,
-    baseline_keys: HashSet<String>,
-    mirrored_keys: HashSet<String>,
-}
-
-#[derive(Clone, Debug)]
-struct VmRunOptions {
-    filename: String,
-    line_offset: i32,
-    column_offset: i32,
-    timeout_ms: Option<u32>,
-}
-
-impl Default for VmRunOptions {
-    fn default() -> Self {
-        Self {
-            filename: String::from("evalmachine.<anonymous>"),
-            line_offset: 0,
-            column_offset: 0,
-            timeout_ms: None,
-        }
-    }
-}
-
-thread_local! {
-    static VM_CONTEXTS: RefCell<HashMap<u32, VmContextState>> = RefCell::new(HashMap::new());
-    static NEXT_VM_CONTEXT_ID: Cell<u32> = const { Cell::new(1) };
-}
-
-fn vm_context_capacity_error(current_contexts: usize) -> Option<String> {
-    if current_contexts >= MAX_VM_CONTEXTS {
-        return Some(format!(
-            "node:vm context registry exceeded limit of {MAX_VM_CONTEXTS} contexts"
-        ));
-    }
-    None
-}
-
-fn reserve_vm_context_slot<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    context: v8::Local<'s, v8::Context>,
-) -> Result<u32, String> {
-    VM_CONTEXTS.with(|contexts| {
-        let mut contexts = contexts.borrow_mut();
-        if let Some(error) = vm_context_capacity_error(contexts.len()) {
-            return Err(error);
-        }
-
-        let context_id = next_vm_context_id();
-        contexts.insert(
-            context_id,
-            VmContextState {
-                context: v8::Global::new(scope, context),
-                baseline_keys: HashSet::new(),
-                mirrored_keys: HashSet::new(),
-            },
-        );
-        Ok(context_id)
-    })
-}
-
-fn update_vm_context_slot(
-    context_id: u32,
-    baseline_keys: HashSet<String>,
-    mirrored_keys: HashSet<String>,
-) {
-    VM_CONTEXTS.with(|contexts| {
-        if let Some(state) = contexts.borrow_mut().get_mut(&context_id) {
-            state.baseline_keys = baseline_keys;
-            state.mirrored_keys = mirrored_keys;
-        }
-    });
-}
-
-fn remove_vm_context_slot(context_id: u32) {
-    VM_CONTEXTS.with(|contexts| {
-        contexts.borrow_mut().remove(&context_id);
-    });
-}
-
-/// Evict every `node:vm` context slot held by the current isolate thread and
-/// reset the id counter.
-///
-/// `VM_CONTEXTS` is a thread-local that lives for the lifetime of the (reused)
-/// isolate thread, not a single execution. `reserve_vm_context_slot` adds a slot
-/// for every `vm.createContext()`, but the success path
-/// (`update_vm_context_slot`) never removes it — only the sandbox-mirroring error
-/// path does. Without a teardown sweep, slots reserved by one execution survive
-/// into every later execution on the same isolate, so the registry grows
-/// monotonically until it hits the hard cap `MAX_VM_CONTEXTS` and all subsequent
-/// `createContext()` calls fail (freed only on thread exit). This sweep releases
-/// those slots at a session boundary so the registry returns to empty between
-/// executions. See `VmContextRegistryGuard`.
-fn reset_vm_context_registry() {
-    VM_CONTEXTS.with(|contexts| contexts.borrow_mut().clear());
-    NEXT_VM_CONTEXT_ID.with(|next_id| next_id.set(1));
-}
-
-/// RAII owner of the thread-local `node:vm` context registry for one session.
-///
-/// Mirrors the per-session ownership of [`PendingPromises`] (created fresh per
-/// session, dropped at teardown): a session holds one guard, and dropping it
-/// evicts every context slot the session reserved. Because `Drop` runs on *every*
-/// termination path of the frame that holds the guard — normal return, `?` error,
-/// early return, and panic unwinding — the slots are reclaimed unconditionally,
-/// not only on the happy path. This prevents a reused isolate thread from
-/// accumulating `vm.createContext()` slots across executions toward
-/// `MAX_VM_CONTEXTS`.
-#[must_use = "hold the guard for the session lifetime; dropping it evicts the vm context registry"]
-pub struct VmContextRegistryGuard {
-    _private: (),
-}
-
-impl VmContextRegistryGuard {
-    /// Begin a session's ownership of the vm context registry, sweeping any slots
-    /// a prior session left on this (reused) isolate thread so the new session
-    /// starts from an empty registry.
-    pub fn new() -> Self {
-        reset_vm_context_registry();
-        VmContextRegistryGuard { _private: () }
-    }
-}
-
-impl Default for VmContextRegistryGuard {
-    fn default() -> Self {
-        Self::new()
-    }
-}
-
-impl Drop for VmContextRegistryGuard {
-    fn drop(&mut self) {
-        reset_vm_context_registry();
-    }
-}
-
-#[cfg(test)]
-fn clear_vm_context_registry_for_test() {
-    reset_vm_context_registry();
-}
-
-#[cfg(test)]
-fn fill_vm_context_registry_for_test<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    context: v8::Local<'s, v8::Context>,
-    count: usize,
-) {
-    clear_vm_context_registry_for_test();
-    for _ in 0..count {
-        reserve_vm_context_slot(scope, context).expect("fill vm context test registry");
-    }
-}
-
-#[cfg(test)]
-fn vm_context_registry_len_for_test() -> usize {
-    VM_CONTEXTS.with(|contexts| contexts.borrow().len())
-}
-
-fn next_vm_context_id() -> u32 {
-    NEXT_VM_CONTEXT_ID.with(|next_id| {
-        let id = next_id.get();
-        let next = id.checked_add(1).unwrap_or(1);
-        next_id.set(next.max(1));
-        id
-    })
-}
-
-fn vm_collect_object_keys<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    object: v8::Local<'s, v8::Object>,
-) -> HashSet<String> {
-    let names = object
-        .get_own_property_names(scope, v8::GetPropertyNamesArgs::default())
-        .unwrap_or_else(|| v8::Array::new(scope, 0));
-    let mut keys = HashSet::new();
-    for index in 0..names.length() {
-        let Some(name) = names.get_index(scope, index) else {
-            continue;
-        };
-        if name.is_string() {
-            keys.insert(name.to_rust_string_lossy(scope));
-        }
-    }
-    keys
-}
-
-fn vm_set_property<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    object: v8::Local<'s, v8::Object>,
-    key: &str,
-    value: v8::Local<'s, v8::Value>,
-) {
-    let Some(key_value) = v8::String::new(scope, key) else {
-        return;
-    };
-    let _ = object.set(scope, key_value.into(), value);
-}
-
-fn vm_delete_property<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    object: v8::Local<'s, v8::Object>,
-    key: &str,
-) {
-    let Some(key_value) = v8::String::new(scope, key) else {
-        return;
-    };
-    let _ = object.delete(scope, key_value.into());
-}
-
-fn vm_copy_sandbox_into_context<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    sandbox: v8::Local<'s, v8::Object>,
-    context_global: v8::Local<'s, v8::Object>,
-    previous_mirrored_keys: &HashSet<String>,
-) -> HashSet<String> {
-    let current_keys = vm_collect_object_keys(scope, sandbox);
-    for key in current_keys.iter() {
-        let Some(key_value) = v8::String::new(scope, key) else {
-            continue;
-        };
-        let value = sandbox
-            .get(scope, key_value.into())
-            .unwrap_or_else(|| v8::undefined(scope).into());
-        vm_set_property(scope, context_global, key, value);
-    }
-    for key in previous_mirrored_keys {
-        if !current_keys.contains(key) {
-            vm_delete_property(scope, context_global, key);
-        }
-    }
-    current_keys
-}
-
-fn vm_copy_context_into_sandbox<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    context_global: v8::Local<'s, v8::Object>,
-    sandbox: v8::Local<'s, v8::Object>,
-    baseline_keys: &HashSet<String>,
-    previous_mirrored_keys: &HashSet<String>,
-) -> HashSet<String> {
-    let current_keys = vm_collect_object_keys(scope, context_global)
-        .into_iter()
-        .filter(|key| !baseline_keys.contains(key))
-        .collect::<HashSet<_>>();
-    for key in current_keys.iter() {
-        let Some(key_value) = v8::String::new(scope, key) else {
-            continue;
-        };
-        let value = context_global
-            .get(scope, key_value.into())
-            .unwrap_or_else(|| v8::undefined(scope).into());
-        vm_set_property(scope, sandbox, key, value);
-    }
-    for key in previous_mirrored_keys {
-        if !current_keys.contains(key) {
-            vm_delete_property(scope, sandbox, key);
-        }
-    }
-    current_keys
-}
-
-fn vm_options_from_value<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    value: v8::Local<'s, v8::Value>,
-) -> VmRunOptions {
-    if value.is_null_or_undefined() {
-        return VmRunOptions::default();
-    }
-    if value.is_string() {
-        return VmRunOptions {
-            filename: value.to_rust_string_lossy(scope),
-            ..VmRunOptions::default()
-        };
-    }
-    let Some(options) = value.to_object(scope) else {
-        return VmRunOptions::default();
-    };
-    let mut result = VmRunOptions::default();
-    let read_string = |scope: &mut v8::HandleScope<'s>, key: &str| {
-        let key_value = v8::String::new(scope, key).expect("V8 string key");
-        options
-            .get(scope, key_value.into())
-            .filter(|value| value.is_string())
-            .map(|value| value.to_rust_string_lossy(scope))
-    };
-    let read_i32 = |scope: &mut v8::HandleScope<'s>, key: &str| {
-        let key_value = v8::String::new(scope, key).expect("V8 string key");
-        options
-            .get(scope, key_value.into())
-            .and_then(|value| value.int32_value(scope))
-    };
-    let read_u32 = |scope: &mut v8::HandleScope<'s>, key: &str| {
-        let key_value = v8::String::new(scope, key).expect("V8 string key");
-        options
-            .get(scope, key_value.into())
-            .and_then(|value| value.integer_value(scope))
-            .and_then(|value| u32::try_from(value).ok())
-    };
-
-    if let Some(filename) = read_string(scope, "filename") {
-        result.filename = filename;
-    }
-    if let Some(line_offset) = read_i32(scope, "lineOffset") {
-        result.line_offset = line_offset;
-    }
-    if let Some(column_offset) = read_i32(scope, "columnOffset") {
-        result.column_offset = column_offset;
-    }
-    result.timeout_ms = read_u32(scope, "timeout").filter(|timeout_ms| *timeout_ms > 0);
-    result
-}
-
-fn vm_throw_error<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    message: &str,
-    code: Option<&str>,
-    type_error: bool,
-) -> v8::Local<'s, v8::Value> {
-    let message_value = v8::String::new(scope, message).expect("V8 error message");
-    let exception = if type_error {
-        v8::Exception::type_error(scope, message_value)
-    } else {
-        v8::Exception::error(scope, message_value)
-    };
-    if let Some(code) = code {
-        if let Some(exception_object) = exception.to_object(scope) {
-            let code_key = v8::String::new(scope, "code").expect("V8 code key");
-            let code_value = v8::String::new(scope, code).expect("V8 code value");
-            let _ = exception_object.set(scope, code_key.into(), code_value.into());
-        }
-    }
-    scope.throw_exception(exception);
-    exception
-}
-
-fn vm_throw_execution_error<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    error: &crate::ipc::ExecutionError,
-) -> v8::Local<'s, v8::Value> {
-    let message_value = v8::String::new(scope, &error.message).expect("V8 error message");
-    let exception = match error.error_type.as_str() {
-        "TypeError" => v8::Exception::type_error(scope, message_value),
-        _ => v8::Exception::error(scope, message_value),
-    };
-    if let Some(exception_object) = exception.to_object(scope) {
-        if let Some(code) = error.code.as_deref() {
-            let code_key = v8::String::new(scope, "code").expect("V8 code key");
-            let code_value = v8::String::new(scope, code).expect("V8 code value");
-            let _ = exception_object.set(scope, code_key.into(), code_value.into());
-        }
-        if !error.stack.is_empty() {
-            let stack_key = v8::String::new(scope, "stack").expect("V8 stack key");
-            let stack_value = v8::String::new(scope, &error.stack).expect("V8 stack value");
-            let _ = exception_object.set(scope, stack_key.into(), stack_value.into());
-        }
-    }
-    scope.throw_exception(exception);
-    exception
-}
-
-fn vm_apply_script_origin_to_error(
-    mut error: crate::ipc::ExecutionError,
-    options: &VmRunOptions,
-) -> crate::ipc::ExecutionError {
-    let display_line = options.line_offset.saturating_add(1).max(1);
-    let display_column = options.column_offset.saturating_add(1).max(1);
-    let marker = format!("{}:{}", options.filename, display_line);
-    if !error.stack.contains(&marker) {
-        error.stack = format!(
-            "{}: {}\n    at {}:{}:{}",
-            error.error_type, error.message, options.filename, display_line, display_column
-        );
-    }
-    error
-}
-
-fn vm_run_script_in_context<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    isolate_handle: v8::IsolateHandle,
-    context: v8::Local<'s, v8::Context>,
-    code: &str,
-    options: &VmRunOptions,
-) -> Result<v8::Local<'s, v8::Value>, String> {
-    let mut timeout_guard = match options.timeout_ms {
-        Some(timeout_ms) => {
-            let (abort_tx, _abort_rx) = crossbeam_channel::bounded::<()>(0);
-            Some(crate::timeout::TimeoutGuard::new(
-                timeout_ms,
-                isolate_handle.clone(),
-                abort_tx,
-            )?)
-        }
-        None => None,
-    };
-
-    let mut result = None;
-    let mut exception = None;
-    {
-        let context_scope = &mut v8::ContextScope::new(scope, context);
-        let tc = &mut v8::TryCatch::new(context_scope);
-        let source = v8::String::new(tc, code)
-            .ok_or_else(|| String::from("vm source string too large for V8"))?;
-        let filename = v8::String::new(tc, &options.filename)
-            .ok_or_else(|| String::from("vm filename too large for V8"))?;
-        let origin = v8::ScriptOrigin::new(
-            tc,
-            filename.into(),
-            options.line_offset.saturating_sub(1),
-            options.column_offset,
-            false,
-            -1,
-            None,
-            false,
-            false,
-            false,
-            None,
-        );
-        match v8::Script::compile(tc, source, Some(&origin)) {
-            Some(script) => match script.run(tc) {
-                Some(value) => {
-                    tc.perform_microtask_checkpoint();
-                    if let Some(thrown) = tc.exception() {
-                        exception = Some(vm_apply_script_origin_to_error(
-                            crate::execution::extract_error_info(tc, thrown),
-                            options,
-                        ));
-                    } else {
-                        result = Some(v8::Global::new(tc, value));
-                    }
-                }
-                None => {
-                    let failure_message = v8::String::new(tc, "vm script execution failed")
-                        .expect("vm failure message");
-                    let thrown = tc
-                        .exception()
-                        .unwrap_or_else(|| v8::Exception::error(tc, failure_message));
-                    exception = Some(vm_apply_script_origin_to_error(
-                        crate::execution::extract_error_info(tc, thrown),
-                        options,
-                    ));
-                }
-            },
-            None => {
-                let failure_message = v8::String::new(tc, "vm script compilation failed")
-                    .expect("vm failure message");
-                let thrown = tc
-                    .exception()
-                    .unwrap_or_else(|| v8::Exception::error(tc, failure_message));
-                exception = Some(vm_apply_script_origin_to_error(
-                    crate::execution::extract_error_info(tc, thrown),
-                    options,
-                ));
-            }
-        }
-    }
-
-    let timed_out = if let Some(ref mut guard) = timeout_guard {
-        guard.cancel();
-        guard.timed_out()
-    } else {
-        false
-    };
-
-    if timed_out {
-        isolate_handle.cancel_terminate_execution();
-        return Ok(vm_throw_error(
-            scope,
-            &format!(
-                "Script execution timed out after {}ms",
-                options.timeout_ms.unwrap_or_default()
-            ),
-            Some("ERR_SCRIPT_EXECUTION_TIMEOUT"),
-            false,
-        ));
-    }
-
-    if let Some(exception) = exception {
-        return Ok(vm_throw_execution_error(scope, &exception));
-    }
-
-    Ok(result
-        .map(|result| v8::Local::new(scope, &result))
-        .unwrap_or_else(|| v8::undefined(scope).into()))
-}
-
-fn vm_create_context_value<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    args: &mut v8::FunctionCallbackArguments<'s>,
-) -> Result<v8::Local<'s, v8::Value>, String> {
-    let sandbox_value = args.get(0);
-    if !(sandbox_value.is_object() || sandbox_value.is_function()) {
-        return Ok(vm_throw_error(
-            scope,
-            "The \"object\" argument must be of type object.",
-            None,
-            true,
-        ));
-    }
-    let sandbox = sandbox_value
-        .to_object(scope)
-        .ok_or_else(|| String::from("vm.createContext expected an object sandbox"))?;
-    let context = v8::Context::new(scope, Default::default());
-    let context_id = match reserve_vm_context_slot(scope, context) {
-        Ok(context_id) => context_id,
-        Err(message) => {
-            return Ok(vm_throw_error(
-                scope,
-                &message,
-                Some("ERR_AGENTOS_VM_CONTEXT_LIMIT"),
-                false,
-            ));
-        }
-    };
-    {
-        let context_scope = &mut v8::ContextScope::new(scope, context);
-        let global = context.global(context_scope);
-        for key in [
-            "Buffer",
-            "require",
-            "process",
-            "module",
-            "exports",
-            "__dirname",
-            "__filename",
-        ] {
-            vm_delete_property(context_scope, global, key);
-            let undefined = v8::undefined(context_scope).into();
-            vm_set_property(context_scope, global, key, undefined);
-        }
-    }
-    let baseline_keys = {
-        let context_scope = &mut v8::ContextScope::new(scope, context);
-        let global = context.global(context_scope);
-        vm_collect_object_keys(context_scope, global)
-    };
-    let mirrored_keys_result = {
-        let tc = &mut v8::TryCatch::new(scope);
-        let mirrored_keys = {
-            let context_scope = &mut v8::ContextScope::new(tc, context);
-            let global = context.global(context_scope);
-            vm_copy_sandbox_into_context(context_scope, sandbox, global, &HashSet::new())
-        };
-        if tc.has_caught() {
-            Err(tc
-                .exception()
-                .map(|exception| v8::Global::new(tc, exception)))
-        } else {
-            Ok(mirrored_keys)
-        }
-    };
-    let mirrored_keys = match mirrored_keys_result {
-        Ok(mirrored_keys) => mirrored_keys,
-        Err(exception) => {
-            remove_vm_context_slot(context_id);
-            if let Some(exception) = exception {
-                let exception = v8::Local::new(scope, &exception);
-                scope.throw_exception(exception);
-                return Ok(exception);
-            }
-            return Ok(vm_throw_error(
-                scope,
-                "vm.createContext failed while mirroring sandbox properties",
-                None,
-                false,
-            ));
-        }
-    };
-
-    update_vm_context_slot(context_id, baseline_keys, mirrored_keys);
-    Ok(v8::Integer::new_from_unsigned(scope, context_id).into())
-}
-
-fn vm_run_in_context_value<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    args: &mut v8::FunctionCallbackArguments<'s>,
-) -> Result<v8::Local<'s, v8::Value>, String> {
-    let context_id = args
-        .get(0)
-        .uint32_value(scope)
-        .ok_or_else(|| String::from("vm.runInContext missing context id"))?;
-    let code = args.get(1).to_rust_string_lossy(scope);
-    let options_value = args.get(2);
-    let options = vm_options_from_value(scope, options_value);
-    let sandbox = args
-        .get(3)
-        .to_object(scope)
-        .ok_or_else(|| String::from("vm.runInContext missing sandbox object"))?;
-    let isolate_handle = unsafe { args.get_isolate() }.thread_safe_handle();
-
-    let Some((context_global, baseline_keys, mirrored_keys)) = VM_CONTEXTS.with(|contexts| {
-        contexts.borrow().get(&context_id).map(|state| {
-            (
-                state.context.clone(),
-                state.baseline_keys.clone(),
-                state.mirrored_keys.clone(),
-            )
-        })
-    }) else {
-        return Ok(vm_throw_error(
-            scope,
-            "The \"contextifiedObject\" argument must be a vm context.",
-            Some("ERR_INVALID_ARG_TYPE"),
-            true,
-        ));
-    };
-
-    let context = v8::Local::new(scope, &context_global);
-    {
-        let context_scope = &mut v8::ContextScope::new(scope, context);
-        let global = context.global(context_scope);
-        vm_copy_sandbox_into_context(context_scope, sandbox, global, &mirrored_keys);
-    }
-    let result = vm_run_script_in_context(scope, isolate_handle, context, &code, &options)?;
-    let updated_keys = {
-        let context_scope = &mut v8::ContextScope::new(scope, context);
-        let global = context.global(context_scope);
-        vm_copy_context_into_sandbox(
-            context_scope,
-            global,
-            sandbox,
-            &baseline_keys,
-            &mirrored_keys,
-        )
-    };
-    VM_CONTEXTS.with(|contexts| {
-        if let Some(state) = contexts.borrow_mut().get_mut(&context_id) {
-            state.mirrored_keys = updated_keys;
-        }
-    });
-    Ok(result)
-}
-
-fn vm_run_in_this_context_value<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    args: &mut v8::FunctionCallbackArguments<'s>,
-) -> Result<v8::Local<'s, v8::Value>, String> {
-    let code = args.get(0).to_rust_string_lossy(scope);
-    let options_value = args.get(1);
-    let options = vm_options_from_value(scope, options_value);
-    let context = scope.get_current_context();
-    let isolate_handle = unsafe { args.get_isolate() }.thread_safe_handle();
-    vm_run_script_in_context(scope, isolate_handle, context, &code, &options)
-}
-
-fn handle_local_bridge_call<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    method: &str,
-    args: &mut v8::FunctionCallbackArguments<'s>,
-) -> Result<Option<v8::Local<'s, v8::Value>>, String> {
-    match method {
-        "process.memoryUsage" => Ok(Some(process_memory_usage_value(scope))),
-        "process.cpuUsage" => process_cpu_usage_value(scope, args).map(Some),
-        "process.resourceUsage" => process_resource_usage_value(scope).map(Some),
-        "process.versions" => Ok(Some(process_versions_value(scope))),
-        "_vmCreateContext" => vm_create_context_value(scope, args).map(Some),
-        "_vmRunInContext" => vm_run_in_context_value(scope, args).map(Some),
-        "_vmRunInThisContext" => vm_run_in_this_context_value(scope, args).map(Some),
-        _ => Ok(None),
-    }
-}
-
-/// Register sync-blocking bridge functions on the V8 global object.
-///
-/// Each registered function, when called from V8:
-/// 1. Serializes arguments as a V8 Array via ValueSerializer
-/// 2. Sends a BridgeCall over IPC via BridgeCallContext
-/// 3. Blocks on read() for the BridgeResponse
-/// 4. Returns the V8-deserialized result or throws a V8 exception
-///
-/// The BridgeCallContext pointer must remain valid for the lifetime of the V8 context.
-/// The returned BridgeFnStore must also be kept alive.
-pub fn register_sync_bridge_fns(
-    scope: &mut v8::HandleScope,
-    ctx: *const BridgeCallContext,
-    methods: &[&str],
-) -> BridgeFnStore {
-    let context = scope.get_current_context();
-    let global = context.global(scope);
-    let mut data = Vec::with_capacity(methods.len());
-
-    for &method_name in methods {
-        let boxed = Box::new(SyncBridgeFnData {
-            ctx,
-            method: method_name.to_string(),
-        });
-        // Pointer to heap allocation — stable while Box exists in data vec
-        let ptr = &*boxed as *const SyncBridgeFnData as *mut c_void;
-        data.push(boxed);
-
-        let external = v8::External::new(scope, ptr);
-        let template = v8::FunctionTemplate::builder(sync_bridge_callback)
-            .data(external.into())
-            .build(scope);
-        let func = template.get_function(scope).unwrap();
-        attach_bridge_function_aliases(scope, func, &["applySync", "applySyncPromise"]);
-
-        let key = v8::String::new(scope, method_name).unwrap();
-        global.set(scope, key.into(), func.into());
-    }
-
-    BridgeFnStore { _data: data }
-}
-
-/// V8 FunctionTemplate callback for sync-blocking bridge calls.
-fn sync_bridge_callback<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    args: v8::FunctionCallbackArguments<'s>,
-    mut rv: v8::ReturnValue,
-) {
-    let mut args = args;
-    // Extract SyncBridgeFnData from External
-    let external = match v8::Local::<v8::External>::try_from(args.data()) {
-        Ok(ext) => ext,
-        Err(_) => {
-            let msg =
-                v8::String::new(scope, "internal error: missing bridge function data").unwrap();
-            let exc = v8::Exception::error(scope, msg);
-            scope.throw_exception(exc);
-            return;
-        }
-    };
-    // SAFETY: pointer is valid while BridgeFnStore is alive (same session lifetime)
-    let data = unsafe { &*(external.value() as *const SyncBridgeFnData) };
-    let ctx = unsafe { &*data.ctx };
-
-    {
-        let tc = &mut v8::TryCatch::new(scope);
-        match handle_local_bridge_call(tc, &data.method, &mut args) {
-            Ok(Some(value)) => {
-                if tc.has_caught() {
-                    let _ = tc.rethrow();
-                    return;
-                }
-                rv.set(value);
-                return;
-            }
-            Ok(None) => {}
-            Err(err) => {
-                if tc.has_caught() {
-                    let _ = tc.rethrow();
-                    return;
-                }
-                let msg = v8::String::new(tc, &format!("bridge runtime error: {err}")).unwrap();
-                let exc = v8::Exception::error(tc, msg);
-                tc.throw_exception(exc);
-                return;
-            }
-        }
-    }
-
-    // Serialize V8 arguments using the Vec released by V8's serializer directly.
-    let encoded_args = match serialize_v8_args(scope, &args) {
-        Ok(encoded_args) => encoded_args,
-        Err(err) => {
-            let msg =
-                v8::String::new(scope, &format!("bridge serialization error: {}", err)).unwrap();
-            let exc = v8::Exception::error(scope, msg);
-            scope.throw_exception(exc);
-            return;
-        }
-    };
-
-    // Perform sync-blocking bridge call
-    match ctx.sync_call_response(&data.method, encoded_args) {
-        Ok(Some(response)) => {
-            let v8_val = bridge_response_payload_to_v8(scope, response.status, &response.payload);
-            if let Some(val) = v8_val {
-                rv.set(val);
-            } else {
-                let msg = v8::String::new(scope, "bridge response conversion failed").unwrap();
-                let exc = v8::Exception::error(scope, msg);
-                scope.throw_exception(exc);
-            }
-        }
-        Ok(None) => {
-            rv.set_undefined();
-        }
-        Err(err_msg) => {
-            let msg = v8::String::new(scope, &err_msg).unwrap();
-            let exc = v8::Exception::error(scope, msg);
-            if let Some(code) = bridge_error_code(&err_msg) {
-                let exc_object = exc.to_object(scope).unwrap();
-                let code_key = v8::String::new(scope, "code").unwrap();
-                let code_value = v8::String::new(scope, code).unwrap();
-                let _ = exc_object.set(scope, code_key.into(), code_value.into());
-            }
-            scope.throw_exception(exc);
-        }
-    }
-}
-
-/// Register async promise-returning bridge functions on the V8 global object.
-///
-/// Each registered function, when called from V8:
-/// 1. Creates a v8::PromiseResolver
-/// 2. Stores the resolver + call_id in PendingPromises
-/// 3. Sends a BridgeCall over IPC (non-blocking write)
-/// 4. Returns the promise to V8
-///
-/// The BridgeCallContext and PendingPromises pointers must remain valid
-/// for the lifetime of the V8 context.
-pub fn register_async_bridge_fns(
-    scope: &mut v8::HandleScope,
-    ctx: *const BridgeCallContext,
-    pending: *const PendingPromises,
-    methods: &[&str],
-) -> AsyncBridgeFnStore {
-    let context = scope.get_current_context();
-    let global = context.global(scope);
-    let mut data = Vec::with_capacity(methods.len());
-
-    for &method_name in methods {
-        let boxed = Box::new(AsyncBridgeFnData {
-            ctx,
-            pending,
-            method: method_name.to_string(),
-        });
-        // Pointer to heap allocation — stable while Box exists in data vec
-        let ptr = &*boxed as *const AsyncBridgeFnData as *mut c_void;
-        data.push(boxed);
-
-        let external = v8::External::new(scope, ptr);
-        let template = v8::FunctionTemplate::builder(async_bridge_callback)
-            .data(external.into())
-            .build(scope);
-        let func = template.get_function(scope).unwrap();
-        attach_bridge_function_aliases(scope, func, &["apply"]);
-
-        let key = v8::String::new(scope, method_name).unwrap();
-        global.set(scope, key.into(), func.into());
-    }
-
-    AsyncBridgeFnStore { _data: data }
-}
-
-fn attach_bridge_function_aliases<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    func: v8::Local<'s, v8::Function>,
-    aliases: &[&str],
-) {
-    let func_object = func.to_object(scope).unwrap();
-    for alias in aliases {
-        let key = v8::String::new(scope, alias).unwrap();
-        let Some(wrapper) = build_bridge_apply_wrapper(scope, func) else {
-            continue;
-        };
-        let _ = func_object.set(scope, key.into(), wrapper.into());
-    }
-}
-
-fn build_bridge_apply_wrapper<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    func: v8::Local<'s, v8::Function>,
-) -> Option<v8::Local<'s, v8::Function>> {
-    let source = v8::String::new(
-        scope,
-        "(function (fn) { return function (_thisArg, args) { return fn(...(Array.isArray(args) ? args : [])); }; })",
-    )?;
-    let script = v8::Script::compile(scope, source, None)?;
-    let factory = script.run(scope)?;
-    let factory = v8::Local::<v8::Function>::try_from(factory).ok()?;
-    let argv = [func.into()];
-    let receiver = v8::undefined(scope).into();
-    factory
-        .call(scope, receiver, &argv)
-        .and_then(|value| v8::Local::<v8::Function>::try_from(value).ok())
-}
-
-fn reject_promise_with_error(
-    scope: &mut v8::HandleScope,
-    resolver: v8::Local<v8::PromiseResolver>,
-    message: &str,
-    code: Option<&str>,
-) {
-    let msg = v8::String::new(scope, message).unwrap();
-    let exc = v8::Exception::error(scope, msg);
-    if let Some(code) = code {
-        let exc_object = exc.to_object(scope).unwrap();
-        let code_key = v8::String::new(scope, "code").unwrap();
-        let code_value = v8::String::new(scope, code).unwrap();
-        let _ = exc_object.set(scope, code_key.into(), code_value.into());
-    }
-    resolver.reject(scope, exc);
-}
-
-/// V8 FunctionTemplate callback for async promise-returning bridge calls.
-fn async_bridge_callback(
-    scope: &mut v8::HandleScope,
-    args: v8::FunctionCallbackArguments,
-    mut rv: v8::ReturnValue,
-) {
-    // Extract AsyncBridgeFnData from External
-    let external = match v8::Local::<v8::External>::try_from(args.data()) {
-        Ok(ext) => ext,
-        Err(_) => {
-            let msg = v8::String::new(scope, "internal error: missing async bridge function data")
-                .unwrap();
-            let exc = v8::Exception::error(scope, msg);
-            scope.throw_exception(exc);
-            return;
-        }
-    };
-    // SAFETY: pointer is valid while AsyncBridgeFnStore is alive (same session lifetime)
-    let data = unsafe { &*(external.value() as *const AsyncBridgeFnData) };
-    let ctx = unsafe { &*data.ctx };
-    let pending = unsafe { &*data.pending };
-
-    // Create PromiseResolver
-    let resolver = match v8::PromiseResolver::new(scope) {
-        Some(r) => r,
-        None => {
-            let msg = v8::String::new(scope, "failed to create PromiseResolver").unwrap();
-            let exc = v8::Exception::error(scope, msg);
-            scope.throw_exception(exc);
-            return;
-        }
-    };
-
-    // Get the promise to return to V8
-    let promise = resolver.get_promise(scope);
-
-    let reservation = match pending.reserve() {
-        Ok(reservation) => reservation,
-        Err(err_msg) => {
-            reject_promise_with_error(
-                scope,
-                resolver,
-                &err_msg,
-                Some("ERR_AGENTOS_BRIDGE_PENDING_PROMISE_LIMIT"),
-            );
-            rv.set(promise.into());
-            return;
-        }
-    };
-
-    // Serialize V8 arguments using the Vec released by V8's serializer directly.
-    let encoded_args = match serialize_v8_args(scope, &args) {
-        Ok(encoded_args) => encoded_args,
-        Err(err) => {
-            let msg =
-                v8::String::new(scope, &format!("bridge serialization error: {}", err)).unwrap();
-            let exc = v8::Exception::error(scope, msg);
-            scope.throw_exception(exc);
-            return;
-        }
-    };
-
-    // Send BridgeCall (non-blocking write)
-    match ctx.async_send(&data.method, encoded_args) {
-        Ok(call_id) => {
-            // Store resolver in pending promises map
-            let global_resolver = v8::Global::new(scope, resolver);
-            pending.insert_reserved(call_id, global_resolver, reservation);
-        }
-        Err(err_msg) => {
-            // Reject the promise immediately if send fails
-            reject_promise_with_error(scope, resolver, &err_msg, None);
-        }
-    }
-
-    // Return the promise
-    rv.set(promise.into());
-}
-
-/// Replace stub bridge functions on a snapshot-restored context with real
-/// session-local bridge functions. Overwrites the 38 stub globals with
-/// functions backed by session-local BridgeCallContext.
-///
-/// Returns (BridgeFnStore, AsyncBridgeFnStore) that must be kept alive
-/// for the lifetime of the V8 context.
-pub fn replace_bridge_fns(
-    scope: &mut v8::HandleScope,
-    ctx: *const BridgeCallContext,
-    pending: *const PendingPromises,
-    sync_fns: &[&str],
-    async_fns: &[&str],
-) -> (BridgeFnStore, AsyncBridgeFnStore) {
-    // Per-session bridge installation runs once, before any user code executes in
-    // this context, so the only `node:vm` context slots present are leftovers from
-    // a prior session that reused this isolate thread. Sweep them here so a new
-    // session never inherits another session's contexts and the registry can never
-    // accumulate across executions toward `MAX_VM_CONTEXTS`. The session should
-    // also hold a `VmContextRegistryGuard` to evict its own slots at teardown.
-    reset_vm_context_registry();
-    let sync_store = register_sync_bridge_fns(scope, ctx, sync_fns);
-    let async_store = register_async_bridge_fns(scope, ctx, pending, async_fns);
-    (sync_store, async_store)
-}
-
-/// Register stub bridge functions on the V8 global for snapshot creation.
-///
-/// Uses the same sync_bridge_callback / async_bridge_callback as real
-/// functions (required for ExternalReferences in snapshot serialization)
-/// but WITHOUT v8::External data. If a stub is accidentally called during
-/// snapshot creation, the callback gracefully throws a V8 exception
-/// (args.data() is not External -> "missing bridge function data" error).
-///
-/// After snapshot restore, these stubs are replaced with real functions
-/// that have proper External data pointing to a session-local BridgeCallContext.
-pub fn register_stub_bridge_fns(
-    scope: &mut v8::HandleScope,
-    sync_fns: &[&str],
-    async_fns: &[&str],
-) {
-    let context = scope.get_current_context();
-    let global = context.global(scope);
-
-    // Register sync bridge functions as stubs (no External data)
-    for &method_name in sync_fns {
-        let template = v8::FunctionTemplate::builder(sync_bridge_callback).build(scope);
-        let func = template.get_function(scope).unwrap();
-        let key = v8::String::new(scope, method_name).unwrap();
-        global.set(scope, key.into(), func.into());
-    }
-
-    // Register async bridge functions as stubs (no External data)
-    for &method_name in async_fns {
-        let template = v8::FunctionTemplate::builder(async_bridge_callback).build(scope);
-        let func = template.get_function(scope).unwrap();
-        let key = v8::String::new(scope, method_name).unwrap();
-        global.set(scope, key.into(), func.into());
-    }
-}
-
-/// Serialize V8 function arguments as an array.
-fn serialize_v8_args(
-    scope: &mut v8::HandleScope,
-    args: &v8::FunctionCallbackArguments,
-) -> Result<Vec<u8>, String> {
-    let count = args.length();
-    let array = v8::Array::new(scope, count);
-    for i in 0..count {
-        array.set_index(scope, i as u32, args.get(i));
-    }
-    serialize_v8_value(scope, array.into())
-}
-
-/// Resolve or reject a pending async bridge promise by call_id.
-///
-/// Called when a BridgeResponse arrives during the session event loop.
-/// Flushes microtasks after resolution to process .then() handlers.
-pub fn resolve_pending_promise(
-    scope: &mut v8::HandleScope,
-    pending: &PendingPromises,
-    call_id: u64,
-    status: u8,
-    result: Option<Vec<u8>>,
-    error: Option<String>,
-) -> Result<(), String> {
-    let resolver_global = pending
-        .remove(call_id)
-        .ok_or_else(|| format!("no pending promise for call_id {}", call_id))?;
-    let resolver = v8::Local::new(scope, &resolver_global);
-
-    if let Some(err_msg) = error {
-        let msg = v8::String::new(scope, &err_msg).unwrap();
-        let exc = v8::Exception::error(scope, msg);
-        if let Some(code) = bridge_error_code(&err_msg) {
-            let exc_object = exc.to_object(scope).unwrap();
-            let code_key = v8::String::new(scope, "code").unwrap();
-            let code_value = v8::String::new(scope, code).unwrap();
-            let _ = exc_object.set(scope, code_key.into(), code_value.into());
-        }
-        resolver.reject(scope, exc);
-    } else if let Some(result_bytes) = result {
-        let v8_val = bridge_response_payload_to_v8(scope, status, &result_bytes);
-        if let Some(val) = v8_val {
-            resolver.resolve(scope, val);
-        } else {
-            let msg = v8::String::new(scope, "bridge response conversion failed").unwrap();
-            let exc = v8::Exception::error(scope, msg);
-            resolver.reject(scope, exc);
-        }
-    } else {
-        let undef = v8::undefined(scope);
-        resolver.resolve(scope, undef.into());
-    }
-
-    // Flush microtasks after resolution
-    scope.perform_microtask_checkpoint();
-
-    Ok(())
-}
-
-fn bridge_error_code(message: &str) -> Option<&str> {
-    const TRUSTED_PREFIXES: &[&str] = &[
-        "ERR_AGENTOS_NODE_SYNC_RPC",
-        "ERR_AGENTOS_PYTHON_VFS_RPC",
-        "ERR_AGENTOS_BRIDGE",
-    ];
-
-    let mut segments = message.split(':').map(str::trim);
-    let first = segments.next()?;
-    if is_errno_segment(first) {
-        return Some(first);
-    }
-
-    if TRUSTED_PREFIXES.contains(&first) {
-        let second = segments.next()?;
-        if is_errno_segment(second) {
-            return Some(second);
-        }
-    }
-
-    None
-}
-
-fn is_errno_segment(segment: &str) -> bool {
-    segment.len() >= 2
-        && segment.starts_with('E')
-        && !segment.starts_with("ERR_")
-        && segment[1..]
-            .bytes()
-            .all(|byte| byte.is_ascii_uppercase() || byte.is_ascii_digit() || byte == b'_')
-}
-
-#[cfg(test)]
-mod tests {
-    use super::{
-        bridge_error_code, clear_vm_context_registry_for_test, deserialize_cbor_value,
-        fill_vm_context_registry_for_test, register_async_bridge_fns, register_sync_bridge_fns,
-        reserve_vm_context_slot, reset_vm_context_registry, serialize_cbor_value,
-        vm_context_capacity_error, vm_context_registry_len_for_test, PendingPromises,
-        VmContextRegistryGuard, MAX_CBOR_BRIDGE_CONTAINER_ITEMS, MAX_CBOR_BRIDGE_DEPTH,
-        MAX_PENDING_PROMISES, MAX_VM_CONTEXTS,
-    };
-    use crate::host_call::BridgeCallContext;
-    use crate::ipc_binary::{self, BinaryFrame};
-    use crate::isolate;
-    use std::io::{Cursor, Write};
-    use std::process::Command;
-    use std::sync::{Arc, Mutex};
-
-    struct SharedWriter(Arc<Mutex<Vec<u8>>>);
-
-    impl Write for SharedWriter {
-        fn write(&mut self, buf: &[u8]) -> std::io::Result<usize> {
-            self.0.lock().unwrap().write(buf)
-        }
-
-        fn flush(&mut self) -> std::io::Result<()> {
-            self.0.lock().unwrap().flush()
-        }
-    }
-
-    fn bridge_call_count(bytes: &[u8]) -> usize {
-        let mut cursor = Cursor::new(bytes);
-        let mut count = 0;
-        while let Ok(frame) = ipc_binary::read_frame(&mut cursor) {
-            if matches!(frame, BinaryFrame::BridgeCall { .. }) {
-                count += 1;
-            }
-        }
-        count
-    }
-
-    #[test]
-    fn bridge_error_code_rejects_guest_controlled_errno_segments() {
-        assert_eq!(bridge_error_code("user said 'EACCES: denied'"), None);
-        assert_eq!(
-            bridge_error_code("prefix: user said 'EPERM': more text"),
-            None
-        );
-        assert_eq!(bridge_error_code("ERR_AGENTOS_FAKE: EACCES: denied"), None);
-    }
-
-    #[test]
-    fn bridge_error_code_accepts_trusted_secure_exec_prefixes() {
-        assert_eq!(
-            bridge_error_code("ERR_AGENTOS_NODE_SYNC_RPC: EACCES: permission denied on /foo"),
-            Some("EACCES")
-        );
-        assert_eq!(
-            bridge_error_code("ERR_AGENTOS_PYTHON_VFS_RPC: ENOENT: missing file"),
-            Some("ENOENT")
-        );
-        assert_eq!(bridge_error_code("EEXIST: already exists"), Some("EEXIST"));
-    }
-
-    #[test]
-    fn bridge_v8_hardening_rejects_cbor_abuse_and_vm_context_reentry_overflow() {
-        const SUBPROCESS_ENV: &str = "AGENTOS_V8_BRIDGE_HARDENING_SUBPROCESS";
-        if std::env::var_os(SUBPROCESS_ENV).is_none() {
-            let output = Command::new(std::env::current_exe().expect("current test binary"))
-                .arg("bridge::tests::bridge_v8_hardening_rejects_cbor_abuse_and_vm_context_reentry_overflow")
-                .arg("--exact")
-                .arg("--nocapture")
-                .env(SUBPROCESS_ENV, "1")
-                .output()
-                .expect("spawn bridge hardening subprocess");
-            assert!(
-                output.status.success(),
-                "bridge hardening subprocess failed with status {:?}\nstdout:\n{}\nstderr:\n{}",
-                output.status.code(),
-                String::from_utf8_lossy(&output.stdout),
-                String::from_utf8_lossy(&output.stderr)
-            );
-            return;
-        }
-
-        isolate::init_v8_platform();
-
-        let mut isolate = isolate::create_isolate(None);
-        let context = isolate::create_context(&mut isolate);
-        let scope = &mut v8::HandleScope::new(&mut isolate);
-        let context = v8::Local::new(scope, &context);
-        let scope = &mut v8::ContextScope::new(scope, context);
-
-        let object = v8::Object::new(scope);
-        let self_key = v8::String::new(scope, "self").unwrap();
-        assert!(object.set(scope, self_key.into(), object.into()).is_some());
-
-        let error = serialize_cbor_value(scope, object.into()).expect_err("cycle rejected");
-        assert!(
-            error.contains("circular object graph"),
-            "unexpected error: {error}"
-        );
-
-        let source = v8::String::new(
-            scope,
-            &format!(
-                "const sparse = []; sparse.length = {}; sparse",
-                MAX_CBOR_BRIDGE_CONTAINER_ITEMS + 1
-            ),
-        )
-        .unwrap();
-        let script = v8::Script::compile(scope, source, None).unwrap();
-        let sparse = script.run(scope).unwrap();
-        let error = serialize_cbor_value(scope, sparse).expect_err("sparse array rejected");
-        assert!(
-            error.contains(&format!(
-                "item count {} exceeds limit",
-                MAX_CBOR_BRIDGE_CONTAINER_ITEMS + 1
-            )),
-            "unexpected error: {error}"
-        );
-
-        let mut value = ciborium::Value::Null;
-        for _ in 0..=MAX_CBOR_BRIDGE_DEPTH {
-            value = ciborium::Value::Array(vec![value]);
-        }
-        let mut encoded = Vec::new();
-        ciborium::into_writer(&value, &mut encoded).unwrap();
-        let error = deserialize_cbor_value(scope, &encoded).expect_err("depth rejected");
-        assert!(
-            error.contains("CBOR decode failed"),
-            "unexpected error: {error}"
-        );
-
-        let oversized_len = (MAX_CBOR_BRIDGE_CONTAINER_ITEMS + 1) as u32;
-        let oversized_array_header = [
-            0x9a,
-            (oversized_len >> 24) as u8,
-            (oversized_len >> 16) as u8,
-            (oversized_len >> 8) as u8,
-            oversized_len as u8,
-        ];
-        let error = deserialize_cbor_value(scope, &oversized_array_header)
-            .expect_err("oversized array rejected before element allocation");
-        assert!(
-            error.contains(&format!(
-                "item count {} exceeds limit",
-                MAX_CBOR_BRIDGE_CONTAINER_ITEMS + 1
-            )),
-            "unexpected error: {error}"
-        );
-
-        fill_vm_context_registry_for_test(scope, context, MAX_VM_CONTEXTS - 1);
-        let bridge_ctx = BridgeCallContext::new(
-            Box::new(Vec::new()),
-            Box::new(Cursor::new(Vec::new())),
-            String::from("test-session"),
-        );
-        let _bridge_fns = register_sync_bridge_fns(
-            scope,
-            &bridge_ctx as *const BridgeCallContext,
-            &["_vmCreateContext"],
-        );
-
-        let source = r#"
-            let innerCode;
-            const sandbox = {};
-            Object.defineProperty(sandbox, "x", {
-                get() {
-                    try {
-                        _vmCreateContext({});
-                    } catch (error) {
-                        innerCode = error && error.code;
-                    }
-                    return 1;
-                },
-                enumerable: true,
-            });
-
-            const outerId = _vmCreateContext(sandbox);
-            let limitCode;
-            try {
-                _vmCreateContext({});
-            } catch (error) {
-                limitCode = error && error.code;
-            }
-
-            JSON.stringify({
-                innerCode,
-                limitCode,
-                outerIsInteger: Number.isInteger(outerId),
-            })
-        "#;
-        {
-            let tc = &mut v8::TryCatch::new(scope);
-            let source = v8::String::new(tc, source).unwrap();
-            let script = v8::Script::compile(tc, source, None).unwrap();
-            let result = script.run(tc);
-            assert!(
-                !tc.has_caught(),
-                "unexpected exception while testing vm cap"
-            );
-            let details = result
-                .expect("vm context cap script result")
-                .to_rust_string_lossy(tc);
-            assert_eq!(
-                details,
-                r#"{"innerCode":"ERR_AGENTOS_VM_CONTEXT_LIMIT","limitCode":"ERR_AGENTOS_VM_CONTEXT_LIMIT","outerIsInteger":true}"#,
-                "vm context cap script should observe limit errors"
-            );
-        }
-        assert_eq!(vm_context_registry_len_for_test(), MAX_VM_CONTEXTS);
-        clear_vm_context_registry_for_test();
-
-        let source = r#"
-            (() => {
-                let thrownMessage;
-                const sandbox = {};
-                Object.defineProperty(sandbox, "x", {
-                    get() {
-                        throw new Error("sandbox getter failed");
-                    },
-                    enumerable: true,
-                });
-                try {
-                    _vmCreateContext(sandbox);
-                } catch (error) {
-                    thrownMessage = error && error.message;
-                }
-
-                const nextId = _vmCreateContext({});
-                return JSON.stringify({
-                    thrownMessage,
-                    nextIsInteger: Number.isInteger(nextId),
-                });
-            })()
-        "#;
-        {
-            let tc = &mut v8::TryCatch::new(scope);
-            let source = v8::String::new(tc, source).unwrap();
-            let script = v8::Script::compile(tc, source, None).unwrap();
-            let result = script.run(tc);
-            if tc.has_caught() {
-                let exception = tc
-                    .exception()
-                    .map(|exception| exception.to_rust_string_lossy(tc))
-                    .unwrap_or_else(|| String::from("<missing exception>"));
-                panic!("unexpected exception while testing vm rollback: {exception}");
-            }
-            let details = result
-                .expect("vm context rollback script result")
-                .to_rust_string_lossy(tc);
-            assert_eq!(
-                details, r#"{"thrownMessage":"sandbox getter failed","nextIsInteger":true}"#,
-                "vm context rollback script should preserve the getter exception and keep registry usable"
-            );
-        }
-        assert_eq!(vm_context_registry_len_for_test(), 1);
-        clear_vm_context_registry_for_test();
-
-        let async_writer = Arc::new(Mutex::new(Vec::new()));
-        let async_bridge_ctx = BridgeCallContext::new(
-            Box::new(SharedWriter(Arc::clone(&async_writer))),
-            Box::new(Cursor::new(Vec::new())),
-            String::from("test-session"),
-        );
-        let async_pending = PendingPromises::new();
-        let _async_bridge_fns = register_async_bridge_fns(
-            scope,
-            &async_bridge_ctx as *const BridgeCallContext,
-            &async_pending as *const PendingPromises,
-            &["_asyncFn"],
-        );
-        let source = format!(
-            r#"
-            for (let i = 0; i < {fill_count}; i++) {{
-                _asyncFn(i);
-            }}
-            globalThis.__overflowPromise = _asyncFn("overflow");
-            "#,
-            fill_count = MAX_PENDING_PROMISES,
-        );
-        {
-            let tc = &mut v8::TryCatch::new(scope);
-            let source = v8::String::new(tc, &source).unwrap();
-            let script = v8::Script::compile(tc, source, None).unwrap();
-            assert!(script.run(tc).is_some());
-            assert!(!tc.has_caught(), "async overflow should reject, not throw");
-        }
-        assert_eq!(async_pending.len(), MAX_PENDING_PROMISES);
-        assert_eq!(
-            bridge_call_count(&async_writer.lock().unwrap()),
-            MAX_PENDING_PROMISES
-        );
-        {
-            let key = v8::String::new(scope, "__overflowPromise").unwrap();
-            let value = context.global(scope).get(scope, key.into()).unwrap();
-            let promise = v8::Local::<v8::Promise>::try_from(value).unwrap();
-            assert_eq!(promise.state(), v8::PromiseState::Rejected);
-            let rejection = promise.result(scope);
-            let rejection = v8::Local::<v8::Object>::try_from(rejection).unwrap();
-            let code_key = v8::String::new(scope, "code").unwrap();
-            let code = rejection.get(scope, code_key.into()).unwrap();
-            assert_eq!(
-                code.to_rust_string_lossy(scope),
-                "ERR_AGENTOS_BRIDGE_PENDING_PROMISE_LIMIT"
-            );
-        }
-
-        let reentrant_writer = Arc::new(Mutex::new(Vec::new()));
-        let reentrant_bridge_ctx = BridgeCallContext::new(
-            Box::new(SharedWriter(Arc::clone(&reentrant_writer))),
-            Box::new(Cursor::new(Vec::new())),
-            String::from("test-session"),
-        );
-        let reentrant_pending = PendingPromises::new();
-        let _reentrant_async_bridge_fns = register_async_bridge_fns(
-            scope,
-            &reentrant_bridge_ctx as *const BridgeCallContext,
-            &reentrant_pending as *const PendingPromises,
-            &["_asyncFn"],
-        );
-        let source = format!(
-            r#"
-            for (let i = 0; i < {fill_count}; i++) {{
-                _asyncFn(i);
-            }}
-            let innerPromise;
-            const reentrantArg = {{}};
-            Object.defineProperty(reentrantArg, "x", {{
-                get() {{
-                    innerPromise = _asyncFn("inner");
-                    return 1;
-                }},
-                enumerable: true,
-            }});
-            globalThis.__reentrantOuterPromise = _asyncFn(reentrantArg);
-            globalThis.__reentrantInnerPromise = innerPromise;
-            "#,
-            fill_count = MAX_PENDING_PROMISES - 1,
-        );
-        {
-            let tc = &mut v8::TryCatch::new(scope);
-            let source = v8::String::new(tc, &source).unwrap();
-            let script = v8::Script::compile(tc, source, None).unwrap();
-            assert!(script.run(tc).is_some());
-            assert!(!tc.has_caught(), "async reentry should reject, not throw");
-        }
-        assert_eq!(reentrant_pending.len(), MAX_PENDING_PROMISES);
-        assert_eq!(
-            bridge_call_count(&reentrant_writer.lock().unwrap()),
-            MAX_PENDING_PROMISES
-        );
-        {
-            let key = v8::String::new(scope, "__reentrantInnerPromise").unwrap();
-            let value = context.global(scope).get(scope, key.into()).unwrap();
-            let promise = v8::Local::<v8::Promise>::try_from(value).unwrap();
-            assert_eq!(promise.state(), v8::PromiseState::Rejected);
-            let rejection = promise.result(scope);
-            let rejection = v8::Local::<v8::Object>::try_from(rejection).unwrap();
-            let code_key = v8::String::new(scope, "code").unwrap();
-            let code = rejection.get(scope, code_key.into()).unwrap();
-            assert_eq!(
-                code.to_rust_string_lossy(scope),
-                "ERR_AGENTOS_BRIDGE_PENDING_PROMISE_LIMIT"
-            );
-        }
-
-        let buffer_reentry_writer = Arc::new(Mutex::new(Vec::new()));
-        let buffer_reentry_bridge_ctx = BridgeCallContext::new(
-            Box::new(SharedWriter(Arc::clone(&buffer_reentry_writer))),
-            Box::new(Cursor::new(Vec::new())),
-            String::from("test-session"),
-        );
-        let buffer_reentry_pending = PendingPromises::new();
-        let _buffer_reentry_async_bridge_fns = register_async_bridge_fns(
-            scope,
-            &buffer_reentry_bridge_ctx as *const BridgeCallContext,
-            &buffer_reentry_pending as *const PendingPromises,
-            &["_asyncFn"],
-        );
-        let source = r#"
-            let bufferInnerPromise;
-            const bufferReentrantArg = {};
-            Object.defineProperty(bufferReentrantArg, "x", {
-                get() {
-                    bufferInnerPromise = _asyncFn("inner");
-                    return 1;
-                },
-                enumerable: true,
-            });
-            globalThis.__bufferOuterPromise = _asyncFn(bufferReentrantArg);
-            globalThis.__bufferInnerPromise = bufferInnerPromise;
-        "#;
-        {
-            let tc = &mut v8::TryCatch::new(scope);
-            let source = v8::String::new(tc, source).unwrap();
-            let script = v8::Script::compile(tc, source, None).unwrap();
-            assert!(script.run(tc).is_some());
-            assert!(
-                !tc.has_caught(),
-                "async serialization reentry should not panic or throw"
-            );
-        }
-        assert_eq!(buffer_reentry_pending.len(), 2);
-        assert_eq!(bridge_call_count(&buffer_reentry_writer.lock().unwrap()), 2);
-    }
-
-    #[test]
-    fn vm_context_capacity_error_trips_at_registry_limit() {
-        assert!(vm_context_capacity_error(MAX_VM_CONTEXTS - 1).is_none());
-
-        let error = vm_context_capacity_error(MAX_VM_CONTEXTS).expect("limit error");
-        assert!(
-            error.contains(&format!("limit of {MAX_VM_CONTEXTS} contexts")),
-            "unexpected error: {error}"
-        );
-    }
-
-    // Regression test for the `VM_CONTEXTS` leak: `reserve_vm_context_slot` adds a
-    // slot per `vm.createContext()`, but the success path never removes it. On a
-    // reused isolate thread that made the registry grow without bound across
-    // executions until it hit `MAX_VM_CONTEXTS` and every later `createContext()`
-    // failed. With the fix, a session's `VmContextRegistryGuard` evicts the slots
-    // at teardown, so the registry returns to empty between executions and the cap
-    // is never reached. This asserts the safeguard FIRING (slots reclaimed), it
-    // does not saturate any resource, so it stays in the default suite.
-    //
-    // Runs in a subprocess to match the V8-initializing test convention in this
-    // module (one isolate per process, no cross-test V8 interference).
-    #[test]
-    fn vm_context_registry_evicts_slots_on_finalize() {
-        const SUBPROCESS_ENV: &str = "AGENTOS_V8_VM_CONTEXT_FINALIZE_SUBPROCESS";
-        if std::env::var_os(SUBPROCESS_ENV).is_none() {
-            let output = Command::new(std::env::current_exe().expect("current test binary"))
-                .arg("bridge::tests::vm_context_registry_evicts_slots_on_finalize")
-                .arg("--exact")
-                .arg("--nocapture")
-                .env(SUBPROCESS_ENV, "1")
-                .output()
-                .expect("spawn vm context finalize subprocess");
-            assert!(
-                output.status.success(),
-                "vm context finalize subprocess failed with status {:?}\nstdout:\n{}\nstderr:\n{}",
-                output.status.code(),
-                String::from_utf8_lossy(&output.stdout),
-                String::from_utf8_lossy(&output.stderr)
-            );
-            return;
-        }
-
-        isolate::init_v8_platform();
-        let mut isolate = isolate::create_isolate(None);
-        let context = isolate::create_context(&mut isolate);
-        let scope = &mut v8::HandleScope::new(&mut isolate);
-        let context = v8::Local::new(scope, &context);
-        let scope = &mut v8::ContextScope::new(scope, context);
-
-        reset_vm_context_registry();
-        assert_eq!(
-            vm_context_registry_len_for_test(),
-            0,
-            "registry starts empty"
-        );
-
-        // Simulate many executions on the same reused isolate. Each execution
-        // reserves several contexts and then finalizes (its session guard drops).
-        // Run far past the hard cap: a leaked slot per createContext would exhaust
-        // MAX_VM_CONTEXTS within the first ~341 executions and the `.expect` on the
-        // next reservation would panic.
-        const CONTEXTS_PER_EXECUTION: usize = 3;
-        let executions = MAX_VM_CONTEXTS * 4;
-        for execution in 0..executions {
-            {
-                let _guard = VmContextRegistryGuard::new();
-                for _ in 0..CONTEXTS_PER_EXECUTION {
-                    reserve_vm_context_slot(scope, context)
-                        .expect("reserve vm context slot below cap; a leak would hit the cap");
-                }
-                assert_eq!(
-                    vm_context_registry_len_for_test(),
-                    CONTEXTS_PER_EXECUTION,
-                    "slots reserved during execution {execution} must be live"
-                );
-            }
-            // Guard dropped above -> finalize. Asserting here, before the next
-            // execution's guard is constructed, proves the Drop sweep (not the
-            // start-of-session sweep) reclaimed the slots.
-            assert_eq!(
-                vm_context_registry_len_for_test(),
-                0,
-                "registry must be empty after execution {execution} finalizes"
-            );
-        }
-
-        // After 4x the cap worth of reservations, a fresh createContext still
-        // succeeds because nothing leaked across executions.
-        let _guard = VmContextRegistryGuard::new();
-        assert!(
-            reserve_vm_context_slot(scope, context).is_ok(),
-            "createContext must keep succeeding; leaked slots would have hit MAX_VM_CONTEXTS"
-        );
-    }
-}
diff --git a/crates/v8-runtime/src/embedded_runtime.rs b/crates/v8-runtime/src/embedded_runtime.rs
deleted file mode 100644
index 7c027ae9f..000000000
--- a/crates/v8-runtime/src/embedded_runtime.rs
+++ /dev/null
@@ -1,1338 +0,0 @@
-use std::collections::HashMap;
-use std::collections::HashSet;
-use std::io::{self, Write};
-use std::net::Shutdown;
-use std::os::unix::net::UnixStream;
-use std::sync::atomic::{AtomicBool, AtomicU64, Ordering};
-use std::sync::{mpsc, Arc, Mutex, OnceLock, Weak};
-use std::thread;
-use std::time::Instant;
-
-use crate::host_call::{
-    record_sync_bridge_host_phase, record_sync_bridge_response_channel_send_start, CallIdRouter,
-};
-use crate::ipc_binary::BinaryFrame;
-use crate::runtime_protocol::{
-    validate_bridge_response_status, BridgeResponse, ModuleReaderHandle, RuntimeCommand,
-    RuntimeEvent, SessionMessage, StreamEvent,
-};
-use crate::session::{RuntimeEventEnvelope, SessionCommand, SessionManager};
-use crate::snapshot::SnapshotCache;
-use crate::{bridge, isolate};
-
-static NEXT_CONNECTION_ID: AtomicU64 = AtomicU64::new(1);
-const SESSION_OUTPUT_CHANNEL_CAPACITY: usize = 1024;
-
-pub struct EmbeddedV8Runtime {
-    session_mgr: Arc<Mutex<SessionManager>>,
-    session_outputs: Arc<Mutex<HashMap<String, SessionOutput>>>,
-    snapshot_cache: Arc<SnapshotCache>,
-    alive: Arc<AtomicBool>,
-    dispatch_shutdown_tx: crossbeam_channel::Sender<()>,
-    dispatch_thread: Mutex<Option<thread::JoinHandle<()>>>,
-    next_output_generation: AtomicU64,
-}
-
-#[derive(Clone)]
-struct SessionOutput {
-    generation: u64,
-    sender: mpsc::SyncSender<RuntimeEvent>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct EmbeddedV8SessionOutputRegistration {
-    session_id: String,
-    generation: u64,
-}
-
-impl EmbeddedV8Runtime {
-    pub fn new(max_concurrency: Option<usize>) -> io::Result<Self> {
-        bridge::init_codec();
-        bridge::acquire_embedded_cbor_codec();
-        isolate::init_v8_platform();
-
-        // Keep bridge-only, agent-SDK, and wasm-runner userland variants warm
-        // without immediately evicting each other.
-        let snapshot_cache = Arc::new(SnapshotCache::new(8));
-        let (event_tx, event_rx) = crossbeam_channel::bounded::<RuntimeEventEnvelope>(1024);
-        let (dispatch_shutdown_tx, dispatch_shutdown_rx) = crossbeam_channel::bounded::<()>(1);
-        let call_id_router: CallIdRouter = Arc::new(Mutex::new(HashMap::new()));
-        let session_mgr = Arc::new(Mutex::new(SessionManager::new(
-            max_concurrency.unwrap_or_else(default_max_concurrency),
-            event_tx,
-            call_id_router,
-            Arc::clone(&snapshot_cache),
-        )));
-        let session_outputs = Arc::new(Mutex::new(HashMap::new()));
-        let alive = Arc::new(AtomicBool::new(true));
-        let alive_for_thread = Arc::clone(&alive);
-        let session_outputs_for_thread = Arc::clone(&session_outputs);
-        let session_mgr_for_thread = Arc::clone(&session_mgr);
-
-        let dispatch_thread = thread::Builder::new()
-            .name(String::from("secure-exec-v8-runtime-dispatch"))
-            .spawn(move || {
-                loop {
-                    crossbeam_channel::select! {
-                        recv(event_rx) -> event => {
-                            let Ok(event) = event else {
-                                break;
-                            };
-                            route_outbound_event(
-                                event,
-                                &session_outputs_for_thread,
-                                &session_mgr_for_thread,
-                            );
-                        }
-                        recv(dispatch_shutdown_rx) -> _ => {
-                            break;
-                        }
-                    }
-                }
-                alive_for_thread.store(false, Ordering::Release);
-            })
-            .inspect_err(|_| bridge::release_embedded_cbor_codec())?;
-
-        Ok(Self {
-            session_mgr,
-            session_outputs,
-            snapshot_cache,
-            alive,
-            dispatch_shutdown_tx,
-            dispatch_thread: Mutex::new(Some(dispatch_thread)),
-            next_output_generation: AtomicU64::new(1),
-        })
-    }
-
-    pub fn is_alive(&self) -> bool {
-        self.alive.load(Ordering::Acquire)
-    }
-
-    pub fn snapshot_ready(&self, bridge_code: &str, userland_code: &str) -> bool {
-        if userland_code.is_empty() {
-            return true;
-        }
-        self.snapshot_cache
-            .try_get_with_userland(bridge_code, Some(userland_code))
-            .is_some()
-    }
-
-    pub fn pre_warm_workers(
-        &self,
-        bridge_code: String,
-        userland_code: String,
-        heap_limit_mb: Option<u32>,
-        count: usize,
-    ) {
-        self.session_mgr
-            .lock()
-            .expect("embedded runtime session manager lock poisoned")
-            .pre_warm_workers(bridge_code, userland_code, heap_limit_mb, count);
-    }
-
-    pub fn register_session(&self, session_id: &str) -> io::Result<mpsc::Receiver<RuntimeEvent>> {
-        self.register_session_with_output_registration(session_id)
-            .map(|(receiver, _registration)| receiver)
-    }
-
-    pub fn register_session_with_output_registration(
-        &self,
-        session_id: &str,
-    ) -> io::Result<(
-        mpsc::Receiver<RuntimeEvent>,
-        EmbeddedV8SessionOutputRegistration,
-    )> {
-        self.register_session_with_capacity(session_id, SESSION_OUTPUT_CHANNEL_CAPACITY)
-    }
-
-    fn register_session_with_capacity(
-        &self,
-        session_id: &str,
-        capacity: usize,
-    ) -> io::Result<(
-        mpsc::Receiver<RuntimeEvent>,
-        EmbeddedV8SessionOutputRegistration,
-    )> {
-        let (sender, receiver) = mpsc::sync_channel(capacity);
-        let mut outputs = self
-            .session_outputs
-            .lock()
-            .expect("embedded runtime session outputs lock poisoned");
-        if outputs.contains_key(session_id) {
-            return Err(io::Error::new(
-                io::ErrorKind::AlreadyExists,
-                format!("session output {session_id} already exists"),
-            ));
-        }
-        let generation = self.next_output_generation.fetch_add(1, Ordering::Relaxed);
-        outputs.insert(session_id.to_owned(), SessionOutput { generation, sender });
-        Ok((
-            receiver,
-            EmbeddedV8SessionOutputRegistration {
-                session_id: session_id.to_owned(),
-                generation,
-            },
-        ))
-    }
-
-    pub fn unregister_session(&self, session_id: &str) {
-        self.session_outputs
-            .lock()
-            .expect("embedded runtime session outputs lock poisoned")
-            .remove(session_id);
-    }
-
-    pub fn destroy_session_if_output_current(
-        &self,
-        registration: &EmbeddedV8SessionOutputRegistration,
-    ) -> io::Result<bool> {
-        if !remove_session_output_if_current(
-            &self.session_outputs,
-            &registration.session_id,
-            registration.generation,
-        ) {
-            return Ok(false);
-        }
-
-        let shutdown = {
-            let mut mgr = self
-                .session_mgr
-                .lock()
-                .expect("session manager lock poisoned");
-            mgr.begin_destroy_session_if_output_generation(
-                &registration.session_id,
-                registration.generation,
-            )
-            .map_err(other_io_error)?
-        };
-        match shutdown {
-            Some(shutdown) => {
-                shutdown.finish();
-                Ok(true)
-            }
-            None => Ok(false),
-        }
-    }
-
-    pub fn session_handle(self: &Arc<Self>, session_id: String) -> EmbeddedV8SessionHandle {
-        EmbeddedV8SessionHandle {
-            session_id,
-            runtime: Arc::clone(self),
-        }
-    }
-
-    pub fn dispatch(&self, command: RuntimeCommand) -> io::Result<()> {
-        match command {
-            RuntimeCommand::CreateSession {
-                session_id,
-                heap_limit_mb,
-                cpu_time_limit_ms,
-                wall_clock_limit_ms,
-                warm_hint,
-            } => {
-                let output_generation = self
-                    .session_outputs
-                    .lock()
-                    .expect("embedded runtime session outputs lock poisoned")
-                    .get(&session_id)
-                    .map(|output| output.generation);
-                let mut mgr = self
-                    .session_mgr
-                    .lock()
-                    .expect("session manager lock poisoned");
-                mgr.create_session_with_output_generation(
-                    session_id,
-                    heap_limit_mb,
-                    cpu_time_limit_ms,
-                    wall_clock_limit_ms,
-                    output_generation,
-                    warm_hint,
-                )
-                .map_err(other_io_error)
-            }
-            command => dispatch_runtime_command(&self.session_mgr, &self.snapshot_cache, command),
-        }
-    }
-
-    pub fn session_count(&self) -> usize {
-        self.session_mgr
-            .lock()
-            .expect("embedded runtime session manager lock poisoned")
-            .session_count()
-    }
-
-    pub fn active_slot_count(&self) -> usize {
-        self.session_mgr
-            .lock()
-            .expect("embedded runtime session manager lock poisoned")
-            .active_slot_count()
-    }
-}
-
-impl Drop for EmbeddedV8Runtime {
-    fn drop(&mut self) {
-        let session_handles = self
-            .session_mgr
-            .lock()
-            .map(|mut mgr| mgr.take_session_shutdown_handles())
-            .unwrap_or_default();
-        for handle in session_handles {
-            let _ = handle.join();
-        }
-        if let Ok(mut outputs) = self.session_outputs.lock() {
-            outputs.clear();
-        }
-        let _ = self.dispatch_shutdown_tx.try_send(());
-        if let Some(handle) = self.dispatch_thread.get_mut().ok().and_then(Option::take) {
-            let _ = handle.join();
-        }
-        bridge::release_embedded_cbor_codec();
-    }
-}
-
-pub struct EmbeddedV8SessionHandle {
-    session_id: String,
-    runtime: Arc<EmbeddedV8Runtime>,
-}
-
-impl EmbeddedV8SessionHandle {
-    // In-process runtime protocol call; the arg list mirrors the Execute frame.
-    #[allow(clippy::too_many_arguments)]
-    pub fn execute(
-        &self,
-        mode: u8,
-        file_path: String,
-        bridge_code: String,
-        post_restore_script: String,
-        userland_code: String,
-        high_resolution_time: bool,
-        user_code: String,
-        wasm_module_bytes: Option<Arc<Vec<u8>>>,
-    ) -> io::Result<()> {
-        validate_execute_mode(mode)?;
-        self.runtime.dispatch(RuntimeCommand::SendToSession {
-            session_id: self.session_id.clone(),
-            message: SessionMessage::Execute {
-                mode,
-                file_path,
-                bridge_code,
-                post_restore_script,
-                userland_code,
-                high_resolution_time,
-                user_code,
-                wasm_module_bytes,
-            },
-        })
-    }
-
-    pub fn send_bridge_response(
-        &self,
-        call_id: u64,
-        status: u8,
-        payload: Vec<u8>,
-    ) -> io::Result<()> {
-        validate_bridge_response_status(status)?;
-        self.runtime.dispatch(RuntimeCommand::SendToSession {
-            session_id: self.session_id.clone(),
-            message: SessionMessage::BridgeResponse(BridgeResponse {
-                call_id,
-                status,
-                payload,
-            }),
-        })
-    }
-
-    pub fn send_stream_event(&self, event_type: &str, payload: Vec<u8>) -> io::Result<()> {
-        self.runtime.dispatch(RuntimeCommand::SendToSession {
-            session_id: self.session_id.clone(),
-            message: SessionMessage::StreamEvent(StreamEvent {
-                event_type: event_type.to_owned(),
-                payload,
-            }),
-        })
-    }
-
-    /// Install a direct module-source reader on this session's thread so module
-    /// loads read source directly instead of round-tripping the bridge. Routed
-    /// through the dispatch thread (which owns the session manager).
-    pub fn set_module_reader(
-        &self,
-        reader: Box<dyn crate::execution::GuestModuleReader>,
-    ) -> io::Result<()> {
-        self.runtime
-            .dispatch(RuntimeCommand::SetSessionModuleReader {
-                session_id: self.session_id.clone(),
-                reader: ModuleReaderHandle::new(reader),
-            })
-    }
-
-    pub fn terminate(&self) -> io::Result<()> {
-        self.runtime.dispatch(RuntimeCommand::SendToSession {
-            session_id: self.session_id.clone(),
-            message: SessionMessage::TerminateExecution,
-        })
-    }
-
-    pub fn destroy(&self) -> io::Result<()> {
-        self.runtime.unregister_session(&self.session_id);
-        self.runtime.dispatch(RuntimeCommand::DestroySession {
-            session_id: self.session_id.clone(),
-        })
-    }
-
-    pub fn session_id(&self) -> &str {
-        &self.session_id
-    }
-}
-
-fn validate_execute_mode(mode: u8) -> io::Result<()> {
-    if mode > 1 {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            format!("unknown Execute mode: {mode}"),
-        ));
-    }
-    Ok(())
-}
-
-impl Clone for EmbeddedV8SessionHandle {
-    fn clone(&self) -> Self {
-        Self {
-            session_id: self.session_id.clone(),
-            runtime: Arc::clone(&self.runtime),
-        }
-    }
-}
-
-pub fn shared_embedded_runtime() -> io::Result<Arc<EmbeddedV8Runtime>> {
-    static SHARED_RUNTIME: OnceLock<Mutex<Weak<EmbeddedV8Runtime>>> = OnceLock::new();
-
-    let shared_slot = SHARED_RUNTIME.get_or_init(|| Mutex::new(Weak::new()));
-    let mut shared_guard = shared_slot
-        .lock()
-        .expect("shared embedded runtime init lock poisoned");
-    if let Some(shared) = shared_guard.upgrade() {
-        return Ok(shared);
-    }
-
-    let shared = Arc::new(EmbeddedV8Runtime::new(None)?);
-    *shared_guard = Arc::downgrade(&shared);
-    Ok(shared)
-}
-
-pub struct EmbeddedRuntimeHandle {
-    alive: Arc<AtomicBool>,
-    codec_released: AtomicBool,
-    shutdown_stream: UnixStream,
-    join_handle: Mutex<Option<thread::JoinHandle<()>>>,
-}
-
-impl EmbeddedRuntimeHandle {
-    pub fn is_alive(&self) -> bool {
-        self.alive.load(Ordering::Acquire)
-    }
-
-    pub fn shutdown(&self) {
-        let _ = self.shutdown_stream.shutdown(Shutdown::Both);
-        if let Ok(mut guard) = self.join_handle.lock() {
-            if let Some(handle) = guard.take() {
-                let _ = handle.join();
-            }
-        }
-        self.release_codec();
-    }
-
-    fn release_codec(&self) {
-        if !self.codec_released.swap(true, Ordering::AcqRel) {
-            bridge::release_embedded_cbor_codec();
-        }
-    }
-}
-
-impl Drop for EmbeddedRuntimeHandle {
-    fn drop(&mut self) {
-        let _ = self.shutdown_stream.shutdown(Shutdown::Both);
-        if let Some(handle) = self.join_handle.get_mut().ok().and_then(Option::take) {
-            let _ = handle.join();
-        }
-        self.release_codec();
-    }
-}
-
-pub fn spawn_embedded_runtime_ipc(
-    max_concurrency: Option<usize>,
-) -> io::Result<(UnixStream, EmbeddedRuntimeHandle)> {
-    bridge::init_codec();
-    bridge::acquire_embedded_cbor_codec();
-    isolate::init_v8_platform();
-
-    let (host_stream, runtime_stream) = UnixStream::pair()?;
-    let shutdown_stream = host_stream.try_clone()?;
-    let alive = Arc::new(AtomicBool::new(true));
-    let alive_for_thread = Arc::clone(&alive);
-    let max_concurrency = max_concurrency.unwrap_or_else(default_max_concurrency);
-
-    let join_handle = thread::Builder::new()
-        .name(String::from("secure-exec-v8-runtime"))
-        .spawn(move || {
-            run_embedded_runtime(runtime_stream, max_concurrency);
-            alive_for_thread.store(false, Ordering::Release);
-        })
-        .inspect_err(|_| bridge::release_embedded_cbor_codec())?;
-
-    Ok((
-        host_stream,
-        EmbeddedRuntimeHandle {
-            alive,
-            codec_released: AtomicBool::new(false),
-            shutdown_stream,
-            join_handle: Mutex::new(Some(join_handle)),
-        },
-    ))
-}
-
-fn default_max_concurrency() -> usize {
-    thread::available_parallelism()
-        .map(|count| count.get())
-        .unwrap_or(4)
-}
-
-fn run_embedded_runtime(stream: UnixStream, max_concurrency: usize) {
-    // Keep bridge-only, agent-SDK, and wasm-runner userland variants warm
-    // without immediately evicting each other.
-    let snapshot_cache = Arc::new(SnapshotCache::new(8));
-    let writer_stream = match stream.try_clone() {
-        Ok(writer_stream) => writer_stream,
-        Err(error) => {
-            eprintln!("embedded V8 runtime failed to clone stream: {error}");
-            return;
-        }
-    };
-    let (event_tx, event_rx) = crossbeam_channel::bounded::<RuntimeEventEnvelope>(1024);
-    let call_id_router: CallIdRouter = Arc::new(Mutex::new(HashMap::new()));
-    let connection_id = NEXT_CONNECTION_ID.fetch_add(1, Ordering::Relaxed);
-
-    let writer_handle = match thread::Builder::new()
-        .name(format!("v8-ipc-writer-{connection_id}"))
-        .spawn(move || ipc_writer_thread(event_rx, writer_stream))
-    {
-        Ok(handle) => handle,
-        Err(error) => {
-            eprintln!("embedded V8 runtime failed to spawn writer thread: {error}");
-            return;
-        }
-    };
-
-    let session_mgr = Arc::new(Mutex::new(SessionManager::new(
-        max_concurrency,
-        event_tx,
-        call_id_router,
-        Arc::clone(&snapshot_cache),
-    )));
-
-    handle_connection(stream, connection_id, session_mgr, snapshot_cache);
-    let _ = writer_handle.join();
-}
-
-fn ipc_writer_thread(
-    rx: crossbeam_channel::Receiver<RuntimeEventEnvelope>,
-    mut writer: UnixStream,
-) {
-    while let Ok(envelope) = rx.recv() {
-        let frame: BinaryFrame = envelope.event.into();
-        let bytes = match crate::ipc_binary::frame_to_bytes(&frame) {
-            Ok(bytes) => bytes,
-            Err(error) => {
-                eprintln!("embedded V8 runtime writer encode error: {error}");
-                break;
-            }
-        };
-        if let Err(error) = writer.write_all(&bytes) {
-            eprintln!("embedded V8 runtime writer error: {error}");
-            break;
-        }
-    }
-}
-
-fn handle_connection(
-    mut stream: UnixStream,
-    connection_id: u64,
-    session_mgr: Arc<Mutex<SessionManager>>,
-    snapshot_cache: Arc<SnapshotCache>,
-) {
-    let mut session_ids = HashSet::new();
-
-    loop {
-        let frame = match crate::ipc_binary::read_frame(&mut stream) {
-            Ok(frame) => frame,
-            Err(ref error) if error.kind() == io::ErrorKind::UnexpectedEof => break,
-            Err(error) => {
-                eprintln!("embedded V8 runtime read error on connection {connection_id}: {error}");
-                break;
-            }
-        };
-
-        let command = match RuntimeCommand::try_from(frame) {
-            Ok(command) => command,
-            Err(error) => {
-                eprintln!(
-                    "embedded V8 runtime dispatch error on connection {connection_id}: {error}"
-                );
-                continue;
-            }
-        };
-
-        if let RuntimeCommand::CreateSession { session_id, .. } = &command {
-            session_ids.insert(session_id.clone());
-        } else if let RuntimeCommand::DestroySession { session_id } = &command {
-            session_ids.remove(session_id);
-        }
-
-        if let Err(error) = dispatch_runtime_command(&session_mgr, &snapshot_cache, command) {
-            eprintln!("embedded V8 runtime dispatch error on connection {connection_id}: {error}");
-        }
-    }
-
-    let shutdowns = {
-        let mut mgr = session_mgr.lock().expect("session manager lock poisoned");
-        mgr.begin_destroy_sessions(session_ids)
-    };
-    for shutdown in shutdowns {
-        shutdown.finish();
-    }
-}
-
-fn dispatch_runtime_command(
-    session_mgr: &Arc<Mutex<SessionManager>>,
-    snapshot_cache: &Arc<SnapshotCache>,
-    command: RuntimeCommand,
-) -> io::Result<()> {
-    match command {
-        RuntimeCommand::CreateSession {
-            session_id,
-            heap_limit_mb,
-            cpu_time_limit_ms,
-            wall_clock_limit_ms,
-            warm_hint,
-        } => {
-            let mut mgr = session_mgr.lock().expect("session manager lock poisoned");
-            mgr.create_session_with_output_generation(
-                session_id,
-                heap_limit_mb,
-                cpu_time_limit_ms,
-                wall_clock_limit_ms,
-                None,
-                warm_hint,
-            )
-            .map_err(other_io_error)
-        }
-        RuntimeCommand::DestroySession { session_id } => {
-            let shutdown = {
-                let mut mgr = session_mgr.lock().expect("session manager lock poisoned");
-                mgr.begin_destroy_session(&session_id)
-                    .map_err(other_io_error)?
-            };
-            shutdown.finish();
-            Ok(())
-        }
-        RuntimeCommand::SendToSession {
-            session_id,
-            message,
-        } => {
-            // Resolve the sender and apply terminate side effects under the
-            // lock, then send after releasing it so a full session command
-            // channel cannot block the manager mutex.
-            let is_bridge_response = matches!(&message, SessionMessage::BridgeResponse(_));
-            let sender = {
-                let mgr = session_mgr.lock().expect("session manager lock poisoned");
-                let routed_session_id = match &message {
-                    SessionMessage::BridgeResponse(response) => {
-                        let phase_start = Instant::now();
-                        let routed_session_id = mgr
-                            .call_id_router()
-                            .lock()
-                            .expect("call_id router lock poisoned")
-                            .remove(&response.call_id)
-                            .unwrap_or(session_id);
-                        record_sync_bridge_host_phase(
-                            "sync_rpc_dispatch",
-                            "dispatch_route_lookup",
-                            phase_start.elapsed(),
-                        );
-                        routed_session_id
-                    }
-                    SessionMessage::InjectGlobals { .. }
-                    | SessionMessage::Execute { .. }
-                    | SessionMessage::StreamEvent(_)
-                    | SessionMessage::TerminateExecution => session_id,
-                };
-                let phase_start = Instant::now();
-                let sender = mgr
-                    .session_command_sender(&routed_session_id, &message)
-                    .map_err(other_io_error)?;
-                if is_bridge_response {
-                    record_sync_bridge_host_phase(
-                        "sync_rpc_dispatch",
-                        "dispatch_sender_lookup",
-                        phase_start.elapsed(),
-                    );
-                }
-                sender
-            };
-            if let SessionMessage::BridgeResponse(response) = &message {
-                record_sync_bridge_response_channel_send_start(response.call_id);
-            }
-            let phase_start = Instant::now();
-            let result = sender
-                .send(SessionCommand::Message(message))
-                .map_err(|e| other_io_error(format!("session thread disconnected: {}", e)));
-            if is_bridge_response {
-                record_sync_bridge_host_phase(
-                    "sync_rpc_dispatch",
-                    "dispatch_channel_send",
-                    phase_start.elapsed(),
-                );
-            }
-            result
-        }
-        RuntimeCommand::SetSessionModuleReader { session_id, reader } => {
-            // Resolve the sender under the lock, release, then forward the live
-            // reader as a SetModuleReader command to the session thread.
-            let sender = {
-                let mgr = session_mgr.lock().expect("session manager lock poisoned");
-                mgr.session_sender(&session_id)
-            };
-            let sender = sender.map_err(other_io_error)?;
-            match reader.take() {
-                Some(reader) => sender
-                    .send(SessionCommand::SetModuleReader(reader))
-                    .map_err(|e| other_io_error(format!("session thread disconnected: {}", e))),
-                None => Ok(()),
-            }
-        }
-        RuntimeCommand::WarmSnapshot {
-            bridge_code,
-            userland_code,
-        } => snapshot_cache
-            .get_or_create_with_userland(
-                &bridge_code,
-                (!userland_code.is_empty()).then_some(userland_code.as_str()),
-            )
-            .map(|_| ())
-            .map_err(other_io_error),
-    }
-}
-
-fn route_outbound_event(
-    envelope: RuntimeEventEnvelope,
-    session_outputs: &Arc<Mutex<HashMap<String, SessionOutput>>>,
-    session_mgr: &Arc<Mutex<SessionManager>>,
-) -> bool {
-    let RuntimeEventEnvelope {
-        output_generation,
-        event,
-    } = envelope;
-    let session_id = event.session_id().to_owned();
-
-    let output = session_outputs
-        .lock()
-        .expect("embedded runtime session outputs lock poisoned")
-        .get(&session_id)
-        .cloned();
-
-    let Some(output) = output else {
-        clear_dropped_bridge_call_route(&event, session_mgr);
-        return false;
-    };
-
-    if output_generation != Some(output.generation) {
-        clear_dropped_bridge_call_route(&event, session_mgr);
-        return false;
-    }
-
-    match output.sender.try_send(event) {
-        Ok(()) => {}
-        Err(mpsc::TrySendError::Full(_)) | Err(mpsc::TrySendError::Disconnected(_)) => {
-            if remove_session_output_if_current(session_outputs, &session_id, output.generation) {
-                return session_mgr
-                    .lock()
-                    .expect("session manager lock poisoned")
-                    .detach_session_if_output_generation(&session_id, output.generation)
-                    .unwrap_or(false);
-            }
-        }
-    }
-    false
-}
-
-fn clear_dropped_bridge_call_route(event: &RuntimeEvent, session_mgr: &Arc<Mutex<SessionManager>>) {
-    if let RuntimeEvent::BridgeCall { call_id, .. } = event {
-        session_mgr
-            .lock()
-            .expect("session manager lock poisoned")
-            .clear_call_route(*call_id);
-    }
-}
-
-fn remove_session_output_if_current(
-    session_outputs: &Arc<Mutex<HashMap<String, SessionOutput>>>,
-    session_id: &str,
-    generation: u64,
-) -> bool {
-    let mut outputs = session_outputs
-        .lock()
-        .expect("embedded runtime session outputs lock poisoned");
-    if outputs
-        .get(session_id)
-        .is_some_and(|output| output.generation == generation)
-    {
-        outputs.remove(session_id);
-        return true;
-    }
-    false
-}
-
-fn other_io_error(message: String) -> io::Error {
-    io::Error::other(message)
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use crate::runtime_protocol::{BridgeResponse, RuntimeCommand, RuntimeEvent, SessionMessage};
-    use std::time::Duration;
-
-    static EMBEDDED_RUNTIME_CODEC_TEST_LOCK: Mutex<()> = Mutex::new(());
-
-    #[test]
-    fn embedded_runtime_handle_reports_liveness_and_shutdown() {
-        let _codec_guard = EMBEDDED_RUNTIME_CODEC_TEST_LOCK
-            .lock()
-            .expect("embedded runtime codec test lock poisoned");
-        let (_stream, handle) =
-            spawn_embedded_runtime_ipc(Some(1)).expect("spawn embedded runtime");
-        assert!(
-            handle.is_alive(),
-            "embedded runtime should be alive after spawn"
-        );
-        handle.shutdown();
-        assert!(
-            !handle.is_alive(),
-            "embedded runtime should report not alive after shutdown"
-        );
-    }
-
-    #[test]
-    fn embedded_runtime_session_shared_runtime_is_lazy() {
-        let _codec_guard = EMBEDDED_RUNTIME_CODEC_TEST_LOCK
-            .lock()
-            .expect("embedded runtime codec test lock poisoned");
-        let first = shared_embedded_runtime().expect("shared embedded runtime");
-        let second = shared_embedded_runtime().expect("shared embedded runtime");
-        assert!(
-            Arc::ptr_eq(&first, &second),
-            "shared_embedded_runtime() should reuse the same runtime instance"
-        );
-    }
-
-    #[test]
-    fn embedded_runtime_drop_releases_codec_after_destroying_sessions() {
-        let _codec_guard = EMBEDDED_RUNTIME_CODEC_TEST_LOCK
-            .lock()
-            .expect("embedded runtime codec test lock poisoned");
-        let codec_before = bridge::is_cbor_codec();
-        let alive = {
-            let runtime = EmbeddedV8Runtime::new(Some(1)).expect("embedded runtime");
-            let alive = Arc::clone(&runtime.alive);
-            assert!(
-                bridge::is_cbor_codec(),
-                "embedded runtime should enable the CBOR bridge codec while alive"
-            );
-            let (_receiver, _registration) = runtime
-                .register_session_with_output_registration("drop-lifecycle")
-                .expect("register session output");
-            runtime
-                .dispatch(RuntimeCommand::CreateSession {
-                    session_id: "drop-lifecycle".into(),
-                    heap_limit_mb: None,
-                    cpu_time_limit_ms: None,
-                    wall_clock_limit_ms: None,
-                    warm_hint: None,
-                })
-                .expect("create session");
-            assert_eq!(
-                runtime.session_count(),
-                1,
-                "test should drop a runtime with a live session"
-            );
-            alive
-        };
-
-        assert!(
-            !alive.load(Ordering::Acquire),
-            "dropping embedded runtime should stop the dispatch thread"
-        );
-        assert_eq!(
-            bridge::is_cbor_codec(),
-            codec_before,
-            "dropping embedded runtime should restore the prior codec state"
-        );
-    }
-
-    #[test]
-    fn embedded_runtime_stream_bridge_response_routing_prefers_call_id_router() {
-        let snapshot_cache = Arc::new(SnapshotCache::new(1));
-        let (event_tx, _event_rx) = crossbeam_channel::unbounded::<RuntimeEventEnvelope>();
-        let call_id_router: CallIdRouter = Arc::new(Mutex::new(HashMap::new()));
-        let session_mgr = Arc::new(Mutex::new(SessionManager::new(
-            1,
-            event_tx,
-            Arc::clone(&call_id_router),
-            Arc::clone(&snapshot_cache),
-        )));
-
-        {
-            let mut mgr = session_mgr.lock().expect("session manager");
-            mgr.create_session("stream-target".into(), None, None, None)
-                .expect("create target session");
-        }
-        call_id_router
-            .lock()
-            .expect("call_id router")
-            .insert(41, "stream-target".into());
-
-        dispatch_runtime_command(
-            &session_mgr,
-            &snapshot_cache,
-            RuntimeCommand::SendToSession {
-                session_id: "wrong-session".into(),
-                message: SessionMessage::BridgeResponse(BridgeResponse {
-                    call_id: 41,
-                    status: 0,
-                    payload: vec![0xAB],
-                }),
-            },
-        )
-        .expect("bridge response should route via call_id table");
-
-        assert!(
-            call_id_router
-                .lock()
-                .expect("call_id router")
-                .get(&41)
-                .is_none(),
-            "bridge response routing should consume the call_id entry"
-        );
-
-        session_mgr
-            .lock()
-            .expect("session manager")
-            .destroy_session("stream-target")
-            .expect("destroy target session");
-    }
-
-    #[test]
-    fn embedded_runtime_session_handle_rejects_unknown_bridge_response_status() {
-        let _codec_guard = EMBEDDED_RUNTIME_CODEC_TEST_LOCK
-            .lock()
-            .expect("embedded runtime codec test lock poisoned");
-        let runtime = Arc::new(EmbeddedV8Runtime::new(Some(1)).expect("embedded runtime"));
-        let handle = runtime.session_handle("missing-session".into());
-
-        let err = handle
-            .send_bridge_response(1, 3, Vec::new())
-            .expect_err("unknown bridge response status should be rejected");
-
-        assert_eq!(err.kind(), io::ErrorKind::InvalidInput);
-        assert!(err.to_string().contains("unknown BridgeResponse status"));
-    }
-
-    #[test]
-    fn embedded_runtime_stream_events_preserve_order_per_session() {
-        let (sender, receiver) = mpsc::sync_channel(SESSION_OUTPUT_CHANNEL_CAPACITY);
-        let session_outputs = Arc::new(Mutex::new(HashMap::from([(
-            String::from("stream-order"),
-            SessionOutput {
-                generation: 1,
-                sender,
-            },
-        )])));
-        let session_mgr = test_session_manager();
-
-        route_outbound_event(
-            runtime_envelope(
-                1,
-                RuntimeEvent::Log {
-                    session_id: "stream-order".into(),
-                    channel: 0,
-                    message: "first".into(),
-                },
-            ),
-            &session_outputs,
-            &session_mgr,
-        );
-        route_outbound_event(
-            runtime_envelope(
-                1,
-                RuntimeEvent::StreamCallback {
-                    session_id: "stream-order".into(),
-                    callback_type: "stdin".into(),
-                    payload: vec![1, 2, 3],
-                },
-            ),
-            &session_outputs,
-            &session_mgr,
-        );
-
-        let first = receiver
-            .recv_timeout(Duration::from_millis(100))
-            .expect("first event");
-        let second = receiver
-            .recv_timeout(Duration::from_millis(100))
-            .expect("second event");
-
-        assert!(matches!(
-            first,
-            RuntimeEvent::Log { ref message, .. } if message == "first"
-        ));
-        assert!(matches!(
-            second,
-            RuntimeEvent::StreamCallback { ref callback_type, ref payload, .. }
-                if callback_type == "stdin" && payload == &vec![1, 2, 3]
-        ));
-    }
-
-    #[test]
-    fn embedded_runtime_stream_termination_race_drops_late_events_after_receiver_close() {
-        let (sender, receiver) = mpsc::sync_channel(SESSION_OUTPUT_CHANNEL_CAPACITY);
-        let session_outputs = Arc::new(Mutex::new(HashMap::from([(
-            String::from("stream-race"),
-            SessionOutput {
-                generation: 1,
-                sender,
-            },
-        )])));
-        let session_mgr = test_session_manager();
-        drop(receiver);
-
-        route_outbound_event(
-            runtime_envelope(
-                1,
-                RuntimeEvent::ExecutionResult {
-                    session_id: "stream-race".into(),
-                    exit_code: 0,
-                    exports: None,
-                    error: None,
-                },
-            ),
-            &session_outputs,
-            &session_mgr,
-        );
-
-        assert!(
-            session_outputs
-                .lock()
-                .expect("session outputs")
-                .get("stream-race")
-                .is_none(),
-            "late events should drop stale receiver registrations during teardown races"
-        );
-    }
-
-    #[test]
-    fn embedded_runtime_stream_backpressure_drops_full_session_output() {
-        let (sender, receiver) = mpsc::sync_channel(1);
-        let session_outputs = Arc::new(Mutex::new(HashMap::from([(
-            String::from("stream-full"),
-            SessionOutput {
-                generation: 1,
-                sender,
-            },
-        )])));
-        let session_mgr = test_session_manager_with_session("stream-full");
-
-        route_outbound_event(
-            runtime_envelope(
-                1,
-                RuntimeEvent::Log {
-                    session_id: "stream-full".into(),
-                    channel: 0,
-                    message: "first".into(),
-                },
-            ),
-            &session_outputs,
-            &session_mgr,
-        );
-        let cleaned_up = route_outbound_event(
-            runtime_envelope(
-                1,
-                RuntimeEvent::Log {
-                    session_id: "stream-full".into(),
-                    channel: 0,
-                    message: "second".into(),
-                },
-            ),
-            &session_outputs,
-            &session_mgr,
-        );
-        assert!(cleaned_up, "full session output should detach the session");
-
-        let first = receiver
-            .recv_timeout(Duration::from_millis(100))
-            .expect("first event");
-        assert!(matches!(
-            first,
-            RuntimeEvent::Log { ref message, .. } if message == "first"
-        ));
-        assert!(
-            receiver.recv_timeout(Duration::from_millis(20)).is_err(),
-            "full session output should drop the overflowing event"
-        );
-        assert!(
-            session_outputs
-                .lock()
-                .expect("session outputs")
-                .get("stream-full")
-                .is_none(),
-            "full session output should remove the stale registration"
-        );
-        assert_eq!(
-            session_mgr.lock().expect("session manager").session_count(),
-            0,
-            "full session output should destroy the runtime session"
-        );
-    }
-
-    #[test]
-    fn embedded_runtime_drops_stale_generation_events_for_reused_session_id() {
-        let (sender, receiver) = mpsc::sync_channel(SESSION_OUTPUT_CHANNEL_CAPACITY);
-        let session_outputs = Arc::new(Mutex::new(HashMap::from([(
-            String::from("stream-reused"),
-            SessionOutput {
-                generation: 2,
-                sender,
-            },
-        )])));
-        let session_mgr = test_session_manager_with_generation("stream-reused", 2);
-        session_mgr
-            .lock()
-            .expect("session manager")
-            .call_id_router()
-            .lock()
-            .expect("call_id router")
-            .insert(99, "stream-reused".into());
-
-        let routed = route_outbound_event(
-            runtime_envelope(
-                1,
-                RuntimeEvent::BridgeCall {
-                    session_id: "stream-reused".into(),
-                    call_id: 99,
-                    method: "_stale".into(),
-                    payload: Vec::new(),
-                },
-            ),
-            &session_outputs,
-            &session_mgr,
-        );
-
-        assert!(!routed, "stale generation event should not trigger cleanup");
-        assert!(
-            receiver.recv_timeout(Duration::from_millis(20)).is_err(),
-            "stale generation event should not reach reused session output"
-        );
-        assert_eq!(
-            session_mgr.lock().expect("session manager").session_count(),
-            1,
-            "stale generation event must leave reused session alive"
-        );
-        assert!(
-            session_mgr
-                .lock()
-                .expect("session manager")
-                .call_id_router()
-                .lock()
-                .expect("call_id router")
-                .get(&99)
-                .is_none(),
-            "stale bridge calls should clear their call route"
-        );
-    }
-
-    #[test]
-    fn embedded_runtime_clears_bridge_route_when_output_is_missing() {
-        let session_outputs = Arc::new(Mutex::new(HashMap::new()));
-        let session_mgr = test_session_manager();
-        session_mgr
-            .lock()
-            .expect("session manager")
-            .call_id_router()
-            .lock()
-            .expect("call_id router")
-            .insert(123, "stream-detached".into());
-
-        let routed = route_outbound_event(
-            runtime_envelope(
-                1,
-                RuntimeEvent::BridgeCall {
-                    session_id: "stream-detached".into(),
-                    call_id: 123,
-                    method: "_detached".into(),
-                    payload: Vec::new(),
-                },
-            ),
-            &session_outputs,
-            &session_mgr,
-        );
-
-        assert!(!routed, "missing output should not route the bridge call");
-        assert!(
-            session_mgr
-                .lock()
-                .expect("session manager")
-                .call_id_router()
-                .lock()
-                .expect("call_id router")
-                .get(&123)
-                .is_none(),
-            "bridge calls dropped with no output should clear their call route"
-        );
-    }
-
-    #[test]
-    fn embedded_runtime_stale_output_registration_cannot_destroy_reused_session_id() {
-        let _codec_guard = EMBEDDED_RUNTIME_CODEC_TEST_LOCK
-            .lock()
-            .expect("embedded runtime codec test lock poisoned");
-        let runtime = Arc::new(EmbeddedV8Runtime::new(Some(1)).expect("embedded runtime"));
-        let session_id = "stream-generation-reuse";
-        let (_first_receiver, first_registration) = runtime
-            .register_session_with_capacity(session_id, 1)
-            .expect("register first session output");
-        runtime
-            .dispatch(RuntimeCommand::CreateSession {
-                session_id: session_id.into(),
-                heap_limit_mb: None,
-                cpu_time_limit_ms: None,
-                wall_clock_limit_ms: None,
-                warm_hint: None,
-            })
-            .expect("create first session");
-        runtime
-            .session_handle(session_id.into())
-            .destroy()
-            .expect("destroy first session");
-
-        let (_second_receiver, _second_registration) = runtime
-            .register_session_with_capacity(session_id, 1)
-            .expect("register reused session output");
-        runtime
-            .dispatch(RuntimeCommand::CreateSession {
-                session_id: session_id.into(),
-                heap_limit_mb: None,
-                cpu_time_limit_ms: None,
-                wall_clock_limit_ms: None,
-                warm_hint: None,
-            })
-            .expect("create reused session");
-
-        assert!(
-            !runtime
-                .destroy_session_if_output_current(&first_registration)
-                .expect("stale destroy should be ignored"),
-            "stale registration should not match the reused session output"
-        );
-        assert_eq!(
-            runtime.session_count(),
-            1,
-            "stale registration must not destroy the reused session"
-        );
-
-        runtime
-            .session_handle(session_id.into())
-            .destroy()
-            .expect("destroy reused session");
-    }
-
-    #[test]
-    fn session_cleanup_generation_guard_does_not_destroy_reused_session_id() {
-        let session_mgr = test_session_manager();
-        {
-            let mut mgr = session_mgr.lock().expect("session manager");
-            mgr.create_session_with_output_generation(
-                "reused".into(),
-                None,
-                None,
-                None,
-                Some(1),
-                None,
-            )
-            .expect("create first session");
-            mgr.destroy_session("reused")
-                .expect("destroy first session");
-            mgr.create_session_with_output_generation(
-                "reused".into(),
-                None,
-                None,
-                None,
-                Some(2),
-                None,
-            )
-            .expect("create reused session");
-
-            assert!(
-                !mgr.destroy_session_if_output_generation("reused", 1)
-                    .expect("stale generation destroy should be ignored"),
-                "stale cleanup generation should not match reused session"
-            );
-            assert_eq!(
-                mgr.session_count(),
-                1,
-                "stale cleanup generation must leave reused session alive"
-            );
-            mgr.destroy_session("reused")
-                .expect("destroy reused session");
-        }
-    }
-
-    fn test_session_manager() -> Arc<Mutex<SessionManager>> {
-        let (event_tx, _event_rx) = crossbeam_channel::bounded::<RuntimeEventEnvelope>(1);
-        Arc::new(Mutex::new(SessionManager::new(
-            1,
-            event_tx,
-            Arc::new(Mutex::new(HashMap::new())),
-            Arc::new(SnapshotCache::new(1)),
-        )))
-    }
-
-    fn runtime_envelope(output_generation: u64, event: RuntimeEvent) -> RuntimeEventEnvelope {
-        RuntimeEventEnvelope {
-            output_generation: Some(output_generation),
-            event,
-        }
-    }
-
-    fn test_session_manager_with_session(session_id: &str) -> Arc<Mutex<SessionManager>> {
-        test_session_manager_with_generation(session_id, 1)
-    }
-
-    fn test_session_manager_with_generation(
-        session_id: &str,
-        output_generation: u64,
-    ) -> Arc<Mutex<SessionManager>> {
-        let session_mgr = test_session_manager();
-        session_mgr
-            .lock()
-            .expect("session manager")
-            .create_session_with_output_generation(
-                session_id.into(),
-                None,
-                None,
-                None,
-                Some(output_generation),
-                None,
-            )
-            .expect("create test session");
-        session_mgr
-    }
-}
diff --git a/crates/v8-runtime/src/execution.rs b/crates/v8-runtime/src/execution.rs
deleted file mode 100644
index 0e811ad3a..000000000
--- a/crates/v8-runtime/src/execution.rs
+++ /dev/null
@@ -1,7903 +0,0 @@
-// Script compilation, CJS/ESM execution, module loading
-
-use std::cell::RefCell;
-use std::collections::{HashMap, HashSet};
-use std::ffi::c_void;
-use std::num::NonZeroI32;
-use std::time::Instant;
-
-// ── Module-load read/compile split (opt-in via AGENTOS_MODULE_TRACE=1) ──
-// Per module miss: resolve IPC + load (read) IPC + format IPC + V8 compile.
-// Accumulates ns per category and writes a running total to
-// AGENTOS_MODULE_TRACE_FILE so we can see whether the VM module-load tax is
-// IPC (read) or V8 compile bound. Index: 0=count 1=resolve 2=load 3=format 4=compile.
-static MOD_TRACE: std::sync::OnceLock<std::sync::Mutex<[u64; 5]>> = std::sync::OnceLock::new();
-
-fn mod_trace_enabled() -> bool {
-    std::env::var("AGENTOS_MODULE_TRACE").as_deref() == Ok("1")
-}
-
-fn record_mod(idx: usize, ns: u64) {
-    let m = MOD_TRACE.get_or_init(|| std::sync::Mutex::new([0u64; 5]));
-    let Ok(mut a) = m.lock() else {
-        return;
-    };
-    a[idx] = a[idx].wrapping_add(ns);
-    if idx == 4 {
-        a[0] += 1;
-        if a[0] % 25 == 0 {
-            if let Ok(path) = std::env::var("AGENTOS_MODULE_TRACE_FILE") {
-                let _ = std::fs::write(
-                    &path,
-                    format!(
-                        "modules={} resolve_ms={} load_ms={} format_ms={} compile_ms={}\n",
-                        a[0],
-                        a[1] / 1_000_000,
-                        a[2] / 1_000_000,
-                        a[3] / 1_000_000,
-                        a[4] / 1_000_000,
-                    ),
-                );
-            }
-        }
-    }
-}
-
-use crate::bridge::{deserialize_v8_value, serialize_v8_value};
-use crate::host_call::BridgeCallContext;
-use crate::ipc::ExecutionError;
-#[cfg(test)]
-use crate::ipc::{OsConfig, ProcessConfig};
-
-/// Cached V8 code cache data for bridge code compilation.
-///
-/// Stores the compiled bytecode from V8's ScriptCompiler::CreateCodeCache
-/// along with a hash of the source for invalidation. On subsequent
-/// compilations with the same bridge code, the cache is consumed via
-/// CompileOptions::ConsumeCodeCache, skipping parsing and initial compilation.
-pub struct BridgeCodeCache {
-    /// FNV-1a hash of the bridge code source string
-    source_hash: u64,
-    /// Raw code cache bytes from UnboundScript::create_code_cache()
-    cached_data: Vec<u8>,
-}
-
-impl BridgeCodeCache {
-    /// Compute FNV-1a hash of bridge code source
-    fn hash_source(source: &str) -> u64 {
-        let mut hash: u64 = 0xcbf29ce484222325;
-        for byte in source.as_bytes() {
-            hash ^= *byte as u64;
-            hash = hash.wrapping_mul(0x100000001b3);
-        }
-        hash
-    }
-}
-
-/// Inject `_processConfig` and `_osConfig` as frozen, non-writable, non-configurable
-/// global properties, and harden the context (remove SharedArrayBuffer in freeze mode).
-///
-/// Must be called within a ContextScope.
-#[cfg(test)]
-pub fn inject_globals(
-    scope: &mut v8::HandleScope,
-    process_config: &ProcessConfig,
-    os_config: &OsConfig,
-) {
-    let context = scope.get_current_context();
-    let global = context.global(scope);
-    // Build and freeze _processConfig
-    let pc_obj = build_process_config(scope, process_config);
-    pc_obj.set_integrity_level(scope, v8::IntegrityLevel::Frozen);
-    let pc_key = v8::String::new(scope, "_processConfig").unwrap();
-    let attr = v8::PropertyAttribute::READ_ONLY | v8::PropertyAttribute::DONT_DELETE;
-    global.define_own_property(scope, pc_key.into(), pc_obj.into(), attr);
-
-    // Build and freeze _osConfig
-    let os_obj = build_os_config(scope, os_config);
-    os_obj.set_integrity_level(scope, v8::IntegrityLevel::Frozen);
-    let os_key = v8::String::new(scope, "_osConfig").unwrap();
-    let attr = v8::PropertyAttribute::READ_ONLY | v8::PropertyAttribute::DONT_DELETE;
-    global.define_own_property(scope, os_key.into(), os_obj.into(), attr);
-
-    // SharedArrayBuffer removal for timing mitigation is handled by the JS-side
-    // bridge code (applyTimingMitigationFreeze), which runs AFTER the bridge bundle
-    // loads. The bridge bundle depends on SharedArrayBuffer being available during
-    // its initialization (whatwg-url/webidl-conversions uses it).
-}
-
-pub fn install_high_resolution_time_global(scope: &mut v8::HandleScope, origin: *const Instant) {
-    let context = scope.get_current_context();
-    let global = context.global(scope);
-    let external = v8::External::new(scope, origin as *mut c_void);
-    let template = v8::FunctionTemplate::builder(high_resolution_time_callback)
-        .data(external.into())
-        .build(scope);
-    let Some(func) = template.get_function(scope) else {
-        return;
-    };
-    let key = v8::String::new(scope, "__secureExecHrNowUs").unwrap();
-    let attr = v8::PropertyAttribute::READ_ONLY | v8::PropertyAttribute::DONT_DELETE;
-    global.define_own_property(scope, key.into(), func.into(), attr);
-}
-
-fn high_resolution_time_callback(
-    scope: &mut v8::HandleScope,
-    args: v8::FunctionCallbackArguments,
-    mut rv: v8::ReturnValue,
-) {
-    let external = match v8::Local::<v8::External>::try_from(args.data()) {
-        Ok(ext) => ext,
-        Err(_) => {
-            let msg = v8::String::new(scope, "internal error: missing hrtime origin").unwrap();
-            let exc = v8::Exception::error(scope, msg);
-            scope.throw_exception(exc);
-            return;
-        }
-    };
-    // SAFETY: the pointer targets the session thread's per-isolate Instant,
-    // which is kept alive for the lifetime of the V8 session thread.
-    let origin = unsafe { &*(external.value() as *const Instant) };
-    let micros = origin.elapsed().as_secs_f64() * 1_000_000.0;
-    rv.set(v8::Number::new(scope, micros).into());
-}
-
-/// Inject globals from a V8-serialized payload containing { processConfig, osConfig }.
-///
-/// The payload is produced by node:v8.serialize() on the host side.
-/// Deserializes into V8, extracts processConfig and osConfig, freezes them,
-/// and sets them as non-writable, non-configurable global properties.
-pub fn inject_globals_from_payload(
-    scope: &mut v8::HandleScope,
-    payload: &[u8],
-) -> Result<(), ExecutionError> {
-    let context = scope.get_current_context();
-    let global = context.global(scope);
-
-    // Deserialize the V8 payload { processConfig, osConfig }
-    let config_val = deserialize_v8_value(scope, payload)
-        .map_err(|err| invalid_globals_payload_error(format!("decode failed: {err}")))?;
-
-    if !config_val.is_object() {
-        return Err(invalid_globals_payload_error("payload is not an object"));
-    }
-    let config_obj = v8::Local::<v8::Object>::try_from(config_val)
-        .map_err(|_| invalid_globals_payload_error("payload is not an object"))?;
-    if !is_plain_config_object(scope, config_obj) {
-        return Err(invalid_globals_payload_error(
-            "payload is not a plain object",
-        ));
-    }
-
-    // Validate both config objects before mutating globals so malformed payloads
-    // cannot leave a partially injected execution context.
-    let (pc_val, pc_obj) = required_object_property(scope, config_obj, "processConfig")?;
-    let (oc_val, oc_obj) = required_object_property(scope, config_obj, "osConfig")?;
-
-    let (_env_val, env_obj) =
-        required_object_property_with_label(scope, pc_obj, "env", "processConfig.env")?;
-    freeze_config_object(scope, env_obj, "processConfig.env")?;
-    freeze_config_object(scope, pc_obj, "processConfig")?;
-    freeze_config_object(scope, oc_obj, "osConfig")?;
-    let global_key = v8::String::new(scope, "_processConfig").unwrap();
-    let attr = v8::PropertyAttribute::READ_ONLY | v8::PropertyAttribute::DONT_DELETE;
-    global.define_own_property(scope, global_key.into(), pc_val, attr);
-
-    let global_key = v8::String::new(scope, "_osConfig").unwrap();
-    let attr = v8::PropertyAttribute::READ_ONLY | v8::PropertyAttribute::DONT_DELETE;
-    global.define_own_property(scope, global_key.into(), oc_val, attr);
-
-    Ok(())
-}
-
-fn required_object_property<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    obj: v8::Local<'s, v8::Object>,
-    name: &str,
-) -> Result<(v8::Local<'s, v8::Value>, v8::Local<'s, v8::Object>), ExecutionError> {
-    required_object_property_with_label(scope, obj, name, name)
-}
-
-fn required_object_property_with_label<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    obj: v8::Local<'s, v8::Object>,
-    name: &str,
-    error_label: &str,
-) -> Result<(v8::Local<'s, v8::Value>, v8::Local<'s, v8::Object>), ExecutionError> {
-    let key = v8::String::new(scope, name).unwrap();
-    let value = obj
-        .get(scope, key.into())
-        .filter(|value| !value.is_null_or_undefined())
-        .ok_or_else(|| invalid_globals_payload_error(format!("missing {error_label}")))?;
-    if !value.is_object() {
-        return Err(invalid_globals_payload_error(format!(
-            "{error_label} is not an object"
-        )));
-    }
-    let object = v8::Local::<v8::Object>::try_from(value)
-        .map_err(|_| invalid_globals_payload_error(format!("{error_label} is not an object")))?;
-    if !is_plain_config_object(scope, object) {
-        return Err(invalid_globals_payload_error(format!(
-            "{error_label} is not a plain object"
-        )));
-    }
-    Ok((value, object))
-}
-
-fn is_plain_config_object(scope: &mut v8::HandleScope, object: v8::Local<v8::Object>) -> bool {
-    let Some(prototype) = object.get_prototype(scope) else {
-        return false;
-    };
-    if prototype.is_null() {
-        return true;
-    }
-    if !prototype.is_object() {
-        return false;
-    }
-    let Ok(prototype_object) = v8::Local::<v8::Object>::try_from(prototype) else {
-        return false;
-    };
-    prototype_object
-        .get_prototype(scope)
-        .is_some_and(|parent| parent.is_null())
-}
-
-fn freeze_config_object(
-    scope: &mut v8::HandleScope,
-    object: v8::Local<v8::Object>,
-    label: &str,
-) -> Result<(), ExecutionError> {
-    match object.set_integrity_level(scope, v8::IntegrityLevel::Frozen) {
-        Some(true) => Ok(()),
-        Some(false) | None => Err(invalid_globals_payload_error(format!(
-            "failed to freeze {label}"
-        ))),
-    }
-}
-
-fn invalid_globals_payload_error(message: impl Into<String>) -> ExecutionError {
-    ExecutionError {
-        error_type: "Error".into(),
-        message: format!("invalid InjectGlobals payload: {}", message.into()),
-        stack: String::new(),
-        code: Some("ERR_INVALID_GLOBALS_PAYLOAD".into()),
-    }
-}
-
-/// Compile and run bridge code as a V8 Script, using code cache if available.
-///
-/// On cache miss (first compilation or hash mismatch): compiles with
-/// NoCompileOptions and creates a code cache from the resulting UnboundScript.
-/// On cache hit: compiles with ConsumeCodeCache using the cached bytecode.
-/// Creates its own TryCatch scope internally so the caller's scope is released.
-/// Returns (exit_code, error) — exit code 0 on success.
-fn run_bridge_cached(
-    scope: &mut v8::HandleScope,
-    bridge_code: &str,
-    cache: &mut Option<BridgeCodeCache>,
-) -> (i32, Option<ExecutionError>) {
-    let tc = &mut v8::TryCatch::new(scope);
-
-    let v8_source = match v8::String::new(tc, bridge_code) {
-        Some(s) => s,
-        None => {
-            return (
-                1,
-                Some(ExecutionError {
-                    error_type: "Error".into(),
-                    message: "bridge code string too large for V8".into(),
-                    stack: String::new(),
-                    code: None,
-                }),
-            );
-        }
-    };
-
-    // Resource name for bridge code (needed for code cache to work)
-    let resource_name = v8::String::new(tc, "<bridge>").unwrap();
-    let origin = v8::ScriptOrigin::new(
-        tc,
-        resource_name.into(),
-        0,
-        0,
-        false,
-        -1,
-        None,
-        false,
-        false,
-        false,
-        None,
-    );
-
-    let source_hash = BridgeCodeCache::hash_source(bridge_code);
-
-    // Check if cache is valid for this bridge code
-    let cache_hit = cache.as_ref().is_some_and(|c| c.source_hash == source_hash);
-
-    let script = if cache_hit {
-        // Consume cached bytecode
-        let cached_bytes = &cache.as_ref().unwrap().cached_data;
-        let cached_data = v8::script_compiler::CachedData::new(cached_bytes);
-        let mut source = v8::script_compiler::Source::new_with_cached_data(
-            v8_source,
-            Some(&origin),
-            cached_data,
-        );
-        let compiled = v8::script_compiler::compile(
-            tc,
-            &mut source,
-            v8::script_compiler::CompileOptions::ConsumeCodeCache,
-            v8::script_compiler::NoCacheReason::NoReason,
-        );
-        // If cache was rejected, invalidate it (will be regenerated next time)
-        if source.get_cached_data().is_some_and(|cd| cd.rejected()) {
-            *cache = None;
-        }
-        compiled
-    } else {
-        // First compilation or cache invalidated — compile without cache
-        let mut source = v8::script_compiler::Source::new(v8_source, Some(&origin));
-        let compiled = v8::script_compiler::compile(
-            tc,
-            &mut source,
-            v8::script_compiler::CompileOptions::NoCompileOptions,
-            v8::script_compiler::NoCacheReason::NoReason,
-        );
-        // Generate code cache from the compiled script
-        if let Some(ref script) = compiled {
-            let unbound = script.get_unbound_script(tc);
-            if let Some(code_cache) = unbound.create_code_cache() {
-                *cache = Some(BridgeCodeCache {
-                    source_hash,
-                    cached_data: code_cache.to_vec(),
-                });
-            }
-        }
-        compiled
-    };
-
-    // Run the compiled script
-    let script = match script {
-        Some(s) => s,
-        None => {
-            return match tc.exception() {
-                Some(e) => {
-                    let (c, err) = exception_to_result(tc, e);
-                    (c, Some(err))
-                }
-                None => (1, None),
-            };
-        }
-    };
-
-    if script.run(tc).is_none() {
-        return match tc.exception() {
-            Some(e) => {
-                let (c, err) = exception_to_result(tc, e);
-                (c, Some(err))
-            }
-            None => (1, None),
-        };
-    }
-
-    (0, None)
-}
-
-/// Run a short init script (e.g. post-restore config). Compiles and executes
-/// via v8::Script, returning (exit_code, error) on failure. No code caching.
-#[cfg(not(test))]
-pub fn run_init_script(scope: &mut v8::HandleScope, code: &str) -> (i32, Option<ExecutionError>) {
-    if code.is_empty() {
-        return (0, None);
-    }
-    let tc = &mut v8::TryCatch::new(scope);
-    let source = match v8::String::new(tc, code) {
-        Some(s) => s,
-        None => {
-            return (
-                1,
-                Some(ExecutionError {
-                    error_type: "Error".into(),
-                    message: "init script string too large for V8".into(),
-                    stack: String::new(),
-                    code: None,
-                }),
-            );
-        }
-    };
-    let script = match v8::Script::compile(tc, source, None) {
-        Some(s) => s,
-        None => {
-            return match tc.exception() {
-                Some(e) => {
-                    let (c, err) = exception_to_result(tc, e);
-                    (c, Some(err))
-                }
-                None => (1, None),
-            };
-        }
-    };
-    if script.run(tc).is_none() {
-        return match tc.exception() {
-            Some(e) => {
-                let (c, err) = exception_to_result(tc, e);
-                (c, Some(err))
-            }
-            None => (1, None),
-        };
-    }
-    (0, None)
-}
-
-/// Execute user code as a CJS script (mode='exec').
-///
-/// Runs bridge_code as IIFE first (if non-empty), then compiles and runs user_code
-/// via v8::Script. Returns (exit_code, error) — exit code 0 on success, 1 on error.
-/// The `bridge_cache` parameter enables code caching for repeated bridge compilations.
-pub fn execute_script(
-    scope: &mut v8::HandleScope,
-    bridge_code: &str,
-    user_code: &str,
-    bridge_cache: &mut Option<BridgeCodeCache>,
-) -> (i32, Option<ExecutionError>) {
-    execute_script_with_options(scope, None, bridge_code, user_code, None, bridge_cache)
-}
-
-pub fn execute_script_with_options(
-    scope: &mut v8::HandleScope,
-    bridge_ctx: Option<&BridgeCallContext>,
-    bridge_code: &str,
-    user_code: &str,
-    file_path: Option<&str>,
-    bridge_cache: &mut Option<BridgeCodeCache>,
-) -> (i32, Option<ExecutionError>) {
-    if let Some(bridge_ctx) = bridge_ctx {
-        MODULE_RESOLVE_STATE.with(|cell| {
-            *cell.borrow_mut() = Some(ModuleResolveState {
-                bridge_ctx: bridge_ctx as *const BridgeCallContext,
-                module_names: HashMap::new(),
-                module_cache: HashMap::new(),
-                guest_reader: None,
-            });
-        });
-    }
-
-    // Run bridge code IIFE (with code caching)
-    if !bridge_code.is_empty() {
-        let (code, err) = run_bridge_cached(scope, bridge_code, bridge_cache);
-        if code != 0 {
-            if bridge_ctx.is_some() {
-                clear_module_state();
-            }
-            return (code, err);
-        }
-    }
-
-    // Run user code
-    {
-        let tc = &mut v8::TryCatch::new(scope);
-        let source = match v8::String::new(tc, user_code) {
-            Some(s) => s,
-            None => {
-                if bridge_ctx.is_some() {
-                    clear_module_state();
-                }
-                return (
-                    1,
-                    Some(ExecutionError {
-                        error_type: "Error".into(),
-                        message: "user code string too large for V8".into(),
-                        stack: String::new(),
-                        code: None,
-                    }),
-                );
-            }
-        };
-        let origin = file_path.and_then(|path| {
-            let resource = v8::String::new(tc, path)?;
-            Some(v8::ScriptOrigin::new(
-                tc,
-                resource.into(),
-                0,
-                0,
-                false,
-                -1,
-                None,
-                false,
-                false,
-                false,
-                None,
-            ))
-        });
-        let script = match v8::Script::compile(tc, source, origin.as_ref()) {
-            Some(s) => s,
-            None => {
-                if bridge_ctx.is_some() {
-                    clear_module_state();
-                }
-                return match tc.exception() {
-                    Some(e) => {
-                        let (c, err) = exception_to_result(tc, e);
-                        (c, Some(err))
-                    }
-                    None => (1, None),
-                };
-            }
-        };
-        let completion = match script.run(tc) {
-            Some(result) => result,
-            None => {
-                if bridge_ctx.is_some() {
-                    clear_module_state();
-                }
-                return match tc.exception() {
-                    Some(e) => {
-                        let (c, err) = exception_to_result(tc, e);
-                        (c, Some(err))
-                    }
-                    None => (1, None),
-                };
-            }
-        };
-
-        // Flush microtasks once after every exec()-style script so process.nextTick()
-        // and zero-delay bridge callbacks run before we decide whether more event-loop
-        // work is pending.
-        tc.perform_microtask_checkpoint();
-
-        if let Some(exception) = tc.exception() {
-            if bridge_ctx.is_some() {
-                clear_module_state();
-            }
-            let (c, err) = exception_to_result(tc, exception);
-            return (c, Some(err));
-        }
-
-        if let Some(err) = take_unhandled_promise_rejection(tc) {
-            if bridge_ctx.is_some() {
-                clear_module_state();
-            }
-            return (1, Some(err));
-        }
-
-        // Surface rejected async completions for exec()-style scripts that
-        // return a Promise (for example an async IIFE ending in await import()).
-        if completion.is_promise() {
-            let promise = v8::Local::<v8::Promise>::try_from(completion).unwrap();
-            match promise.state() {
-                v8::PromiseState::Pending => {
-                    set_pending_script_evaluation(tc, promise);
-                    return (0, None);
-                }
-                v8::PromiseState::Rejected => {
-                    let rejection = promise.result(tc);
-                    if bridge_ctx.is_some() {
-                        clear_module_state();
-                    }
-                    let (c, err) = exception_to_result(tc, rejection);
-                    return (c, Some(err));
-                }
-                v8::PromiseState::Fulfilled => {
-                    return (extract_global_process_exit_code(tc).unwrap_or(0), None);
-                }
-            }
-        }
-    }
-
-    (extract_global_process_exit_code(scope).unwrap_or(0), None)
-}
-
-/// Check if a V8 exception is a ProcessExitError (has `_isProcessExit: true` sentinel).
-/// Returns `Some(exit_code)` if detected, `None` otherwise.
-///
-/// ProcessExitError is detected by sentinel property, not by regex matching on the
-/// error message or constructor name.
-pub fn extract_process_exit_code(
-    scope: &mut v8::HandleScope,
-    exception: v8::Local<v8::Value>,
-) -> Option<i32> {
-    if !exception.is_object() {
-        return None;
-    }
-    let obj = v8::Local::<v8::Object>::try_from(exception).ok()?;
-    let sentinel_key = v8::String::new(scope, "_isProcessExit")?;
-    let sentinel_val = obj.get(scope, sentinel_key.into())?;
-    if !sentinel_val.is_true() {
-        return None;
-    }
-    // Extract numeric exit code from .code property
-    let code_key = v8::String::new(scope, "code")?;
-    let code_val = obj.get(scope, code_key.into())?;
-    if code_val.is_undefined() || code_val.is_null() {
-        Some(0)
-    } else if code_val.is_number() {
-        Some(code_val.int32_value(scope).unwrap_or(0))
-    } else {
-        Some(1)
-    }
-}
-
-fn extract_global_process_exit_code(scope: &mut v8::HandleScope) -> Option<i32> {
-    let context = scope.get_current_context();
-    let global = context.global(scope);
-    let process_key = v8::String::new(scope, "process")?;
-    let process_val = global.get(scope, process_key.into())?;
-    if !process_val.is_object() {
-        return None;
-    }
-
-    let process_obj = v8::Local::<v8::Object>::try_from(process_val).ok()?;
-    let exit_code_key = v8::String::new(scope, "exitCode")?;
-    let exit_code_val = process_obj.get(scope, exit_code_key.into())?;
-    if exit_code_val.is_undefined() || exit_code_val.is_null() {
-        None
-    } else if exit_code_val.is_number() {
-        Some(exit_code_val.int32_value(scope).unwrap_or(0))
-    } else {
-        None
-    }
-}
-
-/// Extract error info and exit code from a V8 exception.
-/// For ProcessExitError (detected via _isProcessExit sentinel), returns the error's exit code.
-/// For other errors, returns exit code 1.
-pub(crate) fn exception_to_result(
-    scope: &mut v8::HandleScope,
-    exception: v8::Local<v8::Value>,
-) -> (i32, ExecutionError) {
-    let error = extract_error_info(scope, exception);
-    let exit_code = extract_process_exit_code(scope, exception)
-        .or_else(|| parse_process_exit_code_from_error(&error))
-        .unwrap_or(1);
-    (exit_code, error)
-}
-
-fn parse_process_exit_code_from_error(error: &ExecutionError) -> Option<i32> {
-    if error.error_type != "ProcessExitError" && !error.message.starts_with("process.exit(") {
-        return None;
-    }
-    let code = error
-        .message
-        .strip_prefix("process.exit(")?
-        .strip_suffix(')')?;
-    code.parse::<i32>().ok()
-}
-
-/// Extract structured error information from a V8 exception value.
-///
-/// Reads constructor.name for error type, .message for the message,
-/// .stack for the stack trace, and optional .code for Node-style error codes.
-pub(crate) fn extract_error_info(
-    scope: &mut v8::HandleScope,
-    exception: v8::Local<v8::Value>,
-) -> ExecutionError {
-    if !exception.is_object() {
-        // Non-object throw (e.g., `throw "string"`)
-        return ExecutionError {
-            error_type: "Error".into(),
-            message: exception.to_rust_string_lossy(scope),
-            stack: String::new(),
-            code: None,
-        };
-    }
-
-    let obj = v8::Local::<v8::Object>::try_from(exception).unwrap();
-
-    // Error type from constructor.name
-    let error_type = {
-        let ctor_key = v8::String::new(scope, "constructor").unwrap();
-        let name_key = v8::String::new(scope, "name").unwrap();
-        obj.get(scope, ctor_key.into())
-            .filter(|v| v.is_object())
-            .and_then(|ctor| {
-                let ctor_obj = v8::Local::<v8::Object>::try_from(ctor).ok()?;
-                ctor_obj.get(scope, name_key.into())
-            })
-            .filter(|v| v.is_string())
-            .map(|v| v.to_rust_string_lossy(scope))
-            .filter(|n| !n.is_empty())
-            .unwrap_or_else(|| "Error".into())
-    };
-
-    // Message from error.message property
-    let message = {
-        let msg_key = v8::String::new(scope, "message").unwrap();
-        obj.get(scope, msg_key.into())
-            .filter(|v| v.is_string())
-            .map(|v| v.to_rust_string_lossy(scope))
-            .unwrap_or_else(|| exception.to_rust_string_lossy(scope))
-    };
-
-    // Stack trace from error.stack property
-    let stack = {
-        let stack_key = v8::String::new(scope, "stack").unwrap();
-        obj.get(scope, stack_key.into())
-            .filter(|v| v.is_string())
-            .map(|v| v.to_rust_string_lossy(scope))
-            .unwrap_or_default()
-    };
-
-    // Optional error code (e.g., ERR_MODULE_NOT_FOUND)
-    let code = {
-        let code_key = v8::String::new(scope, "code").unwrap();
-        obj.get(scope, code_key.into())
-            .filter(|v| v.is_string())
-            .map(|v| v.to_rust_string_lossy(scope))
-    };
-
-    ExecutionError {
-        error_type,
-        message,
-        stack,
-        code,
-    }
-}
-
-/// Build the _processConfig JS object: { cwd, env, timing_mitigation, frozen_time_ms, high_resolution_time }
-#[cfg(test)]
-fn build_process_config<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    config: &ProcessConfig,
-) -> v8::Local<'s, v8::Object> {
-    let obj = v8::Object::new(scope);
-
-    // cwd
-    let key = v8::String::new(scope, "cwd").unwrap();
-    let val = v8::String::new(scope, &config.cwd).unwrap();
-    obj.set(scope, key.into(), val.into());
-
-    // env (frozen sub-object)
-    let env_key = v8::String::new(scope, "env").unwrap();
-    let env_obj = v8::Object::new(scope);
-    for (k, v) in &config.env {
-        let ek = v8::String::new(scope, k).unwrap();
-        let ev = v8::String::new(scope, v).unwrap();
-        env_obj.set(scope, ek.into(), ev.into());
-    }
-    env_obj.set_integrity_level(scope, v8::IntegrityLevel::Frozen);
-    obj.set(scope, env_key.into(), env_obj.into());
-
-    // timing_mitigation
-    let key = v8::String::new(scope, "timing_mitigation").unwrap();
-    let val = v8::String::new(scope, &config.timing_mitigation).unwrap();
-    obj.set(scope, key.into(), val.into());
-
-    // frozen_time_ms (number or null)
-    let key = v8::String::new(scope, "frozen_time_ms").unwrap();
-    let val: v8::Local<v8::Value> = match config.frozen_time_ms {
-        Some(ms) => v8::Number::new(scope, ms).into(),
-        None => v8::null(scope).into(),
-    };
-    obj.set(scope, key.into(), val);
-
-    // high_resolution_time
-    let key = v8::String::new(scope, "high_resolution_time").unwrap();
-    let val = v8::Boolean::new(scope, config.high_resolution_time);
-    obj.set(scope, key.into(), val.into());
-
-    obj
-}
-
-/// Build the _osConfig JS object: { homedir, tmpdir, platform, arch }
-#[cfg(test)]
-fn build_os_config<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    config: &OsConfig,
-) -> v8::Local<'s, v8::Object> {
-    let obj = v8::Object::new(scope);
-
-    for (name, value) in [
-        ("homedir", config.homedir.as_str()),
-        ("tmpdir", config.tmpdir.as_str()),
-        ("platform", config.platform.as_str()),
-        ("arch", config.arch.as_str()),
-    ] {
-        let key = v8::String::new(scope, name).unwrap();
-        let val = v8::String::new(scope, value).unwrap();
-        obj.set(scope, key.into(), val.into());
-    }
-
-    obj
-}
-
-// --- ESM module loading ---
-
-/// Thread-local state for module resolution during execute_module.
-/// Avoids passing user data through V8's ResolveModuleCallback (which is a plain fn pointer).
-/// Direct, in-process module source reader living on the V8 session thread.
-///
-/// The V8 module callback (resolve_or_compile_module) runs in this crate
-/// (v8-runtime), but the module reader/resolver lives in the higher `execution`
-/// crate, so a direct call would be a circular dependency — today every module
-/// resolve/load/format is a sync bridge round-trip (~139us × ~5,100 calls ≈ all
-/// of loadPiSdkRuntime). This trait is owned here and implemented in the higher
-/// crate over the mounted `HostDirModuleReader`, then handed down to the session
-/// thread so module source can be read directly, skipping the round-trip. It is
-/// confined to the same mounts the guest sees (the impl keeps the reader's
-/// `openat2(RESOLVE_BENEATH)` confinement).
-pub trait GuestModuleReader: Send {
-    /// Read the source for an already-resolved guest module path, or `None` if
-    /// the path isn't served by this reader (caller falls back to the bridge IPC).
-    fn read_module_source(&mut self, resolved_guest_path: &str) -> Option<String>;
-
-    /// Resolve a module specifier (import mode) to a resolved guest path directly,
-    /// skipping the bridge `_resolveModule` round-trip. `None` => fall back to IPC.
-    /// Implementations must match the bridge resolver exactly (same cache, same
-    /// ESM/CJS/exports/symlink semantics).
-    fn resolve_module(&mut self, specifier: &str, referrer: &str) -> Option<String> {
-        let _ = (specifier, referrer);
-        None
-    }
-}
-
-/// Install (or clear) the direct module reader for the current session thread.
-/// Called by the session thread when it receives a `SetModuleReader` command; the
-/// next `execute_module` moves it into the resolve state. Must be called on the
-/// session/isolate thread.
-pub fn install_session_guest_reader(reader: Option<Box<dyn GuestModuleReader>>) {
-    SESSION_GUEST_READER.with(|cell| *cell.borrow_mut() = reader);
-}
-
-struct ModuleResolveState {
-    bridge_ctx: *const BridgeCallContext,
-    /// identity_hash → resource_name for referrer lookup
-    module_names: HashMap<NonZeroI32, String>,
-    /// resolved_path and referrer-qualified request keys → Global<Module> cache
-    module_cache: HashMap<String, v8::Global<v8::Module>>,
-    /// Optional direct module-source reader (session-thread local). When present,
-    /// module loads read source directly instead of via the bridge round-trip.
-    guest_reader: Option<Box<dyn GuestModuleReader>>,
-}
-
-// SAFETY: ModuleResolveState is only accessed from the session thread
-// (single-threaded per session). The raw pointer is valid for the
-// duration of execute_module.
-unsafe impl Send for ModuleResolveState {}
-
-/// Deferred root-module completion state for async ESM evaluation.
-///
-/// When `module.evaluate()` returns a pending promise (for example because the
-/// entry module or one of its dependencies uses top-level `await`), the session
-/// thread keeps the module + promise alive across the bridge event loop and
-/// finalizes exports only after the promise settles.
-#[cfg_attr(test, allow(dead_code))]
-struct PendingModuleEvaluation {
-    module: v8::Global<v8::Module>,
-    promise: v8::Global<v8::Promise>,
-}
-
-// SAFETY: PendingModuleEvaluation is only accessed from the session thread
-// (single-threaded per session).
-unsafe impl Send for PendingModuleEvaluation {}
-
-struct PendingScriptEvaluation {
-    promise: v8::Global<v8::Promise>,
-}
-
-unsafe impl Send for PendingScriptEvaluation {}
-
-thread_local! {
-    static MODULE_RESOLVE_STATE: RefCell<Option<ModuleResolveState>> = const { RefCell::new(None) };
-    /// Session-thread-local handoff: a SetModuleReader command stashes the reader
-    /// here, and the next execute_module moves it into ModuleResolveState so module
-    /// source loads read directly on this thread instead of round-tripping the bridge.
-    static SESSION_GUEST_READER: RefCell<Option<Box<dyn GuestModuleReader>>> = const { RefCell::new(None) };
-    static PENDING_MODULE_EVALUATION: RefCell<Option<PendingModuleEvaluation>> = const { RefCell::new(None) };
-    static PENDING_SCRIPT_EVALUATION: RefCell<Option<PendingScriptEvaluation>> = const { RefCell::new(None) };
-    static CJS_RUNTIME_EXTRACTION_IN_PROGRESS: RefCell<HashSet<String>> =
-        RefCell::new(HashSet::new());
-}
-
-const MAX_MODULE_RESOLVE_MODULES: usize = 1024;
-const MAX_MODULE_RESOLVE_CACHE_ENTRIES: usize = 4096;
-const MAX_MODULE_PREFETCH_GRAPH_MODULES: usize = 1024;
-const MAX_MODULE_PREFETCH_BATCH_SIZE: usize = 256;
-const MAX_MODULE_BATCH_RESOLVE_RESPONSE_BYTES: usize = 16 * 1024 * 1024;
-const MAX_CJS_NAMED_EXPORTS: usize = 1024;
-const MAX_CJS_RUNTIME_EXPORT_NAME_LEN: usize = 512;
-
-fn module_request_cache_key(specifier: &str, referrer_name: &str) -> String {
-    format!("{}\0{}", referrer_name, specifier)
-}
-
-#[cfg_attr(test, allow(dead_code))]
-pub fn clear_module_state() {
-    MODULE_RESOLVE_STATE.with(|cell| {
-        *cell.borrow_mut() = None;
-    });
-}
-
-pub fn clear_pending_module_evaluation() {
-    PENDING_MODULE_EVALUATION.with(|cell| {
-        *cell.borrow_mut() = None;
-    });
-}
-
-pub fn clear_pending_script_evaluation() {
-    PENDING_SCRIPT_EVALUATION.with(|cell| {
-        *cell.borrow_mut() = None;
-    });
-}
-
-#[cfg_attr(test, allow(dead_code))]
-pub fn has_pending_module_evaluation() -> bool {
-    PENDING_MODULE_EVALUATION.with(|cell| cell.borrow().is_some())
-}
-
-pub fn has_pending_script_evaluation() -> bool {
-    PENDING_SCRIPT_EVALUATION.with(|cell| cell.borrow().is_some())
-}
-
-pub fn pending_module_evaluation_needs_wait(scope: &mut v8::HandleScope) -> bool {
-    PENDING_MODULE_EVALUATION.with(|cell| {
-        let borrow = cell.borrow();
-        let Some(pending) = borrow.as_ref() else {
-            return false;
-        };
-        let promise = v8::Local::new(scope, &pending.promise);
-        promise.state() == v8::PromiseState::Pending
-    })
-}
-
-pub fn pending_script_evaluation_needs_wait(scope: &mut v8::HandleScope) -> bool {
-    PENDING_SCRIPT_EVALUATION.with(|cell| {
-        let borrow = cell.borrow();
-        let Some(pending) = borrow.as_ref() else {
-            return false;
-        };
-        let promise = v8::Local::new(scope, &pending.promise);
-        promise.state() == v8::PromiseState::Pending
-    })
-}
-
-fn set_pending_module_evaluation(
-    scope: &mut v8::HandleScope,
-    module: v8::Local<v8::Module>,
-    promise: v8::Local<v8::Promise>,
-) {
-    PENDING_MODULE_EVALUATION.with(|cell| {
-        *cell.borrow_mut() = Some(PendingModuleEvaluation {
-            module: v8::Global::new(scope, module),
-            promise: v8::Global::new(scope, promise),
-        });
-    });
-}
-
-pub fn set_pending_script_evaluation(scope: &mut v8::HandleScope, promise: v8::Local<v8::Promise>) {
-    PENDING_SCRIPT_EVALUATION.with(|cell| {
-        *cell.borrow_mut() = Some(PendingScriptEvaluation {
-            promise: v8::Global::new(scope, promise),
-        });
-    });
-}
-
-pub(crate) fn take_unhandled_promise_rejection(
-    scope: &mut v8::HandleScope,
-) -> Option<ExecutionError> {
-    scope
-        .get_slot_mut::<crate::isolate::PromiseRejectState>()
-        .and_then(|state| state.take_next_unhandled())
-}
-
-pub fn finalize_pending_script_evaluation(
-    scope: &mut v8::HandleScope,
-) -> Option<(i32, Option<ExecutionError>)> {
-    let pending = PENDING_SCRIPT_EVALUATION.with(|cell| cell.borrow_mut().take())?;
-    let tc = &mut v8::TryCatch::new(scope);
-    let promise = v8::Local::new(tc, &pending.promise);
-
-    tc.perform_microtask_checkpoint();
-
-    if let Some(exception) = tc.exception() {
-        let (code, err) = exception_to_result(tc, exception);
-        return Some((code, Some(err)));
-    }
-
-    if let Some(err) = take_unhandled_promise_rejection(tc) {
-        return Some((1, Some(err)));
-    }
-
-    match promise.state() {
-        v8::PromiseState::Pending => {
-            PENDING_SCRIPT_EVALUATION.with(|cell| {
-                *cell.borrow_mut() = Some(pending);
-            });
-            None
-        }
-        v8::PromiseState::Rejected => {
-            let rejection = promise.result(tc);
-            let (code, err) = exception_to_result(tc, rejection);
-            Some((code, Some(err)))
-        }
-        v8::PromiseState::Fulfilled => {
-            Some((extract_global_process_exit_code(tc).unwrap_or(0), None))
-        }
-    }
-}
-
-fn serialize_module_exports(
-    scope: &mut v8::HandleScope,
-    module: v8::Local<v8::Module>,
-) -> Result<Vec<u8>, ExecutionError> {
-    // Serialize module namespace (exports)
-    // If the ESM namespace is empty, fall back to globalThis.module.exports
-    // for CJS compatibility (code using module.exports = {...}).
-    // The module namespace is a V8 exotic object that ValueSerializer can't
-    // handle directly, so we copy its properties into a plain object.
-    let namespace = module.get_module_namespace();
-    let namespace_obj = namespace.to_object(scope).unwrap();
-    let prop_names = namespace_obj
-        .get_own_property_names(scope, v8::GetPropertyNamesArgs::default())
-        .unwrap();
-    let exports_val: v8::Local<v8::Value> = if prop_names.length() == 0 {
-        // No ESM exports — check CJS module.exports fallback
-        let ctx = scope.get_current_context();
-        let global = ctx.global(scope);
-        let module_key = v8::String::new(scope, "module").unwrap();
-        let cjs_exports = global
-            .get(scope, module_key.into())
-            .and_then(|m| m.to_object(scope))
-            .and_then(|m| {
-                let exports_key = v8::String::new(scope, "exports").unwrap();
-                m.get(scope, exports_key.into())
-            })
-            .filter(|v| !v.is_undefined() && !v.is_null_or_undefined());
-        match cjs_exports {
-            Some(val) => val,
-            None => v8::Object::new(scope).into(),
-        }
-    } else {
-        let plain = v8::Object::new(scope);
-        for i in 0..prop_names.length() {
-            let key = prop_names.get_index(scope, i).unwrap();
-            let val = namespace_obj
-                .get(scope, key)
-                .unwrap_or_else(|| v8::undefined(scope).into());
-            plain.set(scope, key, val);
-        }
-        plain.into()
-    };
-
-    serialize_v8_value(scope, exports_val).map_err(|err| ExecutionError {
-        error_type: "Error".into(),
-        message: format!("failed to serialize exports: {}", err),
-        stack: String::new(),
-        code: None,
-    })
-}
-
-#[cfg_attr(test, allow(dead_code))]
-pub fn finalize_pending_module_evaluation(
-    scope: &mut v8::HandleScope,
-) -> Option<(i32, Option<Vec<u8>>, Option<ExecutionError>)> {
-    let pending = PENDING_MODULE_EVALUATION.with(|cell| cell.borrow_mut().take())?;
-    let tc = &mut v8::TryCatch::new(scope);
-    let module = v8::Local::new(tc, &pending.module);
-    let promise = v8::Local::new(tc, &pending.promise);
-
-    tc.perform_microtask_checkpoint();
-
-    if let Some(exception) = tc.exception() {
-        let (code, err) = exception_to_result(tc, exception);
-        return Some((code, None, Some(err)));
-    }
-
-    if let Some(err) = take_unhandled_promise_rejection(tc) {
-        return Some((1, None, Some(err)));
-    }
-
-    match promise.state() {
-        v8::PromiseState::Pending => {
-            PENDING_MODULE_EVALUATION.with(|cell| {
-                *cell.borrow_mut() = Some(pending);
-            });
-            None
-        }
-        v8::PromiseState::Rejected => {
-            let rejection = promise.result(tc);
-            let (code, err) = exception_to_result(tc, rejection);
-            Some((code, None, Some(err)))
-        }
-        v8::PromiseState::Fulfilled => {
-            if module.get_status() == v8::ModuleStatus::Errored {
-                let exc = module.get_exception();
-                let (code, err) = exception_to_result(tc, exc);
-                return Some((code, None, Some(err)));
-            }
-
-            match serialize_module_exports(tc, module) {
-                Ok(exports) => Some((0, Some(exports), None)),
-                Err(err) => Some((1, None, Some(err))),
-            }
-        }
-    }
-}
-
-/// Execute user code as an ES module (mode='run').
-///
-/// Runs bridge_code as CJS IIFE first (if non-empty), then compiles and runs
-/// user_code as a v8::Module. The ResolveModuleCallback sends sync-blocking IPC
-/// calls via BridgeCallContext to resolve import specifiers and load sources.
-/// Returns (exit_code, serialized_exports, error).
-/// The `bridge_cache` parameter enables code caching for repeated bridge compilations.
-pub fn execute_module(
-    scope: &mut v8::HandleScope,
-    bridge_ctx: &BridgeCallContext,
-    bridge_code: &str,
-    user_code: &str,
-    file_path: Option<&str>,
-    bridge_cache: &mut Option<BridgeCodeCache>,
-) -> (i32, Option<Vec<u8>>, Option<ExecutionError>) {
-    clear_pending_module_evaluation();
-
-    // Set up thread-local resolve state, taking any reader the session thread
-    // stashed via a SetModuleReader command so module loads read source directly.
-    let guest_reader = SESSION_GUEST_READER.with(|cell| cell.borrow_mut().take());
-    MODULE_RESOLVE_STATE.with(|cell| {
-        *cell.borrow_mut() = Some(ModuleResolveState {
-            bridge_ctx: bridge_ctx as *const BridgeCallContext,
-            module_names: HashMap::new(),
-            module_cache: HashMap::new(),
-            guest_reader,
-        });
-    });
-
-    // Run bridge code IIFE (same as CJS mode, with code caching)
-    if !bridge_code.is_empty() {
-        let (code, err) = run_bridge_cached(scope, bridge_code, bridge_cache);
-        if code != 0 {
-            clear_module_state();
-            return (code, None, err);
-        }
-    }
-
-    // Compile and evaluate as ES module
-    {
-        let tc = &mut v8::TryCatch::new(scope);
-        let resource_name_str = file_path.unwrap_or("<user_module>");
-        let resource = v8::String::new(tc, resource_name_str).unwrap();
-        let origin = v8::ScriptOrigin::new(
-            tc,
-            resource.into(),
-            0,
-            0,
-            false,
-            -1,
-            None,
-            false,
-            false,
-            true, // is_module
-            None,
-        );
-
-        let effective_user_code = add_esm_runtime_prelude(user_code);
-        let v8_source = match v8::String::new(tc, &effective_user_code) {
-            Some(s) => s,
-            None => {
-                clear_module_state();
-                return (
-                    1,
-                    None,
-                    Some(ExecutionError {
-                        error_type: "Error".into(),
-                        message: "user code string too large for V8".into(),
-                        stack: String::new(),
-                        code: None,
-                    }),
-                );
-            }
-        };
-
-        let mut source = v8::script_compiler::Source::new(v8_source, Some(&origin));
-        let module = match v8::script_compiler::compile_module(tc, &mut source) {
-            Some(m) => m,
-            None => {
-                clear_module_state();
-                return match tc.exception() {
-                    Some(e) => {
-                        let (c, err) = exception_to_result(tc, e);
-                        (c, None, Some(err))
-                    }
-                    None => (1, None, None),
-                };
-            }
-        };
-
-        // Store root module name for referrer lookup in resolve callback
-        MODULE_RESOLVE_STATE.with(|cell| {
-            if let Some(state) = cell.borrow_mut().as_mut() {
-                state
-                    .module_names
-                    .insert(module.get_identity_hash(), resource_name_str.to_string());
-            }
-        });
-
-        // Batch-prefetch static imports (BFS) to reduce IPC round-trips.
-        // Each level collects uncached specifiers and resolves+loads them in one batch call.
-        // The resolve callback then finds everything pre-cached during instantiation.
-        prefetch_module_imports(tc, bridge_ctx, module, resource_name_str);
-
-        // Instantiate (calls resolve callback for each import — mostly cache hits now)
-        let inst_result = module.instantiate_module(tc, module_resolve_callback);
-        if inst_result.is_none() {
-            clear_module_state();
-            return match tc.exception() {
-                Some(e) => {
-                    let (c, err) = exception_to_result(tc, e);
-                    (c, None, Some(err))
-                }
-                None => (1, None, None),
-            };
-        }
-
-        // Evaluate
-        let eval_result = module.evaluate(tc);
-        if eval_result.is_none() {
-            clear_module_state();
-            return match tc.exception() {
-                Some(e) => {
-                    let (c, err) = exception_to_result(tc, e);
-                    (c, None, Some(err))
-                }
-                None => (1, None, None),
-            };
-        }
-
-        // Always flush microtasks after module evaluation so that async
-        // operations started during evaluation (e.g. process.stdin listeners,
-        // timers) can create their pending bridge promises.  Without this,
-        // modules without top-level await exit immediately because the session
-        // event loop sees no pending work.
-        if eval_result.unwrap().is_promise() {
-            let promise = v8::Local::<v8::Promise>::try_from(eval_result.unwrap()).unwrap();
-            tc.perform_microtask_checkpoint();
-
-            if let Some(exception) = tc.exception() {
-                clear_module_state();
-                let (c, err) = exception_to_result(tc, exception);
-                return (c, None, Some(err));
-            }
-
-            if let Some(err) = take_unhandled_promise_rejection(tc) {
-                clear_module_state();
-                return (1, None, Some(err));
-            }
-
-            match promise.state() {
-                v8::PromiseState::Pending => {
-                    set_pending_module_evaluation(tc, module, promise);
-                    return (0, None, None);
-                }
-                v8::PromiseState::Rejected => {
-                    let rejection = promise.result(tc);
-                    clear_module_state();
-                    let (exit_code, err) = exception_to_result(tc, rejection);
-                    return (exit_code, None, Some(err));
-                }
-                v8::PromiseState::Fulfilled => {}
-            }
-        } else {
-            // Non-TLA module: still flush microtasks so bridge-initiated
-            // async work (stdin reads, handle registration) becomes visible
-            // to the session event loop.
-            tc.perform_microtask_checkpoint();
-
-            if let Some(exception) = tc.exception() {
-                clear_module_state();
-                let (c, err) = exception_to_result(tc, exception);
-                return (c, None, Some(err));
-            }
-
-            if let Some(err) = take_unhandled_promise_rejection(tc) {
-                clear_module_state();
-                return (1, None, Some(err));
-            }
-        }
-
-        // Check module status for errors (handles TLA rejection case)
-        if module.get_status() == v8::ModuleStatus::Errored {
-            let exc = module.get_exception();
-            clear_module_state();
-            let (exit_code, err) = exception_to_result(tc, exc);
-            return (exit_code, None, Some(err));
-        }
-
-        let exports_bytes = match serialize_module_exports(tc, module) {
-            Ok(bytes) => bytes,
-            Err(err) => {
-                clear_module_state();
-                return (1, None, Some(err));
-            }
-        };
-
-        // Keep module resolve state available after the initial module finishes.
-        // Dynamic imports can still fire later on the same session event loop.
-        (0, Some(exports_bytes), None)
-    }
-}
-
-/// Extract static import specifiers from a compiled module.
-///
-/// Returns a list of (specifier, referrer_name) pairs for all imports
-/// that are not already in the module cache.
-fn extract_uncached_imports(
-    scope: &mut v8::HandleScope,
-    module: v8::Local<v8::Module>,
-    referrer_name: &str,
-) -> Vec<(String, String)> {
-    let requests = module.get_module_requests();
-    let mut uncached = Vec::new();
-    for i in 0..requests.length() {
-        if uncached.len() >= MAX_MODULE_PREFETCH_BATCH_SIZE {
-            break;
-        }
-        let data = requests.get(scope, i).unwrap();
-        let request: v8::Local<v8::ModuleRequest> = data.cast();
-        let specifier = request.get_specifier().to_rust_string_lossy(scope);
-        let cache_key = module_request_cache_key(&specifier, referrer_name);
-
-        // Skip if already cached for this referrer-qualified request.
-        let already_cached = MODULE_RESOLVE_STATE.with(|cell| {
-            let borrow = cell.borrow();
-            let state = borrow.as_ref().unwrap();
-            state.module_cache.contains_key(&cache_key)
-        });
-        if !already_cached {
-            uncached.push((specifier, referrer_name.to_string()));
-        }
-    }
-    uncached
-}
-
-/// Batch-prefetch module imports via a single IPC round-trip.
-///
-/// Sends _batchResolveModules with all uncached specifiers, receives resolved
-/// paths + source code, compiles and caches each module, then recurses (BFS)
-/// for any newly discovered imports. Falls back silently if the host doesn't
-/// support batch resolution (the resolve callback handles individual resolution).
-fn prefetch_module_imports(
-    scope: &mut v8::HandleScope,
-    bridge_ctx: &BridgeCallContext,
-    root_module: v8::Local<v8::Module>,
-    root_name: &str,
-) {
-    // BFS queue: modules whose imports we need to prefetch
-    let mut pending: Vec<(v8::Global<v8::Module>, String)> =
-        vec![(v8::Global::new(scope, root_module), root_name.to_string())];
-    let mut visited_modules = 0usize;
-
-    while !pending.is_empty() && visited_modules < MAX_MODULE_PREFETCH_GRAPH_MODULES {
-        let remaining_modules = MAX_MODULE_PREFETCH_GRAPH_MODULES - visited_modules;
-        let current_len = pending.len().min(remaining_modules);
-        let current: Vec<_> = pending.drain(..current_len).collect();
-        visited_modules += current.len();
-
-        // Collect all uncached imports from pending modules
-        let mut batch: Vec<(String, String)> = Vec::new();
-        for (global_mod, referrer) in &current {
-            let local_mod = v8::Local::new(scope, global_mod);
-            let imports = extract_uncached_imports(scope, local_mod, referrer);
-            for (spec, ref_name) in imports {
-                if batch.len() >= MAX_MODULE_PREFETCH_BATCH_SIZE {
-                    break;
-                }
-                // Deduplicate within this batch by the full request identity.
-                if !batch.iter().any(|(s, r)| s == &spec && r == &ref_name) {
-                    batch.push((spec, ref_name));
-                }
-            }
-            if batch.len() >= MAX_MODULE_PREFETCH_BATCH_SIZE {
-                break;
-            }
-        }
-
-        if batch.is_empty() {
-            break;
-        }
-
-        // Send batch resolve+load via IPC
-        let results = match batch_resolve_via_ipc(scope, bridge_ctx, &batch) {
-            Some(r) => r,
-            None => break, // Host doesn't support batch or IPC error — fall back to individual
-        };
-
-        // Compile and cache each result, collect newly compiled modules for next BFS level
-        let mut next_pending: Vec<(v8::Global<v8::Module>, String)> = Vec::new();
-        for (i, result) in results.iter().enumerate() {
-            if i >= batch.len() {
-                break;
-            }
-            if let Some((resolved_path, source_code)) = result {
-                // Check cache again (another entry in this batch may have resolved the same path)
-                let already_cached = MODULE_RESOLVE_STATE.with(|cell| {
-                    let borrow = cell.borrow();
-                    let state = borrow.as_ref().unwrap();
-                    state.module_cache.contains_key(resolved_path)
-                });
-                if already_cached {
-                    continue;
-                }
-
-                let module_format = lookup_module_format_via_ipc(scope, bridge_ctx, resolved_path);
-                let effective_source =
-                    build_module_source(scope, source_code, resolved_path, module_format);
-
-                // Compile the module
-                let resource = match v8::String::new(scope, resolved_path) {
-                    Some(s) => s,
-                    None => continue,
-                };
-                let origin = v8::ScriptOrigin::new(
-                    scope,
-                    resource.into(),
-                    0,
-                    0,
-                    false,
-                    -1,
-                    None,
-                    false,
-                    false,
-                    true, // is_module
-                    None,
-                );
-                let v8_source = match v8::String::new(scope, &effective_source) {
-                    Some(s) => s,
-                    None => continue,
-                };
-                let mut compiled = v8::script_compiler::Source::new(v8_source, Some(&origin));
-                let module = match v8::script_compiler::compile_module(scope, &mut compiled) {
-                    Some(m) => m,
-                    None => continue,
-                };
-
-                // Cache the module
-                let global = v8::Global::new(scope, module);
-                if !cache_resolved_module(
-                    module,
-                    global,
-                    resolved_path.clone(),
-                    Some(module_request_cache_key(&batch[i].0, &batch[i].1)),
-                ) {
-                    return;
-                }
-
-                if visited_modules + next_pending.len() < MAX_MODULE_PREFETCH_GRAPH_MODULES {
-                    next_pending.push((v8::Global::new(scope, module), resolved_path.clone()));
-                }
-            }
-        }
-
-        pending = next_pending;
-    }
-}
-
-fn resolve_or_compile_module<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    specifier_str: &str,
-    referrer_name: &str,
-) -> Option<v8::Local<'s, v8::Module>> {
-    let request_cache_key = module_request_cache_key(specifier_str, referrer_name);
-
-    // Phase 1: Check cache by referrer-qualified request.
-    let cached_global = MODULE_RESOLVE_STATE.with(|cell| {
-        let borrow = cell.borrow();
-        let state = borrow.as_ref()?;
-        state.module_cache.get(&request_cache_key).cloned()
-    });
-    if let Some(cached) = cached_global {
-        return Some(v8::Local::new(scope, &cached));
-    }
-
-    // Phase 2: Get bridge context.
-    let bridge_ctx_ptr = MODULE_RESOLVE_STATE.with(|cell| {
-        let borrow = cell.borrow();
-        borrow.as_ref().map(|state| state.bridge_ctx)
-    });
-    let bridge_ctx_ptr = bridge_ctx_ptr?;
-    let ctx = unsafe { &*bridge_ctx_ptr };
-
-    // Phase 3: Resolve module path — directly on this thread via the session
-    // reader when present (skips the bridge `_resolveModule` round-trip), else IPC.
-    let trace = mod_trace_enabled();
-    let t = trace.then(Instant::now);
-    let direct_resolved = MODULE_RESOLVE_STATE.with(|cell| {
-        cell.borrow_mut()
-            .as_mut()
-            .and_then(|state| state.guest_reader.as_mut())
-            .and_then(|reader| reader.resolve_module(specifier_str, referrer_name))
-    });
-    let resolved_path = match direct_resolved {
-        Some(path) => path,
-        None => resolve_module_via_ipc(scope, ctx, specifier_str, referrer_name)?,
-    };
-    if let Some(t) = t {
-        record_mod(1, t.elapsed().as_nanos() as u64);
-    }
-
-    // Phase 4: Check cache by resolved path.
-    let cached_global = MODULE_RESOLVE_STATE.with(|cell| {
-        let borrow = cell.borrow();
-        let state = borrow.as_ref()?;
-        state.module_cache.get(&resolved_path).cloned()
-    });
-    if let Some(cached) = cached_global {
-        return Some(v8::Local::new(scope, &cached));
-    }
-
-    // Phase 5: Load the module source — directly via the session-thread reader
-    // when present (skips the ~139us bridge round-trip), else via the bridge IPC.
-    // guest_reader is None until the higher crate plumbs the reader down, so this
-    // is currently a no-op fall-through to the IPC path (zero behavior change).
-    let t = trace.then(Instant::now);
-    let direct_source = MODULE_RESOLVE_STATE.with(|cell| {
-        cell.borrow_mut()
-            .as_mut()
-            .and_then(|state| state.guest_reader.as_mut())
-            .and_then(|reader| reader.read_module_source(&resolved_path))
-    });
-    let raw_source = match direct_source {
-        Some(source) => source,
-        None => load_module_via_ipc(scope, ctx, &resolved_path)?,
-    };
-    if let Some(t) = t {
-        record_mod(2, t.elapsed().as_nanos() as u64);
-    }
-    let t = trace.then(Instant::now);
-    let module_format = lookup_module_format_via_ipc(scope, ctx, &resolved_path);
-    if let Some(t) = t {
-        record_mod(3, t.elapsed().as_nanos() as u64);
-    }
-    let source_code = build_module_source(scope, &raw_source, &resolved_path, module_format);
-
-    let resource = v8::String::new(scope, &resolved_path)?;
-    let origin = v8::ScriptOrigin::new(
-        scope,
-        resource.into(),
-        0,
-        0,
-        false,
-        -1,
-        None,
-        false,
-        false,
-        true,
-        None,
-    );
-    let v8_source = match v8::String::new(scope, &source_code) {
-        Some(s) => s,
-        None => {
-            throw_module_error(scope, "module source too large for V8");
-            return None;
-        }
-    };
-    let mut compiled = v8::script_compiler::Source::new(v8_source, Some(&origin));
-    let t = trace.then(Instant::now);
-    let module = v8::script_compiler::compile_module(scope, &mut compiled)?;
-    if let Some(t) = t {
-        record_mod(4, t.elapsed().as_nanos() as u64);
-    }
-    let global = v8::Global::new(scope, module);
-    if !cache_resolved_module(module, global, resolved_path, Some(request_cache_key)) {
-        throw_module_error(scope, "module resolution cache limit exceeded");
-        return None;
-    }
-
-    Some(module)
-}
-
-fn cache_resolved_module(
-    module: v8::Local<v8::Module>,
-    global: v8::Global<v8::Module>,
-    resolved_path: String,
-    request_cache_key: Option<String>,
-) -> bool {
-    MODULE_RESOLVE_STATE.with(|cell| {
-        let mut borrow = cell.borrow_mut();
-        let Some(state) = borrow.as_mut() else {
-            return true;
-        };
-
-        let identity_hash = module.get_identity_hash();
-        let new_module_name = !state.module_names.contains_key(&identity_hash);
-        let new_resolved_path = !state.module_cache.contains_key(&resolved_path);
-        let new_request_key = request_cache_key
-            .as_ref()
-            .is_some_and(|key| !state.module_cache.contains_key(key));
-
-        let next_module_count = state.module_names.len() + usize::from(new_module_name);
-        let next_cache_count = state.module_cache.len()
-            + usize::from(new_resolved_path)
-            + usize::from(new_request_key);
-        if next_module_count > MAX_MODULE_RESOLVE_MODULES
-            || next_cache_count > MAX_MODULE_RESOLVE_CACHE_ENTRIES
-        {
-            return false;
-        }
-
-        state
-            .module_names
-            .insert(identity_hash, resolved_path.clone());
-        state
-            .module_cache
-            .insert(resolved_path.clone(), global.clone());
-        if let Some(request_cache_key) = request_cache_key {
-            state.module_cache.insert(request_cache_key, global);
-        }
-        true
-    })
-}
-
-/// Callback invoked by V8 when `import.meta` is accessed in an ES module.
-/// Sets `import.meta.url` to a `file://` URL derived from the module's resource name.
-#[cfg_attr(test, allow(dead_code))]
-pub extern "C" fn import_meta_object_callback(
-    context: v8::Local<v8::Context>,
-    module: v8::Local<v8::Module>,
-    meta: v8::Local<v8::Object>,
-) {
-    let scope = &mut unsafe { v8::CallbackScope::new(context) };
-
-    // Look up the module's resource name from MODULE_RESOLVE_STATE.module_names
-    // which maps identity_hash → resource_name.
-    let identity_hash = module.get_identity_hash();
-    let url_str = MODULE_RESOLVE_STATE.with(|cell| {
-        let state_opt = cell.borrow();
-        if let Some(ref state) = *state_opt {
-            if let Some(name) = state.module_names.get(&identity_hash) {
-                let n = name.clone();
-                if n.starts_with("file://") {
-                    return Some(n);
-                } else if n.starts_with("/") {
-                    return Some(format!("file://{}", n));
-                } else {
-                    return Some(n);
-                }
-            }
-        }
-        None
-    });
-
-    if let Some(url) = url_str {
-        let key = v8::String::new(scope, "url").unwrap();
-        let value = v8::String::new(scope, &url).unwrap();
-        meta.set(scope, key.into(), value.into());
-    }
-}
-
-#[cfg_attr(test, allow(dead_code))]
-fn dynamic_import_namespace_callback(
-    _scope: &mut v8::HandleScope,
-    args: v8::FunctionCallbackArguments,
-    mut rv: v8::ReturnValue,
-) {
-    rv.set(args.data());
-}
-
-#[cfg_attr(test, allow(dead_code))]
-fn dynamic_import_reject_callback(
-    scope: &mut v8::HandleScope,
-    args: v8::FunctionCallbackArguments,
-    mut rv: v8::ReturnValue,
-) {
-    let reason = args.get(0);
-    scope.throw_exception(reason);
-    rv.set(reason);
-}
-
-#[cfg_attr(test, allow(dead_code))]
-pub fn dynamic_import_callback<'a>(
-    scope: &mut v8::HandleScope<'a>,
-    _host_defined_options: v8::Local<'a, v8::Data>,
-    resource_name: v8::Local<'a, v8::Value>,
-    specifier: v8::Local<'a, v8::String>,
-    _import_attributes: v8::Local<'a, v8::FixedArray>,
-) -> Option<v8::Local<'a, v8::Promise>> {
-    let tc = &mut v8::TryCatch::new(scope);
-
-    let specifier_str = specifier.to_rust_string_lossy(tc);
-    let referrer_name = resolve_dynamic_import_referrer_name(tc, resource_name);
-    let module = match resolve_or_compile_module(tc, &specifier_str, &referrer_name) {
-        Some(module) => module,
-        None => {
-            let reason = if let Some(exception) = tc.exception() {
-                exception
-            } else {
-                let msg = v8::String::new(tc, "Cannot dynamically import module").unwrap();
-                v8::Exception::error(tc, msg)
-            };
-            return rejected_promise(tc, reason);
-        }
-    };
-
-    if module.get_status() == v8::ModuleStatus::Uninstantiated
-        && module
-            .instantiate_module(tc, module_resolve_callback)
-            .is_none()
-    {
-        let reason = if let Some(exception) = tc.exception() {
-            exception
-        } else {
-            let msg =
-                v8::String::new(tc, "Cannot instantiate dynamically imported module").unwrap();
-            v8::Exception::error(tc, msg)
-        };
-        return rejected_promise(tc, reason);
-    }
-
-    if module.get_status() == v8::ModuleStatus::Errored {
-        let exception = v8::Global::new(tc, module.get_exception());
-        let exception = v8::Local::new(tc, &exception);
-        return rejected_promise(tc, exception);
-    }
-
-    if module.get_status() == v8::ModuleStatus::Evaluated {
-        let namespace = v8::Global::new(tc, module.get_module_namespace());
-        let namespace = v8::Local::new(tc, &namespace);
-        return resolved_promise(tc, namespace);
-    }
-
-    let eval_result = match module.evaluate(tc) {
-        Some(result) => result,
-        None => {
-            let reason = if let Some(exception) = tc.exception() {
-                exception
-            } else {
-                let msg =
-                    v8::String::new(tc, "Cannot evaluate dynamically imported module").unwrap();
-                v8::Exception::error(tc, msg)
-            };
-            return rejected_promise(tc, reason);
-        }
-    };
-
-    let namespace = v8::Global::new(tc, module.get_module_namespace());
-    let namespace = v8::Local::new(tc, &namespace);
-    if eval_result.is_promise() {
-        let eval_promise = v8::Local::<v8::Promise>::try_from(eval_result).ok()?;
-        let on_fulfilled = v8::FunctionTemplate::builder(dynamic_import_namespace_callback)
-            .data(namespace)
-            .build(tc)
-            .get_function(tc)?;
-        let on_rejected = v8::FunctionTemplate::builder(dynamic_import_reject_callback)
-            .build(tc)
-            .get_function(tc)?;
-        return eval_promise.then2(tc, on_fulfilled, on_rejected);
-    }
-
-    resolved_promise(tc, namespace)
-}
-
-fn resolve_dynamic_import_referrer_name(
-    scope: &mut v8::HandleScope,
-    resource_name: v8::Local<v8::Value>,
-) -> String {
-    let candidate = resource_name.to_rust_string_lossy(scope);
-    if candidate.starts_with('/') || candidate.starts_with("file://") {
-        return candidate;
-    }
-
-    let context = scope.get_current_context();
-    let global = context.global(scope);
-    let key = match v8::String::new(scope, "_currentModule") {
-        Some(key) => key,
-        None => return candidate,
-    };
-    let current_module = match global.get(scope, key.into()) {
-        Some(value) if value.is_object() => value,
-        _ => return candidate,
-    };
-    let current_module = match v8::Local::<v8::Object>::try_from(current_module) {
-        Ok(object) => object,
-        Err(_) => return candidate,
-    };
-    let filename_key = match v8::String::new(scope, "filename") {
-        Some(key) => key,
-        None => return candidate,
-    };
-    match current_module.get(scope, filename_key.into()) {
-        Some(value) if value.is_string() => value.to_rust_string_lossy(scope),
-        _ => candidate,
-    }
-}
-
-#[cfg_attr(test, allow(dead_code))]
-fn resolved_promise<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    value: v8::Local<'s, v8::Value>,
-) -> Option<v8::Local<'s, v8::Promise>> {
-    let resolver = v8::PromiseResolver::new(scope)?;
-    resolver.resolve(scope, value);
-    Some(resolver.get_promise(scope))
-}
-
-#[cfg_attr(test, allow(dead_code))]
-fn rejected_promise<'s>(
-    scope: &mut v8::HandleScope<'s>,
-    reason: v8::Local<'s, v8::Value>,
-) -> Option<v8::Local<'s, v8::Promise>> {
-    let resolver = v8::PromiseResolver::new(scope)?;
-    resolver.reject(scope, reason);
-    Some(resolver.get_promise(scope))
-}
-
-/// Send _batchResolveModules via sync-blocking IPC.
-///
-/// Sends an array of {specifier, referrer} pairs, receives an array of
-/// {resolved, source} results (null entries for unresolvable modules).
-/// Returns None if the host doesn't support batch resolution or on IPC error.
-fn batch_resolve_via_ipc(
-    scope: &mut v8::HandleScope,
-    ctx: &BridgeCallContext,
-    batch: &[(String, String)],
-) -> Option<Vec<Option<(String, String)>>> {
-    // Build V8 array of [specifier, referrer] pairs, wrapped in an outer array
-    // so the host handler receives the batch as a single argument (args are spread).
-    let inner = v8::Array::new(scope, batch.len() as i32);
-    for (i, (specifier, referrer)) in batch.iter().enumerate() {
-        let pair = v8::Array::new(scope, 2);
-        let spec_v8 = v8::String::new(scope, specifier)?;
-        let ref_v8 = v8::String::new(scope, referrer)?;
-        pair.set_index(scope, 0, spec_v8.into());
-        pair.set_index(scope, 1, ref_v8.into());
-        inner.set_index(scope, i as u32, pair.into());
-    }
-    let outer = v8::Array::new(scope, 1);
-    outer.set_index(scope, 0, inner.into());
-    let args = serialize_v8_value(scope, outer.into()).ok()?;
-
-    let response = ctx.sync_call("_batchResolveModules", args).ok()??;
-    if response.len() > MAX_MODULE_BATCH_RESOLVE_RESPONSE_BYTES {
-        return None;
-    }
-    let val = deserialize_v8_value(scope, &response).ok()?;
-
-    // Parse response: array of {resolved, source} or null
-    let result_arr = v8::Local::<v8::Array>::try_from(val).ok()?;
-    let mut results = Vec::with_capacity(batch.len());
-    for i in 0..result_arr.length().min(batch.len() as u32) {
-        let entry = result_arr.get_index(scope, i);
-        match entry {
-            Some(v) if !v.is_null() && !v.is_undefined() => {
-                let obj = v8::Local::<v8::Object>::try_from(v).ok();
-                if let Some(obj) = obj {
-                    let r_key = v8::String::new(scope, "resolved").unwrap();
-                    let s_key = v8::String::new(scope, "source").unwrap();
-                    let resolved = obj
-                        .get(scope, r_key.into())
-                        .filter(|v| v.is_string())
-                        .map(|v| v.to_rust_string_lossy(scope));
-                    let source = obj
-                        .get(scope, s_key.into())
-                        .filter(|v| v.is_string())
-                        .map(|v| v.to_rust_string_lossy(scope));
-                    match (resolved, source) {
-                        (Some(r), Some(s)) => results.push(Some((r, s))),
-                        _ => results.push(None),
-                    }
-                } else {
-                    results.push(None);
-                }
-            }
-            _ => results.push(None),
-        }
-    }
-    Some(results)
-}
-
-/// V8 ResolveModuleCallback — called during instantiate_module for each import.
-///
-/// Sends sync-blocking IPC calls to resolve specifiers and load source code,
-/// compiles resolved modules, and caches them.
-fn module_resolve_callback<'a>(
-    context: v8::Local<'a, v8::Context>,
-    specifier: v8::Local<'a, v8::String>,
-    _import_attributes: v8::Local<'a, v8::FixedArray>,
-    referrer: v8::Local<'a, v8::Module>,
-) -> Option<v8::Local<'a, v8::Module>> {
-    // SAFETY: CallbackScope can be constructed from Local<Context> within a V8 callback
-    let scope = &mut unsafe { v8::CallbackScope::new(context) };
-
-    let specifier_str = specifier.to_rust_string_lossy(scope);
-    let referrer_hash = referrer.get_identity_hash();
-
-    let referrer_name = MODULE_RESOLVE_STATE.with(|cell| {
-        let borrow = cell.borrow();
-        let state = borrow.as_ref()?;
-        state.module_names.get(&referrer_hash).cloned()
-    });
-    let referrer_name = referrer_name?;
-    resolve_or_compile_module(scope, &specifier_str, &referrer_name)
-}
-
-/// Send _resolveModule(specifier, referrer_path) via sync-blocking IPC.
-fn resolve_module_via_ipc(
-    scope: &mut v8::HandleScope,
-    ctx: &BridgeCallContext,
-    specifier: &str,
-    referrer: &str,
-) -> Option<String> {
-    // Serialize [specifier, referrer] as V8 Array
-    let spec_v8 = v8::String::new(scope, specifier).unwrap();
-    let ref_v8 = v8::String::new(scope, referrer).unwrap();
-    let arr = v8::Array::new(scope, 2);
-    arr.set_index(scope, 0, spec_v8.into());
-    arr.set_index(scope, 1, ref_v8.into());
-    let args = match serialize_v8_value(scope, arr.into()) {
-        Ok(bytes) => bytes,
-        Err(e) => {
-            throw_module_error(scope, &format!("_resolveModule serialize error: {}", e));
-            return None;
-        }
-    };
-
-    match ctx.sync_call("_resolveModule", args) {
-        Ok(Some(bytes)) => match deserialize_v8_value(scope, &bytes) {
-            Ok(val) => {
-                if val.is_string() {
-                    Some(val.to_rust_string_lossy(scope))
-                } else {
-                    // A non-string (null) return means the host resolver found no
-                    // match — i.e. the module could not be located, NOT a type error.
-                    // Name the importer so node_modules layout/discovery problems are
-                    // diagnosable (e.g. a bare package installed off the importer's
-                    // ancestor chain), since that is the common real cause here.
-                    //
-                    // Call out the host-mounted node_modules case too: a host_dir
-                    // mount (what NodeRuntime `nodeModules` projects) confines reads
-                    // to the mount root, so a package symlinked OUT of the mounted
-                    // tree (pnpm/yarn workspace or `file:` deps that link to the
-                    // workspace root or an external store) cannot be followed and
-                    // surfaces here as not-found.
-                    throw_module_error(
-                        scope,
-                        &format!(
-                            "Cannot resolve module '{specifier}' (imported from \
-                             '{referrer}'): not found. For a bare package, ensure it is \
-                             installed in a node_modules directory on an ancestor of the \
-                             importer (or bundle the entrypoint). If you mounted a host \
-                             node_modules, point it at a directory that contains every \
-                             symlink target (e.g. the workspace root): symlinks that \
-                             escape the mount root are not followed."
-                        ),
-                    );
-                    None
-                }
-            }
-            Err(e) => {
-                throw_module_error(scope, &format!("_resolveModule decode error: {}", e));
-                None
-            }
-        },
-        Ok(None) => {
-            throw_module_error(scope, &format!("Cannot resolve module '{}'", specifier));
-            None
-        }
-        Err(e) => {
-            throw_module_error(scope, &e);
-            None
-        }
-    }
-}
-
-/// Send _loadFile(resolved_path) via sync-blocking IPC.
-fn load_module_via_ipc(
-    scope: &mut v8::HandleScope,
-    ctx: &BridgeCallContext,
-    resolved_path: &str,
-) -> Option<String> {
-    // Serialize [resolved_path] as V8 Array
-    let path_v8 = v8::String::new(scope, resolved_path).unwrap();
-    let arr = v8::Array::new(scope, 1);
-    arr.set_index(scope, 0, path_v8.into());
-    let args = match serialize_v8_value(scope, arr.into()) {
-        Ok(bytes) => bytes,
-        Err(e) => {
-            throw_module_error(scope, &format!("_loadFile serialize error: {}", e));
-            return None;
-        }
-    };
-
-    let ipc_result = ctx.sync_call("_loadFile", args);
-    match ipc_result {
-        Ok(Some(bytes)) => match deserialize_v8_value(scope, &bytes) {
-            Ok(val) => {
-                if val.is_string() {
-                    Some(val.to_rust_string_lossy(scope))
-                } else {
-                    throw_module_error(
-                        scope,
-                        &format!("_loadFile returned non-string for '{}'", resolved_path),
-                    );
-                    None
-                }
-            }
-            Err(e) => {
-                throw_module_error(scope, &format!("_loadFile decode error: {}", e));
-                None
-            }
-        },
-        Ok(None) => {
-            throw_module_error(scope, &format!("Cannot load module '{}'", resolved_path));
-            None
-        }
-        Err(e) => {
-            throw_module_error(scope, &e);
-            None
-        }
-    }
-}
-
-#[derive(Clone, Copy, Debug, PartialEq, Eq)]
-enum ResolvedModuleFormat {
-    Module,
-    Commonjs,
-    Json,
-}
-
-fn lookup_module_format_via_ipc(
-    scope: &mut v8::HandleScope,
-    ctx: &BridgeCallContext,
-    resolved_path: &str,
-) -> Option<ResolvedModuleFormat> {
-    let path_v8 = v8::String::new(scope, resolved_path).unwrap();
-    let arr = v8::Array::new(scope, 1);
-    arr.set_index(scope, 0, path_v8.into());
-    let args = match serialize_v8_value(scope, arr.into()) {
-        Ok(bytes) => bytes,
-        Err(e) => {
-            throw_module_error(scope, &format!("_moduleFormat serialize error: {}", e));
-            return None;
-        }
-    };
-
-    match ctx.sync_call("_moduleFormat", args) {
-        Ok(Some(bytes)) => match deserialize_v8_value(scope, &bytes) {
-            Ok(val) if val.is_string() => match val.to_rust_string_lossy(scope).as_str() {
-                "module" => Some(ResolvedModuleFormat::Module),
-                "commonjs" => Some(ResolvedModuleFormat::Commonjs),
-                "json" => Some(ResolvedModuleFormat::Json),
-                _ => None,
-            },
-            Ok(val) if val.is_null_or_undefined() => None,
-            Ok(_) => {
-                throw_module_error(
-                    scope,
-                    &format!("_moduleFormat returned non-string for '{}'", resolved_path),
-                );
-                None
-            }
-            Err(e) => {
-                throw_module_error(scope, &format!("_moduleFormat decode error: {}", e));
-                None
-            }
-        },
-        Ok(None) => None,
-        Err(e) => {
-            throw_module_error(scope, &e);
-            None
-        }
-    }
-}
-
-/// Throw a V8 exception for module resolution errors.
-fn throw_module_error(scope: &mut v8::HandleScope, message: &str) {
-    let msg = v8::String::new(scope, message).unwrap();
-    let exc = v8::Exception::error(scope, msg);
-    scope.throw_exception(exc);
-}
-
-/// Detect if source code is likely CommonJS (not ESM).
-/// Checks for module.exports, exports.X, or require() patterns without ESM import/export.
-/// Node strips a leading shebang (`#!`) line before parsing a module. The guest
-/// loader must match, or modules shipped as executables (CLI/SDK bundles that
-/// begin with `#!/usr/bin/env node`) fail with "Invalid or unexpected token" on
-/// the `#`. The newline is preserved so line numbers in stack traces stay aligned.
-fn strip_leading_shebang(source: &str) -> &str {
-    match source.strip_prefix("#!") {
-        Some(rest) => match rest.find('\n') {
-            Some(idx) => &rest[idx..],
-            None => "",
-        },
-        None => source,
-    }
-}
-
-fn build_module_source(
-    scope: &mut v8::HandleScope,
-    raw_source: &str,
-    resolved_path: &str,
-    module_format: Option<ResolvedModuleFormat>,
-) -> String {
-    let raw_source = strip_leading_shebang(raw_source);
-    let normalized_path = resolved_path.to_ascii_lowercase();
-    if normalized_path.ends_with(".json") || module_format == Some(ResolvedModuleFormat::Json) {
-        return build_json_esm_shim(resolved_path);
-    }
-    if (module_format == Some(ResolvedModuleFormat::Commonjs)
-        && !has_probable_esm_syntax(raw_source))
-        || is_likely_cjs(raw_source, resolved_path, module_format)
-    {
-        return build_cjs_esm_shim(scope, raw_source, resolved_path);
-    }
-    add_esm_runtime_prelude(raw_source)
-}
-
-fn build_json_esm_shim(resolved_path: &str) -> String {
-    format!(
-        "const _jsonModule = globalThis._requireFrom({}, \"/\");\nexport default _jsonModule;\n",
-        quoted_module_path(resolved_path)
-    )
-}
-
-fn build_cjs_esm_shim(
-    scope: &mut v8::HandleScope,
-    raw_source: &str,
-    resolved_path: &str,
-) -> String {
-    // Static scanning only sees exports assigned with literal `exports.X =` /
-    // `Object.defineProperty(exports, "X", ...)` patterns in this file. It misses names introduced at
-    // runtime, e.g. tsc's `__exportStar(require("./sub"), exports)` re-export helper (used by
-    // `@sinclair/typebox/compiler` to surface `TypeCompiler`) or `Object.assign(exports, ...)`. When
-    // such a dynamic re-export pattern is present the static set is provably incomplete, so fall back
-    // to runtime extraction (require the module and enumerate the real `Object.keys(module.exports)`)
-    // and union the two. Only do this when static finds nothing or a dynamic re-export is detected:
-    // eagerly requiring every CJS module would add avoidable work and trigger side effects earlier
-    // than intended (see crates/execution/CLAUDE.md). Static still back-fills names that a
-    // partially-evaluated circular require may not have added to the exports object yet.
-    let mut names = extract_cjs_export_names(raw_source)
-        .into_iter()
-        .collect::<HashSet<_>>();
-    if names.is_empty() || source_has_dynamic_cjs_reexports(raw_source) {
-        names.extend(extract_runtime_cjs_export_names(scope, resolved_path));
-    }
-
-    let mut exports = names.into_iter().collect::<Vec<_>>();
-    exports.sort();
-    exports.truncate(MAX_CJS_NAMED_EXPORTS);
-
-    let mut shim = format!(
-        "const _cjsModule = globalThis._requireFrom({}, \"/\");\nexport default _cjsModule;\n",
-        quoted_module_path(resolved_path)
-    );
-    for name in exports {
-        shim.push_str(&format!(
-            "export const {} = _cjsModule[\"{}\"];\n",
-            name, name
-        ));
-    }
-    shim
-}
-
-/// Runtime fallback for CJS named export extraction. Evaluates the module via
-/// `globalThis._requireFrom` and enumerates `Object.keys(module.exports)` so
-/// dynamically computed exports still support named ESM imports. A thread-local
-/// in-progress set guards against pathological reentrancy: if shim construction
-/// for a path somehow re-enters extraction for the same path, the inner call
-/// returns an empty list instead of recursing.
-fn extract_runtime_cjs_export_names(
-    scope: &mut v8::HandleScope,
-    resolved_path: &str,
-) -> Vec<String> {
-    let already_in_progress = CJS_RUNTIME_EXTRACTION_IN_PROGRESS.with(|cell| {
-        let mut in_progress = cell.borrow_mut();
-        !in_progress.insert(resolved_path.to_string())
-    });
-    if already_in_progress {
-        return Vec::new();
-    }
-    let names = extract_runtime_cjs_export_names_inner(scope, resolved_path);
-    CJS_RUNTIME_EXTRACTION_IN_PROGRESS.with(|cell| {
-        cell.borrow_mut().remove(resolved_path);
-    });
-    names
-}
-
-fn extract_runtime_cjs_export_names_inner(
-    scope: &mut v8::HandleScope,
-    resolved_path: &str,
-) -> Vec<String> {
-    let tc = &mut v8::TryCatch::new(scope);
-    let context = tc.get_current_context();
-    let global = context.global(tc);
-
-    let require_key = match v8::String::new(tc, "_requireFrom") {
-        Some(key) => key,
-        None => return Vec::new(),
-    };
-    let require_fn = match global
-        .get(tc, require_key.into())
-        .and_then(|value| v8::Local::<v8::Function>::try_from(value).ok())
-    {
-        Some(function) => function,
-        None => return Vec::new(),
-    };
-
-    let module_path = match v8::String::new(tc, resolved_path) {
-        Some(path) => path,
-        None => return Vec::new(),
-    };
-    let root = match v8::String::new(tc, "/") {
-        Some(path) => path,
-        None => return Vec::new(),
-    };
-    let require_args = [module_path.into(), root.into()];
-    let receiver = v8::undefined(tc).into();
-    let required_module = match require_fn.call(tc, receiver, &require_args) {
-        Some(value) => value,
-        None => return Vec::new(),
-    };
-    if required_module.is_null_or_undefined() || !required_module.is_object() {
-        return Vec::new();
-    }
-
-    let object_key = match v8::String::new(tc, "Object") {
-        Some(key) => key,
-        None => return Vec::new(),
-    };
-    let object_ctor = match global
-        .get(tc, object_key.into())
-        .and_then(|value| v8::Local::<v8::Object>::try_from(value).ok())
-    {
-        Some(object) => object,
-        None => return Vec::new(),
-    };
-
-    let keys_key = match v8::String::new(tc, "keys") {
-        Some(key) => key,
-        None => return Vec::new(),
-    };
-    let keys_fn = match object_ctor
-        .get(tc, keys_key.into())
-        .and_then(|value| v8::Local::<v8::Function>::try_from(value).ok())
-    {
-        Some(function) => function,
-        None => return Vec::new(),
-    };
-
-    let keys_args = [required_module];
-    let keys = match keys_fn
-        .call(tc, object_ctor.into(), &keys_args)
-        .and_then(|value| v8::Local::<v8::Array>::try_from(value).ok())
-    {
-        Some(array) => array,
-        None => return Vec::new(),
-    };
-
-    let mut names = Vec::new();
-    for index in 0..keys.length() {
-        if names.len() >= MAX_CJS_NAMED_EXPORTS {
-            break;
-        }
-        let Some(value) = keys.get_index(tc, index) else {
-            continue;
-        };
-        if !value.is_string() {
-            continue;
-        }
-        let name = value.to_rust_string_lossy(tc);
-        if name.len() > MAX_CJS_RUNTIME_EXPORT_NAME_LEN {
-            continue;
-        }
-        if is_valid_js_ident(&name) && name != "default" && name != "__esModule" {
-            names.push(name);
-        }
-    }
-    names.sort();
-    names.dedup();
-    names
-}
-
-fn quoted_module_path(resolved_path: &str) -> String {
-    format!(
-        "\"{}\"",
-        resolved_path.replace('\\', "\\\\").replace('"', "\\\"")
-    )
-}
-
-fn is_likely_cjs(
-    source: &str,
-    resolved_path: &str,
-    module_format: Option<ResolvedModuleFormat>,
-) -> bool {
-    let normalized_path = resolved_path.to_ascii_lowercase();
-    if normalized_path.ends_with(".mjs") || normalized_path.ends_with(".mts") {
-        return false;
-    }
-    if normalized_path.ends_with(".cjs") || normalized_path.ends_with(".cts") {
-        return true;
-    }
-    if module_format == Some(ResolvedModuleFormat::Module) {
-        return false;
-    }
-    if has_probable_esm_syntax(source) {
-        return false;
-    }
-    // CJS indicators
-    source.contains("module.exports") || source.contains("exports.") || source.contains("require(")
-}
-
-fn has_probable_esm_syntax(source: &str) -> bool {
-    #[derive(Clone, Copy, PartialEq, Eq)]
-    enum ScanState {
-        Code,
-        LineComment,
-        BlockComment,
-        SingleQuote,
-        DoubleQuote,
-        Template,
-    }
-
-    let bytes = source.as_bytes();
-    let mut state = ScanState::Code;
-    let mut index = 0usize;
-    let mut brace_depth = 0u32;
-    let mut paren_depth = 0u32;
-    let mut bracket_depth = 0u32;
-
-    while index < bytes.len() {
-        let byte = bytes[index];
-        let next = bytes.get(index + 1).copied();
-
-        match state {
-            ScanState::Code => {
-                if index == 0 && byte == b'#' && next == Some(b'!') {
-                    state = ScanState::LineComment;
-                    index += 2;
-                    continue;
-                }
-                if byte == b'/' && next == Some(b'/') {
-                    state = ScanState::LineComment;
-                    index += 2;
-                    continue;
-                }
-                if byte == b'/' && next == Some(b'*') {
-                    state = ScanState::BlockComment;
-                    index += 2;
-                    continue;
-                }
-                if byte == b'\'' {
-                    state = ScanState::SingleQuote;
-                    index += 1;
-                    continue;
-                }
-                if byte == b'"' {
-                    state = ScanState::DoubleQuote;
-                    index += 1;
-                    continue;
-                }
-                if byte == b'`' {
-                    state = ScanState::Template;
-                    index += 1;
-                    continue;
-                }
-
-                match byte {
-                    b'{' => brace_depth = brace_depth.saturating_add(1),
-                    b'}' => brace_depth = brace_depth.saturating_sub(1),
-                    b'(' => paren_depth = paren_depth.saturating_add(1),
-                    b')' => paren_depth = paren_depth.saturating_sub(1),
-                    b'[' => bracket_depth = bracket_depth.saturating_add(1),
-                    b']' => bracket_depth = bracket_depth.saturating_sub(1),
-                    _ => {}
-                }
-
-                if brace_depth == 0
-                    && paren_depth == 0
-                    && bracket_depth == 0
-                    && is_js_ident_start(byte)
-                {
-                    let start = index;
-                    index += 1;
-                    while index < bytes.len() && is_js_ident_continue(bytes[index]) {
-                        index += 1;
-                    }
-
-                    let token = &source[start..index];
-                    if token == "export" {
-                        return true;
-                    }
-                    if token == "import" {
-                        let mut cursor = index;
-                        while cursor < bytes.len() && bytes[cursor].is_ascii_whitespace() {
-                            cursor += 1;
-                        }
-                        if bytes.get(cursor).copied() != Some(b'(') {
-                            return true;
-                        }
-                    }
-
-                    continue;
-                }
-
-                index += 1;
-            }
-            ScanState::LineComment => {
-                if byte == b'\n' {
-                    state = ScanState::Code;
-                }
-                index += 1;
-            }
-            ScanState::BlockComment => {
-                if byte == b'*' && next == Some(b'/') {
-                    state = ScanState::Code;
-                    index += 2;
-                } else {
-                    index += 1;
-                }
-            }
-            ScanState::SingleQuote => {
-                if byte == b'\\' {
-                    index += 2;
-                } else if byte == b'\'' {
-                    state = ScanState::Code;
-                    index += 1;
-                } else {
-                    index += 1;
-                }
-            }
-            ScanState::DoubleQuote => {
-                if byte == b'\\' {
-                    index += 2;
-                } else if byte == b'"' {
-                    state = ScanState::Code;
-                    index += 1;
-                } else {
-                    index += 1;
-                }
-            }
-            ScanState::Template => {
-                if byte == b'\\' {
-                    index += 2;
-                } else if byte == b'`' {
-                    state = ScanState::Code;
-                    index += 1;
-                } else {
-                    index += 1;
-                }
-            }
-        }
-    }
-
-    false
-}
-
-fn is_js_ident_start(byte: u8) -> bool {
-    byte.is_ascii_alphabetic() || byte == b'_' || byte == b'$'
-}
-
-fn is_js_ident_continue(byte: u8) -> bool {
-    is_js_ident_start(byte) || byte.is_ascii_digit()
-}
-
-/// Extract named export names from CJS source by scanning for `exports.X =` and
-/// `module.exports = { X: ... }` patterns. Returns a list of valid JS identifiers.
-fn extract_cjs_export_names(source: &str) -> Vec<String> {
-    let mut names = HashSet::new();
-
-    collect_cjs_property_assignment_names(source, &mut names);
-    collect_cjs_define_property_names(source, &mut names);
-    collect_cjs_object_literal_export_names(source, &mut names);
-
-    let mut result: Vec<String> = names.into_iter().collect();
-    result.sort();
-    result
-}
-
-fn collect_cjs_property_assignment_names(
-    source: &str,
-    names: &mut std::collections::HashSet<String>,
-) {
-    for prefix in ["exports.", "module.exports."] {
-        let mut cursor = 0usize;
-        while names.len() < MAX_CJS_NAMED_EXPORTS {
-            let Some(start) = find_code_pattern(source, prefix, cursor) else {
-                break;
-            };
-            let name_start = start + prefix.len();
-            let mut index = name_start;
-            while source
-                .as_bytes()
-                .get(index)
-                .is_some_and(|byte| is_js_ident_continue(*byte))
-            {
-                index += 1;
-            }
-            let name = &source[name_start..index];
-            let next = skip_ascii_whitespace(source, index);
-            if source.as_bytes().get(next) == Some(&b'=')
-                && is_valid_js_ident(name)
-                && name != "default"
-                && name != "__esModule"
-            {
-                names.insert(name.to_string());
-            }
-            cursor = index.max(start + prefix.len());
-        }
-    }
-}
-
-fn collect_cjs_define_property_names(source: &str, names: &mut std::collections::HashSet<String>) {
-    let mut cursor = 0usize;
-    while names.len() < MAX_CJS_NAMED_EXPORTS {
-        let Some(start) = find_code_pattern(source, "Object.defineProperty", cursor) else {
-            break;
-        };
-        let mut index = skip_ascii_whitespace(source, start + "Object.defineProperty".len());
-        if source.as_bytes().get(index) != Some(&b'(') {
-            cursor = start + "Object.defineProperty".len();
-            continue;
-        }
-        index = skip_ascii_whitespace(source, index + 1);
-        if !source.as_bytes()[index..].starts_with(b"exports") {
-            cursor = start + "Object.defineProperty".len();
-            continue;
-        }
-        index = skip_ascii_whitespace(source, index + "exports".len());
-        if source.as_bytes().get(index) != Some(&b',') {
-            cursor = start + "Object.defineProperty".len();
-            continue;
-        }
-        index = skip_ascii_whitespace(source, index + 1);
-        if let Some((name, end)) = parse_quoted_string_literal(source, index) {
-            if is_valid_js_ident(name) && name != "default" && name != "__esModule" {
-                names.insert(name.to_string());
-                cursor = end;
-                continue;
-            }
-        }
-        cursor = start + "Object.defineProperty".len();
-    }
-}
-
-fn collect_cjs_object_literal_export_names(
-    source: &str,
-    names: &mut std::collections::HashSet<String>,
-) {
-    collect_module_exports_assignments(source, names);
-    collect_object_assign_module_exports(source, names);
-}
-
-fn collect_module_exports_assignments(source: &str, names: &mut std::collections::HashSet<String>) {
-    let mut cursor = 0usize;
-    while names.len() < MAX_CJS_NAMED_EXPORTS {
-        let Some(start) = find_code_pattern(source, "module.exports", cursor) else {
-            break;
-        };
-        let mut index = skip_ascii_whitespace(source, start + "module.exports".len());
-        if source.as_bytes().get(index) != Some(&b'=') {
-            cursor = start + "module.exports".len();
-            continue;
-        }
-        index = skip_ascii_whitespace(source, index + 1);
-        cursor = if source.as_bytes().get(index) == Some(&b'{') {
-            collect_object_literal_keys(source, index, names)
-        } else {
-            index.saturating_add(1)
-        };
-    }
-}
-
-fn collect_object_assign_module_exports(
-    source: &str,
-    names: &mut std::collections::HashSet<String>,
-) {
-    let mut cursor = 0usize;
-    while names.len() < MAX_CJS_NAMED_EXPORTS {
-        let Some(start) = find_code_pattern(source, "Object.assign", cursor) else {
-            break;
-        };
-        let mut index = skip_ascii_whitespace(source, start + "Object.assign".len());
-        if source.as_bytes().get(index) != Some(&b'(') {
-            cursor = start + "Object.assign".len();
-            continue;
-        }
-        index = skip_ascii_whitespace(source, index + 1);
-        if !source.as_bytes()[index..].starts_with(b"module.exports") {
-            cursor = start + "Object.assign".len();
-            continue;
-        }
-        index = skip_ascii_whitespace(source, index + "module.exports".len());
-        if source.as_bytes().get(index) != Some(&b',') {
-            cursor = start + "Object.assign".len();
-            continue;
-        }
-        index = skip_ascii_whitespace(source, index + 1);
-        cursor = if source.as_bytes().get(index) == Some(&b'{') {
-            collect_object_literal_keys(source, index, names)
-        } else {
-            index.saturating_add(1)
-        };
-    }
-}
-
-#[derive(Clone, Copy, PartialEq, Eq)]
-enum CjsScanState {
-    Code,
-    LineComment,
-    BlockComment,
-    SingleQuote,
-    DoubleQuote,
-    Template,
-    Regex,
-    RegexClass,
-}
-
-fn find_code_pattern(source: &str, pattern: &str, cursor: usize) -> Option<usize> {
-    let bytes = source.as_bytes();
-    let mut state = CjsScanState::Code;
-    let mut index = cursor;
-    while index < bytes.len() {
-        let byte = bytes[index];
-        let next = bytes.get(index + 1).copied();
-
-        match state {
-            CjsScanState::Code => {
-                if byte == b'/' && next == Some(b'/') {
-                    state = CjsScanState::LineComment;
-                    index += 2;
-                    continue;
-                }
-                if byte == b'/' && next == Some(b'*') {
-                    state = CjsScanState::BlockComment;
-                    index += 2;
-                    continue;
-                }
-                if byte == b'\'' {
-                    state = CjsScanState::SingleQuote;
-                    index += 1;
-                    continue;
-                }
-                if byte == b'"' {
-                    state = CjsScanState::DoubleQuote;
-                    index += 1;
-                    continue;
-                }
-                if byte == b'`' {
-                    state = CjsScanState::Template;
-                    index += 1;
-                    continue;
-                }
-                if byte == b'/' && slash_starts_regex_literal(source, index) {
-                    state = CjsScanState::Regex;
-                    index += 1;
-                    continue;
-                }
-                if bytes[index..].starts_with(pattern.as_bytes())
-                    && has_code_pattern_boundary(source, index, pattern)
-                {
-                    return Some(index);
-                }
-                index += 1;
-            }
-            CjsScanState::LineComment => {
-                if byte == b'\n' {
-                    state = CjsScanState::Code;
-                }
-                index += 1;
-            }
-            CjsScanState::BlockComment => {
-                if byte == b'*' && next == Some(b'/') {
-                    state = CjsScanState::Code;
-                    index += 2;
-                } else {
-                    index += 1;
-                }
-            }
-            CjsScanState::SingleQuote => {
-                if byte == b'\\' {
-                    index += 2;
-                } else if byte == b'\'' {
-                    state = CjsScanState::Code;
-                    index += 1;
-                } else {
-                    index += 1;
-                }
-            }
-            CjsScanState::DoubleQuote => {
-                if byte == b'\\' {
-                    index += 2;
-                } else if byte == b'"' {
-                    state = CjsScanState::Code;
-                    index += 1;
-                } else {
-                    index += 1;
-                }
-            }
-            CjsScanState::Template => {
-                if byte == b'\\' {
-                    index += 2;
-                } else if byte == b'`' {
-                    state = CjsScanState::Code;
-                    index += 1;
-                } else {
-                    index += 1;
-                }
-            }
-            CjsScanState::Regex => {
-                if byte == b'\\' {
-                    index += 2;
-                } else if byte == b'[' {
-                    state = CjsScanState::RegexClass;
-                    index += 1;
-                } else if byte == b'/' {
-                    state = CjsScanState::Code;
-                    index += 1;
-                } else {
-                    index += 1;
-                }
-            }
-            CjsScanState::RegexClass => {
-                if byte == b'\\' {
-                    index += 2;
-                } else if byte == b']' {
-                    state = CjsScanState::Regex;
-                    index += 1;
-                } else {
-                    index += 1;
-                }
-            }
-        }
-    }
-    None
-}
-
-fn slash_starts_regex_literal(source: &str, slash_index: usize) -> bool {
-    let bytes = source.as_bytes();
-    let mut cursor = slash_index;
-    while cursor > 0 {
-        cursor -= 1;
-        if bytes[cursor].is_ascii_whitespace() {
-            continue;
-        }
-        return match bytes[cursor] {
-            b'(' | b')' | b'[' | b'{' | b'}' | b':' | b',' | b';' | b'=' | b'!' | b'?' | b'&'
-            | b'|' | b'+' | b'-' | b'*' | b'%' | b'^' | b'~' | b'<' => true,
-            b'>' => cursor > 0 && bytes[cursor - 1] == b'=',
-            byte if is_js_ident_continue(byte) => {
-                let end = cursor + 1;
-                let mut start = cursor;
-                while start > 0 && is_js_ident_continue(bytes[start - 1]) {
-                    start -= 1;
-                }
-                matches!(
-                    &source[start..end],
-                    "await"
-                        | "case"
-                        | "delete"
-                        | "do"
-                        | "else"
-                        | "in"
-                        | "instanceof"
-                        | "of"
-                        | "return"
-                        | "throw"
-                        | "typeof"
-                        | "void"
-                        | "yield"
-                )
-            }
-            _ => false,
-        };
-    }
-    true
-}
-
-fn has_code_pattern_boundary(source: &str, index: usize, pattern: &str) -> bool {
-    let bytes = source.as_bytes();
-    let before_ok = index == 0
-        || bytes
-            .get(index - 1)
-            .is_none_or(|byte| !is_js_ident_continue(*byte) && *byte != b'.');
-    let end = index + pattern.len();
-    let after_ok = pattern.ends_with('.')
-        || bytes
-            .get(end)
-            .is_none_or(|byte| !is_js_ident_continue(*byte));
-    before_ok && after_ok
-}
-
-fn skip_ascii_whitespace(source: &str, mut index: usize) -> usize {
-    while source
-        .as_bytes()
-        .get(index)
-        .is_some_and(u8::is_ascii_whitespace)
-    {
-        index += 1;
-    }
-    index
-}
-
-fn collect_object_literal_keys(
-    source: &str,
-    open_brace: usize,
-    names: &mut std::collections::HashSet<String>,
-) -> usize {
-    let mut depth = 0usize;
-    let mut state = CjsScanState::Code;
-    let mut entry_start = open_brace + 1;
-    let bytes = source.as_bytes();
-    let mut iter = source[open_brace..].char_indices().peekable();
-    while let Some((offset, ch)) = iter.next() {
-        let index = open_brace + offset;
-        let byte = bytes[index];
-        let next = bytes.get(index + 1).copied();
-
-        match state {
-            CjsScanState::Code => {
-                if byte == b'/' && next == Some(b'/') {
-                    state = CjsScanState::LineComment;
-                    continue;
-                }
-                if byte == b'/' && next == Some(b'*') {
-                    state = CjsScanState::BlockComment;
-                    continue;
-                }
-                if byte == b'\'' {
-                    state = CjsScanState::SingleQuote;
-                    continue;
-                }
-                if byte == b'"' {
-                    state = CjsScanState::DoubleQuote;
-                    continue;
-                }
-                if byte == b'`' {
-                    state = CjsScanState::Template;
-                    continue;
-                }
-                if byte == b'/' && slash_starts_regex_literal(source, index) {
-                    state = CjsScanState::Regex;
-                    continue;
-                }
-                match ch {
-                    '{' | '[' | '(' => depth += 1,
-                    '}' | ']' | ')' => {
-                        depth = depth.saturating_sub(1);
-                        if depth == 0 && ch == '}' {
-                            collect_object_literal_entry(&source[entry_start..index], names);
-                            return index + ch.len_utf8();
-                        }
-                    }
-                    ',' if depth == 1 => {
-                        collect_object_literal_entry(&source[entry_start..index], names);
-                        if names.len() >= MAX_CJS_NAMED_EXPORTS {
-                            return index + ch.len_utf8();
-                        }
-                        entry_start = index + ch.len_utf8();
-                    }
-                    _ => {}
-                }
-            }
-            CjsScanState::LineComment => {
-                if byte == b'\n' {
-                    state = CjsScanState::Code;
-                }
-            }
-            CjsScanState::BlockComment => {
-                if byte == b'*' && next == Some(b'/') {
-                    state = CjsScanState::Code;
-                    iter.next();
-                }
-            }
-            CjsScanState::SingleQuote => {
-                if byte == b'\\' {
-                    iter.next();
-                } else if byte == b'\'' {
-                    state = CjsScanState::Code;
-                }
-            }
-            CjsScanState::DoubleQuote => {
-                if byte == b'\\' {
-                    iter.next();
-                } else if byte == b'"' {
-                    state = CjsScanState::Code;
-                }
-            }
-            CjsScanState::Template => {
-                if byte == b'\\' {
-                    iter.next();
-                } else if byte == b'`' {
-                    state = CjsScanState::Code;
-                }
-            }
-            CjsScanState::Regex => {
-                if byte == b'\\' {
-                    iter.next();
-                } else if byte == b'[' {
-                    state = CjsScanState::RegexClass;
-                } else if byte == b'/' {
-                    state = CjsScanState::Code;
-                }
-            }
-            CjsScanState::RegexClass => {
-                if byte == b'\\' {
-                    iter.next();
-                } else if byte == b']' {
-                    state = CjsScanState::Regex;
-                }
-            }
-        }
-    }
-    source.len()
-}
-
-fn collect_object_literal_entry(entry: &str, names: &mut std::collections::HashSet<String>) {
-    let key = entry_key(entry);
-    if is_valid_js_ident(key) && key != "default" && key != "__esModule" {
-        names.insert(key.to_string());
-    }
-}
-
-fn entry_key(entry: &str) -> &str {
-    let trimmed = entry.trim();
-    if let Some((quoted, end)) = parse_quoted_string_literal(trimmed, 0) {
-        let next = skip_ascii_whitespace(trimmed, end);
-        if trimmed.as_bytes().get(next) == Some(&b':') {
-            return quoted;
-        }
-        return "";
-    }
-    trimmed
-        .find(':')
-        .map(|separator| &trimmed[..separator])
-        .unwrap_or(trimmed)
-        .trim()
-}
-
-fn parse_quoted_string_literal(source: &str, index: usize) -> Option<(&str, usize)> {
-    let quote = *source.as_bytes().get(index)?;
-    if quote != b'\'' && quote != b'"' {
-        return None;
-    }
-    let mut cursor = index + 1;
-    while cursor < source.len() {
-        let byte = source.as_bytes()[cursor];
-        if byte == b'\\' {
-            cursor = cursor.saturating_add(2);
-            continue;
-        }
-        if byte == quote {
-            let value = &source[index + 1..cursor];
-            return Some((value, cursor + 1));
-        }
-        cursor += 1;
-    }
-    None
-}
-
-/// Whether CJS `source` re-exports names through a runtime pattern that static scanning in
-/// [`extract_cjs_export_names`] cannot resolve, so the named-export set is provably incomplete
-/// without evaluating the module. Covers tsc/tslib's `__exportStar(require("./sub"), exports)`
-/// helper (which copies a submodule's enumerable keys onto `exports` at runtime) and
-/// bulk exports whose final enumerable keys can depend on runtime values.
-fn source_has_dynamic_cjs_reexports(source: &str) -> bool {
-    source.contains("__exportStar")
-        || source.contains("Object.assign(exports")
-        || source.contains("Object.assign(module.exports")
-        || source.contains("Object.defineProperties(exports")
-        || source.contains("Object.defineProperties(module.exports")
-        || source_has_module_exports_object_spread(source)
-}
-
-fn source_has_module_exports_object_spread(source: &str) -> bool {
-    let mut cursor = 0usize;
-    while let Some(start) = find_code_pattern(source, "module.exports", cursor) {
-        let mut index = skip_ascii_whitespace(source, start + "module.exports".len());
-        if source.as_bytes().get(index) != Some(&b'=') {
-            cursor = start + "module.exports".len();
-            continue;
-        }
-        index = skip_ascii_whitespace(source, index + 1);
-        if source.as_bytes().get(index) != Some(&b'{') {
-            cursor = index.saturating_add(1);
-            continue;
-        }
-        let end = collect_object_literal_keys(source, index, &mut HashSet::new());
-        if source[index..end.min(source.len())].contains("...") {
-            return true;
-        }
-        cursor = end;
-    }
-    false
-}
-
-fn add_esm_runtime_prelude(source: &str) -> String {
-    let mut prelude = String::new();
-
-    if source.contains("require(")
-        && !source.contains("createRequire(import.meta.url)")
-        && !source.contains("createRequire(")
-        && !source.contains("const require =")
-        && !source.contains("let require =")
-        && !source.contains("var require =")
-        && !source.contains("function require(")
-    {
-        prelude
-            .push_str("const require = globalThis._moduleModule.createRequire(import.meta.url);\n");
-    }
-
-    for (name, triggers) in [
-        ("fetch", &["fetch("][..]),
-        ("Headers", &["Headers", "new Headers("][..]),
-        ("Request", &["Request", "new Request("][..]),
-        ("Response", &["Response", "new Response("][..]),
-        ("Blob", &["Blob", "new Blob("][..]),
-        ("File", &["File", "new File("][..]),
-        ("FormData", &["FormData", "new FormData("][..]),
-    ] {
-        if needs_esm_global_alias(source, name, triggers) {
-            prelude.push_str(&format!("const {name} = globalThis.{name};\n"));
-        }
-    }
-
-    if prelude.is_empty() {
-        source.to_owned()
-    } else {
-        format!("{prelude}{source}")
-    }
-}
-
-fn needs_esm_global_alias(source: &str, name: &str, triggers: &[&str]) -> bool {
-    if !triggers.iter().any(|trigger| source.contains(trigger)) {
-        return false;
-    }
-
-    if has_named_import_binding(source, name) {
-        return false;
-    }
-
-    for pattern in [
-        format!("const {name}"),
-        format!("let {name}"),
-        format!("var {name}"),
-        format!("function {name}"),
-        format!("class {name}"),
-        format!("import {name} from"),
-        format!("import * as {name}"),
-    ] {
-        if source.contains(&pattern) {
-            return false;
-        }
-    }
-
-    true
-}
-
-fn has_named_import_binding(source: &str, name: &str) -> bool {
-    #[derive(Clone, Copy, PartialEq, Eq)]
-    enum ScanState {
-        Code,
-        LineComment,
-        BlockComment,
-        SingleQuote,
-        DoubleQuote,
-        Template,
-    }
-
-    let bytes = source.as_bytes();
-    let mut state = ScanState::Code;
-    let mut index = 0usize;
-
-    while index < bytes.len() {
-        let byte = bytes[index];
-        let next = bytes.get(index + 1).copied();
-
-        match state {
-            ScanState::Code => {
-                if byte == b'/' && next == Some(b'/') {
-                    state = ScanState::LineComment;
-                    index += 2;
-                    continue;
-                }
-                if byte == b'/' && next == Some(b'*') {
-                    state = ScanState::BlockComment;
-                    index += 2;
-                    continue;
-                }
-                if byte == b'\'' {
-                    state = ScanState::SingleQuote;
-                    index += 1;
-                    continue;
-                }
-                if byte == b'"' {
-                    state = ScanState::DoubleQuote;
-                    index += 1;
-                    continue;
-                }
-                if byte == b'`' {
-                    state = ScanState::Template;
-                    index += 1;
-                    continue;
-                }
-                if !is_js_ident_start(byte) {
-                    index += 1;
-                    continue;
-                }
-
-                let start = index;
-                index += 1;
-                while index < bytes.len() && is_js_ident_continue(bytes[index]) {
-                    index += 1;
-                }
-                if &source[start..index] != "import" {
-                    continue;
-                }
-
-                let mut cursor = index;
-                while cursor < bytes.len() && bytes[cursor].is_ascii_whitespace() {
-                    cursor += 1;
-                }
-                if bytes.get(cursor).copied() != Some(b'{') {
-                    continue;
-                }
-                cursor += 1;
-                let imports_start = cursor;
-                while cursor < bytes.len() && bytes[cursor] != b'}' {
-                    cursor += 1;
-                }
-                if cursor >= bytes.len() {
-                    return false;
-                }
-                if named_imports_bind_name(&source[imports_start..cursor], name) {
-                    return true;
-                }
-                index = cursor + 1;
-            }
-            ScanState::LineComment => {
-                if byte == b'\n' {
-                    state = ScanState::Code;
-                }
-                index += 1;
-            }
-            ScanState::BlockComment => {
-                if byte == b'*' && next == Some(b'/') {
-                    state = ScanState::Code;
-                    index += 2;
-                } else {
-                    index += 1;
-                }
-            }
-            ScanState::SingleQuote => {
-                if byte == b'\\' {
-                    index += 2;
-                } else if byte == b'\'' {
-                    state = ScanState::Code;
-                    index += 1;
-                } else {
-                    index += 1;
-                }
-            }
-            ScanState::DoubleQuote => {
-                if byte == b'\\' {
-                    index += 2;
-                } else if byte == b'"' {
-                    state = ScanState::Code;
-                    index += 1;
-                } else {
-                    index += 1;
-                }
-            }
-            ScanState::Template => {
-                if byte == b'\\' {
-                    index += 2;
-                } else if byte == b'`' {
-                    state = ScanState::Code;
-                    index += 1;
-                } else {
-                    index += 1;
-                }
-            }
-        }
-    }
-    false
-}
-
-fn named_imports_bind_name(imports: &str, name: &str) -> bool {
-    imports.split(',').any(|part| {
-        let local = part
-            .split_once(" as ")
-            .map(|(_, alias)| alias)
-            .unwrap_or(part);
-        local.trim() == name
-    })
-}
-
-fn is_valid_js_ident(s: &str) -> bool {
-    if s.is_empty() {
-        return false;
-    }
-    if is_js_reserved_word(s) {
-        return false;
-    }
-    let mut chars = s.chars();
-    let first = chars.next().unwrap();
-    if !first.is_alphabetic() && first != '_' && first != '$' {
-        return false;
-    }
-    chars.all(|c| c.is_alphanumeric() || c == '_' || c == '$')
-}
-
-fn is_js_reserved_word(s: &str) -> bool {
-    matches!(
-        s,
-        "arguments"
-            | "as"
-            | "async"
-            | "await"
-            | "break"
-            | "case"
-            | "catch"
-            | "class"
-            | "const"
-            | "continue"
-            | "debugger"
-            | "default"
-            | "delete"
-            | "do"
-            | "else"
-            | "enum"
-            | "eval"
-            | "export"
-            | "extends"
-            | "false"
-            | "finally"
-            | "for"
-            | "from"
-            | "function"
-            | "get"
-            | "if"
-            | "implements"
-            | "import"
-            | "in"
-            | "instanceof"
-            | "interface"
-            | "let"
-            | "new"
-            | "null"
-            | "of"
-            | "package"
-            | "private"
-            | "protected"
-            | "public"
-            | "return"
-            | "set"
-            | "static"
-            | "super"
-            | "switch"
-            | "target"
-            | "this"
-            | "throw"
-            | "true"
-            | "try"
-            | "typeof"
-            | "var"
-            | "void"
-            | "while"
-            | "with"
-            | "yield"
-    )
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use crate::bridge;
-    use crate::host_call::BridgeCallContext;
-    use crate::isolate;
-    use std::collections::HashMap;
-    use std::io::{Cursor, Write};
-    use std::sync::{Arc, Mutex};
-
-    #[test]
-    fn strip_leading_shebang_matches_node() {
-        // Shebang stripped (newline preserved so line numbers hold).
-        assert_eq!(
-            strip_leading_shebang("#!/usr/bin/env node\nexport const x = 1;\n"),
-            "\nexport const x = 1;\n"
-        );
-        // No shebang -> untouched.
-        assert_eq!(
-            strip_leading_shebang("export const x = 1;\n"),
-            "export const x = 1;\n"
-        );
-        // `#` not at byte 0 -> untouched (only a leading shebang is special).
-        assert_eq!(strip_leading_shebang("  #!nope\n"), "  #!nope\n");
-        // Whole file is just a shebang.
-        assert_eq!(strip_leading_shebang("#!/usr/bin/env node"), "");
-    }
-
-    /// Shared writer that captures output for test inspection
-    struct SharedWriter(Arc<Mutex<Vec<u8>>>);
-
-    impl Write for SharedWriter {
-        fn write(&mut self, buf: &[u8]) -> std::io::Result<usize> {
-            self.0.lock().unwrap().write(buf)
-        }
-        fn flush(&mut self) -> std::io::Result<()> {
-            self.0.lock().unwrap().flush()
-        }
-    }
-
-    #[test]
-    fn esm_global_alias_detection_handles_multiline_named_imports() {
-        let source = r#"
-import {
-  Blob,
-  File,
-  FormData
-} from "fetch-blob/from.js";
-
-export { File };
-"#;
-
-        assert!(!needs_esm_global_alias(source, "File", &["File"]));
-    }
-
-    #[test]
-    fn esm_global_alias_detection_handles_named_import_aliases() {
-        let source = r#"
-import {
-  File as RuntimeFile
-} from "fetch-blob/from.js";
-
-export const file = RuntimeFile;
-"#;
-
-        assert!(!needs_esm_global_alias(
-            source,
-            "RuntimeFile",
-            &["RuntimeFile"]
-        ));
-    }
-
-    #[test]
-    fn esm_global_alias_detection_ignores_commented_named_imports() {
-        let source = r#"
-// import { File } from "fetch-blob/from.js";
-/*
-import {
-  Blob,
-  File
-} from "fetch-blob/from.js";
-*/
-export function makeFile() {
-  return new File([], "empty.txt");
-}
-"#;
-
-        assert!(needs_esm_global_alias(source, "File", &["new File("]));
-    }
-
-    #[test]
-    fn esm_global_alias_detection_ignores_string_named_imports() {
-        let source = r#"
-const example = "import { File } from 'fetch-blob/from.js'";
-const singleQuoteExample = 'import { File } from "fetch-blob/from.js"';
-const template = `import {
-  File
-} from "fetch-blob/from.js"`;
-
-export const file = new File([], "empty.txt");
-"#;
-
-        assert!(needs_esm_global_alias(source, "File", &["new File("]));
-    }
-
-    /// Helper: serialize a V8 string value for test BridgeResponse payloads
-    fn v8_serialize_str(
-        iso: &mut v8::OwnedIsolate,
-        ctx: &v8::Global<v8::Context>,
-        s: &str,
-    ) -> Vec<u8> {
-        let scope = &mut v8::HandleScope::new(iso);
-        let local = v8::Local::new(scope, ctx);
-        let scope = &mut v8::ContextScope::new(scope, local);
-        let val = v8::String::new(scope, s).unwrap();
-        crate::bridge::serialize_v8_value(scope, val.into()).unwrap()
-    }
-
-    /// Helper: serialize a V8 integer value for test BridgeResponse payloads
-    fn v8_serialize_int(
-        iso: &mut v8::OwnedIsolate,
-        ctx: &v8::Global<v8::Context>,
-        n: i64,
-    ) -> Vec<u8> {
-        let scope = &mut v8::HandleScope::new(iso);
-        let local = v8::Local::new(scope, ctx);
-        let scope = &mut v8::ContextScope::new(scope, local);
-        let val = v8::Number::new(scope, n as f64);
-        crate::bridge::serialize_v8_value(scope, val.into()).unwrap()
-    }
-
-    /// Helper: serialize a V8 null value for test BridgeResponse payloads
-    fn v8_serialize_null(iso: &mut v8::OwnedIsolate, ctx: &v8::Global<v8::Context>) -> Vec<u8> {
-        let scope = &mut v8::HandleScope::new(iso);
-        let local = v8::Local::new(scope, ctx);
-        let scope = &mut v8::ContextScope::new(scope, local);
-        let val = v8::null(scope);
-        crate::bridge::serialize_v8_value(scope, val.into()).unwrap()
-    }
-
-    /// Helper: serialize a V8 object (from JS expression) for test BridgeResponse payloads
-    fn v8_serialize_eval(
-        iso: &mut v8::OwnedIsolate,
-        ctx: &v8::Global<v8::Context>,
-        expr: &str,
-    ) -> Vec<u8> {
-        let scope = &mut v8::HandleScope::new(iso);
-        let local = v8::Local::new(scope, ctx);
-        let scope = &mut v8::ContextScope::new(scope, local);
-        let source = v8::String::new(scope, expr).unwrap();
-        let script = v8::Script::compile(scope, source, None).unwrap();
-        let val = script.run(scope).unwrap();
-        crate::bridge::serialize_v8_value(scope, val).unwrap()
-    }
-
-    /// Enter a context, run JS, return the string result.
-    fn eval(
-        isolate: &mut v8::OwnedIsolate,
-        context: &v8::Global<v8::Context>,
-        code: &str,
-    ) -> String {
-        let scope = &mut v8::HandleScope::new(isolate);
-        let local = v8::Local::new(scope, context);
-        let scope = &mut v8::ContextScope::new(scope, local);
-        let source = v8::String::new(scope, code).unwrap();
-        let script = v8::Script::compile(scope, source, None).unwrap();
-        let result = script.run(scope).unwrap();
-        result.to_rust_string_lossy(scope)
-    }
-
-    /// Enter a context, run JS, return true if the result is truthy.
-    fn eval_bool(
-        isolate: &mut v8::OwnedIsolate,
-        context: &v8::Global<v8::Context>,
-        code: &str,
-    ) -> bool {
-        let scope = &mut v8::HandleScope::new(isolate);
-        let local = v8::Local::new(scope, context);
-        let scope = &mut v8::ContextScope::new(scope, local);
-        let source = v8::String::new(scope, code).unwrap();
-        let script = v8::Script::compile(scope, source, None).unwrap();
-        let result = script.run(scope).unwrap();
-        result.boolean_value(scope)
-    }
-
-    /// Enter a context, run JS, return true if an exception was thrown.
-    fn eval_throws(
-        isolate: &mut v8::OwnedIsolate,
-        context: &v8::Global<v8::Context>,
-        code: &str,
-    ) -> bool {
-        let scope = &mut v8::HandleScope::new(isolate);
-        let local = v8::Local::new(scope, context);
-        let scope = &mut v8::ContextScope::new(scope, local);
-        let tc = &mut v8::TryCatch::new(scope);
-        let source = v8::String::new(tc, code).unwrap();
-        if let Some(script) = v8::Script::compile(tc, source, None) {
-            script.run(tc);
-        }
-        tc.has_caught()
-    }
-
-    #[test]
-    fn v8_consolidated_tests() {
-        isolate::init_v8_platform();
-
-        // --- Isolate lifecycle (moved from isolate::tests to consolidate V8 tests) ---
-        // Create and destroy 3 isolates sequentially without crash
-        for i in 0..3 {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-            let result = eval(&mut isolate, &context, &format!("{} + 1", i));
-            assert_eq!(result, format!("{}", i + 1));
-        }
-        // Isolate with heap limit
-        {
-            let mut isolate = isolate::create_isolate(Some(16));
-            let context = isolate::create_context(&mut isolate);
-            assert_eq!(eval(&mut isolate, &context, "1 + 2"), "3");
-        }
-        // Isolate without heap limit
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-            assert_eq!(
-                eval(&mut isolate, &context, "'hello' + ' world'"),
-                "hello world"
-            );
-        }
-        // Global context handle persists state
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-            eval(&mut isolate, &context, "var x = 42;");
-            assert_eq!(eval(&mut isolate, &context, "x"), "42");
-        }
-        // Unhandled rejection tracking is bounded within a microtask checkpoint.
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut isolate);
-                let ctx = v8::Local::new(scope, &context);
-                let scope = &mut v8::ContextScope::new(scope, ctx);
-                execute_script(
-                    scope,
-                    "",
-                    "for (let i = 0; i < 1100; i++) Promise.reject(new Error('boom ' + i));",
-                    &mut None,
-                )
-            };
-            assert_eq!(code, 1);
-            let error = error.expect("unhandled rejection limit error");
-            assert_eq!(
-                error.code.as_deref(),
-                Some("ERR_AGENTOS_UNHANDLED_REJECTION_LIMIT")
-            );
-            assert!(error
-                .message
-                .contains("unhandled promise rejection registry exceeded limit"));
-        }
-        // Over-cap rejections that are handled before the drain should not fail.
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut isolate);
-                let ctx = v8::Local::new(scope, &context);
-                let scope = &mut v8::ContextScope::new(scope, ctx);
-                execute_script(
-                    scope,
-                    "",
-                    r#"
-                    const promises = [];
-                    for (let i = 0; i < 1100; i++) promises.push(Promise.reject(new Error('boom ' + i)));
-                    for (const promise of promises) promise.catch(() => {});
-                    "#,
-                    &mut None,
-                )
-            };
-            assert_eq!(code, 0);
-            assert!(
-                error.is_none(),
-                "handled over-cap rejections should not surface a limit error"
-            );
-        }
-
-        // --- Part 1: InjectGlobals sets _processConfig and _osConfig ---
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-
-            let mut env = HashMap::new();
-            env.insert("HOME".into(), "/home/agentos".into());
-            env.insert("PATH".into(), "/usr/bin".into());
-
-            let process_config = ProcessConfig {
-                cwd: "/app".into(),
-                env,
-                timing_mitigation: "none".into(),
-                frozen_time_ms: Some(1700000000000.0),
-                high_resolution_time: true,
-            };
-            let os_config = OsConfig {
-                homedir: "/home/agentos".into(),
-                tmpdir: "/tmp".into(),
-                platform: "linux".into(),
-                arch: "x64".into(),
-            };
-
-            // Inject globals
-            {
-                let scope = &mut v8::HandleScope::new(&mut isolate);
-                let ctx = v8::Local::new(scope, &context);
-                let scope = &mut v8::ContextScope::new(scope, ctx);
-                inject_globals(scope, &process_config, &os_config);
-            }
-
-            // Verify _processConfig values
-            assert_eq!(eval(&mut isolate, &context, "_processConfig.cwd"), "/app");
-            assert_eq!(
-                eval(&mut isolate, &context, "_processConfig.timing_mitigation"),
-                "none"
-            );
-            assert_eq!(
-                eval(&mut isolate, &context, "_processConfig.frozen_time_ms"),
-                "1700000000000"
-            );
-            assert_eq!(
-                eval(
-                    &mut isolate,
-                    &context,
-                    "_processConfig.high_resolution_time"
-                ),
-                "true"
-            );
-            assert_eq!(
-                eval(&mut isolate, &context, "_processConfig.env.HOME"),
-                "/home/agentos"
-            );
-            assert_eq!(
-                eval(&mut isolate, &context, "_processConfig.env.PATH"),
-                "/usr/bin"
-            );
-
-            // Verify _osConfig values
-            assert_eq!(
-                eval(&mut isolate, &context, "_osConfig.homedir"),
-                "/home/agentos"
-            );
-            assert_eq!(eval(&mut isolate, &context, "_osConfig.tmpdir"), "/tmp");
-            assert_eq!(eval(&mut isolate, &context, "_osConfig.platform"), "linux");
-            assert_eq!(eval(&mut isolate, &context, "_osConfig.arch"), "x64");
-        }
-
-        // --- Part 1a: InjectGlobals payload injection fails closed on invalid payload ---
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-            let payload = v8_serialize_eval(
-                &mut isolate,
-                &context,
-                r#"({
-                    processConfig: {
-                        cwd: "/app",
-                        env: { HOME: "/home/agentos" },
-                        timing_mitigation: "none",
-                        frozen_time_ms: null
-                    }
-                })"#,
-            );
-
-            let err = {
-                let scope = &mut v8::HandleScope::new(&mut isolate);
-                let ctx = v8::Local::new(scope, &context);
-                let scope = &mut v8::ContextScope::new(scope, ctx);
-                inject_globals_from_payload(scope, &payload).expect_err("missing osConfig")
-            };
-
-            assert_eq!(err.code.as_deref(), Some("ERR_INVALID_GLOBALS_PAYLOAD"));
-            assert!(
-                err.message.contains("missing osConfig"),
-                "unexpected error message: {}",
-                err.message
-            );
-            assert_eq!(
-                eval(&mut isolate, &context, "typeof _processConfig"),
-                "undefined",
-                "invalid payload must not partially inject process config"
-            );
-            assert_eq!(
-                eval(&mut isolate, &context, "typeof _osConfig"),
-                "undefined",
-                "invalid payload must not inject os config"
-            );
-        }
-
-        // --- Part 1b: InjectGlobals payload injection rejects primitive configs ---
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-            let payload = v8_serialize_eval(
-                &mut isolate,
-                &context,
-                r#"({
-                    processConfig: "not-an-object",
-                    osConfig: {
-                        homedir: "/home/agentos",
-                        tmpdir: "/tmp",
-                        platform: "linux",
-                        arch: "x64"
-                    }
-                })"#,
-            );
-
-            let err = {
-                let scope = &mut v8::HandleScope::new(&mut isolate);
-                let ctx = v8::Local::new(scope, &context);
-                let scope = &mut v8::ContextScope::new(scope, ctx);
-                inject_globals_from_payload(scope, &payload).expect_err("primitive processConfig")
-            };
-
-            assert_eq!(err.code.as_deref(), Some("ERR_INVALID_GLOBALS_PAYLOAD"));
-            assert!(
-                err.message.contains("processConfig is not an object"),
-                "unexpected error message: {}",
-                err.message
-            );
-            assert_eq!(
-                eval(&mut isolate, &context, "typeof _processConfig"),
-                "undefined",
-                "wrong-type payload must not inject primitive process config"
-            );
-        }
-
-        // --- Part 1c: InjectGlobals payload injection freezes configs and env ---
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-            let payload = v8_serialize_eval(
-                &mut isolate,
-                &context,
-                r#"({
-                    processConfig: {
-                        cwd: "/app",
-                        env: "not-an-object",
-                        timing_mitigation: "none",
-                        frozen_time_ms: null
-                    },
-                    osConfig: {
-                        homedir: "/home/agentos",
-                        tmpdir: "/tmp",
-                        platform: "linux",
-                        arch: "x64"
-                    }
-                })"#,
-            );
-
-            let err = {
-                let scope = &mut v8::HandleScope::new(&mut isolate);
-                let ctx = v8::Local::new(scope, &context);
-                let scope = &mut v8::ContextScope::new(scope, ctx);
-                inject_globals_from_payload(scope, &payload).expect_err("primitive env")
-            };
-
-            assert_eq!(err.code.as_deref(), Some("ERR_INVALID_GLOBALS_PAYLOAD"));
-            assert!(
-                err.message.contains("processConfig.env is not an object"),
-                "unexpected error message: {}",
-                err.message
-            );
-            assert_eq!(
-                eval(&mut isolate, &context, "typeof _processConfig"),
-                "undefined",
-                "wrong-type env payload must not partially inject process config"
-            );
-        }
-
-        // --- Part 1d: InjectGlobals payload injection rejects missing env ---
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-            let payload = v8_serialize_eval(
-                &mut isolate,
-                &context,
-                r#"({
-                    processConfig: {
-                        cwd: "/app",
-                        timing_mitigation: "none",
-                        frozen_time_ms: null
-                    },
-                    osConfig: {
-                        homedir: "/home/agentos",
-                        tmpdir: "/tmp",
-                        platform: "linux",
-                        arch: "x64"
-                    }
-                })"#,
-            );
-
-            let err = {
-                let scope = &mut v8::HandleScope::new(&mut isolate);
-                let ctx = v8::Local::new(scope, &context);
-                let scope = &mut v8::ContextScope::new(scope, ctx);
-                inject_globals_from_payload(scope, &payload).expect_err("missing env")
-            };
-
-            assert_eq!(err.code.as_deref(), Some("ERR_INVALID_GLOBALS_PAYLOAD"));
-            assert!(
-                err.message.contains("missing processConfig.env"),
-                "unexpected error message: {}",
-                err.message
-            );
-            assert_eq!(
-                eval(&mut isolate, &context, "typeof _processConfig"),
-                "undefined",
-                "missing env payload must not partially inject process config"
-            );
-        }
-
-        // --- Part 1e: InjectGlobals payload injection rejects non-plain object env ---
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-            let payload = v8_serialize_eval(
-                &mut isolate,
-                &context,
-                r#"({
-                    processConfig: {
-                        cwd: "/app",
-                        env: new Uint8Array([1]),
-                        timing_mitigation: "none",
-                        frozen_time_ms: null
-                    },
-                    osConfig: {
-                        homedir: "/home/agentos",
-                        tmpdir: "/tmp",
-                        platform: "linux",
-                        arch: "x64"
-                    }
-                })"#,
-            );
-
-            let err = {
-                let scope = &mut v8::HandleScope::new(&mut isolate);
-                let ctx = v8::Local::new(scope, &context);
-                let scope = &mut v8::ContextScope::new(scope, ctx);
-                inject_globals_from_payload(scope, &payload).expect_err("typed array env")
-            };
-
-            assert_eq!(err.code.as_deref(), Some("ERR_INVALID_GLOBALS_PAYLOAD"));
-            assert!(
-                err.message
-                    .contains("processConfig.env is not a plain object"),
-                "unexpected error message: {}",
-                err.message
-            );
-            assert_eq!(
-                eval(&mut isolate, &context, "typeof _processConfig"),
-                "undefined",
-                "typed-array env payload must not partially inject process config"
-            );
-        }
-
-        // --- Part 1f: InjectGlobals payload injection freezes configs and env ---
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-            let payload = v8_serialize_eval(
-                &mut isolate,
-                &context,
-                r#"({
-                    processConfig: {
-                        cwd: "/app",
-                        env: { HOME: "/home/agentos" },
-                        timing_mitigation: "none",
-                        frozen_time_ms: null
-                    },
-                    osConfig: {
-                        homedir: "/home/agentos",
-                        tmpdir: "/tmp",
-                        platform: "linux",
-                        arch: "x64"
-                    }
-                })"#,
-            );
-
-            {
-                let scope = &mut v8::HandleScope::new(&mut isolate);
-                let ctx = v8::Local::new(scope, &context);
-                let scope = &mut v8::ContextScope::new(scope, ctx);
-                inject_globals_from_payload(scope, &payload).expect("valid globals payload");
-            }
-
-            assert_eq!(eval(&mut isolate, &context, "_processConfig.cwd"), "/app");
-            assert_eq!(
-                eval(&mut isolate, &context, "_processConfig.env.HOME"),
-                "/home/agentos"
-            );
-            assert!(eval_bool(
-                &mut isolate,
-                &context,
-                "Object.isFrozen(_processConfig) && Object.isFrozen(_processConfig.env) && Object.isFrozen(_osConfig)"
-            ));
-        }
-
-        // --- Part 2: frozen_time_ms null when None ---
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-
-            let process_config = ProcessConfig {
-                cwd: "/".into(),
-                env: HashMap::new(),
-                timing_mitigation: "none".into(),
-                frozen_time_ms: None,
-                high_resolution_time: false,
-            };
-            let os_config = OsConfig {
-                homedir: "/root".into(),
-                tmpdir: "/tmp".into(),
-                platform: "linux".into(),
-                arch: "x64".into(),
-            };
-
-            {
-                let scope = &mut v8::HandleScope::new(&mut isolate);
-                let ctx = v8::Local::new(scope, &context);
-                let scope = &mut v8::ContextScope::new(scope, ctx);
-                inject_globals(scope, &process_config, &os_config);
-            }
-
-            assert_eq!(
-                eval(
-                    &mut isolate,
-                    &context,
-                    "_processConfig.frozen_time_ms === null"
-                ),
-                "true"
-            );
-        }
-
-        // --- Part 3: Objects are frozen (immutable) ---
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-
-            let process_config = ProcessConfig {
-                cwd: "/app".into(),
-                env: HashMap::new(),
-                timing_mitigation: "none".into(),
-                frozen_time_ms: None,
-                high_resolution_time: false,
-            };
-            let os_config = OsConfig {
-                homedir: "/home".into(),
-                tmpdir: "/tmp".into(),
-                platform: "linux".into(),
-                arch: "x64".into(),
-            };
-
-            {
-                let scope = &mut v8::HandleScope::new(&mut isolate);
-                let ctx = v8::Local::new(scope, &context);
-                let scope = &mut v8::ContextScope::new(scope, ctx);
-                inject_globals(scope, &process_config, &os_config);
-            }
-
-            // Verify Object.isFrozen
-            assert!(eval_bool(
-                &mut isolate,
-                &context,
-                "Object.isFrozen(_processConfig)"
-            ));
-            assert!(eval_bool(
-                &mut isolate,
-                &context,
-                "Object.isFrozen(_osConfig)"
-            ));
-            assert!(eval_bool(
-                &mut isolate,
-                &context,
-                "Object.isFrozen(_processConfig.env)"
-            ));
-
-            // Verify non-writable: assignment in strict mode throws
-            assert!(eval_throws(
-                &mut isolate,
-                &context,
-                "'use strict'; _processConfig.cwd = '/hacked'"
-            ));
-            assert!(eval_throws(
-                &mut isolate,
-                &context,
-                "'use strict'; _osConfig.platform = 'hacked'"
-            ));
-
-            // Verify non-configurable: cannot delete or redefine
-            assert!(eval_throws(
-                &mut isolate,
-                &context,
-                "'use strict'; delete _processConfig"
-            ));
-            assert!(eval_throws(
-                &mut isolate,
-                &context,
-                "Object.defineProperty(globalThis, '_processConfig', { value: {} })"
-            ));
-            assert!(eval_throws(
-                &mut isolate,
-                &context,
-                "Object.defineProperty(globalThis, '_osConfig', { value: {} })"
-            ));
-        }
-
-        // --- Part 4: SharedArrayBuffer NOT removed by inject_globals ---
-        // SharedArrayBuffer removal is handled by JS bridge code (applyTimingMitigationFreeze),
-        // not by inject_globals. The bridge bundle depends on SharedArrayBuffer being available
-        // during initialization. inject_globals stores timing_mitigation in _processConfig
-        // for the bridge to read.
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-
-            let process_config = ProcessConfig {
-                cwd: "/".into(),
-                env: HashMap::new(),
-                timing_mitigation: "freeze".into(),
-                frozen_time_ms: None,
-                high_resolution_time: false,
-            };
-            let os_config = OsConfig {
-                homedir: "/root".into(),
-                tmpdir: "/tmp".into(),
-                platform: "linux".into(),
-                arch: "x64".into(),
-            };
-
-            {
-                let scope = &mut v8::HandleScope::new(&mut isolate);
-                let ctx = v8::Local::new(scope, &context);
-                let scope = &mut v8::ContextScope::new(scope, ctx);
-                inject_globals(scope, &process_config, &os_config);
-            }
-
-            // SharedArrayBuffer should still exist — removal is done by JS bridge
-            assert!(eval_bool(
-                &mut isolate,
-                &context,
-                "typeof SharedArrayBuffer !== 'undefined'"
-            ));
-            // timing_mitigation is stored for the bridge to act on
-            assert_eq!(
-                eval(&mut isolate, &context, "_processConfig.timing_mitigation"),
-                "freeze"
-            );
-        }
-
-        // --- Part 5: SharedArrayBuffer preserved when timing_mitigation is 'none' ---
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-
-            let process_config = ProcessConfig {
-                cwd: "/".into(),
-                env: HashMap::new(),
-                timing_mitigation: "none".into(),
-                frozen_time_ms: None,
-                high_resolution_time: false,
-            };
-            let os_config = OsConfig {
-                homedir: "/root".into(),
-                tmpdir: "/tmp".into(),
-                platform: "linux".into(),
-                arch: "x64".into(),
-            };
-
-            {
-                let scope = &mut v8::HandleScope::new(&mut isolate);
-                let ctx = v8::Local::new(scope, &context);
-                let scope = &mut v8::ContextScope::new(scope, ctx);
-                inject_globals(scope, &process_config, &os_config);
-            }
-
-            // SharedArrayBuffer should still exist
-            assert!(eval_bool(
-                &mut isolate,
-                &context,
-                "typeof SharedArrayBuffer !== 'undefined'"
-            ));
-        }
-
-        // --- Part 6: Guest WebAssembly compilation stays enabled by default ---
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-
-            assert!(!eval_throws(
-                &mut isolate,
-                &context,
-                "new WebAssembly.Module(new Uint8Array([0,97,115,109,1,0,0,0]))"
-            ));
-        }
-
-        // --- Part 7: Guest WebAssembly modules can instantiate and execute ---
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-
-            let result = eval(
-                &mut isolate,
-                &context,
-                r#"
-                (function() {
-                    var bytes = new Uint8Array([
-                        0x00, 0x61, 0x73, 0x6d, 0x01, 0x00, 0x00, 0x00,
-                        0x01, 0x07, 0x01, 0x60, 0x02, 0x7f, 0x7f, 0x01, 0x7f,
-                        0x03, 0x02, 0x01, 0x00,
-                        0x07, 0x07, 0x01, 0x03, 0x61, 0x64, 0x64, 0x00, 0x00,
-                        0x0a, 0x09, 0x01, 0x07, 0x00, 0x20, 0x00, 0x20, 0x01, 0x6a, 0x0b,
-                    ]);
-                    var module = new WebAssembly.Module(bytes);
-                    var instance = new WebAssembly.Instance(module, {});
-                    return String(instance.exports.add(19, 23));
-                })()
-                "#,
-            );
-            assert_eq!(result, "42");
-        }
-
-        // --- Part 8: V8 still enforces its own WebAssembly memory limits ---
-        {
-            let mut isolate = isolate::create_isolate(None);
-            let context = isolate::create_context(&mut isolate);
-
-            let limit_report = eval(
-                &mut isolate,
-                &context,
-                r#"
-                (function() {
-                    function capture(fn) {
-                        try {
-                            fn();
-                            return "ALLOWED";
-                        } catch (error) {
-                            return error.name + ":" + error.message;
-                        }
-                    }
-
-                    var moduleLimit = capture(function() {
-                        var bytes = new Uint8Array([
-                            0x00, 0x61, 0x73, 0x6d, 0x01, 0x00, 0x00, 0x00,
-                            0x05, 0x06, 0x01, 0x01, 0x01, 0x81, 0x80, 0x04,
-                        ]);
-                        new WebAssembly.Module(bytes);
-                    });
-                    var memoryLimit = capture(function() {
-                        new WebAssembly.Memory({ initial: 1, maximum: 65537 });
-                    });
-                    return JSON.stringify({ moduleLimit: moduleLimit, memoryLimit: memoryLimit });
-                })()
-                "#,
-            );
-
-            assert!(
-                limit_report.contains(r#""moduleLimit":"CompileError:"#),
-                "unexpected module limit report: {limit_report}"
-            );
-            assert!(
-                limit_report.contains(r#""memoryLimit":"RangeError:"#),
-                "unexpected memory limit report: {limit_report}"
-            );
-            assert!(
-                limit_report.contains("65536"),
-                "unexpected limit report: {limit_report}"
-            );
-        }
-
-        // --- Part 8: Sync bridge call returns value ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            // Prepare BridgeResponse: call_id=1, result="hello world"
-            let result_v8 = v8_serialize_str(&mut iso, &ctx, "hello world");
-
-            let mut response_buf = Vec::new();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 1,
-                    status: 0,
-                    payload: result_v8,
-                },
-            )
-            .unwrap();
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(response_buf)),
-                "test-session".into(),
-            );
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_sync_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &["_testBridge"],
-                );
-            }
-
-            assert_eq!(eval(&mut iso, &ctx, "_testBridge('arg1')"), "hello world");
-        }
-
-        // --- Part 9: Bridge call error throws V8 exception ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let mut response_buf = Vec::new();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 1,
-                    status: 1,
-                    payload: "ENOENT: file not found".as_bytes().to_vec(),
-                },
-            )
-            .unwrap();
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(response_buf)),
-                "test-session".into(),
-            );
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_sync_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &["_testBridge"],
-                );
-            }
-
-            assert!(eval_throws(&mut iso, &ctx, "_testBridge('arg')"));
-        }
-
-        // --- Part 10: Multiple bridge functions with argument passing ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            // Prepare two BridgeResponses (call_id=1 for _fn1, call_id=2 for _fn2)
-            let r1_bytes = v8_serialize_str(&mut iso, &ctx, "result-one");
-            let r2_bytes = v8_serialize_int(&mut iso, &ctx, 42);
-
-            let mut response_buf = Vec::new();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 1,
-                    status: 0,
-                    payload: r1_bytes,
-                },
-            )
-            .unwrap();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 2,
-                    status: 0,
-                    payload: r2_bytes,
-                },
-            )
-            .unwrap();
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(response_buf)),
-                "test-session".into(),
-            );
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_sync_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &["_fn1", "_fn2"],
-                );
-            }
-
-            assert_eq!(eval(&mut iso, &ctx, "_fn1('x')"), "result-one");
-            assert_eq!(eval(&mut iso, &ctx, "_fn2(1, 2, 3)"), "42");
-        }
-
-        // --- Part 11: Bridge call with null result returns undefined ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let mut response_buf = Vec::new();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 1,
-                    status: 0,
-                    payload: vec![],
-                },
-            )
-            .unwrap();
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(response_buf)),
-                "test-session".into(),
-            );
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_sync_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &["_testBridge"],
-                );
-            }
-
-            assert!(eval_bool(&mut iso, &ctx, "_testBridge() === undefined"));
-        }
-
-        // --- Part 12: Async bridge call returns pending promise, resolved successfully ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let writer_buf = Arc::new(Mutex::new(Vec::new()));
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(SharedWriter(Arc::clone(&writer_buf))),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            // Call the async function
-            eval(&mut iso, &ctx, "var _promise = _asyncFn('arg1')");
-
-            // Verify a BridgeCall was sent
-            {
-                let written = writer_buf.lock().unwrap();
-                let call = crate::ipc_binary::read_frame(&mut Cursor::new(&*written)).unwrap();
-                match call {
-                    crate::ipc_binary::BinaryFrame::BridgeCall {
-                        call_id, method, ..
-                    } => {
-                        assert_eq!(call_id, 1);
-                        assert_eq!(method, "_asyncFn");
-                    }
-                    _ => panic!("expected BridgeCall"),
-                }
-            }
-
-            // Promise should be pending with 1 pending promise
-            assert_eq!(pending.len(), 1);
-            assert!(eval_bool(&mut iso, &ctx, "_promise instanceof Promise"));
-
-            // Resolve the promise
-            let result_v8 = v8_serialize_str(&mut iso, &ctx, "async result");
-
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                bridge::resolve_pending_promise(scope, &pending, 1, 0, Some(result_v8), None)
-                    .unwrap();
-            }
-
-            assert_eq!(pending.len(), 0);
-
-            // Verify promise is fulfilled with correct value
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                let source = v8::String::new(scope, "_promise").unwrap();
-                let script = v8::Script::compile(scope, source, None).unwrap();
-                let result = script.run(scope).unwrap();
-                let promise = v8::Local::<v8::Promise>::try_from(result).unwrap();
-                assert_eq!(promise.state(), v8::PromiseState::Fulfilled);
-                assert_eq!(
-                    promise.result(scope).to_rust_string_lossy(scope),
-                    "async result"
-                );
-            }
-        }
-
-        // --- Part 13: Async bridge call promise rejected on error ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            eval(&mut iso, &ctx, "var _promise = _asyncFn('arg')");
-            assert_eq!(pending.len(), 1);
-
-            // Reject the promise
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                bridge::resolve_pending_promise(
-                    scope,
-                    &pending,
-                    1,
-                    0,
-                    None,
-                    Some("ENOENT: file not found".into()),
-                )
-                .unwrap();
-            }
-
-            assert_eq!(pending.len(), 0);
-
-            // Verify promise is rejected with error
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                let source = v8::String::new(scope, "_promise").unwrap();
-                let script = v8::Script::compile(scope, source, None).unwrap();
-                let result = script.run(scope).unwrap();
-                let promise = v8::Local::<v8::Promise>::try_from(result).unwrap();
-                assert_eq!(promise.state(), v8::PromiseState::Rejected);
-                let rejection = promise.result(scope);
-                let obj = v8::Local::<v8::Object>::try_from(rejection).unwrap();
-                let msg_key = v8::String::new(scope, "message").unwrap();
-                let msg_val = obj.get(scope, msg_key.into()).unwrap();
-                assert_eq!(
-                    msg_val.to_rust_string_lossy(scope),
-                    "ENOENT: file not found"
-                );
-            }
-        }
-
-        // --- Part 14: Multiple async functions with out-of-order resolution ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_fetch", "_dns"],
-                );
-            }
-
-            eval(
-                &mut iso,
-                &ctx,
-                "var _p1 = _fetch('url'); var _p2 = _dns('host')",
-            );
-            assert_eq!(pending.len(), 2);
-
-            // Resolve in reverse order (p2 first, then p1)
-            let r2 = v8_serialize_str(&mut iso, &ctx, "dns-result");
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                bridge::resolve_pending_promise(scope, &pending, 2, 0, Some(r2), None).unwrap();
-            }
-            assert_eq!(pending.len(), 1);
-
-            let r1 = v8_serialize_str(&mut iso, &ctx, "fetch-result");
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                bridge::resolve_pending_promise(scope, &pending, 1, 0, Some(r1), None).unwrap();
-            }
-            assert_eq!(pending.len(), 0);
-
-            // Verify both promises fulfilled correctly
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-
-                let source = v8::String::new(scope, "_p1").unwrap();
-                let script = v8::Script::compile(scope, source, None).unwrap();
-                let result = script.run(scope).unwrap();
-                let promise = v8::Local::<v8::Promise>::try_from(result).unwrap();
-                assert_eq!(promise.state(), v8::PromiseState::Fulfilled);
-                assert_eq!(
-                    promise.result(scope).to_rust_string_lossy(scope),
-                    "fetch-result"
-                );
-
-                let source = v8::String::new(scope, "_p2").unwrap();
-                let script = v8::Script::compile(scope, source, None).unwrap();
-                let result = script.run(scope).unwrap();
-                let promise = v8::Local::<v8::Promise>::try_from(result).unwrap();
-                assert_eq!(promise.state(), v8::PromiseState::Fulfilled);
-                assert_eq!(
-                    promise.result(scope).to_rust_string_lossy(scope),
-                    "dns-result"
-                );
-            }
-        }
-
-        // --- Part 15: Async bridge call with null result resolves to undefined ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            eval(&mut iso, &ctx, "var _promise = _asyncFn()");
-
-            // Resolve with None (null result)
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                bridge::resolve_pending_promise(scope, &pending, 1, 0, None, None).unwrap();
-            }
-
-            // Promise should be fulfilled with undefined
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                let source = v8::String::new(scope, "_promise").unwrap();
-                let script = v8::Script::compile(scope, source, None).unwrap();
-                let result = script.run(scope).unwrap();
-                let promise = v8::Local::<v8::Promise>::try_from(result).unwrap();
-                assert_eq!(promise.state(), v8::PromiseState::Fulfilled);
-                assert!(promise.result(scope).is_undefined());
-            }
-        }
-
-        // --- Part 16: Microtasks flushed after promise resolution ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            // Set up .then handler that sets a global variable
-            eval(
-                &mut iso,
-                &ctx,
-                "var _thenRan = false; _asyncFn().then(function() { _thenRan = true; })",
-            );
-
-            // Before resolution, _thenRan should be false
-            assert!(eval_bool(&mut iso, &ctx, "_thenRan === false"));
-
-            // Resolve the promise (microtasks flushed inside resolve_pending_promise)
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                bridge::resolve_pending_promise(scope, &pending, 1, 0, None, None).unwrap();
-            }
-
-            // After resolution + microtask flush, _thenRan should be true
-            assert!(eval_bool(&mut iso, &ctx, "_thenRan === true"));
-        }
-
-        // --- Part 17: CJS execution — successful execution returns exit code 0 ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(scope, "", "var x = 1 + 2;", &mut None)
-            };
-
-            assert_eq!(code, 0);
-            assert!(error.is_none());
-            // Verify the code actually ran
-            assert_eq!(eval(&mut iso, &ctx, "x"), "3");
-        }
-
-        // --- Part 18: Bridge code IIFE executed before user code ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge = "(function() { globalThis._bridgeReady = true; })()";
-            let user = "var _sawBridge = _bridgeReady;";
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(scope, bridge, user, &mut None)
-            };
-
-            assert_eq!(code, 0);
-            assert!(error.is_none());
-            assert!(eval_bool(&mut iso, &ctx, "_sawBridge === true"));
-            assert!(eval_bool(&mut iso, &ctx, "_bridgeReady === true"));
-        }
-
-        // --- Part 18b: Rejected async script completion returns structured error ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(
-                    scope,
-                    "",
-                    "(async function () { throw new Error('async failure'); })()",
-                    &mut None,
-                )
-            };
-
-            assert_eq!(code, 1);
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "Error");
-            assert_eq!(err.message, "async failure");
-        }
-
-        // --- Part 19: SyntaxError in user code returns structured error ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(scope, "", "var x = {;", &mut None)
-            };
-
-            assert_eq!(code, 1);
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "SyntaxError");
-            assert!(!err.message.is_empty());
-        }
-
-        // --- Part 20: Runtime TypeError returns structured error ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(scope, "", "null.foo", &mut None)
-            };
-
-            assert_eq!(code, 1);
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "TypeError");
-            assert!(!err.message.is_empty());
-            assert!(!err.stack.is_empty());
-        }
-
-        // --- Part 21: SyntaxError in bridge code returns error ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(scope, "function {", "var x = 1;", &mut None)
-            };
-
-            assert_eq!(code, 1);
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "SyntaxError");
-            // User code should NOT have run
-            assert!(eval_bool(&mut iso, &ctx, "typeof x === 'undefined'"));
-        }
-
-        // --- Part 22: Empty bridge code is skipped ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(scope, "", "'hello'", &mut None)
-            };
-
-            assert_eq!(code, 0);
-            assert!(error.is_none());
-        }
-
-        // --- Part 23: Runtime error with error code ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(
-                    scope,
-                    "",
-                    "var e = new Error('not found'); e.code = 'ERR_MODULE_NOT_FOUND'; throw e;",
-                    &mut None,
-                )
-            };
-
-            assert_eq!(code, 1);
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "Error");
-            assert_eq!(err.message, "not found");
-            assert_eq!(err.code, Some("ERR_MODULE_NOT_FOUND".into()));
-        }
-
-        // --- Part 24: Thrown string (non-Error object) handled ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(scope, "", "throw 'raw string error';", &mut None)
-            };
-
-            assert_eq!(code, 1);
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "Error");
-            assert_eq!(err.message, "raw string error");
-            assert!(err.stack.is_empty());
-            assert!(err.code.is_none());
-        }
-
-        // --- Part 25: ESM — simple module with exports ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-
-            let user_code = "export const x = 42;\nexport const msg = 'hello';";
-            let (code, exports, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_module(scope, &bridge_ctx, "", user_code, None, &mut None)
-            };
-
-            assert_eq!(code, 0);
-            assert!(error.is_none());
-            let exports = exports.unwrap();
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                let val = crate::bridge::deserialize_v8_value(scope, &exports).unwrap();
-                assert!(val.is_object());
-                let obj = v8::Local::<v8::Object>::try_from(val).unwrap();
-                let k = v8::String::new(scope, "x").unwrap();
-                assert_eq!(
-                    obj.get(scope, k.into())
-                        .unwrap()
-                        .int32_value(scope)
-                        .unwrap(),
-                    42
-                );
-                let k = v8::String::new(scope, "msg").unwrap();
-                assert_eq!(
-                    obj.get(scope, k.into())
-                        .unwrap()
-                        .to_rust_string_lossy(scope),
-                    "hello"
-                );
-            }
-        }
-
-        // --- Part 25a: ESM root modules receive fetch globals from the runtime prelude ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-
-            let bridge_code = r#"
-                globalThis.fetch = async function () { return "ok"; };
-            "#;
-            let user_code = r#"
-                const result = await fetch();
-                export const fetchType = typeof fetch;
-                export default result;
-            "#;
-            let (code, exports, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_module(scope, &bridge_ctx, bridge_code, user_code, None, &mut None)
-            };
-
-            assert_eq!(code, 0, "error: {:?}", error);
-            assert!(error.is_none());
-            let exports = exports.unwrap();
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                let val = crate::bridge::deserialize_v8_value(scope, &exports).unwrap();
-                let obj = v8::Local::<v8::Object>::try_from(val).unwrap();
-
-                let fetch_type_key = v8::String::new(scope, "fetchType").unwrap();
-                assert_eq!(
-                    obj.get(scope, fetch_type_key.into())
-                        .unwrap()
-                        .to_rust_string_lossy(scope),
-                    "function"
-                );
-
-                let default_key = v8::String::new(scope, "default").unwrap();
-                assert_eq!(
-                    obj.get(scope, default_key.into())
-                        .unwrap()
-                        .to_rust_string_lossy(scope),
-                    "ok"
-                );
-            }
-        }
-
-        // --- Part 26: ESM — default export ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-
-            let (code, exports, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_module(
-                    scope,
-                    &bridge_ctx,
-                    "",
-                    "export default 'world';",
-                    None,
-                    &mut None,
-                )
-            };
-
-            assert_eq!(code, 0);
-            assert!(error.is_none());
-            let exports = exports.unwrap();
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                let val = crate::bridge::deserialize_v8_value(scope, &exports).unwrap();
-                assert!(val.is_object());
-                let obj = v8::Local::<v8::Object>::try_from(val).unwrap();
-                let k = v8::String::new(scope, "default").unwrap();
-                assert_eq!(
-                    obj.get(scope, k.into())
-                        .unwrap()
-                        .to_rust_string_lossy(scope),
-                    "world"
-                );
-            }
-        }
-
-        // --- Part 27: ESM — SyntaxError ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-
-            let (code, _exports, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_module(
-                    scope,
-                    &bridge_ctx,
-                    "",
-                    "export const x = {;",
-                    None,
-                    &mut None,
-                )
-            };
-
-            assert_eq!(code, 1);
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "SyntaxError");
-        }
-
-        // --- Part 28: ESM — runtime TypeError ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-
-            let (code, _exports, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_module(
-                    scope,
-                    &bridge_ctx,
-                    "",
-                    "const x = null; x.foo;",
-                    None,
-                    &mut None,
-                )
-            };
-
-            assert_eq!(code, 1);
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "TypeError");
-        }
-
-        // --- Part 29: ESM — bridge code IIFE runs before module ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-
-            let bridge = "(function() { globalThis._bridgeReady = true; })()";
-            let user = "export const saw = _bridgeReady;";
-            let (code, exports, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_module(scope, &bridge_ctx, bridge, user, None, &mut None)
-            };
-
-            assert_eq!(code, 0);
-            assert!(error.is_none());
-            let exports = exports.unwrap();
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                let val = crate::bridge::deserialize_v8_value(scope, &exports).unwrap();
-                assert!(val.is_object());
-                let obj = v8::Local::<v8::Object>::try_from(val).unwrap();
-                let k = v8::String::new(scope, "saw").unwrap();
-                assert!(obj.get(scope, k.into()).unwrap().is_true());
-            }
-        }
-
-        // --- Part 30: ESM — import from dependency via batch resolve ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            // Prepare BridgeResponse for _batchResolveModules (batch prefetch).
-            // The batch call (call_id=1) returns an array of {resolved, source}.
-            let mut response_buf = Vec::new();
-
-            let batch_result = v8_serialize_eval(
-                &mut iso,
-                &ctx,
-                "[{resolved: '/dep.mjs', source: 'export const dep_val = 99;'}]",
-            );
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 1,
-                    status: 0,
-                    payload: batch_result,
-                },
-            )
-            .unwrap();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 2,
-                    status: 0,
-                    payload: v8_serialize_str(&mut iso, &ctx, "module"),
-                },
-            )
-            .unwrap();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 3,
-                    status: 0,
-                    payload: v8_serialize_str(&mut iso, &ctx, "module"),
-                },
-            )
-            .unwrap();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 2,
-                    status: 0,
-                    payload: v8_serialize_str(&mut iso, &ctx, "module"),
-                },
-            )
-            .unwrap();
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(response_buf)),
-                "test-session".into(),
-            );
-
-            let user_code =
-                "import { dep_val } from './dep.mjs';\nexport const result = dep_val + 1;";
-            let (code, exports, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_module(
-                    scope,
-                    &bridge_ctx,
-                    "",
-                    user_code,
-                    Some("/app/main.mjs"),
-                    &mut None,
-                )
-            };
-
-            assert_eq!(code, 0, "error: {:?}", error);
-            assert!(error.is_none());
-            let exports = exports.unwrap();
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                let val = crate::bridge::deserialize_v8_value(scope, &exports).unwrap();
-                assert!(val.is_object());
-                let obj = v8::Local::<v8::Object>::try_from(val).unwrap();
-                let k = v8::String::new(scope, "result").unwrap();
-                assert_eq!(
-                    obj.get(scope, k.into())
-                        .unwrap()
-                        .int32_value(scope)
-                        .unwrap(),
-                    100
-                );
-            }
-        }
-
-        // --- Part 31: Event loop — BridgeResponse resolves pending promise ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            // Register async bridge function
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            // Call async function from V8 — creates pending promise
-            eval(
-                &mut iso,
-                &ctx,
-                "var _eventLoopResult = 'pending'; _asyncFn('test').then(function(v) { _eventLoopResult = v; })",
-            );
-            assert_eq!(pending.len(), 1);
-            assert_eq!(eval(&mut iso, &ctx, "_eventLoopResult"), "pending");
-
-            // Create channel and send BridgeResponse
-            let (tx, rx) = crossbeam_channel::unbounded();
-            let result_v8 = v8_serialize_str(&mut iso, &ctx, "event-loop-resolved");
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::BridgeResponse(
-                    crate::runtime_protocol::BridgeResponse {
-                        call_id: 1,
-                        status: 0,
-                        payload: result_v8,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            // Run event loop
-            let completed = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                crate::session::run_event_loop(scope, &rx, &pending, None, None)
-            };
-
-            assert!(
-                matches!(completed, crate::session::EventLoopStatus::Completed),
-                "event loop should complete normally"
-            );
-            assert_eq!(pending.len(), 0);
-            assert_eq!(
-                eval(&mut iso, &ctx, "_eventLoopResult"),
-                "event-loop-resolved"
-            );
-        }
-
-        // --- Part 32: Event loop — multiple BridgeResponses resolved in sequence ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_fetch", "_dns"],
-                );
-            }
-
-            // Create two pending promises
-            eval(
-                &mut iso,
-                &ctx,
-                "var _r1 = 'pending'; var _r2 = 'pending'; \
-                 _fetch('url').then(function(v) { _r1 = v; }); \
-                 _dns('host').then(function(v) { _r2 = v; })",
-            );
-            assert_eq!(pending.len(), 2);
-
-            // Create channel and send both responses
-            let (tx, rx) = crossbeam_channel::unbounded();
-            // Resolve in reverse order
-            let r2 = v8_serialize_str(&mut iso, &ctx, "dns-result");
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::BridgeResponse(
-                    crate::runtime_protocol::BridgeResponse {
-                        call_id: 2,
-                        status: 0,
-                        payload: r2,
-                    },
-                ),
-            ))
-            .unwrap();
-            let r1 = v8_serialize_str(&mut iso, &ctx, "fetch-result");
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::BridgeResponse(
-                    crate::runtime_protocol::BridgeResponse {
-                        call_id: 1,
-                        status: 0,
-                        payload: r1,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            let completed = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                crate::session::run_event_loop(scope, &rx, &pending, None, None)
-            };
-
-            assert!(matches!(
-                completed,
-                crate::session::EventLoopStatus::Completed
-            ));
-            assert_eq!(pending.len(), 0);
-            assert_eq!(eval(&mut iso, &ctx, "_r1"), "fetch-result");
-            assert_eq!(eval(&mut iso, &ctx, "_r2"), "dns-result");
-        }
-
-        // --- Part 33: Event loop — TerminateExecution breaks loop ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            eval(&mut iso, &ctx, "_asyncFn('test')");
-            assert_eq!(pending.len(), 1);
-
-            // Send TerminateExecution
-            let (tx, rx) = crossbeam_channel::unbounded();
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::TerminateExecution,
-            ))
-            .unwrap();
-
-            let completed = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                crate::session::run_event_loop(scope, &rx, &pending, None, None)
-            };
-
-            assert!(
-                matches!(completed, crate::session::EventLoopStatus::Terminated),
-                "event loop should return terminated status on termination"
-            );
-            // Promise is still pending (not resolved)
-            assert_eq!(pending.len(), 1);
-
-            // Cancel termination so isolate is usable again
-            iso.cancel_terminate_execution();
-        }
-
-        // --- Part 34: Event loop — Shutdown breaks loop ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            eval(&mut iso, &ctx, "_asyncFn('test')");
-            assert_eq!(pending.len(), 1);
-
-            // Send Shutdown
-            let (tx, rx) = crossbeam_channel::unbounded();
-            tx.send(crate::session::SessionCommand::Shutdown).unwrap();
-
-            let completed = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                crate::session::run_event_loop(scope, &rx, &pending, None, None)
-            };
-
-            assert!(
-                matches!(completed, crate::session::EventLoopStatus::Terminated),
-                "event loop should return terminated status on shutdown"
-            );
-        }
-
-        // --- Part 35: Event loop — exits immediately when no pending promises ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let pending = bridge::PendingPromises::new();
-
-            let (_tx, rx) = crossbeam_channel::unbounded::<crate::session::SessionCommand>();
-
-            // No pending promises — event loop should exit immediately
-            let completed = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                crate::session::run_event_loop(scope, &rx, &pending, None, None)
-            };
-
-            assert!(matches!(
-                completed,
-                crate::session::EventLoopStatus::Completed
-            ));
-        }
-
-        // --- Part 36: Event loop — StreamEvent dispatches to V8 callback ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            // Register dispatch callback and create pending promise
-            eval(
-                &mut iso,
-                &ctx,
-                "var _streamEvents = []; \
-                 globalThis._childProcessDispatch = function(eventType, payload) { \
-                     _streamEvents.push({ type: eventType, data: payload }); \
-                 }; \
-                 _asyncFn('keep-alive')",
-            );
-            assert_eq!(pending.len(), 1);
-
-            // Send StreamEvent followed by BridgeResponse
-            let (tx, rx) = crossbeam_channel::unbounded();
-
-            // Encode payload as V8-serialized string
-            let payload_bytes = v8_serialize_str(&mut iso, &ctx, "hello from child");
-
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::StreamEvent(
-                    crate::runtime_protocol::StreamEvent {
-                        event_type: "child_stdout".into(),
-                        payload: payload_bytes,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            // Resolve the pending promise to exit the event loop
-            let r = v8_serialize_null(&mut iso, &ctx);
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::BridgeResponse(
-                    crate::runtime_protocol::BridgeResponse {
-                        call_id: 1,
-                        status: 0,
-                        payload: r,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            let completed = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                crate::session::run_event_loop(scope, &rx, &pending, None, None)
-            };
-
-            assert!(matches!(
-                completed,
-                crate::session::EventLoopStatus::Completed
-            ));
-            assert_eq!(pending.len(), 0);
-
-            // Verify stream event was dispatched
-            assert_eq!(eval(&mut iso, &ctx, "_streamEvents.length"), "1");
-            assert_eq!(
-                eval(&mut iso, &ctx, "_streamEvents[0].type"),
-                "child_stdout"
-            );
-            assert_eq!(
-                eval(&mut iso, &ctx, "_streamEvents[0].data"),
-                "hello from child"
-            );
-        }
-
-        // --- Part 37: Event loop — microtasks flushed after BridgeResponse ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            // Set up .then handler that mutates global state
-            eval(
-                &mut iso,
-                &ctx,
-                "var _microtaskRan = false; \
-                 _asyncFn('test').then(function() { _microtaskRan = true; })",
-            );
-            assert!(eval_bool(&mut iso, &ctx, "_microtaskRan === false"));
-
-            let (tx, rx) = crossbeam_channel::unbounded();
-            let r = v8_serialize_null(&mut iso, &ctx);
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::BridgeResponse(
-                    crate::runtime_protocol::BridgeResponse {
-                        call_id: 1,
-                        status: 0,
-                        payload: r,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                crate::session::run_event_loop(scope, &rx, &pending, None, None);
-            }
-
-            // .then handler should have run (microtasks flushed)
-            assert!(eval_bool(&mut iso, &ctx, "_microtaskRan === true"));
-        }
-
-        // --- Part 38: StreamEvent dispatches child_stderr and child_exit ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            // Register child process dispatch and create pending promise
-            eval(
-                &mut iso,
-                &ctx,
-                "var _childEvents = []; \
-                 globalThis._childProcessDispatch = function(eventType, payload) { \
-                     _childEvents.push({ type: eventType, data: payload }); \
-                 }; \
-                 _asyncFn('keep-alive')",
-            );
-            assert_eq!(pending.len(), 1);
-
-            let (tx, rx) = crossbeam_channel::unbounded();
-
-            // Send child_stderr event
-            let stderr_payload = v8_serialize_str(&mut iso, &ctx, "error output");
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::StreamEvent(
-                    crate::runtime_protocol::StreamEvent {
-                        event_type: "child_stderr".into(),
-                        payload: stderr_payload,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            // Send child_exit event with exit code
-            let exit_payload = v8_serialize_int(&mut iso, &ctx, 1);
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::StreamEvent(
-                    crate::runtime_protocol::StreamEvent {
-                        event_type: "child_exit".into(),
-                        payload: exit_payload,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            // Resolve the pending promise to exit the event loop
-            let r = v8_serialize_null(&mut iso, &ctx);
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::BridgeResponse(
-                    crate::runtime_protocol::BridgeResponse {
-                        call_id: 1,
-                        status: 0,
-                        payload: r,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            let completed = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                crate::session::run_event_loop(scope, &rx, &pending, None, None)
-            };
-
-            assert!(matches!(
-                completed,
-                crate::session::EventLoopStatus::Completed
-            ));
-            assert_eq!(eval(&mut iso, &ctx, "_childEvents.length"), "2");
-            assert_eq!(eval(&mut iso, &ctx, "_childEvents[0].type"), "child_stderr");
-            assert_eq!(eval(&mut iso, &ctx, "_childEvents[0].data"), "error output");
-            assert_eq!(eval(&mut iso, &ctx, "_childEvents[1].type"), "child_exit");
-            assert_eq!(eval(&mut iso, &ctx, "_childEvents[1].data"), "1");
-        }
-
-        // --- Part 39: StreamEvent dispatches http_request to _httpServerDispatch ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            // Register HTTP dispatch and create pending promise
-            eval(
-                &mut iso,
-                &ctx,
-                "var _httpEvents = []; \
-                 globalThis._httpServerDispatch = function(eventType, payload) { \
-                     _httpEvents.push({ type: eventType, data: payload }); \
-                 }; \
-                 _asyncFn('keep-alive')",
-            );
-            assert_eq!(pending.len(), 1);
-
-            let (tx, rx) = crossbeam_channel::unbounded();
-
-            // Send http_request event with request data
-            let http_payload =
-                v8_serialize_eval(&mut iso, &ctx, "({method: 'GET', url: '/api/test'})");
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::StreamEvent(
-                    crate::runtime_protocol::StreamEvent {
-                        event_type: "http_request".into(),
-                        payload: http_payload,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            // Resolve the pending promise to exit the event loop
-            let r = v8_serialize_null(&mut iso, &ctx);
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::BridgeResponse(
-                    crate::runtime_protocol::BridgeResponse {
-                        call_id: 1,
-                        status: 0,
-                        payload: r,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            let completed = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                crate::session::run_event_loop(scope, &rx, &pending, None, None)
-            };
-
-            assert!(matches!(
-                completed,
-                crate::session::EventLoopStatus::Completed
-            ));
-            assert_eq!(eval(&mut iso, &ctx, "_httpEvents.length"), "1");
-            assert_eq!(eval(&mut iso, &ctx, "_httpEvents[0].type"), "http_request");
-            assert_eq!(eval(&mut iso, &ctx, "_httpEvents[0].data.method"), "GET");
-            assert_eq!(eval(&mut iso, &ctx, "_httpEvents[0].data.url"), "/api/test");
-        }
-
-        // --- Part 40: StreamEvent with unknown event_type is ignored ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            eval(
-                &mut iso,
-                &ctx,
-                "var _anyDispatched = false; \
-                 globalThis._childProcessDispatch = function() { _anyDispatched = true; }; \
-                 globalThis._httpServerDispatch = function() { _anyDispatched = true; }; \
-                 _asyncFn('keep-alive')",
-            );
-            assert_eq!(pending.len(), 1);
-
-            let (tx, rx) = crossbeam_channel::unbounded();
-
-            // Send unknown event type
-            let payload = v8_serialize_null(&mut iso, &ctx);
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::StreamEvent(
-                    crate::runtime_protocol::StreamEvent {
-                        event_type: "unknown_event".into(),
-                        payload,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            // Resolve pending promise to exit loop
-            let r = v8_serialize_null(&mut iso, &ctx);
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::BridgeResponse(
-                    crate::runtime_protocol::BridgeResponse {
-                        call_id: 1,
-                        status: 0,
-                        payload: r,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            let completed = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                crate::session::run_event_loop(scope, &rx, &pending, None, None)
-            };
-
-            assert!(matches!(
-                completed,
-                crate::session::EventLoopStatus::Completed
-            ));
-            // Unknown event should NOT have dispatched to any handler
-            assert!(eval_bool(&mut iso, &ctx, "_anyDispatched === false"));
-        }
-
-        // --- Part 41: StreamEvent dispatch with missing callback is safe (no crash) ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            // No dispatch functions registered, just create a pending promise
-            eval(&mut iso, &ctx, "_asyncFn('keep-alive')");
-            assert_eq!(pending.len(), 1);
-
-            let (tx, rx) = crossbeam_channel::unbounded();
-
-            // Send child_stdout without _childProcessDispatch registered
-            let payload = v8_serialize_str(&mut iso, &ctx, "data");
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::StreamEvent(
-                    crate::runtime_protocol::StreamEvent {
-                        event_type: "child_stdout".into(),
-                        payload,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            // Resolve pending promise
-            let r = v8_serialize_null(&mut iso, &ctx);
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::BridgeResponse(
-                    crate::runtime_protocol::BridgeResponse {
-                        call_id: 1,
-                        status: 0,
-                        payload: r,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            // Should not crash even without dispatch function registered
-            let completed = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                crate::session::run_event_loop(scope, &rx, &pending, None, None)
-            };
-
-            assert!(matches!(
-                completed,
-                crate::session::EventLoopStatus::Completed
-            ));
-        }
-
-        // --- Part 42: StreamEvent microtasks flushed after dispatch ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-            let pending = bridge::PendingPromises::new();
-
-            let _fn_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _fn_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_asyncFn"],
-                );
-            }
-
-            // Set up dispatch that enqueues a microtask via Promise.resolve().then()
-            eval(
-                &mut iso,
-                &ctx,
-                "var _microtaskRanFromStream = false; \
-                 globalThis._childProcessDispatch = function(eventType, payload) { \
-                     Promise.resolve().then(function() { _microtaskRanFromStream = true; }); \
-                 }; \
-                 _asyncFn('keep-alive')",
-            );
-            assert_eq!(pending.len(), 1);
-
-            let (tx, rx) = crossbeam_channel::unbounded();
-
-            let payload = v8_serialize_str(&mut iso, &ctx, "data");
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::StreamEvent(
-                    crate::runtime_protocol::StreamEvent {
-                        event_type: "child_stdout".into(),
-                        payload,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            // Resolve pending promise
-            let r = v8_serialize_null(&mut iso, &ctx);
-            tx.send(crate::session::SessionCommand::Message(
-                crate::runtime_protocol::SessionMessage::BridgeResponse(
-                    crate::runtime_protocol::BridgeResponse {
-                        call_id: 1,
-                        status: 0,
-                        payload: r,
-                    },
-                ),
-            ))
-            .unwrap();
-
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                crate::session::run_event_loop(scope, &rx, &pending, None, None);
-            }
-
-            // Microtask enqueued by the dispatch callback should have run
-            assert!(eval_bool(
-                &mut iso,
-                &ctx,
-                "_microtaskRanFromStream === true"
-            ));
-        }
-
-        // --- Part 43: Timeout terminates infinite loop ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            // Create abort channel for timeout
-            let (abort_tx, _abort_rx) = crossbeam_channel::bounded::<()>(0);
-
-            // Get isolate handle for the timeout guard
-            let iso_handle = iso.thread_safe_handle();
-
-            // Start a 50ms timeout
-            let mut guard = crate::timeout::TimeoutGuard::new(50, iso_handle, abort_tx)
-                .expect("timeout guard should start");
-
-            // Run an infinite loop — timeout should terminate it
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(scope, "", "while(true) {}", &mut None)
-            };
-
-            assert!(guard.timed_out(), "timeout should have fired");
-            // V8 termination causes an error
-            assert_eq!(code, 1);
-            assert!(error.is_some());
-
-            guard.cancel();
-        }
-
-        // --- Part 44: Timeout cancelled when execution completes before deadline ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let (abort_tx, _abort_rx) = crossbeam_channel::bounded::<()>(0);
-            let iso_handle = iso.thread_safe_handle();
-
-            // 5 second timeout — execution completes well before
-            let mut guard = crate::timeout::TimeoutGuard::new(5000, iso_handle, abort_tx)
-                .expect("timeout guard should start");
-
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(scope, "", "1 + 1", &mut None)
-            };
-
-            assert!(!guard.timed_out(), "timeout should not have fired");
-            assert_eq!(code, 0);
-            assert!(error.is_none());
-
-            guard.cancel();
-        }
-
-        // --- Part 45: Timeout fires during sync bridge call (unblocks channel reader) ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            // Set up abort channel for timeout
-            let (abort_tx, abort_rx) = crossbeam_channel::bounded::<()>(0);
-            let iso_handle = iso.thread_safe_handle();
-
-            // Create a BridgeCallContext with a channel reader that monitors abort_rx
-            // Simulate: JS calls a sync bridge function, but no response comes back.
-            // The timeout should unblock the reader via abort channel.
-            let (cmd_tx, cmd_rx) = crossbeam_channel::unbounded::<crate::session::SessionCommand>();
-
-            // Writer goes to a buffer (we don't care about outgoing messages)
-            let writer_buf = Arc::new(Mutex::new(Vec::new()));
-
-            // Create the bridge context with a channel-based reader
-            // We can't use ChannelMessageReader directly (it's #[cfg(not(test))])
-            // Instead, test the abort_rx behavior through run_event_loop
-
-            let pending = bridge::PendingPromises::new();
-
-            // Register an async bridge function that sends a BridgeCall
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(SharedWriter(Arc::clone(&writer_buf))),
-                Box::new(Cursor::new(Vec::new())), // unused for async
-                "test-session".into(),
-            );
-            let _async_store;
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                _async_store = bridge::register_async_bridge_fns(
-                    scope,
-                    &bridge_ctx as *const BridgeCallContext,
-                    &pending as *const bridge::PendingPromises,
-                    &["_slowFn"],
-                );
-            }
-
-            // Execute code that calls async bridge function (creates a pending promise)
-            let (_code, _error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(scope, "", "_slowFn('never-responds')", &mut None)
-            };
-
-            assert_eq!(pending.len(), 1, "should have 1 pending promise");
-
-            // Start a 50ms timeout
-            let mut guard = crate::timeout::TimeoutGuard::new(50, iso_handle, abort_tx)
-                .expect("timeout guard should start");
-
-            // Run event loop — it should be terminated by the timeout
-            // (no messages on cmd_rx, so it blocks until abort_rx fires)
-            let completed = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                crate::session::run_event_loop(scope, &cmd_rx, &pending, Some(&abort_rx), None)
-            };
-
-            assert!(
-                matches!(completed, crate::session::EventLoopStatus::Terminated),
-                "event loop should have been terminated"
-            );
-            assert!(guard.timed_out(), "timeout should have fired");
-
-            guard.cancel();
-            drop(cmd_tx); // clean up
-        }
-
-        // --- Part 46: Timeout error message structure ---
-        {
-            // Verify that the timeout error produced by the session matches expectations.
-            // This tests the ipc::ExecutionError structure, not V8 directly.
-            let err = crate::ipc::ExecutionError {
-                error_type: "Error".into(),
-                message: "Script execution timed out".into(),
-                stack: String::new(),
-                code: Some("ERR_SCRIPT_EXECUTION_TIMEOUT".into()),
-            };
-            assert_eq!(err.error_type, "Error");
-            assert_eq!(err.message, "Script execution timed out");
-            assert_eq!(err.code, Some("ERR_SCRIPT_EXECUTION_TIMEOUT".into()));
-        }
-
-        // --- Part 47: ProcessExitError detected via _isProcessExit sentinel ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            // Simulate ProcessExitError: an Error object with _isProcessExit: true and code: 42
-            let code = r#"
-                var err = new Error("process.exit(42)");
-                err._isProcessExit = true;
-                err.code = 42;
-                throw err;
-            "#;
-
-            let (exit_code, error) = execute_script(scope, "", code, &mut None);
-            assert_eq!(
-                exit_code, 42,
-                "ProcessExitError should return the error's exit code"
-            );
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "Error");
-            assert!(err.message.contains("process.exit(42)"));
-            // Numeric .code should NOT appear in the string code field
-            assert_eq!(err.code, None);
-        }
-
-        // --- Part 48: ProcessExitError with exit code 0 ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            let code = r#"
-                var err = new Error("process.exit(0)");
-                err._isProcessExit = true;
-                err.code = 0;
-                throw err;
-            "#;
-
-            let (exit_code, error) = execute_script(scope, "", code, &mut None);
-            assert_eq!(
-                exit_code, 0,
-                "ProcessExitError code 0 should return exit code 0"
-            );
-            assert!(error.is_some());
-        }
-
-        // --- Part 49: Non-ProcessExitError returns exit code 1 ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            // Regular error without _isProcessExit sentinel
-            let code = r#"throw new TypeError("not a process exit")"#;
-
-            let (exit_code, error) = execute_script(scope, "", code, &mut None);
-            assert_eq!(exit_code, 1, "Regular errors should return exit code 1");
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "TypeError");
-            assert_eq!(err.message, "not a process exit");
-        }
-
-        // --- Part 50: ProcessExitError with custom constructor name ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            // Custom ProcessExitError class
-            let code = r#"
-                class ProcessExitError extends Error {
-                    constructor(exitCode) {
-                        super("process exited with code " + exitCode);
-                        this._isProcessExit = true;
-                        this.code = exitCode;
-                    }
-                }
-                throw new ProcessExitError(7);
-            "#;
-
-            let (exit_code, error) = execute_script(scope, "", code, &mut None);
-            assert_eq!(exit_code, 7);
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "ProcessExitError");
-            assert!(err.message.contains("process exited with code 7"));
-        }
-
-        // --- Part 51: extract_process_exit_code returns None for non-objects ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            // Thrown string — not an object, should not be detected as ProcessExitError
-            let code = r#"throw "just a string""#;
-            let (exit_code, error) = execute_script(scope, "", code, &mut None);
-            assert_eq!(exit_code, 1);
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "Error");
-            assert_eq!(err.message, "just a string");
-
-            // Object without _isProcessExit sentinel
-            let code2 = r#"
-                var obj = new Error("no sentinel");
-                obj._isProcessExit = false;
-                obj.code = 99;
-                throw obj;
-            "#;
-            let (exit_code2, error2) = execute_script(scope, "", code2, &mut None);
-            assert_eq!(exit_code2, 1, "_isProcessExit:false should not be detected");
-            assert!(error2.is_some());
-        }
-
-        // --- Part 52: Error with string code field (Node-style) preserved ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            let code = r#"
-                var err = new Error("Cannot find module './missing'");
-                err.code = "ERR_MODULE_NOT_FOUND";
-                throw err;
-            "#;
-
-            let (exit_code, error) = execute_script(scope, "", code, &mut None);
-            assert_eq!(exit_code, 1);
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "Error");
-            assert_eq!(err.code, Some("ERR_MODULE_NOT_FOUND".into()));
-        }
-
-        // --- Part 53: Error type from constructor name for standard errors ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            // SyntaxError
-            let (_, err) = execute_script(scope, "", "eval('function(')", &mut None);
-            let err = err.unwrap();
-            assert_eq!(err.error_type, "SyntaxError");
-
-            // RangeError
-            let (_, err2) = execute_script(scope, "", "new Array(-1)", &mut None);
-            let err2 = err2.unwrap();
-            assert_eq!(err2.error_type, "RangeError");
-
-            // ReferenceError
-            let (_, err3) = execute_script(scope, "", "undefinedVariable", &mut None);
-            let err3 = err3.unwrap();
-            assert_eq!(err3.error_type, "ReferenceError");
-        }
-
-        // --- Part 54: process.exitCode is honored for synchronous completion ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-            execute_script(
-                scope,
-                "",
-                "globalThis.process = { exitCode: 0 };",
-                &mut None,
-            );
-
-            let (exit_code, error) = execute_script(scope, "", "process.exitCode = 3;", &mut None);
-            assert_eq!(exit_code, 3);
-            assert!(error.is_none());
-        }
-
-        // --- Part 55: process.exitCode is honored for fulfilled async completion ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-            execute_script(
-                scope,
-                "",
-                "globalThis.process = { exitCode: 0 };",
-                &mut None,
-            );
-
-            let (exit_code, error) = execute_script(
-                scope,
-                "",
-                "(async () => { process.exitCode = 4; })()",
-                &mut None,
-            );
-            assert_eq!(exit_code, 4);
-            assert!(error.is_none());
-        }
-
-        // --- Part 54: Stack trace extracted from error.stack property ---
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            let code = r#"
-                function innerFn() { throw new Error("deep error"); }
-                function outerFn() { innerFn(); }
-                outerFn();
-            "#;
-
-            let (_, error) = execute_script(scope, "", code, &mut None);
-            let err = error.unwrap();
-            assert_eq!(err.error_type, "Error");
-            assert_eq!(err.message, "deep error");
-            assert!(
-                err.stack.contains("innerFn"),
-                "stack should contain innerFn"
-            );
-            assert!(
-                err.stack.contains("outerFn"),
-                "stack should contain outerFn"
-            );
-        }
-
-        // --- V8 ValueSerializer/ValueDeserializer round-trip tests ---
-
-        // Part 55: Primitives round-trip (null, undefined, true, false, integers, floats)
-        {
-            use crate::bridge::{
-                deserialize_v8_wire_value as deserialize_v8_value,
-                serialize_v8_wire_value as serialize_v8_value,
-            };
-
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            // null
-            let null_val = v8::null(scope).into();
-            let bytes = serialize_v8_value(scope, null_val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_null());
-
-            // undefined
-            let undef_val = v8::undefined(scope).into();
-            let bytes = serialize_v8_value(scope, undef_val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_undefined());
-
-            // true
-            let bool_val = v8::Boolean::new(scope, true).into();
-            let bytes = serialize_v8_value(scope, bool_val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_true());
-
-            // false
-            let bool_val = v8::Boolean::new(scope, false).into();
-            let bytes = serialize_v8_value(scope, bool_val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_false());
-
-            // integer
-            let num_val: v8::Local<v8::Value> = v8::Integer::new(scope, 42).into();
-            let bytes = serialize_v8_value(scope, num_val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert_eq!(out.int32_value(scope).unwrap(), 42);
-
-            // negative integer
-            let num_val: v8::Local<v8::Value> = v8::Integer::new(scope, -7).into();
-            let bytes = serialize_v8_value(scope, num_val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert_eq!(out.int32_value(scope).unwrap(), -7);
-
-            // float
-            let num_val: v8::Local<v8::Value> = v8::Number::new(scope, 3.125).into();
-            let bytes = serialize_v8_value(scope, num_val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!((out.number_value(scope).unwrap() - 3.125).abs() < 1e-10);
-        }
-
-        // Part 56: Strings round-trip
-        {
-            use crate::bridge::{
-                deserialize_v8_wire_value as deserialize_v8_value,
-                serialize_v8_wire_value as serialize_v8_value,
-            };
-
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            // ASCII string
-            let s = v8::String::new(scope, "hello world").unwrap();
-            let bytes = serialize_v8_value(scope, s.into()).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_string());
-            assert_eq!(out.to_rust_string_lossy(scope), "hello world");
-
-            // Empty string
-            let s = v8::String::new(scope, "").unwrap();
-            let bytes = serialize_v8_value(scope, s.into()).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_string());
-            assert_eq!(out.to_rust_string_lossy(scope), "");
-
-            // Unicode string
-            let s = v8::String::new(scope, "hello 🌍 world").unwrap();
-            let bytes = serialize_v8_value(scope, s.into()).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert_eq!(out.to_rust_string_lossy(scope), "hello 🌍 world");
-        }
-
-        // Part 57: Arrays round-trip
-        {
-            use crate::bridge::{
-                deserialize_v8_wire_value as deserialize_v8_value,
-                serialize_v8_wire_value as serialize_v8_value,
-            };
-
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            // [1, "two", true, null]
-            let arr = v8::Array::new(scope, 4);
-            let v1: v8::Local<v8::Value> = v8::Integer::new(scope, 1).into();
-            let v2: v8::Local<v8::Value> = v8::String::new(scope, "two").unwrap().into();
-            let v3: v8::Local<v8::Value> = v8::Boolean::new(scope, true).into();
-            let v4: v8::Local<v8::Value> = v8::null(scope).into();
-            arr.set_index(scope, 0, v1);
-            arr.set_index(scope, 1, v2);
-            arr.set_index(scope, 2, v3);
-            arr.set_index(scope, 3, v4);
-
-            let bytes = serialize_v8_value(scope, arr.into()).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_array());
-            let out_arr = v8::Local::<v8::Array>::try_from(out).unwrap();
-            assert_eq!(out_arr.length(), 4);
-            assert_eq!(
-                out_arr
-                    .get_index(scope, 0)
-                    .unwrap()
-                    .int32_value(scope)
-                    .unwrap(),
-                1
-            );
-            assert_eq!(
-                out_arr
-                    .get_index(scope, 1)
-                    .unwrap()
-                    .to_rust_string_lossy(scope),
-                "two"
-            );
-            assert!(out_arr.get_index(scope, 2).unwrap().is_true());
-            assert!(out_arr.get_index(scope, 3).unwrap().is_null());
-
-            // Empty array
-            let empty_arr = v8::Array::new(scope, 0);
-            let bytes = serialize_v8_value(scope, empty_arr.into()).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_array());
-            assert_eq!(v8::Local::<v8::Array>::try_from(out).unwrap().length(), 0);
-        }
-
-        // Part 58: Objects round-trip
-        {
-            use crate::bridge::{
-                deserialize_v8_wire_value as deserialize_v8_value,
-                serialize_v8_wire_value as serialize_v8_value,
-            };
-
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            // { name: "test", count: 42, active: true }
-            let obj = v8::Object::new(scope);
-            let k1 = v8::String::new(scope, "name").unwrap();
-            let v1: v8::Local<v8::Value> = v8::String::new(scope, "test").unwrap().into();
-            let k2 = v8::String::new(scope, "count").unwrap();
-            let v2: v8::Local<v8::Value> = v8::Integer::new(scope, 42).into();
-            let k3 = v8::String::new(scope, "active").unwrap();
-            let v3: v8::Local<v8::Value> = v8::Boolean::new(scope, true).into();
-            obj.set(scope, k1.into(), v1);
-            obj.set(scope, k2.into(), v2);
-            obj.set(scope, k3.into(), v3);
-
-            let bytes = serialize_v8_value(scope, obj.into()).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_object());
-            let out_obj = v8::Local::<v8::Object>::try_from(out).unwrap();
-            let k = v8::String::new(scope, "name").unwrap();
-            assert_eq!(
-                out_obj
-                    .get(scope, k.into())
-                    .unwrap()
-                    .to_rust_string_lossy(scope),
-                "test"
-            );
-            let k = v8::String::new(scope, "count").unwrap();
-            assert_eq!(
-                out_obj
-                    .get(scope, k.into())
-                    .unwrap()
-                    .int32_value(scope)
-                    .unwrap(),
-                42
-            );
-            let k = v8::String::new(scope, "active").unwrap();
-            assert!(out_obj.get(scope, k.into()).unwrap().is_true());
-        }
-
-        // Part 59: Uint8Array round-trip
-        {
-            use crate::bridge::{
-                deserialize_v8_wire_value as deserialize_v8_value,
-                serialize_v8_wire_value as serialize_v8_value,
-            };
-
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            let data = [0u8, 1, 2, 255, 128, 64];
-            let ab = v8::ArrayBuffer::new(scope, data.len());
-            {
-                let bs = ab.get_backing_store();
-                unsafe {
-                    std::ptr::copy_nonoverlapping(
-                        data.as_ptr(),
-                        bs.data().unwrap().as_ptr() as *mut u8,
-                        data.len(),
-                    );
-                }
-            }
-            let u8arr = v8::Uint8Array::new(scope, ab, 0, data.len()).unwrap();
-
-            let bytes = serialize_v8_value(scope, u8arr.into()).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_uint8_array());
-            let out_arr = v8::Local::<v8::Uint8Array>::try_from(out).unwrap();
-            assert_eq!(out_arr.byte_length(), 6);
-            let mut buf = vec![0u8; 6];
-            out_arr.copy_contents(&mut buf);
-            assert_eq!(buf, vec![0, 1, 2, 255, 128, 64]);
-        }
-
-        // Part 60: Nested structures round-trip
-        {
-            use crate::bridge::{
-                deserialize_v8_wire_value as deserialize_v8_value,
-                serialize_v8_wire_value as serialize_v8_value,
-            };
-
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            // Build via JS: { items: [1, { nested: "value" }], flag: false }
-            let code = r#"
-                ({
-                    items: [1, { nested: "value" }],
-                    flag: false
-                })
-            "#;
-            let source = v8::String::new(scope, code).unwrap();
-            let script = v8::Script::compile(scope, source, None).unwrap();
-            let val = script.run(scope).unwrap();
-
-            let bytes = serialize_v8_value(scope, val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_object());
-            let out_obj = v8::Local::<v8::Object>::try_from(out).unwrap();
-
-            // Check items array
-            let k = v8::String::new(scope, "items").unwrap();
-            let items = out_obj.get(scope, k.into()).unwrap();
-            assert!(items.is_array());
-            let items_arr = v8::Local::<v8::Array>::try_from(items).unwrap();
-            assert_eq!(items_arr.length(), 2);
-            assert_eq!(
-                items_arr
-                    .get_index(scope, 0)
-                    .unwrap()
-                    .int32_value(scope)
-                    .unwrap(),
-                1
-            );
-            let inner = items_arr.get_index(scope, 1).unwrap();
-            assert!(inner.is_object());
-            let inner_obj = v8::Local::<v8::Object>::try_from(inner).unwrap();
-            let k = v8::String::new(scope, "nested").unwrap();
-            assert_eq!(
-                inner_obj
-                    .get(scope, k.into())
-                    .unwrap()
-                    .to_rust_string_lossy(scope),
-                "value"
-            );
-
-            // Check flag
-            let k = v8::String::new(scope, "flag").unwrap();
-            assert!(out_obj.get(scope, k.into()).unwrap().is_false());
-        }
-
-        // Part 61: Date, RegExp, Map, Set, Error round-trip via JS eval
-        {
-            use crate::bridge::{
-                deserialize_v8_wire_value as deserialize_v8_value,
-                serialize_v8_wire_value as serialize_v8_value,
-            };
-
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            // Date
-            let source = v8::String::new(scope, "new Date(1700000000000)").unwrap();
-            let script = v8::Script::compile(scope, source, None).unwrap();
-            let date_val = script.run(scope).unwrap();
-            let bytes = serialize_v8_value(scope, date_val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_date());
-            let date = v8::Local::<v8::Date>::try_from(out).unwrap();
-            assert_eq!(date.value_of(), 1700000000000.0);
-
-            // RegExp
-            let source = v8::String::new(scope, "/abc/gi").unwrap();
-            let script = v8::Script::compile(scope, source, None).unwrap();
-            let re_val = script.run(scope).unwrap();
-            let bytes = serialize_v8_value(scope, re_val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_reg_exp());
-
-            // Map
-            let source = v8::String::new(scope, "new Map([['a', 1], ['b', 2]])").unwrap();
-            let script = v8::Script::compile(scope, source, None).unwrap();
-            let map_val = script.run(scope).unwrap();
-            let bytes = serialize_v8_value(scope, map_val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_map());
-            let map = v8::Local::<v8::Map>::try_from(out).unwrap();
-            assert_eq!(map.size(), 2);
-
-            // Set
-            let source = v8::String::new(scope, "new Set([10, 20, 30])").unwrap();
-            let script = v8::Script::compile(scope, source, None).unwrap();
-            let set_val = script.run(scope).unwrap();
-            let bytes = serialize_v8_value(scope, set_val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_set());
-            let set = v8::Local::<v8::Set>::try_from(out).unwrap();
-            assert_eq!(set.size(), 3);
-
-            // Error
-            let source = v8::String::new(scope, "new TypeError('oops')").unwrap();
-            let script = v8::Script::compile(scope, source, None).unwrap();
-            let err_val = script.run(scope).unwrap();
-            let bytes = serialize_v8_value(scope, err_val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            // Error is serialized as a plain object with message property
-            assert!(out.is_object());
-            let out_obj = v8::Local::<v8::Object>::try_from(out).unwrap();
-            let k = v8::String::new(scope, "message").unwrap();
-            let msg = out_obj.get(scope, k.into()).unwrap();
-            assert_eq!(msg.to_rust_string_lossy(scope), "oops");
-        }
-
-        // Part 62: Circular references round-trip
-        {
-            use crate::bridge::{
-                deserialize_v8_wire_value as deserialize_v8_value,
-                serialize_v8_wire_value as serialize_v8_value,
-            };
-
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            // Build circular reference via JS
-            let source = v8::String::new(scope, "var o = { a: 1 }; o.self = o; o").unwrap();
-            let script = v8::Script::compile(scope, source, None).unwrap();
-            let circ_val = script.run(scope).unwrap();
-
-            let bytes = serialize_v8_value(scope, circ_val).unwrap();
-            let out = deserialize_v8_value(scope, &bytes).unwrap();
-            assert!(out.is_object());
-            let out_obj = v8::Local::<v8::Object>::try_from(out).unwrap();
-
-            // Verify the self-reference resolves
-            let k = v8::String::new(scope, "a").unwrap();
-            assert_eq!(
-                out_obj
-                    .get(scope, k.into())
-                    .unwrap()
-                    .int32_value(scope)
-                    .unwrap(),
-                1
-            );
-            let k = v8::String::new(scope, "self").unwrap();
-            let self_ref = out_obj.get(scope, k.into()).unwrap();
-            assert!(self_ref.is_object());
-            // The self reference should point back to the same structure
-            let self_obj = v8::Local::<v8::Object>::try_from(self_ref).unwrap();
-            let k = v8::String::new(scope, "a").unwrap();
-            assert_eq!(
-                self_obj
-                    .get(scope, k.into())
-                    .unwrap()
-                    .int32_value(scope)
-                    .unwrap(),
-                1
-            );
-        }
-
-        // --- V8 Code Caching tests ---
-
-        // Part 60: First execution populates the cache
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let mut cache: Option<BridgeCodeCache> = None;
-
-            let bridge = "(function() { globalThis._cached = 'yes'; })()";
-            let (code, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(scope, bridge, "var _saw = _cached;", &mut cache)
-            };
-
-            assert_eq!(code, 0);
-            assert!(error.is_none());
-            assert_eq!(eval(&mut iso, &ctx, "_saw"), "yes");
-            // Cache should be populated after first compile
-            assert!(
-                cache.is_some(),
-                "cache should be populated after first execution"
-            );
-            assert!(!cache.as_ref().unwrap().cached_data.is_empty());
-        }
-
-        // Part 61: Second execution uses the cache and produces correct results
-        {
-            let mut iso = isolate::create_isolate(None);
-            let mut cache: Option<BridgeCodeCache> = None;
-            let bridge = "(function() { globalThis._counter = (globalThis._counter || 0) + 1; })()";
-
-            // First execution — populates cache
-            {
-                let ctx = isolate::create_context(&mut iso);
-                let (code, _) = {
-                    let scope = &mut v8::HandleScope::new(&mut iso);
-                    let local = v8::Local::new(scope, &ctx);
-                    let scope = &mut v8::ContextScope::new(scope, local);
-                    execute_script(scope, bridge, "", &mut cache)
-                };
-                assert_eq!(code, 0);
-                assert!(cache.is_some());
-            }
-
-            let cached_data_len = cache.as_ref().unwrap().cached_data.len();
-
-            // Second execution — consumes cache (fresh context)
-            {
-                let ctx = isolate::create_context(&mut iso);
-                let (code, _) = {
-                    let scope = &mut v8::HandleScope::new(&mut iso);
-                    let local = v8::Local::new(scope, &ctx);
-                    let scope = &mut v8::ContextScope::new(scope, local);
-                    execute_script(scope, bridge, "", &mut cache)
-                };
-                assert_eq!(code, 0);
-                // Cache should still be present (not invalidated)
-                assert!(
-                    cache.is_some(),
-                    "cache should persist after second execution"
-                );
-                // Cached data should be same size (same code, same cache)
-                assert_eq!(cache.as_ref().unwrap().cached_data.len(), cached_data_len);
-                // Bridge code executed correctly
-                assert_eq!(eval(&mut iso, &ctx, "String(_counter)"), "1");
-            }
-        }
-
-        // Part 62: Cache is invalidated when bridge code changes
-        {
-            let mut iso = isolate::create_isolate(None);
-            let mut cache: Option<BridgeCodeCache> = None;
-
-            // Populate cache with bridge A
-            {
-                let ctx = isolate::create_context(&mut iso);
-                let (code, _) = {
-                    let scope = &mut v8::HandleScope::new(&mut iso);
-                    let local = v8::Local::new(scope, &ctx);
-                    let scope = &mut v8::ContextScope::new(scope, local);
-                    execute_script(
-                        scope,
-                        "(function() { globalThis.x = 'A'; })()",
-                        "",
-                        &mut cache,
-                    )
-                };
-                assert_eq!(code, 0);
-                assert!(cache.is_some());
-            }
-
-            let hash_a = cache.as_ref().unwrap().source_hash;
-
-            // Execute with different bridge code — cache should be replaced
-            {
-                let ctx = isolate::create_context(&mut iso);
-                let (code, _) = {
-                    let scope = &mut v8::HandleScope::new(&mut iso);
-                    let local = v8::Local::new(scope, &ctx);
-                    let scope = &mut v8::ContextScope::new(scope, local);
-                    execute_script(
-                        scope,
-                        "(function() { globalThis.x = 'B'; })()",
-                        "",
-                        &mut cache,
-                    )
-                };
-                assert_eq!(code, 0);
-                assert!(cache.is_some());
-                // Hash should be different
-                assert_ne!(cache.as_ref().unwrap().source_hash, hash_a);
-                // Code should have executed correctly
-                assert_eq!(eval(&mut iso, &ctx, "x"), "B");
-            }
-        }
-
-        // Part 63: Code caching works with execute_module
-        {
-            let mut iso = isolate::create_isolate(None);
-            let mut cache: Option<BridgeCodeCache> = None;
-
-            let output = Arc::new(Mutex::new(Vec::new()));
-            let writer = SharedWriter(Arc::clone(&output));
-            let reader = Cursor::new(Vec::new());
-            let bridge_ctx =
-                BridgeCallContext::new(Box::new(writer), Box::new(reader), "test-session".into());
-
-            let bridge = "(function() { globalThis._moduleBridge = true; })()";
-
-            // First execution populates cache
-            {
-                let ctx = isolate::create_context(&mut iso);
-                let (code, _, _) = {
-                    let scope = &mut v8::HandleScope::new(&mut iso);
-                    let local = v8::Local::new(scope, &ctx);
-                    let scope = &mut v8::ContextScope::new(scope, local);
-                    execute_module(
-                        scope,
-                        &bridge_ctx,
-                        bridge,
-                        "export const a = 1;",
-                        None,
-                        &mut cache,
-                    )
-                };
-                assert_eq!(code, 0);
-                assert!(cache.is_some());
-            }
-
-            // Second execution consumes cache
-            {
-                let ctx = isolate::create_context(&mut iso);
-                let (code, exports, _) = {
-                    let scope = &mut v8::HandleScope::new(&mut iso);
-                    let local = v8::Local::new(scope, &ctx);
-                    let scope = &mut v8::ContextScope::new(scope, local);
-                    execute_module(
-                        scope,
-                        &bridge_ctx,
-                        bridge,
-                        "export const b = 2;",
-                        None,
-                        &mut cache,
-                    )
-                };
-                assert_eq!(code, 0);
-                assert!(exports.is_some());
-                assert!(cache.is_some());
-            }
-        }
-
-        // Part 64: Empty bridge code does not populate cache
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let mut cache: Option<BridgeCodeCache> = None;
-
-            let (code, _) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_script(scope, "", "var x = 1;", &mut cache)
-            };
-
-            assert_eq!(code, 0);
-            assert!(
-                cache.is_none(),
-                "cache should not be populated for empty bridge code"
-            );
-        }
-
-        // Part 65: Batch resolve — multiple imports prefetched in one round-trip
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let mut response_buf = Vec::new();
-
-            // Batch response (call_id=1): two resolved modules
-            let batch_result = v8_serialize_eval(
-                &mut iso,
-                &ctx,
-                "[{resolved: '/a.mjs', source: 'export const a = 1;'}, {resolved: '/b.mjs', source: 'export const b = 2;'}]",
-            );
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 1,
-                    status: 0,
-                    payload: batch_result,
-                },
-            )
-            .unwrap();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 2,
-                    status: 0,
-                    payload: v8_serialize_str(&mut iso, &ctx, "module"),
-                },
-            )
-            .unwrap();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 3,
-                    status: 0,
-                    payload: v8_serialize_str(&mut iso, &ctx, "module"),
-                },
-            )
-            .unwrap();
-
-            let writer_buf = Arc::new(Mutex::new(Vec::new()));
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(SharedWriter(Arc::clone(&writer_buf))),
-                Box::new(Cursor::new(response_buf)),
-                "test-session".into(),
-            );
-
-            let user_code = "import { a } from './a.mjs';\nimport { b } from './b.mjs';\nexport const sum = a + b;";
-            let (code, exports, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_module(
-                    scope,
-                    &bridge_ctx,
-                    "",
-                    user_code,
-                    Some("/app/main.mjs"),
-                    &mut None,
-                )
-            };
-
-            assert_eq!(code, 0, "error: {:?}", error);
-            assert!(error.is_none());
-            let exports = exports.unwrap();
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                let val = crate::bridge::deserialize_v8_value(scope, &exports).unwrap();
-                let obj = v8::Local::<v8::Object>::try_from(val).unwrap();
-                let k = v8::String::new(scope, "sum").unwrap();
-                assert_eq!(
-                    obj.get(scope, k.into())
-                        .unwrap()
-                        .int32_value(scope)
-                        .unwrap(),
-                    3
-                );
-            }
-
-            // Verify only one BridgeCall was sent (the batch call, not individual calls)
-            let written = writer_buf.lock().unwrap();
-            let call = crate::ipc_binary::read_frame(&mut Cursor::new(&*written)).unwrap();
-            match call {
-                crate::ipc_binary::BinaryFrame::BridgeCall { method, .. } => {
-                    assert_eq!(method, "_batchResolveModules");
-                }
-                _ => panic!("expected BridgeCall for _batchResolveModules"),
-            }
-        }
-
-        // Part 66: Batch resolve — fallback to individual resolution when batch fails
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let mut response_buf = Vec::new();
-
-            // Batch response (call_id=1): error (simulating unsupported batch method)
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 1,
-                    status: 1,
-                    payload: "No handler for bridge method: _batchResolveModules"
-                        .as_bytes()
-                        .to_vec(),
-                },
-            )
-            .unwrap();
-
-            // Individual fallback: _resolveModule (call_id=2) returns "/dep.mjs"
-            let resolve_result = v8_serialize_str(&mut iso, &ctx, "/dep.mjs");
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 2,
-                    status: 0,
-                    payload: resolve_result,
-                },
-            )
-            .unwrap();
-
-            // Individual fallback: _loadFile (call_id=3) returns source
-            let load_result = v8_serialize_str(&mut iso, &ctx, "export const val = 42;");
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 3,
-                    status: 0,
-                    payload: load_result,
-                },
-            )
-            .unwrap();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 4,
-                    status: 0,
-                    payload: v8_serialize_str(&mut iso, &ctx, "module"),
-                },
-            )
-            .unwrap();
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(response_buf)),
-                "test-session".into(),
-            );
-
-            let user_code = "import { val } from './dep.mjs';\nexport const result = val;";
-            let (code, exports, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_module(
-                    scope,
-                    &bridge_ctx,
-                    "",
-                    user_code,
-                    Some("/app/main.mjs"),
-                    &mut None,
-                )
-            };
-
-            assert_eq!(code, 0, "error: {:?}", error);
-            assert!(error.is_none());
-            let exports = exports.unwrap();
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                let val = crate::bridge::deserialize_v8_value(scope, &exports).unwrap();
-                let obj = v8::Local::<v8::Object>::try_from(val).unwrap();
-                let k = v8::String::new(scope, "result").unwrap();
-                assert_eq!(
-                    obj.get(scope, k.into())
-                        .unwrap()
-                        .int32_value(scope)
-                        .unwrap(),
-                    42
-                );
-            }
-        }
-
-        // Part 67: Batch resolve — nested imports resolved via BFS prefetch
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let mut response_buf = Vec::new();
-
-            // Level 1 batch (call_id=1): root imports ./a.mjs which imports ./b.mjs
-            let batch1 = v8_serialize_eval(
-                &mut iso,
-                &ctx,
-                "[{resolved: '/a.mjs', source: \"import { b } from './b.mjs'; export const a = b + 1;\"}]",
-            );
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 1,
-                    status: 0,
-                    payload: batch1,
-                },
-            )
-            .unwrap();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 2,
-                    status: 0,
-                    payload: v8_serialize_str(&mut iso, &ctx, "module"),
-                },
-            )
-            .unwrap();
-
-            // Level 2 batch (call_id=3): ./b.mjs has no further imports
-            let batch2 = v8_serialize_eval(
-                &mut iso,
-                &ctx,
-                "[{resolved: '/b.mjs', source: 'export const b = 10;'}]",
-            );
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 3,
-                    status: 0,
-                    payload: batch2,
-                },
-            )
-            .unwrap();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 4,
-                    status: 0,
-                    payload: v8_serialize_str(&mut iso, &ctx, "module"),
-                },
-            )
-            .unwrap();
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(response_buf)),
-                "test-session".into(),
-            );
-
-            let user_code = "import { a } from './a.mjs';\nexport const result = a;";
-            let (code, exports, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_module(
-                    scope,
-                    &bridge_ctx,
-                    "",
-                    user_code,
-                    Some("/app/main.mjs"),
-                    &mut None,
-                )
-            };
-
-            assert_eq!(code, 0, "error: {:?}", error);
-            assert!(error.is_none());
-            let exports = exports.unwrap();
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                let val = crate::bridge::deserialize_v8_value(scope, &exports).unwrap();
-                let obj = v8::Local::<v8::Object>::try_from(val).unwrap();
-                let k = v8::String::new(scope, "result").unwrap();
-                assert_eq!(
-                    obj.get(scope, k.into())
-                        .unwrap()
-                        .int32_value(scope)
-                        .unwrap(),
-                    11
-                );
-            }
-        }
-
-        // Part 68: Batch resolve — module with no imports skips batch call
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let writer_buf = Arc::new(Mutex::new(Vec::new()));
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(SharedWriter(Arc::clone(&writer_buf))),
-                Box::new(Cursor::new(Vec::new())),
-                "test-session".into(),
-            );
-
-            let user_code = "export const x = 42;";
-            let (code, _exports, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_module(scope, &bridge_ctx, "", user_code, None, &mut None)
-            };
-
-            assert_eq!(code, 0, "error: {:?}", error);
-            assert!(error.is_none());
-
-            // No BridgeCall should have been sent (no imports to resolve)
-            let written = writer_buf.lock().unwrap();
-            assert!(
-                written.is_empty(),
-                "no IPC calls expected for module with no imports"
-            );
-        }
-
-        // Part 68a: Batch prefetch extraction is capped per batch
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            let mut source_code = String::new();
-            for i in 0..(MAX_MODULE_PREFETCH_BATCH_SIZE + 1) {
-                source_code.push_str(&format!("import './dep-{i}.mjs';\n"));
-            }
-            source_code.push_str("export const ok = true;");
-
-            let resource = v8::String::new(scope, "/app/main.mjs").unwrap();
-            let origin = v8::ScriptOrigin::new(
-                scope,
-                resource.into(),
-                0,
-                0,
-                false,
-                -1,
-                None,
-                false,
-                false,
-                true,
-                None,
-            );
-            let source = v8::String::new(scope, &source_code).unwrap();
-            let mut compiled = v8::script_compiler::Source::new(source, Some(&origin));
-            let module = v8::script_compiler::compile_module(scope, &mut compiled).unwrap();
-
-            MODULE_RESOLVE_STATE.with(|cell| {
-                *cell.borrow_mut() = Some(ModuleResolveState {
-                    bridge_ctx: std::ptr::null(),
-                    module_names: HashMap::new(),
-                    module_cache: HashMap::new(),
-                    guest_reader: None,
-                });
-            });
-            let imports = extract_uncached_imports(scope, module, "/app/main.mjs");
-            assert_eq!(
-                imports.len(),
-                MAX_MODULE_PREFETCH_BATCH_SIZE,
-                "static import extraction should stop at the prefetch batch cap"
-            );
-            clear_module_state();
-        }
-
-        // Part 68b: Module cache insertion refuses to exceed the cache cap
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            let resource = v8::String::new(scope, "/overflow.mjs").unwrap();
-            let origin = v8::ScriptOrigin::new(
-                scope,
-                resource.into(),
-                0,
-                0,
-                false,
-                -1,
-                None,
-                false,
-                false,
-                true,
-                None,
-            );
-            let source = v8::String::new(scope, "export const value = 1;").unwrap();
-            let mut compiled = v8::script_compiler::Source::new(source, Some(&origin));
-            let module = v8::script_compiler::compile_module(scope, &mut compiled).unwrap();
-            let global = v8::Global::new(scope, module);
-
-            let mut module_cache = HashMap::new();
-            for i in 0..(MAX_MODULE_RESOLVE_CACHE_ENTRIES - 1) {
-                module_cache.insert(format!("/cached-{i}.mjs"), global.clone());
-            }
-            MODULE_RESOLVE_STATE.with(|cell| {
-                *cell.borrow_mut() = Some(ModuleResolveState {
-                    bridge_ctx: std::ptr::null(),
-                    module_names: HashMap::new(),
-                    module_cache,
-                    guest_reader: None,
-                });
-            });
-
-            assert!(
-                !cache_resolved_module(
-                    module,
-                    global,
-                    "/overflow.mjs".into(),
-                    Some(module_request_cache_key("./overflow.mjs", "/app/main.mjs")),
-                ),
-                "cache insert should fail instead of exceeding the cache entry cap"
-            );
-            let cache_len = MODULE_RESOLVE_STATE.with(|cell| {
-                cell.borrow()
-                    .as_ref()
-                    .expect("module state")
-                    .module_cache
-                    .len()
-            });
-            assert_eq!(
-                cache_len,
-                MAX_MODULE_RESOLVE_CACHE_ENTRIES - 1,
-                "failed cache insert must not partially insert entries"
-            );
-            clear_module_state();
-        }
-
-        // Part 68c: Batch resolve response parsing is bounded to request length
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-
-            let oversized_response = v8_serialize_eval(
-                &mut iso,
-                &ctx,
-                "[{resolved: '/a.mjs', source: 'export const a = 1;'}, {resolved: '/extra.mjs', source: 'export const extra = 1;'}]",
-            );
-            let mut response_buf = Vec::new();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 1,
-                    status: 0,
-                    payload: oversized_response,
-                },
-            )
-            .unwrap();
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(response_buf)),
-                "test-session".into(),
-            );
-
-            let results = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                batch_resolve_via_ipc(
-                    scope,
-                    &bridge_ctx,
-                    &[("./a.mjs".to_string(), "/app/main.mjs".to_string())],
-                )
-                .expect("batch resolve response")
-            };
-            assert_eq!(
-                results.len(),
-                1,
-                "batch response parser must not retain entries beyond the request length"
-            );
-            assert_eq!(
-                results[0]
-                    .as_ref()
-                    .map(|(resolved, _source)| resolved.as_str()),
-                Some("/a.mjs")
-            );
-
-            let mut capped_response_buf = Vec::new();
-            crate::ipc_binary::write_frame(
-                &mut capped_response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 1,
-                    status: 0,
-                    payload: vec![0; MAX_MODULE_BATCH_RESOLVE_RESPONSE_BYTES + 1],
-                },
-            )
-            .unwrap();
-            let capped_bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(capped_response_buf)),
-                "test-session".into(),
-            );
-            let capped_result = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                batch_resolve_via_ipc(
-                    scope,
-                    &capped_bridge_ctx,
-                    &[("./large.mjs".to_string(), "/app/main.mjs".to_string())],
-                )
-            };
-            assert!(
-                capped_result.is_none(),
-                "batch response payloads over the byte cap should be rejected before deserialization"
-            );
-        }
-
-        // Part 68d: CJS named export extraction is capped
-        {
-            let mut source = String::new();
-            for i in 0..(MAX_CJS_NAMED_EXPORTS + 1) {
-                source.push_str(&format!("exports.name{i} = {i};\n"));
-            }
-
-            let exports = extract_cjs_export_names(&source);
-            assert_eq!(
-                exports.len(),
-                MAX_CJS_NAMED_EXPORTS,
-                "static CJS export extraction should stop at the named export cap"
-            );
-            assert!(
-                !exports.contains(&format!("name{}", MAX_CJS_NAMED_EXPORTS)),
-                "exports beyond the cap must not be retained"
-            );
-
-            let object_literal_exports =
-                extract_cjs_export_names("module.exports = { foo: 1, shorthand, default: 2 };");
-            assert!(
-                object_literal_exports.contains(&"foo".to_string()),
-                "module.exports object literal keys should be statically extracted"
-            );
-            assert!(
-                object_literal_exports.contains(&"shorthand".to_string()),
-                "module.exports shorthand keys should be statically extracted"
-            );
-            assert!(
-                !object_literal_exports.contains(&"default".to_string()),
-                "default should not be emitted as a named CJS export"
-            );
-
-            let object_assign_exports =
-                extract_cjs_export_names("Object.assign(module.exports, { bar: 1, baz });");
-            assert!(
-                object_assign_exports.contains(&"bar".to_string())
-                    && object_assign_exports.contains(&"baz".to_string()),
-                "Object.assign(module.exports, object literal) keys should be extracted"
-            );
-
-            let multiline_exports = extract_cjs_export_names(
-                r#"
-                module.exports = {
-                    multiFoo: 1,
-                    multiBar,
-                };
-
-                Object.assign(module.exports, {
-                    multiBaz: 2,
-                });
-                "#,
-            );
-            assert!(
-                multiline_exports.contains(&"multiFoo".to_string())
-                    && multiline_exports.contains(&"multiBar".to_string())
-                    && multiline_exports.contains(&"multiBaz".to_string()),
-                "multiline CJS object literal export keys should be extracted"
-            );
-
-            let false_positive_exports = extract_cjs_export_names(
-                r#"
-                module.exports.foo = { fakeOne: 1 };
-                Object.assign(otherTarget, { fakeTwo: 2 });
-                // module.exports = { fakeThree: 3 };
-                const text = "Object.assign(module.exports, { fakeFour: 4 })";
-                /* exports.fakeFive = 5; */
-                const tpl = `Object.defineProperty(exports, "fakeSix", {})`;
-                module.exports = { "fake:seven": 7 };
-                const re = /module.exports = { fakeEight: 8 }/;
-                function f() { return /module.exports = { fakeNine: 9 }/; }
-                const g = () => /exports.fakeTen = 10/;
-                const h = /[/]module.exports = { fakeEleven: 11 }/;
-                if (ok) /exports.fakeTwelve = 12/.test(input);
-                if (ok) {} /exports.fakeThirteen = 13/.test(input);
-                "#,
-            );
-            assert!(
-                !false_positive_exports.contains(&"fakeOne".to_string())
-                    && !false_positive_exports.contains(&"fakeTwo".to_string())
-                    && !false_positive_exports.contains(&"fakeThree".to_string())
-                    && !false_positive_exports.contains(&"fakeFour".to_string())
-                    && !false_positive_exports.contains(&"fakeFive".to_string())
-                    && !false_positive_exports.contains(&"fakeSix".to_string())
-                    && !false_positive_exports.contains(&"fake".to_string())
-                    && !false_positive_exports.contains(&"fakeEight".to_string())
-                    && !false_positive_exports.contains(&"fakeNine".to_string())
-                    && !false_positive_exports.contains(&"fakeTen".to_string())
-                    && !false_positive_exports.contains(&"fakeEleven".to_string())
-                    && !false_positive_exports.contains(&"fakeTwelve".to_string())
-                    && !false_positive_exports.contains(&"fakeThirteen".to_string()),
-                "object literal extraction should not emit keys from unrelated objects"
-            );
-
-            let mut malformed_literals = String::new();
-            for i in 0..2048 {
-                malformed_literals.push_str(&format!("module.exports = {{ fake{i}: "));
-            }
-            let malformed_exports = extract_cjs_export_names(&malformed_literals);
-            assert!(
-                malformed_exports.is_empty(),
-                "malformed object literals should be skipped without collecting fake keys"
-            );
-
-            let regex_value_exports =
-                extract_cjs_export_names("module.exports = { real: /}/, alsoReal: /[,]}/ };");
-            assert!(
-                regex_value_exports.contains(&"real".to_string())
-                    && regex_value_exports.contains(&"alsoReal".to_string()),
-                "regex values inside CJS object literals should not terminate the object scan"
-            );
-
-            let division_exports = extract_cjs_export_names("const n = 4 / 2; exports.after = n;");
-            assert!(
-                division_exports.contains(&"after".to_string()),
-                "ordinary division should not hide later CJS export assignments"
-            );
-
-            let reserved_exports = extract_cjs_export_names(
-                r#"
-                exports.arguments = 1;
-                exports.class = 1;
-                module.exports = { await: 2 };
-                module.exports = { let: 3, static: 4, eval: 5 };
-                Object.assign(module.exports, {
-                    implements: 6,
-                    interface: 7,
-                    package: 8,
-                    private: 9,
-                    protected: 10,
-                    public: 11,
-                });
-                Object.defineProperty(exports, "return", {});
-                "#,
-            );
-            assert!(
-                reserved_exports.is_empty(),
-                "reserved words should not be emitted as generated ESM bindings"
-            );
-
-            let mut huge_literal = String::from("module.exports = {\n");
-            for i in 0..(MAX_CJS_NAMED_EXPORTS + 1) {
-                huge_literal.push_str(&format!("literalName{i}: {i},\n"));
-            }
-            huge_literal.push_str("};");
-            let huge_literal_exports = extract_cjs_export_names(&huge_literal);
-            assert_eq!(
-                huge_literal_exports.len(),
-                MAX_CJS_NAMED_EXPORTS,
-                "object literal export extraction should stop at the named export cap"
-            );
-            assert!(
-                !huge_literal_exports.contains(&format!("literalName{}", MAX_CJS_NAMED_EXPORTS)),
-                "object literal exports beyond the cap must not be retained"
-            );
-
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-            let shim =
-                build_cjs_esm_shim(scope, "module.exports = { foo: 1 };", "/object-literal.cjs");
-            assert!(
-                shim.contains("export const foo = _cjsModule[\"foo\"];"),
-                "CJS shim should preserve statically extractable named exports"
-            );
-        }
-
-        // Part 68e: CJS shim degrades to default-only when runtime extraction is unavailable
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            let shim = build_cjs_esm_shim(
-                scope,
-                "module.exports = makeExportsDynamically();",
-                "/runtime.cjs",
-            );
-
-            assert!(
-                shim.contains("export default _cjsModule;"),
-                "CJS shim should preserve default import support"
-            );
-            assert!(
-                !shim.contains("export const name0"),
-                "CJS shim must degrade to default-only when runtime extraction is unavailable"
-            );
-        }
-
-        // Part 68f: CJS shim runtime fallback enumerates dynamically computed exports
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            let setup = v8::String::new(
-                scope,
-                "globalThis._requireFrom = function (path, referrer) { return { dynamicA: 1, dynamicB: 2, default: 3, __esModule: true }; };",
-            )
-            .unwrap();
-            let script = v8::Script::compile(scope, setup, None).unwrap();
-            script.run(scope).unwrap();
-
-            let shim = build_cjs_esm_shim(
-                scope,
-                "module.exports = makeExportsDynamically();",
-                "/dynamic.cjs",
-            );
-
-            assert!(
-                shim.contains("export const dynamicA = _cjsModule[\"dynamicA\"];"),
-                "runtime fallback should surface dynamically computed named exports"
-            );
-            assert!(
-                shim.contains("export const dynamicB = _cjsModule[\"dynamicB\"];"),
-                "runtime fallback should surface every dynamically computed named export"
-            );
-            assert!(
-                shim.contains("export default _cjsModule;"),
-                "CJS shim should preserve default import support"
-            );
-            assert!(
-                !shim.contains("export const default"),
-                "runtime fallback must not emit a named export for default"
-            );
-            assert!(
-                !shim.contains("__esModule"),
-                "runtime fallback must not emit a named export for __esModule"
-            );
-        }
-
-        // Part 68g: CJS shim runtime fallback bounds export count and name length
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            let setup = v8::String::new(
-                scope,
-                "globalThis._requireFrom = function () { const o = {}; for (let i = 0; i < 1025; i++) o[\"k\" + String(i).padStart(4, \"0\")] = i; o[\"x\".repeat(600)] = 1; return o; };",
-            )
-            .unwrap();
-            let script = v8::Script::compile(scope, setup, None).unwrap();
-            script.run(scope).unwrap();
-
-            let shim = build_cjs_esm_shim(
-                scope,
-                "module.exports = makeExportsDynamically();",
-                "/bounded.cjs",
-            );
-
-            let export_count = shim.matches("export const ").count();
-            assert_eq!(
-                export_count, MAX_CJS_NAMED_EXPORTS,
-                "runtime fallback should stop collecting names at the named export cap"
-            );
-            assert!(
-                !shim.contains("export const k1024"),
-                "runtime fallback exports beyond the cap must not be retained"
-            );
-            let longest_export_name = shim
-                .lines()
-                .filter_map(|line| line.strip_prefix("export const "))
-                .filter_map(|rest| rest.split(' ').next())
-                .map(str::len)
-                .max()
-                .unwrap_or(0);
-            assert!(
-                longest_export_name <= MAX_CJS_RUNTIME_EXPORT_NAME_LEN,
-                "runtime fallback must skip export names longer than the length cap"
-            );
-        }
-
-        // Part 68h: CJS shim runtime fallback tolerates guest evaluation failure
-        {
-            let mut iso = isolate::create_isolate(None);
-            let ctx = isolate::create_context(&mut iso);
-            let scope = &mut v8::HandleScope::new(&mut iso);
-            let local = v8::Local::new(scope, &ctx);
-            let scope = &mut v8::ContextScope::new(scope, local);
-
-            let setup = v8::String::new(
-                scope,
-                "globalThis._requireFrom = function () { throw new Error(\"boom\"); };",
-            )
-            .unwrap();
-            let script = v8::Script::compile(scope, setup, None).unwrap();
-            script.run(scope).unwrap();
-
-            let shim = build_cjs_esm_shim(
-                scope,
-                "module.exports = makeExportsDynamically();",
-                "/throwing.cjs",
-            );
-
-            assert!(
-                shim.contains("export default _cjsModule;"),
-                "CJS shim should preserve default import support after a guest throw"
-            );
-            assert!(
-                !shim.contains("export const "),
-                "runtime fallback should yield no named exports when module evaluation throws"
-            );
-        }
-
-        // Part 69: Dynamic import works after execute_module returns
-        {
-            let mut iso = isolate::create_isolate(None);
-            iso.set_host_import_module_dynamically_callback(dynamic_import_callback);
-            iso.set_host_initialize_import_meta_object_callback(import_meta_object_callback);
-            let ctx = isolate::create_context(&mut iso);
-
-            let mut response_buf = Vec::new();
-
-            let resolve_result = v8_serialize_str(&mut iso, &ctx, "/dep.mjs");
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 1,
-                    status: 0,
-                    payload: resolve_result,
-                },
-            )
-            .unwrap();
-
-            let load_result = v8_serialize_str(&mut iso, &ctx, "export const value = 42;");
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 2,
-                    status: 0,
-                    payload: load_result,
-                },
-            )
-            .unwrap();
-            crate::ipc_binary::write_frame(
-                &mut response_buf,
-                &crate::ipc_binary::BinaryFrame::BridgeResponse {
-                    session_id: String::new(),
-                    call_id: 3,
-                    status: 0,
-                    payload: v8_serialize_str(&mut iso, &ctx, "module"),
-                },
-            )
-            .unwrap();
-
-            let bridge_ctx = BridgeCallContext::new(
-                Box::new(Vec::new()),
-                Box::new(Cursor::new(response_buf)),
-                "test-session".into(),
-            );
-
-            let user_code = r#"
-                globalThis.loadDep = async () => (await import("./dep.mjs")).value;
-                export const ready = true;
-            "#;
-            let (code, exports, error) = {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                execute_module(
-                    scope,
-                    &bridge_ctx,
-                    "",
-                    user_code,
-                    Some("/app/main.mjs"),
-                    &mut None,
-                )
-            };
-
-            assert_eq!(code, 0, "error: {:?}", error);
-            assert!(error.is_none());
-            assert!(exports.is_some());
-
-            {
-                let scope = &mut v8::HandleScope::new(&mut iso);
-                let local = v8::Local::new(scope, &ctx);
-                let scope = &mut v8::ContextScope::new(scope, local);
-                let tc = &mut v8::TryCatch::new(scope);
-                let source = v8::String::new(
-                    tc,
-                    "globalThis.__depPromise = globalThis.loadDep().then((value) => { globalThis.__depValue = value; return value; });",
-                )
-                .unwrap();
-                let script = v8::Script::compile(tc, source, None).unwrap();
-                assert!(script.run(tc).is_some());
-                tc.perform_microtask_checkpoint();
-                assert!(tc.exception().is_none());
-            }
-
-            assert_eq!(eval(&mut iso, &ctx, "String(globalThis.__depValue)"), "42");
-            clear_module_state();
-        }
-    }
-}
diff --git a/crates/v8-runtime/src/host_call.rs b/crates/v8-runtime/src/host_call.rs
deleted file mode 100644
index 6ff00c0f5..000000000
--- a/crates/v8-runtime/src/host_call.rs
+++ /dev/null
@@ -1,967 +0,0 @@
-// Sync-blocking bridge call: serialize, write to socket, block on read, deserialize
-
-use std::cell::RefCell;
-use std::collections::{BTreeMap, HashMap, HashSet};
-use std::io::{Read, Write};
-use std::sync::atomic::{AtomicU64, Ordering};
-use std::sync::{Arc, Mutex};
-use std::time::{Duration, Instant};
-
-use crate::ipc_binary::{self, BinaryFrame};
-use crate::runtime_protocol::{BridgeResponse, RuntimeEvent};
-use crate::session::RuntimeEventEnvelope;
-
-// ── Sync bridge-call round-trip latency (opt-in via AGENTOS_SYNCRPC_LAT=1) ──
-// Measures the guest-observed cost of one host_call round trip (send + block on
-// response). If this is ~ms per call, the embedded-V8 IPC floor is a big part of
-// the evaluate-phase VM tax (~50 fs sync RPCs during SDK init). Writes running
-// (count, total_us, max_us) to AGENTOS_SYNCRPC_LAT_FILE.
-static SYNCRPC_LAT: std::sync::OnceLock<std::sync::Mutex<(u64, u64, u64)>> =
-    std::sync::OnceLock::new();
-
-fn syncrpc_lat_enabled() -> bool {
-    std::env::var("AGENTOS_SYNCRPC_LAT").as_deref() == Ok("1")
-}
-
-fn record_syncrpc_lat(ns: u64) {
-    let m = SYNCRPC_LAT.get_or_init(|| std::sync::Mutex::new((0, 0, 0)));
-    let Ok(mut a) = m.lock() else {
-        return;
-    };
-    a.0 += 1;
-    a.1 = a.1.wrapping_add(ns / 1000);
-    a.2 = a.2.max(ns / 1000);
-    if a.0 % 25 == 0 {
-        if let Ok(path) = std::env::var("AGENTOS_SYNCRPC_LAT_FILE") {
-            let _ = std::fs::write(
-                &path,
-                format!(
-                    "calls={} total_us={} avg_us={} max_us={}\n",
-                    a.0,
-                    a.1,
-                    a.1 / a.0,
-                    a.2
-                ),
-            );
-        }
-    }
-}
-
-#[derive(Debug, Default, Clone)]
-struct SyncBridgeHostPhaseStats {
-    calls: u64,
-    total_us: u64,
-    max_us: u64,
-}
-
-static SYNC_BRIDGE_HOST_PHASES: std::sync::OnceLock<
-    std::sync::Mutex<BTreeMap<String, SyncBridgeHostPhaseStats>>,
-> = std::sync::OnceLock::new();
-static SYNC_BRIDGE_CALL_METHODS: std::sync::OnceLock<std::sync::Mutex<HashMap<u64, String>>> =
-    std::sync::OnceLock::new();
-static SYNC_BRIDGE_RESPONSE_CHANNEL_SENDS: std::sync::OnceLock<
-    std::sync::Mutex<HashMap<u64, (String, Instant)>>,
-> = std::sync::OnceLock::new();
-
-fn sync_bridge_host_phases_enabled() -> bool {
-    std::env::var("AGENTOS_SYNC_BRIDGE_HOST_PHASES").as_deref() == Ok("1")
-}
-
-pub(crate) fn record_sync_bridge_host_phase(method: &str, stage: &str, elapsed: Duration) {
-    if !sync_bridge_host_phases_enabled() {
-        return;
-    }
-    let stats = SYNC_BRIDGE_HOST_PHASES.get_or_init(|| std::sync::Mutex::new(BTreeMap::new()));
-    let Ok(mut stats) = stats.lock() else {
-        return;
-    };
-    let elapsed_us = elapsed.as_micros() as u64;
-    let key = format!("{method}:{stage}");
-    let entry = stats.entry(key).or_default();
-    entry.calls += 1;
-    entry.total_us = entry.total_us.wrapping_add(elapsed_us);
-    entry.max_us = entry.max_us.max(elapsed_us);
-
-    if let Ok(path) = std::env::var("AGENTOS_SYNC_BRIDGE_HOST_PHASES_FILE") {
-        let mut lines = String::new();
-        for (key, value) in stats.iter() {
-            let Some((method, stage)) = key.split_once(':') else {
-                continue;
-            };
-            let avg_us = value.total_us.checked_div(value.calls).unwrap_or(0);
-            lines.push_str(&format!(
-                "method={method} stage={stage} calls={} total_us={} avg_us={} max_us={}\n",
-                value.calls, value.total_us, avg_us, value.max_us
-            ));
-        }
-        let _ = std::fs::write(path, lines);
-    }
-}
-
-fn track_sync_bridge_call_method(call_id: u64, method: &str) {
-    if !sync_bridge_host_phases_enabled() {
-        return;
-    }
-    let methods = SYNC_BRIDGE_CALL_METHODS.get_or_init(|| std::sync::Mutex::new(HashMap::new()));
-    let Ok(mut methods) = methods.lock() else {
-        return;
-    };
-    if methods.len() > 4096 {
-        methods.clear();
-    }
-    methods.insert(call_id, method.to_owned());
-}
-
-fn cleanup_sync_bridge_call_tracking(call_id: u64) {
-    if let Some(methods) = SYNC_BRIDGE_CALL_METHODS.get() {
-        if let Ok(mut methods) = methods.lock() {
-            methods.remove(&call_id);
-        }
-    }
-    if let Some(starts) = SYNC_BRIDGE_RESPONSE_CHANNEL_SENDS.get() {
-        if let Ok(mut starts) = starts.lock() {
-            starts.remove(&call_id);
-        }
-    }
-}
-
-pub(crate) fn record_sync_bridge_response_channel_send_start(call_id: u64) {
-    if !sync_bridge_host_phases_enabled() {
-        return;
-    }
-    let method = SYNC_BRIDGE_CALL_METHODS
-        .get()
-        .and_then(|methods| methods.lock().ok()?.get(&call_id).cloned())
-        .unwrap_or_else(|| String::from("sync_rpc_response"));
-    let starts =
-        SYNC_BRIDGE_RESPONSE_CHANNEL_SENDS.get_or_init(|| std::sync::Mutex::new(HashMap::new()));
-    let Ok(mut starts) = starts.lock() else {
-        return;
-    };
-    if starts.len() > 4096 {
-        starts.clear();
-    }
-    starts.insert(call_id, (method, Instant::now()));
-}
-
-pub(crate) fn record_sync_bridge_response_channel_received(call_id: u64) {
-    if !sync_bridge_host_phases_enabled() {
-        return;
-    }
-    let Some(starts) = SYNC_BRIDGE_RESPONSE_CHANNEL_SENDS.get() else {
-        return;
-    };
-    let Ok(mut starts) = starts.lock() else {
-        return;
-    };
-    let Some((method, started)) = starts.remove(&call_id) else {
-        return;
-    };
-    record_sync_bridge_host_phase(&method, "host_response_channel_recv", started.elapsed());
-}
-
-/// Trait for sending serialized frames to the host without holding a shared mutex.
-/// Production code uses ChannelRuntimeEventSender (lock-free MPSC); tests use WriterRuntimeEventSender.
-pub trait RuntimeEventSender: Send {
-    fn send_event(&self, event: RuntimeEvent) -> Result<(), String>;
-}
-
-/// Sends frames via a crossbeam channel to a dedicated writer thread.
-/// Maintains a reusable frame buffer that grows to high-water mark,
-/// avoiding per-call allocation for frame construction.
-pub struct ChannelRuntimeEventSender {
-    pub tx: crossbeam_channel::Sender<RuntimeEventEnvelope>,
-    output_generation: Option<u64>,
-    /// Pre-allocated frame buffer reused across send_frame calls.
-    /// Grows to high-water mark; cleared (not deallocated) between calls.
-    #[allow(dead_code)]
-    frame_buf: RefCell<Vec<u8>>,
-}
-
-impl ChannelRuntimeEventSender {
-    pub fn new(
-        tx: crossbeam_channel::Sender<RuntimeEventEnvelope>,
-        output_generation: Option<u64>,
-    ) -> Self {
-        ChannelRuntimeEventSender {
-            tx,
-            output_generation,
-            frame_buf: RefCell::new(Vec::with_capacity(256)),
-        }
-    }
-}
-
-impl RuntimeEventSender for ChannelRuntimeEventSender {
-    fn send_event(&self, event: RuntimeEvent) -> Result<(), String> {
-        self.tx
-            .send(RuntimeEventEnvelope {
-                output_generation: self.output_generation,
-                event,
-            })
-            .map_err(|e| format!("channel send failed: {}", e))
-    }
-}
-
-/// Sends frames directly to a Write impl (used by tests).
-#[allow(dead_code)]
-pub struct WriterRuntimeEventSender {
-    writer: Mutex<Box<dyn Write + Send>>,
-}
-
-impl RuntimeEventSender for WriterRuntimeEventSender {
-    fn send_event(&self, event: RuntimeEvent) -> Result<(), String> {
-        let mut w = self.writer.lock().unwrap();
-        let frame: BinaryFrame = event.into();
-        ipc_binary::write_frame(&mut *w, &frame).map_err(|e| format!("write error: {}", e))
-    }
-}
-
-/// Trait for receiving a BridgeResponse directly without re-serialization.
-/// Production code uses a channel-based implementation; tests use a buffer-based one.
-pub trait BridgeResponseReceiver: Send {
-    fn recv_response(&self, expected_call_id: u64) -> Result<BridgeResponse, String>;
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct SyncBridgeCallResponse {
-    pub status: u8,
-    pub payload: Vec<u8>,
-}
-
-/// ResponseReceiver that reads frames from a byte buffer via ipc_binary::read_frame.
-/// Used by tests and any code that has a pre-serialized byte stream.
-#[allow(dead_code)]
-pub struct ReaderBridgeResponseReceiver {
-    reader: Mutex<Box<dyn Read + Send>>,
-}
-
-impl ReaderBridgeResponseReceiver {
-    #[allow(dead_code)]
-    pub fn new(reader: Box<dyn Read + Send>) -> Self {
-        ReaderBridgeResponseReceiver {
-            reader: Mutex::new(reader),
-        }
-    }
-}
-
-impl BridgeResponseReceiver for ReaderBridgeResponseReceiver {
-    fn recv_response(&self, expected_call_id: u64) -> Result<BridgeResponse, String> {
-        let mut reader = self.reader.lock().unwrap();
-        let frame = ipc_binary::read_frame(&mut *reader)
-            .map_err(|e| format!("failed to read BridgeResponse: {}", e))?;
-        match frame {
-            BinaryFrame::BridgeResponse {
-                call_id,
-                status,
-                payload,
-                ..
-            } => {
-                if call_id != expected_call_id {
-                    return Err(format!(
-                        "call_id mismatch: expected {}, got {}",
-                        expected_call_id, call_id
-                    ));
-                }
-                Ok(BridgeResponse {
-                    call_id,
-                    status,
-                    payload,
-                })
-            }
-            _ => Err("expected BridgeResponse, got different message type".into()),
-        }
-    }
-}
-
-/// Shared routing table: maps call_id → session_id for BridgeResponse routing.
-/// The connection handler uses this to determine which session a BridgeResponse
-/// belongs to (since BridgeResponse has call_id but no session_id).
-pub type CallIdRouter = Arc<Mutex<HashMap<u64, String>>>;
-
-/// Shared call_id counter type. Sessions sharing a CallIdRouter must use the same
-/// counter to prevent call_id collisions that cause BridgeResponses to be delivered
-/// to the wrong session.
-pub type SharedCallIdCounter = Arc<AtomicU64>;
-
-/// Context for sync-blocking bridge calls from a V8 session.
-///
-/// Holds the frame sender and response receiver, session ID, call_id counter,
-/// and pending-call tracking. Used by V8 FunctionTemplate callbacks to
-/// implement the sync-blocking bridge pattern.
-pub struct BridgeCallContext {
-    /// Sender for serialized frames to the host (channel-based in production)
-    sender: Box<dyn RuntimeEventSender>,
-    /// Receiver for BridgeResponse frames (no re-serialization needed)
-    response_rx: Mutex<Box<dyn BridgeResponseReceiver>>,
-    /// Session ID included in every BridgeCall
-    pub session_id: String,
-    /// Monotonically increasing call_id counter. Sessions sharing a CallIdRouter
-    /// must share the same counter (via Arc) to prevent call_id collisions.
-    next_call_id: Arc<AtomicU64>,
-    /// Set of in-flight call_ids (for duplicate rejection)
-    pending_calls: Mutex<HashSet<u64>>,
-    /// Opt-in diagnostic tracking for sync call_ids. The atomic call_id counter
-    /// plus recv_response(call_id) validation are the correctness path; this set
-    /// is only needed when inspecting in-flight calls.
-    track_pending_calls: bool,
-    /// Optional routing table for call_id → session_id mapping.
-    /// When set, call_ids are registered here so the connection handler
-    /// can route BridgeResponse messages to the correct session.
-    call_id_router: Option<CallIdRouter>,
-}
-
-/// No-op FrameSender for snapshot stub functions.
-/// Panics if called — stubs must never be invoked during snapshot creation.
-#[allow(dead_code)]
-struct StubRuntimeEventSender;
-
-impl RuntimeEventSender for StubRuntimeEventSender {
-    fn send_event(&self, _event: RuntimeEvent) -> Result<(), String> {
-        panic!(
-            "stub bridge function called during snapshot creation — bridge IIFE must not call bridge functions at setup time"
-        )
-    }
-}
-
-/// No-op ResponseReceiver for snapshot stub functions.
-/// Panics if called — stubs must never be invoked during snapshot creation.
-#[allow(dead_code)]
-struct StubBridgeResponseReceiver;
-
-impl BridgeResponseReceiver for StubBridgeResponseReceiver {
-    fn recv_response(&self, _expected_call_id: u64) -> Result<BridgeResponse, String> {
-        panic!(
-            "stub bridge function called during snapshot creation — bridge IIFE must not call bridge functions at setup time"
-        )
-    }
-}
-
-#[allow(dead_code)]
-impl BridgeCallContext {
-    /// Create a no-op BridgeCallContext for snapshot stub functions.
-    /// Panics if sync_call or async_send is called — stubs exist only for
-    /// the bridge IIFE to reference (not call) during snapshot creation.
-    pub fn stub() -> Self {
-        BridgeCallContext {
-            sender: Box::new(StubRuntimeEventSender),
-            response_rx: Mutex::new(Box::new(StubBridgeResponseReceiver)),
-            session_id: "stub".into(),
-            next_call_id: Arc::new(AtomicU64::new(1)),
-            pending_calls: Mutex::new(HashSet::new()),
-            track_pending_calls: should_track_pending_sync_calls(),
-            call_id_router: None,
-        }
-    }
-
-    /// Create a BridgeCallContext with a byte writer and reader (wraps in WriterFrameSender
-    /// and ReaderResponseReceiver). Convenient for tests that pre-serialize BridgeResponse bytes.
-    pub fn new(
-        writer: Box<dyn Write + Send>,
-        reader: Box<dyn Read + Send>,
-        session_id: String,
-    ) -> Self {
-        BridgeCallContext {
-            sender: Box::new(WriterRuntimeEventSender {
-                writer: Mutex::new(writer),
-            }),
-            response_rx: Mutex::new(Box::new(ReaderBridgeResponseReceiver::new(reader))),
-            session_id,
-            next_call_id: Arc::new(AtomicU64::new(1)),
-            pending_calls: Mutex::new(HashSet::new()),
-            track_pending_calls: should_track_pending_sync_calls(),
-            call_id_router: None,
-        }
-    }
-
-    /// Create a BridgeCallContext with a FrameSender, ResponseReceiver, call_id routing table,
-    /// and shared call_id counter. All sessions sharing the same CallIdRouter must share
-    /// the same counter to prevent call_id collisions in the routing table.
-    pub fn with_receiver(
-        sender: Box<dyn RuntimeEventSender>,
-        response_rx: Box<dyn BridgeResponseReceiver>,
-        session_id: String,
-        router: CallIdRouter,
-        shared_call_id: SharedCallIdCounter,
-    ) -> Self {
-        BridgeCallContext {
-            sender,
-            response_rx: Mutex::new(response_rx),
-            session_id,
-            next_call_id: shared_call_id,
-            pending_calls: Mutex::new(HashSet::new()),
-            track_pending_calls: should_track_pending_sync_calls(),
-            call_id_router: Some(router),
-        }
-    }
-
-    /// Perform a sync-blocking bridge call.
-    ///
-    /// Generates a unique call_id, sends a BridgeCall message over IPC,
-    /// blocks on read() for the BridgeResponse, and returns the result.
-    /// Error responses from the host are returned as Err.
-    pub fn sync_call_response(
-        &self,
-        method: &str,
-        args: Vec<u8>,
-    ) -> Result<Option<SyncBridgeCallResponse>, String> {
-        let call_id = self.next_call_id.fetch_add(1, Ordering::Relaxed);
-        track_sync_bridge_call_method(call_id, method);
-
-        // Optional diagnostic tracking. Correctness comes from the atomic
-        // counter and recv_response(call_id) identity validation.
-        if self.track_pending_calls {
-            let mut pending = self.pending_calls.lock().unwrap();
-            if !pending.insert(call_id) {
-                return Err(format!("duplicate call_id: {}", call_id));
-            }
-        }
-
-        // Register call_id → session_id for BridgeResponse routing
-        if let Some(ref router) = self.call_id_router {
-            let phase_start = Instant::now();
-            router
-                .lock()
-                .unwrap()
-                .insert(call_id, self.session_id.clone());
-            record_sync_bridge_host_phase(method, "host_register_route", phase_start.elapsed());
-        }
-
-        // Send BridgeCall to host
-        let bridge_call = RuntimeEvent::BridgeCall {
-            session_id: self.session_id.clone(),
-            call_id,
-            method: method.to_string(),
-            payload: args,
-        };
-
-        let __lat = syncrpc_lat_enabled().then(Instant::now);
-        let phase_start = Instant::now();
-        if let Err(e) = self.sender.send_event(bridge_call) {
-            self.remove_pending_call(call_id);
-            self.remove_call_route(call_id);
-            return Err(format!("failed to write BridgeCall: {}", e));
-        }
-        record_sync_bridge_host_phase(method, "host_send_event", phase_start.elapsed());
-
-        // Receive BridgeResponse directly (no re-serialization)
-        let response = {
-            let rx = self.response_rx.lock().unwrap();
-            let phase_start = Instant::now();
-            match rx.recv_response(call_id) {
-                Ok(frame) => {
-                    record_sync_bridge_host_phase(
-                        method,
-                        "host_recv_response",
-                        phase_start.elapsed(),
-                    );
-                    frame
-                }
-                Err(e) => {
-                    self.remove_pending_call(call_id);
-                    self.remove_call_route(call_id);
-                    return Err(e);
-                }
-            }
-        };
-        if let Some(t) = __lat {
-            record_syncrpc_lat(t.elapsed().as_nanos() as u64);
-        }
-
-        let phase_start = Instant::now();
-        self.remove_pending_call(call_id);
-        self.remove_call_route(call_id);
-        record_sync_bridge_host_phase(method, "host_cleanup", phase_start.elapsed());
-
-        // Validate and extract BridgeResponse
-        let phase_start = Instant::now();
-        if response.status == 1 {
-            let result = Err(String::from_utf8_lossy(&response.payload).to_string());
-            record_sync_bridge_host_phase(method, "host_extract_response", phase_start.elapsed());
-            result
-        } else if response.payload.is_empty() && response.status != 2 {
-            record_sync_bridge_host_phase(method, "host_extract_response", phase_start.elapsed());
-            Ok(None)
-        } else {
-            let result = Ok(Some(SyncBridgeCallResponse {
-                status: response.status,
-                payload: response.payload,
-            }));
-            record_sync_bridge_host_phase(method, "host_extract_response", phase_start.elapsed());
-            result
-        }
-    }
-
-    pub fn sync_call(&self, method: &str, args: Vec<u8>) -> Result<Option<Vec<u8>>, String> {
-        self.sync_call_response(method, args)
-            .map(|response| response.map(|response| response.payload))
-    }
-
-    /// Send a BridgeCall without blocking for a response.
-    /// Returns the call_id for later matching with BridgeResponse.
-    /// Used by async promise-returning bridge functions.
-    pub fn async_send(&self, method: &str, args: Vec<u8>) -> Result<u64, String> {
-        let call_id = self.next_call_id.fetch_add(1, Ordering::Relaxed);
-
-        // Register call_id → session_id for BridgeResponse routing
-        if let Some(ref router) = self.call_id_router {
-            router
-                .lock()
-                .unwrap()
-                .insert(call_id, self.session_id.clone());
-        }
-
-        let bridge_call = RuntimeEvent::BridgeCall {
-            session_id: self.session_id.clone(),
-            call_id,
-            method: method.to_string(),
-            payload: args,
-        };
-
-        if let Err(e) = self.sender.send_event(bridge_call) {
-            self.remove_call_route(call_id);
-            return Err(format!("failed to write BridgeCall: {}", e));
-        }
-
-        Ok(call_id)
-    }
-
-    fn remove_call_route(&self, call_id: u64) {
-        if let Some(ref router) = self.call_id_router {
-            router.lock().unwrap().remove(&call_id);
-        }
-    }
-
-    fn remove_pending_call(&self, call_id: u64) {
-        cleanup_sync_bridge_call_tracking(call_id);
-        if self.track_pending_calls {
-            self.pending_calls.lock().unwrap().remove(&call_id);
-        }
-    }
-
-    /// Check if a call_id is currently pending.
-    pub fn is_call_pending(&self, call_id: u64) -> bool {
-        if !self.track_pending_calls {
-            return false;
-        }
-        self.pending_calls.lock().unwrap().contains(&call_id)
-    }
-
-    /// Number of pending calls.
-    pub fn pending_count(&self) -> usize {
-        if !self.track_pending_calls {
-            return 0;
-        }
-        self.pending_calls.lock().unwrap().len()
-    }
-}
-
-fn should_track_pending_sync_calls() -> bool {
-    std::env::var("AGENTOS_TRACK_PENDING_SYNC_CALLS").as_deref() == Ok("1")
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::io::Cursor;
-    use std::sync::Arc;
-
-    /// Shared writer that captures output for test inspection
-    struct SharedWriter(Arc<Mutex<Vec<u8>>>);
-
-    impl Write for SharedWriter {
-        fn write(&mut self, buf: &[u8]) -> std::io::Result<usize> {
-            self.0.lock().unwrap().write(buf)
-        }
-        fn flush(&mut self) -> std::io::Result<()> {
-            self.0.lock().unwrap().flush()
-        }
-    }
-
-    /// Serialize a BridgeResponse into length-prefixed binary frame bytes
-    fn make_response_bytes(
-        call_id: u64,
-        result: Option<Vec<u8>>,
-        error: Option<String>,
-    ) -> Vec<u8> {
-        let mut buf = Vec::new();
-        let (status, payload) = if let Some(err) = error {
-            (1u8, err.into_bytes())
-        } else if let Some(res) = result {
-            (0u8, res)
-        } else {
-            (0u8, vec![])
-        };
-        ipc_binary::write_frame(
-            &mut buf,
-            &BinaryFrame::BridgeResponse {
-                session_id: String::new(),
-                call_id,
-                status,
-                payload,
-            },
-        )
-        .unwrap();
-        buf
-    }
-
-    #[test]
-    fn sync_call_success_with_result() {
-        let response_bytes = make_response_bytes(1, Some(vec![0x93, 0x01, 0x02, 0x03]), None);
-        let writer_buf = Arc::new(Mutex::new(Vec::new()));
-
-        let ctx = BridgeCallContext::new(
-            Box::new(SharedWriter(Arc::clone(&writer_buf))),
-            Box::new(Cursor::new(response_bytes)),
-            "test-session-abc".into(),
-        );
-
-        let result = ctx.sync_call("_fsReadFile", vec![0x91, 0xa3, 0x66, 0x6f, 0x6f]);
-        assert!(result.is_ok());
-        assert_eq!(result.unwrap(), Some(vec![0x93, 0x01, 0x02, 0x03]));
-
-        // Verify the BridgeCall was written correctly
-        let written = writer_buf.lock().unwrap();
-        let call = ipc_binary::read_frame(&mut Cursor::new(&*written)).unwrap();
-        match call {
-            BinaryFrame::BridgeCall {
-                call_id,
-                session_id,
-                method,
-                payload,
-                ..
-            } => {
-                assert_eq!(call_id, 1);
-                assert_eq!(session_id, "test-session-abc");
-                assert_eq!(method, "_fsReadFile");
-                assert_eq!(payload, vec![0x91, 0xa3, 0x66, 0x6f, 0x6f]);
-            }
-            _ => panic!("expected BridgeCall"),
-        }
-    }
-
-    #[test]
-    fn sync_call_success_null_result() {
-        let response_bytes = make_response_bytes(1, None, None);
-        let ctx = BridgeCallContext::new(
-            Box::new(Vec::new()),
-            Box::new(Cursor::new(response_bytes)),
-            "session-1".into(),
-        );
-
-        let result = ctx.sync_call("_log", vec![0xc0]).unwrap();
-        assert_eq!(result, None);
-    }
-
-    #[test]
-    fn sync_call_error_response() {
-        let response_bytes = make_response_bytes(1, None, Some("ENOENT: no such file".into()));
-        let ctx = BridgeCallContext::new(
-            Box::new(Vec::new()),
-            Box::new(Cursor::new(response_bytes)),
-            "session-1".into(),
-        );
-
-        let result = ctx.sync_call("_fsReadFile", vec![0xc0]);
-        assert!(result.is_err());
-        assert_eq!(result.unwrap_err(), "ENOENT: no such file");
-    }
-
-    #[test]
-    fn sync_call_call_id_increments() {
-        // Prepare two sequential responses
-        let mut response_bytes = make_response_bytes(1, Some(vec![0xa1, 0x61]), None);
-        response_bytes.extend_from_slice(&make_response_bytes(2, Some(vec![0xa1, 0x62]), None));
-
-        let ctx = BridgeCallContext::new(
-            Box::new(Vec::new()),
-            Box::new(Cursor::new(response_bytes)),
-            "session-1".into(),
-        );
-
-        let r1 = ctx.sync_call("_fn1", vec![]).unwrap();
-        let r2 = ctx.sync_call("_fn2", vec![]).unwrap();
-        assert_eq!(r1, Some(vec![0xa1, 0x61]));
-        assert_eq!(r2, Some(vec![0xa1, 0x62]));
-    }
-
-    #[test]
-    fn sync_call_pending_cleanup_on_read_error() {
-        // Empty reader = EOF error; call_id should be cleaned up
-        let ctx = BridgeCallContext::new(
-            Box::new(Vec::new()),
-            Box::new(Cursor::new(Vec::new())),
-            "session-1".into(),
-        );
-
-        assert_eq!(ctx.pending_count(), 0);
-        let _ = ctx.sync_call("_fn", vec![]);
-        assert_eq!(ctx.pending_count(), 0);
-    }
-
-    #[test]
-    fn sync_call_id_mismatch_rejected() {
-        // Response has call_id=99 but expected call_id=1
-        let response_bytes = make_response_bytes(99, Some(vec![0xc0]), None);
-        let ctx = BridgeCallContext::new(
-            Box::new(Vec::new()),
-            Box::new(Cursor::new(response_bytes)),
-            "session-1".into(),
-        );
-
-        let result = ctx.sync_call("_fn", vec![]);
-        assert!(result.is_err());
-        assert!(result.unwrap_err().contains("call_id mismatch"));
-    }
-
-    #[test]
-    fn sync_call_unexpected_message_type_rejected() {
-        // Response is not a BridgeResponse
-        let mut response_bytes = Vec::new();
-        ipc_binary::write_frame(
-            &mut response_bytes,
-            &BinaryFrame::TerminateExecution {
-                session_id: "session-1".into(),
-            },
-        )
-        .unwrap();
-
-        let ctx = BridgeCallContext::new(
-            Box::new(Vec::new()),
-            Box::new(Cursor::new(response_bytes)),
-            "session-1".into(),
-        );
-
-        let result = ctx.sync_call("_fn", vec![]);
-        assert!(result.is_err());
-        assert!(result.unwrap_err().contains("expected BridgeResponse"));
-    }
-
-    #[test]
-    fn async_send_writes_bridge_call() {
-        let writer_buf = Arc::new(Mutex::new(Vec::new()));
-        let ctx = BridgeCallContext::new(
-            Box::new(SharedWriter(Arc::clone(&writer_buf))),
-            Box::new(Cursor::new(Vec::new())),
-            "test-session-abc".into(),
-        );
-
-        let call_id = ctx
-            .async_send("_asyncFn", vec![0x91, 0xa3, 0x66, 0x6f, 0x6f])
-            .unwrap();
-        assert_eq!(call_id, 1);
-
-        // Verify the BridgeCall was written correctly
-        let written = writer_buf.lock().unwrap();
-        let call = ipc_binary::read_frame(&mut Cursor::new(&*written)).unwrap();
-        match call {
-            BinaryFrame::BridgeCall {
-                call_id,
-                session_id,
-                method,
-                payload,
-                ..
-            } => {
-                assert_eq!(call_id, 1);
-                assert_eq!(session_id, "test-session-abc");
-                assert_eq!(method, "_asyncFn");
-                assert_eq!(payload, vec![0x91, 0xa3, 0x66, 0x6f, 0x6f]);
-            }
-            _ => panic!("expected BridgeCall"),
-        }
-    }
-
-    #[test]
-    fn async_send_increments_call_id() {
-        let ctx = BridgeCallContext::new(
-            Box::new(Vec::new()),
-            Box::new(Cursor::new(Vec::new())),
-            "session-1".into(),
-        );
-
-        let id1 = ctx.async_send("_fn1", vec![]).unwrap();
-        let id2 = ctx.async_send("_fn2", vec![]).unwrap();
-        assert_eq!(id1, 1);
-        assert_eq!(id2, 2);
-    }
-
-    #[test]
-    fn async_send_shares_counter_with_sync() {
-        // Sync call uses call_id=1, async_send should get call_id=2
-        let response_bytes = make_response_bytes(1, Some(vec![0xc0]), None);
-        let ctx = BridgeCallContext::new(
-            Box::new(Vec::new()),
-            Box::new(Cursor::new(response_bytes)),
-            "session-1".into(),
-        );
-
-        let _ = ctx.sync_call("_sync", vec![]);
-        let id = ctx.async_send("_async", vec![]).unwrap();
-        assert_eq!(id, 2);
-    }
-
-    #[test]
-    fn channel_runtime_event_sender_delivers_frames() {
-        let (tx, rx) = crossbeam_channel::unbounded();
-        let sender = super::ChannelRuntimeEventSender::new(tx, None);
-
-        let event = RuntimeEvent::BridgeCall {
-            session_id: "sess-1".into(),
-            call_id: 42,
-            method: "_fsReadFile".into(),
-            payload: vec![0x01, 0x02],
-        };
-        sender.send_event(event.clone()).expect("send_event");
-
-        // Verify the received event matches without any BinaryFrame hop.
-        let received = rx.recv().expect("recv");
-        assert_eq!(received.output_generation, None);
-        assert_eq!(received.event, event);
-    }
-
-    #[test]
-    fn channel_runtime_event_sender_no_mutex_contention() {
-        // Multiple senders can send concurrently without blocking each other
-        let (tx, rx) = crossbeam_channel::unbounded();
-        let handles: Vec<_> = (0..4)
-            .map(|i| {
-                let sender = super::ChannelRuntimeEventSender::new(tx.clone(), None);
-                std::thread::spawn(move || {
-                    for j in 0..10 {
-                        let event = RuntimeEvent::BridgeCall {
-                            session_id: format!("sess-{}", i),
-                            call_id: (i * 100 + j) as u64,
-                            method: "_fn".into(),
-                            payload: vec![],
-                        };
-                        sender.send_event(event).expect("send_event");
-                    }
-                })
-            })
-            .collect();
-        drop(tx); // Drop original sender so rx closes when threads finish
-
-        for h in handles {
-            h.join().expect("thread join");
-        }
-
-        // All 40 frames should arrive and be decodable
-        let mut count = 0;
-        while rx.try_recv().is_ok() {
-            count += 1;
-        }
-        assert_eq!(count, 40);
-    }
-
-    #[test]
-    fn channel_runtime_event_sender_with_bridge_context() {
-        // Verify BridgeCallContext works with ChannelRuntimeEventSender end-to-end
-        let (tx, rx) = crossbeam_channel::unbounded();
-
-        // Pre-serialize a BridgeResponse for the reader
-        let response_bytes = make_response_bytes(1, Some(vec![0xAB, 0xCD]), None);
-        let router: super::CallIdRouter = Arc::new(Mutex::new(HashMap::new()));
-
-        let ctx = BridgeCallContext::with_receiver(
-            Box::new(super::ChannelRuntimeEventSender::new(tx, None)),
-            Box::new(super::ReaderBridgeResponseReceiver::new(Box::new(
-                Cursor::new(response_bytes),
-            ))),
-            "test-session".into(),
-            router,
-            Arc::new(std::sync::atomic::AtomicU64::new(1)),
-        );
-
-        let result = ctx.sync_call("_fsReadFile", vec![0x01]).unwrap();
-        assert_eq!(result, Some(vec![0xAB, 0xCD]));
-
-        // Verify the BridgeCall went through the channel
-        let event = rx.recv().expect("recv bridge call");
-        match event.event {
-            RuntimeEvent::BridgeCall { method, .. } => assert_eq!(method, "_fsReadFile"),
-            _ => panic!("expected BridgeCall"),
-        }
-    }
-
-    #[test]
-    fn sync_call_success_clears_call_id_route() {
-        let (tx, _rx) = crossbeam_channel::unbounded();
-        let response_bytes = make_response_bytes(1, Some(vec![0xAB, 0xCD]), None);
-        let router: super::CallIdRouter = Arc::new(Mutex::new(HashMap::new()));
-
-        let ctx = BridgeCallContext::with_receiver(
-            Box::new(super::ChannelRuntimeEventSender::new(tx, None)),
-            Box::new(super::ReaderBridgeResponseReceiver::new(Box::new(
-                Cursor::new(response_bytes),
-            ))),
-            "test-session".into(),
-            Arc::clone(&router),
-            Arc::new(std::sync::atomic::AtomicU64::new(1)),
-        );
-
-        let result = ctx.sync_call("_fsReadFile", vec![0x01]).unwrap();
-        assert_eq!(result, Some(vec![0xAB, 0xCD]));
-        assert!(
-            router.lock().unwrap().is_empty(),
-            "sync bridge response completion should clear the call_id route"
-        );
-    }
-
-    #[test]
-    fn writer_runtime_event_sender_serializes_events() {
-        let (tx, rx) = crossbeam_channel::unbounded();
-        let sender = super::ChannelRuntimeEventSender::new(tx, None);
-
-        // Send multiple frames — buffer grows to high-water mark
-        for i in 0..5 {
-            let event = RuntimeEvent::BridgeCall {
-                session_id: "sess-1".into(),
-                call_id: i,
-                method: "_fn".into(),
-                payload: vec![0xAA; 100 * (i as usize + 1)],
-            };
-            sender.send_event(event).expect("send_event");
-        }
-
-        // Verify all events arrive with their payload intact.
-        for i in 0..5u64 {
-            let decoded = rx.recv().expect("recv");
-            match decoded.event {
-                RuntimeEvent::BridgeCall {
-                    call_id, payload, ..
-                } => {
-                    assert_eq!(call_id, i);
-                    assert_eq!(payload.len(), 100 * (i as usize + 1));
-                }
-                _ => panic!("expected BridgeCall"),
-            }
-        }
-
-        // Small follow-up events still go through the same sender.
-        let small = RuntimeEvent::Log {
-            session_id: "s".into(),
-            channel: 0,
-            message: "x".into(),
-        };
-        sender.send_event(small.clone()).expect("send_event");
-        let decoded = rx.recv().expect("recv");
-        assert_eq!(decoded.event, small);
-    }
-
-    #[test]
-    fn stub_context_panics_on_sync_call() {
-        let ctx = BridgeCallContext::stub();
-        let result = std::panic::catch_unwind(std::panic::AssertUnwindSafe(|| {
-            let _ = ctx.sync_call("_fsReadFile", vec![]);
-        }));
-        assert!(result.is_err(), "stub sync_call should panic");
-    }
-
-    #[test]
-    fn stub_context_panics_on_async_send() {
-        let ctx = BridgeCallContext::stub();
-        let result = std::panic::catch_unwind(std::panic::AssertUnwindSafe(|| {
-            let _ = ctx.async_send("_asyncFn", vec![]);
-        }));
-        assert!(result.is_err(), "stub async_send should panic");
-    }
-}
diff --git a/crates/v8-runtime/src/ipc.rs b/crates/v8-runtime/src/ipc.rs
deleted file mode 100644
index 6b7562060..000000000
--- a/crates/v8-runtime/src/ipc.rs
+++ /dev/null
@@ -1,34 +0,0 @@
-// IPC message types used by the execution engine.
-//
-// The binary header wire format (ipc_binary.rs) handles serialization;
-// these types are used in-process only (no serde needed).
-
-use std::collections::HashMap;
-
-/// Process configuration injected into the V8 global as _processConfig
-#[derive(Debug, Clone, PartialEq)]
-pub struct ProcessConfig {
-    pub cwd: String,
-    pub env: HashMap<String, String>,
-    pub timing_mitigation: String,
-    pub frozen_time_ms: Option<f64>,
-    pub high_resolution_time: bool,
-}
-
-/// OS configuration injected into the V8 global as _osConfig
-#[derive(Debug, Clone, PartialEq)]
-pub struct OsConfig {
-    pub homedir: String,
-    pub tmpdir: String,
-    pub platform: String,
-    pub arch: String,
-}
-
-/// Structured error information from V8 execution
-#[derive(Debug, Clone, PartialEq)]
-pub struct ExecutionError {
-    pub error_type: String,
-    pub message: String,
-    pub stack: String,
-    pub code: Option<String>,
-}
diff --git a/crates/v8-runtime/src/ipc_binary.rs b/crates/v8-runtime/src/ipc_binary.rs
deleted file mode 100644
index f86bd0d6a..000000000
--- a/crates/v8-runtime/src/ipc_binary.rs
+++ /dev/null
@@ -1,1577 +0,0 @@
-// Binary header IPC framing — custom wire format for all message types.
-//
-// Wire format per frame:
-//   [4B total_len (u32 BE, excludes self)]
-//   [1B msg_type]
-//   [1B sid_len (N)]
-//   [N bytes session_id (UTF-8)]
-//   [... type-specific fixed fields ...]
-//   [M bytes payload (rest of frame)]
-//
-// Existing ipc.rs (MessagePack framing) is left unchanged.
-
-use std::io::{self, Read, Write};
-
-/// Maximum frame payload: 64 MB (same limit as MessagePack framing).
-const MAX_FRAME_SIZE: u32 = 64 * 1024 * 1024;
-
-// Host → Rust message type codes
-const MSG_AUTHENTICATE: u8 = 0x01;
-const MSG_CREATE_SESSION: u8 = 0x02;
-const MSG_DESTROY_SESSION: u8 = 0x03;
-const MSG_INJECT_GLOBALS: u8 = 0x04;
-const MSG_EXECUTE: u8 = 0x05;
-const MSG_BRIDGE_RESPONSE: u8 = 0x06;
-const MSG_STREAM_EVENT: u8 = 0x07;
-const MSG_TERMINATE_EXECUTION: u8 = 0x08;
-const MSG_WARM_SNAPSHOT: u8 = 0x09;
-
-// Rust → Host message type codes
-const MSG_BRIDGE_CALL: u8 = 0x81;
-const MSG_EXECUTION_RESULT: u8 = 0x82;
-const MSG_LOG: u8 = 0x83;
-const MSG_STREAM_CALLBACK: u8 = 0x84;
-
-// ExecutionResult flags
-const FLAG_HAS_EXPORTS: u8 = 0x01;
-const FLAG_HAS_ERROR: u8 = 0x02;
-
-/// A decoded binary frame — all fields are borrowed or owned depending on use.
-#[derive(Debug, Clone, PartialEq)]
-pub enum BinaryFrame {
-    // Host → Rust
-    Authenticate {
-        token: String,
-    },
-    CreateSession {
-        session_id: String,
-        heap_limit_mb: u32,
-        cpu_time_limit_ms: u32,
-        wall_clock_limit_ms: u32,
-    },
-    DestroySession {
-        session_id: String,
-    },
-    InjectGlobals {
-        session_id: String,
-        payload: Vec<u8>, // V8-serialized { processConfig, osConfig }
-    },
-    Execute {
-        session_id: String,
-        mode: u8, // 0 = exec, 1 = run
-        file_path: String,
-        bridge_code: String,
-        post_restore_script: String,
-        // Optional agent-SDK bundle evaluated into the per-sidecar snapshot alongside
-        // the bridge (empty = bridge-only snapshot, unchanged behavior). The snapshot
-        // is cached process-wide keyed by sha256(bridge_code + userland_code).
-        userland_code: String,
-        high_resolution_time: bool,
-        user_code: String,
-    },
-    BridgeResponse {
-        session_id: String,
-        call_id: u64,
-        status: u8,       // 0 = success, 1 = error
-        payload: Vec<u8>, // V8-serialized result OR UTF-8 error message
-    },
-    StreamEvent {
-        session_id: String,
-        event_type: String,
-        payload: Vec<u8>, // V8-serialized payload
-    },
-    TerminateExecution {
-        session_id: String,
-    },
-    WarmSnapshot {
-        bridge_code: String,
-        // Optional agent-SDK bundle to pre-warm into the snapshot (empty = bridge-only).
-        userland_code: String,
-    },
-
-    // Rust → Host
-    BridgeCall {
-        session_id: String,
-        call_id: u64,
-        method: String,
-        payload: Vec<u8>, // V8-serialized args
-    },
-    ExecutionResult {
-        session_id: String,
-        exit_code: i32,
-        exports: Option<Vec<u8>>,
-        error: Option<ExecutionErrorBin>,
-    },
-    Log {
-        session_id: String,
-        channel: u8, // 0 = stdout, 1 = stderr
-        message: String,
-    },
-    StreamCallback {
-        session_id: String,
-        callback_type: String,
-        payload: Vec<u8>, // V8-serialized payload
-    },
-}
-
-/// Structured error in binary format.
-#[derive(Debug, Clone, PartialEq)]
-pub struct ExecutionErrorBin {
-    pub error_type: String,
-    pub message: String,
-    pub stack: String,
-    pub code: String, // empty string = no code
-}
-
-/// Encode a binary frame into a provided buffer (length prefix + body).
-/// The buffer is cleared first; capacity is preserved across calls.
-/// Used by per-session buffering to avoid per-call allocation.
-pub fn encode_frame_into(buf: &mut Vec<u8>, frame: &BinaryFrame) -> io::Result<()> {
-    buf.clear();
-    // Reserve 4 bytes for the length prefix (filled after body)
-    buf.extend_from_slice(&[0, 0, 0, 0]);
-    encode_body(buf, frame)?;
-
-    let total_len = buf.len() - 4;
-    if total_len > MAX_FRAME_SIZE as usize {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            format!("frame size {total_len} exceeds maximum {MAX_FRAME_SIZE}"),
-        ));
-    }
-    buf[..4].copy_from_slice(&(total_len as u32).to_be_bytes());
-    Ok(())
-}
-
-/// Serialize a binary frame to a complete byte vector (length prefix + body).
-/// Used by per-session buffering to build the frame without holding any shared lock.
-pub fn frame_to_bytes(frame: &BinaryFrame) -> io::Result<Vec<u8>> {
-    let mut buf = Vec::new();
-    encode_frame_into(&mut buf, frame)?;
-    Ok(buf)
-}
-
-/// Write a binary frame to a writer.
-pub fn write_frame<W: Write>(writer: &mut W, frame: &BinaryFrame) -> io::Result<()> {
-    let bytes = frame_to_bytes(frame)?;
-    writer.write_all(&bytes)?;
-    Ok(())
-}
-
-/// Read a binary frame from a reader.
-pub fn read_frame<R: Read>(reader: &mut R) -> io::Result<BinaryFrame> {
-    let mut len_buf = [0u8; 4];
-    reader.read_exact(&mut len_buf)?;
-    let total_len = u32::from_be_bytes(len_buf);
-
-    if total_len > MAX_FRAME_SIZE {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            format!("frame size {total_len} exceeds maximum {MAX_FRAME_SIZE}"),
-        ));
-    }
-
-    let mut buf = vec![0u8; total_len as usize];
-    reader.read_exact(&mut buf)?;
-    decode_body(&buf)
-}
-
-/// Extract session_id from raw frame bytes without full deserialization.
-/// `raw` starts at the first byte after the 4-byte length prefix (i.e. the msg_type byte).
-/// Returns None for Authenticate (which has no session_id).
-#[allow(dead_code)]
-pub fn extract_session_id(raw: &[u8]) -> io::Result<Option<&str>> {
-    if raw.len() < 2 {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            "frame too short",
-        ));
-    }
-    let msg_type = raw[0];
-    if msg_type == MSG_AUTHENTICATE || msg_type == MSG_WARM_SNAPSHOT {
-        return Ok(None);
-    }
-    let sid_len = raw[1] as usize;
-    if raw.len() < 2 + sid_len {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            "frame too short for session_id",
-        ));
-    }
-    let sid = std::str::from_utf8(&raw[2..2 + sid_len])
-        .map_err(|e| io::Error::new(io::ErrorKind::InvalidData, e))?;
-    Ok(Some(sid))
-}
-
-// -- Internal encode/decode --
-
-fn encode_body(buf: &mut Vec<u8>, frame: &BinaryFrame) -> io::Result<()> {
-    match frame {
-        BinaryFrame::Authenticate { token } => {
-            buf.push(MSG_AUTHENTICATE);
-            // Authenticate has no session_id — sid_len = 0
-            buf.push(0);
-            buf.extend_from_slice(token.as_bytes());
-        }
-        BinaryFrame::CreateSession {
-            session_id,
-            heap_limit_mb,
-            cpu_time_limit_ms,
-            wall_clock_limit_ms,
-        } => {
-            buf.push(MSG_CREATE_SESSION);
-            write_session_id(buf, session_id)?;
-            buf.extend_from_slice(&heap_limit_mb.to_be_bytes());
-            buf.extend_from_slice(&cpu_time_limit_ms.to_be_bytes());
-            buf.extend_from_slice(&wall_clock_limit_ms.to_be_bytes());
-        }
-        BinaryFrame::DestroySession { session_id } => {
-            buf.push(MSG_DESTROY_SESSION);
-            write_session_id(buf, session_id)?;
-        }
-        BinaryFrame::InjectGlobals {
-            session_id,
-            payload,
-        } => {
-            buf.push(MSG_INJECT_GLOBALS);
-            write_session_id(buf, session_id)?;
-            buf.extend_from_slice(payload);
-        }
-        BinaryFrame::Execute {
-            session_id,
-            mode,
-            file_path,
-            bridge_code,
-            post_restore_script,
-            userland_code,
-            high_resolution_time,
-            user_code,
-        } => {
-            buf.push(MSG_EXECUTE);
-            write_session_id(buf, session_id)?;
-            buf.push(*mode);
-            // file_path length (u16 BE)
-            write_len_prefixed_u16(buf, file_path)?;
-            // bridge_code length (u32 BE)
-            let bc_bytes = bridge_code.as_bytes();
-            buf.extend_from_slice(&(bc_bytes.len() as u32).to_be_bytes());
-            buf.extend_from_slice(bc_bytes);
-            // post_restore_script length (u32 BE)
-            let prs_bytes = post_restore_script.as_bytes();
-            buf.extend_from_slice(&(prs_bytes.len() as u32).to_be_bytes());
-            buf.extend_from_slice(prs_bytes);
-            // userland_code length (u32 BE)
-            let ul_bytes = userland_code.as_bytes();
-            buf.extend_from_slice(&(ul_bytes.len() as u32).to_be_bytes());
-            buf.extend_from_slice(ul_bytes);
-            buf.push(u8::from(*high_resolution_time));
-            // user_code (rest of frame)
-            buf.extend_from_slice(user_code.as_bytes());
-        }
-        BinaryFrame::BridgeResponse {
-            session_id,
-            call_id,
-            status,
-            payload,
-        } => {
-            buf.push(MSG_BRIDGE_RESPONSE);
-            write_session_id(buf, session_id)?;
-            buf.extend_from_slice(&call_id.to_be_bytes());
-            buf.push(*status);
-            buf.extend_from_slice(payload);
-        }
-        BinaryFrame::StreamEvent {
-            session_id,
-            event_type,
-            payload,
-        } => {
-            buf.push(MSG_STREAM_EVENT);
-            write_session_id(buf, session_id)?;
-            write_len_prefixed_u16(buf, event_type)?;
-            buf.extend_from_slice(payload);
-        }
-        BinaryFrame::TerminateExecution { session_id } => {
-            buf.push(MSG_TERMINATE_EXECUTION);
-            write_session_id(buf, session_id)?;
-        }
-        BinaryFrame::WarmSnapshot {
-            bridge_code,
-            userland_code,
-        } => {
-            buf.push(MSG_WARM_SNAPSHOT);
-            buf.push(0); // no session_id
-            let bc_bytes = bridge_code.as_bytes();
-            buf.extend_from_slice(&(bc_bytes.len() as u32).to_be_bytes());
-            buf.extend_from_slice(bc_bytes);
-            // userland_code length (u32 BE) + bytes (rest)
-            let ul_bytes = userland_code.as_bytes();
-            buf.extend_from_slice(&(ul_bytes.len() as u32).to_be_bytes());
-            buf.extend_from_slice(ul_bytes);
-        }
-        BinaryFrame::BridgeCall {
-            session_id,
-            call_id,
-            method,
-            payload,
-        } => {
-            buf.push(MSG_BRIDGE_CALL);
-            write_session_id(buf, session_id)?;
-            buf.extend_from_slice(&call_id.to_be_bytes());
-            write_len_prefixed_u16(buf, method)?;
-            buf.extend_from_slice(payload);
-        }
-        BinaryFrame::ExecutionResult {
-            session_id,
-            exit_code,
-            exports,
-            error,
-        } => {
-            buf.push(MSG_EXECUTION_RESULT);
-            write_session_id(buf, session_id)?;
-            buf.extend_from_slice(&exit_code.to_be_bytes());
-            let mut flags: u8 = 0;
-            if exports.is_some() {
-                flags |= FLAG_HAS_EXPORTS;
-            }
-            if error.is_some() {
-                flags |= FLAG_HAS_ERROR;
-            }
-            buf.push(flags);
-            if let Some(exp) = exports {
-                buf.extend_from_slice(&(exp.len() as u32).to_be_bytes());
-                buf.extend_from_slice(exp);
-            }
-            if let Some(err) = error {
-                write_len_prefixed_u16(buf, &err.error_type)?;
-                write_len_prefixed_u16(buf, &err.message)?;
-                write_len_prefixed_u16(buf, &err.stack)?;
-                write_len_prefixed_u16(buf, &err.code)?;
-            }
-        }
-        BinaryFrame::Log {
-            session_id,
-            channel,
-            message,
-        } => {
-            buf.push(MSG_LOG);
-            write_session_id(buf, session_id)?;
-            buf.push(*channel);
-            buf.extend_from_slice(message.as_bytes());
-        }
-        BinaryFrame::StreamCallback {
-            session_id,
-            callback_type,
-            payload,
-        } => {
-            buf.push(MSG_STREAM_CALLBACK);
-            write_session_id(buf, session_id)?;
-            write_len_prefixed_u16(buf, callback_type)?;
-            buf.extend_from_slice(payload);
-        }
-    }
-    Ok(())
-}
-
-fn decode_body(buf: &[u8]) -> io::Result<BinaryFrame> {
-    if buf.is_empty() {
-        return Err(io::Error::new(io::ErrorKind::InvalidData, "empty frame"));
-    }
-
-    let msg_type = buf[0];
-    let mut pos = 1;
-
-    // Read the session_id field uniformly. Sessionless frame types validate
-    // that it is empty after the message type is known.
-    let sid_len = read_u8(buf, &mut pos)? as usize;
-    let session_id = read_utf8(buf, &mut pos, sid_len)?;
-
-    match msg_type {
-        MSG_AUTHENTICATE => {
-            ensure_no_session_id(&session_id, "Authenticate")?;
-            // Token is rest of frame after sid (sid is empty for Authenticate)
-            let remaining = buf.len() - pos;
-            let token = read_utf8(buf, &mut pos, remaining)?;
-            Ok(BinaryFrame::Authenticate { token })
-        }
-        MSG_CREATE_SESSION => {
-            let heap_limit_mb = read_u32(buf, &mut pos)?;
-            let cpu_time_limit_ms = read_u32(buf, &mut pos)?;
-            let wall_clock_limit_ms = read_u32(buf, &mut pos)?;
-            ensure_frame_consumed(buf, pos)?;
-            Ok(BinaryFrame::CreateSession {
-                session_id,
-                heap_limit_mb,
-                cpu_time_limit_ms,
-                wall_clock_limit_ms,
-            })
-        }
-        MSG_DESTROY_SESSION => {
-            ensure_frame_consumed(buf, pos)?;
-            Ok(BinaryFrame::DestroySession { session_id })
-        }
-        MSG_INJECT_GLOBALS => {
-            let payload = buf[pos..].to_vec();
-            Ok(BinaryFrame::InjectGlobals {
-                session_id,
-                payload,
-            })
-        }
-        MSG_EXECUTE => {
-            let mode = read_u8(buf, &mut pos)?;
-            let fp_len = read_u16(buf, &mut pos)? as usize;
-            let file_path = read_utf8(buf, &mut pos, fp_len)?;
-            let bc_len = read_u32(buf, &mut pos)? as usize;
-            let bridge_code = read_utf8(buf, &mut pos, bc_len)?;
-            let prs_len = read_u32(buf, &mut pos)? as usize;
-            let post_restore_script = read_utf8(buf, &mut pos, prs_len)?;
-            let ul_len = read_u32(buf, &mut pos)? as usize;
-            let userland_code = read_utf8(buf, &mut pos, ul_len)?;
-            let high_resolution_time = read_u8(buf, &mut pos)? != 0;
-            let remaining = buf.len() - pos;
-            let user_code = read_utf8(buf, &mut pos, remaining)?;
-            Ok(BinaryFrame::Execute {
-                session_id,
-                mode,
-                file_path,
-                bridge_code,
-                post_restore_script,
-                userland_code,
-                high_resolution_time,
-                user_code,
-            })
-        }
-        MSG_BRIDGE_RESPONSE => {
-            let call_id = read_u64(buf, &mut pos)?;
-            let status = read_u8(buf, &mut pos)?;
-            let payload = buf[pos..].to_vec();
-            Ok(BinaryFrame::BridgeResponse {
-                session_id,
-                call_id,
-                status,
-                payload,
-            })
-        }
-        MSG_STREAM_EVENT => {
-            let et_len = read_u16(buf, &mut pos)? as usize;
-            let event_type = read_utf8(buf, &mut pos, et_len)?;
-            let payload = buf[pos..].to_vec();
-            Ok(BinaryFrame::StreamEvent {
-                session_id,
-                event_type,
-                payload,
-            })
-        }
-        MSG_TERMINATE_EXECUTION => {
-            ensure_frame_consumed(buf, pos)?;
-            Ok(BinaryFrame::TerminateExecution { session_id })
-        }
-        MSG_WARM_SNAPSHOT => {
-            ensure_no_session_id(&session_id, "WarmSnapshot")?;
-            let bc_len = read_u32(buf, &mut pos)? as usize;
-            let bridge_code = read_utf8(buf, &mut pos, bc_len)?;
-            let ul_len = read_u32(buf, &mut pos)? as usize;
-            let userland_code = read_utf8(buf, &mut pos, ul_len)?;
-            ensure_frame_consumed(buf, pos)?;
-            Ok(BinaryFrame::WarmSnapshot {
-                bridge_code,
-                userland_code,
-            })
-        }
-        MSG_BRIDGE_CALL => {
-            let call_id = read_u64(buf, &mut pos)?;
-            let m_len = read_u16(buf, &mut pos)? as usize;
-            let method = read_utf8(buf, &mut pos, m_len)?;
-            let payload = buf[pos..].to_vec();
-            Ok(BinaryFrame::BridgeCall {
-                session_id,
-                call_id,
-                method,
-                payload,
-            })
-        }
-        MSG_EXECUTION_RESULT => {
-            let exit_code = read_i32(buf, &mut pos)?;
-            let flags = read_u8(buf, &mut pos)?;
-            if flags & !(FLAG_HAS_EXPORTS | FLAG_HAS_ERROR) != 0 {
-                return Err(io::Error::new(
-                    io::ErrorKind::InvalidData,
-                    format!("unknown ExecutionResult flags: 0x{flags:02x}"),
-                ));
-            }
-            let exports = if flags & FLAG_HAS_EXPORTS != 0 {
-                let exp_len = read_u32(buf, &mut pos)? as usize;
-                let data = read_bytes(buf, &mut pos, exp_len)?;
-                Some(data)
-            } else {
-                None
-            };
-            let error = if flags & FLAG_HAS_ERROR != 0 {
-                let error_type = read_len_prefixed_u16(buf, &mut pos)?;
-                let message = read_len_prefixed_u16(buf, &mut pos)?;
-                let stack = read_len_prefixed_u16(buf, &mut pos)?;
-                let code = read_len_prefixed_u16(buf, &mut pos)?;
-                Some(ExecutionErrorBin {
-                    error_type,
-                    message,
-                    stack,
-                    code,
-                })
-            } else {
-                None
-            };
-            ensure_frame_consumed(buf, pos)?;
-            Ok(BinaryFrame::ExecutionResult {
-                session_id,
-                exit_code,
-                exports,
-                error,
-            })
-        }
-        MSG_LOG => {
-            let channel = read_u8(buf, &mut pos)?;
-            let remaining = buf.len() - pos;
-            let message = read_utf8(buf, &mut pos, remaining)?;
-            Ok(BinaryFrame::Log {
-                session_id,
-                channel,
-                message,
-            })
-        }
-        MSG_STREAM_CALLBACK => {
-            let ct_len = read_u16(buf, &mut pos)? as usize;
-            let callback_type = read_utf8(buf, &mut pos, ct_len)?;
-            let payload = buf[pos..].to_vec();
-            Ok(BinaryFrame::StreamCallback {
-                session_id,
-                callback_type,
-                payload,
-            })
-        }
-        _ => Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            format!("unknown message type: 0x{msg_type:02x}"),
-        )),
-    }
-}
-
-// -- Primitive read/write helpers --
-
-fn write_session_id(buf: &mut Vec<u8>, sid: &str) -> io::Result<()> {
-    let bytes = sid.as_bytes();
-    if bytes.len() > 255 {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            format!("session ID byte length {} exceeds u8 max 255", bytes.len()),
-        ));
-    }
-    buf.push(bytes.len() as u8);
-    buf.extend_from_slice(bytes);
-    Ok(())
-}
-
-fn write_len_prefixed_u16(buf: &mut Vec<u8>, s: &str) -> io::Result<()> {
-    let bytes = s.as_bytes();
-    if bytes.len() > 0xFFFF {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            format!("string byte length {} exceeds u16 max 65535", bytes.len()),
-        ));
-    }
-    buf.extend_from_slice(&(bytes.len() as u16).to_be_bytes());
-    buf.extend_from_slice(bytes);
-    Ok(())
-}
-
-fn ensure_no_session_id(session_id: &str, frame_name: &str) -> io::Result<()> {
-    if session_id.is_empty() {
-        return Ok(());
-    }
-    Err(io::Error::new(
-        io::ErrorKind::InvalidData,
-        format!("{frame_name} frame must not include a session_id"),
-    ))
-}
-
-fn ensure_frame_consumed(buf: &[u8], pos: usize) -> io::Result<()> {
-    if pos == buf.len() {
-        return Ok(());
-    }
-    Err(io::Error::new(
-        io::ErrorKind::InvalidData,
-        format!("frame has {} trailing byte(s)", buf.len() - pos),
-    ))
-}
-
-fn read_u8(buf: &[u8], pos: &mut usize) -> io::Result<u8> {
-    if *pos >= buf.len() {
-        return Err(io::Error::new(
-            io::ErrorKind::UnexpectedEof,
-            "unexpected end of frame",
-        ));
-    }
-    let v = buf[*pos];
-    *pos += 1;
-    Ok(v)
-}
-
-fn read_u16(buf: &[u8], pos: &mut usize) -> io::Result<u16> {
-    if *pos + 2 > buf.len() {
-        return Err(io::Error::new(
-            io::ErrorKind::UnexpectedEof,
-            "unexpected end of frame",
-        ));
-    }
-    let v = u16::from_be_bytes([buf[*pos], buf[*pos + 1]]);
-    *pos += 2;
-    Ok(v)
-}
-
-fn read_u32(buf: &[u8], pos: &mut usize) -> io::Result<u32> {
-    if *pos + 4 > buf.len() {
-        return Err(io::Error::new(
-            io::ErrorKind::UnexpectedEof,
-            "unexpected end of frame",
-        ));
-    }
-    let v = u32::from_be_bytes([buf[*pos], buf[*pos + 1], buf[*pos + 2], buf[*pos + 3]]);
-    *pos += 4;
-    Ok(v)
-}
-
-fn read_u64(buf: &[u8], pos: &mut usize) -> io::Result<u64> {
-    if *pos + 8 > buf.len() {
-        return Err(io::Error::new(
-            io::ErrorKind::UnexpectedEof,
-            "unexpected end of frame",
-        ));
-    }
-    let v = u64::from_be_bytes([
-        buf[*pos],
-        buf[*pos + 1],
-        buf[*pos + 2],
-        buf[*pos + 3],
-        buf[*pos + 4],
-        buf[*pos + 5],
-        buf[*pos + 6],
-        buf[*pos + 7],
-    ]);
-    *pos += 8;
-    Ok(v)
-}
-
-fn read_i32(buf: &[u8], pos: &mut usize) -> io::Result<i32> {
-    if *pos + 4 > buf.len() {
-        return Err(io::Error::new(
-            io::ErrorKind::UnexpectedEof,
-            "unexpected end of frame",
-        ));
-    }
-    let v = i32::from_be_bytes([buf[*pos], buf[*pos + 1], buf[*pos + 2], buf[*pos + 3]]);
-    *pos += 4;
-    Ok(v)
-}
-
-fn read_bytes(buf: &[u8], pos: &mut usize, len: usize) -> io::Result<Vec<u8>> {
-    if *pos + len > buf.len() {
-        return Err(io::Error::new(
-            io::ErrorKind::UnexpectedEof,
-            "unexpected end of frame",
-        ));
-    }
-    let v = buf[*pos..*pos + len].to_vec();
-    *pos += len;
-    Ok(v)
-}
-
-fn read_utf8(buf: &[u8], pos: &mut usize, len: usize) -> io::Result<String> {
-    let bytes = read_bytes(buf, pos, len)?;
-    String::from_utf8(bytes).map_err(|e| io::Error::new(io::ErrorKind::InvalidData, e))
-}
-
-fn read_len_prefixed_u16(buf: &[u8], pos: &mut usize) -> io::Result<String> {
-    let len = read_u16(buf, pos)? as usize;
-    read_utf8(buf, pos, len)
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    fn roundtrip(frame: &BinaryFrame) {
-        let mut buf = Vec::new();
-        write_frame(&mut buf, frame).expect("write_frame");
-        let mut cursor = std::io::Cursor::new(&buf);
-        let decoded = read_frame(&mut cursor).expect("read_frame");
-        assert_eq!(&decoded, frame);
-    }
-
-    fn read_raw_body(body: Vec<u8>) -> io::Result<BinaryFrame> {
-        let mut buf = Vec::new();
-        buf.extend_from_slice(&(body.len() as u32).to_be_bytes());
-        buf.extend_from_slice(&body);
-        read_frame(&mut std::io::Cursor::new(buf))
-    }
-
-    // -- Host → Rust message types --
-
-    #[test]
-    fn roundtrip_authenticate() {
-        roundtrip(&BinaryFrame::Authenticate {
-            token: "a1b2c3d4e5f6a1b2c3d4e5f6a1b2c3d4".into(),
-        });
-    }
-
-    #[test]
-    fn roundtrip_create_session() {
-        roundtrip(&BinaryFrame::CreateSession {
-            session_id: "sess-abc-123".into(),
-            heap_limit_mb: 128,
-            cpu_time_limit_ms: 5000,
-            wall_clock_limit_ms: 9000,
-        });
-    }
-
-    #[test]
-    fn roundtrip_create_session_no_limits() {
-        roundtrip(&BinaryFrame::CreateSession {
-            session_id: "sess-1".into(),
-            heap_limit_mb: 0,
-            cpu_time_limit_ms: 0,
-            wall_clock_limit_ms: 0,
-        });
-    }
-
-    #[test]
-    fn roundtrip_destroy_session() {
-        roundtrip(&BinaryFrame::DestroySession {
-            session_id: "sess-7".into(),
-        });
-    }
-
-    #[test]
-    fn roundtrip_inject_globals() {
-        roundtrip(&BinaryFrame::InjectGlobals {
-            session_id: "sess-3".into(),
-            payload: vec![0x01, 0x02, 0x03, 0x04, 0x05],
-        });
-    }
-
-    #[test]
-    fn roundtrip_execute_exec_mode() {
-        roundtrip(&BinaryFrame::Execute {
-            session_id: "sess-1".into(),
-            mode: 0,
-            file_path: "".into(),
-            bridge_code: "(function(){ /* bridge */ })()".into(),
-            post_restore_script: "".into(),
-            userland_code: String::new(),
-            high_resolution_time: false,
-            user_code: "console.log('hello')".into(),
-        });
-    }
-
-    #[test]
-    fn roundtrip_execute_run_mode() {
-        roundtrip(&BinaryFrame::Execute {
-            session_id: "sess-2".into(),
-            mode: 1,
-            file_path: "/app/index.mjs".into(),
-            bridge_code: "(function(){ /* bridge */ })()".into(),
-            post_restore_script: "__runtimeApplyConfig({})".into(),
-            userland_code: String::new(),
-            high_resolution_time: false,
-            user_code: "export default 42".into(),
-        });
-    }
-
-    #[test]
-    fn roundtrip_bridge_response_success() {
-        roundtrip(&BinaryFrame::BridgeResponse {
-            session_id: "sess-4".into(),
-            call_id: 100,
-            status: 0,
-            payload: vec![0x93, 0x01, 0x02, 0x03],
-        });
-    }
-
-    #[test]
-    fn roundtrip_bridge_response_error() {
-        roundtrip(&BinaryFrame::BridgeResponse {
-            session_id: "sess-5".into(),
-            call_id: 101,
-            status: 1,
-            payload: b"ENOENT: no such file".to_vec(),
-        });
-    }
-
-    #[test]
-    fn roundtrip_stream_event() {
-        roundtrip(&BinaryFrame::StreamEvent {
-            session_id: "sess-5".into(),
-            event_type: "child_stdout".into(),
-            payload: vec![0x48, 0x65, 0x6c, 0x6c, 0x6f],
-        });
-    }
-
-    #[test]
-    fn roundtrip_terminate_execution() {
-        roundtrip(&BinaryFrame::TerminateExecution {
-            session_id: "sess-6".into(),
-        });
-    }
-
-    // -- Rust → Host message types --
-
-    #[test]
-    fn roundtrip_bridge_call() {
-        roundtrip(&BinaryFrame::BridgeCall {
-            session_id: "sess-1".into(),
-            call_id: 200,
-            method: "_fsReadFile".into(),
-            payload: vec![0x91, 0xa5, 0x2f, 0x74, 0x6d, 0x70],
-        });
-    }
-
-    #[test]
-    fn roundtrip_execution_result_success() {
-        roundtrip(&BinaryFrame::ExecutionResult {
-            session_id: "sess-1".into(),
-            exit_code: 0,
-            exports: Some(vec![0xc0]),
-            error: None,
-        });
-    }
-
-    #[test]
-    fn roundtrip_execution_result_error() {
-        roundtrip(&BinaryFrame::ExecutionResult {
-            session_id: "sess-2".into(),
-            exit_code: 1,
-            exports: None,
-            error: Some(ExecutionErrorBin {
-                error_type: "TypeError".into(),
-                message: "Cannot read properties of undefined".into(),
-                stack: "TypeError: Cannot read properties of undefined\n    at main.js:1:5".into(),
-                code: "".into(),
-            }),
-        });
-    }
-
-    #[test]
-    fn roundtrip_execution_result_error_with_code() {
-        roundtrip(&BinaryFrame::ExecutionResult {
-            session_id: "sess-3".into(),
-            exit_code: 1,
-            exports: None,
-            error: Some(ExecutionErrorBin {
-                error_type: "Error".into(),
-                message: "Cannot find module './missing'".into(),
-                stack: "Error: Cannot find module './missing'\n    at resolve (node:internal)"
-                    .into(),
-                code: "ERR_MODULE_NOT_FOUND".into(),
-            }),
-        });
-    }
-
-    #[test]
-    fn roundtrip_execution_result_exports_and_error() {
-        roundtrip(&BinaryFrame::ExecutionResult {
-            session_id: "sess-4".into(),
-            exit_code: 1,
-            exports: Some(vec![0x01, 0x02]),
-            error: Some(ExecutionErrorBin {
-                error_type: "Error".into(),
-                message: "partial failure".into(),
-                stack: "".into(),
-                code: "".into(),
-            }),
-        });
-    }
-
-    #[test]
-    fn roundtrip_execution_result_no_exports_no_error() {
-        roundtrip(&BinaryFrame::ExecutionResult {
-            session_id: "sess-5".into(),
-            exit_code: 0,
-            exports: None,
-            error: None,
-        });
-    }
-
-    #[test]
-    fn roundtrip_log_stdout() {
-        roundtrip(&BinaryFrame::Log {
-            session_id: "sess-1".into(),
-            channel: 0,
-            message: "hello world\n".into(),
-        });
-    }
-
-    #[test]
-    fn roundtrip_log_stderr() {
-        roundtrip(&BinaryFrame::Log {
-            session_id: "sess-1".into(),
-            channel: 1,
-            message: "warning: deprecated API\n".into(),
-        });
-    }
-
-    #[test]
-    fn roundtrip_stream_callback() {
-        roundtrip(&BinaryFrame::StreamCallback {
-            session_id: "sess-1".into(),
-            callback_type: "child_dispatch".into(),
-            payload: vec![0x92, 0x01, 0xa3, 0x66, 0x6f, 0x6f],
-        });
-    }
-
-    // -- WarmSnapshot --
-
-    #[test]
-    fn roundtrip_warm_snapshot() {
-        roundtrip(&BinaryFrame::WarmSnapshot {
-            bridge_code: "(function(){ /* bridge IIFE */ })()".into(),
-            userland_code: String::new(),
-        });
-    }
-
-    #[test]
-    fn roundtrip_warm_snapshot_empty_bridge_code() {
-        roundtrip(&BinaryFrame::WarmSnapshot {
-            bridge_code: "".into(),
-            userland_code: String::new(),
-        });
-    }
-
-    #[test]
-    fn roundtrip_warm_snapshot_large_bridge_code() {
-        roundtrip(&BinaryFrame::WarmSnapshot {
-            bridge_code: "x".repeat(100_000),
-            userland_code: String::new(),
-        });
-    }
-
-    #[test]
-    fn extract_session_id_warm_snapshot_returns_none() {
-        let frame = BinaryFrame::WarmSnapshot {
-            bridge_code: "bridge()".into(),
-            userland_code: String::new(),
-        };
-        let mut buf = Vec::new();
-        write_frame(&mut buf, &frame).expect("write");
-        let raw = &buf[4..];
-        let result = extract_session_id(raw).expect("extract");
-        assert_eq!(result, None);
-    }
-
-    // -- Edge cases --
-
-    #[test]
-    fn roundtrip_empty_payloads() {
-        roundtrip(&BinaryFrame::BridgeResponse {
-            session_id: "s".into(),
-            call_id: 0,
-            status: 0,
-            payload: vec![],
-        });
-        roundtrip(&BinaryFrame::StreamEvent {
-            session_id: "s".into(),
-            event_type: "".into(),
-            payload: vec![],
-        });
-        roundtrip(&BinaryFrame::BridgeCall {
-            session_id: "s".into(),
-            call_id: 0,
-            method: "".into(),
-            payload: vec![],
-        });
-        roundtrip(&BinaryFrame::InjectGlobals {
-            session_id: "s".into(),
-            payload: vec![],
-        });
-    }
-
-    #[test]
-    fn roundtrip_empty_session_id() {
-        roundtrip(&BinaryFrame::DestroySession {
-            session_id: "".into(),
-        });
-    }
-
-    #[test]
-    fn roundtrip_large_binary_payload() {
-        roundtrip(&BinaryFrame::BridgeResponse {
-            session_id: "sess-big".into(),
-            call_id: 42,
-            status: 0,
-            payload: vec![0xAA; 1024],
-        });
-    }
-
-    // -- Framing validation --
-
-    #[test]
-    fn frame_length_prefix_is_big_endian() {
-        let frame = BinaryFrame::DestroySession {
-            session_id: "x".into(),
-        };
-        let mut buf = Vec::new();
-        write_frame(&mut buf, &frame).expect("write");
-        let len = u32::from_be_bytes([buf[0], buf[1], buf[2], buf[3]]);
-        assert_eq!(len as usize, buf.len() - 4);
-    }
-
-    #[test]
-    fn multiple_frames_in_stream() {
-        let frames = vec![
-            BinaryFrame::CreateSession {
-                session_id: "a".into(),
-                heap_limit_mb: 64,
-                cpu_time_limit_ms: 1000,
-                wall_clock_limit_ms: 0,
-            },
-            BinaryFrame::Execute {
-                session_id: "a".into(),
-                mode: 0,
-                file_path: "".into(),
-                bridge_code: "bridge()".into(),
-                post_restore_script: "".into(),
-                userland_code: String::new(),
-                high_resolution_time: false,
-                user_code: "1+1".into(),
-            },
-            BinaryFrame::DestroySession {
-                session_id: "a".into(),
-            },
-        ];
-        let mut buf = Vec::new();
-        for f in &frames {
-            write_frame(&mut buf, f).expect("write");
-        }
-        let mut cursor = std::io::Cursor::new(&buf);
-        for f in &frames {
-            let decoded = read_frame(&mut cursor).expect("read");
-            assert_eq!(&decoded, f);
-        }
-    }
-
-    #[test]
-    fn reject_oversized_frame() {
-        let oversized_len: u32 = 64 * 1024 * 1024 + 1;
-        let mut buf = Vec::new();
-        buf.extend_from_slice(&oversized_len.to_be_bytes());
-        buf.extend_from_slice(&[0u8; 16]);
-        let mut cursor = std::io::Cursor::new(&buf);
-        let result = read_frame(&mut cursor);
-        assert!(result.is_err());
-        let err = result.unwrap_err();
-        assert_eq!(err.kind(), io::ErrorKind::InvalidData);
-        assert!(err.to_string().contains("exceeds maximum"));
-    }
-
-    #[test]
-    fn reject_unknown_message_type() {
-        // Craft a frame with unknown message type 0xFF
-        let body = vec![0xFF, 0x00]; // msg_type=0xFF, sid_len=0
-        let result = read_raw_body(body);
-        assert!(result.is_err());
-        assert!(result
-            .unwrap_err()
-            .to_string()
-            .contains("unknown message type"));
-    }
-
-    #[test]
-    fn reject_session_id_on_sessionless_frames() {
-        let authenticate = read_raw_body(vec![MSG_AUTHENTICATE, 1, b's', b't']);
-        assert!(authenticate.is_err());
-        assert!(authenticate
-            .unwrap_err()
-            .to_string()
-            .contains("must not include a session_id"));
-
-        let warm_snapshot = read_raw_body(vec![MSG_WARM_SNAPSHOT, 1, b's', 0, 0, 0, 0]);
-        assert!(warm_snapshot.is_err());
-        assert!(warm_snapshot
-            .unwrap_err()
-            .to_string()
-            .contains("must not include a session_id"));
-    }
-
-    #[test]
-    fn reject_trailing_bytes_on_fixed_shape_frames() {
-        let mut create_session = vec![MSG_CREATE_SESSION, 1, b's'];
-        create_session.extend_from_slice(&0u32.to_be_bytes());
-        create_session.extend_from_slice(&0u32.to_be_bytes());
-        create_session.extend_from_slice(&0u32.to_be_bytes());
-        create_session.push(0xAA);
-
-        let destroy_session = vec![MSG_DESTROY_SESSION, 1, b's', 0xAA];
-        let terminate_execution = vec![MSG_TERMINATE_EXECUTION, 1, b's', 0xAA];
-        // WarmSnapshot body: no-session-id flag, bridge_code (u32 len = 0), then
-        // userland_code (u32 len = 0); a single trailing 0xAA must be rejected.
-        let warm_snapshot = vec![MSG_WARM_SNAPSHOT, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0xAA];
-
-        for body in [
-            create_session,
-            destroy_session,
-            terminate_execution,
-            warm_snapshot,
-        ] {
-            let result = read_raw_body(body);
-            assert!(result.is_err());
-            assert!(result.unwrap_err().to_string().contains("trailing byte"));
-        }
-    }
-
-    #[test]
-    fn reject_unknown_execution_result_flags() {
-        let mut body = vec![MSG_EXECUTION_RESULT, 1, b's'];
-        body.extend_from_slice(&0i32.to_be_bytes());
-        body.push(0x80);
-
-        let result = read_raw_body(body);
-        assert!(result.is_err());
-        assert!(result
-            .unwrap_err()
-            .to_string()
-            .contains("unknown ExecutionResult flags"));
-    }
-
-    #[test]
-    fn empty_input_returns_eof() {
-        let buf: Vec<u8> = Vec::new();
-        let mut cursor = std::io::Cursor::new(&buf);
-        let result = read_frame(&mut cursor);
-        assert!(result.is_err());
-        assert_eq!(result.unwrap_err().kind(), io::ErrorKind::UnexpectedEof);
-    }
-
-    // -- Session ID routing --
-
-    #[test]
-    fn extract_session_id_from_raw_bytes() {
-        // Build a BridgeCall frame and verify we can extract session_id from raw bytes
-        let frame = BinaryFrame::BridgeCall {
-            session_id: "my-session-42".into(),
-            call_id: 7,
-            method: "_fsReadFile".into(),
-            payload: vec![0x01, 0x02],
-        };
-        let mut buf = Vec::new();
-        write_frame(&mut buf, &frame).expect("write");
-
-        // Raw bytes start after the 4-byte length prefix
-        let raw = &buf[4..];
-        let sid = extract_session_id(raw)
-            .expect("extract")
-            .expect("should have sid");
-        assert_eq!(sid, "my-session-42");
-    }
-
-    #[test]
-    fn extract_session_id_from_various_types() {
-        let test_cases: Vec<BinaryFrame> = vec![
-            BinaryFrame::CreateSession {
-                session_id: "sess-create".into(),
-                heap_limit_mb: 0,
-                cpu_time_limit_ms: 0,
-                wall_clock_limit_ms: 0,
-            },
-            BinaryFrame::DestroySession {
-                session_id: "sess-destroy".into(),
-            },
-            BinaryFrame::Execute {
-                session_id: "sess-exec".into(),
-                mode: 0,
-                file_path: "".into(),
-                bridge_code: "".into(),
-                post_restore_script: "".into(),
-                userland_code: String::new(),
-                high_resolution_time: false,
-                user_code: "".into(),
-            },
-            BinaryFrame::BridgeResponse {
-                session_id: "sess-resp".into(),
-                call_id: 1,
-                status: 0,
-                payload: vec![],
-            },
-            BinaryFrame::ExecutionResult {
-                session_id: "sess-result".into(),
-                exit_code: 0,
-                exports: None,
-                error: None,
-            },
-            BinaryFrame::Log {
-                session_id: "sess-log".into(),
-                channel: 0,
-                message: "hi".into(),
-            },
-        ];
-
-        for frame in &test_cases {
-            let mut buf = Vec::new();
-            write_frame(&mut buf, frame).expect("write");
-            let raw = &buf[4..];
-            let sid = extract_session_id(raw)
-                .expect("extract")
-                .expect("should have sid");
-            // Verify it matches the expected session_id
-            let expected = match frame {
-                BinaryFrame::CreateSession { session_id, .. }
-                | BinaryFrame::DestroySession { session_id }
-                | BinaryFrame::Execute { session_id, .. }
-                | BinaryFrame::BridgeResponse { session_id, .. }
-                | BinaryFrame::ExecutionResult { session_id, .. }
-                | BinaryFrame::Log { session_id, .. } => session_id.as_str(),
-                _ => unreachable!(),
-            };
-            assert_eq!(sid, expected, "session_id mismatch for frame: {:?}", frame);
-        }
-    }
-
-    #[test]
-    fn extract_session_id_authenticate_returns_none() {
-        let frame = BinaryFrame::Authenticate {
-            token: "secret-token".into(),
-        };
-        let mut buf = Vec::new();
-        write_frame(&mut buf, &frame).expect("write");
-        let raw = &buf[4..];
-        let result = extract_session_id(raw).expect("extract");
-        assert_eq!(result, None);
-    }
-
-    #[test]
-    fn extract_session_id_too_short() {
-        let result = extract_session_id(&[0x02]); // msg_type only, no sid_len
-        assert!(result.is_err());
-    }
-
-    // -- Wire format byte-level verification --
-
-    #[test]
-    fn wire_format_message_type_bytes() {
-        let cases: Vec<(BinaryFrame, u8)> = vec![
-            (BinaryFrame::Authenticate { token: "t".into() }, 0x01),
-            (
-                BinaryFrame::CreateSession {
-                    session_id: "s".into(),
-                    heap_limit_mb: 0,
-                    cpu_time_limit_ms: 0,
-                    wall_clock_limit_ms: 0,
-                },
-                0x02,
-            ),
-            (
-                BinaryFrame::DestroySession {
-                    session_id: "s".into(),
-                },
-                0x03,
-            ),
-            (
-                BinaryFrame::InjectGlobals {
-                    session_id: "s".into(),
-                    payload: vec![],
-                },
-                0x04,
-            ),
-            (
-                BinaryFrame::Execute {
-                    session_id: "s".into(),
-                    mode: 0,
-                    file_path: "".into(),
-                    bridge_code: "".into(),
-                    post_restore_script: "".into(),
-                    userland_code: String::new(),
-                    high_resolution_time: false,
-                    user_code: "".into(),
-                },
-                0x05,
-            ),
-            (
-                BinaryFrame::BridgeResponse {
-                    session_id: "s".into(),
-                    call_id: 0,
-                    status: 0,
-                    payload: vec![],
-                },
-                0x06,
-            ),
-            (
-                BinaryFrame::StreamEvent {
-                    session_id: "s".into(),
-                    event_type: "".into(),
-                    payload: vec![],
-                },
-                0x07,
-            ),
-            (
-                BinaryFrame::TerminateExecution {
-                    session_id: "s".into(),
-                },
-                0x08,
-            ),
-            (
-                BinaryFrame::WarmSnapshot {
-                    bridge_code: "bridge()".into(),
-                    userland_code: String::new(),
-                },
-                0x09,
-            ),
-            (
-                BinaryFrame::BridgeCall {
-                    session_id: "s".into(),
-                    call_id: 0,
-                    method: "".into(),
-                    payload: vec![],
-                },
-                0x81,
-            ),
-            (
-                BinaryFrame::ExecutionResult {
-                    session_id: "s".into(),
-                    exit_code: 0,
-                    exports: None,
-                    error: None,
-                },
-                0x82,
-            ),
-            (
-                BinaryFrame::Log {
-                    session_id: "s".into(),
-                    channel: 0,
-                    message: "".into(),
-                },
-                0x83,
-            ),
-            (
-                BinaryFrame::StreamCallback {
-                    session_id: "s".into(),
-                    callback_type: "".into(),
-                    payload: vec![],
-                },
-                0x84,
-            ),
-        ];
-        for (frame, expected_type) in &cases {
-            let mut buf = Vec::new();
-            write_frame(&mut buf, frame).expect("write");
-            // Byte 4 (after 4-byte length prefix) is the message type
-            assert_eq!(buf[4], *expected_type, "type mismatch for: {:?}", frame);
-        }
-    }
-
-    // -- frame_to_bytes tests --
-
-    #[test]
-    fn frame_to_bytes_matches_write_frame() {
-        let frame = BinaryFrame::BridgeCall {
-            session_id: "sess-42".into(),
-            call_id: 123,
-            method: "_fsReadFile".into(),
-            payload: vec![0x01, 0x02, 0x03],
-        };
-        let bytes = frame_to_bytes(&frame).expect("frame_to_bytes");
-        let mut buf = Vec::new();
-        write_frame(&mut buf, &frame).expect("write_frame");
-        assert_eq!(bytes, buf);
-    }
-
-    #[test]
-    fn frame_to_bytes_roundtrip() {
-        let frame = BinaryFrame::ExecutionResult {
-            session_id: "sess-1".into(),
-            exit_code: 0,
-            exports: Some(vec![0xAA, 0xBB]),
-            error: None,
-        };
-        let bytes = frame_to_bytes(&frame).expect("frame_to_bytes");
-        let mut cursor = std::io::Cursor::new(&bytes);
-        let decoded = read_frame(&mut cursor).expect("read_frame");
-        assert_eq!(decoded, frame);
-    }
-
-    #[test]
-    fn frame_to_bytes_atomic_no_interleaving() {
-        // Verify frame_to_bytes produces a single contiguous byte vector
-        // (no intermediate writes that could interleave)
-        let frame = BinaryFrame::BridgeCall {
-            session_id: "s".into(),
-            call_id: 1,
-            method: "_fn".into(),
-            payload: vec![0xFF; 1024],
-        };
-        let bytes = frame_to_bytes(&frame).expect("frame_to_bytes");
-        // Length prefix matches body
-        let len = u32::from_be_bytes([bytes[0], bytes[1], bytes[2], bytes[3]]) as usize;
-        assert_eq!(len, bytes.len() - 4);
-    }
-
-    #[test]
-    fn encode_frame_into_reuses_buffer_capacity() {
-        let mut buf = Vec::new();
-        let frame = BinaryFrame::BridgeCall {
-            session_id: "s1".into(),
-            call_id: 1,
-            method: "_fn".into(),
-            payload: vec![0xAA; 512],
-        };
-
-        // First encode grows the buffer
-        encode_frame_into(&mut buf, &frame).expect("encode");
-        let first_bytes = buf.clone();
-        let cap_after_first = buf.capacity();
-        assert!(cap_after_first >= buf.len());
-
-        // Second encode reuses capacity (no new allocation if same size)
-        let frame2 = BinaryFrame::BridgeCall {
-            session_id: "s1".into(),
-            call_id: 2,
-            method: "_fn".into(),
-            payload: vec![0xBB; 256],
-        };
-        encode_frame_into(&mut buf, &frame2).expect("encode");
-        assert!(
-            buf.capacity() >= cap_after_first,
-            "capacity should not shrink"
-        );
-
-        // Verify round-trip correctness
-        let decoded = read_frame(&mut std::io::Cursor::new(&first_bytes)).expect("decode");
-        assert_eq!(decoded, frame);
-        let decoded2 = read_frame(&mut std::io::Cursor::new(&buf)).expect("decode");
-        assert_eq!(decoded2, frame2);
-    }
-
-    #[test]
-    fn encode_frame_into_matches_frame_to_bytes() {
-        let frame = BinaryFrame::ExecutionResult {
-            session_id: "sess-1".into(),
-            exit_code: 0,
-            exports: Some(vec![0x01, 0x02]),
-            error: None,
-        };
-        let expected = frame_to_bytes(&frame).expect("frame_to_bytes");
-        let mut buf = Vec::new();
-        encode_frame_into(&mut buf, &frame).expect("encode_frame_into");
-        assert_eq!(buf, expected);
-    }
-
-    #[test]
-    fn encode_frame_into_grows_to_high_water_mark() {
-        let mut buf = Vec::new();
-
-        // Small frame
-        let small = BinaryFrame::Log {
-            session_id: "s".into(),
-            channel: 0,
-            message: "hi".into(),
-        };
-        encode_frame_into(&mut buf, &small).expect("encode");
-        let small_cap = buf.capacity();
-
-        // Large frame grows buffer
-        let large = BinaryFrame::BridgeCall {
-            session_id: "s".into(),
-            call_id: 1,
-            method: "_fn".into(),
-            payload: vec![0xFF; 4096],
-        };
-        encode_frame_into(&mut buf, &large).expect("encode");
-        let large_cap = buf.capacity();
-        assert!(large_cap > small_cap);
-
-        // Small frame again — capacity stays at high-water mark
-        encode_frame_into(&mut buf, &small).expect("encode");
-        assert_eq!(
-            buf.capacity(),
-            large_cap,
-            "capacity should stay at high-water mark"
-        );
-    }
-
-    // -- Overflow guard tests --
-
-    #[test]
-    fn write_session_id_rejects_oversized() {
-        // Session ID > 255 bytes must be rejected
-        let long_sid = "x".repeat(256);
-        let frame = BinaryFrame::DestroySession {
-            session_id: long_sid,
-        };
-        let result = frame_to_bytes(&frame);
-        assert!(result.is_err());
-        let err = result.unwrap_err();
-        assert_eq!(err.kind(), io::ErrorKind::InvalidInput);
-        assert!(err.to_string().contains("session ID byte length"));
-        assert!(err.to_string().contains("255"));
-    }
-
-    #[test]
-    fn write_session_id_accepts_max() {
-        // Session ID of exactly 255 bytes must succeed
-        let max_sid = "a".repeat(255);
-        let frame = BinaryFrame::DestroySession {
-            session_id: max_sid.clone(),
-        };
-        let bytes = frame_to_bytes(&frame).expect("should accept 255-byte session ID");
-        let decoded = read_frame(&mut std::io::Cursor::new(&bytes)).expect("decode");
-        assert_eq!(decoded, frame);
-    }
-
-    #[test]
-    fn write_len_prefixed_u16_rejects_oversized() {
-        // String > 65535 bytes in a u16-prefixed field must be rejected
-        let long_method = "m".repeat(65536);
-        let frame = BinaryFrame::BridgeCall {
-            session_id: "s".into(),
-            call_id: 1,
-            method: long_method,
-            payload: vec![],
-        };
-        let result = frame_to_bytes(&frame);
-        assert!(result.is_err());
-        let err = result.unwrap_err();
-        assert_eq!(err.kind(), io::ErrorKind::InvalidInput);
-        assert!(err.to_string().contains("string byte length"));
-        assert!(err.to_string().contains("65535"));
-    }
-
-    #[test]
-    fn write_len_prefixed_u16_accepts_max() {
-        // String of exactly 65535 bytes in a u16-prefixed field must succeed
-        let max_method = "m".repeat(65535);
-        let frame = BinaryFrame::BridgeCall {
-            session_id: "s".into(),
-            call_id: 1,
-            method: max_method.clone(),
-            payload: vec![],
-        };
-        let bytes = frame_to_bytes(&frame).expect("should accept 65535-byte method");
-        let decoded = read_frame(&mut std::io::Cursor::new(&bytes)).expect("decode");
-        assert_eq!(decoded, frame);
-    }
-
-    #[test]
-    fn execute_file_path_rejects_oversized() {
-        // file_path > 65535 bytes must be rejected (encoded as u16)
-        let long_path = "/".repeat(65536);
-        let frame = BinaryFrame::Execute {
-            session_id: "s".into(),
-            mode: 0,
-            file_path: long_path,
-            bridge_code: "".into(),
-            post_restore_script: "".into(),
-            userland_code: String::new(),
-            high_resolution_time: false,
-            user_code: "".into(),
-        };
-        let result = frame_to_bytes(&frame);
-        assert!(result.is_err());
-        let err = result.unwrap_err();
-        assert_eq!(err.kind(), io::ErrorKind::InvalidInput);
-        assert!(err.to_string().contains("65535"));
-    }
-}
diff --git a/crates/v8-runtime/src/isolate.rs b/crates/v8-runtime/src/isolate.rs
deleted file mode 100644
index 891d8b3a1..000000000
--- a/crates/v8-runtime/src/isolate.rs
+++ /dev/null
@@ -1,221 +0,0 @@
-// V8 isolate lifecycle: platform init, create, configure, destroy
-
-use std::collections::HashMap;
-use std::ffi::c_void;
-use std::sync::{Mutex, Once};
-
-use crate::ipc::ExecutionError;
-use secure_exec_bridge::queue_tracker::{warn_limit_exhausted, TrackedLimit};
-
-static V8_INIT: Once = Once::new();
-static V8_ISOLATE_LIFECYCLE: Mutex<()> = Mutex::new(());
-const MAX_UNHANDLED_PROMISE_REJECTIONS: usize = 1024;
-
-#[repr(align(16))]
-struct AlignedBytes<const N: usize>([u8; N]);
-
-static ICU_COMMON_DATA: AlignedBytes<
-    { include_bytes!(concat!(env!("OUT_DIR"), "/icudtl.dat")).len() },
-> = AlignedBytes(*include_bytes!(concat!(env!("OUT_DIR"), "/icudtl.dat")));
-
-#[derive(Default)]
-pub struct PromiseRejectState {
-    pub unhandled: HashMap<i32, ExecutionError>,
-    overflow_count: usize,
-}
-
-impl PromiseRejectState {
-    fn record_unhandled(&mut self, promise_id: i32, error: ExecutionError) {
-        use std::collections::hash_map::Entry;
-        // Cache the length before taking the entry, since `Entry` borrows the
-        // map mutably and we cannot read `len()` while it is held.
-        let under_limit = self.unhandled.len() < MAX_UNHANDLED_PROMISE_REJECTIONS;
-        match self.unhandled.entry(promise_id) {
-            // Existing rejection for this promise — overwrite with latest error.
-            Entry::Occupied(mut entry) => {
-                entry.insert(error);
-            }
-            // New rejection: store it if under the cap, otherwise count overflow.
-            Entry::Vacant(entry) => {
-                if under_limit {
-                    entry.insert(error);
-                } else {
-                    self.overflow_count = self.overflow_count.saturating_add(1);
-                }
-            }
-        }
-    }
-
-    fn mark_handled(&mut self, promise_id: i32) {
-        if self.unhandled.remove(&promise_id).is_none() && self.overflow_count > 0 {
-            self.overflow_count -= 1;
-        }
-    }
-
-    pub fn take_next_unhandled(&mut self) -> Option<ExecutionError> {
-        if self.overflow_count > 0 {
-            self.overflow_count = 0;
-            self.unhandled.clear();
-            return Some(ExecutionError {
-                error_type: "Error".into(),
-                message: format!(
-                    "unhandled promise rejection registry exceeded limit of {MAX_UNHANDLED_PROMISE_REJECTIONS} rejections"
-                ),
-                stack: String::new(),
-                code: Some("ERR_AGENTOS_UNHANDLED_REJECTION_LIMIT".into()),
-            });
-        }
-        self.unhandled.drain().next().map(|(_, err)| err)
-    }
-}
-
-extern "C" fn promise_reject_callback(msg: v8::PromiseRejectMessage) {
-    let scope = &mut unsafe { v8::CallbackScope::new(&msg) };
-    let promise_id = msg.get_promise().get_identity_hash().get();
-    match msg.get_event() {
-        v8::PromiseRejectEvent::PromiseRejectWithNoHandler => {
-            let error = {
-                let scope = &mut v8::HandleScope::new(scope);
-                let value = msg
-                    .get_value()
-                    .unwrap_or_else(|| v8::undefined(scope).into());
-                crate::execution::extract_error_info(scope, value)
-            };
-            if let Some(state) = scope.get_slot_mut::<PromiseRejectState>() {
-                state.record_unhandled(promise_id, error);
-            }
-        }
-        v8::PromiseRejectEvent::PromiseHandlerAddedAfterReject => {
-            if let Some(state) = scope.get_slot_mut::<PromiseRejectState>() {
-                state.mark_handled(promise_id);
-            }
-        }
-        _ => {}
-    }
-}
-
-pub fn configure_isolate(isolate: &mut v8::OwnedIsolate) {
-    isolate.set_slot(PromiseRejectState::default());
-    isolate.set_promise_reject_callback(promise_reject_callback);
-}
-
-/// Initialize the V8 platform (once per process).
-/// Safe to call multiple times; only the first call takes effect.
-pub fn init_v8_platform() {
-    V8_INIT.call_once(|| {
-        v8::icu::set_common_data_74(&ICU_COMMON_DATA.0)
-            .expect("failed to initialize V8 ICU common data");
-        let platform = v8::new_default_platform(0, false).make_shared();
-        v8::V8::initialize_platform(platform);
-        v8::V8::initialize();
-    });
-}
-
-// Headroom granted to V8 when the near-heap-limit callback fires. V8 fatal-aborts
-// the whole process (SIGTRAP) if the callback does not raise the limit, so we must
-// hand back a larger limit to give the engine room to unwind. Termination has
-// already been requested, so this extra budget only covers propagation of the
-// uncatchable termination exception, not continued guest allocation.
-const NEAR_HEAP_LIMIT_HEADROOM_BYTES: usize = 16 * 1024 * 1024;
-
-/// Default per-isolate heap cap applied when the caller passes no explicit limit.
-///
-/// Resource limits must be bounded by default (never unbounded for memory): a
-/// guest with no configured `heap_limit_mb` must NOT be able to grow the heap until
-/// V8 fatal-aborts the process-global runtime and takes down every co-tenant
-/// isolate. 128 MiB matches the Cloudflare Workers per-isolate budget we mirror for
-/// isolation semantics; operators may raise it via the configured limit.
-pub const DEFAULT_HEAP_LIMIT_MB: u32 = 128;
-
-/// Invoked by V8 when heap usage approaches the configured limit. Instead of
-/// letting V8 fatal-abort the (process-global) runtime, request termination of the
-/// offending isolate and return a raised limit so V8 can propagate the uncatchable
-/// termination exception cleanly. `data` is a leaked `Box<v8::IsolateHandle>` for
-/// the isolate this callback was registered on.
-extern "C" fn near_heap_limit_callback(
-    data: *mut c_void,
-    current_heap_limit: usize,
-    initial_heap_limit: usize,
-) -> usize {
-    if !data.is_null() {
-        // Safety: `data` is the pointer produced by `Box::into_raw` in
-        // `install_heap_limit_guard` and lives for the entire lifetime of the
-        // isolate.
-        let handle = unsafe { &*(data as *const v8::IsolateHandle) };
-        // Terminate any JS currently running on this isolate. This unwinds the
-        // guest with an uncatchable exception rather than crashing the process.
-        handle.terminate_execution();
-    }
-    warn_limit_exhausted(
-        TrackedLimit::V8HeapBytes,
-        current_heap_limit,
-        initial_heap_limit.max(1),
-    );
-    // Grant headroom so V8 does not immediately fatal-abort before the termination
-    // takes effect. We never shrink below the current limit.
-    current_heap_limit
-        .max(initial_heap_limit)
-        .saturating_add(NEAR_HEAP_LIMIT_HEADROOM_BYTES)
-}
-
-/// Register the near-heap-limit OOM guard on an isolate that was created with a
-/// configured heap cap. Without this guard, V8 fatal-aborts the whole (process-
-/// global) runtime with a SIGTRAP when the cap is reached, taking down every
-/// concurrent tenant; with it, the offending isolate is terminated instead.
-///
-/// Must be called for every isolate created with a non-`None` heap limit,
-/// regardless of whether it was built fresh or restored from a snapshot.
-pub fn install_heap_limit_guard(isolate: &mut v8::OwnedIsolate) {
-    // The callback needs a thread-safe handle to request termination of this very
-    // isolate. The handle is leaked so it outlives the callback registration; the
-    // number of isolates per process is bounded, so this is not an unbounded leak,
-    // and the memory is reclaimed when the process exits.
-    let handle = Box::new(isolate.thread_safe_handle());
-    let data = Box::into_raw(handle) as *mut c_void;
-    isolate.add_near_heap_limit_callback(near_heap_limit_callback, data);
-}
-
-/// Create a new V8 isolate with an optional heap limit in MB. `None` applies the
-/// bounded-by-default cap (`DEFAULT_HEAP_LIMIT_MB`) — an isolate is NEVER created
-/// with an unbounded heap, so a guest heap bomb terminates its own isolate rather
-/// than fatal-aborting the shared process.
-pub fn create_isolate(heap_limit_mb: Option<u32>) -> v8::OwnedIsolate {
-    let limit = heap_limit_mb.unwrap_or(DEFAULT_HEAP_LIMIT_MB);
-    let mut params = v8::CreateParams::default();
-    let limit_bytes = (limit as usize) * 1024 * 1024;
-    params = params.heap_limits(0, limit_bytes);
-    let mut isolate = with_isolate_lifecycle_lock(|| v8::Isolate::new(params));
-    configure_isolate(&mut isolate);
-    install_heap_limit_guard(&mut isolate);
-    isolate
-}
-
-/// Run V8 isolate create/drop work under a process-wide lifecycle lock.
-///
-/// rusty_v8 130.0.7 embeds a V8 13.0-era process-wide WebAssembly code pointer
-/// table. Isolate construction allocates wasm builtin handles from that table and
-/// isolate destruction frees them again, so create/drop must not overlap across
-/// session threads.
-pub fn with_isolate_lifecycle_lock<T>(f: impl FnOnce() -> T) -> T {
-    let _guard = V8_ISOLATE_LIFECYCLE
-        .lock()
-        .expect("V8 isolate lifecycle lock poisoned");
-    f()
-}
-
-pub fn drop_isolate(isolate: Option<v8::OwnedIsolate>) {
-    if let Some(isolate) = isolate {
-        with_isolate_lifecycle_lock(|| drop(isolate));
-    }
-}
-
-/// Create a new V8 context on the given isolate.
-/// Returns a Global handle so the context can be reused across scopes.
-pub fn create_context(isolate: &mut v8::OwnedIsolate) -> v8::Global<v8::Context> {
-    let scope = &mut v8::HandleScope::new(isolate);
-    let context = v8::Context::new(scope, Default::default());
-    v8::Global::new(scope, context)
-}
-
-// V8 lifecycle tests are consolidated in execution::tests to avoid
-// inter-test SIGSEGV from V8 global state issues.
diff --git a/crates/v8-runtime/src/lib.rs b/crates/v8-runtime/src/lib.rs
index f788f0dfd..126c49fbf 100644
--- a/crates/v8-runtime/src/lib.rs
+++ b/crates/v8-runtime/src/lib.rs
@@ -1,12 +1,3 @@
-pub mod bridge;
-pub mod embedded_runtime;
-pub mod execution;
-pub mod host_call;
-pub mod ipc;
-pub mod ipc_binary;
-pub mod isolate;
-pub mod runtime_protocol;
-pub mod session;
-pub mod snapshot;
-pub mod stream;
-pub mod timeout;
+//! Compatibility shim for `agentos-v8-runtime`.
+
+pub use agentos_v8_runtime::*;
diff --git a/crates/v8-runtime/src/runtime_protocol.rs b/crates/v8-runtime/src/runtime_protocol.rs
deleted file mode 100644
index 1291905e4..000000000
--- a/crates/v8-runtime/src/runtime_protocol.rs
+++ /dev/null
@@ -1,371 +0,0 @@
-use crate::ipc_binary::{BinaryFrame, ExecutionErrorBin};
-use std::io;
-use std::sync::Arc;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct WarmSessionHint {
-    pub bridge_code: String,
-    pub userland_code: String,
-    pub heap_limit_mb: Option<u32>,
-}
-
-#[derive(Debug, Clone, PartialEq)]
-pub enum RuntimeCommand {
-    CreateSession {
-        session_id: String,
-        heap_limit_mb: Option<u32>,
-        cpu_time_limit_ms: Option<u32>,
-        wall_clock_limit_ms: Option<u32>,
-        warm_hint: Option<WarmSessionHint>,
-    },
-    DestroySession {
-        session_id: String,
-    },
-    WarmSnapshot {
-        bridge_code: String,
-        userland_code: String,
-    },
-    SendToSession {
-        session_id: String,
-        message: SessionMessage,
-    },
-    /// Install a direct module-source reader on a session thread. Carries the live
-    /// reader (not serialized) so module loads skip the bridge round-trip. Routed
-    /// through the dispatch thread (which owns the session manager) like
-    /// `SendToSession`, then forwarded as a `SessionCommand::SetModuleReader`.
-    SetSessionModuleReader {
-        session_id: String,
-        reader: ModuleReaderHandle,
-    },
-}
-
-/// Wrapper that lets a live `GuestModuleReader` ride `RuntimeCommand` despite its
-/// `derive(Debug, Clone, PartialEq)`: the trait object lives behind an
-/// `Arc<Mutex<Option<..>>>`, and the dispatch thread `take()`s it out exactly once.
-#[derive(Clone)]
-pub struct ModuleReaderHandle(
-    std::sync::Arc<std::sync::Mutex<Option<Box<dyn crate::execution::GuestModuleReader>>>>,
-);
-
-impl ModuleReaderHandle {
-    pub fn new(reader: Box<dyn crate::execution::GuestModuleReader>) -> Self {
-        ModuleReaderHandle(std::sync::Arc::new(std::sync::Mutex::new(Some(reader))))
-    }
-
-    /// Take the reader out (dispatch-thread side); `None` if already taken.
-    pub fn take(&self) -> Option<Box<dyn crate::execution::GuestModuleReader>> {
-        self.0.lock().ok().and_then(|mut guard| guard.take())
-    }
-}
-
-impl std::fmt::Debug for ModuleReaderHandle {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        f.write_str("ModuleReaderHandle(..)")
-    }
-}
-
-impl PartialEq for ModuleReaderHandle {
-    fn eq(&self, other: &Self) -> bool {
-        std::sync::Arc::ptr_eq(&self.0, &other.0)
-    }
-}
-
-#[derive(Debug, Clone, PartialEq)]
-pub enum SessionMessage {
-    InjectGlobals {
-        payload: Vec<u8>,
-    },
-    Execute {
-        mode: u8,
-        file_path: String,
-        bridge_code: String,
-        post_restore_script: String,
-        userland_code: String,
-        high_resolution_time: bool,
-        user_code: String,
-        wasm_module_bytes: Option<Arc<Vec<u8>>>,
-    },
-    BridgeResponse(BridgeResponse),
-    StreamEvent(StreamEvent),
-    TerminateExecution,
-}
-
-#[derive(Debug, Clone, PartialEq)]
-pub struct BridgeResponse {
-    pub call_id: u64,
-    pub status: u8,
-    pub payload: Vec<u8>,
-}
-
-#[derive(Debug, Clone, PartialEq)]
-pub struct StreamEvent {
-    pub event_type: String,
-    pub payload: Vec<u8>,
-}
-
-#[derive(Debug, Clone, PartialEq)]
-pub enum RuntimeEvent {
-    BridgeCall {
-        session_id: String,
-        call_id: u64,
-        method: String,
-        payload: Vec<u8>,
-    },
-    ExecutionResult {
-        session_id: String,
-        exit_code: i32,
-        exports: Option<Vec<u8>>,
-        error: Option<ExecutionErrorBin>,
-    },
-    Log {
-        session_id: String,
-        channel: u8,
-        message: String,
-    },
-    StreamCallback {
-        session_id: String,
-        callback_type: String,
-        payload: Vec<u8>,
-    },
-}
-
-impl RuntimeEvent {
-    pub fn session_id(&self) -> &str {
-        match self {
-            RuntimeEvent::BridgeCall { session_id, .. }
-            | RuntimeEvent::ExecutionResult { session_id, .. }
-            | RuntimeEvent::Log { session_id, .. }
-            | RuntimeEvent::StreamCallback { session_id, .. } => session_id,
-        }
-    }
-}
-
-impl TryFrom<BinaryFrame> for RuntimeCommand {
-    type Error = io::Error;
-
-    fn try_from(frame: BinaryFrame) -> Result<Self, Self::Error> {
-        match frame {
-            BinaryFrame::CreateSession {
-                session_id,
-                heap_limit_mb,
-                cpu_time_limit_ms,
-                wall_clock_limit_ms,
-            } => Ok(RuntimeCommand::CreateSession {
-                session_id,
-                heap_limit_mb: non_zero_option(heap_limit_mb),
-                cpu_time_limit_ms: non_zero_option(cpu_time_limit_ms),
-                wall_clock_limit_ms: non_zero_option(wall_clock_limit_ms),
-                warm_hint: None,
-            }),
-            BinaryFrame::DestroySession { session_id } => {
-                Ok(RuntimeCommand::DestroySession { session_id })
-            }
-            BinaryFrame::InjectGlobals {
-                session_id,
-                payload,
-            } => Ok(RuntimeCommand::SendToSession {
-                session_id,
-                message: SessionMessage::InjectGlobals { payload },
-            }),
-            BinaryFrame::Execute {
-                session_id,
-                mode,
-                file_path,
-                bridge_code,
-                post_restore_script,
-                userland_code,
-                high_resolution_time,
-                user_code,
-            } => {
-                if mode > 1 {
-                    return Err(io::Error::new(
-                        io::ErrorKind::InvalidInput,
-                        format!("unknown Execute mode: {mode}"),
-                    ));
-                }
-                Ok(RuntimeCommand::SendToSession {
-                    session_id,
-                    message: SessionMessage::Execute {
-                        mode,
-                        file_path,
-                        bridge_code,
-                        post_restore_script,
-                        userland_code,
-                        high_resolution_time,
-                        user_code,
-                        wasm_module_bytes: None,
-                    },
-                })
-            }
-            BinaryFrame::BridgeResponse {
-                session_id,
-                call_id,
-                status,
-                payload,
-            } => {
-                validate_bridge_response_status(status)?;
-                Ok(RuntimeCommand::SendToSession {
-                    session_id,
-                    message: SessionMessage::BridgeResponse(BridgeResponse {
-                        call_id,
-                        status,
-                        payload,
-                    }),
-                })
-            }
-            BinaryFrame::StreamEvent {
-                session_id,
-                event_type,
-                payload,
-            } => Ok(RuntimeCommand::SendToSession {
-                session_id,
-                message: SessionMessage::StreamEvent(StreamEvent {
-                    event_type,
-                    payload,
-                }),
-            }),
-            BinaryFrame::TerminateExecution { session_id } => Ok(RuntimeCommand::SendToSession {
-                session_id,
-                message: SessionMessage::TerminateExecution,
-            }),
-            BinaryFrame::WarmSnapshot {
-                bridge_code,
-                userland_code,
-            } => Ok(RuntimeCommand::WarmSnapshot {
-                bridge_code,
-                userland_code,
-            }),
-            BinaryFrame::Authenticate { .. } => Err(io::Error::new(
-                io::ErrorKind::InvalidInput,
-                "Authenticate is not supported by the embedded runtime",
-            )),
-            _ => Err(io::Error::new(
-                io::ErrorKind::InvalidInput,
-                "host-output frames cannot be sent into the embedded runtime",
-            )),
-        }
-    }
-}
-
-impl From<RuntimeEvent> for BinaryFrame {
-    fn from(event: RuntimeEvent) -> Self {
-        match event {
-            RuntimeEvent::BridgeCall {
-                session_id,
-                call_id,
-                method,
-                payload,
-            } => BinaryFrame::BridgeCall {
-                session_id,
-                call_id,
-                method,
-                payload,
-            },
-            RuntimeEvent::ExecutionResult {
-                session_id,
-                exit_code,
-                exports,
-                error,
-            } => BinaryFrame::ExecutionResult {
-                session_id,
-                exit_code,
-                exports,
-                error,
-            },
-            RuntimeEvent::Log {
-                session_id,
-                channel,
-                message,
-            } => BinaryFrame::Log {
-                session_id,
-                channel,
-                message,
-            },
-            RuntimeEvent::StreamCallback {
-                session_id,
-                callback_type,
-                payload,
-            } => BinaryFrame::StreamCallback {
-                session_id,
-                callback_type,
-                payload,
-            },
-        }
-    }
-}
-
-fn non_zero_option(value: u32) -> Option<u32> {
-    if value == 0 {
-        None
-    } else {
-        Some(value)
-    }
-}
-
-pub fn validate_bridge_response_status(status: u8) -> io::Result<()> {
-    if status <= 2 {
-        return Ok(());
-    }
-    Err(io::Error::new(
-        io::ErrorKind::InvalidInput,
-        format!("unknown BridgeResponse status: {status}"),
-    ))
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn rejects_unknown_execute_mode() {
-        let err = RuntimeCommand::try_from(BinaryFrame::Execute {
-            session_id: "s".into(),
-            mode: 2,
-            file_path: "/app/main.mjs".into(),
-            bridge_code: String::new(),
-            post_restore_script: String::new(),
-            userland_code: String::new(),
-            high_resolution_time: false,
-            user_code: String::new(),
-        })
-        .expect_err("unknown execute mode should be rejected");
-
-        assert_eq!(err.kind(), io::ErrorKind::InvalidInput);
-        assert!(err.to_string().contains("unknown Execute mode"));
-    }
-
-    #[test]
-    fn rejects_unknown_bridge_response_status() {
-        let err = RuntimeCommand::try_from(BinaryFrame::BridgeResponse {
-            session_id: "s".into(),
-            call_id: 1,
-            status: 3,
-            payload: Vec::new(),
-        })
-        .expect_err("unknown bridge response status should be rejected");
-
-        assert_eq!(err.kind(), io::ErrorKind::InvalidInput);
-        assert!(err.to_string().contains("unknown BridgeResponse status"));
-    }
-
-    #[test]
-    fn accepts_known_bridge_response_statuses() {
-        for status in 0..=2 {
-            let command = RuntimeCommand::try_from(BinaryFrame::BridgeResponse {
-                session_id: "s".into(),
-                call_id: 1,
-                status,
-                payload: Vec::new(),
-            })
-            .expect("known bridge response status should be accepted");
-
-            assert!(matches!(
-                command,
-                RuntimeCommand::SendToSession {
-                    message: SessionMessage::BridgeResponse(BridgeResponse { status: s, .. }),
-                    ..
-                } if s == status
-            ));
-        }
-    }
-}
diff --git a/crates/v8-runtime/src/session.rs b/crates/v8-runtime/src/session.rs
deleted file mode 100644
index 1219aee44..000000000
--- a/crates/v8-runtime/src/session.rs
+++ /dev/null
@@ -1,3193 +0,0 @@
-// Session management: create/destroy sessions with V8 isolates on dedicated threads
-
-#[cfg(not(test))]
-use std::collections::BTreeMap;
-use std::collections::{HashMap, HashSet, VecDeque};
-use std::sync::atomic::AtomicU64;
-use std::sync::{Arc, Condvar, Mutex, OnceLock};
-use std::thread;
-#[cfg(not(test))]
-use std::time::{Duration, Instant};
-
-use crossbeam_channel::{Receiver, Sender};
-#[cfg(not(test))]
-use secure_exec_bridge::queue_tracker::{warn_limit_exhausted, TrackedLimit};
-use secure_exec_bridge::{bridge_contract, BridgeCallConvention};
-
-use crate::execution;
-#[cfg(not(test))]
-use crate::host_call::{BridgeCallContext, ChannelRuntimeEventSender};
-use crate::host_call::{CallIdRouter, SharedCallIdCounter};
-use crate::ipc::ExecutionError;
-#[cfg(not(test))]
-use crate::ipc_binary::ExecutionErrorBin;
-use crate::runtime_protocol::{
-    BridgeResponse, RuntimeEvent, SessionMessage, StreamEvent, WarmSessionHint,
-};
-use crate::snapshot::{snapshot_cache_key, SnapshotCache, SnapshotCacheKey};
-#[cfg(not(test))]
-use crate::{bridge, isolate, snapshot};
-
-/// Commands sent to a session thread
-pub enum SessionCommand {
-    /// Shut down the session and destroy the isolate
-    Shutdown,
-    /// Forward a typed session message to the session thread for processing
-    Message(SessionMessage),
-    /// Install a direct module-source reader on the session thread. Carried as a
-    /// live object over the in-process command channel (NOT a serialized frame),
-    /// so subsequent module loads on this thread read source directly instead of
-    /// round-tripping the bridge. Sent just before an Execute message.
-    SetModuleReader(Box<dyn crate::execution::GuestModuleReader>),
-}
-
-#[cfg(not(test))]
-type SharedIsolateHandle = Arc<Mutex<Option<v8::IsolateHandle>>>;
-#[cfg(test)]
-type SharedIsolateHandle = Arc<Mutex<Option<()>>>;
-
-/// Sender for typed runtime events produced by session threads.
-pub type RuntimeEventSender = crossbeam_channel::Sender<RuntimeEventEnvelope>;
-
-#[derive(Debug, Clone, PartialEq)]
-pub struct RuntimeEventEnvelope {
-    pub output_generation: Option<u64>,
-    pub event: RuntimeEvent,
-}
-
-const LATE_TERMINATE_EXECUTION_ERROR_CODE: &str = "ERR_LATE_TERMINATE_EXECUTION";
-const LATE_STREAM_EVENT_ERROR_CODE: &str = "ERR_LATE_STREAM_EVENT";
-const LATE_BRIDGE_RESPONSE_ERROR_CODE: &str = "ERR_LATE_BRIDGE_RESPONSE";
-const DEFERRED_COMMAND_LIMIT_ERROR_CODE: &str = "ERR_SESSION_DEFERRED_COMMAND_LIMIT";
-const SESSION_COMMAND_CHANNEL_CAPACITY: usize = 256;
-const MAX_DEFERRED_SESSION_COMMANDS: usize = SESSION_COMMAND_CHANNEL_CAPACITY;
-const MAX_DEFERRED_SYNC_MESSAGES: usize = SESSION_COMMAND_CHANNEL_CAPACITY;
-
-#[derive(Clone, Debug, Eq, Hash, PartialEq)]
-struct WarmPoolKey {
-    snapshot_key_digest: SnapshotCacheKey,
-    heap_limit_mb: u32,
-}
-
-struct ParkedWorker {
-    assignment_tx: Sender<SessionAssignment>,
-    join_handle: thread::JoinHandle<()>,
-}
-
-#[derive(Default)]
-struct WarmWorkerPoolState {
-    workers: HashMap<WarmPoolKey, Vec<ParkedWorker>>,
-    refilling: HashSet<WarmPoolKey>,
-}
-
-#[derive(Default)]
-struct WarmWorkerPool {
-    state: Mutex<WarmWorkerPoolState>,
-}
-
-struct SessionAssignment {
-    heap_limit_mb: Option<u32>,
-    cpu_time_limit_ms: Option<u32>,
-    wall_clock_limit_ms: Option<u32>,
-    rx: Receiver<SessionCommand>,
-    slot_control: SlotControl,
-    max_concurrency: usize,
-    event_tx: RuntimeEventSender,
-    call_id_router: CallIdRouter,
-    shared_call_id: SharedCallIdCounter,
-    snapshot_cache: Arc<SnapshotCache>,
-    isolate_handle: SharedIsolateHandle,
-    execution_abort: SharedExecutionAbort,
-    session_id: String,
-    output_generation: Option<u64>,
-}
-
-#[cfg(not(test))]
-struct PrecreatedIsolate {
-    isolate: v8::OwnedIsolate,
-    context: v8::Global<v8::Context>,
-    bridge_code: String,
-    userland_code: String,
-}
-
-#[cfg(test)]
-struct PrecreatedIsolate;
-
-#[cfg(not(test))]
-#[derive(Default)]
-struct V8SessionPhaseStats {
-    calls: u64,
-    total_ns: u128,
-    max_ns: u128,
-}
-
-#[cfg(not(test))]
-static V8_SESSION_PHASES: OnceLock<Mutex<BTreeMap<String, V8SessionPhaseStats>>> = OnceLock::new();
-
-#[cfg(not(test))]
-fn v8_session_phases_enabled() -> bool {
-    std::env::var("AGENTOS_V8_SESSION_PHASES").as_deref() == Ok("1")
-}
-
-#[cfg(not(test))]
-fn record_v8_session_phase(stage: &str, elapsed: Duration) {
-    if !v8_session_phases_enabled() {
-        return;
-    }
-    let phases = V8_SESSION_PHASES.get_or_init(|| Mutex::new(BTreeMap::new()));
-    let Ok(mut phases) = phases.lock() else {
-        return;
-    };
-    let stats = phases.entry(stage.to_string()).or_default();
-    stats.calls += 1;
-    let elapsed_ns = elapsed.as_nanos();
-    stats.total_ns += elapsed_ns;
-    stats.max_ns = stats.max_ns.max(elapsed_ns);
-
-    let Some(path) = std::env::var_os("AGENTOS_V8_SESSION_PHASES_FILE") else {
-        return;
-    };
-    let mut output = String::new();
-    for (stage, stats) in phases.iter() {
-        let total_us = stats.total_ns / 1_000;
-        let avg_us = if stats.calls == 0 {
-            0
-        } else {
-            total_us / u128::from(stats.calls)
-        };
-        let max_us = stats.max_ns / 1_000;
-        output.push_str(&format!(
-            "stage={stage} calls={} total_us={total_us} avg_us={avg_us} max_us={max_us}\n",
-            stats.calls
-        ));
-    }
-    let _ = std::fs::write(path, output);
-}
-
-#[cfg(not(test))]
-fn record_warm_worker_hit() {
-    record_v8_session_phase("warm_worker_hit", Duration::ZERO);
-}
-
-#[cfg(test)]
-fn record_warm_worker_hit() {}
-
-#[cfg(not(test))]
-fn record_warm_worker_miss() {
-    record_v8_session_phase("warm_worker_miss", Duration::ZERO);
-}
-
-#[cfg(test)]
-fn record_warm_worker_miss() {}
-
-fn warm_worker_capacity_per_key() -> usize {
-    std::env::var("AGENTOS_V8_WARM_ISOLATES")
-        .ok()
-        .and_then(|value| value.parse::<usize>().ok())
-        .unwrap_or(2)
-}
-
-fn effective_heap_limit_mb(heap_limit_mb: Option<u32>) -> u32 {
-    heap_limit_mb.unwrap_or(crate::isolate::DEFAULT_HEAP_LIMIT_MB)
-}
-
-fn warm_pool_key(
-    bridge_code: &str,
-    userland_code: &str,
-    heap_limit_mb: Option<u32>,
-) -> WarmPoolKey {
-    WarmPoolKey {
-        snapshot_key_digest: snapshot_cache_key(
-            bridge_code,
-            (!userland_code.is_empty()).then_some(userland_code),
-        ),
-        heap_limit_mb: effective_heap_limit_mb(heap_limit_mb),
-    }
-}
-
-fn warm_key_prefix(key: &WarmPoolKey) -> String {
-    key.snapshot_key_digest[..4]
-        .iter()
-        .map(|byte| format!("{byte:02x}"))
-        .collect()
-}
-
-impl WarmWorkerPool {
-    fn claim(&self, key: &WarmPoolKey) -> Option<ParkedWorker> {
-        let mut state = self.state.lock().expect("warm worker pool lock poisoned");
-        state.workers.get_mut(key).and_then(Vec::pop)
-    }
-
-    fn shutdown_handles(&self) -> Vec<thread::JoinHandle<()>> {
-        let mut state = self.state.lock().expect("warm worker pool lock poisoned");
-        state.refilling.clear();
-        state
-            .workers
-            .drain()
-            .flat_map(|(_, workers)| workers)
-            .map(|worker| {
-                drop(worker.assignment_tx);
-                worker.join_handle
-            })
-            .collect()
-    }
-
-    fn ensure_count(
-        self: &Arc<Self>,
-        snapshot_cache: Arc<SnapshotCache>,
-        slot_control: SlotControl,
-        bridge_code: String,
-        userland_code: String,
-        heap_limit_mb: Option<u32>,
-        requested_count: usize,
-    ) {
-        let capacity = warm_worker_capacity_per_key();
-        if capacity == 0 || requested_count == 0 {
-            return;
-        }
-
-        let target_count = requested_count.min(capacity);
-        let key = warm_pool_key(&bridge_code, &userland_code, heap_limit_mb);
-        {
-            let mut state = self.state.lock().expect("warm worker pool lock poisoned");
-            let current = state.workers.get(&key).map_or(0, Vec::len);
-            if current >= target_count || state.refilling.contains(&key) {
-                return;
-            }
-            state.refilling.insert(key.clone());
-        }
-
-        let pool = Arc::clone(self);
-        let spawn_key = key.clone();
-        let _ = thread::Builder::new()
-            .name(String::from("secure-exec-v8-warm-refill"))
-            .spawn(move || {
-                pool.refill_until(
-                    snapshot_cache,
-                    slot_control,
-                    spawn_key,
-                    bridge_code,
-                    userland_code,
-                    heap_limit_mb,
-                    target_count,
-                );
-            })
-            .map_err(|error| {
-                eprintln!("secure-exec-v8-runtime: warm worker refill spawn failed: {error}");
-                self.state
-                    .lock()
-                    .expect("warm worker pool lock poisoned")
-                    .refilling
-                    .remove(&key);
-            });
-    }
-
-    // Internal pool-refill plumbing; args mirror the parked-worker construction.
-    #[allow(clippy::too_many_arguments)]
-    fn refill_until(
-        &self,
-        snapshot_cache: Arc<SnapshotCache>,
-        slot_control: SlotControl,
-        key: WarmPoolKey,
-        bridge_code: String,
-        userland_code: String,
-        heap_limit_mb: Option<u32>,
-        target_count: usize,
-    ) {
-        loop {
-            let capacity = warm_worker_capacity_per_key();
-            if capacity == 0 {
-                break;
-            }
-            let desired = target_count.min(capacity);
-            {
-                let state = self.state.lock().expect("warm worker pool lock poisoned");
-                if state.workers.get(&key).map_or(0, Vec::len) >= desired {
-                    break;
-                }
-            }
-
-            let Some(worker) = spawn_warm_worker(
-                Arc::clone(&snapshot_cache),
-                Arc::clone(&slot_control),
-                key.clone(),
-                bridge_code.clone(),
-                userland_code.clone(),
-                heap_limit_mb,
-            ) else {
-                break;
-            };
-
-            let mut state = self.state.lock().expect("warm worker pool lock poisoned");
-            let workers = state.workers.entry(key.clone()).or_default();
-            if workers.len() >= desired {
-                drop(worker.assignment_tx);
-                let _ = worker.join_handle.join();
-                break;
-            }
-            workers.push(worker);
-            eprintln!(
-                "secure-exec-v8-runtime: warm worker refilled key={} heap={} pool_size={}",
-                warm_key_prefix(&key),
-                key.heap_limit_mb,
-                workers.len()
-            );
-        }
-
-        self.state
-            .lock()
-            .expect("warm worker pool lock poisoned")
-            .refilling
-            .remove(&key);
-    }
-}
-
-#[cfg(not(test))]
-fn spawn_warm_worker(
-    snapshot_cache: Arc<SnapshotCache>,
-    slot_control: SlotControl,
-    key: WarmPoolKey,
-    bridge_code: String,
-    userland_code: String,
-    heap_limit_mb: Option<u32>,
-) -> Option<ParkedWorker> {
-    let (assignment_tx, assignment_rx) = crossbeam_channel::bounded::<SessionAssignment>(1);
-    let (ready_tx, ready_rx) = crossbeam_channel::bounded::<Result<(), String>>(1);
-    let worker_bridge_code = bridge_code.clone();
-    let worker_userland_code = userland_code.clone();
-    let join_handle = match thread::Builder::new()
-        .name(String::from("secure-exec-v8-warm-worker"))
-        .spawn(move || {
-            let precreated = precreate_warm_isolate(
-                snapshot_cache,
-                slot_control,
-                worker_bridge_code,
-                worker_userland_code,
-                heap_limit_mb,
-            );
-            match precreated {
-                Ok(precreated) => {
-                    let _ = ready_tx.send(Ok(()));
-                    if let Ok(assignment) = assignment_rx.recv() {
-                        session_thread(assignment, Some(precreated));
-                    }
-                }
-                Err(error) => {
-                    let _ = ready_tx.send(Err(error));
-                }
-            }
-        }) {
-        Ok(handle) => handle,
-        Err(error) => {
-            eprintln!("secure-exec-v8-runtime: warm worker spawn failed: {error}");
-            return None;
-        }
-    };
-
-    match ready_rx.recv() {
-        Ok(Ok(())) => Some(ParkedWorker {
-            assignment_tx,
-            join_handle,
-        }),
-        Ok(Err(error)) => {
-            eprintln!(
-                "secure-exec-v8-runtime: warm worker refill failed key={} heap={}: {error}",
-                warm_key_prefix(&key),
-                key.heap_limit_mb
-            );
-            let _ = join_handle.join();
-            None
-        }
-        Err(error) => {
-            eprintln!(
-                "secure-exec-v8-runtime: warm worker refill failed key={} heap={}: {error}",
-                warm_key_prefix(&key),
-                key.heap_limit_mb
-            );
-            let _ = join_handle.join();
-            None
-        }
-    }
-}
-
-#[cfg(test)]
-fn spawn_warm_worker(
-    _snapshot_cache: Arc<SnapshotCache>,
-    _slot_control: SlotControl,
-    _key: WarmPoolKey,
-    _bridge_code: String,
-    _userland_code: String,
-    _heap_limit_mb: Option<u32>,
-) -> Option<ParkedWorker> {
-    None
-}
-
-#[cfg(not(test))]
-fn precreate_warm_isolate(
-    snapshot_cache: Arc<SnapshotCache>,
-    slot_control: SlotControl,
-    bridge_code: String,
-    userland_code: String,
-    heap_limit_mb: Option<u32>,
-) -> Result<PrecreatedIsolate, String> {
-    isolate::init_v8_platform();
-    let snapshot_blob = snapshot_cache.get_or_create_with_userland(
-        &bridge_code,
-        (!userland_code.is_empty()).then_some(userland_code.as_str()),
-    )?;
-    let snapshot_blob = (*snapshot_blob).clone();
-    let _idle_slots = lock_idle_slots(&slot_control);
-    let mut isolate = snapshot::create_isolate_from_snapshot(snapshot_blob, heap_limit_mb);
-    isolate.set_host_import_module_dynamically_callback(execution::dynamic_import_callback);
-    isolate.set_host_initialize_import_meta_object_callback(execution::import_meta_object_callback);
-    let context = isolate::create_context(&mut isolate);
-    Ok(PrecreatedIsolate {
-        isolate,
-        context,
-        bridge_code,
-        userland_code,
-    })
-}
-
-#[cfg(not(test))]
-fn lock_idle_slots(slot_control: &SlotControl) -> std::sync::MutexGuard<'_, usize> {
-    let (lock, cvar) = &**slot_control;
-    let mut count = lock.lock().unwrap();
-    while *count != 0 {
-        count = cvar.wait(count).unwrap();
-    }
-    count
-}
-
-/// Normalize an opt-in CPU-time budget: `Some(0)` means "disabled" and folds to
-/// `None` so the CPU-budget watchdog is NOT armed. The runtime layer does not
-/// invent a default here: secure-exec sidecar VM executions pass the typed
-/// `limits.jsRuntime.cpuTimeLimitMs` default, while lower-level callers can pass
-/// `None`/`0` deliberately.
-fn normalize_cpu_time_limit_ms(cpu_time_limit_ms: Option<u32>) -> Option<u32> {
-    cpu_time_limit_ms.filter(|budget_ms| *budget_ms > 0)
-}
-
-/// Normalize an opt-in WALL-CLOCK backstop: `Some(0)` means "disabled" and folds
-/// to `None` so the wall-clock `TimeoutGuard` is NOT armed. There is no default —
-/// when the caller passes `None`/`0`, the guest runs with no wall-clock limit
-/// (opt-in by design, so long-lived ACP adapters are never killed by a default).
-/// This is INDEPENDENT of the CPU-time budget: setting one does not arm the other.
-fn normalize_wall_clock_limit_ms(wall_clock_limit_ms: Option<u32>) -> Option<u32> {
-    wall_clock_limit_ms.filter(|limit_ms| *limit_ms > 0)
-}
-
-/// Internal entry for a running session
-struct SessionEntry {
-    /// Output receiver generation current when this session was created.
-    output_generation: Option<u64>,
-    /// Channel to send commands to the session thread
-    tx: Sender<SessionCommand>,
-    /// Thread join handle
-    join_handle: Option<thread::JoinHandle<()>>,
-    /// Thread-safe V8 isolate handle for out-of-band termination.
-    #[cfg_attr(test, allow(dead_code))]
-    isolate_handle: SharedIsolateHandle,
-    /// Current execution abort handle used to wake sync bridge waits.
-    execution_abort: SharedExecutionAbort,
-}
-
-/// Deferred shutdown work for a session that has already been removed from
-/// the manager. `finish()` joins the session thread and clears any call
-/// routes the thread registered while shutting down. Callers must release
-/// the SessionManager lock before calling `finish()`. Joining under the lock
-/// deadlocks: the dispatch thread needs the lock to drain the event channel,
-/// and the joined thread can be parked on a full event channel send.
-pub struct SessionShutdown {
-    session_id: String,
-    join_handle: Option<thread::JoinHandle<()>>,
-    call_id_router: CallIdRouter,
-}
-
-impl SessionShutdown {
-    pub fn finish(mut self) {
-        if let Some(handle) = self.join_handle.take() {
-            let _ = handle.join();
-        }
-        self.call_id_router
-            .lock()
-            .expect("call_id router lock poisoned")
-            .retain(|_, routed_session_id| routed_session_id != &self.session_id);
-    }
-}
-
-/// Concurrency slot tracker shared across session threads
-type SlotControl = Arc<(Mutex<usize>, Condvar)>;
-
-/// Shared deferred message queue for non-BridgeResponse frames consumed by
-/// sync bridge calls. The event loop drains these before blocking on the channel.
-pub(crate) type DeferredQueue = Arc<Mutex<VecDeque<SessionMessage>>>;
-
-#[derive(Clone, Copy, Debug, Eq, PartialEq)]
-pub(crate) enum ExecutionAbortReason {
-    /// Caller explicitly terminated the execution (e.g. session destroy).
-    Terminated,
-    /// The opt-in WALL-CLOCK backstop (`TimeoutGuard`) elapsed. Counts elapsed
-    /// real time INCLUDING idle/await, so it can cap a guest that blocks/awaits
-    /// indefinitely. Armed only when `limits.jsRuntime.wallClockLimitMs` is set;
-    /// independent of the CPU-time budget.
-    #[cfg_attr(test, allow(dead_code))]
-    WallClockTimedOut,
-    /// The TRUE CPU-TIME budget (`CpuBudgetGuard`) was exhausted by active JS CPU.
-    #[cfg_attr(test, allow(dead_code))]
-    CpuBudgetExceeded,
-}
-
-struct ExecutionAbortState {
-    sender: Option<crossbeam_channel::Sender<()>>,
-    reason: Option<ExecutionAbortReason>,
-}
-
-pub(crate) struct SharedExecutionAbort(Arc<Mutex<Option<ExecutionAbortState>>>);
-
-impl Clone for SharedExecutionAbort {
-    fn clone(&self) -> Self {
-        Self(Arc::clone(&self.0))
-    }
-}
-
-/// Create a new empty deferred queue.
-pub(crate) fn new_deferred_queue() -> DeferredQueue {
-    Arc::new(Mutex::new(VecDeque::new()))
-}
-
-pub(crate) fn new_execution_abort() -> SharedExecutionAbort {
-    SharedExecutionAbort(Arc::new(Mutex::new(None)))
-}
-
-pub(crate) struct ActiveExecutionAbort {
-    shared: SharedExecutionAbort,
-}
-
-impl ActiveExecutionAbort {
-    pub(crate) fn arm(shared: &SharedExecutionAbort) -> (Self, crossbeam_channel::Receiver<()>) {
-        let (tx, rx) = crossbeam_channel::bounded::<()>(0);
-        let mut guard = shared.0.lock().unwrap();
-        *guard = Some(ExecutionAbortState {
-            sender: Some(tx),
-            reason: None,
-        });
-        (
-            Self {
-                shared: shared.clone(),
-            },
-            rx,
-        )
-    }
-}
-
-impl Drop for ActiveExecutionAbort {
-    fn drop(&mut self) {
-        *self.shared.0.lock().unwrap() = None;
-    }
-}
-
-pub(crate) fn signal_execution_abort(shared: &SharedExecutionAbort, reason: ExecutionAbortReason) {
-    if let Some(state) = shared.0.lock().unwrap().as_mut() {
-        state.reason.get_or_insert(reason);
-        state.sender.take();
-    }
-}
-
-#[cfg(not(test))]
-fn execution_abort_reason(shared: &SharedExecutionAbort) -> Option<ExecutionAbortReason> {
-    shared
-        .0
-        .lock()
-        .unwrap()
-        .as_ref()
-        .and_then(|state| state.reason)
-}
-
-/// Manages V8 sessions with concurrency limiting.
-/// Each session runs on a dedicated OS thread with its own V8 isolate.
-pub struct SessionManager {
-    sessions: HashMap<String, SessionEntry>,
-    max_concurrency: usize,
-    slot_control: SlotControl,
-    /// Typed runtime event sender shared across session threads.
-    event_tx: RuntimeEventSender,
-    /// Call_id → session_id routing table for BridgeResponse dispatch
-    call_id_router: CallIdRouter,
-    /// Shared call_id counter — all sessions use this to generate globally unique
-    /// call_ids, preventing collisions in the call_id_router
-    shared_call_id: SharedCallIdCounter,
-    /// Shared snapshot cache for fast isolate creation from pre-compiled bridge code
-    snapshot_cache: Arc<SnapshotCache>,
-    /// Ready-to-claim isolate workers keyed by snapshot digest and heap cap.
-    warm_pool: Arc<WarmWorkerPool>,
-}
-
-impl SessionManager {
-    pub fn new(
-        max_concurrency: usize,
-        event_tx: RuntimeEventSender,
-        call_id_router: CallIdRouter,
-        snapshot_cache: Arc<SnapshotCache>,
-    ) -> Self {
-        SessionManager {
-            sessions: HashMap::new(),
-            max_concurrency,
-            slot_control: Arc::new((Mutex::new(0), Condvar::new())),
-            event_tx,
-            call_id_router,
-            shared_call_id: Arc::new(AtomicU64::new(1)),
-            snapshot_cache,
-            warm_pool: Arc::new(WarmWorkerPool::default()),
-        }
-    }
-
-    /// Get the snapshot cache for pre-warming from WarmSnapshot messages.
-    #[allow(dead_code)]
-    pub fn snapshot_cache(&self) -> &Arc<SnapshotCache> {
-        &self.snapshot_cache
-    }
-
-    pub fn pre_warm_workers(
-        &self,
-        bridge_code: String,
-        userland_code: String,
-        heap_limit_mb: Option<u32>,
-        count: usize,
-    ) {
-        self.warm_pool.ensure_count(
-            Arc::clone(&self.snapshot_cache),
-            Arc::clone(&self.slot_control),
-            bridge_code,
-            userland_code,
-            heap_limit_mb,
-            count,
-        );
-    }
-
-    /// Create a new session.
-    /// Spawns a dedicated thread with a V8 isolate. If max concurrency is
-    /// reached, the session thread will block until a slot becomes available.
-    pub fn create_session(
-        &mut self,
-        session_id: String,
-        heap_limit_mb: Option<u32>,
-        cpu_time_limit_ms: Option<u32>,
-        wall_clock_limit_ms: Option<u32>,
-    ) -> Result<(), String> {
-        self.create_session_with_output_generation(
-            session_id,
-            heap_limit_mb,
-            cpu_time_limit_ms,
-            wall_clock_limit_ms,
-            None,
-            None,
-        )
-    }
-
-    pub fn create_session_with_output_generation(
-        &mut self,
-        session_id: String,
-        heap_limit_mb: Option<u32>,
-        cpu_time_limit_ms: Option<u32>,
-        wall_clock_limit_ms: Option<u32>,
-        output_generation: Option<u64>,
-        warm_hint: Option<WarmSessionHint>,
-    ) -> Result<(), String> {
-        if self.sessions.contains_key(&session_id) {
-            return Err(format!("session {} already exists", session_id));
-        }
-
-        let cpu_time_limit_ms = normalize_cpu_time_limit_ms(cpu_time_limit_ms);
-        let wall_clock_limit_ms = normalize_wall_clock_limit_ms(wall_clock_limit_ms);
-        let (tx, rx) = crossbeam_channel::bounded(SESSION_COMMAND_CHANNEL_CAPACITY);
-        let isolate_handle = Arc::new(Mutex::new(None));
-        let execution_abort = new_execution_abort();
-        let assignment = SessionAssignment {
-            heap_limit_mb,
-            cpu_time_limit_ms,
-            wall_clock_limit_ms,
-            rx,
-            slot_control: Arc::clone(&self.slot_control),
-            max_concurrency: self.max_concurrency,
-            event_tx: self.event_tx.clone(),
-            call_id_router: Arc::clone(&self.call_id_router),
-            shared_call_id: Arc::clone(&self.shared_call_id),
-            snapshot_cache: Arc::clone(&self.snapshot_cache),
-            isolate_handle: Arc::clone(&isolate_handle),
-            execution_abort: execution_abort.clone(),
-            session_id: session_id.clone(),
-            output_generation,
-        };
-
-        let join_handle = match self.claim_warm_worker(warm_hint.as_ref(), assignment) {
-            Ok((join_handle, true)) => {
-                if let Some(hint) = warm_hint {
-                    self.warm_pool.ensure_count(
-                        Arc::clone(&self.snapshot_cache),
-                        Arc::clone(&self.slot_control),
-                        hint.bridge_code,
-                        hint.userland_code,
-                        hint.heap_limit_mb,
-                        warm_worker_capacity_per_key(),
-                    );
-                }
-                join_handle
-            }
-            Ok((join_handle, false)) => join_handle,
-            Err(assignment) => spawn_session_thread(assignment)
-                .map_err(|e| format!("failed to spawn session thread: {}", e))?,
-        };
-
-        self.sessions.insert(
-            session_id,
-            SessionEntry {
-                output_generation,
-                tx,
-                join_handle: Some(join_handle),
-                isolate_handle,
-                execution_abort,
-            },
-        );
-
-        Ok(())
-    }
-
-    // The Err variant intentionally carries the whole SessionAssignment back to
-    // the caller for the fallback spawn path — it is moved, not copied.
-    #[allow(clippy::result_large_err)]
-    fn claim_warm_worker(
-        &self,
-        warm_hint: Option<&WarmSessionHint>,
-        assignment: SessionAssignment,
-    ) -> Result<(thread::JoinHandle<()>, bool), SessionAssignment> {
-        let Some(hint) = warm_hint else {
-            return Err(assignment);
-        };
-        if warm_worker_capacity_per_key() == 0 {
-            record_warm_worker_miss();
-            return Err(assignment);
-        }
-
-        let key = warm_pool_key(&hint.bridge_code, &hint.userland_code, hint.heap_limit_mb);
-        let Some(worker) = self.warm_pool.claim(&key) else {
-            record_warm_worker_miss();
-            eprintln!(
-                "secure-exec-v8-runtime: warm worker pool-empty key={} heap={}",
-                warm_key_prefix(&key),
-                key.heap_limit_mb
-            );
-            return Err(assignment);
-        };
-
-        match worker.assignment_tx.send(assignment) {
-            Ok(()) => {
-                record_warm_worker_hit();
-                eprintln!(
-                    "secure-exec-v8-runtime: warm worker claimed key={} heap={}",
-                    warm_key_prefix(&key),
-                    key.heap_limit_mb
-                );
-                Ok((worker.join_handle, true))
-            }
-            Err(error) => {
-                record_warm_worker_miss();
-                let _ = worker.join_handle.join();
-                Err(error.0)
-            }
-        }
-    }
-
-    pub fn destroy_session_if_output_generation(
-        &mut self,
-        session_id: &str,
-        output_generation: u64,
-    ) -> Result<bool, String> {
-        match self.begin_destroy_session_if_output_generation(session_id, output_generation)? {
-            Some(shutdown) => {
-                shutdown.finish();
-                Ok(true)
-            }
-            None => Ok(false),
-        }
-    }
-
-    pub fn begin_destroy_session_if_output_generation(
-        &mut self,
-        session_id: &str,
-        output_generation: u64,
-    ) -> Result<Option<SessionShutdown>, String> {
-        if self
-            .sessions
-            .get(session_id)
-            .is_none_or(|entry| entry.output_generation != Some(output_generation))
-        {
-            return Ok(None);
-        }
-
-        self.begin_destroy_session(session_id).map(Some)
-    }
-
-    pub fn detach_session_if_output_generation(
-        &mut self,
-        session_id: &str,
-        output_generation: u64,
-    ) -> Result<bool, String> {
-        if self
-            .sessions
-            .get(session_id)
-            .is_none_or(|entry| entry.output_generation != Some(output_generation))
-        {
-            return Ok(false);
-        }
-
-        self.detach_session(session_id)?;
-        Ok(true)
-    }
-
-    fn detach_session(&mut self, session_id: &str) -> Result<(), String> {
-        let entry = self
-            .sessions
-            .get(session_id)
-            .ok_or_else(|| format!("session {} does not exist", session_id))?;
-
-        #[cfg(not(test))]
-        if let Some(handle) = entry
-            .isolate_handle
-            .lock()
-            .ok()
-            .and_then(|guard| guard.as_ref().cloned())
-        {
-            handle.terminate_execution();
-        }
-        signal_execution_abort(&entry.execution_abort, ExecutionAbortReason::Terminated);
-        self.clear_call_routes_for_session(session_id);
-        let mut entry = self.sessions.remove(session_id).unwrap();
-        let _ = entry.tx.try_send(SessionCommand::Shutdown);
-        drop(entry.tx);
-        let _ = entry.join_handle.take();
-        Ok(())
-    }
-
-    /// Destroy a session inline. Joins the session thread before returning, so
-    /// this must not be called while a shared lock on the manager is held. Lock
-    /// holders use `begin_destroy_session` and call `finish()` after unlocking.
-    pub fn destroy_session(&mut self, session_id: &str) -> Result<(), String> {
-        self.begin_destroy_session(session_id)?.finish();
-        Ok(())
-    }
-
-    /// First phase of destroying a session: terminate execution, signal abort,
-    /// send shutdown, clear call routes, and remove the entry. The returned
-    /// shutdown joins the session thread and must be finished after the
-    /// SessionManager lock is released.
-    pub fn begin_destroy_session(&mut self, session_id: &str) -> Result<SessionShutdown, String> {
-        if !self.sessions.contains_key(session_id) {
-            return Err(format!("session {} does not exist", session_id));
-        }
-
-        self.clear_call_routes_for_session(session_id);
-        let mut entry = self
-            .sessions
-            .remove(session_id)
-            .expect("checked session exists");
-
-        #[cfg(not(test))]
-        if let Some(handle) = entry
-            .isolate_handle
-            .lock()
-            .ok()
-            .and_then(|guard| guard.as_ref().cloned())
-        {
-            handle.terminate_execution();
-        }
-        signal_execution_abort(&entry.execution_abort, ExecutionAbortReason::Terminated);
-        // Send shutdown, then drop the entry (and with it the sender) so the
-        // session thread's rx.recv() returns Err if Shutdown was consumed by
-        // an inner loop.
-        let _ = entry.tx.try_send(SessionCommand::Shutdown);
-        let join_handle = entry.join_handle.take();
-        drop(entry);
-        Ok(SessionShutdown {
-            session_id: session_id.to_owned(),
-            join_handle,
-            call_id_router: Arc::clone(&self.call_id_router),
-        })
-    }
-
-    pub(crate) fn take_session_shutdown_handles(&mut self) -> Vec<thread::JoinHandle<()>> {
-        self.call_id_router
-            .lock()
-            .expect("call_id router lock poisoned")
-            .clear();
-
-        let mut handles: Vec<_> = self
-            .sessions
-            .drain()
-            .filter_map(|(_, mut entry)| {
-                #[cfg(not(test))]
-                if let Some(handle) = entry
-                    .isolate_handle
-                    .lock()
-                    .ok()
-                    .and_then(|guard| guard.as_ref().cloned())
-                {
-                    handle.terminate_execution();
-                }
-                signal_execution_abort(&entry.execution_abort, ExecutionAbortReason::Terminated);
-                let _ = entry.tx.try_send(SessionCommand::Shutdown);
-                drop(entry.tx);
-                entry.join_handle.take()
-            })
-            .collect();
-        handles.extend(self.warm_pool.shutdown_handles());
-        handles
-    }
-
-    pub(crate) fn clear_call_route(&self, call_id: u64) {
-        self.call_id_router
-            .lock()
-            .expect("call_id router lock poisoned")
-            .remove(&call_id);
-    }
-
-    fn clear_call_routes_for_session(&self, session_id: &str) {
-        self.call_id_router
-            .lock()
-            .expect("call_id router lock poisoned")
-            .retain(|_, routed_session_id| routed_session_id != session_id);
-    }
-
-    /// Resolve a session's command sender and apply message side effects that
-    /// must happen under the manager lock (isolate termination, abort signal).
-    /// The caller sends on the returned channel after releasing the lock so a
-    /// full command channel cannot block the manager mutex.
-    pub fn session_command_sender(
-        &self,
-        session_id: &str,
-        msg: &SessionMessage,
-    ) -> Result<Sender<SessionCommand>, String> {
-        let entry = self
-            .sessions
-            .get(session_id)
-            .ok_or_else(|| format!("session {} does not exist", session_id))?;
-
-        #[cfg(not(test))]
-        if matches!(msg, SessionMessage::TerminateExecution) {
-            if let Some(handle) = entry
-                .isolate_handle
-                .lock()
-                .ok()
-                .and_then(|guard| guard.as_ref().cloned())
-            {
-                handle.terminate_execution();
-            }
-        }
-        if matches!(msg, SessionMessage::TerminateExecution) {
-            signal_execution_abort(&entry.execution_abort, ExecutionAbortReason::Terminated);
-        }
-
-        Ok(entry.tx.clone())
-    }
-
-    /// Get a session's command sender without a message (used for control commands
-    /// like SetModuleReader that aren't a SessionMessage). Dispatch-thread only.
-    pub fn session_sender(&self, session_id: &str) -> Result<Sender<SessionCommand>, String> {
-        self.sessions
-            .get(session_id)
-            .map(|entry| entry.tx.clone())
-            .ok_or_else(|| format!("session {} does not exist", session_id))
-    }
-
-    /// Send a message to a session. Blocks on the session command channel, so
-    /// this must not be called while a shared lock on the manager is held.
-    pub fn send_to_session(&self, session_id: &str, msg: SessionMessage) -> Result<(), String> {
-        let sender = self.session_command_sender(session_id, &msg)?;
-        sender
-            .send(SessionCommand::Message(msg))
-            .map_err(|e| format!("session thread disconnected: {}", e))
-    }
-
-    /// Destroy a set of sessions inline, ignoring sessions that were already
-    /// removed. Joins session threads, so this must not be called while a
-    /// shared lock on the manager is held.
-    pub fn destroy_sessions<I>(&mut self, session_ids: I)
-    where
-        I: IntoIterator<Item = String>,
-    {
-        for shutdown in self.begin_destroy_sessions(session_ids) {
-            shutdown.finish();
-        }
-    }
-
-    /// Begin destroying a set of sessions, ignoring sessions that were already
-    /// removed. Finish each returned shutdown after releasing the manager lock.
-    pub fn begin_destroy_sessions<I>(&mut self, session_ids: I) -> Vec<SessionShutdown>
-    where
-        I: IntoIterator<Item = String>,
-    {
-        session_ids
-            .into_iter()
-            .filter_map(|sid| self.begin_destroy_session(&sid).ok())
-            .collect()
-    }
-
-    /// Number of registered sessions (including those waiting for a slot).
-    #[allow(dead_code)]
-    pub fn session_count(&self) -> usize {
-        self.sessions.len()
-    }
-
-    /// Return all session IDs.
-    #[allow(dead_code)]
-    pub fn all_sessions(&self) -> Vec<String> {
-        self.sessions.keys().cloned().collect()
-    }
-
-    /// Number of sessions that have acquired a concurrency slot.
-    #[allow(dead_code)]
-    pub fn active_slot_count(&self) -> usize {
-        let (lock, _) = &*self.slot_control;
-        *lock.lock().unwrap()
-    }
-
-    /// Get the call_id routing table for BridgeResponse dispatch.
-    pub fn call_id_router(&self) -> &CallIdRouter {
-        &self.call_id_router
-    }
-}
-
-/// Send a typed runtime event without re-serializing it on the session thread.
-#[cfg(not(test))]
-fn send_event_with_generation(
-    event_tx: &RuntimeEventSender,
-    output_generation: Option<u64>,
-    event: RuntimeEvent,
-) {
-    if let Err(error) = event_tx.send(RuntimeEventEnvelope {
-        output_generation,
-        event,
-    }) {
-        eprintln!("failed to send runtime event: {error}");
-    }
-}
-
-fn send_late_message_warning(
-    event_tx: &RuntimeEventSender,
-    session_id: &str,
-    output_generation: Option<u64>,
-    error_code: &str,
-    detail: String,
-) {
-    let warning = RuntimeEvent::Log {
-        session_id: session_id.to_string(),
-        channel: 1,
-        message: format!("[{error_code}] {detail}"),
-    };
-    if let Err(error) = event_tx.send(RuntimeEventEnvelope {
-        output_generation,
-        event: warning,
-    }) {
-        eprintln!("failed to send late-session warning: {error}");
-    }
-}
-
-fn handle_late_session_message(
-    event_tx: &RuntimeEventSender,
-    session_id: &str,
-    output_generation: Option<u64>,
-    message: SessionMessage,
-) {
-    match message {
-        SessionMessage::BridgeResponse(BridgeResponse {
-            call_id,
-            status,
-            payload,
-        }) => send_late_message_warning(
-            event_tx,
-            session_id,
-            output_generation,
-            LATE_BRIDGE_RESPONSE_ERROR_CODE,
-            format!(
-                "dropping BridgeResponse after execution completed (call_id={call_id}, status={status}, payload_len={})",
-                payload.len()
-            ),
-        ),
-        SessionMessage::StreamEvent(StreamEvent {
-            event_type,
-            payload,
-        }) => {
-            // Timer and socket-readiness events are wake hints, not data; both
-            // race execution completion by design (edge-triggered readiness can
-            // fire as the guest finishes) and carry nothing to lose, so drop
-            // them silently instead of warning.
-            if event_type == "timer" || event_type == "net_socket" {
-                return;
-            }
-            send_late_message_warning(
-                event_tx,
-                session_id,
-                output_generation,
-                LATE_STREAM_EVENT_ERROR_CODE,
-                format!(
-                    "dropping StreamEvent after execution completed (event_type={event_type}, payload_len={})",
-                    payload.len()
-                ),
-            )
-        }
-        SessionMessage::TerminateExecution => send_late_message_warning(
-            event_tx,
-            session_id,
-            output_generation,
-            LATE_TERMINATE_EXECUTION_ERROR_CODE,
-            String::from("dropping TerminateExecution after execution completed"),
-        ),
-        SessionMessage::InjectGlobals { .. } | SessionMessage::Execute { .. } => {}
-    }
-}
-
-fn defer_session_command_before_slot(
-    deferred_commands: &mut VecDeque<SessionCommand>,
-    event_tx: &RuntimeEventSender,
-    session_id: &str,
-    output_generation: Option<u64>,
-    command: SessionCommand,
-) -> bool {
-    if deferred_commands.len() < MAX_DEFERRED_SESSION_COMMANDS {
-        deferred_commands.push_back(command);
-        return true;
-    }
-
-    send_late_message_warning(
-        event_tx,
-        session_id,
-        output_generation,
-        DEFERRED_COMMAND_LIMIT_ERROR_CODE,
-        format!(
-            "dropping queued session before slot acquisition because deferred command queue exceeded limit of {MAX_DEFERRED_SESSION_COMMANDS}"
-        ),
-    );
-    false
-}
-
-#[cfg(not(test))]
-fn install_wasm_module_bytes_global<'s>(scope: &mut v8::HandleScope<'s>, bytes: &[u8]) -> bool {
-    let global = scope.get_current_context().global(scope);
-    let Some(name) = v8::String::new(scope, "__agentOSWasmModuleBytes") else {
-        return false;
-    };
-    let len = bytes.len();
-    let backing_store = v8::ArrayBuffer::new_backing_store_from_bytes(bytes.to_vec());
-    let array_buffer = v8::ArrayBuffer::with_backing_store(scope, &backing_store.make_shared());
-    let Some(bytes_value) = v8::Uint8Array::new(scope, array_buffer, 0, len) else {
-        return false;
-    };
-    global.set(scope, name.into(), bytes_value.into()).is_some()
-}
-
-/// Session thread: acquires a concurrency slot, defers V8 isolate creation
-/// to first Execute (when bridge code is known for snapshot lookup), and
-/// processes commands until shutdown.
-fn spawn_session_thread(assignment: SessionAssignment) -> std::io::Result<thread::JoinHandle<()>> {
-    let name_prefix = if assignment.session_id.len() > 8 {
-        assignment.session_id[..8].to_string()
-    } else {
-        assignment.session_id.clone()
-    };
-    thread::Builder::new()
-        .name(format!("session-{}", name_prefix))
-        .spawn(move || session_thread(assignment, None))
-}
-
-#[allow(clippy::too_many_arguments)]
-fn session_thread(
-    assignment: SessionAssignment,
-    #[cfg_attr(test, allow(unused_variables))] precreated_isolate: Option<PrecreatedIsolate>,
-) {
-    let SessionAssignment {
-        heap_limit_mb,
-        cpu_time_limit_ms,
-        wall_clock_limit_ms,
-        rx,
-        slot_control,
-        max_concurrency,
-        event_tx,
-        call_id_router,
-        shared_call_id,
-        snapshot_cache,
-        isolate_handle,
-        execution_abort,
-        session_id,
-        output_generation,
-    } = assignment;
-    #[cfg(test)]
-    let _ = (
-        heap_limit_mb,
-        cpu_time_limit_ms,
-        wall_clock_limit_ms,
-        call_id_router,
-        shared_call_id,
-        snapshot_cache,
-        isolate_handle,
-        execution_abort,
-    );
-
-    // Acquire concurrency slot, but keep polling the session channel so a queued
-    // session can still shut down cleanly before it ever gets a slot.
-    let mut deferred_commands = VecDeque::new();
-    let acquired_slot = {
-        let (lock, cvar) = &*slot_control;
-        let mut count = lock.lock().unwrap();
-        loop {
-            if *count < max_concurrency {
-                *count += 1;
-                break true;
-            }
-
-            let (next_count, _) = cvar
-                .wait_timeout(count, std::time::Duration::from_millis(50))
-                .unwrap();
-            count = next_count;
-
-            match rx.try_recv() {
-                Ok(SessionCommand::Shutdown)
-                | Err(crossbeam_channel::TryRecvError::Disconnected) => {
-                    break false;
-                }
-                Ok(command) => {
-                    if !defer_session_command_before_slot(
-                        &mut deferred_commands,
-                        &event_tx,
-                        &session_id,
-                        output_generation,
-                        command,
-                    ) {
-                        break false;
-                    }
-                }
-                Err(crossbeam_channel::TryRecvError::Empty) => {}
-            }
-        }
-    };
-
-    if !acquired_slot {
-        return;
-    }
-
-    // Capture THIS session thread's per-thread CPU clock once. The clock id is
-    // stable for the thread's lifetime and can be polled from the watchdog
-    // thread; this is what lets the CPU-budget guard measure active JS CPU time
-    // (excluding idle/await) without running on the execution thread itself.
-    // Guest JS always runs on this thread, so this clock is the execution clock.
-    #[cfg(all(not(test), unix))]
-    let exec_thread_cpu_clock = crate::timeout::current_thread_cpu_clock();
-    #[cfg(all(not(test), not(unix)))]
-    let exec_thread_cpu_clock: Option<crate::timeout::ThreadCpuClock> = None;
-
-    // Isolate creation is normally deferred to first Execute (when bridge code is
-    // known for snapshot cache lookup). A claimed warm worker enters here with
-    // the snapshot isolate already created on this same thread.
-    #[cfg(not(test))]
-    let (
-        mut v8_isolate,
-        mut _v8_context,
-        mut from_snapshot,
-        mut isolate_bridge_code,
-        mut isolate_userland_code,
-    ) = match precreated_isolate {
-        Some(precreated) => (
-            Some(precreated.isolate),
-            Some(precreated.context),
-            true,
-            Some(precreated.bridge_code),
-            Some(precreated.userland_code),
-        ),
-        None => (None, None, false, None, None),
-    };
-
-    #[cfg(not(test))]
-    let mut pending = bridge::PendingPromises::new();
-
-    // Store latest InjectGlobals V8 payload for re-injection into fresh contexts
-    #[cfg(not(test))]
-    let mut last_globals_payload: Option<Vec<u8>> = None;
-
-    // Bridge code cache for V8 code caching across executions
-    #[cfg(not(test))]
-    let mut bridge_cache: Option<execution::BridgeCodeCache> = None;
-
-    // Cached bridge code string to skip resending over IPC
-    #[cfg(not(test))]
-    let mut last_bridge_code: Option<String> = None;
-    // Cached agent-SDK userland bundle (same 0-length = use cached convention).
-    #[cfg(not(test))]
-    let mut last_userland_code: Option<String> = None;
-
-    // A session can reuse its isolate across Executes only while the effective
-    // bridge code stays the same. Fresh contexts cloned from a snapshot inherit
-    // the snapshot's bridge IIFE, so a bridge-code change must rebuild the
-    // isolate before the next execution or the session will keep restoring the
-    // old snapshot forever. The userland bundle is part of the same guard.
-    #[cfg(not(test))]
-    let mut high_resolution_time_origin = Instant::now();
-
-    #[cfg(not(test))]
-    if let Some(iso) = v8_isolate.as_mut() {
-        *isolate_handle
-            .lock()
-            .expect("session isolate handle lock poisoned") = Some(iso.thread_safe_handle());
-    }
-
-    // Process commands until shutdown or channel close
-    loop {
-        let next_command = if let Some(command) = deferred_commands.pop_front() {
-            Ok(command)
-        } else {
-            rx.recv()
-        };
-
-        match next_command {
-            Ok(SessionCommand::Shutdown) | Err(_) => break,
-            Ok(SessionCommand::SetModuleReader(reader)) => {
-                execution::install_session_guest_reader(Some(reader));
-            }
-            Ok(SessionCommand::Message(msg)) => match msg {
-                SessionMessage::InjectGlobals { payload } => {
-                    #[cfg(not(test))]
-                    {
-                        // Store V8-serialized config for injection into fresh context at Execute time
-                        last_globals_payload = Some(payload);
-                    }
-                    #[cfg(test)]
-                    {
-                        let _ = payload;
-                    }
-                }
-                SessionMessage::Execute {
-                    mode,
-                    file_path,
-                    bridge_code,
-                    post_restore_script,
-                    userland_code,
-                    high_resolution_time,
-                    user_code,
-                    wasm_module_bytes,
-                } => {
-                    // `userland_code` is consumed only by the non-test snapshot
-                    // path below; keep it bound (without a warning) under `test`.
-                    #[cfg(test)]
-                    let _ = &userland_code;
-                    #[cfg(test)]
-                    let _ = high_resolution_time;
-                    #[cfg(test)]
-                    let _ = &wasm_module_bytes;
-                    #[cfg(not(test))]
-                    {
-                        let session_id = session_id.clone();
-                        // Use cached bridge code when host sends empty (0-length = use cached)
-                        let should_update_cached_bridge_code = !bridge_code.is_empty();
-                        let effective_bridge_code = if bridge_code.is_empty() {
-                            last_bridge_code.as_deref().unwrap_or("").to_string()
-                        } else {
-                            bridge_code
-                        };
-                        // Same 0-length = use-cached convention for the userland bundle.
-                        let should_update_cached_userland_code = !userland_code.is_empty();
-                        let effective_userland_code = if userland_code.is_empty() {
-                            last_userland_code.as_deref().unwrap_or("").to_string()
-                        } else {
-                            userland_code
-                        };
-
-                        if let Err(message) =
-                            snapshot::validate_bridge_code_size(&effective_bridge_code)
-                        {
-                            let result_frame = RuntimeEvent::ExecutionResult {
-                                session_id,
-                                exit_code: 1,
-                                exports: None,
-                                error: Some(ExecutionErrorBin {
-                                    error_type: "Error".into(),
-                                    message,
-                                    stack: String::new(),
-                                    code: snapshot::V8_BRIDGE_CODE_LIMIT_ERROR_CODE.into(),
-                                }),
-                            };
-                            send_event_with_generation(&event_tx, output_generation, result_frame);
-                            continue;
-                        }
-
-                        if should_update_cached_bridge_code {
-                            last_bridge_code = Some(effective_bridge_code.clone());
-                        }
-                        if should_update_cached_userland_code {
-                            last_userland_code = Some(effective_userland_code.clone());
-                        }
-
-                        if v8_isolate.is_some()
-                            && (isolate_bridge_code.as_deref()
-                                != Some(effective_bridge_code.as_str())
-                                || isolate_userland_code.as_deref()
-                                    != Some(effective_userland_code.as_str()))
-                        {
-                            *isolate_handle
-                                .lock()
-                                .expect("session isolate handle lock poisoned") = None;
-                            // Reset pending promise-resolver Globals BEFORE this
-                            // isolate is dropped. The registry is reused across
-                            // isolate rebuilds, and a prior execution that was
-                            // terminated early (Shutdown / timeout-abort) can
-                            // leave resolvers registered, so they would otherwise
-                            // outlive the isolate that created them.
-                            reset_pending_promises(&mut pending);
-                            drop(_v8_context.take());
-                            isolate::drop_isolate(v8_isolate.take());
-                            from_snapshot = false;
-                            isolate_bridge_code = None;
-                            isolate_userland_code = None;
-                        }
-
-                        // Deferred isolate creation: create on first Execute using snapshot cache
-                        if v8_isolate.is_none() {
-                            isolate::init_v8_platform();
-                            // The snapshot captures the bridge AND (when present) the
-                            // agent-SDK userland bundle, keyed process-wide by both, so
-                            // the SDK is evaluated once per sidecar and reused here.
-                            let phase_start = Instant::now();
-                            let snapshot_blob = match snapshot_cache.get_or_create_with_userland(
-                                &effective_bridge_code,
-                                (!effective_userland_code.is_empty())
-                                    .then_some(effective_userland_code.as_str()),
-                            ) {
-                                Ok(blob) => Some(blob),
-                                Err(message) => {
-                                    // Snapshot creation runs in a helper subprocess; if
-                                    // that fails (unsupported platform, spawn failure),
-                                    // degrade to a fresh isolate that evaluates the
-                                    // bridge in-context rather than failing the session.
-                                    eprintln!(
-                                        "secure-exec-v8-runtime: snapshot creation failed, \
-                                         falling back to fresh isolate: {message}"
-                                    );
-                                    None
-                                }
-                            };
-                            record_v8_session_phase("snapshot_get", phase_start.elapsed());
-                            let mut iso = match snapshot_blob {
-                                Some(blob) => {
-                                    from_snapshot = true;
-                                    eprintln!(
-                                        "secure-exec-v8-runtime: restored session isolate from_snapshot=true"
-                                    );
-                                    let phase_start = Instant::now();
-                                    // rusty_v8 0.130's CreateParams::snapshot_blob
-                                    // takes owned 'static data, so this copy remains
-                                    // per exec until the API can accept cached bytes.
-                                    let snapshot_blob = (*blob).clone();
-                                    record_v8_session_phase("blob_clone", phase_start.elapsed());
-                                    let phase_start = Instant::now();
-                                    let isolate = snapshot::create_isolate_from_snapshot(
-                                        snapshot_blob,
-                                        heap_limit_mb,
-                                    );
-                                    record_v8_session_phase("isolate_new", phase_start.elapsed());
-                                    isolate
-                                }
-                                None => {
-                                    from_snapshot = false;
-                                    let phase_start = Instant::now();
-                                    let isolate = isolate::create_isolate(heap_limit_mb);
-                                    record_v8_session_phase("isolate_new", phase_start.elapsed());
-                                    isolate
-                                }
-                            };
-                            iso.set_host_import_module_dynamically_callback(
-                                execution::dynamic_import_callback,
-                            );
-                            iso.set_host_initialize_import_meta_object_callback(
-                                execution::import_meta_object_callback,
-                            );
-                            high_resolution_time_origin = Instant::now();
-                            *isolate_handle
-                                .lock()
-                                .expect("session isolate handle lock poisoned") =
-                                Some(iso.thread_safe_handle());
-                            let ctx = isolate::create_context(&mut iso);
-                            _v8_context = Some(ctx);
-                            v8_isolate = Some(iso);
-                            isolate_bridge_code = Some(effective_bridge_code.clone());
-                            isolate_userland_code = Some(effective_userland_code.clone());
-                        }
-
-                        let iso = v8_isolate.as_mut().unwrap();
-                        iso.cancel_terminate_execution();
-
-                        // Create execution context: Context::new on a snapshot-restored
-                        // isolate gives a fresh clone of the snapshot's default context
-                        // (bridge IIFE already executed, all infrastructure set up).
-                        // On a non-snapshot isolate, this gives a blank context.
-                        let exec_context = isolate::create_context(iso);
-
-                        if high_resolution_time {
-                            let scope = &mut v8::HandleScope::new(iso);
-                            let ctx = v8::Local::new(scope, &exec_context);
-                            let scope = &mut v8::ContextScope::new(scope, ctx);
-                            execution::install_high_resolution_time_global(
-                                scope,
-                                &high_resolution_time_origin as *const Instant,
-                            );
-                        }
-
-                        // Inject globals from last InjectGlobals payload
-                        if let Some(ref payload) = last_globals_payload {
-                            let scope = &mut v8::HandleScope::new(iso);
-                            let ctx = v8::Local::new(scope, &exec_context);
-                            let scope = &mut v8::ContextScope::new(scope, ctx);
-                            if let Err(error) =
-                                execution::inject_globals_from_payload(scope, payload)
-                            {
-                                let result_frame = RuntimeEvent::ExecutionResult {
-                                    session_id,
-                                    exit_code: 1,
-                                    exports: None,
-                                    error: Some(ExecutionErrorBin {
-                                        error_type: error.error_type,
-                                        message: error.message,
-                                        stack: error.stack,
-                                        code: error.code.unwrap_or_default(),
-                                    }),
-                                };
-                                send_event_with_generation(
-                                    &event_tx,
-                                    output_generation,
-                                    result_frame,
-                                );
-                                continue;
-                            }
-                        }
-
-                        // Arm a per-execution abort channel so timeouts and external
-                        // terminate requests can unblock sync bridge waits.
-                        let (_active_execution_abort, abort_rx) =
-                            ActiveExecutionAbort::arm(&execution_abort);
-
-                        // Create deferred queue for sync bridge call filtering
-                        let deferred_queue = new_deferred_queue();
-
-                        // Create BridgeCallContext with channel sender (no shared mutex)
-                        let channel_rx = ChannelResponseReceiver::with_abort(
-                            rx.clone(),
-                            abort_rx.clone(),
-                            Arc::clone(&deferred_queue),
-                        );
-                        let bridge_ctx = BridgeCallContext::with_receiver(
-                            Box::new(ChannelRuntimeEventSender::new(
-                                event_tx.clone(),
-                                output_generation,
-                            )),
-                            Box::new(channel_rx),
-                            session_id.clone(),
-                            Arc::clone(&call_id_router),
-                            Arc::clone(&shared_call_id),
-                        );
-
-                        // Replace stub bridge functions with real session-local ones
-                        // (on snapshot context) or register from scratch (on fresh context).
-                        // Both paths use the same function — global.set() works for both.
-                        let _sync_store;
-                        let _async_store;
-                        let sync_bridge_fns = sync_bridge_fns();
-                        let async_bridge_fns = async_bridge_fns();
-                        {
-                            let scope = &mut v8::HandleScope::new(iso);
-                            let ctx = v8::Local::new(scope, &exec_context);
-                            let scope = &mut v8::ContextScope::new(scope, ctx);
-
-                            (_sync_store, _async_store) = bridge::replace_bridge_fns(
-                                scope,
-                                &bridge_ctx as *const BridgeCallContext,
-                                &pending as *const bridge::PendingPromises,
-                                sync_bridge_fns,
-                                async_bridge_fns,
-                            );
-                        }
-
-                        // Run post-restore init script (config, mutable state reset)
-                        // after bridge fn replacement but before user code
-                        if !post_restore_script.is_empty() {
-                            let scope = &mut v8::HandleScope::new(iso);
-                            let ctx = v8::Local::new(scope, &exec_context);
-                            let scope = &mut v8::ContextScope::new(scope, ctx);
-                            let (prs_code, prs_err) =
-                                execution::run_init_script(scope, &post_restore_script);
-                            if prs_code != 0 {
-                                let result_frame = RuntimeEvent::ExecutionResult {
-                                    session_id,
-                                    exit_code: prs_code,
-                                    exports: None,
-                                    error: prs_err.map(|e| ExecutionErrorBin {
-                                        error_type: e.error_type,
-                                        message: e.message,
-                                        stack: e.stack,
-                                        code: e.code.unwrap_or_default(),
-                                    }),
-                                };
-                                send_event_with_generation(
-                                    &event_tx,
-                                    output_generation,
-                                    result_frame,
-                                );
-                                continue;
-                            }
-                        }
-
-                        if let Some(wasm_module_bytes) = wasm_module_bytes.as_ref() {
-                            let scope = &mut v8::HandleScope::new(iso);
-                            let ctx = v8::Local::new(scope, &exec_context);
-                            let scope = &mut v8::ContextScope::new(scope, ctx);
-                            if !install_wasm_module_bytes_global(scope, wasm_module_bytes) {
-                                let result_frame = RuntimeEvent::ExecutionResult {
-                                    session_id,
-                                    exit_code: 1,
-                                    exports: None,
-                                    error: Some(ExecutionErrorBin {
-                                        error_type: "Error".into(),
-                                        message: "failed to install __agentOSWasmModuleBytes"
-                                            .into(),
-                                        stack: String::new(),
-                                        code: String::new(),
-                                    }),
-                                };
-                                send_event_with_generation(
-                                    &event_tx,
-                                    output_generation,
-                                    result_frame,
-                                );
-                                continue;
-                            }
-                        }
-
-                        // Arm the TRUE CPU-TIME budget watchdog before running
-                        // guest code when the caller passes a nonzero
-                        // `limits.jsRuntime.cpuTimeLimitMs` (normalized: `0`/unset =>
-                        // `None` => not armed at this runtime layer). The sidecar
-                        // supplies the bounded default for VM executions.
-                        //
-                        // The watchdog counts ACTIVE JS CPU only (idle/await
-                        // excluded) by polling the execution thread's CPU clock, so
-                        // a guest that mostly awaits is NOT killed by it. The
-                        // INDEPENDENT wall-clock backstop (armed just below) covers
-                        // the idle/await case when the operator opts into it.
-                        let mut cpu_budget_guard = match cpu_time_limit_ms {
-                            Some(budget_ms) => {
-                                // Enforcing a CPU budget requires the execution
-                                // thread's CPU clock captured at session start. If
-                                // it is unavailable we cannot honor the operator's
-                                // requested cap — surface that rather than silently
-                                // running uncapped.
-                                let cpu_clock = match exec_thread_cpu_clock {
-                                    Some(clock) => clock,
-                                    None => {
-                                        let result_frame = RuntimeEvent::ExecutionResult {
-                                            session_id,
-                                            exit_code: 1,
-                                            exports: None,
-                                            error: Some(ExecutionErrorBin {
-                                                error_type: "Error".into(),
-                                                message: format!(
-                                                    "{}: per-thread CPU clock unavailable; cannot enforce limits.jsRuntime.cpuTimeLimitMs",
-                                                    crate::timeout::CPU_BUDGET_GUARD_START_ERROR_CODE
-                                                ),
-                                                stack: String::new(),
-                                                code: crate::timeout::CPU_BUDGET_GUARD_START_ERROR_CODE
-                                                    .into(),
-                                            }),
-                                        };
-                                        send_event_with_generation(
-                                            &event_tx,
-                                            output_generation,
-                                            result_frame,
-                                        );
-                                        continue;
-                                    }
-                                };
-                                let handle = iso.thread_safe_handle();
-                                match crate::timeout::CpuBudgetGuard::new(
-                                    budget_ms,
-                                    cpu_clock,
-                                    handle,
-                                    execution_abort.clone(),
-                                ) {
-                                    Ok(guard) => Some(guard),
-                                    Err(message) => {
-                                        let result_frame = RuntimeEvent::ExecutionResult {
-                                            session_id,
-                                            exit_code: 1,
-                                            exports: None,
-                                            error: Some(ExecutionErrorBin {
-                                                error_type: "Error".into(),
-                                                message,
-                                                stack: String::new(),
-                                                code:
-                                                    crate::timeout::CPU_BUDGET_GUARD_START_ERROR_CODE
-                                                        .into(),
-                                            }),
-                                        };
-                                        send_event_with_generation(
-                                            &event_tx,
-                                            output_generation,
-                                            result_frame,
-                                        );
-                                        continue;
-                                    }
-                                }
-                            }
-                            _ => None,
-                        };
-
-                        // Arm the INDEPENDENT, opt-in WALL-CLOCK backstop alongside
-                        // the CPU budget. Unlike the CPU budget, this counts elapsed
-                        // real time INCLUDING idle/await, so it can cap a guest that
-                        // blocks or awaits indefinitely. Armed only when the operator
-                        // opts in via `limits.jsRuntime.wallClockLimitMs` (normalized:
-                        // `0`/unset => `None` => not armed => NO wall-clock limit, so
-                        // long-lived ACP adapters are never killed by a default).
-                        // Whichever guard fires first calls `terminate_execution` and
-                        // records its abort reason; the result frame reports which.
-                        let mut wall_clock_guard = match wall_clock_limit_ms {
-                            Some(limit_ms) => {
-                                let handle = iso.thread_safe_handle();
-                                match crate::timeout::TimeoutGuard::with_execution_abort(
-                                    limit_ms,
-                                    handle,
-                                    execution_abort.clone(),
-                                ) {
-                                    Ok(guard) => Some(guard),
-                                    Err(message) => {
-                                        let result_frame = RuntimeEvent::ExecutionResult {
-                                            session_id,
-                                            exit_code: 1,
-                                            exports: None,
-                                            error: Some(ExecutionErrorBin {
-                                                error_type: "Error".into(),
-                                                message,
-                                                stack: String::new(),
-                                                code:
-                                                    crate::timeout::TIMEOUT_GUARD_START_ERROR_CODE
-                                                        .into(),
-                                            }),
-                                        };
-                                        send_event_with_generation(
-                                            &event_tx,
-                                            output_generation,
-                                            result_frame,
-                                        );
-                                        continue;
-                                    }
-                                }
-                            }
-                            _ => None,
-                        };
-
-                        // On snapshot-restored context, skip bridge IIFE (already in
-                        // snapshot) and run user code only. On fresh context, run full
-                        // bridge code + user code as before.
-                        let bridge_code_for_exec = if from_snapshot {
-                            ""
-                        } else {
-                            &effective_bridge_code
-                        };
-                        let file_path_opt = if file_path.is_empty() {
-                            None
-                        } else {
-                            Some(file_path.as_str())
-                        };
-                        let phase_start = Instant::now();
-                        let (mut code, mut exports, mut error) = if mode == 0 {
-                            let scope = &mut v8::HandleScope::new(iso);
-                            let ctx = v8::Local::new(scope, &exec_context);
-                            let scope = &mut v8::ContextScope::new(scope, ctx);
-                            let (c, e) = execution::execute_script_with_options(
-                                scope,
-                                Some(&bridge_ctx),
-                                bridge_code_for_exec,
-                                &user_code,
-                                file_path_opt,
-                                &mut bridge_cache,
-                            );
-                            (c, None, e)
-                        } else {
-                            let scope = &mut v8::HandleScope::new(iso);
-                            let ctx = v8::Local::new(scope, &exec_context);
-                            let scope = &mut v8::ContextScope::new(scope, ctx);
-                            execution::execute_module(
-                                scope,
-                                &bridge_ctx,
-                                bridge_code_for_exec,
-                                &user_code,
-                                file_path_opt,
-                                &mut bridge_cache,
-                            )
-                        };
-
-                        // Re-check async ESM completion once immediately so
-                        // pure-microtask top-level await settles without
-                        // needing a bridge event-loop round-trip.
-                        if mode != 0 && error.is_none() {
-                            let scope = &mut v8::HandleScope::new(iso);
-                            let ctx = v8::Local::new(scope, &exec_context);
-                            let scope = &mut v8::ContextScope::new(scope, ctx);
-                            if let Some((next_code, next_exports, next_error)) =
-                                execution::finalize_pending_module_evaluation(scope)
-                            {
-                                code = next_code;
-                                exports = next_exports;
-                                error = next_error;
-                            }
-                        }
-                        record_v8_session_phase("user_code_execute", phase_start.elapsed());
-
-                        // Run event loop while bridge work or async ESM
-                        // evaluation is still pending. For ESM modules (mode != 0),
-                        // always enter the event loop even if no pending promises
-                        // are visible yet — the module body may have registered
-                        // timers, stdin listeners, or child_process handles that
-                        // need event loop pumping to deliver their callbacks.
-                        let should_enter_event_loop = !pending.is_empty()
-                            || execution::has_pending_module_evaluation()
-                            || execution::has_pending_script_evaluation()
-                            || !deferred_queue.lock().unwrap().is_empty();
-                        let event_loop_status = if should_enter_event_loop {
-                            let scope = &mut v8::HandleScope::new(iso);
-                            let ctx = v8::Local::new(scope, &exec_context);
-                            let scope = &mut v8::ContextScope::new(scope, ctx);
-                            run_event_loop(
-                                scope,
-                                &rx,
-                                &pending,
-                                Some(&abort_rx),
-                                Some(&deferred_queue),
-                            )
-                        } else {
-                            EventLoopStatus::Completed
-                        };
-
-                        let mut terminated =
-                            matches!(event_loop_status, EventLoopStatus::Terminated);
-                        if let EventLoopStatus::Failed(next_code, next_error) = event_loop_status {
-                            code = next_code;
-                            error = Some(next_error);
-                        }
-
-                        // Finalize any entry-module top-level await that was
-                        // waiting on bridge-driven async work (timers/network).
-                        if !terminated && mode != 0 && error.is_none() {
-                            let scope = &mut v8::HandleScope::new(iso);
-                            let ctx = v8::Local::new(scope, &exec_context);
-                            let scope = &mut v8::ContextScope::new(scope, ctx);
-                            if let Some((next_code, next_exports, next_error)) =
-                                execution::finalize_pending_module_evaluation(scope)
-                            {
-                                code = next_code;
-                                exports = next_exports;
-                                error = next_error;
-                            }
-                        }
-
-                        // Keep the session alive while handles (timers, child
-                        // processes, stdin listeners) are active. Long-lived
-                        // ACP adapters often run as plain scripts, so this
-                        // cannot be limited to ESM entrypoints.
-                        if !terminated && error.is_none() {
-                            // Phase 1: call _waitForActiveHandles() to register a pending promise
-                            {
-                                let scope = &mut v8::HandleScope::new(iso);
-                                let ctx = v8::Local::new(scope, &exec_context);
-                                let scope = &mut v8::ContextScope::new(scope, ctx);
-                                let global = ctx.global(scope);
-                                let key = v8::String::new(scope, "_waitForActiveHandles").unwrap();
-                                if let Some(func) = global.get(scope, key.into()) {
-                                    if func.is_function() {
-                                        let func =
-                                            v8::Local::<v8::Function>::try_from(func).unwrap();
-                                        let recv = v8::undefined(scope).into();
-                                        if let Some(result) = func.call(scope, recv, &[]) {
-                                            if result.is_promise() {
-                                                let promise =
-                                                    v8::Local::<v8::Promise>::try_from(result)
-                                                        .unwrap();
-                                                if promise.state() == v8::PromiseState::Pending {
-                                                    execution::set_pending_script_evaluation(
-                                                        scope, promise,
-                                                    );
-                                                }
-                                            }
-                                        }
-                                    }
-                                }
-                            }
-
-                            // Phase 2: pump event loop for active handles
-                            if !pending.is_empty()
-                                || execution::has_pending_script_evaluation()
-                                || !deferred_queue.lock().unwrap().is_empty()
-                            {
-                                let scope = &mut v8::HandleScope::new(iso);
-                                let ctx = v8::Local::new(scope, &exec_context);
-                                let scope = &mut v8::ContextScope::new(scope, ctx);
-                                let event_loop_status = run_event_loop(
-                                    scope,
-                                    &rx,
-                                    &pending,
-                                    Some(&abort_rx),
-                                    Some(&deferred_queue),
-                                );
-
-                                if matches!(event_loop_status, EventLoopStatus::Terminated) {
-                                    terminated = true;
-                                }
-                                if let EventLoopStatus::Failed(next_code, next_error) =
-                                    event_loop_status
-                                {
-                                    code = next_code;
-                                    error = Some(next_error);
-                                }
-                            }
-                        }
-
-                        if !terminated && mode == 0 && error.is_none() {
-                            let scope = &mut v8::HandleScope::new(iso);
-                            let ctx = v8::Local::new(scope, &exec_context);
-                            let scope = &mut v8::ContextScope::new(scope, ctx);
-                            if let Some((next_code, next_error)) =
-                                execution::finalize_pending_script_evaluation(scope)
-                            {
-                                code = next_code;
-                                error = next_error;
-                            }
-                        }
-
-                        // Determine which execution budget (if any) fired. Both the
-                        // CPU-time budget and the wall-clock backstop can be armed;
-                        // whichever fired first recorded its abort reason. Prefer the
-                        // recorded abort reason (first-writer-wins) so the result
-                        // attributes termination to the guard that actually fired.
-                        let abort_reason = execution_abort_reason(&execution_abort);
-                        let wall_clock_timed_out =
-                            wall_clock_guard.as_ref().is_some_and(|g| g.timed_out())
-                                || matches!(
-                                    abort_reason,
-                                    Some(ExecutionAbortReason::WallClockTimedOut)
-                                );
-                        let cpu_budget_exceeded =
-                            cpu_budget_guard.as_ref().is_some_and(|g| g.exceeded())
-                                || matches!(
-                                    abort_reason,
-                                    Some(ExecutionAbortReason::CpuBudgetExceeded)
-                                );
-                        // If both happened to fire, the recorded abort reason is the
-                        // authoritative first-fired guard; fall back to wall-clock
-                        // only when no CPU-budget reason was recorded.
-                        let cpu_budget_exceeded = cpu_budget_exceeded
-                            && !matches!(
-                                abort_reason,
-                                Some(ExecutionAbortReason::WallClockTimedOut)
-                            );
-                        let wall_clock_timed_out = wall_clock_timed_out && !cpu_budget_exceeded;
-
-                        // Cancel both watchdogs (joins their threads).
-                        if let Some(ref mut guard) = cpu_budget_guard {
-                            guard.cancel();
-                        }
-                        drop(cpu_budget_guard);
-                        if let Some(ref mut guard) = wall_clock_guard {
-                            guard.cancel();
-                        }
-                        drop(wall_clock_guard);
-
-                        if matches!(abort_reason, Some(ExecutionAbortReason::Terminated)) {
-                            terminated = true;
-                            code = 1;
-                            exports = None;
-                            error = None;
-                        }
-                        if terminated || cpu_budget_exceeded || wall_clock_timed_out {
-                            iso.cancel_terminate_execution();
-                        }
-
-                        // Send ExecutionResult
-                        let result_frame = if cpu_budget_exceeded {
-                            if let Some(budget_ms) = cpu_time_limit_ms {
-                                let capacity = budget_ms as usize;
-                                warn_limit_exhausted(TrackedLimit::V8CpuTimeMs, capacity, capacity);
-                            }
-                            RuntimeEvent::ExecutionResult {
-                                session_id,
-                                exit_code: 1,
-                                exports: None,
-                                error: Some(ExecutionErrorBin {
-                                    error_type: "Error".into(),
-                                    message: "Script execution exceeded the CPU-time budget \
-                                         (limits.jsRuntime.cpuTimeLimitMs)"
-                                        .into(),
-                                    stack: String::new(),
-                                    code: "ERR_SCRIPT_CPU_BUDGET_EXCEEDED".into(),
-                                }),
-                            }
-                        } else if wall_clock_timed_out {
-                            if let Some(limit_ms) = wall_clock_limit_ms {
-                                let capacity = limit_ms as usize;
-                                warn_limit_exhausted(
-                                    TrackedLimit::V8WallClockMs,
-                                    capacity,
-                                    capacity,
-                                );
-                            }
-                            RuntimeEvent::ExecutionResult {
-                                session_id,
-                                exit_code: 1,
-                                exports: None,
-                                error: Some(ExecutionErrorBin {
-                                    error_type: "Error".into(),
-                                    message: "Script execution exceeded the wall-clock limit \
-                                         (limits.jsRuntime.wallClockLimitMs)"
-                                        .into(),
-                                    stack: String::new(),
-                                    code: "ERR_SCRIPT_WALL_CLOCK_EXCEEDED".into(),
-                                }),
-                            }
-                        } else if terminated {
-                            RuntimeEvent::ExecutionResult {
-                                session_id,
-                                exit_code: 1,
-                                exports: None,
-                                error: Some(ExecutionErrorBin {
-                                    error_type: "Error".into(),
-                                    message: "Execution terminated".into(),
-                                    stack: String::new(),
-                                    code: String::new(),
-                                }),
-                            }
-                        } else {
-                            RuntimeEvent::ExecutionResult {
-                                session_id,
-                                exit_code: code,
-                                exports,
-                                error: error.map(|e| ExecutionErrorBin {
-                                    error_type: e.error_type,
-                                    message: e.message,
-                                    stack: e.stack,
-                                    code: e.code.unwrap_or_default(),
-                                }),
-                            }
-                        };
-
-                        execution::clear_pending_module_evaluation();
-                        execution::clear_pending_script_evaluation();
-                        execution::clear_module_state();
-
-                        send_event_with_generation(&event_tx, output_generation, result_frame);
-                    }
-                    #[cfg(test)]
-                    {
-                        let _ = (mode, file_path, bridge_code, post_restore_script, user_code);
-                    }
-                }
-                SessionMessage::BridgeResponse(_)
-                | SessionMessage::StreamEvent(_)
-                | SessionMessage::TerminateExecution => {
-                    handle_late_session_message(&event_tx, &session_id, output_generation, msg);
-                }
-            },
-        }
-    }
-
-    // Drop V8 resources (only present in non-test mode)
-    #[cfg(not(test))]
-    {
-        *isolate_handle
-            .lock()
-            .expect("session isolate handle lock poisoned") = None;
-        // Reset pending promise-resolver Globals BEFORE the isolate is dropped on
-        // thread teardown. run_event_loop can exit early (Shutdown / timeout-abort)
-        // with resolvers still registered, so without this the Globals would drop
-        // after their isolate — leaking across session create/destroy churn and
-        // violating the V8 lifetime contract.
-        reset_pending_promises(&mut pending);
-        drop(_v8_context.take());
-        isolate::drop_isolate(v8_isolate.take());
-    }
-
-    // Release concurrency slot
-    {
-        let (lock, cvar) = &*slot_control;
-        let mut count = lock.lock().unwrap();
-        *count -= 1;
-        cvar.notify_one();
-    }
-}
-
-/// Sync bridge functions block V8 while the host processes the call
-/// (applySync/applySyncPromise). Async bridge functions return a Promise to V8.
-struct BridgeFnPartitions {
-    sync: Vec<&'static str>,
-    async_fns: Vec<&'static str>,
-}
-
-pub(crate) fn sync_bridge_fns() -> &'static [&'static str] {
-    &bridge_fn_partitions().sync
-}
-
-pub(crate) fn async_bridge_fns() -> &'static [&'static str] {
-    &bridge_fn_partitions().async_fns
-}
-
-fn bridge_fn_partitions() -> &'static BridgeFnPartitions {
-    static PARTITIONS: OnceLock<BridgeFnPartitions> = OnceLock::new();
-    PARTITIONS.get_or_init(|| BridgeFnPartitions {
-        sync: bridge_fns_for(|convention| {
-            matches!(
-                convention,
-                BridgeCallConvention::Sync | BridgeCallConvention::SyncPromise
-            )
-        }),
-        async_fns: bridge_fns_for(|convention| convention == BridgeCallConvention::Async),
-    })
-}
-
-fn bridge_fns_for(filter: impl Fn(BridgeCallConvention) -> bool) -> Vec<&'static str> {
-    bridge_contract()
-        .groups
-        .iter()
-        .filter(|group| filter(group.convention))
-        .flat_map(|group| group.names.iter().map(String::as_str))
-        .collect()
-}
-
-/// Reset every pending promise-resolver `v8::Global` handle held by `pending`.
-///
-/// `v8::Global` handles MUST be reset/dropped *before* the `v8::Isolate` that
-/// created them is torn down. The session reuses a single `PendingPromises`
-/// registry across executions and across isolate rebuilds, and `run_event_loop`
-/// can exit early (Shutdown at the `SessionCommand::Shutdown` arm, or
-/// timeout-abort via the `abort_rx` branch) while resolvers are still
-/// registered. On those paths the registry can outlive an isolate. Call this
-/// immediately before every isolate drop (rebuild and thread teardown) so the
-/// `Global<PromiseResolver>` handles are dropped while their isolate is still
-/// alive — preventing both a leak across session create/destroy churn (bounded
-/// by `MAX_PENDING_PROMISES`) and a V8 lifetime-contract violation.
-#[doc(hidden)]
-pub fn reset_pending_promises(pending: &mut crate::bridge::PendingPromises) {
-    // Swap in an empty registry and drop the populated one in place. Dropping a
-    // `PendingPromises` resets all of its `Global<PromiseResolver>` handles.
-    drop(std::mem::take(pending));
-}
-
-/// Run the session event loop: dispatch incoming messages to V8.
-///
-/// Called after script/module execution when there are pending async promises.
-/// Polls the session channel for BridgeResponse, StreamEvent, and
-/// TerminateExecution messages, dispatching each into V8 with microtask flush.
-///
-/// When `deferred` is provided, drains queued messages from sync bridge calls
-/// before blocking on the channel. This prevents StreamEvent loss when sync
-/// bridge calls consume non-BridgeResponse messages from the shared channel.
-///
-/// When `abort_rx` is provided (timeout is configured), uses `select!` to
-/// also monitor the abort channel — if the timeout fires and drops the sender,
-/// the abort channel unblocks and terminates execution.
-///
-/// Returns true if execution completed normally, false if terminated.
-#[doc(hidden)]
-pub fn run_event_loop(
-    scope: &mut v8::HandleScope,
-    rx: &Receiver<SessionCommand>,
-    pending: &crate::bridge::PendingPromises,
-    abort_rx: Option<&crossbeam_channel::Receiver<()>>,
-    deferred: Option<&DeferredQueue>,
-) -> EventLoopStatus {
-    while !pending.is_empty()
-        || execution::pending_module_evaluation_needs_wait(scope)
-        || execution::pending_script_evaluation_needs_wait(scope)
-        || pending_guest_timer_count(scope) > 0
-        || pending_guest_immediate_count(scope) > 0
-        || deferred
-            .map(|dq| !dq.lock().unwrap().is_empty())
-            .unwrap_or(false)
-    {
-        pump_v8_message_loop(scope);
-
-        // Drain deferred messages queued by sync bridge calls before blocking
-        if let Some(dq) = deferred {
-            let frames: Vec<SessionMessage> = dq.lock().unwrap().drain(..).collect();
-            for frame in frames {
-                let status = dispatch_event_loop_frame(scope, frame, pending);
-                if !matches!(status, EventLoopStatus::Completed) {
-                    return status;
-                }
-            }
-            if pending.is_empty()
-                && !execution::pending_module_evaluation_needs_wait(scope)
-                && !execution::pending_script_evaluation_needs_wait(scope)
-                && pending_guest_timer_count(scope) == 0
-                && pending_guest_immediate_count(scope) == 0
-            {
-                break;
-            }
-        }
-
-        // Flush microtasks before blocking. Run in a loop to drain the full
-        // microtask queue -- each checkpoint may resolve Promises that schedule
-        // new microtasks (e.g., async function await chains).
-        for _ in 0..100 {
-            scope.perform_microtask_checkpoint();
-            pump_v8_message_loop(scope);
-            // Check if new deferred work appeared from microtask processing
-            if let Some(dq) = deferred {
-                if !dq.lock().unwrap().is_empty() {
-                    break; // New bridge work to process
-                }
-            }
-        }
-
-        if pending_guest_immediate_count(scope) > 0 {
-            match try_recv_session_command(scope, rx, abort_rx) {
-                Ok(Some(cmd)) => {
-                    let status = dispatch_session_command(scope, cmd, pending);
-                    if !matches!(status, EventLoopStatus::Completed) {
-                        return status;
-                    }
-                }
-                Ok(None) => {
-                    let status = drain_guest_immediates(scope);
-                    if !matches!(status, EventLoopStatus::Completed) {
-                        return status;
-                    }
-                }
-                Err(status) => return status,
-            }
-            scope.perform_microtask_checkpoint();
-            pump_v8_message_loop(scope);
-        }
-
-        // Re-check exit conditions after microtask flush — the microtask may
-        // have resolved all pending promises or registered new handles.
-        if pending.is_empty()
-            && !execution::pending_module_evaluation_needs_wait(scope)
-            && !execution::pending_script_evaluation_needs_wait(scope)
-            && pending_guest_timer_count(scope) == 0
-            && pending_guest_immediate_count(scope) == 0
-            && deferred
-                .map(|dq| dq.lock().unwrap().is_empty())
-                .unwrap_or(true)
-        {
-            break;
-        }
-
-        // Receive next command with interleaved microtask processing.
-        // Instead of blocking indefinitely, use a short timeout so we can
-        // periodically flush microtasks (like Node.js's libuv + DrainTasks pattern).
-        let cmd = loop {
-            if pending_guest_immediate_count(scope) > 0 {
-                match try_recv_session_command(scope, rx, abort_rx) {
-                    Ok(Some(cmd)) => break cmd,
-                    Ok(None) => {
-                        let status = drain_guest_immediates(scope);
-                        if !matches!(status, EventLoopStatus::Completed) {
-                            return status;
-                        }
-                        scope.perform_microtask_checkpoint();
-                        pump_v8_message_loop(scope);
-                        continue;
-                    }
-                    Err(status) => return status,
-                }
-            }
-            let recv_result = if let Some(abort) = abort_rx {
-                crossbeam_channel::select! {
-                    recv(rx) -> result => result.ok(),
-                    recv(abort) -> _ => {
-                        scope.terminate_execution();
-                        return EventLoopStatus::Terminated;
-                    },
-                    default(std::time::Duration::from_millis(1)) => None,
-                }
-            } else {
-                rx.recv_timeout(std::time::Duration::from_millis(1)).ok()
-            };
-            if let Some(cmd) = recv_result {
-                break cmd;
-            }
-            // No command received — flush microtasks and check deferred queue
-            scope.perform_microtask_checkpoint();
-            pump_v8_message_loop(scope);
-            if let Some(dq) = deferred {
-                if !dq.lock().unwrap().is_empty() {
-                    // New deferred work appeared — drain it in the outer loop
-                    let frames: Vec<SessionMessage> = dq.lock().unwrap().drain(..).collect();
-                    for frame in frames {
-                        let status = dispatch_event_loop_frame(scope, frame, pending);
-                        if !matches!(status, EventLoopStatus::Completed) {
-                            return status;
-                        }
-                    }
-                }
-            }
-            // Check if we should exit
-            if pending.is_empty()
-                && !execution::pending_module_evaluation_needs_wait(scope)
-                && !execution::pending_script_evaluation_needs_wait(scope)
-                && pending_guest_timer_count(scope) == 0
-                && pending_guest_immediate_count(scope) == 0
-                && deferred
-                    .map(|dq| dq.lock().unwrap().is_empty())
-                    .unwrap_or(true)
-            {
-                return EventLoopStatus::Completed;
-            }
-        };
-
-        let status = dispatch_session_command(scope, cmd, pending);
-        if !matches!(status, EventLoopStatus::Completed) {
-            return status;
-        }
-    }
-    EventLoopStatus::Completed
-}
-
-fn try_recv_session_command(
-    scope: &mut v8::HandleScope,
-    rx: &Receiver<SessionCommand>,
-    abort_rx: Option<&crossbeam_channel::Receiver<()>>,
-) -> Result<Option<SessionCommand>, EventLoopStatus> {
-    if let Some(abort) = abort_rx {
-        crossbeam_channel::select! {
-            recv(abort) -> _ => {
-                scope.terminate_execution();
-                Err(EventLoopStatus::Terminated)
-            },
-            recv(rx) -> result => Ok(result.ok()),
-            default => Ok(None),
-        }
-    } else {
-        match rx.try_recv() {
-            Ok(cmd) => Ok(Some(cmd)),
-            Err(crossbeam_channel::TryRecvError::Empty) => Ok(None),
-            Err(crossbeam_channel::TryRecvError::Disconnected) => Ok(None),
-        }
-    }
-}
-
-fn dispatch_session_command(
-    scope: &mut v8::HandleScope,
-    cmd: SessionCommand,
-    pending: &crate::bridge::PendingPromises,
-) -> EventLoopStatus {
-    match cmd {
-        SessionCommand::Message(frame) => dispatch_event_loop_frame(scope, frame, pending),
-        SessionCommand::SetModuleReader(reader) => {
-            execution::install_session_guest_reader(Some(reader));
-            EventLoopStatus::Completed
-        }
-        SessionCommand::Shutdown => EventLoopStatus::Terminated,
-    }
-}
-
-fn pending_guest_timer_count(scope: &mut v8::HandleScope) -> usize {
-    let tc = &mut v8::TryCatch::new(scope);
-    let context = tc.get_current_context();
-    let global = context.global(tc);
-    let key = match v8::String::new(tc, "_getPendingTimerCount") {
-        Some(key) => key,
-        None => return 0,
-    };
-    let Some(func_value) = global.get(tc, key.into()) else {
-        return 0;
-    };
-    let Ok(func) = v8::Local::<v8::Function>::try_from(func_value) else {
-        return 0;
-    };
-    let Some(result) = func.call(tc, global.into(), &[]) else {
-        return 0;
-    };
-
-    result
-        .integer_value(tc)
-        .and_then(|count| usize::try_from(count).ok())
-        .unwrap_or(0)
-}
-
-fn pending_guest_immediate_count(scope: &mut v8::HandleScope) -> usize {
-    let tc = &mut v8::TryCatch::new(scope);
-    let context = tc.get_current_context();
-    let global = context.global(tc);
-    let key = match v8::String::new(tc, "_getPendingImmediateCount") {
-        Some(key) => key,
-        None => return 0,
-    };
-    let Some(func_value) = global.get(tc, key.into()) else {
-        return 0;
-    };
-    let Ok(func) = v8::Local::<v8::Function>::try_from(func_value) else {
-        return 0;
-    };
-    let Some(result) = func.call(tc, global.into(), &[]) else {
-        return 0;
-    };
-
-    result
-        .integer_value(tc)
-        .and_then(|count| usize::try_from(count).ok())
-        .unwrap_or(0)
-}
-
-fn drain_guest_immediates(scope: &mut v8::HandleScope) -> EventLoopStatus {
-    let tc = &mut v8::TryCatch::new(scope);
-    let context = tc.get_current_context();
-    let global = context.global(tc);
-    let key = match v8::String::new(tc, "_drainImmediates") {
-        Some(key) => key,
-        None => return EventLoopStatus::Completed,
-    };
-    let Some(func_value) = global.get(tc, key.into()) else {
-        return EventLoopStatus::Completed;
-    };
-    let Ok(func) = v8::Local::<v8::Function>::try_from(func_value) else {
-        return EventLoopStatus::Completed;
-    };
-    let _ = func.call(tc, global.into(), &[]);
-    tc.perform_microtask_checkpoint();
-    if let Some(exception) = tc.exception() {
-        let (code, err) = execution::exception_to_result(tc, exception);
-        return EventLoopStatus::Failed(code, err);
-    }
-    if let Some(err) = execution::take_unhandled_promise_rejection(tc) {
-        return EventLoopStatus::Failed(1, err);
-    }
-    EventLoopStatus::Completed
-}
-
-fn pump_v8_message_loop(scope: &mut v8::HandleScope) {
-    let platform = v8::V8::get_current_platform();
-    while v8::Platform::pump_message_loop(&platform, scope, false) {
-        scope.perform_microtask_checkpoint();
-    }
-}
-
-/// Dispatch a single session message within the event loop.
-/// Returns the event-loop status after handling the frame.
-#[derive(Debug)]
-#[doc(hidden)]
-pub enum EventLoopStatus {
-    Completed,
-    Terminated,
-    Failed(i32, ExecutionError),
-}
-
-fn dispatch_event_loop_frame(
-    scope: &mut v8::HandleScope,
-    frame: SessionMessage,
-    pending: &crate::bridge::PendingPromises,
-) -> EventLoopStatus {
-    match frame {
-        SessionMessage::BridgeResponse(BridgeResponse {
-            call_id,
-            status,
-            payload,
-        }) => {
-            let (result, error) = if status == 1 {
-                (None, Some(String::from_utf8_lossy(&payload).to_string()))
-            } else if status == 2 || !payload.is_empty() {
-                // status=0: V8-serialized, status=2: raw binary (Uint8Array)
-                (Some(payload), None)
-            } else {
-                (None, None)
-            };
-            let _ = crate::bridge::resolve_pending_promise(
-                scope, pending, call_id, status, result, error,
-            );
-            // Microtasks already flushed in resolve_pending_promise
-            EventLoopStatus::Completed
-        }
-        SessionMessage::StreamEvent(StreamEvent {
-            event_type,
-            payload,
-        }) => {
-            let tc = &mut v8::TryCatch::new(scope);
-            crate::stream::dispatch_stream_event(tc, &event_type, &payload);
-            tc.perform_microtask_checkpoint();
-            if let Some(exception) = tc.exception() {
-                let (code, err) = execution::exception_to_result(tc, exception);
-                return EventLoopStatus::Failed(code, err);
-            }
-            if let Some(err) = execution::take_unhandled_promise_rejection(tc) {
-                return EventLoopStatus::Failed(1, err);
-            }
-            EventLoopStatus::Completed
-        }
-        SessionMessage::TerminateExecution => {
-            scope.terminate_execution();
-            EventLoopStatus::Terminated
-        }
-        _ => {
-            // Ignore other messages during event loop
-            EventLoopStatus::Completed
-        }
-    }
-}
-
-/// ResponseReceiver that receives typed session messages directly from the session channel.
-///
-/// Only returns BridgeResponse frames from recv_response(). Non-BridgeResponse
-/// messages (StreamEvent, TerminateExecution) consumed during sync bridge calls
-/// are queued in the deferred queue for later processing by the event loop.
-///
-/// When `abort_rx` is set (timeout configured), uses `select!` to also monitor
-/// the abort channel. If the timeout fires, the abort sender is dropped, which
-/// unblocks the select and returns a timeout error.
-pub(crate) struct ChannelResponseReceiver {
-    rx: Receiver<SessionCommand>,
-    abort_rx: Option<crossbeam_channel::Receiver<()>>,
-    deferred: DeferredQueue,
-}
-
-impl ChannelResponseReceiver {
-    #[allow(dead_code)]
-    pub(crate) fn new(rx: Receiver<SessionCommand>, deferred: DeferredQueue) -> Self {
-        ChannelResponseReceiver {
-            rx,
-            abort_rx: None,
-            deferred,
-        }
-    }
-
-    pub(crate) fn with_abort(
-        rx: Receiver<SessionCommand>,
-        abort_rx: crossbeam_channel::Receiver<()>,
-        deferred: DeferredQueue,
-    ) -> Self {
-        ChannelResponseReceiver {
-            rx,
-            abort_rx: Some(abort_rx),
-            deferred,
-        }
-    }
-}
-
-impl crate::host_call::BridgeResponseReceiver for ChannelResponseReceiver {
-    fn recv_response(&self, expected_call_id: u64) -> Result<BridgeResponse, String> {
-        loop {
-            // Wait for next command, with optional abort monitoring
-            let cmd = if let Some(ref abort) = self.abort_rx {
-                crossbeam_channel::select! {
-                    recv(self.rx) -> result => match result {
-                        Ok(cmd) => cmd,
-                        Err(_) => return Err("channel closed".into()),
-                    },
-                    recv(abort) -> _ => {
-                        return Err("execution aborted".into());
-                    },
-                }
-            } else {
-                match self.rx.recv() {
-                    Ok(cmd) => cmd,
-                    Err(_) => return Err("channel closed".into()),
-                }
-            };
-
-            match cmd {
-                SessionCommand::Message(frame) => {
-                    if let SessionMessage::BridgeResponse(response) = &frame {
-                        let call_id = response.call_id;
-                        if call_id == expected_call_id {
-                            crate::host_call::record_sync_bridge_response_channel_received(call_id);
-                            return Ok(response.clone());
-                        }
-                        push_deferred_sync_message(&self.deferred, frame)?;
-                        continue;
-                    }
-                    // Queue non-BridgeResponse for later event loop processing
-                    push_deferred_sync_message(&self.deferred, frame)?;
-                }
-                SessionCommand::SetModuleReader(reader) => {
-                    execution::install_session_guest_reader(Some(reader));
-                }
-                SessionCommand::Shutdown => return Err("session shutdown".into()),
-            }
-        }
-    }
-}
-
-fn push_deferred_sync_message(
-    deferred: &DeferredQueue,
-    frame: SessionMessage,
-) -> Result<(), String> {
-    let mut queue = deferred.lock().unwrap();
-    if queue.len() >= MAX_DEFERRED_SYNC_MESSAGES {
-        return Err(format!(
-            "sync bridge deferred message queue exceeded limit of {MAX_DEFERRED_SYNC_MESSAGES}"
-        ));
-    }
-    queue.push_back(frame);
-    Ok(())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::collections::{HashMap, HashSet};
-
-    /// Helper to create a SessionManager for tests
-    fn test_manager(max: usize) -> SessionManager {
-        test_manager_with_events(max).0
-    }
-
-    fn test_manager_with_events(max: usize) -> (SessionManager, Receiver<RuntimeEventEnvelope>) {
-        let (tx, _rx) = crossbeam_channel::unbounded();
-        let router: CallIdRouter = Arc::new(Mutex::new(HashMap::new()));
-        let snap_cache = Arc::new(SnapshotCache::new(4));
-        let manager = SessionManager::new(max, tx, router, snap_cache);
-        (manager, _rx)
-    }
-
-    #[test]
-    fn zero_cpu_time_limit_is_normalized_to_no_timeout() {
-        assert_eq!(normalize_cpu_time_limit_ms(None), None);
-        assert_eq!(normalize_cpu_time_limit_ms(Some(0)), None);
-        assert_eq!(normalize_cpu_time_limit_ms(Some(1)), Some(1));
-    }
-
-    fn expect_late_message_warning(
-        rx: &Receiver<RuntimeEventEnvelope>,
-        session_id: &str,
-        error_code: &str,
-        detail_fragment: &str,
-    ) {
-        let event = rx
-            .recv_timeout(std::time::Duration::from_millis(200))
-            .expect("late-message warning");
-        match event.event {
-            RuntimeEvent::Log {
-                session_id: observed_session_id,
-                channel,
-                message,
-            } => {
-                assert_eq!(observed_session_id, session_id);
-                assert_eq!(channel, 1, "late warnings should use stderr channel");
-                assert!(
-                    message.contains(error_code),
-                    "warning should contain error code {error_code}, got {message}"
-                );
-                assert!(
-                    message.contains(detail_fragment),
-                    "warning should mention {detail_fragment}, got {message}"
-                );
-            }
-            other => panic!("expected late-message warning log, got {other:?}"),
-        }
-    }
-
-    #[test]
-    fn bridge_contract_function_partitions_cover_contract() {
-        let contract = bridge_contract();
-
-        let expected_sync = contract
-            .groups
-            .iter()
-            .filter(|group| {
-                matches!(
-                    group.convention,
-                    BridgeCallConvention::Sync | BridgeCallConvention::SyncPromise
-                )
-            })
-            .flat_map(|group| group.names.iter().map(String::as_str))
-            .collect::<HashSet<_>>();
-        let expected_async = contract
-            .groups
-            .iter()
-            .filter(|group| group.convention == BridgeCallConvention::Async)
-            .flat_map(|group| group.names.iter().map(String::as_str))
-            .collect::<HashSet<_>>();
-
-        let sync_names = sync_bridge_fns();
-        let async_names = async_bridge_fns();
-        let registered_sync = sync_names.iter().copied().collect::<HashSet<_>>();
-        let registered_async = async_names.iter().copied().collect::<HashSet<_>>();
-
-        assert_eq!(
-            registered_sync, expected_sync,
-            "sync bridge function partition drifted from crates/bridge/bridge-contract.json"
-        );
-        assert_eq!(
-            registered_async, expected_async,
-            "async bridge function partition drifted from crates/bridge/bridge-contract.json"
-        );
-        assert!(
-            registered_sync.is_disjoint(&registered_async),
-            "sync and async bridge function partitions must not overlap"
-        );
-    }
-
-    #[test]
-    fn session_management() {
-        // Consolidated test to avoid V8 inter-test SIGSEGV issues.
-        // Covers: lifecycle and concurrency queuing.
-
-        // --- Part 1: Single session create/destroy ---
-        {
-            let mut mgr = test_manager(4);
-
-            mgr.create_session("session-aaa".into(), None, None, None)
-                .expect("create session A");
-            assert_eq!(mgr.session_count(), 1);
-
-            // Wait for thread to acquire slot and create isolate
-            std::thread::sleep(std::time::Duration::from_millis(200));
-
-            // Destroy session A
-            mgr.destroy_session("session-aaa")
-                .expect("destroy session A");
-            assert_eq!(mgr.session_count(), 0);
-        }
-
-        // --- Part 2: Multiple sessions ---
-        {
-            let mut mgr = test_manager(4);
-
-            mgr.create_session("session-bbb".into(), None, None, None)
-                .expect("create session B");
-            mgr.create_session("session-ccc".into(), Some(16), None, None)
-                .expect("create session C");
-            assert_eq!(mgr.session_count(), 2);
-
-            std::thread::sleep(std::time::Duration::from_millis(200));
-
-            // Duplicate session ID is rejected
-            let err = mgr.create_session("session-bbb".into(), None, None, None);
-            assert!(err.is_err());
-            assert!(err.unwrap_err().contains("already exists"));
-
-            // Sending to a missing session still fails.
-            let err = mgr.send_to_session("missing", SessionMessage::TerminateExecution);
-            assert!(err.is_err());
-            assert!(err.unwrap_err().contains("does not exist"));
-
-            // Destroy non-existent session
-            let err = mgr.destroy_session("no-such-session");
-            assert!(err.is_err());
-            assert!(err.unwrap_err().contains("does not exist"));
-
-            mgr.destroy_sessions(["session-bbb".into(), "session-ccc".into()]);
-            assert_eq!(mgr.session_count(), 0);
-        }
-
-        // --- Part 3: Max concurrency queuing ---
-        {
-            let mut mgr = test_manager(2);
-
-            mgr.create_session("s1".into(), None, None, None)
-                .expect("create s1");
-            mgr.create_session("s2".into(), None, None, None)
-                .expect("create s2");
-            mgr.create_session("s3".into(), None, None, None)
-                .expect("create s3");
-
-            // Allow threads to acquire slots
-            std::thread::sleep(std::time::Duration::from_millis(300));
-
-            // Only 2 slots active (s3 is queued)
-            assert_eq!(mgr.active_slot_count(), 2);
-            assert_eq!(mgr.session_count(), 3);
-
-            // Destroy s1 — releases slot, s3 acquires it
-            mgr.destroy_session("s1").expect("destroy s1");
-            std::thread::sleep(std::time::Duration::from_millis(300));
-            assert_eq!(mgr.active_slot_count(), 2);
-            assert_eq!(mgr.session_count(), 2);
-
-            // Destroy remaining
-            mgr.destroy_sessions(["s2".into(), "s3".into()]);
-            std::thread::sleep(std::time::Duration::from_millis(100));
-            assert_eq!(mgr.session_count(), 0);
-            assert_eq!(mgr.active_slot_count(), 0);
-        }
-    }
-
-    #[test]
-    fn detach_session_clears_call_id_routes_for_session() {
-        let mut mgr = test_manager(1);
-        mgr.create_session_with_output_generation(
-            "session-route".into(),
-            None,
-            None,
-            None,
-            Some(7),
-            None,
-        )
-        .expect("create session");
-        mgr.call_id_router()
-            .lock()
-            .expect("call_id router")
-            .insert(42, "session-route".into());
-
-        assert!(
-            mgr.detach_session_if_output_generation("session-route", 7)
-                .expect("detach session"),
-            "matching output generation should detach session"
-        );
-        assert!(
-            mgr.call_id_router()
-                .lock()
-                .expect("call_id router")
-                .get(&42)
-                .is_none(),
-            "detach should clear stale bridge call routes for the session"
-        );
-    }
-
-    #[test]
-    fn begin_destroy_session_removes_entry_before_finish() {
-        let mut mgr = test_manager(1);
-        mgr.create_session("two-phase".into(), None, None, None)
-            .expect("create session");
-
-        let first_shutdown = mgr
-            .begin_destroy_session("two-phase")
-            .expect("begin destroy session");
-        assert_eq!(
-            mgr.session_count(),
-            0,
-            "entry should be removed before the shutdown is finished"
-        );
-
-        // A same-id create during the unfinished shutdown window must succeed
-        // because the entry was removed up front.
-        mgr.create_session("two-phase".into(), None, None, None)
-            .expect("re-create session while first shutdown is unfinished");
-
-        let second_shutdown = mgr
-            .begin_destroy_session("two-phase")
-            .expect("begin destroy re-created session");
-        first_shutdown.finish();
-        second_shutdown.finish();
-        assert_eq!(mgr.session_count(), 0);
-    }
-
-    #[test]
-    fn session_shutdown_finish_clears_late_call_routes() {
-        let mut mgr = test_manager(1);
-        mgr.create_session("late-route".into(), None, None, None)
-            .expect("create session");
-
-        let shutdown = mgr
-            .begin_destroy_session("late-route")
-            .expect("begin destroy session");
-        // Simulate a route the session thread registered between the pre-join
-        // route clear and thread exit.
-        mgr.call_id_router()
-            .lock()
-            .expect("call_id router")
-            .insert(42, "late-route".into());
-
-        shutdown.finish();
-        assert!(
-            mgr.call_id_router()
-                .lock()
-                .expect("call_id router")
-                .get(&42)
-                .is_none(),
-            "finish should clear call routes registered during shutdown"
-        );
-    }
-
-    #[test]
-    fn channel_response_receiver_filters_bridge_response() {
-        use crate::host_call::BridgeResponseReceiver;
-
-        // Sync bridge call interleaved with StreamEvent does not drop the StreamEvent
-        let (tx, rx) = crossbeam_channel::bounded(10);
-        let deferred = new_deferred_queue();
-        let receiver = ChannelResponseReceiver::new(rx, Arc::clone(&deferred));
-
-        // Send: StreamEvent, TerminateExecution, then BridgeResponse
-        tx.send(SessionCommand::Message(SessionMessage::StreamEvent(
-            StreamEvent {
-                event_type: "child_stdout".into(),
-                payload: vec![0x01, 0x02],
-            },
-        )))
-        .unwrap();
-        tx.send(SessionCommand::Message(SessionMessage::TerminateExecution))
-            .unwrap();
-        tx.send(SessionCommand::Message(SessionMessage::BridgeResponse(
-            BridgeResponse {
-                call_id: 1,
-                status: 0,
-                payload: vec![0xAB],
-            },
-        )))
-        .unwrap();
-
-        // recv_response should skip StreamEvent and TerminateExecution, return BridgeResponse
-        let frame = receiver.recv_response(1).unwrap();
-        assert!(
-            frame.call_id == 1,
-            "expected BridgeResponse with call_id=1, got {:?}",
-            frame
-        );
-
-        // Deferred queue should contain the StreamEvent and TerminateExecution
-        let dq = deferred.lock().unwrap();
-        assert_eq!(dq.len(), 2, "expected 2 deferred messages");
-        assert!(
-            matches!(&dq[0], SessionMessage::StreamEvent(StreamEvent { event_type, .. }) if event_type == "child_stdout"),
-            "first deferred should be StreamEvent"
-        );
-        assert!(
-            matches!(&dq[1], SessionMessage::TerminateExecution),
-            "second deferred should be TerminateExecution"
-        );
-    }
-
-    #[test]
-    fn channel_response_receiver_rejects_deferred_queue_overflow() {
-        use crate::host_call::BridgeResponseReceiver;
-
-        let (tx, rx) = crossbeam_channel::bounded(MAX_DEFERRED_SYNC_MESSAGES + 1);
-        let deferred = new_deferred_queue();
-        let receiver = ChannelResponseReceiver::new(rx, Arc::clone(&deferred));
-
-        for index in 0..=MAX_DEFERRED_SYNC_MESSAGES {
-            tx.send(SessionCommand::Message(SessionMessage::StreamEvent(
-                StreamEvent {
-                    event_type: format!("child_stdout_{index}"),
-                    payload: Vec::new(),
-                },
-            )))
-            .unwrap();
-        }
-
-        let error = receiver
-            .recv_response(1)
-            .expect_err("deferred queue overflow should reject sync bridge wait");
-        assert!(error.contains("deferred message queue exceeded limit"));
-        assert_eq!(deferred.lock().unwrap().len(), MAX_DEFERRED_SYNC_MESSAGES);
-    }
-
-    #[test]
-    fn pre_slot_deferred_command_overflow_is_bounded_and_logged() {
-        let (event_tx, event_rx) = crossbeam_channel::unbounded();
-        let mut deferred_commands = VecDeque::new();
-
-        for _ in 0..MAX_DEFERRED_SESSION_COMMANDS {
-            assert!(defer_session_command_before_slot(
-                &mut deferred_commands,
-                &event_tx,
-                "queued-session",
-                Some(3),
-                SessionCommand::Message(SessionMessage::TerminateExecution),
-            ));
-        }
-
-        assert!(!defer_session_command_before_slot(
-            &mut deferred_commands,
-            &event_tx,
-            "queued-session",
-            Some(3),
-            SessionCommand::Message(SessionMessage::TerminateExecution),
-        ));
-        assert_eq!(deferred_commands.len(), MAX_DEFERRED_SESSION_COMMANDS);
-
-        let warning = event_rx.recv().expect("overflow warning");
-        assert_eq!(warning.output_generation, Some(3));
-        match warning.event {
-            RuntimeEvent::Log {
-                session_id,
-                channel,
-                message,
-            } => {
-                assert_eq!(session_id, "queued-session");
-                assert_eq!(channel, 1);
-                assert!(message.contains(DEFERRED_COMMAND_LIMIT_ERROR_CODE));
-            }
-            other => panic!("expected overflow warning log, got {other:?}"),
-        }
-    }
-
-    #[test]
-    fn late_terminate_execution_is_logged_instead_of_silently_dropped() {
-        let (mut mgr, rx) = test_manager_with_events(1);
-        mgr.create_session("late-terminate".into(), None, None, None)
-            .expect("create session");
-
-        mgr.send_to_session("late-terminate", SessionMessage::TerminateExecution)
-            .expect("send late terminate");
-
-        expect_late_message_warning(
-            &rx,
-            "late-terminate",
-            LATE_TERMINATE_EXECUTION_ERROR_CODE,
-            "TerminateExecution",
-        );
-
-        mgr.destroy_session("late-terminate")
-            .expect("destroy session");
-    }
-
-    #[test]
-    fn channel_response_receiver_abort_unblocks_waiting_sync_call() {
-        use crate::host_call::BridgeResponseReceiver;
-
-        let (_tx, rx) = crossbeam_channel::bounded(1);
-        let deferred = new_deferred_queue();
-        let execution_abort = new_execution_abort();
-        let (_active_abort, abort_rx) = ActiveExecutionAbort::arm(&execution_abort);
-        let receiver = ChannelResponseReceiver::with_abort(rx, abort_rx, deferred);
-
-        let (result_tx, result_rx) = std::sync::mpsc::channel();
-        let join_handle = std::thread::spawn(move || {
-            let _ = result_tx.send(receiver.recv_response(1));
-        });
-
-        std::thread::sleep(std::time::Duration::from_millis(25));
-        signal_execution_abort(&execution_abort, ExecutionAbortReason::Terminated);
-
-        let result = result_rx
-            .recv_timeout(std::time::Duration::from_secs(1))
-            .expect("abort should unblock the waiting receiver");
-        assert_eq!(
-            result.expect_err("abort should not yield a bridge response"),
-            "execution aborted"
-        );
-
-        join_handle
-            .join()
-            .expect("receiver thread should exit cleanly");
-    }
-
-    #[test]
-    fn late_bridge_response_is_logged_instead_of_silently_dropped() {
-        let (mut mgr, rx) = test_manager_with_events(1);
-        mgr.create_session("late-bridge".into(), None, None, None)
-            .expect("create session");
-
-        mgr.send_to_session(
-            "late-bridge",
-            SessionMessage::BridgeResponse(BridgeResponse {
-                call_id: 41,
-                status: 0,
-                payload: vec![0xAA, 0xBB],
-            }),
-        )
-        .expect("send late bridge response");
-
-        expect_late_message_warning(
-            &rx,
-            "late-bridge",
-            LATE_BRIDGE_RESPONSE_ERROR_CODE,
-            "BridgeResponse",
-        );
-
-        mgr.destroy_session("late-bridge").expect("destroy session");
-    }
-
-    /// Regression test for the pending-promise-resolver leak / V8 lifetime-contract
-    /// violation: when `run_event_loop` exits early (Shutdown or timeout-abort) the
-    /// `PendingPromises` registry can still hold `Global<PromiseResolver>` handles,
-    /// and the session-thread teardown must reset them *before* dropping the isolate.
-    ///
-    /// This drives the real cleanup seam (`reset_pending_promises`) used on every
-    /// isolate-drop path. It populates the registry with live resolver Globals (as a
-    /// terminated execution would leave behind), runs the cleanup while the isolate
-    /// is still alive, and asserts the registry is empty (every Global dropped).
-    ///
-    /// Fast + bounded (a handful of resolvers, then the safeguard fires) — it asserts
-    /// the cleanup happens, it does not saturate `MAX_PENDING_PROMISES`.
-    #[test]
-    fn reset_pending_promises_drops_resolver_globals_before_isolate_teardown() {
-        use crate::bridge::{register_async_bridge_fns, PendingPromises};
-        use crate::host_call::BridgeCallContext;
-        use crate::isolate;
-        use std::process::Command;
-
-        // V8 isolates must be created in an isolated process: doing it inline in a
-        // parallel `cargo test` thread races the process-global V8 platform and
-        // segfaults. Re-exec this one test as a subprocess (matching the crate's
-        // bridge_v8_hardening_* / vm_context_registry convention).
-        const SUBPROCESS_ENV: &str = "AGENTOS_V8_RESET_PENDING_PROMISES_SUBPROCESS";
-        if std::env::var_os(SUBPROCESS_ENV).is_none() {
-            let output = Command::new(std::env::current_exe().expect("current test binary"))
-                .arg("session::tests::reset_pending_promises_drops_resolver_globals_before_isolate_teardown")
-                .arg("--exact")
-                .arg("--nocapture")
-                .env(SUBPROCESS_ENV, "1")
-                .output()
-                .expect("spawn reset-pending-promises subprocess");
-            assert!(
-                output.status.success(),
-                "reset-pending-promises subprocess failed with status {:?}\nstdout:\n{}\nstderr:\n{}",
-                output.status.code(),
-                String::from_utf8_lossy(&output.stdout),
-                String::from_utf8_lossy(&output.stderr)
-            );
-            return;
-        }
-
-        isolate::init_v8_platform();
-
-        let mut v8_isolate = isolate::create_isolate(None);
-        let context = isolate::create_context(&mut v8_isolate);
-        let scope = &mut v8::HandleScope::new(&mut v8_isolate);
-        let context = v8::Local::new(scope, &context);
-        let scope = &mut v8::ContextScope::new(scope, context);
-
-        let bridge_ctx = BridgeCallContext::new(
-            Box::new(std::io::sink()),
-            Box::new(std::io::empty()),
-            String::from("reset-pending-test"),
-        );
-        let mut pending = PendingPromises::new();
-
-        // Each `_asyncFn(i)` call synchronously registers a pending promise
-        // resolver Global in `pending` and returns an unresolved Promise —
-        // exactly what remains registered when the event loop exits early on
-        // Shutdown / timeout-abort.
-        const REGISTERED: usize = 8;
-        let _async_fns = register_async_bridge_fns(
-            scope,
-            &bridge_ctx as *const BridgeCallContext,
-            &pending as *const PendingPromises,
-            &["_asyncFn"],
-        );
-        let source = format!("for (let i = 0; i < {REGISTERED}; i++) {{ _asyncFn(i); }}");
-        {
-            let tc = &mut v8::TryCatch::new(scope);
-            let code = v8::String::new(tc, &source).unwrap();
-            let script = v8::Script::compile(tc, code, None).unwrap();
-            assert!(
-                script.run(tc).is_some(),
-                "async bridge calls should register resolvers, not throw"
-            );
-            assert!(!tc.has_caught(), "async bridge calls should not throw");
-        }
-        assert_eq!(
-            pending.len(),
-            REGISTERED,
-            "each _asyncFn call must register a pending resolver Global"
-        );
-
-        // The cleanup invoked on every session-thread isolate-drop path. It must
-        // empty the registry (resetting every Global<PromiseResolver>) while the
-        // isolate is still alive.
-        reset_pending_promises(&mut pending);
-
-        assert_eq!(
-            pending.len(),
-            0,
-            "reset_pending_promises must drop all pending resolver Globals before isolate teardown"
-        );
-
-        // Isolate is still alive here: the Globals were reset above, so dropping
-        // the scope/isolate below honors the V8 lifetime contract.
-    }
-}
diff --git a/crates/v8-runtime/src/snapshot.rs b/crates/v8-runtime/src/snapshot.rs
deleted file mode 100644
index 1f11a6104..000000000
--- a/crates/v8-runtime/src/snapshot.rs
+++ /dev/null
@@ -1,2114 +0,0 @@
-// V8 startup snapshots: fast isolate creation from pre-compiled bridge code
-
-use std::collections::HashMap;
-use std::io::{Read, Write};
-use std::process::{Command, Stdio};
-use std::sync::{Arc, Condvar, Mutex};
-
-use sha2::{Digest, Sha256};
-
-use crate::bridge::{external_refs, register_stub_bridge_fns};
-use crate::isolate::init_v8_platform;
-use crate::session::{async_bridge_fns, sync_bridge_fns};
-
-/// Maximum allowed snapshot blob size (50MB).
-/// Prevents resource exhaustion from degenerate bridge code.
-const MAX_SNAPSHOT_BLOB_BYTES: usize = 50 * 1024 * 1024;
-const MAX_V8_BRIDGE_CODE_BYTES: usize = 16 * 1024 * 1024;
-/// Userland (agent-SDK) bundles are whole dependency graphs flattened into one
-/// IIFE, so they are larger than the bridge. Bounded so a degenerate bundle cannot
-/// exhaust memory, but generous enough for a real SDK (the pi bundle is ~7.6 MB).
-const MAX_V8_USERLAND_CODE_BYTES: usize = 32 * 1024 * 1024;
-pub(crate) const V8_BRIDGE_CODE_LIMIT_ERROR_CODE: &str = "ERR_V8_BRIDGE_CODE_LIMIT";
-pub(crate) const V8_USERLAND_CODE_LIMIT_ERROR_CODE: &str = "ERR_V8_USERLAND_CODE_LIMIT";
-
-const SNAPSHOT_HELPER_ENV: &str = "SECURE_EXEC_V8_SNAPSHOT_HELPER";
-const SNAPSHOT_HELPER_MAGIC: &[u8; 8] = b"SEV8SNP1";
-const SNAPSHOT_HELPER_OK: &[u8; 2] = b"OK";
-const SNAPSHOT_HELPER_ERR: &[u8; 3] = b"ERR";
-const SNAPSHOT_HELPER_NONE_LEN: u64 = u64::MAX;
-
-#[cfg(any(target_os = "linux", target_os = "android"))]
-#[used]
-#[link_section = ".init_array"]
-static SNAPSHOT_HELPER_CTOR: extern "C" fn() = snapshot_helper_ctor;
-
-// Same pre-main hook on macOS: the darwin sidecar build ships this crate, and
-// without the constructor the helper child would fall through to the normal
-// main and the parent's snapshot request would fail.
-#[cfg(target_os = "macos")]
-#[used]
-#[link_section = "__DATA,__mod_init_func"]
-static SNAPSHOT_HELPER_CTOR: extern "C" fn() = snapshot_helper_ctor;
-
-#[cfg(any(target_os = "linux", target_os = "android", target_os = "macos"))]
-extern "C" fn snapshot_helper_ctor() {
-    if std::env::var_os(SNAPSHOT_HELPER_ENV).is_some() {
-        let code = run_snapshot_helper_from_stdio();
-        std::process::exit(code);
-    }
-}
-
-pub(crate) fn validate_bridge_code_size(bridge_code: &str) -> Result<(), String> {
-    if bridge_code.len() > MAX_V8_BRIDGE_CODE_BYTES {
-        return Err(format!(
-            "{V8_BRIDGE_CODE_LIMIT_ERROR_CODE}: bridge code too large for V8 bridge setup: {} bytes (max {})",
-            bridge_code.len(),
-            MAX_V8_BRIDGE_CODE_BYTES
-        ));
-    }
-
-    Ok(())
-}
-
-pub(crate) fn validate_userland_code_size(userland_code: &str) -> Result<(), String> {
-    if userland_code.len() > MAX_V8_USERLAND_CODE_BYTES {
-        return Err(format!(
-            "{V8_USERLAND_CODE_LIMIT_ERROR_CODE}: userland snapshot code too large: {} bytes (max {})",
-            userland_code.len(),
-            MAX_V8_USERLAND_CODE_BYTES
-        ));
-    }
-
-    Ok(())
-}
-
-/// Runs after the bridge but before the userland (agent-SDK) IIFE during snapshot
-/// creation. Replaces bridge-backed lazy getters that would dispatch a host call
-/// (unavailable when bridge fns are stubs) with static, snapshot-safe values. These
-/// are environment-identity values (not per-session config), so baking them is
-/// correct; per-session config is still injected post-restore.
-const SNAPSHOT_USERLAND_PREP: &str = r#"
-(function () {
-    // Agent-SDK bundles are esbuild IIFEs that expect a global CJS `require` for
-    // their node-builtin imports, but the bridge exposes require only via module
-    // wrappers. Bind one from the bridge's namespaced createRequire so the bundle's
-    // __require resolves builtins (via the in-context loadBuiltinModule) during
-    // snapshot eval; it also works post-restore (resolution flows through the real
-    // bridge fns swapped in after restore).
-    if (typeof globalThis.require === "undefined" &&
-        typeof globalThis.__secureExecGuestCreateRequire === "function") {
-        try {
-            globalThis.require = globalThis.__secureExecGuestCreateRequire("/root/index.js");
-        } catch (e) {}
-    }
-    // `process.versions` is a bridge-backed lazy getter: it derives `.node` from the
-    // per-session `config2.version` and merges a host bridge call. During snapshot
-    // creation the bridge fns are stubs AND the default `_processConfig` has no
-    // `version`, so the live getter THROWS — an agent SDK that reads it at
-    // module-init would fail. Rather than REPLACE the getter with a static value
-    // (which would permanently shadow the real per-session version for every
-    // restored session — they'd all read a frozen, fabricated identity), WRAP it:
-    // defer to the live getter so that post-restore — once the real bridge fns and
-    // per-session config are injected — sessions read accurate per-session versions,
-    // and fall back to the static, snapshot-safe identity only while the live getter
-    // throws (i.e. during snapshot creation, before any real config exists).
-    if (typeof process !== "undefined" && process) {
-        var staticVersions = { node: "20.0.0", v8: "12.0.0", uv: "1.0.0", modules: "115" };
-        try {
-            var __verDesc = Object.getOwnPropertyDescriptor(process, "versions");
-            var __liveVersions = __verDesc && __verDesc.get;
-            Object.defineProperty(process, "versions", {
-                configurable: true,
-                enumerable: true,
-                get: function () {
-                    if (__liveVersions) {
-                        try {
-                            var v = __liveVersions.call(this);
-                            // A real per-session result has a node version; during
-                            // snapshot creation the live getter throws before here.
-                            if (v && typeof v === "object" && v.node) return v;
-                        } catch (e) {}
-                    }
-                    return staticVersions;
-                },
-            });
-        } catch (e) {}
-    }
-})();
-"#;
-
-/// Compile and run a Script in the snapshot-creation context, returning a
-/// descriptive error (with the V8 exception message) on failure. `label`
-/// identifies the phase (e.g. "bridge code" / "userland code") in error text.
-fn run_snapshot_script(
-    scope: &mut v8::HandleScope,
-    code: &str,
-    label: &str,
-    eager_compile: bool,
-) -> Result<(), String> {
-    let try_catch = &mut v8::TryCatch::new(scope);
-    let source = match v8::String::new(try_catch, code) {
-        Some(source) => source,
-        None => return Err(format!("failed to create V8 string for {label}")),
-    };
-    // NOTE(perf, measured 2026-07-02): EagerCompile moves cost into the snapshot
-    // blob: user_code_execute dropped 8.9ms -> 7.9ms on the wasm-runner floor,
-    // but isolate_new rose 4.0ms -> 7.4ms when isolate creation was still
-    // per-exec. Parked warm workers now prepay snapshot deserialization off-path,
-    // so only the userland script opts into eager compilation; bridge code and
-    // userland prep stay lazy.
-    let script = if eager_compile {
-        let resource_name = v8::String::new(try_catch, label).unwrap();
-        let origin = v8::ScriptOrigin::new(
-            try_catch,
-            resource_name.into(),
-            0,
-            0,
-            false,
-            0,
-            None,
-            false,
-            false,
-            false,
-            None,
-        );
-        let mut source = v8::script_compiler::Source::new(source, Some(&origin));
-        v8::script_compiler::compile(
-            try_catch,
-            &mut source,
-            v8::script_compiler::CompileOptions::EagerCompile,
-            v8::script_compiler::NoCacheReason::NoReason,
-        )
-    } else {
-        v8::Script::compile(try_catch, source, None)
-    };
-    let Some(script) = script else {
-        let message = try_catch
-            .exception()
-            .map(|exception| exception.to_rust_string_lossy(try_catch))
-            .unwrap_or_else(|| format!("{label} compilation failed during snapshot creation"));
-        return Err(format!(
-            "{label} compilation failed during snapshot creation: {message}"
-        ));
-    };
-    if script.run(try_catch).is_none() {
-        let message = try_catch
-            .exception()
-            .map(|exception| exception.to_rust_string_lossy(try_catch))
-            .unwrap_or_else(|| format!("{label} execution failed during snapshot creation"));
-        return Err(format!(
-            "{label} execution failed during snapshot creation: {message}"
-        ));
-    }
-    Ok(())
-}
-
-/// Create a V8 startup snapshot with a fully-initialized bridge context.
-///
-/// Registers stub bridge functions on the global, injects default config
-/// globals, then compiles and executes the bridge IIFE. The resulting
-/// context — with all bridge infrastructure set up — is snapshotted.
-///
-/// After restore, stub bridge functions are replaced with real session-local
-/// ones, and per-session config is injected via a post-restore script.
-///
-/// Returns an error if the bridge code fails to compile or the resulting
-/// snapshot exceeds MAX_SNAPSHOT_BLOB_BYTES.
-pub fn create_snapshot(bridge_code: &str) -> Result<Vec<u8>, String> {
-    create_snapshot_inner(bridge_code, None)
-}
-
-/// Create a V8 startup snapshot whose default context has BOTH the bridge
-/// infrastructure AND an evaluated userland module graph (e.g. a bundled agent
-/// SDK) captured into it.
-///
-/// `userland_code` is an IIFE (esbuild `format:'iife'`) that runs after the bridge
-/// in the same context and publishes its evaluated exports on `globalThis`. Because
-/// the bridge has already installed node-builtin polyfills and stub bridge fns at
-/// this point, the userland code can `require`/reference them while it evaluates.
-/// The whole post-evaluation heap is frozen into the blob, so restoring a fresh
-/// isolate skips re-evaluating the SDK entirely — collapsing the per-session
-/// module-load/eval tax. Per-session bridge fns and config are still swapped/injected
-/// post-restore exactly as for the bridge-only snapshot.
-pub fn create_snapshot_with_userland(
-    bridge_code: &str,
-    userland_code: &str,
-) -> Result<Vec<u8>, String> {
-    create_snapshot_inner(bridge_code, Some(userland_code))
-}
-
-fn create_snapshot_inner(
-    bridge_code: &str,
-    userland_code: Option<&str>,
-) -> Result<Vec<u8>, String> {
-    validate_bridge_code_size(bridge_code)?;
-    if let Some(userland_code) = userland_code {
-        validate_userland_code_size(userland_code)?;
-    }
-
-    create_snapshot_in_subprocess(bridge_code, userland_code)
-}
-
-fn create_snapshot_inner_in_process(
-    bridge_code: &str,
-    userland_code: Option<&str>,
-) -> Result<Vec<u8>, String> {
-    validate_bridge_code_size(bridge_code)?;
-    if let Some(userland_code) = userland_code {
-        validate_userland_code_size(userland_code)?;
-    }
-
-    init_v8_platform();
-
-    crate::isolate::with_isolate_lifecycle_lock(|| {
-        let mut isolate = v8::Isolate::snapshot_creator(Some(external_refs()), None);
-        let bridge_result = {
-            let scope = &mut v8::HandleScope::new(&mut isolate);
-            let context = v8::Context::new(scope, Default::default());
-            let scope = &mut v8::ContextScope::new(scope, context);
-
-            // Register stub bridge functions so the IIFE can reference them.
-            let sync_bridge_fns = sync_bridge_fns();
-            let async_bridge_fns = async_bridge_fns();
-            register_stub_bridge_fns(scope, sync_bridge_fns, async_bridge_fns);
-
-            // Inject default config globals for bridge IIFE setup
-            inject_snapshot_defaults(scope);
-
-            // Compile and run bridge code — context captures fully-initialized state.
-            // Then, if present, run the userland (agent-SDK) IIFE in the SAME context so
-            // its evaluated graph is captured alongside the bridge.
-            let result = (|| -> Result<(), String> {
-                run_snapshot_script(scope, bridge_code, "bridge code", false)?;
-                if let Some(userland_code) = userland_code {
-                    // Some bridge-backed globals (e.g. `process.versions`) are lazy
-                    // getters that dispatch a host bridge call on first access. During
-                    // snapshot creation the bridge fns are stubs, so an agent SDK that
-                    // reads them at module-init would fail. Freeze them to static values
-                    // first; per-session config is still injected post-restore.
-                    run_snapshot_script(scope, SNAPSHOT_USERLAND_PREP, "userland prep", false)?;
-                    run_snapshot_script(scope, userland_code, "userland code", true)?;
-                }
-                Ok(())
-            })();
-
-            scope.set_default_context(context);
-            result
-        };
-        let blob = isolate
-            .create_blob(v8::FunctionCodeHandling::Keep)
-            .ok_or_else(|| "V8 snapshot creation failed".to_string())?;
-        bridge_result?;
-
-        // Reject oversized snapshots
-        if blob.len() > MAX_SNAPSHOT_BLOB_BYTES {
-            return Err(format!(
-                "snapshot blob too large: {} bytes (max {})",
-                blob.len(),
-                MAX_SNAPSHOT_BLOB_BYTES
-            ));
-        }
-
-        Ok(blob.to_vec())
-    })
-}
-
-fn create_snapshot_in_subprocess(
-    bridge_code: &str,
-    userland_code: Option<&str>,
-) -> Result<Vec<u8>, String> {
-    let current_exe =
-        std::env::current_exe().map_err(|error| format!("snapshot helper path: {error}"))?;
-    let mut child = Command::new(current_exe)
-        .env(SNAPSHOT_HELPER_ENV, "1")
-        .stdin(Stdio::piped())
-        .stdout(Stdio::piped())
-        .stderr(Stdio::piped())
-        .spawn()
-        .map_err(|error| format!("spawn snapshot helper: {error}"))?;
-
-    {
-        let mut stdin = child
-            .stdin
-            .take()
-            .ok_or_else(|| String::from("snapshot helper stdin unavailable"))?;
-        write_snapshot_helper_request(&mut stdin, bridge_code, userland_code)?;
-    }
-
-    let output = child
-        .wait_with_output()
-        .map_err(|error| format!("wait for snapshot helper: {error}"))?;
-    if !output.status.success() {
-        let stderr = String::from_utf8_lossy(&output.stderr);
-        return Err(format!(
-            "snapshot helper exited with status {}: {}",
-            output.status, stderr
-        ));
-    }
-
-    parse_snapshot_helper_response(&output.stdout, &output.stderr)
-}
-
-fn write_snapshot_helper_request(
-    writer: &mut impl Write,
-    bridge_code: &str,
-    userland_code: Option<&str>,
-) -> Result<(), String> {
-    writer
-        .write_all(SNAPSHOT_HELPER_MAGIC)
-        .map_err(|error| format!("write snapshot helper magic: {error}"))?;
-    write_u64(writer, bridge_code.len() as u64)?;
-    write_u64(
-        writer,
-        userland_code
-            .map(|code| code.len() as u64)
-            .unwrap_or(SNAPSHOT_HELPER_NONE_LEN),
-    )?;
-    writer
-        .write_all(bridge_code.as_bytes())
-        .map_err(|error| format!("write snapshot helper bridge code: {error}"))?;
-    if let Some(userland_code) = userland_code {
-        writer
-            .write_all(userland_code.as_bytes())
-            .map_err(|error| format!("write snapshot helper userland code: {error}"))?;
-    }
-    Ok(())
-}
-
-fn parse_snapshot_helper_response(stdout: &[u8], stderr: &[u8]) -> Result<Vec<u8>, String> {
-    if stdout.starts_with(SNAPSHOT_HELPER_OK) {
-        let payload = &stdout[SNAPSHOT_HELPER_OK.len()..];
-        let (len, rest) = read_u64_from_slice(payload)?;
-        let len = usize::try_from(len)
-            .map_err(|_| String::from("snapshot helper OK payload length overflows usize"))?;
-        if rest.len() != len {
-            return Err(format!(
-                "snapshot helper OK payload length mismatch: declared {}, got {}",
-                len,
-                rest.len()
-            ));
-        }
-        return Ok(rest.to_vec());
-    }
-
-    if stdout.starts_with(SNAPSHOT_HELPER_ERR) {
-        let payload = &stdout[SNAPSHOT_HELPER_ERR.len()..];
-        let (len, rest) = read_u64_from_slice(payload)?;
-        let len = usize::try_from(len)
-            .map_err(|_| String::from("snapshot helper error length overflows usize"))?;
-        if rest.len() != len {
-            return Err(format!(
-                "snapshot helper error length mismatch: declared {}, got {}",
-                len,
-                rest.len()
-            ));
-        }
-        let message = String::from_utf8_lossy(rest);
-        return Err(message.into_owned());
-    }
-
-    Err(format!(
-        "snapshot helper returned invalid response (stdout {} bytes, stderr: {})",
-        stdout.len(),
-        String::from_utf8_lossy(stderr)
-    ))
-}
-
-fn run_snapshot_helper_from_stdio() -> i32 {
-    let mut input = Vec::new();
-    if let Err(error) = std::io::stdin().read_to_end(&mut input) {
-        let _ = write_snapshot_helper_error(format!("read snapshot helper request: {error}"));
-        return 2;
-    }
-
-    let result = (|| -> Result<Vec<u8>, String> {
-        let (bridge_code, userland_code) = parse_snapshot_helper_request(&input)?;
-        create_snapshot_inner_in_process(&bridge_code, userland_code.as_deref())
-    })();
-
-    match result {
-        Ok(blob) => match write_snapshot_helper_ok(&blob) {
-            Ok(()) => 0,
-            Err(error) => {
-                eprintln!("write snapshot helper response: {error}");
-                2
-            }
-        },
-        Err(error) => match write_snapshot_helper_error(error) {
-            Ok(()) => 0,
-            Err(error) => {
-                eprintln!("write snapshot helper error response: {error}");
-                2
-            }
-        },
-    }
-}
-
-fn parse_snapshot_helper_request(input: &[u8]) -> Result<(String, Option<String>), String> {
-    let Some(rest) = input.strip_prefix(SNAPSHOT_HELPER_MAGIC) else {
-        return Err(String::from("snapshot helper request missing magic"));
-    };
-    let (bridge_len, rest) = read_u64_from_slice(rest)?;
-    let (userland_len, rest) = read_u64_from_slice(rest)?;
-    let bridge_len = usize::try_from(bridge_len)
-        .map_err(|_| String::from("snapshot helper bridge length overflows usize"))?;
-    if rest.len() < bridge_len {
-        return Err(format!(
-            "snapshot helper bridge length mismatch: declared {}, got {}",
-            bridge_len,
-            rest.len()
-        ));
-    }
-    let (bridge_bytes, rest) = rest.split_at(bridge_len);
-    let userland_code = if userland_len == SNAPSHOT_HELPER_NONE_LEN {
-        if !rest.is_empty() {
-            return Err(format!(
-                "snapshot helper request has {} trailing bytes after bridge-only payload",
-                rest.len()
-            ));
-        }
-        None
-    } else {
-        let userland_len = usize::try_from(userland_len)
-            .map_err(|_| String::from("snapshot helper userland length overflows usize"))?;
-        if rest.len() != userland_len {
-            return Err(format!(
-                "snapshot helper userland length mismatch: declared {}, got {}",
-                userland_len,
-                rest.len()
-            ));
-        }
-        Some(
-            String::from_utf8(rest.to_vec())
-                .map_err(|error| format!("snapshot helper userland is not UTF-8: {error}"))?,
-        )
-    };
-    let bridge_code = String::from_utf8(bridge_bytes.to_vec())
-        .map_err(|error| format!("snapshot helper bridge is not UTF-8: {error}"))?;
-    Ok((bridge_code, userland_code))
-}
-
-fn write_snapshot_helper_ok(blob: &[u8]) -> std::io::Result<()> {
-    let mut stdout = std::io::stdout().lock();
-    stdout.write_all(SNAPSHOT_HELPER_OK)?;
-    write_u64_io(&mut stdout, blob.len() as u64)?;
-    stdout.write_all(blob)?;
-    stdout.flush()
-}
-
-fn write_snapshot_helper_error(message: String) -> std::io::Result<()> {
-    let mut stdout = std::io::stdout().lock();
-    stdout.write_all(SNAPSHOT_HELPER_ERR)?;
-    write_u64_io(&mut stdout, message.len() as u64)?;
-    stdout.write_all(message.as_bytes())?;
-    stdout.flush()
-}
-
-fn write_u64(writer: &mut impl Write, value: u64) -> Result<(), String> {
-    write_u64_io(writer, value).map_err(|error| format!("write snapshot helper length: {error}"))
-}
-
-fn write_u64_io(writer: &mut impl Write, value: u64) -> std::io::Result<()> {
-    writer.write_all(&value.to_le_bytes())
-}
-
-fn read_u64_from_slice(input: &[u8]) -> Result<(u64, &[u8]), String> {
-    let bytes = input
-        .get(..8)
-        .ok_or_else(|| String::from("snapshot helper payload ended before u64"))?;
-    let mut value = [0_u8; 8];
-    value.copy_from_slice(bytes);
-    Ok((u64::from_le_bytes(value), &input[8..]))
-}
-
-/// Inject default config globals needed by the bridge IIFE during snapshot creation.
-///
-/// These are placeholder values so bridge code that reads _processConfig or
-/// _osConfig at setup time doesn't fail. They're overwritten per-session
-/// after snapshot restore via inject_globals_from_payload.
-///
-/// Properties are set as READ_ONLY (not DONT_DELETE) so they remain
-/// configurable — inject_globals_from_payload can redefine them with
-/// READ_ONLY | DONT_DELETE after restore.
-fn inject_snapshot_defaults(scope: &mut v8::HandleScope) {
-    let context = scope.get_current_context();
-    let global = context.global(scope);
-
-    // _processConfig: default placeholder (overwritten per-session)
-    let pc_code = r#"({
-        cwd: "/",
-        env: {},
-        timing_mitigation: "off",
-        frozen_time_ms: null,
-        high_resolution_time: false
-    })"#;
-    let pc_source = v8::String::new(scope, pc_code).unwrap();
-    let pc_script = v8::Script::compile(scope, pc_source, None).unwrap();
-    let pc_val = pc_script.run(scope).unwrap();
-    if let Some(pc_obj) = pc_val.to_object(scope) {
-        pc_obj.set_integrity_level(scope, v8::IntegrityLevel::Frozen);
-    }
-    let pc_key = v8::String::new(scope, "_processConfig").unwrap();
-    // READ_ONLY only — no DONT_DELETE so the property remains configurable
-    // for override after snapshot restore
-    let attr = v8::PropertyAttribute::READ_ONLY;
-    global.define_own_property(scope, pc_key.into(), pc_val, attr);
-
-    // _osConfig: default placeholder (overwritten per-session)
-    let oc_code = r#"({
-        homedir: "/root",
-        tmpdir: "/tmp",
-        platform: "linux",
-        arch: "x64"
-    })"#;
-    let oc_source = v8::String::new(scope, oc_code).unwrap();
-    let oc_script = v8::Script::compile(scope, oc_source, None).unwrap();
-    let oc_val = oc_script.run(scope).unwrap();
-    if let Some(oc_obj) = oc_val.to_object(scope) {
-        oc_obj.set_integrity_level(scope, v8::IntegrityLevel::Frozen);
-    }
-    let oc_key = v8::String::new(scope, "_osConfig").unwrap();
-    // READ_ONLY only — no DONT_DELETE so the property remains configurable
-    let attr2 = v8::PropertyAttribute::READ_ONLY;
-    global.define_own_property(scope, oc_key.into(), oc_val, attr2);
-}
-
-/// Create a V8 isolate restored from a snapshot blob.
-///
-/// The external references must match those used during snapshot creation
-/// (provided by bridge::external_refs()).
-///
-/// `blob` must be owned or 'static data — `Vec<u8>`, `Box<[u8]>`, or
-/// `v8::StartupData` all work. The data is copied into the isolate during
-/// creation; V8 does not retain a reference after `Isolate::new()` returns.
-pub fn create_isolate_from_snapshot<B>(blob: B, heap_limit_mb: Option<u32>) -> v8::OwnedIsolate
-where
-    B: std::ops::Deref<Target = [u8]> + std::borrow::Borrow<[u8]> + 'static,
-{
-    init_v8_platform();
-
-    // `None` applies the bounded-by-default cap (`DEFAULT_HEAP_LIMIT_MB`), same as
-    // the fresh-isolate path — a snapshot-restored isolate is never unbounded.
-    let limit = heap_limit_mb.unwrap_or(crate::isolate::DEFAULT_HEAP_LIMIT_MB);
-    let limit_bytes = (limit as usize) * 1024 * 1024;
-    let params = v8::CreateParams::default()
-        .snapshot_blob(blob)
-        .external_references(&**external_refs())
-        .heap_limits(0, limit_bytes);
-    let mut isolate = crate::isolate::with_isolate_lifecycle_lock(|| v8::Isolate::new(params));
-    crate::isolate::configure_isolate(&mut isolate);
-    // Same OOM guard as the fresh-isolate path: terminate this isolate on heap
-    // exhaustion instead of fatal-aborting the shared process (F-003).
-    crate::isolate::install_heap_limit_guard(&mut isolate);
-    isolate
-}
-
-pub type SnapshotCacheKey = [u8; 32];
-
-/// Thread-safe snapshot cache keyed by bridge code digest.
-///
-/// Uses two-phase locking with per-key in-flight tracking so concurrent
-/// callers requesting different bridge code variants are not blocked by
-/// each other. Callers requesting the same variant wait on a condvar
-/// instead of creating duplicate snapshots.
-pub struct SnapshotCache {
-    inner: Mutex<CacheInner>,
-    max_entries: usize,
-}
-
-struct CacheInner {
-    entries: Vec<CacheEntry>,
-    /// Per-key in-flight tracking: callers for the same digest wait on the
-    /// condvar instead of creating duplicate snapshots.
-    in_flight: HashMap<SnapshotCacheKey, Arc<InFlightEntry>>,
-}
-
-struct CacheEntry {
-    key: SnapshotCacheKey,
-    /// Snapshot blob bytes (copied from v8::StartupData).
-    /// Stored as Vec<u8> rather than StartupData because StartupData
-    /// contains raw pointers that are not Send/Sync.
-    blob: Arc<Vec<u8>>,
-}
-
-/// Shared state for an in-flight snapshot creation. The creator thread
-/// populates `result` and notifies all waiters via `done`.
-struct InFlightEntry {
-    result: Mutex<Option<Result<Arc<Vec<u8>>, String>>>,
-    done: Condvar,
-}
-
-impl SnapshotCache {
-    pub fn new(max_entries: usize) -> Self {
-        SnapshotCache {
-            inner: Mutex::new(CacheInner {
-                entries: Vec::new(),
-                in_flight: HashMap::new(),
-            }),
-            max_entries,
-        }
-    }
-
-    /// Get or create a snapshot for the given bridge code.
-    ///
-    /// Two-phase locking: the cache mutex is held only for lookups and
-    /// inserts, never during snapshot creation. Per-key in-flight tracking
-    /// prevents duplicate snapshot creation for the same bridge code.
-    pub fn get_or_create(&self, bridge_code: &str) -> Result<Arc<Vec<u8>>, String> {
-        self.get_or_create_with_userland(bridge_code, None)
-    }
-
-    /// Return a cached snapshot if present. This never creates a snapshot or
-    /// waits on in-flight creation.
-    pub fn try_get_with_userland(
-        &self,
-        bridge_code: &str,
-        userland_code: Option<&str>,
-    ) -> Option<Arc<Vec<u8>>> {
-        let key = snapshot_cache_key(bridge_code, userland_code);
-        let mut inner = self.inner.lock().unwrap();
-        if let Some(pos) = inner.entries.iter().position(|e| e.key == key) {
-            let entry = inner.entries.remove(pos);
-            let blob = Arc::clone(&entry.blob);
-            inner.entries.push(entry);
-            Some(blob)
-        } else {
-            None
-        }
-    }
-
-    /// Like [`get_or_create`], but the snapshot also captures an evaluated userland
-    /// (agent-SDK) graph. The cache key is the digest of BOTH `bridge_code` and
-    /// `userland_code`, so a change to either — i.e. any change in the bundled
-    /// dependency graph — invalidates the entry and triggers exactly one rebuild.
-    pub fn get_or_create_with_userland(
-        &self,
-        bridge_code: &str,
-        userland_code: Option<&str>,
-    ) -> Result<Arc<Vec<u8>>, String> {
-        let key = snapshot_cache_key(bridge_code, userland_code);
-
-        // Phase 1: short lock — check cache, check in-flight, or claim creation
-        let in_flight = {
-            let mut inner = self.inner.lock().unwrap();
-
-            // Cache hit — move to end (most recently used)
-            if let Some(pos) = inner.entries.iter().position(|e| e.key == key) {
-                let entry = inner.entries.remove(pos);
-                let blob = Arc::clone(&entry.blob);
-                inner.entries.push(entry);
-                return Ok(blob);
-            }
-
-            // Another thread is already creating this snapshot — wait on it
-            if let Some(entry) = inner.in_flight.get(&key) {
-                Some(Arc::clone(entry))
-            } else {
-                // We're the creator — register in-flight and release the lock
-                let entry = Arc::new(InFlightEntry {
-                    result: Mutex::new(None),
-                    done: Condvar::new(),
-                });
-                inner.in_flight.insert(key, Arc::clone(&entry));
-                None
-            }
-        };
-
-        // Wait path: another thread is creating this snapshot
-        if let Some(entry) = in_flight {
-            let mut result = entry.result.lock().unwrap();
-            while result.is_none() {
-                result = entry.done.wait(result).unwrap();
-            }
-            return result.as_ref().unwrap().clone();
-        }
-
-        // Phase 2: create snapshot without holding the cache lock
-        let creation_result = create_snapshot_inner(bridge_code, userland_code).map(Arc::new);
-
-        // Phase 3: short lock — insert result, notify waiters, clean up
-        {
-            let mut inner = self.inner.lock().unwrap();
-
-            if let Ok(ref arc) = creation_result {
-                // LRU eviction: remove oldest (front) entry when at capacity
-                if inner.entries.len() >= self.max_entries {
-                    inner.entries.remove(0);
-                }
-                inner.entries.push(CacheEntry {
-                    key,
-                    blob: Arc::clone(arc),
-                });
-            }
-
-            // Publish result to waiters and remove in-flight entry
-            if let Some(entry) = inner.in_flight.remove(&key) {
-                let mut result = entry.result.lock().unwrap();
-                *result = Some(creation_result.clone());
-                entry.done.notify_all();
-            }
-        }
-
-        creation_result
-    }
-}
-
-/// Cache key over bridge + optional userland code. With no userland this is just
-/// the sha256 of the bridge code (a NUL separator is only added when userland is
-/// present), so existing bridge-only entries keep their historical keys.
-pub fn snapshot_cache_key(bridge_code: &str, userland_code: Option<&str>) -> SnapshotCacheKey {
-    match userland_code {
-        None => {
-            let mut hasher = Sha256::new();
-            hasher.update(bridge_code.as_bytes());
-            hasher.finalize().into()
-        }
-        Some(userland_code) => {
-            let mut buf = Vec::with_capacity(bridge_code.len() + 1 + userland_code.len());
-            buf.extend_from_slice(bridge_code.as_bytes());
-            buf.push(0);
-            buf.extend_from_slice(userland_code.as_bytes());
-            let mut hasher = Sha256::new();
-            hasher.update(&buf);
-            hasher.finalize().into()
-        }
-    }
-}
-
-#[doc(hidden)]
-pub fn run_snapshot_consolidated_checks() {
-    fn eval(isolate: &mut v8::OwnedIsolate, code: &str) -> String {
-        let scope = &mut v8::HandleScope::new(isolate);
-        let context = v8::Context::new(scope, Default::default());
-        let scope = &mut v8::ContextScope::new(scope, context);
-        let source = v8::String::new(scope, code).unwrap();
-        let script = v8::Script::compile(scope, source, None).unwrap();
-        let result = script.run(scope).unwrap();
-        result.to_rust_string_lossy(scope)
-    }
-
-    // Keep snapshot coverage in a dedicated integration-test process.
-    // Running it in the shared unit-test binary still triggers a V8 teardown
-    // SIGSEGV after the test completes.
-    init_v8_platform();
-    let _ = external_refs();
-
-    // --- Part 1: Snapshot creation returns non-empty blob ---
-    {
-        let bridge_code = "(function() { globalThis.__bridge_init = true; })();";
-        let blob = create_snapshot(bridge_code).expect("snapshot creation should succeed");
-        assert!(!blob.is_empty(), "snapshot blob should be non-empty");
-    }
-
-    // --- Part 2: Restored isolate executes JS correctly ---
-    {
-        let bridge_code = "(function() { globalThis.__testValue = 42; })();";
-        let blob = create_snapshot(bridge_code).expect("snapshot creation should succeed");
-        let mut isolate = create_isolate_from_snapshot(blob, None);
-        // Fresh context on restored isolate — bridge globals are in snapshot's
-        // default context, not in a new context. Verify isolate is functional.
-        assert_eq!(eval(&mut isolate, "1 + 1"), "2");
-    }
-
-    // --- Part 3: Restored isolate respects heap_limit_mb ---
-    {
-        let bridge_code = "/* empty bridge */";
-        let blob = create_snapshot(bridge_code).expect("snapshot creation should succeed");
-        let mut isolate = create_isolate_from_snapshot(blob, Some(8));
-        assert_eq!(eval(&mut isolate, "'heap ok'"), "heap ok");
-    }
-
-    // --- Part 4: Normal blob is under 50MB limit ---
-    {
-        let bridge_code = "(function() { globalThis.x = 1; })();";
-        let blob = create_snapshot(bridge_code).expect("snapshot creation should succeed");
-        assert!(
-            blob.len() < MAX_SNAPSHOT_BLOB_BYTES,
-            "normal bridge code should produce blob under 50MB limit"
-        );
-    }
-
-    // --- Part 5: Three sequential restores from same snapshot data ---
-    {
-        let bridge_code = "(function() { globalThis.__counter = 0; })();";
-        let blob = create_snapshot(bridge_code).expect("snapshot creation should succeed");
-        let blob_bytes: Vec<u8> = blob.to_vec();
-
-        for i in 0..3 {
-            let mut isolate = create_isolate_from_snapshot(blob_bytes.clone(), None);
-            let result = eval(&mut isolate, &format!("{} + 1", i));
-            assert_eq!(result, format!("{}", i + 1));
-        }
-    }
-
-    // --- Part 6: Cache hit returns same Arc ---
-    {
-        let cache = SnapshotCache::new(4);
-        let bridge_code = "(function() { globalThis.__cached = 1; })();";
-
-        let arc1 = cache
-            .get_or_create(bridge_code)
-            .expect("first get_or_create");
-        let arc2 = cache
-            .get_or_create(bridge_code)
-            .expect("second get_or_create");
-
-        // Same Arc (same pointer) — cache hit, not a new snapshot
-        assert!(
-            Arc::ptr_eq(&arc1, &arc2),
-            "cache hit should return same Arc"
-        );
-    }
-
-    // --- Part 7: Cache miss creates new snapshot ---
-    {
-        let cache = SnapshotCache::new(4);
-        let code_a = "(function() { globalThis.__a = 1; })();";
-        let code_b = "(function() { globalThis.__b = 2; })();";
-
-        let arc_a = cache.get_or_create(code_a).expect("create A");
-        let arc_b = cache.get_or_create(code_b).expect("create B");
-
-        // Different bridge code → different Arc
-        assert!(
-            !Arc::ptr_eq(&arc_a, &arc_b),
-            "different code should produce different Arc"
-        );
-
-        // Verify both are usable
-        let mut iso_a = create_isolate_from_snapshot((*arc_a).clone(), None);
-        assert_eq!(eval(&mut iso_a, "1 + 1"), "2");
-
-        let mut iso_b = create_isolate_from_snapshot((*arc_b).clone(), None);
-        assert_eq!(eval(&mut iso_b, "2 + 2"), "4");
-    }
-
-    // --- Part 8: LRU eviction removes oldest entry ---
-    {
-        let cache = SnapshotCache::new(2);
-        let code_1 = "(function() { globalThis.__v1 = 1; })();";
-        let code_2 = "(function() { globalThis.__v2 = 2; })();";
-        let code_3 = "(function() { globalThis.__v3 = 3; })();";
-
-        let arc_1 = cache.get_or_create(code_1).expect("create 1");
-        let _arc_2 = cache.get_or_create(code_2).expect("create 2");
-
-        // Cache is full (2 entries). Adding a third should evict code_1.
-        let _arc_3 = cache.get_or_create(code_3).expect("create 3");
-
-        // code_1 should be evicted — re-requesting it should return a new Arc
-        let arc_1_new = cache.get_or_create(code_1).expect("re-create 1");
-        assert!(
-            !Arc::ptr_eq(&arc_1, &arc_1_new),
-            "evicted entry should produce a new Arc on re-creation"
-        );
-
-        // code_2 should still be cached (it was accessed before code_3 but not evicted)
-        // After eviction of code_1, cache had [code_2, code_3], then adding code_1 evicts code_2
-        // Actually: after inserting code_3, cache was [code_2, code_3] (code_1 evicted).
-        // Then inserting code_1 again: cache is full (2), evicts code_2 → cache is [code_3, code_1].
-    }
-
-    // --- Part 9: Concurrent get_or_create creates only one snapshot ---
-    {
-        use std::sync::atomic::{AtomicUsize, Ordering};
-
-        let cache = Arc::new(SnapshotCache::new(4));
-        let bridge_code = "(function() { globalThis.__concurrent = 1; })();";
-
-        // Pre-warm — to avoid measuring snapshot creation races, verify
-        // that after one creation, N threads all get the same Arc
-        let first = cache.get_or_create(bridge_code).expect("pre-warm");
-
-        let num_threads = 4;
-        let barrier = Arc::new(std::sync::Barrier::new(num_threads));
-        let same_count = Arc::new(AtomicUsize::new(0));
-
-        let mut handles = vec![];
-        for _ in 0..num_threads {
-            let cache = Arc::clone(&cache);
-            let barrier = Arc::clone(&barrier);
-            let first = Arc::clone(&first);
-            let same_count = Arc::clone(&same_count);
-            let code = bridge_code.to_string();
-
-            handles.push(std::thread::spawn(move || {
-                barrier.wait();
-                let arc = cache.get_or_create(&code).expect("concurrent get");
-                if Arc::ptr_eq(&arc, &first) {
-                    same_count.fetch_add(1, Ordering::Relaxed);
-                }
-            }));
-        }
-
-        for h in handles {
-            h.join().expect("thread join");
-        }
-
-        assert_eq!(
-            same_count.load(Ordering::Relaxed),
-            num_threads,
-            "all concurrent callers should get the same cached Arc"
-        );
-    }
-
-    // --- Part 10: Guest WebAssembly remains available after snapshot restore ---
-    {
-        let bridge_code = "(function() { globalThis.__wasm_test = true; })();";
-        let blob = create_snapshot(bridge_code).expect("snapshot creation");
-        let mut isolate = create_isolate_from_snapshot(blob, None);
-
-        let scope = &mut v8::HandleScope::new(&mut isolate);
-        let context = v8::Context::new(scope, Default::default());
-        let scope = &mut v8::ContextScope::new(scope, context);
-
-        let wasm_test_code = r#"
-                (function() {
-                    var bytes = new Uint8Array([
-                        0x00, 0x61, 0x73, 0x6d, 0x01, 0x00, 0x00, 0x00,
-                        0x01, 0x07, 0x01, 0x60, 0x02, 0x7f, 0x7f, 0x01, 0x7f,
-                        0x03, 0x02, 0x01, 0x00,
-                        0x07, 0x07, 0x01, 0x03, 0x61, 0x64, 0x64, 0x00, 0x00,
-                        0x0a, 0x09, 0x01, 0x07, 0x00, 0x20, 0x00, 0x20, 0x01, 0x6a, 0x0b,
-                    ]);
-                    var module = new WebAssembly.Module(bytes);
-                    var instance = new WebAssembly.Instance(module, {});
-                    return String(instance.exports.add(2, 3));
-                })()
-            "#;
-        let source = v8::String::new(scope, wasm_test_code).unwrap();
-        let script = v8::Script::compile(scope, source, None).unwrap();
-        let result = script.run(scope).unwrap();
-        let result_str = result.to_rust_string_lossy(scope);
-
-        assert_eq!(
-            result_str, "5",
-            "WASM should remain enabled after snapshot restore"
-        );
-    }
-
-    // --- Part 11: Session isolation — fresh contexts from same snapshot ---
-    // Verifies that state set in one session's context does not leak
-    // to another session's context (fresh context per session).
-    {
-        let bridge_code = "(function() { globalThis.__shared_bridge = 'ok'; })();";
-        let blob = create_snapshot(bridge_code).expect("snapshot creation");
-        let blob_bytes: Vec<u8> = blob.to_vec();
-
-        // "Session A": set a global variable
-        {
-            let mut isolate = create_isolate_from_snapshot(blob_bytes.clone(), None);
-            let scope = &mut v8::HandleScope::new(&mut isolate);
-            let context = v8::Context::new(scope, Default::default());
-            let scope = &mut v8::ContextScope::new(scope, context);
-
-            let source =
-                v8::String::new(scope, "globalThis.__session_secret = 'session-a-data';").unwrap();
-            let script = v8::Script::compile(scope, source, None).unwrap();
-            script.run(scope);
-
-            // Verify session A can see its own data
-            let check = v8::String::new(scope, "globalThis.__session_secret").unwrap();
-            let script = v8::Script::compile(scope, check, None).unwrap();
-            let result = script.run(scope).unwrap();
-            assert_eq!(result.to_rust_string_lossy(scope), "session-a-data");
-        }
-
-        // "Session B": fresh context from same snapshot should NOT see session A's data
-        {
-            let mut isolate = create_isolate_from_snapshot(blob_bytes.clone(), None);
-            let scope = &mut v8::HandleScope::new(&mut isolate);
-            let context = v8::Context::new(scope, Default::default());
-            let scope = &mut v8::ContextScope::new(scope, context);
-
-            let source = v8::String::new(scope, "typeof globalThis.__session_secret").unwrap();
-            let script = v8::Script::compile(scope, source, None).unwrap();
-            let result = script.run(scope).unwrap();
-            assert_eq!(
-                result.to_rust_string_lossy(scope),
-                "undefined",
-                "session B should not see session A's global state"
-            );
-        }
-    }
-
-    // --- Part 12: External references survive snapshot restore ---
-    // Verifies that FunctionTemplates registered on a restored isolate
-    // correctly dispatch to Rust bridge callbacks via external_refs().
-    {
-        use crate::bridge::{register_async_bridge_fns, register_sync_bridge_fns, PendingPromises};
-        use crate::host_call::BridgeCallContext;
-
-        let bridge_code = "(function() { globalThis.__ext_ref_test = true; })();";
-        let blob = create_snapshot(bridge_code).expect("snapshot creation");
-        let mut isolate = create_isolate_from_snapshot(blob, None);
-
-        // Create minimal BridgeCallContext (sync call will fail but we
-        // test that the FunctionTemplate dispatches without crash)
-        let (event_tx, _event_rx) =
-            crossbeam_channel::unbounded::<crate::session::RuntimeEventEnvelope>();
-        let (_cmd_tx, _cmd_rx) = crossbeam_channel::unbounded::<crate::session::SessionCommand>();
-        let call_id_router: crate::host_call::CallIdRouter =
-            Arc::new(Mutex::new(std::collections::HashMap::new()));
-
-        let receiver = crate::host_call::ReaderBridgeResponseReceiver::new(Box::new(
-            std::io::Cursor::new(Vec::<u8>::new()),
-        ));
-        let sender = crate::host_call::ChannelRuntimeEventSender::new(event_tx, None);
-        let bridge_ctx = BridgeCallContext::with_receiver(
-            Box::new(sender),
-            Box::new(receiver),
-            "test-session".to_string(),
-            call_id_router,
-            Arc::new(std::sync::atomic::AtomicU64::new(1)),
-        );
-        let pending = PendingPromises::new();
-
-        let scope = &mut v8::HandleScope::new(&mut isolate);
-        let context = v8::Context::new(scope, Default::default());
-        let scope = &mut v8::ContextScope::new(scope, context);
-
-        // Register bridge functions on the restored isolate
-        let _sync_store = register_sync_bridge_fns(
-            scope,
-            &bridge_ctx as *const BridgeCallContext,
-            &["_testSync"],
-        );
-        let _async_store = register_async_bridge_fns(
-            scope,
-            &bridge_ctx as *const BridgeCallContext,
-            &pending as *const PendingPromises,
-            &["_testAsync"],
-        );
-
-        // Verify the functions exist as globals
-        let check = v8::String::new(scope, "typeof _testSync").unwrap();
-        let script = v8::Script::compile(scope, check, None).unwrap();
-        let result = script.run(scope).unwrap();
-        assert_eq!(
-            result.to_rust_string_lossy(scope),
-            "function",
-            "_testSync should be a function on restored isolate"
-        );
-
-        let check = v8::String::new(scope, "typeof _testAsync").unwrap();
-        let script = v8::Script::compile(scope, check, None).unwrap();
-        let result = script.run(scope).unwrap();
-        assert_eq!(
-            result.to_rust_string_lossy(scope),
-            "function",
-            "_testAsync should be a function on restored isolate"
-        );
-    }
-
-    // --- Part 13: Register stub bridge functions on V8 global ---
-    // Verifies that register_stub_bridge_fns places functions on the global
-    // and that they have the correct typeof without calling them.
-    {
-        use crate::bridge::register_stub_bridge_fns;
-
-        // Use a snapshot-based isolate (consistent with other parts)
-        let bridge_code = "/* stub test */";
-        let blob = create_snapshot(bridge_code).expect("snapshot creation");
-        let mut isolate = create_isolate_from_snapshot(blob, None);
-
-        let scope = &mut v8::HandleScope::new(&mut isolate);
-        let context = v8::Context::new(scope, Default::default());
-        let scope = &mut v8::ContextScope::new(scope, context);
-
-        register_stub_bridge_fns(
-            scope,
-            &["_log", "_error", "_fsReadFile", "_loadPolyfill"],
-            &["_scheduleTimer", "_dynamicImport"],
-        );
-
-        let check = v8::String::new(
-            scope,
-            r#"
-                (function() {
-                    var names = ['_log', '_error', '_fsReadFile', '_loadPolyfill',
-                                 '_scheduleTimer', '_dynamicImport'];
-                    for (var i = 0; i < names.length; i++) {
-                        if (typeof globalThis[names[i]] !== 'function') {
-                            return 'FAIL: ' + names[i] + ' is ' + typeof globalThis[names[i]];
-                        }
-                    }
-                    return 'OK';
-                })()
-            "#,
-        )
-        .unwrap();
-        let script = v8::Script::compile(scope, check, None).unwrap();
-        let result = script.run(scope).unwrap();
-        assert_eq!(
-            result.to_rust_string_lossy(scope),
-            "OK",
-            "all stub bridge functions should be registered as functions"
-        );
-    }
-
-    // --- Part 14: Bridge IIFE executes against stubs + snapshot creation ---
-    // Verifies that setup-time code can reference stub functions (typeof,
-    // closure wrapping, getter facade) without calling them, and that the
-    // resulting context can be snapshotted.
-    {
-        use crate::bridge::register_stub_bridge_fns;
-
-        let mut snapshot_isolate = v8::Isolate::snapshot_creator(Some(external_refs()), None);
-        {
-            let scope = &mut v8::HandleScope::new(&mut snapshot_isolate);
-            let context = v8::Context::new(scope, Default::default());
-            let scope = &mut v8::ContextScope::new(scope, context);
-
-            // Register bridge functions as stubs (no External data).
-            let sync_bridge_fns = sync_bridge_fns();
-            let async_bridge_fns = async_bridge_fns();
-            register_stub_bridge_fns(scope, sync_bridge_fns, async_bridge_fns);
-
-            // Simulate bridge IIFE: reference all bridge functions, set up
-            // closures and getter facade, but never call any bridge function
-            let iife_code = r#"
-                    (function() {
-                        // Verify bridge functions exist (like ivm-compat shim)
-                        var syncKeys = ['_log', '_error', '_resolveModule', '_loadFile', '_moduleFormat',
-                            '_cryptoRandomFill', '_fsReadFile', '_fsWriteFile',
-                            '_childProcessSpawnStart', '_childProcessPoll', '_childProcessSpawnSync'];
-                        var asyncKeys = ['_dynamicImport', '_scheduleTimer',
-                            '_networkHttpServerListenRaw'];
-
-                        for (var i = 0; i < syncKeys.length; i++) {
-                            if (typeof globalThis[syncKeys[i]] !== 'function') {
-                                throw new Error('Missing sync: ' + syncKeys[i]);
-                            }
-                        }
-                        for (var i = 0; i < asyncKeys.length; i++) {
-                            if (typeof globalThis[asyncKeys[i]] !== 'function') {
-                                throw new Error('Missing async: ' + asyncKeys[i]);
-                            }
-                        }
-
-                        // Simulate getter-based fs facade (setup only, no calls)
-                        var _fs = {};
-                        Object.defineProperties(_fs, {
-                            readFile:  { get: function() { return globalThis._fsReadFile; },  enumerable: true },
-                            writeFile: { get: function() { return globalThis._fsWriteFile; }, enumerable: true },
-                        });
-                        globalThis._fs = _fs;
-
-                        // Verify getter returns function reference without calling it
-                        if (typeof _fs.readFile !== 'function') {
-                            throw new Error('Getter should return function, got ' + typeof _fs.readFile);
-                        }
-
-                        // Simulate closure wrapping (setup only, no calls)
-                        globalThis.__wrappedLog = function() {
-                            return globalThis._log.apply(null, arguments);
-                        };
-
-                        globalThis.__bridge_setup_complete = true;
-                    })();
-                "#;
-            let source = v8::String::new(scope, iife_code).unwrap();
-            let script = v8::Script::compile(scope, source, None).unwrap();
-            let result = script.run(scope);
-            assert!(
-                result.is_some(),
-                "bridge IIFE should execute without error against stub functions"
-            );
-
-            // Verify setup completed
-            let check =
-                v8::String::new(scope, "String(globalThis.__bridge_setup_complete)").unwrap();
-            let script = v8::Script::compile(scope, check, None).unwrap();
-            let val = script.run(scope).unwrap();
-            assert_eq!(
-                val.to_rust_string_lossy(scope),
-                "true",
-                "bridge setup should complete with stub functions"
-            );
-
-            scope.set_default_context(context);
-        }
-
-        let blob = snapshot_isolate.create_blob(v8::FunctionCodeHandling::Keep);
-        assert!(
-            blob.is_some(),
-            "snapshot creation should succeed with stub bridge functions"
-        );
-        assert!(
-            !blob.unwrap().is_empty(),
-            "snapshot blob should be non-empty"
-        );
-    }
-
-    // --- Part 15: create_snapshot() auto-registers stubs and injects defaults ---
-    // Verifies that create_snapshot() registers all bridge function stubs
-    // and injects _processConfig/_osConfig defaults before running bridge code.
-    {
-        // Bridge IIFE that verifies stubs and config globals exist
-        let iife_code = r#"
-                (function() {
-                    // Verify all sync bridge functions are registered as stubs
-                    var syncFns = ['_log', '_error', '_resolveModule', '_loadFile',
-                        '_moduleFormat', '_loadPolyfill', '_cryptoRandomFill', '_cryptoRandomUUID',
-                        '_fsReadFile', '_fsWriteFile', '_fsReadFileBinary',
-                        '_fsWriteFileBinary', '_fsReadDir', '_fsMkdir', '_fsRmdir',
-                        '_fsExists', '_fsStat', '_fsUnlink', '_fsRename', '_fsChmod',
-                        '_fsChown', '_fsLink', '_fsSymlink', '_fsReadlink', '_fsLstat',
-                        '_fsTruncate', '_fsUtimes', '_childProcessSpawnStart',
-                        '_childProcessPoll', '_childProcessStdinWrite', '_childProcessStdinClose',
-                        '_childProcessKill', '_childProcessSpawnSync'];
-                    for (var i = 0; i < syncFns.length; i++) {
-                        if (typeof globalThis[syncFns[i]] !== 'function') {
-                            throw new Error('Missing sync stub: ' + syncFns[i] +
-                                ' (typeof=' + typeof globalThis[syncFns[i]] + ')');
-                        }
-                    }
-
-                    // Verify all async bridge functions are registered as stubs
-                    var asyncFns = ['_dynamicImport', '_scheduleTimer',
-                        '_networkDnsLookupRaw',
-                        '_networkDnsResolveRaw',
-                        '_networkHttpServerListenRaw',
-                        '_networkHttpServerCloseRaw', '_networkHttpServerWaitRaw',
-                        '_networkHttp2ServerWaitRaw', '_networkHttp2SessionWaitRaw'];
-                    for (var i = 0; i < asyncFns.length; i++) {
-                        if (typeof globalThis[asyncFns[i]] !== 'function') {
-                            throw new Error('Missing async stub: ' + asyncFns[i] +
-                                ' (typeof=' + typeof globalThis[asyncFns[i]] + ')');
-                        }
-                    }
-
-                    // Verify _processConfig default was injected
-                    if (typeof _processConfig !== 'object' || _processConfig === null) {
-                        throw new Error('_processConfig not injected: ' + typeof _processConfig);
-                    }
-                    if (_processConfig.cwd !== '/') {
-                        throw new Error('_processConfig.cwd should be "/", got: ' + _processConfig.cwd);
-                    }
-
-                    // Verify _osConfig default was injected
-                    if (typeof _osConfig !== 'object' || _osConfig === null) {
-                        throw new Error('_osConfig not injected: ' + typeof _osConfig);
-                    }
-                    if (_osConfig.platform !== 'linux') {
-                        throw new Error('_osConfig.platform should be "linux", got: ' + _osConfig.platform);
-                    }
-
-                    globalThis.__part15_ok = true;
-                })();
-            "#;
-        let blob = create_snapshot(iife_code).expect(
-            "create_snapshot should succeed with bridge code that checks stubs and defaults",
-        );
-        assert!(!blob.is_empty(), "snapshot blob should be non-empty");
-
-        // Verify the snapshot can be restored
-        let mut isolate = create_isolate_from_snapshot(blob, None);
-        assert_eq!(eval(&mut isolate, "1 + 1"), "2");
-    }
-
-    // --- Part 16: create_snapshot() with getter facade and closures ---
-    // Verifies that the full bridge pattern (stubs, closures, getter facade,
-    // config globals) works through create_snapshot() and the context is
-    // correctly snapshotted via set_default_context.
-    {
-        let iife_code = r#"
-                (function() {
-                    // Set up getter-based fs facade referencing bridge stubs
-                    var _fs = {};
-                    Object.defineProperties(_fs, {
-                        readFile:  { get: function() { return globalThis._fsReadFile; },  enumerable: true },
-                        writeFile: { get: function() { return globalThis._fsWriteFile; }, enumerable: true },
-                    });
-                    globalThis._fs = _fs;
-
-                    // Set up closure wrapping a bridge stub
-                    globalThis.myLog = function() {
-                        return globalThis._log.apply(null, arguments);
-                    };
-
-                    // Set up a require-like function (doesn't call _loadPolyfill at setup)
-                    globalThis.require = function(name) {
-                        return globalThis._loadPolyfill(name);
-                    };
-
-                    // Set up a console-like object
-                    globalThis.console = {
-                        log: function() { globalThis._log.apply(null, arguments); },
-                        error: function() { globalThis._error.apply(null, arguments); },
-                    };
-
-                    // Read _processConfig at setup time (like process.cwd initialization)
-                    globalThis.__initialCwd = _processConfig.cwd;
-
-                    globalThis.__part16_setup = true;
-                })();
-            "#;
-        let blob = create_snapshot(iife_code)
-            .expect("create_snapshot should succeed with full bridge IIFE pattern");
-        assert!(!blob.is_empty());
-
-        // Restore and verify default context has the bridge infrastructure
-        let blob_bytes: Vec<u8> = blob.to_vec();
-        let mut isolate = create_isolate_from_snapshot(blob_bytes, None);
-        let scope = &mut v8::HandleScope::new(&mut isolate);
-        let context = v8::Context::new(scope, Default::default());
-        let scope = &mut v8::ContextScope::new(scope, context);
-
-        // Check that bridge infrastructure from the IIFE is in the default context
-        let check_code = r#"
-                (function() {
-                    var results = [];
-                    results.push('_fs=' + (typeof _fs === 'object'));
-                    results.push('_fs.readFile=' + (typeof _fs.readFile === 'function'));
-                    results.push('myLog=' + (typeof myLog === 'function'));
-                    results.push('require=' + (typeof require === 'function'));
-                    results.push('console.log=' + (typeof console.log === 'function'));
-                    results.push('console.error=' + (typeof console.error === 'function'));
-                    results.push('__initialCwd=' + __initialCwd);
-                    results.push('__part16_setup=' + __part16_setup);
-                    return results.join(';');
-                })()
-            "#;
-        let source = v8::String::new(scope, check_code).unwrap();
-        let script = v8::Script::compile(scope, source, None).unwrap();
-        let result = script.run(scope).unwrap();
-        let result_str = result.to_rust_string_lossy(scope);
-
-        assert_eq!(
-            result_str,
-            "_fs=true;_fs.readFile=true;myLog=true;require=true;console.log=true;console.error=true;__initialCwd=/;__part16_setup=true",
-            "restored context should have all bridge infrastructure from the IIFE"
-        );
-    }
-
-    // --- Part 17: SnapshotCache works with context-snapshot create_snapshot ---
-    // Verifies cache hit/miss still works now that create_snapshot registers stubs.
-    {
-        let cache = SnapshotCache::new(4);
-        let code = r#"
-                (function() {
-                    // Verify stubs are present (create_snapshot registers them)
-                    if (typeof _log !== 'function') throw new Error('no _log stub');
-                    if (typeof _processConfig !== 'object') throw new Error('no _processConfig');
-                    globalThis.__cached_context = true;
-                })();
-            "#;
-
-        let arc1 = cache.get_or_create(code).expect("first get_or_create");
-        let arc2 = cache.get_or_create(code).expect("second get_or_create");
-        assert!(
-            Arc::ptr_eq(&arc1, &arc2),
-            "cache hit should return same Arc"
-        );
-
-        // Verify blob is usable
-        let mut isolate = create_isolate_from_snapshot((*arc1).clone(), None);
-        assert_eq!(eval(&mut isolate, "1 + 1"), "2");
-    }
-
-    // --- Part 18: Context restore + replace_bridge_fns dispatches correctly ---
-    // Verifies the full context snapshot restore flow: create snapshot with
-    // stubs, restore, replace stubs with real bridge functions, verify the
-    // replaced functions dispatch to the real Rust callbacks.
-    {
-        use crate::bridge::{replace_bridge_fns, PendingPromises};
-        use crate::host_call::BridgeCallContext;
-
-        // Create snapshot with stubs + simple bridge IIFE
-        let bridge_code = r#"
-                (function() {
-                    // Getter-based facade referencing globalThis._fsReadFile
-                    var _fs = {};
-                    Object.defineProperties(_fs, {
-                        readFile: { get: function() { return globalThis._fsReadFile; }, enumerable: true },
-                    });
-                    globalThis._fs = _fs;
-                    globalThis.__bridge_ready = true;
-                })();
-            "#;
-        let blob = create_snapshot(bridge_code).expect("snapshot creation");
-        let mut isolate = create_isolate_from_snapshot(blob, None);
-
-        // Create BridgeCallContext (sync calls will fail but we verify dispatch)
-        let (event_tx, _event_rx) =
-            crossbeam_channel::unbounded::<crate::session::RuntimeEventEnvelope>();
-        let call_id_router: crate::host_call::CallIdRouter =
-            Arc::new(Mutex::new(std::collections::HashMap::new()));
-        let receiver = crate::host_call::ReaderBridgeResponseReceiver::new(Box::new(
-            std::io::Cursor::new(Vec::<u8>::new()),
-        ));
-        let sender = crate::host_call::ChannelRuntimeEventSender::new(event_tx, None);
-        let bridge_ctx = BridgeCallContext::with_receiver(
-            Box::new(sender),
-            Box::new(receiver),
-            "test-session".to_string(),
-            call_id_router,
-            Arc::new(std::sync::atomic::AtomicU64::new(1)),
-        );
-        let pending = PendingPromises::new();
-
-        // Restore context and replace bridge functions
-        let scope = &mut v8::HandleScope::new(&mut isolate);
-        let context = v8::Context::new(scope, Default::default());
-        let scope = &mut v8::ContextScope::new(scope, context);
-
-        let (_sync_store, _async_store) = replace_bridge_fns(
-            scope,
-            &bridge_ctx as *const BridgeCallContext,
-            &pending as *const PendingPromises,
-            &["_log", "_fsReadFile"],
-            &["_scheduleTimer"],
-        );
-
-        // Verify bridge infrastructure from IIFE survives restore
-        let check = v8::String::new(
-            scope,
-            r#"
-                (function() {
-                    var results = [];
-                    results.push('__bridge_ready=' + globalThis.__bridge_ready);
-                    results.push('_fs_exists=' + (typeof _fs === 'object'));
-                    // Getter should resolve to the REPLACED function (not stub)
-                    results.push('_fs.readFile_type=' + typeof _fs.readFile);
-                    // Direct global should also be the replaced function
-                    results.push('_log_type=' + typeof _log);
-                    results.push('_scheduleTimer_type=' + typeof _scheduleTimer);
-                    return results.join(';');
-                })()
-            "#,
-        )
-        .unwrap();
-        let script = v8::Script::compile(scope, check, None).unwrap();
-        let result = script.run(scope).unwrap();
-        assert_eq!(
-            result.to_rust_string_lossy(scope),
-            "__bridge_ready=true;_fs_exists=true;_fs.readFile_type=function;_log_type=function;_scheduleTimer_type=function",
-            "restored context should have bridge IIFE state + replaced functions"
-        );
-    }
-
-    // --- Part 19: _processConfig is overridable after restore ---
-    // Verifies that inject_snapshot_defaults uses configurable properties
-    // so inject_globals_from_payload can override them per session.
-    {
-        use crate::bridge::serialize_v8_value;
-
-        let bridge_code = r#"
-                (function() {
-                    // Verify default _processConfig from snapshot
-                    globalThis.__snapshotCwd = _processConfig.cwd;
-                })();
-            "#;
-        let blob = create_snapshot(bridge_code).expect("snapshot creation");
-        let mut isolate = create_isolate_from_snapshot(blob, None);
-
-        let scope = &mut v8::HandleScope::new(&mut isolate);
-        let context = v8::Context::new(scope, Default::default());
-        let scope = &mut v8::ContextScope::new(scope, context);
-
-        // Verify snapshot defaults are present
-        let check = v8::String::new(scope, "__snapshotCwd").unwrap();
-        let script = v8::Script::compile(scope, check, None).unwrap();
-        let result = script.run(scope).unwrap();
-        assert_eq!(result.to_rust_string_lossy(scope), "/");
-
-        // Create a V8 payload to override _processConfig
-        let payload_code = r#"({
-                processConfig: { cwd: "/app", env: { FOO: "bar" }, timing_mitigation: "off", frozen_time_ms: null },
-                osConfig: { homedir: "/home/agentos", tmpdir: "/tmp", platform: "linux", arch: "arm64" }
-            })"#;
-        let payload_source = v8::String::new(scope, payload_code).unwrap();
-        let payload_script = v8::Script::compile(scope, payload_source, None).unwrap();
-        let payload_val = payload_script.run(scope).unwrap();
-        let payload_bytes = serialize_v8_value(scope, payload_val).expect("serialize payload");
-
-        // Inject per-session globals (overrides snapshot defaults)
-        crate::execution::inject_globals_from_payload(scope, &payload_bytes)
-            .expect("inject globals payload");
-
-        // Verify _processConfig was overridden
-        let check = v8::String::new(scope, "_processConfig.cwd").unwrap();
-        let script = v8::Script::compile(scope, check, None).unwrap();
-        let result = script.run(scope).unwrap();
-        assert_eq!(
-            result.to_rust_string_lossy(scope),
-            "/app",
-            "_processConfig.cwd should be overridden from '/' to '/app'"
-        );
-
-        // Verify _osConfig was overridden
-        let check = v8::String::new(scope, "_osConfig.arch").unwrap();
-        let script = v8::Script::compile(scope, check, None).unwrap();
-        let result = script.run(scope).unwrap();
-        assert_eq!(
-            result.to_rust_string_lossy(scope),
-            "arm64",
-            "_osConfig.arch should be overridden to 'arm64'"
-        );
-    }
-
-    // --- Part 19a: function globals survive snapshot restore ---
-    {
-        let bridge_code = r#"
-                (function() {
-                    globalThis.__snapshotFn = async function () { return "ok"; };
-                })();
-            "#;
-        let blob = create_snapshot(bridge_code).expect("snapshot creation");
-        let mut isolate = create_isolate_from_snapshot(blob, None);
-
-        let scope = &mut v8::HandleScope::new(&mut isolate);
-        let context = v8::Context::new(scope, Default::default());
-        let scope = &mut v8::ContextScope::new(scope, context);
-
-        let check = v8::String::new(
-            scope,
-            r#"(function() {
-                    return JSON.stringify({
-                        fnType: typeof globalThis.__snapshotFn,
-                        promiseType: typeof globalThis.__snapshotFn?.(),
-                    });
-                })()"#,
-        )
-        .unwrap();
-        let script = v8::Script::compile(scope, check, None).unwrap();
-        let result = script.run(scope).unwrap();
-        assert_eq!(
-            result.to_rust_string_lossy(scope),
-            r#"{"fnType":"function","promiseType":"object"}"#,
-            "function-valued globals should survive snapshot restore"
-        );
-    }
-
-    // --- Part 19b: bundled bridge installs fetch globals before snapshot restore ---
-    {
-        let bridge_code = concat!(
-            include_str!(concat!(env!("OUT_DIR"), "/v8-bridge.js")),
-            "\n",
-            include_str!(concat!(env!("OUT_DIR"), "/v8-bridge-zlib.js"))
-        );
-        let blob = create_snapshot(bridge_code).expect("snapshot creation");
-        let mut isolate = create_isolate_from_snapshot(blob, None);
-
-        let scope = &mut v8::HandleScope::new(&mut isolate);
-        let context = v8::Context::new(scope, Default::default());
-        let scope = &mut v8::ContextScope::new(scope, context);
-
-        let check = v8::String::new(
-            scope,
-            r#"(function() {
-                    return JSON.stringify({
-                        fetchType: typeof globalThis.fetch,
-                        headersType: typeof globalThis.Headers,
-                        requestType: typeof globalThis.Request,
-                        responseType: typeof globalThis.Response,
-                    });
-                })()"#,
-        )
-        .unwrap();
-        let script = v8::Script::compile(scope, check, None).unwrap();
-        let result = script.run(scope).unwrap();
-        assert_eq!(
-            result.to_rust_string_lossy(scope),
-            r#"{"fetchType":"function","headersType":"function","requestType":"function","responseType":"function"}"#,
-            "bundled bridge should expose fetch globals in restored contexts"
-        );
-    }
-
-    // --- Part 20a: Concurrent get_or_create with different bridge codes ---
-    // Verifies that concurrent callers requesting different bridge code
-    // variants are not blocked by each other (two-phase locking).
-    {
-        use std::sync::atomic::{AtomicBool, Ordering};
-        use std::time::Instant;
-
-        let cache = Arc::new(SnapshotCache::new(4));
-        let codes: Vec<String> = (0..3)
-            .map(|i| {
-                format!(
-                    "(function() {{ globalThis.__concurrent_{} = {}; }})();",
-                    i, i
-                )
-            })
-            .collect();
-
-        let barrier = Arc::new(std::sync::Barrier::new(codes.len()));
-        let all_ok = Arc::new(AtomicBool::new(true));
-
-        let mut handles = vec![];
-        for code in &codes {
-            let cache = Arc::clone(&cache);
-            let barrier = Arc::clone(&barrier);
-            let all_ok = Arc::clone(&all_ok);
-            let code = code.clone();
-
-            handles.push(std::thread::spawn(move || {
-                barrier.wait();
-                let start = Instant::now();
-                match cache.get_or_create(&code) {
-                    Ok(arc) => {
-                        assert!(!arc.is_empty());
-                    }
-                    Err(e) => {
-                        eprintln!("get_or_create failed: {}", e);
-                        all_ok.store(false, Ordering::Relaxed);
-                    }
-                }
-                start.elapsed()
-            }));
-        }
-
-        let mut durations = vec![];
-        for h in handles {
-            durations.push(h.join().expect("thread join"));
-        }
-
-        assert!(
-            all_ok.load(Ordering::Relaxed),
-            "all concurrent get_or_create calls should succeed"
-        );
-
-        // Verify all entries are cached (cache hits on second request)
-        for code in &codes {
-            let arc1 = cache.get_or_create(code).unwrap();
-            let arc2 = cache.get_or_create(code).unwrap();
-            assert!(
-                Arc::ptr_eq(&arc1, &arc2),
-                "should be cache hit after creation"
-            );
-        }
-    }
-
-    // --- Part 20: Multiple restores from same snapshot are independent ---
-    // Verifies that user code in one restored context does not leak to another.
-    {
-        let bridge_code = r#"
-                (function() {
-                    globalThis.__bridge_ok = true;
-                })();
-            "#;
-        let blob = create_snapshot(bridge_code).expect("snapshot creation");
-        let blob_bytes: Vec<u8> = blob.to_vec();
-
-        // Restore A: set a session-specific global
-        {
-            let mut isolate = create_isolate_from_snapshot(blob_bytes.clone(), None);
-            let scope = &mut v8::HandleScope::new(&mut isolate);
-            let context = v8::Context::new(scope, Default::default());
-            let scope = &mut v8::ContextScope::new(scope, context);
-
-            // Bridge state from snapshot should be present
-            let check = v8::String::new(scope, "String(__bridge_ok)").unwrap();
-            let script = v8::Script::compile(scope, check, None).unwrap();
-            let result = script.run(scope).unwrap();
-            assert_eq!(result.to_rust_string_lossy(scope), "true");
-
-            // Set session-specific state
-            let code = v8::String::new(scope, "globalThis.__user_data = 'session-a';").unwrap();
-            let script = v8::Script::compile(scope, code, None).unwrap();
-            script.run(scope);
-        }
-
-        // Restore B: session A's state should not be visible
-        {
-            let mut isolate = create_isolate_from_snapshot(blob_bytes.clone(), None);
-            let scope = &mut v8::HandleScope::new(&mut isolate);
-            let context = v8::Context::new(scope, Default::default());
-            let scope = &mut v8::ContextScope::new(scope, context);
-
-            // Bridge state should still be present
-            let check = v8::String::new(scope, "String(__bridge_ok)").unwrap();
-            let script = v8::Script::compile(scope, check, None).unwrap();
-            let result = script.run(scope).unwrap();
-            assert_eq!(result.to_rust_string_lossy(scope), "true");
-
-            // Session A's data should NOT be visible
-            let check = v8::String::new(scope, "typeof __user_data").unwrap();
-            let script = v8::Script::compile(scope, check, None).unwrap();
-            let result = script.run(scope).unwrap();
-            assert_eq!(
-                result.to_rust_string_lossy(scope),
-                "undefined",
-                "session B should not see session A's user data"
-            );
-        }
-    }
-
-    // --- Part 21: Userland snapshot — evaluated graph captured, ZERO re-eval on
-    // restore, isolation preserved (2b acceptance). ---
-    {
-        // Evaluate a string in a fresh context on a restored isolate. Unlike the
-        // function-level `eval`, this takes an existing ContextScope so successive
-        // checks observe globals set by earlier scripts in the SAME context.
-        fn run_in(scope: &mut v8::ContextScope<v8::HandleScope>, code: &str) -> String {
-            let source = v8::String::new(scope, code).unwrap();
-            let script = v8::Script::compile(scope, source, None).unwrap();
-            let result = script.run(scope).unwrap();
-            result.to_rust_string_lossy(scope)
-        }
-
-        // `userland` stands in for an esbuild IIFE bundle: it evaluates a small
-        // module graph, references a bridge-provided global (proving the bridge is
-        // available when userland runs), publishes exports on globalThis, and bumps
-        // a side-effect counter so we can prove the top-level runs exactly once.
-        let bridge_code = "(function(){ globalThis.__bridge_ok = true; })();";
-        let userland = r#"
-            (function () {
-                if (typeof globalThis._fsReadFile !== "function") {
-                    throw new Error("bridge fns missing during userland eval");
-                }
-                globalThis.__sideEffectCount = (globalThis.__sideEffectCount || 0) + 1;
-                var secret = 42;
-                globalThis.__x = { f: function () { return secret; } };
-            })();
-        "#;
-
-        let blob = create_snapshot_with_userland(bridge_code, userland)
-            .expect("userland snapshot creation should succeed");
-        let blob_bytes: Vec<u8> = blob.to_vec();
-
-        // Restore A: fresh isolate + fresh context cloned from the snapshot default
-        // context. The userland top-level must NOT run again here.
-        {
-            let mut isolate = create_isolate_from_snapshot(blob_bytes.clone(), None);
-            let scope = &mut v8::HandleScope::new(&mut isolate);
-            let context = v8::Context::new(scope, Default::default());
-            let scope = &mut v8::ContextScope::new(scope, context);
-
-            assert_eq!(
-                run_in(scope, "String(globalThis.__x.f())"),
-                "42",
-                "userland export __x.f() should return 42 from the snapshot"
-            );
-            assert_eq!(
-                run_in(scope, "String(globalThis.__sideEffectCount)"),
-                "1",
-                "userland top-level must run exactly once (zero re-eval on restore)"
-            );
-            assert_eq!(
-                run_in(scope, "String(globalThis.__bridge_ok)"),
-                "true",
-                "bridge state should coexist with userland state in the snapshot"
-            );
-
-            // Mutate a global in session A.
-            run_in(scope, "globalThis.__leak = 'session-a'; ''");
-        }
-
-        // Restore B: a separate fresh isolate from the SAME blob must see the
-        // captured userland state but NOT session A's mutation (isolation).
-        {
-            let mut isolate = create_isolate_from_snapshot(blob_bytes.clone(), None);
-            let scope = &mut v8::HandleScope::new(&mut isolate);
-            let context = v8::Context::new(scope, Default::default());
-            let scope = &mut v8::ContextScope::new(scope, context);
-
-            assert_eq!(
-                run_in(scope, "String(globalThis.__x.f())"),
-                "42",
-                "session B should see the captured userland export"
-            );
-            assert_eq!(
-                run_in(scope, "String(globalThis.__sideEffectCount)"),
-                "1",
-                "session B counter must still be 1 (no re-eval, no cross-session bump)"
-            );
-            assert_eq!(
-                run_in(scope, "typeof globalThis.__leak"),
-                "undefined",
-                "session B must NOT observe session A's mutation"
-            );
-        }
-
-        // Cache: identical (bridge, userland) → same Arc; changed userland → new Arc.
-        {
-            let cache = SnapshotCache::new(4);
-            let a = cache
-                .get_or_create_with_userland(bridge_code, Some(userland))
-                .expect("userland cache create");
-            let b = cache
-                .get_or_create_with_userland(bridge_code, Some(userland))
-                .expect("userland cache hit");
-            assert!(
-                Arc::ptr_eq(&a, &b),
-                "identical userland should hit the cache"
-            );
-
-            let userland2 = "(function(){ globalThis.__x = { f: function(){ return 7; } }; })();";
-            let c = cache
-                .get_or_create_with_userland(bridge_code, Some(userland2))
-                .expect("changed userland create");
-            assert!(
-                !Arc::ptr_eq(&a, &c),
-                "changed userland (dep-graph change) should rebuild"
-            );
-        }
-    }
-
-    // --- Part 22: REAL agent-SDK bundle snapshots + restores (env-gated). ---
-    // End-to-end primitive validation against the actual pi SDK snapshot bundle:
-    // the real bridge bundle + the real esbuild IIFE evaluate together into the
-    // snapshot, and a fresh restored isolate exposes the SDK runtime global with a
-    // working createAgentSession. Gated on PI_SNAPSHOT_BUNDLE_PATH so CI without the
-    // bundle skips it; run with that env var pointing at dist/pi-sdk-snapshot.js.
-    if let Ok(bundle_path) = std::env::var("PI_SNAPSHOT_BUNDLE_PATH") {
-        let userland = std::fs::read_to_string(&bundle_path)
-            .unwrap_or_else(|e| panic!("read pi bundle at {bundle_path}: {e}"));
-        let bridge_code = concat!(
-            include_str!(concat!(env!("OUT_DIR"), "/v8-bridge.js")),
-            "\n",
-            include_str!(concat!(env!("OUT_DIR"), "/v8-bridge-zlib.js"))
-        );
-
-        let blob = create_snapshot_with_userland(bridge_code, &userland)
-            .expect("real pi SDK bundle should snapshot cleanly (pure-JS, no top-level I/O)");
-        let mut isolate = create_isolate_from_snapshot(blob, None);
-        let scope = &mut v8::HandleScope::new(&mut isolate);
-        let context = v8::Context::new(scope, Default::default());
-        let scope = &mut v8::ContextScope::new(scope, context);
-
-        let check = v8::String::new(
-            scope,
-            "(function(){ var r = globalThis.__PI_SDK_RUNTIME__; \
-             return r && typeof r.createAgentSession === 'function' && \
-             typeof r.createAllTools === 'function' ? 'ok' : 'missing'; })()",
-        )
-        .unwrap();
-        let script = v8::Script::compile(scope, check, None).unwrap();
-        let result = script.run(scope).unwrap();
-        assert_eq!(
-            result.to_rust_string_lossy(scope),
-            "ok",
-            "restored isolate must expose the pi SDK runtime global from the snapshot"
-        );
-    }
-
-    // --- Part 23: cross-thread snapshot build → restore (diagnoses pre-warm). ---
-    // Build a userland snapshot on a SEPARATE spawned+joined thread, then restore and
-    // eval it on the main thread. If V8 fundamentally forbids restoring a blob built
-    // on a different thread (the suspected cause of the pre-warm wedge), this aborts.
-    {
-        let bridge_code = "(function(){ globalThis.__xt_bridge = true; })();";
-        let userland = "(function(){ globalThis.__xt = { f: function(){ return 99; } }; })();";
-        let blob_bytes: Vec<u8> = std::thread::spawn(move || {
-            create_snapshot_with_userland(bridge_code, userland)
-                .expect("cross-thread snapshot build should succeed")
-                .to_vec()
-        })
-        .join()
-        .expect("build thread join");
-
-        let mut isolate = create_isolate_from_snapshot(blob_bytes, None);
-        let scope = &mut v8::HandleScope::new(&mut isolate);
-        let context = v8::Context::new(scope, Default::default());
-        let scope = &mut v8::ContextScope::new(scope, context);
-        let check = v8::String::new(scope, "String(globalThis.__xt.f())").unwrap();
-        let script = v8::Script::compile(scope, check, None).unwrap();
-        let result = script.run(scope).unwrap();
-        assert_eq!(
-            result.to_rust_string_lossy(scope),
-            "99",
-            "a snapshot built on another thread must restore correctly on this thread"
-        );
-    }
-
-    // --- Part 24: session-level isolation (global AND prototype). ---
-    // Each agent session leases a FRESH context cloned from the same snapshot's
-    // default context. This is the isolation unit: a global or built-in-prototype
-    // mutation in "session A" must NOT be observable in "session B".
-    {
-        let bridge_code = "(function(){ globalThis.__iso_ok = true; })();";
-        let userland = "(function(){ globalThis.__sdk = { v: 1 }; })();";
-        let blob_bytes: Vec<u8> = create_snapshot_with_userland(bridge_code, userland)
-            .expect("isolation snapshot")
-            .to_vec();
-
-        // Session A: mutate a global, the captured SDK object, AND a built-in prototype.
-        {
-            let mut isolate = create_isolate_from_snapshot(blob_bytes.clone(), None);
-            let scope = &mut v8::HandleScope::new(&mut isolate);
-            let context = v8::Context::new(scope, Default::default());
-            let scope = &mut v8::ContextScope::new(scope, context);
-            let src = v8::String::new(
-                scope,
-                "globalThis.__leakG = 'A'; globalThis.__sdk.v = 999; \
-                 Array.prototype.__leakP = 'A'; ''",
-            )
-            .unwrap();
-            let script = v8::Script::compile(scope, src, None).unwrap();
-            script.run(scope);
-        }
-
-        // Session B: a separate fresh context from the SAME blob sees the captured
-        // snapshot state but NONE of session A's mutations.
-        {
-            let mut isolate = create_isolate_from_snapshot(blob_bytes.clone(), None);
-            let scope = &mut v8::HandleScope::new(&mut isolate);
-            let context = v8::Context::new(scope, Default::default());
-            let scope = &mut v8::ContextScope::new(scope, context);
-            let check = v8::String::new(
-                scope,
-                "(function(){ return [ \
-                   String(globalThis.__iso_ok), \
-                   typeof globalThis.__leakG, \
-                   String(globalThis.__sdk.v), \
-                   typeof ([].__leakP) \
-                 ].join(','); })()",
-            )
-            .unwrap();
-            let script = v8::Script::compile(scope, check, None).unwrap();
-            let result = script.run(scope).unwrap();
-            assert_eq!(
-                result.to_rust_string_lossy(scope),
-                "true,undefined,1,undefined",
-                "session B must see snapshot state but NOT session A's global/SDK/prototype mutations"
-            );
-        }
-    }
-
-    // --- Part 25: H-1 regression — the userland-prep `process.versions` wrapper
-    // DEFERS to the bridge's live getter post-restore instead of freezing a static
-    // identity. ---
-    // `SNAPSHOT_USERLAND_PREP` wraps (does not replace) the bridge's lazy
-    // `process.versions` getter: during snapshot creation the live getter throws
-    // (bridge fns are stubs) so a static identity is used, but post-restore — once
-    // the real bridge fns + per-session config are injected — sessions must read the
-    // LIVE per-session value. A plain static pin (the prior bug) permanently shadowed
-    // it. This models the deferral with a getter whose result depends on the
-    // post-restore-injected `_processConfig`, so a regression back to a static pin
-    // fails here.
-    {
-        use crate::bridge::serialize_v8_value;
-
-        // Bridge installs a lazy `process.versions` getter that derives its value from
-        // the per-session `_processConfig` (resolved live on each access). During
-        // snapshot creation `_processConfig` is the default (no `version`), so the
-        // getter throws — exactly the case the prep wraps. A userland is required so
-        // SNAPSHOT_USERLAND_PREP runs.
-        let bridge_code = r#"
-            (function () {
-                globalThis.process = {
-                    get versions() {
-                        // Throws during creation (default _processConfig has no
-                        // version); returns the live per-session value post-restore.
-                        return { node: _processConfig.version.replace(/^v/, "") };
-                    },
-                };
-            })();
-        "#;
-        let userland = "(function(){ globalThis.__sdk_ready = true; })();";
-        let blob = create_snapshot_with_userland(bridge_code, userland)
-            .expect("userland snapshot with a lazy process.versions getter");
-
-        let mut isolate = create_isolate_from_snapshot(blob, None);
-        let scope = &mut v8::HandleScope::new(&mut isolate);
-        let context = v8::Context::new(scope, Default::default());
-        let scope = &mut v8::ContextScope::new(scope, context);
-
-        // Inject a per-session config carrying a distinctive version (as the sidecar
-        // does post-restore via inject_globals_from_payload).
-        let payload_code = r#"({
-            processConfig: { cwd: "/", env: {}, version: "v99.1.2", timing_mitigation: "off", frozen_time_ms: null },
-            osConfig: { homedir: "/root", tmpdir: "/tmp", platform: "linux", arch: "x64" }
-        })"#;
-        let payload_source = v8::String::new(scope, payload_code).unwrap();
-        let payload_script = v8::Script::compile(scope, payload_source, None).unwrap();
-        let payload_val = payload_script.run(scope).unwrap();
-        let payload_bytes = serialize_v8_value(scope, payload_val).expect("serialize payload");
-        crate::execution::inject_globals_from_payload(scope, &payload_bytes)
-            .expect("inject per-session config");
-
-        // The wrapper must defer to the live getter → per-session "99.1.2", NOT the
-        // snapshot-build-time static identity "20.0.0".
-        let check = v8::String::new(scope, "String(process.versions.node)").unwrap();
-        let script = v8::Script::compile(scope, check, None).unwrap();
-        let result = script.run(scope).unwrap();
-        assert_eq!(
-            result.to_rust_string_lossy(scope),
-            "99.1.2",
-            "process.versions must defer to the live per-session getter post-restore, \
-             not the frozen snapshot-build-time static identity (H-1 regression)"
-        );
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn bridge_cache_key_uses_full_sha256_digest() {
-        // With no userland the key is the plain sha256 of the bridge code, so
-        // bridge-only snapshot entries keep their historical keys.
-        assert_eq!(
-            snapshot_cache_key("abc", None),
-            [
-                0xba, 0x78, 0x16, 0xbf, 0x8f, 0x01, 0xcf, 0xea, 0x41, 0x41, 0x40, 0xde, 0x5d, 0xae,
-                0x22, 0x23, 0xb0, 0x03, 0x61, 0xa3, 0x96, 0x17, 0x7a, 0x9c, 0xb4, 0x10, 0xff, 0x61,
-                0xf2, 0x00, 0x15, 0xad,
-            ]
-        );
-    }
-
-    #[test]
-    fn create_snapshot_rejects_oversized_bridge_code_before_v8_creation() {
-        let bridge_code = " ".repeat(MAX_V8_BRIDGE_CODE_BYTES + 1);
-        let error = match create_snapshot(&bridge_code) {
-            Ok(_) => panic!("oversized bridge code should be rejected"),
-            Err(error) => error,
-        };
-
-        assert!(error.contains(V8_BRIDGE_CODE_LIMIT_ERROR_CODE));
-        assert!(error.contains("bridge code too large for V8 bridge setup"));
-        assert!(error.contains(&MAX_V8_BRIDGE_CODE_BYTES.to_string()));
-    }
-
-    #[test]
-    fn snapshot_cache_rejects_oversized_bridge_code_without_retaining_in_flight_state() {
-        let cache = SnapshotCache::new(1);
-        let bridge_code = " ".repeat(MAX_V8_BRIDGE_CODE_BYTES + 1);
-
-        for _ in 0..2 {
-            let error = match cache.get_or_create(&bridge_code) {
-                Ok(_) => panic!("oversized bridge code should be rejected"),
-                Err(error) => error,
-            };
-
-            assert!(error.contains(V8_BRIDGE_CODE_LIMIT_ERROR_CODE));
-        }
-    }
-
-    #[test]
-    fn snapshot_cache_key_is_dep_keyed_over_bridge_and_userland() {
-        let bridge = "bridge-a";
-        // Userland presence changes the key vs bridge-only.
-        assert_ne!(
-            snapshot_cache_key(bridge, None),
-            snapshot_cache_key(bridge, Some("user-1")),
-            "adding userland must change the key"
-        );
-        // Different userland → different key (any dep-graph change invalidates).
-        assert_ne!(
-            snapshot_cache_key(bridge, Some("user-1")),
-            snapshot_cache_key(bridge, Some("user-2")),
-            "different userland must produce a different key"
-        );
-        // Identical inputs → identical key (cache hit).
-        assert_eq!(
-            snapshot_cache_key(bridge, Some("user-1")),
-            snapshot_cache_key(bridge, Some("user-1")),
-        );
-        // The NUL separator prevents bridge/userland boundary collisions.
-        assert_ne!(
-            snapshot_cache_key("ab", Some("c")),
-            snapshot_cache_key("a", Some("bc")),
-            "the bridge/userland split must be unambiguous"
-        );
-    }
-
-    #[test]
-    fn create_snapshot_with_userland_rejects_oversized_userland_code() {
-        let bridge_code = "(function(){})();";
-        let userland = " ".repeat(MAX_V8_USERLAND_CODE_BYTES + 1);
-        let error = match create_snapshot_with_userland(bridge_code, &userland) {
-            Ok(_) => panic!("oversized userland code should be rejected"),
-            Err(error) => error,
-        };
-
-        assert!(error.contains(V8_USERLAND_CODE_LIMIT_ERROR_CODE));
-        assert!(error.contains("userland snapshot code too large"));
-    }
-}
diff --git a/crates/v8-runtime/src/stream.rs b/crates/v8-runtime/src/stream.rs
deleted file mode 100644
index c9fe70073..000000000
--- a/crates/v8-runtime/src/stream.rs
+++ /dev/null
@@ -1,68 +0,0 @@
-// Async event dispatch for child process and HTTP server streams
-
-/// Dispatch a stream event into V8 by calling the registered callback function.
-///
-/// Stream events are sent by the host when async operations (child processes,
-/// HTTP servers) produce data. The event_type determines which V8 dispatch
-/// function is called:
-/// - "child_stdout", "child_stderr", "child_exit" → _childProcessDispatch
-/// - "http_request" → _httpServerDispatch
-/// - "http2" → _http2Dispatch
-/// - "stdin", "stdin_end" → _stdinDispatch
-/// - "net_socket" → _netSocketDispatch
-/// - "signal" → __secureExecWasmSignalDispatch or _signalDispatch
-/// - "timer" → _timerDispatch
-pub fn dispatch_stream_event(scope: &mut v8::HandleScope, event_type: &str, payload: &[u8]) {
-    // Look up the dispatch function on the global object
-    let context = scope.get_current_context();
-    let global = context.global(scope);
-
-    let dispatch_names: &[&str] = match event_type {
-        "child_stdout" | "child_stderr" | "child_exit" => &["_childProcessDispatch"],
-        "http_request" => &["_httpServerDispatch"],
-        "http2" => &["_http2Dispatch"],
-        "stdin" | "stdin_end" => &["_stdinDispatch"],
-        "net_socket" => &["_netSocketDispatch"],
-        "signal" => &["__secureExecWasmSignalDispatch", "_signalDispatch"],
-        "timer" => &["_timerDispatch"],
-        _ => return, // Unknown event type — ignore
-    };
-
-    for dispatch_name in dispatch_names {
-        let key = v8::String::new(scope, dispatch_name).unwrap();
-        let maybe_fn = global.get(scope, key.into());
-
-        if let Some(func_val) = maybe_fn {
-            if func_val.is_function() {
-                let func = v8::Local::<v8::Function>::try_from(func_val).unwrap();
-
-                // Pass event_type and payload as arguments.
-                let event_str = v8::String::new(scope, event_type).unwrap();
-                let payload_val = if !payload.is_empty() {
-                    let maybe_v8_payload = {
-                        let tc = &mut v8::TryCatch::new(scope);
-                        crate::bridge::deserialize_v8_value(tc, payload).ok()
-                    };
-                    match maybe_v8_payload {
-                        Some(v) => v,
-                        None => match std::str::from_utf8(payload) {
-                            Ok(text) => match v8::String::new(scope, text) {
-                                Some(json_text) => v8::json::parse(scope, json_text)
-                                    .unwrap_or_else(|| json_text.into()),
-                                None => v8::null(scope).into(),
-                            },
-                            Err(_) => v8::null(scope).into(),
-                        },
-                    }
-                } else {
-                    v8::null(scope).into()
-                };
-
-                let undefined = v8::undefined(scope);
-                let args: &[v8::Local<v8::Value>] = &[event_str.into(), payload_val];
-                func.call(scope, undefined.into(), args);
-                return;
-            }
-        }
-    }
-}
diff --git a/crates/v8-runtime/src/timeout.rs b/crates/v8-runtime/src/timeout.rs
deleted file mode 100644
index faff93817..000000000
--- a/crates/v8-runtime/src/timeout.rs
+++ /dev/null
@@ -1,446 +0,0 @@
-// Execution budget enforcement via dedicated watchdog threads.
-//
-// Two INDEPENDENT mechanisms live here:
-//
-//   * `TimeoutGuard` — a WALL-CLOCK timer. It counts elapsed real time
-//     INCLUDING idle/await, so it can cap a guest that blocks or awaits
-//     indefinitely. It is an INDEPENDENT, opt-in backstop armed only when the
-//     operator sets `limits.jsRuntime.wallClockLimitMs` (off by default so
-//     long-lived ACP adapters are never killed by a default).
-//
-//   * `CpuBudgetGuard` — a TRUE CPU-TIME budget. It samples the EXECUTION
-//     thread's per-thread CPU clock (`pthread_getcpuclockid` +
-//     `clock_gettime`). Because a thread's CPU clock does not advance while the
-//     thread is parked/awaiting I/O, this counts ONLY active JS CPU time and
-//     EXCLUDES idle/await. V8 has no native budget primitive, so this poll +
-//     `terminate_execution()` approach is the standard embedder pattern. Armed
-//     when the caller passes a nonzero `limits.jsRuntime.cpuTimeLimitMs`.
-//     secure-exec sidecar VM executions supply a bounded default; lower-level
-//     embedders may pass `None`/`0` to leave the guard disabled.
-//
-// The two guards are independent: setting one typed limit arms only that guard,
-// and when both are set whichever fires first terminates execution.
-
-use secure_exec_bridge::queue_tracker::{register_limit, TrackedLimit};
-use std::sync::atomic::{AtomicBool, Ordering};
-use std::sync::Arc;
-use std::thread;
-use std::time::Duration;
-
-pub(crate) const TIMEOUT_GUARD_START_ERROR_CODE: &str = "ERR_TIMEOUT_GUARD_START";
-#[cfg_attr(test, allow(dead_code))]
-pub(crate) const CPU_BUDGET_GUARD_START_ERROR_CODE: &str = "ERR_CPU_BUDGET_GUARD_START";
-
-/// How often the CPU-budget watchdog samples the execution thread's CPU clock.
-#[cfg_attr(test, allow(dead_code))]
-const CPU_BUDGET_POLL_INTERVAL: Duration = Duration::from_millis(50);
-
-/// An opaque handle to a specific thread's CPU-time clock, captured ON that
-/// thread and safe to read from another (watchdog) thread.
-///
-/// The POSIX per-thread CPU clock id is derived from the thread's `pthread_t`
-/// and remains valid for the lifetime of that thread, so the watchdog can poll
-/// it via `clock_gettime` without running on the execution thread itself.
-///
-/// macOS has no `pthread_getcpuclockid`/per-thread POSIX clock, so it uses a
-/// separate Mach-based implementation below (`pthread_mach_thread_np` +
-/// `thread_info`) that exposes the same opaque `ThreadCpuClock` interface.
-#[cfg(all(unix, not(target_os = "macos")))]
-#[cfg_attr(test, allow(dead_code))]
-#[derive(Clone, Copy)]
-pub(crate) struct ThreadCpuClock {
-    clockid: libc::clockid_t,
-}
-
-/// Capture the CALLING thread's CPU-time clock. Must be invoked on the thread
-/// whose CPU time should be measured (i.e. the execution thread).
-///
-/// Returns `None` if the platform refuses to expose a per-thread CPU clock, in
-/// which case no CPU budget can be enforced.
-#[cfg(all(unix, not(target_os = "macos")))]
-#[cfg_attr(test, allow(dead_code))]
-pub(crate) fn current_thread_cpu_clock() -> Option<ThreadCpuClock> {
-    // SAFETY: `pthread_self` is always callable; `pthread_getcpuclockid` writes
-    // a valid clockid into `clockid` on success (return 0).
-    unsafe {
-        let mut clockid: libc::clockid_t = 0;
-        let rc = libc::pthread_getcpuclockid(libc::pthread_self(), &mut clockid);
-        if rc == 0 {
-            Some(ThreadCpuClock { clockid })
-        } else {
-            None
-        }
-    }
-}
-
-#[cfg(all(unix, not(target_os = "macos")))]
-impl ThreadCpuClock {
-    /// Read accumulated CPU time for the captured thread, in milliseconds.
-    /// Returns `None` if the clock read fails.
-    #[cfg_attr(test, allow(dead_code))]
-    fn elapsed_ms(self) -> Option<u64> {
-        // SAFETY: `clockid` came from a successful `pthread_getcpuclockid`; the
-        // timespec is fully written by `clock_gettime` on success.
-        unsafe {
-            let mut ts: libc::timespec = std::mem::zeroed();
-            if libc::clock_gettime(self.clockid, &mut ts) == 0 {
-                let ms = (ts.tv_sec as i128) * 1_000 + (ts.tv_nsec as i128) / 1_000_000;
-                Some(ms.max(0) as u64)
-            } else {
-                None
-            }
-        }
-    }
-}
-
-/// macOS per-thread CPU clock. There is no `pthread_getcpuclockid` on Apple
-/// platforms, so the thread's CPU time is read through the Mach
-/// `thread_info(THREAD_BASIC_INFO)` call. The Mach thread port obtained via
-/// `pthread_mach_thread_np` stays valid for the thread's lifetime and may be
-/// inspected from another (watchdog) thread, matching the opaque-handle
-/// contract above.
-#[cfg(target_os = "macos")]
-#[cfg_attr(test, allow(dead_code))]
-#[derive(Clone, Copy)]
-pub(crate) struct ThreadCpuClock {
-    port: libc::mach_port_t,
-}
-
-#[cfg(target_os = "macos")]
-#[cfg_attr(test, allow(dead_code))]
-pub(crate) fn current_thread_cpu_clock() -> Option<ThreadCpuClock> {
-    // SAFETY: `pthread_mach_thread_np` returns the Mach thread port for the
-    // calling pthread; the port is valid for the thread's lifetime.
-    let port = unsafe { libc::pthread_mach_thread_np(libc::pthread_self()) };
-    // MACH_PORT_NULL is 0.
-    if port == 0 {
-        None
-    } else {
-        Some(ThreadCpuClock { port })
-    }
-}
-
-#[cfg(target_os = "macos")]
-impl ThreadCpuClock {
-    /// Read accumulated CPU time (user + system) for the captured thread, in
-    /// milliseconds. Returns `None` if the Mach query fails.
-    #[cfg_attr(test, allow(dead_code))]
-    fn elapsed_ms(self) -> Option<u64> {
-        // SAFETY: `thread_info` fully initialises `info` when it returns
-        // KERN_SUCCESS; the count is the documented THREAD_BASIC_INFO length.
-        unsafe {
-            let mut info = std::mem::MaybeUninit::<libc::thread_basic_info>::zeroed();
-            let mut count = (std::mem::size_of::<libc::thread_basic_info>()
-                / std::mem::size_of::<libc::integer_t>())
-                as libc::mach_msg_type_number_t;
-            let rc = libc::thread_info(
-                self.port,
-                libc::THREAD_BASIC_INFO as libc::thread_flavor_t,
-                info.as_mut_ptr() as libc::thread_info_t,
-                &mut count,
-            );
-            if rc != libc::KERN_SUCCESS {
-                return None;
-            }
-            let info = info.assume_init();
-            let ms = (info.user_time.seconds as i128 + info.system_time.seconds as i128) * 1_000
-                + (info.user_time.microseconds as i128 + info.system_time.microseconds as i128)
-                    / 1_000;
-            Some(ms.max(0) as u64)
-        }
-    }
-}
-
-/// Guard for per-execution TRUE CPU-time budget enforcement.
-///
-/// Spawns a watchdog thread that polls the execution thread's CPU clock every
-/// [`CPU_BUDGET_POLL_INTERVAL`]. When accumulated active-JS CPU time exceeds the
-/// budget, it calls `v8::Isolate::terminate_execution()` and signals the
-/// execution abort with [`crate::session::ExecutionAbortReason::CpuBudgetExceeded`].
-/// A guest that mostly awaits/idles accrues little CPU time and is NOT killed.
-///
-/// Drop or call `cancel()` to stop the watchdog (execution completed normally).
-pub(crate) struct CpuBudgetGuard {
-    cancel_tx: Option<crossbeam_channel::Sender<()>>,
-    fired: Arc<AtomicBool>,
-    join_handle: Option<thread::JoinHandle<()>>,
-}
-
-#[cfg(unix)]
-impl CpuBudgetGuard {
-    /// Spawn the CPU-budget watchdog.
-    ///
-    /// - `budget_ms`: TRUE CPU-time budget in milliseconds (active JS only)
-    /// - `cpu_clock`: the execution thread's CPU clock (captured on that thread)
-    /// - `isolate_handle`: V8 isolate handle for `terminate_execution()`
-    /// - `execution_abort`: signalled with `CpuBudgetExceeded` when the budget is exhausted
-    #[cfg_attr(test, allow(dead_code))]
-    pub(crate) fn new(
-        budget_ms: u32,
-        cpu_clock: ThreadCpuClock,
-        isolate_handle: v8::IsolateHandle,
-        execution_abort: crate::session::SharedExecutionAbort,
-    ) -> Result<Self, String> {
-        let (cancel_tx, cancel_rx) = crossbeam_channel::bounded::<()>(1);
-        let fired = Arc::new(AtomicBool::new(false));
-        let fired_clone = Arc::clone(&fired);
-
-        // Snapshot the thread's CPU time at arm so the budget measures CPU
-        // consumed DURING this execution, not cumulative thread lifetime.
-        let baseline_ms = cpu_clock.elapsed_ms().unwrap_or(0);
-        let budget_ms = budget_ms as u64;
-
-        // Sample CPU consumption into a registry gauge every poll so the operator
-        // gets an edge-triggered ~80% approach warning BEFORE the budget is
-        // exhausted and the isolate is terminated (the terminal edge is reported
-        // separately by `warn_limit_exhausted`).
-        let cpu_gauge = register_limit(TrackedLimit::V8CpuTimeMs, budget_ms as usize);
-
-        let handle = thread::Builder::new()
-            .name("cpu-budget".into())
-            .spawn(move || {
-                let ticker = crossbeam_channel::tick(CPU_BUDGET_POLL_INTERVAL);
-                loop {
-                    crossbeam_channel::select! {
-                        recv(cancel_rx) -> _ => {
-                            // Cancelled — execution completed normally.
-                            return;
-                        }
-                        recv(ticker) -> _ => {
-                            let used = cpu_clock
-                                .elapsed_ms()
-                                .unwrap_or(baseline_ms)
-                                .saturating_sub(baseline_ms);
-                            cpu_gauge.observe_depth(used as usize);
-                            if used >= budget_ms {
-                                fired_clone.store(true, Ordering::SeqCst);
-                                isolate_handle.terminate_execution();
-                                crate::session::signal_execution_abort(
-                                    &execution_abort,
-                                    crate::session::ExecutionAbortReason::CpuBudgetExceeded,
-                                );
-                                return;
-                            }
-                        }
-                    }
-                }
-            })
-            .map_err(|error| {
-                format!(
-                    "{CPU_BUDGET_GUARD_START_ERROR_CODE}: failed to spawn cpu-budget thread: {error}"
-                )
-            })?;
-
-        Ok(CpuBudgetGuard {
-            cancel_tx: Some(cancel_tx),
-            fired,
-            join_handle: Some(handle),
-        })
-    }
-
-    /// Cancel the watchdog (execution completed normally). Blocks until the
-    /// watchdog thread exits.
-    pub(crate) fn cancel(&mut self) {
-        self.cancel_tx.take();
-        if let Some(h) = self.join_handle.take() {
-            let _ = h.join();
-        }
-    }
-
-    /// Check whether the CPU budget was exhausted.
-    #[cfg_attr(test, allow(dead_code))]
-    pub(crate) fn exceeded(&self) -> bool {
-        self.fired.load(Ordering::SeqCst)
-    }
-}
-
-#[cfg(unix)]
-impl Drop for CpuBudgetGuard {
-    fn drop(&mut self) {
-        self.cancel();
-    }
-}
-
-// Non-unix fallback: there is no portable per-thread CPU clock, so the
-// CPU-budget watchdog cannot be enforced. `current_thread_cpu_clock` returns
-// `None`, which makes the session surface a clear "cannot enforce" error if a
-// CPU budget is requested, rather than silently running uncapped.
-#[cfg(not(unix))]
-#[derive(Clone, Copy)]
-pub(crate) struct ThreadCpuClock;
-
-#[cfg(not(unix))]
-pub(crate) fn current_thread_cpu_clock() -> Option<ThreadCpuClock> {
-    None
-}
-
-#[cfg(not(unix))]
-impl CpuBudgetGuard {
-    pub(crate) fn new(
-        _budget_ms: u32,
-        _cpu_clock: ThreadCpuClock,
-        _isolate_handle: v8::IsolateHandle,
-        _execution_abort: crate::session::SharedExecutionAbort,
-    ) -> Result<Self, String> {
-        Err(format!(
-            "{CPU_BUDGET_GUARD_START_ERROR_CODE}: per-thread CPU clock not supported on this platform"
-        ))
-    }
-
-    pub(crate) fn cancel(&mut self) {}
-
-    #[cfg_attr(test, allow(dead_code))]
-    pub(crate) fn exceeded(&self) -> bool {
-        self.fired.load(Ordering::SeqCst)
-    }
-}
-
-/// Guard for per-session CPU timeout enforcement.
-///
-/// Spawns a timer thread that calls `v8::Isolate::terminate_execution()`
-/// and closes the active execution abort channel to unblock any channel-based
-/// readers when the timeout elapses. Drop or call `cancel()` to prevent firing.
-pub struct TimeoutGuard {
-    /// Sender side of cancellation channel — dropped to cancel the timer
-    cancel_tx: Option<crossbeam_channel::Sender<()>>,
-    /// Set to true when the timeout fired
-    fired: Arc<AtomicBool>,
-    /// Timer thread handle
-    join_handle: Option<thread::JoinHandle<()>>,
-}
-
-impl TimeoutGuard {
-    /// Spawn a timeout timer thread.
-    ///
-    /// - `timeout_ms`: wall-clock time limit in milliseconds
-    /// - `isolate_handle`: V8 isolate handle for `terminate_execution()`
-    /// - `abort_tx`: dropped on timeout to unblock channel readers via `select!`
-    pub(crate) fn new(
-        timeout_ms: u32,
-        isolate_handle: v8::IsolateHandle,
-        abort_tx: crossbeam_channel::Sender<()>,
-    ) -> Result<Self, String> {
-        Self::spawn(timeout_ms, isolate_handle, move || {
-            drop(abort_tx);
-        })
-    }
-
-    /// Spawn a wall-clock backstop that signals the execution abort with
-    /// [`crate::session::ExecutionAbortReason::WallClockTimedOut`] when the limit
-    /// elapses. Unlike the CPU budget, this counts elapsed real time INCLUDING
-    /// idle/await. Armed only when the operator opts in via
-    /// `limits.jsRuntime.wallClockLimitMs`.
-    #[cfg_attr(test, allow(dead_code))]
-    pub(crate) fn with_execution_abort(
-        timeout_ms: u32,
-        isolate_handle: v8::IsolateHandle,
-        execution_abort: crate::session::SharedExecutionAbort,
-    ) -> Result<Self, String> {
-        Self::spawn(timeout_ms, isolate_handle, move || {
-            crate::session::signal_execution_abort(
-                &execution_abort,
-                crate::session::ExecutionAbortReason::WallClockTimedOut,
-            );
-        })
-    }
-
-    fn spawn(
-        timeout_ms: u32,
-        isolate_handle: v8::IsolateHandle,
-        on_timeout: impl FnOnce() + Send + 'static,
-    ) -> Result<Self, String> {
-        let (cancel_tx, cancel_rx) = crossbeam_channel::bounded::<()>(1);
-        let fired = Arc::new(AtomicBool::new(false));
-        let fired_clone = Arc::clone(&fired);
-
-        // Emit an edge-triggered ~80% approach warning before the wall-clock
-        // budget is exhausted and the isolate is terminated. Observing the gauge
-        // once at the threshold reuses the registry's warn + host-forward path.
-        let wall_gauge = register_limit(TrackedLimit::V8WallClockMs, timeout_ms as usize);
-        let warn_at_ms =
-            timeout_ms as u64 * secure_exec_bridge::queue_tracker::WARN_FILL_PERCENT as u64 / 100;
-
-        let handle = thread::Builder::new()
-            .name("timeout".into())
-            .spawn(move || {
-                let warn_timer = crossbeam_channel::after(Duration::from_millis(warn_at_ms));
-                let timer = crossbeam_channel::after(Duration::from_millis(timeout_ms as u64));
-
-                loop {
-                    crossbeam_channel::select! {
-                        recv(warn_timer) -> _ => {
-                            // Crossed the approach threshold — warn once. The full
-                            // timer (and cancel) are still pending; `after` fires
-                            // only once, so the next select waits on those.
-                            wall_gauge.observe_depth(warn_at_ms as usize);
-                        }
-                        recv(timer) -> _ => {
-                            // Timeout elapsed — terminate V8 execution
-                            fired_clone.store(true, Ordering::SeqCst);
-                            isolate_handle.terminate_execution();
-                            on_timeout();
-                            return;
-                        }
-                        recv(cancel_rx) -> _ => {
-                            // Cancelled — execution completed normally
-                            return;
-                        }
-                    }
-                }
-            })
-            .map_err(|error| {
-                format!("{TIMEOUT_GUARD_START_ERROR_CODE}: failed to spawn timeout thread: {error}")
-            })?;
-
-        Ok(TimeoutGuard {
-            cancel_tx: Some(cancel_tx),
-            fired,
-            join_handle: Some(handle),
-        })
-    }
-
-    /// Cancel the timeout (execution completed normally).
-    /// Blocks until the timer thread exits.
-    pub fn cancel(&mut self) {
-        // Drop the cancel sender to unblock the timer thread's select!
-        self.cancel_tx.take();
-        if let Some(h) = self.join_handle.take() {
-            let _ = h.join();
-        }
-    }
-
-    /// Check if the timeout fired.
-    pub fn timed_out(&self) -> bool {
-        self.fired.load(Ordering::SeqCst)
-    }
-}
-
-impl Drop for TimeoutGuard {
-    fn drop(&mut self) {
-        self.cancel();
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    #[test]
-    fn timeout_guard_cancel_before_fire() {
-        // Timer set to 5 seconds, cancelled immediately — should not fire
-        let (abort_tx, abort_rx) = crossbeam_channel::bounded::<()>(0);
-
-        // Create a minimal V8 platform + isolate just for the handle
-        // We avoid actual V8 in tests — use a different approach
-        // Instead, test the cancellation logic without V8
-
-        // We can't easily get a v8::IsolateHandle without V8 init,
-        // so we test the TimeoutGuard flow via integration in execution::tests
-        drop(abort_tx);
-        drop(abort_rx);
-    }
-
-    #[test]
-    fn timeout_guard_fires_on_expiry() {
-        // Tested via V8 integration tests in execution::tests
-        // This placeholder confirms the module compiles correctly
-    }
-}
diff --git a/crates/v8-runtime/tests/embedded_runtime_session.rs b/crates/v8-runtime/tests/embedded_runtime_session.rs
deleted file mode 100644
index a39b55296..000000000
--- a/crates/v8-runtime/tests/embedded_runtime_session.rs
+++ /dev/null
@@ -1,632 +0,0 @@
-use secure_exec_v8_runtime::embedded_runtime::{shared_embedded_runtime, EmbeddedV8Runtime};
-use secure_exec_v8_runtime::runtime_protocol::{RuntimeCommand, RuntimeEvent, SessionMessage};
-use std::io;
-use std::sync::atomic::{AtomicU64, Ordering};
-use std::sync::mpsc;
-use std::sync::Arc;
-use std::thread;
-use std::time::{Duration, Instant};
-
-// Timing-sensitive assertions flake under the CPU contention of a parallel test
-// run (see CLAUDE.md > Testing). Gated off by default; the nightly timing lane
-// sets SECURE_EXEC_RUN_TIMING_TESTS=1 to enforce them.
-fn run_timing_sensitive_tests() -> bool {
-    std::env::var_os("SECURE_EXEC_RUN_TIMING_TESTS").is_some()
-}
-
-static NEXT_TEST_SESSION_ID: AtomicU64 = AtomicU64::new(1);
-
-fn next_session_id() -> String {
-    format!(
-        "embedded-runtime-session-{}",
-        NEXT_TEST_SESSION_ID.fetch_add(1, Ordering::Relaxed)
-    )
-}
-
-fn register_and_create_session(
-    runtime: &Arc<EmbeddedV8Runtime>,
-    session_id: &str,
-) -> io::Result<mpsc::Receiver<RuntimeEvent>> {
-    let receiver = runtime.register_session(session_id)?;
-    runtime.dispatch(RuntimeCommand::CreateSession {
-        session_id: session_id.to_owned(),
-        heap_limit_mb: None,
-        cpu_time_limit_ms: None,
-        wall_clock_limit_ms: None,
-        warm_hint: None,
-    })?;
-    Ok(receiver)
-}
-
-fn register_and_create_session_with_cpu_time_limit(
-    runtime: &Arc<EmbeddedV8Runtime>,
-    session_id: &str,
-    cpu_time_limit_ms: Option<u32>,
-) -> io::Result<mpsc::Receiver<RuntimeEvent>> {
-    let receiver = runtime.register_session(session_id)?;
-    runtime.dispatch(RuntimeCommand::CreateSession {
-        session_id: session_id.to_owned(),
-        heap_limit_mb: None,
-        cpu_time_limit_ms,
-        wall_clock_limit_ms: None,
-        warm_hint: None,
-    })?;
-    Ok(receiver)
-}
-
-fn dispatch_execute(
-    runtime: &EmbeddedV8Runtime,
-    session_id: &str,
-    mode: u8,
-    bridge_code: &str,
-    user_code: &str,
-) -> io::Result<()> {
-    runtime.dispatch(RuntimeCommand::SendToSession {
-        session_id: session_id.to_owned(),
-        message: SessionMessage::Execute {
-            mode,
-            file_path: String::new(),
-            bridge_code: bridge_code.to_owned(),
-            post_restore_script: String::new(),
-            userland_code: String::new(),
-            high_resolution_time: false,
-            user_code: user_code.to_owned(),
-            wasm_module_bytes: None,
-        },
-    })
-}
-
-fn wait_for_execution_result(
-    receiver: &mpsc::Receiver<RuntimeEvent>,
-    session_id: &str,
-) -> RuntimeEvent {
-    let deadline = Instant::now() + Duration::from_secs(5);
-    loop {
-        let remaining = deadline
-            .checked_duration_since(Instant::now())
-            .expect("timed out waiting for execution result");
-        let event = receiver
-            .recv_timeout(remaining)
-            .expect("runtime event should arrive before timeout");
-        if matches!(
-            &event,
-            RuntimeEvent::ExecutionResult {
-                session_id: event_session_id,
-                ..
-            } if event_session_id == session_id
-        ) {
-            return event;
-        }
-    }
-}
-
-fn wait_for_bridge_call(receiver: &mpsc::Receiver<RuntimeEvent>, session_id: &str) -> RuntimeEvent {
-    let deadline = Instant::now() + Duration::from_secs(5);
-    loop {
-        let remaining = deadline
-            .checked_duration_since(Instant::now())
-            .expect("timed out waiting for bridge call");
-        let event = receiver
-            .recv_timeout(remaining)
-            .expect("bridge call should arrive before timeout");
-        if matches!(
-            &event,
-            RuntimeEvent::BridgeCall {
-                session_id: event_session_id,
-                ..
-            } if event_session_id == session_id
-        ) {
-            return event;
-        }
-    }
-}
-
-fn assert_execution_ok(receiver: &mpsc::Receiver<RuntimeEvent>, session_id: &str) {
-    let event = wait_for_execution_result(receiver, session_id);
-    match event {
-        RuntimeEvent::ExecutionResult {
-            exit_code,
-            error,
-            exports,
-            ..
-        } => {
-            assert_eq!(exit_code, 0, "expected successful execution result");
-            assert!(error.is_none(), "unexpected execution error: {error:?}");
-            assert!(
-                exports.is_none(),
-                "script execution should not export values"
-            );
-        }
-        other => panic!("expected execution result, got {other:?}"),
-    }
-}
-
-fn wait_until(message: &str, predicate: impl Fn() -> bool) {
-    let deadline = Instant::now() + Duration::from_secs(5);
-    while Instant::now() < deadline {
-        if predicate() {
-            return;
-        }
-        thread::sleep(Duration::from_millis(10));
-    }
-    panic!("{message}");
-}
-
-fn assert_create_destroy_reuses_session_ids() -> io::Result<()> {
-    let runtime = shared_embedded_runtime()?;
-    let session_id = next_session_id();
-
-    let _receiver = register_and_create_session(&runtime, &session_id)?;
-    assert!(
-        runtime.session_count() >= 1,
-        "embedded runtime should track created sessions"
-    );
-
-    let duplicate_error = runtime
-        .dispatch(RuntimeCommand::CreateSession {
-            session_id: session_id.clone(),
-            heap_limit_mb: None,
-            cpu_time_limit_ms: None,
-            wall_clock_limit_ms: None,
-            warm_hint: None,
-        })
-        .expect_err("duplicate sessions should be rejected");
-    assert_eq!(duplicate_error.kind(), io::ErrorKind::Other);
-
-    runtime.session_handle(session_id.clone()).destroy()?;
-    assert_eq!(
-        runtime.session_count(),
-        0,
-        "destroying the only test session should return the runtime to zero sessions"
-    );
-
-    let _receiver = register_and_create_session(&runtime, &session_id)?;
-    runtime.session_handle(session_id).destroy()?;
-    assert_eq!(
-        runtime.session_count(),
-        0,
-        "recreated sessions should also tear down cleanly"
-    );
-
-    Ok(())
-}
-
-fn assert_warmed_snapshot_bridge_state() -> io::Result<()> {
-    let runtime = Arc::new(EmbeddedV8Runtime::new(Some(1))?);
-    let session_id = next_session_id();
-    let receiver = register_and_create_session(&runtime, &session_id)?;
-    let bridge_code = "(function() { globalThis.__snapshotMarker = 'warm'; })();";
-
-    runtime.dispatch(RuntimeCommand::WarmSnapshot {
-        bridge_code: bridge_code.to_owned(),
-        userland_code: String::new(),
-    })?;
-    dispatch_execute(
-        runtime.as_ref(),
-        &session_id,
-        0,
-        bridge_code,
-        "if (globalThis.__snapshotMarker !== 'warm') { throw new Error(`saw ${globalThis.__snapshotMarker}`); }",
-    )?;
-    assert_execution_ok(&receiver, &session_id);
-
-    runtime.dispatch(RuntimeCommand::DestroySession {
-        session_id: session_id.clone(),
-    })?;
-    runtime.unregister_session(&session_id);
-    Ok(())
-}
-
-fn assert_snapshot_rebuild_on_bridge_change() -> io::Result<()> {
-    let runtime = Arc::new(EmbeddedV8Runtime::new(Some(1))?);
-    let session_id = next_session_id();
-    let receiver = register_and_create_session(&runtime, &session_id)?;
-    let bridge_a = "(function() { globalThis.__bridgeSnapshot = 'A'; })();";
-    let bridge_b = "(function() { globalThis.__bridgeSnapshot = 'B'; })();";
-
-    dispatch_execute(
-        runtime.as_ref(),
-        &session_id,
-        0,
-        bridge_a,
-        "if (globalThis.__bridgeSnapshot !== 'A') { throw new Error(`saw ${globalThis.__bridgeSnapshot}`); }",
-    )?;
-    assert_execution_ok(&receiver, &session_id);
-
-    dispatch_execute(
-        runtime.as_ref(),
-        &session_id,
-        0,
-        bridge_b,
-        "if (globalThis.__bridgeSnapshot !== 'B') { throw new Error(`saw ${globalThis.__bridgeSnapshot}`); }",
-    )?;
-    assert_execution_ok(&receiver, &session_id);
-
-    runtime.dispatch(RuntimeCommand::DestroySession {
-        session_id: session_id.clone(),
-    })?;
-    runtime.unregister_session(&session_id);
-    Ok(())
-}
-
-fn assert_execute_rejects_oversized_bridge_code() -> io::Result<()> {
-    let runtime = Arc::new(EmbeddedV8Runtime::new(Some(1))?);
-    let session_id = next_session_id();
-    let receiver = register_and_create_session(&runtime, &session_id)?;
-    let oversized_bridge_code = " ".repeat(16 * 1024 * 1024 + 1);
-
-    dispatch_execute(
-        runtime.as_ref(),
-        &session_id,
-        0,
-        &oversized_bridge_code,
-        "globalThis.__should_not_run = true;",
-    )?;
-
-    let event = wait_for_execution_result(&receiver, &session_id);
-    match event {
-        RuntimeEvent::ExecutionResult {
-            exit_code,
-            error: Some(error),
-            ..
-        } => {
-            assert_eq!(exit_code, 1);
-            assert_eq!(error.code, "ERR_V8_BRIDGE_CODE_LIMIT");
-            assert!(error
-                .message
-                .contains("bridge code too large for V8 bridge setup"));
-        }
-        other => panic!("expected bridge-code limit execution error, got {other:?}"),
-    }
-
-    runtime.dispatch(RuntimeCommand::DestroySession {
-        session_id: session_id.clone(),
-    })?;
-    runtime.unregister_session(&session_id);
-    wait_until(
-        "expected oversized-bridge session to drain after rejection",
-        || runtime.session_count() == 0 && runtime.active_slot_count() == 0,
-    );
-    Ok(())
-}
-
-fn assert_direct_zero_cpu_time_limit_disables_timeout() -> io::Result<()> {
-    let runtime = Arc::new(EmbeddedV8Runtime::new(Some(1))?);
-    let session_id = next_session_id();
-    let receiver = register_and_create_session_with_cpu_time_limit(&runtime, &session_id, Some(0))?;
-
-    dispatch_execute(
-        runtime.as_ref(),
-        &session_id,
-        0,
-        "",
-        "let total = 0; for (let i = 0; i < 100000; i++) { total += i; }",
-    )?;
-    assert_execution_ok(&receiver, &session_id);
-
-    runtime.dispatch(RuntimeCommand::DestroySession {
-        session_id: session_id.clone(),
-    })?;
-    runtime.unregister_session(&session_id);
-    wait_until(
-        "expected zero-timeout session to drain after successful execution",
-        || runtime.session_count() == 0 && runtime.active_slot_count() == 0,
-    );
-    Ok(())
-}
-
-fn assert_queued_work_waits_for_slot_release() -> io::Result<()> {
-    let runtime = Arc::new(EmbeddedV8Runtime::new(Some(1))?);
-    let session_a = next_session_id();
-    let session_b = next_session_id();
-    let receiver_a = register_and_create_session(&runtime, &session_a)?;
-
-    wait_until(
-        "expected the first embedded session to occupy the only slot before the second session is created",
-        || runtime.active_slot_count() == 1 && runtime.session_count() == 1,
-    );
-
-    dispatch_execute(
-        runtime.as_ref(),
-        &session_a,
-        1,
-        "",
-        "await new Promise(() => {});",
-    )?;
-
-    let receiver_b = register_and_create_session(&runtime, &session_b)?;
-    dispatch_execute(
-        runtime.as_ref(),
-        &session_b,
-        0,
-        "(function() { globalThis.__queuedSession = 'released'; })();",
-        "if (globalThis.__queuedSession !== 'released') { throw new Error(`saw ${globalThis.__queuedSession}`); }",
-    )?;
-
-    wait_until(
-        "expected one active slot with the second session still queued",
-        || runtime.active_slot_count() == 1 && runtime.session_count() == 2,
-    );
-    if run_timing_sensitive_tests() {
-        assert!(
-            receiver_b.recv_timeout(Duration::from_millis(150)).is_err(),
-            "queued session should not emit an execution result before the first slot is released"
-        );
-    }
-
-    runtime.dispatch(RuntimeCommand::DestroySession {
-        session_id: session_a.clone(),
-    })?;
-    let terminated = wait_for_execution_result(&receiver_a, &session_a);
-    assert!(
-        matches!(
-            terminated,
-            RuntimeEvent::ExecutionResult {
-                exit_code: 1,
-                ref error,
-                ..
-            } if error.as_ref().is_some_and(|error| error.message == "Execution terminated")
-        ),
-        "destroying the in-flight session should terminate its pending execution"
-    );
-
-    assert_execution_ok(&receiver_b, &session_b);
-
-    runtime.dispatch(RuntimeCommand::DestroySession {
-        session_id: session_b.clone(),
-    })?;
-    runtime.unregister_session(&session_a);
-    runtime.unregister_session(&session_b);
-    wait_until(
-        "expected all embedded sessions and slots to drain after teardown",
-        || runtime.session_count() == 0 && runtime.active_slot_count() == 0,
-    );
-    Ok(())
-}
-
-fn assert_shared_runtime_handles_share_concurrency_quota() -> io::Result<()> {
-    let runtime = Arc::new(EmbeddedV8Runtime::new(Some(3))?);
-    let clients = (0..4)
-        .map(|_| Arc::clone(&runtime))
-        .collect::<Vec<Arc<EmbeddedV8Runtime>>>();
-    let session_ids = (0..4).map(|_| next_session_id()).collect::<Vec<_>>();
-    let mut receivers = clients
-        .iter()
-        .zip(session_ids.iter())
-        .take(3)
-        .map(|(client, session_id)| register_and_create_session(client, session_id))
-        .collect::<io::Result<Vec<_>>>()?;
-
-    wait_until(
-        "expected the first three embedded sessions to occupy the shared slots before the fourth session is created",
-        || runtime.active_slot_count() == 3 && runtime.session_count() == 3,
-    );
-
-    receivers.push(register_and_create_session(&clients[3], &session_ids[3])?);
-
-    for (client, session_id) in clients.iter().zip(session_ids.iter()).take(3) {
-        dispatch_execute(
-            client.as_ref(),
-            session_id,
-            1,
-            "",
-            "await new Promise(() => {});",
-        )?;
-    }
-    dispatch_execute(
-        clients[3].as_ref(),
-        &session_ids[3],
-        0,
-        "(function() { globalThis.__sharedQuota = 'released'; })();",
-        "if (globalThis.__sharedQuota !== 'released') { throw new Error(`saw ${globalThis.__sharedQuota}`); }",
-    )?;
-
-    wait_until(
-        "expected one runtime-wide slot budget shared across all embedded runtime handles",
-        || runtime.active_slot_count() == 3 && runtime.session_count() == 4,
-    );
-    if run_timing_sensitive_tests() {
-        assert!(
-            receivers[3]
-                .recv_timeout(Duration::from_millis(150))
-                .is_err(),
-            "the fourth client should stay queued while the first three handles occupy the shared slots"
-        );
-    }
-
-    runtime.dispatch(RuntimeCommand::DestroySession {
-        session_id: session_ids[0].clone(),
-    })?;
-    let terminated = wait_for_execution_result(&receivers[0], &session_ids[0]);
-    assert!(
-        matches!(
-            terminated,
-            RuntimeEvent::ExecutionResult {
-                exit_code: 1,
-                ref error,
-                ..
-            } if error.as_ref().is_some_and(|error| error.message == "Execution terminated")
-        ),
-        "destroying one in-flight session should release a shared slot for queued handles"
-    );
-
-    assert_execution_ok(&receivers[3], &session_ids[3]);
-
-    for session_id in session_ids.iter().skip(1) {
-        runtime.dispatch(RuntimeCommand::DestroySession {
-            session_id: session_id.clone(),
-        })?;
-    }
-    for session_id in &session_ids {
-        runtime.unregister_session(session_id);
-    }
-    wait_until(
-        "expected all shared-runtime sessions and slots to drain after teardown",
-        || runtime.session_count() == 0 && runtime.active_slot_count() == 0,
-    );
-    Ok(())
-}
-
-fn assert_terminate_interrupts_sync_bridge_wait() -> io::Result<()> {
-    let runtime = Arc::new(EmbeddedV8Runtime::new(Some(1))?);
-    let session_id = next_session_id();
-    let receiver = register_and_create_session(&runtime, &session_id)?;
-
-    dispatch_execute(
-        runtime.as_ref(),
-        &session_id,
-        0,
-        "",
-        "_loadFileSync('/never-responds');",
-    )?;
-
-    let bridge_call = wait_for_bridge_call(&receiver, &session_id);
-    assert!(
-        matches!(
-            bridge_call,
-            RuntimeEvent::BridgeCall { ref method, .. } if method == "_loadFileSync"
-        ),
-        "expected the blocked sync bridge call to be visible before termination"
-    );
-
-    let terminate_started = Instant::now();
-    runtime.session_handle(session_id.clone()).terminate()?;
-    let terminated = wait_for_execution_result(&receiver, &session_id);
-
-    if run_timing_sensitive_tests() {
-        assert!(
-            terminate_started.elapsed() < Duration::from_secs(1),
-            "terminate() should return promptly while the sync bridge call is blocked"
-        );
-    }
-    assert!(
-        matches!(
-            terminated,
-            RuntimeEvent::ExecutionResult {
-                exit_code: 1,
-                ref error,
-                ..
-            } if error.as_ref().is_some_and(|error| error.message == "Execution terminated")
-        ),
-        "terminate() should interrupt a blocked sync bridge call instead of waiting for a host response"
-    );
-
-    dispatch_execute(
-        runtime.as_ref(),
-        &session_id,
-        0,
-        "",
-        "globalThis.__afterExplicitTerminate = 'ok';",
-    )?;
-    assert_execution_ok(&receiver, &session_id);
-
-    runtime.dispatch(RuntimeCommand::DestroySession {
-        session_id: session_id.clone(),
-    })?;
-    runtime.unregister_session(&session_id);
-    wait_until(
-        "expected the terminated sync-bridge session to drain cleanly",
-        || runtime.session_count() == 0 && runtime.active_slot_count() == 0,
-    );
-    Ok(())
-}
-
-fn assert_cpu_terminated_session_can_execute_again() -> io::Result<()> {
-    let runtime = Arc::new(EmbeddedV8Runtime::new(Some(1))?);
-    let session_id = next_session_id();
-    let receiver =
-        register_and_create_session_with_cpu_time_limit(&runtime, &session_id, Some(25))?;
-
-    dispatch_execute(runtime.as_ref(), &session_id, 0, "", "while (true) {}")?;
-    let terminated = wait_for_execution_result(&receiver, &session_id);
-    assert!(
-        matches!(
-            terminated,
-            RuntimeEvent::ExecutionResult {
-                exit_code: 1,
-                ref error,
-                ..
-            } if error
-                .as_ref()
-                .is_some_and(|error| error.code == "ERR_SCRIPT_CPU_BUDGET_EXCEEDED")
-        ),
-        "CPU-budget termination should be attributed before reuse"
-    );
-
-    dispatch_execute(
-        runtime.as_ref(),
-        &session_id,
-        0,
-        "",
-        "globalThis.__afterCpuTerminate = 'ok';",
-    )?;
-    assert_execution_ok(&receiver, &session_id);
-
-    runtime.dispatch(RuntimeCommand::DestroySession {
-        session_id: session_id.clone(),
-    })?;
-    runtime.unregister_session(&session_id);
-    wait_until(
-        "expected CPU-terminated session to drain cleanly after reuse",
-        || runtime.session_count() == 0 && runtime.active_slot_count() == 0,
-    );
-    Ok(())
-}
-
-fn assert_isolate_churn_recreates_embedded_sessions_without_segv() -> io::Result<()> {
-    let runtime = Arc::new(EmbeddedV8Runtime::new(Some(1))?);
-    let bridge_code = "(function() { globalThis.__churnBridgeReady = true; })();";
-
-    for _ in 0..32 {
-        let session_id = next_session_id();
-        let receiver = register_and_create_session(&runtime, &session_id)?;
-        dispatch_execute(
-            runtime.as_ref(),
-            &session_id,
-            0,
-            bridge_code,
-            "if (globalThis.__churnBridgeReady !== true) { throw new Error('missing bridge'); }",
-        )?;
-        assert_execution_ok(&receiver, &session_id);
-        runtime.dispatch(RuntimeCommand::DestroySession {
-            session_id: session_id.clone(),
-        })?;
-        runtime.unregister_session(&session_id);
-    }
-
-    let session_id = next_session_id();
-    let receiver = register_and_create_session(&runtime, &session_id)?;
-    dispatch_execute(
-        runtime.as_ref(),
-        &session_id,
-        0,
-        bridge_code,
-        "globalThis.__afterChurn = 42;",
-    )?;
-    assert_execution_ok(&receiver, &session_id);
-    runtime.dispatch(RuntimeCommand::DestroySession {
-        session_id: session_id.clone(),
-    })?;
-    runtime.unregister_session(&session_id);
-    wait_until("expected isolate churn sessions to drain", || {
-        runtime.session_count() == 0 && runtime.active_slot_count() == 0
-    });
-    Ok(())
-}
-
-#[test]
-fn embedded_runtime_session_consolidated_behaviors() -> io::Result<()> {
-    // Keep the embedded-runtime coverage in one test process. V8 teardown across
-    // multiple integration tests still trips intermittent SIGSEGVs in this crate.
-    assert_create_destroy_reuses_session_ids()?;
-    assert_warmed_snapshot_bridge_state()?;
-    assert_snapshot_rebuild_on_bridge_change()?;
-    assert_execute_rejects_oversized_bridge_code()?;
-    assert_direct_zero_cpu_time_limit_disables_timeout()?;
-    assert_queued_work_waits_for_slot_release()?;
-    assert_shared_runtime_handles_share_concurrency_quota()?;
-    assert_terminate_interrupts_sync_bridge_wait()?;
-    assert_cpu_terminated_session_can_execute_again()?;
-    assert_isolate_churn_recreates_embedded_sessions_without_segv()?;
-    Ok(())
-}
diff --git a/crates/v8-runtime/tests/event_loop.rs b/crates/v8-runtime/tests/event_loop.rs
deleted file mode 100644
index 8ceab0886..000000000
--- a/crates/v8-runtime/tests/event_loop.rs
+++ /dev/null
@@ -1,371 +0,0 @@
-use crossbeam_channel::Receiver;
-use secure_exec_v8_runtime::bridge::PendingPromises;
-use secure_exec_v8_runtime::execution;
-use secure_exec_v8_runtime::isolate;
-use secure_exec_v8_runtime::runtime_protocol::{SessionMessage, StreamEvent};
-use secure_exec_v8_runtime::session::{run_event_loop, EventLoopStatus, SessionCommand};
-use std::thread;
-use std::thread::JoinHandle;
-use std::time::{Duration, Instant};
-
-const WASM_FORTY_TWO_BYTES: &str = "0,97,115,109,1,0,0,0,1,5,1,96,0,1,127,3,2,1,0,7,12,1,8,102,111,114,116,121,84,119,111,0,0,10,6,1,4,0,65,42,11";
-const EVENT_LOOP_WATCHDOG_TIMEOUT: Duration = Duration::from_secs(6);
-
-// Timing-sensitive assertions flake under the CPU contention of a parallel test
-// run (see CLAUDE.md > Testing). Gated off by default; the nightly timing lane
-// sets SECURE_EXEC_RUN_TIMING_TESTS=1 to enforce them.
-fn run_timing_sensitive_tests() -> bool {
-    std::env::var_os("SECURE_EXEC_RUN_TIMING_TESTS").is_some()
-}
-
-struct EventLoopWatchdog {
-    cancel_tx: Option<crossbeam_channel::Sender<()>>,
-    join_handle: Option<JoinHandle<()>>,
-}
-
-impl EventLoopWatchdog {
-    fn start() -> (Self, Receiver<()>) {
-        let (abort_tx, abort_rx) = crossbeam_channel::bounded::<()>(0);
-        let (cancel_tx, cancel_rx) = crossbeam_channel::bounded::<()>(0);
-        let join_handle = thread::Builder::new()
-            .name("event-loop-test-watchdog".into())
-            .spawn(move || {
-                crossbeam_channel::select! {
-                    recv(cancel_rx) -> _ => {}
-                    default(EVENT_LOOP_WATCHDOG_TIMEOUT) => {
-                        drop(abort_tx);
-                    }
-                }
-            })
-            .expect("watchdog thread should start");
-
-        (
-            Self {
-                cancel_tx: Some(cancel_tx),
-                join_handle: Some(join_handle),
-            },
-            abort_rx,
-        )
-    }
-
-    fn cancel(mut self) {
-        self.cancel_tx.take();
-        if let Some(join_handle) = self.join_handle.take() {
-            join_handle.join().expect("watchdog thread should join");
-        }
-    }
-}
-
-impl Drop for EventLoopWatchdog {
-    fn drop(&mut self) {
-        self.cancel_tx.take();
-        if let Some(join_handle) = self.join_handle.take() {
-            join_handle.join().expect("watchdog thread should join");
-        }
-    }
-}
-
-fn run_event_loop_with_watchdog(
-    scope: &mut v8::HandleScope,
-    rx: &Receiver<SessionCommand>,
-    pending: &PendingPromises,
-) -> EventLoopStatus {
-    let (watchdog, abort_rx) = EventLoopWatchdog::start();
-    let status = run_event_loop(scope, rx, pending, Some(&abort_rx), None);
-    watchdog.cancel();
-    status
-}
-
-fn assert_event_loop_watchdog_did_not_fire(status: &EventLoopStatus) {
-    assert!(
-        !matches!(status, EventLoopStatus::Terminated),
-        "event loop watchdog fired after {:?}",
-        EVENT_LOOP_WATCHDOG_TIMEOUT
-    );
-}
-
-fn event_loop_pumps_v8_platform_tasks_for_native_wasm_promises() {
-    isolate::init_v8_platform();
-
-    let mut isolate = isolate::create_isolate(None);
-    let context = isolate::create_context(&mut isolate);
-    let pending = PendingPromises::new();
-    let (_tx, rx) = crossbeam_channel::unbounded::<SessionCommand>();
-    let mut bridge_cache = None;
-
-    let scope = &mut v8::HandleScope::new(&mut isolate);
-    let ctx = v8::Local::new(scope, &context);
-    let scope = &mut v8::ContextScope::new(scope, ctx);
-
-    let (code, error) = execution::execute_script(
-        scope,
-        "",
-        "globalThis.__wasmDone = false; \
-         (async () => { \
-           await WebAssembly.compile(new Uint8Array([0,97,115,109,1,0,0,0])); \
-           globalThis.__wasmDone = true; \
-         })();",
-        &mut bridge_cache,
-    );
-    assert_eq!(code, 0, "unexpected execute_script exit code");
-    assert!(
-        error.is_none(),
-        "unexpected execute_script error: {error:?}"
-    );
-    assert!(
-        execution::has_pending_script_evaluation(),
-        "expected pending script evaluation for native wasm promise"
-    );
-
-    let status = run_event_loop_with_watchdog(scope, &rx, &pending);
-    assert_event_loop_watchdog_did_not_fire(&status);
-    assert!(
-        matches!(status, EventLoopStatus::Completed),
-        "unexpected event loop status: {:?}",
-        status
-    );
-
-    if let Some((next_code, next_error)) = execution::finalize_pending_script_evaluation(scope) {
-        assert_eq!(next_code, 0, "unexpected finalize exit code");
-        assert!(
-            next_error.is_none(),
-            "unexpected finalize error: {next_error:?}"
-        );
-    }
-
-    let source = v8::String::new(scope, "globalThis.__wasmDone === true").unwrap();
-    let script = v8::Script::compile(scope, source, None).unwrap();
-    let result = script.run(scope).unwrap();
-    assert!(
-        result.boolean_value(scope),
-        "expected wasm promise to resolve"
-    );
-}
-
-fn event_loop_completes_native_async_wasm_instantiate_promises() {
-    isolate::init_v8_platform();
-
-    let mut isolate = isolate::create_isolate(None);
-    let context = isolate::create_context(&mut isolate);
-    let pending = PendingPromises::new();
-    let (_tx, rx) = crossbeam_channel::unbounded::<SessionCommand>();
-    let mut bridge_cache = None;
-
-    let scope = &mut v8::HandleScope::new(&mut isolate);
-    let ctx = v8::Local::new(scope, &context);
-    let scope = &mut v8::ContextScope::new(scope, ctx);
-
-    let source = format!(
-        "globalThis.__wasmInstantiateResult = null; \
-         (async () => {{ \
-           const bytes = new Uint8Array([{bytes}]); \
-           const result = await WebAssembly.instantiate(bytes, {{}}); \
-           globalThis.__wasmInstantiateResult = {{ \
-             hasModule: !!result?.module, \
-             hasInstance: !!result?.instance, \
-             value: result.instance.exports.fortyTwo(), \
-           }}; \
-         }})();",
-        bytes = WASM_FORTY_TWO_BYTES
-    );
-
-    let (code, error) = execution::execute_script(scope, "", &source, &mut bridge_cache);
-    assert_eq!(code, 0, "unexpected execute_script exit code");
-    assert!(
-        error.is_none(),
-        "unexpected execute_script error: {error:?}"
-    );
-    assert!(
-        execution::has_pending_script_evaluation(),
-        "expected pending script evaluation for native wasm instantiate promise"
-    );
-
-    let status = run_event_loop_with_watchdog(scope, &rx, &pending);
-    assert_event_loop_watchdog_did_not_fire(&status);
-    assert!(
-        matches!(status, EventLoopStatus::Completed),
-        "unexpected event loop status: {:?}",
-        status
-    );
-
-    if let Some((next_code, next_error)) = execution::finalize_pending_script_evaluation(scope) {
-        assert_eq!(next_code, 0, "unexpected finalize exit code");
-        assert!(
-            next_error.is_none(),
-            "unexpected finalize error: {next_error:?}"
-        );
-    }
-
-    let source = v8::String::new(
-        scope,
-        "globalThis.__wasmInstantiateResult?.hasModule === true && \
-         globalThis.__wasmInstantiateResult?.hasInstance === true && \
-         globalThis.__wasmInstantiateResult?.value === 42",
-    )
-    .unwrap();
-    let script = v8::Script::compile(scope, source, None).unwrap();
-    let result = script.run(scope).unwrap();
-    assert!(
-        result.boolean_value(scope),
-        "expected async WebAssembly.instantiate() to resolve with module+instance"
-    );
-}
-
-fn event_loop_surfaces_native_async_wasm_compile_errors_without_hanging() {
-    isolate::init_v8_platform();
-
-    let mut isolate = isolate::create_isolate(None);
-    let context = isolate::create_context(&mut isolate);
-    let pending = PendingPromises::new();
-    let (_tx, rx) = crossbeam_channel::unbounded::<SessionCommand>();
-    let mut bridge_cache = None;
-
-    let scope = &mut v8::HandleScope::new(&mut isolate);
-    let ctx = v8::Local::new(scope, &context);
-    let scope = &mut v8::ContextScope::new(scope, ctx);
-
-    let (code, error) = execution::execute_script(
-        scope,
-        "",
-        "globalThis.__wasmCompileErrorName = null; \
-         (async () => { \
-           try { \
-             await WebAssembly.instantiate(new Uint8Array([0,97,115,109,1,0,0]), {}); \
-           } catch (error) { \
-             globalThis.__wasmCompileErrorName = error?.constructor?.name ?? null; \
-             throw error; \
-           } \
-         })();",
-        &mut bridge_cache,
-    );
-    assert_eq!(code, 0, "unexpected execute_script exit code");
-    assert!(
-        error.is_none(),
-        "unexpected execute_script error: {error:?}"
-    );
-    assert!(
-        execution::has_pending_script_evaluation(),
-        "expected pending script evaluation for native wasm instantiate rejection"
-    );
-
-    let status = run_event_loop_with_watchdog(scope, &rx, &pending);
-    assert_event_loop_watchdog_did_not_fire(&status);
-    assert!(
-        matches!(status, EventLoopStatus::Completed),
-        "unexpected event loop status: {:?}",
-        status
-    );
-
-    let (next_code, next_error) = execution::finalize_pending_script_evaluation(scope)
-        .expect("expected rejected async wasm instantiate promise");
-    assert_eq!(next_code, 1, "unexpected finalize exit code");
-    let next_error = next_error.expect("expected compile error");
-    assert_eq!(next_error.error_type, "CompileError");
-
-    let source = v8::String::new(
-        scope,
-        "globalThis.__wasmCompileErrorName === 'CompileError'",
-    )
-    .unwrap();
-    let script = v8::Script::compile(scope, source, None).unwrap();
-    let result = script.run(scope).unwrap();
-    assert!(
-        result.boolean_value(scope),
-        "expected async WebAssembly.instantiate() rejection to surface CompileError"
-    );
-}
-
-fn event_loop_waits_for_refed_guest_timers_between_interval_ticks() {
-    isolate::init_v8_platform();
-
-    let mut isolate = isolate::create_isolate(None);
-    let context = isolate::create_context(&mut isolate);
-    let pending = PendingPromises::new();
-    let (tx, rx) = crossbeam_channel::unbounded::<SessionCommand>();
-    let mut bridge_cache = None;
-
-    let scope = &mut v8::HandleScope::new(&mut isolate);
-    let ctx = v8::Local::new(scope, &context);
-    let scope = &mut v8::ContextScope::new(scope, ctx);
-
-    let (code, error) = execution::execute_script(
-        scope,
-        "",
-        "globalThis.__intervalTicks = 0; \
-         globalThis.__pendingTimers = 1; \
-         globalThis._getPendingTimerCount = () => globalThis.__pendingTimers; \
-         globalThis._timerDispatch = () => { \
-           globalThis.__intervalTicks += 1; \
-           if (globalThis.__intervalTicks >= 4) { \
-             globalThis.__pendingTimers = 0; \
-           } \
-         };",
-        &mut bridge_cache,
-    );
-    assert_eq!(code, 0, "unexpected execute_script exit code");
-    assert!(
-        error.is_none(),
-        "unexpected execute_script error: {error:?}"
-    );
-
-    let timer_thread = thread::spawn(move || {
-        for _ in 0..4 {
-            thread::sleep(Duration::from_millis(500));
-            tx.send(SessionCommand::Message(SessionMessage::StreamEvent(
-                StreamEvent {
-                    event_type: "timer".into(),
-                    payload: Vec::new(),
-                },
-            )))
-            .unwrap();
-        }
-    });
-
-    let started = Instant::now();
-    let status = run_event_loop_with_watchdog(scope, &rx, &pending);
-    let elapsed = started.elapsed();
-
-    timer_thread.join().unwrap();
-
-    assert_event_loop_watchdog_did_not_fire(&status);
-    assert!(
-        matches!(status, EventLoopStatus::Completed),
-        "unexpected event loop status: {:?}",
-        status
-    );
-    assert!(
-        elapsed >= Duration::from_millis(1900),
-        "event loop exited before four 500ms timer ticks elapsed: {:?}",
-        elapsed
-    );
-    if run_timing_sensitive_tests() {
-        assert!(
-            elapsed < Duration::from_secs(5),
-            "event loop did not exit promptly after timers drained: {:?}",
-            elapsed
-        );
-    }
-
-    let source = v8::String::new(
-        scope,
-        "globalThis.__intervalTicks === 4 && globalThis.__pendingTimers === 0",
-    )
-    .unwrap();
-    let script = v8::Script::compile(scope, source, None).unwrap();
-    let result = script.run(scope).unwrap();
-    assert!(
-        result.boolean_value(scope),
-        "expected timer-backed event loop to stay alive until the fourth tick"
-    );
-}
-
-#[test]
-fn event_loop_handles_native_async_wasm_paths_without_hanging() {
-    // Keep the async WASM event-loop coverage inside one top-level libtest case.
-    // Splitting these into separate tests in the same binary still trips the
-    // V8 init/teardown SIGSEGV boundary that affects other consolidated suites.
-    event_loop_pumps_v8_platform_tasks_for_native_wasm_promises();
-    event_loop_completes_native_async_wasm_instantiate_promises();
-    event_loop_surfaces_native_async_wasm_compile_errors_without_hanging();
-    event_loop_waits_for_refed_guest_timers_between_interval_ticks();
-}
diff --git a/crates/v8-runtime/tests/snapshot.rs b/crates/v8-runtime/tests/snapshot.rs
deleted file mode 100644
index 84d2d5b21..000000000
--- a/crates/v8-runtime/tests/snapshot.rs
+++ /dev/null
@@ -1,6 +0,0 @@
-use secure_exec_v8_runtime::snapshot::run_snapshot_consolidated_checks;
-
-#[test]
-fn snapshot_consolidated_tests() {
-    run_snapshot_consolidated_checks();
-}
diff --git a/crates/vfs-core/Cargo.toml b/crates/vfs-core/Cargo.toml
new file mode 100644
index 000000000..1e16b8725
--- /dev/null
+++ b/crates/vfs-core/Cargo.toml
@@ -0,0 +1,13 @@
+[package]
+name = "secure-exec-vfs-core"
+version.workspace = true
+edition.workspace = true
+license.workspace = true
+repository.workspace = true
+description = "secure-exec-vfs-core compatibility shim for agentos-vfs-core"
+
+[lib]
+name = "secure_exec_vfs_core"
+
+[dependencies]
+vfs = { package = "agentos-vfs-core", path = "../../../agentos/crates/vfs", version = "0.0.1" }
diff --git a/crates/vfs-core/src/lib.rs b/crates/vfs-core/src/lib.rs
new file mode 100644
index 000000000..a4bba17ab
--- /dev/null
+++ b/crates/vfs-core/src/lib.rs
@@ -0,0 +1,3 @@
+//! Compatibility shim for `agentos-vfs-core`.
+
+pub use vfs::*;
diff --git a/crates/vfs/AGENTS.md b/crates/vfs/AGENTS.md
deleted file mode 120000
index 681311eb9..000000000
--- a/crates/vfs/AGENTS.md
+++ /dev/null
@@ -1 +0,0 @@
-CLAUDE.md
\ No newline at end of file
diff --git a/crates/vfs/CLAUDE.md b/crates/vfs/CLAUDE.md
deleted file mode 100644
index b36abbf79..000000000
--- a/crates/vfs/CLAUDE.md
+++ /dev/null
@@ -1,8 +0,0 @@
-# vfs
-
-- `vfs` is generic filesystem infrastructure only. Do not add secure-exec sidecar, bridge, S3, SQLite, host-disk, or registry coupling here.
-- The crate intentionally contains separate filesystem type universes under explicit modules while the consolidation is in progress. Do not glob-merge names that would confuse those boundaries.
-- Concrete environment-bound backends belong in `secure-exec-vfs`.
-- The `chunked` engine deliberately decouples the `MetadataStore` from the `BlockStore`: blocks are content-addressed, opaque, and self-describing only as a set, while the directory tree, inode table, chunk map, and refcounts live entirely in the metadata store. The engine makes **no self-containment promise** about either half. Pairing a block store with a metadata store, and ensuring the metadata store is durable and co-located with whatever lifecycle the blocks need, is the **caller's responsibility** (the sidecar plugin / client config that wires the backends), not the engine's. So e.g. an `S3BlockStore` backed by a local `SqliteMetadataStore` is a valid, intended configuration; the engine does not assume blocks carry enough information to reconstruct the tree, and "the metadata lives elsewhere than the blocks" is by design, not a defect. If a deployment needs the tree to survive loss of the local metadata, it must choose a durable metadata store (e.g. the callback backend) — that is a wiring decision, not an engine concern.
-- The engine data plane (`chunked`/`object` engines, `MetadataStore`/`BlockStore`/`ObjectBackend` impls, `CachedMetadataStore`, and the `MountedEngineFileSystem` adapter) assumes **single-writer semantics**: one writer owns a given filesystem/mount at a time. Block refcounting, cache invalidation, and read-modify-write chunk edits are correct only under that assumption. There is no cross-process coordination, locking, or conflict resolution; concurrent writers against the same metadata/block backing store (e.g. two sidecars sharing one S3 prefix + SQLite file, or a shared callback store) can corrupt refcounts and orphan or double-free blocks. Do not rely on these engines for multi-writer/shared-storage scenarios without adding an external coordination layer.
-- `MetadataStore::snapshot`/`fork` are intentionally not production-GC-ready yet. There is no snapshot deletion API, so snapshot-pinned block refs are permanent for now. Do not wire snapshot/fork into plugins that need block reclamation until snapshot lifecycle and persistent snapshot rows are implemented.
diff --git a/crates/vfs/Cargo.toml b/crates/vfs/Cargo.toml
index 56e87f943..54ecf2de6 100644
--- a/crates/vfs/Cargo.toml
+++ b/crates/vfs/Cargo.toml
@@ -1,32 +1,13 @@
 [package]
-name = "secure-exec-vfs-core"
+name = "secure-exec-vfs"
 version.workspace = true
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
-description = "Generic async virtual filesystem primitives"
+description = "secure-exec-vfs compatibility shim for agentos-vfs"
 
-# Published as `secure-exec-vfs-core`, but the lib is named `vfs` so the
-# workspace-wide `vfs = { package = "secure-exec-vfs-core" }` alias and this
-# crate's own `tests/*.rs` (`use vfs::...`) resolve it by that name.
 [lib]
-name = "vfs"
+name = "secure_exec_vfs"
 
 [dependencies]
-async-trait = "0.1"
-base64 = "0.22"
-blake3 = "1"
-serde = { version = "1.0", features = ["derive"] }
-serde_json = "1.0"
-# Drop-in std::time replacement: re-exports std on native, uses js_sys::Date /
-# performance.now() on wasm32 (where std SystemTime/Instant abort).
-web-time = "1.1"
-
-[target.'cfg(not(target_arch = "wasm32"))'.dependencies]
-memmap2 = "0.9"
-tar = "0.4"
-tokio = { version = "1", features = ["rt", "rt-multi-thread"] }
-tracing = "0.1"
-
-[dev-dependencies]
-tokio = { version = "1", features = ["macros", "rt", "rt-multi-thread"] }
+agentos_vfs = { package = "agentos-vfs", path = "../../../agentos/crates/vfs-store", version = "0.0.1" }
diff --git a/crates/vfs/assets/base-filesystem.json b/crates/vfs/assets/base-filesystem.json
deleted file mode 100644
index 64e03bfa5..000000000
--- a/crates/vfs/assets/base-filesystem.json
+++ /dev/null
@@ -1,536 +0,0 @@
-{
-  "source": {
-    "snapshotPath": "alpine-defaults.json",
-    "image": "alpine:3.22",
-    "snapshotCreatedAt": "2026-06-22T19:45:20.529Z",
-    "builtAt": "2026-06-23T03:47:12.644Z",
-    "transforms": [
-      "Normalize HOSTNAME to secure-exec",
-      "Preserve the captured user-level environment and filesystem layout as the secure-exec base layer",
-      "Add the non-Alpine /workspace directory (default agent working directory) owned by the base user"
-    ]
-  },
-  "environment": {
-    "env": {
-      "CHARSET": "UTF-8",
-      "HOME": "/home/agentos",
-      "HOSTNAME": "secure-exec",
-      "LANG": "C.UTF-8",
-      "LC_COLLATE": "C",
-      "LOGNAME": "agentos",
-      "PAGER": "less",
-      "PATH": "/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin",
-      "SHELL": "/bin/sh",
-      "USER": "agentos"
-    },
-    "prompt": "\\h:\\w\\$ "
-  },
-  "filesystem": {
-    "entries": [
-      {
-        "path": "/",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/bin",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/alpine-release",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "3.22.4\n"
-      },
-      {
-        "path": "/etc/apk",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/busybox-paths.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/crontabs",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/group",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "root:x:0:root\nbin:x:1:root,bin,daemon\ndaemon:x:2:root,bin,daemon\nsys:x:3:root,bin\nadm:x:4:root,daemon\ntty:x:5:\ndisk:x:6:root\nlp:x:7:lp\nkmem:x:9:\nwheel:x:10:root\nfloppy:x:11:root\nmail:x:12:mail\nnews:x:13:news\nuucp:x:14:uucp\ncron:x:16:cron\naudio:x:18:\ncdrom:x:19:\ndialout:x:20:root\nftp:x:21:\nsshd:x:22:\ninput:x:23:\ntape:x:26:root\nvideo:x:27:root\nnetdev:x:28:\nkvm:x:34:kvm\ngames:x:35:\nshadow:x:42:\nwww-data:x:82:\nusers:x:100:games\nntp:x:123:\nabuild:x:300:\nutmp:x:406:\nping:x:999:\nnogroup:x:65533:\nnobody:x:65534:\nagentos:x:1000:\n"
-      },
-      {
-        "path": "/etc/hostname",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "secure-exec\n"
-      },
-      {
-        "path": "/etc/logrotate.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/modprobe.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/modules-load.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/network",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/nsswitch.conf",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "# musl itself does not support NSS, however some third-party DNS\n# implementations use the nsswitch.conf file to determine what\n# policy to follow.\n# Editing this file is not recommended.\nhosts: files dns\n"
-      },
-      {
-        "path": "/etc/opt",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/os-release",
-        "type": "symlink",
-        "mode": "777",
-        "uid": 0,
-        "gid": 0,
-        "target": "../usr/lib/os-release"
-      },
-      {
-        "path": "/etc/passwd",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "root:x:0:0:root:/root:/bin/sh\nbin:x:1:1:bin:/bin:/sbin/nologin\ndaemon:x:2:2:daemon:/sbin:/sbin/nologin\nlp:x:4:7:lp:/var/spool/lpd:/sbin/nologin\nsync:x:5:0:sync:/sbin:/bin/sync\nshutdown:x:6:0:shutdown:/sbin:/sbin/shutdown\nhalt:x:7:0:halt:/sbin:/sbin/halt\nmail:x:8:12:mail:/var/mail:/sbin/nologin\nnews:x:9:13:news:/usr/lib/news:/sbin/nologin\nuucp:x:10:14:uucp:/var/spool/uucppublic:/sbin/nologin\ncron:x:16:16:cron:/var/spool/cron:/sbin/nologin\nftp:x:21:21::/var/lib/ftp:/sbin/nologin\nsshd:x:22:22:sshd:/dev/null:/sbin/nologin\ngames:x:35:35:games:/usr/games:/sbin/nologin\nntp:x:123:123:NTP:/var/empty:/sbin/nologin\nguest:x:405:100:guest:/dev/null:/sbin/nologin\nnobody:x:65534:65534:nobody:/:/sbin/nologin\nagentos:x:1000:1000::/home/agentos:/bin/sh\n"
-      },
-      {
-        "path": "/etc/periodic",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/profile",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "export PATH=\"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin\"\n\nexport PAGER=less\numask 022\n\n# use nicer PS1 for bash and busybox ash\nif [ -n \"$BASH_VERSION\" -o \"$BB_ASH_VERSION\" ]; then\n\tPS1='\\h:\\w\\$ '\n# use nicer PS1 for zsh\nelif [ -n \"$ZSH_VERSION\" ]; then\n\tPS1='%m:%~%# '\n# set up fallback default PS1\nelse\n\t: \"${HOSTNAME:=$(hostname)}\"\n\tPS1='${HOSTNAME%%.*}:$PWD'\n\t[ \"$(id -u)\" -eq 0 ] && PS1=\"${PS1}# \" || PS1=\"${PS1}\\$ \"\nfi\n\nfor script in /etc/profile.d/*.sh ; do\n\tif [ -r \"$script\" ] ; then\n\t\t. \"$script\"\n\tfi\ndone\nunset script\n"
-      },
-      {
-        "path": "/etc/profile.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/secfixes.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/shadow",
-        "type": "file",
-        "mode": "640",
-        "uid": 0,
-        "gid": 42,
-        "content": "root:*::0:::::\nbin:!::0:::::\ndaemon:!::0:::::\nlp:!::0:::::\nsync:!::0:::::\nshutdown:!::0:::::\nhalt:!::0:::::\nmail:!::0:::::\nnews:!::0:::::\nuucp:!::0:::::\ncron:!::0:::::\nftp:!::0:::::\nsshd:!::0:::::\ngames:!::0:::::\nntp:!::0:::::\nguest:!::0:::::\nnobody:!::0:::::\nagentos:!:20626:0:99999:7:::\n"
-      },
-      {
-        "path": "/etc/shells",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "# valid login shells\n/bin/sh\n/bin/ash\n"
-      },
-      {
-        "path": "/etc/ssl",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/ssl1.1",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/sysctl.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/etc/udhcpc",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/home",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/home/agentos",
-        "type": "directory",
-        "mode": "2755",
-        "uid": 1000,
-        "gid": 1000
-      },
-      {
-        "path": "/lib",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/lib/apk",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/lib/firmware",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/lib/modules-load.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/lib/sysctl.d",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/media",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/media/cdrom",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/media/floppy",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/media/usb",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/mnt",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/opt",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/root",
-        "type": "directory",
-        "mode": "700",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/run",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/run/lock",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/sbin",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/srv",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/sys",
-        "type": "directory",
-        "mode": "555",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/tmp",
-        "type": "directory",
-        "mode": "1777",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/usr",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/usr/bin",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/usr/bin/env",
-        "type": "symlink",
-        "mode": "777",
-        "uid": 0,
-        "gid": 0,
-        "target": "/bin/busybox"
-      },
-      {
-        "path": "/usr/lib",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/usr/lib/os-release",
-        "type": "file",
-        "mode": "644",
-        "uid": 0,
-        "gid": 0,
-        "content": "NAME=\"Alpine Linux\"\nID=alpine\nVERSION_ID=3.22.4\nPRETTY_NAME=\"Alpine Linux v3.22\"\nHOME_URL=\"https://alpinelinux.org/\"\nBUG_REPORT_URL=\"https://gitlab.alpinelinux.org/alpine/aports/-/issues\"\n"
-      },
-      {
-        "path": "/usr/local",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/usr/sbin",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/usr/share",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/cache",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/empty",
-        "type": "directory",
-        "mode": "555",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/lib",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/local",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/lock",
-        "type": "symlink",
-        "mode": "777",
-        "uid": 0,
-        "gid": 0,
-        "target": "../run/lock"
-      },
-      {
-        "path": "/var/log",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/mail",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/opt",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/run",
-        "type": "symlink",
-        "mode": "777",
-        "uid": 0,
-        "gid": 0,
-        "target": "../run"
-      },
-      {
-        "path": "/var/spool",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/spool/cron",
-        "type": "directory",
-        "mode": "755",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/var/spool/cron/crontabs",
-        "type": "symlink",
-        "mode": "777",
-        "uid": 0,
-        "gid": 0,
-        "target": "../../../etc/crontabs"
-      },
-      {
-        "path": "/var/tmp",
-        "type": "directory",
-        "mode": "1777",
-        "uid": 0,
-        "gid": 0
-      },
-      {
-        "path": "/workspace",
-        "type": "directory",
-        "mode": "755",
-        "uid": 1000,
-        "gid": 1000
-      }
-    ]
-  }
-}
diff --git a/crates/vfs/build.rs b/crates/vfs/build.rs
deleted file mode 100644
index 955b501ed..000000000
--- a/crates/vfs/build.rs
+++ /dev/null
@@ -1,34 +0,0 @@
-use std::{env, fs, path::PathBuf};
-
-// Stage the base filesystem fixture into OUT_DIR. In-tree builds use the
-// canonical secure-exec package fixture from the current workspace; the
-// published crate falls back to the vendored `assets/base-filesystem.json` copy.
-fn main() {
-    let manifest_dir =
-        PathBuf::from(env::var("CARGO_MANIFEST_DIR").expect("CARGO_MANIFEST_DIR must be set"));
-    let out_dir = PathBuf::from(env::var("OUT_DIR").expect("OUT_DIR must be set"));
-
-    println!("cargo:rerun-if-changed=build.rs");
-
-    let workspace_fixtures = [
-        manifest_dir.join("../../packages/secure-exec-core/fixtures/base-filesystem.json"),
-        manifest_dir.join("../../packages/core/fixtures/base-filesystem.json"),
-    ];
-    let vendored = manifest_dir.join("assets/base-filesystem.json");
-    let src = workspace_fixtures
-        .into_iter()
-        .find(|fixture| fixture.exists())
-        .unwrap_or(vendored);
-
-    println!("cargo:rerun-if-changed={}", src.display());
-
-    let dest = out_dir.join("base-filesystem.json");
-    fs::copy(&src, &dest).unwrap_or_else(|error| {
-        panic!(
-            "failed to stage base-filesystem.json from {} to {}: {}",
-            src.display(),
-            dest.display(),
-            error
-        )
-    });
-}
diff --git a/crates/vfs/src/adapter/mod.rs b/crates/vfs/src/adapter/mod.rs
deleted file mode 100644
index a3942ebb7..000000000
--- a/crates/vfs/src/adapter/mod.rs
+++ /dev/null
@@ -1,3 +0,0 @@
-pub mod mounted_fs;
-
-pub use mounted_fs::MountedEngineFileSystem;
diff --git a/crates/vfs/src/adapter/mounted_fs.rs b/crates/vfs/src/adapter/mounted_fs.rs
deleted file mode 100644
index 42d396d4b..000000000
--- a/crates/vfs/src/adapter/mounted_fs.rs
+++ /dev/null
@@ -1,287 +0,0 @@
-use crate::posix::{
-    MountedFileSystem, VfsError as PosixVfsError, VfsResult as PosixVfsResult, VirtualDirEntry,
-    VirtualStat,
-};
-use std::any::Any;
-use std::sync::atomic::{AtomicU64, Ordering};
-use tokio::runtime::{Builder, Runtime};
-
-static NEXT_ENGINE_DEVICE_ID: AtomicU64 = AtomicU64::new(4096);
-
-pub struct MountedEngineFileSystem<F> {
-    inner: F,
-    runtime: Runtime,
-    device_id: u64,
-}
-
-impl<F> MountedEngineFileSystem<F> {
-    pub fn new(inner: F) -> PosixVfsResult<Self> {
-        Ok(Self {
-            inner,
-            runtime: Builder::new_current_thread()
-                .enable_all()
-                .build()
-                .map_err(|error| {
-                    PosixVfsError::io(format!("create vfs engine runtime: {error}"))
-                })?,
-            device_id: NEXT_ENGINE_DEVICE_ID.fetch_add(1, Ordering::Relaxed),
-        })
-    }
-
-    fn block_on<T>(
-        &self,
-        future: impl std::future::Future<Output = crate::engine::VfsResult<T>>,
-    ) -> PosixVfsResult<T> {
-        self.runtime.block_on(future).map_err(convert_error)
-    }
-}
-
-impl<F> MountedFileSystem for MountedEngineFileSystem<F>
-where
-    F: crate::engine::VirtualFileSystem + 'static,
-{
-    fn as_any(&self) -> &dyn Any {
-        self
-    }
-
-    fn as_any_mut(&mut self) -> &mut dyn Any {
-        self
-    }
-
-    fn read_file(&mut self, path: &str) -> PosixVfsResult<Vec<u8>> {
-        self.block_on(self.inner.read_file(path))
-    }
-
-    fn read_dir(&mut self, path: &str) -> PosixVfsResult<Vec<String>> {
-        self.block_on(self.inner.read_dir(path))
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> PosixVfsResult<Vec<VirtualDirEntry>> {
-        self.block_on(self.inner.read_dir_with_types(path))
-            .map(|entries| {
-                entries
-                    .into_iter()
-                    .map(|entry| VirtualDirEntry {
-                        name: entry.name,
-                        is_directory: entry.kind == crate::engine::InodeType::Directory,
-                        is_symbolic_link: entry.kind == crate::engine::InodeType::Symlink,
-                    })
-                    .collect()
-            })
-    }
-
-    fn write_file(&mut self, path: &str, content: Vec<u8>) -> PosixVfsResult<()> {
-        self.block_on(self.inner.write_file(path, &content))
-    }
-
-    fn write_file_with_mode(
-        &mut self,
-        path: &str,
-        content: Vec<u8>,
-        mode: Option<u32>,
-    ) -> PosixVfsResult<()> {
-        self.write_file(path, content)?;
-        if let Some(mode) = mode {
-            self.chmod(path, mode)?;
-        }
-        Ok(())
-    }
-
-    fn create_file_exclusive(&mut self, path: &str, content: Vec<u8>) -> PosixVfsResult<()> {
-        if self.exists(path) {
-            return Err(PosixVfsError::new(
-                "EEXIST",
-                format!("file already exists, open '{path}'"),
-            ));
-        }
-        self.write_file(path, content)
-    }
-
-    fn create_file_exclusive_with_mode(
-        &mut self,
-        path: &str,
-        content: Vec<u8>,
-        mode: Option<u32>,
-    ) -> PosixVfsResult<()> {
-        self.create_file_exclusive(path, content)?;
-        if let Some(mode) = mode {
-            self.chmod(path, mode)?;
-        }
-        Ok(())
-    }
-
-    fn append_file(&mut self, path: &str, content: Vec<u8>) -> PosixVfsResult<u64> {
-        self.block_on(self.inner.append(path, &content))
-    }
-
-    fn create_dir(&mut self, path: &str) -> PosixVfsResult<()> {
-        self.block_on(self.inner.create_dir(path))
-    }
-
-    fn create_dir_with_mode(&mut self, path: &str, mode: Option<u32>) -> PosixVfsResult<()> {
-        self.create_dir(path)?;
-        if let Some(mode) = mode {
-            self.chmod(path, mode)?;
-        }
-        Ok(())
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> PosixVfsResult<()> {
-        self.block_on(self.inner.mkdir(path, recursive))
-    }
-
-    fn mkdir_with_mode(
-        &mut self,
-        path: &str,
-        recursive: bool,
-        mode: Option<u32>,
-    ) -> PosixVfsResult<()> {
-        self.mkdir(path, recursive)?;
-        if let Some(mode) = mode {
-            self.chmod(path, mode)?;
-        }
-        Ok(())
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        self.runtime.block_on(self.inner.exists(path))
-    }
-
-    fn stat(&mut self, path: &str) -> PosixVfsResult<VirtualStat> {
-        let stat = self.block_on(self.inner.stat(path))?;
-        Ok(convert_stat(stat, self.device_id))
-    }
-
-    fn remove_file(&mut self, path: &str) -> PosixVfsResult<()> {
-        self.block_on(self.inner.remove_file(path))
-    }
-
-    fn remove_dir(&mut self, path: &str) -> PosixVfsResult<()> {
-        self.block_on(self.inner.remove_dir(path))
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> PosixVfsResult<()> {
-        self.block_on(self.inner.rename(old_path, new_path))
-    }
-
-    fn realpath(&self, path: &str) -> PosixVfsResult<String> {
-        self.block_on(self.inner.realpath(path))
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> PosixVfsResult<()> {
-        self.block_on(self.inner.symlink(target, link_path))
-    }
-
-    fn read_link(&self, path: &str) -> PosixVfsResult<String> {
-        self.block_on(self.inner.readlink(path))
-    }
-
-    fn lstat(&self, path: &str) -> PosixVfsResult<VirtualStat> {
-        let stat = self.block_on(self.inner.lstat(path))?;
-        Ok(convert_stat(stat, self.device_id))
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> PosixVfsResult<()> {
-        self.block_on(self.inner.link(old_path, new_path))
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> PosixVfsResult<()> {
-        self.block_on(self.inner.chmod(path, mode))
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> PosixVfsResult<()> {
-        self.block_on(self.inner.chown(path, uid, gid))
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> PosixVfsResult<()> {
-        self.block_on(self.inner.utimes(path, atime_ms, mtime_ms))
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> PosixVfsResult<()> {
-        self.block_on(self.inner.truncate(path, length))
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> PosixVfsResult<Vec<u8>> {
-        self.block_on(self.inner.pread(path, offset, length))
-    }
-}
-
-fn convert_error(error: crate::engine::VfsError) -> PosixVfsError {
-    PosixVfsError::new(error.code(), error.message().to_owned())
-}
-
-fn convert_stat(stat: crate::engine::VirtualStat, device_id: u64) -> VirtualStat {
-    VirtualStat {
-        mode: stat.mode,
-        size: stat.size,
-        blocks: stat.blocks,
-        dev: device_id,
-        rdev: 0,
-        is_directory: stat.is_directory,
-        is_symbolic_link: stat.is_symbolic_link,
-        atime_ms: timespec_ms(stat.atime),
-        atime_nsec: stat.atime.nsec,
-        mtime_ms: timespec_ms(stat.mtime),
-        mtime_nsec: stat.mtime.nsec,
-        ctime_ms: timespec_ms(stat.ctime),
-        ctime_nsec: stat.ctime.nsec,
-        birthtime_ms: timespec_ms(stat.birthtime),
-        ino: stat.ino,
-        nlink: stat.nlink,
-        uid: stat.uid,
-        gid: stat.gid,
-    }
-}
-
-fn timespec_ms(time: crate::engine::Timespec) -> u64 {
-    if time.sec < 0 {
-        return 0;
-    }
-    (time.sec as u64).saturating_mul(1_000) + u64::from(time.nsec / 1_000_000)
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use crate::engine::engines::{ChunkedFs, ChunkedFsOptions};
-    use crate::engine::mem::{InMemoryMetadataStore, MemoryBlockStore};
-    use crate::posix::S_IFREG;
-
-    #[test]
-    fn mounted_engine_filesystem_bridges_sync_posix_calls() {
-        let fs = ChunkedFs::with_options(
-            InMemoryMetadataStore::new(),
-            MemoryBlockStore::new(),
-            ChunkedFsOptions {
-                inline_threshold: 2,
-                chunk_size: 4,
-                ..ChunkedFsOptions::default()
-            },
-        );
-        let mut mounted = MountedEngineFileSystem::new(fs).expect("create mounted engine fs");
-
-        mounted
-            .mkdir("/work/nested", true)
-            .expect("create nested dir");
-        mounted
-            .write_file_with_mode("/work/nested/file.txt", b"hello".to_vec(), Some(0o600))
-            .expect("write file");
-        assert_eq!(
-            mounted
-                .pread("/work/nested/file.txt", 1, 3)
-                .expect("pread file"),
-            b"ell"
-        );
-        let entries = mounted
-            .read_dir_with_types("/work/nested")
-            .expect("read typed dir");
-        assert_eq!(entries.len(), 1);
-        assert_eq!(entries[0].name, "file.txt");
-        assert!(!entries[0].is_directory);
-
-        let stat = mounted.stat("/work/nested/file.txt").expect("stat file");
-        assert_eq!(stat.mode & 0o777, 0o600);
-        assert_eq!(stat.mode & S_IFREG, S_IFREG);
-        assert_eq!(stat.size, 5);
-    }
-}
diff --git a/crates/vfs/src/engine/block.rs b/crates/vfs/src/engine/block.rs
deleted file mode 100644
index 6b88eaac2..000000000
--- a/crates/vfs/src/engine/block.rs
+++ /dev/null
@@ -1,23 +0,0 @@
-use crate::engine::error::VfsResult;
-use crate::engine::types::{BlockKey, ObjectEntry, ObjectMeta};
-use async_trait::async_trait;
-
-#[async_trait]
-pub trait BlockStore: Send + Sync {
-    async fn get(&self, key: &BlockKey) -> VfsResult<Vec<u8>>;
-    async fn get_range(&self, key: &BlockKey, off: u64, len: u64) -> VfsResult<Vec<u8>>;
-    async fn put(&self, key: &BlockKey, data: &[u8]) -> VfsResult<()>;
-    async fn exists(&self, key: &BlockKey) -> VfsResult<bool>;
-    async fn delete_many(&self, keys: &[BlockKey]) -> VfsResult<()>;
-    async fn copy(&self, src: &BlockKey, dst: &BlockKey) -> VfsResult<()>;
-}
-
-#[async_trait]
-pub trait ObjectBackend: Send + Sync {
-    async fn list(&self, prefix: &str) -> VfsResult<Vec<ObjectEntry>>;
-    async fn head(&self, key: &str) -> VfsResult<Option<ObjectMeta>>;
-    async fn get_range(&self, key: &str, off: u64, len: u64) -> VfsResult<Vec<u8>>;
-    async fn put(&self, key: &str, data: &[u8], meta: ObjectMeta) -> VfsResult<()>;
-    async fn copy(&self, src: &str, dst: &str) -> VfsResult<()>;
-    async fn delete(&self, key: &str) -> VfsResult<()>;
-}
diff --git a/crates/vfs/src/engine/cache.rs b/crates/vfs/src/engine/cache.rs
deleted file mode 100644
index bf051d99b..000000000
--- a/crates/vfs/src/engine/cache.rs
+++ /dev/null
@@ -1,214 +0,0 @@
-use crate::engine::error::VfsResult;
-use crate::engine::metadata::MetadataStore;
-use crate::engine::types::{
-    BlockKey, ChunkEdit, ChunkRange, ChunkRef, CreateInodeAttrs, DentryStat, InodeMeta, InodePatch,
-    SnapshotId,
-};
-use async_trait::async_trait;
-use std::collections::{BTreeMap, VecDeque};
-use std::sync::Mutex;
-
-pub struct CachedMetadataStore<M> {
-    inner: M,
-    cache: Mutex<CacheState>,
-}
-
-#[derive(Debug)]
-struct CacheState {
-    capacity: usize,
-    generation: u64,
-    resolve: BTreeMap<String, Option<InodeMeta>>,
-    lstat: BTreeMap<String, Option<InodeMeta>>,
-    list_dir: BTreeMap<u64, Vec<DentryStat>>,
-    order: VecDeque<CacheKey>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-enum CacheKey {
-    Resolve(String),
-    Lstat(String),
-    ListDir(u64),
-}
-
-impl<M> CachedMetadataStore<M> {
-    pub fn new(inner: M, capacity: usize) -> Self {
-        Self {
-            inner,
-            cache: Mutex::new(CacheState {
-                capacity,
-                generation: 0,
-                resolve: BTreeMap::new(),
-                lstat: BTreeMap::new(),
-                list_dir: BTreeMap::new(),
-                order: VecDeque::new(),
-            }),
-        }
-    }
-
-    pub fn into_inner(self) -> M {
-        self.inner
-    }
-
-    fn clear_after_mutation(&self) {
-        let mut cache = self.cache.lock().expect("cache mutex poisoned");
-        cache.generation = cache.generation.wrapping_add(1);
-        cache.resolve.clear();
-        cache.lstat.clear();
-        cache.list_dir.clear();
-        cache.order.clear();
-    }
-}
-
-impl CacheState {
-    fn remember(&mut self, key: CacheKey) {
-        if self.capacity == 0 {
-            self.resolve.clear();
-            self.lstat.clear();
-            self.list_dir.clear();
-            self.order.clear();
-            return;
-        }
-        self.order.push_back(key);
-        while self.order.len() > self.capacity {
-            if let Some(evicted) = self.order.pop_front() {
-                match evicted {
-                    CacheKey::Resolve(path) => {
-                        self.resolve.remove(&path);
-                    }
-                    CacheKey::Lstat(path) => {
-                        self.lstat.remove(&path);
-                    }
-                    CacheKey::ListDir(ino) => {
-                        self.list_dir.remove(&ino);
-                    }
-                }
-            }
-        }
-    }
-}
-
-#[async_trait]
-impl<M: MetadataStore> MetadataStore for CachedMetadataStore<M> {
-    async fn resolve(&self, path: &str) -> VfsResult<InodeMeta> {
-        let generation = {
-            let cache = self.cache.lock().expect("cache mutex poisoned");
-            if let Some(cached) = cache.resolve.get(path).cloned() {
-                return cached.ok_or_else(|| crate::engine::error::VfsError::enoent(path));
-            }
-            cache.generation
-        };
-        let result = self.inner.resolve(path).await;
-        let mut cache = self.cache.lock().expect("cache mutex poisoned");
-        if cache.generation == generation {
-            cache.resolve.insert(path.to_string(), result.clone().ok());
-            cache.remember(CacheKey::Resolve(path.to_string()));
-        }
-        result
-    }
-
-    async fn resolve_parent(&self, path: &str) -> VfsResult<(InodeMeta, String)> {
-        self.inner.resolve_parent(path).await
-    }
-
-    async fn lstat(&self, path: &str) -> VfsResult<InodeMeta> {
-        let generation = {
-            let cache = self.cache.lock().expect("cache mutex poisoned");
-            if let Some(cached) = cache.lstat.get(path).cloned() {
-                return cached.ok_or_else(|| crate::engine::error::VfsError::enoent(path));
-            }
-            cache.generation
-        };
-        let result = self.inner.lstat(path).await;
-        let mut cache = self.cache.lock().expect("cache mutex poisoned");
-        if cache.generation == generation {
-            cache.lstat.insert(path.to_string(), result.clone().ok());
-            cache.remember(CacheKey::Lstat(path.to_string()));
-        }
-        result
-    }
-
-    async fn list_dir(&self, ino: u64) -> VfsResult<Vec<DentryStat>> {
-        let generation = {
-            let cache = self.cache.lock().expect("cache mutex poisoned");
-            if let Some(cached) = cache.list_dir.get(&ino).cloned() {
-                return Ok(cached);
-            }
-            cache.generation
-        };
-        let entries = self.inner.list_dir(ino).await?;
-        let mut cache = self.cache.lock().expect("cache mutex poisoned");
-        if cache.generation == generation {
-            cache.list_dir.insert(ino, entries.clone());
-            cache.remember(CacheKey::ListDir(ino));
-        }
-        Ok(entries)
-    }
-
-    async fn create(
-        &self,
-        parent: u64,
-        name: &str,
-        attrs: CreateInodeAttrs,
-    ) -> VfsResult<InodeMeta> {
-        let result = self.inner.create(parent, name, attrs).await;
-        self.clear_after_mutation();
-        result
-    }
-
-    async fn link(&self, parent: u64, name: &str, target: u64) -> VfsResult<()> {
-        let result = self.inner.link(parent, name, target).await;
-        self.clear_after_mutation();
-        result
-    }
-
-    async fn remove(&self, parent: u64, name: &str) -> VfsResult<Vec<BlockKey>> {
-        let result = self.inner.remove(parent, name).await;
-        self.clear_after_mutation();
-        result
-    }
-
-    async fn rename(
-        &self,
-        src_parent: u64,
-        src: &str,
-        dst_parent: u64,
-        dst: &str,
-    ) -> VfsResult<Vec<BlockKey>> {
-        let result = self.inner.rename(src_parent, src, dst_parent, dst).await;
-        self.clear_after_mutation();
-        result
-    }
-
-    async fn set_attr(&self, ino: u64, patch: InodePatch) -> VfsResult<Vec<BlockKey>> {
-        let result = self.inner.set_attr(ino, patch).await;
-        self.clear_after_mutation();
-        result
-    }
-
-    async fn commit_write(
-        &self,
-        ino: u64,
-        edits: Vec<ChunkEdit>,
-        new_size: u64,
-    ) -> VfsResult<Vec<BlockKey>> {
-        let result = self.inner.commit_write(ino, edits, new_size).await;
-        self.clear_after_mutation();
-        result
-    }
-
-    async fn get_chunks(&self, ino: u64, range: ChunkRange) -> VfsResult<Vec<ChunkRef>> {
-        self.inner.get_chunks(ino, range).await
-    }
-
-    async fn snapshot(&self, root: u64) -> VfsResult<SnapshotId> {
-        self.inner.snapshot(root).await
-    }
-
-    async fn fork(&self, snap: SnapshotId) -> VfsResult<u64> {
-        self.inner.fork(snap).await
-    }
-
-    async fn gc(&self) -> VfsResult<Vec<BlockKey>> {
-        self.inner.gc().await
-    }
-}
diff --git a/crates/vfs/src/engine/engines/chunked.rs b/crates/vfs/src/engine/engines/chunked.rs
deleted file mode 100644
index 15cee897a..000000000
--- a/crates/vfs/src/engine/engines/chunked.rs
+++ /dev/null
@@ -1,701 +0,0 @@
-use crate::engine::block::BlockStore;
-use crate::engine::error::{VfsError, VfsResult};
-use crate::engine::metadata::MetadataStore;
-use crate::engine::types::{
-    normalize_path, BlockKey, ChunkEdit, ChunkRange, CreateInodeAttrs, Dentry, InodeMeta,
-    InodePatch, InodeType, SnapshotId, Storage, Timespec, VirtualStat, DEFAULT_CHUNK_SIZE,
-    DEFAULT_INLINE_THRESHOLD,
-};
-use crate::engine::vfs::{Snapshottable, VirtualFileSystem};
-use async_trait::async_trait;
-use std::collections::BTreeMap;
-
-#[derive(Debug, Clone)]
-pub struct ChunkedFsOptions {
-    pub inline_threshold: usize,
-    pub chunk_size: u32,
-    pub uid: u32,
-    pub gid: u32,
-    pub file_mode: u32,
-    pub dir_mode: u32,
-}
-
-impl Default for ChunkedFsOptions {
-    fn default() -> Self {
-        Self {
-            inline_threshold: DEFAULT_INLINE_THRESHOLD,
-            chunk_size: DEFAULT_CHUNK_SIZE,
-            uid: 0,
-            gid: 0,
-            file_mode: 0o644,
-            dir_mode: 0o755,
-        }
-    }
-}
-
-#[derive(Debug, Clone)]
-pub struct ChunkedFs<M, B> {
-    metadata: M,
-    blocks: B,
-    options: ChunkedFsOptions,
-}
-
-impl<M, B> ChunkedFs<M, B> {
-    pub fn new(metadata: M, blocks: B) -> Self {
-        Self::with_options(metadata, blocks, ChunkedFsOptions::default())
-    }
-
-    pub fn with_options(metadata: M, blocks: B, options: ChunkedFsOptions) -> Self {
-        Self {
-            metadata,
-            blocks,
-            options,
-        }
-    }
-
-    pub fn metadata(&self) -> &M {
-        &self.metadata
-    }
-
-    pub fn blocks(&self) -> &B {
-        &self.blocks
-    }
-}
-
-impl<M: MetadataStore, B: BlockStore> ChunkedFs<M, B> {
-    async fn write_existing_or_create(&self, path: &str, content: &[u8]) -> VfsResult<()> {
-        let (parent, name) = self.metadata.resolve_parent(path).await?;
-        let existing = self.metadata.lstat(path).await.ok();
-        let ino = match existing {
-            Some(meta) => {
-                if meta.kind == InodeType::Directory {
-                    return Err(VfsError::eisdir(path));
-                }
-                meta.ino
-            }
-            None => {
-                let storage = if content.len() <= self.options.inline_threshold {
-                    Storage::Inline(content.to_vec())
-                } else {
-                    Storage::Chunked {
-                        chunk_size: self.options.chunk_size,
-                    }
-                };
-                let meta = self
-                    .metadata
-                    .create(
-                        parent.ino,
-                        &name,
-                        CreateInodeAttrs::file(
-                            self.options.file_mode,
-                            self.options.uid,
-                            self.options.gid,
-                            storage,
-                        ),
-                    )
-                    .await?;
-                if content.len() <= self.options.inline_threshold {
-                    return Ok(());
-                }
-                meta.ino
-            }
-        };
-
-        if content.len() <= self.options.inline_threshold {
-            let freed = self
-                .metadata
-                .set_attr(
-                    ino,
-                    InodePatch {
-                        storage: Some(Storage::Inline(content.to_vec())),
-                        size: Some(content.len() as u64),
-                        ..InodePatch::default()
-                    },
-                )
-                .await?;
-            self.blocks.delete_many(&freed).await?;
-            return Ok(());
-        }
-
-        let mut edits = Vec::new();
-        for (index, chunk) in content.chunks(self.options.chunk_size as usize).enumerate() {
-            let key = BlockKey::from_content(chunk);
-            if !self.blocks.exists(&key).await? {
-                self.blocks.put(&key, chunk).await?;
-            }
-            edits.push(ChunkEdit {
-                index: index as u64,
-                key,
-                len: chunk.len() as u32,
-            });
-        }
-        self.metadata
-            .set_attr(
-                ino,
-                InodePatch {
-                    storage: Some(Storage::Chunked {
-                        chunk_size: self.options.chunk_size,
-                    }),
-                    size: Some(content.len() as u64),
-                    ..InodePatch::default()
-                },
-            )
-            .await?;
-        let freed = self
-            .metadata
-            .commit_write(ino, edits, content.len() as u64)
-            .await?;
-        self.blocks.delete_many(&freed).await?;
-        Ok(())
-    }
-
-    fn file_chunk_size(&self, storage: &Storage) -> u32 {
-        match storage {
-            Storage::Chunked { chunk_size } => *chunk_size,
-            Storage::Inline(_) | Storage::None => self.options.chunk_size,
-        }
-    }
-
-    fn ensure_file<'a>(&self, path: &str, meta: &'a InodeMeta) -> VfsResult<&'a InodeMeta> {
-        match meta.kind {
-            InodeType::File => Ok(meta),
-            InodeType::Directory => Err(VfsError::eisdir(path)),
-            InodeType::Symlink => Err(VfsError::eopnotsupp("resolved symlink without target file")),
-        }
-    }
-
-    async fn read_file_range(
-        &self,
-        meta: &InodeMeta,
-        offset: u64,
-        length: usize,
-    ) -> VfsResult<Vec<u8>> {
-        if length == 0 || offset >= meta.size {
-            return Ok(Vec::new());
-        }
-        let available = meta.size.saturating_sub(offset).min(length as u64);
-        let output_len = usize::try_from(available)
-            .map_err(|_| VfsError::einval(format!("range length is too large: {available}")))?;
-
-        match &meta.storage {
-            Storage::Inline(data) => {
-                let start = usize::try_from(offset).map_err(|_| {
-                    VfsError::einval(format!("range offset is too large: {offset}"))
-                })?;
-                if start >= data.len() {
-                    return Ok(vec![0; output_len]);
-                }
-                let end = start.saturating_add(output_len).min(data.len());
-                let mut output = vec![0; output_len];
-                output[..end - start].copy_from_slice(&data[start..end]);
-                Ok(output)
-            }
-            Storage::None => Ok(vec![0; output_len]),
-            Storage::Chunked { chunk_size } => {
-                let chunk_size = u64::from(*chunk_size);
-                let end_offset = offset
-                    .checked_add(available)
-                    .ok_or_else(|| VfsError::einval("range end overflows"))?;
-                let start_index = offset / chunk_size;
-                let end_index = end_offset.div_ceil(chunk_size);
-                let chunks = self
-                    .metadata
-                    .get_chunks(
-                        meta.ino,
-                        ChunkRange {
-                            start: start_index,
-                            end: Some(end_index),
-                        },
-                    )
-                    .await?;
-                let mut output = vec![0; output_len];
-                for chunk in chunks {
-                    let chunk_start = chunk.index.saturating_mul(chunk_size);
-                    let block = self.blocks.get(&chunk.key).await?;
-                    let copy_start = offset.max(chunk_start);
-                    let copy_end = end_offset.min(chunk_start.saturating_add(block.len() as u64));
-                    if copy_start >= copy_end {
-                        continue;
-                    }
-                    let output_start = usize::try_from(copy_start - offset)
-                        .map_err(|_| VfsError::einval("range output offset is too large"))?;
-                    let block_start = usize::try_from(copy_start - chunk_start)
-                        .map_err(|_| VfsError::einval("range block offset is too large"))?;
-                    let len = usize::try_from(copy_end - copy_start)
-                        .map_err(|_| VfsError::einval("range copy length is too large"))?;
-                    output[output_start..output_start + len]
-                        .copy_from_slice(&block[block_start..block_start + len]);
-                }
-                Ok(output)
-            }
-        }
-    }
-
-    async fn put_chunk_edit(&self, index: u64, data: Vec<u8>) -> VfsResult<ChunkEdit> {
-        let len = u32::try_from(data.len())
-            .map_err(|_| VfsError::einval(format!("chunk is too large: {}", data.len())))?;
-        let key = BlockKey::from_content(&data);
-        if !self.blocks.exists(&key).await? {
-            self.blocks.put(&key, &data).await?;
-        }
-        Ok(ChunkEdit { index, key, len })
-    }
-
-    async fn write_chunked_range(
-        &self,
-        meta: &InodeMeta,
-        content: &[u8],
-        offset: u64,
-    ) -> VfsResult<u64> {
-        if content.is_empty() {
-            return Ok(meta.size);
-        }
-        let content_len = u64::try_from(content.len()).map_err(|_| {
-            VfsError::einval(format!("pwrite content is too large: {}", content.len()))
-        })?;
-        let end_offset = offset
-            .checked_add(content_len)
-            .ok_or_else(|| VfsError::einval("pwrite end offset overflows"))?;
-        let new_size = meta.size.max(end_offset);
-
-        if !matches!(meta.storage, Storage::Chunked { .. })
-            && usize::try_from(new_size)
-                .ok()
-                .is_some_and(|len| len <= self.options.inline_threshold)
-        {
-            let old_len = usize::try_from(meta.size)
-                .map_err(|_| VfsError::einval(format!("file is too large: {}", meta.size)))?;
-            let mut data = self.read_file_range(meta, 0, old_len).await?;
-            let start = usize::try_from(offset)
-                .map_err(|_| VfsError::einval(format!("pwrite offset is too large: {offset}")))?;
-            let end = start.saturating_add(content.len());
-            if start > data.len() {
-                data.resize(start, 0);
-            }
-            if end > data.len() {
-                data.resize(end, 0);
-            }
-            data[start..end].copy_from_slice(content);
-            let freed = self
-                .metadata
-                .set_attr(
-                    meta.ino,
-                    InodePatch {
-                        storage: Some(Storage::Inline(data)),
-                        size: Some(new_size),
-                        ..InodePatch::default()
-                    },
-                )
-                .await?;
-            self.blocks.delete_many(&freed).await?;
-            return Ok(new_size);
-        }
-
-        let chunk_size = u64::from(self.file_chunk_size(&meta.storage));
-        let start_index = offset / chunk_size;
-        let end_index = end_offset.div_ceil(chunk_size);
-        let existing_chunks = if matches!(meta.storage, Storage::Chunked { .. }) {
-            self.metadata
-                .get_chunks(
-                    meta.ino,
-                    ChunkRange {
-                        start: start_index,
-                        end: Some(end_index),
-                    },
-                )
-                .await?
-                .into_iter()
-                .map(|chunk| (chunk.index, chunk.key))
-                .collect::<BTreeMap<_, _>>()
-        } else {
-            BTreeMap::new()
-        };
-
-        let mut edits = Vec::new();
-        for index in start_index..end_index {
-            let chunk_start = index.saturating_mul(chunk_size);
-            let chunk_len = chunk_size.min(new_size.saturating_sub(chunk_start));
-            let mut chunk_data = vec![
-                0;
-                usize::try_from(chunk_len).map_err(|_| {
-                    VfsError::einval("chunk length is too large")
-                })?
-            ];
-
-            match &meta.storage {
-                Storage::Inline(data) => {
-                    let copy_start = chunk_start.min(data.len() as u64);
-                    let copy_end = chunk_start.saturating_add(chunk_len).min(data.len() as u64);
-                    if copy_start < copy_end {
-                        let dst = usize::try_from(copy_start - chunk_start)
-                            .map_err(|_| VfsError::einval("inline chunk offset is too large"))?;
-                        let src = usize::try_from(copy_start)
-                            .map_err(|_| VfsError::einval("inline source offset is too large"))?;
-                        let len = usize::try_from(copy_end - copy_start)
-                            .map_err(|_| VfsError::einval("inline copy length is too large"))?;
-                        chunk_data[dst..dst + len].copy_from_slice(&data[src..src + len]);
-                    }
-                }
-                Storage::Chunked { .. } => {
-                    if let Some(key) = existing_chunks.get(&index) {
-                        let old = self.blocks.get(key).await?;
-                        let len = old.len().min(chunk_data.len());
-                        chunk_data[..len].copy_from_slice(&old[..len]);
-                    }
-                }
-                Storage::None => {}
-            }
-
-            let write_start = offset.max(chunk_start);
-            let write_end = end_offset.min(chunk_start.saturating_add(chunk_len));
-            if write_start < write_end {
-                let dst = usize::try_from(write_start - chunk_start)
-                    .map_err(|_| VfsError::einval("chunk write offset is too large"))?;
-                let src = usize::try_from(write_start - offset)
-                    .map_err(|_| VfsError::einval("content write offset is too large"))?;
-                let len = usize::try_from(write_end - write_start)
-                    .map_err(|_| VfsError::einval("chunk write length is too large"))?;
-                chunk_data[dst..dst + len].copy_from_slice(&content[src..src + len]);
-            }
-
-            edits.push(self.put_chunk_edit(index, chunk_data).await?);
-        }
-
-        if !matches!(meta.storage, Storage::Chunked { .. }) {
-            self.metadata
-                .set_attr(
-                    meta.ino,
-                    InodePatch {
-                        storage: Some(Storage::Chunked {
-                            chunk_size: self.options.chunk_size,
-                        }),
-                        size: Some(new_size),
-                        ..InodePatch::default()
-                    },
-                )
-                .await?;
-        }
-        let freed = self
-            .metadata
-            .commit_write(meta.ino, edits, new_size)
-            .await?;
-        self.blocks.delete_many(&freed).await?;
-        Ok(new_size)
-    }
-}
-
-#[async_trait]
-impl<M: MetadataStore, B: BlockStore> VirtualFileSystem for ChunkedFs<M, B> {
-    async fn read_file(&self, path: &str) -> VfsResult<Vec<u8>> {
-        let meta = self.metadata.resolve(path).await?;
-        self.ensure_file(path, &meta)?;
-        let len = usize::try_from(meta.size)
-            .map_err(|_| VfsError::einval(format!("file is too large: {}", meta.size)))?;
-        self.read_file_range(&meta, 0, len).await
-    }
-
-    async fn read_dir(&self, path: &str) -> VfsResult<Vec<String>> {
-        let meta = self.metadata.resolve(path).await?;
-        Ok(self
-            .metadata
-            .list_dir(meta.ino)
-            .await?
-            .into_iter()
-            .map(|entry| entry.name)
-            .collect())
-    }
-
-    async fn read_dir_with_types(&self, path: &str) -> VfsResult<Vec<Dentry>> {
-        let meta = self.metadata.resolve(path).await?;
-        Ok(self
-            .metadata
-            .list_dir(meta.ino)
-            .await?
-            .into_iter()
-            .map(|entry| Dentry {
-                name: entry.name,
-                ino: entry.meta.ino,
-                kind: entry.meta.kind,
-            })
-            .collect())
-    }
-
-    async fn write_file(&self, path: &str, content: &[u8]) -> VfsResult<()> {
-        self.write_existing_or_create(path, content).await
-    }
-
-    async fn create_dir(&self, path: &str) -> VfsResult<()> {
-        let (parent, name) = self.metadata.resolve_parent(path).await?;
-        self.metadata
-            .create(
-                parent.ino,
-                &name,
-                CreateInodeAttrs::directory(
-                    self.options.dir_mode,
-                    self.options.uid,
-                    self.options.gid,
-                ),
-            )
-            .await?;
-        Ok(())
-    }
-
-    async fn mkdir(&self, path: &str, recursive: bool) -> VfsResult<()> {
-        if !recursive {
-            return self.create_dir(path).await;
-        }
-        let normalized = normalize_path(path)?;
-        let mut current = String::new();
-        for part in normalized
-            .trim_start_matches('/')
-            .split('/')
-            .filter(|p| !p.is_empty())
-        {
-            current.push('/');
-            current.push_str(part);
-            if !self.exists(&current).await {
-                self.create_dir(&current).await?;
-            }
-        }
-        Ok(())
-    }
-
-    async fn exists(&self, path: &str) -> bool {
-        self.metadata.resolve(path).await.is_ok()
-    }
-
-    async fn stat(&self, path: &str) -> VfsResult<VirtualStat> {
-        Ok(self.metadata.resolve(path).await?.to_stat())
-    }
-
-    async fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        Ok(self.metadata.lstat(path).await?.to_stat())
-    }
-
-    async fn remove_file(&self, path: &str) -> VfsResult<()> {
-        let meta = self.metadata.lstat(path).await?;
-        if meta.kind == InodeType::Directory {
-            return Err(VfsError::eisdir(path));
-        }
-        let (parent, name) = self.metadata.resolve_parent(path).await?;
-        let freed = self.metadata.remove(parent.ino, &name).await?;
-        self.blocks.delete_many(&freed).await
-    }
-
-    async fn remove_dir(&self, path: &str) -> VfsResult<()> {
-        let meta = self.metadata.lstat(path).await?;
-        if meta.kind != InodeType::Directory {
-            return Err(VfsError::enotdir(path));
-        }
-        let (parent, name) = self.metadata.resolve_parent(path).await?;
-        let freed = self.metadata.remove(parent.ino, &name).await?;
-        self.blocks.delete_many(&freed).await
-    }
-
-    async fn rename(&self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let (src_parent, src) = self.metadata.resolve_parent(old_path).await?;
-        let (dst_parent, dst) = self.metadata.resolve_parent(new_path).await?;
-        let freed = self
-            .metadata
-            .rename(src_parent.ino, &src, dst_parent.ino, &dst)
-            .await?;
-        self.blocks.delete_many(&freed).await
-    }
-
-    async fn realpath(&self, path: &str) -> VfsResult<String> {
-        self.metadata.resolve(path).await?;
-        normalize_path(path)
-    }
-
-    async fn symlink(&self, target: &str, link_path: &str) -> VfsResult<()> {
-        let (parent, name) = self.metadata.resolve_parent(link_path).await?;
-        self.metadata
-            .create(
-                parent.ino,
-                &name,
-                CreateInodeAttrs::symlink(target.to_string(), self.options.uid, self.options.gid),
-            )
-            .await?;
-        Ok(())
-    }
-
-    async fn readlink(&self, path: &str) -> VfsResult<String> {
-        let meta = self.metadata.lstat(path).await?;
-        if meta.kind != InodeType::Symlink {
-            return Err(VfsError::einval(format!("not a symlink: {path}")));
-        }
-        Ok(meta.symlink_target.unwrap_or_default())
-    }
-
-    async fn link(&self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let target = self.metadata.resolve(old_path).await?;
-        let (parent, name) = self.metadata.resolve_parent(new_path).await?;
-        self.metadata.link(parent.ino, &name, target.ino).await
-    }
-
-    async fn chmod(&self, path: &str, mode: u32) -> VfsResult<()> {
-        let meta = self.metadata.resolve(path).await?;
-        self.metadata
-            .set_attr(
-                meta.ino,
-                InodePatch {
-                    mode: Some(mode),
-                    ..InodePatch::default()
-                },
-            )
-            .await?;
-        Ok(())
-    }
-
-    async fn chown(&self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        let meta = self.metadata.resolve(path).await?;
-        self.metadata
-            .set_attr(
-                meta.ino,
-                InodePatch {
-                    uid: Some(uid),
-                    gid: Some(gid),
-                    ..InodePatch::default()
-                },
-            )
-            .await?;
-        Ok(())
-    }
-
-    async fn utimes(&self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        let meta = self.metadata.resolve(path).await?;
-        self.metadata
-            .set_attr(
-                meta.ino,
-                InodePatch {
-                    atime: Some(ms_to_timespec(atime_ms)),
-                    mtime: Some(ms_to_timespec(mtime_ms)),
-                    ..InodePatch::default()
-                },
-            )
-            .await?;
-        Ok(())
-    }
-
-    async fn truncate(&self, path: &str, length: u64) -> VfsResult<()> {
-        let meta = self.metadata.resolve(path).await?;
-        self.ensure_file(path, &meta)?;
-        if length == meta.size {
-            return Ok(());
-        }
-
-        if usize::try_from(length)
-            .ok()
-            .is_some_and(|len| len <= self.options.inline_threshold)
-        {
-            let data = self
-                .read_file_range(&meta, 0, usize::try_from(length).unwrap_or(0))
-                .await?;
-            let freed = self
-                .metadata
-                .set_attr(
-                    meta.ino,
-                    InodePatch {
-                        storage: Some(Storage::Inline(data)),
-                        size: Some(length),
-                        ..InodePatch::default()
-                    },
-                )
-                .await?;
-            self.blocks.delete_many(&freed).await?;
-            return Ok(());
-        }
-
-        let chunk_size = u64::from(self.file_chunk_size(&meta.storage));
-        let mut edits = Vec::new();
-        if !matches!(meta.storage, Storage::Chunked { .. }) {
-            let existing_len = meta.size.min(length);
-            let mut offset = 0;
-            while offset < existing_len {
-                let len = (existing_len - offset).min(chunk_size);
-                let data = self
-                    .read_file_range(
-                        &meta,
-                        offset,
-                        usize::try_from(len)
-                            .map_err(|_| VfsError::einval("truncate chunk is too large"))?,
-                    )
-                    .await?;
-                edits.push(self.put_chunk_edit(offset / chunk_size, data).await?);
-                offset = offset.saturating_add(len);
-            }
-            self.metadata
-                .set_attr(
-                    meta.ino,
-                    InodePatch {
-                        storage: Some(Storage::Chunked {
-                            chunk_size: self.options.chunk_size,
-                        }),
-                        size: Some(length),
-                        ..InodePatch::default()
-                    },
-                )
-                .await?;
-        } else if length < meta.size && !length.is_multiple_of(chunk_size) {
-            let final_index = length / chunk_size;
-            let final_start = final_index.saturating_mul(chunk_size);
-            let final_len = length - final_start;
-            let data = self
-                .read_file_range(
-                    &meta,
-                    final_start,
-                    usize::try_from(final_len)
-                        .map_err(|_| VfsError::einval("truncate final chunk is too large"))?,
-                )
-                .await?;
-            edits.push(self.put_chunk_edit(final_index, data).await?);
-        }
-
-        let freed = self.metadata.commit_write(meta.ino, edits, length).await?;
-        self.blocks.delete_many(&freed).await
-    }
-
-    async fn pread(&self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        let meta = self.metadata.resolve(path).await?;
-        self.ensure_file(path, &meta)?;
-        self.read_file_range(&meta, offset, length).await
-    }
-
-    async fn pwrite(&self, path: &str, content: &[u8], offset: u64) -> VfsResult<()> {
-        let meta = self.metadata.resolve(path).await?;
-        self.ensure_file(path, &meta)?;
-        self.write_chunked_range(&meta, content, offset).await?;
-        Ok(())
-    }
-
-    async fn append(&self, path: &str, content: &[u8]) -> VfsResult<u64> {
-        let meta = self.metadata.resolve(path).await?;
-        self.ensure_file(path, &meta)?;
-        let len = meta
-            .size
-            .checked_add(u64::try_from(content.len()).map_err(|_| {
-                VfsError::einval(format!("append content is too large: {}", content.len()))
-            })?)
-            .ok_or_else(|| VfsError::einval("append size overflows"))?;
-        self.write_chunked_range(&meta, content, meta.size).await?;
-        Ok(len)
-    }
-}
-
-#[async_trait]
-impl<M: MetadataStore, B: BlockStore> Snapshottable for ChunkedFs<M, B> {
-    async fn snapshot(&self, root: u64) -> VfsResult<SnapshotId> {
-        self.metadata.snapshot(root).await
-    }
-
-    async fn fork(&self, snap: SnapshotId) -> VfsResult<u64> {
-        self.metadata.fork(snap).await
-    }
-}
-
-fn ms_to_timespec(ms: u64) -> Timespec {
-    Timespec {
-        sec: (ms / 1_000) as i64,
-        nsec: ((ms % 1_000) * 1_000_000) as u32,
-    }
-}
diff --git a/crates/vfs/src/engine/engines/mod.rs b/crates/vfs/src/engine/engines/mod.rs
deleted file mode 100644
index 115bc103e..000000000
--- a/crates/vfs/src/engine/engines/mod.rs
+++ /dev/null
@@ -1,5 +0,0 @@
-pub mod chunked;
-pub mod object;
-
-pub use chunked::{ChunkedFs, ChunkedFsOptions};
-pub use object::{ObjectFs, ObjectFsOptions};
diff --git a/crates/vfs/src/engine/engines/object.rs b/crates/vfs/src/engine/engines/object.rs
deleted file mode 100644
index e03a98f60..000000000
--- a/crates/vfs/src/engine/engines/object.rs
+++ /dev/null
@@ -1,361 +0,0 @@
-use crate::engine::block::ObjectBackend;
-use crate::engine::error::{VfsError, VfsResult};
-use crate::engine::types::{normalize_path, Dentry, InodeType, ObjectMeta, Timespec, VirtualStat};
-use crate::engine::vfs::VirtualFileSystem;
-use async_trait::async_trait;
-
-#[derive(Debug, Clone)]
-pub struct ObjectFsOptions {
-    pub prefix: String,
-    pub uid: u32,
-    pub gid: u32,
-    pub file_mode: u32,
-    pub dir_mode: u32,
-}
-
-impl Default for ObjectFsOptions {
-    fn default() -> Self {
-        Self {
-            prefix: String::new(),
-            uid: 0,
-            gid: 0,
-            file_mode: 0o644,
-            dir_mode: 0o755,
-        }
-    }
-}
-
-#[derive(Debug, Clone)]
-pub struct ObjectFs<B> {
-    backend: B,
-    options: ObjectFsOptions,
-}
-
-impl<B> ObjectFs<B> {
-    pub fn new(backend: B) -> Self {
-        Self::with_options(backend, ObjectFsOptions::default())
-    }
-
-    pub fn with_options(backend: B, options: ObjectFsOptions) -> Self {
-        Self { backend, options }
-    }
-
-    fn key_for(&self, path: &str) -> VfsResult<String> {
-        let normalized = normalize_path(path)?;
-        let relative = normalized.trim_start_matches('/');
-        Ok(format!("{}{}", self.options.prefix, relative))
-    }
-
-    fn dir_prefix_for(&self, path: &str) -> VfsResult<String> {
-        let mut key = self.key_for(path)?;
-        if !key.is_empty() && !key.ends_with('/') {
-            key.push('/');
-        }
-        Ok(key)
-    }
-
-    fn file_meta(&self, size: u64) -> ObjectMeta {
-        ObjectMeta {
-            size,
-            mtime: Timespec::now(),
-            mode: self.options.file_mode,
-            uid: self.options.uid,
-            gid: self.options.gid,
-            kind: InodeType::File,
-            symlink_target: None,
-        }
-    }
-
-    fn dir_meta(&self) -> ObjectMeta {
-        ObjectMeta {
-            size: 0,
-            mtime: Timespec::now(),
-            mode: self.options.dir_mode,
-            uid: self.options.uid,
-            gid: self.options.gid,
-            kind: InodeType::Directory,
-            symlink_target: None,
-        }
-    }
-}
-
-impl<B: ObjectBackend> ObjectFs<B> {
-    async fn collect_objects_under(&self, prefix: &str) -> VfsResult<Vec<String>> {
-        let mut pending = vec![prefix.to_string()];
-        let mut objects = Vec::new();
-        while let Some(current) = pending.pop() {
-            for entry in self.backend.list(&current).await? {
-                if entry.is_prefix {
-                    pending.push(entry.name);
-                } else {
-                    objects.push(entry.name);
-                }
-            }
-        }
-        Ok(objects)
-    }
-}
-
-#[async_trait]
-impl<B: ObjectBackend> VirtualFileSystem for ObjectFs<B> {
-    async fn read_file(&self, path: &str) -> VfsResult<Vec<u8>> {
-        let key = self.key_for(path)?;
-        let meta = self
-            .backend
-            .head(&key)
-            .await?
-            .ok_or_else(|| VfsError::enoent(path))?;
-        if meta.kind == InodeType::Directory {
-            return Err(VfsError::eisdir(path));
-        }
-        if meta.kind == InodeType::Symlink {
-            let target = meta.symlink_target.ok_or_else(|| VfsError::enoent(path))?;
-            return self.read_file(&target).await;
-        }
-        self.backend.get_range(&key, 0, meta.size).await
-    }
-
-    async fn read_dir(&self, path: &str) -> VfsResult<Vec<String>> {
-        Ok(self
-            .read_dir_with_types(path)
-            .await?
-            .into_iter()
-            .map(|entry| entry.name)
-            .collect())
-    }
-
-    async fn read_dir_with_types(&self, path: &str) -> VfsResult<Vec<Dentry>> {
-        let prefix = self.dir_prefix_for(path)?;
-        let entries = self.backend.list(&prefix).await?;
-        let mut result = Vec::new();
-        for entry in entries {
-            let name = entry
-                .name
-                .trim_start_matches(&prefix)
-                .trim_end_matches('/')
-                .to_string();
-            if name.is_empty() || name.contains('/') {
-                continue;
-            }
-            result.push(Dentry {
-                name,
-                ino: 0,
-                kind: if entry.is_prefix {
-                    InodeType::Directory
-                } else {
-                    InodeType::File
-                },
-            });
-        }
-        Ok(result)
-    }
-
-    async fn write_file(&self, path: &str, content: &[u8]) -> VfsResult<()> {
-        let key = self.key_for(path)?;
-        self.backend
-            .put(&key, content, self.file_meta(content.len() as u64))
-            .await
-    }
-
-    async fn create_dir(&self, path: &str) -> VfsResult<()> {
-        let key = self.dir_prefix_for(path)?;
-        self.backend.put(&key, &[], self.dir_meta()).await
-    }
-
-    async fn mkdir(&self, path: &str, recursive: bool) -> VfsResult<()> {
-        if !recursive {
-            return self.create_dir(path).await;
-        }
-        let normalized = normalize_path(path)?;
-        let mut current = String::new();
-        for part in normalized
-            .trim_start_matches('/')
-            .split('/')
-            .filter(|p| !p.is_empty())
-        {
-            current.push('/');
-            current.push_str(part);
-            self.create_dir(&current).await?;
-        }
-        Ok(())
-    }
-
-    async fn exists(&self, path: &str) -> bool {
-        let Ok(key) = self.key_for(path) else {
-            return false;
-        };
-        if self.backend.head(&key).await.ok().flatten().is_some() {
-            return true;
-        }
-        let Ok(prefix) = self.dir_prefix_for(path) else {
-            return false;
-        };
-        self.backend
-            .list(&prefix)
-            .await
-            .map(|entries| !entries.is_empty())
-            .unwrap_or(false)
-    }
-
-    async fn stat(&self, path: &str) -> VfsResult<VirtualStat> {
-        let key = self.key_for(path)?;
-        if let Some(meta) = self.backend.head(&key).await? {
-            return Ok(object_stat(meta));
-        }
-        let entries = self.backend.list(&self.dir_prefix_for(path)?).await?;
-        if entries.is_empty() {
-            return Err(VfsError::enoent(path));
-        }
-        Ok(object_stat(self.dir_meta()))
-    }
-
-    async fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        self.stat(path).await
-    }
-
-    async fn remove_file(&self, path: &str) -> VfsResult<()> {
-        self.backend.delete(&self.key_for(path)?).await
-    }
-
-    async fn remove_dir(&self, path: &str) -> VfsResult<()> {
-        let prefix = self.dir_prefix_for(path)?;
-        let entries = self.backend.list(&prefix).await?;
-        if entries.iter().any(|entry| entry.name != prefix) {
-            return Err(VfsError::enotempty(path));
-        }
-        self.backend.delete(&prefix).await
-    }
-
-    async fn rename(&self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let old_key = self.key_for(old_path)?;
-        if self.backend.head(&old_key).await?.is_some() {
-            let new_key = self.key_for(new_path)?;
-            self.backend.copy(&old_key, &new_key).await?;
-            self.backend.delete(&old_key).await?;
-            return Ok(());
-        }
-        let old_prefix = self.dir_prefix_for(old_path)?;
-        let new_prefix = self.dir_prefix_for(new_path)?;
-        let objects = self.collect_objects_under(&old_prefix).await?;
-        if objects.is_empty() {
-            return Err(VfsError::enoent(old_path));
-        }
-        for key in &objects {
-            let dst = format!("{new_prefix}{}", key.trim_start_matches(&old_prefix));
-            self.backend.copy(key, &dst).await?;
-        }
-        for key in objects {
-            self.backend.delete(&key).await?;
-        }
-        Ok(())
-    }
-
-    async fn realpath(&self, path: &str) -> VfsResult<String> {
-        if !self.exists(path).await {
-            return Err(VfsError::enoent(path));
-        }
-        normalize_path(path)
-    }
-
-    async fn symlink(&self, target: &str, link_path: &str) -> VfsResult<()> {
-        let key = self.key_for(link_path)?;
-        let meta = ObjectMeta {
-            size: 0,
-            mtime: Timespec::now(),
-            mode: 0o777,
-            uid: self.options.uid,
-            gid: self.options.gid,
-            kind: InodeType::Symlink,
-            symlink_target: Some(target.to_string()),
-        };
-        self.backend.put(&key, &[], meta).await
-    }
-
-    async fn readlink(&self, path: &str) -> VfsResult<String> {
-        let key = self.key_for(path)?;
-        let meta = self
-            .backend
-            .head(&key)
-            .await?
-            .ok_or_else(|| VfsError::enoent(path))?;
-        if meta.kind != InodeType::Symlink {
-            return Err(VfsError::einval(format!("not a symlink: {path}")));
-        }
-        Ok(meta.symlink_target.unwrap_or_default())
-    }
-
-    async fn link(&self, _old_path: &str, _new_path: &str) -> VfsResult<()> {
-        Err(VfsError::eopnotsupp("ObjectFs does not support hard links"))
-    }
-
-    async fn chmod(&self, _path: &str, _mode: u32) -> VfsResult<()> {
-        Ok(())
-    }
-
-    async fn chown(&self, _path: &str, _uid: u32, _gid: u32) -> VfsResult<()> {
-        Ok(())
-    }
-
-    async fn utimes(&self, _path: &str, _atime_ms: u64, _mtime_ms: u64) -> VfsResult<()> {
-        Ok(())
-    }
-
-    async fn truncate(&self, path: &str, length: u64) -> VfsResult<()> {
-        let mut data = self.read_file(path).await?;
-        let length = usize::try_from(length)
-            .map_err(|_| VfsError::einval(format!("truncate length is too large: {length}")))?;
-        data.resize(length, 0);
-        self.write_file(path, &data).await
-    }
-
-    async fn pread(&self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        let key = self.key_for(path)?;
-        self.backend.get_range(&key, offset, length as u64).await
-    }
-
-    async fn pwrite(&self, path: &str, content: &[u8], offset: u64) -> VfsResult<()> {
-        let mut data = self.read_file(path).await?;
-        let start = usize::try_from(offset)
-            .map_err(|_| VfsError::einval(format!("pwrite offset is too large: {offset}")))?;
-        if start > data.len() {
-            data.resize(start, 0);
-        }
-        let end = start.saturating_add(content.len());
-        if end > data.len() {
-            data.resize(end, 0);
-        }
-        data[start..end].copy_from_slice(content);
-        self.write_file(path, &data).await
-    }
-
-    async fn append(&self, path: &str, content: &[u8]) -> VfsResult<u64> {
-        let mut data = self.read_file(path).await?;
-        data.extend_from_slice(content);
-        let len = data.len() as u64;
-        self.write_file(path, &data).await?;
-        Ok(len)
-    }
-}
-
-fn object_stat(meta: ObjectMeta) -> VirtualStat {
-    let type_bits = match meta.kind {
-        InodeType::File => crate::engine::types::S_IFREG,
-        InodeType::Directory => crate::engine::types::S_IFDIR,
-        InodeType::Symlink => crate::engine::types::S_IFLNK,
-    };
-    VirtualStat {
-        mode: type_bits | (meta.mode & 0o7777),
-        size: meta.size,
-        blocks: meta.size.div_ceil(512),
-        is_directory: meta.kind == InodeType::Directory,
-        is_symbolic_link: meta.kind == InodeType::Symlink,
-        atime: meta.mtime,
-        mtime: meta.mtime,
-        ctime: meta.mtime,
-        birthtime: meta.mtime,
-        ino: 0,
-        nlink: 1,
-        uid: meta.uid,
-        gid: meta.gid,
-    }
-}
diff --git a/crates/vfs/src/engine/error.rs b/crates/vfs/src/engine/error.rs
deleted file mode 100644
index 2cd4e26f7..000000000
--- a/crates/vfs/src/engine/error.rs
+++ /dev/null
@@ -1,88 +0,0 @@
-use std::error::Error;
-use std::fmt;
-
-pub type VfsResult<T> = Result<T, VfsError>;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct VfsError {
-    code: &'static str,
-    message: String,
-}
-
-impl VfsError {
-    pub fn new(code: &'static str, message: impl Into<String>) -> Self {
-        Self {
-            code,
-            message: message.into(),
-        }
-    }
-
-    pub fn code(&self) -> &'static str {
-        self.code
-    }
-
-    pub fn message(&self) -> &str {
-        &self.message
-    }
-
-    pub fn enoent(path: impl AsRef<str>) -> Self {
-        Self::new(
-            "ENOENT",
-            format!("no such file or directory: {}", path.as_ref()),
-        )
-    }
-
-    pub fn eexist(path: impl AsRef<str>) -> Self {
-        Self::new("EEXIST", format!("file exists: {}", path.as_ref()))
-    }
-
-    pub fn enotdir(path: impl AsRef<str>) -> Self {
-        Self::new("ENOTDIR", format!("not a directory: {}", path.as_ref()))
-    }
-
-    pub fn eisdir(path: impl AsRef<str>) -> Self {
-        Self::new("EISDIR", format!("is a directory: {}", path.as_ref()))
-    }
-
-    pub fn eloop(path: impl AsRef<str>) -> Self {
-        Self::new(
-            "ELOOP",
-            format!("too many symbolic links: {}", path.as_ref()),
-        )
-    }
-
-    pub fn enametoolong(path: impl AsRef<str>) -> Self {
-        Self::new("ENAMETOOLONG", format!("path too long: {}", path.as_ref()))
-    }
-
-    pub fn enotempty(path: impl AsRef<str>) -> Self {
-        Self::new(
-            "ENOTEMPTY",
-            format!("directory not empty: {}", path.as_ref()),
-        )
-    }
-
-    pub fn eopnotsupp(message: impl Into<String>) -> Self {
-        Self::new("EOPNOTSUPP", message)
-    }
-
-    pub fn erofs(message: impl Into<String>) -> Self {
-        Self::new("EROFS", message)
-    }
-
-    pub fn einval(message: impl Into<String>) -> Self {
-        Self::new("EINVAL", message)
-    }
-
-    pub fn eio(message: impl Into<String>) -> Self {
-        Self::new("EIO", message)
-    }
-}
-
-impl fmt::Display for VfsError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}: {}", self.code, self.message)
-    }
-}
-
-impl Error for VfsError {}
diff --git a/crates/vfs/src/engine/mem/block_store.rs b/crates/vfs/src/engine/mem/block_store.rs
deleted file mode 100644
index ca0153e80..000000000
--- a/crates/vfs/src/engine/mem/block_store.rs
+++ /dev/null
@@ -1,79 +0,0 @@
-use crate::engine::block::BlockStore;
-use crate::engine::error::{VfsError, VfsResult};
-use crate::engine::types::BlockKey;
-use async_trait::async_trait;
-use std::collections::BTreeMap;
-use std::sync::{Arc, Mutex};
-
-#[derive(Debug, Clone, Default)]
-pub struct MemoryBlockStore {
-    blocks: Arc<Mutex<BTreeMap<BlockKey, Vec<u8>>>>,
-}
-
-impl MemoryBlockStore {
-    pub fn new() -> Self {
-        Self::default()
-    }
-
-    pub fn len(&self) -> usize {
-        self.blocks.lock().expect("block mutex poisoned").len()
-    }
-
-    pub fn is_empty(&self) -> bool {
-        self.blocks.lock().expect("block mutex poisoned").is_empty()
-    }
-}
-
-#[async_trait]
-impl BlockStore for MemoryBlockStore {
-    async fn get(&self, key: &BlockKey) -> VfsResult<Vec<u8>> {
-        self.blocks
-            .lock()
-            .expect("block mutex poisoned")
-            .get(key)
-            .cloned()
-            .ok_or_else(|| VfsError::enoent(&key.0))
-    }
-
-    async fn get_range(&self, key: &BlockKey, off: u64, len: u64) -> VfsResult<Vec<u8>> {
-        let data = self.get(key).await?;
-        let start = usize::try_from(off)
-            .map_err(|_| VfsError::einval(format!("range offset is too large: {off}")))?;
-        let len = usize::try_from(len)
-            .map_err(|_| VfsError::einval(format!("range length is too large: {len}")))?;
-        if start >= data.len() {
-            return Ok(Vec::new());
-        }
-        let end = start.saturating_add(len).min(data.len());
-        Ok(data[start..end].to_vec())
-    }
-
-    async fn put(&self, key: &BlockKey, data: &[u8]) -> VfsResult<()> {
-        self.blocks
-            .lock()
-            .expect("block mutex poisoned")
-            .insert(key.clone(), data.to_vec());
-        Ok(())
-    }
-
-    async fn exists(&self, key: &BlockKey) -> VfsResult<bool> {
-        Ok(self
-            .blocks
-            .lock()
-            .expect("block mutex poisoned")
-            .contains_key(key))
-    }
-
-    async fn delete_many(&self, keys: &[BlockKey]) -> VfsResult<()> {
-        let mut blocks = self.blocks.lock().expect("block mutex poisoned");
-        for key in keys {
-            blocks.remove(key);
-        }
-        Ok(())
-    }
-
-    async fn copy(&self, src: &BlockKey, dst: &BlockKey) -> VfsResult<()> {
-        let data = self.get(src).await?;
-        self.put(dst, &data).await
-    }
-}
diff --git a/crates/vfs/src/engine/mem/metadata_store.rs b/crates/vfs/src/engine/mem/metadata_store.rs
deleted file mode 100644
index 76936b688..000000000
--- a/crates/vfs/src/engine/mem/metadata_store.rs
+++ /dev/null
@@ -1,641 +0,0 @@
-use crate::engine::error::{VfsError, VfsResult};
-use crate::engine::metadata::MetadataStore;
-use crate::engine::types::{
-    normalize_path, parent_and_name, BlockKey, ChunkEdit, ChunkRange, ChunkRef, CreateInodeAttrs,
-    DentryStat, InodeMeta, InodePatch, InodeType, SnapshotId, Storage, Timespec,
-    DEFAULT_CHUNK_SIZE, MAX_SYMLINK_DEPTH,
-};
-use async_trait::async_trait;
-use std::collections::{BTreeMap, BTreeSet};
-use std::sync::{Arc, Mutex};
-
-#[derive(Debug, Clone)]
-pub struct InMemoryMetadataStore {
-    state: Arc<Mutex<State>>,
-}
-
-#[derive(Debug, Clone)]
-pub struct MetadataDump {
-    pub next_ino: u64,
-    pub inodes: BTreeMap<u64, InodeMeta>,
-    pub dentries: BTreeMap<(u64, String), u64>,
-    pub chunks: BTreeMap<(u64, u64), ChunkRef>,
-    pub block_refs: BTreeMap<BlockKey, u64>,
-}
-
-#[derive(Debug, Clone)]
-struct State {
-    next_ino: u64,
-    next_snapshot_id: u64,
-    inodes: BTreeMap<u64, InodeMeta>,
-    dentries: BTreeMap<(u64, String), u64>,
-    chunks: BTreeMap<(u64, u64), ChunkRef>,
-    block_refs: BTreeMap<BlockKey, u64>,
-    snapshots: BTreeMap<SnapshotId, Snapshot>,
-}
-
-#[derive(Debug, Clone)]
-struct Snapshot {
-    root_ino: u64,
-    inodes: BTreeMap<u64, InodeMeta>,
-    dentries: BTreeMap<(u64, String), u64>,
-    chunks: BTreeMap<(u64, u64), ChunkRef>,
-}
-
-impl Default for InMemoryMetadataStore {
-    fn default() -> Self {
-        Self::new()
-    }
-}
-
-impl InMemoryMetadataStore {
-    pub const ROOT_INO: u64 = 1;
-
-    pub fn new() -> Self {
-        let now = Timespec::now();
-        let root = InodeMeta {
-            ino: Self::ROOT_INO,
-            kind: InodeType::Directory,
-            mode: 0o755,
-            uid: 0,
-            gid: 0,
-            size: 0,
-            nlink: 2,
-            atime: now,
-            mtime: now,
-            ctime: now,
-            birthtime: now,
-            storage: Storage::None,
-            symlink_target: None,
-        };
-        let mut inodes = BTreeMap::new();
-        inodes.insert(Self::ROOT_INO, root);
-        Self {
-            state: Arc::new(Mutex::new(State {
-                next_ino: 2,
-                next_snapshot_id: 1,
-                inodes,
-                dentries: BTreeMap::new(),
-                chunks: BTreeMap::new(),
-                block_refs: BTreeMap::new(),
-                snapshots: BTreeMap::new(),
-            })),
-        }
-    }
-
-    pub fn refcount(&self, key: &BlockKey) -> u64 {
-        self.state
-            .lock()
-            .expect("metadata mutex poisoned")
-            .block_refs
-            .get(key)
-            .copied()
-            .unwrap_or(0)
-    }
-
-    pub fn dump(&self) -> MetadataDump {
-        let state = self.state.lock().expect("metadata mutex poisoned");
-        MetadataDump {
-            next_ino: state.next_ino,
-            inodes: state.inodes.clone(),
-            dentries: state.dentries.clone(),
-            chunks: state.chunks.clone(),
-            block_refs: state.block_refs.clone(),
-        }
-    }
-
-    pub fn from_dump(dump: MetadataDump) -> Self {
-        Self {
-            state: Arc::new(Mutex::new(State {
-                next_ino: dump.next_ino,
-                next_snapshot_id: 1,
-                inodes: dump.inodes,
-                dentries: dump.dentries,
-                chunks: dump.chunks,
-                block_refs: dump.block_refs,
-                snapshots: BTreeMap::new(),
-            })),
-        }
-    }
-}
-
-impl State {
-    fn now_touch(meta: &mut InodeMeta) {
-        let now = Timespec::now();
-        meta.mtime = now;
-        meta.ctime = now;
-    }
-
-    fn inode(&self, ino: u64) -> VfsResult<InodeMeta> {
-        self.inodes
-            .get(&ino)
-            .cloned()
-            .ok_or_else(|| VfsError::enoent(format!("inode {ino}")))
-    }
-
-    fn alloc_inode(&mut self, attrs: CreateInodeAttrs) -> InodeMeta {
-        let ino = self.next_ino;
-        self.next_ino += 1;
-        let now = Timespec::now();
-        let size = match &attrs.storage {
-            Storage::Inline(data) => data.len() as u64,
-            Storage::Chunked { .. } | Storage::None => attrs
-                .symlink_target
-                .as_ref()
-                .map(|target| target.len() as u64)
-                .unwrap_or(0),
-        };
-        InodeMeta {
-            ino,
-            kind: attrs.kind,
-            mode: attrs.mode,
-            uid: attrs.uid,
-            gid: attrs.gid,
-            size,
-            nlink: if attrs.kind == InodeType::Directory {
-                2
-            } else {
-                1
-            },
-            atime: now,
-            mtime: now,
-            ctime: now,
-            birthtime: now,
-            storage: attrs.storage,
-            symlink_target: attrs.symlink_target,
-        }
-    }
-
-    fn name_child(&self, parent: u64, name: &str) -> VfsResult<u64> {
-        self.dentries
-            .get(&(parent, name.to_string()))
-            .copied()
-            .ok_or_else(|| VfsError::enoent(name))
-    }
-
-    fn resolve_path(&self, path: &str, follow_final: bool) -> VfsResult<InodeMeta> {
-        self.resolve_path_depth(path, follow_final, 0)
-    }
-
-    fn resolve_path_depth(
-        &self,
-        path: &str,
-        follow_final: bool,
-        depth: usize,
-    ) -> VfsResult<InodeMeta> {
-        if depth > MAX_SYMLINK_DEPTH {
-            return Err(VfsError::eloop(path));
-        }
-        let normalized = normalize_path(path)?;
-        if normalized == "/" {
-            return self.inode(InMemoryMetadataStore::ROOT_INO);
-        }
-
-        let parts: Vec<&str> = normalized.trim_start_matches('/').split('/').collect();
-        let mut current = InMemoryMetadataStore::ROOT_INO;
-        let mut prefix = String::new();
-        for (idx, part) in parts.iter().enumerate() {
-            let parent_meta = self.inode(current)?;
-            if parent_meta.kind != InodeType::Directory {
-                return Err(VfsError::enotdir(&prefix));
-            }
-            let child = self.name_child(current, part)?;
-            let meta = self.inode(child)?;
-            let final_component = idx == parts.len() - 1;
-            if meta.kind == InodeType::Symlink && (!final_component || follow_final) {
-                let target = meta.symlink_target.clone().unwrap_or_default();
-                let rest = parts[idx + 1..].join("/");
-                let base = if prefix.is_empty() { "/" } else { &prefix };
-                let next_path = resolve_symlink_target(base, &target, &rest)?;
-                return self.resolve_path_depth(&next_path, follow_final, depth + 1);
-            }
-            current = child;
-            if prefix == "/" || prefix.is_empty() {
-                prefix = format!("/{part}");
-            } else {
-                prefix.push('/');
-                prefix.push_str(part);
-            }
-        }
-        self.inode(current)
-    }
-
-    fn collect_subtree(&self, root: u64) -> VfsResult<BTreeSet<u64>> {
-        let mut seen = BTreeSet::new();
-        self.collect_subtree_into(root, &mut seen)?;
-        Ok(seen)
-    }
-
-    fn collect_subtree_into(&self, ino: u64, seen: &mut BTreeSet<u64>) -> VfsResult<()> {
-        if !seen.insert(ino) {
-            return Ok(());
-        }
-        let meta = self.inode(ino)?;
-        if meta.kind == InodeType::Directory {
-            for ((parent, _), child) in self.dentries.range((ino, String::new())..) {
-                if *parent != ino {
-                    break;
-                }
-                self.collect_subtree_into(*child, seen)?;
-            }
-        }
-        Ok(())
-    }
-
-    fn dec_block_ref(&mut self, key: &BlockKey, freed: &mut Vec<BlockKey>) {
-        if let Some(refcount) = self.block_refs.get_mut(key) {
-            *refcount = refcount.saturating_sub(1);
-            if *refcount == 0 {
-                self.block_refs.remove(key);
-                freed.push(key.clone());
-            }
-        }
-    }
-
-    fn inc_block_ref(&mut self, key: &BlockKey) {
-        *self.block_refs.entry(key.clone()).or_insert(0) += 1;
-    }
-
-    fn drop_inode_content(&mut self, ino: u64, freed: &mut Vec<BlockKey>) {
-        let keys: Vec<BlockKey> = self
-            .chunks
-            .range((ino, 0)..)
-            .take_while(|((chunk_ino, _), _)| *chunk_ino == ino)
-            .map(|(_, chunk)| chunk.key.clone())
-            .collect();
-        self.chunks.retain(|(chunk_ino, _), _| *chunk_ino != ino);
-        for key in keys {
-            self.dec_block_ref(&key, freed);
-        }
-    }
-
-    fn remove_child(&mut self, parent: u64, name: &str) -> VfsResult<Vec<BlockKey>> {
-        let child = self.name_child(parent, name)?;
-        let meta = self.inode(child)?;
-        if meta.kind == InodeType::Directory
-            && self
-                .dentries
-                .range((child, String::new())..)
-                .next()
-                .is_some_and(|((candidate_parent, _), _)| *candidate_parent == child)
-        {
-            return Err(VfsError::enotempty(name));
-        }
-        self.dentries.remove(&(parent, name.to_string()));
-        let mut freed = Vec::new();
-        if let Some(child_meta) = self.inodes.get_mut(&child) {
-            child_meta.nlink = child_meta.nlink.saturating_sub(1);
-            child_meta.ctime = Timespec::now();
-            if child_meta.nlink > 0 {
-                return Ok(freed);
-            }
-        }
-        self.drop_inode_content(child, &mut freed);
-        self.inodes.remove(&child);
-        Ok(freed)
-    }
-}
-
-fn resolve_symlink_target(base: &str, target: &str, rest: &str) -> VfsResult<String> {
-    let mut path = if target.starts_with('/') {
-        target.to_string()
-    } else if base == "/" {
-        format!("/{target}")
-    } else {
-        format!("{base}/{target}")
-    };
-    if !rest.is_empty() {
-        if path != "/" {
-            path.push('/');
-        }
-        path.push_str(rest);
-    }
-    normalize_path(&path)
-}
-
-#[async_trait]
-impl MetadataStore for InMemoryMetadataStore {
-    async fn resolve(&self, path: &str) -> VfsResult<InodeMeta> {
-        self.state
-            .lock()
-            .expect("metadata mutex poisoned")
-            .resolve_path(path, true)
-    }
-
-    async fn resolve_parent(&self, path: &str) -> VfsResult<(InodeMeta, String)> {
-        let (parent, name) = parent_and_name(path)?;
-        let parent_meta = self
-            .state
-            .lock()
-            .expect("metadata mutex poisoned")
-            .resolve_path(&parent, true)?;
-        if parent_meta.kind != InodeType::Directory {
-            return Err(VfsError::enotdir(parent));
-        }
-        Ok((parent_meta, name))
-    }
-
-    async fn lstat(&self, path: &str) -> VfsResult<InodeMeta> {
-        self.state
-            .lock()
-            .expect("metadata mutex poisoned")
-            .resolve_path(path, false)
-    }
-
-    async fn list_dir(&self, ino: u64) -> VfsResult<Vec<DentryStat>> {
-        let state = self.state.lock().expect("metadata mutex poisoned");
-        let meta = state.inode(ino)?;
-        if meta.kind != InodeType::Directory {
-            return Err(VfsError::enotdir(format!("inode {ino}")));
-        }
-        let mut entries = Vec::new();
-        for ((parent, name), child) in state.dentries.range((ino, String::new())..) {
-            if *parent != ino {
-                break;
-            }
-            entries.push(DentryStat {
-                name: name.clone(),
-                meta: state.inode(*child)?,
-            });
-        }
-        Ok(entries)
-    }
-
-    async fn create(
-        &self,
-        parent: u64,
-        name: &str,
-        attrs: CreateInodeAttrs,
-    ) -> VfsResult<InodeMeta> {
-        let mut state = self.state.lock().expect("metadata mutex poisoned");
-        let mut parent_meta = state.inode(parent)?;
-        if parent_meta.kind != InodeType::Directory {
-            return Err(VfsError::enotdir(format!("inode {parent}")));
-        }
-        if state.dentries.contains_key(&(parent, name.to_string())) {
-            return Err(VfsError::eexist(name));
-        }
-        let meta = state.alloc_inode(attrs);
-        let ino = meta.ino;
-        state.inodes.insert(ino, meta.clone());
-        state.dentries.insert((parent, name.to_string()), ino);
-        State::now_touch(&mut parent_meta);
-        state.inodes.insert(parent, parent_meta);
-        Ok(meta)
-    }
-
-    async fn link(&self, parent: u64, name: &str, target: u64) -> VfsResult<()> {
-        let mut state = self.state.lock().expect("metadata mutex poisoned");
-        let parent_meta = state.inode(parent)?;
-        if parent_meta.kind != InodeType::Directory {
-            return Err(VfsError::enotdir(format!("inode {parent}")));
-        }
-        if state.dentries.contains_key(&(parent, name.to_string())) {
-            return Err(VfsError::eexist(name));
-        }
-        let target_meta = state
-            .inodes
-            .get_mut(&target)
-            .ok_or_else(|| VfsError::enoent(format!("inode {target}")))?;
-        if target_meta.kind == InodeType::Directory {
-            return Err(VfsError::eopnotsupp(
-                "hard links to directories are not supported",
-            ));
-        }
-        target_meta.nlink += 1;
-        target_meta.ctime = Timespec::now();
-        state.dentries.insert((parent, name.to_string()), target);
-        Ok(())
-    }
-
-    async fn remove(&self, parent: u64, name: &str) -> VfsResult<Vec<BlockKey>> {
-        self.state
-            .lock()
-            .expect("metadata mutex poisoned")
-            .remove_child(parent, name)
-    }
-
-    async fn rename(
-        &self,
-        src_parent: u64,
-        src: &str,
-        dst_parent: u64,
-        dst: &str,
-    ) -> VfsResult<Vec<BlockKey>> {
-        let mut state = self.state.lock().expect("metadata mutex poisoned");
-        let child = state.name_child(src_parent, src)?;
-        let source_meta = state.inode(child)?;
-        if source_meta.kind == InodeType::Directory {
-            let descendant = state.collect_subtree(child)?.contains(&dst_parent);
-            if descendant {
-                return Err(VfsError::einval("cannot move a directory into itself"));
-            }
-        }
-        let mut freed = Vec::new();
-        if state.dentries.contains_key(&(dst_parent, dst.to_string())) {
-            freed = state.remove_child(dst_parent, dst)?;
-        }
-        state.dentries.remove(&(src_parent, src.to_string()));
-        state.dentries.insert((dst_parent, dst.to_string()), child);
-        Ok(freed)
-    }
-
-    async fn set_attr(&self, ino: u64, patch: InodePatch) -> VfsResult<Vec<BlockKey>> {
-        let mut state = self.state.lock().expect("metadata mutex poisoned");
-        let mut freed = Vec::new();
-        if let Some(storage) = &patch.storage {
-            if matches!(storage, Storage::Inline(_) | Storage::None) {
-                state.drop_inode_content(ino, &mut freed);
-            }
-        }
-        let meta = state
-            .inodes
-            .get_mut(&ino)
-            .ok_or_else(|| VfsError::enoent(format!("inode {ino}")))?;
-        if let Some(mode) = patch.mode {
-            meta.mode = mode;
-        }
-        if let Some(uid) = patch.uid {
-            meta.uid = uid;
-        }
-        if let Some(gid) = patch.gid {
-            meta.gid = gid;
-        }
-        if let Some(atime) = patch.atime {
-            meta.atime = atime;
-        }
-        if let Some(mtime) = patch.mtime {
-            meta.mtime = mtime;
-        }
-        if let Some(storage) = patch.storage {
-            meta.size = match &storage {
-                Storage::Inline(data) => data.len() as u64,
-                Storage::Chunked { .. } => patch.size.unwrap_or(meta.size),
-                Storage::None => meta
-                    .symlink_target
-                    .as_ref()
-                    .map_or(0, |target| target.len() as u64),
-            };
-            meta.storage = storage;
-        }
-        if let Some(size) = patch.size {
-            meta.size = size;
-        }
-        meta.ctime = Timespec::now();
-        Ok(freed)
-    }
-
-    async fn commit_write(
-        &self,
-        ino: u64,
-        edits: Vec<ChunkEdit>,
-        new_size: u64,
-    ) -> VfsResult<Vec<BlockKey>> {
-        let mut state = self.state.lock().expect("metadata mutex poisoned");
-        let meta = state.inode(ino)?;
-        let chunk_size = match meta.storage {
-            Storage::Chunked { chunk_size } => u64::from(chunk_size),
-            Storage::Inline(_) | Storage::None => DEFAULT_CHUNK_SIZE as u64,
-        };
-        let mut freed = Vec::new();
-        let keep_chunks = if new_size == 0 {
-            0
-        } else {
-            new_size.div_ceil(chunk_size)
-        };
-        let truncated: Vec<(u64, BlockKey)> = state
-            .chunks
-            .range((ino, 0)..)
-            .take_while(|((chunk_ino, _), _)| *chunk_ino == ino)
-            .filter(|((_, index), _)| *index >= keep_chunks)
-            .map(|((_, index), chunk)| (*index, chunk.key.clone()))
-            .collect();
-        for (index, key) in truncated {
-            state.chunks.remove(&(ino, index));
-            state.dec_block_ref(&key, &mut freed);
-        }
-        for edit in edits {
-            if edit.index >= keep_chunks {
-                continue;
-            }
-            let key = edit.key.clone();
-            if let Some(previous) = state.chunks.insert(
-                (ino, edit.index),
-                ChunkRef {
-                    index: edit.index,
-                    key: edit.key,
-                    len: edit.len,
-                },
-            ) {
-                if previous.key != key {
-                    state.dec_block_ref(&previous.key, &mut freed);
-                    state.inc_block_ref(&key);
-                }
-            } else {
-                state.inc_block_ref(&key);
-            }
-        }
-        let meta = state
-            .inodes
-            .get_mut(&ino)
-            .ok_or_else(|| VfsError::enoent(format!("inode {ino}")))?;
-        meta.size = new_size;
-        meta.ctime = Timespec::now();
-        meta.mtime = meta.ctime;
-        Ok(freed)
-    }
-
-    async fn get_chunks(&self, ino: u64, range: ChunkRange) -> VfsResult<Vec<ChunkRef>> {
-        let state = self.state.lock().expect("metadata mutex poisoned");
-        state.inode(ino)?;
-        let mut chunks = Vec::new();
-        for ((chunk_ino, index), chunk) in state.chunks.range((ino, range.start)..) {
-            if *chunk_ino != ino {
-                break;
-            }
-            if let Some(end) = range.end {
-                if *index >= end {
-                    break;
-                }
-            }
-            chunks.push(chunk.clone());
-        }
-        Ok(chunks)
-    }
-
-    async fn snapshot(&self, root: u64) -> VfsResult<SnapshotId> {
-        let mut state = self.state.lock().expect("metadata mutex poisoned");
-        let reachable = state.collect_subtree(root)?;
-        let mut inodes = BTreeMap::new();
-        let mut dentries = BTreeMap::new();
-        let mut chunks = BTreeMap::new();
-        let mut keys_to_inc = Vec::new();
-        for ino in reachable {
-            inodes.insert(ino, state.inode(ino)?);
-            for ((parent, name), child) in state.dentries.range((ino, String::new())..) {
-                if *parent != ino {
-                    break;
-                }
-                dentries.insert((*parent, name.clone()), *child);
-            }
-            for ((chunk_ino, index), chunk) in &state.chunks {
-                if *chunk_ino == ino {
-                    chunks.insert((*chunk_ino, *index), chunk.clone());
-                    keys_to_inc.push(chunk.key.clone());
-                }
-            }
-        }
-        for key in keys_to_inc {
-            state.inc_block_ref(&key);
-        }
-        let id = SnapshotId(state.next_snapshot_id);
-        state.next_snapshot_id += 1;
-        state.snapshots.insert(
-            id,
-            Snapshot {
-                root_ino: root,
-                inodes,
-                dentries,
-                chunks,
-            },
-        );
-        Ok(id)
-    }
-
-    async fn fork(&self, snap: SnapshotId) -> VfsResult<u64> {
-        let mut state = self.state.lock().expect("metadata mutex poisoned");
-        let snapshot = state
-            .snapshots
-            .get(&snap)
-            .cloned()
-            .ok_or_else(|| VfsError::enoent(format!("snapshot {}", snap.0)))?;
-        let mut map = BTreeMap::new();
-        for old_ino in snapshot.inodes.keys() {
-            let new_ino = state.next_ino;
-            state.next_ino += 1;
-            map.insert(*old_ino, new_ino);
-        }
-        for (old_ino, mut meta) in snapshot.inodes {
-            meta.ino = map[&old_ino];
-            state.inodes.insert(meta.ino, meta);
-        }
-        for ((old_parent, name), old_child) in snapshot.dentries {
-            if let (Some(parent), Some(child)) = (map.get(&old_parent), map.get(&old_child)) {
-                state.dentries.insert((*parent, name), *child);
-            }
-        }
-        for ((old_ino, index), mut chunk) in snapshot.chunks {
-            if let Some(new_ino) = map.get(&old_ino) {
-                let key = chunk.key.clone();
-                chunk.index = index;
-                state.chunks.insert((*new_ino, index), chunk);
-                state.inc_block_ref(&key);
-            }
-        }
-        Ok(map[&snapshot.root_ino])
-    }
-
-    async fn gc(&self) -> VfsResult<Vec<BlockKey>> {
-        Ok(Vec::new())
-    }
-}
diff --git a/crates/vfs/src/engine/mem/mod.rs b/crates/vfs/src/engine/mem/mod.rs
deleted file mode 100644
index af731d266..000000000
--- a/crates/vfs/src/engine/mem/mod.rs
+++ /dev/null
@@ -1,7 +0,0 @@
-pub mod block_store;
-pub mod metadata_store;
-pub mod object_backend;
-
-pub use block_store::MemoryBlockStore;
-pub use metadata_store::InMemoryMetadataStore;
-pub use object_backend::MemoryObjectBackend;
diff --git a/crates/vfs/src/engine/mem/object_backend.rs b/crates/vfs/src/engine/mem/object_backend.rs
deleted file mode 100644
index 54b9fbf09..000000000
--- a/crates/vfs/src/engine/mem/object_backend.rs
+++ /dev/null
@@ -1,117 +0,0 @@
-use crate::engine::block::ObjectBackend;
-use crate::engine::error::{VfsError, VfsResult};
-use crate::engine::types::{ObjectEntry, ObjectMeta};
-use async_trait::async_trait;
-use std::collections::{BTreeMap, BTreeSet};
-use std::sync::{Arc, Mutex};
-
-#[derive(Debug, Clone)]
-struct StoredObject {
-    data: Vec<u8>,
-    meta: ObjectMeta,
-}
-
-#[derive(Debug, Clone, Default)]
-pub struct MemoryObjectBackend {
-    objects: Arc<Mutex<BTreeMap<String, StoredObject>>>,
-}
-
-impl MemoryObjectBackend {
-    pub fn new() -> Self {
-        Self::default()
-    }
-}
-
-#[async_trait]
-impl ObjectBackend for MemoryObjectBackend {
-    async fn list(&self, prefix: &str) -> VfsResult<Vec<ObjectEntry>> {
-        let objects = self.objects.lock().expect("object mutex poisoned");
-        let mut entries = Vec::new();
-        let mut prefixes = BTreeSet::new();
-        for (key, object) in objects.range(prefix.to_string()..) {
-            if !key.starts_with(prefix) {
-                break;
-            }
-            let rest = &key[prefix.len()..];
-            if rest.is_empty() {
-                entries.push(ObjectEntry {
-                    name: key.clone(),
-                    size: object.meta.size,
-                    mtime: object.meta.mtime,
-                    is_prefix: false,
-                });
-                continue;
-            }
-            if let Some((head, _)) = rest.split_once('/') {
-                prefixes.insert(format!("{prefix}{head}/"));
-            } else {
-                entries.push(ObjectEntry {
-                    name: key.clone(),
-                    size: object.meta.size,
-                    mtime: object.meta.mtime,
-                    is_prefix: false,
-                });
-            }
-        }
-        entries.extend(prefixes.into_iter().map(|name| ObjectEntry {
-            name,
-            size: 0,
-            mtime: crate::engine::types::Timespec::now(),
-            is_prefix: true,
-        }));
-        Ok(entries)
-    }
-
-    async fn head(&self, key: &str) -> VfsResult<Option<ObjectMeta>> {
-        Ok(self
-            .objects
-            .lock()
-            .expect("object mutex poisoned")
-            .get(key)
-            .map(|object| object.meta.clone()))
-    }
-
-    async fn get_range(&self, key: &str, off: u64, len: u64) -> VfsResult<Vec<u8>> {
-        let objects = self.objects.lock().expect("object mutex poisoned");
-        let object = objects.get(key).ok_or_else(|| VfsError::enoent(key))?;
-        let start = usize::try_from(off)
-            .map_err(|_| VfsError::einval(format!("range offset is too large: {off}")))?;
-        let len = usize::try_from(len)
-            .map_err(|_| VfsError::einval(format!("range length is too large: {len}")))?;
-        if start >= object.data.len() {
-            return Ok(Vec::new());
-        }
-        let end = start.saturating_add(len).min(object.data.len());
-        Ok(object.data[start..end].to_vec())
-    }
-
-    async fn put(&self, key: &str, data: &[u8], mut meta: ObjectMeta) -> VfsResult<()> {
-        meta.size = data.len() as u64;
-        self.objects.lock().expect("object mutex poisoned").insert(
-            key.to_string(),
-            StoredObject {
-                data: data.to_vec(),
-                meta,
-            },
-        );
-        Ok(())
-    }
-
-    async fn copy(&self, src: &str, dst: &str) -> VfsResult<()> {
-        let mut objects = self.objects.lock().expect("object mutex poisoned");
-        let object = objects
-            .get(src)
-            .cloned()
-            .ok_or_else(|| VfsError::enoent(src))?;
-        objects.insert(dst.to_string(), object);
-        Ok(())
-    }
-
-    async fn delete(&self, key: &str) -> VfsResult<()> {
-        self.objects
-            .lock()
-            .expect("object mutex poisoned")
-            .remove(key);
-        Ok(())
-    }
-}
diff --git a/crates/vfs/src/engine/metadata.rs b/crates/vfs/src/engine/metadata.rs
deleted file mode 100644
index e56b9c5bd..000000000
--- a/crates/vfs/src/engine/metadata.rs
+++ /dev/null
@@ -1,43 +0,0 @@
-use crate::engine::error::VfsResult;
-use crate::engine::types::{
-    BlockKey, ChunkEdit, ChunkRange, ChunkRef, CreateInodeAttrs, DentryStat, InodeMeta, InodePatch,
-    SnapshotId,
-};
-use async_trait::async_trait;
-
-#[async_trait]
-pub trait MetadataStore: Send + Sync {
-    async fn resolve(&self, path: &str) -> VfsResult<InodeMeta>;
-    async fn resolve_parent(&self, path: &str) -> VfsResult<(InodeMeta, String)>;
-    async fn lstat(&self, path: &str) -> VfsResult<InodeMeta>;
-    async fn list_dir(&self, ino: u64) -> VfsResult<Vec<DentryStat>>;
-
-    async fn create(
-        &self,
-        parent: u64,
-        name: &str,
-        attrs: CreateInodeAttrs,
-    ) -> VfsResult<InodeMeta>;
-    async fn link(&self, parent: u64, name: &str, target: u64) -> VfsResult<()>;
-    async fn remove(&self, parent: u64, name: &str) -> VfsResult<Vec<BlockKey>>;
-    async fn rename(
-        &self,
-        src_parent: u64,
-        src: &str,
-        dst_parent: u64,
-        dst: &str,
-    ) -> VfsResult<Vec<BlockKey>>;
-    async fn set_attr(&self, ino: u64, patch: InodePatch) -> VfsResult<Vec<BlockKey>>;
-    async fn commit_write(
-        &self,
-        ino: u64,
-        edits: Vec<ChunkEdit>,
-        new_size: u64,
-    ) -> VfsResult<Vec<BlockKey>>;
-
-    async fn get_chunks(&self, ino: u64, range: ChunkRange) -> VfsResult<Vec<ChunkRef>>;
-
-    async fn snapshot(&self, root: u64) -> VfsResult<SnapshotId>;
-    async fn fork(&self, snap: SnapshotId) -> VfsResult<u64>;
-    async fn gc(&self) -> VfsResult<Vec<BlockKey>>;
-}
diff --git a/crates/vfs/src/engine/mod.rs b/crates/vfs/src/engine/mod.rs
deleted file mode 100644
index 0187fff4b..000000000
--- a/crates/vfs/src/engine/mod.rs
+++ /dev/null
@@ -1,16 +0,0 @@
-pub mod block;
-pub mod cache;
-pub mod engines;
-pub mod error;
-pub mod mem;
-pub mod metadata;
-pub mod types;
-pub mod vfs;
-
-pub use block::{BlockStore, ObjectBackend};
-pub use cache::CachedMetadataStore;
-pub use error::{VfsError, VfsResult};
-pub use mem::{InMemoryMetadataStore, MemoryBlockStore, MemoryObjectBackend};
-pub use metadata::MetadataStore;
-pub use types::*;
-pub use vfs::{Snapshottable, VirtualFileSystem};
diff --git a/crates/vfs/src/engine/types.rs b/crates/vfs/src/engine/types.rs
deleted file mode 100644
index 77823f6b4..000000000
--- a/crates/vfs/src/engine/types.rs
+++ /dev/null
@@ -1,273 +0,0 @@
-use crate::engine::error::{VfsError, VfsResult};
-use serde::{Deserialize, Serialize};
-use web_time::{SystemTime, UNIX_EPOCH};
-
-pub const MAX_PATH: usize = 4096;
-pub const MAX_SYMLINK_DEPTH: usize = 40;
-pub const DEFAULT_INLINE_THRESHOLD: usize = 64 * 1024;
-pub const DEFAULT_CHUNK_SIZE: u32 = 4 * 1024 * 1024;
-
-pub const S_IFREG: u32 = 0o100000;
-pub const S_IFDIR: u32 = 0o040000;
-pub const S_IFLNK: u32 = 0o120000;
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord, Hash, Serialize, Deserialize)]
-pub struct Timespec {
-    pub sec: i64,
-    pub nsec: u32,
-}
-
-impl Timespec {
-    pub fn now() -> Self {
-        let duration = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .unwrap_or_default();
-        Self {
-            sec: duration.as_secs() as i64,
-            nsec: duration.subsec_nanos(),
-        }
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord, Hash, Serialize, Deserialize)]
-pub enum InodeType {
-    File,
-    Directory,
-    Symlink,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub enum Storage {
-    Inline(Vec<u8>),
-    Chunked { chunk_size: u32 },
-    None,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct InodeMeta {
-    pub ino: u64,
-    pub kind: InodeType,
-    pub mode: u32,
-    pub uid: u32,
-    pub gid: u32,
-    pub size: u64,
-    pub nlink: u64,
-    pub atime: Timespec,
-    pub mtime: Timespec,
-    pub ctime: Timespec,
-    pub birthtime: Timespec,
-    pub storage: Storage,
-    pub symlink_target: Option<String>,
-}
-
-impl InodeMeta {
-    pub fn to_stat(&self) -> VirtualStat {
-        let type_bits = match self.kind {
-            InodeType::File => S_IFREG,
-            InodeType::Directory => S_IFDIR,
-            InodeType::Symlink => S_IFLNK,
-        };
-        VirtualStat {
-            mode: type_bits | (self.mode & 0o7777),
-            size: self.size,
-            blocks: self.size.div_ceil(512),
-            is_directory: self.kind == InodeType::Directory,
-            is_symbolic_link: self.kind == InodeType::Symlink,
-            atime: self.atime,
-            mtime: self.mtime,
-            ctime: self.ctime,
-            birthtime: self.birthtime,
-            ino: self.ino,
-            nlink: self.nlink,
-            uid: self.uid,
-            gid: self.gid,
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct Dentry {
-    pub name: String,
-    pub ino: u64,
-    pub kind: InodeType,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct DentryStat {
-    pub name: String,
-    pub meta: InodeMeta,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct VirtualStat {
-    pub mode: u32,
-    pub size: u64,
-    pub blocks: u64,
-    pub is_directory: bool,
-    pub is_symbolic_link: bool,
-    pub atime: Timespec,
-    pub mtime: Timespec,
-    pub ctime: Timespec,
-    pub birthtime: Timespec,
-    pub ino: u64,
-    pub nlink: u64,
-    pub uid: u32,
-    pub gid: u32,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, PartialOrd, Ord, Hash, Serialize, Deserialize)]
-pub struct SnapshotId(pub u64);
-
-#[derive(Debug, Clone, PartialEq, Eq, PartialOrd, Ord, Hash, Serialize, Deserialize)]
-pub struct BlockKey(pub String);
-
-impl BlockKey {
-    pub fn from_content(data: &[u8]) -> Self {
-        Self(blake3::hash(data).to_hex().to_string())
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
-pub struct ChunkRange {
-    pub start: u64,
-    pub end: Option<u64>,
-}
-
-impl ChunkRange {
-    pub fn all() -> Self {
-        Self {
-            start: 0,
-            end: None,
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct ChunkRef {
-    pub index: u64,
-    pub key: BlockKey,
-    pub len: u32,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct ChunkEdit {
-    pub index: u64,
-    pub key: BlockKey,
-    pub len: u32,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct CreateInodeAttrs {
-    pub kind: InodeType,
-    pub mode: u32,
-    pub uid: u32,
-    pub gid: u32,
-    pub storage: Storage,
-    pub symlink_target: Option<String>,
-}
-
-impl CreateInodeAttrs {
-    pub fn file(mode: u32, uid: u32, gid: u32, storage: Storage) -> Self {
-        Self {
-            kind: InodeType::File,
-            mode,
-            uid,
-            gid,
-            storage,
-            symlink_target: None,
-        }
-    }
-
-    pub fn directory(mode: u32, uid: u32, gid: u32) -> Self {
-        Self {
-            kind: InodeType::Directory,
-            mode,
-            uid,
-            gid,
-            storage: Storage::None,
-            symlink_target: None,
-        }
-    }
-
-    pub fn symlink(target: String, uid: u32, gid: u32) -> Self {
-        Self {
-            kind: InodeType::Symlink,
-            mode: 0o777,
-            uid,
-            gid,
-            storage: Storage::None,
-            symlink_target: Some(target),
-        }
-    }
-}
-
-#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize)]
-pub struct InodePatch {
-    pub mode: Option<u32>,
-    pub uid: Option<u32>,
-    pub gid: Option<u32>,
-    pub atime: Option<Timespec>,
-    pub mtime: Option<Timespec>,
-    pub size: Option<u64>,
-    pub storage: Option<Storage>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct ObjectMeta {
-    pub size: u64,
-    pub mtime: Timespec,
-    pub mode: u32,
-    pub uid: u32,
-    pub gid: u32,
-    pub kind: InodeType,
-    pub symlink_target: Option<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct ObjectEntry {
-    pub name: String,
-    pub size: u64,
-    pub mtime: Timespec,
-    pub is_prefix: bool,
-}
-
-pub fn validate_path(path: &str) -> VfsResult<()> {
-    if path.is_empty() || !path.starts_with('/') {
-        return Err(VfsError::einval(format!("path must be absolute: {path}")));
-    }
-    if path.len() > MAX_PATH {
-        return Err(VfsError::enametoolong(path));
-    }
-    Ok(())
-}
-
-pub fn normalize_path(path: &str) -> VfsResult<String> {
-    validate_path(path)?;
-    let mut parts = Vec::new();
-    for part in path.split('/') {
-        match part {
-            "" | "." => {}
-            ".." => {
-                parts.pop();
-            }
-            name => parts.push(name),
-        }
-    }
-    if parts.is_empty() {
-        Ok("/".to_string())
-    } else {
-        Ok(format!("/{}", parts.join("/")))
-    }
-}
-
-pub fn parent_and_name(path: &str) -> VfsResult<(String, String)> {
-    let normalized = normalize_path(path)?;
-    if normalized == "/" {
-        return Err(VfsError::einval("root has no parent"));
-    }
-    let (parent, name) = normalized
-        .rsplit_once('/')
-        .ok_or_else(|| VfsError::einval(format!("invalid path: {path}")))?;
-    let parent = if parent.is_empty() { "/" } else { parent };
-    Ok((parent.to_string(), name.to_string()))
-}
diff --git a/crates/vfs/src/engine/vfs.rs b/crates/vfs/src/engine/vfs.rs
deleted file mode 100644
index 43123b1de..000000000
--- a/crates/vfs/src/engine/vfs.rs
+++ /dev/null
@@ -1,42 +0,0 @@
-use crate::engine::error::{VfsError, VfsResult};
-use crate::engine::types::{Dentry, SnapshotId, VirtualStat};
-use async_trait::async_trait;
-
-#[async_trait]
-pub trait VirtualFileSystem: Send + Sync {
-    async fn read_file(&self, path: &str) -> VfsResult<Vec<u8>>;
-
-    async fn read_text(&self, path: &str) -> VfsResult<String> {
-        String::from_utf8(self.read_file(path).await?)
-            .map_err(|_| VfsError::einval(format!("file is not valid UTF-8: {path}")))
-    }
-
-    async fn read_dir(&self, path: &str) -> VfsResult<Vec<String>>;
-    async fn read_dir_with_types(&self, path: &str) -> VfsResult<Vec<Dentry>>;
-    async fn write_file(&self, path: &str, content: &[u8]) -> VfsResult<()>;
-    async fn create_dir(&self, path: &str) -> VfsResult<()>;
-    async fn mkdir(&self, path: &str, recursive: bool) -> VfsResult<()>;
-    async fn exists(&self, path: &str) -> bool;
-    async fn stat(&self, path: &str) -> VfsResult<VirtualStat>;
-    async fn lstat(&self, path: &str) -> VfsResult<VirtualStat>;
-    async fn remove_file(&self, path: &str) -> VfsResult<()>;
-    async fn remove_dir(&self, path: &str) -> VfsResult<()>;
-    async fn rename(&self, old_path: &str, new_path: &str) -> VfsResult<()>;
-    async fn realpath(&self, path: &str) -> VfsResult<String>;
-    async fn symlink(&self, target: &str, link_path: &str) -> VfsResult<()>;
-    async fn readlink(&self, path: &str) -> VfsResult<String>;
-    async fn link(&self, old_path: &str, new_path: &str) -> VfsResult<()>;
-    async fn chmod(&self, path: &str, mode: u32) -> VfsResult<()>;
-    async fn chown(&self, path: &str, uid: u32, gid: u32) -> VfsResult<()>;
-    async fn utimes(&self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()>;
-    async fn truncate(&self, path: &str, length: u64) -> VfsResult<()>;
-    async fn pread(&self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>>;
-    async fn pwrite(&self, path: &str, content: &[u8], offset: u64) -> VfsResult<()>;
-    async fn append(&self, path: &str, content: &[u8]) -> VfsResult<u64>;
-}
-
-#[async_trait]
-pub trait Snapshottable: Send + Sync {
-    async fn snapshot(&self, root: u64) -> VfsResult<SnapshotId>;
-    async fn fork(&self, snap: SnapshotId) -> VfsResult<u64>;
-}
diff --git a/crates/vfs/src/lib.rs b/crates/vfs/src/lib.rs
index 69756f19a..fbbeb54da 100644
--- a/crates/vfs/src/lib.rs
+++ b/crates/vfs/src/lib.rs
@@ -1,6 +1,3 @@
-#![deny(unsafe_code)]
+//! Compatibility shim for `agentos-vfs`.
 
-#[cfg(not(target_arch = "wasm32"))]
-pub mod adapter;
-pub mod engine;
-pub mod posix;
+pub use agentos_vfs::*;
diff --git a/crates/vfs/src/posix/mod.rs b/crates/vfs/src/posix/mod.rs
deleted file mode 100644
index 05e376bd6..000000000
--- a/crates/vfs/src/posix/mod.rs
+++ /dev/null
@@ -1,27 +0,0 @@
-pub mod mount_plugin;
-pub mod mount_table;
-pub mod overlay_fs;
-pub mod root_fs;
-pub mod single_symlink_fs;
-#[cfg(not(target_arch = "wasm32"))]
-pub mod tar_fs;
-pub mod usage;
-pub mod vfs;
-
-pub use mount_plugin::{
-    FileSystemPluginFactory, FileSystemPluginRegistry, OpenFileSystemPluginRequest, PluginError,
-};
-pub use mount_table::{
-    MountEntry, MountOptions, MountTable, MountedFileSystem, MountedVirtualFileSystem,
-    ReadOnlyFileSystem,
-};
-pub use overlay_fs::{OverlayFileSystem, OverlayMode};
-pub use root_fs::*;
-pub use single_symlink_fs::SingleSymlinkFileSystem;
-#[cfg(not(target_arch = "wasm32"))]
-pub use tar_fs::TarFileSystem;
-pub use usage::{
-    measure_filesystem_usage, FileSystemUsage, RootFilesystemResourceLimits,
-    DEFAULT_MAX_FILESYSTEM_BYTES, DEFAULT_MAX_INODE_COUNT,
-};
-pub use vfs::*;
diff --git a/crates/vfs/src/posix/mount_plugin.rs b/crates/vfs/src/posix/mount_plugin.rs
deleted file mode 100644
index 5c475fe78..000000000
--- a/crates/vfs/src/posix/mount_plugin.rs
+++ /dev/null
@@ -1,139 +0,0 @@
-use super::mount_table::MountedFileSystem;
-use super::vfs::VfsError;
-use serde_json::Value;
-use std::collections::BTreeMap;
-use std::error::Error;
-use std::fmt;
-
-#[derive(Debug)]
-pub struct OpenFileSystemPluginRequest<'a, Context> {
-    pub vm_id: &'a str,
-    pub guest_path: &'a str,
-    pub read_only: bool,
-    pub config: &'a Value,
-    pub context: &'a Context,
-}
-
-pub trait FileSystemPluginFactory<Context>: Send + Sync {
-    fn plugin_id(&self) -> &'static str;
-    fn open(
-        &self,
-        request: OpenFileSystemPluginRequest<'_, Context>,
-    ) -> Result<Box<dyn MountedFileSystem>, PluginError>;
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct PluginError {
-    code: &'static str,
-    message: String,
-}
-
-impl PluginError {
-    pub fn code(&self) -> &'static str {
-        self.code
-    }
-
-    pub fn message(&self) -> &str {
-        &self.message
-    }
-
-    pub fn new(code: &'static str, message: impl Into<String>) -> Self {
-        Self {
-            code,
-            message: message.into(),
-        }
-    }
-
-    pub fn unsupported(message: impl Into<String>) -> Self {
-        Self::new("ENOSYS", message)
-    }
-
-    pub fn invalid_input(message: impl Into<String>) -> Self {
-        Self::new("EINVAL", message)
-    }
-
-    pub fn already_exists(message: impl Into<String>) -> Self {
-        Self::new("EEXIST", message)
-    }
-}
-
-impl fmt::Display for PluginError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}: {}", self.code, self.message)
-    }
-}
-
-impl Error for PluginError {}
-
-impl From<VfsError> for PluginError {
-    fn from(error: VfsError) -> Self {
-        Self::new(error.code(), error.message().to_owned())
-    }
-}
-
-pub struct FileSystemPluginRegistry<Context> {
-    factories: BTreeMap<String, Box<dyn FileSystemPluginFactory<Context>>>,
-}
-
-impl<Context> Default for FileSystemPluginRegistry<Context> {
-    fn default() -> Self {
-        Self::new()
-    }
-}
-
-impl<Context> FileSystemPluginRegistry<Context> {
-    pub fn new() -> Self {
-        Self {
-            factories: BTreeMap::new(),
-        }
-    }
-
-    pub fn register(
-        &mut self,
-        factory: impl FileSystemPluginFactory<Context> + 'static,
-    ) -> Result<(), PluginError> {
-        let plugin_id = factory.plugin_id();
-        validate_plugin_id(plugin_id)?;
-        if self.factories.contains_key(plugin_id) {
-            return Err(PluginError::already_exists(format!(
-                "filesystem plugin already registered: {plugin_id}"
-            )));
-        }
-
-        self.factories
-            .insert(plugin_id.to_owned(), Box::new(factory));
-        Ok(())
-    }
-
-    pub fn open(
-        &self,
-        plugin_id: &str,
-        request: OpenFileSystemPluginRequest<'_, Context>,
-    ) -> Result<Box<dyn MountedFileSystem>, PluginError> {
-        let Some(factory) = self.factories.get(plugin_id) else {
-            return Err(PluginError::unsupported(format!(
-                "filesystem plugin is not registered: {plugin_id}"
-            )));
-        };
-
-        factory.open(request)
-    }
-
-    pub fn plugin_ids(&self) -> Vec<String> {
-        self.factories.keys().cloned().collect()
-    }
-}
-
-fn validate_plugin_id(plugin_id: &str) -> Result<(), PluginError> {
-    if plugin_id.is_empty()
-        || !plugin_id
-            .bytes()
-            .all(|byte| byte.is_ascii_alphanumeric() || matches!(byte, b'.' | b'_' | b'-'))
-    {
-        return Err(PluginError::invalid_input(format!(
-            "invalid filesystem plugin id {plugin_id:?}"
-        )));
-    }
-
-    Ok(())
-}
diff --git a/crates/vfs/src/posix/mount_table.rs b/crates/vfs/src/posix/mount_table.rs
deleted file mode 100644
index 9f556970a..000000000
--- a/crates/vfs/src/posix/mount_table.rs
+++ /dev/null
@@ -1,1356 +0,0 @@
-use super::root_fs::RootFileSystem;
-use super::usage::FileSystemUsage;
-use super::vfs::{
-    VfsError, VfsResult, VirtualDirEntry, VirtualFileSystem, VirtualStat, VirtualUtimeSpec,
-};
-use std::any::Any;
-use std::collections::BTreeSet;
-use std::collections::VecDeque;
-use std::path::{Component, Path};
-use web_time::{SystemTime, UNIX_EPOCH};
-
-const MAX_REALPATH_SYMLINKS: usize = 40;
-
-pub trait MountedFileSystem: Any {
-    fn as_any(&self) -> &dyn Any;
-    fn as_any_mut(&mut self) -> &mut dyn Any;
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>>;
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>>;
-    fn read_dir_limited(&mut self, path: &str, max_entries: usize) -> VfsResult<Vec<String>> {
-        let entries = self.read_dir(path)?;
-        if entries.len() > max_entries {
-            return Err(VfsError::new(
-                "ENOMEM",
-                format!(
-                    "directory listing for '{path}' exceeds configured limit of {max_entries} entries"
-                ),
-            ));
-        }
-        Ok(entries)
-    }
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>>;
-    fn write_file(&mut self, path: &str, content: Vec<u8>) -> VfsResult<()>;
-    fn write_file_with_mode(
-        &mut self,
-        path: &str,
-        content: Vec<u8>,
-        mode: Option<u32>,
-    ) -> VfsResult<()> {
-        let _ = mode;
-        self.write_file(path, content)
-    }
-    fn create_file_exclusive(&mut self, path: &str, content: Vec<u8>) -> VfsResult<()> {
-        if self.exists(path) {
-            return Err(VfsError::new(
-                "EEXIST",
-                format!("file already exists, open '{path}'"),
-            ));
-        }
-        self.write_file(path, content)
-    }
-    fn create_file_exclusive_with_mode(
-        &mut self,
-        path: &str,
-        content: Vec<u8>,
-        mode: Option<u32>,
-    ) -> VfsResult<()> {
-        let _ = mode;
-        self.create_file_exclusive(path, content)
-    }
-    fn append_file(&mut self, path: &str, content: Vec<u8>) -> VfsResult<u64> {
-        let mut existing = self.read_file(path)?;
-        existing.extend_from_slice(&content);
-        let new_len = existing.len() as u64;
-        self.write_file(path, existing)?;
-        Ok(new_len)
-    }
-    fn create_dir(&mut self, path: &str) -> VfsResult<()>;
-    fn create_dir_with_mode(&mut self, path: &str, mode: Option<u32>) -> VfsResult<()> {
-        let _ = mode;
-        self.create_dir(path)
-    }
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()>;
-    fn mkdir_with_mode(&mut self, path: &str, recursive: bool, mode: Option<u32>) -> VfsResult<()> {
-        let _ = mode;
-        self.mkdir(path, recursive)
-    }
-    fn exists(&self, path: &str) -> bool;
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat>;
-    fn remove_file(&mut self, path: &str) -> VfsResult<()>;
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()>;
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()>;
-    fn realpath(&self, path: &str) -> VfsResult<String>;
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()>;
-    fn read_link(&self, path: &str) -> VfsResult<String>;
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat>;
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()>;
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()>;
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()>;
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()>;
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-        follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        if !follow_symlinks {
-            return Err(VfsError::unsupported(format!(
-                "lutimes is not supported for mount path '{path}'"
-            )));
-        }
-        let existing = match (atime, mtime) {
-            (VirtualUtimeSpec::Omit, _) | (_, VirtualUtimeSpec::Omit) => Some(self.stat(path)?),
-            _ => None,
-        };
-        let now_ms = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .unwrap_or_default()
-            .as_millis() as u64;
-        let atime_ms = match atime {
-            VirtualUtimeSpec::Set(spec) => spec.to_truncated_millis()?,
-            VirtualUtimeSpec::Now => now_ms,
-            VirtualUtimeSpec::Omit => {
-                existing
-                    .as_ref()
-                    .ok_or_else(|| {
-                        VfsError::new("EINVAL", "UTIME_OMIT requires existing metadata")
-                    })?
-                    .atime_ms
-            }
-        };
-        let mtime_ms = match mtime {
-            VirtualUtimeSpec::Set(spec) => spec.to_truncated_millis()?,
-            VirtualUtimeSpec::Now => now_ms,
-            VirtualUtimeSpec::Omit => {
-                existing
-                    .as_ref()
-                    .ok_or_else(|| {
-                        VfsError::new("EINVAL", "UTIME_OMIT requires existing metadata")
-                    })?
-                    .mtime_ms
-            }
-        };
-        self.utimes(path, atime_ms, mtime_ms)
-    }
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()>;
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>>;
-    fn shutdown(&mut self) -> VfsResult<()> {
-        Ok(())
-    }
-}
-
-pub struct MountedVirtualFileSystem<F> {
-    inner: F,
-}
-
-impl<F> MountedVirtualFileSystem<F> {
-    pub fn new(inner: F) -> Self {
-        Self { inner }
-    }
-
-    pub fn inner(&self) -> &F {
-        &self.inner
-    }
-
-    pub fn inner_mut(&mut self) -> &mut F {
-        &mut self.inner
-    }
-}
-
-impl<F> MountedFileSystem for MountedVirtualFileSystem<F>
-where
-    F: VirtualFileSystem + 'static,
-{
-    fn as_any(&self) -> &dyn Any {
-        self
-    }
-
-    fn as_any_mut(&mut self) -> &mut dyn Any {
-        self
-    }
-
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        VirtualFileSystem::read_file(&mut self.inner, path)
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        VirtualFileSystem::read_dir(&mut self.inner, path)
-    }
-
-    fn read_dir_limited(&mut self, path: &str, max_entries: usize) -> VfsResult<Vec<String>> {
-        VirtualFileSystem::read_dir_limited(&mut self.inner, path, max_entries)
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        VirtualFileSystem::read_dir_with_types(&mut self.inner, path)
-    }
-
-    fn write_file(&mut self, path: &str, content: Vec<u8>) -> VfsResult<()> {
-        VirtualFileSystem::write_file(&mut self.inner, path, content)
-    }
-
-    fn write_file_with_mode(
-        &mut self,
-        path: &str,
-        content: Vec<u8>,
-        mode: Option<u32>,
-    ) -> VfsResult<()> {
-        VirtualFileSystem::write_file_with_mode(&mut self.inner, path, content, mode)
-    }
-
-    fn create_file_exclusive(&mut self, path: &str, content: Vec<u8>) -> VfsResult<()> {
-        VirtualFileSystem::create_file_exclusive(&mut self.inner, path, content)
-    }
-
-    fn create_file_exclusive_with_mode(
-        &mut self,
-        path: &str,
-        content: Vec<u8>,
-        mode: Option<u32>,
-    ) -> VfsResult<()> {
-        VirtualFileSystem::create_file_exclusive_with_mode(&mut self.inner, path, content, mode)
-    }
-
-    fn append_file(&mut self, path: &str, content: Vec<u8>) -> VfsResult<u64> {
-        VirtualFileSystem::append_file(&mut self.inner, path, content)
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        VirtualFileSystem::create_dir(&mut self.inner, path)
-    }
-
-    fn create_dir_with_mode(&mut self, path: &str, mode: Option<u32>) -> VfsResult<()> {
-        VirtualFileSystem::create_dir_with_mode(&mut self.inner, path, mode)
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        VirtualFileSystem::mkdir(&mut self.inner, path, recursive)
-    }
-
-    fn mkdir_with_mode(&mut self, path: &str, recursive: bool, mode: Option<u32>) -> VfsResult<()> {
-        VirtualFileSystem::mkdir_with_mode(&mut self.inner, path, recursive, mode)
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        VirtualFileSystem::exists(&self.inner, path)
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        VirtualFileSystem::stat(&mut self.inner, path)
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        VirtualFileSystem::remove_file(&mut self.inner, path)
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        VirtualFileSystem::remove_dir(&mut self.inner, path)
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        VirtualFileSystem::rename(&mut self.inner, old_path, new_path)
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        VirtualFileSystem::realpath(&self.inner, path)
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        VirtualFileSystem::symlink(&mut self.inner, target, link_path)
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        VirtualFileSystem::read_link(&self.inner, path)
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        VirtualFileSystem::lstat(&self.inner, path)
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        VirtualFileSystem::link(&mut self.inner, old_path, new_path)
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        VirtualFileSystem::chmod(&mut self.inner, path, mode)
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        VirtualFileSystem::chown(&mut self.inner, path, uid, gid)
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        VirtualFileSystem::utimes(&mut self.inner, path, atime_ms, mtime_ms)
-    }
-
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-        follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        VirtualFileSystem::utimes_spec(&mut self.inner, path, atime, mtime, follow_symlinks)
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        VirtualFileSystem::truncate(&mut self.inner, path, length)
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        VirtualFileSystem::pread(&mut self.inner, path, offset, length)
-    }
-}
-
-impl<T> MountedFileSystem for Box<T>
-where
-    T: MountedFileSystem + ?Sized + 'static,
-{
-    fn as_any(&self) -> &dyn Any {
-        (**self).as_any()
-    }
-
-    fn as_any_mut(&mut self) -> &mut dyn Any {
-        (**self).as_any_mut()
-    }
-
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        (**self).read_file(path)
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        (**self).read_dir(path)
-    }
-
-    fn read_dir_limited(&mut self, path: &str, max_entries: usize) -> VfsResult<Vec<String>> {
-        (**self).read_dir_limited(path, max_entries)
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        (**self).read_dir_with_types(path)
-    }
-
-    fn write_file(&mut self, path: &str, content: Vec<u8>) -> VfsResult<()> {
-        (**self).write_file(path, content)
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        (**self).create_dir(path)
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        (**self).mkdir(path, recursive)
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        (**self).exists(path)
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        (**self).stat(path)
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        (**self).remove_file(path)
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        (**self).remove_dir(path)
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        (**self).rename(old_path, new_path)
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        (**self).realpath(path)
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        (**self).symlink(target, link_path)
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        (**self).read_link(path)
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        (**self).lstat(path)
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        (**self).link(old_path, new_path)
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        (**self).chmod(path, mode)
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        (**self).chown(path, uid, gid)
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        (**self).utimes(path, atime_ms, mtime_ms)
-    }
-
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-        follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        (**self).utimes_spec(path, atime, mtime, follow_symlinks)
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        (**self).truncate(path, length)
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        (**self).pread(path, offset, length)
-    }
-
-    fn shutdown(&mut self) -> VfsResult<()> {
-        (**self).shutdown()
-    }
-}
-
-pub struct ReadOnlyFileSystem<F> {
-    inner: F,
-}
-
-impl<F> ReadOnlyFileSystem<F> {
-    pub fn new(inner: F) -> Self {
-        Self { inner }
-    }
-}
-
-impl<F> MountedFileSystem for ReadOnlyFileSystem<F>
-where
-    F: MountedFileSystem + 'static,
-{
-    fn as_any(&self) -> &dyn Any {
-        self
-    }
-
-    fn as_any_mut(&mut self) -> &mut dyn Any {
-        self
-    }
-
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        self.inner.read_file(path)
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        self.inner.read_dir(path)
-    }
-
-    fn read_dir_limited(&mut self, path: &str, max_entries: usize) -> VfsResult<Vec<String>> {
-        self.inner.read_dir_limited(path, max_entries)
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        self.inner.read_dir_with_types(path)
-    }
-
-    fn write_file(&mut self, path: &str, _content: Vec<u8>) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only filesystem: {path}"),
-        ))
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only filesystem: {path}"),
-        ))
-    }
-
-    fn mkdir(&mut self, path: &str, _recursive: bool) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only filesystem: {path}"),
-        ))
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        self.inner.exists(path)
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        self.inner.stat(path)
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only filesystem: {path}"),
-        ))
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only filesystem: {path}"),
-        ))
-    }
-
-    fn rename(&mut self, old_path: &str, _new_path: &str) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only filesystem: {old_path}"),
-        ))
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        self.inner.realpath(path)
-    }
-
-    fn symlink(&mut self, _target: &str, link_path: &str) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only filesystem: {link_path}"),
-        ))
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        self.inner.read_link(path)
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        self.inner.lstat(path)
-    }
-
-    fn link(&mut self, _old_path: &str, new_path: &str) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only filesystem: {new_path}"),
-        ))
-    }
-
-    fn chmod(&mut self, path: &str, _mode: u32) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only filesystem: {path}"),
-        ))
-    }
-
-    fn chown(&mut self, path: &str, _uid: u32, _gid: u32) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only filesystem: {path}"),
-        ))
-    }
-
-    fn utimes(&mut self, path: &str, _atime_ms: u64, _mtime_ms: u64) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only filesystem: {path}"),
-        ))
-    }
-
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        _atime: VirtualUtimeSpec,
-        _mtime: VirtualUtimeSpec,
-        _follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only filesystem: {path}"),
-        ))
-    }
-
-    fn truncate(&mut self, path: &str, _length: u64) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only filesystem: {path}"),
-        ))
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        self.inner.pread(path, offset, length)
-    }
-
-    fn shutdown(&mut self) -> VfsResult<()> {
-        self.inner.shutdown()
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct MountEntry {
-    pub path: String,
-    pub plugin_id: String,
-    pub read_only: bool,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct MountOptions {
-    pub plugin_id: String,
-    pub read_only: bool,
-}
-
-impl MountOptions {
-    pub fn new(plugin_id: impl Into<String>) -> Self {
-        Self {
-            plugin_id: plugin_id.into(),
-            read_only: false,
-        }
-    }
-
-    pub fn read_only(mut self, read_only: bool) -> Self {
-        self.read_only = read_only;
-        self
-    }
-}
-
-struct MountRegistration {
-    path: String,
-    plugin_id: String,
-    read_only: bool,
-    filesystem: Box<dyn MountedFileSystem>,
-}
-
-pub struct MountTable {
-    mounts: Vec<MountRegistration>,
-}
-
-impl MountTable {
-    pub fn new(root_fs: impl VirtualFileSystem + 'static) -> Self {
-        Self {
-            mounts: vec![MountRegistration {
-                path: String::from("/"),
-                plugin_id: String::from("root"),
-                read_only: false,
-                filesystem: Box::new(MountedVirtualFileSystem::new(root_fs)),
-            }],
-        }
-    }
-
-    pub fn new_boxed_root(filesystem: Box<dyn MountedFileSystem>, options: MountOptions) -> Self {
-        let filesystem = if options.read_only {
-            Box::new(ReadOnlyFileSystem::new(filesystem)) as Box<dyn MountedFileSystem>
-        } else {
-            filesystem
-        };
-
-        Self {
-            mounts: vec![MountRegistration {
-                path: String::from("/"),
-                plugin_id: options.plugin_id,
-                read_only: options.read_only,
-                filesystem,
-            }],
-        }
-    }
-
-    pub fn mount(
-        &mut self,
-        path: &str,
-        filesystem: impl VirtualFileSystem + 'static,
-        options: MountOptions,
-    ) -> VfsResult<()> {
-        self.mount_boxed(
-            path,
-            Box::new(MountedVirtualFileSystem::new(filesystem)),
-            options,
-        )
-    }
-
-    pub fn mount_boxed(
-        &mut self,
-        path: &str,
-        mut filesystem: Box<dyn MountedFileSystem>,
-        options: MountOptions,
-    ) -> VfsResult<()> {
-        let normalized = normalize_path(path);
-        if normalized == "/" {
-            return Err(VfsError::new("EINVAL", "cannot mount over root"));
-        }
-        if self.mounts.iter().any(|mount| mount.path == normalized) {
-            return Err(VfsError::new(
-                "EEXIST",
-                format!("already mounted at {normalized}"),
-            ));
-        }
-
-        let (parent_index, relative_path) = self.resolve_index(&normalized)?;
-        let parent_mount = &mut self.mounts[parent_index];
-        if !parent_mount.filesystem.exists(&relative_path) {
-            // Materializing the mountpoint directory on the parent is
-            // cosmetic: child mounts resolve by path prefix before the parent
-            // is consulted. A read-only parent (for example a read-only
-            // module-access mount hosting nested package mounts) cannot
-            // materialize the entry, but the mount must still succeed.
-            if let Err(error) = parent_mount.filesystem.mkdir(&relative_path, true) {
-                if error.code() != "EROFS" {
-                    if let Err(shutdown_error) = filesystem.shutdown() {
-                        return Err(VfsError::new(
-                            shutdown_error.code(),
-                            format!(
-                                "failed to shut down filesystem after mount failure ({error}): {}",
-                                shutdown_error.message()
-                            ),
-                        ));
-                    }
-
-                    return Err(error);
-                }
-            }
-        }
-
-        let filesystem = if options.read_only {
-            Box::new(ReadOnlyFileSystem::new(filesystem)) as Box<dyn MountedFileSystem>
-        } else {
-            filesystem
-        };
-
-        self.mounts.push(MountRegistration {
-            path: normalized,
-            plugin_id: options.plugin_id,
-            read_only: options.read_only,
-            filesystem,
-        });
-        self.mounts
-            .sort_by_key(|mount| std::cmp::Reverse(mount.path.len()));
-        Ok(())
-    }
-
-    pub fn unmount(&mut self, path: &str) -> VfsResult<()> {
-        let normalized = normalize_path(path);
-        if normalized == "/" {
-            return Err(VfsError::new("EINVAL", "cannot unmount root"));
-        }
-
-        let child_mount_prefix = format!("{normalized}/");
-        if self
-            .mounts
-            .iter()
-            .any(|mount| mount.path.starts_with(&child_mount_prefix))
-        {
-            return Err(VfsError::new(
-                "EBUSY",
-                format!("mount point has child mounts: {normalized}"),
-            ));
-        }
-
-        let Some(index) = self
-            .mounts
-            .iter()
-            .position(|mount| mount.path == normalized)
-        else {
-            return Err(VfsError::new(
-                "EINVAL",
-                format!("not a mount point: {normalized}"),
-            ));
-        };
-
-        let mut mount = self.mounts.remove(index);
-        mount.filesystem.shutdown()?;
-        Ok(())
-    }
-
-    pub fn get_mounts(&self) -> Vec<MountEntry> {
-        self.mounts
-            .iter()
-            .map(|mount| MountEntry {
-                path: mount.path.clone(),
-                plugin_id: mount.plugin_id.clone(),
-                read_only: mount.read_only,
-            })
-            .collect()
-    }
-
-    pub fn root_virtual_filesystem_mut<T: VirtualFileSystem + 'static>(
-        &mut self,
-    ) -> Option<&mut T> {
-        let root = self.mounts.iter_mut().find(|mount| mount.path == "/")?;
-        root.filesystem
-            .as_any_mut()
-            .downcast_mut::<MountedVirtualFileSystem<T>>()
-            .map(MountedVirtualFileSystem::inner_mut)
-    }
-
-    pub fn check_rename_copy_up_limits(
-        &mut self,
-        old_path: &str,
-        new_path: &str,
-        max_bytes: Option<u64>,
-        max_inodes: Option<usize>,
-    ) -> VfsResult<()> {
-        let (old_index, old_relative_path) = self.resolve_index(old_path)?;
-        let (new_index, new_relative_path) = self.resolve_index(new_path)?;
-        if old_index != new_index {
-            return Ok(());
-        }
-
-        let filesystem = &mut self.mounts[old_index].filesystem;
-        if let Some(root) = filesystem
-            .as_any_mut()
-            .downcast_mut::<MountedVirtualFileSystem<RootFileSystem>>()
-        {
-            root.inner_mut().check_rename_copy_up_limits(
-                &old_relative_path,
-                &new_relative_path,
-                max_bytes,
-                max_inodes,
-            )?;
-        }
-
-        Ok(())
-    }
-
-    pub fn root_usage(&mut self) -> VfsResult<FileSystemUsage> {
-        let root = self
-            .mounts
-            .iter_mut()
-            .find(|mount| mount.path == "/")
-            .ok_or_else(|| VfsError::new("ENOENT", "missing root mount"))?;
-        measure_mounted_filesystem_usage(root.filesystem.as_mut(), "/", &mut BTreeSet::new())
-    }
-
-    fn resolve_index(&self, full_path: &str) -> VfsResult<(usize, String)> {
-        let normalized = normalize_path(full_path);
-        for (index, mount) in self.mounts.iter().enumerate() {
-            if mount.path == "/" {
-                return Ok((index, normalized));
-            }
-            if normalized == mount.path {
-                return Ok((index, String::from("/")));
-            }
-            let mount_prefix = format!("{}/", mount.path);
-            if let Some(suffix) = normalized.strip_prefix(&mount_prefix) {
-                // Strip exactly the mount prefix once. `trim_start_matches` would
-                // strip every leading repetition of `mount.path`, so a path like
-                // `/data/data/file` under mount `/data` would alias to `/file`
-                // instead of `/data/file`, routing reads/writes to the wrong file.
-                return Ok((index, format!("/{suffix}")));
-            }
-        }
-
-        Err(VfsError::new(
-            "ENOENT",
-            format!("no such file or directory, resolve '{full_path}'"),
-        ))
-    }
-
-    /// Resolve a path for a CONTENT operation (read_file/stat/pread/read_dir)
-    /// that must follow symlinks like POSIX `open()`. `resolve_index` is purely
-    /// lexical, so a path that descends through a symlink whose target lives in a
-    /// *different* mount (e.g. `/opt/agentos/pkgs/<pkg>/current -> <version>`,
-    /// where `current` is its own single-symlink leaf mount) would route into the
-    /// symlink mount and fail. `realpath` follows those cross-mount symlinks, so
-    /// resolve it first, then route the resolved path. Falls back to the raw path
-    /// when realpath can't resolve it (e.g. a genuinely missing file) so callers
-    /// still receive the mount's own ENOENT.
-    /// True only for the tar-vfs single-symlink-root leaf mount (`<pkg>/current ->
-    /// <version>` and the `bin/<cmd>` links), whose root inode IS a symlink. Only
-    /// these mounts need cross-mount realpath resolution for content ops and the
-    /// ENOENT->component-walk fallback; every other mount serves its own paths and
-    /// MUST keep its native error semantics (e.g. a js_bridge mount's ENOENT/EIO),
-    /// so gating on the concrete leaf type leaves normal mounts untouched.
-    fn mount_is_symlink_leaf(&self, index: usize) -> bool {
-        // Behavioral check (robust through the ReadOnly/MountedVirtual wrappers the
-        // projection applies): a leaf whose root inode is itself a symbolic link.
-        // Only the tar-vfs `<pkg>/current -> <version>` and `bin/<cmd>` single-symlink
-        // mounts satisfy this; every normal mount's root is a directory.
-        self.mounts[index]
-            .filesystem
-            .lstat("/")
-            .map(|stat| stat.is_symbolic_link)
-            .unwrap_or(false)
-    }
-
-    fn resolve_content_index(&self, path: &str) -> VfsResult<(usize, String)> {
-        let raw = self.resolve_index(&normalize_path(path))?;
-        if !self.mount_is_symlink_leaf(raw.0) {
-            return Ok(raw);
-        }
-        // The leaf's root is a symlink, so a descendant path must be followed across
-        // the mount boundary to the real version tree before the content op runs.
-        match self.realpath(path) {
-            Ok(resolved) => self.resolve_index(&resolved),
-            Err(_) => Ok(raw),
-        }
-    }
-
-    fn child_mount_basenames(&self, path: &str) -> Vec<String> {
-        let normalized = normalize_path(path);
-        let mut basenames = BTreeSet::new();
-        for mount in &self.mounts {
-            if mount.path == "/" || mount.path == normalized {
-                continue;
-            }
-
-            if parent_path(&mount.path) == normalized {
-                basenames.insert(basename(&mount.path));
-            }
-        }
-        basenames.into_iter().collect()
-    }
-
-    fn realpath_in_mount(&self, index: usize, relative_path: &str) -> VfsResult<String> {
-        let mount = &self.mounts[index];
-        let resolved = mount.filesystem.realpath(relative_path)?;
-        if mount.path == "/" {
-            return Ok(normalize_path(&resolved));
-        }
-        if resolved == "/" {
-            return Ok(mount.path.clone());
-        }
-        Ok(normalize_path(&format!(
-            "{}/{}",
-            mount.path,
-            resolved.trim_start_matches('/')
-        )))
-    }
-}
-
-fn measure_mounted_filesystem_usage(
-    filesystem: &mut dyn MountedFileSystem,
-    path: &str,
-    visited: &mut BTreeSet<u64>,
-) -> VfsResult<FileSystemUsage> {
-    let stat = filesystem.lstat(path)?;
-    let mut usage = FileSystemUsage::default();
-
-    if visited.insert(stat.ino) {
-        usage.inode_count += 1;
-        if !stat.is_directory {
-            usage.total_bytes = usage.total_bytes.saturating_add(stat.size);
-        }
-    }
-
-    if !stat.is_directory || stat.is_symbolic_link {
-        return Ok(usage);
-    }
-
-    for entry in filesystem.read_dir_with_types(path)? {
-        if matches!(entry.name.as_str(), "." | "..") {
-            continue;
-        }
-
-        let child_path = if path == "/" {
-            format!("/{}", entry.name)
-        } else {
-            format!("{path}/{}", entry.name)
-        };
-        let child_usage = measure_mounted_filesystem_usage(filesystem, &child_path, visited)?;
-        usage.total_bytes = usage.total_bytes.saturating_add(child_usage.total_bytes);
-        usage.inode_count = usage.inode_count.saturating_add(child_usage.inode_count);
-    }
-
-    Ok(usage)
-}
-
-impl Drop for MountTable {
-    fn drop(&mut self) {
-        for mount in self.mounts.iter_mut().rev() {
-            let _ = mount.filesystem.shutdown();
-        }
-    }
-}
-
-impl VirtualFileSystem for MountTable {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        let (index, relative_path) = self.resolve_content_index(path)?;
-        self.mounts[index].filesystem.read_file(&relative_path)
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        let normalized = normalize_path(path);
-        let (index, relative_path) = self.resolve_index(&normalized)?;
-        let mut entries = self.mounts[index].filesystem.read_dir(&relative_path)?;
-        let child_mounts = self.child_mount_basenames(&normalized);
-        if child_mounts.is_empty() {
-            return Ok(entries);
-        }
-
-        let mut merged = BTreeSet::new();
-        merged.extend(entries.drain(..));
-        merged.extend(child_mounts);
-        Ok(merged.into_iter().collect())
-    }
-
-    fn read_dir_limited(&mut self, path: &str, max_entries: usize) -> VfsResult<Vec<String>> {
-        let normalized = normalize_path(path);
-        let (index, relative_path) = self.resolve_index(&normalized)?;
-        let mut entries = self.mounts[index]
-            .filesystem
-            .read_dir_limited(&relative_path, max_entries)?;
-        let child_mounts = self.child_mount_basenames(&normalized);
-        if child_mounts.is_empty() {
-            return Ok(entries);
-        }
-
-        let mut merged = BTreeSet::new();
-        merged.extend(entries.drain(..));
-        merged.extend(child_mounts);
-        if merged.len() > max_entries {
-            return Err(VfsError::new(
-                "ENOMEM",
-                format!(
-                    "directory listing for '{path}' exceeds configured limit of {max_entries} entries"
-                ),
-            ));
-        }
-        Ok(merged.into_iter().collect())
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        let normalized = normalize_path(path);
-        let (index, relative_path) = self.resolve_index(&normalized)?;
-        let mut entries = self.mounts[index]
-            .filesystem
-            .read_dir_with_types(&relative_path)?;
-        let child_mounts = self.child_mount_basenames(&normalized);
-        if child_mounts.is_empty() {
-            return Ok(entries);
-        }
-
-        let existing = entries
-            .iter()
-            .map(|entry| entry.name.clone())
-            .collect::<BTreeSet<_>>();
-        for mount_name in child_mounts {
-            if existing.contains(&mount_name) {
-                continue;
-            }
-            entries.push(VirtualDirEntry {
-                name: mount_name,
-                is_directory: true,
-                is_symbolic_link: false,
-            });
-        }
-        Ok(entries)
-    }
-
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index]
-            .filesystem
-            .write_file(&relative_path, content.into())
-    }
-
-    fn write_file_with_mode(
-        &mut self,
-        path: &str,
-        content: impl Into<Vec<u8>>,
-        mode: Option<u32>,
-    ) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index]
-            .filesystem
-            .write_file_with_mode(&relative_path, content.into(), mode)
-    }
-
-    fn create_file_exclusive(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index]
-            .filesystem
-            .create_file_exclusive(&relative_path, content.into())
-    }
-
-    fn create_file_exclusive_with_mode(
-        &mut self,
-        path: &str,
-        content: impl Into<Vec<u8>>,
-        mode: Option<u32>,
-    ) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index]
-            .filesystem
-            .create_file_exclusive_with_mode(&relative_path, content.into(), mode)
-    }
-
-    fn append_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<u64> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index]
-            .filesystem
-            .append_file(&relative_path, content.into())
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index].filesystem.create_dir(&relative_path)
-    }
-
-    fn create_dir_with_mode(&mut self, path: &str, mode: Option<u32>) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index]
-            .filesystem
-            .create_dir_with_mode(&relative_path, mode)
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index]
-            .filesystem
-            .mkdir(&relative_path, recursive)
-    }
-
-    fn mkdir_with_mode(&mut self, path: &str, recursive: bool, mode: Option<u32>) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index]
-            .filesystem
-            .mkdir_with_mode(&relative_path, recursive, mode)
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        self.resolve_index(path)
-            .map(|(index, relative_path)| self.mounts[index].filesystem.exists(&relative_path))
-            .unwrap_or(false)
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        let (index, relative_path) = self.resolve_content_index(path)?;
-        self.mounts[index].filesystem.stat(&relative_path)
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index].filesystem.remove_file(&relative_path)
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index].filesystem.remove_dir(&relative_path)
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let (old_index, old_relative_path) = self.resolve_index(old_path)?;
-        let (new_index, new_relative_path) = self.resolve_index(new_path)?;
-        if old_index != new_index {
-            return Err(VfsError::new(
-                "EXDEV",
-                format!("rename across mounts: {old_path} -> {new_path}"),
-            ));
-        }
-
-        self.mounts[old_index]
-            .filesystem
-            .rename(&old_relative_path, &new_relative_path)
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        let normalized = normalize_path(path);
-        let (index, relative_path) = self.resolve_index(&normalized)?;
-        match self.realpath_in_mount(index, &relative_path) {
-            Ok(resolved) => return Ok(resolved),
-            // Always fall back to the component walk on ELOOP. Fall back on ENOENT
-            // ONLY for a single-symlink LEAF mount (e.g. `<pkg>/current -> <version>`):
-            // it cannot resolve a descendant path itself — its root IS the symlink, so
-            // a subpath resolves into it and ENOENTs; the walk then follows that
-            // symlink across mounts. For every OTHER mount an ENOENT is a genuine
-            // "missing file" that must propagate unchanged (walking it would rewrite a
-            // mount's native ENOENT into a spurious success/EIO — see the js_bridge
-            // errno-mapping mount). Non-leaf within-mount paths resolve via
-            // `realpath_in_mount` above and return early, so pnpm resolution is
-            // unaffected either way.
-            Err(error) if error.code() == "ELOOP" => {}
-            Err(error) if error.code() == "ENOENT" && self.mount_is_symlink_leaf(index) => {}
-            Err(error) => return Err(error),
-        }
-
-        let mut pending = path_components(&normalized);
-        let mut current = String::from("/");
-        let mut followed_symlinks = 0usize;
-
-        while let Some(component) = pending.pop_front() {
-            let candidate = join_path(&current, &component);
-            let stat = self.lstat(&candidate)?;
-
-            if stat.is_symbolic_link {
-                followed_symlinks += 1;
-                if followed_symlinks > MAX_REALPATH_SYMLINKS {
-                    return Err(VfsError::new(
-                        "ELOOP",
-                        format!("too many levels of symbolic links, '{path}'"),
-                    ));
-                }
-
-                let target = self.read_link(&candidate)?;
-                let target_path = if target.starts_with('/') {
-                    normalize_path(&target)
-                } else {
-                    normalize_path(&format!("{}/{}", parent_path(&candidate), target))
-                };
-                let mut resolved_target = path_components(&target_path);
-                resolved_target.extend(pending);
-                pending = resolved_target;
-                current = String::from("/");
-                continue;
-            }
-
-            if !pending.is_empty() && !stat.is_directory {
-                return Err(VfsError::new(
-                    "ENOTDIR",
-                    format!("not a directory, realpath '{candidate}'"),
-                ));
-            }
-
-            current = candidate;
-        }
-
-        Ok(current)
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        let normalized_link_path = normalize_path(link_path);
-        let link_parent = parent_path(&normalized_link_path);
-        let absolute_target = if target.starts_with('/') {
-            normalize_path(target)
-        } else {
-            normalize_path(&format!("{link_parent}/{target}"))
-        };
-
-        let (index, relative_path) = self.resolve_index(&normalized_link_path)?;
-        let (target_index, _) = self.resolve_index(&absolute_target)?;
-        if index != target_index {
-            return Err(VfsError::new(
-                "EXDEV",
-                format!("symlink across mounts: {link_path} -> {target}"),
-            ));
-        }
-
-        self.mounts[index]
-            .filesystem
-            .symlink(target, &relative_path)
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index].filesystem.read_link(&relative_path)
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index].filesystem.lstat(&relative_path)
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let (old_index, old_relative_path) = self.resolve_index(old_path)?;
-        let (new_index, new_relative_path) = self.resolve_index(new_path)?;
-        if old_index != new_index {
-            return Err(VfsError::new(
-                "EXDEV",
-                format!("link across mounts: {old_path} -> {new_path}"),
-            ));
-        }
-
-        self.mounts[old_index]
-            .filesystem
-            .link(&old_relative_path, &new_relative_path)
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index].filesystem.chmod(&relative_path, mode)
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index]
-            .filesystem
-            .chown(&relative_path, uid, gid)
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index]
-            .filesystem
-            .utimes(&relative_path, atime_ms, mtime_ms)
-    }
-
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-        follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index]
-            .filesystem
-            .utimes_spec(&relative_path, atime, mtime, follow_symlinks)
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        let (index, relative_path) = self.resolve_index(path)?;
-        self.mounts[index]
-            .filesystem
-            .truncate(&relative_path, length)
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        let (index, relative_path) = self.resolve_content_index(path)?;
-        self.mounts[index]
-            .filesystem
-            .pread(&relative_path, offset, length)
-    }
-}
-
-fn normalize_path(path: &str) -> String {
-    let mut segments = Vec::new();
-    for component in Path::new(path).components() {
-        match component {
-            Component::RootDir => segments.clear(),
-            Component::ParentDir => {
-                segments.pop();
-            }
-            Component::CurDir => {}
-            Component::Normal(value) => segments.push(value.to_string_lossy().into_owned()),
-            Component::Prefix(prefix) => {
-                segments.push(prefix.as_os_str().to_string_lossy().into_owned());
-            }
-        }
-    }
-
-    if segments.is_empty() {
-        String::from("/")
-    } else {
-        format!("/{}", segments.join("/"))
-    }
-}
-
-fn path_components(path: &str) -> VecDeque<String> {
-    normalize_path(path)
-        .split('/')
-        .filter(|part| !part.is_empty())
-        .map(String::from)
-        .collect()
-}
-
-fn join_path(parent: &str, child: &str) -> String {
-    if parent == "/" {
-        format!("/{child}")
-    } else {
-        format!("{parent}/{child}")
-    }
-}
-
-fn parent_path(path: &str) -> String {
-    let normalized = normalize_path(path);
-    let parent = Path::new(&normalized)
-        .parent()
-        .unwrap_or_else(|| Path::new("/"));
-    let value = parent.to_string_lossy();
-    if value.is_empty() {
-        String::from("/")
-    } else {
-        value.into_owned()
-    }
-}
-
-fn basename(path: &str) -> String {
-    let normalized = normalize_path(path);
-    Path::new(&normalized)
-        .file_name()
-        .map(|name| name.to_string_lossy().into_owned())
-        .unwrap_or_else(|| String::from("/"))
-}
diff --git a/crates/vfs/src/posix/overlay_fs.rs b/crates/vfs/src/posix/overlay_fs.rs
deleted file mode 100644
index 25aa86b9e..000000000
--- a/crates/vfs/src/posix/overlay_fs.rs
+++ /dev/null
@@ -1,2005 +0,0 @@
-use super::vfs::{
-    normalize_path, MemoryFileSystem, VfsError, VfsResult, VirtualDirEntry, VirtualFileSystem,
-    VirtualStat, VirtualUtimeSpec,
-};
-use base64::Engine;
-use std::collections::BTreeSet;
-
-const MAX_SNAPSHOT_DEPTH: usize = 1024;
-const OVERLAY_METADATA_ROOT: &str = "/.secure-exec-overlay";
-const OVERLAY_WHITEOUT_DIR: &str = "/.secure-exec-overlay/whiteouts";
-const OVERLAY_OPAQUE_DIR: &str = "/.secure-exec-overlay/opaque";
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum OverlayMode {
-    Ephemeral,
-    ReadOnly,
-}
-
-#[derive(Debug)]
-pub struct OverlayFileSystem {
-    lowers: Vec<MemoryFileSystem>,
-    upper: Option<MemoryFileSystem>,
-    writes_locked: bool,
-}
-
-#[derive(Debug, Clone, Copy)]
-enum OverlayMarkerKind {
-    Whiteout,
-    Opaque,
-}
-
-#[derive(Debug)]
-enum OverlaySnapshotKind {
-    Directory,
-    File(Vec<u8>),
-    Symlink(String),
-}
-
-#[derive(Debug)]
-struct OverlaySnapshotEntry {
-    path: String,
-    stat: VirtualStat,
-    kind: OverlaySnapshotKind,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
-struct OverlayCopyUpUsage {
-    total_bytes: u64,
-    inode_count: usize,
-}
-
-impl OverlayFileSystem {
-    pub fn new(lowers: Vec<MemoryFileSystem>, mode: OverlayMode) -> Self {
-        let mut effective_lowers = lowers;
-        if effective_lowers.is_empty() {
-            effective_lowers.push(MemoryFileSystem::new());
-        }
-
-        let mut upper = match mode {
-            OverlayMode::Ephemeral => Some(MemoryFileSystem::new()),
-            OverlayMode::ReadOnly => None,
-        };
-        if let Some(upper_filesystem) = upper.as_mut() {
-            sync_upper_root_metadata(upper_filesystem, &effective_lowers);
-        }
-
-        Self {
-            lowers: effective_lowers,
-            upper,
-            writes_locked: matches!(mode, OverlayMode::ReadOnly),
-        }
-    }
-
-    pub fn with_upper(lowers: Vec<MemoryFileSystem>, upper: MemoryFileSystem) -> Self {
-        let mut effective_lowers = lowers;
-        if effective_lowers.is_empty() {
-            effective_lowers.push(MemoryFileSystem::new());
-        }
-
-        Self {
-            lowers: effective_lowers,
-            upper: Some(upper),
-            writes_locked: false,
-        }
-    }
-
-    pub fn lock_writes(&mut self) {
-        self.writes_locked = true;
-    }
-
-    fn normalized(path: &str) -> String {
-        normalize_path(path)
-    }
-
-    fn parent_path(path: &str) -> String {
-        let normalized = Self::normalized(path);
-        if normalized == "/" {
-            return String::from("/");
-        }
-
-        match normalized.rsplit_once('/') {
-            Some(("", _)) | None => String::from("/"),
-            Some((parent, _)) => String::from(parent),
-        }
-    }
-
-    fn basename(path: &str) -> String {
-        let normalized = Self::normalized(path);
-        if normalized == "/" {
-            return String::from("/");
-        }
-        normalized
-            .rsplit('/')
-            .find(|component| !component.is_empty())
-            .unwrap_or("")
-            .to_owned()
-    }
-
-    fn validate_destination_parent(&mut self, path: &str) -> VfsResult<()> {
-        let parent = Self::parent_path(path);
-        let resolved_parent = self.resolve_merged_path(&parent, true, 0)?;
-        let stat = self.merged_lstat(&resolved_parent)?;
-        if !stat.is_directory {
-            return Err(Self::not_directory(&parent));
-        }
-        Ok(())
-    }
-
-    fn resolved_destination_path(&self, path: &str) -> VfsResult<String> {
-        let parent = Self::parent_path(path);
-        let resolved_parent = self.resolve_merged_path(&parent, true, 0)?;
-        Ok(Self::join_path(&resolved_parent, &Self::basename(path)))
-    }
-
-    fn resolve_merged_path(
-        &self,
-        path: &str,
-        follow_final_symlink: bool,
-        depth: usize,
-    ) -> VfsResult<String> {
-        if depth > MAX_SNAPSHOT_DEPTH {
-            return Err(VfsError::new(
-                "ELOOP",
-                format!("too many symbolic links while resolving '{path}'"),
-            ));
-        }
-
-        let normalized = Self::normalized(path);
-        if normalized == "/" {
-            return Ok(normalized);
-        }
-
-        let components: Vec<&str> = normalized
-            .split('/')
-            .filter(|component| !component.is_empty())
-            .collect();
-        let mut current = String::from("/");
-
-        for (index, component) in components.iter().enumerate() {
-            let candidate = Self::join_path(&current, component);
-            let is_final = index + 1 == components.len();
-            let should_follow = !is_final || follow_final_symlink;
-
-            if should_follow {
-                if let Ok(stat) = self.merged_lstat(&candidate) {
-                    if stat.is_symbolic_link {
-                        let target = self.read_link_inner(&candidate)?;
-                        let target_path = if target.starts_with('/') {
-                            Self::normalized(&target)
-                        } else {
-                            Self::normalized(&Self::join_path(
-                                &Self::parent_path(&candidate),
-                                &target,
-                            ))
-                        };
-                        let remainder = components[index + 1..].join("/");
-                        let next_path = if remainder.is_empty() {
-                            target_path
-                        } else {
-                            Self::normalized(&Self::join_path(&target_path, &remainder))
-                        };
-                        return self.resolve_merged_path(
-                            &next_path,
-                            follow_final_symlink,
-                            depth + 1,
-                        );
-                    }
-
-                    if !is_final && !stat.is_directory {
-                        return Err(Self::not_directory(&candidate));
-                    }
-                }
-            } else if let Ok(stat) = self.merged_lstat(&candidate) {
-                if !is_final && !stat.is_directory {
-                    return Err(Self::not_directory(&candidate));
-                }
-            }
-
-            current = candidate;
-        }
-
-        Ok(current)
-    }
-
-    fn destination_parent_copy_up_paths(&self, path: &str) -> VfsResult<Vec<String>> {
-        let parent = Self::parent_path(path);
-        let mut paths = Vec::new();
-        let mut seen = BTreeSet::new();
-        self.collect_destination_parent_copy_up_paths(&parent, &mut paths, &mut seen, 0)?;
-        Ok(paths)
-    }
-
-    fn collect_destination_parent_copy_up_paths(
-        &self,
-        parent: &str,
-        paths: &mut Vec<String>,
-        seen: &mut BTreeSet<String>,
-        depth: usize,
-    ) -> VfsResult<()> {
-        if depth > MAX_SNAPSHOT_DEPTH {
-            return Err(VfsError::new(
-                "ELOOP",
-                format!("too many symbolic links while resolving '{parent}'"),
-            ));
-        }
-
-        let normalized = Self::normalized(parent);
-        if normalized == "/" {
-            return Ok(());
-        }
-
-        let components: Vec<&str> = normalized
-            .split('/')
-            .filter(|component| !component.is_empty())
-            .collect();
-        let mut current = String::from("/");
-        for (index, component) in components.iter().enumerate() {
-            current = Self::join_path(&current, component);
-            let stat = self.merged_lstat(&current)?;
-
-            if stat.is_symbolic_link {
-                if !self.has_entry_in_upper(&current) && seen.insert(current.clone()) {
-                    paths.push(current.clone());
-                }
-
-                let target = self.read_link_inner(&current)?;
-                let target_path = if target.starts_with('/') {
-                    Self::normalized(&target)
-                } else {
-                    Self::normalized(&Self::join_path(&Self::parent_path(&current), &target))
-                };
-                let remainder = components[index + 1..].join("/");
-                let next_parent = if remainder.is_empty() {
-                    target_path
-                } else {
-                    Self::normalized(&Self::join_path(&target_path, &remainder))
-                };
-                return self.collect_destination_parent_copy_up_paths(
-                    &next_parent,
-                    paths,
-                    seen,
-                    depth + 1,
-                );
-            }
-
-            if self.find_lower_by_entry(&current).is_some()
-                && !self.has_entry_in_upper(&current)
-                && seen.insert(current.clone())
-            {
-                paths.push(current.clone());
-            }
-        }
-
-        Ok(())
-    }
-
-    fn encode_marker_path(path: &str) -> String {
-        base64::engine::general_purpose::URL_SAFE_NO_PAD.encode(path)
-    }
-
-    fn marker_directory(kind: OverlayMarkerKind) -> &'static str {
-        match kind {
-            OverlayMarkerKind::Whiteout => OVERLAY_WHITEOUT_DIR,
-            OverlayMarkerKind::Opaque => OVERLAY_OPAQUE_DIR,
-        }
-    }
-
-    fn marker_path(kind: OverlayMarkerKind, path: &str) -> String {
-        format!(
-            "{}/{}",
-            Self::marker_directory(kind),
-            Self::encode_marker_path(&Self::normalized(path))
-        )
-    }
-
-    fn is_internal_metadata_path(path: &str) -> bool {
-        let normalized = Self::normalized(path);
-        normalized == OVERLAY_METADATA_ROOT
-            || normalized.starts_with(&(String::from(OVERLAY_METADATA_ROOT) + "/"))
-    }
-
-    /// Returns true if `path`, or the location it resolves to through symlinks,
-    /// lands in the reserved overlay metadata namespace.
-    ///
-    /// The lexical [`is_internal_metadata_path`] check alone is bypassable: the
-    /// underlying `MemoryFileSystem` follows symlinks, so a guest-created symlink
-    /// whose resolved target enters `/.secure-exec-overlay` (directly, or via a
-    /// symlink to an ancestor such as `/`) would slip past a purely lexical guard
-    /// and let the guest read or tamper with whiteout/opaque markers (e.g.
-    /// resurrecting a deleted lower-layer file). Resolving before the check
-    /// closes that hole while leaving ordinary symlinks unaffected.
-    fn touches_internal_metadata(&self, path: &str) -> bool {
-        if Self::is_internal_metadata_path(path) {
-            return true;
-        }
-        if let Ok(resolved) = self.resolve_merged_path(path, true, 0) {
-            if Self::is_internal_metadata_path(&resolved) {
-                return true;
-            }
-        }
-        if let Ok(resolved) = self.resolved_destination_path(path) {
-            if Self::is_internal_metadata_path(&resolved) {
-                return true;
-            }
-        }
-        false
-    }
-
-    fn hidden_root_entry_name() -> &'static str {
-        ".secure-exec-overlay"
-    }
-
-    fn should_hide_directory_entry(path: &str, entry: &str) -> bool {
-        let normalized = Self::normalized(path);
-        normalized == "/" && entry == Self::hidden_root_entry_name()
-    }
-
-    fn should_ignore_raw_directory_entry(
-        upper: Option<&MemoryFileSystem>,
-        path: &str,
-        entry: &str,
-    ) -> bool {
-        if entry == "." || entry == ".." || Self::should_hide_directory_entry(path, entry) {
-            return true;
-        }
-
-        let entry_path = Self::join_path(path, entry);
-        Self::marker_exists_in_upper(upper, OverlayMarkerKind::Whiteout, &entry_path)
-    }
-
-    fn check_copy_up_usage_limits(
-        usage: &OverlayCopyUpUsage,
-        max_bytes: Option<u64>,
-        max_inodes: Option<usize>,
-    ) -> VfsResult<()> {
-        if let Some(limit) = max_bytes {
-            if usage.total_bytes > limit {
-                return Err(VfsError::new(
-                    "ENOSPC",
-                    format!(
-                        "overlay rename copy-up bytes {} exceed configured limit {}",
-                        usage.total_bytes, limit
-                    ),
-                ));
-            }
-        }
-
-        if let Some(limit) = max_inodes {
-            if usage.inode_count > limit {
-                return Err(VfsError::new(
-                    "ENOSPC",
-                    format!(
-                        "overlay rename copy-up inodes {} exceed configured limit {}",
-                        usage.inode_count, limit
-                    ),
-                ));
-            }
-        }
-
-        Ok(())
-    }
-
-    fn add_copy_up_usage(
-        usage: &mut OverlayCopyUpUsage,
-        bytes: u64,
-        inodes: usize,
-        max_bytes: Option<u64>,
-        max_inodes: Option<usize>,
-    ) -> VfsResult<()> {
-        usage.total_bytes = usage.total_bytes.saturating_add(bytes);
-        usage.inode_count = usage.inode_count.saturating_add(inodes);
-        Self::check_copy_up_usage_limits(usage, max_bytes, max_inodes)
-    }
-
-    fn remaining_inode_budget(
-        usage: &OverlayCopyUpUsage,
-        max_inodes: Option<usize>,
-    ) -> Option<usize> {
-        max_inodes.map(|limit| limit.saturating_sub(usage.inode_count))
-    }
-
-    fn copy_up_directory_entries_limited(
-        &mut self,
-        path: &str,
-        max_entries: Option<usize>,
-    ) -> VfsResult<Vec<String>> {
-        let Some(max_entries) = max_entries else {
-            return self.read_dir(path);
-        };
-
-        match self.read_dir_limited(path, max_entries) {
-            Ok(entries) => Ok(entries),
-            Err(error) if error.code() == "ENOMEM" => Err(VfsError::new(
-                "ENOSPC",
-                format!("overlay rename copy-up directory '{path}' exceeds configured inode limit"),
-            )),
-            Err(error) => Err(error),
-        }
-    }
-
-    fn directory_has_visible_entries_limited(&mut self, path: &str) -> VfsResult<bool> {
-        match self.read_dir_limited(path, 1) {
-            Ok(entries) => Ok(!entries.is_empty()),
-            Err(error) if error.code() == "ENOMEM" => Ok(true),
-            Err(error) => Err(error),
-        }
-    }
-
-    fn memory_subtree_usage_limited(
-        filesystem: &mut MemoryFileSystem,
-        path: &str,
-        max_bytes: Option<u64>,
-        max_inodes: Option<usize>,
-    ) -> VfsResult<OverlayCopyUpUsage> {
-        let mut usage = OverlayCopyUpUsage::default();
-        let mut visited = BTreeSet::new();
-        let mut pending = vec![Self::normalized(path)];
-        while let Some(current_path) = pending.pop() {
-            let stat = filesystem.lstat(&current_path)?;
-            if visited.insert(stat.ino) {
-                let bytes = if stat.is_directory && !stat.is_symbolic_link {
-                    0
-                } else {
-                    stat.size
-                };
-                Self::add_copy_up_usage(&mut usage, bytes, 1, max_bytes, max_inodes)?;
-            }
-
-            if stat.is_directory && !stat.is_symbolic_link {
-                let remaining = Self::remaining_inode_budget(&usage, max_inodes);
-                let children = if let Some(max_entries) = remaining {
-                    filesystem.read_dir_limited(&current_path, max_entries)?
-                } else {
-                    filesystem.read_dir(&current_path)?
-                };
-                for entry in children.into_iter().rev() {
-                    if matches!(entry.as_str(), "." | "..") {
-                        continue;
-                    }
-                    if Self::should_hide_directory_entry(&current_path, &entry) {
-                        continue;
-                    }
-                    pending.push(Self::join_path(&current_path, &entry));
-                }
-            }
-        }
-
-        Ok(usage)
-    }
-
-    fn memory_subtree_released_usage(
-        filesystem: &mut MemoryFileSystem,
-        path: &str,
-    ) -> VfsResult<OverlayCopyUpUsage> {
-        let mut usage = OverlayCopyUpUsage::default();
-        let mut visited = BTreeSet::new();
-        let mut pending = vec![Self::normalized(path)];
-        while let Some(current_path) = pending.pop() {
-            let stat = filesystem.lstat(&current_path)?;
-            if visited.insert(stat.ino) {
-                let subtree_links = filesystem.link_count_in_subtree(stat.ino, path) as u64;
-                if stat.is_directory || stat.nlink <= subtree_links {
-                    let bytes = if stat.is_directory && !stat.is_symbolic_link {
-                        0
-                    } else {
-                        stat.size
-                    };
-                    Self::add_copy_up_usage(&mut usage, bytes, 1, None, None)?;
-                }
-            }
-
-            if stat.is_directory && !stat.is_symbolic_link {
-                for entry in filesystem.read_dir(&current_path)?.into_iter().rev() {
-                    if matches!(entry.as_str(), "." | "..") {
-                        continue;
-                    }
-                    if Self::should_hide_directory_entry(&current_path, &entry) {
-                        continue;
-                    }
-                    pending.push(Self::join_path(&current_path, &entry));
-                }
-            }
-        }
-
-        Ok(usage)
-    }
-
-    fn upper_usage_limited(
-        &mut self,
-        max_bytes: Option<u64>,
-        max_inodes: Option<usize>,
-    ) -> VfsResult<OverlayCopyUpUsage> {
-        let Some(upper) = self.upper.as_mut() else {
-            return Ok(OverlayCopyUpUsage::default());
-        };
-
-        Self::memory_subtree_usage_limited(upper, "/", max_bytes, max_inodes)
-    }
-
-    fn upper_subtree_released_usage(&mut self, path: &str) -> VfsResult<OverlayCopyUpUsage> {
-        let Some(upper) = self.upper.as_mut() else {
-            return Ok(OverlayCopyUpUsage::default());
-        };
-
-        if !upper.exists(path) {
-            return Ok(OverlayCopyUpUsage::default());
-        }
-
-        Self::memory_subtree_released_usage(upper, path)
-    }
-
-    fn collect_copy_up_usage_limited(
-        &mut self,
-        path: &str,
-        usage: &mut OverlayCopyUpUsage,
-        max_bytes: Option<u64>,
-        max_inodes: Option<usize>,
-    ) -> VfsResult<()> {
-        let mut pending = vec![(Self::normalized(path), 0usize)];
-        while let Some((current_path, depth)) = pending.pop() {
-            if depth > MAX_SNAPSHOT_DEPTH {
-                return Err(VfsError::new(
-                    "EINVAL",
-                    format!("overlay snapshot depth limit exceeded at '{current_path}'"),
-                ));
-            }
-
-            let stat = self.merged_lstat(&current_path)?;
-            if !self.has_entry_in_upper(&current_path) {
-                let bytes = if stat.is_symbolic_link {
-                    self.read_link_inner(&current_path)?.len() as u64
-                } else if stat.is_directory {
-                    0
-                } else {
-                    stat.size
-                };
-                Self::add_copy_up_usage(usage, bytes, 1, max_bytes, max_inodes)?;
-            }
-
-            if stat.is_directory && !stat.is_symbolic_link {
-                let children = self.copy_up_directory_entries_limited(&current_path, max_inodes)?;
-                for entry in children.into_iter().rev() {
-                    pending.push((Self::join_path(&current_path, &entry), depth + 1));
-                }
-            }
-        }
-
-        Ok(())
-    }
-
-    fn collect_single_copy_up_usage_limited(
-        &mut self,
-        path: &str,
-        usage: &mut OverlayCopyUpUsage,
-        max_bytes: Option<u64>,
-        max_inodes: Option<usize>,
-    ) -> VfsResult<()> {
-        if self.has_entry_in_upper(path) {
-            return Ok(());
-        }
-
-        let stat = self.merged_lstat(path)?;
-        let bytes = if stat.is_symbolic_link {
-            self.read_link_inner(path)?.len() as u64
-        } else if stat.is_directory {
-            0
-        } else {
-            stat.size
-        };
-        Self::add_copy_up_usage(usage, bytes, 1, max_bytes, max_inodes)
-    }
-
-    pub fn check_rename_copy_up_limits(
-        &mut self,
-        old_path: &str,
-        new_path: &str,
-        max_bytes: Option<u64>,
-        max_inodes: Option<usize>,
-    ) -> VfsResult<()> {
-        let old_normalized = Self::normalized(old_path);
-        let new_normalized = Self::normalized(new_path);
-        if Self::is_internal_metadata_path(&old_normalized)
-            || Self::is_internal_metadata_path(&new_normalized)
-        {
-            return Err(VfsError::permission_denied("rename", old_path));
-        }
-
-        if old_normalized == "/" {
-            return Err(VfsError::permission_denied("rename", old_path));
-        }
-
-        if old_normalized == new_normalized {
-            return Ok(());
-        }
-
-        let source_stat = self.merged_lstat(old_path)?;
-        if self.writes_locked {
-            self.writable_upper(&old_normalized)?;
-        }
-        self.validate_destination_parent(&new_normalized)?;
-        let resolved_new_normalized = self.resolved_destination_path(&new_normalized)?;
-
-        if old_normalized == resolved_new_normalized {
-            return Ok(());
-        }
-
-        if source_stat.is_directory
-            && resolved_new_normalized.starts_with(&(old_normalized.clone() + "/"))
-        {
-            return Err(VfsError::new(
-                "EINVAL",
-                format!(
-                    "cannot move '{}' into its own descendant '{}'",
-                    old_path, new_path
-                ),
-            ));
-        }
-
-        let destination_parent_copy_up_paths =
-            self.destination_parent_copy_up_paths(&new_normalized)?;
-
-        if let Ok(destination_stat) = self.merged_lstat(&resolved_new_normalized) {
-            if destination_stat.is_directory
-                && !destination_stat.is_symbolic_link
-                && self.directory_has_visible_entries_limited(&resolved_new_normalized)?
-            {
-                return Err(Self::not_empty(&resolved_new_normalized));
-            }
-        }
-
-        let mut usage = self.upper_usage_limited(None, None)?;
-        if self.has_entry_in_upper(&resolved_new_normalized) {
-            let destination_usage = self.upper_subtree_released_usage(&resolved_new_normalized)?;
-            usage.total_bytes = usage
-                .total_bytes
-                .saturating_sub(destination_usage.total_bytes);
-            usage.inode_count = usage
-                .inode_count
-                .saturating_sub(destination_usage.inode_count);
-        }
-        Self::check_copy_up_usage_limits(&usage, max_bytes, max_inodes)?;
-        for path in destination_parent_copy_up_paths {
-            self.collect_single_copy_up_usage_limited(&path, &mut usage, max_bytes, max_inodes)?;
-        }
-        self.collect_copy_up_usage_limited(&old_normalized, &mut usage, max_bytes, max_inodes)?;
-
-        Self::check_copy_up_usage_limits(&usage, max_bytes, max_inodes)
-    }
-
-    fn marker_exists(&self, kind: OverlayMarkerKind, path: &str) -> bool {
-        Self::marker_exists_in_upper(self.upper.as_ref(), kind, path)
-    }
-
-    fn marker_exists_in_upper(
-        upper: Option<&MemoryFileSystem>,
-        kind: OverlayMarkerKind,
-        path: &str,
-    ) -> bool {
-        upper.is_some_and(|filesystem| filesystem.exists(&Self::marker_path(kind, path)))
-    }
-
-    fn is_whited_out(&self, path: &str) -> bool {
-        self.marker_exists(OverlayMarkerKind::Whiteout, path)
-    }
-
-    fn ensure_metadata_directories_in_upper(&mut self, path: &str) -> VfsResult<()> {
-        let upper = self.writable_upper(path)?;
-        upper.mkdir(OVERLAY_METADATA_ROOT, true)?;
-        upper.mkdir(OVERLAY_WHITEOUT_DIR, true)?;
-        upper.mkdir(OVERLAY_OPAQUE_DIR, true)?;
-        Ok(())
-    }
-
-    fn set_marker(&mut self, kind: OverlayMarkerKind, path: &str, present: bool) -> VfsResult<()> {
-        let marker_path = Self::marker_path(kind, path);
-        if present {
-            self.ensure_metadata_directories_in_upper(path)?;
-            self.writable_upper(path)?
-                .write_file(&marker_path, Self::normalized(path).into_bytes())?;
-            return Ok(());
-        }
-
-        if self
-            .upper
-            .as_ref()
-            .is_some_and(|upper| upper.exists(&marker_path))
-        {
-            self.writable_upper(path)?.remove_file(&marker_path)?;
-        }
-        Ok(())
-    }
-
-    fn add_whiteout(&mut self, path: &str) -> VfsResult<()> {
-        self.set_marker(OverlayMarkerKind::Whiteout, path, true)
-    }
-
-    fn remove_whiteout(&mut self, path: &str) -> VfsResult<()> {
-        self.set_marker(OverlayMarkerKind::Whiteout, path, false)
-    }
-
-    fn mark_opaque_directory(&mut self, path: &str) -> VfsResult<()> {
-        self.set_marker(OverlayMarkerKind::Opaque, path, true)
-    }
-
-    fn clear_opaque_directory(&mut self, path: &str) -> VfsResult<()> {
-        self.set_marker(OverlayMarkerKind::Opaque, path, false)
-    }
-
-    fn clear_path_metadata(&mut self, path: &str) -> VfsResult<()> {
-        self.remove_whiteout(path)?;
-        self.clear_opaque_directory(path)
-    }
-
-    fn join_path(base: &str, name: &str) -> String {
-        if base == "/" {
-            format!("/{name}")
-        } else {
-            format!("{base}/{name}")
-        }
-    }
-
-    fn rebase_path(path: &str, old_root: &str, new_root: &str) -> String {
-        if path == old_root {
-            return String::from(new_root);
-        }
-
-        format!("{new_root}{}", &path[old_root.len()..])
-    }
-
-    fn read_only_error(path: &str) -> VfsError {
-        VfsError::new("EROFS", format!("read-only filesystem: {path}"))
-    }
-
-    fn entry_not_found(path: &str) -> VfsError {
-        VfsError::new("ENOENT", format!("no such file: {path}"))
-    }
-
-    fn directory_not_found(path: &str) -> VfsError {
-        VfsError::new("ENOENT", format!("no such directory: {path}"))
-    }
-
-    fn already_exists(path: &str) -> VfsError {
-        VfsError::new("EEXIST", format!("file exists: {path}"))
-    }
-
-    fn not_directory(path: &str) -> VfsError {
-        VfsError::new("ENOTDIR", format!("not a directory: {path}"))
-    }
-
-    fn writable_upper(&mut self, path: &str) -> VfsResult<&mut MemoryFileSystem> {
-        if self.writes_locked {
-            return Err(Self::read_only_error(path));
-        }
-        self.upper
-            .as_mut()
-            .ok_or_else(|| Self::read_only_error(path))
-    }
-
-    fn path_exists_in_filesystem(filesystem: &MemoryFileSystem, path: &str) -> bool {
-        filesystem.exists(path)
-    }
-
-    fn has_entry_in_filesystem(filesystem: &MemoryFileSystem, path: &str) -> bool {
-        filesystem.lstat(path).is_ok()
-    }
-
-    fn exists_in_upper(&self, path: &str) -> bool {
-        self.upper
-            .as_ref()
-            .is_some_and(|upper| Self::path_exists_in_filesystem(upper, path))
-    }
-
-    fn has_entry_in_upper(&self, path: &str) -> bool {
-        self.upper
-            .as_ref()
-            .is_some_and(|upper| Self::has_entry_in_filesystem(upper, path))
-    }
-
-    fn find_lower_by_exists(&self, path: &str) -> Option<usize> {
-        self.lowers
-            .iter()
-            .position(|lower| Self::path_exists_in_filesystem(lower, path))
-    }
-
-    fn find_lower_by_entry(&self, path: &str) -> Option<(usize, VirtualStat)> {
-        self.lowers
-            .iter()
-            .enumerate()
-            .find_map(|(index, lower)| lower.lstat(path).ok().map(|stat| (index, stat)))
-    }
-
-    fn merged_lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        if Self::is_internal_metadata_path(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.has_entry_in_upper(path) {
-            return self
-                .upper
-                .as_ref()
-                .expect("upper must exist when entry exists")
-                .lstat(path);
-        }
-        self.find_lower_by_entry(path)
-            .map(|(_, stat)| stat)
-            .ok_or_else(|| Self::entry_not_found(path))
-    }
-
-    /// `read_link` body without the resolving metadata guard, for use by the
-    /// internal symlink-resolution helpers (`resolve_merged_path` and friends).
-    /// The public `read_link` wraps this with `touches_internal_metadata`;
-    /// resolution must not call back into that wrapper or it would recurse on a
-    /// symlink that points at itself's resolution path.
-    fn read_link_inner(&self, path: &str) -> VfsResult<String> {
-        if Self::is_internal_metadata_path(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.has_entry_in_upper(path) {
-            return self
-                .upper
-                .as_ref()
-                .expect("upper must exist when path exists")
-                .read_link(path);
-        }
-        let Some((index, _)) = self.find_lower_by_entry(path) else {
-            return Err(Self::entry_not_found(path));
-        };
-        self.lowers[index].read_link(path)
-    }
-
-    fn ensure_ancestor_directories_in_upper(&mut self, path: &str) -> VfsResult<()> {
-        if Self::is_internal_metadata_path(path) {
-            return Err(VfsError::permission_denied("mkdir", path));
-        }
-        let normalized = Self::normalized(path);
-        let parts = normalized
-            .split('/')
-            .filter(|part| !part.is_empty())
-            .collect::<Vec<_>>();
-
-        let mut current = String::new();
-        for part in parts.iter().take(parts.len().saturating_sub(1)) {
-            current.push('/');
-            current.push_str(part);
-
-            if self.exists_in_upper(&current) {
-                continue;
-            }
-
-            if let Some(index) = self.find_lower_by_exists(&current) {
-                let stat = self.lowers[index].stat(&current)?;
-                if !stat.is_directory {
-                    return Err(Self::not_directory(&current));
-                }
-
-                let upper = self.writable_upper(&current)?;
-                upper.mkdir(&current, false)?;
-                upper.chmod(&current, stat.mode)?;
-                upper.chown(&current, stat.uid, stat.gid)?;
-                continue;
-            }
-
-            let upper = self.writable_upper(&current)?;
-            upper.mkdir(&current, false)?;
-        }
-
-        Ok(())
-    }
-
-    fn copy_up_path(&mut self, path: &str) -> VfsResult<()> {
-        if self.has_entry_in_upper(path) {
-            return Ok(());
-        }
-
-        self.ensure_ancestor_directories_in_upper(path)?;
-
-        let (lower_index, stat) = self
-            .find_lower_by_entry(path)
-            .ok_or_else(|| Self::entry_not_found(path))?;
-
-        if stat.is_symbolic_link {
-            let target = self.lowers[lower_index].read_link(path)?;
-            let upper = self.writable_upper(path)?;
-            upper.symlink(&target, path)?;
-            return Ok(());
-        }
-
-        if stat.is_directory {
-            let upper = self.writable_upper(path)?;
-            upper.mkdir(path, false)?;
-            upper.chmod(path, stat.mode)?;
-            upper.chown(path, stat.uid, stat.gid)?;
-            self.mark_opaque_directory(path)?;
-            return Ok(());
-        }
-
-        let data = self.lowers[lower_index].read_file(path)?;
-        let upper = self.writable_upper(path)?;
-        upper.write_file(path, data)?;
-        upper.chmod(path, stat.mode)?;
-        upper.chown(path, stat.uid, stat.gid)?;
-        Ok(())
-    }
-
-    fn materialize_destination_parent_in_upper(&mut self, path: &str) -> VfsResult<()> {
-        if self.has_entry_in_upper(path) {
-            return Ok(());
-        }
-
-        if self
-            .merged_lstat(path)
-            .is_ok_and(|stat| stat.is_symbolic_link)
-        {
-            return self.copy_up_path(path);
-        }
-
-        self.ensure_ancestor_directories_in_upper(path)?;
-        let stat = self.merged_lstat(path)?;
-        if !stat.is_directory || stat.is_symbolic_link {
-            return Err(Self::not_directory(path));
-        }
-
-        let upper = self.writable_upper(path)?;
-        upper.create_dir(path)?;
-        upper.chmod(path, stat.mode)?;
-        upper.chown(path, stat.uid, stat.gid)?;
-        Ok(())
-    }
-
-    fn path_exists_in_merged_view(&self, path: &str) -> bool {
-        if self.is_whited_out(path) {
-            return false;
-        }
-        if self.has_entry_in_upper(path) {
-            return true;
-        }
-        self.find_lower_by_entry(path).is_some()
-    }
-
-    fn not_empty(path: &str) -> VfsError {
-        VfsError::new("ENOTEMPTY", format!("directory not empty, rmdir '{path}'"))
-    }
-
-    fn collect_snapshot_entries(
-        &mut self,
-        path: &str,
-        entries: &mut Vec<OverlaySnapshotEntry>,
-    ) -> VfsResult<()> {
-        let mut pending = vec![(Self::normalized(path), 0usize)];
-        while let Some((current_path, depth)) = pending.pop() {
-            if depth > MAX_SNAPSHOT_DEPTH {
-                return Err(VfsError::new(
-                    "EINVAL",
-                    format!("overlay snapshot depth limit exceeded at '{current_path}'"),
-                ));
-            }
-
-            let stat = self.merged_lstat(&current_path)?;
-
-            if stat.is_symbolic_link {
-                entries.push(OverlaySnapshotEntry {
-                    path: current_path.clone(),
-                    stat,
-                    kind: OverlaySnapshotKind::Symlink(self.read_link_inner(&current_path)?),
-                });
-                continue;
-            }
-
-            if stat.is_directory {
-                entries.push(OverlaySnapshotEntry {
-                    path: current_path.clone(),
-                    stat,
-                    kind: OverlaySnapshotKind::Directory,
-                });
-
-                let children = self.read_dir_with_types_inner(&current_path)?;
-                for entry in children.into_iter().rev() {
-                    pending.push((Self::join_path(&current_path, &entry.name), depth + 1));
-                }
-                continue;
-            }
-
-            entries.push(OverlaySnapshotEntry {
-                path: current_path.clone(),
-                stat,
-                kind: OverlaySnapshotKind::File(self.read_file(&current_path)?),
-            });
-        }
-        Ok(())
-    }
-
-    fn remove_snapshot_entries(&mut self, entries: &[OverlaySnapshotEntry]) -> VfsResult<()> {
-        for entry in entries.iter().rev() {
-            if self.has_entry_in_upper(&entry.path) {
-                match entry.kind {
-                    OverlaySnapshotKind::Directory => {
-                        self.writable_upper(&entry.path)?.remove_dir(&entry.path)?;
-                    }
-                    OverlaySnapshotKind::File(_) | OverlaySnapshotKind::Symlink(_) => {
-                        self.writable_upper(&entry.path)?.remove_file(&entry.path)?;
-                    }
-                }
-            }
-
-            if self.find_lower_by_entry(&entry.path).is_some() {
-                self.clear_opaque_directory(&entry.path)?;
-                self.add_whiteout(&entry.path)?;
-            } else {
-                self.clear_path_metadata(&entry.path)?;
-            }
-        }
-
-        Ok(())
-    }
-
-    fn directory_has_raw_children(&mut self, path: &str) -> VfsResult<bool> {
-        let normalized = Self::normalized(path);
-        let mut directory_exists = false;
-
-        if let Some(upper) = self.upper.as_mut() {
-            if let Ok(entries) = upper.read_dir(&normalized) {
-                directory_exists = true;
-                if entries.into_iter().any(|entry| {
-                    !Self::should_ignore_raw_directory_entry(Some(&*upper), &normalized, &entry)
-                }) {
-                    return Ok(true);
-                }
-            }
-        }
-
-        let upper = self.upper.as_ref();
-        for lower in self.lowers.iter_mut().rev() {
-            if let Ok(entries) = lower.read_dir(&normalized) {
-                directory_exists = true;
-                if entries.into_iter().any(|entry| {
-                    !Self::should_ignore_raw_directory_entry(upper, &normalized, &entry)
-                }) {
-                    return Ok(true);
-                }
-            }
-        }
-
-        if !directory_exists {
-            return Err(Self::directory_not_found(path));
-        }
-
-        Ok(false)
-    }
-
-    fn read_dir_with_types_inner(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        if self.is_whited_out(path) {
-            return Err(Self::directory_not_found(path));
-        }
-
-        let normalized = Self::normalized(path);
-        let mut directory_exists = false;
-        let mut entries = Vec::<VirtualDirEntry>::new();
-        let mut seen = BTreeSet::<String>::new();
-        let upper = self.upper.as_ref();
-        let include_lowers = !Self::marker_exists_in_upper(upper, OverlayMarkerKind::Opaque, path);
-
-        if include_lowers {
-            for lower in self.lowers.iter_mut().rev() {
-                if let Ok(lower_entries) = lower.read_dir_with_types(path) {
-                    directory_exists = true;
-                    for entry in lower_entries {
-                        if entry.name == "."
-                            || entry.name == ".."
-                            || Self::should_hide_directory_entry(path, &entry.name)
-                        {
-                            continue;
-                        }
-                        let child_path = if normalized == "/" {
-                            format!("/{}", entry.name)
-                        } else {
-                            format!("{normalized}/{}", entry.name)
-                        };
-                        if Self::marker_exists_in_upper(
-                            upper,
-                            OverlayMarkerKind::Whiteout,
-                            &child_path,
-                        ) || seen.contains(&entry.name)
-                        {
-                            continue;
-                        }
-                        seen.insert(entry.name.clone());
-                        entries.push(entry);
-                    }
-                }
-            }
-        }
-
-        if let Some(upper) = self.upper.as_mut() {
-            if let Ok(upper_entries) = upper.read_dir_with_types(path) {
-                directory_exists = true;
-                for entry in upper_entries {
-                    if entry.name == "."
-                        || entry.name == ".."
-                        || Self::should_hide_directory_entry(path, &entry.name)
-                    {
-                        continue;
-                    }
-                    if let Some(index) = entries
-                        .iter()
-                        .position(|existing| existing.name == entry.name)
-                    {
-                        entries[index] = entry;
-                    } else {
-                        seen.insert(entry.name.clone());
-                        entries.push(entry);
-                    }
-                }
-            }
-        }
-
-        if !directory_exists {
-            return Err(Self::directory_not_found(path));
-        }
-
-        Ok(entries)
-    }
-
-    fn marker_paths_in_upper(&mut self, kind: OverlayMarkerKind) -> VfsResult<Vec<String>> {
-        let Some(upper) = self.upper.as_mut() else {
-            return Ok(Vec::new());
-        };
-
-        let marker_dir = Self::marker_directory(kind);
-        let entries = match upper.read_dir(marker_dir) {
-            Ok(entries) => entries,
-            Err(error) if error.code() == "ENOENT" => return Ok(Vec::new()),
-            Err(error) => return Err(error),
-        };
-
-        let mut marker_paths = Vec::new();
-        for entry in entries {
-            if entry == "." || entry == ".." {
-                continue;
-            }
-
-            let marker_file = Self::join_path(marker_dir, &entry);
-            let marker_path =
-                String::from_utf8(upper.read_file(&marker_file).map_err(|_| {
-                    VfsError::io(format!("invalid overlay marker '{marker_file}'"))
-                })?)
-                .map_err(|_| VfsError::io(format!("invalid overlay marker '{marker_file}'")))?;
-            marker_paths.push(Self::normalized(&marker_path));
-        }
-
-        Ok(marker_paths)
-    }
-
-    fn path_in_subtree(path: &str, root: &str) -> bool {
-        path == root || path.starts_with(&(String::from(root) + "/"))
-    }
-
-    fn clear_subtree_metadata(&mut self, path: &str) -> VfsResult<()> {
-        let normalized = Self::normalized(path);
-        for kind in [OverlayMarkerKind::Whiteout, OverlayMarkerKind::Opaque] {
-            for marker_path in self.marker_paths_in_upper(kind)? {
-                if Self::path_in_subtree(&marker_path, &normalized) {
-                    self.set_marker(kind, &marker_path, false)?;
-                }
-            }
-        }
-        Ok(())
-    }
-
-    fn copy_subtree_metadata(&mut self, old_root: &str, new_root: &str) -> VfsResult<()> {
-        let old_normalized = Self::normalized(old_root);
-        let new_normalized = Self::normalized(new_root);
-
-        for kind in [OverlayMarkerKind::Whiteout, OverlayMarkerKind::Opaque] {
-            for marker_path in self.marker_paths_in_upper(kind)? {
-                if Self::path_in_subtree(&marker_path, &old_normalized) {
-                    let destination =
-                        Self::rebase_path(&marker_path, &old_normalized, &new_normalized);
-                    self.set_marker(kind, &destination, true)?;
-                }
-            }
-        }
-
-        Ok(())
-    }
-
-    fn stage_snapshot_entries_in_upper(
-        &mut self,
-        entries: &[OverlaySnapshotEntry],
-    ) -> VfsResult<()> {
-        for entry in entries {
-            match &entry.kind {
-                OverlaySnapshotKind::Directory => {
-                    if !self.has_entry_in_upper(&entry.path) {
-                        self.ensure_ancestor_directories_in_upper(&entry.path)?;
-                        self.writable_upper(&entry.path)?.create_dir(&entry.path)?;
-                    }
-                    self.writable_upper(&entry.path)?
-                        .chmod(&entry.path, entry.stat.mode)?;
-                    self.writable_upper(&entry.path)?.chown(
-                        &entry.path,
-                        entry.stat.uid,
-                        entry.stat.gid,
-                    )?;
-                    self.mark_opaque_directory(&entry.path)?;
-                }
-                OverlaySnapshotKind::File(data) => {
-                    if self.has_entry_in_upper(&entry.path) {
-                        continue;
-                    }
-                    self.ensure_ancestor_directories_in_upper(&entry.path)?;
-                    self.writable_upper(&entry.path)?
-                        .write_file(&entry.path, data.clone())?;
-                    self.writable_upper(&entry.path)?
-                        .chmod(&entry.path, entry.stat.mode)?;
-                    self.writable_upper(&entry.path)?.chown(
-                        &entry.path,
-                        entry.stat.uid,
-                        entry.stat.gid,
-                    )?;
-                }
-                OverlaySnapshotKind::Symlink(target) => {
-                    if self.has_entry_in_upper(&entry.path) {
-                        continue;
-                    }
-                    self.ensure_ancestor_directories_in_upper(&entry.path)?;
-                    self.writable_upper(&entry.path)?
-                        .symlink(target, &entry.path)?;
-                }
-            }
-        }
-
-        Ok(())
-    }
-}
-
-fn sync_upper_root_metadata(upper: &mut MemoryFileSystem, lowers: &[MemoryFileSystem]) {
-    let Some(root_stat) = lowers.iter().find_map(|lower| lower.lstat("/").ok()) else {
-        return;
-    };
-
-    upper
-        .chmod("/", root_stat.mode)
-        .expect("overlay upper root should exist");
-    upper
-        .chown("/", root_stat.uid, root_stat.gid)
-        .expect("overlay upper root should exist");
-}
-
-impl VirtualFileSystem for OverlayFileSystem {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        if self.touches_internal_metadata(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.exists_in_upper(path) {
-            return self
-                .upper
-                .as_mut()
-                .expect("upper must exist when path exists")
-                .read_file(path);
-        }
-        let Some(index) = self.find_lower_by_exists(path) else {
-            return Err(Self::entry_not_found(path));
-        };
-        self.lowers[index].read_file(path)
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        if self.touches_internal_metadata(path) {
-            return Err(Self::directory_not_found(path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::directory_not_found(path));
-        }
-
-        let normalized = Self::normalized(path);
-        let mut directory_exists = false;
-        let mut entries = BTreeSet::new();
-        let upper = self.upper.as_ref();
-        let include_lowers = !Self::marker_exists_in_upper(upper, OverlayMarkerKind::Opaque, path);
-
-        if include_lowers {
-            for lower in self.lowers.iter_mut().rev() {
-                if let Ok(lower_entries) = lower.read_dir(path) {
-                    directory_exists = true;
-                    for entry in lower_entries {
-                        if entry == "."
-                            || entry == ".."
-                            || Self::should_hide_directory_entry(path, &entry)
-                        {
-                            continue;
-                        }
-                        let child_path = if normalized == "/" {
-                            format!("/{entry}")
-                        } else {
-                            format!("{normalized}/{entry}")
-                        };
-                        if !Self::marker_exists_in_upper(
-                            upper,
-                            OverlayMarkerKind::Whiteout,
-                            &child_path,
-                        ) {
-                            entries.insert(entry);
-                        }
-                    }
-                }
-            }
-        }
-
-        if let Some(upper) = self.upper.as_mut() {
-            if let Ok(upper_entries) = upper.read_dir(path) {
-                directory_exists = true;
-                for entry in upper_entries {
-                    if entry == "."
-                        || entry == ".."
-                        || Self::should_hide_directory_entry(path, &entry)
-                    {
-                        continue;
-                    }
-                    entries.insert(entry);
-                }
-            }
-        }
-
-        if !directory_exists {
-            return Err(Self::directory_not_found(path));
-        }
-
-        Ok(entries.into_iter().collect())
-    }
-
-    fn read_dir_limited(&mut self, path: &str, max_entries: usize) -> VfsResult<Vec<String>> {
-        if self.touches_internal_metadata(path) {
-            return Err(Self::directory_not_found(path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::directory_not_found(path));
-        }
-
-        let normalized = Self::normalized(path);
-        let mut directory_exists = false;
-        let mut entries = BTreeSet::new();
-        let upper = self.upper.as_ref();
-        let include_lowers = !Self::marker_exists_in_upper(upper, OverlayMarkerKind::Opaque, path);
-
-        if include_lowers {
-            for lower in self.lowers.iter_mut().rev() {
-                let lower_entries = match lower.read_dir_filtered_limited(
-                    path,
-                    max_entries.saturating_sub(entries.len()),
-                    |entry| {
-                        if entry == "."
-                            || entry == ".."
-                            || Self::should_hide_directory_entry(path, entry)
-                        {
-                            return false;
-                        }
-                        let child_path = if normalized == "/" {
-                            format!("/{entry}")
-                        } else {
-                            format!("{normalized}/{entry}")
-                        };
-                        !Self::marker_exists_in_upper(
-                            upper,
-                            OverlayMarkerKind::Whiteout,
-                            &child_path,
-                        ) && !entries.contains(entry)
-                    },
-                ) {
-                    Ok(entries) => entries,
-                    Err(error) if error.code() == "ENOENT" || error.code() == "ENOTDIR" => {
-                        continue;
-                    }
-                    Err(error) => return Err(error),
-                };
-                directory_exists = true;
-                for entry in lower_entries {
-                    entries.insert(entry);
-                    if entries.len() > max_entries {
-                        return Err(VfsError::new(
-                            "ENOMEM",
-                            format!(
-                                "directory listing for '{path}' exceeds configured limit of {max_entries} entries"
-                            ),
-                        ));
-                    }
-                }
-            }
-        }
-
-        if let Some(upper) = self.upper.as_mut() {
-            let upper_entries = match upper.read_dir_filtered_limited(
-                path,
-                max_entries.saturating_sub(entries.len()),
-                |entry| {
-                    entry != "."
-                        && entry != ".."
-                        && !Self::should_hide_directory_entry(path, entry)
-                        && !entries.contains(entry)
-                },
-            ) {
-                Ok(entries) => entries,
-                Err(error) if error.code() == "ENOENT" => Vec::new(),
-                Err(error) => return Err(error),
-            };
-            directory_exists = directory_exists || upper.exists(path);
-            for entry in upper_entries {
-                if entry == "." || entry == ".." || Self::should_hide_directory_entry(path, &entry)
-                {
-                    continue;
-                }
-                entries.insert(entry);
-                if entries.len() > max_entries {
-                    return Err(VfsError::new(
-                        "ENOMEM",
-                        format!(
-                            "directory listing for '{path}' exceeds configured limit of {max_entries} entries"
-                        ),
-                    ));
-                }
-            }
-        }
-
-        if !directory_exists {
-            return Err(Self::directory_not_found(path));
-        }
-
-        Ok(entries.into_iter().collect())
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        if self.touches_internal_metadata(path) {
-            return Err(Self::directory_not_found(path));
-        }
-        self.read_dir_with_types_inner(path)
-    }
-
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        if self.touches_internal_metadata(path) {
-            return Err(VfsError::permission_denied("open", path));
-        }
-        self.clear_path_metadata(path)?;
-        if self.find_lower_by_entry(path).is_some() {
-            self.copy_up_path(path)?;
-        } else {
-            self.ensure_ancestor_directories_in_upper(path)?;
-        }
-        self.writable_upper(path)?.write_file(path, content.into())
-    }
-
-    fn create_file_exclusive(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        if self.touches_internal_metadata(path) {
-            return Err(VfsError::permission_denied("open", path));
-        }
-        self.clear_path_metadata(path)?;
-        if self.path_exists_in_merged_view(path) {
-            return Err(Self::already_exists(path));
-        }
-        self.ensure_ancestor_directories_in_upper(path)?;
-        self.writable_upper(path)?
-            .create_file_exclusive(path, content.into())
-    }
-
-    fn append_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<u64> {
-        if self.touches_internal_metadata(path) {
-            return Err(VfsError::permission_denied("open", path));
-        }
-        self.clear_path_metadata(path)?;
-        if self.find_lower_by_entry(path).is_some() {
-            self.copy_up_path(path)?;
-        } else {
-            self.ensure_ancestor_directories_in_upper(path)?;
-        }
-        self.writable_upper(path)?.append_file(path, content.into())
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        if self.touches_internal_metadata(path) {
-            return Err(VfsError::permission_denied("mkdir", path));
-        }
-        self.clear_path_metadata(path)?;
-        if self.path_exists_in_merged_view(path) {
-            return Err(Self::already_exists(path));
-        }
-        self.ensure_ancestor_directories_in_upper(path)?;
-        self.writable_upper(path)?.create_dir(path)
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        if self.touches_internal_metadata(path) {
-            return Err(VfsError::permission_denied("mkdir", path));
-        }
-        self.clear_path_metadata(path)?;
-        if self.path_exists_in_merged_view(path) {
-            let stat = self.merged_lstat(path)?;
-            if recursive && stat.is_directory && !stat.is_symbolic_link {
-                return Ok(());
-            }
-            return Err(Self::already_exists(path));
-        }
-        self.ensure_ancestor_directories_in_upper(path)?;
-        self.writable_upper(path)?.mkdir(path, recursive)
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        if self.touches_internal_metadata(path) {
-            return false;
-        }
-        self.path_exists_in_merged_view(path)
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        if self.touches_internal_metadata(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.exists_in_upper(path) {
-            return self
-                .upper
-                .as_mut()
-                .expect("upper must exist when path exists")
-                .stat(path);
-        }
-        let Some(index) = self.find_lower_by_exists(path) else {
-            return Err(Self::entry_not_found(path));
-        };
-        self.lowers[index].stat(path)
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        if self.touches_internal_metadata(path) {
-            return Err(VfsError::permission_denied("unlink", path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        let lower_exists = self.find_lower_by_exists(path).is_some();
-        let upper_exists = self.exists_in_upper(path);
-        if !lower_exists && !upper_exists {
-            return Err(Self::entry_not_found(path));
-        }
-        if upper_exists {
-            self.writable_upper(path)?.remove_file(path)?;
-        } else {
-            self.writable_upper(path)?;
-        }
-        self.clear_opaque_directory(path)?;
-        self.add_whiteout(path)?;
-        Ok(())
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        let normalized = Self::normalized(path);
-        if self.touches_internal_metadata(&normalized) {
-            return Err(VfsError::permission_denied("rmdir", path));
-        }
-        if normalized == "/" {
-            return Err(VfsError::permission_denied("rmdir", path));
-        }
-
-        let stat = match self.merged_lstat(path) {
-            Ok(stat) => stat,
-            Err(error) if error.code() == "ENOENT" => return Err(Self::directory_not_found(path)),
-            Err(error) => return Err(error),
-        };
-
-        if !stat.is_directory || stat.is_symbolic_link {
-            return Err(Self::not_directory(path));
-        }
-
-        if self.directory_has_raw_children(path)? {
-            return Err(Self::not_empty(path));
-        }
-
-        let lower_exists = self.find_lower_by_entry(path).is_some();
-        let upper_exists = self.has_entry_in_upper(path);
-        if upper_exists {
-            self.writable_upper(path)?.remove_dir(&normalized)?;
-        } else {
-            self.writable_upper(path)?;
-        }
-        if lower_exists {
-            self.clear_opaque_directory(path)?;
-            self.add_whiteout(path)?;
-        } else {
-            self.clear_path_metadata(path)?;
-        }
-        Ok(())
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let old_normalized = Self::normalized(old_path);
-        let new_normalized = Self::normalized(new_path);
-        if self.touches_internal_metadata(&old_normalized)
-            || self.touches_internal_metadata(&new_normalized)
-        {
-            return Err(VfsError::permission_denied("rename", old_path));
-        }
-
-        if old_normalized == "/" {
-            return Err(VfsError::permission_denied("rename", old_path));
-        }
-
-        if old_normalized == new_normalized {
-            return Ok(());
-        }
-
-        let source_stat = self.merged_lstat(old_path)?;
-        self.validate_destination_parent(&new_normalized)?;
-        let resolved_new_normalized = self.resolved_destination_path(&new_normalized)?;
-
-        if old_normalized == resolved_new_normalized {
-            return Ok(());
-        }
-
-        if source_stat.is_directory
-            && resolved_new_normalized.starts_with(&(old_normalized.clone() + "/"))
-        {
-            return Err(VfsError::new(
-                "EINVAL",
-                format!(
-                    "cannot move '{}' into its own descendant '{}'",
-                    old_path, new_path
-                ),
-            ));
-        }
-
-        for path in self.destination_parent_copy_up_paths(&new_normalized)? {
-            self.materialize_destination_parent_in_upper(&path)?;
-        }
-
-        let mut snapshot_entries = Vec::new();
-        self.collect_snapshot_entries(&old_normalized, &mut snapshot_entries)?;
-
-        if let Ok(destination_stat) = self.merged_lstat(&resolved_new_normalized) {
-            if destination_stat.is_directory
-                && !destination_stat.is_symbolic_link
-                && self.directory_has_visible_entries_limited(&resolved_new_normalized)?
-            {
-                return Err(Self::not_empty(&resolved_new_normalized));
-            }
-
-            if self.has_entry_in_upper(&resolved_new_normalized) {
-                if destination_stat.is_directory && !destination_stat.is_symbolic_link {
-                    self.writable_upper(&resolved_new_normalized)?
-                        .remove_dir(&resolved_new_normalized)?;
-                } else {
-                    self.writable_upper(&resolved_new_normalized)?
-                        .remove_file(&resolved_new_normalized)?;
-                }
-            }
-            self.clear_subtree_metadata(&resolved_new_normalized)?;
-        }
-
-        self.stage_snapshot_entries_in_upper(&snapshot_entries)?;
-        self.copy_subtree_metadata(&old_normalized, &resolved_new_normalized)?;
-        self.writable_upper(&old_normalized)?
-            .rename(&old_normalized, &resolved_new_normalized)?;
-        self.remove_snapshot_entries(&snapshot_entries)
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        if self.touches_internal_metadata(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.exists_in_upper(path) {
-            return self
-                .upper
-                .as_ref()
-                .expect("upper must exist when path exists")
-                .realpath(path);
-        }
-        let Some(index) = self.find_lower_by_exists(path) else {
-            return Err(Self::entry_not_found(path));
-        };
-        self.lowers[index].realpath(path)
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        if self.touches_internal_metadata(link_path) {
-            return Err(VfsError::permission_denied("symlink", link_path));
-        }
-        self.clear_path_metadata(link_path)?;
-        self.ensure_ancestor_directories_in_upper(link_path)?;
-        self.writable_upper(link_path)?.symlink(target, link_path)
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        if self.touches_internal_metadata(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.has_entry_in_upper(path) {
-            return self
-                .upper
-                .as_ref()
-                .expect("upper must exist when path exists")
-                .read_link(path);
-        }
-        let Some((index, _)) = self.find_lower_by_entry(path) else {
-            return Err(Self::entry_not_found(path));
-        };
-        self.lowers[index].read_link(path)
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        if self.touches_internal_metadata(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.has_entry_in_upper(path) {
-            return self
-                .upper
-                .as_ref()
-                .expect("upper must exist when path exists")
-                .lstat(path);
-        }
-        self.find_lower_by_entry(path)
-            .map(|(_, stat)| stat)
-            .ok_or_else(|| Self::entry_not_found(path))
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        if self.touches_internal_metadata(old_path) || self.touches_internal_metadata(new_path) {
-            return Err(VfsError::permission_denied("link", new_path));
-        }
-        self.clear_path_metadata(new_path)?;
-        self.copy_up_path(old_path)?;
-        self.ensure_ancestor_directories_in_upper(new_path)?;
-        self.writable_upper(new_path)?.link(old_path, new_path)
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        if self.touches_internal_metadata(path) {
-            return Err(VfsError::permission_denied("chmod", path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if !self.exists_in_upper(path) {
-            self.copy_up_path(path)?;
-        }
-        self.writable_upper(path)?.chmod(path, mode)
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        if self.touches_internal_metadata(path) {
-            return Err(VfsError::permission_denied("chown", path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if !self.exists_in_upper(path) {
-            self.copy_up_path(path)?;
-        }
-        self.writable_upper(path)?.chown(path, uid, gid)
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        if self.touches_internal_metadata(path) {
-            return Err(VfsError::permission_denied("utime", path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if !self.exists_in_upper(path) {
-            self.copy_up_path(path)?;
-        }
-        self.writable_upper(path)?.utimes(path, atime_ms, mtime_ms)
-    }
-
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-        follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        if self.touches_internal_metadata(path) {
-            return Err(VfsError::permission_denied("utime", path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if !self.exists_in_upper(path) {
-            self.copy_up_path(path)?;
-        }
-        self.writable_upper(path)?
-            .utimes_spec(path, atime, mtime, follow_symlinks)
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        if self.touches_internal_metadata(path) {
-            return Err(VfsError::permission_denied("truncate", path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if !self.exists_in_upper(path) {
-            self.copy_up_path(path)?;
-        }
-        self.writable_upper(path)?.truncate(path, length)
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        if self.touches_internal_metadata(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.is_whited_out(path) {
-            return Err(Self::entry_not_found(path));
-        }
-        if self.exists_in_upper(path) {
-            return self
-                .upper
-                .as_mut()
-                .expect("upper must exist when path exists")
-                .pread(path, offset, length);
-        }
-        let Some(index) = self.find_lower_by_exists(path) else {
-            return Err(Self::entry_not_found(path));
-        };
-        self.lowers[index].pread(path, offset, length)
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::{OverlayFileSystem, OverlayMode};
-    use crate::posix::vfs::{MemoryFileSystem, VfsResult, VirtualFileSystem};
-
-    #[test]
-    fn symlink_into_metadata_namespace_cannot_read_or_resurrect_whiteouts() {
-        let mut lower = MemoryFileSystem::new();
-        lower.mkdir("/data", true).expect("create lower directory");
-        lower
-            .write_file("/data/secret.txt", b"secret".to_vec())
-            .expect("seed lower file");
-
-        let mut overlay = OverlayFileSystem::with_upper(vec![lower], MemoryFileSystem::new());
-
-        // Delete a lower-layer file: a whiteout marker is written under the
-        // reserved metadata root and the file disappears from the merged view.
-        overlay
-            .remove_file("/data/secret.txt")
-            .expect("whiteout lower file");
-        assert!(!overlay.exists("/data/secret.txt"));
-
-        // A guest symlink whose target is the metadata root must not become a
-        // window into the reserved namespace.
-        overlay
-            .symlink("/.secure-exec-overlay/whiteouts", "/escape")
-            .expect("creating the symlink itself is allowed");
-
-        // Listing through the symlink must be denied, not disclose markers.
-        assert!(
-            overlay.read_dir("/escape").is_err(),
-            "listing the metadata namespace via a symlink must be denied"
-        );
-
-        // Removing the whiteout marker through the symlink must be denied, so the
-        // deleted lower-layer file cannot be resurrected.
-        assert!(
-            overlay.remove_file("/escape/anything").is_err(),
-            "tampering with metadata via a symlink must be denied"
-        );
-        assert!(
-            !overlay.exists("/data/secret.txt"),
-            "deleted lower-layer file must stay deleted"
-        );
-
-        // The same bypass via a symlink to an ancestor (e.g. `/`) is also closed.
-        overlay
-            .symlink("/", "/rootlink")
-            .expect("symlink to root is allowed");
-        assert!(
-            overlay
-                .read_dir("/rootlink/.secure-exec-overlay/whiteouts")
-                .is_err(),
-            "metadata must be unreachable via an ancestor symlink too"
-        );
-    }
-
-    #[test]
-    fn whiteouts_persist_when_overlay_reopens_with_same_upper() {
-        let mut lower = MemoryFileSystem::new();
-        lower.mkdir("/data", true).expect("create lower directory");
-        lower
-            .write_file("/data/base.txt", b"base".to_vec())
-            .expect("seed lower file");
-        let lower_snapshot = lower.snapshot();
-
-        let mut overlay = OverlayFileSystem::with_upper(
-            vec![MemoryFileSystem::from_snapshot(lower_snapshot.clone())],
-            MemoryFileSystem::new(),
-        );
-        overlay
-            .remove_file("/data/base.txt")
-            .expect("whiteout lower file");
-
-        let upper = overlay.upper.take().expect("overlay upper");
-        let restored_lower = MemoryFileSystem::from_snapshot(lower_snapshot);
-        let mut restored = OverlayFileSystem::with_upper(vec![restored_lower], upper);
-
-        assert!(!restored.exists("/data/base.txt"));
-        assert_eq!(
-            restored.read_dir("/data").expect("read merged directory"),
-            Vec::<String>::new()
-        );
-    }
-
-    #[test]
-    fn copied_up_directories_become_opaque_and_hide_overlay_metadata() {
-        let mut lower = MemoryFileSystem::new();
-        lower.mkdir("/data", true).expect("create lower directory");
-        lower
-            .write_file("/data/base.txt", b"base".to_vec())
-            .expect("seed lower file");
-
-        let mut overlay = OverlayFileSystem::new(vec![lower], OverlayMode::Ephemeral);
-        overlay
-            .chmod("/data", 0o700)
-            .expect("copy up lower directory");
-
-        assert_eq!(
-            overlay.read_dir("/data").expect("read opaque directory"),
-            Vec::<String>::new()
-        );
-        let root_entries = overlay.read_dir("/").expect("read root");
-        assert!(!root_entries
-            .iter()
-            .any(|entry| entry == ".secure-exec-overlay"));
-    }
-
-    #[test]
-    fn remove_dir_succeeds_when_only_lower_children_are_whited_out() {
-        let mut lower = MemoryFileSystem::new();
-        lower.mkdir("/a", true).expect("create lower directory");
-        lower
-            .write_file("/a/c", b"child".to_vec())
-            .expect("seed lower child");
-
-        let mut overlay = OverlayFileSystem::new(vec![lower], OverlayMode::Ephemeral);
-        overlay.remove_file("/a/c").expect("whiteout lower child");
-        overlay
-            .remove_dir("/a")
-            .expect("remove merged-empty directory");
-
-        assert!(!overlay.exists("/a"));
-        assert_error_code(overlay.read_dir("/a"), "ENOENT");
-    }
-
-    #[test]
-    fn remove_dir_still_rejects_visible_children() {
-        let mut lower = MemoryFileSystem::new();
-        lower.mkdir("/a", true).expect("create lower directory");
-        lower
-            .write_file("/a/c", b"child".to_vec())
-            .expect("seed lower child");
-
-        let mut overlay = OverlayFileSystem::new(vec![lower], OverlayMode::Ephemeral);
-        assert_error_code(overlay.remove_dir("/a"), "ENOTEMPTY");
-        assert!(overlay.exists("/a/c"));
-    }
-
-    fn assert_error_code<T: std::fmt::Debug>(result: VfsResult<T>, expected: &str) {
-        let error = result.expect_err("expected operation to fail");
-        assert_eq!(error.code(), expected);
-    }
-}
diff --git a/crates/vfs/src/posix/root_fs.rs b/crates/vfs/src/posix/root_fs.rs
deleted file mode 100644
index bcfa06b31..000000000
--- a/crates/vfs/src/posix/root_fs.rs
+++ /dev/null
@@ -1,1014 +0,0 @@
-use super::overlay_fs::{OverlayFileSystem, OverlayMode};
-use super::usage::{
-    RootFilesystemResourceLimits, DEFAULT_MAX_FILESYSTEM_BYTES, DEFAULT_MAX_INODE_COUNT,
-};
-use super::vfs::{
-    normalize_path, MemoryFileSystem, VfsError, VfsResult, VirtualFileSystem, VirtualStat,
-    VirtualUtimeSpec, MAX_PATH_LENGTH,
-};
-use crate::posix::vfs::VirtualDirEntry;
-use base64::Engine;
-use serde::Deserialize;
-use std::collections::BTreeSet;
-
-// The base filesystem fixture is staged into OUT_DIR by build.rs: copied from
-// the canonical `packages/secure-exec-core/fixtures/base-filesystem.json`
-// during in-tree builds, or from the vendored `assets/base-filesystem.json`
-// copy bundled in the published crate.
-const BUNDLED_BASE_FILESYSTEM_JSON: &str =
-    include_str!(concat!(env!("OUT_DIR"), "/base-filesystem.json"));
-pub const ROOT_FILESYSTEM_SNAPSHOT_FORMAT: &str = "secure_exec_filesystem_snapshot_v1";
-const LEGACY_AGENTOS_ROOT_FILESYSTEM_SNAPSHOT_FORMAT: &str = "agentos_filesystem_snapshot_v1";
-const ROOT_FILESYSTEM_SNAPSHOT_FIXED_OVERHEAD_BYTES: usize = 4 * 1024;
-const ROOT_FILESYSTEM_SNAPSHOT_ENTRY_OVERHEAD_BYTES: usize = MAX_PATH_LENGTH + 1024;
-const DEFAULT_ROOT_DIRECTORIES: &[&str] = &[
-    "/",
-    "/dev",
-    "/proc",
-    "/tmp",
-    "/bin",
-    "/lib",
-    "/sbin",
-    "/boot",
-    "/etc",
-    "/root",
-    "/run",
-    "/srv",
-    "/sys",
-    "/opt",
-    "/mnt",
-    "/media",
-    "/home",
-    "/usr",
-    "/usr/bin",
-    "/usr/games",
-    "/usr/include",
-    "/usr/lib",
-    "/usr/libexec",
-    "/usr/man",
-    "/usr/local",
-    "/usr/local/bin",
-    "/usr/sbin",
-    "/usr/share",
-    "/usr/share/man",
-    "/var",
-    "/var/cache",
-    "/var/empty",
-    "/var/lib",
-    "/var/lock",
-    "/var/log",
-    "/var/run",
-    "/var/spool",
-    "/var/tmp",
-    "/etc/agentos",
-];
-const KERNEL_RESERVED_BOOTSTRAP_PATH_PREFIXES: &[&str] = &["/dev", "/proc", "/sys"];
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct RootFilesystemError {
-    message: String,
-}
-
-impl RootFilesystemError {
-    fn new(message: impl Into<String>) -> Self {
-        Self {
-            message: message.into(),
-        }
-    }
-}
-
-impl std::fmt::Display for RootFilesystemError {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        f.write_str(&self.message)
-    }
-}
-
-impl std::error::Error for RootFilesystemError {}
-
-impl From<VfsError> for RootFilesystemError {
-    fn from(error: VfsError) -> Self {
-        Self::new(error.to_string())
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub enum FilesystemEntryKind {
-    File,
-    Directory,
-    Symlink,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct FilesystemEntry {
-    pub path: String,
-    pub kind: FilesystemEntryKind,
-    pub mode: u32,
-    pub uid: u32,
-    pub gid: u32,
-    pub content: Option<Vec<u8>>,
-    pub target: Option<String>,
-}
-
-impl FilesystemEntry {
-    pub fn directory(path: impl Into<String>) -> Self {
-        Self {
-            path: path.into(),
-            kind: FilesystemEntryKind::Directory,
-            mode: 0o755,
-            uid: 0,
-            gid: 0,
-            content: None,
-            target: None,
-        }
-    }
-
-    pub fn file(path: impl Into<String>, content: impl Into<Vec<u8>>) -> Self {
-        Self {
-            path: path.into(),
-            kind: FilesystemEntryKind::File,
-            mode: 0o644,
-            uid: 0,
-            gid: 0,
-            content: Some(content.into()),
-            target: None,
-        }
-    }
-
-    pub fn symlink(path: impl Into<String>, target: impl Into<String>) -> Self {
-        Self {
-            path: path.into(),
-            kind: FilesystemEntryKind::Symlink,
-            mode: 0o777,
-            uid: 0,
-            gid: 0,
-            content: None,
-            target: Some(target.into()),
-        }
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct RootFilesystemSnapshot {
-    pub entries: Vec<FilesystemEntry>,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct RootFilesystemImportLimits {
-    pub max_encoded_snapshot_bytes: Option<usize>,
-    pub max_filesystem_bytes: Option<u64>,
-    pub max_inode_count: Option<usize>,
-}
-
-impl RootFilesystemImportLimits {
-    pub fn from_resource_limits(limits: &impl RootFilesystemResourceLimits) -> Self {
-        Self {
-            max_encoded_snapshot_bytes: encoded_snapshot_limit(
-                limits.max_filesystem_bytes(),
-                limits.max_inode_count(),
-            ),
-            max_filesystem_bytes: limits.max_filesystem_bytes(),
-            max_inode_count: limits.max_inode_count(),
-        }
-    }
-}
-
-impl Default for RootFilesystemImportLimits {
-    fn default() -> Self {
-        Self {
-            max_encoded_snapshot_bytes: encoded_snapshot_limit(
-                Some(DEFAULT_MAX_FILESYSTEM_BYTES),
-                Some(DEFAULT_MAX_INODE_COUNT),
-            ),
-            max_filesystem_bytes: Some(DEFAULT_MAX_FILESYSTEM_BYTES),
-            max_inode_count: Some(DEFAULT_MAX_INODE_COUNT),
-        }
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum RootFilesystemMode {
-    Ephemeral,
-    ReadOnly,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct RootFilesystemDescriptor {
-    pub mode: RootFilesystemMode,
-    pub disable_default_base_layer: bool,
-    pub lowers: Vec<RootFilesystemSnapshot>,
-    pub bootstrap_entries: Vec<FilesystemEntry>,
-}
-
-impl Default for RootFilesystemDescriptor {
-    fn default() -> Self {
-        Self {
-            mode: RootFilesystemMode::Ephemeral,
-            disable_default_base_layer: false,
-            lowers: Vec::new(),
-            bootstrap_entries: Vec::new(),
-        }
-    }
-}
-
-#[derive(Debug)]
-pub struct RootFileSystem {
-    overlay: OverlayFileSystem,
-    mode: RootFilesystemMode,
-    bootstrap_finished: bool,
-}
-
-impl RootFileSystem {
-    pub fn from_descriptor(
-        descriptor: RootFilesystemDescriptor,
-    ) -> Result<Self, RootFilesystemError> {
-        Self::from_descriptor_with_import_limits(descriptor, &RootFilesystemImportLimits::default())
-    }
-
-    pub fn from_descriptor_with_import_limits(
-        descriptor: RootFilesystemDescriptor,
-        limits: &RootFilesystemImportLimits,
-    ) -> Result<Self, RootFilesystemError> {
-        let mut lower_snapshots = descriptor.lowers.clone();
-        if !descriptor.disable_default_base_layer {
-            lower_snapshots.push(load_bundled_base_snapshot_with_limits(limits)?);
-        } else if lower_snapshots.is_empty() {
-            lower_snapshots.push(minimal_root_snapshot());
-        }
-        validate_descriptor_import_limits(
-            &lower_snapshots,
-            &descriptor.bootstrap_entries,
-            limits,
-            "root filesystem descriptor",
-        )?;
-
-        let lowers = lower_snapshots
-            .iter()
-            .map(snapshot_to_memory_filesystem)
-            .collect::<Result<Vec<_>, _>>()?;
-
-        let mut root = Self {
-            overlay: OverlayFileSystem::new(lowers, OverlayMode::Ephemeral),
-            mode: descriptor.mode,
-            bootstrap_finished: false,
-        };
-        root.apply_bootstrap_entries(&descriptor.bootstrap_entries)?;
-        Ok(root)
-    }
-
-    pub fn apply_bootstrap_entries(
-        &mut self,
-        entries: &[FilesystemEntry],
-    ) -> Result<(), RootFilesystemError> {
-        if self.bootstrap_finished {
-            return Err(RootFilesystemError::new(
-                "root filesystem bootstrap is already finished",
-            ));
-        }
-
-        for entry in sort_entries(entries.to_vec()) {
-            if is_kernel_reserved_bootstrap_path(&entry.path) {
-                continue;
-            }
-            apply_entry(&mut self.overlay, &entry)?;
-        }
-        Ok(())
-    }
-
-    pub fn finish_bootstrap(&mut self) {
-        if self.bootstrap_finished {
-            return;
-        }
-        self.bootstrap_finished = true;
-        if self.mode == RootFilesystemMode::ReadOnly {
-            self.overlay.lock_writes();
-        }
-    }
-
-    pub fn snapshot(&mut self) -> Result<RootFilesystemSnapshot, RootFilesystemError> {
-        Ok(RootFilesystemSnapshot {
-            entries: snapshot_virtual_filesystem(&mut self.overlay, "/")?,
-        })
-    }
-
-    pub fn check_rename_copy_up_limits(
-        &mut self,
-        old_path: &str,
-        new_path: &str,
-        max_bytes: Option<u64>,
-        max_inodes: Option<usize>,
-    ) -> VfsResult<()> {
-        self.overlay
-            .check_rename_copy_up_limits(old_path, new_path, max_bytes, max_inodes)
-    }
-}
-
-impl VirtualFileSystem for RootFileSystem {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        self.overlay.read_file(path)
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        self.overlay.read_dir(path)
-    }
-
-    fn read_dir_limited(&mut self, path: &str, max_entries: usize) -> VfsResult<Vec<String>> {
-        self.overlay.read_dir_limited(path, max_entries)
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        self.overlay.read_dir_with_types(path)
-    }
-
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        self.overlay.write_file(path, content.into())
-    }
-
-    fn create_file_exclusive(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        self.overlay.create_file_exclusive(path, content.into())
-    }
-
-    fn append_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<u64> {
-        self.overlay.append_file(path, content.into())
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.overlay.create_dir(path)
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        self.overlay.mkdir(path, recursive)
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        self.overlay.exists(path)
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        self.overlay.stat(path)
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        self.overlay.remove_file(path)
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        self.overlay.remove_dir(path)
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        self.overlay.rename(old_path, new_path)
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        self.overlay.realpath(path)
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        self.overlay.symlink(target, link_path)
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        self.overlay.read_link(path)
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        self.overlay.lstat(path)
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        self.overlay.link(old_path, new_path)
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        self.overlay.chmod(path, mode)
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        self.overlay.chown(path, uid, gid)
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        self.overlay.utimes(path, atime_ms, mtime_ms)
-    }
-
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-        follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        self.overlay
-            .utimes_spec(path, atime, mtime, follow_symlinks)
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        self.overlay.truncate(path, length)
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        self.overlay.pread(path, offset, length)
-    }
-}
-
-#[derive(Debug, Deserialize)]
-struct RawBaseFilesystemSnapshot {
-    filesystem: RawFilesystemEntries,
-}
-
-#[derive(Debug, Deserialize)]
-struct RawFilesystemEntries {
-    entries: Vec<RawFilesystemEntry>,
-}
-
-#[derive(Debug, Deserialize)]
-struct RawFilesystemEntry {
-    path: String,
-    #[serde(rename = "type")]
-    kind: RawFilesystemEntryKind,
-    mode: String,
-    uid: u32,
-    gid: u32,
-    #[serde(default)]
-    content: Option<String>,
-    #[serde(default)]
-    encoding: Option<String>,
-    #[serde(default)]
-    target: Option<String>,
-}
-
-#[derive(Debug, Deserialize)]
-#[serde(rename_all = "snake_case")]
-enum RawFilesystemEntryKind {
-    File,
-    Directory,
-    Symlink,
-}
-
-#[derive(Debug, Deserialize)]
-struct RawSnapshotExport {
-    format: String,
-    filesystem: RawFilesystemEntries,
-}
-
-#[derive(Debug, serde::Serialize)]
-struct SnapshotExport<'a> {
-    format: &'static str,
-    filesystem: SnapshotFilesystem<'a>,
-}
-
-#[derive(Debug, serde::Serialize)]
-struct SnapshotFilesystem<'a> {
-    entries: Vec<SerializedFilesystemEntry<'a>>,
-}
-
-#[derive(Debug, serde::Serialize)]
-struct SerializedFilesystemEntry<'a> {
-    path: &'a str,
-    #[serde(rename = "type")]
-    kind: &'static str,
-    mode: String,
-    uid: u32,
-    gid: u32,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    content: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    encoding: Option<&'static str>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    target: Option<&'a str>,
-}
-
-pub fn encode_snapshot(snapshot: &RootFilesystemSnapshot) -> Result<Vec<u8>, RootFilesystemError> {
-    let serialized_entries = snapshot
-        .entries
-        .iter()
-        .map(|entry| SerializedFilesystemEntry {
-            path: &entry.path,
-            kind: match entry.kind {
-                FilesystemEntryKind::File => "file",
-                FilesystemEntryKind::Directory => "directory",
-                FilesystemEntryKind::Symlink => "symlink",
-            },
-            mode: format!("{:o}", entry.mode),
-            uid: entry.uid,
-            gid: entry.gid,
-            content: entry
-                .content
-                .as_ref()
-                .map(|bytes| base64::engine::general_purpose::STANDARD.encode(bytes)),
-            encoding: entry.content.as_ref().map(|_| "base64"),
-            target: entry.target.as_deref(),
-        })
-        .collect::<Vec<_>>();
-
-    serde_json::to_vec(&SnapshotExport {
-        format: ROOT_FILESYSTEM_SNAPSHOT_FORMAT,
-        filesystem: SnapshotFilesystem {
-            entries: serialized_entries,
-        },
-    })
-    .map_err(|error| RootFilesystemError::new(format!("serialize root snapshot: {error}")))
-}
-
-pub fn decode_snapshot(bytes: &[u8]) -> Result<RootFilesystemSnapshot, RootFilesystemError> {
-    decode_snapshot_with_import_limits(bytes, &RootFilesystemImportLimits::default())
-}
-
-pub fn decode_snapshot_with_import_limits(
-    bytes: &[u8],
-    limits: &RootFilesystemImportLimits,
-) -> Result<RootFilesystemSnapshot, RootFilesystemError> {
-    validate_encoded_snapshot_size(bytes, limits, "root snapshot")?;
-    let raw: RawSnapshotExport = serde_json::from_slice(bytes)
-        .map_err(|error| RootFilesystemError::new(format!("parse root snapshot: {error}")))?;
-    if !is_supported_root_filesystem_snapshot_format(&raw.format) {
-        return Err(RootFilesystemError::new(format!(
-            "unsupported root snapshot format: {}",
-            raw.format
-        )));
-    }
-    raw_entries_to_snapshot(raw.filesystem.entries, limits, "root snapshot")
-}
-
-pub fn is_supported_root_filesystem_snapshot_format(format: &str) -> bool {
-    format == ROOT_FILESYSTEM_SNAPSHOT_FORMAT
-        || format == LEGACY_AGENTOS_ROOT_FILESYSTEM_SNAPSHOT_FORMAT
-}
-
-pub fn load_bundled_base_snapshot_with_limits(
-    limits: &RootFilesystemImportLimits,
-) -> Result<RootFilesystemSnapshot, RootFilesystemError> {
-    validate_encoded_snapshot_size(
-        BUNDLED_BASE_FILESYSTEM_JSON.as_bytes(),
-        limits,
-        "bundled base filesystem",
-    )?;
-    let raw: RawBaseFilesystemSnapshot = serde_json::from_str(BUNDLED_BASE_FILESYSTEM_JSON)
-        .map_err(|error| {
-            RootFilesystemError::new(format!("parse bundled base filesystem: {error}"))
-        })?;
-    raw_entries_to_snapshot(raw.filesystem.entries, limits, "bundled base filesystem")
-}
-
-fn minimal_root_snapshot() -> RootFilesystemSnapshot {
-    let mut entries = DEFAULT_ROOT_DIRECTORIES
-        .iter()
-        .map(|path| FilesystemEntry::directory(*path))
-        .collect::<Vec<_>>();
-    entries.push(FilesystemEntry::file("/usr/bin/env", Vec::new()));
-    RootFilesystemSnapshot { entries }
-}
-
-fn convert_raw_entry(raw: RawFilesystemEntry) -> Result<FilesystemEntry, RootFilesystemError> {
-    let content = match raw.content {
-        Some(content) => match raw.encoding.as_deref() {
-            Some("base64") => Some(
-                base64::engine::general_purpose::STANDARD
-                    .decode(content)
-                    .map_err(|error| {
-                        RootFilesystemError::new(format!(
-                            "decode base64 content for {}: {error}",
-                            raw.path
-                        ))
-                    })?,
-            ),
-            Some("utf8") | None => Some(content.into_bytes()),
-            Some(other) => {
-                return Err(RootFilesystemError::new(format!(
-                    "unsupported content encoding for {}: {other}",
-                    raw.path
-                )));
-            }
-        },
-        None => None,
-    };
-
-    Ok(FilesystemEntry {
-        path: raw.path,
-        kind: match raw.kind {
-            RawFilesystemEntryKind::File => FilesystemEntryKind::File,
-            RawFilesystemEntryKind::Directory => FilesystemEntryKind::Directory,
-            RawFilesystemEntryKind::Symlink => FilesystemEntryKind::Symlink,
-        },
-        mode: u32::from_str_radix(&raw.mode, 8).map_err(|error| {
-            RootFilesystemError::new(format!("parse mode {}: {error}", raw.mode))
-        })?,
-        uid: raw.uid,
-        gid: raw.gid,
-        content,
-        target: raw.target,
-    })
-}
-
-fn raw_entries_to_snapshot(
-    raw_entries: Vec<RawFilesystemEntry>,
-    limits: &RootFilesystemImportLimits,
-    context: &str,
-) -> Result<RootFilesystemSnapshot, RootFilesystemError> {
-    if let Some(limit) = limits.max_inode_count {
-        if raw_entries.len() > limit {
-            return Err(RootFilesystemError::new(format!(
-                "{context} contains {} entries, exceeding limit {limit}",
-                raw_entries.len()
-            )));
-        }
-    }
-
-    let entries = raw_entries
-        .into_iter()
-        .map(convert_raw_entry)
-        .collect::<Result<Vec<_>, _>>()?;
-    validate_entry_import_limits(&entries, limits, context)?;
-    Ok(RootFilesystemSnapshot { entries })
-}
-
-pub fn validate_snapshot_import_limits(
-    snapshot: &RootFilesystemSnapshot,
-    limits: &RootFilesystemImportLimits,
-    context: &str,
-) -> Result<(), RootFilesystemError> {
-    validate_entry_import_limits(&snapshot.entries, limits, context)
-}
-
-fn validate_descriptor_import_limits(
-    lowers: &[RootFilesystemSnapshot],
-    bootstrap_entries: &[FilesystemEntry],
-    limits: &RootFilesystemImportLimits,
-    context: &str,
-) -> Result<(), RootFilesystemError> {
-    let explicit_entry_count = lowers
-        .iter()
-        .map(|snapshot| snapshot.entries.len())
-        .sum::<usize>()
-        .saturating_add(bootstrap_entries.len());
-    let mut inode_paths = BTreeSet::new();
-    for snapshot in lowers {
-        collect_materialized_entry_paths(&snapshot.entries, &mut inode_paths);
-    }
-    collect_materialized_entry_paths(bootstrap_entries, &mut inode_paths);
-    let inode_count = inode_paths.len();
-    if let Some(limit) = limits.max_inode_count {
-        if explicit_entry_count > limit {
-            return Err(RootFilesystemError::new(format!(
-                "{context} contains {explicit_entry_count} entries, exceeding limit {limit}"
-            )));
-        }
-
-        if inode_count > limit {
-            return Err(RootFilesystemError::new(format!(
-                "{context} contains {inode_count} entries, exceeding limit {limit}"
-            )));
-        }
-    }
-
-    let mut bytes = 0_u64;
-    for snapshot in lowers {
-        bytes = bytes.saturating_add(entry_content_bytes(&snapshot.entries));
-    }
-    bytes = bytes.saturating_add(entry_content_bytes(bootstrap_entries));
-    if let Some(limit) = limits.max_filesystem_bytes {
-        if bytes > limit {
-            return Err(RootFilesystemError::new(format!(
-                "{context} contains {bytes} bytes, exceeding limit {limit}"
-            )));
-        }
-    }
-    Ok(())
-}
-
-fn validate_entry_import_limits(
-    entries: &[FilesystemEntry],
-    limits: &RootFilesystemImportLimits,
-    context: &str,
-) -> Result<(), RootFilesystemError> {
-    if let Some(limit) = limits.max_inode_count {
-        if entries.len() > limit {
-            return Err(RootFilesystemError::new(format!(
-                "{context} contains {} entries, exceeding limit {limit}",
-                entries.len()
-            )));
-        }
-
-        let inode_count = materialized_entry_inode_count(entries);
-        if inode_count > limit {
-            return Err(RootFilesystemError::new(format!(
-                "{context} contains {inode_count} entries, exceeding limit {limit}"
-            )));
-        }
-    }
-
-    let bytes = entry_content_bytes(entries);
-    if let Some(limit) = limits.max_filesystem_bytes {
-        if bytes > limit {
-            return Err(RootFilesystemError::new(format!(
-                "{context} contains {bytes} bytes, exceeding limit {limit}"
-            )));
-        }
-    }
-    Ok(())
-}
-
-fn validate_encoded_snapshot_size(
-    bytes: &[u8],
-    limits: &RootFilesystemImportLimits,
-    context: &str,
-) -> Result<(), RootFilesystemError> {
-    if let Some(limit) = limits.max_encoded_snapshot_bytes {
-        if bytes.len() > limit {
-            return Err(RootFilesystemError::new(format!(
-                "{context} contains {} encoded bytes, exceeding limit {limit}",
-                bytes.len()
-            )));
-        }
-    }
-    Ok(())
-}
-
-fn entry_content_bytes(entries: &[FilesystemEntry]) -> u64 {
-    entries.iter().fold(0_u64, |total, entry| {
-        total.saturating_add(match entry.kind {
-            FilesystemEntryKind::File => entry
-                .content
-                .as_ref()
-                .map(|content| usize_to_u64(content.len()))
-                .unwrap_or(0),
-            FilesystemEntryKind::Directory => 0,
-            FilesystemEntryKind::Symlink => entry
-                .target
-                .as_ref()
-                .map(|target| usize_to_u64(target.len()))
-                .unwrap_or(0),
-        })
-    })
-}
-
-fn materialized_entry_inode_count(entries: &[FilesystemEntry]) -> usize {
-    let mut paths = BTreeSet::new();
-    collect_materialized_entry_paths(entries, &mut paths);
-    paths.len()
-}
-
-fn collect_materialized_entry_paths(entries: &[FilesystemEntry], paths: &mut BTreeSet<String>) {
-    for entry in entries {
-        collect_materialized_path(&entry.path, paths);
-    }
-}
-
-fn collect_materialized_path(path: &str, paths: &mut BTreeSet<String>) {
-    let normalized = normalize_path(path);
-    paths.insert(normalized.clone());
-
-    let mut parent = String::new();
-    let segments = normalized
-        .split('/')
-        .filter(|segment| !segment.is_empty())
-        .collect::<Vec<_>>();
-    for segment in segments.iter().take(segments.len().saturating_sub(1)) {
-        parent.push('/');
-        parent.push_str(segment);
-        paths.insert(parent.clone());
-    }
-}
-
-fn usize_to_u64(value: usize) -> u64 {
-    u64::try_from(value).unwrap_or(u64::MAX)
-}
-
-const fn u64_limit_to_usize(value: u64) -> usize {
-    if value > usize::MAX as u64 {
-        usize::MAX
-    } else {
-        value as usize
-    }
-}
-
-const fn encoded_snapshot_limit(
-    max_filesystem_bytes: Option<u64>,
-    max_inode_count: Option<usize>,
-) -> Option<usize> {
-    let Some(max_filesystem_bytes) = max_filesystem_bytes else {
-        return None;
-    };
-
-    Some(
-        u64_limit_to_usize(max_filesystem_bytes)
-            .saturating_mul(2)
-            .saturating_add(match max_inode_count {
-                Some(max_inode_count) => {
-                    max_inode_count.saturating_mul(ROOT_FILESYSTEM_SNAPSHOT_ENTRY_OVERHEAD_BYTES)
-                }
-                None => 0,
-            })
-            .saturating_add(ROOT_FILESYSTEM_SNAPSHOT_FIXED_OVERHEAD_BYTES),
-    )
-}
-
-fn snapshot_to_memory_filesystem(
-    snapshot: &RootFilesystemSnapshot,
-) -> Result<MemoryFileSystem, RootFilesystemError> {
-    let mut filesystem = MemoryFileSystem::new();
-    for entry in sort_entries(snapshot.entries.clone()) {
-        apply_entry_to_memory_filesystem(&mut filesystem, &entry)?;
-    }
-    Ok(filesystem)
-}
-
-fn apply_entry_to_memory_filesystem(
-    filesystem: &mut MemoryFileSystem,
-    entry: &FilesystemEntry,
-) -> Result<(), RootFilesystemError> {
-    ensure_parent_directories(filesystem, &entry.path)?;
-
-    match entry.kind {
-        FilesystemEntryKind::Directory => {
-            filesystem.mkdir(&entry.path, true)?;
-            filesystem.chmod(&entry.path, entry.mode)?;
-            filesystem.chown(&entry.path, entry.uid, entry.gid)?;
-        }
-        FilesystemEntryKind::File => {
-            filesystem.write_file(&entry.path, entry.content.clone().unwrap_or_default())?;
-            filesystem.chmod(&entry.path, entry.mode)?;
-            filesystem.chown(&entry.path, entry.uid, entry.gid)?;
-        }
-        FilesystemEntryKind::Symlink => {
-            let Some(target) = entry.target.as_deref() else {
-                return Err(RootFilesystemError::new(format!(
-                    "missing symlink target for {}",
-                    entry.path
-                )));
-            };
-            filesystem.symlink_with_metadata(
-                target,
-                &entry.path,
-                entry.mode,
-                entry.uid,
-                entry.gid,
-            )?;
-        }
-    }
-
-    Ok(())
-}
-
-fn apply_entry(
-    filesystem: &mut impl VirtualFileSystem,
-    entry: &FilesystemEntry,
-) -> Result<(), RootFilesystemError> {
-    ensure_parent_directories(filesystem, &entry.path)?;
-
-    match entry.kind {
-        FilesystemEntryKind::Directory => {
-            filesystem.mkdir(&entry.path, true)?;
-            filesystem.chmod(&entry.path, entry.mode)?;
-            filesystem.chown(&entry.path, entry.uid, entry.gid)?;
-        }
-        FilesystemEntryKind::File => {
-            filesystem.write_file(&entry.path, entry.content.clone().unwrap_or_default())?;
-            filesystem.chmod(&entry.path, entry.mode)?;
-            filesystem.chown(&entry.path, entry.uid, entry.gid)?;
-        }
-        FilesystemEntryKind::Symlink => {
-            let Some(target) = entry.target.as_deref() else {
-                return Err(RootFilesystemError::new(format!(
-                    "missing symlink target for {}",
-                    entry.path
-                )));
-            };
-            filesystem.symlink(target, &entry.path)?;
-        }
-    }
-
-    Ok(())
-}
-
-fn ensure_parent_directories(
-    filesystem: &mut impl VirtualFileSystem,
-    path: &str,
-) -> Result<(), RootFilesystemError> {
-    let normalized = normalize_path(path);
-    let mut current = String::new();
-    let segments = normalized
-        .split('/')
-        .filter(|segment| !segment.is_empty())
-        .collect::<Vec<_>>();
-
-    for segment in segments.iter().take(segments.len().saturating_sub(1)) {
-        current.push('/');
-        current.push_str(segment);
-
-        if filesystem.exists(&current) {
-            continue;
-        }
-
-        filesystem.create_dir(&current)?;
-        filesystem.chmod(&current, 0o755)?;
-        filesystem.chown(&current, 0, 0)?;
-    }
-
-    Ok(())
-}
-
-fn sort_entries(mut entries: Vec<FilesystemEntry>) -> Vec<FilesystemEntry> {
-    entries.sort_by(|left, right| {
-        let depth_left = if left.path == "/" {
-            0
-        } else {
-            left.path.split('/').filter(|part| !part.is_empty()).count()
-        };
-        let depth_right = if right.path == "/" {
-            0
-        } else {
-            right
-                .path
-                .split('/')
-                .filter(|part| !part.is_empty())
-                .count()
-        };
-        depth_left
-            .cmp(&depth_right)
-            .then_with(|| left.path.cmp(&right.path))
-    });
-    entries
-}
-
-fn snapshot_virtual_filesystem(
-    filesystem: &mut impl VirtualFileSystem,
-    root_path: &str,
-) -> Result<Vec<FilesystemEntry>, RootFilesystemError> {
-    let mut entries = Vec::new();
-    snapshot_path(filesystem, root_path, &mut entries)?;
-    Ok(entries)
-}
-
-fn snapshot_path(
-    filesystem: &mut impl VirtualFileSystem,
-    path: &str,
-    entries: &mut Vec<FilesystemEntry>,
-) -> Result<(), RootFilesystemError> {
-    let stat = if path == "/" {
-        filesystem.stat(path)?
-    } else {
-        filesystem.lstat(path)?
-    };
-
-    if stat.is_symbolic_link {
-        entries.push(FilesystemEntry {
-            path: path.to_owned(),
-            kind: FilesystemEntryKind::Symlink,
-            mode: stat.mode,
-            uid: stat.uid,
-            gid: stat.gid,
-            content: None,
-            target: Some(filesystem.read_link(path)?),
-        });
-        return Ok(());
-    }
-
-    if stat.is_directory {
-        entries.push(FilesystemEntry {
-            path: path.to_owned(),
-            kind: FilesystemEntryKind::Directory,
-            mode: stat.mode,
-            uid: stat.uid,
-            gid: stat.gid,
-            content: None,
-            target: None,
-        });
-
-        let mut children = filesystem
-            .read_dir_with_types(path)?
-            .into_iter()
-            .map(|entry| entry.name)
-            .filter(|name| name != "." && name != "..")
-            .collect::<Vec<_>>();
-        children.sort();
-
-        for child in children {
-            let child_path = if path == "/" {
-                format!("/{child}")
-            } else {
-                format!("{path}/{child}")
-            };
-            snapshot_path(filesystem, &child_path, entries)?;
-        }
-        return Ok(());
-    }
-
-    entries.push(FilesystemEntry {
-        path: path.to_owned(),
-        kind: FilesystemEntryKind::File,
-        mode: stat.mode,
-        uid: stat.uid,
-        gid: stat.gid,
-        content: Some(filesystem.read_file(path)?),
-        target: None,
-    });
-    Ok(())
-}
-
-fn is_kernel_reserved_bootstrap_path(path: &str) -> bool {
-    let normalized = normalize_path(path);
-    KERNEL_RESERVED_BOOTSTRAP_PATH_PREFIXES
-        .iter()
-        .any(|prefix| normalized == *prefix || normalized.starts_with(&format!("{prefix}/")))
-}
diff --git a/crates/vfs/src/posix/single_symlink_fs.rs b/crates/vfs/src/posix/single_symlink_fs.rs
deleted file mode 100644
index a4c239119..000000000
--- a/crates/vfs/src/posix/single_symlink_fs.rs
+++ /dev/null
@@ -1,187 +0,0 @@
-use super::vfs::{
-    VfsError, VfsResult, VirtualDirEntry, VirtualFileSystem, VirtualStat, VirtualUtimeSpec, S_IFLNK,
-};
-
-/// Tiny read-only filesystem whose root inode is a single symbolic link.
-///
-/// Package projection uses this for managed leaves such as
-/// `/opt/agentos/bin/<cmd>` and `/opt/agentos/pkgs/<pkg>/current`. A normal
-/// `MemoryFileSystem` cannot model that shape because its root inode is always
-/// a directory. Keeping each managed symlink as its own leaf mount lets the
-/// parent directories remain writable overlay directories, so user-installed
-/// commands and packages can coexist beside managed entries.
-#[derive(Debug, Clone)]
-pub struct SingleSymlinkFileSystem {
-    target: String,
-}
-
-impl SingleSymlinkFileSystem {
-    pub fn new(target: impl Into<String>) -> Self {
-        Self {
-            target: target.into(),
-        }
-    }
-
-    pub fn target(&self) -> &str {
-        &self.target
-    }
-
-    fn root_stat(&self) -> VirtualStat {
-        VirtualStat {
-            mode: S_IFLNK | 0o777,
-            size: self.target.len() as u64,
-            blocks: 0,
-            dev: 9101,
-            rdev: 0,
-            is_directory: false,
-            is_symbolic_link: true,
-            atime_ms: 0,
-            atime_nsec: 0,
-            mtime_ms: 0,
-            mtime_nsec: 0,
-            ctime_ms: 0,
-            ctime_nsec: 0,
-            birthtime_ms: 0,
-            ino: 1,
-            nlink: 1,
-            uid: 1000,
-            gid: 1000,
-        }
-    }
-
-    fn not_found(path: &str) -> VfsError {
-        VfsError::new("ENOENT", format!("no such file or directory, '{path}'"))
-    }
-
-    fn readonly(op: &str, path: &str) -> VfsError {
-        VfsError::new(
-            "EROFS",
-            format!("read-only single-symlink filesystem, {op} '{path}'"),
-        )
-    }
-}
-
-impl VirtualFileSystem for SingleSymlinkFileSystem {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        Err(Self::not_found(path))
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        Err(VfsError::new(
-            "ENOTDIR",
-            format!("not a directory, readdir '{path}'"),
-        ))
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        Err(VfsError::new(
-            "ENOTDIR",
-            format!("not a directory, readdir '{path}'"),
-        ))
-    }
-
-    fn write_file(&mut self, path: &str, _content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        Err(Self::readonly("write", path))
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        Err(Self::readonly("mkdir", path))
-    }
-
-    fn mkdir(&mut self, path: &str, _recursive: bool) -> VfsResult<()> {
-        Err(Self::readonly("mkdir", path))
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        path == "/"
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        self.lstat(path)
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        Err(Self::readonly("unlink", path))
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        Err(Self::readonly("rmdir", path))
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only single-symlink filesystem, rename '{old_path}' to '{new_path}'"),
-        ))
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        if path == "/" {
-            return Err(VfsError::new(
-                "ELOOP",
-                "single-symlink root must be resolved by the mount table",
-            ));
-        }
-        Err(Self::not_found(path))
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only single-symlink filesystem, symlink '{link_path}' -> '{target}'"),
-        ))
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        if path == "/" {
-            Ok(self.target.clone())
-        } else {
-            Err(Self::not_found(path))
-        }
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        if path == "/" {
-            Ok(self.root_stat())
-        } else {
-            Err(Self::not_found(path))
-        }
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only single-symlink filesystem, link '{old_path}' to '{new_path}'"),
-        ))
-    }
-
-    fn chmod(&mut self, path: &str, _mode: u32) -> VfsResult<()> {
-        Err(Self::readonly("chmod", path))
-    }
-
-    fn chown(&mut self, path: &str, _uid: u32, _gid: u32) -> VfsResult<()> {
-        Err(Self::readonly("chown", path))
-    }
-
-    fn utimes(&mut self, path: &str, _atime_ms: u64, _mtime_ms: u64) -> VfsResult<()> {
-        Err(Self::readonly("utimes", path))
-    }
-
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        _atime: VirtualUtimeSpec,
-        _mtime: VirtualUtimeSpec,
-        _follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        Err(Self::readonly("utimes", path))
-    }
-
-    fn truncate(&mut self, path: &str, _length: u64) -> VfsResult<()> {
-        Err(Self::readonly("truncate", path))
-    }
-
-    fn pread(&mut self, path: &str, _offset: u64, _length: usize) -> VfsResult<Vec<u8>> {
-        Err(Self::not_found(path))
-    }
-}
diff --git a/crates/vfs/src/posix/tar_fs.rs b/crates/vfs/src/posix/tar_fs.rs
deleted file mode 100644
index cc4eeaf8b..000000000
--- a/crates/vfs/src/posix/tar_fs.rs
+++ /dev/null
@@ -1,793 +0,0 @@
-#![allow(unsafe_code)]
-
-use super::vfs::{
-    normalize_path, VfsError, VfsResult, VirtualDirEntry, VirtualFileSystem, VirtualStat,
-    VirtualUtimeSpec, S_IFDIR, S_IFLNK, S_IFREG,
-};
-use memmap2::Mmap;
-use std::collections::{BTreeMap, BTreeSet};
-use std::fs::File;
-use std::hash::{Hash, Hasher};
-use std::io;
-use std::path::{Component, Path, PathBuf};
-use std::sync::{Arc, Mutex, OnceLock, Weak};
-use tar::EntryType;
-
-const MAX_TAR_INDEX_ENTRIES: usize = 200_000;
-const MAX_TAR_CACHE_ARCHIVES: usize = 64;
-const MAX_TAR_SYMLINKS: usize = 40;
-
-/// Read-only filesystem backed directly by an uncompressed package tar.
-///
-/// The package tar already contains each file's bytes at a stable byte range,
-/// so mounting it is cheaper and simpler than extracting it: we scan headers
-/// once, store `path -> offset/size/metadata`, and serve reads from a shared
-/// `mmap` slice. Extraction would create a duplicate host tree, thousands of
-/// physical inodes, and a cleanup problem before reading the same bytes again.
-///
-/// Performance is intentionally front-loaded into a small index scan over tar
-/// headers. File reads are an O(1) map lookup plus a page-cache-backed memory
-/// slice; metadata and directory listings come from the in-memory index. The
-/// mmap is keyed by content digest and shared across VMs, so RSS follows the
-/// pages actually touched rather than the full archive size. The caller must
-/// pass an immutable registry/package file: replacing by rename is fine because
-/// this filesystem holds the opened file, but truncating the same inode during
-/// a live VM would violate the mmap lifecycle and can SIGBUS on Unix.
-///
-/// This filesystem is mounted only as a granular package-version leaf such as
-/// `/opt/agentos/pkgs/<pkg>/<version>`. Managed commands and `current` aliases
-/// are separate symlink leaf mounts, while parent directories stay writable
-/// overlay directories so user-installed files can coexist with managed ones.
-pub struct TarFileSystem {
-    archive: Arc<CachedTarArchive>,
-    root: String,
-}
-
-impl TarFileSystem {
-    pub fn open(path: impl AsRef<Path>, digest: impl Into<String>) -> VfsResult<Self> {
-        Self::open_at(path, digest, "/")
-    }
-
-    pub fn open_at(
-        path: impl AsRef<Path>,
-        digest: impl Into<String>,
-        root: &str,
-    ) -> VfsResult<Self> {
-        let digest = digest.into();
-        let path = path.as_ref().to_path_buf();
-        let archive = cached_archive(path, digest)?;
-        let root = normalize_path(root);
-        let node = archive.node(&root)?;
-        if !matches!(node.kind, TarNodeKind::Directory) {
-            return Err(VfsError::new(
-                "ENOTDIR",
-                format!("tar mount root is not a directory: {root}"),
-            ));
-        }
-        Ok(Self { archive, root })
-    }
-
-    pub fn digest(&self) -> &str {
-        &self.archive.digest
-    }
-
-    pub fn source_path(&self) -> &Path {
-        &self.archive.path
-    }
-
-    pub fn archive_root(&self) -> &str {
-        &self.root
-    }
-
-    fn to_archive_path(&self, path: &str) -> String {
-        let normalized = normalize_path(path);
-        if self.root == "/" {
-            normalized
-        } else if normalized == "/" {
-            self.root.clone()
-        } else {
-            normalize_path(&format!(
-                "{}/{}",
-                self.root,
-                normalized.trim_start_matches('/')
-            ))
-        }
-    }
-
-    fn to_guest_path(&self, archive_path: &str) -> VfsResult<String> {
-        if self.root == "/" {
-            return Ok(archive_path.to_owned());
-        }
-        if archive_path == self.root {
-            return Ok(String::from("/"));
-        }
-        let prefix = format!("{}/", self.root.trim_end_matches('/'));
-        let suffix = archive_path.strip_prefix(&prefix).ok_or_else(|| {
-            VfsError::new(
-                "EXDEV",
-                format!("tar symlink resolved outside mounted subtree: {archive_path}"),
-            )
-        })?;
-        Ok(format!("/{suffix}"))
-    }
-
-    fn ensure_within_root(&self, archive_path: &str) -> VfsResult<()> {
-        if self.root == "/" || archive_path == self.root {
-            return Ok(());
-        }
-        let prefix = format!("{}/", self.root.trim_end_matches('/'));
-        if archive_path.starts_with(&prefix) {
-            Ok(())
-        } else {
-            Err(VfsError::new(
-                "EXDEV",
-                format!("tar path resolved outside mounted subtree: {archive_path}"),
-            ))
-        }
-    }
-
-    fn resolve_path(&self, path: &str, follow_final_symlink: bool) -> VfsResult<String> {
-        let normalized = self.to_archive_path(path);
-        if normalized == "/" {
-            return Ok(normalized);
-        }
-
-        let mut pending = path_components(&normalized);
-        let mut current = String::from("/");
-        let mut followed = 0usize;
-
-        while let Some(component) = pending.pop_front() {
-            let candidate = join_path(&current, &component);
-            let node = self.archive.node(&candidate)?;
-            let should_follow = follow_final_symlink || !pending.is_empty();
-
-            if should_follow {
-                if let TarNodeKind::Symlink { target } = &node.kind {
-                    followed += 1;
-                    if followed > MAX_TAR_SYMLINKS {
-                        return Err(VfsError::new(
-                            "ELOOP",
-                            format!("too many levels of symbolic links, '{path}'"),
-                        ));
-                    }
-                    let target_path = if target.starts_with('/') {
-                        normalize_path(target)
-                    } else {
-                        normalize_path(&format!("{}/{}", parent_path(&candidate), target))
-                    };
-                    ensure_archive_path(&target_path)?;
-                    let mut target_components = path_components(&target_path);
-                    target_components.extend(pending);
-                    pending = target_components;
-                    current = String::from("/");
-                    continue;
-                }
-            }
-
-            if !pending.is_empty() && !matches!(node.kind, TarNodeKind::Directory) {
-                return Err(VfsError::new(
-                    "ENOTDIR",
-                    format!("not a directory, realpath '{candidate}'"),
-                ));
-            }
-
-            current = candidate;
-        }
-
-        self.ensure_within_root(&current)?;
-        Ok(current)
-    }
-
-    fn readonly_error(op: &str, path: &str) -> VfsError {
-        VfsError::new("EROFS", format!("read-only tar filesystem, {op} '{path}'"))
-    }
-}
-
-impl VirtualFileSystem for TarFileSystem {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        let resolved = self.resolve_path(path, true)?;
-        let node = self.archive.node(&resolved)?;
-        let TarNodeKind::File { offset, size } = node.kind else {
-            return Err(if matches!(node.kind, TarNodeKind::Directory) {
-                VfsError::new(
-                    "EISDIR",
-                    format!("illegal operation on a directory, read '{path}'"),
-                )
-            } else {
-                VfsError::new("EINVAL", format!("not a regular file, read '{path}'"))
-            });
-        };
-        self.archive.validate_backing_file()?;
-        let start = usize::try_from(offset)
-            .map_err(|_| VfsError::new("EOVERFLOW", format!("tar offset too large: {offset}")))?;
-        let len = usize::try_from(size)
-            .map_err(|_| VfsError::new("EOVERFLOW", format!("tar member too large: {size}")))?;
-        let end = start
-            .checked_add(len)
-            .ok_or_else(|| VfsError::new("EOVERFLOW", "tar member byte range overflows usize"))?;
-        if end > self.archive.mmap.len() {
-            return Err(VfsError::new(
-                "EIO",
-                format!(
-                    "tar member range exceeds archive size: offset {offset} bytes + size {size} bytes > {} bytes",
-                    self.archive.mmap.len()
-                ),
-            ));
-        }
-        Ok(self.archive.mmap[start..end].to_vec())
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        Ok(self
-            .read_dir_with_types(path)?
-            .into_iter()
-            .map(|entry| entry.name)
-            .collect())
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        let resolved = self.resolve_path(path, true)?;
-        let node = self.archive.node(&resolved)?;
-        if !matches!(node.kind, TarNodeKind::Directory) {
-            return Err(VfsError::new(
-                "ENOTDIR",
-                format!("not a directory, readdir '{path}'"),
-            ));
-        }
-
-        let children = self
-            .archive
-            .children
-            .get(&resolved)
-            .cloned()
-            .unwrap_or_default();
-        Ok(children
-            .into_iter()
-            .filter_map(|name| {
-                let child_path = join_path(&resolved, &name);
-                self.archive
-                    .nodes
-                    .get(&child_path)
-                    .map(|child| VirtualDirEntry {
-                        name,
-                        is_directory: matches!(child.kind, TarNodeKind::Directory),
-                        is_symbolic_link: matches!(child.kind, TarNodeKind::Symlink { .. }),
-                    })
-            })
-            .collect())
-    }
-
-    fn write_file(&mut self, path: &str, _content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        Err(Self::readonly_error("write", path))
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        Err(Self::readonly_error("mkdir", path))
-    }
-
-    fn mkdir(&mut self, path: &str, _recursive: bool) -> VfsResult<()> {
-        Err(Self::readonly_error("mkdir", path))
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        self.resolve_path(path, true)
-            .map(|resolved| self.archive.nodes.contains_key(&resolved))
-            .unwrap_or(false)
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        let resolved = self.resolve_path(path, true)?;
-        Ok(self.archive.node(&resolved)?.stat())
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        Err(Self::readonly_error("unlink", path))
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        Err(Self::readonly_error("rmdir", path))
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only tar filesystem, rename '{old_path}' to '{new_path}'"),
-        ))
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        let resolved = self.resolve_path(path, true)?;
-        self.to_guest_path(&resolved)
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only tar filesystem, symlink '{link_path}' -> '{target}'"),
-        ))
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        let normalized = self.resolve_path(path, false)?;
-        match &self.archive.node(&normalized)?.kind {
-            TarNodeKind::Symlink { target } => Ok(target.clone()),
-            _ => Err(VfsError::new(
-                "EINVAL",
-                format!("not a symlink, readlink '{path}'"),
-            )),
-        }
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        let normalized = self.resolve_path(path, false)?;
-        Ok(self.archive.node(&normalized)?.stat())
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        Err(VfsError::new(
-            "EROFS",
-            format!("read-only tar filesystem, link '{old_path}' to '{new_path}'"),
-        ))
-    }
-
-    fn chmod(&mut self, path: &str, _mode: u32) -> VfsResult<()> {
-        Err(Self::readonly_error("chmod", path))
-    }
-
-    fn chown(&mut self, path: &str, _uid: u32, _gid: u32) -> VfsResult<()> {
-        Err(Self::readonly_error("chown", path))
-    }
-
-    fn utimes(&mut self, path: &str, _atime_ms: u64, _mtime_ms: u64) -> VfsResult<()> {
-        Err(Self::readonly_error("utimes", path))
-    }
-
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        _atime: VirtualUtimeSpec,
-        _mtime: VirtualUtimeSpec,
-        _follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        Err(Self::readonly_error("utimes", path))
-    }
-
-    fn truncate(&mut self, path: &str, _length: u64) -> VfsResult<()> {
-        Err(Self::readonly_error("truncate", path))
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        let content = self.read_file(path)?;
-        let start = usize::try_from(offset)
-            .map_err(|_| VfsError::new("EOVERFLOW", format!("pread offset too large: {offset}")))?;
-        if start >= content.len() {
-            return Ok(Vec::new());
-        }
-        let end = start.saturating_add(length).min(content.len());
-        Ok(content[start..end].to_vec())
-    }
-}
-
-struct CachedTarArchive {
-    digest: String,
-    path: PathBuf,
-    file: File,
-    mmap: Mmap,
-    identity: FileIdentity,
-    nodes: BTreeMap<String, TarNode>,
-    children: BTreeMap<String, BTreeSet<String>>,
-}
-
-impl CachedTarArchive {
-    fn node(&self, path: &str) -> VfsResult<&TarNode> {
-        self.nodes
-            .get(path)
-            .ok_or_else(|| VfsError::new("ENOENT", format!("no such file or directory, '{path}'")))
-    }
-
-    fn validate_backing_file(&self) -> VfsResult<()> {
-        let current = FileIdentity::from_file(&self.file)?;
-        if current != self.identity {
-            return Err(VfsError::new(
-                "ESTALE",
-                format!(
-                    "tar archive backing file changed while mounted: {}",
-                    self.path.display()
-                ),
-            ));
-        }
-        Ok(())
-    }
-}
-
-#[derive(Debug, Clone)]
-struct TarNode {
-    kind: TarNodeKind,
-    mode: u32,
-    uid: u32,
-    gid: u32,
-    mtime_ms: u64,
-    ino: u64,
-    dev: u64,
-}
-
-impl TarNode {
-    fn stat(&self) -> VirtualStat {
-        let size = match &self.kind {
-            TarNodeKind::File { size, .. } => *size,
-            TarNodeKind::Directory => 4096,
-            TarNodeKind::Symlink { target } => target.len() as u64,
-        };
-        VirtualStat {
-            mode: self.mode,
-            size,
-            blocks: size.div_ceil(512),
-            dev: self.dev,
-            rdev: 0,
-            is_directory: matches!(self.kind, TarNodeKind::Directory),
-            is_symbolic_link: matches!(self.kind, TarNodeKind::Symlink { .. }),
-            atime_ms: self.mtime_ms,
-            atime_nsec: 0,
-            mtime_ms: self.mtime_ms,
-            mtime_nsec: 0,
-            ctime_ms: self.mtime_ms,
-            ctime_nsec: 0,
-            birthtime_ms: self.mtime_ms,
-            ino: self.ino,
-            nlink: 1,
-            uid: self.uid,
-            gid: self.gid,
-        }
-    }
-}
-
-#[derive(Debug, Clone)]
-enum TarNodeKind {
-    File { offset: u64, size: u64 },
-    Directory,
-    Symlink { target: String },
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-struct FileIdentity {
-    len: u64,
-    modified_ms: u128,
-    #[cfg(unix)]
-    dev: u64,
-    #[cfg(unix)]
-    ino: u64,
-}
-
-impl FileIdentity {
-    fn from_file(file: &File) -> VfsResult<Self> {
-        Self::from_metadata(file.metadata().map_err(io_to_vfs)?)
-    }
-
-    fn from_metadata(metadata: std::fs::Metadata) -> VfsResult<Self> {
-        let modified_ms = metadata
-            .modified()
-            .ok()
-            .and_then(|time| time.duration_since(std::time::UNIX_EPOCH).ok())
-            .map(|duration| duration.as_millis())
-            .unwrap_or_default();
-        Ok(Self {
-            len: metadata.len(),
-            modified_ms,
-            #[cfg(unix)]
-            dev: {
-                use std::os::unix::fs::MetadataExt;
-                metadata.dev()
-            },
-            #[cfg(unix)]
-            ino: {
-                use std::os::unix::fs::MetadataExt;
-                metadata.ino()
-            },
-        })
-    }
-}
-
-fn cached_archive(path: PathBuf, digest: String) -> VfsResult<Arc<CachedTarArchive>> {
-    let cache = archive_cache();
-    let mut guard = cache
-        .lock()
-        .map_err(|_| VfsError::new("EIO", "tar archive cache mutex poisoned"))?;
-
-    if let Some(existing) = guard.archives.get(&digest).and_then(Weak::upgrade) {
-        if existing.path == path {
-            return Ok(existing);
-        }
-        return Err(VfsError::new(
-            "EINVAL",
-            format!(
-                "tar digest collision or moved source: digest {digest} already maps to {} not {}",
-                existing.path.display(),
-                path.display()
-            ),
-        ));
-    }
-
-    guard.archives.retain(|key, weak| {
-        let live = weak.strong_count() > 0;
-        if !live {
-            tracing::warn!(
-                digest = key.as_str(),
-                "evicting unused tar archive cache entry"
-            );
-        }
-        live
-    });
-
-    if guard.archives.len() >= MAX_TAR_CACHE_ARCHIVES {
-        return Err(VfsError::new(
-            "ENOMEM",
-            format!(
-                "tar archive cache entries exceeded: {} entries > {} entries (raise via invariant.tarArchiveCacheEntries)",
-                guard.archives.len() + 1,
-                MAX_TAR_CACHE_ARCHIVES
-            ),
-        ));
-    }
-
-    let archive = Arc::new(load_archive(&path, digest.clone())?);
-    guard.archives.insert(digest, Arc::downgrade(&archive));
-    Ok(archive)
-}
-
-fn archive_cache() -> &'static Mutex<TarArchiveCache> {
-    static CACHE: OnceLock<Mutex<TarArchiveCache>> = OnceLock::new();
-    CACHE.get_or_init(|| Mutex::new(TarArchiveCache::default()))
-}
-
-#[derive(Default)]
-struct TarArchiveCache {
-    archives: BTreeMap<String, Weak<CachedTarArchive>>,
-}
-
-fn load_archive(path: &Path, digest: String) -> VfsResult<CachedTarArchive> {
-    let file = File::open(path).map_err(io_to_vfs)?;
-    let identity = FileIdentity::from_file(&file)?;
-    let mmap = unsafe {
-        // SAFETY: TarFileSystem is only constructed for immutable package tar
-        // artifacts. We hold the opened file for the lifetime of the mmap and
-        // validate size/identity before reading from mapped member ranges. A
-        // caller that truncates the same inode while a VM is live violates the
-        // package-store lifecycle documented on TarFileSystem.
-        Mmap::map(&file)
-    }
-    .map_err(io_to_vfs)?;
-
-    let mut archive = tar::Archive::new(file.try_clone().map_err(io_to_vfs)?);
-    let mut nodes = BTreeMap::new();
-    let mut children = BTreeMap::<String, BTreeSet<String>>::new();
-    let dev = digest_device(&digest);
-    let mut next_ino = 1u64;
-
-    nodes.insert(
-        String::from("/"),
-        TarNode {
-            kind: TarNodeKind::Directory,
-            mode: S_IFDIR | 0o755,
-            uid: 0,
-            gid: 0,
-            mtime_ms: 0,
-            ino: next_ino,
-            dev,
-        },
-    );
-    next_ino += 1;
-    children.entry(String::from("/")).or_default();
-
-    let entries = archive.entries().map_err(io_to_vfs)?;
-    for entry in entries {
-        let entry = entry.map_err(io_to_vfs)?;
-        let path = normalize_tar_member_path(&entry)?;
-        if path == "/" {
-            continue;
-        }
-        ensure_index_capacity(nodes.len() + 1)?;
-        synthesize_parent_dirs(&path, dev, &mut next_ino, &mut nodes, &mut children)?;
-
-        let header = entry.header();
-        let entry_type = header.entry_type();
-        let mode = header.mode().unwrap_or(0o755);
-        let uid = header.uid().unwrap_or(0) as u32;
-        let gid = header.gid().unwrap_or(0) as u32;
-        let mtime_ms = header.mtime().unwrap_or(0).saturating_mul(1_000);
-        let kind = if entry_type.is_dir() {
-            TarNodeKind::Directory
-        } else if entry_type.is_symlink() {
-            let target = entry
-                .link_name()
-                .map_err(io_to_vfs)?
-                .ok_or_else(|| VfsError::new("EINVAL", format!("missing linkname for {path}")))?
-                .to_string_lossy()
-                .into_owned();
-            TarNodeKind::Symlink { target }
-        } else if entry_type.is_file() || entry_type == EntryType::Continuous {
-            TarNodeKind::File {
-                offset: entry.raw_file_position(),
-                size: header.size().map_err(io_to_vfs)?,
-            }
-        } else {
-            continue;
-        };
-
-        let mode = match kind {
-            TarNodeKind::Directory => S_IFDIR | (mode & 0o7777),
-            TarNodeKind::File { .. } => S_IFREG | (mode & 0o7777),
-            TarNodeKind::Symlink { .. } => S_IFLNK | (mode & 0o7777).max(0o777),
-        };
-        nodes.insert(
-            path.clone(),
-            TarNode {
-                kind,
-                mode,
-                uid,
-                gid,
-                mtime_ms,
-                ino: next_ino,
-                dev,
-            },
-        );
-        next_ino += 1;
-        add_child(&path, &mut children);
-        if matches!(
-            nodes.get(&path).map(|node| &node.kind),
-            Some(TarNodeKind::Directory)
-        ) {
-            children.entry(path).or_default();
-        }
-    }
-
-    Ok(CachedTarArchive {
-        digest,
-        path: path.to_path_buf(),
-        file,
-        mmap,
-        identity,
-        nodes,
-        children,
-    })
-}
-
-fn synthesize_parent_dirs(
-    path: &str,
-    dev: u64,
-    next_ino: &mut u64,
-    nodes: &mut BTreeMap<String, TarNode>,
-    children: &mut BTreeMap<String, BTreeSet<String>>,
-) -> VfsResult<()> {
-    let mut current = String::from("/");
-    let components = path_components(path);
-    let parent_count = components.len().saturating_sub(1);
-    for component in components.into_iter().take(parent_count) {
-        let parent = current.clone();
-        current = join_path(&current, &component);
-        if !nodes.contains_key(&current) {
-            ensure_index_capacity(nodes.len() + 1)?;
-            nodes.insert(
-                current.clone(),
-                TarNode {
-                    kind: TarNodeKind::Directory,
-                    mode: S_IFDIR | 0o755,
-                    uid: 0,
-                    gid: 0,
-                    mtime_ms: 0,
-                    ino: *next_ino,
-                    dev,
-                },
-            );
-            *next_ino += 1;
-        }
-        children.entry(parent).or_default().insert(component);
-        children.entry(current.clone()).or_default();
-    }
-    Ok(())
-}
-
-fn add_child(path: &str, children: &mut BTreeMap<String, BTreeSet<String>>) {
-    let parent = parent_path(path);
-    let name = basename(path);
-    children.entry(parent).or_default().insert(name);
-}
-
-fn ensure_index_capacity(observed: usize) -> VfsResult<()> {
-    if observed > MAX_TAR_INDEX_ENTRIES {
-        return Err(VfsError::new(
-            "ENOMEM",
-            format!(
-                "tar filesystem index entries exceeded: {observed} entries > {MAX_TAR_INDEX_ENTRIES} entries (raise via invariant.tarFilesystemIndexEntries)"
-            ),
-        ));
-    }
-    Ok(())
-}
-
-fn normalize_tar_member_path(entry: &tar::Entry<'_, File>) -> VfsResult<String> {
-    let path = entry.path().map_err(io_to_vfs)?;
-    let mut parts = Vec::new();
-    for component in path.components() {
-        match component {
-            Component::Normal(value) => parts.push(value.to_string_lossy().into_owned()),
-            Component::CurDir => {}
-            Component::RootDir | Component::Prefix(_) | Component::ParentDir => {
-                return Err(VfsError::new(
-                    "EINVAL",
-                    format!("tar member path escapes archive root: {}", path.display()),
-                ));
-            }
-        }
-    }
-    if parts.is_empty() {
-        Ok(String::from("/"))
-    } else {
-        Ok(format!("/{}", parts.join("/")))
-    }
-}
-
-fn ensure_archive_path(path: &str) -> VfsResult<()> {
-    let normalized = normalize_path(path);
-    if normalized != path {
-        return Err(VfsError::new(
-            "EINVAL",
-            format!("path normalization mismatch in tar filesystem: {path}"),
-        ));
-    }
-    Ok(())
-}
-
-fn path_components(path: &str) -> std::collections::VecDeque<String> {
-    normalize_path(path)
-        .split('/')
-        .filter(|part| !part.is_empty())
-        .map(String::from)
-        .collect()
-}
-
-fn join_path(parent: &str, child: &str) -> String {
-    if parent == "/" {
-        format!("/{child}")
-    } else {
-        format!("{parent}/{child}")
-    }
-}
-
-fn parent_path(path: &str) -> String {
-    let normalized = normalize_path(path);
-    let parent = Path::new(&normalized)
-        .parent()
-        .unwrap_or_else(|| Path::new("/"));
-    let value = parent.to_string_lossy();
-    if value.is_empty() {
-        String::from("/")
-    } else {
-        value.into_owned()
-    }
-}
-
-fn basename(path: &str) -> String {
-    let normalized = normalize_path(path);
-    Path::new(&normalized)
-        .file_name()
-        .map(|name| name.to_string_lossy().into_owned())
-        .unwrap_or_else(|| String::from("/"))
-}
-
-fn digest_device(digest: &str) -> u64 {
-    let mut hasher = std::collections::hash_map::DefaultHasher::new();
-    digest.hash(&mut hasher);
-    hasher.finish().max(1)
-}
-
-fn io_to_vfs(error: io::Error) -> VfsError {
-    let code = match error.kind() {
-        io::ErrorKind::NotFound => "ENOENT",
-        io::ErrorKind::PermissionDenied => "EACCES",
-        io::ErrorKind::AlreadyExists => "EEXIST",
-        io::ErrorKind::InvalidInput | io::ErrorKind::InvalidData => "EINVAL",
-        io::ErrorKind::UnexpectedEof => "EIO",
-        _ => "EIO",
-    };
-    VfsError::new(code, error.to_string())
-}
diff --git a/crates/vfs/src/posix/usage.rs b/crates/vfs/src/posix/usage.rs
deleted file mode 100644
index 9d0fc06c3..000000000
--- a/crates/vfs/src/posix/usage.rs
+++ /dev/null
@@ -1,60 +0,0 @@
-use super::vfs::{VfsResult, VirtualFileSystem};
-use std::collections::BTreeSet;
-
-pub const DEFAULT_MAX_FILESYSTEM_BYTES: u64 = 64 * 1024 * 1024;
-pub const DEFAULT_MAX_INODE_COUNT: usize = 16_384;
-
-#[derive(Debug, Clone, PartialEq, Eq, Default)]
-pub struct FileSystemUsage {
-    pub total_bytes: u64,
-    pub inode_count: usize,
-}
-
-pub trait RootFilesystemResourceLimits {
-    fn max_filesystem_bytes(&self) -> Option<u64>;
-    fn max_inode_count(&self) -> Option<usize>;
-}
-
-pub fn measure_filesystem_usage<F: VirtualFileSystem>(
-    filesystem: &mut F,
-) -> VfsResult<FileSystemUsage> {
-    let mut visited = BTreeSet::new();
-    measure_path_usage(filesystem, "/", &mut visited)
-}
-
-fn measure_path_usage<F: VirtualFileSystem>(
-    filesystem: &mut F,
-    path: &str,
-    visited: &mut BTreeSet<u64>,
-) -> VfsResult<FileSystemUsage> {
-    let stat = filesystem.lstat(path)?;
-    let mut usage = FileSystemUsage::default();
-
-    if visited.insert(stat.ino) {
-        usage.inode_count += 1;
-        if !stat.is_directory {
-            usage.total_bytes = usage.total_bytes.saturating_add(stat.size);
-        }
-    }
-
-    if !stat.is_directory || stat.is_symbolic_link {
-        return Ok(usage);
-    }
-
-    for entry in filesystem.read_dir_with_types(path)? {
-        if matches!(entry.name.as_str(), "." | "..") {
-            continue;
-        }
-
-        let child_path = if path == "/" {
-            format!("/{}", entry.name)
-        } else {
-            format!("{path}/{}", entry.name)
-        };
-        let child_usage = measure_path_usage(filesystem, &child_path, visited)?;
-        usage.total_bytes = usage.total_bytes.saturating_add(child_usage.total_bytes);
-        usage.inode_count = usage.inode_count.saturating_add(child_usage.inode_count);
-    }
-
-    Ok(usage)
-}
diff --git a/crates/vfs/src/posix/vfs.rs b/crates/vfs/src/posix/vfs.rs
deleted file mode 100644
index dbad5203c..000000000
--- a/crates/vfs/src/posix/vfs.rs
+++ /dev/null
@@ -1,1526 +0,0 @@
-use serde::{Deserialize, Serialize};
-use std::collections::BTreeMap;
-use std::error::Error;
-use std::fmt;
-use std::sync::atomic::{AtomicU64, Ordering};
-use web_time::{SystemTime, UNIX_EPOCH};
-
-pub const S_IFREG: u32 = 0o100000;
-pub const S_IFDIR: u32 = 0o040000;
-pub const S_IFLNK: u32 = 0o120000;
-
-// Each MemoryFileSystem instance gets its own device id, like a Linux
-// superblock. Inode numbers are only unique within one instance, so layered
-// or mounted compositions need distinct dev values for (dev, ino) file
-// identity comparisons to be meaningful. The counter starts above the small
-// constants reserved for synthetic device and pipe stats.
-static NEXT_MEMORY_FILESYSTEM_DEVICE_ID: AtomicU64 = AtomicU64::new(256);
-
-fn allocate_memory_filesystem_device_id() -> u64 {
-    NEXT_MEMORY_FILESYSTEM_DEVICE_ID.fetch_add(1, Ordering::Relaxed)
-}
-
-const DEFAULT_UID: u32 = 1000;
-const DEFAULT_GID: u32 = 1000;
-const DIRECTORY_SIZE: u64 = 4096;
-pub const MAX_PATH_LENGTH: usize = 4096;
-const MAX_SYMLINK_DEPTH: usize = 40;
-
-pub type VfsResult<T> = Result<T, VfsError>;
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct VfsError {
-    code: &'static str,
-    message: String,
-}
-
-impl VfsError {
-    pub fn new(code: &'static str, message: impl Into<String>) -> Self {
-        Self {
-            code,
-            message: message.into(),
-        }
-    }
-
-    pub fn io(message: impl Into<String>) -> Self {
-        Self::new("EIO", message)
-    }
-
-    pub fn unsupported(message: impl Into<String>) -> Self {
-        Self::new("ENOSYS", message)
-    }
-
-    pub fn code(&self) -> &'static str {
-        self.code
-    }
-
-    pub fn message(&self) -> &str {
-        &self.message
-    }
-
-    fn not_found(op: &'static str, path: &str) -> Self {
-        Self::new(
-            "ENOENT",
-            format!("no such file or directory, {op} '{path}'"),
-        )
-    }
-
-    fn already_exists(op: &'static str, path: &str) -> Self {
-        Self::new("EEXIST", format!("file already exists, {op} '{path}'"))
-    }
-
-    fn is_directory(op: &'static str, path: &str) -> Self {
-        Self::new(
-            "EISDIR",
-            format!("illegal operation on a directory, {op} '{path}'"),
-        )
-    }
-
-    fn not_directory(op: &'static str, path: &str) -> Self {
-        Self::new("ENOTDIR", format!("not a directory, {op} '{path}'"))
-    }
-
-    fn path_too_long(path: &str) -> Self {
-        Self::new("ENAMETOOLONG", format!("file name too long: {path}"))
-    }
-
-    fn not_empty(path: &str) -> Self {
-        Self::new("ENOTEMPTY", format!("directory not empty, rmdir '{path}'"))
-    }
-
-    pub fn permission_denied(op: &'static str, path: &str) -> Self {
-        Self::new("EPERM", format!("operation not permitted, {op} '{path}'"))
-    }
-
-    pub fn access_denied(op: &'static str, path: &str, reason: Option<&str>) -> Self {
-        let message = match reason {
-            Some(reason) => format!("permission denied, {op} '{path}': {reason}"),
-            None => format!("permission denied, {op} '{path}'"),
-        };
-
-        Self::new("EACCES", message)
-    }
-
-    fn symlink_loop(path: &str) -> Self {
-        Self::new(
-            "ELOOP",
-            format!("too many levels of symbolic links, '{path}'"),
-        )
-    }
-
-    fn invalid_input(message: impl Into<String>) -> Self {
-        Self::new("EINVAL", message)
-    }
-
-    fn invalid_utf8(path: &str) -> Self {
-        Self::new("EINVAL", format!("file contains invalid UTF-8, '{path}'"))
-    }
-}
-
-impl fmt::Display for VfsError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}: {}", self.code, self.message)
-    }
-}
-
-impl Error for VfsError {}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum FileType {
-    File,
-    Directory,
-    SymbolicLink,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct VirtualDirEntry {
-    pub name: String,
-    pub is_directory: bool,
-    pub is_symbolic_link: bool,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct VirtualStat {
-    pub mode: u32,
-    pub size: u64,
-    pub blocks: u64,
-    pub dev: u64,
-    pub rdev: u64,
-    pub is_directory: bool,
-    pub is_symbolic_link: bool,
-    pub atime_ms: u64,
-    pub atime_nsec: u32,
-    pub mtime_ms: u64,
-    pub mtime_nsec: u32,
-    pub ctime_ms: u64,
-    pub ctime_nsec: u32,
-    pub birthtime_ms: u64,
-    pub ino: u64,
-    pub nlink: u64,
-    pub uid: u32,
-    pub gid: u32,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize)]
-pub struct VirtualTimeSpec {
-    pub sec: i64,
-    pub nsec: u32,
-}
-
-impl VirtualTimeSpec {
-    pub fn new(sec: i64, nsec: u32) -> VfsResult<Self> {
-        if nsec >= 1_000_000_000 {
-            return Err(VfsError::new(
-                "EINVAL",
-                format!("timespec nanoseconds out of range: {nsec}"),
-            ));
-        }
-        Ok(Self { sec, nsec })
-    }
-
-    pub fn from_millis(ms: u64) -> Self {
-        Self {
-            sec: (ms / 1_000) as i64,
-            nsec: ((ms % 1_000) * 1_000_000) as u32,
-        }
-    }
-
-    pub fn to_truncated_millis(self) -> VfsResult<u64> {
-        if self.sec < 0 {
-            return Err(VfsError::new(
-                "EINVAL",
-                format!(
-                    "negative timestamps are not supported by this filesystem: {}",
-                    self.sec
-                ),
-            ));
-        }
-        let seconds = u64::try_from(self.sec).map_err(|_| {
-            VfsError::new("EINVAL", format!("timestamp is out of range: {}", self.sec))
-        })?;
-        Ok(seconds.saturating_mul(1_000) + (self.nsec as u64 / 1_000_000))
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum VirtualUtimeSpec {
-    Set(VirtualTimeSpec),
-    Now,
-    Omit,
-}
-
-pub trait VirtualFileSystem {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>>;
-    fn read_text_file(&mut self, path: &str) -> VfsResult<String> {
-        String::from_utf8(self.read_file(path)?).map_err(|_| VfsError::invalid_utf8(path))
-    }
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>>;
-    fn read_dir_limited(&mut self, path: &str, max_entries: usize) -> VfsResult<Vec<String>> {
-        let entries = self.read_dir(path)?;
-        if entries.len() > max_entries {
-            return Err(VfsError::new(
-                "ENOMEM",
-                format!(
-                    "directory listing for '{path}' exceeds configured limit of {max_entries} entries"
-                ),
-            ));
-        }
-        Ok(entries)
-    }
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>>;
-    /// Writes caller-owned bytes into the filesystem.
-    ///
-    /// This raw VFS primitive does not enforce VM resource policy. Kernel entry
-    /// points must preflight file sizes and inode growth before calling it.
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()>;
-    fn write_file_with_mode(
-        &mut self,
-        path: &str,
-        content: impl Into<Vec<u8>>,
-        mode: Option<u32>,
-    ) -> VfsResult<()> {
-        let _ = mode;
-        self.write_file(path, content)
-    }
-    fn create_file_exclusive(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        let content = content.into();
-        if self.exists(path) {
-            return Err(VfsError::already_exists("open", path));
-        }
-        self.write_file(path, content)
-    }
-    fn create_file_exclusive_with_mode(
-        &mut self,
-        path: &str,
-        content: impl Into<Vec<u8>>,
-        mode: Option<u32>,
-    ) -> VfsResult<()> {
-        let _ = mode;
-        self.create_file_exclusive(path, content)
-    }
-    /// Appends caller-owned bytes into the filesystem after checking that the
-    /// in-memory file can grow without overflowing addressable memory.
-    fn append_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<u64> {
-        let content = content.into();
-        let mut existing = self.read_file(path)?;
-        reserve_file_growth(&mut existing, content.len())?;
-        existing.extend_from_slice(&content);
-        let new_len = existing.len() as u64;
-        self.write_file(path, existing)?;
-        Ok(new_len)
-    }
-    fn create_dir(&mut self, path: &str) -> VfsResult<()>;
-    fn create_dir_with_mode(&mut self, path: &str, mode: Option<u32>) -> VfsResult<()> {
-        let _ = mode;
-        self.create_dir(path)
-    }
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()>;
-    fn mkdir_with_mode(&mut self, path: &str, recursive: bool, mode: Option<u32>) -> VfsResult<()> {
-        let _ = mode;
-        self.mkdir(path, recursive)
-    }
-    fn exists(&self, path: &str) -> bool;
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat>;
-    fn remove_file(&mut self, path: &str) -> VfsResult<()>;
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()>;
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()>;
-    fn realpath(&self, path: &str) -> VfsResult<String>;
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()>;
-    fn read_link(&self, path: &str) -> VfsResult<String>;
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat>;
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()>;
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()>;
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()>;
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()>;
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-        follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        if !follow_symlinks {
-            return Err(VfsError::unsupported(format!(
-                "lutimes is not supported for '{path}'"
-            )));
-        }
-        let existing = match (atime, mtime) {
-            (VirtualUtimeSpec::Omit, _) | (_, VirtualUtimeSpec::Omit) => Some(self.stat(path)?),
-            _ => None,
-        };
-        let now = now_ms();
-        let atime_ms = resolve_utime_millis(
-            atime,
-            now,
-            existing.as_ref().map(|stat| VirtualTimeSpec {
-                sec: (stat.atime_ms / 1_000) as i64,
-                nsec: stat.atime_nsec,
-            }),
-        )?;
-        let mtime_ms = resolve_utime_millis(
-            mtime,
-            now,
-            existing.as_ref().map(|stat| VirtualTimeSpec {
-                sec: (stat.mtime_ms / 1_000) as i64,
-                nsec: stat.mtime_nsec,
-            }),
-        )?;
-        self.utimes(path, atime_ms, mtime_ms)
-    }
-    /// Resizes a file. VM resource policy must be enforced by the caller.
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()>;
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>>;
-    /// Writes caller-owned bytes at an offset after checking that the in-memory
-    /// file can grow without overflowing addressable memory.
-    fn pwrite(&mut self, path: &str, content: impl Into<Vec<u8>>, offset: u64) -> VfsResult<()> {
-        let content = content.into();
-        let mut existing = self.read_file(path)?;
-        let start = checked_file_len(offset, "pwrite offset")?;
-        if start > existing.len() {
-            resize_file_data(&mut existing, start)?;
-        }
-        let end = start.checked_add(content.len()).ok_or_else(|| {
-            VfsError::new(
-                "ENOMEM",
-                format!(
-                    "pwrite result length overflows addressable memory: offset {offset}, content length {}",
-                    content.len()
-                ),
-            )
-        })?;
-        if end > existing.len() {
-            resize_file_data(&mut existing, end)?;
-        }
-        existing[start..end].copy_from_slice(&content);
-        self.write_file(path, existing)
-    }
-}
-
-#[derive(Debug, Clone)]
-struct Metadata {
-    mode: u32,
-    uid: u32,
-    gid: u32,
-    nlink: u64,
-    ino: u64,
-    atime_ms: u64,
-    atime_nsec: u32,
-    mtime_ms: u64,
-    mtime_nsec: u32,
-    ctime_ms: u64,
-    ctime_nsec: u32,
-    birthtime_ms: u64,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct MemoryFileSystemSnapshotMetadata {
-    pub mode: u32,
-    pub uid: u32,
-    pub gid: u32,
-    pub nlink: u64,
-    pub ino: u64,
-    pub atime_ms: u64,
-    #[serde(default)]
-    pub atime_nsec: u32,
-    pub mtime_ms: u64,
-    #[serde(default)]
-    pub mtime_nsec: u32,
-    pub ctime_ms: u64,
-    #[serde(default)]
-    pub ctime_nsec: u32,
-    pub birthtime_ms: u64,
-}
-
-#[derive(Debug, Clone)]
-enum InodeKind {
-    File { data: Vec<u8> },
-    Directory,
-    SymbolicLink { target: String },
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub enum MemoryFileSystemSnapshotInodeKind {
-    File { data: Vec<u8> },
-    Directory,
-    SymbolicLink { target: String },
-}
-
-#[derive(Debug, Clone)]
-struct Inode {
-    metadata: Metadata,
-    kind: InodeKind,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct MemoryFileSystemSnapshotInode {
-    pub metadata: MemoryFileSystemSnapshotMetadata,
-    pub kind: MemoryFileSystemSnapshotInodeKind,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize)]
-pub struct MemoryFileSystemSnapshot {
-    pub path_index: BTreeMap<String, u64>,
-    pub inodes: BTreeMap<u64, MemoryFileSystemSnapshotInode>,
-    pub next_ino: u64,
-}
-
-#[derive(Debug)]
-pub struct MemoryFileSystem {
-    device_id: u64,
-    path_index: BTreeMap<String, u64>,
-    inodes: BTreeMap<u64, Inode>,
-    next_ino: u64,
-}
-
-impl MemoryFileSystem {
-    pub fn new() -> Self {
-        let mut filesystem = Self {
-            device_id: allocate_memory_filesystem_device_id(),
-            path_index: BTreeMap::new(),
-            inodes: BTreeMap::new(),
-            next_ino: 1,
-        };
-
-        let root_ino = filesystem.allocate_inode(InodeKind::Directory, S_IFDIR | 0o755);
-        filesystem.path_index.insert(String::from("/"), root_ino);
-        filesystem
-    }
-
-    pub fn read_dir_filtered_limited<F>(
-        &mut self,
-        path: &str,
-        max_entries: usize,
-        mut include: F,
-    ) -> VfsResult<Vec<String>>
-    where
-        F: FnMut(&str) -> bool,
-    {
-        self.assert_directory_path(path, "scandir")?;
-        let resolved = self.resolve_path(path, 0)?;
-        self.inode_mut_for_existing_path(&resolved, "scandir", false)?
-            .metadata
-            .atime_ms = now_ms();
-        let prefix = if resolved == "/" {
-            String::from("/")
-        } else {
-            format!("{resolved}/")
-        };
-
-        let mut entries = BTreeMap::<String, String>::new();
-        for (candidate_path, _) in self.path_index.range(prefix.clone()..) {
-            if !candidate_path.starts_with(&prefix) {
-                break;
-            }
-
-            let rest = &candidate_path[prefix.len()..];
-            if rest.is_empty() || rest.contains('/') || !include(rest) {
-                continue;
-            }
-
-            entries.insert(String::from(rest), String::from(rest));
-            if entries.len() > max_entries {
-                return Err(VfsError::new(
-                    "ENOMEM",
-                    format!(
-                        "directory listing for '{path}' exceeds configured limit of {max_entries} entries"
-                    ),
-                ));
-            }
-        }
-
-        Ok(entries.into_values().collect())
-    }
-
-    pub fn link_count_in_subtree(&self, ino: u64, path: &str) -> usize {
-        let normalized = normalize_path(path);
-        let prefix = if normalized == "/" {
-            String::from("/")
-        } else {
-            format!("{normalized}/")
-        };
-
-        self.path_index
-            .iter()
-            .filter(|(candidate_path, candidate_ino)| {
-                **candidate_ino == ino
-                    && (candidate_path.as_str() == normalized
-                        || candidate_path.starts_with(&prefix))
-            })
-            .count()
-    }
-
-    fn allocate_inode(&mut self, kind: InodeKind, mode: u32) -> u64 {
-        let ino = self.next_ino;
-        self.next_ino += 1;
-        let now = now_ms();
-        let nlink = if matches!(kind, InodeKind::Directory) {
-            2
-        } else {
-            1
-        };
-        self.inodes.insert(
-            ino,
-            Inode {
-                metadata: Metadata {
-                    mode,
-                    uid: DEFAULT_UID,
-                    gid: DEFAULT_GID,
-                    nlink,
-                    ino,
-                    atime_ms: now,
-                    atime_nsec: 0,
-                    mtime_ms: now,
-                    mtime_nsec: 0,
-                    ctime_ms: now,
-                    ctime_nsec: 0,
-                    birthtime_ms: now,
-                },
-                kind,
-            },
-        );
-        ino
-    }
-
-    pub fn symlink_with_metadata(
-        &mut self,
-        target: &str,
-        link_path: &str,
-        mode: u32,
-        uid: u32,
-        gid: u32,
-    ) -> VfsResult<()> {
-        let normalized = self.resolve_exact_path(link_path)?;
-        if self.path_index.contains_key(&normalized) {
-            return Err(VfsError::already_exists("symlink", link_path));
-        }
-
-        self.assert_directory_path(&dirname(&normalized), "symlink")?;
-        let ino = self.allocate_inode(
-            InodeKind::SymbolicLink {
-                target: String::from(target),
-            },
-            if mode & 0o170000 == 0 {
-                S_IFLNK | (mode & 0o7777)
-            } else {
-                mode
-            },
-        );
-        let inode = self
-            .inodes
-            .get_mut(&ino)
-            .expect("allocated inode should exist");
-        inode.metadata.uid = uid;
-        inode.metadata.gid = gid;
-        self.path_index.insert(normalized, ino);
-        Ok(())
-    }
-
-    fn resolve_path_with_options(
-        &self,
-        path: &str,
-        follow_final_symlink: bool,
-        depth: usize,
-    ) -> VfsResult<String> {
-        validate_path(path)?;
-        if depth > MAX_SYMLINK_DEPTH {
-            return Err(VfsError::symlink_loop(path));
-        }
-
-        let normalized = normalize_path(path);
-        if normalized == "/" {
-            return Ok(normalized);
-        }
-
-        let components: Vec<&str> = normalized
-            .split('/')
-            .filter(|part| !part.is_empty())
-            .collect();
-        let mut current = String::from("/");
-
-        for (index, component) in components.iter().enumerate() {
-            let candidate = if current == "/" {
-                format!("/{}", component)
-            } else {
-                format!("{current}/{}", component)
-            };
-            let is_final = index + 1 == components.len();
-            let should_follow = !is_final || follow_final_symlink;
-
-            if let Some(ino) = self.path_index.get(&candidate) {
-                let inode = self
-                    .inodes
-                    .get(ino)
-                    .expect("path index should always point at a valid inode");
-
-                if should_follow {
-                    if let InodeKind::SymbolicLink { target } = &inode.kind {
-                        let target_path = if target.starts_with('/') {
-                            target.clone()
-                        } else {
-                            normalize_path(&format!("{}/{}", dirname(&candidate), target))
-                        };
-                        let remainder = components[index + 1..].join("/");
-                        let next_path = if remainder.is_empty() {
-                            target_path
-                        } else {
-                            normalize_path(&format!("{target_path}/{remainder}"))
-                        };
-                        return self.resolve_path_with_options(
-                            &next_path,
-                            follow_final_symlink,
-                            depth + 1,
-                        );
-                    }
-                }
-
-                if !is_final && !matches!(inode.kind, InodeKind::Directory) {
-                    return Err(VfsError::not_directory("stat", &candidate));
-                }
-            }
-
-            current = candidate;
-        }
-
-        Ok(current)
-    }
-
-    fn resolve_path(&self, path: &str, depth: usize) -> VfsResult<String> {
-        self.resolve_path_with_options(path, true, depth)
-    }
-
-    fn resolve_exact_path(&self, path: &str) -> VfsResult<String> {
-        self.resolve_path_with_options(path, false, 0)
-    }
-
-    fn inode_id_for_existing_path(
-        &self,
-        path: &str,
-        op: &'static str,
-        follow_symlinks: bool,
-    ) -> VfsResult<u64> {
-        let normalized = normalize_path(path);
-        let resolved = if follow_symlinks {
-            self.resolve_path(&normalized, 0)?
-        } else {
-            self.resolve_exact_path(&normalized)?
-        };
-        self.path_index
-            .get(&resolved)
-            .copied()
-            .ok_or_else(|| VfsError::not_found(op, path))
-    }
-
-    fn inode_for_existing_path(
-        &self,
-        path: &str,
-        op: &'static str,
-        follow_symlinks: bool,
-    ) -> VfsResult<&Inode> {
-        let ino = self.inode_id_for_existing_path(path, op, follow_symlinks)?;
-        Ok(self
-            .inodes
-            .get(&ino)
-            .expect("existing path should resolve to a live inode"))
-    }
-
-    fn inode_mut_for_existing_path(
-        &mut self,
-        path: &str,
-        op: &'static str,
-        follow_symlinks: bool,
-    ) -> VfsResult<&mut Inode> {
-        let ino = self.inode_id_for_existing_path(path, op, follow_symlinks)?;
-        Ok(self
-            .inodes
-            .get_mut(&ino)
-            .expect("existing path should resolve to a live inode"))
-    }
-
-    fn assert_directory_path(&self, path: &str, op: &'static str) -> VfsResult<()> {
-        let inode = self.inode_for_existing_path(path, op, true)?;
-        if matches!(inode.kind, InodeKind::Directory) {
-            Ok(())
-        } else {
-            Err(VfsError::not_directory(op, path))
-        }
-    }
-
-    fn remove_exact_path(&mut self, path: &str) -> VfsResult<()> {
-        let normalized = self.resolve_exact_path(path)?;
-        let ino = self
-            .path_index
-            .get(&normalized)
-            .copied()
-            .ok_or_else(|| VfsError::not_found("unlink", path))?;
-        let inode = self
-            .inodes
-            .get(&ino)
-            .expect("existing path should resolve to a live inode");
-
-        if matches!(inode.kind, InodeKind::Directory) {
-            return Err(VfsError::is_directory("unlink", path));
-        }
-
-        self.inodes
-            .get_mut(&ino)
-            .expect("inode should exist when unlinking")
-            .metadata
-            .ctime_ms = now_ms();
-        self.path_index.remove(&normalized);
-        self.decrement_link_count(ino);
-        Ok(())
-    }
-
-    fn remove_existing_destination(&mut self, path: &str) -> VfsResult<()> {
-        let normalized = self.resolve_exact_path(path)?;
-        let Some(ino) = self.path_index.get(&normalized).copied() else {
-            return Ok(());
-        };
-
-        let inode = self
-            .inodes
-            .get(&ino)
-            .expect("existing path should resolve to a live inode");
-
-        if matches!(inode.kind, InodeKind::Directory) {
-            let prefix = format!("{normalized}/");
-            if self
-                .path_index
-                .keys()
-                .any(|candidate| candidate.starts_with(&prefix))
-            {
-                return Err(VfsError::not_empty(path));
-            }
-        }
-
-        self.inodes
-            .get_mut(&ino)
-            .expect("inode should exist when removing destination")
-            .metadata
-            .ctime_ms = now_ms();
-        self.path_index.remove(&normalized);
-        self.decrement_link_count(ino);
-        Ok(())
-    }
-
-    fn decrement_link_count(&mut self, ino: u64) {
-        let should_remove = {
-            let inode = self
-                .inodes
-                .get_mut(&ino)
-                .expect("inode should exist when decrementing link count");
-            inode.metadata.nlink = inode.metadata.nlink.saturating_sub(1);
-            inode.metadata.nlink == 0
-        };
-
-        if should_remove {
-            self.inodes.remove(&ino);
-        }
-    }
-
-    fn build_stat(&self, inode: &Inode) -> VirtualStat {
-        let size = match &inode.kind {
-            InodeKind::File { data } => data.len() as u64,
-            InodeKind::Directory => DIRECTORY_SIZE,
-            InodeKind::SymbolicLink { target } => target.len() as u64,
-        };
-
-        VirtualStat {
-            mode: inode.metadata.mode,
-            size,
-            blocks: block_count_for_size(size),
-            dev: self.device_id,
-            rdev: 0,
-            is_directory: matches!(inode.kind, InodeKind::Directory),
-            is_symbolic_link: matches!(inode.kind, InodeKind::SymbolicLink { .. }),
-            atime_ms: inode.metadata.atime_ms,
-            atime_nsec: inode.metadata.atime_nsec,
-            mtime_ms: inode.metadata.mtime_ms,
-            mtime_nsec: inode.metadata.mtime_nsec,
-            ctime_ms: inode.metadata.ctime_ms,
-            ctime_nsec: inode.metadata.ctime_nsec,
-            birthtime_ms: inode.metadata.birthtime_ms,
-            ino: inode.metadata.ino,
-            nlink: inode.metadata.nlink,
-            uid: inode.metadata.uid,
-            gid: inode.metadata.gid,
-        }
-    }
-
-    /// Clones the full in-memory filesystem state.
-    ///
-    /// Callers that expose snapshots outside the kernel must enforce their own
-    /// byte and inode limits before reaching this raw clone operation.
-    pub fn snapshot(&self) -> MemoryFileSystemSnapshot {
-        MemoryFileSystemSnapshot {
-            path_index: self.path_index.clone(),
-            inodes: self
-                .inodes
-                .iter()
-                .map(|(ino, inode)| {
-                    (
-                        *ino,
-                        MemoryFileSystemSnapshotInode {
-                            metadata: MemoryFileSystemSnapshotMetadata {
-                                mode: inode.metadata.mode,
-                                uid: inode.metadata.uid,
-                                gid: inode.metadata.gid,
-                                nlink: inode.metadata.nlink,
-                                ino: inode.metadata.ino,
-                                atime_ms: inode.metadata.atime_ms,
-                                atime_nsec: inode.metadata.atime_nsec,
-                                mtime_ms: inode.metadata.mtime_ms,
-                                mtime_nsec: inode.metadata.mtime_nsec,
-                                ctime_ms: inode.metadata.ctime_ms,
-                                ctime_nsec: inode.metadata.ctime_nsec,
-                                birthtime_ms: inode.metadata.birthtime_ms,
-                            },
-                            kind: match &inode.kind {
-                                InodeKind::File { data } => {
-                                    MemoryFileSystemSnapshotInodeKind::File { data: data.clone() }
-                                }
-                                InodeKind::Directory => {
-                                    MemoryFileSystemSnapshotInodeKind::Directory
-                                }
-                                InodeKind::SymbolicLink { target } => {
-                                    MemoryFileSystemSnapshotInodeKind::SymbolicLink {
-                                        target: target.clone(),
-                                    }
-                                }
-                            },
-                        },
-                    )
-                })
-                .collect(),
-            next_ino: self.next_ino,
-        }
-    }
-
-    pub fn from_snapshot(snapshot: MemoryFileSystemSnapshot) -> Self {
-        Self {
-            device_id: allocate_memory_filesystem_device_id(),
-            path_index: snapshot.path_index,
-            inodes: snapshot
-                .inodes
-                .into_iter()
-                .map(|(ino, inode)| {
-                    (
-                        ino,
-                        Inode {
-                            metadata: Metadata {
-                                mode: inode.metadata.mode,
-                                uid: inode.metadata.uid,
-                                gid: inode.metadata.gid,
-                                nlink: inode.metadata.nlink,
-                                ino: inode.metadata.ino,
-                                atime_ms: inode.metadata.atime_ms,
-                                atime_nsec: inode.metadata.atime_nsec,
-                                mtime_ms: inode.metadata.mtime_ms,
-                                mtime_nsec: inode.metadata.mtime_nsec,
-                                ctime_ms: inode.metadata.ctime_ms,
-                                ctime_nsec: inode.metadata.ctime_nsec,
-                                birthtime_ms: inode.metadata.birthtime_ms,
-                            },
-                            kind: match inode.kind {
-                                MemoryFileSystemSnapshotInodeKind::File { data } => {
-                                    InodeKind::File { data }
-                                }
-                                MemoryFileSystemSnapshotInodeKind::Directory => {
-                                    InodeKind::Directory
-                                }
-                                MemoryFileSystemSnapshotInodeKind::SymbolicLink { target } => {
-                                    InodeKind::SymbolicLink { target }
-                                }
-                            },
-                        },
-                    )
-                })
-                .collect(),
-            next_ino: snapshot.next_ino,
-        }
-    }
-}
-
-impl VirtualFileSystem for MemoryFileSystem {
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        let inode = self.inode_mut_for_existing_path(path, "open", true)?;
-        match &inode.kind {
-            InodeKind::File { data } => {
-                inode.metadata.atime_ms = now_ms();
-                Ok(data.clone())
-            }
-            InodeKind::Directory => Err(VfsError::is_directory("open", path)),
-            InodeKind::SymbolicLink { .. } => Err(VfsError::not_found("open", path)),
-        }
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        Ok(self
-            .read_dir_with_types(path)?
-            .into_iter()
-            .map(|entry| entry.name)
-            .collect())
-    }
-
-    fn read_dir_limited(&mut self, path: &str, max_entries: usize) -> VfsResult<Vec<String>> {
-        self.read_dir_filtered_limited(path, max_entries, |_| true)
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        self.assert_directory_path(path, "scandir")?;
-        let resolved = self.resolve_path(path, 0)?;
-        self.inode_mut_for_existing_path(&resolved, "scandir", false)?
-            .metadata
-            .atime_ms = now_ms();
-        let prefix = if resolved == "/" {
-            String::from("/")
-        } else {
-            format!("{resolved}/")
-        };
-
-        let mut entries = BTreeMap::<String, VirtualDirEntry>::new();
-        for (candidate_path, ino) in self.path_index.range(prefix.clone()..) {
-            if !candidate_path.starts_with(&prefix) {
-                break;
-            }
-
-            let rest = &candidate_path[prefix.len()..];
-            if rest.is_empty() || rest.contains('/') {
-                continue;
-            }
-
-            let inode = self
-                .inodes
-                .get(ino)
-                .expect("path index should always point at a valid inode");
-            entries.insert(
-                String::from(rest),
-                VirtualDirEntry {
-                    name: String::from(rest),
-                    is_directory: matches!(inode.kind, InodeKind::Directory),
-                    is_symbolic_link: matches!(inode.kind, InodeKind::SymbolicLink { .. }),
-                },
-            );
-        }
-
-        Ok(entries.into_values().collect())
-    }
-
-    fn write_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        let normalized = self.resolve_path(path, 0)?;
-        self.mkdir(&dirname(&normalized), true)?;
-        let data = content.into();
-
-        if self.path_index.contains_key(&normalized) {
-            let inode = self.inode_mut_for_existing_path(&normalized, "open", false)?;
-            let now = now_ms();
-            match &mut inode.kind {
-                InodeKind::File { data: existing } => {
-                    *existing = data;
-                    inode.metadata.mtime_ms = now;
-                    inode.metadata.ctime_ms = now;
-                    return Ok(());
-                }
-                InodeKind::Directory => return Err(VfsError::is_directory("open", path)),
-                InodeKind::SymbolicLink { .. } => return Err(VfsError::not_found("open", path)),
-            }
-        }
-
-        let ino = self.allocate_inode(InodeKind::File { data }, S_IFREG | 0o644);
-        self.path_index.insert(normalized, ino);
-        Ok(())
-    }
-
-    fn create_file_exclusive(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<()> {
-        let normalized = self.resolve_path(path, 0)?;
-        self.mkdir(&dirname(&normalized), true)?;
-        if self.path_index.contains_key(&normalized) {
-            return Err(VfsError::already_exists("open", path));
-        }
-
-        let ino = self.allocate_inode(
-            InodeKind::File {
-                data: content.into(),
-            },
-            S_IFREG | 0o644,
-        );
-        self.path_index.insert(normalized, ino);
-        Ok(())
-    }
-
-    fn append_file(&mut self, path: &str, content: impl Into<Vec<u8>>) -> VfsResult<u64> {
-        let normalized = self.resolve_path(path, 0)?;
-        let data = content.into();
-        let inode = self.inode_mut_for_existing_path(&normalized, "open", false)?;
-        let now = now_ms();
-        match &mut inode.kind {
-            InodeKind::File { data: existing } => {
-                reserve_file_growth(existing, data.len())?;
-                existing.extend_from_slice(&data);
-                inode.metadata.mtime_ms = now;
-                inode.metadata.ctime_ms = now;
-                Ok(existing.len() as u64)
-            }
-            InodeKind::Directory => Err(VfsError::is_directory("open", path)),
-            InodeKind::SymbolicLink { .. } => Err(VfsError::not_found("open", path)),
-        }
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        let normalized = self.resolve_exact_path(path)?;
-        if normalized == "/" {
-            return Ok(());
-        }
-
-        self.assert_directory_path(&dirname(&normalized), "mkdir")?;
-        if let Some(existing) = self.path_index.get(&normalized) {
-            let inode = self
-                .inodes
-                .get(existing)
-                .expect("path index should always point at a valid inode");
-            if matches!(inode.kind, InodeKind::Directory) {
-                return Ok(());
-            }
-            return Err(VfsError::already_exists("mkdir", path));
-        }
-
-        let ino = self.allocate_inode(InodeKind::Directory, S_IFDIR | 0o755);
-        self.path_index.insert(normalized, ino);
-        Ok(())
-    }
-
-    fn mkdir(&mut self, path: &str, recursive: bool) -> VfsResult<()> {
-        let normalized = normalize_path(path);
-        if normalized == "/" {
-            return Ok(());
-        }
-
-        if !recursive {
-            return self.create_dir(path);
-        }
-
-        let parts: Vec<&str> = normalized
-            .split('/')
-            .filter(|part| !part.is_empty())
-            .collect();
-        let mut current = String::from("/");
-
-        for (index, part) in parts.iter().enumerate() {
-            let raw_path = if current == "/" {
-                format!("/{}", part)
-            } else {
-                format!("{current}/{}", part)
-            };
-            let resolved =
-                self.resolve_path_with_options(&raw_path, index + 1 != parts.len(), 0)?;
-
-            match self.path_index.get(&resolved).copied() {
-                Some(ino) => {
-                    let inode = self
-                        .inodes
-                        .get(&ino)
-                        .expect("path index should always point at a valid inode");
-                    if !matches!(inode.kind, InodeKind::Directory) {
-                        return Err(VfsError::not_directory("mkdir", &raw_path));
-                    }
-                }
-                None => {
-                    let ino = self.allocate_inode(InodeKind::Directory, S_IFDIR | 0o755);
-                    self.path_index.insert(resolved.clone(), ino);
-                }
-            }
-
-            current = resolved;
-        }
-
-        Ok(())
-    }
-
-    fn exists(&self, path: &str) -> bool {
-        self.resolve_path(path, 0)
-            .ok()
-            .is_some_and(|resolved| self.path_index.contains_key(&resolved))
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        let inode = self.inode_for_existing_path(path, "stat", true)?;
-        Ok(self.build_stat(inode))
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        self.remove_exact_path(path)
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        let normalized = self.resolve_exact_path(path)?;
-        if normalized == "/" {
-            return Err(VfsError::permission_denied("rmdir", path));
-        }
-
-        let ino = self
-            .path_index
-            .get(&normalized)
-            .copied()
-            .ok_or_else(|| VfsError::not_found("rmdir", path))?;
-        let inode = self
-            .inodes
-            .get(&ino)
-            .expect("path index should always point at a valid inode");
-        if !matches!(inode.kind, InodeKind::Directory) {
-            return Err(VfsError::not_directory("rmdir", path));
-        }
-
-        let prefix = format!("{normalized}/");
-        if self
-            .path_index
-            .keys()
-            .any(|candidate| candidate.starts_with(&prefix))
-        {
-            return Err(VfsError::not_empty(path));
-        }
-
-        self.path_index.remove(&normalized);
-        self.decrement_link_count(ino);
-        Ok(())
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let old_normalized = self.resolve_exact_path(old_path)?;
-        let new_normalized = self.resolve_exact_path(new_path)?;
-
-        if old_normalized == "/" {
-            return Err(VfsError::permission_denied("rename", old_path));
-        }
-
-        if old_normalized == new_normalized {
-            return Ok(());
-        }
-
-        self.assert_directory_path(&dirname(&new_normalized), "rename")?;
-
-        if new_normalized.starts_with(&(old_normalized.clone() + "/")) {
-            return Err(VfsError::invalid_input(format!(
-                "cannot move '{}' into its own descendant '{}'",
-                old_path, new_path
-            )));
-        }
-
-        let ino = self
-            .path_index
-            .get(&old_normalized)
-            .copied()
-            .ok_or_else(|| VfsError::not_found("rename", old_path))?;
-        let is_directory = matches!(
-            self.inodes
-                .get(&ino)
-                .expect("path index should always point at a valid inode")
-                .kind,
-            InodeKind::Directory
-        );
-
-        self.remove_existing_destination(new_path)?;
-
-        if !is_directory {
-            self.path_index.remove(&old_normalized);
-            self.path_index.insert(new_normalized, ino);
-            self.inodes
-                .get_mut(&ino)
-                .expect("renamed inode should exist")
-                .metadata
-                .ctime_ms = now_ms();
-            return Ok(());
-        }
-
-        let prefix = format!("{old_normalized}/");
-        let to_move: Vec<(String, u64)> = self
-            .path_index
-            .iter()
-            .filter(|(path, _)| **path == old_normalized || path.starts_with(&prefix))
-            .map(|(path, inode_id)| (path.clone(), *inode_id))
-            .collect();
-
-        for (path, _) in &to_move {
-            self.path_index.remove(path);
-        }
-
-        for (path, inode_id) in to_move {
-            let relocated_path = if path == old_normalized {
-                new_normalized.clone()
-            } else {
-                format!("{new_normalized}{}", &path[old_normalized.len()..])
-            };
-            self.path_index.insert(relocated_path, inode_id);
-        }
-
-        self.inodes
-            .get_mut(&ino)
-            .expect("renamed directory inode should exist")
-            .metadata
-            .ctime_ms = now_ms();
-
-        Ok(())
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        let resolved = self.resolve_path(path, 0)?;
-        if !self.path_index.contains_key(&resolved) {
-            return Err(VfsError::not_found("realpath", path));
-        }
-        Ok(resolved)
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        self.symlink_with_metadata(target, link_path, S_IFLNK | 0o777, DEFAULT_UID, DEFAULT_GID)
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        let inode = self.inode_for_existing_path(path, "readlink", false)?;
-        match &inode.kind {
-            InodeKind::SymbolicLink { target } => Ok(target.clone()),
-            _ => Err(VfsError::invalid_input(format!(
-                "invalid argument, readlink '{path}'"
-            ))),
-        }
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        let inode = self.inode_for_existing_path(path, "lstat", false)?;
-        Ok(self.build_stat(inode))
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        let ino = self.inode_id_for_existing_path(old_path, "link", true)?;
-        let inode = self
-            .inodes
-            .get(&ino)
-            .expect("path index should always point at a valid inode");
-        if !matches!(inode.kind, InodeKind::File { .. }) {
-            return Err(VfsError::permission_denied("link", old_path));
-        }
-
-        let normalized = self.resolve_exact_path(new_path)?;
-        if self.path_index.contains_key(&normalized) {
-            return Err(VfsError::already_exists("link", new_path));
-        }
-
-        self.assert_directory_path(&dirname(&normalized), "link")?;
-        self.path_index.insert(normalized, ino);
-        let inode = self
-            .inodes
-            .get_mut(&ino)
-            .expect("path index should always point at a valid inode");
-        inode.metadata.nlink += 1;
-        inode.metadata.ctime_ms = now_ms();
-        Ok(())
-    }
-
-    fn chmod(&mut self, path: &str, mode: u32) -> VfsResult<()> {
-        let inode = self.inode_mut_for_existing_path(path, "chmod", true)?;
-        let type_bits = if mode & 0o170000 == 0 {
-            inode.metadata.mode & 0o170000
-        } else {
-            mode & 0o170000
-        };
-        inode.metadata.mode = type_bits | (mode & 0o7777);
-        inode.metadata.ctime_ms = now_ms();
-        Ok(())
-    }
-
-    fn chown(&mut self, path: &str, uid: u32, gid: u32) -> VfsResult<()> {
-        let inode = self.inode_mut_for_existing_path(path, "chown", true)?;
-        inode.metadata.uid = uid;
-        inode.metadata.gid = gid;
-        inode.metadata.ctime_ms = now_ms();
-        Ok(())
-    }
-
-    fn utimes(&mut self, path: &str, atime_ms: u64, mtime_ms: u64) -> VfsResult<()> {
-        let inode = self.inode_mut_for_existing_path(path, "utimes", true)?;
-        inode.metadata.atime_ms = atime_ms;
-        inode.metadata.atime_nsec = 0;
-        inode.metadata.mtime_ms = mtime_ms;
-        inode.metadata.mtime_nsec = 0;
-        inode.metadata.ctime_ms = now_ms();
-        inode.metadata.ctime_nsec = 0;
-        Ok(())
-    }
-
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        atime: VirtualUtimeSpec,
-        mtime: VirtualUtimeSpec,
-        follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        let stat = if follow_symlinks {
-            self.stat(path)?
-        } else {
-            self.lstat(path)?
-        };
-        let inode = self.inode_mut_for_existing_path(path, "utimes", follow_symlinks)?;
-        let now = now_time_spec();
-        let atime = resolve_utime_spec(
-            atime,
-            now,
-            VirtualTimeSpec {
-                sec: (stat.atime_ms / 1_000) as i64,
-                nsec: stat.atime_nsec,
-            },
-        )?;
-        let mtime = resolve_utime_spec(
-            mtime,
-            now,
-            VirtualTimeSpec {
-                sec: (stat.mtime_ms / 1_000) as i64,
-                nsec: stat.mtime_nsec,
-            },
-        )?;
-        inode.metadata.atime_ms = atime.to_truncated_millis()?;
-        inode.metadata.atime_nsec = atime.nsec;
-        inode.metadata.mtime_ms = mtime.to_truncated_millis()?;
-        inode.metadata.mtime_nsec = mtime.nsec;
-        let ctime = now_time_spec();
-        inode.metadata.ctime_ms = ctime.to_truncated_millis()?;
-        inode.metadata.ctime_nsec = ctime.nsec;
-        Ok(())
-    }
-
-    fn truncate(&mut self, path: &str, length: u64) -> VfsResult<()> {
-        let inode = self.inode_mut_for_existing_path(path, "truncate", true)?;
-        let now = now_ms();
-        match &mut inode.kind {
-            InodeKind::File { data } => {
-                resize_file_data(data, checked_file_len(length, "truncate length")?)?;
-                inode.metadata.mtime_ms = now;
-                inode.metadata.ctime_ms = now;
-                Ok(())
-            }
-            InodeKind::Directory => Err(VfsError::is_directory("truncate", path)),
-            InodeKind::SymbolicLink { .. } => Err(VfsError::not_found("truncate", path)),
-        }
-    }
-
-    fn pread(&mut self, path: &str, offset: u64, length: usize) -> VfsResult<Vec<u8>> {
-        let inode = self.inode_mut_for_existing_path(path, "open", true)?;
-        match &mut inode.kind {
-            InodeKind::File { data } => {
-                inode.metadata.atime_ms = now_ms();
-                let start = offset as usize;
-                if start >= data.len() {
-                    return Ok(Vec::new());
-                }
-                let end = start.saturating_add(length).min(data.len());
-                Ok(data[start..end].to_vec())
-            }
-            InodeKind::Directory => Err(VfsError::is_directory("open", path)),
-            InodeKind::SymbolicLink { .. } => Err(VfsError::not_found("open", path)),
-        }
-    }
-}
-
-impl Default for MemoryFileSystem {
-    fn default() -> Self {
-        Self::new()
-    }
-}
-
-fn resolve_utime_spec(
-    spec: VirtualUtimeSpec,
-    now: VirtualTimeSpec,
-    existing: VirtualTimeSpec,
-) -> VfsResult<VirtualTimeSpec> {
-    match spec {
-        VirtualUtimeSpec::Set(spec) => Ok(spec),
-        VirtualUtimeSpec::Now => Ok(now),
-        VirtualUtimeSpec::Omit => Ok(existing),
-    }
-}
-
-fn resolve_utime_millis(
-    spec: VirtualUtimeSpec,
-    now_ms: u64,
-    existing: Option<VirtualTimeSpec>,
-) -> VfsResult<u64> {
-    match spec {
-        VirtualUtimeSpec::Set(spec) => spec.to_truncated_millis(),
-        VirtualUtimeSpec::Now => Ok(now_ms),
-        VirtualUtimeSpec::Omit => existing
-            .ok_or_else(|| VfsError::new("EINVAL", "UTIME_OMIT requires existing metadata"))?
-            .to_truncated_millis(),
-    }
-}
-
-pub fn validate_path(path: &str) -> VfsResult<()> {
-    if path.as_bytes().contains(&0) {
-        return Err(VfsError::invalid_input("path contains NUL byte"));
-    }
-    if let Some(control) = path
-        .bytes()
-        .find(|byte| byte.is_ascii_control() && *byte != b'\0')
-    {
-        return Err(VfsError::invalid_input(format!(
-            "path contains control character byte 0x{control:02x}"
-        )));
-    }
-    let normalized = normalize_path(path);
-    if normalized.len() > MAX_PATH_LENGTH {
-        return Err(VfsError::path_too_long(path));
-    }
-    Ok(())
-}
-
-pub fn normalize_path(path: &str) -> String {
-    if path.is_empty() {
-        return String::from("/");
-    }
-
-    let candidate = if path.starts_with('/') {
-        path.to_owned()
-    } else {
-        format!("/{path}")
-    };
-
-    let mut resolved = Vec::new();
-    for part in candidate.split('/') {
-        match part {
-            "" | "." => {}
-            ".." => {
-                resolved.pop();
-            }
-            component => resolved.push(component),
-        }
-    }
-
-    if resolved.is_empty() {
-        String::from("/")
-    } else {
-        format!("/{}", resolved.join("/"))
-    }
-}
-
-fn block_count_for_size(size: u64) -> u64 {
-    if size == 0 {
-        0
-    } else {
-        size.div_ceil(512)
-    }
-}
-
-fn checked_file_len(value: u64, description: &'static str) -> VfsResult<usize> {
-    usize::try_from(value).map_err(|_| {
-        VfsError::new(
-            "EINVAL",
-            format!("{description} exceeds addressable memory: {value}"),
-        )
-    })
-}
-
-fn reserve_file_growth(data: &mut Vec<u8>, additional: usize) -> VfsResult<()> {
-    data.try_reserve(additional).map_err(|error| {
-        VfsError::new(
-            "ENOMEM",
-            format!(
-                "file growth exceeds addressable memory: current length {}, additional {additional}: {error}",
-                data.len()
-            ),
-        )
-    })
-}
-
-fn resize_file_data(data: &mut Vec<u8>, new_len: usize) -> VfsResult<()> {
-    if new_len > data.len() {
-        reserve_file_growth(data, new_len - data.len())?;
-    }
-    data.resize(new_len, 0);
-    Ok(())
-}
-
-fn dirname(path: &str) -> String {
-    let normalized = normalize_path(path);
-    let Some((head, _)) = normalized.rsplit_once('/') else {
-        return String::from("/");
-    };
-
-    if head.is_empty() {
-        String::from("/")
-    } else {
-        String::from(head)
-    }
-}
-
-fn now_ms() -> u64 {
-    SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .unwrap_or_default()
-        .as_millis() as u64
-}
-
-fn now_time_spec() -> VirtualTimeSpec {
-    let now = SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .unwrap_or_default();
-    VirtualTimeSpec {
-        sec: now.as_secs() as i64,
-        nsec: now.subsec_nanos(),
-    }
-}
diff --git a/crates/vfs/tests/conformance.rs b/crates/vfs/tests/conformance.rs
deleted file mode 100644
index abf95c12a..000000000
--- a/crates/vfs/tests/conformance.rs
+++ /dev/null
@@ -1,426 +0,0 @@
-use async_trait::async_trait;
-use std::sync::{Arc, Condvar, Mutex};
-use vfs::engine::engines::{ChunkedFs, ChunkedFsOptions, ObjectFs};
-use vfs::engine::mem::{InMemoryMetadataStore, MemoryBlockStore, MemoryObjectBackend};
-use vfs::engine::{
-    BlockKey, CachedMetadataStore, ChunkEdit, ChunkRange, CreateInodeAttrs, InodePatch, InodeType,
-    MetadataStore, SnapshotId, Storage, VfsResult, VirtualFileSystem,
-};
-
-#[tokio::test]
-async fn chunked_fs_round_trips_inline_and_chunked_files() {
-    let metadata = InMemoryMetadataStore::new();
-    let blocks = MemoryBlockStore::new();
-    let fs = ChunkedFs::with_options(
-        metadata,
-        blocks.clone(),
-        ChunkedFsOptions {
-            inline_threshold: 4,
-            chunk_size: 3,
-            ..ChunkedFsOptions::default()
-        },
-    );
-
-    fs.write_file("/small.txt", b"abc").await.unwrap();
-    assert_eq!(fs.read_file("/small.txt").await.unwrap(), b"abc");
-    assert_eq!(blocks.len(), 0);
-
-    fs.write_file("/large.txt", b"abcdefghi").await.unwrap();
-    assert_eq!(fs.read_file("/large.txt").await.unwrap(), b"abcdefghi");
-    assert_eq!(blocks.len(), 3);
-
-    fs.pwrite("/large.txt", b"ZZ", 2).await.unwrap();
-    assert_eq!(fs.read_file("/large.txt").await.unwrap(), b"abZZefghi");
-}
-
-#[tokio::test]
-async fn chunked_fs_partial_writes_preserve_untouched_chunks() {
-    let metadata = InMemoryMetadataStore::new();
-    let blocks = MemoryBlockStore::new();
-    let fs = ChunkedFs::with_options(
-        metadata.clone(),
-        blocks,
-        ChunkedFsOptions {
-            inline_threshold: 1,
-            chunk_size: 4,
-            ..ChunkedFsOptions::default()
-        },
-    );
-
-    fs.write_file("/large.txt", b"aaaabbbbcccc").await.unwrap();
-    let ino = metadata.resolve("/large.txt").await.unwrap().ino;
-    let before = metadata.get_chunks(ino, ChunkRange::all()).await.unwrap();
-    assert_eq!(before.len(), 3);
-
-    fs.pwrite("/large.txt", b"Z", 5).await.unwrap();
-
-    assert_eq!(fs.read_file("/large.txt").await.unwrap(), b"aaaabZbbcccc");
-    let after = metadata.get_chunks(ino, ChunkRange::all()).await.unwrap();
-    assert_eq!(after.len(), 3);
-    assert_eq!(after[0].key, before[0].key);
-    assert_ne!(after[1].key, before[1].key);
-    assert_eq!(after[2].key, before[2].key);
-}
-
-#[tokio::test]
-async fn chunked_fs_sparse_pwrite_and_truncate_zero_fill_holes() {
-    let fs = ChunkedFs::with_options(
-        InMemoryMetadataStore::new(),
-        MemoryBlockStore::new(),
-        ChunkedFsOptions {
-            inline_threshold: 1,
-            chunk_size: 4,
-            ..ChunkedFsOptions::default()
-        },
-    );
-
-    fs.write_file("/sparse", b"").await.unwrap();
-    fs.pwrite("/sparse", b"end", 10).await.unwrap();
-    assert_eq!(
-        fs.read_file("/sparse").await.unwrap(),
-        b"\0\0\0\0\0\0\0\0\0\0end"
-    );
-
-    fs.write_file("/truncate", b"abcdefgh").await.unwrap();
-    fs.truncate("/truncate", 5).await.unwrap();
-    fs.truncate("/truncate", 8).await.unwrap();
-    assert_eq!(fs.read_file("/truncate").await.unwrap(), b"abcde\0\0\0");
-}
-
-#[tokio::test]
-async fn chunked_fs_dedups_identical_content_and_gc_deletes_on_unlink() {
-    let metadata = InMemoryMetadataStore::new();
-    let blocks = MemoryBlockStore::new();
-    let fs = ChunkedFs::with_options(
-        metadata.clone(),
-        blocks.clone(),
-        ChunkedFsOptions {
-            inline_threshold: 1,
-            chunk_size: 16,
-            ..ChunkedFsOptions::default()
-        },
-    );
-
-    fs.write_file("/a", b"same content").await.unwrap();
-    fs.write_file("/b", b"same content").await.unwrap();
-    let key = BlockKey::from_content(b"same content");
-    assert_eq!(blocks.len(), 1);
-    assert_eq!(metadata.refcount(&key), 2);
-
-    fs.remove_file("/a").await.unwrap();
-    assert_eq!(blocks.len(), 1);
-    assert_eq!(metadata.refcount(&key), 1);
-
-    fs.remove_file("/b").await.unwrap();
-    assert_eq!(blocks.len(), 0);
-    assert_eq!(metadata.refcount(&key), 0);
-}
-
-#[tokio::test]
-async fn metadata_snapshot_and_fork_share_chunk_refs_until_cow_write() {
-    let metadata = InMemoryMetadataStore::new();
-    let parent = metadata.resolve("/").await.unwrap();
-    let file = metadata
-        .create(
-            parent.ino,
-            "file",
-            CreateInodeAttrs::file(0o644, 0, 0, Storage::Chunked { chunk_size: 16 }),
-        )
-        .await
-        .unwrap();
-    let key = BlockKey::from_content(b"hello");
-    metadata
-        .commit_write(
-            file.ino,
-            vec![ChunkEdit {
-                index: 0,
-                key: key.clone(),
-                len: 5,
-            }],
-            5,
-        )
-        .await
-        .unwrap();
-    assert_eq!(metadata.refcount(&key), 1);
-
-    let snap = metadata.snapshot(parent.ino).await.unwrap();
-    assert_eq!(metadata.refcount(&key), 2);
-    let fork_root = metadata.fork(snap).await.unwrap();
-    assert_eq!(metadata.refcount(&key), 3);
-
-    let fork_entries = metadata.list_dir(fork_root).await.unwrap();
-    let fork_file = fork_entries
-        .iter()
-        .find(|entry| entry.name == "file")
-        .unwrap()
-        .meta
-        .ino;
-    let new_key = BlockKey::from_content(b"goodbye");
-    metadata
-        .commit_write(
-            fork_file,
-            vec![ChunkEdit {
-                index: 0,
-                key: new_key.clone(),
-                len: 7,
-            }],
-            7,
-        )
-        .await
-        .unwrap();
-    assert_eq!(metadata.refcount(&key), 2);
-    assert_eq!(metadata.refcount(&new_key), 1);
-}
-
-#[tokio::test]
-async fn object_fs_maps_files_to_native_objects() {
-    let backend = MemoryObjectBackend::new();
-    let fs = ObjectFs::new(backend);
-    fs.mkdir("/dir", false).await.unwrap();
-    fs.write_file("/dir/file.txt", b"hello").await.unwrap();
-
-    assert_eq!(fs.read_file("/dir/file.txt").await.unwrap(), b"hello");
-    assert_eq!(fs.read_dir("/dir").await.unwrap(), vec!["file.txt"]);
-    assert_eq!(fs.pread("/dir/file.txt", 1, 3).await.unwrap(), b"ell");
-}
-
-#[tokio::test]
-async fn object_fs_recursively_renames_prefix_directories() {
-    let backend = MemoryObjectBackend::new();
-    let fs = ObjectFs::new(backend);
-    fs.mkdir("/src/nested", true).await.unwrap();
-    fs.write_file("/src/root.txt", b"root").await.unwrap();
-    fs.write_file("/src/nested/leaf.txt", b"leaf")
-        .await
-        .unwrap();
-
-    fs.rename("/src", "/dst").await.unwrap();
-
-    assert!(!fs.exists("/src/root.txt").await);
-    assert_eq!(fs.read_file("/dst/root.txt").await.unwrap(), b"root");
-    assert_eq!(fs.read_file("/dst/nested/leaf.txt").await.unwrap(), b"leaf");
-}
-
-#[tokio::test]
-async fn cache_invalidates_on_mutation() {
-    let metadata = CachedMetadataStore::new(InMemoryMetadataStore::new(), 16);
-    let root = metadata.resolve("/").await.unwrap();
-    assert!(metadata.resolve("/new").await.is_err());
-    metadata
-        .create(root.ino, "new", CreateInodeAttrs::directory(0o755, 0, 0))
-        .await
-        .unwrap();
-    assert_eq!(
-        metadata.resolve("/new").await.unwrap().kind,
-        InodeType::Directory
-    );
-}
-
-#[tokio::test(flavor = "multi_thread", worker_threads = 2)]
-async fn cache_does_not_store_stale_read_when_mutation_wins_race() {
-    let inner = InMemoryMetadataStore::new();
-    let root = inner.resolve("/").await.unwrap();
-    inner
-        .create(
-            root.ino,
-            "stale",
-            CreateInodeAttrs::file(0o644, 0, 0, Storage::Inline(Vec::new())),
-        )
-        .await
-        .unwrap();
-    let gate = Arc::new(RaceGate::default());
-    let metadata = Arc::new(CachedMetadataStore::new(
-        PausingResolveStore {
-            inner,
-            path: "/stale".to_string(),
-            gate: gate.clone(),
-        },
-        16,
-    ));
-
-    let pending_metadata = metadata.clone();
-    let pending = tokio::spawn(async move { pending_metadata.resolve("/stale").await });
-    gate.wait_until_paused();
-    metadata.remove(root.ino, "stale").await.unwrap();
-    gate.release();
-    assert!(pending.await.unwrap().is_ok());
-
-    let result = metadata.resolve("/stale").await;
-    assert!(result.is_err());
-}
-
-#[tokio::test]
-async fn metadata_set_attr_drops_chunk_refs_when_file_becomes_inline() {
-    let metadata = InMemoryMetadataStore::new();
-    let parent = metadata.resolve("/").await.unwrap();
-    let file = metadata
-        .create(
-            parent.ino,
-            "file",
-            CreateInodeAttrs::file(0o644, 0, 0, Storage::Chunked { chunk_size: 16 }),
-        )
-        .await
-        .unwrap();
-    let key = BlockKey::from_content(b"hello");
-    metadata
-        .commit_write(
-            file.ino,
-            vec![ChunkEdit {
-                index: 0,
-                key: key.clone(),
-                len: 5,
-            }],
-            5,
-        )
-        .await
-        .unwrap();
-
-    let freed = metadata
-        .set_attr(
-            file.ino,
-            InodePatch {
-                storage: Some(Storage::Inline(b"hi".to_vec())),
-                size: Some(2),
-                ..InodePatch::default()
-            },
-        )
-        .await
-        .unwrap();
-    assert_eq!(freed, vec![key]);
-    assert!(metadata
-        .get_chunks(file.ino, ChunkRange::all())
-        .await
-        .unwrap()
-        .is_empty());
-}
-
-#[derive(Debug, Default)]
-struct RaceGate {
-    state: Mutex<RaceGateState>,
-    changed: Condvar,
-}
-
-#[derive(Debug, Default)]
-struct RaceGateState {
-    paused_once: bool,
-    paused: bool,
-    released: bool,
-}
-
-impl RaceGate {
-    fn pause_once(&self) {
-        let mut state = self.state.lock().expect("race gate poisoned");
-        if state.paused_once {
-            return;
-        }
-        state.paused_once = true;
-        state.paused = true;
-        self.changed.notify_all();
-        while !state.released {
-            state = self.changed.wait(state).expect("race gate poisoned");
-        }
-    }
-
-    fn wait_until_paused(&self) {
-        let mut state = self.state.lock().expect("race gate poisoned");
-        while !state.paused {
-            state = self.changed.wait(state).expect("race gate poisoned");
-        }
-    }
-
-    fn release(&self) {
-        let mut state = self.state.lock().expect("race gate poisoned");
-        state.released = true;
-        self.changed.notify_all();
-    }
-}
-
-#[derive(Debug, Clone)]
-struct PausingResolveStore {
-    inner: InMemoryMetadataStore,
-    path: String,
-    gate: Arc<RaceGate>,
-}
-
-#[async_trait]
-impl MetadataStore for PausingResolveStore {
-    async fn resolve(&self, path: &str) -> VfsResult<vfs::engine::InodeMeta> {
-        let result = self.inner.resolve(path).await;
-        if path == self.path {
-            self.gate.pause_once();
-        }
-        result
-    }
-
-    async fn resolve_parent(&self, path: &str) -> VfsResult<(vfs::engine::InodeMeta, String)> {
-        self.inner.resolve_parent(path).await
-    }
-
-    async fn lstat(&self, path: &str) -> VfsResult<vfs::engine::InodeMeta> {
-        self.inner.lstat(path).await
-    }
-
-    async fn list_dir(&self, ino: u64) -> VfsResult<Vec<vfs::engine::DentryStat>> {
-        self.inner.list_dir(ino).await
-    }
-
-    async fn create(
-        &self,
-        parent: u64,
-        name: &str,
-        attrs: CreateInodeAttrs,
-    ) -> VfsResult<vfs::engine::InodeMeta> {
-        self.inner.create(parent, name, attrs).await
-    }
-
-    async fn link(&self, parent: u64, name: &str, target: u64) -> VfsResult<()> {
-        self.inner.link(parent, name, target).await
-    }
-
-    async fn remove(&self, parent: u64, name: &str) -> VfsResult<Vec<BlockKey>> {
-        self.inner.remove(parent, name).await
-    }
-
-    async fn rename(
-        &self,
-        src_parent: u64,
-        src: &str,
-        dst_parent: u64,
-        dst: &str,
-    ) -> VfsResult<Vec<BlockKey>> {
-        self.inner.rename(src_parent, src, dst_parent, dst).await
-    }
-
-    async fn set_attr(&self, ino: u64, patch: InodePatch) -> VfsResult<Vec<BlockKey>> {
-        self.inner.set_attr(ino, patch).await
-    }
-
-    async fn commit_write(
-        &self,
-        ino: u64,
-        edits: Vec<ChunkEdit>,
-        new_size: u64,
-    ) -> VfsResult<Vec<BlockKey>> {
-        self.inner.commit_write(ino, edits, new_size).await
-    }
-
-    async fn get_chunks(
-        &self,
-        ino: u64,
-        range: ChunkRange,
-    ) -> VfsResult<Vec<vfs::engine::ChunkRef>> {
-        self.inner.get_chunks(ino, range).await
-    }
-
-    async fn snapshot(&self, root: u64) -> VfsResult<SnapshotId> {
-        self.inner.snapshot(root).await
-    }
-
-    async fn fork(&self, snap: SnapshotId) -> VfsResult<u64> {
-        self.inner.fork(snap).await
-    }
-
-    async fn gc(&self) -> VfsResult<Vec<BlockKey>> {
-        self.inner.gc().await
-    }
-}
diff --git a/crates/vfs/tests/posix_mount_plugin.rs b/crates/vfs/tests/posix_mount_plugin.rs
deleted file mode 100644
index 802843e4b..000000000
--- a/crates/vfs/tests/posix_mount_plugin.rs
+++ /dev/null
@@ -1,117 +0,0 @@
-use serde_json::json;
-use vfs::posix::MountedVirtualFileSystem;
-use vfs::posix::{
-    FileSystemPluginFactory, FileSystemPluginRegistry, OpenFileSystemPluginRequest, PluginError,
-};
-use vfs::posix::{MemoryFileSystem, VirtualFileSystem};
-
-#[derive(Debug)]
-struct SeededMemoryPlugin;
-
-#[derive(Debug)]
-struct NamedPlugin(&'static str);
-
-impl FileSystemPluginFactory<()> for SeededMemoryPlugin {
-    fn plugin_id(&self) -> &'static str {
-        "seeded_memory"
-    }
-
-    fn open(
-        &self,
-        _request: OpenFileSystemPluginRequest<'_, ()>,
-    ) -> Result<Box<dyn vfs::posix::MountedFileSystem>, PluginError> {
-        let mut filesystem = MemoryFileSystem::new();
-        filesystem
-            .write_file("/hello.txt", b"hello".to_vec())
-            .expect("seed plugin filesystem");
-        Ok(Box::new(MountedVirtualFileSystem::new(filesystem)))
-    }
-}
-
-impl FileSystemPluginFactory<()> for NamedPlugin {
-    fn plugin_id(&self) -> &'static str {
-        self.0
-    }
-
-    fn open(
-        &self,
-        _request: OpenFileSystemPluginRequest<'_, ()>,
-    ) -> Result<Box<dyn vfs::posix::MountedFileSystem>, PluginError> {
-        Ok(Box::new(MountedVirtualFileSystem::new(
-            MemoryFileSystem::new(),
-        )))
-    }
-}
-
-#[test]
-fn plugin_registry_opens_registered_plugins() {
-    let mut registry = FileSystemPluginRegistry::new();
-    registry
-        .register(SeededMemoryPlugin)
-        .expect("register seeded plugin");
-
-    let mut filesystem = registry
-        .open(
-            "seeded_memory",
-            OpenFileSystemPluginRequest {
-                vm_id: "vm-1",
-                guest_path: "/workspace",
-                read_only: false,
-                config: &json!({}),
-                context: &(),
-            },
-        )
-        .expect("open seeded plugin");
-
-    assert_eq!(
-        filesystem
-            .read_file("/hello.txt")
-            .expect("read plugin file"),
-        b"hello".to_vec()
-    );
-}
-
-#[test]
-fn plugin_registry_rejects_ids_that_are_not_mount_type_tokens() {
-    for plugin_id in ["", "bad/id", "bad id", "bad\nid", "bad:id", "bad😀id"] {
-        let mut registry = FileSystemPluginRegistry::new();
-        let error = registry
-            .register(NamedPlugin(plugin_id))
-            .expect_err("invalid plugin id should be rejected");
-
-        assert_eq!(error.code(), "EINVAL");
-        assert!(
-            error.message().contains("invalid filesystem plugin id"),
-            "unexpected error: {error}"
-        );
-        assert!(registry.plugin_ids().is_empty());
-    }
-}
-
-#[test]
-fn plugin_registry_rejects_duplicate_or_unknown_plugins() {
-    let mut registry = FileSystemPluginRegistry::new();
-    registry
-        .register(SeededMemoryPlugin)
-        .expect("register initial plugin");
-
-    let duplicate = registry
-        .register(SeededMemoryPlugin)
-        .expect_err("duplicate registration should fail");
-    assert_eq!(duplicate.code(), "EEXIST");
-
-    let missing = match registry.open(
-        "missing",
-        OpenFileSystemPluginRequest {
-            vm_id: "vm-1",
-            guest_path: "/workspace",
-            read_only: false,
-            config: &json!({}),
-            context: &(),
-        },
-    ) {
-        Ok(_) => panic!("missing plugin should fail"),
-        Err(error) => error,
-    };
-    assert_eq!(missing.code(), "ENOSYS");
-}
diff --git a/crates/vfs/tests/posix_mount_table.rs b/crates/vfs/tests/posix_mount_table.rs
deleted file mode 100644
index 63e8302eb..000000000
--- a/crates/vfs/tests/posix_mount_table.rs
+++ /dev/null
@@ -1,523 +0,0 @@
-use std::any::Any;
-use std::sync::atomic::{AtomicBool, Ordering};
-use std::sync::Arc;
-use vfs::posix::{
-    MemoryFileSystem, SingleSymlinkFileSystem, VfsResult, VirtualDirEntry, VirtualFileSystem,
-    VirtualStat, VirtualUtimeSpec,
-};
-use vfs::posix::{MountOptions, MountTable, MountedFileSystem};
-
-struct ShutdownTrackingFileSystem {
-    shutdown: Arc<AtomicBool>,
-}
-
-impl ShutdownTrackingFileSystem {
-    fn new(shutdown: Arc<AtomicBool>) -> Self {
-        Self { shutdown }
-    }
-}
-
-impl MountedFileSystem for ShutdownTrackingFileSystem {
-    fn as_any(&self) -> &dyn Any {
-        self
-    }
-
-    fn as_any_mut(&mut self) -> &mut dyn Any {
-        self
-    }
-
-    fn read_file(&mut self, path: &str) -> VfsResult<Vec<u8>> {
-        unreachable!("failed mount should not read {path}")
-    }
-
-    fn read_dir(&mut self, path: &str) -> VfsResult<Vec<String>> {
-        unreachable!("failed mount should not read dir {path}")
-    }
-
-    fn read_dir_with_types(&mut self, path: &str) -> VfsResult<Vec<VirtualDirEntry>> {
-        unreachable!("failed mount should not read dir types {path}")
-    }
-
-    fn write_file(&mut self, path: &str, _content: Vec<u8>) -> VfsResult<()> {
-        unreachable!("failed mount should not write {path}")
-    }
-
-    fn create_dir(&mut self, path: &str) -> VfsResult<()> {
-        unreachable!("failed mount should not create dir {path}")
-    }
-
-    fn mkdir(&mut self, path: &str, _recursive: bool) -> VfsResult<()> {
-        unreachable!("failed mount should not mkdir {path}")
-    }
-
-    fn exists(&self, _path: &str) -> bool {
-        false
-    }
-
-    fn stat(&mut self, path: &str) -> VfsResult<VirtualStat> {
-        unreachable!("failed mount should not stat {path}")
-    }
-
-    fn remove_file(&mut self, path: &str) -> VfsResult<()> {
-        unreachable!("failed mount should not remove file {path}")
-    }
-
-    fn remove_dir(&mut self, path: &str) -> VfsResult<()> {
-        unreachable!("failed mount should not remove dir {path}")
-    }
-
-    fn rename(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        unreachable!("failed mount should not rename {old_path} to {new_path}")
-    }
-
-    fn realpath(&self, path: &str) -> VfsResult<String> {
-        unreachable!("failed mount should not realpath {path}")
-    }
-
-    fn symlink(&mut self, target: &str, link_path: &str) -> VfsResult<()> {
-        unreachable!("failed mount should not symlink {target} to {link_path}")
-    }
-
-    fn read_link(&self, path: &str) -> VfsResult<String> {
-        unreachable!("failed mount should not readlink {path}")
-    }
-
-    fn lstat(&self, path: &str) -> VfsResult<VirtualStat> {
-        unreachable!("failed mount should not lstat {path}")
-    }
-
-    fn link(&mut self, old_path: &str, new_path: &str) -> VfsResult<()> {
-        unreachable!("failed mount should not link {old_path} to {new_path}")
-    }
-
-    fn chmod(&mut self, path: &str, _mode: u32) -> VfsResult<()> {
-        unreachable!("failed mount should not chmod {path}")
-    }
-
-    fn chown(&mut self, path: &str, _uid: u32, _gid: u32) -> VfsResult<()> {
-        unreachable!("failed mount should not chown {path}")
-    }
-
-    fn utimes(&mut self, path: &str, _atime_ms: u64, _mtime_ms: u64) -> VfsResult<()> {
-        unreachable!("failed mount should not utimes {path}")
-    }
-
-    fn utimes_spec(
-        &mut self,
-        path: &str,
-        _atime: VirtualUtimeSpec,
-        _mtime: VirtualUtimeSpec,
-        _follow_symlinks: bool,
-    ) -> VfsResult<()> {
-        unreachable!("failed mount should not utimes_spec {path}")
-    }
-
-    fn truncate(&mut self, path: &str, _length: u64) -> VfsResult<()> {
-        unreachable!("failed mount should not truncate {path}")
-    }
-
-    fn pread(&mut self, path: &str, _offset: u64, _length: usize) -> VfsResult<Vec<u8>> {
-        unreachable!("failed mount should not pread {path}")
-    }
-
-    fn shutdown(&mut self) -> VfsResult<()> {
-        self.shutdown.store(true, Ordering::SeqCst);
-        Ok(())
-    }
-}
-
-#[test]
-fn mount_table_prefers_mounted_filesystems_and_merges_mount_points() {
-    let mut root = MemoryFileSystem::new();
-    root.write_file("/data/root-only.txt", b"root".to_vec())
-        .expect("seed root file");
-
-    let mut mounted = MemoryFileSystem::new();
-    mounted
-        .write_file("/mounted.txt", b"mounted".to_vec())
-        .expect("seed mounted file");
-
-    let mut table = MountTable::new(root);
-    table
-        .mount("/data", mounted, MountOptions::new("memory"))
-        .expect("mount memory filesystem");
-
-    assert_eq!(
-        table
-            .read_file("/data/mounted.txt")
-            .expect("read mounted file"),
-        b"mounted".to_vec()
-    );
-    assert!(!table.exists("/data/root-only.txt"));
-
-    let root_entries = table.read_dir("/").expect("read root directory");
-    assert!(root_entries.contains(&String::from("data")));
-}
-
-#[test]
-fn mount_table_enforces_read_only_and_cross_mount_boundaries() {
-    let mut table = MountTable::new(MemoryFileSystem::new());
-    table
-        .mount(
-            "/readonly",
-            MemoryFileSystem::new(),
-            MountOptions::new("memory").read_only(true),
-        )
-        .expect("mount readonly filesystem");
-    table
-        .mount(
-            "/writable",
-            MemoryFileSystem::new(),
-            MountOptions::new("memory"),
-        )
-        .expect("mount writable filesystem");
-
-    let read_only_error = table
-        .write_file("/readonly/blocked.txt", b"blocked".to_vec())
-        .expect_err("readonly mount should reject writes");
-    assert_eq!(read_only_error.code(), "EROFS");
-
-    table
-        .write_file("/writable/file.txt", b"ok".to_vec())
-        .expect("write mounted file");
-    let cross_mount_error = table
-        .rename("/writable/file.txt", "/file.txt")
-        .expect_err("rename across mounts should fail");
-    assert_eq!(cross_mount_error.code(), "EXDEV");
-}
-
-#[test]
-fn mount_table_rejects_symlinks_that_cross_mount_boundaries() {
-    let mut root = MemoryFileSystem::new();
-    root.write_file("/root.txt", b"root".to_vec())
-        .expect("seed root file");
-
-    let mut mounted = MemoryFileSystem::new();
-    mounted
-        .write_file("/inside.txt", b"inside".to_vec())
-        .expect("seed mounted file");
-
-    let mut table = MountTable::new(root);
-    table
-        .mount("/mounted", mounted, MountOptions::new("memory"))
-        .expect("mount memory filesystem");
-
-    let error = table
-        .symlink("../root.txt", "/mounted/root-link")
-        .expect_err("cross-mount symlink should fail");
-    assert_eq!(error.code(), "EXDEV");
-}
-
-#[test]
-fn mount_table_rejects_hardlinks_that_cross_mount_boundaries() {
-    let mut root = MemoryFileSystem::new();
-    root.write_file("/root.txt", b"root".to_vec())
-        .expect("seed root file");
-
-    let mut mounted = MemoryFileSystem::new();
-    mounted
-        .write_file("/inside.txt", b"inside".to_vec())
-        .expect("seed mounted file");
-
-    let mut table = MountTable::new(root);
-    table
-        .mount("/mounted", mounted, MountOptions::new("memory"))
-        .expect("mount memory filesystem");
-
-    let error = table
-        .link("/root.txt", "/mounted/root-link")
-        .expect_err("cross-mount hardlink should fail");
-    assert_eq!(error.code(), "EXDEV");
-}
-
-#[test]
-fn mount_table_realpath_follows_symlinks_across_leaf_mounts() {
-    let mut table = MountTable::new(MemoryFileSystem::new());
-
-    table
-        .mount_boxed(
-            "/opt/agentos/bin/pi",
-            Box::new(vfs::posix::MountedVirtualFileSystem::new(
-                SingleSymlinkFileSystem::new("../pkgs/pi/current/bin/pi"),
-            )),
-            MountOptions::new("single-symlink").read_only(true),
-        )
-        .expect("mount command symlink leaf");
-
-    table
-        .mount_boxed(
-            "/opt/agentos/pkgs/pi/current",
-            Box::new(vfs::posix::MountedVirtualFileSystem::new(
-                SingleSymlinkFileSystem::new("1.2.3"),
-            )),
-            MountOptions::new("single-symlink").read_only(true),
-        )
-        .expect("mount current symlink leaf");
-
-    let mut content = MemoryFileSystem::new();
-    content
-        .mkdir("/bin", true)
-        .expect("seed package bin directory");
-    content
-        .write_file("/bin/pi", b"#!/bin/sh\n".to_vec())
-        .expect("seed package command");
-    table
-        .mount(
-            "/opt/agentos/pkgs/pi/1.2.3",
-            content,
-            MountOptions::new("tar").read_only(true),
-        )
-        .expect("mount package content leaf");
-
-    assert_eq!(
-        table
-            .realpath("/opt/agentos/bin/pi")
-            .expect("realpath across command/current/content mounts"),
-        "/opt/agentos/pkgs/pi/1.2.3/bin/pi"
-    );
-}
-
-#[test]
-fn mount_table_realpath_keeps_mount_local_absolute_symlinks_inside_mount() {
-    let mut table = MountTable::new(MemoryFileSystem::new());
-    let mut mounted = MemoryFileSystem::new();
-    mounted
-        .write_file("/target.txt", b"target".to_vec())
-        .expect("seed mount target");
-    mounted
-        .symlink("/target.txt", "/link.txt")
-        .expect("seed mount-local absolute symlink");
-
-    table
-        .mount("/mnt", mounted, MountOptions::new("memory"))
-        .expect("mount memory filesystem");
-
-    assert_eq!(
-        table
-            .realpath("/mnt/link.txt")
-            .expect("realpath through mount-local absolute symlink"),
-        "/mnt/target.txt"
-    );
-}
-
-#[test]
-fn leaf_mounts_coexist_with_user_files_in_writable_parent_directory() {
-    let mut table = MountTable::new(MemoryFileSystem::new());
-
-    table
-        .mount_boxed(
-            "/opt/agentos/bin/pi",
-            Box::new(vfs::posix::MountedVirtualFileSystem::new(
-                SingleSymlinkFileSystem::new("../pkgs/pi/current/bin/pi"),
-            )),
-            MountOptions::new("single-symlink").read_only(true),
-        )
-        .expect("mount managed command leaf");
-
-    let mut content = MemoryFileSystem::new();
-    content
-        .mkdir("/bin", true)
-        .expect("seed package bin directory");
-    content
-        .write_file("/bin/pi", b"#!/bin/sh\n".to_vec())
-        .expect("seed executable package command");
-    content
-        .chmod("/bin/pi", 0o755)
-        .expect("chmod package command executable");
-    table
-        .mount(
-            "/opt/agentos/pkgs/pi/1.2.3",
-            content,
-            MountOptions::new("tar").read_only(true),
-        )
-        .expect("mount package content leaf");
-    table
-        .mount_boxed(
-            "/opt/agentos/pkgs/pi/current",
-            Box::new(vfs::posix::MountedVirtualFileSystem::new(
-                SingleSymlinkFileSystem::new("1.2.3"),
-            )),
-            MountOptions::new("single-symlink").read_only(true),
-        )
-        .expect("mount current symlink leaf");
-
-    table
-        .write_file("/opt/agentos/bin/user-tool", b"#!/bin/sh\n".to_vec())
-        .expect("user install writes into writable parent dir");
-    table
-        .chmod("/opt/agentos/bin/user-tool", 0o755)
-        .expect("chmod user command executable");
-
-    let entries = table
-        .read_dir("/opt/agentos/bin")
-        .expect("list merged managed/user bin dir");
-    assert!(entries.contains(&String::from("pi")));
-    assert!(entries.contains(&String::from("user-tool")));
-
-    let managed_realpath = table
-        .realpath("/opt/agentos/bin/pi")
-        .expect("managed command realpath");
-    assert_eq!(managed_realpath, "/opt/agentos/pkgs/pi/1.2.3/bin/pi");
-    assert_eq!(
-        table
-            .stat(&managed_realpath)
-            .expect("managed command stat")
-            .mode
-            & 0o111,
-        0o111
-    );
-    assert_eq!(
-        table
-            .stat("/opt/agentos/bin/user-tool")
-            .expect("user command stat")
-            .mode
-            & 0o111,
-        0o111
-    );
-}
-
-#[test]
-fn mount_table_mounts_nested_filesystems_under_read_only_parents() {
-    let mut table = MountTable::new(MemoryFileSystem::new());
-    table
-        .mount(
-            "/root/node_modules",
-            MemoryFileSystem::new(),
-            MountOptions::new("memory").read_only(true),
-        )
-        .expect("mount read-only parent filesystem");
-
-    let mut nested = MemoryFileSystem::new();
-    nested
-        .write_file("/package.json", b"{}".to_vec())
-        .expect("seed nested package file");
-
-    table
-        .mount(
-            "/root/node_modules/@scope/pkg",
-            nested,
-            MountOptions::new("memory").read_only(true),
-        )
-        .expect("read-only parents must still accept nested mounts");
-
-    assert_eq!(
-        table
-            .read_file("/root/node_modules/@scope/pkg/package.json")
-            .expect("read file through nested mount"),
-        b"{}".to_vec()
-    );
-}
-
-#[test]
-fn mount_table_rejects_mount_when_mount_point_creation_fails() {
-    let mut root = MemoryFileSystem::new();
-    root.write_file("/blocked", b"not a directory".to_vec())
-        .expect("seed file at parent path");
-    let mut table = MountTable::new(root);
-
-    let error = table
-        .mount(
-            "/blocked/child",
-            MemoryFileSystem::new(),
-            MountOptions::new("memory"),
-        )
-        .expect_err("mount point creation should fail through file parent");
-
-    assert_eq!(error.code(), "ENOTDIR");
-    assert!(!table
-        .get_mounts()
-        .iter()
-        .any(|mount| mount.path == "/blocked/child"));
-}
-
-#[test]
-fn mount_table_shuts_down_boxed_filesystem_when_mount_point_creation_fails() {
-    let mut root = MemoryFileSystem::new();
-    root.write_file("/blocked", b"not a directory".to_vec())
-        .expect("seed file at parent path");
-    let mut table = MountTable::new(root);
-    let shutdown = Arc::new(AtomicBool::new(false));
-
-    let error = table
-        .mount_boxed(
-            "/blocked/child",
-            Box::new(ShutdownTrackingFileSystem::new(Arc::clone(&shutdown))),
-            MountOptions::new("tracking"),
-        )
-        .expect_err("mount point creation should fail through file parent");
-
-    assert_eq!(error.code(), "ENOTDIR");
-    assert!(shutdown.load(Ordering::SeqCst));
-}
-
-#[test]
-fn mount_table_unmount_rejects_parent_mounts_with_children() {
-    let mut table = MountTable::new(MemoryFileSystem::new());
-    table
-        .mount("/a", MemoryFileSystem::new(), MountOptions::new("parent"))
-        .expect("mount parent filesystem");
-    table
-        .mount("/a/b", MemoryFileSystem::new(), MountOptions::new("child"))
-        .expect("mount child filesystem");
-
-    let error = table
-        .unmount("/a")
-        .expect_err("parent mount should stay busy while child mount exists");
-    assert_eq!(error.code(), "EBUSY");
-}
-
-#[test]
-fn mount_table_unmount_succeeds_after_children_are_removed() {
-    let mut table = MountTable::new(MemoryFileSystem::new());
-    table
-        .mount("/a", MemoryFileSystem::new(), MountOptions::new("parent"))
-        .expect("mount parent filesystem");
-    table
-        .mount("/a/b", MemoryFileSystem::new(), MountOptions::new("child"))
-        .expect("mount child filesystem");
-
-    table.unmount("/a/b").expect("unmount child first");
-    table.unmount("/a").expect("unmount parent after child");
-}
-
-#[test]
-fn mount_table_does_not_alias_paths_that_repeat_the_mount_segment() {
-    // Regression: `resolve_index` previously stripped the mount prefix with
-    // `trim_start_matches`, which removes *every* leading repetition. For a
-    // mount `/data`, `/data/database.sqlite` was mangled to `/base.sqlite`
-    // (because `/database.sqlite` still starts with `/data`), so a read of one
-    // file silently returned a different file within the mount.
-    let mut backing = MemoryFileSystem::new();
-    backing
-        .write_file("/database.sqlite", b"REAL".to_vec())
-        .expect("seed real file");
-    backing
-        .write_file("/base.sqlite", b"DECOY".to_vec())
-        .expect("seed decoy file");
-
-    let mut table = MountTable::new(MemoryFileSystem::new());
-    table
-        .mount("/data", backing, MountOptions::new("memory"))
-        .expect("mount memory filesystem");
-
-    assert_eq!(
-        table.read_file("/data/database.sqlite").expect("read file"),
-        b"REAL".to_vec(),
-        "path must map to the file the caller named, not an aliased one"
-    );
-
-    // A genuinely nested directory named like the mount must also resolve right.
-    let mut nested = MemoryFileSystem::new();
-    nested.mkdir("/data", true).expect("nested dir");
-    nested
-        .write_file("/data/file.txt", b"NESTED".to_vec())
-        .expect("seed nested file");
-    let mut table = MountTable::new(MemoryFileSystem::new());
-    table
-        .mount("/data", nested, MountOptions::new("memory"))
-        .expect("mount nested filesystem");
-    assert_eq!(
-        table.read_file("/data/data/file.txt").expect("read nested"),
-        b"NESTED".to_vec()
-    );
-}
diff --git a/crates/vfs/tests/posix_root_fs.rs b/crates/vfs/tests/posix_root_fs.rs
deleted file mode 100644
index 1345002ab..000000000
--- a/crates/vfs/tests/posix_root_fs.rs
+++ /dev/null
@@ -1,823 +0,0 @@
-use std::collections::BTreeMap;
-use vfs::posix::{
-    decode_snapshot, decode_snapshot_with_import_limits, encode_snapshot, FilesystemEntry,
-    MemoryFileSystemSnapshot, MemoryFileSystemSnapshotInode, MemoryFileSystemSnapshotInodeKind,
-    MemoryFileSystemSnapshotMetadata, RootFileSystem, RootFilesystemDescriptor,
-    RootFilesystemImportLimits, RootFilesystemMode, RootFilesystemResourceLimits,
-    RootFilesystemSnapshot, ROOT_FILESYSTEM_SNAPSHOT_FORMAT,
-};
-use vfs::posix::{MemoryFileSystem, VirtualFileSystem, S_IFDIR, S_IFLNK, S_IFREG};
-use vfs::posix::{OverlayFileSystem, OverlayMode};
-
-#[derive(Debug, Clone, Copy, Default)]
-struct TestResourceLimits {
-    max_filesystem_bytes: Option<u64>,
-    max_inode_count: Option<usize>,
-}
-
-impl RootFilesystemResourceLimits for TestResourceLimits {
-    fn max_filesystem_bytes(&self) -> Option<u64> {
-        self.max_filesystem_bytes
-    }
-
-    fn max_inode_count(&self) -> Option<usize> {
-        self.max_inode_count
-    }
-}
-
-fn directory_metadata(ino: u64) -> MemoryFileSystemSnapshotMetadata {
-    MemoryFileSystemSnapshotMetadata {
-        mode: S_IFDIR | 0o755,
-        uid: 1000,
-        gid: 1000,
-        nlink: 2,
-        ino,
-        atime_ms: 0,
-        atime_nsec: 0,
-        mtime_ms: 0,
-        mtime_nsec: 0,
-        ctime_ms: 0,
-        ctime_nsec: 0,
-        birthtime_ms: 0,
-    }
-}
-
-fn directory_inode(ino: u64) -> MemoryFileSystemSnapshotInode {
-    MemoryFileSystemSnapshotInode {
-        metadata: directory_metadata(ino),
-        kind: MemoryFileSystemSnapshotInodeKind::Directory,
-    }
-}
-
-fn deep_directory_tree(child_depth: usize) -> MemoryFileSystem {
-    let mut path_index = BTreeMap::new();
-    let mut inodes = BTreeMap::new();
-    let mut next_ino = 1;
-
-    path_index.insert(String::from("/"), next_ino);
-    inodes.insert(next_ino, directory_inode(next_ino));
-    next_ino += 1;
-
-    let mut path = String::from("/deep");
-    path_index.insert(path.clone(), next_ino);
-    inodes.insert(next_ino, directory_inode(next_ino));
-    next_ino += 1;
-
-    for _ in 0..child_depth {
-        path.push_str("/d");
-        path_index.insert(path.clone(), next_ino);
-        inodes.insert(next_ino, directory_inode(next_ino));
-        next_ino += 1;
-    }
-
-    MemoryFileSystem::from_snapshot(MemoryFileSystemSnapshot {
-        path_index,
-        inodes,
-        next_ino,
-    })
-}
-
-fn assert_error_code<T: std::fmt::Debug>(result: Result<T, vfs::posix::VfsError>, expected: &str) {
-    let error = result.expect_err("expected operation to fail");
-    assert_eq!(error.code(), expected);
-}
-
-#[test]
-fn overlay_filesystem_prefers_higher_lowers_and_hides_whiteouts() {
-    let mut higher = MemoryFileSystem::new();
-    let mut lower = MemoryFileSystem::new();
-
-    higher.mkdir("/etc", true).expect("create higher /etc");
-    lower.mkdir("/etc", true).expect("create lower /etc");
-    higher
-        .write_file("/etc/config.txt", b"higher".to_vec())
-        .expect("seed higher file");
-    lower
-        .write_file("/etc/config.txt", b"lower".to_vec())
-        .expect("seed lower file");
-    lower
-        .write_file("/etc/only-lower.txt", b"lower-only".to_vec())
-        .expect("seed lower-only file");
-
-    let mut overlay = OverlayFileSystem::new(vec![higher, lower], OverlayMode::Ephemeral);
-    assert_eq!(
-        overlay
-            .read_file("/etc/config.txt")
-            .expect("read merged config"),
-        b"higher".to_vec()
-    );
-    assert_eq!(
-        overlay
-            .read_file("/etc/only-lower.txt")
-            .expect("read lower-only file"),
-        b"lower-only".to_vec()
-    );
-
-    overlay
-        .remove_file("/etc/only-lower.txt")
-        .expect("whiteout lower file");
-    assert!(!overlay.exists("/etc/only-lower.txt"));
-
-    let entries = overlay.read_dir("/etc").expect("read merged directory");
-    assert_eq!(entries, vec![String::from("config.txt")]);
-}
-
-#[test]
-fn overlay_root_stat_uses_highest_lower_metadata() {
-    let mut higher = MemoryFileSystem::new();
-    let mut lower = MemoryFileSystem::new();
-
-    higher.chown("/", 0, 0).expect("set higher root owner");
-    lower.chown("/", 2000, 3000).expect("set lower root owner");
-
-    let overlay = OverlayFileSystem::new(vec![higher, lower], OverlayMode::Ephemeral);
-    let stat = overlay.lstat("/").expect("lstat merged root");
-
-    assert_eq!(stat.uid, 0);
-    assert_eq!(stat.gid, 0);
-}
-
-#[test]
-fn overlay_rename_moves_lower_directory_trees_without_losing_children() {
-    let mut lower = MemoryFileSystem::new();
-    lower
-        .mkdir("/src/nested", true)
-        .expect("create lower directory tree");
-    lower
-        .write_file("/src/nested/child.txt", b"nested".to_vec())
-        .expect("seed nested child");
-    lower
-        .write_file("/src/root.txt", b"root".to_vec())
-        .expect("seed root child");
-
-    let mut overlay = OverlayFileSystem::new(vec![lower], OverlayMode::Ephemeral);
-    overlay
-        .rename("/src", "/dst")
-        .expect("rename lower directory");
-
-    assert_eq!(
-        overlay
-            .read_file("/dst/nested/child.txt")
-            .expect("read renamed nested child"),
-        b"nested".to_vec()
-    );
-    assert_eq!(
-        overlay
-            .read_file("/dst/root.txt")
-            .expect("read renamed root child"),
-        b"root".to_vec()
-    );
-    assert_error_code(overlay.read_file("/src/nested/child.txt"), "ENOENT");
-}
-
-#[test]
-fn overlay_rename_preserves_symlinks_instead_of_dereferencing_them() {
-    let mut lower = MemoryFileSystem::new();
-    lower
-        .write_file("/target.txt", b"target".to_vec())
-        .expect("seed symlink target");
-    lower
-        .symlink("/target.txt", "/alias.txt")
-        .expect("create lower symlink");
-
-    let mut overlay = OverlayFileSystem::new(vec![lower], OverlayMode::Ephemeral);
-    overlay
-        .rename("/alias.txt", "/alias-renamed.txt")
-        .expect("rename symlink");
-
-    assert!(
-        overlay
-            .lstat("/alias-renamed.txt")
-            .expect("lstat renamed symlink")
-            .is_symbolic_link
-    );
-    assert_eq!(
-        overlay
-            .read_link("/alias-renamed.txt")
-            .expect("read renamed symlink target"),
-        String::from("/target.txt")
-    );
-    assert_error_code(overlay.read_link("/alias.txt"), "ENOENT");
-}
-
-#[test]
-fn overlay_remove_dir_rejects_lower_only_children_in_merged_view() {
-    let mut lower = MemoryFileSystem::new();
-    lower
-        .mkdir("/tmp/nonempty", true)
-        .expect("create lower directory");
-    lower
-        .write_file("/tmp/nonempty/child.txt", b"child".to_vec())
-        .expect("seed lower child");
-
-    let mut overlay = OverlayFileSystem::new(vec![lower], OverlayMode::Ephemeral);
-    assert_error_code(overlay.remove_dir("/tmp/nonempty"), "ENOTEMPTY");
-    assert!(overlay.exists("/tmp/nonempty/child.txt"));
-}
-
-#[test]
-fn overlay_remove_dir_rejects_lower_children_after_directory_copy_up() {
-    let mut lower = MemoryFileSystem::new();
-    lower
-        .mkdir("/tmp/nonempty", true)
-        .expect("create lower directory");
-    lower
-        .write_file("/tmp/nonempty/child.txt", b"child".to_vec())
-        .expect("seed lower child");
-
-    let mut overlay = OverlayFileSystem::new(vec![lower], OverlayMode::Ephemeral);
-    overlay
-        .chmod("/tmp/nonempty", 0o700)
-        .expect("copy up lower directory");
-
-    assert_error_code(overlay.remove_dir("/tmp/nonempty"), "ENOTEMPTY");
-    assert!(overlay.exists("/tmp/nonempty/child.txt"));
-}
-
-#[test]
-fn overlay_rename_rejects_directory_trees_that_exceed_snapshot_depth_limit() {
-    let lower = deep_directory_tree(1025);
-    let mut overlay = OverlayFileSystem::new(vec![lower], OverlayMode::Ephemeral);
-    assert_error_code(overlay.rename("/deep", "/renamed"), "EINVAL");
-}
-
-#[test]
-fn overlay_link_and_rename_preserve_upper_hardlinks_after_copy_up() {
-    let mut lower = MemoryFileSystem::new();
-    lower
-        .write_file("/src.txt", b"base".to_vec())
-        .expect("seed lower file");
-
-    let mut overlay = OverlayFileSystem::new(vec![lower], OverlayMode::Ephemeral);
-    overlay
-        .link("/src.txt", "/alias.txt")
-        .expect("hardlink copied-up file");
-
-    overlay
-        .write_file("/alias.txt", b"mutated".to_vec())
-        .expect("mutate linked file");
-    assert_eq!(
-        overlay.read_file("/src.txt").expect("read linked source"),
-        b"mutated".to_vec()
-    );
-
-    overlay
-        .rename("/src.txt", "/renamed.txt")
-        .expect("rename hardlinked source");
-
-    let alias_stat = overlay.stat("/alias.txt").expect("stat alias");
-    let renamed_stat = overlay.stat("/renamed.txt").expect("stat renamed");
-    assert_eq!(alias_stat.ino, renamed_stat.ino);
-    assert_eq!(alias_stat.nlink, 2);
-    assert_eq!(renamed_stat.nlink, 2);
-    assert_eq!(
-        overlay.read_file("/alias.txt").expect("read alias"),
-        b"mutated".to_vec()
-    );
-    assert_eq!(
-        overlay.read_file("/renamed.txt").expect("read renamed"),
-        b"mutated".to_vec()
-    );
-    assert_error_code(overlay.read_file("/src.txt"), "ENOENT");
-}
-
-#[test]
-fn root_filesystem_uses_bundled_base_and_round_trips_snapshots() {
-    let mut root = RootFileSystem::from_descriptor(RootFilesystemDescriptor::default())
-        .expect("create default root");
-
-    assert!(root.exists("/etc/os-release"));
-    let os_release = root
-        .lstat("/etc/os-release")
-        .expect("lstat /etc/os-release");
-    assert!(os_release.is_symbolic_link);
-    assert_eq!(os_release.uid, 0);
-    assert_eq!(os_release.gid, 0);
-
-    root.mkdir("/workspace", true).expect("create workspace");
-    root.write_file("/workspace/run.sh", b"echo hi".to_vec())
-        .expect("write bootstrapped file");
-
-    let snapshot = root.snapshot().expect("snapshot root");
-    let encoded = encode_snapshot(&snapshot).expect("encode root snapshot");
-    let encoded_json: serde_json::Value =
-        serde_json::from_slice(&encoded).expect("parse encoded snapshot");
-    assert_eq!(
-        encoded_json["format"],
-        serde_json::json!(ROOT_FILESYSTEM_SNAPSHOT_FORMAT)
-    );
-    let decoded = decode_snapshot(&encoded).expect("decode root snapshot");
-
-    assert!(decoded
-        .entries
-        .iter()
-        .any(|entry| entry.path == "/etc/os-release"));
-    assert!(decoded
-        .entries
-        .iter()
-        .any(|entry| entry.path == "/workspace/run.sh"));
-}
-
-#[test]
-fn higher_lowers_do_not_shadow_base_parent_directories_with_default_ownership() {
-    let mut root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: false,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![
-                FilesystemEntry::directory("/etc/agentos"),
-                FilesystemEntry::file("/bin/node", b"stub".to_vec()),
-            ],
-        }],
-        bootstrap_entries: vec![],
-    })
-    .expect("create root");
-
-    let bin = root.stat("/bin").expect("stat /bin");
-    let etc = root.stat("/etc").expect("stat /etc");
-
-    assert_eq!(bin.uid, 0);
-    assert_eq!(bin.gid, 0);
-    assert_eq!(etc.uid, 0);
-    assert_eq!(etc.gid, 0);
-}
-
-#[test]
-fn root_filesystem_composes_multiple_lowers_before_bootstrap_upper() {
-    let mut root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![
-            RootFilesystemSnapshot {
-                entries: vec![
-                    FilesystemEntry::directory("/workspace"),
-                    FilesystemEntry::file("/workspace/shared.txt", b"higher".to_vec()),
-                    FilesystemEntry::file("/workspace/higher-only.txt", b"higher-only".to_vec()),
-                ],
-            },
-            RootFilesystemSnapshot {
-                entries: vec![
-                    FilesystemEntry::directory("/workspace"),
-                    FilesystemEntry::file("/workspace/shared.txt", b"lower".to_vec()),
-                    FilesystemEntry::file("/workspace/lower-only.txt", b"lower-only".to_vec()),
-                ],
-            },
-        ],
-        bootstrap_entries: vec![
-            FilesystemEntry::directory("/workspace"),
-            FilesystemEntry::file("/workspace/shared.txt", b"upper".to_vec()),
-            FilesystemEntry::file("/workspace/upper-only.txt", b"upper-only".to_vec()),
-        ],
-    })
-    .expect("create multi-layer root");
-
-    assert_eq!(
-        root.read_file("/workspace/shared.txt")
-            .expect("read upper override"),
-        b"upper".to_vec()
-    );
-    assert_eq!(
-        root.read_file("/workspace/higher-only.txt")
-            .expect("read higher-only file"),
-        b"higher-only".to_vec()
-    );
-    assert_eq!(
-        root.read_file("/workspace/lower-only.txt")
-            .expect("read lower-only file"),
-        b"lower-only".to_vec()
-    );
-    assert_eq!(
-        root.read_file("/workspace/upper-only.txt")
-            .expect("read upper-only file"),
-        b"upper-only".to_vec()
-    );
-}
-
-#[test]
-fn root_filesystem_bootstrap_suppresses_kernel_reserved_paths() {
-    let mut root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![FilesystemEntry::directory("/workspace")],
-        }],
-        bootstrap_entries: vec![
-            FilesystemEntry::directory("/dev/custom"),
-            FilesystemEntry::file("/dev/null", b"not-a-device".to_vec()),
-            FilesystemEntry::file("/proc/mounts", b"fake mounts".to_vec()),
-            FilesystemEntry::file("/sys/kernel/info", b"blocked".to_vec()),
-            FilesystemEntry::file("/workspace/allowed.txt", b"allowed".to_vec()),
-        ],
-    })
-    .expect("create root with reserved bootstrap paths");
-
-    assert!(!root.exists("/dev/custom"));
-    assert!(!root.exists("/dev/null"));
-    assert!(!root.exists("/proc/mounts"));
-    assert!(!root.exists("/sys/kernel/info"));
-    assert_eq!(
-        root.read_file("/workspace/allowed.txt")
-            .expect("read allowed bootstrap file"),
-        b"allowed".to_vec()
-    );
-
-    let snapshot = root.snapshot().expect("snapshot root");
-    assert!(snapshot
-        .entries
-        .iter()
-        .all(|entry| !entry.path.starts_with("/dev/")));
-    assert!(snapshot
-        .entries
-        .iter()
-        .all(|entry| !entry.path.starts_with("/proc/")));
-    assert!(snapshot
-        .entries
-        .iter()
-        .all(|entry| !entry.path.starts_with("/sys/")));
-    assert!(snapshot
-        .entries
-        .iter()
-        .any(|entry| entry.path == "/workspace/allowed.txt"));
-}
-
-#[test]
-fn snapshot_round_trip_preserves_file_type_bits_in_modes() {
-    let mut root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::Ephemeral,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![FilesystemEntry::directory("/workspace")],
-        }],
-        bootstrap_entries: vec![],
-    })
-    .expect("create root");
-
-    root.write_file("/workspace/file.txt", b"hello".to_vec())
-        .expect("write file");
-    root.mkdir("/workspace/subdir", false)
-        .expect("create directory");
-    root.symlink("/workspace/file.txt", "/workspace/link.txt")
-        .expect("create symlink");
-
-    let decoded = decode_snapshot(
-        &encode_snapshot(&root.snapshot().expect("snapshot root")).expect("encode snapshot"),
-    )
-    .expect("decode snapshot");
-
-    let file_entry = decoded
-        .entries
-        .iter()
-        .find(|entry| entry.path == "/workspace/file.txt")
-        .expect("file entry");
-    assert_eq!(file_entry.mode & 0o170000, S_IFREG);
-
-    let directory_entry = decoded
-        .entries
-        .iter()
-        .find(|entry| entry.path == "/workspace/subdir")
-        .expect("directory entry");
-    assert_eq!(directory_entry.mode & 0o170000, S_IFDIR);
-
-    let symlink_entry = decoded
-        .entries
-        .iter()
-        .find(|entry| entry.path == "/workspace/link.txt")
-        .expect("symlink entry");
-    assert_eq!(symlink_entry.mode & 0o170000, S_IFLNK);
-}
-
-#[test]
-fn decode_snapshot_accepts_zero_mode_strings() {
-    let decoded = decode_snapshot(
-        br#"{
-            "format": "secure_exec_filesystem_snapshot_v1",
-            "filesystem": {
-                "entries": [
-                    {
-                        "path": "/zero.txt",
-                        "type": "file",
-                        "mode": "0",
-                        "uid": 0,
-                        "gid": 0,
-                        "content": "",
-                        "encoding": "utf8"
-                    },
-                    {
-                        "path": "/zero-dir",
-                        "type": "directory",
-                        "mode": "0000",
-                        "uid": 0,
-                        "gid": 0
-                    }
-                ]
-            }
-        }"#,
-    )
-    .expect("decode snapshot");
-
-    let zero_file = decoded
-        .entries
-        .iter()
-        .find(|entry| entry.path == "/zero.txt")
-        .expect("zero file entry");
-    assert_eq!(zero_file.mode, 0);
-
-    let zero_dir = decoded
-        .entries
-        .iter()
-        .find(|entry| entry.path == "/zero-dir")
-        .expect("zero dir entry");
-    assert_eq!(zero_dir.mode, 0);
-}
-
-#[test]
-fn decode_snapshot_accepts_legacy_agentos_format() {
-    let decoded = decode_snapshot(
-        br#"{
-            "format": "agentos_filesystem_snapshot_v1",
-            "filesystem": {
-                "entries": [
-                    {
-                        "path": "/legacy.txt",
-                        "type": "file",
-                        "mode": "644",
-                        "uid": 0,
-                        "gid": 0,
-                        "content": "legacy",
-                        "encoding": "utf8"
-                    }
-                ]
-            }
-        }"#,
-    )
-    .expect("decode legacy snapshot");
-
-    assert!(decoded
-        .entries
-        .iter()
-        .any(|entry| entry.path == "/legacy.txt"));
-}
-
-#[test]
-fn decode_snapshot_rejects_encoded_payloads_that_exceed_import_limits() {
-    let limits = RootFilesystemImportLimits {
-        max_encoded_snapshot_bytes: Some(16),
-        max_filesystem_bytes: Some(1024),
-        max_inode_count: Some(16),
-    };
-
-    let error = decode_snapshot_with_import_limits(
-        br#"{
-            "format": "secure_exec_filesystem_snapshot_v1",
-            "filesystem": { "entries": [] }
-        }"#,
-        &limits,
-    )
-    .expect_err("oversized encoded snapshot should be rejected");
-
-    assert!(error.to_string().contains("encoded bytes"));
-}
-
-#[test]
-fn decode_snapshot_rejects_entry_counts_that_exceed_import_limits() {
-    let limits = RootFilesystemImportLimits {
-        max_encoded_snapshot_bytes: Some(4096),
-        max_filesystem_bytes: Some(1024),
-        max_inode_count: Some(1),
-    };
-
-    let error = decode_snapshot_with_import_limits(
-        br#"{
-            "format": "secure_exec_filesystem_snapshot_v1",
-            "filesystem": {
-                "entries": [
-                    {
-                        "path": "/one",
-                        "type": "directory",
-                        "mode": "755",
-                        "uid": 0,
-                        "gid": 0
-                    },
-                    {
-                        "path": "/two",
-                        "type": "directory",
-                        "mode": "755",
-                        "uid": 0,
-                        "gid": 0
-                    }
-                ]
-            }
-        }"#,
-        &limits,
-    )
-    .expect_err("snapshot entry count should be rejected");
-
-    assert!(error.to_string().contains("exceeding limit 1"));
-}
-
-#[test]
-fn decode_snapshot_rejects_content_bytes_that_exceed_import_limits() {
-    let limits = RootFilesystemImportLimits {
-        max_encoded_snapshot_bytes: Some(4096),
-        max_filesystem_bytes: Some(3),
-        max_inode_count: Some(16),
-    };
-
-    let error = decode_snapshot_with_import_limits(
-        br#"{
-            "format": "secure_exec_filesystem_snapshot_v1",
-            "filesystem": {
-                "entries": [
-                    {
-                        "path": "/large.txt",
-                        "type": "file",
-                        "mode": "644",
-                        "uid": 0,
-                        "gid": 0,
-                        "content": "four",
-                        "encoding": "utf8"
-                    }
-                ]
-            }
-        }"#,
-        &limits,
-    )
-    .expect_err("snapshot content bytes should be rejected");
-
-    assert!(error.to_string().contains("exceeding limit 3"));
-}
-
-#[test]
-fn decode_snapshot_allows_metadata_heavy_entries_within_import_limits() {
-    let path = format!("/{}", "a".repeat(4000));
-    let snapshot = format!(
-        r#"{{
-            "format": "secure_exec_filesystem_snapshot_v1",
-            "filesystem": {{
-                "entries": [
-                    {{
-                        "path": "{path}",
-                        "type": "file",
-                        "mode": "644",
-                        "uid": 0,
-                        "gid": 0
-                    }}
-                ]
-            }}
-        }}"#
-    );
-    let limits = RootFilesystemImportLimits::from_resource_limits(&TestResourceLimits {
-        max_filesystem_bytes: Some(0),
-        max_inode_count: Some(1),
-    });
-
-    let decoded = decode_snapshot_with_import_limits(snapshot.as_bytes(), &limits)
-        .expect("metadata-heavy empty file should fit decoded byte and inode limits");
-
-    assert_eq!(decoded.entries.len(), 1);
-    assert_eq!(decoded.entries[0].path, path);
-}
-
-#[test]
-fn root_filesystem_rejects_descriptor_snapshots_that_exceed_import_limits() {
-    let limits = RootFilesystemImportLimits {
-        max_encoded_snapshot_bytes: Some(4096),
-        max_filesystem_bytes: Some(3),
-        max_inode_count: Some(16),
-    };
-
-    let error = RootFileSystem::from_descriptor_with_import_limits(
-        RootFilesystemDescriptor {
-            mode: RootFilesystemMode::Ephemeral,
-            disable_default_base_layer: true,
-            lowers: vec![RootFilesystemSnapshot {
-                entries: vec![
-                    FilesystemEntry::directory("/workspace"),
-                    FilesystemEntry::file("/workspace/large.txt", b"four".to_vec()),
-                ],
-            }],
-            bootstrap_entries: Vec::new(),
-        },
-        &limits,
-    )
-    .expect_err("descriptor snapshot content bytes should be rejected");
-
-    assert!(error.to_string().contains("exceeding limit 3"));
-}
-
-#[test]
-fn root_filesystem_rejects_implicit_parent_directories_that_exceed_import_limits() {
-    let limits = RootFilesystemImportLimits {
-        max_encoded_snapshot_bytes: Some(4096),
-        max_filesystem_bytes: Some(16),
-        max_inode_count: Some(1),
-    };
-
-    let error = RootFileSystem::from_descriptor_with_import_limits(
-        RootFilesystemDescriptor {
-            mode: RootFilesystemMode::Ephemeral,
-            disable_default_base_layer: true,
-            lowers: vec![RootFilesystemSnapshot {
-                entries: vec![FilesystemEntry::file(
-                    "/deep/nested/file.txt",
-                    b"x".to_vec(),
-                )],
-            }],
-            bootstrap_entries: Vec::new(),
-        },
-        &limits,
-    )
-    .expect_err("implicit parent directories should count against inode limits");
-
-    assert!(error.to_string().contains("exceeding limit 1"));
-}
-
-#[test]
-fn root_filesystem_rejects_duplicate_descriptor_entries_that_exceed_import_limits() {
-    let limits = RootFilesystemImportLimits {
-        max_encoded_snapshot_bytes: Some(4096),
-        max_filesystem_bytes: Some(16),
-        max_inode_count: Some(1),
-    };
-
-    let error = RootFileSystem::from_descriptor_with_import_limits(
-        RootFilesystemDescriptor {
-            mode: RootFilesystemMode::Ephemeral,
-            disable_default_base_layer: true,
-            lowers: vec![RootFilesystemSnapshot {
-                entries: vec![
-                    FilesystemEntry::file("/dup.txt", Vec::new()),
-                    FilesystemEntry::file("/dup.txt", Vec::new()),
-                ],
-            }],
-            bootstrap_entries: Vec::new(),
-        },
-        &limits,
-    )
-    .expect_err("duplicate descriptor entries should count against import limits");
-
-    assert!(error.to_string().contains("exceeding limit 1"));
-}
-
-#[test]
-fn root_filesystem_normalizes_import_paths_before_creating_parent_directories() {
-    let limits = RootFilesystemImportLimits {
-        max_encoded_snapshot_bytes: Some(4096),
-        max_filesystem_bytes: Some(16),
-        max_inode_count: Some(2),
-    };
-
-    let mut root = RootFileSystem::from_descriptor_with_import_limits(
-        RootFilesystemDescriptor {
-            mode: RootFilesystemMode::Ephemeral,
-            disable_default_base_layer: true,
-            lowers: vec![RootFilesystemSnapshot {
-                entries: vec![FilesystemEntry::file("/a/../b/file.txt", b"x".to_vec())],
-            }],
-            bootstrap_entries: Vec::new(),
-        },
-        &limits,
-    )
-    .expect("normalized import path should fit inode limit");
-
-    assert!(!root.exists("/a"));
-    assert!(root.exists("/b"));
-    assert_eq!(
-        root.read_file("/b/file.txt")
-            .expect("read normalized import file"),
-        b"x".to_vec()
-    );
-}
-
-#[test]
-fn read_only_root_locks_after_bootstrap_but_preserves_boot_entries() {
-    let mut root = RootFileSystem::from_descriptor(RootFilesystemDescriptor {
-        mode: RootFilesystemMode::ReadOnly,
-        disable_default_base_layer: true,
-        lowers: vec![RootFilesystemSnapshot {
-            entries: vec![FilesystemEntry::directory("/workspace")],
-        }],
-        bootstrap_entries: vec![FilesystemEntry::file(
-            "/workspace/boot.txt",
-            b"ready".to_vec(),
-        )],
-    })
-    .expect("create read-only root");
-
-    root.finish_bootstrap();
-
-    assert_eq!(
-        root.read_file("/workspace/boot.txt")
-            .expect("read preserved boot entry"),
-        b"ready".to_vec()
-    );
-    assert_eq!(
-        root.mkdir("/workspace", true)
-            .expect("mkdir -p existing directory on readonly root"),
-        ()
-    );
-    let error = root
-        .write_file("/workspace/blocked.txt", b"blocked".to_vec())
-        .expect_err("readonly root should reject new writes");
-    assert_eq!(error.code(), "EROFS");
-}
diff --git a/crates/vfs/tests/posix_single_symlink_fs.rs b/crates/vfs/tests/posix_single_symlink_fs.rs
deleted file mode 100644
index e9b29581c..000000000
--- a/crates/vfs/tests/posix_single_symlink_fs.rs
+++ /dev/null
@@ -1,20 +0,0 @@
-use vfs::posix::{SingleSymlinkFileSystem, VirtualFileSystem};
-
-#[test]
-fn single_symlink_filesystem_exposes_root_symlink_only() {
-    let fs = SingleSymlinkFileSystem::new("../pkgs/pi/current/bin/pi");
-
-    let stat = fs.lstat("/").expect("lstat root symlink");
-    assert!(stat.is_symbolic_link);
-    assert!(!stat.is_directory);
-    assert_eq!(stat.mode & 0o777, 0o777);
-    assert_eq!(
-        fs.read_link("/").expect("read root symlink target"),
-        "../pkgs/pi/current/bin/pi"
-    );
-
-    let error = fs
-        .lstat("/anything")
-        .expect_err("non-root paths do not exist");
-    assert_eq!(error.code(), "ENOENT");
-}
diff --git a/crates/vfs/tests/posix_tar_fs.rs b/crates/vfs/tests/posix_tar_fs.rs
deleted file mode 100644
index a6bd16fbb..000000000
--- a/crates/vfs/tests/posix_tar_fs.rs
+++ /dev/null
@@ -1,131 +0,0 @@
-#![cfg(not(target_arch = "wasm32"))]
-
-use std::fs::File;
-use std::io::Write;
-use std::path::PathBuf;
-use std::time::{SystemTime, UNIX_EPOCH};
-use tar::{Builder, EntryType, Header};
-use vfs::posix::{TarFileSystem, VirtualFileSystem};
-
-#[test]
-fn tar_filesystem_reads_files_dirs_symlinks_and_realpaths() {
-    let tar_path = write_fixture_tar();
-    let mut fs = TarFileSystem::open(&tar_path, "fixture-digest").expect("open tar filesystem");
-
-    assert_eq!(
-        fs.read_file("/pkg/bin/pi").expect("read file"),
-        b"#!/bin/sh\necho pi\n".to_vec()
-    );
-
-    let root_entries = fs.read_dir("/pkg").expect("read package dir");
-    assert!(root_entries.contains(&String::from("bin")));
-    assert!(root_entries.contains(&String::from("lib")));
-
-    let typed_entries = fs
-        .read_dir_with_types("/pkg/lib")
-        .expect("read typed package dir");
-    assert!(typed_entries
-        .iter()
-        .any(|entry| entry.name == "target.txt" && !entry.is_directory));
-    assert!(typed_entries
-        .iter()
-        .any(|entry| entry.name == "target-link.txt" && entry.is_symbolic_link));
-
-    assert_eq!(
-        fs.read_link("/pkg/lib/target-link.txt")
-            .expect("read symlink"),
-        "target.txt"
-    );
-    assert_eq!(
-        fs.realpath("/pkg/lib/target-link.txt")
-            .expect("resolve symlink"),
-        "/pkg/lib/target.txt"
-    );
-    assert_eq!(
-        fs.read_file("/pkg/lib/target-link.txt")
-            .expect("read through symlink"),
-        b"target\n".to_vec()
-    );
-
-    let stat = fs.stat("/pkg/bin/pi").expect("stat executable");
-    assert_eq!(stat.mode & 0o777, 0o755);
-    assert!(fs.exists("/pkg/lib/target.txt"));
-    assert!(!fs.exists("/pkg/missing"));
-}
-
-#[test]
-fn tar_filesystem_rejects_writes_as_read_only() {
-    let tar_path = write_fixture_tar();
-    let mut fs = TarFileSystem::open(&tar_path, "fixture-readonly").expect("open tar filesystem");
-
-    let error = fs
-        .write_file("/pkg/new.txt", b"nope".to_vec())
-        .expect_err("tar filesystem is read-only");
-    assert_eq!(error.code(), "EROFS");
-}
-
-fn write_fixture_tar() -> PathBuf {
-    let mut path = std::env::temp_dir();
-    let nonce = SystemTime::now()
-        .duration_since(UNIX_EPOCH)
-        .expect("clock")
-        .as_nanos();
-    path.push(format!("secure-exec-tar-fs-fixture-{nonce}.tar"));
-
-    let file = File::create(&path).expect("create fixture tar");
-    let mut builder = Builder::new(file);
-    append_dir(&mut builder, "pkg");
-    append_dir(&mut builder, "pkg/bin");
-    append_file(&mut builder, "pkg/bin/pi", b"#!/bin/sh\necho pi\n", 0o755);
-    append_dir(&mut builder, "pkg/lib");
-    append_file(&mut builder, "pkg/lib/target.txt", b"target\n", 0o644);
-    append_symlink(&mut builder, "pkg/lib/target-link.txt", "target.txt");
-    builder.finish().expect("finish fixture tar");
-    builder
-        .into_inner()
-        .expect("finish file")
-        .flush()
-        .expect("flush tar");
-
-    path
-}
-
-fn append_dir(builder: &mut Builder<File>, path: &str) {
-    let mut header = Header::new_gnu();
-    header.set_entry_type(EntryType::Directory);
-    header.set_mode(0o755);
-    header.set_uid(0);
-    header.set_gid(0);
-    header.set_size(0);
-    header.set_cksum();
-    builder
-        .append_data(&mut header, path, std::io::empty())
-        .expect("append directory");
-}
-
-fn append_file(builder: &mut Builder<File>, path: &str, content: &[u8], mode: u32) {
-    let mut header = Header::new_gnu();
-    header.set_entry_type(EntryType::Regular);
-    header.set_mode(mode);
-    header.set_uid(0);
-    header.set_gid(0);
-    header.set_size(content.len() as u64);
-    header.set_cksum();
-    builder
-        .append_data(&mut header, path, content)
-        .expect("append file");
-}
-
-fn append_symlink(builder: &mut Builder<File>, path: &str, target: &str) {
-    let mut header = Header::new_gnu();
-    header.set_entry_type(EntryType::Symlink);
-    header.set_mode(0o777);
-    header.set_uid(0);
-    header.set_gid(0);
-    header.set_size(0);
-    header.set_link_name(target).expect("set link target");
-    header.set_cksum();
-    builder
-        .append_data(&mut header, path, std::io::empty())
-        .expect("append symlink");
-}
diff --git a/crates/vfs/tests/posix_vfs.rs b/crates/vfs/tests/posix_vfs.rs
deleted file mode 100644
index d5a431951..000000000
--- a/crates/vfs/tests/posix_vfs.rs
+++ /dev/null
@@ -1,610 +0,0 @@
-use std::{fmt::Debug, thread::sleep, time::Duration};
-use vfs::posix::{
-    normalize_path, validate_path, MemoryFileSystem, VfsResult, VirtualFileSystem, S_IFLNK, S_IFREG,
-};
-
-fn assert_error_code<T: Debug>(result: vfs::posix::VfsResult<T>, expected: &str) {
-    let error = result.expect_err("operation should fail");
-    assert_eq!(error.code(), expected);
-}
-
-fn assert_invalid_path_keeps_snapshot<T: Debug>(
-    baseline: &MemoryFileSystem,
-    path: &str,
-    operation: impl FnOnce(&mut MemoryFileSystem, &str) -> VfsResult<T>,
-) {
-    let mut filesystem = MemoryFileSystem::from_snapshot(baseline.snapshot());
-    let before = filesystem.snapshot();
-    assert_error_code(operation(&mut filesystem, path), "EINVAL");
-    assert_eq!(filesystem.snapshot(), before);
-}
-
-fn generated_invalid_path(seed: u32) -> String {
-    let mut path = String::from("/");
-    let segments = (seed % 4) + 1;
-    for segment in 0..segments {
-        if segment > 0 {
-            path.push('/');
-        }
-        path.push(char::from(b'a' + ((seed + segment) % 26) as u8));
-        let invalid_byte = if seed.is_multiple_of(2) {
-            0
-        } else if seed.is_multiple_of(5) {
-            0x7f
-        } else {
-            1 + ((seed + segment) % 31) as u8
-        };
-        path.push(char::from(invalid_byte));
-        path.push(char::from(b'a' + (((seed / 3) + segment) % 26) as u8));
-    }
-    path
-}
-
-#[test]
-fn write_file_normalizes_paths_and_auto_creates_parents() {
-    let mut filesystem = MemoryFileSystem::new();
-
-    filesystem
-        .write_file("workspace//nested/../nested/hello.txt", "hello world")
-        .expect("write file");
-
-    assert!(filesystem.exists("/workspace/nested/hello.txt"));
-    assert_eq!(
-        filesystem
-            .read_text_file("/workspace/nested/hello.txt")
-            .expect("read text"),
-        "hello world"
-    );
-    assert_eq!(
-        normalize_path("/workspace//nested/../nested/hello.txt"),
-        "/workspace/nested/hello.txt"
-    );
-}
-
-#[test]
-fn mkdir_and_remove_dir_enforce_parent_and_emptiness_rules() {
-    let mut filesystem = MemoryFileSystem::new();
-
-    assert_error_code(filesystem.create_dir("/missing/child"), "ENOENT");
-
-    filesystem
-        .mkdir("/tmp/deep/tree", true)
-        .expect("recursive mkdir");
-    filesystem
-        .remove_dir("/tmp/deep/tree")
-        .expect("remove empty dir");
-    assert!(!filesystem.exists("/tmp/deep/tree"));
-
-    filesystem
-        .write_file("/tmp/nonempty/file.txt", "x")
-        .expect("write child");
-    assert_error_code(filesystem.remove_dir("/tmp/nonempty"), "ENOTEMPTY");
-}
-
-#[test]
-fn rename_moves_directory_trees_without_losing_children() {
-    let mut filesystem = MemoryFileSystem::new();
-
-    filesystem
-        .write_file("/src/sub/one.txt", "1")
-        .expect("write first child");
-    filesystem
-        .write_file("/src/sub/two.txt", "2")
-        .expect("write second child");
-
-    filesystem.rename("/src", "/dst").expect("rename tree");
-
-    assert!(!filesystem.exists("/src"));
-    assert_eq!(
-        filesystem
-            .read_text_file("/dst/sub/one.txt")
-            .expect("read renamed child"),
-        "1"
-    );
-    assert_eq!(
-        filesystem
-            .read_text_file("/dst/sub/two.txt")
-            .expect("read renamed second child"),
-        "2"
-    );
-}
-
-#[test]
-fn symlinks_support_readlink_lstat_realpath_and_dangling_targets() {
-    let mut filesystem = MemoryFileSystem::new();
-
-    filesystem
-        .write_file("/real/target.txt", "target")
-        .expect("write target");
-    filesystem
-        .symlink("../real/target.txt", "/alias.txt")
-        .expect("create symlink");
-
-    assert_eq!(
-        filesystem.read_link("/alias.txt").expect("read link"),
-        "../real/target.txt"
-    );
-    assert_eq!(
-        filesystem.realpath("/alias.txt").expect("realpath"),
-        "/real/target.txt"
-    );
-    assert_eq!(
-        filesystem
-            .read_text_file("/alias.txt")
-            .expect("read through symlink"),
-        "target"
-    );
-
-    let link_stat = filesystem.lstat("/alias.txt").expect("lstat symlink");
-    assert!(link_stat.is_symbolic_link);
-    assert!(!link_stat.is_directory);
-    assert_eq!(link_stat.mode & 0o170000, S_IFLNK);
-
-    let target_stat = filesystem.stat("/alias.txt").expect("stat symlink target");
-    assert!(!target_stat.is_symbolic_link);
-    assert_eq!(target_stat.mode & 0o170000, S_IFREG);
-
-    filesystem
-        .symlink("/missing.txt", "/dangling.txt")
-        .expect("create dangling symlink");
-    let dangling = filesystem.lstat("/dangling.txt").expect("lstat dangling");
-    assert!(dangling.is_symbolic_link);
-    assert_error_code(filesystem.stat("/dangling.txt"), "ENOENT");
-    assert_error_code(filesystem.read_file("/dangling.txt"), "ENOENT");
-}
-
-#[test]
-fn readlink_on_regular_file_returns_einval() {
-    let mut filesystem = MemoryFileSystem::new();
-
-    filesystem
-        .write_file("/regular.txt", "content")
-        .expect("write regular file");
-
-    assert_error_code(filesystem.read_link("/regular.txt"), "EINVAL");
-}
-
-#[test]
-fn symlink_loops_fail_closed() {
-    let mut filesystem = MemoryFileSystem::new();
-
-    filesystem
-        .symlink("/loop-b.txt", "/loop-a.txt")
-        .expect("create first loop entry");
-    filesystem
-        .symlink("/loop-a.txt", "/loop-b.txt")
-        .expect("create second loop entry");
-
-    assert_error_code(filesystem.read_file("/loop-a.txt"), "ELOOP");
-}
-
-#[test]
-fn path_validation_rejects_nul_and_control_bytes_without_mutating_filesystem() {
-    let mut baseline = MemoryFileSystem::new();
-    baseline
-        .write_file("/safe/file.txt", "safe contents")
-        .expect("seed file");
-    baseline
-        .write_file("/safe/source.txt", "source")
-        .expect("seed link source");
-    baseline
-        .symlink("/safe/file.txt", "/safe/link.txt")
-        .expect("seed symlink");
-    baseline
-        .create_dir("/safe/empty")
-        .expect("seed removable dir");
-
-    let invalid_paths = ["/bad\0path", "/bad\npath", "/bad\x7fpath"];
-
-    for invalid_path in invalid_paths {
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| fs.read_file(path));
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| fs.read_dir(path));
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.read_dir_with_types(path)
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| fs.stat(path));
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| fs.realpath(path));
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| fs.read_link(path));
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| fs.lstat(path));
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.write_file(path, "x")
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.create_file_exclusive(path, "x")
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.append_file(path, "x")
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| fs.create_dir(path));
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.mkdir(path, true)
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.remove_file(path)
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| fs.remove_dir(path));
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.rename(path, "/safe/renamed.txt")
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.rename("/safe/file.txt", path)
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.symlink("/safe/file.txt", path)
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.link(path, "/safe/linked.txt")
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.link("/safe/source.txt", path)
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.chmod(path, 0o600)
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.chown(path, 1000, 1000)
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.utimes(path, 1_000, 2_000)
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.truncate(path, 1)
-        });
-        assert_invalid_path_keeps_snapshot(&baseline, invalid_path, |fs, path| {
-            fs.pread(path, 0, 1)
-        });
-    }
-}
-
-#[test]
-fn validate_path_rejects_generated_invalid_inputs() {
-    for seed in 0..1_000u32 {
-        let invalid_path = generated_invalid_path(seed);
-        assert!(
-            invalid_path
-                .bytes()
-                .any(|byte| byte == 0 || byte.is_ascii_control()),
-            "generated path should contain at least one prohibited byte"
-        );
-        assert_error_code(validate_path(&invalid_path), "EINVAL");
-    }
-}
-
-#[test]
-fn intermediate_symlink_components_are_resolved_for_reads_writes_and_stats() {
-    let mut filesystem = MemoryFileSystem::new();
-
-    filesystem
-        .write_file("/b/existing/file.txt", "target")
-        .expect("write canonical file");
-    filesystem
-        .symlink("/b", "/a")
-        .expect("create directory symlink");
-
-    assert_eq!(
-        filesystem
-            .read_text_file("/a/existing/file.txt")
-            .expect("read through intermediate symlink"),
-        "target"
-    );
-    assert!(filesystem.exists("/a/existing/file.txt"));
-    assert_eq!(
-        filesystem
-            .realpath("/a/existing/file.txt")
-            .expect("realpath through intermediate symlink"),
-        "/b/existing/file.txt"
-    );
-    assert_eq!(
-        filesystem
-            .stat("/a/existing/file.txt")
-            .expect("stat through intermediate symlink")
-            .mode
-            & 0o170000,
-        S_IFREG
-    );
-
-    filesystem
-        .write_file("/a/new/nested.txt", "created through alias")
-        .expect("write through symlinked parent");
-    assert_eq!(
-        filesystem
-            .read_text_file("/b/new/nested.txt")
-            .expect("read canonical created file"),
-        "created through alias"
-    );
-}
-
-#[test]
-fn intermediate_symlink_loops_fail_closed() {
-    let mut filesystem = MemoryFileSystem::new();
-
-    filesystem
-        .symlink("/b", "/a")
-        .expect("create first loop entry");
-    filesystem
-        .symlink("/a", "/b")
-        .expect("create second loop entry");
-
-    assert_error_code(filesystem.read_file("/a/file.txt"), "ELOOP");
-}
-
-#[test]
-fn hard_links_share_inode_data_and_survive_original_removal() {
-    let mut filesystem = MemoryFileSystem::new();
-
-    filesystem
-        .write_file("/shared.txt", "hello")
-        .expect("write shared file");
-    filesystem
-        .link("/shared.txt", "/linked.txt")
-        .expect("create hard link");
-
-    let before = filesystem.stat("/shared.txt").expect("stat original");
-    assert_eq!(before.nlink, 2);
-
-    filesystem
-        .write_file("/linked.txt", "updated")
-        .expect("write through linked path");
-    assert_eq!(
-        filesystem
-            .read_text_file("/shared.txt")
-            .expect("read shared inode"),
-        "updated"
-    );
-
-    filesystem
-        .remove_file("/shared.txt")
-        .expect("remove original name");
-    assert!(!filesystem.exists("/shared.txt"));
-    assert_eq!(
-        filesystem
-            .read_text_file("/linked.txt")
-            .expect("read surviving link"),
-        "updated"
-    );
-    assert_eq!(
-        filesystem
-            .stat("/linked.txt")
-            .expect("stat surviving link")
-            .nlink,
-        1
-    );
-}
-
-#[test]
-fn chmod_chown_utimes_truncate_and_pread_update_metadata_and_contents() {
-    let mut filesystem = MemoryFileSystem::new();
-
-    filesystem
-        .write_file("/meta.txt", "hello")
-        .expect("write metadata file");
-    filesystem
-        .truncate("/meta.txt", 8)
-        .expect("truncate metadata file");
-    filesystem
-        .chmod("/meta.txt", 0o755)
-        .expect("chmod metadata file");
-    filesystem
-        .chown("/meta.txt", 2000, 3000)
-        .expect("chown metadata file");
-    filesystem
-        .utimes("/meta.txt", 1_700_000_000_000, 1_710_000_000_000)
-        .expect("utimes metadata file");
-
-    let stat = filesystem.stat("/meta.txt").expect("stat metadata file");
-    assert_eq!(stat.mode & 0o170000, S_IFREG);
-    assert_eq!(stat.mode & 0o777, 0o755);
-    assert_eq!(stat.uid, 2000);
-    assert_eq!(stat.gid, 3000);
-    assert_eq!(stat.atime_ms, 1_700_000_000_000);
-    assert_eq!(stat.mtime_ms, 1_710_000_000_000);
-    assert_eq!(stat.size, 8);
-    assert_eq!(stat.blocks, 1);
-    // Device ids are unique per filesystem instance, so only assert that the
-    // value is stable within this filesystem.
-    assert_ne!(stat.dev, 0);
-    assert_eq!(
-        stat.dev,
-        filesystem.stat("/").expect("stat root").dev,
-        "files in one filesystem instance share its device id"
-    );
-    assert_eq!(stat.rdev, 0);
-
-    let bytes = filesystem
-        .read_file("/meta.txt")
-        .expect("read truncated file");
-    assert_eq!(&bytes[..5], b"hello");
-    assert_eq!(&bytes[5..], &[0, 0, 0]);
-
-    assert_eq!(
-        filesystem
-            .pread("/meta.txt", 2, 4)
-            .expect("pread middle slice"),
-        b"llo\0".to_vec()
-    );
-    assert!(filesystem
-        .pread("/meta.txt", 100, 4)
-        .expect("pread beyond eof")
-        .is_empty());
-}
-
-#[test]
-fn oversized_raw_truncate_and_pwrite_fail_without_mutating_file_contents() {
-    let mut filesystem = MemoryFileSystem::new();
-    filesystem
-        .write_file("/huge.txt", b"safe".to_vec())
-        .expect("seed file");
-
-    assert_error_code(filesystem.truncate("/huge.txt", u64::MAX), "ENOMEM");
-    assert_eq!(
-        filesystem
-            .read_file("/huge.txt")
-            .expect("read after failed truncate"),
-        b"safe".to_vec()
-    );
-
-    assert_error_code(
-        filesystem.pwrite("/huge.txt", b"x".to_vec(), u64::MAX),
-        "ENOMEM",
-    );
-    assert_eq!(
-        filesystem
-            .read_file("/huge.txt")
-            .expect("read after failed pwrite"),
-        b"safe".to_vec()
-    );
-}
-
-#[test]
-fn directory_reads_and_metadata_updates_refresh_timestamps() {
-    let mut filesystem = MemoryFileSystem::new();
-    filesystem
-        .write_file("/workspace/file.txt", "hello")
-        .expect("seed file");
-
-    let before_dir_read = filesystem.stat("/workspace").expect("stat workspace");
-    sleep(Duration::from_millis(2));
-    filesystem
-        .read_dir("/workspace")
-        .expect("read workspace directory");
-    let after_dir_read = filesystem.stat("/workspace").expect("restat workspace");
-    assert!(
-        after_dir_read.atime_ms > before_dir_read.atime_ms,
-        "directory atime should advance after read_dir"
-    );
-
-    let before_link = filesystem.stat("/workspace/file.txt").expect("stat file");
-    sleep(Duration::from_millis(2));
-    filesystem
-        .link("/workspace/file.txt", "/workspace/file-link.txt")
-        .expect("create hard link");
-    let after_link = filesystem.stat("/workspace/file.txt").expect("restat file");
-    assert!(
-        after_link.ctime_ms > before_link.ctime_ms,
-        "ctime should advance when link count changes"
-    );
-
-    let before_rename = after_link.ctime_ms;
-    sleep(Duration::from_millis(2));
-    filesystem
-        .rename("/workspace/file-link.txt", "/workspace/file-renamed.txt")
-        .expect("rename linked path");
-    let renamed = filesystem
-        .stat("/workspace/file-renamed.txt")
-        .expect("stat renamed path");
-    assert!(
-        renamed.ctime_ms > before_rename,
-        "ctime should advance on rename"
-    );
-}
-
-#[test]
-fn read_dir_with_types_reports_direct_children() {
-    let mut filesystem = MemoryFileSystem::new();
-
-    filesystem
-        .write_file("/typed/file.txt", "f")
-        .expect("write file child");
-    filesystem
-        .write_file("/typed/sub/nested.txt", "n")
-        .expect("write nested child");
-    filesystem
-        .symlink("/typed/file.txt", "/typed/link.txt")
-        .expect("write symlink child");
-
-    let entries = filesystem
-        .read_dir_with_types("/typed")
-        .expect("read typed directory");
-
-    let names: Vec<_> = entries.iter().map(|entry| entry.name.as_str()).collect();
-    assert_eq!(names, vec!["file.txt", "link.txt", "sub"]);
-
-    let sub = entries
-        .iter()
-        .find(|entry| entry.name == "sub")
-        .expect("sub directory should be present");
-    assert!(sub.is_directory);
-    assert!(!sub.is_symbolic_link);
-
-    let link = entries
-        .iter()
-        .find(|entry| entry.name == "link.txt")
-        .expect("symlink should be present");
-    assert!(!link.is_directory);
-    assert!(link.is_symbolic_link);
-}
-
-#[test]
-fn memory_filesystem_snapshot_round_trips_hardlinks_and_symlinks() {
-    let mut filesystem = MemoryFileSystem::new();
-
-    filesystem
-        .write_file("/workspace/original.txt", "hello")
-        .expect("write original");
-    filesystem
-        .link("/workspace/original.txt", "/workspace/linked.txt")
-        .expect("create hard link");
-    filesystem
-        .symlink("/workspace/original.txt", "/workspace/alias.txt")
-        .expect("create symlink");
-
-    let snapshot = filesystem.snapshot();
-    let mut restored = MemoryFileSystem::from_snapshot(snapshot);
-
-    assert_eq!(
-        restored
-            .read_text_file("/workspace/linked.txt")
-            .expect("read hard-linked file"),
-        "hello"
-    );
-    assert_eq!(
-        restored
-            .read_text_file("/workspace/alias.txt")
-            .expect("read symlink target"),
-        "hello"
-    );
-
-    restored
-        .write_file("/workspace/linked.txt", "updated")
-        .expect("write through hard link");
-    assert_eq!(
-        restored
-            .read_text_file("/workspace/original.txt")
-            .expect("hard link should share inode"),
-        "updated"
-    );
-    assert_eq!(
-        restored
-            .stat("/workspace/original.txt")
-            .expect("stat restored hard link")
-            .nlink,
-        2
-    );
-}
-
-#[test]
-fn memory_filesystem_instances_have_distinct_device_ids() {
-    let mut first = MemoryFileSystem::new();
-    let mut second = MemoryFileSystem::new();
-    first
-        .write_file("/file.txt", "first")
-        .expect("write file in first filesystem");
-    second
-        .write_file("/file.txt", "second")
-        .expect("write file in second filesystem");
-
-    let first_stat = first.stat("/file.txt").expect("stat first file");
-    let second_stat = second.stat("/file.txt").expect("stat second file");
-
-    // Inode numbers are only unique within one filesystem instance, so file
-    // identity comparisons across layered or mounted compositions need
-    // per-instance device ids.
-    assert_eq!(first_stat.ino, second_stat.ino);
-    assert_ne!(first_stat.dev, second_stat.dev);
-
-    let restored = MemoryFileSystem::from_snapshot(first.snapshot());
-    assert_ne!(
-        restored.lstat("/file.txt").expect("stat restored file").dev,
-        second_stat.dev
-    );
-}
diff --git a/crates/vm-config/Cargo.toml b/crates/vm-config/Cargo.toml
index 5f0bc93c1..344010bec 100644
--- a/crates/vm-config/Cargo.toml
+++ b/crates/vm-config/Cargo.toml
@@ -4,9 +4,10 @@ version.workspace = true
 edition.workspace = true
 license.workspace = true
 repository.workspace = true
-description = "Shared Secure Exec VM creation JSON config DTOs"
+description = "secure-exec-vm-config compatibility shim for agentos-vm-config"
+
+[lib]
+name = "secure_exec_vm_config"
 
 [dependencies]
-serde = { version = "1.0", features = ["derive"] }
-serde_json = "1.0"
-ts-rs = { version = "10.1", features = ["import-esm", "no-serde-warnings", "serde-compat"] }
+agentos_vm_config = { package = "agentos-vm-config", path = "../../../agentos/crates/vm-config", version = "0.0.1" }
diff --git a/crates/vm-config/src/lib.rs b/crates/vm-config/src/lib.rs
index 5e13b6648..5a16602f4 100644
--- a/crates/vm-config/src/lib.rs
+++ b/crates/vm-config/src/lib.rs
@@ -1,942 +1,3 @@
-use std::collections::BTreeMap;
+//! Compatibility shim for `agentos-vm-config`.
 
-use serde::{Deserialize, Serialize};
-use ts_rs::TS;
-
-/// Canonical Rust-side VM config. Unknown fields must stay rejected here and in
-/// the TS preflight schema at
-/// `packages/core/src/node-runtime-options-schema.ts`; update both when a
-/// public `NodeRuntime.create(...)` option changes the generated VM config.
-#[derive(Debug, Clone, PartialEq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-#[derive(Default)]
-pub struct CreateVmConfig {
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub cwd: Option<String>,
-    #[serde(default, skip_serializing_if = "BTreeMap::is_empty")]
-    #[ts(type = "Record<string, string>")]
-    pub env: BTreeMap<String, String>,
-    #[serde(default, rename = "rootFilesystem")]
-    pub root_filesystem: RootFilesystemConfig,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub permissions: Option<PermissionsPolicy>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub limits: Option<VmLimitsConfig>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub dns: Option<VmDnsConfig>,
-    #[serde(
-        default,
-        rename = "nativeRoot",
-        skip_serializing_if = "Option::is_none"
-    )]
-    #[ts(optional)]
-    pub native_root: Option<NativeRootFilesystemConfig>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub listen: Option<VmListenPolicyConfig>,
-    #[serde(
-        default,
-        rename = "loopbackExemptPorts",
-        skip_serializing_if = "Vec::is_empty"
-    )]
-    pub loopback_exempt_ports: Vec<u16>,
-    #[serde(default, rename = "jsRuntime", skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub js_runtime: Option<JsRuntimeConfig>,
-    #[serde(
-        default,
-        rename = "bootstrapCommands",
-        skip_serializing_if = "Option::is_none"
-    )]
-    #[ts(optional)]
-    pub bootstrap_commands: Option<Vec<String>>,
-}
-
-impl CreateVmConfig {
-    pub fn validate(&self, max_frame_bytes: usize) -> Result<(), VmConfigError> {
-        if let Some(cwd) = self.cwd.as_deref() {
-            validate_guest_path("cwd", cwd)?;
-        }
-        self.root_filesystem.validate()?;
-        if let Some(native_root) = &self.native_root {
-            native_root.validate()?;
-        }
-        if self.native_root.is_some() && !self.root_filesystem.bootstrap_entries.is_empty() {
-            return Err(VmConfigError::new(
-                "nativeRoot does not support rootFilesystem.bootstrapEntries",
-            ));
-        }
-        if let Some(dns) = &self.dns {
-            dns.validate()?;
-        }
-        if let Some(listen) = &self.listen {
-            listen.validate()?;
-        }
-        if let Some(limits) = &self.limits {
-            limits.validate(max_frame_bytes)?;
-        }
-        if let Some(js_runtime) = &self.js_runtime {
-            js_runtime.validate()?;
-        }
-        if let Some(bootstrap_commands) = &self.bootstrap_commands {
-            validate_command_names("bootstrapCommands", bootstrap_commands)?;
-        }
-        Ok(())
-    }
-}
-
-/// Guest JavaScript host-environment configuration.
-///
-/// Selects which globals/builtins/module-resolution surface guest JS sees,
-/// modeled on esbuild's `platform`. Omitting this preserves full Node.js
-/// emulation (`platform = node`).
-#[derive(Debug, Clone, PartialEq, Eq, Default, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub struct JsRuntimeConfig {
-    /// Which host environment to emulate for guest JS. Default `node`.
-    #[serde(default)]
-    pub platform: JsRuntimePlatform,
-    /// How bare import specifiers resolve. Independent of `platform`.
-    /// Default `node`.
-    #[serde(default, rename = "moduleResolution")]
-    pub module_resolution: JsModuleResolution,
-    /// Node builtin-module allow-list. Only valid when `platform = node`.
-    /// `None` => engine default allow-list. `Some([])` => deny all builtins.
-    /// `Some([..])` => exactly those.
-    #[serde(
-        default,
-        rename = "allowedBuiltins",
-        skip_serializing_if = "Option::is_none"
-    )]
-    #[ts(optional)]
-    pub allowed_builtins: Option<Vec<String>>,
-    /// Opt in to a high-resolution monotonic guest clock. Default false keeps
-    /// the security-oriented 1ms timer resolution.
-    #[serde(
-        default,
-        rename = "highResolutionTime",
-        skip_serializing_if = "Option::is_none"
-    )]
-    #[ts(optional)]
-    pub high_resolution_time: Option<bool>,
-}
-
-impl JsRuntimeConfig {
-    fn validate(&self) -> Result<(), VmConfigError> {
-        if let Some(allowed) = &self.allowed_builtins {
-            if self.platform != JsRuntimePlatform::Node {
-                return Err(VmConfigError::new(
-                    "jsRuntime.allowedBuiltins is only valid when jsRuntime.platform is \"node\"",
-                ));
-            }
-            for name in allowed {
-                if !is_known_node_builtin(name) {
-                    return Err(VmConfigError::new(format!(
-                        "jsRuntime.allowedBuiltins contains unknown builtin {name:?}"
-                    )));
-                }
-            }
-        }
-        Ok(())
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "lowercase")]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-#[derive(Default)]
-pub enum JsRuntimePlatform {
-    /// Full Node.js host surface (process/Buffer/require, `node:*`, npm
-    /// resolution, virtual Node identity). Default.
-    #[default]
-    Node,
-    /// Web-platform globals (fetch/URL/WebCrypto/...), no Node surface.
-    Browser,
-    /// Universal primitives only (console, timers, queueMicrotask) — no web
-    /// platform, no Node surface.
-    Neutral,
-    /// Language-only: ECMAScript spec globals + WebAssembly. Nothing host-provided.
-    Bare,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "lowercase")]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-#[derive(Default)]
-pub enum JsModuleResolution {
-    /// node_modules ancestor-walk + exports/imports/conditions + realpath. Default.
-    #[default]
-    Node,
-    /// Relative/absolute ESM from the VFS only; bare specifiers do not resolve.
-    Relative,
-    /// No resolution: any import/require (even relative) fails.
-    None,
-}
-
-/// Canonical set of recognized Node builtin module names (without the `node:`
-/// prefix), kept in sync with `normalize_builtin_specifier` in
-/// `crates/execution/src/javascript.rs`. Used to validate
-/// `jsRuntime.allowedBuiltins` entries.
-const KNOWN_NODE_BUILTINS: &[&str] = &[
-    "assert",
-    "async_hooks",
-    "buffer",
-    "child_process",
-    "cluster",
-    "console",
-    "constants",
-    "crypto",
-    "dgram",
-    "diagnostics_channel",
-    "dns",
-    "dns/promises",
-    "domain",
-    "events",
-    "fs",
-    "fs/promises",
-    "http",
-    "http2",
-    "https",
-    "inspector",
-    "module",
-    "net",
-    "os",
-    "path",
-    "path/posix",
-    "path/win32",
-    "perf_hooks",
-    "process",
-    "punycode",
-    "querystring",
-    "readline",
-    "repl",
-    "sqlite",
-    "stream",
-    "stream/consumers",
-    "stream/promises",
-    "stream/web",
-    "string_decoder",
-    "sys",
-    "timers",
-    "timers/promises",
-    "tls",
-    "trace_events",
-    "tty",
-    "url",
-    "util",
-    "util/types",
-    "v8",
-    "vm",
-    "wasi",
-    "worker_threads",
-    "zlib",
-];
-
-fn is_known_node_builtin(name: &str) -> bool {
-    let bare = name.strip_prefix("node:").unwrap_or(name);
-    KNOWN_NODE_BUILTINS.contains(&bare)
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub struct RootFilesystemConfig {
-    #[serde(default)]
-    pub mode: RootFilesystemMode,
-    #[serde(default, rename = "disableDefaultBaseLayer")]
-    pub disable_default_base_layer: bool,
-    #[serde(default, skip_serializing_if = "Vec::is_empty")]
-    pub lowers: Vec<RootFilesystemLowerDescriptor>,
-    #[serde(
-        default,
-        rename = "bootstrapEntries",
-        skip_serializing_if = "Vec::is_empty"
-    )]
-    pub bootstrap_entries: Vec<RootFilesystemEntry>,
-}
-
-impl Default for RootFilesystemConfig {
-    fn default() -> Self {
-        Self {
-            mode: RootFilesystemMode::Ephemeral,
-            disable_default_base_layer: false,
-            lowers: Vec::new(),
-            bootstrap_entries: Vec::new(),
-        }
-    }
-}
-
-impl RootFilesystemConfig {
-    fn validate(&self) -> Result<(), VmConfigError> {
-        for lower in &self.lowers {
-            if let RootFilesystemLowerDescriptor::Snapshot { entries } = lower {
-                for entry in entries {
-                    entry.validate()?;
-                }
-            }
-        }
-        for entry in &self.bootstrap_entries {
-            entry.validate()?;
-        }
-        Ok(())
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "kebab-case")]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-#[derive(Default)]
-pub enum RootFilesystemMode {
-    #[default]
-    Ephemeral,
-    ReadOnly,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(tag = "kind", rename_all = "camelCase")]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub enum RootFilesystemLowerDescriptor {
-    Snapshot {
-        #[serde(default)]
-        entries: Vec<RootFilesystemEntry>,
-    },
-    BundledBaseFilesystem,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub struct RootFilesystemEntry {
-    pub path: String,
-    pub kind: RootFilesystemEntryKind,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub mode: Option<u32>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub uid: Option<u32>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub gid: Option<u32>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub content: Option<String>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub encoding: Option<RootFilesystemEntryEncoding>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub target: Option<String>,
-    #[serde(default)]
-    pub executable: bool,
-}
-
-impl RootFilesystemEntry {
-    fn validate(&self) -> Result<(), VmConfigError> {
-        validate_guest_path("root filesystem entry path", &self.path)?;
-        match self.kind {
-            RootFilesystemEntryKind::File => {
-                if self.target.is_some() {
-                    return Err(VmConfigError::new(format!(
-                        "file entry {} must not include target",
-                        self.path
-                    )));
-                }
-            }
-            RootFilesystemEntryKind::Directory => {
-                if self.content.is_some() || self.encoding.is_some() || self.target.is_some() {
-                    return Err(VmConfigError::new(format!(
-                        "directory entry {} must not include content, encoding, or target",
-                        self.path
-                    )));
-                }
-            }
-            RootFilesystemEntryKind::Symlink => {
-                if self.target.as_deref().unwrap_or("").is_empty() {
-                    return Err(VmConfigError::new(format!(
-                        "symlink entry {} requires target",
-                        self.path
-                    )));
-                }
-                if self.content.is_some() || self.encoding.is_some() {
-                    return Err(VmConfigError::new(format!(
-                        "symlink entry {} must not include content or encoding",
-                        self.path
-                    )));
-                }
-            }
-        }
-        Ok(())
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "lowercase")]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub enum RootFilesystemEntryKind {
-    File,
-    Directory,
-    Symlink,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "lowercase")]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub enum RootFilesystemEntryEncoding {
-    Utf8,
-    Base64,
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub struct NativeRootFilesystemConfig {
-    pub plugin: MountPluginDescriptor,
-    #[serde(default, rename = "readOnly")]
-    pub read_only: bool,
-}
-
-impl NativeRootFilesystemConfig {
-    fn validate(&self) -> Result<(), VmConfigError> {
-        if self.plugin.id.trim().is_empty() {
-            return Err(VmConfigError::new("nativeRoot.plugin.id is required"));
-        }
-        Ok(())
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub struct MountPluginDescriptor {
-    pub id: String,
-    #[serde(default, skip_serializing_if = "serde_json::Value::is_null")]
-    #[ts(type = "import(\"../descriptors.js\").MountConfigJsonValue")]
-    pub config: serde_json::Value,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "lowercase")]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub enum PermissionMode {
-    Allow,
-    Ask,
-    Deny,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(untagged)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub enum FsPermissionScope {
-    Mode(PermissionMode),
-    Rules(FsPermissionRuleSet),
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(untagged)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub enum PatternPermissionScope {
-    Mode(PermissionMode),
-    Rules(PatternPermissionRuleSet),
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub struct FsPermissionRuleSet {
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub default: Option<PermissionMode>,
-    #[serde(default)]
-    pub rules: Vec<FsPermissionRule>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub struct PatternPermissionRuleSet {
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub default: Option<PermissionMode>,
-    #[serde(default)]
-    pub rules: Vec<PatternPermissionRule>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub struct FsPermissionRule {
-    pub mode: PermissionMode,
-    #[serde(default, skip_serializing_if = "Vec::is_empty")]
-    pub operations: Vec<String>,
-    #[serde(default, skip_serializing_if = "Vec::is_empty")]
-    pub paths: Vec<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub struct PatternPermissionRule {
-    pub mode: PermissionMode,
-    #[serde(default, skip_serializing_if = "Vec::is_empty")]
-    pub operations: Vec<String>,
-    #[serde(default, skip_serializing_if = "Vec::is_empty")]
-    pub patterns: Vec<String>,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub struct PermissionsPolicy {
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub fs: Option<FsPermissionScope>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub network: Option<PatternPermissionScope>,
-    #[serde(
-        default,
-        rename = "childProcess",
-        skip_serializing_if = "Option::is_none"
-    )]
-    #[ts(optional)]
-    pub child_process: Option<PatternPermissionScope>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub process: Option<PatternPermissionScope>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub env: Option<PatternPermissionScope>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub binding: Option<PatternPermissionScope>,
-}
-
-#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub struct VmLimitsConfig {
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub resources: Option<ResourceLimitsConfig>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub http: Option<HttpLimitsConfig>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub tools: Option<ToolLimitsConfig>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub plugins: Option<PluginLimitsConfig>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub acp: Option<AcpLimitsConfig>,
-    #[serde(default, rename = "jsRuntime", skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub js_runtime: Option<JsRuntimeLimitsConfig>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub python: Option<PythonLimitsConfig>,
-    #[serde(default, skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub wasm: Option<WasmLimitsConfig>,
-}
-
-impl VmLimitsConfig {
-    fn validate(&self, max_frame_bytes: usize) -> Result<(), VmConfigError> {
-        if let Some(http) = &self.http {
-            if let Some(max_fetch_response_bytes) = http.max_fetch_response_bytes {
-                if max_fetch_response_bytes == 0 {
-                    return Err(VmConfigError::new(
-                        "limits.http.maxFetchResponseBytes must be greater than zero",
-                    ));
-                }
-                if max_fetch_response_bytes as usize > max_frame_bytes {
-                    return Err(VmConfigError::new(format!(
-                        "limits.http.maxFetchResponseBytes ({max_fetch_response_bytes}) must be <= the sidecar wire frame cap ({max_frame_bytes})"
-                    )));
-                }
-            }
-        }
-        if let Some(tools) = &self.tools {
-            if let (Some(default), Some(max)) =
-                (tools.default_tool_timeout_ms, tools.max_tool_timeout_ms)
-            {
-                if default > max {
-                    return Err(VmConfigError::new(
-                        "limits.tools.defaultToolTimeoutMs must be <= limits.tools.maxToolTimeoutMs",
-                    ));
-                }
-            }
-        }
-        Ok(())
-    }
-}
-
-macro_rules! limits_struct {
-    ($name:ident { $($field:ident),* $(,)? }) => {
-        #[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize, TS)]
-        #[serde(rename_all = "camelCase", deny_unknown_fields)]
-        #[ts(export, export_to = "../../../packages/core/src/generated/")]
-        pub struct $name {
-            $(
-                #[serde(default, skip_serializing_if = "Option::is_none")]
-                #[ts(optional)]
-                #[ts(type = "number")]
-                pub $field: Option<u64>,
-            )*
-        }
-    };
-}
-
-limits_struct!(ResourceLimitsConfig {
-    cpu_count,
-    max_processes,
-    max_open_fds,
-    max_pipes,
-    max_ptys,
-    max_sockets,
-    max_connections,
-    max_socket_buffered_bytes,
-    max_socket_datagram_queue_len,
-    max_filesystem_bytes,
-    max_inode_count,
-    max_blocking_read_ms,
-    max_pread_bytes,
-    max_fd_write_bytes,
-    max_process_argv_bytes,
-    max_process_env_bytes,
-    max_readdir_entries,
-    max_recursive_fs_depth,
-    max_recursive_fs_entries,
-    max_wasm_fuel,
-    max_wasm_memory_bytes,
-    max_wasm_stack_bytes,
-});
-
-limits_struct!(HttpLimitsConfig {
-    max_fetch_response_bytes,
-});
-
-limits_struct!(ToolLimitsConfig {
-    default_tool_timeout_ms,
-    max_tool_timeout_ms,
-    max_registered_toolkits,
-    max_registered_tools_per_vm,
-    max_tools_per_toolkit,
-    max_tool_schema_bytes,
-    max_tool_examples_per_tool,
-    max_tool_example_input_bytes,
-});
-
-limits_struct!(PluginLimitsConfig {
-    max_persisted_manifest_bytes,
-    max_persisted_manifest_file_bytes,
-});
-
-limits_struct!(AcpLimitsConfig {
-    max_read_line_bytes,
-    stdout_buffer_byte_limit,
-});
-
-limits_struct!(JsRuntimeLimitsConfig {
-    v8_heap_limit_mb,
-    sync_rpc_wait_timeout_ms,
-    cpu_time_limit_ms,
-    wall_clock_limit_ms,
-    import_cache_materialize_timeout_ms,
-    captured_output_limit_bytes,
-    stdin_buffer_limit_bytes,
-    event_payload_limit_bytes,
-    v8_ipc_max_frame_bytes,
-});
-
-limits_struct!(PythonLimitsConfig {
-    output_buffer_max_bytes,
-    execution_timeout_ms,
-    max_old_space_mb,
-    vfs_rpc_timeout_ms,
-});
-
-limits_struct!(WasmLimitsConfig {
-    max_module_file_bytes,
-    captured_output_limit_bytes,
-    sync_read_limit_bytes,
-    prewarm_timeout_ms,
-    runner_heap_limit_mb,
-});
-
-#[derive(Debug, Clone, Default, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub struct VmDnsConfig {
-    #[serde(default, rename = "nameServers", skip_serializing_if = "Vec::is_empty")]
-    pub name_servers: Vec<String>,
-    #[serde(default, skip_serializing_if = "BTreeMap::is_empty")]
-    pub overrides: BTreeMap<String, Vec<String>>,
-}
-
-impl VmDnsConfig {
-    fn validate(&self) -> Result<(), VmConfigError> {
-        for entry in &self.name_servers {
-            if entry.trim().is_empty() {
-                return Err(VmConfigError::new(
-                    "dns.nameServers entries must not be empty",
-                ));
-            }
-        }
-        for (host, addresses) in &self.overrides {
-            if host.trim().is_empty() {
-                return Err(VmConfigError::new("dns.overrides keys must not be empty"));
-            }
-            if addresses.is_empty() {
-                return Err(VmConfigError::new(format!(
-                    "dns.overrides.{host} must contain at least one address"
-                )));
-            }
-        }
-        Ok(())
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Serialize, Deserialize, TS)]
-#[serde(rename_all = "camelCase", deny_unknown_fields)]
-#[ts(export, export_to = "../../../packages/core/src/generated/")]
-pub struct VmListenPolicyConfig {
-    #[serde(default, rename = "portMin", skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub port_min: Option<u16>,
-    #[serde(default, rename = "portMax", skip_serializing_if = "Option::is_none")]
-    #[ts(optional)]
-    pub port_max: Option<u16>,
-    #[serde(
-        default,
-        rename = "allowPrivileged",
-        skip_serializing_if = "Option::is_none"
-    )]
-    #[ts(optional)]
-    pub allow_privileged: Option<bool>,
-}
-
-impl VmListenPolicyConfig {
-    fn validate(&self) -> Result<(), VmConfigError> {
-        if self.port_min == Some(0) {
-            return Err(VmConfigError::new(
-                "listen.portMin must be between 1 and 65535",
-            ));
-        }
-        if self.port_max == Some(0) {
-            return Err(VmConfigError::new(
-                "listen.portMax must be between 1 and 65535",
-            ));
-        }
-        if let (Some(min), Some(max)) = (self.port_min, self.port_max) {
-            if min > max {
-                return Err(VmConfigError::new(
-                    "listen.portMin must be <= listen.portMax",
-                ));
-            }
-        }
-        Ok(())
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub struct VmConfigError {
-    message: String,
-}
-
-impl VmConfigError {
-    pub fn new(message: impl Into<String>) -> Self {
-        Self {
-            message: message.into(),
-        }
-    }
-}
-
-impl std::fmt::Display for VmConfigError {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        f.write_str(&self.message)
-    }
-}
-
-impl std::error::Error for VmConfigError {}
-
-fn validate_guest_path(label: &str, path: &str) -> Result<(), VmConfigError> {
-    if !path.starts_with('/') {
-        return Err(VmConfigError::new(format!("{label} must be absolute")));
-    }
-    if path.split('/').any(|part| part == "..") {
-        return Err(VmConfigError::new(format!("{label} must not contain '..'")));
-    }
-    Ok(())
-}
-
-fn validate_command_names(label: &str, commands: &[String]) -> Result<(), VmConfigError> {
-    for command in commands {
-        if command.is_empty()
-            || command == "."
-            || command == ".."
-            || command.contains('/')
-            || command.contains('\0')
-        {
-            return Err(VmConfigError::new(format!(
-                "{label} contains invalid command name {command:?}"
-            )));
-        }
-    }
-
-    Ok(())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn default_config_round_trips() {
-        let config = CreateVmConfig::default();
-        let json = serde_json::to_string(&config).expect("serialize config");
-        let decoded: CreateVmConfig = serde_json::from_str(&json).expect("decode config");
-        assert_eq!(decoded, config);
-    }
-
-    #[test]
-    fn unknown_fields_are_rejected() {
-        let error =
-            serde_json::from_str::<CreateVmConfig>(r#"{"rootFilesystem":{},"surprise":true}"#)
-                .expect_err("unknown fields should fail");
-        assert!(error.to_string().contains("unknown field"));
-    }
-
-    #[test]
-    fn validate_rejects_fetch_limit_above_frame_cap() {
-        let config = CreateVmConfig {
-            limits: Some(VmLimitsConfig {
-                http: Some(HttpLimitsConfig {
-                    max_fetch_response_bytes: Some(2048),
-                }),
-                ..VmLimitsConfig::default()
-            }),
-            ..CreateVmConfig::default()
-        };
-        assert!(config.validate(1024).is_err());
-    }
-
-    fn js_runtime_config(value: serde_json::Value) -> Result<CreateVmConfig, serde_json::Error> {
-        serde_json::from_value(serde_json::json!({ "jsRuntime": value }))
-    }
-
-    #[test]
-    fn js_runtime_defaults_to_node() {
-        let config: CreateVmConfig =
-            serde_json::from_value(serde_json::json!({ "jsRuntime": {} })).expect("decode");
-        let js = config.js_runtime.expect("jsRuntime present");
-        assert_eq!(js.platform, JsRuntimePlatform::Node);
-        assert_eq!(js.module_resolution, JsModuleResolution::Node);
-        assert!(js.allowed_builtins.is_none());
-        assert!(js.high_resolution_time.is_none());
-    }
-
-    #[test]
-    fn js_runtime_high_resolution_time_defaults_off_and_round_trips() {
-        let defaulted = js_runtime_config(serde_json::json!({})).unwrap();
-        assert!(defaulted.js_runtime.unwrap().high_resolution_time.is_none());
-
-        let enabled = js_runtime_config(serde_json::json!({
-            "highResolutionTime": true,
-        }))
-        .unwrap();
-        assert_eq!(
-            enabled.js_runtime.as_ref().unwrap().high_resolution_time,
-            Some(true)
-        );
-        let json = serde_json::to_string(&enabled).expect("serialize");
-        assert!(json.contains("highResolutionTime"));
-        let decoded: CreateVmConfig = serde_json::from_str(&json).expect("re-decode");
-        assert_eq!(decoded, enabled);
-    }
-
-    #[test]
-    fn js_runtime_all_platform_resolution_combos_round_trip() {
-        for platform in ["node", "browser", "neutral", "bare"] {
-            for resolution in ["node", "relative", "none"] {
-                let config = js_runtime_config(serde_json::json!({
-                    "platform": platform,
-                    "moduleResolution": resolution,
-                }))
-                .unwrap_or_else(|err| panic!("decode {platform}/{resolution}: {err}"));
-                let json = serde_json::to_string(&config).expect("serialize");
-                let decoded: CreateVmConfig = serde_json::from_str(&json).expect("re-decode");
-                assert_eq!(decoded, config);
-                assert!(config.validate(usize::MAX).is_ok());
-            }
-        }
-    }
-
-    #[test]
-    fn js_runtime_allowed_builtins_tri_state() {
-        // None => omitted.
-        let none = js_runtime_config(serde_json::json!({ "platform": "node" })).unwrap();
-        assert!(none.js_runtime.unwrap().allowed_builtins.is_none());
-        // Some([]) => deny all (representable, distinct from None).
-        let empty = js_runtime_config(serde_json::json!({ "allowedBuiltins": [] })).unwrap();
-        assert_eq!(empty.js_runtime.unwrap().allowed_builtins, Some(Vec::new()));
-        // Some([..]) => explicit.
-        let some = js_runtime_config(serde_json::json!({ "allowedBuiltins": ["path", "node:fs"] }))
-            .unwrap();
-        assert_eq!(
-            some.js_runtime.unwrap().allowed_builtins,
-            Some(vec!["path".to_owned(), "node:fs".to_owned()])
-        );
-    }
-
-    #[test]
-    fn js_runtime_rejects_allowed_builtins_under_non_node_platform() {
-        for platform in ["browser", "neutral", "bare"] {
-            let config = js_runtime_config(serde_json::json!({
-                "platform": platform,
-                "allowedBuiltins": ["path"],
-            }))
-            .unwrap();
-            let error = config
-                .validate(usize::MAX)
-                .expect_err("allowedBuiltins under non-node must reject");
-            assert!(error.to_string().contains("allowedBuiltins"));
-        }
-    }
-
-    #[test]
-    fn js_runtime_rejects_unknown_builtin_names() {
-        let config = js_runtime_config(serde_json::json!({
-            "platform": "node",
-            "allowedBuiltins": ["path", "totally_not_a_builtin"],
-        }))
-        .unwrap();
-        let error = config
-            .validate(usize::MAX)
-            .expect_err("unknown builtin must reject");
-        assert!(error.to_string().contains("unknown builtin"));
-    }
-
-    #[test]
-    fn js_runtime_accepts_empty_allow_list_under_node() {
-        let config =
-            js_runtime_config(serde_json::json!({ "platform": "node", "allowedBuiltins": [] }))
-                .unwrap();
-        assert!(config.validate(usize::MAX).is_ok());
-    }
-
-    #[test]
-    fn js_runtime_rejects_unknown_fields() {
-        let error = js_runtime_config(serde_json::json!({ "surprise": true }))
-            .expect_err("unknown jsRuntime field should fail");
-        assert!(error.to_string().contains("unknown field"));
-    }
-}
+pub use agentos_vm_config::*;
diff --git a/docker/build/darwin.Dockerfile b/docker/build/darwin.Dockerfile
deleted file mode 100644
index 1ec3d34c6..000000000
--- a/docker/build/darwin.Dockerfile
+++ /dev/null
@@ -1,49 +0,0 @@
-# syntax=docker/dockerfile:1.10.0
-#
-# Cross-compile the secure-exec sidecar for macOS via osxcross, on a LINUX
-# runner — so the publish never depends on scarce/queued GitHub macOS runners
-# (the failure mode that motivated this). Mirrors rivet's darwin build: the base
-# image bakes in osxcross + the MacOSX SDK (which provides CoreServices.h etc.
-# that a plain zig cross-build lacks) AND Node 22 + corepack for our v8-bridge
-# build.rs. Parameterized by TARGET so one file serves x64 + arm64.
-#
-#   TARGET = aarch64-apple-darwin | x86_64-apple-darwin
-#   CLANG  = aarch64-apple-darwin20.4 | x86_64-apple-darwin20.4   (osxcross prefix)
-FROM ghcr.io/rivet-dev/rivet/builder-base-osxcross:0e33ceb98
-
-ARG TARGET=aarch64-apple-darwin
-ARG CLANG=aarch64-apple-darwin20.4
-ARG TRIGGER=branch
-
-ENV SDK=/root/osxcross/target/SDK/MacOSX11.3.sdk \
-    RUSTC_WRAPPER=
-
-WORKDIR /build
-COPY . .
-
-# Use the repo-pinned toolchain (rust-toolchain.toml) + the darwin target.
-RUN channel=$(awk -F'"' '/channel/ {print $2; exit}' rust-toolchain.toml) && \
-    rustup toolchain install "$channel" --profile minimal && \
-    rustup target add --toolchain "$channel" "$TARGET"
-
-# The v8-runtime build.rs regenerates the V8 bridge via Node, so the pnpm
-# workspace must be installed first. Exclude the leaf `website` package (pnpm
-# 10.x symlink race), matching the native build.
-RUN corepack enable && pnpm install --frozen-lockfile --filter='!@secure-exec/website'
-
-RUN tu=$(echo "$TARGET" | tr 'a-z-' 'A-Z_') && \
-    tl=$(echo "$TARGET" | tr - _) && \
-    export BINDGEN_EXTRA_CLANG_ARGS_${tl}="--sysroot=$SDK -isystem $SDK/usr/include" && \
-    export CFLAGS_${tl}="-B/root/osxcross/target/bin" && \
-    export CXXFLAGS_${tl}="-B/root/osxcross/target/bin" && \
-    export CC_${tl}=${CLANG}-clang && \
-    export CXX_${tl}=${CLANG}-clang++ && \
-    export AR_${tl}=${CLANG}-ar && \
-    export RANLIB_${tl}=${CLANG}-ranlib && \
-    export CARGO_TARGET_${tu}_LINKER=${CLANG}-clang && \
-    if [ "$TRIGGER" = "release" ]; then FLAG="--release"; PROF=release; else FLAG=""; PROF=debug; fi && \
-    cargo build $FLAG -p secure-exec-sidecar --target "$TARGET" && \
-    mkdir -p /artifacts && \
-    cp "target/$TARGET/$PROF/secure-exec-sidecar" /artifacts/secure-exec-sidecar
-
-CMD ["ls", "-la", "/artifacts"]
diff --git a/docker/build/darwin.Dockerfile.dockerignore b/docker/build/darwin.Dockerfile.dockerignore
deleted file mode 100644
index ee7ecd4a9..000000000
--- a/docker/build/darwin.Dockerfile.dockerignore
+++ /dev/null
@@ -1,11 +0,0 @@
-# BuildKit uses this in place of the repo-root .dockerignore for darwin.Dockerfile
-# (the root one is scoped to the website/Railway build and excludes everything but
-# website/ + packages/core, which starves the sidecar cross-build of rust-toolchain.toml,
-# crates, Cargo.toml, etc.). Send the full source; drop only artifacts/caches the
-# in-container build regenerates (pnpm install + cargo build happen inside the image).
-.git
-**/node_modules
-**/target
-**/dist
-**/.astro
-**/.turbo
diff --git a/examples/docs/feat-child-processes/package.json b/examples/docs/feat-child-processes/package.json
deleted file mode 100644
index 00175a6aa..000000000
--- a/examples/docs/feat-child-processes/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-feat-child-processes",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/feat-child-processes/src/index.mts b/examples/docs/feat-child-processes/src/index.mts
deleted file mode 100644
index 1d71c9bb9..000000000
--- a/examples/docs/feat-child-processes/src/index.mts
+++ /dev/null
@@ -1,35 +0,0 @@
-import { NodeRuntime } from "secure-exec";
-
-// Boot a fully virtualized VM. The guest runs inside the kernel isolation
-// boundary, and any child processes it spawns are themselves kernel-managed
-// processes - they never spawn real host processes.
-const rt = await NodeRuntime.create();
-
-try {
-  // Guest code runs as an ES module inside the VM. It uses the standard
-  // node:child_process module to spawn a command available in the VM and read
-  // its output. Here we spawn `sh -c` to echo a message, and `node` to report
-  // its own version - both run as kernel-managed child processes.
-  const { stdout, stderr, exitCode } = await rt.exec(`
-    import { execFileSync } from "node:child_process";
-
-    // Spawn a shell command and capture its stdout.
-    const shellOut = execFileSync("sh", ["-c", "echo hello from a child process"], {
-      encoding: "utf8",
-    });
-    console.log("sh output:", shellOut.trim());
-
-    // Spawn node as a child process and read its version.
-    const nodeVersion = execFileSync("node", ["--version"], {
-      encoding: "utf8",
-    });
-    console.log("child node version:", nodeVersion.trim());
-  `);
-
-  console.log("exitCode:", exitCode);
-  if (stderr.trim()) console.log("guest stderr:", stderr.trim());
-  console.log("guest stdout:");
-  console.log(stdout.trim());
-} finally {
-  await rt.dispose();
-}
diff --git a/examples/docs/feat-child-processes/tsconfig.json b/examples/docs/feat-child-processes/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/feat-child-processes/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/feat-filesystem/host-data/greeting.txt b/examples/docs/feat-filesystem/host-data/greeting.txt
deleted file mode 100644
index 22aea324a..000000000
--- a/examples/docs/feat-filesystem/host-data/greeting.txt
+++ /dev/null
@@ -1 +0,0 @@
-value-from-host
diff --git a/examples/docs/feat-filesystem/package.json b/examples/docs/feat-filesystem/package.json
deleted file mode 100644
index 09581832a..000000000
--- a/examples/docs/feat-filesystem/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-feat-filesystem",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/feat-filesystem/src/index.mts b/examples/docs/feat-filesystem/src/index.mts
deleted file mode 100644
index 1db778851..000000000
--- a/examples/docs/feat-filesystem/src/index.mts
+++ /dev/null
@@ -1,72 +0,0 @@
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { NodeRuntime } from "secure-exec";
-
-// Boot a fully virtualized VM. The guest filesystem lives entirely inside the
-// kernel - writes never touch the host disk.
-const rt = await NodeRuntime.create();
-
-try {
-  // Guest code runs as an ES module inside the VM. It writes and reads files
-  // using the standard node `fs` module, backed by the kernel's virtual
-  // filesystem.
-  const { stdout, stderr, exitCode } = await rt.exec(`
-    import { mkdirSync, writeFileSync, readFileSync, readdirSync } from "node:fs";
-
-    mkdirSync("/workspace", { recursive: true });
-    writeFileSync("/workspace/hello.txt", "hello from the sandbox");
-
-    const message = readFileSync("/workspace/hello.txt", "utf8");
-    const entries = readdirSync("/workspace");
-
-    console.log("read back from VM:", message);
-    console.log("/workspace contents:", JSON.stringify(entries));
-  `);
-
-  console.log("exitCode:", exitCode);
-  if (stderr.trim()) console.log("guest stderr:", stderr.trim());
-  console.log("guest stdout:");
-  console.log(stdout.trim());
-} finally {
-  await rt.dispose();
-}
-
-// Mounting a host directory into the VM. `mounts` projects a real host
-// directory into the guest filesystem, Docker-style. Files are read lazily
-// through the VFS, and the guest sees only the mounted subtree.
-const hostDir = path.join(
-  path.dirname(fileURLToPath(import.meta.url)),
-  "..",
-  "host-data",
-);
-
-const mounted = await NodeRuntime.create({
-  mounts: [
-    {
-      guestPath: "/mnt/host-data",
-      hostPath: hostDir,
-      readOnly: true,
-    },
-  ],
-});
-
-try {
-  // The guest reads a file that lives on the real host, exposed read-only at
-  // the mount point. Nothing else on the host is visible.
-  const { stdout, stderr, exitCode } = await mounted.exec(`
-    import { readFileSync, readdirSync } from "node:fs";
-
-    const entries = readdirSync("/mnt/host-data");
-    const greeting = readFileSync("/mnt/host-data/greeting.txt", "utf8");
-
-    console.log("mounted contents:", JSON.stringify(entries));
-    console.log("guest read host file:", greeting.trim());
-  `);
-
-  console.log("[mount] exitCode:", exitCode);
-  if (stderr.trim()) console.log("[mount] guest stderr:", stderr.trim());
-  console.log("[mount] guest stdout:");
-  console.log(stdout.trim());
-} finally {
-  await mounted.dispose();
-}
diff --git a/examples/docs/feat-filesystem/tsconfig.json b/examples/docs/feat-filesystem/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/feat-filesystem/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/feat-module-loading/package.json b/examples/docs/feat-module-loading/package.json
deleted file mode 100644
index 57e5dccc0..000000000
--- a/examples/docs/feat-module-loading/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-feat-module-loading",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/feat-module-loading/src/index.mts b/examples/docs/feat-module-loading/src/index.mts
deleted file mode 100644
index 527b6293a..000000000
--- a/examples/docs/feat-module-loading/src/index.mts
+++ /dev/null
@@ -1,89 +0,0 @@
-import { fileURLToPath } from "node:url";
-import { NodeRuntime } from "secure-exec";
-
-// docs:start loading-modules
-// Boot a fully virtualized VM. Module resolution runs entirely inside the
-// kernel - `import` and `require` resolve against the guest's virtual
-// filesystem, never the host's.
-const rt = await NodeRuntime.create();
-
-try {
-  // Guest code runs as an ES module inside the VM, so it can `import` Node
-  // builtins directly. It can also build a CommonJS `require` with
-  // `createRequire` to load builtins the classic way. Both resolve through the
-  // kernel's module loader.
-  const { stdout, stderr, exitCode } = await rt.exec(`
-    // ESM import of a Node builtin.
-    import { basename, join } from "node:path";
-
-    // CommonJS require, created from the current module URL.
-    import { createRequire } from "node:module";
-    const require = createRequire(import.meta.url);
-    const os = require("node:os");
-
-    const resolved = {
-      basename: basename("/workspace/data/report.txt"),
-      joined: join("/workspace", "data", "report.txt"),
-      platform: os.platform(),
-    };
-
-    console.log("resolved node:path via import ->", resolved.joined);
-    console.log("resolved node:os via require ->", resolved.platform);
-    console.log(JSON.stringify(resolved));
-  `);
-
-  console.log("exitCode:", exitCode);
-  if (stderr.trim()) console.log("guest stderr:\n" + stderr.trim());
-  console.log("guest stdout:");
-  console.log(stdout.trim());
-} finally {
-  await rt.dispose();
-}
-// docs:end loading-modules
-
-// --- Loading real npm packages from the host ------------------------------
-
-// docs:start npm-packages
-// Point `nodeModules` at a host `node_modules` directory and the whole tree is
-// projected into the VM in one call. Any package inside resolves the way Node
-// would over a real filesystem, symlinks and all. Here we mount this repo's
-// root node_modules, which includes the tiny `is-number` package.
-const hostNodeModules = fileURLToPath(
-  new URL("../../../../node_modules", import.meta.url),
-);
-
-const mounted = await NodeRuntime.create({
-  nodeModules: hostNodeModules,
-});
-
-try {
-  // The guest resolves `is-number` from the mounted host node_modules the same
-  // way Node would over a real filesystem, then uses the real package's code.
-  const { stdout, stderr, exitCode } = await mounted.exec(`
-    // ESM import of the real, host-mounted npm package.
-    import isNumber from "is-number";
-
-    // The same package also resolves through a CommonJS require.
-    import { createRequire } from "node:module";
-    const require = createRequire(import.meta.url);
-    const isNumberCjs = require("is-number");
-
-    const result = {
-      "isNumber(42)": isNumber(42),
-      'isNumber("3.14")': isNumber("3.14"),
-      'isNumber("nope")': isNumber("nope"),
-      sameModule: isNumber === isNumberCjs,
-    };
-
-    console.log("loaded real npm package is-number");
-    console.log(JSON.stringify(result));
-  `);
-
-  console.log("exitCode:", exitCode);
-  if (stderr.trim()) console.log("guest stderr:\n" + stderr.trim());
-  console.log("guest stdout:");
-  console.log(stdout.trim());
-} finally {
-  await mounted.dispose();
-}
-// docs:end npm-packages
diff --git a/examples/docs/feat-module-loading/tsconfig.json b/examples/docs/feat-module-loading/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/feat-module-loading/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/feat-networking-wasm/package.json b/examples/docs/feat-networking-wasm/package.json
deleted file mode 100644
index c681c8e81..000000000
--- a/examples/docs/feat-networking-wasm/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-feat-networking-wasm",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"@secure-exec/core": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/feat-networking-wasm/src/index.mts b/examples/docs/feat-networking-wasm/src/index.mts
deleted file mode 100644
index 3ca6a560b..000000000
--- a/examples/docs/feat-networking-wasm/src/index.mts
+++ /dev/null
@@ -1,192 +0,0 @@
-import { existsSync } from "node:fs";
-import { createServer as createHttpServer } from "node:http";
-import type { AddressInfo } from "node:net";
-import { fileURLToPath } from "node:url";
-import {
-	allowAll,
-	createInMemoryFileSystem,
-	createKernel,
-	createNodeRuntime,
-	createWasmVmRuntime,
-	type Kernel,
-} from "@secure-exec/core/test-runtime";
-
-function resolveCommandDir(
-	envName: string,
-	fallbackRelativePath: string,
-	requiredCommand: string,
-): string {
-	const fromEnv = process.env[envName];
-	const candidates = [
-		fromEnv,
-		fileURLToPath(new URL(fallbackRelativePath, import.meta.url)),
-	].filter((value): value is string => Boolean(value));
-	for (const dir of candidates) {
-		if (existsSync(`${dir}/${requiredCommand}`)) {
-			return dir;
-		}
-	}
-	throw new Error(
-		`${requiredCommand} was not found. Set ${envName} to a built WASM command directory.`,
-	);
-}
-
-const wasmCommandsDir = resolveCommandDir(
-	"SECURE_EXEC_WASM_COMMANDS_DIR",
-	"../../../../registry/native/target/wasm32-wasip1/release/commands",
-	"sh",
-);
-const cWasmCommandsDir = resolveCommandDir(
-	"SECURE_EXEC_C_WASM_COMMANDS_DIR",
-	"../../../../registry/native/c/build",
-	"http_get",
-);
-
-interface RunningProgram {
-	process: ReturnType<Kernel["spawn"]>;
-	stdoutChunks: Uint8Array[];
-	stderrChunks: Uint8Array[];
-	exitCode: () => number | null;
-}
-
-function decode(chunks: Uint8Array[]): string {
-	return chunks.map((chunk) => new TextDecoder().decode(chunk)).join("");
-}
-
-function spawn(
-	kernel: Kernel,
-	command: string,
-	args: string[],
-): RunningProgram {
-	const stdoutChunks: Uint8Array[] = [];
-	const stderrChunks: Uint8Array[] = [];
-	let code: number | null = null;
-	const process = kernel.spawn(command, args, {
-		onStdout: (chunk) => stdoutChunks.push(chunk),
-		onStderr: (chunk) => stderrChunks.push(chunk),
-	});
-	void process.wait().then((exitCode) => {
-		code = exitCode;
-	});
-	return {
-		process,
-		stdoutChunks,
-		stderrChunks,
-		exitCode: () => code,
-	};
-}
-
-async function waitForOutput(
-	program: RunningProgram,
-	needle: string,
-): Promise<void> {
-	const deadline = Date.now() + 20_000;
-	while (Date.now() < deadline) {
-		if (decode(program.stdoutChunks).includes(needle)) {
-			return;
-		}
-		if (program.exitCode() !== null) {
-			throw new Error(
-				`process exited before ${JSON.stringify(needle)}\nstdout:\n${decode(
-					program.stdoutChunks,
-				)}\nstderr:\n${decode(program.stderrChunks)}`,
-			);
-		}
-		await new Promise((resolve) => setTimeout(resolve, 20));
-	}
-	throw new Error(`timed out waiting for ${JSON.stringify(needle)}`);
-}
-
-async function waitForListener(kernel: Kernel, port: number): Promise<void> {
-	const deadline = Date.now() + 20_000;
-	while (Date.now() < deadline) {
-		if (kernel.socketTable.findListener({ host: "0.0.0.0", port })) {
-			return;
-		}
-		await new Promise((resolve) => setTimeout(resolve, 20));
-	}
-	throw new Error(`timed out waiting for listener on ${port}`);
-}
-
-function parseVmFetch(responseJson: string): { status: number; body: string } {
-	const parsed = JSON.parse(responseJson) as {
-		status?: number;
-		body?: string;
-		bodyEncoding?: string;
-	};
-	const encodedBody = parsed.body ?? "";
-	const body =
-		parsed.bodyEncoding === "base64"
-			? Buffer.from(encodedBody, "base64").toString("utf8")
-			: encodedBody;
-	return { status: parsed.status ?? 0, body };
-}
-
-const hostServer = createHttpServer((req, res) => {
-	res.writeHead(200, { "content-type": "text/plain" });
-	res.end("host:" + req.url);
-});
-await new Promise<void>((resolve) => {
-	hostServer.listen(0, "127.0.0.1", resolve);
-});
-const hostPort = (hostServer.address() as AddressInfo).port;
-
-const kernel = createKernel({
-	filesystem: createInMemoryFileSystem(),
-	permissions: allowAll,
-	loopbackExemptPorts: [hostPort],
-});
-
-try {
-	await kernel.mount(
-		createWasmVmRuntime({ commandDirs: [cWasmCommandsDir, wasmCommandsDir] }),
-	);
-	await kernel.mount(createNodeRuntime());
-
-	const jsServer = spawn(kernel, "node", [
-		"-e",
-		`
-const http = require("http");
-const server = http.createServer((req, res) => {
-	res.writeHead(200, { "content-type": "text/plain" });
-	res.end("js:" + req.method + ":" + req.url);
-});
-server.listen(3301, "127.0.0.1", () => console.log("js listening"));
-`,
-	]);
-	await waitForOutput(jsServer, "js listening");
-	const wasmToJs = await kernel.exec("http_get 3301 /from-wasm");
-	console.log("wasm -> js:", JSON.stringify(wasmToJs.stdout.trim()));
-	jsServer.process.kill(15);
-	await jsServer.process.wait().catch(() => {});
-
-	const wasmServerForJs = spawn(kernel, "http_server", ["3302"]);
-	await waitForListener(kernel, 3302);
-	const jsToWasm = await kernel.exec(
-		`node -e "fetch('http://127.0.0.1:3302/from-js').then(async r => console.log(r.status + ':' + await r.text())).catch(e => { console.error(e); process.exit(1); })"`,
-	);
-	console.log("js -> wasm:", JSON.stringify(jsToWasm.stdout.trim()));
-	await wasmServerForJs.process.wait();
-
-	const wasmServerForHost = spawn(kernel, "http_server", ["3303"]);
-	await waitForListener(kernel, 3303);
-	const hostToWasm = parseVmFetch(
-		await kernel.vmFetch({
-			port: 3303,
-			method: "GET",
-			path: "/from-host",
-			headersJson: JSON.stringify({}),
-		}),
-	);
-	console.log(
-		"host -> wasm:",
-		JSON.stringify(`${hostToWasm.status}:${hostToWasm.body}`),
-	);
-	await wasmServerForHost.process.wait();
-
-	const wasmToHost = await kernel.exec(`http_get ${hostPort} /from-wasm-host`);
-	console.log("wasm -> host:", JSON.stringify(wasmToHost.stdout.trim()));
-} finally {
-	await kernel.dispose();
-	await new Promise<void>((resolve) => hostServer.close(() => resolve()));
-}
diff --git a/examples/docs/feat-networking-wasm/tsconfig.json b/examples/docs/feat-networking-wasm/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/feat-networking-wasm/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/feat-networking/package.json b/examples/docs/feat-networking/package.json
deleted file mode 100644
index d9c740fde..000000000
--- a/examples/docs/feat-networking/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-feat-networking",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/feat-networking/src/index.mts b/examples/docs/feat-networking/src/index.mts
deleted file mode 100644
index 8b0058d26..000000000
--- a/examples/docs/feat-networking/src/index.mts
+++ /dev/null
@@ -1,129 +0,0 @@
-/**
- * Networking example.
- *
- * Network access for guest code is governed by the VM permission policy. This
- * example shows both sides of the gate:
- *
- *   1. With network "allow", the guest starts a loopback HTTP server inside the
- *      VM and fetches it - the request and response stay entirely within the
- *      kernel socket table (hermetic, no real host network).
- *   2. With the default (network denied), the same outbound fetch is blocked.
- *   3. Host loopback is separate from VM loopback: even with network "allow",
- *      a guest can reach a host loopback service only when the host port is in
- *      loopbackExemptPorts.
- *
- * Run with:
- *   SECURE_EXEC_SIDECAR_BIN=../../../target/debug/secure-exec-sidecar \
- *     npx tsx src/index.mts
- */
-
-import { NodeRuntime } from "secure-exec";
-import { createServer as createHttpServer } from "node:http";
-import type { AddressInfo } from "node:net";
-
-// Guest program: start a loopback HTTP server, then fetch it. Both the listen
-// and the fetch go through the kernel socket table.
-const GUEST = `
-import http from "node:http";
-
-const server = http.createServer((_req, res) => {
-	res.writeHead(200, { "content-type": "text/plain" });
-	res.end("network-ok");
-});
-
-await new Promise((resolve, reject) => {
-	server.once("error", reject);
-	server.listen(0, "127.0.0.1", resolve);
-});
-
-const { port } = server.address();
-const response = await fetch("http://127.0.0.1:" + port + "/");
-const body = await response.text();
-console.log("status:", response.status);
-console.log("body:", body);
-
-await new Promise((resolve) => server.close(resolve));
-`;
-
-// 1. Network allowed: opt in with a partial policy. Permissions merge over the
-// secure default, so you only name the scope you are changing. The default
-// already grants the fs/child_process/process/env scopes the runtime needs to
-// launch guest programs.
-const allowed = await NodeRuntime.create({
-	permissions: { network: "allow" },
-});
-try {
-	const result = await allowed.exec(GUEST);
-	console.log("[network allowed] exitCode:", result.exitCode);
-	console.log("[network allowed] stdout:", JSON.stringify(result.stdout.trim()));
-	console.log("[network allowed] stderr:", JSON.stringify(result.stderr.trim()));
-} finally {
-	await allowed.dispose();
-}
-
-// 2. Network denied: this is the default, so plain create() blocks the network.
-const denied = await NodeRuntime.create();
-try {
-	const result = await denied.exec(GUEST);
-	console.log("[network denied] exitCode:", result.exitCode);
-	console.log(
-		"[network denied] stderr:",
-		JSON.stringify(result.stderr.trim().split("\n")[0]),
-	);
-} finally {
-	await denied.dispose();
-}
-
-// 3. Host loopback access: network "allow" is not enough to reach real host
-// loopback. The host must explicitly exempt the host port too.
-const hostServer = createHttpServer((req, res) => {
-	res.writeHead(200, { "content-type": "text/plain" });
-	res.end("host-ok:" + req.url);
-});
-await new Promise<void>((resolve) => {
-	hostServer.listen(0, "127.0.0.1", resolve);
-});
-const hostPort = (hostServer.address() as AddressInfo).port;
-
-const HOST_FETCH_GUEST = `
-try {
-	const response = await fetch("http://127.0.0.1:${hostPort}/from-guest");
-	console.log(response.status + ":" + await response.text());
-} catch (error) {
-	console.log(error.cause?.code || error.code || error.name);
-	process.exit(2);
-}
-`;
-
-try {
-	const blockedHostLoopback = await NodeRuntime.create({
-		permissions: { network: "allow" },
-	});
-	try {
-		const result = await blockedHostLoopback.exec(HOST_FETCH_GUEST);
-		console.log("[host loopback blocked] exitCode:", result.exitCode);
-		console.log(
-			"[host loopback blocked] stdout:",
-			JSON.stringify(result.stdout.trim()),
-		);
-	} finally {
-		await blockedHostLoopback.dispose();
-	}
-
-	const allowedHostLoopback = await NodeRuntime.create({
-		permissions: { network: "allow" },
-		loopbackExemptPorts: [hostPort],
-	});
-	try {
-		const result = await allowedHostLoopback.exec(HOST_FETCH_GUEST);
-		console.log("[host loopback allowed] exitCode:", result.exitCode);
-		console.log(
-			"[host loopback allowed] stdout:",
-			JSON.stringify(result.stdout.trim()),
-		);
-	} finally {
-		await allowedHostLoopback.dispose();
-	}
-} finally {
-	await new Promise<void>((resolve) => hostServer.close(() => resolve()));
-}
diff --git a/examples/docs/feat-networking/tsconfig.json b/examples/docs/feat-networking/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/feat-networking/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/feat-output-capture/package.json b/examples/docs/feat-output-capture/package.json
deleted file mode 100644
index 8aa9ef623..000000000
--- a/examples/docs/feat-output-capture/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-feat-output-capture",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/feat-output-capture/src/index.mts b/examples/docs/feat-output-capture/src/index.mts
deleted file mode 100644
index b446e5e3b..000000000
--- a/examples/docs/feat-output-capture/src/index.mts
+++ /dev/null
@@ -1,17 +0,0 @@
-import { NodeRuntime } from "secure-exec";
-
-const rt = await NodeRuntime.create();
-
-try {
-	const { stdout, stderr, exitCode } = await rt.exec(`
-		console.log("hello from the sandbox");
-		console.error("oops from the sandbox");
-		process.exit(3);
-	`);
-
-	console.log("exitCode:", exitCode);
-	console.log("stdout:", JSON.stringify(stdout));
-	console.log("stderr:", JSON.stringify(stderr));
-} finally {
-	await rt.dispose();
-}
diff --git a/examples/docs/feat-output-capture/tsconfig.json b/examples/docs/feat-output-capture/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/feat-output-capture/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/feat-permissions/package.json b/examples/docs/feat-permissions/package.json
deleted file mode 100644
index 0cbc358ba..000000000
--- a/examples/docs/feat-permissions/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-feat-permissions",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/feat-permissions/src/index.mts b/examples/docs/feat-permissions/src/index.mts
deleted file mode 100644
index 9123177e3..000000000
--- a/examples/docs/feat-permissions/src/index.mts
+++ /dev/null
@@ -1,67 +0,0 @@
-import { NodeRuntime } from "secure-exec";
-
-// Permissions are a per-domain policy evaluated against every guest syscall.
-// Each domain (fs, network, childProcess, process, env) is configured
-// independently as "allow", "deny", or a rule set. Here the guest may use the
-// filesystem, but the network is fully denied - so an outbound fetch is blocked
-// by the kernel before any socket is opened.
-const rt = await NodeRuntime.create({
-  permissions: {
-    fs: "allow",
-    network: "deny",
-    childProcess: "allow",
-    process: "allow",
-    env: "allow",
-  },
-});
-
-try {
-  // Guest code runs as an ES module inside the VM. The filesystem write/read
-  // succeeds because fs is allowed; the fetch() throws because the kernel
-  // rejects the connection with EACCES from the network policy.
-  const { value, stdout, stderr, exitCode } = await rt.run<{
-    fileContents: string;
-    networkBlocked: boolean;
-    networkError: string | null;
-  }>(`
-    const { mkdirSync, writeFileSync, readFileSync } = await import("node:fs");
-
-    // Allowed: filesystem access is permitted.
-    mkdirSync("/workspace", { recursive: true });
-    writeFileSync("/workspace/note.txt", "written inside the sandbox");
-    const fileContents = readFileSync("/workspace/note.txt", "utf8");
-    console.log("filesystem allowed:", fileContents);
-
-    // Denied: the network domain is set to "deny", so fetch() is blocked.
-    let networkBlocked = false;
-    let networkError = null;
-    try {
-      await fetch("http://example.com");
-      console.log("UNEXPECTED: fetch succeeded");
-    } catch (error) {
-      networkBlocked = true;
-      networkError = (error.cause && error.cause.message) || error.message;
-      console.log("network denied:", networkError);
-    }
-
-    __return({ fileContents, networkBlocked, networkError });
-  `);
-
-  console.log("---");
-  console.log("exitCode:", exitCode);
-  if (stderr.trim()) console.log("guest stderr:", stderr.trim());
-  console.log("guest stdout:\n" + stdout.trim());
-  console.log("file contents:", value?.fileContents);
-  console.log("network blocked:", value?.networkBlocked);
-  console.log("network error:", value?.networkError);
-
-  if (value?.fileContents !== "written inside the sandbox") {
-    throw new Error("expected allowed filesystem write/read to succeed");
-  }
-  if (!value?.networkBlocked) {
-    throw new Error("expected denied network fetch to be blocked");
-  }
-  console.log("OK: filesystem allowed, network denied");
-} finally {
-  await rt.dispose();
-}
diff --git a/examples/docs/feat-permissions/tsconfig.json b/examples/docs/feat-permissions/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/feat-permissions/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/feat-resource-limits/package.json b/examples/docs/feat-resource-limits/package.json
deleted file mode 100644
index 5c15c5cbf..000000000
--- a/examples/docs/feat-resource-limits/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-feat-resource-limits",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/feat-resource-limits/src/index.mts b/examples/docs/feat-resource-limits/src/index.mts
deleted file mode 100644
index 857b3f68b..000000000
--- a/examples/docs/feat-resource-limits/src/index.mts
+++ /dev/null
@@ -1,39 +0,0 @@
-import { NodeRuntime } from "secure-exec";
-
-const rt = await NodeRuntime.create();
-
-try {
-	// A normal program finishes well within the timeout budget.
-	const ok = await rt.exec(`console.log("finished work");`, {
-		timeout: 5000,
-	});
-	console.log("normal run:");
-	console.log("  exitCode:", ok.exitCode);
-	console.log("  stdout:", JSON.stringify(ok.stdout.trim()));
-
-	// A runaway program (infinite loop) never returns on its own. The exec
-	// timeout terminates the guest process after the budget elapses.
-	const start = Date.now();
-	const runaway = await rt.exec(`while (true) {}`, {
-		timeout: 1000,
-	});
-	const elapsed = Date.now() - start;
-
-	console.log("runaway run (timeout: 1000ms):");
-	console.log("  exitCode:", runaway.exitCode);
-	console.log("  elapsedMs:", elapsed);
-
-	// A killed process exits non-zero; a clean exit would be 0.
-	const terminated = runaway.exitCode !== 0;
-	console.log(
-		terminated
-			? "runaway guest was terminated by the timeout"
-			: "ERROR: runaway guest was NOT terminated",
-	);
-
-	if (!terminated) {
-		process.exitCode = 1;
-	}
-} finally {
-	await rt.dispose();
-}
diff --git a/examples/docs/feat-resource-limits/tsconfig.json b/examples/docs/feat-resource-limits/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/feat-resource-limits/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/feat-runtime-platform/package.json b/examples/docs/feat-runtime-platform/package.json
deleted file mode 100644
index 86c52cba0..000000000
--- a/examples/docs/feat-runtime-platform/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-feat-runtime-platform",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/feat-runtime-platform/src/index.mts b/examples/docs/feat-runtime-platform/src/index.mts
deleted file mode 100644
index 63a4a016e..000000000
--- a/examples/docs/feat-runtime-platform/src/index.mts
+++ /dev/null
@@ -1,68 +0,0 @@
-/**
- * Runtime & Platform - what host environment guest JavaScript sees.
- *
- * The `NodeRuntime` façade boots a fully virtualized VM and runs guest code on
- * the **Node platform**: the `process` and `Buffer` globals, `node:*` builtin
- * modules, and full npm-style module resolution are all present. This is the
- * one platform the façade exposes today; the lower-level esbuild-style
- * `platform` knob (browser | neutral | bare) is not surfaced by `NodeRuntime`.
- *
- * This example proves the Node surface is live by having guest code probe its
- * own globals and builtins, then return a structured report to the host.
- */
-
-import { NodeRuntime } from "secure-exec";
-
-const rt = await NodeRuntime.create();
-
-try {
-	// Probe the guest's host environment from inside the kernel-backed isolate.
-	const probe = await rt.run<{
-		platform: string;
-		hasProcess: boolean;
-		hasBuffer: boolean;
-		nodeVersion: string;
-		sha256: string;
-		joinedPath: string;
-	}>(`
-		const { createHash } = await import("node:crypto");
-		const { join } = await import("node:path");
-
-		const sha256 = createHash("sha256").update("secure-exec").digest("hex");
-
-		globalThis.__return({
-			// process/Buffer are Node-platform globals (absent on browser/neutral/bare).
-			platform: typeof process !== "undefined" ? process.platform : "(no process)",
-			hasProcess: typeof process !== "undefined",
-			hasBuffer: typeof Buffer !== "undefined",
-			nodeVersion: typeof process !== "undefined" ? process.versions.node : "(none)",
-			// node:* builtin modules resolve and run inside the isolate
-			// (dynamic import() keeps this snippet a single expression body).
-			sha256,
-			joinedPath: join("/home/agentos", "report.txt"),
-		});
-	`);
-
-	if (probe.exitCode !== 0) {
-		throw new Error(`guest probe failed (exit ${probe.exitCode}): ${probe.stderr}`);
-	}
-
-	const r = probe.value!;
-	console.log("Guest host environment (Node platform):");
-	console.log(`  process global present : ${r.hasProcess}`);
-	console.log(`  Buffer global present  : ${r.hasBuffer}`);
-	console.log(`  process.platform       : ${r.platform}`);
-	console.log(`  process.versions.node  : ${r.nodeVersion}`);
-	console.log(`  node:crypto sha256     : ${r.sha256}`);
-	console.log(`  node:path join         : ${r.joinedPath}`);
-
-	// And a plain exec() run, showing stdout capture with the same Node surface.
-	const hello = await rt.exec(
-		`console.log("hello from", process.platform, "/ Buffer:", Buffer.from("hi").toString("base64"));`,
-	);
-	console.log("\nexec() stdout:");
-	process.stdout.write(`  ${hello.stdout}`);
-	console.log(`exec() exitCode: ${hello.exitCode}`);
-} finally {
-	await rt.dispose();
-}
diff --git a/examples/docs/feat-runtime-platform/tsconfig.json b/examples/docs/feat-runtime-platform/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/feat-runtime-platform/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/feat-typescript/package.json b/examples/docs/feat-typescript/package.json
deleted file mode 100644
index 3df5feb3a..000000000
--- a/examples/docs/feat-typescript/package.json
+++ /dev/null
@@ -1,18 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-feat-typescript",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"@secure-exec/typescript": "workspace:*",
-		"secure-exec": "workspace:*",
-		"typescript": "^5.7.2"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2"
-	}
-}
diff --git a/examples/docs/feat-typescript/src/index.mts b/examples/docs/feat-typescript/src/index.mts
deleted file mode 100644
index 21ab85a8a..000000000
--- a/examples/docs/feat-typescript/src/index.mts
+++ /dev/null
@@ -1,72 +0,0 @@
-/**
- * TypeScript example.
- *
- * `@secure-exec/typescript` runs the TypeScript compiler INSIDE the sandbox.
- * The compiler is projected into the VM and every compile/type-check happens
- * in the guest, so untrusted TypeScript never executes (or compiles) on the
- * host. Here we compile a typed snippet to JavaScript, run the emitted code in
- * the sandbox, and type-check a snippet that has a type error.
- */
-import { createTypeScriptTools } from "@secure-exec/typescript";
-import { NodeRuntime } from "secure-exec";
-
-const tools = createTypeScriptTools();
-
-// A typed snippet we want to compile and run inside the sandbox.
-const typeScriptSource = `
-interface Greeting {
-  name: string;
-  count: number;
-}
-
-const greeting: Greeting = { name: "secure-exec", count: 3 };
-const lines: string[] = Array.from(
-  { length: greeting.count },
-  (_unused, index) => \`hello \${greeting.name} #\${index + 1}\`,
-);
-
-for (const line of lines) {
-  console.log(line);
-}
-`;
-
-// Step 1: compile TypeScript to JavaScript inside the sandbox.
-const compiled = await tools.compileSource({
-  sourceText: typeScriptSource,
-  compilerOptions: { module: "ESNext", target: "ES2022" },
-});
-
-if (!compiled.success) {
-  const messages = compiled.diagnostics.map((d) => d.message);
-  throw new Error(`TypeScript compile failed:\n${messages.join("\n")}`);
-}
-
-console.log("Compiled TypeScript to JavaScript inside the sandbox.");
-
-// Step 2: run the emitted JavaScript inside the sandbox.
-const rt = await NodeRuntime.create();
-try {
-  const result = await rt.exec(compiled.outputText ?? "");
-  console.log("exitCode:", result.exitCode);
-  console.log("guest stdout:\n" + result.stdout.trimEnd());
-} finally {
-  await rt.dispose();
-}
-
-// Step 3: type-check a snippet that has a type error inside the sandbox.
-const typeCheck = await tools.typecheckSource({
-  sourceText: `const total: number = "not a number";`,
-});
-
-console.log("type check success:", typeCheck.success);
-for (const diagnostic of typeCheck.diagnostics) {
-  console.log(
-    `  ${diagnostic.category} TS${diagnostic.code} (line ${diagnostic.line}): ${diagnostic.message}`,
-  );
-}
-
-if (typeCheck.success) {
-  throw new Error("Expected the ill-typed snippet to fail type checking.");
-}
-
-console.log("OK: TypeScript compiled and type-checked inside the sandbox.");
diff --git a/examples/docs/feat-typescript/tsconfig.json b/examples/docs/feat-typescript/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/feat-typescript/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/feat-virtual-filesystem/package.json b/examples/docs/feat-virtual-filesystem/package.json
deleted file mode 100644
index 3f81073a9..000000000
--- a/examples/docs/feat-virtual-filesystem/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-feat-virtual-filesystem",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/feat-virtual-filesystem/src/index.mts b/examples/docs/feat-virtual-filesystem/src/index.mts
deleted file mode 100644
index 60b3cae79..000000000
--- a/examples/docs/feat-virtual-filesystem/src/index.mts
+++ /dev/null
@@ -1,42 +0,0 @@
-import { NodeRuntime } from "secure-exec";
-
-// Boot a VM and seed a file into its virtual filesystem at boot with `files`.
-// The bytes are copied into the kernel's in-memory filesystem; the host
-// filesystem is never exposed to the guest.
-const rt = await NodeRuntime.create({
-	files: { "/home/agentos/seed.json": JSON.stringify({ ok: true }) },
-});
-
-try {
-	// Write another file from the host with rt.writeFile, then have the guest
-	// read both back. The guest only ever sees the virtual filesystem.
-	await rt.writeFile("/home/agentos/note.txt", "written from the host\n");
-
-	const result = await rt.run(`
-		const { readFileSync } = await import("node:fs");
-		const seed = JSON.parse(readFileSync("/home/agentos/seed.json", "utf8"));
-		const note = readFileSync("/home/agentos/note.txt", "utf8").trim();
-		console.log("guest read seed:", JSON.stringify(seed));
-		console.log("guest read note:", note);
-		globalThis.__return({ seed, note });
-	`);
-
-	console.log("guest stdout:", result.stdout.trim());
-	console.log("guest exit code:", result.exitCode);
-	console.log("value returned to host:", result.value);
-
-	// Read a guest-written file back on the host with rt.readFile.
-	const bytes = await rt.readFile("/home/agentos/seed.json");
-	console.log("host rt.readFile:", new TextDecoder().decode(bytes));
-
-	// The virtual filesystem is isolated from the host disk. The guest path does
-	// not exist on the real host - prove it by checking the same path here.
-	const { existsSync } = await import("node:fs");
-	const guestPath = "/home/agentos/seed.json";
-	console.log(
-		`host sees ${guestPath}?`,
-		existsSync(guestPath) ? "YES (unexpected!)" : "NO - isolated from host",
-	);
-} finally {
-	await rt.dispose();
-}
diff --git a/examples/docs/feat-virtual-filesystem/tsconfig.json b/examples/docs/feat-virtual-filesystem/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/feat-virtual-filesystem/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/process-isolation/package.json b/examples/docs/process-isolation/package.json
deleted file mode 100644
index 01ebd5f93..000000000
--- a/examples/docs/process-isolation/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-process-isolation",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/process-isolation/src/index.mts b/examples/docs/process-isolation/src/index.mts
deleted file mode 100644
index 136c189db..000000000
--- a/examples/docs/process-isolation/src/index.mts
+++ /dev/null
@@ -1,102 +0,0 @@
-/**
- * Process isolation example.
- *
- * Each `NodeRuntime.create()` boots a fully virtualized VM. Two runtimes share
- * nothing: not the filesystem, not globals, not module state. And within a
- * single runtime, every `exec()` / `run()` call runs a fresh guest process, so
- * one run cannot leak in-memory state into the next.
- *
- * This example demonstrates both boundaries:
- *
- *   1. Two separate runtimes (A and B) write the same path and read it back -
- *      neither sees the other's data, proving filesystem isolation.
- *   2. Two consecutive runs in the SAME runtime mutate a global - the second
- *      run starts clean, proving each run is a fresh process with no shared
- *      in-memory state.
- *
- * Run with:
- *   SECURE_EXEC_SIDECAR_BIN=../../../target/debug/secure-exec-sidecar \
- *     npx tsx src/index.mts
- */
-
-import { NodeRuntime } from "secure-exec";
-
-// Boot two independent VMs. Each is its own isolation domain.
-const rtA = await NodeRuntime.create();
-const rtB = await NodeRuntime.create();
-
-try {
-  // --- 1. Filesystem isolation between two runtimes ---------------------
-  // Both runtimes write to the exact same path. Because each runtime has its
-  // own virtual filesystem, the writes never collide.
-  await rtA.exec(`
-    import { writeFileSync } from "node:fs";
-    writeFileSync("/tmp/shared-path.txt", "data from runtime A");
-  `);
-  await rtB.exec(`
-    import { writeFileSync } from "node:fs";
-    writeFileSync("/tmp/shared-path.txt", "data from runtime B");
-  `);
-
-  // `run()` wraps the body in an async function, so use dynamic `import()`
-  // (top-level `import` statements only work in `exec()`).
-  const readA = await rtA.run<string>(`
-    const { readFileSync } = await import("node:fs");
-    __return(readFileSync("/tmp/shared-path.txt", "utf8"));
-  `);
-  const readB = await rtB.run<string>(`
-    const { readFileSync } = await import("node:fs");
-    __return(readFileSync("/tmp/shared-path.txt", "utf8"));
-  `);
-
-  console.log("runtime A reads back:", JSON.stringify(readA.value));
-  console.log("runtime B reads back:", JSON.stringify(readB.value));
-  console.log(
-    "filesystems isolated:",
-    readA.value === "data from runtime A" &&
-      readB.value === "data from runtime B",
-  );
-
-  // Confirm a file created only in B does not exist in A.
-  const beforeWrite = await rtA.run<boolean>(`
-    const { existsSync } = await import("node:fs");
-    __return(existsSync("/tmp/only-in-b.txt"));
-  `);
-  await rtB.exec(`
-    import { writeFileSync } from "node:fs";
-    writeFileSync("/tmp/only-in-b.txt", "B");
-  `);
-  const afterWrite = await rtA.run<boolean>(`
-    const { existsSync } = await import("node:fs");
-    __return(existsSync("/tmp/only-in-b.txt"));
-  `);
-  console.log(
-    "/tmp/only-in-b.txt visible in A:",
-    beforeWrite.value,
-    "->",
-    afterWrite.value,
-  );
-
-  // --- 2. Each run is a fresh process (no shared globals) ----------------
-  // The first run sets a global. The second run, in the SAME runtime, observes
-  // a clean global state because it is a brand new guest process.
-  const firstRun = await rtA.run<number>(`
-    globalThis.__counter = (globalThis.__counter ?? 0) + 1;
-    __return(globalThis.__counter);
-  `);
-  const secondRun = await rtA.run<number>(`
-    globalThis.__counter = (globalThis.__counter ?? 0) + 1;
-    __return(globalThis.__counter);
-  `);
-
-  console.log("run 1 counter:", firstRun.value);
-  console.log("run 2 counter:", secondRun.value);
-  console.log(
-    "globals reset per run:",
-    firstRun.value === 1 && secondRun.value === 1,
-  );
-} finally {
-  // Each runtime owns its VM and must be disposed independently.
-  await rtA.dispose();
-  await rtB.dispose();
-}
diff --git a/examples/docs/process-isolation/tsconfig.json b/examples/docs/process-isolation/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/process-isolation/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/quickstart/package.json b/examples/docs/quickstart/package.json
deleted file mode 100644
index d84b5e5b8..000000000
--- a/examples/docs/quickstart/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-quickstart",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/quickstart/src/index.mts b/examples/docs/quickstart/src/index.mts
deleted file mode 100644
index f06abb541..000000000
--- a/examples/docs/quickstart/src/index.mts
+++ /dev/null
@@ -1,21 +0,0 @@
-import { NodeRuntime } from "secure-exec";
-
-// Boot a fully virtualized runtime. Guest code runs inside the kernel
-// isolation boundary - no host escapes.
-const runtime = await NodeRuntime.create();
-
-try {
-	// run() executes guest JavaScript as an ES module and returns the value the
-	// guest passes to globalThis.__return(). stdout/stderr are captured too.
-	const result = await runtime.run<{ message: string; sum: number }>(`
-		console.log("hello from secure-exec");
-		__return({ message: "hello from secure-exec", sum: 1 + 2 });
-	`);
-
-	console.log("stdout:", JSON.stringify(result.stdout.trim()));
-	console.log("value:", result.value);
-	console.log("exitCode:", result.exitCode);
-} finally {
-	// Tear down the VM and release the sidecar.
-	await runtime.dispose();
-}
diff --git a/examples/docs/quickstart/tsconfig.json b/examples/docs/quickstart/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/quickstart/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/sdk-overview/package.json b/examples/docs/sdk-overview/package.json
deleted file mode 100644
index 3cb7c6c79..000000000
--- a/examples/docs/sdk-overview/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-sdk-overview",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/sdk-overview/src/index.mts b/examples/docs/sdk-overview/src/index.mts
deleted file mode 100644
index 8fdeda77a..000000000
--- a/examples/docs/sdk-overview/src/index.mts
+++ /dev/null
@@ -1,65 +0,0 @@
-/**
- * SDK Overview example.
- *
- * A guided tour of the secure-exec façade:
- *   - NodeRuntime.create(options) boots a fully virtualized VM.
- *   - exec(code)  runs guest JavaScript and captures stdout/stderr/exitCode.
- *   - run(code)   runs guest JavaScript and returns a JSON value via __return().
- *   - dispose()   tears down the VM.
- *
- * Run with:
- *   SECURE_EXEC_SIDECAR_BIN=../../../target/debug/secure-exec-sidecar \
- *     npx tsx src/index.mts
- */
-
-import { NodeRuntime } from "secure-exec";
-
-// Boot a VM. Every option here is optional; these are the defaults made
-// explicit. `cwd` defaults to "/workspace" and permissions default to allow-all.
-const rt = await NodeRuntime.create({
-  env: { GREETING: "hello from the VM env" },
-  cwd: "/workspace",
-});
-
-try {
-  // exec() runs guest code for its output. Guest code is an ES module, so
-  // `import` and top-level `await` both work.
-  const execResult = await rt.exec(
-    `
-    import os from "node:os";
-    console.log("stdout:", 1 + 1);
-    console.error("stderr:", process.env.GREETING);
-    console.log("platform:", os.platform());
-    `,
-  );
-  console.log("exec.stdout:  ", JSON.stringify(execResult.stdout));
-  console.log("exec.stderr:  ", JSON.stringify(execResult.stderr));
-  console.log("exec.exitCode:", execResult.exitCode);
-
-  // run() returns a JSON-serializable value: the guest calls
-  // globalThis.__return(value) and that value is decoded on the host.
-  const runResult = await rt.run<{ sum: number; cwd: string }>(
-    `
-    globalThis.__return({ sum: 2 + 40, cwd: process.cwd() });
-    console.log("computed in the VM");
-    `,
-  );
-  console.log("run.value:    ", JSON.stringify(runResult.value));
-  console.log("run.stdout:   ", JSON.stringify(runResult.stdout));
-  console.log("run.exitCode: ", runResult.exitCode);
-
-  // Per-run options: extra env, stdin, cwd, and a timeout (ms).
-  const stdinResult = await rt.run<string>(
-    `
-    let input = "";
-    for await (const chunk of process.stdin) input += chunk;
-    globalThis.__return(input.trim().toUpperCase());
-    `,
-    { stdin: "piped through stdin", timeout: 10_000 },
-  );
-  console.log("run.value (stdin):", JSON.stringify(stdinResult.value));
-} finally {
-  // Always release the VM and the underlying sidecar.
-  await rt.dispose();
-  console.log("disposed");
-}
diff --git a/examples/docs/sdk-overview/tsconfig.json b/examples/docs/sdk-overview/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/sdk-overview/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/uc-ai-agent-code-exec/package.json b/examples/docs/uc-ai-agent-code-exec/package.json
deleted file mode 100644
index 919d9f4b7..000000000
--- a/examples/docs/uc-ai-agent-code-exec/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-uc-ai-agent-code-exec",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/uc-ai-agent-code-exec/src/index.mts b/examples/docs/uc-ai-agent-code-exec/src/index.mts
deleted file mode 100644
index 63a19217d..000000000
--- a/examples/docs/uc-ai-agent-code-exec/src/index.mts
+++ /dev/null
@@ -1,38 +0,0 @@
-import { NodeRuntime } from "secure-exec";
-
-// Imagine this string came from an AI agent. We never trust it: it runs fully
-// sandboxed inside the secure-exec VM, with no access to the host machine.
-const untrustedCode = `
-const fib = [0, 1];
-while (fib.length < 20) {
-  fib.push(fib[fib.length - 1] + fib[fib.length - 2]);
-}
-console.log("computed", fib.length, "fibonacci numbers");
-// Hand a JSON-serializable value back to the host.
-globalThis.__return({ fibonacci: fib, sum: fib.reduce((a, b) => a + b, 0) });
-`;
-
-const rt = await NodeRuntime.create();
-try {
-  // rt.run() executes the guest code and decodes whatever it passes to
-  // globalThis.__return(), while still capturing stdout/stderr/exitCode.
-  const result = await rt.run<{ fibonacci: number[]; sum: number }>(
-    untrustedCode,
-    { timeout: 5000 },
-  );
-
-  console.log("exitCode:", result.exitCode);
-  console.log("stdout:", result.stdout.trim());
-  console.log("returned value:", JSON.stringify(result.value));
-
-  // The sandbox presents normal Node semantics, but the code cannot touch the
-  // host: it only ever sees the virtual filesystem and kernel-mediated syscalls.
-  const escapeAttempt = await rt.exec(
-    `import os from "node:os";\nconsole.log("guest hostname:", os.hostname());`,
-    { timeout: 5000 },
-  );
-  console.log("\nescape attempt exitCode:", escapeAttempt.exitCode);
-  console.log("escape attempt stdout:", escapeAttempt.stdout.trim());
-} finally {
-  await rt.dispose();
-}
diff --git a/examples/docs/uc-ai-agent-code-exec/tsconfig.json b/examples/docs/uc-ai-agent-code-exec/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/uc-ai-agent-code-exec/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/uc-code-mode/package.json b/examples/docs/uc-code-mode/package.json
deleted file mode 100644
index 1cf67742e..000000000
--- a/examples/docs/uc-code-mode/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-uc-code-mode",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/uc-code-mode/src/index.mts b/examples/docs/uc-code-mode/src/index.mts
deleted file mode 100644
index e41bcd02d..000000000
--- a/examples/docs/uc-code-mode/src/index.mts
+++ /dev/null
@@ -1,110 +0,0 @@
-// docs:start bindings
-import { NodeRuntime } from "secure-exec";
-
-function readStringField(input: unknown, field: string): string {
-  if (!input || typeof input !== "object" || Array.isArray(input)) {
-    throw new TypeError("binding input must be an object");
-  }
-
-  const value = (input as Record<string, unknown>)[field];
-  if (typeof value !== "string") {
-    throw new TypeError(`${field} must be a string`);
-  }
-  return value;
-}
-
-// Code Mode: instead of giving the LLM many individual bindings, you give it one
-// "execute code" tool. The LLM writes JavaScript that chains binding calls,
-// branches, and transforms data - then runs it in a single sandboxed pass.
-//
-// The heart of Code Mode is real bindings. You register them on the host with
-// create({ bindings }); each becomes a named command inside the sandbox. When the
-// guest invokes a binding by name with JSON input, the call round-trips back to the
-// host, runs the binding's handler, and the handler's return value is delivered
-// back to the guest. The guest never sees the host filesystem, network, or any
-// capability beyond the named bindings you grant it.
-
-// Register the bindings. These handlers run on the HOST, not in the sandbox.
-// In a real app each handler would hit a database, an API, or a service; here we
-// keep them small and deterministic so the example is easy to follow.
-const rt = await NodeRuntime.create({
-  bindings: {
-    "get-weather": {
-      description: "Look up the current temperature for a city",
-      inputSchema: {
-        type: "object",
-        properties: { city: { type: "string" } },
-        required: ["city"],
-      },
-      handler: (input) => {
-        const city = readStringField(input, "city");
-        const table: Record<string, { temp_f: number }> = {
-          "San Francisco": { temp_f: 61 },
-          Tokyo: { temp_f: 75 },
-        };
-        return table[city] ?? { temp_f: null };
-      },
-    },
-    calculate: {
-      description: "Evaluate a simple arithmetic expression",
-      inputSchema: {
-        type: "object",
-        properties: { expression: { type: "string" } },
-        required: ["expression"],
-      },
-      handler: (input) => {
-        const expression = readStringField(input, "expression");
-        return { result: Number(eval(expression)) };
-      },
-    },
-  },
-});
-// docs:end bindings
-
-// docs:start generated-code
-// Imagine this string was written by the LLM. It chains three host binding calls
-// with real control flow (Promise.all, arithmetic, branching) in one execution,
-// then hands a single structured result back to the host. callBinding resolves
-// with the host handler's return value.
-const llmGeneratedCode = `
-const [sf, tokyo] = await Promise.all([
-  callBinding("get-weather", { city: "San Francisco" }),
-  callBinding("get-weather", { city: "Tokyo" }),
-]);
-
-const diffF = Math.abs(sf.temp_f - tokyo.temp_f);
-const diffC = await callBinding("calculate", { expression: \`\${diffF} * 5 / 9\` });
-
-console.log("chained 3 binding calls in one sandbox execution");
-
-globalThis.__return({
-  san_francisco: sf,
-  tokyo: tokyo,
-  difference: { fahrenheit: diffF, celsius: diffC.result },
-  warmer: sf.temp_f > tokyo.temp_f ? "San Francisco" : "Tokyo",
-});
-`;
-// docs:end generated-code
-
-// docs:start run
-interface CodeModeResult {
-  san_francisco: { temp_f: number };
-  tokyo: { temp_f: number };
-  difference: { fahrenheit: number; celsius: number };
-  warmer: string;
-}
-
-try {
-  // rt.run() executes the guest code and decodes whatever it passes to
-  // globalThis.__return(), while still capturing stdout/stderr/exitCode.
-  const result = await rt.run<CodeModeResult>(llmGeneratedCode, {
-    timeout: 5000,
-  });
-
-  console.log("exitCode:", result.exitCode);
-  console.log("stdout:", result.stdout.trim());
-  console.log("structured result:", JSON.stringify(result.value, null, 2));
-} finally {
-  await rt.dispose();
-}
-// docs:end run
diff --git a/examples/docs/uc-code-mode/tsconfig.json b/examples/docs/uc-code-mode/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/uc-code-mode/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/uc-dev-servers/package.json b/examples/docs/uc-dev-servers/package.json
deleted file mode 100644
index 47c503932..000000000
--- a/examples/docs/uc-dev-servers/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-uc-dev-servers",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/uc-dev-servers/src/index.mts b/examples/docs/uc-dev-servers/src/index.mts
deleted file mode 100644
index 69f92b3c9..000000000
--- a/examples/docs/uc-dev-servers/src/index.mts
+++ /dev/null
@@ -1,83 +0,0 @@
-import { NodeRuntime } from "secure-exec";
-
-// A user's "dev server": untrusted, long-running server-style code. It boots a
-// real node:http server and keeps serving until the host cancels this exec.
-const devServer = `
-import http from "node:http";
-
-const app = http.createServer((req, res) => {
-  if (req.url === "/health") {
-    res.writeHead(200, { "content-type": "application/json" });
-    res.end(JSON.stringify({ ok: true }));
-    return;
-  }
-  res.writeHead(200, { "content-type": "text/plain" });
-  res.end("hello from " + req.url);
-});
-
-app.listen(3000, "127.0.0.1", () => {
-  console.log("server listening on 127.0.0.1:3000");
-});
-
-await new Promise(() => {});
-`;
-
-const runtime = await NodeRuntime.create({ permissions: { network: "allow" } });
-const serverAbort = new AbortController();
-const stdoutDecoder = new TextDecoder();
-let ready!: () => void;
-const serverReady = new Promise<void>((resolve) => {
-	ready = resolve;
-});
-
-try {
-	const serverExec = runtime
-		.exec(devServer, {
-			signal: serverAbort.signal,
-			onStdout: (chunk) => {
-				const text = stdoutDecoder.decode(chunk);
-				process.stdout.write(text);
-				if (text.includes("server listening")) {
-					ready();
-				}
-			},
-		})
-		.catch((error: unknown) => {
-			if (serverAbort.signal.aborted) {
-				return;
-			}
-			throw error;
-		});
-
-	await serverReady;
-
-	// Drive a host->guest request into the running server.
-	const health = await runtime.fetch(3000, { path: "/health" });
-	console.log("host health ->", health.status, JSON.stringify(health.body));
-
-	const hostRes = await runtime.fetch(3000, { method: "GET", path: "/from-host" });
-	console.log("host GET ->", hostRes.status, JSON.stringify(hostRes.body));
-
-	// Run another guest program in the same VM while the server exec is still
-	// active. Its fetch() reaches the server through VM loopback.
-	const guestClient = await runtime.exec(`
-const response = await fetch("http://127.0.0.1:3000/from-guest");
-console.log(response.status + " " + await response.text());
-`);
-	console.log("guest fetch ->", JSON.stringify(guestClient.stdout.trim()));
-
-	console.log(
-		"RESULT " +
-			JSON.stringify({
-				host: { status: hostRes.status, body: hostRes.body },
-				guest: guestClient.stdout.trim(),
-			}),
-	);
-
-	serverAbort.abort();
-	await serverExec;
-	console.log("server stopped");
-} finally {
-	serverAbort.abort();
-	await runtime.dispose();
-}
diff --git a/examples/docs/uc-dev-servers/tsconfig.json b/examples/docs/uc-dev-servers/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/uc-dev-servers/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/docs/uc-plugin-systems/package.json b/examples/docs/uc-plugin-systems/package.json
deleted file mode 100644
index a662e3201..000000000
--- a/examples/docs/uc-plugin-systems/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "@secure-exec/example-docs-uc-plugin-systems",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"start": "tsx src/index.mts",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"secure-exec": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/docs/uc-plugin-systems/src/index.mts b/examples/docs/uc-plugin-systems/src/index.mts
deleted file mode 100644
index 8352bee8a..000000000
--- a/examples/docs/uc-plugin-systems/src/index.mts
+++ /dev/null
@@ -1,68 +0,0 @@
-import { NodeRuntime } from "secure-exec";
-
-// Boot a sandboxed VM for running untrusted plugin code. The plugin can use
-// the filesystem, but network access is denied. (childProcess/process stay
-// allowed because the kernel spawns the guest `node` process to run the
-// plugin - denying it would block the runtime itself.)
-const runtime = await NodeRuntime.create({
-	permissions: {
-		fs: "allow",
-		network: "deny",
-		childProcess: "allow",
-		process: "allow",
-		env: "allow",
-	},
-});
-
-try {
-	// The host owns the plugin source and the input. Here the plugin is a
-	// title-case transformer; in a real system it would be uploaded by a user.
-	const pluginSource = `
-		function transform(input, options = {}) {
-			const words = String(input)
-				.split(/\\s+/)
-				.filter(Boolean)
-				.map((w) => w.charAt(0).toUpperCase() + w.slice(1).toLowerCase());
-			return (options.prefix ?? "") + words.join(" ");
-		}
-		const manifest = { name: "title-case", version: "1.0.0" };
-	`;
-
-	const input = "hello from plugin land";
-	const options = { prefix: "Plugin says: " };
-
-	// Run the plugin in isolation and get a structured value back via run().
-	// The guest calls __return() with a JSON-serializable value, decoded on the
-	// host as result.value. The plugin also proves it cannot reach the network.
-	const { value, stdout, exitCode } = await runtime.run<{
-		manifest: { name: string; version: string };
-		output: string;
-		networkBlocked: boolean;
-	}>(`
-		${pluginSource}
-
-		console.log("running plugin:", manifest.name);
-
-		let networkBlocked = false;
-		try {
-			await fetch("http://example.com");
-		} catch {
-			networkBlocked = true;
-		}
-
-		__return({
-			manifest,
-			output: transform(${JSON.stringify(input)}, ${JSON.stringify(options)}),
-			networkBlocked,
-		});
-	`);
-
-	console.log("guest stdout:", stdout.trim());
-	console.log("exit code:", exitCode);
-	console.log("plugin name:", value?.manifest.name);
-	console.log("plugin version:", value?.manifest.version);
-	console.log("plugin output:", value?.output);
-	console.log("network blocked:", value?.networkBlocked);
-} finally {
-	await runtime.dispose();
-}
diff --git a/examples/docs/uc-plugin-systems/tsconfig.json b/examples/docs/uc-plugin-systems/tsconfig.json
deleted file mode 100644
index 5ead5b22d..000000000
--- a/examples/docs/uc-plugin-systems/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules"]
-}
diff --git a/examples/native-client/package.json b/examples/native-client/package.json
deleted file mode 100644
index 94cf1c9ae..000000000
--- a/examples/native-client/package.json
+++ /dev/null
@@ -1,16 +0,0 @@
-{
-	"name": "@secure-exec/example-native-client",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"build": "tsc",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"@secure-exec/core": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/examples/native-client/src/index.ts b/examples/native-client/src/index.ts
deleted file mode 100644
index 7c1c3e471..000000000
--- a/examples/native-client/src/index.ts
+++ /dev/null
@@ -1,41 +0,0 @@
-import { Sidecar } from "@secure-exec/core/sidecar-client";
-
-const decoder = new TextDecoder();
-
-const client = Sidecar.spawn({
-	cwd: process.cwd(),
-});
-
-try {
-	const session = await client.authenticateAndOpenSession({
-		example: "native-client",
-	});
-	const vm = await client.createVm(session, {
-		runtime: "java_script",
-		config: {
-			env: {},
-			rootFilesystem: {
-				mode: "ephemeral",
-				disableDefaultBaseLayer: false,
-				lowers: [{ kind: "bundledBaseFilesystem" }],
-				bootstrapEntries: [],
-			},
-			loopbackExemptPorts: [],
-		},
-	});
-
-	try {
-		await client.writeFile(
-			session,
-			vm,
-			"/tmp/message.txt",
-			"hello from secure-exec\n",
-		);
-		const content = await client.readFile(session, vm, "/tmp/message.txt");
-		console.log(decoder.decode(content).trim());
-	} finally {
-		await client.disposeVm(session, vm);
-	}
-} finally {
-	await client.dispose();
-}
diff --git a/examples/native-client/tsconfig.json b/examples/native-client/tsconfig.json
deleted file mode 100644
index 1cbed3479..000000000
--- a/examples/native-client/tsconfig.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"extends": "../../tsconfig.base.json",
-	"compilerOptions": {
-		"outDir": "./dist",
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules", "dist"]
-}
diff --git a/experiments/wasm-gui/README.md b/experiments/wasm-gui/README.md
deleted file mode 100644
index 2e33d9047..000000000
--- a/experiments/wasm-gui/README.md
+++ /dev/null
@@ -1,127 +0,0 @@
-# wasm-gui — a GUI rendered by wasm running inside secure-exec
-
-A spike toward a full Linux GUI desktop where the GUI software is **cross-compiled to
-`wasm32-wasip1`** (our toolchain) and **executed inside the real secure-exec V8 sidecar**, with a
-native host (built on the standard secure-exec **Rust** client) reading the rendered framebuffer
-and blitting it to a native surface. See `SPEC.md` and `../../WASM-GUI-DESKTOP-RESEARCH.md`.
-
-**Strict constraint (SPEC §1a.2):** the process that executes *and* renders the guest is a native
-app on `crates/secure-exec-client`, driving the guest through the real V8 sidecar. No wasmer, no
-node:wasi, no TypeScript client, no `Command::new` in the execution/render path — the only process
-spawn is the sidecar itself, done by the Rust client's transport.
-
-```
-guest/        Rust -> wasm32-wasip1 software renderer + frame protocol v0 (standalone wasm workspace)
-host/         native Rust app on secure-exec-client: runs guest.wasm IN the sidecar, blits frames
-              (member of the repo root workspace, shares Cargo.lock with the sidecar)
-tests/        automated headless verification THROUGH secure-exec (build, run, golden pixels, PNG)
-host-node/    SUPERSEDED node:wasi spike (determinism evidence only; not the product path)
-```
-
-## Run the automated test (headless — no display needed)
-
-```sh
-cd experiments/wasm-gui
-./tests/run.sh
-```
-This builds the guest, builds the host + sidecar in the repo root workspace, runs `guest.wasm`
-**inside the secure-exec V8 sidecar** via the Rust client, reads the framebuffer back through the
-client (chunked PREAD), validates the frame header, checks golden pixels, and writes a PNG proof to
-`~/tmp/gui-progress/assets/frame_secureexec.png`. Re-bless the golden after an intentional renderer
-change with `./tests/run.sh --bless`.
-
-Requirements: `cargo` + the `wasm32-wasip1` target (`rustup target add wasm32-wasip1`), `node`
-(only for the pixel checker), and `ffmpeg` (PNG proof only). The sidecar is built from this repo.
-
-## Run capture directly (what the test does)
-
-```sh
-# from repo root, after `cargo build -p secure-exec-sidecar -p wasm-gui-host`
-target/debug/wasm-gui-host \
-  --capture /tmp/frame.bin \
-  --guest experiments/wasm-gui/guest/target/wasm32-wasip1/release/guest.wasm \
-  --sidecar target/debug/secure-exec-sidecar
-```
-
-## Run the interactive window demo (on a machine WITH a display)
-
-```sh
-cd experiments/wasm-gui/guest && cargo build --target wasm32-wasip1 --release && cd -
-cargo build -p wasm-gui-host --features window
-target/debug/wasm-gui-host --window \
-  --guest experiments/wasm-gui/guest/target/wasm32-wasip1/release/guest.wasm \
-  --sidecar target/debug/secure-exec-sidecar
-```
-Opens a real OS window. The guest runs in `--loop` mode *inside the sidecar*; the host streams its
-stdout frames (`ProcessOutputEvent`) through the client, blits them, and forwards mouse/keyboard
-back via `WriteStdin`. This dev box is headless, so the window can't open here; the PNG proof shows
-the identical frame.
-
-## Run the real X11 stack (M4 / M4b / M5) — a wasm X server + wasm X clients
-
-The frontier milestones cross-compile the **real X.Org `Xvfb` X server** and X **clients** from source to
-`wasm32-wasip1` and run them **as guests inside secure-exec**, talking X11 over an AF_UNIX socket in the
-kernel socket table. Build the pieces, then run:
-
-```sh
-# 1. Build the sidecar + host (repo root)
-cargo build -p secure-exec-sidecar -p wasm-gui-host
-
-# 2. Build the raw-X11 client (the X server, Xvfb.wasm, is built by scripts/link-xvfb.sh +
-#    a `wasm-opt --fpcast-emu` pass — see SPEC.md for the full server build).
-experiments/wasm-gui/scripts/build-xfill.sh
-
-# 3a. M4b — one X client draws on the wasm X server; read the framebuffer back:
-target/debug/wasm-gui-host --xdemo --timeout 16 \
-  --server experiments/wasm-gui/Xvfb.wasm \
-  --client experiments/wasm-gui/guest-xclient/xfill.wasm \
-  --fb-out /tmp/frame.bin --sidecar target/debug/secure-exec-sidecar \
-  -- :0 -screen 0 640x480x24 -nolisten tcp -nolock -listen local -fbdir /data
-
-# 3c. M5 — the standard window manager twm decorating a real libX11 client window:
-#     (build the toolkit stack + twm + xwin first; see SPEC.md §M5 for the build commands)
-target/debug/wasm-gui-host --xdemo --timeout 30 \
-  --server experiments/wasm-gui/Xvfb.wasm \
-  --client experiments/wasm-gui/twm.wasm \
-  --client experiments/wasm-gui/guest-xclient/xwin.wasm \
-  --fb-out /tmp/frame.bin --sidecar target/debug/secure-exec-sidecar \
-  -- :0 -screen 0 640x480x24 -nolisten tcp -nolock -listen local -noreset -fbdir /data
-# Automated: scripts/test-m5-twm.sh  (asserts twm decorates the window with a title bar)
-
-# 3b. M5 — THREE clients (orange bg, green + blue rects) composited by one X server:
-target/debug/wasm-gui-host --xdemo --timeout 22 \
-  --server experiments/wasm-gui/Xvfb.wasm \
-  --client "experiments/wasm-gui/guest-xclient/xfill.wasm 0 0 -1 -1 16746496" \
-  --client "experiments/wasm-gui/guest-xclient/xfill.wasm 80 80 200 150 65280" \
-  --client "experiments/wasm-gui/guest-xclient/xfill.wasm 360 250 200 150 255" \
-  --fb-out /tmp/frame.bin --sidecar target/debug/secure-exec-sidecar \
-  -- :0 -screen 0 640x480x24 -nolisten tcp -nolock -listen local -noreset -fbdir /data
-```
-
-`/tmp/frame.bin` is an XWD dump (160-byte header + BGRX pixels) of the X server's root window, read out
-of the VM via the kernel VFS. Automated equivalents: `scripts/test-m4b.sh` and
-`scripts/test-m5-multiclient.sh` (both assert the framebuffer contains the clients' fill colors).
-`--xdemo` runs the X server and every `--client` as **separate guest processes in one VM**, launching the
-clients once the server reaches its dispatch loop, then reads the framebuffer back.
-
-## How it works (the data path)
-
-```
-guest.wasm (wasm32-wasip1)  ──run inside──▶  secure-exec V8 sidecar
-   software-renders RGBA frames                (real runtime; loads the module from the
-   frame protocol v0 over WASI fds              trusted-client host entrypoint path)
-        │ frames out (PREAD / stdout events)        ▲ input in (WriteStdin)
-        ▼                                           │
-   native host on secure-exec-client (Rust): reads frames, blits to winit/softbuffer, sends input
-```
-
-Frame protocol v0: `b"SXFB" | u32 LE width | u32 LE height`, then `width*height*4` bytes row-major
-`[R,G,B,A]`. Capture mode (`guest --out <path>`) writes one deterministic frame to the guest VFS;
-window mode (`guest --loop`) streams frames on stdout and reads input tokens on stdin.
-
-## Scope / honesty
-
-- The renderer is **hand-rolled**, not a real toolkit — it exercises the data path and the test
-  harness. Real toolkits (FLTK/Tk, then an X server + WM) are milestones M3+ in `SPEC.md`.
-- The guest frame produced through secure-exec is **byte-identical** (SHA-256) to the superseded
-  node:wasi/wasmer spike output, which is how we know the V8 execution is faithful.
diff --git a/experiments/wasm-gui/SPEC.md b/experiments/wasm-gui/SPEC.md
deleted file mode 100644
index eba2b2d20..000000000
--- a/experiments/wasm-gui/SPEC.md
+++ /dev/null
@@ -1,416 +0,0 @@
-# Spec: WASM GUI desktop — from software-rendered frame to native surface
-
-Living spec (v2 — revised after subagent review; changelog at bottom). Status legend:
-⬜ todo · 🟡 in progress · ✅ done · ❌ blocked. Companion research:
-`../../WASM-GUI-DESKTOP-RESEARCH.md`. Progress log + proof: `~/tmp/gui-progress/progress.html`.
-
-## 1. North star & strategy
-
-Run a Raspberry-Pi-class Linux GUI desktop where the GUI software is **cross-compiled from
-source to `wasm32-wasip1`** (our toolchain family) and **rendered on a native host surface**
-(the runtime owns a `winit`/`softbuffer` window; browser later). Research verdict drives the
-sequencing:
-
-- **Software rasterization → framebuffer → host blits it.** No GL/EGL/GPU in the guest. The
-  guest computes pixels with ordinary compute + WASI; frames cross the sandbox boundary; the
-  native host displays them. This single data path is the spine of every later milestone.
-- **X11 over Wayland for the first real desktop** because core X11 runs entirely over a socket
-  and `MIT-SHM` is optional with a clean `XPutImage` fallback — so we avoid implementing shared
-  memory. (Wayland's `wl_shm` has no fallback.)
-- **Avoid `dlopen` and shared memory.** Static-link everything; keep multi-process boundaries at
-  the socket/module level. Threads are acceptable later (`wasm32-wasip1-threads`) but the first
-  milestones are single-threaded.
-
-## 1a. Strict constraints (NON-NEGOTIABLE)
-
-1. **We compile the GUI software to wasm ourselves**, from source, with our own toolchain
-   (`wasm32-wasip1` / wasi-sdk family). No off-the-shelf pre-built wasm GUI ports.
-2. **The process that executes the guest AND renders the GUI is a native app built on the
-   STANDARD secure-exec Rust client** (`crates/secure-exec-client`). That app:
-   - drives the guest wasm **through the real secure-exec runtime (V8 sidecar)** — the guest runs
-     inside secure-exec, exactly like any other guest workload;
-   - pulls frames out via the client and blits them to a native window it owns;
-   - injects input back into the guest through the client.
-   **Forbidden in the execution/render path:** `wasmer`, `node:wasi`, the TypeScript client, or any
-   `Command::new`-style direct spawn. If it runs guest pixels, it goes through secure-exec via the
-   Rust client. (The M0 spike that used `wasmer`/`node:wasi` is **superseded** by this rule — it
-   stays only as evidence the renderer is deterministic; it is not the product path.)
-3. Everything is **end-to-end and automatically tested**, with a **manually runnable example**, and
-   the spec + `~/tmp/gui-progress/progress.html` are kept current with proof/screenshots.
-
-## 2. Hard constraints (from runtime survey + research, verified against the codebase)
-
-| Constraint | Source | Consequence |
-|---|---|---|
-| Guest is `wasm32-wasip1`, executed in **V8** over a sync-RPC bridge | runtime survey, confirmed `crates/execution/src/wasm.rs`, `node_import_cache.rs` (`new WASI({version:'preview1'})`) | host engine for fidelity = V8 family. **Note:** the secure-exec WASM runner is its *own* JS-polyfill WASI over sync-RPC, **not** stock `node:wasi`. So the M0 `node:wasi` harness is a *proxy* for the V8 family; true product-path parity is deferred to **M5**. |
-| No shared memory / mmap / dlopen / threads exposed to guests | runtime survey, confirmed `registry/native/crates/wasi-ext/` exposes only `host_process`/`host_net`/`host_user` | M0 uses none of them. Each is a later, explicit milestone. |
-| AF_UNIX (path sockets) + TCP work | confirmed `wasi-ext` `host_net` supports `/path` sockets | X11 wire transport feasible (later). |
-| No GPU / framebuffer / native window exists yet | runtime survey | native surface is greenfield; built host-side in Rust. |
-| `mmap` "unsupported" claim is **overstated** — must be measured | research (refuted claim) | M1 spike measures real mmap before font/fbdev work. |
-| This dev box is **headless** (no DISPLAY) + only `wasmer` CLI, `node`, `ffmpeg`, `cargo` present (no `wasmtime`/`clang`/`emcc`/Xvfb) | environment probe | automated proof = raw framebuffer → PNG via `ffmpeg`; two engines = `node:wasi` + `wasmer` CLI (no heavy Rust wasm-engine build); windowed host is the user's manual demo. |
-
-**Trust-model constraint (from root `CLAUDE.md`, boundary = sidecar ↔ executor):** anything that
-parses untrusted guest traffic (the X server, toolkit, app) runs **in the executor as a guest**.
-The new trusted host code is *only* the native-surface shuttle, which must do **no protocol
-parsing** — it blits an opaque pixel buffer and forwards input events. This keeps the TCB minimal.
-
-## 3. Architecture (the product path — secure-exec Rust client end to end)
-
-```
-┌─ guest GUI app (wasm32-wasip1, compiled by our toolchain) ───────────────┐
-│  software-renders RGBA frames; speaks frame protocol v0 over WASI fds      │
-│  (later milestones: a real toolkit, then an X server + WM as guests)       │
-└──────────────────────────────────┬─────────────────────────────────────────┘
-                                   │  runs INSIDE secure-exec
-                    ┌──────────────┴───────────────┐
-                    │  secure-exec sidecar (V8)     │  ← the real runtime; NOT wasmer/node:wasi
-                    │  WASM exec + VFS + sockets     │
-                    └──────────────┬───────────────┘
-                                   │  secure-exec WIRE protocol (stdio)
-┌──────────────────────────────────┴─────────────────────────────────────────┐
-│  NATIVE HOST APP (Rust) on the STANDARD secure-exec Rust client             │
-│  crates/secure-exec-client:                                                  │
-│   • spawn/connect sidecar, create VM, load guest.wasm, start WASM exec       │
-│   • pull frames out (process stdout stream / VFS read) → decode protocol     │
-│   • own a winit+softbuffer window, blit frames                               │
-│   • inject keyboard/mouse via the client back into the guest                 │
-└──────────────────────────────────────────────────────────────────────────────┘
-```
-
-The frame protocol is transport-agnostic; what changes per milestone is only what the *guest* is
-(hand renderer → real toolkit → X server + WM). The guest's "render pixels with no host graphics"
-contract and the "execute+render via the secure-exec Rust client" contract never change.
-
-**Superseded M0 spike (kept as evidence only):** the original two-engine path (`node:wasi` +
-`wasmer`, SHA-256 byte-equality, ffmpeg PNG) proved the renderer is deterministic and the data path
-works. It violates §1a.2 (uses non-secure-exec runtimes), so it is **not** the product path — the
-Rust-client host below replaces it.
-
-## 4. Milestones
-
-- **M0 — Framebuffer renderer + data path (SPIKE, superseded).** Rust→`wasm32-wasip1` guest
-  software-renders a deterministic desktop-looking frame; proven byte-identical under two engines;
-  golden-pixel + cross-engine tests; PNG proof. ✅ **done as a spike** — but it executes via
-  `node:wasi`/`wasmer`, which **§1a.2 forbids** for the product path. Kept only as evidence the
-  renderer + protocol work. Superseded by M1.
-- **M1 — Rust-client native host (THE foundation).** A native Rust app on
-  `crates/secure-exec-client` that: builds/locates + launches the sidecar, creates a VM, runs
-  `guest.wasm` **through secure-exec (V8)**, reads the framebuffer back via the client (chunked
-  PREAD), and blits it in a `winit`+`softbuffer` window (with `--capture` headless mode for
-  automated proof). This **replaces wasmer/node:wasi entirely**. ✅ **done** — `./tests/run.sh`
-  green; the frame rendered by the guest *inside the real secure-exec sidecar* is byte-identical
-  (SHA-256) to the spike output and passes golden pixels; window host compiles with `--features
-  window`. Host is a member of the repo root workspace (shares `Cargo.lock` with the sidecar);
-  guest stays a standalone wasm workspace. Notes: the sidecar loads the wasm from the trusted-client
-  HOST path given as `entrypoint`; the VM is created with an allow-all fs/process policy (trusted
-  config); the client must use the sidecar-ALLOCATED `connection_id` from the auth response.
-- **M2 — mmap reality spike.** ✅ **done.** Findings (verified by `probes/mmap-probe.c` compiled
-  with the vendored wasi-sdk and run *through secure-exec* via the M1 host):
-  - Rust's `wasm32-wasip1` self-contained libc defines **no** `mmap`; wasi-sdk's `sys/mman.h`
-    `#error`s by default ("WASI lacks a true mmap").
-  - wasi-sdk ships an opt-in emulation: **`-D_WASI_EMULATED_MMAN -lwasi-emulated-mman`** (mmap over
-    malloc + pread). With it, **anonymous mmap (rw)** and **file-backed `MAP_PRIVATE` read** both
-    work inside secure-exec — no host mmap implementation needed (the runtime already serves the
-    underlying pread/file ops).
-  - Limitation: no `MAP_SHARED` write-back, no cross-process shared memory (consistent with the
-    "no shared memory" constraint). Fine for single-process toolkits and read-only font access.
-  - **Consequence for M3:** freetype/fontconfig font `mmap` is satisfiable via the emulation; no
-    stream-I/O patch strictly required. The `_WASI_EMULATED_MMAN` flags must be in the toolkit build.
-  - Bonus: this proved the **C-source → wasm32-wasip1 (wasi-sdk clang) → run-in-secure-exec**
-    pipeline end-to-end, which is exactly the M3 build path.
-- **M3 — Real framebuffer-native toolkit (Nuklear).** ✅ **done.** A pre-implementation design
-  review established that FLTK/Tk cannot software-render without X (they'd need a from-scratch
-  screen/graphics driver — weeks of authoring, not a cross-compile), so they belong *after* the X
-  server (see M4b). M3 is instead a real, standard, framebuffer-native toolkit: **Nuklear**
-  (single-header immediate-mode GUI shipping a software RGBA backend; no X/GL/dlopen/threads, no
-  font files). Real third-party widgets (window chrome, buttons, checkbox, radio buttons, slider,
-  progress bar, labels, a second window) software-rasterized and run **inside secure-exec** via the
-  M1 host. Cross-compiled from source with the vendored wasi-sdk (`scripts/build-nuklear.sh`).
-  Tested end-to-end (`tests/run-nuklear.sh`): header + golden-pixel checks, exact frame size,
-  regression-proof. Reuses the M0 `SXFB` protocol and the M1 host with zero host changes.
-- **M4 — X server to wasm (target pivoted to `Xvfb`).** 🟡 **in progress (frontier — never done by
-  anyone per the research).** Findings + concrete progress:
-  - **Target pivot:** modern Xorg **dropped `Xfbdev`** (kdrive now only ships Xephyr, which needs a
-    host X server). **`Xvfb` (the virtual-framebuffer X server, `hw/vfb`, `-Dxvfb=true`) is the
-    right target** — it renders into an in-memory framebuffer with no fbdev device and no input
-    hardware, matching our blit-to-host model directly. Update M4 to Xvfb.
-  - **Toolchain proven:** meson+ninja installed; wasi-sdk **meson cross file**
-    (`toolchain/wasi-sdk-cross.ini`) and the wasi-sdk **CMake** toolchain both work for X-stack C.
-  - **Five X-stack components cross-compiled/installed to wasm** in `third_party/wasm-prefix`:
-    `pixman` (`libpixman-1.a`), `freetype` (`libfreetype.a`), `xorgproto` (headers + all proto
-    `.pc`s), `xtrans` (source headers + `.pc`), `libXau` (`libXau.a`, `XauReadAuth`). The meson
-    cross file now declares `pkg-config` + a wasm-only `pkg_config_libdir`, so cross dependency
-    resolution works.
-  - **New constraint discovered:** C libs using **setjmp/longjmp** (freetype, likely the xserver)
-    need `-mllvm -wasm-enable-sjlj` at compile time + an EH-capable engine (V8 qualifies).
-  - **Seven components now on wasm:** + `util-macros` (autoconf macros) and `xcb-proto`
-    (codegen data) installed; autotools cross-compile env wired (CC/AR/RANLIB/CFLAGS with
-    `--host=wasm32-wasi`).
-  - **xserver configure runs** (past all compiler checks) and needs `x11` (libX11 → libxcb →
-    xcb-proto ✓ + libxdmcp), `xfont2`, libxkbfile/font-util, then the `os/` core.
-  - **BREAKTHROUGH — the socket wall is solved by the patched sysroot.** Vanilla wasi-libc lacks
-    `recvfrom`/`sendto`/etc., but the repo's **patched wasi-libc sysroot** (`registry/native/c/sysroot`,
-    built by `patch-wasi-libc.sh`) provides them, backed by secure-exec's `host_net` imports. Building
-    the X stack with `--sysroot=registry/native/c/sysroot` gives it working POSIX sockets in-sidecar.
-    The toolchain (meson cross file + autotools `--host=wasm32-wasi` env) now targets that sysroot,
-    plus a force-included `toolchain/wasi-compat.h` (no-op `flockfile`/etc.).
-  - **THE ENTIRE X CLIENT + FONT STACK NOW CROSS-COMPILED TO WASM (14 components):** pixman,
-    freetype, zlib, xorgproto, xtrans, libXau, util-macros, xcb-proto, libxdmcp, libxcb, **libX11**
-    (`XOpenDisplay`), libfontenc, libXfont2, libxkbfile. Small per-lib patches were needed and are the
-    pattern for the rest: disable xtrans TCP/local transports (`inet_addr`/`sys/wait.h`), patch
-    `ioctl(FIONREAD)`→`poll()` in libX11, no-op stdio locking. **libX11 done means M4b (FLTK/Tk/twm as
-    X clients) is now unblocked too.**
-  - **THE X SERVER (Xvfb) IS CONFIGURED AND COMPILING TO WASM.** 16 X-stack libs now on wasm (added
-    libxcvt, libXext, libsha1 [a tiny vendored SHA1], plus a meson `clang` wrapper that strips
-    ELF-only linker args wasm-ld rejects, and stub `sys/wait.h`/`net/if.h` + no-op
-    `flockfile`/`getpgrp`/`setpgid`/`umask`/`pthread_sigmask`/`uname` in
-    `toolchain/wasi-compat.{h,c}`, and `-D_WASI_EMULATED_PROCESS_CLOCKS` for getrusage). `meson setup`
-    succeeds ("Build targets: 30") and `ninja` compiles **~118/314 objects**, advancing as each
-    `os/`-layer POSIX gap is shimmed (patched `os/access.c` utsname guard; `utils.c` is the current
-    edge — `struct rlimit`/`RLIMIT_CORE` feature-macro + wasi's pointer `clockid_t`).
-  - **Remaining (finite, well-understood — but more than one session):** finish the `os/`-layer
-    compile shims, link the `Xvfb` wasm binary (will surface more host-function stubs), supply an XKB
-    keymap (or run `-noxkb`), then RUN Xvfb inside secure-exec listening on an AF_UNIX `/tmp/.X11-unix`
-    socket, wire its framebuffer out through the M1 host, and connect a client (M4b) + WM (M5).
-  - **🎉 `Xvfb` IS NOW A WASM BINARY.** The full X.Org Xvfb server **compiled and linked to
-    `wasm32-wasip1`** — `experiments/wasm-gui/Xvfb.wasm` (8.25 MB, valid `wasm32` module). 314/314
-    targets; all os/-layer POSIX gaps shimmed (utsname guard, `~0L`→pointer `clockid_t` cast,
-    `struct rlimit`/`RLIMIT_CORE`, `-D_GNU_SOURCE`); final link fixed by stripping `-pthread`/
-    `--start-group`/`-rpath`/`-ldl` in the clang wrapper (wasi is single-threaded; pthread stubs come
-    from libc). **This is the thing the research said nobody had ever done.** It imports only 9
-    standard WASI functions (args/fd/proc_exit) — a clean surface secure-exec provides.
-  - **`Xvfb` cross-compiled+linked to wasm and INSTANTIATES + EXECUTES in secure-exec** (verified:
-    valid 12 MB `wasm32` module; imports only standard WASI + secure-exec's `host_net`/`host_process`/
-    `host_user`; loads in the V8 sidecar and runs for seconds with no instantiation/trap error).
-    Getting it to instantiate required, in the runner: a no-op `sock_shutdown` + a full **`net_poll`**
-    in `host_net`; and at link: forcing `__main_argc_argv` (wasi crt only weak-refs main → GC'd) +
-    appending libfontenc/freetype/**libsetjmp** (freetype's setjmp needs `libsetjmp.a`).
-  - **Verified init progress (via stderr-streamed markers — the reliable probe):** Xvfb runs through
-    `ProcessCommandLine` → **full `OsInit`** → **`CreateWellKnownSockets` succeeds (it CREATES A
-    LISTENING AF_UNIX SOCKET — the X server is listening for clients in the sandbox)** → `InitOutput`
-    / **screen init succeeds at depth 24** → enters the screens loop → **traps in `CreateRootWindow`**.
-  - **Real fixes that got it this far (all needed):** run with `-nolock` (the X display lock dance
-    loops on wasi); `-listen local` (modern Xorg defaults AF_UNIX transports to NOLISTEN); disable
-    xtrans **abstract sockets** (host_net only does path sockets — exactly the research's call);
-    patch `trans_mkdir` to skip the root/sticky-bit ownership dance; **patch xtrans's
-    `fd >= sysconf(_SC_OPEN_MAX)` check** (host_net fds are intentionally `0x40000000+`, and the
-    server uses `poll()` not `FD_SET`); depth **24** not 32; runner gained `sock_shutdown` + `net_poll`.
-  - **Function-pointer-cast wall (SOLVED):** `CreateRootWindow`/`SetDefaultFontPath` trapped with wasm
-    `RuntimeError: null function or function signature mismatch` — the X server calls procs through
-    **cast function pointers**, and wasm's `call_indirect` enforces exact type signatures. Solved with
-    **`wasm-opt --fpcast-emu`** (binaryen's equivalent of Emscripten `EMULATE_FUNCTION_POINTER_CASTS`),
-    applied as a post-link pass in `scripts/link-xvfb.sh` + a manual `wasm-opt` step.
-  - **Reaching the dispatch loop (DONE):** past the function-pointer wall, the server hit XKB keymap
-    compilation (needs `xkbcomp` fork/exec, unavailable on wasi) — made non-fatal in `dix/devices.c`
-    and `Xext/xtest.c` (keyboard activation warns + continues). Xvfb now runs `ProcessCommandLine →
-    OsInit → CreateWellKnownSockets (listening AF_UNIX socket) → screen init (depth 24) → root window →
-    InitInput → **Dispatch main loop**`, blocking there serving, verified by `XMARK` stderr markers.
-  - **✅ Status: the never-before-done core (real X server → wasm) fully starts and serves in its
-    dispatch loop inside secure-exec.** "One X client on the native surface" (M4 goal) is proven by
-    M4b below.
-- **M4b — X client over AF_UNIX (DONE for raw-protocol client; toolkit next). ✅** A minimal raw-X11
-  client (`guest-xclient/xfill.c`, **no libX11** — pure X11 wire protocol over POSIX sockets) is
-  cross-compiled to wasm against the patched sysroot and run **as a second guest in the SAME VM** as
-  Xvfb. It connects to `/tmp/.X11-unix/X0`, completes the **full X11 connection-setup handshake**,
-  parses the screen reply, and draws an orange fill across the 640×480 root window
-  (`CreateGC` + `PolyFillRectangle`), then a `GetInputFocus` round-trip barrier. The host reads the
-  framebuffer back out (`-fbdir /data`, patched `pwrite`) → **99.8% of pixels are `0x00FF8800`**, the
-  exact color the client set (proof: `~/tmp/gui-progress/m4b-xfill.png`). Run it with
-  `wasm-gui-host --xdemo --server Xvfb.wasm --client xfill.wasm --fb-out frame.bin`.
-  - **Sidecar/runtime fixes this required (all in `crates/execution/src/node_import_cache.rs`):**
-    (1) `net_connect` now handles **AF_UNIX path** addresses (routes to the sidecar's path-based
-    `net.connect` → host-backed unix socket shared across guests in one VM), stripping trailing NUL
-    padding from `sizeof(sockaddr_un)`. (2) `net_accept` for unix sockets no longer calls the TCP-only
-    `address:port` formatter (which threw). (3) **`net_poll` listener readiness is now accurate** (a
-    buffered non-blocking accept) and **`net_accept` is non-blocking** (returns `EAGAIN`) — previously
-    the optimistic listener `POLLIN` + a blocking accept busy-loop starved connected clients.
-  - **X-server-side fixes (vendored copies):** `os/xserver_poll.c` `xserver_poll()` rewritten to call
-    real `poll()` (routed to host_net) instead of the `fd_set`/`select()` emulation, which silently
-    dropped our `0x40000000+` host_net fds (> `FD_SETSIZE`). `Xtranssock.c` `SocketRead/Write/Readv/
-    Writev` rewritten to use `recv()`/`send()` (the patched libc routes only those to host_net, not
-    `read`/`write`/`recvmsg`/`writev`).
-  - **Next:** swap the raw client for a **stock toolkit X client** (FLTK/Tk over the already-built
-    libX11) to land the "real standard toolkit" intent, and blit the framebuffer through the M1
-    winit/softbuffer native window live. 🟡
-- **M5 — Standard WM + multi-window desktop. ✅ DONE.** The standard X.Org window manager **`twm`**,
-  cross-compiled from source to `wasm32-wasip1`, manages and decorates a real **libX11** client window,
-  all running as wasm guests inside secure-exec. twm grabs `SubstructureRedirect`, receives the client's
-  `MapRequest`, reparents it into a decoration frame with a **title bar** (the client's `WM_NAME`), and
-  the client draws into it with real Xlib calls. Proof: `~/tmp/gui-progress/m5-twm-window.png`, test
-  `scripts/test-m5-twm.sh`. The **multi-client substrate** is also proven: three raw-X11 clients composite
-  on one Xvfb (`scripts/test-m5-multiclient.sh`, `~/tmp/gui-progress/m5-multiclient.png`).
-  - **Full toolkit/WM stack cross-compiled to wasm:** libICE, libSM, **libXt** (Intrinsics), libXmu, plus
-    a locale-enabled libX11 and the patched libxcb, then **twm** itself (`scripts/build-xlib.sh`,
-    `scripts/link-twm.sh`). A real libX11 client (`guest-xclient/xwin.c`) creates+maps+draws a top-level
-    window (`scripts/...`); `guest-xclient/xopen.c` is a minimal libX11 smoke client.
-  - **Key fixes that unblocked the toolkit stack:** the effective wasi **`POLLOUT` is `0x2`** (POLLWRNORM),
-    not `0x4` — `net_poll` was using `0x4` so libxcb's poll-for-reply never saw the socket writable and
-    `XOpenDisplay` hung; a host_net **`net_set_nonblock`** import + non-blocking `net_recv` (both libxcb's
-    poll helpers and the X server's multi-client dispatch require non-blocking sockets, and
-    `fcntl(O_NONBLOCK)` cannot reach host_net fds); `fcntl(F_SETFD)`-failure tolerance in libxcb/twm; a
-    `.twmrc` with `RandomPlacement` (twm's default placement is interactive); libXt's
-    `_XtWaitForSomething` `drop_lock` signature reconciliation; host-built `makestrs`; pregenerated
-    `gram.c`; newer `config.sub`.
-  - **Remaining polish (not blocking):** JWM as a richer Pi-class desktop, real fonts (Xft/core-font
-    files) for crisper title text, live winit blit of the framebuffer, and making concurrent libX11 init
-    robust (today the client connects after twm is idle to avoid flaky concurrent startup over the single
-    sync-RPC bridge). **Real, standard WMs only (no custom WM):** the original plan was twm then JWM —
-  with **`twm`** (X.Org tree; deps `libX11`/`libXt`/`libXmu`; no dlopen), then **`JWM`** as the
-  Raspberry-Pi-class desktop (single C binary with built-in panel/menu/systray, builds against just
-  `libX11`, no dlopen; `IceWM` fallback). Avoid `openbox`/`fluxbox` (libxml2/glib/pango/cairo or
-  C++/imlib2). **Build WM + first apps on X CORE FONTS (no Xft)** so clients need no
-  `freetype`/`fontconfig`/`mmap`; flip Xft on after M2. Multiple guest clients over AF_UNIX, the WM
-  as another guest, everything inside secure-exec, rendered by the M1 host. ⬜
-
-### CURRENT GOAL (post-M5): a full, well-known desktop environment — no half measures
-
-M1-M5 proved the stack (X server + WM + libX11, all wasm in secure-exec). The goal now is a **real,
-interactive desktop running a standard, well-known project**, in three sequenced milestones. "No half
-measures" is the bar: each milestone must be **genuinely interactive** (live window + real input, not a
-screenshot read-back), **robust** (no "connect after the WM is idle" hack — concurrent client startup
-must work), use **real fonts**, be **fully automated-tested**, and have a **manually runnable example**.
-
-- **M6 — Make what we have REAL.** 🟡 **in progress.** Done: a real stock app (X.Org **xclock**,
-  analog + digital, with libXaw/libXmu/libXt/libXrender cross-compiled), **real X core fonts** served
-  by the server (`-fp /fonts`; digital-clock text + twm title text render; host installs PCF fonts via
-  `--fonts-dir`), and a **robust multi-app desktop** (twm + xclock + a libX11 window, 3/3 identical
-  runs). Robustness came from (a) WM-ready-gated sequential launch in the host (session-manager style,
-  no in-client sleep) and (b) making clients **event-driven** (block in the X loop, draw on Expose) so
-  continuous redraw traffic stops flooding the sidecar's single sync-RPC thread. Proof:
-  `~/tmp/gui-progress/m6-xclock.png`, `m6-xclock-digital.png`, `m6-desktop.png`. **Remaining:** live
-  window + input (built path pending; needs a machine with a display to verify — this box is headless),
-  a terminal (xterm needs fork/exec/PTY → a kernel-PTY-spawn shim), Xft/fontconfig + libX11 locale
-  files for antialiased/i18n text. Original sub-tasks:
-  1. **Live rendering + input.** Stream the X server framebuffer to the M1 `winit`/`softbuffer` window
-     continuously (not a one-shot PNG), and inject host mouse/keyboard back through the client as X
-     input events (so you can actually click/type into the wasm desktop). Replace `xdemo`'s PNG
-     read-back with a live loop.
-  2. **Real fonts.** Cross-compile `fontconfig` (+ `expat`) and `libXft`/`libXrender`, install a base
-     set of font files (e.g. DejaVu/Liberation) into the VM, and verify crisp antialiased text. This is
-     a hard dependency for xterm and every real DE.
-  3. **Stock apps as content.** Cross-compile and run standard X apps (`xclock`, `xterm`, maybe `xcalc`)
-     as guests so the desktop has real, interactive programs.
-  4. **Robust concurrency.** Fix the flaky concurrent-libX11-init over the single sync-RPC bridge so
-     many clients can start simultaneously without the `usleep`/ordering hack. (Likely: per-client
-     sync-RPC fairness, or a smarter net_poll/recv path.)
-  Acceptance: a live window showing twm managing xterm + xclock, typing into xterm works, all started
-  concurrently, with an automated test + manual example.
-
-- **M7 — JWM: a complete lightweight desktop from one standard project.** ⬜ Cross-compile **JWM**
-  (Joe's Window Manager) to wasm — a single, well-known C project (Puppy Linux's default) providing a
-  built-in **panel/taskbar, clock, start menu, systray, and virtual-desktop pager**. Builds against the
-  `libX11` we already have (+ `libXft`/`libXpm` from M6). Run it as the desktop shell managing the M6
-  stock apps, launching apps from its menu, live + interactive. Acceptance: JWM panel + menu + taskbar
-  visible and usable in the live window, apps launch from the menu, automated test + manual example.
-
-- **M8 — A brand-name GTK desktop environment (LXDE or XFCE).** ⬜ The big one. Cross-compile the GTK
-  stack (`GLib`/`GObject`/`Pango`/`Cairo`/`GdkPixbuf`/`harfbuzz`/`fontconfig`/`freetype`) and resolve
-  the wasi blockers (`dlopen` for modules/themes — static-link or shim; `dbus` session bus; threads).
-  **Spike first:** get a single GTK3 app (`gtk3-demo`) running on our X server to prove the stack before
-  committing. Then build up to **LXDE** (lighter, GTK2/openbox/lxpanel/pcmanfm) or **XFCE**
-  (xfwm4/xfce4-panel/thunar). Acceptance: the named DE's shell (panel + menu + a file manager or
-  settings app) running live + interactive, automated test + manual example.
-
-Sequencing is strict: M6 → M7 → M8. Don't start the next until the previous fully meets its acceptance
-bar (interactive, robust, tested, real fonts, no hacks).
-
-Threads (`wasm32-wasip1-threads` + `wasi_thread_spawn`) are added only where a milestone needs them.
-GL passthrough is out of scope; software rasterization to the framebuffer remains the single data path.
-
-## 5. M0 detailed design
-
-Directory `experiments/wasm-gui/` — **standalone Cargo workspace** (its own `[workspace]` to halt
-cargo's upward walk into the repo root workspace; root `Cargo.toml` has an explicit no-glob
-`members` list, so without this the experiment crates fail to build):
-
-```
-experiments/wasm-gui/
-  Cargo.toml               ← [workspace] members = ["guest","host"], resolver="2"
-  SPEC.md  README.md
-  guest/  Cargo.toml  src/main.rs   ← software renderer + frame protocol (target wasm32-wasip1)
-  host/   Cargo.toml  src/main.rs   ← winit+softbuffer window; spawns `wasmer run guest --loop`
-                                       (feature `window`, OFF by default)
-  host-node/ run.mjs               ← node:wasi runner → raw framebuffer file
-  tests/  run.sh  golden.json      ← build + run both engines + assert; writes RESULTS.txt
-  scripts/ make-proof.sh           ← ffmpeg raw→PNG + copy artifacts to ~/tmp/gui-progress/assets
-```
-
-### Frame protocol v0 (pinned)
-- Header: `magic = "SXFB"` (4 bytes) · `width: u32 LE` · `height: u32 LE`. Little-endian because
-  it's WASM-native (no swap in guest).
-- Payload: `width*height*4` bytes, **row-major, `[R,G,B,A]` byte order**, no stride/padding.
-  Defined as a byte stream, so there is zero endianness ambiguity on pixels.
-- Capture mode (`guest --out <path>`): write `header || payload` to the preopened file, exit.
-- Window mode (`guest --loop`): read newline-delimited JSON events from stdin
-  (`{"t":"pointer","x":..,"y":..}` / `{"t":"key","code":..}` / `{"t":"quit"}`), write
-  `header || payload` frames to stdout. Used only by the Rust window host (wasmer handles stdio).
-- **softbuffer note:** the window present step must repack `[R,G,B,A]` bytes → softbuffer's
-  `0x00RRGGBB` native-endian u32. (Only the window path; not the compared bytes.)
-
-### Guest determinism contract (REQUIRED — the raw-byte equality depends on it)
-- No clock/time reads affecting pixels: the panel "clock" is a **hardcoded string** ("12:34").
-- No RNG, or fixed-seed only; never `random_get`.
-- Integer/fixed-point layout math; **no host-imported math**; avoid NaN-producing ops (plain
-  WASM FP is deterministic across V8/wasmer, but keep transcendentals in-guest if used at all).
-- No argv/env/cwd/locale/`$TZ`/font-file reads influencing pixels.
-- Capture mode renders a **single fixed frame** with a **hardcoded pointer position**, so the
-  cursor is deterministic.
-- Guest writes **nothing** to stdout except frames; all diagnostics go to **stderr**. (A stray
-  `println!` corrupts the binary stream.)
-
-### node:wasi host (`host-node/run.mjs`)
-- `new WASI({ version: 'preview1', returnOnExit: true })`, command (`_start`) model, run once.
-- I/O via **preopened directory + file**, not stdio pipes: preopen a temp dir as `/out`, pass
-  argv `["guest","--out","/out/frame.bin"]`, then read the host temp file back as a raw `Buffer`.
-  (Preopened files are the robust node:wasi channel; stdio-as-pipe is the fragile path.)
-- Expect/suppress the experimental-WASI stderr warning so the harness doesn't misparse it.
-
-## 6. Testing strategy (fully automated, headless, no network/display)
-
-`tests/run.sh` — non-zero exit on any failure:
-1. `cargo build --target wasm32-wasip1 --release -p wasm-gui-guest` → `guest.wasm` exists.
-2. Engine A: `node host-node/run.mjs … → /tmp/frame_node.bin`.
-3. Engine B: `wasmer run guest.wasm --dir <tmp> -- --out /out/frame.bin → /tmp/frame_wasmer.bin`.
-4. **Validate each header** independently: `magic=="SXFB"`, `w`/`h` == expected constants — fail
-   with a clear message *before* comparing payloads (catches truncation/short reads).
-5. **Cross-engine equality:** `sha256(frame_node.bin) == sha256(frame_wasmer.bin)` over the full
-   `header||payload`. This is the honest engine-independence test (no PNG encoder in the loop).
-6. **Golden-pixel checks** (`golden.json`): sample known coords on the raw payload (wallpaper,
-   panel, title bar, a glyph pixel, cursor tip) and assert exact RGBA — deterministic regression
-   guard.
-7. Headless winit guard: run the capture path under `env -u DISPLAY -u WAYLAND_DISPLAY` and assert
-   it never initializes a display (it can't pull in winit — the `window` feature is off).
-8. `ffmpeg` encodes one `.bin` → `frame.png` (human proof only; never asserted).
-9. Emit `tests/RESULTS.txt` consumed by the progress.html generator.
-
-## 7. Manual example (run on your own machine, with a display)
-
-`README.md` documents:
-```
-cd experiments/wasm-gui
-./tests/run.sh                              # headless: builds + verifies + writes frame.png
-cargo build -p wasm-gui-guest --target wasm32-wasip1 --release
-cargo run -p wasm-gui-host --features window -- \
-    --guest target/wasm32-wasip1/release/guest.wasm
-```
-Opens a real OS window showing the rendered desktop frame; mouse moves the cursor, Esc quits.
-(This headless dev box can't open it; the PNG in progress.html is the byte-identical frame.)
-
-## 8. Risks tracked
-
-- R1 crate build time over cargo network. **Mitigated:** automated path uses installed `wasmer`
-  CLI + `node:wasi` (no Rust wasm-engine crate). Only the manual window host builds
-  winit/softbuffer, and it's not on the automated path.
-- R2 node:wasi is experimental + ≠ the secure-exec bridge. Pin `version:'preview1'`,
-  `returnOnExit:true`, node 24; treat as a V8-family proxy, real parity at M5.
-- R3 Scope creep — M0 is a hand-rolled renderer, NOT a real toolkit (that's M2+). Keep it small.
-- R4 "Looks like a desktop" is cosmetic at M0; fidelity comes from real toolkits at M2+.
-- R5 Determinism — without §5's contract the raw-byte compare isn't guaranteed. Enforce it.
-
-## Changelog
-- **v2** (post-review): added nested-Cargo-workspace fix (build-breaking otherwise); switched
-  cross-engine test from PNG-byte to raw-RGBA SHA-256 equality; pinned protocol endianness/pixel
-  order; switched node:wasi I/O to preopened files + `returnOnExit`; added guest determinism
-  contract; feature-gated winit; swapped wasmtime crate → installed `wasmer` CLI + `node:wasi`;
-  added trust-model constraint (X/parsing stays in executor, host shuttle does no parsing); noted
-  node:wasi ≠ product bridge and M1-blocks-M2 dependency.
diff --git a/experiments/wasm-gui/guest-nuklear/guest_nuklear.c b/experiments/wasm-gui/guest-nuklear/guest_nuklear.c
deleted file mode 100644
index 02cdf8c85..000000000
--- a/experiments/wasm-gui/guest-nuklear/guest_nuklear.c
+++ /dev/null
@@ -1,153 +0,0 @@
-/* M3 guest: a REAL third-party GUI toolkit (Nuklear) software-rendering real widgets into an RGBA
- * framebuffer, cross-compiled to wasm32-wasip1 and run INSIDE secure-exec via the M1 host.
- *
- * Nuklear is a standard, widely-used immediate-mode GUI library. Its `nuklear_rawfb` backend
- * rasterizes the UI (windows, buttons, checkboxes, sliders, text via the built-in font atlas) into
- * a plain pixel buffer — no X11, no GL, no dlopen, no threads, no font files. We emit the same
- * frame protocol v0 the M0/M1 host already speaks: b"SXFB" | u32 LE w | u32 LE h | RGBA.
- *
- * Determinism (capture mode): one frame, fixed pointer, no clock/RNG — so the output is stable.
- */
-#define NK_INCLUDE_FIXED_TYPES
-#define NK_INCLUDE_STANDARD_VARARGS
-#define NK_INCLUDE_DEFAULT_ALLOCATOR
-#define NK_INCLUDE_FONT_BAKING
-#define NK_INCLUDE_DEFAULT_FONT
-/* rawfb's font-query callback fills struct nk_user_font_glyph, whose full definition is gated
- * behind this define (even though rawfb rasterizes from commands, not a vertex buffer). */
-#define NK_INCLUDE_VERTEX_BUFFER_OUTPUT
-#define NK_IMPLEMENTATION
-#define NK_RAWFB_IMPLEMENTATION
-#include "nuklear.h"
-#include "nuklear_rawfb.h"
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-
-#define W 640u
-#define H 480u
-
-static void write_frame(const char *path, const unsigned char *fb) {
-    FILE *f = path ? fopen(path, "wb") : stdout;
-    if (!f) { perror("open out"); exit(1); }
-    unsigned char hdr[12];
-    memcpy(hdr, "SXFB", 4);
-    unsigned int w = W, h = H;
-    memcpy(hdr + 4, &w, 4); /* wasm is little-endian -> LE u32, matches the protocol */
-    memcpy(hdr + 8, &h, 4);
-    fwrite(hdr, 1, 12, f);
-    fwrite(fb, 1, W * H * 4, f);
-    if (f != stdout) fclose(f);
-}
-
-/* Build the UI for one frame. Real Nuklear widgets, not hand-rolled drawing. */
-static int g_check = 1;
-static float g_slider = 0.6f;
-static nk_size g_prog = 64;
-static int g_option = 1;
-
-static void build_ui(struct nk_context *ctx) {
-    if (nk_begin(ctx, "secure-exec - Nuklear (wasm, in the sidecar)",
-                 nk_rect(48, 54, 380, 300),
-                 NK_WINDOW_BORDER | NK_WINDOW_TITLE | NK_WINDOW_MOVABLE)) {
-        nk_layout_row_dynamic(ctx, 22, 1);
-        nk_label(ctx, "Real toolkit widgets, software-rendered:", NK_TEXT_LEFT);
-
-        nk_layout_row_dynamic(ctx, 30, 2);
-        nk_button_label(ctx, "Build");
-        nk_button_label(ctx, "Run");
-
-        nk_layout_row_dynamic(ctx, 26, 1);
-        nk_checkbox_label(ctx, "Enable sandbox", &g_check);
-
-        nk_layout_row_dynamic(ctx, 22, 2);
-        if (nk_option_label(ctx, "wasm32", g_option == 1)) g_option = 1;
-        if (nk_option_label(ctx, "native", g_option == 0)) g_option = 0;
-
-        nk_layout_row_dynamic(ctx, 26, 1);
-        nk_slider_float(ctx, 0.0f, &g_slider, 1.0f, 0.01f);
-
-        nk_layout_row_dynamic(ctx, 24, 1);
-        nk_progress(ctx, &g_prog, 100, NK_FIXED);
-
-        nk_layout_row_dynamic(ctx, 22, 1);
-        nk_label(ctx, "rendered by Nuklear, inside secure-exec", NK_TEXT_LEFT);
-    }
-    nk_end(ctx);
-
-    /* A second small window, like a desktop with multiple panels. */
-    if (nk_begin(ctx, "Info", nk_rect(446, 150, 150, 150),
-                 NK_WINDOW_BORDER | NK_WINDOW_TITLE | NK_WINDOW_MOVABLE)) {
-        nk_layout_row_dynamic(ctx, 20, 1);
-        nk_label(ctx, "M3: real toolkit", NK_TEXT_LEFT);
-        nk_label(ctx, "no X, no GL,", NK_TEXT_LEFT);
-        nk_label(ctx, "no dlopen.", NK_TEXT_LEFT);
-    }
-    nk_end(ctx);
-}
-
-int main(int argc, char **argv) {
-    const char *out = NULL;
-    int loop = 0;
-    for (int i = 1; i < argc; i++) {
-        if (!strcmp(argv[i], "--out") && i + 1 < argc) out = argv[++i];
-        else if (!strcmp(argv[i], "--loop")) loop = 1;
-    }
-
-    unsigned char *fb = calloc(W * H, 4);
-    unsigned char *tex = malloc(1024 * 1024); /* font-atlas scratch (alpha8) */
-    if (!fb || !tex) { fprintf(stderr, "oom\n"); return 1; }
-
-    /* Pixel layout: little-endian uint per pixel => bytes [R,G,B,A]. */
-    struct rawfb_pl pl;
-    pl.bytesPerPixel = 4;
-    pl.rshift = 0; pl.gshift = 8; pl.bshift = 16; pl.ashift = 24;
-    pl.rloss = 0; pl.gloss = 0; pl.bloss = 0; pl.aloss = 0;
-
-    struct rawfb_context *rawfb = nk_rawfb_init(fb, tex, W, H, W * 4, pl);
-    if (!rawfb) { fprintf(stderr, "rawfb init failed\n"); return 1; }
-
-    struct nk_color clear = nk_rgb(28, 64, 96); /* desktop wallpaper */
-
-    if (!loop) {
-        /* Capture mode: one deterministic frame with a fixed pointer. */
-        nk_input_begin(&rawfb->ctx);
-        nk_input_motion(&rawfb->ctx, 300, 235);
-        nk_input_end(&rawfb->ctx);
-        build_ui(&rawfb->ctx);
-        nk_rawfb_render(rawfb, clear, 1);
-        write_frame(out, fb);
-        nk_rawfb_shutdown(rawfb);
-        free(fb); free(tex);
-        return 0;
-    }
-
-    /* Window mode: read input tokens from stdin, render frames to stdout. */
-    int px = W / 2, py = H / 2, down = 0;
-    char line[128];
-    /* initial frame */
-    nk_input_begin(&rawfb->ctx);
-    nk_input_end(&rawfb->ctx);
-    build_ui(&rawfb->ctx);
-    nk_rawfb_render(rawfb, clear, 1);
-    write_frame(NULL, fb);
-    fflush(stdout);
-    while (fgets(line, sizeof(line), stdin)) {
-        if (line[0] == 'q') break;
-        if (line[0] == 'p') sscanf(line + 1, "%d %d", &px, &py);
-        if (line[0] == 'd') down = 1;
-        if (line[0] == 'u') down = 0;
-        nk_input_begin(&rawfb->ctx);
-        nk_input_motion(&rawfb->ctx, px, py);
-        nk_input_button(&rawfb->ctx, NK_BUTTON_LEFT, px, py, down);
-        nk_input_end(&rawfb->ctx);
-        build_ui(&rawfb->ctx);
-        nk_rawfb_render(rawfb, clear, 1);
-        write_frame(NULL, fb);
-        fflush(stdout);
-    }
-    nk_rawfb_shutdown(rawfb);
-    free(fb); free(tex);
-    return 0;
-}
diff --git a/experiments/wasm-gui/guest-nuklear/guest_nuklear.wasm b/experiments/wasm-gui/guest-nuklear/guest_nuklear.wasm
deleted file mode 100755
index b26eab147..000000000
Binary files a/experiments/wasm-gui/guest-nuklear/guest_nuklear.wasm and /dev/null differ
diff --git a/experiments/wasm-gui/guest-xclient/xfill.c b/experiments/wasm-gui/guest-xclient/xfill.c
deleted file mode 100644
index cbd04bd65..000000000
--- a/experiments/wasm-gui/guest-xclient/xfill.c
+++ /dev/null
@@ -1,144 +0,0 @@
-/*
- * Minimal raw X11 client (no libX11): connects to the secure-exec wasm Xvfb over the
- * AF_UNIX socket /tmp/.X11-unix/X0, performs the X11 connection-setup handshake, then
- * fills the root window with a solid color using core protocol requests (CreateGC +
- * PolyFillRectangle). This proves an X client can reach our wasm X server over the
- * shared kernel socket table and drive the framebuffer. Stages are reported on stderr
- * with "CMARK:" markers so the host can verify progress.
- */
-#include <stdint.h>
-#include <string.h>
-#include <unistd.h>
-#include <sys/socket.h>
-#include <sys/un.h>
-#include <errno.h>
-
-static void mark(const char *m) { write(2, m, strlen(m)); }
-
-/* The patched wasi-libc routes send()/recv() (not write()/read()) to host_net, so all
- * socket I/O on the host_net fd must use the socket calls. */
-static int read_full(int fd, void *buf, size_t n) {
-    uint8_t *p = (uint8_t *)buf;
-    size_t got = 0;
-    while (got < n) {
-        ssize_t r = recv(fd, p + got, n - got, 0);
-        if (r > 0) { got += (size_t)r; continue; }
-        if (r < 0 && (errno == EINTR || errno == EAGAIN)) continue;
-        return -1;
-    }
-    return 0;
-}
-
-static int write_full(int fd, const void *buf, size_t n) {
-    const uint8_t *p = (const uint8_t *)buf;
-    size_t put = 0;
-    while (put < n) {
-        ssize_t w = send(fd, p + put, n - put, 0);
-        if (w > 0) { put += (size_t)w; continue; }
-        if (w < 0 && (errno == EINTR || errno == EAGAIN)) continue;
-        return -1;
-    }
-    return 0;
-}
-
-static int arg_int(int argc, char **argv, int idx, int dflt) {
-    if (idx >= argc) return dflt;
-    int v = 0, sign = 1; const char *s = argv[idx];
-    if (*s == '-') { sign = -1; s++; }
-    int any = 0;
-    for (; *s >= '0' && *s <= '9'; s++) { v = v*10 + (*s - '0'); any = 1; }
-    return any ? sign*v : dflt;
-}
-
-int main(int argc, char **argv) {
-    mark("CMARK:start\n");
-
-    /* Optional argv: x y w h color(decimal). Defaults to a full-screen orange fill. */
-    int want_x = arg_int(argc, argv, 1, 0);
-    int want_y = arg_int(argc, argv, 2, 0);
-    int want_w = arg_int(argc, argv, 3, -1);   /* -1 => full width */
-    int want_h = arg_int(argc, argv, 4, -1);   /* -1 => full height */
-    unsigned want_color = (unsigned) arg_int(argc, argv, 5, (int) 0x00FF8800u);
-
-    int fd = socket(AF_UNIX, SOCK_STREAM, 0);
-    if (fd < 0) { mark("CMARK:socket_fail\n"); return 1; }
-
-    struct sockaddr_un addr;
-    memset(&addr, 0, sizeof(addr));
-    addr.sun_family = AF_UNIX;
-    strcpy(addr.sun_path, "/tmp/.X11-unix/X0");
-    if (connect(fd, (struct sockaddr *)&addr, sizeof(addr)) != 0) {
-        mark("CMARK:connect_fail\n");
-        return 1;
-    }
-    mark("CMARK:connected\n");
-
-    /* Connection setup request: little-endian, protocol 11.0, no auth. */
-    uint8_t setup[12] = {0};
-    setup[0] = 0x6c;          /* 'l' little-endian */
-    setup[2] = 11; setup[3] = 0;  /* major 11 */
-    setup[4] = 0;  setup[5] = 0;  /* minor 0 */
-    /* auth name/data lengths = 0 */
-    if (write_full(fd, setup, sizeof(setup)) != 0) { mark("CMARK:setup_write_fail\n"); return 1; }
-    mark("CMARK:setup_sent\n");
-
-    /* Setup reply header (8 bytes). */
-    uint8_t hdr[8];
-    if (read_full(fd, hdr, 8) != 0) { mark("CMARK:reply_read_fail\n"); return 1; }
-    if (hdr[0] != 1) { mark("CMARK:setup_refused\n"); return 1; }
-    mark("CMARK:setup_accepted\n");
-
-    uint16_t add_len_words = (uint16_t)(hdr[6] | (hdr[7] << 8));
-    size_t add_len = (size_t)add_len_words * 4;
-    uint8_t *body = (uint8_t *)__builtin_alloca(add_len);
-    if (read_full(fd, body, add_len) != 0) { mark("CMARK:body_read_fail\n"); return 1; }
-
-    /* Parse the fixed part of the setup reply additional data. */
-    uint32_t id_base = body[4] | (body[5]<<8) | (body[6]<<16) | ((uint32_t)body[7]<<24);
-    uint16_t vendor_len = body[16] | (body[17]<<8);
-    uint8_t num_formats = body[21];
-
-    /* Skip: 32 bytes fixed + vendor (padded to 4) + 8*num_formats pixmap formats. */
-    size_t off = 32 + ((vendor_len + 3) & ~3u) + 8 * (size_t)num_formats;
-    /* First SCREEN: root window id at offset 0, root visual at offset 32. */
-    uint32_t root = body[off+0] | (body[off+1]<<8) | (body[off+2]<<16) | ((uint32_t)body[off+3]<<24);
-    uint16_t width  = body[off+20] | (body[off+21]<<8);
-    uint16_t height = body[off+22] | (body[off+23]<<8);
-    mark("CMARK:parsed_screen\n");
-
-    uint32_t gc = id_base | 1;
-
-    /* CreateGC (opcode 55): set GCForeground to a bright color. */
-    uint8_t cg[20];
-    cg[0]=55; cg[1]=0; cg[2]=5; cg[3]=0;          /* opcode, pad, length=5 words */
-    memcpy(cg+4, &gc, 4);
-    memcpy(cg+8, &root, 4);
-    uint32_t mask = 0x00000004;                    /* GCForeground */
-    memcpy(cg+12, &mask, 4);
-    uint32_t fg = want_color;
-    memcpy(cg+16, &fg, 4);
-    if (write_full(fd, cg, sizeof(cg)) != 0) { mark("CMARK:creategc_fail\n"); return 1; }
-
-    /* PolyFillRectangle (opcode 70): one rect (argv-positioned, or whole root window). */
-    uint8_t pf[20];
-    pf[0]=70; pf[1]=0; pf[2]=5; pf[3]=0;            /* opcode, pad, length=5 words (3 + 2*1) */
-    memcpy(pf+4, &root, 4);
-    memcpy(pf+8, &gc, 4);
-    uint16_t x = (uint16_t) want_x, y = (uint16_t) want_y;
-    uint16_t rw = (want_w < 0) ? width  : (uint16_t) want_w;
-    uint16_t rh = (want_h < 0) ? height : (uint16_t) want_h;
-    memcpy(pf+12, &x, 2); memcpy(pf+14, &y, 2);
-    memcpy(pf+16, &rw, 2); memcpy(pf+18, &rh, 2);
-    if (write_full(fd, pf, sizeof(pf)) != 0) { mark("CMARK:fill_fail\n"); return 1; }
-    mark("CMARK:filled\n");
-
-    /* GetInputFocus (opcode 43) as a round-trip barrier: forces the server to process
-     * our queued requests and reply, guaranteeing the fill reached the framebuffer. */
-    uint8_t gif[4] = {43, 0, 1, 0};
-    if (write_full(fd, gif, sizeof(gif)) != 0) { mark("CMARK:sync_write_fail\n"); return 1; }
-    uint8_t rep[32];
-    if (read_full(fd, rep, 32) != 0) { mark("CMARK:sync_read_fail\n"); return 1; }
-    mark("CMARK:synced\n");
-    mark("CMARK:done\n");
-    return 0;
-}
diff --git a/experiments/wasm-gui/guest-xclient/xfill.wasm b/experiments/wasm-gui/guest-xclient/xfill.wasm
deleted file mode 100755
index 0520d2a05..000000000
Binary files a/experiments/wasm-gui/guest-xclient/xfill.wasm and /dev/null differ
diff --git a/experiments/wasm-gui/guest-xclient/xopen-fp.wasm b/experiments/wasm-gui/guest-xclient/xopen-fp.wasm
deleted file mode 100644
index 12fd61d4d..000000000
Binary files a/experiments/wasm-gui/guest-xclient/xopen-fp.wasm and /dev/null differ
diff --git a/experiments/wasm-gui/guest-xclient/xopen.c b/experiments/wasm-gui/guest-xclient/xopen.c
deleted file mode 100644
index d289173d8..000000000
--- a/experiments/wasm-gui/guest-xclient/xopen.c
+++ /dev/null
@@ -1,32 +0,0 @@
-/* Minimal libX11 client: open the display, report the screen geometry, draw a filled rect on the
- * root window via real Xlib calls, sync, and close. Isolates the libX11 + libxcb transport. */
-#include <X11/Xlib.h>
-#include <stdio.h>
-#include <unistd.h>
-
-static void mark(const char *m) { write(2, m, __builtin_strlen(m)); }
-
-int main(void) {
-    mark("XO:start\n");
-    Display *dpy = XOpenDisplay(":0");
-    if (!dpy) { mark("XO:open_failed\n"); return 1; }
-    mark("XO:opened\n");
-
-    int scr = DefaultScreen(dpy);
-    Window root = RootWindow(dpy, scr);
-    int w = DisplayWidth(dpy, scr), h = DisplayHeight(dpy, scr);
-    char buf[64];
-    int n = 0; const char *p = "XO:size="; while (*p) buf[n++] = *p++;
-    int v = w; char t[8]; int ti = 0; if(!v)t[ti++]='0'; while(v){t[ti++]='0'+v%10;v/=10;} while(ti)buf[n++]=t[--ti];
-    buf[n++]='x'; v=h; ti=0; if(!v)t[ti++]='0'; while(v){t[ti++]='0'+v%10;v/=10;} while(ti)buf[n++]=t[--ti]; buf[n++]='\n';
-    write(2, buf, n);
-
-    GC gc = XCreateGC(dpy, root, 0, NULL);
-    XSetForeground(dpy, gc, 0x00CC44u);   /* green-ish */
-    XFillRectangle(dpy, root, gc, 0, 0, w, h);
-    XSync(dpy, False);
-    mark("XO:drawn\n");
-    XCloseDisplay(dpy);
-    mark("XO:done\n");
-    return 0;
-}
diff --git a/experiments/wasm-gui/guest-xclient/xopen.wasm b/experiments/wasm-gui/guest-xclient/xopen.wasm
deleted file mode 100755
index 12fd61d4d..000000000
Binary files a/experiments/wasm-gui/guest-xclient/xopen.wasm and /dev/null differ
diff --git a/experiments/wasm-gui/guest-xclient/xwin-fp.wasm b/experiments/wasm-gui/guest-xclient/xwin-fp.wasm
deleted file mode 100644
index ebe952364..000000000
Binary files a/experiments/wasm-gui/guest-xclient/xwin-fp.wasm and /dev/null differ
diff --git a/experiments/wasm-gui/guest-xclient/xwin.c b/experiments/wasm-gui/guest-xclient/xwin.c
deleted file mode 100644
index a59d1cf73..000000000
--- a/experiments/wasm-gui/guest-xclient/xwin.c
+++ /dev/null
@@ -1,57 +0,0 @@
-/* A real libX11 client that creates a top-level window, names it (so a window manager draws a
- * title bar), maps it, and draws content. Run alongside twm to prove the WM decorates a managed
- * client window. Stays alive in an event loop so the framebuffer can be captured. */
-#include <X11/Xlib.h>
-#include <X11/Xutil.h>
-#include <unistd.h>
-#include <string.h>
-
-static void mark(const char *m) { write(2, m, strlen(m)); }
-
-int main(int argc, char **argv) {
-    mark("XW:start\n");
-    /* The host launches clients in sequence (WM first), so we just connect normally. */
-    Display *dpy = XOpenDisplay(":0");
-    if (!dpy) { mark("XW:open_failed\n"); return 1; }
-    mark("XW:opened\n");
-
-    int scr = DefaultScreen(dpy);
-    Window root = RootWindow(dpy, scr);
-    unsigned long bg = 0x3060C0;   /* blue-ish window body */
-    unsigned long fg = 0xF0F0F0;
-
-    Window win = XCreateSimpleWindow(dpy, root, 40, 60, 250, 160, 1,
-                                     BlackPixel(dpy, scr), bg);
-    XStoreName(dpy, win, "secure-exec wasm window");
-    /* Tell the WM to honor our position (twm UsePPosition) so windows don't overlap. */
-    {
-        XSizeHints hints;
-        hints.flags = PPosition | PSize;
-        hints.x = 40; hints.y = 60; hints.width = 250; hints.height = 160;
-        XSetWMNormalHints(dpy, win, &hints);
-    }
-    XSelectInput(dpy, win, ExposureMask);
-    XMapWindow(dpy, win);
-    XFlush(dpy);
-    mark("XW:mapped\n");
-
-    GC gc = XCreateGC(dpy, win, 0, NULL);
-
-    /* Proper event-driven X loop: block in XNextEvent and (re)draw only on Expose. A real X client
-     * is quiet when idle — busy-redrawing would flood the shared sync-RPC bridge and starve the
-     * window manager's request handling. We never close the display, so the window persists. */
-    int drawn = 0;
-    for (;;) {
-        XEvent ev;
-        XNextEvent(dpy, &ev);   /* blocks until an event (e.g. Expose from the WM mapping us) */
-        if (ev.type == Expose) {
-            XSetForeground(dpy, gc, fg);
-            XFillRectangle(dpy, win, gc, 15, 15, 90, 45);
-            XSetForeground(dpy, gc, 0x20A020);
-            XFillRectangle(dpy, win, gc, 120, 80, 90, 50);
-            XFlush(dpy);
-            if (!drawn) { mark("XW:drawn\n"); drawn = 1; }
-        }
-    }
-    return 0;
-}
diff --git a/experiments/wasm-gui/guest-xclient/xwin.wasm b/experiments/wasm-gui/guest-xclient/xwin.wasm
deleted file mode 100755
index ebe952364..000000000
Binary files a/experiments/wasm-gui/guest-xclient/xwin.wasm and /dev/null differ
diff --git a/experiments/wasm-gui/host/Cargo.toml b/experiments/wasm-gui/host/Cargo.toml
deleted file mode 100644
index eb7a63910..000000000
--- a/experiments/wasm-gui/host/Cargo.toml
+++ /dev/null
@@ -1,29 +0,0 @@
-[package]
-name = "wasm-gui-host"
-version = "0.0.0"
-edition = "2021"
-publish = false
-
-[[bin]]
-name = "wasm-gui-host"
-path = "src/main.rs"
-
-[features]
-# Default build has NO display deps, so it runs on a headless box (the --capture path).
-# The interactive window demo is behind `--features window`.
-default = []
-window = ["dep:winit", "dep:softbuffer"]
-
-[dependencies]
-# THE standard secure-exec Rust client — drives the guest through the real V8 sidecar.
-# No wasmer / node:wasi / Command::new in the execution path (SPEC §1a.2).
-# Workspace dep (host is a member of the repo root workspace) so it shares Cargo.lock with the
-# sidecar and resolves identical transitive versions.
-secure-exec-client = { workspace = true }
-# For the bridge-contract version the Authenticate handshake must carry.
-secure-exec-bridge = { workspace = true }
-tokio = { version = "1", features = ["rt-multi-thread", "macros", "sync", "io-util", "time"] }
-base64 = "0.22"
-
-winit = { version = "0.30", optional = true }
-softbuffer = { version = "0.4", optional = true }
diff --git a/experiments/wasm-gui/host/src/main.rs b/experiments/wasm-gui/host/src/main.rs
deleted file mode 100644
index f29492141..000000000
--- a/experiments/wasm-gui/host/src/main.rs
+++ /dev/null
@@ -1,918 +0,0 @@
-//! Native host for the wasm GUI guest, built on the STANDARD secure-exec Rust client
-//! (`crates/secure-exec-client`). It runs `guest.wasm` INSIDE the real secure-exec V8 sidecar and
-//! renders the frames it produces. Per SPEC §1a.2 this is the product path: no wasmer, no
-//! node:wasi, no TypeScript client, no `Command::new` in the execution/render path — the only
-//! process spawn is the sidecar itself, done by the Rust client's transport.
-//!
-//! Modes:
-//!   wasm-gui-host --capture <out.bin> --guest <guest.wasm> [--sidecar <bin>]
-//!       Run the guest once through secure-exec, read back the framebuffer it wrote, save raw bytes.
-//!       Headless; this is the automated-proof path.
-//!   wasm-gui-host --window --guest <guest.wasm> [--sidecar <bin>]   (needs `--features window`)
-//!       Stream frames from the guest (run in --loop mode in the sidecar) into a native winit
-//!       window; forward input back through the client. Manual demo.
-
-use std::collections::HashMap;
-use std::sync::Arc;
-
-use base64::prelude::*;
-use secure_exec_client::transport::SidecarProcess;
-use secure_exec_client::wire;
-
-/// PREAD chunk size: stays well under the 1 MiB default max frame even after base64 (4/3) blowup.
-const READ_CHUNK: u64 = 256 * 1024;
-
-/// Trusted VM config: default bundled-base filesystem + allow-all permission policy (fs reads are
-/// denied by default, which would block loading the wasm from /tmp). `"allow"` maps to the untagged
-/// `FsPermissionScope::Mode(Allow)` etc.
-const VM_CONFIG_JSON: &str = r#"{"permissions":{"fs":"allow","network":"allow","childProcess":"allow","process":"allow","env":"allow","binding":"allow"}}"#;
-
-type Result<T> = std::result::Result<T, String>;
-
-/// A connected secure-exec session bound to one VM, over the standard Rust client transport.
-struct Session {
-    t: Arc<SidecarProcess>,
-    connection_id: String,
-    session_id: String,
-    vm_id: String,
-}
-
-impl Session {
-    async fn connect(sidecar_bin: Option<String>) -> Result<Self> {
-        let t = SidecarProcess::spawn(sidecar_bin)
-            .await
-            .map_err(|e| format!("spawn sidecar: {e}"))?;
-
-        // Authenticate. The sidecar ALLOCATES the real connection id and returns it; the id we send
-        // in the ownership scope here is a bootstrap placeholder it ignores. The bridge_version must
-        // match the bridge contract the sidecar was built against.
-        let auth = request(
-            &t,
-            conn_scope("bootstrap"),
-            wire::RequestPayload::AuthenticateRequest(wire::AuthenticateRequest {
-                client_name: "wasm-gui-host".into(),
-                auth_token: "secure-exec-core-client-token".into(),
-                protocol_version: wire::PROTOCOL_VERSION,
-                bridge_version: secure_exec_bridge::bridge_contract().version,
-            }),
-        )
-        .await?;
-        let connection_id = match auth {
-            wire::ResponsePayload::AuthenticatedResponse(a) => {
-                t.set_max_frame_bytes(a.max_frame_bytes as usize);
-                a.connection_id
-            }
-            other => return Err(format!("expected Authenticated, got {other:?}")),
-        };
-
-        // Open a session (using the sidecar-allocated connection id).
-        let sess = request(
-            &t,
-            conn_scope(&connection_id),
-            wire::RequestPayload::OpenSessionRequest(wire::OpenSessionRequest {
-                placement: wire::SidecarPlacement::SidecarPlacementShared(
-                    wire::SidecarPlacementShared { pool: None },
-                ),
-                metadata: HashMap::new(),
-            }),
-        )
-        .await?;
-        let session_id = match sess {
-            wire::ResponsePayload::SessionOpenedResponse(s) => s.session_id,
-            other => return Err(format!("expected SessionOpened, got {other:?}")),
-        };
-
-        // Create a WebAssembly VM with the default (bundled base) filesystem.
-        let vm = request(
-            &t,
-            wire::OwnershipScope::SessionOwnership(wire::SessionOwnership {
-                connection_id: connection_id.clone(),
-                session_id: session_id.clone(),
-            }),
-            wire::RequestPayload::CreateVmRequest(wire::CreateVmRequest {
-                runtime: wire::GuestRuntimeKind::WebAssembly,
-                // Trusted VM config (we own this VM): grant the guest fs/process access so the
-                // sidecar can load the wasm from /tmp and the guest can write/read /data. The
-                // default policy denies fs reads.
-                config: VM_CONFIG_JSON.into(),
-            }),
-        )
-        .await?;
-        let vm_id = match vm {
-            wire::ResponsePayload::VmCreatedResponse(v) => v.vm_id,
-            other => return Err(format!("expected VmCreated, got {other:?}")),
-        };
-
-        Ok(Session { t, connection_id, session_id, vm_id })
-    }
-
-    fn vm_scope(&self) -> wire::OwnershipScope {
-        wire::OwnershipScope::VmOwnership(wire::VmOwnership {
-            connection_id: self.connection_id.clone(),
-            session_id: self.session_id.clone(),
-            vm_id: self.vm_id.clone(),
-        })
-    }
-
-    async fn fs_call(&self, req: wire::GuestFilesystemCallRequest) -> Result<wire::GuestFilesystemResultResponse> {
-        let r = request(&self.t, self.vm_scope(), wire::RequestPayload::GuestFilesystemCallRequest(req)).await?;
-        match r {
-            wire::ResponsePayload::GuestFilesystemResultResponse(res) => Ok(res),
-            other => Err(format!("expected GuestFilesystemResult, got {other:?}")),
-        }
-    }
-
-    async fn mkdir(&self, path: &str) -> Result<()> {
-        let mut req = fs_req(wire::GuestFilesystemOperation::Mkdir, path, None, None);
-        req.recursive = true;
-        self.fs_call(req).await?;
-        Ok(())
-    }
-
-    async fn write_file(&self, path: &str, data: &[u8]) -> Result<()> {
-        let req = fs_req(
-            wire::GuestFilesystemOperation::WriteFile,
-            path,
-            Some(BASE64_STANDARD.encode(data)),
-            Some(wire::RootFilesystemEntryEncoding::Base64),
-        );
-        self.fs_call(req).await?;
-        Ok(())
-    }
-
-    async fn execute(&self, process_id: &str, entrypoint: &str, args: &[&str]) -> Result<()> {
-        self.execute_env(process_id, entrypoint, args, HashMap::new()).await
-    }
-
-    async fn execute_env(
-        &self,
-        process_id: &str,
-        entrypoint: &str,
-        args: &[&str],
-        env: HashMap<String, String>,
-    ) -> Result<()> {
-        let r = request(
-            &self.t,
-            self.vm_scope(),
-            wire::RequestPayload::ExecuteRequest(wire::ExecuteRequest {
-                process_id: process_id.into(),
-                command: None,
-                runtime: Some(wire::GuestRuntimeKind::WebAssembly),
-                // The sidecar loads the wasm module from this HOST path (trusted client input).
-                entrypoint: Some(entrypoint.into()),
-                args: args.iter().map(|s| s.to_string()).collect(),
-                env,
-                cwd: Some("/".into()),
-                wasm_permission_tier: Some(wire::WasmPermissionTier::Full),
-            }),
-        )
-        .await?;
-        match r {
-            wire::ResponsePayload::ProcessStartedResponse(_) => Ok(()),
-            other => Err(format!("expected ProcessStarted, got {other:?}")),
-        }
-    }
-
-    /// Read a guest file fully via repeated PREAD chunks (each chunk fits inside one wire frame).
-    async fn read_file_chunked(&self, path: &str) -> Result<Vec<u8>> {
-        let mut out = Vec::new();
-        let mut offset = 0u64;
-        loop {
-            let mut req = fs_req(wire::GuestFilesystemOperation::Pread, path, None, None);
-            req.len = Some(READ_CHUNK);
-            req.offset = Some(offset);
-            let res = self.fs_call(req).await?;
-            let chunk = decode_fs_content(&res)?;
-            let n = chunk.len() as u64;
-            out.extend_from_slice(&chunk);
-            if n < READ_CHUNK {
-                break;
-            }
-            offset += n;
-        }
-        Ok(out)
-    }
-
-    async fn write_stdin(&self, process_id: &str, data: &[u8]) -> Result<()> {
-        request(
-            &self.t,
-            self.vm_scope(),
-            wire::RequestPayload::WriteStdinRequest(wire::WriteStdinRequest {
-                process_id: process_id.into(),
-                chunk: data.to_vec(),
-            }),
-        )
-        .await?;
-        Ok(())
-    }
-
-    fn shutdown(&self) {
-        self.t.kill_child();
-    }
-}
-
-fn abs_path(p: &str) -> Result<String> {
-    std::fs::canonicalize(p)
-        .map_err(|e| format!("resolve guest path {p}: {e}"))?
-        .to_str()
-        .map(|s| s.to_string())
-        .ok_or_else(|| "guest path is not valid UTF-8".to_string())
-}
-
-fn conn_scope(connection_id: &str) -> wire::OwnershipScope {
-    wire::OwnershipScope::ConnectionOwnership(wire::ConnectionOwnership {
-        connection_id: connection_id.into(),
-    })
-}
-
-fn fs_req(
-    operation: wire::GuestFilesystemOperation,
-    path: &str,
-    content: Option<String>,
-    encoding: Option<wire::RootFilesystemEntryEncoding>,
-) -> wire::GuestFilesystemCallRequest {
-    wire::GuestFilesystemCallRequest {
-        operation,
-        path: path.into(),
-        destination_path: None,
-        target: None,
-        content,
-        encoding,
-        recursive: false,
-        mode: None,
-        uid: None,
-        gid: None,
-        atime_ms: None,
-        mtime_ms: None,
-        len: None,
-        offset: None,
-    }
-}
-
-fn decode_fs_content(res: &wire::GuestFilesystemResultResponse) -> Result<Vec<u8>> {
-    match (&res.content, &res.encoding) {
-        (Some(c), Some(wire::RootFilesystemEntryEncoding::Base64)) => {
-            BASE64_STANDARD.decode(c).map_err(|e| format!("base64 decode: {e}"))
-        }
-        (Some(c), _) => Ok(c.clone().into_bytes()),
-        (None, _) => Ok(Vec::new()),
-    }
-}
-
-async fn request(
-    t: &Arc<SidecarProcess>,
-    ownership: wire::OwnershipScope,
-    payload: wire::RequestPayload,
-) -> Result<wire::ResponsePayload> {
-    let r = t
-        .request_wire(ownership, payload)
-        .await
-        .map_err(|e| format!("transport: {e}"))?;
-    if let wire::ResponsePayload::RejectedResponse(rej) = &r {
-        return Err(format!("rejected [{}]: {}", rej.code, rej.message));
-    }
-    Ok(r)
-}
-
-async fn wait_for_exit(
-    events: &mut tokio::sync::broadcast::Receiver<(wire::OwnershipScope, wire::EventPayload)>,
-    process_id: &str,
-) -> Result<i32> {
-    loop {
-        match events.recv().await {
-            Ok((_, wire::EventPayload::ProcessExitedEvent(e))) if e.process_id == process_id => {
-                return Ok(e.exit_code);
-            }
-            Ok(_) => continue,
-            Err(tokio::sync::broadcast::error::RecvError::Lagged(_)) => continue,
-            Err(e) => return Err(format!("event stream closed: {e}")),
-        }
-    }
-}
-
-// ---- capture mode (headless, automated proof) --------------------------------------------------
-
-async fn run_capture(sidecar: Option<String>, guest: &str, out: &str) -> Result<()> {
-    let s = Session::connect(sidecar).await?;
-    // Run the capture, then always kill the sidecar child regardless of success/failure.
-    let result = capture_inner(&s, guest, out).await;
-    s.shutdown();
-    result
-}
-
-async fn capture_inner(s: &Session, guest: &str, out: &str) -> Result<()> {
-    let guest_abs = abs_path(guest)?;
-    s.mkdir("/data").await?;
-
-    let mut events = s.t.subscribe_wire_events();
-    s.execute("proc-capture", &guest_abs, &["--out", "/data/frame.bin"])
-        .await?;
-    // Bound the wait so a wedged guest can't hang the host forever.
-    let code = tokio::time::timeout(
-        std::time::Duration::from_secs(60),
-        wait_for_exit(&mut events, "proc-capture"),
-    )
-    .await
-    .map_err(|_| "timed out waiting for guest to exit".to_string())??;
-    if code != 0 {
-        return Err(format!("guest exited with code {code}"));
-    }
-
-    let bytes = s.read_file_chunked("/data/frame.bin").await?;
-    std::fs::write(out, &bytes).map_err(|e| format!("write {out}: {e}"))?;
-    eprintln!("secure-exec: captured {} bytes -> {out}", bytes.len());
-    Ok(())
-}
-
-// ---- exec mode (run a long-lived guest, e.g. Xvfb, streaming its output for a timeout) ---------
-
-async fn run_exec(sidecar: Option<String>, guest: &str, args: &[String], timeout_s: u64) -> Result<()> {
-    let s = Session::connect(sidecar).await?;
-    let guest_abs = abs_path(guest)?;
-    s.mkdir("/data").await.ok();
-    s.mkdir("/tmp/.X11-unix").await.ok();
-    let mut events = s.t.subscribe_wire_events();
-    let argv: Vec<&str> = args.iter().map(|x| x.as_str()).collect();
-    s.execute("proc-exec", &guest_abs, &argv).await?;
-    eprintln!("secure-exec: started {guest_abs} {args:?}");
-    let deadline = tokio::time::Instant::now() + std::time::Duration::from_secs(timeout_s);
-    loop {
-        let remaining = deadline.saturating_duration_since(tokio::time::Instant::now());
-        if remaining.is_zero() {
-            break;
-        }
-        match tokio::time::timeout(remaining, events.recv()).await {
-            Ok(Ok((_, wire::EventPayload::ProcessOutputEvent(o)))) if o.process_id == "proc-exec" => {
-                let txt = String::from_utf8_lossy(&o.chunk);
-                let ch = if matches!(o.channel, wire::StreamChannel::Stderr) { "err" } else { "out" };
-                eprint!("[{ch}] {txt}");
-            }
-            Ok(Ok((_, wire::EventPayload::ProcessExitedEvent(e)))) if e.process_id == "proc-exec" => {
-                eprintln!("\nsecure-exec: guest exited with code {}", e.exit_code);
-                s.shutdown();
-                return Ok(());
-            }
-            Ok(Ok(_)) => continue,
-            Ok(Err(tokio::sync::broadcast::error::RecvError::Lagged(_))) => continue,
-            Ok(Err(_)) => break,
-            Err(_) => break,
-        }
-    }
-    eprintln!("\nsecure-exec: timeout ({timeout_s}s) reached");
-    // Best-effort: read back a guest file (e.g. Xvfb's -fbdir framebuffer) before disposing.
-    if let Ok(rb) = std::env::var("READBACK") {
-        if let Some((gpath, hpath)) = rb.split_once(':') {
-            match s.read_file_chunked(gpath).await {
-                Ok(bytes) => {
-                    let _ = std::fs::write(hpath, &bytes);
-                    eprintln!("secure-exec: read back {} ({} bytes) -> {hpath}", gpath, bytes.len());
-                }
-                Err(e) => eprintln!("secure-exec: readback {gpath} failed: {e}"),
-            }
-        }
-    }
-    s.shutdown();
-    Ok(())
-}
-
-/// Run an X server guest and an X client guest concurrently in the SAME VM, so they share the
-/// kernel socket table and the client can connect to the server's AF_UNIX socket
-/// (/tmp/.X11-unix/X0). After the client finishes, read the server's framebuffer file back out.
-async fn run_xdemo(
-    sidecar: Option<String>,
-    server: &str,
-    clients: &[String],
-    server_args: &[String],
-    fb_out: Option<&str>,
-    timeout_s: u64,
-    fonts_dir: Option<&str>,
-) -> Result<()> {
-    let s = Session::connect(sidecar).await?;
-    let server_abs = abs_path(server)?;
-    // Each client spec is "wasm_path arg1 arg2 ...": resolve the path, keep the args.
-    let mut client_specs: Vec<(String, Vec<String>)> = Vec::new();
-    for spec in clients {
-        let mut parts = spec.split_whitespace();
-        let path = parts.next().ok_or_else(|| "empty --client spec".to_string())?;
-        let path_abs = abs_path(path)?;
-        let cargs: Vec<String> = parts.map(|x| x.to_string()).collect();
-        client_specs.push((path_abs, cargs));
-    }
-    s.mkdir("/data").await.ok();
-    s.mkdir("/tmp/.X11-unix").await.ok();
-    // Provide a twm config that auto-places windows (twm's default placement is interactive and
-    // would never map a window without user input). Harmless for non-twm runs.
-    s.mkdir("/root").await.ok();
-    s.write_file(
-        "/root/.twmrc",
-        b"RandomPlacement\nUsePPosition \"on\"\nNoGrabServer\nNoTitleFocus\n",
-    )
-    .await
-    .ok();
-
-    // Install X core fonts into the VM (so the X server can serve real fonts via -fp /fonts).
-    if let Some(fdir) = fonts_dir {
-        s.mkdir("/fonts").await.ok();
-        let entries = std::fs::read_dir(fdir).map_err(|e| format!("read fonts dir {fdir}: {e}"))?;
-        let mut n = 0;
-        for entry in entries.flatten() {
-            if !entry.path().is_file() {
-                continue;
-            }
-            let name = entry.file_name();
-            let name = name.to_string_lossy();
-            let bytes = std::fs::read(entry.path()).map_err(|e| format!("read font {name}: {e}"))?;
-            s.write_file(&format!("/fonts/{name}"), &bytes).await?;
-            n += 1;
-        }
-        eprintln!("secure-exec: installed {n} font files into /fonts");
-    }
-
-    let mut events = s.t.subscribe_wire_events();
-
-    // Start the X server. It binds /tmp/.X11-unix/X0 and blocks in its dispatch loop.
-    let sargv: Vec<&str> = server_args.iter().map(|x| x.as_str()).collect();
-    s.execute("xserver", &server_abs, &sargv).await?;
-    eprintln!("secure-exec: started X server {server_abs} {server_args:?}");
-
-    let deadline = tokio::time::Instant::now() + std::time::Duration::from_secs(timeout_s);
-    let mut server_ready = false;
-    let mut wm_ready = false;                    // first client (the WM) is up + idle in its loop
-    let mut launched = 0usize;                  // number of clients launched so far
-    let mut last_activity = tokio::time::Instant::now(); // last output from the latest client
-    let mut last_launch = tokio::time::Instant::now();
-    let mut exited_ok = 0usize;
-    let mut exited_bad = 0usize;
-    // A client is "settled" once it has produced no output for this long after launch — i.e. it
-    // finished initializing and is idle in its event loop. We launch the NEXT client only then, so
-    // heavy libX11 startups never contend on the sidecar's single sync-RPC thread. Event-driven,
-    // not a fixed sleep (this mirrors a session manager waiting for the WM before starting apps).
-    let settle = std::time::Duration::from_millis(1500);
-    let min_after_launch = std::time::Duration::from_millis(800);
-    loop {
-        let remaining = deadline.saturating_duration_since(tokio::time::Instant::now());
-        if remaining.is_zero() {
-            break;
-        }
-        // Launch the next client once the previous one is ready. The first client is the window
-        // manager: gate apps on it being fully up (its "WM ready" signal, or a generous fallback),
-        // not just a quiet pause — twm has quiet stretches mid-init while awaiting X replies.
-        if server_ready
-            && launched > 0
-            && !wm_ready
-            && tokio::time::Instant::now().duration_since(last_launch)
-                >= std::time::Duration::from_secs(12)
-        {
-            wm_ready = true; // fallback: assume the WM is up if it has run a while
-        }
-        let can_launch_next = launched == 0 || wm_ready;
-        if server_ready && launched < client_specs.len() && can_launch_next {
-            let now = tokio::time::Instant::now();
-            let prev_settled = launched == 0
-                || (now.duration_since(last_activity) >= settle
-                    && now.duration_since(last_launch) >= min_after_launch);
-            if prev_settled {
-                let (path, cargs) = &client_specs[launched];
-                let id = format!("xclient{launched}");
-                let argv: Vec<&str> = cargs.iter().map(|x| x.as_str()).collect();
-                let mut cenv = HashMap::new();
-                cenv.insert("DISPLAY".to_string(), ":0".to_string());
-                cenv.insert("HOME".to_string(), "/root".to_string());
-                s.execute_env(&id, path, &argv, cenv).await?;
-                eprintln!("secure-exec: launched {id} ({path})");
-                launched += 1;
-                last_launch = tokio::time::Instant::now();
-                last_activity = tokio::time::Instant::now();
-            }
-        }
-        let poll = remaining.min(std::time::Duration::from_millis(300));
-        match tokio::time::timeout(poll, events.recv()).await {
-            Ok(Ok((_, wire::EventPayload::ProcessOutputEvent(o)))) => {
-                let txt = String::from_utf8_lossy(&o.chunk);
-                let who = if o.process_id == "xserver" { "srv" } else { &o.process_id };
-                let ch = if matches!(o.channel, wire::StreamChannel::Stderr) { "err" } else { "out" };
-                eprint!("[{who}/{ch}] {txt}");
-                if !server_ready && o.process_id == "xserver" && txt.contains("m_pre_dispatch") {
-                    server_ready = true;
-                    eprintln!("secure-exec: server is serving; launching {} X client(s) as each settles", client_specs.len());
-                }
-                // Track activity of the most-recently-launched client to detect when it settles.
-                if launched > 0 && o.process_id == format!("xclient{}", launched - 1) {
-                    last_activity = tokio::time::Instant::now();
-                }
-                // The first client (window manager) announces readiness when it enters its event
-                // loop (twm prints "handleevents"; JWM/others similar). Gate apps on this — a real
-                // session manager waits for the WM before starting clients.
-                if !wm_ready && o.process_id == "xclient0" && txt.contains("handleevents") {
-                    wm_ready = true;
-                    eprintln!("secure-exec: window manager is ready; starting apps");
-                }
-            }
-            Ok(Ok((_, wire::EventPayload::ProcessExitedEvent(e)))) => {
-                eprintln!("\nsecure-exec: {} exited with code {}", e.process_id, e.exit_code);
-                if e.process_id.starts_with("xclient") {
-                    if e.exit_code == 0 { exited_ok += 1; } else { exited_bad += 1; }
-                    if exited_ok + exited_bad >= client_specs.len() {
-                        break;
-                    }
-                }
-                if e.process_id == "xserver" {
-                    break;
-                }
-            }
-            Ok(Ok(_)) => continue,
-            Ok(Err(tokio::sync::broadcast::error::RecvError::Lagged(_))) => continue,
-            Ok(Err(_)) => break,
-            Err(_) => continue, // poll timeout: loop to re-check the settle condition
-        }
-    }
-
-    if !server_ready {
-        eprintln!("\nsecure-exec: server never reached dispatch; clients not launched");
-    }
-    eprintln!(
-        "secure-exec: {exited_ok}/{} X client(s) completed successfully ({exited_bad} failed)",
-        client_specs.len()
-    );
-
-    // Read the server framebuffer out via the kernel VFS (works while the server still blocks).
-    if let Some(hpath) = fb_out {
-        match s.read_file_chunked("/data/Xvfb_screen0").await {
-            Ok(bytes) => {
-                let _ = std::fs::write(hpath, &bytes);
-                eprintln!("secure-exec: read back framebuffer ({} bytes) -> {hpath}", bytes.len());
-            }
-            Err(e) => eprintln!("secure-exec: framebuffer readback failed: {e}"),
-        }
-    }
-    s.shutdown();
-    Ok(())
-}
-
-// ---- arg parsing + entrypoint ------------------------------------------------------------------
-
-struct Args {
-    mode_window: bool,
-    capture_out: Option<String>,
-    guest: String,
-    sidecar: Option<String>,
-    exec: bool,
-    exec_args: Vec<String>,
-    timeout: u64,
-    xdemo: bool,
-    server: Option<String>,
-    clients: Vec<String>,
-    fb_out: Option<String>,
-    fonts_dir: Option<String>,
-}
-
-fn parse_args() -> Args {
-    let argv: Vec<String> = std::env::args().collect();
-    let mut a = Args {
-        mode_window: false,
-        capture_out: None,
-        guest: "target/wasm32-wasip1/release/guest.wasm".into(),
-        sidecar: std::env::var("SECURE_EXEC_SIDECAR_BIN").ok(),
-        exec: false,
-        exec_args: Vec::new(),
-        timeout: 8,
-        xdemo: false,
-        server: None,
-        clients: Vec::new(),
-        fb_out: None,
-        fonts_dir: None,
-    };
-    let mut i = 1;
-    while i < argv.len() {
-        match argv[i].as_str() {
-            "--window" => a.mode_window = true,
-            "--exec" => a.exec = true,
-            "--xdemo" => a.xdemo = true,
-            "--server" => {
-                i += 1;
-                a.server = argv.get(i).cloned();
-            }
-            "--client" => {
-                i += 1;
-                if let Some(c) = argv.get(i) {
-                    a.clients.push(c.clone());
-                }
-            }
-            "--fb-out" => {
-                i += 1;
-                a.fb_out = argv.get(i).cloned();
-            }
-            "--fonts-dir" => {
-                i += 1;
-                a.fonts_dir = argv.get(i).cloned();
-            }
-            "--capture" => {
-                i += 1;
-                a.capture_out = argv.get(i).cloned();
-            }
-            "--guest" => {
-                i += 1;
-                if let Some(g) = argv.get(i) {
-                    a.guest = g.clone();
-                }
-            }
-            "--sidecar" => {
-                i += 1;
-                a.sidecar = argv.get(i).cloned();
-            }
-            "--timeout" => {
-                i += 1;
-                a.timeout = argv.get(i).and_then(|s| s.parse().ok()).unwrap_or(8);
-            }
-            "--" => {
-                // everything after `--` is passed to the guest
-                a.exec_args = argv[i + 1..].to_vec();
-                break;
-            }
-            _ => {}
-        }
-        i += 1;
-    }
-    a
-}
-
-#[tokio::main(flavor = "multi_thread", worker_threads = 2)]
-async fn main() {
-    let args = parse_args();
-
-    if args.xdemo {
-        let server = args.server.clone().unwrap_or_else(|| {
-            eprintln!("--xdemo requires --server <Xvfb.wasm>");
-            std::process::exit(2);
-        });
-        if args.clients.is_empty() {
-            eprintln!("--xdemo requires at least one --client \"<xclient.wasm> [args...]\"");
-            std::process::exit(2);
-        }
-        if let Err(e) = run_xdemo(
-            args.sidecar.clone(),
-            &server,
-            &args.clients,
-            &args.exec_args,
-            args.fb_out.as_deref(),
-            args.timeout,
-            args.fonts_dir.as_deref(),
-        )
-        .await
-        {
-            eprintln!("xdemo failed: {e}");
-            std::process::exit(1);
-        }
-        return;
-    }
-
-    if args.exec {
-        if let Err(e) = run_exec(args.sidecar.clone(), &args.guest, &args.exec_args, args.timeout).await {
-            eprintln!("exec failed: {e}");
-            std::process::exit(1);
-        }
-        return;
-    }
-
-    if let Some(out) = args.capture_out.clone() {
-        if let Err(e) = run_capture(args.sidecar.clone(), &args.guest, &out).await {
-            eprintln!("capture failed: {e}");
-            std::process::exit(1);
-        }
-        return;
-    }
-
-    if args.mode_window {
-        #[cfg(feature = "window")]
-        {
-            if let Err(e) = window::run(args.sidecar.clone(), args.guest.clone()).await {
-                eprintln!("window failed: {e}");
-                std::process::exit(1);
-            }
-            return;
-        }
-        #[cfg(not(feature = "window"))]
-        {
-            eprintln!(
-                "built without the `window` feature.\n\
-                 Build the interactive demo with:  cargo run -p wasm-gui-host --features window -- \\\n\
-                     --window --guest target/wasm32-wasip1/release/guest.wasm"
-            );
-            std::process::exit(0);
-        }
-    }
-
-    eprintln!(
-        "usage:\n  wasm-gui-host --capture <out.bin> --guest <guest.wasm> [--sidecar <bin>]\n  \
-         wasm-gui-host --window --guest <guest.wasm> [--sidecar <bin>]   (needs --features window)"
-    );
-    std::process::exit(2);
-}
-
-// ---- window mode (manual demo; needs a display) ------------------------------------------------
-
-#[cfg(feature = "window")]
-mod window {
-    use super::*;
-    use std::rc::Rc;
-    use std::sync::mpsc as std_mpsc;
-
-    use softbuffer::{Context, Surface};
-    use winit::application::ApplicationHandler;
-    use winit::event::{ElementState, WindowEvent};
-    use winit::event_loop::{ActiveEventLoop, EventLoop};
-    use winit::keyboard::{Key, NamedKey};
-    use winit::window::{Window, WindowId};
-
-    const MAGIC: &[u8; 4] = b"SXFB";
-
-    pub struct Frame {
-        pub w: u32,
-        pub h: u32,
-        pub rgba: Vec<u8>,
-    }
-
-    /// Accumulates guest stdout chunks and yields whole v0 frames.
-    struct FrameParser {
-        buf: Vec<u8>,
-    }
-    impl FrameParser {
-        fn new() -> Self {
-            Self { buf: Vec::new() }
-        }
-        fn push(&mut self, chunk: &[u8], out: &mut Vec<Frame>) {
-            self.buf.extend_from_slice(chunk);
-            loop {
-                if self.buf.len() < 12 {
-                    return;
-                }
-                if &self.buf[0..4] != MAGIC {
-                    // Resync: drop one byte until magic aligns.
-                    self.buf.remove(0);
-                    continue;
-                }
-                let w = u32::from_le_bytes(self.buf[4..8].try_into().unwrap());
-                let h = u32::from_le_bytes(self.buf[8..12].try_into().unwrap());
-                // The guest output is untrusted: reject implausible dimensions (OOM guard) and
-                // resync rather than buffering gigabytes waiting for a frame that never completes.
-                const MAX_DIM: u32 = 8192;
-                let need = (w >= 1 && h >= 1 && w <= MAX_DIM && h <= MAX_DIM)
-                    .then(|| (w as usize).checked_mul(h as usize).and_then(|p| p.checked_mul(4)))
-                    .flatten()
-                    .map(|p| p + 12);
-                let Some(need) = need else {
-                    self.buf.remove(0);
-                    continue;
-                };
-                if self.buf.len() < need {
-                    return;
-                }
-                let rgba = self.buf[12..need].to_vec();
-                out.push(Frame { w, h, rgba });
-                self.buf.drain(0..need);
-            }
-        }
-    }
-
-    /// Runs the secure-exec session on the tokio runtime, streaming frames to the winit thread and
-    /// receiving input tokens back. Spawned before the event loop takes the main thread.
-    pub async fn run(sidecar: Option<String>, guest: String) -> Result<()> {
-        let s = Session::connect(sidecar).await?;
-        let guest_abs = abs_path(&guest)?;
-
-        let (frame_tx, frame_rx) = std_mpsc::channel::<Frame>();
-        let (input_tx, mut input_rx) = tokio::sync::mpsc::unbounded_channel::<String>();
-
-        let mut events = s.t.subscribe_wire_events();
-        s.execute("proc-window", &guest_abs, &["--loop"]).await?;
-
-        let s = Arc::new(s);
-        let s_in = s.clone();
-        // Forward input tokens to the guest stdin.
-        tokio::spawn(async move {
-            while let Some(line) = input_rx.recv().await {
-                let _ = s_in.write_stdin("proc-window", line.as_bytes()).await;
-            }
-        });
-        // Pump guest stdout frames to the window.
-        tokio::spawn(async move {
-            let mut parser = FrameParser::new();
-            loop {
-                match events.recv().await {
-                    Ok((_, wire::EventPayload::ProcessOutputEvent(o)))
-                        if o.process_id == "proc-window"
-                            && matches!(o.channel, wire::StreamChannel::Stdout) =>
-                    {
-                        let mut frames = Vec::new();
-                        parser.push(&o.chunk, &mut frames);
-                        for f in frames {
-                            if frame_tx.send(f).is_err() {
-                                return;
-                            }
-                        }
-                    }
-                    Ok((_, wire::EventPayload::ProcessExitedEvent(e)))
-                        if e.process_id == "proc-window" =>
-                    {
-                        return;
-                    }
-                    Ok(_) => continue,
-                    Err(tokio::sync::broadcast::error::RecvError::Lagged(_)) => continue,
-                    Err(_) => return,
-                }
-            }
-        });
-
-        // The winit event loop must own the main thread.
-        let event_loop = EventLoop::new().map_err(|e| format!("event loop: {e}"))?;
-        let mut app = App {
-            frame_rx,
-            input_tx,
-            window: None,
-            surface: None,
-            last: None,
-            _session: s,
-        };
-        event_loop
-            .run_app(&mut app)
-            .map_err(|e| format!("run_app: {e}"))
-    }
-
-    struct App {
-        frame_rx: std_mpsc::Receiver<Frame>,
-        input_tx: tokio::sync::mpsc::UnboundedSender<String>,
-        window: Option<Rc<Window>>,
-        surface: Option<Surface<Rc<Window>, Rc<Window>>>,
-        last: Option<Frame>,
-        _session: Arc<Session>,
-    }
-
-    impl App {
-        fn redraw(&mut self) {
-            while let Ok(f) = self.frame_rx.try_recv() {
-                self.last = Some(f);
-            }
-            let (Some(surface), Some(frame)) = (self.surface.as_mut(), self.last.as_ref()) else {
-                return;
-            };
-            surface
-                .resize(
-                    std::num::NonZeroU32::new(frame.w).unwrap(),
-                    std::num::NonZeroU32::new(frame.h).unwrap(),
-                )
-                .unwrap();
-            let mut buf = surface.buffer_mut().unwrap();
-            for (i, px) in buf.iter_mut().enumerate() {
-                let s = i * 4;
-                let r = frame.rgba[s] as u32;
-                let g = frame.rgba[s + 1] as u32;
-                let b = frame.rgba[s + 2] as u32;
-                *px = (r << 16) | (g << 8) | b;
-            }
-            buf.present().unwrap();
-        }
-    }
-
-    impl ApplicationHandler for App {
-        fn resumed(&mut self, event_loop: &ActiveEventLoop) {
-            let attrs = Window::default_attributes().with_title("secure-exec — wasm GUI");
-            let window = Rc::new(event_loop.create_window(attrs).unwrap());
-            let context = Context::new(window.clone()).unwrap();
-            let surface = Surface::new(&context, window.clone()).unwrap();
-            self.surface = Some(surface);
-            self.window = Some(window);
-        }
-
-        fn window_event(&mut self, event_loop: &ActiveEventLoop, _id: WindowId, event: WindowEvent) {
-            match event {
-                WindowEvent::CloseRequested => {
-                    let _ = self.input_tx.send("q".into());
-                    event_loop.exit();
-                }
-                WindowEvent::CursorMoved { position, .. } => {
-                    let _ = self
-                        .input_tx
-                        .send(format!("p {} {}", position.x as i32, position.y as i32));
-                    if let Some(w) = self.window.as_ref() {
-                        w.request_redraw();
-                    }
-                }
-                WindowEvent::KeyboardInput { event, .. } => {
-                    if event.state == ElementState::Pressed {
-                        if let Key::Named(NamedKey::Escape) = event.logical_key {
-                            let _ = self.input_tx.send("q".into());
-                            event_loop.exit();
-                        }
-                    }
-                }
-                WindowEvent::RedrawRequested => {
-                    self.redraw();
-                    if let Some(w) = self.window.as_ref() {
-                        w.request_redraw();
-                    }
-                }
-                _ => {}
-            }
-        }
-    }
-}
diff --git a/experiments/wasm-gui/scripts/build-nuklear.sh b/experiments/wasm-gui/scripts/build-nuklear.sh
deleted file mode 100755
index 2d64fb348..000000000
--- a/experiments/wasm-gui/scripts/build-nuklear.sh
+++ /dev/null
@@ -1,17 +0,0 @@
-#!/usr/bin/env bash
-# Build the M3 Nuklear guest (real toolkit) to wasm32-wasip1 with the vendored wasi-sdk.
-set -euo pipefail
-cd "$(dirname "$0")/.."
-EXP="$(pwd)"
-REPO="$(cd ../.. && pwd)"
-WSDK="${WASI_SDK:-$REPO/registry/native/c/vendor/wasi-sdk}"
-[ -x "$WSDK/bin/clang" ] || { echo "wasi-sdk clang not found at $WSDK"; exit 1; }
-
-"$WSDK/bin/clang" \
-  --target=wasm32-wasip1 \
-  --sysroot="$WSDK/share/wasi-sysroot" \
-  -O2 -std=c99 \
-  -I "$EXP/third_party/nuklear" \
-  "$EXP/guest-nuklear/guest_nuklear.c" -lm \
-  -o "$EXP/guest-nuklear/guest_nuklear.wasm"
-echo "built guest-nuklear/guest_nuklear.wasm ($(stat -c%s "$EXP/guest-nuklear/guest_nuklear.wasm") bytes)"
diff --git a/experiments/wasm-gui/scripts/build-xfill.sh b/experiments/wasm-gui/scripts/build-xfill.sh
deleted file mode 100755
index c23865a97..000000000
--- a/experiments/wasm-gui/scripts/build-xfill.sh
+++ /dev/null
@@ -1,17 +0,0 @@
-#!/usr/bin/env bash
-# Build the minimal raw-X11 client (xfill) to wasm32-wasip1 against the PATCHED sysroot
-# that provides POSIX sockets backed by secure-exec's host_net imports.
-set -euo pipefail
-cd "$(dirname "$0")/.."
-EXP="$(pwd)"
-REPO="$(cd ../.. && pwd)"
-WSDK="$REPO/registry/native/c/vendor/wasi-sdk"
-SYSROOT="$REPO/registry/native/c/sysroot"
-
-"$WSDK/bin/clang" \
-  --target=wasm32-wasip1 \
-  --sysroot="$SYSROOT" \
-  -O2 -std=c11 \
-  "$EXP/guest-xclient/xfill.c" \
-  -o "$EXP/guest-xclient/xfill.wasm"
-echo "built guest-xclient/xfill.wasm ($(stat -c%s "$EXP/guest-xclient/xfill.wasm") bytes)"
diff --git a/experiments/wasm-gui/scripts/build-xlib.sh b/experiments/wasm-gui/scripts/build-xlib.sh
deleted file mode 100755
index 69f5de2b2..000000000
--- a/experiments/wasm-gui/scripts/build-xlib.sh
+++ /dev/null
@@ -1,24 +0,0 @@
-#!/usr/bin/env bash
-# Cross-compile one autotools X.Org library/app to wasm32-wasip1 against the patched sysroot.
-# Usage: build-xlib.sh <dir-under-third_party> [extra configure args...]
-set -uo pipefail
-cd "$(dirname "$0")/.."
-EXP="$(pwd)"
-source "$EXP/toolchain/cross-env.sh"
-DIR="$1"; shift || true
-SRC="$EXP/third_party/$DIR"
-[ -d "$SRC" ] || { echo "no such source dir: $SRC"; exit 1; }
-cd "$SRC"
-
-echo "== configuring $DIR =="
-./configure $CROSS_CONFIGURE_ARGS "$@" > /tmp/conf-$DIR.log 2>&1
-if [ $? -ne 0 ]; then echo "CONFIGURE FAILED ($DIR); tail:"; tail -25 /tmp/conf-$DIR.log; exit 1; fi
-
-echo "== building $DIR =="
-make -j4 > /tmp/make-$DIR.log 2>&1
-RC=$?
-if [ $RC -ne 0 ]; then echo "MAKE FAILED ($DIR); tail:"; tail -30 /tmp/make-$DIR.log; exit 1; fi
-
-echo "== installing $DIR =="
-make install > /tmp/install-$DIR.log 2>&1 || { echo "INSTALL FAILED ($DIR)"; tail -15 /tmp/install-$DIR.log; exit 1; }
-echo "OK: $DIR built + installed to wasm-prefix"
diff --git a/experiments/wasm-gui/scripts/link-twm.sh b/experiments/wasm-gui/scripts/link-twm.sh
deleted file mode 100755
index 8330de4c5..000000000
--- a/experiments/wasm-gui/scripts/link-twm.sh
+++ /dev/null
@@ -1,32 +0,0 @@
-#!/usr/bin/env bash
-# Link twm.wasm: the autotools build produces the objects but the final executable link needs the
-# wasi-compat stub object + Xau/Xdmcp/setjmp + the patched libc (host_net sockets). Mirrors
-# link-xvfb.sh. Produces experiments/wasm-gui/twm.wasm.
-set -uo pipefail
-cd "$(dirname "$0")/.."
-EXP="$(pwd)"
-source "$EXP/toolchain/cross-env.sh"
-SRC="$EXP/third_party/twm/src"
-P="$EXP/third_party/wasm-prefix/lib"
-SETJMP="$WSDK/share/wasi-sysroot/lib/wasm32-wasip1/libsetjmp.a"
-LIBC="$REPO/registry/native/c/sysroot/lib/wasm32-wasip1/libc.a"
-COMPAT="$EXP/toolchain/wasi-compat.o"
-export PATH="/home/linuxbrew/.linuxbrew/bin:$PATH"
-
-OBJS="add_window.o cursor.o deftwmrc.o events.o gc.o iconmgr.o icons.o list.o menus.o parse.o resize.o session.o twm.o util.o version.o gram.o lex.o"
-
-cd "$SRC"
-"$CC" $CFLAGS $LDFLAGS \
-  -Wl,--allow-undefined \
-  -o twm $OBJS \
-  "$COMPAT" \
-  -L"$P" -lXmu -lXext -lXt -lX11 -lSM -lICE -lxcb -lXau -lXdmcp \
-  "$SETJMP" "$LIBC" 2>&1 | grep -iE "error|undefined" | head -20
-RC=${PIPESTATUS[0]}
-
-if [ -f twm ]; then
-  cp twm "$EXP/twm.wasm"
-  echo "linked twm.wasm ($(stat -c%s "$EXP/twm.wasm") bytes)"
-else
-  echo "LINK FAILED"; exit 1
-fi
diff --git a/experiments/wasm-gui/scripts/link-xapp.sh b/experiments/wasm-gui/scripts/link-xapp.sh
deleted file mode 100755
index b704fbe05..000000000
--- a/experiments/wasm-gui/scripts/link-xapp.sh
+++ /dev/null
@@ -1,29 +0,0 @@
-#!/usr/bin/env bash
-# Link a cross-compiled X.Org Athena/Xt app (xclock, xcalc, ...) to wasm: the autotools build makes
-# the objects but the final executable needs wasi-compat stubs + the full lib set + patched libc.
-# Usage: link-xapp.sh <appdir-under-third_party> <output-name> <obj1.o obj2.o ...>
-set -uo pipefail
-cd "$(dirname "$0")/.."
-EXP="$(pwd)"
-source "$EXP/toolchain/cross-env.sh"
-DIR="$1"; OUT="$2"; shift 2
-OBJS="$*"
-SRC="$EXP/third_party/$DIR"
-P="$EXP/third_party/wasm-prefix/lib"
-SETJMP="$WSDK/share/wasi-sysroot/lib/wasm32-wasip1/libsetjmp.a"
-LIBC="$REPO/registry/native/c/sysroot/lib/wasm32-wasip1/libc.a"
-COMPAT="$EXP/toolchain/wasi-compat.o"
-export PATH="/home/linuxbrew/.linuxbrew/bin:$PATH"
-
-cd "$SRC"
-"$CC" $CFLAGS $LDFLAGS -Wl,--allow-undefined \
-  -o "$OUT" $OBJS "$COMPAT" \
-  -L"$P" -lXaw7 -lXmu -lXt -lXpm -lXext -lXrender -lX11 -lSM -lICE -lxcb -lXau -lXdmcp \
-  "$SETJMP" "$LIBC" 2>&1 | grep -iE "error|undefined" | head -20
-if [ -f "$OUT" ]; then
-  wasm-opt --fpcast-emu -O0 "$OUT" -o "$OUT.fp" 2>/dev/null && mv "$OUT.fp" "$OUT"
-  cp "$OUT" "$EXP/$OUT.wasm"
-  echo "linked $OUT.wasm ($(stat -c%s "$EXP/$OUT.wasm") bytes)"
-else
-  echo "LINK FAILED ($OUT)"; exit 1
-fi
diff --git a/experiments/wasm-gui/scripts/link-xvfb.sh b/experiments/wasm-gui/scripts/link-xvfb.sh
deleted file mode 100755
index 449e46f01..000000000
--- a/experiments/wasm-gui/scripts/link-xvfb.sh
+++ /dev/null
@@ -1,31 +0,0 @@
-#!/usr/bin/env bash
-# Rebuild the X server objects (ninja) then link Xvfb.wasm with the fixups wasm-ld/secure-exec need:
-#   - force __main_argc_argv (wasi crt only weak-refs main, so it gets GC'd)
-#   - append libfontenc/freetype/z/Xau/Xdmcp + libsetjmp + the patched libc (archive ordering)
-set -uo pipefail
-cd "$(dirname "$0")/.."
-EXP="$(pwd)"
-BW="$EXP/third_party/xserver/build-wasm"
-WSDK=/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk
-SETJMP="$WSDK/share/wasi-sysroot/lib/wasm32-wasip1/libsetjmp.a"
-LIBC=/home/nathan/secure-exec/registry/native/c/sysroot/lib/wasm32-wasip1/libc.a
-P="$EXP/third_party/wasm-prefix/lib"
-MAINOBJ="$EXP/toolchain/xvfb-main.o"
-export PATH="/home/linuxbrew/.linuxbrew/bin:$PATH"
-
-# rebuild objects (the default final link fails on weak main — that's expected/ignored)
-# -k 0: keep compiling all objects even if some unrelated target (e.g. an xcb-using test client)
-# fails to link; we only need the dix/os/hw/vfb objects for the custom Xvfb link below.
-ninja -k 0 -C "$BW" >/dev/null 2>&1 || true
-
-ninja -C "$BW" -t commands hw/vfb/Xvfb 2>/dev/null | tail -1 > /tmp/link-xvfb.sh
-sed -i "s| -o hw/vfb/Xvfb| -Wl,--undefined=__main_argc_argv $MAINOBJ -o hw/vfb/Xvfb|" /tmp/link-xvfb.sh
-sed -i "s| -Wl,--end-group| $P/libXfont2.a $P/libfontenc.a $P/libfreetype.a $P/libz.a $P/libXau.a $P/libXdmcp.a $SETJMP $LIBC -Wl,--end-group|" /tmp/link-xvfb.sh
-( cd "$BW" && rm -f hw/vfb/Xvfb && bash /tmp/link-xvfb.sh )
-RC=$?
-if [ -f "$BW/hw/vfb/Xvfb" ]; then
-  cp "$BW/hw/vfb/Xvfb" "$EXP/Xvfb.wasm"
-  echo "linked Xvfb.wasm ($(stat -c%s "$EXP/Xvfb.wasm") bytes)"
-else
-  echo "LINK FAILED (rc=$RC)"; exit 1
-fi
diff --git a/experiments/wasm-gui/scripts/prepare-fonts.sh b/experiments/wasm-gui/scripts/prepare-fonts.sh
deleted file mode 100755
index ec059629a..000000000
--- a/experiments/wasm-gui/scripts/prepare-fonts.sh
+++ /dev/null
@@ -1,30 +0,0 @@
-#!/usr/bin/env bash
-# Prepare a minimal X core font directory (/tmp/vmfonts by default) the host installs into the VM
-# (--fonts-dir) so the wasm X server can serve real fonts via `-fp /fonts`. Uses the host system's
-# X11 PCF fonts + mkfontdir. Run once before the M6 desktop test/example.
-set -euo pipefail
-OUT="${1:-/tmp/vmfonts}"
-MISC=/usr/share/fonts/X11/misc
-DPI=/usr/share/fonts/X11/75dpi
-command -v mkfontdir >/dev/null || { echo "need mkfontdir (xfonts-utils)"; exit 1; }
-[ -d "$MISC" ] || { echo "need X core fonts at $MISC (xfonts-base)"; exit 1; }
-
-rm -rf "$OUT"; mkdir -p "$OUT"
-for f in cursor 6x13 6x13B 7x13 7x13B 8x13 8x13B 9x15 9x15B 10x20 5x8 12x24; do
-  [ -f "$MISC/$f.pcf.gz" ] && cp "$MISC/$f.pcf.gz" "$OUT/" || true
-done
-for f in helvR12 helvB12 helvR14 helvB14 timR12 timR14 courR12 courB12; do
-  [ -f "$DPI/$f.pcf.gz" ] && cp "$DPI/$f.pcf.gz" "$OUT/" || true
-done
-cd "$OUT"
-mkfontdir .
-# Add iso8859-1 duplicate entries (the PCF files contain Latin-1) for the C-locale fontset, plus
-# the classic aliases apps expect.
-tail -n +2 fonts.dir | sed 's/iso10646-1$/iso8859-1/' > /tmp/.fd8859 || true
-{ tail -n +2 fonts.dir; cat /tmp/.fd8859; } | sort -u > /tmp/.fdall
-{ echo "$(wc -l < /tmp/.fdall)"; cat /tmp/.fdall; } > fonts.dir
-cat > fonts.alias <<'EOF'
-fixed -misc-fixed-medium-r-semicondensed--13-120-75-75-c-60-iso8859-1
-variable -adobe-helvetica-bold-r-normal--12-120-75-75-p-70-iso8859-1
-EOF
-echo "prepared $OUT ($(ls *.pcf.gz | wc -l) PCF fonts, $(head -1 fonts.dir) fonts.dir entries)"
diff --git a/experiments/wasm-gui/scripts/test-m4b.sh b/experiments/wasm-gui/scripts/test-m4b.sh
deleted file mode 100755
index 8b305857e..000000000
--- a/experiments/wasm-gui/scripts/test-m4b.sh
+++ /dev/null
@@ -1,43 +0,0 @@
-#!/usr/bin/env bash
-# Automated M4b test: run the cross-compiled wasm Xvfb X server + a raw-X11 wasm client in one
-# secure-exec VM, have the client draw a solid fill, read the framebuffer back, and assert it
-# contains the expected color. Exits non-zero on any failure.
-set -euo pipefail
-cd "$(dirname "$0")/.."
-EXP="$(pwd)"
-REPO="$(cd ../.. && pwd)"
-
-HOST="$REPO/target/debug/wasm-gui-host"
-SIDECAR="$REPO/target/debug/secure-exec-sidecar"
-XVFB="$EXP/Xvfb.wasm"
-XFILL="$EXP/guest-xclient/xfill.wasm"
-FB="$(mktemp /tmp/m4b-fb.XXXXXX.bin)"
-
-for f in "$HOST" "$SIDECAR" "$XVFB" "$XFILL"; do
-  [ -f "$f" ] || { echo "MISSING: $f (build it first)"; exit 1; }
-done
-
-echo "== running Xvfb + xfill in one VM =="
-timeout 90 env -u DISPLAY "$HOST" --xdemo --timeout 16 \
-  --server "$XVFB" --client "$XFILL" --fb-out "$FB" --sidecar "$SIDECAR" \
-  -- :0 -screen 0 640x480x24 -nolisten tcp -nolock -listen local -fbdir /data > /tmp/m4b-run.log 2>&1 || true
-
-echo "== checking results =="
-grep -q "CMARK:done" /tmp/m4b-run.log || { echo "FAIL: client did not finish handshake+draw"; tail -20 /tmp/m4b-run.log; exit 1; }
-grep -qE "1/1 X client\(s\) completed successfully" /tmp/m4b-run.log || { echo "FAIL: client exit non-zero"; tail -5 /tmp/m4b-run.log; exit 1; }
-
-python3 - "$FB" <<'PY'
-import sys, struct
-data = open(sys.argv[1], 'rb').read()
-assert len(data) >= 160 + 640*480*4, f"framebuffer too small: {len(data)}"
-pix = data[160:160+640*480*4]
-target = bytes([0x00, 0x88, 0xFF, 0x00])  # BGRX bytes for RGB 0xFF8800
-match = sum(1 for i in range(0, len(pix), 4) if pix[i:i+4] == target)
-frac = match / (640*480)
-print(f"matching pixels: {match}/{640*480} = {frac:.3%}")
-assert frac > 0.95, f"fill color coverage too low: {frac:.3%}"
-print("PASS: framebuffer is filled with the X client's color")
-PY
-
-rm -f "$FB"
-echo "== M4b PASS =="
diff --git a/experiments/wasm-gui/scripts/test-m5-multiclient.sh b/experiments/wasm-gui/scripts/test-m5-multiclient.sh
deleted file mode 100755
index 706d9620f..000000000
--- a/experiments/wasm-gui/scripts/test-m5-multiclient.sh
+++ /dev/null
@@ -1,50 +0,0 @@
-#!/usr/bin/env bash
-# M5 multi-client test: run the wasm Xvfb X server + THREE independent raw-X11 wasm clients in one
-# secure-exec VM, each drawing a different-colored rectangle over AF_UNIX, and assert the shared
-# server's framebuffer contains all three colors composited together.
-set -euo pipefail
-cd "$(dirname "$0")/.."
-EXP="$(pwd)"
-REPO="$(cd ../.. && pwd)"
-
-HOST="$REPO/target/debug/wasm-gui-host"
-SIDECAR="$REPO/target/debug/secure-exec-sidecar"
-XVFB="$EXP/Xvfb.wasm"
-XFILL="$EXP/guest-xclient/xfill.wasm"
-FB="$(mktemp /tmp/m5-fb.XXXXXX.bin)"
-
-for f in "$HOST" "$SIDECAR" "$XVFB" "$XFILL"; do
-  [ -f "$f" ] || { echo "MISSING: $f (build it first)"; exit 1; }
-done
-
-echo "== running Xvfb + 3 X clients in one VM =="
-timeout 90 env -u DISPLAY "$HOST" --xdemo --timeout 22 \
-  --server "$XVFB" \
-  --client "$XFILL 0 0 -1 -1 16746496" \
-  --client "$XFILL 80 80 200 150 65280" \
-  --client "$XFILL 360 250 200 150 255" \
-  --fb-out "$FB" --sidecar "$SIDECAR" \
-  -- :0 -screen 0 640x480x24 -nolisten tcp -nolock -listen local -noreset -fbdir /data > /tmp/m5-run.log 2>&1 || true
-
-python3 - "$FB" <<'PY'
-import sys
-data = open(sys.argv[1], 'rb').read()
-pix = data[160:160+640*480*4]
-# BGRX bytes: orange 0xFF8800 -> 0088ff00, green 0x00FF00 -> 00ff0000, blue 0x0000FF -> ff000000
-want = {"orange bg": b'\x00\x88\xff\x00', "green rect": b'\x00\xff\x00\x00', "blue rect": b'\xff\x00\x00\x00'}
-counts = {k: 0 for k in want}
-for i in range(0, len(pix), 4):
-    px = pix[i:i+4]
-    for k, v in want.items():
-        if px == v:
-            counts[k] += 1
-for k, n in counts.items():
-    print(f"  {k}: {n} px")
-assert counts["orange bg"] > 100000, "background fill missing"
-assert counts["green rect"] >= 25000, "green client did not render"
-assert counts["blue rect"] >= 25000, "blue client did not render"
-print("PASS: all three X clients rendered onto the shared wasm X server")
-PY
-
-rm -f "$FB"
-echo "== M5 multi-client PASS =="
diff --git a/experiments/wasm-gui/scripts/test-m5-twm.sh b/experiments/wasm-gui/scripts/test-m5-twm.sh
deleted file mode 100755
index 5a24fe0d6..000000000
--- a/experiments/wasm-gui/scripts/test-m5-twm.sh
+++ /dev/null
@@ -1,46 +0,0 @@
-#!/usr/bin/env bash
-# Automated M5 test: run the standard window manager twm + a real libX11 client window in one
-# secure-exec VM (all cross-compiled to wasm), and assert the captured framebuffer shows the
-# WM-decorated client window: the client's window body + content rectangles AND twm's title-bar
-# decoration. Proves a standard, unmodified window manager manages a real toolkit client.
-set -uo pipefail
-cd "$(dirname "$0")/.."
-EXP="$(pwd)"
-REPO="$(cd ../.. && pwd)"
-
-HOST="$REPO/target/debug/wasm-gui-host"
-SIDECAR="$REPO/target/debug/secure-exec-sidecar"
-XVFB="$EXP/Xvfb.wasm"
-TWM="$EXP/twm.wasm"
-XWIN="$EXP/guest-xclient/xwin.wasm"
-FB="$(mktemp /tmp/m5twm-fb.XXXXXX.bin)"
-
-for f in "$HOST" "$SIDECAR" "$XVFB" "$TWM" "$XWIN"; do
-  [ -f "$f" ] || { echo "MISSING: $f (build it first)"; exit 1; }
-done
-
-echo "== running Xvfb + twm (WM) + a libX11 client window in one VM =="
-timeout 90 env -u DISPLAY "$HOST" --xdemo --timeout 30 \
-  --server "$XVFB" --client "$TWM" --client "$XWIN" \
-  --fb-out "$FB" --sidecar "$SIDECAR" \
-  -- :0 -screen 0 640x480x24 -nolisten tcp -nolock -listen local -noreset -fbdir /data > /tmp/m5twm-run.log 2>&1 || true
-
-python3 - "$FB" <<'PY'
-import sys
-data = open(sys.argv[1], 'rb').read()
-pix = data[160:160+640*480*4]
-# BGRX bytes: window body 0x3060C0->c0603000, green 0x20A020->20a02000, twm title highlight white
-counts = {}
-for name, hexv in [("window body","c0603000"), ("green rect","20a02000"),
-                   ("client white","f0f0f000"), ("twm titlebar","ffffff00")]:
-    counts[name] = sum(1 for i in range(0,len(pix),4) if pix[i:i+4].hex()==hexv)
-for k,v in counts.items():
-    print(f"  {k}: {v} px")
-assert counts["window body"] > 20000, "client window not mapped by the WM"
-assert counts["green rect"] > 3000 and counts["client white"] > 3000, "client did not draw into its window"
-assert counts["twm titlebar"] > 500, "twm did not decorate the window with a title bar"
-print("PASS: twm decorated and is managing the libX11 client window")
-PY
-
-rm -f "$FB"
-echo "== M5 twm window-manager PASS =="
diff --git a/experiments/wasm-gui/scripts/test-m6-desktop.sh b/experiments/wasm-gui/scripts/test-m6-desktop.sh
deleted file mode 100755
index b249197b7..000000000
--- a/experiments/wasm-gui/scripts/test-m6-desktop.sh
+++ /dev/null
@@ -1,39 +0,0 @@
-#!/usr/bin/env bash
-# M6 test: a robust multi-app desktop — the standard X.Org window manager twm managing a real
-# libX11 client window AND a stock xclock app, all wasm in one secure-exec VM, with real X core
-# fonts. Asserts the framebuffer shows the WM-decorated client window (body + content + title bar).
-set -uo pipefail
-cd "$(dirname "$0")/.."
-EXP="$(pwd)"; REPO="$(cd ../.. && pwd)"
-HOST="$REPO/target/debug/wasm-gui-host"; SIDECAR="$REPO/target/debug/secure-exec-sidecar"
-FB="$(mktemp /tmp/m6-fb.XXXXXX.bin)"
-FONTS="${VMFONTS:-/tmp/vmfonts}"
-
-for f in "$HOST" "$SIDECAR" "$EXP/Xvfb.wasm" "$EXP/twm.wasm" "$EXP/xclock.wasm" "$EXP/guest-xclient/xwin.wasm"; do
-  [ -f "$f" ] || { echo "MISSING: $f"; exit 1; }
-done
-[ -d "$FONTS" ] || { echo "MISSING fonts dir $FONTS (set VMFONTS)"; exit 1; }
-
-echo "== twm + xclock + a libX11 window, with X core fonts =="
-timeout 90 env -u DISPLAY "$HOST" --xdemo --timeout 40 \
-  --server "$EXP/Xvfb.wasm" \
-  --client "$EXP/twm.wasm" \
-  --client "$EXP/xclock.wasm -analog" \
-  --client "$EXP/guest-xclient/xwin.wasm" \
-  --fonts-dir "$FONTS" --fb-out "$FB" --sidecar "$SIDECAR" \
-  -- :0 -screen 0 640x480x24 -nolisten tcp -nolock -listen local -noreset -fbdir /data -fp /fonts > /tmp/m6-run.log 2>&1 || true
-
-grep -q "window manager is ready" /tmp/m6-run.log || { echo "FAIL: WM did not signal ready"; exit 1; }
-python3 - "$FB" <<'PY'
-import sys
-data=open(sys.argv[1],'rb').read(); pix=data[160:160+640*480*4]
-def cnt(hexv): return sum(1 for i in range(0,len(pix),4) if pix[i:i+4].hex()==hexv)
-body=cnt("c0603000"); green=cnt("20a02000"); title=cnt("ffffff00")
-print(f"  window body: {body}  green rect: {green}  twm titlebar/white: {title}")
-assert body > 20000, "WM did not map the client window"
-assert green > 2000, "client did not draw into its window"
-assert title > 1000, "twm did not decorate (no title bar)"
-print("PASS: twm manages a real libX11 window + a stock xclock, with real fonts")
-PY
-rm -f "$FB"
-echo "== M6 desktop PASS =="
diff --git a/experiments/wasm-gui/tests/RESULTS.txt b/experiments/wasm-gui/tests/RESULTS.txt
deleted file mode 100644
index 950da28f1..000000000
--- a/experiments/wasm-gui/tests/RESULTS.txt
+++ /dev/null
@@ -1,9 +0,0 @@
-## M1 automated test (through secure-exec) — 2026-06-20T07:37:35Z
-build: guest.wasm OK (102752 bytes)
-build: wasm-gui-host + secure-exec-sidecar OK
-  secure-exec: captured 1228812 bytes -> /tmp/tmp.H5nUlMEVbF/frame_secureexec.bin
-secure-exec capture: 1228812 bytes
-  header OK (640x480), 7 golden pixels match
-frame size: 1228812 bytes == 12 + 640*480*4 (exact)
-proof PNG: /home/nathan/tmp/gui-progress/assets/frame_secureexec.png (8006 bytes)
-RESULT: PASS (frame rendered by guest INSIDE secure-exec, via the standard Rust client)
diff --git a/experiments/wasm-gui/tests/check.mjs b/experiments/wasm-gui/tests/check.mjs
deleted file mode 100644
index b746f32a9..000000000
--- a/experiments/wasm-gui/tests/check.mjs
+++ /dev/null
@@ -1,71 +0,0 @@
-#!/usr/bin/env node
-// Frame validator + golden-pixel regression check (milestone M0).
-//   node check.mjs <frame.bin> <golden.json> [--bless]
-// Validates the v0 header, samples fixed coordinates on the raw RGBA payload, and compares them
-// to golden.json (or writes it with --bless). Operates on raw bytes only — no PNG in the loop.
-
-import { readFileSync, writeFileSync, existsSync } from "node:fs";
-
-const [, , binPath, goldenPath, mode] = process.argv;
-if (!binPath || !goldenPath) {
-  console.error("usage: node check.mjs <frame.bin> <golden.json> [--bless]");
-  process.exit(2);
-}
-
-const EXPECT_W = 640;
-const EXPECT_H = 480;
-// Coordinates chosen to hit distinct regions: panel bg, accent dot, wallpaper, inactive title
-// bar, active title bar, window body, cursor tip.
-const COORDS = [
-  [2, 4],
-  [10, 11],
-  [320, 30],
-  [80, 105],
-  [520, 175],
-  [400, 300],
-  [300, 235],
-];
-
-const buf = readFileSync(binPath);
-
-function fail(msg) {
-  console.error(`FAIL: ${msg}`);
-  process.exit(1);
-}
-
-if (buf.length < 12) fail(`frame too small (${buf.length} bytes)`);
-const magic = buf.subarray(0, 4).toString("latin1");
-if (magic !== "SXFB") fail(`bad magic ${JSON.stringify(magic)} (want "SXFB")`);
-const w = buf.readUInt32LE(4);
-const h = buf.readUInt32LE(8);
-if (w !== EXPECT_W || h !== EXPECT_H) fail(`bad dims ${w}x${h} (want ${EXPECT_W}x${EXPECT_H})`);
-const expectedLen = 12 + w * h * 4;
-if (buf.length !== expectedLen) fail(`bad length ${buf.length} (want ${expectedLen})`);
-
-function px(x, y) {
-  const o = 12 + (y * w + x) * 4;
-  return [buf[o], buf[o + 1], buf[o + 2], buf[o + 3]];
-}
-
-const samples = {};
-for (const [x, y] of COORDS) samples[`${x},${y}`] = px(x, y);
-
-if (mode === "--bless") {
-  writeFileSync(goldenPath, JSON.stringify(samples, null, 2) + "\n");
-  console.error(`blessed golden -> ${goldenPath}`);
-  process.exit(0);
-}
-
-if (!existsSync(goldenPath)) fail(`no golden file at ${goldenPath} (run with --bless first)`);
-const golden = JSON.parse(readFileSync(goldenPath, "utf8"));
-let mismatches = 0;
-for (const key of Object.keys(golden)) {
-  const got = samples[key];
-  const want = golden[key];
-  if (!got || JSON.stringify(got) !== JSON.stringify(want)) {
-    console.error(`  pixel ${key}: got ${JSON.stringify(got)} want ${JSON.stringify(want)}`);
-    mismatches++;
-  }
-}
-if (mismatches) fail(`${mismatches} golden-pixel mismatch(es)`);
-console.error(`header OK (${w}x${h}), ${COORDS.length} golden pixels match`);
diff --git a/experiments/wasm-gui/tests/golden-nuklear.json b/experiments/wasm-gui/tests/golden-nuklear.json
deleted file mode 100644
index ba68bbcc8..000000000
--- a/experiments/wasm-gui/tests/golden-nuklear.json
+++ /dev/null
@@ -1,44 +0,0 @@
-{
-  "2,4": [
-    28,
-    64,
-    96,
-    255
-  ],
-  "10,11": [
-    28,
-    64,
-    96,
-    255
-  ],
-  "320,30": [
-    28,
-    64,
-    96,
-    255
-  ],
-  "80,105": [
-    45,
-    45,
-    45,
-    255
-  ],
-  "520,175": [
-    40,
-    40,
-    40,
-    255
-  ],
-  "400,300": [
-    45,
-    45,
-    45,
-    255
-  ],
-  "300,235": [
-    38,
-    38,
-    38,
-    255
-  ]
-}
diff --git a/experiments/wasm-gui/tests/golden.json b/experiments/wasm-gui/tests/golden.json
deleted file mode 100644
index 978ce9c1e..000000000
--- a/experiments/wasm-gui/tests/golden.json
+++ /dev/null
@@ -1,44 +0,0 @@
-{
-  "2,4": [
-    24,
-    28,
-    38,
-    255
-  ],
-  "10,11": [
-    93,
-    176,
-    255,
-    255
-  ],
-  "320,30": [
-    31,
-    82,
-    119,
-    255
-  ],
-  "80,105": [
-    70,
-    78,
-    92,
-    255
-  ],
-  "520,175": [
-    59,
-    110,
-    165,
-    255
-  ],
-  "400,300": [
-    244,
-    245,
-    247,
-    255
-  ],
-  "300,235": [
-    245,
-    245,
-    245,
-    255
-  ]
-}
diff --git a/experiments/wasm-gui/tests/run-nuklear.sh b/experiments/wasm-gui/tests/run-nuklear.sh
deleted file mode 100755
index 32db786b6..000000000
--- a/experiments/wasm-gui/tests/run-nuklear.sh
+++ /dev/null
@@ -1,63 +0,0 @@
-#!/usr/bin/env bash
-# Automated M3 test: cross-compile the REAL Nuklear toolkit guest to wasm (wasi-sdk), run it THROUGH
-# the secure-exec V8 sidecar via the Rust client, read back the framebuffer, validate header +
-# golden pixels, emit a PNG proof. Headless; no display.
-#
-#   ./tests/run-nuklear.sh           verify against committed golden
-#   ./tests/run-nuklear.sh --bless   (re)generate golden-nuklear.json
-set -euo pipefail
-
-cd "$(dirname "$0")/.."
-EXP="$(pwd)"
-REPO="$(cd ../.. && pwd)"
-GUEST_WASM="$EXP/guest-nuklear/guest_nuklear.wasm"
-HOST_BIN="$REPO/target/debug/wasm-gui-host"
-SIDECAR_BIN="$REPO/target/debug/secure-exec-sidecar"
-GOLDEN="$EXP/tests/golden-nuklear.json"
-ASSETS="${PROOF_ASSETS:-$HOME/tmp/gui-progress/assets}"
-BLESS="${1:-}"
-
-WORK="$(mktemp -d)"; trap 'rm -rf "$WORK"' EXIT
-FRAME="$WORK/frame_nuklear.bin"
-mkdir -p "$ASSETS"
-emit() { printf '%s\n' "$*"; }
-
-emit "## M3 automated test (real Nuklear toolkit through secure-exec) — $(date -u +%Y-%m-%dT%H:%M:%SZ)"
-
-# 1. Build the Nuklear guest with wasi-sdk
-emit "[1/6] building Nuklear guest (wasi-sdk -> wasm32-wasip1)…"
-"$EXP/scripts/build-nuklear.sh" >/dev/null
-[ -f "$GUEST_WASM" ] || { emit "FAIL: guest_nuklear.wasm not built"; exit 1; }
-emit "build: guest_nuklear.wasm OK ($(stat -c%s "$GUEST_WASM") bytes)"
-
-# 2. Ensure host + sidecar exist
-emit "[2/6] ensuring host + sidecar…"
-( cd "$REPO" && cargo build -p secure-exec-sidecar -p wasm-gui-host >/dev/null 2>&1 )
-[ -x "$HOST_BIN" ] && [ -x "$SIDECAR_BIN" ] || { emit "FAIL: host/sidecar missing"; exit 1; }
-
-# 3. Run the real toolkit THROUGH secure-exec
-emit "[3/6] running Nuklear toolkit inside the secure-exec V8 sidecar…"
-env -u DISPLAY -u WAYLAND_DISPLAY "$HOST_BIN" \
-    --capture "$FRAME" --guest "$GUEST_WASM" --sidecar "$SIDECAR_BIN" 2>&1 | sed 's/^/  /'
-[ -f "$FRAME" ] || { emit "FAIL: no frame captured"; exit 1; }
-
-# 4. Header + golden pixels
-emit "[4/6] validating header + golden pixels…"
-if [ "$BLESS" = "--bless" ]; then
-  node "$EXP/tests/check.mjs" "$FRAME" "$GOLDEN" --bless
-fi
-node "$EXP/tests/check.mjs" "$FRAME" "$GOLDEN" 2>&1 | sed 's/^/  /'
-
-# 5. Exact frame size
-EXPECT=$((12 + 640*480*4))
-GOT=$(stat -c%s "$FRAME")
-[ "$GOT" = "$EXPECT" ] || { emit "FAIL: frame size $GOT != $EXPECT"; exit 1; }
-emit "frame size: $GOT bytes == 12 + 640*480*4 (exact)"
-
-# 6. PNG proof
-emit "[6/6] PNG proof…"
-tail -c +13 "$FRAME" > "$WORK/raw.rgba"
-ffmpeg -y -f rawvideo -pixel_format rgba -video_size 640x480 -i "$WORK/raw.rgba" \
-  -frames:v 1 "$ASSETS/frame_nuklear.png" >/dev/null 2>&1
-emit "proof PNG: $ASSETS/frame_nuklear.png"
-emit "RESULT: PASS (real Nuklear toolkit rendered INSIDE secure-exec, via the Rust client)"
diff --git a/experiments/wasm-gui/tests/run.sh b/experiments/wasm-gui/tests/run.sh
deleted file mode 100755
index d783e5588..000000000
--- a/experiments/wasm-gui/tests/run.sh
+++ /dev/null
@@ -1,74 +0,0 @@
-#!/usr/bin/env bash
-# Automated M1 test: build the wasm guest, run it THROUGH THE REAL secure-exec V8 sidecar via the
-# standard Rust client host (no wasmer/node:wasi), read the framebuffer back through the client,
-# validate the header, check golden pixels, and emit a PNG proof. Headless; no network.
-#
-#   ./tests/run.sh           verify against the committed golden
-#   ./tests/run.sh --bless   (re)generate golden.json from the current build
-set -euo pipefail
-
-cd "$(dirname "$0")/.."
-EXP="$(pwd)"
-REPO="$(cd ../.. && pwd)"
-GUEST_WASM="$EXP/guest/target/wasm32-wasip1/release/guest.wasm"
-HOST_BIN="$REPO/target/debug/wasm-gui-host"
-SIDECAR_BIN="$REPO/target/debug/secure-exec-sidecar"
-GOLDEN="$EXP/tests/golden.json"
-RESULTS="$EXP/tests/RESULTS.txt"
-ASSETS="${PROOF_ASSETS:-$HOME/tmp/gui-progress/assets}"
-BLESS="${1:-}"
-
-WORK="$(mktemp -d)"; trap 'rm -rf "$WORK"' EXIT
-FRAME="$WORK/frame_secureexec.bin"
-mkdir -p "$ASSETS"; : > "$RESULTS"
-emit() { printf '%s\n' "$*" | tee -a "$RESULTS"; }
-log() { printf '%s\n' "$*"; }
-
-emit "## M1 automated test (through secure-exec) — $(date -u +%Y-%m-%dT%H:%M:%SZ)"
-
-# 1. Build guest (standalone wasm workspace)
-log "[1/7] building guest (wasm32-wasip1)…"
-( cd "$EXP/guest" && cargo build --target wasm32-wasip1 --release >/dev/null 2>&1 )
-[ -f "$GUEST_WASM" ] || { emit "FAIL: guest.wasm not built"; exit 1; }
-emit "build: guest.wasm OK ($(stat -c%s "$GUEST_WASM") bytes)"
-
-# 2. Build host + sidecar (root workspace, shared lock)
-log "[2/7] building host + sidecar (root workspace)…"
-( cd "$REPO" && cargo build -p secure-exec-sidecar -p wasm-gui-host >/dev/null 2>&1 )
-[ -x "$HOST_BIN" ]    || { emit "FAIL: host binary missing"; exit 1; }
-[ -x "$SIDECAR_BIN" ] || { emit "FAIL: sidecar binary missing"; exit 1; }
-emit "build: wasm-gui-host + secure-exec-sidecar OK"
-
-# 3. Capture a frame THROUGH secure-exec (guest runs inside the V8 sidecar)
-log "[3/7] running guest through secure-exec V8 sidecar…"
-env -u DISPLAY -u WAYLAND_DISPLAY "$HOST_BIN" \
-    --capture "$FRAME" --guest "$GUEST_WASM" --sidecar "$SIDECAR_BIN" 2>&1 | sed 's/^/  /' | tee -a "$RESULTS"
-[ -f "$FRAME" ] || { emit "FAIL: no frame captured through secure-exec"; exit 1; }
-emit "secure-exec capture: $(stat -c%s "$FRAME") bytes"
-
-# 4. Validate header + golden pixels on the raw framebuffer
-log "[4/7] validating header + golden pixels…"
-if [ "$BLESS" = "--bless" ]; then
-  node "$EXP/tests/check.mjs" "$FRAME" "$GOLDEN" --bless
-  emit "golden: blessed from secure-exec capture"
-fi
-node "$EXP/tests/check.mjs" "$FRAME" "$GOLDEN" 2>&1 | sed 's/^/  /' | tee -a "$RESULTS"
-
-# 5. Sanity: exact byte size of a 640x480 RGBA frame + header
-log "[5/7] frame size check…"
-EXPECT=$((12 + 640*480*4))
-GOT=$(stat -c%s "$FRAME")
-[ "$GOT" = "$EXPECT" ] || { emit "FAIL: frame size $GOT != $EXPECT"; exit 1; }
-emit "frame size: $GOT bytes == 12 + 640*480*4 (exact)"
-
-# 6. PNG proof (human artifact only)
-log "[6/7] encoding PNG proof…"
-tail -c +13 "$FRAME" > "$WORK/raw.rgba"
-ffmpeg -y -f rawvideo -pixel_format rgba -video_size 640x480 -i "$WORK/raw.rgba" \
-  -frames:v 1 "$ASSETS/frame_secureexec.png" >/dev/null 2>&1
-cp "$FRAME" "$ASSETS/frame_secureexec.bin"
-emit "proof PNG: $ASSETS/frame_secureexec.png ($(stat -c%s "$ASSETS/frame_secureexec.png") bytes)"
-
-# 7. Done
-emit "RESULT: PASS (frame rendered by guest INSIDE secure-exec, via the standard Rust client)"
-log "[7/7] PASS"
diff --git a/experiments/wasm-gui/third_party/libXext/Makefile b/experiments/wasm-gui/third_party/libXext/Makefile
deleted file mode 100644
index ec343a48f..000000000
--- a/experiments/wasm-gui/third_party/libXext/Makefile
+++ /dev/null
@@ -1,956 +0,0 @@
-# Makefile.in generated by automake 1.18.1 from Makefile.am.
-# Makefile.  Generated from Makefile.in by configure.
-
-# Copyright (C) 1994-2025 Free Software Foundation, Inc.
-
-# This Makefile.in is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-
-
-
-am__is_gnu_make = { \
-  if test -z '$(MAKELEVEL)'; then \
-    false; \
-  elif test -n '$(MAKE_HOST)'; then \
-    true; \
-  elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \
-    true; \
-  else \
-    false; \
-  fi; \
-}
-am__make_running_with_option = \
-  case $${target_option-} in \
-      ?) ;; \
-      *) echo "am__make_running_with_option: internal error: invalid" \
-              "target option '$${target_option-}' specified" >&2; \
-         exit 1;; \
-  esac; \
-  has_opt=no; \
-  sane_makeflags=$$MAKEFLAGS; \
-  if $(am__is_gnu_make); then \
-    sane_makeflags=$$MFLAGS; \
-  else \
-    case $$MAKEFLAGS in \
-      *\\[\ \	]*) \
-        bs=\\; \
-        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
-          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
-    esac; \
-  fi; \
-  skip_next=no; \
-  strip_trailopt () \
-  { \
-    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
-  }; \
-  for flg in $$sane_makeflags; do \
-    test $$skip_next = yes && { skip_next=no; continue; }; \
-    case $$flg in \
-      *=*|--*) continue;; \
-        -*I) strip_trailopt 'I'; skip_next=yes;; \
-      -*I?*) strip_trailopt 'I';; \
-        -*O) strip_trailopt 'O'; skip_next=yes;; \
-      -*O?*) strip_trailopt 'O';; \
-        -*l) strip_trailopt 'l'; skip_next=yes;; \
-      -*l?*) strip_trailopt 'l';; \
-      -[dEDm]) skip_next=yes;; \
-      -[JT]) skip_next=yes;; \
-    esac; \
-    case $$flg in \
-      *$$target_option*) has_opt=yes; break;; \
-    esac; \
-  done; \
-  test $$has_opt = yes
-am__make_dryrun = (target_option=n; $(am__make_running_with_option))
-am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
-am__rm_f = rm -f $(am__rm_f_notfound)
-am__rm_rf = rm -rf $(am__rm_f_notfound)
-pkgdatadir = $(datadir)/libXext
-pkgincludedir = $(includedir)/libXext
-pkglibdir = $(libdir)/libXext
-pkglibexecdir = $(libexecdir)/libXext
-am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
-install_sh_DATA = $(install_sh) -c -m 644
-install_sh_PROGRAM = $(install_sh) -c
-install_sh_SCRIPT = $(install_sh) -c
-INSTALL_HEADER = $(INSTALL_DATA)
-transform = $(program_transform_name)
-NORMAL_INSTALL = :
-PRE_INSTALL = :
-POST_INSTALL = :
-NORMAL_UNINSTALL = :
-PRE_UNINSTALL = :
-POST_UNINSTALL = :
-build_triplet = x86_64-pc-linux-gnu
-host_triplet = wasm32-unknown-wasi
-subdir = .
-ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/ax_gcc_builtin.m4 \
-	$(top_srcdir)/m4/libtool.m4 $(top_srcdir)/m4/ltoptions.m4 \
-	$(top_srcdir)/m4/ltsugar.m4 $(top_srcdir)/m4/ltversion.m4 \
-	$(top_srcdir)/m4/lt~obsolete.m4 $(top_srcdir)/configure.ac
-am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
-	$(ACLOCAL_M4)
-DIST_COMMON = $(srcdir)/Makefile.am $(top_srcdir)/configure \
-	$(am__configure_deps) $(am__DIST_COMMON)
-am__CONFIG_DISTCLEAN_FILES = config.status config.cache config.log \
- configure.lineno config.status.lineno
-mkinstalldirs = $(install_sh) -d
-CONFIG_HEADER = config.h
-CONFIG_CLEAN_FILES = xext.pc
-CONFIG_CLEAN_VPATH_FILES =
-AM_V_P = $(am__v_P_$(V))
-am__v_P_ = $(am__v_P_$(AM_DEFAULT_VERBOSITY))
-am__v_P_0 = false
-am__v_P_1 = :
-AM_V_GEN = $(am__v_GEN_$(V))
-am__v_GEN_ = $(am__v_GEN_$(AM_DEFAULT_VERBOSITY))
-am__v_GEN_0 = @echo "  GEN     " $@;
-am__v_GEN_1 = 
-AM_V_at = $(am__v_at_$(V))
-am__v_at_ = $(am__v_at_$(AM_DEFAULT_VERBOSITY))
-am__v_at_0 = @
-am__v_at_1 = 
-SOURCES =
-DIST_SOURCES =
-RECURSIVE_TARGETS = all-recursive check-recursive cscopelist-recursive \
-	ctags-recursive dvi-recursive html-recursive info-recursive \
-	install-data-recursive install-dvi-recursive \
-	install-exec-recursive install-html-recursive \
-	install-info-recursive install-pdf-recursive \
-	install-ps-recursive install-recursive installcheck-recursive \
-	installdirs-recursive pdf-recursive ps-recursive \
-	tags-recursive uninstall-recursive
-am__can_run_installinfo = \
-  case $$AM_UPDATE_INFO_DIR in \
-    n|no|NO) false;; \
-    *) (install-info --version) >/dev/null 2>&1;; \
-  esac
-am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
-am__vpath_adj = case $$p in \
-    $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
-    *) f=$$p;; \
-  esac;
-am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
-am__install_max = 40
-am__nobase_strip_setup = \
-  srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
-am__nobase_strip = \
-  for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
-am__nobase_list = $(am__nobase_strip_setup); \
-  for p in $$list; do echo "$$p $$p"; done | \
-  sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
-  $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
-    if (++n[$$2] == $(am__install_max)) \
-      { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
-    END { for (dir in files) print dir, files[dir] }'
-am__base_list = \
-  sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
-  sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
-am__uninstall_files_from_dir = { \
-  { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
-  || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
-       $(am__cd) "$$dir" && echo $$files | $(am__xargs_n) 40 $(am__rm_f); }; \
-  }
-am__installdirs = "$(DESTDIR)$(pkgconfigdir)"
-DATA = $(pkgconfig_DATA)
-RECURSIVE_CLEAN_TARGETS = mostlyclean-recursive clean-recursive	\
-  distclean-recursive maintainer-clean-recursive
-am__recursive_targets = \
-  $(RECURSIVE_TARGETS) \
-  $(RECURSIVE_CLEAN_TARGETS) \
-  $(am__extra_recursive_targets)
-AM_RECURSIVE_TARGETS = $(am__recursive_targets:-recursive=) TAGS CTAGS \
-	cscope distdir distdir-am dist dist-all distcheck
-am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP) \
-	config.h.in
-# Read a list of newline-separated strings from the standard input,
-# and print each of them once, without duplicates.  Input order is
-# *not* preserved.
-am__uniquify_input = $(AWK) '\
-  BEGIN { nonempty = 0; } \
-  { items[$$0] = 1; nonempty = 1; } \
-  END { if (nonempty) { for (i in items) print i; }; } \
-'
-# Make sure the list of sources is unique.  This is necessary because,
-# e.g., the same source file might be shared among _SOURCES variables
-# for different programs/libraries.
-am__define_uniq_tagged_files = \
-  list='$(am__tagged_files)'; \
-  unique=`for i in $$list; do \
-    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
-  done | $(am__uniquify_input)`
-DIST_SUBDIRS = $(SUBDIRS)
-am__DIST_COMMON = $(srcdir)/Makefile.in $(srcdir)/config.h.in \
-	$(srcdir)/xext.pc.in AUTHORS COPYING ChangeLog INSTALL \
-	README.md compile config.guess config.sub install-sh ltmain.sh \
-	missing
-DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
-distdir = $(PACKAGE)-$(VERSION)
-top_distdir = $(distdir)
-am__remove_distdir = \
-  if test -d "$(distdir)"; then \
-    find "$(distdir)" -type d ! -perm -700 -exec chmod u+rwx {} ';' \
-      ; rm -rf "$(distdir)" \
-      || { sleep 5 && rm -rf "$(distdir)"; }; \
-  else :; fi
-am__post_remove_distdir = $(am__remove_distdir)
-am__relativize = \
-  dir0=`pwd`; \
-  sed_first='s,^\([^/]*\)/.*$$,\1,'; \
-  sed_rest='s,^[^/]*/*,,'; \
-  sed_last='s,^.*/\([^/]*\)$$,\1,'; \
-  sed_butlast='s,/*[^/]*$$,,'; \
-  while test -n "$$dir1"; do \
-    first=`echo "$$dir1" | sed -e "$$sed_first"`; \
-    if test "$$first" != "."; then \
-      if test "$$first" = ".."; then \
-        dir2=`echo "$$dir0" | sed -e "$$sed_last"`/"$$dir2"; \
-        dir0=`echo "$$dir0" | sed -e "$$sed_butlast"`; \
-      else \
-        first2=`echo "$$dir2" | sed -e "$$sed_first"`; \
-        if test "$$first2" = "$$first"; then \
-          dir2=`echo "$$dir2" | sed -e "$$sed_rest"`; \
-        else \
-          dir2="../$$dir2"; \
-        fi; \
-        dir0="$$dir0"/"$$first"; \
-      fi; \
-    fi; \
-    dir1=`echo "$$dir1" | sed -e "$$sed_rest"`; \
-  done; \
-  reldir="$$dir2"
-DIST_ARCHIVES = $(distdir).tar.gz $(distdir).tar.xz
-GZIP_ENV = -9
-DIST_TARGETS = dist-xz dist-gzip
-# Exists only to be overridden by the user if desired.
-AM_DISTCHECK_DVI_TARGET = dvi
-distuninstallcheck_listfiles = find . -type f -print
-am__distuninstallcheck_listfiles = $(distuninstallcheck_listfiles) \
-  | sed 's|^\./|$(prefix)/|' | grep -v '$(infodir)/dir$$'
-distcleancheck_listfiles = \
-  find . \( -type f -a \! \
-            \( -name .nfs* -o -name .smb* -o -name .__afs* \) \) -print
-ACLOCAL = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' aclocal-1.18
-ADMIN_MAN_DIR = $(mandir)/man$(ADMIN_MAN_SUFFIX)
-ADMIN_MAN_SUFFIX = 8
-AMTAR = $${TAR-tar}
-AM_DEFAULT_VERBOSITY = 0
-APP_MAN_DIR = $(mandir)/man$(APP_MAN_SUFFIX)
-APP_MAN_SUFFIX = 1
-AR = /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ar
-AUTOCONF = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' autoconf
-AUTOHEADER = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' autoheader
-AUTOMAKE = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' automake-1.18
-AWK = mawk
-BASE_CFLAGS =  -Wall -Wpointer-arith -Wmissing-declarations -Wformat=2 -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Wbad-function-cast -Wold-style-definition -Wunused -Wuninitialized -Wshadow -Wmissing-noreturn -Wmissing-format-attribute -Wredundant-decls -Werror=implicit -Werror=nonnull -Werror=init-self -Werror=main -Werror=missing-braces -Werror=sequence-point -Werror=return-type -Werror=trigraphs -Werror=array-bounds -Werror=write-strings -Werror=address -Werror=int-to-pointer-cast -Werror=pointer-to-int-cast
-CC = /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23
-CCDEPMODE = depmode=gcc3
-CFLAGS = --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h
-CHANGELOG_CMD = ((GIT_DIR=$(top_srcdir)/.git git log > $(top_srcdir)/.changelog.tmp) 2>/dev/null && mv $(top_srcdir)/.changelog.tmp $(top_srcdir)/ChangeLog) || (rm -f $(top_srcdir)/.changelog.tmp; test -e $(top_srcdir)/ChangeLog || ( touch $(top_srcdir)/ChangeLog; echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))
-CPPFLAGS = --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include
-CSCOPE = cscope
-CTAGS = ctags
-CWARNFLAGS =  -Wall -Wpointer-arith -Wmissing-declarations -Wformat=2 -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Wbad-function-cast -Wold-style-definition -Wunused -Wuninitialized -Wshadow -Wmissing-noreturn -Wmissing-format-attribute -Wredundant-decls -Werror=implicit -Werror=nonnull -Werror=init-self -Werror=main -Werror=missing-braces -Werror=sequence-point -Werror=return-type -Werror=trigraphs -Werror=array-bounds -Werror=write-strings -Werror=address -Werror=int-to-pointer-cast -Werror=pointer-to-int-cast -fno-strict-aliasing
-CYGPATH_W = echo
-DEFS = -DHAVE_CONFIG_H
-DEPDIR = .deps
-DLLTOOL = dlltool
-DRIVER_MAN_DIR = $(mandir)/man$(DRIVER_MAN_SUFFIX)
-DRIVER_MAN_SUFFIX = 4
-DSYMUTIL = 
-DUMPBIN = :
-ECHO_C = 
-ECHO_N = -n
-ECHO_T = 
-EGREP = /usr/bin/grep -E
-ETAGS = etags
-EXEEXT = 
-FGREP = /usr/bin/grep -F
-FILECMD = file
-FILE_MAN_DIR = $(mandir)/man$(FILE_MAN_SUFFIX)
-FILE_MAN_SUFFIX = 5
-FOP = 
-GREP = /usr/bin/grep
-INSTALL = /usr/bin/install -c
-INSTALL_CMD = (cp -f /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/util-macros/INSTALL $(top_srcdir)/.INSTALL.tmp && mv $(top_srcdir)/.INSTALL.tmp $(top_srcdir)/INSTALL) || (rm -f $(top_srcdir)/.INSTALL.tmp; test -e $(top_srcdir)/INSTALL || ( touch $(top_srcdir)/INSTALL; echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))
-INSTALL_DATA = ${INSTALL} -m 644
-INSTALL_PROGRAM = ${INSTALL}
-INSTALL_SCRIPT = ${INSTALL}
-INSTALL_STRIP_PROGRAM = $(install_sh) -c -s
-LD = /home/linuxbrew/.linuxbrew/bin/ld
-LDFLAGS = --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman
-LIBOBJS = 
-LIBS = 
-LIBTOOL = $(SHELL) $(top_builddir)/libtool
-LIB_MAN_DIR = $(mandir)/man$(LIB_MAN_SUFFIX)
-LIB_MAN_SUFFIX = 3
-LINT = 
-LINTLIB = 
-LINT_FLAGS = 
-LIPO = 
-LN_S = ln -s
-LTLIBOBJS = 
-LT_SYS_LIBRARY_PATH = 
-MAKEINFO = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' makeinfo
-MALLOC_ZERO_CFLAGS = -DMALLOC_0_RETURNS_NULL
-MANIFEST_TOOL = :
-MAN_SUBSTS = 	-e 's|__vendorversion__|"$(PACKAGE_STRING)" "$(XORG_MAN_PAGE)"|' 	-e 's|__xorgversion__|"$(PACKAGE_STRING)" "$(XORG_MAN_PAGE)"|' 	-e 's|__xservername__|Xorg|g' 	-e 's|__xconfigfile__|xorg.conf|g' 	-e 's|__projectroot__|$(prefix)|g' 	-e 's|__apploaddir__|$(appdefaultdir)|g' 	-e 's|__appmansuffix__|$(APP_MAN_SUFFIX)|g' 	-e 's|__drivermansuffix__|$(DRIVER_MAN_SUFFIX)|g' 	-e 's|__adminmansuffix__|$(ADMIN_MAN_SUFFIX)|g' 	-e 's|__libmansuffix__|$(LIB_MAN_SUFFIX)|g' 	-e 's|__miscmansuffix__|$(MISC_MAN_SUFFIX)|g' 	-e 's|__filemansuffix__|$(FILE_MAN_SUFFIX)|g'
-MISC_MAN_DIR = $(mandir)/man$(MISC_MAN_SUFFIX)
-MISC_MAN_SUFFIX = 7
-MKDIR_P = /usr/bin/mkdir -p
-NM = nm
-NMEDIT = 
-OBJDUMP = objdump
-OBJEXT = o
-OTOOL = 
-OTOOL64 = 
-PACKAGE = libXext
-PACKAGE_BUGREPORT = https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues
-PACKAGE_NAME = libXext
-PACKAGE_STRING = libXext 1.3.7
-PACKAGE_TARNAME = libXext
-PACKAGE_URL = 
-PACKAGE_VERSION = 1.3.7
-PATH_SEPARATOR = :
-PKG_CONFIG = /usr/bin/pkg-config
-PKG_CONFIG_LIBDIR = /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/pkgconfig
-PKG_CONFIG_PATH = 
-RANLIB = /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ranlib
-SED = /usr/bin/sed
-SET_MAKE = 
-SHELL = /bin/bash
-STRICT_CFLAGS =  -pedantic -Werror -Werror=attributes
-STRIP = strip
-STYLESHEET_SRCDIR = 
-VERSION = 1.3.7
-XEXT_CFLAGS = -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include 
-XEXT_LIBS = -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -lX11 
-XEXT_SOREV = 6:4:0
-XMALLOC_ZERO_CFLAGS = -DMALLOC_0_RETURNS_NULL
-XMLTO = 
-XORG_MAN_PAGE = X Version 11
-XORG_SGML_PATH = 
-XSLTPROC = /home/linuxbrew/.linuxbrew/bin/xsltproc
-XSL_STYLESHEET = 
-XTMALLOC_ZERO_CFLAGS = -DMALLOC_0_RETURNS_NULL -DXTMALLOC_BC
-abs_builddir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext
-abs_srcdir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext
-abs_top_builddir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext
-abs_top_srcdir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext
-ac_ct_AR = 
-ac_ct_CC = 
-ac_ct_DUMPBIN = link -dump
-am__include = include
-am__leading_dot = .
-am__quote = 
-am__rm_f_notfound = 
-am__tar = tar --format=ustar -chf - "$$tardir"
-am__untar = tar -xf -
-am__xargs_n = xargs -n
-bindir = ${exec_prefix}/bin
-build = x86_64-pc-linux-gnu
-build_alias = 
-build_cpu = x86_64
-build_os = linux-gnu
-build_vendor = pc
-builddir = .
-datadir = ${datarootdir}
-datarootdir = ${prefix}/share
-docdir = ${datarootdir}/doc/${PACKAGE_TARNAME}
-dvidir = ${docdir}
-exec_prefix = ${prefix}
-host = wasm32-unknown-wasi
-host_alias = wasm32-wasi
-host_cpu = wasm32
-host_os = wasi
-host_vendor = unknown
-htmldir = ${docdir}
-includedir = ${prefix}/include
-infodir = ${datarootdir}/info
-install_sh = ${SHELL} /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/install-sh
-libdir = ${exec_prefix}/lib
-libexecdir = ${exec_prefix}/libexec
-localedir = ${datarootdir}/locale
-localstatedir = ${prefix}/var
-mandir = ${datarootdir}/man
-mkdir_p = $(MKDIR_P)
-oldincludedir = /usr/include
-pdfdir = ${docdir}
-prefix = /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix
-program_transform_name = s,x,x,
-psdir = ${docdir}
-runstatedir = ${localstatedir}/run
-sbindir = ${exec_prefix}/sbin
-sharedstatedir = ${prefix}/com
-srcdir = .
-sysconfdir = ${prefix}/etc
-target_alias = 
-top_build_prefix = 
-top_builddir = .
-top_srcdir = .
-SUBDIRS = man src specs
-ACLOCAL_AMFLAGS = -I m4
-pkgconfigdir = $(libdir)/pkgconfig
-pkgconfig_DATA = xext.pc
-MAINTAINERCLEANFILES = ChangeLog INSTALL
-EXTRA_DIST = README.md
-all: config.h
-	$(MAKE) $(AM_MAKEFLAGS) all-recursive
-
-.SUFFIXES:
-am--refresh: Makefile
-	@:
-$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
-	@for dep in $?; do \
-	  case '$(am__configure_deps)' in \
-	    *$$dep*) \
-	      echo ' cd $(srcdir) && $(AUTOMAKE) --foreign'; \
-	      $(am__cd) $(srcdir) && $(AUTOMAKE) --foreign \
-		&& exit 0; \
-	      exit 1;; \
-	  esac; \
-	done; \
-	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign Makefile'; \
-	$(am__cd) $(top_srcdir) && \
-	  $(AUTOMAKE) --foreign Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
-	@case '$?' in \
-	  *config.status*) \
-	    echo ' $(SHELL) ./config.status'; \
-	    $(SHELL) ./config.status;; \
-	  *) \
-	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $@ $(am__maybe_remake_depfiles)'; \
-	    cd $(top_builddir) && $(SHELL) ./config.status $@ $(am__maybe_remake_depfiles);; \
-	esac;
-
-$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
-	$(SHELL) ./config.status --recheck
-
-$(top_srcdir)/configure:  $(am__configure_deps)
-	$(am__cd) $(srcdir) && $(AUTOCONF)
-$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
-	$(am__cd) $(srcdir) && $(ACLOCAL) $(ACLOCAL_AMFLAGS)
-$(am__aclocal_m4_deps):
-
-config.h: stamp-h1
-	@test -f $@ || rm -f stamp-h1
-	@test -f $@ || $(MAKE) $(AM_MAKEFLAGS) stamp-h1
-
-stamp-h1: $(srcdir)/config.h.in $(top_builddir)/config.status
-	$(AM_V_at)rm -f stamp-h1
-	$(AM_V_GEN)cd $(top_builddir) && $(SHELL) ./config.status config.h
-$(srcdir)/config.h.in:  $(am__configure_deps) 
-	$(AM_V_GEN)($(am__cd) $(top_srcdir) && $(AUTOHEADER))
-	$(AM_V_at)rm -f stamp-h1
-	$(AM_V_at)touch $@
-
-distclean-hdr:
-	-rm -f config.h stamp-h1
-xext.pc: $(top_builddir)/config.status $(srcdir)/xext.pc.in
-	cd $(top_builddir) && $(SHELL) ./config.status $@
-
-mostlyclean-libtool:
-	-rm -f *.lo
-
-clean-libtool:
-	-rm -rf .libs _libs
-
-distclean-libtool:
-	-rm -f libtool config.lt
-install-pkgconfigDATA: $(pkgconfig_DATA)
-	@$(NORMAL_INSTALL)
-	@list='$(pkgconfig_DATA)'; test -n "$(pkgconfigdir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(pkgconfigdir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(pkgconfigdir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(pkgconfigdir)'"; \
-	  $(INSTALL_DATA) $$files "$(DESTDIR)$(pkgconfigdir)" || exit $$?; \
-	done
-
-uninstall-pkgconfigDATA:
-	@$(NORMAL_UNINSTALL)
-	@list='$(pkgconfig_DATA)'; test -n "$(pkgconfigdir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(pkgconfigdir)'; $(am__uninstall_files_from_dir)
-
-# This directory's subdirectories are mostly independent; you can cd
-# into them and run 'make' without going through this Makefile.
-# To change the values of 'make' variables: instead of editing Makefiles,
-# (1) if the variable is set in 'config.status', edit 'config.status'
-#     (which will cause the Makefiles to be regenerated when you run 'make');
-# (2) otherwise, pass the desired values on the 'make' command line.
-$(am__recursive_targets):
-	@fail=; \
-	if $(am__make_keepgoing); then \
-	  failcom='fail=yes'; \
-	else \
-	  failcom='exit 1'; \
-	fi; \
-	dot_seen=no; \
-	target=`echo $@ | sed s/-recursive//`; \
-	case "$@" in \
-	  distclean-* | maintainer-clean-*) list='$(DIST_SUBDIRS)' ;; \
-	  *) list='$(SUBDIRS)' ;; \
-	esac; \
-	for subdir in $$list; do \
-	  echo "Making $$target in $$subdir"; \
-	  if test "$$subdir" = "."; then \
-	    dot_seen=yes; \
-	    local_target="$$target-am"; \
-	  else \
-	    local_target="$$target"; \
-	  fi; \
-	  ($(am__cd) $$subdir && $(MAKE) $(AM_MAKEFLAGS) $$local_target) \
-	  || eval $$failcom; \
-	done; \
-	if test "$$dot_seen" = "no"; then \
-	  $(MAKE) $(AM_MAKEFLAGS) "$$target-am" || exit 1; \
-	fi; test -z "$$fail"
-
-ID: $(am__tagged_files)
-	$(am__define_uniq_tagged_files); mkid -fID $$unique
-tags: tags-recursive
-TAGS: tags
-
-tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
-	set x; \
-	here=`pwd`; \
-	if ($(ETAGS) --etags-include --version) >/dev/null 2>&1; then \
-	  include_option=--etags-include; \
-	  empty_fix=.; \
-	else \
-	  include_option=--include; \
-	  empty_fix=; \
-	fi; \
-	list='$(SUBDIRS)'; for subdir in $$list; do \
-	  if test "$$subdir" = .; then :; else \
-	    test ! -f $$subdir/TAGS || \
-	      set "$$@" "$$include_option=$$here/$$subdir/TAGS"; \
-	  fi; \
-	done; \
-	$(am__define_uniq_tagged_files); \
-	shift; \
-	if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
-	  test -n "$$unique" || unique=$$empty_fix; \
-	  if test $$# -gt 0; then \
-	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
-	      "$$@" $$unique; \
-	  else \
-	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
-	      $$unique; \
-	  fi; \
-	fi
-ctags: ctags-recursive
-
-CTAGS: ctags
-ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
-	$(am__define_uniq_tagged_files); \
-	test -z "$(CTAGS_ARGS)$$unique" \
-	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
-	     $$unique
-
-GTAGS:
-	here=`$(am__cd) $(top_builddir) && pwd` \
-	  && $(am__cd) $(top_srcdir) \
-	  && gtags -i $(GTAGS_ARGS) "$$here"
-cscope: cscope.files
-	test ! -s cscope.files \
-	  || $(CSCOPE) -b -q $(AM_CSCOPEFLAGS) $(CSCOPEFLAGS) -i cscope.files $(CSCOPE_ARGS)
-clean-cscope:
-	-rm -f cscope.files
-cscope.files: clean-cscope cscopelist
-cscopelist: cscopelist-recursive
-
-cscopelist-am: $(am__tagged_files)
-	list='$(am__tagged_files)'; \
-	case "$(srcdir)" in \
-	  [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
-	  *) sdir=$(subdir)/$(srcdir) ;; \
-	esac; \
-	for i in $$list; do \
-	  if test -f "$$i"; then \
-	    echo "$(subdir)/$$i"; \
-	  else \
-	    echo "$$sdir/$$i"; \
-	  fi; \
-	done >> $(top_builddir)/cscope.files
-
-distclean-tags:
-	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
-	-rm -f cscope.out cscope.in.out cscope.po.out cscope.files
-
-distdir: $(BUILT_SOURCES)
-	$(MAKE) $(AM_MAKEFLAGS) distdir-am
-
-distdir-am: $(DISTFILES)
-	$(am__remove_distdir)
-	$(AM_V_at)$(MKDIR_P) "$(distdir)"
-	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	list='$(DISTFILES)'; \
-	  dist_files=`for file in $$list; do echo $$file; done | \
-	  sed -e "s|^$$srcdirstrip/||;t" \
-	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
-	case $$dist_files in \
-	  */*) $(MKDIR_P) `echo "$$dist_files" | \
-			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
-			   sort -u` ;; \
-	esac; \
-	for file in $$dist_files; do \
-	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
-	  if test -d $$d/$$file; then \
-	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
-	    if test -d "$(distdir)/$$file"; then \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
-	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
-	  else \
-	    test -f "$(distdir)/$$file" \
-	    || cp -p $$d/$$file "$(distdir)/$$file" \
-	    || exit 1; \
-	  fi; \
-	done
-	@list='$(DIST_SUBDIRS)'; for subdir in $$list; do \
-	  if test "$$subdir" = .; then :; else \
-	    $(am__make_dryrun) \
-	      || test -d "$(distdir)/$$subdir" \
-	      || $(MKDIR_P) "$(distdir)/$$subdir" \
-	      || exit 1; \
-	    dir1=$$subdir; dir2="$(distdir)/$$subdir"; \
-	    $(am__relativize); \
-	    new_distdir=$$reldir; \
-	    dir1=$$subdir; dir2="$(top_distdir)"; \
-	    $(am__relativize); \
-	    new_top_distdir=$$reldir; \
-	    echo " (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) top_distdir="$$new_top_distdir" distdir="$$new_distdir" \\"; \
-	    echo "     am__remove_distdir=: am__skip_length_check=: am__skip_mode_fix=: distdir)"; \
-	    ($(am__cd) $$subdir && \
-	      $(MAKE) $(AM_MAKEFLAGS) \
-	        top_distdir="$$new_top_distdir" \
-	        distdir="$$new_distdir" \
-		am__remove_distdir=: \
-		am__skip_length_check=: \
-		am__skip_mode_fix=: \
-	        distdir) \
-	      || exit 1; \
-	  fi; \
-	done
-	$(MAKE) $(AM_MAKEFLAGS) \
-	  top_distdir="$(top_distdir)" distdir="$(distdir)" \
-	  dist-hook
-	-test -n "$(am__skip_mode_fix)" \
-	|| find "$(distdir)" -type d ! -perm -755 \
-		-exec chmod u+rwx,go+rx {} \; -o \
-	  ! -type d ! -perm -444 -links 1 -exec chmod a+r {} \; -o \
-	  ! -type d ! -perm -400 -exec chmod a+r {} \; -o \
-	  ! -type d ! -perm -444 -exec $(install_sh) -c -m a+r {} {} \; \
-	|| chmod -R a+r "$(distdir)"
-dist-gzip: distdir
-	tardir=$(distdir) && $(am__tar) | eval GZIP= gzip $(GZIP_ENV) -c >$(distdir).tar.gz
-	$(am__post_remove_distdir)
-
-dist-bzip2: distdir
-	tardir=$(distdir) && $(am__tar) | BZIP2=$${BZIP2--9} bzip2 -c >$(distdir).tar.bz2
-	$(am__post_remove_distdir)
-
-dist-bzip3: distdir
-	tardir=$(distdir) && $(am__tar) | bzip3 -c >$(distdir).tar.bz3
-	$(am__post_remove_distdir)
-
-dist-lzip: distdir
-	tardir=$(distdir) && $(am__tar) | lzip -c $${LZIP_OPT--9} >$(distdir).tar.lz
-	$(am__post_remove_distdir)
-dist-xz: distdir
-	tardir=$(distdir) && $(am__tar) | XZ_OPT=$${XZ_OPT--e} xz -c >$(distdir).tar.xz
-	$(am__post_remove_distdir)
-
-dist-zstd: distdir
-	tardir=$(distdir) && $(am__tar) | zstd -c $${ZSTD_CLEVEL-$${ZSTD_OPT--19}} >$(distdir).tar.zst
-	$(am__post_remove_distdir)
-
-dist-tarZ: distdir
-	@echo WARNING: "Support for distribution archives compressed with" \
-		       "legacy program 'compress' is deprecated." >&2
-	@echo WARNING: "It will be removed altogether in Automake 2.0" >&2
-	tardir=$(distdir) && $(am__tar) | compress -c >$(distdir).tar.Z
-	$(am__post_remove_distdir)
-
-dist-shar: distdir
-	@echo WARNING: "Support for shar distribution archives is" \
-	               "deprecated." >&2
-	@echo WARNING: "It will be removed altogether in Automake 2.0" >&2
-	shar $(distdir) | eval GZIP= gzip $(GZIP_ENV) -c >$(distdir).shar.gz
-	$(am__post_remove_distdir)
-
-dist-zip: distdir
-	-rm -f $(distdir).zip
-	zip -rq $(distdir).zip $(distdir)
-	$(am__post_remove_distdir)
-
-dist dist-all:
-	$(MAKE) $(AM_MAKEFLAGS) $(DIST_TARGETS) am__post_remove_distdir='@:'
-	$(am__post_remove_distdir)
-
-# This target untars the dist file and tries a VPATH configuration.  Then
-# it guarantees that the distribution is self-contained by making another
-# tarfile.
-distcheck: dist
-	case '$(DIST_ARCHIVES)' in \
-	*.tar.gz*) \
-	  eval GZIP= gzip -dc $(distdir).tar.gz | $(am__untar) ;;\
-	*.tar.bz2*) \
-	  bzip2 -dc $(distdir).tar.bz2 | $(am__untar) ;;\
-	*.tar.bz3*) \
-	  bzip3 -dc $(distdir).tar.bz3 | $(am__untar) ;;\
-	*.tar.lz*) \
-	  lzip -dc $(distdir).tar.lz | $(am__untar) ;;\
-	*.tar.xz*) \
-	  xz -dc $(distdir).tar.xz | $(am__untar) ;;\
-	*.tar.Z*) \
-	  uncompress -c $(distdir).tar.Z | $(am__untar) ;;\
-	*.shar.gz*) \
-	  eval GZIP= gzip -dc $(distdir).shar.gz | unshar ;;\
-	*.zip*) \
-	  unzip $(distdir).zip ;;\
-	*.tar.zst*) \
-	  zstd -dc $(distdir).tar.zst | $(am__untar) ;;\
-	esac
-	chmod -R a-w $(distdir)
-	chmod u+w $(distdir)
-	mkdir $(distdir)/_build $(distdir)/_build/sub $(distdir)/_inst
-	chmod a-w $(distdir)
-	test -d $(distdir)/_build || exit 0; \
-	dc_install_base=`$(am__cd) $(distdir)/_inst && pwd | sed -e 's,^[^:\\/]:[\\/],/,'` \
-	  && dc_destdir="$${TMPDIR-/tmp}/am-dc-$$$$/" \
-	  && am__cwd=`pwd` \
-	  && $(am__cd) $(distdir)/_build/sub \
-	  && ../../configure \
-	    $(AM_DISTCHECK_CONFIGURE_FLAGS) \
-	    $(DISTCHECK_CONFIGURE_FLAGS) \
-	    --srcdir=../.. --prefix="$$dc_install_base" \
-	  && $(MAKE) $(AM_MAKEFLAGS) \
-	  && $(MAKE) $(AM_MAKEFLAGS) $(AM_DISTCHECK_DVI_TARGET) \
-	  && $(MAKE) $(AM_MAKEFLAGS) check \
-	  && $(MAKE) $(AM_MAKEFLAGS) install \
-	  && $(MAKE) $(AM_MAKEFLAGS) installcheck \
-	  && $(MAKE) $(AM_MAKEFLAGS) uninstall \
-	  && $(MAKE) $(AM_MAKEFLAGS) distuninstallcheck_dir="$$dc_install_base" \
-	        distuninstallcheck \
-	  && chmod -R a-w "$$dc_install_base" \
-	  && ({ \
-	       (cd ../.. && umask 077 && mkdir "$$dc_destdir") \
-	       && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" install \
-	       && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" uninstall \
-	       && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" \
-	            distuninstallcheck_dir="$$dc_destdir" distuninstallcheck; \
-	      } || { rm -rf "$$dc_destdir"; exit 1; }) \
-	  && rm -rf "$$dc_destdir" \
-	  && $(MAKE) $(AM_MAKEFLAGS) dist \
-	  && rm -rf $(DIST_ARCHIVES) \
-	  && $(MAKE) $(AM_MAKEFLAGS) distcleancheck \
-	  && cd "$$am__cwd" \
-	  || exit 1
-	$(am__post_remove_distdir)
-	@(echo "$(distdir) archives ready for distribution: "; \
-	  list='$(DIST_ARCHIVES)'; for i in $$list; do echo $$i; done) | \
-	  sed -e 1h -e 1s/./=/g -e 1p -e 1x -e '$$p' -e '$$x'
-distuninstallcheck:
-	@test -n '$(distuninstallcheck_dir)' || { \
-	  echo 'ERROR: trying to run $@ with an empty' \
-	       '$$(distuninstallcheck_dir)' >&2; \
-	  exit 1; \
-	}; \
-	$(am__cd) '$(distuninstallcheck_dir)' || { \
-	  echo 'ERROR: cannot chdir into $(distuninstallcheck_dir)' >&2; \
-	  exit 1; \
-	}; \
-	test `$(am__distuninstallcheck_listfiles) | wc -l` -eq 0 \
-	   || { echo "ERROR: files left after uninstall:" ; \
-	        if test -n "$(DESTDIR)"; then \
-	          echo "  (check DESTDIR support)"; \
-	        fi ; \
-	        $(distuninstallcheck_listfiles) ; \
-	        exit 1; } >&2
-distcleancheck: distclean
-	@if test '$(srcdir)' = . ; then \
-	  echo "ERROR: distcleancheck can only run from a VPATH build" ; \
-	  exit 1 ; \
-	fi
-	@test `$(distcleancheck_listfiles) | wc -l` -eq 0 \
-	  || { echo "ERROR: files left in build directory after distclean:" ; \
-	       $(distcleancheck_listfiles) ; \
-	       exit 1; } >&2
-check-am: all-am
-check: check-recursive
-all-am: Makefile $(DATA) config.h
-installdirs: installdirs-recursive
-installdirs-am:
-	for dir in "$(DESTDIR)$(pkgconfigdir)"; do \
-	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
-	done
-install: install-recursive
-install-exec: install-exec-recursive
-install-data: install-data-recursive
-uninstall: uninstall-recursive
-
-install-am: all-am
-	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
-
-installcheck: installcheck-recursive
-install-strip:
-	if test -z '$(STRIP)'; then \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	      install; \
-	else \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
-	fi
-mostlyclean-generic:
-
-clean-generic:
-
-distclean-generic:
-	-$(am__rm_f) $(CONFIG_CLEAN_FILES)
-	-test . = "$(srcdir)" || $(am__rm_f) $(CONFIG_CLEAN_VPATH_FILES)
-
-maintainer-clean-generic:
-	@echo "This command is intended for maintainers to use"
-	@echo "it deletes files that may require special tools to rebuild."
-	-$(am__rm_f) $(MAINTAINERCLEANFILES)
-clean: clean-recursive
-
-clean-am: clean-generic clean-libtool mostlyclean-am
-
-distclean: distclean-recursive
-	-rm -f $(am__CONFIG_DISTCLEAN_FILES)
-	-rm -f Makefile
-distclean-am: clean-am distclean-generic distclean-hdr \
-	distclean-libtool distclean-tags
-
-dvi: dvi-recursive
-
-dvi-am:
-
-html: html-recursive
-
-html-am:
-
-info: info-recursive
-
-info-am:
-
-install-data-am: install-pkgconfigDATA
-
-install-dvi: install-dvi-recursive
-
-install-dvi-am:
-
-install-exec-am:
-
-install-html: install-html-recursive
-
-install-html-am:
-
-install-info: install-info-recursive
-
-install-info-am:
-
-install-man:
-
-install-pdf: install-pdf-recursive
-
-install-pdf-am:
-
-install-ps: install-ps-recursive
-
-install-ps-am:
-
-installcheck-am:
-
-maintainer-clean: maintainer-clean-recursive
-	-rm -f $(am__CONFIG_DISTCLEAN_FILES)
-	-rm -rf $(top_srcdir)/autom4te.cache
-	-rm -f Makefile
-maintainer-clean-am: distclean-am maintainer-clean-generic
-
-mostlyclean: mostlyclean-recursive
-
-mostlyclean-am: mostlyclean-generic mostlyclean-libtool
-
-pdf: pdf-recursive
-
-pdf-am:
-
-ps: ps-recursive
-
-ps-am:
-
-uninstall-am: uninstall-pkgconfigDATA
-
-.MAKE: $(am__recursive_targets) all install-am install-strip
-
-.PHONY: $(am__recursive_targets) CTAGS GTAGS TAGS all all-am \
-	am--refresh check check-am clean clean-cscope clean-generic \
-	clean-libtool cscope cscopelist-am ctags ctags-am dist \
-	dist-all dist-bzip2 dist-bzip3 dist-gzip dist-hook dist-lzip \
-	dist-shar dist-tarZ dist-xz dist-zip dist-zstd distcheck \
-	distclean distclean-generic distclean-hdr distclean-libtool \
-	distclean-tags distcleancheck distdir distuninstallcheck dvi \
-	dvi-am html html-am info info-am install install-am \
-	install-data install-data-am install-dvi install-dvi-am \
-	install-exec install-exec-am install-html install-html-am \
-	install-info install-info-am install-man install-pdf \
-	install-pdf-am install-pkgconfigDATA install-ps install-ps-am \
-	install-strip installcheck installcheck-am installdirs \
-	installdirs-am maintainer-clean maintainer-clean-generic \
-	mostlyclean mostlyclean-generic mostlyclean-libtool pdf pdf-am \
-	ps ps-am tags tags-am uninstall uninstall-am \
-	uninstall-pkgconfigDATA
-
-.PRECIOUS: Makefile
-
-
-.PHONY: ChangeLog INSTALL
-
-INSTALL:
-	$(INSTALL_CMD)
-
-ChangeLog:
-	$(CHANGELOG_CMD)
-
-dist-hook: ChangeLog INSTALL
-
-# Check source code with tools like lint & sparse
-#lint:
-#	(cd src && $(MAKE) $(MFLAGS) lint)
-
-# Tell versions [3.59,3.63) of GNU make to not export all variables.
-# Otherwise a system limit (for SysV at least) may be exceeded.
-.NOEXPORT:
-
-# Tell GNU make to disable its built-in pattern rules.
-%:: %,v
-%:: RCS/%,v
-%:: RCS/%
-%:: s.%
-%:: SCCS/s.%
diff --git a/experiments/wasm-gui/third_party/libXext/Makefile.in b/experiments/wasm-gui/third_party/libXext/Makefile.in
deleted file mode 100644
index b07c1f69c..000000000
--- a/experiments/wasm-gui/third_party/libXext/Makefile.in
+++ /dev/null
@@ -1,956 +0,0 @@
-# Makefile.in generated by automake 1.18.1 from Makefile.am.
-# @configure_input@
-
-# Copyright (C) 1994-2025 Free Software Foundation, Inc.
-
-# This Makefile.in is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-@SET_MAKE@
-
-VPATH = @srcdir@
-am__is_gnu_make = { \
-  if test -z '$(MAKELEVEL)'; then \
-    false; \
-  elif test -n '$(MAKE_HOST)'; then \
-    true; \
-  elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \
-    true; \
-  else \
-    false; \
-  fi; \
-}
-am__make_running_with_option = \
-  case $${target_option-} in \
-      ?) ;; \
-      *) echo "am__make_running_with_option: internal error: invalid" \
-              "target option '$${target_option-}' specified" >&2; \
-         exit 1;; \
-  esac; \
-  has_opt=no; \
-  sane_makeflags=$$MAKEFLAGS; \
-  if $(am__is_gnu_make); then \
-    sane_makeflags=$$MFLAGS; \
-  else \
-    case $$MAKEFLAGS in \
-      *\\[\ \	]*) \
-        bs=\\; \
-        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
-          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
-    esac; \
-  fi; \
-  skip_next=no; \
-  strip_trailopt () \
-  { \
-    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
-  }; \
-  for flg in $$sane_makeflags; do \
-    test $$skip_next = yes && { skip_next=no; continue; }; \
-    case $$flg in \
-      *=*|--*) continue;; \
-        -*I) strip_trailopt 'I'; skip_next=yes;; \
-      -*I?*) strip_trailopt 'I';; \
-        -*O) strip_trailopt 'O'; skip_next=yes;; \
-      -*O?*) strip_trailopt 'O';; \
-        -*l) strip_trailopt 'l'; skip_next=yes;; \
-      -*l?*) strip_trailopt 'l';; \
-      -[dEDm]) skip_next=yes;; \
-      -[JT]) skip_next=yes;; \
-    esac; \
-    case $$flg in \
-      *$$target_option*) has_opt=yes; break;; \
-    esac; \
-  done; \
-  test $$has_opt = yes
-am__make_dryrun = (target_option=n; $(am__make_running_with_option))
-am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
-am__rm_f = rm -f $(am__rm_f_notfound)
-am__rm_rf = rm -rf $(am__rm_f_notfound)
-pkgdatadir = $(datadir)/@PACKAGE@
-pkgincludedir = $(includedir)/@PACKAGE@
-pkglibdir = $(libdir)/@PACKAGE@
-pkglibexecdir = $(libexecdir)/@PACKAGE@
-am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
-install_sh_DATA = $(install_sh) -c -m 644
-install_sh_PROGRAM = $(install_sh) -c
-install_sh_SCRIPT = $(install_sh) -c
-INSTALL_HEADER = $(INSTALL_DATA)
-transform = $(program_transform_name)
-NORMAL_INSTALL = :
-PRE_INSTALL = :
-POST_INSTALL = :
-NORMAL_UNINSTALL = :
-PRE_UNINSTALL = :
-POST_UNINSTALL = :
-build_triplet = @build@
-host_triplet = @host@
-subdir = .
-ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/ax_gcc_builtin.m4 \
-	$(top_srcdir)/m4/libtool.m4 $(top_srcdir)/m4/ltoptions.m4 \
-	$(top_srcdir)/m4/ltsugar.m4 $(top_srcdir)/m4/ltversion.m4 \
-	$(top_srcdir)/m4/lt~obsolete.m4 $(top_srcdir)/configure.ac
-am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
-	$(ACLOCAL_M4)
-DIST_COMMON = $(srcdir)/Makefile.am $(top_srcdir)/configure \
-	$(am__configure_deps) $(am__DIST_COMMON)
-am__CONFIG_DISTCLEAN_FILES = config.status config.cache config.log \
- configure.lineno config.status.lineno
-mkinstalldirs = $(install_sh) -d
-CONFIG_HEADER = config.h
-CONFIG_CLEAN_FILES = xext.pc
-CONFIG_CLEAN_VPATH_FILES =
-AM_V_P = $(am__v_P_@AM_V@)
-am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
-am__v_P_0 = false
-am__v_P_1 = :
-AM_V_GEN = $(am__v_GEN_@AM_V@)
-am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
-am__v_GEN_0 = @echo "  GEN     " $@;
-am__v_GEN_1 = 
-AM_V_at = $(am__v_at_@AM_V@)
-am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
-am__v_at_0 = @
-am__v_at_1 = 
-SOURCES =
-DIST_SOURCES =
-RECURSIVE_TARGETS = all-recursive check-recursive cscopelist-recursive \
-	ctags-recursive dvi-recursive html-recursive info-recursive \
-	install-data-recursive install-dvi-recursive \
-	install-exec-recursive install-html-recursive \
-	install-info-recursive install-pdf-recursive \
-	install-ps-recursive install-recursive installcheck-recursive \
-	installdirs-recursive pdf-recursive ps-recursive \
-	tags-recursive uninstall-recursive
-am__can_run_installinfo = \
-  case $$AM_UPDATE_INFO_DIR in \
-    n|no|NO) false;; \
-    *) (install-info --version) >/dev/null 2>&1;; \
-  esac
-am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
-am__vpath_adj = case $$p in \
-    $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
-    *) f=$$p;; \
-  esac;
-am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
-am__install_max = 40
-am__nobase_strip_setup = \
-  srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
-am__nobase_strip = \
-  for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
-am__nobase_list = $(am__nobase_strip_setup); \
-  for p in $$list; do echo "$$p $$p"; done | \
-  sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
-  $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
-    if (++n[$$2] == $(am__install_max)) \
-      { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
-    END { for (dir in files) print dir, files[dir] }'
-am__base_list = \
-  sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
-  sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
-am__uninstall_files_from_dir = { \
-  { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
-  || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
-       $(am__cd) "$$dir" && echo $$files | $(am__xargs_n) 40 $(am__rm_f); }; \
-  }
-am__installdirs = "$(DESTDIR)$(pkgconfigdir)"
-DATA = $(pkgconfig_DATA)
-RECURSIVE_CLEAN_TARGETS = mostlyclean-recursive clean-recursive	\
-  distclean-recursive maintainer-clean-recursive
-am__recursive_targets = \
-  $(RECURSIVE_TARGETS) \
-  $(RECURSIVE_CLEAN_TARGETS) \
-  $(am__extra_recursive_targets)
-AM_RECURSIVE_TARGETS = $(am__recursive_targets:-recursive=) TAGS CTAGS \
-	cscope distdir distdir-am dist dist-all distcheck
-am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP) \
-	config.h.in
-# Read a list of newline-separated strings from the standard input,
-# and print each of them once, without duplicates.  Input order is
-# *not* preserved.
-am__uniquify_input = $(AWK) '\
-  BEGIN { nonempty = 0; } \
-  { items[$$0] = 1; nonempty = 1; } \
-  END { if (nonempty) { for (i in items) print i; }; } \
-'
-# Make sure the list of sources is unique.  This is necessary because,
-# e.g., the same source file might be shared among _SOURCES variables
-# for different programs/libraries.
-am__define_uniq_tagged_files = \
-  list='$(am__tagged_files)'; \
-  unique=`for i in $$list; do \
-    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
-  done | $(am__uniquify_input)`
-DIST_SUBDIRS = $(SUBDIRS)
-am__DIST_COMMON = $(srcdir)/Makefile.in $(srcdir)/config.h.in \
-	$(srcdir)/xext.pc.in AUTHORS COPYING ChangeLog INSTALL \
-	README.md compile config.guess config.sub install-sh ltmain.sh \
-	missing
-DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
-distdir = $(PACKAGE)-$(VERSION)
-top_distdir = $(distdir)
-am__remove_distdir = \
-  if test -d "$(distdir)"; then \
-    find "$(distdir)" -type d ! -perm -700 -exec chmod u+rwx {} ';' \
-      ; rm -rf "$(distdir)" \
-      || { sleep 5 && rm -rf "$(distdir)"; }; \
-  else :; fi
-am__post_remove_distdir = $(am__remove_distdir)
-am__relativize = \
-  dir0=`pwd`; \
-  sed_first='s,^\([^/]*\)/.*$$,\1,'; \
-  sed_rest='s,^[^/]*/*,,'; \
-  sed_last='s,^.*/\([^/]*\)$$,\1,'; \
-  sed_butlast='s,/*[^/]*$$,,'; \
-  while test -n "$$dir1"; do \
-    first=`echo "$$dir1" | sed -e "$$sed_first"`; \
-    if test "$$first" != "."; then \
-      if test "$$first" = ".."; then \
-        dir2=`echo "$$dir0" | sed -e "$$sed_last"`/"$$dir2"; \
-        dir0=`echo "$$dir0" | sed -e "$$sed_butlast"`; \
-      else \
-        first2=`echo "$$dir2" | sed -e "$$sed_first"`; \
-        if test "$$first2" = "$$first"; then \
-          dir2=`echo "$$dir2" | sed -e "$$sed_rest"`; \
-        else \
-          dir2="../$$dir2"; \
-        fi; \
-        dir0="$$dir0"/"$$first"; \
-      fi; \
-    fi; \
-    dir1=`echo "$$dir1" | sed -e "$$sed_rest"`; \
-  done; \
-  reldir="$$dir2"
-DIST_ARCHIVES = $(distdir).tar.gz $(distdir).tar.xz
-GZIP_ENV = -9
-DIST_TARGETS = dist-xz dist-gzip
-# Exists only to be overridden by the user if desired.
-AM_DISTCHECK_DVI_TARGET = dvi
-distuninstallcheck_listfiles = find . -type f -print
-am__distuninstallcheck_listfiles = $(distuninstallcheck_listfiles) \
-  | sed 's|^\./|$(prefix)/|' | grep -v '$(infodir)/dir$$'
-distcleancheck_listfiles = \
-  find . \( -type f -a \! \
-            \( -name .nfs* -o -name .smb* -o -name .__afs* \) \) -print
-ACLOCAL = @ACLOCAL@
-ADMIN_MAN_DIR = @ADMIN_MAN_DIR@
-ADMIN_MAN_SUFFIX = @ADMIN_MAN_SUFFIX@
-AMTAR = @AMTAR@
-AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
-APP_MAN_DIR = @APP_MAN_DIR@
-APP_MAN_SUFFIX = @APP_MAN_SUFFIX@
-AR = @AR@
-AUTOCONF = @AUTOCONF@
-AUTOHEADER = @AUTOHEADER@
-AUTOMAKE = @AUTOMAKE@
-AWK = @AWK@
-BASE_CFLAGS = @BASE_CFLAGS@
-CC = @CC@
-CCDEPMODE = @CCDEPMODE@
-CFLAGS = @CFLAGS@
-CHANGELOG_CMD = @CHANGELOG_CMD@
-CPPFLAGS = @CPPFLAGS@
-CSCOPE = @CSCOPE@
-CTAGS = @CTAGS@
-CWARNFLAGS = @CWARNFLAGS@
-CYGPATH_W = @CYGPATH_W@
-DEFS = @DEFS@
-DEPDIR = @DEPDIR@
-DLLTOOL = @DLLTOOL@
-DRIVER_MAN_DIR = @DRIVER_MAN_DIR@
-DRIVER_MAN_SUFFIX = @DRIVER_MAN_SUFFIX@
-DSYMUTIL = @DSYMUTIL@
-DUMPBIN = @DUMPBIN@
-ECHO_C = @ECHO_C@
-ECHO_N = @ECHO_N@
-ECHO_T = @ECHO_T@
-EGREP = @EGREP@
-ETAGS = @ETAGS@
-EXEEXT = @EXEEXT@
-FGREP = @FGREP@
-FILECMD = @FILECMD@
-FILE_MAN_DIR = @FILE_MAN_DIR@
-FILE_MAN_SUFFIX = @FILE_MAN_SUFFIX@
-FOP = @FOP@
-GREP = @GREP@
-INSTALL = @INSTALL@
-INSTALL_CMD = @INSTALL_CMD@
-INSTALL_DATA = @INSTALL_DATA@
-INSTALL_PROGRAM = @INSTALL_PROGRAM@
-INSTALL_SCRIPT = @INSTALL_SCRIPT@
-INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
-LD = @LD@
-LDFLAGS = @LDFLAGS@
-LIBOBJS = @LIBOBJS@
-LIBS = @LIBS@
-LIBTOOL = @LIBTOOL@
-LIB_MAN_DIR = @LIB_MAN_DIR@
-LIB_MAN_SUFFIX = @LIB_MAN_SUFFIX@
-LINT = @LINT@
-LINTLIB = @LINTLIB@
-LINT_FLAGS = @LINT_FLAGS@
-LIPO = @LIPO@
-LN_S = @LN_S@
-LTLIBOBJS = @LTLIBOBJS@
-LT_SYS_LIBRARY_PATH = @LT_SYS_LIBRARY_PATH@
-MAKEINFO = @MAKEINFO@
-MALLOC_ZERO_CFLAGS = @MALLOC_ZERO_CFLAGS@
-MANIFEST_TOOL = @MANIFEST_TOOL@
-MAN_SUBSTS = @MAN_SUBSTS@
-MISC_MAN_DIR = @MISC_MAN_DIR@
-MISC_MAN_SUFFIX = @MISC_MAN_SUFFIX@
-MKDIR_P = @MKDIR_P@
-NM = @NM@
-NMEDIT = @NMEDIT@
-OBJDUMP = @OBJDUMP@
-OBJEXT = @OBJEXT@
-OTOOL = @OTOOL@
-OTOOL64 = @OTOOL64@
-PACKAGE = @PACKAGE@
-PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
-PACKAGE_NAME = @PACKAGE_NAME@
-PACKAGE_STRING = @PACKAGE_STRING@
-PACKAGE_TARNAME = @PACKAGE_TARNAME@
-PACKAGE_URL = @PACKAGE_URL@
-PACKAGE_VERSION = @PACKAGE_VERSION@
-PATH_SEPARATOR = @PATH_SEPARATOR@
-PKG_CONFIG = @PKG_CONFIG@
-PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
-PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
-RANLIB = @RANLIB@
-SED = @SED@
-SET_MAKE = @SET_MAKE@
-SHELL = @SHELL@
-STRICT_CFLAGS = @STRICT_CFLAGS@
-STRIP = @STRIP@
-STYLESHEET_SRCDIR = @STYLESHEET_SRCDIR@
-VERSION = @VERSION@
-XEXT_CFLAGS = @XEXT_CFLAGS@
-XEXT_LIBS = @XEXT_LIBS@
-XEXT_SOREV = @XEXT_SOREV@
-XMALLOC_ZERO_CFLAGS = @XMALLOC_ZERO_CFLAGS@
-XMLTO = @XMLTO@
-XORG_MAN_PAGE = @XORG_MAN_PAGE@
-XORG_SGML_PATH = @XORG_SGML_PATH@
-XSLTPROC = @XSLTPROC@
-XSL_STYLESHEET = @XSL_STYLESHEET@
-XTMALLOC_ZERO_CFLAGS = @XTMALLOC_ZERO_CFLAGS@
-abs_builddir = @abs_builddir@
-abs_srcdir = @abs_srcdir@
-abs_top_builddir = @abs_top_builddir@
-abs_top_srcdir = @abs_top_srcdir@
-ac_ct_AR = @ac_ct_AR@
-ac_ct_CC = @ac_ct_CC@
-ac_ct_DUMPBIN = @ac_ct_DUMPBIN@
-am__include = @am__include@
-am__leading_dot = @am__leading_dot@
-am__quote = @am__quote@
-am__rm_f_notfound = @am__rm_f_notfound@
-am__tar = @am__tar@
-am__untar = @am__untar@
-am__xargs_n = @am__xargs_n@
-bindir = @bindir@
-build = @build@
-build_alias = @build_alias@
-build_cpu = @build_cpu@
-build_os = @build_os@
-build_vendor = @build_vendor@
-builddir = @builddir@
-datadir = @datadir@
-datarootdir = @datarootdir@
-docdir = @docdir@
-dvidir = @dvidir@
-exec_prefix = @exec_prefix@
-host = @host@
-host_alias = @host_alias@
-host_cpu = @host_cpu@
-host_os = @host_os@
-host_vendor = @host_vendor@
-htmldir = @htmldir@
-includedir = @includedir@
-infodir = @infodir@
-install_sh = @install_sh@
-libdir = @libdir@
-libexecdir = @libexecdir@
-localedir = @localedir@
-localstatedir = @localstatedir@
-mandir = @mandir@
-mkdir_p = @mkdir_p@
-oldincludedir = @oldincludedir@
-pdfdir = @pdfdir@
-prefix = @prefix@
-program_transform_name = @program_transform_name@
-psdir = @psdir@
-runstatedir = @runstatedir@
-sbindir = @sbindir@
-sharedstatedir = @sharedstatedir@
-srcdir = @srcdir@
-sysconfdir = @sysconfdir@
-target_alias = @target_alias@
-top_build_prefix = @top_build_prefix@
-top_builddir = @top_builddir@
-top_srcdir = @top_srcdir@
-SUBDIRS = man src specs
-ACLOCAL_AMFLAGS = -I m4
-pkgconfigdir = $(libdir)/pkgconfig
-pkgconfig_DATA = xext.pc
-MAINTAINERCLEANFILES = ChangeLog INSTALL
-EXTRA_DIST = README.md
-all: config.h
-	$(MAKE) $(AM_MAKEFLAGS) all-recursive
-
-.SUFFIXES:
-am--refresh: Makefile
-	@:
-$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
-	@for dep in $?; do \
-	  case '$(am__configure_deps)' in \
-	    *$$dep*) \
-	      echo ' cd $(srcdir) && $(AUTOMAKE) --foreign'; \
-	      $(am__cd) $(srcdir) && $(AUTOMAKE) --foreign \
-		&& exit 0; \
-	      exit 1;; \
-	  esac; \
-	done; \
-	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign Makefile'; \
-	$(am__cd) $(top_srcdir) && \
-	  $(AUTOMAKE) --foreign Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
-	@case '$?' in \
-	  *config.status*) \
-	    echo ' $(SHELL) ./config.status'; \
-	    $(SHELL) ./config.status;; \
-	  *) \
-	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $@ $(am__maybe_remake_depfiles)'; \
-	    cd $(top_builddir) && $(SHELL) ./config.status $@ $(am__maybe_remake_depfiles);; \
-	esac;
-
-$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
-	$(SHELL) ./config.status --recheck
-
-$(top_srcdir)/configure:  $(am__configure_deps)
-	$(am__cd) $(srcdir) && $(AUTOCONF)
-$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
-	$(am__cd) $(srcdir) && $(ACLOCAL) $(ACLOCAL_AMFLAGS)
-$(am__aclocal_m4_deps):
-
-config.h: stamp-h1
-	@test -f $@ || rm -f stamp-h1
-	@test -f $@ || $(MAKE) $(AM_MAKEFLAGS) stamp-h1
-
-stamp-h1: $(srcdir)/config.h.in $(top_builddir)/config.status
-	$(AM_V_at)rm -f stamp-h1
-	$(AM_V_GEN)cd $(top_builddir) && $(SHELL) ./config.status config.h
-$(srcdir)/config.h.in:  $(am__configure_deps) 
-	$(AM_V_GEN)($(am__cd) $(top_srcdir) && $(AUTOHEADER))
-	$(AM_V_at)rm -f stamp-h1
-	$(AM_V_at)touch $@
-
-distclean-hdr:
-	-rm -f config.h stamp-h1
-xext.pc: $(top_builddir)/config.status $(srcdir)/xext.pc.in
-	cd $(top_builddir) && $(SHELL) ./config.status $@
-
-mostlyclean-libtool:
-	-rm -f *.lo
-
-clean-libtool:
-	-rm -rf .libs _libs
-
-distclean-libtool:
-	-rm -f libtool config.lt
-install-pkgconfigDATA: $(pkgconfig_DATA)
-	@$(NORMAL_INSTALL)
-	@list='$(pkgconfig_DATA)'; test -n "$(pkgconfigdir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(pkgconfigdir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(pkgconfigdir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(pkgconfigdir)'"; \
-	  $(INSTALL_DATA) $$files "$(DESTDIR)$(pkgconfigdir)" || exit $$?; \
-	done
-
-uninstall-pkgconfigDATA:
-	@$(NORMAL_UNINSTALL)
-	@list='$(pkgconfig_DATA)'; test -n "$(pkgconfigdir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(pkgconfigdir)'; $(am__uninstall_files_from_dir)
-
-# This directory's subdirectories are mostly independent; you can cd
-# into them and run 'make' without going through this Makefile.
-# To change the values of 'make' variables: instead of editing Makefiles,
-# (1) if the variable is set in 'config.status', edit 'config.status'
-#     (which will cause the Makefiles to be regenerated when you run 'make');
-# (2) otherwise, pass the desired values on the 'make' command line.
-$(am__recursive_targets):
-	@fail=; \
-	if $(am__make_keepgoing); then \
-	  failcom='fail=yes'; \
-	else \
-	  failcom='exit 1'; \
-	fi; \
-	dot_seen=no; \
-	target=`echo $@ | sed s/-recursive//`; \
-	case "$@" in \
-	  distclean-* | maintainer-clean-*) list='$(DIST_SUBDIRS)' ;; \
-	  *) list='$(SUBDIRS)' ;; \
-	esac; \
-	for subdir in $$list; do \
-	  echo "Making $$target in $$subdir"; \
-	  if test "$$subdir" = "."; then \
-	    dot_seen=yes; \
-	    local_target="$$target-am"; \
-	  else \
-	    local_target="$$target"; \
-	  fi; \
-	  ($(am__cd) $$subdir && $(MAKE) $(AM_MAKEFLAGS) $$local_target) \
-	  || eval $$failcom; \
-	done; \
-	if test "$$dot_seen" = "no"; then \
-	  $(MAKE) $(AM_MAKEFLAGS) "$$target-am" || exit 1; \
-	fi; test -z "$$fail"
-
-ID: $(am__tagged_files)
-	$(am__define_uniq_tagged_files); mkid -fID $$unique
-tags: tags-recursive
-TAGS: tags
-
-tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
-	set x; \
-	here=`pwd`; \
-	if ($(ETAGS) --etags-include --version) >/dev/null 2>&1; then \
-	  include_option=--etags-include; \
-	  empty_fix=.; \
-	else \
-	  include_option=--include; \
-	  empty_fix=; \
-	fi; \
-	list='$(SUBDIRS)'; for subdir in $$list; do \
-	  if test "$$subdir" = .; then :; else \
-	    test ! -f $$subdir/TAGS || \
-	      set "$$@" "$$include_option=$$here/$$subdir/TAGS"; \
-	  fi; \
-	done; \
-	$(am__define_uniq_tagged_files); \
-	shift; \
-	if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
-	  test -n "$$unique" || unique=$$empty_fix; \
-	  if test $$# -gt 0; then \
-	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
-	      "$$@" $$unique; \
-	  else \
-	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
-	      $$unique; \
-	  fi; \
-	fi
-ctags: ctags-recursive
-
-CTAGS: ctags
-ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
-	$(am__define_uniq_tagged_files); \
-	test -z "$(CTAGS_ARGS)$$unique" \
-	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
-	     $$unique
-
-GTAGS:
-	here=`$(am__cd) $(top_builddir) && pwd` \
-	  && $(am__cd) $(top_srcdir) \
-	  && gtags -i $(GTAGS_ARGS) "$$here"
-cscope: cscope.files
-	test ! -s cscope.files \
-	  || $(CSCOPE) -b -q $(AM_CSCOPEFLAGS) $(CSCOPEFLAGS) -i cscope.files $(CSCOPE_ARGS)
-clean-cscope:
-	-rm -f cscope.files
-cscope.files: clean-cscope cscopelist
-cscopelist: cscopelist-recursive
-
-cscopelist-am: $(am__tagged_files)
-	list='$(am__tagged_files)'; \
-	case "$(srcdir)" in \
-	  [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
-	  *) sdir=$(subdir)/$(srcdir) ;; \
-	esac; \
-	for i in $$list; do \
-	  if test -f "$$i"; then \
-	    echo "$(subdir)/$$i"; \
-	  else \
-	    echo "$$sdir/$$i"; \
-	  fi; \
-	done >> $(top_builddir)/cscope.files
-
-distclean-tags:
-	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
-	-rm -f cscope.out cscope.in.out cscope.po.out cscope.files
-
-distdir: $(BUILT_SOURCES)
-	$(MAKE) $(AM_MAKEFLAGS) distdir-am
-
-distdir-am: $(DISTFILES)
-	$(am__remove_distdir)
-	$(AM_V_at)$(MKDIR_P) "$(distdir)"
-	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	list='$(DISTFILES)'; \
-	  dist_files=`for file in $$list; do echo $$file; done | \
-	  sed -e "s|^$$srcdirstrip/||;t" \
-	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
-	case $$dist_files in \
-	  */*) $(MKDIR_P) `echo "$$dist_files" | \
-			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
-			   sort -u` ;; \
-	esac; \
-	for file in $$dist_files; do \
-	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
-	  if test -d $$d/$$file; then \
-	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
-	    if test -d "$(distdir)/$$file"; then \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
-	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
-	  else \
-	    test -f "$(distdir)/$$file" \
-	    || cp -p $$d/$$file "$(distdir)/$$file" \
-	    || exit 1; \
-	  fi; \
-	done
-	@list='$(DIST_SUBDIRS)'; for subdir in $$list; do \
-	  if test "$$subdir" = .; then :; else \
-	    $(am__make_dryrun) \
-	      || test -d "$(distdir)/$$subdir" \
-	      || $(MKDIR_P) "$(distdir)/$$subdir" \
-	      || exit 1; \
-	    dir1=$$subdir; dir2="$(distdir)/$$subdir"; \
-	    $(am__relativize); \
-	    new_distdir=$$reldir; \
-	    dir1=$$subdir; dir2="$(top_distdir)"; \
-	    $(am__relativize); \
-	    new_top_distdir=$$reldir; \
-	    echo " (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) top_distdir="$$new_top_distdir" distdir="$$new_distdir" \\"; \
-	    echo "     am__remove_distdir=: am__skip_length_check=: am__skip_mode_fix=: distdir)"; \
-	    ($(am__cd) $$subdir && \
-	      $(MAKE) $(AM_MAKEFLAGS) \
-	        top_distdir="$$new_top_distdir" \
-	        distdir="$$new_distdir" \
-		am__remove_distdir=: \
-		am__skip_length_check=: \
-		am__skip_mode_fix=: \
-	        distdir) \
-	      || exit 1; \
-	  fi; \
-	done
-	$(MAKE) $(AM_MAKEFLAGS) \
-	  top_distdir="$(top_distdir)" distdir="$(distdir)" \
-	  dist-hook
-	-test -n "$(am__skip_mode_fix)" \
-	|| find "$(distdir)" -type d ! -perm -755 \
-		-exec chmod u+rwx,go+rx {} \; -o \
-	  ! -type d ! -perm -444 -links 1 -exec chmod a+r {} \; -o \
-	  ! -type d ! -perm -400 -exec chmod a+r {} \; -o \
-	  ! -type d ! -perm -444 -exec $(install_sh) -c -m a+r {} {} \; \
-	|| chmod -R a+r "$(distdir)"
-dist-gzip: distdir
-	tardir=$(distdir) && $(am__tar) | eval GZIP= gzip $(GZIP_ENV) -c >$(distdir).tar.gz
-	$(am__post_remove_distdir)
-
-dist-bzip2: distdir
-	tardir=$(distdir) && $(am__tar) | BZIP2=$${BZIP2--9} bzip2 -c >$(distdir).tar.bz2
-	$(am__post_remove_distdir)
-
-dist-bzip3: distdir
-	tardir=$(distdir) && $(am__tar) | bzip3 -c >$(distdir).tar.bz3
-	$(am__post_remove_distdir)
-
-dist-lzip: distdir
-	tardir=$(distdir) && $(am__tar) | lzip -c $${LZIP_OPT--9} >$(distdir).tar.lz
-	$(am__post_remove_distdir)
-dist-xz: distdir
-	tardir=$(distdir) && $(am__tar) | XZ_OPT=$${XZ_OPT--e} xz -c >$(distdir).tar.xz
-	$(am__post_remove_distdir)
-
-dist-zstd: distdir
-	tardir=$(distdir) && $(am__tar) | zstd -c $${ZSTD_CLEVEL-$${ZSTD_OPT--19}} >$(distdir).tar.zst
-	$(am__post_remove_distdir)
-
-dist-tarZ: distdir
-	@echo WARNING: "Support for distribution archives compressed with" \
-		       "legacy program 'compress' is deprecated." >&2
-	@echo WARNING: "It will be removed altogether in Automake 2.0" >&2
-	tardir=$(distdir) && $(am__tar) | compress -c >$(distdir).tar.Z
-	$(am__post_remove_distdir)
-
-dist-shar: distdir
-	@echo WARNING: "Support for shar distribution archives is" \
-	               "deprecated." >&2
-	@echo WARNING: "It will be removed altogether in Automake 2.0" >&2
-	shar $(distdir) | eval GZIP= gzip $(GZIP_ENV) -c >$(distdir).shar.gz
-	$(am__post_remove_distdir)
-
-dist-zip: distdir
-	-rm -f $(distdir).zip
-	zip -rq $(distdir).zip $(distdir)
-	$(am__post_remove_distdir)
-
-dist dist-all:
-	$(MAKE) $(AM_MAKEFLAGS) $(DIST_TARGETS) am__post_remove_distdir='@:'
-	$(am__post_remove_distdir)
-
-# This target untars the dist file and tries a VPATH configuration.  Then
-# it guarantees that the distribution is self-contained by making another
-# tarfile.
-distcheck: dist
-	case '$(DIST_ARCHIVES)' in \
-	*.tar.gz*) \
-	  eval GZIP= gzip -dc $(distdir).tar.gz | $(am__untar) ;;\
-	*.tar.bz2*) \
-	  bzip2 -dc $(distdir).tar.bz2 | $(am__untar) ;;\
-	*.tar.bz3*) \
-	  bzip3 -dc $(distdir).tar.bz3 | $(am__untar) ;;\
-	*.tar.lz*) \
-	  lzip -dc $(distdir).tar.lz | $(am__untar) ;;\
-	*.tar.xz*) \
-	  xz -dc $(distdir).tar.xz | $(am__untar) ;;\
-	*.tar.Z*) \
-	  uncompress -c $(distdir).tar.Z | $(am__untar) ;;\
-	*.shar.gz*) \
-	  eval GZIP= gzip -dc $(distdir).shar.gz | unshar ;;\
-	*.zip*) \
-	  unzip $(distdir).zip ;;\
-	*.tar.zst*) \
-	  zstd -dc $(distdir).tar.zst | $(am__untar) ;;\
-	esac
-	chmod -R a-w $(distdir)
-	chmod u+w $(distdir)
-	mkdir $(distdir)/_build $(distdir)/_build/sub $(distdir)/_inst
-	chmod a-w $(distdir)
-	test -d $(distdir)/_build || exit 0; \
-	dc_install_base=`$(am__cd) $(distdir)/_inst && pwd | sed -e 's,^[^:\\/]:[\\/],/,'` \
-	  && dc_destdir="$${TMPDIR-/tmp}/am-dc-$$$$/" \
-	  && am__cwd=`pwd` \
-	  && $(am__cd) $(distdir)/_build/sub \
-	  && ../../configure \
-	    $(AM_DISTCHECK_CONFIGURE_FLAGS) \
-	    $(DISTCHECK_CONFIGURE_FLAGS) \
-	    --srcdir=../.. --prefix="$$dc_install_base" \
-	  && $(MAKE) $(AM_MAKEFLAGS) \
-	  && $(MAKE) $(AM_MAKEFLAGS) $(AM_DISTCHECK_DVI_TARGET) \
-	  && $(MAKE) $(AM_MAKEFLAGS) check \
-	  && $(MAKE) $(AM_MAKEFLAGS) install \
-	  && $(MAKE) $(AM_MAKEFLAGS) installcheck \
-	  && $(MAKE) $(AM_MAKEFLAGS) uninstall \
-	  && $(MAKE) $(AM_MAKEFLAGS) distuninstallcheck_dir="$$dc_install_base" \
-	        distuninstallcheck \
-	  && chmod -R a-w "$$dc_install_base" \
-	  && ({ \
-	       (cd ../.. && umask 077 && mkdir "$$dc_destdir") \
-	       && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" install \
-	       && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" uninstall \
-	       && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" \
-	            distuninstallcheck_dir="$$dc_destdir" distuninstallcheck; \
-	      } || { rm -rf "$$dc_destdir"; exit 1; }) \
-	  && rm -rf "$$dc_destdir" \
-	  && $(MAKE) $(AM_MAKEFLAGS) dist \
-	  && rm -rf $(DIST_ARCHIVES) \
-	  && $(MAKE) $(AM_MAKEFLAGS) distcleancheck \
-	  && cd "$$am__cwd" \
-	  || exit 1
-	$(am__post_remove_distdir)
-	@(echo "$(distdir) archives ready for distribution: "; \
-	  list='$(DIST_ARCHIVES)'; for i in $$list; do echo $$i; done) | \
-	  sed -e 1h -e 1s/./=/g -e 1p -e 1x -e '$$p' -e '$$x'
-distuninstallcheck:
-	@test -n '$(distuninstallcheck_dir)' || { \
-	  echo 'ERROR: trying to run $@ with an empty' \
-	       '$$(distuninstallcheck_dir)' >&2; \
-	  exit 1; \
-	}; \
-	$(am__cd) '$(distuninstallcheck_dir)' || { \
-	  echo 'ERROR: cannot chdir into $(distuninstallcheck_dir)' >&2; \
-	  exit 1; \
-	}; \
-	test `$(am__distuninstallcheck_listfiles) | wc -l` -eq 0 \
-	   || { echo "ERROR: files left after uninstall:" ; \
-	        if test -n "$(DESTDIR)"; then \
-	          echo "  (check DESTDIR support)"; \
-	        fi ; \
-	        $(distuninstallcheck_listfiles) ; \
-	        exit 1; } >&2
-distcleancheck: distclean
-	@if test '$(srcdir)' = . ; then \
-	  echo "ERROR: distcleancheck can only run from a VPATH build" ; \
-	  exit 1 ; \
-	fi
-	@test `$(distcleancheck_listfiles) | wc -l` -eq 0 \
-	  || { echo "ERROR: files left in build directory after distclean:" ; \
-	       $(distcleancheck_listfiles) ; \
-	       exit 1; } >&2
-check-am: all-am
-check: check-recursive
-all-am: Makefile $(DATA) config.h
-installdirs: installdirs-recursive
-installdirs-am:
-	for dir in "$(DESTDIR)$(pkgconfigdir)"; do \
-	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
-	done
-install: install-recursive
-install-exec: install-exec-recursive
-install-data: install-data-recursive
-uninstall: uninstall-recursive
-
-install-am: all-am
-	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
-
-installcheck: installcheck-recursive
-install-strip:
-	if test -z '$(STRIP)'; then \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	      install; \
-	else \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
-	fi
-mostlyclean-generic:
-
-clean-generic:
-
-distclean-generic:
-	-$(am__rm_f) $(CONFIG_CLEAN_FILES)
-	-test . = "$(srcdir)" || $(am__rm_f) $(CONFIG_CLEAN_VPATH_FILES)
-
-maintainer-clean-generic:
-	@echo "This command is intended for maintainers to use"
-	@echo "it deletes files that may require special tools to rebuild."
-	-$(am__rm_f) $(MAINTAINERCLEANFILES)
-clean: clean-recursive
-
-clean-am: clean-generic clean-libtool mostlyclean-am
-
-distclean: distclean-recursive
-	-rm -f $(am__CONFIG_DISTCLEAN_FILES)
-	-rm -f Makefile
-distclean-am: clean-am distclean-generic distclean-hdr \
-	distclean-libtool distclean-tags
-
-dvi: dvi-recursive
-
-dvi-am:
-
-html: html-recursive
-
-html-am:
-
-info: info-recursive
-
-info-am:
-
-install-data-am: install-pkgconfigDATA
-
-install-dvi: install-dvi-recursive
-
-install-dvi-am:
-
-install-exec-am:
-
-install-html: install-html-recursive
-
-install-html-am:
-
-install-info: install-info-recursive
-
-install-info-am:
-
-install-man:
-
-install-pdf: install-pdf-recursive
-
-install-pdf-am:
-
-install-ps: install-ps-recursive
-
-install-ps-am:
-
-installcheck-am:
-
-maintainer-clean: maintainer-clean-recursive
-	-rm -f $(am__CONFIG_DISTCLEAN_FILES)
-	-rm -rf $(top_srcdir)/autom4te.cache
-	-rm -f Makefile
-maintainer-clean-am: distclean-am maintainer-clean-generic
-
-mostlyclean: mostlyclean-recursive
-
-mostlyclean-am: mostlyclean-generic mostlyclean-libtool
-
-pdf: pdf-recursive
-
-pdf-am:
-
-ps: ps-recursive
-
-ps-am:
-
-uninstall-am: uninstall-pkgconfigDATA
-
-.MAKE: $(am__recursive_targets) all install-am install-strip
-
-.PHONY: $(am__recursive_targets) CTAGS GTAGS TAGS all all-am \
-	am--refresh check check-am clean clean-cscope clean-generic \
-	clean-libtool cscope cscopelist-am ctags ctags-am dist \
-	dist-all dist-bzip2 dist-bzip3 dist-gzip dist-hook dist-lzip \
-	dist-shar dist-tarZ dist-xz dist-zip dist-zstd distcheck \
-	distclean distclean-generic distclean-hdr distclean-libtool \
-	distclean-tags distcleancheck distdir distuninstallcheck dvi \
-	dvi-am html html-am info info-am install install-am \
-	install-data install-data-am install-dvi install-dvi-am \
-	install-exec install-exec-am install-html install-html-am \
-	install-info install-info-am install-man install-pdf \
-	install-pdf-am install-pkgconfigDATA install-ps install-ps-am \
-	install-strip installcheck installcheck-am installdirs \
-	installdirs-am maintainer-clean maintainer-clean-generic \
-	mostlyclean mostlyclean-generic mostlyclean-libtool pdf pdf-am \
-	ps ps-am tags tags-am uninstall uninstall-am \
-	uninstall-pkgconfigDATA
-
-.PRECIOUS: Makefile
-
-
-.PHONY: ChangeLog INSTALL
-
-INSTALL:
-	$(INSTALL_CMD)
-
-ChangeLog:
-	$(CHANGELOG_CMD)
-
-dist-hook: ChangeLog INSTALL
-
-# Check source code with tools like lint & sparse
-@LINT_TRUE@lint:
-@LINT_TRUE@	(cd src && $(MAKE) $(MFLAGS) lint)
-
-# Tell versions [3.59,3.63) of GNU make to not export all variables.
-# Otherwise a system limit (for SysV at least) may be exceeded.
-.NOEXPORT:
-
-# Tell GNU make to disable its built-in pattern rules.
-%:: %,v
-%:: RCS/%,v
-%:: RCS/%
-%:: s.%
-%:: SCCS/s.%
diff --git a/experiments/wasm-gui/third_party/libXext/aclocal.m4 b/experiments/wasm-gui/third_party/libXext/aclocal.m4
deleted file mode 100644
index 1e4c772ad..000000000
--- a/experiments/wasm-gui/third_party/libXext/aclocal.m4
+++ /dev/null
@@ -1,3595 +0,0 @@
-# generated automatically by aclocal 1.18.1 -*- Autoconf -*-
-
-# Copyright (C) 1996-2025 Free Software Foundation, Inc.
-
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-m4_ifndef([AC_CONFIG_MACRO_DIRS], [m4_defun([_AM_CONFIG_MACRO_DIRS], [])m4_defun([AC_CONFIG_MACRO_DIRS], [_AM_CONFIG_MACRO_DIRS($@)])])
-m4_ifndef([AC_AUTOCONF_VERSION],
-  [m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl
-m4_if(m4_defn([AC_AUTOCONF_VERSION]), [2.73],,
-[m4_warning([this file was generated for autoconf 2.73.
-You have another version of autoconf.  It may work, but is not guaranteed to.
-If you have problems, you may need to regenerate the build system entirely.
-To do so, use the procedure documented by the package, typically 'autoreconf'.])])
-
-# pkg.m4 - Macros to locate and use pkg-config.   -*- Autoconf -*-
-# serial 12 (pkg-config-0.29.2)
-
-dnl Copyright © 2004 Scott James Remnant <scott@netsplit.com>.
-dnl Copyright © 2012-2015 Dan Nicholson <dbn.lists@gmail.com>
-dnl
-dnl This program is free software; you can redistribute it and/or modify
-dnl it under the terms of the GNU General Public License as published by
-dnl the Free Software Foundation; either version 2 of the License, or
-dnl (at your option) any later version.
-dnl
-dnl This program is distributed in the hope that it will be useful, but
-dnl WITHOUT ANY WARRANTY; without even the implied warranty of
-dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
-dnl General Public License for more details.
-dnl
-dnl You should have received a copy of the GNU General Public License
-dnl along with this program; if not, write to the Free Software
-dnl Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
-dnl 02111-1307, USA.
-dnl
-dnl As a special exception to the GNU General Public License, if you
-dnl distribute this file as part of a program that contains a
-dnl configuration script generated by Autoconf, you may include it under
-dnl the same distribution terms that you use for the rest of that
-dnl program.
-
-dnl PKG_PREREQ(MIN-VERSION)
-dnl -----------------------
-dnl Since: 0.29
-dnl
-dnl Verify that the version of the pkg-config macros are at least
-dnl MIN-VERSION. Unlike PKG_PROG_PKG_CONFIG, which checks the user's
-dnl installed version of pkg-config, this checks the developer's version
-dnl of pkg.m4 when generating configure.
-dnl
-dnl To ensure that this macro is defined, also add:
-dnl m4_ifndef([PKG_PREREQ],
-dnl     [m4_fatal([must install pkg-config 0.29 or later before running autoconf/autogen])])
-dnl
-dnl See the "Since" comment for each macro you use to see what version
-dnl of the macros you require.
-m4_defun([PKG_PREREQ],
-[m4_define([PKG_MACROS_VERSION], [0.29.2])
-m4_if(m4_version_compare(PKG_MACROS_VERSION, [$1]), -1,
-    [m4_fatal([pkg.m4 version $1 or higher is required but ]PKG_MACROS_VERSION[ found])])
-])dnl PKG_PREREQ
-
-dnl PKG_PROG_PKG_CONFIG([MIN-VERSION])
-dnl ----------------------------------
-dnl Since: 0.16
-dnl
-dnl Search for the pkg-config tool and set the PKG_CONFIG variable to
-dnl first found in the path. Checks that the version of pkg-config found
-dnl is at least MIN-VERSION. If MIN-VERSION is not specified, 0.9.0 is
-dnl used since that's the first version where most current features of
-dnl pkg-config existed.
-AC_DEFUN([PKG_PROG_PKG_CONFIG],
-[m4_pattern_forbid([^_?PKG_[A-Z_]+$])
-m4_pattern_allow([^PKG_CONFIG(_(PATH|LIBDIR|SYSROOT_DIR|ALLOW_SYSTEM_(CFLAGS|LIBS)))?$])
-m4_pattern_allow([^PKG_CONFIG_(DISABLE_UNINSTALLED|TOP_BUILD_DIR|DEBUG_SPEW)$])
-AC_ARG_VAR([PKG_CONFIG], [path to pkg-config utility])
-AC_ARG_VAR([PKG_CONFIG_PATH], [directories to add to pkg-config's search path])
-AC_ARG_VAR([PKG_CONFIG_LIBDIR], [path overriding pkg-config's built-in search path])
-
-if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
-	AC_PATH_TOOL([PKG_CONFIG], [pkg-config])
-fi
-if test -n "$PKG_CONFIG"; then
-	_pkg_min_version=m4_default([$1], [0.9.0])
-	AC_MSG_CHECKING([pkg-config is at least version $_pkg_min_version])
-	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
-		AC_MSG_RESULT([yes])
-	else
-		AC_MSG_RESULT([no])
-		PKG_CONFIG=""
-	fi
-fi[]dnl
-])dnl PKG_PROG_PKG_CONFIG
-
-dnl PKG_CHECK_EXISTS(MODULES, [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND])
-dnl -------------------------------------------------------------------
-dnl Since: 0.18
-dnl
-dnl Check to see whether a particular set of modules exists. Similar to
-dnl PKG_CHECK_MODULES(), but does not set variables or print errors.
-dnl
-dnl Please remember that m4 expands AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-dnl only at the first occurrence in configure.ac, so if the first place
-dnl it's called might be skipped (such as if it is within an "if", you
-dnl have to call PKG_CHECK_EXISTS manually
-AC_DEFUN([PKG_CHECK_EXISTS],
-[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-if test -n "$PKG_CONFIG" && \
-    AC_RUN_LOG([$PKG_CONFIG --exists --print-errors "$1"]); then
-  m4_default([$2], [:])
-m4_ifvaln([$3], [else
-  $3])dnl
-fi])
-
-dnl _PKG_CONFIG([VARIABLE], [COMMAND], [MODULES])
-dnl ---------------------------------------------
-dnl Internal wrapper calling pkg-config via PKG_CONFIG and setting
-dnl pkg_failed based on the result.
-m4_define([_PKG_CONFIG],
-[if test -n "$$1"; then
-    pkg_cv_[]$1="$$1"
- elif test -n "$PKG_CONFIG"; then
-    PKG_CHECK_EXISTS([$3],
-                     [pkg_cv_[]$1=`$PKG_CONFIG --[]$2 "$3" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes ],
-		     [pkg_failed=yes])
- else
-    pkg_failed=untried
-fi[]dnl
-])dnl _PKG_CONFIG
-
-dnl _PKG_SHORT_ERRORS_SUPPORTED
-dnl ---------------------------
-dnl Internal check to see if pkg-config supports short errors.
-AC_DEFUN([_PKG_SHORT_ERRORS_SUPPORTED],
-[AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
-        _pkg_short_errors_supported=yes
-else
-        _pkg_short_errors_supported=no
-fi[]dnl
-])dnl _PKG_SHORT_ERRORS_SUPPORTED
-
-
-dnl PKG_CHECK_MODULES(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND],
-dnl   [ACTION-IF-NOT-FOUND])
-dnl --------------------------------------------------------------
-dnl Since: 0.4.0
-dnl
-dnl Note that if there is a possibility the first call to
-dnl PKG_CHECK_MODULES might not happen, you should be sure to include an
-dnl explicit call to PKG_PROG_PKG_CONFIG in your configure.ac
-AC_DEFUN([PKG_CHECK_MODULES],
-[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-AC_ARG_VAR([$1][_CFLAGS], [C compiler flags for $1, overriding pkg-config])dnl
-AC_ARG_VAR([$1][_LIBS], [linker flags for $1, overriding pkg-config])dnl
-
-pkg_failed=no
-AC_MSG_CHECKING([for $2])
-
-_PKG_CONFIG([$1][_CFLAGS], [cflags], [$2])
-_PKG_CONFIG([$1][_LIBS], [libs], [$2])
-
-m4_define([_PKG_TEXT], [Alternatively, you may set the environment variables $1[]_CFLAGS
-and $1[]_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details.])
-
-if test $pkg_failed = yes; then
-        AC_MSG_RESULT([no])
-        _PKG_SHORT_ERRORS_SUPPORTED
-        if test $_pkg_short_errors_supported = yes; then
-                $1[]_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "$2" 2>&1`
-        else
-                $1[]_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "$2" 2>&1`
-        fi
-        # Put the nasty error message in config.log where it belongs
-        echo "$$1[]_PKG_ERRORS" >&AS_MESSAGE_LOG_FD
-
-        m4_default([$4], [AC_MSG_ERROR(
-[Package requirements ($2) were not met:
-
-$$1_PKG_ERRORS
-
-Consider adjusting the PKG_CONFIG_PATH environment variable if you
-installed software in a non-standard prefix.
-
-_PKG_TEXT])[]dnl
-        ])
-elif test $pkg_failed = untried; then
-        AC_MSG_RESULT([no])
-        m4_default([$4], [AC_MSG_FAILURE(
-[The pkg-config script could not be found or is too old.  Make sure it
-is in your PATH or set the PKG_CONFIG environment variable to the full
-path to pkg-config.
-
-_PKG_TEXT
-
-To get pkg-config, see <http://pkg-config.freedesktop.org/>.])[]dnl
-        ])
-else
-        $1[]_CFLAGS=$pkg_cv_[]$1[]_CFLAGS
-        $1[]_LIBS=$pkg_cv_[]$1[]_LIBS
-        AC_MSG_RESULT([yes])
-        $3
-fi[]dnl
-])dnl PKG_CHECK_MODULES
-
-
-dnl PKG_CHECK_MODULES_STATIC(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND],
-dnl   [ACTION-IF-NOT-FOUND])
-dnl ---------------------------------------------------------------------
-dnl Since: 0.29
-dnl
-dnl Checks for existence of MODULES and gathers its build flags with
-dnl static libraries enabled. Sets VARIABLE-PREFIX_CFLAGS from --cflags
-dnl and VARIABLE-PREFIX_LIBS from --libs.
-dnl
-dnl Note that if there is a possibility the first call to
-dnl PKG_CHECK_MODULES_STATIC might not happen, you should be sure to
-dnl include an explicit call to PKG_PROG_PKG_CONFIG in your
-dnl configure.ac.
-AC_DEFUN([PKG_CHECK_MODULES_STATIC],
-[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-_save_PKG_CONFIG=$PKG_CONFIG
-PKG_CONFIG="$PKG_CONFIG --static"
-PKG_CHECK_MODULES($@)
-PKG_CONFIG=$_save_PKG_CONFIG[]dnl
-])dnl PKG_CHECK_MODULES_STATIC
-
-
-dnl PKG_INSTALLDIR([DIRECTORY])
-dnl -------------------------
-dnl Since: 0.27
-dnl
-dnl Substitutes the variable pkgconfigdir as the location where a module
-dnl should install pkg-config .pc files. By default the directory is
-dnl $libdir/pkgconfig, but the default can be changed by passing
-dnl DIRECTORY. The user can override through the --with-pkgconfigdir
-dnl parameter.
-AC_DEFUN([PKG_INSTALLDIR],
-[m4_pushdef([pkg_default], [m4_default([$1], ['${libdir}/pkgconfig'])])
-m4_pushdef([pkg_description],
-    [pkg-config installation directory @<:@]pkg_default[@:>@])
-AC_ARG_WITH([pkgconfigdir],
-    [AS_HELP_STRING([--with-pkgconfigdir], pkg_description)],,
-    [with_pkgconfigdir=]pkg_default)
-AC_SUBST([pkgconfigdir], [$with_pkgconfigdir])
-m4_popdef([pkg_default])
-m4_popdef([pkg_description])
-])dnl PKG_INSTALLDIR
-
-
-dnl PKG_NOARCH_INSTALLDIR([DIRECTORY])
-dnl --------------------------------
-dnl Since: 0.27
-dnl
-dnl Substitutes the variable noarch_pkgconfigdir as the location where a
-dnl module should install arch-independent pkg-config .pc files. By
-dnl default the directory is $datadir/pkgconfig, but the default can be
-dnl changed by passing DIRECTORY. The user can override through the
-dnl --with-noarch-pkgconfigdir parameter.
-AC_DEFUN([PKG_NOARCH_INSTALLDIR],
-[m4_pushdef([pkg_default], [m4_default([$1], ['${datadir}/pkgconfig'])])
-m4_pushdef([pkg_description],
-    [pkg-config arch-independent installation directory @<:@]pkg_default[@:>@])
-AC_ARG_WITH([noarch-pkgconfigdir],
-    [AS_HELP_STRING([--with-noarch-pkgconfigdir], pkg_description)],,
-    [with_noarch_pkgconfigdir=]pkg_default)
-AC_SUBST([noarch_pkgconfigdir], [$with_noarch_pkgconfigdir])
-m4_popdef([pkg_default])
-m4_popdef([pkg_description])
-])dnl PKG_NOARCH_INSTALLDIR
-
-
-dnl PKG_CHECK_VAR(VARIABLE, MODULE, CONFIG-VARIABLE,
-dnl [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND])
-dnl -------------------------------------------
-dnl Since: 0.28
-dnl
-dnl Retrieves the value of the pkg-config variable for the given module.
-AC_DEFUN([PKG_CHECK_VAR],
-[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-AC_ARG_VAR([$1], [value of $3 for $2, overriding pkg-config])dnl
-
-_PKG_CONFIG([$1], [variable="][$3]["], [$2])
-AS_VAR_COPY([$1], [pkg_cv_][$1])
-
-AS_VAR_IF([$1], [""], [$5], [$4])dnl
-])dnl PKG_CHECK_VAR
-
-dnl PKG_WITH_MODULES(VARIABLE-PREFIX, MODULES,
-dnl   [ACTION-IF-FOUND],[ACTION-IF-NOT-FOUND],
-dnl   [DESCRIPTION], [DEFAULT])
-dnl ------------------------------------------
-dnl
-dnl Prepare a "--with-" configure option using the lowercase
-dnl [VARIABLE-PREFIX] name, merging the behaviour of AC_ARG_WITH and
-dnl PKG_CHECK_MODULES in a single macro.
-AC_DEFUN([PKG_WITH_MODULES],
-[
-m4_pushdef([with_arg], m4_tolower([$1]))
-
-m4_pushdef([description],
-           [m4_default([$5], [build with ]with_arg[ support])])
-
-m4_pushdef([def_arg], [m4_default([$6], [auto])])
-m4_pushdef([def_action_if_found], [AS_TR_SH([with_]with_arg)=yes])
-m4_pushdef([def_action_if_not_found], [AS_TR_SH([with_]with_arg)=no])
-
-m4_case(def_arg,
-            [yes],[m4_pushdef([with_without], [--without-]with_arg)],
-            [m4_pushdef([with_without],[--with-]with_arg)])
-
-AC_ARG_WITH(with_arg,
-     AS_HELP_STRING(with_without, description[ @<:@default=]def_arg[@:>@]),,
-    [AS_TR_SH([with_]with_arg)=def_arg])
-
-AS_CASE([$AS_TR_SH([with_]with_arg)],
-            [yes],[PKG_CHECK_MODULES([$1],[$2],$3,$4)],
-            [auto],[PKG_CHECK_MODULES([$1],[$2],
-                                        [m4_n([def_action_if_found]) $3],
-                                        [m4_n([def_action_if_not_found]) $4])])
-
-m4_popdef([with_arg])
-m4_popdef([description])
-m4_popdef([def_arg])
-
-])dnl PKG_WITH_MODULES
-
-dnl PKG_HAVE_WITH_MODULES(VARIABLE-PREFIX, MODULES,
-dnl   [DESCRIPTION], [DEFAULT])
-dnl -----------------------------------------------
-dnl
-dnl Convenience macro to trigger AM_CONDITIONAL after PKG_WITH_MODULES
-dnl check._[VARIABLE-PREFIX] is exported as make variable.
-AC_DEFUN([PKG_HAVE_WITH_MODULES],
-[
-PKG_WITH_MODULES([$1],[$2],,,[$3],[$4])
-
-AM_CONDITIONAL([HAVE_][$1],
-               [test "$AS_TR_SH([with_]m4_tolower([$1]))" = "yes"])
-])dnl PKG_HAVE_WITH_MODULES
-
-dnl PKG_HAVE_DEFINE_WITH_MODULES(VARIABLE-PREFIX, MODULES,
-dnl   [DESCRIPTION], [DEFAULT])
-dnl ------------------------------------------------------
-dnl
-dnl Convenience macro to run AM_CONDITIONAL and AC_DEFINE after
-dnl PKG_WITH_MODULES check. HAVE_[VARIABLE-PREFIX] is exported as make
-dnl and preprocessor variable.
-AC_DEFUN([PKG_HAVE_DEFINE_WITH_MODULES],
-[
-PKG_HAVE_WITH_MODULES([$1],[$2],[$3],[$4])
-
-AS_IF([test "$AS_TR_SH([with_]m4_tolower([$1]))" = "yes"],
-        [AC_DEFINE([HAVE_][$1], 1, [Enable ]m4_tolower([$1])[ support])])
-])dnl PKG_HAVE_DEFINE_WITH_MODULES
-
-dnl xorg-macros.m4.  Generated from xorg-macros.m4.in xorgversion.m4 by configure.
-dnl
-dnl Copyright (c) 2005, 2023, Oracle and/or its affiliates.
-dnl
-dnl Permission is hereby granted, free of charge, to any person obtaining a
-dnl copy of this software and associated documentation files (the "Software"),
-dnl to deal in the Software without restriction, including without limitation
-dnl the rights to use, copy, modify, merge, publish, distribute, sublicense,
-dnl and/or sell copies of the Software, and to permit persons to whom the
-dnl Software is furnished to do so, subject to the following conditions:
-dnl
-dnl The above copyright notice and this permission notice (including the next
-dnl paragraph) shall be included in all copies or substantial portions of the
-dnl Software.
-dnl
-dnl THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-dnl IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-dnl FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-dnl THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-dnl LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-dnl FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-dnl DEALINGS IN THE SOFTWARE.
-
-# XORG_MACROS_VERSION(required-version)
-# -------------------------------------
-# Minimum version: 1.1.0
-#
-# If you're using a macro added in Version 1.1 or newer, include this in
-# your configure.ac with the minimum required version, such as:
-# XORG_MACROS_VERSION(1.1)
-#
-# To ensure that this macro is defined, also add:
-# m4_ifndef([XORG_MACROS_VERSION],
-#     [m4_fatal([must install xorg-macros 1.1 or later before running autoconf/autogen])])
-#
-#
-# See the "minimum version" comment for each macro you use to see what
-# version you require.
-m4_defun([XORG_MACROS_VERSION],[
-m4_define([vers_have], [1.20.2])
-m4_define([maj_have], m4_substr(vers_have, 0, m4_index(vers_have, [.])))
-m4_define([maj_needed], m4_substr([$1], 0, m4_index([$1], [.])))
-m4_if(m4_cmp(maj_have, maj_needed), 0,,
-    [m4_fatal([xorg-macros major version ]maj_needed[ is required but ]vers_have[ found])])
-m4_if(m4_version_compare(vers_have, [$1]), -1,
-    [m4_fatal([xorg-macros version $1 or higher is required but ]vers_have[ found])])
-m4_undefine([vers_have])
-m4_undefine([maj_have])
-m4_undefine([maj_needed])
-]) # XORG_MACROS_VERSION
-
-# XORG_PROG_RAWCPP()
-# ------------------
-# Minimum version: 1.0.0
-#
-# Find cpp program and necessary flags for use in pre-processing text files
-# such as man pages and config files
-AC_DEFUN([XORG_PROG_RAWCPP],[
-AC_REQUIRE([AC_PROG_CPP])
-AC_PATH_TOOL(RAWCPP, [cpp], [${CPP}],
-   [$PATH:/bin:/usr/bin:/usr/lib:/usr/libexec:/usr/ccs/lib:/usr/ccs/lbin:/lib])
-
-# Check for flag to avoid builtin definitions - assumes unix is predefined,
-# which is not the best choice for supporting other OS'es, but covers most
-# of the ones we need for now.
-AC_MSG_CHECKING([if $RAWCPP requires -undef])
-AC_LANG_CONFTEST([AC_LANG_SOURCE([[Does cpp redefine unix ?]])])
-if test `${RAWCPP} < conftest.$ac_ext | grep -c 'unix'` -eq 1 ; then
-	AC_MSG_RESULT([no])
-else
-	if test `${RAWCPP} -undef < conftest.$ac_ext | grep -c 'unix'` -eq 1 ; then
-		RAWCPPFLAGS=-undef
-		AC_MSG_RESULT([yes])
-	# under Cygwin unix is still defined even with -undef
-	elif test `${RAWCPP} -undef -ansi < conftest.$ac_ext | grep -c 'unix'` -eq 1 ; then
-		RAWCPPFLAGS="-undef -ansi"
-		AC_MSG_RESULT([yes, with -ansi])
-	else
-		AC_MSG_ERROR([${RAWCPP} defines unix with or without -undef.  I don't know what to do.])
-	fi
-fi
-rm -f conftest.$ac_ext
-
-AC_MSG_CHECKING([if $RAWCPP requires -traditional])
-AC_LANG_CONFTEST([AC_LANG_SOURCE([[Does cpp preserve   "whitespace"?]])])
-if test `${RAWCPP} < conftest.$ac_ext | grep -c 'preserve   "'` -eq 1 ; then
-	AC_MSG_RESULT([no])
-else
-	if test `${RAWCPP} -traditional < conftest.$ac_ext | grep -c 'preserve   "'` -eq 1 ; then
-		TRADITIONALCPPFLAGS="-traditional"
-		RAWCPPFLAGS="${RAWCPPFLAGS} -traditional"
-		AC_MSG_RESULT([yes])
-	else
-		AC_MSG_ERROR([${RAWCPP} does not preserve whitespace with or without -traditional.  I don't know what to do.])
-	fi
-fi
-rm -f conftest.$ac_ext
-AC_SUBST(RAWCPPFLAGS)
-AC_SUBST(TRADITIONALCPPFLAGS)
-]) # XORG_PROG_RAWCPP
-
-# XORG_MANPAGE_SECTIONS()
-# -----------------------
-# Minimum version: 1.0.0
-#
-# Determine which sections man pages go in for the different man page types
-# on this OS - replaces *ManSuffix settings in old Imake *.cf per-os files.
-# Not sure if there's any better way than just hardcoding by OS name.
-# Override default settings by setting environment variables
-# Added MAN_SUBSTS in version 1.8
-# Added AC_PROG_SED in version 1.8
-
-AC_DEFUN([XORG_MANPAGE_SECTIONS],[
-AC_REQUIRE([AC_CANONICAL_HOST])
-AC_REQUIRE([AC_PROG_SED])
-
-case $host_os in
-    solaris*)
-        # Solaris 2.0 - 11.3 use SysV man page section numbers, so we
-        # check for a man page file found in later versions that use
-        # traditional section numbers instead
-        AC_CHECK_FILE([/usr/share/man/man7/attributes.7],
-                [SYSV_MAN_SECTIONS=false], [SYSV_MAN_SECTIONS=true])
-        ;;
-    *) SYSV_MAN_SECTIONS=false ;;
-esac
-
-if test x$APP_MAN_SUFFIX = x    ; then
-    APP_MAN_SUFFIX=1
-fi
-if test x$APP_MAN_DIR = x    ; then
-    APP_MAN_DIR='$(mandir)/man$(APP_MAN_SUFFIX)'
-fi
-
-if test x$LIB_MAN_SUFFIX = x    ; then
-    LIB_MAN_SUFFIX=3
-fi
-if test x$LIB_MAN_DIR = x    ; then
-    LIB_MAN_DIR='$(mandir)/man$(LIB_MAN_SUFFIX)'
-fi
-
-if test x$FILE_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				FILE_MAN_SUFFIX=4  ;;
-	*)				FILE_MAN_SUFFIX=5  ;;
-    esac
-fi
-if test x$FILE_MAN_DIR = x    ; then
-    FILE_MAN_DIR='$(mandir)/man$(FILE_MAN_SUFFIX)'
-fi
-
-if test x$MISC_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				MISC_MAN_SUFFIX=5  ;;
-	*)				MISC_MAN_SUFFIX=7  ;;
-    esac
-fi
-if test x$MISC_MAN_DIR = x    ; then
-    MISC_MAN_DIR='$(mandir)/man$(MISC_MAN_SUFFIX)'
-fi
-
-if test x$DRIVER_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				DRIVER_MAN_SUFFIX=7  ;;
-	*)				DRIVER_MAN_SUFFIX=4  ;;
-    esac
-fi
-if test x$DRIVER_MAN_DIR = x    ; then
-    DRIVER_MAN_DIR='$(mandir)/man$(DRIVER_MAN_SUFFIX)'
-fi
-
-if test x$ADMIN_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				ADMIN_MAN_SUFFIX=1m ;;
-	*)				ADMIN_MAN_SUFFIX=8  ;;
-    esac
-fi
-if test x$ADMIN_MAN_DIR = x    ; then
-    ADMIN_MAN_DIR='$(mandir)/man$(ADMIN_MAN_SUFFIX)'
-fi
-
-
-AC_SUBST([APP_MAN_SUFFIX])
-AC_SUBST([LIB_MAN_SUFFIX])
-AC_SUBST([FILE_MAN_SUFFIX])
-AC_SUBST([MISC_MAN_SUFFIX])
-AC_SUBST([DRIVER_MAN_SUFFIX])
-AC_SUBST([ADMIN_MAN_SUFFIX])
-AC_SUBST([APP_MAN_DIR])
-AC_SUBST([LIB_MAN_DIR])
-AC_SUBST([FILE_MAN_DIR])
-AC_SUBST([MISC_MAN_DIR])
-AC_SUBST([DRIVER_MAN_DIR])
-AC_SUBST([ADMIN_MAN_DIR])
-
-XORG_MAN_PAGE="X Version 11"
-AC_SUBST([XORG_MAN_PAGE])
-MAN_SUBSTS="\
-	-e 's|__vendorversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xorgversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xservername__|Xorg|g' \
-	-e 's|__xconfigfile__|xorg.conf|g' \
-	-e 's|__projectroot__|\$(prefix)|g' \
-	-e 's|__apploaddir__|\$(appdefaultdir)|g' \
-	-e 's|__appmansuffix__|\$(APP_MAN_SUFFIX)|g' \
-	-e 's|__drivermansuffix__|\$(DRIVER_MAN_SUFFIX)|g' \
-	-e 's|__adminmansuffix__|\$(ADMIN_MAN_SUFFIX)|g' \
-	-e 's|__libmansuffix__|\$(LIB_MAN_SUFFIX)|g' \
-	-e 's|__miscmansuffix__|\$(MISC_MAN_SUFFIX)|g' \
-	-e 's|__filemansuffix__|\$(FILE_MAN_SUFFIX)|g'"
-AC_SUBST([MAN_SUBSTS])
-
-]) # XORG_MANPAGE_SECTIONS
-
-# XORG_CHECK_SGML_DOCTOOLS([MIN-VERSION])
-# ------------------------
-# Minimum version: 1.7.0
-#
-# Defines the variable XORG_SGML_PATH containing the location of X11/defs.ent
-# provided by xorg-sgml-doctools, if installed.
-AC_DEFUN([XORG_CHECK_SGML_DOCTOOLS],[
-AC_MSG_CHECKING([for X.Org SGML entities m4_ifval([$1],[>= $1])])
-XORG_SGML_PATH=
-PKG_CHECK_EXISTS([xorg-sgml-doctools m4_ifval([$1],[>= $1])],
-    [XORG_SGML_PATH=`$PKG_CONFIG --variable=sgmlrootdir xorg-sgml-doctools`],
-    [m4_ifval([$1],[:],
-        [if test x"$cross_compiling" != x"yes" ; then
-            AC_CHECK_FILE([$prefix/share/sgml/X11/defs.ent],
-                          [XORG_SGML_PATH=$prefix/share/sgml])
-         fi])
-    ])
-
-# Define variables STYLESHEET_SRCDIR and XSL_STYLESHEET containing
-# the path and the name of the doc stylesheet
-if test "x$XORG_SGML_PATH" != "x" ; then
-   AC_MSG_RESULT([$XORG_SGML_PATH])
-   STYLESHEET_SRCDIR=$XORG_SGML_PATH/X11
-   XSL_STYLESHEET=$STYLESHEET_SRCDIR/xorg.xsl
-else
-   AC_MSG_RESULT([no])
-fi
-
-AC_SUBST(XORG_SGML_PATH)
-AC_SUBST(STYLESHEET_SRCDIR)
-AC_SUBST(XSL_STYLESHEET)
-AM_CONDITIONAL([HAVE_STYLESHEETS], [test "x$XSL_STYLESHEET" != "x"])
-]) # XORG_CHECK_SGML_DOCTOOLS
-
-# XORG_CHECK_LINUXDOC
-# -------------------
-# Minimum version: 1.0.0
-#
-# Defines the variable MAKE_TEXT if the necessary tools and
-# files are found. $(MAKE_TEXT) blah.sgml will then produce blah.txt.
-# Whether or not the necessary tools and files are found can be checked
-# with the AM_CONDITIONAL "BUILD_LINUXDOC"
-AC_DEFUN([XORG_CHECK_LINUXDOC],[
-AC_REQUIRE([XORG_CHECK_SGML_DOCTOOLS])
-AC_REQUIRE([XORG_WITH_PS2PDF])
-
-AC_PATH_PROG(LINUXDOC, linuxdoc)
-
-AC_MSG_CHECKING([whether to build documentation])
-
-if test x$XORG_SGML_PATH != x && test x$LINUXDOC != x ; then
-   BUILDDOC=yes
-else
-   BUILDDOC=no
-fi
-
-AM_CONDITIONAL(BUILD_LINUXDOC, [test x$BUILDDOC = xyes])
-
-AC_MSG_RESULT([$BUILDDOC])
-
-AC_MSG_CHECKING([whether to build pdf documentation])
-
-if test x$have_ps2pdf != xno && test x$BUILD_PDFDOC != xno; then
-   BUILDPDFDOC=yes
-else
-   BUILDPDFDOC=no
-fi
-
-AM_CONDITIONAL(BUILD_PDFDOC, [test x$BUILDPDFDOC = xyes])
-
-AC_MSG_RESULT([$BUILDPDFDOC])
-
-MAKE_TEXT="SGML_SEARCH_PATH=$XORG_SGML_PATH GROFF_NO_SGR=y $LINUXDOC -B txt -f"
-MAKE_PS="SGML_SEARCH_PATH=$XORG_SGML_PATH $LINUXDOC -B latex --papersize=letter --output=ps"
-MAKE_PDF="$PS2PDF"
-MAKE_HTML="SGML_SEARCH_PATH=$XORG_SGML_PATH $LINUXDOC  -B html --split=0"
-
-AC_SUBST(MAKE_TEXT)
-AC_SUBST(MAKE_PS)
-AC_SUBST(MAKE_PDF)
-AC_SUBST(MAKE_HTML)
-]) # XORG_CHECK_LINUXDOC
-
-# XORG_CHECK_DOCBOOK
-# -------------------
-# Minimum version: 1.0.0
-#
-# Checks for the ability to build output formats from SGML DocBook source.
-# For XXX in {TXT, PDF, PS, HTML}, the AM_CONDITIONAL "BUILD_XXXDOC"
-# indicates whether the necessary tools and files are found and, if set,
-# $(MAKE_XXX) blah.sgml will produce blah.xxx.
-AC_DEFUN([XORG_CHECK_DOCBOOK],[
-AC_REQUIRE([XORG_CHECK_SGML_DOCTOOLS])
-
-BUILDTXTDOC=no
-BUILDPDFDOC=no
-BUILDPSDOC=no
-BUILDHTMLDOC=no
-
-AC_PATH_PROG(DOCBOOKPS, docbook2ps)
-AC_PATH_PROG(DOCBOOKPDF, docbook2pdf)
-AC_PATH_PROG(DOCBOOKHTML, docbook2html)
-AC_PATH_PROG(DOCBOOKTXT, docbook2txt)
-
-AC_MSG_CHECKING([whether to build text documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKTXT != x &&
-   test x$BUILD_TXTDOC != xno; then
-	BUILDTXTDOC=yes
-fi
-AM_CONDITIONAL(BUILD_TXTDOC, [test x$BUILDTXTDOC = xyes])
-AC_MSG_RESULT([$BUILDTXTDOC])
-
-AC_MSG_CHECKING([whether to build PDF documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKPDF != x &&
-   test x$BUILD_PDFDOC != xno; then
-	BUILDPDFDOC=yes
-fi
-AM_CONDITIONAL(BUILD_PDFDOC, [test x$BUILDPDFDOC = xyes])
-AC_MSG_RESULT([$BUILDPDFDOC])
-
-AC_MSG_CHECKING([whether to build PostScript documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKPS != x &&
-   test x$BUILD_PSDOC != xno; then
-	BUILDPSDOC=yes
-fi
-AM_CONDITIONAL(BUILD_PSDOC, [test x$BUILDPSDOC = xyes])
-AC_MSG_RESULT([$BUILDPSDOC])
-
-AC_MSG_CHECKING([whether to build HTML documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKHTML != x &&
-   test x$BUILD_HTMLDOC != xno; then
-	BUILDHTMLDOC=yes
-fi
-AM_CONDITIONAL(BUILD_HTMLDOC, [test x$BUILDHTMLDOC = xyes])
-AC_MSG_RESULT([$BUILDHTMLDOC])
-
-MAKE_TEXT="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKTXT"
-MAKE_PS="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKPS"
-MAKE_PDF="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKPDF"
-MAKE_HTML="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKHTML"
-
-AC_SUBST(MAKE_TEXT)
-AC_SUBST(MAKE_PS)
-AC_SUBST(MAKE_PDF)
-AC_SUBST(MAKE_HTML)
-]) # XORG_CHECK_DOCBOOK
-
-# XORG_WITH_XMLTO([MIN-VERSION], [DEFAULT])
-# ----------------
-# Minimum version: 1.5.0
-# Minimum version for optional DEFAULT argument: 1.11.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a module to test for the
-# presence of the tool and obtain it's path in separate variables. Coupled with
-# the --with-xmlto option, it allows maximum flexibility in making decisions
-# as whether or not to use the xmlto package. When DEFAULT is not specified,
-# --with-xmlto assumes 'auto'.
-#
-# Interface to module:
-# HAVE_XMLTO: 	used in makefiles to conditionally generate documentation
-# XMLTO:	returns the path of the xmlto program found
-#		returns the path set by the user in the environment
-# --with-xmlto:	'yes' user instructs the module to use xmlto
-#		'no' user instructs the module not to use xmlto
-#
-# Added in version 1.10.0
-# HAVE_XMLTO_TEXT: used in makefiles to conditionally generate text documentation
-#                  xmlto for text output requires either lynx, links, or w3m browsers
-#
-# If the user sets the value of XMLTO, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_XMLTO],[
-AC_ARG_VAR([XMLTO], [Path to xmlto command])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(xmlto,
-	AS_HELP_STRING([--with-xmlto],
-	   [Use xmlto to regenerate documentation (default: ]_defopt[)]),
-	   [use_xmlto=$withval], [use_xmlto=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_xmlto" = x"auto"; then
-   AC_PATH_PROG([XMLTO], [xmlto])
-   if test "x$XMLTO" = "x"; then
-        AC_MSG_WARN([xmlto not found - documentation targets will be skipped])
-	have_xmlto=no
-   else
-        have_xmlto=yes
-   fi
-elif test "x$use_xmlto" = x"yes" ; then
-   AC_PATH_PROG([XMLTO], [xmlto])
-   if test "x$XMLTO" = "x"; then
-        AC_MSG_ERROR([--with-xmlto=yes specified but xmlto not found in PATH])
-   fi
-   have_xmlto=yes
-elif test "x$use_xmlto" = x"no" ; then
-   if test "x$XMLTO" != "x"; then
-      AC_MSG_WARN([ignoring XMLTO environment variable since --with-xmlto=no was specified])
-   fi
-   have_xmlto=no
-else
-   AC_MSG_ERROR([--with-xmlto expects 'yes' or 'no'])
-fi
-
-# Test for a minimum version of xmlto, if provided.
-m4_ifval([$1],
-[if test "$have_xmlto" = yes; then
-    # scrape the xmlto version
-    AC_MSG_CHECKING([the xmlto version])
-    xmlto_version=`$XMLTO --version 2>/dev/null | cut -d' ' -f3`
-    AC_MSG_RESULT([$xmlto_version])
-    AS_VERSION_COMPARE([$xmlto_version], [$1],
-        [if test "x$use_xmlto" = xauto; then
-            AC_MSG_WARN([xmlto version $xmlto_version found, but $1 needed])
-            have_xmlto=no
-        else
-            AC_MSG_ERROR([xmlto version $xmlto_version found, but $1 needed])
-        fi])
-fi])
-
-# Test for the ability of xmlto to generate a text target
-#
-# NOTE: xmlto 0.0.27 or higher return a non-zero return code in the
-# following test for empty XML docbook files.
-# For compatibility reasons use the following empty XML docbook file and if
-# it fails try it again with a non-empty XML file.
-have_xmlto_text=no
-cat > conftest.xml << "EOF"
-EOF
-AS_IF([test "$have_xmlto" = yes],
-      [AS_IF([$XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1],
-             [have_xmlto_text=yes],
-             [# Try it again with a non-empty XML file.
-              cat > conftest.xml << "EOF"
-<x></x>
-EOF
-              AS_IF([$XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1],
-                    [have_xmlto_text=yes],
-                    [AC_MSG_WARN([xmlto cannot generate text format, this format skipped])])])])
-rm -f conftest.xml
-AM_CONDITIONAL([HAVE_XMLTO_TEXT], [test $have_xmlto_text = yes])
-AM_CONDITIONAL([HAVE_XMLTO], [test "$have_xmlto" = yes])
-]) # XORG_WITH_XMLTO
-
-# XORG_WITH_XSLTPROC([MIN-VERSION], [DEFAULT])
-# --------------------------------------------
-# Minimum version: 1.12.0
-# Minimum version for optional DEFAULT argument: 1.12.0
-#
-# XSLT (Extensible Stylesheet Language Transformations) is a declarative,
-# XML-based language used for the transformation of XML documents.
-# The xsltproc command line tool is for applying XSLT stylesheets to XML documents.
-# It is used under the cover by xmlto to generate html files from DocBook/XML.
-# The XSLT processor is often used as a standalone tool for transformations.
-# It should not be assumed that this tool is used only to work with documnetation.
-# When DEFAULT is not specified, --with-xsltproc assumes 'auto'.
-#
-# Interface to module:
-# HAVE_XSLTPROC: used in makefiles to conditionally generate documentation
-# XSLTPROC:	 returns the path of the xsltproc program found
-#		 returns the path set by the user in the environment
-# --with-xsltproc: 'yes' user instructs the module to use xsltproc
-#		  'no' user instructs the module not to use xsltproc
-# have_xsltproc: returns yes if xsltproc found in PATH or no
-#
-# If the user sets the value of XSLTPROC, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_XSLTPROC],[
-AC_ARG_VAR([XSLTPROC], [Path to xsltproc command])
-# Preserves the interface, should it be implemented later
-m4_ifval([$1], [m4_warn([syntax], [Checking for xsltproc MIN-VERSION is not implemented])])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(xsltproc,
-	AS_HELP_STRING([--with-xsltproc],
-	   [Use xsltproc for the transformation of XML documents (default: ]_defopt[)]),
-	   [use_xsltproc=$withval], [use_xsltproc=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_xsltproc" = x"auto"; then
-   AC_PATH_PROG([XSLTPROC], [xsltproc])
-   if test "x$XSLTPROC" = "x"; then
-        AC_MSG_WARN([xsltproc not found - cannot transform XML documents])
-	have_xsltproc=no
-   else
-        have_xsltproc=yes
-   fi
-elif test "x$use_xsltproc" = x"yes" ; then
-   AC_PATH_PROG([XSLTPROC], [xsltproc])
-   if test "x$XSLTPROC" = "x"; then
-        AC_MSG_ERROR([--with-xsltproc=yes specified but xsltproc not found in PATH])
-   fi
-   have_xsltproc=yes
-elif test "x$use_xsltproc" = x"no" ; then
-   if test "x$XSLTPROC" != "x"; then
-      AC_MSG_WARN([ignoring XSLTPROC environment variable since --with-xsltproc=no was specified])
-   fi
-   have_xsltproc=no
-else
-   AC_MSG_ERROR([--with-xsltproc expects 'yes' or 'no'])
-fi
-
-AM_CONDITIONAL([HAVE_XSLTPROC], [test "$have_xsltproc" = yes])
-]) # XORG_WITH_XSLTPROC
-
-# XORG_WITH_PERL([MIN-VERSION], [DEFAULT])
-# ----------------------------------------
-# Minimum version: 1.15.0
-#
-# PERL (Practical Extraction and Report Language) is a language optimized for
-# scanning arbitrary text files, extracting information from those text files,
-# and printing reports based on that information.
-#
-# When DEFAULT is not specified, --with-perl assumes 'auto'.
-#
-# Interface to module:
-# HAVE_PERL: used in makefiles to conditionally scan text files
-# PERL:	     returns the path of the perl program found
-#	     returns the path set by the user in the environment
-# --with-perl: 'yes' user instructs the module to use perl
-#	       'no' user instructs the module not to use perl
-# have_perl: returns yes if perl found in PATH or no
-#
-# If the user sets the value of PERL, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_PERL],[
-AC_ARG_VAR([PERL], [Path to perl command])
-# Preserves the interface, should it be implemented later
-m4_ifval([$1], [m4_warn([syntax], [Checking for perl MIN-VERSION is not implemented])])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(perl,
-	AS_HELP_STRING([--with-perl],
-	   [Use perl for extracting information from files (default: ]_defopt[)]),
-	   [use_perl=$withval], [use_perl=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_perl" = x"auto"; then
-   AC_PATH_PROG([PERL], [perl])
-   if test "x$PERL" = "x"; then
-        AC_MSG_WARN([perl not found - cannot extract information and report])
-	have_perl=no
-   else
-        have_perl=yes
-   fi
-elif test "x$use_perl" = x"yes" ; then
-   AC_PATH_PROG([PERL], [perl])
-   if test "x$PERL" = "x"; then
-        AC_MSG_ERROR([--with-perl=yes specified but perl not found in PATH])
-   fi
-   have_perl=yes
-elif test "x$use_perl" = x"no" ; then
-   if test "x$PERL" != "x"; then
-      AC_MSG_WARN([ignoring PERL environment variable since --with-perl=no was specified])
-   fi
-   have_perl=no
-else
-   AC_MSG_ERROR([--with-perl expects 'yes' or 'no'])
-fi
-
-AM_CONDITIONAL([HAVE_PERL], [test "$have_perl" = yes])
-]) # XORG_WITH_PERL
-
-# XORG_WITH_ASCIIDOC([MIN-VERSION], [DEFAULT])
-# ----------------
-# Minimum version: 1.5.0
-# Minimum version for optional DEFAULT argument: 1.11.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a module to test for the
-# presence of the tool and obtain it's path in separate variables. Coupled with
-# the --with-asciidoc option, it allows maximum flexibility in making decisions
-# as whether or not to use the asciidoc package. When DEFAULT is not specified,
-# --with-asciidoc assumes 'auto'.
-#
-# Interface to module:
-# HAVE_ASCIIDOC: used in makefiles to conditionally generate documentation
-# ASCIIDOC:	 returns the path of the asciidoc program found
-#		 returns the path set by the user in the environment
-# --with-asciidoc: 'yes' user instructs the module to use asciidoc
-#		  'no' user instructs the module not to use asciidoc
-#
-# If the user sets the value of ASCIIDOC, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_ASCIIDOC],[
-AC_ARG_VAR([ASCIIDOC], [Path to asciidoc command])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(asciidoc,
-	AS_HELP_STRING([--with-asciidoc],
-	   [Use asciidoc to regenerate documentation (default: ]_defopt[)]),
-	   [use_asciidoc=$withval], [use_asciidoc=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_asciidoc" = x"auto"; then
-   AC_PATH_PROG([ASCIIDOC], [asciidoc])
-   if test "x$ASCIIDOC" = "x"; then
-        AC_MSG_WARN([asciidoc not found - documentation targets will be skipped])
-	have_asciidoc=no
-   else
-        have_asciidoc=yes
-   fi
-elif test "x$use_asciidoc" = x"yes" ; then
-   AC_PATH_PROG([ASCIIDOC], [asciidoc])
-   if test "x$ASCIIDOC" = "x"; then
-        AC_MSG_ERROR([--with-asciidoc=yes specified but asciidoc not found in PATH])
-   fi
-   have_asciidoc=yes
-elif test "x$use_asciidoc" = x"no" ; then
-   if test "x$ASCIIDOC" != "x"; then
-      AC_MSG_WARN([ignoring ASCIIDOC environment variable since --with-asciidoc=no was specified])
-   fi
-   have_asciidoc=no
-else
-   AC_MSG_ERROR([--with-asciidoc expects 'yes' or 'no'])
-fi
-m4_ifval([$1],
-[if test "$have_asciidoc" = yes; then
-    # scrape the asciidoc version
-    AC_MSG_CHECKING([the asciidoc version])
-    asciidoc_version=`$ASCIIDOC --version 2>/dev/null | cut -d' ' -f2`
-    AC_MSG_RESULT([$asciidoc_version])
-    AS_VERSION_COMPARE([$asciidoc_version], [$1],
-        [if test "x$use_asciidoc" = xauto; then
-            AC_MSG_WARN([asciidoc version $asciidoc_version found, but $1 needed])
-            have_asciidoc=no
-        else
-            AC_MSG_ERROR([asciidoc version $asciidoc_version found, but $1 needed])
-        fi])
-fi])
-AM_CONDITIONAL([HAVE_ASCIIDOC], [test "$have_asciidoc" = yes])
-]) # XORG_WITH_ASCIIDOC
-
-# XORG_WITH_DOXYGEN([MIN-VERSION], [DEFAULT])
-# -------------------------------------------
-# Minimum version: 1.5.0
-# Minimum version for optional DEFAULT argument: 1.11.0
-# Minimum version for optional DOT checking: 1.18.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a module to test for the
-# presence of the tool and obtain it's path in separate variables. Coupled with
-# the --with-doxygen option, it allows maximum flexibility in making decisions
-# as whether or not to use the doxygen package. When DEFAULT is not specified,
-# --with-doxygen assumes 'auto'.
-#
-# Interface to module:
-# HAVE_DOXYGEN: used in makefiles to conditionally generate documentation
-# DOXYGEN:	 returns the path of the doxygen program found
-#		 returns the path set by the user in the environment
-# --with-doxygen: 'yes' user instructs the module to use doxygen
-#		  'no' user instructs the module not to use doxygen
-#
-# If the user sets the value of DOXYGEN, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_DOXYGEN],[
-AC_ARG_VAR([DOXYGEN], [Path to doxygen command])
-AC_ARG_VAR([DOT], [Path to the dot graphics utility])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(doxygen,
-	AS_HELP_STRING([--with-doxygen],
-	   [Use doxygen to regenerate documentation (default: ]_defopt[)]),
-	   [use_doxygen=$withval], [use_doxygen=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_doxygen" = x"auto"; then
-   AC_PATH_PROG([DOXYGEN], [doxygen])
-   if test "x$DOXYGEN" = "x"; then
-        AC_MSG_WARN([doxygen not found - documentation targets will be skipped])
-	have_doxygen=no
-   else
-        have_doxygen=yes
-   fi
-elif test "x$use_doxygen" = x"yes" ; then
-   AC_PATH_PROG([DOXYGEN], [doxygen])
-   if test "x$DOXYGEN" = "x"; then
-        AC_MSG_ERROR([--with-doxygen=yes specified but doxygen not found in PATH])
-   fi
-   have_doxygen=yes
-elif test "x$use_doxygen" = x"no" ; then
-   if test "x$DOXYGEN" != "x"; then
-      AC_MSG_WARN([ignoring DOXYGEN environment variable since --with-doxygen=no was specified])
-   fi
-   have_doxygen=no
-else
-   AC_MSG_ERROR([--with-doxygen expects 'yes' or 'no'])
-fi
-m4_ifval([$1],
-[if test "$have_doxygen" = yes; then
-    # scrape the doxygen version
-    AC_MSG_CHECKING([the doxygen version])
-    doxygen_version=`$DOXYGEN --version 2>/dev/null`
-    AC_MSG_RESULT([$doxygen_version])
-    AS_VERSION_COMPARE([$doxygen_version], [$1],
-        [if test "x$use_doxygen" = xauto; then
-            AC_MSG_WARN([doxygen version $doxygen_version found, but $1 needed])
-            have_doxygen=no
-        else
-            AC_MSG_ERROR([doxygen version $doxygen_version found, but $1 needed])
-        fi])
-fi])
-
-dnl Check for DOT if we have doxygen. The caller decides if it is mandatory
-dnl HAVE_DOT is a variable that can be used in your doxygen.in config file:
-dnl 	HAVE_DOT = @HAVE_DOT@
-HAVE_DOT=no
-if test "x$have_doxygen" = "xyes"; then
-  AC_PATH_PROG([DOT], [dot])
-    if test "x$DOT" != "x"; then
-      HAVE_DOT=yes
-    fi
-fi
-
-AC_SUBST([HAVE_DOT])
-AM_CONDITIONAL([HAVE_DOT], [test "$HAVE_DOT" = "yes"])
-AM_CONDITIONAL([HAVE_DOXYGEN], [test "$have_doxygen" = yes])
-]) # XORG_WITH_DOXYGEN
-
-# XORG_WITH_GROFF([DEFAULT])
-# ----------------
-# Minimum version: 1.6.0
-# Minimum version for optional DEFAULT argument: 1.11.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a module to test for the
-# presence of the tool and obtain it's path in separate variables. Coupled with
-# the --with-groff option, it allows maximum flexibility in making decisions
-# as whether or not to use the groff package. When DEFAULT is not specified,
-# --with-groff assumes 'auto'.
-#
-# Interface to module:
-# HAVE_GROFF:	 used in makefiles to conditionally generate documentation
-# HAVE_GROFF_MM: the memorandum macros (-mm) package
-# HAVE_GROFF_MS: the -ms macros package
-# GROFF:	 returns the path of the groff program found
-#		 returns the path set by the user in the environment
-# --with-groff:	 'yes' user instructs the module to use groff
-#		 'no' user instructs the module not to use groff
-#
-# Added in version 1.9.0:
-# HAVE_GROFF_HTML: groff has dependencies to output HTML format:
-#		   pnmcut pnmcrop pnmtopng pnmtops from the netpbm package.
-#		   psselect from the psutils package.
-#		   the ghostcript package. Refer to the grohtml man pages
-#
-# If the user sets the value of GROFF, AC_PATH_PROG skips testing the path.
-#
-# OS and distros often splits groff in a basic and full package, the former
-# having the groff program and the later having devices, fonts and macros
-# Checking for the groff executable is not enough.
-#
-# If macros are missing, we cannot assume that groff is useless, so we don't
-# unset HAVE_GROFF or GROFF env variables.
-# HAVE_GROFF_?? can never be true while HAVE_GROFF is false.
-#
-AC_DEFUN([XORG_WITH_GROFF],[
-AC_ARG_VAR([GROFF], [Path to groff command])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_WITH(groff,
-	AS_HELP_STRING([--with-groff],
-	   [Use groff to regenerate documentation (default: ]_defopt[)]),
-	   [use_groff=$withval], [use_groff=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_groff" = x"auto"; then
-   AC_PATH_PROG([GROFF], [groff])
-   if test "x$GROFF" = "x"; then
-        AC_MSG_WARN([groff not found - documentation targets will be skipped])
-	have_groff=no
-   else
-        have_groff=yes
-   fi
-elif test "x$use_groff" = x"yes" ; then
-   AC_PATH_PROG([GROFF], [groff])
-   if test "x$GROFF" = "x"; then
-        AC_MSG_ERROR([--with-groff=yes specified but groff not found in PATH])
-   fi
-   have_groff=yes
-elif test "x$use_groff" = x"no" ; then
-   if test "x$GROFF" != "x"; then
-      AC_MSG_WARN([ignoring GROFF environment variable since --with-groff=no was specified])
-   fi
-   have_groff=no
-else
-   AC_MSG_ERROR([--with-groff expects 'yes' or 'no'])
-fi
-
-# We have groff, test for the presence of the macro packages
-if test "x$have_groff" = x"yes"; then
-    AC_MSG_CHECKING([for ${GROFF} -ms macros])
-    if ${GROFF} -ms -I. /dev/null >/dev/null 2>&1 ; then
-        groff_ms_works=yes
-    else
-        groff_ms_works=no
-    fi
-    AC_MSG_RESULT([$groff_ms_works])
-    AC_MSG_CHECKING([for ${GROFF} -mm macros])
-    if ${GROFF} -mm -I. /dev/null >/dev/null 2>&1 ; then
-        groff_mm_works=yes
-    else
-        groff_mm_works=no
-    fi
-    AC_MSG_RESULT([$groff_mm_works])
-fi
-
-# We have groff, test for HTML dependencies, one command per package
-if test "x$have_groff" = x"yes"; then
-   AC_PATH_PROGS(GS_PATH, [gs gswin32c])
-   AC_PATH_PROG(PNMTOPNG_PATH, [pnmtopng])
-   AC_PATH_PROG(PSSELECT_PATH, [psselect])
-   if test "x$GS_PATH" != "x" -a "x$PNMTOPNG_PATH" != "x" -a "x$PSSELECT_PATH" != "x"; then
-      have_groff_html=yes
-   else
-      have_groff_html=no
-      AC_MSG_WARN([grohtml dependencies not found - HTML Documentation skipped. Refer to grohtml man pages])
-   fi
-fi
-
-# Set Automake conditionals for Makefiles
-AM_CONDITIONAL([HAVE_GROFF], [test "$have_groff" = yes])
-AM_CONDITIONAL([HAVE_GROFF_MS], [test "$groff_ms_works" = yes])
-AM_CONDITIONAL([HAVE_GROFF_MM], [test "$groff_mm_works" = yes])
-AM_CONDITIONAL([HAVE_GROFF_HTML], [test "$have_groff_html" = yes])
-]) # XORG_WITH_GROFF
-
-# XORG_WITH_FOP([MIN-VERSION], [DEFAULT])
-# ---------------------------------------
-# Minimum version: 1.6.0
-# Minimum version for optional DEFAULT argument: 1.11.0
-# Minimum version for optional MIN-VERSION argument: 1.15.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a module to test for the
-# presence of the tool and obtain it's path in separate variables. Coupled with
-# the --with-fop option, it allows maximum flexibility in making decisions
-# as whether or not to use the fop package. When DEFAULT is not specified,
-# --with-fop assumes 'auto'.
-#
-# Interface to module:
-# HAVE_FOP: 	used in makefiles to conditionally generate documentation
-# FOP:	 	returns the path of the fop program found
-#		returns the path set by the user in the environment
-# --with-fop: 	'yes' user instructs the module to use fop
-#		'no' user instructs the module not to use fop
-#
-# If the user sets the value of FOP, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_FOP],[
-AC_ARG_VAR([FOP], [Path to fop command])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(fop,
-	AS_HELP_STRING([--with-fop],
-	   [Use fop to regenerate documentation (default: ]_defopt[)]),
-	   [use_fop=$withval], [use_fop=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_fop" = x"auto"; then
-   AC_PATH_PROG([FOP], [fop])
-   if test "x$FOP" = "x"; then
-        AC_MSG_WARN([fop not found - documentation targets will be skipped])
-	have_fop=no
-   else
-        have_fop=yes
-   fi
-elif test "x$use_fop" = x"yes" ; then
-   AC_PATH_PROG([FOP], [fop])
-   if test "x$FOP" = "x"; then
-        AC_MSG_ERROR([--with-fop=yes specified but fop not found in PATH])
-   fi
-   have_fop=yes
-elif test "x$use_fop" = x"no" ; then
-   if test "x$FOP" != "x"; then
-      AC_MSG_WARN([ignoring FOP environment variable since --with-fop=no was specified])
-   fi
-   have_fop=no
-else
-   AC_MSG_ERROR([--with-fop expects 'yes' or 'no'])
-fi
-
-# Test for a minimum version of fop, if provided.
-m4_ifval([$1],
-[if test "$have_fop" = yes; then
-    # scrape the fop version
-    AC_MSG_CHECKING([for fop minimum version])
-    fop_version=`$FOP -version 2>/dev/null | cut -d' ' -f3`
-    AC_MSG_RESULT([$fop_version])
-    AS_VERSION_COMPARE([$fop_version], [$1],
-        [if test "x$use_fop" = xauto; then
-            AC_MSG_WARN([fop version $fop_version found, but $1 needed])
-            have_fop=no
-        else
-            AC_MSG_ERROR([fop version $fop_version found, but $1 needed])
-        fi])
-fi])
-AM_CONDITIONAL([HAVE_FOP], [test "$have_fop" = yes])
-]) # XORG_WITH_FOP
-
-# XORG_WITH_M4([MIN-VERSION])
-# ---------------------------
-# Minimum version: 1.19.0
-#
-# This macro attempts to locate an m4 macro processor which supports
-# -I option and is only useful for modules relying on M4 in order to
-# expand macros in source code files.
-#
-# Interface to module:
-# M4:	 	returns the path of the m4 program found
-#		returns the path set by the user in the environment
-#
-AC_DEFUN([XORG_WITH_M4], [
-AC_CACHE_CHECK([for m4 that supports -I option], [ac_cv_path_M4],
-   [AC_PATH_PROGS_FEATURE_CHECK([M4], [m4 gm4],
-       [[$ac_path_M4 -I. /dev/null > /dev/null 2>&1 && \
-         ac_cv_path_M4=$ac_path_M4 ac_path_M4_found=:]],
-   [AC_MSG_ERROR([could not find m4 that supports -I option])],
-   [$PATH:/usr/gnu/bin])])
-
-AC_SUBST([M4], [$ac_cv_path_M4])
-]) # XORG_WITH_M4
-
-# XORG_WITH_PS2PDF([DEFAULT])
-# ----------------
-# Minimum version: 1.6.0
-# Minimum version for optional DEFAULT argument: 1.11.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a module to test for the
-# presence of the tool and obtain it's path in separate variables. Coupled with
-# the --with-ps2pdf option, it allows maximum flexibility in making decisions
-# as whether or not to use the ps2pdf package. When DEFAULT is not specified,
-# --with-ps2pdf assumes 'auto'.
-#
-# Interface to module:
-# HAVE_PS2PDF: 	used in makefiles to conditionally generate documentation
-# PS2PDF:	returns the path of the ps2pdf program found
-#		returns the path set by the user in the environment
-# --with-ps2pdf: 'yes' user instructs the module to use ps2pdf
-#		 'no' user instructs the module not to use ps2pdf
-#
-# If the user sets the value of PS2PDF, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_PS2PDF],[
-AC_ARG_VAR([PS2PDF], [Path to ps2pdf command])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_WITH(ps2pdf,
-	AS_HELP_STRING([--with-ps2pdf],
-	   [Use ps2pdf to regenerate documentation (default: ]_defopt[)]),
-	   [use_ps2pdf=$withval], [use_ps2pdf=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_ps2pdf" = x"auto"; then
-   AC_PATH_PROG([PS2PDF], [ps2pdf])
-   if test "x$PS2PDF" = "x"; then
-        AC_MSG_WARN([ps2pdf not found - documentation targets will be skipped])
-	have_ps2pdf=no
-   else
-        have_ps2pdf=yes
-   fi
-elif test "x$use_ps2pdf" = x"yes" ; then
-   AC_PATH_PROG([PS2PDF], [ps2pdf])
-   if test "x$PS2PDF" = "x"; then
-        AC_MSG_ERROR([--with-ps2pdf=yes specified but ps2pdf not found in PATH])
-   fi
-   have_ps2pdf=yes
-elif test "x$use_ps2pdf" = x"no" ; then
-   if test "x$PS2PDF" != "x"; then
-      AC_MSG_WARN([ignoring PS2PDF environment variable since --with-ps2pdf=no was specified])
-   fi
-   have_ps2pdf=no
-else
-   AC_MSG_ERROR([--with-ps2pdf expects 'yes' or 'no'])
-fi
-AM_CONDITIONAL([HAVE_PS2PDF], [test "$have_ps2pdf" = yes])
-]) # XORG_WITH_PS2PDF
-
-# XORG_ENABLE_DOCS (enable_docs=yes)
-# ----------------
-# Minimum version: 1.6.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a builder to skip all
-# documentation targets except traditional man pages.
-# Combined with the specific tool checking macros XORG_WITH_*, it provides
-# maximum flexibility in controlling documentation building.
-# Refer to:
-# XORG_WITH_XMLTO         --with-xmlto
-# XORG_WITH_ASCIIDOC      --with-asciidoc
-# XORG_WITH_DOXYGEN       --with-doxygen
-# XORG_WITH_FOP           --with-fop
-# XORG_WITH_GROFF         --with-groff
-# XORG_WITH_PS2PDF        --with-ps2pdf
-#
-# Interface to module:
-# ENABLE_DOCS: 	  used in makefiles to conditionally generate documentation
-# --enable-docs: 'yes' user instructs the module to generate docs
-#		 'no' user instructs the module not to generate docs
-# parm1:	specify the default value, yes or no.
-#
-AC_DEFUN([XORG_ENABLE_DOCS],[
-m4_define([docs_default], m4_default([$1], [yes]))
-AC_ARG_ENABLE(docs,
-	AS_HELP_STRING([--enable-docs],
-	   [Enable building the documentation (default: ]docs_default[)]),
-	   [build_docs=$enableval], [build_docs=]docs_default)
-m4_undefine([docs_default])
-AM_CONDITIONAL(ENABLE_DOCS, [test x$build_docs = xyes])
-AC_MSG_CHECKING([whether to build documentation])
-AC_MSG_RESULT([$build_docs])
-]) # XORG_ENABLE_DOCS
-
-# XORG_ENABLE_DEVEL_DOCS (enable_devel_docs=yes)
-# ----------------
-# Minimum version: 1.6.0
-#
-# This macro enables a builder to skip all developer documentation.
-# Combined with the specific tool checking macros XORG_WITH_*, it provides
-# maximum flexibility in controlling documentation building.
-# Refer to:
-# XORG_WITH_XMLTO         --with-xmlto
-# XORG_WITH_ASCIIDOC      --with-asciidoc
-# XORG_WITH_DOXYGEN       --with-doxygen
-# XORG_WITH_FOP           --with-fop
-# XORG_WITH_GROFF         --with-groff
-# XORG_WITH_PS2PDF        --with-ps2pdf
-#
-# Interface to module:
-# ENABLE_DEVEL_DOCS:	used in makefiles to conditionally generate developer docs
-# --enable-devel-docs:	'yes' user instructs the module to generate developer docs
-#			'no' user instructs the module not to generate developer docs
-# parm1:		specify the default value, yes or no.
-#
-AC_DEFUN([XORG_ENABLE_DEVEL_DOCS],[
-m4_define([devel_default], m4_default([$1], [yes]))
-AC_ARG_ENABLE(devel-docs,
-	AS_HELP_STRING([--enable-devel-docs],
-	   [Enable building the developer documentation (default: ]devel_default[)]),
-	   [build_devel_docs=$enableval], [build_devel_docs=]devel_default)
-m4_undefine([devel_default])
-AM_CONDITIONAL(ENABLE_DEVEL_DOCS, [test x$build_devel_docs = xyes])
-AC_MSG_CHECKING([whether to build developer documentation])
-AC_MSG_RESULT([$build_devel_docs])
-]) # XORG_ENABLE_DEVEL_DOCS
-
-# XORG_ENABLE_SPECS (enable_specs=yes)
-# ----------------
-# Minimum version: 1.6.0
-#
-# This macro enables a builder to skip all functional specification targets.
-# Combined with the specific tool checking macros XORG_WITH_*, it provides
-# maximum flexibility in controlling documentation building.
-# Refer to:
-# XORG_WITH_XMLTO         --with-xmlto
-# XORG_WITH_ASCIIDOC      --with-asciidoc
-# XORG_WITH_DOXYGEN       --with-doxygen
-# XORG_WITH_FOP           --with-fop
-# XORG_WITH_GROFF         --with-groff
-# XORG_WITH_PS2PDF        --with-ps2pdf
-#
-# Interface to module:
-# ENABLE_SPECS:		used in makefiles to conditionally generate specs
-# --enable-specs:	'yes' user instructs the module to generate specs
-#			'no' user instructs the module not to generate specs
-# parm1:		specify the default value, yes or no.
-#
-AC_DEFUN([XORG_ENABLE_SPECS],[
-m4_define([spec_default], m4_default([$1], [yes]))
-AC_ARG_ENABLE(specs,
-	AS_HELP_STRING([--enable-specs],
-	   [Enable building the specs (default: ]spec_default[)]),
-	   [build_specs=$enableval], [build_specs=]spec_default)
-m4_undefine([spec_default])
-AM_CONDITIONAL(ENABLE_SPECS, [test x$build_specs = xyes])
-AC_MSG_CHECKING([whether to build functional specifications])
-AC_MSG_RESULT([$build_specs])
-]) # XORG_ENABLE_SPECS
-
-# XORG_ENABLE_UNIT_TESTS (enable_unit_tests=auto)
-# ----------------------------------------------
-# Minimum version: 1.13.0
-#
-# This macro enables a builder to enable/disable unit testing
-# It makes no assumption about the test cases implementation
-# Test cases may or may not use Automake "Support for test suites"
-# They may or may not use the software utility library GLib
-#
-# When used in conjunction with XORG_WITH_GLIB, use both AM_CONDITIONAL
-# ENABLE_UNIT_TESTS and HAVE_GLIB. Not all unit tests may use glib.
-# The variable enable_unit_tests is used by other macros in this file.
-#
-# Interface to module:
-# ENABLE_UNIT_TESTS:	used in makefiles to conditionally build tests
-# enable_unit_tests:    used in configure.ac for additional configuration
-# --enable-unit-tests:	'yes' user instructs the module to build tests
-#			'no' user instructs the module not to build tests
-# parm1:		specify the default value, yes or no.
-#
-AC_DEFUN([XORG_ENABLE_UNIT_TESTS],[
-AC_BEFORE([$0], [XORG_WITH_GLIB])
-AC_BEFORE([$0], [XORG_LD_WRAP])
-AC_REQUIRE([XORG_MEMORY_CHECK_FLAGS])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_ENABLE(unit-tests, AS_HELP_STRING([--enable-unit-tests],
-	[Enable building unit test cases (default: ]_defopt[)]),
-	[enable_unit_tests=$enableval], [enable_unit_tests=]_defopt)
-m4_undefine([_defopt])
-AM_CONDITIONAL(ENABLE_UNIT_TESTS, [test "x$enable_unit_tests" != xno])
-AC_MSG_CHECKING([whether to build unit test cases])
-AC_MSG_RESULT([$enable_unit_tests])
-]) # XORG_ENABLE_UNIT_TESTS
-
-# XORG_ENABLE_INTEGRATION_TESTS (enable_unit_tests=auto)
-# ------------------------------------------------------
-# Minimum version: 1.17.0
-#
-# This macro enables a builder to enable/disable integration testing
-# It makes no assumption about the test cases' implementation
-# Test cases may or may not use Automake "Support for test suites"
-#
-# Please see XORG_ENABLE_UNIT_TESTS for unit test support. Unit test support
-# usually requires less dependencies and may be built and run under less
-# stringent environments than integration tests.
-#
-# Interface to module:
-# ENABLE_INTEGRATION_TESTS:   used in makefiles to conditionally build tests
-# enable_integration_tests:   used in configure.ac for additional configuration
-# --enable-integration-tests: 'yes' user instructs the module to build tests
-#                             'no' user instructs the module not to build tests
-# parm1:                      specify the default value, yes or no.
-#
-AC_DEFUN([XORG_ENABLE_INTEGRATION_TESTS],[
-AC_REQUIRE([XORG_MEMORY_CHECK_FLAGS])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_ENABLE(integration-tests, AS_HELP_STRING([--enable-integration-tests],
-	[Enable building integration test cases (default: ]_defopt[)]),
-	[enable_integration_tests=$enableval],
-	[enable_integration_tests=]_defopt)
-m4_undefine([_defopt])
-AM_CONDITIONAL([ENABLE_INTEGRATION_TESTS],
-	[test "x$enable_integration_tests" != xno])
-AC_MSG_CHECKING([whether to build unit test cases])
-AC_MSG_RESULT([$enable_integration_tests])
-]) # XORG_ENABLE_INTEGRATION_TESTS
-
-# XORG_WITH_GLIB([MIN-VERSION], [DEFAULT])
-# ----------------------------------------
-# Minimum version: 1.13.0
-#
-# GLib is a library which provides advanced data structures and functions.
-# This macro enables a module to test for the presence of Glib.
-#
-# When used with ENABLE_UNIT_TESTS, it is assumed GLib is used for unit testing.
-# Otherwise the value of $enable_unit_tests is blank.
-#
-# Please see XORG_ENABLE_INTEGRATION_TESTS for integration test support. Unit
-# test support usually requires less dependencies and may be built and run under
-# less stringent environments than integration tests.
-#
-# Interface to module:
-# HAVE_GLIB: used in makefiles to conditionally build targets
-# with_glib: used in configure.ac to know if GLib has been found
-# --with-glib:	'yes' user instructs the module to use glib
-#		'no' user instructs the module not to use glib
-#
-AC_DEFUN([XORG_WITH_GLIB],[
-AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(glib, AS_HELP_STRING([--with-glib],
-	[Use GLib library for unit testing (default: ]_defopt[)]),
-	[with_glib=$withval], [with_glib=]_defopt)
-m4_undefine([_defopt])
-
-have_glib=no
-# Do not probe GLib if user explicitly disabled unit testing
-if test "x$enable_unit_tests" != x"no"; then
-  # Do not probe GLib if user explicitly disabled it
-  if test "x$with_glib" != x"no"; then
-    m4_ifval(
-      [$1],
-      [PKG_CHECK_MODULES([GLIB], [glib-2.0 >= $1], [have_glib=yes], [have_glib=no])],
-      [PKG_CHECK_MODULES([GLIB], [glib-2.0], [have_glib=yes], [have_glib=no])]
-    )
-  fi
-fi
-
-# Not having GLib when unit testing has been explicitly requested is an error
-if test "x$enable_unit_tests" = x"yes"; then
-  if test "x$have_glib" = x"no"; then
-    AC_MSG_ERROR([--enable-unit-tests=yes specified but glib-2.0 not found])
-  fi
-fi
-
-# Having unit testing disabled when GLib has been explicitly requested is an error
-if test "x$enable_unit_tests" = x"no"; then
-  if test "x$with_glib" = x"yes"; then
-    AC_MSG_ERROR([--enable-unit-tests=yes specified but glib-2.0 not found])
-  fi
-fi
-
-# Not having GLib when it has been explicitly requested is an error
-if test "x$with_glib" = x"yes"; then
-  if test "x$have_glib" = x"no"; then
-    AC_MSG_ERROR([--with-glib=yes specified but glib-2.0 not found])
-  fi
-fi
-
-AM_CONDITIONAL([HAVE_GLIB], [test "$have_glib" = yes])
-]) # XORG_WITH_GLIB
-
-# XORG_LD_WRAP([required|optional])
-# ---------------------------------
-# Minimum version: 1.13.0
-#
-# Check if linker supports -wrap, passed via compiler flags
-#
-# When used with ENABLE_UNIT_TESTS, it is assumed -wrap is used for unit testing.
-# Otherwise the value of $enable_unit_tests is blank.
-#
-# Argument added in 1.16.0 - default is "required", to match existing behavior
-# of returning an error if enable_unit_tests is yes, and ld -wrap is not
-# available, an argument of "optional" allows use when some unit tests require
-# ld -wrap and others do not.
-#
-AC_DEFUN([XORG_LD_WRAP],[
-XORG_CHECK_LINKER_FLAGS([-Wl,-wrap,exit],[have_ld_wrap=yes],[have_ld_wrap=no],
-    [AC_LANG_PROGRAM([#include <stdlib.h>
-                      void __wrap_exit(int status) { return; }],
-                     [exit(0);])])
-# Not having ld wrap when unit testing has been explicitly requested is an error
-if test "x$enable_unit_tests" = x"yes" -a "x$1" != "xoptional"; then
-  if test "x$have_ld_wrap" = x"no"; then
-    AC_MSG_ERROR([--enable-unit-tests=yes specified but ld -wrap support is not available])
-  fi
-fi
-AM_CONDITIONAL([HAVE_LD_WRAP], [test "$have_ld_wrap" = yes])
-#
-]) # XORG_LD_WRAP
-
-# XORG_CHECK_LINKER_FLAGS
-# -----------------------
-# SYNOPSIS
-#
-#   XORG_CHECK_LINKER_FLAGS(FLAGS, [ACTION-SUCCESS], [ACTION-FAILURE], [PROGRAM-SOURCE])
-#
-# DESCRIPTION
-#
-#   Check whether the given linker FLAGS work with the current language's
-#   linker, or whether they give an error.
-#
-#   ACTION-SUCCESS/ACTION-FAILURE are shell commands to execute on
-#   success/failure.
-#
-#   PROGRAM-SOURCE is the program source to link with, if needed
-#
-#   NOTE: Based on AX_CHECK_COMPILER_FLAGS.
-#
-# LICENSE
-#
-#   Copyright (c) 2009 Mike Frysinger <vapier@gentoo.org>
-#   Copyright (c) 2009 Steven G. Johnson <stevenj@alum.mit.edu>
-#   Copyright (c) 2009 Matteo Frigo
-#
-#   This program is free software: you can redistribute it and/or modify it
-#   under the terms of the GNU General Public License as published by the
-#   Free Software Foundation, either version 3 of the License, or (at your
-#   option) any later version.
-#
-#   This program is distributed in the hope that it will be useful, but
-#   WITHOUT ANY WARRANTY; without even the implied warranty of
-#   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General
-#   Public License for more details.
-#
-#   You should have received a copy of the GNU General Public License along
-#   with this program. If not, see <http://www.gnu.org/licenses/>.
-#
-#   As a special exception, the respective Autoconf Macro's copyright owner
-#   gives unlimited permission to copy, distribute and modify the configure
-#   scripts that are the output of Autoconf when processing the Macro. You
-#   need not follow the terms of the GNU General Public License when using
-#   or distributing such scripts, even though portions of the text of the
-#   Macro appear in them. The GNU General Public License (GPL) does govern
-#   all other use of the material that constitutes the Autoconf Macro.
-#
-#   This special exception to the GPL applies to versions of the Autoconf
-#   Macro released by the Autoconf Archive. When you make and distribute a
-#   modified version of the Autoconf Macro, you may extend this special
-#   exception to the GPL to apply to your modified version as well.#
-AC_DEFUN([XORG_CHECK_LINKER_FLAGS],
-[AC_MSG_CHECKING([whether the linker accepts $1])
-dnl Some hackery here since AC_CACHE_VAL can't handle a non-literal varname:
-AS_LITERAL_IF([$1],
-  [AC_CACHE_VAL(AS_TR_SH(xorg_cv_linker_flags_[$1]), [
-      ax_save_FLAGS=$LDFLAGS
-      LDFLAGS="$1"
-      AC_LINK_IFELSE([m4_default([$4],[AC_LANG_PROGRAM()])],
-        AS_TR_SH(xorg_cv_linker_flags_[$1])=yes,
-        AS_TR_SH(xorg_cv_linker_flags_[$1])=no)
-      LDFLAGS=$ax_save_FLAGS])],
-  [ax_save_FLAGS=$LDFLAGS
-   LDFLAGS="$1"
-   AC_LINK_IFELSE([AC_LANG_PROGRAM()],
-     eval AS_TR_SH(xorg_cv_linker_flags_[$1])=yes,
-     eval AS_TR_SH(xorg_cv_linker_flags_[$1])=no)
-   LDFLAGS=$ax_save_FLAGS])
-eval xorg_check_linker_flags=$AS_TR_SH(xorg_cv_linker_flags_[$1])
-AC_MSG_RESULT($xorg_check_linker_flags)
-if test "x$xorg_check_linker_flags" = xyes; then
-	m4_default([$2], :)
-else
-	m4_default([$3], :)
-fi
-]) # XORG_CHECK_LINKER_FLAGS
-
-# XORG_MEMORY_CHECK_FLAGS
-# -----------------------
-# Minimum version: 1.16.0
-#
-# This macro attempts to find appropriate memory checking functionality
-# for various platforms which unit testing code may use to catch various
-# forms of memory allocation and access errors in testing.
-#
-# Interface to module:
-# XORG_MALLOC_DEBUG_ENV - environment variables to set to enable debugging
-#                         Usually added to TESTS_ENVIRONMENT in Makefile.am
-#
-# If the user sets the value of XORG_MALLOC_DEBUG_ENV, it is used verbatim.
-#
-AC_DEFUN([XORG_MEMORY_CHECK_FLAGS],[
-
-AC_REQUIRE([AC_CANONICAL_HOST])
-AC_ARG_VAR([XORG_MALLOC_DEBUG_ENV],
-           [Environment variables to enable memory checking in tests])
-
-# Check for different types of support on different platforms
-case $host_os in
-    solaris*)
-        AC_CHECK_LIB([umem], [umem_alloc],
-            [malloc_debug_env='LD_PRELOAD=libumem.so UMEM_DEBUG=default'])
-        ;;
-    *-gnu*) # GNU libc - Value is used as a single byte bit pattern,
-        # both directly and inverted, so should not be 0 or 255.
-        malloc_debug_env='MALLOC_PERTURB_=15'
-        ;;
-    darwin*)
-        malloc_debug_env='MallocPreScribble=1 MallocScribble=1 DYLD_INSERT_LIBRARIES=/usr/lib/libgmalloc.dylib'
-        ;;
-    *bsd*)
-        malloc_debug_env='MallocPreScribble=1 MallocScribble=1'
-        ;;
-esac
-
-# User supplied flags override default flags
-if test "x$XORG_MALLOC_DEBUG_ENV" != "x"; then
-    malloc_debug_env="$XORG_MALLOC_DEBUG_ENV"
-fi
-
-AC_SUBST([XORG_MALLOC_DEBUG_ENV],[$malloc_debug_env])
-]) # XORG_WITH_LINT
-
-# XORG_CHECK_MALLOC_ZERO
-# ----------------------
-# Minimum version: 1.0.0
-#
-# Defines {MALLOC,XMALLOC,XTMALLOC}_ZERO_CFLAGS appropriately if
-# malloc(0) returns NULL.  Packages should add one of these cflags to
-# their AM_CFLAGS (or other appropriate *_CFLAGS) to use them.
-#
-# No longer actually tests since there is no guarantee applications will
-# run with the same malloc implementation we tested against, and the cost
-# of always ensuring the size passed to malloc is non-zero is minimal now.
-# Still allows builders to override when they have complete control over
-# which malloc implementation will be used.
-AC_DEFUN([XORG_CHECK_MALLOC_ZERO],[
-AC_ARG_ENABLE(malloc0returnsnull,
-	AS_HELP_STRING([--enable-malloc0returnsnull],
-		       [assume malloc(0) can return NULL (default: yes)]),
-	[MALLOC_ZERO_RETURNS_NULL=$enableval],
-	[MALLOC_ZERO_RETURNS_NULL=yes])
-
-AC_MSG_CHECKING([whether to act as if malloc(0) can return NULL])
-AC_MSG_RESULT([$MALLOC_ZERO_RETURNS_NULL])
-
-if test "x$MALLOC_ZERO_RETURNS_NULL" = xyes; then
-	MALLOC_ZERO_CFLAGS="-DMALLOC_0_RETURNS_NULL"
-	XMALLOC_ZERO_CFLAGS=$MALLOC_ZERO_CFLAGS
-	XTMALLOC_ZERO_CFLAGS="$MALLOC_ZERO_CFLAGS -DXTMALLOC_BC"
-else
-	MALLOC_ZERO_CFLAGS=""
-	XMALLOC_ZERO_CFLAGS=""
-	XTMALLOC_ZERO_CFLAGS=""
-fi
-
-AC_SUBST([MALLOC_ZERO_CFLAGS])
-AC_SUBST([XMALLOC_ZERO_CFLAGS])
-AC_SUBST([XTMALLOC_ZERO_CFLAGS])
-]) # XORG_CHECK_MALLOC_ZERO
-
-# XORG_WITH_LINT()
-# ----------------
-# Minimum version: 1.1.0
-#
-# This macro enables the use of a tool that flags some suspicious and
-# non-portable constructs (likely to be bugs) in C language source code.
-# It will attempt to locate the tool and use appropriate options.
-# There are various lint type tools on different platforms.
-#
-# Interface to module:
-# LINT:		returns the path to the tool found on the platform
-#		or the value set to LINT on the configure cmd line
-#		also an Automake conditional
-# LINT_FLAGS:	an Automake variable with appropriate flags
-#
-# --with-lint:	'yes' user instructs the module to use lint
-#		'no' user instructs the module not to use lint (default)
-#
-# If the user sets the value of LINT, AC_PATH_PROG skips testing the path.
-# If the user sets the value of LINT_FLAGS, they are used verbatim.
-#
-AC_DEFUN([XORG_WITH_LINT],[
-
-AC_ARG_VAR([LINT], [Path to a lint-style command])
-AC_ARG_VAR([LINT_FLAGS], [Flags for the lint-style command])
-AC_ARG_WITH(lint, [AS_HELP_STRING([--with-lint],
-		[Use a lint-style source code checker (default: disabled)])],
-		[use_lint=$withval], [use_lint=no])
-
-# Obtain platform specific info like program name and options
-# The lint program on FreeBSD and NetBSD is different from the one on Solaris
-case $host_os in
-  *linux* | *openbsd* | kfreebsd*-gnu | darwin* | cygwin*)
-	lint_name=splint
-	lint_options="-badflag"
-	;;
-  *freebsd* | *netbsd*)
-	lint_name=lint
-	lint_options="-u -b"
-	;;
-  *solaris*)
-	lint_name=lint
-	lint_options="-u -b -h -erroff=E_INDISTING_FROM_TRUNC2"
-	;;
-esac
-
-# Test for the presence of the program (either guessed by the code or spelled out by the user)
-if test "x$use_lint" = x"yes" ; then
-   AC_PATH_PROG([LINT], [$lint_name])
-   if test "x$LINT" = "x"; then
-        AC_MSG_ERROR([--with-lint=yes specified but lint-style tool not found in PATH])
-   fi
-elif test "x$use_lint" = x"no" ; then
-   if test "x$LINT" != "x"; then
-      AC_MSG_WARN([ignoring LINT environment variable since --with-lint=no was specified])
-   fi
-else
-   AC_MSG_ERROR([--with-lint expects 'yes' or 'no'. Use LINT variable to specify path.])
-fi
-
-# User supplied flags override default flags
-if test "x$LINT_FLAGS" != "x"; then
-   lint_options=$LINT_FLAGS
-fi
-
-AC_SUBST([LINT_FLAGS],[$lint_options])
-AM_CONDITIONAL(LINT, [test "x$LINT" != x])
-
-]) # XORG_WITH_LINT
-
-# XORG_LINT_LIBRARY(LIBNAME)
-# --------------------------
-# Minimum version: 1.1.0
-#
-# Sets up flags for building lint libraries for checking programs that call
-# functions in the library.
-#
-# Interface to module:
-# LINTLIB		- Automake variable with the name of lint library file to make
-# MAKE_LINT_LIB		- Automake conditional
-#
-# --enable-lint-library:  - 'yes' user instructs the module to created a lint library
-#			  - 'no' user instructs the module not to create a lint library (default)
-
-AC_DEFUN([XORG_LINT_LIBRARY],[
-AC_REQUIRE([XORG_WITH_LINT])
-AC_ARG_ENABLE(lint-library, [AS_HELP_STRING([--enable-lint-library],
-	[Create lint library (default: disabled)])],
-	[make_lint_lib=$enableval], [make_lint_lib=no])
-
-if test "x$make_lint_lib" = x"yes" ; then
-   LINTLIB=llib-l$1.ln
-   if test "x$LINT" = "x"; then
-        AC_MSG_ERROR([Cannot make lint library without --with-lint])
-   fi
-elif test "x$make_lint_lib" != x"no" ; then
-   AC_MSG_ERROR([--enable-lint-library expects 'yes' or 'no'.])
-fi
-
-AC_SUBST(LINTLIB)
-AM_CONDITIONAL(MAKE_LINT_LIB, [test x$make_lint_lib != xno])
-
-]) # XORG_LINT_LIBRARY
-
-# XORG_COMPILER_BRAND
-# -------------------
-# Minimum version: 1.14.0
-#
-# Checks for various brands of compilers and sets flags as appropriate:
-#   GNU gcc - relies on AC_PROG_CC (via AC_PROG_CC_C99) to set GCC to "yes"
-#   GNU g++ - relies on AC_PROG_CXX to set GXX to "yes"
-#   clang compiler - sets CLANGCC to "yes"
-#   Intel compiler - sets INTELCC to "yes"
-#   Sun/Oracle Solaris Studio cc - sets SUNCC to "yes"
-#
-AC_DEFUN([XORG_COMPILER_BRAND], [
-AC_LANG_CASE(
-	[C], [
-		dnl autoconf-2.70 folded AC_PROG_CC_C99 into AC_PROG_CC
-		dnl and complains that AC_PROG_CC_C99 is obsolete
-		m4_version_prereq([2.70],
-			[AC_REQUIRE([AC_PROG_CC])],
-			[AC_REQUIRE([AC_PROG_CC_C99])])
-	],
-	[C++], [
-		AC_REQUIRE([AC_PROG_CXX])
-	]
-)
-AC_CHECK_DECL([__clang__], [CLANGCC="yes"], [CLANGCC="no"])
-AC_CHECK_DECL([__INTEL_COMPILER], [INTELCC="yes"], [INTELCC="no"])
-AC_CHECK_DECL([__SUNPRO_C], [SUNCC="yes"], [SUNCC="no"])
-]) # XORG_COMPILER_BRAND
-
-# XORG_TESTSET_CFLAG(<variable>, <flag>, [<alternative flag>, ...])
-# ---------------
-# Minimum version: 1.16.0
-#
-# Test if the compiler works when passed the given flag as a command line argument.
-# If it succeeds, the flag is appended to the given variable.  If not, it tries the
-# next flag in the list until there are no more options.
-#
-# Note that this does not guarantee that the compiler supports the flag as some
-# compilers will simply ignore arguments that they do not understand, but we do
-# attempt to weed out false positives by using -Werror=unknown-warning-option and
-# -Werror=unused-command-line-argument
-#
-AC_DEFUN([XORG_TESTSET_CFLAG], [
-m4_if([$#], 0, [m4_fatal([XORG_TESTSET_CFLAG was given with an unsupported number of arguments])])
-m4_if([$#], 1, [m4_fatal([XORG_TESTSET_CFLAG was given with an unsupported number of arguments])])
-
-AC_LANG_COMPILER_REQUIRE
-
-AC_LANG_CASE(
-	[C], [
-		dnl autoconf-2.70 folded AC_PROG_CC_C99 into AC_PROG_CC
-		dnl and complains that AC_PROG_CC_C99 is obsolete
-		m4_version_prereq([2.70],
-			[AC_REQUIRE([AC_PROG_CC])],
-			[AC_REQUIRE([AC_PROG_CC_C99])])
-		define([PREFIX], [C])
-		define([CACHE_PREFIX], [cc])
-		define([COMPILER], [$CC])
-	],
-	[C++], [
-		define([PREFIX], [CXX])
-		define([CACHE_PREFIX], [cxx])
-		define([COMPILER], [$CXX])
-	]
-)
-
-[xorg_testset_save_]PREFIX[FLAGS]="$PREFIX[FLAGS]"
-
-if test "x$[xorg_testset_]CACHE_PREFIX[_unknown_warning_option]" = "x" ; then
-	PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unknown-warning-option"
-	AC_CACHE_CHECK([if ]COMPILER[ supports -Werror=unknown-warning-option],
-			[xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option],
-			AC_COMPILE_IFELSE([AC_LANG_SOURCE([int i;])],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option=yes],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option=no]))
-	[xorg_testset_]CACHE_PREFIX[_unknown_warning_option]=$[xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option]
-	PREFIX[FLAGS]="$[xorg_testset_save_]PREFIX[FLAGS]"
-fi
-
-if test "x$[xorg_testset_]CACHE_PREFIX[_unused_command_line_argument]" = "x" ; then
-	if test "x$[xorg_testset_]CACHE_PREFIX[_unknown_warning_option]" = "xyes" ; then
-		PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unknown-warning-option"
-	fi
-	PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unused-command-line-argument"
-	AC_CACHE_CHECK([if ]COMPILER[ supports -Werror=unused-command-line-argument],
-			[xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument],
-			AC_COMPILE_IFELSE([AC_LANG_SOURCE([int i;])],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument=yes],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument=no]))
-	[xorg_testset_]CACHE_PREFIX[_unused_command_line_argument]=$[xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument]
-	PREFIX[FLAGS]="$[xorg_testset_save_]PREFIX[FLAGS]"
-fi
-
-found="no"
-m4_foreach([flag], m4_cdr($@), [
-	if test $found = "no" ; then
-		if test "x$xorg_testset_]CACHE_PREFIX[_unknown_warning_option" = "xyes" ; then
-			PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_]CACHE_PREFIX[_unused_command_line_argument" = "xyes" ; then
-			PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unused-command-line-argument"
-		fi
-
-		PREFIX[FLAGS]="$PREFIX[FLAGS] ]flag["
-
-dnl Some hackery here since AC_CACHE_VAL can't handle a non-literal varname
-		AC_MSG_CHECKING([if ]COMPILER[ supports ]flag[])
-		cacheid=AS_TR_SH([xorg_cv_]CACHE_PREFIX[_flag_]flag[])
-		AC_CACHE_VAL($cacheid,
-			     [AC_LINK_IFELSE([AC_LANG_PROGRAM([int i;])],
-					     [eval $cacheid=yes],
-					     [eval $cacheid=no])])
-
-		PREFIX[FLAGS]="$[xorg_testset_save_]PREFIX[FLAGS]"
-
-		eval supported=\$$cacheid
-		AC_MSG_RESULT([$supported])
-		if test "$supported" = "yes" ; then
-			$1="$$1 ]flag["
-			found="yes"
-		fi
-	fi
-])
-]) # XORG_TESTSET_CFLAG
-
-# XORG_COMPILER_FLAGS
-# ---------------
-# Minimum version: 1.16.0
-#
-# Defines BASE_CFLAGS or BASE_CXXFLAGS to contain a set of command line
-# arguments supported by the selected compiler which do NOT alter the generated
-# code.  These arguments will cause the compiler to print various warnings
-# during compilation AND turn a conservative set of warnings into errors.
-#
-# The set of flags supported by BASE_CFLAGS and BASE_CXXFLAGS will grow in
-# future versions of util-macros as options are added to new compilers.
-#
-AC_DEFUN([XORG_COMPILER_FLAGS], [
-AC_REQUIRE([XORG_COMPILER_BRAND])
-
-AC_ARG_ENABLE(selective-werror,
-              AS_HELP_STRING([--disable-selective-werror],
-                             [Turn off selective compiler errors. (default: enabled)]),
-              [SELECTIVE_WERROR=$enableval],
-              [SELECTIVE_WERROR=yes])
-
-AC_LANG_CASE(
-        [C], [
-                define([PREFIX], [C])
-        ],
-        [C++], [
-                define([PREFIX], [CXX])
-        ]
-)
-# -v is too short to test reliably with XORG_TESTSET_CFLAG
-if test "x$SUNCC" = "xyes"; then
-    [BASE_]PREFIX[FLAGS]="-v"
-else
-    [BASE_]PREFIX[FLAGS]=""
-fi
-
-# This chunk of warnings were those that existed in the legacy CWARNFLAGS
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wall])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wpointer-arith])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-declarations])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wformat=2], [-Wformat])
-
-AC_LANG_CASE(
-	[C], [
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wstrict-prototypes])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-prototypes])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wnested-externs])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wbad-function-cast])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wold-style-definition], [-fd])
-	]
-)
-
-# This chunk adds additional warnings that could catch undesired effects.
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wunused])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wuninitialized])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wshadow])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-noreturn])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-format-attribute])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wredundant-decls])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wlogical-op])
-
-# These are currently disabled because they are noisy.  They will be enabled
-# in the future once the codebase is sufficiently modernized to silence
-# them.  For now, I don't want them to drown out the other warnings.
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wparentheses])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-align])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-qual])
-
-# Turn some warnings into errors, so we don't accidentally get successful builds
-# when there are problems that should be fixed.
-
-if test "x$SELECTIVE_WERROR" = "xyes" ; then
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=implicit], [-errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=nonnull])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=init-self])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=main])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=missing-braces])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=sequence-point])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=return-type], [-errwarn=E_FUNC_HAS_NO_RETURN_STMT])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=trigraphs])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=array-bounds])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=write-strings])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=address])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=int-to-pointer-cast], [-errwarn=E_BAD_PTR_INT_COMBINATION])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=pointer-to-int-cast]) # Also -errwarn=E_BAD_PTR_INT_COMBINATION
-else
-AC_MSG_WARN([You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wimplicit])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wnonnull])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Winit-self])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmain])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-braces])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wsequence-point])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wreturn-type])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wtrigraphs])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Warray-bounds])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wwrite-strings])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Waddress])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wint-to-pointer-cast])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wpointer-to-int-cast])
-fi
-
-AC_SUBST([BASE_]PREFIX[FLAGS])
-]) # XORG_COMPILER_FLAGS
-
-# XORG_CWARNFLAGS
-# ---------------
-# Minimum version: 1.2.0
-# Deprecated since: 1.16.0 (Use XORG_COMPILER_FLAGS instead)
-#
-# Defines CWARNFLAGS to enable C compiler warnings.
-#
-# This function is deprecated because it defines -fno-strict-aliasing
-# which alters the code generated by the compiler.  If -fno-strict-aliasing
-# is needed, then it should be added explicitly in the module when
-# it is updated to use BASE_CFLAGS.
-#
-AC_DEFUN([XORG_CWARNFLAGS], [
-AC_REQUIRE([XORG_COMPILER_FLAGS])
-AC_REQUIRE([XORG_COMPILER_BRAND])
-AC_LANG_CASE(
-	[C], [
-		CWARNFLAGS="$BASE_CFLAGS"
-		if  test "x$GCC" = xyes ; then
-		    CWARNFLAGS="$CWARNFLAGS -fno-strict-aliasing"
-		fi
-		AC_SUBST(CWARNFLAGS)
-	]
-)
-]) # XORG_CWARNFLAGS
-
-# XORG_STRICT_OPTION
-# -----------------------
-# Minimum version: 1.3.0
-#
-# Add configure option to enable strict compilation flags, such as treating
-# warnings as fatal errors.
-# If --enable-strict-compilation is passed to configure, adds strict flags to
-# $BASE_CFLAGS or $BASE_CXXFLAGS and the deprecated $CWARNFLAGS.
-#
-# Starting in 1.14.0 also exports $STRICT_CFLAGS for use in other tests or
-# when strict compilation is unconditionally desired.
-AC_DEFUN([XORG_STRICT_OPTION], [
-AC_REQUIRE([XORG_CWARNFLAGS])
-AC_REQUIRE([XORG_COMPILER_FLAGS])
-
-AC_ARG_ENABLE(strict-compilation,
-			  AS_HELP_STRING([--enable-strict-compilation],
-			  [Enable all warnings from compiler and make them errors (default: disabled)]),
-			  [STRICT_COMPILE=$enableval], [STRICT_COMPILE=no])
-
-AC_LANG_CASE(
-        [C], [
-                define([PREFIX], [C])
-        ],
-        [C++], [
-                define([PREFIX], [CXX])
-        ]
-)
-
-[STRICT_]PREFIX[FLAGS]=""
-XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-pedantic])
-XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-Werror], [-errwarn])
-
-# Earlier versions of gcc (eg: 4.2) support -Werror=attributes, but do not
-# activate it with -Werror, so we add it here explicitly.
-XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-Werror=attributes])
-
-if test "x$STRICT_COMPILE" = "xyes"; then
-    [BASE_]PREFIX[FLAGS]="$[BASE_]PREFIX[FLAGS] $[STRICT_]PREFIX[FLAGS]"
-    AC_LANG_CASE([C], [CWARNFLAGS="$CWARNFLAGS $STRICT_CFLAGS"])
-fi
-AC_SUBST([STRICT_]PREFIX[FLAGS])
-AC_SUBST([BASE_]PREFIX[FLAGS])
-AC_LANG_CASE([C], AC_SUBST([CWARNFLAGS]))
-]) # XORG_STRICT_OPTION
-
-# XORG_DEFAULT_NOCODE_OPTIONS
-# ---------------------------
-# Minimum version: 1.20.0
-#
-# Defines default options for X.Org modules which don't compile code,
-# such as fonts, bitmaps, cursors, and docs.
-#
-AC_DEFUN([XORG_DEFAULT_NOCODE_OPTIONS], [
-AC_REQUIRE([AC_PROG_INSTALL])
-XORG_RELEASE_VERSION
-XORG_CHANGELOG
-XORG_INSTALL
-XORG_MANPAGE_SECTIONS
-m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])],
-    [AC_SUBST([AM_DEFAULT_VERBOSITY], [1])])
-]) # XORG_DEFAULT_NOCODE_OPTIONS
-
-# XORG_DEFAULT_OPTIONS
-# --------------------
-# Minimum version: 1.3.0
-#
-# Defines default options for X.Org modules which compile code.
-#
-AC_DEFUN([XORG_DEFAULT_OPTIONS], [
-AC_REQUIRE([AC_PROG_INSTALL])
-XORG_COMPILER_FLAGS
-XORG_CWARNFLAGS
-XORG_STRICT_OPTION
-XORG_DEFAULT_NOCODE_OPTIONS
-]) # XORG_DEFAULT_OPTIONS
-
-# XORG_INSTALL()
-# ----------------
-# Minimum version: 1.4.0
-#
-# Defines the variable INSTALL_CMD as the command to copy
-# INSTALL from $prefix/share/util-macros.
-#
-AC_DEFUN([XORG_INSTALL], [
-AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-macros_datadir=`$PKG_CONFIG --print-errors --variable=pkgdatadir xorg-macros`
-INSTALL_CMD="(cp -f "$macros_datadir/INSTALL" \$(top_srcdir)/.INSTALL.tmp && \
-mv \$(top_srcdir)/.INSTALL.tmp \$(top_srcdir)/INSTALL) \
-|| (rm -f \$(top_srcdir)/.INSTALL.tmp; test -e \$(top_srcdir)/INSTALL || ( \
-touch \$(top_srcdir)/INSTALL; \
-echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))"
-AC_SUBST([INSTALL_CMD])
-]) # XORG_INSTALL
-dnl Copyright 2005 Red Hat, Inc
-dnl
-dnl Permission to use, copy, modify, distribute, and sell this software and its
-dnl documentation for any purpose is hereby granted without fee, provided that
-dnl the above copyright notice appear in all copies and that both that
-dnl copyright notice and this permission notice appear in supporting
-dnl documentation.
-dnl
-dnl The above copyright notice and this permission notice shall be included
-dnl in all copies or substantial portions of the Software.
-dnl
-dnl THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
-dnl OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-dnl MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
-dnl IN NO EVENT SHALL THE OPEN GROUP BE LIABLE FOR ANY CLAIM, DAMAGES OR
-dnl OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
-dnl ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
-dnl OTHER DEALINGS IN THE SOFTWARE.
-dnl
-dnl Except as contained in this notice, the name of the copyright holders shall
-dnl not be used in advertising or otherwise to promote the sale, use or
-dnl other dealings in this Software without prior written authorization
-dnl from the copyright holders.
-dnl
-
-# XORG_RELEASE_VERSION
-# --------------------
-# Defines PACKAGE_VERSION_{MAJOR,MINOR,PATCHLEVEL} for modules to use.
-
-AC_DEFUN([XORG_RELEASE_VERSION],[
-	AC_DEFINE_UNQUOTED([PACKAGE_VERSION_MAJOR],
-		[`echo $PACKAGE_VERSION | cut -d . -f 1`],
-		[Major version of this package])
-	PVM=`echo $PACKAGE_VERSION | cut -d . -f 2 | cut -d - -f 1`
-	if test "x$PVM" = "x"; then
-		PVM="0"
-	fi
-	AC_DEFINE_UNQUOTED([PACKAGE_VERSION_MINOR],
-		[$PVM],
-		[Minor version of this package])
-	PVP=`echo $PACKAGE_VERSION | cut -d . -f 3 | cut -d - -f 1`
-	if test "x$PVP" = "x"; then
-		PVP="0"
-	fi
-	AC_DEFINE_UNQUOTED([PACKAGE_VERSION_PATCHLEVEL],
-		[$PVP],
-		[Patch version of this package])
-])
-
-# XORG_CHANGELOG()
-# ----------------
-# Minimum version: 1.2.0
-#
-# Defines the variable CHANGELOG_CMD as the command to generate
-# ChangeLog from git.
-#
-#
-AC_DEFUN([XORG_CHANGELOG], [
-CHANGELOG_CMD="((GIT_DIR=\$(top_srcdir)/.git git log > \$(top_srcdir)/.changelog.tmp) 2>/dev/null && \
-mv \$(top_srcdir)/.changelog.tmp \$(top_srcdir)/ChangeLog) \
-|| (rm -f \$(top_srcdir)/.changelog.tmp; test -e \$(top_srcdir)/ChangeLog || ( \
-touch \$(top_srcdir)/ChangeLog; \
-echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))"
-AC_SUBST([CHANGELOG_CMD])
-]) # XORG_CHANGELOG
-
-# Copyright (C) 2002-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_AUTOMAKE_VERSION(VERSION)
-# ----------------------------
-# Automake X.Y traces this macro to ensure aclocal.m4 has been
-# generated from the m4 files accompanying Automake X.Y.
-# (This private macro should not be called outside this file.)
-AC_DEFUN([AM_AUTOMAKE_VERSION],
-[am__api_version='1.18'
-dnl Some users find AM_AUTOMAKE_VERSION and mistake it for a way to
-dnl require some minimum version.  Point them to the right macro.
-m4_if([$1], [1.18.1], [],
-      [AC_FATAL([Do not call $0, use AM_INIT_AUTOMAKE([$1]).])])dnl
-])
-
-# _AM_AUTOCONF_VERSION(VERSION)
-# -----------------------------
-# aclocal traces this macro to find the Autoconf version.
-# This is a private macro too.  Using m4_define simplifies
-# the logic in aclocal, which can simply ignore this definition.
-m4_define([_AM_AUTOCONF_VERSION], [])
-
-# AM_SET_CURRENT_AUTOMAKE_VERSION
-# -------------------------------
-# Call AM_AUTOMAKE_VERSION and AM_AUTOMAKE_VERSION so they can be traced.
-# This function is AC_REQUIREd by AM_INIT_AUTOMAKE.
-AC_DEFUN([AM_SET_CURRENT_AUTOMAKE_VERSION],
-[AM_AUTOMAKE_VERSION([1.18.1])dnl
-m4_ifndef([AC_AUTOCONF_VERSION],
-  [m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl
-_AM_AUTOCONF_VERSION(m4_defn([AC_AUTOCONF_VERSION]))])
-
-# AM_AUX_DIR_EXPAND                                         -*- Autoconf -*-
-
-# Copyright (C) 2001-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# For projects using AC_CONFIG_AUX_DIR([foo]), Autoconf sets
-# $ac_aux_dir to '$srcdir/foo'.  In other projects, it is set to
-# '$srcdir', '$srcdir/..', or '$srcdir/../..'.
-#
-# Of course, Automake must honor this variable whenever it calls a
-# tool from the auxiliary directory.  The problem is that $srcdir (and
-# therefore $ac_aux_dir as well) can be either absolute or relative,
-# depending on how configure is run.  This is pretty annoying, since
-# it makes $ac_aux_dir quite unusable in subdirectories: in the top
-# source directory, any form will work fine, but in subdirectories a
-# relative path needs to be adjusted first.
-#
-# $ac_aux_dir/missing
-#    fails when called from a subdirectory if $ac_aux_dir is relative
-# $top_srcdir/$ac_aux_dir/missing
-#    fails if $ac_aux_dir is absolute,
-#    fails when called from a subdirectory in a VPATH build with
-#          a relative $ac_aux_dir
-#
-# The reason of the latter failure is that $top_srcdir and $ac_aux_dir
-# are both prefixed by $srcdir.  In an in-source build this is usually
-# harmless because $srcdir is '.', but things will broke when you
-# start a VPATH build or use an absolute $srcdir.
-#
-# So we could use something similar to $top_srcdir/$ac_aux_dir/missing,
-# iff we strip the leading $srcdir from $ac_aux_dir.  That would be:
-#   am_aux_dir='\$(top_srcdir)/'`expr "$ac_aux_dir" : "$srcdir//*\(.*\)"`
-# and then we would define $MISSING as
-#   MISSING="\${SHELL} $am_aux_dir/missing"
-# This will work as long as MISSING is not called from configure, because
-# unfortunately $(top_srcdir) has no meaning in configure.
-# However there are other variables, like CC, which are often used in
-# configure, and could therefore not use this "fixed" $ac_aux_dir.
-#
-# Another solution, used here, is to always expand $ac_aux_dir to an
-# absolute PATH.  The drawback is that using absolute paths prevent a
-# configured tree to be moved without reconfiguration.
-
-AC_DEFUN([AM_AUX_DIR_EXPAND],
-[AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl
-# Expand $ac_aux_dir to an absolute path.
-am_aux_dir=`cd "$ac_aux_dir" && pwd`
-])
-
-# AM_CONDITIONAL                                            -*- Autoconf -*-
-
-# Copyright (C) 1997-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_CONDITIONAL(NAME, SHELL-CONDITION)
-# -------------------------------------
-# Define a conditional.
-AC_DEFUN([AM_CONDITIONAL],
-[AC_PREREQ([2.52])dnl
- m4_if([$1], [TRUE],  [AC_FATAL([$0: invalid condition: $1])],
-       [$1], [FALSE], [AC_FATAL([$0: invalid condition: $1])])dnl
-AC_SUBST([$1_TRUE])dnl
-AC_SUBST([$1_FALSE])dnl
-_AM_SUBST_NOTMAKE([$1_TRUE])dnl
-_AM_SUBST_NOTMAKE([$1_FALSE])dnl
-m4_define([_AM_COND_VALUE_$1], [$2])dnl
-if $2; then
-  $1_TRUE=
-  $1_FALSE='#'
-else
-  $1_TRUE='#'
-  $1_FALSE=
-fi
-AC_CONFIG_COMMANDS_PRE(
-[if test -z "${$1_TRUE}" && test -z "${$1_FALSE}"; then
-  AC_MSG_ERROR([[conditional "$1" was never defined.
-Usually this means the macro was only invoked conditionally.]])
-fi])])
-
-# Copyright (C) 1999-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-
-# There are a few dirty hacks below to avoid letting 'AC_PROG_CC' be
-# written in clear, in which case automake, when reading aclocal.m4,
-# will think it sees a *use*, and therefore will trigger all it's
-# C support machinery.  Also note that it means that autoscan, seeing
-# CC etc. in the Makefile, will ask for an AC_PROG_CC use...
-
-
-# _AM_DEPENDENCIES(NAME)
-# ----------------------
-# See how the compiler implements dependency checking.
-# NAME is "CC", "CXX", "OBJC", "OBJCXX", "UPC", or "GJC".
-# We try a few techniques and use that to set a single cache variable.
-#
-# We don't AC_REQUIRE the corresponding AC_PROG_CC since the latter was
-# modified to invoke _AM_DEPENDENCIES(CC); we would have a circular
-# dependency, and given that the user is not expected to run this macro,
-# just rely on AC_PROG_CC.
-AC_DEFUN([_AM_DEPENDENCIES],
-[AC_REQUIRE([AM_SET_DEPDIR])dnl
-AC_REQUIRE([AM_OUTPUT_DEPENDENCY_COMMANDS])dnl
-AC_REQUIRE([AM_MAKE_INCLUDE])dnl
-AC_REQUIRE([AM_DEP_TRACK])dnl
-
-m4_if([$1], [CC],   [depcc="$CC"   am_compiler_list=],
-      [$1], [CXX],  [depcc="$CXX"  am_compiler_list=],
-      [$1], [OBJC], [depcc="$OBJC" am_compiler_list='gcc3 gcc'],
-      [$1], [OBJCXX], [depcc="$OBJCXX" am_compiler_list='gcc3 gcc'],
-      [$1], [UPC],  [depcc="$UPC"  am_compiler_list=],
-      [$1], [GCJ],  [depcc="$GCJ"  am_compiler_list='gcc3 gcc'],
-                    [depcc="$$1"   am_compiler_list=])
-
-AC_CACHE_CHECK([dependency style of $depcc],
-               [am_cv_$1_dependencies_compiler_type],
-[if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then
-  # We make a subdir and do the tests there.  Otherwise we can end up
-  # making bogus files that we don't know about and never remove.  For
-  # instance it was reported that on HP-UX the gcc test will end up
-  # making a dummy file named 'D' -- because '-MD' means "put the output
-  # in D".
-  rm -rf conftest.dir
-  mkdir conftest.dir
-  # Copy depcomp to subdir because otherwise we won't find it if we're
-  # using a relative directory.
-  cp "$am_depcomp" conftest.dir
-  cd conftest.dir
-  # We will build objects and dependencies in a subdirectory because
-  # it helps to detect inapplicable dependency modes.  For instance
-  # both Tru64's cc and ICC support -MD to output dependencies as a
-  # side effect of compilation, but ICC will put the dependencies in
-  # the current directory while Tru64 will put them in the object
-  # directory.
-  mkdir sub
-
-  am_cv_$1_dependencies_compiler_type=none
-  if test "$am_compiler_list" = ""; then
-     am_compiler_list=`sed -n ['s/^#*\([a-zA-Z0-9]*\))$/\1/p'] < ./depcomp`
-  fi
-  am__universal=false
-  m4_case([$1], [CC],
-    [case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac],
-    [CXX],
-    [case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac])
-
-  for depmode in $am_compiler_list; do
-    # Setup a source with many dependencies, because some compilers
-    # like to wrap large dependency lists on column 80 (with \), and
-    # we should not choose a depcomp mode which is confused by this.
-    #
-    # We need to recreate these files for each test, as the compiler may
-    # overwrite some of them when testing with obscure command lines.
-    # This happens at least with the AIX C compiler.
-    : > sub/conftest.c
-    for i in 1 2 3 4 5 6; do
-      echo '#include "conftst'$i'.h"' >> sub/conftest.c
-      # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with
-      # Solaris 10 /bin/sh.
-      echo '/* dummy */' > sub/conftst$i.h
-    done
-    echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
-
-    # We check with '-c' and '-o' for the sake of the "dashmstdout"
-    # mode.  It turns out that the SunPro C++ compiler does not properly
-    # handle '-M -o', and we need to detect this.  Also, some Intel
-    # versions had trouble with output in subdirs.
-    am__obj=sub/conftest.${OBJEXT-o}
-    am__minus_obj="-o $am__obj"
-    case $depmode in
-    gcc)
-      # This depmode causes a compiler race in universal mode.
-      test "$am__universal" = false || continue
-      ;;
-    nosideeffect)
-      # After this tag, mechanisms are not by side-effect, so they'll
-      # only be used when explicitly requested.
-      if test "x$enable_dependency_tracking" = xyes; then
-	continue
-      else
-	break
-      fi
-      ;;
-    msvc7 | msvc7msys | msvisualcpp | msvcmsys)
-      # This compiler won't grok '-c -o', but also, the minuso test has
-      # not run yet.  These depmodes are late enough in the game, and
-      # so weak that their functioning should not be impacted.
-      am__obj=conftest.${OBJEXT-o}
-      am__minus_obj=
-      ;;
-    none) break ;;
-    esac
-    if depmode=$depmode \
-       source=sub/conftest.c object=$am__obj \
-       depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
-       $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \
-         >/dev/null 2>conftest.err &&
-       grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep $am__obj sub/conftest.Po > /dev/null 2>&1 &&
-       ${MAKE-make} -s -f confmf > /dev/null 2>&1; then
-      # icc doesn't choke on unknown options, it will just issue warnings
-      # or remarks (even with -Werror).  So we grep stderr for any message
-      # that says an option was ignored or not supported.
-      # When given -MP, icc 7.0 and 7.1 complain thus:
-      #   icc: Command line warning: ignoring option '-M'; no argument required
-      # The diagnosis changed in icc 8.0:
-      #   icc: Command line remark: option '-MP' not supported
-      if (grep 'ignoring option' conftest.err ||
-          grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else
-        am_cv_$1_dependencies_compiler_type=$depmode
-        break
-      fi
-    fi
-  done
-
-  cd ..
-  rm -rf conftest.dir
-else
-  am_cv_$1_dependencies_compiler_type=none
-fi
-])
-AC_SUBST([$1DEPMODE], [depmode=$am_cv_$1_dependencies_compiler_type])
-AM_CONDITIONAL([am__fastdep$1], [
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_$1_dependencies_compiler_type" = gcc3])
-])
-
-
-# AM_SET_DEPDIR
-# -------------
-# Choose a directory name for dependency files.
-# This macro is AC_REQUIREd in _AM_DEPENDENCIES.
-AC_DEFUN([AM_SET_DEPDIR],
-[AC_REQUIRE([AM_SET_LEADING_DOT])dnl
-AC_SUBST([DEPDIR], ["${am__leading_dot}deps"])dnl
-])
-
-
-# AM_DEP_TRACK
-# ------------
-AC_DEFUN([AM_DEP_TRACK],
-[AC_ARG_ENABLE([dependency-tracking], [dnl
-AS_HELP_STRING(
-  [--enable-dependency-tracking],
-  [do not reject slow dependency extractors])
-AS_HELP_STRING(
-  [--disable-dependency-tracking],
-  [speeds up one-time build])])
-if test "x$enable_dependency_tracking" != xno; then
-  am_depcomp="$ac_aux_dir/depcomp"
-  AMDEPBACKSLASH='\'
-  am__nodep='_no'
-fi
-AM_CONDITIONAL([AMDEP], [test "x$enable_dependency_tracking" != xno])
-AC_SUBST([AMDEPBACKSLASH])dnl
-_AM_SUBST_NOTMAKE([AMDEPBACKSLASH])dnl
-AC_SUBST([am__nodep])dnl
-_AM_SUBST_NOTMAKE([am__nodep])dnl
-])
-
-# Generate code to set up dependency tracking.              -*- Autoconf -*-
-
-# Copyright (C) 1999-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_OUTPUT_DEPENDENCY_COMMANDS
-# ------------------------------
-AC_DEFUN([_AM_OUTPUT_DEPENDENCY_COMMANDS],
-[{
-  # Older Autoconf quotes --file arguments for eval, but not when files
-  # are listed without --file.  Let's play safe and only enable the eval
-  # if we detect the quoting.
-  # TODO: see whether this extra hack can be removed once we start
-  # requiring Autoconf 2.70 or later.
-  AS_CASE([$CONFIG_FILES],
-          [*\'*], [eval set x "$CONFIG_FILES"],
-          [*], [set x $CONFIG_FILES])
-  shift
-  # Used to flag and report bootstrapping failures.
-  am_rc=0
-  for am_mf
-  do
-    # Strip MF so we end up with the name of the file.
-    am_mf=`AS_ECHO(["$am_mf"]) | sed -e 's/:.*$//'`
-    # Check whether this is an Automake generated Makefile which includes
-    # dependency-tracking related rules and includes.
-    # Grep'ing the whole file directly is not great: AIX grep has a line
-    # limit of 2048, but all sed's we know have understand at least 4000.
-    sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \
-      || continue
-    am_dirpart=`AS_DIRNAME(["$am_mf"])`
-    am_filepart=`AS_BASENAME(["$am_mf"])`
-    AM_RUN_LOG([cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles]) || am_rc=$?
-  done
-  if test $am_rc -ne 0; then
-    AC_MSG_FAILURE([Something went wrong bootstrapping makefile fragments
-    for automatic dependency tracking.  If GNU make was not used, consider
-    re-running the configure script with MAKE="gmake" (or whatever is
-    necessary).  You can also try re-running configure with the
-    '--disable-dependency-tracking' option to at least be able to build
-    the package (albeit without support for automatic dependency tracking).])
-  fi
-  AS_UNSET([am_dirpart])
-  AS_UNSET([am_filepart])
-  AS_UNSET([am_mf])
-  AS_UNSET([am_rc])
-  rm -f conftest-deps.mk
-}
-])# _AM_OUTPUT_DEPENDENCY_COMMANDS
-
-
-# AM_OUTPUT_DEPENDENCY_COMMANDS
-# -----------------------------
-# This macro should only be invoked once -- use via AC_REQUIRE.
-#
-# This code is only required when automatic dependency tracking is enabled.
-# This creates each '.Po' and '.Plo' makefile fragment that we'll need in
-# order to bootstrap the dependency handling code.
-AC_DEFUN([AM_OUTPUT_DEPENDENCY_COMMANDS],
-[AC_CONFIG_COMMANDS([depfiles],
-     [test x"$AMDEP_TRUE" != x"" || _AM_OUTPUT_DEPENDENCY_COMMANDS],
-     [AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}"])])
-
-# Do all the work for Automake.                             -*- Autoconf -*-
-
-# Copyright (C) 1996-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This macro actually does too much.  Some checks are only needed if
-# your package does certain things.  But this isn't really a big deal.
-
-dnl Redefine AC_PROG_CC to automatically invoke _AM_PROG_CC_C_O.
-m4_define([AC_PROG_CC],
-m4_defn([AC_PROG_CC])
-[_AM_PROG_CC_C_O
-])
-
-# AM_INIT_AUTOMAKE(PACKAGE, VERSION, [NO-DEFINE])
-# AM_INIT_AUTOMAKE([OPTIONS])
-# -----------------------------------------------
-# The call with PACKAGE and VERSION arguments is the old style
-# call (pre autoconf-2.50), which is being phased out.  PACKAGE
-# and VERSION should now be passed to AC_INIT and removed from
-# the call to AM_INIT_AUTOMAKE.
-# We support both call styles for the transition.  After
-# the next Automake release, Autoconf can make the AC_INIT
-# arguments mandatory, and then we can depend on a new Autoconf
-# release and drop the old call support.
-AC_DEFUN([AM_INIT_AUTOMAKE],
-[AC_PREREQ([2.65])dnl
-m4_ifdef([_$0_ALREADY_INIT],
-  [m4_fatal([$0 expanded multiple times
-]m4_defn([_$0_ALREADY_INIT]))],
-  [m4_define([_$0_ALREADY_INIT], m4_expansion_stack)])dnl
-dnl Autoconf wants to disallow AM_ names.  We explicitly allow
-dnl the ones we care about.
-m4_pattern_allow([^AM_[A-Z]+FLAGS$])dnl
-AC_REQUIRE([AM_SET_CURRENT_AUTOMAKE_VERSION])dnl
-AC_REQUIRE([AC_PROG_INSTALL])dnl
-if test "`cd $srcdir && pwd`" != "`pwd`"; then
-  # Use -I$(srcdir) only when $(srcdir) != ., so that make's output
-  # is not polluted with repeated "-I."
-  AC_SUBST([am__isrc], [' -I$(srcdir)'])_AM_SUBST_NOTMAKE([am__isrc])dnl
-  # test to see if srcdir already configured
-  if test -f $srcdir/config.status; then
-    AC_MSG_ERROR([source directory already configured; run "make distclean" there first])
-  fi
-fi
-
-# test whether we have cygpath
-if test -z "$CYGPATH_W"; then
-  if (cygpath --version) >/dev/null 2>/dev/null; then
-    CYGPATH_W='cygpath -w'
-  else
-    CYGPATH_W=echo
-  fi
-fi
-AC_SUBST([CYGPATH_W])
-
-# Define the identity of the package.
-dnl Distinguish between old-style and new-style calls.
-m4_ifval([$2],
-[AC_DIAGNOSE([obsolete],
-             [$0: two- and three-arguments forms are deprecated.])
-m4_ifval([$3], [_AM_SET_OPTION([no-define])])dnl
- AC_SUBST([PACKAGE], [$1])dnl
- AC_SUBST([VERSION], [$2])],
-[_AM_SET_OPTIONS([$1])dnl
-dnl Diagnose old-style AC_INIT with new-style AM_AUTOMAKE_INIT.
-m4_if(
-  m4_ifset([AC_PACKAGE_NAME], [ok]):m4_ifset([AC_PACKAGE_VERSION], [ok]),
-  [ok:ok],,
-  [m4_fatal([AC_INIT should be called with package and version arguments])])dnl
- AC_SUBST([PACKAGE], ['AC_PACKAGE_TARNAME'])dnl
- AC_SUBST([VERSION], ['AC_PACKAGE_VERSION'])])dnl
-
-_AM_IF_OPTION([no-define],,
-[AC_DEFINE_UNQUOTED([PACKAGE], ["$PACKAGE"], [Name of package])
- AC_DEFINE_UNQUOTED([VERSION], ["$VERSION"], [Version number of package])])dnl
-
-# Some tools Automake needs.
-AC_REQUIRE([AM_SANITY_CHECK])dnl
-AC_REQUIRE([AC_ARG_PROGRAM])dnl
-AM_MISSING_PROG([ACLOCAL], [aclocal-${am__api_version}])
-AM_MISSING_PROG([AUTOCONF], [autoconf])
-AM_MISSING_PROG([AUTOMAKE], [automake-${am__api_version}])
-AM_MISSING_PROG([AUTOHEADER], [autoheader])
-AM_MISSING_PROG([MAKEINFO], [makeinfo])
-AC_REQUIRE([AM_PROG_INSTALL_SH])dnl
-AC_REQUIRE([AM_PROG_INSTALL_STRIP])dnl
-AC_REQUIRE([AC_PROG_MKDIR_P])dnl
-# For better backward compatibility.  To be removed once Automake 1.9.x
-# dies out for good.  For more background, see:
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00001.html>
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00014.html>
-AC_SUBST([mkdir_p], ['$(MKDIR_P)'])
-# We need awk for the "check" target (and possibly the TAP driver).  The
-# system "awk" is bad on some platforms.
-AC_REQUIRE([AC_PROG_AWK])dnl
-AC_REQUIRE([AC_PROG_MAKE_SET])dnl
-AC_REQUIRE([AM_SET_LEADING_DOT])dnl
-_AM_IF_OPTION([tar-ustar], [_AM_PROG_TAR([ustar])],
-  [_AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])],
-    [_AM_IF_OPTION([tar-v7], [_AM_PROG_TAR([v7])],
-      [_AM_PROG_TAR([ustar])])])])
-_AM_IF_OPTION([no-dependencies],,
-[AC_PROVIDE_IFELSE([AC_PROG_CC],
-		  [_AM_DEPENDENCIES([CC])],
-		  [m4_define([AC_PROG_CC],
-			     m4_defn([AC_PROG_CC])[_AM_DEPENDENCIES([CC])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_CXX],
-		  [_AM_DEPENDENCIES([CXX])],
-		  [m4_define([AC_PROG_CXX],
-			     m4_defn([AC_PROG_CXX])[_AM_DEPENDENCIES([CXX])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_OBJC],
-		  [_AM_DEPENDENCIES([OBJC])],
-		  [m4_define([AC_PROG_OBJC],
-			     m4_defn([AC_PROG_OBJC])[_AM_DEPENDENCIES([OBJC])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_OBJCXX],
-		  [_AM_DEPENDENCIES([OBJCXX])],
-		  [m4_define([AC_PROG_OBJCXX],
-			     m4_defn([AC_PROG_OBJCXX])[_AM_DEPENDENCIES([OBJCXX])])])dnl
-])
-# Variables for tags utilities; see am/tags.am
-if test -z "$CTAGS"; then
-  CTAGS=ctags
-fi
-AC_SUBST([CTAGS])
-if test -z "$ETAGS"; then
-  ETAGS=etags
-fi
-AC_SUBST([ETAGS])
-if test -z "$CSCOPE"; then
-  CSCOPE=cscope
-fi
-AC_SUBST([CSCOPE])
-
-AC_REQUIRE([_AM_SILENT_RULES])dnl
-dnl The testsuite driver may need to know about EXEEXT, so add the
-dnl 'am__EXEEXT' conditional if _AM_COMPILER_EXEEXT was seen.  This
-dnl macro is hooked onto _AC_COMPILER_EXEEXT early, see below.
-AC_CONFIG_COMMANDS_PRE(dnl
-[m4_provide_if([_AM_COMPILER_EXEEXT],
-  [AM_CONDITIONAL([am__EXEEXT], [test -n "$EXEEXT"])])])dnl
-
-AC_REQUIRE([_AM_PROG_RM_F])
-AC_REQUIRE([_AM_PROG_XARGS_N])
-
-dnl The trailing newline in this macro's definition is deliberate, for
-dnl backward compatibility and to allow trailing 'dnl'-style comments
-dnl after the AM_INIT_AUTOMAKE invocation. See automake bug#16841.
-])
-
-dnl Hook into '_AC_COMPILER_EXEEXT' early to learn its expansion.  Do not
-dnl add the conditional right here, as _AC_COMPILER_EXEEXT may be further
-dnl mangled by Autoconf and run in a shell conditional statement.
-m4_define([_AC_COMPILER_EXEEXT],
-m4_defn([_AC_COMPILER_EXEEXT])[m4_provide([_AM_COMPILER_EXEEXT])])
-
-# When config.status generates a header, we must update the stamp-h file.
-# This file resides in the same directory as the config header
-# that is generated.  The stamp files are numbered to have different names.
-
-# Autoconf calls _AC_AM_CONFIG_HEADER_HOOK (when defined) in the
-# loop where config.status creates the headers, so we can generate
-# our stamp files there.
-AC_DEFUN([_AC_AM_CONFIG_HEADER_HOOK],
-[# Compute $1's index in $config_headers.
-_am_arg=$1
-_am_stamp_count=1
-for _am_header in $config_headers :; do
-  case $_am_header in
-    $_am_arg | $_am_arg:* )
-      break ;;
-    * )
-      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
-  esac
-done
-echo "timestamp for $_am_arg" >`AS_DIRNAME(["$_am_arg"])`/stamp-h[]$_am_stamp_count])
-
-# Copyright (C) 2001-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_PROG_INSTALL_SH
-# ------------------
-# Define $install_sh.
-AC_DEFUN([AM_PROG_INSTALL_SH],
-[AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-if test x"${install_sh+set}" != xset; then
-  case $am_aux_dir in
-  *\ * | *\	*)
-    install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;;
-  *)
-    install_sh="\${SHELL} $am_aux_dir/install-sh"
-  esac
-fi
-AC_SUBST([install_sh])])
-
-# Copyright (C) 2003-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# Check whether the underlying file-system supports filenames
-# with a leading dot.  For instance MS-DOS doesn't.
-AC_DEFUN([AM_SET_LEADING_DOT],
-[rm -rf .tst 2>/dev/null
-mkdir .tst 2>/dev/null
-if test -d .tst; then
-  am__leading_dot=.
-else
-  am__leading_dot=_
-fi
-rmdir .tst 2>/dev/null
-AC_SUBST([am__leading_dot])])
-
-# Check to see how 'make' treats includes.	            -*- Autoconf -*-
-
-# Copyright (C) 2001-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_MAKE_INCLUDE()
-# -----------------
-# Check whether make has an 'include' directive that can support all
-# the idioms we need for our automatic dependency tracking code.
-AC_DEFUN([AM_MAKE_INCLUDE],
-[AC_MSG_CHECKING([whether ${MAKE-make} supports the include directive])
-cat > confinc.mk << 'END'
-am__doit:
-	@echo this is the am__doit target >confinc.out
-.PHONY: am__doit
-END
-am__include="#"
-am__quote=
-# BSD make does it like this.
-echo '.include "confinc.mk" # ignored' > confmf.BSD
-# Other make implementations (GNU, Solaris 10, AIX) do it like this.
-echo 'include confinc.mk # ignored' > confmf.GNU
-_am_result=no
-for s in GNU BSD; do
-  AM_RUN_LOG([${MAKE-make} -f confmf.$s && cat confinc.out])
-  AS_CASE([$?:`cat confinc.out 2>/dev/null`],
-      ['0:this is the am__doit target'],
-      [AS_CASE([$s],
-          [BSD], [am__include='.include' am__quote='"'],
-          [am__include='include' am__quote=''])])
-  if test "$am__include" != "#"; then
-    _am_result="yes ($s style)"
-    break
-  fi
-done
-rm -f confinc.* confmf.*
-AC_MSG_RESULT([${_am_result}])
-AC_SUBST([am__include])])
-AC_SUBST([am__quote])])
-
-# Fake the existence of programs that GNU maintainers use.  -*- Autoconf -*-
-
-# Copyright (C) 1997-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_MISSING_PROG(NAME, PROGRAM)
-# ------------------------------
-AC_DEFUN([AM_MISSING_PROG],
-[AC_REQUIRE([AM_MISSING_HAS_RUN])
-$1=${$1-"${am_missing_run}$2"}
-AC_SUBST($1)])
-
-# AM_MISSING_HAS_RUN
-# ------------------
-# Define MISSING if not defined so far and test if it is modern enough.
-# If it is, set am_missing_run to use it, otherwise, to nothing.
-AC_DEFUN([AM_MISSING_HAS_RUN],
-[AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-AC_REQUIRE_AUX_FILE([missing])dnl
-if test x"${MISSING+set}" != xset; then
-  MISSING="\${SHELL} '$am_aux_dir/missing'"
-fi
-# Use eval to expand $SHELL
-if eval "$MISSING --is-lightweight"; then
-  am_missing_run="$MISSING "
-else
-  am_missing_run=
-  AC_MSG_WARN(['missing' script is too old or missing])
-fi
-])
-
-# Helper functions for option handling.                     -*- Autoconf -*-
-
-# Copyright (C) 2001-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_MANGLE_OPTION(NAME)
-# -----------------------
-AC_DEFUN([_AM_MANGLE_OPTION],
-[[_AM_OPTION_]m4_bpatsubst($1, [[^a-zA-Z0-9_]], [_])])
-
-# _AM_SET_OPTION(NAME)
-# --------------------
-# Set option NAME.  Presently that only means defining a flag for this option.
-AC_DEFUN([_AM_SET_OPTION],
-[m4_define(_AM_MANGLE_OPTION([$1]), [1])])
-
-# _AM_SET_OPTIONS(OPTIONS)
-# ------------------------
-# OPTIONS is a space-separated list of Automake options.
-AC_DEFUN([_AM_SET_OPTIONS],
-[m4_foreach_w([_AM_Option], [$1], [_AM_SET_OPTION(_AM_Option)])])
-
-# _AM_IF_OPTION(OPTION, IF-SET, [IF-NOT-SET])
-# -------------------------------------------
-# Execute IF-SET if OPTION is set, IF-NOT-SET otherwise.
-AC_DEFUN([_AM_IF_OPTION],
-[m4_ifset(_AM_MANGLE_OPTION([$1]), [$2], [$3])])
-
-# Copyright (C) 1999-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_PROG_CC_C_O
-# ---------------
-# Like AC_PROG_CC_C_O, but changed for automake.  We rewrite AC_PROG_CC
-# to automatically call this.
-AC_DEFUN([_AM_PROG_CC_C_O],
-[AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-AC_REQUIRE_AUX_FILE([compile])dnl
-AC_LANG_PUSH([C])dnl
-AC_CACHE_CHECK(
-  [whether $CC understands -c and -o together],
-  [am_cv_prog_cc_c_o],
-  [AC_LANG_CONFTEST([AC_LANG_PROGRAM([])])
-  # Make sure it works both with $CC and with simple cc.
-  # Following AC_PROG_CC_C_O, we do the test twice because some
-  # compilers refuse to overwrite an existing .o file with -o,
-  # though they will create one.
-  am_cv_prog_cc_c_o=yes
-  for am_i in 1 2; do
-    if AM_RUN_LOG([$CC -c conftest.$ac_ext -o conftest2.$ac_objext]) \
-         && test -f conftest2.$ac_objext; then
-      : OK
-    else
-      am_cv_prog_cc_c_o=no
-      break
-    fi
-  done
-  # aligned with autoconf, so not including core; see bug#72225.
-  rm -f -r a.out a.exe b.out conftest.$ac_ext conftest.$ac_objext \
-    conftest.dSYM conftest1.$ac_ext conftest1.$ac_objext conftest1.dSYM \
-    conftest2.$ac_ext conftest2.$ac_objext conftest2.dSYM
-  unset am_i])
-if test "$am_cv_prog_cc_c_o" != yes; then
-   # Losing compiler, so override with the script.
-   # FIXME: It is wrong to rewrite CC.
-   # But if we don't then we get into trouble of one sort or another.
-   # A longer-term fix would be to have automake use am__CC in this case,
-   # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)"
-   CC="$am_aux_dir/compile $CC"
-fi
-AC_LANG_POP([C])])
-
-# For backward compatibility.
-AC_DEFUN_ONCE([AM_PROG_CC_C_O], [AC_REQUIRE([AC_PROG_CC])])
-
-# Copyright (C) 2022-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_PROG_RM_F
-# ---------------
-# Check whether 'rm -f' without any arguments works.
-# https://bugs.gnu.org/10828
-AC_DEFUN([_AM_PROG_RM_F],
-[am__rm_f_notfound=
-AS_IF([(rm -f && rm -fr && rm -rf) 2>/dev/null], [], [am__rm_f_notfound='""'])
-AC_SUBST(am__rm_f_notfound)
-])
-
-# Copyright (C) 2001-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_RUN_LOG(COMMAND)
-# -------------------
-# Run COMMAND, save the exit status in ac_status, and log it.
-# (This has been adapted from Autoconf's _AC_RUN_LOG macro.)
-AC_DEFUN([AM_RUN_LOG],
-[{ echo "$as_me:$LINENO: $1" >&AS_MESSAGE_LOG_FD
-   ($1) >&AS_MESSAGE_LOG_FD 2>&AS_MESSAGE_LOG_FD
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
-   (exit $ac_status); }])
-
-# Check to make sure that the build environment is sane.    -*- Autoconf -*-
-
-# Copyright (C) 1996-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_SLEEP_FRACTIONAL_SECONDS
-# ----------------------------
-AC_DEFUN([_AM_SLEEP_FRACTIONAL_SECONDS], [dnl
-AC_CACHE_CHECK([whether sleep supports fractional seconds],
-               am_cv_sleep_fractional_seconds, [dnl
-AS_IF([sleep 0.001 2>/dev/null], [am_cv_sleep_fractional_seconds=yes],
-                                 [am_cv_sleep_fractional_seconds=no])
-])])
-
-# _AM_FILESYSTEM_TIMESTAMP_RESOLUTION
-# -----------------------------------
-# Determine the filesystem's resolution for file modification
-# timestamps.  The coarsest we know of is FAT, with a resolution
-# of only two seconds, even with the most recent "exFAT" extensions.
-# The finest (e.g. ext4 with large inodes, XFS, ZFS) is one
-# nanosecond, matching clock_gettime.  However, it is probably not
-# possible to delay execution of a shell script for less than one
-# millisecond, due to process creation overhead and scheduling
-# granularity, so we don't check for anything finer than that. (See below.)
-AC_DEFUN([_AM_FILESYSTEM_TIMESTAMP_RESOLUTION], [dnl
-AC_REQUIRE([_AM_SLEEP_FRACTIONAL_SECONDS])
-AC_CACHE_CHECK([filesystem timestamp resolution],
-               am_cv_filesystem_timestamp_resolution, [dnl
-# Default to the worst case.
-am_cv_filesystem_timestamp_resolution=2
-
-# Only try to go finer than 1 sec if sleep can do it.
-# Don't try 1 sec, because if 0.01 sec and 0.1 sec don't work,
-# - 1 sec is not much of a win compared to 2 sec, and
-# - it takes 2 seconds to perform the test whether 1 sec works.
-# 
-# Instead, just use the default 2s on platforms that have 1s resolution,
-# accept the extra 1s delay when using $sleep in the Automake tests, in
-# exchange for not incurring the 2s delay for running the test for all
-# packages.
-#
-am_try_resolutions=
-if test "$am_cv_sleep_fractional_seconds" = yes; then
-  # Even a millisecond often causes a bunch of false positives,
-  # so just try a hundredth of a second. The time saved between .001 and
-  # .01 is not terribly consequential.
-  am_try_resolutions="0.01 0.1 $am_try_resolutions"
-fi
-
-# In order to catch current-generation FAT out, we must *modify* files
-# that already exist; the *creation* timestamp is finer.  Use names
-# that make ls -t sort them differently when they have equal
-# timestamps than when they have distinct timestamps, keeping
-# in mind that ls -t prints the *newest* file first.
-rm -f conftest.ts?
-: > conftest.ts1
-: > conftest.ts2
-: > conftest.ts3
-
-# Make sure ls -t actually works.  Do 'set' in a subshell so we don't
-# clobber the current shell's arguments. (Outer-level square brackets
-# are removed by m4; they're present so that m4 does not expand
-# <dollar><star>; be careful, easy to get confused.)
-if (
-     set X `[ls -t conftest.ts[12]]` &&
-     {
-       test "$[]*" != "X conftest.ts1 conftest.ts2" ||
-       test "$[]*" != "X conftest.ts2 conftest.ts1";
-     }
-); then :; else
-  # If neither matched, then we have a broken ls.  This can happen
-  # if, for instance, CONFIG_SHELL is bash and it inherits a
-  # broken ls alias from the environment.  This has actually
-  # happened.  Such a system could not be considered "sane".
-  _AS_ECHO_UNQUOTED(
-    ["Bad output from ls -t: \"`[ls -t conftest.ts[12]]`\""],
-    [AS_MESSAGE_LOG_FD])
-  AC_MSG_FAILURE([ls -t produces unexpected output.
-Make sure there is not a broken ls alias in your environment.])
-fi
-
-for am_try_res in $am_try_resolutions; do
-  # Any one fine-grained sleep might happen to cross the boundary
-  # between two values of a coarser actual resolution, but if we do
-  # two fine-grained sleeps in a row, at least one of them will fall
-  # entirely within a coarse interval.
-  echo alpha > conftest.ts1
-  sleep $am_try_res
-  echo beta > conftest.ts2
-  sleep $am_try_res
-  echo gamma > conftest.ts3
-
-  # We assume that 'ls -t' will make use of high-resolution
-  # timestamps if the operating system supports them at all.
-  if (set X `ls -t conftest.ts?` &&
-      test "$[]2" = conftest.ts3 &&
-      test "$[]3" = conftest.ts2 &&
-      test "$[]4" = conftest.ts1); then
-    #
-    # Ok, ls -t worked. If we're at a resolution of 1 second, we're done,
-    # because we don't need to test make.
-    make_ok=true
-    if test $am_try_res != 1; then
-      # But if we've succeeded so far with a subsecond resolution, we
-      # have one more thing to check: make. It can happen that
-      # everything else supports the subsecond mtimes, but make doesn't;
-      # notably on macOS, which ships make 3.81 from 2006 (the last one
-      # released under GPLv2). https://bugs.gnu.org/68808
-      # 
-      # We test $MAKE if it is defined in the environment, else "make".
-      # It might get overridden later, but our hope is that in practice
-      # it does not matter: it is the system "make" which is (by far)
-      # the most likely to be broken, whereas if the user overrides it,
-      # probably they did so with a better, or at least not worse, make.
-      # https://lists.gnu.org/archive/html/automake/2024-06/msg00051.html
-      #
-      # Create a Makefile (real tab character here):
-      rm -f conftest.mk
-      echo 'conftest.ts1: conftest.ts2' >conftest.mk
-      echo '	touch conftest.ts2' >>conftest.mk
-      #
-      # Now, running
-      #   touch conftest.ts1; touch conftest.ts2; make
-      # should touch ts1 because ts2 is newer. This could happen by luck,
-      # but most often, it will fail if make's support is insufficient. So
-      # test for several consecutive successes.
-      #
-      # (We reuse conftest.ts[12] because we still want to modify existing
-      # files, not create new ones, per above.)
-      n=0
-      make=${MAKE-make}
-      until test $n -eq 3; do
-        echo one > conftest.ts1
-        sleep $am_try_res
-        echo two > conftest.ts2 # ts2 should now be newer than ts1
-        if $make -f conftest.mk | grep 'up to date' >/dev/null; then
-          make_ok=false
-          break # out of $n loop
-        fi
-        n=`expr $n + 1`
-      done
-    fi
-    #
-    if $make_ok; then
-      # Everything we know to check worked out, so call this resolution good.
-      am_cv_filesystem_timestamp_resolution=$am_try_res
-      break # out of $am_try_res loop
-    fi
-    # Otherwise, we'll go on to check the next resolution.
-  fi
-done
-rm -f conftest.ts?
-# (end _am_filesystem_timestamp_resolution)
-])])
-
-# AM_SANITY_CHECK
-# ---------------
-AC_DEFUN([AM_SANITY_CHECK],
-[AC_REQUIRE([_AM_FILESYSTEM_TIMESTAMP_RESOLUTION])
-# This check should not be cached, as it may vary across builds of
-# different projects.
-AC_MSG_CHECKING([whether build environment is sane])
-# Reject unsafe characters in $srcdir or the absolute working directory
-# name.  Accept space and tab only in the latter.
-am_lf='
-'
-case `pwd` in
-  *[[\\\"\#\$\&\'\`$am_lf]]*)
-    AC_MSG_RESULT([no])
-    AC_MSG_ERROR([unsafe absolute working directory name]);;
-esac
-case $srcdir in
-  *[[\\\"\#\$\&\'\`$am_lf\ \	]]*)
-    AC_MSG_RESULT([no])
-    AC_MSG_ERROR([unsafe srcdir value: '$srcdir']);;
-esac
-
-# Do 'set' in a subshell so we don't clobber the current shell's
-# arguments.  Must try -L first in case configure is actually a
-# symlink; some systems play weird games with the mod time of symlinks
-# (eg FreeBSD returns the mod time of the symlink's containing
-# directory).
-am_build_env_is_sane=no
-am_has_slept=no
-rm -f conftest.file
-for am_try in 1 2; do
-  echo "timestamp, slept: $am_has_slept" > conftest.file
-  if (
-    set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null`
-    if test "$[]*" = "X"; then
-      # -L didn't work.
-      set X `ls -t "$srcdir/configure" conftest.file`
-    fi
-    test "$[]2" = conftest.file
-  ); then
-    am_build_env_is_sane=yes
-    break
-  fi
-  # Just in case.
-  sleep "$am_cv_filesystem_timestamp_resolution"
-  am_has_slept=yes
-done
-
-AC_MSG_RESULT([$am_build_env_is_sane])
-if test "$am_build_env_is_sane" = no; then
-  AC_MSG_ERROR([newly created file is older than distributed files!
-Check your system clock])
-fi
-
-# If we didn't sleep, we still need to ensure time stamps of config.status and
-# generated files are strictly newer.
-am_sleep_pid=
-AS_IF([test -e conftest.file || grep 'slept: no' conftest.file >/dev/null 2>&1],, [dnl
-  ( sleep "$am_cv_filesystem_timestamp_resolution" ) &
-  am_sleep_pid=$!
-])
-AC_CONFIG_COMMANDS_PRE(
-  [AC_MSG_CHECKING([that generated files are newer than configure])
-   if test -n "$am_sleep_pid"; then
-     # Hide warnings about reused PIDs.
-     wait $am_sleep_pid 2>/dev/null
-   fi
-   AC_MSG_RESULT([done])])
-rm -f conftest.file
-])
-
-# Copyright (C) 2009-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_SILENT_RULES
-# ----------------
-# Enable less verbose build rules support.
-AC_DEFUN([_AM_SILENT_RULES],
-[AM_DEFAULT_VERBOSITY=1
-AC_ARG_ENABLE([silent-rules], [dnl
-AS_HELP_STRING(
-  [--enable-silent-rules],
-  [less verbose build output (undo: "make V=1")])
-AS_HELP_STRING(
-  [--disable-silent-rules],
-  [verbose build output (undo: "make V=0")])dnl
-])
-dnl
-dnl A few 'make' implementations (e.g., NonStop OS and NextStep)
-dnl do not support nested variable expansions.
-dnl See automake bug#9928 and bug#10237.
-am_make=${MAKE-make}
-AC_CACHE_CHECK([whether $am_make supports nested variables],
-   [am_cv_make_support_nested_variables],
-   [if AS_ECHO([['TRUE=$(BAR$(V))
-BAR0=false
-BAR1=true
-V=1
-am__doit:
-	@$(TRUE)
-.PHONY: am__doit']]) | $am_make -f - >/dev/null 2>&1; then
-  am_cv_make_support_nested_variables=yes
-else
-  am_cv_make_support_nested_variables=no
-fi])
-AC_SUBST([AM_V])dnl
-AM_SUBST_NOTMAKE([AM_V])dnl
-AC_SUBST([AM_DEFAULT_V])dnl
-AM_SUBST_NOTMAKE([AM_DEFAULT_V])dnl
-AC_SUBST([AM_DEFAULT_VERBOSITY])dnl
-AM_BACKSLASH='\'
-AC_SUBST([AM_BACKSLASH])dnl
-_AM_SUBST_NOTMAKE([AM_BACKSLASH])dnl
-dnl Delay evaluation of AM_DEFAULT_VERBOSITY to the end to allow multiple calls
-dnl to AM_SILENT_RULES to change the default value.
-AC_CONFIG_COMMANDS_PRE([dnl
-case $enable_silent_rules in @%:@ (((
-  yes) AM_DEFAULT_VERBOSITY=0;;
-   no) AM_DEFAULT_VERBOSITY=1;;
-esac
-if test $am_cv_make_support_nested_variables = yes; then
-  dnl Using '$V' instead of '$(V)' breaks IRIX make.
-  AM_V='$(V)'
-  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-else
-  AM_V=$AM_DEFAULT_VERBOSITY
-  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
-fi
-])dnl
-])
-
-# AM_SILENT_RULES([DEFAULT])
-# --------------------------
-# Set the default verbosity level to DEFAULT ("yes" being less verbose, "no" or
-# empty being verbose).
-AC_DEFUN([AM_SILENT_RULES],
-[AC_REQUIRE([_AM_SILENT_RULES])
-AM_DEFAULT_VERBOSITY=m4_if([$1], [yes], [0], [1])m4_newline
-dnl We intentionally force a newline after the assignment, since a) nothing
-dnl good can come of more text following, and b) that was the behavior
-dnl before 1.17. See https://bugs.gnu.org/72267.
-])
-
-# Copyright (C) 2001-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_PROG_INSTALL_STRIP
-# ---------------------
-# One issue with vendor 'install' (even GNU) is that you can't
-# specify the program used to strip binaries.  This is especially
-# annoying in cross-compiling environments, where the build's strip
-# is unlikely to handle the host's binaries.
-# Fortunately install-sh will honor a STRIPPROG variable, so we
-# always use install-sh in "make install-strip", and initialize
-# STRIPPROG with the value of the STRIP variable (set by the user).
-AC_DEFUN([AM_PROG_INSTALL_STRIP],
-[AC_REQUIRE([AM_PROG_INSTALL_SH])dnl
-# Installed binaries are usually stripped using 'strip' when the user
-# run "make install-strip".  However 'strip' might not be the right
-# tool to use in cross-compilation environments, therefore Automake
-# will honor the 'STRIP' environment variable to overrule this program.
-dnl Don't test for $cross_compiling = yes, because it might be 'maybe'.
-if test "$cross_compiling" != no; then
-  AC_CHECK_TOOL([STRIP], [strip], :)
-fi
-INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s"
-AC_SUBST([INSTALL_STRIP_PROGRAM])])
-
-# Copyright (C) 2006-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_SUBST_NOTMAKE(VARIABLE)
-# ---------------------------
-# Prevent Automake from outputting VARIABLE = @VARIABLE@ in Makefile.in.
-# This macro is traced by Automake.
-AC_DEFUN([_AM_SUBST_NOTMAKE])
-
-# AM_SUBST_NOTMAKE(VARIABLE)
-# --------------------------
-# Public sister of _AM_SUBST_NOTMAKE.
-AC_DEFUN([AM_SUBST_NOTMAKE], [_AM_SUBST_NOTMAKE($@)])
-
-# Check how to create a tarball.                            -*- Autoconf -*-
-
-# Copyright (C) 2004-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_PROG_TAR(FORMAT)
-# --------------------
-# Check how to create a tarball in format FORMAT.
-# FORMAT should be one of 'v7', 'ustar', or 'pax'.
-#
-# Substitute a variable $(am__tar) that is a command
-# writing to stdout a FORMAT-tarball containing the directory
-# $tardir.
-#     tardir=directory && $(am__tar) > result.tar
-#
-# Substitute a variable $(am__untar) that extract such
-# a tarball read from stdin.
-#     $(am__untar) < result.tar
-#
-AC_DEFUN([_AM_PROG_TAR],
-[# Always define AMTAR for backward compatibility.  Yes, it's still used
-# in the wild :-(  We should find a proper way to deprecate it ...
-AC_SUBST([AMTAR], ['$${TAR-tar}'])
-
-# We'll loop over all known methods to create a tar archive until one works.
-_am_tools='gnutar m4_if([$1], [ustar], [plaintar]) pax cpio none'
-
-m4_if([$1], [v7],
-  [am__tar='$${TAR-tar} chof - "$$tardir"' am__untar='$${TAR-tar} xf -'],
-
-  [m4_case([$1],
-    [ustar],
-     [# The POSIX 1988 'ustar' format is defined with fixed-size fields.
-      # There is notably a 21 bits limit for the UID and the GID.  In fact,
-      # the 'pax' utility can hang on bigger UID/GID (see automake bug#8343
-      # and bug#13588).
-      am_max_uid=2097151 # 2^21 - 1
-      am_max_gid=$am_max_uid
-      # The $UID and $GID variables are not portable, so we need to resort
-      # to the POSIX-mandated id(1) utility.  Errors in the 'id' calls
-      # below are definitely unexpected, so allow the users to see them
-      # (that is, avoid stderr redirection).
-      am_uid=`id -u || echo unknown`
-      am_gid=`id -g || echo unknown`
-      AC_MSG_CHECKING([whether UID '$am_uid' is supported by ustar format])
-      if test x$am_uid = xunknown; then
-        AC_MSG_WARN([ancient id detected; assuming current UID is ok, but dist-ustar might not work])
-      elif test $am_uid -le $am_max_uid; then
-        AC_MSG_RESULT([yes])
-      else
-        AC_MSG_RESULT([no])
-        _am_tools=none
-      fi
-      AC_MSG_CHECKING([whether GID '$am_gid' is supported by ustar format])
-      if test x$gm_gid = xunknown; then
-        AC_MSG_WARN([ancient id detected; assuming current GID is ok, but dist-ustar might not work])
-      elif test $am_gid -le $am_max_gid; then
-        AC_MSG_RESULT([yes])
-      else
-        AC_MSG_RESULT([no])
-        _am_tools=none
-      fi],
-
-  [pax],
-    [],
-
-  [m4_fatal([Unknown tar format])])
-
-  AC_MSG_CHECKING([how to create a $1 tar archive])
-
-  # Go ahead even if we have the value already cached.  We do so because we
-  # need to set the values for the 'am__tar' and 'am__untar' variables.
-  _am_tools=${am_cv_prog_tar_$1-$_am_tools}
-
-  for _am_tool in $_am_tools; do
-    case $_am_tool in
-    gnutar)
-      for _am_tar in tar gnutar gtar; do
-        AM_RUN_LOG([$_am_tar --version]) && break
-      done
-      am__tar="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$$tardir"'
-      am__tar_="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$tardir"'
-      am__untar="$_am_tar -xf -"
-      ;;
-    plaintar)
-      # Must skip GNU tar: if it does not support --format= it doesn't create
-      # ustar tarball either.
-      (tar --version) >/dev/null 2>&1 && continue
-      am__tar='tar chf - "$$tardir"'
-      am__tar_='tar chf - "$tardir"'
-      am__untar='tar xf -'
-      ;;
-    pax)
-      am__tar='pax -L -x $1 -w "$$tardir"'
-      am__tar_='pax -L -x $1 -w "$tardir"'
-      am__untar='pax -r'
-      ;;
-    cpio)
-      am__tar='find "$$tardir" -print | cpio -o -H $1 -L'
-      am__tar_='find "$tardir" -print | cpio -o -H $1 -L'
-      am__untar='cpio -i -H $1 -d'
-      ;;
-    none)
-      am__tar=false
-      am__tar_=false
-      am__untar=false
-      ;;
-    esac
-
-    # If the value was cached, stop now.  We just wanted to have am__tar
-    # and am__untar set.
-    test -n "${am_cv_prog_tar_$1}" && break
-
-    # tar/untar a dummy directory, and stop if the command works.
-    rm -rf conftest.dir
-    mkdir conftest.dir
-    echo GrepMe > conftest.dir/file
-    AM_RUN_LOG([tardir=conftest.dir && eval $am__tar_ >conftest.tar])
-    rm -rf conftest.dir
-    if test -s conftest.tar; then
-      AM_RUN_LOG([$am__untar <conftest.tar])
-      AM_RUN_LOG([cat conftest.dir/file])
-      grep GrepMe conftest.dir/file >/dev/null 2>&1 && break
-    fi
-  done
-  rm -rf conftest.dir
-
-  AC_CACHE_VAL([am_cv_prog_tar_$1], [am_cv_prog_tar_$1=$_am_tool])
-  AC_MSG_RESULT([$am_cv_prog_tar_$1])])
-
-AC_SUBST([am__tar])
-AC_SUBST([am__untar])
-]) # _AM_PROG_TAR
-
-# Copyright (C) 2022-2025 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_PROG_XARGS_N
-# ----------------
-# Check whether 'xargs -n' works.  It should work everywhere, so the fallback
-# is not optimized at all as we never expect to use it.
-AC_DEFUN([_AM_PROG_XARGS_N],
-[AC_CACHE_CHECK([xargs -n works], am_cv_xargs_n_works, [dnl
-AS_IF([test "`echo 1 2 3 | xargs -n2 echo`" = "1 2
-3"], [am_cv_xargs_n_works=yes], [am_cv_xargs_n_works=no])])
-AS_IF([test "$am_cv_xargs_n_works" = yes], [am__xargs_n='xargs -n'], [dnl
-  am__xargs_n='am__xargs_n () { shift; sed "s/ /\\n/g" | while read am__xargs_n_arg; do "$@" "$am__xargs_n_arg"; done; }'
-])dnl
-AC_SUBST(am__xargs_n)
-])
-
-m4_include([m4/ax_gcc_builtin.m4])
-m4_include([m4/libtool.m4])
-m4_include([m4/ltoptions.m4])
-m4_include([m4/ltsugar.m4])
-m4_include([m4/ltversion.m4])
-m4_include([m4/lt~obsolete.m4])
diff --git a/experiments/wasm-gui/third_party/libXext/autom4te.cache/output.0 b/experiments/wasm-gui/third_party/libXext/autom4te.cache/output.0
deleted file mode 100644
index c0c8c80c2..000000000
--- a/experiments/wasm-gui/third_party/libXext/autom4te.cache/output.0
+++ /dev/null
@@ -1,24109 +0,0 @@
-@%:@! /bin/sh
-@%:@ Guess values for system-dependent variables and create Makefiles.
-@%:@ Generated by GNU Autoconf 2.73 for libXext 1.3.7.
-@%:@
-@%:@ Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>.
-@%:@ 
-@%:@ 
-@%:@ Copyright (C) 1992-1996, 1998-2017, 2020-2026 Free Software Foundation,
-@%:@ Inc.
-@%:@ 
-@%:@ 
-@%:@ This configure script is free software; the Free Software Foundation
-@%:@ gives unlimited permission to copy, distribute and modify it.
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else case e in @%:@(
-  e) case `(set -o) 2>/dev/null` in @%:@(
-  *posix*) :
-    set -o posix ;; @%:@(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-
-
-
-# Reset variables that may have inherited troublesome values from
-# the environment.
-
-# IFS needs to be set, to space, tab, and newline, in precisely that order.
-# (If _AS_PATH_WALK were called with IFS unset, it would have the
-# side effect of setting IFS to empty, thus disabling word splitting.)
-# Quoting is to prevent editors from complaining about space-tab.
-as_nl='
-'
-export as_nl
-IFS=" ""	$as_nl"
-
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# Ensure predictable behavior from utilities with locale-dependent output.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# We cannot yet rely on "unset" to work, but we need these variables
-# to be unset--not just set to an empty or harmless value--now, to
-# avoid bugs in old shells (e.g. pre-3.0 UWIN ksh).  This construct
-# also avoids known problems related to "unset" and subshell syntax
-# in other old shells (e.g. bash 2.01 and pdksh 5.2.14).
-for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH
-do eval test \${$as_var+y} \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-
-# Ensure that fds 0, 1, and 2 are open.
-if (exec 3>&0) 2>/dev/null; then :; else exec 0</dev/null; fi
-if (exec 3>&1) 2>/dev/null; then :; else exec 1>/dev/null; fi
-if (exec 3>&2)            ; then :; else exec 2>/dev/null; fi
-
-# The user is always right.
-if ${PATH_SEPARATOR+false} :; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in @%:@((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    test -r "$as_dir$0" && as_myself=$as_dir$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as 'sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  printf '%s\n' "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-
-# Use a proper internal environment variable to ensure we don't fall
-  # into an infinite loop, continuously re-executing ourselves.
-  if test x"${_as_can_reexec}" != xno && test "x$CONFIG_SHELL" != x; then
-    _as_can_reexec=no; export _as_can_reexec;
-    # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in @%:@ ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-case $@%:@ in @%:@ ((
-  0) exec $CONFIG_SHELL $as_opts "$as_myself" ;;
-  *) exec $CONFIG_SHELL $as_opts "$as_myself" "$@" ;;
-esac
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed 'exec'.
-printf '%s\n' "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-  fi
-  # We don't want this to propagate to other subprocesses.
-          { _as_can_reexec=; unset _as_can_reexec;}
-if test "x$CONFIG_SHELL" = x; then
-  as_bourne_compatible="if test \${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '\${1+\"\$@\"}'='\"\$@\"'
-  setopt NO_GLOB_SUBST
-else case e in @%:@(
-  e) case \`(set -o) 2>/dev/null\` in @%:@(
-  *posix*) :
-    set -o posix ;; @%:@(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-"
-  as_required="as_fn_return () { (exit \$1); }
-as_fn_success () { as_fn_return 0; }
-as_fn_failure () { as_fn_return 1; }
-as_fn_ret_success () { return 0; }
-as_fn_ret_failure () { return 1; }
-
-exitcode=0
-as_fn_success || { exitcode=1; echo as_fn_success failed.; }
-as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; }
-as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; }
-as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; }
-if ( set x; as_fn_ret_success y && test x = \"\$1\" )
-then :
-  
-else case e in @%:@(
-  e) exitcode=1; echo positional parameters were not saved. ;;
-esac
-fi
-test x\$exitcode = x0 || exit 1
-blah=\$(echo \$(echo blah))
-test x\"\$blah\" = xblah || exit 1
-test -x / || exit 1"
-  as_suggested="  as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO
-  as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO
-  eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" &&
-  test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1
-
-  test -n \"\${ZSH_VERSION+set}\${BASH_VERSION+set}\" || (
-    ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-    ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO
-    ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO
-    PATH=/empty FPATH=/empty; export PATH FPATH
-    test \"X\`printf %s \$ECHO\`\" = \"X\$ECHO\" \\
-      || test \"X\`print -r -- \$ECHO\`\" = \"X\$ECHO\" ) || exit 1
-test \$(( 1 + 1 )) = 2 || exit 1"
-  if (eval "$as_required") 2>/dev/null
-then :
-  as_have_required=yes
-else case e in @%:@(
-  e) as_have_required=no ;;
-esac
-fi
-  if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null
-then :
-  
-else case e in @%:@(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-  as_found=:
-  case $as_dir in @%:@(
-	 /*)
-	   for as_base in sh bash ksh sh5; do
-	     # Try only shells that exist, to save several forks.
-	     as_shell=$as_dir$as_base
-	     if { test -f "$as_shell" || test -f "$as_shell.exe"; } &&
-		    as_run=a "$as_shell" -c "$as_bourne_compatible""$as_required" 2>/dev/null
-then :
-  CONFIG_SHELL=$as_shell as_have_required=yes
-		   if as_run=a "$as_shell" -c "$as_bourne_compatible""$as_suggested" 2>/dev/null
-then :
-  break 2
-fi
-fi
-	   done;;
-       esac
-  as_found=false
-done
-IFS=$as_save_IFS
-if $as_found
-then :
-  
-else case e in @%:@(
-  e) if { test -f "$SHELL" || test -f "$SHELL.exe"; } &&
-	      as_run=a "$SHELL" -c "$as_bourne_compatible""$as_required" 2>/dev/null
-then :
-  CONFIG_SHELL=$SHELL as_have_required=yes
-fi ;;
-esac
-fi
-
-
-      if test "x$CONFIG_SHELL" != x
-then :
-  export CONFIG_SHELL
-             # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in @%:@ ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-case $@%:@ in @%:@ ((
-  0) exec $CONFIG_SHELL $as_opts "$as_myself" ;;
-  *) exec $CONFIG_SHELL $as_opts "$as_myself" "$@" ;;
-esac
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed 'exec'.
-printf '%s\n' "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-fi
-
-    if test x$as_have_required = xno
-then :
-  printf '%s\n' "$0: This script requires a shell more modern than all"
-  printf '%s\n' "$0: the shells that I found on your system."
-  if test ${ZSH_VERSION+y} ; then
-    printf '%s\n' "$0: In particular, zsh $ZSH_VERSION has bugs and should"
-    printf '%s\n' "$0: be upgraded to zsh 4.3.4 or later."
-  else
-    printf '%s\n' "$0: Please tell bug-autoconf@gnu.org and
-$0: https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues
-$0: about your system, including any error possibly output
-$0: before this message. Then install a modern shell, or
-$0: manually run the script under such a shell if you do
-$0: have one."
-  fi
-  exit 1
-fi ;;
-esac
-fi
-fi
-SHELL=${CONFIG_SHELL-/bin/sh}
-export SHELL
-# Unset more variables known to interfere with behavior of common tools.
-CLICOLOR_FORCE= GREP_OPTIONS=
-unset CLICOLOR_FORCE GREP_OPTIONS
-
-## --------------------- ##
-## M4sh Shell Functions. ##
-## --------------------- ##
-@%:@ as_fn_unset VAR
-@%:@ ---------------
-@%:@ Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-
-@%:@ as_fn_set_status STATUS
-@%:@ -----------------------
-@%:@ Set @S|@? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} @%:@ as_fn_set_status
-
-@%:@ as_fn_exit STATUS
-@%:@ -----------------
-@%:@ Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} @%:@ as_fn_exit
-
-@%:@ as_fn_mkdir_p
-@%:@ -------------
-@%:@ Create "@S|@as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`printf '%s\n' "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} @%:@ as_fn_mkdir_p
-
-@%:@ as_fn_executable_p FILE
-@%:@ -----------------------
-@%:@ Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} @%:@ as_fn_executable_p
-@%:@ as_fn_append VAR VALUE
-@%:@ ----------------------
-@%:@ Append the text in VALUE to the end of the definition contained in VAR. Take
-@%:@ advantage of any shell optimizations that allow amortized linear growth over
-@%:@ repeated appends, instead of the typical quadratic growth present in naive
-@%:@ implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null
-then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else case e in @%:@(
-  e) as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  } ;;
-esac
-fi # as_fn_append
-
-@%:@ as_fn_arith ARG...
-@%:@ ------------------
-@%:@ Perform arithmetic evaluation on the ARGs, and store the result in the
-@%:@ global @S|@as_val. Take advantage of shells that can avoid forks. The arguments
-@%:@ must be portable across @S|@(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null
-then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else case e in @%:@(
-  e) as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  } ;;
-esac
-fi # as_fn_arith
-
-
-@%:@ as_fn_error STATUS ERROR [LINENO LOG_FD]
-@%:@ ----------------------------------------
-@%:@ Output "`basename @S|@0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-@%:@ provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-@%:@ script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  printf '%s\n' "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} @%:@ as_fn_error
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-
-  as_lineno_1=$LINENO as_lineno_1a=$LINENO
-  as_lineno_2=$LINENO as_lineno_2a=$LINENO
-  eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" &&
-  test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || {
-  # Blame Lee E. McMahon (1931-1989) for sed's syntax.  :-)
-  sed -n '
-    p
-    /[$]LINENO/=
-  ' <$as_myself |
-    sed '
-      t clear
-      :clear
-      s/[$]LINENO.*/&-/
-      t lineno
-      b
-      :lineno
-      N
-      :loop
-      s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/
-      t loop
-      s/-\n.*//
-    ' >$as_me.lineno &&
-  chmod +x "$as_me.lineno" ||
-    { printf '%s\n' "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; }
-
-  # If we had to re-execute with $CONFIG_SHELL, we're ensured to have
-  # already done that, so ensure we don't try to do so again and fall
-  # in an infinite loop.  This has already happened in practice.
-  _as_can_reexec=no; export _as_can_reexec
-  # Don't try to exec as it changes $[0], causing all sort of problems
-  # (the dirname of $[0] is not the place where we might find the
-  # original and so on.  Autoconf is especially sensitive to this).
-  . "./$as_me.lineno"
-  # Exit status is that of the last command.
-  exit
-}
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both 'ln -s file dir' and 'ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; 'ln -s' creates a wrapper executable.
-    # In both cases, we have to default to 'cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_sed_cpp="y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g"
-as_tr_cpp="eval sed '$as_sed_cpp'" # deprecated
-
-# Sed expression to map a string onto a valid variable name.
-as_sed_sh="y%*+%pp%;s%[^_$as_cr_alnum]%_%g"
-as_tr_sh="eval sed '$as_sed_sh'" # deprecated
-
-SHELL=${CONFIG_SHELL-/bin/sh}
-
-as_awk_strverscmp='
-  # Use only awk features that work with 7th edition Unix awk (1978).
-  # My, what an old awk you have, Mr. Solaris!
-  END {
-    while (length(v1) && length(v2)) {
-      # Set d1 to be the next thing to compare from v1, and likewise for d2.
-      # Normally this is a single character, but if v1 and v2 contain digits,
-      # compare them as integers and fractions as strverscmp does.
-      if (v1 ~ /^[0-9]/ && v2 ~ /^[0-9]/) {
-	# Split v1 and v2 into their leading digit string components d1 and d2,
-	# and advance v1 and v2 past the leading digit strings.
-	for (len1 = 1; substr(v1, len1 + 1) ~ /^[0-9]/; len1++) continue
-	for (len2 = 1; substr(v2, len2 + 1) ~ /^[0-9]/; len2++) continue
-	d1 = substr(v1, 1, len1); v1 = substr(v1, len1 + 1)
-	d2 = substr(v2, 1, len2); v2 = substr(v2, len2 + 1)
-	if (d1 ~ /^0/) {
-	  if (d2 ~ /^0/) {
-	    # Compare two fractions.
-	    while (d1 ~ /^0/ && d2 ~ /^0/) {
-	      d1 = substr(d1, 2); len1--
-	      d2 = substr(d2, 2); len2--
-	    }
-	    if (len1 != len2 && ! (len1 && len2 && substr(d1, 1, 1) == substr(d2, 1, 1))) {
-	      # The two components differ in length, and the common prefix
-	      # contains only leading zeros.  Consider the longer to be less.
-	      d1 = -len1
-	      d2 = -len2
-	    } else {
-	      # Otherwise, compare as strings.
-	      d1 = "x" d1
-	      d2 = "x" d2
-	    }
-	  } else {
-	    # A fraction is less than an integer.
-	    exit 1
-	  }
-	} else {
-	  if (d2 ~ /^0/) {
-	    # An integer is greater than a fraction.
-	    exit 2
-	  } else {
-	    # Compare two integers.
-	    d1 += 0
-	    d2 += 0
-	  }
-	}
-      } else {
-	# The normal case, without worrying about digits.
-	d1 = substr(v1, 1, 1); v1 = substr(v1, 2)
-	d2 = substr(v2, 1, 1); v2 = substr(v2, 2)
-      }
-      if (d1 < d2) exit 1
-      if (d1 > d2) exit 2
-    }
-    # Beware Solaris 11 /usr/xgp4/bin/awk, which mishandles some
-    # comparisons of empty strings to integers.  For example,
-    # LC_ALL=C /usr/xpg4/bin/awk "BEGIN {if (-1 < \"\") print \"a\"}"
-    # prints "a".
-    if (length(v2)) exit 1
-    if (length(v1)) exit 2
-  }
-'
-
-test -n "$DJDIR" || exec 7<&0 </dev/null
-exec 6>&1
-
-# Name of the host.
-# hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status,
-# so uname gets run too.
-ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q`
-
-#
-# Initializations.
-#
-ac_default_prefix=/usr/local
-ac_clean_CONFIG_STATUS=
-ac_clean_files=
-ac_config_libobj_dir=.
-LIB@&t@OBJS=
-cross_compiling=no
-subdirs=
-MFLAGS=
-MAKEFLAGS=
-
-# Identity of this package.
-PACKAGE_NAME='libXext'
-PACKAGE_TARNAME='libXext'
-PACKAGE_VERSION='1.3.7'
-PACKAGE_STRING='libXext 1.3.7'
-PACKAGE_BUGREPORT='https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues'
-PACKAGE_URL=''
-
-ac_unique_file="Makefile.am"
-# Factoring default headers for most tests.
-ac_includes_default="\
-#include <stddef.h>
-#ifdef HAVE_STDIO_H
-# include <stdio.h>
-#endif
-#ifdef HAVE_STDLIB_H
-# include <stdlib.h>
-#endif
-#ifdef HAVE_STRING_H
-# include <string.h>
-#endif
-#ifdef HAVE_INTTYPES_H
-# include <inttypes.h>
-#endif
-#ifdef HAVE_STDINT_H
-# include <stdint.h>
-#endif
-#ifdef HAVE_STRINGS_H
-# include <strings.h>
-#endif
-#ifdef HAVE_SYS_TYPES_H
-# include <sys/types.h>
-#endif
-#ifdef HAVE_SYS_STAT_H
-# include <sys/stat.h>
-#endif
-#ifdef HAVE_UNISTD_H
-# include <unistd.h>
-#endif"
-
-ac_header_c_list=
-ac_subst_vars='am__EXEEXT_FALSE
-am__EXEEXT_TRUE
-LTLIBOBJS
-MAKE_LINT_LIB_FALSE
-MAKE_LINT_LIB_TRUE
-LINTLIB
-LINT_FALSE
-LINT_TRUE
-LINT_FLAGS
-LINT
-LIB@&t@OBJS
-XEXT_LIBS
-XEXT_CFLAGS
-XEXT_SOREV
-XTMALLOC_ZERO_CFLAGS
-XMALLOC_ZERO_CFLAGS
-MALLOC_ZERO_CFLAGS
-HAVE_STYLESHEETS_FALSE
-HAVE_STYLESHEETS_TRUE
-XSL_STYLESHEET
-STYLESHEET_SRCDIR
-XORG_SGML_PATH
-HAVE_XSLTPROC_FALSE
-HAVE_XSLTPROC_TRUE
-XSLTPROC
-HAVE_FOP_FALSE
-HAVE_FOP_TRUE
-FOP
-HAVE_XMLTO_FALSE
-HAVE_XMLTO_TRUE
-HAVE_XMLTO_TEXT_FALSE
-HAVE_XMLTO_TEXT_TRUE
-XMLTO
-ENABLE_SPECS_FALSE
-ENABLE_SPECS_TRUE
-MAN_SUBSTS
-XORG_MAN_PAGE
-ADMIN_MAN_DIR
-DRIVER_MAN_DIR
-MISC_MAN_DIR
-FILE_MAN_DIR
-LIB_MAN_DIR
-APP_MAN_DIR
-ADMIN_MAN_SUFFIX
-DRIVER_MAN_SUFFIX
-MISC_MAN_SUFFIX
-FILE_MAN_SUFFIX
-LIB_MAN_SUFFIX
-APP_MAN_SUFFIX
-INSTALL_CMD
-PKG_CONFIG_LIBDIR
-PKG_CONFIG_PATH
-PKG_CONFIG
-CHANGELOG_CMD
-STRICT_CFLAGS
-CWARNFLAGS
-BASE_CFLAGS
-LT_SYS_LIBRARY_PATH
-OTOOL64
-OTOOL
-LIPO
-NMEDIT
-DSYMUTIL
-MANIFEST_TOOL
-RANLIB
-ac_ct_AR
-AR
-DLLTOOL
-OBJDUMP
-FILECMD
-LN_S
-NM
-ac_ct_DUMPBIN
-DUMPBIN
-LD
-FGREP
-EGREP
-GREP
-SED
-host_os
-host_vendor
-host_cpu
-host
-build_os
-build_vendor
-build_cpu
-build
-LIBTOOL
-am__xargs_n
-am__rm_f_notfound
-AM_BACKSLASH
-AM_DEFAULT_VERBOSITY
-AM_DEFAULT_V
-AM_V
-CSCOPE
-ETAGS
-CTAGS
-am__fastdepCC_FALSE
-am__fastdepCC_TRUE
-CCDEPMODE
-am__nodep
-AMDEPBACKSLASH
-AMDEP_FALSE
-AMDEP_TRUE
-am__include
-DEPDIR
-am__untar
-am__tar
-AMTAR
-am__leading_dot
-SET_MAKE
-AWK
-mkdir_p
-MKDIR_P
-INSTALL_STRIP_PROGRAM
-STRIP
-install_sh
-MAKEINFO
-AUTOHEADER
-AUTOMAKE
-AUTOCONF
-ACLOCAL
-VERSION
-PACKAGE
-CYGPATH_W
-am__isrc
-INSTALL_DATA
-INSTALL_SCRIPT
-INSTALL_PROGRAM
-OBJEXT
-EXEEXT
-ac_ct_CC
-CPPFLAGS
-LDFLAGS
-CFLAGS
-CC
-ECHO_T
-ECHO_N
-ECHO_C
-target_alias
-host_alias
-build_alias
-LIBS
-DEFS
-mandir
-localedir
-libdir
-psdir
-pdfdir
-dvidir
-htmldir
-infodir
-docdir
-oldincludedir
-includedir
-runstatedir
-localstatedir
-sharedstatedir
-sysconfdir
-datadir
-datarootdir
-libexecdir
-sbindir
-bindir
-program_transform_name
-prefix
-exec_prefix
-PACKAGE_URL
-PACKAGE_BUGREPORT
-PACKAGE_STRING
-PACKAGE_VERSION
-PACKAGE_TARNAME
-PACKAGE_NAME
-PATH_SEPARATOR
-SHELL
-am__quote'
-ac_subst_files=''
-ac_user_opts='
-enable_option_checking
-enable_dependency_tracking
-enable_silent_rules
-enable_shared
-enable_static
-enable_pic
-with_pic
-enable_fast_install
-enable_aix_soname
-with_aix_soname
-with_gnu_ld
-with_sysroot
-enable_libtool_lock
-enable_selective_werror
-enable_strict_compilation
-enable_specs
-with_xmlto
-with_fop
-with_xsltproc
-enable_malloc0returnsnull
-with_lint
-enable_lint_library
-'
-      ac_precious_vars='build_alias
-host_alias
-target_alias
-CC
-CFLAGS
-LDFLAGS
-LIBS
-CPPFLAGS
-LT_SYS_LIBRARY_PATH
-PKG_CONFIG
-PKG_CONFIG_PATH
-PKG_CONFIG_LIBDIR
-XMLTO
-FOP
-XSLTPROC
-XEXT_CFLAGS
-XEXT_LIBS
-LINT
-LINT_FLAGS'
-
-
-# Initialize some variables set by options.
-ac_init_help=
-ac_init_version=false
-ac_unrecognized_opts=
-ac_unrecognized_sep=
-# The variables have the same names as the options, with
-# dashes changed to underlines.
-cache_file=/dev/null
-exec_prefix=NONE
-no_create=
-no_recursion=
-prefix=NONE
-program_prefix=NONE
-program_suffix=NONE
-program_transform_name=s,x,x,
-silent=
-site=
-srcdir=
-verbose=
-x_includes=NONE
-x_libraries=NONE
-
-# Installation directory options.
-# These are left unexpanded so users can "make install exec_prefix=/foo"
-# and all the variables that are supposed to be based on exec_prefix
-# by default will actually change.
-# Use braces instead of parens because sh, perl, etc. also accept them.
-# (The list follows the same order as the GNU Coding Standards.)
-bindir='${exec_prefix}/bin'
-sbindir='${exec_prefix}/sbin'
-libexecdir='${exec_prefix}/libexec'
-datarootdir='${prefix}/share'
-datadir='${datarootdir}'
-sysconfdir='${prefix}/etc'
-sharedstatedir='${prefix}/com'
-localstatedir='${prefix}/var'
-runstatedir='${localstatedir}/run'
-includedir='${prefix}/include'
-oldincludedir='/usr/include'
-docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
-infodir='${datarootdir}/info'
-htmldir='${docdir}'
-dvidir='${docdir}'
-pdfdir='${docdir}'
-psdir='${docdir}'
-libdir='${exec_prefix}/lib'
-localedir='${datarootdir}/locale'
-mandir='${datarootdir}/man'
-
-ac_prev=
-ac_dashdash=
-for ac_option
-do
-  # If the previous option needs an argument, assign it.
-  if test -n "$ac_prev"; then
-    eval $ac_prev=\$ac_option
-    ac_prev=
-    continue
-  fi
-
-  case $ac_option in
-  *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;;
-  *=)   ac_optarg= ;;
-  *)    ac_optarg=yes ;;
-  esac
-
-  case $ac_dashdash$ac_option in
-  --)
-    ac_dashdash=yes ;;
-
-  -bindir | --bindir | --bindi | --bind | --bin | --bi)
-    ac_prev=bindir ;;
-  -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*)
-    bindir=$ac_optarg ;;
-
-  -build | --build | --buil | --bui | --bu)
-    ac_prev=build_alias ;;
-  -build=* | --build=* | --buil=* | --bui=* | --bu=*)
-    build_alias=$ac_optarg ;;
-
-  -cache-file | --cache-file | --cache-fil | --cache-fi \
-  | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c)
-    ac_prev=cache_file ;;
-  -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \
-  | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*)
-    cache_file=$ac_optarg ;;
-
-  --config-cache | -C)
-    cache_file=config.cache ;;
-
-  -datadir | --datadir | --datadi | --datad)
-    ac_prev=datadir ;;
-  -datadir=* | --datadir=* | --datadi=* | --datad=*)
-    datadir=$ac_optarg ;;
-
-  -datarootdir | --datarootdir | --datarootdi | --datarootd | --dataroot \
-  | --dataroo | --dataro | --datar)
-    ac_prev=datarootdir ;;
-  -datarootdir=* | --datarootdir=* | --datarootdi=* | --datarootd=* \
-  | --dataroot=* | --dataroo=* | --dataro=* | --datar=*)
-    datarootdir=$ac_optarg ;;
-
-  -disable-* | --disable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=no ;;
-
-  -docdir | --docdir | --docdi | --doc | --do)
-    ac_prev=docdir ;;
-  -docdir=* | --docdir=* | --docdi=* | --doc=* | --do=*)
-    docdir=$ac_optarg ;;
-
-  -dvidir | --dvidir | --dvidi | --dvid | --dvi | --dv)
-    ac_prev=dvidir ;;
-  -dvidir=* | --dvidir=* | --dvidi=* | --dvid=* | --dvi=* | --dv=*)
-    dvidir=$ac_optarg ;;
-
-  -enable-* | --enable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=\$ac_optarg ;;
-
-  -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \
-  | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \
-  | --exec | --exe | --ex)
-    ac_prev=exec_prefix ;;
-  -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \
-  | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \
-  | --exec=* | --exe=* | --ex=*)
-    exec_prefix=$ac_optarg ;;
-
-  -gas | --gas | --ga | --g)
-    # Obsolete; use --with-gas.
-    with_gas=yes ;;
-
-  -help | --help | --hel | --he | -h)
-    ac_init_help=long ;;
-  -help=r* | --help=r* | --hel=r* | --he=r* | -hr*)
-    ac_init_help=recursive ;;
-  -help=s* | --help=s* | --hel=s* | --he=s* | -hs*)
-    ac_init_help=short ;;
-
-  -host | --host | --hos | --ho)
-    ac_prev=host_alias ;;
-  -host=* | --host=* | --hos=* | --ho=*)
-    host_alias=$ac_optarg ;;
-
-  -htmldir | --htmldir | --htmldi | --htmld | --html | --htm | --ht)
-    ac_prev=htmldir ;;
-  -htmldir=* | --htmldir=* | --htmldi=* | --htmld=* | --html=* | --htm=* \
-  | --ht=*)
-    htmldir=$ac_optarg ;;
-
-  -includedir | --includedir | --includedi | --included | --include \
-  | --includ | --inclu | --incl | --inc)
-    ac_prev=includedir ;;
-  -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \
-  | --includ=* | --inclu=* | --incl=* | --inc=*)
-    includedir=$ac_optarg ;;
-
-  -infodir | --infodir | --infodi | --infod | --info | --inf)
-    ac_prev=infodir ;;
-  -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*)
-    infodir=$ac_optarg ;;
-
-  -libdir | --libdir | --libdi | --libd)
-    ac_prev=libdir ;;
-  -libdir=* | --libdir=* | --libdi=* | --libd=*)
-    libdir=$ac_optarg ;;
-
-  -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \
-  | --libexe | --libex | --libe)
-    ac_prev=libexecdir ;;
-  -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \
-  | --libexe=* | --libex=* | --libe=*)
-    libexecdir=$ac_optarg ;;
-
-  -localedir | --localedir | --localedi | --localed | --locale)
-    ac_prev=localedir ;;
-  -localedir=* | --localedir=* | --localedi=* | --localed=* | --locale=*)
-    localedir=$ac_optarg ;;
-
-  -localstatedir | --localstatedir | --localstatedi | --localstated \
-  | --localstate | --localstat | --localsta | --localst | --locals)
-    ac_prev=localstatedir ;;
-  -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \
-  | --localstate=* | --localstat=* | --localsta=* | --localst=* | --locals=*)
-    localstatedir=$ac_optarg ;;
-
-  -mandir | --mandir | --mandi | --mand | --man | --ma | --m)
-    ac_prev=mandir ;;
-  -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*)
-    mandir=$ac_optarg ;;
-
-  -nfp | --nfp | --nf)
-    # Obsolete; use --without-fp.
-    with_fp=no ;;
-
-  -no-create | --no-create | --no-creat | --no-crea | --no-cre \
-  | --no-cr | --no-c | -n)
-    no_create=yes ;;
-
-  -no-recursion | --no-recursion | --no-recursio | --no-recursi \
-  | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r)
-    no_recursion=yes ;;
-
-  -oldincludedir | --oldincludedir | --oldincludedi | --oldincluded \
-  | --oldinclude | --oldinclud | --oldinclu | --oldincl | --oldinc \
-  | --oldin | --oldi | --old | --ol | --o)
-    ac_prev=oldincludedir ;;
-  -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \
-  | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \
-  | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*)
-    oldincludedir=$ac_optarg ;;
-
-  -prefix | --prefix | --prefi | --pref | --pre | --pr | --p)
-    ac_prev=prefix ;;
-  -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*)
-    prefix=$ac_optarg ;;
-
-  -program-prefix | --program-prefix | --program-prefi | --program-pref \
-  | --program-pre | --program-pr | --program-p)
-    ac_prev=program_prefix ;;
-  -program-prefix=* | --program-prefix=* | --program-prefi=* \
-  | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*)
-    program_prefix=$ac_optarg ;;
-
-  -program-suffix | --program-suffix | --program-suffi | --program-suff \
-  | --program-suf | --program-su | --program-s)
-    ac_prev=program_suffix ;;
-  -program-suffix=* | --program-suffix=* | --program-suffi=* \
-  | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*)
-    program_suffix=$ac_optarg ;;
-
-  -program-transform-name | --program-transform-name \
-  | --program-transform-nam | --program-transform-na \
-  | --program-transform-n | --program-transform- \
-  | --program-transform | --program-transfor \
-  | --program-transfo | --program-transf \
-  | --program-trans | --program-tran \
-  | --progr-tra | --program-tr | --program-t)
-    ac_prev=program_transform_name ;;
-  -program-transform-name=* | --program-transform-name=* \
-  | --program-transform-nam=* | --program-transform-na=* \
-  | --program-transform-n=* | --program-transform-=* \
-  | --program-transform=* | --program-transfor=* \
-  | --program-transfo=* | --program-transf=* \
-  | --program-trans=* | --program-tran=* \
-  | --progr-tra=* | --program-tr=* | --program-t=*)
-    program_transform_name=$ac_optarg ;;
-
-  -pdfdir | --pdfdir | --pdfdi | --pdfd | --pdf | --pd)
-    ac_prev=pdfdir ;;
-  -pdfdir=* | --pdfdir=* | --pdfdi=* | --pdfd=* | --pdf=* | --pd=*)
-    pdfdir=$ac_optarg ;;
-
-  -psdir | --psdir | --psdi | --psd | --ps)
-    ac_prev=psdir ;;
-  -psdir=* | --psdir=* | --psdi=* | --psd=* | --ps=*)
-    psdir=$ac_optarg ;;
-
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil)
-    silent=yes ;;
-
-  -runstatedir | --runstatedir | --runstatedi | --runstated \
-  | --runstate | --runstat | --runsta | --runst | --runs \
-  | --run | --ru | --r)
-    ac_prev=runstatedir ;;
-  -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \
-  | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \
-  | --run=* | --ru=* | --r=*)
-    runstatedir=$ac_optarg ;;
-
-  -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
-    ac_prev=sbindir ;;
-  -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
-  | --sbi=* | --sb=*)
-    sbindir=$ac_optarg ;;
-
-  -sharedstatedir | --sharedstatedir | --sharedstatedi \
-  | --sharedstated | --sharedstate | --sharedstat | --sharedsta \
-  | --sharedst | --shareds | --shared | --share | --shar \
-  | --sha | --sh)
-    ac_prev=sharedstatedir ;;
-  -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \
-  | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \
-  | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \
-  | --sha=* | --sh=*)
-    sharedstatedir=$ac_optarg ;;
-
-  -site | --site | --sit)
-    ac_prev=site ;;
-  -site=* | --site=* | --sit=*)
-    site=$ac_optarg ;;
-
-  -srcdir | --srcdir | --srcdi | --srcd | --src | --sr)
-    ac_prev=srcdir ;;
-  -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*)
-    srcdir=$ac_optarg ;;
-
-  -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \
-  | --syscon | --sysco | --sysc | --sys | --sy)
-    ac_prev=sysconfdir ;;
-  -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \
-  | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*)
-    sysconfdir=$ac_optarg ;;
-
-  -target | --target | --targe | --targ | --tar | --ta | --t)
-    ac_prev=target_alias ;;
-  -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*)
-    target_alias=$ac_optarg ;;
-
-  -v | -verbose | --verbose | --verbos | --verbo | --verb)
-    verbose=yes ;;
-
-  -version | --version | --versio | --versi | --vers | -V)
-    ac_init_version=: ;;
-
-  -with-* | --with-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=\$ac_optarg ;;
-
-  -without-* | --without-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=no ;;
-
-  --x)
-    # Obsolete; use --with-x.
-    with_x=yes ;;
-
-  -x-includes | --x-includes | --x-include | --x-includ | --x-inclu \
-  | --x-incl | --x-inc | --x-in | --x-i)
-    ac_prev=x_includes ;;
-  -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \
-  | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*)
-    x_includes=$ac_optarg ;;
-
-  -x-libraries | --x-libraries | --x-librarie | --x-librari \
-  | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l)
-    ac_prev=x_libraries ;;
-  -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \
-  | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*)
-    x_libraries=$ac_optarg ;;
-
-  -*) as_fn_error $? "unrecognized option: '$ac_option'
-Try '$0 --help' for more information"
-    ;;
-
-  *=*)
-    ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='`
-    # Reject names that are not valid shell variable names.
-    case $ac_envvar in #(
-      '' | [0-9]* | *[!_$as_cr_alnum]* )
-      as_fn_error $? "invalid variable name: '$ac_envvar'" ;;
-    esac
-    eval $ac_envvar=\$ac_optarg
-    export $ac_envvar ;;
-
-  *)
-    # FIXME: should be removed in autoconf 3.0.
-    printf '%s\n' "$as_me: WARNING: you should use --build, --host, --target" >&2
-    expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null &&
-      printf '%s\n' "$as_me: WARNING: invalid host type: $ac_option" >&2
-    : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}"
-    ;;
-
-  esac
-done
-
-if test -n "$ac_prev"; then
-  ac_option=--`printf '%s\n' $ac_prev | sed 's/_/-/g'`
-  as_fn_error $? "missing argument to $ac_option"
-fi
-
-if test -n "$ac_unrecognized_opts"; then
-  case $enable_option_checking in
-    no) ;;
-    fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;;
-    *)     printf '%s\n' "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;;
-  esac
-fi
-
-# Check all directory arguments for consistency.
-for ac_var in	exec_prefix prefix bindir sbindir libexecdir datarootdir \
-		datadir sysconfdir sharedstatedir localstatedir includedir \
-		oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
-		libdir localedir mandir runstatedir
-do
-  eval ac_val=\$$ac_var
-  # Remove trailing slashes.
-  case $ac_val in
-    */ )
-      ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'`
-      eval $ac_var=\$ac_val;;
-  esac
-  # Be sure to have absolute directory names.
-  case $ac_val in
-    [\\/$]* | ?:[\\/]* )  continue;;
-    NONE | '' ) case $ac_var in *prefix ) continue;; esac;;
-  esac
-  as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val"
-done
-
-# There might be people who depend on the old broken behavior: '$host'
-# used to hold the argument of --host etc.
-# FIXME: To remove some day.
-build=$build_alias
-host=$host_alias
-target=$target_alias
-
-# FIXME: To remove some day.
-if test "x$host_alias" != x; then
-  if test "x$build_alias" = x; then
-    cross_compiling=maybe
-  elif test "x$build_alias" != "x$host_alias"; then
-    cross_compiling=yes
-  fi
-fi
-
-ac_tool_prefix=
-test -n "$host_alias" && ac_tool_prefix=$host_alias-
-
-test "$silent" = yes && exec 6>/dev/null
-
-
-ac_pwd=`pwd` && test -n "$ac_pwd" &&
-ac_ls_di=`ls -di .` &&
-ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` ||
-  as_fn_error $? "working directory cannot be determined"
-test "X$ac_ls_di" = "X$ac_pwd_ls_di" ||
-  as_fn_error $? "pwd does not report name of working directory"
-
-
-# Find the source files, if location was not specified.
-if test -z "$srcdir"; then
-  ac_srcdir_defaulted=yes
-  # Try the directory containing this script, then the parent directory.
-  ac_confdir=`$as_dirname -- "$as_myself" ||
-$as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_myself" : 'X\(//\)[^/]' \| \
-	 X"$as_myself" : 'X\(//\)$' \| \
-	 X"$as_myself" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_myself" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  srcdir=$ac_confdir
-  if test ! -r "$srcdir/$ac_unique_file"; then
-    srcdir=..
-  fi
-else
-  ac_srcdir_defaulted=no
-fi
-if test ! -r "$srcdir/$ac_unique_file"; then
-  test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .."
-  as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir"
-fi
-ac_msg="sources are in $srcdir, but 'cd $srcdir' does not work"
-ac_abs_confdir=`(
-	cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg"
-	pwd)`
-# When building in place, set srcdir=.
-if test "$ac_abs_confdir" = "$ac_pwd"; then
-  srcdir=.
-fi
-# Remove unnecessary trailing slashes from srcdir.
-# Double slashes in file names in object file debugging info
-# mess up M-x gdb in Emacs.
-case $srcdir in
-*/) srcdir=`expr "X$srcdir" : 'X\(.*[^/]\)' \| "X$srcdir" : 'X\(.*\)'`;;
-esac
-for ac_var in $ac_precious_vars; do
-  eval ac_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_env_${ac_var}_value=\$${ac_var}
-  eval ac_cv_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_cv_env_${ac_var}_value=\$${ac_var}
-done
-
-#
-# Report the --help message.
-#
-if test "$ac_init_help" = "long"; then
-  # Omit some internal or obsolete options to make the list less imposing.
-  # This message is too long to be a string in the A/UX 3.1 sh.
-  cat <<_ACEOF
-'configure' configures libXext 1.3.7 to adapt to many kinds of systems.
-
-Usage: $0 [OPTION]... [VAR=VALUE]...
-
-To assign environment variables (e.g., CC, CFLAGS...), specify them as
-VAR=VALUE.  See below for descriptions of some of the useful variables.
-
-Defaults for the options are specified in brackets.
-
-Configuration:
-  -h, --help              display this help and exit
-      --help=short        display options specific to this package
-      --help=recursive    display the short help of all the included packages
-  -V, --version           display version information and exit
-  -q, --quiet, --silent   do not print 'checking ...' messages
-      --cache-file=FILE   cache test results in FILE [disabled]
-  -C, --config-cache      alias for '--cache-file=config.cache'
-  -n, --no-create         do not create output files
-      --srcdir=DIR        find the sources in DIR [configure dir or '..']
-
-Installation directories:
-  --prefix=PREFIX         install architecture-independent files in PREFIX
-                          @<:@@S|@ac_default_prefix@:>@
-  --exec-prefix=EPREFIX   install architecture-dependent files in EPREFIX
-                          @<:@PREFIX@:>@
-
-By default, 'make install' will install all the files in
-'$ac_default_prefix/bin', '$ac_default_prefix/lib' etc.  You can specify
-an installation prefix other than '$ac_default_prefix' using '--prefix',
-for instance '--prefix=\$HOME'.
-
-For better control, use the options below.
-
-Fine tuning of the installation directories:
-  --bindir=DIR            user executables [EPREFIX/bin]
-  --sbindir=DIR           system admin executables [EPREFIX/sbin]
-  --libexecdir=DIR        program executables [EPREFIX/libexec]
-  --sysconfdir=DIR        read-only single-machine data [PREFIX/etc]
-  --sharedstatedir=DIR    modifiable architecture-independent data [PREFIX/com]
-  --localstatedir=DIR     modifiable single-machine data [PREFIX/var]
-  --runstatedir=DIR       modifiable per-process data [LOCALSTATEDIR/run]
-  --libdir=DIR            object code libraries [EPREFIX/lib]
-  --includedir=DIR        C header files [PREFIX/include]
-  --oldincludedir=DIR     C header files for non-gcc [/usr/include]
-  --datarootdir=DIR       read-only arch.-independent data root [PREFIX/share]
-  --datadir=DIR           read-only architecture-independent data [DATAROOTDIR]
-  --infodir=DIR           info documentation [DATAROOTDIR/info]
-  --localedir=DIR         locale-dependent data [DATAROOTDIR/locale]
-  --mandir=DIR            man documentation [DATAROOTDIR/man]
-  --docdir=DIR            documentation root @<:@DATAROOTDIR/doc/libXext@:>@
-  --htmldir=DIR           html documentation [DOCDIR]
-  --dvidir=DIR            dvi documentation [DOCDIR]
-  --pdfdir=DIR            pdf documentation [DOCDIR]
-  --psdir=DIR             ps documentation [DOCDIR]
-_ACEOF
-
-  cat <<\_ACEOF
-
-Program names:
-  --program-prefix=PREFIX            prepend PREFIX to installed program names
-  --program-suffix=SUFFIX            append SUFFIX to installed program names
-  --program-transform-name=PROGRAM   run sed PROGRAM on installed program names
-
-System types:
-  --build=BUILD     configure for building on BUILD [guessed]
-  --host=HOST       cross-compile to build programs to run on HOST [BUILD]
-_ACEOF
-fi
-
-if test -n "$ac_init_help"; then
-  case $ac_init_help in
-     short | recursive ) echo "Configuration of libXext 1.3.7:";;
-   esac
-  cat <<\_ACEOF
-
-Optional Features:
-  --disable-option-checking  ignore unrecognized --enable/--with options
-  --disable-FEATURE       do not include FEATURE (same as --enable-FEATURE=no)
-  --enable-FEATURE[=ARG]  include FEATURE [ARG=yes]
-  --enable-dependency-tracking 
-                          do not reject slow dependency extractors
-  --disable-dependency-tracking 
-                          speeds up one-time build
-  --enable-silent-rules   less verbose build output (undo: "make V=1")
-  --disable-silent-rules  verbose build output (undo: "make V=0")
-  --enable-shared@<:@=PKGS@:>@  build shared libraries @<:@default=yes@:>@
-  --enable-static@<:@=PKGS@:>@  build static libraries @<:@default=yes@:>@
-  --enable-pic@<:@=PKGS@:>@     try to use only PIC/non-PIC objects @<:@default=use
-                          both@:>@
-  --enable-fast-install@<:@=PKGS@:>@ 
-                          optimize for fast installation @<:@default=yes@:>@
-  --enable-aix-soname=aix|svr4|both 
-                          shared library versioning (aka "SONAME") variant to
-                          provide on AIX, @<:@default=aix@:>@.
-  --disable-libtool-lock  avoid locking (might break parallel builds)
-  --disable-selective-werror 
-                          Turn off selective compiler errors. (default:
-                          enabled)
-  --enable-strict-compilation 
-                          Enable all warnings from compiler and make them
-                          errors (default: disabled)
-  --enable-specs          Enable building the specs (default: yes)
-  --enable-malloc0returnsnull 
-                          assume malloc(0) can return NULL (default: yes)
-  --enable-lint-library   Create lint library (default: disabled)
-
-Optional Packages:
-  --with-PACKAGE[=ARG]    use PACKAGE [ARG=yes]
-  --without-PACKAGE       do not use PACKAGE (same as --with-PACKAGE=no)
-  --with-gnu-ld           assume the C compiler uses GNU ld @<:@default=no@:>@
-  --with-sysroot@<:@=DIR@:>@    Search for dependent libraries within DIR (or the
-                          compiler's sysroot if not specified).
-  --with-xmlto            Use xmlto to regenerate documentation (default:
-                          auto)
-  --with-fop              Use fop to regenerate documentation (default: auto)
-  --with-xsltproc         Use xsltproc for the transformation of XML documents
-                          (default: auto)
-  --with-lint             Use a lint-style source code checker (default:
-                          disabled)
-
-Some influential environment variables:
-  CC          C compiler command
-  CFLAGS      C compiler flags
-  LDFLAGS     linker flags, e.g. -L<lib dir> if you have libraries in a
-              nonstandard directory <lib dir>
-  LIBS        libraries to pass to the linker, e.g. -l<library>
-  CPPFLAGS    (Objective) C/C++ preprocessor flags, e.g. -I<include dir> if
-              you have headers in a nonstandard directory <include dir>
-  LT_SYS_LIBRARY_PATH 
-              User-defined run-time library search path.
-  PKG_CONFIG  path to pkg-config utility
-  PKG_CONFIG_PATH 
-              directories to add to pkg-config's search path
-  PKG_CONFIG_LIBDIR 
-              path overriding pkg-config's built-in search path
-  XMLTO       Path to xmlto command
-  FOP         Path to fop command
-  XSLTPROC    Path to xsltproc command
-  XEXT_CFLAGS C compiler flags for XEXT, overriding pkg-config
-  XEXT_LIBS   linker flags for XEXT, overriding pkg-config
-  LINT        Path to a lint-style command
-  LINT_FLAGS  Flags for the lint-style command
-
-Use these variables to override the choices made by 'configure' or to help
-it to find libraries and programs with nonstandard names/locations.
-
-Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>.
-_ACEOF
-ac_status=$?
-fi
-
-if test "$ac_init_help" = "recursive"; then
-  # If there are subdirs, report their specific --help.
-  for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue
-    test -d "$ac_dir" ||
-      { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } ||
-      continue
-    ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`printf '%s\n' "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`printf '%s\n' "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-    cd "$ac_dir" || { ac_status=$?; continue; }
-    # Check for configure.gnu first; this name is used for a wrapper for
-    # Metaconfig's "Configure" on case-insensitive file systems.
-    if test -f "$ac_srcdir/configure.gnu"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure.gnu" --help=recursive
-    elif test -f "$ac_srcdir/configure"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure" --help=recursive
-    else
-      printf '%s\n' "$as_me: WARNING: no configuration information is in $ac_dir" >&2
-    fi || ac_status=$?
-    cd "$ac_pwd" || { ac_status=$?; break; }
-  done
-fi
-
-test -n "$ac_init_help" && exit $ac_status
-if $ac_init_version; then
-  cat <<\_ACEOF
-libXext configure 1.3.7
-generated by GNU Autoconf 2.73
-
-Copyright (C) 2026 Free Software Foundation, Inc.
-This configure script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it.
-_ACEOF
-  exit
-fi
-
-## ------------------------ ##
-## Autoconf initialization. ##
-## ------------------------ ##
-
-@%:@ ac_fn_c_try_compile LINENO
-@%:@ --------------------------
-@%:@ Try to compile conftest.@S|@ac_ext, and return whether this succeeded.
-ac_fn_c_try_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest.beam
-  if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest.$ac_objext
-then :
-  ac_retval=0
-else case e in @%:@(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1 ;;
-esac
-fi
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} @%:@ ac_fn_c_try_compile
-
-@%:@ ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES
-@%:@ -------------------------------------------------------
-@%:@ Tests whether HEADER exists and can be compiled using the include files in
-@%:@ INCLUDES, setting the cache variable VAR accordingly.
-ac_fn_c_check_header_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-printf %s "checking for $2... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-@%:@include <$2>
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  eval "$3=yes"
-else case e in @%:@(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} @%:@ ac_fn_c_check_header_compile
-
-@%:@ ac_fn_c_try_link LINENO
-@%:@ -----------------------
-@%:@ Try to link conftest.@S|@ac_ext, and return whether this succeeded.
-ac_fn_c_try_link ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest.beam conftest$ac_exeext
-  if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest$ac_exeext && {
-	 test "$cross_compiling" = yes ||
-	 test -x conftest$ac_exeext
-       }
-then :
-  ac_retval=0
-else case e in @%:@(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1 ;;
-esac
-fi
-  # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information
-  # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would
-  # interfere with the next link command; also delete a directory that is
-  # left behind by Apple's compiler.  We do this before executing the actions.
-  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} @%:@ ac_fn_c_try_link
-
-@%:@ ac_fn_c_check_func LINENO FUNC VAR
-@%:@ ----------------------------------
-@%:@ Tests whether FUNC exists, setting the cache variable VAR accordingly
-ac_fn_c_check_func ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-printf %s "checking for $2... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-/* Define $2 to an innocuous variant, in case <limits.h> declares $2.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $2 innocuous_$2
-
-/* System header to define __stub macros and hopefully few prototypes,
-   which can conflict with char $2 (void); below.  */
-
-#include <limits.h>
-#undef $2
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $2 (void);
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$2 || defined __stub___$2
-choke me
-#endif
-
-int
-main (void)
-{
-return $2 ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval "$3=yes"
-else case e in @%:@(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} @%:@ ac_fn_c_check_func
-
-@%:@ ac_fn_check_decl LINENO SYMBOL VAR INCLUDES EXTRA-OPTIONS FLAG-VAR
-@%:@ ------------------------------------------------------------------
-@%:@ Tests whether SYMBOL is declared in INCLUDES, setting cache variable VAR
-@%:@ accordingly. Pass EXTRA-OPTIONS to the compiler, using FLAG-VAR.
-ac_fn_check_decl ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  as_decl_name=`echo $2|sed 's/ *(.*//'`
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $as_decl_name is declared" >&5
-printf %s "checking whether $as_decl_name is declared... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'`
-  eval ac_save_FLAGS=\$$6
-  as_fn_append $6 " $5"
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-int
-main (void)
-{
-#ifndef $as_decl_name
-#ifdef __cplusplus
-  (void) $as_decl_use;
-#else
-  (void) $as_decl_name;
-#endif
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  eval "$3=yes"
-else case e in @%:@(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-  eval $6=\$ac_save_FLAGS
- ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} @%:@ ac_fn_check_decl
-ac_configure_args_raw=
-for ac_arg
-do
-  case $ac_arg in
-  *\'*)
-    ac_arg=`printf '%s\n' "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
-  esac
-  as_fn_append ac_configure_args_raw " '$ac_arg'"
-done
-
-case $ac_configure_args_raw in
-  *$as_nl*)
-    ac_safe_unquote= ;;
-  *)
-    ac_unsafe_z='|&;<>()$`\\"*?@<:@ ''	' # This string ends in space, tab.
-    ac_unsafe_a="$ac_unsafe_z#~"
-    ac_safe_unquote="s/ '\\([^$ac_unsafe_a][^$ac_unsafe_z]*\\)'/ \\1/g"
-    ac_configure_args_raw=`      printf '%s\n' "$ac_configure_args_raw" | sed "$ac_safe_unquote"`;;
-esac
-
-cat >config.log <<_ACEOF
-This file contains any messages produced by compilers while
-running configure, to aid debugging if configure makes a mistake.
-
-It was created by libXext $as_me 1.3.7, which was
-generated by GNU Autoconf 2.73.  Invocation command line was
-
-  $ $0$ac_configure_args_raw
-
-_ACEOF
-exec 5>>config.log
-{
-cat <<_ASUNAME
-## --------- ##
-## Platform. ##
-## --------- ##
-
-hostname = `(hostname || uname -n) 2>/dev/null | sed 1q`
-uname -m = `(uname -m) 2>/dev/null || echo unknown`
-uname -r = `(uname -r) 2>/dev/null || echo unknown`
-uname -s = `(uname -s) 2>/dev/null || echo unknown`
-uname -v = `(uname -v) 2>/dev/null || echo unknown`
-
-/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown`
-/bin/uname -X     = `(/bin/uname -X) 2>/dev/null     || echo unknown`
-
-/bin/arch              = `(/bin/arch) 2>/dev/null              || echo unknown`
-/usr/bin/arch -k       = `(/usr/bin/arch -k) 2>/dev/null       || echo unknown`
-/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown`
-/usr/bin/hostinfo      = `(/usr/bin/hostinfo) 2>/dev/null      || echo unknown`
-/bin/machine           = `(/bin/machine) 2>/dev/null           || echo unknown`
-/usr/bin/oslevel       = `(/usr/bin/oslevel) 2>/dev/null       || echo unknown`
-/bin/universe          = `(/bin/universe) 2>/dev/null          || echo unknown`
-
-_ASUNAME
-
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    printf '%s\n' "PATH: $as_dir"
-  done
-IFS=$as_save_IFS
-
-} >&5
-
-cat >&5 <<_ACEOF
-
-
-## ----------- ##
-## Core tests. ##
-## ----------- ##
-
-_ACEOF
-
-
-# Keep a trace of the command line.
-# Strip out --no-create and --no-recursion so they do not pile up.
-# Strip out --silent because we don't want to record it for future runs.
-# Also quote any args containing shell meta-characters.
-# Make two passes to allow for proper duplicate-argument suppression.
-ac_configure_args=
-ac_configure_args0=
-ac_configure_args1=
-ac_must_keep_next=false
-for ac_pass in 1 2
-do
-  for ac_arg
-  do
-    case $ac_arg in
-    -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;;
-    -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-    | -silent | --silent | --silen | --sile | --sil)
-      continue ;;
-    *\'*)
-      ac_arg=`printf '%s\n' "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    case $ac_pass in
-    1) as_fn_append ac_configure_args0 " '$ac_arg'" ;;
-    2)
-      as_fn_append ac_configure_args1 " '$ac_arg'"
-      if test $ac_must_keep_next = true; then
-	ac_must_keep_next=false # Got value, back to normal.
-      else
-	case $ac_arg in
-	  *=* | --config-cache | -C | -disable-* | --disable-* \
-	  | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \
-	  | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \
-	  | -with-* | --with-* | -without-* | --without-* | --x)
-	    case "$ac_configure_args0 " in
-	      "$ac_configure_args1"*" '$ac_arg' "* ) continue ;;
-	    esac
-	    ;;
-	  -* ) ac_must_keep_next=true ;;
-	esac
-      fi
-      as_fn_append ac_configure_args " '$ac_arg'"
-      ;;
-    esac
-  done
-done
-{ ac_configure_args0=; unset ac_configure_args0;}
-{ ac_configure_args1=; unset ac_configure_args1;}
-
-# Dump the cache to stdout.  It can be in a pipe (this is a requirement).
-ac_cache_dump ()
-{
-  # The following way of writing the cache mishandles newlines in values,
-# but we know of no workaround that is simple, portable, and efficient.
-# So, we kill variables containing newlines.
-# Ultrix sh set writes to stderr and can't be redirected directly,
-# and sets the high bit in the cache file unless we assign to the vars.
-(
-  for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do
-    eval ac_val=\$$ac_var
-    case $ac_val in #(
-    *${as_nl}*)
-      case $ac_var in #(
-      *_cv_*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
-printf '%s\n' "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
-      esac
-      case $ac_var in #(
-      _ | IFS | as_nl) ;; #(
-      BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
-      *) { eval $ac_var=; unset $ac_var;} ;;
-      esac ;;
-    esac
-  done
-
-  (set) 2>&1 |
-    case $as_nl`(ac_space=' '; set) 2>&1` in #(
-    *${as_nl}ac_space=\ *)
-      # 'set' does not quote correctly, so add quotes: double-quote
-      # substitution turns \\\\ into \\, and sed turns \\ into \.
-      sed -n \
-	"s/'/'\\\\''/g;
-	  s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p"
-      ;; #(
-    *)
-      # 'set' quotes correctly as required by POSIX, so do not add quotes.
-      sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
-      ;;
-    esac |
-    sort
-)
-}
-
-# Print debugging info to stdout.
-ac_dump_debugging_info ()
-{
-  echo
-
-  printf '%s\n' "## ---------------- ##
-## Cache variables. ##
-## ---------------- ##"
-  echo
-  ac_cache_dump
-  echo
-
-  printf '%s\n' "## ----------------- ##
-## Output variables. ##
-## ----------------- ##"
-  echo
-  for ac_var in $ac_subst_vars
-  do
-    eval ac_val=\$$ac_var
-    case $ac_val in
-    *\'*) ac_val=`printf '%s\n' "$ac_val" | sed "s/'/'\\\\\\\\''/g"`;;
-    esac
-    printf '%s\n' "$ac_var='$ac_val'"
-  done | sort
-  echo
-
-  if test -n "$ac_subst_files"; then
-    printf '%s\n' "## ------------------- ##
-## File substitutions. ##
-## ------------------- ##"
-    echo
-    for ac_var in $ac_subst_files
-    do
-      eval ac_val=\$$ac_var
-      case $ac_val in
-      *\'*) ac_val=`printf '%s\n' "$ac_val" | sed "s/'/'\\\\\\\\''/g"`;;
-      esac
-      printf '%s\n' "$ac_var='$ac_val'"
-    done | sort
-    echo
-  fi
-
-  if test -s confdefs.h; then
-    printf '%s\n' "## ----------- ##
-## confdefs.h. ##
-## ----------- ##"
-    echo
-    cat confdefs.h
-    echo
-  fi
-  test "$ac_signal" != 0 &&
-    printf '%s\n' "$as_me: caught signal $ac_signal"
-  printf '%s\n' "$as_me: exit $exit_status"
-}
-
-# When interrupted or exit'd, cleanup temporary files, and complete
-# config.log.
-ac_exit_trap ()
-{
-  exit_status=
-  # Sanitize IFS.
-  IFS=" ""	$as_nl"
-  # Save into config.log some information that might help in debugging.
-  ac_dump_debugging_info >&5
-  eval "rm -f $ac_clean_CONFIG_STATUS core *.core core.conftest.*" &&
-    rm -f -r conftest* confdefs* conf$$* $ac_clean_files &&
-    exit $exit_status
-}
-
-trap 'ac_exit_trap $?' 0
-for ac_signal in 1 2 13 15; do
-  trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal
-done
-ac_signal=0
-
-# confdefs.h avoids OS command line length limits that DEFS can exceed.
-rm -f -r conftest* confdefs.h
-
-printf '%s\n' "/* confdefs.h */" > confdefs.h
-
-# Predefined preprocessor variables.
-
-printf '%s\n' "@%:@define PACKAGE_NAME \"$PACKAGE_NAME\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_TARNAME \"$PACKAGE_TARNAME\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_VERSION \"$PACKAGE_VERSION\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_STRING \"$PACKAGE_STRING\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_BUGREPORT \"$PACKAGE_BUGREPORT\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_URL \"$PACKAGE_URL\"" >>confdefs.h
-
-
-# Let the site file select an alternate cache file if it wants to.
-# Prefer an explicitly selected file to automatically selected ones.
-if test -n "$CONFIG_SITE"; then
-  ac_site_files="$CONFIG_SITE"
-elif test "x$prefix" != xNONE; then
-  ac_site_files="$prefix/share/config.site $prefix/etc/config.site"
-else
-  ac_site_files="$ac_default_prefix/share/config.site $ac_default_prefix/etc/config.site"
-fi
-
-for ac_site_file in $ac_site_files
-do
-  case $ac_site_file in @%:@(
-  */*) :
-     ;; @%:@(
-  *) :
-    ac_site_file=./$ac_site_file ;;
-esac
-  if test -f "$ac_site_file" && test -r "$ac_site_file"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5
-printf '%s\n' "$as_me: loading site script $ac_site_file" >&6;}
-    sed 's/^/| /' "$ac_site_file" >&5
-    . "$ac_site_file" \
-      || { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "failed to load site script $ac_site_file
-See 'config.log' for more details" "$LINENO" 5; }
-  fi
-done
-
-if test -r "$cache_file"; then
-  # Some versions of bash will fail to source /dev/null (special files
-  # actually), so we avoid doing that.  DJGPP emulates it as a regular file.
-  if test /dev/null != "$cache_file" && test -f "$cache_file"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5
-printf '%s\n' "$as_me: loading cache $cache_file" >&6;}
-    case $cache_file in
-      [\\/]* | ?:[\\/]* ) . "$cache_file";;
-      *)                      . "./$cache_file";;
-    esac
-  fi
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5
-printf '%s\n' "$as_me: creating cache $cache_file" >&6;}
-  >$cache_file
-fi
-
-as_fn_append ac_header_c_list " stdio.h stdio_h HAVE_STDIO_H"
-# Test code for whether the C compiler supports C23 (global declarations)
-ac_c_conftest_c23_globals='
-/* Does the compiler advertise conformance to C17 or earlier?
-   Although GCC 14 does not do that, even with -std=gnu23,
-   it is close enough, and defines __STDC_VERSION == 202000L.  */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ <= 201710L
-# error "Compiler advertises conformance to C17 or earlier"
-#endif
-
-// Check alignas.
-char alignas (double) c23_aligned_as_double;
-char alignas (0) c23_no_special_alignment;
-extern char c23_aligned_as_int;
-char alignas (0) alignas (int) c23_aligned_as_int;
-
-// Check alignof.
-enum
-{
-  c23_int_alignment = alignof (int),
-  c23_int_array_alignment = alignof (int[100]),
-  c23_char_alignment = alignof (char)
-};
-static_assert (0 < -alignof (int), "alignof is signed");
-
-int function_with_unnamed_parameter (int) { return 0; }
-
-void c23_noreturn ();
-
-/* Test parsing of string and char UTF-8 literals (including hex escapes).
-   The parens pacify GCC 15.  */
-bool use_u8 = (!sizeof u8"\xFF") == (!u8'\''x'\'');
-
-bool check_that_bool_works = true | false | !nullptr;
-#if !true
-# error "true does not work in #if"
-#endif
-#if false
-#elifdef __STDC_VERSION__
-#else
-# error "#elifdef does not work"
-#endif
-
-#ifndef __has_c_attribute
-# error "__has_c_attribute not defined"
-#endif
-
-#ifndef __has_include
-# error "__has_include not defined"
-#endif
-
-#define LPAREN() (
-#define FORTY_TWO(x) 42
-#define VA_OPT_TEST(r, x, ...) __VA_OPT__ (FORTY_TWO r x))
-static_assert (VA_OPT_TEST (LPAREN (), 0, <:-) == 42);
-
-static_assert (0b101010 == 42);
-static_assert (0B101010 == 42);
-static_assert (0xDEAD'\''BEEF == 3'\''735'\''928'\''559);
-static_assert (0.500'\''000'\''000 == 0.5);
-
-enum unsignedish : unsigned int { uione = 1 };
-static_assert (0 < -uione);
-
-#include <stddef.h>
-constexpr nullptr_t null_pointer = nullptr;
-
-static typeof (1 + 1L) two () { return 2; }
-static long int three () { return 3; }
-'
-
-# Test code for whether the C compiler supports C23 (body of main).
-ac_c_conftest_c23_main='
-  {
-    label_before_declaration:
-      int arr[10] = {};
-      if (arr[0])
-        goto label_before_declaration;
-      if (!arr[0])
-        goto label_at_end_of_block;
-    label_at_end_of_block:
-  }
-  ok |= !null_pointer;
-  ok |= two != three;
-'
-
-# Test code for whether the C compiler supports C23 (complete).
-ac_c_conftest_c23_program="${ac_c_conftest_c23_globals}
-
-int
-main (int, char **)
-{
-  int ok = 0;
-  ${ac_c_conftest_c23_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C89 (global declarations)
-ac_c_conftest_c89_globals='
-/* Do not test the value of __STDC__, because some compilers define it to 0
-   or do not define it, while otherwise adequately conforming.  */
-
-#include <stddef.h>
-#include <stdarg.h>
-struct stat;
-/* Most of the following tests are stolen from RCS 5.7 src/conf.sh.  */
-struct buf { int x; };
-struct buf * (*rcsopen) (struct buf *, struct stat *, int);
-static char *e (char **p, int i)
-{
-  return p[i];
-}
-static char *f (char * (*g) (char **, int), char **p, ...)
-{
-  char *s;
-  va_list v;
-  va_start (v,p);
-  s = g (p, va_arg (v,int));
-  va_end (v);
-  return s;
-}
-
-/* C89 style stringification. */
-#define noexpand_stringify(a) #a
-const char *stringified = noexpand_stringify(arbitrary+token=sequence);
-
-/* C89 style token pasting.  Exercises some of the corner cases that
-   e.g. old MSVC gets wrong, but not very hard. */
-#define noexpand_concat(a,b) a##b
-#define expand_concat(a,b) noexpand_concat(a,b)
-extern int vA;
-extern int vbee;
-#define aye A
-#define bee B
-int *pvA = &expand_concat(v,aye);
-int *pvbee = &noexpand_concat(v,bee);
-
-/* OSF 4.0 Compaq cc is some sort of almost-ANSI by default.  It has
-   function prototypes and stuff, but not \xHH hex character constants.
-   These do not provoke an error unfortunately, instead are silently treated
-   as an "x".  The following induces an error, until -std is added to get
-   proper ANSI mode.  Curiously \x00 != x always comes out true, for an
-   array size at least.  It is necessary to write \x00 == 0 to get something
-   that is true only with -std.  */
-int osf4_cc_array ['\''\x00'\'' == 0 ? 1 : -1];
-
-/* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters
-   inside strings and character constants.  */
-#define FOO(x) '\''x'\''
-int xlc6_cc_array[FOO(a) == '\''x'\'' ? 1 : -1];
-
-int test (int i, double x);
-struct s1 {int (*f) (int a);};
-struct s2 {int (*f) (double a);};
-int pairnames (int, char **, int *(*)(struct buf *, struct stat *, int),
-               int, int);'
-
-# Test code for whether the C compiler supports C89 (body of main).
-ac_c_conftest_c89_main='
-ok |= (argc == 0 || f (e, argv, 0) != argv[0] || f (e, argv, 1) != argv[1]);
-'
-
-# Test code for whether the C compiler supports C99 (global declarations)
-ac_c_conftest_c99_globals='
-/* Does the compiler advertise C99 conformance? */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ < 199901L
-# error "Compiler does not advertise C99 conformance"
-#endif
-
-// See if C++-style comments work.
-
-#include <stdbool.h>
-extern int puts (const char *);
-extern int printf (const char *, ...);
-extern int dprintf (int, const char *, ...);
-extern void *malloc (size_t);
-extern void free (void *);
-
-// Check varargs macros.  These examples are taken from C99 6.10.3.5.
-// dprintf is used instead of fprintf to avoid needing to declare
-// FILE and stderr, and "aND" is used instead of "and" to work around
-// GCC bug 40564 which is irrelevant here.
-#define debug(...) dprintf (2, __VA_ARGS__)
-#define showlist(...) puts (#__VA_ARGS__)
-#define report(test,...) ((test) ? puts (#test) : printf (__VA_ARGS__))
-static void
-test_varargs_macros (void)
-{
-  int x = 1234;
-  int y = 5678;
-  debug ("Flag");
-  debug ("X = %d\n", x);
-  showlist (The first, second, aND third items.);
-  report (x>y, "x is %d but y is %d", x, y);
-}
-
-// Check long long types.
-#define BIG64 18446744073709551615ull
-#define BIG32 4294967295ul
-#define BIG_OK (BIG64 / BIG32 == 4294967297ull && BIG64 % BIG32 == 0)
-#if !BIG_OK
-  #error "your preprocessor is broken"
-#endif
-#if BIG_OK
-#else
-  #error "your preprocessor is broken"
-#endif
-static long long int bignum = -9223372036854775807LL;
-static unsigned long long int ubignum = BIG64;
-
-struct incomplete_array
-{
-  int datasize;
-  double data[];
-};
-
-struct named_init {
-  int number;
-  const wchar_t *name;
-  double average;
-};
-
-typedef const char *ccp;
-
-static inline int
-test_restrict (ccp restrict text)
-{
-  // Iterate through items via the restricted pointer.
-  // Also check for declarations in for loops.
-  for (unsigned int i = 0; *(text+i) != '\''\0'\''; ++i)
-    continue;
-  return 0;
-}
-
-// Check varargs and va_copy.
-static bool
-test_varargs (const char *format, ...)
-{
-  va_list args;
-  va_start (args, format);
-  va_list args_copy;
-  va_copy (args_copy, args);
-
-  const char *str = "";
-  int number = 0;
-  float fnumber = 0;
-
-  while (*format)
-    {
-      switch (*format++)
-	{
-	case '\''s'\'': // string
-	  str = va_arg (args_copy, const char *);
-	  break;
-	case '\''d'\'': // int
-	  number = va_arg (args_copy, int);
-	  break;
-	case '\''f'\'': // float
-	  fnumber = va_arg (args_copy, double);
-	  break;
-	default:
-	  break;
-	}
-    }
-  va_end (args_copy);
-  va_end (args);
-
-  return *str && number && fnumber;
-}
-'
-
-# Test code for whether the C compiler supports C99 (body of main).
-ac_c_conftest_c99_main='
-  // Check bool.
-  _Bool success = false;
-  success |= (argc != 0);
-
-  // Check restrict.
-  if (test_restrict ("String literal") == 0)
-    success = true;
-  const char *restrict newvar = "Another string";
-
-  // Check varargs.
-  success &= test_varargs ("s, d'\'' f .", "string", 65, 34.234);
-  test_varargs_macros ();
-
-  // Check flexible array members.
-  static struct incomplete_array *volatile incomplete_array_pointer;
-  struct incomplete_array *ia = incomplete_array_pointer;
-  ia->datasize = 10;
-  for (int i = 0; i < ia->datasize; ++i)
-    ia->data[i] = i * 1.234;
-  // Work around memory leak warnings.
-  free (ia);
-
-  // Check named initializers.
-  struct named_init ni = {
-    .number = 34,
-    .name = L"Test wide string",
-    .average = 543.34343,
-  };
-
-  ni.number = 58;
-
-  // Do not test for VLAs, as some otherwise-conforming compilers lack them.
-  // C code should instead use __STDC_NO_VLA__; see Autoconf manual.
-
-  // work around unused variable warnings
-  ok |= (!success || bignum == 0LL || ubignum == 0uLL || newvar[0] == '\''x'\''
-	 || ni.number != 58);
-'
-
-# Test code for whether the C compiler supports C11 (global declarations)
-ac_c_conftest_c11_globals='
-/* Does the compiler advertise C11 conformance? */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ < 201112L
-# error "Compiler does not advertise C11 conformance"
-#endif
-
-// Check _Alignas.
-char _Alignas (double) aligned_as_double;
-char _Alignas (0) no_special_alignment;
-extern char aligned_as_int;
-char _Alignas (0) _Alignas (int) aligned_as_int;
-
-// Check _Alignof.
-enum
-{
-  int_alignment = _Alignof (int),
-  int_array_alignment = _Alignof (int[100]),
-  char_alignment = _Alignof (char)
-};
-_Static_assert (0 < -_Alignof (int), "_Alignof is signed");
-
-// Check _Noreturn.
-int _Noreturn does_not_return (void) { for (;;) continue; }
-
-// Check _Static_assert.
-struct test_static_assert
-{
-  int x;
-  _Static_assert (sizeof (int) <= sizeof (long int),
-                  "_Static_assert does not work in struct");
-  long int y;
-};
-
-// Check UTF-8 literals.
-#define u8 syntax error!
-char const utf8_literal[] = u8"happens to be ASCII" "another string";
-
-// Check duplicate typedefs.
-typedef long *long_ptr;
-typedef long int *long_ptr;
-typedef long_ptr long_ptr;
-
-// Anonymous structures and unions -- taken from C11 6.7.2.1 Example 1.
-struct anonymous
-{
-  union {
-    struct { int i; int j; };
-    struct { int k; long int l; } w;
-  };
-  int m;
-} v1;
-'
-
-# Test code for whether the C compiler supports C11 (body of main).
-ac_c_conftest_c11_main='
-  _Static_assert ((offsetof (struct anonymous, i)
-		   == offsetof (struct anonymous, w.k)),
-		  "Anonymous union alignment botch");
-  v1.i = 2;
-  v1.w.k = 5;
-  ok |= v1.i != 5;
-'
-
-# Test code for whether the C compiler supports C11 (complete).
-ac_c_conftest_c11_program="${ac_c_conftest_c89_globals}
-${ac_c_conftest_c99_globals}
-${ac_c_conftest_c11_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  ${ac_c_conftest_c99_main}
-  ${ac_c_conftest_c11_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C99 (complete).
-ac_c_conftest_c99_program="${ac_c_conftest_c89_globals}
-${ac_c_conftest_c99_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  ${ac_c_conftest_c99_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C89 (complete).
-ac_c_conftest_c89_program="${ac_c_conftest_c89_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  return ok;
-}
-"
-
-as_fn_append ac_header_c_list " stdlib.h stdlib_h HAVE_STDLIB_H"
-as_fn_append ac_header_c_list " string.h string_h HAVE_STRING_H"
-as_fn_append ac_header_c_list " inttypes.h inttypes_h HAVE_INTTYPES_H"
-as_fn_append ac_header_c_list " stdint.h stdint_h HAVE_STDINT_H"
-as_fn_append ac_header_c_list " strings.h strings_h HAVE_STRINGS_H"
-as_fn_append ac_header_c_list " sys/stat.h sys_stat_h HAVE_SYS_STAT_H"
-as_fn_append ac_header_c_list " sys/types.h sys_types_h HAVE_SYS_TYPES_H"
-as_fn_append ac_header_c_list " unistd.h unistd_h HAVE_UNISTD_H"
-as_fn_append ac_header_c_list " wchar.h wchar_h HAVE_WCHAR_H"
-as_fn_append ac_header_c_list " minix/config.h minix_config_h HAVE_MINIX_CONFIG_H"
-
-# Auxiliary files required by this configure script.
-ac_aux_files="config.guess config.sub ltmain.sh missing install-sh compile"
-
-# Locations in which to look for auxiliary files.
-ac_aux_dir_candidates="${srcdir}${PATH_SEPARATOR}${srcdir}/..${PATH_SEPARATOR}${srcdir}/../.."
-
-# Search for a directory containing all of the required auxiliary files,
-# $ac_aux_files, from the $PATH-style list $ac_aux_dir_candidates.
-# If we don't find one directory that contains all the files we need,
-# we report the set of missing files from the *first* directory in
-# $ac_aux_dir_candidates and give up.
-ac_missing_aux_files=""
-ac_first_candidate=:
-printf '%s\n' "$as_me:${as_lineno-$LINENO}: looking for aux files: $ac_aux_files" >&5
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in $ac_aux_dir_candidates
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-  as_found=:
-  
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}:  trying $as_dir" >&5
-  ac_aux_dir_found=yes
-  ac_install_sh=
-  for ac_aux in $ac_aux_files
-  do
-    # As a special case, if "install-sh" is required, that requirement
-    # can be satisfied by any of "install-sh", "install.sh", or "shtool",
-    # and $ac_install_sh is set appropriately for whichever one is found.
-    if test x"$ac_aux" = x"install-sh"
-    then
-      if test -f "${as_dir}install-sh"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}install-sh found" >&5
-        ac_install_sh="${as_dir}install-sh -c"
-      elif test -f "${as_dir}install.sh"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}install.sh found" >&5
-        ac_install_sh="${as_dir}install.sh -c"
-      elif test -f "${as_dir}shtool"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}shtool found" >&5
-        ac_install_sh="${as_dir}shtool install -c"
-      else
-        ac_aux_dir_found=no
-        if $ac_first_candidate; then
-          ac_missing_aux_files="${ac_missing_aux_files} install-sh"
-        else
-          break
-        fi
-      fi
-    else
-      if test -f "${as_dir}${ac_aux}"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}${ac_aux} found" >&5
-      else
-        ac_aux_dir_found=no
-        if $ac_first_candidate; then
-          ac_missing_aux_files="${ac_missing_aux_files} ${ac_aux}"
-        else
-          break
-        fi
-      fi
-    fi
-  done
-  if test "$ac_aux_dir_found" = yes; then
-    ac_aux_dir="$as_dir"
-    break
-  fi
-  ac_first_candidate=false
-
-  as_found=false
-done
-IFS=$as_save_IFS
-if $as_found
-then :
-  
-else case e in @%:@(
-  e) as_fn_error $? "cannot find required auxiliary files:$ac_missing_aux_files" "$LINENO" 5 ;;
-esac
-fi
-
-
-# These three variables are undocumented and unsupported,
-# and are intended to be withdrawn in a future Autoconf release.
-# They can cause serious problems if a builder's source tree is in a directory
-# whose full name contains unusual characters.
-if test -f "${ac_aux_dir}config.guess"; then
-  ac_@&t@config_guess="$SHELL ${ac_aux_dir}config.guess"
-fi
-if test -f "${ac_aux_dir}config.sub"; then
-  ac_@&t@config_sub="$SHELL ${ac_aux_dir}config.sub"
-fi
-if test -f "$ac_aux_dir/configure"; then
-  ac_@&t@configure="$SHELL ${ac_aux_dir}configure"
-fi
-
-# Check that the precious variables saved in the cache have kept the same
-# value.
-ac_cache_corrupted=false
-for ac_var in $ac_precious_vars; do
-  eval ac_old_set=\$ac_cv_env_${ac_var}_set
-  eval ac_new_set=\$ac_env_${ac_var}_set
-  eval ac_old_val=\$ac_cv_env_${ac_var}_value
-  eval ac_new_val=\$ac_env_${ac_var}_value
-  case $ac_old_set,$ac_new_set in
-    set,)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' was set to '$ac_old_val' in the previous run" >&5
-printf '%s\n' "$as_me: error: '$ac_var' was set to '$ac_old_val' in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,set)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' was not set in the previous run" >&5
-printf '%s\n' "$as_me: error: '$ac_var' was not set in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,);;
-    *)
-      if test "x$ac_old_val" != "x$ac_new_val"; then
-	# differences in whitespace do not lead to failure.
-	ac_old_val_w=
-	for ac_val in x $ac_old_val; do
-	  ac_old_val_w="$ac_old_val_w $ac_val"
-	done
-	ac_new_val_w=
-	for ac_val in x $ac_new_val; do
-	  ac_new_val_w="$ac_new_val_w $ac_val"
-	done
-	if test "$ac_old_val_w" != "$ac_new_val_w"; then
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' has changed since the previous run:" >&5
-printf '%s\n' "$as_me: error: '$ac_var' has changed since the previous run:" >&2;}
-	  ac_cache_corrupted=:
-	else
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in '$ac_var' since the previous run:" >&5
-printf '%s\n' "$as_me: warning: ignoring whitespace changes in '$ac_var' since the previous run:" >&2;}
-	  eval $ac_var=\$ac_old_val
-	fi
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}:   former value:  '$ac_old_val'" >&5
-printf '%s\n' "$as_me:   former value:  '$ac_old_val'" >&2;}
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}:   current value: '$ac_new_val'" >&5
-printf '%s\n' "$as_me:   current value: '$ac_new_val'" >&2;}
-      fi;;
-  esac
-  # Pass precious variables to config.status.
-  if test "$ac_new_set" = set; then
-    case $ac_new_val in
-    *\'*) ac_arg=$ac_var=`printf '%s\n' "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;;
-    *) ac_arg=$ac_var=$ac_new_val ;;
-    esac
-    case " $ac_configure_args " in
-      *" '$ac_arg' "*) ;; # Avoid dups.  Use of quotes ensures accuracy.
-      *) as_fn_append ac_configure_args " '$ac_arg'" ;;
-    esac
-  fi
-done
-if $ac_cache_corrupted; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5
-printf '%s\n' "$as_me: error: changes in the environment can compromise the build" >&2;}
-  as_fn_error $? "run '${MAKE-make} distclean' and/or 'rm $cache_file'
-	    and start over" "$LINENO" 5
-fi
-## -------------------- ##
-## Main body of script. ##
-## -------------------- ##
-
-
-# Determine whether it's possible to make 'echo' print without a newline.
-# These variables are no longer used directly by Autoconf, but are AC_SUBSTed
-# for compatibility with existing Makefiles.
-ECHO_C= ECHO_N= ECHO_T=
-case `echo -n x` in @%:@(((((
--n*)
-  case `echo 'xy\c'` in
-  *c*) ECHO_T='	';;	# ECHO_T is single tab character.
-  xy)  ECHO_C='\c';;
-  *)   echo `echo ksh88 bug on AIX 6.1` > /dev/null
-       ECHO_T='	';;
-  esac;;
-*)
-  ECHO_N='-n';;
-esac
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-
-ac_config_headers="$ac_config_headers config.h"
-
-
-
-# Set common system defines for POSIX extensions, such as _GNU_SOURCE
-# Must be called before any macros that run the compiler (like LT_INIT)
-# to avoid autoconf errors.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-# Expand $ac_aux_dir to an absolute path.
-am_aux_dir=`cd "$ac_aux_dir" && pwd`
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}gcc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}gcc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "gcc", so it can be a program name with args.
-set dummy gcc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="gcc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-else
-  CC="$ac_cv_prog_CC"
-fi
-
-if test -z "$CC"; then
-          if test -n "$ac_tool_prefix"; then
-    # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}cc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}cc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  fi
-fi
-if test -z "$CC"; then
-  # Extract the first word of "cc", so it can be a program name with args.
-set dummy cc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-  ac_prog_rejected=no
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    if test "$as_dir$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then
-       ac_prog_rejected=yes
-       continue
-     fi
-    ac_cv_prog_CC="cc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-if test $ac_prog_rejected = yes; then
-  # We found a bogon in the path, so make sure we never use it.
-  set dummy $ac_cv_prog_CC
-  shift
-  if test $@%:@ != 0; then
-    # We chose a different compiler from the bogus one.
-    # However, it has the same basename, so the bogon will be chosen
-    # first if we set CC to just the basename; use the full file name.
-    shift
-    ac_cv_prog_CC="$as_dir$ac_word${1+' '}$@"
-  fi
-fi
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  for ac_prog in cl.exe
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$CC" && break
-  done
-fi
-if test -z "$CC"; then
-  ac_ct_CC=$CC
-  for ac_prog in cl.exe
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_CC" && break
-done
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-fi
-
-fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}clang", so it can be a program name with args.
-set dummy ${ac_tool_prefix}clang; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}clang"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "clang", so it can be a program name with args.
-set dummy clang; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="clang"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-else
-  CC="$ac_cv_prog_CC"
-fi
-
-fi
-
-
-test -z "$CC" && { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "no acceptable C compiler found in \$PATH
-See 'config.log' for more details" "$LINENO" 5; }
-
-# Provide some information about the compiler.
-printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5
-set X $ac_compile
-ac_compiler=$2
-for ac_option in --version -v -V -qversion -version; do
-  { { ac_try="$ac_compiler $ac_option >&5"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compiler $ac_option >&5") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    sed '10a\
-... rest of stderr output deleted ...
-         10q' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-  fi
-  rm -f conftest.er1 conftest.err
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-done
-
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files_save=$ac_clean_files
-ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out"
-# Try to create an executable without -o first, disregard a.out.
-# It will help us diagnose broken compilers, and finding out an intuition
-# of exeext.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5
-printf %s "checking whether the C compiler works... " >&6; }
-ac_link_default=`printf '%s\n' "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
-
-# The possible output files:
-ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*"
-
-ac_rmfiles=
-for ac_file in $ac_files
-do
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    * ) ac_rmfiles="$ac_rmfiles $ac_file";;
-  esac
-done
-rm -f $ac_rmfiles
-
-if { { ac_try="$ac_link_default"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link_default") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  # Autoconf-2.13 could set the ac_cv_exeext variable to 'no'.
-# So ignore a value of 'no', otherwise this would lead to 'EXEEXT = no'
-# in a Makefile.  We should not override ac_cv_exeext if it was cached,
-# so that the user can short-circuit this test for compilers unknown to
-# Autoconf.
-for ac_file in $ac_files ''
-do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj )
-	;;
-    [ab].out )
-	# We found the default executable, but exeext='' is most
-	# certainly right.
-	break;;
-    *.* )
-	if test ${ac_cv_exeext+y} && test "$ac_cv_exeext" != no;
-	then :; else
-	   ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	fi
-	# We set ac_cv_exeext here because the later test for it is not
-	# safe: cross compilers may not add the suffix if given an '-o'
-	# argument, so we may need to know it at that point already.
-	# Even if this section looks crufty: it has the advantage of
-	# actually working.
-	break;;
-    * )
-	break;;
-  esac
-done
-test "$ac_cv_exeext" = no && ac_cv_exeext=
-
-else case e in @%:@(
-  e) ac_file='' ;;
-esac
-fi
-if test -z "$ac_file"
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error 77 "C compiler cannot create executables
-See 'config.log' for more details" "$LINENO" 5; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; } ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5
-printf %s "checking for C compiler default output file name... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5
-printf '%s\n' "$ac_file" >&6; }
-ac_exeext=$ac_cv_exeext
-
-rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out
-ac_clean_files=$ac_clean_files_save
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5
-printf %s "checking for suffix of executables... " >&6; }
-if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  # If both 'conftest.exe' and 'conftest' are 'present' (well, observable)
-# catch 'conftest.exe'.  For instance with Cygwin, 'ls conftest' will
-# work properly (i.e., refer to 'conftest.exe'), while it won't with
-# 'rm'.
-for ac_file in conftest.exe conftest conftest.*; do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	  break;;
-    * ) break;;
-  esac
-done
-else case e in @%:@(
-  e) { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of executables: cannot compile and link
-See 'config.log' for more details" "$LINENO" 5; } ;;
-esac
-fi
-rm -f conftest conftest$ac_cv_exeext
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5
-printf '%s\n' "$ac_cv_exeext" >&6; }
-
-rm -f conftest.$ac_ext
-EXEEXT=$ac_cv_exeext
-ac_exeext=$EXEEXT
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-@%:@include <stdio.h>
-int
-main (void)
-{
-FILE *f = fopen ("conftest.out", "w");
- if (!f)
-  return 1;
- return ferror (f) || fclose (f) != 0;
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files="$ac_clean_files conftest.out"
-# Check that the compiler produces executables we can run.  If not, either
-# the compiler is broken, or we cross compile.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5
-printf %s "checking whether we are cross compiling... " >&6; }
-if test "$cross_compiling" != yes; then
-  { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-  if { ac_try='./conftest$ac_cv_exeext'
-  { { case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; }; then
-    cross_compiling=no
-  else
-    if test "$cross_compiling" = maybe; then
-	cross_compiling=yes
-    else
-	{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error 77 "cannot run C compiled programs.
-If you meant to cross compile, use '--host'.
-See 'config.log' for more details" "$LINENO" 5; }
-    fi
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5
-printf '%s\n' "$cross_compiling" >&6; }
-
-rm -f conftest.$ac_ext conftest$ac_cv_exeext \
-  conftest.o conftest.obj conftest.out
-ac_clean_files=$ac_clean_files_save
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5
-printf %s "checking for suffix of object files... " >&6; }
-if test ${ac_cv_objext+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.o conftest.obj
-if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  for ac_file in conftest.o conftest.obj conftest.*; do
-  test -f "$ac_file" || continue;
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;;
-    *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'`
-       break;;
-  esac
-done
-else case e in @%:@(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of object files: cannot compile
-See 'config.log' for more details" "$LINENO" 5; } ;;
-esac
-fi
-rm -f conftest.$ac_cv_objext conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5
-printf '%s\n' "$ac_cv_objext" >&6; }
-OBJEXT=$ac_cv_objext
-ac_objext=$OBJEXT
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the compiler supports GNU C" >&5
-printf %s "checking whether the compiler supports GNU C... " >&6; }
-if test ${ac_cv_c_compiler_gnu+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-#ifndef __GNUC__
-       choke me
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_compiler_gnu=yes
-else case e in @%:@(
-  e) ac_compiler_gnu=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-ac_cv_c_compiler_gnu=$ac_compiler_gnu
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5
-printf '%s\n' "$ac_cv_c_compiler_gnu" >&6; }
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-if test $ac_compiler_gnu = yes; then
-  GCC=yes
-else
-  GCC=
-fi
-ac_test_CFLAGS=${CFLAGS+y}
-ac_save_CFLAGS=$CFLAGS
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5
-printf %s "checking whether $CC accepts -g... " >&6; }
-if test ${ac_cv_prog_cc_g+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_save_c_werror_flag=$ac_c_werror_flag
-   ac_c_werror_flag=yes
-   ac_cv_prog_cc_g=no
-   CFLAGS="-g"
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_g=yes
-else case e in @%:@(
-  e) CFLAGS=""
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  
-else case e in @%:@(
-  e) ac_c_werror_flag=$ac_save_c_werror_flag
-	 CFLAGS="-g"
-	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_g=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ac_c_werror_flag=$ac_save_c_werror_flag ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5
-printf '%s\n' "$ac_cv_prog_cc_g" >&6; }
-if test $ac_test_CFLAGS; then
-  CFLAGS=$ac_save_CFLAGS
-elif test $ac_cv_prog_cc_g = yes; then
-  if test "$GCC" = yes; then
-    CFLAGS="-g -O2"
-  else
-    CFLAGS="-g"
-  fi
-else
-  if test "$GCC" = yes; then
-    CFLAGS="-O2"
-  else
-    CFLAGS=
-  fi
-fi
-ac_prog_cc_stdc=no
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C23 features" >&5
-printf %s "checking for $CC option to enable C23 features... " >&6; }
-if test ${ac_cv_prog_cc_c23+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c23=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c23_program
-_ACEOF
-for ac_arg in '' -std=gnu23
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c23=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c23" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c23" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c23" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c23" >&5
-printf '%s\n' "$ac_cv_prog_cc_c23" >&6; }
-     CC="$CC $ac_cv_prog_cc_c23" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c23
-  ac_prog_cc_stdc=c23 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C11 features" >&5
-printf %s "checking for $CC option to enable C11 features... " >&6; }
-if test ${ac_cv_prog_cc_c11+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c11=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c11_program
-_ACEOF
-for ac_arg in '' -std=gnu11 -std:c11
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c11=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c11" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c11" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c11" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c11" >&5
-printf '%s\n' "$ac_cv_prog_cc_c11" >&6; }
-     CC="$CC $ac_cv_prog_cc_c11" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c11
-  ac_prog_cc_stdc=c11 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C99 features" >&5
-printf %s "checking for $CC option to enable C99 features... " >&6; }
-if test ${ac_cv_prog_cc_c99+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c99=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c99_program
-_ACEOF
-for ac_arg in '' -std=gnu99 -std=c99 -c99 -qlanglvl=extc1x -qlanglvl=extc99 -AC99 -D_STDC_C99=
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c99=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c99" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c99" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c99" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c99" >&5
-printf '%s\n' "$ac_cv_prog_cc_c99" >&6; }
-     CC="$CC $ac_cv_prog_cc_c99" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c99
-  ac_prog_cc_stdc=c99 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C89 features" >&5
-printf %s "checking for $CC option to enable C89 features... " >&6; }
-if test ${ac_cv_prog_cc_c89+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c89=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c89_program
-_ACEOF
-for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std -Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__"
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c89=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c89" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c89" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c89" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5
-printf '%s\n' "$ac_cv_prog_cc_c89" >&6; }
-     CC="$CC $ac_cv_prog_cc_c89" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c89
-  ac_prog_cc_stdc=c89 ;;
-esac
-fi
-fi
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-  ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $CC understands -c and -o together" >&5
-printf %s "checking whether $CC understands -c and -o together... " >&6; }
-if test ${am_cv_prog_cc_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-  # Make sure it works both with $CC and with simple cc.
-  # Following AC_PROG_CC_C_O, we do the test twice because some
-  # compilers refuse to overwrite an existing .o file with -o,
-  # though they will create one.
-  am_cv_prog_cc_c_o=yes
-  for am_i in 1 2; do
-    if { echo "$as_me:$LINENO: $CC -c conftest.$ac_ext -o conftest2.$ac_objext" >&5
-   ($CC -c conftest.$ac_ext -o conftest2.$ac_objext) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } \
-         && test -f conftest2.$ac_objext; then
-      : OK
-    else
-      am_cv_prog_cc_c_o=no
-      break
-    fi
-  done
-  # aligned with autoconf, so not including core; see bug#72225.
-  rm -f -r a.out a.exe b.out conftest.$ac_ext conftest.$ac_objext \
-    conftest.dSYM conftest1.$ac_ext conftest1.$ac_objext conftest1.dSYM \
-    conftest2.$ac_ext conftest2.$ac_objext conftest2.dSYM
-  unset am_i ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_prog_cc_c_o" >&5
-printf '%s\n' "$am_cv_prog_cc_c_o" >&6; }
-if test "$am_cv_prog_cc_c_o" != yes; then
-   # Losing compiler, so override with the script.
-   # FIXME: It is wrong to rewrite CC.
-   # But if we don't then we get into trouble of one sort or another.
-   # A longer-term fix would be to have automake use am__CC in this case,
-   # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)"
-   CC="$am_aux_dir/compile $CC"
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-
-ac_header= ac_cache=
-for ac_item in $ac_header_c_list
-do
-  if test $ac_cache; then
-    ac_fn_c_check_header_compile "$LINENO" $ac_header ac_cv_header_$ac_cache "$ac_includes_default"
-    if eval test \"x\$ac_cv_header_$ac_cache\" = xyes; then
-      printf '%s\n' "#define $ac_item 1" >> confdefs.h
-    fi
-    ac_header= ac_cache=
-  elif test $ac_header; then
-    ac_cache=$ac_item
-  else
-    ac_header=$ac_item
-  fi
-done
-
-
-
-
-
-
-
-
-if test $ac_cv_header_stdlib_h = yes && test $ac_cv_header_string_h = yes
-then :
-  
-printf '%s\n' "@%:@define STDC_HEADERS 1" >>confdefs.h
-
-fi
-
-
-
-    
-  
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether it is safe to define __EXTENSIONS__" >&5
-printf %s "checking whether it is safe to define __EXTENSIONS__... " >&6; }
-if test ${ac_cv_safe_to_define___extensions__+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-#         define __EXTENSIONS__ 1
-          $ac_includes_default
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_safe_to_define___extensions__=yes
-else case e in @%:@(
-  e) ac_cv_safe_to_define___extensions__=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_safe_to_define___extensions__" >&5
-printf '%s\n' "$ac_cv_safe_to_define___extensions__" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether _XOPEN_SOURCE should be defined" >&5
-printf %s "checking whether _XOPEN_SOURCE should be defined... " >&6; }
-if test ${ac_cv_should_define__xopen_source+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_should_define__xopen_source=no
-    if test $ac_cv_header_wchar_h = yes
-then :
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-          #include <wchar.h>
-          mbstate_t x;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-            #define _XOPEN_SOURCE 500
-            #include <wchar.h>
-            mbstate_t x;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_should_define__xopen_source=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_should_define__xopen_source" >&5
-printf '%s\n' "$ac_cv_should_define__xopen_source" >&6; }
-
-  printf '%s\n' "@%:@define _ALL_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _COSMO_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _DARWIN_C_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _GNU_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _HPUX_ALT_XOPEN_SOCKET_API 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _NETBSD_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _OPENBSD_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _POSIX_PTHREAD_SEMANTICS 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_ATTRIBS_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_BFP_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_DFP_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_FUNCS_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_TYPES_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_LIB_EXT2__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_MATH_SPEC_FUNCS__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _TANDEM_SOURCE 1" >>confdefs.h
-
-  if test $ac_cv_header_minix_config_h = yes
-then :
-  MINIX=yes
-    printf '%s\n' "@%:@define _MINIX 1" >>confdefs.h
-
-    printf '%s\n' "@%:@define _POSIX_SOURCE 1" >>confdefs.h
-
-    printf '%s\n' "@%:@define _POSIX_1_SOURCE 2" >>confdefs.h
-
-else case e in @%:@(
-  e) MINIX= ;;
-esac
-fi
-  if test $ac_cv_safe_to_define___extensions__ = yes
-then :
-  printf '%s\n' "@%:@define __EXTENSIONS__ 1" >>confdefs.h
-
-fi
-  if test $ac_cv_should_define__xopen_source = yes
-then :
-  printf '%s\n' "@%:@define _XOPEN_SOURCE 500" >>confdefs.h
-
-fi
-
-
-# Initialize Automake
-am__api_version='1.18'
-
-
-  # Find a good install program.  We prefer a C program (faster),
-# so one script is as good as another.  But avoid the broken or
-# incompatible versions:
-# SysV /etc/install, /usr/sbin/install
-# SunOS /usr/etc/install
-# IRIX /sbin/install
-# AIX /bin/install
-# AmigaOS /C/install, which installs bootblocks on floppy discs
-# AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag
-# AFS /usr/afsws/bin/install, which mishandles nonexistent args
-# SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
-# OS/2's system install, which has a completely different semantic
-# ./install, which can be erroneously created by make from ./install.sh.
-# Reject install programs that cannot install multiple files.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5
-printf %s "checking for a BSD-compatible install... " >&6; }
-if test -z "$INSTALL"; then
-if test ${ac_cv_path_install+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    # Account for fact that we put trailing slashes in our PATH walk.
-case $as_dir in @%:@((
-  ./ | /[cC]/* | \
-  /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \
-  ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \
-  /usr/ucb/* ) ;;
-  *)
-    # OSF/1 and SCO ODT 3.0 have their own names for install.
-    # Don't use installbsd from OSF/1 since it installs stuff as root
-    # by default.
-    for ac_prog in ginstall scoinst install; do
-      for ac_exec_ext in '' $ac_executable_extensions; do
-	if as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext"; then
-	  if test $ac_prog = install &&
-	    grep dspmsg "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # AIX install.  It has an incompatible calling convention.
-	    :
-	  elif test $ac_prog = install &&
-	    grep pwplus "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # program-specific install script used by HP pwplus--don't use.
-	    :
-	  else
-	    rm -rf conftest.one conftest.two conftest.dir
-	    echo one > conftest.one
-	    echo two > conftest.two
-	    mkdir conftest.dir
-	    if "$as_dir$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir/" &&
-	      test -s conftest.one && test -s conftest.two &&
-	      test -s conftest.dir/conftest.one &&
-	      test -s conftest.dir/conftest.two
-	    then
-	      ac_cv_path_install="$as_dir$ac_prog$ac_exec_ext -c"
-	      break 3
-	    fi
-	  fi
-	fi
-      done
-    done
-    ;;
-esac
-
-  done
-IFS=$as_save_IFS
-
-rm -rf conftest.one conftest.two conftest.dir
- ;;
-esac
-fi
-  if test ${ac_cv_path_install+y}; then
-    INSTALL=$ac_cv_path_install
-  else
-    # As a last resort, use the slow shell script.  Don't cache a
-    # value for INSTALL within a source directory, because that will
-    # break other packages using the cache if that directory is
-    # removed, or if the value is a relative name.
-    INSTALL=$ac_install_sh
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5
-printf '%s\n' "$INSTALL" >&6; }
-
-# Use test -z because SunOS4 sh mishandles braces in ${var-val}.
-# It thinks the first close brace ends the variable substitution.
-test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}'
-
-test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}'
-
-test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether sleep supports fractional seconds" >&5
-printf %s "checking whether sleep supports fractional seconds... " >&6; }
-if test ${am_cv_sleep_fractional_seconds+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if sleep 0.001 2>/dev/null
-then :
-  am_cv_sleep_fractional_seconds=yes
-else case e in @%:@(
-  e) am_cv_sleep_fractional_seconds=no ;;
-esac
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_sleep_fractional_seconds" >&5
-printf '%s\n' "$am_cv_sleep_fractional_seconds" >&6; }
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking filesystem timestamp resolution" >&5
-printf %s "checking filesystem timestamp resolution... " >&6; }
-if test ${am_cv_filesystem_timestamp_resolution+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) # Default to the worst case.
-am_cv_filesystem_timestamp_resolution=2
-
-# Only try to go finer than 1 sec if sleep can do it.
-# Don't try 1 sec, because if 0.01 sec and 0.1 sec don't work,
-# - 1 sec is not much of a win compared to 2 sec, and
-# - it takes 2 seconds to perform the test whether 1 sec works.
-# 
-# Instead, just use the default 2s on platforms that have 1s resolution,
-# accept the extra 1s delay when using $sleep in the Automake tests, in
-# exchange for not incurring the 2s delay for running the test for all
-# packages.
-#
-am_try_resolutions=
-if test "$am_cv_sleep_fractional_seconds" = yes; then
-  # Even a millisecond often causes a bunch of false positives,
-  # so just try a hundredth of a second. The time saved between .001 and
-  # .01 is not terribly consequential.
-  am_try_resolutions="0.01 0.1 $am_try_resolutions"
-fi
-
-# In order to catch current-generation FAT out, we must *modify* files
-# that already exist; the *creation* timestamp is finer.  Use names
-# that make ls -t sort them differently when they have equal
-# timestamps than when they have distinct timestamps, keeping
-# in mind that ls -t prints the *newest* file first.
-rm -f conftest.ts?
-: > conftest.ts1
-: > conftest.ts2
-: > conftest.ts3
-
-# Make sure ls -t actually works.  Do 'set' in a subshell so we don't
-# clobber the current shell's arguments. (Outer-level square brackets
-# are removed by m4; they're present so that m4 does not expand
-# <dollar><star>; be careful, easy to get confused.)
-if (
-     set X `ls -t conftest.ts[12]` &&
-     {
-       test "$*" != "X conftest.ts1 conftest.ts2" ||
-       test "$*" != "X conftest.ts2 conftest.ts1";
-     }
-); then :; else
-  # If neither matched, then we have a broken ls.  This can happen
-  # if, for instance, CONFIG_SHELL is bash and it inherits a
-  # broken ls alias from the environment.  This has actually
-  # happened.  Such a system could not be considered "sane".
-  printf '%s\n' ""Bad output from ls -t: \"`ls -t conftest.ts[12]`\""" >&5
-  { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "ls -t produces unexpected output.
-Make sure there is not a broken ls alias in your environment.
-See 'config.log' for more details" "$LINENO" 5; }
-fi
-
-for am_try_res in $am_try_resolutions; do
-  # Any one fine-grained sleep might happen to cross the boundary
-  # between two values of a coarser actual resolution, but if we do
-  # two fine-grained sleeps in a row, at least one of them will fall
-  # entirely within a coarse interval.
-  echo alpha > conftest.ts1
-  sleep $am_try_res
-  echo beta > conftest.ts2
-  sleep $am_try_res
-  echo gamma > conftest.ts3
-
-  # We assume that 'ls -t' will make use of high-resolution
-  # timestamps if the operating system supports them at all.
-  if (set X `ls -t conftest.ts?` &&
-      test "$2" = conftest.ts3 &&
-      test "$3" = conftest.ts2 &&
-      test "$4" = conftest.ts1); then
-    #
-    # Ok, ls -t worked. If we're at a resolution of 1 second, we're done,
-    # because we don't need to test make.
-    make_ok=true
-    if test $am_try_res != 1; then
-      # But if we've succeeded so far with a subsecond resolution, we
-      # have one more thing to check: make. It can happen that
-      # everything else supports the subsecond mtimes, but make doesn't;
-      # notably on macOS, which ships make 3.81 from 2006 (the last one
-      # released under GPLv2). https://bugs.gnu.org/68808
-      # 
-      # We test $MAKE if it is defined in the environment, else "make".
-      # It might get overridden later, but our hope is that in practice
-      # it does not matter: it is the system "make" which is (by far)
-      # the most likely to be broken, whereas if the user overrides it,
-      # probably they did so with a better, or at least not worse, make.
-      # https://lists.gnu.org/archive/html/automake/2024-06/msg00051.html
-      #
-      # Create a Makefile (real tab character here):
-      rm -f conftest.mk
-      echo 'conftest.ts1: conftest.ts2' >conftest.mk
-      echo '	touch conftest.ts2' >>conftest.mk
-      #
-      # Now, running
-      #   touch conftest.ts1; touch conftest.ts2; make
-      # should touch ts1 because ts2 is newer. This could happen by luck,
-      # but most often, it will fail if make's support is insufficient. So
-      # test for several consecutive successes.
-      #
-      # (We reuse conftest.ts[12] because we still want to modify existing
-      # files, not create new ones, per above.)
-      n=0
-      make=${MAKE-make}
-      until test $n -eq 3; do
-        echo one > conftest.ts1
-        sleep $am_try_res
-        echo two > conftest.ts2 # ts2 should now be newer than ts1
-        if $make -f conftest.mk | grep 'up to date' >/dev/null; then
-          make_ok=false
-          break # out of $n loop
-        fi
-        n=`expr $n + 1`
-      done
-    fi
-    #
-    if $make_ok; then
-      # Everything we know to check worked out, so call this resolution good.
-      am_cv_filesystem_timestamp_resolution=$am_try_res
-      break # out of $am_try_res loop
-    fi
-    # Otherwise, we'll go on to check the next resolution.
-  fi
-done
-rm -f conftest.ts?
-# (end _am_filesystem_timestamp_resolution)
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_filesystem_timestamp_resolution" >&5
-printf '%s\n' "$am_cv_filesystem_timestamp_resolution" >&6; }
-
-# This check should not be cached, as it may vary across builds of
-# different projects.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether build environment is sane" >&5
-printf %s "checking whether build environment is sane... " >&6; }
-# Reject unsafe characters in $srcdir or the absolute working directory
-# name.  Accept space and tab only in the latter.
-am_lf='
-'
-case `pwd` in
-  *[\\\"\#\$\&\'\`$am_lf]*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-    as_fn_error $? "unsafe absolute working directory name" "$LINENO" 5;;
-esac
-case $srcdir in
-  *[\\\"\#\$\&\'\`$am_lf\ \	]*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-    as_fn_error $? "unsafe srcdir value: '$srcdir'" "$LINENO" 5;;
-esac
-
-# Do 'set' in a subshell so we don't clobber the current shell's
-# arguments.  Must try -L first in case configure is actually a
-# symlink; some systems play weird games with the mod time of symlinks
-# (eg FreeBSD returns the mod time of the symlink's containing
-# directory).
-am_build_env_is_sane=no
-am_has_slept=no
-rm -f conftest.file
-for am_try in 1 2; do
-  echo "timestamp, slept: $am_has_slept" > conftest.file
-  if (
-    set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null`
-    if test "$*" = "X"; then
-      # -L didn't work.
-      set X `ls -t "$srcdir/configure" conftest.file`
-    fi
-    test "$2" = conftest.file
-  ); then
-    am_build_env_is_sane=yes
-    break
-  fi
-  # Just in case.
-  sleep "$am_cv_filesystem_timestamp_resolution"
-  am_has_slept=yes
-done
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_build_env_is_sane" >&5
-printf '%s\n' "$am_build_env_is_sane" >&6; }
-if test "$am_build_env_is_sane" = no; then
-  as_fn_error $? "newly created file is older than distributed files!
-Check your system clock" "$LINENO" 5
-fi
-
-# If we didn't sleep, we still need to ensure time stamps of config.status and
-# generated files are strictly newer.
-am_sleep_pid=
-if test -e conftest.file || grep 'slept: no' conftest.file >/dev/null 2>&1
-then :
-  
-else case e in @%:@(
-  e)   ( sleep "$am_cv_filesystem_timestamp_resolution" ) &
-  am_sleep_pid=$!
- ;;
-esac
-fi
-
-rm -f conftest.file
-
-test "$program_prefix" != NONE &&
-  program_transform_name="s&^&$program_prefix&;$program_transform_name"
-# Use a double $ so make ignores it.
-test "$program_suffix" != NONE &&
-  program_transform_name="s&\$&$program_suffix&;$program_transform_name"
-# Double any \ or $.
-# By default was 's,x,x', remove it if useless.
-ac_script='s/[\\$]/&&/g;s/;s,x,x,$//'
-program_transform_name=`printf '%s\n' "$program_transform_name" | sed "$ac_script"`
-
-
-  if test x"${MISSING+set}" != xset; then
-  MISSING="\${SHELL} '$am_aux_dir/missing'"
-fi
-# Use eval to expand $SHELL
-if eval "$MISSING --is-lightweight"; then
-  am_missing_run="$MISSING "
-else
-  am_missing_run=
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: 'missing' script is too old or missing" >&5
-printf '%s\n' "$as_me: WARNING: 'missing' script is too old or missing" >&2;}
-fi
-
-if test x"${install_sh+set}" != xset; then
-  case $am_aux_dir in
-  *\ * | *\	*)
-    install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;;
-  *)
-    install_sh="\${SHELL} $am_aux_dir/install-sh"
-  esac
-fi
-
-# Installed binaries are usually stripped using 'strip' when the user
-# run "make install-strip".  However 'strip' might not be the right
-# tool to use in cross-compilation environments, therefore Automake
-# will honor the 'STRIP' environment variable to overrule this program.
-if test "$cross_compiling" != no; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-printf '%s\n' "$STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-printf '%s\n' "$ac_ct_STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-fi
-INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s"
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a race-free mkdir -p" >&5
-printf %s "checking for a race-free mkdir -p... " >&6; }
-if test -z "$MKDIR_P"; then
-  if test ${ac_cv_path_mkdir+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/opt/sfw/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in mkdir gmkdir; do
-	 for ac_exec_ext in '' $ac_executable_extensions; do
-	   as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext" || continue
-	   case `"$as_dir$ac_prog$ac_exec_ext" --version 2>&1` in #(
-	     'mkdir ('*'coreutils) '* | \
-	     *'BusyBox '* | \
-	     'mkdir (fileutils) '4.1*)
-	       ac_cv_path_mkdir=$as_dir$ac_prog$ac_exec_ext
-	       break 3;;
-	   esac
-	 done
-       done
-  done
-IFS=$as_save_IFS
- ;;
-esac
-fi
-
-  test -d ./--version && rmdir ./--version
-  if test ${ac_cv_path_mkdir+y}; then
-    MKDIR_P="$ac_cv_path_mkdir -p"
-  else
-    # As a last resort, use plain mkdir -p,
-    # in the hope it doesn't have the bugs of ancient mkdir.
-    MKDIR_P='mkdir -p'
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MKDIR_P" >&5
-printf '%s\n' "$MKDIR_P" >&6; }
-
-for ac_prog in gawk mawk nawk awk 'busybox awk'
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_AWK+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$AWK"; then
-  ac_cv_prog_AWK="$AWK" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AWK="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-AWK=$ac_cv_prog_AWK
-if test -n "$AWK"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5
-printf '%s\n' "$AWK" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$AWK" && break
-done
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} sets \$(MAKE)" >&5
-printf %s "checking whether ${MAKE-make} sets \$(MAKE)... " >&6; }
-set x ${MAKE-make}
-ac_make=`printf '%s\n' "$2" | sed 's/+/p/g; s/[^a-zA-Z0-9_]/_/g'`
-if eval test \${ac_cv_prog_make_${ac_make}_set+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat >conftest.make <<\_ACEOF
-SHELL = /bin/sh
-all:
-	@printf '%s\n' '@@@%%%=$(MAKE)=@@@%%%'
-_ACEOF
-# GNU make sometimes prints "make[1]: Entering ...", which would confuse us.
-case `${MAKE-make} -f conftest.make 2>/dev/null` in
-  *@@@%%%=?*=@@@%%%*)
-    eval ac_cv_prog_make_${ac_make}_set=yes;;
-  *)
-    eval ac_cv_prog_make_${ac_make}_set=no;;
-esac
-rm -f conftest.make ;;
-esac
-fi
-if eval test \$ac_cv_prog_make_${ac_make}_set = yes; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-  SET_MAKE=
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-  SET_MAKE="MAKE=${MAKE-make}"
-fi
-
-rm -rf .tst 2>/dev/null
-mkdir .tst 2>/dev/null
-if test -d .tst; then
-  am__leading_dot=.
-else
-  am__leading_dot=_
-fi
-rmdir .tst 2>/dev/null
-
-DEPDIR="${am__leading_dot}deps"
-
-ac_config_commands="$ac_config_commands depfiles"
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} supports the include directive" >&5
-printf %s "checking whether ${MAKE-make} supports the include directive... " >&6; }
-cat > confinc.mk << 'END'
-am__doit:
-	@echo this is the am__doit target >confinc.out
-.PHONY: am__doit
-END
-am__include="#"
-am__quote=
-# BSD make does it like this.
-echo '.include "confinc.mk" # ignored' > confmf.BSD
-# Other make implementations (GNU, Solaris 10, AIX) do it like this.
-echo 'include confinc.mk # ignored' > confmf.GNU
-_am_result=no
-for s in GNU BSD; do
-  { echo "$as_me:$LINENO: ${MAKE-make} -f confmf.$s && cat confinc.out" >&5
-   (${MAKE-make} -f confmf.$s && cat confinc.out) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-  case $?:`cat confinc.out 2>/dev/null` in @%:@(
-  '0:this is the am__doit target') :
-    case $s in @%:@(
-  BSD) :
-    am__include='.include' am__quote='"' ;; @%:@(
-  *) :
-    am__include='include' am__quote='' ;;
-esac ;; @%:@(
-  *) :
-     ;;
-esac
-  if test "$am__include" != "#"; then
-    _am_result="yes ($s style)"
-    break
-  fi
-done
-rm -f confinc.* confmf.*
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ${_am_result}" >&5
-printf '%s\n' "${_am_result}" >&6; }
-
-@%:@ Check whether --enable-dependency-tracking was given.
-if test ${enable_dependency_tracking+y}
-then :
-  enableval=$enable_dependency_tracking; 
-fi
-
-if test "x$enable_dependency_tracking" != xno; then
-  am_depcomp="$ac_aux_dir/depcomp"
-  AMDEPBACKSLASH='\'
-  am__nodep='_no'
-fi
- if test "x$enable_dependency_tracking" != xno; then
-  AMDEP_TRUE=
-  AMDEP_FALSE='#'
-else
-  AMDEP_TRUE='#'
-  AMDEP_FALSE=
-fi
-
-
-AM_DEFAULT_VERBOSITY=1
-@%:@ Check whether --enable-silent-rules was given.
-if test ${enable_silent_rules+y}
-then :
-  enableval=$enable_silent_rules; 
-fi
-
-am_make=${MAKE-make}
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5
-printf %s "checking whether $am_make supports nested variables... " >&6; }
-if test ${am_cv_make_support_nested_variables+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if printf '%s\n' 'TRUE=$(BAR$(V))
-BAR0=false
-BAR1=true
-V=1
-am__doit:
-	@$(TRUE)
-.PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then
-  am_cv_make_support_nested_variables=yes
-else
-  am_cv_make_support_nested_variables=no
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5
-printf '%s\n' "$am_cv_make_support_nested_variables" >&6; }
-AM_BACKSLASH='\'
-
-am__rm_f_notfound=
-if (rm -f && rm -fr && rm -rf) 2>/dev/null
-then :
-  
-else case e in @%:@(
-  e) am__rm_f_notfound='""' ;;
-esac
-fi
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking xargs -n works" >&5
-printf %s "checking xargs -n works... " >&6; }
-if test ${am_cv_xargs_n_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test "`echo 1 2 3 | xargs -n2 echo`" = "1 2
-3"
-then :
-  am_cv_xargs_n_works=yes
-else case e in @%:@(
-  e) am_cv_xargs_n_works=no ;;
-esac
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_xargs_n_works" >&5
-printf '%s\n' "$am_cv_xargs_n_works" >&6; }
-if test "$am_cv_xargs_n_works" = yes
-then :
-  am__xargs_n='xargs -n'
-else case e in @%:@(
-  e)   am__xargs_n='am__xargs_n () { shift; sed "s/ /\\n/g" | while read am__xargs_n_arg; do "" "$am__xargs_n_arg"; done; }'
- ;;
-esac
-fi
-
-if test "`cd $srcdir && pwd`" != "`pwd`"; then
-  # Use -I$(srcdir) only when $(srcdir) != ., so that make's output
-  # is not polluted with repeated "-I."
-  am__isrc=' -I$(srcdir)'
-  # test to see if srcdir already configured
-  if test -f $srcdir/config.status; then
-    as_fn_error $? "source directory already configured; run \"make distclean\" there first" "$LINENO" 5
-  fi
-fi
-
-# test whether we have cygpath
-if test -z "$CYGPATH_W"; then
-  if (cygpath --version) >/dev/null 2>/dev/null; then
-    CYGPATH_W='cygpath -w'
-  else
-    CYGPATH_W=echo
-  fi
-fi
-
-
-# Define the identity of the package.
- PACKAGE='libXext'
- VERSION='1.3.7'
-
-
-printf '%s\n' "@%:@define PACKAGE \"$PACKAGE\"" >>confdefs.h
-
- 
-printf '%s\n' "@%:@define VERSION \"$VERSION\"" >>confdefs.h
-
-# Some tools Automake needs.
-
-ACLOCAL=${ACLOCAL-"${am_missing_run}aclocal-${am__api_version}"}
-
-
-AUTOCONF=${AUTOCONF-"${am_missing_run}autoconf"}
-
-
-AUTOMAKE=${AUTOMAKE-"${am_missing_run}automake-${am__api_version}"}
-
-
-AUTOHEADER=${AUTOHEADER-"${am_missing_run}autoheader"}
-
-
-MAKEINFO=${MAKEINFO-"${am_missing_run}makeinfo"}
-
-# For better backward compatibility.  To be removed once Automake 1.9.x
-# dies out for good.  For more background, see:
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00001.html>
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00014.html>
-mkdir_p='$(MKDIR_P)'
-
-# We need awk for the "check" target (and possibly the TAP driver).  The
-# system "awk" is bad on some platforms.
-# Always define AMTAR for backward compatibility.  Yes, it's still used
-# in the wild :-(  We should find a proper way to deprecate it ...
-AMTAR='$${TAR-tar}'
-
-
-# We'll loop over all known methods to create a tar archive until one works.
-_am_tools='gnutar plaintar pax cpio none'
-
-# The POSIX 1988 'ustar' format is defined with fixed-size fields.
-      # There is notably a 21 bits limit for the UID and the GID.  In fact,
-      # the 'pax' utility can hang on bigger UID/GID (see automake bug#8343
-      # and bug#13588).
-      am_max_uid=2097151 # 2^21 - 1
-      am_max_gid=$am_max_uid
-      # The $UID and $GID variables are not portable, so we need to resort
-      # to the POSIX-mandated id(1) utility.  Errors in the 'id' calls
-      # below are definitely unexpected, so allow the users to see them
-      # (that is, avoid stderr redirection).
-      am_uid=`id -u || echo unknown`
-      am_gid=`id -g || echo unknown`
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether UID '$am_uid' is supported by ustar format" >&5
-printf %s "checking whether UID '$am_uid' is supported by ustar format... " >&6; }
-      if test x$am_uid = xunknown; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ancient id detected; assuming current UID is ok, but dist-ustar might not work" >&5
-printf '%s\n' "$as_me: WARNING: ancient id detected; assuming current UID is ok, but dist-ustar might not work" >&2;}
-      elif test $am_uid -le $am_max_uid; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        _am_tools=none
-      fi
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether GID '$am_gid' is supported by ustar format" >&5
-printf %s "checking whether GID '$am_gid' is supported by ustar format... " >&6; }
-      if test x$gm_gid = xunknown; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ancient id detected; assuming current GID is ok, but dist-ustar might not work" >&5
-printf '%s\n' "$as_me: WARNING: ancient id detected; assuming current GID is ok, but dist-ustar might not work" >&2;}
-      elif test $am_gid -le $am_max_gid; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        _am_tools=none
-      fi
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to create a ustar tar archive" >&5
-printf %s "checking how to create a ustar tar archive... " >&6; }
-
-  # Go ahead even if we have the value already cached.  We do so because we
-  # need to set the values for the 'am__tar' and 'am__untar' variables.
-  _am_tools=${am_cv_prog_tar_ustar-$_am_tools}
-
-  for _am_tool in $_am_tools; do
-    case $_am_tool in
-    gnutar)
-      for _am_tar in tar gnutar gtar; do
-        { echo "$as_me:$LINENO: $_am_tar --version" >&5
-   ($_am_tar --version) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } && break
-      done
-      am__tar="$_am_tar --format=ustar -chf - "'"$$tardir"'
-      am__tar_="$_am_tar --format=ustar -chf - "'"$tardir"'
-      am__untar="$_am_tar -xf -"
-      ;;
-    plaintar)
-      # Must skip GNU tar: if it does not support --format= it doesn't create
-      # ustar tarball either.
-      (tar --version) >/dev/null 2>&1 && continue
-      am__tar='tar chf - "$$tardir"'
-      am__tar_='tar chf - "$tardir"'
-      am__untar='tar xf -'
-      ;;
-    pax)
-      am__tar='pax -L -x ustar -w "$$tardir"'
-      am__tar_='pax -L -x ustar -w "$tardir"'
-      am__untar='pax -r'
-      ;;
-    cpio)
-      am__tar='find "$$tardir" -print | cpio -o -H ustar -L'
-      am__tar_='find "$tardir" -print | cpio -o -H ustar -L'
-      am__untar='cpio -i -H ustar -d'
-      ;;
-    none)
-      am__tar=false
-      am__tar_=false
-      am__untar=false
-      ;;
-    esac
-
-    # If the value was cached, stop now.  We just wanted to have am__tar
-    # and am__untar set.
-    test -n "${am_cv_prog_tar_ustar}" && break
-
-    # tar/untar a dummy directory, and stop if the command works.
-    rm -rf conftest.dir
-    mkdir conftest.dir
-    echo GrepMe > conftest.dir/file
-    { echo "$as_me:$LINENO: tardir=conftest.dir && eval $am__tar_ >conftest.tar" >&5
-   (tardir=conftest.dir && eval $am__tar_ >conftest.tar) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-    rm -rf conftest.dir
-    if test -s conftest.tar; then
-      { echo "$as_me:$LINENO: $am__untar <conftest.tar" >&5
-   ($am__untar <conftest.tar) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-      { echo "$as_me:$LINENO: cat conftest.dir/file" >&5
-   (cat conftest.dir/file) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-      grep GrepMe conftest.dir/file >/dev/null 2>&1 && break
-    fi
-  done
-  rm -rf conftest.dir
-
-  if test ${am_cv_prog_tar_ustar+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) am_cv_prog_tar_ustar=$_am_tool ;;
-esac
-fi
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_prog_tar_ustar" >&5
-printf '%s\n' "$am_cv_prog_tar_ustar" >&6; }
-
-
-
-
-
-depcc="$CC"   am_compiler_list=
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking dependency style of $depcc" >&5
-printf %s "checking dependency style of $depcc... " >&6; }
-if test ${am_cv_CC_dependencies_compiler_type+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then
-  # We make a subdir and do the tests there.  Otherwise we can end up
-  # making bogus files that we don't know about and never remove.  For
-  # instance it was reported that on HP-UX the gcc test will end up
-  # making a dummy file named 'D' -- because '-MD' means "put the output
-  # in D".
-  rm -rf conftest.dir
-  mkdir conftest.dir
-  # Copy depcomp to subdir because otherwise we won't find it if we're
-  # using a relative directory.
-  cp "$am_depcomp" conftest.dir
-  cd conftest.dir
-  # We will build objects and dependencies in a subdirectory because
-  # it helps to detect inapplicable dependency modes.  For instance
-  # both Tru64's cc and ICC support -MD to output dependencies as a
-  # side effect of compilation, but ICC will put the dependencies in
-  # the current directory while Tru64 will put them in the object
-  # directory.
-  mkdir sub
-
-  am_cv_CC_dependencies_compiler_type=none
-  if test "$am_compiler_list" = ""; then
-     am_compiler_list=`sed -n 's/^#*\([a-zA-Z0-9]*\))$/\1/p' < ./depcomp`
-  fi
-  am__universal=false
-  case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac
-
-  for depmode in $am_compiler_list; do
-    # Setup a source with many dependencies, because some compilers
-    # like to wrap large dependency lists on column 80 (with \), and
-    # we should not choose a depcomp mode which is confused by this.
-    #
-    # We need to recreate these files for each test, as the compiler may
-    # overwrite some of them when testing with obscure command lines.
-    # This happens at least with the AIX C compiler.
-    : > sub/conftest.c
-    for i in 1 2 3 4 5 6; do
-      echo '#include "conftst'$i'.h"' >> sub/conftest.c
-      # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with
-      # Solaris 10 /bin/sh.
-      echo '/* dummy */' > sub/conftst$i.h
-    done
-    echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
-
-    # We check with '-c' and '-o' for the sake of the "dashmstdout"
-    # mode.  It turns out that the SunPro C++ compiler does not properly
-    # handle '-M -o', and we need to detect this.  Also, some Intel
-    # versions had trouble with output in subdirs.
-    am__obj=sub/conftest.${OBJEXT-o}
-    am__minus_obj="-o $am__obj"
-    case $depmode in
-    gcc)
-      # This depmode causes a compiler race in universal mode.
-      test "$am__universal" = false || continue
-      ;;
-    nosideeffect)
-      # After this tag, mechanisms are not by side-effect, so they'll
-      # only be used when explicitly requested.
-      if test "x$enable_dependency_tracking" = xyes; then
-	continue
-      else
-	break
-      fi
-      ;;
-    msvc7 | msvc7msys | msvisualcpp | msvcmsys)
-      # This compiler won't grok '-c -o', but also, the minuso test has
-      # not run yet.  These depmodes are late enough in the game, and
-      # so weak that their functioning should not be impacted.
-      am__obj=conftest.${OBJEXT-o}
-      am__minus_obj=
-      ;;
-    none) break ;;
-    esac
-    if depmode=$depmode \
-       source=sub/conftest.c object=$am__obj \
-       depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
-       $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \
-         >/dev/null 2>conftest.err &&
-       grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep $am__obj sub/conftest.Po > /dev/null 2>&1 &&
-       ${MAKE-make} -s -f confmf > /dev/null 2>&1; then
-      # icc doesn't choke on unknown options, it will just issue warnings
-      # or remarks (even with -Werror).  So we grep stderr for any message
-      # that says an option was ignored or not supported.
-      # When given -MP, icc 7.0 and 7.1 complain thus:
-      #   icc: Command line warning: ignoring option '-M'; no argument required
-      # The diagnosis changed in icc 8.0:
-      #   icc: Command line remark: option '-MP' not supported
-      if (grep 'ignoring option' conftest.err ||
-          grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else
-        am_cv_CC_dependencies_compiler_type=$depmode
-        break
-      fi
-    fi
-  done
-
-  cd ..
-  rm -rf conftest.dir
-else
-  am_cv_CC_dependencies_compiler_type=none
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_CC_dependencies_compiler_type" >&5
-printf '%s\n' "$am_cv_CC_dependencies_compiler_type" >&6; }
-CCDEPMODE=depmode=$am_cv_CC_dependencies_compiler_type
-
- if 
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_CC_dependencies_compiler_type" = gcc3; then
-  am__fastdepCC_TRUE=
-  am__fastdepCC_FALSE='#'
-else
-  am__fastdepCC_TRUE='#'
-  am__fastdepCC_FALSE=
-fi
-
-
-# Variables for tags utilities; see am/tags.am
-if test -z "$CTAGS"; then
-  CTAGS=ctags
-fi
-
-if test -z "$ETAGS"; then
-  ETAGS=etags
-fi
-
-if test -z "$CSCOPE"; then
-  CSCOPE=cscope
-fi
-
-
-
-
-
-
-
-
-# Initialize libtool
-case `pwd` in
-  *\ * | *\	*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&5
-printf '%s\n' "$as_me: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&2;} ;;
-esac
-
-
-
-macro_version='2.5.4'
-macro_revision='2.5.4'
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-
-  
-ltmain=$ac_aux_dir/ltmain.sh
-
-
-  
-  # Make sure we can run config.sub.
-$SHELL "${ac_aux_dir}config.sub" sun4 >/dev/null 2>&1 ||
-  as_fn_error $? "cannot run $SHELL ${ac_aux_dir}config.sub" "$LINENO" 5
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking build system type" >&5
-printf %s "checking build system type... " >&6; }
-if test ${ac_cv_build+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_build_alias=$build_alias
-test "x$ac_build_alias" = x &&
-  ac_build_alias=`$SHELL "${ac_aux_dir}config.guess"`
-test "x$ac_build_alias" = x &&
-  as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5
-ac_cv_build=`$SHELL "${ac_aux_dir}config.sub" $ac_build_alias` ||
-  as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $ac_build_alias failed" "$LINENO" 5
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5
-printf '%s\n' "$ac_cv_build" >&6; }
-case $ac_cv_build in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical build" "$LINENO" 5;;
-esac
-build=$ac_cv_build
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_build
-shift
-build_cpu=$1
-build_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-build_os=$*
-IFS=$ac_save_IFS
-case $build_os in *\ *) build_os=`printf '%s\n' "$build_os" | sed 's/ /-/g'`;; esac
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking host system type" >&5
-printf %s "checking host system type... " >&6; }
-if test ${ac_cv_host+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test "x$host_alias" = x; then
-  ac_cv_host=$ac_cv_build
-else
-  ac_cv_host=`$SHELL "${ac_aux_dir}config.sub" $host_alias` ||
-    as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $host_alias failed" "$LINENO" 5
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5
-printf '%s\n' "$ac_cv_host" >&6; }
-case $ac_cv_host in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical host" "$LINENO" 5;;
-esac
-host=$ac_cv_host
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_host
-shift
-host_cpu=$1
-host_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-host_os=$*
-IFS=$ac_save_IFS
-case $host_os in *\ *) host_os=`printf '%s\n' "$host_os" | sed 's/ /-/g'`;; esac
-
-
-# Backslashify metacharacters that are still active within
-# double-quoted strings.
-sed_quote_subst='s/\(["`$\\]\)/\\\1/g'
-
-# Same as above, but do not quote variable references.
-double_quote_subst='s/\(["`\\]\)/\\\1/g'
-
-# Sed substitution to delay expansion of an escaped shell variable in a
-# double_quote_subst'ed string.
-delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g'
-
-# Sed substitution to delay expansion of an escaped single quote.
-delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g'
-
-# Sed substitution to avoid accidental globbing in evaled expressions
-no_glob_subst='s/\*/\\\*/g'
-
-ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to print strings" >&5
-printf %s "checking how to print strings... " >&6; }
-# Test print first, because it will be a builtin if present.
-if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \
-   test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='print -r --'
-elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='printf %s\n'
-else
-  # Use this function as a fallback that always works.
-  func_fallback_echo ()
-  {
-    eval 'cat <<_LTECHO_EOF
-$1
-_LTECHO_EOF'
-  }
-  ECHO='func_fallback_echo'
-fi
-
-# func_echo_all arg...
-# Invoke $ECHO with all args, space-separated.
-func_echo_all ()
-{
-    $ECHO ""
-}
-
-case $ECHO in
-  printf*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: printf" >&5
-printf '%s\n' "printf" >&6; } ;;
-  print*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: print -r" >&5
-printf '%s\n' "print -r" >&6; } ;;
-  *) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: cat" >&5
-printf '%s\n' "cat" >&6; } ;;
-esac
-
-
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a sed that does not truncate output" >&5
-printf %s "checking for a sed that does not truncate output... " >&6; }
-if test ${ac_cv_path_SED+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)           ac_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/
-     for ac_i in 1 2 3 4 5 6 7; do
-       ac_script="$ac_script$as_nl$ac_script"
-     done
-     echo "$ac_script" 2>/dev/null | sed 99q >conftest.sed
-     { ac_script=; unset ac_script;}
-     if test -z "$SED"; then
-  ac_path_SED_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in sed gsed
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_SED="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_SED" || continue
-# Check for GNU ac_path_SED and select it if it is found.
-  # Check for GNU $ac_path_SED
-case `"$ac_path_SED" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_SED="$ac_path_SED" ac_path_SED_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' '' >> "conftest.nl"
-    "$ac_path_SED" -f conftest.sed < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_SED_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_SED="$ac_path_SED"
-      ac_path_SED_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_SED_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_SED"; then
-    as_fn_error $? "no acceptable sed could be found in \$PATH" "$LINENO" 5
-  fi
-else
-  ac_cv_path_SED=$SED
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_SED" >&5
-printf '%s\n' "$ac_cv_path_SED" >&6; }
- SED="$ac_cv_path_SED"
-  rm -f conftest.sed
-
-test -z "$SED" && SED=sed
-Xsed="$SED -e 1s/^X//"
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5
-printf %s "checking for grep that handles long lines and -e... " >&6; }
-if test ${ac_cv_path_GREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -z "$GREP"; then
-  ac_path_GREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in grep ggrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_GREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_GREP" || continue
-# Check for GNU ac_path_GREP and select it if it is found.
-  # Check for GNU $ac_path_GREP
-case `"$ac_path_GREP" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'GREP' >> "conftest.nl"
-    "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_GREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_GREP="$ac_path_GREP"
-      ac_path_GREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_GREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_GREP"; then
-    as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_GREP=$GREP
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5
-printf '%s\n' "$ac_cv_path_GREP" >&6; }
- GREP="$ac_cv_path_GREP"
- 
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
-printf %s "checking for egrep... " >&6; }
-if test ${ac_cv_path_EGREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
-   then ac_cv_path_EGREP="$GREP -E"
-   else
-     if test -z "$EGREP"; then
-  ac_path_EGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in egrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_EGREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_EGREP" || continue
-# Check for GNU ac_path_EGREP and select it if it is found.
-  # Check for GNU $ac_path_EGREP
-case `"$ac_path_EGREP" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'EGREP' >> "conftest.nl"
-    "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_EGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_EGREP="$ac_path_EGREP"
-      ac_path_EGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_EGREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_EGREP"; then
-    as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_EGREP=$EGREP
-fi
-
-   fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
-printf '%s\n' "$ac_cv_path_EGREP" >&6; }
- EGREP="$ac_cv_path_EGREP"
- 
-         EGREP_TRADITIONAL=$EGREP
- ac_cv_path_EGREP_TRADITIONAL=$EGREP
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for fgrep" >&5
-printf %s "checking for fgrep... " >&6; }
-if test ${ac_cv_path_FGREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if echo 'ab*c' | $GREP -F 'ab*c' >/dev/null 2>&1
-   then ac_cv_path_FGREP="$GREP -F"
-   else
-     if test -z "$FGREP"; then
-  ac_path_FGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in fgrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_FGREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_FGREP" || continue
-# Check for GNU ac_path_FGREP and select it if it is found.
-  # Check for GNU $ac_path_FGREP
-case `"$ac_path_FGREP" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_FGREP="$ac_path_FGREP" ac_path_FGREP_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'FGREP' >> "conftest.nl"
-    "$ac_path_FGREP" FGREP < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_FGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_FGREP="$ac_path_FGREP"
-      ac_path_FGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_FGREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_FGREP"; then
-    as_fn_error $? "no acceptable fgrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_FGREP=$FGREP
-fi
-
-   fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_FGREP" >&5
-printf '%s\n' "$ac_cv_path_FGREP" >&6; }
- FGREP="$ac_cv_path_FGREP"
- 
-
-test -z "$GREP" && GREP=grep
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-
-
-@%:@ Check whether --with-gnu-ld was given.
-if test ${with_gnu_ld+y}
-then :
-  withval=$with_gnu_ld; test no = "$withval" || with_gnu_ld=yes
-else case e in @%:@(
-  e) with_gnu_ld=no ;;
-esac
-fi
-
-ac_prog=ld
-if test yes = "$GCC"; then
-  # Check if gcc -print-prog-name=ld gives a path.
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for ld used by $CC" >&5
-printf %s "checking for ld used by $CC... " >&6; }
-  case $host in
-  *-*-mingw* | *-*-windows*)
-    # gcc leaves a trailing carriage return, which upsets mingw
-    ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;;
-  *)
-    ac_prog=`($CC -print-prog-name=ld) 2>&5` ;;
-  esac
-  case $ac_prog in
-    # Accept absolute paths.
-    [\\/]* | ?:[\\/]*)
-      re_direlt='/[^/][^/]*/\.\./'
-      # Canonicalize the pathname of ld
-      ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'`
-      while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do
-	ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"`
-      done
-      test -z "$LD" && LD=$ac_prog
-      ;;
-  "")
-    # If it fails, then pretend we aren't using GCC.
-    ac_prog=ld
-    ;;
-  *)
-    # If it is relative, then search for the first ld in PATH.
-    with_gnu_ld=unknown
-    ;;
-  esac
-elif test yes = "$with_gnu_ld"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for GNU ld" >&5
-printf %s "checking for GNU ld... " >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for non-GNU ld" >&5
-printf %s "checking for non-GNU ld... " >&6; }
-fi
-if test ${lt_cv_path_LD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -z "$LD"; then
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  for ac_dir in $PATH; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then
-      lt_cv_path_LD=$ac_dir/$ac_prog
-      # Check to see if the program is GNU ld.  I'd rather use --version,
-      # but apparently some variants of GNU ld only accept -v.
-      # Break only if it was the GNU/non-GNU ld that we prefer.
-      case `"$lt_cv_path_LD" -v 2>&1 </dev/null` in
-      *GNU* | *'with BFD'*)
-	test no != "$with_gnu_ld" && break
-	;;
-      *)
-	test yes != "$with_gnu_ld" && break
-	;;
-      esac
-    fi
-  done
-  IFS=$lt_save_ifs
-else
-  lt_cv_path_LD=$LD # Let the user override the test with a path.
-fi ;;
-esac
-fi
-
-LD=$lt_cv_path_LD
-if test -n "$LD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LD" >&5
-printf '%s\n' "$LD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-test -z "$LD" && as_fn_error $? "no acceptable ld found in \$PATH" "$LINENO" 5
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if the linker ($LD) is GNU ld" >&5
-printf %s "checking if the linker ($LD) is GNU ld... " >&6; }
-if test ${lt_cv_prog_gnu_ld+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) # I'd rather use --version here, but apparently some GNU lds only accept -v.
-case `$LD -v 2>&1 </dev/null` in
-*GNU* | *'with BFD'*)
-  lt_cv_prog_gnu_ld=yes
-  ;;
-*)
-  lt_cv_prog_gnu_ld=no
-  ;;
-esac ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_gnu_ld" >&5
-printf '%s\n' "$lt_cv_prog_gnu_ld" >&6; }
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for BSD- or MS-compatible name lister (nm)" >&5
-printf %s "checking for BSD- or MS-compatible name lister (nm)... " >&6; }
-if test ${lt_cv_path_NM+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$NM"; then
-  # Let the user override the test.
-  lt_cv_path_NM=$NM
-else
-  lt_nm_to_check=${ac_tool_prefix}nm
-  if test -n "$ac_tool_prefix" && test "$build" = "$host"; then
-    lt_nm_to_check="$lt_nm_to_check nm"
-  fi
-  for lt_tmp_nm in $lt_nm_to_check; do
-    lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-    for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do
-      IFS=$lt_save_ifs
-      test -z "$ac_dir" && ac_dir=.
-      tmp_nm=$ac_dir/$lt_tmp_nm
-      if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then
-	# Check to see if the nm accepts a BSD-compat flag.
-	# Adding the 'sed 1q' prevents false positives on HP-UX, which says:
-	#   nm: unknown option "B" ignored
-	# Tru64's nm complains that /dev/null is an invalid object file
-	# MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty
-	case $build_os in
-	mingw* | windows*) lt_bad_file=conftest.nm/nofile ;;
-	*) lt_bad_file=/dev/null ;;
-	esac
-	case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in
-	*$lt_bad_file* | *'Invalid file or object type'*)
-	  lt_cv_path_NM="$tmp_nm -B"
-	  break 2
-	  ;;
-	*)
-	  case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in
-	  */dev/null*)
-	    lt_cv_path_NM="$tmp_nm -p"
-	    break 2
-	    ;;
-	  *)
-	    lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but
-	    continue # so that we can try to find one that supports BSD flags
-	    ;;
-	  esac
-	  ;;
-	esac
-      fi
-    done
-    IFS=$lt_save_ifs
-  done
-  : ${lt_cv_path_NM=no}
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_NM" >&5
-printf '%s\n' "$lt_cv_path_NM" >&6; }
-if test no != "$lt_cv_path_NM"; then
-  NM=$lt_cv_path_NM
-else
-  # Didn't find any BSD compatible name lister, look for dumpbin.
-  if test -n "$DUMPBIN"; then :
-    # Let the user override the test.
-  else
-    if test -n "$ac_tool_prefix"; then
-  for ac_prog in dumpbin "link -dump"
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DUMPBIN+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$DUMPBIN"; then
-  ac_cv_prog_DUMPBIN="$DUMPBIN" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DUMPBIN="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DUMPBIN=$ac_cv_prog_DUMPBIN
-if test -n "$DUMPBIN"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DUMPBIN" >&5
-printf '%s\n' "$DUMPBIN" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$DUMPBIN" && break
-  done
-fi
-if test -z "$DUMPBIN"; then
-  ac_ct_DUMPBIN=$DUMPBIN
-  for ac_prog in dumpbin "link -dump"
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DUMPBIN+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_DUMPBIN"; then
-  ac_cv_prog_ac_ct_DUMPBIN="$ac_ct_DUMPBIN" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DUMPBIN="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DUMPBIN=$ac_cv_prog_ac_ct_DUMPBIN
-if test -n "$ac_ct_DUMPBIN"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DUMPBIN" >&5
-printf '%s\n' "$ac_ct_DUMPBIN" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_DUMPBIN" && break
-done
-
-  if test "x$ac_ct_DUMPBIN" = x; then
-    DUMPBIN=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DUMPBIN=$ac_ct_DUMPBIN
-  fi
-fi
-
-    case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in
-    *COFF*)
-      DUMPBIN="$DUMPBIN -symbols -headers"
-      ;;
-    *)
-      DUMPBIN=:
-      ;;
-    esac
-  fi
-  
-  if test : != "$DUMPBIN"; then
-    NM=$DUMPBIN
-  fi
-fi
-test -z "$NM" && NM=nm
-
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the name lister ($NM) interface" >&5
-printf %s "checking the name lister ($NM) interface... " >&6; }
-if test ${lt_cv_nm_interface+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_nm_interface="BSD nm"
-  echo "int some_variable = 0;" > conftest.$ac_ext
-  (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&5)
-  (eval "$ac_compile" 2>conftest.err)
-  cat conftest.err >&5
-  (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&5)
-  (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
-  cat conftest.err >&5
-  (eval echo "\"\$as_me:$LINENO: output\"" >&5)
-  cat conftest.out >&5
-  if $GREP 'External.*some_variable' conftest.out > /dev/null; then
-    lt_cv_nm_interface="MS dumpbin"
-  fi
-  rm -f conftest* ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_nm_interface" >&5
-printf '%s\n' "$lt_cv_nm_interface" >&6; }
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ln -s works" >&5
-printf %s "checking whether ln -s works... " >&6; }
-LN_S=$as_ln_s
-if test "$LN_S" = "ln -s"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no, using $LN_S" >&5
-printf '%s\n' "no, using $LN_S" >&6; }
-fi
-
-# find the maximum length of command line arguments
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the maximum length of command line arguments" >&5
-printf %s "checking the maximum length of command line arguments... " >&6; }
-if test ${lt_cv_sys_max_cmd_len+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)   i=0
-  teststring=ABCD
-
-  case $build_os in
-  msdosdjgpp*)
-    # On DJGPP, this test can blow up pretty badly due to problems in libc
-    # (any single argument exceeding 2000 bytes causes a buffer overrun
-    # during glob expansion).  Even if it were fixed, the result of this
-    # check would be larger than it should be.
-    lt_cv_sys_max_cmd_len=12288;    # 12K is about right
-    ;;
-
-  gnu* | ironclad*)
-    # Under GNU Hurd and Ironclad, this test is not required because there
-    # is no limit to the length of command line arguments.
-    # Libtool will interpret -1 as no limit whatsoever
-    lt_cv_sys_max_cmd_len=-1;
-    ;;
-
-  cygwin* | mingw* | windows* | cegcc*)
-    # On Win9x/ME, this test blows up -- it succeeds, but takes
-    # about 5 minutes as the teststring grows exponentially.
-    # Worse, since 9x/ME are not pre-emptively multitasking,
-    # you end up with a "frozen" computer, even though with patience
-    # the test eventually succeeds (with a max line length of 256k).
-    # Instead, let's just punt: use the minimum linelength reported by
-    # all of the supported platforms: 8192 (on NT/2K/XP).
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  mint*)
-    # On MiNT this can take a long time and run out of memory.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  amigaos*)
-    # On AmigaOS with pdksh, this test takes hours, literally.
-    # So we just punt and use a minimum line length of 8192.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*)
-    # This has been around since 386BSD, at least.  Likely further.
-    if test -x /sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax`
-    elif test -x /usr/sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax`
-    else
-      lt_cv_sys_max_cmd_len=65536	# usable default for all BSDs
-    fi
-    # And add a safety zone
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    ;;
-
-  interix*)
-    # We know the value 262144 and hardcode it with a safety zone (like BSD)
-    lt_cv_sys_max_cmd_len=196608
-    ;;
-
-  os2*)
-    # The test takes a long time on OS/2.
-    lt_cv_sys_max_cmd_len=8192
-    ;;
-
-  osf*)
-    # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure
-    # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not
-    # nice to cause kernel panics so lets avoid the loop below.
-    # First set a reasonable default.
-    lt_cv_sys_max_cmd_len=16384
-    #
-    if test -x /sbin/sysconfig; then
-      case `/sbin/sysconfig -q proc exec_disable_arg_limit` in
-        *1*) lt_cv_sys_max_cmd_len=-1 ;;
-      esac
-    fi
-    ;;
-  sco3.2v5*)
-    lt_cv_sys_max_cmd_len=102400
-    ;;
-  sysv5* | sco5v6* | sysv4.2uw2*)
-    kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null`
-    if test -n "$kargmax"; then
-      lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[	 ]//'`
-    else
-      lt_cv_sys_max_cmd_len=32768
-    fi
-    ;;
-  *)
-    lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null`
-    if test -n "$lt_cv_sys_max_cmd_len" && \
-       test undefined != "$lt_cv_sys_max_cmd_len"; then
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    else
-      # Make teststring a little bigger before we do anything with it.
-      # a 1K string should be a reasonable start.
-      for i in 1 2 3 4 5 6 7 8; do
-        teststring=$teststring$teststring
-      done
-      SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}}
-      # If test is not a shell built-in, we'll probably end up computing a
-      # maximum length that is only half of the actual maximum length, but
-      # we can't tell.
-      while { test X`env echo "$teststring$teststring" 2>/dev/null` \
-	         = "X$teststring$teststring"; } >/dev/null 2>&1 &&
-	      test 17 != "$i" # 1/2 MB should be enough
-      do
-        i=`expr $i + 1`
-        teststring=$teststring$teststring
-      done
-      # Only check the string length outside the loop.
-      lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1`
-      teststring=
-      # Add a significant safety factor because C++ compilers can tack on
-      # massive amounts of additional arguments before passing them to the
-      # linker.  It appears as though 1/2 is a usable value.
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2`
-    fi
-    ;;
-  esac
- ;;
-esac
-fi
-
-if test -n "$lt_cv_sys_max_cmd_len"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sys_max_cmd_len" >&5
-printf '%s\n' "$lt_cv_sys_max_cmd_len" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none" >&5
-printf '%s\n' "none" >&6; }
-fi
-max_cmd_len=$lt_cv_sys_max_cmd_len
-
-    
-    
-    
-
-
-: ${CP="cp -f"}
-: ${MV="mv -f"}
-: ${RM="rm -f"}
-
-if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then
-  lt_unset=unset
-else
-  lt_unset=false
-fi
-
-    
-    
-    
-
-# test EBCDIC or ASCII
-case `echo X|tr X '\101'` in
- A) # ASCII based system
-    # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr
-  lt_SP2NL='tr \040 \012'
-  lt_NL2SP='tr \015\012 \040\040'
-  ;;
- *) # EBCDIC based system
-  lt_SP2NL='tr \100 \n'
-  lt_NL2SP='tr \r\n \100\100'
-  ;;
-esac
-
-    
-    
-    
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to $host format" >&5
-printf %s "checking how to convert $build file names to $host format... " >&6; }
-if test ${lt_cv_to_host_file_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $host in
-  *-*-mingw* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32
-        ;;
-    esac
-    ;;
-  *-*-cygwin* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_noop
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin
-        ;;
-    esac
-    ;;
-  * ) # unhandled hosts (and "normal" native builds)
-    lt_cv_to_host_file_cmd=func_convert_file_noop
-    ;;
-esac
- ;;
-esac
-fi
-
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_host_file_cmd" >&5
-printf '%s\n' "$lt_cv_to_host_file_cmd" >&6; }
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to toolchain format" >&5
-printf %s "checking how to convert $build file names to toolchain format... " >&6; }
-if test ${lt_cv_to_tool_file_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) #assume ordinary cross tools, or native build.
-lt_cv_to_tool_file_cmd=func_convert_file_noop
-case $host in
-  *-*-mingw* | *-*-windows* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32
-        ;;
-    esac
-    ;;
-esac
- ;;
-esac
-fi
-
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_tool_file_cmd" >&5
-printf '%s\n' "$lt_cv_to_tool_file_cmd" >&6; }
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $LD option to reload object files" >&5
-printf %s "checking for $LD option to reload object files... " >&6; }
-if test ${lt_cv_ld_reload_flag+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ld_reload_flag='-r' ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_reload_flag" >&5
-printf '%s\n' "$lt_cv_ld_reload_flag" >&6; }
-reload_flag=$lt_cv_ld_reload_flag
-case $reload_flag in
-"" | " "*) ;;
-*) reload_flag=" $reload_flag" ;;
-esac
-reload_cmds='$LD$reload_flag -o $output$reload_objs'
-case $host_os in
-  cygwin* | mingw* | windows* | pw32* | cegcc*)
-    if test yes != "$GCC"; then
-      reload_cmds=false
-    fi
-    ;;
-  darwin*)
-    if test yes = "$GCC"; then
-      reload_cmds='$LTCC $LTCFLAGS -nostdlib $wl-r -o $output$reload_objs'
-    else
-      reload_cmds='$LD$reload_flag -o $output$reload_objs'
-    fi
-    ;;
-esac
-
-    
-    
-    
-
-    
-    
-    
-
-# Extract the first word of "file", so it can be a program name with args.
-set dummy file; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_FILECMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$FILECMD"; then
-  ac_cv_prog_FILECMD="$FILECMD" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_FILECMD="file"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  test -z "$ac_cv_prog_FILECMD" && ac_cv_prog_FILECMD=":"
-fi ;;
-esac
-fi
-FILECMD=$ac_cv_prog_FILECMD
-if test -n "$FILECMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FILECMD" >&5
-printf '%s\n' "$FILECMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-
-    
-    
-    
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}objdump", so it can be a program name with args.
-set dummy ${ac_tool_prefix}objdump; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OBJDUMP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$OBJDUMP"; then
-  ac_cv_prog_OBJDUMP="$OBJDUMP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OBJDUMP="${ac_tool_prefix}objdump"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OBJDUMP=$ac_cv_prog_OBJDUMP
-if test -n "$OBJDUMP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OBJDUMP" >&5
-printf '%s\n' "$OBJDUMP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OBJDUMP"; then
-  ac_ct_OBJDUMP=$OBJDUMP
-  # Extract the first word of "objdump", so it can be a program name with args.
-set dummy objdump; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OBJDUMP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_OBJDUMP"; then
-  ac_cv_prog_ac_ct_OBJDUMP="$ac_ct_OBJDUMP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OBJDUMP="objdump"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OBJDUMP=$ac_cv_prog_ac_ct_OBJDUMP
-if test -n "$ac_ct_OBJDUMP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OBJDUMP" >&5
-printf '%s\n' "$ac_ct_OBJDUMP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OBJDUMP" = x; then
-    OBJDUMP="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OBJDUMP=$ac_ct_OBJDUMP
-  fi
-else
-  OBJDUMP="$ac_cv_prog_OBJDUMP"
-fi
-
-test -z "$OBJDUMP" && OBJDUMP=objdump
-
-    
-    
-    
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to recognize dependent libraries" >&5
-printf %s "checking how to recognize dependent libraries... " >&6; }
-if test ${lt_cv_deplibs_check_method+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_file_magic_cmd='$MAGIC_CMD'
-lt_cv_file_magic_test_file=
-lt_cv_deplibs_check_method='unknown'
-# Need to set the preceding variable on all platforms that support
-# interlibrary dependencies.
-# 'none' -- dependencies not supported.
-# 'unknown' -- same as none, but documents that we really don't know.
-# 'pass_all' -- all dependencies passed with no checks.
-# 'file_magic [[regex]]' -- check by looking for files in library path
-# that responds to the $file_magic_cmd with a given extended regex.
-# If you have 'file' or equivalent on your system and you're not sure
-# whether 'pass_all' will *always* work, you probably want this one.
-
-case $host_os in
-aix[4-9]*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-beos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-bsdi[45]*)
-  lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib)'
-  lt_cv_file_magic_cmd='$FILECMD -L'
-  lt_cv_file_magic_test_file=/shlib/libc.so
-  ;;
-
-cygwin*)
-  # func_win32_libid is a shell function defined in ltmain.sh
-  lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-  lt_cv_file_magic_cmd='func_win32_libid'
-  ;;
-
-mingw* | windows* | pw32*)
-  # Base MSYS/MinGW do not provide the 'file' command needed by
-  # func_win32_libid shell function, so use a weaker test based on 'objdump',
-  # unless we find 'file', for example because we are cross-compiling.
-  if ( file / ) >/dev/null 2>&1; then
-    lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-    lt_cv_file_magic_cmd='func_win32_libid'
-  else
-    # Keep this pattern in sync with the one in func_win32_libid.
-    lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64|pe-aarch64)'
-    lt_cv_file_magic_cmd='$OBJDUMP -f'
-  fi
-  ;;
-
-cegcc*)
-  # use the weaker test based on 'objdump'. See mingw*.
-  lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?'
-  lt_cv_file_magic_cmd='$OBJDUMP -f'
-  ;;
-
-darwin* | rhapsody*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    case $host_cpu in
-    i*86 )
-      # Not sure whether the presence of OpenBSD here was a mistake.
-      # Let's accept both of them until this is cleared up.
-      lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[3-9]86 (compact )?demand paged shared library'
-      lt_cv_file_magic_cmd=$FILECMD
-      lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*`
-      ;;
-    esac
-  else
-    lt_cv_deplibs_check_method=pass_all
-  fi
-  ;;
-
-haiku*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-hpux10.20* | hpux11*)
-  lt_cv_file_magic_cmd=$FILECMD
-  case $host_cpu in
-  ia64*)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF-[0-9][0-9]) shared object file - IA64'
-    lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so
-    ;;
-  hppa*64*)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]'
-    lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl
-    ;;
-  *)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|PA-RISC[0-9]\.[0-9]) shared library'
-    lt_cv_file_magic_test_file=/usr/lib/libc.sl
-    ;;
-  esac
-  ;;
-
-interix[3-9]*)
-  # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here
-  lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|\.a)$'
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $LD in
-  *-32|*"-32 ") libmagic=32-bit;;
-  *-n32|*"-n32 ") libmagic=N32;;
-  *-64|*"-64 ") libmagic=64-bit;;
-  *) libmagic=never-match;;
-  esac
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-*-mlibc)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-netbsd* | netbsdelf*-gnu)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|_pic\.a)$'
-  fi
-  ;;
-
-newos6*)
-  lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (executable|dynamic lib)'
-  lt_cv_file_magic_cmd=$FILECMD
-  lt_cv_file_magic_test_file=/usr/lib/libnls.so
-  ;;
-
-*nto* | *qnx*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-openbsd*)
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|\.so|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
-  fi
-  ;;
-
-osf3* | osf4* | osf5*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-rdos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-serenity*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-solaris*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv4 | sysv4.3*)
-  case $host_vendor in
-  motorola)
-    lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib) M[0-9][0-9]* Version [0-9]'
-    lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*`
-    ;;
-  ncr)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  sequent)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [LM]SB (shared object|dynamic lib )'
-    ;;
-  sni)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method="file_magic ELF [0-9][0-9]*-bit [LM]SB dynamic lib"
-    lt_cv_file_magic_test_file=/lib/libc.so
-    ;;
-  siemens)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  pc)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  esac
-  ;;
-
-tpf*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-os2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-esac
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_deplibs_check_method" >&5
-printf '%s\n' "$lt_cv_deplibs_check_method" >&6; }
-
-file_magic_glob=
-want_nocaseglob=no
-if test "$build" = "$host"; then
-  case $host_os in
-  mingw* | windows* | pw32*)
-    if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then
-      want_nocaseglob=yes
-    else
-      file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[\1]\/[\1]\/g;/g"`
-    fi
-    ;;
-  esac
-fi
-
-file_magic_cmd=$lt_cv_file_magic_cmd
-deplibs_check_method=$lt_cv_deplibs_check_method
-test -z "$deplibs_check_method" && deplibs_check_method=unknown
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}dlltool", so it can be a program name with args.
-set dummy ${ac_tool_prefix}dlltool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DLLTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$DLLTOOL"; then
-  ac_cv_prog_DLLTOOL="$DLLTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DLLTOOL="${ac_tool_prefix}dlltool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DLLTOOL=$ac_cv_prog_DLLTOOL
-if test -n "$DLLTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DLLTOOL" >&5
-printf '%s\n' "$DLLTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_DLLTOOL"; then
-  ac_ct_DLLTOOL=$DLLTOOL
-  # Extract the first word of "dlltool", so it can be a program name with args.
-set dummy dlltool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DLLTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_DLLTOOL"; then
-  ac_cv_prog_ac_ct_DLLTOOL="$ac_ct_DLLTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DLLTOOL="dlltool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DLLTOOL=$ac_cv_prog_ac_ct_DLLTOOL
-if test -n "$ac_ct_DLLTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DLLTOOL" >&5
-printf '%s\n' "$ac_ct_DLLTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_DLLTOOL" = x; then
-    DLLTOOL="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DLLTOOL=$ac_ct_DLLTOOL
-  fi
-else
-  DLLTOOL="$ac_cv_prog_DLLTOOL"
-fi
-
-test -z "$DLLTOOL" && DLLTOOL=dlltool
-
-    
-    
-    
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to associate runtime and link libraries" >&5
-printf %s "checking how to associate runtime and link libraries... " >&6; }
-if test ${lt_cv_sharedlib_from_linklib_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_sharedlib_from_linklib_cmd='unknown'
-
-case $host_os in
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  # two different shell functions defined in ltmain.sh;
-  # decide which one to use based on capabilities of $DLLTOOL
-  case `$DLLTOOL --help 2>&1` in
-  *--identify-strict*)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib
-    ;;
-  *)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback
-    ;;
-  esac
-  ;;
-*)
-  # fallback: assume linklib IS sharedlib
-  lt_cv_sharedlib_from_linklib_cmd=$ECHO
-  ;;
-esac
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sharedlib_from_linklib_cmd" >&5
-printf '%s\n' "$lt_cv_sharedlib_from_linklib_cmd" >&6; }
-sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd
-test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO
-
-
-    
-    
-    
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args.
-set dummy ${ac_tool_prefix}ranlib; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_RANLIB+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$RANLIB"; then
-  ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-RANLIB=$ac_cv_prog_RANLIB
-if test -n "$RANLIB"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5
-printf '%s\n' "$RANLIB" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_RANLIB"; then
-  ac_ct_RANLIB=$RANLIB
-  # Extract the first word of "ranlib", so it can be a program name with args.
-set dummy ranlib; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_RANLIB+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_RANLIB"; then
-  ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_RANLIB="ranlib"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB
-if test -n "$ac_ct_RANLIB"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5
-printf '%s\n' "$ac_ct_RANLIB" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_RANLIB" = x; then
-    RANLIB=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    RANLIB=$ac_ct_RANLIB
-  fi
-else
-  RANLIB="$ac_cv_prog_RANLIB"
-fi
-
-if test -n "$ac_tool_prefix"; then
-  for ac_prog in ar
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_AR+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$AR"; then
-  ac_cv_prog_AR="$AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AR="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-AR=$ac_cv_prog_AR
-if test -n "$AR"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $AR" >&5
-printf '%s\n' "$AR" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$AR" && break
-  done
-fi
-if test -z "$AR"; then
-  ac_ct_AR=$AR
-  for ac_prog in ar
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_AR+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_AR"; then
-  ac_cv_prog_ac_ct_AR="$ac_ct_AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_AR="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_AR=$ac_cv_prog_ac_ct_AR
-if test -n "$ac_ct_AR"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_AR" >&5
-printf '%s\n' "$ac_ct_AR" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_AR" && break
-done
-
-  if test "x$ac_ct_AR" = x; then
-    AR="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    AR=$ac_ct_AR
-  fi
-fi
-
-: ${AR=ar}
-
-    
-    
-    
-
-
-# Use ARFLAGS variable as AR's operation code to sync the variable naming with
-# Automake.  If both AR_FLAGS and ARFLAGS are specified, AR_FLAGS should have
-# higher priority because that's what people were doing historically (setting
-# ARFLAGS for automake and AR_FLAGS for libtool).  FIXME: Make the AR_FLAGS
-# variable obsoleted/removed.
-
-test ${AR_FLAGS+y} || AR_FLAGS=${ARFLAGS-cr}
-lt_ar_flags=$AR_FLAGS
-
-    
-    
-    
-
-
-# Make AR_FLAGS overridable by 'make ARFLAGS='.  Don't try to run-time override
-# by AR_FLAGS because that was never working and AR_FLAGS is about to die.
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for archiver @FILE support" >&5
-printf %s "checking for archiver @FILE support... " >&6; }
-if test ${lt_cv_ar_at_file+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ar_at_file=no
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  echo conftest.$ac_objext > conftest.lst
-      lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&5'
-      { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5
-  (eval $lt_ar_try) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-      if test 0 -eq "$ac_status"; then
-	# Ensure the archiver fails upon bogus file names.
-	rm -f conftest.$ac_objext libconftest.a
-	{ { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5
-  (eval $lt_ar_try) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-	if test 0 -ne "$ac_status"; then
-          lt_cv_ar_at_file=@
-        fi
-      fi
-      rm -f conftest.* libconftest.a
-     
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ar_at_file" >&5
-printf '%s\n' "$lt_cv_ar_at_file" >&6; }
-
-if test no = "$lt_cv_ar_at_file"; then
-  archiver_list_spec=
-else
-  archiver_list_spec=$lt_cv_ar_at_file
-fi
-
-    
-    
-    
-
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-printf '%s\n' "$STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-printf '%s\n' "$ac_ct_STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-test -z "$STRIP" && STRIP=:
-
-    
-    
-    
-
-
-
-test -z "$RANLIB" && RANLIB=:
-
-    
-    
-    
-
-
-# Determine commands to create old-style static archives.
-old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs'
-old_postinstall_cmds='chmod 644 $oldlib'
-old_postuninstall_cmds=
-
-if test -n "$RANLIB"; then
-  old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib"
-  old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib"
-fi
-
-case $host_os in
-  darwin*)
-    lock_old_archive_extraction=yes ;;
-  *)
-    lock_old_archive_extraction=no ;;
-esac
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-
-
-# Check for command to grab the raw symbol name followed by C symbol from nm.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking command to parse $NM output from $compiler object" >&5
-printf %s "checking command to parse $NM output from $compiler object... " >&6; }
-if test ${lt_cv_sys_global_symbol_pipe+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 
-# These are sane defaults that work on at least a few old systems.
-# [They come from Ultrix.  What could be older than Ultrix?!! ;)]
-
-# Character class describing NM global symbol codes.
-symcode='[BCDEGRST]'
-
-# Regexp to match symbols that can be accessed directly from C.
-sympat='\([_A-Za-z][_A-Za-z0-9]*\)'
-
-# Define system-specific variables.
-case $host_os in
-aix*)
-  symcode='[BCDT]'
-  ;;
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  symcode='[ABCDGISTW]'
-  ;;
-hpux*)
-  if test ia64 = "$host_cpu"; then
-    symcode='[ABCDEGRST]'
-  fi
-  ;;
-irix* | nonstopux*)
-  symcode='[BCDEGRST]'
-  ;;
-osf*)
-  symcode='[BCDEGQRST]'
-  ;;
-solaris*)
-  symcode='[BCDRT]'
-  ;;
-sco3.2v5*)
-  symcode='[DT]'
-  ;;
-sysv4.2uw2*)
-  symcode='[DT]'
-  ;;
-sysv5* | sco5v6* | unixware* | OpenUNIX*)
-  symcode='[ABDT]'
-  ;;
-sysv4)
-  symcode='[DFNSTU]'
-  ;;
-esac
-
-# If we're using GNU nm, then use its standard symbol codes.
-case `$NM -V 2>&1` in
-*GNU* | *'with BFD'*)
-  symcode='[ABCDGIRSTW]' ;;
-esac
-
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  # Gets list of data symbols to import.
-  lt_cv_sys_global_symbol_to_import="$SED -n -e 's/^I .* \(.*\)$/\1/p'"
-  # Adjust the below global symbol transforms to fixup imported variables.
-  lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'"
-  lt_c_name_hook=" -e 's/^I .* \(.*\)$/  {\"\1\", (void *) 0},/p'"
-  lt_c_name_lib_hook="\
-  -e 's/^I .* \(lib.*\)$/  {\"\1\", (void *) 0},/p'\
-  -e 's/^I .* \(.*\)$/  {\"lib\1\", (void *) 0},/p'"
-else
-  # Disable hooks by default.
-  lt_cv_sys_global_symbol_to_import=
-  lt_cdecl_hook=
-  lt_c_name_hook=
-  lt_c_name_lib_hook=
-fi
-
-# Transform an extracted symbol line into a proper C declaration.
-# Some systems (esp. on ia64) link data and code symbols differently,
-# so use this general approach.
-lt_cv_sys_global_symbol_to_cdecl="$SED -n"\
-$lt_cdecl_hook\
-" -e 's/^T .* \(.*\)$/extern int \1();/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'"
-
-# Transform an extracted symbol line into symbol name and symbol address
-lt_cv_sys_global_symbol_to_c_name_address="$SED -n"\
-$lt_c_name_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/p'"
-
-# Transform an extracted symbol line into symbol name with lib prefix and
-# symbol address.
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="$SED -n"\
-$lt_c_name_lib_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(lib.*\)$/  {\"\1\", (void *) \&\1},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"lib\1\", (void *) \&\1},/p'"
-
-# Handle CRLF in mingw tool chain
-opt_cr=
-case $build_os in
-mingw* | windows*)
-  opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp
-  ;;
-esac
-
-# Try without a prefix underscore, then with it.
-for ac_symprfx in "" "_"; do
-
-  # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol.
-  symxfrm="\\1 $ac_symprfx\\2 \\2"
-
-  # Write the raw and C identifiers.
-  if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-    # Fake it for dumpbin and say T for any non-static function,
-    # D for any global variable and I for any imported variable.
-    # Also find C++ and __fastcall symbols from MSVC++ or ICC,
-    # which start with @ or ?.
-    lt_cv_sys_global_symbol_pipe="$AWK '"\
-"     {last_section=section; section=\$ 3};"\
-"     /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\
-"     /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\
-"     /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\
-"     /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\
-"     /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\
-"     \$ 0!~/External *\|/{next};"\
-"     / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\
-"     {if(hide[section]) next};"\
-"     {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\
-"     {split(\$ 0,a,/\||\r/); split(a[2],s)};"\
-"     s[1]~/^[@?]/{print f,s[1],s[1]; next};"\
-"     s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\
-"     ' prfx=^$ac_symprfx"
-  else
-    lt_cv_sys_global_symbol_pipe="$SED -n -e 's/^.*[	 ]\($symcode$symcode*\)[	 ][	 ]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'"
-  fi
-  lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | $SED '/ __gnu_lto/d'"
-
-  # Check to see that the pipe works correctly.
-  pipe_works=no
-
-  rm -f conftest*
-  cat > conftest.$ac_ext <<_LT_EOF
-#ifdef __cplusplus
-extern "C" {
-#endif
-char nm_test_var;
-void nm_test_func(void);
-void nm_test_func(void){}
-#ifdef __cplusplus
-}
-#endif
-int main(void){nm_test_var='a';nm_test_func();return(0);}
-_LT_EOF
-
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    # Now try to grab the symbols.
-    nlist=conftest.nm
-    $ECHO "$as_me:$LINENO: $NM conftest.$ac_objext | $lt_cv_sys_global_symbol_pipe > $nlist" >&5
-    if eval "$NM" conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist 2>&5 && test -s "$nlist"; then
-      # Try sorting and uniquifying the output.
-      if sort "$nlist" | uniq > "$nlist"T; then
-	mv -f "$nlist"T "$nlist"
-      else
-	rm -f "$nlist"T
-      fi
-
-      # Make sure that we snagged all the symbols we need.
-      if $GREP ' nm_test_var$' "$nlist" >/dev/null; then
-	if $GREP ' nm_test_func$' "$nlist" >/dev/null; then
-	  cat <<_LT_EOF > conftest.$ac_ext
-/* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests.  */
-#if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE
-/* DATA imports from DLLs on WIN32 can't be const, because runtime
-   relocations are performed -- see ld's documentation on pseudo-relocs.  */
-# define LT@&t@_DLSYM_CONST
-#elif defined __osf__
-/* This system does not cope well with relocations in const data.  */
-# define LT@&t@_DLSYM_CONST
-#else
-# define LT@&t@_DLSYM_CONST const
-#endif
-
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-_LT_EOF
-	  # Now generate the symbol file.
-	  eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext'
-
-	  cat <<_LT_EOF >> conftest.$ac_ext
-
-/* The mapping between symbol names and symbols.  */
-LT@&t@_DLSYM_CONST struct {
-  const char *name;
-  void       *address;
-}
-lt__PROGRAM__LTX_preloaded_symbols[] =
-{
-  { "@PROGRAM@", (void *) 0 },
-_LT_EOF
-	  $SED "s/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext
-	  cat <<\_LT_EOF >> conftest.$ac_ext
-  {0, (void *) 0}
-};
-
-/* This works around a problem in FreeBSD linker */
-#ifdef FREEBSD_WORKAROUND
-static const void *lt_preloaded_setup() {
-  return lt__PROGRAM__LTX_preloaded_symbols;
-}
-#endif
-
-#ifdef __cplusplus
-}
-#endif
-_LT_EOF
-	  # Now try linking the two files.
-	  mv conftest.$ac_objext conftstm.$ac_objext
-	  lt_globsym_save_LIBS=$LIBS
-	  lt_globsym_save_CFLAGS=$CFLAGS
-	  LIBS=conftstm.$ac_objext
-	  CFLAGS="$CFLAGS$lt_prog_compiler_no_builtin_flag"
-	  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s conftest$ac_exeext; then
-	    pipe_works=yes
-	  fi
-	  LIBS=$lt_globsym_save_LIBS
-	  CFLAGS=$lt_globsym_save_CFLAGS
-	else
-	  echo "cannot find nm_test_func in $nlist" >&5
-	fi
-      else
-	echo "cannot find nm_test_var in $nlist" >&5
-      fi
-    else
-      echo "cannot run $lt_cv_sys_global_symbol_pipe" >&5
-    fi
-  else
-    echo "$progname: failed program was:" >&5
-    cat conftest.$ac_ext >&5
-  fi
-  rm -rf conftest* conftst*
-
-  # Do not use the global_symbol_pipe unless it works.
-  if test yes = "$pipe_works"; then
-    break
-  else
-    lt_cv_sys_global_symbol_pipe=
-  fi
-done
- ;;
-esac
-fi
-
-if test -z "$lt_cv_sys_global_symbol_pipe"; then
-  lt_cv_sys_global_symbol_to_cdecl=
-fi
-if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: failed" >&5
-printf '%s\n' "failed" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ok" >&5
-printf '%s\n' "ok" >&6; }
-fi
-
-# Response file support.
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  nm_file_list_spec='@'
-elif $NM --help 2>/dev/null | grep '[@]FILE' >/dev/null; then
-  nm_file_list_spec='@'
-fi
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for sysroot" >&5
-printf %s "checking for sysroot... " >&6; }
-
-@%:@ Check whether --with-sysroot was given.
-if test ${with_sysroot+y}
-then :
-  withval=$with_sysroot; 
-else case e in @%:@(
-  e) with_sysroot=no ;;
-esac
-fi
-
-
-lt_sysroot=
-case $with_sysroot in #(
- yes)
-   if test yes = "$GCC"; then
-     # Trim trailing / since we'll always append absolute paths and we want
-     # to avoid //, if only for less confusing output for the user.
-     lt_sysroot=`$CC --print-sysroot 2>/dev/null | $SED 's:/\+$::'`
-   fi
-   ;; #(
- /*)
-   lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"`
-   ;; #(
- no|'')
-   ;; #(
- *)
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $with_sysroot" >&5
-printf '%s\n' "$with_sysroot" >&6; }
-   as_fn_error $? "The sysroot must be an absolute path." "$LINENO" 5
-   ;;
-esac
-
- { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ${lt_sysroot:-no}" >&5
-printf '%s\n' "${lt_sysroot:-no}" >&6; }
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a working dd" >&5
-printf %s "checking for a working dd... " >&6; }
-if test ${ac_cv_path_lt_DD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-: ${lt_DD:=$DD}
-if test -z "$lt_DD"; then
-  ac_path_lt_DD_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in dd
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_lt_DD="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_lt_DD" || continue
-if "$ac_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=:
-fi
-      $ac_path_lt_DD_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_lt_DD"; then
-    :
-  fi
-else
-  ac_cv_path_lt_DD=$lt_DD
-fi
-
-rm -f conftest.i conftest2.i conftest.out ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_lt_DD" >&5
-printf '%s\n' "$ac_cv_path_lt_DD" >&6; }
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to truncate binary pipes" >&5
-printf %s "checking how to truncate binary pipes... " >&6; }
-if test ${lt_cv_truncate_bin+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-lt_cv_truncate_bin=
-if "$ac_cv_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1"
-fi
-rm -f conftest.i conftest2.i conftest.out
-test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q" ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_truncate_bin" >&5
-printf '%s\n' "$lt_cv_truncate_bin" >&6; }
-
-    
-    
-    
-
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in @S|@*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-@%:@ Check whether --enable-libtool-lock was given.
-if test ${enable_libtool_lock+y}
-then :
-  enableval=$enable_libtool_lock; 
-fi
-
-test no = "$enable_libtool_lock" || enable_libtool_lock=yes
-
-# Some flags need to be propagated to the compiler or linker for good
-# libtool support.
-case $host in
-ia64-*-hpux*)
-  # Find out what ABI is being produced by ac_compile, and set mode
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.$ac_objext` in
-      *ELF-32*)
-	HPUX_IA64_MODE=32
-	;;
-      *ELF-64*)
-	HPUX_IA64_MODE=64
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-*-*-irix6*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '#line '$LINENO' "configure"' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    if test yes = "$lt_cv_prog_gnu_ld"; then
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -melf32bsmip"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -melf32bmipn32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -melf64bmip"
-	;;
-      esac
-    else
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -32"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -n32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -64"
-	  ;;
-      esac
-    fi
-  fi
-  rm -rf conftest*
-  ;;
-
-mips64*-*linux*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '#line '$LINENO' "configure"' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    emul=elf
-    case `$FILECMD conftest.$ac_objext` in
-      *32-bit*)
-	emul="${emul}32"
-	;;
-      *64-bit*)
-	emul="${emul}64"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *MSB*)
-	emul="${emul}btsmip"
-	;;
-      *LSB*)
-	emul="${emul}ltsmip"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *N32*)
-	emul="${emul}n32"
-	;;
-    esac
-    LD="${LD-ld} -m $emul"
-  fi
-  rm -rf conftest*
-  ;;
-
-x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \
-s390*-*linux*|s390*-*tpf*|sparc*-*linux*|x86_64-gnu*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.  Note that the listed cases only cover the
-  # situations where additional linker options are needed (such as when
-  # doing 32-bit compilation for a host where ld defaults to 64-bit, or
-  # vice versa); the common cases where no linker options are needed do
-  # not appear in the list.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.o` in
-      *32-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_i386_fbsd"
-	    ;;
-	  x86_64-*linux*|x86_64-gnu*)
-	    case `$FILECMD conftest.o` in
-	      *x86-64*)
-		LD="${LD-ld} -m elf32_x86_64"
-		;;
-	      *)
-		LD="${LD-ld} -m elf_i386"
-		;;
-	    esac
-	    ;;
-	  powerpc64le-*linux*)
-	    LD="${LD-ld} -m elf32lppclinux"
-	    ;;
-	  powerpc64-*linux*)
-	    LD="${LD-ld} -m elf32ppclinux"
-	    ;;
-	  s390x-*linux*)
-	    LD="${LD-ld} -m elf_s390"
-	    ;;
-	  sparc64-*linux*)
-	    LD="${LD-ld} -m elf32_sparc"
-	    ;;
-	esac
-	;;
-      *64-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_x86_64_fbsd"
-	    ;;
-	  x86_64-*linux*|x86_64-gnu*)
-	    LD="${LD-ld} -m elf_x86_64"
-	    ;;
-	  powerpcle-*linux*)
-	    LD="${LD-ld} -m elf64lppc"
-	    ;;
-	  powerpc-*linux*)
-	    LD="${LD-ld} -m elf64ppc"
-	    ;;
-	  s390*-*linux*|s390*-*tpf*)
-	    LD="${LD-ld} -m elf64_s390"
-	    ;;
-	  sparc*-*linux*)
-	    LD="${LD-ld} -m elf64_sparc"
-	    ;;
-	esac
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-
-*-*-sco3.2v5*)
-  # On SCO OpenServer 5, we need -belf to get full-featured binaries.
-  SAVE_CFLAGS=$CFLAGS
-  CFLAGS="$CFLAGS -belf"
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the C compiler needs -belf" >&5
-printf %s "checking whether the C compiler needs -belf... " >&6; }
-if test ${lt_cv_cc_needs_belf+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-     cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_cc_needs_belf=yes
-else case e in @%:@(
-  e) lt_cv_cc_needs_belf=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-     ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_cc_needs_belf" >&5
-printf '%s\n' "$lt_cv_cc_needs_belf" >&6; }
-  if test yes != "$lt_cv_cc_needs_belf"; then
-    # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf
-    CFLAGS=$SAVE_CFLAGS
-  fi
-  ;;
-*-*solaris*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.o` in
-    *64-bit*)
-      case $lt_cv_prog_gnu_ld in
-      yes*)
-        case $host in
-        i?86-*-solaris*|x86_64-*-solaris*)
-          LD="${LD-ld} -m elf_x86_64"
-          ;;
-        sparc*-*-solaris*)
-          LD="${LD-ld} -m elf64_sparc"
-          ;;
-        esac
-        # GNU ld 2.21 introduced _sol2 emulations.  Use them if available.
-        if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then
-          LD=${LD-ld}_sol2
-        fi
-        ;;
-      *)
-	if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then
-	  LD="${LD-ld} -64"
-	fi
-	;;
-      esac
-      ;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-esac
-
-need_locks=$enable_libtool_lock
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}mt", so it can be a program name with args.
-set dummy ${ac_tool_prefix}mt; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_MANIFEST_TOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$MANIFEST_TOOL"; then
-  ac_cv_prog_MANIFEST_TOOL="$MANIFEST_TOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_MANIFEST_TOOL="${ac_tool_prefix}mt"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-MANIFEST_TOOL=$ac_cv_prog_MANIFEST_TOOL
-if test -n "$MANIFEST_TOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MANIFEST_TOOL" >&5
-printf '%s\n' "$MANIFEST_TOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_MANIFEST_TOOL"; then
-  ac_ct_MANIFEST_TOOL=$MANIFEST_TOOL
-  # Extract the first word of "mt", so it can be a program name with args.
-set dummy mt; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_MANIFEST_TOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_MANIFEST_TOOL"; then
-  ac_cv_prog_ac_ct_MANIFEST_TOOL="$ac_ct_MANIFEST_TOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_MANIFEST_TOOL="mt"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_MANIFEST_TOOL=$ac_cv_prog_ac_ct_MANIFEST_TOOL
-if test -n "$ac_ct_MANIFEST_TOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_MANIFEST_TOOL" >&5
-printf '%s\n' "$ac_ct_MANIFEST_TOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_MANIFEST_TOOL" = x; then
-    MANIFEST_TOOL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    MANIFEST_TOOL=$ac_ct_MANIFEST_TOOL
-  fi
-else
-  MANIFEST_TOOL="$ac_cv_prog_MANIFEST_TOOL"
-fi
-
-test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $MANIFEST_TOOL is a manifest tool" >&5
-printf %s "checking if $MANIFEST_TOOL is a manifest tool... " >&6; }
-if test ${lt_cv_path_manifest_tool+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_path_manifest_tool=no
-  echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&5
-  $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out
-  cat conftest.err >&5
-  if $GREP 'Manifest Tool' conftest.out > /dev/null; then
-    lt_cv_path_manifest_tool=yes
-  fi
-  rm -f conftest* ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_manifest_tool" >&5
-printf '%s\n' "$lt_cv_path_manifest_tool" >&6; }
-if test yes != "$lt_cv_path_manifest_tool"; then
-  MANIFEST_TOOL=:
-fi
-
-    
-    
-    
-
-
-  case $host_os in
-    rhapsody* | darwin*)
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}dsymutil", so it can be a program name with args.
-set dummy ${ac_tool_prefix}dsymutil; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DSYMUTIL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$DSYMUTIL"; then
-  ac_cv_prog_DSYMUTIL="$DSYMUTIL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DSYMUTIL="${ac_tool_prefix}dsymutil"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DSYMUTIL=$ac_cv_prog_DSYMUTIL
-if test -n "$DSYMUTIL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DSYMUTIL" >&5
-printf '%s\n' "$DSYMUTIL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_DSYMUTIL"; then
-  ac_ct_DSYMUTIL=$DSYMUTIL
-  # Extract the first word of "dsymutil", so it can be a program name with args.
-set dummy dsymutil; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DSYMUTIL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_DSYMUTIL"; then
-  ac_cv_prog_ac_ct_DSYMUTIL="$ac_ct_DSYMUTIL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DSYMUTIL="dsymutil"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DSYMUTIL=$ac_cv_prog_ac_ct_DSYMUTIL
-if test -n "$ac_ct_DSYMUTIL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DSYMUTIL" >&5
-printf '%s\n' "$ac_ct_DSYMUTIL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_DSYMUTIL" = x; then
-    DSYMUTIL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DSYMUTIL=$ac_ct_DSYMUTIL
-  fi
-else
-  DSYMUTIL="$ac_cv_prog_DSYMUTIL"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}nmedit", so it can be a program name with args.
-set dummy ${ac_tool_prefix}nmedit; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_NMEDIT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$NMEDIT"; then
-  ac_cv_prog_NMEDIT="$NMEDIT" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_NMEDIT="${ac_tool_prefix}nmedit"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-NMEDIT=$ac_cv_prog_NMEDIT
-if test -n "$NMEDIT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $NMEDIT" >&5
-printf '%s\n' "$NMEDIT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_NMEDIT"; then
-  ac_ct_NMEDIT=$NMEDIT
-  # Extract the first word of "nmedit", so it can be a program name with args.
-set dummy nmedit; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_NMEDIT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_NMEDIT"; then
-  ac_cv_prog_ac_ct_NMEDIT="$ac_ct_NMEDIT" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_NMEDIT="nmedit"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_NMEDIT=$ac_cv_prog_ac_ct_NMEDIT
-if test -n "$ac_ct_NMEDIT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_NMEDIT" >&5
-printf '%s\n' "$ac_ct_NMEDIT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_NMEDIT" = x; then
-    NMEDIT=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    NMEDIT=$ac_ct_NMEDIT
-  fi
-else
-  NMEDIT="$ac_cv_prog_NMEDIT"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}lipo", so it can be a program name with args.
-set dummy ${ac_tool_prefix}lipo; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_LIPO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$LIPO"; then
-  ac_cv_prog_LIPO="$LIPO" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_LIPO="${ac_tool_prefix}lipo"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-LIPO=$ac_cv_prog_LIPO
-if test -n "$LIPO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LIPO" >&5
-printf '%s\n' "$LIPO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_LIPO"; then
-  ac_ct_LIPO=$LIPO
-  # Extract the first word of "lipo", so it can be a program name with args.
-set dummy lipo; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_LIPO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_LIPO"; then
-  ac_cv_prog_ac_ct_LIPO="$ac_ct_LIPO" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_LIPO="lipo"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_LIPO=$ac_cv_prog_ac_ct_LIPO
-if test -n "$ac_ct_LIPO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_LIPO" >&5
-printf '%s\n' "$ac_ct_LIPO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_LIPO" = x; then
-    LIPO=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    LIPO=$ac_ct_LIPO
-  fi
-else
-  LIPO="$ac_cv_prog_LIPO"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}otool", so it can be a program name with args.
-set dummy ${ac_tool_prefix}otool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$OTOOL"; then
-  ac_cv_prog_OTOOL="$OTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OTOOL="${ac_tool_prefix}otool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OTOOL=$ac_cv_prog_OTOOL
-if test -n "$OTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OTOOL" >&5
-printf '%s\n' "$OTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OTOOL"; then
-  ac_ct_OTOOL=$OTOOL
-  # Extract the first word of "otool", so it can be a program name with args.
-set dummy otool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_OTOOL"; then
-  ac_cv_prog_ac_ct_OTOOL="$ac_ct_OTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OTOOL="otool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OTOOL=$ac_cv_prog_ac_ct_OTOOL
-if test -n "$ac_ct_OTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL" >&5
-printf '%s\n' "$ac_ct_OTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OTOOL" = x; then
-    OTOOL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OTOOL=$ac_ct_OTOOL
-  fi
-else
-  OTOOL="$ac_cv_prog_OTOOL"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}otool64", so it can be a program name with args.
-set dummy ${ac_tool_prefix}otool64; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OTOOL64+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$OTOOL64"; then
-  ac_cv_prog_OTOOL64="$OTOOL64" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OTOOL64="${ac_tool_prefix}otool64"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OTOOL64=$ac_cv_prog_OTOOL64
-if test -n "$OTOOL64"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OTOOL64" >&5
-printf '%s\n' "$OTOOL64" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OTOOL64"; then
-  ac_ct_OTOOL64=$OTOOL64
-  # Extract the first word of "otool64", so it can be a program name with args.
-set dummy otool64; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OTOOL64+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_OTOOL64"; then
-  ac_cv_prog_ac_ct_OTOOL64="$ac_ct_OTOOL64" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OTOOL64="otool64"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OTOOL64=$ac_cv_prog_ac_ct_OTOOL64
-if test -n "$ac_ct_OTOOL64"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL64" >&5
-printf '%s\n' "$ac_ct_OTOOL64" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OTOOL64" = x; then
-    OTOOL64=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OTOOL64=$ac_ct_OTOOL64
-  fi
-else
-  OTOOL64="$ac_cv_prog_OTOOL64"
-fi
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -single_module linker flag" >&5
-printf %s "checking for -single_module linker flag... " >&6; }
-if test ${lt_cv_apple_cc_single_mod+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_apple_cc_single_mod=no
-      if test -z "$LT_MULTI_MODULE"; then
-	# By default we will add the -single_module flag. You can override
-	# by either setting the environment variable LT_MULTI_MODULE
-	# non-empty at configure time, or by adding -multi_module to the
-	# link flags.
-	rm -rf libconftest.dylib*
-	echo "int foo(void){return 1;}" > conftest.c
-	echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
--dynamiclib -Wl,-single_module conftest.c" >&5
-	$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
-	  -dynamiclib -Wl,-single_module conftest.c 2>conftest.err
-        _lt_result=$?
-	# If there is a non-empty error log, and "single_module"
-	# appears in it, assume the flag caused a linker warning
-        if test -s conftest.err && $GREP single_module conftest.err; then
-	  cat conftest.err >&5
-	# Otherwise, if the output was created with a 0 exit code from
-	# the compiler, it worked.
-	elif test -f libconftest.dylib && test 0 = "$_lt_result"; then
-	  lt_cv_apple_cc_single_mod=yes
-	else
-	  cat conftest.err >&5
-	fi
-	rm -rf libconftest.dylib*
-	rm -f conftest.*
-      fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_apple_cc_single_mod" >&5
-printf '%s\n' "$lt_cv_apple_cc_single_mod" >&6; }
-
-    # Feature test to disable chained fixups since it is not
-    # compatible with '-undefined dynamic_lookup'
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -no_fixup_chains linker flag" >&5
-printf %s "checking for -no_fixup_chains linker flag... " >&6; }
-if test ${lt_cv_support_no_fixup_chains+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)  save_LDFLAGS=$LDFLAGS
-        LDFLAGS="$LDFLAGS -Wl,-no_fixup_chains"
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_support_no_fixup_chains=yes
-else case e in @%:@(
-  e) lt_cv_support_no_fixup_chains=no
-         ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-        LDFLAGS=$save_LDFLAGS
-      
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_support_no_fixup_chains" >&5
-printf '%s\n' "$lt_cv_support_no_fixup_chains" >&6; }
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -exported_symbols_list linker flag" >&5
-printf %s "checking for -exported_symbols_list linker flag... " >&6; }
-if test ${lt_cv_ld_exported_symbols_list+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ld_exported_symbols_list=no
-      save_LDFLAGS=$LDFLAGS
-      echo "_main" > conftest.sym
-      LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym"
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_ld_exported_symbols_list=yes
-else case e in @%:@(
-  e) lt_cv_ld_exported_symbols_list=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-	LDFLAGS=$save_LDFLAGS
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_exported_symbols_list" >&5
-printf '%s\n' "$lt_cv_ld_exported_symbols_list" >&6; }
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -force_load linker flag" >&5
-printf %s "checking for -force_load linker flag... " >&6; }
-if test ${lt_cv_ld_force_load+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ld_force_load=no
-      cat > conftest.c << _LT_EOF
-int forced_loaded() { return 2;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&5
-      $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&5
-      echo "$AR $AR_FLAGS libconftest.a conftest.o" >&5
-      $AR $AR_FLAGS libconftest.a conftest.o 2>&5
-      echo "$RANLIB libconftest.a" >&5
-      $RANLIB libconftest.a 2>&5
-      cat > conftest.c << _LT_EOF
-int main(void) { return 0;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&5
-      $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err
-      _lt_result=$?
-      if test -s conftest.err && $GREP force_load conftest.err; then
-	cat conftest.err >&5
-      elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then
-	lt_cv_ld_force_load=yes
-      else
-	cat conftest.err >&5
-      fi
-        rm -f conftest.err libconftest.a conftest conftest.c
-        rm -rf conftest.dSYM
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_force_load" >&5
-printf '%s\n' "$lt_cv_ld_force_load" >&6; }
-    case $host_os in
-    rhapsody* | darwin1.[012])
-      _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;;
-    darwin1.*)
-      _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-    darwin*)
-      case $MACOSX_DEPLOYMENT_TARGET,$host in
-        10.[012],*|,*powerpc*-darwin[5-8]*)
-          _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-        *)
-          _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup'
-          if test yes = "$lt_cv_support_no_fixup_chains"; then
-            as_fn_append _lt_dar_allow_undefined ' $wl-no_fixup_chains'
-          fi
-        ;;
-      esac
-    ;;
-  esac
-    if test yes = "$lt_cv_apple_cc_single_mod"; then
-      _lt_dar_single_mod='$single_module'
-    fi
-    _lt_dar_needs_single_mod=no
-    case $host_os in
-    rhapsody* | darwin1.*)
-      _lt_dar_needs_single_mod=yes ;;
-    darwin*)
-      # When targeting Mac OS X 10.4 (darwin 8) or later,
-      # -single_module is the default and -multi_module is unsupported.
-      # The toolchain on macOS 10.14 (darwin 18) and later cannot
-      # target any OS version that needs -single_module.
-      case ${MACOSX_DEPLOYMENT_TARGET-10.0},$host in
-      10.0,*-darwin[567].*|10.[0-3],*-darwin[5-9].*|10.[0-3],*-darwin1[0-7].*)
-        _lt_dar_needs_single_mod=yes ;;
-      esac
-    ;;
-    esac
-    if test yes = "$lt_cv_ld_exported_symbols_list"; then
-      _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym'
-    else
-      _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib'
-    fi
-    if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then
-      _lt_dsymutil='~$DSYMUTIL $lib || :'
-    else
-      _lt_dsymutil=
-    fi
-    ;;
-  esac
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x@S|@2 in
-    x)
-        ;;
-    *:)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\"
-        ;;
-    x:*)
-        eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\"
-        ;;
-    *)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-ac_fn_c_check_header_compile "$LINENO" "dlfcn.h" "ac_cv_header_dlfcn_h" "$ac_includes_default
-"
-if test "x$ac_cv_header_dlfcn_h" = xyes
-then :
-  printf '%s\n' "@%:@define HAVE_DLFCN_H 1" >>confdefs.h
-
-fi
-
-
-
-
-
-# Set options
-
-
-
-        enable_dlopen=no
-  
-
-  enable_win32_dll=no
-  
-
-            @%:@ Check whether --enable-shared was given.
-if test ${enable_shared+y}
-then :
-  enableval=$enable_shared; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_shared=yes ;;
-    no) enable_shared=no ;;
-    *)
-      enable_shared=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_shared=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in @%:@(
-  e) enable_shared=yes ;;
-esac
-fi
-
-
-    
-    
-    
-    
-
-
-
-  @%:@ Check whether --enable-static was given.
-if test ${enable_static+y}
-then :
-  enableval=$enable_static; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_static=yes ;;
-    no) enable_static=no ;;
-    *)
-     enable_static=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_static=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in @%:@(
-  e) enable_static=yes ;;
-esac
-fi
-
-
-    
-    
-    
-    
-
-
-
-  @%:@ Check whether --enable-pic was given.
-if test ${enable_pic+y}
-then :
-  enableval=$enable_pic; lt_p=${PACKAGE-default}
-     case $enableval in
-     yes|no) pic_mode=$enableval ;;
-     *)
-       pic_mode=default
-       # Look at the argument we got.  We use all the common list separators.
-       lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-       for lt_pkg in $enableval; do
-	 IFS=$lt_save_ifs
-	 if test "X$lt_pkg" = "X$lt_p"; then
-	   pic_mode=yes
-	 fi
-       done
-       IFS=$lt_save_ifs
-       ;;
-     esac
-else case e in @%:@(
-  e)           @%:@ Check whether --with-pic was given.
-if test ${with_pic+y}
-then :
-  withval=$with_pic; lt_p=${PACKAGE-default}
-	 case $withval in
-	 yes|no) pic_mode=$withval ;;
-	 *)
-	   pic_mode=default
-	   # Look at the argument we got.  We use all the common list separators.
-	   lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-	   for lt_pkg in $withval; do
-	     IFS=$lt_save_ifs
-	     if test "X$lt_pkg" = "X$lt_p"; then
-	       pic_mode=yes
-	     fi
-	   done
-	   IFS=$lt_save_ifs
-	   ;;
-	 esac
-else case e in @%:@(
-  e) pic_mode=default ;;
-esac
-fi
-
-     ;;
-esac
-fi
-
-
-
-    
-    
-    
-
-
-  @%:@ Check whether --enable-fast-install was given.
-if test ${enable_fast_install+y}
-then :
-  enableval=$enable_fast_install; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_fast_install=yes ;;
-    no) enable_fast_install=no ;;
-    *)
-      enable_fast_install=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_fast_install=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in @%:@(
-  e) enable_fast_install=yes ;;
-esac
-fi
-
-
-
-    
-    
-    
-
-
-  shared_archive_member_spec=
-case $host,$enable_shared in
-power*-*-aix[5-9]*,yes)
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking which variant of shared library versioning to provide" >&5
-printf %s "checking which variant of shared library versioning to provide... " >&6; }
-  @%:@ Check whether --enable-aix-soname was given.
-if test ${enable_aix_soname+y}
-then :
-  enableval=$enable_aix_soname; case $enableval in
-     aix|svr4|both)
-       ;;
-     *)
-       as_fn_error $? "Unknown argument to --enable-aix-soname" "$LINENO" 5
-       ;;
-     esac
-     lt_cv_with_aix_soname=$enable_aix_soname
-else case e in @%:@(
-  e) @%:@ Check whether --with-aix-soname was given.
-if test ${with_aix_soname+y}
-then :
-  withval=$with_aix_soname; case $withval in
-         aix|svr4|both)
-           ;;
-         *)
-           as_fn_error $? "Unknown argument to --with-aix-soname" "$LINENO" 5
-           ;;
-         esac
-         lt_cv_with_aix_soname=$with_aix_soname
-else case e in @%:@(
-  e) if test ${lt_cv_with_aix_soname+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_with_aix_soname=aix ;;
-esac
-fi
- ;;
-esac
-fi
-
-     enable_aix_soname=$lt_cv_with_aix_soname ;;
-esac
-fi
-
-  with_aix_soname=$enable_aix_soname
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $with_aix_soname" >&5
-printf '%s\n' "$with_aix_soname" >&6; }
-  if test aix != "$with_aix_soname"; then
-    # For the AIX way of multilib, we name the shared archive member
-    # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o',
-    # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File.
-    # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag,
-    # the AIX toolchain works better with OBJECT_MODE set (default 32).
-    if test 64 = "${OBJECT_MODE-32}"; then
-      shared_archive_member_spec=shr_64
-    else
-      shared_archive_member_spec=shr
-    fi
-  fi
-  ;;
-*)
-  with_aix_soname=aix
-  ;;
-esac
-
-
-    
-    
-    
-
-
-  
-
-
-# This can be used to rebuild libtool when needed
-LIBTOOL_DEPS=$ltmain
-
-# Always use our own libtool.
-LIBTOOL='$(SHELL) $(top_builddir)/libtool'
-
-
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-test -z "$LN_S" && LN_S="ln -s"
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-
-if test -n "${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for objdir" >&5
-printf %s "checking for objdir... " >&6; }
-if test ${lt_cv_objdir+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) rm -f .libs 2>/dev/null
-mkdir .libs 2>/dev/null
-if test -d .libs; then
-  lt_cv_objdir=.libs
-else
-  # MS-DOS does not allow filenames that begin with a dot.
-  lt_cv_objdir=_libs
-fi
-rmdir .libs 2>/dev/null ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_objdir" >&5
-printf '%s\n' "$lt_cv_objdir" >&6; }
-objdir=$lt_cv_objdir
-
-    
-    
-    
-
-printf '%s\n' "@%:@define LT_OBJDIR \"$lt_cv_objdir/\"" >>confdefs.h
-
-
-
-
-case $host_os in
-aix3*)
-  # AIX sometimes has problems with the GCC collect2 program.  For some
-  # reason, if we set the COLLECT_NAMES environment variable, the problems
-  # vanish in a puff of smoke.
-  if test set != "${COLLECT_NAMES+set}"; then
-    COLLECT_NAMES=
-    export COLLECT_NAMES
-  fi
-  ;;
-esac
-
-# Global variables:
-ofile=libtool
-can_build_shared=yes
-
-# All known linkers require a '.a' archive for static linking (except MSVC and
-# ICC, which need '.lib').
-libext=a
-
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-old_CC=$CC
-old_CFLAGS=$CFLAGS
-
-# Set sane defaults for various variables
-test -z "$CC" && CC=cc
-test -z "$LTCC" && LTCC=$CC
-test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS
-test -z "$LD" && LD=ld
-test -z "$ac_objext" && ac_objext=o
-
-func_cc_basename $compiler
-cc_basename=$func_cc_basename_result
-
-
-# Only perform the check for file, if the check method requires it
-test -z "$MAGIC_CMD" && MAGIC_CMD=file
-case $deplibs_check_method in
-file_magic*)
-  if test "$file_magic_cmd" = '$MAGIC_CMD'; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for ${ac_tool_prefix}file" >&5
-printf %s "checking for ${ac_tool_prefix}file... " >&6; }
-if test ${lt_cv_path_MAGIC_CMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $MAGIC_CMD in
-[\\/*] |  ?:[\\/]*)
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  ac_dummy="/usr/bin$PATH_SEPARATOR$PATH"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/${ac_tool_prefix}file"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"${ac_tool_prefix}file"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac ;;
-esac
-fi
-
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5
-printf '%s\n' "$MAGIC_CMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-    
-    
-    
-
-if test -z "$lt_cv_path_MAGIC_CMD"; then
-  if test -n "$ac_tool_prefix"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for file" >&5
-printf %s "checking for file... " >&6; }
-if test ${lt_cv_path_MAGIC_CMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $MAGIC_CMD in
-[\\/*] |  ?:[\\/]*)
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  ac_dummy="/usr/bin$PATH_SEPARATOR$PATH"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/file"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"file"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac ;;
-esac
-fi
-
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5
-printf '%s\n' "$MAGIC_CMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  else
-    MAGIC_CMD=:
-  fi
-fi
-
-  fi
-  ;;
-esac
-
-# Use C for the default configuration in the libtool script
-
-lt_save_CC=$CC
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-# Source file extension for C test sources.
-ac_ext=c
-
-# Object file extension for compiled C test sources.
-objext=o
-objext=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code="int some_variable = 0;"
-
-# Code to be used in simple link tests
-lt_simple_link_test_code='int main(void){return(0);}'
-
-
-
-
-
-
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-
-# Save the default compiler, since it gets overwritten when the other
-# tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP.
-compiler_DEFAULT=$CC
-
-# save warnings/boilerplate of simple test code
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_compile_test_code" >conftest.$ac_ext
-eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_compiler_boilerplate=`cat conftest.err`
-$RM conftest*
-
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_link_test_code" >conftest.$ac_ext
-eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_linker_boilerplate=`cat conftest.err`
-$RM -r conftest*
-
-
-## CAVEAT EMPTOR:
-## There is no encapsulation within the following macros, do not change
-## the running order or otherwise move them around unless you know exactly
-## what you are doing...
-if test -n "$compiler"; then
-  
-lt_prog_compiler_no_builtin_flag=
-
-if test yes = "$GCC"; then
-  case $cc_basename in
-  nvcc*)
-    lt_prog_compiler_no_builtin_flag=' -Xcompiler -fno-builtin' ;;
-  *)
-    lt_prog_compiler_no_builtin_flag=' -fno-builtin' ;;
-  esac
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -fno-rtti -fno-exceptions" >&5
-printf %s "checking if $compiler supports -fno-rtti -fno-exceptions... " >&6; }
-if test ${lt_cv_prog_compiler_rtti_exceptions+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_rtti_exceptions=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="-fno-rtti -fno-exceptions"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_rtti_exceptions=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_rtti_exceptions" >&5
-printf '%s\n' "$lt_cv_prog_compiler_rtti_exceptions" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_rtti_exceptions"; then
-    lt_prog_compiler_no_builtin_flag="$lt_prog_compiler_no_builtin_flag -fno-rtti -fno-exceptions"
-else
-    :
-fi
-
-fi
-
-    
-    
-    
-
-
-  lt_prog_compiler_wl=
-lt_prog_compiler_pic=
-lt_prog_compiler_static=
-
-
-  if test yes = "$GCC"; then
-    lt_prog_compiler_wl='-Wl,'
-    lt_prog_compiler_static='-static'
-
-    case $host_os in
-      aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            lt_prog_compiler_pic='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            lt_prog_compiler_pic='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      ;;
-
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      lt_prog_compiler_static=
-      ;;
-
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='-fPIC'
-	;;
-      esac
-      ;;
-
-    interix[3-9]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-
-    msdosdjgpp*)
-      # Just because we use GCC doesn't mean we suddenly get shared libraries
-      # on systems that don't support them.
-      lt_prog_compiler_can_build_shared=no
-      enable_shared=no
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic=-Kconform_pic
-      fi
-      ;;
-
-    *)
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-    esac
-
-    case $cc_basename in
-    nvcc*) # Cuda Compiler Driver 2.2
-      lt_prog_compiler_wl='-Xlinker '
-      if test -n "$lt_prog_compiler_pic"; then
-        lt_prog_compiler_pic="-Xcompiler $lt_prog_compiler_pic"
-      fi
-      ;;
-    esac
-  else
-    # PORTME Check for flag to pass linker flags through the system compiler.
-    case $host_os in
-    aix*)
-      lt_prog_compiler_wl='-Wl,'
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      else
-	lt_prog_compiler_static='-bnso -bI:/lib/syscalls.exp'
-      fi
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      case $cc_basename in
-      nagfor*)
-        # NAG Fortran compiler
-        lt_prog_compiler_wl='-Wl,-Wl,,'
-        lt_prog_compiler_pic='-PIC'
-        lt_prog_compiler_static='-Bstatic'
-        ;;
-      esac
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    hpux9* | hpux10* | hpux11*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
-      # not for PA HP-UX.
-      case $host_cpu in
-      hppa*64*|ia64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='+Z'
-	;;
-      esac
-      # Is there a better lt_prog_compiler_static that works with the bundled CC?
-      lt_prog_compiler_static='$wl-a ${wl}archive'
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC (with -KPIC) is the default.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-      case $cc_basename in
-      # old Intel for x86_64, which still supported -KPIC.
-      ecc*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-KPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      *flang* | ftn | f18* | f95*)
-        # Flang compiler.
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # icc used to be incompatible with GCC.
-      # ICC 10 doesn't accept -KPIC any more.
-      icc* | ifort*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # Lahey Fortran 8.1.
-      lf95*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='--shared'
-	lt_prog_compiler_static='--static'
-	;;
-      nagfor*)
-	# NAG Fortran compiler
-	lt_prog_compiler_wl='-Wl,-Wl,,'
-	lt_prog_compiler_pic='-PIC'
-	lt_prog_compiler_static='-Bstatic'
-	;;
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-	;;
-      pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
-        # Portland Group compilers (*not* the Pentium gcc compiler,
-	# which looks to be a dead project)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fpic'
-	lt_prog_compiler_static='-Bstatic'
-        ;;
-      ccc*)
-        lt_prog_compiler_wl='-Wl,'
-        # All Alpha code is PIC.
-        lt_prog_compiler_static='-non_shared'
-        ;;
-      xl* | bgxl* | bgf* | mpixl*)
-	# IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-qpic'
-	lt_prog_compiler_static='-qstaticlink'
-	;;
-      *)
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [1-7].* | *Sun*Fortran*\ 8.[0-3]*)
-	  # Sun Fortran 8.3 passes all unrecognized flags to the linker
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl=''
-	  ;;
-	*Sun\ F* | *Sun*Fortran*)
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Qoption ld '
-	  ;;
-	*Sun\ C*)
-	  # Sun C 5.9
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Wl,'
-	  ;;
-        *Intel*\ [CF]*Compiler*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fPIC'
-	  lt_prog_compiler_static='-static'
-	  ;;
-	*Portland\ Group*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fpic'
-	  lt_prog_compiler_static='-Bstatic'
-	  ;;
-	esac
-	;;
-      esac
-      ;;
-
-    newsos6)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *-mlibc)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-fPIC'
-      lt_prog_compiler_static='-static'
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    osf3* | osf4* | osf5*)
-      lt_prog_compiler_wl='-Wl,'
-      # All OSF/1 code is PIC.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    rdos*)
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      case $cc_basename in
-      f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
-	lt_prog_compiler_wl='-Qoption ld ';;
-      *)
-	lt_prog_compiler_wl='-Wl,';;
-      esac
-      ;;
-
-    sunos4*)
-      lt_prog_compiler_wl='-Qoption ld '
-      lt_prog_compiler_pic='-PIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4 | sysv4.2uw2* | sysv4.3*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic='-Kconform_pic'
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      ;;
-
-    sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    unicos*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_can_build_shared=no
-      ;;
-
-    uts4*)
-      lt_prog_compiler_pic='-pic'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *)
-      lt_prog_compiler_can_build_shared=no
-      ;;
-    esac
-  fi
-
-case $host_os in
-  # For platforms that do not support PIC, -DPIC is meaningless:
-  *djgpp*)
-    lt_prog_compiler_pic=
-    ;;
-  *)
-    lt_prog_compiler_pic="$lt_prog_compiler_pic@&t@ -DPIC"
-    ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $compiler option to produce PIC" >&5
-printf %s "checking for $compiler option to produce PIC... " >&6; }
-if test ${lt_cv_prog_compiler_pic+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic=$lt_prog_compiler_pic ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic" >&6; }
-lt_prog_compiler_pic=$lt_cv_prog_compiler_pic
-
-#
-# Check to make sure the PIC flag actually works.
-#
-if test -n "$lt_prog_compiler_pic"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler PIC flag $lt_prog_compiler_pic works" >&5
-printf %s "checking if $compiler PIC flag $lt_prog_compiler_pic works... " >&6; }
-if test ${lt_cv_prog_compiler_pic_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic_works=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$lt_prog_compiler_pic@&t@ -DPIC"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_pic_works=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_pic_works"; then
-    case $lt_prog_compiler_pic in
-     "" | " "*) ;;
-     *) lt_prog_compiler_pic=" $lt_prog_compiler_pic" ;;
-     esac
-else
-    lt_prog_compiler_pic=
-     lt_prog_compiler_can_build_shared=no
-fi
-
-fi
-
-    
-    
-    
-
-
-
-    
-    
-    
-
-#
-# Check to make sure the static flag actually works.
-#
-wl=$lt_prog_compiler_wl eval lt_tmp_static_flag=\"$lt_prog_compiler_static\"
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler static flag $lt_tmp_static_flag works" >&5
-printf %s "checking if $compiler static flag $lt_tmp_static_flag works... " >&6; }
-if test ${lt_cv_prog_compiler_static_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_static_works=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $lt_tmp_static_flag"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler_static_works=yes
-       fi
-     else
-       lt_cv_prog_compiler_static_works=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_static_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_static_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_static_works"; then
-    :
-else
-    lt_prog_compiler_static=
-fi
-
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5
-printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; }
-if test ${lt_cv_prog_compiler_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_c_o=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_c_o=yes
-     fi
-   fi
-   chmod u+w . 2>&5
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5
-printf '%s\n' "$lt_cv_prog_compiler_c_o" >&6; }
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5
-printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; }
-if test ${lt_cv_prog_compiler_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_c_o=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_c_o=yes
-     fi
-   fi
-   chmod u+w . 2>&5
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5
-printf '%s\n' "$lt_cv_prog_compiler_c_o" >&6; }
-
-
-
-
-hard_links=nottested
-if test no = "$lt_cv_prog_compiler_c_o" && test no != "$need_locks"; then
-  # do not overwrite the value of need_locks provided by the user
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if we can lock with hard links" >&5
-printf %s "checking if we can lock with hard links... " >&6; }
-  hard_links=yes
-  $RM conftest*
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  touch conftest.a
-  ln conftest.a conftest.b 2>&5 || hard_links=no
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $hard_links" >&5
-printf '%s\n' "$hard_links" >&6; }
-  if test no = "$hard_links"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&5
-printf '%s\n' "$as_me: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&2;}
-    need_locks=warn
-  fi
-else
-  need_locks=no
-fi
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the $compiler linker ($LD) supports shared libraries" >&5
-printf %s "checking whether the $compiler linker ($LD) supports shared libraries... " >&6; }
-
-  runpath_var=
-  allow_undefined_flag=
-  always_export_symbols=no
-  archive_cmds=
-  archive_expsym_cmds=
-  compiler_needs_object=no
-  enable_shared_with_static_runtimes=no
-  export_dynamic_flag_spec=
-  export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
-  hardcode_automatic=no
-  hardcode_direct=no
-  hardcode_direct_absolute=no
-  hardcode_libdir_flag_spec=
-  hardcode_libdir_separator=
-  hardcode_minus_L=no
-  hardcode_shlibpath_var=unsupported
-  inherit_rpath=no
-  link_all_deplibs=unknown
-  module_cmds=
-  module_expsym_cmds=
-  old_archive_from_new_cmds=
-  old_archive_from_expsyms_cmds=
-  thread_safe_flag_spec=
-  whole_archive_flag_spec=
-  # include_expsyms should be a list of space-separated symbols to be *always*
-  # included in the symbol list
-  include_expsyms=
-  # exclude_expsyms can be an extended regexp of symbols to exclude
-  # it will be wrapped by ' (' and ')$', so one must not match beginning or
-  # end of line.  Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc',
-  # as well as any symbol that contains 'd'.
-  exclude_expsyms='_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*'
-  # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out
-  # platforms (ab)use it in PIC code, but their linkers get confused if
-  # the symbol is explicitly referenced.  Since portable code cannot
-  # rely on this symbol name, it's probably fine to never include it in
-  # preloaded symbol tables.
-  # Exclude shared library initialization/finalization symbols.
-  extract_expsyms_cmds=
-
-  case $host_os in
-  cygwin* | mingw* | windows* | pw32* | cegcc*)
-    # FIXME: the MSVC++ and ICC port hasn't been tested in a loooong time
-    # When not using gcc, we currently assume that we are using
-    # Microsoft Visual C++ or Intel C++ Compiler.
-    if test yes != "$GCC"; then
-      with_gnu_ld=no
-    fi
-    ;;
-  interix*)
-    # we just hope/assume this is gcc and not c89 (= MSVC++ or ICC)
-    with_gnu_ld=yes
-    ;;
-  esac
-
-  ld_shlibs=yes
-
-  # On some targets, GNU ld is compatible enough with the native linker
-  # that we're better off using the native interface for both.
-  lt_use_gnu_ld_interface=no
-  if test yes = "$with_gnu_ld"; then
-    case $host_os in
-      aix*)
-	# The AIX port of GNU ld has always aspired to compatibility
-	# with the native linker.  However, as the warning in the GNU ld
-	# block says, versions before 2.19.5* couldn't really create working
-	# shared libraries, regardless of the interface used.
-	case `$LD -v 2>&1` in
-	  *\ \(GNU\ Binutils\)\ 2.19.5*) ;;
-	  *\ \(GNU\ Binutils\)\ 2.[2-9]*) ;;
-	  *\ \(GNU\ Binutils\)\ [3-9]*) ;;
-	  *)
-	    lt_use_gnu_ld_interface=yes
-	    ;;
-	esac
-	;;
-      *)
-	lt_use_gnu_ld_interface=yes
-	;;
-    esac
-  fi
-
-  if test yes = "$lt_use_gnu_ld_interface"; then
-    # If archive_cmds runs LD, not CC, wlarc should be empty
-    wlarc='$wl'
-
-    # Set some defaults for GNU ld with shared library support. These
-    # are reset later if shared libraries are not supported. Putting them
-    # here allows them to be overridden if necessary.
-    runpath_var=LD_RUN_PATH
-    hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-    export_dynamic_flag_spec='$wl--export-dynamic'
-    # ancient GNU ld didn't support --whole-archive et. al.
-    if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then
-      whole_archive_flag_spec=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
-    else
-      whole_archive_flag_spec=
-    fi
-    supports_anon_versioning=no
-    case `$LD -v | $SED -e 's/([^)]\+)\s\+//' 2>&1` in
-      *GNU\ gold*) supports_anon_versioning=yes ;;
-      *\ [01].* | *\ 2.[0-9].* | *\ 2.10.*) ;; # catch versions < 2.11
-      *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ...
-      *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ...
-      *\ 2.11.*) ;; # other 2.11 versions
-      *) supports_anon_versioning=yes ;;
-    esac
-
-    # See if GNU ld supports shared libraries.
-    case $host_os in
-    aix[3-9]*)
-      # On AIX/PPC, the GNU linker is very broken
-      if test ia64 != "$host_cpu"; then
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: the GNU linker, at least up to release 2.19, is reported
-*** to be unable to reliably create shared libraries on AIX.
-*** Therefore, libtool is disabling shared libraries support.  If you
-*** really care for shared libraries, you may want to install binutils
-*** 2.20 or above, or modify your PATH so that a non-GNU linker is found.
-*** You will then need to restart the configuration process.
-
-_LT_EOF
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            archive_expsym_cmds=''
-        ;;
-      m68k)
-            archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            hardcode_libdir_flag_spec='-L$libdir'
-            hardcode_minus_L=yes
-        ;;
-      esac
-      ;;
-
-    beos*)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	allow_undefined_flag=unsupported
-	# Joseph Beckenbach <jrb3@best.com> says some releases of gcc
-	# support --undefined.  This deserves some investigation.  FIXME
-	archive_cmds='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    cygwin* | mingw* | windows* | pw32* | cegcc*)
-      # _LT_TAGVAR(hardcode_libdir_flag_spec, ) is actually meaningless,
-      # as there is no search path for DLLs.
-      hardcode_libdir_flag_spec='-L$libdir'
-      export_dynamic_flag_spec='$wl--export-all-symbols'
-      allow_undefined_flag=unsupported
-      always_export_symbols=no
-      enable_shared_with_static_runtimes=yes
-      export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1 DATA/;s/^.*[ ]__nm__\([^ ]*\)[ ][^ ]*/\1 DATA/;/^I[ ]/d;/^[AITW][ ]/s/.* //'\'' | sort | uniq > $export_symbols'
-      exclude_expsyms='[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname'
-      file_list_spec='@'
-
-      if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then
-        archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-	# If the export-symbols file already is a .def file, use it as
-	# is; otherwise, prepend EXPORTS...
-	archive_expsym_cmds='if   test DEF = "`$SED -n     -e '\''s/^[	 ]*//'\''     -e '\''/^\(;.*\)*$/d'\''     -e '\''s/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p'\''     -e q     $export_symbols`" ; then
-          cp $export_symbols $output_objdir/$soname.def;
-        else
-          echo EXPORTS > $output_objdir/$soname.def;
-          cat $export_symbols >> $output_objdir/$soname.def;
-        fi~
-        $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    haiku*)
-      archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      link_all_deplibs=no
-      ;;
-
-    os2*)
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_minus_L=yes
-      allow_undefined_flag=unsupported
-      shrext_cmds=.dll
-      archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      old_archive_from_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      enable_shared_with_static_runtimes=yes
-      file_list_spec='@'
-      ;;
-
-    interix[3-9]*)
-      hardcode_direct=no
-      hardcode_shlibpath_var=no
-      hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-      export_dynamic_flag_spec='$wl-E'
-      # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc.
-      # Instead, shared libraries are loaded at an image base (0x10000000 by
-      # default) and relocated if they conflict, which is a slow very memory
-      # consuming and fragmenting process.  To avoid this, we pick a random,
-      # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link
-      # time.  Moving up from 0x10000000 also allows more sbrk(2) space.
-      archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      archive_expsym_cmds='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      ;;
-
-    gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu)
-      tmp_diet=no
-      if test linux-dietlibc = "$host_os"; then
-	case $cc_basename in
-	  diet\ *) tmp_diet=yes;;	# linux-dietlibc with static linking (!diet-dyn)
-	esac
-      fi
-      if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \
-	 && test no = "$tmp_diet"
-      then
-	tmp_addflag=' $pic_flag'
-	tmp_sharedflag='-shared'
-	case $cc_basename,$host_cpu in
-        pgcc*)				# Portland Group C compiler
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag'
-	  ;;
-	pgf77* | pgf90* | pgf95* | pgfortran*)
-					# Portland Group f77 and f90 compilers
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag -Mnomain' ;;
-	ecc*,ia64* | icc*,ia64*)	# Intel C compiler on ia64
-	  tmp_addflag=' -i_dynamic' ;;
-	efc*,ia64* | ifort*,ia64*)	# Intel Fortran compiler on ia64
-	  tmp_addflag=' -i_dynamic -nofor_main' ;;
-	ifc* | ifort*)			# Intel Fortran compiler
-	  tmp_addflag=' -nofor_main' ;;
-	lf95*)				# Lahey Fortran 8.1
-	  whole_archive_flag_spec=
-	  tmp_sharedflag='--shared' ;;
-        nagfor*)                        # NAGFOR 5.3
-          tmp_sharedflag='-Wl,-shared' ;;
-	xl[cC]* | bgxl[cC]* | mpixl[cC]*) # IBM XL C 8.0 on PPC (deal with xlf below)
-	  tmp_sharedflag='-qmkshrobj'
-	  tmp_addflag= ;;
-	nvcc*)	# Cuda Compiler Driver 2.2
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  compiler_needs_object=yes
-	  ;;
-	esac
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ C*)			# Sun C 5.9
-	  whole_archive_flag_spec='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  compiler_needs_object=yes
-	  tmp_sharedflag='-G' ;;
-	*Sun\ F*)			# Sun Fortran 8.3
-	  tmp_sharedflag='-G' ;;
-	esac
-	archive_cmds='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-
-        if test yes = "$supports_anon_versioning"; then
-          archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~
-            cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-            echo "local: *; };" >> $output_objdir/$libname.ver~
-            $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib'
-        fi
-
-	case $cc_basename in
-	tcc*)
-	  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	  export_dynamic_flag_spec='-rdynamic'
-	  ;;
-	xlf* | bgf* | bgxlf* | mpixlf*)
-	  # IBM XL Fortran 10.1 on PPC cannot create shared libs itself
-	  whole_archive_flag_spec='--whole-archive$convenience --no-whole-archive'
-	  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	  archive_cmds='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib'
-	  if test yes = "$supports_anon_versioning"; then
-	    archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~
-              cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-              echo "local: *; };" >> $output_objdir/$libname.ver~
-              $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib'
-	  fi
-	  ;;
-	esac
-      else
-        ld_shlibs=no
-      fi
-      ;;
-
-    *-mlibc)
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      ;;
-
-    netbsd* | netbsdelf*-gnu)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	archive_cmds='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib'
-	wlarc=
-      else
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      fi
-      ;;
-
-    solaris*)
-      if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: The releases 2.8.* of the GNU linker cannot reliably
-*** create shared libraries on Solaris systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.9.1 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-      elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*)
-      case `$LD -v 2>&1` in
-        *\ [01].* | *\ 2.[0-9].* | *\ 2.1[0-5].*)
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot
-*** reliably create shared libraries on SCO systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.16.91.0.3 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-	;;
-	*)
-	  # For security reasons, it is highly recommended that you always
-	  # use absolute paths for naming shared libraries, and exclude the
-	  # DT_RUNPATH tag from executables and libraries.  But doing so
-	  # requires that you compile everything twice, which is a pain.
-	  if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	    hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	    archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	    archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-	  else
-	    ld_shlibs=no
-	  fi
-	;;
-      esac
-      ;;
-
-    sunos4*)
-      archive_cmds='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      wlarc=
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    *)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-    esac
-
-    if test no = "$ld_shlibs"; then
-      runpath_var=
-      hardcode_libdir_flag_spec=
-      export_dynamic_flag_spec=
-      whole_archive_flag_spec=
-    fi
-  else
-    # PORTME fill in a description of your system's linker (not GNU ld)
-    case $host_os in
-    aix3*)
-      allow_undefined_flag=unsupported
-      always_export_symbols=yes
-      archive_expsym_cmds='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname'
-      # Note: this linker hardcodes the directories in LIBPATH if there
-      # are no directories specified by -L.
-      hardcode_minus_L=yes
-      if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then
-	# Neither direct hardcoding nor static linking is supported with a
-	# broken collect2.
-	hardcode_direct=unsupported
-      fi
-      ;;
-
-    aix[4-9]*)
-      if test ia64 = "$host_cpu"; then
-	# On IA64, the linker does run time linking by default, so we don't
-	# have to do anything special.
-	aix_use_runtimelinking=no
-	exp_sym_flag='-Bexport'
-	no_entry_flag=
-      else
-	# If we're using GNU nm, then we don't want the "-C" option.
-	# -C means demangle to GNU nm, but means don't demangle to AIX nm.
-	# Without the "-l" option, or with the "-B" option, AIX nm treats
-	# weak defined symbols like other global defined symbols, whereas
-	# GNU nm marks them as "W".
-	# While the 'weak' keyword is ignored in the Export File, we need
-	# it in the Import File for the 'aix-soname' feature, so we have
-	# to replace the "-B" option with "-P" for AIX nm.
-	if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then
-	  export_symbols_cmds='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && (substr(\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols'
-	else
-	  export_symbols_cmds='`func_echo_all $NM | $SED -e '\''s/B\([^B]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && (substr(\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols'
-	fi
-	aix_use_runtimelinking=no
-
-	# Test if we are trying to use run time linking or normal
-	# AIX style linking. If -brtl is somewhere in LDFLAGS, we
-	# have runtime linking enabled, and use it for executables.
-	# For shared libraries, we enable/disable runtime linking
-	# depending on the kind of the shared library created -
-	# when "with_aix_soname,aix_use_runtimelinking" is:
-	# "aix,no"   lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "aix,yes"  lib.so          shared, rtl:yes, for executables
-	#            lib.a           static archive
-	# "both,no"  lib.so.V(shr.o) shared, rtl:yes
-	#            lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a(lib.so.V) shared, rtl:no
-	# "svr4,*"   lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a           static archive
-	case $host_os in aix4.[23]|aix4.[23].*|aix[5-9]*)
-	  for ld_flag in $LDFLAGS; do
-	  if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then
-	    aix_use_runtimelinking=yes
-	    break
-	  fi
-	  done
-	  if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then
-	    # With aix-soname=svr4, we create the lib.so.V shared archives only,
-	    # so we don't have lib.a shared libs to link our executables.
-	    # We have to force runtime linking in this case.
-	    aix_use_runtimelinking=yes
-	    LDFLAGS="$LDFLAGS -Wl,-brtl"
-	  fi
-	  ;;
-	esac
-
-	exp_sym_flag='-bexport'
-	no_entry_flag='-bnoentry'
-      fi
-
-      # When large executables or shared objects are built, AIX ld can
-      # have problems creating the table of contents.  If linking a library
-      # or program results in "error TOC overflow" add -mminimal-toc to
-      # CXXFLAGS/CFLAGS for g++/gcc.  In the cases where that is not
-      # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS.
-
-      archive_cmds=''
-      hardcode_direct=yes
-      hardcode_direct_absolute=yes
-      hardcode_libdir_separator=':'
-      link_all_deplibs=yes
-      file_list_spec='$wl-f,'
-      case $with_aix_soname,$aix_use_runtimelinking in
-      aix,*) ;; # traditional, no import file
-      svr4,* | *,yes) # use import file
-	# The Import File defines what to hardcode.
-	hardcode_direct=no
-	hardcode_direct_absolute=no
-	;;
-      esac
-
-      if test yes = "$GCC"; then
-	case $host_os in aix4.[012]|aix4.[012].*)
-	# We only want to do this on AIX 4.2 and lower, the check
-	# below for broken collect2 doesn't work under 4.3+
-	  collect2name=`$CC -print-prog-name=collect2`
-	  if test -f "$collect2name" &&
-	   strings "$collect2name" | $GREP resolve_lib_name >/dev/null
-	  then
-	  # We have reworked collect2
-	  :
-	  else
-	  # We have old collect2
-	  hardcode_direct=unsupported
-	  # It fails to find uninstalled libraries when the uninstalled
-	  # path is not listed in the libpath.  Setting hardcode_minus_L
-	  # to unsupported forces relinking
-	  hardcode_minus_L=yes
-	  hardcode_libdir_flag_spec='-L$libdir'
-	  hardcode_libdir_separator=
-	  fi
-	  ;;
-	esac
-	shared_flag='-shared'
-	if test yes = "$aix_use_runtimelinking"; then
-	  shared_flag="$shared_flag "'$wl-G'
-	fi
-	# Need to ensure runtime linking is disabled for the traditional
-	# shared library, or the linker may eventually find shared libraries
-	# /with/ Import File - we do not want to mix them.
-	shared_flag_aix='-shared'
-	shared_flag_svr4='-shared $wl-G'
-      else
-	# not using gcc
-	if test ia64 = "$host_cpu"; then
-	# VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release
-	# chokes on -Wl,-G. The following line is correct:
-	  shared_flag='-G'
-	else
-	  if test yes = "$aix_use_runtimelinking"; then
-	    shared_flag='$wl-G'
-	  else
-	    shared_flag='$wl-bM:SRE'
-	  fi
-	  shared_flag_aix='$wl-bM:SRE'
-	  shared_flag_svr4='$wl-G'
-	fi
-      fi
-
-      export_dynamic_flag_spec='$wl-bexpall'
-      # It seems that -bexpall does not export symbols beginning with
-      # underscore (_), so it is better to generate a list of symbols to export.
-      always_export_symbols=yes
-      if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then
-	# Warning - without using the other runtime loading flags (-brtl),
-	# -berok will link without error, but may produce a broken library.
-	allow_undefined_flag='-berok'
-        # Determine the default libpath from the value encoded in an
-        # empty executable.
-        if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  if test ${lt_cv_aix_libpath_+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  
-  lt_aix_libpath_sed='
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }'
-  lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=/usr/lib:/lib
-  fi
-   ;;
-esac
-fi
-
-  aix_libpath=$lt_cv_aix_libpath_
-fi
-
-        hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath"
-        archive_expsym_cmds='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag
-      else
-	if test ia64 = "$host_cpu"; then
-	  hardcode_libdir_flag_spec='$wl-R $libdir:/usr/lib:/lib'
-	  allow_undefined_flag="-z nodefs"
-	  archive_expsym_cmds="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols"
-	else
-	 # Determine the default libpath from the value encoded in an
-	 # empty executable.
-	 if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  if test ${lt_cv_aix_libpath_+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  
-  lt_aix_libpath_sed='
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }'
-  lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=/usr/lib:/lib
-  fi
-   ;;
-esac
-fi
-
-  aix_libpath=$lt_cv_aix_libpath_
-fi
-
-	 hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath"
-	  # Warning - without using the other run time loading flags,
-	  # -berok will link without error, but may produce a broken library.
-	  no_undefined_flag=' $wl-bernotok'
-	  allow_undefined_flag=' $wl-berok'
-	  if test yes = "$with_gnu_ld"; then
-	    # We only use this code for GNU lds that support --whole-archive.
-	    whole_archive_flag_spec='$wl--whole-archive$convenience $wl--no-whole-archive'
-	  else
-	    # Exported symbols can be pulled into shared objects from archives
-	    whole_archive_flag_spec='$convenience'
-	  fi
-	  archive_cmds_need_lc=yes
-	  archive_expsym_cmds='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d'
-	  # -brtl affects multiple linker settings, -berok does not and is overridden later
-	  compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([, ]\\)%-berok\\1%g"`'
-	  if test svr4 != "$with_aix_soname"; then
-	    # This is similar to how AIX traditionally builds its shared libraries.
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname'
-	  fi
-	  if test aix != "$with_aix_soname"; then
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp'
-	  else
-	    # used by -dlpreopen to get the symbols
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$MV  $output_objdir/$realname.d/$soname $output_objdir'
-	  fi
-	  archive_expsym_cmds="$archive_expsym_cmds"'~$RM -r $output_objdir/$realname.d'
-	fi
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            archive_expsym_cmds=''
-        ;;
-      m68k)
-            archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            hardcode_libdir_flag_spec='-L$libdir'
-            hardcode_minus_L=yes
-        ;;
-      esac
-      ;;
-
-    bsdi[45]*)
-      export_dynamic_flag_spec=-rdynamic
-      ;;
-
-    cygwin* | mingw* | windows* | pw32* | cegcc*)
-      # When not using gcc, we currently assume that we are using
-      # Microsoft Visual C++ or Intel C++ Compiler.
-      # hardcode_libdir_flag_spec is actually meaningless, as there is
-      # no search path for DLLs.
-      case $cc_basename in
-      cl* | icl*)
-	# Native MSVC or ICC
-	hardcode_libdir_flag_spec=' '
-	allow_undefined_flag=unsupported
-	always_export_symbols=yes
-	file_list_spec='@'
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	archive_cmds='$CC -Fe$output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames='
-	archive_expsym_cmds='if   test DEF = "`$SED -n     -e '\''s/^[	 ]*//'\''     -e '\''/^\(;.*\)*$/d'\''     -e '\''s/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p'\''     -e q     $export_symbols`" ; then
-            cp "$export_symbols" "$output_objdir/$soname.def";
-            echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp";
-          else
-            $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp;
-          fi~
-          $CC -Fe$tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~
-          linknames='
-	# The linker will not automatically build a static lib if we build a DLL.
-	# _LT_TAGVAR(old_archive_from_new_cmds, )='true'
-	enable_shared_with_static_runtimes=yes
-	exclude_expsyms='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*'
-	export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1,DATA/'\'' | $SED -e '\''/^[AITW][ ]/s/.*[ ]//'\'' | sort | uniq > $export_symbols'
-	# Don't use ranlib
-	old_postinstall_cmds='chmod 644 $oldlib'
-	postlink_cmds='lt_outputfile="@OUTPUT@"~
-          lt_tool_outputfile="@TOOL_OUTPUT@"~
-          case $lt_outputfile in
-            *.exe|*.EXE) ;;
-            *)
-              lt_outputfile=$lt_outputfile.exe
-              lt_tool_outputfile=$lt_tool_outputfile.exe
-              ;;
-          esac~
-          if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then
-            $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1;
-            $RM "$lt_outputfile.manifest";
-          fi'
-	;;
-      *)
-	# Assume MSVC and ICC wrapper
-	hardcode_libdir_flag_spec=' '
-	allow_undefined_flag=unsupported
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	archive_cmds='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames='
-	# The linker will automatically build a .lib file if we build a DLL.
-	old_archive_from_new_cmds='true'
-	# FIXME: Should let the user specify the lib program.
-	old_archive_cmds='lib -OUT:$oldlib$oldobjs$old_deplibs'
-	enable_shared_with_static_runtimes=yes
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      
-  
-  archive_cmds_need_lc=no
-  hardcode_direct=no
-  hardcode_automatic=yes
-  hardcode_shlibpath_var=unsupported
-  if test yes = "$lt_cv_ld_force_load"; then
-    whole_archive_flag_spec='`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`'
-    
-  else
-    whole_archive_flag_spec=''
-  fi
-  link_all_deplibs=yes
-  allow_undefined_flag=$_lt_dar_allow_undefined
-  case $cc_basename in
-     ifort*|nagfor*) _lt_dar_can_shared=yes ;;
-     *) _lt_dar_can_shared=$GCC ;;
-  esac
-  if test yes = "$_lt_dar_can_shared"; then
-    output_verbose_link_cmd=func_echo_all
-    archive_cmds="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil"
-    module_cmds="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil"
-    archive_expsym_cmds="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil"
-    module_expsym_cmds="$SED -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil"
-    
-  else
-  ld_shlibs=no
-  fi
-
-      ;;
-
-    dgux*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_shlibpath_var=no
-      ;;
-
-    # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor
-    # support.  Future versions do this automatically, but an explicit c++rt0.o
-    # does not break anything, and helps significantly (at the cost of a little
-    # extra space).
-    freebsd2.2*)
-      archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o'
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    # Unfortunately, older versions of FreeBSD 2 do not have this feature.
-    freebsd2.*)
-      archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_direct=yes
-      hardcode_minus_L=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    # FreeBSD 3 and greater uses gcc -shared to do shared libraries.
-    freebsd* | dragonfly* | midnightbsd*)
-      archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    hpux9*)
-      if test yes = "$GCC"; then
-	archive_cmds='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      else
-	archive_cmds='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      fi
-      hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-      hardcode_libdir_separator=:
-      hardcode_direct=yes
-
-      # hardcode_minus_L: Not really in the search PATH,
-      # but as the default location of the library.
-      hardcode_minus_L=yes
-      export_dynamic_flag_spec='$wl-E'
-      ;;
-
-    hpux10*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      if test no = "$with_gnu_ld"; then
-	hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-	hardcode_libdir_separator=:
-	hardcode_direct=yes
-	hardcode_direct_absolute=yes
-	export_dynamic_flag_spec='$wl-E'
-	# hardcode_minus_L: Not really in the search PATH,
-	# but as the default location of the library.
-	hardcode_minus_L=yes
-      fi
-      ;;
-
-    hpux11*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	case $host_cpu in
-	hppa*64*)
-	  archive_cmds='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	  archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	esac
-      else
-	case $host_cpu in
-	hppa*64*)
-	  archive_cmds='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  archive_cmds='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	
-	  # Older versions of the 11.00 compiler do not understand -b yet
-	  # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does)
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC understands -b" >&5
-printf %s "checking if $CC understands -b... " >&6; }
-if test ${lt_cv_prog_compiler__b+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler__b=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS -b"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler__b=yes
-       fi
-     else
-       lt_cv_prog_compiler__b=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler__b" >&5
-printf '%s\n' "$lt_cv_prog_compiler__b" >&6; }
-
-if test yes = "$lt_cv_prog_compiler__b"; then
-    archive_cmds='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-else
-    archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-fi
-
-	  ;;
-	esac
-      fi
-      if test no = "$with_gnu_ld"; then
-	hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-	hardcode_libdir_separator=:
-
-	case $host_cpu in
-	hppa*64*|ia64*)
-	  hardcode_direct=no
-	  hardcode_shlibpath_var=no
-	  ;;
-	*)
-	  hardcode_direct=yes
-	  hardcode_direct_absolute=yes
-	  export_dynamic_flag_spec='$wl-E'
-
-	  # hardcode_minus_L: Not really in the search PATH,
-	  # but as the default location of the library.
-	  hardcode_minus_L=yes
-	  ;;
-	esac
-      fi
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	# Try to use the -exported_symbol ld option, if it does not
-	# work, assume that -exports_file does not work either and
-	# implicitly export all symbols.
-	# This should be the same for all languages, so no per-tag cache variable.
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the $host_os linker accepts -exported_symbol" >&5
-printf %s "checking whether the $host_os linker accepts -exported_symbol... " >&6; }
-if test ${lt_cv_irix_exported_symbol+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) save_LDFLAGS=$LDFLAGS
-	   LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null"
-	   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int foo (void) { return 0; }
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_irix_exported_symbol=yes
-else case e in @%:@(
-  e) lt_cv_irix_exported_symbol=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-           LDFLAGS=$save_LDFLAGS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_irix_exported_symbol" >&5
-printf '%s\n' "$lt_cv_irix_exported_symbol" >&6; }
-	if test yes = "$lt_cv_irix_exported_symbol"; then
-          archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib'
-	fi
-      else
-	archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      inherit_rpath=yes
-      link_all_deplibs=yes
-      ;;
-
-    linux*)
-      case $cc_basename in
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	ld_shlibs=yes
-	archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	;;
-      esac
-      ;;
-
-    *-mlibc)
-      ;;
-
-    netbsd* | netbsdelf*-gnu)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'  # a.out
-      else
-	archive_cmds='$LD -shared -o $lib $libobjs $deplibs $linker_flags'      # ELF
-      fi
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    newsos6)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_direct=yes
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      hardcode_shlibpath_var=no
-      ;;
-
-    *nto* | *qnx*)
-      ;;
-
-    openbsd*)
-      if test -f /usr/libexec/ld.so; then
-	hardcode_direct=yes
-	hardcode_shlibpath_var=no
-	hardcode_direct_absolute=yes
-	if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-	  archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  archive_expsym_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols'
-	  hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-	  export_dynamic_flag_spec='$wl-E'
-	else
-	  archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-	fi
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    os2*)
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_minus_L=yes
-      allow_undefined_flag=unsupported
-      shrext_cmds=.dll
-      archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      old_archive_from_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      enable_shared_with_static_runtimes=yes
-      file_list_spec='@'
-      ;;
-
-    osf3*)
-      if test yes = "$GCC"; then
-	allow_undefined_flag=' $wl-expect_unresolved $wl\*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-      else
-	allow_undefined_flag=' -expect_unresolved \*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      ;;
-
-    osf4* | osf5*)	# as osf3* with the addition of -msym flag
-      if test yes = "$GCC"; then
-	allow_undefined_flag=' $wl-expect_unresolved $wl\*'
-	archive_cmds='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      else
-	allow_undefined_flag=' -expect_unresolved \*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	archive_expsym_cmds='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~
-          $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp'
-
-	# Both c and cxx compiler support -rpath directly
-	hardcode_libdir_flag_spec='-rpath $libdir'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_separator=:
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      no_undefined_flag=' -z defs'
-      if test yes = "$GCC"; then
-	wlarc='$wl'
-	archive_cmds='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-          $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-      else
-	case `$CC -V 2>&1` in
-	*"Compilers 5.0"*)
-	  wlarc=''
-	  archive_cmds='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp'
-	  ;;
-	*)
-	  wlarc='$wl'
-	  archive_cmds='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags'
-	  archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-	  ;;
-	esac
-      fi
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_shlibpath_var=no
-      case $host_os in
-      solaris2.[0-5] | solaris2.[0-5].*) ;;
-      *)
-	# The compiler driver will combine and reorder linker options,
-	# but understands '-z linker_flag'.  GCC discards it without '$wl',
-	# but is careful enough not to reorder.
-	# Supported since Solaris 2.6 (maybe 2.5.1?)
-	if test yes = "$GCC"; then
-	  whole_archive_flag_spec='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract'
-	else
-	  whole_archive_flag_spec='-z allextract$convenience -z defaultextract'
-	fi
-	;;
-      esac
-      link_all_deplibs=yes
-      ;;
-
-    sunos4*)
-      if test sequent = "$host_vendor"; then
-	# Use $CC to link under sequent, because it throws in some extra .o
-	# files that make .init and .fini sections work.
-	archive_cmds='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_direct=yes
-      hardcode_minus_L=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    sysv4)
-      case $host_vendor in
-	sni)
-	  archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  hardcode_direct=yes # is this really true???
-	;;
-	siemens)
-	  ## LD is ld it makes a PLAMLIB
-	  ## CC just makes a GrossModule.
-	  archive_cmds='$LD -G -o $lib $libobjs $deplibs $linker_flags'
-	  reload_cmds='$CC -r -o $output$reload_objs'
-	  hardcode_direct=no
-        ;;
-	motorola)
-	  archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  hardcode_direct=no #Motorola manual says yes, but my tests say they lie
-	;;
-      esac
-      runpath_var='LD_RUN_PATH'
-      hardcode_shlibpath_var=no
-      ;;
-
-    sysv4.3*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_shlibpath_var=no
-      export_dynamic_flag_spec='-Bexport'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	hardcode_shlibpath_var=no
-	runpath_var=LD_RUN_PATH
-	hardcode_runpath_var=yes
-	ld_shlibs=yes
-      fi
-      ;;
-
-    sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[01].[10]* | unixware7* | sco3.2v5.0.[024]*)
-      no_undefined_flag='$wl-z,text'
-      archive_cmds_need_lc=no
-      hardcode_shlibpath_var=no
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6*)
-      # Note: We CANNOT use -z defs as we might desire, because we do not
-      # link with -lc, and that would cause any symbols used from libc to
-      # always be unresolved, which means just about no library would
-      # ever link correctly.  If we're not using GNU ld we use -z text
-      # though, which does catch some bad symbols but isn't as heavy-handed
-      # as -z defs.
-      no_undefined_flag='$wl-z,text'
-      allow_undefined_flag='$wl-z,nodefs'
-      archive_cmds_need_lc=no
-      hardcode_shlibpath_var=no
-      hardcode_libdir_flag_spec='$wl-R,$libdir'
-      hardcode_libdir_separator=':'
-      link_all_deplibs=yes
-      export_dynamic_flag_spec='$wl-Bexport'
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    uts4*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_shlibpath_var=no
-      ;;
-
-    *)
-      ld_shlibs=no
-      ;;
-    esac
-
-    if test sni = "$host_vendor"; then
-      case $host in
-      sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*)
-	export_dynamic_flag_spec='$wl-Blargedynsym'
-	;;
-      esac
-    fi
-  fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ld_shlibs" >&5
-printf '%s\n' "$ld_shlibs" >&6; }
-test no = "$ld_shlibs" && can_build_shared=no
-
-with_gnu_ld=$with_gnu_ld
-
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-
-#
-# Do we need to explicitly link libc?
-#
-case "x$archive_cmds_need_lc" in
-x|xyes)
-  # Assume -lc should be added
-  archive_cmds_need_lc=yes
-
-  if test yes,yes = "$GCC,$enable_shared"; then
-    case $archive_cmds in
-    *'~'*)
-      # FIXME: we may have to deal with multi-command sequences.
-      ;;
-    '$CC '*)
-      # Test whether the compiler implicitly links with -lc since on some
-      # systems, -lgcc has to come before -lc. If gcc already passes -lc
-      # to ld, don't add -lc before -lgcc.
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether -lc should be explicitly linked in" >&5
-printf %s "checking whether -lc should be explicitly linked in... " >&6; }
-if test ${lt_cv_archive_cmds_need_lc+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) $RM conftest*
-	echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-	if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } 2>conftest.err; then
-	  soname=conftest
-	  lib=conftest
-	  libobjs=conftest.$ac_objext
-	  deplibs=
-	  wl=$lt_prog_compiler_wl
-	  pic_flag=$lt_prog_compiler_pic
-	  compiler_flags=-v
-	  linker_flags=-v
-	  verstring=
-	  output_objdir=.
-	  libname=conftest
-	  lt_save_allow_undefined_flag=$allow_undefined_flag
-	  allow_undefined_flag=
-	  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1\""; } >&5
-  (eval $archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-	  then
-	    lt_cv_archive_cmds_need_lc=no
-	  else
-	    lt_cv_archive_cmds_need_lc=yes
-	  fi
-	  allow_undefined_flag=$lt_save_allow_undefined_flag
-	else
-	  cat conftest.err 1>&5
-	fi
-	$RM conftest*
-	 ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_archive_cmds_need_lc" >&5
-printf '%s\n' "$lt_cv_archive_cmds_need_lc" >&6; }
-      archive_cmds_need_lc=$lt_cv_archive_cmds_need_lc
-      ;;
-    esac
-  fi
-  ;;
-esac
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking dynamic linker characteristics" >&5
-printf %s "checking dynamic linker characteristics... " >&6; }
-
-if test yes = "$GCC"; then
-  case $host_os in
-    darwin*) lt_awk_arg='/^libraries:/,/LR/' ;;
-    *) lt_awk_arg='/^libraries:/' ;;
-  esac
-  case $host_os in
-    mingw* | windows* | cegcc*) lt_sed_strip_eq='s|=\([A-Za-z]:\)|\1|g' ;;
-    *) lt_sed_strip_eq='s|=/|/|g' ;;
-  esac
-  lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq`
-  case $lt_search_path_spec in
-  *\;*)
-    # if the path contains ";" then we assume it to be the separator
-    # otherwise default to the standard path separator (i.e. ":") - it is
-    # assumed that no part of a normal pathname contains ";" but that should
-    # okay in the real world where ";" in dirpaths is itself problematic.
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'`
-    ;;
-  *)
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"`
-    ;;
-  esac
-  # Ok, now we have the path, separated by spaces, we can step through it
-  # and add multilib dir if necessary...
-  lt_tmp_lt_search_path_spec=
-  lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null`
-  # ...but if some path component already ends with the multilib dir we assume
-  # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer).
-  case "$lt_multi_os_dir; $lt_search_path_spec " in
-  "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*)
-    lt_multi_os_dir=
-    ;;
-  esac
-  for lt_sys_path in $lt_search_path_spec; do
-    if test -d "$lt_sys_path$lt_multi_os_dir"; then
-      lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir"
-    elif test -n "$lt_multi_os_dir"; then
-      test -d "$lt_sys_path" && \
-	lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path"
-    fi
-  done
-  lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk '
-BEGIN {RS = " "; FS = "/|\n";} {
-  lt_foo = "";
-  lt_count = 0;
-  for (lt_i = NF; lt_i > 0; lt_i--) {
-    if ($lt_i != "" && $lt_i != ".") {
-      if ($lt_i == "..") {
-        lt_count++;
-      } else {
-        if (lt_count == 0) {
-          lt_foo = "/" $lt_i lt_foo;
-        } else {
-          lt_count--;
-        }
-      }
-    }
-  }
-  if (lt_foo != "") { lt_freq[lt_foo]++; }
-  if (lt_freq[lt_foo] == 1) { print lt_foo; }
-}'`
-  # AWK program above erroneously prepends '/' to C:/dos/paths
-  # for these hosts.
-  case $host_os in
-    mingw* | windows* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\
-      $SED 's|/\([A-Za-z]:\)|\1|g'` ;;
-  esac
-  sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP`
-else
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-fi
-library_names_spec=
-libname_spec='lib$name'
-soname_spec=
-shrext_cmds=.so
-postinstall_cmds=
-postuninstall_cmds=
-finish_cmds=
-finish_eval=
-shlibpath_var=
-shlibpath_overrides_runpath=unknown
-version_type=none
-dynamic_linker="$host_os ld.so"
-sys_lib_dlsearch_path_spec="/lib /usr/lib"
-need_lib_prefix=unknown
-hardcode_into_libs=no
-
-# when you set need_version to no, make sure it does not cause -set_version
-# flags to be left without arguments
-need_version=unknown
-
-
-
-case $host_os in
-aix3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname.a'
-  shlibpath_var=LIBPATH
-
-  # AIX 3 has no versioning support, so we append a major version to the name.
-  soname_spec='$libname$release$shared_ext$major'
-  ;;
-
-aix[4-9]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  hardcode_into_libs=yes
-  if test ia64 = "$host_cpu"; then
-    # AIX 5 supports IA64
-    library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext'
-    shlibpath_var=LD_LIBRARY_PATH
-  else
-    # With GCC up to 2.95.x, collect2 would create an import file
-    # for dependence libraries.  The import file would start with
-    # the line '#! .'.  This would cause the generated library to
-    # depend on '.', always an invalid library.  This was fixed in
-    # development snapshots of GCC prior to 3.0.
-    case $host_os in
-      aix4 | aix4.[01] | aix4.[01].*)
-      if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)'
-	   echo ' yes '
-	   echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then
-	:
-      else
-	can_build_shared=no
-      fi
-      ;;
-    esac
-    # Using Import Files as archive members, it is possible to support
-    # filename-based versioning of shared library archives on AIX. While
-    # this would work for both with and without runtime linking, it will
-    # prevent static linking of such archives. So we do filename-based
-    # shared library versioning with .so extension only, which is used
-    # when both runtime linking and shared linking is enabled.
-    # Unfortunately, runtime linking may impact performance, so we do
-    # not want this to be the default eventually. Also, we use the
-    # versioned .so libs for executables only if there is the -brtl
-    # linker flag in LDFLAGS as well, or --enable-aix-soname=svr4 only.
-    # To allow for filename-based versioning support, we need to create
-    # libNAME.so.V as an archive file, containing:
-    # *) an Import File, referring to the versioned filename of the
-    #    archive as well as the shared archive member, telling the
-    #    bitwidth (32 or 64) of that shared object, and providing the
-    #    list of exported symbols of that shared object, eventually
-    #    decorated with the 'weak' keyword
-    # *) the shared object with the F_LOADONLY flag set, to really avoid
-    #    it being seen by the linker.
-    # At run time we better use the real file rather than another symlink,
-    # but for link time we create the symlink libNAME.so -> libNAME.so.V
-
-    case $with_aix_soname,$aix_use_runtimelinking in
-    # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct
-    # soname into executable. Probably we can add versioning support to
-    # collect2, so additional links can be useful in future.
-    aix,yes) # traditional libtool
-      dynamic_linker='AIX unversionable lib.so'
-      # If using run time linking (on AIX 4.2 or later) use lib<name>.so
-      # instead of lib<name>.a to let people know that these are not
-      # typical AIX shared libraries.
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      ;;
-    aix,no) # traditional AIX only
-      dynamic_linker='AIX lib.a(lib.so.V)'
-      # We preserve .a as extension for shared libraries through AIX4.2
-      # and later when we are not doing run time linking.
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      ;;
-    svr4,*) # full svr4 only
-      dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o)"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,yes) # both, prefer svr4
-      dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o), lib.a(lib.so.V)"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # unpreferred sharedlib libNAME.a needs extra handling
-      postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"'
-      postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,no) # both, prefer aix
-      dynamic_linker="AIX lib.a(lib.so.V), lib.so.V($shared_archive_member_spec.o)"
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling
-      postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)'
-      postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"'
-      ;;
-    esac
-    shlibpath_var=LIBPATH
-  fi
-  ;;
-
-amigaos*)
-  case $host_cpu in
-  powerpc)
-    # Since July 2007 AmigaOS4 officially supports .so libraries.
-    # When compiling the executable, add -use-dynld -Lsobjs: to the compileline.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    ;;
-  m68k)
-    library_names_spec='$libname.ixlibrary $libname.a'
-    # Create ${libname}_ixlibrary.a entries in /sys/libs.
-    finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([^/]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done'
-    ;;
-  esac
-  ;;
-
-beos*)
-  library_names_spec='$libname$shared_ext'
-  dynamic_linker="$host_os ld.so"
-  shlibpath_var=LIBRARY_PATH
-  ;;
-
-bsdi[45]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib"
-  # the default ld.so.conf also contains /usr/contrib/lib and
-  # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow
-  # libtool to hard-code these into programs
-  ;;
-
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-
-  case $GCC,$cc_basename in
-  yes,*)
-    # gcc
-    library_names_spec='$libname.dll.a'
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    # If user builds GCC with multilib enabled,
-    # it should just install on $(libdir)
-    # not on $(libdir)/../bin or 32 bits dlls would override 64 bit ones.
-    if test xyes = x"$multilib"; then
-      postinstall_cmds='base_file=`basename \$file`~
-        dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-        dldir=$destdir/`dirname \$dlpath`~
-        $install_prog $dir/$dlname $destdir/$dlname~
-        chmod a+x $destdir/$dlname~
-        if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-          eval '\''$striplib $destdir/$dlname'\'' || exit \$?;
-        fi'
-    else
-      postinstall_cmds='base_file=`basename \$file`~
-        dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-        dldir=$destdir/`dirname \$dlpath`~
-        test -d \$dldir || mkdir -p \$dldir~
-        $install_prog $dir/$dlname \$dldir/$dlname~
-        chmod a+x \$dldir/$dlname~
-        if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-          eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-        fi'
-    fi
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-
-    case $host_os in
-    cygwin*)
-      # Cygwin DLLs use 'cyg' prefix rather than 'lib'
-      soname_spec='`echo $libname | $SED -e 's/^lib/cyg/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-
-      sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api"
-      ;;
-    mingw* | windows* | cegcc*)
-      # MinGW DLLs use traditional 'lib' prefix
-      soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-      ;;
-    pw32*)
-      # pw32 DLLs use 'pw' prefix rather than 'lib'
-      library_names_spec='`echo $libname | $SED -e 's/^lib/pw/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-      ;;
-    esac
-    dynamic_linker='Win32 ld.exe'
-    ;;
-
-  *,cl* | *,icl*)
-    # Native MSVC or ICC
-    libname_spec='$name'
-    soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-    library_names_spec='$libname.dll.lib'
-
-    case $build_os in
-    mingw* | windows*)
-      sys_lib_search_path_spec=
-      lt_save_ifs=$IFS
-      IFS=';'
-      for lt_path in $LIB
-      do
-        IFS=$lt_save_ifs
-        # Let DOS variable expansion print the short 8.3 style file name.
-        lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"`
-        sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path"
-      done
-      IFS=$lt_save_ifs
-      # Convert to MSYS style.
-      sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's|\\\\|/|g' -e 's| \\([a-zA-Z]\\):| /\\1|g' -e 's|^ ||'`
-      ;;
-    cygwin*)
-      # Convert to unix form, then to dos form, then back to unix form
-      # but this time dos style (no spaces!) so that the unix form looks
-      # like /cygdrive/c/PROGRA~1:/cygdr...
-      sys_lib_search_path_spec=`cygpath --path --unix "$LIB"`
-      sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null`
-      sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      ;;
-    *)
-      sys_lib_search_path_spec=$LIB
-      if $ECHO "$sys_lib_search_path_spec" | $GREP ';[c-zC-Z]:/' >/dev/null; then
-        # It is most probably a Windows format PATH.
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'`
-      else
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      fi
-      # FIXME: find the short name or the path components, as spaces are
-      # common. (e.g. "Program Files" -> "PROGRA~1")
-      ;;
-    esac
-
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    postinstall_cmds='base_file=`basename \$file`~
-      dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-      dldir=$destdir/`dirname \$dlpath`~
-      test -d \$dldir || mkdir -p \$dldir~
-      $install_prog $dir/$dlname \$dldir/$dlname'
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-    dynamic_linker='Win32 link.exe'
-    ;;
-
-  *)
-    # Assume MSVC and ICC wrapper
-    library_names_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext $libname.lib'
-    dynamic_linker='Win32 ld.exe'
-    ;;
-  esac
-  # FIXME: first we should search . and the directory the executable is in
-  shlibpath_var=PATH
-  ;;
-
-darwin* | rhapsody*)
-  dynamic_linker="$host_os dyld"
-  version_type=darwin
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$major$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$major$shared_ext'
-  shlibpath_overrides_runpath=yes
-  shlibpath_var=DYLD_LIBRARY_PATH
-  shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`'
-
-  sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib"
-  sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib'
-  ;;
-
-dgux*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  # DragonFly does not have aout.  When/if they implement a new
-  # versioning mechanism, adjust this.
-  if test -x /usr/bin/objformat; then
-    objformat=`/usr/bin/objformat`
-  else
-    case $host_os in
-    freebsd[23].*) objformat=aout ;;
-    *) objformat=elf ;;
-    esac
-  fi
-  version_type=freebsd-$objformat
-  case $version_type in
-    freebsd-elf*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      soname_spec='$libname$release$shared_ext$major'
-      need_version=no
-      need_lib_prefix=no
-      ;;
-    freebsd-*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-      need_version=yes
-      ;;
-  esac
-  case $host_cpu in
-    powerpc64)
-      # On FreeBSD bi-arch platforms, a different variable is used for 32-bit
-      # binaries.  See <https://man.freebsd.org/cgi/man.cgi?query=ld.so>.
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int test_pointer_size[sizeof (void *) - 5];
-           
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  shlibpath_var=LD_LIBRARY_PATH
-else case e in @%:@(
-  e) shlibpath_var=LD_32_LIBRARY_PATH ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-      ;;
-    *)
-      shlibpath_var=LD_LIBRARY_PATH
-      ;;
-  esac
-  case $host_os in
-  freebsd2.*)
-    shlibpath_overrides_runpath=yes
-    ;;
-  freebsd3.[01]* | freebsdelf3.[01]*)
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  freebsd3.[2-9]* | freebsdelf3.[2-9]* | \
-  freebsd4.[0-5] | freebsdelf4.[0-5] | freebsd4.1.1 | freebsdelf4.1.1)
-    shlibpath_overrides_runpath=no
-    hardcode_into_libs=yes
-    ;;
-  *) # from 4.6 on, and DragonFly
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  esac
-  ;;
-
-haiku*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  dynamic_linker="$host_os runtime_loader"
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec='/boot/system/non-packaged/develop/lib /boot/system/develop/lib'
-  sys_lib_dlsearch_path_spec='/boot/home/config/non-packaged/lib /boot/home/config/lib /boot/system/non-packaged/lib /boot/system/lib'
-  hardcode_into_libs=no
-  ;;
-
-hpux9* | hpux10* | hpux11*)
-  # Give a soname corresponding to the major version so that dld.sl refuses to
-  # link against other versions.
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  case $host_cpu in
-  ia64*)
-    shrext_cmds='.so'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.so"
-    shlibpath_var=LD_LIBRARY_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    if test 32 = "$HPUX_IA64_MODE"; then
-      sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux32
-    else
-      sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux64
-    fi
-    ;;
-  hppa*64*)
-    shrext_cmds='.sl'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64"
-    sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-    ;;
-  *)
-    shrext_cmds='.sl'
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=SHLIB_PATH
-    shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    ;;
-  esac
-  # HP-UX runs *really* slowly unless shared libraries are mode 555, ...
-  postinstall_cmds='chmod 555 $lib'
-  # or fails outright, so override atomically:
-  install_override_mode=555
-  ;;
-
-interix[3-9]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $host_os in
-    nonstopux*) version_type=nonstopux ;;
-    *)
-	if test yes = "$lt_cv_prog_gnu_ld"; then
-		version_type=linux # correct to gnu/linux during the next big refactor
-	else
-		version_type=irix
-	fi ;;
-  esac
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext'
-  case $host_os in
-  irix5* | nonstopux*)
-    libsuff= shlibsuff=
-    ;;
-  *)
-    case $LD in # libtool.m4 will add one of these switches to LD
-    *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ")
-      libsuff= shlibsuff= libmagic=32-bit;;
-    *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ")
-      libsuff=32 shlibsuff=N32 libmagic=N32;;
-    *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ")
-      libsuff=64 shlibsuff=64 libmagic=64-bit;;
-    *) libsuff= shlibsuff= libmagic=never-match;;
-    esac
-    ;;
-  esac
-  shlibpath_var=LD_LIBRARY${shlibsuff}_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff"
-  sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff"
-  hardcode_into_libs=yes
-  ;;
-
-# No shared lib support for Linux oldld, aout, or coff.
-linux*oldld* | linux*aout* | linux*coff*)
-  dynamic_linker=no
-  ;;
-
-linux*android*)
-  version_type=none # Android doesn't support versioned libraries.
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  dynamic_linker='Android linker'
-  # -rpath works at least for libraries that are not overridden by
-  # libraries installed in system locations.
-  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-
-  # Some binutils ld are patched to set DT_RUNPATH
-  if test ${lt_cv_shlibpath_overrides_runpath+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_shlibpath_overrides_runpath=no
-    save_LDFLAGS=$LDFLAGS
-    save_libdir=$libdir
-    eval "libdir=/foo; wl=\"$lt_prog_compiler_wl\"; \
-	 LDFLAGS=\"\$LDFLAGS $hardcode_libdir_flag_spec\""
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  if  ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null
-then :
-  lt_cv_shlibpath_overrides_runpath=yes
-fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-    LDFLAGS=$save_LDFLAGS
-    libdir=$save_libdir
-     ;;
-esac
-fi
-
-  shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  # Ideally, we could use ldconfig to report *all* directories which are
-  # searched for libraries, however this is still not possible.  Aside from not
-  # being certain /sbin/ldconfig is available, command
-  # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64,
-  # even though it is searched at run-time.  Try to do the best guess by
-  # appending ld.so.conf contents (and includes) to the search path.
-  if test -f /etc/ld.so.conf; then
-    lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \$2)); skip = 1; } { if (!skip) print \$0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[	 ]*hwcap[	 ]/d;s/[:,	]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '`
-    sys_lib_dlsearch_path_spec="/lib /usr/lib $lt_ld_extra"
-  fi
-
-  # We used to test for /lib/ld.so.1 and disable shared libraries on
-  # powerpc, because MkLinux only supported shared libraries with the
-  # GNU dynamic linker.  Since this was broken with cross compilers,
-  # most powerpc-linux boxes support dynamic linking these days and
-  # people can always --disable-shared, the test was removed, and we
-  # assume the GNU/Linux dynamic linker is in use.
-  dynamic_linker='GNU/Linux ld.so'
-  ;;
-
-netbsdelf*-gnu)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='NetBSD ld.elf_so'
-  ;;
-
-netbsd*)
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-    finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-    dynamic_linker='NetBSD (a.out) ld.so'
-  else
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    dynamic_linker='NetBSD ld.elf_so'
-  fi
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  ;;
-
-*-mlibc)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='mlibc ld.so'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-newsos6)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-*nto* | *qnx*)
-  version_type=qnx
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='ldqnx.so'
-  ;;
-
-openbsd*)
-  version_type=sunos
-  sys_lib_dlsearch_path_spec=/usr/lib
-  need_lib_prefix=no
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    need_version=no
-  else
-    need_version=yes
-  fi
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-os2*)
-  libname_spec='$name'
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-  # OS/2 can only load a DLL with a base name of 8 characters or less.
-  soname_spec='`test -n "$os2dllname" && libname="$os2dllname";
-    v=$($ECHO $release$versuffix | tr -d .-);
-    n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _);
-    $ECHO $n$v`$shared_ext'
-  library_names_spec='${libname}_dll.$libext'
-  dynamic_linker='OS/2 ld.exe'
-  shlibpath_var=BEGINLIBPATH
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  postinstall_cmds='base_file=`basename \$file`~
-    dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~
-    dldir=$destdir/`dirname \$dlpath`~
-    test -d \$dldir || mkdir -p \$dldir~
-    $install_prog $dir/$dlname \$dldir/$dlname~
-    chmod a+x \$dldir/$dlname~
-    if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-      eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-    fi'
-  postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~
-    dlpath=$dir/\$dldll~
-    $RM \$dlpath'
-  ;;
-
-osf3* | osf4* | osf5*)
-  version_type=osf
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  ;;
-
-rdos*)
-  dynamic_linker=no
-  ;;
-
-serenity*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  dynamic_linker='SerenityOS LibELF'
-  ;;
-
-solaris*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  # ldd complains unless libraries are executable
-  postinstall_cmds='chmod +x $lib'
-  ;;
-
-sunos4*)
-  version_type=sunos
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  if test yes = "$with_gnu_ld"; then
-    need_lib_prefix=no
-  fi
-  need_version=yes
-  ;;
-
-sysv4 | sysv4.3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  case $host_vendor in
-    sni)
-      shlibpath_overrides_runpath=no
-      need_lib_prefix=no
-      runpath_var=LD_RUN_PATH
-      ;;
-    siemens)
-      need_lib_prefix=no
-      ;;
-    motorola)
-      need_lib_prefix=no
-      need_version=no
-      shlibpath_overrides_runpath=no
-      sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib'
-      ;;
-  esac
-  ;;
-
-sysv4*MP*)
-  if test -d /usr/nec; then
-    version_type=linux # correct to gnu/linux during the next big refactor
-    library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext'
-    soname_spec='$libname$shared_ext.$major'
-    shlibpath_var=LD_LIBRARY_PATH
-  fi
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  version_type=sco
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  if test yes = "$with_gnu_ld"; then
-    sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib'
-  else
-    sys_lib_search_path_spec='/usr/ccs/lib /usr/lib'
-    case $host_os in
-      sco3.2v5*)
-        sys_lib_search_path_spec="$sys_lib_search_path_spec /lib"
-	;;
-    esac
-  fi
-  sys_lib_dlsearch_path_spec='/usr/lib'
-  ;;
-
-tpf*)
-  # TPF is a cross-target only.  Preferred cross-host = GNU/Linux.
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-uts4*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-emscripten*)
-  version_type=none
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  dynamic_linker="Emscripten linker"
-  lt_prog_compiler_wl=
-lt_prog_compiler_pic=
-lt_prog_compiler_static=
-
-
-  if test yes = "$GCC"; then
-    lt_prog_compiler_wl='-Wl,'
-    lt_prog_compiler_static='-static'
-
-    case $host_os in
-      aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            lt_prog_compiler_pic='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            lt_prog_compiler_pic='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      ;;
-
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      lt_prog_compiler_static=
-      ;;
-
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='-fPIC'
-	;;
-      esac
-      ;;
-
-    interix[3-9]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-
-    msdosdjgpp*)
-      # Just because we use GCC doesn't mean we suddenly get shared libraries
-      # on systems that don't support them.
-      lt_prog_compiler_can_build_shared=no
-      enable_shared=no
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic=-Kconform_pic
-      fi
-      ;;
-
-    *)
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-    esac
-
-    case $cc_basename in
-    nvcc*) # Cuda Compiler Driver 2.2
-      lt_prog_compiler_wl='-Xlinker '
-      if test -n "$lt_prog_compiler_pic"; then
-        lt_prog_compiler_pic="-Xcompiler $lt_prog_compiler_pic"
-      fi
-      ;;
-    esac
-  else
-    # PORTME Check for flag to pass linker flags through the system compiler.
-    case $host_os in
-    aix*)
-      lt_prog_compiler_wl='-Wl,'
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      else
-	lt_prog_compiler_static='-bnso -bI:/lib/syscalls.exp'
-      fi
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      case $cc_basename in
-      nagfor*)
-        # NAG Fortran compiler
-        lt_prog_compiler_wl='-Wl,-Wl,,'
-        lt_prog_compiler_pic='-PIC'
-        lt_prog_compiler_static='-Bstatic'
-        ;;
-      esac
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    hpux9* | hpux10* | hpux11*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
-      # not for PA HP-UX.
-      case $host_cpu in
-      hppa*64*|ia64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='+Z'
-	;;
-      esac
-      # Is there a better lt_prog_compiler_static that works with the bundled CC?
-      lt_prog_compiler_static='$wl-a ${wl}archive'
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC (with -KPIC) is the default.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-      case $cc_basename in
-      # old Intel for x86_64, which still supported -KPIC.
-      ecc*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-KPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      *flang* | ftn | f18* | f95*)
-        # Flang compiler.
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # icc used to be incompatible with GCC.
-      # ICC 10 doesn't accept -KPIC any more.
-      icc* | ifort*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # Lahey Fortran 8.1.
-      lf95*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='--shared'
-	lt_prog_compiler_static='--static'
-	;;
-      nagfor*)
-	# NAG Fortran compiler
-	lt_prog_compiler_wl='-Wl,-Wl,,'
-	lt_prog_compiler_pic='-PIC'
-	lt_prog_compiler_static='-Bstatic'
-	;;
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-	;;
-      pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
-        # Portland Group compilers (*not* the Pentium gcc compiler,
-	# which looks to be a dead project)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fpic'
-	lt_prog_compiler_static='-Bstatic'
-        ;;
-      ccc*)
-        lt_prog_compiler_wl='-Wl,'
-        # All Alpha code is PIC.
-        lt_prog_compiler_static='-non_shared'
-        ;;
-      xl* | bgxl* | bgf* | mpixl*)
-	# IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-qpic'
-	lt_prog_compiler_static='-qstaticlink'
-	;;
-      *)
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [1-7].* | *Sun*Fortran*\ 8.[0-3]*)
-	  # Sun Fortran 8.3 passes all unrecognized flags to the linker
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl=''
-	  ;;
-	*Sun\ F* | *Sun*Fortran*)
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Qoption ld '
-	  ;;
-	*Sun\ C*)
-	  # Sun C 5.9
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Wl,'
-	  ;;
-        *Intel*\ [CF]*Compiler*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fPIC'
-	  lt_prog_compiler_static='-static'
-	  ;;
-	*Portland\ Group*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fpic'
-	  lt_prog_compiler_static='-Bstatic'
-	  ;;
-	esac
-	;;
-      esac
-      ;;
-
-    newsos6)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *-mlibc)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-fPIC'
-      lt_prog_compiler_static='-static'
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    osf3* | osf4* | osf5*)
-      lt_prog_compiler_wl='-Wl,'
-      # All OSF/1 code is PIC.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    rdos*)
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      case $cc_basename in
-      f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
-	lt_prog_compiler_wl='-Qoption ld ';;
-      *)
-	lt_prog_compiler_wl='-Wl,';;
-      esac
-      ;;
-
-    sunos4*)
-      lt_prog_compiler_wl='-Qoption ld '
-      lt_prog_compiler_pic='-PIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4 | sysv4.2uw2* | sysv4.3*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic='-Kconform_pic'
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      ;;
-
-    sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    unicos*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_can_build_shared=no
-      ;;
-
-    uts4*)
-      lt_prog_compiler_pic='-pic'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *)
-      lt_prog_compiler_can_build_shared=no
-      ;;
-    esac
-  fi
-
-case $host_os in
-  # For platforms that do not support PIC, -DPIC is meaningless:
-  *djgpp*)
-    lt_prog_compiler_pic=
-    ;;
-  *)
-    lt_prog_compiler_pic="$lt_prog_compiler_pic@&t@ -DPIC"
-    ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $compiler option to produce PIC" >&5
-printf %s "checking for $compiler option to produce PIC... " >&6; }
-if test ${lt_cv_prog_compiler_pic+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic=$lt_prog_compiler_pic ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic" >&6; }
-lt_prog_compiler_pic=$lt_cv_prog_compiler_pic
-
-#
-# Check to make sure the PIC flag actually works.
-#
-if test -n "$lt_prog_compiler_pic"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler PIC flag $lt_prog_compiler_pic works" >&5
-printf %s "checking if $compiler PIC flag $lt_prog_compiler_pic works... " >&6; }
-if test ${lt_cv_prog_compiler_pic_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic_works=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$lt_prog_compiler_pic@&t@ -DPIC"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_pic_works=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_pic_works"; then
-    case $lt_prog_compiler_pic in
-     "" | " "*) ;;
-     *) lt_prog_compiler_pic=" $lt_prog_compiler_pic" ;;
-     esac
-else
-    lt_prog_compiler_pic=
-     lt_prog_compiler_can_build_shared=no
-fi
-
-fi
-
-
-
-
-
-#
-# Check to make sure the static flag actually works.
-#
-wl=$lt_prog_compiler_wl eval lt_tmp_static_flag=\"$lt_prog_compiler_static\"
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler static flag $lt_tmp_static_flag works" >&5
-printf %s "checking if $compiler static flag $lt_tmp_static_flag works... " >&6; }
-if test ${lt_cv_prog_compiler_static_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_static_works=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $lt_tmp_static_flag"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler_static_works=yes
-       fi
-     else
-       lt_cv_prog_compiler_static_works=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_static_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_static_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_static_works"; then
-    :
-else
-    lt_prog_compiler_static=
-fi
-
-
-
-='-fPIC'
-  archive_cmds='$CC -sSIDE_MODULE=2 -shared $libobjs $deplibs $compiler_flags -o $lib'
-  archive_expsym_cmds='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -sSIDE_MODULE=2 -shared $libobjs $deplibs $compiler_flags -o $lib -s EXPORTED_FUNCTIONS=@$output_objdir/$soname.expsym'
-  archive_cmds_need_lc=no
-  no_undefined_flag=
-  ;;
-
-*)
-  dynamic_linker=no
-  ;;
-esac
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $dynamic_linker" >&5
-printf '%s\n' "$dynamic_linker" >&6; }
-test no = "$dynamic_linker" && can_build_shared=no
-
-variables_saved_for_relink="PATH $shlibpath_var $runpath_var"
-if test yes = "$GCC"; then
-  variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH"
-fi
-
-if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then
-  sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec
-fi
-
-if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then
-  sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec
-fi
-
-# remember unaugmented sys_lib_dlsearch_path content for libtool script decls...
-configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec
-
-# ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code
-func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH"
-
-# to be used as default LT_SYS_LIBRARY_PATH value in generated libtool
-configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to hardcode library paths into programs" >&5
-printf %s "checking how to hardcode library paths into programs... " >&6; }
-hardcode_action=
-if test -n "$hardcode_libdir_flag_spec" ||
-   test -n "$runpath_var" ||
-   test yes = "$hardcode_automatic"; then
-
-  # We can hardcode non-existent directories.
-  if test no != "$hardcode_direct" &&
-     # If the only mechanism to avoid hardcoding is shlibpath_var, we
-     # have to relink, otherwise we might link with an installed library
-     # when we should be linking with a yet-to-be-installed one
-     ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, )" &&
-     test no != "$hardcode_minus_L"; then
-    # Linking always hardcodes the temporary library directory.
-    hardcode_action=relink
-  else
-    # We can link without hardcoding, and we can hardcode nonexisting dirs.
-    hardcode_action=immediate
-  fi
-else
-  # We cannot hardcode anything, or else we can only hardcode existing
-  # directories.
-  hardcode_action=unsupported
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $hardcode_action" >&5
-printf '%s\n' "$hardcode_action" >&6; }
-
-if test relink = "$hardcode_action" ||
-   test yes = "$inherit_rpath"; then
-  # Fast installation is not supported
-  enable_fast_install=no
-elif test yes = "$shlibpath_overrides_runpath" ||
-     test no = "$enable_shared"; then
-  # Fast installation is not necessary
-  enable_fast_install=needless
-fi
-
-    
-    
-    
-
-
-  if test yes != "$enable_dlopen"; then
-  enable_dlopen=unknown
-  enable_dlopen_self=unknown
-  enable_dlopen_self_static=unknown
-else
-  lt_cv_dlopen=no
-  lt_cv_dlopen_libs=
-
-  case $host_os in
-  beos*)
-    lt_cv_dlopen=load_add_on
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ;;
-
-  mingw* | windows* | pw32* | cegcc*)
-    lt_cv_dlopen=LoadLibrary
-    lt_cv_dlopen_libs=
-    ;;
-
-  cygwin*)
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    ;;
-
-  darwin*)
-    # if libdl is installed we need to link against it
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
-printf %s "checking for dlopen in -ldl... " >&6; }
-if test ${ac_cv_lib_dl_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dl_dlopen=yes
-else case e in @%:@(
-  e) ac_cv_lib_dl_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_dl_dlopen" >&6; }
-if test "x$ac_cv_lib_dl_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl
-else case e in @%:@(
-  e) 
-    lt_cv_dlopen=dyld
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-     ;;
-esac
-fi
-
-    ;;
-
-  tpf*)
-    # Don't try to run any link tests for TPF.  We know it's impossible
-    # because TPF is a cross-compiler, and we know how we open DSOs.
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=no
-    ;;
-
-  *)
-    ac_fn_c_check_func "$LINENO" "shl_load" "ac_cv_func_shl_load"
-if test "x$ac_cv_func_shl_load" = xyes
-then :
-  lt_cv_dlopen=shl_load
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for shl_load in -ldld" >&5
-printf %s "checking for shl_load in -ldld... " >&6; }
-if test ${ac_cv_lib_dld_shl_load+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char shl_load (void);
-int
-main (void)
-{
-return shl_load ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dld_shl_load=yes
-else case e in @%:@(
-  e) ac_cv_lib_dld_shl_load=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_shl_load" >&5
-printf '%s\n' "$ac_cv_lib_dld_shl_load" >&6; }
-if test "x$ac_cv_lib_dld_shl_load" = xyes
-then :
-  lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld
-else case e in @%:@(
-  e) ac_fn_c_check_func "$LINENO" "dlopen" "ac_cv_func_dlopen"
-if test "x$ac_cv_func_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
-printf %s "checking for dlopen in -ldl... " >&6; }
-if test ${ac_cv_lib_dl_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dl_dlopen=yes
-else case e in @%:@(
-  e) ac_cv_lib_dl_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_dl_dlopen" >&6; }
-if test "x$ac_cv_lib_dl_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -lsvld" >&5
-printf %s "checking for dlopen in -lsvld... " >&6; }
-if test ${ac_cv_lib_svld_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-lsvld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_svld_dlopen=yes
-else case e in @%:@(
-  e) ac_cv_lib_svld_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_svld_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_svld_dlopen" >&6; }
-if test "x$ac_cv_lib_svld_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dld_link in -ldld" >&5
-printf %s "checking for dld_link in -ldld... " >&6; }
-if test ${ac_cv_lib_dld_dld_link+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dld_link (void);
-int
-main (void)
-{
-return dld_link ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dld_dld_link=yes
-else case e in @%:@(
-  e) ac_cv_lib_dld_dld_link=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_dld_link" >&5
-printf '%s\n' "$ac_cv_lib_dld_dld_link" >&6; }
-if test "x$ac_cv_lib_dld_dld_link" = xyes
-then :
-  lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld
-fi
-
-	       ;;
-esac
-fi
-
-	     ;;
-esac
-fi
-
-	   ;;
-esac
-fi
-
-	 ;;
-esac
-fi
-
-       ;;
-esac
-fi
-
-    ;;
-  esac
-
-  if test no = "$lt_cv_dlopen"; then
-    enable_dlopen=no
-  else
-    enable_dlopen=yes
-  fi
-
-  case $lt_cv_dlopen in
-  dlopen)
-    save_CPPFLAGS=$CPPFLAGS
-    test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H"
-
-    save_LDFLAGS=$LDFLAGS
-    wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\"
-
-    save_LIBS=$LIBS
-    LIBS="$lt_cv_dlopen_libs $LIBS"
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether a program can dlopen itself" >&5
-printf %s "checking whether a program can dlopen itself... " >&6; }
-if test ${lt_cv_dlopen_self+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 	  if test yes = "$cross_compiling"; then :
-  lt_cv_dlopen_self=cross
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord (void) __attribute__((visibility("default")));
-#endif
-
-int fnord (void) { return 42; }
-int main (void)
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}
-_LT_EOF
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&5 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) lt_cv_dlopen_self=yes ;;
-      x$lt_dlneed_uscore) lt_cv_dlopen_self=yes ;;
-      x$lt_dlunknown|x*) lt_cv_dlopen_self=no ;;
-    esac
-  else :
-    # compilation failed
-    lt_cv_dlopen_self=no
-  fi
-fi
-rm -fr conftest*
-
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self" >&5
-printf '%s\n' "$lt_cv_dlopen_self" >&6; }
-
-    if test yes = "$lt_cv_dlopen_self"; then
-      wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether a statically linked program can dlopen itself" >&5
-printf %s "checking whether a statically linked program can dlopen itself... " >&6; }
-if test ${lt_cv_dlopen_self_static+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 	  if test yes = "$cross_compiling"; then :
-  lt_cv_dlopen_self_static=cross
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord (void) __attribute__((visibility("default")));
-#endif
-
-int fnord (void) { return 42; }
-int main (void)
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}
-_LT_EOF
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&5 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) lt_cv_dlopen_self_static=yes ;;
-      x$lt_dlneed_uscore) lt_cv_dlopen_self_static=yes ;;
-      x$lt_dlunknown|x*) lt_cv_dlopen_self_static=no ;;
-    esac
-  else :
-    # compilation failed
-    lt_cv_dlopen_self_static=no
-  fi
-fi
-rm -fr conftest*
-
-       ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self_static" >&5
-printf '%s\n' "$lt_cv_dlopen_self_static" >&6; }
-    fi
-
-    CPPFLAGS=$save_CPPFLAGS
-    LDFLAGS=$save_LDFLAGS
-    LIBS=$save_LIBS
-    ;;
-  esac
-
-  case $lt_cv_dlopen_self in
-  yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;;
-  *) enable_dlopen_self=unknown ;;
-  esac
-
-  case $lt_cv_dlopen_self_static in
-  yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;;
-  *) enable_dlopen_self_static=unknown ;;
-  esac
-fi
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-  
-striplib=
-old_striplib=
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether stripping libraries is possible" >&5
-printf %s "checking whether stripping libraries is possible... " >&6; }
-if test -z "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-else
-  if $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then
-    old_striplib="$STRIP --strip-debug"
-    striplib="$STRIP --strip-unneeded"
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-  else
-    case $host_os in
-    darwin*)
-      # FIXME - insert some real tests, host_os isn't really good enough
-      striplib="$STRIP -x"
-      old_striplib="$STRIP -S"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      ;;
-    freebsd*)
-      if $STRIP -V 2>&1 | $GREP "elftoolchain" >/dev/null; then
-        old_striplib="$STRIP --strip-debug"
-        striplib="$STRIP --strip-unneeded"
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-      fi
-      ;;
-    *)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-      ;;
-    esac
-  fi
-fi
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-  # Report what library types will actually be built
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if libtool supports shared libraries" >&5
-printf %s "checking if libtool supports shared libraries... " >&6; }
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $can_build_shared" >&5
-printf '%s\n' "$can_build_shared" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build shared libraries" >&5
-printf %s "checking whether to build shared libraries... " >&6; }
-  test no = "$can_build_shared" && enable_shared=no
-
-  # On AIX, shared libraries and static libraries use the same namespace, and
-  # are all built from PIC.
-  case $host_os in
-  aix3*)
-    test yes = "$enable_shared" && enable_static=no
-    if test -n "$RANLIB"; then
-      archive_cmds="$archive_cmds~\$RANLIB \$lib"
-      postinstall_cmds='$RANLIB $lib'
-    fi
-    ;;
-
-  aix[4-9]*)
-    if test ia64 != "$host_cpu"; then
-      case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
-      yes,aix,yes) ;;			# shared object as lib.so file only
-      yes,svr4,*) ;;			# shared object as lib.so archive member only
-      yes,*) enable_static=no ;;	# shared object in lib.a archive as well
-      esac
-    fi
-    ;;
-  esac
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $enable_shared" >&5
-printf '%s\n' "$enable_shared" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build static libraries" >&5
-printf %s "checking whether to build static libraries... " >&6; }
-  # Make sure either enable_shared or enable_static is yes.
-  test yes = "$enable_shared" || enable_static=yes
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $enable_static" >&5
-printf '%s\n' "$enable_static" >&6; }
-
-  
-
-
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-CC=$lt_save_CC
-
-
-
-
-
-
-
-
-       
-       
-
-
-
-
-
-        ac_config_commands="$ac_config_commands libtool"
-
-
-
-
-# Only expand once:
-
-
-
-# Require xorg-macros minimum of 1.12 for DocBook external references
-
-
-
-
-
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC options to detect undeclared functions" >&5
-printf %s "checking for $CC options to detect undeclared functions... " >&6; }
-if test ${ac_cv_c_undeclared_builtin_options+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_save_CFLAGS=$CFLAGS
-   ac_cv_c_undeclared_builtin_options='cannot detect'
-   for ac_arg in '' -fno-builtin; do
-     CFLAGS="$ac_save_CFLAGS $ac_arg"
-     # This test program should *not* compile successfully.
-     cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-(void) strchr;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  
-else case e in @%:@(
-  e) # This test program should compile successfully.
-        # No library function is consistently available on
-        # freestanding implementations, so test against a dummy
-        # declaration.  Include always-available headers on the
-        # off chance that they somehow elicit warnings.
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <float.h>
-#include <limits.h>
-#include <stdarg.h>
-#include <stddef.h>
-extern void ac_decl (int, char *);
-
-int
-main (void)
-{
-(void) ac_decl (0, (char *) 0);
-  (void) ac_decl;
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  if test x"$ac_arg" = x
-then :
-  ac_cv_c_undeclared_builtin_options='none needed'
-else case e in @%:@(
-  e) ac_cv_c_undeclared_builtin_options=$ac_arg ;;
-esac
-fi
-          break
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-    done
-    CFLAGS=$ac_save_CFLAGS
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_undeclared_builtin_options" >&5
-printf '%s\n' "$ac_cv_c_undeclared_builtin_options" >&6; }
-  case $ac_cv_c_undeclared_builtin_options in @%:@(
-  'cannot detect') :
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot make $CC report undeclared builtins
-See 'config.log' for more details" "$LINENO" 5; } ;; @%:@(
-  'none needed') :
-    ac_c_undeclared_builtin_options='' ;; @%:@(
-  *) :
-    ac_c_undeclared_builtin_options=$ac_cv_c_undeclared_builtin_options ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC options to ignore future-version functions" >&5
-printf %s "checking for $CC options to ignore future-version functions... " >&6; }
-if test ${ac_cv_c_future_darwin_options+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)       ac_compile_saved="$ac_compile"
-   ac_compile="$ac_compile -Werror=unguarded-availability-new"
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#if ! (defined __APPLE__ && defined __MACH__)
-	   #error "-Werror=unguarded-availability-new not needed here"
-	  #endif
-	
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_c_future_darwin_options='-Werror=unguarded-availability-new'
-else case e in @%:@(
-  e) ac_cv_c_future_darwin_options='none needed' ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ac_compile="$ac_compile_saved"
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_future_darwin_options" >&5
-printf '%s\n' "$ac_cv_c_future_darwin_options" >&6; }
- case $ac_cv_c_future_darwin_options in @%:@(
-  'none needed') :
-    ac_c_future_darwin_options='' ;; @%:@(
-  *) :
-    ac_c_future_darwin_options=$ac_cv_c_future_darwin_options ;;
-esac
-
-
-
-						
-	
-ac_fn_check_decl "$LINENO" "__clang__" "ac_cv_have_decl___clang__" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___clang__" = xyes
-then :
-  CLANGCC="yes"
-else case e in @%:@(
-  e) CLANGCC="no" ;;
-esac
-fi
-ac_fn_check_decl "$LINENO" "__INTEL_COMPILER" "ac_cv_have_decl___INTEL_COMPILER" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___INTEL_COMPILER" = xyes
-then :
-  INTELCC="yes"
-else case e in @%:@(
-  e) INTELCC="no" ;;
-esac
-fi
-ac_fn_check_decl "$LINENO" "__SUNPRO_C" "ac_cv_have_decl___SUNPRO_C" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___SUNPRO_C" = xyes
-then :
-  SUNCC="yes"
-else case e in @%:@(
-  e) SUNCC="no" ;;
-esac
-fi
-
-
-
-
-
-
-
-
-if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
-	if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args.
-set dummy ${ac_tool_prefix}pkg-config; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_PKG_CONFIG+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PKG_CONFIG="$PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-PKG_CONFIG=$ac_cv_path_PKG_CONFIG
-if test -n "$PKG_CONFIG"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $PKG_CONFIG" >&5
-printf '%s\n' "$PKG_CONFIG" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_path_PKG_CONFIG"; then
-  ac_pt_PKG_CONFIG=$PKG_CONFIG
-  # Extract the first word of "pkg-config", so it can be a program name with args.
-set dummy pkg-config; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_ac_pt_PKG_CONFIG+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $ac_pt_PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_ac_pt_PKG_CONFIG="$ac_pt_PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_ac_pt_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-ac_pt_PKG_CONFIG=$ac_cv_path_ac_pt_PKG_CONFIG
-if test -n "$ac_pt_PKG_CONFIG"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKG_CONFIG" >&5
-printf '%s\n' "$ac_pt_PKG_CONFIG" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_pt_PKG_CONFIG" = x; then
-    PKG_CONFIG=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    PKG_CONFIG=$ac_pt_PKG_CONFIG
-  fi
-else
-  PKG_CONFIG="$ac_cv_path_PKG_CONFIG"
-fi
-
-fi
-if test -n "$PKG_CONFIG"; then
-	_pkg_min_version=0.9.0
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking pkg-config is at least version $_pkg_min_version" >&5
-printf %s "checking pkg-config is at least version $_pkg_min_version... " >&6; }
-	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-	else
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-		PKG_CONFIG=""
-	fi
-fi
-
-
-
-
-
-@%:@ Check whether --enable-selective-werror was given.
-if test ${enable_selective_werror+y}
-then :
-  enableval=$enable_selective_werror; SELECTIVE_WERROR=$enableval
-else case e in @%:@(
-  e) SELECTIVE_WERROR=yes ;;
-esac
-fi
-
-
-
-                
-        
-# -v is too short to test reliably with XORG_TESTSET_CFLAG
-if test "x$SUNCC" = "xyes"; then
-    BASE_CFLAGS="-v"
-else
-    BASE_CFLAGS=""
-fi
-
-# This chunk of warnings were those that existed in the legacy CWARNFLAGS
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wall"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wall" >&5
-printf %s "checking if $CC supports -Wall... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wall
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wall"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wpointer-arith"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-arith" >&5
-printf %s "checking if $CC supports -Wpointer-arith... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wpointer_arith
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wpointer-arith"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-declarations"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-declarations" >&5
-printf %s "checking if $CC supports -Wmissing-declarations... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_declarations
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-declarations"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wformat=2"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat=2" >&5
-printf %s "checking if $CC supports -Wformat=2... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wformat_2
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wformat=2"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wformat"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat" >&5
-printf %s "checking if $CC supports -Wformat... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wformat
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wformat"
-			found="yes"
-		fi
-	fi
-
-
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wstrict-prototypes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wstrict-prototypes" >&5
-printf %s "checking if $CC supports -Wstrict-prototypes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wstrict_prototypes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wstrict-prototypes"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-prototypes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-prototypes" >&5
-printf %s "checking if $CC supports -Wmissing-prototypes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_prototypes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-prototypes"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wnested-externs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wnested-externs" >&5
-printf %s "checking if $CC supports -Wnested-externs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wnested_externs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wnested-externs"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wbad-function-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wbad-function-cast" >&5
-printf %s "checking if $CC supports -Wbad-function-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wbad_function_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wbad-function-cast"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wold-style-definition"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wold-style-definition" >&5
-printf %s "checking if $CC supports -Wold-style-definition... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wold_style_definition
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wold-style-definition"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -fd"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -fd" >&5
-printf %s "checking if $CC supports -fd... " >&6; }
-		cacheid=xorg_cv_cc_flag__fd
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -fd"
-			found="yes"
-		fi
-	fi
-
-
-	
-
-
-# This chunk adds additional warnings that could catch undesired effects.
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wunused"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wunused" >&5
-printf %s "checking if $CC supports -Wunused... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wunused
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wunused"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wuninitialized"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wuninitialized" >&5
-printf %s "checking if $CC supports -Wuninitialized... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wuninitialized
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wuninitialized"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wshadow"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wshadow" >&5
-printf %s "checking if $CC supports -Wshadow... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wshadow
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wshadow"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-noreturn"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-noreturn" >&5
-printf %s "checking if $CC supports -Wmissing-noreturn... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_noreturn
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-noreturn"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-format-attribute"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-format-attribute" >&5
-printf %s "checking if $CC supports -Wmissing-format-attribute... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_format_attribute
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-format-attribute"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wredundant-decls"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wredundant-decls" >&5
-printf %s "checking if $CC supports -Wredundant-decls... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wredundant_decls
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wredundant-decls"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wlogical-op"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wlogical-op" >&5
-printf %s "checking if $CC supports -Wlogical-op... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wlogical_op
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wlogical-op"
-			found="yes"
-		fi
-	fi
-
-
-
-# These are currently disabled because they are noisy.  They will be enabled
-# in the future once the codebase is sufficiently modernized to silence
-# them.  For now, I don't want them to drown out the other warnings.
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wparentheses])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-align])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-qual])
-
-# Turn some warnings into errors, so we don't accidentally get successful builds
-# when there are problems that should be fixed.
-
-if test "x$SELECTIVE_WERROR" = "xyes" ; then
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=implicit"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=implicit" >&5
-printf %s "checking if $CC supports -Werror=implicit... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_implicit
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=implicit"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED" >&5
-printf %s "checking if $CC supports -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_NO_EXPLICIT_TYPE_GIVEN__errwarn_E_NO_IMPLICIT_DECL_ALLOWED
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=nonnull"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=nonnull" >&5
-printf %s "checking if $CC supports -Werror=nonnull... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_nonnull
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=nonnull"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=init-self"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=init-self" >&5
-printf %s "checking if $CC supports -Werror=init-self... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_init_self
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=init-self"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=main"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=main" >&5
-printf %s "checking if $CC supports -Werror=main... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_main
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=main"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=missing-braces"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=missing-braces" >&5
-printf %s "checking if $CC supports -Werror=missing-braces... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_missing_braces
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=missing-braces"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=sequence-point"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=sequence-point" >&5
-printf %s "checking if $CC supports -Werror=sequence-point... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_sequence_point
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=sequence-point"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=return-type"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=return-type" >&5
-printf %s "checking if $CC supports -Werror=return-type... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_return_type
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=return-type"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_FUNC_HAS_NO_RETURN_STMT"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_FUNC_HAS_NO_RETURN_STMT" >&5
-printf %s "checking if $CC supports -errwarn=E_FUNC_HAS_NO_RETURN_STMT... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_FUNC_HAS_NO_RETURN_STMT
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_FUNC_HAS_NO_RETURN_STMT"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=trigraphs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=trigraphs" >&5
-printf %s "checking if $CC supports -Werror=trigraphs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_trigraphs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=trigraphs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=array-bounds"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=array-bounds" >&5
-printf %s "checking if $CC supports -Werror=array-bounds... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_array_bounds
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=array-bounds"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=write-strings"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=write-strings" >&5
-printf %s "checking if $CC supports -Werror=write-strings... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_write_strings
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=write-strings"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=address"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=address" >&5
-printf %s "checking if $CC supports -Werror=address... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_address
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=address"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=int-to-pointer-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=int-to-pointer-cast" >&5
-printf %s "checking if $CC supports -Werror=int-to-pointer-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_int_to_pointer_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=int-to-pointer-cast"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_BAD_PTR_INT_COMBINATION"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_BAD_PTR_INT_COMBINATION" >&5
-printf %s "checking if $CC supports -errwarn=E_BAD_PTR_INT_COMBINATION... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_BAD_PTR_INT_COMBINATION
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_BAD_PTR_INT_COMBINATION"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=pointer-to-int-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=pointer-to-int-cast" >&5
-printf %s "checking if $CC supports -Werror=pointer-to-int-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_pointer_to_int_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=pointer-to-int-cast"
-			found="yes"
-		fi
-	fi
-
- # Also -errwarn=E_BAD_PTR_INT_COMBINATION
-else
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT" >&5
-printf '%s\n' "$as_me: WARNING: You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT" >&2;}
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wimplicit"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wimplicit" >&5
-printf %s "checking if $CC supports -Wimplicit... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wimplicit
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wimplicit"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wnonnull"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wnonnull" >&5
-printf %s "checking if $CC supports -Wnonnull... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wnonnull
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wnonnull"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Winit-self"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Winit-self" >&5
-printf %s "checking if $CC supports -Winit-self... " >&6; }
-		cacheid=xorg_cv_cc_flag__Winit_self
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Winit-self"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmain"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmain" >&5
-printf %s "checking if $CC supports -Wmain... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmain
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmain"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-braces"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-braces" >&5
-printf %s "checking if $CC supports -Wmissing-braces... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_braces
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-braces"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wsequence-point"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wsequence-point" >&5
-printf %s "checking if $CC supports -Wsequence-point... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wsequence_point
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wsequence-point"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wreturn-type"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wreturn-type" >&5
-printf %s "checking if $CC supports -Wreturn-type... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wreturn_type
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wreturn-type"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wtrigraphs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wtrigraphs" >&5
-printf %s "checking if $CC supports -Wtrigraphs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wtrigraphs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wtrigraphs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Warray-bounds"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Warray-bounds" >&5
-printf %s "checking if $CC supports -Warray-bounds... " >&6; }
-		cacheid=xorg_cv_cc_flag__Warray_bounds
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Warray-bounds"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wwrite-strings"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wwrite-strings" >&5
-printf %s "checking if $CC supports -Wwrite-strings... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wwrite_strings
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wwrite-strings"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Waddress"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Waddress" >&5
-printf %s "checking if $CC supports -Waddress... " >&6; }
-		cacheid=xorg_cv_cc_flag__Waddress
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Waddress"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wint-to-pointer-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wint-to-pointer-cast" >&5
-printf %s "checking if $CC supports -Wint-to-pointer-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wint_to_pointer_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wint-to-pointer-cast"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wpointer-to-int-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-to-int-cast" >&5
-printf %s "checking if $CC supports -Wpointer-to-int-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wpointer_to_int_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wpointer-to-int-cast"
-			found="yes"
-		fi
-	fi
-
-
-fi
-
-
-
-
-
-
-
-		CWARNFLAGS="$BASE_CFLAGS"
-		if  test "x$GCC" = xyes ; then
-		    CWARNFLAGS="$CWARNFLAGS -fno-strict-aliasing"
-		fi
-		
-	
-
-
-
-
-
-
-@%:@ Check whether --enable-strict-compilation was given.
-if test ${enable_strict_compilation+y}
-then :
-  enableval=$enable_strict_compilation; STRICT_COMPILE=$enableval
-else case e in @%:@(
-  e) STRICT_COMPILE=no ;;
-esac
-fi
-
-
-
-                
-        
-
-STRICT_CFLAGS=""
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -pedantic"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -pedantic" >&5
-printf %s "checking if $CC supports -pedantic... " >&6; }
-		cacheid=xorg_cv_cc_flag__pedantic
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -pedantic"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror" >&5
-printf %s "checking if $CC supports -Werror... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -Werror"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn" >&5
-printf %s "checking if $CC supports -errwarn... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -errwarn"
-			found="yes"
-		fi
-	fi
-
-
-
-# Earlier versions of gcc (eg: 4.2) support -Werror=attributes, but do not
-# activate it with -Werror, so we add it here explicitly.
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=attributes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=attributes" >&5
-printf %s "checking if $CC supports -Werror=attributes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_attributes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -Werror=attributes"
-			found="yes"
-		fi
-	fi
-
-
-
-if test "x$STRICT_COMPILE" = "xyes"; then
-    BASE_CFLAGS="$BASE_CFLAGS $STRICT_CFLAGS"
-    CWARNFLAGS="$CWARNFLAGS $STRICT_CFLAGS"
-fi
-
-
-
-
-
-
-
-	
-cat >>confdefs.h <<_ACEOF
-@%:@define PACKAGE_VERSION_MAJOR `echo $PACKAGE_VERSION | cut -d . -f 1`
-_ACEOF
-
-	PVM=`echo $PACKAGE_VERSION | cut -d . -f 2 | cut -d - -f 1`
-	if test "x$PVM" = "x"; then
-		PVM="0"
-	fi
-	
-printf '%s\n' "@%:@define PACKAGE_VERSION_MINOR $PVM" >>confdefs.h
-
-	PVP=`echo $PACKAGE_VERSION | cut -d . -f 3 | cut -d - -f 1`
-	if test "x$PVP" = "x"; then
-		PVP="0"
-	fi
-	
-printf '%s\n' "@%:@define PACKAGE_VERSION_PATCHLEVEL $PVP" >>confdefs.h
-
-
-
-CHANGELOG_CMD="((GIT_DIR=\$(top_srcdir)/.git git log > \$(top_srcdir)/.changelog.tmp) 2>/dev/null && \
-mv \$(top_srcdir)/.changelog.tmp \$(top_srcdir)/ChangeLog) \
-|| (rm -f \$(top_srcdir)/.changelog.tmp; test -e \$(top_srcdir)/ChangeLog || ( \
-touch \$(top_srcdir)/ChangeLog; \
-echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))"
-
-
-
-
-macros_datadir=`$PKG_CONFIG --print-errors --variable=pkgdatadir xorg-macros`
-INSTALL_CMD="(cp -f "$macros_datadir/INSTALL" \$(top_srcdir)/.INSTALL.tmp && \
-mv \$(top_srcdir)/.INSTALL.tmp \$(top_srcdir)/INSTALL) \
-|| (rm -f \$(top_srcdir)/.INSTALL.tmp; test -e \$(top_srcdir)/INSTALL || ( \
-touch \$(top_srcdir)/INSTALL; \
-echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))"
-
-
-
-
-
-
-case $host_os in
-    solaris*)
-        # Solaris 2.0 - 11.3 use SysV man page section numbers, so we
-        # check for a man page file found in later versions that use
-        # traditional section numbers instead
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for /usr/share/man/man7/attributes.7" >&5
-printf %s "checking for /usr/share/man/man7/attributes.7... " >&6; }
-if test ${ac_cv_file__usr_share_man_man7_attributes_7+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) test "$cross_compiling" = yes &&
-  as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5
-if test -r "/usr/share/man/man7/attributes.7"; then
-  ac_cv_file__usr_share_man_man7_attributes_7=yes
-else
-  ac_cv_file__usr_share_man_man7_attributes_7=no
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_file__usr_share_man_man7_attributes_7" >&5
-printf '%s\n' "$ac_cv_file__usr_share_man_man7_attributes_7" >&6; }
-if test "x$ac_cv_file__usr_share_man_man7_attributes_7" = xyes
-then :
-  SYSV_MAN_SECTIONS=false
-else case e in @%:@(
-  e) SYSV_MAN_SECTIONS=true ;;
-esac
-fi
-
-        ;;
-    *) SYSV_MAN_SECTIONS=false ;;
-esac
-
-if test x$APP_MAN_SUFFIX = x    ; then
-    APP_MAN_SUFFIX=1
-fi
-if test x$APP_MAN_DIR = x    ; then
-    APP_MAN_DIR='$(mandir)/man$(APP_MAN_SUFFIX)'
-fi
-
-if test x$LIB_MAN_SUFFIX = x    ; then
-    LIB_MAN_SUFFIX=3
-fi
-if test x$LIB_MAN_DIR = x    ; then
-    LIB_MAN_DIR='$(mandir)/man$(LIB_MAN_SUFFIX)'
-fi
-
-if test x$FILE_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				FILE_MAN_SUFFIX=4  ;;
-	*)				FILE_MAN_SUFFIX=5  ;;
-    esac
-fi
-if test x$FILE_MAN_DIR = x    ; then
-    FILE_MAN_DIR='$(mandir)/man$(FILE_MAN_SUFFIX)'
-fi
-
-if test x$MISC_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				MISC_MAN_SUFFIX=5  ;;
-	*)				MISC_MAN_SUFFIX=7  ;;
-    esac
-fi
-if test x$MISC_MAN_DIR = x    ; then
-    MISC_MAN_DIR='$(mandir)/man$(MISC_MAN_SUFFIX)'
-fi
-
-if test x$DRIVER_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				DRIVER_MAN_SUFFIX=7  ;;
-	*)				DRIVER_MAN_SUFFIX=4  ;;
-    esac
-fi
-if test x$DRIVER_MAN_DIR = x    ; then
-    DRIVER_MAN_DIR='$(mandir)/man$(DRIVER_MAN_SUFFIX)'
-fi
-
-if test x$ADMIN_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				ADMIN_MAN_SUFFIX=1m ;;
-	*)				ADMIN_MAN_SUFFIX=8  ;;
-    esac
-fi
-if test x$ADMIN_MAN_DIR = x    ; then
-    ADMIN_MAN_DIR='$(mandir)/man$(ADMIN_MAN_SUFFIX)'
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-XORG_MAN_PAGE="X Version 11"
-
-MAN_SUBSTS="\
-	-e 's|__vendorversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xorgversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xservername__|Xorg|g' \
-	-e 's|__xconfigfile__|xorg.conf|g' \
-	-e 's|__projectroot__|\$(prefix)|g' \
-	-e 's|__apploaddir__|\$(appdefaultdir)|g' \
-	-e 's|__appmansuffix__|\$(APP_MAN_SUFFIX)|g' \
-	-e 's|__drivermansuffix__|\$(DRIVER_MAN_SUFFIX)|g' \
-	-e 's|__adminmansuffix__|\$(ADMIN_MAN_SUFFIX)|g' \
-	-e 's|__libmansuffix__|\$(LIB_MAN_SUFFIX)|g' \
-	-e 's|__miscmansuffix__|\$(MISC_MAN_SUFFIX)|g' \
-	-e 's|__filemansuffix__|\$(FILE_MAN_SUFFIX)|g'"
-
-
-
-
-AM_DEFAULT_VERBOSITY=0
-
-
-
-
-
-
-@%:@ Check whether --enable-specs was given.
-if test ${enable_specs+y}
-then :
-  enableval=$enable_specs; build_specs=$enableval
-else case e in @%:@(
-  e) build_specs=yes ;;
-esac
-fi
-
-
- if test x$build_specs = xyes; then
-  ENABLE_SPECS_TRUE=
-  ENABLE_SPECS_FALSE='#'
-else
-  ENABLE_SPECS_TRUE='#'
-  ENABLE_SPECS_FALSE=
-fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build functional specifications" >&5
-printf %s "checking whether to build functional specifications... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $build_specs" >&5
-printf '%s\n' "$build_specs" >&6; }
-
-
-
-
-
-@%:@ Check whether --with-xmlto was given.
-if test ${with_xmlto+y}
-then :
-  withval=$with_xmlto; use_xmlto=$withval
-else case e in @%:@(
-  e) use_xmlto=auto ;;
-esac
-fi
-
-
-
-if test "x$use_xmlto" = x"auto"; then
-   # Extract the first word of "xmlto", so it can be a program name with args.
-set dummy xmlto; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XMLTO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XMLTO in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XMLTO="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XMLTO=$ac_cv_path_XMLTO
-if test -n "$XMLTO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XMLTO" >&5
-printf '%s\n' "$XMLTO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XMLTO" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto not found - documentation targets will be skipped" >&5
-printf '%s\n' "$as_me: WARNING: xmlto not found - documentation targets will be skipped" >&2;}
-	have_xmlto=no
-   else
-        have_xmlto=yes
-   fi
-elif test "x$use_xmlto" = x"yes" ; then
-   # Extract the first word of "xmlto", so it can be a program name with args.
-set dummy xmlto; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XMLTO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XMLTO in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XMLTO="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XMLTO=$ac_cv_path_XMLTO
-if test -n "$XMLTO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XMLTO" >&5
-printf '%s\n' "$XMLTO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XMLTO" = "x"; then
-        as_fn_error $? "--with-xmlto=yes specified but xmlto not found in PATH" "$LINENO" 5
-   fi
-   have_xmlto=yes
-elif test "x$use_xmlto" = x"no" ; then
-   if test "x$XMLTO" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring XMLTO environment variable since --with-xmlto=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring XMLTO environment variable since --with-xmlto=no was specified" >&2;}
-   fi
-   have_xmlto=no
-else
-   as_fn_error $? "--with-xmlto expects 'yes' or 'no'" "$LINENO" 5
-fi
-
-# Test for a minimum version of xmlto, if provided.
-if test "$have_xmlto" = yes; then
-    # scrape the xmlto version
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the xmlto version" >&5
-printf %s "checking the xmlto version... " >&6; }
-    xmlto_version=`$XMLTO --version 2>/dev/null | cut -d' ' -f3`
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xmlto_version" >&5
-printf '%s\n' "$xmlto_version" >&6; }
-    as_arg_v1=$xmlto_version
-as_arg_v2=0.0.22
-awk "$as_awk_strverscmp" v1="$as_arg_v1" v2="$as_arg_v2" /dev/null
-case $? in @%:@(
-  1) :
-    if test "x$use_xmlto" = xauto; then
-            { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto version $xmlto_version found, but 0.0.22 needed" >&5
-printf '%s\n' "$as_me: WARNING: xmlto version $xmlto_version found, but 0.0.22 needed" >&2;}
-            have_xmlto=no
-        else
-            as_fn_error $? "xmlto version $xmlto_version found, but 0.0.22 needed" "$LINENO" 5
-        fi ;; @%:@(
-  0) :
-     ;; @%:@(
-  2) :
-     ;; @%:@(
-  *) :
-     ;;
-esac
-fi
-
-# Test for the ability of xmlto to generate a text target
-#
-# NOTE: xmlto 0.0.27 or higher return a non-zero return code in the
-# following test for empty XML docbook files.
-# For compatibility reasons use the following empty XML docbook file and if
-# it fails try it again with a non-empty XML file.
-have_xmlto_text=no
-cat > conftest.xml << "EOF"
-EOF
-if test "$have_xmlto" = yes
-then :
-  if $XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1
-then :
-  have_xmlto_text=yes
-else case e in @%:@(
-  e) # Try it again with a non-empty XML file.
-              cat > conftest.xml << "EOF"
-<x></x>
-EOF
-              if $XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1
-then :
-  have_xmlto_text=yes
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto cannot generate text format, this format skipped" >&5
-printf '%s\n' "$as_me: WARNING: xmlto cannot generate text format, this format skipped" >&2;} ;;
-esac
-fi ;;
-esac
-fi
-fi
-rm -f conftest.xml
- if test $have_xmlto_text = yes; then
-  HAVE_XMLTO_TEXT_TRUE=
-  HAVE_XMLTO_TEXT_FALSE='#'
-else
-  HAVE_XMLTO_TEXT_TRUE='#'
-  HAVE_XMLTO_TEXT_FALSE=
-fi
-
- if test "$have_xmlto" = yes; then
-  HAVE_XMLTO_TRUE=
-  HAVE_XMLTO_FALSE='#'
-else
-  HAVE_XMLTO_TRUE='#'
-  HAVE_XMLTO_FALSE=
-fi
-
-
-
-
-
-
-@%:@ Check whether --with-fop was given.
-if test ${with_fop+y}
-then :
-  withval=$with_fop; use_fop=$withval
-else case e in @%:@(
-  e) use_fop=auto ;;
-esac
-fi
-
-
-
-if test "x$use_fop" = x"auto"; then
-   # Extract the first word of "fop", so it can be a program name with args.
-set dummy fop; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_FOP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $FOP in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_FOP="$FOP" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_FOP="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-FOP=$ac_cv_path_FOP
-if test -n "$FOP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FOP" >&5
-printf '%s\n' "$FOP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$FOP" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: fop not found - documentation targets will be skipped" >&5
-printf '%s\n' "$as_me: WARNING: fop not found - documentation targets will be skipped" >&2;}
-	have_fop=no
-   else
-        have_fop=yes
-   fi
-elif test "x$use_fop" = x"yes" ; then
-   # Extract the first word of "fop", so it can be a program name with args.
-set dummy fop; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_FOP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $FOP in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_FOP="$FOP" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_FOP="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-FOP=$ac_cv_path_FOP
-if test -n "$FOP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FOP" >&5
-printf '%s\n' "$FOP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$FOP" = "x"; then
-        as_fn_error $? "--with-fop=yes specified but fop not found in PATH" "$LINENO" 5
-   fi
-   have_fop=yes
-elif test "x$use_fop" = x"no" ; then
-   if test "x$FOP" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring FOP environment variable since --with-fop=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring FOP environment variable since --with-fop=no was specified" >&2;}
-   fi
-   have_fop=no
-else
-   as_fn_error $? "--with-fop expects 'yes' or 'no'" "$LINENO" 5
-fi
-
-# Test for a minimum version of fop, if provided.
-
- if test "$have_fop" = yes; then
-  HAVE_FOP_TRUE=
-  HAVE_FOP_FALSE='#'
-else
-  HAVE_FOP_TRUE='#'
-  HAVE_FOP_FALSE=
-fi
-
-
-
-
-# Preserves the interface, should it be implemented later
-
-
-
-@%:@ Check whether --with-xsltproc was given.
-if test ${with_xsltproc+y}
-then :
-  withval=$with_xsltproc; use_xsltproc=$withval
-else case e in @%:@(
-  e) use_xsltproc=auto ;;
-esac
-fi
-
-
-
-if test "x$use_xsltproc" = x"auto"; then
-   # Extract the first word of "xsltproc", so it can be a program name with args.
-set dummy xsltproc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XSLTPROC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XSLTPROC in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XSLTPROC="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XSLTPROC=$ac_cv_path_XSLTPROC
-if test -n "$XSLTPROC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XSLTPROC" >&5
-printf '%s\n' "$XSLTPROC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XSLTPROC" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xsltproc not found - cannot transform XML documents" >&5
-printf '%s\n' "$as_me: WARNING: xsltproc not found - cannot transform XML documents" >&2;}
-	have_xsltproc=no
-   else
-        have_xsltproc=yes
-   fi
-elif test "x$use_xsltproc" = x"yes" ; then
-   # Extract the first word of "xsltproc", so it can be a program name with args.
-set dummy xsltproc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XSLTPROC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XSLTPROC in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XSLTPROC="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XSLTPROC=$ac_cv_path_XSLTPROC
-if test -n "$XSLTPROC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XSLTPROC" >&5
-printf '%s\n' "$XSLTPROC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XSLTPROC" = "x"; then
-        as_fn_error $? "--with-xsltproc=yes specified but xsltproc not found in PATH" "$LINENO" 5
-   fi
-   have_xsltproc=yes
-elif test "x$use_xsltproc" = x"no" ; then
-   if test "x$XSLTPROC" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring XSLTPROC environment variable since --with-xsltproc=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring XSLTPROC environment variable since --with-xsltproc=no was specified" >&2;}
-   fi
-   have_xsltproc=no
-else
-   as_fn_error $? "--with-xsltproc expects 'yes' or 'no'" "$LINENO" 5
-fi
-
- if test "$have_xsltproc" = yes; then
-  HAVE_XSLTPROC_TRUE=
-  HAVE_XSLTPROC_FALSE='#'
-else
-  HAVE_XSLTPROC_TRUE='#'
-  HAVE_XSLTPROC_FALSE=
-fi
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for X.Org SGML entities >= 1.8" >&5
-printf %s "checking for X.Org SGML entities >= 1.8... " >&6; }
-XORG_SGML_PATH=
-if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xorg-sgml-doctools >= 1.8\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xorg-sgml-doctools >= 1.8") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  XORG_SGML_PATH=`$PKG_CONFIG --variable=sgmlrootdir xorg-sgml-doctools`
-else
-  :
-    
-fi
-
-# Define variables STYLESHEET_SRCDIR and XSL_STYLESHEET containing
-# the path and the name of the doc stylesheet
-if test "x$XORG_SGML_PATH" != "x" ; then
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XORG_SGML_PATH" >&5
-printf '%s\n' "$XORG_SGML_PATH" >&6; }
-   STYLESHEET_SRCDIR=$XORG_SGML_PATH/X11
-   XSL_STYLESHEET=$STYLESHEET_SRCDIR/xorg.xsl
-else
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-
-
- if test "x$XSL_STYLESHEET" != "x"; then
-  HAVE_STYLESHEETS_TRUE=
-  HAVE_STYLESHEETS_FALSE='#'
-else
-  HAVE_STYLESHEETS_TRUE='#'
-  HAVE_STYLESHEETS_FALSE=
-fi
-
-
-
-@%:@ Check whether --enable-malloc0returnsnull was given.
-if test ${enable_malloc0returnsnull+y}
-then :
-  enableval=$enable_malloc0returnsnull; MALLOC_ZERO_RETURNS_NULL=$enableval
-else case e in @%:@(
-  e) MALLOC_ZERO_RETURNS_NULL=yes ;;
-esac
-fi
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to act as if malloc(0) can return NULL" >&5
-printf %s "checking whether to act as if malloc(0) can return NULL... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MALLOC_ZERO_RETURNS_NULL" >&5
-printf '%s\n' "$MALLOC_ZERO_RETURNS_NULL" >&6; }
-
-if test "x$MALLOC_ZERO_RETURNS_NULL" = xyes; then
-	MALLOC_ZERO_CFLAGS="-DMALLOC_0_RETURNS_NULL"
-	XMALLOC_ZERO_CFLAGS=$MALLOC_ZERO_CFLAGS
-	XTMALLOC_ZERO_CFLAGS="$MALLOC_ZERO_CFLAGS -DXTMALLOC_BC"
-else
-	MALLOC_ZERO_CFLAGS=""
-	XMALLOC_ZERO_CFLAGS=""
-	XTMALLOC_ZERO_CFLAGS=""
-fi
-
-
-
-
-
-
-# Determine .so library version per platform
-# based on SharedXextRev in monolith xc/config/cf/*Lib.tmpl
-if test "x$XEXT_SOREV" = "x" ; then
-    case $host_os in
-	openbsd*)	XEXT_SOREV=8:0 		;;
-	solaris*)       XEXT_SOREV=0 		;;
-	*)              XEXT_SOREV=6:4:0 	;;
-    esac
-fi
-
-
-# Obtain compiler/linker options for dependencies
-
-pkg_failed=no
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" >&5
-printf %s "checking for xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99... " >&6; }
-
-if test -n "$XEXT_CFLAGS"; then
-    pkg_cv_XEXT_CFLAGS="$XEXT_CFLAGS"
- elif test -n "$PKG_CONFIG"; then
-    if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  pkg_cv_XEXT_CFLAGS=`$PKG_CONFIG --cflags "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes 
-else
-  pkg_failed=yes
-fi
- else
-    pkg_failed=untried
-fi
-if test -n "$XEXT_LIBS"; then
-    pkg_cv_XEXT_LIBS="$XEXT_LIBS"
- elif test -n "$PKG_CONFIG"; then
-    if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  pkg_cv_XEXT_LIBS=`$PKG_CONFIG --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes 
-else
-  pkg_failed=yes
-fi
- else
-    pkg_failed=untried
-fi
-
-
-
-if test $pkg_failed = yes; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        
-if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
-        _pkg_short_errors_supported=yes
-else
-        _pkg_short_errors_supported=no
-fi
-        if test $_pkg_short_errors_supported = yes; then
-                XEXT_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>&1`
-        else
-                XEXT_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>&1`
-        fi
-        # Put the nasty error message in config.log where it belongs
-        echo "$XEXT_PKG_ERRORS" >&5
-
-        as_fn_error $? "Package requirements (xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99) were not met:
-
-$XEXT_PKG_ERRORS
-
-Consider adjusting the PKG_CONFIG_PATH environment variable if you
-installed software in a non-standard prefix.
-
-Alternatively, you may set the environment variables XEXT_CFLAGS
-and XEXT_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details." "$LINENO" 5        
-elif test $pkg_failed = untried; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "The pkg-config script could not be found or is too old.  Make sure it
-is in your PATH or set the PKG_CONFIG environment variable to the full
-path to pkg-config.
-
-Alternatively, you may set the environment variables XEXT_CFLAGS
-and XEXT_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details.
-
-To get pkg-config, see <http://pkg-config.freedesktop.org/>.
-See 'config.log' for more details" "$LINENO" 5; }        
-else
-        XEXT_CFLAGS=$pkg_cv_XEXT_CFLAGS
-        XEXT_LIBS=$pkg_cv_XEXT_LIBS
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-        
-fi
-
-
-    
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for __builtin_popcountl" >&5
-printf %s "checking for __builtin_popcountl... " >&6; }
-if test ${ax_cv_have___builtin_popcountl+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-            __builtin_popcountl(0)
-            
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ax_cv_have___builtin_popcountl=yes
-else case e in @%:@(
-  e) ax_cv_have___builtin_popcountl=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ax_cv_have___builtin_popcountl" >&5
-printf '%s\n' "$ax_cv_have___builtin_popcountl" >&6; }
-
-    if test yes = $ax_cv_have___builtin_popcountl
-then :
-  
-printf '%s\n' "@%:@define HAVE___BUILTIN_POPCOUNTL 1" >>confdefs.h
-
-fi
-
-    
-
-ac_fn_c_check_func "$LINENO" "reallocarray" "ac_cv_func_reallocarray"
-if test "x$ac_cv_func_reallocarray" = xyes
-then :
-  printf '%s\n' "@%:@define HAVE_REALLOCARRAY 1" >>confdefs.h
-
-else case e in @%:@(
-  e) case " $LIB@&t@OBJS " in
-  *" reallocarray.$ac_objext "* ) ;;
-  *) LIB@&t@OBJS="$LIB@&t@OBJS reallocarray.$ac_objext"
- ;;
-esac
- ;;
-esac
-fi
-
-
-# Allow checking code with lint, sparse, etc.
-
-
-
-
-
-@%:@ Check whether --with-lint was given.
-if test ${with_lint+y}
-then :
-  withval=$with_lint; use_lint=$withval
-else case e in @%:@(
-  e) use_lint=no ;;
-esac
-fi
-
-
-# Obtain platform specific info like program name and options
-# The lint program on FreeBSD and NetBSD is different from the one on Solaris
-case $host_os in
-  *linux* | *openbsd* | kfreebsd*-gnu | darwin* | cygwin*)
-	lint_name=splint
-	lint_options="-badflag"
-	;;
-  *freebsd* | *netbsd*)
-	lint_name=lint
-	lint_options="-u -b"
-	;;
-  *solaris*)
-	lint_name=lint
-	lint_options="-u -b -h -erroff=E_INDISTING_FROM_TRUNC2"
-	;;
-esac
-
-# Test for the presence of the program (either guessed by the code or spelled out by the user)
-if test "x$use_lint" = x"yes" ; then
-   # Extract the first word of "$lint_name", so it can be a program name with args.
-set dummy $lint_name; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_LINT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $LINT in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_LINT="$LINT" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_LINT="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-LINT=$ac_cv_path_LINT
-if test -n "$LINT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LINT" >&5
-printf '%s\n' "$LINT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$LINT" = "x"; then
-        as_fn_error $? "--with-lint=yes specified but lint-style tool not found in PATH" "$LINENO" 5
-   fi
-elif test "x$use_lint" = x"no" ; then
-   if test "x$LINT" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring LINT environment variable since --with-lint=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring LINT environment variable since --with-lint=no was specified" >&2;}
-   fi
-else
-   as_fn_error $? "--with-lint expects 'yes' or 'no'. Use LINT variable to specify path." "$LINENO" 5
-fi
-
-# User supplied flags override default flags
-if test "x$LINT_FLAGS" != "x"; then
-   lint_options=$LINT_FLAGS
-fi
-
-LINT_FLAGS=$lint_options
-
- if test "x$LINT" != x; then
-  LINT_TRUE=
-  LINT_FALSE='#'
-else
-  LINT_TRUE='#'
-  LINT_FALSE=
-fi
-
-
-
-
-
-@%:@ Check whether --enable-lint-library was given.
-if test ${enable_lint_library+y}
-then :
-  enableval=$enable_lint_library; make_lint_lib=$enableval
-else case e in @%:@(
-  e) make_lint_lib=no ;;
-esac
-fi
-
-
-if test "x$make_lint_lib" = x"yes" ; then
-   LINTLIB=llib-lXext.ln
-   if test "x$LINT" = "x"; then
-        as_fn_error $? "Cannot make lint library without --with-lint" "$LINENO" 5
-   fi
-elif test "x$make_lint_lib" != x"no" ; then
-   as_fn_error $? "--enable-lint-library expects 'yes' or 'no'." "$LINENO" 5
-fi
-
-
- if test x$make_lint_lib != xno; then
-  MAKE_LINT_LIB_TRUE=
-  MAKE_LINT_LIB_FALSE='#'
-else
-  MAKE_LINT_LIB_TRUE='#'
-  MAKE_LINT_LIB_FALSE=
-fi
-
-
-
-
-ac_config_files="$ac_config_files Makefile man/Makefile src/Makefile specs/Makefile xext.pc"
-
-cat >confcache <<\_ACEOF
-# This file is a shell script that caches the results of configure
-# tests run on this system so they can be shared between configure
-# scripts and configure runs, see configure's option --config-cache.
-# It is not useful on other systems.  If it contains results you don't
-# want to keep, you may remove or edit it.
-#
-# config.status only pays attention to the cache file if you give it
-# the --recheck option to rerun configure.
-#
-# 'ac_cv_env_foo' variables (set or unset) will be overridden when
-# loading this file, other *unset* 'ac_cv_foo' will be assigned the
-# following values.
-
-_ACEOF
-
-ac_cache_dump |
-  sed '
-     /^ac_cv_env_/b end
-     t clear
-     :clear
-     s/^\([^=]*\)=\(.*[{}].*\)$/test ${\1+y} || &/
-     t end
-     s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/
-     :end' >>confcache
-if diff "$cache_file" confcache >/dev/null 2>&1; then :; else
-  if test -w "$cache_file"; then
-    if test "x$cache_file" != "x/dev/null"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5
-printf '%s\n' "$as_me: updating cache $cache_file" >&6;}
-      if test ! -f "$cache_file" || test -h "$cache_file"; then
-	cat confcache >"$cache_file"
-      else
-        case $cache_file in #(
-        */* | ?:*)
-	  mv -f confcache "$cache_file"$$ &&
-	  mv -f "$cache_file"$$ "$cache_file" ;; #(
-        *)
-	  mv -f confcache "$cache_file" ;;
-	esac
-      fi
-    fi
-  else
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5
-printf '%s\n' "$as_me: not updating unwritable cache $cache_file" >&6;}
-  fi
-fi
-rm -f confcache
-
-test "x$prefix" = xNONE && prefix=$ac_default_prefix
-# Let make expand exec_prefix.
-test "x$exec_prefix" = xNONE && exec_prefix='${prefix}'
-
-DEFS=-DHAVE_CONFIG_H
-
-ac_libobjs=
-ac_ltlibobjs=
-U=
-for ac_i in : $LIB@&t@OBJS; do test "x$ac_i" = x: && continue
-  # 1. Remove the extension, and $U if already installed.
-  ac_script='s/\$U\././;s/\.o$//;s/\.obj$//'
-  ac_i=`printf '%s\n' "$ac_i" | sed "$ac_script"`
-  # 2. Prepend LIBOBJDIR.  When used with automake>=1.10 LIBOBJDIR
-  #    will be set to the directory where LIBOBJS objects are built.
-  as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext"
-  as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo'
-done
-LIB@&t@OBJS=$ac_libobjs
-
-LTLIBOBJS=$ac_ltlibobjs
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking that generated files are newer than configure" >&5
-printf %s "checking that generated files are newer than configure... " >&6; }
-   if test -n "$am_sleep_pid"; then
-     # Hide warnings about reused PIDs.
-     wait $am_sleep_pid 2>/dev/null
-   fi
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: done" >&5
-printf '%s\n' "done" >&6; }
-if test -z "${AMDEP_TRUE}" && test -z "${AMDEP_FALSE}"; then
-  as_fn_error $? "conditional \"AMDEP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${am__fastdepCC_TRUE}" && test -z "${am__fastdepCC_FALSE}"; then
-  as_fn_error $? "conditional \"am__fastdepCC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-case $enable_silent_rules in @%:@ (((
-  yes) AM_DEFAULT_VERBOSITY=0;;
-   no) AM_DEFAULT_VERBOSITY=1;;
-esac
-if test $am_cv_make_support_nested_variables = yes; then
-    AM_V='$(V)'
-  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-else
-  AM_V=$AM_DEFAULT_VERBOSITY
-  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
-fi
-
- if test -n "$EXEEXT"; then
-  am__EXEEXT_TRUE=
-  am__EXEEXT_FALSE='#'
-else
-  am__EXEEXT_TRUE='#'
-  am__EXEEXT_FALSE=
-fi
-
-if test -z "${ENABLE_SPECS_TRUE}" && test -z "${ENABLE_SPECS_FALSE}"; then
-  as_fn_error $? "conditional \"ENABLE_SPECS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XMLTO_TEXT_TRUE}" && test -z "${HAVE_XMLTO_TEXT_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XMLTO_TEXT\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XMLTO_TRUE}" && test -z "${HAVE_XMLTO_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XMLTO\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_FOP_TRUE}" && test -z "${HAVE_FOP_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_FOP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XSLTPROC_TRUE}" && test -z "${HAVE_XSLTPROC_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XSLTPROC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_STYLESHEETS_TRUE}" && test -z "${HAVE_STYLESHEETS_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_STYLESHEETS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${LINT_TRUE}" && test -z "${LINT_FALSE}"; then
-  as_fn_error $? "conditional \"LINT\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${MAKE_LINT_LIB_TRUE}" && test -z "${MAKE_LINT_LIB_FALSE}"; then
-  as_fn_error $? "conditional \"MAKE_LINT_LIB\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-
-: "${CONFIG_STATUS=./config.status}"
-case $CONFIG_STATUS in @%:@(
-  -*) :
-    CONFIG_STATUS=./$CONFIG_STATUS ;; @%:@(
-  */*) :
-     ;; @%:@(
-  *) :
-    CONFIG_STATUS=./$CONFIG_STATUS ;;
-esac
-
-ac_write_fail=0
-ac_clean_CONFIG_STATUS='"$CONFIG_STATUS"'
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5
-printf '%s\n' "$as_me: creating $CONFIG_STATUS" >&6;}
-as_write_fail=0
-cat >"$CONFIG_STATUS" <<_ASEOF || as_write_fail=1
-#! $SHELL
-# Generated by $as_me.
-# Run this file to recreate the current configuration.
-# Compiler output produced by configure, useful for debugging
-# configure, is in config.log if it exists.
-
-debug=false
-ac_cs_recheck=false
-ac_cs_silent=false
-
-SHELL=\${CONFIG_SHELL-$SHELL}
-export SHELL
-_ASEOF
-cat >>"$CONFIG_STATUS" <<\_ASEOF || as_write_fail=1
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else case e in @%:@(
-  e) case `(set -o) 2>/dev/null` in @%:@(
-  *posix*) :
-    set -o posix ;; @%:@(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-
-
-
-# Reset variables that may have inherited troublesome values from
-# the environment.
-
-# IFS needs to be set, to space, tab, and newline, in precisely that order.
-# (If _AS_PATH_WALK were called with IFS unset, it would have the
-# side effect of setting IFS to empty, thus disabling word splitting.)
-# Quoting is to prevent editors from complaining about space-tab.
-as_nl='
-'
-export as_nl
-IFS=" ""	$as_nl"
-
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# Ensure predictable behavior from utilities with locale-dependent output.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# We cannot yet rely on "unset" to work, but we need these variables
-# to be unset--not just set to an empty or harmless value--now, to
-# avoid bugs in old shells (e.g. pre-3.0 UWIN ksh).  This construct
-# also avoids known problems related to "unset" and subshell syntax
-# in other old shells (e.g. bash 2.01 and pdksh 5.2.14).
-for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH
-do eval test \${$as_var+y} \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-
-# Ensure that fds 0, 1, and 2 are open.
-if (exec 3>&0) 2>/dev/null; then :; else exec 0</dev/null; fi
-if (exec 3>&1) 2>/dev/null; then :; else exec 1>/dev/null; fi
-if (exec 3>&2)            ; then :; else exec 2>/dev/null; fi
-
-# The user is always right.
-if ${PATH_SEPARATOR+false} :; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in @%:@((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    test -r "$as_dir$0" && as_myself=$as_dir$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as 'sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  printf '%s\n' "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-
-
-@%:@ as_fn_error STATUS ERROR [LINENO LOG_FD]
-@%:@ ----------------------------------------
-@%:@ Output "`basename @S|@0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-@%:@ provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-@%:@ script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  printf '%s\n' "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} @%:@ as_fn_error
-
-
-@%:@ as_fn_set_status STATUS
-@%:@ -----------------------
-@%:@ Set @S|@? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} @%:@ as_fn_set_status
-
-@%:@ as_fn_exit STATUS
-@%:@ -----------------
-@%:@ Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} @%:@ as_fn_exit
-
-@%:@ as_fn_unset VAR
-@%:@ ---------------
-@%:@ Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-@%:@ as_fn_append VAR VALUE
-@%:@ ----------------------
-@%:@ Append the text in VALUE to the end of the definition contained in VAR. Take
-@%:@ advantage of any shell optimizations that allow amortized linear growth over
-@%:@ repeated appends, instead of the typical quadratic growth present in naive
-@%:@ implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null
-then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else case e in @%:@(
-  e) as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  } ;;
-esac
-fi # as_fn_append
-
-@%:@ as_fn_arith ARG...
-@%:@ ------------------
-@%:@ Perform arithmetic evaluation on the ARGs, and store the result in the
-@%:@ global @S|@as_val. Take advantage of shells that can avoid forks. The arguments
-@%:@ must be portable across @S|@(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null
-then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else case e in @%:@(
-  e) as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  } ;;
-esac
-fi # as_fn_arith
-
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both 'ln -s file dir' and 'ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; 'ln -s' creates a wrapper executable.
-    # In both cases, we have to default to 'cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-
-@%:@ as_fn_mkdir_p
-@%:@ -------------
-@%:@ Create "@S|@as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`printf '%s\n' "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} @%:@ as_fn_mkdir_p
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-
-@%:@ as_fn_executable_p FILE
-@%:@ -----------------------
-@%:@ Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} @%:@ as_fn_executable_p
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_sed_cpp="y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g"
-as_tr_cpp="eval sed '$as_sed_cpp'" # deprecated
-
-# Sed expression to map a string onto a valid variable name.
-as_sed_sh="y%*+%pp%;s%[^_$as_cr_alnum]%_%g"
-as_tr_sh="eval sed '$as_sed_sh'" # deprecated
-
-
-exec 6>&1
-## ------------------------------------- ##
-## Main body of "$CONFIG_STATUS" script. ##
-## ------------------------------------- ##
-_ASEOF
-test $as_write_fail = 0 && chmod +x "$CONFIG_STATUS" || ac_write_fail=1
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# Save the log message, to keep $0 and so on meaningful, and to
-# report actual input values of CONFIG_FILES etc. instead of their
-# values after options handling.
-ac_log="
-This file was extended by libXext $as_me 1.3.7, which was
-generated by GNU Autoconf 2.73.  Invocation command line was
-
-  CONFIG_FILES    = $CONFIG_FILES
-  CONFIG_HEADERS  = $CONFIG_HEADERS
-  CONFIG_LINKS    = $CONFIG_LINKS
-  CONFIG_COMMANDS = $CONFIG_COMMANDS
-  $ $0 $@
-
-on `(hostname || uname -n) 2>/dev/null | sed 1q`
-"
-
-_ACEOF
-
-case $ac_config_files in *"
-"*) set x $ac_config_files; shift; ac_config_files=$*;;
-esac
-
-case $ac_config_headers in *"
-"*) set x $ac_config_headers; shift; ac_config_headers=$*;;
-esac
-
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-# Files that config.status was made for.
-config_files="$ac_config_files"
-config_headers="$ac_config_headers"
-config_commands="$ac_config_commands"
-
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-ac_cs_usage="\
-'$as_me' instantiates files and other configuration actions
-from templates according to the current configuration.  Unless the files
-and actions are specified as TAGs, all are instantiated by default.
-
-Usage: $0 [OPTION]... [TAG]...
-
-  -h, --help       print this help, then exit
-  -V, --version    print version number and configuration settings, then exit
-      --config     print configuration, then exit
-  -q, --quiet, --silent
-                   do not print progress messages
-  -d, --debug      don't remove temporary files
-      --recheck    update $as_me by reconfiguring in the same conditions
-      --file=FILE[:TEMPLATE] 
-                   instantiate the configuration file FILE
-      --header=FILE[:TEMPLATE] 
-                   instantiate the configuration header FILE
-
-Configuration files:
-$config_files
-
-Configuration headers:
-$config_headers
-
-Configuration commands:
-$config_commands
-
-Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>."
-
-_ACEOF
-ac_cs_config=`printf '%s\n' "$ac_configure_args" | sed "$ac_safe_unquote"`
-ac_cs_config_escaped=`printf '%s\n' "$ac_cs_config" | sed "s/^ //; s/'/'\\\\\\\\''/g"`
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-ac_cs_config='$ac_cs_config_escaped'
-ac_cs_version="\\
-libXext config.status 1.3.7
-configured by $0, generated by GNU Autoconf 2.73,
-  with options \\"\$ac_cs_config\\"
-
-Copyright (C) 2026 Free Software Foundation, Inc.
-This config.status script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it."
-
-ac_pwd='$ac_pwd'
-srcdir='$srcdir'
-INSTALL='$INSTALL'
-MKDIR_P='$MKDIR_P'
-AWK='$AWK'
-test -n "\$AWK" || {
-  awk '' </dev/null ||
-    as_fn_error \$? "try installing gawk"
-  AWK=awk
-}
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# The default lists apply if the user does not specify any file.
-ac_need_defaults=:
-while test $# != 0
-do
-  case $1 in
-  --*=?*)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'`
-    ac_shift=:
-    ;;
-  --*=)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=
-    ac_shift=:
-    ;;
-  *)
-    ac_option=$1
-    ac_optarg=$2
-    ac_shift=shift
-    ;;
-  esac
-
-  case $ac_option in
-  # Handling of the options.
-  -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r)
-    ac_cs_recheck=: ;;
-  --version | --versio | --versi | --vers | --ver | --ve | --v | -V )
-    printf '%s\n' "$ac_cs_version"; exit ;;
-  --config | --confi | --conf | --con | --co | --c )
-    printf '%s\n' "$ac_cs_config"; exit ;;
-  --debug | --debu | --deb | --de | --d | -d )
-    debug=: ;;
-  --file | --fil | --fi | --f )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf '%s\n' "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    '') as_fn_error $? "missing file argument" ;;
-    esac
-    as_fn_append CONFIG_FILES " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --header | --heade | --head | --hea )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf '%s\n' "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    as_fn_append CONFIG_HEADERS " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --he | --h)
-    # Conflict between --help and --header
-    as_fn_error $? "ambiguous option: '$1'
-Try '$0 --help' for more information.";;
-  --help | --hel | -h )
-    printf '%s\n' "$ac_cs_usage"; exit ;;
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil | --si | --s)
-    ac_cs_silent=: ;;
-
-  # This is an error.
-  -*) as_fn_error $? "unrecognized option: '$1'
-Try '$0 --help' for more information." ;;
-
-  *) as_fn_append ac_config_targets " $1"
-     ac_need_defaults=false ;;
-
-  esac
-  shift
-done
-
-ac_configure_extra_args=
-
-if $ac_cs_silent; then
-  exec 6>/dev/null
-  ac_configure_extra_args="$ac_configure_extra_args --silent"
-fi
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-if \$ac_cs_recheck; then
-  set X $SHELL '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion
-  shift
-  \printf '%s\n' "running CONFIG_SHELL=$SHELL \$*" >&6
-  CONFIG_SHELL='$SHELL'
-  export CONFIG_SHELL
-  exec "\$@"
-fi
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-exec 5>>config.log
-{
-  echo
-  sed 'h;s/./-/g;s/^.../@%:@@%:@ /;s/...$/ @%:@@%:@/;p;x;p;x' <<_ASBOX
-@%:@@%:@ Running $as_me. @%:@@%:@
-_ASBOX
-  printf '%s\n' "$ac_log"
-} >&5
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-#
-# INIT-COMMANDS
-#
-AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}"
-
-
-# The HP-UX ksh and POSIX shell print the target directory to stdout
-# if CDPATH is set.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-sed_quote_subst='$sed_quote_subst'
-double_quote_subst='$double_quote_subst'
-delay_variable_subst='$delay_variable_subst'
-macro_version='`$ECHO "$macro_version" | $SED "$delay_single_quote_subst"`'
-macro_revision='`$ECHO "$macro_revision" | $SED "$delay_single_quote_subst"`'
-enable_shared='`$ECHO "$enable_shared" | $SED "$delay_single_quote_subst"`'
-enable_static='`$ECHO "$enable_static" | $SED "$delay_single_quote_subst"`'
-pic_mode='`$ECHO "$pic_mode" | $SED "$delay_single_quote_subst"`'
-enable_fast_install='`$ECHO "$enable_fast_install" | $SED "$delay_single_quote_subst"`'
-shared_archive_member_spec='`$ECHO "$shared_archive_member_spec" | $SED "$delay_single_quote_subst"`'
-SHELL='`$ECHO "$SHELL" | $SED "$delay_single_quote_subst"`'
-ECHO='`$ECHO "$ECHO" | $SED "$delay_single_quote_subst"`'
-PATH_SEPARATOR='`$ECHO "$PATH_SEPARATOR" | $SED "$delay_single_quote_subst"`'
-host_alias='`$ECHO "$host_alias" | $SED "$delay_single_quote_subst"`'
-host='`$ECHO "$host" | $SED "$delay_single_quote_subst"`'
-host_os='`$ECHO "$host_os" | $SED "$delay_single_quote_subst"`'
-build_alias='`$ECHO "$build_alias" | $SED "$delay_single_quote_subst"`'
-build='`$ECHO "$build" | $SED "$delay_single_quote_subst"`'
-build_os='`$ECHO "$build_os" | $SED "$delay_single_quote_subst"`'
-SED='`$ECHO "$SED" | $SED "$delay_single_quote_subst"`'
-Xsed='`$ECHO "$Xsed" | $SED "$delay_single_quote_subst"`'
-GREP='`$ECHO "$GREP" | $SED "$delay_single_quote_subst"`'
-EGREP='`$ECHO "$EGREP" | $SED "$delay_single_quote_subst"`'
-FGREP='`$ECHO "$FGREP" | $SED "$delay_single_quote_subst"`'
-LD='`$ECHO "$LD" | $SED "$delay_single_quote_subst"`'
-NM='`$ECHO "$NM" | $SED "$delay_single_quote_subst"`'
-LN_S='`$ECHO "$LN_S" | $SED "$delay_single_quote_subst"`'
-max_cmd_len='`$ECHO "$max_cmd_len" | $SED "$delay_single_quote_subst"`'
-ac_objext='`$ECHO "$ac_objext" | $SED "$delay_single_quote_subst"`'
-exeext='`$ECHO "$exeext" | $SED "$delay_single_quote_subst"`'
-lt_unset='`$ECHO "$lt_unset" | $SED "$delay_single_quote_subst"`'
-lt_SP2NL='`$ECHO "$lt_SP2NL" | $SED "$delay_single_quote_subst"`'
-lt_NL2SP='`$ECHO "$lt_NL2SP" | $SED "$delay_single_quote_subst"`'
-lt_cv_to_host_file_cmd='`$ECHO "$lt_cv_to_host_file_cmd" | $SED "$delay_single_quote_subst"`'
-lt_cv_to_tool_file_cmd='`$ECHO "$lt_cv_to_tool_file_cmd" | $SED "$delay_single_quote_subst"`'
-reload_flag='`$ECHO "$reload_flag" | $SED "$delay_single_quote_subst"`'
-reload_cmds='`$ECHO "$reload_cmds" | $SED "$delay_single_quote_subst"`'
-FILECMD='`$ECHO "$FILECMD" | $SED "$delay_single_quote_subst"`'
-OBJDUMP='`$ECHO "$OBJDUMP" | $SED "$delay_single_quote_subst"`'
-deplibs_check_method='`$ECHO "$deplibs_check_method" | $SED "$delay_single_quote_subst"`'
-file_magic_cmd='`$ECHO "$file_magic_cmd" | $SED "$delay_single_quote_subst"`'
-file_magic_glob='`$ECHO "$file_magic_glob" | $SED "$delay_single_quote_subst"`'
-want_nocaseglob='`$ECHO "$want_nocaseglob" | $SED "$delay_single_quote_subst"`'
-DLLTOOL='`$ECHO "$DLLTOOL" | $SED "$delay_single_quote_subst"`'
-sharedlib_from_linklib_cmd='`$ECHO "$sharedlib_from_linklib_cmd" | $SED "$delay_single_quote_subst"`'
-AR='`$ECHO "$AR" | $SED "$delay_single_quote_subst"`'
-lt_ar_flags='`$ECHO "$lt_ar_flags" | $SED "$delay_single_quote_subst"`'
-AR_FLAGS='`$ECHO "$AR_FLAGS" | $SED "$delay_single_quote_subst"`'
-archiver_list_spec='`$ECHO "$archiver_list_spec" | $SED "$delay_single_quote_subst"`'
-STRIP='`$ECHO "$STRIP" | $SED "$delay_single_quote_subst"`'
-RANLIB='`$ECHO "$RANLIB" | $SED "$delay_single_quote_subst"`'
-old_postinstall_cmds='`$ECHO "$old_postinstall_cmds" | $SED "$delay_single_quote_subst"`'
-old_postuninstall_cmds='`$ECHO "$old_postuninstall_cmds" | $SED "$delay_single_quote_subst"`'
-old_archive_cmds='`$ECHO "$old_archive_cmds" | $SED "$delay_single_quote_subst"`'
-lock_old_archive_extraction='`$ECHO "$lock_old_archive_extraction" | $SED "$delay_single_quote_subst"`'
-CC='`$ECHO "$CC" | $SED "$delay_single_quote_subst"`'
-CFLAGS='`$ECHO "$CFLAGS" | $SED "$delay_single_quote_subst"`'
-compiler='`$ECHO "$compiler" | $SED "$delay_single_quote_subst"`'
-GCC='`$ECHO "$GCC" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_pipe='`$ECHO "$lt_cv_sys_global_symbol_pipe" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_cdecl='`$ECHO "$lt_cv_sys_global_symbol_to_cdecl" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_import='`$ECHO "$lt_cv_sys_global_symbol_to_import" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_c_name_address='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address_lib_prefix" | $SED "$delay_single_quote_subst"`'
-lt_cv_nm_interface='`$ECHO "$lt_cv_nm_interface" | $SED "$delay_single_quote_subst"`'
-nm_file_list_spec='`$ECHO "$nm_file_list_spec" | $SED "$delay_single_quote_subst"`'
-lt_sysroot='`$ECHO "$lt_sysroot" | $SED "$delay_single_quote_subst"`'
-lt_cv_truncate_bin='`$ECHO "$lt_cv_truncate_bin" | $SED "$delay_single_quote_subst"`'
-objdir='`$ECHO "$objdir" | $SED "$delay_single_quote_subst"`'
-MAGIC_CMD='`$ECHO "$MAGIC_CMD" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_no_builtin_flag='`$ECHO "$lt_prog_compiler_no_builtin_flag" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_pic='`$ECHO "$lt_prog_compiler_pic" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_wl='`$ECHO "$lt_prog_compiler_wl" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_static='`$ECHO "$lt_prog_compiler_static" | $SED "$delay_single_quote_subst"`'
-lt_cv_prog_compiler_c_o='`$ECHO "$lt_cv_prog_compiler_c_o" | $SED "$delay_single_quote_subst"`'
-need_locks='`$ECHO "$need_locks" | $SED "$delay_single_quote_subst"`'
-MANIFEST_TOOL='`$ECHO "$MANIFEST_TOOL" | $SED "$delay_single_quote_subst"`'
-DSYMUTIL='`$ECHO "$DSYMUTIL" | $SED "$delay_single_quote_subst"`'
-NMEDIT='`$ECHO "$NMEDIT" | $SED "$delay_single_quote_subst"`'
-LIPO='`$ECHO "$LIPO" | $SED "$delay_single_quote_subst"`'
-OTOOL='`$ECHO "$OTOOL" | $SED "$delay_single_quote_subst"`'
-OTOOL64='`$ECHO "$OTOOL64" | $SED "$delay_single_quote_subst"`'
-libext='`$ECHO "$libext" | $SED "$delay_single_quote_subst"`'
-shrext_cmds='`$ECHO "$shrext_cmds" | $SED "$delay_single_quote_subst"`'
-extract_expsyms_cmds='`$ECHO "$extract_expsyms_cmds" | $SED "$delay_single_quote_subst"`'
-archive_cmds_need_lc='`$ECHO "$archive_cmds_need_lc" | $SED "$delay_single_quote_subst"`'
-enable_shared_with_static_runtimes='`$ECHO "$enable_shared_with_static_runtimes" | $SED "$delay_single_quote_subst"`'
-export_dynamic_flag_spec='`$ECHO "$export_dynamic_flag_spec" | $SED "$delay_single_quote_subst"`'
-whole_archive_flag_spec='`$ECHO "$whole_archive_flag_spec" | $SED "$delay_single_quote_subst"`'
-compiler_needs_object='`$ECHO "$compiler_needs_object" | $SED "$delay_single_quote_subst"`'
-old_archive_from_new_cmds='`$ECHO "$old_archive_from_new_cmds" | $SED "$delay_single_quote_subst"`'
-old_archive_from_expsyms_cmds='`$ECHO "$old_archive_from_expsyms_cmds" | $SED "$delay_single_quote_subst"`'
-archive_cmds='`$ECHO "$archive_cmds" | $SED "$delay_single_quote_subst"`'
-archive_expsym_cmds='`$ECHO "$archive_expsym_cmds" | $SED "$delay_single_quote_subst"`'
-module_cmds='`$ECHO "$module_cmds" | $SED "$delay_single_quote_subst"`'
-module_expsym_cmds='`$ECHO "$module_expsym_cmds" | $SED "$delay_single_quote_subst"`'
-with_gnu_ld='`$ECHO "$with_gnu_ld" | $SED "$delay_single_quote_subst"`'
-allow_undefined_flag='`$ECHO "$allow_undefined_flag" | $SED "$delay_single_quote_subst"`'
-no_undefined_flag='`$ECHO "$no_undefined_flag" | $SED "$delay_single_quote_subst"`'
-hardcode_libdir_flag_spec='`$ECHO "$hardcode_libdir_flag_spec" | $SED "$delay_single_quote_subst"`'
-hardcode_libdir_separator='`$ECHO "$hardcode_libdir_separator" | $SED "$delay_single_quote_subst"`'
-hardcode_direct='`$ECHO "$hardcode_direct" | $SED "$delay_single_quote_subst"`'
-hardcode_direct_absolute='`$ECHO "$hardcode_direct_absolute" | $SED "$delay_single_quote_subst"`'
-hardcode_minus_L='`$ECHO "$hardcode_minus_L" | $SED "$delay_single_quote_subst"`'
-hardcode_shlibpath_var='`$ECHO "$hardcode_shlibpath_var" | $SED "$delay_single_quote_subst"`'
-hardcode_automatic='`$ECHO "$hardcode_automatic" | $SED "$delay_single_quote_subst"`'
-inherit_rpath='`$ECHO "$inherit_rpath" | $SED "$delay_single_quote_subst"`'
-link_all_deplibs='`$ECHO "$link_all_deplibs" | $SED "$delay_single_quote_subst"`'
-always_export_symbols='`$ECHO "$always_export_symbols" | $SED "$delay_single_quote_subst"`'
-export_symbols_cmds='`$ECHO "$export_symbols_cmds" | $SED "$delay_single_quote_subst"`'
-exclude_expsyms='`$ECHO "$exclude_expsyms" | $SED "$delay_single_quote_subst"`'
-include_expsyms='`$ECHO "$include_expsyms" | $SED "$delay_single_quote_subst"`'
-prelink_cmds='`$ECHO "$prelink_cmds" | $SED "$delay_single_quote_subst"`'
-postlink_cmds='`$ECHO "$postlink_cmds" | $SED "$delay_single_quote_subst"`'
-file_list_spec='`$ECHO "$file_list_spec" | $SED "$delay_single_quote_subst"`'
-variables_saved_for_relink='`$ECHO "$variables_saved_for_relink" | $SED "$delay_single_quote_subst"`'
-need_lib_prefix='`$ECHO "$need_lib_prefix" | $SED "$delay_single_quote_subst"`'
-need_version='`$ECHO "$need_version" | $SED "$delay_single_quote_subst"`'
-version_type='`$ECHO "$version_type" | $SED "$delay_single_quote_subst"`'
-runpath_var='`$ECHO "$runpath_var" | $SED "$delay_single_quote_subst"`'
-shlibpath_var='`$ECHO "$shlibpath_var" | $SED "$delay_single_quote_subst"`'
-shlibpath_overrides_runpath='`$ECHO "$shlibpath_overrides_runpath" | $SED "$delay_single_quote_subst"`'
-libname_spec='`$ECHO "$libname_spec" | $SED "$delay_single_quote_subst"`'
-library_names_spec='`$ECHO "$library_names_spec" | $SED "$delay_single_quote_subst"`'
-soname_spec='`$ECHO "$soname_spec" | $SED "$delay_single_quote_subst"`'
-install_override_mode='`$ECHO "$install_override_mode" | $SED "$delay_single_quote_subst"`'
-postinstall_cmds='`$ECHO "$postinstall_cmds" | $SED "$delay_single_quote_subst"`'
-postuninstall_cmds='`$ECHO "$postuninstall_cmds" | $SED "$delay_single_quote_subst"`'
-finish_cmds='`$ECHO "$finish_cmds" | $SED "$delay_single_quote_subst"`'
-finish_eval='`$ECHO "$finish_eval" | $SED "$delay_single_quote_subst"`'
-hardcode_into_libs='`$ECHO "$hardcode_into_libs" | $SED "$delay_single_quote_subst"`'
-sys_lib_search_path_spec='`$ECHO "$sys_lib_search_path_spec" | $SED "$delay_single_quote_subst"`'
-configure_time_dlsearch_path='`$ECHO "$configure_time_dlsearch_path" | $SED "$delay_single_quote_subst"`'
-configure_time_lt_sys_library_path='`$ECHO "$configure_time_lt_sys_library_path" | $SED "$delay_single_quote_subst"`'
-hardcode_action='`$ECHO "$hardcode_action" | $SED "$delay_single_quote_subst"`'
-enable_dlopen='`$ECHO "$enable_dlopen" | $SED "$delay_single_quote_subst"`'
-enable_dlopen_self='`$ECHO "$enable_dlopen_self" | $SED "$delay_single_quote_subst"`'
-enable_dlopen_self_static='`$ECHO "$enable_dlopen_self_static" | $SED "$delay_single_quote_subst"`'
-old_striplib='`$ECHO "$old_striplib" | $SED "$delay_single_quote_subst"`'
-striplib='`$ECHO "$striplib" | $SED "$delay_single_quote_subst"`'
-
-LTCC='$LTCC'
-LTCFLAGS='$LTCFLAGS'
-compiler='$compiler_DEFAULT'
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-\$1
-_LTECHO_EOF'
-}
-
-# Quote evaled strings.
-for var in SHELL \
-ECHO \
-PATH_SEPARATOR \
-SED \
-GREP \
-EGREP \
-FGREP \
-LD \
-NM \
-LN_S \
-lt_SP2NL \
-lt_NL2SP \
-reload_flag \
-FILECMD \
-OBJDUMP \
-deplibs_check_method \
-file_magic_cmd \
-file_magic_glob \
-want_nocaseglob \
-DLLTOOL \
-sharedlib_from_linklib_cmd \
-AR \
-archiver_list_spec \
-STRIP \
-RANLIB \
-CC \
-CFLAGS \
-compiler \
-lt_cv_sys_global_symbol_pipe \
-lt_cv_sys_global_symbol_to_cdecl \
-lt_cv_sys_global_symbol_to_import \
-lt_cv_sys_global_symbol_to_c_name_address \
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix \
-lt_cv_nm_interface \
-nm_file_list_spec \
-lt_cv_truncate_bin \
-lt_prog_compiler_no_builtin_flag \
-lt_prog_compiler_pic \
-lt_prog_compiler_wl \
-lt_prog_compiler_static \
-lt_cv_prog_compiler_c_o \
-need_locks \
-MANIFEST_TOOL \
-DSYMUTIL \
-NMEDIT \
-LIPO \
-OTOOL \
-OTOOL64 \
-shrext_cmds \
-export_dynamic_flag_spec \
-whole_archive_flag_spec \
-compiler_needs_object \
-with_gnu_ld \
-allow_undefined_flag \
-no_undefined_flag \
-hardcode_libdir_flag_spec \
-hardcode_libdir_separator \
-exclude_expsyms \
-include_expsyms \
-file_list_spec \
-variables_saved_for_relink \
-libname_spec \
-library_names_spec \
-soname_spec \
-install_override_mode \
-finish_eval \
-old_striplib \
-striplib; do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[\\\\\\\`\\"\\\$]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-# Double-quote double-evaled strings.
-for var in reload_cmds \
-old_postinstall_cmds \
-old_postuninstall_cmds \
-old_archive_cmds \
-extract_expsyms_cmds \
-old_archive_from_new_cmds \
-old_archive_from_expsyms_cmds \
-archive_cmds \
-archive_expsym_cmds \
-module_cmds \
-module_expsym_cmds \
-export_symbols_cmds \
-prelink_cmds \
-postlink_cmds \
-postinstall_cmds \
-postuninstall_cmds \
-finish_cmds \
-sys_lib_search_path_spec \
-configure_time_dlsearch_path \
-configure_time_lt_sys_library_path; do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[\\\\\\\`\\"\\\$]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-ac_aux_dir='$ac_aux_dir'
-
-# See if we are running on zsh, and set the options that allow our
-# commands through without removal of \ escapes INIT.
-if test -n "\${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-
-    PACKAGE='$PACKAGE'
-    VERSION='$VERSION'
-    RM='$RM'
-    ofile='$ofile'
-
-
-
-
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-
-# Handling of arguments.
-for ac_config_target in $ac_config_targets
-do
-  case $ac_config_target in
-    "config.h") CONFIG_HEADERS="$CONFIG_HEADERS config.h" ;;
-    "depfiles") CONFIG_COMMANDS="$CONFIG_COMMANDS depfiles" ;;
-    "libtool") CONFIG_COMMANDS="$CONFIG_COMMANDS libtool" ;;
-    "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;;
-    "man/Makefile") CONFIG_FILES="$CONFIG_FILES man/Makefile" ;;
-    "src/Makefile") CONFIG_FILES="$CONFIG_FILES src/Makefile" ;;
-    "specs/Makefile") CONFIG_FILES="$CONFIG_FILES specs/Makefile" ;;
-    "xext.pc") CONFIG_FILES="$CONFIG_FILES xext.pc" ;;
-
-  *) as_fn_error $? "invalid argument: '$ac_config_target'" "$LINENO" 5;;
-  esac
-done
-
-
-# If the user did not use the arguments to specify the items to instantiate,
-# then the envvar interface is used.  Set only those that are not.
-# We use the long form for the default assignment because of an extremely
-# bizarre bug on SunOS 4.1.3.
-if $ac_need_defaults; then
-  test ${CONFIG_FILES+y} || CONFIG_FILES=$config_files
-  test ${CONFIG_HEADERS+y} || CONFIG_HEADERS=$config_headers
-  test ${CONFIG_COMMANDS+y} || CONFIG_COMMANDS=$config_commands
-fi
-
-# Have a temporary directory for convenience.  Make it in the build tree
-# simply because there is no reason against having it here, and in addition,
-# creating and moving files from /tmp can sometimes cause problems.
-# Hook for its removal unless debugging.
-# Note that there is a small window in which the directory will not be cleaned:
-# after its creation but before its name has been assigned to '$tmp'.
-$debug ||
-{
-  tmp= ac_tmp=
-  trap 'exit_status=$?
-  : "${ac_tmp:=$tmp}"
-  { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status
-' 0
-  trap 'as_fn_exit 1' 1 2 13 15
-}
-# Create a (secure) tmp directory for tmp files.
-
-{
-  tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` &&
-  test -d "$tmp"
-}  ||
-{
-  tmp=./conf$$-$RANDOM
-  (umask 077 && mkdir "$tmp")
-} || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5
-ac_tmp=$tmp
-
-# Set up the scripts for CONFIG_FILES section.
-# No need to generate them if there are no CONFIG_FILES.
-# This happens for instance with './config.status config.h'.
-if test -n "$CONFIG_FILES"; then
-
-
-ac_cr=`echo X | tr X '\015'`
-# On cygwin, bash can eat \r inside `` if the user requested igncr.
-# But we know of no other shell where ac_cr would be empty at this
-# point, so we can use a bashism as a fallback.
-if test "x$ac_cr" = x; then
-  eval ac_cr=\$\'\\r\'
-fi
-ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' </dev/null 2>/dev/null`
-if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then
-  ac_cs_awk_cr='\\r'
-else
-  ac_cs_awk_cr=$ac_cr
-fi
-
-echo 'BEGIN {' >"$ac_tmp/subs1.awk" &&
-_ACEOF
-
-
-{
-  echo "cat >conf$$subs.awk <<_ACEOF" &&
-  echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' &&
-  echo "_ACEOF"
-} >conf$$subs.sh ||
-  as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-ac_delim_num=`echo "$ac_subst_vars" | sed -n '$='`
-ac_delim='%!_!# '
-for ac_last_try in false false false false false :; do
-  . ./conf$$subs.sh ||
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-
-  ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | sed -n '$='`
-  if test $ac_delim_n = $ac_delim_num; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-rm -f conf$$subs.sh
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK &&
-_ACEOF
-sed -n '
-h
-s/^/S["/; s/!.*/"]=/
-p
-g
-s/^[^!]*!//
-:repl
-t repl
-s/'"$ac_delim"'$//
-t delim
-:nl
-h
-s/\(.\{148\}\)..*/\1/
-t more1
-s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/
-p
-n
-b repl
-:more1
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t nl
-:delim
-h
-s/\(.\{148\}\)..*/\1/
-t more2
-s/["\\]/\\&/g; s/^/"/; s/$/"/
-p
-b
-:more2
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t delim
-' <conf$$subs.awk | sed '
-/^[^""]/{
-  N
-  s/\n//
-}
-' >>"$CONFIG_STATUS" || ac_write_fail=1
-rm -f conf$$subs.awk
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-_ACAWK
-cat >>"\$ac_tmp/subs1.awk" <<_ACAWK &&
-  for (key in S) S_is_set[key] = 1
-  FS = ""
-
-}
-{
-  line = $ 0
-  nfields = split(line, field, "@")
-  substed = 0
-  len = length(field[1])
-  for (i = 2; i < nfields; i++) {
-    key = field[i]
-    keylen = length(key)
-    if (S_is_set[key]) {
-      value = S[key]
-      line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3)
-      len += length(value) + length(field[++i])
-      substed = 1
-    } else
-      len += 1 + keylen
-  }
-
-  print line
-}
-
-_ACAWK
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then
-  sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g"
-else
-  cat
-fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \
-  || as_fn_error $? "could not setup config files machinery" "$LINENO" 5
-_ACEOF
-
-# VPATH may cause trouble with some makes, so we remove sole $(srcdir),
-# ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and
-# trailing colons and then remove the whole line if VPATH becomes empty
-# (actually we leave an empty line to preserve line numbers).
-if test "x$srcdir" = x.; then
-  ac_vpsub='/^[	 ]*VPATH[	 ]*=[	 ]*/{
-h
-s///
-s/^/:/
-s/[	 ]*$/:/
-s/:\$(srcdir):/:/g
-s/:\${srcdir}:/:/g
-s/:@srcdir@:/:/g
-s/^:*//
-s/:*$//
-x
-s/\(=[	 ]*\).*/\1/
-G
-s/\n//
-s/^[^=]*=[	 ]*$//
-}'
-fi
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-fi # test -n "$CONFIG_FILES"
-
-# Set up the scripts for CONFIG_HEADERS section.
-# No need to generate them if there are no CONFIG_HEADERS.
-# This happens for instance with './config.status Makefile'.
-if test -n "$CONFIG_HEADERS"; then
-cat >"$ac_tmp/defines.awk" <<\_ACAWK ||
-BEGIN {
-_ACEOF
-
-# Transform confdefs.h into an awk script 'defines.awk', embedded as
-# here-document in config.status, that substitutes the proper values into
-# config.h.in to produce config.h.
-
-# Create a delimiter string that does not exist in confdefs.h, to ease
-# handling of long lines.
-ac_delim='%!_!# '
-for ac_last_try in false false :; do
-  ac_tt=`sed -n "/$ac_delim/p" confdefs.h`
-  if test -z "$ac_tt"; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-
-# For the awk script, D is an array of macro values keyed by name,
-# likewise P contains macro parameters if any.  Preserve backslash
-# newline sequences.
-
-ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]*
-sed -n '
-s/.\{148\}/&'"$ac_delim"'/g
-t rset
-:rset
-s/^[	 ]*#[	 ]*define[	 ][	 ]*/ /
-t def
-d
-:def
-s/\\$//
-t bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3"/p
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2"/p
-d
-:bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3\\\\\\n"\\/p
-t cont
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p
-t cont
-d
-:cont
-n
-s/.\{148\}/&'"$ac_delim"'/g
-t clear
-:clear
-s/\\$//
-t bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/"/p
-d
-:bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p
-b cont
-' <confdefs.h | sed '
-s/'"$ac_delim"'/"\\\
-"/g' >>"$CONFIG_STATUS" || ac_write_fail=1
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-  for (key in D) D_is_set[key] = 1
-  FS = ""
-}
-/^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ {
-  line = \$ 0
-  split(line, arg, " ")
-  if (arg[1] == "#") {
-    defundef = arg[2]
-    mac1 = arg[3]
-  } else {
-    defundef = substr(arg[1], 2)
-    mac1 = arg[2]
-  }
-  split(mac1, mac2, "(") #)
-  macro = mac2[1]
-  prefix = substr(line, 1, index(line, defundef) - 1)
-  if (D_is_set[macro]) {
-    suffix = P[macro] D[macro]
-    while (suffix ~ /[\t ]$/) {
-      suffix = substr(suffix, 1, length(suffix) - 1)
-    }
-    # Preserve the white space surrounding the "#".
-    print prefix "define", macro suffix
-    next
-  } else {
-    # Replace #undef with comments.  This is necessary, for example,
-    # in the case of _POSIX_SOURCE, which is predefined and required
-    # on some systems where configure will not decide to define it.
-    if (defundef == "undef") {
-      print "/*", prefix defundef, macro, "*/"
-      next
-    }
-  }
-}
-{ print }
-_ACAWK
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-  as_fn_error $? "could not setup config headers machinery" "$LINENO" 5
-fi # test -n "$CONFIG_HEADERS"
-
-
-eval set X "  :F $CONFIG_FILES  :H $CONFIG_HEADERS    :C $CONFIG_COMMANDS"
-shift
-for ac_tag
-do
-  case $ac_tag in
-  :[FHLC]) ac_mode=$ac_tag; continue;;
-  esac
-  case $ac_mode$ac_tag in
-  :[FHL]*:*);;
-  :L* | :C*:*) as_fn_error $? "invalid tag '$ac_tag'" "$LINENO" 5;;
-  :[FH]-) ac_tag=-:-;;
-  :[FH]*) ac_tag=$ac_tag:$ac_tag.in;;
-  esac
-  ac_save_IFS=$IFS
-  IFS=:
-  set x $ac_tag
-  IFS=$ac_save_IFS
-  shift
-  ac_file=$1
-  shift
-
-  case $ac_mode in
-  :L) ac_source=$1;;
-  :[FH])
-    ac_file_inputs=
-    for ac_f
-    do
-      case $ac_f in
-      -) ac_f="$ac_tmp/stdin";;
-      *) # Look for the file first in the build tree, then in the source tree
-	 # (if the path is not absolute).  The absolute path cannot be DOS-style,
-	 # because $ac_f cannot contain ':'.
-	 test -f "$ac_f" ||
-	   case $ac_f in
-	   [\\/$]*) false;;
-	   *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";;
-	   esac ||
-	   as_fn_error 1 "cannot find input file: '$ac_f'" "$LINENO" 5;;
-      esac
-      case $ac_f in *\'*) ac_f=`printf '%s\n' "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac
-      as_fn_append ac_file_inputs " '$ac_f'"
-    done
-
-    # Let's still pretend it is 'configure' which instantiates (i.e., don't
-    # use $as_me), people would be surprised to read:
-    #    /* config.h.  Generated by config.status.  */
-    configure_input='Generated from '`
-	  printf '%s\n' "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g'
-	`' by configure.'
-    if test x"$ac_file" != x-; then
-      configure_input="$ac_file.  $configure_input"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5
-printf '%s\n' "$as_me: creating $ac_file" >&6;}
-    fi
-    # Neutralize special characters interpreted by sed in replacement strings.
-    case $configure_input in #(
-    *\&* | *\|* | *\\* )
-       ac_sed_conf_input=`printf '%s\n' "$configure_input" |
-       sed 's/[\\\\&|]/\\\\&/g'`;; #(
-    *) ac_sed_conf_input=$configure_input;;
-    esac
-
-    case $ac_tag in
-    *:-:* | *:-) cat >"$ac_tmp/stdin" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;;
-    esac
-    ;;
-  esac
-
-  ac_dir=`$as_dirname -- "$ac_file" ||
-$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$ac_file" : 'X\(//\)[^/]' \| \
-	 X"$ac_file" : 'X\(//\)$' \| \
-	 X"$ac_file" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$ac_file" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  as_dir="$ac_dir"; as_fn_mkdir_p
-  ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`printf '%s\n' "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`printf '%s\n' "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-
-  case $ac_mode in
-  :F)
-  #
-  # CONFIG_FILE
-  #
-
-  case $INSTALL in
-  [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;;
-  *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;;
-  esac
-  ac_MKDIR_P=$MKDIR_P
-  case $MKDIR_P in
-  [\\/$]* | ?:[\\/]* ) ;;
-  */*) ac_MKDIR_P=$ac_top_build_prefix$MKDIR_P ;;
-  esac
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# If the template does not know about datarootdir, expand it.
-# FIXME: This hack should be removed a few years after 2.60.
-ac_datarootdir_hack=; ac_datarootdir_seen=
-ac_sed_dataroot='
-/datarootdir/ {
-  p
-  q
-}
-/@datadir@/p
-/@docdir@/p
-/@infodir@/p
-/@localedir@/p
-/@mandir@/p'
-case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in
-*datarootdir*) ac_datarootdir_seen=yes;;
-*@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*)
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5
-printf '%s\n' "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;}
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-  ac_datarootdir_hack='
-  s&@datadir@&$datadir&g
-  s&@docdir@&$docdir&g
-  s&@infodir@&$infodir&g
-  s&@localedir@&$localedir&g
-  s&@mandir@&$mandir&g
-  s&\\\${datarootdir}&$datarootdir&g' ;;
-esac
-_ACEOF
-
-# Neutralize VPATH when '$srcdir' = '.'.
-# Shell code in configure.ac might set extrasub.
-# FIXME: do we really want to maintain this feature?
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-ac_sed_extra="$ac_vpsub
-$extrasub
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-:t
-/@[a-zA-Z_][a-zA-Z_0-9]*@/!b
-s|@configure_input@|$ac_sed_conf_input|;t t
-s&@top_builddir@&$ac_top_builddir_sub&;t t
-s&@top_build_prefix@&$ac_top_build_prefix&;t t
-s&@srcdir@&$ac_srcdir&;t t
-s&@abs_srcdir@&$ac_abs_srcdir&;t t
-s&@top_srcdir@&$ac_top_srcdir&;t t
-s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t
-s&@builddir@&$ac_builddir&;t t
-s&@abs_builddir@&$ac_abs_builddir&;t t
-s&@abs_top_builddir@&$ac_abs_top_builddir&;t t
-s&@INSTALL@&$ac_INSTALL&;t t
-s&@MKDIR_P@&$ac_MKDIR_P&;t t
-$ac_datarootdir_hack
-"
-eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \
-  >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-
-test -z "$ac_datarootdir_hack$ac_datarootdir_seen" &&
-  { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } &&
-  { ac_out=`sed -n '/^[	 ]*datarootdir[	 ]*:*=/p' \
-      "$ac_tmp/out"`; test -z "$ac_out"; } &&
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable 'datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&5
-printf '%s\n' "$as_me: WARNING: $ac_file contains a reference to the variable 'datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&2;}
-
-  rm -f "$ac_tmp/stdin"
-  case $ac_file in
-  -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";;
-  *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";;
-  esac \
-  || as_fn_error $? "could not create $ac_file" "$LINENO" 5
- ;;
-  :H)
-  #
-  # CONFIG_HEADER
-  #
-  if test x"$ac_file" != x-; then
-    {
-      printf '%s\n' "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs"
-    } >"$ac_tmp/config.h" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5
-printf '%s\n' "$as_me: $ac_file is unchanged" >&6;}
-    else
-      rm -f "$ac_file"
-      mv "$ac_tmp/config.h" "$ac_file" \
-	|| as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    fi
-  else
-    printf '%s\n' "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \
-      || as_fn_error $? "could not create -" "$LINENO" 5
-  fi
-# Compute "$ac_file"'s index in $config_headers.
-_am_arg="$ac_file"
-_am_stamp_count=1
-for _am_header in $config_headers :; do
-  case $_am_header in
-    $_am_arg | $_am_arg:* )
-      break ;;
-    * )
-      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
-  esac
-done
-echo "timestamp for $_am_arg" >`$as_dirname -- "$_am_arg" ||
-$as_expr X"$_am_arg" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$_am_arg" : 'X\(//\)[^/]' \| \
-	 X"$_am_arg" : 'X\(//\)$' \| \
-	 X"$_am_arg" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$_am_arg" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`/stamp-h$_am_stamp_count
- ;;
-  
-  :C)  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: executing $ac_file commands" >&5
-printf '%s\n' "$as_me: executing $ac_file commands" >&6;}
- ;;
-  esac
-
-
-  case $ac_file$ac_mode in
-    "depfiles":C) test x"$AMDEP_TRUE" != x"" || {
-  # Older Autoconf quotes --file arguments for eval, but not when files
-  # are listed without --file.  Let's play safe and only enable the eval
-  # if we detect the quoting.
-  # TODO: see whether this extra hack can be removed once we start
-  # requiring Autoconf 2.70 or later.
-  case $CONFIG_FILES in @%:@(
-  *\'*) :
-    eval set x "$CONFIG_FILES" ;; @%:@(
-  *) :
-    set x $CONFIG_FILES ;; @%:@(
-  *) :
-     ;;
-esac
-  shift
-  # Used to flag and report bootstrapping failures.
-  am_rc=0
-  for am_mf
-  do
-    # Strip MF so we end up with the name of the file.
-    am_mf=`printf '%s\n' "$am_mf" | sed -e 's/:.*$//'`
-    # Check whether this is an Automake generated Makefile which includes
-    # dependency-tracking related rules and includes.
-    # Grep'ing the whole file directly is not great: AIX grep has a line
-    # limit of 2048, but all sed's we know have understand at least 4000.
-    sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \
-      || continue
-    am_dirpart=`$as_dirname -- "$am_mf" ||
-$as_expr X"$am_mf" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$am_mf" : 'X\(//\)[^/]' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$am_mf" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    am_filepart=`$as_basename -- "$am_mf" ||
-$as_expr X/"$am_mf" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$am_mf" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    { echo "$as_me:$LINENO: cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles" >&5
-   (cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } || am_rc=$?
-  done
-  if test $am_rc -ne 0; then
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "Something went wrong bootstrapping makefile fragments
-    for automatic dependency tracking.  If GNU make was not used, consider
-    re-running the configure script with MAKE=\"gmake\" (or whatever is
-    necessary).  You can also try re-running configure with the
-    '--disable-dependency-tracking' option to at least be able to build
-    the package (albeit without support for automatic dependency tracking).
-See 'config.log' for more details" "$LINENO" 5; }
-  fi
-  { am_dirpart=; unset am_dirpart;}
-  { am_filepart=; unset am_filepart;}
-  { am_mf=; unset am_mf;}
-  { am_rc=; unset am_rc;}
-  rm -f conftest-deps.mk
-}
- ;;
-    "libtool":C) 
-    
-    # See if we are running on zsh, and set the options that allow our
-    # commands through without removal of \ escapes.
-    if test -n "${ZSH_VERSION+set}"; then
-      setopt NO_GLOB_SUBST
-    fi
-
-    cfgfile=${ofile}T
-    trap "$RM \"$cfgfile\"; exit 1" 1 2 15
-    $RM "$cfgfile"
-
-    cat <<_LT_EOF >> "$cfgfile"
-#! $SHELL
-# Generated automatically by $as_me ($PACKAGE) $VERSION
-# NOTE: Changes made to this file will be lost: look at ltmain.sh.
-
-# Provide generalized library-building support services.
-# Written by Gordon Matzigkeit, 1996
-
-# Copyright (C) 2024 Free Software Foundation, Inc.
-# This is free software; see the source for copying conditions.  There is NO
-# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-
-# GNU Libtool is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program or library that is built
-# using GNU Libtool, you may include this file under the  same
-# distribution terms that you use for the rest of that program.
-#
-# GNU Libtool is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-
-# The names of the tagged configurations supported by this script.
-available_tags=''
-
-# Configured defaults for sys_lib_dlsearch_path munging.
-: \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"}
-
-# ### BEGIN LIBTOOL CONFIG
-
-# Which release of libtool.m4 was used?
-macro_version=$macro_version
-macro_revision=$macro_revision
-
-# Whether or not to build shared libraries.
-build_libtool_libs=$enable_shared
-
-# Whether or not to build static libraries.
-build_old_libs=$enable_static
-
-# What type of objects to build.
-pic_mode=$pic_mode
-
-# Whether or not to optimize for fast installation.
-fast_install=$enable_fast_install
-
-# Shared archive member basename,for filename based shared library versioning on AIX.
-shared_archive_member_spec=$shared_archive_member_spec
-
-# Shell to use when invoking shell scripts.
-SHELL=$lt_SHELL
-
-# An echo program that protects backslashes.
-ECHO=$lt_ECHO
-
-# The PATH separator for the build system.
-PATH_SEPARATOR=$lt_PATH_SEPARATOR
-
-# The host system.
-host_alias=$host_alias
-host=$host
-host_os=$host_os
-
-# The build system.
-build_alias=$build_alias
-build=$build
-build_os=$build_os
-
-# A sed program that does not truncate output.
-SED=$lt_SED
-
-# Sed that helps us avoid accidentally triggering echo(1) options like -n.
-Xsed="\$SED -e 1s/^X//"
-
-# A grep program that handles long lines.
-GREP=$lt_GREP
-
-# An ERE matcher.
-EGREP=$lt_EGREP
-
-# A literal string matcher.
-FGREP=$lt_FGREP
-
-# A BSD- or MS-compatible name lister.
-NM=$lt_NM
-
-# Whether we need soft or hard links.
-LN_S=$lt_LN_S
-
-# What is the maximum length of a command?
-max_cmd_len=$max_cmd_len
-
-# Object file suffix (normally "o").
-objext=$ac_objext
-
-# Executable file suffix (normally "").
-exeext=$exeext
-
-# whether the shell understands "unset".
-lt_unset=$lt_unset
-
-# turn spaces into newlines.
-SP2NL=$lt_lt_SP2NL
-
-# turn newlines into spaces.
-NL2SP=$lt_lt_NL2SP
-
-# convert \$build file names to \$host format.
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-
-# convert \$build files to toolchain format.
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-
-# A file(cmd) program that detects file types.
-FILECMD=$lt_FILECMD
-
-# An object symbol dumper.
-OBJDUMP=$lt_OBJDUMP
-
-# Method to check whether dependent libraries are shared objects.
-deplibs_check_method=$lt_deplibs_check_method
-
-# Command to use when deplibs_check_method = "file_magic".
-file_magic_cmd=$lt_file_magic_cmd
-
-# How to find potential files when deplibs_check_method = "file_magic".
-file_magic_glob=$lt_file_magic_glob
-
-# Find potential files using nocaseglob when deplibs_check_method = "file_magic".
-want_nocaseglob=$lt_want_nocaseglob
-
-# DLL creation program.
-DLLTOOL=$lt_DLLTOOL
-
-# Command to associate shared and link libraries.
-sharedlib_from_linklib_cmd=$lt_sharedlib_from_linklib_cmd
-
-# The archiver.
-AR=$lt_AR
-
-# Flags to create an archive (by configure).
-lt_ar_flags=$lt_ar_flags
-
-# Flags to create an archive.
-AR_FLAGS=\@S|@{ARFLAGS-"\@S|@lt_ar_flags"}
-
-# How to feed a file listing to the archiver.
-archiver_list_spec=$lt_archiver_list_spec
-
-# A symbol stripping program.
-STRIP=$lt_STRIP
-
-# Commands used to install an old-style archive.
-RANLIB=$lt_RANLIB
-old_postinstall_cmds=$lt_old_postinstall_cmds
-old_postuninstall_cmds=$lt_old_postuninstall_cmds
-
-# Whether to use a lock for old archive extraction.
-lock_old_archive_extraction=$lock_old_archive_extraction
-
-# A C compiler.
-LTCC=$lt_CC
-
-# LTCC compiler flags.
-LTCFLAGS=$lt_CFLAGS
-
-# Take the output of nm and produce a listing of raw symbols and C names.
-global_symbol_pipe=$lt_lt_cv_sys_global_symbol_pipe
-
-# Transform the output of nm in a proper C declaration.
-global_symbol_to_cdecl=$lt_lt_cv_sys_global_symbol_to_cdecl
-
-# Transform the output of nm into a list of symbols to manually relocate.
-global_symbol_to_import=$lt_lt_cv_sys_global_symbol_to_import
-
-# Transform the output of nm in a C name address pair.
-global_symbol_to_c_name_address=$lt_lt_cv_sys_global_symbol_to_c_name_address
-
-# Transform the output of nm in a C name address pair when lib prefix is needed.
-global_symbol_to_c_name_address_lib_prefix=$lt_lt_cv_sys_global_symbol_to_c_name_address_lib_prefix
-
-# The name lister interface.
-nm_interface=$lt_lt_cv_nm_interface
-
-# Specify filename containing input files for \$NM.
-nm_file_list_spec=$lt_nm_file_list_spec
-
-# The root where to search for dependent libraries,and where our libraries should be installed.
-lt_sysroot=$lt_sysroot
-
-# Command to truncate a binary pipe.
-lt_truncate_bin=$lt_lt_cv_truncate_bin
-
-# The name of the directory that contains temporary libtool files.
-objdir=$objdir
-
-# Used to examine libraries when file_magic_cmd begins with "file".
-MAGIC_CMD=$MAGIC_CMD
-
-# Must we lock files when doing compilation?
-need_locks=$lt_need_locks
-
-# Manifest tool.
-MANIFEST_TOOL=$lt_MANIFEST_TOOL
-
-# Tool to manipulate archived DWARF debug symbol files on Mac OS X.
-DSYMUTIL=$lt_DSYMUTIL
-
-# Tool to change global to local symbols on Mac OS X.
-NMEDIT=$lt_NMEDIT
-
-# Tool to manipulate fat objects and archives on Mac OS X.
-LIPO=$lt_LIPO
-
-# ldd/readelf like tool for Mach-O binaries on Mac OS X.
-OTOOL=$lt_OTOOL
-
-# ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4.
-OTOOL64=$lt_OTOOL64
-
-# Old archive suffix (normally "a").
-libext=$libext
-
-# Shared library suffix (normally ".so").
-shrext_cmds=$lt_shrext_cmds
-
-# The commands to extract the exported symbol list from a shared archive.
-extract_expsyms_cmds=$lt_extract_expsyms_cmds
-
-# Variables whose values should be saved in libtool wrapper scripts and
-# restored at link time.
-variables_saved_for_relink=$lt_variables_saved_for_relink
-
-# Do we need the "lib" prefix for modules?
-need_lib_prefix=$need_lib_prefix
-
-# Do we need a version for libraries?
-need_version=$need_version
-
-# Library versioning type.
-version_type=$version_type
-
-# Shared library runtime path variable.
-runpath_var=$runpath_var
-
-# Shared library path variable.
-shlibpath_var=$shlibpath_var
-
-# Is shlibpath searched before the hard-coded library search path?
-shlibpath_overrides_runpath=$shlibpath_overrides_runpath
-
-# Format of library name prefix.
-libname_spec=$lt_libname_spec
-
-# List of archive names.  First name is the real one, the rest are links.
-# The last name is the one that the linker finds with -lNAME
-library_names_spec=$lt_library_names_spec
-
-# The coded name of the library, if different from the real name.
-soname_spec=$lt_soname_spec
-
-# Permission mode override for installation of shared libraries.
-install_override_mode=$lt_install_override_mode
-
-# Command to use after installation of a shared archive.
-postinstall_cmds=$lt_postinstall_cmds
-
-# Command to use after uninstallation of a shared archive.
-postuninstall_cmds=$lt_postuninstall_cmds
-
-# Commands used to finish a libtool library installation in a directory.
-finish_cmds=$lt_finish_cmds
-
-# As "finish_cmds", except a single script fragment to be evaled but
-# not shown.
-finish_eval=$lt_finish_eval
-
-# Whether we should hardcode library paths into libraries.
-hardcode_into_libs=$hardcode_into_libs
-
-# Compile-time system search path for libraries.
-sys_lib_search_path_spec=$lt_sys_lib_search_path_spec
-
-# Detected run-time system search path for libraries.
-sys_lib_dlsearch_path_spec=$lt_configure_time_dlsearch_path
-
-# Explicit LT_SYS_LIBRARY_PATH set during ./configure time.
-configure_time_lt_sys_library_path=$lt_configure_time_lt_sys_library_path
-
-# Whether dlopen is supported.
-dlopen_support=$enable_dlopen
-
-# Whether dlopen of programs is supported.
-dlopen_self=$enable_dlopen_self
-
-# Whether dlopen of statically linked programs is supported.
-dlopen_self_static=$enable_dlopen_self_static
-
-# Commands to strip libraries.
-old_striplib=$lt_old_striplib
-striplib=$lt_striplib
-
-
-# The linker used to build libraries.
-LD=$lt_LD
-
-# How to create reloadable object files.
-reload_flag=$lt_reload_flag
-reload_cmds=$lt_reload_cmds
-
-# Commands used to build an old-style archive.
-old_archive_cmds=$lt_old_archive_cmds
-
-# A language specific compiler.
-CC=$lt_compiler
-
-# Is the compiler the GNU compiler?
-with_gcc=$GCC
-
-# Compiler flag to turn off builtin functions.
-no_builtin_flag=$lt_lt_prog_compiler_no_builtin_flag
-
-# Additional compiler flags for building library objects.
-pic_flag=$lt_lt_prog_compiler_pic
-
-# How to pass a linker flag through the compiler.
-wl=$lt_lt_prog_compiler_wl
-
-# Compiler flag to prevent dynamic linking.
-link_static_flag=$lt_lt_prog_compiler_static
-
-# Does compiler simultaneously support -c and -o options?
-compiler_c_o=$lt_lt_cv_prog_compiler_c_o
-
-# Whether or not to add -lc for building shared libraries.
-build_libtool_need_lc=$archive_cmds_need_lc
-
-# Whether or not to disallow shared libs when runtime libs are static.
-allow_libtool_libs_with_static_runtimes=$enable_shared_with_static_runtimes
-
-# Compiler flag to allow reflexive dlopens.
-export_dynamic_flag_spec=$lt_export_dynamic_flag_spec
-
-# Compiler flag to generate shared objects directly from archives.
-whole_archive_flag_spec=$lt_whole_archive_flag_spec
-
-# Whether the compiler copes with passing no objects directly.
-compiler_needs_object=$lt_compiler_needs_object
-
-# Create an old-style archive from a shared archive.
-old_archive_from_new_cmds=$lt_old_archive_from_new_cmds
-
-# Create a temporary old-style archive to link instead of a shared archive.
-old_archive_from_expsyms_cmds=$lt_old_archive_from_expsyms_cmds
-
-# Commands used to build a shared archive.
-archive_cmds=$lt_archive_cmds
-archive_expsym_cmds=$lt_archive_expsym_cmds
-
-# Commands used to build a loadable module if different from building
-# a shared archive.
-module_cmds=$lt_module_cmds
-module_expsym_cmds=$lt_module_expsym_cmds
-
-# Whether we are building with GNU ld or not.
-with_gnu_ld=$lt_with_gnu_ld
-
-# Flag that allows shared libraries with undefined symbols to be built.
-allow_undefined_flag=$lt_allow_undefined_flag
-
-# Flag that enforces no undefined symbols.
-no_undefined_flag=$lt_no_undefined_flag
-
-# Flag to hardcode \$libdir into a binary during linking.
-# This must work even if \$libdir does not exist
-hardcode_libdir_flag_spec=$lt_hardcode_libdir_flag_spec
-
-# Whether we need a single "-rpath" flag with a separated argument.
-hardcode_libdir_separator=$lt_hardcode_libdir_separator
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary.
-hardcode_direct=$hardcode_direct
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary and the resulting library dependency is
-# "absolute",i.e. impossible to change by setting \$shlibpath_var if the
-# library is relocated.
-hardcode_direct_absolute=$hardcode_direct_absolute
-
-# Set to "yes" if using the -LDIR flag during linking hardcodes DIR
-# into the resulting binary.
-hardcode_minus_L=$hardcode_minus_L
-
-# Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR
-# into the resulting binary.
-hardcode_shlibpath_var=$hardcode_shlibpath_var
-
-# Set to "yes" if building a shared library automatically hardcodes DIR
-# into the library and all subsequent libraries and executables linked
-# against it.
-hardcode_automatic=$hardcode_automatic
-
-# Set to yes if linker adds runtime paths of dependent libraries
-# to runtime path list.
-inherit_rpath=$inherit_rpath
-
-# Whether libtool must link a program against all its dependency libraries.
-link_all_deplibs=$link_all_deplibs
-
-# Set to "yes" if exported symbols are required.
-always_export_symbols=$always_export_symbols
-
-# The commands to list exported symbols.
-export_symbols_cmds=$lt_export_symbols_cmds
-
-# Symbols that should not be listed in the preloaded symbols.
-exclude_expsyms=$lt_exclude_expsyms
-
-# Symbols that must always be exported.
-include_expsyms=$lt_include_expsyms
-
-# Commands necessary for linking programs (against libraries) with templates.
-prelink_cmds=$lt_prelink_cmds
-
-# Commands necessary for finishing linking programs.
-postlink_cmds=$lt_postlink_cmds
-
-# Specify filename containing input files.
-file_list_spec=$lt_file_list_spec
-
-# How to hardcode a shared library path into an executable.
-hardcode_action=$hardcode_action
-
-# ### END LIBTOOL CONFIG
-
-_LT_EOF
-
-    cat <<'_LT_EOF' >> "$cfgfile"
-
-# ### BEGIN FUNCTIONS SHARED WITH CONFIGURE
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x@S|@2 in
-    x)
-        ;;
-    *:)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\"
-        ;;
-    x:*)
-        eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\"
-        ;;
-    *)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in @S|@*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-
-# ### END FUNCTIONS SHARED WITH CONFIGURE
-
-_LT_EOF
-
-  case $host_os in
-  aix3*)
-    cat <<\_LT_EOF >> "$cfgfile"
-# AIX sometimes has problems with the GCC collect2 program.  For some
-# reason, if we set the COLLECT_NAMES environment variable, the problems
-# vanish in a puff of smoke.
-if test set != "${COLLECT_NAMES+set}"; then
-  COLLECT_NAMES=
-  export COLLECT_NAMES
-fi
-_LT_EOF
-    ;;
-  esac
-
-  
-  
-ltmain=$ac_aux_dir/ltmain.sh
-
-
-  # We use sed instead of cat because bash on DJGPP gets confused if
-  # if finds mixed CR/LF and LF-only lines.  Since sed operates in
-  # text mode, it properly converts lines to CR/LF.  This bash problem
-  # is reportedly fixed, but why not run on old versions too?
-  $SED '$q' "$ltmain" >> "$cfgfile" \
-     || (rm -f "$cfgfile"; exit 1)
-
-   mv -f "$cfgfile" "$ofile" ||
-    (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile")
-  chmod +x "$ofile"
-
- ;;
-
-  esac
-done # for ac_tag
-
-
-as_fn_exit 0
-_ACEOF
-ac_clean_CONFIG_STATUS=
-
-test $ac_write_fail = 0 ||
-  as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5
-
-
-# configure is writing to config.log, and then calls config.status.
-# config.status does its own redirection, appending to config.log.
-# Unfortunately, on DOS this fails, as config.log is still kept open
-# by configure, so config.status won't be able to write to it; its
-# output is simply discarded.  So we exec the FD to /dev/null,
-# effectively closing config.log, so it can be properly (re)opened and
-# appended to by config.status.  When coming back to configure, we
-# need to make the FD available again.
-if test "$no_create" != yes; then
-  ac_cs_success=:
-  case $CONFIG_STATUS in @%:@(
-  -*) :
-    ac_no_opts=-- ;; @%:@(
-  *) :
-    ac_no_opts= ;;
-esac
-  ac_config_status_args=
-  test "$silent" = yes &&
-    ac_config_status_args="$ac_config_status_args --quiet"
-  exec 5>/dev/null
-  $SHELL $ac_no_opts "$CONFIG_STATUS" $ac_config_status_args ||
-    ac_cs_success=false
-  exec 5>>config.log
-  # Use ||, not &&, to avoid exiting from the if with $? = 1, which
-  # would make configure fail if this is the last instruction.
-  $ac_cs_success || as_fn_exit 1
-fi
-if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5
-printf '%s\n' "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
-fi
-
diff --git a/experiments/wasm-gui/third_party/libXext/autom4te.cache/output.1 b/experiments/wasm-gui/third_party/libXext/autom4te.cache/output.1
deleted file mode 100644
index c0c8c80c2..000000000
--- a/experiments/wasm-gui/third_party/libXext/autom4te.cache/output.1
+++ /dev/null
@@ -1,24109 +0,0 @@
-@%:@! /bin/sh
-@%:@ Guess values for system-dependent variables and create Makefiles.
-@%:@ Generated by GNU Autoconf 2.73 for libXext 1.3.7.
-@%:@
-@%:@ Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>.
-@%:@ 
-@%:@ 
-@%:@ Copyright (C) 1992-1996, 1998-2017, 2020-2026 Free Software Foundation,
-@%:@ Inc.
-@%:@ 
-@%:@ 
-@%:@ This configure script is free software; the Free Software Foundation
-@%:@ gives unlimited permission to copy, distribute and modify it.
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else case e in @%:@(
-  e) case `(set -o) 2>/dev/null` in @%:@(
-  *posix*) :
-    set -o posix ;; @%:@(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-
-
-
-# Reset variables that may have inherited troublesome values from
-# the environment.
-
-# IFS needs to be set, to space, tab, and newline, in precisely that order.
-# (If _AS_PATH_WALK were called with IFS unset, it would have the
-# side effect of setting IFS to empty, thus disabling word splitting.)
-# Quoting is to prevent editors from complaining about space-tab.
-as_nl='
-'
-export as_nl
-IFS=" ""	$as_nl"
-
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# Ensure predictable behavior from utilities with locale-dependent output.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# We cannot yet rely on "unset" to work, but we need these variables
-# to be unset--not just set to an empty or harmless value--now, to
-# avoid bugs in old shells (e.g. pre-3.0 UWIN ksh).  This construct
-# also avoids known problems related to "unset" and subshell syntax
-# in other old shells (e.g. bash 2.01 and pdksh 5.2.14).
-for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH
-do eval test \${$as_var+y} \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-
-# Ensure that fds 0, 1, and 2 are open.
-if (exec 3>&0) 2>/dev/null; then :; else exec 0</dev/null; fi
-if (exec 3>&1) 2>/dev/null; then :; else exec 1>/dev/null; fi
-if (exec 3>&2)            ; then :; else exec 2>/dev/null; fi
-
-# The user is always right.
-if ${PATH_SEPARATOR+false} :; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in @%:@((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    test -r "$as_dir$0" && as_myself=$as_dir$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as 'sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  printf '%s\n' "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-
-# Use a proper internal environment variable to ensure we don't fall
-  # into an infinite loop, continuously re-executing ourselves.
-  if test x"${_as_can_reexec}" != xno && test "x$CONFIG_SHELL" != x; then
-    _as_can_reexec=no; export _as_can_reexec;
-    # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in @%:@ ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-case $@%:@ in @%:@ ((
-  0) exec $CONFIG_SHELL $as_opts "$as_myself" ;;
-  *) exec $CONFIG_SHELL $as_opts "$as_myself" "$@" ;;
-esac
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed 'exec'.
-printf '%s\n' "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-  fi
-  # We don't want this to propagate to other subprocesses.
-          { _as_can_reexec=; unset _as_can_reexec;}
-if test "x$CONFIG_SHELL" = x; then
-  as_bourne_compatible="if test \${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '\${1+\"\$@\"}'='\"\$@\"'
-  setopt NO_GLOB_SUBST
-else case e in @%:@(
-  e) case \`(set -o) 2>/dev/null\` in @%:@(
-  *posix*) :
-    set -o posix ;; @%:@(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-"
-  as_required="as_fn_return () { (exit \$1); }
-as_fn_success () { as_fn_return 0; }
-as_fn_failure () { as_fn_return 1; }
-as_fn_ret_success () { return 0; }
-as_fn_ret_failure () { return 1; }
-
-exitcode=0
-as_fn_success || { exitcode=1; echo as_fn_success failed.; }
-as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; }
-as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; }
-as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; }
-if ( set x; as_fn_ret_success y && test x = \"\$1\" )
-then :
-  
-else case e in @%:@(
-  e) exitcode=1; echo positional parameters were not saved. ;;
-esac
-fi
-test x\$exitcode = x0 || exit 1
-blah=\$(echo \$(echo blah))
-test x\"\$blah\" = xblah || exit 1
-test -x / || exit 1"
-  as_suggested="  as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO
-  as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO
-  eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" &&
-  test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1
-
-  test -n \"\${ZSH_VERSION+set}\${BASH_VERSION+set}\" || (
-    ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-    ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO
-    ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO
-    PATH=/empty FPATH=/empty; export PATH FPATH
-    test \"X\`printf %s \$ECHO\`\" = \"X\$ECHO\" \\
-      || test \"X\`print -r -- \$ECHO\`\" = \"X\$ECHO\" ) || exit 1
-test \$(( 1 + 1 )) = 2 || exit 1"
-  if (eval "$as_required") 2>/dev/null
-then :
-  as_have_required=yes
-else case e in @%:@(
-  e) as_have_required=no ;;
-esac
-fi
-  if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null
-then :
-  
-else case e in @%:@(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-  as_found=:
-  case $as_dir in @%:@(
-	 /*)
-	   for as_base in sh bash ksh sh5; do
-	     # Try only shells that exist, to save several forks.
-	     as_shell=$as_dir$as_base
-	     if { test -f "$as_shell" || test -f "$as_shell.exe"; } &&
-		    as_run=a "$as_shell" -c "$as_bourne_compatible""$as_required" 2>/dev/null
-then :
-  CONFIG_SHELL=$as_shell as_have_required=yes
-		   if as_run=a "$as_shell" -c "$as_bourne_compatible""$as_suggested" 2>/dev/null
-then :
-  break 2
-fi
-fi
-	   done;;
-       esac
-  as_found=false
-done
-IFS=$as_save_IFS
-if $as_found
-then :
-  
-else case e in @%:@(
-  e) if { test -f "$SHELL" || test -f "$SHELL.exe"; } &&
-	      as_run=a "$SHELL" -c "$as_bourne_compatible""$as_required" 2>/dev/null
-then :
-  CONFIG_SHELL=$SHELL as_have_required=yes
-fi ;;
-esac
-fi
-
-
-      if test "x$CONFIG_SHELL" != x
-then :
-  export CONFIG_SHELL
-             # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in @%:@ ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-case $@%:@ in @%:@ ((
-  0) exec $CONFIG_SHELL $as_opts "$as_myself" ;;
-  *) exec $CONFIG_SHELL $as_opts "$as_myself" "$@" ;;
-esac
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed 'exec'.
-printf '%s\n' "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-fi
-
-    if test x$as_have_required = xno
-then :
-  printf '%s\n' "$0: This script requires a shell more modern than all"
-  printf '%s\n' "$0: the shells that I found on your system."
-  if test ${ZSH_VERSION+y} ; then
-    printf '%s\n' "$0: In particular, zsh $ZSH_VERSION has bugs and should"
-    printf '%s\n' "$0: be upgraded to zsh 4.3.4 or later."
-  else
-    printf '%s\n' "$0: Please tell bug-autoconf@gnu.org and
-$0: https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues
-$0: about your system, including any error possibly output
-$0: before this message. Then install a modern shell, or
-$0: manually run the script under such a shell if you do
-$0: have one."
-  fi
-  exit 1
-fi ;;
-esac
-fi
-fi
-SHELL=${CONFIG_SHELL-/bin/sh}
-export SHELL
-# Unset more variables known to interfere with behavior of common tools.
-CLICOLOR_FORCE= GREP_OPTIONS=
-unset CLICOLOR_FORCE GREP_OPTIONS
-
-## --------------------- ##
-## M4sh Shell Functions. ##
-## --------------------- ##
-@%:@ as_fn_unset VAR
-@%:@ ---------------
-@%:@ Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-
-@%:@ as_fn_set_status STATUS
-@%:@ -----------------------
-@%:@ Set @S|@? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} @%:@ as_fn_set_status
-
-@%:@ as_fn_exit STATUS
-@%:@ -----------------
-@%:@ Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} @%:@ as_fn_exit
-
-@%:@ as_fn_mkdir_p
-@%:@ -------------
-@%:@ Create "@S|@as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`printf '%s\n' "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} @%:@ as_fn_mkdir_p
-
-@%:@ as_fn_executable_p FILE
-@%:@ -----------------------
-@%:@ Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} @%:@ as_fn_executable_p
-@%:@ as_fn_append VAR VALUE
-@%:@ ----------------------
-@%:@ Append the text in VALUE to the end of the definition contained in VAR. Take
-@%:@ advantage of any shell optimizations that allow amortized linear growth over
-@%:@ repeated appends, instead of the typical quadratic growth present in naive
-@%:@ implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null
-then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else case e in @%:@(
-  e) as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  } ;;
-esac
-fi # as_fn_append
-
-@%:@ as_fn_arith ARG...
-@%:@ ------------------
-@%:@ Perform arithmetic evaluation on the ARGs, and store the result in the
-@%:@ global @S|@as_val. Take advantage of shells that can avoid forks. The arguments
-@%:@ must be portable across @S|@(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null
-then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else case e in @%:@(
-  e) as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  } ;;
-esac
-fi # as_fn_arith
-
-
-@%:@ as_fn_error STATUS ERROR [LINENO LOG_FD]
-@%:@ ----------------------------------------
-@%:@ Output "`basename @S|@0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-@%:@ provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-@%:@ script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  printf '%s\n' "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} @%:@ as_fn_error
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-
-  as_lineno_1=$LINENO as_lineno_1a=$LINENO
-  as_lineno_2=$LINENO as_lineno_2a=$LINENO
-  eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" &&
-  test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || {
-  # Blame Lee E. McMahon (1931-1989) for sed's syntax.  :-)
-  sed -n '
-    p
-    /[$]LINENO/=
-  ' <$as_myself |
-    sed '
-      t clear
-      :clear
-      s/[$]LINENO.*/&-/
-      t lineno
-      b
-      :lineno
-      N
-      :loop
-      s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/
-      t loop
-      s/-\n.*//
-    ' >$as_me.lineno &&
-  chmod +x "$as_me.lineno" ||
-    { printf '%s\n' "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; }
-
-  # If we had to re-execute with $CONFIG_SHELL, we're ensured to have
-  # already done that, so ensure we don't try to do so again and fall
-  # in an infinite loop.  This has already happened in practice.
-  _as_can_reexec=no; export _as_can_reexec
-  # Don't try to exec as it changes $[0], causing all sort of problems
-  # (the dirname of $[0] is not the place where we might find the
-  # original and so on.  Autoconf is especially sensitive to this).
-  . "./$as_me.lineno"
-  # Exit status is that of the last command.
-  exit
-}
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both 'ln -s file dir' and 'ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; 'ln -s' creates a wrapper executable.
-    # In both cases, we have to default to 'cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_sed_cpp="y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g"
-as_tr_cpp="eval sed '$as_sed_cpp'" # deprecated
-
-# Sed expression to map a string onto a valid variable name.
-as_sed_sh="y%*+%pp%;s%[^_$as_cr_alnum]%_%g"
-as_tr_sh="eval sed '$as_sed_sh'" # deprecated
-
-SHELL=${CONFIG_SHELL-/bin/sh}
-
-as_awk_strverscmp='
-  # Use only awk features that work with 7th edition Unix awk (1978).
-  # My, what an old awk you have, Mr. Solaris!
-  END {
-    while (length(v1) && length(v2)) {
-      # Set d1 to be the next thing to compare from v1, and likewise for d2.
-      # Normally this is a single character, but if v1 and v2 contain digits,
-      # compare them as integers and fractions as strverscmp does.
-      if (v1 ~ /^[0-9]/ && v2 ~ /^[0-9]/) {
-	# Split v1 and v2 into their leading digit string components d1 and d2,
-	# and advance v1 and v2 past the leading digit strings.
-	for (len1 = 1; substr(v1, len1 + 1) ~ /^[0-9]/; len1++) continue
-	for (len2 = 1; substr(v2, len2 + 1) ~ /^[0-9]/; len2++) continue
-	d1 = substr(v1, 1, len1); v1 = substr(v1, len1 + 1)
-	d2 = substr(v2, 1, len2); v2 = substr(v2, len2 + 1)
-	if (d1 ~ /^0/) {
-	  if (d2 ~ /^0/) {
-	    # Compare two fractions.
-	    while (d1 ~ /^0/ && d2 ~ /^0/) {
-	      d1 = substr(d1, 2); len1--
-	      d2 = substr(d2, 2); len2--
-	    }
-	    if (len1 != len2 && ! (len1 && len2 && substr(d1, 1, 1) == substr(d2, 1, 1))) {
-	      # The two components differ in length, and the common prefix
-	      # contains only leading zeros.  Consider the longer to be less.
-	      d1 = -len1
-	      d2 = -len2
-	    } else {
-	      # Otherwise, compare as strings.
-	      d1 = "x" d1
-	      d2 = "x" d2
-	    }
-	  } else {
-	    # A fraction is less than an integer.
-	    exit 1
-	  }
-	} else {
-	  if (d2 ~ /^0/) {
-	    # An integer is greater than a fraction.
-	    exit 2
-	  } else {
-	    # Compare two integers.
-	    d1 += 0
-	    d2 += 0
-	  }
-	}
-      } else {
-	# The normal case, without worrying about digits.
-	d1 = substr(v1, 1, 1); v1 = substr(v1, 2)
-	d2 = substr(v2, 1, 1); v2 = substr(v2, 2)
-      }
-      if (d1 < d2) exit 1
-      if (d1 > d2) exit 2
-    }
-    # Beware Solaris 11 /usr/xgp4/bin/awk, which mishandles some
-    # comparisons of empty strings to integers.  For example,
-    # LC_ALL=C /usr/xpg4/bin/awk "BEGIN {if (-1 < \"\") print \"a\"}"
-    # prints "a".
-    if (length(v2)) exit 1
-    if (length(v1)) exit 2
-  }
-'
-
-test -n "$DJDIR" || exec 7<&0 </dev/null
-exec 6>&1
-
-# Name of the host.
-# hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status,
-# so uname gets run too.
-ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q`
-
-#
-# Initializations.
-#
-ac_default_prefix=/usr/local
-ac_clean_CONFIG_STATUS=
-ac_clean_files=
-ac_config_libobj_dir=.
-LIB@&t@OBJS=
-cross_compiling=no
-subdirs=
-MFLAGS=
-MAKEFLAGS=
-
-# Identity of this package.
-PACKAGE_NAME='libXext'
-PACKAGE_TARNAME='libXext'
-PACKAGE_VERSION='1.3.7'
-PACKAGE_STRING='libXext 1.3.7'
-PACKAGE_BUGREPORT='https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues'
-PACKAGE_URL=''
-
-ac_unique_file="Makefile.am"
-# Factoring default headers for most tests.
-ac_includes_default="\
-#include <stddef.h>
-#ifdef HAVE_STDIO_H
-# include <stdio.h>
-#endif
-#ifdef HAVE_STDLIB_H
-# include <stdlib.h>
-#endif
-#ifdef HAVE_STRING_H
-# include <string.h>
-#endif
-#ifdef HAVE_INTTYPES_H
-# include <inttypes.h>
-#endif
-#ifdef HAVE_STDINT_H
-# include <stdint.h>
-#endif
-#ifdef HAVE_STRINGS_H
-# include <strings.h>
-#endif
-#ifdef HAVE_SYS_TYPES_H
-# include <sys/types.h>
-#endif
-#ifdef HAVE_SYS_STAT_H
-# include <sys/stat.h>
-#endif
-#ifdef HAVE_UNISTD_H
-# include <unistd.h>
-#endif"
-
-ac_header_c_list=
-ac_subst_vars='am__EXEEXT_FALSE
-am__EXEEXT_TRUE
-LTLIBOBJS
-MAKE_LINT_LIB_FALSE
-MAKE_LINT_LIB_TRUE
-LINTLIB
-LINT_FALSE
-LINT_TRUE
-LINT_FLAGS
-LINT
-LIB@&t@OBJS
-XEXT_LIBS
-XEXT_CFLAGS
-XEXT_SOREV
-XTMALLOC_ZERO_CFLAGS
-XMALLOC_ZERO_CFLAGS
-MALLOC_ZERO_CFLAGS
-HAVE_STYLESHEETS_FALSE
-HAVE_STYLESHEETS_TRUE
-XSL_STYLESHEET
-STYLESHEET_SRCDIR
-XORG_SGML_PATH
-HAVE_XSLTPROC_FALSE
-HAVE_XSLTPROC_TRUE
-XSLTPROC
-HAVE_FOP_FALSE
-HAVE_FOP_TRUE
-FOP
-HAVE_XMLTO_FALSE
-HAVE_XMLTO_TRUE
-HAVE_XMLTO_TEXT_FALSE
-HAVE_XMLTO_TEXT_TRUE
-XMLTO
-ENABLE_SPECS_FALSE
-ENABLE_SPECS_TRUE
-MAN_SUBSTS
-XORG_MAN_PAGE
-ADMIN_MAN_DIR
-DRIVER_MAN_DIR
-MISC_MAN_DIR
-FILE_MAN_DIR
-LIB_MAN_DIR
-APP_MAN_DIR
-ADMIN_MAN_SUFFIX
-DRIVER_MAN_SUFFIX
-MISC_MAN_SUFFIX
-FILE_MAN_SUFFIX
-LIB_MAN_SUFFIX
-APP_MAN_SUFFIX
-INSTALL_CMD
-PKG_CONFIG_LIBDIR
-PKG_CONFIG_PATH
-PKG_CONFIG
-CHANGELOG_CMD
-STRICT_CFLAGS
-CWARNFLAGS
-BASE_CFLAGS
-LT_SYS_LIBRARY_PATH
-OTOOL64
-OTOOL
-LIPO
-NMEDIT
-DSYMUTIL
-MANIFEST_TOOL
-RANLIB
-ac_ct_AR
-AR
-DLLTOOL
-OBJDUMP
-FILECMD
-LN_S
-NM
-ac_ct_DUMPBIN
-DUMPBIN
-LD
-FGREP
-EGREP
-GREP
-SED
-host_os
-host_vendor
-host_cpu
-host
-build_os
-build_vendor
-build_cpu
-build
-LIBTOOL
-am__xargs_n
-am__rm_f_notfound
-AM_BACKSLASH
-AM_DEFAULT_VERBOSITY
-AM_DEFAULT_V
-AM_V
-CSCOPE
-ETAGS
-CTAGS
-am__fastdepCC_FALSE
-am__fastdepCC_TRUE
-CCDEPMODE
-am__nodep
-AMDEPBACKSLASH
-AMDEP_FALSE
-AMDEP_TRUE
-am__include
-DEPDIR
-am__untar
-am__tar
-AMTAR
-am__leading_dot
-SET_MAKE
-AWK
-mkdir_p
-MKDIR_P
-INSTALL_STRIP_PROGRAM
-STRIP
-install_sh
-MAKEINFO
-AUTOHEADER
-AUTOMAKE
-AUTOCONF
-ACLOCAL
-VERSION
-PACKAGE
-CYGPATH_W
-am__isrc
-INSTALL_DATA
-INSTALL_SCRIPT
-INSTALL_PROGRAM
-OBJEXT
-EXEEXT
-ac_ct_CC
-CPPFLAGS
-LDFLAGS
-CFLAGS
-CC
-ECHO_T
-ECHO_N
-ECHO_C
-target_alias
-host_alias
-build_alias
-LIBS
-DEFS
-mandir
-localedir
-libdir
-psdir
-pdfdir
-dvidir
-htmldir
-infodir
-docdir
-oldincludedir
-includedir
-runstatedir
-localstatedir
-sharedstatedir
-sysconfdir
-datadir
-datarootdir
-libexecdir
-sbindir
-bindir
-program_transform_name
-prefix
-exec_prefix
-PACKAGE_URL
-PACKAGE_BUGREPORT
-PACKAGE_STRING
-PACKAGE_VERSION
-PACKAGE_TARNAME
-PACKAGE_NAME
-PATH_SEPARATOR
-SHELL
-am__quote'
-ac_subst_files=''
-ac_user_opts='
-enable_option_checking
-enable_dependency_tracking
-enable_silent_rules
-enable_shared
-enable_static
-enable_pic
-with_pic
-enable_fast_install
-enable_aix_soname
-with_aix_soname
-with_gnu_ld
-with_sysroot
-enable_libtool_lock
-enable_selective_werror
-enable_strict_compilation
-enable_specs
-with_xmlto
-with_fop
-with_xsltproc
-enable_malloc0returnsnull
-with_lint
-enable_lint_library
-'
-      ac_precious_vars='build_alias
-host_alias
-target_alias
-CC
-CFLAGS
-LDFLAGS
-LIBS
-CPPFLAGS
-LT_SYS_LIBRARY_PATH
-PKG_CONFIG
-PKG_CONFIG_PATH
-PKG_CONFIG_LIBDIR
-XMLTO
-FOP
-XSLTPROC
-XEXT_CFLAGS
-XEXT_LIBS
-LINT
-LINT_FLAGS'
-
-
-# Initialize some variables set by options.
-ac_init_help=
-ac_init_version=false
-ac_unrecognized_opts=
-ac_unrecognized_sep=
-# The variables have the same names as the options, with
-# dashes changed to underlines.
-cache_file=/dev/null
-exec_prefix=NONE
-no_create=
-no_recursion=
-prefix=NONE
-program_prefix=NONE
-program_suffix=NONE
-program_transform_name=s,x,x,
-silent=
-site=
-srcdir=
-verbose=
-x_includes=NONE
-x_libraries=NONE
-
-# Installation directory options.
-# These are left unexpanded so users can "make install exec_prefix=/foo"
-# and all the variables that are supposed to be based on exec_prefix
-# by default will actually change.
-# Use braces instead of parens because sh, perl, etc. also accept them.
-# (The list follows the same order as the GNU Coding Standards.)
-bindir='${exec_prefix}/bin'
-sbindir='${exec_prefix}/sbin'
-libexecdir='${exec_prefix}/libexec'
-datarootdir='${prefix}/share'
-datadir='${datarootdir}'
-sysconfdir='${prefix}/etc'
-sharedstatedir='${prefix}/com'
-localstatedir='${prefix}/var'
-runstatedir='${localstatedir}/run'
-includedir='${prefix}/include'
-oldincludedir='/usr/include'
-docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
-infodir='${datarootdir}/info'
-htmldir='${docdir}'
-dvidir='${docdir}'
-pdfdir='${docdir}'
-psdir='${docdir}'
-libdir='${exec_prefix}/lib'
-localedir='${datarootdir}/locale'
-mandir='${datarootdir}/man'
-
-ac_prev=
-ac_dashdash=
-for ac_option
-do
-  # If the previous option needs an argument, assign it.
-  if test -n "$ac_prev"; then
-    eval $ac_prev=\$ac_option
-    ac_prev=
-    continue
-  fi
-
-  case $ac_option in
-  *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;;
-  *=)   ac_optarg= ;;
-  *)    ac_optarg=yes ;;
-  esac
-
-  case $ac_dashdash$ac_option in
-  --)
-    ac_dashdash=yes ;;
-
-  -bindir | --bindir | --bindi | --bind | --bin | --bi)
-    ac_prev=bindir ;;
-  -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*)
-    bindir=$ac_optarg ;;
-
-  -build | --build | --buil | --bui | --bu)
-    ac_prev=build_alias ;;
-  -build=* | --build=* | --buil=* | --bui=* | --bu=*)
-    build_alias=$ac_optarg ;;
-
-  -cache-file | --cache-file | --cache-fil | --cache-fi \
-  | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c)
-    ac_prev=cache_file ;;
-  -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \
-  | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*)
-    cache_file=$ac_optarg ;;
-
-  --config-cache | -C)
-    cache_file=config.cache ;;
-
-  -datadir | --datadir | --datadi | --datad)
-    ac_prev=datadir ;;
-  -datadir=* | --datadir=* | --datadi=* | --datad=*)
-    datadir=$ac_optarg ;;
-
-  -datarootdir | --datarootdir | --datarootdi | --datarootd | --dataroot \
-  | --dataroo | --dataro | --datar)
-    ac_prev=datarootdir ;;
-  -datarootdir=* | --datarootdir=* | --datarootdi=* | --datarootd=* \
-  | --dataroot=* | --dataroo=* | --dataro=* | --datar=*)
-    datarootdir=$ac_optarg ;;
-
-  -disable-* | --disable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=no ;;
-
-  -docdir | --docdir | --docdi | --doc | --do)
-    ac_prev=docdir ;;
-  -docdir=* | --docdir=* | --docdi=* | --doc=* | --do=*)
-    docdir=$ac_optarg ;;
-
-  -dvidir | --dvidir | --dvidi | --dvid | --dvi | --dv)
-    ac_prev=dvidir ;;
-  -dvidir=* | --dvidir=* | --dvidi=* | --dvid=* | --dvi=* | --dv=*)
-    dvidir=$ac_optarg ;;
-
-  -enable-* | --enable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=\$ac_optarg ;;
-
-  -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \
-  | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \
-  | --exec | --exe | --ex)
-    ac_prev=exec_prefix ;;
-  -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \
-  | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \
-  | --exec=* | --exe=* | --ex=*)
-    exec_prefix=$ac_optarg ;;
-
-  -gas | --gas | --ga | --g)
-    # Obsolete; use --with-gas.
-    with_gas=yes ;;
-
-  -help | --help | --hel | --he | -h)
-    ac_init_help=long ;;
-  -help=r* | --help=r* | --hel=r* | --he=r* | -hr*)
-    ac_init_help=recursive ;;
-  -help=s* | --help=s* | --hel=s* | --he=s* | -hs*)
-    ac_init_help=short ;;
-
-  -host | --host | --hos | --ho)
-    ac_prev=host_alias ;;
-  -host=* | --host=* | --hos=* | --ho=*)
-    host_alias=$ac_optarg ;;
-
-  -htmldir | --htmldir | --htmldi | --htmld | --html | --htm | --ht)
-    ac_prev=htmldir ;;
-  -htmldir=* | --htmldir=* | --htmldi=* | --htmld=* | --html=* | --htm=* \
-  | --ht=*)
-    htmldir=$ac_optarg ;;
-
-  -includedir | --includedir | --includedi | --included | --include \
-  | --includ | --inclu | --incl | --inc)
-    ac_prev=includedir ;;
-  -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \
-  | --includ=* | --inclu=* | --incl=* | --inc=*)
-    includedir=$ac_optarg ;;
-
-  -infodir | --infodir | --infodi | --infod | --info | --inf)
-    ac_prev=infodir ;;
-  -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*)
-    infodir=$ac_optarg ;;
-
-  -libdir | --libdir | --libdi | --libd)
-    ac_prev=libdir ;;
-  -libdir=* | --libdir=* | --libdi=* | --libd=*)
-    libdir=$ac_optarg ;;
-
-  -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \
-  | --libexe | --libex | --libe)
-    ac_prev=libexecdir ;;
-  -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \
-  | --libexe=* | --libex=* | --libe=*)
-    libexecdir=$ac_optarg ;;
-
-  -localedir | --localedir | --localedi | --localed | --locale)
-    ac_prev=localedir ;;
-  -localedir=* | --localedir=* | --localedi=* | --localed=* | --locale=*)
-    localedir=$ac_optarg ;;
-
-  -localstatedir | --localstatedir | --localstatedi | --localstated \
-  | --localstate | --localstat | --localsta | --localst | --locals)
-    ac_prev=localstatedir ;;
-  -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \
-  | --localstate=* | --localstat=* | --localsta=* | --localst=* | --locals=*)
-    localstatedir=$ac_optarg ;;
-
-  -mandir | --mandir | --mandi | --mand | --man | --ma | --m)
-    ac_prev=mandir ;;
-  -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*)
-    mandir=$ac_optarg ;;
-
-  -nfp | --nfp | --nf)
-    # Obsolete; use --without-fp.
-    with_fp=no ;;
-
-  -no-create | --no-create | --no-creat | --no-crea | --no-cre \
-  | --no-cr | --no-c | -n)
-    no_create=yes ;;
-
-  -no-recursion | --no-recursion | --no-recursio | --no-recursi \
-  | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r)
-    no_recursion=yes ;;
-
-  -oldincludedir | --oldincludedir | --oldincludedi | --oldincluded \
-  | --oldinclude | --oldinclud | --oldinclu | --oldincl | --oldinc \
-  | --oldin | --oldi | --old | --ol | --o)
-    ac_prev=oldincludedir ;;
-  -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \
-  | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \
-  | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*)
-    oldincludedir=$ac_optarg ;;
-
-  -prefix | --prefix | --prefi | --pref | --pre | --pr | --p)
-    ac_prev=prefix ;;
-  -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*)
-    prefix=$ac_optarg ;;
-
-  -program-prefix | --program-prefix | --program-prefi | --program-pref \
-  | --program-pre | --program-pr | --program-p)
-    ac_prev=program_prefix ;;
-  -program-prefix=* | --program-prefix=* | --program-prefi=* \
-  | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*)
-    program_prefix=$ac_optarg ;;
-
-  -program-suffix | --program-suffix | --program-suffi | --program-suff \
-  | --program-suf | --program-su | --program-s)
-    ac_prev=program_suffix ;;
-  -program-suffix=* | --program-suffix=* | --program-suffi=* \
-  | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*)
-    program_suffix=$ac_optarg ;;
-
-  -program-transform-name | --program-transform-name \
-  | --program-transform-nam | --program-transform-na \
-  | --program-transform-n | --program-transform- \
-  | --program-transform | --program-transfor \
-  | --program-transfo | --program-transf \
-  | --program-trans | --program-tran \
-  | --progr-tra | --program-tr | --program-t)
-    ac_prev=program_transform_name ;;
-  -program-transform-name=* | --program-transform-name=* \
-  | --program-transform-nam=* | --program-transform-na=* \
-  | --program-transform-n=* | --program-transform-=* \
-  | --program-transform=* | --program-transfor=* \
-  | --program-transfo=* | --program-transf=* \
-  | --program-trans=* | --program-tran=* \
-  | --progr-tra=* | --program-tr=* | --program-t=*)
-    program_transform_name=$ac_optarg ;;
-
-  -pdfdir | --pdfdir | --pdfdi | --pdfd | --pdf | --pd)
-    ac_prev=pdfdir ;;
-  -pdfdir=* | --pdfdir=* | --pdfdi=* | --pdfd=* | --pdf=* | --pd=*)
-    pdfdir=$ac_optarg ;;
-
-  -psdir | --psdir | --psdi | --psd | --ps)
-    ac_prev=psdir ;;
-  -psdir=* | --psdir=* | --psdi=* | --psd=* | --ps=*)
-    psdir=$ac_optarg ;;
-
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil)
-    silent=yes ;;
-
-  -runstatedir | --runstatedir | --runstatedi | --runstated \
-  | --runstate | --runstat | --runsta | --runst | --runs \
-  | --run | --ru | --r)
-    ac_prev=runstatedir ;;
-  -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \
-  | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \
-  | --run=* | --ru=* | --r=*)
-    runstatedir=$ac_optarg ;;
-
-  -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
-    ac_prev=sbindir ;;
-  -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
-  | --sbi=* | --sb=*)
-    sbindir=$ac_optarg ;;
-
-  -sharedstatedir | --sharedstatedir | --sharedstatedi \
-  | --sharedstated | --sharedstate | --sharedstat | --sharedsta \
-  | --sharedst | --shareds | --shared | --share | --shar \
-  | --sha | --sh)
-    ac_prev=sharedstatedir ;;
-  -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \
-  | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \
-  | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \
-  | --sha=* | --sh=*)
-    sharedstatedir=$ac_optarg ;;
-
-  -site | --site | --sit)
-    ac_prev=site ;;
-  -site=* | --site=* | --sit=*)
-    site=$ac_optarg ;;
-
-  -srcdir | --srcdir | --srcdi | --srcd | --src | --sr)
-    ac_prev=srcdir ;;
-  -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*)
-    srcdir=$ac_optarg ;;
-
-  -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \
-  | --syscon | --sysco | --sysc | --sys | --sy)
-    ac_prev=sysconfdir ;;
-  -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \
-  | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*)
-    sysconfdir=$ac_optarg ;;
-
-  -target | --target | --targe | --targ | --tar | --ta | --t)
-    ac_prev=target_alias ;;
-  -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*)
-    target_alias=$ac_optarg ;;
-
-  -v | -verbose | --verbose | --verbos | --verbo | --verb)
-    verbose=yes ;;
-
-  -version | --version | --versio | --versi | --vers | -V)
-    ac_init_version=: ;;
-
-  -with-* | --with-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=\$ac_optarg ;;
-
-  -without-* | --without-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=no ;;
-
-  --x)
-    # Obsolete; use --with-x.
-    with_x=yes ;;
-
-  -x-includes | --x-includes | --x-include | --x-includ | --x-inclu \
-  | --x-incl | --x-inc | --x-in | --x-i)
-    ac_prev=x_includes ;;
-  -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \
-  | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*)
-    x_includes=$ac_optarg ;;
-
-  -x-libraries | --x-libraries | --x-librarie | --x-librari \
-  | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l)
-    ac_prev=x_libraries ;;
-  -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \
-  | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*)
-    x_libraries=$ac_optarg ;;
-
-  -*) as_fn_error $? "unrecognized option: '$ac_option'
-Try '$0 --help' for more information"
-    ;;
-
-  *=*)
-    ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='`
-    # Reject names that are not valid shell variable names.
-    case $ac_envvar in #(
-      '' | [0-9]* | *[!_$as_cr_alnum]* )
-      as_fn_error $? "invalid variable name: '$ac_envvar'" ;;
-    esac
-    eval $ac_envvar=\$ac_optarg
-    export $ac_envvar ;;
-
-  *)
-    # FIXME: should be removed in autoconf 3.0.
-    printf '%s\n' "$as_me: WARNING: you should use --build, --host, --target" >&2
-    expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null &&
-      printf '%s\n' "$as_me: WARNING: invalid host type: $ac_option" >&2
-    : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}"
-    ;;
-
-  esac
-done
-
-if test -n "$ac_prev"; then
-  ac_option=--`printf '%s\n' $ac_prev | sed 's/_/-/g'`
-  as_fn_error $? "missing argument to $ac_option"
-fi
-
-if test -n "$ac_unrecognized_opts"; then
-  case $enable_option_checking in
-    no) ;;
-    fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;;
-    *)     printf '%s\n' "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;;
-  esac
-fi
-
-# Check all directory arguments for consistency.
-for ac_var in	exec_prefix prefix bindir sbindir libexecdir datarootdir \
-		datadir sysconfdir sharedstatedir localstatedir includedir \
-		oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
-		libdir localedir mandir runstatedir
-do
-  eval ac_val=\$$ac_var
-  # Remove trailing slashes.
-  case $ac_val in
-    */ )
-      ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'`
-      eval $ac_var=\$ac_val;;
-  esac
-  # Be sure to have absolute directory names.
-  case $ac_val in
-    [\\/$]* | ?:[\\/]* )  continue;;
-    NONE | '' ) case $ac_var in *prefix ) continue;; esac;;
-  esac
-  as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val"
-done
-
-# There might be people who depend on the old broken behavior: '$host'
-# used to hold the argument of --host etc.
-# FIXME: To remove some day.
-build=$build_alias
-host=$host_alias
-target=$target_alias
-
-# FIXME: To remove some day.
-if test "x$host_alias" != x; then
-  if test "x$build_alias" = x; then
-    cross_compiling=maybe
-  elif test "x$build_alias" != "x$host_alias"; then
-    cross_compiling=yes
-  fi
-fi
-
-ac_tool_prefix=
-test -n "$host_alias" && ac_tool_prefix=$host_alias-
-
-test "$silent" = yes && exec 6>/dev/null
-
-
-ac_pwd=`pwd` && test -n "$ac_pwd" &&
-ac_ls_di=`ls -di .` &&
-ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` ||
-  as_fn_error $? "working directory cannot be determined"
-test "X$ac_ls_di" = "X$ac_pwd_ls_di" ||
-  as_fn_error $? "pwd does not report name of working directory"
-
-
-# Find the source files, if location was not specified.
-if test -z "$srcdir"; then
-  ac_srcdir_defaulted=yes
-  # Try the directory containing this script, then the parent directory.
-  ac_confdir=`$as_dirname -- "$as_myself" ||
-$as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_myself" : 'X\(//\)[^/]' \| \
-	 X"$as_myself" : 'X\(//\)$' \| \
-	 X"$as_myself" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_myself" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  srcdir=$ac_confdir
-  if test ! -r "$srcdir/$ac_unique_file"; then
-    srcdir=..
-  fi
-else
-  ac_srcdir_defaulted=no
-fi
-if test ! -r "$srcdir/$ac_unique_file"; then
-  test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .."
-  as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir"
-fi
-ac_msg="sources are in $srcdir, but 'cd $srcdir' does not work"
-ac_abs_confdir=`(
-	cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg"
-	pwd)`
-# When building in place, set srcdir=.
-if test "$ac_abs_confdir" = "$ac_pwd"; then
-  srcdir=.
-fi
-# Remove unnecessary trailing slashes from srcdir.
-# Double slashes in file names in object file debugging info
-# mess up M-x gdb in Emacs.
-case $srcdir in
-*/) srcdir=`expr "X$srcdir" : 'X\(.*[^/]\)' \| "X$srcdir" : 'X\(.*\)'`;;
-esac
-for ac_var in $ac_precious_vars; do
-  eval ac_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_env_${ac_var}_value=\$${ac_var}
-  eval ac_cv_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_cv_env_${ac_var}_value=\$${ac_var}
-done
-
-#
-# Report the --help message.
-#
-if test "$ac_init_help" = "long"; then
-  # Omit some internal or obsolete options to make the list less imposing.
-  # This message is too long to be a string in the A/UX 3.1 sh.
-  cat <<_ACEOF
-'configure' configures libXext 1.3.7 to adapt to many kinds of systems.
-
-Usage: $0 [OPTION]... [VAR=VALUE]...
-
-To assign environment variables (e.g., CC, CFLAGS...), specify them as
-VAR=VALUE.  See below for descriptions of some of the useful variables.
-
-Defaults for the options are specified in brackets.
-
-Configuration:
-  -h, --help              display this help and exit
-      --help=short        display options specific to this package
-      --help=recursive    display the short help of all the included packages
-  -V, --version           display version information and exit
-  -q, --quiet, --silent   do not print 'checking ...' messages
-      --cache-file=FILE   cache test results in FILE [disabled]
-  -C, --config-cache      alias for '--cache-file=config.cache'
-  -n, --no-create         do not create output files
-      --srcdir=DIR        find the sources in DIR [configure dir or '..']
-
-Installation directories:
-  --prefix=PREFIX         install architecture-independent files in PREFIX
-                          @<:@@S|@ac_default_prefix@:>@
-  --exec-prefix=EPREFIX   install architecture-dependent files in EPREFIX
-                          @<:@PREFIX@:>@
-
-By default, 'make install' will install all the files in
-'$ac_default_prefix/bin', '$ac_default_prefix/lib' etc.  You can specify
-an installation prefix other than '$ac_default_prefix' using '--prefix',
-for instance '--prefix=\$HOME'.
-
-For better control, use the options below.
-
-Fine tuning of the installation directories:
-  --bindir=DIR            user executables [EPREFIX/bin]
-  --sbindir=DIR           system admin executables [EPREFIX/sbin]
-  --libexecdir=DIR        program executables [EPREFIX/libexec]
-  --sysconfdir=DIR        read-only single-machine data [PREFIX/etc]
-  --sharedstatedir=DIR    modifiable architecture-independent data [PREFIX/com]
-  --localstatedir=DIR     modifiable single-machine data [PREFIX/var]
-  --runstatedir=DIR       modifiable per-process data [LOCALSTATEDIR/run]
-  --libdir=DIR            object code libraries [EPREFIX/lib]
-  --includedir=DIR        C header files [PREFIX/include]
-  --oldincludedir=DIR     C header files for non-gcc [/usr/include]
-  --datarootdir=DIR       read-only arch.-independent data root [PREFIX/share]
-  --datadir=DIR           read-only architecture-independent data [DATAROOTDIR]
-  --infodir=DIR           info documentation [DATAROOTDIR/info]
-  --localedir=DIR         locale-dependent data [DATAROOTDIR/locale]
-  --mandir=DIR            man documentation [DATAROOTDIR/man]
-  --docdir=DIR            documentation root @<:@DATAROOTDIR/doc/libXext@:>@
-  --htmldir=DIR           html documentation [DOCDIR]
-  --dvidir=DIR            dvi documentation [DOCDIR]
-  --pdfdir=DIR            pdf documentation [DOCDIR]
-  --psdir=DIR             ps documentation [DOCDIR]
-_ACEOF
-
-  cat <<\_ACEOF
-
-Program names:
-  --program-prefix=PREFIX            prepend PREFIX to installed program names
-  --program-suffix=SUFFIX            append SUFFIX to installed program names
-  --program-transform-name=PROGRAM   run sed PROGRAM on installed program names
-
-System types:
-  --build=BUILD     configure for building on BUILD [guessed]
-  --host=HOST       cross-compile to build programs to run on HOST [BUILD]
-_ACEOF
-fi
-
-if test -n "$ac_init_help"; then
-  case $ac_init_help in
-     short | recursive ) echo "Configuration of libXext 1.3.7:";;
-   esac
-  cat <<\_ACEOF
-
-Optional Features:
-  --disable-option-checking  ignore unrecognized --enable/--with options
-  --disable-FEATURE       do not include FEATURE (same as --enable-FEATURE=no)
-  --enable-FEATURE[=ARG]  include FEATURE [ARG=yes]
-  --enable-dependency-tracking 
-                          do not reject slow dependency extractors
-  --disable-dependency-tracking 
-                          speeds up one-time build
-  --enable-silent-rules   less verbose build output (undo: "make V=1")
-  --disable-silent-rules  verbose build output (undo: "make V=0")
-  --enable-shared@<:@=PKGS@:>@  build shared libraries @<:@default=yes@:>@
-  --enable-static@<:@=PKGS@:>@  build static libraries @<:@default=yes@:>@
-  --enable-pic@<:@=PKGS@:>@     try to use only PIC/non-PIC objects @<:@default=use
-                          both@:>@
-  --enable-fast-install@<:@=PKGS@:>@ 
-                          optimize for fast installation @<:@default=yes@:>@
-  --enable-aix-soname=aix|svr4|both 
-                          shared library versioning (aka "SONAME") variant to
-                          provide on AIX, @<:@default=aix@:>@.
-  --disable-libtool-lock  avoid locking (might break parallel builds)
-  --disable-selective-werror 
-                          Turn off selective compiler errors. (default:
-                          enabled)
-  --enable-strict-compilation 
-                          Enable all warnings from compiler and make them
-                          errors (default: disabled)
-  --enable-specs          Enable building the specs (default: yes)
-  --enable-malloc0returnsnull 
-                          assume malloc(0) can return NULL (default: yes)
-  --enable-lint-library   Create lint library (default: disabled)
-
-Optional Packages:
-  --with-PACKAGE[=ARG]    use PACKAGE [ARG=yes]
-  --without-PACKAGE       do not use PACKAGE (same as --with-PACKAGE=no)
-  --with-gnu-ld           assume the C compiler uses GNU ld @<:@default=no@:>@
-  --with-sysroot@<:@=DIR@:>@    Search for dependent libraries within DIR (or the
-                          compiler's sysroot if not specified).
-  --with-xmlto            Use xmlto to regenerate documentation (default:
-                          auto)
-  --with-fop              Use fop to regenerate documentation (default: auto)
-  --with-xsltproc         Use xsltproc for the transformation of XML documents
-                          (default: auto)
-  --with-lint             Use a lint-style source code checker (default:
-                          disabled)
-
-Some influential environment variables:
-  CC          C compiler command
-  CFLAGS      C compiler flags
-  LDFLAGS     linker flags, e.g. -L<lib dir> if you have libraries in a
-              nonstandard directory <lib dir>
-  LIBS        libraries to pass to the linker, e.g. -l<library>
-  CPPFLAGS    (Objective) C/C++ preprocessor flags, e.g. -I<include dir> if
-              you have headers in a nonstandard directory <include dir>
-  LT_SYS_LIBRARY_PATH 
-              User-defined run-time library search path.
-  PKG_CONFIG  path to pkg-config utility
-  PKG_CONFIG_PATH 
-              directories to add to pkg-config's search path
-  PKG_CONFIG_LIBDIR 
-              path overriding pkg-config's built-in search path
-  XMLTO       Path to xmlto command
-  FOP         Path to fop command
-  XSLTPROC    Path to xsltproc command
-  XEXT_CFLAGS C compiler flags for XEXT, overriding pkg-config
-  XEXT_LIBS   linker flags for XEXT, overriding pkg-config
-  LINT        Path to a lint-style command
-  LINT_FLAGS  Flags for the lint-style command
-
-Use these variables to override the choices made by 'configure' or to help
-it to find libraries and programs with nonstandard names/locations.
-
-Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>.
-_ACEOF
-ac_status=$?
-fi
-
-if test "$ac_init_help" = "recursive"; then
-  # If there are subdirs, report their specific --help.
-  for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue
-    test -d "$ac_dir" ||
-      { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } ||
-      continue
-    ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`printf '%s\n' "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`printf '%s\n' "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-    cd "$ac_dir" || { ac_status=$?; continue; }
-    # Check for configure.gnu first; this name is used for a wrapper for
-    # Metaconfig's "Configure" on case-insensitive file systems.
-    if test -f "$ac_srcdir/configure.gnu"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure.gnu" --help=recursive
-    elif test -f "$ac_srcdir/configure"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure" --help=recursive
-    else
-      printf '%s\n' "$as_me: WARNING: no configuration information is in $ac_dir" >&2
-    fi || ac_status=$?
-    cd "$ac_pwd" || { ac_status=$?; break; }
-  done
-fi
-
-test -n "$ac_init_help" && exit $ac_status
-if $ac_init_version; then
-  cat <<\_ACEOF
-libXext configure 1.3.7
-generated by GNU Autoconf 2.73
-
-Copyright (C) 2026 Free Software Foundation, Inc.
-This configure script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it.
-_ACEOF
-  exit
-fi
-
-## ------------------------ ##
-## Autoconf initialization. ##
-## ------------------------ ##
-
-@%:@ ac_fn_c_try_compile LINENO
-@%:@ --------------------------
-@%:@ Try to compile conftest.@S|@ac_ext, and return whether this succeeded.
-ac_fn_c_try_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest.beam
-  if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest.$ac_objext
-then :
-  ac_retval=0
-else case e in @%:@(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1 ;;
-esac
-fi
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} @%:@ ac_fn_c_try_compile
-
-@%:@ ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES
-@%:@ -------------------------------------------------------
-@%:@ Tests whether HEADER exists and can be compiled using the include files in
-@%:@ INCLUDES, setting the cache variable VAR accordingly.
-ac_fn_c_check_header_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-printf %s "checking for $2... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-@%:@include <$2>
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  eval "$3=yes"
-else case e in @%:@(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} @%:@ ac_fn_c_check_header_compile
-
-@%:@ ac_fn_c_try_link LINENO
-@%:@ -----------------------
-@%:@ Try to link conftest.@S|@ac_ext, and return whether this succeeded.
-ac_fn_c_try_link ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest.beam conftest$ac_exeext
-  if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest$ac_exeext && {
-	 test "$cross_compiling" = yes ||
-	 test -x conftest$ac_exeext
-       }
-then :
-  ac_retval=0
-else case e in @%:@(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1 ;;
-esac
-fi
-  # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information
-  # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would
-  # interfere with the next link command; also delete a directory that is
-  # left behind by Apple's compiler.  We do this before executing the actions.
-  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} @%:@ ac_fn_c_try_link
-
-@%:@ ac_fn_c_check_func LINENO FUNC VAR
-@%:@ ----------------------------------
-@%:@ Tests whether FUNC exists, setting the cache variable VAR accordingly
-ac_fn_c_check_func ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-printf %s "checking for $2... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-/* Define $2 to an innocuous variant, in case <limits.h> declares $2.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $2 innocuous_$2
-
-/* System header to define __stub macros and hopefully few prototypes,
-   which can conflict with char $2 (void); below.  */
-
-#include <limits.h>
-#undef $2
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $2 (void);
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$2 || defined __stub___$2
-choke me
-#endif
-
-int
-main (void)
-{
-return $2 ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval "$3=yes"
-else case e in @%:@(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} @%:@ ac_fn_c_check_func
-
-@%:@ ac_fn_check_decl LINENO SYMBOL VAR INCLUDES EXTRA-OPTIONS FLAG-VAR
-@%:@ ------------------------------------------------------------------
-@%:@ Tests whether SYMBOL is declared in INCLUDES, setting cache variable VAR
-@%:@ accordingly. Pass EXTRA-OPTIONS to the compiler, using FLAG-VAR.
-ac_fn_check_decl ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  as_decl_name=`echo $2|sed 's/ *(.*//'`
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $as_decl_name is declared" >&5
-printf %s "checking whether $as_decl_name is declared... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'`
-  eval ac_save_FLAGS=\$$6
-  as_fn_append $6 " $5"
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-int
-main (void)
-{
-#ifndef $as_decl_name
-#ifdef __cplusplus
-  (void) $as_decl_use;
-#else
-  (void) $as_decl_name;
-#endif
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  eval "$3=yes"
-else case e in @%:@(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-  eval $6=\$ac_save_FLAGS
- ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} @%:@ ac_fn_check_decl
-ac_configure_args_raw=
-for ac_arg
-do
-  case $ac_arg in
-  *\'*)
-    ac_arg=`printf '%s\n' "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
-  esac
-  as_fn_append ac_configure_args_raw " '$ac_arg'"
-done
-
-case $ac_configure_args_raw in
-  *$as_nl*)
-    ac_safe_unquote= ;;
-  *)
-    ac_unsafe_z='|&;<>()$`\\"*?@<:@ ''	' # This string ends in space, tab.
-    ac_unsafe_a="$ac_unsafe_z#~"
-    ac_safe_unquote="s/ '\\([^$ac_unsafe_a][^$ac_unsafe_z]*\\)'/ \\1/g"
-    ac_configure_args_raw=`      printf '%s\n' "$ac_configure_args_raw" | sed "$ac_safe_unquote"`;;
-esac
-
-cat >config.log <<_ACEOF
-This file contains any messages produced by compilers while
-running configure, to aid debugging if configure makes a mistake.
-
-It was created by libXext $as_me 1.3.7, which was
-generated by GNU Autoconf 2.73.  Invocation command line was
-
-  $ $0$ac_configure_args_raw
-
-_ACEOF
-exec 5>>config.log
-{
-cat <<_ASUNAME
-## --------- ##
-## Platform. ##
-## --------- ##
-
-hostname = `(hostname || uname -n) 2>/dev/null | sed 1q`
-uname -m = `(uname -m) 2>/dev/null || echo unknown`
-uname -r = `(uname -r) 2>/dev/null || echo unknown`
-uname -s = `(uname -s) 2>/dev/null || echo unknown`
-uname -v = `(uname -v) 2>/dev/null || echo unknown`
-
-/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown`
-/bin/uname -X     = `(/bin/uname -X) 2>/dev/null     || echo unknown`
-
-/bin/arch              = `(/bin/arch) 2>/dev/null              || echo unknown`
-/usr/bin/arch -k       = `(/usr/bin/arch -k) 2>/dev/null       || echo unknown`
-/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown`
-/usr/bin/hostinfo      = `(/usr/bin/hostinfo) 2>/dev/null      || echo unknown`
-/bin/machine           = `(/bin/machine) 2>/dev/null           || echo unknown`
-/usr/bin/oslevel       = `(/usr/bin/oslevel) 2>/dev/null       || echo unknown`
-/bin/universe          = `(/bin/universe) 2>/dev/null          || echo unknown`
-
-_ASUNAME
-
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    printf '%s\n' "PATH: $as_dir"
-  done
-IFS=$as_save_IFS
-
-} >&5
-
-cat >&5 <<_ACEOF
-
-
-## ----------- ##
-## Core tests. ##
-## ----------- ##
-
-_ACEOF
-
-
-# Keep a trace of the command line.
-# Strip out --no-create and --no-recursion so they do not pile up.
-# Strip out --silent because we don't want to record it for future runs.
-# Also quote any args containing shell meta-characters.
-# Make two passes to allow for proper duplicate-argument suppression.
-ac_configure_args=
-ac_configure_args0=
-ac_configure_args1=
-ac_must_keep_next=false
-for ac_pass in 1 2
-do
-  for ac_arg
-  do
-    case $ac_arg in
-    -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;;
-    -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-    | -silent | --silent | --silen | --sile | --sil)
-      continue ;;
-    *\'*)
-      ac_arg=`printf '%s\n' "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    case $ac_pass in
-    1) as_fn_append ac_configure_args0 " '$ac_arg'" ;;
-    2)
-      as_fn_append ac_configure_args1 " '$ac_arg'"
-      if test $ac_must_keep_next = true; then
-	ac_must_keep_next=false # Got value, back to normal.
-      else
-	case $ac_arg in
-	  *=* | --config-cache | -C | -disable-* | --disable-* \
-	  | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \
-	  | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \
-	  | -with-* | --with-* | -without-* | --without-* | --x)
-	    case "$ac_configure_args0 " in
-	      "$ac_configure_args1"*" '$ac_arg' "* ) continue ;;
-	    esac
-	    ;;
-	  -* ) ac_must_keep_next=true ;;
-	esac
-      fi
-      as_fn_append ac_configure_args " '$ac_arg'"
-      ;;
-    esac
-  done
-done
-{ ac_configure_args0=; unset ac_configure_args0;}
-{ ac_configure_args1=; unset ac_configure_args1;}
-
-# Dump the cache to stdout.  It can be in a pipe (this is a requirement).
-ac_cache_dump ()
-{
-  # The following way of writing the cache mishandles newlines in values,
-# but we know of no workaround that is simple, portable, and efficient.
-# So, we kill variables containing newlines.
-# Ultrix sh set writes to stderr and can't be redirected directly,
-# and sets the high bit in the cache file unless we assign to the vars.
-(
-  for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do
-    eval ac_val=\$$ac_var
-    case $ac_val in #(
-    *${as_nl}*)
-      case $ac_var in #(
-      *_cv_*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
-printf '%s\n' "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
-      esac
-      case $ac_var in #(
-      _ | IFS | as_nl) ;; #(
-      BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
-      *) { eval $ac_var=; unset $ac_var;} ;;
-      esac ;;
-    esac
-  done
-
-  (set) 2>&1 |
-    case $as_nl`(ac_space=' '; set) 2>&1` in #(
-    *${as_nl}ac_space=\ *)
-      # 'set' does not quote correctly, so add quotes: double-quote
-      # substitution turns \\\\ into \\, and sed turns \\ into \.
-      sed -n \
-	"s/'/'\\\\''/g;
-	  s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p"
-      ;; #(
-    *)
-      # 'set' quotes correctly as required by POSIX, so do not add quotes.
-      sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
-      ;;
-    esac |
-    sort
-)
-}
-
-# Print debugging info to stdout.
-ac_dump_debugging_info ()
-{
-  echo
-
-  printf '%s\n' "## ---------------- ##
-## Cache variables. ##
-## ---------------- ##"
-  echo
-  ac_cache_dump
-  echo
-
-  printf '%s\n' "## ----------------- ##
-## Output variables. ##
-## ----------------- ##"
-  echo
-  for ac_var in $ac_subst_vars
-  do
-    eval ac_val=\$$ac_var
-    case $ac_val in
-    *\'*) ac_val=`printf '%s\n' "$ac_val" | sed "s/'/'\\\\\\\\''/g"`;;
-    esac
-    printf '%s\n' "$ac_var='$ac_val'"
-  done | sort
-  echo
-
-  if test -n "$ac_subst_files"; then
-    printf '%s\n' "## ------------------- ##
-## File substitutions. ##
-## ------------------- ##"
-    echo
-    for ac_var in $ac_subst_files
-    do
-      eval ac_val=\$$ac_var
-      case $ac_val in
-      *\'*) ac_val=`printf '%s\n' "$ac_val" | sed "s/'/'\\\\\\\\''/g"`;;
-      esac
-      printf '%s\n' "$ac_var='$ac_val'"
-    done | sort
-    echo
-  fi
-
-  if test -s confdefs.h; then
-    printf '%s\n' "## ----------- ##
-## confdefs.h. ##
-## ----------- ##"
-    echo
-    cat confdefs.h
-    echo
-  fi
-  test "$ac_signal" != 0 &&
-    printf '%s\n' "$as_me: caught signal $ac_signal"
-  printf '%s\n' "$as_me: exit $exit_status"
-}
-
-# When interrupted or exit'd, cleanup temporary files, and complete
-# config.log.
-ac_exit_trap ()
-{
-  exit_status=
-  # Sanitize IFS.
-  IFS=" ""	$as_nl"
-  # Save into config.log some information that might help in debugging.
-  ac_dump_debugging_info >&5
-  eval "rm -f $ac_clean_CONFIG_STATUS core *.core core.conftest.*" &&
-    rm -f -r conftest* confdefs* conf$$* $ac_clean_files &&
-    exit $exit_status
-}
-
-trap 'ac_exit_trap $?' 0
-for ac_signal in 1 2 13 15; do
-  trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal
-done
-ac_signal=0
-
-# confdefs.h avoids OS command line length limits that DEFS can exceed.
-rm -f -r conftest* confdefs.h
-
-printf '%s\n' "/* confdefs.h */" > confdefs.h
-
-# Predefined preprocessor variables.
-
-printf '%s\n' "@%:@define PACKAGE_NAME \"$PACKAGE_NAME\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_TARNAME \"$PACKAGE_TARNAME\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_VERSION \"$PACKAGE_VERSION\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_STRING \"$PACKAGE_STRING\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_BUGREPORT \"$PACKAGE_BUGREPORT\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_URL \"$PACKAGE_URL\"" >>confdefs.h
-
-
-# Let the site file select an alternate cache file if it wants to.
-# Prefer an explicitly selected file to automatically selected ones.
-if test -n "$CONFIG_SITE"; then
-  ac_site_files="$CONFIG_SITE"
-elif test "x$prefix" != xNONE; then
-  ac_site_files="$prefix/share/config.site $prefix/etc/config.site"
-else
-  ac_site_files="$ac_default_prefix/share/config.site $ac_default_prefix/etc/config.site"
-fi
-
-for ac_site_file in $ac_site_files
-do
-  case $ac_site_file in @%:@(
-  */*) :
-     ;; @%:@(
-  *) :
-    ac_site_file=./$ac_site_file ;;
-esac
-  if test -f "$ac_site_file" && test -r "$ac_site_file"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5
-printf '%s\n' "$as_me: loading site script $ac_site_file" >&6;}
-    sed 's/^/| /' "$ac_site_file" >&5
-    . "$ac_site_file" \
-      || { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "failed to load site script $ac_site_file
-See 'config.log' for more details" "$LINENO" 5; }
-  fi
-done
-
-if test -r "$cache_file"; then
-  # Some versions of bash will fail to source /dev/null (special files
-  # actually), so we avoid doing that.  DJGPP emulates it as a regular file.
-  if test /dev/null != "$cache_file" && test -f "$cache_file"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5
-printf '%s\n' "$as_me: loading cache $cache_file" >&6;}
-    case $cache_file in
-      [\\/]* | ?:[\\/]* ) . "$cache_file";;
-      *)                      . "./$cache_file";;
-    esac
-  fi
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5
-printf '%s\n' "$as_me: creating cache $cache_file" >&6;}
-  >$cache_file
-fi
-
-as_fn_append ac_header_c_list " stdio.h stdio_h HAVE_STDIO_H"
-# Test code for whether the C compiler supports C23 (global declarations)
-ac_c_conftest_c23_globals='
-/* Does the compiler advertise conformance to C17 or earlier?
-   Although GCC 14 does not do that, even with -std=gnu23,
-   it is close enough, and defines __STDC_VERSION == 202000L.  */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ <= 201710L
-# error "Compiler advertises conformance to C17 or earlier"
-#endif
-
-// Check alignas.
-char alignas (double) c23_aligned_as_double;
-char alignas (0) c23_no_special_alignment;
-extern char c23_aligned_as_int;
-char alignas (0) alignas (int) c23_aligned_as_int;
-
-// Check alignof.
-enum
-{
-  c23_int_alignment = alignof (int),
-  c23_int_array_alignment = alignof (int[100]),
-  c23_char_alignment = alignof (char)
-};
-static_assert (0 < -alignof (int), "alignof is signed");
-
-int function_with_unnamed_parameter (int) { return 0; }
-
-void c23_noreturn ();
-
-/* Test parsing of string and char UTF-8 literals (including hex escapes).
-   The parens pacify GCC 15.  */
-bool use_u8 = (!sizeof u8"\xFF") == (!u8'\''x'\'');
-
-bool check_that_bool_works = true | false | !nullptr;
-#if !true
-# error "true does not work in #if"
-#endif
-#if false
-#elifdef __STDC_VERSION__
-#else
-# error "#elifdef does not work"
-#endif
-
-#ifndef __has_c_attribute
-# error "__has_c_attribute not defined"
-#endif
-
-#ifndef __has_include
-# error "__has_include not defined"
-#endif
-
-#define LPAREN() (
-#define FORTY_TWO(x) 42
-#define VA_OPT_TEST(r, x, ...) __VA_OPT__ (FORTY_TWO r x))
-static_assert (VA_OPT_TEST (LPAREN (), 0, <:-) == 42);
-
-static_assert (0b101010 == 42);
-static_assert (0B101010 == 42);
-static_assert (0xDEAD'\''BEEF == 3'\''735'\''928'\''559);
-static_assert (0.500'\''000'\''000 == 0.5);
-
-enum unsignedish : unsigned int { uione = 1 };
-static_assert (0 < -uione);
-
-#include <stddef.h>
-constexpr nullptr_t null_pointer = nullptr;
-
-static typeof (1 + 1L) two () { return 2; }
-static long int three () { return 3; }
-'
-
-# Test code for whether the C compiler supports C23 (body of main).
-ac_c_conftest_c23_main='
-  {
-    label_before_declaration:
-      int arr[10] = {};
-      if (arr[0])
-        goto label_before_declaration;
-      if (!arr[0])
-        goto label_at_end_of_block;
-    label_at_end_of_block:
-  }
-  ok |= !null_pointer;
-  ok |= two != three;
-'
-
-# Test code for whether the C compiler supports C23 (complete).
-ac_c_conftest_c23_program="${ac_c_conftest_c23_globals}
-
-int
-main (int, char **)
-{
-  int ok = 0;
-  ${ac_c_conftest_c23_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C89 (global declarations)
-ac_c_conftest_c89_globals='
-/* Do not test the value of __STDC__, because some compilers define it to 0
-   or do not define it, while otherwise adequately conforming.  */
-
-#include <stddef.h>
-#include <stdarg.h>
-struct stat;
-/* Most of the following tests are stolen from RCS 5.7 src/conf.sh.  */
-struct buf { int x; };
-struct buf * (*rcsopen) (struct buf *, struct stat *, int);
-static char *e (char **p, int i)
-{
-  return p[i];
-}
-static char *f (char * (*g) (char **, int), char **p, ...)
-{
-  char *s;
-  va_list v;
-  va_start (v,p);
-  s = g (p, va_arg (v,int));
-  va_end (v);
-  return s;
-}
-
-/* C89 style stringification. */
-#define noexpand_stringify(a) #a
-const char *stringified = noexpand_stringify(arbitrary+token=sequence);
-
-/* C89 style token pasting.  Exercises some of the corner cases that
-   e.g. old MSVC gets wrong, but not very hard. */
-#define noexpand_concat(a,b) a##b
-#define expand_concat(a,b) noexpand_concat(a,b)
-extern int vA;
-extern int vbee;
-#define aye A
-#define bee B
-int *pvA = &expand_concat(v,aye);
-int *pvbee = &noexpand_concat(v,bee);
-
-/* OSF 4.0 Compaq cc is some sort of almost-ANSI by default.  It has
-   function prototypes and stuff, but not \xHH hex character constants.
-   These do not provoke an error unfortunately, instead are silently treated
-   as an "x".  The following induces an error, until -std is added to get
-   proper ANSI mode.  Curiously \x00 != x always comes out true, for an
-   array size at least.  It is necessary to write \x00 == 0 to get something
-   that is true only with -std.  */
-int osf4_cc_array ['\''\x00'\'' == 0 ? 1 : -1];
-
-/* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters
-   inside strings and character constants.  */
-#define FOO(x) '\''x'\''
-int xlc6_cc_array[FOO(a) == '\''x'\'' ? 1 : -1];
-
-int test (int i, double x);
-struct s1 {int (*f) (int a);};
-struct s2 {int (*f) (double a);};
-int pairnames (int, char **, int *(*)(struct buf *, struct stat *, int),
-               int, int);'
-
-# Test code for whether the C compiler supports C89 (body of main).
-ac_c_conftest_c89_main='
-ok |= (argc == 0 || f (e, argv, 0) != argv[0] || f (e, argv, 1) != argv[1]);
-'
-
-# Test code for whether the C compiler supports C99 (global declarations)
-ac_c_conftest_c99_globals='
-/* Does the compiler advertise C99 conformance? */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ < 199901L
-# error "Compiler does not advertise C99 conformance"
-#endif
-
-// See if C++-style comments work.
-
-#include <stdbool.h>
-extern int puts (const char *);
-extern int printf (const char *, ...);
-extern int dprintf (int, const char *, ...);
-extern void *malloc (size_t);
-extern void free (void *);
-
-// Check varargs macros.  These examples are taken from C99 6.10.3.5.
-// dprintf is used instead of fprintf to avoid needing to declare
-// FILE and stderr, and "aND" is used instead of "and" to work around
-// GCC bug 40564 which is irrelevant here.
-#define debug(...) dprintf (2, __VA_ARGS__)
-#define showlist(...) puts (#__VA_ARGS__)
-#define report(test,...) ((test) ? puts (#test) : printf (__VA_ARGS__))
-static void
-test_varargs_macros (void)
-{
-  int x = 1234;
-  int y = 5678;
-  debug ("Flag");
-  debug ("X = %d\n", x);
-  showlist (The first, second, aND third items.);
-  report (x>y, "x is %d but y is %d", x, y);
-}
-
-// Check long long types.
-#define BIG64 18446744073709551615ull
-#define BIG32 4294967295ul
-#define BIG_OK (BIG64 / BIG32 == 4294967297ull && BIG64 % BIG32 == 0)
-#if !BIG_OK
-  #error "your preprocessor is broken"
-#endif
-#if BIG_OK
-#else
-  #error "your preprocessor is broken"
-#endif
-static long long int bignum = -9223372036854775807LL;
-static unsigned long long int ubignum = BIG64;
-
-struct incomplete_array
-{
-  int datasize;
-  double data[];
-};
-
-struct named_init {
-  int number;
-  const wchar_t *name;
-  double average;
-};
-
-typedef const char *ccp;
-
-static inline int
-test_restrict (ccp restrict text)
-{
-  // Iterate through items via the restricted pointer.
-  // Also check for declarations in for loops.
-  for (unsigned int i = 0; *(text+i) != '\''\0'\''; ++i)
-    continue;
-  return 0;
-}
-
-// Check varargs and va_copy.
-static bool
-test_varargs (const char *format, ...)
-{
-  va_list args;
-  va_start (args, format);
-  va_list args_copy;
-  va_copy (args_copy, args);
-
-  const char *str = "";
-  int number = 0;
-  float fnumber = 0;
-
-  while (*format)
-    {
-      switch (*format++)
-	{
-	case '\''s'\'': // string
-	  str = va_arg (args_copy, const char *);
-	  break;
-	case '\''d'\'': // int
-	  number = va_arg (args_copy, int);
-	  break;
-	case '\''f'\'': // float
-	  fnumber = va_arg (args_copy, double);
-	  break;
-	default:
-	  break;
-	}
-    }
-  va_end (args_copy);
-  va_end (args);
-
-  return *str && number && fnumber;
-}
-'
-
-# Test code for whether the C compiler supports C99 (body of main).
-ac_c_conftest_c99_main='
-  // Check bool.
-  _Bool success = false;
-  success |= (argc != 0);
-
-  // Check restrict.
-  if (test_restrict ("String literal") == 0)
-    success = true;
-  const char *restrict newvar = "Another string";
-
-  // Check varargs.
-  success &= test_varargs ("s, d'\'' f .", "string", 65, 34.234);
-  test_varargs_macros ();
-
-  // Check flexible array members.
-  static struct incomplete_array *volatile incomplete_array_pointer;
-  struct incomplete_array *ia = incomplete_array_pointer;
-  ia->datasize = 10;
-  for (int i = 0; i < ia->datasize; ++i)
-    ia->data[i] = i * 1.234;
-  // Work around memory leak warnings.
-  free (ia);
-
-  // Check named initializers.
-  struct named_init ni = {
-    .number = 34,
-    .name = L"Test wide string",
-    .average = 543.34343,
-  };
-
-  ni.number = 58;
-
-  // Do not test for VLAs, as some otherwise-conforming compilers lack them.
-  // C code should instead use __STDC_NO_VLA__; see Autoconf manual.
-
-  // work around unused variable warnings
-  ok |= (!success || bignum == 0LL || ubignum == 0uLL || newvar[0] == '\''x'\''
-	 || ni.number != 58);
-'
-
-# Test code for whether the C compiler supports C11 (global declarations)
-ac_c_conftest_c11_globals='
-/* Does the compiler advertise C11 conformance? */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ < 201112L
-# error "Compiler does not advertise C11 conformance"
-#endif
-
-// Check _Alignas.
-char _Alignas (double) aligned_as_double;
-char _Alignas (0) no_special_alignment;
-extern char aligned_as_int;
-char _Alignas (0) _Alignas (int) aligned_as_int;
-
-// Check _Alignof.
-enum
-{
-  int_alignment = _Alignof (int),
-  int_array_alignment = _Alignof (int[100]),
-  char_alignment = _Alignof (char)
-};
-_Static_assert (0 < -_Alignof (int), "_Alignof is signed");
-
-// Check _Noreturn.
-int _Noreturn does_not_return (void) { for (;;) continue; }
-
-// Check _Static_assert.
-struct test_static_assert
-{
-  int x;
-  _Static_assert (sizeof (int) <= sizeof (long int),
-                  "_Static_assert does not work in struct");
-  long int y;
-};
-
-// Check UTF-8 literals.
-#define u8 syntax error!
-char const utf8_literal[] = u8"happens to be ASCII" "another string";
-
-// Check duplicate typedefs.
-typedef long *long_ptr;
-typedef long int *long_ptr;
-typedef long_ptr long_ptr;
-
-// Anonymous structures and unions -- taken from C11 6.7.2.1 Example 1.
-struct anonymous
-{
-  union {
-    struct { int i; int j; };
-    struct { int k; long int l; } w;
-  };
-  int m;
-} v1;
-'
-
-# Test code for whether the C compiler supports C11 (body of main).
-ac_c_conftest_c11_main='
-  _Static_assert ((offsetof (struct anonymous, i)
-		   == offsetof (struct anonymous, w.k)),
-		  "Anonymous union alignment botch");
-  v1.i = 2;
-  v1.w.k = 5;
-  ok |= v1.i != 5;
-'
-
-# Test code for whether the C compiler supports C11 (complete).
-ac_c_conftest_c11_program="${ac_c_conftest_c89_globals}
-${ac_c_conftest_c99_globals}
-${ac_c_conftest_c11_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  ${ac_c_conftest_c99_main}
-  ${ac_c_conftest_c11_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C99 (complete).
-ac_c_conftest_c99_program="${ac_c_conftest_c89_globals}
-${ac_c_conftest_c99_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  ${ac_c_conftest_c99_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C89 (complete).
-ac_c_conftest_c89_program="${ac_c_conftest_c89_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  return ok;
-}
-"
-
-as_fn_append ac_header_c_list " stdlib.h stdlib_h HAVE_STDLIB_H"
-as_fn_append ac_header_c_list " string.h string_h HAVE_STRING_H"
-as_fn_append ac_header_c_list " inttypes.h inttypes_h HAVE_INTTYPES_H"
-as_fn_append ac_header_c_list " stdint.h stdint_h HAVE_STDINT_H"
-as_fn_append ac_header_c_list " strings.h strings_h HAVE_STRINGS_H"
-as_fn_append ac_header_c_list " sys/stat.h sys_stat_h HAVE_SYS_STAT_H"
-as_fn_append ac_header_c_list " sys/types.h sys_types_h HAVE_SYS_TYPES_H"
-as_fn_append ac_header_c_list " unistd.h unistd_h HAVE_UNISTD_H"
-as_fn_append ac_header_c_list " wchar.h wchar_h HAVE_WCHAR_H"
-as_fn_append ac_header_c_list " minix/config.h minix_config_h HAVE_MINIX_CONFIG_H"
-
-# Auxiliary files required by this configure script.
-ac_aux_files="config.guess config.sub ltmain.sh missing install-sh compile"
-
-# Locations in which to look for auxiliary files.
-ac_aux_dir_candidates="${srcdir}${PATH_SEPARATOR}${srcdir}/..${PATH_SEPARATOR}${srcdir}/../.."
-
-# Search for a directory containing all of the required auxiliary files,
-# $ac_aux_files, from the $PATH-style list $ac_aux_dir_candidates.
-# If we don't find one directory that contains all the files we need,
-# we report the set of missing files from the *first* directory in
-# $ac_aux_dir_candidates and give up.
-ac_missing_aux_files=""
-ac_first_candidate=:
-printf '%s\n' "$as_me:${as_lineno-$LINENO}: looking for aux files: $ac_aux_files" >&5
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in $ac_aux_dir_candidates
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-  as_found=:
-  
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}:  trying $as_dir" >&5
-  ac_aux_dir_found=yes
-  ac_install_sh=
-  for ac_aux in $ac_aux_files
-  do
-    # As a special case, if "install-sh" is required, that requirement
-    # can be satisfied by any of "install-sh", "install.sh", or "shtool",
-    # and $ac_install_sh is set appropriately for whichever one is found.
-    if test x"$ac_aux" = x"install-sh"
-    then
-      if test -f "${as_dir}install-sh"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}install-sh found" >&5
-        ac_install_sh="${as_dir}install-sh -c"
-      elif test -f "${as_dir}install.sh"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}install.sh found" >&5
-        ac_install_sh="${as_dir}install.sh -c"
-      elif test -f "${as_dir}shtool"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}shtool found" >&5
-        ac_install_sh="${as_dir}shtool install -c"
-      else
-        ac_aux_dir_found=no
-        if $ac_first_candidate; then
-          ac_missing_aux_files="${ac_missing_aux_files} install-sh"
-        else
-          break
-        fi
-      fi
-    else
-      if test -f "${as_dir}${ac_aux}"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}${ac_aux} found" >&5
-      else
-        ac_aux_dir_found=no
-        if $ac_first_candidate; then
-          ac_missing_aux_files="${ac_missing_aux_files} ${ac_aux}"
-        else
-          break
-        fi
-      fi
-    fi
-  done
-  if test "$ac_aux_dir_found" = yes; then
-    ac_aux_dir="$as_dir"
-    break
-  fi
-  ac_first_candidate=false
-
-  as_found=false
-done
-IFS=$as_save_IFS
-if $as_found
-then :
-  
-else case e in @%:@(
-  e) as_fn_error $? "cannot find required auxiliary files:$ac_missing_aux_files" "$LINENO" 5 ;;
-esac
-fi
-
-
-# These three variables are undocumented and unsupported,
-# and are intended to be withdrawn in a future Autoconf release.
-# They can cause serious problems if a builder's source tree is in a directory
-# whose full name contains unusual characters.
-if test -f "${ac_aux_dir}config.guess"; then
-  ac_@&t@config_guess="$SHELL ${ac_aux_dir}config.guess"
-fi
-if test -f "${ac_aux_dir}config.sub"; then
-  ac_@&t@config_sub="$SHELL ${ac_aux_dir}config.sub"
-fi
-if test -f "$ac_aux_dir/configure"; then
-  ac_@&t@configure="$SHELL ${ac_aux_dir}configure"
-fi
-
-# Check that the precious variables saved in the cache have kept the same
-# value.
-ac_cache_corrupted=false
-for ac_var in $ac_precious_vars; do
-  eval ac_old_set=\$ac_cv_env_${ac_var}_set
-  eval ac_new_set=\$ac_env_${ac_var}_set
-  eval ac_old_val=\$ac_cv_env_${ac_var}_value
-  eval ac_new_val=\$ac_env_${ac_var}_value
-  case $ac_old_set,$ac_new_set in
-    set,)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' was set to '$ac_old_val' in the previous run" >&5
-printf '%s\n' "$as_me: error: '$ac_var' was set to '$ac_old_val' in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,set)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' was not set in the previous run" >&5
-printf '%s\n' "$as_me: error: '$ac_var' was not set in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,);;
-    *)
-      if test "x$ac_old_val" != "x$ac_new_val"; then
-	# differences in whitespace do not lead to failure.
-	ac_old_val_w=
-	for ac_val in x $ac_old_val; do
-	  ac_old_val_w="$ac_old_val_w $ac_val"
-	done
-	ac_new_val_w=
-	for ac_val in x $ac_new_val; do
-	  ac_new_val_w="$ac_new_val_w $ac_val"
-	done
-	if test "$ac_old_val_w" != "$ac_new_val_w"; then
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' has changed since the previous run:" >&5
-printf '%s\n' "$as_me: error: '$ac_var' has changed since the previous run:" >&2;}
-	  ac_cache_corrupted=:
-	else
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in '$ac_var' since the previous run:" >&5
-printf '%s\n' "$as_me: warning: ignoring whitespace changes in '$ac_var' since the previous run:" >&2;}
-	  eval $ac_var=\$ac_old_val
-	fi
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}:   former value:  '$ac_old_val'" >&5
-printf '%s\n' "$as_me:   former value:  '$ac_old_val'" >&2;}
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}:   current value: '$ac_new_val'" >&5
-printf '%s\n' "$as_me:   current value: '$ac_new_val'" >&2;}
-      fi;;
-  esac
-  # Pass precious variables to config.status.
-  if test "$ac_new_set" = set; then
-    case $ac_new_val in
-    *\'*) ac_arg=$ac_var=`printf '%s\n' "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;;
-    *) ac_arg=$ac_var=$ac_new_val ;;
-    esac
-    case " $ac_configure_args " in
-      *" '$ac_arg' "*) ;; # Avoid dups.  Use of quotes ensures accuracy.
-      *) as_fn_append ac_configure_args " '$ac_arg'" ;;
-    esac
-  fi
-done
-if $ac_cache_corrupted; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5
-printf '%s\n' "$as_me: error: changes in the environment can compromise the build" >&2;}
-  as_fn_error $? "run '${MAKE-make} distclean' and/or 'rm $cache_file'
-	    and start over" "$LINENO" 5
-fi
-## -------------------- ##
-## Main body of script. ##
-## -------------------- ##
-
-
-# Determine whether it's possible to make 'echo' print without a newline.
-# These variables are no longer used directly by Autoconf, but are AC_SUBSTed
-# for compatibility with existing Makefiles.
-ECHO_C= ECHO_N= ECHO_T=
-case `echo -n x` in @%:@(((((
--n*)
-  case `echo 'xy\c'` in
-  *c*) ECHO_T='	';;	# ECHO_T is single tab character.
-  xy)  ECHO_C='\c';;
-  *)   echo `echo ksh88 bug on AIX 6.1` > /dev/null
-       ECHO_T='	';;
-  esac;;
-*)
-  ECHO_N='-n';;
-esac
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-
-ac_config_headers="$ac_config_headers config.h"
-
-
-
-# Set common system defines for POSIX extensions, such as _GNU_SOURCE
-# Must be called before any macros that run the compiler (like LT_INIT)
-# to avoid autoconf errors.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-# Expand $ac_aux_dir to an absolute path.
-am_aux_dir=`cd "$ac_aux_dir" && pwd`
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}gcc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}gcc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "gcc", so it can be a program name with args.
-set dummy gcc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="gcc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-else
-  CC="$ac_cv_prog_CC"
-fi
-
-if test -z "$CC"; then
-          if test -n "$ac_tool_prefix"; then
-    # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}cc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}cc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  fi
-fi
-if test -z "$CC"; then
-  # Extract the first word of "cc", so it can be a program name with args.
-set dummy cc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-  ac_prog_rejected=no
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    if test "$as_dir$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then
-       ac_prog_rejected=yes
-       continue
-     fi
-    ac_cv_prog_CC="cc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-if test $ac_prog_rejected = yes; then
-  # We found a bogon in the path, so make sure we never use it.
-  set dummy $ac_cv_prog_CC
-  shift
-  if test $@%:@ != 0; then
-    # We chose a different compiler from the bogus one.
-    # However, it has the same basename, so the bogon will be chosen
-    # first if we set CC to just the basename; use the full file name.
-    shift
-    ac_cv_prog_CC="$as_dir$ac_word${1+' '}$@"
-  fi
-fi
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  for ac_prog in cl.exe
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$CC" && break
-  done
-fi
-if test -z "$CC"; then
-  ac_ct_CC=$CC
-  for ac_prog in cl.exe
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_CC" && break
-done
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-fi
-
-fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}clang", so it can be a program name with args.
-set dummy ${ac_tool_prefix}clang; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}clang"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "clang", so it can be a program name with args.
-set dummy clang; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="clang"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-else
-  CC="$ac_cv_prog_CC"
-fi
-
-fi
-
-
-test -z "$CC" && { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "no acceptable C compiler found in \$PATH
-See 'config.log' for more details" "$LINENO" 5; }
-
-# Provide some information about the compiler.
-printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5
-set X $ac_compile
-ac_compiler=$2
-for ac_option in --version -v -V -qversion -version; do
-  { { ac_try="$ac_compiler $ac_option >&5"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compiler $ac_option >&5") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    sed '10a\
-... rest of stderr output deleted ...
-         10q' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-  fi
-  rm -f conftest.er1 conftest.err
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-done
-
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files_save=$ac_clean_files
-ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out"
-# Try to create an executable without -o first, disregard a.out.
-# It will help us diagnose broken compilers, and finding out an intuition
-# of exeext.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5
-printf %s "checking whether the C compiler works... " >&6; }
-ac_link_default=`printf '%s\n' "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
-
-# The possible output files:
-ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*"
-
-ac_rmfiles=
-for ac_file in $ac_files
-do
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    * ) ac_rmfiles="$ac_rmfiles $ac_file";;
-  esac
-done
-rm -f $ac_rmfiles
-
-if { { ac_try="$ac_link_default"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link_default") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  # Autoconf-2.13 could set the ac_cv_exeext variable to 'no'.
-# So ignore a value of 'no', otherwise this would lead to 'EXEEXT = no'
-# in a Makefile.  We should not override ac_cv_exeext if it was cached,
-# so that the user can short-circuit this test for compilers unknown to
-# Autoconf.
-for ac_file in $ac_files ''
-do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj )
-	;;
-    [ab].out )
-	# We found the default executable, but exeext='' is most
-	# certainly right.
-	break;;
-    *.* )
-	if test ${ac_cv_exeext+y} && test "$ac_cv_exeext" != no;
-	then :; else
-	   ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	fi
-	# We set ac_cv_exeext here because the later test for it is not
-	# safe: cross compilers may not add the suffix if given an '-o'
-	# argument, so we may need to know it at that point already.
-	# Even if this section looks crufty: it has the advantage of
-	# actually working.
-	break;;
-    * )
-	break;;
-  esac
-done
-test "$ac_cv_exeext" = no && ac_cv_exeext=
-
-else case e in @%:@(
-  e) ac_file='' ;;
-esac
-fi
-if test -z "$ac_file"
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error 77 "C compiler cannot create executables
-See 'config.log' for more details" "$LINENO" 5; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; } ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5
-printf %s "checking for C compiler default output file name... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5
-printf '%s\n' "$ac_file" >&6; }
-ac_exeext=$ac_cv_exeext
-
-rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out
-ac_clean_files=$ac_clean_files_save
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5
-printf %s "checking for suffix of executables... " >&6; }
-if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  # If both 'conftest.exe' and 'conftest' are 'present' (well, observable)
-# catch 'conftest.exe'.  For instance with Cygwin, 'ls conftest' will
-# work properly (i.e., refer to 'conftest.exe'), while it won't with
-# 'rm'.
-for ac_file in conftest.exe conftest conftest.*; do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	  break;;
-    * ) break;;
-  esac
-done
-else case e in @%:@(
-  e) { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of executables: cannot compile and link
-See 'config.log' for more details" "$LINENO" 5; } ;;
-esac
-fi
-rm -f conftest conftest$ac_cv_exeext
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5
-printf '%s\n' "$ac_cv_exeext" >&6; }
-
-rm -f conftest.$ac_ext
-EXEEXT=$ac_cv_exeext
-ac_exeext=$EXEEXT
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-@%:@include <stdio.h>
-int
-main (void)
-{
-FILE *f = fopen ("conftest.out", "w");
- if (!f)
-  return 1;
- return ferror (f) || fclose (f) != 0;
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files="$ac_clean_files conftest.out"
-# Check that the compiler produces executables we can run.  If not, either
-# the compiler is broken, or we cross compile.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5
-printf %s "checking whether we are cross compiling... " >&6; }
-if test "$cross_compiling" != yes; then
-  { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-  if { ac_try='./conftest$ac_cv_exeext'
-  { { case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; }; then
-    cross_compiling=no
-  else
-    if test "$cross_compiling" = maybe; then
-	cross_compiling=yes
-    else
-	{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error 77 "cannot run C compiled programs.
-If you meant to cross compile, use '--host'.
-See 'config.log' for more details" "$LINENO" 5; }
-    fi
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5
-printf '%s\n' "$cross_compiling" >&6; }
-
-rm -f conftest.$ac_ext conftest$ac_cv_exeext \
-  conftest.o conftest.obj conftest.out
-ac_clean_files=$ac_clean_files_save
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5
-printf %s "checking for suffix of object files... " >&6; }
-if test ${ac_cv_objext+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.o conftest.obj
-if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  for ac_file in conftest.o conftest.obj conftest.*; do
-  test -f "$ac_file" || continue;
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;;
-    *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'`
-       break;;
-  esac
-done
-else case e in @%:@(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of object files: cannot compile
-See 'config.log' for more details" "$LINENO" 5; } ;;
-esac
-fi
-rm -f conftest.$ac_cv_objext conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5
-printf '%s\n' "$ac_cv_objext" >&6; }
-OBJEXT=$ac_cv_objext
-ac_objext=$OBJEXT
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the compiler supports GNU C" >&5
-printf %s "checking whether the compiler supports GNU C... " >&6; }
-if test ${ac_cv_c_compiler_gnu+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-#ifndef __GNUC__
-       choke me
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_compiler_gnu=yes
-else case e in @%:@(
-  e) ac_compiler_gnu=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-ac_cv_c_compiler_gnu=$ac_compiler_gnu
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5
-printf '%s\n' "$ac_cv_c_compiler_gnu" >&6; }
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-if test $ac_compiler_gnu = yes; then
-  GCC=yes
-else
-  GCC=
-fi
-ac_test_CFLAGS=${CFLAGS+y}
-ac_save_CFLAGS=$CFLAGS
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5
-printf %s "checking whether $CC accepts -g... " >&6; }
-if test ${ac_cv_prog_cc_g+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_save_c_werror_flag=$ac_c_werror_flag
-   ac_c_werror_flag=yes
-   ac_cv_prog_cc_g=no
-   CFLAGS="-g"
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_g=yes
-else case e in @%:@(
-  e) CFLAGS=""
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  
-else case e in @%:@(
-  e) ac_c_werror_flag=$ac_save_c_werror_flag
-	 CFLAGS="-g"
-	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_g=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ac_c_werror_flag=$ac_save_c_werror_flag ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5
-printf '%s\n' "$ac_cv_prog_cc_g" >&6; }
-if test $ac_test_CFLAGS; then
-  CFLAGS=$ac_save_CFLAGS
-elif test $ac_cv_prog_cc_g = yes; then
-  if test "$GCC" = yes; then
-    CFLAGS="-g -O2"
-  else
-    CFLAGS="-g"
-  fi
-else
-  if test "$GCC" = yes; then
-    CFLAGS="-O2"
-  else
-    CFLAGS=
-  fi
-fi
-ac_prog_cc_stdc=no
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C23 features" >&5
-printf %s "checking for $CC option to enable C23 features... " >&6; }
-if test ${ac_cv_prog_cc_c23+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c23=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c23_program
-_ACEOF
-for ac_arg in '' -std=gnu23
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c23=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c23" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c23" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c23" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c23" >&5
-printf '%s\n' "$ac_cv_prog_cc_c23" >&6; }
-     CC="$CC $ac_cv_prog_cc_c23" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c23
-  ac_prog_cc_stdc=c23 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C11 features" >&5
-printf %s "checking for $CC option to enable C11 features... " >&6; }
-if test ${ac_cv_prog_cc_c11+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c11=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c11_program
-_ACEOF
-for ac_arg in '' -std=gnu11 -std:c11
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c11=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c11" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c11" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c11" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c11" >&5
-printf '%s\n' "$ac_cv_prog_cc_c11" >&6; }
-     CC="$CC $ac_cv_prog_cc_c11" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c11
-  ac_prog_cc_stdc=c11 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C99 features" >&5
-printf %s "checking for $CC option to enable C99 features... " >&6; }
-if test ${ac_cv_prog_cc_c99+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c99=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c99_program
-_ACEOF
-for ac_arg in '' -std=gnu99 -std=c99 -c99 -qlanglvl=extc1x -qlanglvl=extc99 -AC99 -D_STDC_C99=
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c99=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c99" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c99" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c99" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c99" >&5
-printf '%s\n' "$ac_cv_prog_cc_c99" >&6; }
-     CC="$CC $ac_cv_prog_cc_c99" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c99
-  ac_prog_cc_stdc=c99 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C89 features" >&5
-printf %s "checking for $CC option to enable C89 features... " >&6; }
-if test ${ac_cv_prog_cc_c89+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c89=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c89_program
-_ACEOF
-for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std -Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__"
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c89=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c89" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c89" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c89" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5
-printf '%s\n' "$ac_cv_prog_cc_c89" >&6; }
-     CC="$CC $ac_cv_prog_cc_c89" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c89
-  ac_prog_cc_stdc=c89 ;;
-esac
-fi
-fi
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-  ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $CC understands -c and -o together" >&5
-printf %s "checking whether $CC understands -c and -o together... " >&6; }
-if test ${am_cv_prog_cc_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-  # Make sure it works both with $CC and with simple cc.
-  # Following AC_PROG_CC_C_O, we do the test twice because some
-  # compilers refuse to overwrite an existing .o file with -o,
-  # though they will create one.
-  am_cv_prog_cc_c_o=yes
-  for am_i in 1 2; do
-    if { echo "$as_me:$LINENO: $CC -c conftest.$ac_ext -o conftest2.$ac_objext" >&5
-   ($CC -c conftest.$ac_ext -o conftest2.$ac_objext) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } \
-         && test -f conftest2.$ac_objext; then
-      : OK
-    else
-      am_cv_prog_cc_c_o=no
-      break
-    fi
-  done
-  # aligned with autoconf, so not including core; see bug#72225.
-  rm -f -r a.out a.exe b.out conftest.$ac_ext conftest.$ac_objext \
-    conftest.dSYM conftest1.$ac_ext conftest1.$ac_objext conftest1.dSYM \
-    conftest2.$ac_ext conftest2.$ac_objext conftest2.dSYM
-  unset am_i ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_prog_cc_c_o" >&5
-printf '%s\n' "$am_cv_prog_cc_c_o" >&6; }
-if test "$am_cv_prog_cc_c_o" != yes; then
-   # Losing compiler, so override with the script.
-   # FIXME: It is wrong to rewrite CC.
-   # But if we don't then we get into trouble of one sort or another.
-   # A longer-term fix would be to have automake use am__CC in this case,
-   # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)"
-   CC="$am_aux_dir/compile $CC"
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-
-ac_header= ac_cache=
-for ac_item in $ac_header_c_list
-do
-  if test $ac_cache; then
-    ac_fn_c_check_header_compile "$LINENO" $ac_header ac_cv_header_$ac_cache "$ac_includes_default"
-    if eval test \"x\$ac_cv_header_$ac_cache\" = xyes; then
-      printf '%s\n' "#define $ac_item 1" >> confdefs.h
-    fi
-    ac_header= ac_cache=
-  elif test $ac_header; then
-    ac_cache=$ac_item
-  else
-    ac_header=$ac_item
-  fi
-done
-
-
-
-
-
-
-
-
-if test $ac_cv_header_stdlib_h = yes && test $ac_cv_header_string_h = yes
-then :
-  
-printf '%s\n' "@%:@define STDC_HEADERS 1" >>confdefs.h
-
-fi
-
-
-
-    
-  
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether it is safe to define __EXTENSIONS__" >&5
-printf %s "checking whether it is safe to define __EXTENSIONS__... " >&6; }
-if test ${ac_cv_safe_to_define___extensions__+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-#         define __EXTENSIONS__ 1
-          $ac_includes_default
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_safe_to_define___extensions__=yes
-else case e in @%:@(
-  e) ac_cv_safe_to_define___extensions__=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_safe_to_define___extensions__" >&5
-printf '%s\n' "$ac_cv_safe_to_define___extensions__" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether _XOPEN_SOURCE should be defined" >&5
-printf %s "checking whether _XOPEN_SOURCE should be defined... " >&6; }
-if test ${ac_cv_should_define__xopen_source+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_should_define__xopen_source=no
-    if test $ac_cv_header_wchar_h = yes
-then :
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-          #include <wchar.h>
-          mbstate_t x;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-            #define _XOPEN_SOURCE 500
-            #include <wchar.h>
-            mbstate_t x;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_should_define__xopen_source=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_should_define__xopen_source" >&5
-printf '%s\n' "$ac_cv_should_define__xopen_source" >&6; }
-
-  printf '%s\n' "@%:@define _ALL_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _COSMO_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _DARWIN_C_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _GNU_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _HPUX_ALT_XOPEN_SOCKET_API 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _NETBSD_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _OPENBSD_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _POSIX_PTHREAD_SEMANTICS 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_ATTRIBS_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_BFP_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_DFP_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_FUNCS_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_TYPES_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_LIB_EXT2__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_MATH_SPEC_FUNCS__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _TANDEM_SOURCE 1" >>confdefs.h
-
-  if test $ac_cv_header_minix_config_h = yes
-then :
-  MINIX=yes
-    printf '%s\n' "@%:@define _MINIX 1" >>confdefs.h
-
-    printf '%s\n' "@%:@define _POSIX_SOURCE 1" >>confdefs.h
-
-    printf '%s\n' "@%:@define _POSIX_1_SOURCE 2" >>confdefs.h
-
-else case e in @%:@(
-  e) MINIX= ;;
-esac
-fi
-  if test $ac_cv_safe_to_define___extensions__ = yes
-then :
-  printf '%s\n' "@%:@define __EXTENSIONS__ 1" >>confdefs.h
-
-fi
-  if test $ac_cv_should_define__xopen_source = yes
-then :
-  printf '%s\n' "@%:@define _XOPEN_SOURCE 500" >>confdefs.h
-
-fi
-
-
-# Initialize Automake
-am__api_version='1.18'
-
-
-  # Find a good install program.  We prefer a C program (faster),
-# so one script is as good as another.  But avoid the broken or
-# incompatible versions:
-# SysV /etc/install, /usr/sbin/install
-# SunOS /usr/etc/install
-# IRIX /sbin/install
-# AIX /bin/install
-# AmigaOS /C/install, which installs bootblocks on floppy discs
-# AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag
-# AFS /usr/afsws/bin/install, which mishandles nonexistent args
-# SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
-# OS/2's system install, which has a completely different semantic
-# ./install, which can be erroneously created by make from ./install.sh.
-# Reject install programs that cannot install multiple files.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5
-printf %s "checking for a BSD-compatible install... " >&6; }
-if test -z "$INSTALL"; then
-if test ${ac_cv_path_install+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    # Account for fact that we put trailing slashes in our PATH walk.
-case $as_dir in @%:@((
-  ./ | /[cC]/* | \
-  /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \
-  ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \
-  /usr/ucb/* ) ;;
-  *)
-    # OSF/1 and SCO ODT 3.0 have their own names for install.
-    # Don't use installbsd from OSF/1 since it installs stuff as root
-    # by default.
-    for ac_prog in ginstall scoinst install; do
-      for ac_exec_ext in '' $ac_executable_extensions; do
-	if as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext"; then
-	  if test $ac_prog = install &&
-	    grep dspmsg "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # AIX install.  It has an incompatible calling convention.
-	    :
-	  elif test $ac_prog = install &&
-	    grep pwplus "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # program-specific install script used by HP pwplus--don't use.
-	    :
-	  else
-	    rm -rf conftest.one conftest.two conftest.dir
-	    echo one > conftest.one
-	    echo two > conftest.two
-	    mkdir conftest.dir
-	    if "$as_dir$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir/" &&
-	      test -s conftest.one && test -s conftest.two &&
-	      test -s conftest.dir/conftest.one &&
-	      test -s conftest.dir/conftest.two
-	    then
-	      ac_cv_path_install="$as_dir$ac_prog$ac_exec_ext -c"
-	      break 3
-	    fi
-	  fi
-	fi
-      done
-    done
-    ;;
-esac
-
-  done
-IFS=$as_save_IFS
-
-rm -rf conftest.one conftest.two conftest.dir
- ;;
-esac
-fi
-  if test ${ac_cv_path_install+y}; then
-    INSTALL=$ac_cv_path_install
-  else
-    # As a last resort, use the slow shell script.  Don't cache a
-    # value for INSTALL within a source directory, because that will
-    # break other packages using the cache if that directory is
-    # removed, or if the value is a relative name.
-    INSTALL=$ac_install_sh
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5
-printf '%s\n' "$INSTALL" >&6; }
-
-# Use test -z because SunOS4 sh mishandles braces in ${var-val}.
-# It thinks the first close brace ends the variable substitution.
-test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}'
-
-test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}'
-
-test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether sleep supports fractional seconds" >&5
-printf %s "checking whether sleep supports fractional seconds... " >&6; }
-if test ${am_cv_sleep_fractional_seconds+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if sleep 0.001 2>/dev/null
-then :
-  am_cv_sleep_fractional_seconds=yes
-else case e in @%:@(
-  e) am_cv_sleep_fractional_seconds=no ;;
-esac
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_sleep_fractional_seconds" >&5
-printf '%s\n' "$am_cv_sleep_fractional_seconds" >&6; }
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking filesystem timestamp resolution" >&5
-printf %s "checking filesystem timestamp resolution... " >&6; }
-if test ${am_cv_filesystem_timestamp_resolution+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) # Default to the worst case.
-am_cv_filesystem_timestamp_resolution=2
-
-# Only try to go finer than 1 sec if sleep can do it.
-# Don't try 1 sec, because if 0.01 sec and 0.1 sec don't work,
-# - 1 sec is not much of a win compared to 2 sec, and
-# - it takes 2 seconds to perform the test whether 1 sec works.
-# 
-# Instead, just use the default 2s on platforms that have 1s resolution,
-# accept the extra 1s delay when using $sleep in the Automake tests, in
-# exchange for not incurring the 2s delay for running the test for all
-# packages.
-#
-am_try_resolutions=
-if test "$am_cv_sleep_fractional_seconds" = yes; then
-  # Even a millisecond often causes a bunch of false positives,
-  # so just try a hundredth of a second. The time saved between .001 and
-  # .01 is not terribly consequential.
-  am_try_resolutions="0.01 0.1 $am_try_resolutions"
-fi
-
-# In order to catch current-generation FAT out, we must *modify* files
-# that already exist; the *creation* timestamp is finer.  Use names
-# that make ls -t sort them differently when they have equal
-# timestamps than when they have distinct timestamps, keeping
-# in mind that ls -t prints the *newest* file first.
-rm -f conftest.ts?
-: > conftest.ts1
-: > conftest.ts2
-: > conftest.ts3
-
-# Make sure ls -t actually works.  Do 'set' in a subshell so we don't
-# clobber the current shell's arguments. (Outer-level square brackets
-# are removed by m4; they're present so that m4 does not expand
-# <dollar><star>; be careful, easy to get confused.)
-if (
-     set X `ls -t conftest.ts[12]` &&
-     {
-       test "$*" != "X conftest.ts1 conftest.ts2" ||
-       test "$*" != "X conftest.ts2 conftest.ts1";
-     }
-); then :; else
-  # If neither matched, then we have a broken ls.  This can happen
-  # if, for instance, CONFIG_SHELL is bash and it inherits a
-  # broken ls alias from the environment.  This has actually
-  # happened.  Such a system could not be considered "sane".
-  printf '%s\n' ""Bad output from ls -t: \"`ls -t conftest.ts[12]`\""" >&5
-  { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "ls -t produces unexpected output.
-Make sure there is not a broken ls alias in your environment.
-See 'config.log' for more details" "$LINENO" 5; }
-fi
-
-for am_try_res in $am_try_resolutions; do
-  # Any one fine-grained sleep might happen to cross the boundary
-  # between two values of a coarser actual resolution, but if we do
-  # two fine-grained sleeps in a row, at least one of them will fall
-  # entirely within a coarse interval.
-  echo alpha > conftest.ts1
-  sleep $am_try_res
-  echo beta > conftest.ts2
-  sleep $am_try_res
-  echo gamma > conftest.ts3
-
-  # We assume that 'ls -t' will make use of high-resolution
-  # timestamps if the operating system supports them at all.
-  if (set X `ls -t conftest.ts?` &&
-      test "$2" = conftest.ts3 &&
-      test "$3" = conftest.ts2 &&
-      test "$4" = conftest.ts1); then
-    #
-    # Ok, ls -t worked. If we're at a resolution of 1 second, we're done,
-    # because we don't need to test make.
-    make_ok=true
-    if test $am_try_res != 1; then
-      # But if we've succeeded so far with a subsecond resolution, we
-      # have one more thing to check: make. It can happen that
-      # everything else supports the subsecond mtimes, but make doesn't;
-      # notably on macOS, which ships make 3.81 from 2006 (the last one
-      # released under GPLv2). https://bugs.gnu.org/68808
-      # 
-      # We test $MAKE if it is defined in the environment, else "make".
-      # It might get overridden later, but our hope is that in practice
-      # it does not matter: it is the system "make" which is (by far)
-      # the most likely to be broken, whereas if the user overrides it,
-      # probably they did so with a better, or at least not worse, make.
-      # https://lists.gnu.org/archive/html/automake/2024-06/msg00051.html
-      #
-      # Create a Makefile (real tab character here):
-      rm -f conftest.mk
-      echo 'conftest.ts1: conftest.ts2' >conftest.mk
-      echo '	touch conftest.ts2' >>conftest.mk
-      #
-      # Now, running
-      #   touch conftest.ts1; touch conftest.ts2; make
-      # should touch ts1 because ts2 is newer. This could happen by luck,
-      # but most often, it will fail if make's support is insufficient. So
-      # test for several consecutive successes.
-      #
-      # (We reuse conftest.ts[12] because we still want to modify existing
-      # files, not create new ones, per above.)
-      n=0
-      make=${MAKE-make}
-      until test $n -eq 3; do
-        echo one > conftest.ts1
-        sleep $am_try_res
-        echo two > conftest.ts2 # ts2 should now be newer than ts1
-        if $make -f conftest.mk | grep 'up to date' >/dev/null; then
-          make_ok=false
-          break # out of $n loop
-        fi
-        n=`expr $n + 1`
-      done
-    fi
-    #
-    if $make_ok; then
-      # Everything we know to check worked out, so call this resolution good.
-      am_cv_filesystem_timestamp_resolution=$am_try_res
-      break # out of $am_try_res loop
-    fi
-    # Otherwise, we'll go on to check the next resolution.
-  fi
-done
-rm -f conftest.ts?
-# (end _am_filesystem_timestamp_resolution)
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_filesystem_timestamp_resolution" >&5
-printf '%s\n' "$am_cv_filesystem_timestamp_resolution" >&6; }
-
-# This check should not be cached, as it may vary across builds of
-# different projects.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether build environment is sane" >&5
-printf %s "checking whether build environment is sane... " >&6; }
-# Reject unsafe characters in $srcdir or the absolute working directory
-# name.  Accept space and tab only in the latter.
-am_lf='
-'
-case `pwd` in
-  *[\\\"\#\$\&\'\`$am_lf]*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-    as_fn_error $? "unsafe absolute working directory name" "$LINENO" 5;;
-esac
-case $srcdir in
-  *[\\\"\#\$\&\'\`$am_lf\ \	]*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-    as_fn_error $? "unsafe srcdir value: '$srcdir'" "$LINENO" 5;;
-esac
-
-# Do 'set' in a subshell so we don't clobber the current shell's
-# arguments.  Must try -L first in case configure is actually a
-# symlink; some systems play weird games with the mod time of symlinks
-# (eg FreeBSD returns the mod time of the symlink's containing
-# directory).
-am_build_env_is_sane=no
-am_has_slept=no
-rm -f conftest.file
-for am_try in 1 2; do
-  echo "timestamp, slept: $am_has_slept" > conftest.file
-  if (
-    set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null`
-    if test "$*" = "X"; then
-      # -L didn't work.
-      set X `ls -t "$srcdir/configure" conftest.file`
-    fi
-    test "$2" = conftest.file
-  ); then
-    am_build_env_is_sane=yes
-    break
-  fi
-  # Just in case.
-  sleep "$am_cv_filesystem_timestamp_resolution"
-  am_has_slept=yes
-done
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_build_env_is_sane" >&5
-printf '%s\n' "$am_build_env_is_sane" >&6; }
-if test "$am_build_env_is_sane" = no; then
-  as_fn_error $? "newly created file is older than distributed files!
-Check your system clock" "$LINENO" 5
-fi
-
-# If we didn't sleep, we still need to ensure time stamps of config.status and
-# generated files are strictly newer.
-am_sleep_pid=
-if test -e conftest.file || grep 'slept: no' conftest.file >/dev/null 2>&1
-then :
-  
-else case e in @%:@(
-  e)   ( sleep "$am_cv_filesystem_timestamp_resolution" ) &
-  am_sleep_pid=$!
- ;;
-esac
-fi
-
-rm -f conftest.file
-
-test "$program_prefix" != NONE &&
-  program_transform_name="s&^&$program_prefix&;$program_transform_name"
-# Use a double $ so make ignores it.
-test "$program_suffix" != NONE &&
-  program_transform_name="s&\$&$program_suffix&;$program_transform_name"
-# Double any \ or $.
-# By default was 's,x,x', remove it if useless.
-ac_script='s/[\\$]/&&/g;s/;s,x,x,$//'
-program_transform_name=`printf '%s\n' "$program_transform_name" | sed "$ac_script"`
-
-
-  if test x"${MISSING+set}" != xset; then
-  MISSING="\${SHELL} '$am_aux_dir/missing'"
-fi
-# Use eval to expand $SHELL
-if eval "$MISSING --is-lightweight"; then
-  am_missing_run="$MISSING "
-else
-  am_missing_run=
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: 'missing' script is too old or missing" >&5
-printf '%s\n' "$as_me: WARNING: 'missing' script is too old or missing" >&2;}
-fi
-
-if test x"${install_sh+set}" != xset; then
-  case $am_aux_dir in
-  *\ * | *\	*)
-    install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;;
-  *)
-    install_sh="\${SHELL} $am_aux_dir/install-sh"
-  esac
-fi
-
-# Installed binaries are usually stripped using 'strip' when the user
-# run "make install-strip".  However 'strip' might not be the right
-# tool to use in cross-compilation environments, therefore Automake
-# will honor the 'STRIP' environment variable to overrule this program.
-if test "$cross_compiling" != no; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-printf '%s\n' "$STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-printf '%s\n' "$ac_ct_STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-fi
-INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s"
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a race-free mkdir -p" >&5
-printf %s "checking for a race-free mkdir -p... " >&6; }
-if test -z "$MKDIR_P"; then
-  if test ${ac_cv_path_mkdir+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/opt/sfw/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in mkdir gmkdir; do
-	 for ac_exec_ext in '' $ac_executable_extensions; do
-	   as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext" || continue
-	   case `"$as_dir$ac_prog$ac_exec_ext" --version 2>&1` in #(
-	     'mkdir ('*'coreutils) '* | \
-	     *'BusyBox '* | \
-	     'mkdir (fileutils) '4.1*)
-	       ac_cv_path_mkdir=$as_dir$ac_prog$ac_exec_ext
-	       break 3;;
-	   esac
-	 done
-       done
-  done
-IFS=$as_save_IFS
- ;;
-esac
-fi
-
-  test -d ./--version && rmdir ./--version
-  if test ${ac_cv_path_mkdir+y}; then
-    MKDIR_P="$ac_cv_path_mkdir -p"
-  else
-    # As a last resort, use plain mkdir -p,
-    # in the hope it doesn't have the bugs of ancient mkdir.
-    MKDIR_P='mkdir -p'
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MKDIR_P" >&5
-printf '%s\n' "$MKDIR_P" >&6; }
-
-for ac_prog in gawk mawk nawk awk 'busybox awk'
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_AWK+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$AWK"; then
-  ac_cv_prog_AWK="$AWK" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AWK="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-AWK=$ac_cv_prog_AWK
-if test -n "$AWK"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5
-printf '%s\n' "$AWK" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$AWK" && break
-done
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} sets \$(MAKE)" >&5
-printf %s "checking whether ${MAKE-make} sets \$(MAKE)... " >&6; }
-set x ${MAKE-make}
-ac_make=`printf '%s\n' "$2" | sed 's/+/p/g; s/[^a-zA-Z0-9_]/_/g'`
-if eval test \${ac_cv_prog_make_${ac_make}_set+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat >conftest.make <<\_ACEOF
-SHELL = /bin/sh
-all:
-	@printf '%s\n' '@@@%%%=$(MAKE)=@@@%%%'
-_ACEOF
-# GNU make sometimes prints "make[1]: Entering ...", which would confuse us.
-case `${MAKE-make} -f conftest.make 2>/dev/null` in
-  *@@@%%%=?*=@@@%%%*)
-    eval ac_cv_prog_make_${ac_make}_set=yes;;
-  *)
-    eval ac_cv_prog_make_${ac_make}_set=no;;
-esac
-rm -f conftest.make ;;
-esac
-fi
-if eval test \$ac_cv_prog_make_${ac_make}_set = yes; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-  SET_MAKE=
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-  SET_MAKE="MAKE=${MAKE-make}"
-fi
-
-rm -rf .tst 2>/dev/null
-mkdir .tst 2>/dev/null
-if test -d .tst; then
-  am__leading_dot=.
-else
-  am__leading_dot=_
-fi
-rmdir .tst 2>/dev/null
-
-DEPDIR="${am__leading_dot}deps"
-
-ac_config_commands="$ac_config_commands depfiles"
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} supports the include directive" >&5
-printf %s "checking whether ${MAKE-make} supports the include directive... " >&6; }
-cat > confinc.mk << 'END'
-am__doit:
-	@echo this is the am__doit target >confinc.out
-.PHONY: am__doit
-END
-am__include="#"
-am__quote=
-# BSD make does it like this.
-echo '.include "confinc.mk" # ignored' > confmf.BSD
-# Other make implementations (GNU, Solaris 10, AIX) do it like this.
-echo 'include confinc.mk # ignored' > confmf.GNU
-_am_result=no
-for s in GNU BSD; do
-  { echo "$as_me:$LINENO: ${MAKE-make} -f confmf.$s && cat confinc.out" >&5
-   (${MAKE-make} -f confmf.$s && cat confinc.out) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-  case $?:`cat confinc.out 2>/dev/null` in @%:@(
-  '0:this is the am__doit target') :
-    case $s in @%:@(
-  BSD) :
-    am__include='.include' am__quote='"' ;; @%:@(
-  *) :
-    am__include='include' am__quote='' ;;
-esac ;; @%:@(
-  *) :
-     ;;
-esac
-  if test "$am__include" != "#"; then
-    _am_result="yes ($s style)"
-    break
-  fi
-done
-rm -f confinc.* confmf.*
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ${_am_result}" >&5
-printf '%s\n' "${_am_result}" >&6; }
-
-@%:@ Check whether --enable-dependency-tracking was given.
-if test ${enable_dependency_tracking+y}
-then :
-  enableval=$enable_dependency_tracking; 
-fi
-
-if test "x$enable_dependency_tracking" != xno; then
-  am_depcomp="$ac_aux_dir/depcomp"
-  AMDEPBACKSLASH='\'
-  am__nodep='_no'
-fi
- if test "x$enable_dependency_tracking" != xno; then
-  AMDEP_TRUE=
-  AMDEP_FALSE='#'
-else
-  AMDEP_TRUE='#'
-  AMDEP_FALSE=
-fi
-
-
-AM_DEFAULT_VERBOSITY=1
-@%:@ Check whether --enable-silent-rules was given.
-if test ${enable_silent_rules+y}
-then :
-  enableval=$enable_silent_rules; 
-fi
-
-am_make=${MAKE-make}
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5
-printf %s "checking whether $am_make supports nested variables... " >&6; }
-if test ${am_cv_make_support_nested_variables+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if printf '%s\n' 'TRUE=$(BAR$(V))
-BAR0=false
-BAR1=true
-V=1
-am__doit:
-	@$(TRUE)
-.PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then
-  am_cv_make_support_nested_variables=yes
-else
-  am_cv_make_support_nested_variables=no
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5
-printf '%s\n' "$am_cv_make_support_nested_variables" >&6; }
-AM_BACKSLASH='\'
-
-am__rm_f_notfound=
-if (rm -f && rm -fr && rm -rf) 2>/dev/null
-then :
-  
-else case e in @%:@(
-  e) am__rm_f_notfound='""' ;;
-esac
-fi
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking xargs -n works" >&5
-printf %s "checking xargs -n works... " >&6; }
-if test ${am_cv_xargs_n_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test "`echo 1 2 3 | xargs -n2 echo`" = "1 2
-3"
-then :
-  am_cv_xargs_n_works=yes
-else case e in @%:@(
-  e) am_cv_xargs_n_works=no ;;
-esac
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_xargs_n_works" >&5
-printf '%s\n' "$am_cv_xargs_n_works" >&6; }
-if test "$am_cv_xargs_n_works" = yes
-then :
-  am__xargs_n='xargs -n'
-else case e in @%:@(
-  e)   am__xargs_n='am__xargs_n () { shift; sed "s/ /\\n/g" | while read am__xargs_n_arg; do "" "$am__xargs_n_arg"; done; }'
- ;;
-esac
-fi
-
-if test "`cd $srcdir && pwd`" != "`pwd`"; then
-  # Use -I$(srcdir) only when $(srcdir) != ., so that make's output
-  # is not polluted with repeated "-I."
-  am__isrc=' -I$(srcdir)'
-  # test to see if srcdir already configured
-  if test -f $srcdir/config.status; then
-    as_fn_error $? "source directory already configured; run \"make distclean\" there first" "$LINENO" 5
-  fi
-fi
-
-# test whether we have cygpath
-if test -z "$CYGPATH_W"; then
-  if (cygpath --version) >/dev/null 2>/dev/null; then
-    CYGPATH_W='cygpath -w'
-  else
-    CYGPATH_W=echo
-  fi
-fi
-
-
-# Define the identity of the package.
- PACKAGE='libXext'
- VERSION='1.3.7'
-
-
-printf '%s\n' "@%:@define PACKAGE \"$PACKAGE\"" >>confdefs.h
-
- 
-printf '%s\n' "@%:@define VERSION \"$VERSION\"" >>confdefs.h
-
-# Some tools Automake needs.
-
-ACLOCAL=${ACLOCAL-"${am_missing_run}aclocal-${am__api_version}"}
-
-
-AUTOCONF=${AUTOCONF-"${am_missing_run}autoconf"}
-
-
-AUTOMAKE=${AUTOMAKE-"${am_missing_run}automake-${am__api_version}"}
-
-
-AUTOHEADER=${AUTOHEADER-"${am_missing_run}autoheader"}
-
-
-MAKEINFO=${MAKEINFO-"${am_missing_run}makeinfo"}
-
-# For better backward compatibility.  To be removed once Automake 1.9.x
-# dies out for good.  For more background, see:
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00001.html>
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00014.html>
-mkdir_p='$(MKDIR_P)'
-
-# We need awk for the "check" target (and possibly the TAP driver).  The
-# system "awk" is bad on some platforms.
-# Always define AMTAR for backward compatibility.  Yes, it's still used
-# in the wild :-(  We should find a proper way to deprecate it ...
-AMTAR='$${TAR-tar}'
-
-
-# We'll loop over all known methods to create a tar archive until one works.
-_am_tools='gnutar plaintar pax cpio none'
-
-# The POSIX 1988 'ustar' format is defined with fixed-size fields.
-      # There is notably a 21 bits limit for the UID and the GID.  In fact,
-      # the 'pax' utility can hang on bigger UID/GID (see automake bug#8343
-      # and bug#13588).
-      am_max_uid=2097151 # 2^21 - 1
-      am_max_gid=$am_max_uid
-      # The $UID and $GID variables are not portable, so we need to resort
-      # to the POSIX-mandated id(1) utility.  Errors in the 'id' calls
-      # below are definitely unexpected, so allow the users to see them
-      # (that is, avoid stderr redirection).
-      am_uid=`id -u || echo unknown`
-      am_gid=`id -g || echo unknown`
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether UID '$am_uid' is supported by ustar format" >&5
-printf %s "checking whether UID '$am_uid' is supported by ustar format... " >&6; }
-      if test x$am_uid = xunknown; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ancient id detected; assuming current UID is ok, but dist-ustar might not work" >&5
-printf '%s\n' "$as_me: WARNING: ancient id detected; assuming current UID is ok, but dist-ustar might not work" >&2;}
-      elif test $am_uid -le $am_max_uid; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        _am_tools=none
-      fi
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether GID '$am_gid' is supported by ustar format" >&5
-printf %s "checking whether GID '$am_gid' is supported by ustar format... " >&6; }
-      if test x$gm_gid = xunknown; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ancient id detected; assuming current GID is ok, but dist-ustar might not work" >&5
-printf '%s\n' "$as_me: WARNING: ancient id detected; assuming current GID is ok, but dist-ustar might not work" >&2;}
-      elif test $am_gid -le $am_max_gid; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        _am_tools=none
-      fi
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to create a ustar tar archive" >&5
-printf %s "checking how to create a ustar tar archive... " >&6; }
-
-  # Go ahead even if we have the value already cached.  We do so because we
-  # need to set the values for the 'am__tar' and 'am__untar' variables.
-  _am_tools=${am_cv_prog_tar_ustar-$_am_tools}
-
-  for _am_tool in $_am_tools; do
-    case $_am_tool in
-    gnutar)
-      for _am_tar in tar gnutar gtar; do
-        { echo "$as_me:$LINENO: $_am_tar --version" >&5
-   ($_am_tar --version) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } && break
-      done
-      am__tar="$_am_tar --format=ustar -chf - "'"$$tardir"'
-      am__tar_="$_am_tar --format=ustar -chf - "'"$tardir"'
-      am__untar="$_am_tar -xf -"
-      ;;
-    plaintar)
-      # Must skip GNU tar: if it does not support --format= it doesn't create
-      # ustar tarball either.
-      (tar --version) >/dev/null 2>&1 && continue
-      am__tar='tar chf - "$$tardir"'
-      am__tar_='tar chf - "$tardir"'
-      am__untar='tar xf -'
-      ;;
-    pax)
-      am__tar='pax -L -x ustar -w "$$tardir"'
-      am__tar_='pax -L -x ustar -w "$tardir"'
-      am__untar='pax -r'
-      ;;
-    cpio)
-      am__tar='find "$$tardir" -print | cpio -o -H ustar -L'
-      am__tar_='find "$tardir" -print | cpio -o -H ustar -L'
-      am__untar='cpio -i -H ustar -d'
-      ;;
-    none)
-      am__tar=false
-      am__tar_=false
-      am__untar=false
-      ;;
-    esac
-
-    # If the value was cached, stop now.  We just wanted to have am__tar
-    # and am__untar set.
-    test -n "${am_cv_prog_tar_ustar}" && break
-
-    # tar/untar a dummy directory, and stop if the command works.
-    rm -rf conftest.dir
-    mkdir conftest.dir
-    echo GrepMe > conftest.dir/file
-    { echo "$as_me:$LINENO: tardir=conftest.dir && eval $am__tar_ >conftest.tar" >&5
-   (tardir=conftest.dir && eval $am__tar_ >conftest.tar) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-    rm -rf conftest.dir
-    if test -s conftest.tar; then
-      { echo "$as_me:$LINENO: $am__untar <conftest.tar" >&5
-   ($am__untar <conftest.tar) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-      { echo "$as_me:$LINENO: cat conftest.dir/file" >&5
-   (cat conftest.dir/file) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-      grep GrepMe conftest.dir/file >/dev/null 2>&1 && break
-    fi
-  done
-  rm -rf conftest.dir
-
-  if test ${am_cv_prog_tar_ustar+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) am_cv_prog_tar_ustar=$_am_tool ;;
-esac
-fi
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_prog_tar_ustar" >&5
-printf '%s\n' "$am_cv_prog_tar_ustar" >&6; }
-
-
-
-
-
-depcc="$CC"   am_compiler_list=
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking dependency style of $depcc" >&5
-printf %s "checking dependency style of $depcc... " >&6; }
-if test ${am_cv_CC_dependencies_compiler_type+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then
-  # We make a subdir and do the tests there.  Otherwise we can end up
-  # making bogus files that we don't know about and never remove.  For
-  # instance it was reported that on HP-UX the gcc test will end up
-  # making a dummy file named 'D' -- because '-MD' means "put the output
-  # in D".
-  rm -rf conftest.dir
-  mkdir conftest.dir
-  # Copy depcomp to subdir because otherwise we won't find it if we're
-  # using a relative directory.
-  cp "$am_depcomp" conftest.dir
-  cd conftest.dir
-  # We will build objects and dependencies in a subdirectory because
-  # it helps to detect inapplicable dependency modes.  For instance
-  # both Tru64's cc and ICC support -MD to output dependencies as a
-  # side effect of compilation, but ICC will put the dependencies in
-  # the current directory while Tru64 will put them in the object
-  # directory.
-  mkdir sub
-
-  am_cv_CC_dependencies_compiler_type=none
-  if test "$am_compiler_list" = ""; then
-     am_compiler_list=`sed -n 's/^#*\([a-zA-Z0-9]*\))$/\1/p' < ./depcomp`
-  fi
-  am__universal=false
-  case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac
-
-  for depmode in $am_compiler_list; do
-    # Setup a source with many dependencies, because some compilers
-    # like to wrap large dependency lists on column 80 (with \), and
-    # we should not choose a depcomp mode which is confused by this.
-    #
-    # We need to recreate these files for each test, as the compiler may
-    # overwrite some of them when testing with obscure command lines.
-    # This happens at least with the AIX C compiler.
-    : > sub/conftest.c
-    for i in 1 2 3 4 5 6; do
-      echo '#include "conftst'$i'.h"' >> sub/conftest.c
-      # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with
-      # Solaris 10 /bin/sh.
-      echo '/* dummy */' > sub/conftst$i.h
-    done
-    echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
-
-    # We check with '-c' and '-o' for the sake of the "dashmstdout"
-    # mode.  It turns out that the SunPro C++ compiler does not properly
-    # handle '-M -o', and we need to detect this.  Also, some Intel
-    # versions had trouble with output in subdirs.
-    am__obj=sub/conftest.${OBJEXT-o}
-    am__minus_obj="-o $am__obj"
-    case $depmode in
-    gcc)
-      # This depmode causes a compiler race in universal mode.
-      test "$am__universal" = false || continue
-      ;;
-    nosideeffect)
-      # After this tag, mechanisms are not by side-effect, so they'll
-      # only be used when explicitly requested.
-      if test "x$enable_dependency_tracking" = xyes; then
-	continue
-      else
-	break
-      fi
-      ;;
-    msvc7 | msvc7msys | msvisualcpp | msvcmsys)
-      # This compiler won't grok '-c -o', but also, the minuso test has
-      # not run yet.  These depmodes are late enough in the game, and
-      # so weak that their functioning should not be impacted.
-      am__obj=conftest.${OBJEXT-o}
-      am__minus_obj=
-      ;;
-    none) break ;;
-    esac
-    if depmode=$depmode \
-       source=sub/conftest.c object=$am__obj \
-       depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
-       $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \
-         >/dev/null 2>conftest.err &&
-       grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep $am__obj sub/conftest.Po > /dev/null 2>&1 &&
-       ${MAKE-make} -s -f confmf > /dev/null 2>&1; then
-      # icc doesn't choke on unknown options, it will just issue warnings
-      # or remarks (even with -Werror).  So we grep stderr for any message
-      # that says an option was ignored or not supported.
-      # When given -MP, icc 7.0 and 7.1 complain thus:
-      #   icc: Command line warning: ignoring option '-M'; no argument required
-      # The diagnosis changed in icc 8.0:
-      #   icc: Command line remark: option '-MP' not supported
-      if (grep 'ignoring option' conftest.err ||
-          grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else
-        am_cv_CC_dependencies_compiler_type=$depmode
-        break
-      fi
-    fi
-  done
-
-  cd ..
-  rm -rf conftest.dir
-else
-  am_cv_CC_dependencies_compiler_type=none
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_CC_dependencies_compiler_type" >&5
-printf '%s\n' "$am_cv_CC_dependencies_compiler_type" >&6; }
-CCDEPMODE=depmode=$am_cv_CC_dependencies_compiler_type
-
- if 
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_CC_dependencies_compiler_type" = gcc3; then
-  am__fastdepCC_TRUE=
-  am__fastdepCC_FALSE='#'
-else
-  am__fastdepCC_TRUE='#'
-  am__fastdepCC_FALSE=
-fi
-
-
-# Variables for tags utilities; see am/tags.am
-if test -z "$CTAGS"; then
-  CTAGS=ctags
-fi
-
-if test -z "$ETAGS"; then
-  ETAGS=etags
-fi
-
-if test -z "$CSCOPE"; then
-  CSCOPE=cscope
-fi
-
-
-
-
-
-
-
-
-# Initialize libtool
-case `pwd` in
-  *\ * | *\	*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&5
-printf '%s\n' "$as_me: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&2;} ;;
-esac
-
-
-
-macro_version='2.5.4'
-macro_revision='2.5.4'
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-
-  
-ltmain=$ac_aux_dir/ltmain.sh
-
-
-  
-  # Make sure we can run config.sub.
-$SHELL "${ac_aux_dir}config.sub" sun4 >/dev/null 2>&1 ||
-  as_fn_error $? "cannot run $SHELL ${ac_aux_dir}config.sub" "$LINENO" 5
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking build system type" >&5
-printf %s "checking build system type... " >&6; }
-if test ${ac_cv_build+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_build_alias=$build_alias
-test "x$ac_build_alias" = x &&
-  ac_build_alias=`$SHELL "${ac_aux_dir}config.guess"`
-test "x$ac_build_alias" = x &&
-  as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5
-ac_cv_build=`$SHELL "${ac_aux_dir}config.sub" $ac_build_alias` ||
-  as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $ac_build_alias failed" "$LINENO" 5
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5
-printf '%s\n' "$ac_cv_build" >&6; }
-case $ac_cv_build in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical build" "$LINENO" 5;;
-esac
-build=$ac_cv_build
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_build
-shift
-build_cpu=$1
-build_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-build_os=$*
-IFS=$ac_save_IFS
-case $build_os in *\ *) build_os=`printf '%s\n' "$build_os" | sed 's/ /-/g'`;; esac
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking host system type" >&5
-printf %s "checking host system type... " >&6; }
-if test ${ac_cv_host+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test "x$host_alias" = x; then
-  ac_cv_host=$ac_cv_build
-else
-  ac_cv_host=`$SHELL "${ac_aux_dir}config.sub" $host_alias` ||
-    as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $host_alias failed" "$LINENO" 5
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5
-printf '%s\n' "$ac_cv_host" >&6; }
-case $ac_cv_host in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical host" "$LINENO" 5;;
-esac
-host=$ac_cv_host
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_host
-shift
-host_cpu=$1
-host_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-host_os=$*
-IFS=$ac_save_IFS
-case $host_os in *\ *) host_os=`printf '%s\n' "$host_os" | sed 's/ /-/g'`;; esac
-
-
-# Backslashify metacharacters that are still active within
-# double-quoted strings.
-sed_quote_subst='s/\(["`$\\]\)/\\\1/g'
-
-# Same as above, but do not quote variable references.
-double_quote_subst='s/\(["`\\]\)/\\\1/g'
-
-# Sed substitution to delay expansion of an escaped shell variable in a
-# double_quote_subst'ed string.
-delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g'
-
-# Sed substitution to delay expansion of an escaped single quote.
-delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g'
-
-# Sed substitution to avoid accidental globbing in evaled expressions
-no_glob_subst='s/\*/\\\*/g'
-
-ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to print strings" >&5
-printf %s "checking how to print strings... " >&6; }
-# Test print first, because it will be a builtin if present.
-if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \
-   test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='print -r --'
-elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='printf %s\n'
-else
-  # Use this function as a fallback that always works.
-  func_fallback_echo ()
-  {
-    eval 'cat <<_LTECHO_EOF
-$1
-_LTECHO_EOF'
-  }
-  ECHO='func_fallback_echo'
-fi
-
-# func_echo_all arg...
-# Invoke $ECHO with all args, space-separated.
-func_echo_all ()
-{
-    $ECHO ""
-}
-
-case $ECHO in
-  printf*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: printf" >&5
-printf '%s\n' "printf" >&6; } ;;
-  print*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: print -r" >&5
-printf '%s\n' "print -r" >&6; } ;;
-  *) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: cat" >&5
-printf '%s\n' "cat" >&6; } ;;
-esac
-
-
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a sed that does not truncate output" >&5
-printf %s "checking for a sed that does not truncate output... " >&6; }
-if test ${ac_cv_path_SED+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)           ac_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/
-     for ac_i in 1 2 3 4 5 6 7; do
-       ac_script="$ac_script$as_nl$ac_script"
-     done
-     echo "$ac_script" 2>/dev/null | sed 99q >conftest.sed
-     { ac_script=; unset ac_script;}
-     if test -z "$SED"; then
-  ac_path_SED_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in sed gsed
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_SED="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_SED" || continue
-# Check for GNU ac_path_SED and select it if it is found.
-  # Check for GNU $ac_path_SED
-case `"$ac_path_SED" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_SED="$ac_path_SED" ac_path_SED_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' '' >> "conftest.nl"
-    "$ac_path_SED" -f conftest.sed < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_SED_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_SED="$ac_path_SED"
-      ac_path_SED_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_SED_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_SED"; then
-    as_fn_error $? "no acceptable sed could be found in \$PATH" "$LINENO" 5
-  fi
-else
-  ac_cv_path_SED=$SED
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_SED" >&5
-printf '%s\n' "$ac_cv_path_SED" >&6; }
- SED="$ac_cv_path_SED"
-  rm -f conftest.sed
-
-test -z "$SED" && SED=sed
-Xsed="$SED -e 1s/^X//"
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5
-printf %s "checking for grep that handles long lines and -e... " >&6; }
-if test ${ac_cv_path_GREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -z "$GREP"; then
-  ac_path_GREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in grep ggrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_GREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_GREP" || continue
-# Check for GNU ac_path_GREP and select it if it is found.
-  # Check for GNU $ac_path_GREP
-case `"$ac_path_GREP" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'GREP' >> "conftest.nl"
-    "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_GREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_GREP="$ac_path_GREP"
-      ac_path_GREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_GREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_GREP"; then
-    as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_GREP=$GREP
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5
-printf '%s\n' "$ac_cv_path_GREP" >&6; }
- GREP="$ac_cv_path_GREP"
- 
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
-printf %s "checking for egrep... " >&6; }
-if test ${ac_cv_path_EGREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
-   then ac_cv_path_EGREP="$GREP -E"
-   else
-     if test -z "$EGREP"; then
-  ac_path_EGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in egrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_EGREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_EGREP" || continue
-# Check for GNU ac_path_EGREP and select it if it is found.
-  # Check for GNU $ac_path_EGREP
-case `"$ac_path_EGREP" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'EGREP' >> "conftest.nl"
-    "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_EGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_EGREP="$ac_path_EGREP"
-      ac_path_EGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_EGREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_EGREP"; then
-    as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_EGREP=$EGREP
-fi
-
-   fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
-printf '%s\n' "$ac_cv_path_EGREP" >&6; }
- EGREP="$ac_cv_path_EGREP"
- 
-         EGREP_TRADITIONAL=$EGREP
- ac_cv_path_EGREP_TRADITIONAL=$EGREP
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for fgrep" >&5
-printf %s "checking for fgrep... " >&6; }
-if test ${ac_cv_path_FGREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if echo 'ab*c' | $GREP -F 'ab*c' >/dev/null 2>&1
-   then ac_cv_path_FGREP="$GREP -F"
-   else
-     if test -z "$FGREP"; then
-  ac_path_FGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in fgrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_FGREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_FGREP" || continue
-# Check for GNU ac_path_FGREP and select it if it is found.
-  # Check for GNU $ac_path_FGREP
-case `"$ac_path_FGREP" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_FGREP="$ac_path_FGREP" ac_path_FGREP_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'FGREP' >> "conftest.nl"
-    "$ac_path_FGREP" FGREP < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_FGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_FGREP="$ac_path_FGREP"
-      ac_path_FGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_FGREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_FGREP"; then
-    as_fn_error $? "no acceptable fgrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_FGREP=$FGREP
-fi
-
-   fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_FGREP" >&5
-printf '%s\n' "$ac_cv_path_FGREP" >&6; }
- FGREP="$ac_cv_path_FGREP"
- 
-
-test -z "$GREP" && GREP=grep
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-
-
-@%:@ Check whether --with-gnu-ld was given.
-if test ${with_gnu_ld+y}
-then :
-  withval=$with_gnu_ld; test no = "$withval" || with_gnu_ld=yes
-else case e in @%:@(
-  e) with_gnu_ld=no ;;
-esac
-fi
-
-ac_prog=ld
-if test yes = "$GCC"; then
-  # Check if gcc -print-prog-name=ld gives a path.
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for ld used by $CC" >&5
-printf %s "checking for ld used by $CC... " >&6; }
-  case $host in
-  *-*-mingw* | *-*-windows*)
-    # gcc leaves a trailing carriage return, which upsets mingw
-    ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;;
-  *)
-    ac_prog=`($CC -print-prog-name=ld) 2>&5` ;;
-  esac
-  case $ac_prog in
-    # Accept absolute paths.
-    [\\/]* | ?:[\\/]*)
-      re_direlt='/[^/][^/]*/\.\./'
-      # Canonicalize the pathname of ld
-      ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'`
-      while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do
-	ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"`
-      done
-      test -z "$LD" && LD=$ac_prog
-      ;;
-  "")
-    # If it fails, then pretend we aren't using GCC.
-    ac_prog=ld
-    ;;
-  *)
-    # If it is relative, then search for the first ld in PATH.
-    with_gnu_ld=unknown
-    ;;
-  esac
-elif test yes = "$with_gnu_ld"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for GNU ld" >&5
-printf %s "checking for GNU ld... " >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for non-GNU ld" >&5
-printf %s "checking for non-GNU ld... " >&6; }
-fi
-if test ${lt_cv_path_LD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -z "$LD"; then
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  for ac_dir in $PATH; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then
-      lt_cv_path_LD=$ac_dir/$ac_prog
-      # Check to see if the program is GNU ld.  I'd rather use --version,
-      # but apparently some variants of GNU ld only accept -v.
-      # Break only if it was the GNU/non-GNU ld that we prefer.
-      case `"$lt_cv_path_LD" -v 2>&1 </dev/null` in
-      *GNU* | *'with BFD'*)
-	test no != "$with_gnu_ld" && break
-	;;
-      *)
-	test yes != "$with_gnu_ld" && break
-	;;
-      esac
-    fi
-  done
-  IFS=$lt_save_ifs
-else
-  lt_cv_path_LD=$LD # Let the user override the test with a path.
-fi ;;
-esac
-fi
-
-LD=$lt_cv_path_LD
-if test -n "$LD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LD" >&5
-printf '%s\n' "$LD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-test -z "$LD" && as_fn_error $? "no acceptable ld found in \$PATH" "$LINENO" 5
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if the linker ($LD) is GNU ld" >&5
-printf %s "checking if the linker ($LD) is GNU ld... " >&6; }
-if test ${lt_cv_prog_gnu_ld+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) # I'd rather use --version here, but apparently some GNU lds only accept -v.
-case `$LD -v 2>&1 </dev/null` in
-*GNU* | *'with BFD'*)
-  lt_cv_prog_gnu_ld=yes
-  ;;
-*)
-  lt_cv_prog_gnu_ld=no
-  ;;
-esac ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_gnu_ld" >&5
-printf '%s\n' "$lt_cv_prog_gnu_ld" >&6; }
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for BSD- or MS-compatible name lister (nm)" >&5
-printf %s "checking for BSD- or MS-compatible name lister (nm)... " >&6; }
-if test ${lt_cv_path_NM+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$NM"; then
-  # Let the user override the test.
-  lt_cv_path_NM=$NM
-else
-  lt_nm_to_check=${ac_tool_prefix}nm
-  if test -n "$ac_tool_prefix" && test "$build" = "$host"; then
-    lt_nm_to_check="$lt_nm_to_check nm"
-  fi
-  for lt_tmp_nm in $lt_nm_to_check; do
-    lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-    for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do
-      IFS=$lt_save_ifs
-      test -z "$ac_dir" && ac_dir=.
-      tmp_nm=$ac_dir/$lt_tmp_nm
-      if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then
-	# Check to see if the nm accepts a BSD-compat flag.
-	# Adding the 'sed 1q' prevents false positives on HP-UX, which says:
-	#   nm: unknown option "B" ignored
-	# Tru64's nm complains that /dev/null is an invalid object file
-	# MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty
-	case $build_os in
-	mingw* | windows*) lt_bad_file=conftest.nm/nofile ;;
-	*) lt_bad_file=/dev/null ;;
-	esac
-	case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in
-	*$lt_bad_file* | *'Invalid file or object type'*)
-	  lt_cv_path_NM="$tmp_nm -B"
-	  break 2
-	  ;;
-	*)
-	  case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in
-	  */dev/null*)
-	    lt_cv_path_NM="$tmp_nm -p"
-	    break 2
-	    ;;
-	  *)
-	    lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but
-	    continue # so that we can try to find one that supports BSD flags
-	    ;;
-	  esac
-	  ;;
-	esac
-      fi
-    done
-    IFS=$lt_save_ifs
-  done
-  : ${lt_cv_path_NM=no}
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_NM" >&5
-printf '%s\n' "$lt_cv_path_NM" >&6; }
-if test no != "$lt_cv_path_NM"; then
-  NM=$lt_cv_path_NM
-else
-  # Didn't find any BSD compatible name lister, look for dumpbin.
-  if test -n "$DUMPBIN"; then :
-    # Let the user override the test.
-  else
-    if test -n "$ac_tool_prefix"; then
-  for ac_prog in dumpbin "link -dump"
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DUMPBIN+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$DUMPBIN"; then
-  ac_cv_prog_DUMPBIN="$DUMPBIN" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DUMPBIN="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DUMPBIN=$ac_cv_prog_DUMPBIN
-if test -n "$DUMPBIN"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DUMPBIN" >&5
-printf '%s\n' "$DUMPBIN" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$DUMPBIN" && break
-  done
-fi
-if test -z "$DUMPBIN"; then
-  ac_ct_DUMPBIN=$DUMPBIN
-  for ac_prog in dumpbin "link -dump"
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DUMPBIN+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_DUMPBIN"; then
-  ac_cv_prog_ac_ct_DUMPBIN="$ac_ct_DUMPBIN" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DUMPBIN="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DUMPBIN=$ac_cv_prog_ac_ct_DUMPBIN
-if test -n "$ac_ct_DUMPBIN"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DUMPBIN" >&5
-printf '%s\n' "$ac_ct_DUMPBIN" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_DUMPBIN" && break
-done
-
-  if test "x$ac_ct_DUMPBIN" = x; then
-    DUMPBIN=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DUMPBIN=$ac_ct_DUMPBIN
-  fi
-fi
-
-    case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in
-    *COFF*)
-      DUMPBIN="$DUMPBIN -symbols -headers"
-      ;;
-    *)
-      DUMPBIN=:
-      ;;
-    esac
-  fi
-  
-  if test : != "$DUMPBIN"; then
-    NM=$DUMPBIN
-  fi
-fi
-test -z "$NM" && NM=nm
-
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the name lister ($NM) interface" >&5
-printf %s "checking the name lister ($NM) interface... " >&6; }
-if test ${lt_cv_nm_interface+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_nm_interface="BSD nm"
-  echo "int some_variable = 0;" > conftest.$ac_ext
-  (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&5)
-  (eval "$ac_compile" 2>conftest.err)
-  cat conftest.err >&5
-  (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&5)
-  (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
-  cat conftest.err >&5
-  (eval echo "\"\$as_me:$LINENO: output\"" >&5)
-  cat conftest.out >&5
-  if $GREP 'External.*some_variable' conftest.out > /dev/null; then
-    lt_cv_nm_interface="MS dumpbin"
-  fi
-  rm -f conftest* ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_nm_interface" >&5
-printf '%s\n' "$lt_cv_nm_interface" >&6; }
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ln -s works" >&5
-printf %s "checking whether ln -s works... " >&6; }
-LN_S=$as_ln_s
-if test "$LN_S" = "ln -s"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no, using $LN_S" >&5
-printf '%s\n' "no, using $LN_S" >&6; }
-fi
-
-# find the maximum length of command line arguments
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the maximum length of command line arguments" >&5
-printf %s "checking the maximum length of command line arguments... " >&6; }
-if test ${lt_cv_sys_max_cmd_len+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)   i=0
-  teststring=ABCD
-
-  case $build_os in
-  msdosdjgpp*)
-    # On DJGPP, this test can blow up pretty badly due to problems in libc
-    # (any single argument exceeding 2000 bytes causes a buffer overrun
-    # during glob expansion).  Even if it were fixed, the result of this
-    # check would be larger than it should be.
-    lt_cv_sys_max_cmd_len=12288;    # 12K is about right
-    ;;
-
-  gnu* | ironclad*)
-    # Under GNU Hurd and Ironclad, this test is not required because there
-    # is no limit to the length of command line arguments.
-    # Libtool will interpret -1 as no limit whatsoever
-    lt_cv_sys_max_cmd_len=-1;
-    ;;
-
-  cygwin* | mingw* | windows* | cegcc*)
-    # On Win9x/ME, this test blows up -- it succeeds, but takes
-    # about 5 minutes as the teststring grows exponentially.
-    # Worse, since 9x/ME are not pre-emptively multitasking,
-    # you end up with a "frozen" computer, even though with patience
-    # the test eventually succeeds (with a max line length of 256k).
-    # Instead, let's just punt: use the minimum linelength reported by
-    # all of the supported platforms: 8192 (on NT/2K/XP).
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  mint*)
-    # On MiNT this can take a long time and run out of memory.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  amigaos*)
-    # On AmigaOS with pdksh, this test takes hours, literally.
-    # So we just punt and use a minimum line length of 8192.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*)
-    # This has been around since 386BSD, at least.  Likely further.
-    if test -x /sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax`
-    elif test -x /usr/sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax`
-    else
-      lt_cv_sys_max_cmd_len=65536	# usable default for all BSDs
-    fi
-    # And add a safety zone
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    ;;
-
-  interix*)
-    # We know the value 262144 and hardcode it with a safety zone (like BSD)
-    lt_cv_sys_max_cmd_len=196608
-    ;;
-
-  os2*)
-    # The test takes a long time on OS/2.
-    lt_cv_sys_max_cmd_len=8192
-    ;;
-
-  osf*)
-    # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure
-    # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not
-    # nice to cause kernel panics so lets avoid the loop below.
-    # First set a reasonable default.
-    lt_cv_sys_max_cmd_len=16384
-    #
-    if test -x /sbin/sysconfig; then
-      case `/sbin/sysconfig -q proc exec_disable_arg_limit` in
-        *1*) lt_cv_sys_max_cmd_len=-1 ;;
-      esac
-    fi
-    ;;
-  sco3.2v5*)
-    lt_cv_sys_max_cmd_len=102400
-    ;;
-  sysv5* | sco5v6* | sysv4.2uw2*)
-    kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null`
-    if test -n "$kargmax"; then
-      lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[	 ]//'`
-    else
-      lt_cv_sys_max_cmd_len=32768
-    fi
-    ;;
-  *)
-    lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null`
-    if test -n "$lt_cv_sys_max_cmd_len" && \
-       test undefined != "$lt_cv_sys_max_cmd_len"; then
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    else
-      # Make teststring a little bigger before we do anything with it.
-      # a 1K string should be a reasonable start.
-      for i in 1 2 3 4 5 6 7 8; do
-        teststring=$teststring$teststring
-      done
-      SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}}
-      # If test is not a shell built-in, we'll probably end up computing a
-      # maximum length that is only half of the actual maximum length, but
-      # we can't tell.
-      while { test X`env echo "$teststring$teststring" 2>/dev/null` \
-	         = "X$teststring$teststring"; } >/dev/null 2>&1 &&
-	      test 17 != "$i" # 1/2 MB should be enough
-      do
-        i=`expr $i + 1`
-        teststring=$teststring$teststring
-      done
-      # Only check the string length outside the loop.
-      lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1`
-      teststring=
-      # Add a significant safety factor because C++ compilers can tack on
-      # massive amounts of additional arguments before passing them to the
-      # linker.  It appears as though 1/2 is a usable value.
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2`
-    fi
-    ;;
-  esac
- ;;
-esac
-fi
-
-if test -n "$lt_cv_sys_max_cmd_len"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sys_max_cmd_len" >&5
-printf '%s\n' "$lt_cv_sys_max_cmd_len" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none" >&5
-printf '%s\n' "none" >&6; }
-fi
-max_cmd_len=$lt_cv_sys_max_cmd_len
-
-    
-    
-    
-
-
-: ${CP="cp -f"}
-: ${MV="mv -f"}
-: ${RM="rm -f"}
-
-if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then
-  lt_unset=unset
-else
-  lt_unset=false
-fi
-
-    
-    
-    
-
-# test EBCDIC or ASCII
-case `echo X|tr X '\101'` in
- A) # ASCII based system
-    # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr
-  lt_SP2NL='tr \040 \012'
-  lt_NL2SP='tr \015\012 \040\040'
-  ;;
- *) # EBCDIC based system
-  lt_SP2NL='tr \100 \n'
-  lt_NL2SP='tr \r\n \100\100'
-  ;;
-esac
-
-    
-    
-    
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to $host format" >&5
-printf %s "checking how to convert $build file names to $host format... " >&6; }
-if test ${lt_cv_to_host_file_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $host in
-  *-*-mingw* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32
-        ;;
-    esac
-    ;;
-  *-*-cygwin* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_noop
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin
-        ;;
-    esac
-    ;;
-  * ) # unhandled hosts (and "normal" native builds)
-    lt_cv_to_host_file_cmd=func_convert_file_noop
-    ;;
-esac
- ;;
-esac
-fi
-
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_host_file_cmd" >&5
-printf '%s\n' "$lt_cv_to_host_file_cmd" >&6; }
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to toolchain format" >&5
-printf %s "checking how to convert $build file names to toolchain format... " >&6; }
-if test ${lt_cv_to_tool_file_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) #assume ordinary cross tools, or native build.
-lt_cv_to_tool_file_cmd=func_convert_file_noop
-case $host in
-  *-*-mingw* | *-*-windows* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32
-        ;;
-    esac
-    ;;
-esac
- ;;
-esac
-fi
-
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_tool_file_cmd" >&5
-printf '%s\n' "$lt_cv_to_tool_file_cmd" >&6; }
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $LD option to reload object files" >&5
-printf %s "checking for $LD option to reload object files... " >&6; }
-if test ${lt_cv_ld_reload_flag+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ld_reload_flag='-r' ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_reload_flag" >&5
-printf '%s\n' "$lt_cv_ld_reload_flag" >&6; }
-reload_flag=$lt_cv_ld_reload_flag
-case $reload_flag in
-"" | " "*) ;;
-*) reload_flag=" $reload_flag" ;;
-esac
-reload_cmds='$LD$reload_flag -o $output$reload_objs'
-case $host_os in
-  cygwin* | mingw* | windows* | pw32* | cegcc*)
-    if test yes != "$GCC"; then
-      reload_cmds=false
-    fi
-    ;;
-  darwin*)
-    if test yes = "$GCC"; then
-      reload_cmds='$LTCC $LTCFLAGS -nostdlib $wl-r -o $output$reload_objs'
-    else
-      reload_cmds='$LD$reload_flag -o $output$reload_objs'
-    fi
-    ;;
-esac
-
-    
-    
-    
-
-    
-    
-    
-
-# Extract the first word of "file", so it can be a program name with args.
-set dummy file; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_FILECMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$FILECMD"; then
-  ac_cv_prog_FILECMD="$FILECMD" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_FILECMD="file"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  test -z "$ac_cv_prog_FILECMD" && ac_cv_prog_FILECMD=":"
-fi ;;
-esac
-fi
-FILECMD=$ac_cv_prog_FILECMD
-if test -n "$FILECMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FILECMD" >&5
-printf '%s\n' "$FILECMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-
-    
-    
-    
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}objdump", so it can be a program name with args.
-set dummy ${ac_tool_prefix}objdump; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OBJDUMP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$OBJDUMP"; then
-  ac_cv_prog_OBJDUMP="$OBJDUMP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OBJDUMP="${ac_tool_prefix}objdump"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OBJDUMP=$ac_cv_prog_OBJDUMP
-if test -n "$OBJDUMP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OBJDUMP" >&5
-printf '%s\n' "$OBJDUMP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OBJDUMP"; then
-  ac_ct_OBJDUMP=$OBJDUMP
-  # Extract the first word of "objdump", so it can be a program name with args.
-set dummy objdump; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OBJDUMP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_OBJDUMP"; then
-  ac_cv_prog_ac_ct_OBJDUMP="$ac_ct_OBJDUMP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OBJDUMP="objdump"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OBJDUMP=$ac_cv_prog_ac_ct_OBJDUMP
-if test -n "$ac_ct_OBJDUMP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OBJDUMP" >&5
-printf '%s\n' "$ac_ct_OBJDUMP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OBJDUMP" = x; then
-    OBJDUMP="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OBJDUMP=$ac_ct_OBJDUMP
-  fi
-else
-  OBJDUMP="$ac_cv_prog_OBJDUMP"
-fi
-
-test -z "$OBJDUMP" && OBJDUMP=objdump
-
-    
-    
-    
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to recognize dependent libraries" >&5
-printf %s "checking how to recognize dependent libraries... " >&6; }
-if test ${lt_cv_deplibs_check_method+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_file_magic_cmd='$MAGIC_CMD'
-lt_cv_file_magic_test_file=
-lt_cv_deplibs_check_method='unknown'
-# Need to set the preceding variable on all platforms that support
-# interlibrary dependencies.
-# 'none' -- dependencies not supported.
-# 'unknown' -- same as none, but documents that we really don't know.
-# 'pass_all' -- all dependencies passed with no checks.
-# 'file_magic [[regex]]' -- check by looking for files in library path
-# that responds to the $file_magic_cmd with a given extended regex.
-# If you have 'file' or equivalent on your system and you're not sure
-# whether 'pass_all' will *always* work, you probably want this one.
-
-case $host_os in
-aix[4-9]*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-beos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-bsdi[45]*)
-  lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib)'
-  lt_cv_file_magic_cmd='$FILECMD -L'
-  lt_cv_file_magic_test_file=/shlib/libc.so
-  ;;
-
-cygwin*)
-  # func_win32_libid is a shell function defined in ltmain.sh
-  lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-  lt_cv_file_magic_cmd='func_win32_libid'
-  ;;
-
-mingw* | windows* | pw32*)
-  # Base MSYS/MinGW do not provide the 'file' command needed by
-  # func_win32_libid shell function, so use a weaker test based on 'objdump',
-  # unless we find 'file', for example because we are cross-compiling.
-  if ( file / ) >/dev/null 2>&1; then
-    lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-    lt_cv_file_magic_cmd='func_win32_libid'
-  else
-    # Keep this pattern in sync with the one in func_win32_libid.
-    lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64|pe-aarch64)'
-    lt_cv_file_magic_cmd='$OBJDUMP -f'
-  fi
-  ;;
-
-cegcc*)
-  # use the weaker test based on 'objdump'. See mingw*.
-  lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?'
-  lt_cv_file_magic_cmd='$OBJDUMP -f'
-  ;;
-
-darwin* | rhapsody*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    case $host_cpu in
-    i*86 )
-      # Not sure whether the presence of OpenBSD here was a mistake.
-      # Let's accept both of them until this is cleared up.
-      lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[3-9]86 (compact )?demand paged shared library'
-      lt_cv_file_magic_cmd=$FILECMD
-      lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*`
-      ;;
-    esac
-  else
-    lt_cv_deplibs_check_method=pass_all
-  fi
-  ;;
-
-haiku*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-hpux10.20* | hpux11*)
-  lt_cv_file_magic_cmd=$FILECMD
-  case $host_cpu in
-  ia64*)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF-[0-9][0-9]) shared object file - IA64'
-    lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so
-    ;;
-  hppa*64*)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]'
-    lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl
-    ;;
-  *)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|PA-RISC[0-9]\.[0-9]) shared library'
-    lt_cv_file_magic_test_file=/usr/lib/libc.sl
-    ;;
-  esac
-  ;;
-
-interix[3-9]*)
-  # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here
-  lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|\.a)$'
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $LD in
-  *-32|*"-32 ") libmagic=32-bit;;
-  *-n32|*"-n32 ") libmagic=N32;;
-  *-64|*"-64 ") libmagic=64-bit;;
-  *) libmagic=never-match;;
-  esac
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-*-mlibc)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-netbsd* | netbsdelf*-gnu)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|_pic\.a)$'
-  fi
-  ;;
-
-newos6*)
-  lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (executable|dynamic lib)'
-  lt_cv_file_magic_cmd=$FILECMD
-  lt_cv_file_magic_test_file=/usr/lib/libnls.so
-  ;;
-
-*nto* | *qnx*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-openbsd*)
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|\.so|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
-  fi
-  ;;
-
-osf3* | osf4* | osf5*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-rdos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-serenity*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-solaris*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv4 | sysv4.3*)
-  case $host_vendor in
-  motorola)
-    lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib) M[0-9][0-9]* Version [0-9]'
-    lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*`
-    ;;
-  ncr)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  sequent)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [LM]SB (shared object|dynamic lib )'
-    ;;
-  sni)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method="file_magic ELF [0-9][0-9]*-bit [LM]SB dynamic lib"
-    lt_cv_file_magic_test_file=/lib/libc.so
-    ;;
-  siemens)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  pc)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  esac
-  ;;
-
-tpf*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-os2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-esac
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_deplibs_check_method" >&5
-printf '%s\n' "$lt_cv_deplibs_check_method" >&6; }
-
-file_magic_glob=
-want_nocaseglob=no
-if test "$build" = "$host"; then
-  case $host_os in
-  mingw* | windows* | pw32*)
-    if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then
-      want_nocaseglob=yes
-    else
-      file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[\1]\/[\1]\/g;/g"`
-    fi
-    ;;
-  esac
-fi
-
-file_magic_cmd=$lt_cv_file_magic_cmd
-deplibs_check_method=$lt_cv_deplibs_check_method
-test -z "$deplibs_check_method" && deplibs_check_method=unknown
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}dlltool", so it can be a program name with args.
-set dummy ${ac_tool_prefix}dlltool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DLLTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$DLLTOOL"; then
-  ac_cv_prog_DLLTOOL="$DLLTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DLLTOOL="${ac_tool_prefix}dlltool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DLLTOOL=$ac_cv_prog_DLLTOOL
-if test -n "$DLLTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DLLTOOL" >&5
-printf '%s\n' "$DLLTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_DLLTOOL"; then
-  ac_ct_DLLTOOL=$DLLTOOL
-  # Extract the first word of "dlltool", so it can be a program name with args.
-set dummy dlltool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DLLTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_DLLTOOL"; then
-  ac_cv_prog_ac_ct_DLLTOOL="$ac_ct_DLLTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DLLTOOL="dlltool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DLLTOOL=$ac_cv_prog_ac_ct_DLLTOOL
-if test -n "$ac_ct_DLLTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DLLTOOL" >&5
-printf '%s\n' "$ac_ct_DLLTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_DLLTOOL" = x; then
-    DLLTOOL="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DLLTOOL=$ac_ct_DLLTOOL
-  fi
-else
-  DLLTOOL="$ac_cv_prog_DLLTOOL"
-fi
-
-test -z "$DLLTOOL" && DLLTOOL=dlltool
-
-    
-    
-    
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to associate runtime and link libraries" >&5
-printf %s "checking how to associate runtime and link libraries... " >&6; }
-if test ${lt_cv_sharedlib_from_linklib_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_sharedlib_from_linklib_cmd='unknown'
-
-case $host_os in
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  # two different shell functions defined in ltmain.sh;
-  # decide which one to use based on capabilities of $DLLTOOL
-  case `$DLLTOOL --help 2>&1` in
-  *--identify-strict*)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib
-    ;;
-  *)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback
-    ;;
-  esac
-  ;;
-*)
-  # fallback: assume linklib IS sharedlib
-  lt_cv_sharedlib_from_linklib_cmd=$ECHO
-  ;;
-esac
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sharedlib_from_linklib_cmd" >&5
-printf '%s\n' "$lt_cv_sharedlib_from_linklib_cmd" >&6; }
-sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd
-test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO
-
-
-    
-    
-    
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args.
-set dummy ${ac_tool_prefix}ranlib; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_RANLIB+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$RANLIB"; then
-  ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-RANLIB=$ac_cv_prog_RANLIB
-if test -n "$RANLIB"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5
-printf '%s\n' "$RANLIB" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_RANLIB"; then
-  ac_ct_RANLIB=$RANLIB
-  # Extract the first word of "ranlib", so it can be a program name with args.
-set dummy ranlib; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_RANLIB+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_RANLIB"; then
-  ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_RANLIB="ranlib"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB
-if test -n "$ac_ct_RANLIB"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5
-printf '%s\n' "$ac_ct_RANLIB" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_RANLIB" = x; then
-    RANLIB=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    RANLIB=$ac_ct_RANLIB
-  fi
-else
-  RANLIB="$ac_cv_prog_RANLIB"
-fi
-
-if test -n "$ac_tool_prefix"; then
-  for ac_prog in ar
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_AR+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$AR"; then
-  ac_cv_prog_AR="$AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AR="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-AR=$ac_cv_prog_AR
-if test -n "$AR"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $AR" >&5
-printf '%s\n' "$AR" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$AR" && break
-  done
-fi
-if test -z "$AR"; then
-  ac_ct_AR=$AR
-  for ac_prog in ar
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_AR+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_AR"; then
-  ac_cv_prog_ac_ct_AR="$ac_ct_AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_AR="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_AR=$ac_cv_prog_ac_ct_AR
-if test -n "$ac_ct_AR"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_AR" >&5
-printf '%s\n' "$ac_ct_AR" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_AR" && break
-done
-
-  if test "x$ac_ct_AR" = x; then
-    AR="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    AR=$ac_ct_AR
-  fi
-fi
-
-: ${AR=ar}
-
-    
-    
-    
-
-
-# Use ARFLAGS variable as AR's operation code to sync the variable naming with
-# Automake.  If both AR_FLAGS and ARFLAGS are specified, AR_FLAGS should have
-# higher priority because that's what people were doing historically (setting
-# ARFLAGS for automake and AR_FLAGS for libtool).  FIXME: Make the AR_FLAGS
-# variable obsoleted/removed.
-
-test ${AR_FLAGS+y} || AR_FLAGS=${ARFLAGS-cr}
-lt_ar_flags=$AR_FLAGS
-
-    
-    
-    
-
-
-# Make AR_FLAGS overridable by 'make ARFLAGS='.  Don't try to run-time override
-# by AR_FLAGS because that was never working and AR_FLAGS is about to die.
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for archiver @FILE support" >&5
-printf %s "checking for archiver @FILE support... " >&6; }
-if test ${lt_cv_ar_at_file+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ar_at_file=no
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  echo conftest.$ac_objext > conftest.lst
-      lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&5'
-      { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5
-  (eval $lt_ar_try) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-      if test 0 -eq "$ac_status"; then
-	# Ensure the archiver fails upon bogus file names.
-	rm -f conftest.$ac_objext libconftest.a
-	{ { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5
-  (eval $lt_ar_try) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-	if test 0 -ne "$ac_status"; then
-          lt_cv_ar_at_file=@
-        fi
-      fi
-      rm -f conftest.* libconftest.a
-     
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ar_at_file" >&5
-printf '%s\n' "$lt_cv_ar_at_file" >&6; }
-
-if test no = "$lt_cv_ar_at_file"; then
-  archiver_list_spec=
-else
-  archiver_list_spec=$lt_cv_ar_at_file
-fi
-
-    
-    
-    
-
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-printf '%s\n' "$STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-printf '%s\n' "$ac_ct_STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-test -z "$STRIP" && STRIP=:
-
-    
-    
-    
-
-
-
-test -z "$RANLIB" && RANLIB=:
-
-    
-    
-    
-
-
-# Determine commands to create old-style static archives.
-old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs'
-old_postinstall_cmds='chmod 644 $oldlib'
-old_postuninstall_cmds=
-
-if test -n "$RANLIB"; then
-  old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib"
-  old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib"
-fi
-
-case $host_os in
-  darwin*)
-    lock_old_archive_extraction=yes ;;
-  *)
-    lock_old_archive_extraction=no ;;
-esac
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-
-
-# Check for command to grab the raw symbol name followed by C symbol from nm.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking command to parse $NM output from $compiler object" >&5
-printf %s "checking command to parse $NM output from $compiler object... " >&6; }
-if test ${lt_cv_sys_global_symbol_pipe+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 
-# These are sane defaults that work on at least a few old systems.
-# [They come from Ultrix.  What could be older than Ultrix?!! ;)]
-
-# Character class describing NM global symbol codes.
-symcode='[BCDEGRST]'
-
-# Regexp to match symbols that can be accessed directly from C.
-sympat='\([_A-Za-z][_A-Za-z0-9]*\)'
-
-# Define system-specific variables.
-case $host_os in
-aix*)
-  symcode='[BCDT]'
-  ;;
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  symcode='[ABCDGISTW]'
-  ;;
-hpux*)
-  if test ia64 = "$host_cpu"; then
-    symcode='[ABCDEGRST]'
-  fi
-  ;;
-irix* | nonstopux*)
-  symcode='[BCDEGRST]'
-  ;;
-osf*)
-  symcode='[BCDEGQRST]'
-  ;;
-solaris*)
-  symcode='[BCDRT]'
-  ;;
-sco3.2v5*)
-  symcode='[DT]'
-  ;;
-sysv4.2uw2*)
-  symcode='[DT]'
-  ;;
-sysv5* | sco5v6* | unixware* | OpenUNIX*)
-  symcode='[ABDT]'
-  ;;
-sysv4)
-  symcode='[DFNSTU]'
-  ;;
-esac
-
-# If we're using GNU nm, then use its standard symbol codes.
-case `$NM -V 2>&1` in
-*GNU* | *'with BFD'*)
-  symcode='[ABCDGIRSTW]' ;;
-esac
-
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  # Gets list of data symbols to import.
-  lt_cv_sys_global_symbol_to_import="$SED -n -e 's/^I .* \(.*\)$/\1/p'"
-  # Adjust the below global symbol transforms to fixup imported variables.
-  lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'"
-  lt_c_name_hook=" -e 's/^I .* \(.*\)$/  {\"\1\", (void *) 0},/p'"
-  lt_c_name_lib_hook="\
-  -e 's/^I .* \(lib.*\)$/  {\"\1\", (void *) 0},/p'\
-  -e 's/^I .* \(.*\)$/  {\"lib\1\", (void *) 0},/p'"
-else
-  # Disable hooks by default.
-  lt_cv_sys_global_symbol_to_import=
-  lt_cdecl_hook=
-  lt_c_name_hook=
-  lt_c_name_lib_hook=
-fi
-
-# Transform an extracted symbol line into a proper C declaration.
-# Some systems (esp. on ia64) link data and code symbols differently,
-# so use this general approach.
-lt_cv_sys_global_symbol_to_cdecl="$SED -n"\
-$lt_cdecl_hook\
-" -e 's/^T .* \(.*\)$/extern int \1();/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'"
-
-# Transform an extracted symbol line into symbol name and symbol address
-lt_cv_sys_global_symbol_to_c_name_address="$SED -n"\
-$lt_c_name_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/p'"
-
-# Transform an extracted symbol line into symbol name with lib prefix and
-# symbol address.
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="$SED -n"\
-$lt_c_name_lib_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(lib.*\)$/  {\"\1\", (void *) \&\1},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"lib\1\", (void *) \&\1},/p'"
-
-# Handle CRLF in mingw tool chain
-opt_cr=
-case $build_os in
-mingw* | windows*)
-  opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp
-  ;;
-esac
-
-# Try without a prefix underscore, then with it.
-for ac_symprfx in "" "_"; do
-
-  # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol.
-  symxfrm="\\1 $ac_symprfx\\2 \\2"
-
-  # Write the raw and C identifiers.
-  if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-    # Fake it for dumpbin and say T for any non-static function,
-    # D for any global variable and I for any imported variable.
-    # Also find C++ and __fastcall symbols from MSVC++ or ICC,
-    # which start with @ or ?.
-    lt_cv_sys_global_symbol_pipe="$AWK '"\
-"     {last_section=section; section=\$ 3};"\
-"     /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\
-"     /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\
-"     /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\
-"     /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\
-"     /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\
-"     \$ 0!~/External *\|/{next};"\
-"     / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\
-"     {if(hide[section]) next};"\
-"     {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\
-"     {split(\$ 0,a,/\||\r/); split(a[2],s)};"\
-"     s[1]~/^[@?]/{print f,s[1],s[1]; next};"\
-"     s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\
-"     ' prfx=^$ac_symprfx"
-  else
-    lt_cv_sys_global_symbol_pipe="$SED -n -e 's/^.*[	 ]\($symcode$symcode*\)[	 ][	 ]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'"
-  fi
-  lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | $SED '/ __gnu_lto/d'"
-
-  # Check to see that the pipe works correctly.
-  pipe_works=no
-
-  rm -f conftest*
-  cat > conftest.$ac_ext <<_LT_EOF
-#ifdef __cplusplus
-extern "C" {
-#endif
-char nm_test_var;
-void nm_test_func(void);
-void nm_test_func(void){}
-#ifdef __cplusplus
-}
-#endif
-int main(void){nm_test_var='a';nm_test_func();return(0);}
-_LT_EOF
-
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    # Now try to grab the symbols.
-    nlist=conftest.nm
-    $ECHO "$as_me:$LINENO: $NM conftest.$ac_objext | $lt_cv_sys_global_symbol_pipe > $nlist" >&5
-    if eval "$NM" conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist 2>&5 && test -s "$nlist"; then
-      # Try sorting and uniquifying the output.
-      if sort "$nlist" | uniq > "$nlist"T; then
-	mv -f "$nlist"T "$nlist"
-      else
-	rm -f "$nlist"T
-      fi
-
-      # Make sure that we snagged all the symbols we need.
-      if $GREP ' nm_test_var$' "$nlist" >/dev/null; then
-	if $GREP ' nm_test_func$' "$nlist" >/dev/null; then
-	  cat <<_LT_EOF > conftest.$ac_ext
-/* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests.  */
-#if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE
-/* DATA imports from DLLs on WIN32 can't be const, because runtime
-   relocations are performed -- see ld's documentation on pseudo-relocs.  */
-# define LT@&t@_DLSYM_CONST
-#elif defined __osf__
-/* This system does not cope well with relocations in const data.  */
-# define LT@&t@_DLSYM_CONST
-#else
-# define LT@&t@_DLSYM_CONST const
-#endif
-
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-_LT_EOF
-	  # Now generate the symbol file.
-	  eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext'
-
-	  cat <<_LT_EOF >> conftest.$ac_ext
-
-/* The mapping between symbol names and symbols.  */
-LT@&t@_DLSYM_CONST struct {
-  const char *name;
-  void       *address;
-}
-lt__PROGRAM__LTX_preloaded_symbols[] =
-{
-  { "@PROGRAM@", (void *) 0 },
-_LT_EOF
-	  $SED "s/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext
-	  cat <<\_LT_EOF >> conftest.$ac_ext
-  {0, (void *) 0}
-};
-
-/* This works around a problem in FreeBSD linker */
-#ifdef FREEBSD_WORKAROUND
-static const void *lt_preloaded_setup() {
-  return lt__PROGRAM__LTX_preloaded_symbols;
-}
-#endif
-
-#ifdef __cplusplus
-}
-#endif
-_LT_EOF
-	  # Now try linking the two files.
-	  mv conftest.$ac_objext conftstm.$ac_objext
-	  lt_globsym_save_LIBS=$LIBS
-	  lt_globsym_save_CFLAGS=$CFLAGS
-	  LIBS=conftstm.$ac_objext
-	  CFLAGS="$CFLAGS$lt_prog_compiler_no_builtin_flag"
-	  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s conftest$ac_exeext; then
-	    pipe_works=yes
-	  fi
-	  LIBS=$lt_globsym_save_LIBS
-	  CFLAGS=$lt_globsym_save_CFLAGS
-	else
-	  echo "cannot find nm_test_func in $nlist" >&5
-	fi
-      else
-	echo "cannot find nm_test_var in $nlist" >&5
-      fi
-    else
-      echo "cannot run $lt_cv_sys_global_symbol_pipe" >&5
-    fi
-  else
-    echo "$progname: failed program was:" >&5
-    cat conftest.$ac_ext >&5
-  fi
-  rm -rf conftest* conftst*
-
-  # Do not use the global_symbol_pipe unless it works.
-  if test yes = "$pipe_works"; then
-    break
-  else
-    lt_cv_sys_global_symbol_pipe=
-  fi
-done
- ;;
-esac
-fi
-
-if test -z "$lt_cv_sys_global_symbol_pipe"; then
-  lt_cv_sys_global_symbol_to_cdecl=
-fi
-if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: failed" >&5
-printf '%s\n' "failed" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ok" >&5
-printf '%s\n' "ok" >&6; }
-fi
-
-# Response file support.
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  nm_file_list_spec='@'
-elif $NM --help 2>/dev/null | grep '[@]FILE' >/dev/null; then
-  nm_file_list_spec='@'
-fi
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for sysroot" >&5
-printf %s "checking for sysroot... " >&6; }
-
-@%:@ Check whether --with-sysroot was given.
-if test ${with_sysroot+y}
-then :
-  withval=$with_sysroot; 
-else case e in @%:@(
-  e) with_sysroot=no ;;
-esac
-fi
-
-
-lt_sysroot=
-case $with_sysroot in #(
- yes)
-   if test yes = "$GCC"; then
-     # Trim trailing / since we'll always append absolute paths and we want
-     # to avoid //, if only for less confusing output for the user.
-     lt_sysroot=`$CC --print-sysroot 2>/dev/null | $SED 's:/\+$::'`
-   fi
-   ;; #(
- /*)
-   lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"`
-   ;; #(
- no|'')
-   ;; #(
- *)
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $with_sysroot" >&5
-printf '%s\n' "$with_sysroot" >&6; }
-   as_fn_error $? "The sysroot must be an absolute path." "$LINENO" 5
-   ;;
-esac
-
- { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ${lt_sysroot:-no}" >&5
-printf '%s\n' "${lt_sysroot:-no}" >&6; }
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a working dd" >&5
-printf %s "checking for a working dd... " >&6; }
-if test ${ac_cv_path_lt_DD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-: ${lt_DD:=$DD}
-if test -z "$lt_DD"; then
-  ac_path_lt_DD_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in dd
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_lt_DD="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_lt_DD" || continue
-if "$ac_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=:
-fi
-      $ac_path_lt_DD_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_lt_DD"; then
-    :
-  fi
-else
-  ac_cv_path_lt_DD=$lt_DD
-fi
-
-rm -f conftest.i conftest2.i conftest.out ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_lt_DD" >&5
-printf '%s\n' "$ac_cv_path_lt_DD" >&6; }
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to truncate binary pipes" >&5
-printf %s "checking how to truncate binary pipes... " >&6; }
-if test ${lt_cv_truncate_bin+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-lt_cv_truncate_bin=
-if "$ac_cv_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1"
-fi
-rm -f conftest.i conftest2.i conftest.out
-test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q" ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_truncate_bin" >&5
-printf '%s\n' "$lt_cv_truncate_bin" >&6; }
-
-    
-    
-    
-
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in @S|@*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-@%:@ Check whether --enable-libtool-lock was given.
-if test ${enable_libtool_lock+y}
-then :
-  enableval=$enable_libtool_lock; 
-fi
-
-test no = "$enable_libtool_lock" || enable_libtool_lock=yes
-
-# Some flags need to be propagated to the compiler or linker for good
-# libtool support.
-case $host in
-ia64-*-hpux*)
-  # Find out what ABI is being produced by ac_compile, and set mode
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.$ac_objext` in
-      *ELF-32*)
-	HPUX_IA64_MODE=32
-	;;
-      *ELF-64*)
-	HPUX_IA64_MODE=64
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-*-*-irix6*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '#line '$LINENO' "configure"' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    if test yes = "$lt_cv_prog_gnu_ld"; then
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -melf32bsmip"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -melf32bmipn32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -melf64bmip"
-	;;
-      esac
-    else
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -32"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -n32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -64"
-	  ;;
-      esac
-    fi
-  fi
-  rm -rf conftest*
-  ;;
-
-mips64*-*linux*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '#line '$LINENO' "configure"' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    emul=elf
-    case `$FILECMD conftest.$ac_objext` in
-      *32-bit*)
-	emul="${emul}32"
-	;;
-      *64-bit*)
-	emul="${emul}64"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *MSB*)
-	emul="${emul}btsmip"
-	;;
-      *LSB*)
-	emul="${emul}ltsmip"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *N32*)
-	emul="${emul}n32"
-	;;
-    esac
-    LD="${LD-ld} -m $emul"
-  fi
-  rm -rf conftest*
-  ;;
-
-x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \
-s390*-*linux*|s390*-*tpf*|sparc*-*linux*|x86_64-gnu*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.  Note that the listed cases only cover the
-  # situations where additional linker options are needed (such as when
-  # doing 32-bit compilation for a host where ld defaults to 64-bit, or
-  # vice versa); the common cases where no linker options are needed do
-  # not appear in the list.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.o` in
-      *32-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_i386_fbsd"
-	    ;;
-	  x86_64-*linux*|x86_64-gnu*)
-	    case `$FILECMD conftest.o` in
-	      *x86-64*)
-		LD="${LD-ld} -m elf32_x86_64"
-		;;
-	      *)
-		LD="${LD-ld} -m elf_i386"
-		;;
-	    esac
-	    ;;
-	  powerpc64le-*linux*)
-	    LD="${LD-ld} -m elf32lppclinux"
-	    ;;
-	  powerpc64-*linux*)
-	    LD="${LD-ld} -m elf32ppclinux"
-	    ;;
-	  s390x-*linux*)
-	    LD="${LD-ld} -m elf_s390"
-	    ;;
-	  sparc64-*linux*)
-	    LD="${LD-ld} -m elf32_sparc"
-	    ;;
-	esac
-	;;
-      *64-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_x86_64_fbsd"
-	    ;;
-	  x86_64-*linux*|x86_64-gnu*)
-	    LD="${LD-ld} -m elf_x86_64"
-	    ;;
-	  powerpcle-*linux*)
-	    LD="${LD-ld} -m elf64lppc"
-	    ;;
-	  powerpc-*linux*)
-	    LD="${LD-ld} -m elf64ppc"
-	    ;;
-	  s390*-*linux*|s390*-*tpf*)
-	    LD="${LD-ld} -m elf64_s390"
-	    ;;
-	  sparc*-*linux*)
-	    LD="${LD-ld} -m elf64_sparc"
-	    ;;
-	esac
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-
-*-*-sco3.2v5*)
-  # On SCO OpenServer 5, we need -belf to get full-featured binaries.
-  SAVE_CFLAGS=$CFLAGS
-  CFLAGS="$CFLAGS -belf"
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the C compiler needs -belf" >&5
-printf %s "checking whether the C compiler needs -belf... " >&6; }
-if test ${lt_cv_cc_needs_belf+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-     cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_cc_needs_belf=yes
-else case e in @%:@(
-  e) lt_cv_cc_needs_belf=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-     ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_cc_needs_belf" >&5
-printf '%s\n' "$lt_cv_cc_needs_belf" >&6; }
-  if test yes != "$lt_cv_cc_needs_belf"; then
-    # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf
-    CFLAGS=$SAVE_CFLAGS
-  fi
-  ;;
-*-*solaris*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.o` in
-    *64-bit*)
-      case $lt_cv_prog_gnu_ld in
-      yes*)
-        case $host in
-        i?86-*-solaris*|x86_64-*-solaris*)
-          LD="${LD-ld} -m elf_x86_64"
-          ;;
-        sparc*-*-solaris*)
-          LD="${LD-ld} -m elf64_sparc"
-          ;;
-        esac
-        # GNU ld 2.21 introduced _sol2 emulations.  Use them if available.
-        if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then
-          LD=${LD-ld}_sol2
-        fi
-        ;;
-      *)
-	if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then
-	  LD="${LD-ld} -64"
-	fi
-	;;
-      esac
-      ;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-esac
-
-need_locks=$enable_libtool_lock
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}mt", so it can be a program name with args.
-set dummy ${ac_tool_prefix}mt; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_MANIFEST_TOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$MANIFEST_TOOL"; then
-  ac_cv_prog_MANIFEST_TOOL="$MANIFEST_TOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_MANIFEST_TOOL="${ac_tool_prefix}mt"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-MANIFEST_TOOL=$ac_cv_prog_MANIFEST_TOOL
-if test -n "$MANIFEST_TOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MANIFEST_TOOL" >&5
-printf '%s\n' "$MANIFEST_TOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_MANIFEST_TOOL"; then
-  ac_ct_MANIFEST_TOOL=$MANIFEST_TOOL
-  # Extract the first word of "mt", so it can be a program name with args.
-set dummy mt; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_MANIFEST_TOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_MANIFEST_TOOL"; then
-  ac_cv_prog_ac_ct_MANIFEST_TOOL="$ac_ct_MANIFEST_TOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_MANIFEST_TOOL="mt"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_MANIFEST_TOOL=$ac_cv_prog_ac_ct_MANIFEST_TOOL
-if test -n "$ac_ct_MANIFEST_TOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_MANIFEST_TOOL" >&5
-printf '%s\n' "$ac_ct_MANIFEST_TOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_MANIFEST_TOOL" = x; then
-    MANIFEST_TOOL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    MANIFEST_TOOL=$ac_ct_MANIFEST_TOOL
-  fi
-else
-  MANIFEST_TOOL="$ac_cv_prog_MANIFEST_TOOL"
-fi
-
-test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $MANIFEST_TOOL is a manifest tool" >&5
-printf %s "checking if $MANIFEST_TOOL is a manifest tool... " >&6; }
-if test ${lt_cv_path_manifest_tool+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_path_manifest_tool=no
-  echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&5
-  $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out
-  cat conftest.err >&5
-  if $GREP 'Manifest Tool' conftest.out > /dev/null; then
-    lt_cv_path_manifest_tool=yes
-  fi
-  rm -f conftest* ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_manifest_tool" >&5
-printf '%s\n' "$lt_cv_path_manifest_tool" >&6; }
-if test yes != "$lt_cv_path_manifest_tool"; then
-  MANIFEST_TOOL=:
-fi
-
-    
-    
-    
-
-
-  case $host_os in
-    rhapsody* | darwin*)
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}dsymutil", so it can be a program name with args.
-set dummy ${ac_tool_prefix}dsymutil; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DSYMUTIL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$DSYMUTIL"; then
-  ac_cv_prog_DSYMUTIL="$DSYMUTIL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DSYMUTIL="${ac_tool_prefix}dsymutil"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DSYMUTIL=$ac_cv_prog_DSYMUTIL
-if test -n "$DSYMUTIL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DSYMUTIL" >&5
-printf '%s\n' "$DSYMUTIL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_DSYMUTIL"; then
-  ac_ct_DSYMUTIL=$DSYMUTIL
-  # Extract the first word of "dsymutil", so it can be a program name with args.
-set dummy dsymutil; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DSYMUTIL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_DSYMUTIL"; then
-  ac_cv_prog_ac_ct_DSYMUTIL="$ac_ct_DSYMUTIL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DSYMUTIL="dsymutil"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DSYMUTIL=$ac_cv_prog_ac_ct_DSYMUTIL
-if test -n "$ac_ct_DSYMUTIL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DSYMUTIL" >&5
-printf '%s\n' "$ac_ct_DSYMUTIL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_DSYMUTIL" = x; then
-    DSYMUTIL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DSYMUTIL=$ac_ct_DSYMUTIL
-  fi
-else
-  DSYMUTIL="$ac_cv_prog_DSYMUTIL"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}nmedit", so it can be a program name with args.
-set dummy ${ac_tool_prefix}nmedit; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_NMEDIT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$NMEDIT"; then
-  ac_cv_prog_NMEDIT="$NMEDIT" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_NMEDIT="${ac_tool_prefix}nmedit"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-NMEDIT=$ac_cv_prog_NMEDIT
-if test -n "$NMEDIT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $NMEDIT" >&5
-printf '%s\n' "$NMEDIT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_NMEDIT"; then
-  ac_ct_NMEDIT=$NMEDIT
-  # Extract the first word of "nmedit", so it can be a program name with args.
-set dummy nmedit; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_NMEDIT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_NMEDIT"; then
-  ac_cv_prog_ac_ct_NMEDIT="$ac_ct_NMEDIT" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_NMEDIT="nmedit"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_NMEDIT=$ac_cv_prog_ac_ct_NMEDIT
-if test -n "$ac_ct_NMEDIT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_NMEDIT" >&5
-printf '%s\n' "$ac_ct_NMEDIT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_NMEDIT" = x; then
-    NMEDIT=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    NMEDIT=$ac_ct_NMEDIT
-  fi
-else
-  NMEDIT="$ac_cv_prog_NMEDIT"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}lipo", so it can be a program name with args.
-set dummy ${ac_tool_prefix}lipo; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_LIPO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$LIPO"; then
-  ac_cv_prog_LIPO="$LIPO" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_LIPO="${ac_tool_prefix}lipo"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-LIPO=$ac_cv_prog_LIPO
-if test -n "$LIPO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LIPO" >&5
-printf '%s\n' "$LIPO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_LIPO"; then
-  ac_ct_LIPO=$LIPO
-  # Extract the first word of "lipo", so it can be a program name with args.
-set dummy lipo; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_LIPO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_LIPO"; then
-  ac_cv_prog_ac_ct_LIPO="$ac_ct_LIPO" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_LIPO="lipo"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_LIPO=$ac_cv_prog_ac_ct_LIPO
-if test -n "$ac_ct_LIPO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_LIPO" >&5
-printf '%s\n' "$ac_ct_LIPO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_LIPO" = x; then
-    LIPO=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    LIPO=$ac_ct_LIPO
-  fi
-else
-  LIPO="$ac_cv_prog_LIPO"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}otool", so it can be a program name with args.
-set dummy ${ac_tool_prefix}otool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$OTOOL"; then
-  ac_cv_prog_OTOOL="$OTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OTOOL="${ac_tool_prefix}otool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OTOOL=$ac_cv_prog_OTOOL
-if test -n "$OTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OTOOL" >&5
-printf '%s\n' "$OTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OTOOL"; then
-  ac_ct_OTOOL=$OTOOL
-  # Extract the first word of "otool", so it can be a program name with args.
-set dummy otool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_OTOOL"; then
-  ac_cv_prog_ac_ct_OTOOL="$ac_ct_OTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OTOOL="otool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OTOOL=$ac_cv_prog_ac_ct_OTOOL
-if test -n "$ac_ct_OTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL" >&5
-printf '%s\n' "$ac_ct_OTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OTOOL" = x; then
-    OTOOL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OTOOL=$ac_ct_OTOOL
-  fi
-else
-  OTOOL="$ac_cv_prog_OTOOL"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}otool64", so it can be a program name with args.
-set dummy ${ac_tool_prefix}otool64; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OTOOL64+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$OTOOL64"; then
-  ac_cv_prog_OTOOL64="$OTOOL64" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OTOOL64="${ac_tool_prefix}otool64"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OTOOL64=$ac_cv_prog_OTOOL64
-if test -n "$OTOOL64"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OTOOL64" >&5
-printf '%s\n' "$OTOOL64" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OTOOL64"; then
-  ac_ct_OTOOL64=$OTOOL64
-  # Extract the first word of "otool64", so it can be a program name with args.
-set dummy otool64; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OTOOL64+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_OTOOL64"; then
-  ac_cv_prog_ac_ct_OTOOL64="$ac_ct_OTOOL64" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OTOOL64="otool64"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OTOOL64=$ac_cv_prog_ac_ct_OTOOL64
-if test -n "$ac_ct_OTOOL64"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL64" >&5
-printf '%s\n' "$ac_ct_OTOOL64" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OTOOL64" = x; then
-    OTOOL64=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OTOOL64=$ac_ct_OTOOL64
-  fi
-else
-  OTOOL64="$ac_cv_prog_OTOOL64"
-fi
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -single_module linker flag" >&5
-printf %s "checking for -single_module linker flag... " >&6; }
-if test ${lt_cv_apple_cc_single_mod+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_apple_cc_single_mod=no
-      if test -z "$LT_MULTI_MODULE"; then
-	# By default we will add the -single_module flag. You can override
-	# by either setting the environment variable LT_MULTI_MODULE
-	# non-empty at configure time, or by adding -multi_module to the
-	# link flags.
-	rm -rf libconftest.dylib*
-	echo "int foo(void){return 1;}" > conftest.c
-	echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
--dynamiclib -Wl,-single_module conftest.c" >&5
-	$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
-	  -dynamiclib -Wl,-single_module conftest.c 2>conftest.err
-        _lt_result=$?
-	# If there is a non-empty error log, and "single_module"
-	# appears in it, assume the flag caused a linker warning
-        if test -s conftest.err && $GREP single_module conftest.err; then
-	  cat conftest.err >&5
-	# Otherwise, if the output was created with a 0 exit code from
-	# the compiler, it worked.
-	elif test -f libconftest.dylib && test 0 = "$_lt_result"; then
-	  lt_cv_apple_cc_single_mod=yes
-	else
-	  cat conftest.err >&5
-	fi
-	rm -rf libconftest.dylib*
-	rm -f conftest.*
-      fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_apple_cc_single_mod" >&5
-printf '%s\n' "$lt_cv_apple_cc_single_mod" >&6; }
-
-    # Feature test to disable chained fixups since it is not
-    # compatible with '-undefined dynamic_lookup'
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -no_fixup_chains linker flag" >&5
-printf %s "checking for -no_fixup_chains linker flag... " >&6; }
-if test ${lt_cv_support_no_fixup_chains+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)  save_LDFLAGS=$LDFLAGS
-        LDFLAGS="$LDFLAGS -Wl,-no_fixup_chains"
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_support_no_fixup_chains=yes
-else case e in @%:@(
-  e) lt_cv_support_no_fixup_chains=no
-         ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-        LDFLAGS=$save_LDFLAGS
-      
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_support_no_fixup_chains" >&5
-printf '%s\n' "$lt_cv_support_no_fixup_chains" >&6; }
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -exported_symbols_list linker flag" >&5
-printf %s "checking for -exported_symbols_list linker flag... " >&6; }
-if test ${lt_cv_ld_exported_symbols_list+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ld_exported_symbols_list=no
-      save_LDFLAGS=$LDFLAGS
-      echo "_main" > conftest.sym
-      LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym"
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_ld_exported_symbols_list=yes
-else case e in @%:@(
-  e) lt_cv_ld_exported_symbols_list=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-	LDFLAGS=$save_LDFLAGS
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_exported_symbols_list" >&5
-printf '%s\n' "$lt_cv_ld_exported_symbols_list" >&6; }
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -force_load linker flag" >&5
-printf %s "checking for -force_load linker flag... " >&6; }
-if test ${lt_cv_ld_force_load+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ld_force_load=no
-      cat > conftest.c << _LT_EOF
-int forced_loaded() { return 2;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&5
-      $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&5
-      echo "$AR $AR_FLAGS libconftest.a conftest.o" >&5
-      $AR $AR_FLAGS libconftest.a conftest.o 2>&5
-      echo "$RANLIB libconftest.a" >&5
-      $RANLIB libconftest.a 2>&5
-      cat > conftest.c << _LT_EOF
-int main(void) { return 0;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&5
-      $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err
-      _lt_result=$?
-      if test -s conftest.err && $GREP force_load conftest.err; then
-	cat conftest.err >&5
-      elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then
-	lt_cv_ld_force_load=yes
-      else
-	cat conftest.err >&5
-      fi
-        rm -f conftest.err libconftest.a conftest conftest.c
-        rm -rf conftest.dSYM
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_force_load" >&5
-printf '%s\n' "$lt_cv_ld_force_load" >&6; }
-    case $host_os in
-    rhapsody* | darwin1.[012])
-      _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;;
-    darwin1.*)
-      _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-    darwin*)
-      case $MACOSX_DEPLOYMENT_TARGET,$host in
-        10.[012],*|,*powerpc*-darwin[5-8]*)
-          _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-        *)
-          _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup'
-          if test yes = "$lt_cv_support_no_fixup_chains"; then
-            as_fn_append _lt_dar_allow_undefined ' $wl-no_fixup_chains'
-          fi
-        ;;
-      esac
-    ;;
-  esac
-    if test yes = "$lt_cv_apple_cc_single_mod"; then
-      _lt_dar_single_mod='$single_module'
-    fi
-    _lt_dar_needs_single_mod=no
-    case $host_os in
-    rhapsody* | darwin1.*)
-      _lt_dar_needs_single_mod=yes ;;
-    darwin*)
-      # When targeting Mac OS X 10.4 (darwin 8) or later,
-      # -single_module is the default and -multi_module is unsupported.
-      # The toolchain on macOS 10.14 (darwin 18) and later cannot
-      # target any OS version that needs -single_module.
-      case ${MACOSX_DEPLOYMENT_TARGET-10.0},$host in
-      10.0,*-darwin[567].*|10.[0-3],*-darwin[5-9].*|10.[0-3],*-darwin1[0-7].*)
-        _lt_dar_needs_single_mod=yes ;;
-      esac
-    ;;
-    esac
-    if test yes = "$lt_cv_ld_exported_symbols_list"; then
-      _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym'
-    else
-      _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib'
-    fi
-    if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then
-      _lt_dsymutil='~$DSYMUTIL $lib || :'
-    else
-      _lt_dsymutil=
-    fi
-    ;;
-  esac
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x@S|@2 in
-    x)
-        ;;
-    *:)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\"
-        ;;
-    x:*)
-        eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\"
-        ;;
-    *)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-ac_fn_c_check_header_compile "$LINENO" "dlfcn.h" "ac_cv_header_dlfcn_h" "$ac_includes_default
-"
-if test "x$ac_cv_header_dlfcn_h" = xyes
-then :
-  printf '%s\n' "@%:@define HAVE_DLFCN_H 1" >>confdefs.h
-
-fi
-
-
-
-
-
-# Set options
-
-
-
-        enable_dlopen=no
-  
-
-  enable_win32_dll=no
-  
-
-            @%:@ Check whether --enable-shared was given.
-if test ${enable_shared+y}
-then :
-  enableval=$enable_shared; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_shared=yes ;;
-    no) enable_shared=no ;;
-    *)
-      enable_shared=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_shared=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in @%:@(
-  e) enable_shared=yes ;;
-esac
-fi
-
-
-    
-    
-    
-    
-
-
-
-  @%:@ Check whether --enable-static was given.
-if test ${enable_static+y}
-then :
-  enableval=$enable_static; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_static=yes ;;
-    no) enable_static=no ;;
-    *)
-     enable_static=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_static=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in @%:@(
-  e) enable_static=yes ;;
-esac
-fi
-
-
-    
-    
-    
-    
-
-
-
-  @%:@ Check whether --enable-pic was given.
-if test ${enable_pic+y}
-then :
-  enableval=$enable_pic; lt_p=${PACKAGE-default}
-     case $enableval in
-     yes|no) pic_mode=$enableval ;;
-     *)
-       pic_mode=default
-       # Look at the argument we got.  We use all the common list separators.
-       lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-       for lt_pkg in $enableval; do
-	 IFS=$lt_save_ifs
-	 if test "X$lt_pkg" = "X$lt_p"; then
-	   pic_mode=yes
-	 fi
-       done
-       IFS=$lt_save_ifs
-       ;;
-     esac
-else case e in @%:@(
-  e)           @%:@ Check whether --with-pic was given.
-if test ${with_pic+y}
-then :
-  withval=$with_pic; lt_p=${PACKAGE-default}
-	 case $withval in
-	 yes|no) pic_mode=$withval ;;
-	 *)
-	   pic_mode=default
-	   # Look at the argument we got.  We use all the common list separators.
-	   lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-	   for lt_pkg in $withval; do
-	     IFS=$lt_save_ifs
-	     if test "X$lt_pkg" = "X$lt_p"; then
-	       pic_mode=yes
-	     fi
-	   done
-	   IFS=$lt_save_ifs
-	   ;;
-	 esac
-else case e in @%:@(
-  e) pic_mode=default ;;
-esac
-fi
-
-     ;;
-esac
-fi
-
-
-
-    
-    
-    
-
-
-  @%:@ Check whether --enable-fast-install was given.
-if test ${enable_fast_install+y}
-then :
-  enableval=$enable_fast_install; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_fast_install=yes ;;
-    no) enable_fast_install=no ;;
-    *)
-      enable_fast_install=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_fast_install=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in @%:@(
-  e) enable_fast_install=yes ;;
-esac
-fi
-
-
-
-    
-    
-    
-
-
-  shared_archive_member_spec=
-case $host,$enable_shared in
-power*-*-aix[5-9]*,yes)
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking which variant of shared library versioning to provide" >&5
-printf %s "checking which variant of shared library versioning to provide... " >&6; }
-  @%:@ Check whether --enable-aix-soname was given.
-if test ${enable_aix_soname+y}
-then :
-  enableval=$enable_aix_soname; case $enableval in
-     aix|svr4|both)
-       ;;
-     *)
-       as_fn_error $? "Unknown argument to --enable-aix-soname" "$LINENO" 5
-       ;;
-     esac
-     lt_cv_with_aix_soname=$enable_aix_soname
-else case e in @%:@(
-  e) @%:@ Check whether --with-aix-soname was given.
-if test ${with_aix_soname+y}
-then :
-  withval=$with_aix_soname; case $withval in
-         aix|svr4|both)
-           ;;
-         *)
-           as_fn_error $? "Unknown argument to --with-aix-soname" "$LINENO" 5
-           ;;
-         esac
-         lt_cv_with_aix_soname=$with_aix_soname
-else case e in @%:@(
-  e) if test ${lt_cv_with_aix_soname+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_with_aix_soname=aix ;;
-esac
-fi
- ;;
-esac
-fi
-
-     enable_aix_soname=$lt_cv_with_aix_soname ;;
-esac
-fi
-
-  with_aix_soname=$enable_aix_soname
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $with_aix_soname" >&5
-printf '%s\n' "$with_aix_soname" >&6; }
-  if test aix != "$with_aix_soname"; then
-    # For the AIX way of multilib, we name the shared archive member
-    # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o',
-    # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File.
-    # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag,
-    # the AIX toolchain works better with OBJECT_MODE set (default 32).
-    if test 64 = "${OBJECT_MODE-32}"; then
-      shared_archive_member_spec=shr_64
-    else
-      shared_archive_member_spec=shr
-    fi
-  fi
-  ;;
-*)
-  with_aix_soname=aix
-  ;;
-esac
-
-
-    
-    
-    
-
-
-  
-
-
-# This can be used to rebuild libtool when needed
-LIBTOOL_DEPS=$ltmain
-
-# Always use our own libtool.
-LIBTOOL='$(SHELL) $(top_builddir)/libtool'
-
-
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-test -z "$LN_S" && LN_S="ln -s"
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-
-if test -n "${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for objdir" >&5
-printf %s "checking for objdir... " >&6; }
-if test ${lt_cv_objdir+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) rm -f .libs 2>/dev/null
-mkdir .libs 2>/dev/null
-if test -d .libs; then
-  lt_cv_objdir=.libs
-else
-  # MS-DOS does not allow filenames that begin with a dot.
-  lt_cv_objdir=_libs
-fi
-rmdir .libs 2>/dev/null ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_objdir" >&5
-printf '%s\n' "$lt_cv_objdir" >&6; }
-objdir=$lt_cv_objdir
-
-    
-    
-    
-
-printf '%s\n' "@%:@define LT_OBJDIR \"$lt_cv_objdir/\"" >>confdefs.h
-
-
-
-
-case $host_os in
-aix3*)
-  # AIX sometimes has problems with the GCC collect2 program.  For some
-  # reason, if we set the COLLECT_NAMES environment variable, the problems
-  # vanish in a puff of smoke.
-  if test set != "${COLLECT_NAMES+set}"; then
-    COLLECT_NAMES=
-    export COLLECT_NAMES
-  fi
-  ;;
-esac
-
-# Global variables:
-ofile=libtool
-can_build_shared=yes
-
-# All known linkers require a '.a' archive for static linking (except MSVC and
-# ICC, which need '.lib').
-libext=a
-
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-old_CC=$CC
-old_CFLAGS=$CFLAGS
-
-# Set sane defaults for various variables
-test -z "$CC" && CC=cc
-test -z "$LTCC" && LTCC=$CC
-test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS
-test -z "$LD" && LD=ld
-test -z "$ac_objext" && ac_objext=o
-
-func_cc_basename $compiler
-cc_basename=$func_cc_basename_result
-
-
-# Only perform the check for file, if the check method requires it
-test -z "$MAGIC_CMD" && MAGIC_CMD=file
-case $deplibs_check_method in
-file_magic*)
-  if test "$file_magic_cmd" = '$MAGIC_CMD'; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for ${ac_tool_prefix}file" >&5
-printf %s "checking for ${ac_tool_prefix}file... " >&6; }
-if test ${lt_cv_path_MAGIC_CMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $MAGIC_CMD in
-[\\/*] |  ?:[\\/]*)
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  ac_dummy="/usr/bin$PATH_SEPARATOR$PATH"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/${ac_tool_prefix}file"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"${ac_tool_prefix}file"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac ;;
-esac
-fi
-
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5
-printf '%s\n' "$MAGIC_CMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-    
-    
-    
-
-if test -z "$lt_cv_path_MAGIC_CMD"; then
-  if test -n "$ac_tool_prefix"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for file" >&5
-printf %s "checking for file... " >&6; }
-if test ${lt_cv_path_MAGIC_CMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $MAGIC_CMD in
-[\\/*] |  ?:[\\/]*)
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  ac_dummy="/usr/bin$PATH_SEPARATOR$PATH"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/file"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"file"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac ;;
-esac
-fi
-
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5
-printf '%s\n' "$MAGIC_CMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  else
-    MAGIC_CMD=:
-  fi
-fi
-
-  fi
-  ;;
-esac
-
-# Use C for the default configuration in the libtool script
-
-lt_save_CC=$CC
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-# Source file extension for C test sources.
-ac_ext=c
-
-# Object file extension for compiled C test sources.
-objext=o
-objext=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code="int some_variable = 0;"
-
-# Code to be used in simple link tests
-lt_simple_link_test_code='int main(void){return(0);}'
-
-
-
-
-
-
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-
-# Save the default compiler, since it gets overwritten when the other
-# tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP.
-compiler_DEFAULT=$CC
-
-# save warnings/boilerplate of simple test code
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_compile_test_code" >conftest.$ac_ext
-eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_compiler_boilerplate=`cat conftest.err`
-$RM conftest*
-
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_link_test_code" >conftest.$ac_ext
-eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_linker_boilerplate=`cat conftest.err`
-$RM -r conftest*
-
-
-## CAVEAT EMPTOR:
-## There is no encapsulation within the following macros, do not change
-## the running order or otherwise move them around unless you know exactly
-## what you are doing...
-if test -n "$compiler"; then
-  
-lt_prog_compiler_no_builtin_flag=
-
-if test yes = "$GCC"; then
-  case $cc_basename in
-  nvcc*)
-    lt_prog_compiler_no_builtin_flag=' -Xcompiler -fno-builtin' ;;
-  *)
-    lt_prog_compiler_no_builtin_flag=' -fno-builtin' ;;
-  esac
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -fno-rtti -fno-exceptions" >&5
-printf %s "checking if $compiler supports -fno-rtti -fno-exceptions... " >&6; }
-if test ${lt_cv_prog_compiler_rtti_exceptions+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_rtti_exceptions=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="-fno-rtti -fno-exceptions"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_rtti_exceptions=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_rtti_exceptions" >&5
-printf '%s\n' "$lt_cv_prog_compiler_rtti_exceptions" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_rtti_exceptions"; then
-    lt_prog_compiler_no_builtin_flag="$lt_prog_compiler_no_builtin_flag -fno-rtti -fno-exceptions"
-else
-    :
-fi
-
-fi
-
-    
-    
-    
-
-
-  lt_prog_compiler_wl=
-lt_prog_compiler_pic=
-lt_prog_compiler_static=
-
-
-  if test yes = "$GCC"; then
-    lt_prog_compiler_wl='-Wl,'
-    lt_prog_compiler_static='-static'
-
-    case $host_os in
-      aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            lt_prog_compiler_pic='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            lt_prog_compiler_pic='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      ;;
-
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      lt_prog_compiler_static=
-      ;;
-
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='-fPIC'
-	;;
-      esac
-      ;;
-
-    interix[3-9]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-
-    msdosdjgpp*)
-      # Just because we use GCC doesn't mean we suddenly get shared libraries
-      # on systems that don't support them.
-      lt_prog_compiler_can_build_shared=no
-      enable_shared=no
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic=-Kconform_pic
-      fi
-      ;;
-
-    *)
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-    esac
-
-    case $cc_basename in
-    nvcc*) # Cuda Compiler Driver 2.2
-      lt_prog_compiler_wl='-Xlinker '
-      if test -n "$lt_prog_compiler_pic"; then
-        lt_prog_compiler_pic="-Xcompiler $lt_prog_compiler_pic"
-      fi
-      ;;
-    esac
-  else
-    # PORTME Check for flag to pass linker flags through the system compiler.
-    case $host_os in
-    aix*)
-      lt_prog_compiler_wl='-Wl,'
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      else
-	lt_prog_compiler_static='-bnso -bI:/lib/syscalls.exp'
-      fi
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      case $cc_basename in
-      nagfor*)
-        # NAG Fortran compiler
-        lt_prog_compiler_wl='-Wl,-Wl,,'
-        lt_prog_compiler_pic='-PIC'
-        lt_prog_compiler_static='-Bstatic'
-        ;;
-      esac
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    hpux9* | hpux10* | hpux11*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
-      # not for PA HP-UX.
-      case $host_cpu in
-      hppa*64*|ia64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='+Z'
-	;;
-      esac
-      # Is there a better lt_prog_compiler_static that works with the bundled CC?
-      lt_prog_compiler_static='$wl-a ${wl}archive'
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC (with -KPIC) is the default.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-      case $cc_basename in
-      # old Intel for x86_64, which still supported -KPIC.
-      ecc*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-KPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      *flang* | ftn | f18* | f95*)
-        # Flang compiler.
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # icc used to be incompatible with GCC.
-      # ICC 10 doesn't accept -KPIC any more.
-      icc* | ifort*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # Lahey Fortran 8.1.
-      lf95*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='--shared'
-	lt_prog_compiler_static='--static'
-	;;
-      nagfor*)
-	# NAG Fortran compiler
-	lt_prog_compiler_wl='-Wl,-Wl,,'
-	lt_prog_compiler_pic='-PIC'
-	lt_prog_compiler_static='-Bstatic'
-	;;
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-	;;
-      pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
-        # Portland Group compilers (*not* the Pentium gcc compiler,
-	# which looks to be a dead project)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fpic'
-	lt_prog_compiler_static='-Bstatic'
-        ;;
-      ccc*)
-        lt_prog_compiler_wl='-Wl,'
-        # All Alpha code is PIC.
-        lt_prog_compiler_static='-non_shared'
-        ;;
-      xl* | bgxl* | bgf* | mpixl*)
-	# IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-qpic'
-	lt_prog_compiler_static='-qstaticlink'
-	;;
-      *)
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [1-7].* | *Sun*Fortran*\ 8.[0-3]*)
-	  # Sun Fortran 8.3 passes all unrecognized flags to the linker
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl=''
-	  ;;
-	*Sun\ F* | *Sun*Fortran*)
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Qoption ld '
-	  ;;
-	*Sun\ C*)
-	  # Sun C 5.9
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Wl,'
-	  ;;
-        *Intel*\ [CF]*Compiler*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fPIC'
-	  lt_prog_compiler_static='-static'
-	  ;;
-	*Portland\ Group*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fpic'
-	  lt_prog_compiler_static='-Bstatic'
-	  ;;
-	esac
-	;;
-      esac
-      ;;
-
-    newsos6)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *-mlibc)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-fPIC'
-      lt_prog_compiler_static='-static'
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    osf3* | osf4* | osf5*)
-      lt_prog_compiler_wl='-Wl,'
-      # All OSF/1 code is PIC.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    rdos*)
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      case $cc_basename in
-      f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
-	lt_prog_compiler_wl='-Qoption ld ';;
-      *)
-	lt_prog_compiler_wl='-Wl,';;
-      esac
-      ;;
-
-    sunos4*)
-      lt_prog_compiler_wl='-Qoption ld '
-      lt_prog_compiler_pic='-PIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4 | sysv4.2uw2* | sysv4.3*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic='-Kconform_pic'
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      ;;
-
-    sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    unicos*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_can_build_shared=no
-      ;;
-
-    uts4*)
-      lt_prog_compiler_pic='-pic'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *)
-      lt_prog_compiler_can_build_shared=no
-      ;;
-    esac
-  fi
-
-case $host_os in
-  # For platforms that do not support PIC, -DPIC is meaningless:
-  *djgpp*)
-    lt_prog_compiler_pic=
-    ;;
-  *)
-    lt_prog_compiler_pic="$lt_prog_compiler_pic@&t@ -DPIC"
-    ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $compiler option to produce PIC" >&5
-printf %s "checking for $compiler option to produce PIC... " >&6; }
-if test ${lt_cv_prog_compiler_pic+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic=$lt_prog_compiler_pic ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic" >&6; }
-lt_prog_compiler_pic=$lt_cv_prog_compiler_pic
-
-#
-# Check to make sure the PIC flag actually works.
-#
-if test -n "$lt_prog_compiler_pic"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler PIC flag $lt_prog_compiler_pic works" >&5
-printf %s "checking if $compiler PIC flag $lt_prog_compiler_pic works... " >&6; }
-if test ${lt_cv_prog_compiler_pic_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic_works=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$lt_prog_compiler_pic@&t@ -DPIC"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_pic_works=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_pic_works"; then
-    case $lt_prog_compiler_pic in
-     "" | " "*) ;;
-     *) lt_prog_compiler_pic=" $lt_prog_compiler_pic" ;;
-     esac
-else
-    lt_prog_compiler_pic=
-     lt_prog_compiler_can_build_shared=no
-fi
-
-fi
-
-    
-    
-    
-
-
-
-    
-    
-    
-
-#
-# Check to make sure the static flag actually works.
-#
-wl=$lt_prog_compiler_wl eval lt_tmp_static_flag=\"$lt_prog_compiler_static\"
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler static flag $lt_tmp_static_flag works" >&5
-printf %s "checking if $compiler static flag $lt_tmp_static_flag works... " >&6; }
-if test ${lt_cv_prog_compiler_static_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_static_works=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $lt_tmp_static_flag"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler_static_works=yes
-       fi
-     else
-       lt_cv_prog_compiler_static_works=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_static_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_static_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_static_works"; then
-    :
-else
-    lt_prog_compiler_static=
-fi
-
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5
-printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; }
-if test ${lt_cv_prog_compiler_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_c_o=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_c_o=yes
-     fi
-   fi
-   chmod u+w . 2>&5
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5
-printf '%s\n' "$lt_cv_prog_compiler_c_o" >&6; }
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5
-printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; }
-if test ${lt_cv_prog_compiler_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_c_o=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_c_o=yes
-     fi
-   fi
-   chmod u+w . 2>&5
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5
-printf '%s\n' "$lt_cv_prog_compiler_c_o" >&6; }
-
-
-
-
-hard_links=nottested
-if test no = "$lt_cv_prog_compiler_c_o" && test no != "$need_locks"; then
-  # do not overwrite the value of need_locks provided by the user
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if we can lock with hard links" >&5
-printf %s "checking if we can lock with hard links... " >&6; }
-  hard_links=yes
-  $RM conftest*
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  touch conftest.a
-  ln conftest.a conftest.b 2>&5 || hard_links=no
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $hard_links" >&5
-printf '%s\n' "$hard_links" >&6; }
-  if test no = "$hard_links"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&5
-printf '%s\n' "$as_me: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&2;}
-    need_locks=warn
-  fi
-else
-  need_locks=no
-fi
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the $compiler linker ($LD) supports shared libraries" >&5
-printf %s "checking whether the $compiler linker ($LD) supports shared libraries... " >&6; }
-
-  runpath_var=
-  allow_undefined_flag=
-  always_export_symbols=no
-  archive_cmds=
-  archive_expsym_cmds=
-  compiler_needs_object=no
-  enable_shared_with_static_runtimes=no
-  export_dynamic_flag_spec=
-  export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
-  hardcode_automatic=no
-  hardcode_direct=no
-  hardcode_direct_absolute=no
-  hardcode_libdir_flag_spec=
-  hardcode_libdir_separator=
-  hardcode_minus_L=no
-  hardcode_shlibpath_var=unsupported
-  inherit_rpath=no
-  link_all_deplibs=unknown
-  module_cmds=
-  module_expsym_cmds=
-  old_archive_from_new_cmds=
-  old_archive_from_expsyms_cmds=
-  thread_safe_flag_spec=
-  whole_archive_flag_spec=
-  # include_expsyms should be a list of space-separated symbols to be *always*
-  # included in the symbol list
-  include_expsyms=
-  # exclude_expsyms can be an extended regexp of symbols to exclude
-  # it will be wrapped by ' (' and ')$', so one must not match beginning or
-  # end of line.  Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc',
-  # as well as any symbol that contains 'd'.
-  exclude_expsyms='_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*'
-  # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out
-  # platforms (ab)use it in PIC code, but their linkers get confused if
-  # the symbol is explicitly referenced.  Since portable code cannot
-  # rely on this symbol name, it's probably fine to never include it in
-  # preloaded symbol tables.
-  # Exclude shared library initialization/finalization symbols.
-  extract_expsyms_cmds=
-
-  case $host_os in
-  cygwin* | mingw* | windows* | pw32* | cegcc*)
-    # FIXME: the MSVC++ and ICC port hasn't been tested in a loooong time
-    # When not using gcc, we currently assume that we are using
-    # Microsoft Visual C++ or Intel C++ Compiler.
-    if test yes != "$GCC"; then
-      with_gnu_ld=no
-    fi
-    ;;
-  interix*)
-    # we just hope/assume this is gcc and not c89 (= MSVC++ or ICC)
-    with_gnu_ld=yes
-    ;;
-  esac
-
-  ld_shlibs=yes
-
-  # On some targets, GNU ld is compatible enough with the native linker
-  # that we're better off using the native interface for both.
-  lt_use_gnu_ld_interface=no
-  if test yes = "$with_gnu_ld"; then
-    case $host_os in
-      aix*)
-	# The AIX port of GNU ld has always aspired to compatibility
-	# with the native linker.  However, as the warning in the GNU ld
-	# block says, versions before 2.19.5* couldn't really create working
-	# shared libraries, regardless of the interface used.
-	case `$LD -v 2>&1` in
-	  *\ \(GNU\ Binutils\)\ 2.19.5*) ;;
-	  *\ \(GNU\ Binutils\)\ 2.[2-9]*) ;;
-	  *\ \(GNU\ Binutils\)\ [3-9]*) ;;
-	  *)
-	    lt_use_gnu_ld_interface=yes
-	    ;;
-	esac
-	;;
-      *)
-	lt_use_gnu_ld_interface=yes
-	;;
-    esac
-  fi
-
-  if test yes = "$lt_use_gnu_ld_interface"; then
-    # If archive_cmds runs LD, not CC, wlarc should be empty
-    wlarc='$wl'
-
-    # Set some defaults for GNU ld with shared library support. These
-    # are reset later if shared libraries are not supported. Putting them
-    # here allows them to be overridden if necessary.
-    runpath_var=LD_RUN_PATH
-    hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-    export_dynamic_flag_spec='$wl--export-dynamic'
-    # ancient GNU ld didn't support --whole-archive et. al.
-    if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then
-      whole_archive_flag_spec=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
-    else
-      whole_archive_flag_spec=
-    fi
-    supports_anon_versioning=no
-    case `$LD -v | $SED -e 's/([^)]\+)\s\+//' 2>&1` in
-      *GNU\ gold*) supports_anon_versioning=yes ;;
-      *\ [01].* | *\ 2.[0-9].* | *\ 2.10.*) ;; # catch versions < 2.11
-      *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ...
-      *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ...
-      *\ 2.11.*) ;; # other 2.11 versions
-      *) supports_anon_versioning=yes ;;
-    esac
-
-    # See if GNU ld supports shared libraries.
-    case $host_os in
-    aix[3-9]*)
-      # On AIX/PPC, the GNU linker is very broken
-      if test ia64 != "$host_cpu"; then
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: the GNU linker, at least up to release 2.19, is reported
-*** to be unable to reliably create shared libraries on AIX.
-*** Therefore, libtool is disabling shared libraries support.  If you
-*** really care for shared libraries, you may want to install binutils
-*** 2.20 or above, or modify your PATH so that a non-GNU linker is found.
-*** You will then need to restart the configuration process.
-
-_LT_EOF
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            archive_expsym_cmds=''
-        ;;
-      m68k)
-            archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            hardcode_libdir_flag_spec='-L$libdir'
-            hardcode_minus_L=yes
-        ;;
-      esac
-      ;;
-
-    beos*)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	allow_undefined_flag=unsupported
-	# Joseph Beckenbach <jrb3@best.com> says some releases of gcc
-	# support --undefined.  This deserves some investigation.  FIXME
-	archive_cmds='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    cygwin* | mingw* | windows* | pw32* | cegcc*)
-      # _LT_TAGVAR(hardcode_libdir_flag_spec, ) is actually meaningless,
-      # as there is no search path for DLLs.
-      hardcode_libdir_flag_spec='-L$libdir'
-      export_dynamic_flag_spec='$wl--export-all-symbols'
-      allow_undefined_flag=unsupported
-      always_export_symbols=no
-      enable_shared_with_static_runtimes=yes
-      export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1 DATA/;s/^.*[ ]__nm__\([^ ]*\)[ ][^ ]*/\1 DATA/;/^I[ ]/d;/^[AITW][ ]/s/.* //'\'' | sort | uniq > $export_symbols'
-      exclude_expsyms='[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname'
-      file_list_spec='@'
-
-      if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then
-        archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-	# If the export-symbols file already is a .def file, use it as
-	# is; otherwise, prepend EXPORTS...
-	archive_expsym_cmds='if   test DEF = "`$SED -n     -e '\''s/^[	 ]*//'\''     -e '\''/^\(;.*\)*$/d'\''     -e '\''s/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p'\''     -e q     $export_symbols`" ; then
-          cp $export_symbols $output_objdir/$soname.def;
-        else
-          echo EXPORTS > $output_objdir/$soname.def;
-          cat $export_symbols >> $output_objdir/$soname.def;
-        fi~
-        $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    haiku*)
-      archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      link_all_deplibs=no
-      ;;
-
-    os2*)
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_minus_L=yes
-      allow_undefined_flag=unsupported
-      shrext_cmds=.dll
-      archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      old_archive_from_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      enable_shared_with_static_runtimes=yes
-      file_list_spec='@'
-      ;;
-
-    interix[3-9]*)
-      hardcode_direct=no
-      hardcode_shlibpath_var=no
-      hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-      export_dynamic_flag_spec='$wl-E'
-      # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc.
-      # Instead, shared libraries are loaded at an image base (0x10000000 by
-      # default) and relocated if they conflict, which is a slow very memory
-      # consuming and fragmenting process.  To avoid this, we pick a random,
-      # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link
-      # time.  Moving up from 0x10000000 also allows more sbrk(2) space.
-      archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      archive_expsym_cmds='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      ;;
-
-    gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu)
-      tmp_diet=no
-      if test linux-dietlibc = "$host_os"; then
-	case $cc_basename in
-	  diet\ *) tmp_diet=yes;;	# linux-dietlibc with static linking (!diet-dyn)
-	esac
-      fi
-      if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \
-	 && test no = "$tmp_diet"
-      then
-	tmp_addflag=' $pic_flag'
-	tmp_sharedflag='-shared'
-	case $cc_basename,$host_cpu in
-        pgcc*)				# Portland Group C compiler
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag'
-	  ;;
-	pgf77* | pgf90* | pgf95* | pgfortran*)
-					# Portland Group f77 and f90 compilers
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag -Mnomain' ;;
-	ecc*,ia64* | icc*,ia64*)	# Intel C compiler on ia64
-	  tmp_addflag=' -i_dynamic' ;;
-	efc*,ia64* | ifort*,ia64*)	# Intel Fortran compiler on ia64
-	  tmp_addflag=' -i_dynamic -nofor_main' ;;
-	ifc* | ifort*)			# Intel Fortran compiler
-	  tmp_addflag=' -nofor_main' ;;
-	lf95*)				# Lahey Fortran 8.1
-	  whole_archive_flag_spec=
-	  tmp_sharedflag='--shared' ;;
-        nagfor*)                        # NAGFOR 5.3
-          tmp_sharedflag='-Wl,-shared' ;;
-	xl[cC]* | bgxl[cC]* | mpixl[cC]*) # IBM XL C 8.0 on PPC (deal with xlf below)
-	  tmp_sharedflag='-qmkshrobj'
-	  tmp_addflag= ;;
-	nvcc*)	# Cuda Compiler Driver 2.2
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  compiler_needs_object=yes
-	  ;;
-	esac
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ C*)			# Sun C 5.9
-	  whole_archive_flag_spec='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  compiler_needs_object=yes
-	  tmp_sharedflag='-G' ;;
-	*Sun\ F*)			# Sun Fortran 8.3
-	  tmp_sharedflag='-G' ;;
-	esac
-	archive_cmds='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-
-        if test yes = "$supports_anon_versioning"; then
-          archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~
-            cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-            echo "local: *; };" >> $output_objdir/$libname.ver~
-            $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib'
-        fi
-
-	case $cc_basename in
-	tcc*)
-	  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	  export_dynamic_flag_spec='-rdynamic'
-	  ;;
-	xlf* | bgf* | bgxlf* | mpixlf*)
-	  # IBM XL Fortran 10.1 on PPC cannot create shared libs itself
-	  whole_archive_flag_spec='--whole-archive$convenience --no-whole-archive'
-	  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	  archive_cmds='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib'
-	  if test yes = "$supports_anon_versioning"; then
-	    archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~
-              cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-              echo "local: *; };" >> $output_objdir/$libname.ver~
-              $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib'
-	  fi
-	  ;;
-	esac
-      else
-        ld_shlibs=no
-      fi
-      ;;
-
-    *-mlibc)
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      ;;
-
-    netbsd* | netbsdelf*-gnu)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	archive_cmds='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib'
-	wlarc=
-      else
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      fi
-      ;;
-
-    solaris*)
-      if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: The releases 2.8.* of the GNU linker cannot reliably
-*** create shared libraries on Solaris systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.9.1 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-      elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*)
-      case `$LD -v 2>&1` in
-        *\ [01].* | *\ 2.[0-9].* | *\ 2.1[0-5].*)
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot
-*** reliably create shared libraries on SCO systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.16.91.0.3 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-	;;
-	*)
-	  # For security reasons, it is highly recommended that you always
-	  # use absolute paths for naming shared libraries, and exclude the
-	  # DT_RUNPATH tag from executables and libraries.  But doing so
-	  # requires that you compile everything twice, which is a pain.
-	  if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	    hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	    archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	    archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-	  else
-	    ld_shlibs=no
-	  fi
-	;;
-      esac
-      ;;
-
-    sunos4*)
-      archive_cmds='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      wlarc=
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    *)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-    esac
-
-    if test no = "$ld_shlibs"; then
-      runpath_var=
-      hardcode_libdir_flag_spec=
-      export_dynamic_flag_spec=
-      whole_archive_flag_spec=
-    fi
-  else
-    # PORTME fill in a description of your system's linker (not GNU ld)
-    case $host_os in
-    aix3*)
-      allow_undefined_flag=unsupported
-      always_export_symbols=yes
-      archive_expsym_cmds='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname'
-      # Note: this linker hardcodes the directories in LIBPATH if there
-      # are no directories specified by -L.
-      hardcode_minus_L=yes
-      if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then
-	# Neither direct hardcoding nor static linking is supported with a
-	# broken collect2.
-	hardcode_direct=unsupported
-      fi
-      ;;
-
-    aix[4-9]*)
-      if test ia64 = "$host_cpu"; then
-	# On IA64, the linker does run time linking by default, so we don't
-	# have to do anything special.
-	aix_use_runtimelinking=no
-	exp_sym_flag='-Bexport'
-	no_entry_flag=
-      else
-	# If we're using GNU nm, then we don't want the "-C" option.
-	# -C means demangle to GNU nm, but means don't demangle to AIX nm.
-	# Without the "-l" option, or with the "-B" option, AIX nm treats
-	# weak defined symbols like other global defined symbols, whereas
-	# GNU nm marks them as "W".
-	# While the 'weak' keyword is ignored in the Export File, we need
-	# it in the Import File for the 'aix-soname' feature, so we have
-	# to replace the "-B" option with "-P" for AIX nm.
-	if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then
-	  export_symbols_cmds='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && (substr(\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols'
-	else
-	  export_symbols_cmds='`func_echo_all $NM | $SED -e '\''s/B\([^B]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && (substr(\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols'
-	fi
-	aix_use_runtimelinking=no
-
-	# Test if we are trying to use run time linking or normal
-	# AIX style linking. If -brtl is somewhere in LDFLAGS, we
-	# have runtime linking enabled, and use it for executables.
-	# For shared libraries, we enable/disable runtime linking
-	# depending on the kind of the shared library created -
-	# when "with_aix_soname,aix_use_runtimelinking" is:
-	# "aix,no"   lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "aix,yes"  lib.so          shared, rtl:yes, for executables
-	#            lib.a           static archive
-	# "both,no"  lib.so.V(shr.o) shared, rtl:yes
-	#            lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a(lib.so.V) shared, rtl:no
-	# "svr4,*"   lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a           static archive
-	case $host_os in aix4.[23]|aix4.[23].*|aix[5-9]*)
-	  for ld_flag in $LDFLAGS; do
-	  if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then
-	    aix_use_runtimelinking=yes
-	    break
-	  fi
-	  done
-	  if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then
-	    # With aix-soname=svr4, we create the lib.so.V shared archives only,
-	    # so we don't have lib.a shared libs to link our executables.
-	    # We have to force runtime linking in this case.
-	    aix_use_runtimelinking=yes
-	    LDFLAGS="$LDFLAGS -Wl,-brtl"
-	  fi
-	  ;;
-	esac
-
-	exp_sym_flag='-bexport'
-	no_entry_flag='-bnoentry'
-      fi
-
-      # When large executables or shared objects are built, AIX ld can
-      # have problems creating the table of contents.  If linking a library
-      # or program results in "error TOC overflow" add -mminimal-toc to
-      # CXXFLAGS/CFLAGS for g++/gcc.  In the cases where that is not
-      # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS.
-
-      archive_cmds=''
-      hardcode_direct=yes
-      hardcode_direct_absolute=yes
-      hardcode_libdir_separator=':'
-      link_all_deplibs=yes
-      file_list_spec='$wl-f,'
-      case $with_aix_soname,$aix_use_runtimelinking in
-      aix,*) ;; # traditional, no import file
-      svr4,* | *,yes) # use import file
-	# The Import File defines what to hardcode.
-	hardcode_direct=no
-	hardcode_direct_absolute=no
-	;;
-      esac
-
-      if test yes = "$GCC"; then
-	case $host_os in aix4.[012]|aix4.[012].*)
-	# We only want to do this on AIX 4.2 and lower, the check
-	# below for broken collect2 doesn't work under 4.3+
-	  collect2name=`$CC -print-prog-name=collect2`
-	  if test -f "$collect2name" &&
-	   strings "$collect2name" | $GREP resolve_lib_name >/dev/null
-	  then
-	  # We have reworked collect2
-	  :
-	  else
-	  # We have old collect2
-	  hardcode_direct=unsupported
-	  # It fails to find uninstalled libraries when the uninstalled
-	  # path is not listed in the libpath.  Setting hardcode_minus_L
-	  # to unsupported forces relinking
-	  hardcode_minus_L=yes
-	  hardcode_libdir_flag_spec='-L$libdir'
-	  hardcode_libdir_separator=
-	  fi
-	  ;;
-	esac
-	shared_flag='-shared'
-	if test yes = "$aix_use_runtimelinking"; then
-	  shared_flag="$shared_flag "'$wl-G'
-	fi
-	# Need to ensure runtime linking is disabled for the traditional
-	# shared library, or the linker may eventually find shared libraries
-	# /with/ Import File - we do not want to mix them.
-	shared_flag_aix='-shared'
-	shared_flag_svr4='-shared $wl-G'
-      else
-	# not using gcc
-	if test ia64 = "$host_cpu"; then
-	# VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release
-	# chokes on -Wl,-G. The following line is correct:
-	  shared_flag='-G'
-	else
-	  if test yes = "$aix_use_runtimelinking"; then
-	    shared_flag='$wl-G'
-	  else
-	    shared_flag='$wl-bM:SRE'
-	  fi
-	  shared_flag_aix='$wl-bM:SRE'
-	  shared_flag_svr4='$wl-G'
-	fi
-      fi
-
-      export_dynamic_flag_spec='$wl-bexpall'
-      # It seems that -bexpall does not export symbols beginning with
-      # underscore (_), so it is better to generate a list of symbols to export.
-      always_export_symbols=yes
-      if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then
-	# Warning - without using the other runtime loading flags (-brtl),
-	# -berok will link without error, but may produce a broken library.
-	allow_undefined_flag='-berok'
-        # Determine the default libpath from the value encoded in an
-        # empty executable.
-        if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  if test ${lt_cv_aix_libpath_+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  
-  lt_aix_libpath_sed='
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }'
-  lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=/usr/lib:/lib
-  fi
-   ;;
-esac
-fi
-
-  aix_libpath=$lt_cv_aix_libpath_
-fi
-
-        hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath"
-        archive_expsym_cmds='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag
-      else
-	if test ia64 = "$host_cpu"; then
-	  hardcode_libdir_flag_spec='$wl-R $libdir:/usr/lib:/lib'
-	  allow_undefined_flag="-z nodefs"
-	  archive_expsym_cmds="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols"
-	else
-	 # Determine the default libpath from the value encoded in an
-	 # empty executable.
-	 if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  if test ${lt_cv_aix_libpath_+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  
-  lt_aix_libpath_sed='
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }'
-  lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=/usr/lib:/lib
-  fi
-   ;;
-esac
-fi
-
-  aix_libpath=$lt_cv_aix_libpath_
-fi
-
-	 hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath"
-	  # Warning - without using the other run time loading flags,
-	  # -berok will link without error, but may produce a broken library.
-	  no_undefined_flag=' $wl-bernotok'
-	  allow_undefined_flag=' $wl-berok'
-	  if test yes = "$with_gnu_ld"; then
-	    # We only use this code for GNU lds that support --whole-archive.
-	    whole_archive_flag_spec='$wl--whole-archive$convenience $wl--no-whole-archive'
-	  else
-	    # Exported symbols can be pulled into shared objects from archives
-	    whole_archive_flag_spec='$convenience'
-	  fi
-	  archive_cmds_need_lc=yes
-	  archive_expsym_cmds='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d'
-	  # -brtl affects multiple linker settings, -berok does not and is overridden later
-	  compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([, ]\\)%-berok\\1%g"`'
-	  if test svr4 != "$with_aix_soname"; then
-	    # This is similar to how AIX traditionally builds its shared libraries.
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname'
-	  fi
-	  if test aix != "$with_aix_soname"; then
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp'
-	  else
-	    # used by -dlpreopen to get the symbols
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$MV  $output_objdir/$realname.d/$soname $output_objdir'
-	  fi
-	  archive_expsym_cmds="$archive_expsym_cmds"'~$RM -r $output_objdir/$realname.d'
-	fi
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            archive_expsym_cmds=''
-        ;;
-      m68k)
-            archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            hardcode_libdir_flag_spec='-L$libdir'
-            hardcode_minus_L=yes
-        ;;
-      esac
-      ;;
-
-    bsdi[45]*)
-      export_dynamic_flag_spec=-rdynamic
-      ;;
-
-    cygwin* | mingw* | windows* | pw32* | cegcc*)
-      # When not using gcc, we currently assume that we are using
-      # Microsoft Visual C++ or Intel C++ Compiler.
-      # hardcode_libdir_flag_spec is actually meaningless, as there is
-      # no search path for DLLs.
-      case $cc_basename in
-      cl* | icl*)
-	# Native MSVC or ICC
-	hardcode_libdir_flag_spec=' '
-	allow_undefined_flag=unsupported
-	always_export_symbols=yes
-	file_list_spec='@'
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	archive_cmds='$CC -Fe$output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames='
-	archive_expsym_cmds='if   test DEF = "`$SED -n     -e '\''s/^[	 ]*//'\''     -e '\''/^\(;.*\)*$/d'\''     -e '\''s/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p'\''     -e q     $export_symbols`" ; then
-            cp "$export_symbols" "$output_objdir/$soname.def";
-            echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp";
-          else
-            $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp;
-          fi~
-          $CC -Fe$tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~
-          linknames='
-	# The linker will not automatically build a static lib if we build a DLL.
-	# _LT_TAGVAR(old_archive_from_new_cmds, )='true'
-	enable_shared_with_static_runtimes=yes
-	exclude_expsyms='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*'
-	export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1,DATA/'\'' | $SED -e '\''/^[AITW][ ]/s/.*[ ]//'\'' | sort | uniq > $export_symbols'
-	# Don't use ranlib
-	old_postinstall_cmds='chmod 644 $oldlib'
-	postlink_cmds='lt_outputfile="@OUTPUT@"~
-          lt_tool_outputfile="@TOOL_OUTPUT@"~
-          case $lt_outputfile in
-            *.exe|*.EXE) ;;
-            *)
-              lt_outputfile=$lt_outputfile.exe
-              lt_tool_outputfile=$lt_tool_outputfile.exe
-              ;;
-          esac~
-          if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then
-            $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1;
-            $RM "$lt_outputfile.manifest";
-          fi'
-	;;
-      *)
-	# Assume MSVC and ICC wrapper
-	hardcode_libdir_flag_spec=' '
-	allow_undefined_flag=unsupported
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	archive_cmds='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames='
-	# The linker will automatically build a .lib file if we build a DLL.
-	old_archive_from_new_cmds='true'
-	# FIXME: Should let the user specify the lib program.
-	old_archive_cmds='lib -OUT:$oldlib$oldobjs$old_deplibs'
-	enable_shared_with_static_runtimes=yes
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      
-  
-  archive_cmds_need_lc=no
-  hardcode_direct=no
-  hardcode_automatic=yes
-  hardcode_shlibpath_var=unsupported
-  if test yes = "$lt_cv_ld_force_load"; then
-    whole_archive_flag_spec='`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`'
-    
-  else
-    whole_archive_flag_spec=''
-  fi
-  link_all_deplibs=yes
-  allow_undefined_flag=$_lt_dar_allow_undefined
-  case $cc_basename in
-     ifort*|nagfor*) _lt_dar_can_shared=yes ;;
-     *) _lt_dar_can_shared=$GCC ;;
-  esac
-  if test yes = "$_lt_dar_can_shared"; then
-    output_verbose_link_cmd=func_echo_all
-    archive_cmds="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil"
-    module_cmds="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil"
-    archive_expsym_cmds="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil"
-    module_expsym_cmds="$SED -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil"
-    
-  else
-  ld_shlibs=no
-  fi
-
-      ;;
-
-    dgux*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_shlibpath_var=no
-      ;;
-
-    # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor
-    # support.  Future versions do this automatically, but an explicit c++rt0.o
-    # does not break anything, and helps significantly (at the cost of a little
-    # extra space).
-    freebsd2.2*)
-      archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o'
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    # Unfortunately, older versions of FreeBSD 2 do not have this feature.
-    freebsd2.*)
-      archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_direct=yes
-      hardcode_minus_L=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    # FreeBSD 3 and greater uses gcc -shared to do shared libraries.
-    freebsd* | dragonfly* | midnightbsd*)
-      archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    hpux9*)
-      if test yes = "$GCC"; then
-	archive_cmds='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      else
-	archive_cmds='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      fi
-      hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-      hardcode_libdir_separator=:
-      hardcode_direct=yes
-
-      # hardcode_minus_L: Not really in the search PATH,
-      # but as the default location of the library.
-      hardcode_minus_L=yes
-      export_dynamic_flag_spec='$wl-E'
-      ;;
-
-    hpux10*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      if test no = "$with_gnu_ld"; then
-	hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-	hardcode_libdir_separator=:
-	hardcode_direct=yes
-	hardcode_direct_absolute=yes
-	export_dynamic_flag_spec='$wl-E'
-	# hardcode_minus_L: Not really in the search PATH,
-	# but as the default location of the library.
-	hardcode_minus_L=yes
-      fi
-      ;;
-
-    hpux11*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	case $host_cpu in
-	hppa*64*)
-	  archive_cmds='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	  archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	esac
-      else
-	case $host_cpu in
-	hppa*64*)
-	  archive_cmds='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  archive_cmds='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	
-	  # Older versions of the 11.00 compiler do not understand -b yet
-	  # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does)
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC understands -b" >&5
-printf %s "checking if $CC understands -b... " >&6; }
-if test ${lt_cv_prog_compiler__b+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler__b=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS -b"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler__b=yes
-       fi
-     else
-       lt_cv_prog_compiler__b=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler__b" >&5
-printf '%s\n' "$lt_cv_prog_compiler__b" >&6; }
-
-if test yes = "$lt_cv_prog_compiler__b"; then
-    archive_cmds='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-else
-    archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-fi
-
-	  ;;
-	esac
-      fi
-      if test no = "$with_gnu_ld"; then
-	hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-	hardcode_libdir_separator=:
-
-	case $host_cpu in
-	hppa*64*|ia64*)
-	  hardcode_direct=no
-	  hardcode_shlibpath_var=no
-	  ;;
-	*)
-	  hardcode_direct=yes
-	  hardcode_direct_absolute=yes
-	  export_dynamic_flag_spec='$wl-E'
-
-	  # hardcode_minus_L: Not really in the search PATH,
-	  # but as the default location of the library.
-	  hardcode_minus_L=yes
-	  ;;
-	esac
-      fi
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	# Try to use the -exported_symbol ld option, if it does not
-	# work, assume that -exports_file does not work either and
-	# implicitly export all symbols.
-	# This should be the same for all languages, so no per-tag cache variable.
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the $host_os linker accepts -exported_symbol" >&5
-printf %s "checking whether the $host_os linker accepts -exported_symbol... " >&6; }
-if test ${lt_cv_irix_exported_symbol+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) save_LDFLAGS=$LDFLAGS
-	   LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null"
-	   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int foo (void) { return 0; }
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_irix_exported_symbol=yes
-else case e in @%:@(
-  e) lt_cv_irix_exported_symbol=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-           LDFLAGS=$save_LDFLAGS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_irix_exported_symbol" >&5
-printf '%s\n' "$lt_cv_irix_exported_symbol" >&6; }
-	if test yes = "$lt_cv_irix_exported_symbol"; then
-          archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib'
-	fi
-      else
-	archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      inherit_rpath=yes
-      link_all_deplibs=yes
-      ;;
-
-    linux*)
-      case $cc_basename in
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	ld_shlibs=yes
-	archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	;;
-      esac
-      ;;
-
-    *-mlibc)
-      ;;
-
-    netbsd* | netbsdelf*-gnu)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'  # a.out
-      else
-	archive_cmds='$LD -shared -o $lib $libobjs $deplibs $linker_flags'      # ELF
-      fi
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    newsos6)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_direct=yes
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      hardcode_shlibpath_var=no
-      ;;
-
-    *nto* | *qnx*)
-      ;;
-
-    openbsd*)
-      if test -f /usr/libexec/ld.so; then
-	hardcode_direct=yes
-	hardcode_shlibpath_var=no
-	hardcode_direct_absolute=yes
-	if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-	  archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  archive_expsym_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols'
-	  hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-	  export_dynamic_flag_spec='$wl-E'
-	else
-	  archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-	fi
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    os2*)
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_minus_L=yes
-      allow_undefined_flag=unsupported
-      shrext_cmds=.dll
-      archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      old_archive_from_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      enable_shared_with_static_runtimes=yes
-      file_list_spec='@'
-      ;;
-
-    osf3*)
-      if test yes = "$GCC"; then
-	allow_undefined_flag=' $wl-expect_unresolved $wl\*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-      else
-	allow_undefined_flag=' -expect_unresolved \*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      ;;
-
-    osf4* | osf5*)	# as osf3* with the addition of -msym flag
-      if test yes = "$GCC"; then
-	allow_undefined_flag=' $wl-expect_unresolved $wl\*'
-	archive_cmds='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      else
-	allow_undefined_flag=' -expect_unresolved \*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	archive_expsym_cmds='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~
-          $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp'
-
-	# Both c and cxx compiler support -rpath directly
-	hardcode_libdir_flag_spec='-rpath $libdir'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_separator=:
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      no_undefined_flag=' -z defs'
-      if test yes = "$GCC"; then
-	wlarc='$wl'
-	archive_cmds='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-          $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-      else
-	case `$CC -V 2>&1` in
-	*"Compilers 5.0"*)
-	  wlarc=''
-	  archive_cmds='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp'
-	  ;;
-	*)
-	  wlarc='$wl'
-	  archive_cmds='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags'
-	  archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-	  ;;
-	esac
-      fi
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_shlibpath_var=no
-      case $host_os in
-      solaris2.[0-5] | solaris2.[0-5].*) ;;
-      *)
-	# The compiler driver will combine and reorder linker options,
-	# but understands '-z linker_flag'.  GCC discards it without '$wl',
-	# but is careful enough not to reorder.
-	# Supported since Solaris 2.6 (maybe 2.5.1?)
-	if test yes = "$GCC"; then
-	  whole_archive_flag_spec='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract'
-	else
-	  whole_archive_flag_spec='-z allextract$convenience -z defaultextract'
-	fi
-	;;
-      esac
-      link_all_deplibs=yes
-      ;;
-
-    sunos4*)
-      if test sequent = "$host_vendor"; then
-	# Use $CC to link under sequent, because it throws in some extra .o
-	# files that make .init and .fini sections work.
-	archive_cmds='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_direct=yes
-      hardcode_minus_L=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    sysv4)
-      case $host_vendor in
-	sni)
-	  archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  hardcode_direct=yes # is this really true???
-	;;
-	siemens)
-	  ## LD is ld it makes a PLAMLIB
-	  ## CC just makes a GrossModule.
-	  archive_cmds='$LD -G -o $lib $libobjs $deplibs $linker_flags'
-	  reload_cmds='$CC -r -o $output$reload_objs'
-	  hardcode_direct=no
-        ;;
-	motorola)
-	  archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  hardcode_direct=no #Motorola manual says yes, but my tests say they lie
-	;;
-      esac
-      runpath_var='LD_RUN_PATH'
-      hardcode_shlibpath_var=no
-      ;;
-
-    sysv4.3*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_shlibpath_var=no
-      export_dynamic_flag_spec='-Bexport'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	hardcode_shlibpath_var=no
-	runpath_var=LD_RUN_PATH
-	hardcode_runpath_var=yes
-	ld_shlibs=yes
-      fi
-      ;;
-
-    sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[01].[10]* | unixware7* | sco3.2v5.0.[024]*)
-      no_undefined_flag='$wl-z,text'
-      archive_cmds_need_lc=no
-      hardcode_shlibpath_var=no
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6*)
-      # Note: We CANNOT use -z defs as we might desire, because we do not
-      # link with -lc, and that would cause any symbols used from libc to
-      # always be unresolved, which means just about no library would
-      # ever link correctly.  If we're not using GNU ld we use -z text
-      # though, which does catch some bad symbols but isn't as heavy-handed
-      # as -z defs.
-      no_undefined_flag='$wl-z,text'
-      allow_undefined_flag='$wl-z,nodefs'
-      archive_cmds_need_lc=no
-      hardcode_shlibpath_var=no
-      hardcode_libdir_flag_spec='$wl-R,$libdir'
-      hardcode_libdir_separator=':'
-      link_all_deplibs=yes
-      export_dynamic_flag_spec='$wl-Bexport'
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    uts4*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_shlibpath_var=no
-      ;;
-
-    *)
-      ld_shlibs=no
-      ;;
-    esac
-
-    if test sni = "$host_vendor"; then
-      case $host in
-      sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*)
-	export_dynamic_flag_spec='$wl-Blargedynsym'
-	;;
-      esac
-    fi
-  fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ld_shlibs" >&5
-printf '%s\n' "$ld_shlibs" >&6; }
-test no = "$ld_shlibs" && can_build_shared=no
-
-with_gnu_ld=$with_gnu_ld
-
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-
-#
-# Do we need to explicitly link libc?
-#
-case "x$archive_cmds_need_lc" in
-x|xyes)
-  # Assume -lc should be added
-  archive_cmds_need_lc=yes
-
-  if test yes,yes = "$GCC,$enable_shared"; then
-    case $archive_cmds in
-    *'~'*)
-      # FIXME: we may have to deal with multi-command sequences.
-      ;;
-    '$CC '*)
-      # Test whether the compiler implicitly links with -lc since on some
-      # systems, -lgcc has to come before -lc. If gcc already passes -lc
-      # to ld, don't add -lc before -lgcc.
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether -lc should be explicitly linked in" >&5
-printf %s "checking whether -lc should be explicitly linked in... " >&6; }
-if test ${lt_cv_archive_cmds_need_lc+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) $RM conftest*
-	echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-	if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } 2>conftest.err; then
-	  soname=conftest
-	  lib=conftest
-	  libobjs=conftest.$ac_objext
-	  deplibs=
-	  wl=$lt_prog_compiler_wl
-	  pic_flag=$lt_prog_compiler_pic
-	  compiler_flags=-v
-	  linker_flags=-v
-	  verstring=
-	  output_objdir=.
-	  libname=conftest
-	  lt_save_allow_undefined_flag=$allow_undefined_flag
-	  allow_undefined_flag=
-	  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1\""; } >&5
-  (eval $archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-	  then
-	    lt_cv_archive_cmds_need_lc=no
-	  else
-	    lt_cv_archive_cmds_need_lc=yes
-	  fi
-	  allow_undefined_flag=$lt_save_allow_undefined_flag
-	else
-	  cat conftest.err 1>&5
-	fi
-	$RM conftest*
-	 ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_archive_cmds_need_lc" >&5
-printf '%s\n' "$lt_cv_archive_cmds_need_lc" >&6; }
-      archive_cmds_need_lc=$lt_cv_archive_cmds_need_lc
-      ;;
-    esac
-  fi
-  ;;
-esac
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking dynamic linker characteristics" >&5
-printf %s "checking dynamic linker characteristics... " >&6; }
-
-if test yes = "$GCC"; then
-  case $host_os in
-    darwin*) lt_awk_arg='/^libraries:/,/LR/' ;;
-    *) lt_awk_arg='/^libraries:/' ;;
-  esac
-  case $host_os in
-    mingw* | windows* | cegcc*) lt_sed_strip_eq='s|=\([A-Za-z]:\)|\1|g' ;;
-    *) lt_sed_strip_eq='s|=/|/|g' ;;
-  esac
-  lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq`
-  case $lt_search_path_spec in
-  *\;*)
-    # if the path contains ";" then we assume it to be the separator
-    # otherwise default to the standard path separator (i.e. ":") - it is
-    # assumed that no part of a normal pathname contains ";" but that should
-    # okay in the real world where ";" in dirpaths is itself problematic.
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'`
-    ;;
-  *)
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"`
-    ;;
-  esac
-  # Ok, now we have the path, separated by spaces, we can step through it
-  # and add multilib dir if necessary...
-  lt_tmp_lt_search_path_spec=
-  lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null`
-  # ...but if some path component already ends with the multilib dir we assume
-  # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer).
-  case "$lt_multi_os_dir; $lt_search_path_spec " in
-  "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*)
-    lt_multi_os_dir=
-    ;;
-  esac
-  for lt_sys_path in $lt_search_path_spec; do
-    if test -d "$lt_sys_path$lt_multi_os_dir"; then
-      lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir"
-    elif test -n "$lt_multi_os_dir"; then
-      test -d "$lt_sys_path" && \
-	lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path"
-    fi
-  done
-  lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk '
-BEGIN {RS = " "; FS = "/|\n";} {
-  lt_foo = "";
-  lt_count = 0;
-  for (lt_i = NF; lt_i > 0; lt_i--) {
-    if ($lt_i != "" && $lt_i != ".") {
-      if ($lt_i == "..") {
-        lt_count++;
-      } else {
-        if (lt_count == 0) {
-          lt_foo = "/" $lt_i lt_foo;
-        } else {
-          lt_count--;
-        }
-      }
-    }
-  }
-  if (lt_foo != "") { lt_freq[lt_foo]++; }
-  if (lt_freq[lt_foo] == 1) { print lt_foo; }
-}'`
-  # AWK program above erroneously prepends '/' to C:/dos/paths
-  # for these hosts.
-  case $host_os in
-    mingw* | windows* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\
-      $SED 's|/\([A-Za-z]:\)|\1|g'` ;;
-  esac
-  sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP`
-else
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-fi
-library_names_spec=
-libname_spec='lib$name'
-soname_spec=
-shrext_cmds=.so
-postinstall_cmds=
-postuninstall_cmds=
-finish_cmds=
-finish_eval=
-shlibpath_var=
-shlibpath_overrides_runpath=unknown
-version_type=none
-dynamic_linker="$host_os ld.so"
-sys_lib_dlsearch_path_spec="/lib /usr/lib"
-need_lib_prefix=unknown
-hardcode_into_libs=no
-
-# when you set need_version to no, make sure it does not cause -set_version
-# flags to be left without arguments
-need_version=unknown
-
-
-
-case $host_os in
-aix3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname.a'
-  shlibpath_var=LIBPATH
-
-  # AIX 3 has no versioning support, so we append a major version to the name.
-  soname_spec='$libname$release$shared_ext$major'
-  ;;
-
-aix[4-9]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  hardcode_into_libs=yes
-  if test ia64 = "$host_cpu"; then
-    # AIX 5 supports IA64
-    library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext'
-    shlibpath_var=LD_LIBRARY_PATH
-  else
-    # With GCC up to 2.95.x, collect2 would create an import file
-    # for dependence libraries.  The import file would start with
-    # the line '#! .'.  This would cause the generated library to
-    # depend on '.', always an invalid library.  This was fixed in
-    # development snapshots of GCC prior to 3.0.
-    case $host_os in
-      aix4 | aix4.[01] | aix4.[01].*)
-      if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)'
-	   echo ' yes '
-	   echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then
-	:
-      else
-	can_build_shared=no
-      fi
-      ;;
-    esac
-    # Using Import Files as archive members, it is possible to support
-    # filename-based versioning of shared library archives on AIX. While
-    # this would work for both with and without runtime linking, it will
-    # prevent static linking of such archives. So we do filename-based
-    # shared library versioning with .so extension only, which is used
-    # when both runtime linking and shared linking is enabled.
-    # Unfortunately, runtime linking may impact performance, so we do
-    # not want this to be the default eventually. Also, we use the
-    # versioned .so libs for executables only if there is the -brtl
-    # linker flag in LDFLAGS as well, or --enable-aix-soname=svr4 only.
-    # To allow for filename-based versioning support, we need to create
-    # libNAME.so.V as an archive file, containing:
-    # *) an Import File, referring to the versioned filename of the
-    #    archive as well as the shared archive member, telling the
-    #    bitwidth (32 or 64) of that shared object, and providing the
-    #    list of exported symbols of that shared object, eventually
-    #    decorated with the 'weak' keyword
-    # *) the shared object with the F_LOADONLY flag set, to really avoid
-    #    it being seen by the linker.
-    # At run time we better use the real file rather than another symlink,
-    # but for link time we create the symlink libNAME.so -> libNAME.so.V
-
-    case $with_aix_soname,$aix_use_runtimelinking in
-    # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct
-    # soname into executable. Probably we can add versioning support to
-    # collect2, so additional links can be useful in future.
-    aix,yes) # traditional libtool
-      dynamic_linker='AIX unversionable lib.so'
-      # If using run time linking (on AIX 4.2 or later) use lib<name>.so
-      # instead of lib<name>.a to let people know that these are not
-      # typical AIX shared libraries.
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      ;;
-    aix,no) # traditional AIX only
-      dynamic_linker='AIX lib.a(lib.so.V)'
-      # We preserve .a as extension for shared libraries through AIX4.2
-      # and later when we are not doing run time linking.
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      ;;
-    svr4,*) # full svr4 only
-      dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o)"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,yes) # both, prefer svr4
-      dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o), lib.a(lib.so.V)"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # unpreferred sharedlib libNAME.a needs extra handling
-      postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"'
-      postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,no) # both, prefer aix
-      dynamic_linker="AIX lib.a(lib.so.V), lib.so.V($shared_archive_member_spec.o)"
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling
-      postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)'
-      postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"'
-      ;;
-    esac
-    shlibpath_var=LIBPATH
-  fi
-  ;;
-
-amigaos*)
-  case $host_cpu in
-  powerpc)
-    # Since July 2007 AmigaOS4 officially supports .so libraries.
-    # When compiling the executable, add -use-dynld -Lsobjs: to the compileline.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    ;;
-  m68k)
-    library_names_spec='$libname.ixlibrary $libname.a'
-    # Create ${libname}_ixlibrary.a entries in /sys/libs.
-    finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([^/]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done'
-    ;;
-  esac
-  ;;
-
-beos*)
-  library_names_spec='$libname$shared_ext'
-  dynamic_linker="$host_os ld.so"
-  shlibpath_var=LIBRARY_PATH
-  ;;
-
-bsdi[45]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib"
-  # the default ld.so.conf also contains /usr/contrib/lib and
-  # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow
-  # libtool to hard-code these into programs
-  ;;
-
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-
-  case $GCC,$cc_basename in
-  yes,*)
-    # gcc
-    library_names_spec='$libname.dll.a'
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    # If user builds GCC with multilib enabled,
-    # it should just install on $(libdir)
-    # not on $(libdir)/../bin or 32 bits dlls would override 64 bit ones.
-    if test xyes = x"$multilib"; then
-      postinstall_cmds='base_file=`basename \$file`~
-        dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-        dldir=$destdir/`dirname \$dlpath`~
-        $install_prog $dir/$dlname $destdir/$dlname~
-        chmod a+x $destdir/$dlname~
-        if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-          eval '\''$striplib $destdir/$dlname'\'' || exit \$?;
-        fi'
-    else
-      postinstall_cmds='base_file=`basename \$file`~
-        dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-        dldir=$destdir/`dirname \$dlpath`~
-        test -d \$dldir || mkdir -p \$dldir~
-        $install_prog $dir/$dlname \$dldir/$dlname~
-        chmod a+x \$dldir/$dlname~
-        if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-          eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-        fi'
-    fi
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-
-    case $host_os in
-    cygwin*)
-      # Cygwin DLLs use 'cyg' prefix rather than 'lib'
-      soname_spec='`echo $libname | $SED -e 's/^lib/cyg/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-
-      sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api"
-      ;;
-    mingw* | windows* | cegcc*)
-      # MinGW DLLs use traditional 'lib' prefix
-      soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-      ;;
-    pw32*)
-      # pw32 DLLs use 'pw' prefix rather than 'lib'
-      library_names_spec='`echo $libname | $SED -e 's/^lib/pw/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-      ;;
-    esac
-    dynamic_linker='Win32 ld.exe'
-    ;;
-
-  *,cl* | *,icl*)
-    # Native MSVC or ICC
-    libname_spec='$name'
-    soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-    library_names_spec='$libname.dll.lib'
-
-    case $build_os in
-    mingw* | windows*)
-      sys_lib_search_path_spec=
-      lt_save_ifs=$IFS
-      IFS=';'
-      for lt_path in $LIB
-      do
-        IFS=$lt_save_ifs
-        # Let DOS variable expansion print the short 8.3 style file name.
-        lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"`
-        sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path"
-      done
-      IFS=$lt_save_ifs
-      # Convert to MSYS style.
-      sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's|\\\\|/|g' -e 's| \\([a-zA-Z]\\):| /\\1|g' -e 's|^ ||'`
-      ;;
-    cygwin*)
-      # Convert to unix form, then to dos form, then back to unix form
-      # but this time dos style (no spaces!) so that the unix form looks
-      # like /cygdrive/c/PROGRA~1:/cygdr...
-      sys_lib_search_path_spec=`cygpath --path --unix "$LIB"`
-      sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null`
-      sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      ;;
-    *)
-      sys_lib_search_path_spec=$LIB
-      if $ECHO "$sys_lib_search_path_spec" | $GREP ';[c-zC-Z]:/' >/dev/null; then
-        # It is most probably a Windows format PATH.
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'`
-      else
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      fi
-      # FIXME: find the short name or the path components, as spaces are
-      # common. (e.g. "Program Files" -> "PROGRA~1")
-      ;;
-    esac
-
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    postinstall_cmds='base_file=`basename \$file`~
-      dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-      dldir=$destdir/`dirname \$dlpath`~
-      test -d \$dldir || mkdir -p \$dldir~
-      $install_prog $dir/$dlname \$dldir/$dlname'
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-    dynamic_linker='Win32 link.exe'
-    ;;
-
-  *)
-    # Assume MSVC and ICC wrapper
-    library_names_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext $libname.lib'
-    dynamic_linker='Win32 ld.exe'
-    ;;
-  esac
-  # FIXME: first we should search . and the directory the executable is in
-  shlibpath_var=PATH
-  ;;
-
-darwin* | rhapsody*)
-  dynamic_linker="$host_os dyld"
-  version_type=darwin
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$major$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$major$shared_ext'
-  shlibpath_overrides_runpath=yes
-  shlibpath_var=DYLD_LIBRARY_PATH
-  shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`'
-
-  sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib"
-  sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib'
-  ;;
-
-dgux*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  # DragonFly does not have aout.  When/if they implement a new
-  # versioning mechanism, adjust this.
-  if test -x /usr/bin/objformat; then
-    objformat=`/usr/bin/objformat`
-  else
-    case $host_os in
-    freebsd[23].*) objformat=aout ;;
-    *) objformat=elf ;;
-    esac
-  fi
-  version_type=freebsd-$objformat
-  case $version_type in
-    freebsd-elf*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      soname_spec='$libname$release$shared_ext$major'
-      need_version=no
-      need_lib_prefix=no
-      ;;
-    freebsd-*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-      need_version=yes
-      ;;
-  esac
-  case $host_cpu in
-    powerpc64)
-      # On FreeBSD bi-arch platforms, a different variable is used for 32-bit
-      # binaries.  See <https://man.freebsd.org/cgi/man.cgi?query=ld.so>.
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int test_pointer_size[sizeof (void *) - 5];
-           
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  shlibpath_var=LD_LIBRARY_PATH
-else case e in @%:@(
-  e) shlibpath_var=LD_32_LIBRARY_PATH ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-      ;;
-    *)
-      shlibpath_var=LD_LIBRARY_PATH
-      ;;
-  esac
-  case $host_os in
-  freebsd2.*)
-    shlibpath_overrides_runpath=yes
-    ;;
-  freebsd3.[01]* | freebsdelf3.[01]*)
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  freebsd3.[2-9]* | freebsdelf3.[2-9]* | \
-  freebsd4.[0-5] | freebsdelf4.[0-5] | freebsd4.1.1 | freebsdelf4.1.1)
-    shlibpath_overrides_runpath=no
-    hardcode_into_libs=yes
-    ;;
-  *) # from 4.6 on, and DragonFly
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  esac
-  ;;
-
-haiku*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  dynamic_linker="$host_os runtime_loader"
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec='/boot/system/non-packaged/develop/lib /boot/system/develop/lib'
-  sys_lib_dlsearch_path_spec='/boot/home/config/non-packaged/lib /boot/home/config/lib /boot/system/non-packaged/lib /boot/system/lib'
-  hardcode_into_libs=no
-  ;;
-
-hpux9* | hpux10* | hpux11*)
-  # Give a soname corresponding to the major version so that dld.sl refuses to
-  # link against other versions.
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  case $host_cpu in
-  ia64*)
-    shrext_cmds='.so'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.so"
-    shlibpath_var=LD_LIBRARY_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    if test 32 = "$HPUX_IA64_MODE"; then
-      sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux32
-    else
-      sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux64
-    fi
-    ;;
-  hppa*64*)
-    shrext_cmds='.sl'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64"
-    sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-    ;;
-  *)
-    shrext_cmds='.sl'
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=SHLIB_PATH
-    shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    ;;
-  esac
-  # HP-UX runs *really* slowly unless shared libraries are mode 555, ...
-  postinstall_cmds='chmod 555 $lib'
-  # or fails outright, so override atomically:
-  install_override_mode=555
-  ;;
-
-interix[3-9]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $host_os in
-    nonstopux*) version_type=nonstopux ;;
-    *)
-	if test yes = "$lt_cv_prog_gnu_ld"; then
-		version_type=linux # correct to gnu/linux during the next big refactor
-	else
-		version_type=irix
-	fi ;;
-  esac
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext'
-  case $host_os in
-  irix5* | nonstopux*)
-    libsuff= shlibsuff=
-    ;;
-  *)
-    case $LD in # libtool.m4 will add one of these switches to LD
-    *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ")
-      libsuff= shlibsuff= libmagic=32-bit;;
-    *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ")
-      libsuff=32 shlibsuff=N32 libmagic=N32;;
-    *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ")
-      libsuff=64 shlibsuff=64 libmagic=64-bit;;
-    *) libsuff= shlibsuff= libmagic=never-match;;
-    esac
-    ;;
-  esac
-  shlibpath_var=LD_LIBRARY${shlibsuff}_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff"
-  sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff"
-  hardcode_into_libs=yes
-  ;;
-
-# No shared lib support for Linux oldld, aout, or coff.
-linux*oldld* | linux*aout* | linux*coff*)
-  dynamic_linker=no
-  ;;
-
-linux*android*)
-  version_type=none # Android doesn't support versioned libraries.
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  dynamic_linker='Android linker'
-  # -rpath works at least for libraries that are not overridden by
-  # libraries installed in system locations.
-  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-
-  # Some binutils ld are patched to set DT_RUNPATH
-  if test ${lt_cv_shlibpath_overrides_runpath+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_shlibpath_overrides_runpath=no
-    save_LDFLAGS=$LDFLAGS
-    save_libdir=$libdir
-    eval "libdir=/foo; wl=\"$lt_prog_compiler_wl\"; \
-	 LDFLAGS=\"\$LDFLAGS $hardcode_libdir_flag_spec\""
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  if  ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null
-then :
-  lt_cv_shlibpath_overrides_runpath=yes
-fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-    LDFLAGS=$save_LDFLAGS
-    libdir=$save_libdir
-     ;;
-esac
-fi
-
-  shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  # Ideally, we could use ldconfig to report *all* directories which are
-  # searched for libraries, however this is still not possible.  Aside from not
-  # being certain /sbin/ldconfig is available, command
-  # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64,
-  # even though it is searched at run-time.  Try to do the best guess by
-  # appending ld.so.conf contents (and includes) to the search path.
-  if test -f /etc/ld.so.conf; then
-    lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \$2)); skip = 1; } { if (!skip) print \$0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[	 ]*hwcap[	 ]/d;s/[:,	]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '`
-    sys_lib_dlsearch_path_spec="/lib /usr/lib $lt_ld_extra"
-  fi
-
-  # We used to test for /lib/ld.so.1 and disable shared libraries on
-  # powerpc, because MkLinux only supported shared libraries with the
-  # GNU dynamic linker.  Since this was broken with cross compilers,
-  # most powerpc-linux boxes support dynamic linking these days and
-  # people can always --disable-shared, the test was removed, and we
-  # assume the GNU/Linux dynamic linker is in use.
-  dynamic_linker='GNU/Linux ld.so'
-  ;;
-
-netbsdelf*-gnu)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='NetBSD ld.elf_so'
-  ;;
-
-netbsd*)
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-    finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-    dynamic_linker='NetBSD (a.out) ld.so'
-  else
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    dynamic_linker='NetBSD ld.elf_so'
-  fi
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  ;;
-
-*-mlibc)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='mlibc ld.so'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-newsos6)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-*nto* | *qnx*)
-  version_type=qnx
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='ldqnx.so'
-  ;;
-
-openbsd*)
-  version_type=sunos
-  sys_lib_dlsearch_path_spec=/usr/lib
-  need_lib_prefix=no
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    need_version=no
-  else
-    need_version=yes
-  fi
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-os2*)
-  libname_spec='$name'
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-  # OS/2 can only load a DLL with a base name of 8 characters or less.
-  soname_spec='`test -n "$os2dllname" && libname="$os2dllname";
-    v=$($ECHO $release$versuffix | tr -d .-);
-    n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _);
-    $ECHO $n$v`$shared_ext'
-  library_names_spec='${libname}_dll.$libext'
-  dynamic_linker='OS/2 ld.exe'
-  shlibpath_var=BEGINLIBPATH
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  postinstall_cmds='base_file=`basename \$file`~
-    dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~
-    dldir=$destdir/`dirname \$dlpath`~
-    test -d \$dldir || mkdir -p \$dldir~
-    $install_prog $dir/$dlname \$dldir/$dlname~
-    chmod a+x \$dldir/$dlname~
-    if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-      eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-    fi'
-  postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~
-    dlpath=$dir/\$dldll~
-    $RM \$dlpath'
-  ;;
-
-osf3* | osf4* | osf5*)
-  version_type=osf
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  ;;
-
-rdos*)
-  dynamic_linker=no
-  ;;
-
-serenity*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  dynamic_linker='SerenityOS LibELF'
-  ;;
-
-solaris*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  # ldd complains unless libraries are executable
-  postinstall_cmds='chmod +x $lib'
-  ;;
-
-sunos4*)
-  version_type=sunos
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  if test yes = "$with_gnu_ld"; then
-    need_lib_prefix=no
-  fi
-  need_version=yes
-  ;;
-
-sysv4 | sysv4.3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  case $host_vendor in
-    sni)
-      shlibpath_overrides_runpath=no
-      need_lib_prefix=no
-      runpath_var=LD_RUN_PATH
-      ;;
-    siemens)
-      need_lib_prefix=no
-      ;;
-    motorola)
-      need_lib_prefix=no
-      need_version=no
-      shlibpath_overrides_runpath=no
-      sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib'
-      ;;
-  esac
-  ;;
-
-sysv4*MP*)
-  if test -d /usr/nec; then
-    version_type=linux # correct to gnu/linux during the next big refactor
-    library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext'
-    soname_spec='$libname$shared_ext.$major'
-    shlibpath_var=LD_LIBRARY_PATH
-  fi
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  version_type=sco
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  if test yes = "$with_gnu_ld"; then
-    sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib'
-  else
-    sys_lib_search_path_spec='/usr/ccs/lib /usr/lib'
-    case $host_os in
-      sco3.2v5*)
-        sys_lib_search_path_spec="$sys_lib_search_path_spec /lib"
-	;;
-    esac
-  fi
-  sys_lib_dlsearch_path_spec='/usr/lib'
-  ;;
-
-tpf*)
-  # TPF is a cross-target only.  Preferred cross-host = GNU/Linux.
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-uts4*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-emscripten*)
-  version_type=none
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  dynamic_linker="Emscripten linker"
-  lt_prog_compiler_wl=
-lt_prog_compiler_pic=
-lt_prog_compiler_static=
-
-
-  if test yes = "$GCC"; then
-    lt_prog_compiler_wl='-Wl,'
-    lt_prog_compiler_static='-static'
-
-    case $host_os in
-      aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            lt_prog_compiler_pic='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            lt_prog_compiler_pic='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      ;;
-
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      lt_prog_compiler_static=
-      ;;
-
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='-fPIC'
-	;;
-      esac
-      ;;
-
-    interix[3-9]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-
-    msdosdjgpp*)
-      # Just because we use GCC doesn't mean we suddenly get shared libraries
-      # on systems that don't support them.
-      lt_prog_compiler_can_build_shared=no
-      enable_shared=no
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic=-Kconform_pic
-      fi
-      ;;
-
-    *)
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-    esac
-
-    case $cc_basename in
-    nvcc*) # Cuda Compiler Driver 2.2
-      lt_prog_compiler_wl='-Xlinker '
-      if test -n "$lt_prog_compiler_pic"; then
-        lt_prog_compiler_pic="-Xcompiler $lt_prog_compiler_pic"
-      fi
-      ;;
-    esac
-  else
-    # PORTME Check for flag to pass linker flags through the system compiler.
-    case $host_os in
-    aix*)
-      lt_prog_compiler_wl='-Wl,'
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      else
-	lt_prog_compiler_static='-bnso -bI:/lib/syscalls.exp'
-      fi
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      case $cc_basename in
-      nagfor*)
-        # NAG Fortran compiler
-        lt_prog_compiler_wl='-Wl,-Wl,,'
-        lt_prog_compiler_pic='-PIC'
-        lt_prog_compiler_static='-Bstatic'
-        ;;
-      esac
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    hpux9* | hpux10* | hpux11*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
-      # not for PA HP-UX.
-      case $host_cpu in
-      hppa*64*|ia64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='+Z'
-	;;
-      esac
-      # Is there a better lt_prog_compiler_static that works with the bundled CC?
-      lt_prog_compiler_static='$wl-a ${wl}archive'
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC (with -KPIC) is the default.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-      case $cc_basename in
-      # old Intel for x86_64, which still supported -KPIC.
-      ecc*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-KPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      *flang* | ftn | f18* | f95*)
-        # Flang compiler.
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # icc used to be incompatible with GCC.
-      # ICC 10 doesn't accept -KPIC any more.
-      icc* | ifort*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # Lahey Fortran 8.1.
-      lf95*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='--shared'
-	lt_prog_compiler_static='--static'
-	;;
-      nagfor*)
-	# NAG Fortran compiler
-	lt_prog_compiler_wl='-Wl,-Wl,,'
-	lt_prog_compiler_pic='-PIC'
-	lt_prog_compiler_static='-Bstatic'
-	;;
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-	;;
-      pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
-        # Portland Group compilers (*not* the Pentium gcc compiler,
-	# which looks to be a dead project)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fpic'
-	lt_prog_compiler_static='-Bstatic'
-        ;;
-      ccc*)
-        lt_prog_compiler_wl='-Wl,'
-        # All Alpha code is PIC.
-        lt_prog_compiler_static='-non_shared'
-        ;;
-      xl* | bgxl* | bgf* | mpixl*)
-	# IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-qpic'
-	lt_prog_compiler_static='-qstaticlink'
-	;;
-      *)
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [1-7].* | *Sun*Fortran*\ 8.[0-3]*)
-	  # Sun Fortran 8.3 passes all unrecognized flags to the linker
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl=''
-	  ;;
-	*Sun\ F* | *Sun*Fortran*)
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Qoption ld '
-	  ;;
-	*Sun\ C*)
-	  # Sun C 5.9
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Wl,'
-	  ;;
-        *Intel*\ [CF]*Compiler*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fPIC'
-	  lt_prog_compiler_static='-static'
-	  ;;
-	*Portland\ Group*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fpic'
-	  lt_prog_compiler_static='-Bstatic'
-	  ;;
-	esac
-	;;
-      esac
-      ;;
-
-    newsos6)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *-mlibc)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-fPIC'
-      lt_prog_compiler_static='-static'
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    osf3* | osf4* | osf5*)
-      lt_prog_compiler_wl='-Wl,'
-      # All OSF/1 code is PIC.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    rdos*)
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      case $cc_basename in
-      f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
-	lt_prog_compiler_wl='-Qoption ld ';;
-      *)
-	lt_prog_compiler_wl='-Wl,';;
-      esac
-      ;;
-
-    sunos4*)
-      lt_prog_compiler_wl='-Qoption ld '
-      lt_prog_compiler_pic='-PIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4 | sysv4.2uw2* | sysv4.3*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic='-Kconform_pic'
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      ;;
-
-    sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    unicos*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_can_build_shared=no
-      ;;
-
-    uts4*)
-      lt_prog_compiler_pic='-pic'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *)
-      lt_prog_compiler_can_build_shared=no
-      ;;
-    esac
-  fi
-
-case $host_os in
-  # For platforms that do not support PIC, -DPIC is meaningless:
-  *djgpp*)
-    lt_prog_compiler_pic=
-    ;;
-  *)
-    lt_prog_compiler_pic="$lt_prog_compiler_pic@&t@ -DPIC"
-    ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $compiler option to produce PIC" >&5
-printf %s "checking for $compiler option to produce PIC... " >&6; }
-if test ${lt_cv_prog_compiler_pic+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic=$lt_prog_compiler_pic ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic" >&6; }
-lt_prog_compiler_pic=$lt_cv_prog_compiler_pic
-
-#
-# Check to make sure the PIC flag actually works.
-#
-if test -n "$lt_prog_compiler_pic"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler PIC flag $lt_prog_compiler_pic works" >&5
-printf %s "checking if $compiler PIC flag $lt_prog_compiler_pic works... " >&6; }
-if test ${lt_cv_prog_compiler_pic_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic_works=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$lt_prog_compiler_pic@&t@ -DPIC"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_pic_works=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_pic_works"; then
-    case $lt_prog_compiler_pic in
-     "" | " "*) ;;
-     *) lt_prog_compiler_pic=" $lt_prog_compiler_pic" ;;
-     esac
-else
-    lt_prog_compiler_pic=
-     lt_prog_compiler_can_build_shared=no
-fi
-
-fi
-
-
-
-
-
-#
-# Check to make sure the static flag actually works.
-#
-wl=$lt_prog_compiler_wl eval lt_tmp_static_flag=\"$lt_prog_compiler_static\"
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler static flag $lt_tmp_static_flag works" >&5
-printf %s "checking if $compiler static flag $lt_tmp_static_flag works... " >&6; }
-if test ${lt_cv_prog_compiler_static_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_static_works=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $lt_tmp_static_flag"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler_static_works=yes
-       fi
-     else
-       lt_cv_prog_compiler_static_works=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_static_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_static_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_static_works"; then
-    :
-else
-    lt_prog_compiler_static=
-fi
-
-
-
-='-fPIC'
-  archive_cmds='$CC -sSIDE_MODULE=2 -shared $libobjs $deplibs $compiler_flags -o $lib'
-  archive_expsym_cmds='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -sSIDE_MODULE=2 -shared $libobjs $deplibs $compiler_flags -o $lib -s EXPORTED_FUNCTIONS=@$output_objdir/$soname.expsym'
-  archive_cmds_need_lc=no
-  no_undefined_flag=
-  ;;
-
-*)
-  dynamic_linker=no
-  ;;
-esac
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $dynamic_linker" >&5
-printf '%s\n' "$dynamic_linker" >&6; }
-test no = "$dynamic_linker" && can_build_shared=no
-
-variables_saved_for_relink="PATH $shlibpath_var $runpath_var"
-if test yes = "$GCC"; then
-  variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH"
-fi
-
-if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then
-  sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec
-fi
-
-if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then
-  sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec
-fi
-
-# remember unaugmented sys_lib_dlsearch_path content for libtool script decls...
-configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec
-
-# ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code
-func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH"
-
-# to be used as default LT_SYS_LIBRARY_PATH value in generated libtool
-configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to hardcode library paths into programs" >&5
-printf %s "checking how to hardcode library paths into programs... " >&6; }
-hardcode_action=
-if test -n "$hardcode_libdir_flag_spec" ||
-   test -n "$runpath_var" ||
-   test yes = "$hardcode_automatic"; then
-
-  # We can hardcode non-existent directories.
-  if test no != "$hardcode_direct" &&
-     # If the only mechanism to avoid hardcoding is shlibpath_var, we
-     # have to relink, otherwise we might link with an installed library
-     # when we should be linking with a yet-to-be-installed one
-     ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, )" &&
-     test no != "$hardcode_minus_L"; then
-    # Linking always hardcodes the temporary library directory.
-    hardcode_action=relink
-  else
-    # We can link without hardcoding, and we can hardcode nonexisting dirs.
-    hardcode_action=immediate
-  fi
-else
-  # We cannot hardcode anything, or else we can only hardcode existing
-  # directories.
-  hardcode_action=unsupported
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $hardcode_action" >&5
-printf '%s\n' "$hardcode_action" >&6; }
-
-if test relink = "$hardcode_action" ||
-   test yes = "$inherit_rpath"; then
-  # Fast installation is not supported
-  enable_fast_install=no
-elif test yes = "$shlibpath_overrides_runpath" ||
-     test no = "$enable_shared"; then
-  # Fast installation is not necessary
-  enable_fast_install=needless
-fi
-
-    
-    
-    
-
-
-  if test yes != "$enable_dlopen"; then
-  enable_dlopen=unknown
-  enable_dlopen_self=unknown
-  enable_dlopen_self_static=unknown
-else
-  lt_cv_dlopen=no
-  lt_cv_dlopen_libs=
-
-  case $host_os in
-  beos*)
-    lt_cv_dlopen=load_add_on
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ;;
-
-  mingw* | windows* | pw32* | cegcc*)
-    lt_cv_dlopen=LoadLibrary
-    lt_cv_dlopen_libs=
-    ;;
-
-  cygwin*)
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    ;;
-
-  darwin*)
-    # if libdl is installed we need to link against it
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
-printf %s "checking for dlopen in -ldl... " >&6; }
-if test ${ac_cv_lib_dl_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dl_dlopen=yes
-else case e in @%:@(
-  e) ac_cv_lib_dl_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_dl_dlopen" >&6; }
-if test "x$ac_cv_lib_dl_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl
-else case e in @%:@(
-  e) 
-    lt_cv_dlopen=dyld
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-     ;;
-esac
-fi
-
-    ;;
-
-  tpf*)
-    # Don't try to run any link tests for TPF.  We know it's impossible
-    # because TPF is a cross-compiler, and we know how we open DSOs.
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=no
-    ;;
-
-  *)
-    ac_fn_c_check_func "$LINENO" "shl_load" "ac_cv_func_shl_load"
-if test "x$ac_cv_func_shl_load" = xyes
-then :
-  lt_cv_dlopen=shl_load
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for shl_load in -ldld" >&5
-printf %s "checking for shl_load in -ldld... " >&6; }
-if test ${ac_cv_lib_dld_shl_load+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char shl_load (void);
-int
-main (void)
-{
-return shl_load ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dld_shl_load=yes
-else case e in @%:@(
-  e) ac_cv_lib_dld_shl_load=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_shl_load" >&5
-printf '%s\n' "$ac_cv_lib_dld_shl_load" >&6; }
-if test "x$ac_cv_lib_dld_shl_load" = xyes
-then :
-  lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld
-else case e in @%:@(
-  e) ac_fn_c_check_func "$LINENO" "dlopen" "ac_cv_func_dlopen"
-if test "x$ac_cv_func_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
-printf %s "checking for dlopen in -ldl... " >&6; }
-if test ${ac_cv_lib_dl_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dl_dlopen=yes
-else case e in @%:@(
-  e) ac_cv_lib_dl_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_dl_dlopen" >&6; }
-if test "x$ac_cv_lib_dl_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -lsvld" >&5
-printf %s "checking for dlopen in -lsvld... " >&6; }
-if test ${ac_cv_lib_svld_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-lsvld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_svld_dlopen=yes
-else case e in @%:@(
-  e) ac_cv_lib_svld_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_svld_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_svld_dlopen" >&6; }
-if test "x$ac_cv_lib_svld_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dld_link in -ldld" >&5
-printf %s "checking for dld_link in -ldld... " >&6; }
-if test ${ac_cv_lib_dld_dld_link+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dld_link (void);
-int
-main (void)
-{
-return dld_link ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dld_dld_link=yes
-else case e in @%:@(
-  e) ac_cv_lib_dld_dld_link=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_dld_link" >&5
-printf '%s\n' "$ac_cv_lib_dld_dld_link" >&6; }
-if test "x$ac_cv_lib_dld_dld_link" = xyes
-then :
-  lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld
-fi
-
-	       ;;
-esac
-fi
-
-	     ;;
-esac
-fi
-
-	   ;;
-esac
-fi
-
-	 ;;
-esac
-fi
-
-       ;;
-esac
-fi
-
-    ;;
-  esac
-
-  if test no = "$lt_cv_dlopen"; then
-    enable_dlopen=no
-  else
-    enable_dlopen=yes
-  fi
-
-  case $lt_cv_dlopen in
-  dlopen)
-    save_CPPFLAGS=$CPPFLAGS
-    test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H"
-
-    save_LDFLAGS=$LDFLAGS
-    wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\"
-
-    save_LIBS=$LIBS
-    LIBS="$lt_cv_dlopen_libs $LIBS"
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether a program can dlopen itself" >&5
-printf %s "checking whether a program can dlopen itself... " >&6; }
-if test ${lt_cv_dlopen_self+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 	  if test yes = "$cross_compiling"; then :
-  lt_cv_dlopen_self=cross
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord (void) __attribute__((visibility("default")));
-#endif
-
-int fnord (void) { return 42; }
-int main (void)
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}
-_LT_EOF
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&5 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) lt_cv_dlopen_self=yes ;;
-      x$lt_dlneed_uscore) lt_cv_dlopen_self=yes ;;
-      x$lt_dlunknown|x*) lt_cv_dlopen_self=no ;;
-    esac
-  else :
-    # compilation failed
-    lt_cv_dlopen_self=no
-  fi
-fi
-rm -fr conftest*
-
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self" >&5
-printf '%s\n' "$lt_cv_dlopen_self" >&6; }
-
-    if test yes = "$lt_cv_dlopen_self"; then
-      wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether a statically linked program can dlopen itself" >&5
-printf %s "checking whether a statically linked program can dlopen itself... " >&6; }
-if test ${lt_cv_dlopen_self_static+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 	  if test yes = "$cross_compiling"; then :
-  lt_cv_dlopen_self_static=cross
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord (void) __attribute__((visibility("default")));
-#endif
-
-int fnord (void) { return 42; }
-int main (void)
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}
-_LT_EOF
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&5 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) lt_cv_dlopen_self_static=yes ;;
-      x$lt_dlneed_uscore) lt_cv_dlopen_self_static=yes ;;
-      x$lt_dlunknown|x*) lt_cv_dlopen_self_static=no ;;
-    esac
-  else :
-    # compilation failed
-    lt_cv_dlopen_self_static=no
-  fi
-fi
-rm -fr conftest*
-
-       ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self_static" >&5
-printf '%s\n' "$lt_cv_dlopen_self_static" >&6; }
-    fi
-
-    CPPFLAGS=$save_CPPFLAGS
-    LDFLAGS=$save_LDFLAGS
-    LIBS=$save_LIBS
-    ;;
-  esac
-
-  case $lt_cv_dlopen_self in
-  yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;;
-  *) enable_dlopen_self=unknown ;;
-  esac
-
-  case $lt_cv_dlopen_self_static in
-  yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;;
-  *) enable_dlopen_self_static=unknown ;;
-  esac
-fi
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-  
-striplib=
-old_striplib=
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether stripping libraries is possible" >&5
-printf %s "checking whether stripping libraries is possible... " >&6; }
-if test -z "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-else
-  if $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then
-    old_striplib="$STRIP --strip-debug"
-    striplib="$STRIP --strip-unneeded"
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-  else
-    case $host_os in
-    darwin*)
-      # FIXME - insert some real tests, host_os isn't really good enough
-      striplib="$STRIP -x"
-      old_striplib="$STRIP -S"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      ;;
-    freebsd*)
-      if $STRIP -V 2>&1 | $GREP "elftoolchain" >/dev/null; then
-        old_striplib="$STRIP --strip-debug"
-        striplib="$STRIP --strip-unneeded"
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-      fi
-      ;;
-    *)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-      ;;
-    esac
-  fi
-fi
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-  # Report what library types will actually be built
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if libtool supports shared libraries" >&5
-printf %s "checking if libtool supports shared libraries... " >&6; }
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $can_build_shared" >&5
-printf '%s\n' "$can_build_shared" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build shared libraries" >&5
-printf %s "checking whether to build shared libraries... " >&6; }
-  test no = "$can_build_shared" && enable_shared=no
-
-  # On AIX, shared libraries and static libraries use the same namespace, and
-  # are all built from PIC.
-  case $host_os in
-  aix3*)
-    test yes = "$enable_shared" && enable_static=no
-    if test -n "$RANLIB"; then
-      archive_cmds="$archive_cmds~\$RANLIB \$lib"
-      postinstall_cmds='$RANLIB $lib'
-    fi
-    ;;
-
-  aix[4-9]*)
-    if test ia64 != "$host_cpu"; then
-      case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
-      yes,aix,yes) ;;			# shared object as lib.so file only
-      yes,svr4,*) ;;			# shared object as lib.so archive member only
-      yes,*) enable_static=no ;;	# shared object in lib.a archive as well
-      esac
-    fi
-    ;;
-  esac
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $enable_shared" >&5
-printf '%s\n' "$enable_shared" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build static libraries" >&5
-printf %s "checking whether to build static libraries... " >&6; }
-  # Make sure either enable_shared or enable_static is yes.
-  test yes = "$enable_shared" || enable_static=yes
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $enable_static" >&5
-printf '%s\n' "$enable_static" >&6; }
-
-  
-
-
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-CC=$lt_save_CC
-
-
-
-
-
-
-
-
-       
-       
-
-
-
-
-
-        ac_config_commands="$ac_config_commands libtool"
-
-
-
-
-# Only expand once:
-
-
-
-# Require xorg-macros minimum of 1.12 for DocBook external references
-
-
-
-
-
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC options to detect undeclared functions" >&5
-printf %s "checking for $CC options to detect undeclared functions... " >&6; }
-if test ${ac_cv_c_undeclared_builtin_options+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_save_CFLAGS=$CFLAGS
-   ac_cv_c_undeclared_builtin_options='cannot detect'
-   for ac_arg in '' -fno-builtin; do
-     CFLAGS="$ac_save_CFLAGS $ac_arg"
-     # This test program should *not* compile successfully.
-     cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-(void) strchr;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  
-else case e in @%:@(
-  e) # This test program should compile successfully.
-        # No library function is consistently available on
-        # freestanding implementations, so test against a dummy
-        # declaration.  Include always-available headers on the
-        # off chance that they somehow elicit warnings.
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <float.h>
-#include <limits.h>
-#include <stdarg.h>
-#include <stddef.h>
-extern void ac_decl (int, char *);
-
-int
-main (void)
-{
-(void) ac_decl (0, (char *) 0);
-  (void) ac_decl;
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  if test x"$ac_arg" = x
-then :
-  ac_cv_c_undeclared_builtin_options='none needed'
-else case e in @%:@(
-  e) ac_cv_c_undeclared_builtin_options=$ac_arg ;;
-esac
-fi
-          break
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-    done
-    CFLAGS=$ac_save_CFLAGS
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_undeclared_builtin_options" >&5
-printf '%s\n' "$ac_cv_c_undeclared_builtin_options" >&6; }
-  case $ac_cv_c_undeclared_builtin_options in @%:@(
-  'cannot detect') :
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot make $CC report undeclared builtins
-See 'config.log' for more details" "$LINENO" 5; } ;; @%:@(
-  'none needed') :
-    ac_c_undeclared_builtin_options='' ;; @%:@(
-  *) :
-    ac_c_undeclared_builtin_options=$ac_cv_c_undeclared_builtin_options ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC options to ignore future-version functions" >&5
-printf %s "checking for $CC options to ignore future-version functions... " >&6; }
-if test ${ac_cv_c_future_darwin_options+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)       ac_compile_saved="$ac_compile"
-   ac_compile="$ac_compile -Werror=unguarded-availability-new"
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#if ! (defined __APPLE__ && defined __MACH__)
-	   #error "-Werror=unguarded-availability-new not needed here"
-	  #endif
-	
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_c_future_darwin_options='-Werror=unguarded-availability-new'
-else case e in @%:@(
-  e) ac_cv_c_future_darwin_options='none needed' ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ac_compile="$ac_compile_saved"
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_future_darwin_options" >&5
-printf '%s\n' "$ac_cv_c_future_darwin_options" >&6; }
- case $ac_cv_c_future_darwin_options in @%:@(
-  'none needed') :
-    ac_c_future_darwin_options='' ;; @%:@(
-  *) :
-    ac_c_future_darwin_options=$ac_cv_c_future_darwin_options ;;
-esac
-
-
-
-						
-	
-ac_fn_check_decl "$LINENO" "__clang__" "ac_cv_have_decl___clang__" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___clang__" = xyes
-then :
-  CLANGCC="yes"
-else case e in @%:@(
-  e) CLANGCC="no" ;;
-esac
-fi
-ac_fn_check_decl "$LINENO" "__INTEL_COMPILER" "ac_cv_have_decl___INTEL_COMPILER" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___INTEL_COMPILER" = xyes
-then :
-  INTELCC="yes"
-else case e in @%:@(
-  e) INTELCC="no" ;;
-esac
-fi
-ac_fn_check_decl "$LINENO" "__SUNPRO_C" "ac_cv_have_decl___SUNPRO_C" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___SUNPRO_C" = xyes
-then :
-  SUNCC="yes"
-else case e in @%:@(
-  e) SUNCC="no" ;;
-esac
-fi
-
-
-
-
-
-
-
-
-if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
-	if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args.
-set dummy ${ac_tool_prefix}pkg-config; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_PKG_CONFIG+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PKG_CONFIG="$PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-PKG_CONFIG=$ac_cv_path_PKG_CONFIG
-if test -n "$PKG_CONFIG"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $PKG_CONFIG" >&5
-printf '%s\n' "$PKG_CONFIG" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_path_PKG_CONFIG"; then
-  ac_pt_PKG_CONFIG=$PKG_CONFIG
-  # Extract the first word of "pkg-config", so it can be a program name with args.
-set dummy pkg-config; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_ac_pt_PKG_CONFIG+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $ac_pt_PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_ac_pt_PKG_CONFIG="$ac_pt_PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_ac_pt_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-ac_pt_PKG_CONFIG=$ac_cv_path_ac_pt_PKG_CONFIG
-if test -n "$ac_pt_PKG_CONFIG"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKG_CONFIG" >&5
-printf '%s\n' "$ac_pt_PKG_CONFIG" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_pt_PKG_CONFIG" = x; then
-    PKG_CONFIG=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    PKG_CONFIG=$ac_pt_PKG_CONFIG
-  fi
-else
-  PKG_CONFIG="$ac_cv_path_PKG_CONFIG"
-fi
-
-fi
-if test -n "$PKG_CONFIG"; then
-	_pkg_min_version=0.9.0
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking pkg-config is at least version $_pkg_min_version" >&5
-printf %s "checking pkg-config is at least version $_pkg_min_version... " >&6; }
-	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-	else
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-		PKG_CONFIG=""
-	fi
-fi
-
-
-
-
-
-@%:@ Check whether --enable-selective-werror was given.
-if test ${enable_selective_werror+y}
-then :
-  enableval=$enable_selective_werror; SELECTIVE_WERROR=$enableval
-else case e in @%:@(
-  e) SELECTIVE_WERROR=yes ;;
-esac
-fi
-
-
-
-                
-        
-# -v is too short to test reliably with XORG_TESTSET_CFLAG
-if test "x$SUNCC" = "xyes"; then
-    BASE_CFLAGS="-v"
-else
-    BASE_CFLAGS=""
-fi
-
-# This chunk of warnings were those that existed in the legacy CWARNFLAGS
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wall"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wall" >&5
-printf %s "checking if $CC supports -Wall... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wall
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wall"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wpointer-arith"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-arith" >&5
-printf %s "checking if $CC supports -Wpointer-arith... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wpointer_arith
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wpointer-arith"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-declarations"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-declarations" >&5
-printf %s "checking if $CC supports -Wmissing-declarations... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_declarations
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-declarations"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wformat=2"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat=2" >&5
-printf %s "checking if $CC supports -Wformat=2... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wformat_2
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wformat=2"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wformat"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat" >&5
-printf %s "checking if $CC supports -Wformat... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wformat
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wformat"
-			found="yes"
-		fi
-	fi
-
-
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wstrict-prototypes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wstrict-prototypes" >&5
-printf %s "checking if $CC supports -Wstrict-prototypes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wstrict_prototypes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wstrict-prototypes"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-prototypes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-prototypes" >&5
-printf %s "checking if $CC supports -Wmissing-prototypes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_prototypes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-prototypes"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wnested-externs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wnested-externs" >&5
-printf %s "checking if $CC supports -Wnested-externs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wnested_externs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wnested-externs"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wbad-function-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wbad-function-cast" >&5
-printf %s "checking if $CC supports -Wbad-function-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wbad_function_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wbad-function-cast"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wold-style-definition"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wold-style-definition" >&5
-printf %s "checking if $CC supports -Wold-style-definition... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wold_style_definition
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wold-style-definition"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -fd"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -fd" >&5
-printf %s "checking if $CC supports -fd... " >&6; }
-		cacheid=xorg_cv_cc_flag__fd
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -fd"
-			found="yes"
-		fi
-	fi
-
-
-	
-
-
-# This chunk adds additional warnings that could catch undesired effects.
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wunused"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wunused" >&5
-printf %s "checking if $CC supports -Wunused... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wunused
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wunused"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wuninitialized"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wuninitialized" >&5
-printf %s "checking if $CC supports -Wuninitialized... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wuninitialized
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wuninitialized"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wshadow"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wshadow" >&5
-printf %s "checking if $CC supports -Wshadow... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wshadow
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wshadow"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-noreturn"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-noreturn" >&5
-printf %s "checking if $CC supports -Wmissing-noreturn... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_noreturn
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-noreturn"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-format-attribute"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-format-attribute" >&5
-printf %s "checking if $CC supports -Wmissing-format-attribute... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_format_attribute
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-format-attribute"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wredundant-decls"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wredundant-decls" >&5
-printf %s "checking if $CC supports -Wredundant-decls... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wredundant_decls
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wredundant-decls"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wlogical-op"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wlogical-op" >&5
-printf %s "checking if $CC supports -Wlogical-op... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wlogical_op
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wlogical-op"
-			found="yes"
-		fi
-	fi
-
-
-
-# These are currently disabled because they are noisy.  They will be enabled
-# in the future once the codebase is sufficiently modernized to silence
-# them.  For now, I don't want them to drown out the other warnings.
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wparentheses])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-align])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-qual])
-
-# Turn some warnings into errors, so we don't accidentally get successful builds
-# when there are problems that should be fixed.
-
-if test "x$SELECTIVE_WERROR" = "xyes" ; then
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=implicit"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=implicit" >&5
-printf %s "checking if $CC supports -Werror=implicit... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_implicit
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=implicit"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED" >&5
-printf %s "checking if $CC supports -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_NO_EXPLICIT_TYPE_GIVEN__errwarn_E_NO_IMPLICIT_DECL_ALLOWED
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=nonnull"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=nonnull" >&5
-printf %s "checking if $CC supports -Werror=nonnull... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_nonnull
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=nonnull"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=init-self"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=init-self" >&5
-printf %s "checking if $CC supports -Werror=init-self... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_init_self
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=init-self"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=main"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=main" >&5
-printf %s "checking if $CC supports -Werror=main... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_main
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=main"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=missing-braces"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=missing-braces" >&5
-printf %s "checking if $CC supports -Werror=missing-braces... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_missing_braces
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=missing-braces"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=sequence-point"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=sequence-point" >&5
-printf %s "checking if $CC supports -Werror=sequence-point... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_sequence_point
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=sequence-point"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=return-type"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=return-type" >&5
-printf %s "checking if $CC supports -Werror=return-type... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_return_type
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=return-type"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_FUNC_HAS_NO_RETURN_STMT"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_FUNC_HAS_NO_RETURN_STMT" >&5
-printf %s "checking if $CC supports -errwarn=E_FUNC_HAS_NO_RETURN_STMT... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_FUNC_HAS_NO_RETURN_STMT
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_FUNC_HAS_NO_RETURN_STMT"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=trigraphs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=trigraphs" >&5
-printf %s "checking if $CC supports -Werror=trigraphs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_trigraphs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=trigraphs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=array-bounds"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=array-bounds" >&5
-printf %s "checking if $CC supports -Werror=array-bounds... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_array_bounds
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=array-bounds"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=write-strings"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=write-strings" >&5
-printf %s "checking if $CC supports -Werror=write-strings... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_write_strings
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=write-strings"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=address"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=address" >&5
-printf %s "checking if $CC supports -Werror=address... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_address
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=address"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=int-to-pointer-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=int-to-pointer-cast" >&5
-printf %s "checking if $CC supports -Werror=int-to-pointer-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_int_to_pointer_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=int-to-pointer-cast"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_BAD_PTR_INT_COMBINATION"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_BAD_PTR_INT_COMBINATION" >&5
-printf %s "checking if $CC supports -errwarn=E_BAD_PTR_INT_COMBINATION... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_BAD_PTR_INT_COMBINATION
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_BAD_PTR_INT_COMBINATION"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=pointer-to-int-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=pointer-to-int-cast" >&5
-printf %s "checking if $CC supports -Werror=pointer-to-int-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_pointer_to_int_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=pointer-to-int-cast"
-			found="yes"
-		fi
-	fi
-
- # Also -errwarn=E_BAD_PTR_INT_COMBINATION
-else
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT" >&5
-printf '%s\n' "$as_me: WARNING: You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT" >&2;}
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wimplicit"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wimplicit" >&5
-printf %s "checking if $CC supports -Wimplicit... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wimplicit
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wimplicit"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wnonnull"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wnonnull" >&5
-printf %s "checking if $CC supports -Wnonnull... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wnonnull
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wnonnull"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Winit-self"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Winit-self" >&5
-printf %s "checking if $CC supports -Winit-self... " >&6; }
-		cacheid=xorg_cv_cc_flag__Winit_self
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Winit-self"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmain"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmain" >&5
-printf %s "checking if $CC supports -Wmain... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmain
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmain"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-braces"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-braces" >&5
-printf %s "checking if $CC supports -Wmissing-braces... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_braces
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-braces"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wsequence-point"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wsequence-point" >&5
-printf %s "checking if $CC supports -Wsequence-point... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wsequence_point
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wsequence-point"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wreturn-type"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wreturn-type" >&5
-printf %s "checking if $CC supports -Wreturn-type... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wreturn_type
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wreturn-type"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wtrigraphs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wtrigraphs" >&5
-printf %s "checking if $CC supports -Wtrigraphs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wtrigraphs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wtrigraphs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Warray-bounds"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Warray-bounds" >&5
-printf %s "checking if $CC supports -Warray-bounds... " >&6; }
-		cacheid=xorg_cv_cc_flag__Warray_bounds
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Warray-bounds"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wwrite-strings"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wwrite-strings" >&5
-printf %s "checking if $CC supports -Wwrite-strings... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wwrite_strings
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wwrite-strings"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Waddress"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Waddress" >&5
-printf %s "checking if $CC supports -Waddress... " >&6; }
-		cacheid=xorg_cv_cc_flag__Waddress
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Waddress"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wint-to-pointer-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wint-to-pointer-cast" >&5
-printf %s "checking if $CC supports -Wint-to-pointer-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wint_to_pointer_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wint-to-pointer-cast"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wpointer-to-int-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-to-int-cast" >&5
-printf %s "checking if $CC supports -Wpointer-to-int-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wpointer_to_int_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wpointer-to-int-cast"
-			found="yes"
-		fi
-	fi
-
-
-fi
-
-
-
-
-
-
-
-		CWARNFLAGS="$BASE_CFLAGS"
-		if  test "x$GCC" = xyes ; then
-		    CWARNFLAGS="$CWARNFLAGS -fno-strict-aliasing"
-		fi
-		
-	
-
-
-
-
-
-
-@%:@ Check whether --enable-strict-compilation was given.
-if test ${enable_strict_compilation+y}
-then :
-  enableval=$enable_strict_compilation; STRICT_COMPILE=$enableval
-else case e in @%:@(
-  e) STRICT_COMPILE=no ;;
-esac
-fi
-
-
-
-                
-        
-
-STRICT_CFLAGS=""
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -pedantic"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -pedantic" >&5
-printf %s "checking if $CC supports -pedantic... " >&6; }
-		cacheid=xorg_cv_cc_flag__pedantic
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -pedantic"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror" >&5
-printf %s "checking if $CC supports -Werror... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -Werror"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn" >&5
-printf %s "checking if $CC supports -errwarn... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -errwarn"
-			found="yes"
-		fi
-	fi
-
-
-
-# Earlier versions of gcc (eg: 4.2) support -Werror=attributes, but do not
-# activate it with -Werror, so we add it here explicitly.
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=attributes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=attributes" >&5
-printf %s "checking if $CC supports -Werror=attributes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_attributes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -Werror=attributes"
-			found="yes"
-		fi
-	fi
-
-
-
-if test "x$STRICT_COMPILE" = "xyes"; then
-    BASE_CFLAGS="$BASE_CFLAGS $STRICT_CFLAGS"
-    CWARNFLAGS="$CWARNFLAGS $STRICT_CFLAGS"
-fi
-
-
-
-
-
-
-
-	
-cat >>confdefs.h <<_ACEOF
-@%:@define PACKAGE_VERSION_MAJOR `echo $PACKAGE_VERSION | cut -d . -f 1`
-_ACEOF
-
-	PVM=`echo $PACKAGE_VERSION | cut -d . -f 2 | cut -d - -f 1`
-	if test "x$PVM" = "x"; then
-		PVM="0"
-	fi
-	
-printf '%s\n' "@%:@define PACKAGE_VERSION_MINOR $PVM" >>confdefs.h
-
-	PVP=`echo $PACKAGE_VERSION | cut -d . -f 3 | cut -d - -f 1`
-	if test "x$PVP" = "x"; then
-		PVP="0"
-	fi
-	
-printf '%s\n' "@%:@define PACKAGE_VERSION_PATCHLEVEL $PVP" >>confdefs.h
-
-
-
-CHANGELOG_CMD="((GIT_DIR=\$(top_srcdir)/.git git log > \$(top_srcdir)/.changelog.tmp) 2>/dev/null && \
-mv \$(top_srcdir)/.changelog.tmp \$(top_srcdir)/ChangeLog) \
-|| (rm -f \$(top_srcdir)/.changelog.tmp; test -e \$(top_srcdir)/ChangeLog || ( \
-touch \$(top_srcdir)/ChangeLog; \
-echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))"
-
-
-
-
-macros_datadir=`$PKG_CONFIG --print-errors --variable=pkgdatadir xorg-macros`
-INSTALL_CMD="(cp -f "$macros_datadir/INSTALL" \$(top_srcdir)/.INSTALL.tmp && \
-mv \$(top_srcdir)/.INSTALL.tmp \$(top_srcdir)/INSTALL) \
-|| (rm -f \$(top_srcdir)/.INSTALL.tmp; test -e \$(top_srcdir)/INSTALL || ( \
-touch \$(top_srcdir)/INSTALL; \
-echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))"
-
-
-
-
-
-
-case $host_os in
-    solaris*)
-        # Solaris 2.0 - 11.3 use SysV man page section numbers, so we
-        # check for a man page file found in later versions that use
-        # traditional section numbers instead
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for /usr/share/man/man7/attributes.7" >&5
-printf %s "checking for /usr/share/man/man7/attributes.7... " >&6; }
-if test ${ac_cv_file__usr_share_man_man7_attributes_7+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) test "$cross_compiling" = yes &&
-  as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5
-if test -r "/usr/share/man/man7/attributes.7"; then
-  ac_cv_file__usr_share_man_man7_attributes_7=yes
-else
-  ac_cv_file__usr_share_man_man7_attributes_7=no
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_file__usr_share_man_man7_attributes_7" >&5
-printf '%s\n' "$ac_cv_file__usr_share_man_man7_attributes_7" >&6; }
-if test "x$ac_cv_file__usr_share_man_man7_attributes_7" = xyes
-then :
-  SYSV_MAN_SECTIONS=false
-else case e in @%:@(
-  e) SYSV_MAN_SECTIONS=true ;;
-esac
-fi
-
-        ;;
-    *) SYSV_MAN_SECTIONS=false ;;
-esac
-
-if test x$APP_MAN_SUFFIX = x    ; then
-    APP_MAN_SUFFIX=1
-fi
-if test x$APP_MAN_DIR = x    ; then
-    APP_MAN_DIR='$(mandir)/man$(APP_MAN_SUFFIX)'
-fi
-
-if test x$LIB_MAN_SUFFIX = x    ; then
-    LIB_MAN_SUFFIX=3
-fi
-if test x$LIB_MAN_DIR = x    ; then
-    LIB_MAN_DIR='$(mandir)/man$(LIB_MAN_SUFFIX)'
-fi
-
-if test x$FILE_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				FILE_MAN_SUFFIX=4  ;;
-	*)				FILE_MAN_SUFFIX=5  ;;
-    esac
-fi
-if test x$FILE_MAN_DIR = x    ; then
-    FILE_MAN_DIR='$(mandir)/man$(FILE_MAN_SUFFIX)'
-fi
-
-if test x$MISC_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				MISC_MAN_SUFFIX=5  ;;
-	*)				MISC_MAN_SUFFIX=7  ;;
-    esac
-fi
-if test x$MISC_MAN_DIR = x    ; then
-    MISC_MAN_DIR='$(mandir)/man$(MISC_MAN_SUFFIX)'
-fi
-
-if test x$DRIVER_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				DRIVER_MAN_SUFFIX=7  ;;
-	*)				DRIVER_MAN_SUFFIX=4  ;;
-    esac
-fi
-if test x$DRIVER_MAN_DIR = x    ; then
-    DRIVER_MAN_DIR='$(mandir)/man$(DRIVER_MAN_SUFFIX)'
-fi
-
-if test x$ADMIN_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				ADMIN_MAN_SUFFIX=1m ;;
-	*)				ADMIN_MAN_SUFFIX=8  ;;
-    esac
-fi
-if test x$ADMIN_MAN_DIR = x    ; then
-    ADMIN_MAN_DIR='$(mandir)/man$(ADMIN_MAN_SUFFIX)'
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-XORG_MAN_PAGE="X Version 11"
-
-MAN_SUBSTS="\
-	-e 's|__vendorversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xorgversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xservername__|Xorg|g' \
-	-e 's|__xconfigfile__|xorg.conf|g' \
-	-e 's|__projectroot__|\$(prefix)|g' \
-	-e 's|__apploaddir__|\$(appdefaultdir)|g' \
-	-e 's|__appmansuffix__|\$(APP_MAN_SUFFIX)|g' \
-	-e 's|__drivermansuffix__|\$(DRIVER_MAN_SUFFIX)|g' \
-	-e 's|__adminmansuffix__|\$(ADMIN_MAN_SUFFIX)|g' \
-	-e 's|__libmansuffix__|\$(LIB_MAN_SUFFIX)|g' \
-	-e 's|__miscmansuffix__|\$(MISC_MAN_SUFFIX)|g' \
-	-e 's|__filemansuffix__|\$(FILE_MAN_SUFFIX)|g'"
-
-
-
-
-AM_DEFAULT_VERBOSITY=0
-
-
-
-
-
-
-@%:@ Check whether --enable-specs was given.
-if test ${enable_specs+y}
-then :
-  enableval=$enable_specs; build_specs=$enableval
-else case e in @%:@(
-  e) build_specs=yes ;;
-esac
-fi
-
-
- if test x$build_specs = xyes; then
-  ENABLE_SPECS_TRUE=
-  ENABLE_SPECS_FALSE='#'
-else
-  ENABLE_SPECS_TRUE='#'
-  ENABLE_SPECS_FALSE=
-fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build functional specifications" >&5
-printf %s "checking whether to build functional specifications... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $build_specs" >&5
-printf '%s\n' "$build_specs" >&6; }
-
-
-
-
-
-@%:@ Check whether --with-xmlto was given.
-if test ${with_xmlto+y}
-then :
-  withval=$with_xmlto; use_xmlto=$withval
-else case e in @%:@(
-  e) use_xmlto=auto ;;
-esac
-fi
-
-
-
-if test "x$use_xmlto" = x"auto"; then
-   # Extract the first word of "xmlto", so it can be a program name with args.
-set dummy xmlto; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XMLTO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XMLTO in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XMLTO="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XMLTO=$ac_cv_path_XMLTO
-if test -n "$XMLTO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XMLTO" >&5
-printf '%s\n' "$XMLTO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XMLTO" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto not found - documentation targets will be skipped" >&5
-printf '%s\n' "$as_me: WARNING: xmlto not found - documentation targets will be skipped" >&2;}
-	have_xmlto=no
-   else
-        have_xmlto=yes
-   fi
-elif test "x$use_xmlto" = x"yes" ; then
-   # Extract the first word of "xmlto", so it can be a program name with args.
-set dummy xmlto; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XMLTO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XMLTO in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XMLTO="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XMLTO=$ac_cv_path_XMLTO
-if test -n "$XMLTO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XMLTO" >&5
-printf '%s\n' "$XMLTO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XMLTO" = "x"; then
-        as_fn_error $? "--with-xmlto=yes specified but xmlto not found in PATH" "$LINENO" 5
-   fi
-   have_xmlto=yes
-elif test "x$use_xmlto" = x"no" ; then
-   if test "x$XMLTO" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring XMLTO environment variable since --with-xmlto=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring XMLTO environment variable since --with-xmlto=no was specified" >&2;}
-   fi
-   have_xmlto=no
-else
-   as_fn_error $? "--with-xmlto expects 'yes' or 'no'" "$LINENO" 5
-fi
-
-# Test for a minimum version of xmlto, if provided.
-if test "$have_xmlto" = yes; then
-    # scrape the xmlto version
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the xmlto version" >&5
-printf %s "checking the xmlto version... " >&6; }
-    xmlto_version=`$XMLTO --version 2>/dev/null | cut -d' ' -f3`
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xmlto_version" >&5
-printf '%s\n' "$xmlto_version" >&6; }
-    as_arg_v1=$xmlto_version
-as_arg_v2=0.0.22
-awk "$as_awk_strverscmp" v1="$as_arg_v1" v2="$as_arg_v2" /dev/null
-case $? in @%:@(
-  1) :
-    if test "x$use_xmlto" = xauto; then
-            { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto version $xmlto_version found, but 0.0.22 needed" >&5
-printf '%s\n' "$as_me: WARNING: xmlto version $xmlto_version found, but 0.0.22 needed" >&2;}
-            have_xmlto=no
-        else
-            as_fn_error $? "xmlto version $xmlto_version found, but 0.0.22 needed" "$LINENO" 5
-        fi ;; @%:@(
-  0) :
-     ;; @%:@(
-  2) :
-     ;; @%:@(
-  *) :
-     ;;
-esac
-fi
-
-# Test for the ability of xmlto to generate a text target
-#
-# NOTE: xmlto 0.0.27 or higher return a non-zero return code in the
-# following test for empty XML docbook files.
-# For compatibility reasons use the following empty XML docbook file and if
-# it fails try it again with a non-empty XML file.
-have_xmlto_text=no
-cat > conftest.xml << "EOF"
-EOF
-if test "$have_xmlto" = yes
-then :
-  if $XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1
-then :
-  have_xmlto_text=yes
-else case e in @%:@(
-  e) # Try it again with a non-empty XML file.
-              cat > conftest.xml << "EOF"
-<x></x>
-EOF
-              if $XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1
-then :
-  have_xmlto_text=yes
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto cannot generate text format, this format skipped" >&5
-printf '%s\n' "$as_me: WARNING: xmlto cannot generate text format, this format skipped" >&2;} ;;
-esac
-fi ;;
-esac
-fi
-fi
-rm -f conftest.xml
- if test $have_xmlto_text = yes; then
-  HAVE_XMLTO_TEXT_TRUE=
-  HAVE_XMLTO_TEXT_FALSE='#'
-else
-  HAVE_XMLTO_TEXT_TRUE='#'
-  HAVE_XMLTO_TEXT_FALSE=
-fi
-
- if test "$have_xmlto" = yes; then
-  HAVE_XMLTO_TRUE=
-  HAVE_XMLTO_FALSE='#'
-else
-  HAVE_XMLTO_TRUE='#'
-  HAVE_XMLTO_FALSE=
-fi
-
-
-
-
-
-
-@%:@ Check whether --with-fop was given.
-if test ${with_fop+y}
-then :
-  withval=$with_fop; use_fop=$withval
-else case e in @%:@(
-  e) use_fop=auto ;;
-esac
-fi
-
-
-
-if test "x$use_fop" = x"auto"; then
-   # Extract the first word of "fop", so it can be a program name with args.
-set dummy fop; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_FOP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $FOP in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_FOP="$FOP" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_FOP="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-FOP=$ac_cv_path_FOP
-if test -n "$FOP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FOP" >&5
-printf '%s\n' "$FOP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$FOP" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: fop not found - documentation targets will be skipped" >&5
-printf '%s\n' "$as_me: WARNING: fop not found - documentation targets will be skipped" >&2;}
-	have_fop=no
-   else
-        have_fop=yes
-   fi
-elif test "x$use_fop" = x"yes" ; then
-   # Extract the first word of "fop", so it can be a program name with args.
-set dummy fop; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_FOP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $FOP in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_FOP="$FOP" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_FOP="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-FOP=$ac_cv_path_FOP
-if test -n "$FOP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FOP" >&5
-printf '%s\n' "$FOP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$FOP" = "x"; then
-        as_fn_error $? "--with-fop=yes specified but fop not found in PATH" "$LINENO" 5
-   fi
-   have_fop=yes
-elif test "x$use_fop" = x"no" ; then
-   if test "x$FOP" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring FOP environment variable since --with-fop=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring FOP environment variable since --with-fop=no was specified" >&2;}
-   fi
-   have_fop=no
-else
-   as_fn_error $? "--with-fop expects 'yes' or 'no'" "$LINENO" 5
-fi
-
-# Test for a minimum version of fop, if provided.
-
- if test "$have_fop" = yes; then
-  HAVE_FOP_TRUE=
-  HAVE_FOP_FALSE='#'
-else
-  HAVE_FOP_TRUE='#'
-  HAVE_FOP_FALSE=
-fi
-
-
-
-
-# Preserves the interface, should it be implemented later
-
-
-
-@%:@ Check whether --with-xsltproc was given.
-if test ${with_xsltproc+y}
-then :
-  withval=$with_xsltproc; use_xsltproc=$withval
-else case e in @%:@(
-  e) use_xsltproc=auto ;;
-esac
-fi
-
-
-
-if test "x$use_xsltproc" = x"auto"; then
-   # Extract the first word of "xsltproc", so it can be a program name with args.
-set dummy xsltproc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XSLTPROC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XSLTPROC in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XSLTPROC="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XSLTPROC=$ac_cv_path_XSLTPROC
-if test -n "$XSLTPROC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XSLTPROC" >&5
-printf '%s\n' "$XSLTPROC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XSLTPROC" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xsltproc not found - cannot transform XML documents" >&5
-printf '%s\n' "$as_me: WARNING: xsltproc not found - cannot transform XML documents" >&2;}
-	have_xsltproc=no
-   else
-        have_xsltproc=yes
-   fi
-elif test "x$use_xsltproc" = x"yes" ; then
-   # Extract the first word of "xsltproc", so it can be a program name with args.
-set dummy xsltproc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XSLTPROC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XSLTPROC in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XSLTPROC="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XSLTPROC=$ac_cv_path_XSLTPROC
-if test -n "$XSLTPROC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XSLTPROC" >&5
-printf '%s\n' "$XSLTPROC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XSLTPROC" = "x"; then
-        as_fn_error $? "--with-xsltproc=yes specified but xsltproc not found in PATH" "$LINENO" 5
-   fi
-   have_xsltproc=yes
-elif test "x$use_xsltproc" = x"no" ; then
-   if test "x$XSLTPROC" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring XSLTPROC environment variable since --with-xsltproc=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring XSLTPROC environment variable since --with-xsltproc=no was specified" >&2;}
-   fi
-   have_xsltproc=no
-else
-   as_fn_error $? "--with-xsltproc expects 'yes' or 'no'" "$LINENO" 5
-fi
-
- if test "$have_xsltproc" = yes; then
-  HAVE_XSLTPROC_TRUE=
-  HAVE_XSLTPROC_FALSE='#'
-else
-  HAVE_XSLTPROC_TRUE='#'
-  HAVE_XSLTPROC_FALSE=
-fi
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for X.Org SGML entities >= 1.8" >&5
-printf %s "checking for X.Org SGML entities >= 1.8... " >&6; }
-XORG_SGML_PATH=
-if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xorg-sgml-doctools >= 1.8\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xorg-sgml-doctools >= 1.8") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  XORG_SGML_PATH=`$PKG_CONFIG --variable=sgmlrootdir xorg-sgml-doctools`
-else
-  :
-    
-fi
-
-# Define variables STYLESHEET_SRCDIR and XSL_STYLESHEET containing
-# the path and the name of the doc stylesheet
-if test "x$XORG_SGML_PATH" != "x" ; then
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XORG_SGML_PATH" >&5
-printf '%s\n' "$XORG_SGML_PATH" >&6; }
-   STYLESHEET_SRCDIR=$XORG_SGML_PATH/X11
-   XSL_STYLESHEET=$STYLESHEET_SRCDIR/xorg.xsl
-else
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-
-
- if test "x$XSL_STYLESHEET" != "x"; then
-  HAVE_STYLESHEETS_TRUE=
-  HAVE_STYLESHEETS_FALSE='#'
-else
-  HAVE_STYLESHEETS_TRUE='#'
-  HAVE_STYLESHEETS_FALSE=
-fi
-
-
-
-@%:@ Check whether --enable-malloc0returnsnull was given.
-if test ${enable_malloc0returnsnull+y}
-then :
-  enableval=$enable_malloc0returnsnull; MALLOC_ZERO_RETURNS_NULL=$enableval
-else case e in @%:@(
-  e) MALLOC_ZERO_RETURNS_NULL=yes ;;
-esac
-fi
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to act as if malloc(0) can return NULL" >&5
-printf %s "checking whether to act as if malloc(0) can return NULL... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MALLOC_ZERO_RETURNS_NULL" >&5
-printf '%s\n' "$MALLOC_ZERO_RETURNS_NULL" >&6; }
-
-if test "x$MALLOC_ZERO_RETURNS_NULL" = xyes; then
-	MALLOC_ZERO_CFLAGS="-DMALLOC_0_RETURNS_NULL"
-	XMALLOC_ZERO_CFLAGS=$MALLOC_ZERO_CFLAGS
-	XTMALLOC_ZERO_CFLAGS="$MALLOC_ZERO_CFLAGS -DXTMALLOC_BC"
-else
-	MALLOC_ZERO_CFLAGS=""
-	XMALLOC_ZERO_CFLAGS=""
-	XTMALLOC_ZERO_CFLAGS=""
-fi
-
-
-
-
-
-
-# Determine .so library version per platform
-# based on SharedXextRev in monolith xc/config/cf/*Lib.tmpl
-if test "x$XEXT_SOREV" = "x" ; then
-    case $host_os in
-	openbsd*)	XEXT_SOREV=8:0 		;;
-	solaris*)       XEXT_SOREV=0 		;;
-	*)              XEXT_SOREV=6:4:0 	;;
-    esac
-fi
-
-
-# Obtain compiler/linker options for dependencies
-
-pkg_failed=no
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" >&5
-printf %s "checking for xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99... " >&6; }
-
-if test -n "$XEXT_CFLAGS"; then
-    pkg_cv_XEXT_CFLAGS="$XEXT_CFLAGS"
- elif test -n "$PKG_CONFIG"; then
-    if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  pkg_cv_XEXT_CFLAGS=`$PKG_CONFIG --cflags "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes 
-else
-  pkg_failed=yes
-fi
- else
-    pkg_failed=untried
-fi
-if test -n "$XEXT_LIBS"; then
-    pkg_cv_XEXT_LIBS="$XEXT_LIBS"
- elif test -n "$PKG_CONFIG"; then
-    if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  pkg_cv_XEXT_LIBS=`$PKG_CONFIG --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes 
-else
-  pkg_failed=yes
-fi
- else
-    pkg_failed=untried
-fi
-
-
-
-if test $pkg_failed = yes; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        
-if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
-        _pkg_short_errors_supported=yes
-else
-        _pkg_short_errors_supported=no
-fi
-        if test $_pkg_short_errors_supported = yes; then
-                XEXT_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>&1`
-        else
-                XEXT_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>&1`
-        fi
-        # Put the nasty error message in config.log where it belongs
-        echo "$XEXT_PKG_ERRORS" >&5
-
-        as_fn_error $? "Package requirements (xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99) were not met:
-
-$XEXT_PKG_ERRORS
-
-Consider adjusting the PKG_CONFIG_PATH environment variable if you
-installed software in a non-standard prefix.
-
-Alternatively, you may set the environment variables XEXT_CFLAGS
-and XEXT_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details." "$LINENO" 5        
-elif test $pkg_failed = untried; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "The pkg-config script could not be found or is too old.  Make sure it
-is in your PATH or set the PKG_CONFIG environment variable to the full
-path to pkg-config.
-
-Alternatively, you may set the environment variables XEXT_CFLAGS
-and XEXT_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details.
-
-To get pkg-config, see <http://pkg-config.freedesktop.org/>.
-See 'config.log' for more details" "$LINENO" 5; }        
-else
-        XEXT_CFLAGS=$pkg_cv_XEXT_CFLAGS
-        XEXT_LIBS=$pkg_cv_XEXT_LIBS
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-        
-fi
-
-
-    
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for __builtin_popcountl" >&5
-printf %s "checking for __builtin_popcountl... " >&6; }
-if test ${ax_cv_have___builtin_popcountl+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-            __builtin_popcountl(0)
-            
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ax_cv_have___builtin_popcountl=yes
-else case e in @%:@(
-  e) ax_cv_have___builtin_popcountl=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ax_cv_have___builtin_popcountl" >&5
-printf '%s\n' "$ax_cv_have___builtin_popcountl" >&6; }
-
-    if test yes = $ax_cv_have___builtin_popcountl
-then :
-  
-printf '%s\n' "@%:@define HAVE___BUILTIN_POPCOUNTL 1" >>confdefs.h
-
-fi
-
-    
-
-ac_fn_c_check_func "$LINENO" "reallocarray" "ac_cv_func_reallocarray"
-if test "x$ac_cv_func_reallocarray" = xyes
-then :
-  printf '%s\n' "@%:@define HAVE_REALLOCARRAY 1" >>confdefs.h
-
-else case e in @%:@(
-  e) case " $LIB@&t@OBJS " in
-  *" reallocarray.$ac_objext "* ) ;;
-  *) LIB@&t@OBJS="$LIB@&t@OBJS reallocarray.$ac_objext"
- ;;
-esac
- ;;
-esac
-fi
-
-
-# Allow checking code with lint, sparse, etc.
-
-
-
-
-
-@%:@ Check whether --with-lint was given.
-if test ${with_lint+y}
-then :
-  withval=$with_lint; use_lint=$withval
-else case e in @%:@(
-  e) use_lint=no ;;
-esac
-fi
-
-
-# Obtain platform specific info like program name and options
-# The lint program on FreeBSD and NetBSD is different from the one on Solaris
-case $host_os in
-  *linux* | *openbsd* | kfreebsd*-gnu | darwin* | cygwin*)
-	lint_name=splint
-	lint_options="-badflag"
-	;;
-  *freebsd* | *netbsd*)
-	lint_name=lint
-	lint_options="-u -b"
-	;;
-  *solaris*)
-	lint_name=lint
-	lint_options="-u -b -h -erroff=E_INDISTING_FROM_TRUNC2"
-	;;
-esac
-
-# Test for the presence of the program (either guessed by the code or spelled out by the user)
-if test "x$use_lint" = x"yes" ; then
-   # Extract the first word of "$lint_name", so it can be a program name with args.
-set dummy $lint_name; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_LINT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $LINT in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_LINT="$LINT" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_LINT="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-LINT=$ac_cv_path_LINT
-if test -n "$LINT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LINT" >&5
-printf '%s\n' "$LINT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$LINT" = "x"; then
-        as_fn_error $? "--with-lint=yes specified but lint-style tool not found in PATH" "$LINENO" 5
-   fi
-elif test "x$use_lint" = x"no" ; then
-   if test "x$LINT" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring LINT environment variable since --with-lint=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring LINT environment variable since --with-lint=no was specified" >&2;}
-   fi
-else
-   as_fn_error $? "--with-lint expects 'yes' or 'no'. Use LINT variable to specify path." "$LINENO" 5
-fi
-
-# User supplied flags override default flags
-if test "x$LINT_FLAGS" != "x"; then
-   lint_options=$LINT_FLAGS
-fi
-
-LINT_FLAGS=$lint_options
-
- if test "x$LINT" != x; then
-  LINT_TRUE=
-  LINT_FALSE='#'
-else
-  LINT_TRUE='#'
-  LINT_FALSE=
-fi
-
-
-
-
-
-@%:@ Check whether --enable-lint-library was given.
-if test ${enable_lint_library+y}
-then :
-  enableval=$enable_lint_library; make_lint_lib=$enableval
-else case e in @%:@(
-  e) make_lint_lib=no ;;
-esac
-fi
-
-
-if test "x$make_lint_lib" = x"yes" ; then
-   LINTLIB=llib-lXext.ln
-   if test "x$LINT" = "x"; then
-        as_fn_error $? "Cannot make lint library without --with-lint" "$LINENO" 5
-   fi
-elif test "x$make_lint_lib" != x"no" ; then
-   as_fn_error $? "--enable-lint-library expects 'yes' or 'no'." "$LINENO" 5
-fi
-
-
- if test x$make_lint_lib != xno; then
-  MAKE_LINT_LIB_TRUE=
-  MAKE_LINT_LIB_FALSE='#'
-else
-  MAKE_LINT_LIB_TRUE='#'
-  MAKE_LINT_LIB_FALSE=
-fi
-
-
-
-
-ac_config_files="$ac_config_files Makefile man/Makefile src/Makefile specs/Makefile xext.pc"
-
-cat >confcache <<\_ACEOF
-# This file is a shell script that caches the results of configure
-# tests run on this system so they can be shared between configure
-# scripts and configure runs, see configure's option --config-cache.
-# It is not useful on other systems.  If it contains results you don't
-# want to keep, you may remove or edit it.
-#
-# config.status only pays attention to the cache file if you give it
-# the --recheck option to rerun configure.
-#
-# 'ac_cv_env_foo' variables (set or unset) will be overridden when
-# loading this file, other *unset* 'ac_cv_foo' will be assigned the
-# following values.
-
-_ACEOF
-
-ac_cache_dump |
-  sed '
-     /^ac_cv_env_/b end
-     t clear
-     :clear
-     s/^\([^=]*\)=\(.*[{}].*\)$/test ${\1+y} || &/
-     t end
-     s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/
-     :end' >>confcache
-if diff "$cache_file" confcache >/dev/null 2>&1; then :; else
-  if test -w "$cache_file"; then
-    if test "x$cache_file" != "x/dev/null"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5
-printf '%s\n' "$as_me: updating cache $cache_file" >&6;}
-      if test ! -f "$cache_file" || test -h "$cache_file"; then
-	cat confcache >"$cache_file"
-      else
-        case $cache_file in #(
-        */* | ?:*)
-	  mv -f confcache "$cache_file"$$ &&
-	  mv -f "$cache_file"$$ "$cache_file" ;; #(
-        *)
-	  mv -f confcache "$cache_file" ;;
-	esac
-      fi
-    fi
-  else
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5
-printf '%s\n' "$as_me: not updating unwritable cache $cache_file" >&6;}
-  fi
-fi
-rm -f confcache
-
-test "x$prefix" = xNONE && prefix=$ac_default_prefix
-# Let make expand exec_prefix.
-test "x$exec_prefix" = xNONE && exec_prefix='${prefix}'
-
-DEFS=-DHAVE_CONFIG_H
-
-ac_libobjs=
-ac_ltlibobjs=
-U=
-for ac_i in : $LIB@&t@OBJS; do test "x$ac_i" = x: && continue
-  # 1. Remove the extension, and $U if already installed.
-  ac_script='s/\$U\././;s/\.o$//;s/\.obj$//'
-  ac_i=`printf '%s\n' "$ac_i" | sed "$ac_script"`
-  # 2. Prepend LIBOBJDIR.  When used with automake>=1.10 LIBOBJDIR
-  #    will be set to the directory where LIBOBJS objects are built.
-  as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext"
-  as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo'
-done
-LIB@&t@OBJS=$ac_libobjs
-
-LTLIBOBJS=$ac_ltlibobjs
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking that generated files are newer than configure" >&5
-printf %s "checking that generated files are newer than configure... " >&6; }
-   if test -n "$am_sleep_pid"; then
-     # Hide warnings about reused PIDs.
-     wait $am_sleep_pid 2>/dev/null
-   fi
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: done" >&5
-printf '%s\n' "done" >&6; }
-if test -z "${AMDEP_TRUE}" && test -z "${AMDEP_FALSE}"; then
-  as_fn_error $? "conditional \"AMDEP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${am__fastdepCC_TRUE}" && test -z "${am__fastdepCC_FALSE}"; then
-  as_fn_error $? "conditional \"am__fastdepCC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-case $enable_silent_rules in @%:@ (((
-  yes) AM_DEFAULT_VERBOSITY=0;;
-   no) AM_DEFAULT_VERBOSITY=1;;
-esac
-if test $am_cv_make_support_nested_variables = yes; then
-    AM_V='$(V)'
-  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-else
-  AM_V=$AM_DEFAULT_VERBOSITY
-  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
-fi
-
- if test -n "$EXEEXT"; then
-  am__EXEEXT_TRUE=
-  am__EXEEXT_FALSE='#'
-else
-  am__EXEEXT_TRUE='#'
-  am__EXEEXT_FALSE=
-fi
-
-if test -z "${ENABLE_SPECS_TRUE}" && test -z "${ENABLE_SPECS_FALSE}"; then
-  as_fn_error $? "conditional \"ENABLE_SPECS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XMLTO_TEXT_TRUE}" && test -z "${HAVE_XMLTO_TEXT_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XMLTO_TEXT\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XMLTO_TRUE}" && test -z "${HAVE_XMLTO_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XMLTO\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_FOP_TRUE}" && test -z "${HAVE_FOP_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_FOP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XSLTPROC_TRUE}" && test -z "${HAVE_XSLTPROC_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XSLTPROC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_STYLESHEETS_TRUE}" && test -z "${HAVE_STYLESHEETS_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_STYLESHEETS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${LINT_TRUE}" && test -z "${LINT_FALSE}"; then
-  as_fn_error $? "conditional \"LINT\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${MAKE_LINT_LIB_TRUE}" && test -z "${MAKE_LINT_LIB_FALSE}"; then
-  as_fn_error $? "conditional \"MAKE_LINT_LIB\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-
-: "${CONFIG_STATUS=./config.status}"
-case $CONFIG_STATUS in @%:@(
-  -*) :
-    CONFIG_STATUS=./$CONFIG_STATUS ;; @%:@(
-  */*) :
-     ;; @%:@(
-  *) :
-    CONFIG_STATUS=./$CONFIG_STATUS ;;
-esac
-
-ac_write_fail=0
-ac_clean_CONFIG_STATUS='"$CONFIG_STATUS"'
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5
-printf '%s\n' "$as_me: creating $CONFIG_STATUS" >&6;}
-as_write_fail=0
-cat >"$CONFIG_STATUS" <<_ASEOF || as_write_fail=1
-#! $SHELL
-# Generated by $as_me.
-# Run this file to recreate the current configuration.
-# Compiler output produced by configure, useful for debugging
-# configure, is in config.log if it exists.
-
-debug=false
-ac_cs_recheck=false
-ac_cs_silent=false
-
-SHELL=\${CONFIG_SHELL-$SHELL}
-export SHELL
-_ASEOF
-cat >>"$CONFIG_STATUS" <<\_ASEOF || as_write_fail=1
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else case e in @%:@(
-  e) case `(set -o) 2>/dev/null` in @%:@(
-  *posix*) :
-    set -o posix ;; @%:@(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-
-
-
-# Reset variables that may have inherited troublesome values from
-# the environment.
-
-# IFS needs to be set, to space, tab, and newline, in precisely that order.
-# (If _AS_PATH_WALK were called with IFS unset, it would have the
-# side effect of setting IFS to empty, thus disabling word splitting.)
-# Quoting is to prevent editors from complaining about space-tab.
-as_nl='
-'
-export as_nl
-IFS=" ""	$as_nl"
-
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# Ensure predictable behavior from utilities with locale-dependent output.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# We cannot yet rely on "unset" to work, but we need these variables
-# to be unset--not just set to an empty or harmless value--now, to
-# avoid bugs in old shells (e.g. pre-3.0 UWIN ksh).  This construct
-# also avoids known problems related to "unset" and subshell syntax
-# in other old shells (e.g. bash 2.01 and pdksh 5.2.14).
-for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH
-do eval test \${$as_var+y} \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-
-# Ensure that fds 0, 1, and 2 are open.
-if (exec 3>&0) 2>/dev/null; then :; else exec 0</dev/null; fi
-if (exec 3>&1) 2>/dev/null; then :; else exec 1>/dev/null; fi
-if (exec 3>&2)            ; then :; else exec 2>/dev/null; fi
-
-# The user is always right.
-if ${PATH_SEPARATOR+false} :; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in @%:@((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    test -r "$as_dir$0" && as_myself=$as_dir$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as 'sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  printf '%s\n' "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-
-
-@%:@ as_fn_error STATUS ERROR [LINENO LOG_FD]
-@%:@ ----------------------------------------
-@%:@ Output "`basename @S|@0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-@%:@ provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-@%:@ script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  printf '%s\n' "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} @%:@ as_fn_error
-
-
-@%:@ as_fn_set_status STATUS
-@%:@ -----------------------
-@%:@ Set @S|@? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} @%:@ as_fn_set_status
-
-@%:@ as_fn_exit STATUS
-@%:@ -----------------
-@%:@ Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} @%:@ as_fn_exit
-
-@%:@ as_fn_unset VAR
-@%:@ ---------------
-@%:@ Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-@%:@ as_fn_append VAR VALUE
-@%:@ ----------------------
-@%:@ Append the text in VALUE to the end of the definition contained in VAR. Take
-@%:@ advantage of any shell optimizations that allow amortized linear growth over
-@%:@ repeated appends, instead of the typical quadratic growth present in naive
-@%:@ implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null
-then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else case e in @%:@(
-  e) as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  } ;;
-esac
-fi # as_fn_append
-
-@%:@ as_fn_arith ARG...
-@%:@ ------------------
-@%:@ Perform arithmetic evaluation on the ARGs, and store the result in the
-@%:@ global @S|@as_val. Take advantage of shells that can avoid forks. The arguments
-@%:@ must be portable across @S|@(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null
-then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else case e in @%:@(
-  e) as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  } ;;
-esac
-fi # as_fn_arith
-
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both 'ln -s file dir' and 'ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; 'ln -s' creates a wrapper executable.
-    # In both cases, we have to default to 'cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-
-@%:@ as_fn_mkdir_p
-@%:@ -------------
-@%:@ Create "@S|@as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`printf '%s\n' "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} @%:@ as_fn_mkdir_p
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-
-@%:@ as_fn_executable_p FILE
-@%:@ -----------------------
-@%:@ Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} @%:@ as_fn_executable_p
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_sed_cpp="y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g"
-as_tr_cpp="eval sed '$as_sed_cpp'" # deprecated
-
-# Sed expression to map a string onto a valid variable name.
-as_sed_sh="y%*+%pp%;s%[^_$as_cr_alnum]%_%g"
-as_tr_sh="eval sed '$as_sed_sh'" # deprecated
-
-
-exec 6>&1
-## ------------------------------------- ##
-## Main body of "$CONFIG_STATUS" script. ##
-## ------------------------------------- ##
-_ASEOF
-test $as_write_fail = 0 && chmod +x "$CONFIG_STATUS" || ac_write_fail=1
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# Save the log message, to keep $0 and so on meaningful, and to
-# report actual input values of CONFIG_FILES etc. instead of their
-# values after options handling.
-ac_log="
-This file was extended by libXext $as_me 1.3.7, which was
-generated by GNU Autoconf 2.73.  Invocation command line was
-
-  CONFIG_FILES    = $CONFIG_FILES
-  CONFIG_HEADERS  = $CONFIG_HEADERS
-  CONFIG_LINKS    = $CONFIG_LINKS
-  CONFIG_COMMANDS = $CONFIG_COMMANDS
-  $ $0 $@
-
-on `(hostname || uname -n) 2>/dev/null | sed 1q`
-"
-
-_ACEOF
-
-case $ac_config_files in *"
-"*) set x $ac_config_files; shift; ac_config_files=$*;;
-esac
-
-case $ac_config_headers in *"
-"*) set x $ac_config_headers; shift; ac_config_headers=$*;;
-esac
-
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-# Files that config.status was made for.
-config_files="$ac_config_files"
-config_headers="$ac_config_headers"
-config_commands="$ac_config_commands"
-
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-ac_cs_usage="\
-'$as_me' instantiates files and other configuration actions
-from templates according to the current configuration.  Unless the files
-and actions are specified as TAGs, all are instantiated by default.
-
-Usage: $0 [OPTION]... [TAG]...
-
-  -h, --help       print this help, then exit
-  -V, --version    print version number and configuration settings, then exit
-      --config     print configuration, then exit
-  -q, --quiet, --silent
-                   do not print progress messages
-  -d, --debug      don't remove temporary files
-      --recheck    update $as_me by reconfiguring in the same conditions
-      --file=FILE[:TEMPLATE] 
-                   instantiate the configuration file FILE
-      --header=FILE[:TEMPLATE] 
-                   instantiate the configuration header FILE
-
-Configuration files:
-$config_files
-
-Configuration headers:
-$config_headers
-
-Configuration commands:
-$config_commands
-
-Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>."
-
-_ACEOF
-ac_cs_config=`printf '%s\n' "$ac_configure_args" | sed "$ac_safe_unquote"`
-ac_cs_config_escaped=`printf '%s\n' "$ac_cs_config" | sed "s/^ //; s/'/'\\\\\\\\''/g"`
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-ac_cs_config='$ac_cs_config_escaped'
-ac_cs_version="\\
-libXext config.status 1.3.7
-configured by $0, generated by GNU Autoconf 2.73,
-  with options \\"\$ac_cs_config\\"
-
-Copyright (C) 2026 Free Software Foundation, Inc.
-This config.status script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it."
-
-ac_pwd='$ac_pwd'
-srcdir='$srcdir'
-INSTALL='$INSTALL'
-MKDIR_P='$MKDIR_P'
-AWK='$AWK'
-test -n "\$AWK" || {
-  awk '' </dev/null ||
-    as_fn_error \$? "try installing gawk"
-  AWK=awk
-}
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# The default lists apply if the user does not specify any file.
-ac_need_defaults=:
-while test $# != 0
-do
-  case $1 in
-  --*=?*)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'`
-    ac_shift=:
-    ;;
-  --*=)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=
-    ac_shift=:
-    ;;
-  *)
-    ac_option=$1
-    ac_optarg=$2
-    ac_shift=shift
-    ;;
-  esac
-
-  case $ac_option in
-  # Handling of the options.
-  -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r)
-    ac_cs_recheck=: ;;
-  --version | --versio | --versi | --vers | --ver | --ve | --v | -V )
-    printf '%s\n' "$ac_cs_version"; exit ;;
-  --config | --confi | --conf | --con | --co | --c )
-    printf '%s\n' "$ac_cs_config"; exit ;;
-  --debug | --debu | --deb | --de | --d | -d )
-    debug=: ;;
-  --file | --fil | --fi | --f )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf '%s\n' "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    '') as_fn_error $? "missing file argument" ;;
-    esac
-    as_fn_append CONFIG_FILES " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --header | --heade | --head | --hea )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf '%s\n' "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    as_fn_append CONFIG_HEADERS " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --he | --h)
-    # Conflict between --help and --header
-    as_fn_error $? "ambiguous option: '$1'
-Try '$0 --help' for more information.";;
-  --help | --hel | -h )
-    printf '%s\n' "$ac_cs_usage"; exit ;;
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil | --si | --s)
-    ac_cs_silent=: ;;
-
-  # This is an error.
-  -*) as_fn_error $? "unrecognized option: '$1'
-Try '$0 --help' for more information." ;;
-
-  *) as_fn_append ac_config_targets " $1"
-     ac_need_defaults=false ;;
-
-  esac
-  shift
-done
-
-ac_configure_extra_args=
-
-if $ac_cs_silent; then
-  exec 6>/dev/null
-  ac_configure_extra_args="$ac_configure_extra_args --silent"
-fi
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-if \$ac_cs_recheck; then
-  set X $SHELL '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion
-  shift
-  \printf '%s\n' "running CONFIG_SHELL=$SHELL \$*" >&6
-  CONFIG_SHELL='$SHELL'
-  export CONFIG_SHELL
-  exec "\$@"
-fi
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-exec 5>>config.log
-{
-  echo
-  sed 'h;s/./-/g;s/^.../@%:@@%:@ /;s/...$/ @%:@@%:@/;p;x;p;x' <<_ASBOX
-@%:@@%:@ Running $as_me. @%:@@%:@
-_ASBOX
-  printf '%s\n' "$ac_log"
-} >&5
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-#
-# INIT-COMMANDS
-#
-AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}"
-
-
-# The HP-UX ksh and POSIX shell print the target directory to stdout
-# if CDPATH is set.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-sed_quote_subst='$sed_quote_subst'
-double_quote_subst='$double_quote_subst'
-delay_variable_subst='$delay_variable_subst'
-macro_version='`$ECHO "$macro_version" | $SED "$delay_single_quote_subst"`'
-macro_revision='`$ECHO "$macro_revision" | $SED "$delay_single_quote_subst"`'
-enable_shared='`$ECHO "$enable_shared" | $SED "$delay_single_quote_subst"`'
-enable_static='`$ECHO "$enable_static" | $SED "$delay_single_quote_subst"`'
-pic_mode='`$ECHO "$pic_mode" | $SED "$delay_single_quote_subst"`'
-enable_fast_install='`$ECHO "$enable_fast_install" | $SED "$delay_single_quote_subst"`'
-shared_archive_member_spec='`$ECHO "$shared_archive_member_spec" | $SED "$delay_single_quote_subst"`'
-SHELL='`$ECHO "$SHELL" | $SED "$delay_single_quote_subst"`'
-ECHO='`$ECHO "$ECHO" | $SED "$delay_single_quote_subst"`'
-PATH_SEPARATOR='`$ECHO "$PATH_SEPARATOR" | $SED "$delay_single_quote_subst"`'
-host_alias='`$ECHO "$host_alias" | $SED "$delay_single_quote_subst"`'
-host='`$ECHO "$host" | $SED "$delay_single_quote_subst"`'
-host_os='`$ECHO "$host_os" | $SED "$delay_single_quote_subst"`'
-build_alias='`$ECHO "$build_alias" | $SED "$delay_single_quote_subst"`'
-build='`$ECHO "$build" | $SED "$delay_single_quote_subst"`'
-build_os='`$ECHO "$build_os" | $SED "$delay_single_quote_subst"`'
-SED='`$ECHO "$SED" | $SED "$delay_single_quote_subst"`'
-Xsed='`$ECHO "$Xsed" | $SED "$delay_single_quote_subst"`'
-GREP='`$ECHO "$GREP" | $SED "$delay_single_quote_subst"`'
-EGREP='`$ECHO "$EGREP" | $SED "$delay_single_quote_subst"`'
-FGREP='`$ECHO "$FGREP" | $SED "$delay_single_quote_subst"`'
-LD='`$ECHO "$LD" | $SED "$delay_single_quote_subst"`'
-NM='`$ECHO "$NM" | $SED "$delay_single_quote_subst"`'
-LN_S='`$ECHO "$LN_S" | $SED "$delay_single_quote_subst"`'
-max_cmd_len='`$ECHO "$max_cmd_len" | $SED "$delay_single_quote_subst"`'
-ac_objext='`$ECHO "$ac_objext" | $SED "$delay_single_quote_subst"`'
-exeext='`$ECHO "$exeext" | $SED "$delay_single_quote_subst"`'
-lt_unset='`$ECHO "$lt_unset" | $SED "$delay_single_quote_subst"`'
-lt_SP2NL='`$ECHO "$lt_SP2NL" | $SED "$delay_single_quote_subst"`'
-lt_NL2SP='`$ECHO "$lt_NL2SP" | $SED "$delay_single_quote_subst"`'
-lt_cv_to_host_file_cmd='`$ECHO "$lt_cv_to_host_file_cmd" | $SED "$delay_single_quote_subst"`'
-lt_cv_to_tool_file_cmd='`$ECHO "$lt_cv_to_tool_file_cmd" | $SED "$delay_single_quote_subst"`'
-reload_flag='`$ECHO "$reload_flag" | $SED "$delay_single_quote_subst"`'
-reload_cmds='`$ECHO "$reload_cmds" | $SED "$delay_single_quote_subst"`'
-FILECMD='`$ECHO "$FILECMD" | $SED "$delay_single_quote_subst"`'
-OBJDUMP='`$ECHO "$OBJDUMP" | $SED "$delay_single_quote_subst"`'
-deplibs_check_method='`$ECHO "$deplibs_check_method" | $SED "$delay_single_quote_subst"`'
-file_magic_cmd='`$ECHO "$file_magic_cmd" | $SED "$delay_single_quote_subst"`'
-file_magic_glob='`$ECHO "$file_magic_glob" | $SED "$delay_single_quote_subst"`'
-want_nocaseglob='`$ECHO "$want_nocaseglob" | $SED "$delay_single_quote_subst"`'
-DLLTOOL='`$ECHO "$DLLTOOL" | $SED "$delay_single_quote_subst"`'
-sharedlib_from_linklib_cmd='`$ECHO "$sharedlib_from_linklib_cmd" | $SED "$delay_single_quote_subst"`'
-AR='`$ECHO "$AR" | $SED "$delay_single_quote_subst"`'
-lt_ar_flags='`$ECHO "$lt_ar_flags" | $SED "$delay_single_quote_subst"`'
-AR_FLAGS='`$ECHO "$AR_FLAGS" | $SED "$delay_single_quote_subst"`'
-archiver_list_spec='`$ECHO "$archiver_list_spec" | $SED "$delay_single_quote_subst"`'
-STRIP='`$ECHO "$STRIP" | $SED "$delay_single_quote_subst"`'
-RANLIB='`$ECHO "$RANLIB" | $SED "$delay_single_quote_subst"`'
-old_postinstall_cmds='`$ECHO "$old_postinstall_cmds" | $SED "$delay_single_quote_subst"`'
-old_postuninstall_cmds='`$ECHO "$old_postuninstall_cmds" | $SED "$delay_single_quote_subst"`'
-old_archive_cmds='`$ECHO "$old_archive_cmds" | $SED "$delay_single_quote_subst"`'
-lock_old_archive_extraction='`$ECHO "$lock_old_archive_extraction" | $SED "$delay_single_quote_subst"`'
-CC='`$ECHO "$CC" | $SED "$delay_single_quote_subst"`'
-CFLAGS='`$ECHO "$CFLAGS" | $SED "$delay_single_quote_subst"`'
-compiler='`$ECHO "$compiler" | $SED "$delay_single_quote_subst"`'
-GCC='`$ECHO "$GCC" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_pipe='`$ECHO "$lt_cv_sys_global_symbol_pipe" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_cdecl='`$ECHO "$lt_cv_sys_global_symbol_to_cdecl" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_import='`$ECHO "$lt_cv_sys_global_symbol_to_import" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_c_name_address='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address_lib_prefix" | $SED "$delay_single_quote_subst"`'
-lt_cv_nm_interface='`$ECHO "$lt_cv_nm_interface" | $SED "$delay_single_quote_subst"`'
-nm_file_list_spec='`$ECHO "$nm_file_list_spec" | $SED "$delay_single_quote_subst"`'
-lt_sysroot='`$ECHO "$lt_sysroot" | $SED "$delay_single_quote_subst"`'
-lt_cv_truncate_bin='`$ECHO "$lt_cv_truncate_bin" | $SED "$delay_single_quote_subst"`'
-objdir='`$ECHO "$objdir" | $SED "$delay_single_quote_subst"`'
-MAGIC_CMD='`$ECHO "$MAGIC_CMD" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_no_builtin_flag='`$ECHO "$lt_prog_compiler_no_builtin_flag" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_pic='`$ECHO "$lt_prog_compiler_pic" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_wl='`$ECHO "$lt_prog_compiler_wl" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_static='`$ECHO "$lt_prog_compiler_static" | $SED "$delay_single_quote_subst"`'
-lt_cv_prog_compiler_c_o='`$ECHO "$lt_cv_prog_compiler_c_o" | $SED "$delay_single_quote_subst"`'
-need_locks='`$ECHO "$need_locks" | $SED "$delay_single_quote_subst"`'
-MANIFEST_TOOL='`$ECHO "$MANIFEST_TOOL" | $SED "$delay_single_quote_subst"`'
-DSYMUTIL='`$ECHO "$DSYMUTIL" | $SED "$delay_single_quote_subst"`'
-NMEDIT='`$ECHO "$NMEDIT" | $SED "$delay_single_quote_subst"`'
-LIPO='`$ECHO "$LIPO" | $SED "$delay_single_quote_subst"`'
-OTOOL='`$ECHO "$OTOOL" | $SED "$delay_single_quote_subst"`'
-OTOOL64='`$ECHO "$OTOOL64" | $SED "$delay_single_quote_subst"`'
-libext='`$ECHO "$libext" | $SED "$delay_single_quote_subst"`'
-shrext_cmds='`$ECHO "$shrext_cmds" | $SED "$delay_single_quote_subst"`'
-extract_expsyms_cmds='`$ECHO "$extract_expsyms_cmds" | $SED "$delay_single_quote_subst"`'
-archive_cmds_need_lc='`$ECHO "$archive_cmds_need_lc" | $SED "$delay_single_quote_subst"`'
-enable_shared_with_static_runtimes='`$ECHO "$enable_shared_with_static_runtimes" | $SED "$delay_single_quote_subst"`'
-export_dynamic_flag_spec='`$ECHO "$export_dynamic_flag_spec" | $SED "$delay_single_quote_subst"`'
-whole_archive_flag_spec='`$ECHO "$whole_archive_flag_spec" | $SED "$delay_single_quote_subst"`'
-compiler_needs_object='`$ECHO "$compiler_needs_object" | $SED "$delay_single_quote_subst"`'
-old_archive_from_new_cmds='`$ECHO "$old_archive_from_new_cmds" | $SED "$delay_single_quote_subst"`'
-old_archive_from_expsyms_cmds='`$ECHO "$old_archive_from_expsyms_cmds" | $SED "$delay_single_quote_subst"`'
-archive_cmds='`$ECHO "$archive_cmds" | $SED "$delay_single_quote_subst"`'
-archive_expsym_cmds='`$ECHO "$archive_expsym_cmds" | $SED "$delay_single_quote_subst"`'
-module_cmds='`$ECHO "$module_cmds" | $SED "$delay_single_quote_subst"`'
-module_expsym_cmds='`$ECHO "$module_expsym_cmds" | $SED "$delay_single_quote_subst"`'
-with_gnu_ld='`$ECHO "$with_gnu_ld" | $SED "$delay_single_quote_subst"`'
-allow_undefined_flag='`$ECHO "$allow_undefined_flag" | $SED "$delay_single_quote_subst"`'
-no_undefined_flag='`$ECHO "$no_undefined_flag" | $SED "$delay_single_quote_subst"`'
-hardcode_libdir_flag_spec='`$ECHO "$hardcode_libdir_flag_spec" | $SED "$delay_single_quote_subst"`'
-hardcode_libdir_separator='`$ECHO "$hardcode_libdir_separator" | $SED "$delay_single_quote_subst"`'
-hardcode_direct='`$ECHO "$hardcode_direct" | $SED "$delay_single_quote_subst"`'
-hardcode_direct_absolute='`$ECHO "$hardcode_direct_absolute" | $SED "$delay_single_quote_subst"`'
-hardcode_minus_L='`$ECHO "$hardcode_minus_L" | $SED "$delay_single_quote_subst"`'
-hardcode_shlibpath_var='`$ECHO "$hardcode_shlibpath_var" | $SED "$delay_single_quote_subst"`'
-hardcode_automatic='`$ECHO "$hardcode_automatic" | $SED "$delay_single_quote_subst"`'
-inherit_rpath='`$ECHO "$inherit_rpath" | $SED "$delay_single_quote_subst"`'
-link_all_deplibs='`$ECHO "$link_all_deplibs" | $SED "$delay_single_quote_subst"`'
-always_export_symbols='`$ECHO "$always_export_symbols" | $SED "$delay_single_quote_subst"`'
-export_symbols_cmds='`$ECHO "$export_symbols_cmds" | $SED "$delay_single_quote_subst"`'
-exclude_expsyms='`$ECHO "$exclude_expsyms" | $SED "$delay_single_quote_subst"`'
-include_expsyms='`$ECHO "$include_expsyms" | $SED "$delay_single_quote_subst"`'
-prelink_cmds='`$ECHO "$prelink_cmds" | $SED "$delay_single_quote_subst"`'
-postlink_cmds='`$ECHO "$postlink_cmds" | $SED "$delay_single_quote_subst"`'
-file_list_spec='`$ECHO "$file_list_spec" | $SED "$delay_single_quote_subst"`'
-variables_saved_for_relink='`$ECHO "$variables_saved_for_relink" | $SED "$delay_single_quote_subst"`'
-need_lib_prefix='`$ECHO "$need_lib_prefix" | $SED "$delay_single_quote_subst"`'
-need_version='`$ECHO "$need_version" | $SED "$delay_single_quote_subst"`'
-version_type='`$ECHO "$version_type" | $SED "$delay_single_quote_subst"`'
-runpath_var='`$ECHO "$runpath_var" | $SED "$delay_single_quote_subst"`'
-shlibpath_var='`$ECHO "$shlibpath_var" | $SED "$delay_single_quote_subst"`'
-shlibpath_overrides_runpath='`$ECHO "$shlibpath_overrides_runpath" | $SED "$delay_single_quote_subst"`'
-libname_spec='`$ECHO "$libname_spec" | $SED "$delay_single_quote_subst"`'
-library_names_spec='`$ECHO "$library_names_spec" | $SED "$delay_single_quote_subst"`'
-soname_spec='`$ECHO "$soname_spec" | $SED "$delay_single_quote_subst"`'
-install_override_mode='`$ECHO "$install_override_mode" | $SED "$delay_single_quote_subst"`'
-postinstall_cmds='`$ECHO "$postinstall_cmds" | $SED "$delay_single_quote_subst"`'
-postuninstall_cmds='`$ECHO "$postuninstall_cmds" | $SED "$delay_single_quote_subst"`'
-finish_cmds='`$ECHO "$finish_cmds" | $SED "$delay_single_quote_subst"`'
-finish_eval='`$ECHO "$finish_eval" | $SED "$delay_single_quote_subst"`'
-hardcode_into_libs='`$ECHO "$hardcode_into_libs" | $SED "$delay_single_quote_subst"`'
-sys_lib_search_path_spec='`$ECHO "$sys_lib_search_path_spec" | $SED "$delay_single_quote_subst"`'
-configure_time_dlsearch_path='`$ECHO "$configure_time_dlsearch_path" | $SED "$delay_single_quote_subst"`'
-configure_time_lt_sys_library_path='`$ECHO "$configure_time_lt_sys_library_path" | $SED "$delay_single_quote_subst"`'
-hardcode_action='`$ECHO "$hardcode_action" | $SED "$delay_single_quote_subst"`'
-enable_dlopen='`$ECHO "$enable_dlopen" | $SED "$delay_single_quote_subst"`'
-enable_dlopen_self='`$ECHO "$enable_dlopen_self" | $SED "$delay_single_quote_subst"`'
-enable_dlopen_self_static='`$ECHO "$enable_dlopen_self_static" | $SED "$delay_single_quote_subst"`'
-old_striplib='`$ECHO "$old_striplib" | $SED "$delay_single_quote_subst"`'
-striplib='`$ECHO "$striplib" | $SED "$delay_single_quote_subst"`'
-
-LTCC='$LTCC'
-LTCFLAGS='$LTCFLAGS'
-compiler='$compiler_DEFAULT'
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-\$1
-_LTECHO_EOF'
-}
-
-# Quote evaled strings.
-for var in SHELL \
-ECHO \
-PATH_SEPARATOR \
-SED \
-GREP \
-EGREP \
-FGREP \
-LD \
-NM \
-LN_S \
-lt_SP2NL \
-lt_NL2SP \
-reload_flag \
-FILECMD \
-OBJDUMP \
-deplibs_check_method \
-file_magic_cmd \
-file_magic_glob \
-want_nocaseglob \
-DLLTOOL \
-sharedlib_from_linklib_cmd \
-AR \
-archiver_list_spec \
-STRIP \
-RANLIB \
-CC \
-CFLAGS \
-compiler \
-lt_cv_sys_global_symbol_pipe \
-lt_cv_sys_global_symbol_to_cdecl \
-lt_cv_sys_global_symbol_to_import \
-lt_cv_sys_global_symbol_to_c_name_address \
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix \
-lt_cv_nm_interface \
-nm_file_list_spec \
-lt_cv_truncate_bin \
-lt_prog_compiler_no_builtin_flag \
-lt_prog_compiler_pic \
-lt_prog_compiler_wl \
-lt_prog_compiler_static \
-lt_cv_prog_compiler_c_o \
-need_locks \
-MANIFEST_TOOL \
-DSYMUTIL \
-NMEDIT \
-LIPO \
-OTOOL \
-OTOOL64 \
-shrext_cmds \
-export_dynamic_flag_spec \
-whole_archive_flag_spec \
-compiler_needs_object \
-with_gnu_ld \
-allow_undefined_flag \
-no_undefined_flag \
-hardcode_libdir_flag_spec \
-hardcode_libdir_separator \
-exclude_expsyms \
-include_expsyms \
-file_list_spec \
-variables_saved_for_relink \
-libname_spec \
-library_names_spec \
-soname_spec \
-install_override_mode \
-finish_eval \
-old_striplib \
-striplib; do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[\\\\\\\`\\"\\\$]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-# Double-quote double-evaled strings.
-for var in reload_cmds \
-old_postinstall_cmds \
-old_postuninstall_cmds \
-old_archive_cmds \
-extract_expsyms_cmds \
-old_archive_from_new_cmds \
-old_archive_from_expsyms_cmds \
-archive_cmds \
-archive_expsym_cmds \
-module_cmds \
-module_expsym_cmds \
-export_symbols_cmds \
-prelink_cmds \
-postlink_cmds \
-postinstall_cmds \
-postuninstall_cmds \
-finish_cmds \
-sys_lib_search_path_spec \
-configure_time_dlsearch_path \
-configure_time_lt_sys_library_path; do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[\\\\\\\`\\"\\\$]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-ac_aux_dir='$ac_aux_dir'
-
-# See if we are running on zsh, and set the options that allow our
-# commands through without removal of \ escapes INIT.
-if test -n "\${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-
-    PACKAGE='$PACKAGE'
-    VERSION='$VERSION'
-    RM='$RM'
-    ofile='$ofile'
-
-
-
-
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-
-# Handling of arguments.
-for ac_config_target in $ac_config_targets
-do
-  case $ac_config_target in
-    "config.h") CONFIG_HEADERS="$CONFIG_HEADERS config.h" ;;
-    "depfiles") CONFIG_COMMANDS="$CONFIG_COMMANDS depfiles" ;;
-    "libtool") CONFIG_COMMANDS="$CONFIG_COMMANDS libtool" ;;
-    "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;;
-    "man/Makefile") CONFIG_FILES="$CONFIG_FILES man/Makefile" ;;
-    "src/Makefile") CONFIG_FILES="$CONFIG_FILES src/Makefile" ;;
-    "specs/Makefile") CONFIG_FILES="$CONFIG_FILES specs/Makefile" ;;
-    "xext.pc") CONFIG_FILES="$CONFIG_FILES xext.pc" ;;
-
-  *) as_fn_error $? "invalid argument: '$ac_config_target'" "$LINENO" 5;;
-  esac
-done
-
-
-# If the user did not use the arguments to specify the items to instantiate,
-# then the envvar interface is used.  Set only those that are not.
-# We use the long form for the default assignment because of an extremely
-# bizarre bug on SunOS 4.1.3.
-if $ac_need_defaults; then
-  test ${CONFIG_FILES+y} || CONFIG_FILES=$config_files
-  test ${CONFIG_HEADERS+y} || CONFIG_HEADERS=$config_headers
-  test ${CONFIG_COMMANDS+y} || CONFIG_COMMANDS=$config_commands
-fi
-
-# Have a temporary directory for convenience.  Make it in the build tree
-# simply because there is no reason against having it here, and in addition,
-# creating and moving files from /tmp can sometimes cause problems.
-# Hook for its removal unless debugging.
-# Note that there is a small window in which the directory will not be cleaned:
-# after its creation but before its name has been assigned to '$tmp'.
-$debug ||
-{
-  tmp= ac_tmp=
-  trap 'exit_status=$?
-  : "${ac_tmp:=$tmp}"
-  { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status
-' 0
-  trap 'as_fn_exit 1' 1 2 13 15
-}
-# Create a (secure) tmp directory for tmp files.
-
-{
-  tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` &&
-  test -d "$tmp"
-}  ||
-{
-  tmp=./conf$$-$RANDOM
-  (umask 077 && mkdir "$tmp")
-} || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5
-ac_tmp=$tmp
-
-# Set up the scripts for CONFIG_FILES section.
-# No need to generate them if there are no CONFIG_FILES.
-# This happens for instance with './config.status config.h'.
-if test -n "$CONFIG_FILES"; then
-
-
-ac_cr=`echo X | tr X '\015'`
-# On cygwin, bash can eat \r inside `` if the user requested igncr.
-# But we know of no other shell where ac_cr would be empty at this
-# point, so we can use a bashism as a fallback.
-if test "x$ac_cr" = x; then
-  eval ac_cr=\$\'\\r\'
-fi
-ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' </dev/null 2>/dev/null`
-if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then
-  ac_cs_awk_cr='\\r'
-else
-  ac_cs_awk_cr=$ac_cr
-fi
-
-echo 'BEGIN {' >"$ac_tmp/subs1.awk" &&
-_ACEOF
-
-
-{
-  echo "cat >conf$$subs.awk <<_ACEOF" &&
-  echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' &&
-  echo "_ACEOF"
-} >conf$$subs.sh ||
-  as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-ac_delim_num=`echo "$ac_subst_vars" | sed -n '$='`
-ac_delim='%!_!# '
-for ac_last_try in false false false false false :; do
-  . ./conf$$subs.sh ||
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-
-  ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | sed -n '$='`
-  if test $ac_delim_n = $ac_delim_num; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-rm -f conf$$subs.sh
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK &&
-_ACEOF
-sed -n '
-h
-s/^/S["/; s/!.*/"]=/
-p
-g
-s/^[^!]*!//
-:repl
-t repl
-s/'"$ac_delim"'$//
-t delim
-:nl
-h
-s/\(.\{148\}\)..*/\1/
-t more1
-s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/
-p
-n
-b repl
-:more1
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t nl
-:delim
-h
-s/\(.\{148\}\)..*/\1/
-t more2
-s/["\\]/\\&/g; s/^/"/; s/$/"/
-p
-b
-:more2
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t delim
-' <conf$$subs.awk | sed '
-/^[^""]/{
-  N
-  s/\n//
-}
-' >>"$CONFIG_STATUS" || ac_write_fail=1
-rm -f conf$$subs.awk
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-_ACAWK
-cat >>"\$ac_tmp/subs1.awk" <<_ACAWK &&
-  for (key in S) S_is_set[key] = 1
-  FS = ""
-
-}
-{
-  line = $ 0
-  nfields = split(line, field, "@")
-  substed = 0
-  len = length(field[1])
-  for (i = 2; i < nfields; i++) {
-    key = field[i]
-    keylen = length(key)
-    if (S_is_set[key]) {
-      value = S[key]
-      line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3)
-      len += length(value) + length(field[++i])
-      substed = 1
-    } else
-      len += 1 + keylen
-  }
-
-  print line
-}
-
-_ACAWK
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then
-  sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g"
-else
-  cat
-fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \
-  || as_fn_error $? "could not setup config files machinery" "$LINENO" 5
-_ACEOF
-
-# VPATH may cause trouble with some makes, so we remove sole $(srcdir),
-# ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and
-# trailing colons and then remove the whole line if VPATH becomes empty
-# (actually we leave an empty line to preserve line numbers).
-if test "x$srcdir" = x.; then
-  ac_vpsub='/^[	 ]*VPATH[	 ]*=[	 ]*/{
-h
-s///
-s/^/:/
-s/[	 ]*$/:/
-s/:\$(srcdir):/:/g
-s/:\${srcdir}:/:/g
-s/:@srcdir@:/:/g
-s/^:*//
-s/:*$//
-x
-s/\(=[	 ]*\).*/\1/
-G
-s/\n//
-s/^[^=]*=[	 ]*$//
-}'
-fi
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-fi # test -n "$CONFIG_FILES"
-
-# Set up the scripts for CONFIG_HEADERS section.
-# No need to generate them if there are no CONFIG_HEADERS.
-# This happens for instance with './config.status Makefile'.
-if test -n "$CONFIG_HEADERS"; then
-cat >"$ac_tmp/defines.awk" <<\_ACAWK ||
-BEGIN {
-_ACEOF
-
-# Transform confdefs.h into an awk script 'defines.awk', embedded as
-# here-document in config.status, that substitutes the proper values into
-# config.h.in to produce config.h.
-
-# Create a delimiter string that does not exist in confdefs.h, to ease
-# handling of long lines.
-ac_delim='%!_!# '
-for ac_last_try in false false :; do
-  ac_tt=`sed -n "/$ac_delim/p" confdefs.h`
-  if test -z "$ac_tt"; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-
-# For the awk script, D is an array of macro values keyed by name,
-# likewise P contains macro parameters if any.  Preserve backslash
-# newline sequences.
-
-ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]*
-sed -n '
-s/.\{148\}/&'"$ac_delim"'/g
-t rset
-:rset
-s/^[	 ]*#[	 ]*define[	 ][	 ]*/ /
-t def
-d
-:def
-s/\\$//
-t bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3"/p
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2"/p
-d
-:bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3\\\\\\n"\\/p
-t cont
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p
-t cont
-d
-:cont
-n
-s/.\{148\}/&'"$ac_delim"'/g
-t clear
-:clear
-s/\\$//
-t bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/"/p
-d
-:bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p
-b cont
-' <confdefs.h | sed '
-s/'"$ac_delim"'/"\\\
-"/g' >>"$CONFIG_STATUS" || ac_write_fail=1
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-  for (key in D) D_is_set[key] = 1
-  FS = ""
-}
-/^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ {
-  line = \$ 0
-  split(line, arg, " ")
-  if (arg[1] == "#") {
-    defundef = arg[2]
-    mac1 = arg[3]
-  } else {
-    defundef = substr(arg[1], 2)
-    mac1 = arg[2]
-  }
-  split(mac1, mac2, "(") #)
-  macro = mac2[1]
-  prefix = substr(line, 1, index(line, defundef) - 1)
-  if (D_is_set[macro]) {
-    suffix = P[macro] D[macro]
-    while (suffix ~ /[\t ]$/) {
-      suffix = substr(suffix, 1, length(suffix) - 1)
-    }
-    # Preserve the white space surrounding the "#".
-    print prefix "define", macro suffix
-    next
-  } else {
-    # Replace #undef with comments.  This is necessary, for example,
-    # in the case of _POSIX_SOURCE, which is predefined and required
-    # on some systems where configure will not decide to define it.
-    if (defundef == "undef") {
-      print "/*", prefix defundef, macro, "*/"
-      next
-    }
-  }
-}
-{ print }
-_ACAWK
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-  as_fn_error $? "could not setup config headers machinery" "$LINENO" 5
-fi # test -n "$CONFIG_HEADERS"
-
-
-eval set X "  :F $CONFIG_FILES  :H $CONFIG_HEADERS    :C $CONFIG_COMMANDS"
-shift
-for ac_tag
-do
-  case $ac_tag in
-  :[FHLC]) ac_mode=$ac_tag; continue;;
-  esac
-  case $ac_mode$ac_tag in
-  :[FHL]*:*);;
-  :L* | :C*:*) as_fn_error $? "invalid tag '$ac_tag'" "$LINENO" 5;;
-  :[FH]-) ac_tag=-:-;;
-  :[FH]*) ac_tag=$ac_tag:$ac_tag.in;;
-  esac
-  ac_save_IFS=$IFS
-  IFS=:
-  set x $ac_tag
-  IFS=$ac_save_IFS
-  shift
-  ac_file=$1
-  shift
-
-  case $ac_mode in
-  :L) ac_source=$1;;
-  :[FH])
-    ac_file_inputs=
-    for ac_f
-    do
-      case $ac_f in
-      -) ac_f="$ac_tmp/stdin";;
-      *) # Look for the file first in the build tree, then in the source tree
-	 # (if the path is not absolute).  The absolute path cannot be DOS-style,
-	 # because $ac_f cannot contain ':'.
-	 test -f "$ac_f" ||
-	   case $ac_f in
-	   [\\/$]*) false;;
-	   *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";;
-	   esac ||
-	   as_fn_error 1 "cannot find input file: '$ac_f'" "$LINENO" 5;;
-      esac
-      case $ac_f in *\'*) ac_f=`printf '%s\n' "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac
-      as_fn_append ac_file_inputs " '$ac_f'"
-    done
-
-    # Let's still pretend it is 'configure' which instantiates (i.e., don't
-    # use $as_me), people would be surprised to read:
-    #    /* config.h.  Generated by config.status.  */
-    configure_input='Generated from '`
-	  printf '%s\n' "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g'
-	`' by configure.'
-    if test x"$ac_file" != x-; then
-      configure_input="$ac_file.  $configure_input"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5
-printf '%s\n' "$as_me: creating $ac_file" >&6;}
-    fi
-    # Neutralize special characters interpreted by sed in replacement strings.
-    case $configure_input in #(
-    *\&* | *\|* | *\\* )
-       ac_sed_conf_input=`printf '%s\n' "$configure_input" |
-       sed 's/[\\\\&|]/\\\\&/g'`;; #(
-    *) ac_sed_conf_input=$configure_input;;
-    esac
-
-    case $ac_tag in
-    *:-:* | *:-) cat >"$ac_tmp/stdin" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;;
-    esac
-    ;;
-  esac
-
-  ac_dir=`$as_dirname -- "$ac_file" ||
-$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$ac_file" : 'X\(//\)[^/]' \| \
-	 X"$ac_file" : 'X\(//\)$' \| \
-	 X"$ac_file" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$ac_file" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  as_dir="$ac_dir"; as_fn_mkdir_p
-  ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`printf '%s\n' "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`printf '%s\n' "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-
-  case $ac_mode in
-  :F)
-  #
-  # CONFIG_FILE
-  #
-
-  case $INSTALL in
-  [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;;
-  *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;;
-  esac
-  ac_MKDIR_P=$MKDIR_P
-  case $MKDIR_P in
-  [\\/$]* | ?:[\\/]* ) ;;
-  */*) ac_MKDIR_P=$ac_top_build_prefix$MKDIR_P ;;
-  esac
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# If the template does not know about datarootdir, expand it.
-# FIXME: This hack should be removed a few years after 2.60.
-ac_datarootdir_hack=; ac_datarootdir_seen=
-ac_sed_dataroot='
-/datarootdir/ {
-  p
-  q
-}
-/@datadir@/p
-/@docdir@/p
-/@infodir@/p
-/@localedir@/p
-/@mandir@/p'
-case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in
-*datarootdir*) ac_datarootdir_seen=yes;;
-*@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*)
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5
-printf '%s\n' "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;}
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-  ac_datarootdir_hack='
-  s&@datadir@&$datadir&g
-  s&@docdir@&$docdir&g
-  s&@infodir@&$infodir&g
-  s&@localedir@&$localedir&g
-  s&@mandir@&$mandir&g
-  s&\\\${datarootdir}&$datarootdir&g' ;;
-esac
-_ACEOF
-
-# Neutralize VPATH when '$srcdir' = '.'.
-# Shell code in configure.ac might set extrasub.
-# FIXME: do we really want to maintain this feature?
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-ac_sed_extra="$ac_vpsub
-$extrasub
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-:t
-/@[a-zA-Z_][a-zA-Z_0-9]*@/!b
-s|@configure_input@|$ac_sed_conf_input|;t t
-s&@top_builddir@&$ac_top_builddir_sub&;t t
-s&@top_build_prefix@&$ac_top_build_prefix&;t t
-s&@srcdir@&$ac_srcdir&;t t
-s&@abs_srcdir@&$ac_abs_srcdir&;t t
-s&@top_srcdir@&$ac_top_srcdir&;t t
-s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t
-s&@builddir@&$ac_builddir&;t t
-s&@abs_builddir@&$ac_abs_builddir&;t t
-s&@abs_top_builddir@&$ac_abs_top_builddir&;t t
-s&@INSTALL@&$ac_INSTALL&;t t
-s&@MKDIR_P@&$ac_MKDIR_P&;t t
-$ac_datarootdir_hack
-"
-eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \
-  >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-
-test -z "$ac_datarootdir_hack$ac_datarootdir_seen" &&
-  { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } &&
-  { ac_out=`sed -n '/^[	 ]*datarootdir[	 ]*:*=/p' \
-      "$ac_tmp/out"`; test -z "$ac_out"; } &&
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable 'datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&5
-printf '%s\n' "$as_me: WARNING: $ac_file contains a reference to the variable 'datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&2;}
-
-  rm -f "$ac_tmp/stdin"
-  case $ac_file in
-  -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";;
-  *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";;
-  esac \
-  || as_fn_error $? "could not create $ac_file" "$LINENO" 5
- ;;
-  :H)
-  #
-  # CONFIG_HEADER
-  #
-  if test x"$ac_file" != x-; then
-    {
-      printf '%s\n' "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs"
-    } >"$ac_tmp/config.h" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5
-printf '%s\n' "$as_me: $ac_file is unchanged" >&6;}
-    else
-      rm -f "$ac_file"
-      mv "$ac_tmp/config.h" "$ac_file" \
-	|| as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    fi
-  else
-    printf '%s\n' "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \
-      || as_fn_error $? "could not create -" "$LINENO" 5
-  fi
-# Compute "$ac_file"'s index in $config_headers.
-_am_arg="$ac_file"
-_am_stamp_count=1
-for _am_header in $config_headers :; do
-  case $_am_header in
-    $_am_arg | $_am_arg:* )
-      break ;;
-    * )
-      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
-  esac
-done
-echo "timestamp for $_am_arg" >`$as_dirname -- "$_am_arg" ||
-$as_expr X"$_am_arg" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$_am_arg" : 'X\(//\)[^/]' \| \
-	 X"$_am_arg" : 'X\(//\)$' \| \
-	 X"$_am_arg" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$_am_arg" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`/stamp-h$_am_stamp_count
- ;;
-  
-  :C)  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: executing $ac_file commands" >&5
-printf '%s\n' "$as_me: executing $ac_file commands" >&6;}
- ;;
-  esac
-
-
-  case $ac_file$ac_mode in
-    "depfiles":C) test x"$AMDEP_TRUE" != x"" || {
-  # Older Autoconf quotes --file arguments for eval, but not when files
-  # are listed without --file.  Let's play safe and only enable the eval
-  # if we detect the quoting.
-  # TODO: see whether this extra hack can be removed once we start
-  # requiring Autoconf 2.70 or later.
-  case $CONFIG_FILES in @%:@(
-  *\'*) :
-    eval set x "$CONFIG_FILES" ;; @%:@(
-  *) :
-    set x $CONFIG_FILES ;; @%:@(
-  *) :
-     ;;
-esac
-  shift
-  # Used to flag and report bootstrapping failures.
-  am_rc=0
-  for am_mf
-  do
-    # Strip MF so we end up with the name of the file.
-    am_mf=`printf '%s\n' "$am_mf" | sed -e 's/:.*$//'`
-    # Check whether this is an Automake generated Makefile which includes
-    # dependency-tracking related rules and includes.
-    # Grep'ing the whole file directly is not great: AIX grep has a line
-    # limit of 2048, but all sed's we know have understand at least 4000.
-    sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \
-      || continue
-    am_dirpart=`$as_dirname -- "$am_mf" ||
-$as_expr X"$am_mf" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$am_mf" : 'X\(//\)[^/]' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$am_mf" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    am_filepart=`$as_basename -- "$am_mf" ||
-$as_expr X/"$am_mf" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$am_mf" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    { echo "$as_me:$LINENO: cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles" >&5
-   (cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } || am_rc=$?
-  done
-  if test $am_rc -ne 0; then
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "Something went wrong bootstrapping makefile fragments
-    for automatic dependency tracking.  If GNU make was not used, consider
-    re-running the configure script with MAKE=\"gmake\" (or whatever is
-    necessary).  You can also try re-running configure with the
-    '--disable-dependency-tracking' option to at least be able to build
-    the package (albeit without support for automatic dependency tracking).
-See 'config.log' for more details" "$LINENO" 5; }
-  fi
-  { am_dirpart=; unset am_dirpart;}
-  { am_filepart=; unset am_filepart;}
-  { am_mf=; unset am_mf;}
-  { am_rc=; unset am_rc;}
-  rm -f conftest-deps.mk
-}
- ;;
-    "libtool":C) 
-    
-    # See if we are running on zsh, and set the options that allow our
-    # commands through without removal of \ escapes.
-    if test -n "${ZSH_VERSION+set}"; then
-      setopt NO_GLOB_SUBST
-    fi
-
-    cfgfile=${ofile}T
-    trap "$RM \"$cfgfile\"; exit 1" 1 2 15
-    $RM "$cfgfile"
-
-    cat <<_LT_EOF >> "$cfgfile"
-#! $SHELL
-# Generated automatically by $as_me ($PACKAGE) $VERSION
-# NOTE: Changes made to this file will be lost: look at ltmain.sh.
-
-# Provide generalized library-building support services.
-# Written by Gordon Matzigkeit, 1996
-
-# Copyright (C) 2024 Free Software Foundation, Inc.
-# This is free software; see the source for copying conditions.  There is NO
-# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-
-# GNU Libtool is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program or library that is built
-# using GNU Libtool, you may include this file under the  same
-# distribution terms that you use for the rest of that program.
-#
-# GNU Libtool is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-
-# The names of the tagged configurations supported by this script.
-available_tags=''
-
-# Configured defaults for sys_lib_dlsearch_path munging.
-: \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"}
-
-# ### BEGIN LIBTOOL CONFIG
-
-# Which release of libtool.m4 was used?
-macro_version=$macro_version
-macro_revision=$macro_revision
-
-# Whether or not to build shared libraries.
-build_libtool_libs=$enable_shared
-
-# Whether or not to build static libraries.
-build_old_libs=$enable_static
-
-# What type of objects to build.
-pic_mode=$pic_mode
-
-# Whether or not to optimize for fast installation.
-fast_install=$enable_fast_install
-
-# Shared archive member basename,for filename based shared library versioning on AIX.
-shared_archive_member_spec=$shared_archive_member_spec
-
-# Shell to use when invoking shell scripts.
-SHELL=$lt_SHELL
-
-# An echo program that protects backslashes.
-ECHO=$lt_ECHO
-
-# The PATH separator for the build system.
-PATH_SEPARATOR=$lt_PATH_SEPARATOR
-
-# The host system.
-host_alias=$host_alias
-host=$host
-host_os=$host_os
-
-# The build system.
-build_alias=$build_alias
-build=$build
-build_os=$build_os
-
-# A sed program that does not truncate output.
-SED=$lt_SED
-
-# Sed that helps us avoid accidentally triggering echo(1) options like -n.
-Xsed="\$SED -e 1s/^X//"
-
-# A grep program that handles long lines.
-GREP=$lt_GREP
-
-# An ERE matcher.
-EGREP=$lt_EGREP
-
-# A literal string matcher.
-FGREP=$lt_FGREP
-
-# A BSD- or MS-compatible name lister.
-NM=$lt_NM
-
-# Whether we need soft or hard links.
-LN_S=$lt_LN_S
-
-# What is the maximum length of a command?
-max_cmd_len=$max_cmd_len
-
-# Object file suffix (normally "o").
-objext=$ac_objext
-
-# Executable file suffix (normally "").
-exeext=$exeext
-
-# whether the shell understands "unset".
-lt_unset=$lt_unset
-
-# turn spaces into newlines.
-SP2NL=$lt_lt_SP2NL
-
-# turn newlines into spaces.
-NL2SP=$lt_lt_NL2SP
-
-# convert \$build file names to \$host format.
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-
-# convert \$build files to toolchain format.
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-
-# A file(cmd) program that detects file types.
-FILECMD=$lt_FILECMD
-
-# An object symbol dumper.
-OBJDUMP=$lt_OBJDUMP
-
-# Method to check whether dependent libraries are shared objects.
-deplibs_check_method=$lt_deplibs_check_method
-
-# Command to use when deplibs_check_method = "file_magic".
-file_magic_cmd=$lt_file_magic_cmd
-
-# How to find potential files when deplibs_check_method = "file_magic".
-file_magic_glob=$lt_file_magic_glob
-
-# Find potential files using nocaseglob when deplibs_check_method = "file_magic".
-want_nocaseglob=$lt_want_nocaseglob
-
-# DLL creation program.
-DLLTOOL=$lt_DLLTOOL
-
-# Command to associate shared and link libraries.
-sharedlib_from_linklib_cmd=$lt_sharedlib_from_linklib_cmd
-
-# The archiver.
-AR=$lt_AR
-
-# Flags to create an archive (by configure).
-lt_ar_flags=$lt_ar_flags
-
-# Flags to create an archive.
-AR_FLAGS=\@S|@{ARFLAGS-"\@S|@lt_ar_flags"}
-
-# How to feed a file listing to the archiver.
-archiver_list_spec=$lt_archiver_list_spec
-
-# A symbol stripping program.
-STRIP=$lt_STRIP
-
-# Commands used to install an old-style archive.
-RANLIB=$lt_RANLIB
-old_postinstall_cmds=$lt_old_postinstall_cmds
-old_postuninstall_cmds=$lt_old_postuninstall_cmds
-
-# Whether to use a lock for old archive extraction.
-lock_old_archive_extraction=$lock_old_archive_extraction
-
-# A C compiler.
-LTCC=$lt_CC
-
-# LTCC compiler flags.
-LTCFLAGS=$lt_CFLAGS
-
-# Take the output of nm and produce a listing of raw symbols and C names.
-global_symbol_pipe=$lt_lt_cv_sys_global_symbol_pipe
-
-# Transform the output of nm in a proper C declaration.
-global_symbol_to_cdecl=$lt_lt_cv_sys_global_symbol_to_cdecl
-
-# Transform the output of nm into a list of symbols to manually relocate.
-global_symbol_to_import=$lt_lt_cv_sys_global_symbol_to_import
-
-# Transform the output of nm in a C name address pair.
-global_symbol_to_c_name_address=$lt_lt_cv_sys_global_symbol_to_c_name_address
-
-# Transform the output of nm in a C name address pair when lib prefix is needed.
-global_symbol_to_c_name_address_lib_prefix=$lt_lt_cv_sys_global_symbol_to_c_name_address_lib_prefix
-
-# The name lister interface.
-nm_interface=$lt_lt_cv_nm_interface
-
-# Specify filename containing input files for \$NM.
-nm_file_list_spec=$lt_nm_file_list_spec
-
-# The root where to search for dependent libraries,and where our libraries should be installed.
-lt_sysroot=$lt_sysroot
-
-# Command to truncate a binary pipe.
-lt_truncate_bin=$lt_lt_cv_truncate_bin
-
-# The name of the directory that contains temporary libtool files.
-objdir=$objdir
-
-# Used to examine libraries when file_magic_cmd begins with "file".
-MAGIC_CMD=$MAGIC_CMD
-
-# Must we lock files when doing compilation?
-need_locks=$lt_need_locks
-
-# Manifest tool.
-MANIFEST_TOOL=$lt_MANIFEST_TOOL
-
-# Tool to manipulate archived DWARF debug symbol files on Mac OS X.
-DSYMUTIL=$lt_DSYMUTIL
-
-# Tool to change global to local symbols on Mac OS X.
-NMEDIT=$lt_NMEDIT
-
-# Tool to manipulate fat objects and archives on Mac OS X.
-LIPO=$lt_LIPO
-
-# ldd/readelf like tool for Mach-O binaries on Mac OS X.
-OTOOL=$lt_OTOOL
-
-# ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4.
-OTOOL64=$lt_OTOOL64
-
-# Old archive suffix (normally "a").
-libext=$libext
-
-# Shared library suffix (normally ".so").
-shrext_cmds=$lt_shrext_cmds
-
-# The commands to extract the exported symbol list from a shared archive.
-extract_expsyms_cmds=$lt_extract_expsyms_cmds
-
-# Variables whose values should be saved in libtool wrapper scripts and
-# restored at link time.
-variables_saved_for_relink=$lt_variables_saved_for_relink
-
-# Do we need the "lib" prefix for modules?
-need_lib_prefix=$need_lib_prefix
-
-# Do we need a version for libraries?
-need_version=$need_version
-
-# Library versioning type.
-version_type=$version_type
-
-# Shared library runtime path variable.
-runpath_var=$runpath_var
-
-# Shared library path variable.
-shlibpath_var=$shlibpath_var
-
-# Is shlibpath searched before the hard-coded library search path?
-shlibpath_overrides_runpath=$shlibpath_overrides_runpath
-
-# Format of library name prefix.
-libname_spec=$lt_libname_spec
-
-# List of archive names.  First name is the real one, the rest are links.
-# The last name is the one that the linker finds with -lNAME
-library_names_spec=$lt_library_names_spec
-
-# The coded name of the library, if different from the real name.
-soname_spec=$lt_soname_spec
-
-# Permission mode override for installation of shared libraries.
-install_override_mode=$lt_install_override_mode
-
-# Command to use after installation of a shared archive.
-postinstall_cmds=$lt_postinstall_cmds
-
-# Command to use after uninstallation of a shared archive.
-postuninstall_cmds=$lt_postuninstall_cmds
-
-# Commands used to finish a libtool library installation in a directory.
-finish_cmds=$lt_finish_cmds
-
-# As "finish_cmds", except a single script fragment to be evaled but
-# not shown.
-finish_eval=$lt_finish_eval
-
-# Whether we should hardcode library paths into libraries.
-hardcode_into_libs=$hardcode_into_libs
-
-# Compile-time system search path for libraries.
-sys_lib_search_path_spec=$lt_sys_lib_search_path_spec
-
-# Detected run-time system search path for libraries.
-sys_lib_dlsearch_path_spec=$lt_configure_time_dlsearch_path
-
-# Explicit LT_SYS_LIBRARY_PATH set during ./configure time.
-configure_time_lt_sys_library_path=$lt_configure_time_lt_sys_library_path
-
-# Whether dlopen is supported.
-dlopen_support=$enable_dlopen
-
-# Whether dlopen of programs is supported.
-dlopen_self=$enable_dlopen_self
-
-# Whether dlopen of statically linked programs is supported.
-dlopen_self_static=$enable_dlopen_self_static
-
-# Commands to strip libraries.
-old_striplib=$lt_old_striplib
-striplib=$lt_striplib
-
-
-# The linker used to build libraries.
-LD=$lt_LD
-
-# How to create reloadable object files.
-reload_flag=$lt_reload_flag
-reload_cmds=$lt_reload_cmds
-
-# Commands used to build an old-style archive.
-old_archive_cmds=$lt_old_archive_cmds
-
-# A language specific compiler.
-CC=$lt_compiler
-
-# Is the compiler the GNU compiler?
-with_gcc=$GCC
-
-# Compiler flag to turn off builtin functions.
-no_builtin_flag=$lt_lt_prog_compiler_no_builtin_flag
-
-# Additional compiler flags for building library objects.
-pic_flag=$lt_lt_prog_compiler_pic
-
-# How to pass a linker flag through the compiler.
-wl=$lt_lt_prog_compiler_wl
-
-# Compiler flag to prevent dynamic linking.
-link_static_flag=$lt_lt_prog_compiler_static
-
-# Does compiler simultaneously support -c and -o options?
-compiler_c_o=$lt_lt_cv_prog_compiler_c_o
-
-# Whether or not to add -lc for building shared libraries.
-build_libtool_need_lc=$archive_cmds_need_lc
-
-# Whether or not to disallow shared libs when runtime libs are static.
-allow_libtool_libs_with_static_runtimes=$enable_shared_with_static_runtimes
-
-# Compiler flag to allow reflexive dlopens.
-export_dynamic_flag_spec=$lt_export_dynamic_flag_spec
-
-# Compiler flag to generate shared objects directly from archives.
-whole_archive_flag_spec=$lt_whole_archive_flag_spec
-
-# Whether the compiler copes with passing no objects directly.
-compiler_needs_object=$lt_compiler_needs_object
-
-# Create an old-style archive from a shared archive.
-old_archive_from_new_cmds=$lt_old_archive_from_new_cmds
-
-# Create a temporary old-style archive to link instead of a shared archive.
-old_archive_from_expsyms_cmds=$lt_old_archive_from_expsyms_cmds
-
-# Commands used to build a shared archive.
-archive_cmds=$lt_archive_cmds
-archive_expsym_cmds=$lt_archive_expsym_cmds
-
-# Commands used to build a loadable module if different from building
-# a shared archive.
-module_cmds=$lt_module_cmds
-module_expsym_cmds=$lt_module_expsym_cmds
-
-# Whether we are building with GNU ld or not.
-with_gnu_ld=$lt_with_gnu_ld
-
-# Flag that allows shared libraries with undefined symbols to be built.
-allow_undefined_flag=$lt_allow_undefined_flag
-
-# Flag that enforces no undefined symbols.
-no_undefined_flag=$lt_no_undefined_flag
-
-# Flag to hardcode \$libdir into a binary during linking.
-# This must work even if \$libdir does not exist
-hardcode_libdir_flag_spec=$lt_hardcode_libdir_flag_spec
-
-# Whether we need a single "-rpath" flag with a separated argument.
-hardcode_libdir_separator=$lt_hardcode_libdir_separator
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary.
-hardcode_direct=$hardcode_direct
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary and the resulting library dependency is
-# "absolute",i.e. impossible to change by setting \$shlibpath_var if the
-# library is relocated.
-hardcode_direct_absolute=$hardcode_direct_absolute
-
-# Set to "yes" if using the -LDIR flag during linking hardcodes DIR
-# into the resulting binary.
-hardcode_minus_L=$hardcode_minus_L
-
-# Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR
-# into the resulting binary.
-hardcode_shlibpath_var=$hardcode_shlibpath_var
-
-# Set to "yes" if building a shared library automatically hardcodes DIR
-# into the library and all subsequent libraries and executables linked
-# against it.
-hardcode_automatic=$hardcode_automatic
-
-# Set to yes if linker adds runtime paths of dependent libraries
-# to runtime path list.
-inherit_rpath=$inherit_rpath
-
-# Whether libtool must link a program against all its dependency libraries.
-link_all_deplibs=$link_all_deplibs
-
-# Set to "yes" if exported symbols are required.
-always_export_symbols=$always_export_symbols
-
-# The commands to list exported symbols.
-export_symbols_cmds=$lt_export_symbols_cmds
-
-# Symbols that should not be listed in the preloaded symbols.
-exclude_expsyms=$lt_exclude_expsyms
-
-# Symbols that must always be exported.
-include_expsyms=$lt_include_expsyms
-
-# Commands necessary for linking programs (against libraries) with templates.
-prelink_cmds=$lt_prelink_cmds
-
-# Commands necessary for finishing linking programs.
-postlink_cmds=$lt_postlink_cmds
-
-# Specify filename containing input files.
-file_list_spec=$lt_file_list_spec
-
-# How to hardcode a shared library path into an executable.
-hardcode_action=$hardcode_action
-
-# ### END LIBTOOL CONFIG
-
-_LT_EOF
-
-    cat <<'_LT_EOF' >> "$cfgfile"
-
-# ### BEGIN FUNCTIONS SHARED WITH CONFIGURE
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x@S|@2 in
-    x)
-        ;;
-    *:)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\"
-        ;;
-    x:*)
-        eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\"
-        ;;
-    *)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in @S|@*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-
-# ### END FUNCTIONS SHARED WITH CONFIGURE
-
-_LT_EOF
-
-  case $host_os in
-  aix3*)
-    cat <<\_LT_EOF >> "$cfgfile"
-# AIX sometimes has problems with the GCC collect2 program.  For some
-# reason, if we set the COLLECT_NAMES environment variable, the problems
-# vanish in a puff of smoke.
-if test set != "${COLLECT_NAMES+set}"; then
-  COLLECT_NAMES=
-  export COLLECT_NAMES
-fi
-_LT_EOF
-    ;;
-  esac
-
-  
-  
-ltmain=$ac_aux_dir/ltmain.sh
-
-
-  # We use sed instead of cat because bash on DJGPP gets confused if
-  # if finds mixed CR/LF and LF-only lines.  Since sed operates in
-  # text mode, it properly converts lines to CR/LF.  This bash problem
-  # is reportedly fixed, but why not run on old versions too?
-  $SED '$q' "$ltmain" >> "$cfgfile" \
-     || (rm -f "$cfgfile"; exit 1)
-
-   mv -f "$cfgfile" "$ofile" ||
-    (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile")
-  chmod +x "$ofile"
-
- ;;
-
-  esac
-done # for ac_tag
-
-
-as_fn_exit 0
-_ACEOF
-ac_clean_CONFIG_STATUS=
-
-test $ac_write_fail = 0 ||
-  as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5
-
-
-# configure is writing to config.log, and then calls config.status.
-# config.status does its own redirection, appending to config.log.
-# Unfortunately, on DOS this fails, as config.log is still kept open
-# by configure, so config.status won't be able to write to it; its
-# output is simply discarded.  So we exec the FD to /dev/null,
-# effectively closing config.log, so it can be properly (re)opened and
-# appended to by config.status.  When coming back to configure, we
-# need to make the FD available again.
-if test "$no_create" != yes; then
-  ac_cs_success=:
-  case $CONFIG_STATUS in @%:@(
-  -*) :
-    ac_no_opts=-- ;; @%:@(
-  *) :
-    ac_no_opts= ;;
-esac
-  ac_config_status_args=
-  test "$silent" = yes &&
-    ac_config_status_args="$ac_config_status_args --quiet"
-  exec 5>/dev/null
-  $SHELL $ac_no_opts "$CONFIG_STATUS" $ac_config_status_args ||
-    ac_cs_success=false
-  exec 5>>config.log
-  # Use ||, not &&, to avoid exiting from the if with $? = 1, which
-  # would make configure fail if this is the last instruction.
-  $ac_cs_success || as_fn_exit 1
-fi
-if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5
-printf '%s\n' "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
-fi
-
diff --git a/experiments/wasm-gui/third_party/libXext/autom4te.cache/output.2 b/experiments/wasm-gui/third_party/libXext/autom4te.cache/output.2
deleted file mode 100644
index c0c8c80c2..000000000
--- a/experiments/wasm-gui/third_party/libXext/autom4te.cache/output.2
+++ /dev/null
@@ -1,24109 +0,0 @@
-@%:@! /bin/sh
-@%:@ Guess values for system-dependent variables and create Makefiles.
-@%:@ Generated by GNU Autoconf 2.73 for libXext 1.3.7.
-@%:@
-@%:@ Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>.
-@%:@ 
-@%:@ 
-@%:@ Copyright (C) 1992-1996, 1998-2017, 2020-2026 Free Software Foundation,
-@%:@ Inc.
-@%:@ 
-@%:@ 
-@%:@ This configure script is free software; the Free Software Foundation
-@%:@ gives unlimited permission to copy, distribute and modify it.
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else case e in @%:@(
-  e) case `(set -o) 2>/dev/null` in @%:@(
-  *posix*) :
-    set -o posix ;; @%:@(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-
-
-
-# Reset variables that may have inherited troublesome values from
-# the environment.
-
-# IFS needs to be set, to space, tab, and newline, in precisely that order.
-# (If _AS_PATH_WALK were called with IFS unset, it would have the
-# side effect of setting IFS to empty, thus disabling word splitting.)
-# Quoting is to prevent editors from complaining about space-tab.
-as_nl='
-'
-export as_nl
-IFS=" ""	$as_nl"
-
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# Ensure predictable behavior from utilities with locale-dependent output.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# We cannot yet rely on "unset" to work, but we need these variables
-# to be unset--not just set to an empty or harmless value--now, to
-# avoid bugs in old shells (e.g. pre-3.0 UWIN ksh).  This construct
-# also avoids known problems related to "unset" and subshell syntax
-# in other old shells (e.g. bash 2.01 and pdksh 5.2.14).
-for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH
-do eval test \${$as_var+y} \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-
-# Ensure that fds 0, 1, and 2 are open.
-if (exec 3>&0) 2>/dev/null; then :; else exec 0</dev/null; fi
-if (exec 3>&1) 2>/dev/null; then :; else exec 1>/dev/null; fi
-if (exec 3>&2)            ; then :; else exec 2>/dev/null; fi
-
-# The user is always right.
-if ${PATH_SEPARATOR+false} :; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in @%:@((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    test -r "$as_dir$0" && as_myself=$as_dir$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as 'sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  printf '%s\n' "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-
-# Use a proper internal environment variable to ensure we don't fall
-  # into an infinite loop, continuously re-executing ourselves.
-  if test x"${_as_can_reexec}" != xno && test "x$CONFIG_SHELL" != x; then
-    _as_can_reexec=no; export _as_can_reexec;
-    # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in @%:@ ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-case $@%:@ in @%:@ ((
-  0) exec $CONFIG_SHELL $as_opts "$as_myself" ;;
-  *) exec $CONFIG_SHELL $as_opts "$as_myself" "$@" ;;
-esac
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed 'exec'.
-printf '%s\n' "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-  fi
-  # We don't want this to propagate to other subprocesses.
-          { _as_can_reexec=; unset _as_can_reexec;}
-if test "x$CONFIG_SHELL" = x; then
-  as_bourne_compatible="if test \${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '\${1+\"\$@\"}'='\"\$@\"'
-  setopt NO_GLOB_SUBST
-else case e in @%:@(
-  e) case \`(set -o) 2>/dev/null\` in @%:@(
-  *posix*) :
-    set -o posix ;; @%:@(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-"
-  as_required="as_fn_return () { (exit \$1); }
-as_fn_success () { as_fn_return 0; }
-as_fn_failure () { as_fn_return 1; }
-as_fn_ret_success () { return 0; }
-as_fn_ret_failure () { return 1; }
-
-exitcode=0
-as_fn_success || { exitcode=1; echo as_fn_success failed.; }
-as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; }
-as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; }
-as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; }
-if ( set x; as_fn_ret_success y && test x = \"\$1\" )
-then :
-  
-else case e in @%:@(
-  e) exitcode=1; echo positional parameters were not saved. ;;
-esac
-fi
-test x\$exitcode = x0 || exit 1
-blah=\$(echo \$(echo blah))
-test x\"\$blah\" = xblah || exit 1
-test -x / || exit 1"
-  as_suggested="  as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO
-  as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO
-  eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" &&
-  test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1
-
-  test -n \"\${ZSH_VERSION+set}\${BASH_VERSION+set}\" || (
-    ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-    ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO
-    ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO
-    PATH=/empty FPATH=/empty; export PATH FPATH
-    test \"X\`printf %s \$ECHO\`\" = \"X\$ECHO\" \\
-      || test \"X\`print -r -- \$ECHO\`\" = \"X\$ECHO\" ) || exit 1
-test \$(( 1 + 1 )) = 2 || exit 1"
-  if (eval "$as_required") 2>/dev/null
-then :
-  as_have_required=yes
-else case e in @%:@(
-  e) as_have_required=no ;;
-esac
-fi
-  if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null
-then :
-  
-else case e in @%:@(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-  as_found=:
-  case $as_dir in @%:@(
-	 /*)
-	   for as_base in sh bash ksh sh5; do
-	     # Try only shells that exist, to save several forks.
-	     as_shell=$as_dir$as_base
-	     if { test -f "$as_shell" || test -f "$as_shell.exe"; } &&
-		    as_run=a "$as_shell" -c "$as_bourne_compatible""$as_required" 2>/dev/null
-then :
-  CONFIG_SHELL=$as_shell as_have_required=yes
-		   if as_run=a "$as_shell" -c "$as_bourne_compatible""$as_suggested" 2>/dev/null
-then :
-  break 2
-fi
-fi
-	   done;;
-       esac
-  as_found=false
-done
-IFS=$as_save_IFS
-if $as_found
-then :
-  
-else case e in @%:@(
-  e) if { test -f "$SHELL" || test -f "$SHELL.exe"; } &&
-	      as_run=a "$SHELL" -c "$as_bourne_compatible""$as_required" 2>/dev/null
-then :
-  CONFIG_SHELL=$SHELL as_have_required=yes
-fi ;;
-esac
-fi
-
-
-      if test "x$CONFIG_SHELL" != x
-then :
-  export CONFIG_SHELL
-             # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in @%:@ ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-case $@%:@ in @%:@ ((
-  0) exec $CONFIG_SHELL $as_opts "$as_myself" ;;
-  *) exec $CONFIG_SHELL $as_opts "$as_myself" "$@" ;;
-esac
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed 'exec'.
-printf '%s\n' "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-fi
-
-    if test x$as_have_required = xno
-then :
-  printf '%s\n' "$0: This script requires a shell more modern than all"
-  printf '%s\n' "$0: the shells that I found on your system."
-  if test ${ZSH_VERSION+y} ; then
-    printf '%s\n' "$0: In particular, zsh $ZSH_VERSION has bugs and should"
-    printf '%s\n' "$0: be upgraded to zsh 4.3.4 or later."
-  else
-    printf '%s\n' "$0: Please tell bug-autoconf@gnu.org and
-$0: https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues
-$0: about your system, including any error possibly output
-$0: before this message. Then install a modern shell, or
-$0: manually run the script under such a shell if you do
-$0: have one."
-  fi
-  exit 1
-fi ;;
-esac
-fi
-fi
-SHELL=${CONFIG_SHELL-/bin/sh}
-export SHELL
-# Unset more variables known to interfere with behavior of common tools.
-CLICOLOR_FORCE= GREP_OPTIONS=
-unset CLICOLOR_FORCE GREP_OPTIONS
-
-## --------------------- ##
-## M4sh Shell Functions. ##
-## --------------------- ##
-@%:@ as_fn_unset VAR
-@%:@ ---------------
-@%:@ Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-
-@%:@ as_fn_set_status STATUS
-@%:@ -----------------------
-@%:@ Set @S|@? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} @%:@ as_fn_set_status
-
-@%:@ as_fn_exit STATUS
-@%:@ -----------------
-@%:@ Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} @%:@ as_fn_exit
-
-@%:@ as_fn_mkdir_p
-@%:@ -------------
-@%:@ Create "@S|@as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`printf '%s\n' "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} @%:@ as_fn_mkdir_p
-
-@%:@ as_fn_executable_p FILE
-@%:@ -----------------------
-@%:@ Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} @%:@ as_fn_executable_p
-@%:@ as_fn_append VAR VALUE
-@%:@ ----------------------
-@%:@ Append the text in VALUE to the end of the definition contained in VAR. Take
-@%:@ advantage of any shell optimizations that allow amortized linear growth over
-@%:@ repeated appends, instead of the typical quadratic growth present in naive
-@%:@ implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null
-then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else case e in @%:@(
-  e) as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  } ;;
-esac
-fi # as_fn_append
-
-@%:@ as_fn_arith ARG...
-@%:@ ------------------
-@%:@ Perform arithmetic evaluation on the ARGs, and store the result in the
-@%:@ global @S|@as_val. Take advantage of shells that can avoid forks. The arguments
-@%:@ must be portable across @S|@(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null
-then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else case e in @%:@(
-  e) as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  } ;;
-esac
-fi # as_fn_arith
-
-
-@%:@ as_fn_error STATUS ERROR [LINENO LOG_FD]
-@%:@ ----------------------------------------
-@%:@ Output "`basename @S|@0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-@%:@ provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-@%:@ script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  printf '%s\n' "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} @%:@ as_fn_error
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-
-  as_lineno_1=$LINENO as_lineno_1a=$LINENO
-  as_lineno_2=$LINENO as_lineno_2a=$LINENO
-  eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" &&
-  test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || {
-  # Blame Lee E. McMahon (1931-1989) for sed's syntax.  :-)
-  sed -n '
-    p
-    /[$]LINENO/=
-  ' <$as_myself |
-    sed '
-      t clear
-      :clear
-      s/[$]LINENO.*/&-/
-      t lineno
-      b
-      :lineno
-      N
-      :loop
-      s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/
-      t loop
-      s/-\n.*//
-    ' >$as_me.lineno &&
-  chmod +x "$as_me.lineno" ||
-    { printf '%s\n' "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; }
-
-  # If we had to re-execute with $CONFIG_SHELL, we're ensured to have
-  # already done that, so ensure we don't try to do so again and fall
-  # in an infinite loop.  This has already happened in practice.
-  _as_can_reexec=no; export _as_can_reexec
-  # Don't try to exec as it changes $[0], causing all sort of problems
-  # (the dirname of $[0] is not the place where we might find the
-  # original and so on.  Autoconf is especially sensitive to this).
-  . "./$as_me.lineno"
-  # Exit status is that of the last command.
-  exit
-}
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both 'ln -s file dir' and 'ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; 'ln -s' creates a wrapper executable.
-    # In both cases, we have to default to 'cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_sed_cpp="y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g"
-as_tr_cpp="eval sed '$as_sed_cpp'" # deprecated
-
-# Sed expression to map a string onto a valid variable name.
-as_sed_sh="y%*+%pp%;s%[^_$as_cr_alnum]%_%g"
-as_tr_sh="eval sed '$as_sed_sh'" # deprecated
-
-SHELL=${CONFIG_SHELL-/bin/sh}
-
-as_awk_strverscmp='
-  # Use only awk features that work with 7th edition Unix awk (1978).
-  # My, what an old awk you have, Mr. Solaris!
-  END {
-    while (length(v1) && length(v2)) {
-      # Set d1 to be the next thing to compare from v1, and likewise for d2.
-      # Normally this is a single character, but if v1 and v2 contain digits,
-      # compare them as integers and fractions as strverscmp does.
-      if (v1 ~ /^[0-9]/ && v2 ~ /^[0-9]/) {
-	# Split v1 and v2 into their leading digit string components d1 and d2,
-	# and advance v1 and v2 past the leading digit strings.
-	for (len1 = 1; substr(v1, len1 + 1) ~ /^[0-9]/; len1++) continue
-	for (len2 = 1; substr(v2, len2 + 1) ~ /^[0-9]/; len2++) continue
-	d1 = substr(v1, 1, len1); v1 = substr(v1, len1 + 1)
-	d2 = substr(v2, 1, len2); v2 = substr(v2, len2 + 1)
-	if (d1 ~ /^0/) {
-	  if (d2 ~ /^0/) {
-	    # Compare two fractions.
-	    while (d1 ~ /^0/ && d2 ~ /^0/) {
-	      d1 = substr(d1, 2); len1--
-	      d2 = substr(d2, 2); len2--
-	    }
-	    if (len1 != len2 && ! (len1 && len2 && substr(d1, 1, 1) == substr(d2, 1, 1))) {
-	      # The two components differ in length, and the common prefix
-	      # contains only leading zeros.  Consider the longer to be less.
-	      d1 = -len1
-	      d2 = -len2
-	    } else {
-	      # Otherwise, compare as strings.
-	      d1 = "x" d1
-	      d2 = "x" d2
-	    }
-	  } else {
-	    # A fraction is less than an integer.
-	    exit 1
-	  }
-	} else {
-	  if (d2 ~ /^0/) {
-	    # An integer is greater than a fraction.
-	    exit 2
-	  } else {
-	    # Compare two integers.
-	    d1 += 0
-	    d2 += 0
-	  }
-	}
-      } else {
-	# The normal case, without worrying about digits.
-	d1 = substr(v1, 1, 1); v1 = substr(v1, 2)
-	d2 = substr(v2, 1, 1); v2 = substr(v2, 2)
-      }
-      if (d1 < d2) exit 1
-      if (d1 > d2) exit 2
-    }
-    # Beware Solaris 11 /usr/xgp4/bin/awk, which mishandles some
-    # comparisons of empty strings to integers.  For example,
-    # LC_ALL=C /usr/xpg4/bin/awk "BEGIN {if (-1 < \"\") print \"a\"}"
-    # prints "a".
-    if (length(v2)) exit 1
-    if (length(v1)) exit 2
-  }
-'
-
-test -n "$DJDIR" || exec 7<&0 </dev/null
-exec 6>&1
-
-# Name of the host.
-# hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status,
-# so uname gets run too.
-ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q`
-
-#
-# Initializations.
-#
-ac_default_prefix=/usr/local
-ac_clean_CONFIG_STATUS=
-ac_clean_files=
-ac_config_libobj_dir=.
-LIB@&t@OBJS=
-cross_compiling=no
-subdirs=
-MFLAGS=
-MAKEFLAGS=
-
-# Identity of this package.
-PACKAGE_NAME='libXext'
-PACKAGE_TARNAME='libXext'
-PACKAGE_VERSION='1.3.7'
-PACKAGE_STRING='libXext 1.3.7'
-PACKAGE_BUGREPORT='https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues'
-PACKAGE_URL=''
-
-ac_unique_file="Makefile.am"
-# Factoring default headers for most tests.
-ac_includes_default="\
-#include <stddef.h>
-#ifdef HAVE_STDIO_H
-# include <stdio.h>
-#endif
-#ifdef HAVE_STDLIB_H
-# include <stdlib.h>
-#endif
-#ifdef HAVE_STRING_H
-# include <string.h>
-#endif
-#ifdef HAVE_INTTYPES_H
-# include <inttypes.h>
-#endif
-#ifdef HAVE_STDINT_H
-# include <stdint.h>
-#endif
-#ifdef HAVE_STRINGS_H
-# include <strings.h>
-#endif
-#ifdef HAVE_SYS_TYPES_H
-# include <sys/types.h>
-#endif
-#ifdef HAVE_SYS_STAT_H
-# include <sys/stat.h>
-#endif
-#ifdef HAVE_UNISTD_H
-# include <unistd.h>
-#endif"
-
-ac_header_c_list=
-ac_subst_vars='am__EXEEXT_FALSE
-am__EXEEXT_TRUE
-LTLIBOBJS
-MAKE_LINT_LIB_FALSE
-MAKE_LINT_LIB_TRUE
-LINTLIB
-LINT_FALSE
-LINT_TRUE
-LINT_FLAGS
-LINT
-LIB@&t@OBJS
-XEXT_LIBS
-XEXT_CFLAGS
-XEXT_SOREV
-XTMALLOC_ZERO_CFLAGS
-XMALLOC_ZERO_CFLAGS
-MALLOC_ZERO_CFLAGS
-HAVE_STYLESHEETS_FALSE
-HAVE_STYLESHEETS_TRUE
-XSL_STYLESHEET
-STYLESHEET_SRCDIR
-XORG_SGML_PATH
-HAVE_XSLTPROC_FALSE
-HAVE_XSLTPROC_TRUE
-XSLTPROC
-HAVE_FOP_FALSE
-HAVE_FOP_TRUE
-FOP
-HAVE_XMLTO_FALSE
-HAVE_XMLTO_TRUE
-HAVE_XMLTO_TEXT_FALSE
-HAVE_XMLTO_TEXT_TRUE
-XMLTO
-ENABLE_SPECS_FALSE
-ENABLE_SPECS_TRUE
-MAN_SUBSTS
-XORG_MAN_PAGE
-ADMIN_MAN_DIR
-DRIVER_MAN_DIR
-MISC_MAN_DIR
-FILE_MAN_DIR
-LIB_MAN_DIR
-APP_MAN_DIR
-ADMIN_MAN_SUFFIX
-DRIVER_MAN_SUFFIX
-MISC_MAN_SUFFIX
-FILE_MAN_SUFFIX
-LIB_MAN_SUFFIX
-APP_MAN_SUFFIX
-INSTALL_CMD
-PKG_CONFIG_LIBDIR
-PKG_CONFIG_PATH
-PKG_CONFIG
-CHANGELOG_CMD
-STRICT_CFLAGS
-CWARNFLAGS
-BASE_CFLAGS
-LT_SYS_LIBRARY_PATH
-OTOOL64
-OTOOL
-LIPO
-NMEDIT
-DSYMUTIL
-MANIFEST_TOOL
-RANLIB
-ac_ct_AR
-AR
-DLLTOOL
-OBJDUMP
-FILECMD
-LN_S
-NM
-ac_ct_DUMPBIN
-DUMPBIN
-LD
-FGREP
-EGREP
-GREP
-SED
-host_os
-host_vendor
-host_cpu
-host
-build_os
-build_vendor
-build_cpu
-build
-LIBTOOL
-am__xargs_n
-am__rm_f_notfound
-AM_BACKSLASH
-AM_DEFAULT_VERBOSITY
-AM_DEFAULT_V
-AM_V
-CSCOPE
-ETAGS
-CTAGS
-am__fastdepCC_FALSE
-am__fastdepCC_TRUE
-CCDEPMODE
-am__nodep
-AMDEPBACKSLASH
-AMDEP_FALSE
-AMDEP_TRUE
-am__include
-DEPDIR
-am__untar
-am__tar
-AMTAR
-am__leading_dot
-SET_MAKE
-AWK
-mkdir_p
-MKDIR_P
-INSTALL_STRIP_PROGRAM
-STRIP
-install_sh
-MAKEINFO
-AUTOHEADER
-AUTOMAKE
-AUTOCONF
-ACLOCAL
-VERSION
-PACKAGE
-CYGPATH_W
-am__isrc
-INSTALL_DATA
-INSTALL_SCRIPT
-INSTALL_PROGRAM
-OBJEXT
-EXEEXT
-ac_ct_CC
-CPPFLAGS
-LDFLAGS
-CFLAGS
-CC
-ECHO_T
-ECHO_N
-ECHO_C
-target_alias
-host_alias
-build_alias
-LIBS
-DEFS
-mandir
-localedir
-libdir
-psdir
-pdfdir
-dvidir
-htmldir
-infodir
-docdir
-oldincludedir
-includedir
-runstatedir
-localstatedir
-sharedstatedir
-sysconfdir
-datadir
-datarootdir
-libexecdir
-sbindir
-bindir
-program_transform_name
-prefix
-exec_prefix
-PACKAGE_URL
-PACKAGE_BUGREPORT
-PACKAGE_STRING
-PACKAGE_VERSION
-PACKAGE_TARNAME
-PACKAGE_NAME
-PATH_SEPARATOR
-SHELL
-am__quote'
-ac_subst_files=''
-ac_user_opts='
-enable_option_checking
-enable_dependency_tracking
-enable_silent_rules
-enable_shared
-enable_static
-enable_pic
-with_pic
-enable_fast_install
-enable_aix_soname
-with_aix_soname
-with_gnu_ld
-with_sysroot
-enable_libtool_lock
-enable_selective_werror
-enable_strict_compilation
-enable_specs
-with_xmlto
-with_fop
-with_xsltproc
-enable_malloc0returnsnull
-with_lint
-enable_lint_library
-'
-      ac_precious_vars='build_alias
-host_alias
-target_alias
-CC
-CFLAGS
-LDFLAGS
-LIBS
-CPPFLAGS
-LT_SYS_LIBRARY_PATH
-PKG_CONFIG
-PKG_CONFIG_PATH
-PKG_CONFIG_LIBDIR
-XMLTO
-FOP
-XSLTPROC
-XEXT_CFLAGS
-XEXT_LIBS
-LINT
-LINT_FLAGS'
-
-
-# Initialize some variables set by options.
-ac_init_help=
-ac_init_version=false
-ac_unrecognized_opts=
-ac_unrecognized_sep=
-# The variables have the same names as the options, with
-# dashes changed to underlines.
-cache_file=/dev/null
-exec_prefix=NONE
-no_create=
-no_recursion=
-prefix=NONE
-program_prefix=NONE
-program_suffix=NONE
-program_transform_name=s,x,x,
-silent=
-site=
-srcdir=
-verbose=
-x_includes=NONE
-x_libraries=NONE
-
-# Installation directory options.
-# These are left unexpanded so users can "make install exec_prefix=/foo"
-# and all the variables that are supposed to be based on exec_prefix
-# by default will actually change.
-# Use braces instead of parens because sh, perl, etc. also accept them.
-# (The list follows the same order as the GNU Coding Standards.)
-bindir='${exec_prefix}/bin'
-sbindir='${exec_prefix}/sbin'
-libexecdir='${exec_prefix}/libexec'
-datarootdir='${prefix}/share'
-datadir='${datarootdir}'
-sysconfdir='${prefix}/etc'
-sharedstatedir='${prefix}/com'
-localstatedir='${prefix}/var'
-runstatedir='${localstatedir}/run'
-includedir='${prefix}/include'
-oldincludedir='/usr/include'
-docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
-infodir='${datarootdir}/info'
-htmldir='${docdir}'
-dvidir='${docdir}'
-pdfdir='${docdir}'
-psdir='${docdir}'
-libdir='${exec_prefix}/lib'
-localedir='${datarootdir}/locale'
-mandir='${datarootdir}/man'
-
-ac_prev=
-ac_dashdash=
-for ac_option
-do
-  # If the previous option needs an argument, assign it.
-  if test -n "$ac_prev"; then
-    eval $ac_prev=\$ac_option
-    ac_prev=
-    continue
-  fi
-
-  case $ac_option in
-  *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;;
-  *=)   ac_optarg= ;;
-  *)    ac_optarg=yes ;;
-  esac
-
-  case $ac_dashdash$ac_option in
-  --)
-    ac_dashdash=yes ;;
-
-  -bindir | --bindir | --bindi | --bind | --bin | --bi)
-    ac_prev=bindir ;;
-  -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*)
-    bindir=$ac_optarg ;;
-
-  -build | --build | --buil | --bui | --bu)
-    ac_prev=build_alias ;;
-  -build=* | --build=* | --buil=* | --bui=* | --bu=*)
-    build_alias=$ac_optarg ;;
-
-  -cache-file | --cache-file | --cache-fil | --cache-fi \
-  | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c)
-    ac_prev=cache_file ;;
-  -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \
-  | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*)
-    cache_file=$ac_optarg ;;
-
-  --config-cache | -C)
-    cache_file=config.cache ;;
-
-  -datadir | --datadir | --datadi | --datad)
-    ac_prev=datadir ;;
-  -datadir=* | --datadir=* | --datadi=* | --datad=*)
-    datadir=$ac_optarg ;;
-
-  -datarootdir | --datarootdir | --datarootdi | --datarootd | --dataroot \
-  | --dataroo | --dataro | --datar)
-    ac_prev=datarootdir ;;
-  -datarootdir=* | --datarootdir=* | --datarootdi=* | --datarootd=* \
-  | --dataroot=* | --dataroo=* | --dataro=* | --datar=*)
-    datarootdir=$ac_optarg ;;
-
-  -disable-* | --disable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=no ;;
-
-  -docdir | --docdir | --docdi | --doc | --do)
-    ac_prev=docdir ;;
-  -docdir=* | --docdir=* | --docdi=* | --doc=* | --do=*)
-    docdir=$ac_optarg ;;
-
-  -dvidir | --dvidir | --dvidi | --dvid | --dvi | --dv)
-    ac_prev=dvidir ;;
-  -dvidir=* | --dvidir=* | --dvidi=* | --dvid=* | --dvi=* | --dv=*)
-    dvidir=$ac_optarg ;;
-
-  -enable-* | --enable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=\$ac_optarg ;;
-
-  -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \
-  | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \
-  | --exec | --exe | --ex)
-    ac_prev=exec_prefix ;;
-  -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \
-  | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \
-  | --exec=* | --exe=* | --ex=*)
-    exec_prefix=$ac_optarg ;;
-
-  -gas | --gas | --ga | --g)
-    # Obsolete; use --with-gas.
-    with_gas=yes ;;
-
-  -help | --help | --hel | --he | -h)
-    ac_init_help=long ;;
-  -help=r* | --help=r* | --hel=r* | --he=r* | -hr*)
-    ac_init_help=recursive ;;
-  -help=s* | --help=s* | --hel=s* | --he=s* | -hs*)
-    ac_init_help=short ;;
-
-  -host | --host | --hos | --ho)
-    ac_prev=host_alias ;;
-  -host=* | --host=* | --hos=* | --ho=*)
-    host_alias=$ac_optarg ;;
-
-  -htmldir | --htmldir | --htmldi | --htmld | --html | --htm | --ht)
-    ac_prev=htmldir ;;
-  -htmldir=* | --htmldir=* | --htmldi=* | --htmld=* | --html=* | --htm=* \
-  | --ht=*)
-    htmldir=$ac_optarg ;;
-
-  -includedir | --includedir | --includedi | --included | --include \
-  | --includ | --inclu | --incl | --inc)
-    ac_prev=includedir ;;
-  -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \
-  | --includ=* | --inclu=* | --incl=* | --inc=*)
-    includedir=$ac_optarg ;;
-
-  -infodir | --infodir | --infodi | --infod | --info | --inf)
-    ac_prev=infodir ;;
-  -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*)
-    infodir=$ac_optarg ;;
-
-  -libdir | --libdir | --libdi | --libd)
-    ac_prev=libdir ;;
-  -libdir=* | --libdir=* | --libdi=* | --libd=*)
-    libdir=$ac_optarg ;;
-
-  -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \
-  | --libexe | --libex | --libe)
-    ac_prev=libexecdir ;;
-  -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \
-  | --libexe=* | --libex=* | --libe=*)
-    libexecdir=$ac_optarg ;;
-
-  -localedir | --localedir | --localedi | --localed | --locale)
-    ac_prev=localedir ;;
-  -localedir=* | --localedir=* | --localedi=* | --localed=* | --locale=*)
-    localedir=$ac_optarg ;;
-
-  -localstatedir | --localstatedir | --localstatedi | --localstated \
-  | --localstate | --localstat | --localsta | --localst | --locals)
-    ac_prev=localstatedir ;;
-  -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \
-  | --localstate=* | --localstat=* | --localsta=* | --localst=* | --locals=*)
-    localstatedir=$ac_optarg ;;
-
-  -mandir | --mandir | --mandi | --mand | --man | --ma | --m)
-    ac_prev=mandir ;;
-  -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*)
-    mandir=$ac_optarg ;;
-
-  -nfp | --nfp | --nf)
-    # Obsolete; use --without-fp.
-    with_fp=no ;;
-
-  -no-create | --no-create | --no-creat | --no-crea | --no-cre \
-  | --no-cr | --no-c | -n)
-    no_create=yes ;;
-
-  -no-recursion | --no-recursion | --no-recursio | --no-recursi \
-  | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r)
-    no_recursion=yes ;;
-
-  -oldincludedir | --oldincludedir | --oldincludedi | --oldincluded \
-  | --oldinclude | --oldinclud | --oldinclu | --oldincl | --oldinc \
-  | --oldin | --oldi | --old | --ol | --o)
-    ac_prev=oldincludedir ;;
-  -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \
-  | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \
-  | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*)
-    oldincludedir=$ac_optarg ;;
-
-  -prefix | --prefix | --prefi | --pref | --pre | --pr | --p)
-    ac_prev=prefix ;;
-  -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*)
-    prefix=$ac_optarg ;;
-
-  -program-prefix | --program-prefix | --program-prefi | --program-pref \
-  | --program-pre | --program-pr | --program-p)
-    ac_prev=program_prefix ;;
-  -program-prefix=* | --program-prefix=* | --program-prefi=* \
-  | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*)
-    program_prefix=$ac_optarg ;;
-
-  -program-suffix | --program-suffix | --program-suffi | --program-suff \
-  | --program-suf | --program-su | --program-s)
-    ac_prev=program_suffix ;;
-  -program-suffix=* | --program-suffix=* | --program-suffi=* \
-  | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*)
-    program_suffix=$ac_optarg ;;
-
-  -program-transform-name | --program-transform-name \
-  | --program-transform-nam | --program-transform-na \
-  | --program-transform-n | --program-transform- \
-  | --program-transform | --program-transfor \
-  | --program-transfo | --program-transf \
-  | --program-trans | --program-tran \
-  | --progr-tra | --program-tr | --program-t)
-    ac_prev=program_transform_name ;;
-  -program-transform-name=* | --program-transform-name=* \
-  | --program-transform-nam=* | --program-transform-na=* \
-  | --program-transform-n=* | --program-transform-=* \
-  | --program-transform=* | --program-transfor=* \
-  | --program-transfo=* | --program-transf=* \
-  | --program-trans=* | --program-tran=* \
-  | --progr-tra=* | --program-tr=* | --program-t=*)
-    program_transform_name=$ac_optarg ;;
-
-  -pdfdir | --pdfdir | --pdfdi | --pdfd | --pdf | --pd)
-    ac_prev=pdfdir ;;
-  -pdfdir=* | --pdfdir=* | --pdfdi=* | --pdfd=* | --pdf=* | --pd=*)
-    pdfdir=$ac_optarg ;;
-
-  -psdir | --psdir | --psdi | --psd | --ps)
-    ac_prev=psdir ;;
-  -psdir=* | --psdir=* | --psdi=* | --psd=* | --ps=*)
-    psdir=$ac_optarg ;;
-
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil)
-    silent=yes ;;
-
-  -runstatedir | --runstatedir | --runstatedi | --runstated \
-  | --runstate | --runstat | --runsta | --runst | --runs \
-  | --run | --ru | --r)
-    ac_prev=runstatedir ;;
-  -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \
-  | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \
-  | --run=* | --ru=* | --r=*)
-    runstatedir=$ac_optarg ;;
-
-  -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
-    ac_prev=sbindir ;;
-  -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
-  | --sbi=* | --sb=*)
-    sbindir=$ac_optarg ;;
-
-  -sharedstatedir | --sharedstatedir | --sharedstatedi \
-  | --sharedstated | --sharedstate | --sharedstat | --sharedsta \
-  | --sharedst | --shareds | --shared | --share | --shar \
-  | --sha | --sh)
-    ac_prev=sharedstatedir ;;
-  -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \
-  | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \
-  | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \
-  | --sha=* | --sh=*)
-    sharedstatedir=$ac_optarg ;;
-
-  -site | --site | --sit)
-    ac_prev=site ;;
-  -site=* | --site=* | --sit=*)
-    site=$ac_optarg ;;
-
-  -srcdir | --srcdir | --srcdi | --srcd | --src | --sr)
-    ac_prev=srcdir ;;
-  -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*)
-    srcdir=$ac_optarg ;;
-
-  -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \
-  | --syscon | --sysco | --sysc | --sys | --sy)
-    ac_prev=sysconfdir ;;
-  -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \
-  | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*)
-    sysconfdir=$ac_optarg ;;
-
-  -target | --target | --targe | --targ | --tar | --ta | --t)
-    ac_prev=target_alias ;;
-  -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*)
-    target_alias=$ac_optarg ;;
-
-  -v | -verbose | --verbose | --verbos | --verbo | --verb)
-    verbose=yes ;;
-
-  -version | --version | --versio | --versi | --vers | -V)
-    ac_init_version=: ;;
-
-  -with-* | --with-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=\$ac_optarg ;;
-
-  -without-* | --without-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=no ;;
-
-  --x)
-    # Obsolete; use --with-x.
-    with_x=yes ;;
-
-  -x-includes | --x-includes | --x-include | --x-includ | --x-inclu \
-  | --x-incl | --x-inc | --x-in | --x-i)
-    ac_prev=x_includes ;;
-  -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \
-  | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*)
-    x_includes=$ac_optarg ;;
-
-  -x-libraries | --x-libraries | --x-librarie | --x-librari \
-  | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l)
-    ac_prev=x_libraries ;;
-  -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \
-  | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*)
-    x_libraries=$ac_optarg ;;
-
-  -*) as_fn_error $? "unrecognized option: '$ac_option'
-Try '$0 --help' for more information"
-    ;;
-
-  *=*)
-    ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='`
-    # Reject names that are not valid shell variable names.
-    case $ac_envvar in #(
-      '' | [0-9]* | *[!_$as_cr_alnum]* )
-      as_fn_error $? "invalid variable name: '$ac_envvar'" ;;
-    esac
-    eval $ac_envvar=\$ac_optarg
-    export $ac_envvar ;;
-
-  *)
-    # FIXME: should be removed in autoconf 3.0.
-    printf '%s\n' "$as_me: WARNING: you should use --build, --host, --target" >&2
-    expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null &&
-      printf '%s\n' "$as_me: WARNING: invalid host type: $ac_option" >&2
-    : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}"
-    ;;
-
-  esac
-done
-
-if test -n "$ac_prev"; then
-  ac_option=--`printf '%s\n' $ac_prev | sed 's/_/-/g'`
-  as_fn_error $? "missing argument to $ac_option"
-fi
-
-if test -n "$ac_unrecognized_opts"; then
-  case $enable_option_checking in
-    no) ;;
-    fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;;
-    *)     printf '%s\n' "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;;
-  esac
-fi
-
-# Check all directory arguments for consistency.
-for ac_var in	exec_prefix prefix bindir sbindir libexecdir datarootdir \
-		datadir sysconfdir sharedstatedir localstatedir includedir \
-		oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
-		libdir localedir mandir runstatedir
-do
-  eval ac_val=\$$ac_var
-  # Remove trailing slashes.
-  case $ac_val in
-    */ )
-      ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'`
-      eval $ac_var=\$ac_val;;
-  esac
-  # Be sure to have absolute directory names.
-  case $ac_val in
-    [\\/$]* | ?:[\\/]* )  continue;;
-    NONE | '' ) case $ac_var in *prefix ) continue;; esac;;
-  esac
-  as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val"
-done
-
-# There might be people who depend on the old broken behavior: '$host'
-# used to hold the argument of --host etc.
-# FIXME: To remove some day.
-build=$build_alias
-host=$host_alias
-target=$target_alias
-
-# FIXME: To remove some day.
-if test "x$host_alias" != x; then
-  if test "x$build_alias" = x; then
-    cross_compiling=maybe
-  elif test "x$build_alias" != "x$host_alias"; then
-    cross_compiling=yes
-  fi
-fi
-
-ac_tool_prefix=
-test -n "$host_alias" && ac_tool_prefix=$host_alias-
-
-test "$silent" = yes && exec 6>/dev/null
-
-
-ac_pwd=`pwd` && test -n "$ac_pwd" &&
-ac_ls_di=`ls -di .` &&
-ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` ||
-  as_fn_error $? "working directory cannot be determined"
-test "X$ac_ls_di" = "X$ac_pwd_ls_di" ||
-  as_fn_error $? "pwd does not report name of working directory"
-
-
-# Find the source files, if location was not specified.
-if test -z "$srcdir"; then
-  ac_srcdir_defaulted=yes
-  # Try the directory containing this script, then the parent directory.
-  ac_confdir=`$as_dirname -- "$as_myself" ||
-$as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_myself" : 'X\(//\)[^/]' \| \
-	 X"$as_myself" : 'X\(//\)$' \| \
-	 X"$as_myself" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_myself" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  srcdir=$ac_confdir
-  if test ! -r "$srcdir/$ac_unique_file"; then
-    srcdir=..
-  fi
-else
-  ac_srcdir_defaulted=no
-fi
-if test ! -r "$srcdir/$ac_unique_file"; then
-  test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .."
-  as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir"
-fi
-ac_msg="sources are in $srcdir, but 'cd $srcdir' does not work"
-ac_abs_confdir=`(
-	cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg"
-	pwd)`
-# When building in place, set srcdir=.
-if test "$ac_abs_confdir" = "$ac_pwd"; then
-  srcdir=.
-fi
-# Remove unnecessary trailing slashes from srcdir.
-# Double slashes in file names in object file debugging info
-# mess up M-x gdb in Emacs.
-case $srcdir in
-*/) srcdir=`expr "X$srcdir" : 'X\(.*[^/]\)' \| "X$srcdir" : 'X\(.*\)'`;;
-esac
-for ac_var in $ac_precious_vars; do
-  eval ac_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_env_${ac_var}_value=\$${ac_var}
-  eval ac_cv_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_cv_env_${ac_var}_value=\$${ac_var}
-done
-
-#
-# Report the --help message.
-#
-if test "$ac_init_help" = "long"; then
-  # Omit some internal or obsolete options to make the list less imposing.
-  # This message is too long to be a string in the A/UX 3.1 sh.
-  cat <<_ACEOF
-'configure' configures libXext 1.3.7 to adapt to many kinds of systems.
-
-Usage: $0 [OPTION]... [VAR=VALUE]...
-
-To assign environment variables (e.g., CC, CFLAGS...), specify them as
-VAR=VALUE.  See below for descriptions of some of the useful variables.
-
-Defaults for the options are specified in brackets.
-
-Configuration:
-  -h, --help              display this help and exit
-      --help=short        display options specific to this package
-      --help=recursive    display the short help of all the included packages
-  -V, --version           display version information and exit
-  -q, --quiet, --silent   do not print 'checking ...' messages
-      --cache-file=FILE   cache test results in FILE [disabled]
-  -C, --config-cache      alias for '--cache-file=config.cache'
-  -n, --no-create         do not create output files
-      --srcdir=DIR        find the sources in DIR [configure dir or '..']
-
-Installation directories:
-  --prefix=PREFIX         install architecture-independent files in PREFIX
-                          @<:@@S|@ac_default_prefix@:>@
-  --exec-prefix=EPREFIX   install architecture-dependent files in EPREFIX
-                          @<:@PREFIX@:>@
-
-By default, 'make install' will install all the files in
-'$ac_default_prefix/bin', '$ac_default_prefix/lib' etc.  You can specify
-an installation prefix other than '$ac_default_prefix' using '--prefix',
-for instance '--prefix=\$HOME'.
-
-For better control, use the options below.
-
-Fine tuning of the installation directories:
-  --bindir=DIR            user executables [EPREFIX/bin]
-  --sbindir=DIR           system admin executables [EPREFIX/sbin]
-  --libexecdir=DIR        program executables [EPREFIX/libexec]
-  --sysconfdir=DIR        read-only single-machine data [PREFIX/etc]
-  --sharedstatedir=DIR    modifiable architecture-independent data [PREFIX/com]
-  --localstatedir=DIR     modifiable single-machine data [PREFIX/var]
-  --runstatedir=DIR       modifiable per-process data [LOCALSTATEDIR/run]
-  --libdir=DIR            object code libraries [EPREFIX/lib]
-  --includedir=DIR        C header files [PREFIX/include]
-  --oldincludedir=DIR     C header files for non-gcc [/usr/include]
-  --datarootdir=DIR       read-only arch.-independent data root [PREFIX/share]
-  --datadir=DIR           read-only architecture-independent data [DATAROOTDIR]
-  --infodir=DIR           info documentation [DATAROOTDIR/info]
-  --localedir=DIR         locale-dependent data [DATAROOTDIR/locale]
-  --mandir=DIR            man documentation [DATAROOTDIR/man]
-  --docdir=DIR            documentation root @<:@DATAROOTDIR/doc/libXext@:>@
-  --htmldir=DIR           html documentation [DOCDIR]
-  --dvidir=DIR            dvi documentation [DOCDIR]
-  --pdfdir=DIR            pdf documentation [DOCDIR]
-  --psdir=DIR             ps documentation [DOCDIR]
-_ACEOF
-
-  cat <<\_ACEOF
-
-Program names:
-  --program-prefix=PREFIX            prepend PREFIX to installed program names
-  --program-suffix=SUFFIX            append SUFFIX to installed program names
-  --program-transform-name=PROGRAM   run sed PROGRAM on installed program names
-
-System types:
-  --build=BUILD     configure for building on BUILD [guessed]
-  --host=HOST       cross-compile to build programs to run on HOST [BUILD]
-_ACEOF
-fi
-
-if test -n "$ac_init_help"; then
-  case $ac_init_help in
-     short | recursive ) echo "Configuration of libXext 1.3.7:";;
-   esac
-  cat <<\_ACEOF
-
-Optional Features:
-  --disable-option-checking  ignore unrecognized --enable/--with options
-  --disable-FEATURE       do not include FEATURE (same as --enable-FEATURE=no)
-  --enable-FEATURE[=ARG]  include FEATURE [ARG=yes]
-  --enable-dependency-tracking 
-                          do not reject slow dependency extractors
-  --disable-dependency-tracking 
-                          speeds up one-time build
-  --enable-silent-rules   less verbose build output (undo: "make V=1")
-  --disable-silent-rules  verbose build output (undo: "make V=0")
-  --enable-shared@<:@=PKGS@:>@  build shared libraries @<:@default=yes@:>@
-  --enable-static@<:@=PKGS@:>@  build static libraries @<:@default=yes@:>@
-  --enable-pic@<:@=PKGS@:>@     try to use only PIC/non-PIC objects @<:@default=use
-                          both@:>@
-  --enable-fast-install@<:@=PKGS@:>@ 
-                          optimize for fast installation @<:@default=yes@:>@
-  --enable-aix-soname=aix|svr4|both 
-                          shared library versioning (aka "SONAME") variant to
-                          provide on AIX, @<:@default=aix@:>@.
-  --disable-libtool-lock  avoid locking (might break parallel builds)
-  --disable-selective-werror 
-                          Turn off selective compiler errors. (default:
-                          enabled)
-  --enable-strict-compilation 
-                          Enable all warnings from compiler and make them
-                          errors (default: disabled)
-  --enable-specs          Enable building the specs (default: yes)
-  --enable-malloc0returnsnull 
-                          assume malloc(0) can return NULL (default: yes)
-  --enable-lint-library   Create lint library (default: disabled)
-
-Optional Packages:
-  --with-PACKAGE[=ARG]    use PACKAGE [ARG=yes]
-  --without-PACKAGE       do not use PACKAGE (same as --with-PACKAGE=no)
-  --with-gnu-ld           assume the C compiler uses GNU ld @<:@default=no@:>@
-  --with-sysroot@<:@=DIR@:>@    Search for dependent libraries within DIR (or the
-                          compiler's sysroot if not specified).
-  --with-xmlto            Use xmlto to regenerate documentation (default:
-                          auto)
-  --with-fop              Use fop to regenerate documentation (default: auto)
-  --with-xsltproc         Use xsltproc for the transformation of XML documents
-                          (default: auto)
-  --with-lint             Use a lint-style source code checker (default:
-                          disabled)
-
-Some influential environment variables:
-  CC          C compiler command
-  CFLAGS      C compiler flags
-  LDFLAGS     linker flags, e.g. -L<lib dir> if you have libraries in a
-              nonstandard directory <lib dir>
-  LIBS        libraries to pass to the linker, e.g. -l<library>
-  CPPFLAGS    (Objective) C/C++ preprocessor flags, e.g. -I<include dir> if
-              you have headers in a nonstandard directory <include dir>
-  LT_SYS_LIBRARY_PATH 
-              User-defined run-time library search path.
-  PKG_CONFIG  path to pkg-config utility
-  PKG_CONFIG_PATH 
-              directories to add to pkg-config's search path
-  PKG_CONFIG_LIBDIR 
-              path overriding pkg-config's built-in search path
-  XMLTO       Path to xmlto command
-  FOP         Path to fop command
-  XSLTPROC    Path to xsltproc command
-  XEXT_CFLAGS C compiler flags for XEXT, overriding pkg-config
-  XEXT_LIBS   linker flags for XEXT, overriding pkg-config
-  LINT        Path to a lint-style command
-  LINT_FLAGS  Flags for the lint-style command
-
-Use these variables to override the choices made by 'configure' or to help
-it to find libraries and programs with nonstandard names/locations.
-
-Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>.
-_ACEOF
-ac_status=$?
-fi
-
-if test "$ac_init_help" = "recursive"; then
-  # If there are subdirs, report their specific --help.
-  for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue
-    test -d "$ac_dir" ||
-      { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } ||
-      continue
-    ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`printf '%s\n' "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`printf '%s\n' "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-    cd "$ac_dir" || { ac_status=$?; continue; }
-    # Check for configure.gnu first; this name is used for a wrapper for
-    # Metaconfig's "Configure" on case-insensitive file systems.
-    if test -f "$ac_srcdir/configure.gnu"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure.gnu" --help=recursive
-    elif test -f "$ac_srcdir/configure"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure" --help=recursive
-    else
-      printf '%s\n' "$as_me: WARNING: no configuration information is in $ac_dir" >&2
-    fi || ac_status=$?
-    cd "$ac_pwd" || { ac_status=$?; break; }
-  done
-fi
-
-test -n "$ac_init_help" && exit $ac_status
-if $ac_init_version; then
-  cat <<\_ACEOF
-libXext configure 1.3.7
-generated by GNU Autoconf 2.73
-
-Copyright (C) 2026 Free Software Foundation, Inc.
-This configure script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it.
-_ACEOF
-  exit
-fi
-
-## ------------------------ ##
-## Autoconf initialization. ##
-## ------------------------ ##
-
-@%:@ ac_fn_c_try_compile LINENO
-@%:@ --------------------------
-@%:@ Try to compile conftest.@S|@ac_ext, and return whether this succeeded.
-ac_fn_c_try_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest.beam
-  if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest.$ac_objext
-then :
-  ac_retval=0
-else case e in @%:@(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1 ;;
-esac
-fi
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} @%:@ ac_fn_c_try_compile
-
-@%:@ ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES
-@%:@ -------------------------------------------------------
-@%:@ Tests whether HEADER exists and can be compiled using the include files in
-@%:@ INCLUDES, setting the cache variable VAR accordingly.
-ac_fn_c_check_header_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-printf %s "checking for $2... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-@%:@include <$2>
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  eval "$3=yes"
-else case e in @%:@(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} @%:@ ac_fn_c_check_header_compile
-
-@%:@ ac_fn_c_try_link LINENO
-@%:@ -----------------------
-@%:@ Try to link conftest.@S|@ac_ext, and return whether this succeeded.
-ac_fn_c_try_link ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest.beam conftest$ac_exeext
-  if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest$ac_exeext && {
-	 test "$cross_compiling" = yes ||
-	 test -x conftest$ac_exeext
-       }
-then :
-  ac_retval=0
-else case e in @%:@(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1 ;;
-esac
-fi
-  # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information
-  # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would
-  # interfere with the next link command; also delete a directory that is
-  # left behind by Apple's compiler.  We do this before executing the actions.
-  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} @%:@ ac_fn_c_try_link
-
-@%:@ ac_fn_c_check_func LINENO FUNC VAR
-@%:@ ----------------------------------
-@%:@ Tests whether FUNC exists, setting the cache variable VAR accordingly
-ac_fn_c_check_func ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-printf %s "checking for $2... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-/* Define $2 to an innocuous variant, in case <limits.h> declares $2.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $2 innocuous_$2
-
-/* System header to define __stub macros and hopefully few prototypes,
-   which can conflict with char $2 (void); below.  */
-
-#include <limits.h>
-#undef $2
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $2 (void);
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$2 || defined __stub___$2
-choke me
-#endif
-
-int
-main (void)
-{
-return $2 ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval "$3=yes"
-else case e in @%:@(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} @%:@ ac_fn_c_check_func
-
-@%:@ ac_fn_check_decl LINENO SYMBOL VAR INCLUDES EXTRA-OPTIONS FLAG-VAR
-@%:@ ------------------------------------------------------------------
-@%:@ Tests whether SYMBOL is declared in INCLUDES, setting cache variable VAR
-@%:@ accordingly. Pass EXTRA-OPTIONS to the compiler, using FLAG-VAR.
-ac_fn_check_decl ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  as_decl_name=`echo $2|sed 's/ *(.*//'`
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $as_decl_name is declared" >&5
-printf %s "checking whether $as_decl_name is declared... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'`
-  eval ac_save_FLAGS=\$$6
-  as_fn_append $6 " $5"
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-int
-main (void)
-{
-#ifndef $as_decl_name
-#ifdef __cplusplus
-  (void) $as_decl_use;
-#else
-  (void) $as_decl_name;
-#endif
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  eval "$3=yes"
-else case e in @%:@(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-  eval $6=\$ac_save_FLAGS
- ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} @%:@ ac_fn_check_decl
-ac_configure_args_raw=
-for ac_arg
-do
-  case $ac_arg in
-  *\'*)
-    ac_arg=`printf '%s\n' "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
-  esac
-  as_fn_append ac_configure_args_raw " '$ac_arg'"
-done
-
-case $ac_configure_args_raw in
-  *$as_nl*)
-    ac_safe_unquote= ;;
-  *)
-    ac_unsafe_z='|&;<>()$`\\"*?@<:@ ''	' # This string ends in space, tab.
-    ac_unsafe_a="$ac_unsafe_z#~"
-    ac_safe_unquote="s/ '\\([^$ac_unsafe_a][^$ac_unsafe_z]*\\)'/ \\1/g"
-    ac_configure_args_raw=`      printf '%s\n' "$ac_configure_args_raw" | sed "$ac_safe_unquote"`;;
-esac
-
-cat >config.log <<_ACEOF
-This file contains any messages produced by compilers while
-running configure, to aid debugging if configure makes a mistake.
-
-It was created by libXext $as_me 1.3.7, which was
-generated by GNU Autoconf 2.73.  Invocation command line was
-
-  $ $0$ac_configure_args_raw
-
-_ACEOF
-exec 5>>config.log
-{
-cat <<_ASUNAME
-## --------- ##
-## Platform. ##
-## --------- ##
-
-hostname = `(hostname || uname -n) 2>/dev/null | sed 1q`
-uname -m = `(uname -m) 2>/dev/null || echo unknown`
-uname -r = `(uname -r) 2>/dev/null || echo unknown`
-uname -s = `(uname -s) 2>/dev/null || echo unknown`
-uname -v = `(uname -v) 2>/dev/null || echo unknown`
-
-/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown`
-/bin/uname -X     = `(/bin/uname -X) 2>/dev/null     || echo unknown`
-
-/bin/arch              = `(/bin/arch) 2>/dev/null              || echo unknown`
-/usr/bin/arch -k       = `(/usr/bin/arch -k) 2>/dev/null       || echo unknown`
-/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown`
-/usr/bin/hostinfo      = `(/usr/bin/hostinfo) 2>/dev/null      || echo unknown`
-/bin/machine           = `(/bin/machine) 2>/dev/null           || echo unknown`
-/usr/bin/oslevel       = `(/usr/bin/oslevel) 2>/dev/null       || echo unknown`
-/bin/universe          = `(/bin/universe) 2>/dev/null          || echo unknown`
-
-_ASUNAME
-
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    printf '%s\n' "PATH: $as_dir"
-  done
-IFS=$as_save_IFS
-
-} >&5
-
-cat >&5 <<_ACEOF
-
-
-## ----------- ##
-## Core tests. ##
-## ----------- ##
-
-_ACEOF
-
-
-# Keep a trace of the command line.
-# Strip out --no-create and --no-recursion so they do not pile up.
-# Strip out --silent because we don't want to record it for future runs.
-# Also quote any args containing shell meta-characters.
-# Make two passes to allow for proper duplicate-argument suppression.
-ac_configure_args=
-ac_configure_args0=
-ac_configure_args1=
-ac_must_keep_next=false
-for ac_pass in 1 2
-do
-  for ac_arg
-  do
-    case $ac_arg in
-    -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;;
-    -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-    | -silent | --silent | --silen | --sile | --sil)
-      continue ;;
-    *\'*)
-      ac_arg=`printf '%s\n' "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    case $ac_pass in
-    1) as_fn_append ac_configure_args0 " '$ac_arg'" ;;
-    2)
-      as_fn_append ac_configure_args1 " '$ac_arg'"
-      if test $ac_must_keep_next = true; then
-	ac_must_keep_next=false # Got value, back to normal.
-      else
-	case $ac_arg in
-	  *=* | --config-cache | -C | -disable-* | --disable-* \
-	  | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \
-	  | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \
-	  | -with-* | --with-* | -without-* | --without-* | --x)
-	    case "$ac_configure_args0 " in
-	      "$ac_configure_args1"*" '$ac_arg' "* ) continue ;;
-	    esac
-	    ;;
-	  -* ) ac_must_keep_next=true ;;
-	esac
-      fi
-      as_fn_append ac_configure_args " '$ac_arg'"
-      ;;
-    esac
-  done
-done
-{ ac_configure_args0=; unset ac_configure_args0;}
-{ ac_configure_args1=; unset ac_configure_args1;}
-
-# Dump the cache to stdout.  It can be in a pipe (this is a requirement).
-ac_cache_dump ()
-{
-  # The following way of writing the cache mishandles newlines in values,
-# but we know of no workaround that is simple, portable, and efficient.
-# So, we kill variables containing newlines.
-# Ultrix sh set writes to stderr and can't be redirected directly,
-# and sets the high bit in the cache file unless we assign to the vars.
-(
-  for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do
-    eval ac_val=\$$ac_var
-    case $ac_val in #(
-    *${as_nl}*)
-      case $ac_var in #(
-      *_cv_*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
-printf '%s\n' "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
-      esac
-      case $ac_var in #(
-      _ | IFS | as_nl) ;; #(
-      BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
-      *) { eval $ac_var=; unset $ac_var;} ;;
-      esac ;;
-    esac
-  done
-
-  (set) 2>&1 |
-    case $as_nl`(ac_space=' '; set) 2>&1` in #(
-    *${as_nl}ac_space=\ *)
-      # 'set' does not quote correctly, so add quotes: double-quote
-      # substitution turns \\\\ into \\, and sed turns \\ into \.
-      sed -n \
-	"s/'/'\\\\''/g;
-	  s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p"
-      ;; #(
-    *)
-      # 'set' quotes correctly as required by POSIX, so do not add quotes.
-      sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
-      ;;
-    esac |
-    sort
-)
-}
-
-# Print debugging info to stdout.
-ac_dump_debugging_info ()
-{
-  echo
-
-  printf '%s\n' "## ---------------- ##
-## Cache variables. ##
-## ---------------- ##"
-  echo
-  ac_cache_dump
-  echo
-
-  printf '%s\n' "## ----------------- ##
-## Output variables. ##
-## ----------------- ##"
-  echo
-  for ac_var in $ac_subst_vars
-  do
-    eval ac_val=\$$ac_var
-    case $ac_val in
-    *\'*) ac_val=`printf '%s\n' "$ac_val" | sed "s/'/'\\\\\\\\''/g"`;;
-    esac
-    printf '%s\n' "$ac_var='$ac_val'"
-  done | sort
-  echo
-
-  if test -n "$ac_subst_files"; then
-    printf '%s\n' "## ------------------- ##
-## File substitutions. ##
-## ------------------- ##"
-    echo
-    for ac_var in $ac_subst_files
-    do
-      eval ac_val=\$$ac_var
-      case $ac_val in
-      *\'*) ac_val=`printf '%s\n' "$ac_val" | sed "s/'/'\\\\\\\\''/g"`;;
-      esac
-      printf '%s\n' "$ac_var='$ac_val'"
-    done | sort
-    echo
-  fi
-
-  if test -s confdefs.h; then
-    printf '%s\n' "## ----------- ##
-## confdefs.h. ##
-## ----------- ##"
-    echo
-    cat confdefs.h
-    echo
-  fi
-  test "$ac_signal" != 0 &&
-    printf '%s\n' "$as_me: caught signal $ac_signal"
-  printf '%s\n' "$as_me: exit $exit_status"
-}
-
-# When interrupted or exit'd, cleanup temporary files, and complete
-# config.log.
-ac_exit_trap ()
-{
-  exit_status=
-  # Sanitize IFS.
-  IFS=" ""	$as_nl"
-  # Save into config.log some information that might help in debugging.
-  ac_dump_debugging_info >&5
-  eval "rm -f $ac_clean_CONFIG_STATUS core *.core core.conftest.*" &&
-    rm -f -r conftest* confdefs* conf$$* $ac_clean_files &&
-    exit $exit_status
-}
-
-trap 'ac_exit_trap $?' 0
-for ac_signal in 1 2 13 15; do
-  trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal
-done
-ac_signal=0
-
-# confdefs.h avoids OS command line length limits that DEFS can exceed.
-rm -f -r conftest* confdefs.h
-
-printf '%s\n' "/* confdefs.h */" > confdefs.h
-
-# Predefined preprocessor variables.
-
-printf '%s\n' "@%:@define PACKAGE_NAME \"$PACKAGE_NAME\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_TARNAME \"$PACKAGE_TARNAME\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_VERSION \"$PACKAGE_VERSION\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_STRING \"$PACKAGE_STRING\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_BUGREPORT \"$PACKAGE_BUGREPORT\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_URL \"$PACKAGE_URL\"" >>confdefs.h
-
-
-# Let the site file select an alternate cache file if it wants to.
-# Prefer an explicitly selected file to automatically selected ones.
-if test -n "$CONFIG_SITE"; then
-  ac_site_files="$CONFIG_SITE"
-elif test "x$prefix" != xNONE; then
-  ac_site_files="$prefix/share/config.site $prefix/etc/config.site"
-else
-  ac_site_files="$ac_default_prefix/share/config.site $ac_default_prefix/etc/config.site"
-fi
-
-for ac_site_file in $ac_site_files
-do
-  case $ac_site_file in @%:@(
-  */*) :
-     ;; @%:@(
-  *) :
-    ac_site_file=./$ac_site_file ;;
-esac
-  if test -f "$ac_site_file" && test -r "$ac_site_file"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5
-printf '%s\n' "$as_me: loading site script $ac_site_file" >&6;}
-    sed 's/^/| /' "$ac_site_file" >&5
-    . "$ac_site_file" \
-      || { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "failed to load site script $ac_site_file
-See 'config.log' for more details" "$LINENO" 5; }
-  fi
-done
-
-if test -r "$cache_file"; then
-  # Some versions of bash will fail to source /dev/null (special files
-  # actually), so we avoid doing that.  DJGPP emulates it as a regular file.
-  if test /dev/null != "$cache_file" && test -f "$cache_file"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5
-printf '%s\n' "$as_me: loading cache $cache_file" >&6;}
-    case $cache_file in
-      [\\/]* | ?:[\\/]* ) . "$cache_file";;
-      *)                      . "./$cache_file";;
-    esac
-  fi
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5
-printf '%s\n' "$as_me: creating cache $cache_file" >&6;}
-  >$cache_file
-fi
-
-as_fn_append ac_header_c_list " stdio.h stdio_h HAVE_STDIO_H"
-# Test code for whether the C compiler supports C23 (global declarations)
-ac_c_conftest_c23_globals='
-/* Does the compiler advertise conformance to C17 or earlier?
-   Although GCC 14 does not do that, even with -std=gnu23,
-   it is close enough, and defines __STDC_VERSION == 202000L.  */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ <= 201710L
-# error "Compiler advertises conformance to C17 or earlier"
-#endif
-
-// Check alignas.
-char alignas (double) c23_aligned_as_double;
-char alignas (0) c23_no_special_alignment;
-extern char c23_aligned_as_int;
-char alignas (0) alignas (int) c23_aligned_as_int;
-
-// Check alignof.
-enum
-{
-  c23_int_alignment = alignof (int),
-  c23_int_array_alignment = alignof (int[100]),
-  c23_char_alignment = alignof (char)
-};
-static_assert (0 < -alignof (int), "alignof is signed");
-
-int function_with_unnamed_parameter (int) { return 0; }
-
-void c23_noreturn ();
-
-/* Test parsing of string and char UTF-8 literals (including hex escapes).
-   The parens pacify GCC 15.  */
-bool use_u8 = (!sizeof u8"\xFF") == (!u8'\''x'\'');
-
-bool check_that_bool_works = true | false | !nullptr;
-#if !true
-# error "true does not work in #if"
-#endif
-#if false
-#elifdef __STDC_VERSION__
-#else
-# error "#elifdef does not work"
-#endif
-
-#ifndef __has_c_attribute
-# error "__has_c_attribute not defined"
-#endif
-
-#ifndef __has_include
-# error "__has_include not defined"
-#endif
-
-#define LPAREN() (
-#define FORTY_TWO(x) 42
-#define VA_OPT_TEST(r, x, ...) __VA_OPT__ (FORTY_TWO r x))
-static_assert (VA_OPT_TEST (LPAREN (), 0, <:-) == 42);
-
-static_assert (0b101010 == 42);
-static_assert (0B101010 == 42);
-static_assert (0xDEAD'\''BEEF == 3'\''735'\''928'\''559);
-static_assert (0.500'\''000'\''000 == 0.5);
-
-enum unsignedish : unsigned int { uione = 1 };
-static_assert (0 < -uione);
-
-#include <stddef.h>
-constexpr nullptr_t null_pointer = nullptr;
-
-static typeof (1 + 1L) two () { return 2; }
-static long int three () { return 3; }
-'
-
-# Test code for whether the C compiler supports C23 (body of main).
-ac_c_conftest_c23_main='
-  {
-    label_before_declaration:
-      int arr[10] = {};
-      if (arr[0])
-        goto label_before_declaration;
-      if (!arr[0])
-        goto label_at_end_of_block;
-    label_at_end_of_block:
-  }
-  ok |= !null_pointer;
-  ok |= two != three;
-'
-
-# Test code for whether the C compiler supports C23 (complete).
-ac_c_conftest_c23_program="${ac_c_conftest_c23_globals}
-
-int
-main (int, char **)
-{
-  int ok = 0;
-  ${ac_c_conftest_c23_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C89 (global declarations)
-ac_c_conftest_c89_globals='
-/* Do not test the value of __STDC__, because some compilers define it to 0
-   or do not define it, while otherwise adequately conforming.  */
-
-#include <stddef.h>
-#include <stdarg.h>
-struct stat;
-/* Most of the following tests are stolen from RCS 5.7 src/conf.sh.  */
-struct buf { int x; };
-struct buf * (*rcsopen) (struct buf *, struct stat *, int);
-static char *e (char **p, int i)
-{
-  return p[i];
-}
-static char *f (char * (*g) (char **, int), char **p, ...)
-{
-  char *s;
-  va_list v;
-  va_start (v,p);
-  s = g (p, va_arg (v,int));
-  va_end (v);
-  return s;
-}
-
-/* C89 style stringification. */
-#define noexpand_stringify(a) #a
-const char *stringified = noexpand_stringify(arbitrary+token=sequence);
-
-/* C89 style token pasting.  Exercises some of the corner cases that
-   e.g. old MSVC gets wrong, but not very hard. */
-#define noexpand_concat(a,b) a##b
-#define expand_concat(a,b) noexpand_concat(a,b)
-extern int vA;
-extern int vbee;
-#define aye A
-#define bee B
-int *pvA = &expand_concat(v,aye);
-int *pvbee = &noexpand_concat(v,bee);
-
-/* OSF 4.0 Compaq cc is some sort of almost-ANSI by default.  It has
-   function prototypes and stuff, but not \xHH hex character constants.
-   These do not provoke an error unfortunately, instead are silently treated
-   as an "x".  The following induces an error, until -std is added to get
-   proper ANSI mode.  Curiously \x00 != x always comes out true, for an
-   array size at least.  It is necessary to write \x00 == 0 to get something
-   that is true only with -std.  */
-int osf4_cc_array ['\''\x00'\'' == 0 ? 1 : -1];
-
-/* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters
-   inside strings and character constants.  */
-#define FOO(x) '\''x'\''
-int xlc6_cc_array[FOO(a) == '\''x'\'' ? 1 : -1];
-
-int test (int i, double x);
-struct s1 {int (*f) (int a);};
-struct s2 {int (*f) (double a);};
-int pairnames (int, char **, int *(*)(struct buf *, struct stat *, int),
-               int, int);'
-
-# Test code for whether the C compiler supports C89 (body of main).
-ac_c_conftest_c89_main='
-ok |= (argc == 0 || f (e, argv, 0) != argv[0] || f (e, argv, 1) != argv[1]);
-'
-
-# Test code for whether the C compiler supports C99 (global declarations)
-ac_c_conftest_c99_globals='
-/* Does the compiler advertise C99 conformance? */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ < 199901L
-# error "Compiler does not advertise C99 conformance"
-#endif
-
-// See if C++-style comments work.
-
-#include <stdbool.h>
-extern int puts (const char *);
-extern int printf (const char *, ...);
-extern int dprintf (int, const char *, ...);
-extern void *malloc (size_t);
-extern void free (void *);
-
-// Check varargs macros.  These examples are taken from C99 6.10.3.5.
-// dprintf is used instead of fprintf to avoid needing to declare
-// FILE and stderr, and "aND" is used instead of "and" to work around
-// GCC bug 40564 which is irrelevant here.
-#define debug(...) dprintf (2, __VA_ARGS__)
-#define showlist(...) puts (#__VA_ARGS__)
-#define report(test,...) ((test) ? puts (#test) : printf (__VA_ARGS__))
-static void
-test_varargs_macros (void)
-{
-  int x = 1234;
-  int y = 5678;
-  debug ("Flag");
-  debug ("X = %d\n", x);
-  showlist (The first, second, aND third items.);
-  report (x>y, "x is %d but y is %d", x, y);
-}
-
-// Check long long types.
-#define BIG64 18446744073709551615ull
-#define BIG32 4294967295ul
-#define BIG_OK (BIG64 / BIG32 == 4294967297ull && BIG64 % BIG32 == 0)
-#if !BIG_OK
-  #error "your preprocessor is broken"
-#endif
-#if BIG_OK
-#else
-  #error "your preprocessor is broken"
-#endif
-static long long int bignum = -9223372036854775807LL;
-static unsigned long long int ubignum = BIG64;
-
-struct incomplete_array
-{
-  int datasize;
-  double data[];
-};
-
-struct named_init {
-  int number;
-  const wchar_t *name;
-  double average;
-};
-
-typedef const char *ccp;
-
-static inline int
-test_restrict (ccp restrict text)
-{
-  // Iterate through items via the restricted pointer.
-  // Also check for declarations in for loops.
-  for (unsigned int i = 0; *(text+i) != '\''\0'\''; ++i)
-    continue;
-  return 0;
-}
-
-// Check varargs and va_copy.
-static bool
-test_varargs (const char *format, ...)
-{
-  va_list args;
-  va_start (args, format);
-  va_list args_copy;
-  va_copy (args_copy, args);
-
-  const char *str = "";
-  int number = 0;
-  float fnumber = 0;
-
-  while (*format)
-    {
-      switch (*format++)
-	{
-	case '\''s'\'': // string
-	  str = va_arg (args_copy, const char *);
-	  break;
-	case '\''d'\'': // int
-	  number = va_arg (args_copy, int);
-	  break;
-	case '\''f'\'': // float
-	  fnumber = va_arg (args_copy, double);
-	  break;
-	default:
-	  break;
-	}
-    }
-  va_end (args_copy);
-  va_end (args);
-
-  return *str && number && fnumber;
-}
-'
-
-# Test code for whether the C compiler supports C99 (body of main).
-ac_c_conftest_c99_main='
-  // Check bool.
-  _Bool success = false;
-  success |= (argc != 0);
-
-  // Check restrict.
-  if (test_restrict ("String literal") == 0)
-    success = true;
-  const char *restrict newvar = "Another string";
-
-  // Check varargs.
-  success &= test_varargs ("s, d'\'' f .", "string", 65, 34.234);
-  test_varargs_macros ();
-
-  // Check flexible array members.
-  static struct incomplete_array *volatile incomplete_array_pointer;
-  struct incomplete_array *ia = incomplete_array_pointer;
-  ia->datasize = 10;
-  for (int i = 0; i < ia->datasize; ++i)
-    ia->data[i] = i * 1.234;
-  // Work around memory leak warnings.
-  free (ia);
-
-  // Check named initializers.
-  struct named_init ni = {
-    .number = 34,
-    .name = L"Test wide string",
-    .average = 543.34343,
-  };
-
-  ni.number = 58;
-
-  // Do not test for VLAs, as some otherwise-conforming compilers lack them.
-  // C code should instead use __STDC_NO_VLA__; see Autoconf manual.
-
-  // work around unused variable warnings
-  ok |= (!success || bignum == 0LL || ubignum == 0uLL || newvar[0] == '\''x'\''
-	 || ni.number != 58);
-'
-
-# Test code for whether the C compiler supports C11 (global declarations)
-ac_c_conftest_c11_globals='
-/* Does the compiler advertise C11 conformance? */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ < 201112L
-# error "Compiler does not advertise C11 conformance"
-#endif
-
-// Check _Alignas.
-char _Alignas (double) aligned_as_double;
-char _Alignas (0) no_special_alignment;
-extern char aligned_as_int;
-char _Alignas (0) _Alignas (int) aligned_as_int;
-
-// Check _Alignof.
-enum
-{
-  int_alignment = _Alignof (int),
-  int_array_alignment = _Alignof (int[100]),
-  char_alignment = _Alignof (char)
-};
-_Static_assert (0 < -_Alignof (int), "_Alignof is signed");
-
-// Check _Noreturn.
-int _Noreturn does_not_return (void) { for (;;) continue; }
-
-// Check _Static_assert.
-struct test_static_assert
-{
-  int x;
-  _Static_assert (sizeof (int) <= sizeof (long int),
-                  "_Static_assert does not work in struct");
-  long int y;
-};
-
-// Check UTF-8 literals.
-#define u8 syntax error!
-char const utf8_literal[] = u8"happens to be ASCII" "another string";
-
-// Check duplicate typedefs.
-typedef long *long_ptr;
-typedef long int *long_ptr;
-typedef long_ptr long_ptr;
-
-// Anonymous structures and unions -- taken from C11 6.7.2.1 Example 1.
-struct anonymous
-{
-  union {
-    struct { int i; int j; };
-    struct { int k; long int l; } w;
-  };
-  int m;
-} v1;
-'
-
-# Test code for whether the C compiler supports C11 (body of main).
-ac_c_conftest_c11_main='
-  _Static_assert ((offsetof (struct anonymous, i)
-		   == offsetof (struct anonymous, w.k)),
-		  "Anonymous union alignment botch");
-  v1.i = 2;
-  v1.w.k = 5;
-  ok |= v1.i != 5;
-'
-
-# Test code for whether the C compiler supports C11 (complete).
-ac_c_conftest_c11_program="${ac_c_conftest_c89_globals}
-${ac_c_conftest_c99_globals}
-${ac_c_conftest_c11_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  ${ac_c_conftest_c99_main}
-  ${ac_c_conftest_c11_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C99 (complete).
-ac_c_conftest_c99_program="${ac_c_conftest_c89_globals}
-${ac_c_conftest_c99_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  ${ac_c_conftest_c99_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C89 (complete).
-ac_c_conftest_c89_program="${ac_c_conftest_c89_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  return ok;
-}
-"
-
-as_fn_append ac_header_c_list " stdlib.h stdlib_h HAVE_STDLIB_H"
-as_fn_append ac_header_c_list " string.h string_h HAVE_STRING_H"
-as_fn_append ac_header_c_list " inttypes.h inttypes_h HAVE_INTTYPES_H"
-as_fn_append ac_header_c_list " stdint.h stdint_h HAVE_STDINT_H"
-as_fn_append ac_header_c_list " strings.h strings_h HAVE_STRINGS_H"
-as_fn_append ac_header_c_list " sys/stat.h sys_stat_h HAVE_SYS_STAT_H"
-as_fn_append ac_header_c_list " sys/types.h sys_types_h HAVE_SYS_TYPES_H"
-as_fn_append ac_header_c_list " unistd.h unistd_h HAVE_UNISTD_H"
-as_fn_append ac_header_c_list " wchar.h wchar_h HAVE_WCHAR_H"
-as_fn_append ac_header_c_list " minix/config.h minix_config_h HAVE_MINIX_CONFIG_H"
-
-# Auxiliary files required by this configure script.
-ac_aux_files="config.guess config.sub ltmain.sh missing install-sh compile"
-
-# Locations in which to look for auxiliary files.
-ac_aux_dir_candidates="${srcdir}${PATH_SEPARATOR}${srcdir}/..${PATH_SEPARATOR}${srcdir}/../.."
-
-# Search for a directory containing all of the required auxiliary files,
-# $ac_aux_files, from the $PATH-style list $ac_aux_dir_candidates.
-# If we don't find one directory that contains all the files we need,
-# we report the set of missing files from the *first* directory in
-# $ac_aux_dir_candidates and give up.
-ac_missing_aux_files=""
-ac_first_candidate=:
-printf '%s\n' "$as_me:${as_lineno-$LINENO}: looking for aux files: $ac_aux_files" >&5
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in $ac_aux_dir_candidates
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-  as_found=:
-  
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}:  trying $as_dir" >&5
-  ac_aux_dir_found=yes
-  ac_install_sh=
-  for ac_aux in $ac_aux_files
-  do
-    # As a special case, if "install-sh" is required, that requirement
-    # can be satisfied by any of "install-sh", "install.sh", or "shtool",
-    # and $ac_install_sh is set appropriately for whichever one is found.
-    if test x"$ac_aux" = x"install-sh"
-    then
-      if test -f "${as_dir}install-sh"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}install-sh found" >&5
-        ac_install_sh="${as_dir}install-sh -c"
-      elif test -f "${as_dir}install.sh"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}install.sh found" >&5
-        ac_install_sh="${as_dir}install.sh -c"
-      elif test -f "${as_dir}shtool"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}shtool found" >&5
-        ac_install_sh="${as_dir}shtool install -c"
-      else
-        ac_aux_dir_found=no
-        if $ac_first_candidate; then
-          ac_missing_aux_files="${ac_missing_aux_files} install-sh"
-        else
-          break
-        fi
-      fi
-    else
-      if test -f "${as_dir}${ac_aux}"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}${ac_aux} found" >&5
-      else
-        ac_aux_dir_found=no
-        if $ac_first_candidate; then
-          ac_missing_aux_files="${ac_missing_aux_files} ${ac_aux}"
-        else
-          break
-        fi
-      fi
-    fi
-  done
-  if test "$ac_aux_dir_found" = yes; then
-    ac_aux_dir="$as_dir"
-    break
-  fi
-  ac_first_candidate=false
-
-  as_found=false
-done
-IFS=$as_save_IFS
-if $as_found
-then :
-  
-else case e in @%:@(
-  e) as_fn_error $? "cannot find required auxiliary files:$ac_missing_aux_files" "$LINENO" 5 ;;
-esac
-fi
-
-
-# These three variables are undocumented and unsupported,
-# and are intended to be withdrawn in a future Autoconf release.
-# They can cause serious problems if a builder's source tree is in a directory
-# whose full name contains unusual characters.
-if test -f "${ac_aux_dir}config.guess"; then
-  ac_@&t@config_guess="$SHELL ${ac_aux_dir}config.guess"
-fi
-if test -f "${ac_aux_dir}config.sub"; then
-  ac_@&t@config_sub="$SHELL ${ac_aux_dir}config.sub"
-fi
-if test -f "$ac_aux_dir/configure"; then
-  ac_@&t@configure="$SHELL ${ac_aux_dir}configure"
-fi
-
-# Check that the precious variables saved in the cache have kept the same
-# value.
-ac_cache_corrupted=false
-for ac_var in $ac_precious_vars; do
-  eval ac_old_set=\$ac_cv_env_${ac_var}_set
-  eval ac_new_set=\$ac_env_${ac_var}_set
-  eval ac_old_val=\$ac_cv_env_${ac_var}_value
-  eval ac_new_val=\$ac_env_${ac_var}_value
-  case $ac_old_set,$ac_new_set in
-    set,)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' was set to '$ac_old_val' in the previous run" >&5
-printf '%s\n' "$as_me: error: '$ac_var' was set to '$ac_old_val' in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,set)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' was not set in the previous run" >&5
-printf '%s\n' "$as_me: error: '$ac_var' was not set in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,);;
-    *)
-      if test "x$ac_old_val" != "x$ac_new_val"; then
-	# differences in whitespace do not lead to failure.
-	ac_old_val_w=
-	for ac_val in x $ac_old_val; do
-	  ac_old_val_w="$ac_old_val_w $ac_val"
-	done
-	ac_new_val_w=
-	for ac_val in x $ac_new_val; do
-	  ac_new_val_w="$ac_new_val_w $ac_val"
-	done
-	if test "$ac_old_val_w" != "$ac_new_val_w"; then
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' has changed since the previous run:" >&5
-printf '%s\n' "$as_me: error: '$ac_var' has changed since the previous run:" >&2;}
-	  ac_cache_corrupted=:
-	else
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in '$ac_var' since the previous run:" >&5
-printf '%s\n' "$as_me: warning: ignoring whitespace changes in '$ac_var' since the previous run:" >&2;}
-	  eval $ac_var=\$ac_old_val
-	fi
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}:   former value:  '$ac_old_val'" >&5
-printf '%s\n' "$as_me:   former value:  '$ac_old_val'" >&2;}
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}:   current value: '$ac_new_val'" >&5
-printf '%s\n' "$as_me:   current value: '$ac_new_val'" >&2;}
-      fi;;
-  esac
-  # Pass precious variables to config.status.
-  if test "$ac_new_set" = set; then
-    case $ac_new_val in
-    *\'*) ac_arg=$ac_var=`printf '%s\n' "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;;
-    *) ac_arg=$ac_var=$ac_new_val ;;
-    esac
-    case " $ac_configure_args " in
-      *" '$ac_arg' "*) ;; # Avoid dups.  Use of quotes ensures accuracy.
-      *) as_fn_append ac_configure_args " '$ac_arg'" ;;
-    esac
-  fi
-done
-if $ac_cache_corrupted; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5
-printf '%s\n' "$as_me: error: changes in the environment can compromise the build" >&2;}
-  as_fn_error $? "run '${MAKE-make} distclean' and/or 'rm $cache_file'
-	    and start over" "$LINENO" 5
-fi
-## -------------------- ##
-## Main body of script. ##
-## -------------------- ##
-
-
-# Determine whether it's possible to make 'echo' print without a newline.
-# These variables are no longer used directly by Autoconf, but are AC_SUBSTed
-# for compatibility with existing Makefiles.
-ECHO_C= ECHO_N= ECHO_T=
-case `echo -n x` in @%:@(((((
--n*)
-  case `echo 'xy\c'` in
-  *c*) ECHO_T='	';;	# ECHO_T is single tab character.
-  xy)  ECHO_C='\c';;
-  *)   echo `echo ksh88 bug on AIX 6.1` > /dev/null
-       ECHO_T='	';;
-  esac;;
-*)
-  ECHO_N='-n';;
-esac
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-
-ac_config_headers="$ac_config_headers config.h"
-
-
-
-# Set common system defines for POSIX extensions, such as _GNU_SOURCE
-# Must be called before any macros that run the compiler (like LT_INIT)
-# to avoid autoconf errors.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-# Expand $ac_aux_dir to an absolute path.
-am_aux_dir=`cd "$ac_aux_dir" && pwd`
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}gcc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}gcc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "gcc", so it can be a program name with args.
-set dummy gcc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="gcc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-else
-  CC="$ac_cv_prog_CC"
-fi
-
-if test -z "$CC"; then
-          if test -n "$ac_tool_prefix"; then
-    # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}cc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}cc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  fi
-fi
-if test -z "$CC"; then
-  # Extract the first word of "cc", so it can be a program name with args.
-set dummy cc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-  ac_prog_rejected=no
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    if test "$as_dir$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then
-       ac_prog_rejected=yes
-       continue
-     fi
-    ac_cv_prog_CC="cc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-if test $ac_prog_rejected = yes; then
-  # We found a bogon in the path, so make sure we never use it.
-  set dummy $ac_cv_prog_CC
-  shift
-  if test $@%:@ != 0; then
-    # We chose a different compiler from the bogus one.
-    # However, it has the same basename, so the bogon will be chosen
-    # first if we set CC to just the basename; use the full file name.
-    shift
-    ac_cv_prog_CC="$as_dir$ac_word${1+' '}$@"
-  fi
-fi
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  for ac_prog in cl.exe
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$CC" && break
-  done
-fi
-if test -z "$CC"; then
-  ac_ct_CC=$CC
-  for ac_prog in cl.exe
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_CC" && break
-done
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-fi
-
-fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}clang", so it can be a program name with args.
-set dummy ${ac_tool_prefix}clang; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}clang"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "clang", so it can be a program name with args.
-set dummy clang; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="clang"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-else
-  CC="$ac_cv_prog_CC"
-fi
-
-fi
-
-
-test -z "$CC" && { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "no acceptable C compiler found in \$PATH
-See 'config.log' for more details" "$LINENO" 5; }
-
-# Provide some information about the compiler.
-printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5
-set X $ac_compile
-ac_compiler=$2
-for ac_option in --version -v -V -qversion -version; do
-  { { ac_try="$ac_compiler $ac_option >&5"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compiler $ac_option >&5") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    sed '10a\
-... rest of stderr output deleted ...
-         10q' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-  fi
-  rm -f conftest.er1 conftest.err
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-done
-
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files_save=$ac_clean_files
-ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out"
-# Try to create an executable without -o first, disregard a.out.
-# It will help us diagnose broken compilers, and finding out an intuition
-# of exeext.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5
-printf %s "checking whether the C compiler works... " >&6; }
-ac_link_default=`printf '%s\n' "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
-
-# The possible output files:
-ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*"
-
-ac_rmfiles=
-for ac_file in $ac_files
-do
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    * ) ac_rmfiles="$ac_rmfiles $ac_file";;
-  esac
-done
-rm -f $ac_rmfiles
-
-if { { ac_try="$ac_link_default"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link_default") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  # Autoconf-2.13 could set the ac_cv_exeext variable to 'no'.
-# So ignore a value of 'no', otherwise this would lead to 'EXEEXT = no'
-# in a Makefile.  We should not override ac_cv_exeext if it was cached,
-# so that the user can short-circuit this test for compilers unknown to
-# Autoconf.
-for ac_file in $ac_files ''
-do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj )
-	;;
-    [ab].out )
-	# We found the default executable, but exeext='' is most
-	# certainly right.
-	break;;
-    *.* )
-	if test ${ac_cv_exeext+y} && test "$ac_cv_exeext" != no;
-	then :; else
-	   ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	fi
-	# We set ac_cv_exeext here because the later test for it is not
-	# safe: cross compilers may not add the suffix if given an '-o'
-	# argument, so we may need to know it at that point already.
-	# Even if this section looks crufty: it has the advantage of
-	# actually working.
-	break;;
-    * )
-	break;;
-  esac
-done
-test "$ac_cv_exeext" = no && ac_cv_exeext=
-
-else case e in @%:@(
-  e) ac_file='' ;;
-esac
-fi
-if test -z "$ac_file"
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error 77 "C compiler cannot create executables
-See 'config.log' for more details" "$LINENO" 5; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; } ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5
-printf %s "checking for C compiler default output file name... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5
-printf '%s\n' "$ac_file" >&6; }
-ac_exeext=$ac_cv_exeext
-
-rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out
-ac_clean_files=$ac_clean_files_save
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5
-printf %s "checking for suffix of executables... " >&6; }
-if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  # If both 'conftest.exe' and 'conftest' are 'present' (well, observable)
-# catch 'conftest.exe'.  For instance with Cygwin, 'ls conftest' will
-# work properly (i.e., refer to 'conftest.exe'), while it won't with
-# 'rm'.
-for ac_file in conftest.exe conftest conftest.*; do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	  break;;
-    * ) break;;
-  esac
-done
-else case e in @%:@(
-  e) { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of executables: cannot compile and link
-See 'config.log' for more details" "$LINENO" 5; } ;;
-esac
-fi
-rm -f conftest conftest$ac_cv_exeext
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5
-printf '%s\n' "$ac_cv_exeext" >&6; }
-
-rm -f conftest.$ac_ext
-EXEEXT=$ac_cv_exeext
-ac_exeext=$EXEEXT
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-@%:@include <stdio.h>
-int
-main (void)
-{
-FILE *f = fopen ("conftest.out", "w");
- if (!f)
-  return 1;
- return ferror (f) || fclose (f) != 0;
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files="$ac_clean_files conftest.out"
-# Check that the compiler produces executables we can run.  If not, either
-# the compiler is broken, or we cross compile.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5
-printf %s "checking whether we are cross compiling... " >&6; }
-if test "$cross_compiling" != yes; then
-  { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-  if { ac_try='./conftest$ac_cv_exeext'
-  { { case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; }; then
-    cross_compiling=no
-  else
-    if test "$cross_compiling" = maybe; then
-	cross_compiling=yes
-    else
-	{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error 77 "cannot run C compiled programs.
-If you meant to cross compile, use '--host'.
-See 'config.log' for more details" "$LINENO" 5; }
-    fi
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5
-printf '%s\n' "$cross_compiling" >&6; }
-
-rm -f conftest.$ac_ext conftest$ac_cv_exeext \
-  conftest.o conftest.obj conftest.out
-ac_clean_files=$ac_clean_files_save
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5
-printf %s "checking for suffix of object files... " >&6; }
-if test ${ac_cv_objext+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.o conftest.obj
-if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  for ac_file in conftest.o conftest.obj conftest.*; do
-  test -f "$ac_file" || continue;
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;;
-    *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'`
-       break;;
-  esac
-done
-else case e in @%:@(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of object files: cannot compile
-See 'config.log' for more details" "$LINENO" 5; } ;;
-esac
-fi
-rm -f conftest.$ac_cv_objext conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5
-printf '%s\n' "$ac_cv_objext" >&6; }
-OBJEXT=$ac_cv_objext
-ac_objext=$OBJEXT
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the compiler supports GNU C" >&5
-printf %s "checking whether the compiler supports GNU C... " >&6; }
-if test ${ac_cv_c_compiler_gnu+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-#ifndef __GNUC__
-       choke me
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_compiler_gnu=yes
-else case e in @%:@(
-  e) ac_compiler_gnu=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-ac_cv_c_compiler_gnu=$ac_compiler_gnu
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5
-printf '%s\n' "$ac_cv_c_compiler_gnu" >&6; }
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-if test $ac_compiler_gnu = yes; then
-  GCC=yes
-else
-  GCC=
-fi
-ac_test_CFLAGS=${CFLAGS+y}
-ac_save_CFLAGS=$CFLAGS
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5
-printf %s "checking whether $CC accepts -g... " >&6; }
-if test ${ac_cv_prog_cc_g+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_save_c_werror_flag=$ac_c_werror_flag
-   ac_c_werror_flag=yes
-   ac_cv_prog_cc_g=no
-   CFLAGS="-g"
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_g=yes
-else case e in @%:@(
-  e) CFLAGS=""
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  
-else case e in @%:@(
-  e) ac_c_werror_flag=$ac_save_c_werror_flag
-	 CFLAGS="-g"
-	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_g=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ac_c_werror_flag=$ac_save_c_werror_flag ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5
-printf '%s\n' "$ac_cv_prog_cc_g" >&6; }
-if test $ac_test_CFLAGS; then
-  CFLAGS=$ac_save_CFLAGS
-elif test $ac_cv_prog_cc_g = yes; then
-  if test "$GCC" = yes; then
-    CFLAGS="-g -O2"
-  else
-    CFLAGS="-g"
-  fi
-else
-  if test "$GCC" = yes; then
-    CFLAGS="-O2"
-  else
-    CFLAGS=
-  fi
-fi
-ac_prog_cc_stdc=no
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C23 features" >&5
-printf %s "checking for $CC option to enable C23 features... " >&6; }
-if test ${ac_cv_prog_cc_c23+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c23=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c23_program
-_ACEOF
-for ac_arg in '' -std=gnu23
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c23=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c23" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c23" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c23" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c23" >&5
-printf '%s\n' "$ac_cv_prog_cc_c23" >&6; }
-     CC="$CC $ac_cv_prog_cc_c23" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c23
-  ac_prog_cc_stdc=c23 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C11 features" >&5
-printf %s "checking for $CC option to enable C11 features... " >&6; }
-if test ${ac_cv_prog_cc_c11+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c11=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c11_program
-_ACEOF
-for ac_arg in '' -std=gnu11 -std:c11
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c11=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c11" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c11" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c11" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c11" >&5
-printf '%s\n' "$ac_cv_prog_cc_c11" >&6; }
-     CC="$CC $ac_cv_prog_cc_c11" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c11
-  ac_prog_cc_stdc=c11 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C99 features" >&5
-printf %s "checking for $CC option to enable C99 features... " >&6; }
-if test ${ac_cv_prog_cc_c99+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c99=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c99_program
-_ACEOF
-for ac_arg in '' -std=gnu99 -std=c99 -c99 -qlanglvl=extc1x -qlanglvl=extc99 -AC99 -D_STDC_C99=
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c99=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c99" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c99" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c99" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c99" >&5
-printf '%s\n' "$ac_cv_prog_cc_c99" >&6; }
-     CC="$CC $ac_cv_prog_cc_c99" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c99
-  ac_prog_cc_stdc=c99 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C89 features" >&5
-printf %s "checking for $CC option to enable C89 features... " >&6; }
-if test ${ac_cv_prog_cc_c89+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c89=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c89_program
-_ACEOF
-for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std -Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__"
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c89=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c89" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c89" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c89" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5
-printf '%s\n' "$ac_cv_prog_cc_c89" >&6; }
-     CC="$CC $ac_cv_prog_cc_c89" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c89
-  ac_prog_cc_stdc=c89 ;;
-esac
-fi
-fi
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-  ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $CC understands -c and -o together" >&5
-printf %s "checking whether $CC understands -c and -o together... " >&6; }
-if test ${am_cv_prog_cc_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-  # Make sure it works both with $CC and with simple cc.
-  # Following AC_PROG_CC_C_O, we do the test twice because some
-  # compilers refuse to overwrite an existing .o file with -o,
-  # though they will create one.
-  am_cv_prog_cc_c_o=yes
-  for am_i in 1 2; do
-    if { echo "$as_me:$LINENO: $CC -c conftest.$ac_ext -o conftest2.$ac_objext" >&5
-   ($CC -c conftest.$ac_ext -o conftest2.$ac_objext) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } \
-         && test -f conftest2.$ac_objext; then
-      : OK
-    else
-      am_cv_prog_cc_c_o=no
-      break
-    fi
-  done
-  # aligned with autoconf, so not including core; see bug#72225.
-  rm -f -r a.out a.exe b.out conftest.$ac_ext conftest.$ac_objext \
-    conftest.dSYM conftest1.$ac_ext conftest1.$ac_objext conftest1.dSYM \
-    conftest2.$ac_ext conftest2.$ac_objext conftest2.dSYM
-  unset am_i ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_prog_cc_c_o" >&5
-printf '%s\n' "$am_cv_prog_cc_c_o" >&6; }
-if test "$am_cv_prog_cc_c_o" != yes; then
-   # Losing compiler, so override with the script.
-   # FIXME: It is wrong to rewrite CC.
-   # But if we don't then we get into trouble of one sort or another.
-   # A longer-term fix would be to have automake use am__CC in this case,
-   # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)"
-   CC="$am_aux_dir/compile $CC"
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-
-ac_header= ac_cache=
-for ac_item in $ac_header_c_list
-do
-  if test $ac_cache; then
-    ac_fn_c_check_header_compile "$LINENO" $ac_header ac_cv_header_$ac_cache "$ac_includes_default"
-    if eval test \"x\$ac_cv_header_$ac_cache\" = xyes; then
-      printf '%s\n' "#define $ac_item 1" >> confdefs.h
-    fi
-    ac_header= ac_cache=
-  elif test $ac_header; then
-    ac_cache=$ac_item
-  else
-    ac_header=$ac_item
-  fi
-done
-
-
-
-
-
-
-
-
-if test $ac_cv_header_stdlib_h = yes && test $ac_cv_header_string_h = yes
-then :
-  
-printf '%s\n' "@%:@define STDC_HEADERS 1" >>confdefs.h
-
-fi
-
-
-
-    
-  
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether it is safe to define __EXTENSIONS__" >&5
-printf %s "checking whether it is safe to define __EXTENSIONS__... " >&6; }
-if test ${ac_cv_safe_to_define___extensions__+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-#         define __EXTENSIONS__ 1
-          $ac_includes_default
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_safe_to_define___extensions__=yes
-else case e in @%:@(
-  e) ac_cv_safe_to_define___extensions__=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_safe_to_define___extensions__" >&5
-printf '%s\n' "$ac_cv_safe_to_define___extensions__" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether _XOPEN_SOURCE should be defined" >&5
-printf %s "checking whether _XOPEN_SOURCE should be defined... " >&6; }
-if test ${ac_cv_should_define__xopen_source+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_should_define__xopen_source=no
-    if test $ac_cv_header_wchar_h = yes
-then :
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-          #include <wchar.h>
-          mbstate_t x;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-            #define _XOPEN_SOURCE 500
-            #include <wchar.h>
-            mbstate_t x;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_should_define__xopen_source=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_should_define__xopen_source" >&5
-printf '%s\n' "$ac_cv_should_define__xopen_source" >&6; }
-
-  printf '%s\n' "@%:@define _ALL_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _COSMO_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _DARWIN_C_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _GNU_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _HPUX_ALT_XOPEN_SOCKET_API 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _NETBSD_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _OPENBSD_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _POSIX_PTHREAD_SEMANTICS 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_ATTRIBS_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_BFP_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_DFP_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_FUNCS_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_TYPES_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_LIB_EXT2__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_MATH_SPEC_FUNCS__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _TANDEM_SOURCE 1" >>confdefs.h
-
-  if test $ac_cv_header_minix_config_h = yes
-then :
-  MINIX=yes
-    printf '%s\n' "@%:@define _MINIX 1" >>confdefs.h
-
-    printf '%s\n' "@%:@define _POSIX_SOURCE 1" >>confdefs.h
-
-    printf '%s\n' "@%:@define _POSIX_1_SOURCE 2" >>confdefs.h
-
-else case e in @%:@(
-  e) MINIX= ;;
-esac
-fi
-  if test $ac_cv_safe_to_define___extensions__ = yes
-then :
-  printf '%s\n' "@%:@define __EXTENSIONS__ 1" >>confdefs.h
-
-fi
-  if test $ac_cv_should_define__xopen_source = yes
-then :
-  printf '%s\n' "@%:@define _XOPEN_SOURCE 500" >>confdefs.h
-
-fi
-
-
-# Initialize Automake
-am__api_version='1.18'
-
-
-  # Find a good install program.  We prefer a C program (faster),
-# so one script is as good as another.  But avoid the broken or
-# incompatible versions:
-# SysV /etc/install, /usr/sbin/install
-# SunOS /usr/etc/install
-# IRIX /sbin/install
-# AIX /bin/install
-# AmigaOS /C/install, which installs bootblocks on floppy discs
-# AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag
-# AFS /usr/afsws/bin/install, which mishandles nonexistent args
-# SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
-# OS/2's system install, which has a completely different semantic
-# ./install, which can be erroneously created by make from ./install.sh.
-# Reject install programs that cannot install multiple files.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5
-printf %s "checking for a BSD-compatible install... " >&6; }
-if test -z "$INSTALL"; then
-if test ${ac_cv_path_install+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    # Account for fact that we put trailing slashes in our PATH walk.
-case $as_dir in @%:@((
-  ./ | /[cC]/* | \
-  /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \
-  ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \
-  /usr/ucb/* ) ;;
-  *)
-    # OSF/1 and SCO ODT 3.0 have their own names for install.
-    # Don't use installbsd from OSF/1 since it installs stuff as root
-    # by default.
-    for ac_prog in ginstall scoinst install; do
-      for ac_exec_ext in '' $ac_executable_extensions; do
-	if as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext"; then
-	  if test $ac_prog = install &&
-	    grep dspmsg "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # AIX install.  It has an incompatible calling convention.
-	    :
-	  elif test $ac_prog = install &&
-	    grep pwplus "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # program-specific install script used by HP pwplus--don't use.
-	    :
-	  else
-	    rm -rf conftest.one conftest.two conftest.dir
-	    echo one > conftest.one
-	    echo two > conftest.two
-	    mkdir conftest.dir
-	    if "$as_dir$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir/" &&
-	      test -s conftest.one && test -s conftest.two &&
-	      test -s conftest.dir/conftest.one &&
-	      test -s conftest.dir/conftest.two
-	    then
-	      ac_cv_path_install="$as_dir$ac_prog$ac_exec_ext -c"
-	      break 3
-	    fi
-	  fi
-	fi
-      done
-    done
-    ;;
-esac
-
-  done
-IFS=$as_save_IFS
-
-rm -rf conftest.one conftest.two conftest.dir
- ;;
-esac
-fi
-  if test ${ac_cv_path_install+y}; then
-    INSTALL=$ac_cv_path_install
-  else
-    # As a last resort, use the slow shell script.  Don't cache a
-    # value for INSTALL within a source directory, because that will
-    # break other packages using the cache if that directory is
-    # removed, or if the value is a relative name.
-    INSTALL=$ac_install_sh
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5
-printf '%s\n' "$INSTALL" >&6; }
-
-# Use test -z because SunOS4 sh mishandles braces in ${var-val}.
-# It thinks the first close brace ends the variable substitution.
-test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}'
-
-test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}'
-
-test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether sleep supports fractional seconds" >&5
-printf %s "checking whether sleep supports fractional seconds... " >&6; }
-if test ${am_cv_sleep_fractional_seconds+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if sleep 0.001 2>/dev/null
-then :
-  am_cv_sleep_fractional_seconds=yes
-else case e in @%:@(
-  e) am_cv_sleep_fractional_seconds=no ;;
-esac
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_sleep_fractional_seconds" >&5
-printf '%s\n' "$am_cv_sleep_fractional_seconds" >&6; }
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking filesystem timestamp resolution" >&5
-printf %s "checking filesystem timestamp resolution... " >&6; }
-if test ${am_cv_filesystem_timestamp_resolution+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) # Default to the worst case.
-am_cv_filesystem_timestamp_resolution=2
-
-# Only try to go finer than 1 sec if sleep can do it.
-# Don't try 1 sec, because if 0.01 sec and 0.1 sec don't work,
-# - 1 sec is not much of a win compared to 2 sec, and
-# - it takes 2 seconds to perform the test whether 1 sec works.
-# 
-# Instead, just use the default 2s on platforms that have 1s resolution,
-# accept the extra 1s delay when using $sleep in the Automake tests, in
-# exchange for not incurring the 2s delay for running the test for all
-# packages.
-#
-am_try_resolutions=
-if test "$am_cv_sleep_fractional_seconds" = yes; then
-  # Even a millisecond often causes a bunch of false positives,
-  # so just try a hundredth of a second. The time saved between .001 and
-  # .01 is not terribly consequential.
-  am_try_resolutions="0.01 0.1 $am_try_resolutions"
-fi
-
-# In order to catch current-generation FAT out, we must *modify* files
-# that already exist; the *creation* timestamp is finer.  Use names
-# that make ls -t sort them differently when they have equal
-# timestamps than when they have distinct timestamps, keeping
-# in mind that ls -t prints the *newest* file first.
-rm -f conftest.ts?
-: > conftest.ts1
-: > conftest.ts2
-: > conftest.ts3
-
-# Make sure ls -t actually works.  Do 'set' in a subshell so we don't
-# clobber the current shell's arguments. (Outer-level square brackets
-# are removed by m4; they're present so that m4 does not expand
-# <dollar><star>; be careful, easy to get confused.)
-if (
-     set X `ls -t conftest.ts[12]` &&
-     {
-       test "$*" != "X conftest.ts1 conftest.ts2" ||
-       test "$*" != "X conftest.ts2 conftest.ts1";
-     }
-); then :; else
-  # If neither matched, then we have a broken ls.  This can happen
-  # if, for instance, CONFIG_SHELL is bash and it inherits a
-  # broken ls alias from the environment.  This has actually
-  # happened.  Such a system could not be considered "sane".
-  printf '%s\n' ""Bad output from ls -t: \"`ls -t conftest.ts[12]`\""" >&5
-  { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "ls -t produces unexpected output.
-Make sure there is not a broken ls alias in your environment.
-See 'config.log' for more details" "$LINENO" 5; }
-fi
-
-for am_try_res in $am_try_resolutions; do
-  # Any one fine-grained sleep might happen to cross the boundary
-  # between two values of a coarser actual resolution, but if we do
-  # two fine-grained sleeps in a row, at least one of them will fall
-  # entirely within a coarse interval.
-  echo alpha > conftest.ts1
-  sleep $am_try_res
-  echo beta > conftest.ts2
-  sleep $am_try_res
-  echo gamma > conftest.ts3
-
-  # We assume that 'ls -t' will make use of high-resolution
-  # timestamps if the operating system supports them at all.
-  if (set X `ls -t conftest.ts?` &&
-      test "$2" = conftest.ts3 &&
-      test "$3" = conftest.ts2 &&
-      test "$4" = conftest.ts1); then
-    #
-    # Ok, ls -t worked. If we're at a resolution of 1 second, we're done,
-    # because we don't need to test make.
-    make_ok=true
-    if test $am_try_res != 1; then
-      # But if we've succeeded so far with a subsecond resolution, we
-      # have one more thing to check: make. It can happen that
-      # everything else supports the subsecond mtimes, but make doesn't;
-      # notably on macOS, which ships make 3.81 from 2006 (the last one
-      # released under GPLv2). https://bugs.gnu.org/68808
-      # 
-      # We test $MAKE if it is defined in the environment, else "make".
-      # It might get overridden later, but our hope is that in practice
-      # it does not matter: it is the system "make" which is (by far)
-      # the most likely to be broken, whereas if the user overrides it,
-      # probably they did so with a better, or at least not worse, make.
-      # https://lists.gnu.org/archive/html/automake/2024-06/msg00051.html
-      #
-      # Create a Makefile (real tab character here):
-      rm -f conftest.mk
-      echo 'conftest.ts1: conftest.ts2' >conftest.mk
-      echo '	touch conftest.ts2' >>conftest.mk
-      #
-      # Now, running
-      #   touch conftest.ts1; touch conftest.ts2; make
-      # should touch ts1 because ts2 is newer. This could happen by luck,
-      # but most often, it will fail if make's support is insufficient. So
-      # test for several consecutive successes.
-      #
-      # (We reuse conftest.ts[12] because we still want to modify existing
-      # files, not create new ones, per above.)
-      n=0
-      make=${MAKE-make}
-      until test $n -eq 3; do
-        echo one > conftest.ts1
-        sleep $am_try_res
-        echo two > conftest.ts2 # ts2 should now be newer than ts1
-        if $make -f conftest.mk | grep 'up to date' >/dev/null; then
-          make_ok=false
-          break # out of $n loop
-        fi
-        n=`expr $n + 1`
-      done
-    fi
-    #
-    if $make_ok; then
-      # Everything we know to check worked out, so call this resolution good.
-      am_cv_filesystem_timestamp_resolution=$am_try_res
-      break # out of $am_try_res loop
-    fi
-    # Otherwise, we'll go on to check the next resolution.
-  fi
-done
-rm -f conftest.ts?
-# (end _am_filesystem_timestamp_resolution)
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_filesystem_timestamp_resolution" >&5
-printf '%s\n' "$am_cv_filesystem_timestamp_resolution" >&6; }
-
-# This check should not be cached, as it may vary across builds of
-# different projects.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether build environment is sane" >&5
-printf %s "checking whether build environment is sane... " >&6; }
-# Reject unsafe characters in $srcdir or the absolute working directory
-# name.  Accept space and tab only in the latter.
-am_lf='
-'
-case `pwd` in
-  *[\\\"\#\$\&\'\`$am_lf]*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-    as_fn_error $? "unsafe absolute working directory name" "$LINENO" 5;;
-esac
-case $srcdir in
-  *[\\\"\#\$\&\'\`$am_lf\ \	]*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-    as_fn_error $? "unsafe srcdir value: '$srcdir'" "$LINENO" 5;;
-esac
-
-# Do 'set' in a subshell so we don't clobber the current shell's
-# arguments.  Must try -L first in case configure is actually a
-# symlink; some systems play weird games with the mod time of symlinks
-# (eg FreeBSD returns the mod time of the symlink's containing
-# directory).
-am_build_env_is_sane=no
-am_has_slept=no
-rm -f conftest.file
-for am_try in 1 2; do
-  echo "timestamp, slept: $am_has_slept" > conftest.file
-  if (
-    set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null`
-    if test "$*" = "X"; then
-      # -L didn't work.
-      set X `ls -t "$srcdir/configure" conftest.file`
-    fi
-    test "$2" = conftest.file
-  ); then
-    am_build_env_is_sane=yes
-    break
-  fi
-  # Just in case.
-  sleep "$am_cv_filesystem_timestamp_resolution"
-  am_has_slept=yes
-done
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_build_env_is_sane" >&5
-printf '%s\n' "$am_build_env_is_sane" >&6; }
-if test "$am_build_env_is_sane" = no; then
-  as_fn_error $? "newly created file is older than distributed files!
-Check your system clock" "$LINENO" 5
-fi
-
-# If we didn't sleep, we still need to ensure time stamps of config.status and
-# generated files are strictly newer.
-am_sleep_pid=
-if test -e conftest.file || grep 'slept: no' conftest.file >/dev/null 2>&1
-then :
-  
-else case e in @%:@(
-  e)   ( sleep "$am_cv_filesystem_timestamp_resolution" ) &
-  am_sleep_pid=$!
- ;;
-esac
-fi
-
-rm -f conftest.file
-
-test "$program_prefix" != NONE &&
-  program_transform_name="s&^&$program_prefix&;$program_transform_name"
-# Use a double $ so make ignores it.
-test "$program_suffix" != NONE &&
-  program_transform_name="s&\$&$program_suffix&;$program_transform_name"
-# Double any \ or $.
-# By default was 's,x,x', remove it if useless.
-ac_script='s/[\\$]/&&/g;s/;s,x,x,$//'
-program_transform_name=`printf '%s\n' "$program_transform_name" | sed "$ac_script"`
-
-
-  if test x"${MISSING+set}" != xset; then
-  MISSING="\${SHELL} '$am_aux_dir/missing'"
-fi
-# Use eval to expand $SHELL
-if eval "$MISSING --is-lightweight"; then
-  am_missing_run="$MISSING "
-else
-  am_missing_run=
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: 'missing' script is too old or missing" >&5
-printf '%s\n' "$as_me: WARNING: 'missing' script is too old or missing" >&2;}
-fi
-
-if test x"${install_sh+set}" != xset; then
-  case $am_aux_dir in
-  *\ * | *\	*)
-    install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;;
-  *)
-    install_sh="\${SHELL} $am_aux_dir/install-sh"
-  esac
-fi
-
-# Installed binaries are usually stripped using 'strip' when the user
-# run "make install-strip".  However 'strip' might not be the right
-# tool to use in cross-compilation environments, therefore Automake
-# will honor the 'STRIP' environment variable to overrule this program.
-if test "$cross_compiling" != no; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-printf '%s\n' "$STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-printf '%s\n' "$ac_ct_STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-fi
-INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s"
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a race-free mkdir -p" >&5
-printf %s "checking for a race-free mkdir -p... " >&6; }
-if test -z "$MKDIR_P"; then
-  if test ${ac_cv_path_mkdir+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/opt/sfw/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in mkdir gmkdir; do
-	 for ac_exec_ext in '' $ac_executable_extensions; do
-	   as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext" || continue
-	   case `"$as_dir$ac_prog$ac_exec_ext" --version 2>&1` in #(
-	     'mkdir ('*'coreutils) '* | \
-	     *'BusyBox '* | \
-	     'mkdir (fileutils) '4.1*)
-	       ac_cv_path_mkdir=$as_dir$ac_prog$ac_exec_ext
-	       break 3;;
-	   esac
-	 done
-       done
-  done
-IFS=$as_save_IFS
- ;;
-esac
-fi
-
-  test -d ./--version && rmdir ./--version
-  if test ${ac_cv_path_mkdir+y}; then
-    MKDIR_P="$ac_cv_path_mkdir -p"
-  else
-    # As a last resort, use plain mkdir -p,
-    # in the hope it doesn't have the bugs of ancient mkdir.
-    MKDIR_P='mkdir -p'
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MKDIR_P" >&5
-printf '%s\n' "$MKDIR_P" >&6; }
-
-for ac_prog in gawk mawk nawk awk 'busybox awk'
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_AWK+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$AWK"; then
-  ac_cv_prog_AWK="$AWK" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AWK="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-AWK=$ac_cv_prog_AWK
-if test -n "$AWK"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5
-printf '%s\n' "$AWK" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$AWK" && break
-done
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} sets \$(MAKE)" >&5
-printf %s "checking whether ${MAKE-make} sets \$(MAKE)... " >&6; }
-set x ${MAKE-make}
-ac_make=`printf '%s\n' "$2" | sed 's/+/p/g; s/[^a-zA-Z0-9_]/_/g'`
-if eval test \${ac_cv_prog_make_${ac_make}_set+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat >conftest.make <<\_ACEOF
-SHELL = /bin/sh
-all:
-	@printf '%s\n' '@@@%%%=$(MAKE)=@@@%%%'
-_ACEOF
-# GNU make sometimes prints "make[1]: Entering ...", which would confuse us.
-case `${MAKE-make} -f conftest.make 2>/dev/null` in
-  *@@@%%%=?*=@@@%%%*)
-    eval ac_cv_prog_make_${ac_make}_set=yes;;
-  *)
-    eval ac_cv_prog_make_${ac_make}_set=no;;
-esac
-rm -f conftest.make ;;
-esac
-fi
-if eval test \$ac_cv_prog_make_${ac_make}_set = yes; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-  SET_MAKE=
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-  SET_MAKE="MAKE=${MAKE-make}"
-fi
-
-rm -rf .tst 2>/dev/null
-mkdir .tst 2>/dev/null
-if test -d .tst; then
-  am__leading_dot=.
-else
-  am__leading_dot=_
-fi
-rmdir .tst 2>/dev/null
-
-DEPDIR="${am__leading_dot}deps"
-
-ac_config_commands="$ac_config_commands depfiles"
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} supports the include directive" >&5
-printf %s "checking whether ${MAKE-make} supports the include directive... " >&6; }
-cat > confinc.mk << 'END'
-am__doit:
-	@echo this is the am__doit target >confinc.out
-.PHONY: am__doit
-END
-am__include="#"
-am__quote=
-# BSD make does it like this.
-echo '.include "confinc.mk" # ignored' > confmf.BSD
-# Other make implementations (GNU, Solaris 10, AIX) do it like this.
-echo 'include confinc.mk # ignored' > confmf.GNU
-_am_result=no
-for s in GNU BSD; do
-  { echo "$as_me:$LINENO: ${MAKE-make} -f confmf.$s && cat confinc.out" >&5
-   (${MAKE-make} -f confmf.$s && cat confinc.out) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-  case $?:`cat confinc.out 2>/dev/null` in @%:@(
-  '0:this is the am__doit target') :
-    case $s in @%:@(
-  BSD) :
-    am__include='.include' am__quote='"' ;; @%:@(
-  *) :
-    am__include='include' am__quote='' ;;
-esac ;; @%:@(
-  *) :
-     ;;
-esac
-  if test "$am__include" != "#"; then
-    _am_result="yes ($s style)"
-    break
-  fi
-done
-rm -f confinc.* confmf.*
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ${_am_result}" >&5
-printf '%s\n' "${_am_result}" >&6; }
-
-@%:@ Check whether --enable-dependency-tracking was given.
-if test ${enable_dependency_tracking+y}
-then :
-  enableval=$enable_dependency_tracking; 
-fi
-
-if test "x$enable_dependency_tracking" != xno; then
-  am_depcomp="$ac_aux_dir/depcomp"
-  AMDEPBACKSLASH='\'
-  am__nodep='_no'
-fi
- if test "x$enable_dependency_tracking" != xno; then
-  AMDEP_TRUE=
-  AMDEP_FALSE='#'
-else
-  AMDEP_TRUE='#'
-  AMDEP_FALSE=
-fi
-
-
-AM_DEFAULT_VERBOSITY=1
-@%:@ Check whether --enable-silent-rules was given.
-if test ${enable_silent_rules+y}
-then :
-  enableval=$enable_silent_rules; 
-fi
-
-am_make=${MAKE-make}
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5
-printf %s "checking whether $am_make supports nested variables... " >&6; }
-if test ${am_cv_make_support_nested_variables+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if printf '%s\n' 'TRUE=$(BAR$(V))
-BAR0=false
-BAR1=true
-V=1
-am__doit:
-	@$(TRUE)
-.PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then
-  am_cv_make_support_nested_variables=yes
-else
-  am_cv_make_support_nested_variables=no
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5
-printf '%s\n' "$am_cv_make_support_nested_variables" >&6; }
-AM_BACKSLASH='\'
-
-am__rm_f_notfound=
-if (rm -f && rm -fr && rm -rf) 2>/dev/null
-then :
-  
-else case e in @%:@(
-  e) am__rm_f_notfound='""' ;;
-esac
-fi
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking xargs -n works" >&5
-printf %s "checking xargs -n works... " >&6; }
-if test ${am_cv_xargs_n_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test "`echo 1 2 3 | xargs -n2 echo`" = "1 2
-3"
-then :
-  am_cv_xargs_n_works=yes
-else case e in @%:@(
-  e) am_cv_xargs_n_works=no ;;
-esac
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_xargs_n_works" >&5
-printf '%s\n' "$am_cv_xargs_n_works" >&6; }
-if test "$am_cv_xargs_n_works" = yes
-then :
-  am__xargs_n='xargs -n'
-else case e in @%:@(
-  e)   am__xargs_n='am__xargs_n () { shift; sed "s/ /\\n/g" | while read am__xargs_n_arg; do "" "$am__xargs_n_arg"; done; }'
- ;;
-esac
-fi
-
-if test "`cd $srcdir && pwd`" != "`pwd`"; then
-  # Use -I$(srcdir) only when $(srcdir) != ., so that make's output
-  # is not polluted with repeated "-I."
-  am__isrc=' -I$(srcdir)'
-  # test to see if srcdir already configured
-  if test -f $srcdir/config.status; then
-    as_fn_error $? "source directory already configured; run \"make distclean\" there first" "$LINENO" 5
-  fi
-fi
-
-# test whether we have cygpath
-if test -z "$CYGPATH_W"; then
-  if (cygpath --version) >/dev/null 2>/dev/null; then
-    CYGPATH_W='cygpath -w'
-  else
-    CYGPATH_W=echo
-  fi
-fi
-
-
-# Define the identity of the package.
- PACKAGE='libXext'
- VERSION='1.3.7'
-
-
-printf '%s\n' "@%:@define PACKAGE \"$PACKAGE\"" >>confdefs.h
-
- 
-printf '%s\n' "@%:@define VERSION \"$VERSION\"" >>confdefs.h
-
-# Some tools Automake needs.
-
-ACLOCAL=${ACLOCAL-"${am_missing_run}aclocal-${am__api_version}"}
-
-
-AUTOCONF=${AUTOCONF-"${am_missing_run}autoconf"}
-
-
-AUTOMAKE=${AUTOMAKE-"${am_missing_run}automake-${am__api_version}"}
-
-
-AUTOHEADER=${AUTOHEADER-"${am_missing_run}autoheader"}
-
-
-MAKEINFO=${MAKEINFO-"${am_missing_run}makeinfo"}
-
-# For better backward compatibility.  To be removed once Automake 1.9.x
-# dies out for good.  For more background, see:
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00001.html>
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00014.html>
-mkdir_p='$(MKDIR_P)'
-
-# We need awk for the "check" target (and possibly the TAP driver).  The
-# system "awk" is bad on some platforms.
-# Always define AMTAR for backward compatibility.  Yes, it's still used
-# in the wild :-(  We should find a proper way to deprecate it ...
-AMTAR='$${TAR-tar}'
-
-
-# We'll loop over all known methods to create a tar archive until one works.
-_am_tools='gnutar plaintar pax cpio none'
-
-# The POSIX 1988 'ustar' format is defined with fixed-size fields.
-      # There is notably a 21 bits limit for the UID and the GID.  In fact,
-      # the 'pax' utility can hang on bigger UID/GID (see automake bug#8343
-      # and bug#13588).
-      am_max_uid=2097151 # 2^21 - 1
-      am_max_gid=$am_max_uid
-      # The $UID and $GID variables are not portable, so we need to resort
-      # to the POSIX-mandated id(1) utility.  Errors in the 'id' calls
-      # below are definitely unexpected, so allow the users to see them
-      # (that is, avoid stderr redirection).
-      am_uid=`id -u || echo unknown`
-      am_gid=`id -g || echo unknown`
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether UID '$am_uid' is supported by ustar format" >&5
-printf %s "checking whether UID '$am_uid' is supported by ustar format... " >&6; }
-      if test x$am_uid = xunknown; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ancient id detected; assuming current UID is ok, but dist-ustar might not work" >&5
-printf '%s\n' "$as_me: WARNING: ancient id detected; assuming current UID is ok, but dist-ustar might not work" >&2;}
-      elif test $am_uid -le $am_max_uid; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        _am_tools=none
-      fi
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether GID '$am_gid' is supported by ustar format" >&5
-printf %s "checking whether GID '$am_gid' is supported by ustar format... " >&6; }
-      if test x$gm_gid = xunknown; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ancient id detected; assuming current GID is ok, but dist-ustar might not work" >&5
-printf '%s\n' "$as_me: WARNING: ancient id detected; assuming current GID is ok, but dist-ustar might not work" >&2;}
-      elif test $am_gid -le $am_max_gid; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        _am_tools=none
-      fi
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to create a ustar tar archive" >&5
-printf %s "checking how to create a ustar tar archive... " >&6; }
-
-  # Go ahead even if we have the value already cached.  We do so because we
-  # need to set the values for the 'am__tar' and 'am__untar' variables.
-  _am_tools=${am_cv_prog_tar_ustar-$_am_tools}
-
-  for _am_tool in $_am_tools; do
-    case $_am_tool in
-    gnutar)
-      for _am_tar in tar gnutar gtar; do
-        { echo "$as_me:$LINENO: $_am_tar --version" >&5
-   ($_am_tar --version) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } && break
-      done
-      am__tar="$_am_tar --format=ustar -chf - "'"$$tardir"'
-      am__tar_="$_am_tar --format=ustar -chf - "'"$tardir"'
-      am__untar="$_am_tar -xf -"
-      ;;
-    plaintar)
-      # Must skip GNU tar: if it does not support --format= it doesn't create
-      # ustar tarball either.
-      (tar --version) >/dev/null 2>&1 && continue
-      am__tar='tar chf - "$$tardir"'
-      am__tar_='tar chf - "$tardir"'
-      am__untar='tar xf -'
-      ;;
-    pax)
-      am__tar='pax -L -x ustar -w "$$tardir"'
-      am__tar_='pax -L -x ustar -w "$tardir"'
-      am__untar='pax -r'
-      ;;
-    cpio)
-      am__tar='find "$$tardir" -print | cpio -o -H ustar -L'
-      am__tar_='find "$tardir" -print | cpio -o -H ustar -L'
-      am__untar='cpio -i -H ustar -d'
-      ;;
-    none)
-      am__tar=false
-      am__tar_=false
-      am__untar=false
-      ;;
-    esac
-
-    # If the value was cached, stop now.  We just wanted to have am__tar
-    # and am__untar set.
-    test -n "${am_cv_prog_tar_ustar}" && break
-
-    # tar/untar a dummy directory, and stop if the command works.
-    rm -rf conftest.dir
-    mkdir conftest.dir
-    echo GrepMe > conftest.dir/file
-    { echo "$as_me:$LINENO: tardir=conftest.dir && eval $am__tar_ >conftest.tar" >&5
-   (tardir=conftest.dir && eval $am__tar_ >conftest.tar) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-    rm -rf conftest.dir
-    if test -s conftest.tar; then
-      { echo "$as_me:$LINENO: $am__untar <conftest.tar" >&5
-   ($am__untar <conftest.tar) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-      { echo "$as_me:$LINENO: cat conftest.dir/file" >&5
-   (cat conftest.dir/file) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-      grep GrepMe conftest.dir/file >/dev/null 2>&1 && break
-    fi
-  done
-  rm -rf conftest.dir
-
-  if test ${am_cv_prog_tar_ustar+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) am_cv_prog_tar_ustar=$_am_tool ;;
-esac
-fi
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_prog_tar_ustar" >&5
-printf '%s\n' "$am_cv_prog_tar_ustar" >&6; }
-
-
-
-
-
-depcc="$CC"   am_compiler_list=
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking dependency style of $depcc" >&5
-printf %s "checking dependency style of $depcc... " >&6; }
-if test ${am_cv_CC_dependencies_compiler_type+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then
-  # We make a subdir and do the tests there.  Otherwise we can end up
-  # making bogus files that we don't know about and never remove.  For
-  # instance it was reported that on HP-UX the gcc test will end up
-  # making a dummy file named 'D' -- because '-MD' means "put the output
-  # in D".
-  rm -rf conftest.dir
-  mkdir conftest.dir
-  # Copy depcomp to subdir because otherwise we won't find it if we're
-  # using a relative directory.
-  cp "$am_depcomp" conftest.dir
-  cd conftest.dir
-  # We will build objects and dependencies in a subdirectory because
-  # it helps to detect inapplicable dependency modes.  For instance
-  # both Tru64's cc and ICC support -MD to output dependencies as a
-  # side effect of compilation, but ICC will put the dependencies in
-  # the current directory while Tru64 will put them in the object
-  # directory.
-  mkdir sub
-
-  am_cv_CC_dependencies_compiler_type=none
-  if test "$am_compiler_list" = ""; then
-     am_compiler_list=`sed -n 's/^#*\([a-zA-Z0-9]*\))$/\1/p' < ./depcomp`
-  fi
-  am__universal=false
-  case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac
-
-  for depmode in $am_compiler_list; do
-    # Setup a source with many dependencies, because some compilers
-    # like to wrap large dependency lists on column 80 (with \), and
-    # we should not choose a depcomp mode which is confused by this.
-    #
-    # We need to recreate these files for each test, as the compiler may
-    # overwrite some of them when testing with obscure command lines.
-    # This happens at least with the AIX C compiler.
-    : > sub/conftest.c
-    for i in 1 2 3 4 5 6; do
-      echo '#include "conftst'$i'.h"' >> sub/conftest.c
-      # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with
-      # Solaris 10 /bin/sh.
-      echo '/* dummy */' > sub/conftst$i.h
-    done
-    echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
-
-    # We check with '-c' and '-o' for the sake of the "dashmstdout"
-    # mode.  It turns out that the SunPro C++ compiler does not properly
-    # handle '-M -o', and we need to detect this.  Also, some Intel
-    # versions had trouble with output in subdirs.
-    am__obj=sub/conftest.${OBJEXT-o}
-    am__minus_obj="-o $am__obj"
-    case $depmode in
-    gcc)
-      # This depmode causes a compiler race in universal mode.
-      test "$am__universal" = false || continue
-      ;;
-    nosideeffect)
-      # After this tag, mechanisms are not by side-effect, so they'll
-      # only be used when explicitly requested.
-      if test "x$enable_dependency_tracking" = xyes; then
-	continue
-      else
-	break
-      fi
-      ;;
-    msvc7 | msvc7msys | msvisualcpp | msvcmsys)
-      # This compiler won't grok '-c -o', but also, the minuso test has
-      # not run yet.  These depmodes are late enough in the game, and
-      # so weak that their functioning should not be impacted.
-      am__obj=conftest.${OBJEXT-o}
-      am__minus_obj=
-      ;;
-    none) break ;;
-    esac
-    if depmode=$depmode \
-       source=sub/conftest.c object=$am__obj \
-       depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
-       $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \
-         >/dev/null 2>conftest.err &&
-       grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep $am__obj sub/conftest.Po > /dev/null 2>&1 &&
-       ${MAKE-make} -s -f confmf > /dev/null 2>&1; then
-      # icc doesn't choke on unknown options, it will just issue warnings
-      # or remarks (even with -Werror).  So we grep stderr for any message
-      # that says an option was ignored or not supported.
-      # When given -MP, icc 7.0 and 7.1 complain thus:
-      #   icc: Command line warning: ignoring option '-M'; no argument required
-      # The diagnosis changed in icc 8.0:
-      #   icc: Command line remark: option '-MP' not supported
-      if (grep 'ignoring option' conftest.err ||
-          grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else
-        am_cv_CC_dependencies_compiler_type=$depmode
-        break
-      fi
-    fi
-  done
-
-  cd ..
-  rm -rf conftest.dir
-else
-  am_cv_CC_dependencies_compiler_type=none
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_CC_dependencies_compiler_type" >&5
-printf '%s\n' "$am_cv_CC_dependencies_compiler_type" >&6; }
-CCDEPMODE=depmode=$am_cv_CC_dependencies_compiler_type
-
- if 
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_CC_dependencies_compiler_type" = gcc3; then
-  am__fastdepCC_TRUE=
-  am__fastdepCC_FALSE='#'
-else
-  am__fastdepCC_TRUE='#'
-  am__fastdepCC_FALSE=
-fi
-
-
-# Variables for tags utilities; see am/tags.am
-if test -z "$CTAGS"; then
-  CTAGS=ctags
-fi
-
-if test -z "$ETAGS"; then
-  ETAGS=etags
-fi
-
-if test -z "$CSCOPE"; then
-  CSCOPE=cscope
-fi
-
-
-
-
-
-
-
-
-# Initialize libtool
-case `pwd` in
-  *\ * | *\	*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&5
-printf '%s\n' "$as_me: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&2;} ;;
-esac
-
-
-
-macro_version='2.5.4'
-macro_revision='2.5.4'
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-
-  
-ltmain=$ac_aux_dir/ltmain.sh
-
-
-  
-  # Make sure we can run config.sub.
-$SHELL "${ac_aux_dir}config.sub" sun4 >/dev/null 2>&1 ||
-  as_fn_error $? "cannot run $SHELL ${ac_aux_dir}config.sub" "$LINENO" 5
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking build system type" >&5
-printf %s "checking build system type... " >&6; }
-if test ${ac_cv_build+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_build_alias=$build_alias
-test "x$ac_build_alias" = x &&
-  ac_build_alias=`$SHELL "${ac_aux_dir}config.guess"`
-test "x$ac_build_alias" = x &&
-  as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5
-ac_cv_build=`$SHELL "${ac_aux_dir}config.sub" $ac_build_alias` ||
-  as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $ac_build_alias failed" "$LINENO" 5
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5
-printf '%s\n' "$ac_cv_build" >&6; }
-case $ac_cv_build in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical build" "$LINENO" 5;;
-esac
-build=$ac_cv_build
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_build
-shift
-build_cpu=$1
-build_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-build_os=$*
-IFS=$ac_save_IFS
-case $build_os in *\ *) build_os=`printf '%s\n' "$build_os" | sed 's/ /-/g'`;; esac
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking host system type" >&5
-printf %s "checking host system type... " >&6; }
-if test ${ac_cv_host+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test "x$host_alias" = x; then
-  ac_cv_host=$ac_cv_build
-else
-  ac_cv_host=`$SHELL "${ac_aux_dir}config.sub" $host_alias` ||
-    as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $host_alias failed" "$LINENO" 5
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5
-printf '%s\n' "$ac_cv_host" >&6; }
-case $ac_cv_host in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical host" "$LINENO" 5;;
-esac
-host=$ac_cv_host
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_host
-shift
-host_cpu=$1
-host_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-host_os=$*
-IFS=$ac_save_IFS
-case $host_os in *\ *) host_os=`printf '%s\n' "$host_os" | sed 's/ /-/g'`;; esac
-
-
-# Backslashify metacharacters that are still active within
-# double-quoted strings.
-sed_quote_subst='s/\(["`$\\]\)/\\\1/g'
-
-# Same as above, but do not quote variable references.
-double_quote_subst='s/\(["`\\]\)/\\\1/g'
-
-# Sed substitution to delay expansion of an escaped shell variable in a
-# double_quote_subst'ed string.
-delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g'
-
-# Sed substitution to delay expansion of an escaped single quote.
-delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g'
-
-# Sed substitution to avoid accidental globbing in evaled expressions
-no_glob_subst='s/\*/\\\*/g'
-
-ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to print strings" >&5
-printf %s "checking how to print strings... " >&6; }
-# Test print first, because it will be a builtin if present.
-if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \
-   test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='print -r --'
-elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='printf %s\n'
-else
-  # Use this function as a fallback that always works.
-  func_fallback_echo ()
-  {
-    eval 'cat <<_LTECHO_EOF
-$1
-_LTECHO_EOF'
-  }
-  ECHO='func_fallback_echo'
-fi
-
-# func_echo_all arg...
-# Invoke $ECHO with all args, space-separated.
-func_echo_all ()
-{
-    $ECHO ""
-}
-
-case $ECHO in
-  printf*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: printf" >&5
-printf '%s\n' "printf" >&6; } ;;
-  print*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: print -r" >&5
-printf '%s\n' "print -r" >&6; } ;;
-  *) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: cat" >&5
-printf '%s\n' "cat" >&6; } ;;
-esac
-
-
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a sed that does not truncate output" >&5
-printf %s "checking for a sed that does not truncate output... " >&6; }
-if test ${ac_cv_path_SED+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)           ac_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/
-     for ac_i in 1 2 3 4 5 6 7; do
-       ac_script="$ac_script$as_nl$ac_script"
-     done
-     echo "$ac_script" 2>/dev/null | sed 99q >conftest.sed
-     { ac_script=; unset ac_script;}
-     if test -z "$SED"; then
-  ac_path_SED_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in sed gsed
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_SED="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_SED" || continue
-# Check for GNU ac_path_SED and select it if it is found.
-  # Check for GNU $ac_path_SED
-case `"$ac_path_SED" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_SED="$ac_path_SED" ac_path_SED_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' '' >> "conftest.nl"
-    "$ac_path_SED" -f conftest.sed < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_SED_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_SED="$ac_path_SED"
-      ac_path_SED_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_SED_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_SED"; then
-    as_fn_error $? "no acceptable sed could be found in \$PATH" "$LINENO" 5
-  fi
-else
-  ac_cv_path_SED=$SED
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_SED" >&5
-printf '%s\n' "$ac_cv_path_SED" >&6; }
- SED="$ac_cv_path_SED"
-  rm -f conftest.sed
-
-test -z "$SED" && SED=sed
-Xsed="$SED -e 1s/^X//"
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5
-printf %s "checking for grep that handles long lines and -e... " >&6; }
-if test ${ac_cv_path_GREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -z "$GREP"; then
-  ac_path_GREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in grep ggrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_GREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_GREP" || continue
-# Check for GNU ac_path_GREP and select it if it is found.
-  # Check for GNU $ac_path_GREP
-case `"$ac_path_GREP" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'GREP' >> "conftest.nl"
-    "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_GREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_GREP="$ac_path_GREP"
-      ac_path_GREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_GREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_GREP"; then
-    as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_GREP=$GREP
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5
-printf '%s\n' "$ac_cv_path_GREP" >&6; }
- GREP="$ac_cv_path_GREP"
- 
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
-printf %s "checking for egrep... " >&6; }
-if test ${ac_cv_path_EGREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
-   then ac_cv_path_EGREP="$GREP -E"
-   else
-     if test -z "$EGREP"; then
-  ac_path_EGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in egrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_EGREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_EGREP" || continue
-# Check for GNU ac_path_EGREP and select it if it is found.
-  # Check for GNU $ac_path_EGREP
-case `"$ac_path_EGREP" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'EGREP' >> "conftest.nl"
-    "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_EGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_EGREP="$ac_path_EGREP"
-      ac_path_EGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_EGREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_EGREP"; then
-    as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_EGREP=$EGREP
-fi
-
-   fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
-printf '%s\n' "$ac_cv_path_EGREP" >&6; }
- EGREP="$ac_cv_path_EGREP"
- 
-         EGREP_TRADITIONAL=$EGREP
- ac_cv_path_EGREP_TRADITIONAL=$EGREP
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for fgrep" >&5
-printf %s "checking for fgrep... " >&6; }
-if test ${ac_cv_path_FGREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if echo 'ab*c' | $GREP -F 'ab*c' >/dev/null 2>&1
-   then ac_cv_path_FGREP="$GREP -F"
-   else
-     if test -z "$FGREP"; then
-  ac_path_FGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in fgrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_FGREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_FGREP" || continue
-# Check for GNU ac_path_FGREP and select it if it is found.
-  # Check for GNU $ac_path_FGREP
-case `"$ac_path_FGREP" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_FGREP="$ac_path_FGREP" ac_path_FGREP_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'FGREP' >> "conftest.nl"
-    "$ac_path_FGREP" FGREP < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_FGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_FGREP="$ac_path_FGREP"
-      ac_path_FGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_FGREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_FGREP"; then
-    as_fn_error $? "no acceptable fgrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_FGREP=$FGREP
-fi
-
-   fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_FGREP" >&5
-printf '%s\n' "$ac_cv_path_FGREP" >&6; }
- FGREP="$ac_cv_path_FGREP"
- 
-
-test -z "$GREP" && GREP=grep
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-
-
-@%:@ Check whether --with-gnu-ld was given.
-if test ${with_gnu_ld+y}
-then :
-  withval=$with_gnu_ld; test no = "$withval" || with_gnu_ld=yes
-else case e in @%:@(
-  e) with_gnu_ld=no ;;
-esac
-fi
-
-ac_prog=ld
-if test yes = "$GCC"; then
-  # Check if gcc -print-prog-name=ld gives a path.
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for ld used by $CC" >&5
-printf %s "checking for ld used by $CC... " >&6; }
-  case $host in
-  *-*-mingw* | *-*-windows*)
-    # gcc leaves a trailing carriage return, which upsets mingw
-    ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;;
-  *)
-    ac_prog=`($CC -print-prog-name=ld) 2>&5` ;;
-  esac
-  case $ac_prog in
-    # Accept absolute paths.
-    [\\/]* | ?:[\\/]*)
-      re_direlt='/[^/][^/]*/\.\./'
-      # Canonicalize the pathname of ld
-      ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'`
-      while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do
-	ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"`
-      done
-      test -z "$LD" && LD=$ac_prog
-      ;;
-  "")
-    # If it fails, then pretend we aren't using GCC.
-    ac_prog=ld
-    ;;
-  *)
-    # If it is relative, then search for the first ld in PATH.
-    with_gnu_ld=unknown
-    ;;
-  esac
-elif test yes = "$with_gnu_ld"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for GNU ld" >&5
-printf %s "checking for GNU ld... " >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for non-GNU ld" >&5
-printf %s "checking for non-GNU ld... " >&6; }
-fi
-if test ${lt_cv_path_LD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -z "$LD"; then
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  for ac_dir in $PATH; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then
-      lt_cv_path_LD=$ac_dir/$ac_prog
-      # Check to see if the program is GNU ld.  I'd rather use --version,
-      # but apparently some variants of GNU ld only accept -v.
-      # Break only if it was the GNU/non-GNU ld that we prefer.
-      case `"$lt_cv_path_LD" -v 2>&1 </dev/null` in
-      *GNU* | *'with BFD'*)
-	test no != "$with_gnu_ld" && break
-	;;
-      *)
-	test yes != "$with_gnu_ld" && break
-	;;
-      esac
-    fi
-  done
-  IFS=$lt_save_ifs
-else
-  lt_cv_path_LD=$LD # Let the user override the test with a path.
-fi ;;
-esac
-fi
-
-LD=$lt_cv_path_LD
-if test -n "$LD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LD" >&5
-printf '%s\n' "$LD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-test -z "$LD" && as_fn_error $? "no acceptable ld found in \$PATH" "$LINENO" 5
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if the linker ($LD) is GNU ld" >&5
-printf %s "checking if the linker ($LD) is GNU ld... " >&6; }
-if test ${lt_cv_prog_gnu_ld+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) # I'd rather use --version here, but apparently some GNU lds only accept -v.
-case `$LD -v 2>&1 </dev/null` in
-*GNU* | *'with BFD'*)
-  lt_cv_prog_gnu_ld=yes
-  ;;
-*)
-  lt_cv_prog_gnu_ld=no
-  ;;
-esac ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_gnu_ld" >&5
-printf '%s\n' "$lt_cv_prog_gnu_ld" >&6; }
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for BSD- or MS-compatible name lister (nm)" >&5
-printf %s "checking for BSD- or MS-compatible name lister (nm)... " >&6; }
-if test ${lt_cv_path_NM+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$NM"; then
-  # Let the user override the test.
-  lt_cv_path_NM=$NM
-else
-  lt_nm_to_check=${ac_tool_prefix}nm
-  if test -n "$ac_tool_prefix" && test "$build" = "$host"; then
-    lt_nm_to_check="$lt_nm_to_check nm"
-  fi
-  for lt_tmp_nm in $lt_nm_to_check; do
-    lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-    for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do
-      IFS=$lt_save_ifs
-      test -z "$ac_dir" && ac_dir=.
-      tmp_nm=$ac_dir/$lt_tmp_nm
-      if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then
-	# Check to see if the nm accepts a BSD-compat flag.
-	# Adding the 'sed 1q' prevents false positives on HP-UX, which says:
-	#   nm: unknown option "B" ignored
-	# Tru64's nm complains that /dev/null is an invalid object file
-	# MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty
-	case $build_os in
-	mingw* | windows*) lt_bad_file=conftest.nm/nofile ;;
-	*) lt_bad_file=/dev/null ;;
-	esac
-	case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in
-	*$lt_bad_file* | *'Invalid file or object type'*)
-	  lt_cv_path_NM="$tmp_nm -B"
-	  break 2
-	  ;;
-	*)
-	  case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in
-	  */dev/null*)
-	    lt_cv_path_NM="$tmp_nm -p"
-	    break 2
-	    ;;
-	  *)
-	    lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but
-	    continue # so that we can try to find one that supports BSD flags
-	    ;;
-	  esac
-	  ;;
-	esac
-      fi
-    done
-    IFS=$lt_save_ifs
-  done
-  : ${lt_cv_path_NM=no}
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_NM" >&5
-printf '%s\n' "$lt_cv_path_NM" >&6; }
-if test no != "$lt_cv_path_NM"; then
-  NM=$lt_cv_path_NM
-else
-  # Didn't find any BSD compatible name lister, look for dumpbin.
-  if test -n "$DUMPBIN"; then :
-    # Let the user override the test.
-  else
-    if test -n "$ac_tool_prefix"; then
-  for ac_prog in dumpbin "link -dump"
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DUMPBIN+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$DUMPBIN"; then
-  ac_cv_prog_DUMPBIN="$DUMPBIN" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DUMPBIN="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DUMPBIN=$ac_cv_prog_DUMPBIN
-if test -n "$DUMPBIN"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DUMPBIN" >&5
-printf '%s\n' "$DUMPBIN" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$DUMPBIN" && break
-  done
-fi
-if test -z "$DUMPBIN"; then
-  ac_ct_DUMPBIN=$DUMPBIN
-  for ac_prog in dumpbin "link -dump"
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DUMPBIN+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_DUMPBIN"; then
-  ac_cv_prog_ac_ct_DUMPBIN="$ac_ct_DUMPBIN" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DUMPBIN="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DUMPBIN=$ac_cv_prog_ac_ct_DUMPBIN
-if test -n "$ac_ct_DUMPBIN"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DUMPBIN" >&5
-printf '%s\n' "$ac_ct_DUMPBIN" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_DUMPBIN" && break
-done
-
-  if test "x$ac_ct_DUMPBIN" = x; then
-    DUMPBIN=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DUMPBIN=$ac_ct_DUMPBIN
-  fi
-fi
-
-    case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in
-    *COFF*)
-      DUMPBIN="$DUMPBIN -symbols -headers"
-      ;;
-    *)
-      DUMPBIN=:
-      ;;
-    esac
-  fi
-  
-  if test : != "$DUMPBIN"; then
-    NM=$DUMPBIN
-  fi
-fi
-test -z "$NM" && NM=nm
-
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the name lister ($NM) interface" >&5
-printf %s "checking the name lister ($NM) interface... " >&6; }
-if test ${lt_cv_nm_interface+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_nm_interface="BSD nm"
-  echo "int some_variable = 0;" > conftest.$ac_ext
-  (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&5)
-  (eval "$ac_compile" 2>conftest.err)
-  cat conftest.err >&5
-  (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&5)
-  (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
-  cat conftest.err >&5
-  (eval echo "\"\$as_me:$LINENO: output\"" >&5)
-  cat conftest.out >&5
-  if $GREP 'External.*some_variable' conftest.out > /dev/null; then
-    lt_cv_nm_interface="MS dumpbin"
-  fi
-  rm -f conftest* ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_nm_interface" >&5
-printf '%s\n' "$lt_cv_nm_interface" >&6; }
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ln -s works" >&5
-printf %s "checking whether ln -s works... " >&6; }
-LN_S=$as_ln_s
-if test "$LN_S" = "ln -s"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no, using $LN_S" >&5
-printf '%s\n' "no, using $LN_S" >&6; }
-fi
-
-# find the maximum length of command line arguments
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the maximum length of command line arguments" >&5
-printf %s "checking the maximum length of command line arguments... " >&6; }
-if test ${lt_cv_sys_max_cmd_len+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)   i=0
-  teststring=ABCD
-
-  case $build_os in
-  msdosdjgpp*)
-    # On DJGPP, this test can blow up pretty badly due to problems in libc
-    # (any single argument exceeding 2000 bytes causes a buffer overrun
-    # during glob expansion).  Even if it were fixed, the result of this
-    # check would be larger than it should be.
-    lt_cv_sys_max_cmd_len=12288;    # 12K is about right
-    ;;
-
-  gnu* | ironclad*)
-    # Under GNU Hurd and Ironclad, this test is not required because there
-    # is no limit to the length of command line arguments.
-    # Libtool will interpret -1 as no limit whatsoever
-    lt_cv_sys_max_cmd_len=-1;
-    ;;
-
-  cygwin* | mingw* | windows* | cegcc*)
-    # On Win9x/ME, this test blows up -- it succeeds, but takes
-    # about 5 minutes as the teststring grows exponentially.
-    # Worse, since 9x/ME are not pre-emptively multitasking,
-    # you end up with a "frozen" computer, even though with patience
-    # the test eventually succeeds (with a max line length of 256k).
-    # Instead, let's just punt: use the minimum linelength reported by
-    # all of the supported platforms: 8192 (on NT/2K/XP).
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  mint*)
-    # On MiNT this can take a long time and run out of memory.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  amigaos*)
-    # On AmigaOS with pdksh, this test takes hours, literally.
-    # So we just punt and use a minimum line length of 8192.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*)
-    # This has been around since 386BSD, at least.  Likely further.
-    if test -x /sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax`
-    elif test -x /usr/sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax`
-    else
-      lt_cv_sys_max_cmd_len=65536	# usable default for all BSDs
-    fi
-    # And add a safety zone
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    ;;
-
-  interix*)
-    # We know the value 262144 and hardcode it with a safety zone (like BSD)
-    lt_cv_sys_max_cmd_len=196608
-    ;;
-
-  os2*)
-    # The test takes a long time on OS/2.
-    lt_cv_sys_max_cmd_len=8192
-    ;;
-
-  osf*)
-    # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure
-    # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not
-    # nice to cause kernel panics so lets avoid the loop below.
-    # First set a reasonable default.
-    lt_cv_sys_max_cmd_len=16384
-    #
-    if test -x /sbin/sysconfig; then
-      case `/sbin/sysconfig -q proc exec_disable_arg_limit` in
-        *1*) lt_cv_sys_max_cmd_len=-1 ;;
-      esac
-    fi
-    ;;
-  sco3.2v5*)
-    lt_cv_sys_max_cmd_len=102400
-    ;;
-  sysv5* | sco5v6* | sysv4.2uw2*)
-    kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null`
-    if test -n "$kargmax"; then
-      lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[	 ]//'`
-    else
-      lt_cv_sys_max_cmd_len=32768
-    fi
-    ;;
-  *)
-    lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null`
-    if test -n "$lt_cv_sys_max_cmd_len" && \
-       test undefined != "$lt_cv_sys_max_cmd_len"; then
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    else
-      # Make teststring a little bigger before we do anything with it.
-      # a 1K string should be a reasonable start.
-      for i in 1 2 3 4 5 6 7 8; do
-        teststring=$teststring$teststring
-      done
-      SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}}
-      # If test is not a shell built-in, we'll probably end up computing a
-      # maximum length that is only half of the actual maximum length, but
-      # we can't tell.
-      while { test X`env echo "$teststring$teststring" 2>/dev/null` \
-	         = "X$teststring$teststring"; } >/dev/null 2>&1 &&
-	      test 17 != "$i" # 1/2 MB should be enough
-      do
-        i=`expr $i + 1`
-        teststring=$teststring$teststring
-      done
-      # Only check the string length outside the loop.
-      lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1`
-      teststring=
-      # Add a significant safety factor because C++ compilers can tack on
-      # massive amounts of additional arguments before passing them to the
-      # linker.  It appears as though 1/2 is a usable value.
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2`
-    fi
-    ;;
-  esac
- ;;
-esac
-fi
-
-if test -n "$lt_cv_sys_max_cmd_len"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sys_max_cmd_len" >&5
-printf '%s\n' "$lt_cv_sys_max_cmd_len" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none" >&5
-printf '%s\n' "none" >&6; }
-fi
-max_cmd_len=$lt_cv_sys_max_cmd_len
-
-    
-    
-    
-
-
-: ${CP="cp -f"}
-: ${MV="mv -f"}
-: ${RM="rm -f"}
-
-if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then
-  lt_unset=unset
-else
-  lt_unset=false
-fi
-
-    
-    
-    
-
-# test EBCDIC or ASCII
-case `echo X|tr X '\101'` in
- A) # ASCII based system
-    # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr
-  lt_SP2NL='tr \040 \012'
-  lt_NL2SP='tr \015\012 \040\040'
-  ;;
- *) # EBCDIC based system
-  lt_SP2NL='tr \100 \n'
-  lt_NL2SP='tr \r\n \100\100'
-  ;;
-esac
-
-    
-    
-    
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to $host format" >&5
-printf %s "checking how to convert $build file names to $host format... " >&6; }
-if test ${lt_cv_to_host_file_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $host in
-  *-*-mingw* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32
-        ;;
-    esac
-    ;;
-  *-*-cygwin* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_noop
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin
-        ;;
-    esac
-    ;;
-  * ) # unhandled hosts (and "normal" native builds)
-    lt_cv_to_host_file_cmd=func_convert_file_noop
-    ;;
-esac
- ;;
-esac
-fi
-
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_host_file_cmd" >&5
-printf '%s\n' "$lt_cv_to_host_file_cmd" >&6; }
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to toolchain format" >&5
-printf %s "checking how to convert $build file names to toolchain format... " >&6; }
-if test ${lt_cv_to_tool_file_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) #assume ordinary cross tools, or native build.
-lt_cv_to_tool_file_cmd=func_convert_file_noop
-case $host in
-  *-*-mingw* | *-*-windows* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32
-        ;;
-    esac
-    ;;
-esac
- ;;
-esac
-fi
-
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_tool_file_cmd" >&5
-printf '%s\n' "$lt_cv_to_tool_file_cmd" >&6; }
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $LD option to reload object files" >&5
-printf %s "checking for $LD option to reload object files... " >&6; }
-if test ${lt_cv_ld_reload_flag+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ld_reload_flag='-r' ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_reload_flag" >&5
-printf '%s\n' "$lt_cv_ld_reload_flag" >&6; }
-reload_flag=$lt_cv_ld_reload_flag
-case $reload_flag in
-"" | " "*) ;;
-*) reload_flag=" $reload_flag" ;;
-esac
-reload_cmds='$LD$reload_flag -o $output$reload_objs'
-case $host_os in
-  cygwin* | mingw* | windows* | pw32* | cegcc*)
-    if test yes != "$GCC"; then
-      reload_cmds=false
-    fi
-    ;;
-  darwin*)
-    if test yes = "$GCC"; then
-      reload_cmds='$LTCC $LTCFLAGS -nostdlib $wl-r -o $output$reload_objs'
-    else
-      reload_cmds='$LD$reload_flag -o $output$reload_objs'
-    fi
-    ;;
-esac
-
-    
-    
-    
-
-    
-    
-    
-
-# Extract the first word of "file", so it can be a program name with args.
-set dummy file; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_FILECMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$FILECMD"; then
-  ac_cv_prog_FILECMD="$FILECMD" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_FILECMD="file"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  test -z "$ac_cv_prog_FILECMD" && ac_cv_prog_FILECMD=":"
-fi ;;
-esac
-fi
-FILECMD=$ac_cv_prog_FILECMD
-if test -n "$FILECMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FILECMD" >&5
-printf '%s\n' "$FILECMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-
-    
-    
-    
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}objdump", so it can be a program name with args.
-set dummy ${ac_tool_prefix}objdump; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OBJDUMP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$OBJDUMP"; then
-  ac_cv_prog_OBJDUMP="$OBJDUMP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OBJDUMP="${ac_tool_prefix}objdump"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OBJDUMP=$ac_cv_prog_OBJDUMP
-if test -n "$OBJDUMP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OBJDUMP" >&5
-printf '%s\n' "$OBJDUMP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OBJDUMP"; then
-  ac_ct_OBJDUMP=$OBJDUMP
-  # Extract the first word of "objdump", so it can be a program name with args.
-set dummy objdump; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OBJDUMP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_OBJDUMP"; then
-  ac_cv_prog_ac_ct_OBJDUMP="$ac_ct_OBJDUMP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OBJDUMP="objdump"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OBJDUMP=$ac_cv_prog_ac_ct_OBJDUMP
-if test -n "$ac_ct_OBJDUMP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OBJDUMP" >&5
-printf '%s\n' "$ac_ct_OBJDUMP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OBJDUMP" = x; then
-    OBJDUMP="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OBJDUMP=$ac_ct_OBJDUMP
-  fi
-else
-  OBJDUMP="$ac_cv_prog_OBJDUMP"
-fi
-
-test -z "$OBJDUMP" && OBJDUMP=objdump
-
-    
-    
-    
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to recognize dependent libraries" >&5
-printf %s "checking how to recognize dependent libraries... " >&6; }
-if test ${lt_cv_deplibs_check_method+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_file_magic_cmd='$MAGIC_CMD'
-lt_cv_file_magic_test_file=
-lt_cv_deplibs_check_method='unknown'
-# Need to set the preceding variable on all platforms that support
-# interlibrary dependencies.
-# 'none' -- dependencies not supported.
-# 'unknown' -- same as none, but documents that we really don't know.
-# 'pass_all' -- all dependencies passed with no checks.
-# 'file_magic [[regex]]' -- check by looking for files in library path
-# that responds to the $file_magic_cmd with a given extended regex.
-# If you have 'file' or equivalent on your system and you're not sure
-# whether 'pass_all' will *always* work, you probably want this one.
-
-case $host_os in
-aix[4-9]*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-beos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-bsdi[45]*)
-  lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib)'
-  lt_cv_file_magic_cmd='$FILECMD -L'
-  lt_cv_file_magic_test_file=/shlib/libc.so
-  ;;
-
-cygwin*)
-  # func_win32_libid is a shell function defined in ltmain.sh
-  lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-  lt_cv_file_magic_cmd='func_win32_libid'
-  ;;
-
-mingw* | windows* | pw32*)
-  # Base MSYS/MinGW do not provide the 'file' command needed by
-  # func_win32_libid shell function, so use a weaker test based on 'objdump',
-  # unless we find 'file', for example because we are cross-compiling.
-  if ( file / ) >/dev/null 2>&1; then
-    lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-    lt_cv_file_magic_cmd='func_win32_libid'
-  else
-    # Keep this pattern in sync with the one in func_win32_libid.
-    lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64|pe-aarch64)'
-    lt_cv_file_magic_cmd='$OBJDUMP -f'
-  fi
-  ;;
-
-cegcc*)
-  # use the weaker test based on 'objdump'. See mingw*.
-  lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?'
-  lt_cv_file_magic_cmd='$OBJDUMP -f'
-  ;;
-
-darwin* | rhapsody*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    case $host_cpu in
-    i*86 )
-      # Not sure whether the presence of OpenBSD here was a mistake.
-      # Let's accept both of them until this is cleared up.
-      lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[3-9]86 (compact )?demand paged shared library'
-      lt_cv_file_magic_cmd=$FILECMD
-      lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*`
-      ;;
-    esac
-  else
-    lt_cv_deplibs_check_method=pass_all
-  fi
-  ;;
-
-haiku*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-hpux10.20* | hpux11*)
-  lt_cv_file_magic_cmd=$FILECMD
-  case $host_cpu in
-  ia64*)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF-[0-9][0-9]) shared object file - IA64'
-    lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so
-    ;;
-  hppa*64*)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]'
-    lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl
-    ;;
-  *)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|PA-RISC[0-9]\.[0-9]) shared library'
-    lt_cv_file_magic_test_file=/usr/lib/libc.sl
-    ;;
-  esac
-  ;;
-
-interix[3-9]*)
-  # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here
-  lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|\.a)$'
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $LD in
-  *-32|*"-32 ") libmagic=32-bit;;
-  *-n32|*"-n32 ") libmagic=N32;;
-  *-64|*"-64 ") libmagic=64-bit;;
-  *) libmagic=never-match;;
-  esac
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-*-mlibc)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-netbsd* | netbsdelf*-gnu)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|_pic\.a)$'
-  fi
-  ;;
-
-newos6*)
-  lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (executable|dynamic lib)'
-  lt_cv_file_magic_cmd=$FILECMD
-  lt_cv_file_magic_test_file=/usr/lib/libnls.so
-  ;;
-
-*nto* | *qnx*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-openbsd*)
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|\.so|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
-  fi
-  ;;
-
-osf3* | osf4* | osf5*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-rdos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-serenity*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-solaris*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv4 | sysv4.3*)
-  case $host_vendor in
-  motorola)
-    lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib) M[0-9][0-9]* Version [0-9]'
-    lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*`
-    ;;
-  ncr)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  sequent)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [LM]SB (shared object|dynamic lib )'
-    ;;
-  sni)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method="file_magic ELF [0-9][0-9]*-bit [LM]SB dynamic lib"
-    lt_cv_file_magic_test_file=/lib/libc.so
-    ;;
-  siemens)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  pc)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  esac
-  ;;
-
-tpf*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-os2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-esac
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_deplibs_check_method" >&5
-printf '%s\n' "$lt_cv_deplibs_check_method" >&6; }
-
-file_magic_glob=
-want_nocaseglob=no
-if test "$build" = "$host"; then
-  case $host_os in
-  mingw* | windows* | pw32*)
-    if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then
-      want_nocaseglob=yes
-    else
-      file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[\1]\/[\1]\/g;/g"`
-    fi
-    ;;
-  esac
-fi
-
-file_magic_cmd=$lt_cv_file_magic_cmd
-deplibs_check_method=$lt_cv_deplibs_check_method
-test -z "$deplibs_check_method" && deplibs_check_method=unknown
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}dlltool", so it can be a program name with args.
-set dummy ${ac_tool_prefix}dlltool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DLLTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$DLLTOOL"; then
-  ac_cv_prog_DLLTOOL="$DLLTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DLLTOOL="${ac_tool_prefix}dlltool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DLLTOOL=$ac_cv_prog_DLLTOOL
-if test -n "$DLLTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DLLTOOL" >&5
-printf '%s\n' "$DLLTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_DLLTOOL"; then
-  ac_ct_DLLTOOL=$DLLTOOL
-  # Extract the first word of "dlltool", so it can be a program name with args.
-set dummy dlltool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DLLTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_DLLTOOL"; then
-  ac_cv_prog_ac_ct_DLLTOOL="$ac_ct_DLLTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DLLTOOL="dlltool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DLLTOOL=$ac_cv_prog_ac_ct_DLLTOOL
-if test -n "$ac_ct_DLLTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DLLTOOL" >&5
-printf '%s\n' "$ac_ct_DLLTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_DLLTOOL" = x; then
-    DLLTOOL="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DLLTOOL=$ac_ct_DLLTOOL
-  fi
-else
-  DLLTOOL="$ac_cv_prog_DLLTOOL"
-fi
-
-test -z "$DLLTOOL" && DLLTOOL=dlltool
-
-    
-    
-    
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to associate runtime and link libraries" >&5
-printf %s "checking how to associate runtime and link libraries... " >&6; }
-if test ${lt_cv_sharedlib_from_linklib_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_sharedlib_from_linklib_cmd='unknown'
-
-case $host_os in
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  # two different shell functions defined in ltmain.sh;
-  # decide which one to use based on capabilities of $DLLTOOL
-  case `$DLLTOOL --help 2>&1` in
-  *--identify-strict*)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib
-    ;;
-  *)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback
-    ;;
-  esac
-  ;;
-*)
-  # fallback: assume linklib IS sharedlib
-  lt_cv_sharedlib_from_linklib_cmd=$ECHO
-  ;;
-esac
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sharedlib_from_linklib_cmd" >&5
-printf '%s\n' "$lt_cv_sharedlib_from_linklib_cmd" >&6; }
-sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd
-test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO
-
-
-    
-    
-    
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args.
-set dummy ${ac_tool_prefix}ranlib; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_RANLIB+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$RANLIB"; then
-  ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-RANLIB=$ac_cv_prog_RANLIB
-if test -n "$RANLIB"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5
-printf '%s\n' "$RANLIB" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_RANLIB"; then
-  ac_ct_RANLIB=$RANLIB
-  # Extract the first word of "ranlib", so it can be a program name with args.
-set dummy ranlib; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_RANLIB+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_RANLIB"; then
-  ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_RANLIB="ranlib"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB
-if test -n "$ac_ct_RANLIB"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5
-printf '%s\n' "$ac_ct_RANLIB" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_RANLIB" = x; then
-    RANLIB=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    RANLIB=$ac_ct_RANLIB
-  fi
-else
-  RANLIB="$ac_cv_prog_RANLIB"
-fi
-
-if test -n "$ac_tool_prefix"; then
-  for ac_prog in ar
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_AR+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$AR"; then
-  ac_cv_prog_AR="$AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AR="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-AR=$ac_cv_prog_AR
-if test -n "$AR"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $AR" >&5
-printf '%s\n' "$AR" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$AR" && break
-  done
-fi
-if test -z "$AR"; then
-  ac_ct_AR=$AR
-  for ac_prog in ar
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_AR+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_AR"; then
-  ac_cv_prog_ac_ct_AR="$ac_ct_AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_AR="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_AR=$ac_cv_prog_ac_ct_AR
-if test -n "$ac_ct_AR"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_AR" >&5
-printf '%s\n' "$ac_ct_AR" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_AR" && break
-done
-
-  if test "x$ac_ct_AR" = x; then
-    AR="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    AR=$ac_ct_AR
-  fi
-fi
-
-: ${AR=ar}
-
-    
-    
-    
-
-
-# Use ARFLAGS variable as AR's operation code to sync the variable naming with
-# Automake.  If both AR_FLAGS and ARFLAGS are specified, AR_FLAGS should have
-# higher priority because that's what people were doing historically (setting
-# ARFLAGS for automake and AR_FLAGS for libtool).  FIXME: Make the AR_FLAGS
-# variable obsoleted/removed.
-
-test ${AR_FLAGS+y} || AR_FLAGS=${ARFLAGS-cr}
-lt_ar_flags=$AR_FLAGS
-
-    
-    
-    
-
-
-# Make AR_FLAGS overridable by 'make ARFLAGS='.  Don't try to run-time override
-# by AR_FLAGS because that was never working and AR_FLAGS is about to die.
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for archiver @FILE support" >&5
-printf %s "checking for archiver @FILE support... " >&6; }
-if test ${lt_cv_ar_at_file+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ar_at_file=no
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  echo conftest.$ac_objext > conftest.lst
-      lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&5'
-      { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5
-  (eval $lt_ar_try) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-      if test 0 -eq "$ac_status"; then
-	# Ensure the archiver fails upon bogus file names.
-	rm -f conftest.$ac_objext libconftest.a
-	{ { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5
-  (eval $lt_ar_try) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-	if test 0 -ne "$ac_status"; then
-          lt_cv_ar_at_file=@
-        fi
-      fi
-      rm -f conftest.* libconftest.a
-     
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ar_at_file" >&5
-printf '%s\n' "$lt_cv_ar_at_file" >&6; }
-
-if test no = "$lt_cv_ar_at_file"; then
-  archiver_list_spec=
-else
-  archiver_list_spec=$lt_cv_ar_at_file
-fi
-
-    
-    
-    
-
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-printf '%s\n' "$STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-printf '%s\n' "$ac_ct_STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-test -z "$STRIP" && STRIP=:
-
-    
-    
-    
-
-
-
-test -z "$RANLIB" && RANLIB=:
-
-    
-    
-    
-
-
-# Determine commands to create old-style static archives.
-old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs'
-old_postinstall_cmds='chmod 644 $oldlib'
-old_postuninstall_cmds=
-
-if test -n "$RANLIB"; then
-  old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib"
-  old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib"
-fi
-
-case $host_os in
-  darwin*)
-    lock_old_archive_extraction=yes ;;
-  *)
-    lock_old_archive_extraction=no ;;
-esac
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-
-
-# Check for command to grab the raw symbol name followed by C symbol from nm.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking command to parse $NM output from $compiler object" >&5
-printf %s "checking command to parse $NM output from $compiler object... " >&6; }
-if test ${lt_cv_sys_global_symbol_pipe+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 
-# These are sane defaults that work on at least a few old systems.
-# [They come from Ultrix.  What could be older than Ultrix?!! ;)]
-
-# Character class describing NM global symbol codes.
-symcode='[BCDEGRST]'
-
-# Regexp to match symbols that can be accessed directly from C.
-sympat='\([_A-Za-z][_A-Za-z0-9]*\)'
-
-# Define system-specific variables.
-case $host_os in
-aix*)
-  symcode='[BCDT]'
-  ;;
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  symcode='[ABCDGISTW]'
-  ;;
-hpux*)
-  if test ia64 = "$host_cpu"; then
-    symcode='[ABCDEGRST]'
-  fi
-  ;;
-irix* | nonstopux*)
-  symcode='[BCDEGRST]'
-  ;;
-osf*)
-  symcode='[BCDEGQRST]'
-  ;;
-solaris*)
-  symcode='[BCDRT]'
-  ;;
-sco3.2v5*)
-  symcode='[DT]'
-  ;;
-sysv4.2uw2*)
-  symcode='[DT]'
-  ;;
-sysv5* | sco5v6* | unixware* | OpenUNIX*)
-  symcode='[ABDT]'
-  ;;
-sysv4)
-  symcode='[DFNSTU]'
-  ;;
-esac
-
-# If we're using GNU nm, then use its standard symbol codes.
-case `$NM -V 2>&1` in
-*GNU* | *'with BFD'*)
-  symcode='[ABCDGIRSTW]' ;;
-esac
-
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  # Gets list of data symbols to import.
-  lt_cv_sys_global_symbol_to_import="$SED -n -e 's/^I .* \(.*\)$/\1/p'"
-  # Adjust the below global symbol transforms to fixup imported variables.
-  lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'"
-  lt_c_name_hook=" -e 's/^I .* \(.*\)$/  {\"\1\", (void *) 0},/p'"
-  lt_c_name_lib_hook="\
-  -e 's/^I .* \(lib.*\)$/  {\"\1\", (void *) 0},/p'\
-  -e 's/^I .* \(.*\)$/  {\"lib\1\", (void *) 0},/p'"
-else
-  # Disable hooks by default.
-  lt_cv_sys_global_symbol_to_import=
-  lt_cdecl_hook=
-  lt_c_name_hook=
-  lt_c_name_lib_hook=
-fi
-
-# Transform an extracted symbol line into a proper C declaration.
-# Some systems (esp. on ia64) link data and code symbols differently,
-# so use this general approach.
-lt_cv_sys_global_symbol_to_cdecl="$SED -n"\
-$lt_cdecl_hook\
-" -e 's/^T .* \(.*\)$/extern int \1();/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'"
-
-# Transform an extracted symbol line into symbol name and symbol address
-lt_cv_sys_global_symbol_to_c_name_address="$SED -n"\
-$lt_c_name_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/p'"
-
-# Transform an extracted symbol line into symbol name with lib prefix and
-# symbol address.
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="$SED -n"\
-$lt_c_name_lib_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(lib.*\)$/  {\"\1\", (void *) \&\1},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"lib\1\", (void *) \&\1},/p'"
-
-# Handle CRLF in mingw tool chain
-opt_cr=
-case $build_os in
-mingw* | windows*)
-  opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp
-  ;;
-esac
-
-# Try without a prefix underscore, then with it.
-for ac_symprfx in "" "_"; do
-
-  # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol.
-  symxfrm="\\1 $ac_symprfx\\2 \\2"
-
-  # Write the raw and C identifiers.
-  if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-    # Fake it for dumpbin and say T for any non-static function,
-    # D for any global variable and I for any imported variable.
-    # Also find C++ and __fastcall symbols from MSVC++ or ICC,
-    # which start with @ or ?.
-    lt_cv_sys_global_symbol_pipe="$AWK '"\
-"     {last_section=section; section=\$ 3};"\
-"     /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\
-"     /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\
-"     /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\
-"     /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\
-"     /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\
-"     \$ 0!~/External *\|/{next};"\
-"     / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\
-"     {if(hide[section]) next};"\
-"     {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\
-"     {split(\$ 0,a,/\||\r/); split(a[2],s)};"\
-"     s[1]~/^[@?]/{print f,s[1],s[1]; next};"\
-"     s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\
-"     ' prfx=^$ac_symprfx"
-  else
-    lt_cv_sys_global_symbol_pipe="$SED -n -e 's/^.*[	 ]\($symcode$symcode*\)[	 ][	 ]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'"
-  fi
-  lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | $SED '/ __gnu_lto/d'"
-
-  # Check to see that the pipe works correctly.
-  pipe_works=no
-
-  rm -f conftest*
-  cat > conftest.$ac_ext <<_LT_EOF
-#ifdef __cplusplus
-extern "C" {
-#endif
-char nm_test_var;
-void nm_test_func(void);
-void nm_test_func(void){}
-#ifdef __cplusplus
-}
-#endif
-int main(void){nm_test_var='a';nm_test_func();return(0);}
-_LT_EOF
-
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    # Now try to grab the symbols.
-    nlist=conftest.nm
-    $ECHO "$as_me:$LINENO: $NM conftest.$ac_objext | $lt_cv_sys_global_symbol_pipe > $nlist" >&5
-    if eval "$NM" conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist 2>&5 && test -s "$nlist"; then
-      # Try sorting and uniquifying the output.
-      if sort "$nlist" | uniq > "$nlist"T; then
-	mv -f "$nlist"T "$nlist"
-      else
-	rm -f "$nlist"T
-      fi
-
-      # Make sure that we snagged all the symbols we need.
-      if $GREP ' nm_test_var$' "$nlist" >/dev/null; then
-	if $GREP ' nm_test_func$' "$nlist" >/dev/null; then
-	  cat <<_LT_EOF > conftest.$ac_ext
-/* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests.  */
-#if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE
-/* DATA imports from DLLs on WIN32 can't be const, because runtime
-   relocations are performed -- see ld's documentation on pseudo-relocs.  */
-# define LT@&t@_DLSYM_CONST
-#elif defined __osf__
-/* This system does not cope well with relocations in const data.  */
-# define LT@&t@_DLSYM_CONST
-#else
-# define LT@&t@_DLSYM_CONST const
-#endif
-
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-_LT_EOF
-	  # Now generate the symbol file.
-	  eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext'
-
-	  cat <<_LT_EOF >> conftest.$ac_ext
-
-/* The mapping between symbol names and symbols.  */
-LT@&t@_DLSYM_CONST struct {
-  const char *name;
-  void       *address;
-}
-lt__PROGRAM__LTX_preloaded_symbols[] =
-{
-  { "@PROGRAM@", (void *) 0 },
-_LT_EOF
-	  $SED "s/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext
-	  cat <<\_LT_EOF >> conftest.$ac_ext
-  {0, (void *) 0}
-};
-
-/* This works around a problem in FreeBSD linker */
-#ifdef FREEBSD_WORKAROUND
-static const void *lt_preloaded_setup() {
-  return lt__PROGRAM__LTX_preloaded_symbols;
-}
-#endif
-
-#ifdef __cplusplus
-}
-#endif
-_LT_EOF
-	  # Now try linking the two files.
-	  mv conftest.$ac_objext conftstm.$ac_objext
-	  lt_globsym_save_LIBS=$LIBS
-	  lt_globsym_save_CFLAGS=$CFLAGS
-	  LIBS=conftstm.$ac_objext
-	  CFLAGS="$CFLAGS$lt_prog_compiler_no_builtin_flag"
-	  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s conftest$ac_exeext; then
-	    pipe_works=yes
-	  fi
-	  LIBS=$lt_globsym_save_LIBS
-	  CFLAGS=$lt_globsym_save_CFLAGS
-	else
-	  echo "cannot find nm_test_func in $nlist" >&5
-	fi
-      else
-	echo "cannot find nm_test_var in $nlist" >&5
-      fi
-    else
-      echo "cannot run $lt_cv_sys_global_symbol_pipe" >&5
-    fi
-  else
-    echo "$progname: failed program was:" >&5
-    cat conftest.$ac_ext >&5
-  fi
-  rm -rf conftest* conftst*
-
-  # Do not use the global_symbol_pipe unless it works.
-  if test yes = "$pipe_works"; then
-    break
-  else
-    lt_cv_sys_global_symbol_pipe=
-  fi
-done
- ;;
-esac
-fi
-
-if test -z "$lt_cv_sys_global_symbol_pipe"; then
-  lt_cv_sys_global_symbol_to_cdecl=
-fi
-if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: failed" >&5
-printf '%s\n' "failed" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ok" >&5
-printf '%s\n' "ok" >&6; }
-fi
-
-# Response file support.
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  nm_file_list_spec='@'
-elif $NM --help 2>/dev/null | grep '[@]FILE' >/dev/null; then
-  nm_file_list_spec='@'
-fi
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for sysroot" >&5
-printf %s "checking for sysroot... " >&6; }
-
-@%:@ Check whether --with-sysroot was given.
-if test ${with_sysroot+y}
-then :
-  withval=$with_sysroot; 
-else case e in @%:@(
-  e) with_sysroot=no ;;
-esac
-fi
-
-
-lt_sysroot=
-case $with_sysroot in #(
- yes)
-   if test yes = "$GCC"; then
-     # Trim trailing / since we'll always append absolute paths and we want
-     # to avoid //, if only for less confusing output for the user.
-     lt_sysroot=`$CC --print-sysroot 2>/dev/null | $SED 's:/\+$::'`
-   fi
-   ;; #(
- /*)
-   lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"`
-   ;; #(
- no|'')
-   ;; #(
- *)
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $with_sysroot" >&5
-printf '%s\n' "$with_sysroot" >&6; }
-   as_fn_error $? "The sysroot must be an absolute path." "$LINENO" 5
-   ;;
-esac
-
- { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ${lt_sysroot:-no}" >&5
-printf '%s\n' "${lt_sysroot:-no}" >&6; }
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a working dd" >&5
-printf %s "checking for a working dd... " >&6; }
-if test ${ac_cv_path_lt_DD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-: ${lt_DD:=$DD}
-if test -z "$lt_DD"; then
-  ac_path_lt_DD_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in dd
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_lt_DD="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_lt_DD" || continue
-if "$ac_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=:
-fi
-      $ac_path_lt_DD_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_lt_DD"; then
-    :
-  fi
-else
-  ac_cv_path_lt_DD=$lt_DD
-fi
-
-rm -f conftest.i conftest2.i conftest.out ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_lt_DD" >&5
-printf '%s\n' "$ac_cv_path_lt_DD" >&6; }
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to truncate binary pipes" >&5
-printf %s "checking how to truncate binary pipes... " >&6; }
-if test ${lt_cv_truncate_bin+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-lt_cv_truncate_bin=
-if "$ac_cv_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1"
-fi
-rm -f conftest.i conftest2.i conftest.out
-test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q" ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_truncate_bin" >&5
-printf '%s\n' "$lt_cv_truncate_bin" >&6; }
-
-    
-    
-    
-
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in @S|@*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-@%:@ Check whether --enable-libtool-lock was given.
-if test ${enable_libtool_lock+y}
-then :
-  enableval=$enable_libtool_lock; 
-fi
-
-test no = "$enable_libtool_lock" || enable_libtool_lock=yes
-
-# Some flags need to be propagated to the compiler or linker for good
-# libtool support.
-case $host in
-ia64-*-hpux*)
-  # Find out what ABI is being produced by ac_compile, and set mode
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.$ac_objext` in
-      *ELF-32*)
-	HPUX_IA64_MODE=32
-	;;
-      *ELF-64*)
-	HPUX_IA64_MODE=64
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-*-*-irix6*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '#line '$LINENO' "configure"' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    if test yes = "$lt_cv_prog_gnu_ld"; then
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -melf32bsmip"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -melf32bmipn32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -melf64bmip"
-	;;
-      esac
-    else
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -32"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -n32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -64"
-	  ;;
-      esac
-    fi
-  fi
-  rm -rf conftest*
-  ;;
-
-mips64*-*linux*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '#line '$LINENO' "configure"' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    emul=elf
-    case `$FILECMD conftest.$ac_objext` in
-      *32-bit*)
-	emul="${emul}32"
-	;;
-      *64-bit*)
-	emul="${emul}64"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *MSB*)
-	emul="${emul}btsmip"
-	;;
-      *LSB*)
-	emul="${emul}ltsmip"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *N32*)
-	emul="${emul}n32"
-	;;
-    esac
-    LD="${LD-ld} -m $emul"
-  fi
-  rm -rf conftest*
-  ;;
-
-x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \
-s390*-*linux*|s390*-*tpf*|sparc*-*linux*|x86_64-gnu*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.  Note that the listed cases only cover the
-  # situations where additional linker options are needed (such as when
-  # doing 32-bit compilation for a host where ld defaults to 64-bit, or
-  # vice versa); the common cases where no linker options are needed do
-  # not appear in the list.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.o` in
-      *32-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_i386_fbsd"
-	    ;;
-	  x86_64-*linux*|x86_64-gnu*)
-	    case `$FILECMD conftest.o` in
-	      *x86-64*)
-		LD="${LD-ld} -m elf32_x86_64"
-		;;
-	      *)
-		LD="${LD-ld} -m elf_i386"
-		;;
-	    esac
-	    ;;
-	  powerpc64le-*linux*)
-	    LD="${LD-ld} -m elf32lppclinux"
-	    ;;
-	  powerpc64-*linux*)
-	    LD="${LD-ld} -m elf32ppclinux"
-	    ;;
-	  s390x-*linux*)
-	    LD="${LD-ld} -m elf_s390"
-	    ;;
-	  sparc64-*linux*)
-	    LD="${LD-ld} -m elf32_sparc"
-	    ;;
-	esac
-	;;
-      *64-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_x86_64_fbsd"
-	    ;;
-	  x86_64-*linux*|x86_64-gnu*)
-	    LD="${LD-ld} -m elf_x86_64"
-	    ;;
-	  powerpcle-*linux*)
-	    LD="${LD-ld} -m elf64lppc"
-	    ;;
-	  powerpc-*linux*)
-	    LD="${LD-ld} -m elf64ppc"
-	    ;;
-	  s390*-*linux*|s390*-*tpf*)
-	    LD="${LD-ld} -m elf64_s390"
-	    ;;
-	  sparc*-*linux*)
-	    LD="${LD-ld} -m elf64_sparc"
-	    ;;
-	esac
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-
-*-*-sco3.2v5*)
-  # On SCO OpenServer 5, we need -belf to get full-featured binaries.
-  SAVE_CFLAGS=$CFLAGS
-  CFLAGS="$CFLAGS -belf"
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the C compiler needs -belf" >&5
-printf %s "checking whether the C compiler needs -belf... " >&6; }
-if test ${lt_cv_cc_needs_belf+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-     cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_cc_needs_belf=yes
-else case e in @%:@(
-  e) lt_cv_cc_needs_belf=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-     ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_cc_needs_belf" >&5
-printf '%s\n' "$lt_cv_cc_needs_belf" >&6; }
-  if test yes != "$lt_cv_cc_needs_belf"; then
-    # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf
-    CFLAGS=$SAVE_CFLAGS
-  fi
-  ;;
-*-*solaris*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.o` in
-    *64-bit*)
-      case $lt_cv_prog_gnu_ld in
-      yes*)
-        case $host in
-        i?86-*-solaris*|x86_64-*-solaris*)
-          LD="${LD-ld} -m elf_x86_64"
-          ;;
-        sparc*-*-solaris*)
-          LD="${LD-ld} -m elf64_sparc"
-          ;;
-        esac
-        # GNU ld 2.21 introduced _sol2 emulations.  Use them if available.
-        if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then
-          LD=${LD-ld}_sol2
-        fi
-        ;;
-      *)
-	if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then
-	  LD="${LD-ld} -64"
-	fi
-	;;
-      esac
-      ;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-esac
-
-need_locks=$enable_libtool_lock
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}mt", so it can be a program name with args.
-set dummy ${ac_tool_prefix}mt; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_MANIFEST_TOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$MANIFEST_TOOL"; then
-  ac_cv_prog_MANIFEST_TOOL="$MANIFEST_TOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_MANIFEST_TOOL="${ac_tool_prefix}mt"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-MANIFEST_TOOL=$ac_cv_prog_MANIFEST_TOOL
-if test -n "$MANIFEST_TOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MANIFEST_TOOL" >&5
-printf '%s\n' "$MANIFEST_TOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_MANIFEST_TOOL"; then
-  ac_ct_MANIFEST_TOOL=$MANIFEST_TOOL
-  # Extract the first word of "mt", so it can be a program name with args.
-set dummy mt; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_MANIFEST_TOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_MANIFEST_TOOL"; then
-  ac_cv_prog_ac_ct_MANIFEST_TOOL="$ac_ct_MANIFEST_TOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_MANIFEST_TOOL="mt"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_MANIFEST_TOOL=$ac_cv_prog_ac_ct_MANIFEST_TOOL
-if test -n "$ac_ct_MANIFEST_TOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_MANIFEST_TOOL" >&5
-printf '%s\n' "$ac_ct_MANIFEST_TOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_MANIFEST_TOOL" = x; then
-    MANIFEST_TOOL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    MANIFEST_TOOL=$ac_ct_MANIFEST_TOOL
-  fi
-else
-  MANIFEST_TOOL="$ac_cv_prog_MANIFEST_TOOL"
-fi
-
-test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $MANIFEST_TOOL is a manifest tool" >&5
-printf %s "checking if $MANIFEST_TOOL is a manifest tool... " >&6; }
-if test ${lt_cv_path_manifest_tool+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_path_manifest_tool=no
-  echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&5
-  $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out
-  cat conftest.err >&5
-  if $GREP 'Manifest Tool' conftest.out > /dev/null; then
-    lt_cv_path_manifest_tool=yes
-  fi
-  rm -f conftest* ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_manifest_tool" >&5
-printf '%s\n' "$lt_cv_path_manifest_tool" >&6; }
-if test yes != "$lt_cv_path_manifest_tool"; then
-  MANIFEST_TOOL=:
-fi
-
-    
-    
-    
-
-
-  case $host_os in
-    rhapsody* | darwin*)
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}dsymutil", so it can be a program name with args.
-set dummy ${ac_tool_prefix}dsymutil; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DSYMUTIL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$DSYMUTIL"; then
-  ac_cv_prog_DSYMUTIL="$DSYMUTIL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DSYMUTIL="${ac_tool_prefix}dsymutil"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DSYMUTIL=$ac_cv_prog_DSYMUTIL
-if test -n "$DSYMUTIL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DSYMUTIL" >&5
-printf '%s\n' "$DSYMUTIL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_DSYMUTIL"; then
-  ac_ct_DSYMUTIL=$DSYMUTIL
-  # Extract the first word of "dsymutil", so it can be a program name with args.
-set dummy dsymutil; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DSYMUTIL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_DSYMUTIL"; then
-  ac_cv_prog_ac_ct_DSYMUTIL="$ac_ct_DSYMUTIL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DSYMUTIL="dsymutil"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DSYMUTIL=$ac_cv_prog_ac_ct_DSYMUTIL
-if test -n "$ac_ct_DSYMUTIL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DSYMUTIL" >&5
-printf '%s\n' "$ac_ct_DSYMUTIL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_DSYMUTIL" = x; then
-    DSYMUTIL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DSYMUTIL=$ac_ct_DSYMUTIL
-  fi
-else
-  DSYMUTIL="$ac_cv_prog_DSYMUTIL"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}nmedit", so it can be a program name with args.
-set dummy ${ac_tool_prefix}nmedit; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_NMEDIT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$NMEDIT"; then
-  ac_cv_prog_NMEDIT="$NMEDIT" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_NMEDIT="${ac_tool_prefix}nmedit"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-NMEDIT=$ac_cv_prog_NMEDIT
-if test -n "$NMEDIT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $NMEDIT" >&5
-printf '%s\n' "$NMEDIT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_NMEDIT"; then
-  ac_ct_NMEDIT=$NMEDIT
-  # Extract the first word of "nmedit", so it can be a program name with args.
-set dummy nmedit; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_NMEDIT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_NMEDIT"; then
-  ac_cv_prog_ac_ct_NMEDIT="$ac_ct_NMEDIT" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_NMEDIT="nmedit"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_NMEDIT=$ac_cv_prog_ac_ct_NMEDIT
-if test -n "$ac_ct_NMEDIT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_NMEDIT" >&5
-printf '%s\n' "$ac_ct_NMEDIT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_NMEDIT" = x; then
-    NMEDIT=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    NMEDIT=$ac_ct_NMEDIT
-  fi
-else
-  NMEDIT="$ac_cv_prog_NMEDIT"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}lipo", so it can be a program name with args.
-set dummy ${ac_tool_prefix}lipo; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_LIPO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$LIPO"; then
-  ac_cv_prog_LIPO="$LIPO" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_LIPO="${ac_tool_prefix}lipo"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-LIPO=$ac_cv_prog_LIPO
-if test -n "$LIPO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LIPO" >&5
-printf '%s\n' "$LIPO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_LIPO"; then
-  ac_ct_LIPO=$LIPO
-  # Extract the first word of "lipo", so it can be a program name with args.
-set dummy lipo; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_LIPO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_LIPO"; then
-  ac_cv_prog_ac_ct_LIPO="$ac_ct_LIPO" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_LIPO="lipo"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_LIPO=$ac_cv_prog_ac_ct_LIPO
-if test -n "$ac_ct_LIPO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_LIPO" >&5
-printf '%s\n' "$ac_ct_LIPO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_LIPO" = x; then
-    LIPO=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    LIPO=$ac_ct_LIPO
-  fi
-else
-  LIPO="$ac_cv_prog_LIPO"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}otool", so it can be a program name with args.
-set dummy ${ac_tool_prefix}otool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$OTOOL"; then
-  ac_cv_prog_OTOOL="$OTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OTOOL="${ac_tool_prefix}otool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OTOOL=$ac_cv_prog_OTOOL
-if test -n "$OTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OTOOL" >&5
-printf '%s\n' "$OTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OTOOL"; then
-  ac_ct_OTOOL=$OTOOL
-  # Extract the first word of "otool", so it can be a program name with args.
-set dummy otool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_OTOOL"; then
-  ac_cv_prog_ac_ct_OTOOL="$ac_ct_OTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OTOOL="otool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OTOOL=$ac_cv_prog_ac_ct_OTOOL
-if test -n "$ac_ct_OTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL" >&5
-printf '%s\n' "$ac_ct_OTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OTOOL" = x; then
-    OTOOL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OTOOL=$ac_ct_OTOOL
-  fi
-else
-  OTOOL="$ac_cv_prog_OTOOL"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}otool64", so it can be a program name with args.
-set dummy ${ac_tool_prefix}otool64; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OTOOL64+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$OTOOL64"; then
-  ac_cv_prog_OTOOL64="$OTOOL64" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OTOOL64="${ac_tool_prefix}otool64"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OTOOL64=$ac_cv_prog_OTOOL64
-if test -n "$OTOOL64"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OTOOL64" >&5
-printf '%s\n' "$OTOOL64" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OTOOL64"; then
-  ac_ct_OTOOL64=$OTOOL64
-  # Extract the first word of "otool64", so it can be a program name with args.
-set dummy otool64; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OTOOL64+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_OTOOL64"; then
-  ac_cv_prog_ac_ct_OTOOL64="$ac_ct_OTOOL64" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OTOOL64="otool64"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OTOOL64=$ac_cv_prog_ac_ct_OTOOL64
-if test -n "$ac_ct_OTOOL64"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL64" >&5
-printf '%s\n' "$ac_ct_OTOOL64" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OTOOL64" = x; then
-    OTOOL64=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OTOOL64=$ac_ct_OTOOL64
-  fi
-else
-  OTOOL64="$ac_cv_prog_OTOOL64"
-fi
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -single_module linker flag" >&5
-printf %s "checking for -single_module linker flag... " >&6; }
-if test ${lt_cv_apple_cc_single_mod+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_apple_cc_single_mod=no
-      if test -z "$LT_MULTI_MODULE"; then
-	# By default we will add the -single_module flag. You can override
-	# by either setting the environment variable LT_MULTI_MODULE
-	# non-empty at configure time, or by adding -multi_module to the
-	# link flags.
-	rm -rf libconftest.dylib*
-	echo "int foo(void){return 1;}" > conftest.c
-	echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
--dynamiclib -Wl,-single_module conftest.c" >&5
-	$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
-	  -dynamiclib -Wl,-single_module conftest.c 2>conftest.err
-        _lt_result=$?
-	# If there is a non-empty error log, and "single_module"
-	# appears in it, assume the flag caused a linker warning
-        if test -s conftest.err && $GREP single_module conftest.err; then
-	  cat conftest.err >&5
-	# Otherwise, if the output was created with a 0 exit code from
-	# the compiler, it worked.
-	elif test -f libconftest.dylib && test 0 = "$_lt_result"; then
-	  lt_cv_apple_cc_single_mod=yes
-	else
-	  cat conftest.err >&5
-	fi
-	rm -rf libconftest.dylib*
-	rm -f conftest.*
-      fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_apple_cc_single_mod" >&5
-printf '%s\n' "$lt_cv_apple_cc_single_mod" >&6; }
-
-    # Feature test to disable chained fixups since it is not
-    # compatible with '-undefined dynamic_lookup'
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -no_fixup_chains linker flag" >&5
-printf %s "checking for -no_fixup_chains linker flag... " >&6; }
-if test ${lt_cv_support_no_fixup_chains+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)  save_LDFLAGS=$LDFLAGS
-        LDFLAGS="$LDFLAGS -Wl,-no_fixup_chains"
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_support_no_fixup_chains=yes
-else case e in @%:@(
-  e) lt_cv_support_no_fixup_chains=no
-         ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-        LDFLAGS=$save_LDFLAGS
-      
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_support_no_fixup_chains" >&5
-printf '%s\n' "$lt_cv_support_no_fixup_chains" >&6; }
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -exported_symbols_list linker flag" >&5
-printf %s "checking for -exported_symbols_list linker flag... " >&6; }
-if test ${lt_cv_ld_exported_symbols_list+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ld_exported_symbols_list=no
-      save_LDFLAGS=$LDFLAGS
-      echo "_main" > conftest.sym
-      LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym"
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_ld_exported_symbols_list=yes
-else case e in @%:@(
-  e) lt_cv_ld_exported_symbols_list=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-	LDFLAGS=$save_LDFLAGS
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_exported_symbols_list" >&5
-printf '%s\n' "$lt_cv_ld_exported_symbols_list" >&6; }
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -force_load linker flag" >&5
-printf %s "checking for -force_load linker flag... " >&6; }
-if test ${lt_cv_ld_force_load+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ld_force_load=no
-      cat > conftest.c << _LT_EOF
-int forced_loaded() { return 2;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&5
-      $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&5
-      echo "$AR $AR_FLAGS libconftest.a conftest.o" >&5
-      $AR $AR_FLAGS libconftest.a conftest.o 2>&5
-      echo "$RANLIB libconftest.a" >&5
-      $RANLIB libconftest.a 2>&5
-      cat > conftest.c << _LT_EOF
-int main(void) { return 0;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&5
-      $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err
-      _lt_result=$?
-      if test -s conftest.err && $GREP force_load conftest.err; then
-	cat conftest.err >&5
-      elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then
-	lt_cv_ld_force_load=yes
-      else
-	cat conftest.err >&5
-      fi
-        rm -f conftest.err libconftest.a conftest conftest.c
-        rm -rf conftest.dSYM
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_force_load" >&5
-printf '%s\n' "$lt_cv_ld_force_load" >&6; }
-    case $host_os in
-    rhapsody* | darwin1.[012])
-      _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;;
-    darwin1.*)
-      _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-    darwin*)
-      case $MACOSX_DEPLOYMENT_TARGET,$host in
-        10.[012],*|,*powerpc*-darwin[5-8]*)
-          _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-        *)
-          _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup'
-          if test yes = "$lt_cv_support_no_fixup_chains"; then
-            as_fn_append _lt_dar_allow_undefined ' $wl-no_fixup_chains'
-          fi
-        ;;
-      esac
-    ;;
-  esac
-    if test yes = "$lt_cv_apple_cc_single_mod"; then
-      _lt_dar_single_mod='$single_module'
-    fi
-    _lt_dar_needs_single_mod=no
-    case $host_os in
-    rhapsody* | darwin1.*)
-      _lt_dar_needs_single_mod=yes ;;
-    darwin*)
-      # When targeting Mac OS X 10.4 (darwin 8) or later,
-      # -single_module is the default and -multi_module is unsupported.
-      # The toolchain on macOS 10.14 (darwin 18) and later cannot
-      # target any OS version that needs -single_module.
-      case ${MACOSX_DEPLOYMENT_TARGET-10.0},$host in
-      10.0,*-darwin[567].*|10.[0-3],*-darwin[5-9].*|10.[0-3],*-darwin1[0-7].*)
-        _lt_dar_needs_single_mod=yes ;;
-      esac
-    ;;
-    esac
-    if test yes = "$lt_cv_ld_exported_symbols_list"; then
-      _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym'
-    else
-      _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib'
-    fi
-    if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then
-      _lt_dsymutil='~$DSYMUTIL $lib || :'
-    else
-      _lt_dsymutil=
-    fi
-    ;;
-  esac
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x@S|@2 in
-    x)
-        ;;
-    *:)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\"
-        ;;
-    x:*)
-        eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\"
-        ;;
-    *)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-ac_fn_c_check_header_compile "$LINENO" "dlfcn.h" "ac_cv_header_dlfcn_h" "$ac_includes_default
-"
-if test "x$ac_cv_header_dlfcn_h" = xyes
-then :
-  printf '%s\n' "@%:@define HAVE_DLFCN_H 1" >>confdefs.h
-
-fi
-
-
-
-
-
-# Set options
-
-
-
-        enable_dlopen=no
-  
-
-  enable_win32_dll=no
-  
-
-            @%:@ Check whether --enable-shared was given.
-if test ${enable_shared+y}
-then :
-  enableval=$enable_shared; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_shared=yes ;;
-    no) enable_shared=no ;;
-    *)
-      enable_shared=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_shared=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in @%:@(
-  e) enable_shared=yes ;;
-esac
-fi
-
-
-    
-    
-    
-    
-
-
-
-  @%:@ Check whether --enable-static was given.
-if test ${enable_static+y}
-then :
-  enableval=$enable_static; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_static=yes ;;
-    no) enable_static=no ;;
-    *)
-     enable_static=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_static=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in @%:@(
-  e) enable_static=yes ;;
-esac
-fi
-
-
-    
-    
-    
-    
-
-
-
-  @%:@ Check whether --enable-pic was given.
-if test ${enable_pic+y}
-then :
-  enableval=$enable_pic; lt_p=${PACKAGE-default}
-     case $enableval in
-     yes|no) pic_mode=$enableval ;;
-     *)
-       pic_mode=default
-       # Look at the argument we got.  We use all the common list separators.
-       lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-       for lt_pkg in $enableval; do
-	 IFS=$lt_save_ifs
-	 if test "X$lt_pkg" = "X$lt_p"; then
-	   pic_mode=yes
-	 fi
-       done
-       IFS=$lt_save_ifs
-       ;;
-     esac
-else case e in @%:@(
-  e)           @%:@ Check whether --with-pic was given.
-if test ${with_pic+y}
-then :
-  withval=$with_pic; lt_p=${PACKAGE-default}
-	 case $withval in
-	 yes|no) pic_mode=$withval ;;
-	 *)
-	   pic_mode=default
-	   # Look at the argument we got.  We use all the common list separators.
-	   lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-	   for lt_pkg in $withval; do
-	     IFS=$lt_save_ifs
-	     if test "X$lt_pkg" = "X$lt_p"; then
-	       pic_mode=yes
-	     fi
-	   done
-	   IFS=$lt_save_ifs
-	   ;;
-	 esac
-else case e in @%:@(
-  e) pic_mode=default ;;
-esac
-fi
-
-     ;;
-esac
-fi
-
-
-
-    
-    
-    
-
-
-  @%:@ Check whether --enable-fast-install was given.
-if test ${enable_fast_install+y}
-then :
-  enableval=$enable_fast_install; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_fast_install=yes ;;
-    no) enable_fast_install=no ;;
-    *)
-      enable_fast_install=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_fast_install=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in @%:@(
-  e) enable_fast_install=yes ;;
-esac
-fi
-
-
-
-    
-    
-    
-
-
-  shared_archive_member_spec=
-case $host,$enable_shared in
-power*-*-aix[5-9]*,yes)
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking which variant of shared library versioning to provide" >&5
-printf %s "checking which variant of shared library versioning to provide... " >&6; }
-  @%:@ Check whether --enable-aix-soname was given.
-if test ${enable_aix_soname+y}
-then :
-  enableval=$enable_aix_soname; case $enableval in
-     aix|svr4|both)
-       ;;
-     *)
-       as_fn_error $? "Unknown argument to --enable-aix-soname" "$LINENO" 5
-       ;;
-     esac
-     lt_cv_with_aix_soname=$enable_aix_soname
-else case e in @%:@(
-  e) @%:@ Check whether --with-aix-soname was given.
-if test ${with_aix_soname+y}
-then :
-  withval=$with_aix_soname; case $withval in
-         aix|svr4|both)
-           ;;
-         *)
-           as_fn_error $? "Unknown argument to --with-aix-soname" "$LINENO" 5
-           ;;
-         esac
-         lt_cv_with_aix_soname=$with_aix_soname
-else case e in @%:@(
-  e) if test ${lt_cv_with_aix_soname+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_with_aix_soname=aix ;;
-esac
-fi
- ;;
-esac
-fi
-
-     enable_aix_soname=$lt_cv_with_aix_soname ;;
-esac
-fi
-
-  with_aix_soname=$enable_aix_soname
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $with_aix_soname" >&5
-printf '%s\n' "$with_aix_soname" >&6; }
-  if test aix != "$with_aix_soname"; then
-    # For the AIX way of multilib, we name the shared archive member
-    # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o',
-    # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File.
-    # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag,
-    # the AIX toolchain works better with OBJECT_MODE set (default 32).
-    if test 64 = "${OBJECT_MODE-32}"; then
-      shared_archive_member_spec=shr_64
-    else
-      shared_archive_member_spec=shr
-    fi
-  fi
-  ;;
-*)
-  with_aix_soname=aix
-  ;;
-esac
-
-
-    
-    
-    
-
-
-  
-
-
-# This can be used to rebuild libtool when needed
-LIBTOOL_DEPS=$ltmain
-
-# Always use our own libtool.
-LIBTOOL='$(SHELL) $(top_builddir)/libtool'
-
-
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-test -z "$LN_S" && LN_S="ln -s"
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-
-if test -n "${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for objdir" >&5
-printf %s "checking for objdir... " >&6; }
-if test ${lt_cv_objdir+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) rm -f .libs 2>/dev/null
-mkdir .libs 2>/dev/null
-if test -d .libs; then
-  lt_cv_objdir=.libs
-else
-  # MS-DOS does not allow filenames that begin with a dot.
-  lt_cv_objdir=_libs
-fi
-rmdir .libs 2>/dev/null ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_objdir" >&5
-printf '%s\n' "$lt_cv_objdir" >&6; }
-objdir=$lt_cv_objdir
-
-    
-    
-    
-
-printf '%s\n' "@%:@define LT_OBJDIR \"$lt_cv_objdir/\"" >>confdefs.h
-
-
-
-
-case $host_os in
-aix3*)
-  # AIX sometimes has problems with the GCC collect2 program.  For some
-  # reason, if we set the COLLECT_NAMES environment variable, the problems
-  # vanish in a puff of smoke.
-  if test set != "${COLLECT_NAMES+set}"; then
-    COLLECT_NAMES=
-    export COLLECT_NAMES
-  fi
-  ;;
-esac
-
-# Global variables:
-ofile=libtool
-can_build_shared=yes
-
-# All known linkers require a '.a' archive for static linking (except MSVC and
-# ICC, which need '.lib').
-libext=a
-
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-old_CC=$CC
-old_CFLAGS=$CFLAGS
-
-# Set sane defaults for various variables
-test -z "$CC" && CC=cc
-test -z "$LTCC" && LTCC=$CC
-test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS
-test -z "$LD" && LD=ld
-test -z "$ac_objext" && ac_objext=o
-
-func_cc_basename $compiler
-cc_basename=$func_cc_basename_result
-
-
-# Only perform the check for file, if the check method requires it
-test -z "$MAGIC_CMD" && MAGIC_CMD=file
-case $deplibs_check_method in
-file_magic*)
-  if test "$file_magic_cmd" = '$MAGIC_CMD'; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for ${ac_tool_prefix}file" >&5
-printf %s "checking for ${ac_tool_prefix}file... " >&6; }
-if test ${lt_cv_path_MAGIC_CMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $MAGIC_CMD in
-[\\/*] |  ?:[\\/]*)
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  ac_dummy="/usr/bin$PATH_SEPARATOR$PATH"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/${ac_tool_prefix}file"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"${ac_tool_prefix}file"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac ;;
-esac
-fi
-
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5
-printf '%s\n' "$MAGIC_CMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-    
-    
-    
-
-if test -z "$lt_cv_path_MAGIC_CMD"; then
-  if test -n "$ac_tool_prefix"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for file" >&5
-printf %s "checking for file... " >&6; }
-if test ${lt_cv_path_MAGIC_CMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $MAGIC_CMD in
-[\\/*] |  ?:[\\/]*)
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  ac_dummy="/usr/bin$PATH_SEPARATOR$PATH"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/file"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"file"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac ;;
-esac
-fi
-
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5
-printf '%s\n' "$MAGIC_CMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  else
-    MAGIC_CMD=:
-  fi
-fi
-
-  fi
-  ;;
-esac
-
-# Use C for the default configuration in the libtool script
-
-lt_save_CC=$CC
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-# Source file extension for C test sources.
-ac_ext=c
-
-# Object file extension for compiled C test sources.
-objext=o
-objext=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code="int some_variable = 0;"
-
-# Code to be used in simple link tests
-lt_simple_link_test_code='int main(void){return(0);}'
-
-
-
-
-
-
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-
-# Save the default compiler, since it gets overwritten when the other
-# tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP.
-compiler_DEFAULT=$CC
-
-# save warnings/boilerplate of simple test code
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_compile_test_code" >conftest.$ac_ext
-eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_compiler_boilerplate=`cat conftest.err`
-$RM conftest*
-
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_link_test_code" >conftest.$ac_ext
-eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_linker_boilerplate=`cat conftest.err`
-$RM -r conftest*
-
-
-## CAVEAT EMPTOR:
-## There is no encapsulation within the following macros, do not change
-## the running order or otherwise move them around unless you know exactly
-## what you are doing...
-if test -n "$compiler"; then
-  
-lt_prog_compiler_no_builtin_flag=
-
-if test yes = "$GCC"; then
-  case $cc_basename in
-  nvcc*)
-    lt_prog_compiler_no_builtin_flag=' -Xcompiler -fno-builtin' ;;
-  *)
-    lt_prog_compiler_no_builtin_flag=' -fno-builtin' ;;
-  esac
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -fno-rtti -fno-exceptions" >&5
-printf %s "checking if $compiler supports -fno-rtti -fno-exceptions... " >&6; }
-if test ${lt_cv_prog_compiler_rtti_exceptions+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_rtti_exceptions=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="-fno-rtti -fno-exceptions"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_rtti_exceptions=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_rtti_exceptions" >&5
-printf '%s\n' "$lt_cv_prog_compiler_rtti_exceptions" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_rtti_exceptions"; then
-    lt_prog_compiler_no_builtin_flag="$lt_prog_compiler_no_builtin_flag -fno-rtti -fno-exceptions"
-else
-    :
-fi
-
-fi
-
-    
-    
-    
-
-
-  lt_prog_compiler_wl=
-lt_prog_compiler_pic=
-lt_prog_compiler_static=
-
-
-  if test yes = "$GCC"; then
-    lt_prog_compiler_wl='-Wl,'
-    lt_prog_compiler_static='-static'
-
-    case $host_os in
-      aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            lt_prog_compiler_pic='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            lt_prog_compiler_pic='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      ;;
-
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      lt_prog_compiler_static=
-      ;;
-
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='-fPIC'
-	;;
-      esac
-      ;;
-
-    interix[3-9]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-
-    msdosdjgpp*)
-      # Just because we use GCC doesn't mean we suddenly get shared libraries
-      # on systems that don't support them.
-      lt_prog_compiler_can_build_shared=no
-      enable_shared=no
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic=-Kconform_pic
-      fi
-      ;;
-
-    *)
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-    esac
-
-    case $cc_basename in
-    nvcc*) # Cuda Compiler Driver 2.2
-      lt_prog_compiler_wl='-Xlinker '
-      if test -n "$lt_prog_compiler_pic"; then
-        lt_prog_compiler_pic="-Xcompiler $lt_prog_compiler_pic"
-      fi
-      ;;
-    esac
-  else
-    # PORTME Check for flag to pass linker flags through the system compiler.
-    case $host_os in
-    aix*)
-      lt_prog_compiler_wl='-Wl,'
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      else
-	lt_prog_compiler_static='-bnso -bI:/lib/syscalls.exp'
-      fi
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      case $cc_basename in
-      nagfor*)
-        # NAG Fortran compiler
-        lt_prog_compiler_wl='-Wl,-Wl,,'
-        lt_prog_compiler_pic='-PIC'
-        lt_prog_compiler_static='-Bstatic'
-        ;;
-      esac
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    hpux9* | hpux10* | hpux11*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
-      # not for PA HP-UX.
-      case $host_cpu in
-      hppa*64*|ia64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='+Z'
-	;;
-      esac
-      # Is there a better lt_prog_compiler_static that works with the bundled CC?
-      lt_prog_compiler_static='$wl-a ${wl}archive'
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC (with -KPIC) is the default.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-      case $cc_basename in
-      # old Intel for x86_64, which still supported -KPIC.
-      ecc*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-KPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      *flang* | ftn | f18* | f95*)
-        # Flang compiler.
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # icc used to be incompatible with GCC.
-      # ICC 10 doesn't accept -KPIC any more.
-      icc* | ifort*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # Lahey Fortran 8.1.
-      lf95*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='--shared'
-	lt_prog_compiler_static='--static'
-	;;
-      nagfor*)
-	# NAG Fortran compiler
-	lt_prog_compiler_wl='-Wl,-Wl,,'
-	lt_prog_compiler_pic='-PIC'
-	lt_prog_compiler_static='-Bstatic'
-	;;
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-	;;
-      pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
-        # Portland Group compilers (*not* the Pentium gcc compiler,
-	# which looks to be a dead project)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fpic'
-	lt_prog_compiler_static='-Bstatic'
-        ;;
-      ccc*)
-        lt_prog_compiler_wl='-Wl,'
-        # All Alpha code is PIC.
-        lt_prog_compiler_static='-non_shared'
-        ;;
-      xl* | bgxl* | bgf* | mpixl*)
-	# IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-qpic'
-	lt_prog_compiler_static='-qstaticlink'
-	;;
-      *)
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [1-7].* | *Sun*Fortran*\ 8.[0-3]*)
-	  # Sun Fortran 8.3 passes all unrecognized flags to the linker
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl=''
-	  ;;
-	*Sun\ F* | *Sun*Fortran*)
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Qoption ld '
-	  ;;
-	*Sun\ C*)
-	  # Sun C 5.9
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Wl,'
-	  ;;
-        *Intel*\ [CF]*Compiler*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fPIC'
-	  lt_prog_compiler_static='-static'
-	  ;;
-	*Portland\ Group*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fpic'
-	  lt_prog_compiler_static='-Bstatic'
-	  ;;
-	esac
-	;;
-      esac
-      ;;
-
-    newsos6)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *-mlibc)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-fPIC'
-      lt_prog_compiler_static='-static'
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    osf3* | osf4* | osf5*)
-      lt_prog_compiler_wl='-Wl,'
-      # All OSF/1 code is PIC.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    rdos*)
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      case $cc_basename in
-      f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
-	lt_prog_compiler_wl='-Qoption ld ';;
-      *)
-	lt_prog_compiler_wl='-Wl,';;
-      esac
-      ;;
-
-    sunos4*)
-      lt_prog_compiler_wl='-Qoption ld '
-      lt_prog_compiler_pic='-PIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4 | sysv4.2uw2* | sysv4.3*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic='-Kconform_pic'
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      ;;
-
-    sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    unicos*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_can_build_shared=no
-      ;;
-
-    uts4*)
-      lt_prog_compiler_pic='-pic'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *)
-      lt_prog_compiler_can_build_shared=no
-      ;;
-    esac
-  fi
-
-case $host_os in
-  # For platforms that do not support PIC, -DPIC is meaningless:
-  *djgpp*)
-    lt_prog_compiler_pic=
-    ;;
-  *)
-    lt_prog_compiler_pic="$lt_prog_compiler_pic@&t@ -DPIC"
-    ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $compiler option to produce PIC" >&5
-printf %s "checking for $compiler option to produce PIC... " >&6; }
-if test ${lt_cv_prog_compiler_pic+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic=$lt_prog_compiler_pic ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic" >&6; }
-lt_prog_compiler_pic=$lt_cv_prog_compiler_pic
-
-#
-# Check to make sure the PIC flag actually works.
-#
-if test -n "$lt_prog_compiler_pic"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler PIC flag $lt_prog_compiler_pic works" >&5
-printf %s "checking if $compiler PIC flag $lt_prog_compiler_pic works... " >&6; }
-if test ${lt_cv_prog_compiler_pic_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic_works=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$lt_prog_compiler_pic@&t@ -DPIC"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_pic_works=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_pic_works"; then
-    case $lt_prog_compiler_pic in
-     "" | " "*) ;;
-     *) lt_prog_compiler_pic=" $lt_prog_compiler_pic" ;;
-     esac
-else
-    lt_prog_compiler_pic=
-     lt_prog_compiler_can_build_shared=no
-fi
-
-fi
-
-    
-    
-    
-
-
-
-    
-    
-    
-
-#
-# Check to make sure the static flag actually works.
-#
-wl=$lt_prog_compiler_wl eval lt_tmp_static_flag=\"$lt_prog_compiler_static\"
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler static flag $lt_tmp_static_flag works" >&5
-printf %s "checking if $compiler static flag $lt_tmp_static_flag works... " >&6; }
-if test ${lt_cv_prog_compiler_static_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_static_works=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $lt_tmp_static_flag"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler_static_works=yes
-       fi
-     else
-       lt_cv_prog_compiler_static_works=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_static_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_static_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_static_works"; then
-    :
-else
-    lt_prog_compiler_static=
-fi
-
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5
-printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; }
-if test ${lt_cv_prog_compiler_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_c_o=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_c_o=yes
-     fi
-   fi
-   chmod u+w . 2>&5
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5
-printf '%s\n' "$lt_cv_prog_compiler_c_o" >&6; }
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5
-printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; }
-if test ${lt_cv_prog_compiler_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_c_o=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_c_o=yes
-     fi
-   fi
-   chmod u+w . 2>&5
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5
-printf '%s\n' "$lt_cv_prog_compiler_c_o" >&6; }
-
-
-
-
-hard_links=nottested
-if test no = "$lt_cv_prog_compiler_c_o" && test no != "$need_locks"; then
-  # do not overwrite the value of need_locks provided by the user
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if we can lock with hard links" >&5
-printf %s "checking if we can lock with hard links... " >&6; }
-  hard_links=yes
-  $RM conftest*
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  touch conftest.a
-  ln conftest.a conftest.b 2>&5 || hard_links=no
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $hard_links" >&5
-printf '%s\n' "$hard_links" >&6; }
-  if test no = "$hard_links"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&5
-printf '%s\n' "$as_me: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&2;}
-    need_locks=warn
-  fi
-else
-  need_locks=no
-fi
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the $compiler linker ($LD) supports shared libraries" >&5
-printf %s "checking whether the $compiler linker ($LD) supports shared libraries... " >&6; }
-
-  runpath_var=
-  allow_undefined_flag=
-  always_export_symbols=no
-  archive_cmds=
-  archive_expsym_cmds=
-  compiler_needs_object=no
-  enable_shared_with_static_runtimes=no
-  export_dynamic_flag_spec=
-  export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
-  hardcode_automatic=no
-  hardcode_direct=no
-  hardcode_direct_absolute=no
-  hardcode_libdir_flag_spec=
-  hardcode_libdir_separator=
-  hardcode_minus_L=no
-  hardcode_shlibpath_var=unsupported
-  inherit_rpath=no
-  link_all_deplibs=unknown
-  module_cmds=
-  module_expsym_cmds=
-  old_archive_from_new_cmds=
-  old_archive_from_expsyms_cmds=
-  thread_safe_flag_spec=
-  whole_archive_flag_spec=
-  # include_expsyms should be a list of space-separated symbols to be *always*
-  # included in the symbol list
-  include_expsyms=
-  # exclude_expsyms can be an extended regexp of symbols to exclude
-  # it will be wrapped by ' (' and ')$', so one must not match beginning or
-  # end of line.  Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc',
-  # as well as any symbol that contains 'd'.
-  exclude_expsyms='_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*'
-  # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out
-  # platforms (ab)use it in PIC code, but their linkers get confused if
-  # the symbol is explicitly referenced.  Since portable code cannot
-  # rely on this symbol name, it's probably fine to never include it in
-  # preloaded symbol tables.
-  # Exclude shared library initialization/finalization symbols.
-  extract_expsyms_cmds=
-
-  case $host_os in
-  cygwin* | mingw* | windows* | pw32* | cegcc*)
-    # FIXME: the MSVC++ and ICC port hasn't been tested in a loooong time
-    # When not using gcc, we currently assume that we are using
-    # Microsoft Visual C++ or Intel C++ Compiler.
-    if test yes != "$GCC"; then
-      with_gnu_ld=no
-    fi
-    ;;
-  interix*)
-    # we just hope/assume this is gcc and not c89 (= MSVC++ or ICC)
-    with_gnu_ld=yes
-    ;;
-  esac
-
-  ld_shlibs=yes
-
-  # On some targets, GNU ld is compatible enough with the native linker
-  # that we're better off using the native interface for both.
-  lt_use_gnu_ld_interface=no
-  if test yes = "$with_gnu_ld"; then
-    case $host_os in
-      aix*)
-	# The AIX port of GNU ld has always aspired to compatibility
-	# with the native linker.  However, as the warning in the GNU ld
-	# block says, versions before 2.19.5* couldn't really create working
-	# shared libraries, regardless of the interface used.
-	case `$LD -v 2>&1` in
-	  *\ \(GNU\ Binutils\)\ 2.19.5*) ;;
-	  *\ \(GNU\ Binutils\)\ 2.[2-9]*) ;;
-	  *\ \(GNU\ Binutils\)\ [3-9]*) ;;
-	  *)
-	    lt_use_gnu_ld_interface=yes
-	    ;;
-	esac
-	;;
-      *)
-	lt_use_gnu_ld_interface=yes
-	;;
-    esac
-  fi
-
-  if test yes = "$lt_use_gnu_ld_interface"; then
-    # If archive_cmds runs LD, not CC, wlarc should be empty
-    wlarc='$wl'
-
-    # Set some defaults for GNU ld with shared library support. These
-    # are reset later if shared libraries are not supported. Putting them
-    # here allows them to be overridden if necessary.
-    runpath_var=LD_RUN_PATH
-    hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-    export_dynamic_flag_spec='$wl--export-dynamic'
-    # ancient GNU ld didn't support --whole-archive et. al.
-    if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then
-      whole_archive_flag_spec=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
-    else
-      whole_archive_flag_spec=
-    fi
-    supports_anon_versioning=no
-    case `$LD -v | $SED -e 's/([^)]\+)\s\+//' 2>&1` in
-      *GNU\ gold*) supports_anon_versioning=yes ;;
-      *\ [01].* | *\ 2.[0-9].* | *\ 2.10.*) ;; # catch versions < 2.11
-      *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ...
-      *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ...
-      *\ 2.11.*) ;; # other 2.11 versions
-      *) supports_anon_versioning=yes ;;
-    esac
-
-    # See if GNU ld supports shared libraries.
-    case $host_os in
-    aix[3-9]*)
-      # On AIX/PPC, the GNU linker is very broken
-      if test ia64 != "$host_cpu"; then
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: the GNU linker, at least up to release 2.19, is reported
-*** to be unable to reliably create shared libraries on AIX.
-*** Therefore, libtool is disabling shared libraries support.  If you
-*** really care for shared libraries, you may want to install binutils
-*** 2.20 or above, or modify your PATH so that a non-GNU linker is found.
-*** You will then need to restart the configuration process.
-
-_LT_EOF
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            archive_expsym_cmds=''
-        ;;
-      m68k)
-            archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            hardcode_libdir_flag_spec='-L$libdir'
-            hardcode_minus_L=yes
-        ;;
-      esac
-      ;;
-
-    beos*)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	allow_undefined_flag=unsupported
-	# Joseph Beckenbach <jrb3@best.com> says some releases of gcc
-	# support --undefined.  This deserves some investigation.  FIXME
-	archive_cmds='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    cygwin* | mingw* | windows* | pw32* | cegcc*)
-      # _LT_TAGVAR(hardcode_libdir_flag_spec, ) is actually meaningless,
-      # as there is no search path for DLLs.
-      hardcode_libdir_flag_spec='-L$libdir'
-      export_dynamic_flag_spec='$wl--export-all-symbols'
-      allow_undefined_flag=unsupported
-      always_export_symbols=no
-      enable_shared_with_static_runtimes=yes
-      export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1 DATA/;s/^.*[ ]__nm__\([^ ]*\)[ ][^ ]*/\1 DATA/;/^I[ ]/d;/^[AITW][ ]/s/.* //'\'' | sort | uniq > $export_symbols'
-      exclude_expsyms='[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname'
-      file_list_spec='@'
-
-      if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then
-        archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-	# If the export-symbols file already is a .def file, use it as
-	# is; otherwise, prepend EXPORTS...
-	archive_expsym_cmds='if   test DEF = "`$SED -n     -e '\''s/^[	 ]*//'\''     -e '\''/^\(;.*\)*$/d'\''     -e '\''s/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p'\''     -e q     $export_symbols`" ; then
-          cp $export_symbols $output_objdir/$soname.def;
-        else
-          echo EXPORTS > $output_objdir/$soname.def;
-          cat $export_symbols >> $output_objdir/$soname.def;
-        fi~
-        $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    haiku*)
-      archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      link_all_deplibs=no
-      ;;
-
-    os2*)
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_minus_L=yes
-      allow_undefined_flag=unsupported
-      shrext_cmds=.dll
-      archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      old_archive_from_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      enable_shared_with_static_runtimes=yes
-      file_list_spec='@'
-      ;;
-
-    interix[3-9]*)
-      hardcode_direct=no
-      hardcode_shlibpath_var=no
-      hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-      export_dynamic_flag_spec='$wl-E'
-      # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc.
-      # Instead, shared libraries are loaded at an image base (0x10000000 by
-      # default) and relocated if they conflict, which is a slow very memory
-      # consuming and fragmenting process.  To avoid this, we pick a random,
-      # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link
-      # time.  Moving up from 0x10000000 also allows more sbrk(2) space.
-      archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      archive_expsym_cmds='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      ;;
-
-    gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu)
-      tmp_diet=no
-      if test linux-dietlibc = "$host_os"; then
-	case $cc_basename in
-	  diet\ *) tmp_diet=yes;;	# linux-dietlibc with static linking (!diet-dyn)
-	esac
-      fi
-      if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \
-	 && test no = "$tmp_diet"
-      then
-	tmp_addflag=' $pic_flag'
-	tmp_sharedflag='-shared'
-	case $cc_basename,$host_cpu in
-        pgcc*)				# Portland Group C compiler
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag'
-	  ;;
-	pgf77* | pgf90* | pgf95* | pgfortran*)
-					# Portland Group f77 and f90 compilers
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag -Mnomain' ;;
-	ecc*,ia64* | icc*,ia64*)	# Intel C compiler on ia64
-	  tmp_addflag=' -i_dynamic' ;;
-	efc*,ia64* | ifort*,ia64*)	# Intel Fortran compiler on ia64
-	  tmp_addflag=' -i_dynamic -nofor_main' ;;
-	ifc* | ifort*)			# Intel Fortran compiler
-	  tmp_addflag=' -nofor_main' ;;
-	lf95*)				# Lahey Fortran 8.1
-	  whole_archive_flag_spec=
-	  tmp_sharedflag='--shared' ;;
-        nagfor*)                        # NAGFOR 5.3
-          tmp_sharedflag='-Wl,-shared' ;;
-	xl[cC]* | bgxl[cC]* | mpixl[cC]*) # IBM XL C 8.0 on PPC (deal with xlf below)
-	  tmp_sharedflag='-qmkshrobj'
-	  tmp_addflag= ;;
-	nvcc*)	# Cuda Compiler Driver 2.2
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  compiler_needs_object=yes
-	  ;;
-	esac
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ C*)			# Sun C 5.9
-	  whole_archive_flag_spec='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  compiler_needs_object=yes
-	  tmp_sharedflag='-G' ;;
-	*Sun\ F*)			# Sun Fortran 8.3
-	  tmp_sharedflag='-G' ;;
-	esac
-	archive_cmds='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-
-        if test yes = "$supports_anon_versioning"; then
-          archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~
-            cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-            echo "local: *; };" >> $output_objdir/$libname.ver~
-            $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib'
-        fi
-
-	case $cc_basename in
-	tcc*)
-	  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	  export_dynamic_flag_spec='-rdynamic'
-	  ;;
-	xlf* | bgf* | bgxlf* | mpixlf*)
-	  # IBM XL Fortran 10.1 on PPC cannot create shared libs itself
-	  whole_archive_flag_spec='--whole-archive$convenience --no-whole-archive'
-	  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	  archive_cmds='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib'
-	  if test yes = "$supports_anon_versioning"; then
-	    archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~
-              cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-              echo "local: *; };" >> $output_objdir/$libname.ver~
-              $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib'
-	  fi
-	  ;;
-	esac
-      else
-        ld_shlibs=no
-      fi
-      ;;
-
-    *-mlibc)
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      ;;
-
-    netbsd* | netbsdelf*-gnu)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	archive_cmds='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib'
-	wlarc=
-      else
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      fi
-      ;;
-
-    solaris*)
-      if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: The releases 2.8.* of the GNU linker cannot reliably
-*** create shared libraries on Solaris systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.9.1 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-      elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*)
-      case `$LD -v 2>&1` in
-        *\ [01].* | *\ 2.[0-9].* | *\ 2.1[0-5].*)
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot
-*** reliably create shared libraries on SCO systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.16.91.0.3 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-	;;
-	*)
-	  # For security reasons, it is highly recommended that you always
-	  # use absolute paths for naming shared libraries, and exclude the
-	  # DT_RUNPATH tag from executables and libraries.  But doing so
-	  # requires that you compile everything twice, which is a pain.
-	  if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	    hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	    archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	    archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-	  else
-	    ld_shlibs=no
-	  fi
-	;;
-      esac
-      ;;
-
-    sunos4*)
-      archive_cmds='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      wlarc=
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    *)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-    esac
-
-    if test no = "$ld_shlibs"; then
-      runpath_var=
-      hardcode_libdir_flag_spec=
-      export_dynamic_flag_spec=
-      whole_archive_flag_spec=
-    fi
-  else
-    # PORTME fill in a description of your system's linker (not GNU ld)
-    case $host_os in
-    aix3*)
-      allow_undefined_flag=unsupported
-      always_export_symbols=yes
-      archive_expsym_cmds='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname'
-      # Note: this linker hardcodes the directories in LIBPATH if there
-      # are no directories specified by -L.
-      hardcode_minus_L=yes
-      if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then
-	# Neither direct hardcoding nor static linking is supported with a
-	# broken collect2.
-	hardcode_direct=unsupported
-      fi
-      ;;
-
-    aix[4-9]*)
-      if test ia64 = "$host_cpu"; then
-	# On IA64, the linker does run time linking by default, so we don't
-	# have to do anything special.
-	aix_use_runtimelinking=no
-	exp_sym_flag='-Bexport'
-	no_entry_flag=
-      else
-	# If we're using GNU nm, then we don't want the "-C" option.
-	# -C means demangle to GNU nm, but means don't demangle to AIX nm.
-	# Without the "-l" option, or with the "-B" option, AIX nm treats
-	# weak defined symbols like other global defined symbols, whereas
-	# GNU nm marks them as "W".
-	# While the 'weak' keyword is ignored in the Export File, we need
-	# it in the Import File for the 'aix-soname' feature, so we have
-	# to replace the "-B" option with "-P" for AIX nm.
-	if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then
-	  export_symbols_cmds='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && (substr(\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols'
-	else
-	  export_symbols_cmds='`func_echo_all $NM | $SED -e '\''s/B\([^B]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && (substr(\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols'
-	fi
-	aix_use_runtimelinking=no
-
-	# Test if we are trying to use run time linking or normal
-	# AIX style linking. If -brtl is somewhere in LDFLAGS, we
-	# have runtime linking enabled, and use it for executables.
-	# For shared libraries, we enable/disable runtime linking
-	# depending on the kind of the shared library created -
-	# when "with_aix_soname,aix_use_runtimelinking" is:
-	# "aix,no"   lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "aix,yes"  lib.so          shared, rtl:yes, for executables
-	#            lib.a           static archive
-	# "both,no"  lib.so.V(shr.o) shared, rtl:yes
-	#            lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a(lib.so.V) shared, rtl:no
-	# "svr4,*"   lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a           static archive
-	case $host_os in aix4.[23]|aix4.[23].*|aix[5-9]*)
-	  for ld_flag in $LDFLAGS; do
-	  if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then
-	    aix_use_runtimelinking=yes
-	    break
-	  fi
-	  done
-	  if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then
-	    # With aix-soname=svr4, we create the lib.so.V shared archives only,
-	    # so we don't have lib.a shared libs to link our executables.
-	    # We have to force runtime linking in this case.
-	    aix_use_runtimelinking=yes
-	    LDFLAGS="$LDFLAGS -Wl,-brtl"
-	  fi
-	  ;;
-	esac
-
-	exp_sym_flag='-bexport'
-	no_entry_flag='-bnoentry'
-      fi
-
-      # When large executables or shared objects are built, AIX ld can
-      # have problems creating the table of contents.  If linking a library
-      # or program results in "error TOC overflow" add -mminimal-toc to
-      # CXXFLAGS/CFLAGS for g++/gcc.  In the cases where that is not
-      # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS.
-
-      archive_cmds=''
-      hardcode_direct=yes
-      hardcode_direct_absolute=yes
-      hardcode_libdir_separator=':'
-      link_all_deplibs=yes
-      file_list_spec='$wl-f,'
-      case $with_aix_soname,$aix_use_runtimelinking in
-      aix,*) ;; # traditional, no import file
-      svr4,* | *,yes) # use import file
-	# The Import File defines what to hardcode.
-	hardcode_direct=no
-	hardcode_direct_absolute=no
-	;;
-      esac
-
-      if test yes = "$GCC"; then
-	case $host_os in aix4.[012]|aix4.[012].*)
-	# We only want to do this on AIX 4.2 and lower, the check
-	# below for broken collect2 doesn't work under 4.3+
-	  collect2name=`$CC -print-prog-name=collect2`
-	  if test -f "$collect2name" &&
-	   strings "$collect2name" | $GREP resolve_lib_name >/dev/null
-	  then
-	  # We have reworked collect2
-	  :
-	  else
-	  # We have old collect2
-	  hardcode_direct=unsupported
-	  # It fails to find uninstalled libraries when the uninstalled
-	  # path is not listed in the libpath.  Setting hardcode_minus_L
-	  # to unsupported forces relinking
-	  hardcode_minus_L=yes
-	  hardcode_libdir_flag_spec='-L$libdir'
-	  hardcode_libdir_separator=
-	  fi
-	  ;;
-	esac
-	shared_flag='-shared'
-	if test yes = "$aix_use_runtimelinking"; then
-	  shared_flag="$shared_flag "'$wl-G'
-	fi
-	# Need to ensure runtime linking is disabled for the traditional
-	# shared library, or the linker may eventually find shared libraries
-	# /with/ Import File - we do not want to mix them.
-	shared_flag_aix='-shared'
-	shared_flag_svr4='-shared $wl-G'
-      else
-	# not using gcc
-	if test ia64 = "$host_cpu"; then
-	# VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release
-	# chokes on -Wl,-G. The following line is correct:
-	  shared_flag='-G'
-	else
-	  if test yes = "$aix_use_runtimelinking"; then
-	    shared_flag='$wl-G'
-	  else
-	    shared_flag='$wl-bM:SRE'
-	  fi
-	  shared_flag_aix='$wl-bM:SRE'
-	  shared_flag_svr4='$wl-G'
-	fi
-      fi
-
-      export_dynamic_flag_spec='$wl-bexpall'
-      # It seems that -bexpall does not export symbols beginning with
-      # underscore (_), so it is better to generate a list of symbols to export.
-      always_export_symbols=yes
-      if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then
-	# Warning - without using the other runtime loading flags (-brtl),
-	# -berok will link without error, but may produce a broken library.
-	allow_undefined_flag='-berok'
-        # Determine the default libpath from the value encoded in an
-        # empty executable.
-        if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  if test ${lt_cv_aix_libpath_+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  
-  lt_aix_libpath_sed='
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }'
-  lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=/usr/lib:/lib
-  fi
-   ;;
-esac
-fi
-
-  aix_libpath=$lt_cv_aix_libpath_
-fi
-
-        hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath"
-        archive_expsym_cmds='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag
-      else
-	if test ia64 = "$host_cpu"; then
-	  hardcode_libdir_flag_spec='$wl-R $libdir:/usr/lib:/lib'
-	  allow_undefined_flag="-z nodefs"
-	  archive_expsym_cmds="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols"
-	else
-	 # Determine the default libpath from the value encoded in an
-	 # empty executable.
-	 if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  if test ${lt_cv_aix_libpath_+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  
-  lt_aix_libpath_sed='
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }'
-  lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=/usr/lib:/lib
-  fi
-   ;;
-esac
-fi
-
-  aix_libpath=$lt_cv_aix_libpath_
-fi
-
-	 hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath"
-	  # Warning - without using the other run time loading flags,
-	  # -berok will link without error, but may produce a broken library.
-	  no_undefined_flag=' $wl-bernotok'
-	  allow_undefined_flag=' $wl-berok'
-	  if test yes = "$with_gnu_ld"; then
-	    # We only use this code for GNU lds that support --whole-archive.
-	    whole_archive_flag_spec='$wl--whole-archive$convenience $wl--no-whole-archive'
-	  else
-	    # Exported symbols can be pulled into shared objects from archives
-	    whole_archive_flag_spec='$convenience'
-	  fi
-	  archive_cmds_need_lc=yes
-	  archive_expsym_cmds='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d'
-	  # -brtl affects multiple linker settings, -berok does not and is overridden later
-	  compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([, ]\\)%-berok\\1%g"`'
-	  if test svr4 != "$with_aix_soname"; then
-	    # This is similar to how AIX traditionally builds its shared libraries.
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname'
-	  fi
-	  if test aix != "$with_aix_soname"; then
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp'
-	  else
-	    # used by -dlpreopen to get the symbols
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$MV  $output_objdir/$realname.d/$soname $output_objdir'
-	  fi
-	  archive_expsym_cmds="$archive_expsym_cmds"'~$RM -r $output_objdir/$realname.d'
-	fi
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            archive_expsym_cmds=''
-        ;;
-      m68k)
-            archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            hardcode_libdir_flag_spec='-L$libdir'
-            hardcode_minus_L=yes
-        ;;
-      esac
-      ;;
-
-    bsdi[45]*)
-      export_dynamic_flag_spec=-rdynamic
-      ;;
-
-    cygwin* | mingw* | windows* | pw32* | cegcc*)
-      # When not using gcc, we currently assume that we are using
-      # Microsoft Visual C++ or Intel C++ Compiler.
-      # hardcode_libdir_flag_spec is actually meaningless, as there is
-      # no search path for DLLs.
-      case $cc_basename in
-      cl* | icl*)
-	# Native MSVC or ICC
-	hardcode_libdir_flag_spec=' '
-	allow_undefined_flag=unsupported
-	always_export_symbols=yes
-	file_list_spec='@'
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	archive_cmds='$CC -Fe$output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames='
-	archive_expsym_cmds='if   test DEF = "`$SED -n     -e '\''s/^[	 ]*//'\''     -e '\''/^\(;.*\)*$/d'\''     -e '\''s/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p'\''     -e q     $export_symbols`" ; then
-            cp "$export_symbols" "$output_objdir/$soname.def";
-            echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp";
-          else
-            $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp;
-          fi~
-          $CC -Fe$tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~
-          linknames='
-	# The linker will not automatically build a static lib if we build a DLL.
-	# _LT_TAGVAR(old_archive_from_new_cmds, )='true'
-	enable_shared_with_static_runtimes=yes
-	exclude_expsyms='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*'
-	export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1,DATA/'\'' | $SED -e '\''/^[AITW][ ]/s/.*[ ]//'\'' | sort | uniq > $export_symbols'
-	# Don't use ranlib
-	old_postinstall_cmds='chmod 644 $oldlib'
-	postlink_cmds='lt_outputfile="@OUTPUT@"~
-          lt_tool_outputfile="@TOOL_OUTPUT@"~
-          case $lt_outputfile in
-            *.exe|*.EXE) ;;
-            *)
-              lt_outputfile=$lt_outputfile.exe
-              lt_tool_outputfile=$lt_tool_outputfile.exe
-              ;;
-          esac~
-          if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then
-            $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1;
-            $RM "$lt_outputfile.manifest";
-          fi'
-	;;
-      *)
-	# Assume MSVC and ICC wrapper
-	hardcode_libdir_flag_spec=' '
-	allow_undefined_flag=unsupported
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	archive_cmds='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames='
-	# The linker will automatically build a .lib file if we build a DLL.
-	old_archive_from_new_cmds='true'
-	# FIXME: Should let the user specify the lib program.
-	old_archive_cmds='lib -OUT:$oldlib$oldobjs$old_deplibs'
-	enable_shared_with_static_runtimes=yes
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      
-  
-  archive_cmds_need_lc=no
-  hardcode_direct=no
-  hardcode_automatic=yes
-  hardcode_shlibpath_var=unsupported
-  if test yes = "$lt_cv_ld_force_load"; then
-    whole_archive_flag_spec='`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`'
-    
-  else
-    whole_archive_flag_spec=''
-  fi
-  link_all_deplibs=yes
-  allow_undefined_flag=$_lt_dar_allow_undefined
-  case $cc_basename in
-     ifort*|nagfor*) _lt_dar_can_shared=yes ;;
-     *) _lt_dar_can_shared=$GCC ;;
-  esac
-  if test yes = "$_lt_dar_can_shared"; then
-    output_verbose_link_cmd=func_echo_all
-    archive_cmds="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil"
-    module_cmds="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil"
-    archive_expsym_cmds="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil"
-    module_expsym_cmds="$SED -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil"
-    
-  else
-  ld_shlibs=no
-  fi
-
-      ;;
-
-    dgux*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_shlibpath_var=no
-      ;;
-
-    # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor
-    # support.  Future versions do this automatically, but an explicit c++rt0.o
-    # does not break anything, and helps significantly (at the cost of a little
-    # extra space).
-    freebsd2.2*)
-      archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o'
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    # Unfortunately, older versions of FreeBSD 2 do not have this feature.
-    freebsd2.*)
-      archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_direct=yes
-      hardcode_minus_L=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    # FreeBSD 3 and greater uses gcc -shared to do shared libraries.
-    freebsd* | dragonfly* | midnightbsd*)
-      archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    hpux9*)
-      if test yes = "$GCC"; then
-	archive_cmds='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      else
-	archive_cmds='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      fi
-      hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-      hardcode_libdir_separator=:
-      hardcode_direct=yes
-
-      # hardcode_minus_L: Not really in the search PATH,
-      # but as the default location of the library.
-      hardcode_minus_L=yes
-      export_dynamic_flag_spec='$wl-E'
-      ;;
-
-    hpux10*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      if test no = "$with_gnu_ld"; then
-	hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-	hardcode_libdir_separator=:
-	hardcode_direct=yes
-	hardcode_direct_absolute=yes
-	export_dynamic_flag_spec='$wl-E'
-	# hardcode_minus_L: Not really in the search PATH,
-	# but as the default location of the library.
-	hardcode_minus_L=yes
-      fi
-      ;;
-
-    hpux11*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	case $host_cpu in
-	hppa*64*)
-	  archive_cmds='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	  archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	esac
-      else
-	case $host_cpu in
-	hppa*64*)
-	  archive_cmds='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  archive_cmds='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	
-	  # Older versions of the 11.00 compiler do not understand -b yet
-	  # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does)
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC understands -b" >&5
-printf %s "checking if $CC understands -b... " >&6; }
-if test ${lt_cv_prog_compiler__b+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler__b=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS -b"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler__b=yes
-       fi
-     else
-       lt_cv_prog_compiler__b=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler__b" >&5
-printf '%s\n' "$lt_cv_prog_compiler__b" >&6; }
-
-if test yes = "$lt_cv_prog_compiler__b"; then
-    archive_cmds='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-else
-    archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-fi
-
-	  ;;
-	esac
-      fi
-      if test no = "$with_gnu_ld"; then
-	hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-	hardcode_libdir_separator=:
-
-	case $host_cpu in
-	hppa*64*|ia64*)
-	  hardcode_direct=no
-	  hardcode_shlibpath_var=no
-	  ;;
-	*)
-	  hardcode_direct=yes
-	  hardcode_direct_absolute=yes
-	  export_dynamic_flag_spec='$wl-E'
-
-	  # hardcode_minus_L: Not really in the search PATH,
-	  # but as the default location of the library.
-	  hardcode_minus_L=yes
-	  ;;
-	esac
-      fi
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	# Try to use the -exported_symbol ld option, if it does not
-	# work, assume that -exports_file does not work either and
-	# implicitly export all symbols.
-	# This should be the same for all languages, so no per-tag cache variable.
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the $host_os linker accepts -exported_symbol" >&5
-printf %s "checking whether the $host_os linker accepts -exported_symbol... " >&6; }
-if test ${lt_cv_irix_exported_symbol+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) save_LDFLAGS=$LDFLAGS
-	   LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null"
-	   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int foo (void) { return 0; }
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_irix_exported_symbol=yes
-else case e in @%:@(
-  e) lt_cv_irix_exported_symbol=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-           LDFLAGS=$save_LDFLAGS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_irix_exported_symbol" >&5
-printf '%s\n' "$lt_cv_irix_exported_symbol" >&6; }
-	if test yes = "$lt_cv_irix_exported_symbol"; then
-          archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib'
-	fi
-      else
-	archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      inherit_rpath=yes
-      link_all_deplibs=yes
-      ;;
-
-    linux*)
-      case $cc_basename in
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	ld_shlibs=yes
-	archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	;;
-      esac
-      ;;
-
-    *-mlibc)
-      ;;
-
-    netbsd* | netbsdelf*-gnu)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'  # a.out
-      else
-	archive_cmds='$LD -shared -o $lib $libobjs $deplibs $linker_flags'      # ELF
-      fi
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    newsos6)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_direct=yes
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      hardcode_shlibpath_var=no
-      ;;
-
-    *nto* | *qnx*)
-      ;;
-
-    openbsd*)
-      if test -f /usr/libexec/ld.so; then
-	hardcode_direct=yes
-	hardcode_shlibpath_var=no
-	hardcode_direct_absolute=yes
-	if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-	  archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  archive_expsym_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols'
-	  hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-	  export_dynamic_flag_spec='$wl-E'
-	else
-	  archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-	fi
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    os2*)
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_minus_L=yes
-      allow_undefined_flag=unsupported
-      shrext_cmds=.dll
-      archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      old_archive_from_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      enable_shared_with_static_runtimes=yes
-      file_list_spec='@'
-      ;;
-
-    osf3*)
-      if test yes = "$GCC"; then
-	allow_undefined_flag=' $wl-expect_unresolved $wl\*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-      else
-	allow_undefined_flag=' -expect_unresolved \*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      ;;
-
-    osf4* | osf5*)	# as osf3* with the addition of -msym flag
-      if test yes = "$GCC"; then
-	allow_undefined_flag=' $wl-expect_unresolved $wl\*'
-	archive_cmds='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      else
-	allow_undefined_flag=' -expect_unresolved \*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	archive_expsym_cmds='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~
-          $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp'
-
-	# Both c and cxx compiler support -rpath directly
-	hardcode_libdir_flag_spec='-rpath $libdir'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_separator=:
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      no_undefined_flag=' -z defs'
-      if test yes = "$GCC"; then
-	wlarc='$wl'
-	archive_cmds='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-          $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-      else
-	case `$CC -V 2>&1` in
-	*"Compilers 5.0"*)
-	  wlarc=''
-	  archive_cmds='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp'
-	  ;;
-	*)
-	  wlarc='$wl'
-	  archive_cmds='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags'
-	  archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-	  ;;
-	esac
-      fi
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_shlibpath_var=no
-      case $host_os in
-      solaris2.[0-5] | solaris2.[0-5].*) ;;
-      *)
-	# The compiler driver will combine and reorder linker options,
-	# but understands '-z linker_flag'.  GCC discards it without '$wl',
-	# but is careful enough not to reorder.
-	# Supported since Solaris 2.6 (maybe 2.5.1?)
-	if test yes = "$GCC"; then
-	  whole_archive_flag_spec='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract'
-	else
-	  whole_archive_flag_spec='-z allextract$convenience -z defaultextract'
-	fi
-	;;
-      esac
-      link_all_deplibs=yes
-      ;;
-
-    sunos4*)
-      if test sequent = "$host_vendor"; then
-	# Use $CC to link under sequent, because it throws in some extra .o
-	# files that make .init and .fini sections work.
-	archive_cmds='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_direct=yes
-      hardcode_minus_L=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    sysv4)
-      case $host_vendor in
-	sni)
-	  archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  hardcode_direct=yes # is this really true???
-	;;
-	siemens)
-	  ## LD is ld it makes a PLAMLIB
-	  ## CC just makes a GrossModule.
-	  archive_cmds='$LD -G -o $lib $libobjs $deplibs $linker_flags'
-	  reload_cmds='$CC -r -o $output$reload_objs'
-	  hardcode_direct=no
-        ;;
-	motorola)
-	  archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  hardcode_direct=no #Motorola manual says yes, but my tests say they lie
-	;;
-      esac
-      runpath_var='LD_RUN_PATH'
-      hardcode_shlibpath_var=no
-      ;;
-
-    sysv4.3*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_shlibpath_var=no
-      export_dynamic_flag_spec='-Bexport'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	hardcode_shlibpath_var=no
-	runpath_var=LD_RUN_PATH
-	hardcode_runpath_var=yes
-	ld_shlibs=yes
-      fi
-      ;;
-
-    sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[01].[10]* | unixware7* | sco3.2v5.0.[024]*)
-      no_undefined_flag='$wl-z,text'
-      archive_cmds_need_lc=no
-      hardcode_shlibpath_var=no
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6*)
-      # Note: We CANNOT use -z defs as we might desire, because we do not
-      # link with -lc, and that would cause any symbols used from libc to
-      # always be unresolved, which means just about no library would
-      # ever link correctly.  If we're not using GNU ld we use -z text
-      # though, which does catch some bad symbols but isn't as heavy-handed
-      # as -z defs.
-      no_undefined_flag='$wl-z,text'
-      allow_undefined_flag='$wl-z,nodefs'
-      archive_cmds_need_lc=no
-      hardcode_shlibpath_var=no
-      hardcode_libdir_flag_spec='$wl-R,$libdir'
-      hardcode_libdir_separator=':'
-      link_all_deplibs=yes
-      export_dynamic_flag_spec='$wl-Bexport'
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    uts4*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_shlibpath_var=no
-      ;;
-
-    *)
-      ld_shlibs=no
-      ;;
-    esac
-
-    if test sni = "$host_vendor"; then
-      case $host in
-      sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*)
-	export_dynamic_flag_spec='$wl-Blargedynsym'
-	;;
-      esac
-    fi
-  fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ld_shlibs" >&5
-printf '%s\n' "$ld_shlibs" >&6; }
-test no = "$ld_shlibs" && can_build_shared=no
-
-with_gnu_ld=$with_gnu_ld
-
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-
-#
-# Do we need to explicitly link libc?
-#
-case "x$archive_cmds_need_lc" in
-x|xyes)
-  # Assume -lc should be added
-  archive_cmds_need_lc=yes
-
-  if test yes,yes = "$GCC,$enable_shared"; then
-    case $archive_cmds in
-    *'~'*)
-      # FIXME: we may have to deal with multi-command sequences.
-      ;;
-    '$CC '*)
-      # Test whether the compiler implicitly links with -lc since on some
-      # systems, -lgcc has to come before -lc. If gcc already passes -lc
-      # to ld, don't add -lc before -lgcc.
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether -lc should be explicitly linked in" >&5
-printf %s "checking whether -lc should be explicitly linked in... " >&6; }
-if test ${lt_cv_archive_cmds_need_lc+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) $RM conftest*
-	echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-	if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } 2>conftest.err; then
-	  soname=conftest
-	  lib=conftest
-	  libobjs=conftest.$ac_objext
-	  deplibs=
-	  wl=$lt_prog_compiler_wl
-	  pic_flag=$lt_prog_compiler_pic
-	  compiler_flags=-v
-	  linker_flags=-v
-	  verstring=
-	  output_objdir=.
-	  libname=conftest
-	  lt_save_allow_undefined_flag=$allow_undefined_flag
-	  allow_undefined_flag=
-	  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1\""; } >&5
-  (eval $archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-	  then
-	    lt_cv_archive_cmds_need_lc=no
-	  else
-	    lt_cv_archive_cmds_need_lc=yes
-	  fi
-	  allow_undefined_flag=$lt_save_allow_undefined_flag
-	else
-	  cat conftest.err 1>&5
-	fi
-	$RM conftest*
-	 ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_archive_cmds_need_lc" >&5
-printf '%s\n' "$lt_cv_archive_cmds_need_lc" >&6; }
-      archive_cmds_need_lc=$lt_cv_archive_cmds_need_lc
-      ;;
-    esac
-  fi
-  ;;
-esac
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking dynamic linker characteristics" >&5
-printf %s "checking dynamic linker characteristics... " >&6; }
-
-if test yes = "$GCC"; then
-  case $host_os in
-    darwin*) lt_awk_arg='/^libraries:/,/LR/' ;;
-    *) lt_awk_arg='/^libraries:/' ;;
-  esac
-  case $host_os in
-    mingw* | windows* | cegcc*) lt_sed_strip_eq='s|=\([A-Za-z]:\)|\1|g' ;;
-    *) lt_sed_strip_eq='s|=/|/|g' ;;
-  esac
-  lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq`
-  case $lt_search_path_spec in
-  *\;*)
-    # if the path contains ";" then we assume it to be the separator
-    # otherwise default to the standard path separator (i.e. ":") - it is
-    # assumed that no part of a normal pathname contains ";" but that should
-    # okay in the real world where ";" in dirpaths is itself problematic.
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'`
-    ;;
-  *)
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"`
-    ;;
-  esac
-  # Ok, now we have the path, separated by spaces, we can step through it
-  # and add multilib dir if necessary...
-  lt_tmp_lt_search_path_spec=
-  lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null`
-  # ...but if some path component already ends with the multilib dir we assume
-  # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer).
-  case "$lt_multi_os_dir; $lt_search_path_spec " in
-  "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*)
-    lt_multi_os_dir=
-    ;;
-  esac
-  for lt_sys_path in $lt_search_path_spec; do
-    if test -d "$lt_sys_path$lt_multi_os_dir"; then
-      lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir"
-    elif test -n "$lt_multi_os_dir"; then
-      test -d "$lt_sys_path" && \
-	lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path"
-    fi
-  done
-  lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk '
-BEGIN {RS = " "; FS = "/|\n";} {
-  lt_foo = "";
-  lt_count = 0;
-  for (lt_i = NF; lt_i > 0; lt_i--) {
-    if ($lt_i != "" && $lt_i != ".") {
-      if ($lt_i == "..") {
-        lt_count++;
-      } else {
-        if (lt_count == 0) {
-          lt_foo = "/" $lt_i lt_foo;
-        } else {
-          lt_count--;
-        }
-      }
-    }
-  }
-  if (lt_foo != "") { lt_freq[lt_foo]++; }
-  if (lt_freq[lt_foo] == 1) { print lt_foo; }
-}'`
-  # AWK program above erroneously prepends '/' to C:/dos/paths
-  # for these hosts.
-  case $host_os in
-    mingw* | windows* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\
-      $SED 's|/\([A-Za-z]:\)|\1|g'` ;;
-  esac
-  sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP`
-else
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-fi
-library_names_spec=
-libname_spec='lib$name'
-soname_spec=
-shrext_cmds=.so
-postinstall_cmds=
-postuninstall_cmds=
-finish_cmds=
-finish_eval=
-shlibpath_var=
-shlibpath_overrides_runpath=unknown
-version_type=none
-dynamic_linker="$host_os ld.so"
-sys_lib_dlsearch_path_spec="/lib /usr/lib"
-need_lib_prefix=unknown
-hardcode_into_libs=no
-
-# when you set need_version to no, make sure it does not cause -set_version
-# flags to be left without arguments
-need_version=unknown
-
-
-
-case $host_os in
-aix3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname.a'
-  shlibpath_var=LIBPATH
-
-  # AIX 3 has no versioning support, so we append a major version to the name.
-  soname_spec='$libname$release$shared_ext$major'
-  ;;
-
-aix[4-9]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  hardcode_into_libs=yes
-  if test ia64 = "$host_cpu"; then
-    # AIX 5 supports IA64
-    library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext'
-    shlibpath_var=LD_LIBRARY_PATH
-  else
-    # With GCC up to 2.95.x, collect2 would create an import file
-    # for dependence libraries.  The import file would start with
-    # the line '#! .'.  This would cause the generated library to
-    # depend on '.', always an invalid library.  This was fixed in
-    # development snapshots of GCC prior to 3.0.
-    case $host_os in
-      aix4 | aix4.[01] | aix4.[01].*)
-      if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)'
-	   echo ' yes '
-	   echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then
-	:
-      else
-	can_build_shared=no
-      fi
-      ;;
-    esac
-    # Using Import Files as archive members, it is possible to support
-    # filename-based versioning of shared library archives on AIX. While
-    # this would work for both with and without runtime linking, it will
-    # prevent static linking of such archives. So we do filename-based
-    # shared library versioning with .so extension only, which is used
-    # when both runtime linking and shared linking is enabled.
-    # Unfortunately, runtime linking may impact performance, so we do
-    # not want this to be the default eventually. Also, we use the
-    # versioned .so libs for executables only if there is the -brtl
-    # linker flag in LDFLAGS as well, or --enable-aix-soname=svr4 only.
-    # To allow for filename-based versioning support, we need to create
-    # libNAME.so.V as an archive file, containing:
-    # *) an Import File, referring to the versioned filename of the
-    #    archive as well as the shared archive member, telling the
-    #    bitwidth (32 or 64) of that shared object, and providing the
-    #    list of exported symbols of that shared object, eventually
-    #    decorated with the 'weak' keyword
-    # *) the shared object with the F_LOADONLY flag set, to really avoid
-    #    it being seen by the linker.
-    # At run time we better use the real file rather than another symlink,
-    # but for link time we create the symlink libNAME.so -> libNAME.so.V
-
-    case $with_aix_soname,$aix_use_runtimelinking in
-    # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct
-    # soname into executable. Probably we can add versioning support to
-    # collect2, so additional links can be useful in future.
-    aix,yes) # traditional libtool
-      dynamic_linker='AIX unversionable lib.so'
-      # If using run time linking (on AIX 4.2 or later) use lib<name>.so
-      # instead of lib<name>.a to let people know that these are not
-      # typical AIX shared libraries.
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      ;;
-    aix,no) # traditional AIX only
-      dynamic_linker='AIX lib.a(lib.so.V)'
-      # We preserve .a as extension for shared libraries through AIX4.2
-      # and later when we are not doing run time linking.
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      ;;
-    svr4,*) # full svr4 only
-      dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o)"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,yes) # both, prefer svr4
-      dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o), lib.a(lib.so.V)"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # unpreferred sharedlib libNAME.a needs extra handling
-      postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"'
-      postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,no) # both, prefer aix
-      dynamic_linker="AIX lib.a(lib.so.V), lib.so.V($shared_archive_member_spec.o)"
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling
-      postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)'
-      postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"'
-      ;;
-    esac
-    shlibpath_var=LIBPATH
-  fi
-  ;;
-
-amigaos*)
-  case $host_cpu in
-  powerpc)
-    # Since July 2007 AmigaOS4 officially supports .so libraries.
-    # When compiling the executable, add -use-dynld -Lsobjs: to the compileline.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    ;;
-  m68k)
-    library_names_spec='$libname.ixlibrary $libname.a'
-    # Create ${libname}_ixlibrary.a entries in /sys/libs.
-    finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([^/]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done'
-    ;;
-  esac
-  ;;
-
-beos*)
-  library_names_spec='$libname$shared_ext'
-  dynamic_linker="$host_os ld.so"
-  shlibpath_var=LIBRARY_PATH
-  ;;
-
-bsdi[45]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib"
-  # the default ld.so.conf also contains /usr/contrib/lib and
-  # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow
-  # libtool to hard-code these into programs
-  ;;
-
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-
-  case $GCC,$cc_basename in
-  yes,*)
-    # gcc
-    library_names_spec='$libname.dll.a'
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    # If user builds GCC with multilib enabled,
-    # it should just install on $(libdir)
-    # not on $(libdir)/../bin or 32 bits dlls would override 64 bit ones.
-    if test xyes = x"$multilib"; then
-      postinstall_cmds='base_file=`basename \$file`~
-        dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-        dldir=$destdir/`dirname \$dlpath`~
-        $install_prog $dir/$dlname $destdir/$dlname~
-        chmod a+x $destdir/$dlname~
-        if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-          eval '\''$striplib $destdir/$dlname'\'' || exit \$?;
-        fi'
-    else
-      postinstall_cmds='base_file=`basename \$file`~
-        dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-        dldir=$destdir/`dirname \$dlpath`~
-        test -d \$dldir || mkdir -p \$dldir~
-        $install_prog $dir/$dlname \$dldir/$dlname~
-        chmod a+x \$dldir/$dlname~
-        if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-          eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-        fi'
-    fi
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-
-    case $host_os in
-    cygwin*)
-      # Cygwin DLLs use 'cyg' prefix rather than 'lib'
-      soname_spec='`echo $libname | $SED -e 's/^lib/cyg/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-
-      sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api"
-      ;;
-    mingw* | windows* | cegcc*)
-      # MinGW DLLs use traditional 'lib' prefix
-      soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-      ;;
-    pw32*)
-      # pw32 DLLs use 'pw' prefix rather than 'lib'
-      library_names_spec='`echo $libname | $SED -e 's/^lib/pw/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-      ;;
-    esac
-    dynamic_linker='Win32 ld.exe'
-    ;;
-
-  *,cl* | *,icl*)
-    # Native MSVC or ICC
-    libname_spec='$name'
-    soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-    library_names_spec='$libname.dll.lib'
-
-    case $build_os in
-    mingw* | windows*)
-      sys_lib_search_path_spec=
-      lt_save_ifs=$IFS
-      IFS=';'
-      for lt_path in $LIB
-      do
-        IFS=$lt_save_ifs
-        # Let DOS variable expansion print the short 8.3 style file name.
-        lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"`
-        sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path"
-      done
-      IFS=$lt_save_ifs
-      # Convert to MSYS style.
-      sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's|\\\\|/|g' -e 's| \\([a-zA-Z]\\):| /\\1|g' -e 's|^ ||'`
-      ;;
-    cygwin*)
-      # Convert to unix form, then to dos form, then back to unix form
-      # but this time dos style (no spaces!) so that the unix form looks
-      # like /cygdrive/c/PROGRA~1:/cygdr...
-      sys_lib_search_path_spec=`cygpath --path --unix "$LIB"`
-      sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null`
-      sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      ;;
-    *)
-      sys_lib_search_path_spec=$LIB
-      if $ECHO "$sys_lib_search_path_spec" | $GREP ';[c-zC-Z]:/' >/dev/null; then
-        # It is most probably a Windows format PATH.
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'`
-      else
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      fi
-      # FIXME: find the short name or the path components, as spaces are
-      # common. (e.g. "Program Files" -> "PROGRA~1")
-      ;;
-    esac
-
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    postinstall_cmds='base_file=`basename \$file`~
-      dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-      dldir=$destdir/`dirname \$dlpath`~
-      test -d \$dldir || mkdir -p \$dldir~
-      $install_prog $dir/$dlname \$dldir/$dlname'
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-    dynamic_linker='Win32 link.exe'
-    ;;
-
-  *)
-    # Assume MSVC and ICC wrapper
-    library_names_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext $libname.lib'
-    dynamic_linker='Win32 ld.exe'
-    ;;
-  esac
-  # FIXME: first we should search . and the directory the executable is in
-  shlibpath_var=PATH
-  ;;
-
-darwin* | rhapsody*)
-  dynamic_linker="$host_os dyld"
-  version_type=darwin
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$major$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$major$shared_ext'
-  shlibpath_overrides_runpath=yes
-  shlibpath_var=DYLD_LIBRARY_PATH
-  shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`'
-
-  sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib"
-  sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib'
-  ;;
-
-dgux*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  # DragonFly does not have aout.  When/if they implement a new
-  # versioning mechanism, adjust this.
-  if test -x /usr/bin/objformat; then
-    objformat=`/usr/bin/objformat`
-  else
-    case $host_os in
-    freebsd[23].*) objformat=aout ;;
-    *) objformat=elf ;;
-    esac
-  fi
-  version_type=freebsd-$objformat
-  case $version_type in
-    freebsd-elf*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      soname_spec='$libname$release$shared_ext$major'
-      need_version=no
-      need_lib_prefix=no
-      ;;
-    freebsd-*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-      need_version=yes
-      ;;
-  esac
-  case $host_cpu in
-    powerpc64)
-      # On FreeBSD bi-arch platforms, a different variable is used for 32-bit
-      # binaries.  See <https://man.freebsd.org/cgi/man.cgi?query=ld.so>.
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int test_pointer_size[sizeof (void *) - 5];
-           
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  shlibpath_var=LD_LIBRARY_PATH
-else case e in @%:@(
-  e) shlibpath_var=LD_32_LIBRARY_PATH ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-      ;;
-    *)
-      shlibpath_var=LD_LIBRARY_PATH
-      ;;
-  esac
-  case $host_os in
-  freebsd2.*)
-    shlibpath_overrides_runpath=yes
-    ;;
-  freebsd3.[01]* | freebsdelf3.[01]*)
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  freebsd3.[2-9]* | freebsdelf3.[2-9]* | \
-  freebsd4.[0-5] | freebsdelf4.[0-5] | freebsd4.1.1 | freebsdelf4.1.1)
-    shlibpath_overrides_runpath=no
-    hardcode_into_libs=yes
-    ;;
-  *) # from 4.6 on, and DragonFly
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  esac
-  ;;
-
-haiku*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  dynamic_linker="$host_os runtime_loader"
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec='/boot/system/non-packaged/develop/lib /boot/system/develop/lib'
-  sys_lib_dlsearch_path_spec='/boot/home/config/non-packaged/lib /boot/home/config/lib /boot/system/non-packaged/lib /boot/system/lib'
-  hardcode_into_libs=no
-  ;;
-
-hpux9* | hpux10* | hpux11*)
-  # Give a soname corresponding to the major version so that dld.sl refuses to
-  # link against other versions.
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  case $host_cpu in
-  ia64*)
-    shrext_cmds='.so'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.so"
-    shlibpath_var=LD_LIBRARY_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    if test 32 = "$HPUX_IA64_MODE"; then
-      sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux32
-    else
-      sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux64
-    fi
-    ;;
-  hppa*64*)
-    shrext_cmds='.sl'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64"
-    sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-    ;;
-  *)
-    shrext_cmds='.sl'
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=SHLIB_PATH
-    shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    ;;
-  esac
-  # HP-UX runs *really* slowly unless shared libraries are mode 555, ...
-  postinstall_cmds='chmod 555 $lib'
-  # or fails outright, so override atomically:
-  install_override_mode=555
-  ;;
-
-interix[3-9]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $host_os in
-    nonstopux*) version_type=nonstopux ;;
-    *)
-	if test yes = "$lt_cv_prog_gnu_ld"; then
-		version_type=linux # correct to gnu/linux during the next big refactor
-	else
-		version_type=irix
-	fi ;;
-  esac
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext'
-  case $host_os in
-  irix5* | nonstopux*)
-    libsuff= shlibsuff=
-    ;;
-  *)
-    case $LD in # libtool.m4 will add one of these switches to LD
-    *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ")
-      libsuff= shlibsuff= libmagic=32-bit;;
-    *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ")
-      libsuff=32 shlibsuff=N32 libmagic=N32;;
-    *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ")
-      libsuff=64 shlibsuff=64 libmagic=64-bit;;
-    *) libsuff= shlibsuff= libmagic=never-match;;
-    esac
-    ;;
-  esac
-  shlibpath_var=LD_LIBRARY${shlibsuff}_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff"
-  sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff"
-  hardcode_into_libs=yes
-  ;;
-
-# No shared lib support for Linux oldld, aout, or coff.
-linux*oldld* | linux*aout* | linux*coff*)
-  dynamic_linker=no
-  ;;
-
-linux*android*)
-  version_type=none # Android doesn't support versioned libraries.
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  dynamic_linker='Android linker'
-  # -rpath works at least for libraries that are not overridden by
-  # libraries installed in system locations.
-  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-
-  # Some binutils ld are patched to set DT_RUNPATH
-  if test ${lt_cv_shlibpath_overrides_runpath+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_shlibpath_overrides_runpath=no
-    save_LDFLAGS=$LDFLAGS
-    save_libdir=$libdir
-    eval "libdir=/foo; wl=\"$lt_prog_compiler_wl\"; \
-	 LDFLAGS=\"\$LDFLAGS $hardcode_libdir_flag_spec\""
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  if  ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null
-then :
-  lt_cv_shlibpath_overrides_runpath=yes
-fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-    LDFLAGS=$save_LDFLAGS
-    libdir=$save_libdir
-     ;;
-esac
-fi
-
-  shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  # Ideally, we could use ldconfig to report *all* directories which are
-  # searched for libraries, however this is still not possible.  Aside from not
-  # being certain /sbin/ldconfig is available, command
-  # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64,
-  # even though it is searched at run-time.  Try to do the best guess by
-  # appending ld.so.conf contents (and includes) to the search path.
-  if test -f /etc/ld.so.conf; then
-    lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \$2)); skip = 1; } { if (!skip) print \$0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[	 ]*hwcap[	 ]/d;s/[:,	]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '`
-    sys_lib_dlsearch_path_spec="/lib /usr/lib $lt_ld_extra"
-  fi
-
-  # We used to test for /lib/ld.so.1 and disable shared libraries on
-  # powerpc, because MkLinux only supported shared libraries with the
-  # GNU dynamic linker.  Since this was broken with cross compilers,
-  # most powerpc-linux boxes support dynamic linking these days and
-  # people can always --disable-shared, the test was removed, and we
-  # assume the GNU/Linux dynamic linker is in use.
-  dynamic_linker='GNU/Linux ld.so'
-  ;;
-
-netbsdelf*-gnu)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='NetBSD ld.elf_so'
-  ;;
-
-netbsd*)
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-    finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-    dynamic_linker='NetBSD (a.out) ld.so'
-  else
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    dynamic_linker='NetBSD ld.elf_so'
-  fi
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  ;;
-
-*-mlibc)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='mlibc ld.so'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-newsos6)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-*nto* | *qnx*)
-  version_type=qnx
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='ldqnx.so'
-  ;;
-
-openbsd*)
-  version_type=sunos
-  sys_lib_dlsearch_path_spec=/usr/lib
-  need_lib_prefix=no
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    need_version=no
-  else
-    need_version=yes
-  fi
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-os2*)
-  libname_spec='$name'
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-  # OS/2 can only load a DLL with a base name of 8 characters or less.
-  soname_spec='`test -n "$os2dllname" && libname="$os2dllname";
-    v=$($ECHO $release$versuffix | tr -d .-);
-    n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _);
-    $ECHO $n$v`$shared_ext'
-  library_names_spec='${libname}_dll.$libext'
-  dynamic_linker='OS/2 ld.exe'
-  shlibpath_var=BEGINLIBPATH
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  postinstall_cmds='base_file=`basename \$file`~
-    dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~
-    dldir=$destdir/`dirname \$dlpath`~
-    test -d \$dldir || mkdir -p \$dldir~
-    $install_prog $dir/$dlname \$dldir/$dlname~
-    chmod a+x \$dldir/$dlname~
-    if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-      eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-    fi'
-  postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~
-    dlpath=$dir/\$dldll~
-    $RM \$dlpath'
-  ;;
-
-osf3* | osf4* | osf5*)
-  version_type=osf
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  ;;
-
-rdos*)
-  dynamic_linker=no
-  ;;
-
-serenity*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  dynamic_linker='SerenityOS LibELF'
-  ;;
-
-solaris*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  # ldd complains unless libraries are executable
-  postinstall_cmds='chmod +x $lib'
-  ;;
-
-sunos4*)
-  version_type=sunos
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  if test yes = "$with_gnu_ld"; then
-    need_lib_prefix=no
-  fi
-  need_version=yes
-  ;;
-
-sysv4 | sysv4.3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  case $host_vendor in
-    sni)
-      shlibpath_overrides_runpath=no
-      need_lib_prefix=no
-      runpath_var=LD_RUN_PATH
-      ;;
-    siemens)
-      need_lib_prefix=no
-      ;;
-    motorola)
-      need_lib_prefix=no
-      need_version=no
-      shlibpath_overrides_runpath=no
-      sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib'
-      ;;
-  esac
-  ;;
-
-sysv4*MP*)
-  if test -d /usr/nec; then
-    version_type=linux # correct to gnu/linux during the next big refactor
-    library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext'
-    soname_spec='$libname$shared_ext.$major'
-    shlibpath_var=LD_LIBRARY_PATH
-  fi
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  version_type=sco
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  if test yes = "$with_gnu_ld"; then
-    sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib'
-  else
-    sys_lib_search_path_spec='/usr/ccs/lib /usr/lib'
-    case $host_os in
-      sco3.2v5*)
-        sys_lib_search_path_spec="$sys_lib_search_path_spec /lib"
-	;;
-    esac
-  fi
-  sys_lib_dlsearch_path_spec='/usr/lib'
-  ;;
-
-tpf*)
-  # TPF is a cross-target only.  Preferred cross-host = GNU/Linux.
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-uts4*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-emscripten*)
-  version_type=none
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  dynamic_linker="Emscripten linker"
-  lt_prog_compiler_wl=
-lt_prog_compiler_pic=
-lt_prog_compiler_static=
-
-
-  if test yes = "$GCC"; then
-    lt_prog_compiler_wl='-Wl,'
-    lt_prog_compiler_static='-static'
-
-    case $host_os in
-      aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            lt_prog_compiler_pic='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            lt_prog_compiler_pic='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      ;;
-
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      lt_prog_compiler_static=
-      ;;
-
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='-fPIC'
-	;;
-      esac
-      ;;
-
-    interix[3-9]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-
-    msdosdjgpp*)
-      # Just because we use GCC doesn't mean we suddenly get shared libraries
-      # on systems that don't support them.
-      lt_prog_compiler_can_build_shared=no
-      enable_shared=no
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic=-Kconform_pic
-      fi
-      ;;
-
-    *)
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-    esac
-
-    case $cc_basename in
-    nvcc*) # Cuda Compiler Driver 2.2
-      lt_prog_compiler_wl='-Xlinker '
-      if test -n "$lt_prog_compiler_pic"; then
-        lt_prog_compiler_pic="-Xcompiler $lt_prog_compiler_pic"
-      fi
-      ;;
-    esac
-  else
-    # PORTME Check for flag to pass linker flags through the system compiler.
-    case $host_os in
-    aix*)
-      lt_prog_compiler_wl='-Wl,'
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      else
-	lt_prog_compiler_static='-bnso -bI:/lib/syscalls.exp'
-      fi
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      case $cc_basename in
-      nagfor*)
-        # NAG Fortran compiler
-        lt_prog_compiler_wl='-Wl,-Wl,,'
-        lt_prog_compiler_pic='-PIC'
-        lt_prog_compiler_static='-Bstatic'
-        ;;
-      esac
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    hpux9* | hpux10* | hpux11*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
-      # not for PA HP-UX.
-      case $host_cpu in
-      hppa*64*|ia64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='+Z'
-	;;
-      esac
-      # Is there a better lt_prog_compiler_static that works with the bundled CC?
-      lt_prog_compiler_static='$wl-a ${wl}archive'
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC (with -KPIC) is the default.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-      case $cc_basename in
-      # old Intel for x86_64, which still supported -KPIC.
-      ecc*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-KPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      *flang* | ftn | f18* | f95*)
-        # Flang compiler.
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # icc used to be incompatible with GCC.
-      # ICC 10 doesn't accept -KPIC any more.
-      icc* | ifort*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # Lahey Fortran 8.1.
-      lf95*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='--shared'
-	lt_prog_compiler_static='--static'
-	;;
-      nagfor*)
-	# NAG Fortran compiler
-	lt_prog_compiler_wl='-Wl,-Wl,,'
-	lt_prog_compiler_pic='-PIC'
-	lt_prog_compiler_static='-Bstatic'
-	;;
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-	;;
-      pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
-        # Portland Group compilers (*not* the Pentium gcc compiler,
-	# which looks to be a dead project)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fpic'
-	lt_prog_compiler_static='-Bstatic'
-        ;;
-      ccc*)
-        lt_prog_compiler_wl='-Wl,'
-        # All Alpha code is PIC.
-        lt_prog_compiler_static='-non_shared'
-        ;;
-      xl* | bgxl* | bgf* | mpixl*)
-	# IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-qpic'
-	lt_prog_compiler_static='-qstaticlink'
-	;;
-      *)
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [1-7].* | *Sun*Fortran*\ 8.[0-3]*)
-	  # Sun Fortran 8.3 passes all unrecognized flags to the linker
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl=''
-	  ;;
-	*Sun\ F* | *Sun*Fortran*)
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Qoption ld '
-	  ;;
-	*Sun\ C*)
-	  # Sun C 5.9
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Wl,'
-	  ;;
-        *Intel*\ [CF]*Compiler*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fPIC'
-	  lt_prog_compiler_static='-static'
-	  ;;
-	*Portland\ Group*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fpic'
-	  lt_prog_compiler_static='-Bstatic'
-	  ;;
-	esac
-	;;
-      esac
-      ;;
-
-    newsos6)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *-mlibc)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-fPIC'
-      lt_prog_compiler_static='-static'
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    osf3* | osf4* | osf5*)
-      lt_prog_compiler_wl='-Wl,'
-      # All OSF/1 code is PIC.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    rdos*)
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      case $cc_basename in
-      f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
-	lt_prog_compiler_wl='-Qoption ld ';;
-      *)
-	lt_prog_compiler_wl='-Wl,';;
-      esac
-      ;;
-
-    sunos4*)
-      lt_prog_compiler_wl='-Qoption ld '
-      lt_prog_compiler_pic='-PIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4 | sysv4.2uw2* | sysv4.3*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic='-Kconform_pic'
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      ;;
-
-    sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    unicos*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_can_build_shared=no
-      ;;
-
-    uts4*)
-      lt_prog_compiler_pic='-pic'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *)
-      lt_prog_compiler_can_build_shared=no
-      ;;
-    esac
-  fi
-
-case $host_os in
-  # For platforms that do not support PIC, -DPIC is meaningless:
-  *djgpp*)
-    lt_prog_compiler_pic=
-    ;;
-  *)
-    lt_prog_compiler_pic="$lt_prog_compiler_pic@&t@ -DPIC"
-    ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $compiler option to produce PIC" >&5
-printf %s "checking for $compiler option to produce PIC... " >&6; }
-if test ${lt_cv_prog_compiler_pic+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic=$lt_prog_compiler_pic ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic" >&6; }
-lt_prog_compiler_pic=$lt_cv_prog_compiler_pic
-
-#
-# Check to make sure the PIC flag actually works.
-#
-if test -n "$lt_prog_compiler_pic"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler PIC flag $lt_prog_compiler_pic works" >&5
-printf %s "checking if $compiler PIC flag $lt_prog_compiler_pic works... " >&6; }
-if test ${lt_cv_prog_compiler_pic_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic_works=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$lt_prog_compiler_pic@&t@ -DPIC"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_pic_works=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_pic_works"; then
-    case $lt_prog_compiler_pic in
-     "" | " "*) ;;
-     *) lt_prog_compiler_pic=" $lt_prog_compiler_pic" ;;
-     esac
-else
-    lt_prog_compiler_pic=
-     lt_prog_compiler_can_build_shared=no
-fi
-
-fi
-
-
-
-
-
-#
-# Check to make sure the static flag actually works.
-#
-wl=$lt_prog_compiler_wl eval lt_tmp_static_flag=\"$lt_prog_compiler_static\"
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler static flag $lt_tmp_static_flag works" >&5
-printf %s "checking if $compiler static flag $lt_tmp_static_flag works... " >&6; }
-if test ${lt_cv_prog_compiler_static_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_static_works=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $lt_tmp_static_flag"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler_static_works=yes
-       fi
-     else
-       lt_cv_prog_compiler_static_works=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_static_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_static_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_static_works"; then
-    :
-else
-    lt_prog_compiler_static=
-fi
-
-
-
-='-fPIC'
-  archive_cmds='$CC -sSIDE_MODULE=2 -shared $libobjs $deplibs $compiler_flags -o $lib'
-  archive_expsym_cmds='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -sSIDE_MODULE=2 -shared $libobjs $deplibs $compiler_flags -o $lib -s EXPORTED_FUNCTIONS=@$output_objdir/$soname.expsym'
-  archive_cmds_need_lc=no
-  no_undefined_flag=
-  ;;
-
-*)
-  dynamic_linker=no
-  ;;
-esac
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $dynamic_linker" >&5
-printf '%s\n' "$dynamic_linker" >&6; }
-test no = "$dynamic_linker" && can_build_shared=no
-
-variables_saved_for_relink="PATH $shlibpath_var $runpath_var"
-if test yes = "$GCC"; then
-  variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH"
-fi
-
-if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then
-  sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec
-fi
-
-if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then
-  sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec
-fi
-
-# remember unaugmented sys_lib_dlsearch_path content for libtool script decls...
-configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec
-
-# ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code
-func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH"
-
-# to be used as default LT_SYS_LIBRARY_PATH value in generated libtool
-configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to hardcode library paths into programs" >&5
-printf %s "checking how to hardcode library paths into programs... " >&6; }
-hardcode_action=
-if test -n "$hardcode_libdir_flag_spec" ||
-   test -n "$runpath_var" ||
-   test yes = "$hardcode_automatic"; then
-
-  # We can hardcode non-existent directories.
-  if test no != "$hardcode_direct" &&
-     # If the only mechanism to avoid hardcoding is shlibpath_var, we
-     # have to relink, otherwise we might link with an installed library
-     # when we should be linking with a yet-to-be-installed one
-     ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, )" &&
-     test no != "$hardcode_minus_L"; then
-    # Linking always hardcodes the temporary library directory.
-    hardcode_action=relink
-  else
-    # We can link without hardcoding, and we can hardcode nonexisting dirs.
-    hardcode_action=immediate
-  fi
-else
-  # We cannot hardcode anything, or else we can only hardcode existing
-  # directories.
-  hardcode_action=unsupported
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $hardcode_action" >&5
-printf '%s\n' "$hardcode_action" >&6; }
-
-if test relink = "$hardcode_action" ||
-   test yes = "$inherit_rpath"; then
-  # Fast installation is not supported
-  enable_fast_install=no
-elif test yes = "$shlibpath_overrides_runpath" ||
-     test no = "$enable_shared"; then
-  # Fast installation is not necessary
-  enable_fast_install=needless
-fi
-
-    
-    
-    
-
-
-  if test yes != "$enable_dlopen"; then
-  enable_dlopen=unknown
-  enable_dlopen_self=unknown
-  enable_dlopen_self_static=unknown
-else
-  lt_cv_dlopen=no
-  lt_cv_dlopen_libs=
-
-  case $host_os in
-  beos*)
-    lt_cv_dlopen=load_add_on
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ;;
-
-  mingw* | windows* | pw32* | cegcc*)
-    lt_cv_dlopen=LoadLibrary
-    lt_cv_dlopen_libs=
-    ;;
-
-  cygwin*)
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    ;;
-
-  darwin*)
-    # if libdl is installed we need to link against it
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
-printf %s "checking for dlopen in -ldl... " >&6; }
-if test ${ac_cv_lib_dl_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dl_dlopen=yes
-else case e in @%:@(
-  e) ac_cv_lib_dl_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_dl_dlopen" >&6; }
-if test "x$ac_cv_lib_dl_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl
-else case e in @%:@(
-  e) 
-    lt_cv_dlopen=dyld
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-     ;;
-esac
-fi
-
-    ;;
-
-  tpf*)
-    # Don't try to run any link tests for TPF.  We know it's impossible
-    # because TPF is a cross-compiler, and we know how we open DSOs.
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=no
-    ;;
-
-  *)
-    ac_fn_c_check_func "$LINENO" "shl_load" "ac_cv_func_shl_load"
-if test "x$ac_cv_func_shl_load" = xyes
-then :
-  lt_cv_dlopen=shl_load
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for shl_load in -ldld" >&5
-printf %s "checking for shl_load in -ldld... " >&6; }
-if test ${ac_cv_lib_dld_shl_load+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char shl_load (void);
-int
-main (void)
-{
-return shl_load ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dld_shl_load=yes
-else case e in @%:@(
-  e) ac_cv_lib_dld_shl_load=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_shl_load" >&5
-printf '%s\n' "$ac_cv_lib_dld_shl_load" >&6; }
-if test "x$ac_cv_lib_dld_shl_load" = xyes
-then :
-  lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld
-else case e in @%:@(
-  e) ac_fn_c_check_func "$LINENO" "dlopen" "ac_cv_func_dlopen"
-if test "x$ac_cv_func_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
-printf %s "checking for dlopen in -ldl... " >&6; }
-if test ${ac_cv_lib_dl_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dl_dlopen=yes
-else case e in @%:@(
-  e) ac_cv_lib_dl_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_dl_dlopen" >&6; }
-if test "x$ac_cv_lib_dl_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -lsvld" >&5
-printf %s "checking for dlopen in -lsvld... " >&6; }
-if test ${ac_cv_lib_svld_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-lsvld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_svld_dlopen=yes
-else case e in @%:@(
-  e) ac_cv_lib_svld_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_svld_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_svld_dlopen" >&6; }
-if test "x$ac_cv_lib_svld_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dld_link in -ldld" >&5
-printf %s "checking for dld_link in -ldld... " >&6; }
-if test ${ac_cv_lib_dld_dld_link+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dld_link (void);
-int
-main (void)
-{
-return dld_link ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dld_dld_link=yes
-else case e in @%:@(
-  e) ac_cv_lib_dld_dld_link=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_dld_link" >&5
-printf '%s\n' "$ac_cv_lib_dld_dld_link" >&6; }
-if test "x$ac_cv_lib_dld_dld_link" = xyes
-then :
-  lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld
-fi
-
-	       ;;
-esac
-fi
-
-	     ;;
-esac
-fi
-
-	   ;;
-esac
-fi
-
-	 ;;
-esac
-fi
-
-       ;;
-esac
-fi
-
-    ;;
-  esac
-
-  if test no = "$lt_cv_dlopen"; then
-    enable_dlopen=no
-  else
-    enable_dlopen=yes
-  fi
-
-  case $lt_cv_dlopen in
-  dlopen)
-    save_CPPFLAGS=$CPPFLAGS
-    test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H"
-
-    save_LDFLAGS=$LDFLAGS
-    wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\"
-
-    save_LIBS=$LIBS
-    LIBS="$lt_cv_dlopen_libs $LIBS"
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether a program can dlopen itself" >&5
-printf %s "checking whether a program can dlopen itself... " >&6; }
-if test ${lt_cv_dlopen_self+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 	  if test yes = "$cross_compiling"; then :
-  lt_cv_dlopen_self=cross
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord (void) __attribute__((visibility("default")));
-#endif
-
-int fnord (void) { return 42; }
-int main (void)
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}
-_LT_EOF
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&5 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) lt_cv_dlopen_self=yes ;;
-      x$lt_dlneed_uscore) lt_cv_dlopen_self=yes ;;
-      x$lt_dlunknown|x*) lt_cv_dlopen_self=no ;;
-    esac
-  else :
-    # compilation failed
-    lt_cv_dlopen_self=no
-  fi
-fi
-rm -fr conftest*
-
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self" >&5
-printf '%s\n' "$lt_cv_dlopen_self" >&6; }
-
-    if test yes = "$lt_cv_dlopen_self"; then
-      wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether a statically linked program can dlopen itself" >&5
-printf %s "checking whether a statically linked program can dlopen itself... " >&6; }
-if test ${lt_cv_dlopen_self_static+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 	  if test yes = "$cross_compiling"; then :
-  lt_cv_dlopen_self_static=cross
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord (void) __attribute__((visibility("default")));
-#endif
-
-int fnord (void) { return 42; }
-int main (void)
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}
-_LT_EOF
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&5 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) lt_cv_dlopen_self_static=yes ;;
-      x$lt_dlneed_uscore) lt_cv_dlopen_self_static=yes ;;
-      x$lt_dlunknown|x*) lt_cv_dlopen_self_static=no ;;
-    esac
-  else :
-    # compilation failed
-    lt_cv_dlopen_self_static=no
-  fi
-fi
-rm -fr conftest*
-
-       ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self_static" >&5
-printf '%s\n' "$lt_cv_dlopen_self_static" >&6; }
-    fi
-
-    CPPFLAGS=$save_CPPFLAGS
-    LDFLAGS=$save_LDFLAGS
-    LIBS=$save_LIBS
-    ;;
-  esac
-
-  case $lt_cv_dlopen_self in
-  yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;;
-  *) enable_dlopen_self=unknown ;;
-  esac
-
-  case $lt_cv_dlopen_self_static in
-  yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;;
-  *) enable_dlopen_self_static=unknown ;;
-  esac
-fi
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-  
-striplib=
-old_striplib=
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether stripping libraries is possible" >&5
-printf %s "checking whether stripping libraries is possible... " >&6; }
-if test -z "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-else
-  if $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then
-    old_striplib="$STRIP --strip-debug"
-    striplib="$STRIP --strip-unneeded"
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-  else
-    case $host_os in
-    darwin*)
-      # FIXME - insert some real tests, host_os isn't really good enough
-      striplib="$STRIP -x"
-      old_striplib="$STRIP -S"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      ;;
-    freebsd*)
-      if $STRIP -V 2>&1 | $GREP "elftoolchain" >/dev/null; then
-        old_striplib="$STRIP --strip-debug"
-        striplib="$STRIP --strip-unneeded"
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-      fi
-      ;;
-    *)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-      ;;
-    esac
-  fi
-fi
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-  # Report what library types will actually be built
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if libtool supports shared libraries" >&5
-printf %s "checking if libtool supports shared libraries... " >&6; }
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $can_build_shared" >&5
-printf '%s\n' "$can_build_shared" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build shared libraries" >&5
-printf %s "checking whether to build shared libraries... " >&6; }
-  test no = "$can_build_shared" && enable_shared=no
-
-  # On AIX, shared libraries and static libraries use the same namespace, and
-  # are all built from PIC.
-  case $host_os in
-  aix3*)
-    test yes = "$enable_shared" && enable_static=no
-    if test -n "$RANLIB"; then
-      archive_cmds="$archive_cmds~\$RANLIB \$lib"
-      postinstall_cmds='$RANLIB $lib'
-    fi
-    ;;
-
-  aix[4-9]*)
-    if test ia64 != "$host_cpu"; then
-      case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
-      yes,aix,yes) ;;			# shared object as lib.so file only
-      yes,svr4,*) ;;			# shared object as lib.so archive member only
-      yes,*) enable_static=no ;;	# shared object in lib.a archive as well
-      esac
-    fi
-    ;;
-  esac
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $enable_shared" >&5
-printf '%s\n' "$enable_shared" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build static libraries" >&5
-printf %s "checking whether to build static libraries... " >&6; }
-  # Make sure either enable_shared or enable_static is yes.
-  test yes = "$enable_shared" || enable_static=yes
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $enable_static" >&5
-printf '%s\n' "$enable_static" >&6; }
-
-  
-
-
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-CC=$lt_save_CC
-
-
-
-
-
-
-
-
-       
-       
-
-
-
-
-
-        ac_config_commands="$ac_config_commands libtool"
-
-
-
-
-# Only expand once:
-
-
-
-# Require xorg-macros minimum of 1.12 for DocBook external references
-
-
-
-
-
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC options to detect undeclared functions" >&5
-printf %s "checking for $CC options to detect undeclared functions... " >&6; }
-if test ${ac_cv_c_undeclared_builtin_options+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_save_CFLAGS=$CFLAGS
-   ac_cv_c_undeclared_builtin_options='cannot detect'
-   for ac_arg in '' -fno-builtin; do
-     CFLAGS="$ac_save_CFLAGS $ac_arg"
-     # This test program should *not* compile successfully.
-     cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-(void) strchr;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  
-else case e in @%:@(
-  e) # This test program should compile successfully.
-        # No library function is consistently available on
-        # freestanding implementations, so test against a dummy
-        # declaration.  Include always-available headers on the
-        # off chance that they somehow elicit warnings.
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <float.h>
-#include <limits.h>
-#include <stdarg.h>
-#include <stddef.h>
-extern void ac_decl (int, char *);
-
-int
-main (void)
-{
-(void) ac_decl (0, (char *) 0);
-  (void) ac_decl;
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  if test x"$ac_arg" = x
-then :
-  ac_cv_c_undeclared_builtin_options='none needed'
-else case e in @%:@(
-  e) ac_cv_c_undeclared_builtin_options=$ac_arg ;;
-esac
-fi
-          break
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-    done
-    CFLAGS=$ac_save_CFLAGS
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_undeclared_builtin_options" >&5
-printf '%s\n' "$ac_cv_c_undeclared_builtin_options" >&6; }
-  case $ac_cv_c_undeclared_builtin_options in @%:@(
-  'cannot detect') :
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot make $CC report undeclared builtins
-See 'config.log' for more details" "$LINENO" 5; } ;; @%:@(
-  'none needed') :
-    ac_c_undeclared_builtin_options='' ;; @%:@(
-  *) :
-    ac_c_undeclared_builtin_options=$ac_cv_c_undeclared_builtin_options ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC options to ignore future-version functions" >&5
-printf %s "checking for $CC options to ignore future-version functions... " >&6; }
-if test ${ac_cv_c_future_darwin_options+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)       ac_compile_saved="$ac_compile"
-   ac_compile="$ac_compile -Werror=unguarded-availability-new"
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#if ! (defined __APPLE__ && defined __MACH__)
-	   #error "-Werror=unguarded-availability-new not needed here"
-	  #endif
-	
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_c_future_darwin_options='-Werror=unguarded-availability-new'
-else case e in @%:@(
-  e) ac_cv_c_future_darwin_options='none needed' ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ac_compile="$ac_compile_saved"
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_future_darwin_options" >&5
-printf '%s\n' "$ac_cv_c_future_darwin_options" >&6; }
- case $ac_cv_c_future_darwin_options in @%:@(
-  'none needed') :
-    ac_c_future_darwin_options='' ;; @%:@(
-  *) :
-    ac_c_future_darwin_options=$ac_cv_c_future_darwin_options ;;
-esac
-
-
-
-						
-	
-ac_fn_check_decl "$LINENO" "__clang__" "ac_cv_have_decl___clang__" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___clang__" = xyes
-then :
-  CLANGCC="yes"
-else case e in @%:@(
-  e) CLANGCC="no" ;;
-esac
-fi
-ac_fn_check_decl "$LINENO" "__INTEL_COMPILER" "ac_cv_have_decl___INTEL_COMPILER" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___INTEL_COMPILER" = xyes
-then :
-  INTELCC="yes"
-else case e in @%:@(
-  e) INTELCC="no" ;;
-esac
-fi
-ac_fn_check_decl "$LINENO" "__SUNPRO_C" "ac_cv_have_decl___SUNPRO_C" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___SUNPRO_C" = xyes
-then :
-  SUNCC="yes"
-else case e in @%:@(
-  e) SUNCC="no" ;;
-esac
-fi
-
-
-
-
-
-
-
-
-if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
-	if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args.
-set dummy ${ac_tool_prefix}pkg-config; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_PKG_CONFIG+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PKG_CONFIG="$PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-PKG_CONFIG=$ac_cv_path_PKG_CONFIG
-if test -n "$PKG_CONFIG"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $PKG_CONFIG" >&5
-printf '%s\n' "$PKG_CONFIG" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_path_PKG_CONFIG"; then
-  ac_pt_PKG_CONFIG=$PKG_CONFIG
-  # Extract the first word of "pkg-config", so it can be a program name with args.
-set dummy pkg-config; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_ac_pt_PKG_CONFIG+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $ac_pt_PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_ac_pt_PKG_CONFIG="$ac_pt_PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_ac_pt_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-ac_pt_PKG_CONFIG=$ac_cv_path_ac_pt_PKG_CONFIG
-if test -n "$ac_pt_PKG_CONFIG"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKG_CONFIG" >&5
-printf '%s\n' "$ac_pt_PKG_CONFIG" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_pt_PKG_CONFIG" = x; then
-    PKG_CONFIG=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    PKG_CONFIG=$ac_pt_PKG_CONFIG
-  fi
-else
-  PKG_CONFIG="$ac_cv_path_PKG_CONFIG"
-fi
-
-fi
-if test -n "$PKG_CONFIG"; then
-	_pkg_min_version=0.9.0
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking pkg-config is at least version $_pkg_min_version" >&5
-printf %s "checking pkg-config is at least version $_pkg_min_version... " >&6; }
-	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-	else
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-		PKG_CONFIG=""
-	fi
-fi
-
-
-
-
-
-@%:@ Check whether --enable-selective-werror was given.
-if test ${enable_selective_werror+y}
-then :
-  enableval=$enable_selective_werror; SELECTIVE_WERROR=$enableval
-else case e in @%:@(
-  e) SELECTIVE_WERROR=yes ;;
-esac
-fi
-
-
-
-                
-        
-# -v is too short to test reliably with XORG_TESTSET_CFLAG
-if test "x$SUNCC" = "xyes"; then
-    BASE_CFLAGS="-v"
-else
-    BASE_CFLAGS=""
-fi
-
-# This chunk of warnings were those that existed in the legacy CWARNFLAGS
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wall"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wall" >&5
-printf %s "checking if $CC supports -Wall... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wall
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wall"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wpointer-arith"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-arith" >&5
-printf %s "checking if $CC supports -Wpointer-arith... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wpointer_arith
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wpointer-arith"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-declarations"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-declarations" >&5
-printf %s "checking if $CC supports -Wmissing-declarations... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_declarations
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-declarations"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wformat=2"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat=2" >&5
-printf %s "checking if $CC supports -Wformat=2... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wformat_2
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wformat=2"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wformat"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat" >&5
-printf %s "checking if $CC supports -Wformat... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wformat
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wformat"
-			found="yes"
-		fi
-	fi
-
-
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wstrict-prototypes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wstrict-prototypes" >&5
-printf %s "checking if $CC supports -Wstrict-prototypes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wstrict_prototypes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wstrict-prototypes"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-prototypes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-prototypes" >&5
-printf %s "checking if $CC supports -Wmissing-prototypes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_prototypes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-prototypes"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wnested-externs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wnested-externs" >&5
-printf %s "checking if $CC supports -Wnested-externs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wnested_externs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wnested-externs"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wbad-function-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wbad-function-cast" >&5
-printf %s "checking if $CC supports -Wbad-function-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wbad_function_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wbad-function-cast"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wold-style-definition"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wold-style-definition" >&5
-printf %s "checking if $CC supports -Wold-style-definition... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wold_style_definition
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wold-style-definition"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -fd"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -fd" >&5
-printf %s "checking if $CC supports -fd... " >&6; }
-		cacheid=xorg_cv_cc_flag__fd
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -fd"
-			found="yes"
-		fi
-	fi
-
-
-	
-
-
-# This chunk adds additional warnings that could catch undesired effects.
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wunused"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wunused" >&5
-printf %s "checking if $CC supports -Wunused... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wunused
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wunused"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wuninitialized"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wuninitialized" >&5
-printf %s "checking if $CC supports -Wuninitialized... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wuninitialized
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wuninitialized"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wshadow"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wshadow" >&5
-printf %s "checking if $CC supports -Wshadow... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wshadow
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wshadow"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-noreturn"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-noreturn" >&5
-printf %s "checking if $CC supports -Wmissing-noreturn... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_noreturn
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-noreturn"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-format-attribute"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-format-attribute" >&5
-printf %s "checking if $CC supports -Wmissing-format-attribute... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_format_attribute
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-format-attribute"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wredundant-decls"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wredundant-decls" >&5
-printf %s "checking if $CC supports -Wredundant-decls... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wredundant_decls
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wredundant-decls"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wlogical-op"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wlogical-op" >&5
-printf %s "checking if $CC supports -Wlogical-op... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wlogical_op
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wlogical-op"
-			found="yes"
-		fi
-	fi
-
-
-
-# These are currently disabled because they are noisy.  They will be enabled
-# in the future once the codebase is sufficiently modernized to silence
-# them.  For now, I don't want them to drown out the other warnings.
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wparentheses])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-align])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-qual])
-
-# Turn some warnings into errors, so we don't accidentally get successful builds
-# when there are problems that should be fixed.
-
-if test "x$SELECTIVE_WERROR" = "xyes" ; then
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=implicit"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=implicit" >&5
-printf %s "checking if $CC supports -Werror=implicit... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_implicit
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=implicit"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED" >&5
-printf %s "checking if $CC supports -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_NO_EXPLICIT_TYPE_GIVEN__errwarn_E_NO_IMPLICIT_DECL_ALLOWED
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=nonnull"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=nonnull" >&5
-printf %s "checking if $CC supports -Werror=nonnull... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_nonnull
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=nonnull"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=init-self"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=init-self" >&5
-printf %s "checking if $CC supports -Werror=init-self... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_init_self
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=init-self"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=main"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=main" >&5
-printf %s "checking if $CC supports -Werror=main... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_main
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=main"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=missing-braces"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=missing-braces" >&5
-printf %s "checking if $CC supports -Werror=missing-braces... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_missing_braces
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=missing-braces"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=sequence-point"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=sequence-point" >&5
-printf %s "checking if $CC supports -Werror=sequence-point... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_sequence_point
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=sequence-point"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=return-type"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=return-type" >&5
-printf %s "checking if $CC supports -Werror=return-type... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_return_type
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=return-type"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_FUNC_HAS_NO_RETURN_STMT"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_FUNC_HAS_NO_RETURN_STMT" >&5
-printf %s "checking if $CC supports -errwarn=E_FUNC_HAS_NO_RETURN_STMT... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_FUNC_HAS_NO_RETURN_STMT
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_FUNC_HAS_NO_RETURN_STMT"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=trigraphs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=trigraphs" >&5
-printf %s "checking if $CC supports -Werror=trigraphs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_trigraphs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=trigraphs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=array-bounds"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=array-bounds" >&5
-printf %s "checking if $CC supports -Werror=array-bounds... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_array_bounds
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=array-bounds"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=write-strings"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=write-strings" >&5
-printf %s "checking if $CC supports -Werror=write-strings... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_write_strings
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=write-strings"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=address"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=address" >&5
-printf %s "checking if $CC supports -Werror=address... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_address
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=address"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=int-to-pointer-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=int-to-pointer-cast" >&5
-printf %s "checking if $CC supports -Werror=int-to-pointer-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_int_to_pointer_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=int-to-pointer-cast"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_BAD_PTR_INT_COMBINATION"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_BAD_PTR_INT_COMBINATION" >&5
-printf %s "checking if $CC supports -errwarn=E_BAD_PTR_INT_COMBINATION... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_BAD_PTR_INT_COMBINATION
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_BAD_PTR_INT_COMBINATION"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=pointer-to-int-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=pointer-to-int-cast" >&5
-printf %s "checking if $CC supports -Werror=pointer-to-int-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_pointer_to_int_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=pointer-to-int-cast"
-			found="yes"
-		fi
-	fi
-
- # Also -errwarn=E_BAD_PTR_INT_COMBINATION
-else
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT" >&5
-printf '%s\n' "$as_me: WARNING: You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT" >&2;}
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wimplicit"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wimplicit" >&5
-printf %s "checking if $CC supports -Wimplicit... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wimplicit
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wimplicit"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wnonnull"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wnonnull" >&5
-printf %s "checking if $CC supports -Wnonnull... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wnonnull
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wnonnull"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Winit-self"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Winit-self" >&5
-printf %s "checking if $CC supports -Winit-self... " >&6; }
-		cacheid=xorg_cv_cc_flag__Winit_self
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Winit-self"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmain"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmain" >&5
-printf %s "checking if $CC supports -Wmain... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmain
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmain"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-braces"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-braces" >&5
-printf %s "checking if $CC supports -Wmissing-braces... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_braces
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-braces"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wsequence-point"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wsequence-point" >&5
-printf %s "checking if $CC supports -Wsequence-point... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wsequence_point
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wsequence-point"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wreturn-type"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wreturn-type" >&5
-printf %s "checking if $CC supports -Wreturn-type... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wreturn_type
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wreturn-type"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wtrigraphs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wtrigraphs" >&5
-printf %s "checking if $CC supports -Wtrigraphs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wtrigraphs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wtrigraphs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Warray-bounds"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Warray-bounds" >&5
-printf %s "checking if $CC supports -Warray-bounds... " >&6; }
-		cacheid=xorg_cv_cc_flag__Warray_bounds
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Warray-bounds"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wwrite-strings"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wwrite-strings" >&5
-printf %s "checking if $CC supports -Wwrite-strings... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wwrite_strings
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wwrite-strings"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Waddress"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Waddress" >&5
-printf %s "checking if $CC supports -Waddress... " >&6; }
-		cacheid=xorg_cv_cc_flag__Waddress
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Waddress"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wint-to-pointer-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wint-to-pointer-cast" >&5
-printf %s "checking if $CC supports -Wint-to-pointer-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wint_to_pointer_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wint-to-pointer-cast"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wpointer-to-int-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-to-int-cast" >&5
-printf %s "checking if $CC supports -Wpointer-to-int-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wpointer_to_int_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wpointer-to-int-cast"
-			found="yes"
-		fi
-	fi
-
-
-fi
-
-
-
-
-
-
-
-		CWARNFLAGS="$BASE_CFLAGS"
-		if  test "x$GCC" = xyes ; then
-		    CWARNFLAGS="$CWARNFLAGS -fno-strict-aliasing"
-		fi
-		
-	
-
-
-
-
-
-
-@%:@ Check whether --enable-strict-compilation was given.
-if test ${enable_strict_compilation+y}
-then :
-  enableval=$enable_strict_compilation; STRICT_COMPILE=$enableval
-else case e in @%:@(
-  e) STRICT_COMPILE=no ;;
-esac
-fi
-
-
-
-                
-        
-
-STRICT_CFLAGS=""
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -pedantic"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -pedantic" >&5
-printf %s "checking if $CC supports -pedantic... " >&6; }
-		cacheid=xorg_cv_cc_flag__pedantic
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -pedantic"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror" >&5
-printf %s "checking if $CC supports -Werror... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -Werror"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn" >&5
-printf %s "checking if $CC supports -errwarn... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -errwarn"
-			found="yes"
-		fi
-	fi
-
-
-
-# Earlier versions of gcc (eg: 4.2) support -Werror=attributes, but do not
-# activate it with -Werror, so we add it here explicitly.
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=attributes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=attributes" >&5
-printf %s "checking if $CC supports -Werror=attributes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_attributes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -Werror=attributes"
-			found="yes"
-		fi
-	fi
-
-
-
-if test "x$STRICT_COMPILE" = "xyes"; then
-    BASE_CFLAGS="$BASE_CFLAGS $STRICT_CFLAGS"
-    CWARNFLAGS="$CWARNFLAGS $STRICT_CFLAGS"
-fi
-
-
-
-
-
-
-
-	
-cat >>confdefs.h <<_ACEOF
-@%:@define PACKAGE_VERSION_MAJOR `echo $PACKAGE_VERSION | cut -d . -f 1`
-_ACEOF
-
-	PVM=`echo $PACKAGE_VERSION | cut -d . -f 2 | cut -d - -f 1`
-	if test "x$PVM" = "x"; then
-		PVM="0"
-	fi
-	
-printf '%s\n' "@%:@define PACKAGE_VERSION_MINOR $PVM" >>confdefs.h
-
-	PVP=`echo $PACKAGE_VERSION | cut -d . -f 3 | cut -d - -f 1`
-	if test "x$PVP" = "x"; then
-		PVP="0"
-	fi
-	
-printf '%s\n' "@%:@define PACKAGE_VERSION_PATCHLEVEL $PVP" >>confdefs.h
-
-
-
-CHANGELOG_CMD="((GIT_DIR=\$(top_srcdir)/.git git log > \$(top_srcdir)/.changelog.tmp) 2>/dev/null && \
-mv \$(top_srcdir)/.changelog.tmp \$(top_srcdir)/ChangeLog) \
-|| (rm -f \$(top_srcdir)/.changelog.tmp; test -e \$(top_srcdir)/ChangeLog || ( \
-touch \$(top_srcdir)/ChangeLog; \
-echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))"
-
-
-
-
-macros_datadir=`$PKG_CONFIG --print-errors --variable=pkgdatadir xorg-macros`
-INSTALL_CMD="(cp -f "$macros_datadir/INSTALL" \$(top_srcdir)/.INSTALL.tmp && \
-mv \$(top_srcdir)/.INSTALL.tmp \$(top_srcdir)/INSTALL) \
-|| (rm -f \$(top_srcdir)/.INSTALL.tmp; test -e \$(top_srcdir)/INSTALL || ( \
-touch \$(top_srcdir)/INSTALL; \
-echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))"
-
-
-
-
-
-
-case $host_os in
-    solaris*)
-        # Solaris 2.0 - 11.3 use SysV man page section numbers, so we
-        # check for a man page file found in later versions that use
-        # traditional section numbers instead
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for /usr/share/man/man7/attributes.7" >&5
-printf %s "checking for /usr/share/man/man7/attributes.7... " >&6; }
-if test ${ac_cv_file__usr_share_man_man7_attributes_7+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) test "$cross_compiling" = yes &&
-  as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5
-if test -r "/usr/share/man/man7/attributes.7"; then
-  ac_cv_file__usr_share_man_man7_attributes_7=yes
-else
-  ac_cv_file__usr_share_man_man7_attributes_7=no
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_file__usr_share_man_man7_attributes_7" >&5
-printf '%s\n' "$ac_cv_file__usr_share_man_man7_attributes_7" >&6; }
-if test "x$ac_cv_file__usr_share_man_man7_attributes_7" = xyes
-then :
-  SYSV_MAN_SECTIONS=false
-else case e in @%:@(
-  e) SYSV_MAN_SECTIONS=true ;;
-esac
-fi
-
-        ;;
-    *) SYSV_MAN_SECTIONS=false ;;
-esac
-
-if test x$APP_MAN_SUFFIX = x    ; then
-    APP_MAN_SUFFIX=1
-fi
-if test x$APP_MAN_DIR = x    ; then
-    APP_MAN_DIR='$(mandir)/man$(APP_MAN_SUFFIX)'
-fi
-
-if test x$LIB_MAN_SUFFIX = x    ; then
-    LIB_MAN_SUFFIX=3
-fi
-if test x$LIB_MAN_DIR = x    ; then
-    LIB_MAN_DIR='$(mandir)/man$(LIB_MAN_SUFFIX)'
-fi
-
-if test x$FILE_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				FILE_MAN_SUFFIX=4  ;;
-	*)				FILE_MAN_SUFFIX=5  ;;
-    esac
-fi
-if test x$FILE_MAN_DIR = x    ; then
-    FILE_MAN_DIR='$(mandir)/man$(FILE_MAN_SUFFIX)'
-fi
-
-if test x$MISC_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				MISC_MAN_SUFFIX=5  ;;
-	*)				MISC_MAN_SUFFIX=7  ;;
-    esac
-fi
-if test x$MISC_MAN_DIR = x    ; then
-    MISC_MAN_DIR='$(mandir)/man$(MISC_MAN_SUFFIX)'
-fi
-
-if test x$DRIVER_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				DRIVER_MAN_SUFFIX=7  ;;
-	*)				DRIVER_MAN_SUFFIX=4  ;;
-    esac
-fi
-if test x$DRIVER_MAN_DIR = x    ; then
-    DRIVER_MAN_DIR='$(mandir)/man$(DRIVER_MAN_SUFFIX)'
-fi
-
-if test x$ADMIN_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				ADMIN_MAN_SUFFIX=1m ;;
-	*)				ADMIN_MAN_SUFFIX=8  ;;
-    esac
-fi
-if test x$ADMIN_MAN_DIR = x    ; then
-    ADMIN_MAN_DIR='$(mandir)/man$(ADMIN_MAN_SUFFIX)'
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-XORG_MAN_PAGE="X Version 11"
-
-MAN_SUBSTS="\
-	-e 's|__vendorversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xorgversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xservername__|Xorg|g' \
-	-e 's|__xconfigfile__|xorg.conf|g' \
-	-e 's|__projectroot__|\$(prefix)|g' \
-	-e 's|__apploaddir__|\$(appdefaultdir)|g' \
-	-e 's|__appmansuffix__|\$(APP_MAN_SUFFIX)|g' \
-	-e 's|__drivermansuffix__|\$(DRIVER_MAN_SUFFIX)|g' \
-	-e 's|__adminmansuffix__|\$(ADMIN_MAN_SUFFIX)|g' \
-	-e 's|__libmansuffix__|\$(LIB_MAN_SUFFIX)|g' \
-	-e 's|__miscmansuffix__|\$(MISC_MAN_SUFFIX)|g' \
-	-e 's|__filemansuffix__|\$(FILE_MAN_SUFFIX)|g'"
-
-
-
-
-AM_DEFAULT_VERBOSITY=0
-
-
-
-
-
-
-@%:@ Check whether --enable-specs was given.
-if test ${enable_specs+y}
-then :
-  enableval=$enable_specs; build_specs=$enableval
-else case e in @%:@(
-  e) build_specs=yes ;;
-esac
-fi
-
-
- if test x$build_specs = xyes; then
-  ENABLE_SPECS_TRUE=
-  ENABLE_SPECS_FALSE='#'
-else
-  ENABLE_SPECS_TRUE='#'
-  ENABLE_SPECS_FALSE=
-fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build functional specifications" >&5
-printf %s "checking whether to build functional specifications... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $build_specs" >&5
-printf '%s\n' "$build_specs" >&6; }
-
-
-
-
-
-@%:@ Check whether --with-xmlto was given.
-if test ${with_xmlto+y}
-then :
-  withval=$with_xmlto; use_xmlto=$withval
-else case e in @%:@(
-  e) use_xmlto=auto ;;
-esac
-fi
-
-
-
-if test "x$use_xmlto" = x"auto"; then
-   # Extract the first word of "xmlto", so it can be a program name with args.
-set dummy xmlto; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XMLTO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XMLTO in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XMLTO="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XMLTO=$ac_cv_path_XMLTO
-if test -n "$XMLTO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XMLTO" >&5
-printf '%s\n' "$XMLTO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XMLTO" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto not found - documentation targets will be skipped" >&5
-printf '%s\n' "$as_me: WARNING: xmlto not found - documentation targets will be skipped" >&2;}
-	have_xmlto=no
-   else
-        have_xmlto=yes
-   fi
-elif test "x$use_xmlto" = x"yes" ; then
-   # Extract the first word of "xmlto", so it can be a program name with args.
-set dummy xmlto; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XMLTO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XMLTO in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XMLTO="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XMLTO=$ac_cv_path_XMLTO
-if test -n "$XMLTO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XMLTO" >&5
-printf '%s\n' "$XMLTO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XMLTO" = "x"; then
-        as_fn_error $? "--with-xmlto=yes specified but xmlto not found in PATH" "$LINENO" 5
-   fi
-   have_xmlto=yes
-elif test "x$use_xmlto" = x"no" ; then
-   if test "x$XMLTO" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring XMLTO environment variable since --with-xmlto=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring XMLTO environment variable since --with-xmlto=no was specified" >&2;}
-   fi
-   have_xmlto=no
-else
-   as_fn_error $? "--with-xmlto expects 'yes' or 'no'" "$LINENO" 5
-fi
-
-# Test for a minimum version of xmlto, if provided.
-if test "$have_xmlto" = yes; then
-    # scrape the xmlto version
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the xmlto version" >&5
-printf %s "checking the xmlto version... " >&6; }
-    xmlto_version=`$XMLTO --version 2>/dev/null | cut -d' ' -f3`
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xmlto_version" >&5
-printf '%s\n' "$xmlto_version" >&6; }
-    as_arg_v1=$xmlto_version
-as_arg_v2=0.0.22
-awk "$as_awk_strverscmp" v1="$as_arg_v1" v2="$as_arg_v2" /dev/null
-case $? in @%:@(
-  1) :
-    if test "x$use_xmlto" = xauto; then
-            { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto version $xmlto_version found, but 0.0.22 needed" >&5
-printf '%s\n' "$as_me: WARNING: xmlto version $xmlto_version found, but 0.0.22 needed" >&2;}
-            have_xmlto=no
-        else
-            as_fn_error $? "xmlto version $xmlto_version found, but 0.0.22 needed" "$LINENO" 5
-        fi ;; @%:@(
-  0) :
-     ;; @%:@(
-  2) :
-     ;; @%:@(
-  *) :
-     ;;
-esac
-fi
-
-# Test for the ability of xmlto to generate a text target
-#
-# NOTE: xmlto 0.0.27 or higher return a non-zero return code in the
-# following test for empty XML docbook files.
-# For compatibility reasons use the following empty XML docbook file and if
-# it fails try it again with a non-empty XML file.
-have_xmlto_text=no
-cat > conftest.xml << "EOF"
-EOF
-if test "$have_xmlto" = yes
-then :
-  if $XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1
-then :
-  have_xmlto_text=yes
-else case e in @%:@(
-  e) # Try it again with a non-empty XML file.
-              cat > conftest.xml << "EOF"
-<x></x>
-EOF
-              if $XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1
-then :
-  have_xmlto_text=yes
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto cannot generate text format, this format skipped" >&5
-printf '%s\n' "$as_me: WARNING: xmlto cannot generate text format, this format skipped" >&2;} ;;
-esac
-fi ;;
-esac
-fi
-fi
-rm -f conftest.xml
- if test $have_xmlto_text = yes; then
-  HAVE_XMLTO_TEXT_TRUE=
-  HAVE_XMLTO_TEXT_FALSE='#'
-else
-  HAVE_XMLTO_TEXT_TRUE='#'
-  HAVE_XMLTO_TEXT_FALSE=
-fi
-
- if test "$have_xmlto" = yes; then
-  HAVE_XMLTO_TRUE=
-  HAVE_XMLTO_FALSE='#'
-else
-  HAVE_XMLTO_TRUE='#'
-  HAVE_XMLTO_FALSE=
-fi
-
-
-
-
-
-
-@%:@ Check whether --with-fop was given.
-if test ${with_fop+y}
-then :
-  withval=$with_fop; use_fop=$withval
-else case e in @%:@(
-  e) use_fop=auto ;;
-esac
-fi
-
-
-
-if test "x$use_fop" = x"auto"; then
-   # Extract the first word of "fop", so it can be a program name with args.
-set dummy fop; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_FOP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $FOP in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_FOP="$FOP" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_FOP="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-FOP=$ac_cv_path_FOP
-if test -n "$FOP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FOP" >&5
-printf '%s\n' "$FOP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$FOP" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: fop not found - documentation targets will be skipped" >&5
-printf '%s\n' "$as_me: WARNING: fop not found - documentation targets will be skipped" >&2;}
-	have_fop=no
-   else
-        have_fop=yes
-   fi
-elif test "x$use_fop" = x"yes" ; then
-   # Extract the first word of "fop", so it can be a program name with args.
-set dummy fop; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_FOP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $FOP in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_FOP="$FOP" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_FOP="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-FOP=$ac_cv_path_FOP
-if test -n "$FOP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FOP" >&5
-printf '%s\n' "$FOP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$FOP" = "x"; then
-        as_fn_error $? "--with-fop=yes specified but fop not found in PATH" "$LINENO" 5
-   fi
-   have_fop=yes
-elif test "x$use_fop" = x"no" ; then
-   if test "x$FOP" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring FOP environment variable since --with-fop=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring FOP environment variable since --with-fop=no was specified" >&2;}
-   fi
-   have_fop=no
-else
-   as_fn_error $? "--with-fop expects 'yes' or 'no'" "$LINENO" 5
-fi
-
-# Test for a minimum version of fop, if provided.
-
- if test "$have_fop" = yes; then
-  HAVE_FOP_TRUE=
-  HAVE_FOP_FALSE='#'
-else
-  HAVE_FOP_TRUE='#'
-  HAVE_FOP_FALSE=
-fi
-
-
-
-
-# Preserves the interface, should it be implemented later
-
-
-
-@%:@ Check whether --with-xsltproc was given.
-if test ${with_xsltproc+y}
-then :
-  withval=$with_xsltproc; use_xsltproc=$withval
-else case e in @%:@(
-  e) use_xsltproc=auto ;;
-esac
-fi
-
-
-
-if test "x$use_xsltproc" = x"auto"; then
-   # Extract the first word of "xsltproc", so it can be a program name with args.
-set dummy xsltproc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XSLTPROC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XSLTPROC in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XSLTPROC="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XSLTPROC=$ac_cv_path_XSLTPROC
-if test -n "$XSLTPROC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XSLTPROC" >&5
-printf '%s\n' "$XSLTPROC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XSLTPROC" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xsltproc not found - cannot transform XML documents" >&5
-printf '%s\n' "$as_me: WARNING: xsltproc not found - cannot transform XML documents" >&2;}
-	have_xsltproc=no
-   else
-        have_xsltproc=yes
-   fi
-elif test "x$use_xsltproc" = x"yes" ; then
-   # Extract the first word of "xsltproc", so it can be a program name with args.
-set dummy xsltproc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XSLTPROC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XSLTPROC in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XSLTPROC="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XSLTPROC=$ac_cv_path_XSLTPROC
-if test -n "$XSLTPROC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XSLTPROC" >&5
-printf '%s\n' "$XSLTPROC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XSLTPROC" = "x"; then
-        as_fn_error $? "--with-xsltproc=yes specified but xsltproc not found in PATH" "$LINENO" 5
-   fi
-   have_xsltproc=yes
-elif test "x$use_xsltproc" = x"no" ; then
-   if test "x$XSLTPROC" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring XSLTPROC environment variable since --with-xsltproc=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring XSLTPROC environment variable since --with-xsltproc=no was specified" >&2;}
-   fi
-   have_xsltproc=no
-else
-   as_fn_error $? "--with-xsltproc expects 'yes' or 'no'" "$LINENO" 5
-fi
-
- if test "$have_xsltproc" = yes; then
-  HAVE_XSLTPROC_TRUE=
-  HAVE_XSLTPROC_FALSE='#'
-else
-  HAVE_XSLTPROC_TRUE='#'
-  HAVE_XSLTPROC_FALSE=
-fi
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for X.Org SGML entities >= 1.8" >&5
-printf %s "checking for X.Org SGML entities >= 1.8... " >&6; }
-XORG_SGML_PATH=
-if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xorg-sgml-doctools >= 1.8\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xorg-sgml-doctools >= 1.8") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  XORG_SGML_PATH=`$PKG_CONFIG --variable=sgmlrootdir xorg-sgml-doctools`
-else
-  :
-    
-fi
-
-# Define variables STYLESHEET_SRCDIR and XSL_STYLESHEET containing
-# the path and the name of the doc stylesheet
-if test "x$XORG_SGML_PATH" != "x" ; then
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XORG_SGML_PATH" >&5
-printf '%s\n' "$XORG_SGML_PATH" >&6; }
-   STYLESHEET_SRCDIR=$XORG_SGML_PATH/X11
-   XSL_STYLESHEET=$STYLESHEET_SRCDIR/xorg.xsl
-else
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-
-
- if test "x$XSL_STYLESHEET" != "x"; then
-  HAVE_STYLESHEETS_TRUE=
-  HAVE_STYLESHEETS_FALSE='#'
-else
-  HAVE_STYLESHEETS_TRUE='#'
-  HAVE_STYLESHEETS_FALSE=
-fi
-
-
-
-@%:@ Check whether --enable-malloc0returnsnull was given.
-if test ${enable_malloc0returnsnull+y}
-then :
-  enableval=$enable_malloc0returnsnull; MALLOC_ZERO_RETURNS_NULL=$enableval
-else case e in @%:@(
-  e) MALLOC_ZERO_RETURNS_NULL=yes ;;
-esac
-fi
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to act as if malloc(0) can return NULL" >&5
-printf %s "checking whether to act as if malloc(0) can return NULL... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MALLOC_ZERO_RETURNS_NULL" >&5
-printf '%s\n' "$MALLOC_ZERO_RETURNS_NULL" >&6; }
-
-if test "x$MALLOC_ZERO_RETURNS_NULL" = xyes; then
-	MALLOC_ZERO_CFLAGS="-DMALLOC_0_RETURNS_NULL"
-	XMALLOC_ZERO_CFLAGS=$MALLOC_ZERO_CFLAGS
-	XTMALLOC_ZERO_CFLAGS="$MALLOC_ZERO_CFLAGS -DXTMALLOC_BC"
-else
-	MALLOC_ZERO_CFLAGS=""
-	XMALLOC_ZERO_CFLAGS=""
-	XTMALLOC_ZERO_CFLAGS=""
-fi
-
-
-
-
-
-
-# Determine .so library version per platform
-# based on SharedXextRev in monolith xc/config/cf/*Lib.tmpl
-if test "x$XEXT_SOREV" = "x" ; then
-    case $host_os in
-	openbsd*)	XEXT_SOREV=8:0 		;;
-	solaris*)       XEXT_SOREV=0 		;;
-	*)              XEXT_SOREV=6:4:0 	;;
-    esac
-fi
-
-
-# Obtain compiler/linker options for dependencies
-
-pkg_failed=no
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" >&5
-printf %s "checking for xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99... " >&6; }
-
-if test -n "$XEXT_CFLAGS"; then
-    pkg_cv_XEXT_CFLAGS="$XEXT_CFLAGS"
- elif test -n "$PKG_CONFIG"; then
-    if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  pkg_cv_XEXT_CFLAGS=`$PKG_CONFIG --cflags "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes 
-else
-  pkg_failed=yes
-fi
- else
-    pkg_failed=untried
-fi
-if test -n "$XEXT_LIBS"; then
-    pkg_cv_XEXT_LIBS="$XEXT_LIBS"
- elif test -n "$PKG_CONFIG"; then
-    if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  pkg_cv_XEXT_LIBS=`$PKG_CONFIG --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes 
-else
-  pkg_failed=yes
-fi
- else
-    pkg_failed=untried
-fi
-
-
-
-if test $pkg_failed = yes; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        
-if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
-        _pkg_short_errors_supported=yes
-else
-        _pkg_short_errors_supported=no
-fi
-        if test $_pkg_short_errors_supported = yes; then
-                XEXT_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>&1`
-        else
-                XEXT_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>&1`
-        fi
-        # Put the nasty error message in config.log where it belongs
-        echo "$XEXT_PKG_ERRORS" >&5
-
-        as_fn_error $? "Package requirements (xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99) were not met:
-
-$XEXT_PKG_ERRORS
-
-Consider adjusting the PKG_CONFIG_PATH environment variable if you
-installed software in a non-standard prefix.
-
-Alternatively, you may set the environment variables XEXT_CFLAGS
-and XEXT_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details." "$LINENO" 5        
-elif test $pkg_failed = untried; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "The pkg-config script could not be found or is too old.  Make sure it
-is in your PATH or set the PKG_CONFIG environment variable to the full
-path to pkg-config.
-
-Alternatively, you may set the environment variables XEXT_CFLAGS
-and XEXT_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details.
-
-To get pkg-config, see <http://pkg-config.freedesktop.org/>.
-See 'config.log' for more details" "$LINENO" 5; }        
-else
-        XEXT_CFLAGS=$pkg_cv_XEXT_CFLAGS
-        XEXT_LIBS=$pkg_cv_XEXT_LIBS
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-        
-fi
-
-
-    
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for __builtin_popcountl" >&5
-printf %s "checking for __builtin_popcountl... " >&6; }
-if test ${ax_cv_have___builtin_popcountl+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-            __builtin_popcountl(0)
-            
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ax_cv_have___builtin_popcountl=yes
-else case e in @%:@(
-  e) ax_cv_have___builtin_popcountl=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ax_cv_have___builtin_popcountl" >&5
-printf '%s\n' "$ax_cv_have___builtin_popcountl" >&6; }
-
-    if test yes = $ax_cv_have___builtin_popcountl
-then :
-  
-printf '%s\n' "@%:@define HAVE___BUILTIN_POPCOUNTL 1" >>confdefs.h
-
-fi
-
-    
-
-ac_fn_c_check_func "$LINENO" "reallocarray" "ac_cv_func_reallocarray"
-if test "x$ac_cv_func_reallocarray" = xyes
-then :
-  printf '%s\n' "@%:@define HAVE_REALLOCARRAY 1" >>confdefs.h
-
-else case e in @%:@(
-  e) case " $LIB@&t@OBJS " in
-  *" reallocarray.$ac_objext "* ) ;;
-  *) LIB@&t@OBJS="$LIB@&t@OBJS reallocarray.$ac_objext"
- ;;
-esac
- ;;
-esac
-fi
-
-
-# Allow checking code with lint, sparse, etc.
-
-
-
-
-
-@%:@ Check whether --with-lint was given.
-if test ${with_lint+y}
-then :
-  withval=$with_lint; use_lint=$withval
-else case e in @%:@(
-  e) use_lint=no ;;
-esac
-fi
-
-
-# Obtain platform specific info like program name and options
-# The lint program on FreeBSD and NetBSD is different from the one on Solaris
-case $host_os in
-  *linux* | *openbsd* | kfreebsd*-gnu | darwin* | cygwin*)
-	lint_name=splint
-	lint_options="-badflag"
-	;;
-  *freebsd* | *netbsd*)
-	lint_name=lint
-	lint_options="-u -b"
-	;;
-  *solaris*)
-	lint_name=lint
-	lint_options="-u -b -h -erroff=E_INDISTING_FROM_TRUNC2"
-	;;
-esac
-
-# Test for the presence of the program (either guessed by the code or spelled out by the user)
-if test "x$use_lint" = x"yes" ; then
-   # Extract the first word of "$lint_name", so it can be a program name with args.
-set dummy $lint_name; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_LINT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $LINT in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_LINT="$LINT" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_LINT="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-LINT=$ac_cv_path_LINT
-if test -n "$LINT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LINT" >&5
-printf '%s\n' "$LINT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$LINT" = "x"; then
-        as_fn_error $? "--with-lint=yes specified but lint-style tool not found in PATH" "$LINENO" 5
-   fi
-elif test "x$use_lint" = x"no" ; then
-   if test "x$LINT" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring LINT environment variable since --with-lint=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring LINT environment variable since --with-lint=no was specified" >&2;}
-   fi
-else
-   as_fn_error $? "--with-lint expects 'yes' or 'no'. Use LINT variable to specify path." "$LINENO" 5
-fi
-
-# User supplied flags override default flags
-if test "x$LINT_FLAGS" != "x"; then
-   lint_options=$LINT_FLAGS
-fi
-
-LINT_FLAGS=$lint_options
-
- if test "x$LINT" != x; then
-  LINT_TRUE=
-  LINT_FALSE='#'
-else
-  LINT_TRUE='#'
-  LINT_FALSE=
-fi
-
-
-
-
-
-@%:@ Check whether --enable-lint-library was given.
-if test ${enable_lint_library+y}
-then :
-  enableval=$enable_lint_library; make_lint_lib=$enableval
-else case e in @%:@(
-  e) make_lint_lib=no ;;
-esac
-fi
-
-
-if test "x$make_lint_lib" = x"yes" ; then
-   LINTLIB=llib-lXext.ln
-   if test "x$LINT" = "x"; then
-        as_fn_error $? "Cannot make lint library without --with-lint" "$LINENO" 5
-   fi
-elif test "x$make_lint_lib" != x"no" ; then
-   as_fn_error $? "--enable-lint-library expects 'yes' or 'no'." "$LINENO" 5
-fi
-
-
- if test x$make_lint_lib != xno; then
-  MAKE_LINT_LIB_TRUE=
-  MAKE_LINT_LIB_FALSE='#'
-else
-  MAKE_LINT_LIB_TRUE='#'
-  MAKE_LINT_LIB_FALSE=
-fi
-
-
-
-
-ac_config_files="$ac_config_files Makefile man/Makefile src/Makefile specs/Makefile xext.pc"
-
-cat >confcache <<\_ACEOF
-# This file is a shell script that caches the results of configure
-# tests run on this system so they can be shared between configure
-# scripts and configure runs, see configure's option --config-cache.
-# It is not useful on other systems.  If it contains results you don't
-# want to keep, you may remove or edit it.
-#
-# config.status only pays attention to the cache file if you give it
-# the --recheck option to rerun configure.
-#
-# 'ac_cv_env_foo' variables (set or unset) will be overridden when
-# loading this file, other *unset* 'ac_cv_foo' will be assigned the
-# following values.
-
-_ACEOF
-
-ac_cache_dump |
-  sed '
-     /^ac_cv_env_/b end
-     t clear
-     :clear
-     s/^\([^=]*\)=\(.*[{}].*\)$/test ${\1+y} || &/
-     t end
-     s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/
-     :end' >>confcache
-if diff "$cache_file" confcache >/dev/null 2>&1; then :; else
-  if test -w "$cache_file"; then
-    if test "x$cache_file" != "x/dev/null"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5
-printf '%s\n' "$as_me: updating cache $cache_file" >&6;}
-      if test ! -f "$cache_file" || test -h "$cache_file"; then
-	cat confcache >"$cache_file"
-      else
-        case $cache_file in #(
-        */* | ?:*)
-	  mv -f confcache "$cache_file"$$ &&
-	  mv -f "$cache_file"$$ "$cache_file" ;; #(
-        *)
-	  mv -f confcache "$cache_file" ;;
-	esac
-      fi
-    fi
-  else
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5
-printf '%s\n' "$as_me: not updating unwritable cache $cache_file" >&6;}
-  fi
-fi
-rm -f confcache
-
-test "x$prefix" = xNONE && prefix=$ac_default_prefix
-# Let make expand exec_prefix.
-test "x$exec_prefix" = xNONE && exec_prefix='${prefix}'
-
-DEFS=-DHAVE_CONFIG_H
-
-ac_libobjs=
-ac_ltlibobjs=
-U=
-for ac_i in : $LIB@&t@OBJS; do test "x$ac_i" = x: && continue
-  # 1. Remove the extension, and $U if already installed.
-  ac_script='s/\$U\././;s/\.o$//;s/\.obj$//'
-  ac_i=`printf '%s\n' "$ac_i" | sed "$ac_script"`
-  # 2. Prepend LIBOBJDIR.  When used with automake>=1.10 LIBOBJDIR
-  #    will be set to the directory where LIBOBJS objects are built.
-  as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext"
-  as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo'
-done
-LIB@&t@OBJS=$ac_libobjs
-
-LTLIBOBJS=$ac_ltlibobjs
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking that generated files are newer than configure" >&5
-printf %s "checking that generated files are newer than configure... " >&6; }
-   if test -n "$am_sleep_pid"; then
-     # Hide warnings about reused PIDs.
-     wait $am_sleep_pid 2>/dev/null
-   fi
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: done" >&5
-printf '%s\n' "done" >&6; }
-if test -z "${AMDEP_TRUE}" && test -z "${AMDEP_FALSE}"; then
-  as_fn_error $? "conditional \"AMDEP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${am__fastdepCC_TRUE}" && test -z "${am__fastdepCC_FALSE}"; then
-  as_fn_error $? "conditional \"am__fastdepCC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-case $enable_silent_rules in @%:@ (((
-  yes) AM_DEFAULT_VERBOSITY=0;;
-   no) AM_DEFAULT_VERBOSITY=1;;
-esac
-if test $am_cv_make_support_nested_variables = yes; then
-    AM_V='$(V)'
-  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-else
-  AM_V=$AM_DEFAULT_VERBOSITY
-  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
-fi
-
- if test -n "$EXEEXT"; then
-  am__EXEEXT_TRUE=
-  am__EXEEXT_FALSE='#'
-else
-  am__EXEEXT_TRUE='#'
-  am__EXEEXT_FALSE=
-fi
-
-if test -z "${ENABLE_SPECS_TRUE}" && test -z "${ENABLE_SPECS_FALSE}"; then
-  as_fn_error $? "conditional \"ENABLE_SPECS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XMLTO_TEXT_TRUE}" && test -z "${HAVE_XMLTO_TEXT_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XMLTO_TEXT\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XMLTO_TRUE}" && test -z "${HAVE_XMLTO_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XMLTO\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_FOP_TRUE}" && test -z "${HAVE_FOP_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_FOP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XSLTPROC_TRUE}" && test -z "${HAVE_XSLTPROC_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XSLTPROC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_STYLESHEETS_TRUE}" && test -z "${HAVE_STYLESHEETS_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_STYLESHEETS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${LINT_TRUE}" && test -z "${LINT_FALSE}"; then
-  as_fn_error $? "conditional \"LINT\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${MAKE_LINT_LIB_TRUE}" && test -z "${MAKE_LINT_LIB_FALSE}"; then
-  as_fn_error $? "conditional \"MAKE_LINT_LIB\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-
-: "${CONFIG_STATUS=./config.status}"
-case $CONFIG_STATUS in @%:@(
-  -*) :
-    CONFIG_STATUS=./$CONFIG_STATUS ;; @%:@(
-  */*) :
-     ;; @%:@(
-  *) :
-    CONFIG_STATUS=./$CONFIG_STATUS ;;
-esac
-
-ac_write_fail=0
-ac_clean_CONFIG_STATUS='"$CONFIG_STATUS"'
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5
-printf '%s\n' "$as_me: creating $CONFIG_STATUS" >&6;}
-as_write_fail=0
-cat >"$CONFIG_STATUS" <<_ASEOF || as_write_fail=1
-#! $SHELL
-# Generated by $as_me.
-# Run this file to recreate the current configuration.
-# Compiler output produced by configure, useful for debugging
-# configure, is in config.log if it exists.
-
-debug=false
-ac_cs_recheck=false
-ac_cs_silent=false
-
-SHELL=\${CONFIG_SHELL-$SHELL}
-export SHELL
-_ASEOF
-cat >>"$CONFIG_STATUS" <<\_ASEOF || as_write_fail=1
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else case e in @%:@(
-  e) case `(set -o) 2>/dev/null` in @%:@(
-  *posix*) :
-    set -o posix ;; @%:@(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-
-
-
-# Reset variables that may have inherited troublesome values from
-# the environment.
-
-# IFS needs to be set, to space, tab, and newline, in precisely that order.
-# (If _AS_PATH_WALK were called with IFS unset, it would have the
-# side effect of setting IFS to empty, thus disabling word splitting.)
-# Quoting is to prevent editors from complaining about space-tab.
-as_nl='
-'
-export as_nl
-IFS=" ""	$as_nl"
-
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# Ensure predictable behavior from utilities with locale-dependent output.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# We cannot yet rely on "unset" to work, but we need these variables
-# to be unset--not just set to an empty or harmless value--now, to
-# avoid bugs in old shells (e.g. pre-3.0 UWIN ksh).  This construct
-# also avoids known problems related to "unset" and subshell syntax
-# in other old shells (e.g. bash 2.01 and pdksh 5.2.14).
-for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH
-do eval test \${$as_var+y} \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-
-# Ensure that fds 0, 1, and 2 are open.
-if (exec 3>&0) 2>/dev/null; then :; else exec 0</dev/null; fi
-if (exec 3>&1) 2>/dev/null; then :; else exec 1>/dev/null; fi
-if (exec 3>&2)            ; then :; else exec 2>/dev/null; fi
-
-# The user is always right.
-if ${PATH_SEPARATOR+false} :; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in @%:@((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    test -r "$as_dir$0" && as_myself=$as_dir$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as 'sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  printf '%s\n' "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-
-
-@%:@ as_fn_error STATUS ERROR [LINENO LOG_FD]
-@%:@ ----------------------------------------
-@%:@ Output "`basename @S|@0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-@%:@ provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-@%:@ script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  printf '%s\n' "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} @%:@ as_fn_error
-
-
-@%:@ as_fn_set_status STATUS
-@%:@ -----------------------
-@%:@ Set @S|@? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} @%:@ as_fn_set_status
-
-@%:@ as_fn_exit STATUS
-@%:@ -----------------
-@%:@ Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} @%:@ as_fn_exit
-
-@%:@ as_fn_unset VAR
-@%:@ ---------------
-@%:@ Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-@%:@ as_fn_append VAR VALUE
-@%:@ ----------------------
-@%:@ Append the text in VALUE to the end of the definition contained in VAR. Take
-@%:@ advantage of any shell optimizations that allow amortized linear growth over
-@%:@ repeated appends, instead of the typical quadratic growth present in naive
-@%:@ implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null
-then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else case e in @%:@(
-  e) as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  } ;;
-esac
-fi # as_fn_append
-
-@%:@ as_fn_arith ARG...
-@%:@ ------------------
-@%:@ Perform arithmetic evaluation on the ARGs, and store the result in the
-@%:@ global @S|@as_val. Take advantage of shells that can avoid forks. The arguments
-@%:@ must be portable across @S|@(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null
-then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else case e in @%:@(
-  e) as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  } ;;
-esac
-fi # as_fn_arith
-
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both 'ln -s file dir' and 'ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; 'ln -s' creates a wrapper executable.
-    # In both cases, we have to default to 'cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-
-@%:@ as_fn_mkdir_p
-@%:@ -------------
-@%:@ Create "@S|@as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`printf '%s\n' "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} @%:@ as_fn_mkdir_p
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-
-@%:@ as_fn_executable_p FILE
-@%:@ -----------------------
-@%:@ Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} @%:@ as_fn_executable_p
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_sed_cpp="y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g"
-as_tr_cpp="eval sed '$as_sed_cpp'" # deprecated
-
-# Sed expression to map a string onto a valid variable name.
-as_sed_sh="y%*+%pp%;s%[^_$as_cr_alnum]%_%g"
-as_tr_sh="eval sed '$as_sed_sh'" # deprecated
-
-
-exec 6>&1
-## ------------------------------------- ##
-## Main body of "$CONFIG_STATUS" script. ##
-## ------------------------------------- ##
-_ASEOF
-test $as_write_fail = 0 && chmod +x "$CONFIG_STATUS" || ac_write_fail=1
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# Save the log message, to keep $0 and so on meaningful, and to
-# report actual input values of CONFIG_FILES etc. instead of their
-# values after options handling.
-ac_log="
-This file was extended by libXext $as_me 1.3.7, which was
-generated by GNU Autoconf 2.73.  Invocation command line was
-
-  CONFIG_FILES    = $CONFIG_FILES
-  CONFIG_HEADERS  = $CONFIG_HEADERS
-  CONFIG_LINKS    = $CONFIG_LINKS
-  CONFIG_COMMANDS = $CONFIG_COMMANDS
-  $ $0 $@
-
-on `(hostname || uname -n) 2>/dev/null | sed 1q`
-"
-
-_ACEOF
-
-case $ac_config_files in *"
-"*) set x $ac_config_files; shift; ac_config_files=$*;;
-esac
-
-case $ac_config_headers in *"
-"*) set x $ac_config_headers; shift; ac_config_headers=$*;;
-esac
-
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-# Files that config.status was made for.
-config_files="$ac_config_files"
-config_headers="$ac_config_headers"
-config_commands="$ac_config_commands"
-
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-ac_cs_usage="\
-'$as_me' instantiates files and other configuration actions
-from templates according to the current configuration.  Unless the files
-and actions are specified as TAGs, all are instantiated by default.
-
-Usage: $0 [OPTION]... [TAG]...
-
-  -h, --help       print this help, then exit
-  -V, --version    print version number and configuration settings, then exit
-      --config     print configuration, then exit
-  -q, --quiet, --silent
-                   do not print progress messages
-  -d, --debug      don't remove temporary files
-      --recheck    update $as_me by reconfiguring in the same conditions
-      --file=FILE[:TEMPLATE] 
-                   instantiate the configuration file FILE
-      --header=FILE[:TEMPLATE] 
-                   instantiate the configuration header FILE
-
-Configuration files:
-$config_files
-
-Configuration headers:
-$config_headers
-
-Configuration commands:
-$config_commands
-
-Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>."
-
-_ACEOF
-ac_cs_config=`printf '%s\n' "$ac_configure_args" | sed "$ac_safe_unquote"`
-ac_cs_config_escaped=`printf '%s\n' "$ac_cs_config" | sed "s/^ //; s/'/'\\\\\\\\''/g"`
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-ac_cs_config='$ac_cs_config_escaped'
-ac_cs_version="\\
-libXext config.status 1.3.7
-configured by $0, generated by GNU Autoconf 2.73,
-  with options \\"\$ac_cs_config\\"
-
-Copyright (C) 2026 Free Software Foundation, Inc.
-This config.status script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it."
-
-ac_pwd='$ac_pwd'
-srcdir='$srcdir'
-INSTALL='$INSTALL'
-MKDIR_P='$MKDIR_P'
-AWK='$AWK'
-test -n "\$AWK" || {
-  awk '' </dev/null ||
-    as_fn_error \$? "try installing gawk"
-  AWK=awk
-}
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# The default lists apply if the user does not specify any file.
-ac_need_defaults=:
-while test $# != 0
-do
-  case $1 in
-  --*=?*)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'`
-    ac_shift=:
-    ;;
-  --*=)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=
-    ac_shift=:
-    ;;
-  *)
-    ac_option=$1
-    ac_optarg=$2
-    ac_shift=shift
-    ;;
-  esac
-
-  case $ac_option in
-  # Handling of the options.
-  -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r)
-    ac_cs_recheck=: ;;
-  --version | --versio | --versi | --vers | --ver | --ve | --v | -V )
-    printf '%s\n' "$ac_cs_version"; exit ;;
-  --config | --confi | --conf | --con | --co | --c )
-    printf '%s\n' "$ac_cs_config"; exit ;;
-  --debug | --debu | --deb | --de | --d | -d )
-    debug=: ;;
-  --file | --fil | --fi | --f )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf '%s\n' "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    '') as_fn_error $? "missing file argument" ;;
-    esac
-    as_fn_append CONFIG_FILES " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --header | --heade | --head | --hea )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf '%s\n' "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    as_fn_append CONFIG_HEADERS " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --he | --h)
-    # Conflict between --help and --header
-    as_fn_error $? "ambiguous option: '$1'
-Try '$0 --help' for more information.";;
-  --help | --hel | -h )
-    printf '%s\n' "$ac_cs_usage"; exit ;;
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil | --si | --s)
-    ac_cs_silent=: ;;
-
-  # This is an error.
-  -*) as_fn_error $? "unrecognized option: '$1'
-Try '$0 --help' for more information." ;;
-
-  *) as_fn_append ac_config_targets " $1"
-     ac_need_defaults=false ;;
-
-  esac
-  shift
-done
-
-ac_configure_extra_args=
-
-if $ac_cs_silent; then
-  exec 6>/dev/null
-  ac_configure_extra_args="$ac_configure_extra_args --silent"
-fi
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-if \$ac_cs_recheck; then
-  set X $SHELL '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion
-  shift
-  \printf '%s\n' "running CONFIG_SHELL=$SHELL \$*" >&6
-  CONFIG_SHELL='$SHELL'
-  export CONFIG_SHELL
-  exec "\$@"
-fi
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-exec 5>>config.log
-{
-  echo
-  sed 'h;s/./-/g;s/^.../@%:@@%:@ /;s/...$/ @%:@@%:@/;p;x;p;x' <<_ASBOX
-@%:@@%:@ Running $as_me. @%:@@%:@
-_ASBOX
-  printf '%s\n' "$ac_log"
-} >&5
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-#
-# INIT-COMMANDS
-#
-AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}"
-
-
-# The HP-UX ksh and POSIX shell print the target directory to stdout
-# if CDPATH is set.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-sed_quote_subst='$sed_quote_subst'
-double_quote_subst='$double_quote_subst'
-delay_variable_subst='$delay_variable_subst'
-macro_version='`$ECHO "$macro_version" | $SED "$delay_single_quote_subst"`'
-macro_revision='`$ECHO "$macro_revision" | $SED "$delay_single_quote_subst"`'
-enable_shared='`$ECHO "$enable_shared" | $SED "$delay_single_quote_subst"`'
-enable_static='`$ECHO "$enable_static" | $SED "$delay_single_quote_subst"`'
-pic_mode='`$ECHO "$pic_mode" | $SED "$delay_single_quote_subst"`'
-enable_fast_install='`$ECHO "$enable_fast_install" | $SED "$delay_single_quote_subst"`'
-shared_archive_member_spec='`$ECHO "$shared_archive_member_spec" | $SED "$delay_single_quote_subst"`'
-SHELL='`$ECHO "$SHELL" | $SED "$delay_single_quote_subst"`'
-ECHO='`$ECHO "$ECHO" | $SED "$delay_single_quote_subst"`'
-PATH_SEPARATOR='`$ECHO "$PATH_SEPARATOR" | $SED "$delay_single_quote_subst"`'
-host_alias='`$ECHO "$host_alias" | $SED "$delay_single_quote_subst"`'
-host='`$ECHO "$host" | $SED "$delay_single_quote_subst"`'
-host_os='`$ECHO "$host_os" | $SED "$delay_single_quote_subst"`'
-build_alias='`$ECHO "$build_alias" | $SED "$delay_single_quote_subst"`'
-build='`$ECHO "$build" | $SED "$delay_single_quote_subst"`'
-build_os='`$ECHO "$build_os" | $SED "$delay_single_quote_subst"`'
-SED='`$ECHO "$SED" | $SED "$delay_single_quote_subst"`'
-Xsed='`$ECHO "$Xsed" | $SED "$delay_single_quote_subst"`'
-GREP='`$ECHO "$GREP" | $SED "$delay_single_quote_subst"`'
-EGREP='`$ECHO "$EGREP" | $SED "$delay_single_quote_subst"`'
-FGREP='`$ECHO "$FGREP" | $SED "$delay_single_quote_subst"`'
-LD='`$ECHO "$LD" | $SED "$delay_single_quote_subst"`'
-NM='`$ECHO "$NM" | $SED "$delay_single_quote_subst"`'
-LN_S='`$ECHO "$LN_S" | $SED "$delay_single_quote_subst"`'
-max_cmd_len='`$ECHO "$max_cmd_len" | $SED "$delay_single_quote_subst"`'
-ac_objext='`$ECHO "$ac_objext" | $SED "$delay_single_quote_subst"`'
-exeext='`$ECHO "$exeext" | $SED "$delay_single_quote_subst"`'
-lt_unset='`$ECHO "$lt_unset" | $SED "$delay_single_quote_subst"`'
-lt_SP2NL='`$ECHO "$lt_SP2NL" | $SED "$delay_single_quote_subst"`'
-lt_NL2SP='`$ECHO "$lt_NL2SP" | $SED "$delay_single_quote_subst"`'
-lt_cv_to_host_file_cmd='`$ECHO "$lt_cv_to_host_file_cmd" | $SED "$delay_single_quote_subst"`'
-lt_cv_to_tool_file_cmd='`$ECHO "$lt_cv_to_tool_file_cmd" | $SED "$delay_single_quote_subst"`'
-reload_flag='`$ECHO "$reload_flag" | $SED "$delay_single_quote_subst"`'
-reload_cmds='`$ECHO "$reload_cmds" | $SED "$delay_single_quote_subst"`'
-FILECMD='`$ECHO "$FILECMD" | $SED "$delay_single_quote_subst"`'
-OBJDUMP='`$ECHO "$OBJDUMP" | $SED "$delay_single_quote_subst"`'
-deplibs_check_method='`$ECHO "$deplibs_check_method" | $SED "$delay_single_quote_subst"`'
-file_magic_cmd='`$ECHO "$file_magic_cmd" | $SED "$delay_single_quote_subst"`'
-file_magic_glob='`$ECHO "$file_magic_glob" | $SED "$delay_single_quote_subst"`'
-want_nocaseglob='`$ECHO "$want_nocaseglob" | $SED "$delay_single_quote_subst"`'
-DLLTOOL='`$ECHO "$DLLTOOL" | $SED "$delay_single_quote_subst"`'
-sharedlib_from_linklib_cmd='`$ECHO "$sharedlib_from_linklib_cmd" | $SED "$delay_single_quote_subst"`'
-AR='`$ECHO "$AR" | $SED "$delay_single_quote_subst"`'
-lt_ar_flags='`$ECHO "$lt_ar_flags" | $SED "$delay_single_quote_subst"`'
-AR_FLAGS='`$ECHO "$AR_FLAGS" | $SED "$delay_single_quote_subst"`'
-archiver_list_spec='`$ECHO "$archiver_list_spec" | $SED "$delay_single_quote_subst"`'
-STRIP='`$ECHO "$STRIP" | $SED "$delay_single_quote_subst"`'
-RANLIB='`$ECHO "$RANLIB" | $SED "$delay_single_quote_subst"`'
-old_postinstall_cmds='`$ECHO "$old_postinstall_cmds" | $SED "$delay_single_quote_subst"`'
-old_postuninstall_cmds='`$ECHO "$old_postuninstall_cmds" | $SED "$delay_single_quote_subst"`'
-old_archive_cmds='`$ECHO "$old_archive_cmds" | $SED "$delay_single_quote_subst"`'
-lock_old_archive_extraction='`$ECHO "$lock_old_archive_extraction" | $SED "$delay_single_quote_subst"`'
-CC='`$ECHO "$CC" | $SED "$delay_single_quote_subst"`'
-CFLAGS='`$ECHO "$CFLAGS" | $SED "$delay_single_quote_subst"`'
-compiler='`$ECHO "$compiler" | $SED "$delay_single_quote_subst"`'
-GCC='`$ECHO "$GCC" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_pipe='`$ECHO "$lt_cv_sys_global_symbol_pipe" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_cdecl='`$ECHO "$lt_cv_sys_global_symbol_to_cdecl" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_import='`$ECHO "$lt_cv_sys_global_symbol_to_import" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_c_name_address='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address_lib_prefix" | $SED "$delay_single_quote_subst"`'
-lt_cv_nm_interface='`$ECHO "$lt_cv_nm_interface" | $SED "$delay_single_quote_subst"`'
-nm_file_list_spec='`$ECHO "$nm_file_list_spec" | $SED "$delay_single_quote_subst"`'
-lt_sysroot='`$ECHO "$lt_sysroot" | $SED "$delay_single_quote_subst"`'
-lt_cv_truncate_bin='`$ECHO "$lt_cv_truncate_bin" | $SED "$delay_single_quote_subst"`'
-objdir='`$ECHO "$objdir" | $SED "$delay_single_quote_subst"`'
-MAGIC_CMD='`$ECHO "$MAGIC_CMD" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_no_builtin_flag='`$ECHO "$lt_prog_compiler_no_builtin_flag" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_pic='`$ECHO "$lt_prog_compiler_pic" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_wl='`$ECHO "$lt_prog_compiler_wl" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_static='`$ECHO "$lt_prog_compiler_static" | $SED "$delay_single_quote_subst"`'
-lt_cv_prog_compiler_c_o='`$ECHO "$lt_cv_prog_compiler_c_o" | $SED "$delay_single_quote_subst"`'
-need_locks='`$ECHO "$need_locks" | $SED "$delay_single_quote_subst"`'
-MANIFEST_TOOL='`$ECHO "$MANIFEST_TOOL" | $SED "$delay_single_quote_subst"`'
-DSYMUTIL='`$ECHO "$DSYMUTIL" | $SED "$delay_single_quote_subst"`'
-NMEDIT='`$ECHO "$NMEDIT" | $SED "$delay_single_quote_subst"`'
-LIPO='`$ECHO "$LIPO" | $SED "$delay_single_quote_subst"`'
-OTOOL='`$ECHO "$OTOOL" | $SED "$delay_single_quote_subst"`'
-OTOOL64='`$ECHO "$OTOOL64" | $SED "$delay_single_quote_subst"`'
-libext='`$ECHO "$libext" | $SED "$delay_single_quote_subst"`'
-shrext_cmds='`$ECHO "$shrext_cmds" | $SED "$delay_single_quote_subst"`'
-extract_expsyms_cmds='`$ECHO "$extract_expsyms_cmds" | $SED "$delay_single_quote_subst"`'
-archive_cmds_need_lc='`$ECHO "$archive_cmds_need_lc" | $SED "$delay_single_quote_subst"`'
-enable_shared_with_static_runtimes='`$ECHO "$enable_shared_with_static_runtimes" | $SED "$delay_single_quote_subst"`'
-export_dynamic_flag_spec='`$ECHO "$export_dynamic_flag_spec" | $SED "$delay_single_quote_subst"`'
-whole_archive_flag_spec='`$ECHO "$whole_archive_flag_spec" | $SED "$delay_single_quote_subst"`'
-compiler_needs_object='`$ECHO "$compiler_needs_object" | $SED "$delay_single_quote_subst"`'
-old_archive_from_new_cmds='`$ECHO "$old_archive_from_new_cmds" | $SED "$delay_single_quote_subst"`'
-old_archive_from_expsyms_cmds='`$ECHO "$old_archive_from_expsyms_cmds" | $SED "$delay_single_quote_subst"`'
-archive_cmds='`$ECHO "$archive_cmds" | $SED "$delay_single_quote_subst"`'
-archive_expsym_cmds='`$ECHO "$archive_expsym_cmds" | $SED "$delay_single_quote_subst"`'
-module_cmds='`$ECHO "$module_cmds" | $SED "$delay_single_quote_subst"`'
-module_expsym_cmds='`$ECHO "$module_expsym_cmds" | $SED "$delay_single_quote_subst"`'
-with_gnu_ld='`$ECHO "$with_gnu_ld" | $SED "$delay_single_quote_subst"`'
-allow_undefined_flag='`$ECHO "$allow_undefined_flag" | $SED "$delay_single_quote_subst"`'
-no_undefined_flag='`$ECHO "$no_undefined_flag" | $SED "$delay_single_quote_subst"`'
-hardcode_libdir_flag_spec='`$ECHO "$hardcode_libdir_flag_spec" | $SED "$delay_single_quote_subst"`'
-hardcode_libdir_separator='`$ECHO "$hardcode_libdir_separator" | $SED "$delay_single_quote_subst"`'
-hardcode_direct='`$ECHO "$hardcode_direct" | $SED "$delay_single_quote_subst"`'
-hardcode_direct_absolute='`$ECHO "$hardcode_direct_absolute" | $SED "$delay_single_quote_subst"`'
-hardcode_minus_L='`$ECHO "$hardcode_minus_L" | $SED "$delay_single_quote_subst"`'
-hardcode_shlibpath_var='`$ECHO "$hardcode_shlibpath_var" | $SED "$delay_single_quote_subst"`'
-hardcode_automatic='`$ECHO "$hardcode_automatic" | $SED "$delay_single_quote_subst"`'
-inherit_rpath='`$ECHO "$inherit_rpath" | $SED "$delay_single_quote_subst"`'
-link_all_deplibs='`$ECHO "$link_all_deplibs" | $SED "$delay_single_quote_subst"`'
-always_export_symbols='`$ECHO "$always_export_symbols" | $SED "$delay_single_quote_subst"`'
-export_symbols_cmds='`$ECHO "$export_symbols_cmds" | $SED "$delay_single_quote_subst"`'
-exclude_expsyms='`$ECHO "$exclude_expsyms" | $SED "$delay_single_quote_subst"`'
-include_expsyms='`$ECHO "$include_expsyms" | $SED "$delay_single_quote_subst"`'
-prelink_cmds='`$ECHO "$prelink_cmds" | $SED "$delay_single_quote_subst"`'
-postlink_cmds='`$ECHO "$postlink_cmds" | $SED "$delay_single_quote_subst"`'
-file_list_spec='`$ECHO "$file_list_spec" | $SED "$delay_single_quote_subst"`'
-variables_saved_for_relink='`$ECHO "$variables_saved_for_relink" | $SED "$delay_single_quote_subst"`'
-need_lib_prefix='`$ECHO "$need_lib_prefix" | $SED "$delay_single_quote_subst"`'
-need_version='`$ECHO "$need_version" | $SED "$delay_single_quote_subst"`'
-version_type='`$ECHO "$version_type" | $SED "$delay_single_quote_subst"`'
-runpath_var='`$ECHO "$runpath_var" | $SED "$delay_single_quote_subst"`'
-shlibpath_var='`$ECHO "$shlibpath_var" | $SED "$delay_single_quote_subst"`'
-shlibpath_overrides_runpath='`$ECHO "$shlibpath_overrides_runpath" | $SED "$delay_single_quote_subst"`'
-libname_spec='`$ECHO "$libname_spec" | $SED "$delay_single_quote_subst"`'
-library_names_spec='`$ECHO "$library_names_spec" | $SED "$delay_single_quote_subst"`'
-soname_spec='`$ECHO "$soname_spec" | $SED "$delay_single_quote_subst"`'
-install_override_mode='`$ECHO "$install_override_mode" | $SED "$delay_single_quote_subst"`'
-postinstall_cmds='`$ECHO "$postinstall_cmds" | $SED "$delay_single_quote_subst"`'
-postuninstall_cmds='`$ECHO "$postuninstall_cmds" | $SED "$delay_single_quote_subst"`'
-finish_cmds='`$ECHO "$finish_cmds" | $SED "$delay_single_quote_subst"`'
-finish_eval='`$ECHO "$finish_eval" | $SED "$delay_single_quote_subst"`'
-hardcode_into_libs='`$ECHO "$hardcode_into_libs" | $SED "$delay_single_quote_subst"`'
-sys_lib_search_path_spec='`$ECHO "$sys_lib_search_path_spec" | $SED "$delay_single_quote_subst"`'
-configure_time_dlsearch_path='`$ECHO "$configure_time_dlsearch_path" | $SED "$delay_single_quote_subst"`'
-configure_time_lt_sys_library_path='`$ECHO "$configure_time_lt_sys_library_path" | $SED "$delay_single_quote_subst"`'
-hardcode_action='`$ECHO "$hardcode_action" | $SED "$delay_single_quote_subst"`'
-enable_dlopen='`$ECHO "$enable_dlopen" | $SED "$delay_single_quote_subst"`'
-enable_dlopen_self='`$ECHO "$enable_dlopen_self" | $SED "$delay_single_quote_subst"`'
-enable_dlopen_self_static='`$ECHO "$enable_dlopen_self_static" | $SED "$delay_single_quote_subst"`'
-old_striplib='`$ECHO "$old_striplib" | $SED "$delay_single_quote_subst"`'
-striplib='`$ECHO "$striplib" | $SED "$delay_single_quote_subst"`'
-
-LTCC='$LTCC'
-LTCFLAGS='$LTCFLAGS'
-compiler='$compiler_DEFAULT'
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-\$1
-_LTECHO_EOF'
-}
-
-# Quote evaled strings.
-for var in SHELL \
-ECHO \
-PATH_SEPARATOR \
-SED \
-GREP \
-EGREP \
-FGREP \
-LD \
-NM \
-LN_S \
-lt_SP2NL \
-lt_NL2SP \
-reload_flag \
-FILECMD \
-OBJDUMP \
-deplibs_check_method \
-file_magic_cmd \
-file_magic_glob \
-want_nocaseglob \
-DLLTOOL \
-sharedlib_from_linklib_cmd \
-AR \
-archiver_list_spec \
-STRIP \
-RANLIB \
-CC \
-CFLAGS \
-compiler \
-lt_cv_sys_global_symbol_pipe \
-lt_cv_sys_global_symbol_to_cdecl \
-lt_cv_sys_global_symbol_to_import \
-lt_cv_sys_global_symbol_to_c_name_address \
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix \
-lt_cv_nm_interface \
-nm_file_list_spec \
-lt_cv_truncate_bin \
-lt_prog_compiler_no_builtin_flag \
-lt_prog_compiler_pic \
-lt_prog_compiler_wl \
-lt_prog_compiler_static \
-lt_cv_prog_compiler_c_o \
-need_locks \
-MANIFEST_TOOL \
-DSYMUTIL \
-NMEDIT \
-LIPO \
-OTOOL \
-OTOOL64 \
-shrext_cmds \
-export_dynamic_flag_spec \
-whole_archive_flag_spec \
-compiler_needs_object \
-with_gnu_ld \
-allow_undefined_flag \
-no_undefined_flag \
-hardcode_libdir_flag_spec \
-hardcode_libdir_separator \
-exclude_expsyms \
-include_expsyms \
-file_list_spec \
-variables_saved_for_relink \
-libname_spec \
-library_names_spec \
-soname_spec \
-install_override_mode \
-finish_eval \
-old_striplib \
-striplib; do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[\\\\\\\`\\"\\\$]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-# Double-quote double-evaled strings.
-for var in reload_cmds \
-old_postinstall_cmds \
-old_postuninstall_cmds \
-old_archive_cmds \
-extract_expsyms_cmds \
-old_archive_from_new_cmds \
-old_archive_from_expsyms_cmds \
-archive_cmds \
-archive_expsym_cmds \
-module_cmds \
-module_expsym_cmds \
-export_symbols_cmds \
-prelink_cmds \
-postlink_cmds \
-postinstall_cmds \
-postuninstall_cmds \
-finish_cmds \
-sys_lib_search_path_spec \
-configure_time_dlsearch_path \
-configure_time_lt_sys_library_path; do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[\\\\\\\`\\"\\\$]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-ac_aux_dir='$ac_aux_dir'
-
-# See if we are running on zsh, and set the options that allow our
-# commands through without removal of \ escapes INIT.
-if test -n "\${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-
-    PACKAGE='$PACKAGE'
-    VERSION='$VERSION'
-    RM='$RM'
-    ofile='$ofile'
-
-
-
-
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-
-# Handling of arguments.
-for ac_config_target in $ac_config_targets
-do
-  case $ac_config_target in
-    "config.h") CONFIG_HEADERS="$CONFIG_HEADERS config.h" ;;
-    "depfiles") CONFIG_COMMANDS="$CONFIG_COMMANDS depfiles" ;;
-    "libtool") CONFIG_COMMANDS="$CONFIG_COMMANDS libtool" ;;
-    "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;;
-    "man/Makefile") CONFIG_FILES="$CONFIG_FILES man/Makefile" ;;
-    "src/Makefile") CONFIG_FILES="$CONFIG_FILES src/Makefile" ;;
-    "specs/Makefile") CONFIG_FILES="$CONFIG_FILES specs/Makefile" ;;
-    "xext.pc") CONFIG_FILES="$CONFIG_FILES xext.pc" ;;
-
-  *) as_fn_error $? "invalid argument: '$ac_config_target'" "$LINENO" 5;;
-  esac
-done
-
-
-# If the user did not use the arguments to specify the items to instantiate,
-# then the envvar interface is used.  Set only those that are not.
-# We use the long form for the default assignment because of an extremely
-# bizarre bug on SunOS 4.1.3.
-if $ac_need_defaults; then
-  test ${CONFIG_FILES+y} || CONFIG_FILES=$config_files
-  test ${CONFIG_HEADERS+y} || CONFIG_HEADERS=$config_headers
-  test ${CONFIG_COMMANDS+y} || CONFIG_COMMANDS=$config_commands
-fi
-
-# Have a temporary directory for convenience.  Make it in the build tree
-# simply because there is no reason against having it here, and in addition,
-# creating and moving files from /tmp can sometimes cause problems.
-# Hook for its removal unless debugging.
-# Note that there is a small window in which the directory will not be cleaned:
-# after its creation but before its name has been assigned to '$tmp'.
-$debug ||
-{
-  tmp= ac_tmp=
-  trap 'exit_status=$?
-  : "${ac_tmp:=$tmp}"
-  { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status
-' 0
-  trap 'as_fn_exit 1' 1 2 13 15
-}
-# Create a (secure) tmp directory for tmp files.
-
-{
-  tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` &&
-  test -d "$tmp"
-}  ||
-{
-  tmp=./conf$$-$RANDOM
-  (umask 077 && mkdir "$tmp")
-} || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5
-ac_tmp=$tmp
-
-# Set up the scripts for CONFIG_FILES section.
-# No need to generate them if there are no CONFIG_FILES.
-# This happens for instance with './config.status config.h'.
-if test -n "$CONFIG_FILES"; then
-
-
-ac_cr=`echo X | tr X '\015'`
-# On cygwin, bash can eat \r inside `` if the user requested igncr.
-# But we know of no other shell where ac_cr would be empty at this
-# point, so we can use a bashism as a fallback.
-if test "x$ac_cr" = x; then
-  eval ac_cr=\$\'\\r\'
-fi
-ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' </dev/null 2>/dev/null`
-if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then
-  ac_cs_awk_cr='\\r'
-else
-  ac_cs_awk_cr=$ac_cr
-fi
-
-echo 'BEGIN {' >"$ac_tmp/subs1.awk" &&
-_ACEOF
-
-
-{
-  echo "cat >conf$$subs.awk <<_ACEOF" &&
-  echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' &&
-  echo "_ACEOF"
-} >conf$$subs.sh ||
-  as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-ac_delim_num=`echo "$ac_subst_vars" | sed -n '$='`
-ac_delim='%!_!# '
-for ac_last_try in false false false false false :; do
-  . ./conf$$subs.sh ||
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-
-  ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | sed -n '$='`
-  if test $ac_delim_n = $ac_delim_num; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-rm -f conf$$subs.sh
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK &&
-_ACEOF
-sed -n '
-h
-s/^/S["/; s/!.*/"]=/
-p
-g
-s/^[^!]*!//
-:repl
-t repl
-s/'"$ac_delim"'$//
-t delim
-:nl
-h
-s/\(.\{148\}\)..*/\1/
-t more1
-s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/
-p
-n
-b repl
-:more1
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t nl
-:delim
-h
-s/\(.\{148\}\)..*/\1/
-t more2
-s/["\\]/\\&/g; s/^/"/; s/$/"/
-p
-b
-:more2
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t delim
-' <conf$$subs.awk | sed '
-/^[^""]/{
-  N
-  s/\n//
-}
-' >>"$CONFIG_STATUS" || ac_write_fail=1
-rm -f conf$$subs.awk
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-_ACAWK
-cat >>"\$ac_tmp/subs1.awk" <<_ACAWK &&
-  for (key in S) S_is_set[key] = 1
-  FS = ""
-
-}
-{
-  line = $ 0
-  nfields = split(line, field, "@")
-  substed = 0
-  len = length(field[1])
-  for (i = 2; i < nfields; i++) {
-    key = field[i]
-    keylen = length(key)
-    if (S_is_set[key]) {
-      value = S[key]
-      line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3)
-      len += length(value) + length(field[++i])
-      substed = 1
-    } else
-      len += 1 + keylen
-  }
-
-  print line
-}
-
-_ACAWK
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then
-  sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g"
-else
-  cat
-fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \
-  || as_fn_error $? "could not setup config files machinery" "$LINENO" 5
-_ACEOF
-
-# VPATH may cause trouble with some makes, so we remove sole $(srcdir),
-# ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and
-# trailing colons and then remove the whole line if VPATH becomes empty
-# (actually we leave an empty line to preserve line numbers).
-if test "x$srcdir" = x.; then
-  ac_vpsub='/^[	 ]*VPATH[	 ]*=[	 ]*/{
-h
-s///
-s/^/:/
-s/[	 ]*$/:/
-s/:\$(srcdir):/:/g
-s/:\${srcdir}:/:/g
-s/:@srcdir@:/:/g
-s/^:*//
-s/:*$//
-x
-s/\(=[	 ]*\).*/\1/
-G
-s/\n//
-s/^[^=]*=[	 ]*$//
-}'
-fi
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-fi # test -n "$CONFIG_FILES"
-
-# Set up the scripts for CONFIG_HEADERS section.
-# No need to generate them if there are no CONFIG_HEADERS.
-# This happens for instance with './config.status Makefile'.
-if test -n "$CONFIG_HEADERS"; then
-cat >"$ac_tmp/defines.awk" <<\_ACAWK ||
-BEGIN {
-_ACEOF
-
-# Transform confdefs.h into an awk script 'defines.awk', embedded as
-# here-document in config.status, that substitutes the proper values into
-# config.h.in to produce config.h.
-
-# Create a delimiter string that does not exist in confdefs.h, to ease
-# handling of long lines.
-ac_delim='%!_!# '
-for ac_last_try in false false :; do
-  ac_tt=`sed -n "/$ac_delim/p" confdefs.h`
-  if test -z "$ac_tt"; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-
-# For the awk script, D is an array of macro values keyed by name,
-# likewise P contains macro parameters if any.  Preserve backslash
-# newline sequences.
-
-ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]*
-sed -n '
-s/.\{148\}/&'"$ac_delim"'/g
-t rset
-:rset
-s/^[	 ]*#[	 ]*define[	 ][	 ]*/ /
-t def
-d
-:def
-s/\\$//
-t bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3"/p
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2"/p
-d
-:bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3\\\\\\n"\\/p
-t cont
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p
-t cont
-d
-:cont
-n
-s/.\{148\}/&'"$ac_delim"'/g
-t clear
-:clear
-s/\\$//
-t bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/"/p
-d
-:bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p
-b cont
-' <confdefs.h | sed '
-s/'"$ac_delim"'/"\\\
-"/g' >>"$CONFIG_STATUS" || ac_write_fail=1
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-  for (key in D) D_is_set[key] = 1
-  FS = ""
-}
-/^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ {
-  line = \$ 0
-  split(line, arg, " ")
-  if (arg[1] == "#") {
-    defundef = arg[2]
-    mac1 = arg[3]
-  } else {
-    defundef = substr(arg[1], 2)
-    mac1 = arg[2]
-  }
-  split(mac1, mac2, "(") #)
-  macro = mac2[1]
-  prefix = substr(line, 1, index(line, defundef) - 1)
-  if (D_is_set[macro]) {
-    suffix = P[macro] D[macro]
-    while (suffix ~ /[\t ]$/) {
-      suffix = substr(suffix, 1, length(suffix) - 1)
-    }
-    # Preserve the white space surrounding the "#".
-    print prefix "define", macro suffix
-    next
-  } else {
-    # Replace #undef with comments.  This is necessary, for example,
-    # in the case of _POSIX_SOURCE, which is predefined and required
-    # on some systems where configure will not decide to define it.
-    if (defundef == "undef") {
-      print "/*", prefix defundef, macro, "*/"
-      next
-    }
-  }
-}
-{ print }
-_ACAWK
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-  as_fn_error $? "could not setup config headers machinery" "$LINENO" 5
-fi # test -n "$CONFIG_HEADERS"
-
-
-eval set X "  :F $CONFIG_FILES  :H $CONFIG_HEADERS    :C $CONFIG_COMMANDS"
-shift
-for ac_tag
-do
-  case $ac_tag in
-  :[FHLC]) ac_mode=$ac_tag; continue;;
-  esac
-  case $ac_mode$ac_tag in
-  :[FHL]*:*);;
-  :L* | :C*:*) as_fn_error $? "invalid tag '$ac_tag'" "$LINENO" 5;;
-  :[FH]-) ac_tag=-:-;;
-  :[FH]*) ac_tag=$ac_tag:$ac_tag.in;;
-  esac
-  ac_save_IFS=$IFS
-  IFS=:
-  set x $ac_tag
-  IFS=$ac_save_IFS
-  shift
-  ac_file=$1
-  shift
-
-  case $ac_mode in
-  :L) ac_source=$1;;
-  :[FH])
-    ac_file_inputs=
-    for ac_f
-    do
-      case $ac_f in
-      -) ac_f="$ac_tmp/stdin";;
-      *) # Look for the file first in the build tree, then in the source tree
-	 # (if the path is not absolute).  The absolute path cannot be DOS-style,
-	 # because $ac_f cannot contain ':'.
-	 test -f "$ac_f" ||
-	   case $ac_f in
-	   [\\/$]*) false;;
-	   *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";;
-	   esac ||
-	   as_fn_error 1 "cannot find input file: '$ac_f'" "$LINENO" 5;;
-      esac
-      case $ac_f in *\'*) ac_f=`printf '%s\n' "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac
-      as_fn_append ac_file_inputs " '$ac_f'"
-    done
-
-    # Let's still pretend it is 'configure' which instantiates (i.e., don't
-    # use $as_me), people would be surprised to read:
-    #    /* config.h.  Generated by config.status.  */
-    configure_input='Generated from '`
-	  printf '%s\n' "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g'
-	`' by configure.'
-    if test x"$ac_file" != x-; then
-      configure_input="$ac_file.  $configure_input"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5
-printf '%s\n' "$as_me: creating $ac_file" >&6;}
-    fi
-    # Neutralize special characters interpreted by sed in replacement strings.
-    case $configure_input in #(
-    *\&* | *\|* | *\\* )
-       ac_sed_conf_input=`printf '%s\n' "$configure_input" |
-       sed 's/[\\\\&|]/\\\\&/g'`;; #(
-    *) ac_sed_conf_input=$configure_input;;
-    esac
-
-    case $ac_tag in
-    *:-:* | *:-) cat >"$ac_tmp/stdin" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;;
-    esac
-    ;;
-  esac
-
-  ac_dir=`$as_dirname -- "$ac_file" ||
-$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$ac_file" : 'X\(//\)[^/]' \| \
-	 X"$ac_file" : 'X\(//\)$' \| \
-	 X"$ac_file" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$ac_file" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  as_dir="$ac_dir"; as_fn_mkdir_p
-  ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`printf '%s\n' "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`printf '%s\n' "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-
-  case $ac_mode in
-  :F)
-  #
-  # CONFIG_FILE
-  #
-
-  case $INSTALL in
-  [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;;
-  *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;;
-  esac
-  ac_MKDIR_P=$MKDIR_P
-  case $MKDIR_P in
-  [\\/$]* | ?:[\\/]* ) ;;
-  */*) ac_MKDIR_P=$ac_top_build_prefix$MKDIR_P ;;
-  esac
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# If the template does not know about datarootdir, expand it.
-# FIXME: This hack should be removed a few years after 2.60.
-ac_datarootdir_hack=; ac_datarootdir_seen=
-ac_sed_dataroot='
-/datarootdir/ {
-  p
-  q
-}
-/@datadir@/p
-/@docdir@/p
-/@infodir@/p
-/@localedir@/p
-/@mandir@/p'
-case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in
-*datarootdir*) ac_datarootdir_seen=yes;;
-*@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*)
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5
-printf '%s\n' "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;}
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-  ac_datarootdir_hack='
-  s&@datadir@&$datadir&g
-  s&@docdir@&$docdir&g
-  s&@infodir@&$infodir&g
-  s&@localedir@&$localedir&g
-  s&@mandir@&$mandir&g
-  s&\\\${datarootdir}&$datarootdir&g' ;;
-esac
-_ACEOF
-
-# Neutralize VPATH when '$srcdir' = '.'.
-# Shell code in configure.ac might set extrasub.
-# FIXME: do we really want to maintain this feature?
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-ac_sed_extra="$ac_vpsub
-$extrasub
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-:t
-/@[a-zA-Z_][a-zA-Z_0-9]*@/!b
-s|@configure_input@|$ac_sed_conf_input|;t t
-s&@top_builddir@&$ac_top_builddir_sub&;t t
-s&@top_build_prefix@&$ac_top_build_prefix&;t t
-s&@srcdir@&$ac_srcdir&;t t
-s&@abs_srcdir@&$ac_abs_srcdir&;t t
-s&@top_srcdir@&$ac_top_srcdir&;t t
-s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t
-s&@builddir@&$ac_builddir&;t t
-s&@abs_builddir@&$ac_abs_builddir&;t t
-s&@abs_top_builddir@&$ac_abs_top_builddir&;t t
-s&@INSTALL@&$ac_INSTALL&;t t
-s&@MKDIR_P@&$ac_MKDIR_P&;t t
-$ac_datarootdir_hack
-"
-eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \
-  >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-
-test -z "$ac_datarootdir_hack$ac_datarootdir_seen" &&
-  { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } &&
-  { ac_out=`sed -n '/^[	 ]*datarootdir[	 ]*:*=/p' \
-      "$ac_tmp/out"`; test -z "$ac_out"; } &&
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable 'datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&5
-printf '%s\n' "$as_me: WARNING: $ac_file contains a reference to the variable 'datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&2;}
-
-  rm -f "$ac_tmp/stdin"
-  case $ac_file in
-  -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";;
-  *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";;
-  esac \
-  || as_fn_error $? "could not create $ac_file" "$LINENO" 5
- ;;
-  :H)
-  #
-  # CONFIG_HEADER
-  #
-  if test x"$ac_file" != x-; then
-    {
-      printf '%s\n' "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs"
-    } >"$ac_tmp/config.h" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5
-printf '%s\n' "$as_me: $ac_file is unchanged" >&6;}
-    else
-      rm -f "$ac_file"
-      mv "$ac_tmp/config.h" "$ac_file" \
-	|| as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    fi
-  else
-    printf '%s\n' "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \
-      || as_fn_error $? "could not create -" "$LINENO" 5
-  fi
-# Compute "$ac_file"'s index in $config_headers.
-_am_arg="$ac_file"
-_am_stamp_count=1
-for _am_header in $config_headers :; do
-  case $_am_header in
-    $_am_arg | $_am_arg:* )
-      break ;;
-    * )
-      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
-  esac
-done
-echo "timestamp for $_am_arg" >`$as_dirname -- "$_am_arg" ||
-$as_expr X"$_am_arg" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$_am_arg" : 'X\(//\)[^/]' \| \
-	 X"$_am_arg" : 'X\(//\)$' \| \
-	 X"$_am_arg" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$_am_arg" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`/stamp-h$_am_stamp_count
- ;;
-  
-  :C)  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: executing $ac_file commands" >&5
-printf '%s\n' "$as_me: executing $ac_file commands" >&6;}
- ;;
-  esac
-
-
-  case $ac_file$ac_mode in
-    "depfiles":C) test x"$AMDEP_TRUE" != x"" || {
-  # Older Autoconf quotes --file arguments for eval, but not when files
-  # are listed without --file.  Let's play safe and only enable the eval
-  # if we detect the quoting.
-  # TODO: see whether this extra hack can be removed once we start
-  # requiring Autoconf 2.70 or later.
-  case $CONFIG_FILES in @%:@(
-  *\'*) :
-    eval set x "$CONFIG_FILES" ;; @%:@(
-  *) :
-    set x $CONFIG_FILES ;; @%:@(
-  *) :
-     ;;
-esac
-  shift
-  # Used to flag and report bootstrapping failures.
-  am_rc=0
-  for am_mf
-  do
-    # Strip MF so we end up with the name of the file.
-    am_mf=`printf '%s\n' "$am_mf" | sed -e 's/:.*$//'`
-    # Check whether this is an Automake generated Makefile which includes
-    # dependency-tracking related rules and includes.
-    # Grep'ing the whole file directly is not great: AIX grep has a line
-    # limit of 2048, but all sed's we know have understand at least 4000.
-    sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \
-      || continue
-    am_dirpart=`$as_dirname -- "$am_mf" ||
-$as_expr X"$am_mf" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$am_mf" : 'X\(//\)[^/]' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$am_mf" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    am_filepart=`$as_basename -- "$am_mf" ||
-$as_expr X/"$am_mf" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$am_mf" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    { echo "$as_me:$LINENO: cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles" >&5
-   (cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } || am_rc=$?
-  done
-  if test $am_rc -ne 0; then
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "Something went wrong bootstrapping makefile fragments
-    for automatic dependency tracking.  If GNU make was not used, consider
-    re-running the configure script with MAKE=\"gmake\" (or whatever is
-    necessary).  You can also try re-running configure with the
-    '--disable-dependency-tracking' option to at least be able to build
-    the package (albeit without support for automatic dependency tracking).
-See 'config.log' for more details" "$LINENO" 5; }
-  fi
-  { am_dirpart=; unset am_dirpart;}
-  { am_filepart=; unset am_filepart;}
-  { am_mf=; unset am_mf;}
-  { am_rc=; unset am_rc;}
-  rm -f conftest-deps.mk
-}
- ;;
-    "libtool":C) 
-    
-    # See if we are running on zsh, and set the options that allow our
-    # commands through without removal of \ escapes.
-    if test -n "${ZSH_VERSION+set}"; then
-      setopt NO_GLOB_SUBST
-    fi
-
-    cfgfile=${ofile}T
-    trap "$RM \"$cfgfile\"; exit 1" 1 2 15
-    $RM "$cfgfile"
-
-    cat <<_LT_EOF >> "$cfgfile"
-#! $SHELL
-# Generated automatically by $as_me ($PACKAGE) $VERSION
-# NOTE: Changes made to this file will be lost: look at ltmain.sh.
-
-# Provide generalized library-building support services.
-# Written by Gordon Matzigkeit, 1996
-
-# Copyright (C) 2024 Free Software Foundation, Inc.
-# This is free software; see the source for copying conditions.  There is NO
-# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-
-# GNU Libtool is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program or library that is built
-# using GNU Libtool, you may include this file under the  same
-# distribution terms that you use for the rest of that program.
-#
-# GNU Libtool is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-
-# The names of the tagged configurations supported by this script.
-available_tags=''
-
-# Configured defaults for sys_lib_dlsearch_path munging.
-: \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"}
-
-# ### BEGIN LIBTOOL CONFIG
-
-# Which release of libtool.m4 was used?
-macro_version=$macro_version
-macro_revision=$macro_revision
-
-# Whether or not to build shared libraries.
-build_libtool_libs=$enable_shared
-
-# Whether or not to build static libraries.
-build_old_libs=$enable_static
-
-# What type of objects to build.
-pic_mode=$pic_mode
-
-# Whether or not to optimize for fast installation.
-fast_install=$enable_fast_install
-
-# Shared archive member basename,for filename based shared library versioning on AIX.
-shared_archive_member_spec=$shared_archive_member_spec
-
-# Shell to use when invoking shell scripts.
-SHELL=$lt_SHELL
-
-# An echo program that protects backslashes.
-ECHO=$lt_ECHO
-
-# The PATH separator for the build system.
-PATH_SEPARATOR=$lt_PATH_SEPARATOR
-
-# The host system.
-host_alias=$host_alias
-host=$host
-host_os=$host_os
-
-# The build system.
-build_alias=$build_alias
-build=$build
-build_os=$build_os
-
-# A sed program that does not truncate output.
-SED=$lt_SED
-
-# Sed that helps us avoid accidentally triggering echo(1) options like -n.
-Xsed="\$SED -e 1s/^X//"
-
-# A grep program that handles long lines.
-GREP=$lt_GREP
-
-# An ERE matcher.
-EGREP=$lt_EGREP
-
-# A literal string matcher.
-FGREP=$lt_FGREP
-
-# A BSD- or MS-compatible name lister.
-NM=$lt_NM
-
-# Whether we need soft or hard links.
-LN_S=$lt_LN_S
-
-# What is the maximum length of a command?
-max_cmd_len=$max_cmd_len
-
-# Object file suffix (normally "o").
-objext=$ac_objext
-
-# Executable file suffix (normally "").
-exeext=$exeext
-
-# whether the shell understands "unset".
-lt_unset=$lt_unset
-
-# turn spaces into newlines.
-SP2NL=$lt_lt_SP2NL
-
-# turn newlines into spaces.
-NL2SP=$lt_lt_NL2SP
-
-# convert \$build file names to \$host format.
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-
-# convert \$build files to toolchain format.
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-
-# A file(cmd) program that detects file types.
-FILECMD=$lt_FILECMD
-
-# An object symbol dumper.
-OBJDUMP=$lt_OBJDUMP
-
-# Method to check whether dependent libraries are shared objects.
-deplibs_check_method=$lt_deplibs_check_method
-
-# Command to use when deplibs_check_method = "file_magic".
-file_magic_cmd=$lt_file_magic_cmd
-
-# How to find potential files when deplibs_check_method = "file_magic".
-file_magic_glob=$lt_file_magic_glob
-
-# Find potential files using nocaseglob when deplibs_check_method = "file_magic".
-want_nocaseglob=$lt_want_nocaseglob
-
-# DLL creation program.
-DLLTOOL=$lt_DLLTOOL
-
-# Command to associate shared and link libraries.
-sharedlib_from_linklib_cmd=$lt_sharedlib_from_linklib_cmd
-
-# The archiver.
-AR=$lt_AR
-
-# Flags to create an archive (by configure).
-lt_ar_flags=$lt_ar_flags
-
-# Flags to create an archive.
-AR_FLAGS=\@S|@{ARFLAGS-"\@S|@lt_ar_flags"}
-
-# How to feed a file listing to the archiver.
-archiver_list_spec=$lt_archiver_list_spec
-
-# A symbol stripping program.
-STRIP=$lt_STRIP
-
-# Commands used to install an old-style archive.
-RANLIB=$lt_RANLIB
-old_postinstall_cmds=$lt_old_postinstall_cmds
-old_postuninstall_cmds=$lt_old_postuninstall_cmds
-
-# Whether to use a lock for old archive extraction.
-lock_old_archive_extraction=$lock_old_archive_extraction
-
-# A C compiler.
-LTCC=$lt_CC
-
-# LTCC compiler flags.
-LTCFLAGS=$lt_CFLAGS
-
-# Take the output of nm and produce a listing of raw symbols and C names.
-global_symbol_pipe=$lt_lt_cv_sys_global_symbol_pipe
-
-# Transform the output of nm in a proper C declaration.
-global_symbol_to_cdecl=$lt_lt_cv_sys_global_symbol_to_cdecl
-
-# Transform the output of nm into a list of symbols to manually relocate.
-global_symbol_to_import=$lt_lt_cv_sys_global_symbol_to_import
-
-# Transform the output of nm in a C name address pair.
-global_symbol_to_c_name_address=$lt_lt_cv_sys_global_symbol_to_c_name_address
-
-# Transform the output of nm in a C name address pair when lib prefix is needed.
-global_symbol_to_c_name_address_lib_prefix=$lt_lt_cv_sys_global_symbol_to_c_name_address_lib_prefix
-
-# The name lister interface.
-nm_interface=$lt_lt_cv_nm_interface
-
-# Specify filename containing input files for \$NM.
-nm_file_list_spec=$lt_nm_file_list_spec
-
-# The root where to search for dependent libraries,and where our libraries should be installed.
-lt_sysroot=$lt_sysroot
-
-# Command to truncate a binary pipe.
-lt_truncate_bin=$lt_lt_cv_truncate_bin
-
-# The name of the directory that contains temporary libtool files.
-objdir=$objdir
-
-# Used to examine libraries when file_magic_cmd begins with "file".
-MAGIC_CMD=$MAGIC_CMD
-
-# Must we lock files when doing compilation?
-need_locks=$lt_need_locks
-
-# Manifest tool.
-MANIFEST_TOOL=$lt_MANIFEST_TOOL
-
-# Tool to manipulate archived DWARF debug symbol files on Mac OS X.
-DSYMUTIL=$lt_DSYMUTIL
-
-# Tool to change global to local symbols on Mac OS X.
-NMEDIT=$lt_NMEDIT
-
-# Tool to manipulate fat objects and archives on Mac OS X.
-LIPO=$lt_LIPO
-
-# ldd/readelf like tool for Mach-O binaries on Mac OS X.
-OTOOL=$lt_OTOOL
-
-# ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4.
-OTOOL64=$lt_OTOOL64
-
-# Old archive suffix (normally "a").
-libext=$libext
-
-# Shared library suffix (normally ".so").
-shrext_cmds=$lt_shrext_cmds
-
-# The commands to extract the exported symbol list from a shared archive.
-extract_expsyms_cmds=$lt_extract_expsyms_cmds
-
-# Variables whose values should be saved in libtool wrapper scripts and
-# restored at link time.
-variables_saved_for_relink=$lt_variables_saved_for_relink
-
-# Do we need the "lib" prefix for modules?
-need_lib_prefix=$need_lib_prefix
-
-# Do we need a version for libraries?
-need_version=$need_version
-
-# Library versioning type.
-version_type=$version_type
-
-# Shared library runtime path variable.
-runpath_var=$runpath_var
-
-# Shared library path variable.
-shlibpath_var=$shlibpath_var
-
-# Is shlibpath searched before the hard-coded library search path?
-shlibpath_overrides_runpath=$shlibpath_overrides_runpath
-
-# Format of library name prefix.
-libname_spec=$lt_libname_spec
-
-# List of archive names.  First name is the real one, the rest are links.
-# The last name is the one that the linker finds with -lNAME
-library_names_spec=$lt_library_names_spec
-
-# The coded name of the library, if different from the real name.
-soname_spec=$lt_soname_spec
-
-# Permission mode override for installation of shared libraries.
-install_override_mode=$lt_install_override_mode
-
-# Command to use after installation of a shared archive.
-postinstall_cmds=$lt_postinstall_cmds
-
-# Command to use after uninstallation of a shared archive.
-postuninstall_cmds=$lt_postuninstall_cmds
-
-# Commands used to finish a libtool library installation in a directory.
-finish_cmds=$lt_finish_cmds
-
-# As "finish_cmds", except a single script fragment to be evaled but
-# not shown.
-finish_eval=$lt_finish_eval
-
-# Whether we should hardcode library paths into libraries.
-hardcode_into_libs=$hardcode_into_libs
-
-# Compile-time system search path for libraries.
-sys_lib_search_path_spec=$lt_sys_lib_search_path_spec
-
-# Detected run-time system search path for libraries.
-sys_lib_dlsearch_path_spec=$lt_configure_time_dlsearch_path
-
-# Explicit LT_SYS_LIBRARY_PATH set during ./configure time.
-configure_time_lt_sys_library_path=$lt_configure_time_lt_sys_library_path
-
-# Whether dlopen is supported.
-dlopen_support=$enable_dlopen
-
-# Whether dlopen of programs is supported.
-dlopen_self=$enable_dlopen_self
-
-# Whether dlopen of statically linked programs is supported.
-dlopen_self_static=$enable_dlopen_self_static
-
-# Commands to strip libraries.
-old_striplib=$lt_old_striplib
-striplib=$lt_striplib
-
-
-# The linker used to build libraries.
-LD=$lt_LD
-
-# How to create reloadable object files.
-reload_flag=$lt_reload_flag
-reload_cmds=$lt_reload_cmds
-
-# Commands used to build an old-style archive.
-old_archive_cmds=$lt_old_archive_cmds
-
-# A language specific compiler.
-CC=$lt_compiler
-
-# Is the compiler the GNU compiler?
-with_gcc=$GCC
-
-# Compiler flag to turn off builtin functions.
-no_builtin_flag=$lt_lt_prog_compiler_no_builtin_flag
-
-# Additional compiler flags for building library objects.
-pic_flag=$lt_lt_prog_compiler_pic
-
-# How to pass a linker flag through the compiler.
-wl=$lt_lt_prog_compiler_wl
-
-# Compiler flag to prevent dynamic linking.
-link_static_flag=$lt_lt_prog_compiler_static
-
-# Does compiler simultaneously support -c and -o options?
-compiler_c_o=$lt_lt_cv_prog_compiler_c_o
-
-# Whether or not to add -lc for building shared libraries.
-build_libtool_need_lc=$archive_cmds_need_lc
-
-# Whether or not to disallow shared libs when runtime libs are static.
-allow_libtool_libs_with_static_runtimes=$enable_shared_with_static_runtimes
-
-# Compiler flag to allow reflexive dlopens.
-export_dynamic_flag_spec=$lt_export_dynamic_flag_spec
-
-# Compiler flag to generate shared objects directly from archives.
-whole_archive_flag_spec=$lt_whole_archive_flag_spec
-
-# Whether the compiler copes with passing no objects directly.
-compiler_needs_object=$lt_compiler_needs_object
-
-# Create an old-style archive from a shared archive.
-old_archive_from_new_cmds=$lt_old_archive_from_new_cmds
-
-# Create a temporary old-style archive to link instead of a shared archive.
-old_archive_from_expsyms_cmds=$lt_old_archive_from_expsyms_cmds
-
-# Commands used to build a shared archive.
-archive_cmds=$lt_archive_cmds
-archive_expsym_cmds=$lt_archive_expsym_cmds
-
-# Commands used to build a loadable module if different from building
-# a shared archive.
-module_cmds=$lt_module_cmds
-module_expsym_cmds=$lt_module_expsym_cmds
-
-# Whether we are building with GNU ld or not.
-with_gnu_ld=$lt_with_gnu_ld
-
-# Flag that allows shared libraries with undefined symbols to be built.
-allow_undefined_flag=$lt_allow_undefined_flag
-
-# Flag that enforces no undefined symbols.
-no_undefined_flag=$lt_no_undefined_flag
-
-# Flag to hardcode \$libdir into a binary during linking.
-# This must work even if \$libdir does not exist
-hardcode_libdir_flag_spec=$lt_hardcode_libdir_flag_spec
-
-# Whether we need a single "-rpath" flag with a separated argument.
-hardcode_libdir_separator=$lt_hardcode_libdir_separator
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary.
-hardcode_direct=$hardcode_direct
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary and the resulting library dependency is
-# "absolute",i.e. impossible to change by setting \$shlibpath_var if the
-# library is relocated.
-hardcode_direct_absolute=$hardcode_direct_absolute
-
-# Set to "yes" if using the -LDIR flag during linking hardcodes DIR
-# into the resulting binary.
-hardcode_minus_L=$hardcode_minus_L
-
-# Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR
-# into the resulting binary.
-hardcode_shlibpath_var=$hardcode_shlibpath_var
-
-# Set to "yes" if building a shared library automatically hardcodes DIR
-# into the library and all subsequent libraries and executables linked
-# against it.
-hardcode_automatic=$hardcode_automatic
-
-# Set to yes if linker adds runtime paths of dependent libraries
-# to runtime path list.
-inherit_rpath=$inherit_rpath
-
-# Whether libtool must link a program against all its dependency libraries.
-link_all_deplibs=$link_all_deplibs
-
-# Set to "yes" if exported symbols are required.
-always_export_symbols=$always_export_symbols
-
-# The commands to list exported symbols.
-export_symbols_cmds=$lt_export_symbols_cmds
-
-# Symbols that should not be listed in the preloaded symbols.
-exclude_expsyms=$lt_exclude_expsyms
-
-# Symbols that must always be exported.
-include_expsyms=$lt_include_expsyms
-
-# Commands necessary for linking programs (against libraries) with templates.
-prelink_cmds=$lt_prelink_cmds
-
-# Commands necessary for finishing linking programs.
-postlink_cmds=$lt_postlink_cmds
-
-# Specify filename containing input files.
-file_list_spec=$lt_file_list_spec
-
-# How to hardcode a shared library path into an executable.
-hardcode_action=$hardcode_action
-
-# ### END LIBTOOL CONFIG
-
-_LT_EOF
-
-    cat <<'_LT_EOF' >> "$cfgfile"
-
-# ### BEGIN FUNCTIONS SHARED WITH CONFIGURE
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x@S|@2 in
-    x)
-        ;;
-    *:)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\"
-        ;;
-    x:*)
-        eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\"
-        ;;
-    *)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in @S|@*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-
-# ### END FUNCTIONS SHARED WITH CONFIGURE
-
-_LT_EOF
-
-  case $host_os in
-  aix3*)
-    cat <<\_LT_EOF >> "$cfgfile"
-# AIX sometimes has problems with the GCC collect2 program.  For some
-# reason, if we set the COLLECT_NAMES environment variable, the problems
-# vanish in a puff of smoke.
-if test set != "${COLLECT_NAMES+set}"; then
-  COLLECT_NAMES=
-  export COLLECT_NAMES
-fi
-_LT_EOF
-    ;;
-  esac
-
-  
-  
-ltmain=$ac_aux_dir/ltmain.sh
-
-
-  # We use sed instead of cat because bash on DJGPP gets confused if
-  # if finds mixed CR/LF and LF-only lines.  Since sed operates in
-  # text mode, it properly converts lines to CR/LF.  This bash problem
-  # is reportedly fixed, but why not run on old versions too?
-  $SED '$q' "$ltmain" >> "$cfgfile" \
-     || (rm -f "$cfgfile"; exit 1)
-
-   mv -f "$cfgfile" "$ofile" ||
-    (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile")
-  chmod +x "$ofile"
-
- ;;
-
-  esac
-done # for ac_tag
-
-
-as_fn_exit 0
-_ACEOF
-ac_clean_CONFIG_STATUS=
-
-test $ac_write_fail = 0 ||
-  as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5
-
-
-# configure is writing to config.log, and then calls config.status.
-# config.status does its own redirection, appending to config.log.
-# Unfortunately, on DOS this fails, as config.log is still kept open
-# by configure, so config.status won't be able to write to it; its
-# output is simply discarded.  So we exec the FD to /dev/null,
-# effectively closing config.log, so it can be properly (re)opened and
-# appended to by config.status.  When coming back to configure, we
-# need to make the FD available again.
-if test "$no_create" != yes; then
-  ac_cs_success=:
-  case $CONFIG_STATUS in @%:@(
-  -*) :
-    ac_no_opts=-- ;; @%:@(
-  *) :
-    ac_no_opts= ;;
-esac
-  ac_config_status_args=
-  test "$silent" = yes &&
-    ac_config_status_args="$ac_config_status_args --quiet"
-  exec 5>/dev/null
-  $SHELL $ac_no_opts "$CONFIG_STATUS" $ac_config_status_args ||
-    ac_cs_success=false
-  exec 5>>config.log
-  # Use ||, not &&, to avoid exiting from the if with $? = 1, which
-  # would make configure fail if this is the last instruction.
-  $ac_cs_success || as_fn_exit 1
-fi
-if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5
-printf '%s\n' "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
-fi
-
diff --git a/experiments/wasm-gui/third_party/libXext/autom4te.cache/output.3 b/experiments/wasm-gui/third_party/libXext/autom4te.cache/output.3
deleted file mode 100644
index 5b9080d6b..000000000
--- a/experiments/wasm-gui/third_party/libXext/autom4te.cache/output.3
+++ /dev/null
@@ -1,24110 +0,0 @@
-@%:@! /bin/sh
-@%:@ Guess values for system-dependent variables and create Makefiles.
-@%:@ Generated by GNU Autoconf 2.73 for libXext 1.3.7.
-@%:@
-@%:@ Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>.
-@%:@ 
-@%:@ 
-@%:@ Copyright (C) 1992-1996, 1998-2017, 2020-2026 Free Software Foundation,
-@%:@ Inc.
-@%:@ 
-@%:@ 
-@%:@ This configure script is free software; the Free Software Foundation
-@%:@ gives unlimited permission to copy, distribute and modify it.
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else case e in @%:@(
-  e) case `(set -o) 2>/dev/null` in @%:@(
-  *posix*) :
-    set -o posix ;; @%:@(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-
-
-
-# Reset variables that may have inherited troublesome values from
-# the environment.
-
-# IFS needs to be set, to space, tab, and newline, in precisely that order.
-# (If _AS_PATH_WALK were called with IFS unset, it would have the
-# side effect of setting IFS to empty, thus disabling word splitting.)
-# Quoting is to prevent editors from complaining about space-tab.
-as_nl='
-'
-export as_nl
-IFS=" ""	$as_nl"
-
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# Ensure predictable behavior from utilities with locale-dependent output.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# We cannot yet rely on "unset" to work, but we need these variables
-# to be unset--not just set to an empty or harmless value--now, to
-# avoid bugs in old shells (e.g. pre-3.0 UWIN ksh).  This construct
-# also avoids known problems related to "unset" and subshell syntax
-# in other old shells (e.g. bash 2.01 and pdksh 5.2.14).
-for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH
-do eval test \${$as_var+y} \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-
-# Ensure that fds 0, 1, and 2 are open.
-if (exec 3>&0) 2>/dev/null; then :; else exec 0</dev/null; fi
-if (exec 3>&1) 2>/dev/null; then :; else exec 1>/dev/null; fi
-if (exec 3>&2)            ; then :; else exec 2>/dev/null; fi
-
-# The user is always right.
-if ${PATH_SEPARATOR+false} :; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in @%:@((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    test -r "$as_dir$0" && as_myself=$as_dir$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as 'sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  printf '%s\n' "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-
-# Use a proper internal environment variable to ensure we don't fall
-  # into an infinite loop, continuously re-executing ourselves.
-  if test x"${_as_can_reexec}" != xno && test "x$CONFIG_SHELL" != x; then
-    _as_can_reexec=no; export _as_can_reexec;
-    # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in @%:@ ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-case $@%:@ in @%:@ ((
-  0) exec $CONFIG_SHELL $as_opts "$as_myself" ;;
-  *) exec $CONFIG_SHELL $as_opts "$as_myself" "$@" ;;
-esac
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed 'exec'.
-printf '%s\n' "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-  fi
-  # We don't want this to propagate to other subprocesses.
-          { _as_can_reexec=; unset _as_can_reexec;}
-if test "x$CONFIG_SHELL" = x; then
-  as_bourne_compatible="if test \${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '\${1+\"\$@\"}'='\"\$@\"'
-  setopt NO_GLOB_SUBST
-else case e in @%:@(
-  e) case \`(set -o) 2>/dev/null\` in @%:@(
-  *posix*) :
-    set -o posix ;; @%:@(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-"
-  as_required="as_fn_return () { (exit \$1); }
-as_fn_success () { as_fn_return 0; }
-as_fn_failure () { as_fn_return 1; }
-as_fn_ret_success () { return 0; }
-as_fn_ret_failure () { return 1; }
-
-exitcode=0
-as_fn_success || { exitcode=1; echo as_fn_success failed.; }
-as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; }
-as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; }
-as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; }
-if ( set x; as_fn_ret_success y && test x = \"\$1\" )
-then :
-  
-else case e in @%:@(
-  e) exitcode=1; echo positional parameters were not saved. ;;
-esac
-fi
-test x\$exitcode = x0 || exit 1
-blah=\$(echo \$(echo blah))
-test x\"\$blah\" = xblah || exit 1
-test -x / || exit 1"
-  as_suggested="  as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO
-  as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO
-  eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" &&
-  test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1
-
-  test -n \"\${ZSH_VERSION+set}\${BASH_VERSION+set}\" || (
-    ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-    ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO
-    ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO
-    PATH=/empty FPATH=/empty; export PATH FPATH
-    test \"X\`printf %s \$ECHO\`\" = \"X\$ECHO\" \\
-      || test \"X\`print -r -- \$ECHO\`\" = \"X\$ECHO\" ) || exit 1
-test \$(( 1 + 1 )) = 2 || exit 1"
-  if (eval "$as_required") 2>/dev/null
-then :
-  as_have_required=yes
-else case e in @%:@(
-  e) as_have_required=no ;;
-esac
-fi
-  if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null
-then :
-  
-else case e in @%:@(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-  as_found=:
-  case $as_dir in @%:@(
-	 /*)
-	   for as_base in sh bash ksh sh5; do
-	     # Try only shells that exist, to save several forks.
-	     as_shell=$as_dir$as_base
-	     if { test -f "$as_shell" || test -f "$as_shell.exe"; } &&
-		    as_run=a "$as_shell" -c "$as_bourne_compatible""$as_required" 2>/dev/null
-then :
-  CONFIG_SHELL=$as_shell as_have_required=yes
-		   if as_run=a "$as_shell" -c "$as_bourne_compatible""$as_suggested" 2>/dev/null
-then :
-  break 2
-fi
-fi
-	   done;;
-       esac
-  as_found=false
-done
-IFS=$as_save_IFS
-if $as_found
-then :
-  
-else case e in @%:@(
-  e) if { test -f "$SHELL" || test -f "$SHELL.exe"; } &&
-	      as_run=a "$SHELL" -c "$as_bourne_compatible""$as_required" 2>/dev/null
-then :
-  CONFIG_SHELL=$SHELL as_have_required=yes
-fi ;;
-esac
-fi
-
-
-      if test "x$CONFIG_SHELL" != x
-then :
-  export CONFIG_SHELL
-             # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in @%:@ ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-case $@%:@ in @%:@ ((
-  0) exec $CONFIG_SHELL $as_opts "$as_myself" ;;
-  *) exec $CONFIG_SHELL $as_opts "$as_myself" "$@" ;;
-esac
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed 'exec'.
-printf '%s\n' "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-fi
-
-    if test x$as_have_required = xno
-then :
-  printf '%s\n' "$0: This script requires a shell more modern than all"
-  printf '%s\n' "$0: the shells that I found on your system."
-  if test ${ZSH_VERSION+y} ; then
-    printf '%s\n' "$0: In particular, zsh $ZSH_VERSION has bugs and should"
-    printf '%s\n' "$0: be upgraded to zsh 4.3.4 or later."
-  else
-    printf '%s\n' "$0: Please tell bug-autoconf@gnu.org and
-$0: https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues
-$0: about your system, including any error possibly output
-$0: before this message. Then install a modern shell, or
-$0: manually run the script under such a shell if you do
-$0: have one."
-  fi
-  exit 1
-fi ;;
-esac
-fi
-fi
-SHELL=${CONFIG_SHELL-/bin/sh}
-export SHELL
-# Unset more variables known to interfere with behavior of common tools.
-CLICOLOR_FORCE= GREP_OPTIONS=
-unset CLICOLOR_FORCE GREP_OPTIONS
-
-## --------------------- ##
-## M4sh Shell Functions. ##
-## --------------------- ##
-@%:@ as_fn_unset VAR
-@%:@ ---------------
-@%:@ Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-
-@%:@ as_fn_set_status STATUS
-@%:@ -----------------------
-@%:@ Set @S|@? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} @%:@ as_fn_set_status
-
-@%:@ as_fn_exit STATUS
-@%:@ -----------------
-@%:@ Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} @%:@ as_fn_exit
-
-@%:@ as_fn_mkdir_p
-@%:@ -------------
-@%:@ Create "@S|@as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`printf '%s\n' "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} @%:@ as_fn_mkdir_p
-
-@%:@ as_fn_executable_p FILE
-@%:@ -----------------------
-@%:@ Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} @%:@ as_fn_executable_p
-@%:@ as_fn_append VAR VALUE
-@%:@ ----------------------
-@%:@ Append the text in VALUE to the end of the definition contained in VAR. Take
-@%:@ advantage of any shell optimizations that allow amortized linear growth over
-@%:@ repeated appends, instead of the typical quadratic growth present in naive
-@%:@ implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null
-then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else case e in @%:@(
-  e) as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  } ;;
-esac
-fi # as_fn_append
-
-@%:@ as_fn_arith ARG...
-@%:@ ------------------
-@%:@ Perform arithmetic evaluation on the ARGs, and store the result in the
-@%:@ global @S|@as_val. Take advantage of shells that can avoid forks. The arguments
-@%:@ must be portable across @S|@(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null
-then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else case e in @%:@(
-  e) as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  } ;;
-esac
-fi # as_fn_arith
-
-
-@%:@ as_fn_error STATUS ERROR [LINENO LOG_FD]
-@%:@ ----------------------------------------
-@%:@ Output "`basename @S|@0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-@%:@ provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-@%:@ script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  printf '%s\n' "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} @%:@ as_fn_error
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-
-  as_lineno_1=$LINENO as_lineno_1a=$LINENO
-  as_lineno_2=$LINENO as_lineno_2a=$LINENO
-  eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" &&
-  test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || {
-  # Blame Lee E. McMahon (1931-1989) for sed's syntax.  :-)
-  sed -n '
-    p
-    /[$]LINENO/=
-  ' <$as_myself |
-    sed '
-      t clear
-      :clear
-      s/[$]LINENO.*/&-/
-      t lineno
-      b
-      :lineno
-      N
-      :loop
-      s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/
-      t loop
-      s/-\n.*//
-    ' >$as_me.lineno &&
-  chmod +x "$as_me.lineno" ||
-    { printf '%s\n' "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; }
-
-  # If we had to re-execute with $CONFIG_SHELL, we're ensured to have
-  # already done that, so ensure we don't try to do so again and fall
-  # in an infinite loop.  This has already happened in practice.
-  _as_can_reexec=no; export _as_can_reexec
-  # Don't try to exec as it changes $[0], causing all sort of problems
-  # (the dirname of $[0] is not the place where we might find the
-  # original and so on.  Autoconf is especially sensitive to this).
-  . "./$as_me.lineno"
-  # Exit status is that of the last command.
-  exit
-}
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both 'ln -s file dir' and 'ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; 'ln -s' creates a wrapper executable.
-    # In both cases, we have to default to 'cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_sed_cpp="y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g"
-as_tr_cpp="eval sed '$as_sed_cpp'" # deprecated
-
-# Sed expression to map a string onto a valid variable name.
-as_sed_sh="y%*+%pp%;s%[^_$as_cr_alnum]%_%g"
-as_tr_sh="eval sed '$as_sed_sh'" # deprecated
-
-SHELL=${CONFIG_SHELL-/bin/sh}
-
-as_awk_strverscmp='
-  # Use only awk features that work with 7th edition Unix awk (1978).
-  # My, what an old awk you have, Mr. Solaris!
-  END {
-    while (length(v1) && length(v2)) {
-      # Set d1 to be the next thing to compare from v1, and likewise for d2.
-      # Normally this is a single character, but if v1 and v2 contain digits,
-      # compare them as integers and fractions as strverscmp does.
-      if (v1 ~ /^[0-9]/ && v2 ~ /^[0-9]/) {
-	# Split v1 and v2 into their leading digit string components d1 and d2,
-	# and advance v1 and v2 past the leading digit strings.
-	for (len1 = 1; substr(v1, len1 + 1) ~ /^[0-9]/; len1++) continue
-	for (len2 = 1; substr(v2, len2 + 1) ~ /^[0-9]/; len2++) continue
-	d1 = substr(v1, 1, len1); v1 = substr(v1, len1 + 1)
-	d2 = substr(v2, 1, len2); v2 = substr(v2, len2 + 1)
-	if (d1 ~ /^0/) {
-	  if (d2 ~ /^0/) {
-	    # Compare two fractions.
-	    while (d1 ~ /^0/ && d2 ~ /^0/) {
-	      d1 = substr(d1, 2); len1--
-	      d2 = substr(d2, 2); len2--
-	    }
-	    if (len1 != len2 && ! (len1 && len2 && substr(d1, 1, 1) == substr(d2, 1, 1))) {
-	      # The two components differ in length, and the common prefix
-	      # contains only leading zeros.  Consider the longer to be less.
-	      d1 = -len1
-	      d2 = -len2
-	    } else {
-	      # Otherwise, compare as strings.
-	      d1 = "x" d1
-	      d2 = "x" d2
-	    }
-	  } else {
-	    # A fraction is less than an integer.
-	    exit 1
-	  }
-	} else {
-	  if (d2 ~ /^0/) {
-	    # An integer is greater than a fraction.
-	    exit 2
-	  } else {
-	    # Compare two integers.
-	    d1 += 0
-	    d2 += 0
-	  }
-	}
-      } else {
-	# The normal case, without worrying about digits.
-	d1 = substr(v1, 1, 1); v1 = substr(v1, 2)
-	d2 = substr(v2, 1, 1); v2 = substr(v2, 2)
-      }
-      if (d1 < d2) exit 1
-      if (d1 > d2) exit 2
-    }
-    # Beware Solaris 11 /usr/xgp4/bin/awk, which mishandles some
-    # comparisons of empty strings to integers.  For example,
-    # LC_ALL=C /usr/xpg4/bin/awk "BEGIN {if (-1 < \"\") print \"a\"}"
-    # prints "a".
-    if (length(v2)) exit 1
-    if (length(v1)) exit 2
-  }
-'
-
-test -n "$DJDIR" || exec 7<&0 </dev/null
-exec 6>&1
-
-# Name of the host.
-# hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status,
-# so uname gets run too.
-ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q`
-
-#
-# Initializations.
-#
-ac_default_prefix=/usr/local
-ac_clean_CONFIG_STATUS=
-ac_clean_files=
-ac_config_libobj_dir=.
-LIB@&t@OBJS=
-cross_compiling=no
-subdirs=
-MFLAGS=
-MAKEFLAGS=
-
-# Identity of this package.
-PACKAGE_NAME='libXext'
-PACKAGE_TARNAME='libXext'
-PACKAGE_VERSION='1.3.7'
-PACKAGE_STRING='libXext 1.3.7'
-PACKAGE_BUGREPORT='https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues'
-PACKAGE_URL=''
-
-ac_unique_file="Makefile.am"
-# Factoring default headers for most tests.
-ac_includes_default="\
-#include <stddef.h>
-#ifdef HAVE_STDIO_H
-# include <stdio.h>
-#endif
-#ifdef HAVE_STDLIB_H
-# include <stdlib.h>
-#endif
-#ifdef HAVE_STRING_H
-# include <string.h>
-#endif
-#ifdef HAVE_INTTYPES_H
-# include <inttypes.h>
-#endif
-#ifdef HAVE_STDINT_H
-# include <stdint.h>
-#endif
-#ifdef HAVE_STRINGS_H
-# include <strings.h>
-#endif
-#ifdef HAVE_SYS_TYPES_H
-# include <sys/types.h>
-#endif
-#ifdef HAVE_SYS_STAT_H
-# include <sys/stat.h>
-#endif
-#ifdef HAVE_UNISTD_H
-# include <unistd.h>
-#endif"
-
-ac_header_c_list=
-ac_subst_vars='am__EXEEXT_FALSE
-am__EXEEXT_TRUE
-LTLIBOBJS
-MAKE_LINT_LIB_FALSE
-MAKE_LINT_LIB_TRUE
-LINTLIB
-LINT_FALSE
-LINT_TRUE
-LINT_FLAGS
-LINT
-LIB@&t@OBJS
-XEXT_LIBS
-XEXT_CFLAGS
-XEXT_SOREV
-XTMALLOC_ZERO_CFLAGS
-XMALLOC_ZERO_CFLAGS
-MALLOC_ZERO_CFLAGS
-HAVE_STYLESHEETS_FALSE
-HAVE_STYLESHEETS_TRUE
-XSL_STYLESHEET
-STYLESHEET_SRCDIR
-XORG_SGML_PATH
-HAVE_XSLTPROC_FALSE
-HAVE_XSLTPROC_TRUE
-XSLTPROC
-HAVE_FOP_FALSE
-HAVE_FOP_TRUE
-FOP
-HAVE_XMLTO_FALSE
-HAVE_XMLTO_TRUE
-HAVE_XMLTO_TEXT_FALSE
-HAVE_XMLTO_TEXT_TRUE
-XMLTO
-ENABLE_SPECS_FALSE
-ENABLE_SPECS_TRUE
-MAN_SUBSTS
-XORG_MAN_PAGE
-ADMIN_MAN_DIR
-DRIVER_MAN_DIR
-MISC_MAN_DIR
-FILE_MAN_DIR
-LIB_MAN_DIR
-APP_MAN_DIR
-ADMIN_MAN_SUFFIX
-DRIVER_MAN_SUFFIX
-MISC_MAN_SUFFIX
-FILE_MAN_SUFFIX
-LIB_MAN_SUFFIX
-APP_MAN_SUFFIX
-INSTALL_CMD
-PKG_CONFIG_LIBDIR
-PKG_CONFIG_PATH
-PKG_CONFIG
-CHANGELOG_CMD
-STRICT_CFLAGS
-CWARNFLAGS
-BASE_CFLAGS
-LT_SYS_LIBRARY_PATH
-OTOOL64
-OTOOL
-LIPO
-NMEDIT
-DSYMUTIL
-MANIFEST_TOOL
-RANLIB
-ac_ct_AR
-AR
-DLLTOOL
-OBJDUMP
-FILECMD
-LN_S
-NM
-ac_ct_DUMPBIN
-DUMPBIN
-LD
-FGREP
-EGREP
-GREP
-SED
-host_os
-host_vendor
-host_cpu
-host
-build_os
-build_vendor
-build_cpu
-build
-LIBTOOL
-am__xargs_n
-am__rm_f_notfound
-AM_BACKSLASH
-AM_DEFAULT_VERBOSITY
-AM_DEFAULT_V
-AM_V
-CSCOPE
-ETAGS
-CTAGS
-am__fastdepCC_FALSE
-am__fastdepCC_TRUE
-CCDEPMODE
-am__nodep
-AMDEPBACKSLASH
-AMDEP_FALSE
-AMDEP_TRUE
-am__include
-DEPDIR
-am__untar
-am__tar
-AMTAR
-am__leading_dot
-SET_MAKE
-AWK
-mkdir_p
-MKDIR_P
-INSTALL_STRIP_PROGRAM
-STRIP
-install_sh
-MAKEINFO
-AUTOHEADER
-AUTOMAKE
-AUTOCONF
-ACLOCAL
-VERSION
-PACKAGE
-CYGPATH_W
-am__isrc
-INSTALL_DATA
-INSTALL_SCRIPT
-INSTALL_PROGRAM
-OBJEXT
-EXEEXT
-ac_ct_CC
-CPPFLAGS
-LDFLAGS
-CFLAGS
-CC
-ECHO_T
-ECHO_N
-ECHO_C
-target_alias
-host_alias
-build_alias
-LIBS
-DEFS
-mandir
-localedir
-libdir
-psdir
-pdfdir
-dvidir
-htmldir
-infodir
-docdir
-oldincludedir
-includedir
-runstatedir
-localstatedir
-sharedstatedir
-sysconfdir
-datadir
-datarootdir
-libexecdir
-sbindir
-bindir
-program_transform_name
-prefix
-exec_prefix
-PACKAGE_URL
-PACKAGE_BUGREPORT
-PACKAGE_STRING
-PACKAGE_VERSION
-PACKAGE_TARNAME
-PACKAGE_NAME
-PATH_SEPARATOR
-SHELL
-am__quote'
-ac_subst_files=''
-ac_user_opts='
-enable_option_checking
-enable_dependency_tracking
-enable_silent_rules
-enable_shared
-enable_static
-enable_pic
-with_pic
-enable_fast_install
-enable_aix_soname
-with_aix_soname
-with_gnu_ld
-with_sysroot
-enable_libtool_lock
-enable_selective_werror
-enable_strict_compilation
-enable_specs
-with_xmlto
-with_fop
-with_xsltproc
-enable_malloc0returnsnull
-with_lint
-enable_lint_library
-'
-      ac_precious_vars='build_alias
-host_alias
-target_alias
-CC
-CFLAGS
-LDFLAGS
-LIBS
-CPPFLAGS
-LT_SYS_LIBRARY_PATH
-PKG_CONFIG
-PKG_CONFIG_PATH
-PKG_CONFIG_LIBDIR
-XMLTO
-FOP
-XSLTPROC
-XEXT_CFLAGS
-XEXT_LIBS
-LINT
-LINT_FLAGS'
-
-
-# Initialize some variables set by options.
-ac_init_help=
-ac_init_version=false
-ac_unrecognized_opts=
-ac_unrecognized_sep=
-# The variables have the same names as the options, with
-# dashes changed to underlines.
-cache_file=/dev/null
-exec_prefix=NONE
-no_create=
-no_recursion=
-prefix=NONE
-program_prefix=NONE
-program_suffix=NONE
-program_transform_name=s,x,x,
-silent=
-site=
-srcdir=
-verbose=
-x_includes=NONE
-x_libraries=NONE
-
-# Installation directory options.
-# These are left unexpanded so users can "make install exec_prefix=/foo"
-# and all the variables that are supposed to be based on exec_prefix
-# by default will actually change.
-# Use braces instead of parens because sh, perl, etc. also accept them.
-# (The list follows the same order as the GNU Coding Standards.)
-bindir='${exec_prefix}/bin'
-sbindir='${exec_prefix}/sbin'
-libexecdir='${exec_prefix}/libexec'
-datarootdir='${prefix}/share'
-datadir='${datarootdir}'
-sysconfdir='${prefix}/etc'
-sharedstatedir='${prefix}/com'
-localstatedir='${prefix}/var'
-runstatedir='${localstatedir}/run'
-includedir='${prefix}/include'
-oldincludedir='/usr/include'
-docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
-infodir='${datarootdir}/info'
-htmldir='${docdir}'
-dvidir='${docdir}'
-pdfdir='${docdir}'
-psdir='${docdir}'
-libdir='${exec_prefix}/lib'
-localedir='${datarootdir}/locale'
-mandir='${datarootdir}/man'
-
-ac_prev=
-ac_dashdash=
-for ac_option
-do
-  # If the previous option needs an argument, assign it.
-  if test -n "$ac_prev"; then
-    eval $ac_prev=\$ac_option
-    ac_prev=
-    continue
-  fi
-
-  case $ac_option in
-  *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;;
-  *=)   ac_optarg= ;;
-  *)    ac_optarg=yes ;;
-  esac
-
-  case $ac_dashdash$ac_option in
-  --)
-    ac_dashdash=yes ;;
-
-  -bindir | --bindir | --bindi | --bind | --bin | --bi)
-    ac_prev=bindir ;;
-  -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*)
-    bindir=$ac_optarg ;;
-
-  -build | --build | --buil | --bui | --bu)
-    ac_prev=build_alias ;;
-  -build=* | --build=* | --buil=* | --bui=* | --bu=*)
-    build_alias=$ac_optarg ;;
-
-  -cache-file | --cache-file | --cache-fil | --cache-fi \
-  | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c)
-    ac_prev=cache_file ;;
-  -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \
-  | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*)
-    cache_file=$ac_optarg ;;
-
-  --config-cache | -C)
-    cache_file=config.cache ;;
-
-  -datadir | --datadir | --datadi | --datad)
-    ac_prev=datadir ;;
-  -datadir=* | --datadir=* | --datadi=* | --datad=*)
-    datadir=$ac_optarg ;;
-
-  -datarootdir | --datarootdir | --datarootdi | --datarootd | --dataroot \
-  | --dataroo | --dataro | --datar)
-    ac_prev=datarootdir ;;
-  -datarootdir=* | --datarootdir=* | --datarootdi=* | --datarootd=* \
-  | --dataroot=* | --dataroo=* | --dataro=* | --datar=*)
-    datarootdir=$ac_optarg ;;
-
-  -disable-* | --disable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=no ;;
-
-  -docdir | --docdir | --docdi | --doc | --do)
-    ac_prev=docdir ;;
-  -docdir=* | --docdir=* | --docdi=* | --doc=* | --do=*)
-    docdir=$ac_optarg ;;
-
-  -dvidir | --dvidir | --dvidi | --dvid | --dvi | --dv)
-    ac_prev=dvidir ;;
-  -dvidir=* | --dvidir=* | --dvidi=* | --dvid=* | --dvi=* | --dv=*)
-    dvidir=$ac_optarg ;;
-
-  -enable-* | --enable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=\$ac_optarg ;;
-
-  -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \
-  | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \
-  | --exec | --exe | --ex)
-    ac_prev=exec_prefix ;;
-  -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \
-  | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \
-  | --exec=* | --exe=* | --ex=*)
-    exec_prefix=$ac_optarg ;;
-
-  -gas | --gas | --ga | --g)
-    # Obsolete; use --with-gas.
-    with_gas=yes ;;
-
-  -help | --help | --hel | --he | -h)
-    ac_init_help=long ;;
-  -help=r* | --help=r* | --hel=r* | --he=r* | -hr*)
-    ac_init_help=recursive ;;
-  -help=s* | --help=s* | --hel=s* | --he=s* | -hs*)
-    ac_init_help=short ;;
-
-  -host | --host | --hos | --ho)
-    ac_prev=host_alias ;;
-  -host=* | --host=* | --hos=* | --ho=*)
-    host_alias=$ac_optarg ;;
-
-  -htmldir | --htmldir | --htmldi | --htmld | --html | --htm | --ht)
-    ac_prev=htmldir ;;
-  -htmldir=* | --htmldir=* | --htmldi=* | --htmld=* | --html=* | --htm=* \
-  | --ht=*)
-    htmldir=$ac_optarg ;;
-
-  -includedir | --includedir | --includedi | --included | --include \
-  | --includ | --inclu | --incl | --inc)
-    ac_prev=includedir ;;
-  -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \
-  | --includ=* | --inclu=* | --incl=* | --inc=*)
-    includedir=$ac_optarg ;;
-
-  -infodir | --infodir | --infodi | --infod | --info | --inf)
-    ac_prev=infodir ;;
-  -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*)
-    infodir=$ac_optarg ;;
-
-  -libdir | --libdir | --libdi | --libd)
-    ac_prev=libdir ;;
-  -libdir=* | --libdir=* | --libdi=* | --libd=*)
-    libdir=$ac_optarg ;;
-
-  -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \
-  | --libexe | --libex | --libe)
-    ac_prev=libexecdir ;;
-  -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \
-  | --libexe=* | --libex=* | --libe=*)
-    libexecdir=$ac_optarg ;;
-
-  -localedir | --localedir | --localedi | --localed | --locale)
-    ac_prev=localedir ;;
-  -localedir=* | --localedir=* | --localedi=* | --localed=* | --locale=*)
-    localedir=$ac_optarg ;;
-
-  -localstatedir | --localstatedir | --localstatedi | --localstated \
-  | --localstate | --localstat | --localsta | --localst | --locals)
-    ac_prev=localstatedir ;;
-  -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \
-  | --localstate=* | --localstat=* | --localsta=* | --localst=* | --locals=*)
-    localstatedir=$ac_optarg ;;
-
-  -mandir | --mandir | --mandi | --mand | --man | --ma | --m)
-    ac_prev=mandir ;;
-  -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*)
-    mandir=$ac_optarg ;;
-
-  -nfp | --nfp | --nf)
-    # Obsolete; use --without-fp.
-    with_fp=no ;;
-
-  -no-create | --no-create | --no-creat | --no-crea | --no-cre \
-  | --no-cr | --no-c | -n)
-    no_create=yes ;;
-
-  -no-recursion | --no-recursion | --no-recursio | --no-recursi \
-  | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r)
-    no_recursion=yes ;;
-
-  -oldincludedir | --oldincludedir | --oldincludedi | --oldincluded \
-  | --oldinclude | --oldinclud | --oldinclu | --oldincl | --oldinc \
-  | --oldin | --oldi | --old | --ol | --o)
-    ac_prev=oldincludedir ;;
-  -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \
-  | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \
-  | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*)
-    oldincludedir=$ac_optarg ;;
-
-  -prefix | --prefix | --prefi | --pref | --pre | --pr | --p)
-    ac_prev=prefix ;;
-  -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*)
-    prefix=$ac_optarg ;;
-
-  -program-prefix | --program-prefix | --program-prefi | --program-pref \
-  | --program-pre | --program-pr | --program-p)
-    ac_prev=program_prefix ;;
-  -program-prefix=* | --program-prefix=* | --program-prefi=* \
-  | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*)
-    program_prefix=$ac_optarg ;;
-
-  -program-suffix | --program-suffix | --program-suffi | --program-suff \
-  | --program-suf | --program-su | --program-s)
-    ac_prev=program_suffix ;;
-  -program-suffix=* | --program-suffix=* | --program-suffi=* \
-  | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*)
-    program_suffix=$ac_optarg ;;
-
-  -program-transform-name | --program-transform-name \
-  | --program-transform-nam | --program-transform-na \
-  | --program-transform-n | --program-transform- \
-  | --program-transform | --program-transfor \
-  | --program-transfo | --program-transf \
-  | --program-trans | --program-tran \
-  | --progr-tra | --program-tr | --program-t)
-    ac_prev=program_transform_name ;;
-  -program-transform-name=* | --program-transform-name=* \
-  | --program-transform-nam=* | --program-transform-na=* \
-  | --program-transform-n=* | --program-transform-=* \
-  | --program-transform=* | --program-transfor=* \
-  | --program-transfo=* | --program-transf=* \
-  | --program-trans=* | --program-tran=* \
-  | --progr-tra=* | --program-tr=* | --program-t=*)
-    program_transform_name=$ac_optarg ;;
-
-  -pdfdir | --pdfdir | --pdfdi | --pdfd | --pdf | --pd)
-    ac_prev=pdfdir ;;
-  -pdfdir=* | --pdfdir=* | --pdfdi=* | --pdfd=* | --pdf=* | --pd=*)
-    pdfdir=$ac_optarg ;;
-
-  -psdir | --psdir | --psdi | --psd | --ps)
-    ac_prev=psdir ;;
-  -psdir=* | --psdir=* | --psdi=* | --psd=* | --ps=*)
-    psdir=$ac_optarg ;;
-
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil)
-    silent=yes ;;
-
-  -runstatedir | --runstatedir | --runstatedi | --runstated \
-  | --runstate | --runstat | --runsta | --runst | --runs \
-  | --run | --ru | --r)
-    ac_prev=runstatedir ;;
-  -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \
-  | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \
-  | --run=* | --ru=* | --r=*)
-    runstatedir=$ac_optarg ;;
-
-  -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
-    ac_prev=sbindir ;;
-  -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
-  | --sbi=* | --sb=*)
-    sbindir=$ac_optarg ;;
-
-  -sharedstatedir | --sharedstatedir | --sharedstatedi \
-  | --sharedstated | --sharedstate | --sharedstat | --sharedsta \
-  | --sharedst | --shareds | --shared | --share | --shar \
-  | --sha | --sh)
-    ac_prev=sharedstatedir ;;
-  -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \
-  | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \
-  | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \
-  | --sha=* | --sh=*)
-    sharedstatedir=$ac_optarg ;;
-
-  -site | --site | --sit)
-    ac_prev=site ;;
-  -site=* | --site=* | --sit=*)
-    site=$ac_optarg ;;
-
-  -srcdir | --srcdir | --srcdi | --srcd | --src | --sr)
-    ac_prev=srcdir ;;
-  -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*)
-    srcdir=$ac_optarg ;;
-
-  -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \
-  | --syscon | --sysco | --sysc | --sys | --sy)
-    ac_prev=sysconfdir ;;
-  -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \
-  | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*)
-    sysconfdir=$ac_optarg ;;
-
-  -target | --target | --targe | --targ | --tar | --ta | --t)
-    ac_prev=target_alias ;;
-  -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*)
-    target_alias=$ac_optarg ;;
-
-  -v | -verbose | --verbose | --verbos | --verbo | --verb)
-    verbose=yes ;;
-
-  -version | --version | --versio | --versi | --vers | -V)
-    ac_init_version=: ;;
-
-  -with-* | --with-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=\$ac_optarg ;;
-
-  -without-* | --without-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=no ;;
-
-  --x)
-    # Obsolete; use --with-x.
-    with_x=yes ;;
-
-  -x-includes | --x-includes | --x-include | --x-includ | --x-inclu \
-  | --x-incl | --x-inc | --x-in | --x-i)
-    ac_prev=x_includes ;;
-  -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \
-  | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*)
-    x_includes=$ac_optarg ;;
-
-  -x-libraries | --x-libraries | --x-librarie | --x-librari \
-  | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l)
-    ac_prev=x_libraries ;;
-  -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \
-  | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*)
-    x_libraries=$ac_optarg ;;
-
-  -*) as_fn_error $? "unrecognized option: '$ac_option'
-Try '$0 --help' for more information"
-    ;;
-
-  *=*)
-    ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='`
-    # Reject names that are not valid shell variable names.
-    case $ac_envvar in #(
-      '' | [0-9]* | *[!_$as_cr_alnum]* )
-      as_fn_error $? "invalid variable name: '$ac_envvar'" ;;
-    esac
-    eval $ac_envvar=\$ac_optarg
-    export $ac_envvar ;;
-
-  *)
-    # FIXME: should be removed in autoconf 3.0.
-    printf '%s\n' "$as_me: WARNING: you should use --build, --host, --target" >&2
-    expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null &&
-      printf '%s\n' "$as_me: WARNING: invalid host type: $ac_option" >&2
-    : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}"
-    ;;
-
-  esac
-done
-
-if test -n "$ac_prev"; then
-  ac_option=--`printf '%s\n' $ac_prev | sed 's/_/-/g'`
-  as_fn_error $? "missing argument to $ac_option"
-fi
-
-if test -n "$ac_unrecognized_opts"; then
-  case $enable_option_checking in
-    no) ;;
-    fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;;
-    *)     printf '%s\n' "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;;
-  esac
-fi
-
-# Check all directory arguments for consistency.
-for ac_var in	exec_prefix prefix bindir sbindir libexecdir datarootdir \
-		datadir sysconfdir sharedstatedir localstatedir includedir \
-		oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
-		libdir localedir mandir runstatedir
-do
-  eval ac_val=\$$ac_var
-  # Remove trailing slashes.
-  case $ac_val in
-    */ )
-      ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'`
-      eval $ac_var=\$ac_val;;
-  esac
-  # Be sure to have absolute directory names.
-  case $ac_val in
-    [\\/$]* | ?:[\\/]* )  continue;;
-    NONE | '' ) case $ac_var in *prefix ) continue;; esac;;
-  esac
-  as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val"
-done
-
-# There might be people who depend on the old broken behavior: '$host'
-# used to hold the argument of --host etc.
-# FIXME: To remove some day.
-build=$build_alias
-host=$host_alias
-target=$target_alias
-
-# FIXME: To remove some day.
-if test "x$host_alias" != x; then
-  if test "x$build_alias" = x; then
-    cross_compiling=maybe
-  elif test "x$build_alias" != "x$host_alias"; then
-    cross_compiling=yes
-  fi
-fi
-
-ac_tool_prefix=
-test -n "$host_alias" && ac_tool_prefix=$host_alias-
-
-test "$silent" = yes && exec 6>/dev/null
-
-
-ac_pwd=`pwd` && test -n "$ac_pwd" &&
-ac_ls_di=`ls -di .` &&
-ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` ||
-  as_fn_error $? "working directory cannot be determined"
-test "X$ac_ls_di" = "X$ac_pwd_ls_di" ||
-  as_fn_error $? "pwd does not report name of working directory"
-
-
-# Find the source files, if location was not specified.
-if test -z "$srcdir"; then
-  ac_srcdir_defaulted=yes
-  # Try the directory containing this script, then the parent directory.
-  ac_confdir=`$as_dirname -- "$as_myself" ||
-$as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_myself" : 'X\(//\)[^/]' \| \
-	 X"$as_myself" : 'X\(//\)$' \| \
-	 X"$as_myself" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_myself" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  srcdir=$ac_confdir
-  if test ! -r "$srcdir/$ac_unique_file"; then
-    srcdir=..
-  fi
-else
-  ac_srcdir_defaulted=no
-fi
-if test ! -r "$srcdir/$ac_unique_file"; then
-  test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .."
-  as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir"
-fi
-ac_msg="sources are in $srcdir, but 'cd $srcdir' does not work"
-ac_abs_confdir=`(
-	cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg"
-	pwd)`
-# When building in place, set srcdir=.
-if test "$ac_abs_confdir" = "$ac_pwd"; then
-  srcdir=.
-fi
-# Remove unnecessary trailing slashes from srcdir.
-# Double slashes in file names in object file debugging info
-# mess up M-x gdb in Emacs.
-case $srcdir in
-*/) srcdir=`expr "X$srcdir" : 'X\(.*[^/]\)' \| "X$srcdir" : 'X\(.*\)'`;;
-esac
-for ac_var in $ac_precious_vars; do
-  eval ac_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_env_${ac_var}_value=\$${ac_var}
-  eval ac_cv_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_cv_env_${ac_var}_value=\$${ac_var}
-done
-
-#
-# Report the --help message.
-#
-if test "$ac_init_help" = "long"; then
-  # Omit some internal or obsolete options to make the list less imposing.
-  # This message is too long to be a string in the A/UX 3.1 sh.
-  cat <<_ACEOF
-'configure' configures libXext 1.3.7 to adapt to many kinds of systems.
-
-Usage: $0 [OPTION]... [VAR=VALUE]...
-
-To assign environment variables (e.g., CC, CFLAGS...), specify them as
-VAR=VALUE.  See below for descriptions of some of the useful variables.
-
-Defaults for the options are specified in brackets.
-
-Configuration:
-  -h, --help              display this help and exit
-      --help=short        display options specific to this package
-      --help=recursive    display the short help of all the included packages
-  -V, --version           display version information and exit
-  -q, --quiet, --silent   do not print 'checking ...' messages
-      --cache-file=FILE   cache test results in FILE [disabled]
-  -C, --config-cache      alias for '--cache-file=config.cache'
-  -n, --no-create         do not create output files
-      --srcdir=DIR        find the sources in DIR [configure dir or '..']
-
-Installation directories:
-  --prefix=PREFIX         install architecture-independent files in PREFIX
-                          @<:@@S|@ac_default_prefix@:>@
-  --exec-prefix=EPREFIX   install architecture-dependent files in EPREFIX
-                          @<:@PREFIX@:>@
-
-By default, 'make install' will install all the files in
-'$ac_default_prefix/bin', '$ac_default_prefix/lib' etc.  You can specify
-an installation prefix other than '$ac_default_prefix' using '--prefix',
-for instance '--prefix=\$HOME'.
-
-For better control, use the options below.
-
-Fine tuning of the installation directories:
-  --bindir=DIR            user executables [EPREFIX/bin]
-  --sbindir=DIR           system admin executables [EPREFIX/sbin]
-  --libexecdir=DIR        program executables [EPREFIX/libexec]
-  --sysconfdir=DIR        read-only single-machine data [PREFIX/etc]
-  --sharedstatedir=DIR    modifiable architecture-independent data [PREFIX/com]
-  --localstatedir=DIR     modifiable single-machine data [PREFIX/var]
-  --runstatedir=DIR       modifiable per-process data [LOCALSTATEDIR/run]
-  --libdir=DIR            object code libraries [EPREFIX/lib]
-  --includedir=DIR        C header files [PREFIX/include]
-  --oldincludedir=DIR     C header files for non-gcc [/usr/include]
-  --datarootdir=DIR       read-only arch.-independent data root [PREFIX/share]
-  --datadir=DIR           read-only architecture-independent data [DATAROOTDIR]
-  --infodir=DIR           info documentation [DATAROOTDIR/info]
-  --localedir=DIR         locale-dependent data [DATAROOTDIR/locale]
-  --mandir=DIR            man documentation [DATAROOTDIR/man]
-  --docdir=DIR            documentation root @<:@DATAROOTDIR/doc/libXext@:>@
-  --htmldir=DIR           html documentation [DOCDIR]
-  --dvidir=DIR            dvi documentation [DOCDIR]
-  --pdfdir=DIR            pdf documentation [DOCDIR]
-  --psdir=DIR             ps documentation [DOCDIR]
-_ACEOF
-
-  cat <<\_ACEOF
-
-Program names:
-  --program-prefix=PREFIX            prepend PREFIX to installed program names
-  --program-suffix=SUFFIX            append SUFFIX to installed program names
-  --program-transform-name=PROGRAM   run sed PROGRAM on installed program names
-
-System types:
-  --build=BUILD     configure for building on BUILD [guessed]
-  --host=HOST       cross-compile to build programs to run on HOST [BUILD]
-_ACEOF
-fi
-
-if test -n "$ac_init_help"; then
-  case $ac_init_help in
-     short | recursive ) echo "Configuration of libXext 1.3.7:";;
-   esac
-  cat <<\_ACEOF
-
-Optional Features:
-  --disable-option-checking  ignore unrecognized --enable/--with options
-  --disable-FEATURE       do not include FEATURE (same as --enable-FEATURE=no)
-  --enable-FEATURE[=ARG]  include FEATURE [ARG=yes]
-  --enable-dependency-tracking 
-                          do not reject slow dependency extractors
-  --disable-dependency-tracking 
-                          speeds up one-time build
-  --enable-silent-rules   less verbose build output (undo: "make V=1")
-  --disable-silent-rules  verbose build output (undo: "make V=0")
-  --enable-shared@<:@=PKGS@:>@  build shared libraries @<:@default=yes@:>@
-  --enable-static@<:@=PKGS@:>@  build static libraries @<:@default=yes@:>@
-  --enable-pic@<:@=PKGS@:>@     try to use only PIC/non-PIC objects @<:@default=use
-                          both@:>@
-  --enable-fast-install@<:@=PKGS@:>@ 
-                          optimize for fast installation @<:@default=yes@:>@
-  --enable-aix-soname=aix|svr4|both 
-                          shared library versioning (aka "SONAME") variant to
-                          provide on AIX, @<:@default=aix@:>@.
-  --disable-libtool-lock  avoid locking (might break parallel builds)
-  --disable-selective-werror 
-                          Turn off selective compiler errors. (default:
-                          enabled)
-  --enable-strict-compilation 
-                          Enable all warnings from compiler and make them
-                          errors (default: disabled)
-  --enable-specs          Enable building the specs (default: yes)
-  --enable-malloc0returnsnull 
-                          assume malloc(0) can return NULL (default: yes)
-  --enable-lint-library   Create lint library (default: disabled)
-
-Optional Packages:
-  --with-PACKAGE[=ARG]    use PACKAGE [ARG=yes]
-  --without-PACKAGE       do not use PACKAGE (same as --with-PACKAGE=no)
-  --with-gnu-ld           assume the C compiler uses GNU ld @<:@default=no@:>@
-  --with-sysroot@<:@=DIR@:>@    Search for dependent libraries within DIR (or the
-                          compiler's sysroot if not specified).
-  --with-xmlto            Use xmlto to regenerate documentation (default:
-                          auto)
-  --with-fop              Use fop to regenerate documentation (default: auto)
-  --with-xsltproc         Use xsltproc for the transformation of XML documents
-                          (default: auto)
-  --with-lint             Use a lint-style source code checker (default:
-                          disabled)
-
-Some influential environment variables:
-  CC          C compiler command
-  CFLAGS      C compiler flags
-  LDFLAGS     linker flags, e.g. -L<lib dir> if you have libraries in a
-              nonstandard directory <lib dir>
-  LIBS        libraries to pass to the linker, e.g. -l<library>
-  CPPFLAGS    (Objective) C/C++ preprocessor flags, e.g. -I<include dir> if
-              you have headers in a nonstandard directory <include dir>
-  LT_SYS_LIBRARY_PATH 
-              User-defined run-time library search path.
-  PKG_CONFIG  path to pkg-config utility
-  PKG_CONFIG_PATH 
-              directories to add to pkg-config's search path
-  PKG_CONFIG_LIBDIR 
-              path overriding pkg-config's built-in search path
-  XMLTO       Path to xmlto command
-  FOP         Path to fop command
-  XSLTPROC    Path to xsltproc command
-  XEXT_CFLAGS C compiler flags for XEXT, overriding pkg-config
-  XEXT_LIBS   linker flags for XEXT, overriding pkg-config
-  LINT        Path to a lint-style command
-  LINT_FLAGS  Flags for the lint-style command
-
-Use these variables to override the choices made by 'configure' or to help
-it to find libraries and programs with nonstandard names/locations.
-
-Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>.
-_ACEOF
-ac_status=$?
-fi
-
-if test "$ac_init_help" = "recursive"; then
-  # If there are subdirs, report their specific --help.
-  for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue
-    test -d "$ac_dir" ||
-      { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } ||
-      continue
-    ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`printf '%s\n' "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`printf '%s\n' "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-    cd "$ac_dir" || { ac_status=$?; continue; }
-    # Check for configure.gnu first; this name is used for a wrapper for
-    # Metaconfig's "Configure" on case-insensitive file systems.
-    if test -f "$ac_srcdir/configure.gnu"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure.gnu" --help=recursive
-    elif test -f "$ac_srcdir/configure"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure" --help=recursive
-    else
-      printf '%s\n' "$as_me: WARNING: no configuration information is in $ac_dir" >&2
-    fi || ac_status=$?
-    cd "$ac_pwd" || { ac_status=$?; break; }
-  done
-fi
-
-test -n "$ac_init_help" && exit $ac_status
-if $ac_init_version; then
-  cat <<\_ACEOF
-libXext configure 1.3.7
-generated by GNU Autoconf 2.73
-
-Copyright (C) 2026 Free Software Foundation, Inc.
-This configure script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it.
-_ACEOF
-  exit
-fi
-
-## ------------------------ ##
-## Autoconf initialization. ##
-## ------------------------ ##
-
-@%:@ ac_fn_c_try_compile LINENO
-@%:@ --------------------------
-@%:@ Try to compile conftest.@S|@ac_ext, and return whether this succeeded.
-ac_fn_c_try_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest.beam
-  if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest.$ac_objext
-then :
-  ac_retval=0
-else case e in @%:@(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1 ;;
-esac
-fi
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} @%:@ ac_fn_c_try_compile
-
-@%:@ ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES
-@%:@ -------------------------------------------------------
-@%:@ Tests whether HEADER exists and can be compiled using the include files in
-@%:@ INCLUDES, setting the cache variable VAR accordingly.
-ac_fn_c_check_header_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-printf %s "checking for $2... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-@%:@include <$2>
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  eval "$3=yes"
-else case e in @%:@(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} @%:@ ac_fn_c_check_header_compile
-
-@%:@ ac_fn_c_try_link LINENO
-@%:@ -----------------------
-@%:@ Try to link conftest.@S|@ac_ext, and return whether this succeeded.
-ac_fn_c_try_link ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest.beam conftest$ac_exeext
-  if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest$ac_exeext && {
-	 test "$cross_compiling" = yes ||
-	 test -x conftest$ac_exeext
-       }
-then :
-  ac_retval=0
-else case e in @%:@(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1 ;;
-esac
-fi
-  # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information
-  # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would
-  # interfere with the next link command; also delete a directory that is
-  # left behind by Apple's compiler.  We do this before executing the actions.
-  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} @%:@ ac_fn_c_try_link
-
-@%:@ ac_fn_c_check_func LINENO FUNC VAR
-@%:@ ----------------------------------
-@%:@ Tests whether FUNC exists, setting the cache variable VAR accordingly
-ac_fn_c_check_func ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-printf %s "checking for $2... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-/* Define $2 to an innocuous variant, in case <limits.h> declares $2.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $2 innocuous_$2
-
-/* System header to define __stub macros and hopefully few prototypes,
-   which can conflict with char $2 (void); below.  */
-
-#include <limits.h>
-#undef $2
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $2 (void);
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$2 || defined __stub___$2
-choke me
-#endif
-
-int
-main (void)
-{
-return $2 ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval "$3=yes"
-else case e in @%:@(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} @%:@ ac_fn_c_check_func
-
-@%:@ ac_fn_check_decl LINENO SYMBOL VAR INCLUDES EXTRA-OPTIONS FLAG-VAR
-@%:@ ------------------------------------------------------------------
-@%:@ Tests whether SYMBOL is declared in INCLUDES, setting cache variable VAR
-@%:@ accordingly. Pass EXTRA-OPTIONS to the compiler, using FLAG-VAR.
-ac_fn_check_decl ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  as_decl_name=`echo $2|sed 's/ *(.*//'`
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $as_decl_name is declared" >&5
-printf %s "checking whether $as_decl_name is declared... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'`
-  eval ac_save_FLAGS=\$$6
-  as_fn_append $6 " $5"
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-int
-main (void)
-{
-#ifndef $as_decl_name
-#ifdef __cplusplus
-  (void) $as_decl_use;
-#else
-  (void) $as_decl_name;
-#endif
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  eval "$3=yes"
-else case e in @%:@(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-  eval $6=\$ac_save_FLAGS
- ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} @%:@ ac_fn_check_decl
-ac_configure_args_raw=
-for ac_arg
-do
-  case $ac_arg in
-  *\'*)
-    ac_arg=`printf '%s\n' "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
-  esac
-  as_fn_append ac_configure_args_raw " '$ac_arg'"
-done
-
-case $ac_configure_args_raw in
-  *$as_nl*)
-    ac_safe_unquote= ;;
-  *)
-    ac_unsafe_z='|&;<>()$`\\"*?@<:@ ''	' # This string ends in space, tab.
-    ac_unsafe_a="$ac_unsafe_z#~"
-    ac_safe_unquote="s/ '\\([^$ac_unsafe_a][^$ac_unsafe_z]*\\)'/ \\1/g"
-    ac_configure_args_raw=`      printf '%s\n' "$ac_configure_args_raw" | sed "$ac_safe_unquote"`;;
-esac
-
-cat >config.log <<_ACEOF
-This file contains any messages produced by compilers while
-running configure, to aid debugging if configure makes a mistake.
-
-It was created by libXext $as_me 1.3.7, which was
-generated by GNU Autoconf 2.73.  Invocation command line was
-
-  $ $0$ac_configure_args_raw
-
-_ACEOF
-exec 5>>config.log
-{
-cat <<_ASUNAME
-## --------- ##
-## Platform. ##
-## --------- ##
-
-hostname = `(hostname || uname -n) 2>/dev/null | sed 1q`
-uname -m = `(uname -m) 2>/dev/null || echo unknown`
-uname -r = `(uname -r) 2>/dev/null || echo unknown`
-uname -s = `(uname -s) 2>/dev/null || echo unknown`
-uname -v = `(uname -v) 2>/dev/null || echo unknown`
-
-/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown`
-/bin/uname -X     = `(/bin/uname -X) 2>/dev/null     || echo unknown`
-
-/bin/arch              = `(/bin/arch) 2>/dev/null              || echo unknown`
-/usr/bin/arch -k       = `(/usr/bin/arch -k) 2>/dev/null       || echo unknown`
-/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown`
-/usr/bin/hostinfo      = `(/usr/bin/hostinfo) 2>/dev/null      || echo unknown`
-/bin/machine           = `(/bin/machine) 2>/dev/null           || echo unknown`
-/usr/bin/oslevel       = `(/usr/bin/oslevel) 2>/dev/null       || echo unknown`
-/bin/universe          = `(/bin/universe) 2>/dev/null          || echo unknown`
-
-_ASUNAME
-
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    printf '%s\n' "PATH: $as_dir"
-  done
-IFS=$as_save_IFS
-
-} >&5
-
-cat >&5 <<_ACEOF
-
-
-## ----------- ##
-## Core tests. ##
-## ----------- ##
-
-_ACEOF
-
-
-# Keep a trace of the command line.
-# Strip out --no-create and --no-recursion so they do not pile up.
-# Strip out --silent because we don't want to record it for future runs.
-# Also quote any args containing shell meta-characters.
-# Make two passes to allow for proper duplicate-argument suppression.
-ac_configure_args=
-ac_configure_args0=
-ac_configure_args1=
-ac_must_keep_next=false
-for ac_pass in 1 2
-do
-  for ac_arg
-  do
-    case $ac_arg in
-    -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;;
-    -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-    | -silent | --silent | --silen | --sile | --sil)
-      continue ;;
-    *\'*)
-      ac_arg=`printf '%s\n' "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    case $ac_pass in
-    1) as_fn_append ac_configure_args0 " '$ac_arg'" ;;
-    2)
-      as_fn_append ac_configure_args1 " '$ac_arg'"
-      if test $ac_must_keep_next = true; then
-	ac_must_keep_next=false # Got value, back to normal.
-      else
-	case $ac_arg in
-	  *=* | --config-cache | -C | -disable-* | --disable-* \
-	  | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \
-	  | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \
-	  | -with-* | --with-* | -without-* | --without-* | --x)
-	    case "$ac_configure_args0 " in
-	      "$ac_configure_args1"*" '$ac_arg' "* ) continue ;;
-	    esac
-	    ;;
-	  -* ) ac_must_keep_next=true ;;
-	esac
-      fi
-      as_fn_append ac_configure_args " '$ac_arg'"
-      ;;
-    esac
-  done
-done
-{ ac_configure_args0=; unset ac_configure_args0;}
-{ ac_configure_args1=; unset ac_configure_args1;}
-
-# Dump the cache to stdout.  It can be in a pipe (this is a requirement).
-ac_cache_dump ()
-{
-  # The following way of writing the cache mishandles newlines in values,
-# but we know of no workaround that is simple, portable, and efficient.
-# So, we kill variables containing newlines.
-# Ultrix sh set writes to stderr and can't be redirected directly,
-# and sets the high bit in the cache file unless we assign to the vars.
-(
-  for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do
-    eval ac_val=\$$ac_var
-    case $ac_val in #(
-    *${as_nl}*)
-      case $ac_var in #(
-      *_cv_*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
-printf '%s\n' "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
-      esac
-      case $ac_var in #(
-      _ | IFS | as_nl) ;; #(
-      BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
-      *) { eval $ac_var=; unset $ac_var;} ;;
-      esac ;;
-    esac
-  done
-
-  (set) 2>&1 |
-    case $as_nl`(ac_space=' '; set) 2>&1` in #(
-    *${as_nl}ac_space=\ *)
-      # 'set' does not quote correctly, so add quotes: double-quote
-      # substitution turns \\\\ into \\, and sed turns \\ into \.
-      sed -n \
-	"s/'/'\\\\''/g;
-	  s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p"
-      ;; #(
-    *)
-      # 'set' quotes correctly as required by POSIX, so do not add quotes.
-      sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
-      ;;
-    esac |
-    sort
-)
-}
-
-# Print debugging info to stdout.
-ac_dump_debugging_info ()
-{
-  echo
-
-  printf '%s\n' "## ---------------- ##
-## Cache variables. ##
-## ---------------- ##"
-  echo
-  ac_cache_dump
-  echo
-
-  printf '%s\n' "## ----------------- ##
-## Output variables. ##
-## ----------------- ##"
-  echo
-  for ac_var in $ac_subst_vars
-  do
-    eval ac_val=\$$ac_var
-    case $ac_val in
-    *\'*) ac_val=`printf '%s\n' "$ac_val" | sed "s/'/'\\\\\\\\''/g"`;;
-    esac
-    printf '%s\n' "$ac_var='$ac_val'"
-  done | sort
-  echo
-
-  if test -n "$ac_subst_files"; then
-    printf '%s\n' "## ------------------- ##
-## File substitutions. ##
-## ------------------- ##"
-    echo
-    for ac_var in $ac_subst_files
-    do
-      eval ac_val=\$$ac_var
-      case $ac_val in
-      *\'*) ac_val=`printf '%s\n' "$ac_val" | sed "s/'/'\\\\\\\\''/g"`;;
-      esac
-      printf '%s\n' "$ac_var='$ac_val'"
-    done | sort
-    echo
-  fi
-
-  if test -s confdefs.h; then
-    printf '%s\n' "## ----------- ##
-## confdefs.h. ##
-## ----------- ##"
-    echo
-    cat confdefs.h
-    echo
-  fi
-  test "$ac_signal" != 0 &&
-    printf '%s\n' "$as_me: caught signal $ac_signal"
-  printf '%s\n' "$as_me: exit $exit_status"
-}
-
-# When interrupted or exit'd, cleanup temporary files, and complete
-# config.log.
-ac_exit_trap ()
-{
-  exit_status=
-  # Sanitize IFS.
-  IFS=" ""	$as_nl"
-  # Save into config.log some information that might help in debugging.
-  ac_dump_debugging_info >&5
-  eval "rm -f $ac_clean_CONFIG_STATUS core *.core core.conftest.*" &&
-    rm -f -r conftest* confdefs* conf$$* $ac_clean_files &&
-    exit $exit_status
-}
-
-trap 'ac_exit_trap $?' 0
-for ac_signal in 1 2 13 15; do
-  trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal
-done
-ac_signal=0
-
-# confdefs.h avoids OS command line length limits that DEFS can exceed.
-rm -f -r conftest* confdefs.h
-
-printf '%s\n' "/* confdefs.h */" > confdefs.h
-
-# Predefined preprocessor variables.
-
-printf '%s\n' "@%:@define PACKAGE_NAME \"$PACKAGE_NAME\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_TARNAME \"$PACKAGE_TARNAME\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_VERSION \"$PACKAGE_VERSION\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_STRING \"$PACKAGE_STRING\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_BUGREPORT \"$PACKAGE_BUGREPORT\"" >>confdefs.h
-
-printf '%s\n' "@%:@define PACKAGE_URL \"$PACKAGE_URL\"" >>confdefs.h
-
-
-# Let the site file select an alternate cache file if it wants to.
-# Prefer an explicitly selected file to automatically selected ones.
-if test -n "$CONFIG_SITE"; then
-  ac_site_files="$CONFIG_SITE"
-elif test "x$prefix" != xNONE; then
-  ac_site_files="$prefix/share/config.site $prefix/etc/config.site"
-else
-  ac_site_files="$ac_default_prefix/share/config.site $ac_default_prefix/etc/config.site"
-fi
-
-for ac_site_file in $ac_site_files
-do
-  case $ac_site_file in @%:@(
-  */*) :
-     ;; @%:@(
-  *) :
-    ac_site_file=./$ac_site_file ;;
-esac
-  if test -f "$ac_site_file" && test -r "$ac_site_file"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5
-printf '%s\n' "$as_me: loading site script $ac_site_file" >&6;}
-    sed 's/^/| /' "$ac_site_file" >&5
-    . "$ac_site_file" \
-      || { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "failed to load site script $ac_site_file
-See 'config.log' for more details" "$LINENO" 5; }
-  fi
-done
-
-if test -r "$cache_file"; then
-  # Some versions of bash will fail to source /dev/null (special files
-  # actually), so we avoid doing that.  DJGPP emulates it as a regular file.
-  if test /dev/null != "$cache_file" && test -f "$cache_file"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5
-printf '%s\n' "$as_me: loading cache $cache_file" >&6;}
-    case $cache_file in
-      [\\/]* | ?:[\\/]* ) . "$cache_file";;
-      *)                      . "./$cache_file";;
-    esac
-  fi
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5
-printf '%s\n' "$as_me: creating cache $cache_file" >&6;}
-  >$cache_file
-fi
-
-as_fn_append ac_header_c_list " stdio.h stdio_h HAVE_STDIO_H"
-# Test code for whether the C compiler supports C23 (global declarations)
-ac_c_conftest_c23_globals='
-/* Does the compiler advertise conformance to C17 or earlier?
-   Although GCC 14 does not do that, even with -std=gnu23,
-   it is close enough, and defines __STDC_VERSION == 202000L.  */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ <= 201710L
-# error "Compiler advertises conformance to C17 or earlier"
-#endif
-
-// Check alignas.
-char alignas (double) c23_aligned_as_double;
-char alignas (0) c23_no_special_alignment;
-extern char c23_aligned_as_int;
-char alignas (0) alignas (int) c23_aligned_as_int;
-
-// Check alignof.
-enum
-{
-  c23_int_alignment = alignof (int),
-  c23_int_array_alignment = alignof (int[100]),
-  c23_char_alignment = alignof (char)
-};
-static_assert (0 < -alignof (int), "alignof is signed");
-
-int function_with_unnamed_parameter (int) { return 0; }
-
-void c23_noreturn ();
-
-/* Test parsing of string and char UTF-8 literals (including hex escapes).
-   The parens pacify GCC 15.  */
-bool use_u8 = (!sizeof u8"\xFF") == (!u8'\''x'\'');
-
-bool check_that_bool_works = true | false | !nullptr;
-#if !true
-# error "true does not work in #if"
-#endif
-#if false
-#elifdef __STDC_VERSION__
-#else
-# error "#elifdef does not work"
-#endif
-
-#ifndef __has_c_attribute
-# error "__has_c_attribute not defined"
-#endif
-
-#ifndef __has_include
-# error "__has_include not defined"
-#endif
-
-#define LPAREN() (
-#define FORTY_TWO(x) 42
-#define VA_OPT_TEST(r, x, ...) __VA_OPT__ (FORTY_TWO r x))
-static_assert (VA_OPT_TEST (LPAREN (), 0, <:-) == 42);
-
-static_assert (0b101010 == 42);
-static_assert (0B101010 == 42);
-static_assert (0xDEAD'\''BEEF == 3'\''735'\''928'\''559);
-static_assert (0.500'\''000'\''000 == 0.5);
-
-enum unsignedish : unsigned int { uione = 1 };
-static_assert (0 < -uione);
-
-#include <stddef.h>
-constexpr nullptr_t null_pointer = nullptr;
-
-static typeof (1 + 1L) two () { return 2; }
-static long int three () { return 3; }
-'
-
-# Test code for whether the C compiler supports C23 (body of main).
-ac_c_conftest_c23_main='
-  {
-    label_before_declaration:
-      int arr[10] = {};
-      if (arr[0])
-        goto label_before_declaration;
-      if (!arr[0])
-        goto label_at_end_of_block;
-    label_at_end_of_block:
-  }
-  ok |= !null_pointer;
-  ok |= two != three;
-'
-
-# Test code for whether the C compiler supports C23 (complete).
-ac_c_conftest_c23_program="${ac_c_conftest_c23_globals}
-
-int
-main (int, char **)
-{
-  int ok = 0;
-  ${ac_c_conftest_c23_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C89 (global declarations)
-ac_c_conftest_c89_globals='
-/* Do not test the value of __STDC__, because some compilers define it to 0
-   or do not define it, while otherwise adequately conforming.  */
-
-#include <stddef.h>
-#include <stdarg.h>
-struct stat;
-/* Most of the following tests are stolen from RCS 5.7 src/conf.sh.  */
-struct buf { int x; };
-struct buf * (*rcsopen) (struct buf *, struct stat *, int);
-static char *e (char **p, int i)
-{
-  return p[i];
-}
-static char *f (char * (*g) (char **, int), char **p, ...)
-{
-  char *s;
-  va_list v;
-  va_start (v,p);
-  s = g (p, va_arg (v,int));
-  va_end (v);
-  return s;
-}
-
-/* C89 style stringification. */
-#define noexpand_stringify(a) #a
-const char *stringified = noexpand_stringify(arbitrary+token=sequence);
-
-/* C89 style token pasting.  Exercises some of the corner cases that
-   e.g. old MSVC gets wrong, but not very hard. */
-#define noexpand_concat(a,b) a##b
-#define expand_concat(a,b) noexpand_concat(a,b)
-extern int vA;
-extern int vbee;
-#define aye A
-#define bee B
-int *pvA = &expand_concat(v,aye);
-int *pvbee = &noexpand_concat(v,bee);
-
-/* OSF 4.0 Compaq cc is some sort of almost-ANSI by default.  It has
-   function prototypes and stuff, but not \xHH hex character constants.
-   These do not provoke an error unfortunately, instead are silently treated
-   as an "x".  The following induces an error, until -std is added to get
-   proper ANSI mode.  Curiously \x00 != x always comes out true, for an
-   array size at least.  It is necessary to write \x00 == 0 to get something
-   that is true only with -std.  */
-int osf4_cc_array ['\''\x00'\'' == 0 ? 1 : -1];
-
-/* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters
-   inside strings and character constants.  */
-#define FOO(x) '\''x'\''
-int xlc6_cc_array[FOO(a) == '\''x'\'' ? 1 : -1];
-
-int test (int i, double x);
-struct s1 {int (*f) (int a);};
-struct s2 {int (*f) (double a);};
-int pairnames (int, char **, int *(*)(struct buf *, struct stat *, int),
-               int, int);'
-
-# Test code for whether the C compiler supports C89 (body of main).
-ac_c_conftest_c89_main='
-ok |= (argc == 0 || f (e, argv, 0) != argv[0] || f (e, argv, 1) != argv[1]);
-'
-
-# Test code for whether the C compiler supports C99 (global declarations)
-ac_c_conftest_c99_globals='
-/* Does the compiler advertise C99 conformance? */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ < 199901L
-# error "Compiler does not advertise C99 conformance"
-#endif
-
-// See if C++-style comments work.
-
-#include <stdbool.h>
-extern int puts (const char *);
-extern int printf (const char *, ...);
-extern int dprintf (int, const char *, ...);
-extern void *malloc (size_t);
-extern void free (void *);
-
-// Check varargs macros.  These examples are taken from C99 6.10.3.5.
-// dprintf is used instead of fprintf to avoid needing to declare
-// FILE and stderr, and "aND" is used instead of "and" to work around
-// GCC bug 40564 which is irrelevant here.
-#define debug(...) dprintf (2, __VA_ARGS__)
-#define showlist(...) puts (#__VA_ARGS__)
-#define report(test,...) ((test) ? puts (#test) : printf (__VA_ARGS__))
-static void
-test_varargs_macros (void)
-{
-  int x = 1234;
-  int y = 5678;
-  debug ("Flag");
-  debug ("X = %d\n", x);
-  showlist (The first, second, aND third items.);
-  report (x>y, "x is %d but y is %d", x, y);
-}
-
-// Check long long types.
-#define BIG64 18446744073709551615ull
-#define BIG32 4294967295ul
-#define BIG_OK (BIG64 / BIG32 == 4294967297ull && BIG64 % BIG32 == 0)
-#if !BIG_OK
-  #error "your preprocessor is broken"
-#endif
-#if BIG_OK
-#else
-  #error "your preprocessor is broken"
-#endif
-static long long int bignum = -9223372036854775807LL;
-static unsigned long long int ubignum = BIG64;
-
-struct incomplete_array
-{
-  int datasize;
-  double data[];
-};
-
-struct named_init {
-  int number;
-  const wchar_t *name;
-  double average;
-};
-
-typedef const char *ccp;
-
-static inline int
-test_restrict (ccp restrict text)
-{
-  // Iterate through items via the restricted pointer.
-  // Also check for declarations in for loops.
-  for (unsigned int i = 0; *(text+i) != '\''\0'\''; ++i)
-    continue;
-  return 0;
-}
-
-// Check varargs and va_copy.
-static bool
-test_varargs (const char *format, ...)
-{
-  va_list args;
-  va_start (args, format);
-  va_list args_copy;
-  va_copy (args_copy, args);
-
-  const char *str = "";
-  int number = 0;
-  float fnumber = 0;
-
-  while (*format)
-    {
-      switch (*format++)
-	{
-	case '\''s'\'': // string
-	  str = va_arg (args_copy, const char *);
-	  break;
-	case '\''d'\'': // int
-	  number = va_arg (args_copy, int);
-	  break;
-	case '\''f'\'': // float
-	  fnumber = va_arg (args_copy, double);
-	  break;
-	default:
-	  break;
-	}
-    }
-  va_end (args_copy);
-  va_end (args);
-
-  return *str && number && fnumber;
-}
-'
-
-# Test code for whether the C compiler supports C99 (body of main).
-ac_c_conftest_c99_main='
-  // Check bool.
-  _Bool success = false;
-  success |= (argc != 0);
-
-  // Check restrict.
-  if (test_restrict ("String literal") == 0)
-    success = true;
-  const char *restrict newvar = "Another string";
-
-  // Check varargs.
-  success &= test_varargs ("s, d'\'' f .", "string", 65, 34.234);
-  test_varargs_macros ();
-
-  // Check flexible array members.
-  static struct incomplete_array *volatile incomplete_array_pointer;
-  struct incomplete_array *ia = incomplete_array_pointer;
-  ia->datasize = 10;
-  for (int i = 0; i < ia->datasize; ++i)
-    ia->data[i] = i * 1.234;
-  // Work around memory leak warnings.
-  free (ia);
-
-  // Check named initializers.
-  struct named_init ni = {
-    .number = 34,
-    .name = L"Test wide string",
-    .average = 543.34343,
-  };
-
-  ni.number = 58;
-
-  // Do not test for VLAs, as some otherwise-conforming compilers lack them.
-  // C code should instead use __STDC_NO_VLA__; see Autoconf manual.
-
-  // work around unused variable warnings
-  ok |= (!success || bignum == 0LL || ubignum == 0uLL || newvar[0] == '\''x'\''
-	 || ni.number != 58);
-'
-
-# Test code for whether the C compiler supports C11 (global declarations)
-ac_c_conftest_c11_globals='
-/* Does the compiler advertise C11 conformance? */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ < 201112L
-# error "Compiler does not advertise C11 conformance"
-#endif
-
-// Check _Alignas.
-char _Alignas (double) aligned_as_double;
-char _Alignas (0) no_special_alignment;
-extern char aligned_as_int;
-char _Alignas (0) _Alignas (int) aligned_as_int;
-
-// Check _Alignof.
-enum
-{
-  int_alignment = _Alignof (int),
-  int_array_alignment = _Alignof (int[100]),
-  char_alignment = _Alignof (char)
-};
-_Static_assert (0 < -_Alignof (int), "_Alignof is signed");
-
-// Check _Noreturn.
-int _Noreturn does_not_return (void) { for (;;) continue; }
-
-// Check _Static_assert.
-struct test_static_assert
-{
-  int x;
-  _Static_assert (sizeof (int) <= sizeof (long int),
-                  "_Static_assert does not work in struct");
-  long int y;
-};
-
-// Check UTF-8 literals.
-#define u8 syntax error!
-char const utf8_literal[] = u8"happens to be ASCII" "another string";
-
-// Check duplicate typedefs.
-typedef long *long_ptr;
-typedef long int *long_ptr;
-typedef long_ptr long_ptr;
-
-// Anonymous structures and unions -- taken from C11 6.7.2.1 Example 1.
-struct anonymous
-{
-  union {
-    struct { int i; int j; };
-    struct { int k; long int l; } w;
-  };
-  int m;
-} v1;
-'
-
-# Test code for whether the C compiler supports C11 (body of main).
-ac_c_conftest_c11_main='
-  _Static_assert ((offsetof (struct anonymous, i)
-		   == offsetof (struct anonymous, w.k)),
-		  "Anonymous union alignment botch");
-  v1.i = 2;
-  v1.w.k = 5;
-  ok |= v1.i != 5;
-'
-
-# Test code for whether the C compiler supports C11 (complete).
-ac_c_conftest_c11_program="${ac_c_conftest_c89_globals}
-${ac_c_conftest_c99_globals}
-${ac_c_conftest_c11_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  ${ac_c_conftest_c99_main}
-  ${ac_c_conftest_c11_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C99 (complete).
-ac_c_conftest_c99_program="${ac_c_conftest_c89_globals}
-${ac_c_conftest_c99_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  ${ac_c_conftest_c99_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C89 (complete).
-ac_c_conftest_c89_program="${ac_c_conftest_c89_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  return ok;
-}
-"
-
-as_fn_append ac_header_c_list " stdlib.h stdlib_h HAVE_STDLIB_H"
-as_fn_append ac_header_c_list " string.h string_h HAVE_STRING_H"
-as_fn_append ac_header_c_list " inttypes.h inttypes_h HAVE_INTTYPES_H"
-as_fn_append ac_header_c_list " stdint.h stdint_h HAVE_STDINT_H"
-as_fn_append ac_header_c_list " strings.h strings_h HAVE_STRINGS_H"
-as_fn_append ac_header_c_list " sys/stat.h sys_stat_h HAVE_SYS_STAT_H"
-as_fn_append ac_header_c_list " sys/types.h sys_types_h HAVE_SYS_TYPES_H"
-as_fn_append ac_header_c_list " unistd.h unistd_h HAVE_UNISTD_H"
-as_fn_append ac_header_c_list " wchar.h wchar_h HAVE_WCHAR_H"
-as_fn_append ac_header_c_list " minix/config.h minix_config_h HAVE_MINIX_CONFIG_H"
-
-# Auxiliary files required by this configure script.
-ac_aux_files="config.guess config.sub ltmain.sh missing install-sh compile"
-
-# Locations in which to look for auxiliary files.
-ac_aux_dir_candidates="${srcdir}${PATH_SEPARATOR}${srcdir}/..${PATH_SEPARATOR}${srcdir}/../.."
-
-# Search for a directory containing all of the required auxiliary files,
-# $ac_aux_files, from the $PATH-style list $ac_aux_dir_candidates.
-# If we don't find one directory that contains all the files we need,
-# we report the set of missing files from the *first* directory in
-# $ac_aux_dir_candidates and give up.
-ac_missing_aux_files=""
-ac_first_candidate=:
-printf '%s\n' "$as_me:${as_lineno-$LINENO}: looking for aux files: $ac_aux_files" >&5
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in $ac_aux_dir_candidates
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-  as_found=:
-  
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}:  trying $as_dir" >&5
-  ac_aux_dir_found=yes
-  ac_install_sh=
-  for ac_aux in $ac_aux_files
-  do
-    # As a special case, if "install-sh" is required, that requirement
-    # can be satisfied by any of "install-sh", "install.sh", or "shtool",
-    # and $ac_install_sh is set appropriately for whichever one is found.
-    if test x"$ac_aux" = x"install-sh"
-    then
-      if test -f "${as_dir}install-sh"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}install-sh found" >&5
-        ac_install_sh="${as_dir}install-sh -c"
-      elif test -f "${as_dir}install.sh"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}install.sh found" >&5
-        ac_install_sh="${as_dir}install.sh -c"
-      elif test -f "${as_dir}shtool"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}shtool found" >&5
-        ac_install_sh="${as_dir}shtool install -c"
-      else
-        ac_aux_dir_found=no
-        if $ac_first_candidate; then
-          ac_missing_aux_files="${ac_missing_aux_files} install-sh"
-        else
-          break
-        fi
-      fi
-    else
-      if test -f "${as_dir}${ac_aux}"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}${ac_aux} found" >&5
-      else
-        ac_aux_dir_found=no
-        if $ac_first_candidate; then
-          ac_missing_aux_files="${ac_missing_aux_files} ${ac_aux}"
-        else
-          break
-        fi
-      fi
-    fi
-  done
-  if test "$ac_aux_dir_found" = yes; then
-    ac_aux_dir="$as_dir"
-    break
-  fi
-  ac_first_candidate=false
-
-  as_found=false
-done
-IFS=$as_save_IFS
-if $as_found
-then :
-  
-else case e in @%:@(
-  e) as_fn_error $? "cannot find required auxiliary files:$ac_missing_aux_files" "$LINENO" 5 ;;
-esac
-fi
-
-
-# These three variables are undocumented and unsupported,
-# and are intended to be withdrawn in a future Autoconf release.
-# They can cause serious problems if a builder's source tree is in a directory
-# whose full name contains unusual characters.
-if test -f "${ac_aux_dir}config.guess"; then
-  ac_@&t@config_guess="$SHELL ${ac_aux_dir}config.guess"
-fi
-if test -f "${ac_aux_dir}config.sub"; then
-  ac_@&t@config_sub="$SHELL ${ac_aux_dir}config.sub"
-fi
-if test -f "$ac_aux_dir/configure"; then
-  ac_@&t@configure="$SHELL ${ac_aux_dir}configure"
-fi
-
-# Check that the precious variables saved in the cache have kept the same
-# value.
-ac_cache_corrupted=false
-for ac_var in $ac_precious_vars; do
-  eval ac_old_set=\$ac_cv_env_${ac_var}_set
-  eval ac_new_set=\$ac_env_${ac_var}_set
-  eval ac_old_val=\$ac_cv_env_${ac_var}_value
-  eval ac_new_val=\$ac_env_${ac_var}_value
-  case $ac_old_set,$ac_new_set in
-    set,)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' was set to '$ac_old_val' in the previous run" >&5
-printf '%s\n' "$as_me: error: '$ac_var' was set to '$ac_old_val' in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,set)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' was not set in the previous run" >&5
-printf '%s\n' "$as_me: error: '$ac_var' was not set in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,);;
-    *)
-      if test "x$ac_old_val" != "x$ac_new_val"; then
-	# differences in whitespace do not lead to failure.
-	ac_old_val_w=
-	for ac_val in x $ac_old_val; do
-	  ac_old_val_w="$ac_old_val_w $ac_val"
-	done
-	ac_new_val_w=
-	for ac_val in x $ac_new_val; do
-	  ac_new_val_w="$ac_new_val_w $ac_val"
-	done
-	if test "$ac_old_val_w" != "$ac_new_val_w"; then
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' has changed since the previous run:" >&5
-printf '%s\n' "$as_me: error: '$ac_var' has changed since the previous run:" >&2;}
-	  ac_cache_corrupted=:
-	else
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in '$ac_var' since the previous run:" >&5
-printf '%s\n' "$as_me: warning: ignoring whitespace changes in '$ac_var' since the previous run:" >&2;}
-	  eval $ac_var=\$ac_old_val
-	fi
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}:   former value:  '$ac_old_val'" >&5
-printf '%s\n' "$as_me:   former value:  '$ac_old_val'" >&2;}
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}:   current value: '$ac_new_val'" >&5
-printf '%s\n' "$as_me:   current value: '$ac_new_val'" >&2;}
-      fi;;
-  esac
-  # Pass precious variables to config.status.
-  if test "$ac_new_set" = set; then
-    case $ac_new_val in
-    *\'*) ac_arg=$ac_var=`printf '%s\n' "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;;
-    *) ac_arg=$ac_var=$ac_new_val ;;
-    esac
-    case " $ac_configure_args " in
-      *" '$ac_arg' "*) ;; # Avoid dups.  Use of quotes ensures accuracy.
-      *) as_fn_append ac_configure_args " '$ac_arg'" ;;
-    esac
-  fi
-done
-if $ac_cache_corrupted; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5
-printf '%s\n' "$as_me: error: changes in the environment can compromise the build" >&2;}
-  as_fn_error $? "run '${MAKE-make} distclean' and/or 'rm $cache_file'
-	    and start over" "$LINENO" 5
-fi
-## -------------------- ##
-## Main body of script. ##
-## -------------------- ##
-
-
-# Determine whether it's possible to make 'echo' print without a newline.
-# These variables are no longer used directly by Autoconf, but are AC_SUBSTed
-# for compatibility with existing Makefiles.
-ECHO_C= ECHO_N= ECHO_T=
-case `echo -n x` in @%:@(((((
--n*)
-  case `echo 'xy\c'` in
-  *c*) ECHO_T='	';;	# ECHO_T is single tab character.
-  xy)  ECHO_C='\c';;
-  *)   echo `echo ksh88 bug on AIX 6.1` > /dev/null
-       ECHO_T='	';;
-  esac;;
-*)
-  ECHO_N='-n';;
-esac
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-
-ac_config_headers="$ac_config_headers config.h"
-
-
-
-# Set common system defines for POSIX extensions, such as _GNU_SOURCE
-# Must be called before any macros that run the compiler (like LT_INIT)
-# to avoid autoconf errors.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-# Expand $ac_aux_dir to an absolute path.
-am_aux_dir=`cd "$ac_aux_dir" && pwd`
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}gcc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}gcc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "gcc", so it can be a program name with args.
-set dummy gcc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="gcc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-else
-  CC="$ac_cv_prog_CC"
-fi
-
-if test -z "$CC"; then
-          if test -n "$ac_tool_prefix"; then
-    # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}cc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}cc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  fi
-fi
-if test -z "$CC"; then
-  # Extract the first word of "cc", so it can be a program name with args.
-set dummy cc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-  ac_prog_rejected=no
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    if test "$as_dir$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then
-       ac_prog_rejected=yes
-       continue
-     fi
-    ac_cv_prog_CC="cc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-if test $ac_prog_rejected = yes; then
-  # We found a bogon in the path, so make sure we never use it.
-  set dummy $ac_cv_prog_CC
-  shift
-  if test $@%:@ != 0; then
-    # We chose a different compiler from the bogus one.
-    # However, it has the same basename, so the bogon will be chosen
-    # first if we set CC to just the basename; use the full file name.
-    shift
-    ac_cv_prog_CC="$as_dir$ac_word${1+' '}$@"
-  fi
-fi
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  for ac_prog in cl.exe
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$CC" && break
-  done
-fi
-if test -z "$CC"; then
-  ac_ct_CC=$CC
-  for ac_prog in cl.exe
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_CC" && break
-done
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-fi
-
-fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}clang", so it can be a program name with args.
-set dummy ${ac_tool_prefix}clang; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}clang"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "clang", so it can be a program name with args.
-set dummy clang; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="clang"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-else
-  CC="$ac_cv_prog_CC"
-fi
-
-fi
-
-
-test -z "$CC" && { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "no acceptable C compiler found in \$PATH
-See 'config.log' for more details" "$LINENO" 5; }
-
-# Provide some information about the compiler.
-printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5
-set X $ac_compile
-ac_compiler=$2
-for ac_option in --version -v -V -qversion -version; do
-  { { ac_try="$ac_compiler $ac_option >&5"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compiler $ac_option >&5") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    sed '10a\
-... rest of stderr output deleted ...
-         10q' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-  fi
-  rm -f conftest.er1 conftest.err
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-done
-
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files_save=$ac_clean_files
-ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out"
-# Try to create an executable without -o first, disregard a.out.
-# It will help us diagnose broken compilers, and finding out an intuition
-# of exeext.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5
-printf %s "checking whether the C compiler works... " >&6; }
-ac_link_default=`printf '%s\n' "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
-
-# The possible output files:
-ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*"
-
-ac_rmfiles=
-for ac_file in $ac_files
-do
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    * ) ac_rmfiles="$ac_rmfiles $ac_file";;
-  esac
-done
-rm -f $ac_rmfiles
-
-if { { ac_try="$ac_link_default"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link_default") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  # Autoconf-2.13 could set the ac_cv_exeext variable to 'no'.
-# So ignore a value of 'no', otherwise this would lead to 'EXEEXT = no'
-# in a Makefile.  We should not override ac_cv_exeext if it was cached,
-# so that the user can short-circuit this test for compilers unknown to
-# Autoconf.
-for ac_file in $ac_files ''
-do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj )
-	;;
-    [ab].out )
-	# We found the default executable, but exeext='' is most
-	# certainly right.
-	break;;
-    *.* )
-	if test ${ac_cv_exeext+y} && test "$ac_cv_exeext" != no;
-	then :; else
-	   ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	fi
-	# We set ac_cv_exeext here because the later test for it is not
-	# safe: cross compilers may not add the suffix if given an '-o'
-	# argument, so we may need to know it at that point already.
-	# Even if this section looks crufty: it has the advantage of
-	# actually working.
-	break;;
-    * )
-	break;;
-  esac
-done
-test "$ac_cv_exeext" = no && ac_cv_exeext=
-
-else case e in @%:@(
-  e) ac_file='' ;;
-esac
-fi
-if test -z "$ac_file"
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error 77 "C compiler cannot create executables
-See 'config.log' for more details" "$LINENO" 5; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; } ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5
-printf %s "checking for C compiler default output file name... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5
-printf '%s\n' "$ac_file" >&6; }
-ac_exeext=$ac_cv_exeext
-
-rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out
-ac_clean_files=$ac_clean_files_save
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5
-printf %s "checking for suffix of executables... " >&6; }
-if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  # If both 'conftest.exe' and 'conftest' are 'present' (well, observable)
-# catch 'conftest.exe'.  For instance with Cygwin, 'ls conftest' will
-# work properly (i.e., refer to 'conftest.exe'), while it won't with
-# 'rm'.
-for ac_file in conftest.exe conftest conftest.*; do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	  break;;
-    * ) break;;
-  esac
-done
-else case e in @%:@(
-  e) { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of executables: cannot compile and link
-See 'config.log' for more details" "$LINENO" 5; } ;;
-esac
-fi
-rm -f conftest conftest$ac_cv_exeext
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5
-printf '%s\n' "$ac_cv_exeext" >&6; }
-
-rm -f conftest.$ac_ext
-EXEEXT=$ac_cv_exeext
-ac_exeext=$EXEEXT
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-@%:@include <stdio.h>
-int
-main (void)
-{
-FILE *f = fopen ("conftest.out", "w");
- if (!f)
-  return 1;
- return ferror (f) || fclose (f) != 0;
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files="$ac_clean_files conftest.out"
-# Check that the compiler produces executables we can run.  If not, either
-# the compiler is broken, or we cross compile.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5
-printf %s "checking whether we are cross compiling... " >&6; }
-if test "$cross_compiling" != yes; then
-  { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-  if { ac_try='./conftest$ac_cv_exeext'
-  { { case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; }; then
-    cross_compiling=no
-  else
-    if test "$cross_compiling" = maybe; then
-	cross_compiling=yes
-    else
-	{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error 77 "cannot run C compiled programs.
-If you meant to cross compile, use '--host'.
-See 'config.log' for more details" "$LINENO" 5; }
-    fi
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5
-printf '%s\n' "$cross_compiling" >&6; }
-
-rm -f conftest.$ac_ext conftest$ac_cv_exeext \
-  conftest.o conftest.obj conftest.out
-ac_clean_files=$ac_clean_files_save
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5
-printf %s "checking for suffix of object files... " >&6; }
-if test ${ac_cv_objext+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.o conftest.obj
-if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  for ac_file in conftest.o conftest.obj conftest.*; do
-  test -f "$ac_file" || continue;
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;;
-    *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'`
-       break;;
-  esac
-done
-else case e in @%:@(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of object files: cannot compile
-See 'config.log' for more details" "$LINENO" 5; } ;;
-esac
-fi
-rm -f conftest.$ac_cv_objext conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5
-printf '%s\n' "$ac_cv_objext" >&6; }
-OBJEXT=$ac_cv_objext
-ac_objext=$OBJEXT
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the compiler supports GNU C" >&5
-printf %s "checking whether the compiler supports GNU C... " >&6; }
-if test ${ac_cv_c_compiler_gnu+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-#ifndef __GNUC__
-       choke me
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_compiler_gnu=yes
-else case e in @%:@(
-  e) ac_compiler_gnu=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-ac_cv_c_compiler_gnu=$ac_compiler_gnu
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5
-printf '%s\n' "$ac_cv_c_compiler_gnu" >&6; }
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-if test $ac_compiler_gnu = yes; then
-  GCC=yes
-else
-  GCC=
-fi
-ac_test_CFLAGS=${CFLAGS+y}
-ac_save_CFLAGS=$CFLAGS
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5
-printf %s "checking whether $CC accepts -g... " >&6; }
-if test ${ac_cv_prog_cc_g+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_save_c_werror_flag=$ac_c_werror_flag
-   ac_c_werror_flag=yes
-   ac_cv_prog_cc_g=no
-   CFLAGS="-g"
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_g=yes
-else case e in @%:@(
-  e) CFLAGS=""
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  
-else case e in @%:@(
-  e) ac_c_werror_flag=$ac_save_c_werror_flag
-	 CFLAGS="-g"
-	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_g=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ac_c_werror_flag=$ac_save_c_werror_flag ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5
-printf '%s\n' "$ac_cv_prog_cc_g" >&6; }
-if test $ac_test_CFLAGS; then
-  CFLAGS=$ac_save_CFLAGS
-elif test $ac_cv_prog_cc_g = yes; then
-  if test "$GCC" = yes; then
-    CFLAGS="-g -O2"
-  else
-    CFLAGS="-g"
-  fi
-else
-  if test "$GCC" = yes; then
-    CFLAGS="-O2"
-  else
-    CFLAGS=
-  fi
-fi
-ac_prog_cc_stdc=no
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C23 features" >&5
-printf %s "checking for $CC option to enable C23 features... " >&6; }
-if test ${ac_cv_prog_cc_c23+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c23=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c23_program
-_ACEOF
-for ac_arg in '' -std=gnu23
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c23=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c23" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c23" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c23" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c23" >&5
-printf '%s\n' "$ac_cv_prog_cc_c23" >&6; }
-     CC="$CC $ac_cv_prog_cc_c23" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c23
-  ac_prog_cc_stdc=c23 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C11 features" >&5
-printf %s "checking for $CC option to enable C11 features... " >&6; }
-if test ${ac_cv_prog_cc_c11+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c11=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c11_program
-_ACEOF
-for ac_arg in '' -std=gnu11 -std:c11
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c11=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c11" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c11" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c11" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c11" >&5
-printf '%s\n' "$ac_cv_prog_cc_c11" >&6; }
-     CC="$CC $ac_cv_prog_cc_c11" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c11
-  ac_prog_cc_stdc=c11 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C99 features" >&5
-printf %s "checking for $CC option to enable C99 features... " >&6; }
-if test ${ac_cv_prog_cc_c99+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c99=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c99_program
-_ACEOF
-for ac_arg in '' -std=gnu99 -std=c99 -c99 -qlanglvl=extc1x -qlanglvl=extc99 -AC99 -D_STDC_C99=
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c99=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c99" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c99" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c99" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c99" >&5
-printf '%s\n' "$ac_cv_prog_cc_c99" >&6; }
-     CC="$CC $ac_cv_prog_cc_c99" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c99
-  ac_prog_cc_stdc=c99 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C89 features" >&5
-printf %s "checking for $CC option to enable C89 features... " >&6; }
-if test ${ac_cv_prog_cc_c89+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_prog_cc_c89=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c89_program
-_ACEOF
-for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std -Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__"
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c89=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c89" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c89" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in @%:@(
-  e) if test "x$ac_cv_prog_cc_c89" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5
-printf '%s\n' "$ac_cv_prog_cc_c89" >&6; }
-     CC="$CC $ac_cv_prog_cc_c89" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c89
-  ac_prog_cc_stdc=c89 ;;
-esac
-fi
-fi
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-  ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $CC understands -c and -o together" >&5
-printf %s "checking whether $CC understands -c and -o together... " >&6; }
-if test ${am_cv_prog_cc_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-  # Make sure it works both with $CC and with simple cc.
-  # Following AC_PROG_CC_C_O, we do the test twice because some
-  # compilers refuse to overwrite an existing .o file with -o,
-  # though they will create one.
-  am_cv_prog_cc_c_o=yes
-  for am_i in 1 2; do
-    if { echo "$as_me:$LINENO: $CC -c conftest.$ac_ext -o conftest2.$ac_objext" >&5
-   ($CC -c conftest.$ac_ext -o conftest2.$ac_objext) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } \
-         && test -f conftest2.$ac_objext; then
-      : OK
-    else
-      am_cv_prog_cc_c_o=no
-      break
-    fi
-  done
-  # aligned with autoconf, so not including core; see bug#72225.
-  rm -f -r a.out a.exe b.out conftest.$ac_ext conftest.$ac_objext \
-    conftest.dSYM conftest1.$ac_ext conftest1.$ac_objext conftest1.dSYM \
-    conftest2.$ac_ext conftest2.$ac_objext conftest2.dSYM
-  unset am_i ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_prog_cc_c_o" >&5
-printf '%s\n' "$am_cv_prog_cc_c_o" >&6; }
-if test "$am_cv_prog_cc_c_o" != yes; then
-   # Losing compiler, so override with the script.
-   # FIXME: It is wrong to rewrite CC.
-   # But if we don't then we get into trouble of one sort or another.
-   # A longer-term fix would be to have automake use am__CC in this case,
-   # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)"
-   CC="$am_aux_dir/compile $CC"
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-
-ac_header= ac_cache=
-for ac_item in $ac_header_c_list
-do
-  if test $ac_cache; then
-    ac_fn_c_check_header_compile "$LINENO" $ac_header ac_cv_header_$ac_cache "$ac_includes_default"
-    if eval test \"x\$ac_cv_header_$ac_cache\" = xyes; then
-      printf '%s\n' "#define $ac_item 1" >> confdefs.h
-    fi
-    ac_header= ac_cache=
-  elif test $ac_header; then
-    ac_cache=$ac_item
-  else
-    ac_header=$ac_item
-  fi
-done
-
-
-
-
-
-
-
-
-if test $ac_cv_header_stdlib_h = yes && test $ac_cv_header_string_h = yes
-then :
-  
-printf '%s\n' "@%:@define STDC_HEADERS 1" >>confdefs.h
-
-fi
-
-
-
-    
-  
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether it is safe to define __EXTENSIONS__" >&5
-printf %s "checking whether it is safe to define __EXTENSIONS__... " >&6; }
-if test ${ac_cv_safe_to_define___extensions__+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-#         define __EXTENSIONS__ 1
-          $ac_includes_default
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_safe_to_define___extensions__=yes
-else case e in @%:@(
-  e) ac_cv_safe_to_define___extensions__=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_safe_to_define___extensions__" >&5
-printf '%s\n' "$ac_cv_safe_to_define___extensions__" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether _XOPEN_SOURCE should be defined" >&5
-printf %s "checking whether _XOPEN_SOURCE should be defined... " >&6; }
-if test ${ac_cv_should_define__xopen_source+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_cv_should_define__xopen_source=no
-    if test $ac_cv_header_wchar_h = yes
-then :
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-          #include <wchar.h>
-          mbstate_t x;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-            #define _XOPEN_SOURCE 500
-            #include <wchar.h>
-            mbstate_t x;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_should_define__xopen_source=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_should_define__xopen_source" >&5
-printf '%s\n' "$ac_cv_should_define__xopen_source" >&6; }
-
-  printf '%s\n' "@%:@define _ALL_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _COSMO_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _DARWIN_C_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _GNU_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _HPUX_ALT_XOPEN_SOCKET_API 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _NETBSD_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _OPENBSD_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _POSIX_PTHREAD_SEMANTICS 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_ATTRIBS_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_BFP_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_DFP_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_FUNCS_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_IEC_60559_TYPES_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_LIB_EXT2__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define __STDC_WANT_MATH_SPEC_FUNCS__ 1" >>confdefs.h
-
-  printf '%s\n' "@%:@define _TANDEM_SOURCE 1" >>confdefs.h
-
-  if test $ac_cv_header_minix_config_h = yes
-then :
-  MINIX=yes
-    printf '%s\n' "@%:@define _MINIX 1" >>confdefs.h
-
-    printf '%s\n' "@%:@define _POSIX_SOURCE 1" >>confdefs.h
-
-    printf '%s\n' "@%:@define _POSIX_1_SOURCE 2" >>confdefs.h
-
-else case e in @%:@(
-  e) MINIX= ;;
-esac
-fi
-  if test $ac_cv_safe_to_define___extensions__ = yes
-then :
-  printf '%s\n' "@%:@define __EXTENSIONS__ 1" >>confdefs.h
-
-fi
-  if test $ac_cv_should_define__xopen_source = yes
-then :
-  printf '%s\n' "@%:@define _XOPEN_SOURCE 500" >>confdefs.h
-
-fi
-
-
-# Initialize Automake
-am__api_version='1.18'
-
-
-  # Find a good install program.  We prefer a C program (faster),
-# so one script is as good as another.  But avoid the broken or
-# incompatible versions:
-# SysV /etc/install, /usr/sbin/install
-# SunOS /usr/etc/install
-# IRIX /sbin/install
-# AIX /bin/install
-# AmigaOS /C/install, which installs bootblocks on floppy discs
-# AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag
-# AFS /usr/afsws/bin/install, which mishandles nonexistent args
-# SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
-# OS/2's system install, which has a completely different semantic
-# ./install, which can be erroneously created by make from ./install.sh.
-# Reject install programs that cannot install multiple files.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5
-printf %s "checking for a BSD-compatible install... " >&6; }
-if test -z "$INSTALL"; then
-if test ${ac_cv_path_install+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    # Account for fact that we put trailing slashes in our PATH walk.
-case $as_dir in @%:@((
-  ./ | /[cC]/* | \
-  /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \
-  ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \
-  /usr/ucb/* ) ;;
-  *)
-    # OSF/1 and SCO ODT 3.0 have their own names for install.
-    # Don't use installbsd from OSF/1 since it installs stuff as root
-    # by default.
-    for ac_prog in ginstall scoinst install; do
-      for ac_exec_ext in '' $ac_executable_extensions; do
-	if as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext"; then
-	  if test $ac_prog = install &&
-	    grep dspmsg "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # AIX install.  It has an incompatible calling convention.
-	    :
-	  elif test $ac_prog = install &&
-	    grep pwplus "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # program-specific install script used by HP pwplus--don't use.
-	    :
-	  else
-	    rm -rf conftest.one conftest.two conftest.dir
-	    echo one > conftest.one
-	    echo two > conftest.two
-	    mkdir conftest.dir
-	    if "$as_dir$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir/" &&
-	      test -s conftest.one && test -s conftest.two &&
-	      test -s conftest.dir/conftest.one &&
-	      test -s conftest.dir/conftest.two
-	    then
-	      ac_cv_path_install="$as_dir$ac_prog$ac_exec_ext -c"
-	      break 3
-	    fi
-	  fi
-	fi
-      done
-    done
-    ;;
-esac
-
-  done
-IFS=$as_save_IFS
-
-rm -rf conftest.one conftest.two conftest.dir
- ;;
-esac
-fi
-  if test ${ac_cv_path_install+y}; then
-    INSTALL=$ac_cv_path_install
-  else
-    # As a last resort, use the slow shell script.  Don't cache a
-    # value for INSTALL within a source directory, because that will
-    # break other packages using the cache if that directory is
-    # removed, or if the value is a relative name.
-    INSTALL=$ac_install_sh
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5
-printf '%s\n' "$INSTALL" >&6; }
-
-# Use test -z because SunOS4 sh mishandles braces in ${var-val}.
-# It thinks the first close brace ends the variable substitution.
-test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}'
-
-test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}'
-
-test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether sleep supports fractional seconds" >&5
-printf %s "checking whether sleep supports fractional seconds... " >&6; }
-if test ${am_cv_sleep_fractional_seconds+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if sleep 0.001 2>/dev/null
-then :
-  am_cv_sleep_fractional_seconds=yes
-else case e in @%:@(
-  e) am_cv_sleep_fractional_seconds=no ;;
-esac
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_sleep_fractional_seconds" >&5
-printf '%s\n' "$am_cv_sleep_fractional_seconds" >&6; }
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking filesystem timestamp resolution" >&5
-printf %s "checking filesystem timestamp resolution... " >&6; }
-if test ${am_cv_filesystem_timestamp_resolution+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) # Default to the worst case.
-am_cv_filesystem_timestamp_resolution=2
-
-# Only try to go finer than 1 sec if sleep can do it.
-# Don't try 1 sec, because if 0.01 sec and 0.1 sec don't work,
-# - 1 sec is not much of a win compared to 2 sec, and
-# - it takes 2 seconds to perform the test whether 1 sec works.
-# 
-# Instead, just use the default 2s on platforms that have 1s resolution,
-# accept the extra 1s delay when using $sleep in the Automake tests, in
-# exchange for not incurring the 2s delay for running the test for all
-# packages.
-#
-am_try_resolutions=
-if test "$am_cv_sleep_fractional_seconds" = yes; then
-  # Even a millisecond often causes a bunch of false positives,
-  # so just try a hundredth of a second. The time saved between .001 and
-  # .01 is not terribly consequential.
-  am_try_resolutions="0.01 0.1 $am_try_resolutions"
-fi
-
-# In order to catch current-generation FAT out, we must *modify* files
-# that already exist; the *creation* timestamp is finer.  Use names
-# that make ls -t sort them differently when they have equal
-# timestamps than when they have distinct timestamps, keeping
-# in mind that ls -t prints the *newest* file first.
-rm -f conftest.ts?
-: > conftest.ts1
-: > conftest.ts2
-: > conftest.ts3
-
-# Make sure ls -t actually works.  Do 'set' in a subshell so we don't
-# clobber the current shell's arguments. (Outer-level square brackets
-# are removed by m4; they're present so that m4 does not expand
-# <dollar><star>; be careful, easy to get confused.)
-if (
-     set X `ls -t conftest.ts[12]` &&
-     {
-       test "$*" != "X conftest.ts1 conftest.ts2" ||
-       test "$*" != "X conftest.ts2 conftest.ts1";
-     }
-); then :; else
-  # If neither matched, then we have a broken ls.  This can happen
-  # if, for instance, CONFIG_SHELL is bash and it inherits a
-  # broken ls alias from the environment.  This has actually
-  # happened.  Such a system could not be considered "sane".
-  printf '%s\n' ""Bad output from ls -t: \"`ls -t conftest.ts[12]`\""" >&5
-  { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "ls -t produces unexpected output.
-Make sure there is not a broken ls alias in your environment.
-See 'config.log' for more details" "$LINENO" 5; }
-fi
-
-for am_try_res in $am_try_resolutions; do
-  # Any one fine-grained sleep might happen to cross the boundary
-  # between two values of a coarser actual resolution, but if we do
-  # two fine-grained sleeps in a row, at least one of them will fall
-  # entirely within a coarse interval.
-  echo alpha > conftest.ts1
-  sleep $am_try_res
-  echo beta > conftest.ts2
-  sleep $am_try_res
-  echo gamma > conftest.ts3
-
-  # We assume that 'ls -t' will make use of high-resolution
-  # timestamps if the operating system supports them at all.
-  if (set X `ls -t conftest.ts?` &&
-      test "$2" = conftest.ts3 &&
-      test "$3" = conftest.ts2 &&
-      test "$4" = conftest.ts1); then
-    #
-    # Ok, ls -t worked. If we're at a resolution of 1 second, we're done,
-    # because we don't need to test make.
-    make_ok=true
-    if test $am_try_res != 1; then
-      # But if we've succeeded so far with a subsecond resolution, we
-      # have one more thing to check: make. It can happen that
-      # everything else supports the subsecond mtimes, but make doesn't;
-      # notably on macOS, which ships make 3.81 from 2006 (the last one
-      # released under GPLv2). https://bugs.gnu.org/68808
-      # 
-      # We test $MAKE if it is defined in the environment, else "make".
-      # It might get overridden later, but our hope is that in practice
-      # it does not matter: it is the system "make" which is (by far)
-      # the most likely to be broken, whereas if the user overrides it,
-      # probably they did so with a better, or at least not worse, make.
-      # https://lists.gnu.org/archive/html/automake/2024-06/msg00051.html
-      #
-      # Create a Makefile (real tab character here):
-      rm -f conftest.mk
-      echo 'conftest.ts1: conftest.ts2' >conftest.mk
-      echo '	touch conftest.ts2' >>conftest.mk
-      #
-      # Now, running
-      #   touch conftest.ts1; touch conftest.ts2; make
-      # should touch ts1 because ts2 is newer. This could happen by luck,
-      # but most often, it will fail if make's support is insufficient. So
-      # test for several consecutive successes.
-      #
-      # (We reuse conftest.ts[12] because we still want to modify existing
-      # files, not create new ones, per above.)
-      n=0
-      make=${MAKE-make}
-      until test $n -eq 3; do
-        echo one > conftest.ts1
-        sleep $am_try_res
-        echo two > conftest.ts2 # ts2 should now be newer than ts1
-        if $make -f conftest.mk | grep 'up to date' >/dev/null; then
-          make_ok=false
-          break # out of $n loop
-        fi
-        n=`expr $n + 1`
-      done
-    fi
-    #
-    if $make_ok; then
-      # Everything we know to check worked out, so call this resolution good.
-      am_cv_filesystem_timestamp_resolution=$am_try_res
-      break # out of $am_try_res loop
-    fi
-    # Otherwise, we'll go on to check the next resolution.
-  fi
-done
-rm -f conftest.ts?
-# (end _am_filesystem_timestamp_resolution)
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_filesystem_timestamp_resolution" >&5
-printf '%s\n' "$am_cv_filesystem_timestamp_resolution" >&6; }
-
-# This check should not be cached, as it may vary across builds of
-# different projects.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether build environment is sane" >&5
-printf %s "checking whether build environment is sane... " >&6; }
-# Reject unsafe characters in $srcdir or the absolute working directory
-# name.  Accept space and tab only in the latter.
-am_lf='
-'
-case `pwd` in
-  *[\\\"\#\$\&\'\`$am_lf]*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-    as_fn_error $? "unsafe absolute working directory name" "$LINENO" 5;;
-esac
-case $srcdir in
-  *[\\\"\#\$\&\'\`$am_lf\ \	]*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-    as_fn_error $? "unsafe srcdir value: '$srcdir'" "$LINENO" 5;;
-esac
-
-# Do 'set' in a subshell so we don't clobber the current shell's
-# arguments.  Must try -L first in case configure is actually a
-# symlink; some systems play weird games with the mod time of symlinks
-# (eg FreeBSD returns the mod time of the symlink's containing
-# directory).
-am_build_env_is_sane=no
-am_has_slept=no
-rm -f conftest.file
-for am_try in 1 2; do
-  echo "timestamp, slept: $am_has_slept" > conftest.file
-  if (
-    set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null`
-    if test "$*" = "X"; then
-      # -L didn't work.
-      set X `ls -t "$srcdir/configure" conftest.file`
-    fi
-    test "$2" = conftest.file
-  ); then
-    am_build_env_is_sane=yes
-    break
-  fi
-  # Just in case.
-  sleep "$am_cv_filesystem_timestamp_resolution"
-  am_has_slept=yes
-done
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_build_env_is_sane" >&5
-printf '%s\n' "$am_build_env_is_sane" >&6; }
-if test "$am_build_env_is_sane" = no; then
-  as_fn_error $? "newly created file is older than distributed files!
-Check your system clock" "$LINENO" 5
-fi
-
-# If we didn't sleep, we still need to ensure time stamps of config.status and
-# generated files are strictly newer.
-am_sleep_pid=
-if test -e conftest.file || grep 'slept: no' conftest.file >/dev/null 2>&1
-then :
-  
-else case e in @%:@(
-  e)   ( sleep "$am_cv_filesystem_timestamp_resolution" ) &
-  am_sleep_pid=$!
- ;;
-esac
-fi
-
-rm -f conftest.file
-
-test "$program_prefix" != NONE &&
-  program_transform_name="s&^&$program_prefix&;$program_transform_name"
-# Use a double $ so make ignores it.
-test "$program_suffix" != NONE &&
-  program_transform_name="s&\$&$program_suffix&;$program_transform_name"
-# Double any \ or $.
-# By default was 's,x,x', remove it if useless.
-ac_script='s/[\\$]/&&/g;s/;s,x,x,$//'
-program_transform_name=`printf '%s\n' "$program_transform_name" | sed "$ac_script"`
-
-
-  if test x"${MISSING+set}" != xset; then
-  MISSING="\${SHELL} '$am_aux_dir/missing'"
-fi
-# Use eval to expand $SHELL
-if eval "$MISSING --is-lightweight"; then
-  am_missing_run="$MISSING "
-else
-  am_missing_run=
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: 'missing' script is too old or missing" >&5
-printf '%s\n' "$as_me: WARNING: 'missing' script is too old or missing" >&2;}
-fi
-
-if test x"${install_sh+set}" != xset; then
-  case $am_aux_dir in
-  *\ * | *\	*)
-    install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;;
-  *)
-    install_sh="\${SHELL} $am_aux_dir/install-sh"
-  esac
-fi
-
-# Installed binaries are usually stripped using 'strip' when the user
-# run "make install-strip".  However 'strip' might not be the right
-# tool to use in cross-compilation environments, therefore Automake
-# will honor the 'STRIP' environment variable to overrule this program.
-if test "$cross_compiling" != no; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-printf '%s\n' "$STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-printf '%s\n' "$ac_ct_STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-fi
-INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s"
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a race-free mkdir -p" >&5
-printf %s "checking for a race-free mkdir -p... " >&6; }
-if test -z "$MKDIR_P"; then
-  if test ${ac_cv_path_mkdir+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/opt/sfw/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in mkdir gmkdir; do
-	 for ac_exec_ext in '' $ac_executable_extensions; do
-	   as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext" || continue
-	   case `"$as_dir$ac_prog$ac_exec_ext" --version 2>&1` in #(
-	     'mkdir ('*'coreutils) '* | \
-	     *'BusyBox '* | \
-	     'mkdir (fileutils) '4.1*)
-	       ac_cv_path_mkdir=$as_dir$ac_prog$ac_exec_ext
-	       break 3;;
-	   esac
-	 done
-       done
-  done
-IFS=$as_save_IFS
- ;;
-esac
-fi
-
-  test -d ./--version && rmdir ./--version
-  if test ${ac_cv_path_mkdir+y}; then
-    MKDIR_P="$ac_cv_path_mkdir -p"
-  else
-    # As a last resort, use plain mkdir -p,
-    # in the hope it doesn't have the bugs of ancient mkdir.
-    MKDIR_P='mkdir -p'
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MKDIR_P" >&5
-printf '%s\n' "$MKDIR_P" >&6; }
-
-for ac_prog in gawk mawk nawk awk 'busybox awk'
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_AWK+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$AWK"; then
-  ac_cv_prog_AWK="$AWK" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AWK="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-AWK=$ac_cv_prog_AWK
-if test -n "$AWK"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5
-printf '%s\n' "$AWK" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$AWK" && break
-done
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} sets \$(MAKE)" >&5
-printf %s "checking whether ${MAKE-make} sets \$(MAKE)... " >&6; }
-set x ${MAKE-make}
-ac_make=`printf '%s\n' "$2" | sed 's/+/p/g; s/[^a-zA-Z0-9_]/_/g'`
-if eval test \${ac_cv_prog_make_${ac_make}_set+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat >conftest.make <<\_ACEOF
-SHELL = /bin/sh
-all:
-	@printf '%s\n' '@@@%%%=$(MAKE)=@@@%%%'
-_ACEOF
-# GNU make sometimes prints "make[1]: Entering ...", which would confuse us.
-case `${MAKE-make} -f conftest.make 2>/dev/null` in
-  *@@@%%%=?*=@@@%%%*)
-    eval ac_cv_prog_make_${ac_make}_set=yes;;
-  *)
-    eval ac_cv_prog_make_${ac_make}_set=no;;
-esac
-rm -f conftest.make ;;
-esac
-fi
-if eval test \$ac_cv_prog_make_${ac_make}_set = yes; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-  SET_MAKE=
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-  SET_MAKE="MAKE=${MAKE-make}"
-fi
-
-rm -rf .tst 2>/dev/null
-mkdir .tst 2>/dev/null
-if test -d .tst; then
-  am__leading_dot=.
-else
-  am__leading_dot=_
-fi
-rmdir .tst 2>/dev/null
-
-DEPDIR="${am__leading_dot}deps"
-
-ac_config_commands="$ac_config_commands depfiles"
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} supports the include directive" >&5
-printf %s "checking whether ${MAKE-make} supports the include directive... " >&6; }
-cat > confinc.mk << 'END'
-am__doit:
-	@echo this is the am__doit target >confinc.out
-.PHONY: am__doit
-END
-am__include="#"
-am__quote=
-# BSD make does it like this.
-echo '.include "confinc.mk" # ignored' > confmf.BSD
-# Other make implementations (GNU, Solaris 10, AIX) do it like this.
-echo 'include confinc.mk # ignored' > confmf.GNU
-_am_result=no
-for s in GNU BSD; do
-  { echo "$as_me:$LINENO: ${MAKE-make} -f confmf.$s && cat confinc.out" >&5
-   (${MAKE-make} -f confmf.$s && cat confinc.out) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-  case $?:`cat confinc.out 2>/dev/null` in @%:@(
-  '0:this is the am__doit target') :
-    case $s in @%:@(
-  BSD) :
-    am__include='.include' am__quote='"' ;; @%:@(
-  *) :
-    am__include='include' am__quote='' ;;
-esac ;; @%:@(
-  *) :
-     ;;
-esac
-  if test "$am__include" != "#"; then
-    _am_result="yes ($s style)"
-    break
-  fi
-done
-rm -f confinc.* confmf.*
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ${_am_result}" >&5
-printf '%s\n' "${_am_result}" >&6; }
-
-@%:@ Check whether --enable-dependency-tracking was given.
-if test ${enable_dependency_tracking+y}
-then :
-  enableval=$enable_dependency_tracking; 
-fi
-
-if test "x$enable_dependency_tracking" != xno; then
-  am_depcomp="$ac_aux_dir/depcomp"
-  AMDEPBACKSLASH='\'
-  am__nodep='_no'
-fi
- if test "x$enable_dependency_tracking" != xno; then
-  AMDEP_TRUE=
-  AMDEP_FALSE='#'
-else
-  AMDEP_TRUE='#'
-  AMDEP_FALSE=
-fi
-
-
-AM_DEFAULT_VERBOSITY=1
-@%:@ Check whether --enable-silent-rules was given.
-if test ${enable_silent_rules+y}
-then :
-  enableval=$enable_silent_rules; 
-fi
-
-am_make=${MAKE-make}
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5
-printf %s "checking whether $am_make supports nested variables... " >&6; }
-if test ${am_cv_make_support_nested_variables+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if printf '%s\n' 'TRUE=$(BAR$(V))
-BAR0=false
-BAR1=true
-V=1
-am__doit:
-	@$(TRUE)
-.PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then
-  am_cv_make_support_nested_variables=yes
-else
-  am_cv_make_support_nested_variables=no
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5
-printf '%s\n' "$am_cv_make_support_nested_variables" >&6; }
-AM_BACKSLASH='\'
-
-am__rm_f_notfound=
-if (rm -f && rm -fr && rm -rf) 2>/dev/null
-then :
-  
-else case e in @%:@(
-  e) am__rm_f_notfound='""' ;;
-esac
-fi
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking xargs -n works" >&5
-printf %s "checking xargs -n works... " >&6; }
-if test ${am_cv_xargs_n_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test "`echo 1 2 3 | xargs -n2 echo`" = "1 2
-3"
-then :
-  am_cv_xargs_n_works=yes
-else case e in @%:@(
-  e) am_cv_xargs_n_works=no ;;
-esac
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_xargs_n_works" >&5
-printf '%s\n' "$am_cv_xargs_n_works" >&6; }
-if test "$am_cv_xargs_n_works" = yes
-then :
-  am__xargs_n='xargs -n'
-else case e in @%:@(
-  e)   am__xargs_n='am__xargs_n () { shift; sed "s/ /\\n/g" | while read am__xargs_n_arg; do "" "$am__xargs_n_arg"; done; }'
- ;;
-esac
-fi
-
-if test "`cd $srcdir && pwd`" != "`pwd`"; then
-  # Use -I$(srcdir) only when $(srcdir) != ., so that make's output
-  # is not polluted with repeated "-I."
-  am__isrc=' -I$(srcdir)'
-  # test to see if srcdir already configured
-  if test -f $srcdir/config.status; then
-    as_fn_error $? "source directory already configured; run \"make distclean\" there first" "$LINENO" 5
-  fi
-fi
-
-# test whether we have cygpath
-if test -z "$CYGPATH_W"; then
-  if (cygpath --version) >/dev/null 2>/dev/null; then
-    CYGPATH_W='cygpath -w'
-  else
-    CYGPATH_W=echo
-  fi
-fi
-
-
-# Define the identity of the package.
- PACKAGE='libXext'
- VERSION='1.3.7'
-
-
-printf '%s\n' "@%:@define PACKAGE \"$PACKAGE\"" >>confdefs.h
-
- 
-printf '%s\n' "@%:@define VERSION \"$VERSION\"" >>confdefs.h
-
-# Some tools Automake needs.
-
-ACLOCAL=${ACLOCAL-"${am_missing_run}aclocal-${am__api_version}"}
-
-
-AUTOCONF=${AUTOCONF-"${am_missing_run}autoconf"}
-
-
-AUTOMAKE=${AUTOMAKE-"${am_missing_run}automake-${am__api_version}"}
-
-
-AUTOHEADER=${AUTOHEADER-"${am_missing_run}autoheader"}
-
-
-MAKEINFO=${MAKEINFO-"${am_missing_run}makeinfo"}
-
-# For better backward compatibility.  To be removed once Automake 1.9.x
-# dies out for good.  For more background, see:
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00001.html>
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00014.html>
-mkdir_p='$(MKDIR_P)'
-
-# We need awk for the "check" target (and possibly the TAP driver).  The
-# system "awk" is bad on some platforms.
-# Always define AMTAR for backward compatibility.  Yes, it's still used
-# in the wild :-(  We should find a proper way to deprecate it ...
-AMTAR='$${TAR-tar}'
-
-
-# We'll loop over all known methods to create a tar archive until one works.
-_am_tools='gnutar plaintar pax cpio none'
-
-# The POSIX 1988 'ustar' format is defined with fixed-size fields.
-      # There is notably a 21 bits limit for the UID and the GID.  In fact,
-      # the 'pax' utility can hang on bigger UID/GID (see automake bug#8343
-      # and bug#13588).
-      am_max_uid=2097151 # 2^21 - 1
-      am_max_gid=$am_max_uid
-      # The $UID and $GID variables are not portable, so we need to resort
-      # to the POSIX-mandated id(1) utility.  Errors in the 'id' calls
-      # below are definitely unexpected, so allow the users to see them
-      # (that is, avoid stderr redirection).
-      am_uid=`id -u || echo unknown`
-      am_gid=`id -g || echo unknown`
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether UID '$am_uid' is supported by ustar format" >&5
-printf %s "checking whether UID '$am_uid' is supported by ustar format... " >&6; }
-      if test x$am_uid = xunknown; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ancient id detected; assuming current UID is ok, but dist-ustar might not work" >&5
-printf '%s\n' "$as_me: WARNING: ancient id detected; assuming current UID is ok, but dist-ustar might not work" >&2;}
-      elif test $am_uid -le $am_max_uid; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        _am_tools=none
-      fi
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether GID '$am_gid' is supported by ustar format" >&5
-printf %s "checking whether GID '$am_gid' is supported by ustar format... " >&6; }
-      if test x$gm_gid = xunknown; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ancient id detected; assuming current GID is ok, but dist-ustar might not work" >&5
-printf '%s\n' "$as_me: WARNING: ancient id detected; assuming current GID is ok, but dist-ustar might not work" >&2;}
-      elif test $am_gid -le $am_max_gid; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        _am_tools=none
-      fi
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to create a ustar tar archive" >&5
-printf %s "checking how to create a ustar tar archive... " >&6; }
-
-  # Go ahead even if we have the value already cached.  We do so because we
-  # need to set the values for the 'am__tar' and 'am__untar' variables.
-  _am_tools=${am_cv_prog_tar_ustar-$_am_tools}
-
-  for _am_tool in $_am_tools; do
-    case $_am_tool in
-    gnutar)
-      for _am_tar in tar gnutar gtar; do
-        { echo "$as_me:$LINENO: $_am_tar --version" >&5
-   ($_am_tar --version) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } && break
-      done
-      am__tar="$_am_tar --format=ustar -chf - "'"$$tardir"'
-      am__tar_="$_am_tar --format=ustar -chf - "'"$tardir"'
-      am__untar="$_am_tar -xf -"
-      ;;
-    plaintar)
-      # Must skip GNU tar: if it does not support --format= it doesn't create
-      # ustar tarball either.
-      (tar --version) >/dev/null 2>&1 && continue
-      am__tar='tar chf - "$$tardir"'
-      am__tar_='tar chf - "$tardir"'
-      am__untar='tar xf -'
-      ;;
-    pax)
-      am__tar='pax -L -x ustar -w "$$tardir"'
-      am__tar_='pax -L -x ustar -w "$tardir"'
-      am__untar='pax -r'
-      ;;
-    cpio)
-      am__tar='find "$$tardir" -print | cpio -o -H ustar -L'
-      am__tar_='find "$tardir" -print | cpio -o -H ustar -L'
-      am__untar='cpio -i -H ustar -d'
-      ;;
-    none)
-      am__tar=false
-      am__tar_=false
-      am__untar=false
-      ;;
-    esac
-
-    # If the value was cached, stop now.  We just wanted to have am__tar
-    # and am__untar set.
-    test -n "${am_cv_prog_tar_ustar}" && break
-
-    # tar/untar a dummy directory, and stop if the command works.
-    rm -rf conftest.dir
-    mkdir conftest.dir
-    echo GrepMe > conftest.dir/file
-    { echo "$as_me:$LINENO: tardir=conftest.dir && eval $am__tar_ >conftest.tar" >&5
-   (tardir=conftest.dir && eval $am__tar_ >conftest.tar) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-    rm -rf conftest.dir
-    if test -s conftest.tar; then
-      { echo "$as_me:$LINENO: $am__untar <conftest.tar" >&5
-   ($am__untar <conftest.tar) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-      { echo "$as_me:$LINENO: cat conftest.dir/file" >&5
-   (cat conftest.dir/file) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-      grep GrepMe conftest.dir/file >/dev/null 2>&1 && break
-    fi
-  done
-  rm -rf conftest.dir
-
-  if test ${am_cv_prog_tar_ustar+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) am_cv_prog_tar_ustar=$_am_tool ;;
-esac
-fi
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_prog_tar_ustar" >&5
-printf '%s\n' "$am_cv_prog_tar_ustar" >&6; }
-
-
-
-
-
-depcc="$CC"   am_compiler_list=
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking dependency style of $depcc" >&5
-printf %s "checking dependency style of $depcc... " >&6; }
-if test ${am_cv_CC_dependencies_compiler_type+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then
-  # We make a subdir and do the tests there.  Otherwise we can end up
-  # making bogus files that we don't know about and never remove.  For
-  # instance it was reported that on HP-UX the gcc test will end up
-  # making a dummy file named 'D' -- because '-MD' means "put the output
-  # in D".
-  rm -rf conftest.dir
-  mkdir conftest.dir
-  # Copy depcomp to subdir because otherwise we won't find it if we're
-  # using a relative directory.
-  cp "$am_depcomp" conftest.dir
-  cd conftest.dir
-  # We will build objects and dependencies in a subdirectory because
-  # it helps to detect inapplicable dependency modes.  For instance
-  # both Tru64's cc and ICC support -MD to output dependencies as a
-  # side effect of compilation, but ICC will put the dependencies in
-  # the current directory while Tru64 will put them in the object
-  # directory.
-  mkdir sub
-
-  am_cv_CC_dependencies_compiler_type=none
-  if test "$am_compiler_list" = ""; then
-     am_compiler_list=`sed -n 's/^#*\([a-zA-Z0-9]*\))$/\1/p' < ./depcomp`
-  fi
-  am__universal=false
-  case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac
-
-  for depmode in $am_compiler_list; do
-    # Setup a source with many dependencies, because some compilers
-    # like to wrap large dependency lists on column 80 (with \), and
-    # we should not choose a depcomp mode which is confused by this.
-    #
-    # We need to recreate these files for each test, as the compiler may
-    # overwrite some of them when testing with obscure command lines.
-    # This happens at least with the AIX C compiler.
-    : > sub/conftest.c
-    for i in 1 2 3 4 5 6; do
-      echo '#include "conftst'$i'.h"' >> sub/conftest.c
-      # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with
-      # Solaris 10 /bin/sh.
-      echo '/* dummy */' > sub/conftst$i.h
-    done
-    echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
-
-    # We check with '-c' and '-o' for the sake of the "dashmstdout"
-    # mode.  It turns out that the SunPro C++ compiler does not properly
-    # handle '-M -o', and we need to detect this.  Also, some Intel
-    # versions had trouble with output in subdirs.
-    am__obj=sub/conftest.${OBJEXT-o}
-    am__minus_obj="-o $am__obj"
-    case $depmode in
-    gcc)
-      # This depmode causes a compiler race in universal mode.
-      test "$am__universal" = false || continue
-      ;;
-    nosideeffect)
-      # After this tag, mechanisms are not by side-effect, so they'll
-      # only be used when explicitly requested.
-      if test "x$enable_dependency_tracking" = xyes; then
-	continue
-      else
-	break
-      fi
-      ;;
-    msvc7 | msvc7msys | msvisualcpp | msvcmsys)
-      # This compiler won't grok '-c -o', but also, the minuso test has
-      # not run yet.  These depmodes are late enough in the game, and
-      # so weak that their functioning should not be impacted.
-      am__obj=conftest.${OBJEXT-o}
-      am__minus_obj=
-      ;;
-    none) break ;;
-    esac
-    if depmode=$depmode \
-       source=sub/conftest.c object=$am__obj \
-       depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
-       $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \
-         >/dev/null 2>conftest.err &&
-       grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep $am__obj sub/conftest.Po > /dev/null 2>&1 &&
-       ${MAKE-make} -s -f confmf > /dev/null 2>&1; then
-      # icc doesn't choke on unknown options, it will just issue warnings
-      # or remarks (even with -Werror).  So we grep stderr for any message
-      # that says an option was ignored or not supported.
-      # When given -MP, icc 7.0 and 7.1 complain thus:
-      #   icc: Command line warning: ignoring option '-M'; no argument required
-      # The diagnosis changed in icc 8.0:
-      #   icc: Command line remark: option '-MP' not supported
-      if (grep 'ignoring option' conftest.err ||
-          grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else
-        am_cv_CC_dependencies_compiler_type=$depmode
-        break
-      fi
-    fi
-  done
-
-  cd ..
-  rm -rf conftest.dir
-else
-  am_cv_CC_dependencies_compiler_type=none
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_CC_dependencies_compiler_type" >&5
-printf '%s\n' "$am_cv_CC_dependencies_compiler_type" >&6; }
-CCDEPMODE=depmode=$am_cv_CC_dependencies_compiler_type
-
- if 
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_CC_dependencies_compiler_type" = gcc3; then
-  am__fastdepCC_TRUE=
-  am__fastdepCC_FALSE='#'
-else
-  am__fastdepCC_TRUE='#'
-  am__fastdepCC_FALSE=
-fi
-
-
-# Variables for tags utilities; see am/tags.am
-if test -z "$CTAGS"; then
-  CTAGS=ctags
-fi
-
-if test -z "$ETAGS"; then
-  ETAGS=etags
-fi
-
-if test -z "$CSCOPE"; then
-  CSCOPE=cscope
-fi
-
-
-
-
-
-
-
-
-# Initialize libtool
-case `pwd` in
-  *\ * | *\	*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&5
-printf '%s\n' "$as_me: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&2;} ;;
-esac
-
-
-
-macro_version='2.5.4'
-macro_revision='2.5.4'
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-
-  
-ltmain=$ac_aux_dir/ltmain.sh
-
-
-  
-  # Make sure we can run config.sub.
-$SHELL "${ac_aux_dir}config.sub" sun4 >/dev/null 2>&1 ||
-  as_fn_error $? "cannot run $SHELL ${ac_aux_dir}config.sub" "$LINENO" 5
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking build system type" >&5
-printf %s "checking build system type... " >&6; }
-if test ${ac_cv_build+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_build_alias=$build_alias
-test "x$ac_build_alias" = x &&
-  ac_build_alias=`$SHELL "${ac_aux_dir}config.guess"`
-test "x$ac_build_alias" = x &&
-  as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5
-ac_cv_build=`$SHELL "${ac_aux_dir}config.sub" $ac_build_alias` ||
-  as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $ac_build_alias failed" "$LINENO" 5
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5
-printf '%s\n' "$ac_cv_build" >&6; }
-case $ac_cv_build in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical build" "$LINENO" 5;;
-esac
-build=$ac_cv_build
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_build
-shift
-build_cpu=$1
-build_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-build_os=$*
-IFS=$ac_save_IFS
-case $build_os in *\ *) build_os=`printf '%s\n' "$build_os" | sed 's/ /-/g'`;; esac
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking host system type" >&5
-printf %s "checking host system type... " >&6; }
-if test ${ac_cv_host+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test "x$host_alias" = x; then
-  ac_cv_host=$ac_cv_build
-else
-  ac_cv_host=`$SHELL "${ac_aux_dir}config.sub" $host_alias` ||
-    as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $host_alias failed" "$LINENO" 5
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5
-printf '%s\n' "$ac_cv_host" >&6; }
-case $ac_cv_host in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical host" "$LINENO" 5;;
-esac
-host=$ac_cv_host
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_host
-shift
-host_cpu=$1
-host_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-host_os=$*
-IFS=$ac_save_IFS
-case $host_os in *\ *) host_os=`printf '%s\n' "$host_os" | sed 's/ /-/g'`;; esac
-
-
-# Backslashify metacharacters that are still active within
-# double-quoted strings.
-sed_quote_subst='s/\(["`$\\]\)/\\\1/g'
-
-# Same as above, but do not quote variable references.
-double_quote_subst='s/\(["`\\]\)/\\\1/g'
-
-# Sed substitution to delay expansion of an escaped shell variable in a
-# double_quote_subst'ed string.
-delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g'
-
-# Sed substitution to delay expansion of an escaped single quote.
-delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g'
-
-# Sed substitution to avoid accidental globbing in evaled expressions
-no_glob_subst='s/\*/\\\*/g'
-
-ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to print strings" >&5
-printf %s "checking how to print strings... " >&6; }
-# Test print first, because it will be a builtin if present.
-if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \
-   test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='print -r --'
-elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='printf %s\n'
-else
-  # Use this function as a fallback that always works.
-  func_fallback_echo ()
-  {
-    eval 'cat <<_LTECHO_EOF
-$1
-_LTECHO_EOF'
-  }
-  ECHO='func_fallback_echo'
-fi
-
-# func_echo_all arg...
-# Invoke $ECHO with all args, space-separated.
-func_echo_all ()
-{
-    $ECHO ""
-}
-
-case $ECHO in
-  printf*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: printf" >&5
-printf '%s\n' "printf" >&6; } ;;
-  print*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: print -r" >&5
-printf '%s\n' "print -r" >&6; } ;;
-  *) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: cat" >&5
-printf '%s\n' "cat" >&6; } ;;
-esac
-
-
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a sed that does not truncate output" >&5
-printf %s "checking for a sed that does not truncate output... " >&6; }
-if test ${ac_cv_path_SED+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)           ac_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/
-     for ac_i in 1 2 3 4 5 6 7; do
-       ac_script="$ac_script$as_nl$ac_script"
-     done
-     echo "$ac_script" 2>/dev/null | sed 99q >conftest.sed
-     { ac_script=; unset ac_script;}
-     if test -z "$SED"; then
-  ac_path_SED_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in sed gsed
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_SED="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_SED" || continue
-# Check for GNU ac_path_SED and select it if it is found.
-  # Check for GNU $ac_path_SED
-case `"$ac_path_SED" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_SED="$ac_path_SED" ac_path_SED_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' '' >> "conftest.nl"
-    "$ac_path_SED" -f conftest.sed < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_SED_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_SED="$ac_path_SED"
-      ac_path_SED_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_SED_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_SED"; then
-    as_fn_error $? "no acceptable sed could be found in \$PATH" "$LINENO" 5
-  fi
-else
-  ac_cv_path_SED=$SED
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_SED" >&5
-printf '%s\n' "$ac_cv_path_SED" >&6; }
- SED="$ac_cv_path_SED"
-  rm -f conftest.sed
-
-test -z "$SED" && SED=sed
-Xsed="$SED -e 1s/^X//"
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5
-printf %s "checking for grep that handles long lines and -e... " >&6; }
-if test ${ac_cv_path_GREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -z "$GREP"; then
-  ac_path_GREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in grep ggrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_GREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_GREP" || continue
-# Check for GNU ac_path_GREP and select it if it is found.
-  # Check for GNU $ac_path_GREP
-case `"$ac_path_GREP" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'GREP' >> "conftest.nl"
-    "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_GREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_GREP="$ac_path_GREP"
-      ac_path_GREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_GREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_GREP"; then
-    as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_GREP=$GREP
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5
-printf '%s\n' "$ac_cv_path_GREP" >&6; }
- GREP="$ac_cv_path_GREP"
- 
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
-printf %s "checking for egrep... " >&6; }
-if test ${ac_cv_path_EGREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
-   then ac_cv_path_EGREP="$GREP -E"
-   else
-     if test -z "$EGREP"; then
-  ac_path_EGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in egrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_EGREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_EGREP" || continue
-# Check for GNU ac_path_EGREP and select it if it is found.
-  # Check for GNU $ac_path_EGREP
-case `"$ac_path_EGREP" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'EGREP' >> "conftest.nl"
-    "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_EGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_EGREP="$ac_path_EGREP"
-      ac_path_EGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_EGREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_EGREP"; then
-    as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_EGREP=$EGREP
-fi
-
-   fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
-printf '%s\n' "$ac_cv_path_EGREP" >&6; }
- EGREP="$ac_cv_path_EGREP"
- 
-         EGREP_TRADITIONAL=$EGREP
- ac_cv_path_EGREP_TRADITIONAL=$EGREP
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for fgrep" >&5
-printf %s "checking for fgrep... " >&6; }
-if test ${ac_cv_path_FGREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if echo 'ab*c' | $GREP -F 'ab*c' >/dev/null 2>&1
-   then ac_cv_path_FGREP="$GREP -F"
-   else
-     if test -z "$FGREP"; then
-  ac_path_FGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in fgrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_FGREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_FGREP" || continue
-# Check for GNU ac_path_FGREP and select it if it is found.
-  # Check for GNU $ac_path_FGREP
-case `"$ac_path_FGREP" --version 2>&1` in @%:@(
-*GNU*)
-  ac_cv_path_FGREP="$ac_path_FGREP" ac_path_FGREP_found=:;;
-@%:@(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'FGREP' >> "conftest.nl"
-    "$ac_path_FGREP" FGREP < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_FGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_FGREP="$ac_path_FGREP"
-      ac_path_FGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_FGREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_FGREP"; then
-    as_fn_error $? "no acceptable fgrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_FGREP=$FGREP
-fi
-
-   fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_FGREP" >&5
-printf '%s\n' "$ac_cv_path_FGREP" >&6; }
- FGREP="$ac_cv_path_FGREP"
- 
-
-test -z "$GREP" && GREP=grep
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-
-
-@%:@ Check whether --with-gnu-ld was given.
-if test ${with_gnu_ld+y}
-then :
-  withval=$with_gnu_ld; test no = "$withval" || with_gnu_ld=yes
-else case e in @%:@(
-  e) with_gnu_ld=no ;;
-esac
-fi
-
-ac_prog=ld
-if test yes = "$GCC"; then
-  # Check if gcc -print-prog-name=ld gives a path.
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for ld used by $CC" >&5
-printf %s "checking for ld used by $CC... " >&6; }
-  case $host in
-  *-*-mingw* | *-*-windows*)
-    # gcc leaves a trailing carriage return, which upsets mingw
-    ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;;
-  *)
-    ac_prog=`($CC -print-prog-name=ld) 2>&5` ;;
-  esac
-  case $ac_prog in
-    # Accept absolute paths.
-    [\\/]* | ?:[\\/]*)
-      re_direlt='/[^/][^/]*/\.\./'
-      # Canonicalize the pathname of ld
-      ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'`
-      while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do
-	ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"`
-      done
-      test -z "$LD" && LD=$ac_prog
-      ;;
-  "")
-    # If it fails, then pretend we aren't using GCC.
-    ac_prog=ld
-    ;;
-  *)
-    # If it is relative, then search for the first ld in PATH.
-    with_gnu_ld=unknown
-    ;;
-  esac
-elif test yes = "$with_gnu_ld"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for GNU ld" >&5
-printf %s "checking for GNU ld... " >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for non-GNU ld" >&5
-printf %s "checking for non-GNU ld... " >&6; }
-fi
-if test ${lt_cv_path_LD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -z "$LD"; then
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  for ac_dir in $PATH; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then
-      lt_cv_path_LD=$ac_dir/$ac_prog
-      # Check to see if the program is GNU ld.  I'd rather use --version,
-      # but apparently some variants of GNU ld only accept -v.
-      # Break only if it was the GNU/non-GNU ld that we prefer.
-      case `"$lt_cv_path_LD" -v 2>&1 </dev/null` in
-      *GNU* | *'with BFD'*)
-	test no != "$with_gnu_ld" && break
-	;;
-      *)
-	test yes != "$with_gnu_ld" && break
-	;;
-      esac
-    fi
-  done
-  IFS=$lt_save_ifs
-else
-  lt_cv_path_LD=$LD # Let the user override the test with a path.
-fi ;;
-esac
-fi
-
-LD=$lt_cv_path_LD
-if test -n "$LD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LD" >&5
-printf '%s\n' "$LD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-test -z "$LD" && as_fn_error $? "no acceptable ld found in \$PATH" "$LINENO" 5
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if the linker ($LD) is GNU ld" >&5
-printf %s "checking if the linker ($LD) is GNU ld... " >&6; }
-if test ${lt_cv_prog_gnu_ld+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) # I'd rather use --version here, but apparently some GNU lds only accept -v.
-case `$LD -v 2>&1 </dev/null` in
-*GNU* | *'with BFD'*)
-  lt_cv_prog_gnu_ld=yes
-  ;;
-*)
-  lt_cv_prog_gnu_ld=no
-  ;;
-esac ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_gnu_ld" >&5
-printf '%s\n' "$lt_cv_prog_gnu_ld" >&6; }
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for BSD- or MS-compatible name lister (nm)" >&5
-printf %s "checking for BSD- or MS-compatible name lister (nm)... " >&6; }
-if test ${lt_cv_path_NM+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$NM"; then
-  # Let the user override the test.
-  lt_cv_path_NM=$NM
-else
-  lt_nm_to_check=${ac_tool_prefix}nm
-  if test -n "$ac_tool_prefix" && test "$build" = "$host"; then
-    lt_nm_to_check="$lt_nm_to_check nm"
-  fi
-  for lt_tmp_nm in $lt_nm_to_check; do
-    lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-    for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do
-      IFS=$lt_save_ifs
-      test -z "$ac_dir" && ac_dir=.
-      tmp_nm=$ac_dir/$lt_tmp_nm
-      if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then
-	# Check to see if the nm accepts a BSD-compat flag.
-	# Adding the 'sed 1q' prevents false positives on HP-UX, which says:
-	#   nm: unknown option "B" ignored
-	# Tru64's nm complains that /dev/null is an invalid object file
-	# MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty
-	case $build_os in
-	mingw* | windows*) lt_bad_file=conftest.nm/nofile ;;
-	*) lt_bad_file=/dev/null ;;
-	esac
-	case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in
-	*$lt_bad_file* | *'Invalid file or object type'*)
-	  lt_cv_path_NM="$tmp_nm -B"
-	  break 2
-	  ;;
-	*)
-	  case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in
-	  */dev/null*)
-	    lt_cv_path_NM="$tmp_nm -p"
-	    break 2
-	    ;;
-	  *)
-	    lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but
-	    continue # so that we can try to find one that supports BSD flags
-	    ;;
-	  esac
-	  ;;
-	esac
-      fi
-    done
-    IFS=$lt_save_ifs
-  done
-  : ${lt_cv_path_NM=no}
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_NM" >&5
-printf '%s\n' "$lt_cv_path_NM" >&6; }
-if test no != "$lt_cv_path_NM"; then
-  NM=$lt_cv_path_NM
-else
-  # Didn't find any BSD compatible name lister, look for dumpbin.
-  if test -n "$DUMPBIN"; then :
-    # Let the user override the test.
-  else
-    if test -n "$ac_tool_prefix"; then
-  for ac_prog in dumpbin "link -dump"
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DUMPBIN+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$DUMPBIN"; then
-  ac_cv_prog_DUMPBIN="$DUMPBIN" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DUMPBIN="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DUMPBIN=$ac_cv_prog_DUMPBIN
-if test -n "$DUMPBIN"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DUMPBIN" >&5
-printf '%s\n' "$DUMPBIN" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$DUMPBIN" && break
-  done
-fi
-if test -z "$DUMPBIN"; then
-  ac_ct_DUMPBIN=$DUMPBIN
-  for ac_prog in dumpbin "link -dump"
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DUMPBIN+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_DUMPBIN"; then
-  ac_cv_prog_ac_ct_DUMPBIN="$ac_ct_DUMPBIN" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DUMPBIN="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DUMPBIN=$ac_cv_prog_ac_ct_DUMPBIN
-if test -n "$ac_ct_DUMPBIN"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DUMPBIN" >&5
-printf '%s\n' "$ac_ct_DUMPBIN" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_DUMPBIN" && break
-done
-
-  if test "x$ac_ct_DUMPBIN" = x; then
-    DUMPBIN=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DUMPBIN=$ac_ct_DUMPBIN
-  fi
-fi
-
-    case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in
-    *COFF*)
-      DUMPBIN="$DUMPBIN -symbols -headers"
-      ;;
-    *)
-      DUMPBIN=:
-      ;;
-    esac
-  fi
-  
-  if test : != "$DUMPBIN"; then
-    NM=$DUMPBIN
-  fi
-fi
-test -z "$NM" && NM=nm
-
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the name lister ($NM) interface" >&5
-printf %s "checking the name lister ($NM) interface... " >&6; }
-if test ${lt_cv_nm_interface+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_nm_interface="BSD nm"
-  echo "int some_variable = 0;" > conftest.$ac_ext
-  (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&5)
-  (eval "$ac_compile" 2>conftest.err)
-  cat conftest.err >&5
-  (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&5)
-  (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
-  cat conftest.err >&5
-  (eval echo "\"\$as_me:$LINENO: output\"" >&5)
-  cat conftest.out >&5
-  if $GREP 'External.*some_variable' conftest.out > /dev/null; then
-    lt_cv_nm_interface="MS dumpbin"
-  fi
-  rm -f conftest* ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_nm_interface" >&5
-printf '%s\n' "$lt_cv_nm_interface" >&6; }
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ln -s works" >&5
-printf %s "checking whether ln -s works... " >&6; }
-LN_S=$as_ln_s
-if test "$LN_S" = "ln -s"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no, using $LN_S" >&5
-printf '%s\n' "no, using $LN_S" >&6; }
-fi
-
-# find the maximum length of command line arguments
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the maximum length of command line arguments" >&5
-printf %s "checking the maximum length of command line arguments... " >&6; }
-if test ${lt_cv_sys_max_cmd_len+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)   i=0
-  teststring=ABCD
-
-  case $build_os in
-  msdosdjgpp*)
-    # On DJGPP, this test can blow up pretty badly due to problems in libc
-    # (any single argument exceeding 2000 bytes causes a buffer overrun
-    # during glob expansion).  Even if it were fixed, the result of this
-    # check would be larger than it should be.
-    lt_cv_sys_max_cmd_len=12288;    # 12K is about right
-    ;;
-
-  gnu* | ironclad*)
-    # Under GNU Hurd and Ironclad, this test is not required because there
-    # is no limit to the length of command line arguments.
-    # Libtool will interpret -1 as no limit whatsoever
-    lt_cv_sys_max_cmd_len=-1;
-    ;;
-
-  cygwin* | mingw* | windows* | cegcc*)
-    # On Win9x/ME, this test blows up -- it succeeds, but takes
-    # about 5 minutes as the teststring grows exponentially.
-    # Worse, since 9x/ME are not pre-emptively multitasking,
-    # you end up with a "frozen" computer, even though with patience
-    # the test eventually succeeds (with a max line length of 256k).
-    # Instead, let's just punt: use the minimum linelength reported by
-    # all of the supported platforms: 8192 (on NT/2K/XP).
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  mint*)
-    # On MiNT this can take a long time and run out of memory.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  amigaos*)
-    # On AmigaOS with pdksh, this test takes hours, literally.
-    # So we just punt and use a minimum line length of 8192.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*)
-    # This has been around since 386BSD, at least.  Likely further.
-    if test -x /sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax`
-    elif test -x /usr/sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax`
-    else
-      lt_cv_sys_max_cmd_len=65536	# usable default for all BSDs
-    fi
-    # And add a safety zone
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    ;;
-
-  interix*)
-    # We know the value 262144 and hardcode it with a safety zone (like BSD)
-    lt_cv_sys_max_cmd_len=196608
-    ;;
-
-  os2*)
-    # The test takes a long time on OS/2.
-    lt_cv_sys_max_cmd_len=8192
-    ;;
-
-  osf*)
-    # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure
-    # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not
-    # nice to cause kernel panics so lets avoid the loop below.
-    # First set a reasonable default.
-    lt_cv_sys_max_cmd_len=16384
-    #
-    if test -x /sbin/sysconfig; then
-      case `/sbin/sysconfig -q proc exec_disable_arg_limit` in
-        *1*) lt_cv_sys_max_cmd_len=-1 ;;
-      esac
-    fi
-    ;;
-  sco3.2v5*)
-    lt_cv_sys_max_cmd_len=102400
-    ;;
-  sysv5* | sco5v6* | sysv4.2uw2*)
-    kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null`
-    if test -n "$kargmax"; then
-      lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[	 ]//'`
-    else
-      lt_cv_sys_max_cmd_len=32768
-    fi
-    ;;
-  *)
-    lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null`
-    if test -n "$lt_cv_sys_max_cmd_len" && \
-       test undefined != "$lt_cv_sys_max_cmd_len"; then
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    else
-      # Make teststring a little bigger before we do anything with it.
-      # a 1K string should be a reasonable start.
-      for i in 1 2 3 4 5 6 7 8; do
-        teststring=$teststring$teststring
-      done
-      SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}}
-      # If test is not a shell built-in, we'll probably end up computing a
-      # maximum length that is only half of the actual maximum length, but
-      # we can't tell.
-      while { test X`env echo "$teststring$teststring" 2>/dev/null` \
-	         = "X$teststring$teststring"; } >/dev/null 2>&1 &&
-	      test 17 != "$i" # 1/2 MB should be enough
-      do
-        i=`expr $i + 1`
-        teststring=$teststring$teststring
-      done
-      # Only check the string length outside the loop.
-      lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1`
-      teststring=
-      # Add a significant safety factor because C++ compilers can tack on
-      # massive amounts of additional arguments before passing them to the
-      # linker.  It appears as though 1/2 is a usable value.
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2`
-    fi
-    ;;
-  esac
- ;;
-esac
-fi
-
-if test -n "$lt_cv_sys_max_cmd_len"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sys_max_cmd_len" >&5
-printf '%s\n' "$lt_cv_sys_max_cmd_len" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none" >&5
-printf '%s\n' "none" >&6; }
-fi
-max_cmd_len=$lt_cv_sys_max_cmd_len
-
-    
-    
-    
-
-
-: ${CP="cp -f"}
-: ${MV="mv -f"}
-: ${RM="rm -f"}
-
-if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then
-  lt_unset=unset
-else
-  lt_unset=false
-fi
-
-    
-    
-    
-
-# test EBCDIC or ASCII
-case `echo X|tr X '\101'` in
- A) # ASCII based system
-    # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr
-  lt_SP2NL='tr \040 \012'
-  lt_NL2SP='tr \015\012 \040\040'
-  ;;
- *) # EBCDIC based system
-  lt_SP2NL='tr \100 \n'
-  lt_NL2SP='tr \r\n \100\100'
-  ;;
-esac
-
-    
-    
-    
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to $host format" >&5
-printf %s "checking how to convert $build file names to $host format... " >&6; }
-if test ${lt_cv_to_host_file_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $host in
-  *-*-mingw* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32
-        ;;
-    esac
-    ;;
-  *-*-cygwin* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_noop
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin
-        ;;
-    esac
-    ;;
-  * ) # unhandled hosts (and "normal" native builds)
-    lt_cv_to_host_file_cmd=func_convert_file_noop
-    ;;
-esac
- ;;
-esac
-fi
-
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_host_file_cmd" >&5
-printf '%s\n' "$lt_cv_to_host_file_cmd" >&6; }
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to toolchain format" >&5
-printf %s "checking how to convert $build file names to toolchain format... " >&6; }
-if test ${lt_cv_to_tool_file_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) #assume ordinary cross tools, or native build.
-lt_cv_to_tool_file_cmd=func_convert_file_noop
-case $host in
-  *-*-mingw* | *-*-windows* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32
-        ;;
-    esac
-    ;;
-esac
- ;;
-esac
-fi
-
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_tool_file_cmd" >&5
-printf '%s\n' "$lt_cv_to_tool_file_cmd" >&6; }
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $LD option to reload object files" >&5
-printf %s "checking for $LD option to reload object files... " >&6; }
-if test ${lt_cv_ld_reload_flag+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ld_reload_flag='-r' ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_reload_flag" >&5
-printf '%s\n' "$lt_cv_ld_reload_flag" >&6; }
-reload_flag=$lt_cv_ld_reload_flag
-case $reload_flag in
-"" | " "*) ;;
-*) reload_flag=" $reload_flag" ;;
-esac
-reload_cmds='$LD$reload_flag -o $output$reload_objs'
-case $host_os in
-  cygwin* | mingw* | windows* | pw32* | cegcc*)
-    if test yes != "$GCC"; then
-      reload_cmds=false
-    fi
-    ;;
-  darwin*)
-    if test yes = "$GCC"; then
-      reload_cmds='$LTCC $LTCFLAGS -nostdlib $wl-r -o $output$reload_objs'
-    else
-      reload_cmds='$LD$reload_flag -o $output$reload_objs'
-    fi
-    ;;
-esac
-
-    
-    
-    
-
-    
-    
-    
-
-# Extract the first word of "file", so it can be a program name with args.
-set dummy file; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_FILECMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$FILECMD"; then
-  ac_cv_prog_FILECMD="$FILECMD" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_FILECMD="file"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  test -z "$ac_cv_prog_FILECMD" && ac_cv_prog_FILECMD=":"
-fi ;;
-esac
-fi
-FILECMD=$ac_cv_prog_FILECMD
-if test -n "$FILECMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FILECMD" >&5
-printf '%s\n' "$FILECMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-
-    
-    
-    
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}objdump", so it can be a program name with args.
-set dummy ${ac_tool_prefix}objdump; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OBJDUMP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$OBJDUMP"; then
-  ac_cv_prog_OBJDUMP="$OBJDUMP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OBJDUMP="${ac_tool_prefix}objdump"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OBJDUMP=$ac_cv_prog_OBJDUMP
-if test -n "$OBJDUMP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OBJDUMP" >&5
-printf '%s\n' "$OBJDUMP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OBJDUMP"; then
-  ac_ct_OBJDUMP=$OBJDUMP
-  # Extract the first word of "objdump", so it can be a program name with args.
-set dummy objdump; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OBJDUMP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_OBJDUMP"; then
-  ac_cv_prog_ac_ct_OBJDUMP="$ac_ct_OBJDUMP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OBJDUMP="objdump"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OBJDUMP=$ac_cv_prog_ac_ct_OBJDUMP
-if test -n "$ac_ct_OBJDUMP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OBJDUMP" >&5
-printf '%s\n' "$ac_ct_OBJDUMP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OBJDUMP" = x; then
-    OBJDUMP="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OBJDUMP=$ac_ct_OBJDUMP
-  fi
-else
-  OBJDUMP="$ac_cv_prog_OBJDUMP"
-fi
-
-test -z "$OBJDUMP" && OBJDUMP=objdump
-
-    
-    
-    
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to recognize dependent libraries" >&5
-printf %s "checking how to recognize dependent libraries... " >&6; }
-if test ${lt_cv_deplibs_check_method+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_file_magic_cmd='$MAGIC_CMD'
-lt_cv_file_magic_test_file=
-lt_cv_deplibs_check_method='unknown'
-# Need to set the preceding variable on all platforms that support
-# interlibrary dependencies.
-# 'none' -- dependencies not supported.
-# 'unknown' -- same as none, but documents that we really don't know.
-# 'pass_all' -- all dependencies passed with no checks.
-# 'file_magic [[regex]]' -- check by looking for files in library path
-# that responds to the $file_magic_cmd with a given extended regex.
-# If you have 'file' or equivalent on your system and you're not sure
-# whether 'pass_all' will *always* work, you probably want this one.
-
-case $host_os in
-aix[4-9]*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-beos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-bsdi[45]*)
-  lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib)'
-  lt_cv_file_magic_cmd='$FILECMD -L'
-  lt_cv_file_magic_test_file=/shlib/libc.so
-  ;;
-
-cygwin*)
-  # func_win32_libid is a shell function defined in ltmain.sh
-  lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-  lt_cv_file_magic_cmd='func_win32_libid'
-  ;;
-
-mingw* | windows* | pw32*)
-  # Base MSYS/MinGW do not provide the 'file' command needed by
-  # func_win32_libid shell function, so use a weaker test based on 'objdump',
-  # unless we find 'file', for example because we are cross-compiling.
-  if ( file / ) >/dev/null 2>&1; then
-    lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-    lt_cv_file_magic_cmd='func_win32_libid'
-  else
-    # Keep this pattern in sync with the one in func_win32_libid.
-    lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64|pe-aarch64)'
-    lt_cv_file_magic_cmd='$OBJDUMP -f'
-  fi
-  ;;
-
-cegcc*)
-  # use the weaker test based on 'objdump'. See mingw*.
-  lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?'
-  lt_cv_file_magic_cmd='$OBJDUMP -f'
-  ;;
-
-darwin* | rhapsody*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    case $host_cpu in
-    i*86 )
-      # Not sure whether the presence of OpenBSD here was a mistake.
-      # Let's accept both of them until this is cleared up.
-      lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[3-9]86 (compact )?demand paged shared library'
-      lt_cv_file_magic_cmd=$FILECMD
-      lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*`
-      ;;
-    esac
-  else
-    lt_cv_deplibs_check_method=pass_all
-  fi
-  ;;
-
-haiku*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-hpux10.20* | hpux11*)
-  lt_cv_file_magic_cmd=$FILECMD
-  case $host_cpu in
-  ia64*)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF-[0-9][0-9]) shared object file - IA64'
-    lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so
-    ;;
-  hppa*64*)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]'
-    lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl
-    ;;
-  *)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|PA-RISC[0-9]\.[0-9]) shared library'
-    lt_cv_file_magic_test_file=/usr/lib/libc.sl
-    ;;
-  esac
-  ;;
-
-interix[3-9]*)
-  # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here
-  lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|\.a)$'
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $LD in
-  *-32|*"-32 ") libmagic=32-bit;;
-  *-n32|*"-n32 ") libmagic=N32;;
-  *-64|*"-64 ") libmagic=64-bit;;
-  *) libmagic=never-match;;
-  esac
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-*-mlibc)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-netbsd* | netbsdelf*-gnu)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|_pic\.a)$'
-  fi
-  ;;
-
-newos6*)
-  lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (executable|dynamic lib)'
-  lt_cv_file_magic_cmd=$FILECMD
-  lt_cv_file_magic_test_file=/usr/lib/libnls.so
-  ;;
-
-*nto* | *qnx*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-openbsd*)
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|\.so|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
-  fi
-  ;;
-
-osf3* | osf4* | osf5*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-rdos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-serenity*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-solaris*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv4 | sysv4.3*)
-  case $host_vendor in
-  motorola)
-    lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib) M[0-9][0-9]* Version [0-9]'
-    lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*`
-    ;;
-  ncr)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  sequent)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [LM]SB (shared object|dynamic lib )'
-    ;;
-  sni)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method="file_magic ELF [0-9][0-9]*-bit [LM]SB dynamic lib"
-    lt_cv_file_magic_test_file=/lib/libc.so
-    ;;
-  siemens)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  pc)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  esac
-  ;;
-
-tpf*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-os2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-esac
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_deplibs_check_method" >&5
-printf '%s\n' "$lt_cv_deplibs_check_method" >&6; }
-
-file_magic_glob=
-want_nocaseglob=no
-if test "$build" = "$host"; then
-  case $host_os in
-  mingw* | windows* | pw32*)
-    if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then
-      want_nocaseglob=yes
-    else
-      file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[\1]\/[\1]\/g;/g"`
-    fi
-    ;;
-  esac
-fi
-
-file_magic_cmd=$lt_cv_file_magic_cmd
-deplibs_check_method=$lt_cv_deplibs_check_method
-test -z "$deplibs_check_method" && deplibs_check_method=unknown
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}dlltool", so it can be a program name with args.
-set dummy ${ac_tool_prefix}dlltool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DLLTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$DLLTOOL"; then
-  ac_cv_prog_DLLTOOL="$DLLTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DLLTOOL="${ac_tool_prefix}dlltool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DLLTOOL=$ac_cv_prog_DLLTOOL
-if test -n "$DLLTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DLLTOOL" >&5
-printf '%s\n' "$DLLTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_DLLTOOL"; then
-  ac_ct_DLLTOOL=$DLLTOOL
-  # Extract the first word of "dlltool", so it can be a program name with args.
-set dummy dlltool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DLLTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_DLLTOOL"; then
-  ac_cv_prog_ac_ct_DLLTOOL="$ac_ct_DLLTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DLLTOOL="dlltool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DLLTOOL=$ac_cv_prog_ac_ct_DLLTOOL
-if test -n "$ac_ct_DLLTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DLLTOOL" >&5
-printf '%s\n' "$ac_ct_DLLTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_DLLTOOL" = x; then
-    DLLTOOL="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DLLTOOL=$ac_ct_DLLTOOL
-  fi
-else
-  DLLTOOL="$ac_cv_prog_DLLTOOL"
-fi
-
-test -z "$DLLTOOL" && DLLTOOL=dlltool
-
-    
-    
-    
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to associate runtime and link libraries" >&5
-printf %s "checking how to associate runtime and link libraries... " >&6; }
-if test ${lt_cv_sharedlib_from_linklib_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_sharedlib_from_linklib_cmd='unknown'
-
-case $host_os in
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  # two different shell functions defined in ltmain.sh;
-  # decide which one to use based on capabilities of $DLLTOOL
-  case `$DLLTOOL --help 2>&1` in
-  *--identify-strict*)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib
-    ;;
-  *)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback
-    ;;
-  esac
-  ;;
-*)
-  # fallback: assume linklib IS sharedlib
-  lt_cv_sharedlib_from_linklib_cmd=$ECHO
-  ;;
-esac
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sharedlib_from_linklib_cmd" >&5
-printf '%s\n' "$lt_cv_sharedlib_from_linklib_cmd" >&6; }
-sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd
-test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO
-
-
-    
-    
-    
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args.
-set dummy ${ac_tool_prefix}ranlib; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_RANLIB+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$RANLIB"; then
-  ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-RANLIB=$ac_cv_prog_RANLIB
-if test -n "$RANLIB"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5
-printf '%s\n' "$RANLIB" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_RANLIB"; then
-  ac_ct_RANLIB=$RANLIB
-  # Extract the first word of "ranlib", so it can be a program name with args.
-set dummy ranlib; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_RANLIB+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_RANLIB"; then
-  ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_RANLIB="ranlib"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB
-if test -n "$ac_ct_RANLIB"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5
-printf '%s\n' "$ac_ct_RANLIB" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_RANLIB" = x; then
-    RANLIB=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    RANLIB=$ac_ct_RANLIB
-  fi
-else
-  RANLIB="$ac_cv_prog_RANLIB"
-fi
-
-if test -n "$ac_tool_prefix"; then
-  for ac_prog in ar
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_AR+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$AR"; then
-  ac_cv_prog_AR="$AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AR="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-AR=$ac_cv_prog_AR
-if test -n "$AR"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $AR" >&5
-printf '%s\n' "$AR" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$AR" && break
-  done
-fi
-if test -z "$AR"; then
-  ac_ct_AR=$AR
-  for ac_prog in ar
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_AR+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_AR"; then
-  ac_cv_prog_ac_ct_AR="$ac_ct_AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_AR="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_AR=$ac_cv_prog_ac_ct_AR
-if test -n "$ac_ct_AR"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_AR" >&5
-printf '%s\n' "$ac_ct_AR" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_AR" && break
-done
-
-  if test "x$ac_ct_AR" = x; then
-    AR="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    AR=$ac_ct_AR
-  fi
-fi
-
-: ${AR=ar}
-
-    
-    
-    
-
-
-# Use ARFLAGS variable as AR's operation code to sync the variable naming with
-# Automake.  If both AR_FLAGS and ARFLAGS are specified, AR_FLAGS should have
-# higher priority because that's what people were doing historically (setting
-# ARFLAGS for automake and AR_FLAGS for libtool).  FIXME: Make the AR_FLAGS
-# variable obsoleted/removed.
-
-test ${AR_FLAGS+y} || AR_FLAGS=${ARFLAGS-cr}
-lt_ar_flags=$AR_FLAGS
-
-    
-    
-    
-
-
-# Make AR_FLAGS overridable by 'make ARFLAGS='.  Don't try to run-time override
-# by AR_FLAGS because that was never working and AR_FLAGS is about to die.
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for archiver @FILE support" >&5
-printf %s "checking for archiver @FILE support... " >&6; }
-if test ${lt_cv_ar_at_file+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ar_at_file=no
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  echo conftest.$ac_objext > conftest.lst
-      lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&5'
-      { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5
-  (eval $lt_ar_try) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-      if test 0 -eq "$ac_status"; then
-	# Ensure the archiver fails upon bogus file names.
-	rm -f conftest.$ac_objext libconftest.a
-	{ { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5
-  (eval $lt_ar_try) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-	if test 0 -ne "$ac_status"; then
-          lt_cv_ar_at_file=@
-        fi
-      fi
-      rm -f conftest.* libconftest.a
-     
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ar_at_file" >&5
-printf '%s\n' "$lt_cv_ar_at_file" >&6; }
-
-if test no = "$lt_cv_ar_at_file"; then
-  archiver_list_spec=
-else
-  archiver_list_spec=$lt_cv_ar_at_file
-fi
-
-    
-    
-    
-
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-printf '%s\n' "$STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-printf '%s\n' "$ac_ct_STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-test -z "$STRIP" && STRIP=:
-
-    
-    
-    
-
-
-
-test -z "$RANLIB" && RANLIB=:
-
-    
-    
-    
-
-
-# Determine commands to create old-style static archives.
-old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs'
-old_postinstall_cmds='chmod 644 $oldlib'
-old_postuninstall_cmds=
-
-if test -n "$RANLIB"; then
-  old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib"
-  old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib"
-fi
-
-case $host_os in
-  darwin*)
-    lock_old_archive_extraction=yes ;;
-  *)
-    lock_old_archive_extraction=no ;;
-esac
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-
-
-# Check for command to grab the raw symbol name followed by C symbol from nm.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking command to parse $NM output from $compiler object" >&5
-printf %s "checking command to parse $NM output from $compiler object... " >&6; }
-if test ${lt_cv_sys_global_symbol_pipe+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 
-# These are sane defaults that work on at least a few old systems.
-# [They come from Ultrix.  What could be older than Ultrix?!! ;)]
-
-# Character class describing NM global symbol codes.
-symcode='[BCDEGRST]'
-
-# Regexp to match symbols that can be accessed directly from C.
-sympat='\([_A-Za-z][_A-Za-z0-9]*\)'
-
-# Define system-specific variables.
-case $host_os in
-aix*)
-  symcode='[BCDT]'
-  ;;
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  symcode='[ABCDGISTW]'
-  ;;
-hpux*)
-  if test ia64 = "$host_cpu"; then
-    symcode='[ABCDEGRST]'
-  fi
-  ;;
-irix* | nonstopux*)
-  symcode='[BCDEGRST]'
-  ;;
-osf*)
-  symcode='[BCDEGQRST]'
-  ;;
-solaris*)
-  symcode='[BCDRT]'
-  ;;
-sco3.2v5*)
-  symcode='[DT]'
-  ;;
-sysv4.2uw2*)
-  symcode='[DT]'
-  ;;
-sysv5* | sco5v6* | unixware* | OpenUNIX*)
-  symcode='[ABDT]'
-  ;;
-sysv4)
-  symcode='[DFNSTU]'
-  ;;
-esac
-
-# If we're using GNU nm, then use its standard symbol codes.
-case `$NM -V 2>&1` in
-*GNU* | *'with BFD'*)
-  symcode='[ABCDGIRSTW]' ;;
-esac
-
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  # Gets list of data symbols to import.
-  lt_cv_sys_global_symbol_to_import="$SED -n -e 's/^I .* \(.*\)$/\1/p'"
-  # Adjust the below global symbol transforms to fixup imported variables.
-  lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'"
-  lt_c_name_hook=" -e 's/^I .* \(.*\)$/  {\"\1\", (void *) 0},/p'"
-  lt_c_name_lib_hook="\
-  -e 's/^I .* \(lib.*\)$/  {\"\1\", (void *) 0},/p'\
-  -e 's/^I .* \(.*\)$/  {\"lib\1\", (void *) 0},/p'"
-else
-  # Disable hooks by default.
-  lt_cv_sys_global_symbol_to_import=
-  lt_cdecl_hook=
-  lt_c_name_hook=
-  lt_c_name_lib_hook=
-fi
-
-# Transform an extracted symbol line into a proper C declaration.
-# Some systems (esp. on ia64) link data and code symbols differently,
-# so use this general approach.
-lt_cv_sys_global_symbol_to_cdecl="$SED -n"\
-$lt_cdecl_hook\
-" -e 's/^T .* \(.*\)$/extern int \1();/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'"
-
-# Transform an extracted symbol line into symbol name and symbol address
-lt_cv_sys_global_symbol_to_c_name_address="$SED -n"\
-$lt_c_name_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/p'"
-
-# Transform an extracted symbol line into symbol name with lib prefix and
-# symbol address.
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="$SED -n"\
-$lt_c_name_lib_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(lib.*\)$/  {\"\1\", (void *) \&\1},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"lib\1\", (void *) \&\1},/p'"
-
-# Handle CRLF in mingw tool chain
-opt_cr=
-case $build_os in
-mingw* | windows*)
-  opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp
-  ;;
-esac
-
-# Try without a prefix underscore, then with it.
-for ac_symprfx in "" "_"; do
-
-  # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol.
-  symxfrm="\\1 $ac_symprfx\\2 \\2"
-
-  # Write the raw and C identifiers.
-  if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-    # Fake it for dumpbin and say T for any non-static function,
-    # D for any global variable and I for any imported variable.
-    # Also find C++ and __fastcall symbols from MSVC++ or ICC,
-    # which start with @ or ?.
-    lt_cv_sys_global_symbol_pipe="$AWK '"\
-"     {last_section=section; section=\$ 3};"\
-"     /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\
-"     /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\
-"     /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\
-"     /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\
-"     /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\
-"     \$ 0!~/External *\|/{next};"\
-"     / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\
-"     {if(hide[section]) next};"\
-"     {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\
-"     {split(\$ 0,a,/\||\r/); split(a[2],s)};"\
-"     s[1]~/^[@?]/{print f,s[1],s[1]; next};"\
-"     s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\
-"     ' prfx=^$ac_symprfx"
-  else
-    lt_cv_sys_global_symbol_pipe="$SED -n -e 's/^.*[	 ]\($symcode$symcode*\)[	 ][	 ]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'"
-  fi
-  lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | $SED '/ __gnu_lto/d'"
-
-  # Check to see that the pipe works correctly.
-  pipe_works=no
-
-  rm -f conftest*
-  cat > conftest.$ac_ext <<_LT_EOF
-#ifdef __cplusplus
-extern "C" {
-#endif
-char nm_test_var;
-void nm_test_func(void);
-void nm_test_func(void){}
-#ifdef __cplusplus
-}
-#endif
-int main(void){nm_test_var='a';nm_test_func();return(0);}
-_LT_EOF
-
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    # Now try to grab the symbols.
-    nlist=conftest.nm
-    $ECHO "$as_me:$LINENO: $NM conftest.$ac_objext | $lt_cv_sys_global_symbol_pipe > $nlist" >&5
-    if eval "$NM" conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist 2>&5 && test -s "$nlist"; then
-      # Try sorting and uniquifying the output.
-      if sort "$nlist" | uniq > "$nlist"T; then
-	mv -f "$nlist"T "$nlist"
-      else
-	rm -f "$nlist"T
-      fi
-
-      # Make sure that we snagged all the symbols we need.
-      if $GREP ' nm_test_var$' "$nlist" >/dev/null; then
-	if $GREP ' nm_test_func$' "$nlist" >/dev/null; then
-	  cat <<_LT_EOF > conftest.$ac_ext
-/* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests.  */
-#if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE
-/* DATA imports from DLLs on WIN32 can't be const, because runtime
-   relocations are performed -- see ld's documentation on pseudo-relocs.  */
-# define LT@&t@_DLSYM_CONST
-#elif defined __osf__
-/* This system does not cope well with relocations in const data.  */
-# define LT@&t@_DLSYM_CONST
-#else
-# define LT@&t@_DLSYM_CONST const
-#endif
-
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-_LT_EOF
-	  # Now generate the symbol file.
-	  eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext'
-
-	  cat <<_LT_EOF >> conftest.$ac_ext
-
-/* The mapping between symbol names and symbols.  */
-LT@&t@_DLSYM_CONST struct {
-  const char *name;
-  void       *address;
-}
-lt__PROGRAM__LTX_preloaded_symbols[] =
-{
-  { "@PROGRAM@", (void *) 0 },
-_LT_EOF
-	  $SED "s/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext
-	  cat <<\_LT_EOF >> conftest.$ac_ext
-  {0, (void *) 0}
-};
-
-/* This works around a problem in FreeBSD linker */
-#ifdef FREEBSD_WORKAROUND
-static const void *lt_preloaded_setup() {
-  return lt__PROGRAM__LTX_preloaded_symbols;
-}
-#endif
-
-#ifdef __cplusplus
-}
-#endif
-_LT_EOF
-	  # Now try linking the two files.
-	  mv conftest.$ac_objext conftstm.$ac_objext
-	  lt_globsym_save_LIBS=$LIBS
-	  lt_globsym_save_CFLAGS=$CFLAGS
-	  LIBS=conftstm.$ac_objext
-	  CFLAGS="$CFLAGS$lt_prog_compiler_no_builtin_flag"
-	  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s conftest$ac_exeext; then
-	    pipe_works=yes
-	  fi
-	  LIBS=$lt_globsym_save_LIBS
-	  CFLAGS=$lt_globsym_save_CFLAGS
-	else
-	  echo "cannot find nm_test_func in $nlist" >&5
-	fi
-      else
-	echo "cannot find nm_test_var in $nlist" >&5
-      fi
-    else
-      echo "cannot run $lt_cv_sys_global_symbol_pipe" >&5
-    fi
-  else
-    echo "$progname: failed program was:" >&5
-    cat conftest.$ac_ext >&5
-  fi
-  rm -rf conftest* conftst*
-
-  # Do not use the global_symbol_pipe unless it works.
-  if test yes = "$pipe_works"; then
-    break
-  else
-    lt_cv_sys_global_symbol_pipe=
-  fi
-done
- ;;
-esac
-fi
-
-if test -z "$lt_cv_sys_global_symbol_pipe"; then
-  lt_cv_sys_global_symbol_to_cdecl=
-fi
-if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: failed" >&5
-printf '%s\n' "failed" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ok" >&5
-printf '%s\n' "ok" >&6; }
-fi
-
-# Response file support.
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  nm_file_list_spec='@'
-elif $NM --help 2>/dev/null | grep '[@]FILE' >/dev/null; then
-  nm_file_list_spec='@'
-fi
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for sysroot" >&5
-printf %s "checking for sysroot... " >&6; }
-
-@%:@ Check whether --with-sysroot was given.
-if test ${with_sysroot+y}
-then :
-  withval=$with_sysroot; 
-else case e in @%:@(
-  e) with_sysroot=no ;;
-esac
-fi
-
-
-lt_sysroot=
-case $with_sysroot in #(
- yes)
-   if test yes = "$GCC"; then
-     # Trim trailing / since we'll always append absolute paths and we want
-     # to avoid //, if only for less confusing output for the user.
-     lt_sysroot=`$CC --print-sysroot 2>/dev/null | $SED 's:/\+$::'`
-   fi
-   ;; #(
- /*)
-   lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"`
-   ;; #(
- no|'')
-   ;; #(
- *)
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $with_sysroot" >&5
-printf '%s\n' "$with_sysroot" >&6; }
-   as_fn_error $? "The sysroot must be an absolute path." "$LINENO" 5
-   ;;
-esac
-
- { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ${lt_sysroot:-no}" >&5
-printf '%s\n' "${lt_sysroot:-no}" >&6; }
-
-    
-    
-    
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a working dd" >&5
-printf %s "checking for a working dd... " >&6; }
-if test ${ac_cv_path_lt_DD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-: ${lt_DD:=$DD}
-if test -z "$lt_DD"; then
-  ac_path_lt_DD_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in dd
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_lt_DD="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_lt_DD" || continue
-if "$ac_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=:
-fi
-      $ac_path_lt_DD_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_lt_DD"; then
-    :
-  fi
-else
-  ac_cv_path_lt_DD=$lt_DD
-fi
-
-rm -f conftest.i conftest2.i conftest.out ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_lt_DD" >&5
-printf '%s\n' "$ac_cv_path_lt_DD" >&6; }
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to truncate binary pipes" >&5
-printf %s "checking how to truncate binary pipes... " >&6; }
-if test ${lt_cv_truncate_bin+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-lt_cv_truncate_bin=
-if "$ac_cv_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1"
-fi
-rm -f conftest.i conftest2.i conftest.out
-test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q" ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_truncate_bin" >&5
-printf '%s\n' "$lt_cv_truncate_bin" >&6; }
-
-    
-    
-    
-
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in @S|@*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-@%:@ Check whether --enable-libtool-lock was given.
-if test ${enable_libtool_lock+y}
-then :
-  enableval=$enable_libtool_lock; 
-fi
-
-test no = "$enable_libtool_lock" || enable_libtool_lock=yes
-
-# Some flags need to be propagated to the compiler or linker for good
-# libtool support.
-case $host in
-ia64-*-hpux*)
-  # Find out what ABI is being produced by ac_compile, and set mode
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.$ac_objext` in
-      *ELF-32*)
-	HPUX_IA64_MODE=32
-	;;
-      *ELF-64*)
-	HPUX_IA64_MODE=64
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-*-*-irix6*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '#line '$LINENO' "configure"' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    if test yes = "$lt_cv_prog_gnu_ld"; then
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -melf32bsmip"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -melf32bmipn32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -melf64bmip"
-	;;
-      esac
-    else
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -32"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -n32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -64"
-	  ;;
-      esac
-    fi
-  fi
-  rm -rf conftest*
-  ;;
-
-mips64*-*linux*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '#line '$LINENO' "configure"' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    emul=elf
-    case `$FILECMD conftest.$ac_objext` in
-      *32-bit*)
-	emul="${emul}32"
-	;;
-      *64-bit*)
-	emul="${emul}64"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *MSB*)
-	emul="${emul}btsmip"
-	;;
-      *LSB*)
-	emul="${emul}ltsmip"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *N32*)
-	emul="${emul}n32"
-	;;
-    esac
-    LD="${LD-ld} -m $emul"
-  fi
-  rm -rf conftest*
-  ;;
-
-x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \
-s390*-*linux*|s390*-*tpf*|sparc*-*linux*|x86_64-gnu*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.  Note that the listed cases only cover the
-  # situations where additional linker options are needed (such as when
-  # doing 32-bit compilation for a host where ld defaults to 64-bit, or
-  # vice versa); the common cases where no linker options are needed do
-  # not appear in the list.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.o` in
-      *32-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_i386_fbsd"
-	    ;;
-	  x86_64-*linux*|x86_64-gnu*)
-	    case `$FILECMD conftest.o` in
-	      *x86-64*)
-		LD="${LD-ld} -m elf32_x86_64"
-		;;
-	      *)
-		LD="${LD-ld} -m elf_i386"
-		;;
-	    esac
-	    ;;
-	  powerpc64le-*linux*)
-	    LD="${LD-ld} -m elf32lppclinux"
-	    ;;
-	  powerpc64-*linux*)
-	    LD="${LD-ld} -m elf32ppclinux"
-	    ;;
-	  s390x-*linux*)
-	    LD="${LD-ld} -m elf_s390"
-	    ;;
-	  sparc64-*linux*)
-	    LD="${LD-ld} -m elf32_sparc"
-	    ;;
-	esac
-	;;
-      *64-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_x86_64_fbsd"
-	    ;;
-	  x86_64-*linux*|x86_64-gnu*)
-	    LD="${LD-ld} -m elf_x86_64"
-	    ;;
-	  powerpcle-*linux*)
-	    LD="${LD-ld} -m elf64lppc"
-	    ;;
-	  powerpc-*linux*)
-	    LD="${LD-ld} -m elf64ppc"
-	    ;;
-	  s390*-*linux*|s390*-*tpf*)
-	    LD="${LD-ld} -m elf64_s390"
-	    ;;
-	  sparc*-*linux*)
-	    LD="${LD-ld} -m elf64_sparc"
-	    ;;
-	esac
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-
-*-*-sco3.2v5*)
-  # On SCO OpenServer 5, we need -belf to get full-featured binaries.
-  SAVE_CFLAGS=$CFLAGS
-  CFLAGS="$CFLAGS -belf"
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the C compiler needs -belf" >&5
-printf %s "checking whether the C compiler needs -belf... " >&6; }
-if test ${lt_cv_cc_needs_belf+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-     cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_cc_needs_belf=yes
-else case e in @%:@(
-  e) lt_cv_cc_needs_belf=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-     ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_cc_needs_belf" >&5
-printf '%s\n' "$lt_cv_cc_needs_belf" >&6; }
-  if test yes != "$lt_cv_cc_needs_belf"; then
-    # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf
-    CFLAGS=$SAVE_CFLAGS
-  fi
-  ;;
-*-*solaris*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.o` in
-    *64-bit*)
-      case $lt_cv_prog_gnu_ld in
-      yes*)
-        case $host in
-        i?86-*-solaris*|x86_64-*-solaris*)
-          LD="${LD-ld} -m elf_x86_64"
-          ;;
-        sparc*-*-solaris*)
-          LD="${LD-ld} -m elf64_sparc"
-          ;;
-        esac
-        # GNU ld 2.21 introduced _sol2 emulations.  Use them if available.
-        if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then
-          LD=${LD-ld}_sol2
-        fi
-        ;;
-      *)
-	if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then
-	  LD="${LD-ld} -64"
-	fi
-	;;
-      esac
-      ;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-esac
-
-need_locks=$enable_libtool_lock
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}mt", so it can be a program name with args.
-set dummy ${ac_tool_prefix}mt; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_MANIFEST_TOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$MANIFEST_TOOL"; then
-  ac_cv_prog_MANIFEST_TOOL="$MANIFEST_TOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_MANIFEST_TOOL="${ac_tool_prefix}mt"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-MANIFEST_TOOL=$ac_cv_prog_MANIFEST_TOOL
-if test -n "$MANIFEST_TOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MANIFEST_TOOL" >&5
-printf '%s\n' "$MANIFEST_TOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_MANIFEST_TOOL"; then
-  ac_ct_MANIFEST_TOOL=$MANIFEST_TOOL
-  # Extract the first word of "mt", so it can be a program name with args.
-set dummy mt; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_MANIFEST_TOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_MANIFEST_TOOL"; then
-  ac_cv_prog_ac_ct_MANIFEST_TOOL="$ac_ct_MANIFEST_TOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_MANIFEST_TOOL="mt"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_MANIFEST_TOOL=$ac_cv_prog_ac_ct_MANIFEST_TOOL
-if test -n "$ac_ct_MANIFEST_TOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_MANIFEST_TOOL" >&5
-printf '%s\n' "$ac_ct_MANIFEST_TOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_MANIFEST_TOOL" = x; then
-    MANIFEST_TOOL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    MANIFEST_TOOL=$ac_ct_MANIFEST_TOOL
-  fi
-else
-  MANIFEST_TOOL="$ac_cv_prog_MANIFEST_TOOL"
-fi
-
-test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $MANIFEST_TOOL is a manifest tool" >&5
-printf %s "checking if $MANIFEST_TOOL is a manifest tool... " >&6; }
-if test ${lt_cv_path_manifest_tool+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_path_manifest_tool=no
-  echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&5
-  $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out
-  cat conftest.err >&5
-  if $GREP 'Manifest Tool' conftest.out > /dev/null; then
-    lt_cv_path_manifest_tool=yes
-  fi
-  rm -f conftest* ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_manifest_tool" >&5
-printf '%s\n' "$lt_cv_path_manifest_tool" >&6; }
-if test yes != "$lt_cv_path_manifest_tool"; then
-  MANIFEST_TOOL=:
-fi
-
-    
-    
-    
-
-
-  case $host_os in
-    rhapsody* | darwin*)
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}dsymutil", so it can be a program name with args.
-set dummy ${ac_tool_prefix}dsymutil; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DSYMUTIL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$DSYMUTIL"; then
-  ac_cv_prog_DSYMUTIL="$DSYMUTIL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DSYMUTIL="${ac_tool_prefix}dsymutil"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DSYMUTIL=$ac_cv_prog_DSYMUTIL
-if test -n "$DSYMUTIL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DSYMUTIL" >&5
-printf '%s\n' "$DSYMUTIL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_DSYMUTIL"; then
-  ac_ct_DSYMUTIL=$DSYMUTIL
-  # Extract the first word of "dsymutil", so it can be a program name with args.
-set dummy dsymutil; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DSYMUTIL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_DSYMUTIL"; then
-  ac_cv_prog_ac_ct_DSYMUTIL="$ac_ct_DSYMUTIL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DSYMUTIL="dsymutil"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DSYMUTIL=$ac_cv_prog_ac_ct_DSYMUTIL
-if test -n "$ac_ct_DSYMUTIL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DSYMUTIL" >&5
-printf '%s\n' "$ac_ct_DSYMUTIL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_DSYMUTIL" = x; then
-    DSYMUTIL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DSYMUTIL=$ac_ct_DSYMUTIL
-  fi
-else
-  DSYMUTIL="$ac_cv_prog_DSYMUTIL"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}nmedit", so it can be a program name with args.
-set dummy ${ac_tool_prefix}nmedit; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_NMEDIT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$NMEDIT"; then
-  ac_cv_prog_NMEDIT="$NMEDIT" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_NMEDIT="${ac_tool_prefix}nmedit"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-NMEDIT=$ac_cv_prog_NMEDIT
-if test -n "$NMEDIT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $NMEDIT" >&5
-printf '%s\n' "$NMEDIT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_NMEDIT"; then
-  ac_ct_NMEDIT=$NMEDIT
-  # Extract the first word of "nmedit", so it can be a program name with args.
-set dummy nmedit; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_NMEDIT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_NMEDIT"; then
-  ac_cv_prog_ac_ct_NMEDIT="$ac_ct_NMEDIT" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_NMEDIT="nmedit"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_NMEDIT=$ac_cv_prog_ac_ct_NMEDIT
-if test -n "$ac_ct_NMEDIT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_NMEDIT" >&5
-printf '%s\n' "$ac_ct_NMEDIT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_NMEDIT" = x; then
-    NMEDIT=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    NMEDIT=$ac_ct_NMEDIT
-  fi
-else
-  NMEDIT="$ac_cv_prog_NMEDIT"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}lipo", so it can be a program name with args.
-set dummy ${ac_tool_prefix}lipo; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_LIPO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$LIPO"; then
-  ac_cv_prog_LIPO="$LIPO" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_LIPO="${ac_tool_prefix}lipo"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-LIPO=$ac_cv_prog_LIPO
-if test -n "$LIPO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LIPO" >&5
-printf '%s\n' "$LIPO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_LIPO"; then
-  ac_ct_LIPO=$LIPO
-  # Extract the first word of "lipo", so it can be a program name with args.
-set dummy lipo; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_LIPO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_LIPO"; then
-  ac_cv_prog_ac_ct_LIPO="$ac_ct_LIPO" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_LIPO="lipo"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_LIPO=$ac_cv_prog_ac_ct_LIPO
-if test -n "$ac_ct_LIPO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_LIPO" >&5
-printf '%s\n' "$ac_ct_LIPO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_LIPO" = x; then
-    LIPO=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    LIPO=$ac_ct_LIPO
-  fi
-else
-  LIPO="$ac_cv_prog_LIPO"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}otool", so it can be a program name with args.
-set dummy ${ac_tool_prefix}otool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$OTOOL"; then
-  ac_cv_prog_OTOOL="$OTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OTOOL="${ac_tool_prefix}otool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OTOOL=$ac_cv_prog_OTOOL
-if test -n "$OTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OTOOL" >&5
-printf '%s\n' "$OTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OTOOL"; then
-  ac_ct_OTOOL=$OTOOL
-  # Extract the first word of "otool", so it can be a program name with args.
-set dummy otool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_OTOOL"; then
-  ac_cv_prog_ac_ct_OTOOL="$ac_ct_OTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OTOOL="otool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OTOOL=$ac_cv_prog_ac_ct_OTOOL
-if test -n "$ac_ct_OTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL" >&5
-printf '%s\n' "$ac_ct_OTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OTOOL" = x; then
-    OTOOL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OTOOL=$ac_ct_OTOOL
-  fi
-else
-  OTOOL="$ac_cv_prog_OTOOL"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}otool64", so it can be a program name with args.
-set dummy ${ac_tool_prefix}otool64; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OTOOL64+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$OTOOL64"; then
-  ac_cv_prog_OTOOL64="$OTOOL64" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OTOOL64="${ac_tool_prefix}otool64"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OTOOL64=$ac_cv_prog_OTOOL64
-if test -n "$OTOOL64"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OTOOL64" >&5
-printf '%s\n' "$OTOOL64" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OTOOL64"; then
-  ac_ct_OTOOL64=$OTOOL64
-  # Extract the first word of "otool64", so it can be a program name with args.
-set dummy otool64; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OTOOL64+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) if test -n "$ac_ct_OTOOL64"; then
-  ac_cv_prog_ac_ct_OTOOL64="$ac_ct_OTOOL64" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OTOOL64="otool64"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OTOOL64=$ac_cv_prog_ac_ct_OTOOL64
-if test -n "$ac_ct_OTOOL64"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL64" >&5
-printf '%s\n' "$ac_ct_OTOOL64" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OTOOL64" = x; then
-    OTOOL64=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OTOOL64=$ac_ct_OTOOL64
-  fi
-else
-  OTOOL64="$ac_cv_prog_OTOOL64"
-fi
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-    
-    
-    
-    
-
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -single_module linker flag" >&5
-printf %s "checking for -single_module linker flag... " >&6; }
-if test ${lt_cv_apple_cc_single_mod+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_apple_cc_single_mod=no
-      if test -z "$LT_MULTI_MODULE"; then
-	# By default we will add the -single_module flag. You can override
-	# by either setting the environment variable LT_MULTI_MODULE
-	# non-empty at configure time, or by adding -multi_module to the
-	# link flags.
-	rm -rf libconftest.dylib*
-	echo "int foo(void){return 1;}" > conftest.c
-	echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
--dynamiclib -Wl,-single_module conftest.c" >&5
-	$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
-	  -dynamiclib -Wl,-single_module conftest.c 2>conftest.err
-        _lt_result=$?
-	# If there is a non-empty error log, and "single_module"
-	# appears in it, assume the flag caused a linker warning
-        if test -s conftest.err && $GREP single_module conftest.err; then
-	  cat conftest.err >&5
-	# Otherwise, if the output was created with a 0 exit code from
-	# the compiler, it worked.
-	elif test -f libconftest.dylib && test 0 = "$_lt_result"; then
-	  lt_cv_apple_cc_single_mod=yes
-	else
-	  cat conftest.err >&5
-	fi
-	rm -rf libconftest.dylib*
-	rm -f conftest.*
-      fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_apple_cc_single_mod" >&5
-printf '%s\n' "$lt_cv_apple_cc_single_mod" >&6; }
-
-    # Feature test to disable chained fixups since it is not
-    # compatible with '-undefined dynamic_lookup'
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -no_fixup_chains linker flag" >&5
-printf %s "checking for -no_fixup_chains linker flag... " >&6; }
-if test ${lt_cv_support_no_fixup_chains+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)  save_LDFLAGS=$LDFLAGS
-        LDFLAGS="$LDFLAGS -Wl,-no_fixup_chains"
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_support_no_fixup_chains=yes
-else case e in @%:@(
-  e) lt_cv_support_no_fixup_chains=no
-         ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-        LDFLAGS=$save_LDFLAGS
-      
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_support_no_fixup_chains" >&5
-printf '%s\n' "$lt_cv_support_no_fixup_chains" >&6; }
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -exported_symbols_list linker flag" >&5
-printf %s "checking for -exported_symbols_list linker flag... " >&6; }
-if test ${lt_cv_ld_exported_symbols_list+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ld_exported_symbols_list=no
-      save_LDFLAGS=$LDFLAGS
-      echo "_main" > conftest.sym
-      LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym"
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_ld_exported_symbols_list=yes
-else case e in @%:@(
-  e) lt_cv_ld_exported_symbols_list=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-	LDFLAGS=$save_LDFLAGS
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_exported_symbols_list" >&5
-printf '%s\n' "$lt_cv_ld_exported_symbols_list" >&6; }
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -force_load linker flag" >&5
-printf %s "checking for -force_load linker flag... " >&6; }
-if test ${lt_cv_ld_force_load+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_ld_force_load=no
-      cat > conftest.c << _LT_EOF
-int forced_loaded() { return 2;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&5
-      $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&5
-      echo "$AR $AR_FLAGS libconftest.a conftest.o" >&5
-      $AR $AR_FLAGS libconftest.a conftest.o 2>&5
-      echo "$RANLIB libconftest.a" >&5
-      $RANLIB libconftest.a 2>&5
-      cat > conftest.c << _LT_EOF
-int main(void) { return 0;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&5
-      $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err
-      _lt_result=$?
-      if test -s conftest.err && $GREP force_load conftest.err; then
-	cat conftest.err >&5
-      elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then
-	lt_cv_ld_force_load=yes
-      else
-	cat conftest.err >&5
-      fi
-        rm -f conftest.err libconftest.a conftest conftest.c
-        rm -rf conftest.dSYM
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_force_load" >&5
-printf '%s\n' "$lt_cv_ld_force_load" >&6; }
-    case $host_os in
-    rhapsody* | darwin1.[012])
-      _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;;
-    darwin1.*)
-      _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-    darwin*)
-      case $MACOSX_DEPLOYMENT_TARGET,$host in
-        10.[012],*|,*powerpc*-darwin[5-8]*)
-          _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-        *)
-          _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup'
-          if test yes = "$lt_cv_support_no_fixup_chains"; then
-            as_fn_append _lt_dar_allow_undefined ' $wl-no_fixup_chains'
-          fi
-        ;;
-      esac
-    ;;
-  esac
-    if test yes = "$lt_cv_apple_cc_single_mod"; then
-      _lt_dar_single_mod='$single_module'
-    fi
-    _lt_dar_needs_single_mod=no
-    case $host_os in
-    rhapsody* | darwin1.*)
-      _lt_dar_needs_single_mod=yes ;;
-    darwin*)
-      # When targeting Mac OS X 10.4 (darwin 8) or later,
-      # -single_module is the default and -multi_module is unsupported.
-      # The toolchain on macOS 10.14 (darwin 18) and later cannot
-      # target any OS version that needs -single_module.
-      case ${MACOSX_DEPLOYMENT_TARGET-10.0},$host in
-      10.0,*-darwin[567].*|10.[0-3],*-darwin[5-9].*|10.[0-3],*-darwin1[0-7].*)
-        _lt_dar_needs_single_mod=yes ;;
-      esac
-    ;;
-    esac
-    if test yes = "$lt_cv_ld_exported_symbols_list"; then
-      _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym'
-    else
-      _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib'
-    fi
-    if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then
-      _lt_dsymutil='~$DSYMUTIL $lib || :'
-    else
-      _lt_dsymutil=
-    fi
-    ;;
-  esac
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x@S|@2 in
-    x)
-        ;;
-    *:)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\"
-        ;;
-    x:*)
-        eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\"
-        ;;
-    *)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-ac_fn_c_check_header_compile "$LINENO" "dlfcn.h" "ac_cv_header_dlfcn_h" "$ac_includes_default
-"
-if test "x$ac_cv_header_dlfcn_h" = xyes
-then :
-  printf '%s\n' "@%:@define HAVE_DLFCN_H 1" >>confdefs.h
-
-fi
-
-
-
-
-
-# Set options
-
-
-
-        enable_dlopen=no
-  
-
-  enable_win32_dll=no
-  
-
-            @%:@ Check whether --enable-shared was given.
-if test ${enable_shared+y}
-then :
-  enableval=$enable_shared; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_shared=yes ;;
-    no) enable_shared=no ;;
-    *)
-      enable_shared=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_shared=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in @%:@(
-  e) enable_shared=yes ;;
-esac
-fi
-
-
-    
-    
-    
-    
-
-
-
-  @%:@ Check whether --enable-static was given.
-if test ${enable_static+y}
-then :
-  enableval=$enable_static; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_static=yes ;;
-    no) enable_static=no ;;
-    *)
-     enable_static=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_static=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in @%:@(
-  e) enable_static=yes ;;
-esac
-fi
-
-
-    
-    
-    
-    
-
-
-
-  @%:@ Check whether --enable-pic was given.
-if test ${enable_pic+y}
-then :
-  enableval=$enable_pic; lt_p=${PACKAGE-default}
-     case $enableval in
-     yes|no) pic_mode=$enableval ;;
-     *)
-       pic_mode=default
-       # Look at the argument we got.  We use all the common list separators.
-       lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-       for lt_pkg in $enableval; do
-	 IFS=$lt_save_ifs
-	 if test "X$lt_pkg" = "X$lt_p"; then
-	   pic_mode=yes
-	 fi
-       done
-       IFS=$lt_save_ifs
-       ;;
-     esac
-else case e in @%:@(
-  e)           @%:@ Check whether --with-pic was given.
-if test ${with_pic+y}
-then :
-  withval=$with_pic; lt_p=${PACKAGE-default}
-	 case $withval in
-	 yes|no) pic_mode=$withval ;;
-	 *)
-	   pic_mode=default
-	   # Look at the argument we got.  We use all the common list separators.
-	   lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-	   for lt_pkg in $withval; do
-	     IFS=$lt_save_ifs
-	     if test "X$lt_pkg" = "X$lt_p"; then
-	       pic_mode=yes
-	     fi
-	   done
-	   IFS=$lt_save_ifs
-	   ;;
-	 esac
-else case e in @%:@(
-  e) pic_mode=default ;;
-esac
-fi
-
-     ;;
-esac
-fi
-
-
-
-    
-    
-    
-
-
-  @%:@ Check whether --enable-fast-install was given.
-if test ${enable_fast_install+y}
-then :
-  enableval=$enable_fast_install; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_fast_install=yes ;;
-    no) enable_fast_install=no ;;
-    *)
-      enable_fast_install=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_fast_install=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in @%:@(
-  e) enable_fast_install=yes ;;
-esac
-fi
-
-
-
-    
-    
-    
-
-
-  shared_archive_member_spec=
-case $host,$enable_shared in
-power*-*-aix[5-9]*,yes)
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking which variant of shared library versioning to provide" >&5
-printf %s "checking which variant of shared library versioning to provide... " >&6; }
-  @%:@ Check whether --enable-aix-soname was given.
-if test ${enable_aix_soname+y}
-then :
-  enableval=$enable_aix_soname; case $enableval in
-     aix|svr4|both)
-       ;;
-     *)
-       as_fn_error $? "Unknown argument to --enable-aix-soname" "$LINENO" 5
-       ;;
-     esac
-     lt_cv_with_aix_soname=$enable_aix_soname
-else case e in @%:@(
-  e) @%:@ Check whether --with-aix-soname was given.
-if test ${with_aix_soname+y}
-then :
-  withval=$with_aix_soname; case $withval in
-         aix|svr4|both)
-           ;;
-         *)
-           as_fn_error $? "Unknown argument to --with-aix-soname" "$LINENO" 5
-           ;;
-         esac
-         lt_cv_with_aix_soname=$with_aix_soname
-else case e in @%:@(
-  e) if test ${lt_cv_with_aix_soname+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_with_aix_soname=aix ;;
-esac
-fi
- ;;
-esac
-fi
-
-     enable_aix_soname=$lt_cv_with_aix_soname ;;
-esac
-fi
-
-  with_aix_soname=$enable_aix_soname
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $with_aix_soname" >&5
-printf '%s\n' "$with_aix_soname" >&6; }
-  if test aix != "$with_aix_soname"; then
-    # For the AIX way of multilib, we name the shared archive member
-    # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o',
-    # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File.
-    # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag,
-    # the AIX toolchain works better with OBJECT_MODE set (default 32).
-    if test 64 = "${OBJECT_MODE-32}"; then
-      shared_archive_member_spec=shr_64
-    else
-      shared_archive_member_spec=shr
-    fi
-  fi
-  ;;
-*)
-  with_aix_soname=aix
-  ;;
-esac
-
-
-    
-    
-    
-
-
-  
-
-
-# This can be used to rebuild libtool when needed
-LIBTOOL_DEPS=$ltmain
-
-# Always use our own libtool.
-LIBTOOL='$(SHELL) $(top_builddir)/libtool'
-
-
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-test -z "$LN_S" && LN_S="ln -s"
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-
-if test -n "${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for objdir" >&5
-printf %s "checking for objdir... " >&6; }
-if test ${lt_cv_objdir+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) rm -f .libs 2>/dev/null
-mkdir .libs 2>/dev/null
-if test -d .libs; then
-  lt_cv_objdir=.libs
-else
-  # MS-DOS does not allow filenames that begin with a dot.
-  lt_cv_objdir=_libs
-fi
-rmdir .libs 2>/dev/null ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_objdir" >&5
-printf '%s\n' "$lt_cv_objdir" >&6; }
-objdir=$lt_cv_objdir
-
-    
-    
-    
-
-printf '%s\n' "@%:@define LT_OBJDIR \"$lt_cv_objdir/\"" >>confdefs.h
-
-
-
-
-case $host_os in
-aix3*)
-  # AIX sometimes has problems with the GCC collect2 program.  For some
-  # reason, if we set the COLLECT_NAMES environment variable, the problems
-  # vanish in a puff of smoke.
-  if test set != "${COLLECT_NAMES+set}"; then
-    COLLECT_NAMES=
-    export COLLECT_NAMES
-  fi
-  ;;
-esac
-
-# Global variables:
-ofile=libtool
-can_build_shared=yes
-
-# All known linkers require a '.a' archive for static linking (except MSVC and
-# ICC, which need '.lib').
-libext=a
-
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-old_CC=$CC
-old_CFLAGS=$CFLAGS
-
-# Set sane defaults for various variables
-test -z "$CC" && CC=cc
-test -z "$LTCC" && LTCC=$CC
-test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS
-test -z "$LD" && LD=ld
-test -z "$ac_objext" && ac_objext=o
-
-func_cc_basename $compiler
-cc_basename=$func_cc_basename_result
-
-
-# Only perform the check for file, if the check method requires it
-test -z "$MAGIC_CMD" && MAGIC_CMD=file
-case $deplibs_check_method in
-file_magic*)
-  if test "$file_magic_cmd" = '$MAGIC_CMD'; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for ${ac_tool_prefix}file" >&5
-printf %s "checking for ${ac_tool_prefix}file... " >&6; }
-if test ${lt_cv_path_MAGIC_CMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $MAGIC_CMD in
-[\\/*] |  ?:[\\/]*)
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  ac_dummy="/usr/bin$PATH_SEPARATOR$PATH"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/${ac_tool_prefix}file"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"${ac_tool_prefix}file"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac ;;
-esac
-fi
-
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5
-printf '%s\n' "$MAGIC_CMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-    
-    
-    
-
-if test -z "$lt_cv_path_MAGIC_CMD"; then
-  if test -n "$ac_tool_prefix"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for file" >&5
-printf %s "checking for file... " >&6; }
-if test ${lt_cv_path_MAGIC_CMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $MAGIC_CMD in
-[\\/*] |  ?:[\\/]*)
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  ac_dummy="/usr/bin$PATH_SEPARATOR$PATH"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/file"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"file"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac ;;
-esac
-fi
-
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5
-printf '%s\n' "$MAGIC_CMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  else
-    MAGIC_CMD=:
-  fi
-fi
-
-  fi
-  ;;
-esac
-
-# Use C for the default configuration in the libtool script
-
-lt_save_CC=$CC
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-# Source file extension for C test sources.
-ac_ext=c
-
-# Object file extension for compiled C test sources.
-objext=o
-objext=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code="int some_variable = 0;"
-
-# Code to be used in simple link tests
-lt_simple_link_test_code='int main(void){return(0);}'
-
-
-
-
-
-
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-
-# Save the default compiler, since it gets overwritten when the other
-# tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP.
-compiler_DEFAULT=$CC
-
-# save warnings/boilerplate of simple test code
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_compile_test_code" >conftest.$ac_ext
-eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_compiler_boilerplate=`cat conftest.err`
-$RM conftest*
-
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_link_test_code" >conftest.$ac_ext
-eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_linker_boilerplate=`cat conftest.err`
-$RM -r conftest*
-
-
-## CAVEAT EMPTOR:
-## There is no encapsulation within the following macros, do not change
-## the running order or otherwise move them around unless you know exactly
-## what you are doing...
-if test -n "$compiler"; then
-  
-lt_prog_compiler_no_builtin_flag=
-
-if test yes = "$GCC"; then
-  case $cc_basename in
-  nvcc*)
-    lt_prog_compiler_no_builtin_flag=' -Xcompiler -fno-builtin' ;;
-  *)
-    lt_prog_compiler_no_builtin_flag=' -fno-builtin' ;;
-  esac
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -fno-rtti -fno-exceptions" >&5
-printf %s "checking if $compiler supports -fno-rtti -fno-exceptions... " >&6; }
-if test ${lt_cv_prog_compiler_rtti_exceptions+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_rtti_exceptions=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="-fno-rtti -fno-exceptions"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_rtti_exceptions=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_rtti_exceptions" >&5
-printf '%s\n' "$lt_cv_prog_compiler_rtti_exceptions" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_rtti_exceptions"; then
-    lt_prog_compiler_no_builtin_flag="$lt_prog_compiler_no_builtin_flag -fno-rtti -fno-exceptions"
-else
-    :
-fi
-
-fi
-
-    
-    
-    
-
-
-  lt_prog_compiler_wl=
-lt_prog_compiler_pic=
-lt_prog_compiler_static=
-
-
-  if test yes = "$GCC"; then
-    lt_prog_compiler_wl='-Wl,'
-    lt_prog_compiler_static='-static'
-
-    case $host_os in
-      aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            lt_prog_compiler_pic='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            lt_prog_compiler_pic='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      ;;
-
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      lt_prog_compiler_static=
-      ;;
-
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='-fPIC'
-	;;
-      esac
-      ;;
-
-    interix[3-9]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-
-    msdosdjgpp*)
-      # Just because we use GCC doesn't mean we suddenly get shared libraries
-      # on systems that don't support them.
-      lt_prog_compiler_can_build_shared=no
-      enable_shared=no
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic=-Kconform_pic
-      fi
-      ;;
-
-    *)
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-    esac
-
-    case $cc_basename in
-    nvcc*) # Cuda Compiler Driver 2.2
-      lt_prog_compiler_wl='-Xlinker '
-      if test -n "$lt_prog_compiler_pic"; then
-        lt_prog_compiler_pic="-Xcompiler $lt_prog_compiler_pic"
-      fi
-      ;;
-    esac
-  else
-    # PORTME Check for flag to pass linker flags through the system compiler.
-    case $host_os in
-    aix*)
-      lt_prog_compiler_wl='-Wl,'
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      else
-	lt_prog_compiler_static='-bnso -bI:/lib/syscalls.exp'
-      fi
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      case $cc_basename in
-      nagfor*)
-        # NAG Fortran compiler
-        lt_prog_compiler_wl='-Wl,-Wl,,'
-        lt_prog_compiler_pic='-PIC'
-        lt_prog_compiler_static='-Bstatic'
-        ;;
-      esac
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    hpux9* | hpux10* | hpux11*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
-      # not for PA HP-UX.
-      case $host_cpu in
-      hppa*64*|ia64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='+Z'
-	;;
-      esac
-      # Is there a better lt_prog_compiler_static that works with the bundled CC?
-      lt_prog_compiler_static='$wl-a ${wl}archive'
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC (with -KPIC) is the default.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-      case $cc_basename in
-      # old Intel for x86_64, which still supported -KPIC.
-      ecc*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-KPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      *flang* | ftn | f18* | f95*)
-        # Flang compiler.
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # icc used to be incompatible with GCC.
-      # ICC 10 doesn't accept -KPIC any more.
-      icc* | ifort*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # Lahey Fortran 8.1.
-      lf95*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='--shared'
-	lt_prog_compiler_static='--static'
-	;;
-      nagfor*)
-	# NAG Fortran compiler
-	lt_prog_compiler_wl='-Wl,-Wl,,'
-	lt_prog_compiler_pic='-PIC'
-	lt_prog_compiler_static='-Bstatic'
-	;;
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-	;;
-      pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
-        # Portland Group compilers (*not* the Pentium gcc compiler,
-	# which looks to be a dead project)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fpic'
-	lt_prog_compiler_static='-Bstatic'
-        ;;
-      ccc*)
-        lt_prog_compiler_wl='-Wl,'
-        # All Alpha code is PIC.
-        lt_prog_compiler_static='-non_shared'
-        ;;
-      xl* | bgxl* | bgf* | mpixl*)
-	# IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-qpic'
-	lt_prog_compiler_static='-qstaticlink'
-	;;
-      *)
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [1-7].* | *Sun*Fortran*\ 8.[0-3]*)
-	  # Sun Fortran 8.3 passes all unrecognized flags to the linker
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl=''
-	  ;;
-	*Sun\ F* | *Sun*Fortran*)
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Qoption ld '
-	  ;;
-	*Sun\ C*)
-	  # Sun C 5.9
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Wl,'
-	  ;;
-        *Intel*\ [CF]*Compiler*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fPIC'
-	  lt_prog_compiler_static='-static'
-	  ;;
-	*Portland\ Group*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fpic'
-	  lt_prog_compiler_static='-Bstatic'
-	  ;;
-	esac
-	;;
-      esac
-      ;;
-
-    newsos6)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *-mlibc)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-fPIC'
-      lt_prog_compiler_static='-static'
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    osf3* | osf4* | osf5*)
-      lt_prog_compiler_wl='-Wl,'
-      # All OSF/1 code is PIC.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    rdos*)
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      case $cc_basename in
-      f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
-	lt_prog_compiler_wl='-Qoption ld ';;
-      *)
-	lt_prog_compiler_wl='-Wl,';;
-      esac
-      ;;
-
-    sunos4*)
-      lt_prog_compiler_wl='-Qoption ld '
-      lt_prog_compiler_pic='-PIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4 | sysv4.2uw2* | sysv4.3*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic='-Kconform_pic'
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      ;;
-
-    sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    unicos*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_can_build_shared=no
-      ;;
-
-    uts4*)
-      lt_prog_compiler_pic='-pic'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *)
-      lt_prog_compiler_can_build_shared=no
-      ;;
-    esac
-  fi
-
-case $host_os in
-  # For platforms that do not support PIC, -DPIC is meaningless:
-  *djgpp*)
-    lt_prog_compiler_pic=
-    ;;
-  *)
-    lt_prog_compiler_pic="$lt_prog_compiler_pic@&t@ -DPIC"
-    ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $compiler option to produce PIC" >&5
-printf %s "checking for $compiler option to produce PIC... " >&6; }
-if test ${lt_cv_prog_compiler_pic+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic=$lt_prog_compiler_pic ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic" >&6; }
-lt_prog_compiler_pic=$lt_cv_prog_compiler_pic
-
-#
-# Check to make sure the PIC flag actually works.
-#
-if test -n "$lt_prog_compiler_pic"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler PIC flag $lt_prog_compiler_pic works" >&5
-printf %s "checking if $compiler PIC flag $lt_prog_compiler_pic works... " >&6; }
-if test ${lt_cv_prog_compiler_pic_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic_works=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$lt_prog_compiler_pic@&t@ -DPIC"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_pic_works=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_pic_works"; then
-    case $lt_prog_compiler_pic in
-     "" | " "*) ;;
-     *) lt_prog_compiler_pic=" $lt_prog_compiler_pic" ;;
-     esac
-else
-    lt_prog_compiler_pic=
-     lt_prog_compiler_can_build_shared=no
-fi
-
-fi
-
-    
-    
-    
-
-
-
-    
-    
-    
-
-#
-# Check to make sure the static flag actually works.
-#
-wl=$lt_prog_compiler_wl eval lt_tmp_static_flag=\"$lt_prog_compiler_static\"
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler static flag $lt_tmp_static_flag works" >&5
-printf %s "checking if $compiler static flag $lt_tmp_static_flag works... " >&6; }
-if test ${lt_cv_prog_compiler_static_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_static_works=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $lt_tmp_static_flag"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler_static_works=yes
-       fi
-     else
-       lt_cv_prog_compiler_static_works=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_static_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_static_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_static_works"; then
-    :
-else
-    lt_prog_compiler_static=
-fi
-
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5
-printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; }
-if test ${lt_cv_prog_compiler_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_c_o=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_c_o=yes
-     fi
-   fi
-   chmod u+w . 2>&5
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5
-printf '%s\n' "$lt_cv_prog_compiler_c_o" >&6; }
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5
-printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; }
-if test ${lt_cv_prog_compiler_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_c_o=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_c_o=yes
-     fi
-   fi
-   chmod u+w . 2>&5
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5
-printf '%s\n' "$lt_cv_prog_compiler_c_o" >&6; }
-
-
-
-
-hard_links=nottested
-if test no = "$lt_cv_prog_compiler_c_o" && test no != "$need_locks"; then
-  # do not overwrite the value of need_locks provided by the user
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if we can lock with hard links" >&5
-printf %s "checking if we can lock with hard links... " >&6; }
-  hard_links=yes
-  $RM conftest*
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  touch conftest.a
-  ln conftest.a conftest.b 2>&5 || hard_links=no
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $hard_links" >&5
-printf '%s\n' "$hard_links" >&6; }
-  if test no = "$hard_links"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&5
-printf '%s\n' "$as_me: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&2;}
-    need_locks=warn
-  fi
-else
-  need_locks=no
-fi
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the $compiler linker ($LD) supports shared libraries" >&5
-printf %s "checking whether the $compiler linker ($LD) supports shared libraries... " >&6; }
-
-  runpath_var=
-  allow_undefined_flag=
-  always_export_symbols=no
-  archive_cmds=
-  archive_expsym_cmds=
-  compiler_needs_object=no
-  enable_shared_with_static_runtimes=no
-  export_dynamic_flag_spec=
-  export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
-  hardcode_automatic=no
-  hardcode_direct=no
-  hardcode_direct_absolute=no
-  hardcode_libdir_flag_spec=
-  hardcode_libdir_separator=
-  hardcode_minus_L=no
-  hardcode_shlibpath_var=unsupported
-  inherit_rpath=no
-  link_all_deplibs=unknown
-  module_cmds=
-  module_expsym_cmds=
-  old_archive_from_new_cmds=
-  old_archive_from_expsyms_cmds=
-  thread_safe_flag_spec=
-  whole_archive_flag_spec=
-  # include_expsyms should be a list of space-separated symbols to be *always*
-  # included in the symbol list
-  include_expsyms=
-  # exclude_expsyms can be an extended regexp of symbols to exclude
-  # it will be wrapped by ' (' and ')$', so one must not match beginning or
-  # end of line.  Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc',
-  # as well as any symbol that contains 'd'.
-  exclude_expsyms='_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*'
-  # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out
-  # platforms (ab)use it in PIC code, but their linkers get confused if
-  # the symbol is explicitly referenced.  Since portable code cannot
-  # rely on this symbol name, it's probably fine to never include it in
-  # preloaded symbol tables.
-  # Exclude shared library initialization/finalization symbols.
-  extract_expsyms_cmds=
-
-  case $host_os in
-  cygwin* | mingw* | windows* | pw32* | cegcc*)
-    # FIXME: the MSVC++ and ICC port hasn't been tested in a loooong time
-    # When not using gcc, we currently assume that we are using
-    # Microsoft Visual C++ or Intel C++ Compiler.
-    if test yes != "$GCC"; then
-      with_gnu_ld=no
-    fi
-    ;;
-  interix*)
-    # we just hope/assume this is gcc and not c89 (= MSVC++ or ICC)
-    with_gnu_ld=yes
-    ;;
-  esac
-
-  ld_shlibs=yes
-
-  # On some targets, GNU ld is compatible enough with the native linker
-  # that we're better off using the native interface for both.
-  lt_use_gnu_ld_interface=no
-  if test yes = "$with_gnu_ld"; then
-    case $host_os in
-      aix*)
-	# The AIX port of GNU ld has always aspired to compatibility
-	# with the native linker.  However, as the warning in the GNU ld
-	# block says, versions before 2.19.5* couldn't really create working
-	# shared libraries, regardless of the interface used.
-	case `$LD -v 2>&1` in
-	  *\ \(GNU\ Binutils\)\ 2.19.5*) ;;
-	  *\ \(GNU\ Binutils\)\ 2.[2-9]*) ;;
-	  *\ \(GNU\ Binutils\)\ [3-9]*) ;;
-	  *)
-	    lt_use_gnu_ld_interface=yes
-	    ;;
-	esac
-	;;
-      *)
-	lt_use_gnu_ld_interface=yes
-	;;
-    esac
-  fi
-
-  if test yes = "$lt_use_gnu_ld_interface"; then
-    # If archive_cmds runs LD, not CC, wlarc should be empty
-    wlarc='$wl'
-
-    # Set some defaults for GNU ld with shared library support. These
-    # are reset later if shared libraries are not supported. Putting them
-    # here allows them to be overridden if necessary.
-    runpath_var=LD_RUN_PATH
-    hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-    export_dynamic_flag_spec='$wl--export-dynamic'
-    # ancient GNU ld didn't support --whole-archive et. al.
-    if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then
-      whole_archive_flag_spec=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
-    else
-      whole_archive_flag_spec=
-    fi
-    supports_anon_versioning=no
-    case `$LD -v | $SED -e 's/([^)]\+)\s\+//' 2>&1` in
-      *GNU\ gold*) supports_anon_versioning=yes ;;
-      *\ [01].* | *\ 2.[0-9].* | *\ 2.10.*) ;; # catch versions < 2.11
-      *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ...
-      *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ...
-      *\ 2.11.*) ;; # other 2.11 versions
-      *) supports_anon_versioning=yes ;;
-    esac
-
-    # See if GNU ld supports shared libraries.
-    case $host_os in
-    aix[3-9]*)
-      # On AIX/PPC, the GNU linker is very broken
-      if test ia64 != "$host_cpu"; then
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: the GNU linker, at least up to release 2.19, is reported
-*** to be unable to reliably create shared libraries on AIX.
-*** Therefore, libtool is disabling shared libraries support.  If you
-*** really care for shared libraries, you may want to install binutils
-*** 2.20 or above, or modify your PATH so that a non-GNU linker is found.
-*** You will then need to restart the configuration process.
-
-_LT_EOF
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            archive_expsym_cmds=''
-        ;;
-      m68k)
-            archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            hardcode_libdir_flag_spec='-L$libdir'
-            hardcode_minus_L=yes
-        ;;
-      esac
-      ;;
-
-    beos*)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	allow_undefined_flag=unsupported
-	# Joseph Beckenbach <jrb3@best.com> says some releases of gcc
-	# support --undefined.  This deserves some investigation.  FIXME
-	archive_cmds='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    cygwin* | mingw* | windows* | pw32* | cegcc*)
-      # _LT_TAGVAR(hardcode_libdir_flag_spec, ) is actually meaningless,
-      # as there is no search path for DLLs.
-      hardcode_libdir_flag_spec='-L$libdir'
-      export_dynamic_flag_spec='$wl--export-all-symbols'
-      allow_undefined_flag=unsupported
-      always_export_symbols=no
-      enable_shared_with_static_runtimes=yes
-      export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1 DATA/;s/^.*[ ]__nm__\([^ ]*\)[ ][^ ]*/\1 DATA/;/^I[ ]/d;/^[AITW][ ]/s/.* //'\'' | sort | uniq > $export_symbols'
-      exclude_expsyms='[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname'
-      file_list_spec='@'
-
-      if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then
-        archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-	# If the export-symbols file already is a .def file, use it as
-	# is; otherwise, prepend EXPORTS...
-	archive_expsym_cmds='if   test DEF = "`$SED -n     -e '\''s/^[	 ]*//'\''     -e '\''/^\(;.*\)*$/d'\''     -e '\''s/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p'\''     -e q     $export_symbols`" ; then
-          cp $export_symbols $output_objdir/$soname.def;
-        else
-          echo EXPORTS > $output_objdir/$soname.def;
-          cat $export_symbols >> $output_objdir/$soname.def;
-        fi~
-        $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    haiku*)
-      archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      link_all_deplibs=no
-      ;;
-
-    os2*)
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_minus_L=yes
-      allow_undefined_flag=unsupported
-      shrext_cmds=.dll
-      archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      old_archive_from_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      enable_shared_with_static_runtimes=yes
-      file_list_spec='@'
-      ;;
-
-    interix[3-9]*)
-      hardcode_direct=no
-      hardcode_shlibpath_var=no
-      hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-      export_dynamic_flag_spec='$wl-E'
-      # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc.
-      # Instead, shared libraries are loaded at an image base (0x10000000 by
-      # default) and relocated if they conflict, which is a slow very memory
-      # consuming and fragmenting process.  To avoid this, we pick a random,
-      # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link
-      # time.  Moving up from 0x10000000 also allows more sbrk(2) space.
-      archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      archive_expsym_cmds='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      ;;
-
-    gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu)
-      tmp_diet=no
-      if test linux-dietlibc = "$host_os"; then
-	case $cc_basename in
-	  diet\ *) tmp_diet=yes;;	# linux-dietlibc with static linking (!diet-dyn)
-	esac
-      fi
-      if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \
-	 && test no = "$tmp_diet"
-      then
-	tmp_addflag=' $pic_flag'
-	tmp_sharedflag='-shared'
-	case $cc_basename,$host_cpu in
-        pgcc*)				# Portland Group C compiler
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag'
-	  ;;
-	pgf77* | pgf90* | pgf95* | pgfortran*)
-					# Portland Group f77 and f90 compilers
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag -Mnomain' ;;
-	ecc*,ia64* | icc*,ia64*)	# Intel C compiler on ia64
-	  tmp_addflag=' -i_dynamic' ;;
-	efc*,ia64* | ifort*,ia64*)	# Intel Fortran compiler on ia64
-	  tmp_addflag=' -i_dynamic -nofor_main' ;;
-	ifc* | ifort*)			# Intel Fortran compiler
-	  tmp_addflag=' -nofor_main' ;;
-	lf95*)				# Lahey Fortran 8.1
-	  whole_archive_flag_spec=
-	  tmp_sharedflag='--shared' ;;
-        nagfor*)                        # NAGFOR 5.3
-          tmp_sharedflag='-Wl,-shared' ;;
-	xl[cC]* | bgxl[cC]* | mpixl[cC]*) # IBM XL C 8.0 on PPC (deal with xlf below)
-	  tmp_sharedflag='-qmkshrobj'
-	  tmp_addflag= ;;
-	nvcc*)	# Cuda Compiler Driver 2.2
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  compiler_needs_object=yes
-	  ;;
-	esac
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ C*)			# Sun C 5.9
-	  whole_archive_flag_spec='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  compiler_needs_object=yes
-	  tmp_sharedflag='-G' ;;
-	*Sun\ F*)			# Sun Fortran 8.3
-	  tmp_sharedflag='-G' ;;
-	esac
-	archive_cmds='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-
-        if test yes = "$supports_anon_versioning"; then
-          archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~
-            cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-            echo "local: *; };" >> $output_objdir/$libname.ver~
-            $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib'
-        fi
-
-	case $cc_basename in
-	tcc*)
-	  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	  export_dynamic_flag_spec='-rdynamic'
-	  ;;
-	xlf* | bgf* | bgxlf* | mpixlf*)
-	  # IBM XL Fortran 10.1 on PPC cannot create shared libs itself
-	  whole_archive_flag_spec='--whole-archive$convenience --no-whole-archive'
-	  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	  archive_cmds='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib'
-	  if test yes = "$supports_anon_versioning"; then
-	    archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~
-              cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-              echo "local: *; };" >> $output_objdir/$libname.ver~
-              $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib'
-	  fi
-	  ;;
-	esac
-      else
-        ld_shlibs=no
-      fi
-      ;;
-
-    *-mlibc)
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      ;;
-
-    netbsd* | netbsdelf*-gnu)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	archive_cmds='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib'
-	wlarc=
-      else
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      fi
-      ;;
-
-    solaris*)
-      if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: The releases 2.8.* of the GNU linker cannot reliably
-*** create shared libraries on Solaris systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.9.1 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-      elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*)
-      case `$LD -v 2>&1` in
-        *\ [01].* | *\ 2.[0-9].* | *\ 2.1[0-5].*)
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot
-*** reliably create shared libraries on SCO systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.16.91.0.3 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-	;;
-	*)
-	  # For security reasons, it is highly recommended that you always
-	  # use absolute paths for naming shared libraries, and exclude the
-	  # DT_RUNPATH tag from executables and libraries.  But doing so
-	  # requires that you compile everything twice, which is a pain.
-	  if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	    hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	    archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	    archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-	  else
-	    ld_shlibs=no
-	  fi
-	;;
-      esac
-      ;;
-
-    sunos4*)
-      archive_cmds='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      wlarc=
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    *)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-    esac
-
-    if test no = "$ld_shlibs"; then
-      runpath_var=
-      hardcode_libdir_flag_spec=
-      export_dynamic_flag_spec=
-      whole_archive_flag_spec=
-    fi
-  else
-    # PORTME fill in a description of your system's linker (not GNU ld)
-    case $host_os in
-    aix3*)
-      allow_undefined_flag=unsupported
-      always_export_symbols=yes
-      archive_expsym_cmds='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname'
-      # Note: this linker hardcodes the directories in LIBPATH if there
-      # are no directories specified by -L.
-      hardcode_minus_L=yes
-      if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then
-	# Neither direct hardcoding nor static linking is supported with a
-	# broken collect2.
-	hardcode_direct=unsupported
-      fi
-      ;;
-
-    aix[4-9]*)
-      if test ia64 = "$host_cpu"; then
-	# On IA64, the linker does run time linking by default, so we don't
-	# have to do anything special.
-	aix_use_runtimelinking=no
-	exp_sym_flag='-Bexport'
-	no_entry_flag=
-      else
-	# If we're using GNU nm, then we don't want the "-C" option.
-	# -C means demangle to GNU nm, but means don't demangle to AIX nm.
-	# Without the "-l" option, or with the "-B" option, AIX nm treats
-	# weak defined symbols like other global defined symbols, whereas
-	# GNU nm marks them as "W".
-	# While the 'weak' keyword is ignored in the Export File, we need
-	# it in the Import File for the 'aix-soname' feature, so we have
-	# to replace the "-B" option with "-P" for AIX nm.
-	if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then
-	  export_symbols_cmds='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && (substr(\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols'
-	else
-	  export_symbols_cmds='`func_echo_all $NM | $SED -e '\''s/B\([^B]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && (substr(\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols'
-	fi
-	aix_use_runtimelinking=no
-
-	# Test if we are trying to use run time linking or normal
-	# AIX style linking. If -brtl is somewhere in LDFLAGS, we
-	# have runtime linking enabled, and use it for executables.
-	# For shared libraries, we enable/disable runtime linking
-	# depending on the kind of the shared library created -
-	# when "with_aix_soname,aix_use_runtimelinking" is:
-	# "aix,no"   lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "aix,yes"  lib.so          shared, rtl:yes, for executables
-	#            lib.a           static archive
-	# "both,no"  lib.so.V(shr.o) shared, rtl:yes
-	#            lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a(lib.so.V) shared, rtl:no
-	# "svr4,*"   lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a           static archive
-	case $host_os in aix4.[23]|aix4.[23].*|aix[5-9]*)
-	  for ld_flag in $LDFLAGS; do
-	  if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then
-	    aix_use_runtimelinking=yes
-	    break
-	  fi
-	  done
-	  if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then
-	    # With aix-soname=svr4, we create the lib.so.V shared archives only,
-	    # so we don't have lib.a shared libs to link our executables.
-	    # We have to force runtime linking in this case.
-	    aix_use_runtimelinking=yes
-	    LDFLAGS="$LDFLAGS -Wl,-brtl"
-	  fi
-	  ;;
-	esac
-
-	exp_sym_flag='-bexport'
-	no_entry_flag='-bnoentry'
-      fi
-
-      # When large executables or shared objects are built, AIX ld can
-      # have problems creating the table of contents.  If linking a library
-      # or program results in "error TOC overflow" add -mminimal-toc to
-      # CXXFLAGS/CFLAGS for g++/gcc.  In the cases where that is not
-      # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS.
-
-      archive_cmds=''
-      hardcode_direct=yes
-      hardcode_direct_absolute=yes
-      hardcode_libdir_separator=':'
-      link_all_deplibs=yes
-      file_list_spec='$wl-f,'
-      case $with_aix_soname,$aix_use_runtimelinking in
-      aix,*) ;; # traditional, no import file
-      svr4,* | *,yes) # use import file
-	# The Import File defines what to hardcode.
-	hardcode_direct=no
-	hardcode_direct_absolute=no
-	;;
-      esac
-
-      if test yes = "$GCC"; then
-	case $host_os in aix4.[012]|aix4.[012].*)
-	# We only want to do this on AIX 4.2 and lower, the check
-	# below for broken collect2 doesn't work under 4.3+
-	  collect2name=`$CC -print-prog-name=collect2`
-	  if test -f "$collect2name" &&
-	   strings "$collect2name" | $GREP resolve_lib_name >/dev/null
-	  then
-	  # We have reworked collect2
-	  :
-	  else
-	  # We have old collect2
-	  hardcode_direct=unsupported
-	  # It fails to find uninstalled libraries when the uninstalled
-	  # path is not listed in the libpath.  Setting hardcode_minus_L
-	  # to unsupported forces relinking
-	  hardcode_minus_L=yes
-	  hardcode_libdir_flag_spec='-L$libdir'
-	  hardcode_libdir_separator=
-	  fi
-	  ;;
-	esac
-	shared_flag='-shared'
-	if test yes = "$aix_use_runtimelinking"; then
-	  shared_flag="$shared_flag "'$wl-G'
-	fi
-	# Need to ensure runtime linking is disabled for the traditional
-	# shared library, or the linker may eventually find shared libraries
-	# /with/ Import File - we do not want to mix them.
-	shared_flag_aix='-shared'
-	shared_flag_svr4='-shared $wl-G'
-      else
-	# not using gcc
-	if test ia64 = "$host_cpu"; then
-	# VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release
-	# chokes on -Wl,-G. The following line is correct:
-	  shared_flag='-G'
-	else
-	  if test yes = "$aix_use_runtimelinking"; then
-	    shared_flag='$wl-G'
-	  else
-	    shared_flag='$wl-bM:SRE'
-	  fi
-	  shared_flag_aix='$wl-bM:SRE'
-	  shared_flag_svr4='$wl-G'
-	fi
-      fi
-
-      export_dynamic_flag_spec='$wl-bexpall'
-      # It seems that -bexpall does not export symbols beginning with
-      # underscore (_), so it is better to generate a list of symbols to export.
-      always_export_symbols=yes
-      if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then
-	# Warning - without using the other runtime loading flags (-brtl),
-	# -berok will link without error, but may produce a broken library.
-	allow_undefined_flag='-berok'
-        # Determine the default libpath from the value encoded in an
-        # empty executable.
-        if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  if test ${lt_cv_aix_libpath_+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  
-  lt_aix_libpath_sed='
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }'
-  lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=/usr/lib:/lib
-  fi
-   ;;
-esac
-fi
-
-  aix_libpath=$lt_cv_aix_libpath_
-fi
-
-        hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath"
-        archive_expsym_cmds='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag
-      else
-	if test ia64 = "$host_cpu"; then
-	  hardcode_libdir_flag_spec='$wl-R $libdir:/usr/lib:/lib'
-	  allow_undefined_flag="-z nodefs"
-	  archive_expsym_cmds="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols"
-	else
-	 # Determine the default libpath from the value encoded in an
-	 # empty executable.
-	 if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  if test ${lt_cv_aix_libpath_+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  
-  lt_aix_libpath_sed='
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }'
-  lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=/usr/lib:/lib
-  fi
-   ;;
-esac
-fi
-
-  aix_libpath=$lt_cv_aix_libpath_
-fi
-
-	 hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath"
-	  # Warning - without using the other run time loading flags,
-	  # -berok will link without error, but may produce a broken library.
-	  no_undefined_flag=' $wl-bernotok'
-	  allow_undefined_flag=' $wl-berok'
-	  if test yes = "$with_gnu_ld"; then
-	    # We only use this code for GNU lds that support --whole-archive.
-	    whole_archive_flag_spec='$wl--whole-archive$convenience $wl--no-whole-archive'
-	  else
-	    # Exported symbols can be pulled into shared objects from archives
-	    whole_archive_flag_spec='$convenience'
-	  fi
-	  archive_cmds_need_lc=yes
-	  archive_expsym_cmds='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d'
-	  # -brtl affects multiple linker settings, -berok does not and is overridden later
-	  compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([, ]\\)%-berok\\1%g"`'
-	  if test svr4 != "$with_aix_soname"; then
-	    # This is similar to how AIX traditionally builds its shared libraries.
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname'
-	  fi
-	  if test aix != "$with_aix_soname"; then
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp'
-	  else
-	    # used by -dlpreopen to get the symbols
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$MV  $output_objdir/$realname.d/$soname $output_objdir'
-	  fi
-	  archive_expsym_cmds="$archive_expsym_cmds"'~$RM -r $output_objdir/$realname.d'
-	fi
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            archive_expsym_cmds=''
-        ;;
-      m68k)
-            archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            hardcode_libdir_flag_spec='-L$libdir'
-            hardcode_minus_L=yes
-        ;;
-      esac
-      ;;
-
-    bsdi[45]*)
-      export_dynamic_flag_spec=-rdynamic
-      ;;
-
-    cygwin* | mingw* | windows* | pw32* | cegcc*)
-      # When not using gcc, we currently assume that we are using
-      # Microsoft Visual C++ or Intel C++ Compiler.
-      # hardcode_libdir_flag_spec is actually meaningless, as there is
-      # no search path for DLLs.
-      case $cc_basename in
-      cl* | icl*)
-	# Native MSVC or ICC
-	hardcode_libdir_flag_spec=' '
-	allow_undefined_flag=unsupported
-	always_export_symbols=yes
-	file_list_spec='@'
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	archive_cmds='$CC -Fe$output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames='
-	archive_expsym_cmds='if   test DEF = "`$SED -n     -e '\''s/^[	 ]*//'\''     -e '\''/^\(;.*\)*$/d'\''     -e '\''s/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p'\''     -e q     $export_symbols`" ; then
-            cp "$export_symbols" "$output_objdir/$soname.def";
-            echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp";
-          else
-            $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp;
-          fi~
-          $CC -Fe$tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~
-          linknames='
-	# The linker will not automatically build a static lib if we build a DLL.
-	# _LT_TAGVAR(old_archive_from_new_cmds, )='true'
-	enable_shared_with_static_runtimes=yes
-	exclude_expsyms='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*'
-	export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1,DATA/'\'' | $SED -e '\''/^[AITW][ ]/s/.*[ ]//'\'' | sort | uniq > $export_symbols'
-	# Don't use ranlib
-	old_postinstall_cmds='chmod 644 $oldlib'
-	postlink_cmds='lt_outputfile="@OUTPUT@"~
-          lt_tool_outputfile="@TOOL_OUTPUT@"~
-          case $lt_outputfile in
-            *.exe|*.EXE) ;;
-            *)
-              lt_outputfile=$lt_outputfile.exe
-              lt_tool_outputfile=$lt_tool_outputfile.exe
-              ;;
-          esac~
-          if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then
-            $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1;
-            $RM "$lt_outputfile.manifest";
-          fi'
-	;;
-      *)
-	# Assume MSVC and ICC wrapper
-	hardcode_libdir_flag_spec=' '
-	allow_undefined_flag=unsupported
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	archive_cmds='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames='
-	# The linker will automatically build a .lib file if we build a DLL.
-	old_archive_from_new_cmds='true'
-	# FIXME: Should let the user specify the lib program.
-	old_archive_cmds='lib -OUT:$oldlib$oldobjs$old_deplibs'
-	enable_shared_with_static_runtimes=yes
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      
-  
-  archive_cmds_need_lc=no
-  hardcode_direct=no
-  hardcode_automatic=yes
-  hardcode_shlibpath_var=unsupported
-  if test yes = "$lt_cv_ld_force_load"; then
-    whole_archive_flag_spec='`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`'
-    
-  else
-    whole_archive_flag_spec=''
-  fi
-  link_all_deplibs=yes
-  allow_undefined_flag=$_lt_dar_allow_undefined
-  case $cc_basename in
-     ifort*|nagfor*) _lt_dar_can_shared=yes ;;
-     *) _lt_dar_can_shared=$GCC ;;
-  esac
-  if test yes = "$_lt_dar_can_shared"; then
-    output_verbose_link_cmd=func_echo_all
-    archive_cmds="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil"
-    module_cmds="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil"
-    archive_expsym_cmds="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil"
-    module_expsym_cmds="$SED -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil"
-    
-  else
-  ld_shlibs=no
-  fi
-
-      ;;
-
-    dgux*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_shlibpath_var=no
-      ;;
-
-    # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor
-    # support.  Future versions do this automatically, but an explicit c++rt0.o
-    # does not break anything, and helps significantly (at the cost of a little
-    # extra space).
-    freebsd2.2*)
-      archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o'
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    # Unfortunately, older versions of FreeBSD 2 do not have this feature.
-    freebsd2.*)
-      archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_direct=yes
-      hardcode_minus_L=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    # FreeBSD 3 and greater uses gcc -shared to do shared libraries.
-    freebsd* | dragonfly* | midnightbsd*)
-      archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    hpux9*)
-      if test yes = "$GCC"; then
-	archive_cmds='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      else
-	archive_cmds='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      fi
-      hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-      hardcode_libdir_separator=:
-      hardcode_direct=yes
-
-      # hardcode_minus_L: Not really in the search PATH,
-      # but as the default location of the library.
-      hardcode_minus_L=yes
-      export_dynamic_flag_spec='$wl-E'
-      ;;
-
-    hpux10*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      if test no = "$with_gnu_ld"; then
-	hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-	hardcode_libdir_separator=:
-	hardcode_direct=yes
-	hardcode_direct_absolute=yes
-	export_dynamic_flag_spec='$wl-E'
-	# hardcode_minus_L: Not really in the search PATH,
-	# but as the default location of the library.
-	hardcode_minus_L=yes
-      fi
-      ;;
-
-    hpux11*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	case $host_cpu in
-	hppa*64*)
-	  archive_cmds='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	  archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	esac
-      else
-	case $host_cpu in
-	hppa*64*)
-	  archive_cmds='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  archive_cmds='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	
-	  # Older versions of the 11.00 compiler do not understand -b yet
-	  # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does)
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC understands -b" >&5
-printf %s "checking if $CC understands -b... " >&6; }
-if test ${lt_cv_prog_compiler__b+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler__b=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS -b"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler__b=yes
-       fi
-     else
-       lt_cv_prog_compiler__b=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler__b" >&5
-printf '%s\n' "$lt_cv_prog_compiler__b" >&6; }
-
-if test yes = "$lt_cv_prog_compiler__b"; then
-    archive_cmds='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-else
-    archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-fi
-
-	  ;;
-	esac
-      fi
-      if test no = "$with_gnu_ld"; then
-	hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-	hardcode_libdir_separator=:
-
-	case $host_cpu in
-	hppa*64*|ia64*)
-	  hardcode_direct=no
-	  hardcode_shlibpath_var=no
-	  ;;
-	*)
-	  hardcode_direct=yes
-	  hardcode_direct_absolute=yes
-	  export_dynamic_flag_spec='$wl-E'
-
-	  # hardcode_minus_L: Not really in the search PATH,
-	  # but as the default location of the library.
-	  hardcode_minus_L=yes
-	  ;;
-	esac
-      fi
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	# Try to use the -exported_symbol ld option, if it does not
-	# work, assume that -exports_file does not work either and
-	# implicitly export all symbols.
-	# This should be the same for all languages, so no per-tag cache variable.
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the $host_os linker accepts -exported_symbol" >&5
-printf %s "checking whether the $host_os linker accepts -exported_symbol... " >&6; }
-if test ${lt_cv_irix_exported_symbol+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) save_LDFLAGS=$LDFLAGS
-	   LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null"
-	   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int foo (void) { return 0; }
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_irix_exported_symbol=yes
-else case e in @%:@(
-  e) lt_cv_irix_exported_symbol=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-           LDFLAGS=$save_LDFLAGS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_irix_exported_symbol" >&5
-printf '%s\n' "$lt_cv_irix_exported_symbol" >&6; }
-	if test yes = "$lt_cv_irix_exported_symbol"; then
-          archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib'
-	fi
-      else
-	archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      inherit_rpath=yes
-      link_all_deplibs=yes
-      ;;
-
-    linux*)
-      case $cc_basename in
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	ld_shlibs=yes
-	archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	;;
-      esac
-      ;;
-
-    *-mlibc)
-      ;;
-
-    netbsd* | netbsdelf*-gnu)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'  # a.out
-      else
-	archive_cmds='$LD -shared -o $lib $libobjs $deplibs $linker_flags'      # ELF
-      fi
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    newsos6)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_direct=yes
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      hardcode_shlibpath_var=no
-      ;;
-
-    *nto* | *qnx*)
-      ;;
-
-    openbsd*)
-      if test -f /usr/libexec/ld.so; then
-	hardcode_direct=yes
-	hardcode_shlibpath_var=no
-	hardcode_direct_absolute=yes
-	if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-	  archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  archive_expsym_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols'
-	  hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-	  export_dynamic_flag_spec='$wl-E'
-	else
-	  archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-	fi
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    os2*)
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_minus_L=yes
-      allow_undefined_flag=unsupported
-      shrext_cmds=.dll
-      archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      old_archive_from_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      enable_shared_with_static_runtimes=yes
-      file_list_spec='@'
-      ;;
-
-    osf3*)
-      if test yes = "$GCC"; then
-	allow_undefined_flag=' $wl-expect_unresolved $wl\*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-      else
-	allow_undefined_flag=' -expect_unresolved \*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      ;;
-
-    osf4* | osf5*)	# as osf3* with the addition of -msym flag
-      if test yes = "$GCC"; then
-	allow_undefined_flag=' $wl-expect_unresolved $wl\*'
-	archive_cmds='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      else
-	allow_undefined_flag=' -expect_unresolved \*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	archive_expsym_cmds='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~
-          $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp'
-
-	# Both c and cxx compiler support -rpath directly
-	hardcode_libdir_flag_spec='-rpath $libdir'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_separator=:
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      no_undefined_flag=' -z defs'
-      if test yes = "$GCC"; then
-	wlarc='$wl'
-	archive_cmds='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-          $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-      else
-	case `$CC -V 2>&1` in
-	*"Compilers 5.0"*)
-	  wlarc=''
-	  archive_cmds='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp'
-	  ;;
-	*)
-	  wlarc='$wl'
-	  archive_cmds='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags'
-	  archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-	  ;;
-	esac
-      fi
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_shlibpath_var=no
-      case $host_os in
-      solaris2.[0-5] | solaris2.[0-5].*) ;;
-      *)
-	# The compiler driver will combine and reorder linker options,
-	# but understands '-z linker_flag'.  GCC discards it without '$wl',
-	# but is careful enough not to reorder.
-	# Supported since Solaris 2.6 (maybe 2.5.1?)
-	if test yes = "$GCC"; then
-	  whole_archive_flag_spec='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract'
-	else
-	  whole_archive_flag_spec='-z allextract$convenience -z defaultextract'
-	fi
-	;;
-      esac
-      link_all_deplibs=yes
-      ;;
-
-    sunos4*)
-      if test sequent = "$host_vendor"; then
-	# Use $CC to link under sequent, because it throws in some extra .o
-	# files that make .init and .fini sections work.
-	archive_cmds='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_direct=yes
-      hardcode_minus_L=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    sysv4)
-      case $host_vendor in
-	sni)
-	  archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  hardcode_direct=yes # is this really true???
-	;;
-	siemens)
-	  ## LD is ld it makes a PLAMLIB
-	  ## CC just makes a GrossModule.
-	  archive_cmds='$LD -G -o $lib $libobjs $deplibs $linker_flags'
-	  reload_cmds='$CC -r -o $output$reload_objs'
-	  hardcode_direct=no
-        ;;
-	motorola)
-	  archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  hardcode_direct=no #Motorola manual says yes, but my tests say they lie
-	;;
-      esac
-      runpath_var='LD_RUN_PATH'
-      hardcode_shlibpath_var=no
-      ;;
-
-    sysv4.3*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_shlibpath_var=no
-      export_dynamic_flag_spec='-Bexport'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	hardcode_shlibpath_var=no
-	runpath_var=LD_RUN_PATH
-	hardcode_runpath_var=yes
-	ld_shlibs=yes
-      fi
-      ;;
-
-    sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[01].[10]* | unixware7* | sco3.2v5.0.[024]*)
-      no_undefined_flag='$wl-z,text'
-      archive_cmds_need_lc=no
-      hardcode_shlibpath_var=no
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6*)
-      # Note: We CANNOT use -z defs as we might desire, because we do not
-      # link with -lc, and that would cause any symbols used from libc to
-      # always be unresolved, which means just about no library would
-      # ever link correctly.  If we're not using GNU ld we use -z text
-      # though, which does catch some bad symbols but isn't as heavy-handed
-      # as -z defs.
-      no_undefined_flag='$wl-z,text'
-      allow_undefined_flag='$wl-z,nodefs'
-      archive_cmds_need_lc=no
-      hardcode_shlibpath_var=no
-      hardcode_libdir_flag_spec='$wl-R,$libdir'
-      hardcode_libdir_separator=':'
-      link_all_deplibs=yes
-      export_dynamic_flag_spec='$wl-Bexport'
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    uts4*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_shlibpath_var=no
-      ;;
-
-    *)
-      ld_shlibs=no
-      ;;
-    esac
-
-    if test sni = "$host_vendor"; then
-      case $host in
-      sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*)
-	export_dynamic_flag_spec='$wl-Blargedynsym'
-	;;
-      esac
-    fi
-  fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ld_shlibs" >&5
-printf '%s\n' "$ld_shlibs" >&6; }
-test no = "$ld_shlibs" && can_build_shared=no
-
-with_gnu_ld=$with_gnu_ld
-
-
-    
-    
-    
-
-    
-    
-    
-
-    
-    
-    
-
-
-#
-# Do we need to explicitly link libc?
-#
-case "x$archive_cmds_need_lc" in
-x|xyes)
-  # Assume -lc should be added
-  archive_cmds_need_lc=yes
-
-  if test yes,yes = "$GCC,$enable_shared"; then
-    case $archive_cmds in
-    *'~'*)
-      # FIXME: we may have to deal with multi-command sequences.
-      ;;
-    '$CC '*)
-      # Test whether the compiler implicitly links with -lc since on some
-      # systems, -lgcc has to come before -lc. If gcc already passes -lc
-      # to ld, don't add -lc before -lgcc.
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether -lc should be explicitly linked in" >&5
-printf %s "checking whether -lc should be explicitly linked in... " >&6; }
-if test ${lt_cv_archive_cmds_need_lc+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) $RM conftest*
-	echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-	if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } 2>conftest.err; then
-	  soname=conftest
-	  lib=conftest
-	  libobjs=conftest.$ac_objext
-	  deplibs=
-	  wl=$lt_prog_compiler_wl
-	  pic_flag=$lt_prog_compiler_pic
-	  compiler_flags=-v
-	  linker_flags=-v
-	  verstring=
-	  output_objdir=.
-	  libname=conftest
-	  lt_save_allow_undefined_flag=$allow_undefined_flag
-	  allow_undefined_flag=
-	  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1\""; } >&5
-  (eval $archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-	  then
-	    lt_cv_archive_cmds_need_lc=no
-	  else
-	    lt_cv_archive_cmds_need_lc=yes
-	  fi
-	  allow_undefined_flag=$lt_save_allow_undefined_flag
-	else
-	  cat conftest.err 1>&5
-	fi
-	$RM conftest*
-	 ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_archive_cmds_need_lc" >&5
-printf '%s\n' "$lt_cv_archive_cmds_need_lc" >&6; }
-      archive_cmds_need_lc=$lt_cv_archive_cmds_need_lc
-      ;;
-    esac
-  fi
-  ;;
-esac
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking dynamic linker characteristics" >&5
-printf %s "checking dynamic linker characteristics... " >&6; }
-
-if test yes = "$GCC"; then
-  case $host_os in
-    darwin*) lt_awk_arg='/^libraries:/,/LR/' ;;
-    *) lt_awk_arg='/^libraries:/' ;;
-  esac
-  case $host_os in
-    mingw* | windows* | cegcc*) lt_sed_strip_eq='s|=\([A-Za-z]:\)|\1|g' ;;
-    *) lt_sed_strip_eq='s|=/|/|g' ;;
-  esac
-  lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq`
-  case $lt_search_path_spec in
-  *\;*)
-    # if the path contains ";" then we assume it to be the separator
-    # otherwise default to the standard path separator (i.e. ":") - it is
-    # assumed that no part of a normal pathname contains ";" but that should
-    # okay in the real world where ";" in dirpaths is itself problematic.
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'`
-    ;;
-  *)
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"`
-    ;;
-  esac
-  # Ok, now we have the path, separated by spaces, we can step through it
-  # and add multilib dir if necessary...
-  lt_tmp_lt_search_path_spec=
-  lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null`
-  # ...but if some path component already ends with the multilib dir we assume
-  # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer).
-  case "$lt_multi_os_dir; $lt_search_path_spec " in
-  "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*)
-    lt_multi_os_dir=
-    ;;
-  esac
-  for lt_sys_path in $lt_search_path_spec; do
-    if test -d "$lt_sys_path$lt_multi_os_dir"; then
-      lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir"
-    elif test -n "$lt_multi_os_dir"; then
-      test -d "$lt_sys_path" && \
-	lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path"
-    fi
-  done
-  lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk '
-BEGIN {RS = " "; FS = "/|\n";} {
-  lt_foo = "";
-  lt_count = 0;
-  for (lt_i = NF; lt_i > 0; lt_i--) {
-    if ($lt_i != "" && $lt_i != ".") {
-      if ($lt_i == "..") {
-        lt_count++;
-      } else {
-        if (lt_count == 0) {
-          lt_foo = "/" $lt_i lt_foo;
-        } else {
-          lt_count--;
-        }
-      }
-    }
-  }
-  if (lt_foo != "") { lt_freq[lt_foo]++; }
-  if (lt_freq[lt_foo] == 1) { print lt_foo; }
-}'`
-  # AWK program above erroneously prepends '/' to C:/dos/paths
-  # for these hosts.
-  case $host_os in
-    mingw* | windows* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\
-      $SED 's|/\([A-Za-z]:\)|\1|g'` ;;
-  esac
-  sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP`
-else
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-fi
-library_names_spec=
-libname_spec='lib$name'
-soname_spec=
-shrext_cmds=.so
-postinstall_cmds=
-postuninstall_cmds=
-finish_cmds=
-finish_eval=
-shlibpath_var=
-shlibpath_overrides_runpath=unknown
-version_type=none
-dynamic_linker="$host_os ld.so"
-sys_lib_dlsearch_path_spec="/lib /usr/lib"
-need_lib_prefix=unknown
-hardcode_into_libs=no
-
-# when you set need_version to no, make sure it does not cause -set_version
-# flags to be left without arguments
-need_version=unknown
-
-
-
-case $host_os in
-aix3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname.a'
-  shlibpath_var=LIBPATH
-
-  # AIX 3 has no versioning support, so we append a major version to the name.
-  soname_spec='$libname$release$shared_ext$major'
-  ;;
-
-aix[4-9]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  hardcode_into_libs=yes
-  if test ia64 = "$host_cpu"; then
-    # AIX 5 supports IA64
-    library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext'
-    shlibpath_var=LD_LIBRARY_PATH
-  else
-    # With GCC up to 2.95.x, collect2 would create an import file
-    # for dependence libraries.  The import file would start with
-    # the line '#! .'.  This would cause the generated library to
-    # depend on '.', always an invalid library.  This was fixed in
-    # development snapshots of GCC prior to 3.0.
-    case $host_os in
-      aix4 | aix4.[01] | aix4.[01].*)
-      if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)'
-	   echo ' yes '
-	   echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then
-	:
-      else
-	can_build_shared=no
-      fi
-      ;;
-    esac
-    # Using Import Files as archive members, it is possible to support
-    # filename-based versioning of shared library archives on AIX. While
-    # this would work for both with and without runtime linking, it will
-    # prevent static linking of such archives. So we do filename-based
-    # shared library versioning with .so extension only, which is used
-    # when both runtime linking and shared linking is enabled.
-    # Unfortunately, runtime linking may impact performance, so we do
-    # not want this to be the default eventually. Also, we use the
-    # versioned .so libs for executables only if there is the -brtl
-    # linker flag in LDFLAGS as well, or --enable-aix-soname=svr4 only.
-    # To allow for filename-based versioning support, we need to create
-    # libNAME.so.V as an archive file, containing:
-    # *) an Import File, referring to the versioned filename of the
-    #    archive as well as the shared archive member, telling the
-    #    bitwidth (32 or 64) of that shared object, and providing the
-    #    list of exported symbols of that shared object, eventually
-    #    decorated with the 'weak' keyword
-    # *) the shared object with the F_LOADONLY flag set, to really avoid
-    #    it being seen by the linker.
-    # At run time we better use the real file rather than another symlink,
-    # but for link time we create the symlink libNAME.so -> libNAME.so.V
-
-    case $with_aix_soname,$aix_use_runtimelinking in
-    # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct
-    # soname into executable. Probably we can add versioning support to
-    # collect2, so additional links can be useful in future.
-    aix,yes) # traditional libtool
-      dynamic_linker='AIX unversionable lib.so'
-      # If using run time linking (on AIX 4.2 or later) use lib<name>.so
-      # instead of lib<name>.a to let people know that these are not
-      # typical AIX shared libraries.
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      ;;
-    aix,no) # traditional AIX only
-      dynamic_linker='AIX lib.a(lib.so.V)'
-      # We preserve .a as extension for shared libraries through AIX4.2
-      # and later when we are not doing run time linking.
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      ;;
-    svr4,*) # full svr4 only
-      dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o)"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,yes) # both, prefer svr4
-      dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o), lib.a(lib.so.V)"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # unpreferred sharedlib libNAME.a needs extra handling
-      postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"'
-      postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,no) # both, prefer aix
-      dynamic_linker="AIX lib.a(lib.so.V), lib.so.V($shared_archive_member_spec.o)"
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling
-      postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)'
-      postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"'
-      ;;
-    esac
-    shlibpath_var=LIBPATH
-  fi
-  ;;
-
-amigaos*)
-  case $host_cpu in
-  powerpc)
-    # Since July 2007 AmigaOS4 officially supports .so libraries.
-    # When compiling the executable, add -use-dynld -Lsobjs: to the compileline.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    ;;
-  m68k)
-    library_names_spec='$libname.ixlibrary $libname.a'
-    # Create ${libname}_ixlibrary.a entries in /sys/libs.
-    finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([^/]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done'
-    ;;
-  esac
-  ;;
-
-beos*)
-  library_names_spec='$libname$shared_ext'
-  dynamic_linker="$host_os ld.so"
-  shlibpath_var=LIBRARY_PATH
-  ;;
-
-bsdi[45]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib"
-  # the default ld.so.conf also contains /usr/contrib/lib and
-  # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow
-  # libtool to hard-code these into programs
-  ;;
-
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-
-  case $GCC,$cc_basename in
-  yes,*)
-    # gcc
-    library_names_spec='$libname.dll.a'
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    # If user builds GCC with multilib enabled,
-    # it should just install on $(libdir)
-    # not on $(libdir)/../bin or 32 bits dlls would override 64 bit ones.
-    if test xyes = x"$multilib"; then
-      postinstall_cmds='base_file=`basename \$file`~
-        dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-        dldir=$destdir/`dirname \$dlpath`~
-        $install_prog $dir/$dlname $destdir/$dlname~
-        chmod a+x $destdir/$dlname~
-        if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-          eval '\''$striplib $destdir/$dlname'\'' || exit \$?;
-        fi'
-    else
-      postinstall_cmds='base_file=`basename \$file`~
-        dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-        dldir=$destdir/`dirname \$dlpath`~
-        test -d \$dldir || mkdir -p \$dldir~
-        $install_prog $dir/$dlname \$dldir/$dlname~
-        chmod a+x \$dldir/$dlname~
-        if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-          eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-        fi'
-    fi
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-
-    case $host_os in
-    cygwin*)
-      # Cygwin DLLs use 'cyg' prefix rather than 'lib'
-      soname_spec='`echo $libname | $SED -e 's/^lib/cyg/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-
-      sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api"
-      ;;
-    mingw* | windows* | cegcc*)
-      # MinGW DLLs use traditional 'lib' prefix
-      soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-      ;;
-    pw32*)
-      # pw32 DLLs use 'pw' prefix rather than 'lib'
-      library_names_spec='`echo $libname | $SED -e 's/^lib/pw/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-      ;;
-    esac
-    dynamic_linker='Win32 ld.exe'
-    ;;
-
-  *,cl* | *,icl*)
-    # Native MSVC or ICC
-    libname_spec='$name'
-    soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-    library_names_spec='$libname.dll.lib'
-
-    case $build_os in
-    mingw* | windows*)
-      sys_lib_search_path_spec=
-      lt_save_ifs=$IFS
-      IFS=';'
-      for lt_path in $LIB
-      do
-        IFS=$lt_save_ifs
-        # Let DOS variable expansion print the short 8.3 style file name.
-        lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"`
-        sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path"
-      done
-      IFS=$lt_save_ifs
-      # Convert to MSYS style.
-      sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's|\\\\|/|g' -e 's| \\([a-zA-Z]\\):| /\\1|g' -e 's|^ ||'`
-      ;;
-    cygwin*)
-      # Convert to unix form, then to dos form, then back to unix form
-      # but this time dos style (no spaces!) so that the unix form looks
-      # like /cygdrive/c/PROGRA~1:/cygdr...
-      sys_lib_search_path_spec=`cygpath --path --unix "$LIB"`
-      sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null`
-      sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      ;;
-    *)
-      sys_lib_search_path_spec=$LIB
-      if $ECHO "$sys_lib_search_path_spec" | $GREP ';[c-zC-Z]:/' >/dev/null; then
-        # It is most probably a Windows format PATH.
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'`
-      else
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      fi
-      # FIXME: find the short name or the path components, as spaces are
-      # common. (e.g. "Program Files" -> "PROGRA~1")
-      ;;
-    esac
-
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    postinstall_cmds='base_file=`basename \$file`~
-      dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-      dldir=$destdir/`dirname \$dlpath`~
-      test -d \$dldir || mkdir -p \$dldir~
-      $install_prog $dir/$dlname \$dldir/$dlname'
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-    dynamic_linker='Win32 link.exe'
-    ;;
-
-  *)
-    # Assume MSVC and ICC wrapper
-    library_names_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext $libname.lib'
-    dynamic_linker='Win32 ld.exe'
-    ;;
-  esac
-  # FIXME: first we should search . and the directory the executable is in
-  shlibpath_var=PATH
-  ;;
-
-darwin* | rhapsody*)
-  dynamic_linker="$host_os dyld"
-  version_type=darwin
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$major$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$major$shared_ext'
-  shlibpath_overrides_runpath=yes
-  shlibpath_var=DYLD_LIBRARY_PATH
-  shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`'
-
-  sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib"
-  sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib'
-  ;;
-
-dgux*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  # DragonFly does not have aout.  When/if they implement a new
-  # versioning mechanism, adjust this.
-  if test -x /usr/bin/objformat; then
-    objformat=`/usr/bin/objformat`
-  else
-    case $host_os in
-    freebsd[23].*) objformat=aout ;;
-    *) objformat=elf ;;
-    esac
-  fi
-  version_type=freebsd-$objformat
-  case $version_type in
-    freebsd-elf*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      soname_spec='$libname$release$shared_ext$major'
-      need_version=no
-      need_lib_prefix=no
-      ;;
-    freebsd-*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-      need_version=yes
-      ;;
-  esac
-  case $host_cpu in
-    powerpc64)
-      # On FreeBSD bi-arch platforms, a different variable is used for 32-bit
-      # binaries.  See <https://man.freebsd.org/cgi/man.cgi?query=ld.so>.
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int test_pointer_size[sizeof (void *) - 5];
-           
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  shlibpath_var=LD_LIBRARY_PATH
-else case e in @%:@(
-  e) shlibpath_var=LD_32_LIBRARY_PATH ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-      ;;
-    *)
-      shlibpath_var=LD_LIBRARY_PATH
-      ;;
-  esac
-  case $host_os in
-  freebsd2.*)
-    shlibpath_overrides_runpath=yes
-    ;;
-  freebsd3.[01]* | freebsdelf3.[01]*)
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  freebsd3.[2-9]* | freebsdelf3.[2-9]* | \
-  freebsd4.[0-5] | freebsdelf4.[0-5] | freebsd4.1.1 | freebsdelf4.1.1)
-    shlibpath_overrides_runpath=no
-    hardcode_into_libs=yes
-    ;;
-  *) # from 4.6 on, and DragonFly
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  esac
-  ;;
-
-haiku*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  dynamic_linker="$host_os runtime_loader"
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec='/boot/system/non-packaged/develop/lib /boot/system/develop/lib'
-  sys_lib_dlsearch_path_spec='/boot/home/config/non-packaged/lib /boot/home/config/lib /boot/system/non-packaged/lib /boot/system/lib'
-  hardcode_into_libs=no
-  ;;
-
-hpux9* | hpux10* | hpux11*)
-  # Give a soname corresponding to the major version so that dld.sl refuses to
-  # link against other versions.
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  case $host_cpu in
-  ia64*)
-    shrext_cmds='.so'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.so"
-    shlibpath_var=LD_LIBRARY_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    if test 32 = "$HPUX_IA64_MODE"; then
-      sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux32
-    else
-      sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux64
-    fi
-    ;;
-  hppa*64*)
-    shrext_cmds='.sl'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64"
-    sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-    ;;
-  *)
-    shrext_cmds='.sl'
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=SHLIB_PATH
-    shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    ;;
-  esac
-  # HP-UX runs *really* slowly unless shared libraries are mode 555, ...
-  postinstall_cmds='chmod 555 $lib'
-  # or fails outright, so override atomically:
-  install_override_mode=555
-  ;;
-
-interix[3-9]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $host_os in
-    nonstopux*) version_type=nonstopux ;;
-    *)
-	if test yes = "$lt_cv_prog_gnu_ld"; then
-		version_type=linux # correct to gnu/linux during the next big refactor
-	else
-		version_type=irix
-	fi ;;
-  esac
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext'
-  case $host_os in
-  irix5* | nonstopux*)
-    libsuff= shlibsuff=
-    ;;
-  *)
-    case $LD in # libtool.m4 will add one of these switches to LD
-    *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ")
-      libsuff= shlibsuff= libmagic=32-bit;;
-    *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ")
-      libsuff=32 shlibsuff=N32 libmagic=N32;;
-    *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ")
-      libsuff=64 shlibsuff=64 libmagic=64-bit;;
-    *) libsuff= shlibsuff= libmagic=never-match;;
-    esac
-    ;;
-  esac
-  shlibpath_var=LD_LIBRARY${shlibsuff}_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff"
-  sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff"
-  hardcode_into_libs=yes
-  ;;
-
-# No shared lib support for Linux oldld, aout, or coff.
-linux*oldld* | linux*aout* | linux*coff*)
-  dynamic_linker=no
-  ;;
-
-linux*android*)
-  version_type=none # Android doesn't support versioned libraries.
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  dynamic_linker='Android linker'
-  # -rpath works at least for libraries that are not overridden by
-  # libraries installed in system locations.
-  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-
-  # Some binutils ld are patched to set DT_RUNPATH
-  if test ${lt_cv_shlibpath_overrides_runpath+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_shlibpath_overrides_runpath=no
-    save_LDFLAGS=$LDFLAGS
-    save_libdir=$libdir
-    eval "libdir=/foo; wl=\"$lt_prog_compiler_wl\"; \
-	 LDFLAGS=\"\$LDFLAGS $hardcode_libdir_flag_spec\""
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  if  ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null
-then :
-  lt_cv_shlibpath_overrides_runpath=yes
-fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-    LDFLAGS=$save_LDFLAGS
-    libdir=$save_libdir
-     ;;
-esac
-fi
-
-  shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  # Ideally, we could use ldconfig to report *all* directories which are
-  # searched for libraries, however this is still not possible.  Aside from not
-  # being certain /sbin/ldconfig is available, command
-  # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64,
-  # even though it is searched at run-time.  Try to do the best guess by
-  # appending ld.so.conf contents (and includes) to the search path.
-  if test -f /etc/ld.so.conf; then
-    lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \$2)); skip = 1; } { if (!skip) print \$0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[	 ]*hwcap[	 ]/d;s/[:,	]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '`
-    sys_lib_dlsearch_path_spec="/lib /usr/lib $lt_ld_extra"
-  fi
-
-  # We used to test for /lib/ld.so.1 and disable shared libraries on
-  # powerpc, because MkLinux only supported shared libraries with the
-  # GNU dynamic linker.  Since this was broken with cross compilers,
-  # most powerpc-linux boxes support dynamic linking these days and
-  # people can always --disable-shared, the test was removed, and we
-  # assume the GNU/Linux dynamic linker is in use.
-  dynamic_linker='GNU/Linux ld.so'
-  ;;
-
-netbsdelf*-gnu)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='NetBSD ld.elf_so'
-  ;;
-
-netbsd*)
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-    finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-    dynamic_linker='NetBSD (a.out) ld.so'
-  else
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    dynamic_linker='NetBSD ld.elf_so'
-  fi
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  ;;
-
-*-mlibc)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='mlibc ld.so'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-newsos6)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-*nto* | *qnx*)
-  version_type=qnx
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='ldqnx.so'
-  ;;
-
-openbsd*)
-  version_type=sunos
-  sys_lib_dlsearch_path_spec=/usr/lib
-  need_lib_prefix=no
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    need_version=no
-  else
-    need_version=yes
-  fi
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-os2*)
-  libname_spec='$name'
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-  # OS/2 can only load a DLL with a base name of 8 characters or less.
-  soname_spec='`test -n "$os2dllname" && libname="$os2dllname";
-    v=$($ECHO $release$versuffix | tr -d .-);
-    n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _);
-    $ECHO $n$v`$shared_ext'
-  library_names_spec='${libname}_dll.$libext'
-  dynamic_linker='OS/2 ld.exe'
-  shlibpath_var=BEGINLIBPATH
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  postinstall_cmds='base_file=`basename \$file`~
-    dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~
-    dldir=$destdir/`dirname \$dlpath`~
-    test -d \$dldir || mkdir -p \$dldir~
-    $install_prog $dir/$dlname \$dldir/$dlname~
-    chmod a+x \$dldir/$dlname~
-    if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-      eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-    fi'
-  postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~
-    dlpath=$dir/\$dldll~
-    $RM \$dlpath'
-  ;;
-
-osf3* | osf4* | osf5*)
-  version_type=osf
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  ;;
-
-rdos*)
-  dynamic_linker=no
-  ;;
-
-serenity*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  dynamic_linker='SerenityOS LibELF'
-  ;;
-
-solaris*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  # ldd complains unless libraries are executable
-  postinstall_cmds='chmod +x $lib'
-  ;;
-
-sunos4*)
-  version_type=sunos
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  if test yes = "$with_gnu_ld"; then
-    need_lib_prefix=no
-  fi
-  need_version=yes
-  ;;
-
-sysv4 | sysv4.3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  case $host_vendor in
-    sni)
-      shlibpath_overrides_runpath=no
-      need_lib_prefix=no
-      runpath_var=LD_RUN_PATH
-      ;;
-    siemens)
-      need_lib_prefix=no
-      ;;
-    motorola)
-      need_lib_prefix=no
-      need_version=no
-      shlibpath_overrides_runpath=no
-      sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib'
-      ;;
-  esac
-  ;;
-
-sysv4*MP*)
-  if test -d /usr/nec; then
-    version_type=linux # correct to gnu/linux during the next big refactor
-    library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext'
-    soname_spec='$libname$shared_ext.$major'
-    shlibpath_var=LD_LIBRARY_PATH
-  fi
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  version_type=sco
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  if test yes = "$with_gnu_ld"; then
-    sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib'
-  else
-    sys_lib_search_path_spec='/usr/ccs/lib /usr/lib'
-    case $host_os in
-      sco3.2v5*)
-        sys_lib_search_path_spec="$sys_lib_search_path_spec /lib"
-	;;
-    esac
-  fi
-  sys_lib_dlsearch_path_spec='/usr/lib'
-  ;;
-
-tpf*)
-  # TPF is a cross-target only.  Preferred cross-host = GNU/Linux.
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-uts4*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-emscripten*)
-  version_type=none
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  dynamic_linker="Emscripten linker"
-  lt_prog_compiler_wl=
-lt_prog_compiler_pic=
-lt_prog_compiler_static=
-
-
-  if test yes = "$GCC"; then
-    lt_prog_compiler_wl='-Wl,'
-    lt_prog_compiler_static='-static'
-
-    case $host_os in
-      aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            lt_prog_compiler_pic='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            lt_prog_compiler_pic='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      ;;
-
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      lt_prog_compiler_static=
-      ;;
-
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='-fPIC'
-	;;
-      esac
-      ;;
-
-    interix[3-9]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-
-    msdosdjgpp*)
-      # Just because we use GCC doesn't mean we suddenly get shared libraries
-      # on systems that don't support them.
-      lt_prog_compiler_can_build_shared=no
-      enable_shared=no
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic=-Kconform_pic
-      fi
-      ;;
-
-    *)
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-    esac
-
-    case $cc_basename in
-    nvcc*) # Cuda Compiler Driver 2.2
-      lt_prog_compiler_wl='-Xlinker '
-      if test -n "$lt_prog_compiler_pic"; then
-        lt_prog_compiler_pic="-Xcompiler $lt_prog_compiler_pic"
-      fi
-      ;;
-    esac
-  else
-    # PORTME Check for flag to pass linker flags through the system compiler.
-    case $host_os in
-    aix*)
-      lt_prog_compiler_wl='-Wl,'
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      else
-	lt_prog_compiler_static='-bnso -bI:/lib/syscalls.exp'
-      fi
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      case $cc_basename in
-      nagfor*)
-        # NAG Fortran compiler
-        lt_prog_compiler_wl='-Wl,-Wl,,'
-        lt_prog_compiler_pic='-PIC'
-        lt_prog_compiler_static='-Bstatic'
-        ;;
-      esac
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    hpux9* | hpux10* | hpux11*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
-      # not for PA HP-UX.
-      case $host_cpu in
-      hppa*64*|ia64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='+Z'
-	;;
-      esac
-      # Is there a better lt_prog_compiler_static that works with the bundled CC?
-      lt_prog_compiler_static='$wl-a ${wl}archive'
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC (with -KPIC) is the default.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-      case $cc_basename in
-      # old Intel for x86_64, which still supported -KPIC.
-      ecc*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-KPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      *flang* | ftn | f18* | f95*)
-        # Flang compiler.
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # icc used to be incompatible with GCC.
-      # ICC 10 doesn't accept -KPIC any more.
-      icc* | ifort*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # Lahey Fortran 8.1.
-      lf95*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='--shared'
-	lt_prog_compiler_static='--static'
-	;;
-      nagfor*)
-	# NAG Fortran compiler
-	lt_prog_compiler_wl='-Wl,-Wl,,'
-	lt_prog_compiler_pic='-PIC'
-	lt_prog_compiler_static='-Bstatic'
-	;;
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-	;;
-      pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
-        # Portland Group compilers (*not* the Pentium gcc compiler,
-	# which looks to be a dead project)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fpic'
-	lt_prog_compiler_static='-Bstatic'
-        ;;
-      ccc*)
-        lt_prog_compiler_wl='-Wl,'
-        # All Alpha code is PIC.
-        lt_prog_compiler_static='-non_shared'
-        ;;
-      xl* | bgxl* | bgf* | mpixl*)
-	# IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-qpic'
-	lt_prog_compiler_static='-qstaticlink'
-	;;
-      *)
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [1-7].* | *Sun*Fortran*\ 8.[0-3]*)
-	  # Sun Fortran 8.3 passes all unrecognized flags to the linker
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl=''
-	  ;;
-	*Sun\ F* | *Sun*Fortran*)
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Qoption ld '
-	  ;;
-	*Sun\ C*)
-	  # Sun C 5.9
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Wl,'
-	  ;;
-        *Intel*\ [CF]*Compiler*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fPIC'
-	  lt_prog_compiler_static='-static'
-	  ;;
-	*Portland\ Group*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fpic'
-	  lt_prog_compiler_static='-Bstatic'
-	  ;;
-	esac
-	;;
-      esac
-      ;;
-
-    newsos6)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *-mlibc)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-fPIC'
-      lt_prog_compiler_static='-static'
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    osf3* | osf4* | osf5*)
-      lt_prog_compiler_wl='-Wl,'
-      # All OSF/1 code is PIC.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    rdos*)
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      case $cc_basename in
-      f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
-	lt_prog_compiler_wl='-Qoption ld ';;
-      *)
-	lt_prog_compiler_wl='-Wl,';;
-      esac
-      ;;
-
-    sunos4*)
-      lt_prog_compiler_wl='-Qoption ld '
-      lt_prog_compiler_pic='-PIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4 | sysv4.2uw2* | sysv4.3*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic='-Kconform_pic'
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      ;;
-
-    sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    unicos*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_can_build_shared=no
-      ;;
-
-    uts4*)
-      lt_prog_compiler_pic='-pic'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *)
-      lt_prog_compiler_can_build_shared=no
-      ;;
-    esac
-  fi
-
-case $host_os in
-  # For platforms that do not support PIC, -DPIC is meaningless:
-  *djgpp*)
-    lt_prog_compiler_pic=
-    ;;
-  *)
-    lt_prog_compiler_pic="$lt_prog_compiler_pic@&t@ -DPIC"
-    ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $compiler option to produce PIC" >&5
-printf %s "checking for $compiler option to produce PIC... " >&6; }
-if test ${lt_cv_prog_compiler_pic+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic=$lt_prog_compiler_pic ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic" >&6; }
-lt_prog_compiler_pic=$lt_cv_prog_compiler_pic
-
-#
-# Check to make sure the PIC flag actually works.
-#
-if test -n "$lt_prog_compiler_pic"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler PIC flag $lt_prog_compiler_pic works" >&5
-printf %s "checking if $compiler PIC flag $lt_prog_compiler_pic works... " >&6; }
-if test ${lt_cv_prog_compiler_pic_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_pic_works=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$lt_prog_compiler_pic@&t@ -DPIC"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_pic_works=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_pic_works"; then
-    case $lt_prog_compiler_pic in
-     "" | " "*) ;;
-     *) lt_prog_compiler_pic=" $lt_prog_compiler_pic" ;;
-     esac
-else
-    lt_prog_compiler_pic=
-     lt_prog_compiler_can_build_shared=no
-fi
-
-fi
-
-
-
-
-
-#
-# Check to make sure the static flag actually works.
-#
-wl=$lt_prog_compiler_wl eval lt_tmp_static_flag=\"$lt_prog_compiler_static\"
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler static flag $lt_tmp_static_flag works" >&5
-printf %s "checking if $compiler static flag $lt_tmp_static_flag works... " >&6; }
-if test ${lt_cv_prog_compiler_static_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) lt_cv_prog_compiler_static_works=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $lt_tmp_static_flag"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler_static_works=yes
-       fi
-     else
-       lt_cv_prog_compiler_static_works=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_static_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_static_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_static_works"; then
-    :
-else
-    lt_prog_compiler_static=
-fi
-
-
-
-='-fPIC'
-  archive_cmds='$CC -sSIDE_MODULE=2 -shared $libobjs $deplibs $compiler_flags -o $lib'
-  archive_expsym_cmds='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -sSIDE_MODULE=2 -shared $libobjs $deplibs $compiler_flags -o $lib -s EXPORTED_FUNCTIONS=@$output_objdir/$soname.expsym'
-  archive_cmds_need_lc=no
-  no_undefined_flag=
-  ;;
-
-*)
-  dynamic_linker=no
-  ;;
-esac
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $dynamic_linker" >&5
-printf '%s\n' "$dynamic_linker" >&6; }
-test no = "$dynamic_linker" && can_build_shared=no
-
-variables_saved_for_relink="PATH $shlibpath_var $runpath_var"
-if test yes = "$GCC"; then
-  variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH"
-fi
-
-if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then
-  sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec
-fi
-
-if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then
-  sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec
-fi
-
-# remember unaugmented sys_lib_dlsearch_path content for libtool script decls...
-configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec
-
-# ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code
-func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH"
-
-# to be used as default LT_SYS_LIBRARY_PATH value in generated libtool
-configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to hardcode library paths into programs" >&5
-printf %s "checking how to hardcode library paths into programs... " >&6; }
-hardcode_action=
-if test -n "$hardcode_libdir_flag_spec" ||
-   test -n "$runpath_var" ||
-   test yes = "$hardcode_automatic"; then
-
-  # We can hardcode non-existent directories.
-  if test no != "$hardcode_direct" &&
-     # If the only mechanism to avoid hardcoding is shlibpath_var, we
-     # have to relink, otherwise we might link with an installed library
-     # when we should be linking with a yet-to-be-installed one
-     ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, )" &&
-     test no != "$hardcode_minus_L"; then
-    # Linking always hardcodes the temporary library directory.
-    hardcode_action=relink
-  else
-    # We can link without hardcoding, and we can hardcode nonexisting dirs.
-    hardcode_action=immediate
-  fi
-else
-  # We cannot hardcode anything, or else we can only hardcode existing
-  # directories.
-  hardcode_action=unsupported
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $hardcode_action" >&5
-printf '%s\n' "$hardcode_action" >&6; }
-
-if test relink = "$hardcode_action" ||
-   test yes = "$inherit_rpath"; then
-  # Fast installation is not supported
-  enable_fast_install=no
-elif test yes = "$shlibpath_overrides_runpath" ||
-     test no = "$enable_shared"; then
-  # Fast installation is not necessary
-  enable_fast_install=needless
-fi
-
-    
-    
-    
-
-
-  if test yes != "$enable_dlopen"; then
-  enable_dlopen=unknown
-  enable_dlopen_self=unknown
-  enable_dlopen_self_static=unknown
-else
-  lt_cv_dlopen=no
-  lt_cv_dlopen_libs=
-
-  case $host_os in
-  beos*)
-    lt_cv_dlopen=load_add_on
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ;;
-
-  mingw* | windows* | pw32* | cegcc*)
-    lt_cv_dlopen=LoadLibrary
-    lt_cv_dlopen_libs=
-    ;;
-
-  cygwin*)
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    ;;
-
-  darwin*)
-    # if libdl is installed we need to link against it
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
-printf %s "checking for dlopen in -ldl... " >&6; }
-if test ${ac_cv_lib_dl_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dl_dlopen=yes
-else case e in @%:@(
-  e) ac_cv_lib_dl_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_dl_dlopen" >&6; }
-if test "x$ac_cv_lib_dl_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl
-else case e in @%:@(
-  e) 
-    lt_cv_dlopen=dyld
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-     ;;
-esac
-fi
-
-    ;;
-
-  tpf*)
-    # Don't try to run any link tests for TPF.  We know it's impossible
-    # because TPF is a cross-compiler, and we know how we open DSOs.
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=no
-    ;;
-
-  *)
-    ac_fn_c_check_func "$LINENO" "shl_load" "ac_cv_func_shl_load"
-if test "x$ac_cv_func_shl_load" = xyes
-then :
-  lt_cv_dlopen=shl_load
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for shl_load in -ldld" >&5
-printf %s "checking for shl_load in -ldld... " >&6; }
-if test ${ac_cv_lib_dld_shl_load+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char shl_load (void);
-int
-main (void)
-{
-return shl_load ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dld_shl_load=yes
-else case e in @%:@(
-  e) ac_cv_lib_dld_shl_load=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_shl_load" >&5
-printf '%s\n' "$ac_cv_lib_dld_shl_load" >&6; }
-if test "x$ac_cv_lib_dld_shl_load" = xyes
-then :
-  lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld
-else case e in @%:@(
-  e) ac_fn_c_check_func "$LINENO" "dlopen" "ac_cv_func_dlopen"
-if test "x$ac_cv_func_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
-printf %s "checking for dlopen in -ldl... " >&6; }
-if test ${ac_cv_lib_dl_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dl_dlopen=yes
-else case e in @%:@(
-  e) ac_cv_lib_dl_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_dl_dlopen" >&6; }
-if test "x$ac_cv_lib_dl_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -lsvld" >&5
-printf %s "checking for dlopen in -lsvld... " >&6; }
-if test ${ac_cv_lib_svld_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-lsvld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_svld_dlopen=yes
-else case e in @%:@(
-  e) ac_cv_lib_svld_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_svld_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_svld_dlopen" >&6; }
-if test "x$ac_cv_lib_svld_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dld_link in -ldld" >&5
-printf %s "checking for dld_link in -ldld... " >&6; }
-if test ${ac_cv_lib_dld_dld_link+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dld_link (void);
-int
-main (void)
-{
-return dld_link ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dld_dld_link=yes
-else case e in @%:@(
-  e) ac_cv_lib_dld_dld_link=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_dld_link" >&5
-printf '%s\n' "$ac_cv_lib_dld_dld_link" >&6; }
-if test "x$ac_cv_lib_dld_dld_link" = xyes
-then :
-  lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld
-fi
-
-	       ;;
-esac
-fi
-
-	     ;;
-esac
-fi
-
-	   ;;
-esac
-fi
-
-	 ;;
-esac
-fi
-
-       ;;
-esac
-fi
-
-    ;;
-  esac
-
-  if test no = "$lt_cv_dlopen"; then
-    enable_dlopen=no
-  else
-    enable_dlopen=yes
-  fi
-
-  case $lt_cv_dlopen in
-  dlopen)
-    save_CPPFLAGS=$CPPFLAGS
-    test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H"
-
-    save_LDFLAGS=$LDFLAGS
-    wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\"
-
-    save_LIBS=$LIBS
-    LIBS="$lt_cv_dlopen_libs $LIBS"
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether a program can dlopen itself" >&5
-printf %s "checking whether a program can dlopen itself... " >&6; }
-if test ${lt_cv_dlopen_self+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 	  if test yes = "$cross_compiling"; then :
-  lt_cv_dlopen_self=cross
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord (void) __attribute__((visibility("default")));
-#endif
-
-int fnord (void) { return 42; }
-int main (void)
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}
-_LT_EOF
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&5 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) lt_cv_dlopen_self=yes ;;
-      x$lt_dlneed_uscore) lt_cv_dlopen_self=yes ;;
-      x$lt_dlunknown|x*) lt_cv_dlopen_self=no ;;
-    esac
-  else :
-    # compilation failed
-    lt_cv_dlopen_self=no
-  fi
-fi
-rm -fr conftest*
-
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self" >&5
-printf '%s\n' "$lt_cv_dlopen_self" >&6; }
-
-    if test yes = "$lt_cv_dlopen_self"; then
-      wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether a statically linked program can dlopen itself" >&5
-printf %s "checking whether a statically linked program can dlopen itself... " >&6; }
-if test ${lt_cv_dlopen_self_static+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 	  if test yes = "$cross_compiling"; then :
-  lt_cv_dlopen_self_static=cross
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord (void) __attribute__((visibility("default")));
-#endif
-
-int fnord (void) { return 42; }
-int main (void)
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}
-_LT_EOF
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&5 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) lt_cv_dlopen_self_static=yes ;;
-      x$lt_dlneed_uscore) lt_cv_dlopen_self_static=yes ;;
-      x$lt_dlunknown|x*) lt_cv_dlopen_self_static=no ;;
-    esac
-  else :
-    # compilation failed
-    lt_cv_dlopen_self_static=no
-  fi
-fi
-rm -fr conftest*
-
-       ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self_static" >&5
-printf '%s\n' "$lt_cv_dlopen_self_static" >&6; }
-    fi
-
-    CPPFLAGS=$save_CPPFLAGS
-    LDFLAGS=$save_LDFLAGS
-    LIBS=$save_LIBS
-    ;;
-  esac
-
-  case $lt_cv_dlopen_self in
-  yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;;
-  *) enable_dlopen_self=unknown ;;
-  esac
-
-  case $lt_cv_dlopen_self_static in
-  yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;;
-  *) enable_dlopen_self_static=unknown ;;
-  esac
-fi
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-  
-striplib=
-old_striplib=
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether stripping libraries is possible" >&5
-printf %s "checking whether stripping libraries is possible... " >&6; }
-if test -z "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-else
-  if $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then
-    old_striplib="$STRIP --strip-debug"
-    striplib="$STRIP --strip-unneeded"
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-  else
-    case $host_os in
-    darwin*)
-      # FIXME - insert some real tests, host_os isn't really good enough
-      striplib="$STRIP -x"
-      old_striplib="$STRIP -S"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      ;;
-    freebsd*)
-      if $STRIP -V 2>&1 | $GREP "elftoolchain" >/dev/null; then
-        old_striplib="$STRIP --strip-debug"
-        striplib="$STRIP --strip-unneeded"
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-      fi
-      ;;
-    *)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-      ;;
-    esac
-  fi
-fi
-
-    
-    
-    
-
-
-    
-    
-    
-
-
-
-  # Report what library types will actually be built
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if libtool supports shared libraries" >&5
-printf %s "checking if libtool supports shared libraries... " >&6; }
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $can_build_shared" >&5
-printf '%s\n' "$can_build_shared" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build shared libraries" >&5
-printf %s "checking whether to build shared libraries... " >&6; }
-  test no = "$can_build_shared" && enable_shared=no
-
-  # On AIX, shared libraries and static libraries use the same namespace, and
-  # are all built from PIC.
-  case $host_os in
-  aix3*)
-    test yes = "$enable_shared" && enable_static=no
-    if test -n "$RANLIB"; then
-      archive_cmds="$archive_cmds~\$RANLIB \$lib"
-      postinstall_cmds='$RANLIB $lib'
-    fi
-    ;;
-
-  aix[4-9]*)
-    if test ia64 != "$host_cpu"; then
-      case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
-      yes,aix,yes) ;;			# shared object as lib.so file only
-      yes,svr4,*) ;;			# shared object as lib.so archive member only
-      yes,*) enable_static=no ;;	# shared object in lib.a archive as well
-      esac
-    fi
-    ;;
-  esac
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $enable_shared" >&5
-printf '%s\n' "$enable_shared" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build static libraries" >&5
-printf %s "checking whether to build static libraries... " >&6; }
-  # Make sure either enable_shared or enable_static is yes.
-  test yes = "$enable_shared" || enable_static=yes
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $enable_static" >&5
-printf '%s\n' "$enable_static" >&6; }
-
-  
-
-
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-CC=$lt_save_CC
-
-
-
-
-
-
-
-
-       
-       
-
-
-
-
-
-        ac_config_commands="$ac_config_commands libtool"
-
-
-
-
-# Only expand once:
-
-
-
-# Require xorg-macros minimum of 1.12 for DocBook external references
-
-
-
-
-
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC options to detect undeclared functions" >&5
-printf %s "checking for $CC options to detect undeclared functions... " >&6; }
-if test ${ac_cv_c_undeclared_builtin_options+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) ac_save_CFLAGS=$CFLAGS
-   ac_cv_c_undeclared_builtin_options='cannot detect'
-   for ac_arg in '' -fno-builtin; do
-     CFLAGS="$ac_save_CFLAGS $ac_arg"
-     # This test program should *not* compile successfully.
-     cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-(void) strchr;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  
-else case e in @%:@(
-  e) # This test program should compile successfully.
-        # No library function is consistently available on
-        # freestanding implementations, so test against a dummy
-        # declaration.  Include always-available headers on the
-        # off chance that they somehow elicit warnings.
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <float.h>
-#include <limits.h>
-#include <stdarg.h>
-#include <stddef.h>
-extern void ac_decl (int, char *);
-
-int
-main (void)
-{
-(void) ac_decl (0, (char *) 0);
-  (void) ac_decl;
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  if test x"$ac_arg" = x
-then :
-  ac_cv_c_undeclared_builtin_options='none needed'
-else case e in @%:@(
-  e) ac_cv_c_undeclared_builtin_options=$ac_arg ;;
-esac
-fi
-          break
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-    done
-    CFLAGS=$ac_save_CFLAGS
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_undeclared_builtin_options" >&5
-printf '%s\n' "$ac_cv_c_undeclared_builtin_options" >&6; }
-  case $ac_cv_c_undeclared_builtin_options in @%:@(
-  'cannot detect') :
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot make $CC report undeclared builtins
-See 'config.log' for more details" "$LINENO" 5; } ;; @%:@(
-  'none needed') :
-    ac_c_undeclared_builtin_options='' ;; @%:@(
-  *) :
-    ac_c_undeclared_builtin_options=$ac_cv_c_undeclared_builtin_options ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC options to ignore future-version functions" >&5
-printf %s "checking for $CC options to ignore future-version functions... " >&6; }
-if test ${ac_cv_c_future_darwin_options+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e)       ac_compile_saved="$ac_compile"
-   ac_compile="$ac_compile -Werror=unguarded-availability-new"
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#if ! (defined __APPLE__ && defined __MACH__)
-	   #error "-Werror=unguarded-availability-new not needed here"
-	  #endif
-	
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_c_future_darwin_options='-Werror=unguarded-availability-new'
-else case e in @%:@(
-  e) ac_cv_c_future_darwin_options='none needed' ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ac_compile="$ac_compile_saved"
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_future_darwin_options" >&5
-printf '%s\n' "$ac_cv_c_future_darwin_options" >&6; }
- case $ac_cv_c_future_darwin_options in @%:@(
-  'none needed') :
-    ac_c_future_darwin_options='' ;; @%:@(
-  *) :
-    ac_c_future_darwin_options=$ac_cv_c_future_darwin_options ;;
-esac
-
-
-
-						
-	
-ac_fn_check_decl "$LINENO" "__clang__" "ac_cv_have_decl___clang__" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___clang__" = xyes
-then :
-  CLANGCC="yes"
-else case e in @%:@(
-  e) CLANGCC="no" ;;
-esac
-fi
-ac_fn_check_decl "$LINENO" "__INTEL_COMPILER" "ac_cv_have_decl___INTEL_COMPILER" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___INTEL_COMPILER" = xyes
-then :
-  INTELCC="yes"
-else case e in @%:@(
-  e) INTELCC="no" ;;
-esac
-fi
-ac_fn_check_decl "$LINENO" "__SUNPRO_C" "ac_cv_have_decl___SUNPRO_C" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___SUNPRO_C" = xyes
-then :
-  SUNCC="yes"
-else case e in @%:@(
-  e) SUNCC="no" ;;
-esac
-fi
-
-
-
-
-
-
-
-
-if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
-	if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args.
-set dummy ${ac_tool_prefix}pkg-config; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_PKG_CONFIG+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PKG_CONFIG="$PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-PKG_CONFIG=$ac_cv_path_PKG_CONFIG
-if test -n "$PKG_CONFIG"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $PKG_CONFIG" >&5
-printf '%s\n' "$PKG_CONFIG" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_path_PKG_CONFIG"; then
-  ac_pt_PKG_CONFIG=$PKG_CONFIG
-  # Extract the first word of "pkg-config", so it can be a program name with args.
-set dummy pkg-config; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_ac_pt_PKG_CONFIG+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $ac_pt_PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_ac_pt_PKG_CONFIG="$ac_pt_PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_ac_pt_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-ac_pt_PKG_CONFIG=$ac_cv_path_ac_pt_PKG_CONFIG
-if test -n "$ac_pt_PKG_CONFIG"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKG_CONFIG" >&5
-printf '%s\n' "$ac_pt_PKG_CONFIG" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_pt_PKG_CONFIG" = x; then
-    PKG_CONFIG=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    PKG_CONFIG=$ac_pt_PKG_CONFIG
-  fi
-else
-  PKG_CONFIG="$ac_cv_path_PKG_CONFIG"
-fi
-
-fi
-if test -n "$PKG_CONFIG"; then
-	_pkg_min_version=0.9.0
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking pkg-config is at least version $_pkg_min_version" >&5
-printf %s "checking pkg-config is at least version $_pkg_min_version... " >&6; }
-	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-	else
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-		PKG_CONFIG=""
-	fi
-fi
-
-
-
-
-
-@%:@ Check whether --enable-selective-werror was given.
-if test ${enable_selective_werror+y}
-then :
-  enableval=$enable_selective_werror; SELECTIVE_WERROR=$enableval
-else case e in @%:@(
-  e) SELECTIVE_WERROR=yes ;;
-esac
-fi
-
-
-
-                
-        
-# -v is too short to test reliably with XORG_TESTSET_CFLAG
-if test "x$SUNCC" = "xyes"; then
-    BASE_CFLAGS="-v"
-else
-    BASE_CFLAGS=""
-fi
-
-# This chunk of warnings were those that existed in the legacy CWARNFLAGS
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wall"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wall" >&5
-printf %s "checking if $CC supports -Wall... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wall
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wall"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wpointer-arith"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-arith" >&5
-printf %s "checking if $CC supports -Wpointer-arith... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wpointer_arith
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wpointer-arith"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-declarations"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-declarations" >&5
-printf %s "checking if $CC supports -Wmissing-declarations... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_declarations
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-declarations"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wformat=2"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat=2" >&5
-printf %s "checking if $CC supports -Wformat=2... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wformat_2
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wformat=2"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wformat"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat" >&5
-printf %s "checking if $CC supports -Wformat... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wformat
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wformat"
-			found="yes"
-		fi
-	fi
-
-
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wstrict-prototypes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wstrict-prototypes" >&5
-printf %s "checking if $CC supports -Wstrict-prototypes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wstrict_prototypes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wstrict-prototypes"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-prototypes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-prototypes" >&5
-printf %s "checking if $CC supports -Wmissing-prototypes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_prototypes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-prototypes"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wnested-externs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wnested-externs" >&5
-printf %s "checking if $CC supports -Wnested-externs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wnested_externs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wnested-externs"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wbad-function-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wbad-function-cast" >&5
-printf %s "checking if $CC supports -Wbad-function-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wbad_function_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wbad-function-cast"
-			found="yes"
-		fi
-	fi
-
-
-		
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wold-style-definition"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wold-style-definition" >&5
-printf %s "checking if $CC supports -Wold-style-definition... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wold_style_definition
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wold-style-definition"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -fd"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -fd" >&5
-printf %s "checking if $CC supports -fd... " >&6; }
-		cacheid=xorg_cv_cc_flag__fd
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -fd"
-			found="yes"
-		fi
-	fi
-
-
-	
-
-
-# This chunk adds additional warnings that could catch undesired effects.
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wunused"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wunused" >&5
-printf %s "checking if $CC supports -Wunused... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wunused
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wunused"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wuninitialized"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wuninitialized" >&5
-printf %s "checking if $CC supports -Wuninitialized... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wuninitialized
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wuninitialized"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wshadow"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wshadow" >&5
-printf %s "checking if $CC supports -Wshadow... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wshadow
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wshadow"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-noreturn"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-noreturn" >&5
-printf %s "checking if $CC supports -Wmissing-noreturn... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_noreturn
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-noreturn"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-format-attribute"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-format-attribute" >&5
-printf %s "checking if $CC supports -Wmissing-format-attribute... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_format_attribute
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-format-attribute"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wredundant-decls"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wredundant-decls" >&5
-printf %s "checking if $CC supports -Wredundant-decls... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wredundant_decls
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wredundant-decls"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wlogical-op"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wlogical-op" >&5
-printf %s "checking if $CC supports -Wlogical-op... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wlogical_op
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wlogical-op"
-			found="yes"
-		fi
-	fi
-
-
-
-# These are currently disabled because they are noisy.  They will be enabled
-# in the future once the codebase is sufficiently modernized to silence
-# them.  For now, I don't want them to drown out the other warnings.
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wparentheses])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-align])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-qual])
-
-# Turn some warnings into errors, so we don't accidentally get successful builds
-# when there are problems that should be fixed.
-
-if test "x$SELECTIVE_WERROR" = "xyes" ; then
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=implicit"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=implicit" >&5
-printf %s "checking if $CC supports -Werror=implicit... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_implicit
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=implicit"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED" >&5
-printf %s "checking if $CC supports -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_NO_EXPLICIT_TYPE_GIVEN__errwarn_E_NO_IMPLICIT_DECL_ALLOWED
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=nonnull"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=nonnull" >&5
-printf %s "checking if $CC supports -Werror=nonnull... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_nonnull
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=nonnull"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=init-self"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=init-self" >&5
-printf %s "checking if $CC supports -Werror=init-self... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_init_self
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=init-self"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=main"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=main" >&5
-printf %s "checking if $CC supports -Werror=main... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_main
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=main"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=missing-braces"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=missing-braces" >&5
-printf %s "checking if $CC supports -Werror=missing-braces... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_missing_braces
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=missing-braces"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=sequence-point"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=sequence-point" >&5
-printf %s "checking if $CC supports -Werror=sequence-point... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_sequence_point
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=sequence-point"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=return-type"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=return-type" >&5
-printf %s "checking if $CC supports -Werror=return-type... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_return_type
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=return-type"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_FUNC_HAS_NO_RETURN_STMT"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_FUNC_HAS_NO_RETURN_STMT" >&5
-printf %s "checking if $CC supports -errwarn=E_FUNC_HAS_NO_RETURN_STMT... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_FUNC_HAS_NO_RETURN_STMT
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_FUNC_HAS_NO_RETURN_STMT"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=trigraphs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=trigraphs" >&5
-printf %s "checking if $CC supports -Werror=trigraphs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_trigraphs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=trigraphs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=array-bounds"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=array-bounds" >&5
-printf %s "checking if $CC supports -Werror=array-bounds... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_array_bounds
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=array-bounds"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=write-strings"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=write-strings" >&5
-printf %s "checking if $CC supports -Werror=write-strings... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_write_strings
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=write-strings"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=address"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=address" >&5
-printf %s "checking if $CC supports -Werror=address... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_address
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=address"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=int-to-pointer-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=int-to-pointer-cast" >&5
-printf %s "checking if $CC supports -Werror=int-to-pointer-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_int_to_pointer_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=int-to-pointer-cast"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_BAD_PTR_INT_COMBINATION"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_BAD_PTR_INT_COMBINATION" >&5
-printf %s "checking if $CC supports -errwarn=E_BAD_PTR_INT_COMBINATION... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_BAD_PTR_INT_COMBINATION
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_BAD_PTR_INT_COMBINATION"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=pointer-to-int-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=pointer-to-int-cast" >&5
-printf %s "checking if $CC supports -Werror=pointer-to-int-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_pointer_to_int_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=pointer-to-int-cast"
-			found="yes"
-		fi
-	fi
-
- # Also -errwarn=E_BAD_PTR_INT_COMBINATION
-else
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT" >&5
-printf '%s\n' "$as_me: WARNING: You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT" >&2;}
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wimplicit"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wimplicit" >&5
-printf %s "checking if $CC supports -Wimplicit... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wimplicit
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wimplicit"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wnonnull"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wnonnull" >&5
-printf %s "checking if $CC supports -Wnonnull... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wnonnull
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wnonnull"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Winit-self"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Winit-self" >&5
-printf %s "checking if $CC supports -Winit-self... " >&6; }
-		cacheid=xorg_cv_cc_flag__Winit_self
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Winit-self"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmain"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmain" >&5
-printf %s "checking if $CC supports -Wmain... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmain
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmain"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-braces"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-braces" >&5
-printf %s "checking if $CC supports -Wmissing-braces... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_braces
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-braces"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wsequence-point"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wsequence-point" >&5
-printf %s "checking if $CC supports -Wsequence-point... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wsequence_point
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wsequence-point"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wreturn-type"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wreturn-type" >&5
-printf %s "checking if $CC supports -Wreturn-type... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wreturn_type
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wreturn-type"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wtrigraphs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wtrigraphs" >&5
-printf %s "checking if $CC supports -Wtrigraphs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wtrigraphs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wtrigraphs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Warray-bounds"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Warray-bounds" >&5
-printf %s "checking if $CC supports -Warray-bounds... " >&6; }
-		cacheid=xorg_cv_cc_flag__Warray_bounds
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Warray-bounds"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wwrite-strings"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wwrite-strings" >&5
-printf %s "checking if $CC supports -Wwrite-strings... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wwrite_strings
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wwrite-strings"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Waddress"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Waddress" >&5
-printf %s "checking if $CC supports -Waddress... " >&6; }
-		cacheid=xorg_cv_cc_flag__Waddress
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Waddress"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wint-to-pointer-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wint-to-pointer-cast" >&5
-printf %s "checking if $CC supports -Wint-to-pointer-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wint_to_pointer_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wint-to-pointer-cast"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wpointer-to-int-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-to-int-cast" >&5
-printf %s "checking if $CC supports -Wpointer-to-int-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wpointer_to_int_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wpointer-to-int-cast"
-			found="yes"
-		fi
-	fi
-
-
-fi
-
-
-
-
-
-
-
-		CWARNFLAGS="$BASE_CFLAGS"
-		if  test "x$GCC" = xyes ; then
-		    CWARNFLAGS="$CWARNFLAGS -fno-strict-aliasing"
-		fi
-		
-	
-
-
-
-
-
-
-@%:@ Check whether --enable-strict-compilation was given.
-if test ${enable_strict_compilation+y}
-then :
-  enableval=$enable_strict_compilation; STRICT_COMPILE=$enableval
-else case e in @%:@(
-  e) STRICT_COMPILE=no ;;
-esac
-fi
-
-
-
-                
-        
-
-STRICT_CFLAGS=""
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -pedantic"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -pedantic" >&5
-printf %s "checking if $CC supports -pedantic... " >&6; }
-		cacheid=xorg_cv_cc_flag__pedantic
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -pedantic"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror" >&5
-printf %s "checking if $CC supports -Werror... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -Werror"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn" >&5
-printf %s "checking if $CC supports -errwarn... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -errwarn"
-			found="yes"
-		fi
-	fi
-
-
-
-# Earlier versions of gcc (eg: 4.2) support -Werror=attributes, but do not
-# activate it with -Werror, so we add it here explicitly.
-
-
-
-
-
-
-
-						
-		
-		
-		
-	
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in @%:@(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=attributes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=attributes" >&5
-printf %s "checking if $CC supports -Werror=attributes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_attributes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in @%:@(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -Werror=attributes"
-			found="yes"
-		fi
-	fi
-
-
-
-if test "x$STRICT_COMPILE" = "xyes"; then
-    BASE_CFLAGS="$BASE_CFLAGS $STRICT_CFLAGS"
-    CWARNFLAGS="$CWARNFLAGS $STRICT_CFLAGS"
-fi
-
-
-
-
-
-
-
-	
-cat >>confdefs.h <<_ACEOF
-@%:@define PACKAGE_VERSION_MAJOR `echo $PACKAGE_VERSION | cut -d . -f 1`
-_ACEOF
-
-	PVM=`echo $PACKAGE_VERSION | cut -d . -f 2 | cut -d - -f 1`
-	if test "x$PVM" = "x"; then
-		PVM="0"
-	fi
-	
-printf '%s\n' "@%:@define PACKAGE_VERSION_MINOR $PVM" >>confdefs.h
-
-	PVP=`echo $PACKAGE_VERSION | cut -d . -f 3 | cut -d - -f 1`
-	if test "x$PVP" = "x"; then
-		PVP="0"
-	fi
-	
-printf '%s\n' "@%:@define PACKAGE_VERSION_PATCHLEVEL $PVP" >>confdefs.h
-
-
-
-CHANGELOG_CMD="((GIT_DIR=\$(top_srcdir)/.git git log > \$(top_srcdir)/.changelog.tmp) 2>/dev/null && \
-mv \$(top_srcdir)/.changelog.tmp \$(top_srcdir)/ChangeLog) \
-|| (rm -f \$(top_srcdir)/.changelog.tmp; test -e \$(top_srcdir)/ChangeLog || ( \
-touch \$(top_srcdir)/ChangeLog; \
-echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))"
-
-
-
-
-macros_datadir=`$PKG_CONFIG --print-errors --variable=pkgdatadir xorg-macros`
-INSTALL_CMD="(cp -f "$macros_datadir/INSTALL" \$(top_srcdir)/.INSTALL.tmp && \
-mv \$(top_srcdir)/.INSTALL.tmp \$(top_srcdir)/INSTALL) \
-|| (rm -f \$(top_srcdir)/.INSTALL.tmp; test -e \$(top_srcdir)/INSTALL || ( \
-touch \$(top_srcdir)/INSTALL; \
-echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))"
-
-
-
-
-
-
-case $host_os in
-    solaris*)
-        # Solaris 2.0 - 11.3 use SysV man page section numbers, so we
-        # check for a man page file found in later versions that use
-        # traditional section numbers instead
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for /usr/share/man/man7/attributes.7" >&5
-printf %s "checking for /usr/share/man/man7/attributes.7... " >&6; }
-if test ${ac_cv_file__usr_share_man_man7_attributes_7+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) test "$cross_compiling" = yes &&
-  as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5
-if test -r "/usr/share/man/man7/attributes.7"; then
-  ac_cv_file__usr_share_man_man7_attributes_7=yes
-else
-  ac_cv_file__usr_share_man_man7_attributes_7=no
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_file__usr_share_man_man7_attributes_7" >&5
-printf '%s\n' "$ac_cv_file__usr_share_man_man7_attributes_7" >&6; }
-if test "x$ac_cv_file__usr_share_man_man7_attributes_7" = xyes
-then :
-  SYSV_MAN_SECTIONS=false
-else case e in @%:@(
-  e) SYSV_MAN_SECTIONS=true ;;
-esac
-fi
-
-        ;;
-    *) SYSV_MAN_SECTIONS=false ;;
-esac
-
-if test x$APP_MAN_SUFFIX = x    ; then
-    APP_MAN_SUFFIX=1
-fi
-if test x$APP_MAN_DIR = x    ; then
-    APP_MAN_DIR='$(mandir)/man$(APP_MAN_SUFFIX)'
-fi
-
-if test x$LIB_MAN_SUFFIX = x    ; then
-    LIB_MAN_SUFFIX=3
-fi
-if test x$LIB_MAN_DIR = x    ; then
-    LIB_MAN_DIR='$(mandir)/man$(LIB_MAN_SUFFIX)'
-fi
-
-if test x$FILE_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				FILE_MAN_SUFFIX=4  ;;
-	*)				FILE_MAN_SUFFIX=5  ;;
-    esac
-fi
-if test x$FILE_MAN_DIR = x    ; then
-    FILE_MAN_DIR='$(mandir)/man$(FILE_MAN_SUFFIX)'
-fi
-
-if test x$MISC_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				MISC_MAN_SUFFIX=5  ;;
-	*)				MISC_MAN_SUFFIX=7  ;;
-    esac
-fi
-if test x$MISC_MAN_DIR = x    ; then
-    MISC_MAN_DIR='$(mandir)/man$(MISC_MAN_SUFFIX)'
-fi
-
-if test x$DRIVER_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				DRIVER_MAN_SUFFIX=7  ;;
-	*)				DRIVER_MAN_SUFFIX=4  ;;
-    esac
-fi
-if test x$DRIVER_MAN_DIR = x    ; then
-    DRIVER_MAN_DIR='$(mandir)/man$(DRIVER_MAN_SUFFIX)'
-fi
-
-if test x$ADMIN_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				ADMIN_MAN_SUFFIX=1m ;;
-	*)				ADMIN_MAN_SUFFIX=8  ;;
-    esac
-fi
-if test x$ADMIN_MAN_DIR = x    ; then
-    ADMIN_MAN_DIR='$(mandir)/man$(ADMIN_MAN_SUFFIX)'
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-XORG_MAN_PAGE="X Version 11"
-
-MAN_SUBSTS="\
-	-e 's|__vendorversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xorgversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xservername__|Xorg|g' \
-	-e 's|__xconfigfile__|xorg.conf|g' \
-	-e 's|__projectroot__|\$(prefix)|g' \
-	-e 's|__apploaddir__|\$(appdefaultdir)|g' \
-	-e 's|__appmansuffix__|\$(APP_MAN_SUFFIX)|g' \
-	-e 's|__drivermansuffix__|\$(DRIVER_MAN_SUFFIX)|g' \
-	-e 's|__adminmansuffix__|\$(ADMIN_MAN_SUFFIX)|g' \
-	-e 's|__libmansuffix__|\$(LIB_MAN_SUFFIX)|g' \
-	-e 's|__miscmansuffix__|\$(MISC_MAN_SUFFIX)|g' \
-	-e 's|__filemansuffix__|\$(FILE_MAN_SUFFIX)|g'"
-
-
-
-
-AM_DEFAULT_VERBOSITY=0
-
-
-
-
-
-
-@%:@ Check whether --enable-specs was given.
-if test ${enable_specs+y}
-then :
-  enableval=$enable_specs; build_specs=$enableval
-else case e in @%:@(
-  e) build_specs=yes ;;
-esac
-fi
-
-
- if test x$build_specs = xyes; then
-  ENABLE_SPECS_TRUE=
-  ENABLE_SPECS_FALSE='#'
-else
-  ENABLE_SPECS_TRUE='#'
-  ENABLE_SPECS_FALSE=
-fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build functional specifications" >&5
-printf %s "checking whether to build functional specifications... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $build_specs" >&5
-printf '%s\n' "$build_specs" >&6; }
-
-
-
-
-
-@%:@ Check whether --with-xmlto was given.
-if test ${with_xmlto+y}
-then :
-  withval=$with_xmlto; use_xmlto=$withval
-else case e in @%:@(
-  e) use_xmlto=auto ;;
-esac
-fi
-
-
-
-if test "x$use_xmlto" = x"auto"; then
-   # Extract the first word of "xmlto", so it can be a program name with args.
-set dummy xmlto; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XMLTO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XMLTO in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XMLTO="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XMLTO=$ac_cv_path_XMLTO
-if test -n "$XMLTO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XMLTO" >&5
-printf '%s\n' "$XMLTO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XMLTO" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto not found - documentation targets will be skipped" >&5
-printf '%s\n' "$as_me: WARNING: xmlto not found - documentation targets will be skipped" >&2;}
-	have_xmlto=no
-   else
-        have_xmlto=yes
-   fi
-elif test "x$use_xmlto" = x"yes" ; then
-   # Extract the first word of "xmlto", so it can be a program name with args.
-set dummy xmlto; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XMLTO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XMLTO in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XMLTO="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XMLTO=$ac_cv_path_XMLTO
-if test -n "$XMLTO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XMLTO" >&5
-printf '%s\n' "$XMLTO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XMLTO" = "x"; then
-        as_fn_error $? "--with-xmlto=yes specified but xmlto not found in PATH" "$LINENO" 5
-   fi
-   have_xmlto=yes
-elif test "x$use_xmlto" = x"no" ; then
-   if test "x$XMLTO" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring XMLTO environment variable since --with-xmlto=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring XMLTO environment variable since --with-xmlto=no was specified" >&2;}
-   fi
-   have_xmlto=no
-else
-   as_fn_error $? "--with-xmlto expects 'yes' or 'no'" "$LINENO" 5
-fi
-
-# Test for a minimum version of xmlto, if provided.
-if test "$have_xmlto" = yes; then
-    # scrape the xmlto version
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the xmlto version" >&5
-printf %s "checking the xmlto version... " >&6; }
-    xmlto_version=`$XMLTO --version 2>/dev/null | cut -d' ' -f3`
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xmlto_version" >&5
-printf '%s\n' "$xmlto_version" >&6; }
-    as_arg_v1=$xmlto_version
-as_arg_v2=0.0.22
-awk "$as_awk_strverscmp" v1="$as_arg_v1" v2="$as_arg_v2" /dev/null
-case $? in @%:@(
-  1) :
-    if test "x$use_xmlto" = xauto; then
-            { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto version $xmlto_version found, but 0.0.22 needed" >&5
-printf '%s\n' "$as_me: WARNING: xmlto version $xmlto_version found, but 0.0.22 needed" >&2;}
-            have_xmlto=no
-        else
-            as_fn_error $? "xmlto version $xmlto_version found, but 0.0.22 needed" "$LINENO" 5
-        fi ;; @%:@(
-  0) :
-     ;; @%:@(
-  2) :
-     ;; @%:@(
-  *) :
-     ;;
-esac
-fi
-
-# Test for the ability of xmlto to generate a text target
-#
-# NOTE: xmlto 0.0.27 or higher return a non-zero return code in the
-# following test for empty XML docbook files.
-# For compatibility reasons use the following empty XML docbook file and if
-# it fails try it again with a non-empty XML file.
-have_xmlto_text=no
-cat > conftest.xml << "EOF"
-EOF
-if test "$have_xmlto" = yes
-then :
-  if $XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1
-then :
-  have_xmlto_text=yes
-else case e in @%:@(
-  e) # Try it again with a non-empty XML file.
-              cat > conftest.xml << "EOF"
-<x></x>
-EOF
-              if $XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1
-then :
-  have_xmlto_text=yes
-else case e in @%:@(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto cannot generate text format, this format skipped" >&5
-printf '%s\n' "$as_me: WARNING: xmlto cannot generate text format, this format skipped" >&2;} ;;
-esac
-fi ;;
-esac
-fi
-fi
-rm -f conftest.xml
- if test $have_xmlto_text = yes; then
-  HAVE_XMLTO_TEXT_TRUE=
-  HAVE_XMLTO_TEXT_FALSE='#'
-else
-  HAVE_XMLTO_TEXT_TRUE='#'
-  HAVE_XMLTO_TEXT_FALSE=
-fi
-
- if test "$have_xmlto" = yes; then
-  HAVE_XMLTO_TRUE=
-  HAVE_XMLTO_FALSE='#'
-else
-  HAVE_XMLTO_TRUE='#'
-  HAVE_XMLTO_FALSE=
-fi
-
-
-
-
-
-
-@%:@ Check whether --with-fop was given.
-if test ${with_fop+y}
-then :
-  withval=$with_fop; use_fop=$withval
-else case e in @%:@(
-  e) use_fop=auto ;;
-esac
-fi
-
-
-
-if test "x$use_fop" = x"auto"; then
-   # Extract the first word of "fop", so it can be a program name with args.
-set dummy fop; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_FOP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $FOP in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_FOP="$FOP" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_FOP="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-FOP=$ac_cv_path_FOP
-if test -n "$FOP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FOP" >&5
-printf '%s\n' "$FOP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$FOP" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: fop not found - documentation targets will be skipped" >&5
-printf '%s\n' "$as_me: WARNING: fop not found - documentation targets will be skipped" >&2;}
-	have_fop=no
-   else
-        have_fop=yes
-   fi
-elif test "x$use_fop" = x"yes" ; then
-   # Extract the first word of "fop", so it can be a program name with args.
-set dummy fop; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_FOP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $FOP in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_FOP="$FOP" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_FOP="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-FOP=$ac_cv_path_FOP
-if test -n "$FOP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FOP" >&5
-printf '%s\n' "$FOP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$FOP" = "x"; then
-        as_fn_error $? "--with-fop=yes specified but fop not found in PATH" "$LINENO" 5
-   fi
-   have_fop=yes
-elif test "x$use_fop" = x"no" ; then
-   if test "x$FOP" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring FOP environment variable since --with-fop=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring FOP environment variable since --with-fop=no was specified" >&2;}
-   fi
-   have_fop=no
-else
-   as_fn_error $? "--with-fop expects 'yes' or 'no'" "$LINENO" 5
-fi
-
-# Test for a minimum version of fop, if provided.
-
- if test "$have_fop" = yes; then
-  HAVE_FOP_TRUE=
-  HAVE_FOP_FALSE='#'
-else
-  HAVE_FOP_TRUE='#'
-  HAVE_FOP_FALSE=
-fi
-
-
-
-
-# Preserves the interface, should it be implemented later
-
-
-
-@%:@ Check whether --with-xsltproc was given.
-if test ${with_xsltproc+y}
-then :
-  withval=$with_xsltproc; use_xsltproc=$withval
-else case e in @%:@(
-  e) use_xsltproc=auto ;;
-esac
-fi
-
-
-
-if test "x$use_xsltproc" = x"auto"; then
-   # Extract the first word of "xsltproc", so it can be a program name with args.
-set dummy xsltproc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XSLTPROC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XSLTPROC in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XSLTPROC="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XSLTPROC=$ac_cv_path_XSLTPROC
-if test -n "$XSLTPROC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XSLTPROC" >&5
-printf '%s\n' "$XSLTPROC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XSLTPROC" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xsltproc not found - cannot transform XML documents" >&5
-printf '%s\n' "$as_me: WARNING: xsltproc not found - cannot transform XML documents" >&2;}
-	have_xsltproc=no
-   else
-        have_xsltproc=yes
-   fi
-elif test "x$use_xsltproc" = x"yes" ; then
-   # Extract the first word of "xsltproc", so it can be a program name with args.
-set dummy xsltproc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XSLTPROC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $XSLTPROC in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XSLTPROC="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XSLTPROC=$ac_cv_path_XSLTPROC
-if test -n "$XSLTPROC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XSLTPROC" >&5
-printf '%s\n' "$XSLTPROC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XSLTPROC" = "x"; then
-        as_fn_error $? "--with-xsltproc=yes specified but xsltproc not found in PATH" "$LINENO" 5
-   fi
-   have_xsltproc=yes
-elif test "x$use_xsltproc" = x"no" ; then
-   if test "x$XSLTPROC" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring XSLTPROC environment variable since --with-xsltproc=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring XSLTPROC environment variable since --with-xsltproc=no was specified" >&2;}
-   fi
-   have_xsltproc=no
-else
-   as_fn_error $? "--with-xsltproc expects 'yes' or 'no'" "$LINENO" 5
-fi
-
- if test "$have_xsltproc" = yes; then
-  HAVE_XSLTPROC_TRUE=
-  HAVE_XSLTPROC_FALSE='#'
-else
-  HAVE_XSLTPROC_TRUE='#'
-  HAVE_XSLTPROC_FALSE=
-fi
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for X.Org SGML entities >= 1.8" >&5
-printf %s "checking for X.Org SGML entities >= 1.8... " >&6; }
-XORG_SGML_PATH=
-if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xorg-sgml-doctools >= 1.8\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xorg-sgml-doctools >= 1.8") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  XORG_SGML_PATH=`$PKG_CONFIG --variable=sgmlrootdir xorg-sgml-doctools`
-else
-  :
-    
-fi
-
-# Define variables STYLESHEET_SRCDIR and XSL_STYLESHEET containing
-# the path and the name of the doc stylesheet
-if test "x$XORG_SGML_PATH" != "x" ; then
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XORG_SGML_PATH" >&5
-printf '%s\n' "$XORG_SGML_PATH" >&6; }
-   STYLESHEET_SRCDIR=$XORG_SGML_PATH/X11
-   XSL_STYLESHEET=$STYLESHEET_SRCDIR/xorg.xsl
-else
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-
-
- if test "x$XSL_STYLESHEET" != "x"; then
-  HAVE_STYLESHEETS_TRUE=
-  HAVE_STYLESHEETS_FALSE='#'
-else
-  HAVE_STYLESHEETS_TRUE='#'
-  HAVE_STYLESHEETS_FALSE=
-fi
-
-
-
-@%:@ Check whether --enable-malloc0returnsnull was given.
-if test ${enable_malloc0returnsnull+y}
-then :
-  enableval=$enable_malloc0returnsnull; MALLOC_ZERO_RETURNS_NULL=$enableval
-else case e in @%:@(
-  e) MALLOC_ZERO_RETURNS_NULL=yes ;;
-esac
-fi
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to act as if malloc(0) can return NULL" >&5
-printf %s "checking whether to act as if malloc(0) can return NULL... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MALLOC_ZERO_RETURNS_NULL" >&5
-printf '%s\n' "$MALLOC_ZERO_RETURNS_NULL" >&6; }
-
-if test "x$MALLOC_ZERO_RETURNS_NULL" = xyes; then
-	MALLOC_ZERO_CFLAGS="-DMALLOC_0_RETURNS_NULL"
-	XMALLOC_ZERO_CFLAGS=$MALLOC_ZERO_CFLAGS
-	XTMALLOC_ZERO_CFLAGS="$MALLOC_ZERO_CFLAGS -DXTMALLOC_BC"
-else
-	MALLOC_ZERO_CFLAGS=""
-	XMALLOC_ZERO_CFLAGS=""
-	XTMALLOC_ZERO_CFLAGS=""
-fi
-
-
-
-
-
-
-# Determine .so library version per platform
-# based on SharedXextRev in monolith xc/config/cf/*Lib.tmpl
-if test "x$XEXT_SOREV" = "x" ; then
-    case $host_os in
-	openbsd*)	XEXT_SOREV=8:0 		;;
-	solaris*)       XEXT_SOREV=0 		;;
-	*)              XEXT_SOREV=6:4:0 	;;
-    esac
-fi
-
-
-# Obtain compiler/linker options for dependencies
-
-pkg_failed=no
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" >&5
-printf %s "checking for xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99... " >&6; }
-
-if test -n "$XEXT_CFLAGS"; then
-    pkg_cv_XEXT_CFLAGS="$XEXT_CFLAGS"
- elif test -n "$PKG_CONFIG"; then
-    if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  pkg_cv_XEXT_CFLAGS=`$PKG_CONFIG --cflags "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes 
-else
-  pkg_failed=yes
-fi
- else
-    pkg_failed=untried
-fi
-if test -n "$XEXT_LIBS"; then
-    pkg_cv_XEXT_LIBS="$XEXT_LIBS"
- elif test -n "$PKG_CONFIG"; then
-    if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  pkg_cv_XEXT_LIBS=`$PKG_CONFIG --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes 
-else
-  pkg_failed=yes
-fi
- else
-    pkg_failed=untried
-fi
-
-
-
-if test $pkg_failed = yes; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        
-if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
-        _pkg_short_errors_supported=yes
-else
-        _pkg_short_errors_supported=no
-fi
-        if test $_pkg_short_errors_supported = yes; then
-                XEXT_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>&1`
-        else
-                XEXT_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>&1`
-        fi
-        # Put the nasty error message in config.log where it belongs
-        echo "$XEXT_PKG_ERRORS" >&5
-
-        as_fn_error $? "Package requirements (xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99) were not met:
-
-$XEXT_PKG_ERRORS
-
-Consider adjusting the PKG_CONFIG_PATH environment variable if you
-installed software in a non-standard prefix.
-
-Alternatively, you may set the environment variables XEXT_CFLAGS
-and XEXT_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details." "$LINENO" 5        
-elif test $pkg_failed = untried; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "The pkg-config script could not be found or is too old.  Make sure it
-is in your PATH or set the PKG_CONFIG environment variable to the full
-path to pkg-config.
-
-Alternatively, you may set the environment variables XEXT_CFLAGS
-and XEXT_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details.
-
-To get pkg-config, see <http://pkg-config.freedesktop.org/>.
-See 'config.log' for more details" "$LINENO" 5; }        
-else
-        XEXT_CFLAGS=$pkg_cv_XEXT_CFLAGS
-        XEXT_LIBS=$pkg_cv_XEXT_LIBS
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-        
-fi
-
-
-    
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for __builtin_popcountl" >&5
-printf %s "checking for __builtin_popcountl... " >&6; }
-if test ${ax_cv_have___builtin_popcountl+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) 
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-            __builtin_popcountl(0)
-            
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ax_cv_have___builtin_popcountl=yes
-else case e in @%:@(
-  e) ax_cv_have___builtin_popcountl=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ax_cv_have___builtin_popcountl" >&5
-printf '%s\n' "$ax_cv_have___builtin_popcountl" >&6; }
-
-    if test yes = $ax_cv_have___builtin_popcountl
-then :
-  
-printf '%s\n' "@%:@define HAVE___BUILTIN_POPCOUNTL 1" >>confdefs.h
-
-fi
-
-    
-
-ac_fn_c_check_func "$LINENO" "reallocarray" "ac_cv_func_reallocarray"
-if test "x$ac_cv_func_reallocarray" = xyes
-then :
-  printf '%s\n' "@%:@define HAVE_REALLOCARRAY 1" >>confdefs.h
-
-else case e in @%:@(
-  e) case " $LIB@&t@OBJS " in
-  *" reallocarray.$ac_objext "* ) ;;
-  *) LIB@&t@OBJS="$LIB@&t@OBJS reallocarray.$ac_objext"
- ;;
-esac
- ;;
-esac
-fi
-
-
-# Allow checking code with lint, sparse, etc.
-
-
-
-
-
-@%:@ Check whether --with-lint was given.
-if test ${with_lint+y}
-then :
-  withval=$with_lint; use_lint=$withval
-else case e in @%:@(
-  e) use_lint=no ;;
-esac
-fi
-
-
-# Obtain platform specific info like program name and options
-# The lint program on FreeBSD and NetBSD is different from the one on Solaris
-case $host_os in
-  *linux* | *openbsd* | kfreebsd*-gnu | darwin* | cygwin*)
-	lint_name=splint
-	lint_options="-badflag"
-	;;
-  *freebsd* | *netbsd*)
-	lint_name=lint
-	lint_options="-u -b"
-	;;
-  *solaris*)
-	lint_name=lint
-	lint_options="-u -b -h -erroff=E_INDISTING_FROM_TRUNC2"
-	;;
-esac
-
-# Test for the presence of the program (either guessed by the code or spelled out by the user)
-if test "x$use_lint" = x"yes" ; then
-   # Extract the first word of "$lint_name", so it can be a program name with args.
-set dummy $lint_name; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_LINT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in @%:@(
-  e) case $LINT in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_LINT="$LINT" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_LINT="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-LINT=$ac_cv_path_LINT
-if test -n "$LINT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LINT" >&5
-printf '%s\n' "$LINT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$LINT" = "x"; then
-        as_fn_error $? "--with-lint=yes specified but lint-style tool not found in PATH" "$LINENO" 5
-   fi
-elif test "x$use_lint" = x"no" ; then
-   if test "x$LINT" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring LINT environment variable since --with-lint=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring LINT environment variable since --with-lint=no was specified" >&2;}
-   fi
-else
-   as_fn_error $? "--with-lint expects 'yes' or 'no'. Use LINT variable to specify path." "$LINENO" 5
-fi
-
-# User supplied flags override default flags
-if test "x$LINT_FLAGS" != "x"; then
-   lint_options=$LINT_FLAGS
-fi
-
-LINT_FLAGS=$lint_options
-
- if test "x$LINT" != x; then
-  LINT_TRUE=
-  LINT_FALSE='#'
-else
-  LINT_TRUE='#'
-  LINT_FALSE=
-fi
-
-
-
-
-
-@%:@ Check whether --enable-lint-library was given.
-if test ${enable_lint_library+y}
-then :
-  enableval=$enable_lint_library; make_lint_lib=$enableval
-else case e in @%:@(
-  e) make_lint_lib=no ;;
-esac
-fi
-
-
-if test "x$make_lint_lib" = x"yes" ; then
-   LINTLIB=llib-lXext.ln
-   if test "x$LINT" = "x"; then
-        as_fn_error $? "Cannot make lint library without --with-lint" "$LINENO" 5
-   fi
-elif test "x$make_lint_lib" != x"no" ; then
-   as_fn_error $? "--enable-lint-library expects 'yes' or 'no'." "$LINENO" 5
-fi
-
-
- if test x$make_lint_lib != xno; then
-  MAKE_LINT_LIB_TRUE=
-  MAKE_LINT_LIB_FALSE='#'
-else
-  MAKE_LINT_LIB_TRUE='#'
-  MAKE_LINT_LIB_FALSE=
-fi
-
-
-
-
-ac_config_files="$ac_config_files Makefile man/Makefile src/Makefile specs/Makefile xext.pc"
-
-cat >confcache <<\_ACEOF
-# This file is a shell script that caches the results of configure
-# tests run on this system so they can be shared between configure
-# scripts and configure runs, see configure's option --config-cache.
-# It is not useful on other systems.  If it contains results you don't
-# want to keep, you may remove or edit it.
-#
-# config.status only pays attention to the cache file if you give it
-# the --recheck option to rerun configure.
-#
-# 'ac_cv_env_foo' variables (set or unset) will be overridden when
-# loading this file, other *unset* 'ac_cv_foo' will be assigned the
-# following values.
-
-_ACEOF
-
-ac_cache_dump |
-  sed '
-     /^ac_cv_env_/b end
-     t clear
-     :clear
-     s/^\([^=]*\)=\(.*[{}].*\)$/test ${\1+y} || &/
-     t end
-     s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/
-     :end' >>confcache
-if diff "$cache_file" confcache >/dev/null 2>&1; then :; else
-  if test -w "$cache_file"; then
-    if test "x$cache_file" != "x/dev/null"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5
-printf '%s\n' "$as_me: updating cache $cache_file" >&6;}
-      if test ! -f "$cache_file" || test -h "$cache_file"; then
-	cat confcache >"$cache_file"
-      else
-        case $cache_file in #(
-        */* | ?:*)
-	  mv -f confcache "$cache_file"$$ &&
-	  mv -f "$cache_file"$$ "$cache_file" ;; #(
-        *)
-	  mv -f confcache "$cache_file" ;;
-	esac
-      fi
-    fi
-  else
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5
-printf '%s\n' "$as_me: not updating unwritable cache $cache_file" >&6;}
-  fi
-fi
-rm -f confcache
-
-test "x$prefix" = xNONE && prefix=$ac_default_prefix
-# Let make expand exec_prefix.
-test "x$exec_prefix" = xNONE && exec_prefix='${prefix}'
-
-DEFS=-DHAVE_CONFIG_H
-
-ac_libobjs=
-ac_ltlibobjs=
-U=
-for ac_i in : $LIB@&t@OBJS; do test "x$ac_i" = x: && continue
-  # 1. Remove the extension, and $U if already installed.
-  ac_script='s/\$U\././;s/\.o$//;s/\.obj$//'
-  ac_i=`printf '%s\n' "$ac_i" | sed "$ac_script"`
-  # 2. Prepend LIBOBJDIR.  When used with automake>=1.10 LIBOBJDIR
-  #    will be set to the directory where LIBOBJS objects are built.
-  as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext"
-  as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo'
-done
-LIB@&t@OBJS=$ac_libobjs
-
-LTLIBOBJS=$ac_ltlibobjs
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking that generated files are newer than configure" >&5
-printf %s "checking that generated files are newer than configure... " >&6; }
-   if test -n "$am_sleep_pid"; then
-     # Hide warnings about reused PIDs.
-     wait $am_sleep_pid 2>/dev/null
-   fi
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: done" >&5
-printf '%s\n' "done" >&6; }
-if test -z "${AMDEP_TRUE}" && test -z "${AMDEP_FALSE}"; then
-  as_fn_error $? "conditional \"AMDEP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${am__fastdepCC_TRUE}" && test -z "${am__fastdepCC_FALSE}"; then
-  as_fn_error $? "conditional \"am__fastdepCC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-case $enable_silent_rules in @%:@ (((
-  yes) AM_DEFAULT_VERBOSITY=0;;
-   no) AM_DEFAULT_VERBOSITY=1;;
-esac
-if test $am_cv_make_support_nested_variables = yes; then
-    AM_V='$(V)'
-  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-else
-  AM_V=$AM_DEFAULT_VERBOSITY
-  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
-fi
-
- if test -n "$EXEEXT"; then
-  am__EXEEXT_TRUE=
-  am__EXEEXT_FALSE='#'
-else
-  am__EXEEXT_TRUE='#'
-  am__EXEEXT_FALSE=
-fi
-
-if test -z "${ENABLE_SPECS_TRUE}" && test -z "${ENABLE_SPECS_FALSE}"; then
-  as_fn_error $? "conditional \"ENABLE_SPECS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XMLTO_TEXT_TRUE}" && test -z "${HAVE_XMLTO_TEXT_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XMLTO_TEXT\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XMLTO_TRUE}" && test -z "${HAVE_XMLTO_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XMLTO\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_FOP_TRUE}" && test -z "${HAVE_FOP_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_FOP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XSLTPROC_TRUE}" && test -z "${HAVE_XSLTPROC_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XSLTPROC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_STYLESHEETS_TRUE}" && test -z "${HAVE_STYLESHEETS_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_STYLESHEETS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${LINT_TRUE}" && test -z "${LINT_FALSE}"; then
-  as_fn_error $? "conditional \"LINT\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${MAKE_LINT_LIB_TRUE}" && test -z "${MAKE_LINT_LIB_FALSE}"; then
-  as_fn_error $? "conditional \"MAKE_LINT_LIB\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-
-: "${CONFIG_STATUS=./config.status}"
-case $CONFIG_STATUS in @%:@(
-  -*) :
-    CONFIG_STATUS=./$CONFIG_STATUS ;; @%:@(
-  */*) :
-     ;; @%:@(
-  *) :
-    CONFIG_STATUS=./$CONFIG_STATUS ;;
-esac
-
-ac_write_fail=0
-ac_clean_CONFIG_STATUS='"$CONFIG_STATUS"'
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5
-printf '%s\n' "$as_me: creating $CONFIG_STATUS" >&6;}
-as_write_fail=0
-cat >"$CONFIG_STATUS" <<_ASEOF || as_write_fail=1
-#! $SHELL
-# Generated by $as_me.
-# Run this file to recreate the current configuration.
-# Compiler output produced by configure, useful for debugging
-# configure, is in config.log if it exists.
-
-debug=false
-ac_cs_recheck=false
-ac_cs_silent=false
-
-SHELL=\${CONFIG_SHELL-$SHELL}
-export SHELL
-_ASEOF
-cat >>"$CONFIG_STATUS" <<\_ASEOF || as_write_fail=1
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else case e in @%:@(
-  e) case `(set -o) 2>/dev/null` in @%:@(
-  *posix*) :
-    set -o posix ;; @%:@(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-
-
-
-# Reset variables that may have inherited troublesome values from
-# the environment.
-
-# IFS needs to be set, to space, tab, and newline, in precisely that order.
-# (If _AS_PATH_WALK were called with IFS unset, it would have the
-# side effect of setting IFS to empty, thus disabling word splitting.)
-# Quoting is to prevent editors from complaining about space-tab.
-as_nl='
-'
-export as_nl
-IFS=" ""	$as_nl"
-
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# Ensure predictable behavior from utilities with locale-dependent output.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# We cannot yet rely on "unset" to work, but we need these variables
-# to be unset--not just set to an empty or harmless value--now, to
-# avoid bugs in old shells (e.g. pre-3.0 UWIN ksh).  This construct
-# also avoids known problems related to "unset" and subshell syntax
-# in other old shells (e.g. bash 2.01 and pdksh 5.2.14).
-for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH
-do eval test \${$as_var+y} \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-
-# Ensure that fds 0, 1, and 2 are open.
-if (exec 3>&0) 2>/dev/null; then :; else exec 0</dev/null; fi
-if (exec 3>&1) 2>/dev/null; then :; else exec 1>/dev/null; fi
-if (exec 3>&2)            ; then :; else exec 2>/dev/null; fi
-
-# The user is always right.
-if ${PATH_SEPARATOR+false} :; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in @%:@((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in @%:@(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    test -r "$as_dir$0" && as_myself=$as_dir$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as 'sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  printf '%s\n' "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-
-
-@%:@ as_fn_error STATUS ERROR [LINENO LOG_FD]
-@%:@ ----------------------------------------
-@%:@ Output "`basename @S|@0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-@%:@ provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-@%:@ script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  printf '%s\n' "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} @%:@ as_fn_error
-
-
-@%:@ as_fn_set_status STATUS
-@%:@ -----------------------
-@%:@ Set @S|@? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} @%:@ as_fn_set_status
-
-@%:@ as_fn_exit STATUS
-@%:@ -----------------
-@%:@ Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} @%:@ as_fn_exit
-
-@%:@ as_fn_unset VAR
-@%:@ ---------------
-@%:@ Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-@%:@ as_fn_append VAR VALUE
-@%:@ ----------------------
-@%:@ Append the text in VALUE to the end of the definition contained in VAR. Take
-@%:@ advantage of any shell optimizations that allow amortized linear growth over
-@%:@ repeated appends, instead of the typical quadratic growth present in naive
-@%:@ implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null
-then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else case e in @%:@(
-  e) as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  } ;;
-esac
-fi # as_fn_append
-
-@%:@ as_fn_arith ARG...
-@%:@ ------------------
-@%:@ Perform arithmetic evaluation on the ARGs, and store the result in the
-@%:@ global @S|@as_val. Take advantage of shells that can avoid forks. The arguments
-@%:@ must be portable across @S|@(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null
-then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else case e in @%:@(
-  e) as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  } ;;
-esac
-fi # as_fn_arith
-
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both 'ln -s file dir' and 'ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; 'ln -s' creates a wrapper executable.
-    # In both cases, we have to default to 'cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-
-@%:@ as_fn_mkdir_p
-@%:@ -------------
-@%:@ Create "@S|@as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`printf '%s\n' "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} @%:@ as_fn_mkdir_p
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-
-@%:@ as_fn_executable_p FILE
-@%:@ -----------------------
-@%:@ Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} @%:@ as_fn_executable_p
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_sed_cpp="y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g"
-as_tr_cpp="eval sed '$as_sed_cpp'" # deprecated
-
-# Sed expression to map a string onto a valid variable name.
-as_sed_sh="y%*+%pp%;s%[^_$as_cr_alnum]%_%g"
-as_tr_sh="eval sed '$as_sed_sh'" # deprecated
-
-
-exec 6>&1
-## ------------------------------------- ##
-## Main body of "$CONFIG_STATUS" script. ##
-## ------------------------------------- ##
-_ASEOF
-test $as_write_fail = 0 && chmod +x "$CONFIG_STATUS" || ac_write_fail=1
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# Save the log message, to keep $0 and so on meaningful, and to
-# report actual input values of CONFIG_FILES etc. instead of their
-# values after options handling.
-ac_log="
-This file was extended by libXext $as_me 1.3.7, which was
-generated by GNU Autoconf 2.73.  Invocation command line was
-
-  CONFIG_FILES    = $CONFIG_FILES
-  CONFIG_HEADERS  = $CONFIG_HEADERS
-  CONFIG_LINKS    = $CONFIG_LINKS
-  CONFIG_COMMANDS = $CONFIG_COMMANDS
-  $ $0 $@
-
-on `(hostname || uname -n) 2>/dev/null | sed 1q`
-"
-
-_ACEOF
-
-case $ac_config_files in *"
-"*) set x $ac_config_files; shift; ac_config_files=$*;;
-esac
-
-case $ac_config_headers in *"
-"*) set x $ac_config_headers; shift; ac_config_headers=$*;;
-esac
-
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-# Files that config.status was made for.
-config_files="$ac_config_files"
-config_headers="$ac_config_headers"
-config_commands="$ac_config_commands"
-
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-ac_cs_usage="\
-'$as_me' instantiates files and other configuration actions
-from templates according to the current configuration.  Unless the files
-and actions are specified as TAGs, all are instantiated by default.
-
-Usage: $0 [OPTION]... [TAG]...
-
-  -h, --help       print this help, then exit
-  -V, --version    print version number and configuration settings, then exit
-      --config     print configuration, then exit
-  -q, --quiet, --silent
-                   do not print progress messages
-  -d, --debug      don't remove temporary files
-      --recheck    update $as_me by reconfiguring in the same conditions
-      --file=FILE[:TEMPLATE] 
-                   instantiate the configuration file FILE
-      --header=FILE[:TEMPLATE] 
-                   instantiate the configuration header FILE
-
-Configuration files:
-$config_files
-
-Configuration headers:
-$config_headers
-
-Configuration commands:
-$config_commands
-
-Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>."
-
-_ACEOF
-ac_cs_config=`printf '%s\n' "$ac_configure_args" | sed "$ac_safe_unquote"`
-ac_cs_config_escaped=`printf '%s\n' "$ac_cs_config" | sed "s/^ //; s/'/'\\\\\\\\''/g"`
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-ac_cs_config='$ac_cs_config_escaped'
-ac_cs_version="\\
-libXext config.status 1.3.7
-configured by $0, generated by GNU Autoconf 2.73,
-  with options \\"\$ac_cs_config\\"
-
-Copyright (C) 2026 Free Software Foundation, Inc.
-This config.status script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it."
-
-ac_pwd='$ac_pwd'
-srcdir='$srcdir'
-INSTALL='$INSTALL'
-MKDIR_P='$MKDIR_P'
-AWK='$AWK'
-test -n "\$AWK" || {
-  awk '' </dev/null ||
-    as_fn_error \$? "try installing gawk"
-  AWK=awk
-}
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# The default lists apply if the user does not specify any file.
-ac_need_defaults=:
-while test $# != 0
-do
-  case $1 in
-  --*=?*)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'`
-    ac_shift=:
-    ;;
-  --*=)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=
-    ac_shift=:
-    ;;
-  *)
-    ac_option=$1
-    ac_optarg=$2
-    ac_shift=shift
-    ;;
-  esac
-
-  case $ac_option in
-  # Handling of the options.
-  -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r)
-    ac_cs_recheck=: ;;
-  --version | --versio | --versi | --vers | --ver | --ve | --v | -V )
-    printf '%s\n' "$ac_cs_version"; exit ;;
-  --config | --confi | --conf | --con | --co | --c )
-    printf '%s\n' "$ac_cs_config"; exit ;;
-  --debug | --debu | --deb | --de | --d | -d )
-    debug=: ;;
-  --file | --fil | --fi | --f )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf '%s\n' "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    '') as_fn_error $? "missing file argument" ;;
-    esac
-    as_fn_append CONFIG_FILES " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --header | --heade | --head | --hea )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf '%s\n' "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    as_fn_append CONFIG_HEADERS " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --he | --h)
-    # Conflict between --help and --header
-    as_fn_error $? "ambiguous option: '$1'
-Try '$0 --help' for more information.";;
-  --help | --hel | -h )
-    printf '%s\n' "$ac_cs_usage"; exit ;;
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil | --si | --s)
-    ac_cs_silent=: ;;
-
-  # This is an error.
-  -*) as_fn_error $? "unrecognized option: '$1'
-Try '$0 --help' for more information." ;;
-
-  *) as_fn_append ac_config_targets " $1"
-     ac_need_defaults=false ;;
-
-  esac
-  shift
-done
-
-ac_configure_extra_args=
-
-if $ac_cs_silent; then
-  exec 6>/dev/null
-  ac_configure_extra_args="$ac_configure_extra_args --silent"
-fi
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-if \$ac_cs_recheck; then
-  set X $SHELL '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion
-  shift
-  \printf '%s\n' "running CONFIG_SHELL=$SHELL \$*" >&6
-  CONFIG_SHELL='$SHELL'
-  export CONFIG_SHELL
-  exec "\$@"
-fi
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-exec 5>>config.log
-{
-  echo
-  sed 'h;s/./-/g;s/^.../@%:@@%:@ /;s/...$/ @%:@@%:@/;p;x;p;x' <<_ASBOX
-@%:@@%:@ Running $as_me. @%:@@%:@
-_ASBOX
-  printf '%s\n' "$ac_log"
-} >&5
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-#
-# INIT-COMMANDS
-#
-AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}"
-
-
-# The HP-UX ksh and POSIX shell print the target directory to stdout
-# if CDPATH is set.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-sed_quote_subst='$sed_quote_subst'
-double_quote_subst='$double_quote_subst'
-delay_variable_subst='$delay_variable_subst'
-macro_version='`$ECHO "$macro_version" | $SED "$delay_single_quote_subst"`'
-macro_revision='`$ECHO "$macro_revision" | $SED "$delay_single_quote_subst"`'
-enable_shared='`$ECHO "$enable_shared" | $SED "$delay_single_quote_subst"`'
-enable_static='`$ECHO "$enable_static" | $SED "$delay_single_quote_subst"`'
-pic_mode='`$ECHO "$pic_mode" | $SED "$delay_single_quote_subst"`'
-enable_fast_install='`$ECHO "$enable_fast_install" | $SED "$delay_single_quote_subst"`'
-shared_archive_member_spec='`$ECHO "$shared_archive_member_spec" | $SED "$delay_single_quote_subst"`'
-SHELL='`$ECHO "$SHELL" | $SED "$delay_single_quote_subst"`'
-ECHO='`$ECHO "$ECHO" | $SED "$delay_single_quote_subst"`'
-PATH_SEPARATOR='`$ECHO "$PATH_SEPARATOR" | $SED "$delay_single_quote_subst"`'
-host_alias='`$ECHO "$host_alias" | $SED "$delay_single_quote_subst"`'
-host='`$ECHO "$host" | $SED "$delay_single_quote_subst"`'
-host_os='`$ECHO "$host_os" | $SED "$delay_single_quote_subst"`'
-build_alias='`$ECHO "$build_alias" | $SED "$delay_single_quote_subst"`'
-build='`$ECHO "$build" | $SED "$delay_single_quote_subst"`'
-build_os='`$ECHO "$build_os" | $SED "$delay_single_quote_subst"`'
-SED='`$ECHO "$SED" | $SED "$delay_single_quote_subst"`'
-Xsed='`$ECHO "$Xsed" | $SED "$delay_single_quote_subst"`'
-GREP='`$ECHO "$GREP" | $SED "$delay_single_quote_subst"`'
-EGREP='`$ECHO "$EGREP" | $SED "$delay_single_quote_subst"`'
-FGREP='`$ECHO "$FGREP" | $SED "$delay_single_quote_subst"`'
-LD='`$ECHO "$LD" | $SED "$delay_single_quote_subst"`'
-NM='`$ECHO "$NM" | $SED "$delay_single_quote_subst"`'
-LN_S='`$ECHO "$LN_S" | $SED "$delay_single_quote_subst"`'
-max_cmd_len='`$ECHO "$max_cmd_len" | $SED "$delay_single_quote_subst"`'
-ac_objext='`$ECHO "$ac_objext" | $SED "$delay_single_quote_subst"`'
-exeext='`$ECHO "$exeext" | $SED "$delay_single_quote_subst"`'
-lt_unset='`$ECHO "$lt_unset" | $SED "$delay_single_quote_subst"`'
-lt_SP2NL='`$ECHO "$lt_SP2NL" | $SED "$delay_single_quote_subst"`'
-lt_NL2SP='`$ECHO "$lt_NL2SP" | $SED "$delay_single_quote_subst"`'
-lt_cv_to_host_file_cmd='`$ECHO "$lt_cv_to_host_file_cmd" | $SED "$delay_single_quote_subst"`'
-lt_cv_to_tool_file_cmd='`$ECHO "$lt_cv_to_tool_file_cmd" | $SED "$delay_single_quote_subst"`'
-reload_flag='`$ECHO "$reload_flag" | $SED "$delay_single_quote_subst"`'
-reload_cmds='`$ECHO "$reload_cmds" | $SED "$delay_single_quote_subst"`'
-FILECMD='`$ECHO "$FILECMD" | $SED "$delay_single_quote_subst"`'
-OBJDUMP='`$ECHO "$OBJDUMP" | $SED "$delay_single_quote_subst"`'
-deplibs_check_method='`$ECHO "$deplibs_check_method" | $SED "$delay_single_quote_subst"`'
-file_magic_cmd='`$ECHO "$file_magic_cmd" | $SED "$delay_single_quote_subst"`'
-file_magic_glob='`$ECHO "$file_magic_glob" | $SED "$delay_single_quote_subst"`'
-want_nocaseglob='`$ECHO "$want_nocaseglob" | $SED "$delay_single_quote_subst"`'
-DLLTOOL='`$ECHO "$DLLTOOL" | $SED "$delay_single_quote_subst"`'
-sharedlib_from_linklib_cmd='`$ECHO "$sharedlib_from_linklib_cmd" | $SED "$delay_single_quote_subst"`'
-AR='`$ECHO "$AR" | $SED "$delay_single_quote_subst"`'
-lt_ar_flags='`$ECHO "$lt_ar_flags" | $SED "$delay_single_quote_subst"`'
-AR_FLAGS='`$ECHO "$AR_FLAGS" | $SED "$delay_single_quote_subst"`'
-archiver_list_spec='`$ECHO "$archiver_list_spec" | $SED "$delay_single_quote_subst"`'
-STRIP='`$ECHO "$STRIP" | $SED "$delay_single_quote_subst"`'
-RANLIB='`$ECHO "$RANLIB" | $SED "$delay_single_quote_subst"`'
-old_postinstall_cmds='`$ECHO "$old_postinstall_cmds" | $SED "$delay_single_quote_subst"`'
-old_postuninstall_cmds='`$ECHO "$old_postuninstall_cmds" | $SED "$delay_single_quote_subst"`'
-old_archive_cmds='`$ECHO "$old_archive_cmds" | $SED "$delay_single_quote_subst"`'
-lock_old_archive_extraction='`$ECHO "$lock_old_archive_extraction" | $SED "$delay_single_quote_subst"`'
-CC='`$ECHO "$CC" | $SED "$delay_single_quote_subst"`'
-CFLAGS='`$ECHO "$CFLAGS" | $SED "$delay_single_quote_subst"`'
-compiler='`$ECHO "$compiler" | $SED "$delay_single_quote_subst"`'
-GCC='`$ECHO "$GCC" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_pipe='`$ECHO "$lt_cv_sys_global_symbol_pipe" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_cdecl='`$ECHO "$lt_cv_sys_global_symbol_to_cdecl" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_import='`$ECHO "$lt_cv_sys_global_symbol_to_import" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_c_name_address='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address_lib_prefix" | $SED "$delay_single_quote_subst"`'
-lt_cv_nm_interface='`$ECHO "$lt_cv_nm_interface" | $SED "$delay_single_quote_subst"`'
-nm_file_list_spec='`$ECHO "$nm_file_list_spec" | $SED "$delay_single_quote_subst"`'
-lt_sysroot='`$ECHO "$lt_sysroot" | $SED "$delay_single_quote_subst"`'
-lt_cv_truncate_bin='`$ECHO "$lt_cv_truncate_bin" | $SED "$delay_single_quote_subst"`'
-objdir='`$ECHO "$objdir" | $SED "$delay_single_quote_subst"`'
-MAGIC_CMD='`$ECHO "$MAGIC_CMD" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_no_builtin_flag='`$ECHO "$lt_prog_compiler_no_builtin_flag" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_pic='`$ECHO "$lt_prog_compiler_pic" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_wl='`$ECHO "$lt_prog_compiler_wl" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_static='`$ECHO "$lt_prog_compiler_static" | $SED "$delay_single_quote_subst"`'
-lt_cv_prog_compiler_c_o='`$ECHO "$lt_cv_prog_compiler_c_o" | $SED "$delay_single_quote_subst"`'
-need_locks='`$ECHO "$need_locks" | $SED "$delay_single_quote_subst"`'
-MANIFEST_TOOL='`$ECHO "$MANIFEST_TOOL" | $SED "$delay_single_quote_subst"`'
-DSYMUTIL='`$ECHO "$DSYMUTIL" | $SED "$delay_single_quote_subst"`'
-NMEDIT='`$ECHO "$NMEDIT" | $SED "$delay_single_quote_subst"`'
-LIPO='`$ECHO "$LIPO" | $SED "$delay_single_quote_subst"`'
-OTOOL='`$ECHO "$OTOOL" | $SED "$delay_single_quote_subst"`'
-OTOOL64='`$ECHO "$OTOOL64" | $SED "$delay_single_quote_subst"`'
-libext='`$ECHO "$libext" | $SED "$delay_single_quote_subst"`'
-shrext_cmds='`$ECHO "$shrext_cmds" | $SED "$delay_single_quote_subst"`'
-extract_expsyms_cmds='`$ECHO "$extract_expsyms_cmds" | $SED "$delay_single_quote_subst"`'
-archive_cmds_need_lc='`$ECHO "$archive_cmds_need_lc" | $SED "$delay_single_quote_subst"`'
-enable_shared_with_static_runtimes='`$ECHO "$enable_shared_with_static_runtimes" | $SED "$delay_single_quote_subst"`'
-export_dynamic_flag_spec='`$ECHO "$export_dynamic_flag_spec" | $SED "$delay_single_quote_subst"`'
-whole_archive_flag_spec='`$ECHO "$whole_archive_flag_spec" | $SED "$delay_single_quote_subst"`'
-compiler_needs_object='`$ECHO "$compiler_needs_object" | $SED "$delay_single_quote_subst"`'
-old_archive_from_new_cmds='`$ECHO "$old_archive_from_new_cmds" | $SED "$delay_single_quote_subst"`'
-old_archive_from_expsyms_cmds='`$ECHO "$old_archive_from_expsyms_cmds" | $SED "$delay_single_quote_subst"`'
-archive_cmds='`$ECHO "$archive_cmds" | $SED "$delay_single_quote_subst"`'
-archive_expsym_cmds='`$ECHO "$archive_expsym_cmds" | $SED "$delay_single_quote_subst"`'
-module_cmds='`$ECHO "$module_cmds" | $SED "$delay_single_quote_subst"`'
-module_expsym_cmds='`$ECHO "$module_expsym_cmds" | $SED "$delay_single_quote_subst"`'
-with_gnu_ld='`$ECHO "$with_gnu_ld" | $SED "$delay_single_quote_subst"`'
-allow_undefined_flag='`$ECHO "$allow_undefined_flag" | $SED "$delay_single_quote_subst"`'
-no_undefined_flag='`$ECHO "$no_undefined_flag" | $SED "$delay_single_quote_subst"`'
-hardcode_libdir_flag_spec='`$ECHO "$hardcode_libdir_flag_spec" | $SED "$delay_single_quote_subst"`'
-hardcode_libdir_separator='`$ECHO "$hardcode_libdir_separator" | $SED "$delay_single_quote_subst"`'
-hardcode_direct='`$ECHO "$hardcode_direct" | $SED "$delay_single_quote_subst"`'
-hardcode_direct_absolute='`$ECHO "$hardcode_direct_absolute" | $SED "$delay_single_quote_subst"`'
-hardcode_minus_L='`$ECHO "$hardcode_minus_L" | $SED "$delay_single_quote_subst"`'
-hardcode_shlibpath_var='`$ECHO "$hardcode_shlibpath_var" | $SED "$delay_single_quote_subst"`'
-hardcode_automatic='`$ECHO "$hardcode_automatic" | $SED "$delay_single_quote_subst"`'
-inherit_rpath='`$ECHO "$inherit_rpath" | $SED "$delay_single_quote_subst"`'
-link_all_deplibs='`$ECHO "$link_all_deplibs" | $SED "$delay_single_quote_subst"`'
-always_export_symbols='`$ECHO "$always_export_symbols" | $SED "$delay_single_quote_subst"`'
-export_symbols_cmds='`$ECHO "$export_symbols_cmds" | $SED "$delay_single_quote_subst"`'
-exclude_expsyms='`$ECHO "$exclude_expsyms" | $SED "$delay_single_quote_subst"`'
-include_expsyms='`$ECHO "$include_expsyms" | $SED "$delay_single_quote_subst"`'
-prelink_cmds='`$ECHO "$prelink_cmds" | $SED "$delay_single_quote_subst"`'
-postlink_cmds='`$ECHO "$postlink_cmds" | $SED "$delay_single_quote_subst"`'
-file_list_spec='`$ECHO "$file_list_spec" | $SED "$delay_single_quote_subst"`'
-variables_saved_for_relink='`$ECHO "$variables_saved_for_relink" | $SED "$delay_single_quote_subst"`'
-need_lib_prefix='`$ECHO "$need_lib_prefix" | $SED "$delay_single_quote_subst"`'
-need_version='`$ECHO "$need_version" | $SED "$delay_single_quote_subst"`'
-version_type='`$ECHO "$version_type" | $SED "$delay_single_quote_subst"`'
-runpath_var='`$ECHO "$runpath_var" | $SED "$delay_single_quote_subst"`'
-shlibpath_var='`$ECHO "$shlibpath_var" | $SED "$delay_single_quote_subst"`'
-shlibpath_overrides_runpath='`$ECHO "$shlibpath_overrides_runpath" | $SED "$delay_single_quote_subst"`'
-libname_spec='`$ECHO "$libname_spec" | $SED "$delay_single_quote_subst"`'
-library_names_spec='`$ECHO "$library_names_spec" | $SED "$delay_single_quote_subst"`'
-soname_spec='`$ECHO "$soname_spec" | $SED "$delay_single_quote_subst"`'
-install_override_mode='`$ECHO "$install_override_mode" | $SED "$delay_single_quote_subst"`'
-postinstall_cmds='`$ECHO "$postinstall_cmds" | $SED "$delay_single_quote_subst"`'
-postuninstall_cmds='`$ECHO "$postuninstall_cmds" | $SED "$delay_single_quote_subst"`'
-finish_cmds='`$ECHO "$finish_cmds" | $SED "$delay_single_quote_subst"`'
-finish_eval='`$ECHO "$finish_eval" | $SED "$delay_single_quote_subst"`'
-hardcode_into_libs='`$ECHO "$hardcode_into_libs" | $SED "$delay_single_quote_subst"`'
-sys_lib_search_path_spec='`$ECHO "$sys_lib_search_path_spec" | $SED "$delay_single_quote_subst"`'
-configure_time_dlsearch_path='`$ECHO "$configure_time_dlsearch_path" | $SED "$delay_single_quote_subst"`'
-configure_time_lt_sys_library_path='`$ECHO "$configure_time_lt_sys_library_path" | $SED "$delay_single_quote_subst"`'
-hardcode_action='`$ECHO "$hardcode_action" | $SED "$delay_single_quote_subst"`'
-enable_dlopen='`$ECHO "$enable_dlopen" | $SED "$delay_single_quote_subst"`'
-enable_dlopen_self='`$ECHO "$enable_dlopen_self" | $SED "$delay_single_quote_subst"`'
-enable_dlopen_self_static='`$ECHO "$enable_dlopen_self_static" | $SED "$delay_single_quote_subst"`'
-old_striplib='`$ECHO "$old_striplib" | $SED "$delay_single_quote_subst"`'
-striplib='`$ECHO "$striplib" | $SED "$delay_single_quote_subst"`'
-
-LTCC='$LTCC'
-LTCFLAGS='$LTCFLAGS'
-compiler='$compiler_DEFAULT'
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-\$1
-_LTECHO_EOF'
-}
-
-# Quote evaled strings.
-for var in SHELL \
-ECHO \
-PATH_SEPARATOR \
-SED \
-GREP \
-EGREP \
-FGREP \
-LD \
-NM \
-LN_S \
-lt_SP2NL \
-lt_NL2SP \
-reload_flag \
-FILECMD \
-OBJDUMP \
-deplibs_check_method \
-file_magic_cmd \
-file_magic_glob \
-want_nocaseglob \
-DLLTOOL \
-sharedlib_from_linklib_cmd \
-AR \
-archiver_list_spec \
-STRIP \
-RANLIB \
-CC \
-CFLAGS \
-compiler \
-lt_cv_sys_global_symbol_pipe \
-lt_cv_sys_global_symbol_to_cdecl \
-lt_cv_sys_global_symbol_to_import \
-lt_cv_sys_global_symbol_to_c_name_address \
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix \
-lt_cv_nm_interface \
-nm_file_list_spec \
-lt_cv_truncate_bin \
-lt_prog_compiler_no_builtin_flag \
-lt_prog_compiler_pic \
-lt_prog_compiler_wl \
-lt_prog_compiler_static \
-lt_cv_prog_compiler_c_o \
-need_locks \
-MANIFEST_TOOL \
-DSYMUTIL \
-NMEDIT \
-LIPO \
-OTOOL \
-OTOOL64 \
-shrext_cmds \
-export_dynamic_flag_spec \
-whole_archive_flag_spec \
-compiler_needs_object \
-with_gnu_ld \
-allow_undefined_flag \
-no_undefined_flag \
-hardcode_libdir_flag_spec \
-hardcode_libdir_separator \
-exclude_expsyms \
-include_expsyms \
-file_list_spec \
-variables_saved_for_relink \
-libname_spec \
-library_names_spec \
-soname_spec \
-install_override_mode \
-finish_eval \
-old_striplib \
-striplib; do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[\\\\\\\`\\"\\\$]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-# Double-quote double-evaled strings.
-for var in reload_cmds \
-old_postinstall_cmds \
-old_postuninstall_cmds \
-old_archive_cmds \
-extract_expsyms_cmds \
-old_archive_from_new_cmds \
-old_archive_from_expsyms_cmds \
-archive_cmds \
-archive_expsym_cmds \
-module_cmds \
-module_expsym_cmds \
-export_symbols_cmds \
-prelink_cmds \
-postlink_cmds \
-postinstall_cmds \
-postuninstall_cmds \
-finish_cmds \
-sys_lib_search_path_spec \
-configure_time_dlsearch_path \
-configure_time_lt_sys_library_path; do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[\\\\\\\`\\"\\\$]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-ac_aux_dir='$ac_aux_dir'
-
-# See if we are running on zsh, and set the options that allow our
-# commands through without removal of \ escapes INIT.
-if test -n "\${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-
-    PACKAGE='$PACKAGE'
-    VERSION='$VERSION'
-    RM='$RM'
-    ofile='$ofile'
-
-
-
-
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-
-# Handling of arguments.
-for ac_config_target in $ac_config_targets
-do
-  case $ac_config_target in
-    "config.h") CONFIG_HEADERS="$CONFIG_HEADERS config.h" ;;
-    "depfiles") CONFIG_COMMANDS="$CONFIG_COMMANDS depfiles" ;;
-    "libtool") CONFIG_COMMANDS="$CONFIG_COMMANDS libtool" ;;
-    "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;;
-    "man/Makefile") CONFIG_FILES="$CONFIG_FILES man/Makefile" ;;
-    "src/Makefile") CONFIG_FILES="$CONFIG_FILES src/Makefile" ;;
-    "specs/Makefile") CONFIG_FILES="$CONFIG_FILES specs/Makefile" ;;
-    "xext.pc") CONFIG_FILES="$CONFIG_FILES xext.pc" ;;
-
-  *) as_fn_error $? "invalid argument: '$ac_config_target'" "$LINENO" 5;;
-  esac
-done
-
-
-# If the user did not use the arguments to specify the items to instantiate,
-# then the envvar interface is used.  Set only those that are not.
-# We use the long form for the default assignment because of an extremely
-# bizarre bug on SunOS 4.1.3.
-if $ac_need_defaults; then
-  test ${CONFIG_FILES+y} || CONFIG_FILES=$config_files
-  test ${CONFIG_HEADERS+y} || CONFIG_HEADERS=$config_headers
-  test ${CONFIG_COMMANDS+y} || CONFIG_COMMANDS=$config_commands
-fi
-
-# Have a temporary directory for convenience.  Make it in the build tree
-# simply because there is no reason against having it here, and in addition,
-# creating and moving files from /tmp can sometimes cause problems.
-# Hook for its removal unless debugging.
-# Note that there is a small window in which the directory will not be cleaned:
-# after its creation but before its name has been assigned to '$tmp'.
-$debug ||
-{
-  tmp= ac_tmp=
-  trap 'exit_status=$?
-  : "${ac_tmp:=$tmp}"
-  { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status
-' 0
-  trap 'as_fn_exit 1' 1 2 13 15
-}
-# Create a (secure) tmp directory for tmp files.
-
-{
-  tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` &&
-  test -d "$tmp"
-}  ||
-{
-  tmp=./conf$$-$RANDOM
-  (umask 077 && mkdir "$tmp")
-} || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5
-ac_tmp=$tmp
-
-# Set up the scripts for CONFIG_FILES section.
-# No need to generate them if there are no CONFIG_FILES.
-# This happens for instance with './config.status config.h'.
-if test -n "$CONFIG_FILES"; then
-
-
-ac_cr=`echo X | tr X '\015'`
-# On cygwin, bash can eat \r inside `` if the user requested igncr.
-# But we know of no other shell where ac_cr would be empty at this
-# point, so we can use a bashism as a fallback.
-if test "x$ac_cr" = x; then
-  eval ac_cr=\$\'\\r\'
-fi
-ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' </dev/null 2>/dev/null`
-if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then
-  ac_cs_awk_cr='\\r'
-else
-  ac_cs_awk_cr=$ac_cr
-fi
-
-echo 'BEGIN {' >"$ac_tmp/subs1.awk" &&
-_ACEOF
-
-
-{
-  echo "cat >conf$$subs.awk <<_ACEOF" &&
-  echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' &&
-  echo "_ACEOF"
-} >conf$$subs.sh ||
-  as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-ac_delim_num=`echo "$ac_subst_vars" | sed -n '$='`
-ac_delim='%!_!# '
-for ac_last_try in false false false false false :; do
-  . ./conf$$subs.sh ||
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-
-  ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | sed -n '$='`
-  if test $ac_delim_n = $ac_delim_num; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-rm -f conf$$subs.sh
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK &&
-_ACEOF
-sed -n '
-h
-s/^/S["/; s/!.*/"]=/
-p
-g
-s/^[^!]*!//
-:repl
-t repl
-s/'"$ac_delim"'$//
-t delim
-:nl
-h
-s/\(.\{148\}\)..*/\1/
-t more1
-s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/
-p
-n
-b repl
-:more1
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t nl
-:delim
-h
-s/\(.\{148\}\)..*/\1/
-t more2
-s/["\\]/\\&/g; s/^/"/; s/$/"/
-p
-b
-:more2
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t delim
-' <conf$$subs.awk | sed '
-/^[^""]/{
-  N
-  s/\n//
-}
-' >>"$CONFIG_STATUS" || ac_write_fail=1
-rm -f conf$$subs.awk
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-_ACAWK
-cat >>"\$ac_tmp/subs1.awk" <<_ACAWK &&
-  for (key in S) S_is_set[key] = 1
-  FS = ""
-
-}
-{
-  line = $ 0
-  nfields = split(line, field, "@")
-  substed = 0
-  len = length(field[1])
-  for (i = 2; i < nfields; i++) {
-    key = field[i]
-    keylen = length(key)
-    if (S_is_set[key]) {
-      value = S[key]
-      line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3)
-      len += length(value) + length(field[++i])
-      substed = 1
-    } else
-      len += 1 + keylen
-  }
-
-  print line
-}
-
-_ACAWK
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then
-  sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g"
-else
-  cat
-fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \
-  || as_fn_error $? "could not setup config files machinery" "$LINENO" 5
-_ACEOF
-
-# VPATH may cause trouble with some makes, so we remove sole $(srcdir),
-# ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and
-# trailing colons and then remove the whole line if VPATH becomes empty
-# (actually we leave an empty line to preserve line numbers).
-if test "x$srcdir" = x.; then
-  ac_vpsub='/^[	 ]*VPATH[	 ]*=[	 ]*/{
-h
-s///
-s/^/:/
-s/[	 ]*$/:/
-s/:\$(srcdir):/:/g
-s/:\${srcdir}:/:/g
-s/:@srcdir@:/:/g
-s/^:*//
-s/:*$//
-x
-s/\(=[	 ]*\).*/\1/
-G
-s/\n//
-s/^[^=]*=[	 ]*$//
-}'
-fi
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-fi # test -n "$CONFIG_FILES"
-
-# Set up the scripts for CONFIG_HEADERS section.
-# No need to generate them if there are no CONFIG_HEADERS.
-# This happens for instance with './config.status Makefile'.
-if test -n "$CONFIG_HEADERS"; then
-cat >"$ac_tmp/defines.awk" <<\_ACAWK ||
-BEGIN {
-_ACEOF
-
-# Transform confdefs.h into an awk script 'defines.awk', embedded as
-# here-document in config.status, that substitutes the proper values into
-# config.h.in to produce config.h.
-
-# Create a delimiter string that does not exist in confdefs.h, to ease
-# handling of long lines.
-ac_delim='%!_!# '
-for ac_last_try in false false :; do
-  ac_tt=`sed -n "/$ac_delim/p" confdefs.h`
-  if test -z "$ac_tt"; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-
-# For the awk script, D is an array of macro values keyed by name,
-# likewise P contains macro parameters if any.  Preserve backslash
-# newline sequences.
-
-ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]*
-sed -n '
-s/.\{148\}/&'"$ac_delim"'/g
-t rset
-:rset
-s/^[	 ]*#[	 ]*define[	 ][	 ]*/ /
-t def
-d
-:def
-s/\\$//
-t bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3"/p
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2"/p
-d
-:bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3\\\\\\n"\\/p
-t cont
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p
-t cont
-d
-:cont
-n
-s/.\{148\}/&'"$ac_delim"'/g
-t clear
-:clear
-s/\\$//
-t bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/"/p
-d
-:bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p
-b cont
-' <confdefs.h | sed '
-s/'"$ac_delim"'/"\\\
-"/g' >>"$CONFIG_STATUS" || ac_write_fail=1
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-  for (key in D) D_is_set[key] = 1
-  FS = ""
-}
-/^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ {
-  line = \$ 0
-  split(line, arg, " ")
-  if (arg[1] == "#") {
-    defundef = arg[2]
-    mac1 = arg[3]
-  } else {
-    defundef = substr(arg[1], 2)
-    mac1 = arg[2]
-  }
-  split(mac1, mac2, "(") #)
-  macro = mac2[1]
-  prefix = substr(line, 1, index(line, defundef) - 1)
-  if (D_is_set[macro]) {
-    suffix = P[macro] D[macro]
-    while (suffix ~ /[\t ]$/) {
-      suffix = substr(suffix, 1, length(suffix) - 1)
-    }
-    # Preserve the white space surrounding the "#".
-    print prefix "define", macro suffix
-    next
-  } else {
-    # Replace #undef with comments.  This is necessary, for example,
-    # in the case of _POSIX_SOURCE, which is predefined and required
-    # on some systems where configure will not decide to define it.
-    if (defundef == "undef") {
-      print "/*", prefix defundef, macro, "*/"
-      next
-    }
-  }
-}
-{ print }
-_ACAWK
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-  as_fn_error $? "could not setup config headers machinery" "$LINENO" 5
-fi # test -n "$CONFIG_HEADERS"
-
-
-eval set X "  :F $CONFIG_FILES  :H $CONFIG_HEADERS    :C $CONFIG_COMMANDS"
-shift
-for ac_tag
-do
-  case $ac_tag in
-  :[FHLC]) ac_mode=$ac_tag; continue;;
-  esac
-  case $ac_mode$ac_tag in
-  :[FHL]*:*);;
-  :L* | :C*:*) as_fn_error $? "invalid tag '$ac_tag'" "$LINENO" 5;;
-  :[FH]-) ac_tag=-:-;;
-  :[FH]*) ac_tag=$ac_tag:$ac_tag.in;;
-  esac
-  ac_save_IFS=$IFS
-  IFS=:
-  set x $ac_tag
-  IFS=$ac_save_IFS
-  shift
-  ac_file=$1
-  shift
-
-  case $ac_mode in
-  :L) ac_source=$1;;
-  :[FH])
-    ac_file_inputs=
-    for ac_f
-    do
-      case $ac_f in
-      -) ac_f="$ac_tmp/stdin";;
-      *) # Look for the file first in the build tree, then in the source tree
-	 # (if the path is not absolute).  The absolute path cannot be DOS-style,
-	 # because $ac_f cannot contain ':'.
-	 test -f "$ac_f" ||
-	   case $ac_f in
-	   [\\/$]*) false;;
-	   *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";;
-	   esac ||
-	   as_fn_error 1 "cannot find input file: '$ac_f'" "$LINENO" 5;;
-      esac
-      case $ac_f in *\'*) ac_f=`printf '%s\n' "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac
-      as_fn_append ac_file_inputs " '$ac_f'"
-    done
-
-    # Let's still pretend it is 'configure' which instantiates (i.e., don't
-    # use $as_me), people would be surprised to read:
-    #    /* config.h.  Generated by config.status.  */
-    configure_input='Generated from '`
-	  printf '%s\n' "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g'
-	`' by configure.'
-    if test x"$ac_file" != x-; then
-      configure_input="$ac_file.  $configure_input"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5
-printf '%s\n' "$as_me: creating $ac_file" >&6;}
-    fi
-    # Neutralize special characters interpreted by sed in replacement strings.
-    case $configure_input in #(
-    *\&* | *\|* | *\\* )
-       ac_sed_conf_input=`printf '%s\n' "$configure_input" |
-       sed 's/[\\\\&|]/\\\\&/g'`;; #(
-    *) ac_sed_conf_input=$configure_input;;
-    esac
-
-    case $ac_tag in
-    *:-:* | *:-) cat >"$ac_tmp/stdin" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;;
-    esac
-    ;;
-  esac
-
-  ac_dir=`$as_dirname -- "$ac_file" ||
-$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$ac_file" : 'X\(//\)[^/]' \| \
-	 X"$ac_file" : 'X\(//\)$' \| \
-	 X"$ac_file" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$ac_file" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  as_dir="$ac_dir"; as_fn_mkdir_p
-  ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`printf '%s\n' "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`printf '%s\n' "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-
-  case $ac_mode in
-  :F)
-  #
-  # CONFIG_FILE
-  #
-
-  case $INSTALL in
-  [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;;
-  *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;;
-  esac
-  ac_MKDIR_P=$MKDIR_P
-  case $MKDIR_P in
-  [\\/$]* | ?:[\\/]* ) ;;
-  */*) ac_MKDIR_P=$ac_top_build_prefix$MKDIR_P ;;
-  esac
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# If the template does not know about datarootdir, expand it.
-# FIXME: This hack should be removed a few years after 2.60.
-ac_datarootdir_hack=; ac_datarootdir_seen=
-ac_sed_dataroot='
-/datarootdir/ {
-  p
-  q
-}
-/@datadir@/p
-/@docdir@/p
-/@infodir@/p
-/@localedir@/p
-/@mandir@/p'
-case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in
-*datarootdir*) ac_datarootdir_seen=yes;;
-*@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*)
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5
-printf '%s\n' "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;}
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-  ac_datarootdir_hack='
-  s&@datadir@&$datadir&g
-  s&@docdir@&$docdir&g
-  s&@infodir@&$infodir&g
-  s&@localedir@&$localedir&g
-  s&@mandir@&$mandir&g
-  s&\\\${datarootdir}&$datarootdir&g' ;;
-esac
-_ACEOF
-
-# Neutralize VPATH when '$srcdir' = '.'.
-# Shell code in configure.ac might set extrasub.
-# FIXME: do we really want to maintain this feature?
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-ac_sed_extra="$ac_vpsub
-$extrasub
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-:t
-/@[a-zA-Z_][a-zA-Z_0-9]*@/!b
-s|@configure_input@|$ac_sed_conf_input|;t t
-s&@top_builddir@&$ac_top_builddir_sub&;t t
-s&@top_build_prefix@&$ac_top_build_prefix&;t t
-s&@srcdir@&$ac_srcdir&;t t
-s&@abs_srcdir@&$ac_abs_srcdir&;t t
-s&@top_srcdir@&$ac_top_srcdir&;t t
-s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t
-s&@builddir@&$ac_builddir&;t t
-s&@abs_builddir@&$ac_abs_builddir&;t t
-s&@abs_top_builddir@&$ac_abs_top_builddir&;t t
-s&@INSTALL@&$ac_INSTALL&;t t
-s&@MKDIR_P@&$ac_MKDIR_P&;t t
-$ac_datarootdir_hack
-"
-eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \
-  >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-
-test -z "$ac_datarootdir_hack$ac_datarootdir_seen" &&
-  { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } &&
-  { ac_out=`sed -n '/^[	 ]*datarootdir[	 ]*:*=/p' \
-      "$ac_tmp/out"`; test -z "$ac_out"; } &&
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable 'datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&5
-printf '%s\n' "$as_me: WARNING: $ac_file contains a reference to the variable 'datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&2;}
-
-  rm -f "$ac_tmp/stdin"
-  case $ac_file in
-  -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";;
-  *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";;
-  esac \
-  || as_fn_error $? "could not create $ac_file" "$LINENO" 5
- ;;
-  :H)
-  #
-  # CONFIG_HEADER
-  #
-  if test x"$ac_file" != x-; then
-    {
-      printf '%s\n' "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs"
-    } >"$ac_tmp/config.h" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5
-printf '%s\n' "$as_me: $ac_file is unchanged" >&6;}
-    else
-      rm -f "$ac_file"
-      mv "$ac_tmp/config.h" "$ac_file" \
-	|| as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    fi
-  else
-    printf '%s\n' "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \
-      || as_fn_error $? "could not create -" "$LINENO" 5
-  fi
-# Compute "$ac_file"'s index in $config_headers.
-_am_arg="$ac_file"
-_am_stamp_count=1
-for _am_header in $config_headers :; do
-  case $_am_header in
-    $_am_arg | $_am_arg:* )
-      break ;;
-    * )
-      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
-  esac
-done
-echo "timestamp for $_am_arg" >`$as_dirname -- "$_am_arg" ||
-$as_expr X"$_am_arg" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$_am_arg" : 'X\(//\)[^/]' \| \
-	 X"$_am_arg" : 'X\(//\)$' \| \
-	 X"$_am_arg" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$_am_arg" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`/stamp-h$_am_stamp_count
- ;;
-  
-  :C)  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: executing $ac_file commands" >&5
-printf '%s\n' "$as_me: executing $ac_file commands" >&6;}
- ;;
-  esac
-
-
-  case $ac_file$ac_mode in
-    "depfiles":C) test x"$AMDEP_TRUE" != x"" || {
-  # Older Autoconf quotes --file arguments for eval, but not when files
-  # are listed without --file.  Let's play safe and only enable the eval
-  # if we detect the quoting.
-  # TODO: see whether this extra hack can be removed once we start
-  # requiring Autoconf 2.70 or later.
-  case $CONFIG_FILES in @%:@(
-  *\'*) :
-    eval set x "$CONFIG_FILES" ;; @%:@(
-  *) :
-    set x $CONFIG_FILES ;; @%:@(
-  *) :
-     ;;
-esac
-  shift
-  # Used to flag and report bootstrapping failures.
-  am_rc=0
-  for am_mf
-  do
-    # Strip MF so we end up with the name of the file.
-    am_mf=`printf '%s\n' "$am_mf" | sed -e 's/:.*$//'`
-    # Check whether this is an Automake generated Makefile which includes
-    # dependency-tracking related rules and includes.
-    # Grep'ing the whole file directly is not great: AIX grep has a line
-    # limit of 2048, but all sed's we know have understand at least 4000.
-    sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \
-      || continue
-    am_dirpart=`$as_dirname -- "$am_mf" ||
-$as_expr X"$am_mf" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$am_mf" : 'X\(//\)[^/]' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$am_mf" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    am_filepart=`$as_basename -- "$am_mf" ||
-$as_expr X/"$am_mf" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$am_mf" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    { echo "$as_me:$LINENO: cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles" >&5
-   (cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } || am_rc=$?
-  done
-  if test $am_rc -ne 0; then
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "Something went wrong bootstrapping makefile fragments
-    for automatic dependency tracking.  If GNU make was not used, consider
-    re-running the configure script with MAKE=\"gmake\" (or whatever is
-    necessary).  You can also try re-running configure with the
-    '--disable-dependency-tracking' option to at least be able to build
-    the package (albeit without support for automatic dependency tracking).
-See 'config.log' for more details" "$LINENO" 5; }
-  fi
-  { am_dirpart=; unset am_dirpart;}
-  { am_filepart=; unset am_filepart;}
-  { am_mf=; unset am_mf;}
-  { am_rc=; unset am_rc;}
-  rm -f conftest-deps.mk
-}
- ;;
-    "libtool":C) 
-    
-    # See if we are running on zsh, and set the options that allow our
-    # commands through without removal of \ escapes.
-    if test -n "${ZSH_VERSION+set}"; then
-      setopt NO_GLOB_SUBST
-    fi
-
-    cfgfile=${ofile}T
-    trap "$RM \"$cfgfile\"; exit 1" 1 2 15
-    $RM "$cfgfile"
-
-    cat <<_LT_EOF >> "$cfgfile"
-#! $SHELL
-# Generated automatically by $as_me ($PACKAGE) $VERSION
-# NOTE: Changes made to this file will be lost: look at ltmain.sh.
-
-# Provide generalized library-building support services.
-# Written by Gordon Matzigkeit, 1996
-
-# Copyright (C) 2024 Free Software Foundation, Inc.
-# This is free software; see the source for copying conditions.  There is NO
-# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-
-# GNU Libtool is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program or library that is built
-# using GNU Libtool, you may include this file under the  same
-# distribution terms that you use for the rest of that program.
-#
-# GNU Libtool is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-
-# The names of the tagged configurations supported by this script.
-available_tags=''
-
-# Configured defaults for sys_lib_dlsearch_path munging.
-: \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"}
-
-# ### BEGIN LIBTOOL CONFIG
-
-# Which release of libtool.m4 was used?
-macro_version=$macro_version
-macro_revision=$macro_revision
-
-# Whether or not to build shared libraries.
-build_libtool_libs=$enable_shared
-
-# Whether or not to build static libraries.
-build_old_libs=$enable_static
-
-# What type of objects to build.
-pic_mode=$pic_mode
-
-# Whether or not to optimize for fast installation.
-fast_install=$enable_fast_install
-
-# Shared archive member basename,for filename based shared library versioning on AIX.
-shared_archive_member_spec=$shared_archive_member_spec
-
-# Shell to use when invoking shell scripts.
-SHELL=$lt_SHELL
-
-# An echo program that protects backslashes.
-ECHO=$lt_ECHO
-
-# The PATH separator for the build system.
-PATH_SEPARATOR=$lt_PATH_SEPARATOR
-
-# The host system.
-host_alias=$host_alias
-host=$host
-host_os=$host_os
-
-# The build system.
-build_alias=$build_alias
-build=$build
-build_os=$build_os
-
-# A sed program that does not truncate output.
-SED=$lt_SED
-
-# Sed that helps us avoid accidentally triggering echo(1) options like -n.
-Xsed="\$SED -e 1s/^X//"
-
-# A grep program that handles long lines.
-GREP=$lt_GREP
-
-# An ERE matcher.
-EGREP=$lt_EGREP
-
-# A literal string matcher.
-FGREP=$lt_FGREP
-
-# A BSD- or MS-compatible name lister.
-NM=$lt_NM
-
-# Whether we need soft or hard links.
-LN_S=$lt_LN_S
-
-# What is the maximum length of a command?
-max_cmd_len=$max_cmd_len
-
-# Object file suffix (normally "o").
-objext=$ac_objext
-
-# Executable file suffix (normally "").
-exeext=$exeext
-
-# whether the shell understands "unset".
-lt_unset=$lt_unset
-
-# turn spaces into newlines.
-SP2NL=$lt_lt_SP2NL
-
-# turn newlines into spaces.
-NL2SP=$lt_lt_NL2SP
-
-# convert \$build file names to \$host format.
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-
-# convert \$build files to toolchain format.
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-
-# A file(cmd) program that detects file types.
-FILECMD=$lt_FILECMD
-
-# An object symbol dumper.
-OBJDUMP=$lt_OBJDUMP
-
-# Method to check whether dependent libraries are shared objects.
-deplibs_check_method=$lt_deplibs_check_method
-
-# Command to use when deplibs_check_method = "file_magic".
-file_magic_cmd=$lt_file_magic_cmd
-
-# How to find potential files when deplibs_check_method = "file_magic".
-file_magic_glob=$lt_file_magic_glob
-
-# Find potential files using nocaseglob when deplibs_check_method = "file_magic".
-want_nocaseglob=$lt_want_nocaseglob
-
-# DLL creation program.
-DLLTOOL=$lt_DLLTOOL
-
-# Command to associate shared and link libraries.
-sharedlib_from_linklib_cmd=$lt_sharedlib_from_linklib_cmd
-
-# The archiver.
-AR=$lt_AR
-
-# Flags to create an archive (by configure).
-lt_ar_flags=$lt_ar_flags
-
-# Flags to create an archive.
-AR_FLAGS=\@S|@{ARFLAGS-"\@S|@lt_ar_flags"}
-
-# How to feed a file listing to the archiver.
-archiver_list_spec=$lt_archiver_list_spec
-
-# A symbol stripping program.
-STRIP=$lt_STRIP
-
-# Commands used to install an old-style archive.
-RANLIB=$lt_RANLIB
-old_postinstall_cmds=$lt_old_postinstall_cmds
-old_postuninstall_cmds=$lt_old_postuninstall_cmds
-
-# Whether to use a lock for old archive extraction.
-lock_old_archive_extraction=$lock_old_archive_extraction
-
-# A C compiler.
-LTCC=$lt_CC
-
-# LTCC compiler flags.
-LTCFLAGS=$lt_CFLAGS
-
-# Take the output of nm and produce a listing of raw symbols and C names.
-global_symbol_pipe=$lt_lt_cv_sys_global_symbol_pipe
-
-# Transform the output of nm in a proper C declaration.
-global_symbol_to_cdecl=$lt_lt_cv_sys_global_symbol_to_cdecl
-
-# Transform the output of nm into a list of symbols to manually relocate.
-global_symbol_to_import=$lt_lt_cv_sys_global_symbol_to_import
-
-# Transform the output of nm in a C name address pair.
-global_symbol_to_c_name_address=$lt_lt_cv_sys_global_symbol_to_c_name_address
-
-# Transform the output of nm in a C name address pair when lib prefix is needed.
-global_symbol_to_c_name_address_lib_prefix=$lt_lt_cv_sys_global_symbol_to_c_name_address_lib_prefix
-
-# The name lister interface.
-nm_interface=$lt_lt_cv_nm_interface
-
-# Specify filename containing input files for \$NM.
-nm_file_list_spec=$lt_nm_file_list_spec
-
-# The root where to search for dependent libraries,and where our libraries should be installed.
-lt_sysroot=$lt_sysroot
-
-# Command to truncate a binary pipe.
-lt_truncate_bin=$lt_lt_cv_truncate_bin
-
-# The name of the directory that contains temporary libtool files.
-objdir=$objdir
-
-# Used to examine libraries when file_magic_cmd begins with "file".
-MAGIC_CMD=$MAGIC_CMD
-
-# Must we lock files when doing compilation?
-need_locks=$lt_need_locks
-
-# Manifest tool.
-MANIFEST_TOOL=$lt_MANIFEST_TOOL
-
-# Tool to manipulate archived DWARF debug symbol files on Mac OS X.
-DSYMUTIL=$lt_DSYMUTIL
-
-# Tool to change global to local symbols on Mac OS X.
-NMEDIT=$lt_NMEDIT
-
-# Tool to manipulate fat objects and archives on Mac OS X.
-LIPO=$lt_LIPO
-
-# ldd/readelf like tool for Mach-O binaries on Mac OS X.
-OTOOL=$lt_OTOOL
-
-# ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4.
-OTOOL64=$lt_OTOOL64
-
-# Old archive suffix (normally "a").
-libext=$libext
-
-# Shared library suffix (normally ".so").
-shrext_cmds=$lt_shrext_cmds
-
-# The commands to extract the exported symbol list from a shared archive.
-extract_expsyms_cmds=$lt_extract_expsyms_cmds
-
-# Variables whose values should be saved in libtool wrapper scripts and
-# restored at link time.
-variables_saved_for_relink=$lt_variables_saved_for_relink
-
-# Do we need the "lib" prefix for modules?
-need_lib_prefix=$need_lib_prefix
-
-# Do we need a version for libraries?
-need_version=$need_version
-
-# Library versioning type.
-version_type=$version_type
-
-# Shared library runtime path variable.
-runpath_var=$runpath_var
-
-# Shared library path variable.
-shlibpath_var=$shlibpath_var
-
-# Is shlibpath searched before the hard-coded library search path?
-shlibpath_overrides_runpath=$shlibpath_overrides_runpath
-
-# Format of library name prefix.
-libname_spec=$lt_libname_spec
-
-# List of archive names.  First name is the real one, the rest are links.
-# The last name is the one that the linker finds with -lNAME
-library_names_spec=$lt_library_names_spec
-
-# The coded name of the library, if different from the real name.
-soname_spec=$lt_soname_spec
-
-# Permission mode override for installation of shared libraries.
-install_override_mode=$lt_install_override_mode
-
-# Command to use after installation of a shared archive.
-postinstall_cmds=$lt_postinstall_cmds
-
-# Command to use after uninstallation of a shared archive.
-postuninstall_cmds=$lt_postuninstall_cmds
-
-# Commands used to finish a libtool library installation in a directory.
-finish_cmds=$lt_finish_cmds
-
-# As "finish_cmds", except a single script fragment to be evaled but
-# not shown.
-finish_eval=$lt_finish_eval
-
-# Whether we should hardcode library paths into libraries.
-hardcode_into_libs=$hardcode_into_libs
-
-# Compile-time system search path for libraries.
-sys_lib_search_path_spec=$lt_sys_lib_search_path_spec
-
-# Detected run-time system search path for libraries.
-sys_lib_dlsearch_path_spec=$lt_configure_time_dlsearch_path
-
-# Explicit LT_SYS_LIBRARY_PATH set during ./configure time.
-configure_time_lt_sys_library_path=$lt_configure_time_lt_sys_library_path
-
-# Whether dlopen is supported.
-dlopen_support=$enable_dlopen
-
-# Whether dlopen of programs is supported.
-dlopen_self=$enable_dlopen_self
-
-# Whether dlopen of statically linked programs is supported.
-dlopen_self_static=$enable_dlopen_self_static
-
-# Commands to strip libraries.
-old_striplib=$lt_old_striplib
-striplib=$lt_striplib
-
-
-# The linker used to build libraries.
-LD=$lt_LD
-
-# How to create reloadable object files.
-reload_flag=$lt_reload_flag
-reload_cmds=$lt_reload_cmds
-
-# Commands used to build an old-style archive.
-old_archive_cmds=$lt_old_archive_cmds
-
-# A language specific compiler.
-CC=$lt_compiler
-
-# Is the compiler the GNU compiler?
-with_gcc=$GCC
-
-# Compiler flag to turn off builtin functions.
-no_builtin_flag=$lt_lt_prog_compiler_no_builtin_flag
-
-# Additional compiler flags for building library objects.
-pic_flag=$lt_lt_prog_compiler_pic
-
-# How to pass a linker flag through the compiler.
-wl=$lt_lt_prog_compiler_wl
-
-# Compiler flag to prevent dynamic linking.
-link_static_flag=$lt_lt_prog_compiler_static
-
-# Does compiler simultaneously support -c and -o options?
-compiler_c_o=$lt_lt_cv_prog_compiler_c_o
-
-# Whether or not to add -lc for building shared libraries.
-build_libtool_need_lc=$archive_cmds_need_lc
-
-# Whether or not to disallow shared libs when runtime libs are static.
-allow_libtool_libs_with_static_runtimes=$enable_shared_with_static_runtimes
-
-# Compiler flag to allow reflexive dlopens.
-export_dynamic_flag_spec=$lt_export_dynamic_flag_spec
-
-# Compiler flag to generate shared objects directly from archives.
-whole_archive_flag_spec=$lt_whole_archive_flag_spec
-
-# Whether the compiler copes with passing no objects directly.
-compiler_needs_object=$lt_compiler_needs_object
-
-# Create an old-style archive from a shared archive.
-old_archive_from_new_cmds=$lt_old_archive_from_new_cmds
-
-# Create a temporary old-style archive to link instead of a shared archive.
-old_archive_from_expsyms_cmds=$lt_old_archive_from_expsyms_cmds
-
-# Commands used to build a shared archive.
-archive_cmds=$lt_archive_cmds
-archive_expsym_cmds=$lt_archive_expsym_cmds
-
-# Commands used to build a loadable module if different from building
-# a shared archive.
-module_cmds=$lt_module_cmds
-module_expsym_cmds=$lt_module_expsym_cmds
-
-# Whether we are building with GNU ld or not.
-with_gnu_ld=$lt_with_gnu_ld
-
-# Flag that allows shared libraries with undefined symbols to be built.
-allow_undefined_flag=$lt_allow_undefined_flag
-
-# Flag that enforces no undefined symbols.
-no_undefined_flag=$lt_no_undefined_flag
-
-# Flag to hardcode \$libdir into a binary during linking.
-# This must work even if \$libdir does not exist
-hardcode_libdir_flag_spec=$lt_hardcode_libdir_flag_spec
-
-# Whether we need a single "-rpath" flag with a separated argument.
-hardcode_libdir_separator=$lt_hardcode_libdir_separator
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary.
-hardcode_direct=$hardcode_direct
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary and the resulting library dependency is
-# "absolute",i.e. impossible to change by setting \$shlibpath_var if the
-# library is relocated.
-hardcode_direct_absolute=$hardcode_direct_absolute
-
-# Set to "yes" if using the -LDIR flag during linking hardcodes DIR
-# into the resulting binary.
-hardcode_minus_L=$hardcode_minus_L
-
-# Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR
-# into the resulting binary.
-hardcode_shlibpath_var=$hardcode_shlibpath_var
-
-# Set to "yes" if building a shared library automatically hardcodes DIR
-# into the library and all subsequent libraries and executables linked
-# against it.
-hardcode_automatic=$hardcode_automatic
-
-# Set to yes if linker adds runtime paths of dependent libraries
-# to runtime path list.
-inherit_rpath=$inherit_rpath
-
-# Whether libtool must link a program against all its dependency libraries.
-link_all_deplibs=$link_all_deplibs
-
-# Set to "yes" if exported symbols are required.
-always_export_symbols=$always_export_symbols
-
-# The commands to list exported symbols.
-export_symbols_cmds=$lt_export_symbols_cmds
-
-# Symbols that should not be listed in the preloaded symbols.
-exclude_expsyms=$lt_exclude_expsyms
-
-# Symbols that must always be exported.
-include_expsyms=$lt_include_expsyms
-
-# Commands necessary for linking programs (against libraries) with templates.
-prelink_cmds=$lt_prelink_cmds
-
-# Commands necessary for finishing linking programs.
-postlink_cmds=$lt_postlink_cmds
-
-# Specify filename containing input files.
-file_list_spec=$lt_file_list_spec
-
-# How to hardcode a shared library path into an executable.
-hardcode_action=$hardcode_action
-
-# ### END LIBTOOL CONFIG
-
-_LT_EOF
-
-    cat <<'_LT_EOF' >> "$cfgfile"
-
-# ### BEGIN FUNCTIONS SHARED WITH CONFIGURE
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x@S|@2 in
-    x)
-        ;;
-    *:)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\"
-        ;;
-    x:*)
-        eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\"
-        ;;
-    *)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in @S|@*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-
-# ### END FUNCTIONS SHARED WITH CONFIGURE
-
-_LT_EOF
-
-  case $host_os in
-  aix3*)
-    cat <<\_LT_EOF >> "$cfgfile"
-# AIX sometimes has problems with the GCC collect2 program.  For some
-# reason, if we set the COLLECT_NAMES environment variable, the problems
-# vanish in a puff of smoke.
-if test set != "${COLLECT_NAMES+set}"; then
-  COLLECT_NAMES=
-  export COLLECT_NAMES
-fi
-_LT_EOF
-    ;;
-  esac
-
-  
-  
-ltmain=$ac_aux_dir/ltmain.sh
-
-
-  # We use sed instead of cat because bash on DJGPP gets confused if
-  # if finds mixed CR/LF and LF-only lines.  Since sed operates in
-  # text mode, it properly converts lines to CR/LF.  This bash problem
-  # is reportedly fixed, but why not run on old versions too?
-  $SED '$q' "$ltmain" >> "$cfgfile" \
-     || (rm -f "$cfgfile"; exit 1)
-
-   mv -f "$cfgfile" "$ofile" ||
-    (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile")
-  chmod +x "$ofile"
-
- ;;
-
-  esac
-done # for ac_tag
-
-
-as_fn_exit 0
-_ACEOF
-ac_clean_CONFIG_STATUS=
-
-test $ac_write_fail = 0 ||
-  as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5
-
-
-# configure is writing to config.log, and then calls config.status.
-# config.status does its own redirection, appending to config.log.
-# Unfortunately, on DOS this fails, as config.log is still kept open
-# by configure, so config.status won't be able to write to it; its
-# output is simply discarded.  So we exec the FD to /dev/null,
-# effectively closing config.log, so it can be properly (re)opened and
-# appended to by config.status.  When coming back to configure, we
-# need to make the FD available again.
-if test "$no_create" != yes; then
-  ac_cs_success=:
-  case $CONFIG_STATUS in @%:@(
-  -*) :
-    ac_no_opts=-- ;; @%:@(
-  *) :
-    ac_no_opts= ;;
-esac
-  ac_config_status_args=
-  test "$silent" = yes &&
-    ac_config_status_args="$ac_config_status_args --quiet"
-  exec 5>/dev/null
-  $SHELL $ac_no_opts "$CONFIG_STATUS" $ac_config_status_args ||
-    ac_cs_success=false
-  exec 5>>config.log
-  # Use ||, not &&, to avoid exiting from the if with $? = 1, which
-  # would make configure fail if this is the last instruction.
-  $ac_cs_success || as_fn_exit 1
-fi
-if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5
-printf '%s\n' "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
-fi
-
-   
\ No newline at end of file
diff --git a/experiments/wasm-gui/third_party/libXext/autom4te.cache/requests b/experiments/wasm-gui/third_party/libXext/autom4te.cache/requests
deleted file mode 100644
index 535583a95..000000000
--- a/experiments/wasm-gui/third_party/libXext/autom4te.cache/requests
+++ /dev/null
@@ -1,730 +0,0 @@
-# This file was generated by Autom4te 2.73.
-# It contains the lists of macros which have been traced.
-# It can be safely removed.
-
-@request = (
-             bless( [
-                      '0',
-                      1,
-                      [
-                        '/home/linuxbrew/.linuxbrew/Cellar/autoconf/2.73/share/autoconf'
-                      ],
-                      [
-                        '/home/linuxbrew/.linuxbrew/Cellar/autoconf/2.73/share/autoconf/autoconf/autoconf.m4f',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/internal/ac-config-macro-dirs.m4',
-                        '/usr/share/aclocal/pkg.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal/ltargz.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal/ltsugar.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal/ltversion.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4',
-                        '/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/amversion.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/auxdir.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/cond.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depend.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depout.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/init.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/install-sh.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/lead-dot.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/make.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/missing.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/options.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/prog-cc-c-o.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/rmf.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/runlog.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/sanity.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/silent.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/strip.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/substnot.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/tar.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/xargsn.m4',
-                        'm4/ax_gcc_builtin.m4',
-                        'configure.ac'
-                      ],
-                      {
-                        'AC_CHECK_LIBM' => 1,
-                        'AC_CONFIG_MACRO_DIR' => 1,
-                        'AC_CONFIG_MACRO_DIR_TRACE' => 1,
-                        'AC_DEFUN' => 1,
-                        'AC_DEFUN_ONCE' => 1,
-                        'AC_DEPLIBS_CHECK_METHOD' => 1,
-                        'AC_DISABLE_FAST_INSTALL' => 1,
-                        'AC_DISABLE_SHARED' => 1,
-                        'AC_DISABLE_STATIC' => 1,
-                        'AC_ENABLE_FAST_INSTALL' => 1,
-                        'AC_ENABLE_SHARED' => 1,
-                        'AC_ENABLE_STATIC' => 1,
-                        'AC_LIBLTDL_CONVENIENCE' => 1,
-                        'AC_LIBLTDL_INSTALLABLE' => 1,
-                        'AC_LIBTOOL_COMPILER_OPTION' => 1,
-                        'AC_LIBTOOL_CONFIG' => 1,
-                        'AC_LIBTOOL_CXX' => 1,
-                        'AC_LIBTOOL_DLOPEN' => 1,
-                        'AC_LIBTOOL_DLOPEN_SELF' => 1,
-                        'AC_LIBTOOL_F77' => 1,
-                        'AC_LIBTOOL_FC' => 1,
-                        'AC_LIBTOOL_GCJ' => 1,
-                        'AC_LIBTOOL_LANG_CXX_CONFIG' => 1,
-                        'AC_LIBTOOL_LANG_C_CONFIG' => 1,
-                        'AC_LIBTOOL_LANG_F77_CONFIG' => 1,
-                        'AC_LIBTOOL_LANG_GCJ_CONFIG' => 1,
-                        'AC_LIBTOOL_LANG_RC_CONFIG' => 1,
-                        'AC_LIBTOOL_LINKER_OPTION' => 1,
-                        'AC_LIBTOOL_OBJDIR' => 1,
-                        'AC_LIBTOOL_PICMODE' => 1,
-                        'AC_LIBTOOL_POSTDEP_PREDEP' => 1,
-                        'AC_LIBTOOL_PROG_CC_C_O' => 1,
-                        'AC_LIBTOOL_PROG_COMPILER_NO_RTTI' => 1,
-                        'AC_LIBTOOL_PROG_COMPILER_PIC' => 1,
-                        'AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH' => 1,
-                        'AC_LIBTOOL_PROG_LD_SHLIBS' => 1,
-                        'AC_LIBTOOL_RC' => 1,
-                        'AC_LIBTOOL_SETUP' => 1,
-                        'AC_LIBTOOL_SYS_DYNAMIC_LINKER' => 1,
-                        'AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE' => 1,
-                        'AC_LIBTOOL_SYS_HARD_LINK_LOCKS' => 1,
-                        'AC_LIBTOOL_SYS_LIB_STRIP' => 1,
-                        'AC_LIBTOOL_SYS_MAX_CMD_LEN' => 1,
-                        'AC_LIBTOOL_SYS_OLD_ARCHIVE' => 1,
-                        'AC_LIBTOOL_WIN32_DLL' => 1,
-                        'AC_LIB_LTDL' => 1,
-                        'AC_LTDL_DLLIB' => 1,
-                        'AC_LTDL_DLSYM_USCORE' => 1,
-                        'AC_LTDL_ENABLE_INSTALL' => 1,
-                        'AC_LTDL_OBJDIR' => 1,
-                        'AC_LTDL_PREOPEN' => 1,
-                        'AC_LTDL_SHLIBEXT' => 1,
-                        'AC_LTDL_SHLIBPATH' => 1,
-                        'AC_LTDL_SYMBOL_USCORE' => 1,
-                        'AC_LTDL_SYSSEARCHPATH' => 1,
-                        'AC_LTDL_SYS_DLOPEN_DEPLIBS' => 1,
-                        'AC_PATH_MAGIC' => 1,
-                        'AC_PATH_TOOL_PREFIX' => 1,
-                        'AC_PROG_EGREP' => 1,
-                        'AC_PROG_LD' => 1,
-                        'AC_PROG_LD_GNU' => 1,
-                        'AC_PROG_LD_RELOAD_FLAG' => 1,
-                        'AC_PROG_LIBTOOL' => 1,
-                        'AC_PROG_NM' => 1,
-                        'AC_WITH_LTDL' => 1,
-                        'AM_AUTOMAKE_VERSION' => 1,
-                        'AM_AUX_DIR_EXPAND' => 1,
-                        'AM_CONDITIONAL' => 1,
-                        'AM_DEP_TRACK' => 1,
-                        'AM_DISABLE_SHARED' => 1,
-                        'AM_DISABLE_STATIC' => 1,
-                        'AM_ENABLE_SHARED' => 1,
-                        'AM_ENABLE_STATIC' => 1,
-                        'AM_INIT_AUTOMAKE' => 1,
-                        'AM_MAKE_INCLUDE' => 1,
-                        'AM_MISSING_HAS_RUN' => 1,
-                        'AM_MISSING_PROG' => 1,
-                        'AM_OUTPUT_DEPENDENCY_COMMANDS' => 1,
-                        'AM_PROG_CC_C_O' => 1,
-                        'AM_PROG_INSTALL_SH' => 1,
-                        'AM_PROG_INSTALL_STRIP' => 1,
-                        'AM_PROG_LD' => 1,
-                        'AM_PROG_LIBTOOL' => 1,
-                        'AM_PROG_NM' => 1,
-                        'AM_RUN_LOG' => 1,
-                        'AM_SANITY_CHECK' => 1,
-                        'AM_SET_CURRENT_AUTOMAKE_VERSION' => 1,
-                        'AM_SET_DEPDIR' => 1,
-                        'AM_SET_LEADING_DOT' => 1,
-                        'AM_SILENT_RULES' => 1,
-                        'AM_SUBST_NOTMAKE' => 1,
-                        'AU_DEFUN' => 1,
-                        'AX_GCC_BUILTIN' => 1,
-                        'LTDL_CONVENIENCE' => 1,
-                        'LTDL_INIT' => 1,
-                        'LTDL_INSTALLABLE' => 1,
-                        'LTOBSOLETE_VERSION' => 1,
-                        'LTOPTIONS_VERSION' => 1,
-                        'LTSUGAR_VERSION' => 1,
-                        'LTVERSION_VERSION' => 1,
-                        'LT_AC_PROG_EGREP' => 1,
-                        'LT_AC_PROG_GCJ' => 1,
-                        'LT_AC_PROG_RC' => 1,
-                        'LT_AC_PROG_SED' => 1,
-                        'LT_CMD_MAX_LEN' => 1,
-                        'LT_CONFIG_LTDL_DIR' => 1,
-                        'LT_FUNC_ARGZ' => 1,
-                        'LT_FUNC_DLSYM_USCORE' => 1,
-                        'LT_INIT' => 1,
-                        'LT_LANG' => 1,
-                        'LT_LIB_DLLOAD' => 1,
-                        'LT_LIB_M' => 1,
-                        'LT_OUTPUT' => 1,
-                        'LT_PATH_LD' => 1,
-                        'LT_PATH_NM' => 1,
-                        'LT_PROG_GCJ' => 1,
-                        'LT_PROG_GO' => 1,
-                        'LT_PROG_RC' => 1,
-                        'LT_SUPPORTED_TAG' => 1,
-                        'LT_SYS_DLOPEN_DEPLIBS' => 1,
-                        'LT_SYS_DLOPEN_SELF' => 1,
-                        'LT_SYS_DLSEARCH_PATH' => 1,
-                        'LT_SYS_MODULE_EXT' => 1,
-                        'LT_SYS_MODULE_PATH' => 1,
-                        'LT_SYS_SYMBOL_USCORE' => 1,
-                        'LT_WITH_LTDL' => 1,
-                        'PKG_CHECK_EXISTS' => 1,
-                        'PKG_CHECK_MODULES' => 1,
-                        'PKG_CHECK_MODULES_STATIC' => 1,
-                        'PKG_CHECK_VAR' => 1,
-                        'PKG_HAVE_DEFINE_WITH_MODULES' => 1,
-                        'PKG_HAVE_WITH_MODULES' => 1,
-                        'PKG_INSTALLDIR' => 1,
-                        'PKG_NOARCH_INSTALLDIR' => 1,
-                        'PKG_PROG_PKG_CONFIG' => 1,
-                        'PKG_WITH_MODULES' => 1,
-                        'XORG_CHANGELOG' => 1,
-                        'XORG_CHECK_DOCBOOK' => 1,
-                        'XORG_CHECK_LINKER_FLAGS' => 1,
-                        'XORG_CHECK_LINUXDOC' => 1,
-                        'XORG_CHECK_MALLOC_ZERO' => 1,
-                        'XORG_CHECK_SGML_DOCTOOLS' => 1,
-                        'XORG_COMPILER_BRAND' => 1,
-                        'XORG_COMPILER_FLAGS' => 1,
-                        'XORG_CWARNFLAGS' => 1,
-                        'XORG_DEFAULT_NOCODE_OPTIONS' => 1,
-                        'XORG_DEFAULT_OPTIONS' => 1,
-                        'XORG_ENABLE_DEVEL_DOCS' => 1,
-                        'XORG_ENABLE_DOCS' => 1,
-                        'XORG_ENABLE_INTEGRATION_TESTS' => 1,
-                        'XORG_ENABLE_SPECS' => 1,
-                        'XORG_ENABLE_UNIT_TESTS' => 1,
-                        'XORG_INSTALL' => 1,
-                        'XORG_LD_WRAP' => 1,
-                        'XORG_LINT_LIBRARY' => 1,
-                        'XORG_MANPAGE_SECTIONS' => 1,
-                        'XORG_MEMORY_CHECK_FLAGS' => 1,
-                        'XORG_PROG_RAWCPP' => 1,
-                        'XORG_RELEASE_VERSION' => 1,
-                        'XORG_STRICT_OPTION' => 1,
-                        'XORG_TESTSET_CFLAG' => 1,
-                        'XORG_WITH_ASCIIDOC' => 1,
-                        'XORG_WITH_DOXYGEN' => 1,
-                        'XORG_WITH_FOP' => 1,
-                        'XORG_WITH_GLIB' => 1,
-                        'XORG_WITH_GROFF' => 1,
-                        'XORG_WITH_LINT' => 1,
-                        'XORG_WITH_M4' => 1,
-                        'XORG_WITH_PERL' => 1,
-                        'XORG_WITH_PS2PDF' => 1,
-                        'XORG_WITH_XMLTO' => 1,
-                        'XORG_WITH_XSLTPROC' => 1,
-                        '_AC_AM_CONFIG_HEADER_HOOK' => 1,
-                        '_AC_PROG_LIBTOOL' => 1,
-                        '_AM_AUTOCONF_VERSION' => 1,
-                        '_AM_CONFIG_MACRO_DIRS' => 1,
-                        '_AM_DEPENDENCIES' => 1,
-                        '_AM_FILESYSTEM_TIMESTAMP_RESOLUTION' => 1,
-                        '_AM_IF_OPTION' => 1,
-                        '_AM_MANGLE_OPTION' => 1,
-                        '_AM_OUTPUT_DEPENDENCY_COMMANDS' => 1,
-                        '_AM_PROG_CC_C_O' => 1,
-                        '_AM_PROG_RM_F' => 1,
-                        '_AM_PROG_TAR' => 1,
-                        '_AM_PROG_XARGS_N' => 1,
-                        '_AM_SET_OPTION' => 1,
-                        '_AM_SET_OPTIONS' => 1,
-                        '_AM_SILENT_RULES' => 1,
-                        '_AM_SLEEP_FRACTIONAL_SECONDS' => 1,
-                        '_AM_SUBST_NOTMAKE' => 1,
-                        '_LTDL_SETUP' => 1,
-                        '_LT_AC_CHECK_DLFCN' => 1,
-                        '_LT_AC_FILE_LTDLL_C' => 1,
-                        '_LT_AC_LANG_CXX' => 1,
-                        '_LT_AC_LANG_CXX_CONFIG' => 1,
-                        '_LT_AC_LANG_C_CONFIG' => 1,
-                        '_LT_AC_LANG_F77' => 1,
-                        '_LT_AC_LANG_F77_CONFIG' => 1,
-                        '_LT_AC_LANG_GCJ' => 1,
-                        '_LT_AC_LANG_GCJ_CONFIG' => 1,
-                        '_LT_AC_LANG_RC_CONFIG' => 1,
-                        '_LT_AC_LOCK' => 1,
-                        '_LT_AC_PROG_CXXCPP' => 1,
-                        '_LT_AC_PROG_ECHO_BACKSLASH' => 1,
-                        '_LT_AC_SHELL_INIT' => 1,
-                        '_LT_AC_SYS_COMPILER' => 1,
-                        '_LT_AC_SYS_LIBPATH_AIX' => 1,
-                        '_LT_AC_TAGCONFIG' => 1,
-                        '_LT_AC_TAGVAR' => 1,
-                        '_LT_AC_TRY_DLOPEN_SELF' => 1,
-                        '_LT_CC_BASENAME' => 1,
-                        '_LT_COMPILER_BOILERPLATE' => 1,
-                        '_LT_COMPILER_OPTION' => 1,
-                        '_LT_DLL_DEF_P' => 1,
-                        '_LT_LIBOBJ' => 1,
-                        '_LT_LINKER_BOILERPLATE' => 1,
-                        '_LT_LINKER_OPTION' => 1,
-                        '_LT_PATH_TOOL_PREFIX' => 1,
-                        '_LT_PREPARE_SED_QUOTE_VARS' => 1,
-                        '_LT_PROG_CXX' => 1,
-                        '_LT_PROG_ECHO_BACKSLASH' => 1,
-                        '_LT_PROG_F77' => 1,
-                        '_LT_PROG_FC' => 1,
-                        '_LT_PROG_LTMAIN' => 1,
-                        '_LT_REQUIRED_DARWIN_CHECKS' => 1,
-                        '_LT_WITH_SYSROOT' => 1,
-                        '_PKG_SHORT_ERRORS_SUPPORTED' => 1,
-                        '_m4_warn' => 1,
-                        'include' => 1,
-                        'm4_include' => 1,
-                        'm4_pattern_allow' => 1,
-                        'm4_pattern_forbid' => 1
-                      }
-                    ], 'Autom4te::Request' ),
-             bless( [
-                      '1',
-                      1,
-                      [
-                        '/home/linuxbrew/.linuxbrew/Cellar/autoconf/2.73/share/autoconf'
-                      ],
-                      [
-                        '/home/linuxbrew/.linuxbrew/Cellar/autoconf/2.73/share/autoconf/autoconf/autoconf.m4f',
-                        'aclocal.m4',
-                        'configure.ac'
-                      ],
-                      {
-                        'AC_CANONICAL_BUILD' => 1,
-                        'AC_CANONICAL_HOST' => 1,
-                        'AC_CANONICAL_SYSTEM' => 1,
-                        'AC_CANONICAL_TARGET' => 1,
-                        'AC_CONFIG_AUX_DIR' => 1,
-                        'AC_CONFIG_FILES' => 1,
-                        'AC_CONFIG_HEADERS' => 1,
-                        'AC_CONFIG_LIBOBJ_DIR' => 1,
-                        'AC_CONFIG_LINKS' => 1,
-                        'AC_CONFIG_MACRO_DIR' => 1,
-                        'AC_CONFIG_MACRO_DIR_TRACE' => 1,
-                        'AC_CONFIG_SUBDIRS' => 1,
-                        'AC_DEFINE_TRACE_LITERAL' => 1,
-                        'AC_FC_FREEFORM' => 1,
-                        'AC_FC_PP_DEFINE' => 1,
-                        'AC_FC_PP_SRCEXT' => 1,
-                        'AC_FC_SRCEXT' => 1,
-                        'AC_INIT' => 1,
-                        'AC_LIBSOURCE' => 1,
-                        'AC_LIB_HAVE_LINKFLAGS' => 1,
-                        'AC_LIB_LINKFLAGS' => 1,
-                        'AC_LIB_LINKFLAGS_FROM_LIBS' => 1,
-                        'AC_PROG_LIBTOOL' => 1,
-                        'AC_REQUIRE_AUX_FILE' => 1,
-                        'AC_SUBST' => 1,
-                        'AC_SUBST_TRACE' => 1,
-                        'AH_OUTPUT' => 1,
-                        'AM_AUTOMAKE_VERSION' => 1,
-                        'AM_CONDITIONAL' => 1,
-                        'AM_ENABLE_MULTILIB' => 1,
-                        'AM_EXTRA_RECURSIVE_TARGETS' => 1,
-                        'AM_GNU_GETTEXT' => 1,
-                        'AM_GNU_GETTEXT_INTL_SUBDIR' => 1,
-                        'AM_GNU_GETTEXT_REQUIRE_VERSION' => 1,
-                        'AM_GNU_GETTEXT_VERSION' => 1,
-                        'AM_ICONV' => 1,
-                        'AM_INIT_AUTOMAKE' => 1,
-                        'AM_MAINTAINER_MODE' => 1,
-                        'AM_MAKEFILE_INCLUDE' => 1,
-                        'AM_NLS' => 1,
-                        'AM_PATH_GUILE' => 1,
-                        'AM_POT_TOOLS' => 1,
-                        'AM_PROG_AR' => 1,
-                        'AM_PROG_CC_C_O' => 1,
-                        'AM_PROG_CXX_C_O' => 1,
-                        'AM_PROG_F77_C_O' => 1,
-                        'AM_PROG_FC_C_O' => 1,
-                        'AM_PROG_LIBTOOL' => 1,
-                        'AM_PROG_MKDIR_P' => 1,
-                        'AM_PROG_MOC' => 1,
-                        'AM_SILENT_RULES' => 1,
-                        'AM_XGETTEXT_OPTION' => 1,
-                        'GTK_DOC_CHECK' => 1,
-                        'GUILE_FLAGS' => 1,
-                        'IT_PROG_INTLTOOL' => 1,
-                        'LT_CONFIG_LTDL_DIR' => 1,
-                        'LT_INIT' => 1,
-                        'LT_SUPPORTED_TAG' => 1,
-                        '_AM_COND_ELSE' => 1,
-                        '_AM_COND_ENDIF' => 1,
-                        '_AM_COND_IF' => 1,
-                        '_AM_MAKEFILE_INCLUDE' => 1,
-                        '_AM_SUBST_NOTMAKE' => 1,
-                        '_LT_AC_TAGCONFIG' => 1,
-                        '_m4_warn' => 1,
-                        'include' => 1,
-                        'm4_include' => 1,
-                        'm4_pattern_allow' => 1,
-                        'm4_pattern_forbid' => 1,
-                        'm4_sinclude' => 1,
-                        'sinclude' => 1
-                      }
-                    ], 'Autom4te::Request' ),
-             bless( [
-                      '2',
-                      1,
-                      [
-                        '/home/linuxbrew/.linuxbrew/Cellar/autoconf/2.73/share/autoconf'
-                      ],
-                      [
-                        '/home/linuxbrew/.linuxbrew/Cellar/autoconf/2.73/share/autoconf/autoconf/autoconf.m4f',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/internal/ac-config-macro-dirs.m4',
-                        '/usr/share/aclocal/pkg.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal/ltargz.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4',
-                        '/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/amversion.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/auxdir.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/cond.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depend.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depout.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/init.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/install-sh.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/lead-dot.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/make.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/missing.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/options.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/prog-cc-c-o.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/rmf.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/runlog.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/sanity.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/silent.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/strip.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/substnot.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/tar.m4',
-                        '/home/linuxbrew/.linuxbrew/share/aclocal-1.18/xargsn.m4',
-                        'm4/ax_gcc_builtin.m4',
-                        'm4/libtool.m4',
-                        'm4/ltoptions.m4',
-                        'm4/ltsugar.m4',
-                        'm4/ltversion.m4',
-                        'm4/lt~obsolete.m4',
-                        'configure.ac'
-                      ],
-                      {
-                        'AC_CHECK_LIBM' => 1,
-                        'AC_CONFIG_MACRO_DIR' => 1,
-                        'AC_CONFIG_MACRO_DIR_TRACE' => 1,
-                        'AC_DEFUN' => 1,
-                        'AC_DEFUN_ONCE' => 1,
-                        'AC_DEPLIBS_CHECK_METHOD' => 1,
-                        'AC_DISABLE_FAST_INSTALL' => 1,
-                        'AC_DISABLE_SHARED' => 1,
-                        'AC_DISABLE_STATIC' => 1,
-                        'AC_ENABLE_FAST_INSTALL' => 1,
-                        'AC_ENABLE_SHARED' => 1,
-                        'AC_ENABLE_STATIC' => 1,
-                        'AC_LIBLTDL_CONVENIENCE' => 1,
-                        'AC_LIBLTDL_INSTALLABLE' => 1,
-                        'AC_LIBTOOL_COMPILER_OPTION' => 1,
-                        'AC_LIBTOOL_CONFIG' => 1,
-                        'AC_LIBTOOL_CXX' => 1,
-                        'AC_LIBTOOL_DLOPEN' => 1,
-                        'AC_LIBTOOL_DLOPEN_SELF' => 1,
-                        'AC_LIBTOOL_F77' => 1,
-                        'AC_LIBTOOL_FC' => 1,
-                        'AC_LIBTOOL_GCJ' => 1,
-                        'AC_LIBTOOL_LANG_CXX_CONFIG' => 1,
-                        'AC_LIBTOOL_LANG_C_CONFIG' => 1,
-                        'AC_LIBTOOL_LANG_F77_CONFIG' => 1,
-                        'AC_LIBTOOL_LANG_GCJ_CONFIG' => 1,
-                        'AC_LIBTOOL_LANG_RC_CONFIG' => 1,
-                        'AC_LIBTOOL_LINKER_OPTION' => 1,
-                        'AC_LIBTOOL_OBJDIR' => 1,
-                        'AC_LIBTOOL_PICMODE' => 1,
-                        'AC_LIBTOOL_POSTDEP_PREDEP' => 1,
-                        'AC_LIBTOOL_PROG_CC_C_O' => 1,
-                        'AC_LIBTOOL_PROG_COMPILER_NO_RTTI' => 1,
-                        'AC_LIBTOOL_PROG_COMPILER_PIC' => 1,
-                        'AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH' => 1,
-                        'AC_LIBTOOL_PROG_LD_SHLIBS' => 1,
-                        'AC_LIBTOOL_RC' => 1,
-                        'AC_LIBTOOL_SETUP' => 1,
-                        'AC_LIBTOOL_SYS_DYNAMIC_LINKER' => 1,
-                        'AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE' => 1,
-                        'AC_LIBTOOL_SYS_HARD_LINK_LOCKS' => 1,
-                        'AC_LIBTOOL_SYS_LIB_STRIP' => 1,
-                        'AC_LIBTOOL_SYS_MAX_CMD_LEN' => 1,
-                        'AC_LIBTOOL_SYS_OLD_ARCHIVE' => 1,
-                        'AC_LIBTOOL_WIN32_DLL' => 1,
-                        'AC_LIB_LTDL' => 1,
-                        'AC_LTDL_DLLIB' => 1,
-                        'AC_LTDL_DLSYM_USCORE' => 1,
-                        'AC_LTDL_ENABLE_INSTALL' => 1,
-                        'AC_LTDL_OBJDIR' => 1,
-                        'AC_LTDL_PREOPEN' => 1,
-                        'AC_LTDL_SHLIBEXT' => 1,
-                        'AC_LTDL_SHLIBPATH' => 1,
-                        'AC_LTDL_SYMBOL_USCORE' => 1,
-                        'AC_LTDL_SYSSEARCHPATH' => 1,
-                        'AC_LTDL_SYS_DLOPEN_DEPLIBS' => 1,
-                        'AC_PATH_MAGIC' => 1,
-                        'AC_PATH_TOOL_PREFIX' => 1,
-                        'AC_PROG_EGREP' => 1,
-                        'AC_PROG_LD' => 1,
-                        'AC_PROG_LD_GNU' => 1,
-                        'AC_PROG_LD_RELOAD_FLAG' => 1,
-                        'AC_PROG_LIBTOOL' => 1,
-                        'AC_PROG_NM' => 1,
-                        'AC_WITH_LTDL' => 1,
-                        'AM_AUTOMAKE_VERSION' => 1,
-                        'AM_AUX_DIR_EXPAND' => 1,
-                        'AM_CONDITIONAL' => 1,
-                        'AM_DEP_TRACK' => 1,
-                        'AM_DISABLE_SHARED' => 1,
-                        'AM_DISABLE_STATIC' => 1,
-                        'AM_ENABLE_SHARED' => 1,
-                        'AM_ENABLE_STATIC' => 1,
-                        'AM_INIT_AUTOMAKE' => 1,
-                        'AM_MAKE_INCLUDE' => 1,
-                        'AM_MISSING_HAS_RUN' => 1,
-                        'AM_MISSING_PROG' => 1,
-                        'AM_OUTPUT_DEPENDENCY_COMMANDS' => 1,
-                        'AM_PROG_CC_C_O' => 1,
-                        'AM_PROG_INSTALL_SH' => 1,
-                        'AM_PROG_INSTALL_STRIP' => 1,
-                        'AM_PROG_LD' => 1,
-                        'AM_PROG_LIBTOOL' => 1,
-                        'AM_PROG_NM' => 1,
-                        'AM_RUN_LOG' => 1,
-                        'AM_SANITY_CHECK' => 1,
-                        'AM_SET_CURRENT_AUTOMAKE_VERSION' => 1,
-                        'AM_SET_DEPDIR' => 1,
-                        'AM_SET_LEADING_DOT' => 1,
-                        'AM_SILENT_RULES' => 1,
-                        'AM_SUBST_NOTMAKE' => 1,
-                        'AU_DEFUN' => 1,
-                        'AX_GCC_BUILTIN' => 1,
-                        'LTDL_CONVENIENCE' => 1,
-                        'LTDL_INIT' => 1,
-                        'LTDL_INSTALLABLE' => 1,
-                        'LTOBSOLETE_VERSION' => 1,
-                        'LTOPTIONS_VERSION' => 1,
-                        'LTSUGAR_VERSION' => 1,
-                        'LTVERSION_VERSION' => 1,
-                        'LT_AC_PROG_EGREP' => 1,
-                        'LT_AC_PROG_GCJ' => 1,
-                        'LT_AC_PROG_RC' => 1,
-                        'LT_AC_PROG_SED' => 1,
-                        'LT_CMD_MAX_LEN' => 1,
-                        'LT_CONFIG_LTDL_DIR' => 1,
-                        'LT_FUNC_ARGZ' => 1,
-                        'LT_FUNC_DLSYM_USCORE' => 1,
-                        'LT_INIT' => 1,
-                        'LT_LANG' => 1,
-                        'LT_LIB_DLLOAD' => 1,
-                        'LT_LIB_M' => 1,
-                        'LT_OUTPUT' => 1,
-                        'LT_PATH_LD' => 1,
-                        'LT_PATH_NM' => 1,
-                        'LT_PROG_GCJ' => 1,
-                        'LT_PROG_GO' => 1,
-                        'LT_PROG_RC' => 1,
-                        'LT_SUPPORTED_TAG' => 1,
-                        'LT_SYS_DLOPEN_DEPLIBS' => 1,
-                        'LT_SYS_DLOPEN_SELF' => 1,
-                        'LT_SYS_DLSEARCH_PATH' => 1,
-                        'LT_SYS_MODULE_EXT' => 1,
-                        'LT_SYS_MODULE_PATH' => 1,
-                        'LT_SYS_SYMBOL_USCORE' => 1,
-                        'LT_WITH_LTDL' => 1,
-                        'PKG_CHECK_EXISTS' => 1,
-                        'PKG_CHECK_MODULES' => 1,
-                        'PKG_CHECK_MODULES_STATIC' => 1,
-                        'PKG_CHECK_VAR' => 1,
-                        'PKG_HAVE_DEFINE_WITH_MODULES' => 1,
-                        'PKG_HAVE_WITH_MODULES' => 1,
-                        'PKG_INSTALLDIR' => 1,
-                        'PKG_NOARCH_INSTALLDIR' => 1,
-                        'PKG_PROG_PKG_CONFIG' => 1,
-                        'PKG_WITH_MODULES' => 1,
-                        'XORG_CHANGELOG' => 1,
-                        'XORG_CHECK_DOCBOOK' => 1,
-                        'XORG_CHECK_LINKER_FLAGS' => 1,
-                        'XORG_CHECK_LINUXDOC' => 1,
-                        'XORG_CHECK_MALLOC_ZERO' => 1,
-                        'XORG_CHECK_SGML_DOCTOOLS' => 1,
-                        'XORG_COMPILER_BRAND' => 1,
-                        'XORG_COMPILER_FLAGS' => 1,
-                        'XORG_CWARNFLAGS' => 1,
-                        'XORG_DEFAULT_NOCODE_OPTIONS' => 1,
-                        'XORG_DEFAULT_OPTIONS' => 1,
-                        'XORG_ENABLE_DEVEL_DOCS' => 1,
-                        'XORG_ENABLE_DOCS' => 1,
-                        'XORG_ENABLE_INTEGRATION_TESTS' => 1,
-                        'XORG_ENABLE_SPECS' => 1,
-                        'XORG_ENABLE_UNIT_TESTS' => 1,
-                        'XORG_INSTALL' => 1,
-                        'XORG_LD_WRAP' => 1,
-                        'XORG_LINT_LIBRARY' => 1,
-                        'XORG_MANPAGE_SECTIONS' => 1,
-                        'XORG_MEMORY_CHECK_FLAGS' => 1,
-                        'XORG_PROG_RAWCPP' => 1,
-                        'XORG_RELEASE_VERSION' => 1,
-                        'XORG_STRICT_OPTION' => 1,
-                        'XORG_TESTSET_CFLAG' => 1,
-                        'XORG_WITH_ASCIIDOC' => 1,
-                        'XORG_WITH_DOXYGEN' => 1,
-                        'XORG_WITH_FOP' => 1,
-                        'XORG_WITH_GLIB' => 1,
-                        'XORG_WITH_GROFF' => 1,
-                        'XORG_WITH_LINT' => 1,
-                        'XORG_WITH_M4' => 1,
-                        'XORG_WITH_PERL' => 1,
-                        'XORG_WITH_PS2PDF' => 1,
-                        'XORG_WITH_XMLTO' => 1,
-                        'XORG_WITH_XSLTPROC' => 1,
-                        '_AC_AM_CONFIG_HEADER_HOOK' => 1,
-                        '_AC_PROG_LIBTOOL' => 1,
-                        '_AM_AUTOCONF_VERSION' => 1,
-                        '_AM_CONFIG_MACRO_DIRS' => 1,
-                        '_AM_DEPENDENCIES' => 1,
-                        '_AM_FILESYSTEM_TIMESTAMP_RESOLUTION' => 1,
-                        '_AM_IF_OPTION' => 1,
-                        '_AM_MANGLE_OPTION' => 1,
-                        '_AM_OUTPUT_DEPENDENCY_COMMANDS' => 1,
-                        '_AM_PROG_CC_C_O' => 1,
-                        '_AM_PROG_RM_F' => 1,
-                        '_AM_PROG_TAR' => 1,
-                        '_AM_PROG_XARGS_N' => 1,
-                        '_AM_SET_OPTION' => 1,
-                        '_AM_SET_OPTIONS' => 1,
-                        '_AM_SILENT_RULES' => 1,
-                        '_AM_SLEEP_FRACTIONAL_SECONDS' => 1,
-                        '_AM_SUBST_NOTMAKE' => 1,
-                        '_LTDL_SETUP' => 1,
-                        '_LT_AC_CHECK_DLFCN' => 1,
-                        '_LT_AC_FILE_LTDLL_C' => 1,
-                        '_LT_AC_LANG_CXX' => 1,
-                        '_LT_AC_LANG_CXX_CONFIG' => 1,
-                        '_LT_AC_LANG_C_CONFIG' => 1,
-                        '_LT_AC_LANG_F77' => 1,
-                        '_LT_AC_LANG_F77_CONFIG' => 1,
-                        '_LT_AC_LANG_GCJ' => 1,
-                        '_LT_AC_LANG_GCJ_CONFIG' => 1,
-                        '_LT_AC_LANG_RC_CONFIG' => 1,
-                        '_LT_AC_LOCK' => 1,
-                        '_LT_AC_PROG_CXXCPP' => 1,
-                        '_LT_AC_PROG_ECHO_BACKSLASH' => 1,
-                        '_LT_AC_SHELL_INIT' => 1,
-                        '_LT_AC_SYS_COMPILER' => 1,
-                        '_LT_AC_SYS_LIBPATH_AIX' => 1,
-                        '_LT_AC_TAGCONFIG' => 1,
-                        '_LT_AC_TAGVAR' => 1,
-                        '_LT_AC_TRY_DLOPEN_SELF' => 1,
-                        '_LT_CC_BASENAME' => 1,
-                        '_LT_COMPILER_BOILERPLATE' => 1,
-                        '_LT_COMPILER_OPTION' => 1,
-                        '_LT_DLL_DEF_P' => 1,
-                        '_LT_LIBOBJ' => 1,
-                        '_LT_LINKER_BOILERPLATE' => 1,
-                        '_LT_LINKER_OPTION' => 1,
-                        '_LT_PATH_TOOL_PREFIX' => 1,
-                        '_LT_PREPARE_SED_QUOTE_VARS' => 1,
-                        '_LT_PROG_CXX' => 1,
-                        '_LT_PROG_ECHO_BACKSLASH' => 1,
-                        '_LT_PROG_F77' => 1,
-                        '_LT_PROG_FC' => 1,
-                        '_LT_PROG_LTMAIN' => 1,
-                        '_LT_REQUIRED_DARWIN_CHECKS' => 1,
-                        '_LT_WITH_SYSROOT' => 1,
-                        '_PKG_SHORT_ERRORS_SUPPORTED' => 1,
-                        '_m4_warn' => 1,
-                        'include' => 1,
-                        'm4_include' => 1,
-                        'm4_pattern_allow' => 1,
-                        'm4_pattern_forbid' => 1
-                      }
-                    ], 'Autom4te::Request' ),
-             bless( [
-                      '3',
-                      1,
-                      [
-                        '/home/linuxbrew/.linuxbrew/Cellar/autoconf/2.73/share/autoconf'
-                      ],
-                      [
-                        '/home/linuxbrew/.linuxbrew/Cellar/autoconf/2.73/share/autoconf/autoconf/autoconf.m4f',
-                        'aclocal.m4',
-                        '/home/linuxbrew/.linuxbrew/Cellar/autoconf/2.73/share/autoconf/autoconf/trailer.m4',
-                        'configure.ac'
-                      ],
-                      {
-                        'AC_CANONICAL_BUILD' => 1,
-                        'AC_CANONICAL_HOST' => 1,
-                        'AC_CANONICAL_SYSTEM' => 1,
-                        'AC_CANONICAL_TARGET' => 1,
-                        'AC_CONFIG_AUX_DIR' => 1,
-                        'AC_CONFIG_FILES' => 1,
-                        'AC_CONFIG_HEADERS' => 1,
-                        'AC_CONFIG_LIBOBJ_DIR' => 1,
-                        'AC_CONFIG_LINKS' => 1,
-                        'AC_CONFIG_MACRO_DIR' => 1,
-                        'AC_CONFIG_MACRO_DIR_TRACE' => 1,
-                        'AC_CONFIG_SUBDIRS' => 1,
-                        'AC_DEFINE_TRACE_LITERAL' => 1,
-                        'AC_FC_FREEFORM' => 1,
-                        'AC_FC_PP_DEFINE' => 1,
-                        'AC_FC_PP_SRCEXT' => 1,
-                        'AC_FC_SRCEXT' => 1,
-                        'AC_INIT' => 1,
-                        'AC_LIBSOURCE' => 1,
-                        'AC_LIB_HAVE_LINKFLAGS' => 1,
-                        'AC_LIB_LINKFLAGS' => 1,
-                        'AC_LIB_LINKFLAGS_FROM_LIBS' => 1,
-                        'AC_PROG_LIBTOOL' => 1,
-                        'AC_REQUIRE_AUX_FILE' => 1,
-                        'AC_SUBST' => 1,
-                        'AC_SUBST_TRACE' => 1,
-                        'AH_OUTPUT' => 1,
-                        'AM_AUTOMAKE_VERSION' => 1,
-                        'AM_CONDITIONAL' => 1,
-                        'AM_ENABLE_MULTILIB' => 1,
-                        'AM_EXTRA_RECURSIVE_TARGETS' => 1,
-                        'AM_GNU_GETTEXT' => 1,
-                        'AM_GNU_GETTEXT_INTL_SUBDIR' => 1,
-                        'AM_GNU_GETTEXT_REQUIRE_VERSION' => 1,
-                        'AM_GNU_GETTEXT_VERSION' => 1,
-                        'AM_ICONV' => 1,
-                        'AM_INIT_AUTOMAKE' => 1,
-                        'AM_MAINTAINER_MODE' => 1,
-                        'AM_MAKEFILE_INCLUDE' => 1,
-                        'AM_NLS' => 1,
-                        'AM_PATH_GUILE' => 1,
-                        'AM_POT_TOOLS' => 1,
-                        'AM_PROG_AR' => 1,
-                        'AM_PROG_CC_C_O' => 1,
-                        'AM_PROG_CXX_C_O' => 1,
-                        'AM_PROG_F77_C_O' => 1,
-                        'AM_PROG_FC_C_O' => 1,
-                        'AM_PROG_LIBTOOL' => 1,
-                        'AM_PROG_MKDIR_P' => 1,
-                        'AM_PROG_MOC' => 1,
-                        'AM_SILENT_RULES' => 1,
-                        'AM_XGETTEXT_OPTION' => 1,
-                        'GTK_DOC_CHECK' => 1,
-                        'GUILE_FLAGS' => 1,
-                        'IT_PROG_INTLTOOL' => 1,
-                        'LT_CONFIG_LTDL_DIR' => 1,
-                        'LT_INIT' => 1,
-                        'LT_SUPPORTED_TAG' => 1,
-                        '_AM_COND_ELSE' => 1,
-                        '_AM_COND_ENDIF' => 1,
-                        '_AM_COND_IF' => 1,
-                        '_AM_MAKEFILE_INCLUDE' => 1,
-                        '_AM_SUBST_NOTMAKE' => 1,
-                        '_LT_AC_TAGCONFIG' => 1,
-                        '_m4_warn' => 1,
-                        'include' => 1,
-                        'm4_include' => 1,
-                        'm4_pattern_allow' => 1,
-                        'm4_pattern_forbid' => 1,
-                        'm4_sinclude' => 1,
-                        'sinclude' => 1
-                      }
-                    ], 'Autom4te::Request' )
-           );
-
diff --git a/experiments/wasm-gui/third_party/libXext/autom4te.cache/traces.0 b/experiments/wasm-gui/third_party/libXext/autom4te.cache/traces.0
deleted file mode 100644
index 20d8eeef7..000000000
--- a/experiments/wasm-gui/third_party/libXext/autom4te.cache/traces.0
+++ /dev/null
@@ -1,4561 +0,0 @@
-m4trace:/usr/share/aclocal/pkg.m4:58: -1- AC_DEFUN([PKG_PROG_PKG_CONFIG], [m4_pattern_forbid([^_?PKG_[A-Z_]+$])
-m4_pattern_allow([^PKG_CONFIG(_(PATH|LIBDIR|SYSROOT_DIR|ALLOW_SYSTEM_(CFLAGS|LIBS)))?$])
-m4_pattern_allow([^PKG_CONFIG_(DISABLE_UNINSTALLED|TOP_BUILD_DIR|DEBUG_SPEW)$])
-AC_ARG_VAR([PKG_CONFIG], [path to pkg-config utility])
-AC_ARG_VAR([PKG_CONFIG_PATH], [directories to add to pkg-config's search path])
-AC_ARG_VAR([PKG_CONFIG_LIBDIR], [path overriding pkg-config's built-in search path])
-
-if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
-	AC_PATH_TOOL([PKG_CONFIG], [pkg-config])
-fi
-if test -n "$PKG_CONFIG"; then
-	_pkg_min_version=m4_default([$1], [0.9.0])
-	AC_MSG_CHECKING([pkg-config is at least version $_pkg_min_version])
-	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
-		AC_MSG_RESULT([yes])
-	else
-		AC_MSG_RESULT([no])
-		PKG_CONFIG=""
-	fi
-fi[]dnl
-])
-m4trace:/usr/share/aclocal/pkg.m4:92: -1- AC_DEFUN([PKG_CHECK_EXISTS], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-if test -n "$PKG_CONFIG" && \
-    AC_RUN_LOG([$PKG_CONFIG --exists --print-errors "$1"]); then
-  m4_default([$2], [:])
-m4_ifvaln([$3], [else
-  $3])dnl
-fi])
-m4trace:/usr/share/aclocal/pkg.m4:121: -1- AC_DEFUN([_PKG_SHORT_ERRORS_SUPPORTED], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
-        _pkg_short_errors_supported=yes
-else
-        _pkg_short_errors_supported=no
-fi[]dnl
-])
-m4trace:/usr/share/aclocal/pkg.m4:139: -1- AC_DEFUN([PKG_CHECK_MODULES], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-AC_ARG_VAR([$1][_CFLAGS], [C compiler flags for $1, overriding pkg-config])dnl
-AC_ARG_VAR([$1][_LIBS], [linker flags for $1, overriding pkg-config])dnl
-
-pkg_failed=no
-AC_MSG_CHECKING([for $2])
-
-_PKG_CONFIG([$1][_CFLAGS], [cflags], [$2])
-_PKG_CONFIG([$1][_LIBS], [libs], [$2])
-
-m4_define([_PKG_TEXT], [Alternatively, you may set the environment variables $1[]_CFLAGS
-and $1[]_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details.])
-
-if test $pkg_failed = yes; then
-        AC_MSG_RESULT([no])
-        _PKG_SHORT_ERRORS_SUPPORTED
-        if test $_pkg_short_errors_supported = yes; then
-                $1[]_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "$2" 2>&1`
-        else
-                $1[]_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "$2" 2>&1`
-        fi
-        # Put the nasty error message in config.log where it belongs
-        echo "$$1[]_PKG_ERRORS" >&AS_MESSAGE_LOG_FD
-
-        m4_default([$4], [AC_MSG_ERROR(
-[Package requirements ($2) were not met:
-
-$$1_PKG_ERRORS
-
-Consider adjusting the PKG_CONFIG_PATH environment variable if you
-installed software in a non-standard prefix.
-
-_PKG_TEXT])[]dnl
-        ])
-elif test $pkg_failed = untried; then
-        AC_MSG_RESULT([no])
-        m4_default([$4], [AC_MSG_FAILURE(
-[The pkg-config script could not be found or is too old.  Make sure it
-is in your PATH or set the PKG_CONFIG environment variable to the full
-path to pkg-config.
-
-_PKG_TEXT
-
-To get pkg-config, see <http://pkg-config.freedesktop.org/>.])[]dnl
-        ])
-else
-        $1[]_CFLAGS=$pkg_cv_[]$1[]_CFLAGS
-        $1[]_LIBS=$pkg_cv_[]$1[]_LIBS
-        AC_MSG_RESULT([yes])
-        $3
-fi[]dnl
-])
-m4trace:/usr/share/aclocal/pkg.m4:208: -1- AC_DEFUN([PKG_CHECK_MODULES_STATIC], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-_save_PKG_CONFIG=$PKG_CONFIG
-PKG_CONFIG="$PKG_CONFIG --static"
-PKG_CHECK_MODULES($@)
-PKG_CONFIG=$_save_PKG_CONFIG[]dnl
-])
-m4trace:/usr/share/aclocal/pkg.m4:226: -1- AC_DEFUN([PKG_INSTALLDIR], [m4_pushdef([pkg_default], [m4_default([$1], ['${libdir}/pkgconfig'])])
-m4_pushdef([pkg_description],
-    [pkg-config installation directory @<:@]pkg_default[@:>@])
-AC_ARG_WITH([pkgconfigdir],
-    [AS_HELP_STRING([--with-pkgconfigdir], pkg_description)],,
-    [with_pkgconfigdir=]pkg_default)
-AC_SUBST([pkgconfigdir], [$with_pkgconfigdir])
-m4_popdef([pkg_default])
-m4_popdef([pkg_description])
-])
-m4trace:/usr/share/aclocal/pkg.m4:248: -1- AC_DEFUN([PKG_NOARCH_INSTALLDIR], [m4_pushdef([pkg_default], [m4_default([$1], ['${datadir}/pkgconfig'])])
-m4_pushdef([pkg_description],
-    [pkg-config arch-independent installation directory @<:@]pkg_default[@:>@])
-AC_ARG_WITH([noarch-pkgconfigdir],
-    [AS_HELP_STRING([--with-noarch-pkgconfigdir], pkg_description)],,
-    [with_noarch_pkgconfigdir=]pkg_default)
-AC_SUBST([noarch_pkgconfigdir], [$with_noarch_pkgconfigdir])
-m4_popdef([pkg_default])
-m4_popdef([pkg_description])
-])
-m4trace:/usr/share/aclocal/pkg.m4:267: -1- AC_DEFUN([PKG_CHECK_VAR], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-AC_ARG_VAR([$1], [value of $3 for $2, overriding pkg-config])dnl
-
-_PKG_CONFIG([$1], [variable="][$3]["], [$2])
-AS_VAR_COPY([$1], [pkg_cv_][$1])
-
-AS_VAR_IF([$1], [""], [$5], [$4])dnl
-])
-m4trace:/usr/share/aclocal/pkg.m4:285: -1- AC_DEFUN([PKG_WITH_MODULES], [
-m4_pushdef([with_arg], m4_tolower([$1]))
-
-m4_pushdef([description],
-           [m4_default([$5], [build with ]with_arg[ support])])
-
-m4_pushdef([def_arg], [m4_default([$6], [auto])])
-m4_pushdef([def_action_if_found], [AS_TR_SH([with_]with_arg)=yes])
-m4_pushdef([def_action_if_not_found], [AS_TR_SH([with_]with_arg)=no])
-
-m4_case(def_arg,
-            [yes],[m4_pushdef([with_without], [--without-]with_arg)],
-            [m4_pushdef([with_without],[--with-]with_arg)])
-
-AC_ARG_WITH(with_arg,
-     AS_HELP_STRING(with_without, description[ @<:@default=]def_arg[@:>@]),,
-    [AS_TR_SH([with_]with_arg)=def_arg])
-
-AS_CASE([$AS_TR_SH([with_]with_arg)],
-            [yes],[PKG_CHECK_MODULES([$1],[$2],$3,$4)],
-            [auto],[PKG_CHECK_MODULES([$1],[$2],
-                                        [m4_n([def_action_if_found]) $3],
-                                        [m4_n([def_action_if_not_found]) $4])])
-
-m4_popdef([with_arg])
-m4_popdef([description])
-m4_popdef([def_arg])
-
-])
-m4trace:/usr/share/aclocal/pkg.m4:322: -1- AC_DEFUN([PKG_HAVE_WITH_MODULES], [
-PKG_WITH_MODULES([$1],[$2],,,[$3],[$4])
-
-AM_CONDITIONAL([HAVE_][$1],
-               [test "$AS_TR_SH([with_]m4_tolower([$1]))" = "yes"])
-])
-m4trace:/usr/share/aclocal/pkg.m4:337: -1- AC_DEFUN([PKG_HAVE_DEFINE_WITH_MODULES], [
-PKG_HAVE_WITH_MODULES([$1],[$2],[$3],[$4])
-
-AS_IF([test "$AS_TR_SH([with_]m4_tolower([$1]))" = "yes"],
-        [AC_DEFINE([HAVE_][$1], 1, [Enable ]m4_tolower([$1])[ support])])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:62: -1- AC_DEFUN([LT_INIT], [AC_PREREQ([2.64])dnl We use AC_PATH_PROGS_FEATURE_CHECK
-AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl
-AC_BEFORE([$0], [LT_LANG])dnl
-AC_BEFORE([$0], [LT_OUTPUT])dnl
-AC_BEFORE([$0], [LTDL_INIT])dnl
-m4_require([_LT_CHECK_BUILDDIR])dnl
-
-dnl Autoconf doesn't catch unexpanded LT_ macros by default:
-m4_pattern_forbid([^_?LT_[A-Z_]+$])dnl
-m4_pattern_allow([^(_LT_EOF|LT_DLGLOBAL|LT_DLLAZY_OR_NOW|LT_MULTI_MODULE)$])dnl
-dnl aclocal doesn't pull ltoptions.m4, ltsugar.m4, or ltversion.m4
-dnl unless we require an AC_DEFUNed macro:
-AC_REQUIRE([LTOPTIONS_VERSION])dnl
-AC_REQUIRE([LTSUGAR_VERSION])dnl
-AC_REQUIRE([LTVERSION_VERSION])dnl
-AC_REQUIRE([LTOBSOLETE_VERSION])dnl
-m4_require([_LT_PROG_LTMAIN])dnl
-
-_LT_SHELL_INIT([SHELL=${CONFIG_SHELL-/bin/sh}])
-
-dnl Parse OPTIONS
-_LT_SET_OPTIONS([$0], [$1])
-
-# This can be used to rebuild libtool when needed
-LIBTOOL_DEPS=$ltmain
-
-# Always use our own libtool.
-LIBTOOL='$(SHELL) $(top_builddir)/libtool'
-AC_SUBST(LIBTOOL)dnl
-
-_LT_SETUP
-
-# Only expand once:
-m4_define([LT_INIT])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:100: -1- AU_DEFUN([AC_PROG_LIBTOOL], [m4_if($#, 0, [LT_INIT], [LT_INIT($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:100: -1- AC_DEFUN([AC_PROG_LIBTOOL], [m4_warn([obsolete], [The macro 'AC_PROG_LIBTOOL' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_INIT], [LT_INIT($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:101: -1- AU_DEFUN([AM_PROG_LIBTOOL], [m4_if($#, 0, [LT_INIT], [LT_INIT($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:101: -1- AC_DEFUN([AM_PROG_LIBTOOL], [m4_warn([obsolete], [The macro 'AM_PROG_LIBTOOL' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_INIT], [LT_INIT($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:621: -1- AC_DEFUN([LT_OUTPUT], [: ${CONFIG_LT=./config.lt}
-AC_MSG_NOTICE([creating $CONFIG_LT])
-_LT_GENERATED_FILE_INIT(["$CONFIG_LT"],
-[# Run this file to recreate a libtool stub with the current configuration.])
-
-cat >>"$CONFIG_LT" <<\_LTEOF
-lt_cl_silent=false
-exec AS_MESSAGE_LOG_FD>>config.log
-{
-  echo
-  AS_BOX([Running $as_me.])
-} >&AS_MESSAGE_LOG_FD
-
-lt_cl_help="\
-'$as_me' creates a local libtool stub from the current configuration,
-for use in further configure time tests before the real libtool is
-generated.
-
-Usage: $[0] [[OPTIONS]]
-
-  -h, --help      print this help, then exit
-  -V, --version   print version number, then exit
-  -q, --quiet     do not print progress messages
-  -d, --debug     don't remove temporary files
-
-Report bugs to <bug-libtool@gnu.org>."
-
-lt_cl_version="\
-m4_ifset([AC_PACKAGE_NAME], [AC_PACKAGE_NAME ])config.lt[]dnl
-m4_ifset([AC_PACKAGE_VERSION], [ AC_PACKAGE_VERSION])
-configured by $[0], generated by m4_PACKAGE_STRING.
-
-Copyright (C) 2024 Free Software Foundation, Inc.
-This config.lt script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it."
-
-while test 0 != $[#]
-do
-  case $[1] in
-    --version | --v* | -V )
-      echo "$lt_cl_version"; exit 0 ;;
-    --help | --h* | -h )
-      echo "$lt_cl_help"; exit 0 ;;
-    --debug | --d* | -d )
-      debug=: ;;
-    --quiet | --q* | --silent | --s* | -q )
-      lt_cl_silent=: ;;
-
-    -*) AC_MSG_ERROR([unrecognized option: $[1]
-Try '$[0] --help' for more information.]) ;;
-
-    *) AC_MSG_ERROR([unrecognized argument: $[1]
-Try '$[0] --help' for more information.]) ;;
-  esac
-  shift
-done
-
-if $lt_cl_silent; then
-  exec AS_MESSAGE_FD>/dev/null
-fi
-_LTEOF
-
-cat >>"$CONFIG_LT" <<_LTEOF
-_LT_OUTPUT_LIBTOOL_COMMANDS_INIT
-_LTEOF
-
-cat >>"$CONFIG_LT" <<\_LTEOF
-AC_MSG_NOTICE([creating $ofile])
-_LT_OUTPUT_LIBTOOL_COMMANDS
-AS_EXIT(0)
-_LTEOF
-chmod +x "$CONFIG_LT"
-
-# configure is writing to config.log, but config.lt does its own redirection,
-# appending to config.log, which fails on DOS, as config.log is still kept
-# open by configure.  Here we exec the FD to /dev/null, effectively closing
-# config.log, so it can be properly (re)opened and appended to by config.lt.
-lt_cl_success=:
-test yes = "$silent" &&
-  lt_config_lt_args="$lt_config_lt_args --quiet"
-exec AS_MESSAGE_LOG_FD>/dev/null
-$SHELL "$CONFIG_LT" $lt_config_lt_args || lt_cl_success=false
-exec AS_MESSAGE_LOG_FD>>config.log
-$lt_cl_success || AS_EXIT(1)
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:813: -1- AC_DEFUN([LT_SUPPORTED_TAG], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:824: -1- AC_DEFUN([LT_LANG], [AC_BEFORE([$0], [LT_OUTPUT])dnl
-m4_case([$1],
-  [C],			[_LT_LANG(C)],
-  [C++],		[_LT_LANG(CXX)],
-  [Go],			[_LT_LANG(GO)],
-  [Java],		[_LT_LANG(GCJ)],
-  [Fortran 77],		[_LT_LANG(F77)],
-  [Fortran],		[_LT_LANG(FC)],
-  [Windows Resource],	[_LT_LANG(RC)],
-  [m4_ifdef([_LT_LANG_]$1[_CONFIG],
-    [_LT_LANG($1)],
-    [m4_fatal([$0: unsupported language: "$1"])])])dnl
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:916: -1- AU_DEFUN([AC_LIBTOOL_CXX], [LT_LANG(C++)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:916: -1- AC_DEFUN([AC_LIBTOOL_CXX], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_CXX' is obsolete.
-You should run autoupdate.])dnl
-LT_LANG(C++)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:917: -1- AU_DEFUN([AC_LIBTOOL_F77], [LT_LANG(Fortran 77)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:917: -1- AC_DEFUN([AC_LIBTOOL_F77], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_F77' is obsolete.
-You should run autoupdate.])dnl
-LT_LANG(Fortran 77)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:918: -1- AU_DEFUN([AC_LIBTOOL_FC], [LT_LANG(Fortran)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:918: -1- AC_DEFUN([AC_LIBTOOL_FC], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_FC' is obsolete.
-You should run autoupdate.])dnl
-LT_LANG(Fortran)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:919: -1- AU_DEFUN([AC_LIBTOOL_GCJ], [LT_LANG(Java)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:919: -1- AC_DEFUN([AC_LIBTOOL_GCJ], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_GCJ' is obsolete.
-You should run autoupdate.])dnl
-LT_LANG(Java)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:920: -1- AU_DEFUN([AC_LIBTOOL_RC], [LT_LANG(Windows Resource)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:920: -1- AC_DEFUN([AC_LIBTOOL_RC], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_RC' is obsolete.
-You should run autoupdate.])dnl
-LT_LANG(Windows Resource)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:1278: -1- AC_DEFUN([_LT_WITH_SYSROOT], [m4_require([_LT_DECL_SED])dnl
-AC_MSG_CHECKING([for sysroot])
-AC_ARG_WITH([sysroot],
-[AS_HELP_STRING([--with-sysroot@<:@=DIR@:>@],
-  [Search for dependent libraries within DIR (or the compiler's sysroot
-   if not specified).])],
-[], [with_sysroot=no])
-
-dnl lt_sysroot will always be passed unquoted.  We quote it here
-dnl in case the user passed a directory name.
-lt_sysroot=
-case $with_sysroot in #(
- yes)
-   if test yes = "$GCC"; then
-     # Trim trailing / since we'll always append absolute paths and we want
-     # to avoid //, if only for less confusing output for the user.
-     lt_sysroot=`$CC --print-sysroot 2>/dev/null | $SED 's:/\+$::'`
-   fi
-   ;; #(
- /*)
-   lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"`
-   ;; #(
- no|'')
-   ;; #(
- *)
-   AC_MSG_RESULT([$with_sysroot])
-   AC_MSG_ERROR([The sysroot must be an absolute path.])
-   ;;
-esac
-
- AC_MSG_RESULT([${lt_sysroot:-no}])
-_LT_DECL([], [lt_sysroot], [0], [The root where to search for ]dnl
-[dependent libraries, and where our libraries should be installed.])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:1618: -1- AC_DEFUN([_LT_COMPILER_OPTION], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_SED])dnl
-AC_CACHE_CHECK([$1], [$2],
-  [$2=no
-   m4_if([$4], , [ac_outfile=conftest.$ac_objext], [ac_outfile=$4])
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$3"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&AS_MESSAGE_LOG_FD
-   echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       $2=yes
-     fi
-   fi
-   $RM conftest*
-])
-
-if test yes = "[$]$2"; then
-    m4_if([$5], , :, [$5])
-else
-    m4_if([$6], , :, [$6])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:1660: -1- AU_DEFUN([AC_LIBTOOL_COMPILER_OPTION], [m4_if($#, 0, [_LT_COMPILER_OPTION], [_LT_COMPILER_OPTION($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:1660: -1- AC_DEFUN([AC_LIBTOOL_COMPILER_OPTION], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_COMPILER_OPTION' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [_LT_COMPILER_OPTION], [_LT_COMPILER_OPTION($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:1669: -1- AC_DEFUN([_LT_LINKER_OPTION], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_SED])dnl
-AC_CACHE_CHECK([$1], [$2],
-  [$2=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $3"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&AS_MESSAGE_LOG_FD
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         $2=yes
-       fi
-     else
-       $2=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
-])
-
-if test yes = "[$]$2"; then
-    m4_if([$4], , :, [$4])
-else
-    m4_if([$5], , :, [$5])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:1704: -1- AU_DEFUN([AC_LIBTOOL_LINKER_OPTION], [m4_if($#, 0, [_LT_LINKER_OPTION], [_LT_LINKER_OPTION($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:1704: -1- AC_DEFUN([AC_LIBTOOL_LINKER_OPTION], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_LINKER_OPTION' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [_LT_LINKER_OPTION], [_LT_LINKER_OPTION($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:1711: -1- AC_DEFUN([LT_CMD_MAX_LEN], [AC_REQUIRE([AC_CANONICAL_HOST])dnl
-# find the maximum length of command line arguments
-AC_MSG_CHECKING([the maximum length of command line arguments])
-AC_CACHE_VAL([lt_cv_sys_max_cmd_len], [dnl
-  i=0
-  teststring=ABCD
-
-  case $build_os in
-  msdosdjgpp*)
-    # On DJGPP, this test can blow up pretty badly due to problems in libc
-    # (any single argument exceeding 2000 bytes causes a buffer overrun
-    # during glob expansion).  Even if it were fixed, the result of this
-    # check would be larger than it should be.
-    lt_cv_sys_max_cmd_len=12288;    # 12K is about right
-    ;;
-
-  gnu* | ironclad*)
-    # Under GNU Hurd and Ironclad, this test is not required because there
-    # is no limit to the length of command line arguments.
-    # Libtool will interpret -1 as no limit whatsoever
-    lt_cv_sys_max_cmd_len=-1;
-    ;;
-
-  cygwin* | mingw* | windows* | cegcc*)
-    # On Win9x/ME, this test blows up -- it succeeds, but takes
-    # about 5 minutes as the teststring grows exponentially.
-    # Worse, since 9x/ME are not pre-emptively multitasking,
-    # you end up with a "frozen" computer, even though with patience
-    # the test eventually succeeds (with a max line length of 256k).
-    # Instead, let's just punt: use the minimum linelength reported by
-    # all of the supported platforms: 8192 (on NT/2K/XP).
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  mint*)
-    # On MiNT this can take a long time and run out of memory.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  amigaos*)
-    # On AmigaOS with pdksh, this test takes hours, literally.
-    # So we just punt and use a minimum line length of 8192.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*)
-    # This has been around since 386BSD, at least.  Likely further.
-    if test -x /sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax`
-    elif test -x /usr/sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax`
-    else
-      lt_cv_sys_max_cmd_len=65536	# usable default for all BSDs
-    fi
-    # And add a safety zone
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    ;;
-
-  interix*)
-    # We know the value 262144 and hardcode it with a safety zone (like BSD)
-    lt_cv_sys_max_cmd_len=196608
-    ;;
-
-  os2*)
-    # The test takes a long time on OS/2.
-    lt_cv_sys_max_cmd_len=8192
-    ;;
-
-  osf*)
-    # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure
-    # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not
-    # nice to cause kernel panics so lets avoid the loop below.
-    # First set a reasonable default.
-    lt_cv_sys_max_cmd_len=16384
-    #
-    if test -x /sbin/sysconfig; then
-      case `/sbin/sysconfig -q proc exec_disable_arg_limit` in
-        *1*) lt_cv_sys_max_cmd_len=-1 ;;
-      esac
-    fi
-    ;;
-  sco3.2v5*)
-    lt_cv_sys_max_cmd_len=102400
-    ;;
-  sysv5* | sco5v6* | sysv4.2uw2*)
-    kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null`
-    if test -n "$kargmax"; then
-      lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[[	 ]]//'`
-    else
-      lt_cv_sys_max_cmd_len=32768
-    fi
-    ;;
-  *)
-    lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null`
-    if test -n "$lt_cv_sys_max_cmd_len" && \
-       test undefined != "$lt_cv_sys_max_cmd_len"; then
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    else
-      # Make teststring a little bigger before we do anything with it.
-      # a 1K string should be a reasonable start.
-      for i in 1 2 3 4 5 6 7 8; do
-        teststring=$teststring$teststring
-      done
-      SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}}
-      # If test is not a shell built-in, we'll probably end up computing a
-      # maximum length that is only half of the actual maximum length, but
-      # we can't tell.
-      while { test X`env echo "$teststring$teststring" 2>/dev/null` \
-	         = "X$teststring$teststring"; } >/dev/null 2>&1 &&
-	      test 17 != "$i" # 1/2 MB should be enough
-      do
-        i=`expr $i + 1`
-        teststring=$teststring$teststring
-      done
-      # Only check the string length outside the loop.
-      lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1`
-      teststring=
-      # Add a significant safety factor because C++ compilers can tack on
-      # massive amounts of additional arguments before passing them to the
-      # linker.  It appears as though 1/2 is a usable value.
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2`
-    fi
-    ;;
-  esac
-])
-if test -n "$lt_cv_sys_max_cmd_len"; then
-  AC_MSG_RESULT($lt_cv_sys_max_cmd_len)
-else
-  AC_MSG_RESULT(none)
-fi
-max_cmd_len=$lt_cv_sys_max_cmd_len
-_LT_DECL([], [max_cmd_len], [0],
-    [What is the maximum length of a command?])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:1850: -1- AU_DEFUN([AC_LIBTOOL_SYS_MAX_CMD_LEN], [m4_if($#, 0, [LT_CMD_MAX_LEN], [LT_CMD_MAX_LEN($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:1850: -1- AC_DEFUN([AC_LIBTOOL_SYS_MAX_CMD_LEN], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_SYS_MAX_CMD_LEN' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_CMD_MAX_LEN], [LT_CMD_MAX_LEN($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:1961: -1- AC_DEFUN([LT_SYS_DLOPEN_SELF], [m4_require([_LT_HEADER_DLFCN])dnl
-if test yes != "$enable_dlopen"; then
-  enable_dlopen=unknown
-  enable_dlopen_self=unknown
-  enable_dlopen_self_static=unknown
-else
-  lt_cv_dlopen=no
-  lt_cv_dlopen_libs=
-
-  case $host_os in
-  beos*)
-    lt_cv_dlopen=load_add_on
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ;;
-
-  mingw* | windows* | pw32* | cegcc*)
-    lt_cv_dlopen=LoadLibrary
-    lt_cv_dlopen_libs=
-    ;;
-
-  cygwin*)
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    ;;
-
-  darwin*)
-    # if libdl is installed we need to link against it
-    AC_CHECK_LIB([dl], [dlopen],
-		[lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl],[
-    lt_cv_dlopen=dyld
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ])
-    ;;
-
-  tpf*)
-    # Don't try to run any link tests for TPF.  We know it's impossible
-    # because TPF is a cross-compiler, and we know how we open DSOs.
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=no
-    ;;
-
-  *)
-    AC_CHECK_FUNC([shl_load],
-	  [lt_cv_dlopen=shl_load],
-      [AC_CHECK_LIB([dld], [shl_load],
-	    [lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld],
-	[AC_CHECK_FUNC([dlopen],
-	      [lt_cv_dlopen=dlopen],
-	  [AC_CHECK_LIB([dl], [dlopen],
-		[lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl],
-	    [AC_CHECK_LIB([svld], [dlopen],
-		  [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld],
-	      [AC_CHECK_LIB([dld], [dld_link],
-		    [lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld])
-	      ])
-	    ])
-	  ])
-	])
-      ])
-    ;;
-  esac
-
-  if test no = "$lt_cv_dlopen"; then
-    enable_dlopen=no
-  else
-    enable_dlopen=yes
-  fi
-
-  case $lt_cv_dlopen in
-  dlopen)
-    save_CPPFLAGS=$CPPFLAGS
-    test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H"
-
-    save_LDFLAGS=$LDFLAGS
-    wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\"
-
-    save_LIBS=$LIBS
-    LIBS="$lt_cv_dlopen_libs $LIBS"
-
-    AC_CACHE_CHECK([whether a program can dlopen itself],
-	  lt_cv_dlopen_self, [dnl
-	  _LT_TRY_DLOPEN_SELF(
-	    lt_cv_dlopen_self=yes, lt_cv_dlopen_self=yes,
-	    lt_cv_dlopen_self=no, lt_cv_dlopen_self=cross)
-    ])
-
-    if test yes = "$lt_cv_dlopen_self"; then
-      wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\"
-      AC_CACHE_CHECK([whether a statically linked program can dlopen itself],
-	  lt_cv_dlopen_self_static, [dnl
-	  _LT_TRY_DLOPEN_SELF(
-	    lt_cv_dlopen_self_static=yes, lt_cv_dlopen_self_static=yes,
-	    lt_cv_dlopen_self_static=no,  lt_cv_dlopen_self_static=cross)
-      ])
-    fi
-
-    CPPFLAGS=$save_CPPFLAGS
-    LDFLAGS=$save_LDFLAGS
-    LIBS=$save_LIBS
-    ;;
-  esac
-
-  case $lt_cv_dlopen_self in
-  yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;;
-  *) enable_dlopen_self=unknown ;;
-  esac
-
-  case $lt_cv_dlopen_self_static in
-  yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;;
-  *) enable_dlopen_self_static=unknown ;;
-  esac
-fi
-_LT_DECL([dlopen_support], [enable_dlopen], [0],
-	 [Whether dlopen is supported])
-_LT_DECL([dlopen_self], [enable_dlopen_self], [0],
-	 [Whether dlopen of programs is supported])
-_LT_DECL([dlopen_self_static], [enable_dlopen_self_static], [0],
-	 [Whether dlopen of statically linked programs is supported])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:2086: -1- AU_DEFUN([AC_LIBTOOL_DLOPEN_SELF], [m4_if($#, 0, [LT_SYS_DLOPEN_SELF], [LT_SYS_DLOPEN_SELF($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:2086: -1- AC_DEFUN([AC_LIBTOOL_DLOPEN_SELF], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_DLOPEN_SELF' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_SYS_DLOPEN_SELF], [LT_SYS_DLOPEN_SELF($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3284: -1- AC_DEFUN([_LT_PATH_TOOL_PREFIX], [m4_require([_LT_DECL_EGREP])dnl
-AC_MSG_CHECKING([for $1])
-AC_CACHE_VAL(lt_cv_path_MAGIC_CMD,
-[case $MAGIC_CMD in
-[[\\/*] |  ?:[\\/]*])
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-dnl $ac_dummy forces splitting on constant user-supplied paths.
-dnl POSIX.2 word splitting is done only on the output of word expansions,
-dnl not every word.  This closes a longstanding sh security hole.
-  ac_dummy="m4_if([$2], , $PATH, [$2])"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$1"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"$1"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac])
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  AC_MSG_RESULT($MAGIC_CMD)
-else
-  AC_MSG_RESULT(no)
-fi
-_LT_DECL([], [MAGIC_CMD], [0],
-	 [Used to examine libraries when file_magic_cmd begins with "file"])dnl
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3346: -1- AU_DEFUN([AC_PATH_TOOL_PREFIX], [m4_if($#, 0, [_LT_PATH_TOOL_PREFIX], [_LT_PATH_TOOL_PREFIX($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3346: -1- AC_DEFUN([AC_PATH_TOOL_PREFIX], [m4_warn([obsolete], [The macro 'AC_PATH_TOOL_PREFIX' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [_LT_PATH_TOOL_PREFIX], [_LT_PATH_TOOL_PREFIX($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3369: -1- AC_DEFUN([LT_PATH_LD], [AC_REQUIRE([AC_PROG_CC])dnl
-AC_REQUIRE([AC_CANONICAL_HOST])dnl
-AC_REQUIRE([AC_CANONICAL_BUILD])dnl
-m4_require([_LT_DECL_SED])dnl
-m4_require([_LT_DECL_EGREP])dnl
-m4_require([_LT_PROG_ECHO_BACKSLASH])dnl
-
-AC_ARG_WITH([gnu-ld],
-    [AS_HELP_STRING([--with-gnu-ld],
-	[assume the C compiler uses GNU ld @<:@default=no@:>@])],
-    [test no = "$withval" || with_gnu_ld=yes],
-    [with_gnu_ld=no])dnl
-
-ac_prog=ld
-if test yes = "$GCC"; then
-  # Check if gcc -print-prog-name=ld gives a path.
-  AC_MSG_CHECKING([for ld used by $CC])
-  case $host in
-  *-*-mingw* | *-*-windows*)
-    # gcc leaves a trailing carriage return, which upsets mingw
-    ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;;
-  *)
-    ac_prog=`($CC -print-prog-name=ld) 2>&5` ;;
-  esac
-  case $ac_prog in
-    # Accept absolute paths.
-    [[\\/]]* | ?:[[\\/]]*)
-      re_direlt='/[[^/]][[^/]]*/\.\./'
-      # Canonicalize the pathname of ld
-      ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'`
-      while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do
-	ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"`
-      done
-      test -z "$LD" && LD=$ac_prog
-      ;;
-  "")
-    # If it fails, then pretend we aren't using GCC.
-    ac_prog=ld
-    ;;
-  *)
-    # If it is relative, then search for the first ld in PATH.
-    with_gnu_ld=unknown
-    ;;
-  esac
-elif test yes = "$with_gnu_ld"; then
-  AC_MSG_CHECKING([for GNU ld])
-else
-  AC_MSG_CHECKING([for non-GNU ld])
-fi
-AC_CACHE_VAL(lt_cv_path_LD,
-[if test -z "$LD"; then
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  for ac_dir in $PATH; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then
-      lt_cv_path_LD=$ac_dir/$ac_prog
-      # Check to see if the program is GNU ld.  I'd rather use --version,
-      # but apparently some variants of GNU ld only accept -v.
-      # Break only if it was the GNU/non-GNU ld that we prefer.
-      case `"$lt_cv_path_LD" -v 2>&1 </dev/null` in
-      *GNU* | *'with BFD'*)
-	test no != "$with_gnu_ld" && break
-	;;
-      *)
-	test yes != "$with_gnu_ld" && break
-	;;
-      esac
-    fi
-  done
-  IFS=$lt_save_ifs
-else
-  lt_cv_path_LD=$LD # Let the user override the test with a path.
-fi])
-LD=$lt_cv_path_LD
-if test -n "$LD"; then
-  AC_MSG_RESULT($LD)
-else
-  AC_MSG_RESULT(no)
-fi
-test -z "$LD" && AC_MSG_ERROR([no acceptable ld found in \$PATH])
-_LT_PATH_LD_GNU
-AC_SUBST([LD])
-
-_LT_TAGDECL([], [LD], [1], [The linker used to build libraries])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3458: -1- AU_DEFUN([AM_PROG_LD], [m4_if($#, 0, [LT_PATH_LD], [LT_PATH_LD($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3458: -1- AC_DEFUN([AM_PROG_LD], [m4_warn([obsolete], [The macro 'AM_PROG_LD' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_PATH_LD], [LT_PATH_LD($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3459: -1- AU_DEFUN([AC_PROG_LD], [m4_if($#, 0, [LT_PATH_LD], [LT_PATH_LD($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3459: -1- AC_DEFUN([AC_PROG_LD], [m4_warn([obsolete], [The macro 'AC_PROG_LD' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_PATH_LD], [LT_PATH_LD($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3795: -1- AC_DEFUN([LT_PATH_NM], [AC_REQUIRE([AC_PROG_CC])dnl
-AC_CACHE_CHECK([for BSD- or MS-compatible name lister (nm)], lt_cv_path_NM,
-[if test -n "$NM"; then
-  # Let the user override the test.
-  lt_cv_path_NM=$NM
-else
-  lt_nm_to_check=${ac_tool_prefix}nm
-  if test -n "$ac_tool_prefix" && test "$build" = "$host"; then
-    lt_nm_to_check="$lt_nm_to_check nm"
-  fi
-  for lt_tmp_nm in $lt_nm_to_check; do
-    lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-    for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do
-      IFS=$lt_save_ifs
-      test -z "$ac_dir" && ac_dir=.
-      tmp_nm=$ac_dir/$lt_tmp_nm
-      if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then
-	# Check to see if the nm accepts a BSD-compat flag.
-	# Adding the 'sed 1q' prevents false positives on HP-UX, which says:
-	#   nm: unknown option "B" ignored
-	# Tru64's nm complains that /dev/null is an invalid object file
-	# MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty
-	case $build_os in
-	mingw* | windows*) lt_bad_file=conftest.nm/nofile ;;
-	*) lt_bad_file=/dev/null ;;
-	esac
-	case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in
-	*$lt_bad_file* | *'Invalid file or object type'*)
-	  lt_cv_path_NM="$tmp_nm -B"
-	  break 2
-	  ;;
-	*)
-	  case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in
-	  */dev/null*)
-	    lt_cv_path_NM="$tmp_nm -p"
-	    break 2
-	    ;;
-	  *)
-	    lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but
-	    continue # so that we can try to find one that supports BSD flags
-	    ;;
-	  esac
-	  ;;
-	esac
-      fi
-    done
-    IFS=$lt_save_ifs
-  done
-  : ${lt_cv_path_NM=no}
-fi])
-if test no != "$lt_cv_path_NM"; then
-  NM=$lt_cv_path_NM
-else
-  # Didn't find any BSD compatible name lister, look for dumpbin.
-  if test -n "$DUMPBIN"; then :
-    # Let the user override the test.
-  else
-    AC_CHECK_TOOLS(DUMPBIN, [dumpbin "link -dump"], :)
-    case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in
-    *COFF*)
-      DUMPBIN="$DUMPBIN -symbols -headers"
-      ;;
-    *)
-      DUMPBIN=:
-      ;;
-    esac
-  fi
-  AC_SUBST([DUMPBIN])
-  if test : != "$DUMPBIN"; then
-    NM=$DUMPBIN
-  fi
-fi
-test -z "$NM" && NM=nm
-AC_SUBST([NM])
-_LT_DECL([], [NM], [1], [A BSD- or MS-compatible name lister])dnl
-
-AC_CACHE_CHECK([the name lister ($NM) interface], [lt_cv_nm_interface],
-  [lt_cv_nm_interface="BSD nm"
-  echo "int some_variable = 0;" > conftest.$ac_ext
-  (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&AS_MESSAGE_LOG_FD)
-  (eval "$ac_compile" 2>conftest.err)
-  cat conftest.err >&AS_MESSAGE_LOG_FD
-  (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&AS_MESSAGE_LOG_FD)
-  (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
-  cat conftest.err >&AS_MESSAGE_LOG_FD
-  (eval echo "\"\$as_me:$LINENO: output\"" >&AS_MESSAGE_LOG_FD)
-  cat conftest.out >&AS_MESSAGE_LOG_FD
-  if $GREP 'External.*some_variable' conftest.out > /dev/null; then
-    lt_cv_nm_interface="MS dumpbin"
-  fi
-  rm -f conftest*])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3890: -1- AU_DEFUN([AM_PROG_NM], [m4_if($#, 0, [LT_PATH_NM], [LT_PATH_NM($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3890: -1- AC_DEFUN([AM_PROG_NM], [m4_warn([obsolete], [The macro 'AM_PROG_NM' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_PATH_NM], [LT_PATH_NM($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3891: -1- AU_DEFUN([AC_PROG_NM], [m4_if($#, 0, [LT_PATH_NM], [LT_PATH_NM($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3891: -1- AC_DEFUN([AC_PROG_NM], [m4_warn([obsolete], [The macro 'AC_PROG_NM' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_PATH_NM], [LT_PATH_NM($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3962: -1- AC_DEFUN([_LT_DLL_DEF_P], [dnl
-  test DEF = "`$SED -n dnl
-    -e '\''s/^[[	 ]]*//'\'' dnl Strip leading whitespace
-    -e '\''/^\(;.*\)*$/d'\'' dnl      Delete empty lines and comments
-    -e '\''s/^\(EXPORTS\|LIBRARY\)\([[	 ]].*\)*$/DEF/p'\'' dnl
-    -e q dnl                          Only consider the first "real" line
-    $1`" dnl
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3976: -1- AC_DEFUN([LT_LIB_M], [AC_REQUIRE([AC_CANONICAL_HOST])dnl
-LIBM=
-case $host in
-*-*-beos* | *-*-cegcc* | *-*-cygwin* | *-*-haiku* | *-*-mingw* | *-*-pw32* | *-*-darwin*)
-  # These system don't have libm, or don't need it
-  ;;
-*-ncr-sysv4.3*)
-  AC_CHECK_LIB(mw, _mwvalidcheckl, LIBM=-lmw)
-  AC_CHECK_LIB(m, cos, LIBM="$LIBM -lm")
-  ;;
-*)
-  AC_CHECK_LIB(m, cos, LIBM=-lm)
-  ;;
-esac
-AC_SUBST([LIBM])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3995: -1- AU_DEFUN([AC_CHECK_LIBM], [m4_if($#, 0, [LT_LIB_M], [LT_LIB_M($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:3995: -1- AC_DEFUN([AC_CHECK_LIBM], [m4_warn([obsolete], [The macro 'AC_CHECK_LIBM' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_LIB_M], [LT_LIB_M($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:8300: -1- AC_DEFUN([LT_PROG_GCJ], [m4_ifdef([AC_PROG_GCJ], [AC_PROG_GCJ],
-  [m4_ifdef([A][M_PROG_GCJ], [A][M_PROG_GCJ],
-    [AC_CHECK_TOOL(GCJ, gcj,)
-      test set = "${GCJFLAGS+set}" || GCJFLAGS="-g -O2"
-      AC_SUBST(GCJFLAGS)])])[]dnl
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:8309: -1- AU_DEFUN([LT_AC_PROG_GCJ], [m4_if($#, 0, [LT_PROG_GCJ], [LT_PROG_GCJ($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:8309: -1- AC_DEFUN([LT_AC_PROG_GCJ], [m4_warn([obsolete], [The macro 'LT_AC_PROG_GCJ' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_PROG_GCJ], [LT_PROG_GCJ($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:8316: -1- AC_DEFUN([LT_PROG_GO], [AC_CHECK_TOOL(GOC, gccgo,)
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:8323: -1- AC_DEFUN([LT_PROG_RC], [AC_CHECK_TOOL(RC, windres,)
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:8328: -1- AU_DEFUN([LT_AC_PROG_RC], [m4_if($#, 0, [LT_PROG_RC], [LT_PROG_RC($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/libtool.m4:8328: -1- AC_DEFUN([LT_AC_PROG_RC], [m4_warn([obsolete], [The macro 'LT_AC_PROG_RC' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_PROG_RC], [LT_PROG_RC($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltargz.m4:13: -1- AC_DEFUN([LT_FUNC_ARGZ], [
-dnl Required for use of '$SED' in Cygwin configuration.
-AC_REQUIRE([AC_PROG_SED])dnl
-AC_CHECK_HEADERS([argz.h], [], [], [AC_INCLUDES_DEFAULT])
-
-AC_CHECK_TYPES([error_t],
-  [],
-  [AC_DEFINE([error_t], [int],
-   [Define to a type to use for 'error_t' if it is not otherwise available.])
-   AC_DEFINE([__error_t_defined], [1], [Define so that glibc/gnulib argp.h
-    does not typedef error_t.])],
-  [#if defined(HAVE_ARGZ_H)
-#  include <argz.h>
-#endif])
-
-LT_ARGZ_H=
-AC_CHECK_FUNCS([argz_add argz_append argz_count argz_create_sep argz_insert \
-	argz_next argz_stringify], [], [LT_ARGZ_H=lt__argz.h; AC_LIBOBJ([lt__argz])])
-
-dnl if have system argz functions, allow forced use of
-dnl libltdl-supplied implementation (and default to do so
-dnl on "known bad" systems). Could use a runtime check, but
-dnl (a) detecting malloc issues is notoriously unreliable
-dnl (b) only known system that declares argz functions,
-dnl     provides them, yet they are broken, is cygwin
-dnl     releases prior to 16-Mar-2007 (1.5.24 and earlier)
-dnl So, it's more straightforward simply to special case
-dnl this for known bad systems.
-AS_IF([test -z "$LT_ARGZ_H"],
-    [AC_CACHE_CHECK(
-        [if argz actually works],
-        [lt_cv_sys_argz_works],
-        [[case $host_os in #(
-	 *cygwin*)
-	   lt_cv_sys_argz_works=no
-	   if test no != "$cross_compiling"; then
-	     lt_cv_sys_argz_works="guessing no"
-	   else
-	     lt_sed_extract_leading_digits='s/^\([0-9\.]*\).*/\1/'
-	     save_IFS=$IFS
-	     IFS=-.
-	     set x `uname -r | $SED -e "$lt_sed_extract_leading_digits"`
-	     IFS=$save_IFS
-	     lt_os_major=${2-0}
-	     lt_os_minor=${3-0}
-	     lt_os_micro=${4-0}
-	     if test 1 -lt "$lt_os_major" \
-		|| { test 1 -eq "$lt_os_major" \
-		  && { test 5 -lt "$lt_os_minor" \
-		    || { test 5 -eq "$lt_os_minor" \
-		      && test 24 -lt "$lt_os_micro"; }; }; }; then
-	       lt_cv_sys_argz_works=yes
-	     fi
-	   fi
-	   ;; #(
-	 *) lt_cv_sys_argz_works=yes ;;
-	 esac]])
-     AS_IF([test yes = "$lt_cv_sys_argz_works"],
-        [AC_DEFINE([HAVE_WORKING_ARGZ], 1,
-                   [This value is set to 1 to indicate that the system argz facility works])],
-        [LT_ARGZ_H=lt__argz.h
-        AC_LIBOBJ([lt__argz])])])
-
-AC_SUBST([LT_ARGZ_H])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:17: -1- AC_DEFUN([LT_CONFIG_LTDL_DIR], [AC_BEFORE([$0], [LTDL_INIT])
-_$0($*)
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:69: -1- AC_DEFUN([LTDL_CONVENIENCE], [AC_BEFORE([$0], [LTDL_INIT])dnl
-dnl Although the argument is deprecated and no longer documented,
-dnl LTDL_CONVENIENCE used to take a DIRECTORY orgument, if we have one
-dnl here make sure it is the same as any other declaration of libltdl's
-dnl location!  This also ensures lt_ltdl_dir is set when configure.ac is
-dnl not yet using an explicit LT_CONFIG_LTDL_DIR.
-m4_ifval([$1], [_LT_CONFIG_LTDL_DIR([$1])])dnl
-_$0()
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:82: -1- AU_DEFUN([AC_LIBLTDL_CONVENIENCE], [_LT_CONFIG_LTDL_DIR([m4_default([$1], [libltdl])])
-_LTDL_CONVENIENCE])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:82: -1- AC_DEFUN([AC_LIBLTDL_CONVENIENCE], [m4_warn([obsolete], [The macro 'AC_LIBLTDL_CONVENIENCE' is obsolete.
-You should run autoupdate.])dnl
-_LT_CONFIG_LTDL_DIR([m4_default([$1], [libltdl])])
-_LTDL_CONVENIENCE])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:125: -1- AC_DEFUN([LTDL_INSTALLABLE], [AC_BEFORE([$0], [LTDL_INIT])dnl
-dnl Although the argument is deprecated and no longer documented,
-dnl LTDL_INSTALLABLE used to take a DIRECTORY orgument, if we have one
-dnl here make sure it is the same as any other declaration of libltdl's
-dnl location!  This also ensures lt_ltdl_dir is set when configure.ac is
-dnl not yet using an explicit LT_CONFIG_LTDL_DIR.
-m4_ifval([$1], [_LT_CONFIG_LTDL_DIR([$1])])dnl
-_$0()
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:138: -1- AU_DEFUN([AC_LIBLTDL_INSTALLABLE], [_LT_CONFIG_LTDL_DIR([m4_default([$1], [libltdl])])
-_LTDL_INSTALLABLE])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:138: -1- AC_DEFUN([AC_LIBLTDL_INSTALLABLE], [m4_warn([obsolete], [The macro 'AC_LIBLTDL_INSTALLABLE' is obsolete.
-You should run autoupdate.])dnl
-_LT_CONFIG_LTDL_DIR([m4_default([$1], [libltdl])])
-_LTDL_INSTALLABLE])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:214: -1- AC_DEFUN([_LT_LIBOBJ], [
-  m4_pattern_allow([^_LT_LIBOBJS$])
-  _LT_LIBOBJS="$_LT_LIBOBJS $1.$ac_objext"
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:227: -1- AC_DEFUN([LTDL_INIT], [dnl Parse OPTIONS
-_LT_SET_OPTIONS([$0], [$1])
-
-dnl We need to keep our own list of libobjs separate from our parent project,
-dnl and the easiest way to do that is redefine the AC_LIBOBJs macro while
-dnl we look for our own LIBOBJs.
-m4_pushdef([AC_LIBOBJ], m4_defn([_LT_LIBOBJ]))
-m4_pushdef([AC_LIBSOURCES])
-
-dnl If not otherwise defined, default to the 1.5.x compatible subproject mode:
-m4_if(_LTDL_MODE, [],
-        [m4_define([_LTDL_MODE], m4_default([$2], [subproject]))
-        m4_if([-1], [m4_bregexp(_LTDL_MODE, [\(subproject\|\(non\)?recursive\)])],
-                [m4_fatal([unknown libltdl mode: ]_LTDL_MODE)])])
-
-AC_ARG_WITH([included_ltdl],
-    [AS_HELP_STRING([--with-included-ltdl],
-                    [use the GNU ltdl sources included here])])
-
-if test yes != "$with_included_ltdl"; then
-  # We are not being forced to use the included libltdl sources, so
-  # decide whether there is a useful installed version we can use.
-  AC_CHECK_HEADER([ltdl.h],
-      [AC_CHECK_DECL([lt_dlinterface_register],
-	   [AC_CHECK_LIB([ltdl], [lt_dladvise_preload],
-	       [with_included_ltdl=no],
-	       [with_included_ltdl=yes])],
-	   [with_included_ltdl=yes],
-	   [AC_INCLUDES_DEFAULT
-	    #include <ltdl.h>])],
-      [with_included_ltdl=yes],
-      [AC_INCLUDES_DEFAULT]
-  )
-fi
-
-dnl If neither LT_CONFIG_LTDL_DIR, LTDL_CONVENIENCE nor LTDL_INSTALLABLE
-dnl was called yet, then for old times' sake, we assume libltdl is in an
-dnl eponymous directory:
-AC_PROVIDE_IFELSE([LT_CONFIG_LTDL_DIR], [], [_LT_CONFIG_LTDL_DIR([libltdl])])
-
-AC_ARG_WITH([ltdl_include],
-    [AS_HELP_STRING([--with-ltdl-include=DIR],
-                    [use the ltdl headers installed in DIR])])
-
-if test -n "$with_ltdl_include"; then
-  if test -f "$with_ltdl_include/ltdl.h"; then :
-  else
-    AC_MSG_ERROR([invalid ltdl include directory: '$with_ltdl_include'])
-  fi
-else
-  with_ltdl_include=no
-fi
-
-AC_ARG_WITH([ltdl_lib],
-    [AS_HELP_STRING([--with-ltdl-lib=DIR],
-                    [use the libltdl.la installed in DIR])])
-
-if test -n "$with_ltdl_lib"; then
-  if test -f "$with_ltdl_lib/libltdl.la"; then :
-  else
-    AC_MSG_ERROR([invalid ltdl library directory: '$with_ltdl_lib'])
-  fi
-else
-  with_ltdl_lib=no
-fi
-
-case ,$with_included_ltdl,$with_ltdl_include,$with_ltdl_lib, in
-  ,yes,no,no,)
-	m4_case(m4_default(_LTDL_TYPE, [convenience]),
-	    [convenience], [_LTDL_CONVENIENCE],
-	    [installable], [_LTDL_INSTALLABLE],
-	  [m4_fatal([unknown libltdl build type: ]_LTDL_TYPE)])
-	;;
-  ,no,no,no,)
-	# If the included ltdl is not to be used, then use the
-	# preinstalled libltdl we found.
-	AC_DEFINE([HAVE_LTDL], [1],
-	  [Define this if a modern libltdl is already installed])
-	LIBLTDL=-lltdl
-	LTDLDEPS=
-	LTDLINCL=
-	;;
-  ,no*,no,*)
-	AC_MSG_ERROR(['--with-ltdl-include' and '--with-ltdl-lib' options must be used together])
-	;;
-  *)	with_included_ltdl=no
-	LIBLTDL="-L$with_ltdl_lib -lltdl"
-	LTDLDEPS=
-	LTDLINCL=-I$with_ltdl_include
-	;;
-esac
-INCLTDL=$LTDLINCL
-
-# Report our decision...
-AC_MSG_CHECKING([where to find libltdl headers])
-AC_MSG_RESULT([$LTDLINCL])
-AC_MSG_CHECKING([where to find libltdl library])
-AC_MSG_RESULT([$LIBLTDL])
-
-_LTDL_SETUP
-
-dnl restore autoconf definition.
-m4_popdef([AC_LIBOBJ])
-m4_popdef([AC_LIBSOURCES])
-
-AC_CONFIG_COMMANDS_PRE([
-    _ltdl_libobjs=
-    _ltdl_ltlibobjs=
-    if test -n "$_LT_LIBOBJS"; then
-      # Remove the extension.
-      _lt_sed_drop_objext='s/\.o$//;s/\.obj$//'
-      for i in `for i in $_LT_LIBOBJS; do echo "$i"; done | $SED "$_lt_sed_drop_objext" | sort -u`; do
-        _ltdl_libobjs="$_ltdl_libobjs $lt_libobj_prefix$i.$ac_objext"
-        _ltdl_ltlibobjs="$_ltdl_ltlibobjs $lt_libobj_prefix$i.lo"
-      done
-    fi
-    AC_SUBST([ltdl_LIBOBJS], [$_ltdl_libobjs])
-    AC_SUBST([ltdl_LTLIBOBJS], [$_ltdl_ltlibobjs])
-])
-
-# Only expand once:
-m4_define([LTDL_INIT])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:353: -1- AU_DEFUN([AC_LIB_LTDL], [LTDL_INIT($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:353: -1- AC_DEFUN([AC_LIB_LTDL], [m4_warn([obsolete], [The macro 'AC_LIB_LTDL' is obsolete.
-You should run autoupdate.])dnl
-LTDL_INIT($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:354: -1- AU_DEFUN([AC_WITH_LTDL], [LTDL_INIT($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:354: -1- AC_DEFUN([AC_WITH_LTDL], [m4_warn([obsolete], [The macro 'AC_WITH_LTDL' is obsolete.
-You should run autoupdate.])dnl
-LTDL_INIT($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:355: -1- AU_DEFUN([LT_WITH_LTDL], [LTDL_INIT($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:355: -1- AC_DEFUN([LT_WITH_LTDL], [m4_warn([obsolete], [The macro 'LT_WITH_LTDL' is obsolete.
-You should run autoupdate.])dnl
-LTDL_INIT($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:368: -1- AC_DEFUN([_LTDL_SETUP], [AC_REQUIRE([AC_PROG_CC])dnl
-AC_REQUIRE([LT_SYS_MODULE_EXT])dnl
-AC_REQUIRE([LT_SYS_MODULE_PATH])dnl
-AC_REQUIRE([LT_SYS_DLSEARCH_PATH])dnl
-AC_REQUIRE([LT_LIB_DLLOAD])dnl
-AC_REQUIRE([LT_SYS_SYMBOL_USCORE])dnl
-AC_REQUIRE([LT_FUNC_DLSYM_USCORE])dnl
-AC_REQUIRE([LT_SYS_DLOPEN_DEPLIBS])dnl
-AC_REQUIRE([LT_FUNC_ARGZ])dnl
-
-m4_require([_LT_CHECK_OBJDIR])dnl
-m4_require([_LT_HEADER_DLFCN])dnl
-m4_require([_LT_CHECK_DLPREOPEN])dnl
-m4_require([_LT_DECL_SED])dnl
-
-dnl Don't require this, or it will be expanded earlier than the code
-dnl that sets the variables it relies on:
-_LT_ENABLE_INSTALL
-
-dnl _LTDL_MODE specific code must be called at least once:
-_LTDL_MODE_DISPATCH
-
-# In order that ltdl.c can compile, find out the first AC_CONFIG_HEADERS
-# the user used.  This is so that ltdl.h can pick up the parent projects
-# config.h file, The first file in AC_CONFIG_HEADERS must contain the
-# definitions required by ltdl.c.
-# FIXME: Remove use of undocumented AC_LIST_HEADERS (2.59 compatibility).
-AC_CONFIG_COMMANDS_PRE([dnl
-m4_pattern_allow([^LT_CONFIG_H$])dnl
-m4_ifset([AH_HEADER],
-    [LT_CONFIG_H=AH_HEADER],
-    [m4_ifset([AC_LIST_HEADERS],
-	    [LT_CONFIG_H=`echo "AC_LIST_HEADERS" | $SED 's|^[[      ]]*||;s|[[ :]].*$||'`],
-	[])])])
-AC_SUBST([LT_CONFIG_H])
-
-AC_CHECK_HEADERS([unistd.h dl.h sys/dl.h dld.h mach-o/dyld.h dirent.h],
-	[], [], [AC_INCLUDES_DEFAULT])
-
-AC_CHECK_FUNCS([closedir opendir readdir], [], [AC_LIBOBJ([lt__dirent])])
-AC_CHECK_FUNCS([strlcat strlcpy], [], [AC_LIBOBJ([lt__strl])])
-
-m4_pattern_allow([LT_LIBEXT])dnl
-AC_DEFINE_UNQUOTED([LT_LIBEXT],["$libext"],[The archive extension])
-
-name=
-eval "lt_libprefix=\"$libname_spec\""
-m4_pattern_allow([LT_LIBPREFIX])dnl
-AC_DEFINE_UNQUOTED([LT_LIBPREFIX],["$lt_libprefix"],[The archive prefix])
-
-name=ltdl
-eval "LTDLOPEN=\"$libname_spec\""
-AC_SUBST([LTDLOPEN])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:445: -1- AC_DEFUN([LT_SYS_DLOPEN_DEPLIBS], [AC_REQUIRE([AC_CANONICAL_HOST])dnl
-AC_CACHE_CHECK([whether deplibs are loaded by dlopen],
-  [lt_cv_sys_dlopen_deplibs],
-  [# PORTME does your system automatically load deplibs for dlopen?
-  # or its logical equivalent (e.g. shl_load for HP-UX < 11)
-  # For now, we just catch OSes we know something about -- in the
-  # future, we'll try test this programmatically.
-  lt_cv_sys_dlopen_deplibs=unknown
-  case $host_os in
-  aix3*|aix4.1.*|aix4.2.*)
-    # Unknown whether this is true for these versions of AIX, but
-    # we want this 'case' here to explicitly catch those versions.
-    lt_cv_sys_dlopen_deplibs=unknown
-    ;;
-  aix[[4-9]]*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  amigaos*)
-    case $host_cpu in
-    powerpc)
-      lt_cv_sys_dlopen_deplibs=no
-      ;;
-    esac
-    ;;
-  darwin*)
-    # Assuming the user has installed a libdl from somewhere, this is true
-    # If you are looking for one http://www.opendarwin.org/projects/dlcompat
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  freebsd* | dragonfly* | midnightbsd*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  gnu* | linux* | k*bsd*-gnu | kopensolaris*-gnu)
-    # GNU and its variants, using gnu ld.so (Glibc)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  hpux10*|hpux11*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  interix*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  irix[[12345]]*|irix6.[[01]]*)
-    # Catch all versions of IRIX before 6.2, and indicate that we don't
-    # know how it worked for any of those versions.
-    lt_cv_sys_dlopen_deplibs=unknown
-    ;;
-  irix*)
-    # The case above catches anything before 6.2, and it's known that
-    # at 6.2 and later dlopen does load deplibs.
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  *-mlibc)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  netbsd* | netbsdelf*-gnu)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  openbsd*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  osf[[1234]]*)
-    # dlopen did load deplibs (at least at 4.x), but until the 5.x series,
-    # it did *not* use an RPATH in a shared library to find objects the
-    # library depends on, so we explicitly say 'no'.
-    lt_cv_sys_dlopen_deplibs=no
-    ;;
-  osf5.0|osf5.0a|osf5.1)
-    # dlopen *does* load deplibs and with the right loader patch applied
-    # it even uses RPATH in a shared library to search for shared objects
-    # that the library depends on, but there's no easy way to know if that
-    # patch is installed.  Since this is the case, all we can really
-    # say is unknown -- it depends on the patch being installed.  If
-    # it is, this changes to 'yes'.  Without it, it would be 'no'.
-    lt_cv_sys_dlopen_deplibs=unknown
-    ;;
-  osf*)
-    # the two cases above should catch all versions of osf <= 5.1.  Read
-    # the comments above for what we know about them.
-    # At > 5.1, deplibs are loaded *and* any RPATH in a shared library
-    # is used to find them so we can finally say 'yes'.
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  qnx*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  solaris*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-    libltdl_cv_sys_dlopen_deplibs=yes
-    ;;
-  esac
-  ])
-if test yes != "$lt_cv_sys_dlopen_deplibs"; then
- AC_DEFINE([LTDL_DLOPEN_DEPLIBS], [1],
-    [Define if the OS needs help to load dependent libraries for dlopen().])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:547: -1- AU_DEFUN([AC_LTDL_SYS_DLOPEN_DEPLIBS], [m4_if($#, 0, [LT_SYS_DLOPEN_DEPLIBS], [LT_SYS_DLOPEN_DEPLIBS($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:547: -1- AC_DEFUN([AC_LTDL_SYS_DLOPEN_DEPLIBS], [m4_warn([obsolete], [The macro 'AC_LTDL_SYS_DLOPEN_DEPLIBS' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_SYS_DLOPEN_DEPLIBS], [LT_SYS_DLOPEN_DEPLIBS($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:554: -1- AC_DEFUN([LT_SYS_MODULE_EXT], [m4_require([_LT_SYS_DYNAMIC_LINKER])dnl
-AC_CACHE_CHECK([what extension is used for runtime loadable modules],
-  [libltdl_cv_shlibext],
-[
-module=yes
-eval libltdl_cv_shlibext=$shrext_cmds
-module=no
-eval libltdl_cv_shrext=$shrext_cmds
-  ])
-if test -n "$libltdl_cv_shlibext"; then
-  m4_pattern_allow([LT_MODULE_EXT])dnl
-  AC_DEFINE_UNQUOTED([LT_MODULE_EXT], ["$libltdl_cv_shlibext"],
-    [Define to the extension used for runtime loadable modules, say, ".so".])
-fi
-if test "$libltdl_cv_shrext" != "$libltdl_cv_shlibext"; then
-  m4_pattern_allow([LT_SHARED_EXT])dnl
-  AC_DEFINE_UNQUOTED([LT_SHARED_EXT], ["$libltdl_cv_shrext"],
-    [Define to the shared library suffix, say, ".dylib".])
-fi
-if test -n "$shared_archive_member_spec"; then
-  m4_pattern_allow([LT_SHARED_LIB_MEMBER])dnl
-  AC_DEFINE_UNQUOTED([LT_SHARED_LIB_MEMBER], ["($shared_archive_member_spec.o)"],
-    [Define to the shared archive member specification, say "(shr.o)".])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:582: -1- AU_DEFUN([AC_LTDL_SHLIBEXT], [m4_if($#, 0, [LT_SYS_MODULE_EXT], [LT_SYS_MODULE_EXT($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:582: -1- AC_DEFUN([AC_LTDL_SHLIBEXT], [m4_warn([obsolete], [The macro 'AC_LTDL_SHLIBEXT' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_SYS_MODULE_EXT], [LT_SYS_MODULE_EXT($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:589: -1- AC_DEFUN([LT_SYS_MODULE_PATH], [m4_require([_LT_SYS_DYNAMIC_LINKER])dnl
-AC_CACHE_CHECK([what variable specifies run-time module search path],
-  [lt_cv_module_path_var], [lt_cv_module_path_var=$shlibpath_var])
-if test -n "$lt_cv_module_path_var"; then
-  m4_pattern_allow([LT_MODULE_PATH_VAR])dnl
-  AC_DEFINE_UNQUOTED([LT_MODULE_PATH_VAR], ["$lt_cv_module_path_var"],
-    [Define to the name of the environment variable that determines the run-time module search path.])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:601: -1- AU_DEFUN([AC_LTDL_SHLIBPATH], [m4_if($#, 0, [LT_SYS_MODULE_PATH], [LT_SYS_MODULE_PATH($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:601: -1- AC_DEFUN([AC_LTDL_SHLIBPATH], [m4_warn([obsolete], [The macro 'AC_LTDL_SHLIBPATH' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_SYS_MODULE_PATH], [LT_SYS_MODULE_PATH($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:608: -1- AC_DEFUN([LT_SYS_DLSEARCH_PATH], [m4_require([_LT_SYS_DYNAMIC_LINKER])dnl
-AC_CACHE_CHECK([for the default library search path],
-  [lt_cv_sys_dlsearch_path],
-  [lt_cv_sys_dlsearch_path=$sys_lib_dlsearch_path_spec])
-if test -n "$lt_cv_sys_dlsearch_path"; then
-  sys_dlsearch_path=
-  for dir in $lt_cv_sys_dlsearch_path; do
-    if test -z "$sys_dlsearch_path"; then
-      sys_dlsearch_path=$dir
-    else
-      sys_dlsearch_path=$sys_dlsearch_path$PATH_SEPARATOR$dir
-    fi
-  done
-  m4_pattern_allow([LT_DLSEARCH_PATH])dnl
-  AC_DEFINE_UNQUOTED([LT_DLSEARCH_PATH], ["$sys_dlsearch_path"],
-    [Define to the system default library search path.])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:629: -1- AU_DEFUN([AC_LTDL_SYSSEARCHPATH], [m4_if($#, 0, [LT_SYS_DLSEARCH_PATH], [LT_SYS_DLSEARCH_PATH($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:629: -1- AC_DEFUN([AC_LTDL_SYSSEARCHPATH], [m4_warn([obsolete], [The macro 'AC_LTDL_SYSSEARCHPATH' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_SYS_DLSEARCH_PATH], [LT_SYS_DLSEARCH_PATH($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:655: -1- AC_DEFUN([LT_LIB_DLLOAD], [m4_pattern_allow([^LT_DLLOADERS$])
-LT_DLLOADERS=
-AC_SUBST([LT_DLLOADERS])
-
-AC_LANG_PUSH([C])
-lt_dlload_save_LIBS=$LIBS
-
-LIBADD_DLOPEN=
-AC_SEARCH_LIBS([dlopen], [dl],
-	[AC_DEFINE([HAVE_LIBDL], [1],
-		   [Define if you have the libdl library or equivalent.])
-	if test "$ac_cv_search_dlopen" != "none required"; then
-	  LIBADD_DLOPEN=-ldl
-	fi
-	libltdl_cv_lib_dl_dlopen=yes
-	LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}dlopen.la"],
-    [AC_LINK_IFELSE([AC_LANG_PROGRAM([[#if HAVE_DLFCN_H
-#  include <dlfcn.h>
-#endif
-    ]], [[dlopen(0, 0);]])],
-	    [AC_DEFINE([HAVE_LIBDL], [1],
-		       [Define if you have the libdl library or equivalent.])
-	    libltdl_cv_func_dlopen=yes
-	    LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}dlopen.la"],
-	[AC_CHECK_LIB([svld], [dlopen],
-		[AC_DEFINE([HAVE_LIBDL], [1],
-			 [Define if you have the libdl library or equivalent.])
-	        LIBADD_DLOPEN=-lsvld libltdl_cv_func_dlopen=yes
-		LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}dlopen.la"])])])
-if test yes = "$libltdl_cv_func_dlopen" || test yes = "$libltdl_cv_lib_dl_dlopen"
-then
-  lt_save_LIBS=$LIBS
-  LIBS="$LIBS $LIBADD_DLOPEN"
-  AC_CHECK_FUNCS([dlerror])
-  LIBS=$lt_save_LIBS
-fi
-AC_SUBST([LIBADD_DLOPEN])
-
-LIBADD_SHL_LOAD=
-AC_CHECK_FUNC([shl_load],
-	[AC_DEFINE([HAVE_SHL_LOAD], [1],
-		   [Define if you have the shl_load function.])
-	LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}shl_load.la"],
-    [AC_CHECK_LIB([dld], [shl_load],
-	    [AC_DEFINE([HAVE_SHL_LOAD], [1],
-		       [Define if you have the shl_load function.])
-	    LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}shl_load.la"
-	    LIBADD_SHL_LOAD=-ldld])])
-AC_SUBST([LIBADD_SHL_LOAD])
-
-case $host_os in
-darwin[[1567]].*)
-# We only want this for pre-Mac OS X 10.4.
-  AC_CHECK_FUNC([_dyld_func_lookup],
-	[AC_DEFINE([HAVE_DYLD], [1],
-		   [Define if you have the _dyld_func_lookup function.])
-	LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}dyld.la"])
-  ;;
-beos*)
-  LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}load_add_on.la"
-  ;;
-cygwin* | mingw* | windows* | pw32*)
-  AC_CHECK_DECLS([cygwin_conv_path], [], [], [[#include <sys/cygwin.h>]])
-  LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}loadlibrary.la"
-  ;;
-esac
-
-AC_CHECK_LIB([dld], [dld_link],
-	[AC_DEFINE([HAVE_DLD], [1],
-		   [Define if you have the GNU dld library.])
-		LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}dld_link.la"])
-AC_SUBST([LIBADD_DLD_LINK])
-
-m4_pattern_allow([^LT_DLPREOPEN$])
-LT_DLPREOPEN=
-if test -n "$LT_DLLOADERS"
-then
-  for lt_loader in $LT_DLLOADERS; do
-    LT_DLPREOPEN="$LT_DLPREOPEN-dlpreopen $lt_loader "
-  done
-  AC_DEFINE([HAVE_LIBDLLOADER], [1],
-            [Define if libdlloader will be built on this platform])
-fi
-AC_SUBST([LT_DLPREOPEN])
-
-dnl This isn't used anymore, but set it for backwards compatibility
-LIBADD_DL="$LIBADD_DLOPEN $LIBADD_SHL_LOAD"
-AC_SUBST([LIBADD_DL])
-
-LIBS=$lt_dlload_save_LIBS
-AC_LANG_POP
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:750: -1- AU_DEFUN([AC_LTDL_DLLIB], [m4_if($#, 0, [LT_LIB_DLLOAD], [LT_LIB_DLLOAD($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:750: -1- AC_DEFUN([AC_LTDL_DLLIB], [m4_warn([obsolete], [The macro 'AC_LTDL_DLLIB' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_LIB_DLLOAD], [LT_LIB_DLLOAD($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:758: -1- AC_DEFUN([LT_SYS_SYMBOL_USCORE], [m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl
-AC_CACHE_CHECK([for _ prefix in compiled symbols],
-  [lt_cv_sys_symbol_underscore],
-  [lt_cv_sys_symbol_underscore=no
-  cat > conftest.$ac_ext <<_LT_EOF
-void nm_test_func(){}
-int main(void){nm_test_func;return 0;}
-_LT_EOF
-  if AC_TRY_EVAL(ac_compile); then
-    # Now try to grab the symbols.
-    ac_nlist=conftest.nm
-    if AC_TRY_EVAL(NM conftest.$ac_objext \| $lt_cv_sys_global_symbol_pipe \> $ac_nlist) && test -s "$ac_nlist"; then
-      # See whether the symbols have a leading underscore.
-      if grep '^. _nm_test_func' "$ac_nlist" >/dev/null; then
-        lt_cv_sys_symbol_underscore=yes
-      else
-        if grep '^. nm_test_func ' "$ac_nlist" >/dev/null; then
-	  :
-        else
-	  echo "configure: cannot find nm_test_func in $ac_nlist" >&AS_MESSAGE_LOG_FD
-        fi
-      fi
-    else
-      echo "configure: cannot run $lt_cv_sys_global_symbol_pipe" >&AS_MESSAGE_LOG_FD
-    fi
-  else
-    echo "configure: failed program was:" >&AS_MESSAGE_LOG_FD
-    cat conftest.c >&AS_MESSAGE_LOG_FD
-  fi
-  rm -rf conftest*
-  ])
-  sys_symbol_underscore=$lt_cv_sys_symbol_underscore
-  AC_SUBST([sys_symbol_underscore])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:795: -1- AU_DEFUN([AC_LTDL_SYMBOL_USCORE], [m4_if($#, 0, [LT_SYS_SYMBOL_USCORE], [LT_SYS_SYMBOL_USCORE($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:795: -1- AC_DEFUN([AC_LTDL_SYMBOL_USCORE], [m4_warn([obsolete], [The macro 'AC_LTDL_SYMBOL_USCORE' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_SYS_SYMBOL_USCORE], [LT_SYS_SYMBOL_USCORE($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:802: -1- AC_DEFUN([LT_FUNC_DLSYM_USCORE], [AC_REQUIRE([_LT_COMPILER_PIC])dnl	for lt_prog_compiler_wl
-AC_REQUIRE([LT_SYS_SYMBOL_USCORE])dnl	for lt_cv_sys_symbol_underscore
-AC_REQUIRE([LT_SYS_MODULE_EXT])dnl	for libltdl_cv_shlibext
-if test yes = "$lt_cv_sys_symbol_underscore"; then
-  if test yes = "$libltdl_cv_func_dlopen" || test yes = "$libltdl_cv_lib_dl_dlopen"; then
-    AC_CACHE_CHECK([whether we have to add an underscore for dlsym],
-      [libltdl_cv_need_uscore],
-      [libltdl_cv_need_uscore=unknown
-      dlsym_uscore_save_LIBS=$LIBS
-      LIBS="$LIBS $LIBADD_DLOPEN"
-      libname=conftmod # stay within 8.3 filename limits!
-      cat >$libname.$ac_ext <<_LT_EOF
-[#line $LINENO "configure"
-#include "confdefs.h"
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord () __attribute__((visibility("default")));
-#endif
-int fnord () { return 42; }]
-_LT_EOF
-
-      # ltfn_module_cmds module_cmds
-      # Execute tilde-delimited MODULE_CMDS with environment primed for
-      # $module_cmds or $archive_cmds type content.
-      ltfn_module_cmds ()
-      {( # subshell avoids polluting parent global environment
-          module_cmds_save_ifs=$IFS; IFS='~'
-          for cmd in @S|@1; do
-            IFS=$module_cmds_save_ifs
-            libobjs=$libname.$ac_objext; lib=$libname$libltdl_cv_shlibext
-            rpath=/not-exists; soname=$libname$libltdl_cv_shlibext; output_objdir=.
-            major=; versuffix=; verstring=; deplibs=
-            ECHO=echo; wl=$lt_prog_compiler_wl; allow_undefined_flag=
-            eval $cmd
-          done
-          IFS=$module_cmds_save_ifs
-      )}
-
-      # Compile a loadable module using libtool macro expansion results.
-      $CC $pic_flag -c $libname.$ac_ext
-      ltfn_module_cmds "${module_cmds:-$archive_cmds}"
-
-      # Try to fetch fnord with dlsym().
-      libltdl_dlunknown=0; libltdl_dlnouscore=1; libltdl_dluscore=2
-      cat >conftest.$ac_ext <<_LT_EOF
-[#line $LINENO "configure"
-#include "confdefs.h"
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-#include <stdio.h>
-#ifndef RTLD_GLOBAL
-#  ifdef DL_GLOBAL
-#    define RTLD_GLOBAL DL_GLOBAL
-#  else
-#    define RTLD_GLOBAL 0
-#  endif
-#endif
-#ifndef RTLD_NOW
-#  ifdef DL_NOW
-#    define RTLD_NOW DL_NOW
-#  else
-#    define RTLD_NOW 0
-#  endif
-#endif
-int main (void) {
-  void *handle = dlopen ("`pwd`/$libname$libltdl_cv_shlibext", RTLD_GLOBAL|RTLD_NOW);
-  int status = $libltdl_dlunknown;
-  if (handle) {
-    if (dlsym (handle, "fnord"))
-      status = $libltdl_dlnouscore;
-    else {
-      if (dlsym (handle, "_fnord"))
-        status = $libltdl_dluscore;
-      else
-	puts (dlerror ());
-    }
-    dlclose (handle);
-  } else
-    puts (dlerror ());
-  return status;
-}]
-_LT_EOF
-      if AC_TRY_EVAL(ac_link) && test -s "conftest$ac_exeext" 2>/dev/null; then
-        (./conftest; exit; ) >&AS_MESSAGE_LOG_FD 2>/dev/null
-        libltdl_status=$?
-        case x$libltdl_status in
-          x$libltdl_dlnouscore) libltdl_cv_need_uscore=no ;;
-	  x$libltdl_dluscore) libltdl_cv_need_uscore=yes ;;
-	  x*) libltdl_cv_need_uscore=unknown ;;
-        esac
-      fi
-      rm -rf conftest* $libname*
-      LIBS=$dlsym_uscore_save_LIBS
-    ])
-  fi
-fi
-
-if test yes = "$libltdl_cv_need_uscore"; then
-  AC_DEFINE([NEED_USCORE], [1],
-    [Define if dlsym() requires a leading underscore in symbol names.])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:909: -1- AU_DEFUN([AC_LTDL_DLSYM_USCORE], [m4_if($#, 0, [LT_FUNC_DLSYM_USCORE], [LT_FUNC_DLSYM_USCORE($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:909: -1- AC_DEFUN([AC_LTDL_DLSYM_USCORE], [m4_warn([obsolete], [The macro 'AC_LTDL_DLSYM_USCORE' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_FUNC_DLSYM_USCORE], [LT_FUNC_DLSYM_USCORE($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:14: -1- AC_DEFUN([LTOPTIONS_VERSION], [m4_if([1])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:113: -1- AU_DEFUN([AC_LIBTOOL_DLOPEN], [_LT_SET_OPTION([LT_INIT], [dlopen])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'dlopen' option into LT_INIT's first parameter.])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:113: -1- AC_DEFUN([AC_LIBTOOL_DLOPEN], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_DLOPEN' is obsolete.
-You should run autoupdate.])dnl
-_LT_SET_OPTION([LT_INIT], [dlopen])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'dlopen' option into LT_INIT's first parameter.])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:148: -1- AU_DEFUN([AC_LIBTOOL_WIN32_DLL], [AC_REQUIRE([AC_CANONICAL_HOST])dnl
-_LT_SET_OPTION([LT_INIT], [win32-dll])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'win32-dll' option into LT_INIT's first parameter.])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:148: -1- AC_DEFUN([AC_LIBTOOL_WIN32_DLL], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_WIN32_DLL' is obsolete.
-You should run autoupdate.])dnl
-AC_REQUIRE([AC_CANONICAL_HOST])dnl
-_LT_SET_OPTION([LT_INIT], [win32-dll])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'win32-dll' option into LT_INIT's first parameter.])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:197: -1- AC_DEFUN([AC_ENABLE_SHARED], [_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[shared])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:201: -1- AC_DEFUN([AC_DISABLE_SHARED], [_LT_SET_OPTION([LT_INIT], [disable-shared])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:205: -1- AU_DEFUN([AM_ENABLE_SHARED], [AC_ENABLE_SHARED($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:205: -1- AC_DEFUN([AM_ENABLE_SHARED], [m4_warn([obsolete], [The macro 'AM_ENABLE_SHARED' is obsolete.
-You should run autoupdate.])dnl
-AC_ENABLE_SHARED($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:206: -1- AU_DEFUN([AM_DISABLE_SHARED], [AC_DISABLE_SHARED($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:206: -1- AC_DEFUN([AM_DISABLE_SHARED], [m4_warn([obsolete], [The macro 'AM_DISABLE_SHARED' is obsolete.
-You should run autoupdate.])dnl
-AC_DISABLE_SHARED($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:251: -1- AC_DEFUN([AC_ENABLE_STATIC], [_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[static])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:255: -1- AC_DEFUN([AC_DISABLE_STATIC], [_LT_SET_OPTION([LT_INIT], [disable-static])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:259: -1- AU_DEFUN([AM_ENABLE_STATIC], [AC_ENABLE_STATIC($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:259: -1- AC_DEFUN([AM_ENABLE_STATIC], [m4_warn([obsolete], [The macro 'AM_ENABLE_STATIC' is obsolete.
-You should run autoupdate.])dnl
-AC_ENABLE_STATIC($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:260: -1- AU_DEFUN([AM_DISABLE_STATIC], [AC_DISABLE_STATIC($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:260: -1- AC_DEFUN([AM_DISABLE_STATIC], [m4_warn([obsolete], [The macro 'AM_DISABLE_STATIC' is obsolete.
-You should run autoupdate.])dnl
-AC_DISABLE_STATIC($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:305: -1- AU_DEFUN([AC_ENABLE_FAST_INSTALL], [_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[fast-install])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you put
-the 'fast-install' option into LT_INIT's first parameter.])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:305: -1- AC_DEFUN([AC_ENABLE_FAST_INSTALL], [m4_warn([obsolete], [The macro 'AC_ENABLE_FAST_INSTALL' is obsolete.
-You should run autoupdate.])dnl
-_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[fast-install])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you put
-the 'fast-install' option into LT_INIT's first parameter.])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:312: -1- AU_DEFUN([AC_DISABLE_FAST_INSTALL], [_LT_SET_OPTION([LT_INIT], [disable-fast-install])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you put
-the 'disable-fast-install' option into LT_INIT's first parameter.])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:312: -1- AC_DEFUN([AC_DISABLE_FAST_INSTALL], [m4_warn([obsolete], [The macro 'AC_DISABLE_FAST_INSTALL' is obsolete.
-You should run autoupdate.])dnl
-_LT_SET_OPTION([LT_INIT], [disable-fast-install])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you put
-the 'disable-fast-install' option into LT_INIT's first parameter.])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:441: -1- AU_DEFUN([AC_LIBTOOL_PICMODE], [_LT_SET_OPTION([LT_INIT], [pic-only])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'pic-only' option into LT_INIT's first parameter.])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltoptions.m4:441: -1- AC_DEFUN([AC_LIBTOOL_PICMODE], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_PICMODE' is obsolete.
-You should run autoupdate.])dnl
-_LT_SET_OPTION([LT_INIT], [pic-only])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'pic-only' option into LT_INIT's first parameter.])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltsugar.m4:14: -1- AC_DEFUN([LTSUGAR_VERSION], [m4_if([0.1])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltversion.m4:19: -1- AC_DEFUN([LTVERSION_VERSION], [macro_version='2.5.4'
-macro_revision='2.5.4'
-_LT_DECL(, macro_version, 0, [Which release of libtool.m4 was used?])
-_LT_DECL(, macro_revision, 0)
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:37: -1- AC_DEFUN([LTOBSOLETE_VERSION], [m4_if([1])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:41: -1- AC_DEFUN([_LT_AC_PROG_ECHO_BACKSLASH])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:42: -1- AC_DEFUN([_LT_AC_SHELL_INIT])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:43: -1- AC_DEFUN([_LT_AC_SYS_LIBPATH_AIX])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:45: -1- AC_DEFUN([_LT_AC_TAGVAR])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:46: -1- AC_DEFUN([AC_LTDL_ENABLE_INSTALL])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:47: -1- AC_DEFUN([AC_LTDL_PREOPEN])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:48: -1- AC_DEFUN([_LT_AC_SYS_COMPILER])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:49: -1- AC_DEFUN([_LT_AC_LOCK])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:50: -1- AC_DEFUN([AC_LIBTOOL_SYS_OLD_ARCHIVE])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:51: -1- AC_DEFUN([_LT_AC_TRY_DLOPEN_SELF])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:52: -1- AC_DEFUN([AC_LIBTOOL_PROG_CC_C_O])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:53: -1- AC_DEFUN([AC_LIBTOOL_SYS_HARD_LINK_LOCKS])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:54: -1- AC_DEFUN([AC_LIBTOOL_OBJDIR])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:55: -1- AC_DEFUN([AC_LTDL_OBJDIR])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:56: -1- AC_DEFUN([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:57: -1- AC_DEFUN([AC_LIBTOOL_SYS_LIB_STRIP])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:58: -1- AC_DEFUN([AC_PATH_MAGIC])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:59: -1- AC_DEFUN([AC_PROG_LD_GNU])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:60: -1- AC_DEFUN([AC_PROG_LD_RELOAD_FLAG])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:61: -1- AC_DEFUN([AC_DEPLIBS_CHECK_METHOD])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:62: -1- AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_NO_RTTI])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:63: -1- AC_DEFUN([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:64: -1- AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_PIC])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:65: -1- AC_DEFUN([AC_LIBTOOL_PROG_LD_SHLIBS])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:66: -1- AC_DEFUN([AC_LIBTOOL_POSTDEP_PREDEP])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:67: -1- AC_DEFUN([LT_AC_PROG_EGREP])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:68: -1- AC_DEFUN([LT_AC_PROG_SED])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:72: -1- AC_DEFUN([_AC_PROG_LIBTOOL])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:73: -1- AC_DEFUN([AC_LIBTOOL_SETUP])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:74: -1- AC_DEFUN([_LT_AC_CHECK_DLFCN])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:75: -1- AC_DEFUN([AC_LIBTOOL_SYS_DYNAMIC_LINKER])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:76: -1- AC_DEFUN([_LT_AC_TAGCONFIG])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:78: -1- AC_DEFUN([_LT_AC_LANG_CXX])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:79: -1- AC_DEFUN([_LT_AC_LANG_F77])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:80: -1- AC_DEFUN([_LT_AC_LANG_GCJ])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:81: -1- AC_DEFUN([AC_LIBTOOL_LANG_C_CONFIG])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:82: -1- AC_DEFUN([_LT_AC_LANG_C_CONFIG])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:83: -1- AC_DEFUN([AC_LIBTOOL_LANG_CXX_CONFIG])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:84: -1- AC_DEFUN([_LT_AC_LANG_CXX_CONFIG])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:85: -1- AC_DEFUN([AC_LIBTOOL_LANG_F77_CONFIG])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:86: -1- AC_DEFUN([_LT_AC_LANG_F77_CONFIG])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:87: -1- AC_DEFUN([AC_LIBTOOL_LANG_GCJ_CONFIG])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:88: -1- AC_DEFUN([_LT_AC_LANG_GCJ_CONFIG])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:89: -1- AC_DEFUN([AC_LIBTOOL_LANG_RC_CONFIG])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:90: -1- AC_DEFUN([_LT_AC_LANG_RC_CONFIG])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:91: -1- AC_DEFUN([AC_LIBTOOL_CONFIG])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:92: -1- AC_DEFUN([_LT_AC_FILE_LTDLL_C])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:94: -1- AC_DEFUN([_LT_AC_PROG_CXXCPP])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:97: -1- AC_DEFUN([_LT_PROG_F77])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:98: -1- AC_DEFUN([_LT_PROG_FC])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/lt~obsolete.m4:99: -1- AC_DEFUN([_LT_PROG_CXX])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:58: -1- AC_DEFUN([XORG_PROG_RAWCPP], [
-AC_REQUIRE([AC_PROG_CPP])
-AC_PATH_TOOL(RAWCPP, [cpp], [${CPP}],
-   [$PATH:/bin:/usr/bin:/usr/lib:/usr/libexec:/usr/ccs/lib:/usr/ccs/lbin:/lib])
-
-# Check for flag to avoid builtin definitions - assumes unix is predefined,
-# which is not the best choice for supporting other OS'es, but covers most
-# of the ones we need for now.
-AC_MSG_CHECKING([if $RAWCPP requires -undef])
-AC_LANG_CONFTEST([AC_LANG_SOURCE([[Does cpp redefine unix ?]])])
-if test `${RAWCPP} < conftest.$ac_ext | grep -c 'unix'` -eq 1 ; then
-	AC_MSG_RESULT([no])
-else
-	if test `${RAWCPP} -undef < conftest.$ac_ext | grep -c 'unix'` -eq 1 ; then
-		RAWCPPFLAGS=-undef
-		AC_MSG_RESULT([yes])
-	# under Cygwin unix is still defined even with -undef
-	elif test `${RAWCPP} -undef -ansi < conftest.$ac_ext | grep -c 'unix'` -eq 1 ; then
-		RAWCPPFLAGS="-undef -ansi"
-		AC_MSG_RESULT([yes, with -ansi])
-	else
-		AC_MSG_ERROR([${RAWCPP} defines unix with or without -undef.  I don't know what to do.])
-	fi
-fi
-rm -f conftest.$ac_ext
-
-AC_MSG_CHECKING([if $RAWCPP requires -traditional])
-AC_LANG_CONFTEST([AC_LANG_SOURCE([[Does cpp preserve   "whitespace"?]])])
-if test `${RAWCPP} < conftest.$ac_ext | grep -c 'preserve   "'` -eq 1 ; then
-	AC_MSG_RESULT([no])
-else
-	if test `${RAWCPP} -traditional < conftest.$ac_ext | grep -c 'preserve   "'` -eq 1 ; then
-		TRADITIONALCPPFLAGS="-traditional"
-		RAWCPPFLAGS="${RAWCPPFLAGS} -traditional"
-		AC_MSG_RESULT([yes])
-	else
-		AC_MSG_ERROR([${RAWCPP} does not preserve whitespace with or without -traditional.  I don't know what to do.])
-	fi
-fi
-rm -f conftest.$ac_ext
-AC_SUBST(RAWCPPFLAGS)
-AC_SUBST(TRADITIONALCPPFLAGS)
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:113: -1- AC_DEFUN([XORG_MANPAGE_SECTIONS], [
-AC_REQUIRE([AC_CANONICAL_HOST])
-AC_REQUIRE([AC_PROG_SED])
-
-case $host_os in
-    solaris*)
-        # Solaris 2.0 - 11.3 use SysV man page section numbers, so we
-        # check for a man page file found in later versions that use
-        # traditional section numbers instead
-        AC_CHECK_FILE([/usr/share/man/man7/attributes.7],
-                [SYSV_MAN_SECTIONS=false], [SYSV_MAN_SECTIONS=true])
-        ;;
-    *) SYSV_MAN_SECTIONS=false ;;
-esac
-
-if test x$APP_MAN_SUFFIX = x    ; then
-    APP_MAN_SUFFIX=1
-fi
-if test x$APP_MAN_DIR = x    ; then
-    APP_MAN_DIR='$(mandir)/man$(APP_MAN_SUFFIX)'
-fi
-
-if test x$LIB_MAN_SUFFIX = x    ; then
-    LIB_MAN_SUFFIX=3
-fi
-if test x$LIB_MAN_DIR = x    ; then
-    LIB_MAN_DIR='$(mandir)/man$(LIB_MAN_SUFFIX)'
-fi
-
-if test x$FILE_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				FILE_MAN_SUFFIX=4  ;;
-	*)				FILE_MAN_SUFFIX=5  ;;
-    esac
-fi
-if test x$FILE_MAN_DIR = x    ; then
-    FILE_MAN_DIR='$(mandir)/man$(FILE_MAN_SUFFIX)'
-fi
-
-if test x$MISC_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				MISC_MAN_SUFFIX=5  ;;
-	*)				MISC_MAN_SUFFIX=7  ;;
-    esac
-fi
-if test x$MISC_MAN_DIR = x    ; then
-    MISC_MAN_DIR='$(mandir)/man$(MISC_MAN_SUFFIX)'
-fi
-
-if test x$DRIVER_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				DRIVER_MAN_SUFFIX=7  ;;
-	*)				DRIVER_MAN_SUFFIX=4  ;;
-    esac
-fi
-if test x$DRIVER_MAN_DIR = x    ; then
-    DRIVER_MAN_DIR='$(mandir)/man$(DRIVER_MAN_SUFFIX)'
-fi
-
-if test x$ADMIN_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				ADMIN_MAN_SUFFIX=1m ;;
-	*)				ADMIN_MAN_SUFFIX=8  ;;
-    esac
-fi
-if test x$ADMIN_MAN_DIR = x    ; then
-    ADMIN_MAN_DIR='$(mandir)/man$(ADMIN_MAN_SUFFIX)'
-fi
-
-
-AC_SUBST([APP_MAN_SUFFIX])
-AC_SUBST([LIB_MAN_SUFFIX])
-AC_SUBST([FILE_MAN_SUFFIX])
-AC_SUBST([MISC_MAN_SUFFIX])
-AC_SUBST([DRIVER_MAN_SUFFIX])
-AC_SUBST([ADMIN_MAN_SUFFIX])
-AC_SUBST([APP_MAN_DIR])
-AC_SUBST([LIB_MAN_DIR])
-AC_SUBST([FILE_MAN_DIR])
-AC_SUBST([MISC_MAN_DIR])
-AC_SUBST([DRIVER_MAN_DIR])
-AC_SUBST([ADMIN_MAN_DIR])
-
-XORG_MAN_PAGE="X Version 11"
-AC_SUBST([XORG_MAN_PAGE])
-MAN_SUBSTS="\
-	-e 's|__vendorversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xorgversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xservername__|Xorg|g' \
-	-e 's|__xconfigfile__|xorg.conf|g' \
-	-e 's|__projectroot__|\$(prefix)|g' \
-	-e 's|__apploaddir__|\$(appdefaultdir)|g' \
-	-e 's|__appmansuffix__|\$(APP_MAN_SUFFIX)|g' \
-	-e 's|__drivermansuffix__|\$(DRIVER_MAN_SUFFIX)|g' \
-	-e 's|__adminmansuffix__|\$(ADMIN_MAN_SUFFIX)|g' \
-	-e 's|__libmansuffix__|\$(LIB_MAN_SUFFIX)|g' \
-	-e 's|__miscmansuffix__|\$(MISC_MAN_SUFFIX)|g' \
-	-e 's|__filemansuffix__|\$(FILE_MAN_SUFFIX)|g'"
-AC_SUBST([MAN_SUBSTS])
-
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:221: -1- AC_DEFUN([XORG_CHECK_SGML_DOCTOOLS], [
-AC_MSG_CHECKING([for X.Org SGML entities m4_ifval([$1],[>= $1])])
-XORG_SGML_PATH=
-PKG_CHECK_EXISTS([xorg-sgml-doctools m4_ifval([$1],[>= $1])],
-    [XORG_SGML_PATH=`$PKG_CONFIG --variable=sgmlrootdir xorg-sgml-doctools`],
-    [m4_ifval([$1],[:],
-        [if test x"$cross_compiling" != x"yes" ; then
-            AC_CHECK_FILE([$prefix/share/sgml/X11/defs.ent],
-                          [XORG_SGML_PATH=$prefix/share/sgml])
-         fi])
-    ])
-
-# Define variables STYLESHEET_SRCDIR and XSL_STYLESHEET containing
-# the path and the name of the doc stylesheet
-if test "x$XORG_SGML_PATH" != "x" ; then
-   AC_MSG_RESULT([$XORG_SGML_PATH])
-   STYLESHEET_SRCDIR=$XORG_SGML_PATH/X11
-   XSL_STYLESHEET=$STYLESHEET_SRCDIR/xorg.xsl
-else
-   AC_MSG_RESULT([no])
-fi
-
-AC_SUBST(XORG_SGML_PATH)
-AC_SUBST(STYLESHEET_SRCDIR)
-AC_SUBST(XSL_STYLESHEET)
-AM_CONDITIONAL([HAVE_STYLESHEETS], [test "x$XSL_STYLESHEET" != "x"])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:257: -1- AC_DEFUN([XORG_CHECK_LINUXDOC], [
-AC_REQUIRE([XORG_CHECK_SGML_DOCTOOLS])
-AC_REQUIRE([XORG_WITH_PS2PDF])
-
-AC_PATH_PROG(LINUXDOC, linuxdoc)
-
-AC_MSG_CHECKING([whether to build documentation])
-
-if test x$XORG_SGML_PATH != x && test x$LINUXDOC != x ; then
-   BUILDDOC=yes
-else
-   BUILDDOC=no
-fi
-
-AM_CONDITIONAL(BUILD_LINUXDOC, [test x$BUILDDOC = xyes])
-
-AC_MSG_RESULT([$BUILDDOC])
-
-AC_MSG_CHECKING([whether to build pdf documentation])
-
-if test x$have_ps2pdf != xno && test x$BUILD_PDFDOC != xno; then
-   BUILDPDFDOC=yes
-else
-   BUILDPDFDOC=no
-fi
-
-AM_CONDITIONAL(BUILD_PDFDOC, [test x$BUILDPDFDOC = xyes])
-
-AC_MSG_RESULT([$BUILDPDFDOC])
-
-MAKE_TEXT="SGML_SEARCH_PATH=$XORG_SGML_PATH GROFF_NO_SGR=y $LINUXDOC -B txt -f"
-MAKE_PS="SGML_SEARCH_PATH=$XORG_SGML_PATH $LINUXDOC -B latex --papersize=letter --output=ps"
-MAKE_PDF="$PS2PDF"
-MAKE_HTML="SGML_SEARCH_PATH=$XORG_SGML_PATH $LINUXDOC  -B html --split=0"
-
-AC_SUBST(MAKE_TEXT)
-AC_SUBST(MAKE_PS)
-AC_SUBST(MAKE_PDF)
-AC_SUBST(MAKE_HTML)
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:306: -1- AC_DEFUN([XORG_CHECK_DOCBOOK], [
-AC_REQUIRE([XORG_CHECK_SGML_DOCTOOLS])
-
-BUILDTXTDOC=no
-BUILDPDFDOC=no
-BUILDPSDOC=no
-BUILDHTMLDOC=no
-
-AC_PATH_PROG(DOCBOOKPS, docbook2ps)
-AC_PATH_PROG(DOCBOOKPDF, docbook2pdf)
-AC_PATH_PROG(DOCBOOKHTML, docbook2html)
-AC_PATH_PROG(DOCBOOKTXT, docbook2txt)
-
-AC_MSG_CHECKING([whether to build text documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKTXT != x &&
-   test x$BUILD_TXTDOC != xno; then
-	BUILDTXTDOC=yes
-fi
-AM_CONDITIONAL(BUILD_TXTDOC, [test x$BUILDTXTDOC = xyes])
-AC_MSG_RESULT([$BUILDTXTDOC])
-
-AC_MSG_CHECKING([whether to build PDF documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKPDF != x &&
-   test x$BUILD_PDFDOC != xno; then
-	BUILDPDFDOC=yes
-fi
-AM_CONDITIONAL(BUILD_PDFDOC, [test x$BUILDPDFDOC = xyes])
-AC_MSG_RESULT([$BUILDPDFDOC])
-
-AC_MSG_CHECKING([whether to build PostScript documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKPS != x &&
-   test x$BUILD_PSDOC != xno; then
-	BUILDPSDOC=yes
-fi
-AM_CONDITIONAL(BUILD_PSDOC, [test x$BUILDPSDOC = xyes])
-AC_MSG_RESULT([$BUILDPSDOC])
-
-AC_MSG_CHECKING([whether to build HTML documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKHTML != x &&
-   test x$BUILD_HTMLDOC != xno; then
-	BUILDHTMLDOC=yes
-fi
-AM_CONDITIONAL(BUILD_HTMLDOC, [test x$BUILDHTMLDOC = xyes])
-AC_MSG_RESULT([$BUILDHTMLDOC])
-
-MAKE_TEXT="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKTXT"
-MAKE_PS="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKPS"
-MAKE_PDF="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKPDF"
-MAKE_HTML="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKHTML"
-
-AC_SUBST(MAKE_TEXT)
-AC_SUBST(MAKE_PS)
-AC_SUBST(MAKE_PDF)
-AC_SUBST(MAKE_HTML)
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:387: -1- AC_DEFUN([XORG_WITH_XMLTO], [
-AC_ARG_VAR([XMLTO], [Path to xmlto command])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(xmlto,
-	AS_HELP_STRING([--with-xmlto],
-	   [Use xmlto to regenerate documentation (default: ]_defopt[)]),
-	   [use_xmlto=$withval], [use_xmlto=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_xmlto" = x"auto"; then
-   AC_PATH_PROG([XMLTO], [xmlto])
-   if test "x$XMLTO" = "x"; then
-        AC_MSG_WARN([xmlto not found - documentation targets will be skipped])
-	have_xmlto=no
-   else
-        have_xmlto=yes
-   fi
-elif test "x$use_xmlto" = x"yes" ; then
-   AC_PATH_PROG([XMLTO], [xmlto])
-   if test "x$XMLTO" = "x"; then
-        AC_MSG_ERROR([--with-xmlto=yes specified but xmlto not found in PATH])
-   fi
-   have_xmlto=yes
-elif test "x$use_xmlto" = x"no" ; then
-   if test "x$XMLTO" != "x"; then
-      AC_MSG_WARN([ignoring XMLTO environment variable since --with-xmlto=no was specified])
-   fi
-   have_xmlto=no
-else
-   AC_MSG_ERROR([--with-xmlto expects 'yes' or 'no'])
-fi
-
-# Test for a minimum version of xmlto, if provided.
-m4_ifval([$1],
-[if test "$have_xmlto" = yes; then
-    # scrape the xmlto version
-    AC_MSG_CHECKING([the xmlto version])
-    xmlto_version=`$XMLTO --version 2>/dev/null | cut -d' ' -f3`
-    AC_MSG_RESULT([$xmlto_version])
-    AS_VERSION_COMPARE([$xmlto_version], [$1],
-        [if test "x$use_xmlto" = xauto; then
-            AC_MSG_WARN([xmlto version $xmlto_version found, but $1 needed])
-            have_xmlto=no
-        else
-            AC_MSG_ERROR([xmlto version $xmlto_version found, but $1 needed])
-        fi])
-fi])
-
-# Test for the ability of xmlto to generate a text target
-#
-# NOTE: xmlto 0.0.27 or higher return a non-zero return code in the
-# following test for empty XML docbook files.
-# For compatibility reasons use the following empty XML docbook file and if
-# it fails try it again with a non-empty XML file.
-have_xmlto_text=no
-cat > conftest.xml << "EOF"
-EOF
-AS_IF([test "$have_xmlto" = yes],
-      [AS_IF([$XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1],
-             [have_xmlto_text=yes],
-             [# Try it again with a non-empty XML file.
-              cat > conftest.xml << "EOF"
-<x></x>
-EOF
-              AS_IF([$XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1],
-                    [have_xmlto_text=yes],
-                    [AC_MSG_WARN([xmlto cannot generate text format, this format skipped])])])])
-rm -f conftest.xml
-AM_CONDITIONAL([HAVE_XMLTO_TEXT], [test $have_xmlto_text = yes])
-AM_CONDITIONAL([HAVE_XMLTO], [test "$have_xmlto" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:482: -1- AC_DEFUN([XORG_WITH_XSLTPROC], [
-AC_ARG_VAR([XSLTPROC], [Path to xsltproc command])
-# Preserves the interface, should it be implemented later
-m4_ifval([$1], [m4_warn([syntax], [Checking for xsltproc MIN-VERSION is not implemented])])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(xsltproc,
-	AS_HELP_STRING([--with-xsltproc],
-	   [Use xsltproc for the transformation of XML documents (default: ]_defopt[)]),
-	   [use_xsltproc=$withval], [use_xsltproc=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_xsltproc" = x"auto"; then
-   AC_PATH_PROG([XSLTPROC], [xsltproc])
-   if test "x$XSLTPROC" = "x"; then
-        AC_MSG_WARN([xsltproc not found - cannot transform XML documents])
-	have_xsltproc=no
-   else
-        have_xsltproc=yes
-   fi
-elif test "x$use_xsltproc" = x"yes" ; then
-   AC_PATH_PROG([XSLTPROC], [xsltproc])
-   if test "x$XSLTPROC" = "x"; then
-        AC_MSG_ERROR([--with-xsltproc=yes specified but xsltproc not found in PATH])
-   fi
-   have_xsltproc=yes
-elif test "x$use_xsltproc" = x"no" ; then
-   if test "x$XSLTPROC" != "x"; then
-      AC_MSG_WARN([ignoring XSLTPROC environment variable since --with-xsltproc=no was specified])
-   fi
-   have_xsltproc=no
-else
-   AC_MSG_ERROR([--with-xsltproc expects 'yes' or 'no'])
-fi
-
-AM_CONDITIONAL([HAVE_XSLTPROC], [test "$have_xsltproc" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:539: -1- AC_DEFUN([XORG_WITH_PERL], [
-AC_ARG_VAR([PERL], [Path to perl command])
-# Preserves the interface, should it be implemented later
-m4_ifval([$1], [m4_warn([syntax], [Checking for perl MIN-VERSION is not implemented])])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(perl,
-	AS_HELP_STRING([--with-perl],
-	   [Use perl for extracting information from files (default: ]_defopt[)]),
-	   [use_perl=$withval], [use_perl=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_perl" = x"auto"; then
-   AC_PATH_PROG([PERL], [perl])
-   if test "x$PERL" = "x"; then
-        AC_MSG_WARN([perl not found - cannot extract information and report])
-	have_perl=no
-   else
-        have_perl=yes
-   fi
-elif test "x$use_perl" = x"yes" ; then
-   AC_PATH_PROG([PERL], [perl])
-   if test "x$PERL" = "x"; then
-        AC_MSG_ERROR([--with-perl=yes specified but perl not found in PATH])
-   fi
-   have_perl=yes
-elif test "x$use_perl" = x"no" ; then
-   if test "x$PERL" != "x"; then
-      AC_MSG_WARN([ignoring PERL environment variable since --with-perl=no was specified])
-   fi
-   have_perl=no
-else
-   AC_MSG_ERROR([--with-perl expects 'yes' or 'no'])
-fi
-
-AM_CONDITIONAL([HAVE_PERL], [test "$have_perl" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:597: -1- AC_DEFUN([XORG_WITH_ASCIIDOC], [
-AC_ARG_VAR([ASCIIDOC], [Path to asciidoc command])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(asciidoc,
-	AS_HELP_STRING([--with-asciidoc],
-	   [Use asciidoc to regenerate documentation (default: ]_defopt[)]),
-	   [use_asciidoc=$withval], [use_asciidoc=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_asciidoc" = x"auto"; then
-   AC_PATH_PROG([ASCIIDOC], [asciidoc])
-   if test "x$ASCIIDOC" = "x"; then
-        AC_MSG_WARN([asciidoc not found - documentation targets will be skipped])
-	have_asciidoc=no
-   else
-        have_asciidoc=yes
-   fi
-elif test "x$use_asciidoc" = x"yes" ; then
-   AC_PATH_PROG([ASCIIDOC], [asciidoc])
-   if test "x$ASCIIDOC" = "x"; then
-        AC_MSG_ERROR([--with-asciidoc=yes specified but asciidoc not found in PATH])
-   fi
-   have_asciidoc=yes
-elif test "x$use_asciidoc" = x"no" ; then
-   if test "x$ASCIIDOC" != "x"; then
-      AC_MSG_WARN([ignoring ASCIIDOC environment variable since --with-asciidoc=no was specified])
-   fi
-   have_asciidoc=no
-else
-   AC_MSG_ERROR([--with-asciidoc expects 'yes' or 'no'])
-fi
-m4_ifval([$1],
-[if test "$have_asciidoc" = yes; then
-    # scrape the asciidoc version
-    AC_MSG_CHECKING([the asciidoc version])
-    asciidoc_version=`$ASCIIDOC --version 2>/dev/null | cut -d' ' -f2`
-    AC_MSG_RESULT([$asciidoc_version])
-    AS_VERSION_COMPARE([$asciidoc_version], [$1],
-        [if test "x$use_asciidoc" = xauto; then
-            AC_MSG_WARN([asciidoc version $asciidoc_version found, but $1 needed])
-            have_asciidoc=no
-        else
-            AC_MSG_ERROR([asciidoc version $asciidoc_version found, but $1 needed])
-        fi])
-fi])
-AM_CONDITIONAL([HAVE_ASCIIDOC], [test "$have_asciidoc" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:667: -1- AC_DEFUN([XORG_WITH_DOXYGEN], [
-AC_ARG_VAR([DOXYGEN], [Path to doxygen command])
-AC_ARG_VAR([DOT], [Path to the dot graphics utility])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(doxygen,
-	AS_HELP_STRING([--with-doxygen],
-	   [Use doxygen to regenerate documentation (default: ]_defopt[)]),
-	   [use_doxygen=$withval], [use_doxygen=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_doxygen" = x"auto"; then
-   AC_PATH_PROG([DOXYGEN], [doxygen])
-   if test "x$DOXYGEN" = "x"; then
-        AC_MSG_WARN([doxygen not found - documentation targets will be skipped])
-	have_doxygen=no
-   else
-        have_doxygen=yes
-   fi
-elif test "x$use_doxygen" = x"yes" ; then
-   AC_PATH_PROG([DOXYGEN], [doxygen])
-   if test "x$DOXYGEN" = "x"; then
-        AC_MSG_ERROR([--with-doxygen=yes specified but doxygen not found in PATH])
-   fi
-   have_doxygen=yes
-elif test "x$use_doxygen" = x"no" ; then
-   if test "x$DOXYGEN" != "x"; then
-      AC_MSG_WARN([ignoring DOXYGEN environment variable since --with-doxygen=no was specified])
-   fi
-   have_doxygen=no
-else
-   AC_MSG_ERROR([--with-doxygen expects 'yes' or 'no'])
-fi
-m4_ifval([$1],
-[if test "$have_doxygen" = yes; then
-    # scrape the doxygen version
-    AC_MSG_CHECKING([the doxygen version])
-    doxygen_version=`$DOXYGEN --version 2>/dev/null`
-    AC_MSG_RESULT([$doxygen_version])
-    AS_VERSION_COMPARE([$doxygen_version], [$1],
-        [if test "x$use_doxygen" = xauto; then
-            AC_MSG_WARN([doxygen version $doxygen_version found, but $1 needed])
-            have_doxygen=no
-        else
-            AC_MSG_ERROR([doxygen version $doxygen_version found, but $1 needed])
-        fi])
-fi])
-
-dnl Check for DOT if we have doxygen. The caller decides if it is mandatory
-dnl HAVE_DOT is a variable that can be used in your doxygen.in config file:
-dnl 	HAVE_DOT = @HAVE_DOT@
-HAVE_DOT=no
-if test "x$have_doxygen" = "xyes"; then
-  AC_PATH_PROG([DOT], [dot])
-    if test "x$DOT" != "x"; then
-      HAVE_DOT=yes
-    fi
-fi
-
-AC_SUBST([HAVE_DOT])
-AM_CONDITIONAL([HAVE_DOT], [test "$HAVE_DOT" = "yes"])
-AM_CONDITIONAL([HAVE_DOXYGEN], [test "$have_doxygen" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:767: -1- AC_DEFUN([XORG_WITH_GROFF], [
-AC_ARG_VAR([GROFF], [Path to groff command])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_WITH(groff,
-	AS_HELP_STRING([--with-groff],
-	   [Use groff to regenerate documentation (default: ]_defopt[)]),
-	   [use_groff=$withval], [use_groff=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_groff" = x"auto"; then
-   AC_PATH_PROG([GROFF], [groff])
-   if test "x$GROFF" = "x"; then
-        AC_MSG_WARN([groff not found - documentation targets will be skipped])
-	have_groff=no
-   else
-        have_groff=yes
-   fi
-elif test "x$use_groff" = x"yes" ; then
-   AC_PATH_PROG([GROFF], [groff])
-   if test "x$GROFF" = "x"; then
-        AC_MSG_ERROR([--with-groff=yes specified but groff not found in PATH])
-   fi
-   have_groff=yes
-elif test "x$use_groff" = x"no" ; then
-   if test "x$GROFF" != "x"; then
-      AC_MSG_WARN([ignoring GROFF environment variable since --with-groff=no was specified])
-   fi
-   have_groff=no
-else
-   AC_MSG_ERROR([--with-groff expects 'yes' or 'no'])
-fi
-
-# We have groff, test for the presence of the macro packages
-if test "x$have_groff" = x"yes"; then
-    AC_MSG_CHECKING([for ${GROFF} -ms macros])
-    if ${GROFF} -ms -I. /dev/null >/dev/null 2>&1 ; then
-        groff_ms_works=yes
-    else
-        groff_ms_works=no
-    fi
-    AC_MSG_RESULT([$groff_ms_works])
-    AC_MSG_CHECKING([for ${GROFF} -mm macros])
-    if ${GROFF} -mm -I. /dev/null >/dev/null 2>&1 ; then
-        groff_mm_works=yes
-    else
-        groff_mm_works=no
-    fi
-    AC_MSG_RESULT([$groff_mm_works])
-fi
-
-# We have groff, test for HTML dependencies, one command per package
-if test "x$have_groff" = x"yes"; then
-   AC_PATH_PROGS(GS_PATH, [gs gswin32c])
-   AC_PATH_PROG(PNMTOPNG_PATH, [pnmtopng])
-   AC_PATH_PROG(PSSELECT_PATH, [psselect])
-   if test "x$GS_PATH" != "x" -a "x$PNMTOPNG_PATH" != "x" -a "x$PSSELECT_PATH" != "x"; then
-      have_groff_html=yes
-   else
-      have_groff_html=no
-      AC_MSG_WARN([grohtml dependencies not found - HTML Documentation skipped. Refer to grohtml man pages])
-   fi
-fi
-
-# Set Automake conditionals for Makefiles
-AM_CONDITIONAL([HAVE_GROFF], [test "$have_groff" = yes])
-AM_CONDITIONAL([HAVE_GROFF_MS], [test "$groff_ms_works" = yes])
-AM_CONDITIONAL([HAVE_GROFF_MM], [test "$groff_mm_works" = yes])
-AM_CONDITIONAL([HAVE_GROFF_HTML], [test "$have_groff_html" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:859: -1- AC_DEFUN([XORG_WITH_FOP], [
-AC_ARG_VAR([FOP], [Path to fop command])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(fop,
-	AS_HELP_STRING([--with-fop],
-	   [Use fop to regenerate documentation (default: ]_defopt[)]),
-	   [use_fop=$withval], [use_fop=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_fop" = x"auto"; then
-   AC_PATH_PROG([FOP], [fop])
-   if test "x$FOP" = "x"; then
-        AC_MSG_WARN([fop not found - documentation targets will be skipped])
-	have_fop=no
-   else
-        have_fop=yes
-   fi
-elif test "x$use_fop" = x"yes" ; then
-   AC_PATH_PROG([FOP], [fop])
-   if test "x$FOP" = "x"; then
-        AC_MSG_ERROR([--with-fop=yes specified but fop not found in PATH])
-   fi
-   have_fop=yes
-elif test "x$use_fop" = x"no" ; then
-   if test "x$FOP" != "x"; then
-      AC_MSG_WARN([ignoring FOP environment variable since --with-fop=no was specified])
-   fi
-   have_fop=no
-else
-   AC_MSG_ERROR([--with-fop expects 'yes' or 'no'])
-fi
-
-# Test for a minimum version of fop, if provided.
-m4_ifval([$1],
-[if test "$have_fop" = yes; then
-    # scrape the fop version
-    AC_MSG_CHECKING([for fop minimum version])
-    fop_version=`$FOP -version 2>/dev/null | cut -d' ' -f3`
-    AC_MSG_RESULT([$fop_version])
-    AS_VERSION_COMPARE([$fop_version], [$1],
-        [if test "x$use_fop" = xauto; then
-            AC_MSG_WARN([fop version $fop_version found, but $1 needed])
-            have_fop=no
-        else
-            AC_MSG_ERROR([fop version $fop_version found, but $1 needed])
-        fi])
-fi])
-AM_CONDITIONAL([HAVE_FOP], [test "$have_fop" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:921: -1- AC_DEFUN([XORG_WITH_M4], [
-AC_CACHE_CHECK([for m4 that supports -I option], [ac_cv_path_M4],
-   [AC_PATH_PROGS_FEATURE_CHECK([M4], [m4 gm4],
-       [[$ac_path_M4 -I. /dev/null > /dev/null 2>&1 && \
-         ac_cv_path_M4=$ac_path_M4 ac_path_M4_found=:]],
-   [AC_MSG_ERROR([could not find m4 that supports -I option])],
-   [$PATH:/usr/gnu/bin])])
-
-AC_SUBST([M4], [$ac_cv_path_M4])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:953: -1- AC_DEFUN([XORG_WITH_PS2PDF], [
-AC_ARG_VAR([PS2PDF], [Path to ps2pdf command])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_WITH(ps2pdf,
-	AS_HELP_STRING([--with-ps2pdf],
-	   [Use ps2pdf to regenerate documentation (default: ]_defopt[)]),
-	   [use_ps2pdf=$withval], [use_ps2pdf=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_ps2pdf" = x"auto"; then
-   AC_PATH_PROG([PS2PDF], [ps2pdf])
-   if test "x$PS2PDF" = "x"; then
-        AC_MSG_WARN([ps2pdf not found - documentation targets will be skipped])
-	have_ps2pdf=no
-   else
-        have_ps2pdf=yes
-   fi
-elif test "x$use_ps2pdf" = x"yes" ; then
-   AC_PATH_PROG([PS2PDF], [ps2pdf])
-   if test "x$PS2PDF" = "x"; then
-        AC_MSG_ERROR([--with-ps2pdf=yes specified but ps2pdf not found in PATH])
-   fi
-   have_ps2pdf=yes
-elif test "x$use_ps2pdf" = x"no" ; then
-   if test "x$PS2PDF" != "x"; then
-      AC_MSG_WARN([ignoring PS2PDF environment variable since --with-ps2pdf=no was specified])
-   fi
-   have_ps2pdf=no
-else
-   AC_MSG_ERROR([--with-ps2pdf expects 'yes' or 'no'])
-fi
-AM_CONDITIONAL([HAVE_PS2PDF], [test "$have_ps2pdf" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1010: -1- AC_DEFUN([XORG_ENABLE_DOCS], [
-m4_define([docs_default], m4_default([$1], [yes]))
-AC_ARG_ENABLE(docs,
-	AS_HELP_STRING([--enable-docs],
-	   [Enable building the documentation (default: ]docs_default[)]),
-	   [build_docs=$enableval], [build_docs=]docs_default)
-m4_undefine([docs_default])
-AM_CONDITIONAL(ENABLE_DOCS, [test x$build_docs = xyes])
-AC_MSG_CHECKING([whether to build documentation])
-AC_MSG_RESULT([$build_docs])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1043: -1- AC_DEFUN([XORG_ENABLE_DEVEL_DOCS], [
-m4_define([devel_default], m4_default([$1], [yes]))
-AC_ARG_ENABLE(devel-docs,
-	AS_HELP_STRING([--enable-devel-docs],
-	   [Enable building the developer documentation (default: ]devel_default[)]),
-	   [build_devel_docs=$enableval], [build_devel_docs=]devel_default)
-m4_undefine([devel_default])
-AM_CONDITIONAL(ENABLE_DEVEL_DOCS, [test x$build_devel_docs = xyes])
-AC_MSG_CHECKING([whether to build developer documentation])
-AC_MSG_RESULT([$build_devel_docs])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1076: -1- AC_DEFUN([XORG_ENABLE_SPECS], [
-m4_define([spec_default], m4_default([$1], [yes]))
-AC_ARG_ENABLE(specs,
-	AS_HELP_STRING([--enable-specs],
-	   [Enable building the specs (default: ]spec_default[)]),
-	   [build_specs=$enableval], [build_specs=]spec_default)
-m4_undefine([spec_default])
-AM_CONDITIONAL(ENABLE_SPECS, [test x$build_specs = xyes])
-AC_MSG_CHECKING([whether to build functional specifications])
-AC_MSG_RESULT([$build_specs])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1108: -1- AC_DEFUN([XORG_ENABLE_UNIT_TESTS], [
-AC_BEFORE([$0], [XORG_WITH_GLIB])
-AC_BEFORE([$0], [XORG_LD_WRAP])
-AC_REQUIRE([XORG_MEMORY_CHECK_FLAGS])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_ENABLE(unit-tests, AS_HELP_STRING([--enable-unit-tests],
-	[Enable building unit test cases (default: ]_defopt[)]),
-	[enable_unit_tests=$enableval], [enable_unit_tests=]_defopt)
-m4_undefine([_defopt])
-AM_CONDITIONAL(ENABLE_UNIT_TESTS, [test "x$enable_unit_tests" != xno])
-AC_MSG_CHECKING([whether to build unit test cases])
-AC_MSG_RESULT([$enable_unit_tests])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1141: -1- AC_DEFUN([XORG_ENABLE_INTEGRATION_TESTS], [
-AC_REQUIRE([XORG_MEMORY_CHECK_FLAGS])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_ENABLE(integration-tests, AS_HELP_STRING([--enable-integration-tests],
-	[Enable building integration test cases (default: ]_defopt[)]),
-	[enable_integration_tests=$enableval],
-	[enable_integration_tests=]_defopt)
-m4_undefine([_defopt])
-AM_CONDITIONAL([ENABLE_INTEGRATION_TESTS],
-	[test "x$enable_integration_tests" != xno])
-AC_MSG_CHECKING([whether to build unit test cases])
-AC_MSG_RESULT([$enable_integration_tests])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1175: -1- AC_DEFUN([XORG_WITH_GLIB], [
-AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(glib, AS_HELP_STRING([--with-glib],
-	[Use GLib library for unit testing (default: ]_defopt[)]),
-	[with_glib=$withval], [with_glib=]_defopt)
-m4_undefine([_defopt])
-
-have_glib=no
-# Do not probe GLib if user explicitly disabled unit testing
-if test "x$enable_unit_tests" != x"no"; then
-  # Do not probe GLib if user explicitly disabled it
-  if test "x$with_glib" != x"no"; then
-    m4_ifval(
-      [$1],
-      [PKG_CHECK_MODULES([GLIB], [glib-2.0 >= $1], [have_glib=yes], [have_glib=no])],
-      [PKG_CHECK_MODULES([GLIB], [glib-2.0], [have_glib=yes], [have_glib=no])]
-    )
-  fi
-fi
-
-# Not having GLib when unit testing has been explicitly requested is an error
-if test "x$enable_unit_tests" = x"yes"; then
-  if test "x$have_glib" = x"no"; then
-    AC_MSG_ERROR([--enable-unit-tests=yes specified but glib-2.0 not found])
-  fi
-fi
-
-# Having unit testing disabled when GLib has been explicitly requested is an error
-if test "x$enable_unit_tests" = x"no"; then
-  if test "x$with_glib" = x"yes"; then
-    AC_MSG_ERROR([--enable-unit-tests=yes specified but glib-2.0 not found])
-  fi
-fi
-
-# Not having GLib when it has been explicitly requested is an error
-if test "x$with_glib" = x"yes"; then
-  if test "x$have_glib" = x"no"; then
-    AC_MSG_ERROR([--with-glib=yes specified but glib-2.0 not found])
-  fi
-fi
-
-AM_CONDITIONAL([HAVE_GLIB], [test "$have_glib" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1234: -1- AC_DEFUN([XORG_LD_WRAP], [
-XORG_CHECK_LINKER_FLAGS([-Wl,-wrap,exit],[have_ld_wrap=yes],[have_ld_wrap=no],
-    [AC_LANG_PROGRAM([#include <stdlib.h>
-                      void __wrap_exit(int status) { return; }],
-                     [exit(0);])])
-# Not having ld wrap when unit testing has been explicitly requested is an error
-if test "x$enable_unit_tests" = x"yes" -a "x$1" != "xoptional"; then
-  if test "x$have_ld_wrap" = x"no"; then
-    AC_MSG_ERROR([--enable-unit-tests=yes specified but ld -wrap support is not available])
-  fi
-fi
-AM_CONDITIONAL([HAVE_LD_WRAP], [test "$have_ld_wrap" = yes])
-#
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1298: -1- AC_DEFUN([XORG_CHECK_LINKER_FLAGS], [AC_MSG_CHECKING([whether the linker accepts $1])
-dnl Some hackery here since AC_CACHE_VAL can't handle a non-literal varname:
-AS_LITERAL_IF([$1],
-  [AC_CACHE_VAL(AS_TR_SH(xorg_cv_linker_flags_[$1]), [
-      ax_save_FLAGS=$LDFLAGS
-      LDFLAGS="$1"
-      AC_LINK_IFELSE([m4_default([$4],[AC_LANG_PROGRAM()])],
-        AS_TR_SH(xorg_cv_linker_flags_[$1])=yes,
-        AS_TR_SH(xorg_cv_linker_flags_[$1])=no)
-      LDFLAGS=$ax_save_FLAGS])],
-  [ax_save_FLAGS=$LDFLAGS
-   LDFLAGS="$1"
-   AC_LINK_IFELSE([AC_LANG_PROGRAM()],
-     eval AS_TR_SH(xorg_cv_linker_flags_[$1])=yes,
-     eval AS_TR_SH(xorg_cv_linker_flags_[$1])=no)
-   LDFLAGS=$ax_save_FLAGS])
-eval xorg_check_linker_flags=$AS_TR_SH(xorg_cv_linker_flags_[$1])
-AC_MSG_RESULT($xorg_check_linker_flags)
-if test "x$xorg_check_linker_flags" = xyes; then
-	m4_default([$2], :)
-else
-	m4_default([$3], :)
-fi
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1338: -1- AC_DEFUN([XORG_MEMORY_CHECK_FLAGS], [
-
-AC_REQUIRE([AC_CANONICAL_HOST])
-AC_ARG_VAR([XORG_MALLOC_DEBUG_ENV],
-           [Environment variables to enable memory checking in tests])
-
-# Check for different types of support on different platforms
-case $host_os in
-    solaris*)
-        AC_CHECK_LIB([umem], [umem_alloc],
-            [malloc_debug_env='LD_PRELOAD=libumem.so UMEM_DEBUG=default'])
-        ;;
-    *-gnu*) # GNU libc - Value is used as a single byte bit pattern,
-        # both directly and inverted, so should not be 0 or 255.
-        malloc_debug_env='MALLOC_PERTURB_=15'
-        ;;
-    darwin*)
-        malloc_debug_env='MallocPreScribble=1 MallocScribble=1 DYLD_INSERT_LIBRARIES=/usr/lib/libgmalloc.dylib'
-        ;;
-    *bsd*)
-        malloc_debug_env='MallocPreScribble=1 MallocScribble=1'
-        ;;
-esac
-
-# User supplied flags override default flags
-if test "x$XORG_MALLOC_DEBUG_ENV" != "x"; then
-    malloc_debug_env="$XORG_MALLOC_DEBUG_ENV"
-fi
-
-AC_SUBST([XORG_MALLOC_DEBUG_ENV],[$malloc_debug_env])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1383: -1- AC_DEFUN([XORG_CHECK_MALLOC_ZERO], [
-AC_ARG_ENABLE(malloc0returnsnull,
-	AS_HELP_STRING([--enable-malloc0returnsnull],
-		       [assume malloc(0) can return NULL (default: yes)]),
-	[MALLOC_ZERO_RETURNS_NULL=$enableval],
-	[MALLOC_ZERO_RETURNS_NULL=yes])
-
-AC_MSG_CHECKING([whether to act as if malloc(0) can return NULL])
-AC_MSG_RESULT([$MALLOC_ZERO_RETURNS_NULL])
-
-if test "x$MALLOC_ZERO_RETURNS_NULL" = xyes; then
-	MALLOC_ZERO_CFLAGS="-DMALLOC_0_RETURNS_NULL"
-	XMALLOC_ZERO_CFLAGS=$MALLOC_ZERO_CFLAGS
-	XTMALLOC_ZERO_CFLAGS="$MALLOC_ZERO_CFLAGS -DXTMALLOC_BC"
-else
-	MALLOC_ZERO_CFLAGS=""
-	XMALLOC_ZERO_CFLAGS=""
-	XTMALLOC_ZERO_CFLAGS=""
-fi
-
-AC_SUBST([MALLOC_ZERO_CFLAGS])
-AC_SUBST([XMALLOC_ZERO_CFLAGS])
-AC_SUBST([XTMALLOC_ZERO_CFLAGS])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1429: -1- AC_DEFUN([XORG_WITH_LINT], [
-
-AC_ARG_VAR([LINT], [Path to a lint-style command])
-AC_ARG_VAR([LINT_FLAGS], [Flags for the lint-style command])
-AC_ARG_WITH(lint, [AS_HELP_STRING([--with-lint],
-		[Use a lint-style source code checker (default: disabled)])],
-		[use_lint=$withval], [use_lint=no])
-
-# Obtain platform specific info like program name and options
-# The lint program on FreeBSD and NetBSD is different from the one on Solaris
-case $host_os in
-  *linux* | *openbsd* | kfreebsd*-gnu | darwin* | cygwin*)
-	lint_name=splint
-	lint_options="-badflag"
-	;;
-  *freebsd* | *netbsd*)
-	lint_name=lint
-	lint_options="-u -b"
-	;;
-  *solaris*)
-	lint_name=lint
-	lint_options="-u -b -h -erroff=E_INDISTING_FROM_TRUNC2"
-	;;
-esac
-
-# Test for the presence of the program (either guessed by the code or spelled out by the user)
-if test "x$use_lint" = x"yes" ; then
-   AC_PATH_PROG([LINT], [$lint_name])
-   if test "x$LINT" = "x"; then
-        AC_MSG_ERROR([--with-lint=yes specified but lint-style tool not found in PATH])
-   fi
-elif test "x$use_lint" = x"no" ; then
-   if test "x$LINT" != "x"; then
-      AC_MSG_WARN([ignoring LINT environment variable since --with-lint=no was specified])
-   fi
-else
-   AC_MSG_ERROR([--with-lint expects 'yes' or 'no'. Use LINT variable to specify path.])
-fi
-
-# User supplied flags override default flags
-if test "x$LINT_FLAGS" != "x"; then
-   lint_options=$LINT_FLAGS
-fi
-
-AC_SUBST([LINT_FLAGS],[$lint_options])
-AM_CONDITIONAL(LINT, [test "x$LINT" != x])
-
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1492: -1- AC_DEFUN([XORG_LINT_LIBRARY], [
-AC_REQUIRE([XORG_WITH_LINT])
-AC_ARG_ENABLE(lint-library, [AS_HELP_STRING([--enable-lint-library],
-	[Create lint library (default: disabled)])],
-	[make_lint_lib=$enableval], [make_lint_lib=no])
-
-if test "x$make_lint_lib" = x"yes" ; then
-   LINTLIB=llib-l$1.ln
-   if test "x$LINT" = "x"; then
-        AC_MSG_ERROR([Cannot make lint library without --with-lint])
-   fi
-elif test "x$make_lint_lib" != x"no" ; then
-   AC_MSG_ERROR([--enable-lint-library expects 'yes' or 'no'.])
-fi
-
-AC_SUBST(LINTLIB)
-AM_CONDITIONAL(MAKE_LINT_LIB, [test x$make_lint_lib != xno])
-
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1523: -1- AC_DEFUN([XORG_COMPILER_BRAND], [
-AC_LANG_CASE(
-	[C], [
-		dnl autoconf-2.70 folded AC_PROG_CC_C99 into AC_PROG_CC
-		dnl and complains that AC_PROG_CC_C99 is obsolete
-		m4_version_prereq([2.70],
-			[AC_REQUIRE([AC_PROG_CC])],
-			[AC_REQUIRE([AC_PROG_CC_C99])])
-	],
-	[C++], [
-		AC_REQUIRE([AC_PROG_CXX])
-	]
-)
-AC_CHECK_DECL([__clang__], [CLANGCC="yes"], [CLANGCC="no"])
-AC_CHECK_DECL([__INTEL_COMPILER], [INTELCC="yes"], [INTELCC="no"])
-AC_CHECK_DECL([__SUNPRO_C], [SUNCC="yes"], [SUNCC="no"])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1554: -1- AC_DEFUN([XORG_TESTSET_CFLAG], [
-m4_if([$#], 0, [m4_fatal([XORG_TESTSET_CFLAG was given with an unsupported number of arguments])])
-m4_if([$#], 1, [m4_fatal([XORG_TESTSET_CFLAG was given with an unsupported number of arguments])])
-
-AC_LANG_COMPILER_REQUIRE
-
-AC_LANG_CASE(
-	[C], [
-		dnl autoconf-2.70 folded AC_PROG_CC_C99 into AC_PROG_CC
-		dnl and complains that AC_PROG_CC_C99 is obsolete
-		m4_version_prereq([2.70],
-			[AC_REQUIRE([AC_PROG_CC])],
-			[AC_REQUIRE([AC_PROG_CC_C99])])
-		define([PREFIX], [C])
-		define([CACHE_PREFIX], [cc])
-		define([COMPILER], [$CC])
-	],
-	[C++], [
-		define([PREFIX], [CXX])
-		define([CACHE_PREFIX], [cxx])
-		define([COMPILER], [$CXX])
-	]
-)
-
-[xorg_testset_save_]PREFIX[FLAGS]="$PREFIX[FLAGS]"
-
-if test "x$[xorg_testset_]CACHE_PREFIX[_unknown_warning_option]" = "x" ; then
-	PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unknown-warning-option"
-	AC_CACHE_CHECK([if ]COMPILER[ supports -Werror=unknown-warning-option],
-			[xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option],
-			AC_COMPILE_IFELSE([AC_LANG_SOURCE([int i;])],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option=yes],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option=no]))
-	[xorg_testset_]CACHE_PREFIX[_unknown_warning_option]=$[xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option]
-	PREFIX[FLAGS]="$[xorg_testset_save_]PREFIX[FLAGS]"
-fi
-
-if test "x$[xorg_testset_]CACHE_PREFIX[_unused_command_line_argument]" = "x" ; then
-	if test "x$[xorg_testset_]CACHE_PREFIX[_unknown_warning_option]" = "xyes" ; then
-		PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unknown-warning-option"
-	fi
-	PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unused-command-line-argument"
-	AC_CACHE_CHECK([if ]COMPILER[ supports -Werror=unused-command-line-argument],
-			[xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument],
-			AC_COMPILE_IFELSE([AC_LANG_SOURCE([int i;])],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument=yes],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument=no]))
-	[xorg_testset_]CACHE_PREFIX[_unused_command_line_argument]=$[xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument]
-	PREFIX[FLAGS]="$[xorg_testset_save_]PREFIX[FLAGS]"
-fi
-
-found="no"
-m4_foreach([flag], m4_cdr($@), [
-	if test $found = "no" ; then
-		if test "x$xorg_testset_]CACHE_PREFIX[_unknown_warning_option" = "xyes" ; then
-			PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_]CACHE_PREFIX[_unused_command_line_argument" = "xyes" ; then
-			PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unused-command-line-argument"
-		fi
-
-		PREFIX[FLAGS]="$PREFIX[FLAGS] ]flag["
-
-dnl Some hackery here since AC_CACHE_VAL can't handle a non-literal varname
-		AC_MSG_CHECKING([if ]COMPILER[ supports ]flag[])
-		cacheid=AS_TR_SH([xorg_cv_]CACHE_PREFIX[_flag_]flag[])
-		AC_CACHE_VAL($cacheid,
-			     [AC_LINK_IFELSE([AC_LANG_PROGRAM([int i;])],
-					     [eval $cacheid=yes],
-					     [eval $cacheid=no])])
-
-		PREFIX[FLAGS]="$[xorg_testset_save_]PREFIX[FLAGS]"
-
-		eval supported=\$$cacheid
-		AC_MSG_RESULT([$supported])
-		if test "$supported" = "yes" ; then
-			$1="$$1 ]flag["
-			found="yes"
-		fi
-	fi
-])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1650: -1- AC_DEFUN([XORG_COMPILER_FLAGS], [
-AC_REQUIRE([XORG_COMPILER_BRAND])
-
-AC_ARG_ENABLE(selective-werror,
-              AS_HELP_STRING([--disable-selective-werror],
-                             [Turn off selective compiler errors. (default: enabled)]),
-              [SELECTIVE_WERROR=$enableval],
-              [SELECTIVE_WERROR=yes])
-
-AC_LANG_CASE(
-        [C], [
-                define([PREFIX], [C])
-        ],
-        [C++], [
-                define([PREFIX], [CXX])
-        ]
-)
-# -v is too short to test reliably with XORG_TESTSET_CFLAG
-if test "x$SUNCC" = "xyes"; then
-    [BASE_]PREFIX[FLAGS]="-v"
-else
-    [BASE_]PREFIX[FLAGS]=""
-fi
-
-# This chunk of warnings were those that existed in the legacy CWARNFLAGS
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wall])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wpointer-arith])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-declarations])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wformat=2], [-Wformat])
-
-AC_LANG_CASE(
-	[C], [
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wstrict-prototypes])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-prototypes])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wnested-externs])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wbad-function-cast])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wold-style-definition], [-fd])
-	]
-)
-
-# This chunk adds additional warnings that could catch undesired effects.
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wunused])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wuninitialized])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wshadow])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-noreturn])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-format-attribute])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wredundant-decls])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wlogical-op])
-
-# These are currently disabled because they are noisy.  They will be enabled
-# in the future once the codebase is sufficiently modernized to silence
-# them.  For now, I don't want them to drown out the other warnings.
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wparentheses])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-align])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-qual])
-
-# Turn some warnings into errors, so we don't accidentally get successful builds
-# when there are problems that should be fixed.
-
-if test "x$SELECTIVE_WERROR" = "xyes" ; then
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=implicit], [-errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=nonnull])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=init-self])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=main])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=missing-braces])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=sequence-point])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=return-type], [-errwarn=E_FUNC_HAS_NO_RETURN_STMT])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=trigraphs])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=array-bounds])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=write-strings])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=address])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=int-to-pointer-cast], [-errwarn=E_BAD_PTR_INT_COMBINATION])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=pointer-to-int-cast]) # Also -errwarn=E_BAD_PTR_INT_COMBINATION
-else
-AC_MSG_WARN([You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wimplicit])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wnonnull])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Winit-self])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmain])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-braces])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wsequence-point])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wreturn-type])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wtrigraphs])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Warray-bounds])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wwrite-strings])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Waddress])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wint-to-pointer-cast])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wpointer-to-int-cast])
-fi
-
-AC_SUBST([BASE_]PREFIX[FLAGS])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1755: -1- AC_DEFUN([XORG_CWARNFLAGS], [
-AC_REQUIRE([XORG_COMPILER_FLAGS])
-AC_REQUIRE([XORG_COMPILER_BRAND])
-AC_LANG_CASE(
-	[C], [
-		CWARNFLAGS="$BASE_CFLAGS"
-		if  test "x$GCC" = xyes ; then
-		    CWARNFLAGS="$CWARNFLAGS -fno-strict-aliasing"
-		fi
-		AC_SUBST(CWARNFLAGS)
-	]
-)
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1780: -1- AC_DEFUN([XORG_STRICT_OPTION], [
-AC_REQUIRE([XORG_CWARNFLAGS])
-AC_REQUIRE([XORG_COMPILER_FLAGS])
-
-AC_ARG_ENABLE(strict-compilation,
-			  AS_HELP_STRING([--enable-strict-compilation],
-			  [Enable all warnings from compiler and make them errors (default: disabled)]),
-			  [STRICT_COMPILE=$enableval], [STRICT_COMPILE=no])
-
-AC_LANG_CASE(
-        [C], [
-                define([PREFIX], [C])
-        ],
-        [C++], [
-                define([PREFIX], [CXX])
-        ]
-)
-
-[STRICT_]PREFIX[FLAGS]=""
-XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-pedantic])
-XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-Werror], [-errwarn])
-
-# Earlier versions of gcc (eg: 4.2) support -Werror=attributes, but do not
-# activate it with -Werror, so we add it here explicitly.
-XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-Werror=attributes])
-
-if test "x$STRICT_COMPILE" = "xyes"; then
-    [BASE_]PREFIX[FLAGS]="$[BASE_]PREFIX[FLAGS] $[STRICT_]PREFIX[FLAGS]"
-    AC_LANG_CASE([C], [CWARNFLAGS="$CWARNFLAGS $STRICT_CFLAGS"])
-fi
-AC_SUBST([STRICT_]PREFIX[FLAGS])
-AC_SUBST([BASE_]PREFIX[FLAGS])
-AC_LANG_CASE([C], AC_SUBST([CWARNFLAGS]))
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1822: -1- AC_DEFUN([XORG_DEFAULT_NOCODE_OPTIONS], [
-AC_REQUIRE([AC_PROG_INSTALL])
-XORG_RELEASE_VERSION
-XORG_CHANGELOG
-XORG_INSTALL
-XORG_MANPAGE_SECTIONS
-m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])],
-    [AC_SUBST([AM_DEFAULT_VERBOSITY], [1])])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1838: -1- AC_DEFUN([XORG_DEFAULT_OPTIONS], [
-AC_REQUIRE([AC_PROG_INSTALL])
-XORG_COMPILER_FLAGS
-XORG_CWARNFLAGS
-XORG_STRICT_OPTION
-XORG_DEFAULT_NOCODE_OPTIONS
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1853: -1- AC_DEFUN([XORG_INSTALL], [
-AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-macros_datadir=`$PKG_CONFIG --print-errors --variable=pkgdatadir xorg-macros`
-INSTALL_CMD="(cp -f "$macros_datadir/INSTALL" \$(top_srcdir)/.INSTALL.tmp && \
-mv \$(top_srcdir)/.INSTALL.tmp \$(top_srcdir)/INSTALL) \
-|| (rm -f \$(top_srcdir)/.INSTALL.tmp; test -e \$(top_srcdir)/INSTALL || ( \
-touch \$(top_srcdir)/INSTALL; \
-echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))"
-AC_SUBST([INSTALL_CMD])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1892: -1- AC_DEFUN([XORG_RELEASE_VERSION], [
-	AC_DEFINE_UNQUOTED([PACKAGE_VERSION_MAJOR],
-		[`echo $PACKAGE_VERSION | cut -d . -f 1`],
-		[Major version of this package])
-	PVM=`echo $PACKAGE_VERSION | cut -d . -f 2 | cut -d - -f 1`
-	if test "x$PVM" = "x"; then
-		PVM="0"
-	fi
-	AC_DEFINE_UNQUOTED([PACKAGE_VERSION_MINOR],
-		[$PVM],
-		[Minor version of this package])
-	PVP=`echo $PACKAGE_VERSION | cut -d . -f 3 | cut -d - -f 1`
-	if test "x$PVP" = "x"; then
-		PVP="0"
-	fi
-	AC_DEFINE_UNQUOTED([PACKAGE_VERSION_PATCHLEVEL],
-		[$PVP],
-		[Patch version of this package])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1920: -1- AC_DEFUN([XORG_CHANGELOG], [
-CHANGELOG_CMD="((GIT_DIR=\$(top_srcdir)/.git git log > \$(top_srcdir)/.changelog.tmp) 2>/dev/null && \
-mv \$(top_srcdir)/.changelog.tmp \$(top_srcdir)/ChangeLog) \
-|| (rm -f \$(top_srcdir)/.changelog.tmp; test -e \$(top_srcdir)/ChangeLog || ( \
-touch \$(top_srcdir)/ChangeLog; \
-echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))"
-AC_SUBST([CHANGELOG_CMD])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/amversion.m4:14: -1- AC_DEFUN([AM_AUTOMAKE_VERSION], [am__api_version='1.18'
-dnl Some users find AM_AUTOMAKE_VERSION and mistake it for a way to
-dnl require some minimum version.  Point them to the right macro.
-m4_if([$1], [1.18.1], [],
-      [AC_FATAL([Do not call $0, use AM_INIT_AUTOMAKE([$1]).])])dnl
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/amversion.m4:33: -1- AC_DEFUN([AM_SET_CURRENT_AUTOMAKE_VERSION], [AM_AUTOMAKE_VERSION([1.18.1])dnl
-m4_ifndef([AC_AUTOCONF_VERSION],
-  [m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl
-_AM_AUTOCONF_VERSION(m4_defn([AC_AUTOCONF_VERSION]))])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/auxdir.m4:47: -1- AC_DEFUN([AM_AUX_DIR_EXPAND], [AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl
-# Expand $ac_aux_dir to an absolute path.
-am_aux_dir=`cd "$ac_aux_dir" && pwd`
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/cond.m4:12: -1- AC_DEFUN([AM_CONDITIONAL], [AC_PREREQ([2.52])dnl
- m4_if([$1], [TRUE],  [AC_FATAL([$0: invalid condition: $1])],
-       [$1], [FALSE], [AC_FATAL([$0: invalid condition: $1])])dnl
-AC_SUBST([$1_TRUE])dnl
-AC_SUBST([$1_FALSE])dnl
-_AM_SUBST_NOTMAKE([$1_TRUE])dnl
-_AM_SUBST_NOTMAKE([$1_FALSE])dnl
-m4_define([_AM_COND_VALUE_$1], [$2])dnl
-if $2; then
-  $1_TRUE=
-  $1_FALSE='#'
-else
-  $1_TRUE='#'
-  $1_FALSE=
-fi
-AC_CONFIG_COMMANDS_PRE(
-[if test -z "${$1_TRUE}" && test -z "${$1_FALSE}"; then
-  AC_MSG_ERROR([[conditional "$1" was never defined.
-Usually this means the macro was only invoked conditionally.]])
-fi])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depend.m4:26: -1- AC_DEFUN([_AM_DEPENDENCIES], [AC_REQUIRE([AM_SET_DEPDIR])dnl
-AC_REQUIRE([AM_OUTPUT_DEPENDENCY_COMMANDS])dnl
-AC_REQUIRE([AM_MAKE_INCLUDE])dnl
-AC_REQUIRE([AM_DEP_TRACK])dnl
-
-m4_if([$1], [CC],   [depcc="$CC"   am_compiler_list=],
-      [$1], [CXX],  [depcc="$CXX"  am_compiler_list=],
-      [$1], [OBJC], [depcc="$OBJC" am_compiler_list='gcc3 gcc'],
-      [$1], [OBJCXX], [depcc="$OBJCXX" am_compiler_list='gcc3 gcc'],
-      [$1], [UPC],  [depcc="$UPC"  am_compiler_list=],
-      [$1], [GCJ],  [depcc="$GCJ"  am_compiler_list='gcc3 gcc'],
-                    [depcc="$$1"   am_compiler_list=])
-
-AC_CACHE_CHECK([dependency style of $depcc],
-               [am_cv_$1_dependencies_compiler_type],
-[if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then
-  # We make a subdir and do the tests there.  Otherwise we can end up
-  # making bogus files that we don't know about and never remove.  For
-  # instance it was reported that on HP-UX the gcc test will end up
-  # making a dummy file named 'D' -- because '-MD' means "put the output
-  # in D".
-  rm -rf conftest.dir
-  mkdir conftest.dir
-  # Copy depcomp to subdir because otherwise we won't find it if we're
-  # using a relative directory.
-  cp "$am_depcomp" conftest.dir
-  cd conftest.dir
-  # We will build objects and dependencies in a subdirectory because
-  # it helps to detect inapplicable dependency modes.  For instance
-  # both Tru64's cc and ICC support -MD to output dependencies as a
-  # side effect of compilation, but ICC will put the dependencies in
-  # the current directory while Tru64 will put them in the object
-  # directory.
-  mkdir sub
-
-  am_cv_$1_dependencies_compiler_type=none
-  if test "$am_compiler_list" = ""; then
-     am_compiler_list=`sed -n ['s/^#*\([a-zA-Z0-9]*\))$/\1/p'] < ./depcomp`
-  fi
-  am__universal=false
-  m4_case([$1], [CC],
-    [case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac],
-    [CXX],
-    [case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac])
-
-  for depmode in $am_compiler_list; do
-    # Setup a source with many dependencies, because some compilers
-    # like to wrap large dependency lists on column 80 (with \), and
-    # we should not choose a depcomp mode which is confused by this.
-    #
-    # We need to recreate these files for each test, as the compiler may
-    # overwrite some of them when testing with obscure command lines.
-    # This happens at least with the AIX C compiler.
-    : > sub/conftest.c
-    for i in 1 2 3 4 5 6; do
-      echo '#include "conftst'$i'.h"' >> sub/conftest.c
-      # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with
-      # Solaris 10 /bin/sh.
-      echo '/* dummy */' > sub/conftst$i.h
-    done
-    echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
-
-    # We check with '-c' and '-o' for the sake of the "dashmstdout"
-    # mode.  It turns out that the SunPro C++ compiler does not properly
-    # handle '-M -o', and we need to detect this.  Also, some Intel
-    # versions had trouble with output in subdirs.
-    am__obj=sub/conftest.${OBJEXT-o}
-    am__minus_obj="-o $am__obj"
-    case $depmode in
-    gcc)
-      # This depmode causes a compiler race in universal mode.
-      test "$am__universal" = false || continue
-      ;;
-    nosideeffect)
-      # After this tag, mechanisms are not by side-effect, so they'll
-      # only be used when explicitly requested.
-      if test "x$enable_dependency_tracking" = xyes; then
-	continue
-      else
-	break
-      fi
-      ;;
-    msvc7 | msvc7msys | msvisualcpp | msvcmsys)
-      # This compiler won't grok '-c -o', but also, the minuso test has
-      # not run yet.  These depmodes are late enough in the game, and
-      # so weak that their functioning should not be impacted.
-      am__obj=conftest.${OBJEXT-o}
-      am__minus_obj=
-      ;;
-    none) break ;;
-    esac
-    if depmode=$depmode \
-       source=sub/conftest.c object=$am__obj \
-       depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
-       $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \
-         >/dev/null 2>conftest.err &&
-       grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep $am__obj sub/conftest.Po > /dev/null 2>&1 &&
-       ${MAKE-make} -s -f confmf > /dev/null 2>&1; then
-      # icc doesn't choke on unknown options, it will just issue warnings
-      # or remarks (even with -Werror).  So we grep stderr for any message
-      # that says an option was ignored or not supported.
-      # When given -MP, icc 7.0 and 7.1 complain thus:
-      #   icc: Command line warning: ignoring option '-M'; no argument required
-      # The diagnosis changed in icc 8.0:
-      #   icc: Command line remark: option '-MP' not supported
-      if (grep 'ignoring option' conftest.err ||
-          grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else
-        am_cv_$1_dependencies_compiler_type=$depmode
-        break
-      fi
-    fi
-  done
-
-  cd ..
-  rm -rf conftest.dir
-else
-  am_cv_$1_dependencies_compiler_type=none
-fi
-])
-AC_SUBST([$1DEPMODE], [depmode=$am_cv_$1_dependencies_compiler_type])
-AM_CONDITIONAL([am__fastdep$1], [
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_$1_dependencies_compiler_type" = gcc3])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depend.m4:163: -1- AC_DEFUN([AM_SET_DEPDIR], [AC_REQUIRE([AM_SET_LEADING_DOT])dnl
-AC_SUBST([DEPDIR], ["${am__leading_dot}deps"])dnl
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depend.m4:171: -1- AC_DEFUN([AM_DEP_TRACK], [AC_ARG_ENABLE([dependency-tracking], [dnl
-AS_HELP_STRING(
-  [--enable-dependency-tracking],
-  [do not reject slow dependency extractors])
-AS_HELP_STRING(
-  [--disable-dependency-tracking],
-  [speeds up one-time build])])
-if test "x$enable_dependency_tracking" != xno; then
-  am_depcomp="$ac_aux_dir/depcomp"
-  AMDEPBACKSLASH='\'
-  am__nodep='_no'
-fi
-AM_CONDITIONAL([AMDEP], [test "x$enable_dependency_tracking" != xno])
-AC_SUBST([AMDEPBACKSLASH])dnl
-_AM_SUBST_NOTMAKE([AMDEPBACKSLASH])dnl
-AC_SUBST([am__nodep])dnl
-_AM_SUBST_NOTMAKE([am__nodep])dnl
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depout.m4:11: -1- AC_DEFUN([_AM_OUTPUT_DEPENDENCY_COMMANDS], [{
-  # Older Autoconf quotes --file arguments for eval, but not when files
-  # are listed without --file.  Let's play safe and only enable the eval
-  # if we detect the quoting.
-  # TODO: see whether this extra hack can be removed once we start
-  # requiring Autoconf 2.70 or later.
-  AS_CASE([$CONFIG_FILES],
-          [*\'*], [eval set x "$CONFIG_FILES"],
-          [*], [set x $CONFIG_FILES])
-  shift
-  # Used to flag and report bootstrapping failures.
-  am_rc=0
-  for am_mf
-  do
-    # Strip MF so we end up with the name of the file.
-    am_mf=`AS_ECHO(["$am_mf"]) | sed -e 's/:.*$//'`
-    # Check whether this is an Automake generated Makefile which includes
-    # dependency-tracking related rules and includes.
-    # Grep'ing the whole file directly is not great: AIX grep has a line
-    # limit of 2048, but all sed's we know have understand at least 4000.
-    sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \
-      || continue
-    am_dirpart=`AS_DIRNAME(["$am_mf"])`
-    am_filepart=`AS_BASENAME(["$am_mf"])`
-    AM_RUN_LOG([cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles]) || am_rc=$?
-  done
-  if test $am_rc -ne 0; then
-    AC_MSG_FAILURE([Something went wrong bootstrapping makefile fragments
-    for automatic dependency tracking.  If GNU make was not used, consider
-    re-running the configure script with MAKE="gmake" (or whatever is
-    necessary).  You can also try re-running configure with the
-    '--disable-dependency-tracking' option to at least be able to build
-    the package (albeit without support for automatic dependency tracking).])
-  fi
-  AS_UNSET([am_dirpart])
-  AS_UNSET([am_filepart])
-  AS_UNSET([am_mf])
-  AS_UNSET([am_rc])
-  rm -f conftest-deps.mk
-}
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depout.m4:64: -1- AC_DEFUN([AM_OUTPUT_DEPENDENCY_COMMANDS], [AC_CONFIG_COMMANDS([depfiles],
-     [test x"$AMDEP_TRUE" != x"" || _AM_OUTPUT_DEPENDENCY_COMMANDS],
-     [AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}"])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/init.m4:29: -1- AC_DEFUN([AM_INIT_AUTOMAKE], [AC_PREREQ([2.65])dnl
-m4_ifdef([_$0_ALREADY_INIT],
-  [m4_fatal([$0 expanded multiple times
-]m4_defn([_$0_ALREADY_INIT]))],
-  [m4_define([_$0_ALREADY_INIT], m4_expansion_stack)])dnl
-dnl Autoconf wants to disallow AM_ names.  We explicitly allow
-dnl the ones we care about.
-m4_pattern_allow([^AM_[A-Z]+FLAGS$])dnl
-AC_REQUIRE([AM_SET_CURRENT_AUTOMAKE_VERSION])dnl
-AC_REQUIRE([AC_PROG_INSTALL])dnl
-if test "`cd $srcdir && pwd`" != "`pwd`"; then
-  # Use -I$(srcdir) only when $(srcdir) != ., so that make's output
-  # is not polluted with repeated "-I."
-  AC_SUBST([am__isrc], [' -I$(srcdir)'])_AM_SUBST_NOTMAKE([am__isrc])dnl
-  # test to see if srcdir already configured
-  if test -f $srcdir/config.status; then
-    AC_MSG_ERROR([source directory already configured; run "make distclean" there first])
-  fi
-fi
-
-# test whether we have cygpath
-if test -z "$CYGPATH_W"; then
-  if (cygpath --version) >/dev/null 2>/dev/null; then
-    CYGPATH_W='cygpath -w'
-  else
-    CYGPATH_W=echo
-  fi
-fi
-AC_SUBST([CYGPATH_W])
-
-# Define the identity of the package.
-dnl Distinguish between old-style and new-style calls.
-m4_ifval([$2],
-[AC_DIAGNOSE([obsolete],
-             [$0: two- and three-arguments forms are deprecated.])
-m4_ifval([$3], [_AM_SET_OPTION([no-define])])dnl
- AC_SUBST([PACKAGE], [$1])dnl
- AC_SUBST([VERSION], [$2])],
-[_AM_SET_OPTIONS([$1])dnl
-dnl Diagnose old-style AC_INIT with new-style AM_AUTOMAKE_INIT.
-m4_if(
-  m4_ifset([AC_PACKAGE_NAME], [ok]):m4_ifset([AC_PACKAGE_VERSION], [ok]),
-  [ok:ok],,
-  [m4_fatal([AC_INIT should be called with package and version arguments])])dnl
- AC_SUBST([PACKAGE], ['AC_PACKAGE_TARNAME'])dnl
- AC_SUBST([VERSION], ['AC_PACKAGE_VERSION'])])dnl
-
-_AM_IF_OPTION([no-define],,
-[AC_DEFINE_UNQUOTED([PACKAGE], ["$PACKAGE"], [Name of package])
- AC_DEFINE_UNQUOTED([VERSION], ["$VERSION"], [Version number of package])])dnl
-
-# Some tools Automake needs.
-AC_REQUIRE([AM_SANITY_CHECK])dnl
-AC_REQUIRE([AC_ARG_PROGRAM])dnl
-AM_MISSING_PROG([ACLOCAL], [aclocal-${am__api_version}])
-AM_MISSING_PROG([AUTOCONF], [autoconf])
-AM_MISSING_PROG([AUTOMAKE], [automake-${am__api_version}])
-AM_MISSING_PROG([AUTOHEADER], [autoheader])
-AM_MISSING_PROG([MAKEINFO], [makeinfo])
-AC_REQUIRE([AM_PROG_INSTALL_SH])dnl
-AC_REQUIRE([AM_PROG_INSTALL_STRIP])dnl
-AC_REQUIRE([AC_PROG_MKDIR_P])dnl
-# For better backward compatibility.  To be removed once Automake 1.9.x
-# dies out for good.  For more background, see:
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00001.html>
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00014.html>
-AC_SUBST([mkdir_p], ['$(MKDIR_P)'])
-# We need awk for the "check" target (and possibly the TAP driver).  The
-# system "awk" is bad on some platforms.
-AC_REQUIRE([AC_PROG_AWK])dnl
-AC_REQUIRE([AC_PROG_MAKE_SET])dnl
-AC_REQUIRE([AM_SET_LEADING_DOT])dnl
-_AM_IF_OPTION([tar-ustar], [_AM_PROG_TAR([ustar])],
-  [_AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])],
-    [_AM_IF_OPTION([tar-v7], [_AM_PROG_TAR([v7])],
-      [_AM_PROG_TAR([ustar])])])])
-_AM_IF_OPTION([no-dependencies],,
-[AC_PROVIDE_IFELSE([AC_PROG_CC],
-		  [_AM_DEPENDENCIES([CC])],
-		  [m4_define([AC_PROG_CC],
-			     m4_defn([AC_PROG_CC])[_AM_DEPENDENCIES([CC])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_CXX],
-		  [_AM_DEPENDENCIES([CXX])],
-		  [m4_define([AC_PROG_CXX],
-			     m4_defn([AC_PROG_CXX])[_AM_DEPENDENCIES([CXX])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_OBJC],
-		  [_AM_DEPENDENCIES([OBJC])],
-		  [m4_define([AC_PROG_OBJC],
-			     m4_defn([AC_PROG_OBJC])[_AM_DEPENDENCIES([OBJC])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_OBJCXX],
-		  [_AM_DEPENDENCIES([OBJCXX])],
-		  [m4_define([AC_PROG_OBJCXX],
-			     m4_defn([AC_PROG_OBJCXX])[_AM_DEPENDENCIES([OBJCXX])])])dnl
-])
-# Variables for tags utilities; see am/tags.am
-if test -z "$CTAGS"; then
-  CTAGS=ctags
-fi
-AC_SUBST([CTAGS])
-if test -z "$ETAGS"; then
-  ETAGS=etags
-fi
-AC_SUBST([ETAGS])
-if test -z "$CSCOPE"; then
-  CSCOPE=cscope
-fi
-AC_SUBST([CSCOPE])
-
-AC_REQUIRE([_AM_SILENT_RULES])dnl
-dnl The testsuite driver may need to know about EXEEXT, so add the
-dnl 'am__EXEEXT' conditional if _AM_COMPILER_EXEEXT was seen.  This
-dnl macro is hooked onto _AC_COMPILER_EXEEXT early, see below.
-AC_CONFIG_COMMANDS_PRE(dnl
-[m4_provide_if([_AM_COMPILER_EXEEXT],
-  [AM_CONDITIONAL([am__EXEEXT], [test -n "$EXEEXT"])])])dnl
-
-AC_REQUIRE([_AM_PROG_RM_F])
-AC_REQUIRE([_AM_PROG_XARGS_N])
-
-dnl The trailing newline in this macro's definition is deliberate, for
-dnl backward compatibility and to allow trailing 'dnl'-style comments
-dnl after the AM_INIT_AUTOMAKE invocation. See automake bug#16841.
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/init.m4:167: -1- AC_DEFUN([_AC_AM_CONFIG_HEADER_HOOK], [# Compute $1's index in $config_headers.
-_am_arg=$1
-_am_stamp_count=1
-for _am_header in $config_headers :; do
-  case $_am_header in
-    $_am_arg | $_am_arg:* )
-      break ;;
-    * )
-      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
-  esac
-done
-echo "timestamp for $_am_arg" >`AS_DIRNAME(["$_am_arg"])`/stamp-h[]$_am_stamp_count])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/install-sh.m4:11: -1- AC_DEFUN([AM_PROG_INSTALL_SH], [AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-if test x"${install_sh+set}" != xset; then
-  case $am_aux_dir in
-  *\ * | *\	*)
-    install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;;
-  *)
-    install_sh="\${SHELL} $am_aux_dir/install-sh"
-  esac
-fi
-AC_SUBST([install_sh])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/lead-dot.m4:10: -1- AC_DEFUN([AM_SET_LEADING_DOT], [rm -rf .tst 2>/dev/null
-mkdir .tst 2>/dev/null
-if test -d .tst; then
-  am__leading_dot=.
-else
-  am__leading_dot=_
-fi
-rmdir .tst 2>/dev/null
-AC_SUBST([am__leading_dot])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/make.m4:13: -1- AC_DEFUN([AM_MAKE_INCLUDE], [AC_MSG_CHECKING([whether ${MAKE-make} supports the include directive])
-cat > confinc.mk << 'END'
-am__doit:
-	@echo this is the am__doit target >confinc.out
-.PHONY: am__doit
-END
-am__include="#"
-am__quote=
-# BSD make does it like this.
-echo '.include "confinc.mk" # ignored' > confmf.BSD
-# Other make implementations (GNU, Solaris 10, AIX) do it like this.
-echo 'include confinc.mk # ignored' > confmf.GNU
-_am_result=no
-for s in GNU BSD; do
-  AM_RUN_LOG([${MAKE-make} -f confmf.$s && cat confinc.out])
-  AS_CASE([$?:`cat confinc.out 2>/dev/null`],
-      ['0:this is the am__doit target'],
-      [AS_CASE([$s],
-          [BSD], [am__include='.include' am__quote='"'],
-          [am__include='include' am__quote=''])])
-  if test "$am__include" != "#"; then
-    _am_result="yes ($s style)"
-    break
-  fi
-done
-rm -f confinc.* confmf.*
-AC_MSG_RESULT([${_am_result}])
-AC_SUBST([am__include])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/make.m4:42: -1- m4_pattern_allow([^am__quote$])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/missing.m4:11: -1- AC_DEFUN([AM_MISSING_PROG], [AC_REQUIRE([AM_MISSING_HAS_RUN])
-$1=${$1-"${am_missing_run}$2"}
-AC_SUBST($1)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/missing.m4:20: -1- AC_DEFUN([AM_MISSING_HAS_RUN], [AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-AC_REQUIRE_AUX_FILE([missing])dnl
-if test x"${MISSING+set}" != xset; then
-  MISSING="\${SHELL} '$am_aux_dir/missing'"
-fi
-# Use eval to expand $SHELL
-if eval "$MISSING --is-lightweight"; then
-  am_missing_run="$MISSING "
-else
-  am_missing_run=
-  AC_MSG_WARN(['missing' script is too old or missing])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/options.m4:11: -1- AC_DEFUN([_AM_MANGLE_OPTION], [[_AM_OPTION_]m4_bpatsubst($1, [[^a-zA-Z0-9_]], [_])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/options.m4:17: -1- AC_DEFUN([_AM_SET_OPTION], [m4_define(_AM_MANGLE_OPTION([$1]), [1])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/options.m4:23: -1- AC_DEFUN([_AM_SET_OPTIONS], [m4_foreach_w([_AM_Option], [$1], [_AM_SET_OPTION(_AM_Option)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/options.m4:29: -1- AC_DEFUN([_AM_IF_OPTION], [m4_ifset(_AM_MANGLE_OPTION([$1]), [$2], [$3])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/prog-cc-c-o.m4:12: -1- AC_DEFUN([_AM_PROG_CC_C_O], [AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-AC_REQUIRE_AUX_FILE([compile])dnl
-AC_LANG_PUSH([C])dnl
-AC_CACHE_CHECK(
-  [whether $CC understands -c and -o together],
-  [am_cv_prog_cc_c_o],
-  [AC_LANG_CONFTEST([AC_LANG_PROGRAM([])])
-  # Make sure it works both with $CC and with simple cc.
-  # Following AC_PROG_CC_C_O, we do the test twice because some
-  # compilers refuse to overwrite an existing .o file with -o,
-  # though they will create one.
-  am_cv_prog_cc_c_o=yes
-  for am_i in 1 2; do
-    if AM_RUN_LOG([$CC -c conftest.$ac_ext -o conftest2.$ac_objext]) \
-         && test -f conftest2.$ac_objext; then
-      : OK
-    else
-      am_cv_prog_cc_c_o=no
-      break
-    fi
-  done
-  # aligned with autoconf, so not including core; see bug#72225.
-  rm -f -r a.out a.exe b.out conftest.$ac_ext conftest.$ac_objext \
-    conftest.dSYM conftest1.$ac_ext conftest1.$ac_objext conftest1.dSYM \
-    conftest2.$ac_ext conftest2.$ac_objext conftest2.dSYM
-  unset am_i])
-if test "$am_cv_prog_cc_c_o" != yes; then
-   # Losing compiler, so override with the script.
-   # FIXME: It is wrong to rewrite CC.
-   # But if we don't then we get into trouble of one sort or another.
-   # A longer-term fix would be to have automake use am__CC in this case,
-   # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)"
-   CC="$am_aux_dir/compile $CC"
-fi
-AC_LANG_POP([C])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/prog-cc-c-o.m4:50: -1- AC_DEFUN_ONCE([AM_PROG_CC_C_O], [AC_REQUIRE([AC_PROG_CC])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/rmf.m4:12: -1- AC_DEFUN([_AM_PROG_RM_F], [am__rm_f_notfound=
-AS_IF([(rm -f && rm -fr && rm -rf) 2>/dev/null], [], [am__rm_f_notfound='""'])
-AC_SUBST(am__rm_f_notfound)
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/runlog.m4:12: -1- AC_DEFUN([AM_RUN_LOG], [{ echo "$as_me:$LINENO: $1" >&AS_MESSAGE_LOG_FD
-   ($1) >&AS_MESSAGE_LOG_FD 2>&AS_MESSAGE_LOG_FD
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
-   (exit $ac_status); }])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/sanity.m4:11: -1- AC_DEFUN([_AM_SLEEP_FRACTIONAL_SECONDS], [dnl
-AC_CACHE_CHECK([whether sleep supports fractional seconds],
-               am_cv_sleep_fractional_seconds, [dnl
-AS_IF([sleep 0.001 2>/dev/null], [am_cv_sleep_fractional_seconds=yes],
-                                 [am_cv_sleep_fractional_seconds=no])
-])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/sanity.m4:28: -1- AC_DEFUN([_AM_FILESYSTEM_TIMESTAMP_RESOLUTION], [dnl
-AC_REQUIRE([_AM_SLEEP_FRACTIONAL_SECONDS])
-AC_CACHE_CHECK([filesystem timestamp resolution],
-               am_cv_filesystem_timestamp_resolution, [dnl
-# Default to the worst case.
-am_cv_filesystem_timestamp_resolution=2
-
-# Only try to go finer than 1 sec if sleep can do it.
-# Don't try 1 sec, because if 0.01 sec and 0.1 sec don't work,
-# - 1 sec is not much of a win compared to 2 sec, and
-# - it takes 2 seconds to perform the test whether 1 sec works.
-# 
-# Instead, just use the default 2s on platforms that have 1s resolution,
-# accept the extra 1s delay when using $sleep in the Automake tests, in
-# exchange for not incurring the 2s delay for running the test for all
-# packages.
-#
-am_try_resolutions=
-if test "$am_cv_sleep_fractional_seconds" = yes; then
-  # Even a millisecond often causes a bunch of false positives,
-  # so just try a hundredth of a second. The time saved between .001 and
-  # .01 is not terribly consequential.
-  am_try_resolutions="0.01 0.1 $am_try_resolutions"
-fi
-
-# In order to catch current-generation FAT out, we must *modify* files
-# that already exist; the *creation* timestamp is finer.  Use names
-# that make ls -t sort them differently when they have equal
-# timestamps than when they have distinct timestamps, keeping
-# in mind that ls -t prints the *newest* file first.
-rm -f conftest.ts?
-: > conftest.ts1
-: > conftest.ts2
-: > conftest.ts3
-
-# Make sure ls -t actually works.  Do 'set' in a subshell so we don't
-# clobber the current shell's arguments. (Outer-level square brackets
-# are removed by m4; they're present so that m4 does not expand
-# <dollar><star>; be careful, easy to get confused.)
-if (
-     set X `[ls -t conftest.ts[12]]` &&
-     {
-       test "$[]*" != "X conftest.ts1 conftest.ts2" ||
-       test "$[]*" != "X conftest.ts2 conftest.ts1";
-     }
-); then :; else
-  # If neither matched, then we have a broken ls.  This can happen
-  # if, for instance, CONFIG_SHELL is bash and it inherits a
-  # broken ls alias from the environment.  This has actually
-  # happened.  Such a system could not be considered "sane".
-  _AS_ECHO_UNQUOTED(
-    ["Bad output from ls -t: \"`[ls -t conftest.ts[12]]`\""],
-    [AS_MESSAGE_LOG_FD])
-  AC_MSG_FAILURE([ls -t produces unexpected output.
-Make sure there is not a broken ls alias in your environment.])
-fi
-
-for am_try_res in $am_try_resolutions; do
-  # Any one fine-grained sleep might happen to cross the boundary
-  # between two values of a coarser actual resolution, but if we do
-  # two fine-grained sleeps in a row, at least one of them will fall
-  # entirely within a coarse interval.
-  echo alpha > conftest.ts1
-  sleep $am_try_res
-  echo beta > conftest.ts2
-  sleep $am_try_res
-  echo gamma > conftest.ts3
-
-  # We assume that 'ls -t' will make use of high-resolution
-  # timestamps if the operating system supports them at all.
-  if (set X `ls -t conftest.ts?` &&
-      test "$[]2" = conftest.ts3 &&
-      test "$[]3" = conftest.ts2 &&
-      test "$[]4" = conftest.ts1); then
-    #
-    # Ok, ls -t worked. If we're at a resolution of 1 second, we're done,
-    # because we don't need to test make.
-    make_ok=true
-    if test $am_try_res != 1; then
-      # But if we've succeeded so far with a subsecond resolution, we
-      # have one more thing to check: make. It can happen that
-      # everything else supports the subsecond mtimes, but make doesn't;
-      # notably on macOS, which ships make 3.81 from 2006 (the last one
-      # released under GPLv2). https://bugs.gnu.org/68808
-      # 
-      # We test $MAKE if it is defined in the environment, else "make".
-      # It might get overridden later, but our hope is that in practice
-      # it does not matter: it is the system "make" which is (by far)
-      # the most likely to be broken, whereas if the user overrides it,
-      # probably they did so with a better, or at least not worse, make.
-      # https://lists.gnu.org/archive/html/automake/2024-06/msg00051.html
-      #
-      # Create a Makefile (real tab character here):
-      rm -f conftest.mk
-      echo 'conftest.ts1: conftest.ts2' >conftest.mk
-      echo '	touch conftest.ts2' >>conftest.mk
-      #
-      # Now, running
-      #   touch conftest.ts1; touch conftest.ts2; make
-      # should touch ts1 because ts2 is newer. This could happen by luck,
-      # but most often, it will fail if make's support is insufficient. So
-      # test for several consecutive successes.
-      #
-      # (We reuse conftest.ts[12] because we still want to modify existing
-      # files, not create new ones, per above.)
-      n=0
-      make=${MAKE-make}
-      until test $n -eq 3; do
-        echo one > conftest.ts1
-        sleep $am_try_res
-        echo two > conftest.ts2 # ts2 should now be newer than ts1
-        if $make -f conftest.mk | grep 'up to date' >/dev/null; then
-          make_ok=false
-          break # out of $n loop
-        fi
-        n=`expr $n + 1`
-      done
-    fi
-    #
-    if $make_ok; then
-      # Everything we know to check worked out, so call this resolution good.
-      am_cv_filesystem_timestamp_resolution=$am_try_res
-      break # out of $am_try_res loop
-    fi
-    # Otherwise, we'll go on to check the next resolution.
-  fi
-done
-rm -f conftest.ts?
-# (end _am_filesystem_timestamp_resolution)
-])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/sanity.m4:161: -1- AC_DEFUN([AM_SANITY_CHECK], [AC_REQUIRE([_AM_FILESYSTEM_TIMESTAMP_RESOLUTION])
-# This check should not be cached, as it may vary across builds of
-# different projects.
-AC_MSG_CHECKING([whether build environment is sane])
-# Reject unsafe characters in $srcdir or the absolute working directory
-# name.  Accept space and tab only in the latter.
-am_lf='
-'
-case `pwd` in
-  *[[\\\"\#\$\&\'\`$am_lf]]*)
-    AC_MSG_RESULT([no])
-    AC_MSG_ERROR([unsafe absolute working directory name]);;
-esac
-case $srcdir in
-  *[[\\\"\#\$\&\'\`$am_lf\ \	]]*)
-    AC_MSG_RESULT([no])
-    AC_MSG_ERROR([unsafe srcdir value: '$srcdir']);;
-esac
-
-# Do 'set' in a subshell so we don't clobber the current shell's
-# arguments.  Must try -L first in case configure is actually a
-# symlink; some systems play weird games with the mod time of symlinks
-# (eg FreeBSD returns the mod time of the symlink's containing
-# directory).
-am_build_env_is_sane=no
-am_has_slept=no
-rm -f conftest.file
-for am_try in 1 2; do
-  echo "timestamp, slept: $am_has_slept" > conftest.file
-  if (
-    set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null`
-    if test "$[]*" = "X"; then
-      # -L didn't work.
-      set X `ls -t "$srcdir/configure" conftest.file`
-    fi
-    test "$[]2" = conftest.file
-  ); then
-    am_build_env_is_sane=yes
-    break
-  fi
-  # Just in case.
-  sleep "$am_cv_filesystem_timestamp_resolution"
-  am_has_slept=yes
-done
-
-AC_MSG_RESULT([$am_build_env_is_sane])
-if test "$am_build_env_is_sane" = no; then
-  AC_MSG_ERROR([newly created file is older than distributed files!
-Check your system clock])
-fi
-
-# If we didn't sleep, we still need to ensure time stamps of config.status and
-# generated files are strictly newer.
-am_sleep_pid=
-AS_IF([test -e conftest.file || grep 'slept: no' conftest.file >/dev/null 2>&1],, [dnl
-  ( sleep "$am_cv_filesystem_timestamp_resolution" ) &
-  am_sleep_pid=$!
-])
-AC_CONFIG_COMMANDS_PRE(
-  [AC_MSG_CHECKING([that generated files are newer than configure])
-   if test -n "$am_sleep_pid"; then
-     # Hide warnings about reused PIDs.
-     wait $am_sleep_pid 2>/dev/null
-   fi
-   AC_MSG_RESULT([done])])
-rm -f conftest.file
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/silent.m4:11: -1- AC_DEFUN([_AM_SILENT_RULES], [AM_DEFAULT_VERBOSITY=1
-AC_ARG_ENABLE([silent-rules], [dnl
-AS_HELP_STRING(
-  [--enable-silent-rules],
-  [less verbose build output (undo: "make V=1")])
-AS_HELP_STRING(
-  [--disable-silent-rules],
-  [verbose build output (undo: "make V=0")])dnl
-])
-dnl
-dnl A few 'make' implementations (e.g., NonStop OS and NextStep)
-dnl do not support nested variable expansions.
-dnl See automake bug#9928 and bug#10237.
-am_make=${MAKE-make}
-AC_CACHE_CHECK([whether $am_make supports nested variables],
-   [am_cv_make_support_nested_variables],
-   [if AS_ECHO([['TRUE=$(BAR$(V))
-BAR0=false
-BAR1=true
-V=1
-am__doit:
-	@$(TRUE)
-.PHONY: am__doit']]) | $am_make -f - >/dev/null 2>&1; then
-  am_cv_make_support_nested_variables=yes
-else
-  am_cv_make_support_nested_variables=no
-fi])
-AC_SUBST([AM_V])dnl
-AM_SUBST_NOTMAKE([AM_V])dnl
-AC_SUBST([AM_DEFAULT_V])dnl
-AM_SUBST_NOTMAKE([AM_DEFAULT_V])dnl
-AC_SUBST([AM_DEFAULT_VERBOSITY])dnl
-AM_BACKSLASH='\'
-AC_SUBST([AM_BACKSLASH])dnl
-_AM_SUBST_NOTMAKE([AM_BACKSLASH])dnl
-dnl Delay evaluation of AM_DEFAULT_VERBOSITY to the end to allow multiple calls
-dnl to AM_SILENT_RULES to change the default value.
-AC_CONFIG_COMMANDS_PRE([dnl
-case $enable_silent_rules in @%:@ (((
-  yes) AM_DEFAULT_VERBOSITY=0;;
-   no) AM_DEFAULT_VERBOSITY=1;;
-esac
-if test $am_cv_make_support_nested_variables = yes; then
-  dnl Using '$V' instead of '$(V)' breaks IRIX make.
-  AM_V='$(V)'
-  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-else
-  AM_V=$AM_DEFAULT_VERBOSITY
-  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
-fi
-])dnl
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/silent.m4:69: -1- AC_DEFUN([AM_SILENT_RULES], [AC_REQUIRE([_AM_SILENT_RULES])
-AM_DEFAULT_VERBOSITY=m4_if([$1], [yes], [0], [1])m4_newline
-dnl We intentionally force a newline after the assignment, since a) nothing
-dnl good can come of more text following, and b) that was the behavior
-dnl before 1.17. See https://bugs.gnu.org/72267.
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/strip.m4:17: -1- AC_DEFUN([AM_PROG_INSTALL_STRIP], [AC_REQUIRE([AM_PROG_INSTALL_SH])dnl
-# Installed binaries are usually stripped using 'strip' when the user
-# run "make install-strip".  However 'strip' might not be the right
-# tool to use in cross-compilation environments, therefore Automake
-# will honor the 'STRIP' environment variable to overrule this program.
-dnl Don't test for $cross_compiling = yes, because it might be 'maybe'.
-if test "$cross_compiling" != no; then
-  AC_CHECK_TOOL([STRIP], [strip], :)
-fi
-INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s"
-AC_SUBST([INSTALL_STRIP_PROGRAM])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/substnot.m4:12: -1- AC_DEFUN([_AM_SUBST_NOTMAKE])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/substnot.m4:17: -1- AC_DEFUN([AM_SUBST_NOTMAKE], [_AM_SUBST_NOTMAKE($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/tar.m4:23: -1- AC_DEFUN([_AM_PROG_TAR], [# Always define AMTAR for backward compatibility.  Yes, it's still used
-# in the wild :-(  We should find a proper way to deprecate it ...
-AC_SUBST([AMTAR], ['$${TAR-tar}'])
-
-# We'll loop over all known methods to create a tar archive until one works.
-_am_tools='gnutar m4_if([$1], [ustar], [plaintar]) pax cpio none'
-
-m4_if([$1], [v7],
-  [am__tar='$${TAR-tar} chof - "$$tardir"' am__untar='$${TAR-tar} xf -'],
-
-  [m4_case([$1],
-    [ustar],
-     [# The POSIX 1988 'ustar' format is defined with fixed-size fields.
-      # There is notably a 21 bits limit for the UID and the GID.  In fact,
-      # the 'pax' utility can hang on bigger UID/GID (see automake bug#8343
-      # and bug#13588).
-      am_max_uid=2097151 # 2^21 - 1
-      am_max_gid=$am_max_uid
-      # The $UID and $GID variables are not portable, so we need to resort
-      # to the POSIX-mandated id(1) utility.  Errors in the 'id' calls
-      # below are definitely unexpected, so allow the users to see them
-      # (that is, avoid stderr redirection).
-      am_uid=`id -u || echo unknown`
-      am_gid=`id -g || echo unknown`
-      AC_MSG_CHECKING([whether UID '$am_uid' is supported by ustar format])
-      if test x$am_uid = xunknown; then
-        AC_MSG_WARN([ancient id detected; assuming current UID is ok, but dist-ustar might not work])
-      elif test $am_uid -le $am_max_uid; then
-        AC_MSG_RESULT([yes])
-      else
-        AC_MSG_RESULT([no])
-        _am_tools=none
-      fi
-      AC_MSG_CHECKING([whether GID '$am_gid' is supported by ustar format])
-      if test x$gm_gid = xunknown; then
-        AC_MSG_WARN([ancient id detected; assuming current GID is ok, but dist-ustar might not work])
-      elif test $am_gid -le $am_max_gid; then
-        AC_MSG_RESULT([yes])
-      else
-        AC_MSG_RESULT([no])
-        _am_tools=none
-      fi],
-
-  [pax],
-    [],
-
-  [m4_fatal([Unknown tar format])])
-
-  AC_MSG_CHECKING([how to create a $1 tar archive])
-
-  # Go ahead even if we have the value already cached.  We do so because we
-  # need to set the values for the 'am__tar' and 'am__untar' variables.
-  _am_tools=${am_cv_prog_tar_$1-$_am_tools}
-
-  for _am_tool in $_am_tools; do
-    case $_am_tool in
-    gnutar)
-      for _am_tar in tar gnutar gtar; do
-        AM_RUN_LOG([$_am_tar --version]) && break
-      done
-      am__tar="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$$tardir"'
-      am__tar_="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$tardir"'
-      am__untar="$_am_tar -xf -"
-      ;;
-    plaintar)
-      # Must skip GNU tar: if it does not support --format= it doesn't create
-      # ustar tarball either.
-      (tar --version) >/dev/null 2>&1 && continue
-      am__tar='tar chf - "$$tardir"'
-      am__tar_='tar chf - "$tardir"'
-      am__untar='tar xf -'
-      ;;
-    pax)
-      am__tar='pax -L -x $1 -w "$$tardir"'
-      am__tar_='pax -L -x $1 -w "$tardir"'
-      am__untar='pax -r'
-      ;;
-    cpio)
-      am__tar='find "$$tardir" -print | cpio -o -H $1 -L'
-      am__tar_='find "$tardir" -print | cpio -o -H $1 -L'
-      am__untar='cpio -i -H $1 -d'
-      ;;
-    none)
-      am__tar=false
-      am__tar_=false
-      am__untar=false
-      ;;
-    esac
-
-    # If the value was cached, stop now.  We just wanted to have am__tar
-    # and am__untar set.
-    test -n "${am_cv_prog_tar_$1}" && break
-
-    # tar/untar a dummy directory, and stop if the command works.
-    rm -rf conftest.dir
-    mkdir conftest.dir
-    echo GrepMe > conftest.dir/file
-    AM_RUN_LOG([tardir=conftest.dir && eval $am__tar_ >conftest.tar])
-    rm -rf conftest.dir
-    if test -s conftest.tar; then
-      AM_RUN_LOG([$am__untar <conftest.tar])
-      AM_RUN_LOG([cat conftest.dir/file])
-      grep GrepMe conftest.dir/file >/dev/null 2>&1 && break
-    fi
-  done
-  rm -rf conftest.dir
-
-  AC_CACHE_VAL([am_cv_prog_tar_$1], [am_cv_prog_tar_$1=$_am_tool])
-  AC_MSG_RESULT([$am_cv_prog_tar_$1])])
-
-AC_SUBST([am__tar])
-AC_SUBST([am__untar])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/xargsn.m4:12: -1- AC_DEFUN([_AM_PROG_XARGS_N], [AC_CACHE_CHECK([xargs -n works], am_cv_xargs_n_works, [dnl
-AS_IF([test "`echo 1 2 3 | xargs -n2 echo`" = "1 2
-3"], [am_cv_xargs_n_works=yes], [am_cv_xargs_n_works=no])])
-AS_IF([test "$am_cv_xargs_n_works" = yes], [am__xargs_n='xargs -n'], [dnl
-  am__xargs_n='am__xargs_n () { shift; sed "s/ /\\n/g" | while read am__xargs_n_arg; do "$@" "$am__xargs_n_arg"; done; }'
-])dnl
-AC_SUBST(am__xargs_n)
-])
-m4trace:m4/ax_gcc_builtin.m4:95: -1- AC_DEFUN([AX_GCC_BUILTIN], [
-    AS_VAR_PUSHDEF([ac_var], [ax_cv_have_$1])
-
-    AC_CACHE_CHECK([for $1], [ac_var], [
-        AC_LINK_IFELSE([AC_LANG_PROGRAM([], [
-            m4_case([$1],
-                [__builtin_assume_aligned], [$1("", 0)],
-                [__builtin_bswap32], [$1(0)],
-                [__builtin_bswap64], [$1(0)],
-                [__builtin_choose_expr], [$1(0, 0, 0)],
-                [__builtin___clear_cache], [$1("", "")],
-                [__builtin_clrsb], [$1(0)],
-                [__builtin_clrsbl], [$1(0)],
-                [__builtin_clrsbll], [$1(0)],
-                [__builtin_clz], [$1(0)],
-                [__builtin_clzl], [$1(0)],
-                [__builtin_clzll], [$1(0)],
-                [__builtin_complex], [$1(0.0, 0.0)],
-                [__builtin_constant_p], [$1(0)],
-                [__builtin_ctz], [$1(0)],
-                [__builtin_ctzl], [$1(0)],
-                [__builtin_ctzll], [$1(0)],
-                [__builtin_expect], [$1(0, 0)],
-                [__builtin_ffs], [$1(0)],
-                [__builtin_ffsl], [$1(0)],
-                [__builtin_ffsll], [$1(0)],
-                [__builtin_fpclassify], [$1(0, 1, 2, 3, 4, 0.0)],
-                [__builtin_huge_val], [$1()],
-                [__builtin_huge_valf], [$1()],
-                [__builtin_huge_vall], [$1()],
-                [__builtin_inf], [$1()],
-                [__builtin_infd128], [$1()],
-                [__builtin_infd32], [$1()],
-                [__builtin_infd64], [$1()],
-                [__builtin_inff], [$1()],
-                [__builtin_infl], [$1()],
-                [__builtin_isinf_sign], [$1(0.0)],
-                [__builtin_nan], [$1("")],
-                [__builtin_nand128], [$1("")],
-                [__builtin_nand32], [$1("")],
-                [__builtin_nand64], [$1("")],
-                [__builtin_nanf], [$1("")],
-                [__builtin_nanl], [$1("")],
-                [__builtin_nans], [$1("")],
-                [__builtin_nansf], [$1("")],
-                [__builtin_nansl], [$1("")],
-                [__builtin_object_size], [$1("", 0)],
-                [__builtin_parity], [$1(0)],
-                [__builtin_parityl], [$1(0)],
-                [__builtin_parityll], [$1(0)],
-                [__builtin_popcount], [$1(0)],
-                [__builtin_popcountl], [$1(0)],
-                [__builtin_popcountll], [$1(0)],
-                [__builtin_powi], [$1(0, 0)],
-                [__builtin_powif], [$1(0, 0)],
-                [__builtin_powil], [$1(0, 0)],
-                [__builtin_prefetch], [$1("")],
-                [__builtin_trap], [$1()],
-                [__builtin_types_compatible_p], [$1(int, int)],
-                [__builtin_unreachable], [$1()],
-                [m4_warn([syntax], [Unsupported built-in $1, the test may fail])
-                 $1()]
-            )
-            ])],
-            [AS_VAR_SET([ac_var], [yes])],
-            [AS_VAR_SET([ac_var], [no])])
-    ])
-
-    AS_IF([test yes = AS_VAR_GET([ac_var])],
-        [AC_DEFINE_UNQUOTED(AS_TR_CPP(HAVE_$1), 1,
-            [Define to 1 if the system has the `$1' built-in function])], [])
-
-    AS_VAR_POPDEF([ac_var])
-])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^_?A[CHUM]_])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([_AC_])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^LIBOBJS$], [do not use LIBOBJS directly, use AC_LIBOBJ (see section 'AC_LIBOBJ vs LIBOBJS'])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^AS_FLAGS$])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^_?m4_])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^dnl$])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^_?AS_])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^SHELL$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PATH_SEPARATOR$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_NAME$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_TARNAME$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_VERSION$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_STRING$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_BUGREPORT$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_URL$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^exec_prefix$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^prefix$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^program_transform_name$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^bindir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^sbindir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^libexecdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^datarootdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^datadir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^sysconfdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^sharedstatedir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^localstatedir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^runstatedir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^includedir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^oldincludedir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^docdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^infodir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^htmldir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^dvidir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^pdfdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^psdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^libdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^localedir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^mandir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_NAME$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_TARNAME$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_VERSION$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_STRING$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_BUGREPORT$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_URL$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^DEFS$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^LIBS$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^build_alias$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^host_alias$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^target_alias$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^ECHO_C$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^ECHO_N$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^ECHO_T$])
-m4trace:configure.ac:8: -1- AC_CONFIG_MACRO_DIR([m4])
-m4trace:configure.ac:8: -1- AC_CONFIG_MACRO_DIR_TRACE([m4])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_stdio_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" stdio.h ]AS_TR_SH([stdio.h]) AS_TR_CPP([HAVE_stdio.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CFLAGS$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^LDFLAGS$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^LIBS$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CPPFLAGS$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^ac_ct_CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^EXEEXT$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^OBJEXT$])
-m4trace:configure.ac:13: -1- _AM_PROG_CC_C_O
-m4trace:configure.ac:13: -1- AM_AUX_DIR_EXPAND
-m4trace:configure.ac:13: -1- AM_RUN_LOG([$CC -c conftest.$ac_ext -o conftest2.$ac_objext])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_stdlib_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" stdlib.h ]AS_TR_SH([stdlib.h]) AS_TR_CPP([HAVE_stdlib.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_string_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" string.h ]AS_TR_SH([string.h]) AS_TR_CPP([HAVE_string.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_inttypes_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" inttypes.h ]AS_TR_SH([inttypes.h]) AS_TR_CPP([HAVE_inttypes.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_stdint_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" stdint.h ]AS_TR_SH([stdint.h]) AS_TR_CPP([HAVE_stdint.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_strings_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" strings.h ]AS_TR_SH([strings.h]) AS_TR_CPP([HAVE_strings.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_sys_stat_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" sys/stat.h ]AS_TR_SH([sys/stat.h]) AS_TR_CPP([HAVE_sys/stat.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_sys_types_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" sys/types.h ]AS_TR_SH([sys/types.h]) AS_TR_CPP([HAVE_sys/types.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_unistd_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" unistd.h ]AS_TR_SH([unistd.h]) AS_TR_CPP([HAVE_unistd.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^STDC_HEADERS$])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_wchar_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" wchar.h ]AS_TR_SH([wchar.h]) AS_TR_CPP([HAVE_wchar.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_minix_config_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" minix/config.h ]AS_TR_SH([minix/config.h]) AS_TR_CPP([HAVE_minix/config.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_ALL_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_COSMO_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_DARWIN_C_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_GNU_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_HPUX_ALT_XOPEN_SOCKET_API$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_NETBSD_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_OPENBSD_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_POSIX_PTHREAD_SEMANTICS$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_ATTRIBS_EXT__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_BFP_EXT__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_DFP_EXT__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_EXT__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_FUNCS_EXT__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_TYPES_EXT__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_LIB_EXT2__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_MATH_SPEC_FUNCS__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_TANDEM_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_MINIX$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_POSIX_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_POSIX_1_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__EXTENSIONS__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_XOPEN_SOURCE$])
-m4trace:configure.ac:16: -1- AM_INIT_AUTOMAKE([foreign dist-xz])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_[A-Z]+FLAGS$])
-m4trace:configure.ac:16: -1- AM_SET_CURRENT_AUTOMAKE_VERSION
-m4trace:configure.ac:16: -1- AM_AUTOMAKE_VERSION([1.18.1])
-m4trace:configure.ac:16: -1- _AM_AUTOCONF_VERSION([2.73])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_PROGRAM$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_SCRIPT$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_DATA$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__isrc$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__isrc])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CYGPATH_W$])
-m4trace:configure.ac:16: -1- _AM_SET_OPTIONS([foreign dist-xz])
-m4trace:configure.ac:16: -1- _AM_SET_OPTION([foreign])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([foreign])
-m4trace:configure.ac:16: -1- _AM_SET_OPTION([dist-xz])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([dist-xz])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^PACKAGE$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^VERSION$])
-m4trace:configure.ac:16: -1- _AM_IF_OPTION([no-define], [], [AC_DEFINE_UNQUOTED([PACKAGE], ["$PACKAGE"], [Name of package])
- AC_DEFINE_UNQUOTED([VERSION], ["$VERSION"], [Version number of package])])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([no-define])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^PACKAGE$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^VERSION$])
-m4trace:configure.ac:16: -1- AM_SANITY_CHECK
-m4trace:configure.ac:16: -1- _AM_FILESYSTEM_TIMESTAMP_RESOLUTION
-m4trace:configure.ac:16: -1- _AM_SLEEP_FRACTIONAL_SECONDS
-m4trace:configure.ac:16: -1- AM_MISSING_PROG([ACLOCAL], [aclocal-${am__api_version}])
-m4trace:configure.ac:16: -1- AM_MISSING_HAS_RUN
-m4trace:configure.ac:16: -1- m4_pattern_allow([^ACLOCAL$])
-m4trace:configure.ac:16: -1- AM_MISSING_PROG([AUTOCONF], [autoconf])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AUTOCONF$])
-m4trace:configure.ac:16: -1- AM_MISSING_PROG([AUTOMAKE], [automake-${am__api_version}])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AUTOMAKE$])
-m4trace:configure.ac:16: -1- AM_MISSING_PROG([AUTOHEADER], [autoheader])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AUTOHEADER$])
-m4trace:configure.ac:16: -1- AM_MISSING_PROG([MAKEINFO], [makeinfo])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^MAKEINFO$])
-m4trace:configure.ac:16: -1- AM_PROG_INSTALL_SH
-m4trace:configure.ac:16: -1- m4_pattern_allow([^install_sh$])
-m4trace:configure.ac:16: -1- AM_PROG_INSTALL_STRIP
-m4trace:configure.ac:16: -1- m4_pattern_allow([^STRIP$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_STRIP_PROGRAM$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^MKDIR_P$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^mkdir_p$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AWK$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^SET_MAKE$])
-m4trace:configure.ac:16: -1- AM_SET_LEADING_DOT
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__leading_dot$])
-m4trace:configure.ac:16: -1- _AM_IF_OPTION([tar-ustar], [_AM_PROG_TAR([ustar])], [_AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])],
-    [_AM_IF_OPTION([tar-v7], [_AM_PROG_TAR([v7])],
-      [_AM_PROG_TAR([ustar])])])])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([tar-ustar])
-m4trace:configure.ac:16: -1- _AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])], [_AM_IF_OPTION([tar-v7], [_AM_PROG_TAR([v7])],
-      [_AM_PROG_TAR([ustar])])])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([tar-pax])
-m4trace:configure.ac:16: -1- _AM_IF_OPTION([tar-v7], [_AM_PROG_TAR([v7])], [_AM_PROG_TAR([ustar])])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([tar-v7])
-m4trace:configure.ac:16: -1- _AM_PROG_TAR([ustar])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMTAR$])
-m4trace:configure.ac:16: -1- AM_RUN_LOG([$_am_tar --version])
-m4trace:configure.ac:16: -1- AM_RUN_LOG([tardir=conftest.dir && eval $am__tar_ >conftest.tar])
-m4trace:configure.ac:16: -1- AM_RUN_LOG([$am__untar <conftest.tar])
-m4trace:configure.ac:16: -1- AM_RUN_LOG([cat conftest.dir/file])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__tar$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__untar$])
-m4trace:configure.ac:16: -1- _AM_IF_OPTION([no-dependencies], [], [AC_PROVIDE_IFELSE([AC_PROG_CC],
-		  [_AM_DEPENDENCIES([CC])],
-		  [m4_define([AC_PROG_CC],
-			     m4_defn([AC_PROG_CC])[_AM_DEPENDENCIES([CC])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_CXX],
-		  [_AM_DEPENDENCIES([CXX])],
-		  [m4_define([AC_PROG_CXX],
-			     m4_defn([AC_PROG_CXX])[_AM_DEPENDENCIES([CXX])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_OBJC],
-		  [_AM_DEPENDENCIES([OBJC])],
-		  [m4_define([AC_PROG_OBJC],
-			     m4_defn([AC_PROG_OBJC])[_AM_DEPENDENCIES([OBJC])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_OBJCXX],
-		  [_AM_DEPENDENCIES([OBJCXX])],
-		  [m4_define([AC_PROG_OBJCXX],
-			     m4_defn([AC_PROG_OBJCXX])[_AM_DEPENDENCIES([OBJCXX])])])dnl
-])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([no-dependencies])
-m4trace:configure.ac:16: -1- _AM_DEPENDENCIES([CC])
-m4trace:configure.ac:16: -1- AM_SET_DEPDIR
-m4trace:configure.ac:16: -1- m4_pattern_allow([^DEPDIR$])
-m4trace:configure.ac:16: -1- AM_OUTPUT_DEPENDENCY_COMMANDS
-m4trace:configure.ac:16: -1- AM_MAKE_INCLUDE
-m4trace:configure.ac:16: -1- AM_RUN_LOG([${MAKE-make} -f confmf.$s && cat confinc.out])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__include$])
-m4trace:configure.ac:16: -1- AM_DEP_TRACK
-m4trace:configure.ac:16: -1- AM_CONDITIONAL([AMDEP], [test "x$enable_dependency_tracking" != xno])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMDEP_TRUE$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMDEP_FALSE$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AMDEP_TRUE])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AMDEP_FALSE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMDEPBACKSLASH$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AMDEPBACKSLASH])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__nodep$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__nodep])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CCDEPMODE$])
-m4trace:configure.ac:16: -1- AM_CONDITIONAL([am__fastdepCC], [
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_CC_dependencies_compiler_type" = gcc3])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__fastdepCC_TRUE$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__fastdepCC_FALSE$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__fastdepCC_TRUE])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__fastdepCC_FALSE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CTAGS$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^ETAGS$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CSCOPE$])
-m4trace:configure.ac:16: -1- _AM_SILENT_RULES
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_V$])
-m4trace:configure.ac:16: -1- AM_SUBST_NOTMAKE([AM_V])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AM_V])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_DEFAULT_V$])
-m4trace:configure.ac:16: -1- AM_SUBST_NOTMAKE([AM_DEFAULT_V])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AM_DEFAULT_V])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_DEFAULT_VERBOSITY$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_BACKSLASH$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AM_BACKSLASH])
-m4trace:configure.ac:16: -1- _AM_PROG_RM_F
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__rm_f_notfound$])
-m4trace:configure.ac:16: -1- _AM_PROG_XARGS_N
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__xargs_n$])
-m4trace:configure.ac:19: -1- LT_INIT
-m4trace:configure.ac:19: -1- m4_pattern_forbid([^_?LT_[A-Z_]+$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^(_LT_EOF|LT_DLGLOBAL|LT_DLLAZY_OR_NOW|LT_MULTI_MODULE)$])
-m4trace:configure.ac:19: -1- LTOPTIONS_VERSION
-m4trace:configure.ac:19: -1- LTSUGAR_VERSION
-m4trace:configure.ac:19: -1- LTVERSION_VERSION
-m4trace:configure.ac:19: -1- LTOBSOLETE_VERSION
-m4trace:configure.ac:19: -1- _LT_PROG_LTMAIN
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LIBTOOL$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build_cpu$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build_vendor$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build_os$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host_cpu$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host_vendor$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host_os$])
-m4trace:configure.ac:19: -1- _LT_PREPARE_SED_QUOTE_VARS
-m4trace:configure.ac:19: -1- _LT_PROG_ECHO_BACKSLASH
-m4trace:configure.ac:19: -1- LT_PATH_LD
-m4trace:configure.ac:19: -1- m4_pattern_allow([^SED$])
-m4trace:configure.ac:19: -1- AC_PROG_EGREP
-m4trace:configure.ac:19: -1- m4_pattern_allow([^GREP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^EGREP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^FGREP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^GREP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LD$])
-m4trace:configure.ac:19: -1- LT_PATH_NM
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DUMPBIN$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^ac_ct_DUMPBIN$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DUMPBIN$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^NM$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LN_S$])
-m4trace:configure.ac:19: -1- LT_CMD_MAX_LEN
-m4trace:configure.ac:19: -1- m4_pattern_allow([^FILECMD$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OBJDUMP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OBJDUMP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DLLTOOL$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DLLTOOL$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^AR$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^ac_ct_AR$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^STRIP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^RANLIB$])
-m4trace:configure.ac:19: -1- _LT_WITH_SYSROOT
-m4trace:configure.ac:19: -1- m4_pattern_allow([LT_OBJDIR])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LT_OBJDIR$])
-m4trace:configure.ac:19: -1- _LT_CC_BASENAME([$compiler])
-m4trace:configure.ac:19: -1- _LT_PATH_TOOL_PREFIX([${ac_tool_prefix}file], [/usr/bin$PATH_SEPARATOR$PATH])
-m4trace:configure.ac:19: -1- _LT_PATH_TOOL_PREFIX([file], [/usr/bin$PATH_SEPARATOR$PATH])
-m4trace:configure.ac:19: -1- LT_SUPPORTED_TAG([CC])
-m4trace:configure.ac:19: -1- _LT_COMPILER_BOILERPLATE
-m4trace:configure.ac:19: -1- _LT_LINKER_BOILERPLATE
-m4trace:configure.ac:19: -1- _LT_COMPILER_OPTION([if $compiler supports -fno-rtti -fno-exceptions], [lt_cv_prog_compiler_rtti_exceptions], [-fno-rtti -fno-exceptions], [], [_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, )="$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, ) -fno-rtti -fno-exceptions"])
-m4trace:configure.ac:19: -1- _LT_COMPILER_OPTION([if $compiler PIC flag $_LT_TAGVAR(lt_prog_compiler_pic, ) works], [_LT_TAGVAR(lt_cv_prog_compiler_pic_works, )], [$_LT_TAGVAR(lt_prog_compiler_pic, )@&t@m4_if([],[],[ -DPIC],[m4_if([],[CXX],[ -DPIC],[])])], [], [case $_LT_TAGVAR(lt_prog_compiler_pic, ) in
-     "" | " "*) ;;
-     *) _LT_TAGVAR(lt_prog_compiler_pic, )=" $_LT_TAGVAR(lt_prog_compiler_pic, )" ;;
-     esac], [_LT_TAGVAR(lt_prog_compiler_pic, )=
-     _LT_TAGVAR(lt_prog_compiler_can_build_shared, )=no])
-m4trace:configure.ac:19: -1- _LT_LINKER_OPTION([if $compiler static flag $lt_tmp_static_flag works], [lt_cv_prog_compiler_static_works], [$lt_tmp_static_flag], [], [_LT_TAGVAR(lt_prog_compiler_static, )=])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^MANIFEST_TOOL$])
-m4trace:configure.ac:19: -1- _LT_DLL_DEF_P([$export_symbols])
-m4trace:configure.ac:19: -1- _LT_DLL_DEF_P([$export_symbols])
-m4trace:configure.ac:19: -1- _LT_REQUIRED_DARWIN_CHECKS
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DSYMUTIL$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^NMEDIT$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LIPO$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OTOOL$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OTOOL64$])
-m4trace:configure.ac:19: -1- _LT_LINKER_OPTION([if $CC understands -b], [lt_cv_prog_compiler__b], [-b], [_LT_TAGVAR(archive_cmds, )='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'], [_LT_TAGVAR(archive_cmds, )='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LT_SYS_LIBRARY_PATH$])
-m4trace:configure.ac:19: -1- _LT_COMPILER_OPTION([if $compiler PIC flag $_LT_TAGVAR(lt_prog_compiler_pic, ) works], [_LT_TAGVAR(lt_cv_prog_compiler_pic_works, )], [$_LT_TAGVAR(lt_prog_compiler_pic, )@&t@m4_if([],[],[ -DPIC],[m4_if([],[CXX],[ -DPIC],[])])], [], [case $_LT_TAGVAR(lt_prog_compiler_pic, ) in
-     "" | " "*) ;;
-     *) _LT_TAGVAR(lt_prog_compiler_pic, )=" $_LT_TAGVAR(lt_prog_compiler_pic, )" ;;
-     esac], [_LT_TAGVAR(lt_prog_compiler_pic, )=
-     _LT_TAGVAR(lt_prog_compiler_can_build_shared, )=no])
-m4trace:configure.ac:19: -1- _LT_LINKER_OPTION([if $compiler static flag $lt_tmp_static_flag works], [lt_cv_prog_compiler_static_works], [$lt_tmp_static_flag], [], [_LT_TAGVAR(lt_prog_compiler_static, )=])
-m4trace:configure.ac:19: -1- LT_SYS_DLOPEN_SELF
-m4trace:configure.ac:19: -1- m4_pattern_allow([^HAVE_DLFCN_H$])
-m4trace:configure.ac:25: -1- XORG_DEFAULT_OPTIONS
-m4trace:configure.ac:25: -1- XORG_COMPILER_FLAGS
-m4trace:configure.ac:25: -1- XORG_COMPILER_BRAND
-m4trace:configure.ac:25: -1- AC_DEFUN([_AC_UNDECLARED_BUILTIN_c], [_AC_UNDECLARED_BUILTIN])
-m4trace:configure.ac:25: -1- AC_DEFUN([_AC_FUTURE_DARWIN_c], [_AC_FUTURE_DARWIN])
-m4trace:configure.ac:25: -1- AC_DEFUN([_AC_UNDECLARED_BUILTIN_c], [_AC_UNDECLARED_BUILTIN])
-m4trace:configure.ac:25: -1- AC_DEFUN([_AC_FUTURE_DARWIN_c], [_AC_FUTURE_DARWIN])
-m4trace:configure.ac:25: -1- AC_DEFUN([_AC_UNDECLARED_BUILTIN_c], [_AC_UNDECLARED_BUILTIN])
-m4trace:configure.ac:25: -1- AC_DEFUN([_AC_FUTURE_DARWIN_c], [_AC_FUTURE_DARWIN])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wall])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wpointer-arith])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-declarations])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wformat=2], [-Wformat])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wstrict-prototypes])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-prototypes])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wnested-externs])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wbad-function-cast])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wold-style-definition], [-fd])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wunused])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wuninitialized])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wshadow])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-noreturn])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-format-attribute])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wredundant-decls])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wlogical-op])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=implicit], [-errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=nonnull])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=init-self])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=main])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=missing-braces])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=sequence-point])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=return-type], [-errwarn=E_FUNC_HAS_NO_RETURN_STMT])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=trigraphs])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=array-bounds])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=write-strings])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=address])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=int-to-pointer-cast], [-errwarn=E_BAD_PTR_INT_COMBINATION])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=pointer-to-int-cast])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wimplicit])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wnonnull])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Winit-self])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmain])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-braces])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wsequence-point])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wreturn-type])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wtrigraphs])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Warray-bounds])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wwrite-strings])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Waddress])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wint-to-pointer-cast])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wpointer-to-int-cast])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^BASE_CFLAGS$])
-m4trace:configure.ac:25: -1- XORG_CWARNFLAGS
-m4trace:configure.ac:25: -1- m4_pattern_allow([^CWARNFLAGS$])
-m4trace:configure.ac:25: -1- XORG_STRICT_OPTION
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-pedantic])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-Werror], [-errwarn])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-Werror=attributes])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^STRICT_CFLAGS$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^BASE_CFLAGS$])
-m4trace:configure.ac:25: -2- m4_pattern_allow([^CWARNFLAGS$])
-m4trace:configure.ac:25: -1- XORG_DEFAULT_NOCODE_OPTIONS
-m4trace:configure.ac:25: -1- XORG_RELEASE_VERSION
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PACKAGE_VERSION_MAJOR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PACKAGE_VERSION_MINOR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PACKAGE_VERSION_PATCHLEVEL$])
-m4trace:configure.ac:25: -1- XORG_CHANGELOG
-m4trace:configure.ac:25: -1- m4_pattern_allow([^CHANGELOG_CMD$])
-m4trace:configure.ac:25: -1- XORG_INSTALL
-m4trace:configure.ac:25: -1- PKG_PROG_PKG_CONFIG
-m4trace:configure.ac:25: -1- m4_pattern_forbid([^_?PKG_[A-Z_]+$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG(_(PATH|LIBDIR|SYSROOT_DIR|ALLOW_SYSTEM_(CFLAGS|LIBS)))?$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG_(DISABLE_UNINSTALLED|TOP_BUILD_DIR|DEBUG_SPEW)$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG_PATH$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG_LIBDIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^INSTALL_CMD$])
-m4trace:configure.ac:25: -1- XORG_MANPAGE_SECTIONS
-m4trace:configure.ac:25: -1- _m4_warn([cross], [cannot check for file existence when cross compiling], [./lib/autoconf/general.m4:3066: AC_CHECK_FILE is expanded from...
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:113: XORG_MANPAGE_SECTIONS is expanded from...
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1822: XORG_DEFAULT_NOCODE_OPTIONS is expanded from...
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1838: XORG_DEFAULT_OPTIONS is expanded from...
-configure.ac:25: the top level])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^APP_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^LIB_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^FILE_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^MISC_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^DRIVER_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^ADMIN_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^APP_MAN_DIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^LIB_MAN_DIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^FILE_MAN_DIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^MISC_MAN_DIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^DRIVER_MAN_DIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^ADMIN_MAN_DIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^XORG_MAN_PAGE$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^MAN_SUBSTS$])
-m4trace:configure.ac:25: -1- AM_SILENT_RULES([yes])
-m4trace:configure.ac:26: -1- XORG_ENABLE_SPECS
-m4trace:configure.ac:26: -1- AM_CONDITIONAL([ENABLE_SPECS], [test x$build_specs = xyes])
-m4trace:configure.ac:26: -1- m4_pattern_allow([^ENABLE_SPECS_TRUE$])
-m4trace:configure.ac:26: -1- m4_pattern_allow([^ENABLE_SPECS_FALSE$])
-m4trace:configure.ac:26: -1- _AM_SUBST_NOTMAKE([ENABLE_SPECS_TRUE])
-m4trace:configure.ac:26: -1- _AM_SUBST_NOTMAKE([ENABLE_SPECS_FALSE])
-m4trace:configure.ac:27: -1- XORG_WITH_XMLTO([0.0.22])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^XMLTO$])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^XMLTO$])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^XMLTO$])
-m4trace:configure.ac:27: -1- AM_CONDITIONAL([HAVE_XMLTO_TEXT], [test $have_xmlto_text = yes])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_TEXT_TRUE$])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_TEXT_FALSE$])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_TEXT_TRUE])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_TEXT_FALSE])
-m4trace:configure.ac:27: -1- AM_CONDITIONAL([HAVE_XMLTO], [test "$have_xmlto" = yes])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_TRUE$])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_FALSE$])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_TRUE])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_FALSE])
-m4trace:configure.ac:28: -1- XORG_WITH_FOP
-m4trace:configure.ac:28: -1- m4_pattern_allow([^FOP$])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^FOP$])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^FOP$])
-m4trace:configure.ac:28: -1- AM_CONDITIONAL([HAVE_FOP], [test "$have_fop" = yes])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^HAVE_FOP_TRUE$])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^HAVE_FOP_FALSE$])
-m4trace:configure.ac:28: -1- _AM_SUBST_NOTMAKE([HAVE_FOP_TRUE])
-m4trace:configure.ac:28: -1- _AM_SUBST_NOTMAKE([HAVE_FOP_FALSE])
-m4trace:configure.ac:29: -1- XORG_WITH_XSLTPROC
-m4trace:configure.ac:29: -1- m4_pattern_allow([^XSLTPROC$])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^XSLTPROC$])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^XSLTPROC$])
-m4trace:configure.ac:29: -1- AM_CONDITIONAL([HAVE_XSLTPROC], [test "$have_xsltproc" = yes])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^HAVE_XSLTPROC_TRUE$])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^HAVE_XSLTPROC_FALSE$])
-m4trace:configure.ac:29: -1- _AM_SUBST_NOTMAKE([HAVE_XSLTPROC_TRUE])
-m4trace:configure.ac:29: -1- _AM_SUBST_NOTMAKE([HAVE_XSLTPROC_FALSE])
-m4trace:configure.ac:30: -1- XORG_CHECK_SGML_DOCTOOLS([1.8])
-m4trace:configure.ac:30: -1- PKG_CHECK_EXISTS([xorg-sgml-doctools m4_ifval([1.8],[>= 1.8])], [XORG_SGML_PATH=`$PKG_CONFIG --variable=sgmlrootdir xorg-sgml-doctools`], [m4_ifval([1.8],[:],
-        [if test x"$cross_compiling" != x"yes" ; then
-            AC_CHECK_FILE([$prefix/share/sgml/X11/defs.ent],
-                          [XORG_SGML_PATH=$prefix/share/sgml])
-         fi])
-    ])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^XORG_SGML_PATH$])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^STYLESHEET_SRCDIR$])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^XSL_STYLESHEET$])
-m4trace:configure.ac:30: -1- AM_CONDITIONAL([HAVE_STYLESHEETS], [test "x$XSL_STYLESHEET" != "x"])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^HAVE_STYLESHEETS_TRUE$])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^HAVE_STYLESHEETS_FALSE$])
-m4trace:configure.ac:30: -1- _AM_SUBST_NOTMAKE([HAVE_STYLESHEETS_TRUE])
-m4trace:configure.ac:30: -1- _AM_SUBST_NOTMAKE([HAVE_STYLESHEETS_FALSE])
-m4trace:configure.ac:31: -1- XORG_CHECK_MALLOC_ZERO
-m4trace:configure.ac:31: -1- m4_pattern_allow([^MALLOC_ZERO_CFLAGS$])
-m4trace:configure.ac:31: -1- m4_pattern_allow([^XMALLOC_ZERO_CFLAGS$])
-m4trace:configure.ac:31: -1- m4_pattern_allow([^XTMALLOC_ZERO_CFLAGS$])
-m4trace:configure.ac:42: -1- m4_pattern_allow([^XEXT_SOREV$])
-m4trace:configure.ac:45: -1- PKG_CHECK_MODULES([XEXT], [xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99])
-m4trace:configure.ac:45: -1- m4_pattern_allow([^XEXT_CFLAGS$])
-m4trace:configure.ac:45: -1- m4_pattern_allow([^XEXT_LIBS$])
-m4trace:configure.ac:45: -1- PKG_CHECK_EXISTS([xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99], [pkg_cv_[]XEXT_CFLAGS=`$PKG_CONFIG --[]cflags "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes ], [pkg_failed=yes])
-m4trace:configure.ac:45: -1- PKG_CHECK_EXISTS([xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99], [pkg_cv_[]XEXT_LIBS=`$PKG_CONFIG --[]libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes ], [pkg_failed=yes])
-m4trace:configure.ac:45: -1- _PKG_SHORT_ERRORS_SUPPORTED
-m4trace:configure.ac:47: -1- AX_GCC_BUILTIN([__builtin_popcountl])
-m4trace:configure.ac:47: -1- m4_pattern_allow([^HAVE___BUILTIN_POPCOUNTL$])
-m4trace:configure.ac:48: -1- m4_pattern_allow([^HAVE_REALLOCARRAY$])
-m4trace:configure.ac:48: -1- m4_pattern_allow([^LIB@&t@OBJS$])
-m4trace:configure.ac:51: -1- XORG_WITH_LINT
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT$])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_FLAGS$])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT$])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_FLAGS$])
-m4trace:configure.ac:51: -1- AM_CONDITIONAL([LINT], [test "x$LINT" != x])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_TRUE$])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_FALSE$])
-m4trace:configure.ac:51: -1- _AM_SUBST_NOTMAKE([LINT_TRUE])
-m4trace:configure.ac:51: -1- _AM_SUBST_NOTMAKE([LINT_FALSE])
-m4trace:configure.ac:52: -1- XORG_LINT_LIBRARY([Xext])
-m4trace:configure.ac:52: -1- m4_pattern_allow([^LINTLIB$])
-m4trace:configure.ac:52: -1- AM_CONDITIONAL([MAKE_LINT_LIB], [test x$make_lint_lib != xno])
-m4trace:configure.ac:52: -1- m4_pattern_allow([^MAKE_LINT_LIB_TRUE$])
-m4trace:configure.ac:52: -1- m4_pattern_allow([^MAKE_LINT_LIB_FALSE$])
-m4trace:configure.ac:52: -1- _AM_SUBST_NOTMAKE([MAKE_LINT_LIB_TRUE])
-m4trace:configure.ac:52: -1- _AM_SUBST_NOTMAKE([MAKE_LINT_LIB_FALSE])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^LIB@&t@OBJS$])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^LTLIBOBJS$])
-m4trace:configure.ac:59: -1- AM_CONDITIONAL([am__EXEEXT], [test -n "$EXEEXT"])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^am__EXEEXT_TRUE$])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^am__EXEEXT_FALSE$])
-m4trace:configure.ac:59: -1- _AM_SUBST_NOTMAKE([am__EXEEXT_TRUE])
-m4trace:configure.ac:59: -1- _AM_SUBST_NOTMAKE([am__EXEEXT_FALSE])
-m4trace:configure.ac:59: -1- _AC_AM_CONFIG_HEADER_HOOK(["$ac_file"])
-m4trace:configure.ac:59: -1- _AM_OUTPUT_DEPENDENCY_COMMANDS
-m4trace:configure.ac:59: -1- AM_RUN_LOG([cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles])
-m4trace:configure.ac:59: -1- _LT_PROG_LTMAIN
diff --git a/experiments/wasm-gui/third_party/libXext/autom4te.cache/traces.1 b/experiments/wasm-gui/third_party/libXext/autom4te.cache/traces.1
deleted file mode 100644
index 8316de261..000000000
--- a/experiments/wasm-gui/third_party/libXext/autom4te.cache/traces.1
+++ /dev/null
@@ -1,929 +0,0 @@
-m4trace:aclocal.m4:2934: -1- AC_SUBST([am__quote])
-m4trace:aclocal.m4:2934: -1- AC_SUBST_TRACE([am__quote])
-m4trace:aclocal.m4:2934: -1- m4_pattern_allow([^am__quote$])
-m4trace:aclocal.m4:3590: -1- m4_include([m4/ax_gcc_builtin.m4])
-m4trace:aclocal.m4:3591: -1- m4_include([m4/libtool.m4])
-m4trace:aclocal.m4:3592: -1- m4_include([m4/ltoptions.m4])
-m4trace:aclocal.m4:3593: -1- m4_include([m4/ltsugar.m4])
-m4trace:aclocal.m4:3594: -1- m4_include([m4/ltversion.m4])
-m4trace:aclocal.m4:3595: -1- m4_include([m4/lt~obsolete.m4])
-m4trace:configure.ac:4: -1- AC_INIT([libXext], [1.3.7], [https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues], [libXext])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^_?A[CHUM]_])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([_AC_])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^LIBOBJS$], [do not use LIBOBJS directly, use AC_LIBOBJ (see section 'AC_LIBOBJ vs LIBOBJS'])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^AS_FLAGS$])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^_?m4_])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^dnl$])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^_?AS_])
-m4trace:configure.ac:4: -1- AC_SUBST([SHELL])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([SHELL])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^SHELL$])
-m4trace:configure.ac:4: -1- AC_SUBST([PATH_SEPARATOR])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PATH_SEPARATOR])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PATH_SEPARATOR$])
-m4trace:configure.ac:4: -1- AC_SUBST([PACKAGE_NAME], [m4_ifdef([AC_PACKAGE_NAME],      ['AC_PACKAGE_NAME'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PACKAGE_NAME])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_NAME$])
-m4trace:configure.ac:4: -1- AC_SUBST([PACKAGE_TARNAME], [m4_ifdef([AC_PACKAGE_TARNAME],   ['AC_PACKAGE_TARNAME'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PACKAGE_TARNAME])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_TARNAME$])
-m4trace:configure.ac:4: -1- AC_SUBST([PACKAGE_VERSION], [m4_ifdef([AC_PACKAGE_VERSION],   ['AC_PACKAGE_VERSION'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PACKAGE_VERSION])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_VERSION$])
-m4trace:configure.ac:4: -1- AC_SUBST([PACKAGE_STRING], [m4_ifdef([AC_PACKAGE_STRING],    ['AC_PACKAGE_STRING'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PACKAGE_STRING])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_STRING$])
-m4trace:configure.ac:4: -1- AC_SUBST([PACKAGE_BUGREPORT], [m4_ifdef([AC_PACKAGE_BUGREPORT], ['AC_PACKAGE_BUGREPORT'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PACKAGE_BUGREPORT])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_BUGREPORT$])
-m4trace:configure.ac:4: -1- AC_SUBST([PACKAGE_URL], [m4_ifdef([AC_PACKAGE_URL],       ['AC_PACKAGE_URL'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PACKAGE_URL])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_URL$])
-m4trace:configure.ac:4: -1- AC_SUBST([exec_prefix], [NONE])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([exec_prefix])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^exec_prefix$])
-m4trace:configure.ac:4: -1- AC_SUBST([prefix], [NONE])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([prefix])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^prefix$])
-m4trace:configure.ac:4: -1- AC_SUBST([program_transform_name], [s,x,x,])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([program_transform_name])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^program_transform_name$])
-m4trace:configure.ac:4: -1- AC_SUBST([bindir], ['${exec_prefix}/bin'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([bindir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^bindir$])
-m4trace:configure.ac:4: -1- AC_SUBST([sbindir], ['${exec_prefix}/sbin'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([sbindir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^sbindir$])
-m4trace:configure.ac:4: -1- AC_SUBST([libexecdir], ['${exec_prefix}/libexec'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([libexecdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^libexecdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([datarootdir], ['${prefix}/share'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([datarootdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^datarootdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([datadir], ['${datarootdir}'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([datadir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^datadir$])
-m4trace:configure.ac:4: -1- AC_SUBST([sysconfdir], ['${prefix}/etc'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([sysconfdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^sysconfdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([sharedstatedir], ['${prefix}/com'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([sharedstatedir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^sharedstatedir$])
-m4trace:configure.ac:4: -1- AC_SUBST([localstatedir], ['${prefix}/var'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([localstatedir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^localstatedir$])
-m4trace:configure.ac:4: -1- AC_SUBST([runstatedir], ['${localstatedir}/run'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([runstatedir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^runstatedir$])
-m4trace:configure.ac:4: -1- AC_SUBST([includedir], ['${prefix}/include'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([includedir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^includedir$])
-m4trace:configure.ac:4: -1- AC_SUBST([oldincludedir], ['/usr/include'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([oldincludedir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^oldincludedir$])
-m4trace:configure.ac:4: -1- AC_SUBST([docdir], [m4_ifset([AC_PACKAGE_TARNAME],
-				     ['${datarootdir}/doc/${PACKAGE_TARNAME}'],
-				     ['${datarootdir}/doc/${PACKAGE}'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([docdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^docdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([infodir], ['${datarootdir}/info'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([infodir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^infodir$])
-m4trace:configure.ac:4: -1- AC_SUBST([htmldir], ['${docdir}'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([htmldir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^htmldir$])
-m4trace:configure.ac:4: -1- AC_SUBST([dvidir], ['${docdir}'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([dvidir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^dvidir$])
-m4trace:configure.ac:4: -1- AC_SUBST([pdfdir], ['${docdir}'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([pdfdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^pdfdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([psdir], ['${docdir}'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([psdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^psdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([libdir], ['${exec_prefix}/lib'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([libdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^libdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([localedir], ['${datarootdir}/locale'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([localedir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^localedir$])
-m4trace:configure.ac:4: -1- AC_SUBST([mandir], ['${datarootdir}/man'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([mandir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^mandir$])
-m4trace:configure.ac:4: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_NAME])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_NAME$])
-m4trace:configure.ac:4: -1- AH_OUTPUT([PACKAGE_NAME], [/* Define to the full name of this package. */
-@%:@undef PACKAGE_NAME])
-m4trace:configure.ac:4: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_TARNAME])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_TARNAME$])
-m4trace:configure.ac:4: -1- AH_OUTPUT([PACKAGE_TARNAME], [/* Define to the one symbol short name of this package. */
-@%:@undef PACKAGE_TARNAME])
-m4trace:configure.ac:4: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_VERSION])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_VERSION$])
-m4trace:configure.ac:4: -1- AH_OUTPUT([PACKAGE_VERSION], [/* Define to the version of this package. */
-@%:@undef PACKAGE_VERSION])
-m4trace:configure.ac:4: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_STRING])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_STRING$])
-m4trace:configure.ac:4: -1- AH_OUTPUT([PACKAGE_STRING], [/* Define to the full name and version of this package. */
-@%:@undef PACKAGE_STRING])
-m4trace:configure.ac:4: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_BUGREPORT])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_BUGREPORT$])
-m4trace:configure.ac:4: -1- AH_OUTPUT([PACKAGE_BUGREPORT], [/* Define to the address where bug reports for this package should be sent. */
-@%:@undef PACKAGE_BUGREPORT])
-m4trace:configure.ac:4: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_URL])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_URL$])
-m4trace:configure.ac:4: -1- AH_OUTPUT([PACKAGE_URL], [/* Define to the home page for this package. */
-@%:@undef PACKAGE_URL])
-m4trace:configure.ac:4: -1- AC_SUBST([DEFS])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([DEFS])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^DEFS$])
-m4trace:configure.ac:4: -1- AC_SUBST([LIBS])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([LIBS])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^LIBS$])
-m4trace:configure.ac:4: -1- AC_SUBST([build_alias])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([build_alias])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^build_alias$])
-m4trace:configure.ac:4: -1- AC_SUBST([host_alias])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([host_alias])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^host_alias$])
-m4trace:configure.ac:4: -1- AC_SUBST([target_alias])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([target_alias])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^target_alias$])
-m4trace:configure.ac:4: -1- AC_SUBST([ECHO_C])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([ECHO_C])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^ECHO_C$])
-m4trace:configure.ac:4: -1- AC_SUBST([ECHO_N])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([ECHO_N])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^ECHO_N$])
-m4trace:configure.ac:4: -1- AC_SUBST([ECHO_T])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([ECHO_T])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^ECHO_T$])
-m4trace:configure.ac:7: -1- AC_CONFIG_HEADERS([config.h])
-m4trace:configure.ac:8: -1- AC_CONFIG_MACRO_DIR([m4])
-m4trace:configure.ac:8: -1- AC_CONFIG_MACRO_DIR_TRACE([m4])
-m4trace:configure.ac:13: -1- AH_OUTPUT([USE_SYSTEM_EXTENSIONS], [/* Enable extensions on AIX, Interix, z/OS.  */
-#ifndef _ALL_SOURCE
-# undef _ALL_SOURCE
-#endif
-/* Enable extensions on Cosmopolitan Libc. */
-#ifndef _COSMO_SOURCE
-# undef _COSMO_SOURCE
-#endif
-/* Enable general extensions on macOS.  */
-#ifndef _DARWIN_C_SOURCE
-# undef _DARWIN_C_SOURCE
-#endif
-/* Enable general extensions on Solaris.  */
-#ifndef __EXTENSIONS__
-# undef __EXTENSIONS__
-#endif
-/* Enable GNU extensions on systems that have them.  */
-#ifndef _GNU_SOURCE
-# undef _GNU_SOURCE
-#endif
-/* Enable X/Open compliant socket functions that do not require linking
-   with -lxnet on HP-UX 11.11.  */
-#ifndef _HPUX_ALT_XOPEN_SOCKET_API
-# undef _HPUX_ALT_XOPEN_SOCKET_API
-#endif
-/* Identify the host operating system as Minix.
-   This macro does not affect the system headers\' behavior.
-   A future release of Autoconf may stop defining this macro.  */
-#ifndef _MINIX
-# undef _MINIX
-#endif
-/* Enable general extensions on NetBSD.
-   Enable NetBSD compatibility extensions on Minix.  */
-#ifndef _NETBSD_SOURCE
-# undef _NETBSD_SOURCE
-#endif
-/* Enable OpenBSD compatibility extensions on NetBSD.
-   Oddly enough, this does nothing on OpenBSD.  */
-#ifndef _OPENBSD_SOURCE
-# undef _OPENBSD_SOURCE
-#endif
-/* Define to 1 if needed for POSIX-compatible behavior.  */
-#ifndef _POSIX_SOURCE
-# undef _POSIX_SOURCE
-#endif
-/* Define to 2 if needed for POSIX-compatible behavior.  */
-#ifndef _POSIX_1_SOURCE
-# undef _POSIX_1_SOURCE
-#endif
-/* Enable POSIX-compatible threading on Solaris.  */
-#ifndef _POSIX_PTHREAD_SEMANTICS
-# undef _POSIX_PTHREAD_SEMANTICS
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-5:2014.  */
-#ifndef __STDC_WANT_IEC_60559_ATTRIBS_EXT__
-# undef __STDC_WANT_IEC_60559_ATTRIBS_EXT__
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-1:2014.  */
-#ifndef __STDC_WANT_IEC_60559_BFP_EXT__
-# undef __STDC_WANT_IEC_60559_BFP_EXT__
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-2:2015.  */
-#ifndef __STDC_WANT_IEC_60559_DFP_EXT__
-# undef __STDC_WANT_IEC_60559_DFP_EXT__
-#endif
-/* Enable extensions specified by C23 Annex F.  */
-#ifndef __STDC_WANT_IEC_60559_EXT__
-# undef __STDC_WANT_IEC_60559_EXT__
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-4:2015.  */
-#ifndef __STDC_WANT_IEC_60559_FUNCS_EXT__
-# undef __STDC_WANT_IEC_60559_FUNCS_EXT__
-#endif
-/* Enable extensions specified by C23 Annex H and ISO/IEC TS 18661-3:2015.  */
-#ifndef __STDC_WANT_IEC_60559_TYPES_EXT__
-# undef __STDC_WANT_IEC_60559_TYPES_EXT__
-#endif
-/* Enable extensions specified by ISO/IEC TR 24731-2:2010.  */
-#ifndef __STDC_WANT_LIB_EXT2__
-# undef __STDC_WANT_LIB_EXT2__
-#endif
-/* Enable extensions specified by ISO/IEC 24747:2009.  */
-#ifndef __STDC_WANT_MATH_SPEC_FUNCS__
-# undef __STDC_WANT_MATH_SPEC_FUNCS__
-#endif
-/* Enable extensions on HP NonStop.  */
-#ifndef _TANDEM_SOURCE
-# undef _TANDEM_SOURCE
-#endif
-/* Enable X/Open extensions.  Define to 500 only if necessary
-   to make mbstate_t available.  */
-#ifndef _XOPEN_SOURCE
-# undef _XOPEN_SOURCE
-#endif
-])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_STDIO_H], [/* Define to 1 if you have the <stdio.h> header file. */
-@%:@undef HAVE_STDIO_H])
-m4trace:configure.ac:13: -1- AC_SUBST([CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([CFLAGS])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CFLAGS])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CFLAGS$])
-m4trace:configure.ac:13: -1- AC_SUBST([LDFLAGS])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([LDFLAGS])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^LDFLAGS$])
-m4trace:configure.ac:13: -1- AC_SUBST([LIBS])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([LIBS])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^LIBS$])
-m4trace:configure.ac:13: -1- AC_SUBST([CPPFLAGS])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CPPFLAGS])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CPPFLAGS$])
-m4trace:configure.ac:13: -1- AC_SUBST([CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([ac_ct_CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([ac_ct_CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^ac_ct_CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([EXEEXT], [$ac_cv_exeext])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([EXEEXT])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^EXEEXT$])
-m4trace:configure.ac:13: -1- AC_SUBST([OBJEXT], [$ac_cv_objext])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([OBJEXT])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^OBJEXT$])
-m4trace:configure.ac:13: -1- AC_REQUIRE_AUX_FILE([compile])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_STDLIB_H], [/* Define to 1 if you have the <stdlib.h> header file. */
-@%:@undef HAVE_STDLIB_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_STRING_H], [/* Define to 1 if you have the <string.h> header file. */
-@%:@undef HAVE_STRING_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_INTTYPES_H], [/* Define to 1 if you have the <inttypes.h> header file. */
-@%:@undef HAVE_INTTYPES_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_STDINT_H], [/* Define to 1 if you have the <stdint.h> header file. */
-@%:@undef HAVE_STDINT_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_STRINGS_H], [/* Define to 1 if you have the <strings.h> header file. */
-@%:@undef HAVE_STRINGS_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_SYS_STAT_H], [/* Define to 1 if you have the <sys/stat.h> header file. */
-@%:@undef HAVE_SYS_STAT_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_SYS_TYPES_H], [/* Define to 1 if you have the <sys/types.h> header file. */
-@%:@undef HAVE_SYS_TYPES_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_UNISTD_H], [/* Define to 1 if you have the <unistd.h> header file. */
-@%:@undef HAVE_UNISTD_H])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([STDC_HEADERS])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^STDC_HEADERS$])
-m4trace:configure.ac:13: -1- AH_OUTPUT([STDC_HEADERS], [/* Define to 1 if all of the C89 standard headers exist (not just the ones
-   required in a freestanding environment). This macro is provided for
-   backward compatibility; new code need not use it. */
-@%:@undef STDC_HEADERS])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_WCHAR_H], [/* Define to 1 if you have the <wchar.h> header file. */
-@%:@undef HAVE_WCHAR_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_MINIX_CONFIG_H], [/* Define to 1 if you have the <minix/config.h> header file. */
-@%:@undef HAVE_MINIX_CONFIG_H])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_ALL_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_ALL_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_COSMO_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_COSMO_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_DARWIN_C_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_DARWIN_C_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_GNU_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_GNU_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_HPUX_ALT_XOPEN_SOCKET_API])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_HPUX_ALT_XOPEN_SOCKET_API$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_NETBSD_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_NETBSD_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_OPENBSD_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_OPENBSD_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_POSIX_PTHREAD_SEMANTICS])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_POSIX_PTHREAD_SEMANTICS$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_IEC_60559_ATTRIBS_EXT__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_ATTRIBS_EXT__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_IEC_60559_BFP_EXT__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_BFP_EXT__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_IEC_60559_DFP_EXT__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_DFP_EXT__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_IEC_60559_EXT__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_EXT__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_IEC_60559_FUNCS_EXT__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_FUNCS_EXT__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_IEC_60559_TYPES_EXT__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_TYPES_EXT__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_LIB_EXT2__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_LIB_EXT2__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_MATH_SPEC_FUNCS__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_MATH_SPEC_FUNCS__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_TANDEM_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_TANDEM_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_MINIX])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_MINIX$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_POSIX_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_POSIX_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_POSIX_1_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_POSIX_1_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__EXTENSIONS__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__EXTENSIONS__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_XOPEN_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_XOPEN_SOURCE$])
-m4trace:configure.ac:16: -1- AM_INIT_AUTOMAKE([foreign dist-xz])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_[A-Z]+FLAGS$])
-m4trace:configure.ac:16: -1- AM_AUTOMAKE_VERSION([1.18.1])
-m4trace:configure.ac:16: -1- AC_REQUIRE_AUX_FILE([install-sh])
-m4trace:configure.ac:16: -1- AC_SUBST([INSTALL_PROGRAM])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([INSTALL_PROGRAM])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_PROGRAM$])
-m4trace:configure.ac:16: -1- AC_SUBST([INSTALL_SCRIPT])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([INSTALL_SCRIPT])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_SCRIPT$])
-m4trace:configure.ac:16: -1- AC_SUBST([INSTALL_DATA])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([INSTALL_DATA])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_DATA$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__isrc], [' -I$(srcdir)'])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__isrc])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__isrc$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__isrc])
-m4trace:configure.ac:16: -1- AC_SUBST([CYGPATH_W])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([CYGPATH_W])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CYGPATH_W$])
-m4trace:configure.ac:16: -1- AC_SUBST([PACKAGE], ['AC_PACKAGE_TARNAME'])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([PACKAGE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^PACKAGE$])
-m4trace:configure.ac:16: -1- AC_SUBST([VERSION], ['AC_PACKAGE_VERSION'])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([VERSION])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^VERSION$])
-m4trace:configure.ac:16: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^PACKAGE$])
-m4trace:configure.ac:16: -1- AH_OUTPUT([PACKAGE], [/* Name of package */
-@%:@undef PACKAGE])
-m4trace:configure.ac:16: -1- AC_DEFINE_TRACE_LITERAL([VERSION])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^VERSION$])
-m4trace:configure.ac:16: -1- AH_OUTPUT([VERSION], [/* Version number of package */
-@%:@undef VERSION])
-m4trace:configure.ac:16: -1- AC_REQUIRE_AUX_FILE([missing])
-m4trace:configure.ac:16: -1- AC_SUBST([ACLOCAL])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([ACLOCAL])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^ACLOCAL$])
-m4trace:configure.ac:16: -1- AC_SUBST([AUTOCONF])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AUTOCONF])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AUTOCONF$])
-m4trace:configure.ac:16: -1- AC_SUBST([AUTOMAKE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AUTOMAKE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AUTOMAKE$])
-m4trace:configure.ac:16: -1- AC_SUBST([AUTOHEADER])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AUTOHEADER])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AUTOHEADER$])
-m4trace:configure.ac:16: -1- AC_SUBST([MAKEINFO])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([MAKEINFO])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^MAKEINFO$])
-m4trace:configure.ac:16: -1- AC_SUBST([install_sh])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([install_sh])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^install_sh$])
-m4trace:configure.ac:16: -1- AC_SUBST([STRIP])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([STRIP])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^STRIP$])
-m4trace:configure.ac:16: -1- AC_SUBST([INSTALL_STRIP_PROGRAM])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([INSTALL_STRIP_PROGRAM])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_STRIP_PROGRAM$])
-m4trace:configure.ac:16: -1- AC_REQUIRE_AUX_FILE([install-sh])
-m4trace:configure.ac:16: -1- AC_SUBST([MKDIR_P])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([MKDIR_P])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^MKDIR_P$])
-m4trace:configure.ac:16: -1- AC_SUBST([mkdir_p], ['$(MKDIR_P)'])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([mkdir_p])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^mkdir_p$])
-m4trace:configure.ac:16: -1- AC_SUBST([AWK])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AWK])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AWK$])
-m4trace:configure.ac:16: -1- AC_SUBST([SET_MAKE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([SET_MAKE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^SET_MAKE$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__leading_dot])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__leading_dot])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__leading_dot$])
-m4trace:configure.ac:16: -1- AC_SUBST([AMTAR], ['$${TAR-tar}'])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AMTAR])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMTAR$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__tar])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__tar])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__tar$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__untar])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__untar])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__untar$])
-m4trace:configure.ac:16: -1- AC_SUBST([DEPDIR], ["${am__leading_dot}deps"])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([DEPDIR])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^DEPDIR$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__include])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__include])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__include$])
-m4trace:configure.ac:16: -1- AM_CONDITIONAL([AMDEP], [test "x$enable_dependency_tracking" != xno])
-m4trace:configure.ac:16: -1- AC_SUBST([AMDEP_TRUE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AMDEP_TRUE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMDEP_TRUE$])
-m4trace:configure.ac:16: -1- AC_SUBST([AMDEP_FALSE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AMDEP_FALSE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMDEP_FALSE$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AMDEP_TRUE])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AMDEP_FALSE])
-m4trace:configure.ac:16: -1- AC_SUBST([AMDEPBACKSLASH])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AMDEPBACKSLASH])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMDEPBACKSLASH$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AMDEPBACKSLASH])
-m4trace:configure.ac:16: -1- AC_SUBST([am__nodep])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__nodep])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__nodep$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__nodep])
-m4trace:configure.ac:16: -1- AC_SUBST([CCDEPMODE], [depmode=$am_cv_CC_dependencies_compiler_type])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([CCDEPMODE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CCDEPMODE$])
-m4trace:configure.ac:16: -1- AM_CONDITIONAL([am__fastdepCC], [
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_CC_dependencies_compiler_type" = gcc3])
-m4trace:configure.ac:16: -1- AC_SUBST([am__fastdepCC_TRUE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__fastdepCC_TRUE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__fastdepCC_TRUE$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__fastdepCC_FALSE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__fastdepCC_FALSE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__fastdepCC_FALSE$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__fastdepCC_TRUE])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__fastdepCC_FALSE])
-m4trace:configure.ac:16: -1- AC_SUBST([CTAGS])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([CTAGS])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CTAGS$])
-m4trace:configure.ac:16: -1- AC_SUBST([ETAGS])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([ETAGS])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^ETAGS$])
-m4trace:configure.ac:16: -1- AC_SUBST([CSCOPE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([CSCOPE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CSCOPE$])
-m4trace:configure.ac:16: -1- AC_SUBST([AM_V])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AM_V])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_V$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AM_V])
-m4trace:configure.ac:16: -1- AC_SUBST([AM_DEFAULT_V])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AM_DEFAULT_V])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_DEFAULT_V$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AM_DEFAULT_V])
-m4trace:configure.ac:16: -1- AC_SUBST([AM_DEFAULT_VERBOSITY])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AM_DEFAULT_VERBOSITY])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_DEFAULT_VERBOSITY$])
-m4trace:configure.ac:16: -1- AC_SUBST([AM_BACKSLASH])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AM_BACKSLASH])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_BACKSLASH$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AM_BACKSLASH])
-m4trace:configure.ac:16: -1- AC_SUBST([am__rm_f_notfound])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__rm_f_notfound])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__rm_f_notfound$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__xargs_n])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__xargs_n])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__xargs_n$])
-m4trace:configure.ac:19: -1- LT_INIT
-m4trace:configure.ac:19: -1- m4_pattern_forbid([^_?LT_[A-Z_]+$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^(_LT_EOF|LT_DLGLOBAL|LT_DLLAZY_OR_NOW|LT_MULTI_MODULE)$])
-m4trace:configure.ac:19: -1- AC_REQUIRE_AUX_FILE([ltmain.sh])
-m4trace:configure.ac:19: -1- AC_SUBST([LIBTOOL])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([LIBTOOL])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LIBTOOL$])
-m4trace:configure.ac:19: -1- AC_CANONICAL_HOST
-m4trace:configure.ac:19: -1- AC_CANONICAL_BUILD
-m4trace:configure.ac:19: -1- AC_REQUIRE_AUX_FILE([config.sub])
-m4trace:configure.ac:19: -1- AC_REQUIRE_AUX_FILE([config.guess])
-m4trace:configure.ac:19: -1- AC_SUBST([build], [$ac_cv_build])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([build])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build$])
-m4trace:configure.ac:19: -1- AC_SUBST([build_cpu], [$[1]])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([build_cpu])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build_cpu$])
-m4trace:configure.ac:19: -1- AC_SUBST([build_vendor], [$[2]])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([build_vendor])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build_vendor$])
-m4trace:configure.ac:19: -1- AC_SUBST([build_os])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([build_os])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build_os$])
-m4trace:configure.ac:19: -1- AC_SUBST([host], [$ac_cv_host])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([host])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host$])
-m4trace:configure.ac:19: -1- AC_SUBST([host_cpu], [$[1]])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([host_cpu])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host_cpu$])
-m4trace:configure.ac:19: -1- AC_SUBST([host_vendor], [$[2]])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([host_vendor])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host_vendor$])
-m4trace:configure.ac:19: -1- AC_SUBST([host_os])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([host_os])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host_os$])
-m4trace:configure.ac:19: -1- AC_SUBST([SED])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([SED])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^SED$])
-m4trace:configure.ac:19: -1- AC_SUBST([GREP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([GREP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^GREP$])
-m4trace:configure.ac:19: -1- AC_SUBST([EGREP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([EGREP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^EGREP$])
-m4trace:configure.ac:19: -1- AC_SUBST([FGREP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([FGREP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^FGREP$])
-m4trace:configure.ac:19: -1- AC_SUBST([GREP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([GREP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^GREP$])
-m4trace:configure.ac:19: -1- AC_SUBST([LD])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([LD])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LD$])
-m4trace:configure.ac:19: -1- AC_SUBST([DUMPBIN])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([DUMPBIN])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DUMPBIN$])
-m4trace:configure.ac:19: -1- AC_SUBST([ac_ct_DUMPBIN])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([ac_ct_DUMPBIN])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^ac_ct_DUMPBIN$])
-m4trace:configure.ac:19: -1- AC_SUBST([DUMPBIN])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([DUMPBIN])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DUMPBIN$])
-m4trace:configure.ac:19: -1- AC_SUBST([NM])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([NM])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^NM$])
-m4trace:configure.ac:19: -1- AC_SUBST([LN_S], [$as_ln_s])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([LN_S])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LN_S$])
-m4trace:configure.ac:19: -1- AC_SUBST([FILECMD])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([FILECMD])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^FILECMD$])
-m4trace:configure.ac:19: -1- AC_SUBST([OBJDUMP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([OBJDUMP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OBJDUMP$])
-m4trace:configure.ac:19: -1- AC_SUBST([OBJDUMP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([OBJDUMP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OBJDUMP$])
-m4trace:configure.ac:19: -1- AC_SUBST([DLLTOOL])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([DLLTOOL])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DLLTOOL$])
-m4trace:configure.ac:19: -1- AC_SUBST([DLLTOOL])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([DLLTOOL])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DLLTOOL$])
-m4trace:configure.ac:19: -1- AC_SUBST([AR])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([AR])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^AR$])
-m4trace:configure.ac:19: -1- AC_SUBST([ac_ct_AR])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([ac_ct_AR])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^ac_ct_AR$])
-m4trace:configure.ac:19: -1- AC_SUBST([STRIP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([STRIP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^STRIP$])
-m4trace:configure.ac:19: -1- AC_SUBST([RANLIB])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([RANLIB])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^RANLIB$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([LT_OBJDIR])
-m4trace:configure.ac:19: -1- AC_DEFINE_TRACE_LITERAL([LT_OBJDIR])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LT_OBJDIR$])
-m4trace:configure.ac:19: -1- AH_OUTPUT([LT_OBJDIR], [/* Define to the sub-directory where libtool stores uninstalled libraries. */
-@%:@undef LT_OBJDIR])
-m4trace:configure.ac:19: -1- LT_SUPPORTED_TAG([CC])
-m4trace:configure.ac:19: -1- AC_SUBST([MANIFEST_TOOL])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([MANIFEST_TOOL])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^MANIFEST_TOOL$])
-m4trace:configure.ac:19: -1- AC_SUBST([DSYMUTIL])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([DSYMUTIL])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DSYMUTIL$])
-m4trace:configure.ac:19: -1- AC_SUBST([NMEDIT])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([NMEDIT])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^NMEDIT$])
-m4trace:configure.ac:19: -1- AC_SUBST([LIPO])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([LIPO])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LIPO$])
-m4trace:configure.ac:19: -1- AC_SUBST([OTOOL])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([OTOOL])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OTOOL$])
-m4trace:configure.ac:19: -1- AC_SUBST([OTOOL64])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([OTOOL64])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OTOOL64$])
-m4trace:configure.ac:19: -1- AC_SUBST([LT_SYS_LIBRARY_PATH])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([LT_SYS_LIBRARY_PATH])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LT_SYS_LIBRARY_PATH$])
-m4trace:configure.ac:19: -1- AH_OUTPUT([HAVE_DLFCN_H], [/* Define to 1 if you have the <dlfcn.h> header file. */
-@%:@undef HAVE_DLFCN_H])
-m4trace:configure.ac:19: -1- AC_DEFINE_TRACE_LITERAL([HAVE_DLFCN_H])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^HAVE_DLFCN_H$])
-m4trace:configure.ac:25: -1- AC_SUBST([BASE_CFLAGS])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([BASE_CFLAGS])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^BASE_CFLAGS$])
-m4trace:configure.ac:25: -1- AC_SUBST([CWARNFLAGS])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([CWARNFLAGS])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^CWARNFLAGS$])
-m4trace:configure.ac:25: -1- AC_SUBST([STRICT_CFLAGS])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([STRICT_CFLAGS])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^STRICT_CFLAGS$])
-m4trace:configure.ac:25: -1- AC_SUBST([BASE_CFLAGS])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([BASE_CFLAGS])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^BASE_CFLAGS$])
-m4trace:configure.ac:25: -2- AC_SUBST([CWARNFLAGS])
-m4trace:configure.ac:25: -2- AC_SUBST_TRACE([CWARNFLAGS])
-m4trace:configure.ac:25: -2- m4_pattern_allow([^CWARNFLAGS$])
-m4trace:configure.ac:25: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_VERSION_MAJOR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PACKAGE_VERSION_MAJOR$])
-m4trace:configure.ac:25: -1- AH_OUTPUT([PACKAGE_VERSION_MAJOR], [/* Major version of this package */
-@%:@undef PACKAGE_VERSION_MAJOR])
-m4trace:configure.ac:25: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_VERSION_MINOR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PACKAGE_VERSION_MINOR$])
-m4trace:configure.ac:25: -1- AH_OUTPUT([PACKAGE_VERSION_MINOR], [/* Minor version of this package */
-@%:@undef PACKAGE_VERSION_MINOR])
-m4trace:configure.ac:25: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_VERSION_PATCHLEVEL])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PACKAGE_VERSION_PATCHLEVEL$])
-m4trace:configure.ac:25: -1- AH_OUTPUT([PACKAGE_VERSION_PATCHLEVEL], [/* Patch version of this package */
-@%:@undef PACKAGE_VERSION_PATCHLEVEL])
-m4trace:configure.ac:25: -1- AC_SUBST([CHANGELOG_CMD])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([CHANGELOG_CMD])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^CHANGELOG_CMD$])
-m4trace:configure.ac:25: -1- m4_pattern_forbid([^_?PKG_[A-Z_]+$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG(_(PATH|LIBDIR|SYSROOT_DIR|ALLOW_SYSTEM_(CFLAGS|LIBS)))?$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG_(DISABLE_UNINSTALLED|TOP_BUILD_DIR|DEBUG_SPEW)$])
-m4trace:configure.ac:25: -1- AC_SUBST([PKG_CONFIG])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([PKG_CONFIG])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG$])
-m4trace:configure.ac:25: -1- AC_SUBST([PKG_CONFIG_PATH])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([PKG_CONFIG_PATH])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG_PATH$])
-m4trace:configure.ac:25: -1- AC_SUBST([PKG_CONFIG_LIBDIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([PKG_CONFIG_LIBDIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG_LIBDIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([PKG_CONFIG])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([PKG_CONFIG])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG$])
-m4trace:configure.ac:25: -1- AC_SUBST([INSTALL_CMD])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([INSTALL_CMD])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^INSTALL_CMD$])
-m4trace:configure.ac:25: -1- _m4_warn([cross], [cannot check for file existence when cross compiling], [./lib/autoconf/general.m4:3066: AC_CHECK_FILE is expanded from...
-aclocal.m4:479: XORG_MANPAGE_SECTIONS is expanded from...
-aclocal.m4:2188: XORG_DEFAULT_NOCODE_OPTIONS is expanded from...
-aclocal.m4:2204: XORG_DEFAULT_OPTIONS is expanded from...
-configure.ac:25: the top level])
-m4trace:configure.ac:25: -1- AC_SUBST([APP_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([APP_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^APP_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- AC_SUBST([LIB_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([LIB_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^LIB_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- AC_SUBST([FILE_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([FILE_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^FILE_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- AC_SUBST([MISC_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([MISC_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^MISC_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- AC_SUBST([DRIVER_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([DRIVER_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^DRIVER_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- AC_SUBST([ADMIN_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([ADMIN_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^ADMIN_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- AC_SUBST([APP_MAN_DIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([APP_MAN_DIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^APP_MAN_DIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([LIB_MAN_DIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([LIB_MAN_DIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^LIB_MAN_DIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([FILE_MAN_DIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([FILE_MAN_DIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^FILE_MAN_DIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([MISC_MAN_DIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([MISC_MAN_DIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^MISC_MAN_DIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([DRIVER_MAN_DIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([DRIVER_MAN_DIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^DRIVER_MAN_DIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([ADMIN_MAN_DIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([ADMIN_MAN_DIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^ADMIN_MAN_DIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([XORG_MAN_PAGE])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([XORG_MAN_PAGE])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^XORG_MAN_PAGE$])
-m4trace:configure.ac:25: -1- AC_SUBST([MAN_SUBSTS])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([MAN_SUBSTS])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^MAN_SUBSTS$])
-m4trace:configure.ac:25: -1- AM_SILENT_RULES([yes])
-m4trace:configure.ac:26: -1- AM_CONDITIONAL([ENABLE_SPECS], [test x$build_specs = xyes])
-m4trace:configure.ac:26: -1- AC_SUBST([ENABLE_SPECS_TRUE])
-m4trace:configure.ac:26: -1- AC_SUBST_TRACE([ENABLE_SPECS_TRUE])
-m4trace:configure.ac:26: -1- m4_pattern_allow([^ENABLE_SPECS_TRUE$])
-m4trace:configure.ac:26: -1- AC_SUBST([ENABLE_SPECS_FALSE])
-m4trace:configure.ac:26: -1- AC_SUBST_TRACE([ENABLE_SPECS_FALSE])
-m4trace:configure.ac:26: -1- m4_pattern_allow([^ENABLE_SPECS_FALSE$])
-m4trace:configure.ac:26: -1- _AM_SUBST_NOTMAKE([ENABLE_SPECS_TRUE])
-m4trace:configure.ac:26: -1- _AM_SUBST_NOTMAKE([ENABLE_SPECS_FALSE])
-m4trace:configure.ac:27: -1- AC_SUBST([XMLTO])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([XMLTO])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^XMLTO$])
-m4trace:configure.ac:27: -1- AC_SUBST([XMLTO])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([XMLTO])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^XMLTO$])
-m4trace:configure.ac:27: -1- AC_SUBST([XMLTO])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([XMLTO])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^XMLTO$])
-m4trace:configure.ac:27: -1- AM_CONDITIONAL([HAVE_XMLTO_TEXT], [test $have_xmlto_text = yes])
-m4trace:configure.ac:27: -1- AC_SUBST([HAVE_XMLTO_TEXT_TRUE])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([HAVE_XMLTO_TEXT_TRUE])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_TEXT_TRUE$])
-m4trace:configure.ac:27: -1- AC_SUBST([HAVE_XMLTO_TEXT_FALSE])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([HAVE_XMLTO_TEXT_FALSE])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_TEXT_FALSE$])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_TEXT_TRUE])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_TEXT_FALSE])
-m4trace:configure.ac:27: -1- AM_CONDITIONAL([HAVE_XMLTO], [test "$have_xmlto" = yes])
-m4trace:configure.ac:27: -1- AC_SUBST([HAVE_XMLTO_TRUE])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([HAVE_XMLTO_TRUE])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_TRUE$])
-m4trace:configure.ac:27: -1- AC_SUBST([HAVE_XMLTO_FALSE])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([HAVE_XMLTO_FALSE])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_FALSE$])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_TRUE])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_FALSE])
-m4trace:configure.ac:28: -1- AC_SUBST([FOP])
-m4trace:configure.ac:28: -1- AC_SUBST_TRACE([FOP])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^FOP$])
-m4trace:configure.ac:28: -1- AC_SUBST([FOP])
-m4trace:configure.ac:28: -1- AC_SUBST_TRACE([FOP])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^FOP$])
-m4trace:configure.ac:28: -1- AC_SUBST([FOP])
-m4trace:configure.ac:28: -1- AC_SUBST_TRACE([FOP])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^FOP$])
-m4trace:configure.ac:28: -1- AM_CONDITIONAL([HAVE_FOP], [test "$have_fop" = yes])
-m4trace:configure.ac:28: -1- AC_SUBST([HAVE_FOP_TRUE])
-m4trace:configure.ac:28: -1- AC_SUBST_TRACE([HAVE_FOP_TRUE])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^HAVE_FOP_TRUE$])
-m4trace:configure.ac:28: -1- AC_SUBST([HAVE_FOP_FALSE])
-m4trace:configure.ac:28: -1- AC_SUBST_TRACE([HAVE_FOP_FALSE])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^HAVE_FOP_FALSE$])
-m4trace:configure.ac:28: -1- _AM_SUBST_NOTMAKE([HAVE_FOP_TRUE])
-m4trace:configure.ac:28: -1- _AM_SUBST_NOTMAKE([HAVE_FOP_FALSE])
-m4trace:configure.ac:29: -1- AC_SUBST([XSLTPROC])
-m4trace:configure.ac:29: -1- AC_SUBST_TRACE([XSLTPROC])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^XSLTPROC$])
-m4trace:configure.ac:29: -1- AC_SUBST([XSLTPROC])
-m4trace:configure.ac:29: -1- AC_SUBST_TRACE([XSLTPROC])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^XSLTPROC$])
-m4trace:configure.ac:29: -1- AC_SUBST([XSLTPROC])
-m4trace:configure.ac:29: -1- AC_SUBST_TRACE([XSLTPROC])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^XSLTPROC$])
-m4trace:configure.ac:29: -1- AM_CONDITIONAL([HAVE_XSLTPROC], [test "$have_xsltproc" = yes])
-m4trace:configure.ac:29: -1- AC_SUBST([HAVE_XSLTPROC_TRUE])
-m4trace:configure.ac:29: -1- AC_SUBST_TRACE([HAVE_XSLTPROC_TRUE])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^HAVE_XSLTPROC_TRUE$])
-m4trace:configure.ac:29: -1- AC_SUBST([HAVE_XSLTPROC_FALSE])
-m4trace:configure.ac:29: -1- AC_SUBST_TRACE([HAVE_XSLTPROC_FALSE])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^HAVE_XSLTPROC_FALSE$])
-m4trace:configure.ac:29: -1- _AM_SUBST_NOTMAKE([HAVE_XSLTPROC_TRUE])
-m4trace:configure.ac:29: -1- _AM_SUBST_NOTMAKE([HAVE_XSLTPROC_FALSE])
-m4trace:configure.ac:30: -1- AC_SUBST([XORG_SGML_PATH])
-m4trace:configure.ac:30: -1- AC_SUBST_TRACE([XORG_SGML_PATH])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^XORG_SGML_PATH$])
-m4trace:configure.ac:30: -1- AC_SUBST([STYLESHEET_SRCDIR])
-m4trace:configure.ac:30: -1- AC_SUBST_TRACE([STYLESHEET_SRCDIR])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^STYLESHEET_SRCDIR$])
-m4trace:configure.ac:30: -1- AC_SUBST([XSL_STYLESHEET])
-m4trace:configure.ac:30: -1- AC_SUBST_TRACE([XSL_STYLESHEET])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^XSL_STYLESHEET$])
-m4trace:configure.ac:30: -1- AM_CONDITIONAL([HAVE_STYLESHEETS], [test "x$XSL_STYLESHEET" != "x"])
-m4trace:configure.ac:30: -1- AC_SUBST([HAVE_STYLESHEETS_TRUE])
-m4trace:configure.ac:30: -1- AC_SUBST_TRACE([HAVE_STYLESHEETS_TRUE])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^HAVE_STYLESHEETS_TRUE$])
-m4trace:configure.ac:30: -1- AC_SUBST([HAVE_STYLESHEETS_FALSE])
-m4trace:configure.ac:30: -1- AC_SUBST_TRACE([HAVE_STYLESHEETS_FALSE])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^HAVE_STYLESHEETS_FALSE$])
-m4trace:configure.ac:30: -1- _AM_SUBST_NOTMAKE([HAVE_STYLESHEETS_TRUE])
-m4trace:configure.ac:30: -1- _AM_SUBST_NOTMAKE([HAVE_STYLESHEETS_FALSE])
-m4trace:configure.ac:31: -1- AC_SUBST([MALLOC_ZERO_CFLAGS])
-m4trace:configure.ac:31: -1- AC_SUBST_TRACE([MALLOC_ZERO_CFLAGS])
-m4trace:configure.ac:31: -1- m4_pattern_allow([^MALLOC_ZERO_CFLAGS$])
-m4trace:configure.ac:31: -1- AC_SUBST([XMALLOC_ZERO_CFLAGS])
-m4trace:configure.ac:31: -1- AC_SUBST_TRACE([XMALLOC_ZERO_CFLAGS])
-m4trace:configure.ac:31: -1- m4_pattern_allow([^XMALLOC_ZERO_CFLAGS$])
-m4trace:configure.ac:31: -1- AC_SUBST([XTMALLOC_ZERO_CFLAGS])
-m4trace:configure.ac:31: -1- AC_SUBST_TRACE([XTMALLOC_ZERO_CFLAGS])
-m4trace:configure.ac:31: -1- m4_pattern_allow([^XTMALLOC_ZERO_CFLAGS$])
-m4trace:configure.ac:42: -1- AC_SUBST([XEXT_SOREV])
-m4trace:configure.ac:42: -1- AC_SUBST_TRACE([XEXT_SOREV])
-m4trace:configure.ac:42: -1- m4_pattern_allow([^XEXT_SOREV$])
-m4trace:configure.ac:45: -1- AC_SUBST([XEXT_CFLAGS])
-m4trace:configure.ac:45: -1- AC_SUBST_TRACE([XEXT_CFLAGS])
-m4trace:configure.ac:45: -1- m4_pattern_allow([^XEXT_CFLAGS$])
-m4trace:configure.ac:45: -1- AC_SUBST([XEXT_LIBS])
-m4trace:configure.ac:45: -1- AC_SUBST_TRACE([XEXT_LIBS])
-m4trace:configure.ac:45: -1- m4_pattern_allow([^XEXT_LIBS$])
-m4trace:configure.ac:47: -1- AC_DEFINE_TRACE_LITERAL([HAVE___BUILTIN_POPCOUNTL])
-m4trace:configure.ac:47: -1- m4_pattern_allow([^HAVE___BUILTIN_POPCOUNTL$])
-m4trace:configure.ac:47: -1- AH_OUTPUT([HAVE___BUILTIN_POPCOUNTL], [/* Define to 1 if the system has the `__builtin_popcountl\' built-in function
-   */
-@%:@undef HAVE___BUILTIN_POPCOUNTL])
-m4trace:configure.ac:48: -1- AH_OUTPUT([HAVE_REALLOCARRAY], [/* Define to 1 if you have the \'reallocarray\' function. */
-@%:@undef HAVE_REALLOCARRAY])
-m4trace:configure.ac:48: -1- AC_LIBSOURCE([reallocarray.c])
-m4trace:configure.ac:48: -1- AC_DEFINE_TRACE_LITERAL([HAVE_REALLOCARRAY])
-m4trace:configure.ac:48: -1- m4_pattern_allow([^HAVE_REALLOCARRAY$])
-m4trace:configure.ac:48: -1- AC_SUBST([LIB@&t@OBJS], ["$LIB@&t@OBJS reallocarray.$ac_objext"])
-m4trace:configure.ac:48: -1- AC_SUBST_TRACE([LIB@&t@OBJS])
-m4trace:configure.ac:48: -1- m4_pattern_allow([^LIB@&t@OBJS$])
-m4trace:configure.ac:51: -1- AC_SUBST([LINT])
-m4trace:configure.ac:51: -1- AC_SUBST_TRACE([LINT])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT$])
-m4trace:configure.ac:51: -1- AC_SUBST([LINT_FLAGS])
-m4trace:configure.ac:51: -1- AC_SUBST_TRACE([LINT_FLAGS])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_FLAGS$])
-m4trace:configure.ac:51: -1- AC_SUBST([LINT])
-m4trace:configure.ac:51: -1- AC_SUBST_TRACE([LINT])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT$])
-m4trace:configure.ac:51: -1- AC_SUBST([LINT_FLAGS], [$lint_options])
-m4trace:configure.ac:51: -1- AC_SUBST_TRACE([LINT_FLAGS])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_FLAGS$])
-m4trace:configure.ac:51: -1- AM_CONDITIONAL([LINT], [test "x$LINT" != x])
-m4trace:configure.ac:51: -1- AC_SUBST([LINT_TRUE])
-m4trace:configure.ac:51: -1- AC_SUBST_TRACE([LINT_TRUE])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_TRUE$])
-m4trace:configure.ac:51: -1- AC_SUBST([LINT_FALSE])
-m4trace:configure.ac:51: -1- AC_SUBST_TRACE([LINT_FALSE])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_FALSE$])
-m4trace:configure.ac:51: -1- _AM_SUBST_NOTMAKE([LINT_TRUE])
-m4trace:configure.ac:51: -1- _AM_SUBST_NOTMAKE([LINT_FALSE])
-m4trace:configure.ac:52: -1- AC_SUBST([LINTLIB])
-m4trace:configure.ac:52: -1- AC_SUBST_TRACE([LINTLIB])
-m4trace:configure.ac:52: -1- m4_pattern_allow([^LINTLIB$])
-m4trace:configure.ac:52: -1- AM_CONDITIONAL([MAKE_LINT_LIB], [test x$make_lint_lib != xno])
-m4trace:configure.ac:52: -1- AC_SUBST([MAKE_LINT_LIB_TRUE])
-m4trace:configure.ac:52: -1- AC_SUBST_TRACE([MAKE_LINT_LIB_TRUE])
-m4trace:configure.ac:52: -1- m4_pattern_allow([^MAKE_LINT_LIB_TRUE$])
-m4trace:configure.ac:52: -1- AC_SUBST([MAKE_LINT_LIB_FALSE])
-m4trace:configure.ac:52: -1- AC_SUBST_TRACE([MAKE_LINT_LIB_FALSE])
-m4trace:configure.ac:52: -1- m4_pattern_allow([^MAKE_LINT_LIB_FALSE$])
-m4trace:configure.ac:52: -1- _AM_SUBST_NOTMAKE([MAKE_LINT_LIB_TRUE])
-m4trace:configure.ac:52: -1- _AM_SUBST_NOTMAKE([MAKE_LINT_LIB_FALSE])
-m4trace:configure.ac:54: -1- AC_CONFIG_FILES([Makefile
-		man/Makefile
-		src/Makefile
-		specs/Makefile
-		xext.pc])
-m4trace:configure.ac:59: -1- AC_SUBST([LIB@&t@OBJS], [$ac_libobjs])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([LIB@&t@OBJS])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^LIB@&t@OBJS$])
-m4trace:configure.ac:59: -1- AC_SUBST([LTLIBOBJS], [$ac_ltlibobjs])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([LTLIBOBJS])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^LTLIBOBJS$])
-m4trace:configure.ac:59: -1- AM_CONDITIONAL([am__EXEEXT], [test -n "$EXEEXT"])
-m4trace:configure.ac:59: -1- AC_SUBST([am__EXEEXT_TRUE])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([am__EXEEXT_TRUE])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^am__EXEEXT_TRUE$])
-m4trace:configure.ac:59: -1- AC_SUBST([am__EXEEXT_FALSE])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([am__EXEEXT_FALSE])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^am__EXEEXT_FALSE$])
-m4trace:configure.ac:59: -1- _AM_SUBST_NOTMAKE([am__EXEEXT_TRUE])
-m4trace:configure.ac:59: -1- _AM_SUBST_NOTMAKE([am__EXEEXT_FALSE])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([top_builddir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([top_build_prefix])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([srcdir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([abs_srcdir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([top_srcdir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([abs_top_srcdir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([builddir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([abs_builddir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([abs_top_builddir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([INSTALL])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([MKDIR_P])
-m4trace:configure.ac:59: -1- AC_REQUIRE_AUX_FILE([ltmain.sh])
diff --git a/experiments/wasm-gui/third_party/libXext/autom4te.cache/traces.2 b/experiments/wasm-gui/third_party/libXext/autom4te.cache/traces.2
deleted file mode 100644
index f79f144b3..000000000
--- a/experiments/wasm-gui/third_party/libXext/autom4te.cache/traces.2
+++ /dev/null
@@ -1,4561 +0,0 @@
-m4trace:/usr/share/aclocal/pkg.m4:58: -1- AC_DEFUN([PKG_PROG_PKG_CONFIG], [m4_pattern_forbid([^_?PKG_[A-Z_]+$])
-m4_pattern_allow([^PKG_CONFIG(_(PATH|LIBDIR|SYSROOT_DIR|ALLOW_SYSTEM_(CFLAGS|LIBS)))?$])
-m4_pattern_allow([^PKG_CONFIG_(DISABLE_UNINSTALLED|TOP_BUILD_DIR|DEBUG_SPEW)$])
-AC_ARG_VAR([PKG_CONFIG], [path to pkg-config utility])
-AC_ARG_VAR([PKG_CONFIG_PATH], [directories to add to pkg-config's search path])
-AC_ARG_VAR([PKG_CONFIG_LIBDIR], [path overriding pkg-config's built-in search path])
-
-if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
-	AC_PATH_TOOL([PKG_CONFIG], [pkg-config])
-fi
-if test -n "$PKG_CONFIG"; then
-	_pkg_min_version=m4_default([$1], [0.9.0])
-	AC_MSG_CHECKING([pkg-config is at least version $_pkg_min_version])
-	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
-		AC_MSG_RESULT([yes])
-	else
-		AC_MSG_RESULT([no])
-		PKG_CONFIG=""
-	fi
-fi[]dnl
-])
-m4trace:/usr/share/aclocal/pkg.m4:92: -1- AC_DEFUN([PKG_CHECK_EXISTS], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-if test -n "$PKG_CONFIG" && \
-    AC_RUN_LOG([$PKG_CONFIG --exists --print-errors "$1"]); then
-  m4_default([$2], [:])
-m4_ifvaln([$3], [else
-  $3])dnl
-fi])
-m4trace:/usr/share/aclocal/pkg.m4:121: -1- AC_DEFUN([_PKG_SHORT_ERRORS_SUPPORTED], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
-        _pkg_short_errors_supported=yes
-else
-        _pkg_short_errors_supported=no
-fi[]dnl
-])
-m4trace:/usr/share/aclocal/pkg.m4:139: -1- AC_DEFUN([PKG_CHECK_MODULES], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-AC_ARG_VAR([$1][_CFLAGS], [C compiler flags for $1, overriding pkg-config])dnl
-AC_ARG_VAR([$1][_LIBS], [linker flags for $1, overriding pkg-config])dnl
-
-pkg_failed=no
-AC_MSG_CHECKING([for $2])
-
-_PKG_CONFIG([$1][_CFLAGS], [cflags], [$2])
-_PKG_CONFIG([$1][_LIBS], [libs], [$2])
-
-m4_define([_PKG_TEXT], [Alternatively, you may set the environment variables $1[]_CFLAGS
-and $1[]_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details.])
-
-if test $pkg_failed = yes; then
-        AC_MSG_RESULT([no])
-        _PKG_SHORT_ERRORS_SUPPORTED
-        if test $_pkg_short_errors_supported = yes; then
-                $1[]_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "$2" 2>&1`
-        else
-                $1[]_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "$2" 2>&1`
-        fi
-        # Put the nasty error message in config.log where it belongs
-        echo "$$1[]_PKG_ERRORS" >&AS_MESSAGE_LOG_FD
-
-        m4_default([$4], [AC_MSG_ERROR(
-[Package requirements ($2) were not met:
-
-$$1_PKG_ERRORS
-
-Consider adjusting the PKG_CONFIG_PATH environment variable if you
-installed software in a non-standard prefix.
-
-_PKG_TEXT])[]dnl
-        ])
-elif test $pkg_failed = untried; then
-        AC_MSG_RESULT([no])
-        m4_default([$4], [AC_MSG_FAILURE(
-[The pkg-config script could not be found or is too old.  Make sure it
-is in your PATH or set the PKG_CONFIG environment variable to the full
-path to pkg-config.
-
-_PKG_TEXT
-
-To get pkg-config, see <http://pkg-config.freedesktop.org/>.])[]dnl
-        ])
-else
-        $1[]_CFLAGS=$pkg_cv_[]$1[]_CFLAGS
-        $1[]_LIBS=$pkg_cv_[]$1[]_LIBS
-        AC_MSG_RESULT([yes])
-        $3
-fi[]dnl
-])
-m4trace:/usr/share/aclocal/pkg.m4:208: -1- AC_DEFUN([PKG_CHECK_MODULES_STATIC], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-_save_PKG_CONFIG=$PKG_CONFIG
-PKG_CONFIG="$PKG_CONFIG --static"
-PKG_CHECK_MODULES($@)
-PKG_CONFIG=$_save_PKG_CONFIG[]dnl
-])
-m4trace:/usr/share/aclocal/pkg.m4:226: -1- AC_DEFUN([PKG_INSTALLDIR], [m4_pushdef([pkg_default], [m4_default([$1], ['${libdir}/pkgconfig'])])
-m4_pushdef([pkg_description],
-    [pkg-config installation directory @<:@]pkg_default[@:>@])
-AC_ARG_WITH([pkgconfigdir],
-    [AS_HELP_STRING([--with-pkgconfigdir], pkg_description)],,
-    [with_pkgconfigdir=]pkg_default)
-AC_SUBST([pkgconfigdir], [$with_pkgconfigdir])
-m4_popdef([pkg_default])
-m4_popdef([pkg_description])
-])
-m4trace:/usr/share/aclocal/pkg.m4:248: -1- AC_DEFUN([PKG_NOARCH_INSTALLDIR], [m4_pushdef([pkg_default], [m4_default([$1], ['${datadir}/pkgconfig'])])
-m4_pushdef([pkg_description],
-    [pkg-config arch-independent installation directory @<:@]pkg_default[@:>@])
-AC_ARG_WITH([noarch-pkgconfigdir],
-    [AS_HELP_STRING([--with-noarch-pkgconfigdir], pkg_description)],,
-    [with_noarch_pkgconfigdir=]pkg_default)
-AC_SUBST([noarch_pkgconfigdir], [$with_noarch_pkgconfigdir])
-m4_popdef([pkg_default])
-m4_popdef([pkg_description])
-])
-m4trace:/usr/share/aclocal/pkg.m4:267: -1- AC_DEFUN([PKG_CHECK_VAR], [AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-AC_ARG_VAR([$1], [value of $3 for $2, overriding pkg-config])dnl
-
-_PKG_CONFIG([$1], [variable="][$3]["], [$2])
-AS_VAR_COPY([$1], [pkg_cv_][$1])
-
-AS_VAR_IF([$1], [""], [$5], [$4])dnl
-])
-m4trace:/usr/share/aclocal/pkg.m4:285: -1- AC_DEFUN([PKG_WITH_MODULES], [
-m4_pushdef([with_arg], m4_tolower([$1]))
-
-m4_pushdef([description],
-           [m4_default([$5], [build with ]with_arg[ support])])
-
-m4_pushdef([def_arg], [m4_default([$6], [auto])])
-m4_pushdef([def_action_if_found], [AS_TR_SH([with_]with_arg)=yes])
-m4_pushdef([def_action_if_not_found], [AS_TR_SH([with_]with_arg)=no])
-
-m4_case(def_arg,
-            [yes],[m4_pushdef([with_without], [--without-]with_arg)],
-            [m4_pushdef([with_without],[--with-]with_arg)])
-
-AC_ARG_WITH(with_arg,
-     AS_HELP_STRING(with_without, description[ @<:@default=]def_arg[@:>@]),,
-    [AS_TR_SH([with_]with_arg)=def_arg])
-
-AS_CASE([$AS_TR_SH([with_]with_arg)],
-            [yes],[PKG_CHECK_MODULES([$1],[$2],$3,$4)],
-            [auto],[PKG_CHECK_MODULES([$1],[$2],
-                                        [m4_n([def_action_if_found]) $3],
-                                        [m4_n([def_action_if_not_found]) $4])])
-
-m4_popdef([with_arg])
-m4_popdef([description])
-m4_popdef([def_arg])
-
-])
-m4trace:/usr/share/aclocal/pkg.m4:322: -1- AC_DEFUN([PKG_HAVE_WITH_MODULES], [
-PKG_WITH_MODULES([$1],[$2],,,[$3],[$4])
-
-AM_CONDITIONAL([HAVE_][$1],
-               [test "$AS_TR_SH([with_]m4_tolower([$1]))" = "yes"])
-])
-m4trace:/usr/share/aclocal/pkg.m4:337: -1- AC_DEFUN([PKG_HAVE_DEFINE_WITH_MODULES], [
-PKG_HAVE_WITH_MODULES([$1],[$2],[$3],[$4])
-
-AS_IF([test "$AS_TR_SH([with_]m4_tolower([$1]))" = "yes"],
-        [AC_DEFINE([HAVE_][$1], 1, [Enable ]m4_tolower([$1])[ support])])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltargz.m4:13: -1- AC_DEFUN([LT_FUNC_ARGZ], [
-dnl Required for use of '$SED' in Cygwin configuration.
-AC_REQUIRE([AC_PROG_SED])dnl
-AC_CHECK_HEADERS([argz.h], [], [], [AC_INCLUDES_DEFAULT])
-
-AC_CHECK_TYPES([error_t],
-  [],
-  [AC_DEFINE([error_t], [int],
-   [Define to a type to use for 'error_t' if it is not otherwise available.])
-   AC_DEFINE([__error_t_defined], [1], [Define so that glibc/gnulib argp.h
-    does not typedef error_t.])],
-  [#if defined(HAVE_ARGZ_H)
-#  include <argz.h>
-#endif])
-
-LT_ARGZ_H=
-AC_CHECK_FUNCS([argz_add argz_append argz_count argz_create_sep argz_insert \
-	argz_next argz_stringify], [], [LT_ARGZ_H=lt__argz.h; AC_LIBOBJ([lt__argz])])
-
-dnl if have system argz functions, allow forced use of
-dnl libltdl-supplied implementation (and default to do so
-dnl on "known bad" systems). Could use a runtime check, but
-dnl (a) detecting malloc issues is notoriously unreliable
-dnl (b) only known system that declares argz functions,
-dnl     provides them, yet they are broken, is cygwin
-dnl     releases prior to 16-Mar-2007 (1.5.24 and earlier)
-dnl So, it's more straightforward simply to special case
-dnl this for known bad systems.
-AS_IF([test -z "$LT_ARGZ_H"],
-    [AC_CACHE_CHECK(
-        [if argz actually works],
-        [lt_cv_sys_argz_works],
-        [[case $host_os in #(
-	 *cygwin*)
-	   lt_cv_sys_argz_works=no
-	   if test no != "$cross_compiling"; then
-	     lt_cv_sys_argz_works="guessing no"
-	   else
-	     lt_sed_extract_leading_digits='s/^\([0-9\.]*\).*/\1/'
-	     save_IFS=$IFS
-	     IFS=-.
-	     set x `uname -r | $SED -e "$lt_sed_extract_leading_digits"`
-	     IFS=$save_IFS
-	     lt_os_major=${2-0}
-	     lt_os_minor=${3-0}
-	     lt_os_micro=${4-0}
-	     if test 1 -lt "$lt_os_major" \
-		|| { test 1 -eq "$lt_os_major" \
-		  && { test 5 -lt "$lt_os_minor" \
-		    || { test 5 -eq "$lt_os_minor" \
-		      && test 24 -lt "$lt_os_micro"; }; }; }; then
-	       lt_cv_sys_argz_works=yes
-	     fi
-	   fi
-	   ;; #(
-	 *) lt_cv_sys_argz_works=yes ;;
-	 esac]])
-     AS_IF([test yes = "$lt_cv_sys_argz_works"],
-        [AC_DEFINE([HAVE_WORKING_ARGZ], 1,
-                   [This value is set to 1 to indicate that the system argz facility works])],
-        [LT_ARGZ_H=lt__argz.h
-        AC_LIBOBJ([lt__argz])])])
-
-AC_SUBST([LT_ARGZ_H])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:17: -1- AC_DEFUN([LT_CONFIG_LTDL_DIR], [AC_BEFORE([$0], [LTDL_INIT])
-_$0($*)
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:69: -1- AC_DEFUN([LTDL_CONVENIENCE], [AC_BEFORE([$0], [LTDL_INIT])dnl
-dnl Although the argument is deprecated and no longer documented,
-dnl LTDL_CONVENIENCE used to take a DIRECTORY orgument, if we have one
-dnl here make sure it is the same as any other declaration of libltdl's
-dnl location!  This also ensures lt_ltdl_dir is set when configure.ac is
-dnl not yet using an explicit LT_CONFIG_LTDL_DIR.
-m4_ifval([$1], [_LT_CONFIG_LTDL_DIR([$1])])dnl
-_$0()
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:82: -1- AU_DEFUN([AC_LIBLTDL_CONVENIENCE], [_LT_CONFIG_LTDL_DIR([m4_default([$1], [libltdl])])
-_LTDL_CONVENIENCE])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:82: -1- AC_DEFUN([AC_LIBLTDL_CONVENIENCE], [m4_warn([obsolete], [The macro 'AC_LIBLTDL_CONVENIENCE' is obsolete.
-You should run autoupdate.])dnl
-_LT_CONFIG_LTDL_DIR([m4_default([$1], [libltdl])])
-_LTDL_CONVENIENCE])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:125: -1- AC_DEFUN([LTDL_INSTALLABLE], [AC_BEFORE([$0], [LTDL_INIT])dnl
-dnl Although the argument is deprecated and no longer documented,
-dnl LTDL_INSTALLABLE used to take a DIRECTORY orgument, if we have one
-dnl here make sure it is the same as any other declaration of libltdl's
-dnl location!  This also ensures lt_ltdl_dir is set when configure.ac is
-dnl not yet using an explicit LT_CONFIG_LTDL_DIR.
-m4_ifval([$1], [_LT_CONFIG_LTDL_DIR([$1])])dnl
-_$0()
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:138: -1- AU_DEFUN([AC_LIBLTDL_INSTALLABLE], [_LT_CONFIG_LTDL_DIR([m4_default([$1], [libltdl])])
-_LTDL_INSTALLABLE])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:138: -1- AC_DEFUN([AC_LIBLTDL_INSTALLABLE], [m4_warn([obsolete], [The macro 'AC_LIBLTDL_INSTALLABLE' is obsolete.
-You should run autoupdate.])dnl
-_LT_CONFIG_LTDL_DIR([m4_default([$1], [libltdl])])
-_LTDL_INSTALLABLE])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:214: -1- AC_DEFUN([_LT_LIBOBJ], [
-  m4_pattern_allow([^_LT_LIBOBJS$])
-  _LT_LIBOBJS="$_LT_LIBOBJS $1.$ac_objext"
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:227: -1- AC_DEFUN([LTDL_INIT], [dnl Parse OPTIONS
-_LT_SET_OPTIONS([$0], [$1])
-
-dnl We need to keep our own list of libobjs separate from our parent project,
-dnl and the easiest way to do that is redefine the AC_LIBOBJs macro while
-dnl we look for our own LIBOBJs.
-m4_pushdef([AC_LIBOBJ], m4_defn([_LT_LIBOBJ]))
-m4_pushdef([AC_LIBSOURCES])
-
-dnl If not otherwise defined, default to the 1.5.x compatible subproject mode:
-m4_if(_LTDL_MODE, [],
-        [m4_define([_LTDL_MODE], m4_default([$2], [subproject]))
-        m4_if([-1], [m4_bregexp(_LTDL_MODE, [\(subproject\|\(non\)?recursive\)])],
-                [m4_fatal([unknown libltdl mode: ]_LTDL_MODE)])])
-
-AC_ARG_WITH([included_ltdl],
-    [AS_HELP_STRING([--with-included-ltdl],
-                    [use the GNU ltdl sources included here])])
-
-if test yes != "$with_included_ltdl"; then
-  # We are not being forced to use the included libltdl sources, so
-  # decide whether there is a useful installed version we can use.
-  AC_CHECK_HEADER([ltdl.h],
-      [AC_CHECK_DECL([lt_dlinterface_register],
-	   [AC_CHECK_LIB([ltdl], [lt_dladvise_preload],
-	       [with_included_ltdl=no],
-	       [with_included_ltdl=yes])],
-	   [with_included_ltdl=yes],
-	   [AC_INCLUDES_DEFAULT
-	    #include <ltdl.h>])],
-      [with_included_ltdl=yes],
-      [AC_INCLUDES_DEFAULT]
-  )
-fi
-
-dnl If neither LT_CONFIG_LTDL_DIR, LTDL_CONVENIENCE nor LTDL_INSTALLABLE
-dnl was called yet, then for old times' sake, we assume libltdl is in an
-dnl eponymous directory:
-AC_PROVIDE_IFELSE([LT_CONFIG_LTDL_DIR], [], [_LT_CONFIG_LTDL_DIR([libltdl])])
-
-AC_ARG_WITH([ltdl_include],
-    [AS_HELP_STRING([--with-ltdl-include=DIR],
-                    [use the ltdl headers installed in DIR])])
-
-if test -n "$with_ltdl_include"; then
-  if test -f "$with_ltdl_include/ltdl.h"; then :
-  else
-    AC_MSG_ERROR([invalid ltdl include directory: '$with_ltdl_include'])
-  fi
-else
-  with_ltdl_include=no
-fi
-
-AC_ARG_WITH([ltdl_lib],
-    [AS_HELP_STRING([--with-ltdl-lib=DIR],
-                    [use the libltdl.la installed in DIR])])
-
-if test -n "$with_ltdl_lib"; then
-  if test -f "$with_ltdl_lib/libltdl.la"; then :
-  else
-    AC_MSG_ERROR([invalid ltdl library directory: '$with_ltdl_lib'])
-  fi
-else
-  with_ltdl_lib=no
-fi
-
-case ,$with_included_ltdl,$with_ltdl_include,$with_ltdl_lib, in
-  ,yes,no,no,)
-	m4_case(m4_default(_LTDL_TYPE, [convenience]),
-	    [convenience], [_LTDL_CONVENIENCE],
-	    [installable], [_LTDL_INSTALLABLE],
-	  [m4_fatal([unknown libltdl build type: ]_LTDL_TYPE)])
-	;;
-  ,no,no,no,)
-	# If the included ltdl is not to be used, then use the
-	# preinstalled libltdl we found.
-	AC_DEFINE([HAVE_LTDL], [1],
-	  [Define this if a modern libltdl is already installed])
-	LIBLTDL=-lltdl
-	LTDLDEPS=
-	LTDLINCL=
-	;;
-  ,no*,no,*)
-	AC_MSG_ERROR(['--with-ltdl-include' and '--with-ltdl-lib' options must be used together])
-	;;
-  *)	with_included_ltdl=no
-	LIBLTDL="-L$with_ltdl_lib -lltdl"
-	LTDLDEPS=
-	LTDLINCL=-I$with_ltdl_include
-	;;
-esac
-INCLTDL=$LTDLINCL
-
-# Report our decision...
-AC_MSG_CHECKING([where to find libltdl headers])
-AC_MSG_RESULT([$LTDLINCL])
-AC_MSG_CHECKING([where to find libltdl library])
-AC_MSG_RESULT([$LIBLTDL])
-
-_LTDL_SETUP
-
-dnl restore autoconf definition.
-m4_popdef([AC_LIBOBJ])
-m4_popdef([AC_LIBSOURCES])
-
-AC_CONFIG_COMMANDS_PRE([
-    _ltdl_libobjs=
-    _ltdl_ltlibobjs=
-    if test -n "$_LT_LIBOBJS"; then
-      # Remove the extension.
-      _lt_sed_drop_objext='s/\.o$//;s/\.obj$//'
-      for i in `for i in $_LT_LIBOBJS; do echo "$i"; done | $SED "$_lt_sed_drop_objext" | sort -u`; do
-        _ltdl_libobjs="$_ltdl_libobjs $lt_libobj_prefix$i.$ac_objext"
-        _ltdl_ltlibobjs="$_ltdl_ltlibobjs $lt_libobj_prefix$i.lo"
-      done
-    fi
-    AC_SUBST([ltdl_LIBOBJS], [$_ltdl_libobjs])
-    AC_SUBST([ltdl_LTLIBOBJS], [$_ltdl_ltlibobjs])
-])
-
-# Only expand once:
-m4_define([LTDL_INIT])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:353: -1- AU_DEFUN([AC_LIB_LTDL], [LTDL_INIT($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:353: -1- AC_DEFUN([AC_LIB_LTDL], [m4_warn([obsolete], [The macro 'AC_LIB_LTDL' is obsolete.
-You should run autoupdate.])dnl
-LTDL_INIT($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:354: -1- AU_DEFUN([AC_WITH_LTDL], [LTDL_INIT($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:354: -1- AC_DEFUN([AC_WITH_LTDL], [m4_warn([obsolete], [The macro 'AC_WITH_LTDL' is obsolete.
-You should run autoupdate.])dnl
-LTDL_INIT($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:355: -1- AU_DEFUN([LT_WITH_LTDL], [LTDL_INIT($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:355: -1- AC_DEFUN([LT_WITH_LTDL], [m4_warn([obsolete], [The macro 'LT_WITH_LTDL' is obsolete.
-You should run autoupdate.])dnl
-LTDL_INIT($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:368: -1- AC_DEFUN([_LTDL_SETUP], [AC_REQUIRE([AC_PROG_CC])dnl
-AC_REQUIRE([LT_SYS_MODULE_EXT])dnl
-AC_REQUIRE([LT_SYS_MODULE_PATH])dnl
-AC_REQUIRE([LT_SYS_DLSEARCH_PATH])dnl
-AC_REQUIRE([LT_LIB_DLLOAD])dnl
-AC_REQUIRE([LT_SYS_SYMBOL_USCORE])dnl
-AC_REQUIRE([LT_FUNC_DLSYM_USCORE])dnl
-AC_REQUIRE([LT_SYS_DLOPEN_DEPLIBS])dnl
-AC_REQUIRE([LT_FUNC_ARGZ])dnl
-
-m4_require([_LT_CHECK_OBJDIR])dnl
-m4_require([_LT_HEADER_DLFCN])dnl
-m4_require([_LT_CHECK_DLPREOPEN])dnl
-m4_require([_LT_DECL_SED])dnl
-
-dnl Don't require this, or it will be expanded earlier than the code
-dnl that sets the variables it relies on:
-_LT_ENABLE_INSTALL
-
-dnl _LTDL_MODE specific code must be called at least once:
-_LTDL_MODE_DISPATCH
-
-# In order that ltdl.c can compile, find out the first AC_CONFIG_HEADERS
-# the user used.  This is so that ltdl.h can pick up the parent projects
-# config.h file, The first file in AC_CONFIG_HEADERS must contain the
-# definitions required by ltdl.c.
-# FIXME: Remove use of undocumented AC_LIST_HEADERS (2.59 compatibility).
-AC_CONFIG_COMMANDS_PRE([dnl
-m4_pattern_allow([^LT_CONFIG_H$])dnl
-m4_ifset([AH_HEADER],
-    [LT_CONFIG_H=AH_HEADER],
-    [m4_ifset([AC_LIST_HEADERS],
-	    [LT_CONFIG_H=`echo "AC_LIST_HEADERS" | $SED 's|^[[      ]]*||;s|[[ :]].*$||'`],
-	[])])])
-AC_SUBST([LT_CONFIG_H])
-
-AC_CHECK_HEADERS([unistd.h dl.h sys/dl.h dld.h mach-o/dyld.h dirent.h],
-	[], [], [AC_INCLUDES_DEFAULT])
-
-AC_CHECK_FUNCS([closedir opendir readdir], [], [AC_LIBOBJ([lt__dirent])])
-AC_CHECK_FUNCS([strlcat strlcpy], [], [AC_LIBOBJ([lt__strl])])
-
-m4_pattern_allow([LT_LIBEXT])dnl
-AC_DEFINE_UNQUOTED([LT_LIBEXT],["$libext"],[The archive extension])
-
-name=
-eval "lt_libprefix=\"$libname_spec\""
-m4_pattern_allow([LT_LIBPREFIX])dnl
-AC_DEFINE_UNQUOTED([LT_LIBPREFIX],["$lt_libprefix"],[The archive prefix])
-
-name=ltdl
-eval "LTDLOPEN=\"$libname_spec\""
-AC_SUBST([LTDLOPEN])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:445: -1- AC_DEFUN([LT_SYS_DLOPEN_DEPLIBS], [AC_REQUIRE([AC_CANONICAL_HOST])dnl
-AC_CACHE_CHECK([whether deplibs are loaded by dlopen],
-  [lt_cv_sys_dlopen_deplibs],
-  [# PORTME does your system automatically load deplibs for dlopen?
-  # or its logical equivalent (e.g. shl_load for HP-UX < 11)
-  # For now, we just catch OSes we know something about -- in the
-  # future, we'll try test this programmatically.
-  lt_cv_sys_dlopen_deplibs=unknown
-  case $host_os in
-  aix3*|aix4.1.*|aix4.2.*)
-    # Unknown whether this is true for these versions of AIX, but
-    # we want this 'case' here to explicitly catch those versions.
-    lt_cv_sys_dlopen_deplibs=unknown
-    ;;
-  aix[[4-9]]*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  amigaos*)
-    case $host_cpu in
-    powerpc)
-      lt_cv_sys_dlopen_deplibs=no
-      ;;
-    esac
-    ;;
-  darwin*)
-    # Assuming the user has installed a libdl from somewhere, this is true
-    # If you are looking for one http://www.opendarwin.org/projects/dlcompat
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  freebsd* | dragonfly* | midnightbsd*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  gnu* | linux* | k*bsd*-gnu | kopensolaris*-gnu)
-    # GNU and its variants, using gnu ld.so (Glibc)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  hpux10*|hpux11*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  interix*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  irix[[12345]]*|irix6.[[01]]*)
-    # Catch all versions of IRIX before 6.2, and indicate that we don't
-    # know how it worked for any of those versions.
-    lt_cv_sys_dlopen_deplibs=unknown
-    ;;
-  irix*)
-    # The case above catches anything before 6.2, and it's known that
-    # at 6.2 and later dlopen does load deplibs.
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  *-mlibc)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  netbsd* | netbsdelf*-gnu)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  openbsd*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  osf[[1234]]*)
-    # dlopen did load deplibs (at least at 4.x), but until the 5.x series,
-    # it did *not* use an RPATH in a shared library to find objects the
-    # library depends on, so we explicitly say 'no'.
-    lt_cv_sys_dlopen_deplibs=no
-    ;;
-  osf5.0|osf5.0a|osf5.1)
-    # dlopen *does* load deplibs and with the right loader patch applied
-    # it even uses RPATH in a shared library to search for shared objects
-    # that the library depends on, but there's no easy way to know if that
-    # patch is installed.  Since this is the case, all we can really
-    # say is unknown -- it depends on the patch being installed.  If
-    # it is, this changes to 'yes'.  Without it, it would be 'no'.
-    lt_cv_sys_dlopen_deplibs=unknown
-    ;;
-  osf*)
-    # the two cases above should catch all versions of osf <= 5.1.  Read
-    # the comments above for what we know about them.
-    # At > 5.1, deplibs are loaded *and* any RPATH in a shared library
-    # is used to find them so we can finally say 'yes'.
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  qnx*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  solaris*)
-    lt_cv_sys_dlopen_deplibs=yes
-    ;;
-  sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-    libltdl_cv_sys_dlopen_deplibs=yes
-    ;;
-  esac
-  ])
-if test yes != "$lt_cv_sys_dlopen_deplibs"; then
- AC_DEFINE([LTDL_DLOPEN_DEPLIBS], [1],
-    [Define if the OS needs help to load dependent libraries for dlopen().])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:547: -1- AU_DEFUN([AC_LTDL_SYS_DLOPEN_DEPLIBS], [m4_if($#, 0, [LT_SYS_DLOPEN_DEPLIBS], [LT_SYS_DLOPEN_DEPLIBS($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:547: -1- AC_DEFUN([AC_LTDL_SYS_DLOPEN_DEPLIBS], [m4_warn([obsolete], [The macro 'AC_LTDL_SYS_DLOPEN_DEPLIBS' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_SYS_DLOPEN_DEPLIBS], [LT_SYS_DLOPEN_DEPLIBS($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:554: -1- AC_DEFUN([LT_SYS_MODULE_EXT], [m4_require([_LT_SYS_DYNAMIC_LINKER])dnl
-AC_CACHE_CHECK([what extension is used for runtime loadable modules],
-  [libltdl_cv_shlibext],
-[
-module=yes
-eval libltdl_cv_shlibext=$shrext_cmds
-module=no
-eval libltdl_cv_shrext=$shrext_cmds
-  ])
-if test -n "$libltdl_cv_shlibext"; then
-  m4_pattern_allow([LT_MODULE_EXT])dnl
-  AC_DEFINE_UNQUOTED([LT_MODULE_EXT], ["$libltdl_cv_shlibext"],
-    [Define to the extension used for runtime loadable modules, say, ".so".])
-fi
-if test "$libltdl_cv_shrext" != "$libltdl_cv_shlibext"; then
-  m4_pattern_allow([LT_SHARED_EXT])dnl
-  AC_DEFINE_UNQUOTED([LT_SHARED_EXT], ["$libltdl_cv_shrext"],
-    [Define to the shared library suffix, say, ".dylib".])
-fi
-if test -n "$shared_archive_member_spec"; then
-  m4_pattern_allow([LT_SHARED_LIB_MEMBER])dnl
-  AC_DEFINE_UNQUOTED([LT_SHARED_LIB_MEMBER], ["($shared_archive_member_spec.o)"],
-    [Define to the shared archive member specification, say "(shr.o)".])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:582: -1- AU_DEFUN([AC_LTDL_SHLIBEXT], [m4_if($#, 0, [LT_SYS_MODULE_EXT], [LT_SYS_MODULE_EXT($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:582: -1- AC_DEFUN([AC_LTDL_SHLIBEXT], [m4_warn([obsolete], [The macro 'AC_LTDL_SHLIBEXT' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_SYS_MODULE_EXT], [LT_SYS_MODULE_EXT($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:589: -1- AC_DEFUN([LT_SYS_MODULE_PATH], [m4_require([_LT_SYS_DYNAMIC_LINKER])dnl
-AC_CACHE_CHECK([what variable specifies run-time module search path],
-  [lt_cv_module_path_var], [lt_cv_module_path_var=$shlibpath_var])
-if test -n "$lt_cv_module_path_var"; then
-  m4_pattern_allow([LT_MODULE_PATH_VAR])dnl
-  AC_DEFINE_UNQUOTED([LT_MODULE_PATH_VAR], ["$lt_cv_module_path_var"],
-    [Define to the name of the environment variable that determines the run-time module search path.])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:601: -1- AU_DEFUN([AC_LTDL_SHLIBPATH], [m4_if($#, 0, [LT_SYS_MODULE_PATH], [LT_SYS_MODULE_PATH($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:601: -1- AC_DEFUN([AC_LTDL_SHLIBPATH], [m4_warn([obsolete], [The macro 'AC_LTDL_SHLIBPATH' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_SYS_MODULE_PATH], [LT_SYS_MODULE_PATH($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:608: -1- AC_DEFUN([LT_SYS_DLSEARCH_PATH], [m4_require([_LT_SYS_DYNAMIC_LINKER])dnl
-AC_CACHE_CHECK([for the default library search path],
-  [lt_cv_sys_dlsearch_path],
-  [lt_cv_sys_dlsearch_path=$sys_lib_dlsearch_path_spec])
-if test -n "$lt_cv_sys_dlsearch_path"; then
-  sys_dlsearch_path=
-  for dir in $lt_cv_sys_dlsearch_path; do
-    if test -z "$sys_dlsearch_path"; then
-      sys_dlsearch_path=$dir
-    else
-      sys_dlsearch_path=$sys_dlsearch_path$PATH_SEPARATOR$dir
-    fi
-  done
-  m4_pattern_allow([LT_DLSEARCH_PATH])dnl
-  AC_DEFINE_UNQUOTED([LT_DLSEARCH_PATH], ["$sys_dlsearch_path"],
-    [Define to the system default library search path.])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:629: -1- AU_DEFUN([AC_LTDL_SYSSEARCHPATH], [m4_if($#, 0, [LT_SYS_DLSEARCH_PATH], [LT_SYS_DLSEARCH_PATH($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:629: -1- AC_DEFUN([AC_LTDL_SYSSEARCHPATH], [m4_warn([obsolete], [The macro 'AC_LTDL_SYSSEARCHPATH' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_SYS_DLSEARCH_PATH], [LT_SYS_DLSEARCH_PATH($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:655: -1- AC_DEFUN([LT_LIB_DLLOAD], [m4_pattern_allow([^LT_DLLOADERS$])
-LT_DLLOADERS=
-AC_SUBST([LT_DLLOADERS])
-
-AC_LANG_PUSH([C])
-lt_dlload_save_LIBS=$LIBS
-
-LIBADD_DLOPEN=
-AC_SEARCH_LIBS([dlopen], [dl],
-	[AC_DEFINE([HAVE_LIBDL], [1],
-		   [Define if you have the libdl library or equivalent.])
-	if test "$ac_cv_search_dlopen" != "none required"; then
-	  LIBADD_DLOPEN=-ldl
-	fi
-	libltdl_cv_lib_dl_dlopen=yes
-	LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}dlopen.la"],
-    [AC_LINK_IFELSE([AC_LANG_PROGRAM([[#if HAVE_DLFCN_H
-#  include <dlfcn.h>
-#endif
-    ]], [[dlopen(0, 0);]])],
-	    [AC_DEFINE([HAVE_LIBDL], [1],
-		       [Define if you have the libdl library or equivalent.])
-	    libltdl_cv_func_dlopen=yes
-	    LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}dlopen.la"],
-	[AC_CHECK_LIB([svld], [dlopen],
-		[AC_DEFINE([HAVE_LIBDL], [1],
-			 [Define if you have the libdl library or equivalent.])
-	        LIBADD_DLOPEN=-lsvld libltdl_cv_func_dlopen=yes
-		LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}dlopen.la"])])])
-if test yes = "$libltdl_cv_func_dlopen" || test yes = "$libltdl_cv_lib_dl_dlopen"
-then
-  lt_save_LIBS=$LIBS
-  LIBS="$LIBS $LIBADD_DLOPEN"
-  AC_CHECK_FUNCS([dlerror])
-  LIBS=$lt_save_LIBS
-fi
-AC_SUBST([LIBADD_DLOPEN])
-
-LIBADD_SHL_LOAD=
-AC_CHECK_FUNC([shl_load],
-	[AC_DEFINE([HAVE_SHL_LOAD], [1],
-		   [Define if you have the shl_load function.])
-	LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}shl_load.la"],
-    [AC_CHECK_LIB([dld], [shl_load],
-	    [AC_DEFINE([HAVE_SHL_LOAD], [1],
-		       [Define if you have the shl_load function.])
-	    LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}shl_load.la"
-	    LIBADD_SHL_LOAD=-ldld])])
-AC_SUBST([LIBADD_SHL_LOAD])
-
-case $host_os in
-darwin[[1567]].*)
-# We only want this for pre-Mac OS X 10.4.
-  AC_CHECK_FUNC([_dyld_func_lookup],
-	[AC_DEFINE([HAVE_DYLD], [1],
-		   [Define if you have the _dyld_func_lookup function.])
-	LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}dyld.la"])
-  ;;
-beos*)
-  LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}load_add_on.la"
-  ;;
-cygwin* | mingw* | windows* | pw32*)
-  AC_CHECK_DECLS([cygwin_conv_path], [], [], [[#include <sys/cygwin.h>]])
-  LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}loadlibrary.la"
-  ;;
-esac
-
-AC_CHECK_LIB([dld], [dld_link],
-	[AC_DEFINE([HAVE_DLD], [1],
-		   [Define if you have the GNU dld library.])
-		LT_DLLOADERS="$LT_DLLOADERS ${lt_dlopen_dir+$lt_dlopen_dir/}dld_link.la"])
-AC_SUBST([LIBADD_DLD_LINK])
-
-m4_pattern_allow([^LT_DLPREOPEN$])
-LT_DLPREOPEN=
-if test -n "$LT_DLLOADERS"
-then
-  for lt_loader in $LT_DLLOADERS; do
-    LT_DLPREOPEN="$LT_DLPREOPEN-dlpreopen $lt_loader "
-  done
-  AC_DEFINE([HAVE_LIBDLLOADER], [1],
-            [Define if libdlloader will be built on this platform])
-fi
-AC_SUBST([LT_DLPREOPEN])
-
-dnl This isn't used anymore, but set it for backwards compatibility
-LIBADD_DL="$LIBADD_DLOPEN $LIBADD_SHL_LOAD"
-AC_SUBST([LIBADD_DL])
-
-LIBS=$lt_dlload_save_LIBS
-AC_LANG_POP
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:750: -1- AU_DEFUN([AC_LTDL_DLLIB], [m4_if($#, 0, [LT_LIB_DLLOAD], [LT_LIB_DLLOAD($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:750: -1- AC_DEFUN([AC_LTDL_DLLIB], [m4_warn([obsolete], [The macro 'AC_LTDL_DLLIB' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_LIB_DLLOAD], [LT_LIB_DLLOAD($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:758: -1- AC_DEFUN([LT_SYS_SYMBOL_USCORE], [m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl
-AC_CACHE_CHECK([for _ prefix in compiled symbols],
-  [lt_cv_sys_symbol_underscore],
-  [lt_cv_sys_symbol_underscore=no
-  cat > conftest.$ac_ext <<_LT_EOF
-void nm_test_func(){}
-int main(void){nm_test_func;return 0;}
-_LT_EOF
-  if AC_TRY_EVAL(ac_compile); then
-    # Now try to grab the symbols.
-    ac_nlist=conftest.nm
-    if AC_TRY_EVAL(NM conftest.$ac_objext \| $lt_cv_sys_global_symbol_pipe \> $ac_nlist) && test -s "$ac_nlist"; then
-      # See whether the symbols have a leading underscore.
-      if grep '^. _nm_test_func' "$ac_nlist" >/dev/null; then
-        lt_cv_sys_symbol_underscore=yes
-      else
-        if grep '^. nm_test_func ' "$ac_nlist" >/dev/null; then
-	  :
-        else
-	  echo "configure: cannot find nm_test_func in $ac_nlist" >&AS_MESSAGE_LOG_FD
-        fi
-      fi
-    else
-      echo "configure: cannot run $lt_cv_sys_global_symbol_pipe" >&AS_MESSAGE_LOG_FD
-    fi
-  else
-    echo "configure: failed program was:" >&AS_MESSAGE_LOG_FD
-    cat conftest.c >&AS_MESSAGE_LOG_FD
-  fi
-  rm -rf conftest*
-  ])
-  sys_symbol_underscore=$lt_cv_sys_symbol_underscore
-  AC_SUBST([sys_symbol_underscore])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:795: -1- AU_DEFUN([AC_LTDL_SYMBOL_USCORE], [m4_if($#, 0, [LT_SYS_SYMBOL_USCORE], [LT_SYS_SYMBOL_USCORE($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:795: -1- AC_DEFUN([AC_LTDL_SYMBOL_USCORE], [m4_warn([obsolete], [The macro 'AC_LTDL_SYMBOL_USCORE' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_SYS_SYMBOL_USCORE], [LT_SYS_SYMBOL_USCORE($@)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:802: -1- AC_DEFUN([LT_FUNC_DLSYM_USCORE], [AC_REQUIRE([_LT_COMPILER_PIC])dnl	for lt_prog_compiler_wl
-AC_REQUIRE([LT_SYS_SYMBOL_USCORE])dnl	for lt_cv_sys_symbol_underscore
-AC_REQUIRE([LT_SYS_MODULE_EXT])dnl	for libltdl_cv_shlibext
-if test yes = "$lt_cv_sys_symbol_underscore"; then
-  if test yes = "$libltdl_cv_func_dlopen" || test yes = "$libltdl_cv_lib_dl_dlopen"; then
-    AC_CACHE_CHECK([whether we have to add an underscore for dlsym],
-      [libltdl_cv_need_uscore],
-      [libltdl_cv_need_uscore=unknown
-      dlsym_uscore_save_LIBS=$LIBS
-      LIBS="$LIBS $LIBADD_DLOPEN"
-      libname=conftmod # stay within 8.3 filename limits!
-      cat >$libname.$ac_ext <<_LT_EOF
-[#line $LINENO "configure"
-#include "confdefs.h"
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord () __attribute__((visibility("default")));
-#endif
-int fnord () { return 42; }]
-_LT_EOF
-
-      # ltfn_module_cmds module_cmds
-      # Execute tilde-delimited MODULE_CMDS with environment primed for
-      # $module_cmds or $archive_cmds type content.
-      ltfn_module_cmds ()
-      {( # subshell avoids polluting parent global environment
-          module_cmds_save_ifs=$IFS; IFS='~'
-          for cmd in @S|@1; do
-            IFS=$module_cmds_save_ifs
-            libobjs=$libname.$ac_objext; lib=$libname$libltdl_cv_shlibext
-            rpath=/not-exists; soname=$libname$libltdl_cv_shlibext; output_objdir=.
-            major=; versuffix=; verstring=; deplibs=
-            ECHO=echo; wl=$lt_prog_compiler_wl; allow_undefined_flag=
-            eval $cmd
-          done
-          IFS=$module_cmds_save_ifs
-      )}
-
-      # Compile a loadable module using libtool macro expansion results.
-      $CC $pic_flag -c $libname.$ac_ext
-      ltfn_module_cmds "${module_cmds:-$archive_cmds}"
-
-      # Try to fetch fnord with dlsym().
-      libltdl_dlunknown=0; libltdl_dlnouscore=1; libltdl_dluscore=2
-      cat >conftest.$ac_ext <<_LT_EOF
-[#line $LINENO "configure"
-#include "confdefs.h"
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-#include <stdio.h>
-#ifndef RTLD_GLOBAL
-#  ifdef DL_GLOBAL
-#    define RTLD_GLOBAL DL_GLOBAL
-#  else
-#    define RTLD_GLOBAL 0
-#  endif
-#endif
-#ifndef RTLD_NOW
-#  ifdef DL_NOW
-#    define RTLD_NOW DL_NOW
-#  else
-#    define RTLD_NOW 0
-#  endif
-#endif
-int main (void) {
-  void *handle = dlopen ("`pwd`/$libname$libltdl_cv_shlibext", RTLD_GLOBAL|RTLD_NOW);
-  int status = $libltdl_dlunknown;
-  if (handle) {
-    if (dlsym (handle, "fnord"))
-      status = $libltdl_dlnouscore;
-    else {
-      if (dlsym (handle, "_fnord"))
-        status = $libltdl_dluscore;
-      else
-	puts (dlerror ());
-    }
-    dlclose (handle);
-  } else
-    puts (dlerror ());
-  return status;
-}]
-_LT_EOF
-      if AC_TRY_EVAL(ac_link) && test -s "conftest$ac_exeext" 2>/dev/null; then
-        (./conftest; exit; ) >&AS_MESSAGE_LOG_FD 2>/dev/null
-        libltdl_status=$?
-        case x$libltdl_status in
-          x$libltdl_dlnouscore) libltdl_cv_need_uscore=no ;;
-	  x$libltdl_dluscore) libltdl_cv_need_uscore=yes ;;
-	  x*) libltdl_cv_need_uscore=unknown ;;
-        esac
-      fi
-      rm -rf conftest* $libname*
-      LIBS=$dlsym_uscore_save_LIBS
-    ])
-  fi
-fi
-
-if test yes = "$libltdl_cv_need_uscore"; then
-  AC_DEFINE([NEED_USCORE], [1],
-    [Define if dlsym() requires a leading underscore in symbol names.])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:909: -1- AU_DEFUN([AC_LTDL_DLSYM_USCORE], [m4_if($#, 0, [LT_FUNC_DLSYM_USCORE], [LT_FUNC_DLSYM_USCORE($@)])], [], [])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal/ltdl.m4:909: -1- AC_DEFUN([AC_LTDL_DLSYM_USCORE], [m4_warn([obsolete], [The macro 'AC_LTDL_DLSYM_USCORE' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_FUNC_DLSYM_USCORE], [LT_FUNC_DLSYM_USCORE($@)])])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:58: -1- AC_DEFUN([XORG_PROG_RAWCPP], [
-AC_REQUIRE([AC_PROG_CPP])
-AC_PATH_TOOL(RAWCPP, [cpp], [${CPP}],
-   [$PATH:/bin:/usr/bin:/usr/lib:/usr/libexec:/usr/ccs/lib:/usr/ccs/lbin:/lib])
-
-# Check for flag to avoid builtin definitions - assumes unix is predefined,
-# which is not the best choice for supporting other OS'es, but covers most
-# of the ones we need for now.
-AC_MSG_CHECKING([if $RAWCPP requires -undef])
-AC_LANG_CONFTEST([AC_LANG_SOURCE([[Does cpp redefine unix ?]])])
-if test `${RAWCPP} < conftest.$ac_ext | grep -c 'unix'` -eq 1 ; then
-	AC_MSG_RESULT([no])
-else
-	if test `${RAWCPP} -undef < conftest.$ac_ext | grep -c 'unix'` -eq 1 ; then
-		RAWCPPFLAGS=-undef
-		AC_MSG_RESULT([yes])
-	# under Cygwin unix is still defined even with -undef
-	elif test `${RAWCPP} -undef -ansi < conftest.$ac_ext | grep -c 'unix'` -eq 1 ; then
-		RAWCPPFLAGS="-undef -ansi"
-		AC_MSG_RESULT([yes, with -ansi])
-	else
-		AC_MSG_ERROR([${RAWCPP} defines unix with or without -undef.  I don't know what to do.])
-	fi
-fi
-rm -f conftest.$ac_ext
-
-AC_MSG_CHECKING([if $RAWCPP requires -traditional])
-AC_LANG_CONFTEST([AC_LANG_SOURCE([[Does cpp preserve   "whitespace"?]])])
-if test `${RAWCPP} < conftest.$ac_ext | grep -c 'preserve   "'` -eq 1 ; then
-	AC_MSG_RESULT([no])
-else
-	if test `${RAWCPP} -traditional < conftest.$ac_ext | grep -c 'preserve   "'` -eq 1 ; then
-		TRADITIONALCPPFLAGS="-traditional"
-		RAWCPPFLAGS="${RAWCPPFLAGS} -traditional"
-		AC_MSG_RESULT([yes])
-	else
-		AC_MSG_ERROR([${RAWCPP} does not preserve whitespace with or without -traditional.  I don't know what to do.])
-	fi
-fi
-rm -f conftest.$ac_ext
-AC_SUBST(RAWCPPFLAGS)
-AC_SUBST(TRADITIONALCPPFLAGS)
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:113: -1- AC_DEFUN([XORG_MANPAGE_SECTIONS], [
-AC_REQUIRE([AC_CANONICAL_HOST])
-AC_REQUIRE([AC_PROG_SED])
-
-case $host_os in
-    solaris*)
-        # Solaris 2.0 - 11.3 use SysV man page section numbers, so we
-        # check for a man page file found in later versions that use
-        # traditional section numbers instead
-        AC_CHECK_FILE([/usr/share/man/man7/attributes.7],
-                [SYSV_MAN_SECTIONS=false], [SYSV_MAN_SECTIONS=true])
-        ;;
-    *) SYSV_MAN_SECTIONS=false ;;
-esac
-
-if test x$APP_MAN_SUFFIX = x    ; then
-    APP_MAN_SUFFIX=1
-fi
-if test x$APP_MAN_DIR = x    ; then
-    APP_MAN_DIR='$(mandir)/man$(APP_MAN_SUFFIX)'
-fi
-
-if test x$LIB_MAN_SUFFIX = x    ; then
-    LIB_MAN_SUFFIX=3
-fi
-if test x$LIB_MAN_DIR = x    ; then
-    LIB_MAN_DIR='$(mandir)/man$(LIB_MAN_SUFFIX)'
-fi
-
-if test x$FILE_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				FILE_MAN_SUFFIX=4  ;;
-	*)				FILE_MAN_SUFFIX=5  ;;
-    esac
-fi
-if test x$FILE_MAN_DIR = x    ; then
-    FILE_MAN_DIR='$(mandir)/man$(FILE_MAN_SUFFIX)'
-fi
-
-if test x$MISC_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				MISC_MAN_SUFFIX=5  ;;
-	*)				MISC_MAN_SUFFIX=7  ;;
-    esac
-fi
-if test x$MISC_MAN_DIR = x    ; then
-    MISC_MAN_DIR='$(mandir)/man$(MISC_MAN_SUFFIX)'
-fi
-
-if test x$DRIVER_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				DRIVER_MAN_SUFFIX=7  ;;
-	*)				DRIVER_MAN_SUFFIX=4  ;;
-    esac
-fi
-if test x$DRIVER_MAN_DIR = x    ; then
-    DRIVER_MAN_DIR='$(mandir)/man$(DRIVER_MAN_SUFFIX)'
-fi
-
-if test x$ADMIN_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				ADMIN_MAN_SUFFIX=1m ;;
-	*)				ADMIN_MAN_SUFFIX=8  ;;
-    esac
-fi
-if test x$ADMIN_MAN_DIR = x    ; then
-    ADMIN_MAN_DIR='$(mandir)/man$(ADMIN_MAN_SUFFIX)'
-fi
-
-
-AC_SUBST([APP_MAN_SUFFIX])
-AC_SUBST([LIB_MAN_SUFFIX])
-AC_SUBST([FILE_MAN_SUFFIX])
-AC_SUBST([MISC_MAN_SUFFIX])
-AC_SUBST([DRIVER_MAN_SUFFIX])
-AC_SUBST([ADMIN_MAN_SUFFIX])
-AC_SUBST([APP_MAN_DIR])
-AC_SUBST([LIB_MAN_DIR])
-AC_SUBST([FILE_MAN_DIR])
-AC_SUBST([MISC_MAN_DIR])
-AC_SUBST([DRIVER_MAN_DIR])
-AC_SUBST([ADMIN_MAN_DIR])
-
-XORG_MAN_PAGE="X Version 11"
-AC_SUBST([XORG_MAN_PAGE])
-MAN_SUBSTS="\
-	-e 's|__vendorversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xorgversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xservername__|Xorg|g' \
-	-e 's|__xconfigfile__|xorg.conf|g' \
-	-e 's|__projectroot__|\$(prefix)|g' \
-	-e 's|__apploaddir__|\$(appdefaultdir)|g' \
-	-e 's|__appmansuffix__|\$(APP_MAN_SUFFIX)|g' \
-	-e 's|__drivermansuffix__|\$(DRIVER_MAN_SUFFIX)|g' \
-	-e 's|__adminmansuffix__|\$(ADMIN_MAN_SUFFIX)|g' \
-	-e 's|__libmansuffix__|\$(LIB_MAN_SUFFIX)|g' \
-	-e 's|__miscmansuffix__|\$(MISC_MAN_SUFFIX)|g' \
-	-e 's|__filemansuffix__|\$(FILE_MAN_SUFFIX)|g'"
-AC_SUBST([MAN_SUBSTS])
-
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:221: -1- AC_DEFUN([XORG_CHECK_SGML_DOCTOOLS], [
-AC_MSG_CHECKING([for X.Org SGML entities m4_ifval([$1],[>= $1])])
-XORG_SGML_PATH=
-PKG_CHECK_EXISTS([xorg-sgml-doctools m4_ifval([$1],[>= $1])],
-    [XORG_SGML_PATH=`$PKG_CONFIG --variable=sgmlrootdir xorg-sgml-doctools`],
-    [m4_ifval([$1],[:],
-        [if test x"$cross_compiling" != x"yes" ; then
-            AC_CHECK_FILE([$prefix/share/sgml/X11/defs.ent],
-                          [XORG_SGML_PATH=$prefix/share/sgml])
-         fi])
-    ])
-
-# Define variables STYLESHEET_SRCDIR and XSL_STYLESHEET containing
-# the path and the name of the doc stylesheet
-if test "x$XORG_SGML_PATH" != "x" ; then
-   AC_MSG_RESULT([$XORG_SGML_PATH])
-   STYLESHEET_SRCDIR=$XORG_SGML_PATH/X11
-   XSL_STYLESHEET=$STYLESHEET_SRCDIR/xorg.xsl
-else
-   AC_MSG_RESULT([no])
-fi
-
-AC_SUBST(XORG_SGML_PATH)
-AC_SUBST(STYLESHEET_SRCDIR)
-AC_SUBST(XSL_STYLESHEET)
-AM_CONDITIONAL([HAVE_STYLESHEETS], [test "x$XSL_STYLESHEET" != "x"])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:257: -1- AC_DEFUN([XORG_CHECK_LINUXDOC], [
-AC_REQUIRE([XORG_CHECK_SGML_DOCTOOLS])
-AC_REQUIRE([XORG_WITH_PS2PDF])
-
-AC_PATH_PROG(LINUXDOC, linuxdoc)
-
-AC_MSG_CHECKING([whether to build documentation])
-
-if test x$XORG_SGML_PATH != x && test x$LINUXDOC != x ; then
-   BUILDDOC=yes
-else
-   BUILDDOC=no
-fi
-
-AM_CONDITIONAL(BUILD_LINUXDOC, [test x$BUILDDOC = xyes])
-
-AC_MSG_RESULT([$BUILDDOC])
-
-AC_MSG_CHECKING([whether to build pdf documentation])
-
-if test x$have_ps2pdf != xno && test x$BUILD_PDFDOC != xno; then
-   BUILDPDFDOC=yes
-else
-   BUILDPDFDOC=no
-fi
-
-AM_CONDITIONAL(BUILD_PDFDOC, [test x$BUILDPDFDOC = xyes])
-
-AC_MSG_RESULT([$BUILDPDFDOC])
-
-MAKE_TEXT="SGML_SEARCH_PATH=$XORG_SGML_PATH GROFF_NO_SGR=y $LINUXDOC -B txt -f"
-MAKE_PS="SGML_SEARCH_PATH=$XORG_SGML_PATH $LINUXDOC -B latex --papersize=letter --output=ps"
-MAKE_PDF="$PS2PDF"
-MAKE_HTML="SGML_SEARCH_PATH=$XORG_SGML_PATH $LINUXDOC  -B html --split=0"
-
-AC_SUBST(MAKE_TEXT)
-AC_SUBST(MAKE_PS)
-AC_SUBST(MAKE_PDF)
-AC_SUBST(MAKE_HTML)
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:306: -1- AC_DEFUN([XORG_CHECK_DOCBOOK], [
-AC_REQUIRE([XORG_CHECK_SGML_DOCTOOLS])
-
-BUILDTXTDOC=no
-BUILDPDFDOC=no
-BUILDPSDOC=no
-BUILDHTMLDOC=no
-
-AC_PATH_PROG(DOCBOOKPS, docbook2ps)
-AC_PATH_PROG(DOCBOOKPDF, docbook2pdf)
-AC_PATH_PROG(DOCBOOKHTML, docbook2html)
-AC_PATH_PROG(DOCBOOKTXT, docbook2txt)
-
-AC_MSG_CHECKING([whether to build text documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKTXT != x &&
-   test x$BUILD_TXTDOC != xno; then
-	BUILDTXTDOC=yes
-fi
-AM_CONDITIONAL(BUILD_TXTDOC, [test x$BUILDTXTDOC = xyes])
-AC_MSG_RESULT([$BUILDTXTDOC])
-
-AC_MSG_CHECKING([whether to build PDF documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKPDF != x &&
-   test x$BUILD_PDFDOC != xno; then
-	BUILDPDFDOC=yes
-fi
-AM_CONDITIONAL(BUILD_PDFDOC, [test x$BUILDPDFDOC = xyes])
-AC_MSG_RESULT([$BUILDPDFDOC])
-
-AC_MSG_CHECKING([whether to build PostScript documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKPS != x &&
-   test x$BUILD_PSDOC != xno; then
-	BUILDPSDOC=yes
-fi
-AM_CONDITIONAL(BUILD_PSDOC, [test x$BUILDPSDOC = xyes])
-AC_MSG_RESULT([$BUILDPSDOC])
-
-AC_MSG_CHECKING([whether to build HTML documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKHTML != x &&
-   test x$BUILD_HTMLDOC != xno; then
-	BUILDHTMLDOC=yes
-fi
-AM_CONDITIONAL(BUILD_HTMLDOC, [test x$BUILDHTMLDOC = xyes])
-AC_MSG_RESULT([$BUILDHTMLDOC])
-
-MAKE_TEXT="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKTXT"
-MAKE_PS="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKPS"
-MAKE_PDF="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKPDF"
-MAKE_HTML="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKHTML"
-
-AC_SUBST(MAKE_TEXT)
-AC_SUBST(MAKE_PS)
-AC_SUBST(MAKE_PDF)
-AC_SUBST(MAKE_HTML)
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:387: -1- AC_DEFUN([XORG_WITH_XMLTO], [
-AC_ARG_VAR([XMLTO], [Path to xmlto command])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(xmlto,
-	AS_HELP_STRING([--with-xmlto],
-	   [Use xmlto to regenerate documentation (default: ]_defopt[)]),
-	   [use_xmlto=$withval], [use_xmlto=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_xmlto" = x"auto"; then
-   AC_PATH_PROG([XMLTO], [xmlto])
-   if test "x$XMLTO" = "x"; then
-        AC_MSG_WARN([xmlto not found - documentation targets will be skipped])
-	have_xmlto=no
-   else
-        have_xmlto=yes
-   fi
-elif test "x$use_xmlto" = x"yes" ; then
-   AC_PATH_PROG([XMLTO], [xmlto])
-   if test "x$XMLTO" = "x"; then
-        AC_MSG_ERROR([--with-xmlto=yes specified but xmlto not found in PATH])
-   fi
-   have_xmlto=yes
-elif test "x$use_xmlto" = x"no" ; then
-   if test "x$XMLTO" != "x"; then
-      AC_MSG_WARN([ignoring XMLTO environment variable since --with-xmlto=no was specified])
-   fi
-   have_xmlto=no
-else
-   AC_MSG_ERROR([--with-xmlto expects 'yes' or 'no'])
-fi
-
-# Test for a minimum version of xmlto, if provided.
-m4_ifval([$1],
-[if test "$have_xmlto" = yes; then
-    # scrape the xmlto version
-    AC_MSG_CHECKING([the xmlto version])
-    xmlto_version=`$XMLTO --version 2>/dev/null | cut -d' ' -f3`
-    AC_MSG_RESULT([$xmlto_version])
-    AS_VERSION_COMPARE([$xmlto_version], [$1],
-        [if test "x$use_xmlto" = xauto; then
-            AC_MSG_WARN([xmlto version $xmlto_version found, but $1 needed])
-            have_xmlto=no
-        else
-            AC_MSG_ERROR([xmlto version $xmlto_version found, but $1 needed])
-        fi])
-fi])
-
-# Test for the ability of xmlto to generate a text target
-#
-# NOTE: xmlto 0.0.27 or higher return a non-zero return code in the
-# following test for empty XML docbook files.
-# For compatibility reasons use the following empty XML docbook file and if
-# it fails try it again with a non-empty XML file.
-have_xmlto_text=no
-cat > conftest.xml << "EOF"
-EOF
-AS_IF([test "$have_xmlto" = yes],
-      [AS_IF([$XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1],
-             [have_xmlto_text=yes],
-             [# Try it again with a non-empty XML file.
-              cat > conftest.xml << "EOF"
-<x></x>
-EOF
-              AS_IF([$XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1],
-                    [have_xmlto_text=yes],
-                    [AC_MSG_WARN([xmlto cannot generate text format, this format skipped])])])])
-rm -f conftest.xml
-AM_CONDITIONAL([HAVE_XMLTO_TEXT], [test $have_xmlto_text = yes])
-AM_CONDITIONAL([HAVE_XMLTO], [test "$have_xmlto" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:482: -1- AC_DEFUN([XORG_WITH_XSLTPROC], [
-AC_ARG_VAR([XSLTPROC], [Path to xsltproc command])
-# Preserves the interface, should it be implemented later
-m4_ifval([$1], [m4_warn([syntax], [Checking for xsltproc MIN-VERSION is not implemented])])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(xsltproc,
-	AS_HELP_STRING([--with-xsltproc],
-	   [Use xsltproc for the transformation of XML documents (default: ]_defopt[)]),
-	   [use_xsltproc=$withval], [use_xsltproc=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_xsltproc" = x"auto"; then
-   AC_PATH_PROG([XSLTPROC], [xsltproc])
-   if test "x$XSLTPROC" = "x"; then
-        AC_MSG_WARN([xsltproc not found - cannot transform XML documents])
-	have_xsltproc=no
-   else
-        have_xsltproc=yes
-   fi
-elif test "x$use_xsltproc" = x"yes" ; then
-   AC_PATH_PROG([XSLTPROC], [xsltproc])
-   if test "x$XSLTPROC" = "x"; then
-        AC_MSG_ERROR([--with-xsltproc=yes specified but xsltproc not found in PATH])
-   fi
-   have_xsltproc=yes
-elif test "x$use_xsltproc" = x"no" ; then
-   if test "x$XSLTPROC" != "x"; then
-      AC_MSG_WARN([ignoring XSLTPROC environment variable since --with-xsltproc=no was specified])
-   fi
-   have_xsltproc=no
-else
-   AC_MSG_ERROR([--with-xsltproc expects 'yes' or 'no'])
-fi
-
-AM_CONDITIONAL([HAVE_XSLTPROC], [test "$have_xsltproc" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:539: -1- AC_DEFUN([XORG_WITH_PERL], [
-AC_ARG_VAR([PERL], [Path to perl command])
-# Preserves the interface, should it be implemented later
-m4_ifval([$1], [m4_warn([syntax], [Checking for perl MIN-VERSION is not implemented])])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(perl,
-	AS_HELP_STRING([--with-perl],
-	   [Use perl for extracting information from files (default: ]_defopt[)]),
-	   [use_perl=$withval], [use_perl=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_perl" = x"auto"; then
-   AC_PATH_PROG([PERL], [perl])
-   if test "x$PERL" = "x"; then
-        AC_MSG_WARN([perl not found - cannot extract information and report])
-	have_perl=no
-   else
-        have_perl=yes
-   fi
-elif test "x$use_perl" = x"yes" ; then
-   AC_PATH_PROG([PERL], [perl])
-   if test "x$PERL" = "x"; then
-        AC_MSG_ERROR([--with-perl=yes specified but perl not found in PATH])
-   fi
-   have_perl=yes
-elif test "x$use_perl" = x"no" ; then
-   if test "x$PERL" != "x"; then
-      AC_MSG_WARN([ignoring PERL environment variable since --with-perl=no was specified])
-   fi
-   have_perl=no
-else
-   AC_MSG_ERROR([--with-perl expects 'yes' or 'no'])
-fi
-
-AM_CONDITIONAL([HAVE_PERL], [test "$have_perl" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:597: -1- AC_DEFUN([XORG_WITH_ASCIIDOC], [
-AC_ARG_VAR([ASCIIDOC], [Path to asciidoc command])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(asciidoc,
-	AS_HELP_STRING([--with-asciidoc],
-	   [Use asciidoc to regenerate documentation (default: ]_defopt[)]),
-	   [use_asciidoc=$withval], [use_asciidoc=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_asciidoc" = x"auto"; then
-   AC_PATH_PROG([ASCIIDOC], [asciidoc])
-   if test "x$ASCIIDOC" = "x"; then
-        AC_MSG_WARN([asciidoc not found - documentation targets will be skipped])
-	have_asciidoc=no
-   else
-        have_asciidoc=yes
-   fi
-elif test "x$use_asciidoc" = x"yes" ; then
-   AC_PATH_PROG([ASCIIDOC], [asciidoc])
-   if test "x$ASCIIDOC" = "x"; then
-        AC_MSG_ERROR([--with-asciidoc=yes specified but asciidoc not found in PATH])
-   fi
-   have_asciidoc=yes
-elif test "x$use_asciidoc" = x"no" ; then
-   if test "x$ASCIIDOC" != "x"; then
-      AC_MSG_WARN([ignoring ASCIIDOC environment variable since --with-asciidoc=no was specified])
-   fi
-   have_asciidoc=no
-else
-   AC_MSG_ERROR([--with-asciidoc expects 'yes' or 'no'])
-fi
-m4_ifval([$1],
-[if test "$have_asciidoc" = yes; then
-    # scrape the asciidoc version
-    AC_MSG_CHECKING([the asciidoc version])
-    asciidoc_version=`$ASCIIDOC --version 2>/dev/null | cut -d' ' -f2`
-    AC_MSG_RESULT([$asciidoc_version])
-    AS_VERSION_COMPARE([$asciidoc_version], [$1],
-        [if test "x$use_asciidoc" = xauto; then
-            AC_MSG_WARN([asciidoc version $asciidoc_version found, but $1 needed])
-            have_asciidoc=no
-        else
-            AC_MSG_ERROR([asciidoc version $asciidoc_version found, but $1 needed])
-        fi])
-fi])
-AM_CONDITIONAL([HAVE_ASCIIDOC], [test "$have_asciidoc" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:667: -1- AC_DEFUN([XORG_WITH_DOXYGEN], [
-AC_ARG_VAR([DOXYGEN], [Path to doxygen command])
-AC_ARG_VAR([DOT], [Path to the dot graphics utility])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(doxygen,
-	AS_HELP_STRING([--with-doxygen],
-	   [Use doxygen to regenerate documentation (default: ]_defopt[)]),
-	   [use_doxygen=$withval], [use_doxygen=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_doxygen" = x"auto"; then
-   AC_PATH_PROG([DOXYGEN], [doxygen])
-   if test "x$DOXYGEN" = "x"; then
-        AC_MSG_WARN([doxygen not found - documentation targets will be skipped])
-	have_doxygen=no
-   else
-        have_doxygen=yes
-   fi
-elif test "x$use_doxygen" = x"yes" ; then
-   AC_PATH_PROG([DOXYGEN], [doxygen])
-   if test "x$DOXYGEN" = "x"; then
-        AC_MSG_ERROR([--with-doxygen=yes specified but doxygen not found in PATH])
-   fi
-   have_doxygen=yes
-elif test "x$use_doxygen" = x"no" ; then
-   if test "x$DOXYGEN" != "x"; then
-      AC_MSG_WARN([ignoring DOXYGEN environment variable since --with-doxygen=no was specified])
-   fi
-   have_doxygen=no
-else
-   AC_MSG_ERROR([--with-doxygen expects 'yes' or 'no'])
-fi
-m4_ifval([$1],
-[if test "$have_doxygen" = yes; then
-    # scrape the doxygen version
-    AC_MSG_CHECKING([the doxygen version])
-    doxygen_version=`$DOXYGEN --version 2>/dev/null`
-    AC_MSG_RESULT([$doxygen_version])
-    AS_VERSION_COMPARE([$doxygen_version], [$1],
-        [if test "x$use_doxygen" = xauto; then
-            AC_MSG_WARN([doxygen version $doxygen_version found, but $1 needed])
-            have_doxygen=no
-        else
-            AC_MSG_ERROR([doxygen version $doxygen_version found, but $1 needed])
-        fi])
-fi])
-
-dnl Check for DOT if we have doxygen. The caller decides if it is mandatory
-dnl HAVE_DOT is a variable that can be used in your doxygen.in config file:
-dnl 	HAVE_DOT = @HAVE_DOT@
-HAVE_DOT=no
-if test "x$have_doxygen" = "xyes"; then
-  AC_PATH_PROG([DOT], [dot])
-    if test "x$DOT" != "x"; then
-      HAVE_DOT=yes
-    fi
-fi
-
-AC_SUBST([HAVE_DOT])
-AM_CONDITIONAL([HAVE_DOT], [test "$HAVE_DOT" = "yes"])
-AM_CONDITIONAL([HAVE_DOXYGEN], [test "$have_doxygen" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:767: -1- AC_DEFUN([XORG_WITH_GROFF], [
-AC_ARG_VAR([GROFF], [Path to groff command])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_WITH(groff,
-	AS_HELP_STRING([--with-groff],
-	   [Use groff to regenerate documentation (default: ]_defopt[)]),
-	   [use_groff=$withval], [use_groff=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_groff" = x"auto"; then
-   AC_PATH_PROG([GROFF], [groff])
-   if test "x$GROFF" = "x"; then
-        AC_MSG_WARN([groff not found - documentation targets will be skipped])
-	have_groff=no
-   else
-        have_groff=yes
-   fi
-elif test "x$use_groff" = x"yes" ; then
-   AC_PATH_PROG([GROFF], [groff])
-   if test "x$GROFF" = "x"; then
-        AC_MSG_ERROR([--with-groff=yes specified but groff not found in PATH])
-   fi
-   have_groff=yes
-elif test "x$use_groff" = x"no" ; then
-   if test "x$GROFF" != "x"; then
-      AC_MSG_WARN([ignoring GROFF environment variable since --with-groff=no was specified])
-   fi
-   have_groff=no
-else
-   AC_MSG_ERROR([--with-groff expects 'yes' or 'no'])
-fi
-
-# We have groff, test for the presence of the macro packages
-if test "x$have_groff" = x"yes"; then
-    AC_MSG_CHECKING([for ${GROFF} -ms macros])
-    if ${GROFF} -ms -I. /dev/null >/dev/null 2>&1 ; then
-        groff_ms_works=yes
-    else
-        groff_ms_works=no
-    fi
-    AC_MSG_RESULT([$groff_ms_works])
-    AC_MSG_CHECKING([for ${GROFF} -mm macros])
-    if ${GROFF} -mm -I. /dev/null >/dev/null 2>&1 ; then
-        groff_mm_works=yes
-    else
-        groff_mm_works=no
-    fi
-    AC_MSG_RESULT([$groff_mm_works])
-fi
-
-# We have groff, test for HTML dependencies, one command per package
-if test "x$have_groff" = x"yes"; then
-   AC_PATH_PROGS(GS_PATH, [gs gswin32c])
-   AC_PATH_PROG(PNMTOPNG_PATH, [pnmtopng])
-   AC_PATH_PROG(PSSELECT_PATH, [psselect])
-   if test "x$GS_PATH" != "x" -a "x$PNMTOPNG_PATH" != "x" -a "x$PSSELECT_PATH" != "x"; then
-      have_groff_html=yes
-   else
-      have_groff_html=no
-      AC_MSG_WARN([grohtml dependencies not found - HTML Documentation skipped. Refer to grohtml man pages])
-   fi
-fi
-
-# Set Automake conditionals for Makefiles
-AM_CONDITIONAL([HAVE_GROFF], [test "$have_groff" = yes])
-AM_CONDITIONAL([HAVE_GROFF_MS], [test "$groff_ms_works" = yes])
-AM_CONDITIONAL([HAVE_GROFF_MM], [test "$groff_mm_works" = yes])
-AM_CONDITIONAL([HAVE_GROFF_HTML], [test "$have_groff_html" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:859: -1- AC_DEFUN([XORG_WITH_FOP], [
-AC_ARG_VAR([FOP], [Path to fop command])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(fop,
-	AS_HELP_STRING([--with-fop],
-	   [Use fop to regenerate documentation (default: ]_defopt[)]),
-	   [use_fop=$withval], [use_fop=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_fop" = x"auto"; then
-   AC_PATH_PROG([FOP], [fop])
-   if test "x$FOP" = "x"; then
-        AC_MSG_WARN([fop not found - documentation targets will be skipped])
-	have_fop=no
-   else
-        have_fop=yes
-   fi
-elif test "x$use_fop" = x"yes" ; then
-   AC_PATH_PROG([FOP], [fop])
-   if test "x$FOP" = "x"; then
-        AC_MSG_ERROR([--with-fop=yes specified but fop not found in PATH])
-   fi
-   have_fop=yes
-elif test "x$use_fop" = x"no" ; then
-   if test "x$FOP" != "x"; then
-      AC_MSG_WARN([ignoring FOP environment variable since --with-fop=no was specified])
-   fi
-   have_fop=no
-else
-   AC_MSG_ERROR([--with-fop expects 'yes' or 'no'])
-fi
-
-# Test for a minimum version of fop, if provided.
-m4_ifval([$1],
-[if test "$have_fop" = yes; then
-    # scrape the fop version
-    AC_MSG_CHECKING([for fop minimum version])
-    fop_version=`$FOP -version 2>/dev/null | cut -d' ' -f3`
-    AC_MSG_RESULT([$fop_version])
-    AS_VERSION_COMPARE([$fop_version], [$1],
-        [if test "x$use_fop" = xauto; then
-            AC_MSG_WARN([fop version $fop_version found, but $1 needed])
-            have_fop=no
-        else
-            AC_MSG_ERROR([fop version $fop_version found, but $1 needed])
-        fi])
-fi])
-AM_CONDITIONAL([HAVE_FOP], [test "$have_fop" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:921: -1- AC_DEFUN([XORG_WITH_M4], [
-AC_CACHE_CHECK([for m4 that supports -I option], [ac_cv_path_M4],
-   [AC_PATH_PROGS_FEATURE_CHECK([M4], [m4 gm4],
-       [[$ac_path_M4 -I. /dev/null > /dev/null 2>&1 && \
-         ac_cv_path_M4=$ac_path_M4 ac_path_M4_found=:]],
-   [AC_MSG_ERROR([could not find m4 that supports -I option])],
-   [$PATH:/usr/gnu/bin])])
-
-AC_SUBST([M4], [$ac_cv_path_M4])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:953: -1- AC_DEFUN([XORG_WITH_PS2PDF], [
-AC_ARG_VAR([PS2PDF], [Path to ps2pdf command])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_WITH(ps2pdf,
-	AS_HELP_STRING([--with-ps2pdf],
-	   [Use ps2pdf to regenerate documentation (default: ]_defopt[)]),
-	   [use_ps2pdf=$withval], [use_ps2pdf=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_ps2pdf" = x"auto"; then
-   AC_PATH_PROG([PS2PDF], [ps2pdf])
-   if test "x$PS2PDF" = "x"; then
-        AC_MSG_WARN([ps2pdf not found - documentation targets will be skipped])
-	have_ps2pdf=no
-   else
-        have_ps2pdf=yes
-   fi
-elif test "x$use_ps2pdf" = x"yes" ; then
-   AC_PATH_PROG([PS2PDF], [ps2pdf])
-   if test "x$PS2PDF" = "x"; then
-        AC_MSG_ERROR([--with-ps2pdf=yes specified but ps2pdf not found in PATH])
-   fi
-   have_ps2pdf=yes
-elif test "x$use_ps2pdf" = x"no" ; then
-   if test "x$PS2PDF" != "x"; then
-      AC_MSG_WARN([ignoring PS2PDF environment variable since --with-ps2pdf=no was specified])
-   fi
-   have_ps2pdf=no
-else
-   AC_MSG_ERROR([--with-ps2pdf expects 'yes' or 'no'])
-fi
-AM_CONDITIONAL([HAVE_PS2PDF], [test "$have_ps2pdf" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1010: -1- AC_DEFUN([XORG_ENABLE_DOCS], [
-m4_define([docs_default], m4_default([$1], [yes]))
-AC_ARG_ENABLE(docs,
-	AS_HELP_STRING([--enable-docs],
-	   [Enable building the documentation (default: ]docs_default[)]),
-	   [build_docs=$enableval], [build_docs=]docs_default)
-m4_undefine([docs_default])
-AM_CONDITIONAL(ENABLE_DOCS, [test x$build_docs = xyes])
-AC_MSG_CHECKING([whether to build documentation])
-AC_MSG_RESULT([$build_docs])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1043: -1- AC_DEFUN([XORG_ENABLE_DEVEL_DOCS], [
-m4_define([devel_default], m4_default([$1], [yes]))
-AC_ARG_ENABLE(devel-docs,
-	AS_HELP_STRING([--enable-devel-docs],
-	   [Enable building the developer documentation (default: ]devel_default[)]),
-	   [build_devel_docs=$enableval], [build_devel_docs=]devel_default)
-m4_undefine([devel_default])
-AM_CONDITIONAL(ENABLE_DEVEL_DOCS, [test x$build_devel_docs = xyes])
-AC_MSG_CHECKING([whether to build developer documentation])
-AC_MSG_RESULT([$build_devel_docs])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1076: -1- AC_DEFUN([XORG_ENABLE_SPECS], [
-m4_define([spec_default], m4_default([$1], [yes]))
-AC_ARG_ENABLE(specs,
-	AS_HELP_STRING([--enable-specs],
-	   [Enable building the specs (default: ]spec_default[)]),
-	   [build_specs=$enableval], [build_specs=]spec_default)
-m4_undefine([spec_default])
-AM_CONDITIONAL(ENABLE_SPECS, [test x$build_specs = xyes])
-AC_MSG_CHECKING([whether to build functional specifications])
-AC_MSG_RESULT([$build_specs])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1108: -1- AC_DEFUN([XORG_ENABLE_UNIT_TESTS], [
-AC_BEFORE([$0], [XORG_WITH_GLIB])
-AC_BEFORE([$0], [XORG_LD_WRAP])
-AC_REQUIRE([XORG_MEMORY_CHECK_FLAGS])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_ENABLE(unit-tests, AS_HELP_STRING([--enable-unit-tests],
-	[Enable building unit test cases (default: ]_defopt[)]),
-	[enable_unit_tests=$enableval], [enable_unit_tests=]_defopt)
-m4_undefine([_defopt])
-AM_CONDITIONAL(ENABLE_UNIT_TESTS, [test "x$enable_unit_tests" != xno])
-AC_MSG_CHECKING([whether to build unit test cases])
-AC_MSG_RESULT([$enable_unit_tests])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1141: -1- AC_DEFUN([XORG_ENABLE_INTEGRATION_TESTS], [
-AC_REQUIRE([XORG_MEMORY_CHECK_FLAGS])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_ENABLE(integration-tests, AS_HELP_STRING([--enable-integration-tests],
-	[Enable building integration test cases (default: ]_defopt[)]),
-	[enable_integration_tests=$enableval],
-	[enable_integration_tests=]_defopt)
-m4_undefine([_defopt])
-AM_CONDITIONAL([ENABLE_INTEGRATION_TESTS],
-	[test "x$enable_integration_tests" != xno])
-AC_MSG_CHECKING([whether to build unit test cases])
-AC_MSG_RESULT([$enable_integration_tests])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1175: -1- AC_DEFUN([XORG_WITH_GLIB], [
-AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(glib, AS_HELP_STRING([--with-glib],
-	[Use GLib library for unit testing (default: ]_defopt[)]),
-	[with_glib=$withval], [with_glib=]_defopt)
-m4_undefine([_defopt])
-
-have_glib=no
-# Do not probe GLib if user explicitly disabled unit testing
-if test "x$enable_unit_tests" != x"no"; then
-  # Do not probe GLib if user explicitly disabled it
-  if test "x$with_glib" != x"no"; then
-    m4_ifval(
-      [$1],
-      [PKG_CHECK_MODULES([GLIB], [glib-2.0 >= $1], [have_glib=yes], [have_glib=no])],
-      [PKG_CHECK_MODULES([GLIB], [glib-2.0], [have_glib=yes], [have_glib=no])]
-    )
-  fi
-fi
-
-# Not having GLib when unit testing has been explicitly requested is an error
-if test "x$enable_unit_tests" = x"yes"; then
-  if test "x$have_glib" = x"no"; then
-    AC_MSG_ERROR([--enable-unit-tests=yes specified but glib-2.0 not found])
-  fi
-fi
-
-# Having unit testing disabled when GLib has been explicitly requested is an error
-if test "x$enable_unit_tests" = x"no"; then
-  if test "x$with_glib" = x"yes"; then
-    AC_MSG_ERROR([--enable-unit-tests=yes specified but glib-2.0 not found])
-  fi
-fi
-
-# Not having GLib when it has been explicitly requested is an error
-if test "x$with_glib" = x"yes"; then
-  if test "x$have_glib" = x"no"; then
-    AC_MSG_ERROR([--with-glib=yes specified but glib-2.0 not found])
-  fi
-fi
-
-AM_CONDITIONAL([HAVE_GLIB], [test "$have_glib" = yes])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1234: -1- AC_DEFUN([XORG_LD_WRAP], [
-XORG_CHECK_LINKER_FLAGS([-Wl,-wrap,exit],[have_ld_wrap=yes],[have_ld_wrap=no],
-    [AC_LANG_PROGRAM([#include <stdlib.h>
-                      void __wrap_exit(int status) { return; }],
-                     [exit(0);])])
-# Not having ld wrap when unit testing has been explicitly requested is an error
-if test "x$enable_unit_tests" = x"yes" -a "x$1" != "xoptional"; then
-  if test "x$have_ld_wrap" = x"no"; then
-    AC_MSG_ERROR([--enable-unit-tests=yes specified but ld -wrap support is not available])
-  fi
-fi
-AM_CONDITIONAL([HAVE_LD_WRAP], [test "$have_ld_wrap" = yes])
-#
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1298: -1- AC_DEFUN([XORG_CHECK_LINKER_FLAGS], [AC_MSG_CHECKING([whether the linker accepts $1])
-dnl Some hackery here since AC_CACHE_VAL can't handle a non-literal varname:
-AS_LITERAL_IF([$1],
-  [AC_CACHE_VAL(AS_TR_SH(xorg_cv_linker_flags_[$1]), [
-      ax_save_FLAGS=$LDFLAGS
-      LDFLAGS="$1"
-      AC_LINK_IFELSE([m4_default([$4],[AC_LANG_PROGRAM()])],
-        AS_TR_SH(xorg_cv_linker_flags_[$1])=yes,
-        AS_TR_SH(xorg_cv_linker_flags_[$1])=no)
-      LDFLAGS=$ax_save_FLAGS])],
-  [ax_save_FLAGS=$LDFLAGS
-   LDFLAGS="$1"
-   AC_LINK_IFELSE([AC_LANG_PROGRAM()],
-     eval AS_TR_SH(xorg_cv_linker_flags_[$1])=yes,
-     eval AS_TR_SH(xorg_cv_linker_flags_[$1])=no)
-   LDFLAGS=$ax_save_FLAGS])
-eval xorg_check_linker_flags=$AS_TR_SH(xorg_cv_linker_flags_[$1])
-AC_MSG_RESULT($xorg_check_linker_flags)
-if test "x$xorg_check_linker_flags" = xyes; then
-	m4_default([$2], :)
-else
-	m4_default([$3], :)
-fi
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1338: -1- AC_DEFUN([XORG_MEMORY_CHECK_FLAGS], [
-
-AC_REQUIRE([AC_CANONICAL_HOST])
-AC_ARG_VAR([XORG_MALLOC_DEBUG_ENV],
-           [Environment variables to enable memory checking in tests])
-
-# Check for different types of support on different platforms
-case $host_os in
-    solaris*)
-        AC_CHECK_LIB([umem], [umem_alloc],
-            [malloc_debug_env='LD_PRELOAD=libumem.so UMEM_DEBUG=default'])
-        ;;
-    *-gnu*) # GNU libc - Value is used as a single byte bit pattern,
-        # both directly and inverted, so should not be 0 or 255.
-        malloc_debug_env='MALLOC_PERTURB_=15'
-        ;;
-    darwin*)
-        malloc_debug_env='MallocPreScribble=1 MallocScribble=1 DYLD_INSERT_LIBRARIES=/usr/lib/libgmalloc.dylib'
-        ;;
-    *bsd*)
-        malloc_debug_env='MallocPreScribble=1 MallocScribble=1'
-        ;;
-esac
-
-# User supplied flags override default flags
-if test "x$XORG_MALLOC_DEBUG_ENV" != "x"; then
-    malloc_debug_env="$XORG_MALLOC_DEBUG_ENV"
-fi
-
-AC_SUBST([XORG_MALLOC_DEBUG_ENV],[$malloc_debug_env])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1383: -1- AC_DEFUN([XORG_CHECK_MALLOC_ZERO], [
-AC_ARG_ENABLE(malloc0returnsnull,
-	AS_HELP_STRING([--enable-malloc0returnsnull],
-		       [assume malloc(0) can return NULL (default: yes)]),
-	[MALLOC_ZERO_RETURNS_NULL=$enableval],
-	[MALLOC_ZERO_RETURNS_NULL=yes])
-
-AC_MSG_CHECKING([whether to act as if malloc(0) can return NULL])
-AC_MSG_RESULT([$MALLOC_ZERO_RETURNS_NULL])
-
-if test "x$MALLOC_ZERO_RETURNS_NULL" = xyes; then
-	MALLOC_ZERO_CFLAGS="-DMALLOC_0_RETURNS_NULL"
-	XMALLOC_ZERO_CFLAGS=$MALLOC_ZERO_CFLAGS
-	XTMALLOC_ZERO_CFLAGS="$MALLOC_ZERO_CFLAGS -DXTMALLOC_BC"
-else
-	MALLOC_ZERO_CFLAGS=""
-	XMALLOC_ZERO_CFLAGS=""
-	XTMALLOC_ZERO_CFLAGS=""
-fi
-
-AC_SUBST([MALLOC_ZERO_CFLAGS])
-AC_SUBST([XMALLOC_ZERO_CFLAGS])
-AC_SUBST([XTMALLOC_ZERO_CFLAGS])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1429: -1- AC_DEFUN([XORG_WITH_LINT], [
-
-AC_ARG_VAR([LINT], [Path to a lint-style command])
-AC_ARG_VAR([LINT_FLAGS], [Flags for the lint-style command])
-AC_ARG_WITH(lint, [AS_HELP_STRING([--with-lint],
-		[Use a lint-style source code checker (default: disabled)])],
-		[use_lint=$withval], [use_lint=no])
-
-# Obtain platform specific info like program name and options
-# The lint program on FreeBSD and NetBSD is different from the one on Solaris
-case $host_os in
-  *linux* | *openbsd* | kfreebsd*-gnu | darwin* | cygwin*)
-	lint_name=splint
-	lint_options="-badflag"
-	;;
-  *freebsd* | *netbsd*)
-	lint_name=lint
-	lint_options="-u -b"
-	;;
-  *solaris*)
-	lint_name=lint
-	lint_options="-u -b -h -erroff=E_INDISTING_FROM_TRUNC2"
-	;;
-esac
-
-# Test for the presence of the program (either guessed by the code or spelled out by the user)
-if test "x$use_lint" = x"yes" ; then
-   AC_PATH_PROG([LINT], [$lint_name])
-   if test "x$LINT" = "x"; then
-        AC_MSG_ERROR([--with-lint=yes specified but lint-style tool not found in PATH])
-   fi
-elif test "x$use_lint" = x"no" ; then
-   if test "x$LINT" != "x"; then
-      AC_MSG_WARN([ignoring LINT environment variable since --with-lint=no was specified])
-   fi
-else
-   AC_MSG_ERROR([--with-lint expects 'yes' or 'no'. Use LINT variable to specify path.])
-fi
-
-# User supplied flags override default flags
-if test "x$LINT_FLAGS" != "x"; then
-   lint_options=$LINT_FLAGS
-fi
-
-AC_SUBST([LINT_FLAGS],[$lint_options])
-AM_CONDITIONAL(LINT, [test "x$LINT" != x])
-
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1492: -1- AC_DEFUN([XORG_LINT_LIBRARY], [
-AC_REQUIRE([XORG_WITH_LINT])
-AC_ARG_ENABLE(lint-library, [AS_HELP_STRING([--enable-lint-library],
-	[Create lint library (default: disabled)])],
-	[make_lint_lib=$enableval], [make_lint_lib=no])
-
-if test "x$make_lint_lib" = x"yes" ; then
-   LINTLIB=llib-l$1.ln
-   if test "x$LINT" = "x"; then
-        AC_MSG_ERROR([Cannot make lint library without --with-lint])
-   fi
-elif test "x$make_lint_lib" != x"no" ; then
-   AC_MSG_ERROR([--enable-lint-library expects 'yes' or 'no'.])
-fi
-
-AC_SUBST(LINTLIB)
-AM_CONDITIONAL(MAKE_LINT_LIB, [test x$make_lint_lib != xno])
-
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1523: -1- AC_DEFUN([XORG_COMPILER_BRAND], [
-AC_LANG_CASE(
-	[C], [
-		dnl autoconf-2.70 folded AC_PROG_CC_C99 into AC_PROG_CC
-		dnl and complains that AC_PROG_CC_C99 is obsolete
-		m4_version_prereq([2.70],
-			[AC_REQUIRE([AC_PROG_CC])],
-			[AC_REQUIRE([AC_PROG_CC_C99])])
-	],
-	[C++], [
-		AC_REQUIRE([AC_PROG_CXX])
-	]
-)
-AC_CHECK_DECL([__clang__], [CLANGCC="yes"], [CLANGCC="no"])
-AC_CHECK_DECL([__INTEL_COMPILER], [INTELCC="yes"], [INTELCC="no"])
-AC_CHECK_DECL([__SUNPRO_C], [SUNCC="yes"], [SUNCC="no"])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1554: -1- AC_DEFUN([XORG_TESTSET_CFLAG], [
-m4_if([$#], 0, [m4_fatal([XORG_TESTSET_CFLAG was given with an unsupported number of arguments])])
-m4_if([$#], 1, [m4_fatal([XORG_TESTSET_CFLAG was given with an unsupported number of arguments])])
-
-AC_LANG_COMPILER_REQUIRE
-
-AC_LANG_CASE(
-	[C], [
-		dnl autoconf-2.70 folded AC_PROG_CC_C99 into AC_PROG_CC
-		dnl and complains that AC_PROG_CC_C99 is obsolete
-		m4_version_prereq([2.70],
-			[AC_REQUIRE([AC_PROG_CC])],
-			[AC_REQUIRE([AC_PROG_CC_C99])])
-		define([PREFIX], [C])
-		define([CACHE_PREFIX], [cc])
-		define([COMPILER], [$CC])
-	],
-	[C++], [
-		define([PREFIX], [CXX])
-		define([CACHE_PREFIX], [cxx])
-		define([COMPILER], [$CXX])
-	]
-)
-
-[xorg_testset_save_]PREFIX[FLAGS]="$PREFIX[FLAGS]"
-
-if test "x$[xorg_testset_]CACHE_PREFIX[_unknown_warning_option]" = "x" ; then
-	PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unknown-warning-option"
-	AC_CACHE_CHECK([if ]COMPILER[ supports -Werror=unknown-warning-option],
-			[xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option],
-			AC_COMPILE_IFELSE([AC_LANG_SOURCE([int i;])],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option=yes],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option=no]))
-	[xorg_testset_]CACHE_PREFIX[_unknown_warning_option]=$[xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option]
-	PREFIX[FLAGS]="$[xorg_testset_save_]PREFIX[FLAGS]"
-fi
-
-if test "x$[xorg_testset_]CACHE_PREFIX[_unused_command_line_argument]" = "x" ; then
-	if test "x$[xorg_testset_]CACHE_PREFIX[_unknown_warning_option]" = "xyes" ; then
-		PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unknown-warning-option"
-	fi
-	PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unused-command-line-argument"
-	AC_CACHE_CHECK([if ]COMPILER[ supports -Werror=unused-command-line-argument],
-			[xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument],
-			AC_COMPILE_IFELSE([AC_LANG_SOURCE([int i;])],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument=yes],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument=no]))
-	[xorg_testset_]CACHE_PREFIX[_unused_command_line_argument]=$[xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument]
-	PREFIX[FLAGS]="$[xorg_testset_save_]PREFIX[FLAGS]"
-fi
-
-found="no"
-m4_foreach([flag], m4_cdr($@), [
-	if test $found = "no" ; then
-		if test "x$xorg_testset_]CACHE_PREFIX[_unknown_warning_option" = "xyes" ; then
-			PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_]CACHE_PREFIX[_unused_command_line_argument" = "xyes" ; then
-			PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unused-command-line-argument"
-		fi
-
-		PREFIX[FLAGS]="$PREFIX[FLAGS] ]flag["
-
-dnl Some hackery here since AC_CACHE_VAL can't handle a non-literal varname
-		AC_MSG_CHECKING([if ]COMPILER[ supports ]flag[])
-		cacheid=AS_TR_SH([xorg_cv_]CACHE_PREFIX[_flag_]flag[])
-		AC_CACHE_VAL($cacheid,
-			     [AC_LINK_IFELSE([AC_LANG_PROGRAM([int i;])],
-					     [eval $cacheid=yes],
-					     [eval $cacheid=no])])
-
-		PREFIX[FLAGS]="$[xorg_testset_save_]PREFIX[FLAGS]"
-
-		eval supported=\$$cacheid
-		AC_MSG_RESULT([$supported])
-		if test "$supported" = "yes" ; then
-			$1="$$1 ]flag["
-			found="yes"
-		fi
-	fi
-])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1650: -1- AC_DEFUN([XORG_COMPILER_FLAGS], [
-AC_REQUIRE([XORG_COMPILER_BRAND])
-
-AC_ARG_ENABLE(selective-werror,
-              AS_HELP_STRING([--disable-selective-werror],
-                             [Turn off selective compiler errors. (default: enabled)]),
-              [SELECTIVE_WERROR=$enableval],
-              [SELECTIVE_WERROR=yes])
-
-AC_LANG_CASE(
-        [C], [
-                define([PREFIX], [C])
-        ],
-        [C++], [
-                define([PREFIX], [CXX])
-        ]
-)
-# -v is too short to test reliably with XORG_TESTSET_CFLAG
-if test "x$SUNCC" = "xyes"; then
-    [BASE_]PREFIX[FLAGS]="-v"
-else
-    [BASE_]PREFIX[FLAGS]=""
-fi
-
-# This chunk of warnings were those that existed in the legacy CWARNFLAGS
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wall])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wpointer-arith])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-declarations])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wformat=2], [-Wformat])
-
-AC_LANG_CASE(
-	[C], [
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wstrict-prototypes])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-prototypes])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wnested-externs])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wbad-function-cast])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wold-style-definition], [-fd])
-	]
-)
-
-# This chunk adds additional warnings that could catch undesired effects.
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wunused])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wuninitialized])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wshadow])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-noreturn])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-format-attribute])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wredundant-decls])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wlogical-op])
-
-# These are currently disabled because they are noisy.  They will be enabled
-# in the future once the codebase is sufficiently modernized to silence
-# them.  For now, I don't want them to drown out the other warnings.
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wparentheses])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-align])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-qual])
-
-# Turn some warnings into errors, so we don't accidentally get successful builds
-# when there are problems that should be fixed.
-
-if test "x$SELECTIVE_WERROR" = "xyes" ; then
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=implicit], [-errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=nonnull])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=init-self])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=main])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=missing-braces])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=sequence-point])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=return-type], [-errwarn=E_FUNC_HAS_NO_RETURN_STMT])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=trigraphs])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=array-bounds])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=write-strings])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=address])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=int-to-pointer-cast], [-errwarn=E_BAD_PTR_INT_COMBINATION])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=pointer-to-int-cast]) # Also -errwarn=E_BAD_PTR_INT_COMBINATION
-else
-AC_MSG_WARN([You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wimplicit])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wnonnull])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Winit-self])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmain])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-braces])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wsequence-point])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wreturn-type])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wtrigraphs])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Warray-bounds])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wwrite-strings])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Waddress])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wint-to-pointer-cast])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wpointer-to-int-cast])
-fi
-
-AC_SUBST([BASE_]PREFIX[FLAGS])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1755: -1- AC_DEFUN([XORG_CWARNFLAGS], [
-AC_REQUIRE([XORG_COMPILER_FLAGS])
-AC_REQUIRE([XORG_COMPILER_BRAND])
-AC_LANG_CASE(
-	[C], [
-		CWARNFLAGS="$BASE_CFLAGS"
-		if  test "x$GCC" = xyes ; then
-		    CWARNFLAGS="$CWARNFLAGS -fno-strict-aliasing"
-		fi
-		AC_SUBST(CWARNFLAGS)
-	]
-)
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1780: -1- AC_DEFUN([XORG_STRICT_OPTION], [
-AC_REQUIRE([XORG_CWARNFLAGS])
-AC_REQUIRE([XORG_COMPILER_FLAGS])
-
-AC_ARG_ENABLE(strict-compilation,
-			  AS_HELP_STRING([--enable-strict-compilation],
-			  [Enable all warnings from compiler and make them errors (default: disabled)]),
-			  [STRICT_COMPILE=$enableval], [STRICT_COMPILE=no])
-
-AC_LANG_CASE(
-        [C], [
-                define([PREFIX], [C])
-        ],
-        [C++], [
-                define([PREFIX], [CXX])
-        ]
-)
-
-[STRICT_]PREFIX[FLAGS]=""
-XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-pedantic])
-XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-Werror], [-errwarn])
-
-# Earlier versions of gcc (eg: 4.2) support -Werror=attributes, but do not
-# activate it with -Werror, so we add it here explicitly.
-XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-Werror=attributes])
-
-if test "x$STRICT_COMPILE" = "xyes"; then
-    [BASE_]PREFIX[FLAGS]="$[BASE_]PREFIX[FLAGS] $[STRICT_]PREFIX[FLAGS]"
-    AC_LANG_CASE([C], [CWARNFLAGS="$CWARNFLAGS $STRICT_CFLAGS"])
-fi
-AC_SUBST([STRICT_]PREFIX[FLAGS])
-AC_SUBST([BASE_]PREFIX[FLAGS])
-AC_LANG_CASE([C], AC_SUBST([CWARNFLAGS]))
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1822: -1- AC_DEFUN([XORG_DEFAULT_NOCODE_OPTIONS], [
-AC_REQUIRE([AC_PROG_INSTALL])
-XORG_RELEASE_VERSION
-XORG_CHANGELOG
-XORG_INSTALL
-XORG_MANPAGE_SECTIONS
-m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])],
-    [AC_SUBST([AM_DEFAULT_VERBOSITY], [1])])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1838: -1- AC_DEFUN([XORG_DEFAULT_OPTIONS], [
-AC_REQUIRE([AC_PROG_INSTALL])
-XORG_COMPILER_FLAGS
-XORG_CWARNFLAGS
-XORG_STRICT_OPTION
-XORG_DEFAULT_NOCODE_OPTIONS
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1853: -1- AC_DEFUN([XORG_INSTALL], [
-AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-macros_datadir=`$PKG_CONFIG --print-errors --variable=pkgdatadir xorg-macros`
-INSTALL_CMD="(cp -f "$macros_datadir/INSTALL" \$(top_srcdir)/.INSTALL.tmp && \
-mv \$(top_srcdir)/.INSTALL.tmp \$(top_srcdir)/INSTALL) \
-|| (rm -f \$(top_srcdir)/.INSTALL.tmp; test -e \$(top_srcdir)/INSTALL || ( \
-touch \$(top_srcdir)/INSTALL; \
-echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))"
-AC_SUBST([INSTALL_CMD])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1892: -1- AC_DEFUN([XORG_RELEASE_VERSION], [
-	AC_DEFINE_UNQUOTED([PACKAGE_VERSION_MAJOR],
-		[`echo $PACKAGE_VERSION | cut -d . -f 1`],
-		[Major version of this package])
-	PVM=`echo $PACKAGE_VERSION | cut -d . -f 2 | cut -d - -f 1`
-	if test "x$PVM" = "x"; then
-		PVM="0"
-	fi
-	AC_DEFINE_UNQUOTED([PACKAGE_VERSION_MINOR],
-		[$PVM],
-		[Minor version of this package])
-	PVP=`echo $PACKAGE_VERSION | cut -d . -f 3 | cut -d - -f 1`
-	if test "x$PVP" = "x"; then
-		PVP="0"
-	fi
-	AC_DEFINE_UNQUOTED([PACKAGE_VERSION_PATCHLEVEL],
-		[$PVP],
-		[Patch version of this package])
-])
-m4trace:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1920: -1- AC_DEFUN([XORG_CHANGELOG], [
-CHANGELOG_CMD="((GIT_DIR=\$(top_srcdir)/.git git log > \$(top_srcdir)/.changelog.tmp) 2>/dev/null && \
-mv \$(top_srcdir)/.changelog.tmp \$(top_srcdir)/ChangeLog) \
-|| (rm -f \$(top_srcdir)/.changelog.tmp; test -e \$(top_srcdir)/ChangeLog || ( \
-touch \$(top_srcdir)/ChangeLog; \
-echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))"
-AC_SUBST([CHANGELOG_CMD])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/amversion.m4:14: -1- AC_DEFUN([AM_AUTOMAKE_VERSION], [am__api_version='1.18'
-dnl Some users find AM_AUTOMAKE_VERSION and mistake it for a way to
-dnl require some minimum version.  Point them to the right macro.
-m4_if([$1], [1.18.1], [],
-      [AC_FATAL([Do not call $0, use AM_INIT_AUTOMAKE([$1]).])])dnl
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/amversion.m4:33: -1- AC_DEFUN([AM_SET_CURRENT_AUTOMAKE_VERSION], [AM_AUTOMAKE_VERSION([1.18.1])dnl
-m4_ifndef([AC_AUTOCONF_VERSION],
-  [m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl
-_AM_AUTOCONF_VERSION(m4_defn([AC_AUTOCONF_VERSION]))])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/auxdir.m4:47: -1- AC_DEFUN([AM_AUX_DIR_EXPAND], [AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl
-# Expand $ac_aux_dir to an absolute path.
-am_aux_dir=`cd "$ac_aux_dir" && pwd`
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/cond.m4:12: -1- AC_DEFUN([AM_CONDITIONAL], [AC_PREREQ([2.52])dnl
- m4_if([$1], [TRUE],  [AC_FATAL([$0: invalid condition: $1])],
-       [$1], [FALSE], [AC_FATAL([$0: invalid condition: $1])])dnl
-AC_SUBST([$1_TRUE])dnl
-AC_SUBST([$1_FALSE])dnl
-_AM_SUBST_NOTMAKE([$1_TRUE])dnl
-_AM_SUBST_NOTMAKE([$1_FALSE])dnl
-m4_define([_AM_COND_VALUE_$1], [$2])dnl
-if $2; then
-  $1_TRUE=
-  $1_FALSE='#'
-else
-  $1_TRUE='#'
-  $1_FALSE=
-fi
-AC_CONFIG_COMMANDS_PRE(
-[if test -z "${$1_TRUE}" && test -z "${$1_FALSE}"; then
-  AC_MSG_ERROR([[conditional "$1" was never defined.
-Usually this means the macro was only invoked conditionally.]])
-fi])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depend.m4:26: -1- AC_DEFUN([_AM_DEPENDENCIES], [AC_REQUIRE([AM_SET_DEPDIR])dnl
-AC_REQUIRE([AM_OUTPUT_DEPENDENCY_COMMANDS])dnl
-AC_REQUIRE([AM_MAKE_INCLUDE])dnl
-AC_REQUIRE([AM_DEP_TRACK])dnl
-
-m4_if([$1], [CC],   [depcc="$CC"   am_compiler_list=],
-      [$1], [CXX],  [depcc="$CXX"  am_compiler_list=],
-      [$1], [OBJC], [depcc="$OBJC" am_compiler_list='gcc3 gcc'],
-      [$1], [OBJCXX], [depcc="$OBJCXX" am_compiler_list='gcc3 gcc'],
-      [$1], [UPC],  [depcc="$UPC"  am_compiler_list=],
-      [$1], [GCJ],  [depcc="$GCJ"  am_compiler_list='gcc3 gcc'],
-                    [depcc="$$1"   am_compiler_list=])
-
-AC_CACHE_CHECK([dependency style of $depcc],
-               [am_cv_$1_dependencies_compiler_type],
-[if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then
-  # We make a subdir and do the tests there.  Otherwise we can end up
-  # making bogus files that we don't know about and never remove.  For
-  # instance it was reported that on HP-UX the gcc test will end up
-  # making a dummy file named 'D' -- because '-MD' means "put the output
-  # in D".
-  rm -rf conftest.dir
-  mkdir conftest.dir
-  # Copy depcomp to subdir because otherwise we won't find it if we're
-  # using a relative directory.
-  cp "$am_depcomp" conftest.dir
-  cd conftest.dir
-  # We will build objects and dependencies in a subdirectory because
-  # it helps to detect inapplicable dependency modes.  For instance
-  # both Tru64's cc and ICC support -MD to output dependencies as a
-  # side effect of compilation, but ICC will put the dependencies in
-  # the current directory while Tru64 will put them in the object
-  # directory.
-  mkdir sub
-
-  am_cv_$1_dependencies_compiler_type=none
-  if test "$am_compiler_list" = ""; then
-     am_compiler_list=`sed -n ['s/^#*\([a-zA-Z0-9]*\))$/\1/p'] < ./depcomp`
-  fi
-  am__universal=false
-  m4_case([$1], [CC],
-    [case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac],
-    [CXX],
-    [case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac])
-
-  for depmode in $am_compiler_list; do
-    # Setup a source with many dependencies, because some compilers
-    # like to wrap large dependency lists on column 80 (with \), and
-    # we should not choose a depcomp mode which is confused by this.
-    #
-    # We need to recreate these files for each test, as the compiler may
-    # overwrite some of them when testing with obscure command lines.
-    # This happens at least with the AIX C compiler.
-    : > sub/conftest.c
-    for i in 1 2 3 4 5 6; do
-      echo '#include "conftst'$i'.h"' >> sub/conftest.c
-      # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with
-      # Solaris 10 /bin/sh.
-      echo '/* dummy */' > sub/conftst$i.h
-    done
-    echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
-
-    # We check with '-c' and '-o' for the sake of the "dashmstdout"
-    # mode.  It turns out that the SunPro C++ compiler does not properly
-    # handle '-M -o', and we need to detect this.  Also, some Intel
-    # versions had trouble with output in subdirs.
-    am__obj=sub/conftest.${OBJEXT-o}
-    am__minus_obj="-o $am__obj"
-    case $depmode in
-    gcc)
-      # This depmode causes a compiler race in universal mode.
-      test "$am__universal" = false || continue
-      ;;
-    nosideeffect)
-      # After this tag, mechanisms are not by side-effect, so they'll
-      # only be used when explicitly requested.
-      if test "x$enable_dependency_tracking" = xyes; then
-	continue
-      else
-	break
-      fi
-      ;;
-    msvc7 | msvc7msys | msvisualcpp | msvcmsys)
-      # This compiler won't grok '-c -o', but also, the minuso test has
-      # not run yet.  These depmodes are late enough in the game, and
-      # so weak that their functioning should not be impacted.
-      am__obj=conftest.${OBJEXT-o}
-      am__minus_obj=
-      ;;
-    none) break ;;
-    esac
-    if depmode=$depmode \
-       source=sub/conftest.c object=$am__obj \
-       depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
-       $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \
-         >/dev/null 2>conftest.err &&
-       grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep $am__obj sub/conftest.Po > /dev/null 2>&1 &&
-       ${MAKE-make} -s -f confmf > /dev/null 2>&1; then
-      # icc doesn't choke on unknown options, it will just issue warnings
-      # or remarks (even with -Werror).  So we grep stderr for any message
-      # that says an option was ignored or not supported.
-      # When given -MP, icc 7.0 and 7.1 complain thus:
-      #   icc: Command line warning: ignoring option '-M'; no argument required
-      # The diagnosis changed in icc 8.0:
-      #   icc: Command line remark: option '-MP' not supported
-      if (grep 'ignoring option' conftest.err ||
-          grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else
-        am_cv_$1_dependencies_compiler_type=$depmode
-        break
-      fi
-    fi
-  done
-
-  cd ..
-  rm -rf conftest.dir
-else
-  am_cv_$1_dependencies_compiler_type=none
-fi
-])
-AC_SUBST([$1DEPMODE], [depmode=$am_cv_$1_dependencies_compiler_type])
-AM_CONDITIONAL([am__fastdep$1], [
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_$1_dependencies_compiler_type" = gcc3])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depend.m4:163: -1- AC_DEFUN([AM_SET_DEPDIR], [AC_REQUIRE([AM_SET_LEADING_DOT])dnl
-AC_SUBST([DEPDIR], ["${am__leading_dot}deps"])dnl
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depend.m4:171: -1- AC_DEFUN([AM_DEP_TRACK], [AC_ARG_ENABLE([dependency-tracking], [dnl
-AS_HELP_STRING(
-  [--enable-dependency-tracking],
-  [do not reject slow dependency extractors])
-AS_HELP_STRING(
-  [--disable-dependency-tracking],
-  [speeds up one-time build])])
-if test "x$enable_dependency_tracking" != xno; then
-  am_depcomp="$ac_aux_dir/depcomp"
-  AMDEPBACKSLASH='\'
-  am__nodep='_no'
-fi
-AM_CONDITIONAL([AMDEP], [test "x$enable_dependency_tracking" != xno])
-AC_SUBST([AMDEPBACKSLASH])dnl
-_AM_SUBST_NOTMAKE([AMDEPBACKSLASH])dnl
-AC_SUBST([am__nodep])dnl
-_AM_SUBST_NOTMAKE([am__nodep])dnl
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depout.m4:11: -1- AC_DEFUN([_AM_OUTPUT_DEPENDENCY_COMMANDS], [{
-  # Older Autoconf quotes --file arguments for eval, but not when files
-  # are listed without --file.  Let's play safe and only enable the eval
-  # if we detect the quoting.
-  # TODO: see whether this extra hack can be removed once we start
-  # requiring Autoconf 2.70 or later.
-  AS_CASE([$CONFIG_FILES],
-          [*\'*], [eval set x "$CONFIG_FILES"],
-          [*], [set x $CONFIG_FILES])
-  shift
-  # Used to flag and report bootstrapping failures.
-  am_rc=0
-  for am_mf
-  do
-    # Strip MF so we end up with the name of the file.
-    am_mf=`AS_ECHO(["$am_mf"]) | sed -e 's/:.*$//'`
-    # Check whether this is an Automake generated Makefile which includes
-    # dependency-tracking related rules and includes.
-    # Grep'ing the whole file directly is not great: AIX grep has a line
-    # limit of 2048, but all sed's we know have understand at least 4000.
-    sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \
-      || continue
-    am_dirpart=`AS_DIRNAME(["$am_mf"])`
-    am_filepart=`AS_BASENAME(["$am_mf"])`
-    AM_RUN_LOG([cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles]) || am_rc=$?
-  done
-  if test $am_rc -ne 0; then
-    AC_MSG_FAILURE([Something went wrong bootstrapping makefile fragments
-    for automatic dependency tracking.  If GNU make was not used, consider
-    re-running the configure script with MAKE="gmake" (or whatever is
-    necessary).  You can also try re-running configure with the
-    '--disable-dependency-tracking' option to at least be able to build
-    the package (albeit without support for automatic dependency tracking).])
-  fi
-  AS_UNSET([am_dirpart])
-  AS_UNSET([am_filepart])
-  AS_UNSET([am_mf])
-  AS_UNSET([am_rc])
-  rm -f conftest-deps.mk
-}
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/depout.m4:64: -1- AC_DEFUN([AM_OUTPUT_DEPENDENCY_COMMANDS], [AC_CONFIG_COMMANDS([depfiles],
-     [test x"$AMDEP_TRUE" != x"" || _AM_OUTPUT_DEPENDENCY_COMMANDS],
-     [AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}"])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/init.m4:29: -1- AC_DEFUN([AM_INIT_AUTOMAKE], [AC_PREREQ([2.65])dnl
-m4_ifdef([_$0_ALREADY_INIT],
-  [m4_fatal([$0 expanded multiple times
-]m4_defn([_$0_ALREADY_INIT]))],
-  [m4_define([_$0_ALREADY_INIT], m4_expansion_stack)])dnl
-dnl Autoconf wants to disallow AM_ names.  We explicitly allow
-dnl the ones we care about.
-m4_pattern_allow([^AM_[A-Z]+FLAGS$])dnl
-AC_REQUIRE([AM_SET_CURRENT_AUTOMAKE_VERSION])dnl
-AC_REQUIRE([AC_PROG_INSTALL])dnl
-if test "`cd $srcdir && pwd`" != "`pwd`"; then
-  # Use -I$(srcdir) only when $(srcdir) != ., so that make's output
-  # is not polluted with repeated "-I."
-  AC_SUBST([am__isrc], [' -I$(srcdir)'])_AM_SUBST_NOTMAKE([am__isrc])dnl
-  # test to see if srcdir already configured
-  if test -f $srcdir/config.status; then
-    AC_MSG_ERROR([source directory already configured; run "make distclean" there first])
-  fi
-fi
-
-# test whether we have cygpath
-if test -z "$CYGPATH_W"; then
-  if (cygpath --version) >/dev/null 2>/dev/null; then
-    CYGPATH_W='cygpath -w'
-  else
-    CYGPATH_W=echo
-  fi
-fi
-AC_SUBST([CYGPATH_W])
-
-# Define the identity of the package.
-dnl Distinguish between old-style and new-style calls.
-m4_ifval([$2],
-[AC_DIAGNOSE([obsolete],
-             [$0: two- and three-arguments forms are deprecated.])
-m4_ifval([$3], [_AM_SET_OPTION([no-define])])dnl
- AC_SUBST([PACKAGE], [$1])dnl
- AC_SUBST([VERSION], [$2])],
-[_AM_SET_OPTIONS([$1])dnl
-dnl Diagnose old-style AC_INIT with new-style AM_AUTOMAKE_INIT.
-m4_if(
-  m4_ifset([AC_PACKAGE_NAME], [ok]):m4_ifset([AC_PACKAGE_VERSION], [ok]),
-  [ok:ok],,
-  [m4_fatal([AC_INIT should be called with package and version arguments])])dnl
- AC_SUBST([PACKAGE], ['AC_PACKAGE_TARNAME'])dnl
- AC_SUBST([VERSION], ['AC_PACKAGE_VERSION'])])dnl
-
-_AM_IF_OPTION([no-define],,
-[AC_DEFINE_UNQUOTED([PACKAGE], ["$PACKAGE"], [Name of package])
- AC_DEFINE_UNQUOTED([VERSION], ["$VERSION"], [Version number of package])])dnl
-
-# Some tools Automake needs.
-AC_REQUIRE([AM_SANITY_CHECK])dnl
-AC_REQUIRE([AC_ARG_PROGRAM])dnl
-AM_MISSING_PROG([ACLOCAL], [aclocal-${am__api_version}])
-AM_MISSING_PROG([AUTOCONF], [autoconf])
-AM_MISSING_PROG([AUTOMAKE], [automake-${am__api_version}])
-AM_MISSING_PROG([AUTOHEADER], [autoheader])
-AM_MISSING_PROG([MAKEINFO], [makeinfo])
-AC_REQUIRE([AM_PROG_INSTALL_SH])dnl
-AC_REQUIRE([AM_PROG_INSTALL_STRIP])dnl
-AC_REQUIRE([AC_PROG_MKDIR_P])dnl
-# For better backward compatibility.  To be removed once Automake 1.9.x
-# dies out for good.  For more background, see:
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00001.html>
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00014.html>
-AC_SUBST([mkdir_p], ['$(MKDIR_P)'])
-# We need awk for the "check" target (and possibly the TAP driver).  The
-# system "awk" is bad on some platforms.
-AC_REQUIRE([AC_PROG_AWK])dnl
-AC_REQUIRE([AC_PROG_MAKE_SET])dnl
-AC_REQUIRE([AM_SET_LEADING_DOT])dnl
-_AM_IF_OPTION([tar-ustar], [_AM_PROG_TAR([ustar])],
-  [_AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])],
-    [_AM_IF_OPTION([tar-v7], [_AM_PROG_TAR([v7])],
-      [_AM_PROG_TAR([ustar])])])])
-_AM_IF_OPTION([no-dependencies],,
-[AC_PROVIDE_IFELSE([AC_PROG_CC],
-		  [_AM_DEPENDENCIES([CC])],
-		  [m4_define([AC_PROG_CC],
-			     m4_defn([AC_PROG_CC])[_AM_DEPENDENCIES([CC])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_CXX],
-		  [_AM_DEPENDENCIES([CXX])],
-		  [m4_define([AC_PROG_CXX],
-			     m4_defn([AC_PROG_CXX])[_AM_DEPENDENCIES([CXX])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_OBJC],
-		  [_AM_DEPENDENCIES([OBJC])],
-		  [m4_define([AC_PROG_OBJC],
-			     m4_defn([AC_PROG_OBJC])[_AM_DEPENDENCIES([OBJC])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_OBJCXX],
-		  [_AM_DEPENDENCIES([OBJCXX])],
-		  [m4_define([AC_PROG_OBJCXX],
-			     m4_defn([AC_PROG_OBJCXX])[_AM_DEPENDENCIES([OBJCXX])])])dnl
-])
-# Variables for tags utilities; see am/tags.am
-if test -z "$CTAGS"; then
-  CTAGS=ctags
-fi
-AC_SUBST([CTAGS])
-if test -z "$ETAGS"; then
-  ETAGS=etags
-fi
-AC_SUBST([ETAGS])
-if test -z "$CSCOPE"; then
-  CSCOPE=cscope
-fi
-AC_SUBST([CSCOPE])
-
-AC_REQUIRE([_AM_SILENT_RULES])dnl
-dnl The testsuite driver may need to know about EXEEXT, so add the
-dnl 'am__EXEEXT' conditional if _AM_COMPILER_EXEEXT was seen.  This
-dnl macro is hooked onto _AC_COMPILER_EXEEXT early, see below.
-AC_CONFIG_COMMANDS_PRE(dnl
-[m4_provide_if([_AM_COMPILER_EXEEXT],
-  [AM_CONDITIONAL([am__EXEEXT], [test -n "$EXEEXT"])])])dnl
-
-AC_REQUIRE([_AM_PROG_RM_F])
-AC_REQUIRE([_AM_PROG_XARGS_N])
-
-dnl The trailing newline in this macro's definition is deliberate, for
-dnl backward compatibility and to allow trailing 'dnl'-style comments
-dnl after the AM_INIT_AUTOMAKE invocation. See automake bug#16841.
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/init.m4:167: -1- AC_DEFUN([_AC_AM_CONFIG_HEADER_HOOK], [# Compute $1's index in $config_headers.
-_am_arg=$1
-_am_stamp_count=1
-for _am_header in $config_headers :; do
-  case $_am_header in
-    $_am_arg | $_am_arg:* )
-      break ;;
-    * )
-      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
-  esac
-done
-echo "timestamp for $_am_arg" >`AS_DIRNAME(["$_am_arg"])`/stamp-h[]$_am_stamp_count])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/install-sh.m4:11: -1- AC_DEFUN([AM_PROG_INSTALL_SH], [AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-if test x"${install_sh+set}" != xset; then
-  case $am_aux_dir in
-  *\ * | *\	*)
-    install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;;
-  *)
-    install_sh="\${SHELL} $am_aux_dir/install-sh"
-  esac
-fi
-AC_SUBST([install_sh])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/lead-dot.m4:10: -1- AC_DEFUN([AM_SET_LEADING_DOT], [rm -rf .tst 2>/dev/null
-mkdir .tst 2>/dev/null
-if test -d .tst; then
-  am__leading_dot=.
-else
-  am__leading_dot=_
-fi
-rmdir .tst 2>/dev/null
-AC_SUBST([am__leading_dot])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/make.m4:13: -1- AC_DEFUN([AM_MAKE_INCLUDE], [AC_MSG_CHECKING([whether ${MAKE-make} supports the include directive])
-cat > confinc.mk << 'END'
-am__doit:
-	@echo this is the am__doit target >confinc.out
-.PHONY: am__doit
-END
-am__include="#"
-am__quote=
-# BSD make does it like this.
-echo '.include "confinc.mk" # ignored' > confmf.BSD
-# Other make implementations (GNU, Solaris 10, AIX) do it like this.
-echo 'include confinc.mk # ignored' > confmf.GNU
-_am_result=no
-for s in GNU BSD; do
-  AM_RUN_LOG([${MAKE-make} -f confmf.$s && cat confinc.out])
-  AS_CASE([$?:`cat confinc.out 2>/dev/null`],
-      ['0:this is the am__doit target'],
-      [AS_CASE([$s],
-          [BSD], [am__include='.include' am__quote='"'],
-          [am__include='include' am__quote=''])])
-  if test "$am__include" != "#"; then
-    _am_result="yes ($s style)"
-    break
-  fi
-done
-rm -f confinc.* confmf.*
-AC_MSG_RESULT([${_am_result}])
-AC_SUBST([am__include])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/make.m4:42: -1- m4_pattern_allow([^am__quote$])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/missing.m4:11: -1- AC_DEFUN([AM_MISSING_PROG], [AC_REQUIRE([AM_MISSING_HAS_RUN])
-$1=${$1-"${am_missing_run}$2"}
-AC_SUBST($1)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/missing.m4:20: -1- AC_DEFUN([AM_MISSING_HAS_RUN], [AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-AC_REQUIRE_AUX_FILE([missing])dnl
-if test x"${MISSING+set}" != xset; then
-  MISSING="\${SHELL} '$am_aux_dir/missing'"
-fi
-# Use eval to expand $SHELL
-if eval "$MISSING --is-lightweight"; then
-  am_missing_run="$MISSING "
-else
-  am_missing_run=
-  AC_MSG_WARN(['missing' script is too old or missing])
-fi
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/options.m4:11: -1- AC_DEFUN([_AM_MANGLE_OPTION], [[_AM_OPTION_]m4_bpatsubst($1, [[^a-zA-Z0-9_]], [_])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/options.m4:17: -1- AC_DEFUN([_AM_SET_OPTION], [m4_define(_AM_MANGLE_OPTION([$1]), [1])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/options.m4:23: -1- AC_DEFUN([_AM_SET_OPTIONS], [m4_foreach_w([_AM_Option], [$1], [_AM_SET_OPTION(_AM_Option)])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/options.m4:29: -1- AC_DEFUN([_AM_IF_OPTION], [m4_ifset(_AM_MANGLE_OPTION([$1]), [$2], [$3])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/prog-cc-c-o.m4:12: -1- AC_DEFUN([_AM_PROG_CC_C_O], [AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-AC_REQUIRE_AUX_FILE([compile])dnl
-AC_LANG_PUSH([C])dnl
-AC_CACHE_CHECK(
-  [whether $CC understands -c and -o together],
-  [am_cv_prog_cc_c_o],
-  [AC_LANG_CONFTEST([AC_LANG_PROGRAM([])])
-  # Make sure it works both with $CC and with simple cc.
-  # Following AC_PROG_CC_C_O, we do the test twice because some
-  # compilers refuse to overwrite an existing .o file with -o,
-  # though they will create one.
-  am_cv_prog_cc_c_o=yes
-  for am_i in 1 2; do
-    if AM_RUN_LOG([$CC -c conftest.$ac_ext -o conftest2.$ac_objext]) \
-         && test -f conftest2.$ac_objext; then
-      : OK
-    else
-      am_cv_prog_cc_c_o=no
-      break
-    fi
-  done
-  # aligned with autoconf, so not including core; see bug#72225.
-  rm -f -r a.out a.exe b.out conftest.$ac_ext conftest.$ac_objext \
-    conftest.dSYM conftest1.$ac_ext conftest1.$ac_objext conftest1.dSYM \
-    conftest2.$ac_ext conftest2.$ac_objext conftest2.dSYM
-  unset am_i])
-if test "$am_cv_prog_cc_c_o" != yes; then
-   # Losing compiler, so override with the script.
-   # FIXME: It is wrong to rewrite CC.
-   # But if we don't then we get into trouble of one sort or another.
-   # A longer-term fix would be to have automake use am__CC in this case,
-   # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)"
-   CC="$am_aux_dir/compile $CC"
-fi
-AC_LANG_POP([C])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/prog-cc-c-o.m4:50: -1- AC_DEFUN_ONCE([AM_PROG_CC_C_O], [AC_REQUIRE([AC_PROG_CC])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/rmf.m4:12: -1- AC_DEFUN([_AM_PROG_RM_F], [am__rm_f_notfound=
-AS_IF([(rm -f && rm -fr && rm -rf) 2>/dev/null], [], [am__rm_f_notfound='""'])
-AC_SUBST(am__rm_f_notfound)
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/runlog.m4:12: -1- AC_DEFUN([AM_RUN_LOG], [{ echo "$as_me:$LINENO: $1" >&AS_MESSAGE_LOG_FD
-   ($1) >&AS_MESSAGE_LOG_FD 2>&AS_MESSAGE_LOG_FD
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
-   (exit $ac_status); }])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/sanity.m4:11: -1- AC_DEFUN([_AM_SLEEP_FRACTIONAL_SECONDS], [dnl
-AC_CACHE_CHECK([whether sleep supports fractional seconds],
-               am_cv_sleep_fractional_seconds, [dnl
-AS_IF([sleep 0.001 2>/dev/null], [am_cv_sleep_fractional_seconds=yes],
-                                 [am_cv_sleep_fractional_seconds=no])
-])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/sanity.m4:28: -1- AC_DEFUN([_AM_FILESYSTEM_TIMESTAMP_RESOLUTION], [dnl
-AC_REQUIRE([_AM_SLEEP_FRACTIONAL_SECONDS])
-AC_CACHE_CHECK([filesystem timestamp resolution],
-               am_cv_filesystem_timestamp_resolution, [dnl
-# Default to the worst case.
-am_cv_filesystem_timestamp_resolution=2
-
-# Only try to go finer than 1 sec if sleep can do it.
-# Don't try 1 sec, because if 0.01 sec and 0.1 sec don't work,
-# - 1 sec is not much of a win compared to 2 sec, and
-# - it takes 2 seconds to perform the test whether 1 sec works.
-# 
-# Instead, just use the default 2s on platforms that have 1s resolution,
-# accept the extra 1s delay when using $sleep in the Automake tests, in
-# exchange for not incurring the 2s delay for running the test for all
-# packages.
-#
-am_try_resolutions=
-if test "$am_cv_sleep_fractional_seconds" = yes; then
-  # Even a millisecond often causes a bunch of false positives,
-  # so just try a hundredth of a second. The time saved between .001 and
-  # .01 is not terribly consequential.
-  am_try_resolutions="0.01 0.1 $am_try_resolutions"
-fi
-
-# In order to catch current-generation FAT out, we must *modify* files
-# that already exist; the *creation* timestamp is finer.  Use names
-# that make ls -t sort them differently when they have equal
-# timestamps than when they have distinct timestamps, keeping
-# in mind that ls -t prints the *newest* file first.
-rm -f conftest.ts?
-: > conftest.ts1
-: > conftest.ts2
-: > conftest.ts3
-
-# Make sure ls -t actually works.  Do 'set' in a subshell so we don't
-# clobber the current shell's arguments. (Outer-level square brackets
-# are removed by m4; they're present so that m4 does not expand
-# <dollar><star>; be careful, easy to get confused.)
-if (
-     set X `[ls -t conftest.ts[12]]` &&
-     {
-       test "$[]*" != "X conftest.ts1 conftest.ts2" ||
-       test "$[]*" != "X conftest.ts2 conftest.ts1";
-     }
-); then :; else
-  # If neither matched, then we have a broken ls.  This can happen
-  # if, for instance, CONFIG_SHELL is bash and it inherits a
-  # broken ls alias from the environment.  This has actually
-  # happened.  Such a system could not be considered "sane".
-  _AS_ECHO_UNQUOTED(
-    ["Bad output from ls -t: \"`[ls -t conftest.ts[12]]`\""],
-    [AS_MESSAGE_LOG_FD])
-  AC_MSG_FAILURE([ls -t produces unexpected output.
-Make sure there is not a broken ls alias in your environment.])
-fi
-
-for am_try_res in $am_try_resolutions; do
-  # Any one fine-grained sleep might happen to cross the boundary
-  # between two values of a coarser actual resolution, but if we do
-  # two fine-grained sleeps in a row, at least one of them will fall
-  # entirely within a coarse interval.
-  echo alpha > conftest.ts1
-  sleep $am_try_res
-  echo beta > conftest.ts2
-  sleep $am_try_res
-  echo gamma > conftest.ts3
-
-  # We assume that 'ls -t' will make use of high-resolution
-  # timestamps if the operating system supports them at all.
-  if (set X `ls -t conftest.ts?` &&
-      test "$[]2" = conftest.ts3 &&
-      test "$[]3" = conftest.ts2 &&
-      test "$[]4" = conftest.ts1); then
-    #
-    # Ok, ls -t worked. If we're at a resolution of 1 second, we're done,
-    # because we don't need to test make.
-    make_ok=true
-    if test $am_try_res != 1; then
-      # But if we've succeeded so far with a subsecond resolution, we
-      # have one more thing to check: make. It can happen that
-      # everything else supports the subsecond mtimes, but make doesn't;
-      # notably on macOS, which ships make 3.81 from 2006 (the last one
-      # released under GPLv2). https://bugs.gnu.org/68808
-      # 
-      # We test $MAKE if it is defined in the environment, else "make".
-      # It might get overridden later, but our hope is that in practice
-      # it does not matter: it is the system "make" which is (by far)
-      # the most likely to be broken, whereas if the user overrides it,
-      # probably they did so with a better, or at least not worse, make.
-      # https://lists.gnu.org/archive/html/automake/2024-06/msg00051.html
-      #
-      # Create a Makefile (real tab character here):
-      rm -f conftest.mk
-      echo 'conftest.ts1: conftest.ts2' >conftest.mk
-      echo '	touch conftest.ts2' >>conftest.mk
-      #
-      # Now, running
-      #   touch conftest.ts1; touch conftest.ts2; make
-      # should touch ts1 because ts2 is newer. This could happen by luck,
-      # but most often, it will fail if make's support is insufficient. So
-      # test for several consecutive successes.
-      #
-      # (We reuse conftest.ts[12] because we still want to modify existing
-      # files, not create new ones, per above.)
-      n=0
-      make=${MAKE-make}
-      until test $n -eq 3; do
-        echo one > conftest.ts1
-        sleep $am_try_res
-        echo two > conftest.ts2 # ts2 should now be newer than ts1
-        if $make -f conftest.mk | grep 'up to date' >/dev/null; then
-          make_ok=false
-          break # out of $n loop
-        fi
-        n=`expr $n + 1`
-      done
-    fi
-    #
-    if $make_ok; then
-      # Everything we know to check worked out, so call this resolution good.
-      am_cv_filesystem_timestamp_resolution=$am_try_res
-      break # out of $am_try_res loop
-    fi
-    # Otherwise, we'll go on to check the next resolution.
-  fi
-done
-rm -f conftest.ts?
-# (end _am_filesystem_timestamp_resolution)
-])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/sanity.m4:161: -1- AC_DEFUN([AM_SANITY_CHECK], [AC_REQUIRE([_AM_FILESYSTEM_TIMESTAMP_RESOLUTION])
-# This check should not be cached, as it may vary across builds of
-# different projects.
-AC_MSG_CHECKING([whether build environment is sane])
-# Reject unsafe characters in $srcdir or the absolute working directory
-# name.  Accept space and tab only in the latter.
-am_lf='
-'
-case `pwd` in
-  *[[\\\"\#\$\&\'\`$am_lf]]*)
-    AC_MSG_RESULT([no])
-    AC_MSG_ERROR([unsafe absolute working directory name]);;
-esac
-case $srcdir in
-  *[[\\\"\#\$\&\'\`$am_lf\ \	]]*)
-    AC_MSG_RESULT([no])
-    AC_MSG_ERROR([unsafe srcdir value: '$srcdir']);;
-esac
-
-# Do 'set' in a subshell so we don't clobber the current shell's
-# arguments.  Must try -L first in case configure is actually a
-# symlink; some systems play weird games with the mod time of symlinks
-# (eg FreeBSD returns the mod time of the symlink's containing
-# directory).
-am_build_env_is_sane=no
-am_has_slept=no
-rm -f conftest.file
-for am_try in 1 2; do
-  echo "timestamp, slept: $am_has_slept" > conftest.file
-  if (
-    set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null`
-    if test "$[]*" = "X"; then
-      # -L didn't work.
-      set X `ls -t "$srcdir/configure" conftest.file`
-    fi
-    test "$[]2" = conftest.file
-  ); then
-    am_build_env_is_sane=yes
-    break
-  fi
-  # Just in case.
-  sleep "$am_cv_filesystem_timestamp_resolution"
-  am_has_slept=yes
-done
-
-AC_MSG_RESULT([$am_build_env_is_sane])
-if test "$am_build_env_is_sane" = no; then
-  AC_MSG_ERROR([newly created file is older than distributed files!
-Check your system clock])
-fi
-
-# If we didn't sleep, we still need to ensure time stamps of config.status and
-# generated files are strictly newer.
-am_sleep_pid=
-AS_IF([test -e conftest.file || grep 'slept: no' conftest.file >/dev/null 2>&1],, [dnl
-  ( sleep "$am_cv_filesystem_timestamp_resolution" ) &
-  am_sleep_pid=$!
-])
-AC_CONFIG_COMMANDS_PRE(
-  [AC_MSG_CHECKING([that generated files are newer than configure])
-   if test -n "$am_sleep_pid"; then
-     # Hide warnings about reused PIDs.
-     wait $am_sleep_pid 2>/dev/null
-   fi
-   AC_MSG_RESULT([done])])
-rm -f conftest.file
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/silent.m4:11: -1- AC_DEFUN([_AM_SILENT_RULES], [AM_DEFAULT_VERBOSITY=1
-AC_ARG_ENABLE([silent-rules], [dnl
-AS_HELP_STRING(
-  [--enable-silent-rules],
-  [less verbose build output (undo: "make V=1")])
-AS_HELP_STRING(
-  [--disable-silent-rules],
-  [verbose build output (undo: "make V=0")])dnl
-])
-dnl
-dnl A few 'make' implementations (e.g., NonStop OS and NextStep)
-dnl do not support nested variable expansions.
-dnl See automake bug#9928 and bug#10237.
-am_make=${MAKE-make}
-AC_CACHE_CHECK([whether $am_make supports nested variables],
-   [am_cv_make_support_nested_variables],
-   [if AS_ECHO([['TRUE=$(BAR$(V))
-BAR0=false
-BAR1=true
-V=1
-am__doit:
-	@$(TRUE)
-.PHONY: am__doit']]) | $am_make -f - >/dev/null 2>&1; then
-  am_cv_make_support_nested_variables=yes
-else
-  am_cv_make_support_nested_variables=no
-fi])
-AC_SUBST([AM_V])dnl
-AM_SUBST_NOTMAKE([AM_V])dnl
-AC_SUBST([AM_DEFAULT_V])dnl
-AM_SUBST_NOTMAKE([AM_DEFAULT_V])dnl
-AC_SUBST([AM_DEFAULT_VERBOSITY])dnl
-AM_BACKSLASH='\'
-AC_SUBST([AM_BACKSLASH])dnl
-_AM_SUBST_NOTMAKE([AM_BACKSLASH])dnl
-dnl Delay evaluation of AM_DEFAULT_VERBOSITY to the end to allow multiple calls
-dnl to AM_SILENT_RULES to change the default value.
-AC_CONFIG_COMMANDS_PRE([dnl
-case $enable_silent_rules in @%:@ (((
-  yes) AM_DEFAULT_VERBOSITY=0;;
-   no) AM_DEFAULT_VERBOSITY=1;;
-esac
-if test $am_cv_make_support_nested_variables = yes; then
-  dnl Using '$V' instead of '$(V)' breaks IRIX make.
-  AM_V='$(V)'
-  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-else
-  AM_V=$AM_DEFAULT_VERBOSITY
-  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
-fi
-])dnl
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/silent.m4:69: -1- AC_DEFUN([AM_SILENT_RULES], [AC_REQUIRE([_AM_SILENT_RULES])
-AM_DEFAULT_VERBOSITY=m4_if([$1], [yes], [0], [1])m4_newline
-dnl We intentionally force a newline after the assignment, since a) nothing
-dnl good can come of more text following, and b) that was the behavior
-dnl before 1.17. See https://bugs.gnu.org/72267.
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/strip.m4:17: -1- AC_DEFUN([AM_PROG_INSTALL_STRIP], [AC_REQUIRE([AM_PROG_INSTALL_SH])dnl
-# Installed binaries are usually stripped using 'strip' when the user
-# run "make install-strip".  However 'strip' might not be the right
-# tool to use in cross-compilation environments, therefore Automake
-# will honor the 'STRIP' environment variable to overrule this program.
-dnl Don't test for $cross_compiling = yes, because it might be 'maybe'.
-if test "$cross_compiling" != no; then
-  AC_CHECK_TOOL([STRIP], [strip], :)
-fi
-INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s"
-AC_SUBST([INSTALL_STRIP_PROGRAM])])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/substnot.m4:12: -1- AC_DEFUN([_AM_SUBST_NOTMAKE])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/substnot.m4:17: -1- AC_DEFUN([AM_SUBST_NOTMAKE], [_AM_SUBST_NOTMAKE($@)])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/tar.m4:23: -1- AC_DEFUN([_AM_PROG_TAR], [# Always define AMTAR for backward compatibility.  Yes, it's still used
-# in the wild :-(  We should find a proper way to deprecate it ...
-AC_SUBST([AMTAR], ['$${TAR-tar}'])
-
-# We'll loop over all known methods to create a tar archive until one works.
-_am_tools='gnutar m4_if([$1], [ustar], [plaintar]) pax cpio none'
-
-m4_if([$1], [v7],
-  [am__tar='$${TAR-tar} chof - "$$tardir"' am__untar='$${TAR-tar} xf -'],
-
-  [m4_case([$1],
-    [ustar],
-     [# The POSIX 1988 'ustar' format is defined with fixed-size fields.
-      # There is notably a 21 bits limit for the UID and the GID.  In fact,
-      # the 'pax' utility can hang on bigger UID/GID (see automake bug#8343
-      # and bug#13588).
-      am_max_uid=2097151 # 2^21 - 1
-      am_max_gid=$am_max_uid
-      # The $UID and $GID variables are not portable, so we need to resort
-      # to the POSIX-mandated id(1) utility.  Errors in the 'id' calls
-      # below are definitely unexpected, so allow the users to see them
-      # (that is, avoid stderr redirection).
-      am_uid=`id -u || echo unknown`
-      am_gid=`id -g || echo unknown`
-      AC_MSG_CHECKING([whether UID '$am_uid' is supported by ustar format])
-      if test x$am_uid = xunknown; then
-        AC_MSG_WARN([ancient id detected; assuming current UID is ok, but dist-ustar might not work])
-      elif test $am_uid -le $am_max_uid; then
-        AC_MSG_RESULT([yes])
-      else
-        AC_MSG_RESULT([no])
-        _am_tools=none
-      fi
-      AC_MSG_CHECKING([whether GID '$am_gid' is supported by ustar format])
-      if test x$gm_gid = xunknown; then
-        AC_MSG_WARN([ancient id detected; assuming current GID is ok, but dist-ustar might not work])
-      elif test $am_gid -le $am_max_gid; then
-        AC_MSG_RESULT([yes])
-      else
-        AC_MSG_RESULT([no])
-        _am_tools=none
-      fi],
-
-  [pax],
-    [],
-
-  [m4_fatal([Unknown tar format])])
-
-  AC_MSG_CHECKING([how to create a $1 tar archive])
-
-  # Go ahead even if we have the value already cached.  We do so because we
-  # need to set the values for the 'am__tar' and 'am__untar' variables.
-  _am_tools=${am_cv_prog_tar_$1-$_am_tools}
-
-  for _am_tool in $_am_tools; do
-    case $_am_tool in
-    gnutar)
-      for _am_tar in tar gnutar gtar; do
-        AM_RUN_LOG([$_am_tar --version]) && break
-      done
-      am__tar="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$$tardir"'
-      am__tar_="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$tardir"'
-      am__untar="$_am_tar -xf -"
-      ;;
-    plaintar)
-      # Must skip GNU tar: if it does not support --format= it doesn't create
-      # ustar tarball either.
-      (tar --version) >/dev/null 2>&1 && continue
-      am__tar='tar chf - "$$tardir"'
-      am__tar_='tar chf - "$tardir"'
-      am__untar='tar xf -'
-      ;;
-    pax)
-      am__tar='pax -L -x $1 -w "$$tardir"'
-      am__tar_='pax -L -x $1 -w "$tardir"'
-      am__untar='pax -r'
-      ;;
-    cpio)
-      am__tar='find "$$tardir" -print | cpio -o -H $1 -L'
-      am__tar_='find "$tardir" -print | cpio -o -H $1 -L'
-      am__untar='cpio -i -H $1 -d'
-      ;;
-    none)
-      am__tar=false
-      am__tar_=false
-      am__untar=false
-      ;;
-    esac
-
-    # If the value was cached, stop now.  We just wanted to have am__tar
-    # and am__untar set.
-    test -n "${am_cv_prog_tar_$1}" && break
-
-    # tar/untar a dummy directory, and stop if the command works.
-    rm -rf conftest.dir
-    mkdir conftest.dir
-    echo GrepMe > conftest.dir/file
-    AM_RUN_LOG([tardir=conftest.dir && eval $am__tar_ >conftest.tar])
-    rm -rf conftest.dir
-    if test -s conftest.tar; then
-      AM_RUN_LOG([$am__untar <conftest.tar])
-      AM_RUN_LOG([cat conftest.dir/file])
-      grep GrepMe conftest.dir/file >/dev/null 2>&1 && break
-    fi
-  done
-  rm -rf conftest.dir
-
-  AC_CACHE_VAL([am_cv_prog_tar_$1], [am_cv_prog_tar_$1=$_am_tool])
-  AC_MSG_RESULT([$am_cv_prog_tar_$1])])
-
-AC_SUBST([am__tar])
-AC_SUBST([am__untar])
-])
-m4trace:/home/linuxbrew/.linuxbrew/share/aclocal-1.18/xargsn.m4:12: -1- AC_DEFUN([_AM_PROG_XARGS_N], [AC_CACHE_CHECK([xargs -n works], am_cv_xargs_n_works, [dnl
-AS_IF([test "`echo 1 2 3 | xargs -n2 echo`" = "1 2
-3"], [am_cv_xargs_n_works=yes], [am_cv_xargs_n_works=no])])
-AS_IF([test "$am_cv_xargs_n_works" = yes], [am__xargs_n='xargs -n'], [dnl
-  am__xargs_n='am__xargs_n () { shift; sed "s/ /\\n/g" | while read am__xargs_n_arg; do "$@" "$am__xargs_n_arg"; done; }'
-])dnl
-AC_SUBST(am__xargs_n)
-])
-m4trace:m4/ax_gcc_builtin.m4:95: -1- AC_DEFUN([AX_GCC_BUILTIN], [
-    AS_VAR_PUSHDEF([ac_var], [ax_cv_have_$1])
-
-    AC_CACHE_CHECK([for $1], [ac_var], [
-        AC_LINK_IFELSE([AC_LANG_PROGRAM([], [
-            m4_case([$1],
-                [__builtin_assume_aligned], [$1("", 0)],
-                [__builtin_bswap32], [$1(0)],
-                [__builtin_bswap64], [$1(0)],
-                [__builtin_choose_expr], [$1(0, 0, 0)],
-                [__builtin___clear_cache], [$1("", "")],
-                [__builtin_clrsb], [$1(0)],
-                [__builtin_clrsbl], [$1(0)],
-                [__builtin_clrsbll], [$1(0)],
-                [__builtin_clz], [$1(0)],
-                [__builtin_clzl], [$1(0)],
-                [__builtin_clzll], [$1(0)],
-                [__builtin_complex], [$1(0.0, 0.0)],
-                [__builtin_constant_p], [$1(0)],
-                [__builtin_ctz], [$1(0)],
-                [__builtin_ctzl], [$1(0)],
-                [__builtin_ctzll], [$1(0)],
-                [__builtin_expect], [$1(0, 0)],
-                [__builtin_ffs], [$1(0)],
-                [__builtin_ffsl], [$1(0)],
-                [__builtin_ffsll], [$1(0)],
-                [__builtin_fpclassify], [$1(0, 1, 2, 3, 4, 0.0)],
-                [__builtin_huge_val], [$1()],
-                [__builtin_huge_valf], [$1()],
-                [__builtin_huge_vall], [$1()],
-                [__builtin_inf], [$1()],
-                [__builtin_infd128], [$1()],
-                [__builtin_infd32], [$1()],
-                [__builtin_infd64], [$1()],
-                [__builtin_inff], [$1()],
-                [__builtin_infl], [$1()],
-                [__builtin_isinf_sign], [$1(0.0)],
-                [__builtin_nan], [$1("")],
-                [__builtin_nand128], [$1("")],
-                [__builtin_nand32], [$1("")],
-                [__builtin_nand64], [$1("")],
-                [__builtin_nanf], [$1("")],
-                [__builtin_nanl], [$1("")],
-                [__builtin_nans], [$1("")],
-                [__builtin_nansf], [$1("")],
-                [__builtin_nansl], [$1("")],
-                [__builtin_object_size], [$1("", 0)],
-                [__builtin_parity], [$1(0)],
-                [__builtin_parityl], [$1(0)],
-                [__builtin_parityll], [$1(0)],
-                [__builtin_popcount], [$1(0)],
-                [__builtin_popcountl], [$1(0)],
-                [__builtin_popcountll], [$1(0)],
-                [__builtin_powi], [$1(0, 0)],
-                [__builtin_powif], [$1(0, 0)],
-                [__builtin_powil], [$1(0, 0)],
-                [__builtin_prefetch], [$1("")],
-                [__builtin_trap], [$1()],
-                [__builtin_types_compatible_p], [$1(int, int)],
-                [__builtin_unreachable], [$1()],
-                [m4_warn([syntax], [Unsupported built-in $1, the test may fail])
-                 $1()]
-            )
-            ])],
-            [AS_VAR_SET([ac_var], [yes])],
-            [AS_VAR_SET([ac_var], [no])])
-    ])
-
-    AS_IF([test yes = AS_VAR_GET([ac_var])],
-        [AC_DEFINE_UNQUOTED(AS_TR_CPP(HAVE_$1), 1,
-            [Define to 1 if the system has the `$1' built-in function])], [])
-
-    AS_VAR_POPDEF([ac_var])
-])
-m4trace:m4/libtool.m4:62: -1- AC_DEFUN([LT_INIT], [AC_PREREQ([2.64])dnl We use AC_PATH_PROGS_FEATURE_CHECK
-AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl
-AC_BEFORE([$0], [LT_LANG])dnl
-AC_BEFORE([$0], [LT_OUTPUT])dnl
-AC_BEFORE([$0], [LTDL_INIT])dnl
-m4_require([_LT_CHECK_BUILDDIR])dnl
-
-dnl Autoconf doesn't catch unexpanded LT_ macros by default:
-m4_pattern_forbid([^_?LT_[A-Z_]+$])dnl
-m4_pattern_allow([^(_LT_EOF|LT_DLGLOBAL|LT_DLLAZY_OR_NOW|LT_MULTI_MODULE)$])dnl
-dnl aclocal doesn't pull ltoptions.m4, ltsugar.m4, or ltversion.m4
-dnl unless we require an AC_DEFUNed macro:
-AC_REQUIRE([LTOPTIONS_VERSION])dnl
-AC_REQUIRE([LTSUGAR_VERSION])dnl
-AC_REQUIRE([LTVERSION_VERSION])dnl
-AC_REQUIRE([LTOBSOLETE_VERSION])dnl
-m4_require([_LT_PROG_LTMAIN])dnl
-
-_LT_SHELL_INIT([SHELL=${CONFIG_SHELL-/bin/sh}])
-
-dnl Parse OPTIONS
-_LT_SET_OPTIONS([$0], [$1])
-
-# This can be used to rebuild libtool when needed
-LIBTOOL_DEPS=$ltmain
-
-# Always use our own libtool.
-LIBTOOL='$(SHELL) $(top_builddir)/libtool'
-AC_SUBST(LIBTOOL)dnl
-
-_LT_SETUP
-
-# Only expand once:
-m4_define([LT_INIT])
-])
-m4trace:m4/libtool.m4:100: -1- AU_DEFUN([AC_PROG_LIBTOOL], [m4_if($#, 0, [LT_INIT], [LT_INIT($@)])], [], [])
-m4trace:m4/libtool.m4:100: -1- AC_DEFUN([AC_PROG_LIBTOOL], [m4_warn([obsolete], [The macro 'AC_PROG_LIBTOOL' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_INIT], [LT_INIT($@)])])
-m4trace:m4/libtool.m4:101: -1- AU_DEFUN([AM_PROG_LIBTOOL], [m4_if($#, 0, [LT_INIT], [LT_INIT($@)])], [], [])
-m4trace:m4/libtool.m4:101: -1- AC_DEFUN([AM_PROG_LIBTOOL], [m4_warn([obsolete], [The macro 'AM_PROG_LIBTOOL' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_INIT], [LT_INIT($@)])])
-m4trace:m4/libtool.m4:621: -1- AC_DEFUN([LT_OUTPUT], [: ${CONFIG_LT=./config.lt}
-AC_MSG_NOTICE([creating $CONFIG_LT])
-_LT_GENERATED_FILE_INIT(["$CONFIG_LT"],
-[# Run this file to recreate a libtool stub with the current configuration.])
-
-cat >>"$CONFIG_LT" <<\_LTEOF
-lt_cl_silent=false
-exec AS_MESSAGE_LOG_FD>>config.log
-{
-  echo
-  AS_BOX([Running $as_me.])
-} >&AS_MESSAGE_LOG_FD
-
-lt_cl_help="\
-'$as_me' creates a local libtool stub from the current configuration,
-for use in further configure time tests before the real libtool is
-generated.
-
-Usage: $[0] [[OPTIONS]]
-
-  -h, --help      print this help, then exit
-  -V, --version   print version number, then exit
-  -q, --quiet     do not print progress messages
-  -d, --debug     don't remove temporary files
-
-Report bugs to <bug-libtool@gnu.org>."
-
-lt_cl_version="\
-m4_ifset([AC_PACKAGE_NAME], [AC_PACKAGE_NAME ])config.lt[]dnl
-m4_ifset([AC_PACKAGE_VERSION], [ AC_PACKAGE_VERSION])
-configured by $[0], generated by m4_PACKAGE_STRING.
-
-Copyright (C) 2024 Free Software Foundation, Inc.
-This config.lt script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it."
-
-while test 0 != $[#]
-do
-  case $[1] in
-    --version | --v* | -V )
-      echo "$lt_cl_version"; exit 0 ;;
-    --help | --h* | -h )
-      echo "$lt_cl_help"; exit 0 ;;
-    --debug | --d* | -d )
-      debug=: ;;
-    --quiet | --q* | --silent | --s* | -q )
-      lt_cl_silent=: ;;
-
-    -*) AC_MSG_ERROR([unrecognized option: $[1]
-Try '$[0] --help' for more information.]) ;;
-
-    *) AC_MSG_ERROR([unrecognized argument: $[1]
-Try '$[0] --help' for more information.]) ;;
-  esac
-  shift
-done
-
-if $lt_cl_silent; then
-  exec AS_MESSAGE_FD>/dev/null
-fi
-_LTEOF
-
-cat >>"$CONFIG_LT" <<_LTEOF
-_LT_OUTPUT_LIBTOOL_COMMANDS_INIT
-_LTEOF
-
-cat >>"$CONFIG_LT" <<\_LTEOF
-AC_MSG_NOTICE([creating $ofile])
-_LT_OUTPUT_LIBTOOL_COMMANDS
-AS_EXIT(0)
-_LTEOF
-chmod +x "$CONFIG_LT"
-
-# configure is writing to config.log, but config.lt does its own redirection,
-# appending to config.log, which fails on DOS, as config.log is still kept
-# open by configure.  Here we exec the FD to /dev/null, effectively closing
-# config.log, so it can be properly (re)opened and appended to by config.lt.
-lt_cl_success=:
-test yes = "$silent" &&
-  lt_config_lt_args="$lt_config_lt_args --quiet"
-exec AS_MESSAGE_LOG_FD>/dev/null
-$SHELL "$CONFIG_LT" $lt_config_lt_args || lt_cl_success=false
-exec AS_MESSAGE_LOG_FD>>config.log
-$lt_cl_success || AS_EXIT(1)
-])
-m4trace:m4/libtool.m4:813: -1- AC_DEFUN([LT_SUPPORTED_TAG], [])
-m4trace:m4/libtool.m4:824: -1- AC_DEFUN([LT_LANG], [AC_BEFORE([$0], [LT_OUTPUT])dnl
-m4_case([$1],
-  [C],			[_LT_LANG(C)],
-  [C++],		[_LT_LANG(CXX)],
-  [Go],			[_LT_LANG(GO)],
-  [Java],		[_LT_LANG(GCJ)],
-  [Fortran 77],		[_LT_LANG(F77)],
-  [Fortran],		[_LT_LANG(FC)],
-  [Windows Resource],	[_LT_LANG(RC)],
-  [m4_ifdef([_LT_LANG_]$1[_CONFIG],
-    [_LT_LANG($1)],
-    [m4_fatal([$0: unsupported language: "$1"])])])dnl
-])
-m4trace:m4/libtool.m4:916: -1- AU_DEFUN([AC_LIBTOOL_CXX], [LT_LANG(C++)])
-m4trace:m4/libtool.m4:916: -1- AC_DEFUN([AC_LIBTOOL_CXX], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_CXX' is obsolete.
-You should run autoupdate.])dnl
-LT_LANG(C++)])
-m4trace:m4/libtool.m4:917: -1- AU_DEFUN([AC_LIBTOOL_F77], [LT_LANG(Fortran 77)])
-m4trace:m4/libtool.m4:917: -1- AC_DEFUN([AC_LIBTOOL_F77], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_F77' is obsolete.
-You should run autoupdate.])dnl
-LT_LANG(Fortran 77)])
-m4trace:m4/libtool.m4:918: -1- AU_DEFUN([AC_LIBTOOL_FC], [LT_LANG(Fortran)])
-m4trace:m4/libtool.m4:918: -1- AC_DEFUN([AC_LIBTOOL_FC], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_FC' is obsolete.
-You should run autoupdate.])dnl
-LT_LANG(Fortran)])
-m4trace:m4/libtool.m4:919: -1- AU_DEFUN([AC_LIBTOOL_GCJ], [LT_LANG(Java)])
-m4trace:m4/libtool.m4:919: -1- AC_DEFUN([AC_LIBTOOL_GCJ], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_GCJ' is obsolete.
-You should run autoupdate.])dnl
-LT_LANG(Java)])
-m4trace:m4/libtool.m4:920: -1- AU_DEFUN([AC_LIBTOOL_RC], [LT_LANG(Windows Resource)])
-m4trace:m4/libtool.m4:920: -1- AC_DEFUN([AC_LIBTOOL_RC], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_RC' is obsolete.
-You should run autoupdate.])dnl
-LT_LANG(Windows Resource)])
-m4trace:m4/libtool.m4:1278: -1- AC_DEFUN([_LT_WITH_SYSROOT], [m4_require([_LT_DECL_SED])dnl
-AC_MSG_CHECKING([for sysroot])
-AC_ARG_WITH([sysroot],
-[AS_HELP_STRING([--with-sysroot@<:@=DIR@:>@],
-  [Search for dependent libraries within DIR (or the compiler's sysroot
-   if not specified).])],
-[], [with_sysroot=no])
-
-dnl lt_sysroot will always be passed unquoted.  We quote it here
-dnl in case the user passed a directory name.
-lt_sysroot=
-case $with_sysroot in #(
- yes)
-   if test yes = "$GCC"; then
-     # Trim trailing / since we'll always append absolute paths and we want
-     # to avoid //, if only for less confusing output for the user.
-     lt_sysroot=`$CC --print-sysroot 2>/dev/null | $SED 's:/\+$::'`
-   fi
-   ;; #(
- /*)
-   lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"`
-   ;; #(
- no|'')
-   ;; #(
- *)
-   AC_MSG_RESULT([$with_sysroot])
-   AC_MSG_ERROR([The sysroot must be an absolute path.])
-   ;;
-esac
-
- AC_MSG_RESULT([${lt_sysroot:-no}])
-_LT_DECL([], [lt_sysroot], [0], [The root where to search for ]dnl
-[dependent libraries, and where our libraries should be installed.])])
-m4trace:m4/libtool.m4:1618: -1- AC_DEFUN([_LT_COMPILER_OPTION], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_SED])dnl
-AC_CACHE_CHECK([$1], [$2],
-  [$2=no
-   m4_if([$4], , [ac_outfile=conftest.$ac_objext], [ac_outfile=$4])
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$3"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&AS_MESSAGE_LOG_FD
-   echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       $2=yes
-     fi
-   fi
-   $RM conftest*
-])
-
-if test yes = "[$]$2"; then
-    m4_if([$5], , :, [$5])
-else
-    m4_if([$6], , :, [$6])
-fi
-])
-m4trace:m4/libtool.m4:1660: -1- AU_DEFUN([AC_LIBTOOL_COMPILER_OPTION], [m4_if($#, 0, [_LT_COMPILER_OPTION], [_LT_COMPILER_OPTION($@)])], [], [])
-m4trace:m4/libtool.m4:1660: -1- AC_DEFUN([AC_LIBTOOL_COMPILER_OPTION], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_COMPILER_OPTION' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [_LT_COMPILER_OPTION], [_LT_COMPILER_OPTION($@)])])
-m4trace:m4/libtool.m4:1669: -1- AC_DEFUN([_LT_LINKER_OPTION], [m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_SED])dnl
-AC_CACHE_CHECK([$1], [$2],
-  [$2=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $3"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&AS_MESSAGE_LOG_FD
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         $2=yes
-       fi
-     else
-       $2=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
-])
-
-if test yes = "[$]$2"; then
-    m4_if([$4], , :, [$4])
-else
-    m4_if([$5], , :, [$5])
-fi
-])
-m4trace:m4/libtool.m4:1704: -1- AU_DEFUN([AC_LIBTOOL_LINKER_OPTION], [m4_if($#, 0, [_LT_LINKER_OPTION], [_LT_LINKER_OPTION($@)])], [], [])
-m4trace:m4/libtool.m4:1704: -1- AC_DEFUN([AC_LIBTOOL_LINKER_OPTION], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_LINKER_OPTION' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [_LT_LINKER_OPTION], [_LT_LINKER_OPTION($@)])])
-m4trace:m4/libtool.m4:1711: -1- AC_DEFUN([LT_CMD_MAX_LEN], [AC_REQUIRE([AC_CANONICAL_HOST])dnl
-# find the maximum length of command line arguments
-AC_MSG_CHECKING([the maximum length of command line arguments])
-AC_CACHE_VAL([lt_cv_sys_max_cmd_len], [dnl
-  i=0
-  teststring=ABCD
-
-  case $build_os in
-  msdosdjgpp*)
-    # On DJGPP, this test can blow up pretty badly due to problems in libc
-    # (any single argument exceeding 2000 bytes causes a buffer overrun
-    # during glob expansion).  Even if it were fixed, the result of this
-    # check would be larger than it should be.
-    lt_cv_sys_max_cmd_len=12288;    # 12K is about right
-    ;;
-
-  gnu* | ironclad*)
-    # Under GNU Hurd and Ironclad, this test is not required because there
-    # is no limit to the length of command line arguments.
-    # Libtool will interpret -1 as no limit whatsoever
-    lt_cv_sys_max_cmd_len=-1;
-    ;;
-
-  cygwin* | mingw* | windows* | cegcc*)
-    # On Win9x/ME, this test blows up -- it succeeds, but takes
-    # about 5 minutes as the teststring grows exponentially.
-    # Worse, since 9x/ME are not pre-emptively multitasking,
-    # you end up with a "frozen" computer, even though with patience
-    # the test eventually succeeds (with a max line length of 256k).
-    # Instead, let's just punt: use the minimum linelength reported by
-    # all of the supported platforms: 8192 (on NT/2K/XP).
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  mint*)
-    # On MiNT this can take a long time and run out of memory.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  amigaos*)
-    # On AmigaOS with pdksh, this test takes hours, literally.
-    # So we just punt and use a minimum line length of 8192.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*)
-    # This has been around since 386BSD, at least.  Likely further.
-    if test -x /sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax`
-    elif test -x /usr/sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax`
-    else
-      lt_cv_sys_max_cmd_len=65536	# usable default for all BSDs
-    fi
-    # And add a safety zone
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    ;;
-
-  interix*)
-    # We know the value 262144 and hardcode it with a safety zone (like BSD)
-    lt_cv_sys_max_cmd_len=196608
-    ;;
-
-  os2*)
-    # The test takes a long time on OS/2.
-    lt_cv_sys_max_cmd_len=8192
-    ;;
-
-  osf*)
-    # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure
-    # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not
-    # nice to cause kernel panics so lets avoid the loop below.
-    # First set a reasonable default.
-    lt_cv_sys_max_cmd_len=16384
-    #
-    if test -x /sbin/sysconfig; then
-      case `/sbin/sysconfig -q proc exec_disable_arg_limit` in
-        *1*) lt_cv_sys_max_cmd_len=-1 ;;
-      esac
-    fi
-    ;;
-  sco3.2v5*)
-    lt_cv_sys_max_cmd_len=102400
-    ;;
-  sysv5* | sco5v6* | sysv4.2uw2*)
-    kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null`
-    if test -n "$kargmax"; then
-      lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[[	 ]]//'`
-    else
-      lt_cv_sys_max_cmd_len=32768
-    fi
-    ;;
-  *)
-    lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null`
-    if test -n "$lt_cv_sys_max_cmd_len" && \
-       test undefined != "$lt_cv_sys_max_cmd_len"; then
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    else
-      # Make teststring a little bigger before we do anything with it.
-      # a 1K string should be a reasonable start.
-      for i in 1 2 3 4 5 6 7 8; do
-        teststring=$teststring$teststring
-      done
-      SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}}
-      # If test is not a shell built-in, we'll probably end up computing a
-      # maximum length that is only half of the actual maximum length, but
-      # we can't tell.
-      while { test X`env echo "$teststring$teststring" 2>/dev/null` \
-	         = "X$teststring$teststring"; } >/dev/null 2>&1 &&
-	      test 17 != "$i" # 1/2 MB should be enough
-      do
-        i=`expr $i + 1`
-        teststring=$teststring$teststring
-      done
-      # Only check the string length outside the loop.
-      lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1`
-      teststring=
-      # Add a significant safety factor because C++ compilers can tack on
-      # massive amounts of additional arguments before passing them to the
-      # linker.  It appears as though 1/2 is a usable value.
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2`
-    fi
-    ;;
-  esac
-])
-if test -n "$lt_cv_sys_max_cmd_len"; then
-  AC_MSG_RESULT($lt_cv_sys_max_cmd_len)
-else
-  AC_MSG_RESULT(none)
-fi
-max_cmd_len=$lt_cv_sys_max_cmd_len
-_LT_DECL([], [max_cmd_len], [0],
-    [What is the maximum length of a command?])
-])
-m4trace:m4/libtool.m4:1850: -1- AU_DEFUN([AC_LIBTOOL_SYS_MAX_CMD_LEN], [m4_if($#, 0, [LT_CMD_MAX_LEN], [LT_CMD_MAX_LEN($@)])], [], [])
-m4trace:m4/libtool.m4:1850: -1- AC_DEFUN([AC_LIBTOOL_SYS_MAX_CMD_LEN], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_SYS_MAX_CMD_LEN' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_CMD_MAX_LEN], [LT_CMD_MAX_LEN($@)])])
-m4trace:m4/libtool.m4:1961: -1- AC_DEFUN([LT_SYS_DLOPEN_SELF], [m4_require([_LT_HEADER_DLFCN])dnl
-if test yes != "$enable_dlopen"; then
-  enable_dlopen=unknown
-  enable_dlopen_self=unknown
-  enable_dlopen_self_static=unknown
-else
-  lt_cv_dlopen=no
-  lt_cv_dlopen_libs=
-
-  case $host_os in
-  beos*)
-    lt_cv_dlopen=load_add_on
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ;;
-
-  mingw* | windows* | pw32* | cegcc*)
-    lt_cv_dlopen=LoadLibrary
-    lt_cv_dlopen_libs=
-    ;;
-
-  cygwin*)
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    ;;
-
-  darwin*)
-    # if libdl is installed we need to link against it
-    AC_CHECK_LIB([dl], [dlopen],
-		[lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl],[
-    lt_cv_dlopen=dyld
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ])
-    ;;
-
-  tpf*)
-    # Don't try to run any link tests for TPF.  We know it's impossible
-    # because TPF is a cross-compiler, and we know how we open DSOs.
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=no
-    ;;
-
-  *)
-    AC_CHECK_FUNC([shl_load],
-	  [lt_cv_dlopen=shl_load],
-      [AC_CHECK_LIB([dld], [shl_load],
-	    [lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld],
-	[AC_CHECK_FUNC([dlopen],
-	      [lt_cv_dlopen=dlopen],
-	  [AC_CHECK_LIB([dl], [dlopen],
-		[lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl],
-	    [AC_CHECK_LIB([svld], [dlopen],
-		  [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld],
-	      [AC_CHECK_LIB([dld], [dld_link],
-		    [lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld])
-	      ])
-	    ])
-	  ])
-	])
-      ])
-    ;;
-  esac
-
-  if test no = "$lt_cv_dlopen"; then
-    enable_dlopen=no
-  else
-    enable_dlopen=yes
-  fi
-
-  case $lt_cv_dlopen in
-  dlopen)
-    save_CPPFLAGS=$CPPFLAGS
-    test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H"
-
-    save_LDFLAGS=$LDFLAGS
-    wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\"
-
-    save_LIBS=$LIBS
-    LIBS="$lt_cv_dlopen_libs $LIBS"
-
-    AC_CACHE_CHECK([whether a program can dlopen itself],
-	  lt_cv_dlopen_self, [dnl
-	  _LT_TRY_DLOPEN_SELF(
-	    lt_cv_dlopen_self=yes, lt_cv_dlopen_self=yes,
-	    lt_cv_dlopen_self=no, lt_cv_dlopen_self=cross)
-    ])
-
-    if test yes = "$lt_cv_dlopen_self"; then
-      wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\"
-      AC_CACHE_CHECK([whether a statically linked program can dlopen itself],
-	  lt_cv_dlopen_self_static, [dnl
-	  _LT_TRY_DLOPEN_SELF(
-	    lt_cv_dlopen_self_static=yes, lt_cv_dlopen_self_static=yes,
-	    lt_cv_dlopen_self_static=no,  lt_cv_dlopen_self_static=cross)
-      ])
-    fi
-
-    CPPFLAGS=$save_CPPFLAGS
-    LDFLAGS=$save_LDFLAGS
-    LIBS=$save_LIBS
-    ;;
-  esac
-
-  case $lt_cv_dlopen_self in
-  yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;;
-  *) enable_dlopen_self=unknown ;;
-  esac
-
-  case $lt_cv_dlopen_self_static in
-  yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;;
-  *) enable_dlopen_self_static=unknown ;;
-  esac
-fi
-_LT_DECL([dlopen_support], [enable_dlopen], [0],
-	 [Whether dlopen is supported])
-_LT_DECL([dlopen_self], [enable_dlopen_self], [0],
-	 [Whether dlopen of programs is supported])
-_LT_DECL([dlopen_self_static], [enable_dlopen_self_static], [0],
-	 [Whether dlopen of statically linked programs is supported])
-])
-m4trace:m4/libtool.m4:2086: -1- AU_DEFUN([AC_LIBTOOL_DLOPEN_SELF], [m4_if($#, 0, [LT_SYS_DLOPEN_SELF], [LT_SYS_DLOPEN_SELF($@)])], [], [])
-m4trace:m4/libtool.m4:2086: -1- AC_DEFUN([AC_LIBTOOL_DLOPEN_SELF], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_DLOPEN_SELF' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_SYS_DLOPEN_SELF], [LT_SYS_DLOPEN_SELF($@)])])
-m4trace:m4/libtool.m4:3284: -1- AC_DEFUN([_LT_PATH_TOOL_PREFIX], [m4_require([_LT_DECL_EGREP])dnl
-AC_MSG_CHECKING([for $1])
-AC_CACHE_VAL(lt_cv_path_MAGIC_CMD,
-[case $MAGIC_CMD in
-[[\\/*] |  ?:[\\/]*])
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-dnl $ac_dummy forces splitting on constant user-supplied paths.
-dnl POSIX.2 word splitting is done only on the output of word expansions,
-dnl not every word.  This closes a longstanding sh security hole.
-  ac_dummy="m4_if([$2], , $PATH, [$2])"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$1"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"$1"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac])
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  AC_MSG_RESULT($MAGIC_CMD)
-else
-  AC_MSG_RESULT(no)
-fi
-_LT_DECL([], [MAGIC_CMD], [0],
-	 [Used to examine libraries when file_magic_cmd begins with "file"])dnl
-])
-m4trace:m4/libtool.m4:3346: -1- AU_DEFUN([AC_PATH_TOOL_PREFIX], [m4_if($#, 0, [_LT_PATH_TOOL_PREFIX], [_LT_PATH_TOOL_PREFIX($@)])], [], [])
-m4trace:m4/libtool.m4:3346: -1- AC_DEFUN([AC_PATH_TOOL_PREFIX], [m4_warn([obsolete], [The macro 'AC_PATH_TOOL_PREFIX' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [_LT_PATH_TOOL_PREFIX], [_LT_PATH_TOOL_PREFIX($@)])])
-m4trace:m4/libtool.m4:3369: -1- AC_DEFUN([LT_PATH_LD], [AC_REQUIRE([AC_PROG_CC])dnl
-AC_REQUIRE([AC_CANONICAL_HOST])dnl
-AC_REQUIRE([AC_CANONICAL_BUILD])dnl
-m4_require([_LT_DECL_SED])dnl
-m4_require([_LT_DECL_EGREP])dnl
-m4_require([_LT_PROG_ECHO_BACKSLASH])dnl
-
-AC_ARG_WITH([gnu-ld],
-    [AS_HELP_STRING([--with-gnu-ld],
-	[assume the C compiler uses GNU ld @<:@default=no@:>@])],
-    [test no = "$withval" || with_gnu_ld=yes],
-    [with_gnu_ld=no])dnl
-
-ac_prog=ld
-if test yes = "$GCC"; then
-  # Check if gcc -print-prog-name=ld gives a path.
-  AC_MSG_CHECKING([for ld used by $CC])
-  case $host in
-  *-*-mingw* | *-*-windows*)
-    # gcc leaves a trailing carriage return, which upsets mingw
-    ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;;
-  *)
-    ac_prog=`($CC -print-prog-name=ld) 2>&5` ;;
-  esac
-  case $ac_prog in
-    # Accept absolute paths.
-    [[\\/]]* | ?:[[\\/]]*)
-      re_direlt='/[[^/]][[^/]]*/\.\./'
-      # Canonicalize the pathname of ld
-      ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'`
-      while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do
-	ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"`
-      done
-      test -z "$LD" && LD=$ac_prog
-      ;;
-  "")
-    # If it fails, then pretend we aren't using GCC.
-    ac_prog=ld
-    ;;
-  *)
-    # If it is relative, then search for the first ld in PATH.
-    with_gnu_ld=unknown
-    ;;
-  esac
-elif test yes = "$with_gnu_ld"; then
-  AC_MSG_CHECKING([for GNU ld])
-else
-  AC_MSG_CHECKING([for non-GNU ld])
-fi
-AC_CACHE_VAL(lt_cv_path_LD,
-[if test -z "$LD"; then
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  for ac_dir in $PATH; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then
-      lt_cv_path_LD=$ac_dir/$ac_prog
-      # Check to see if the program is GNU ld.  I'd rather use --version,
-      # but apparently some variants of GNU ld only accept -v.
-      # Break only if it was the GNU/non-GNU ld that we prefer.
-      case `"$lt_cv_path_LD" -v 2>&1 </dev/null` in
-      *GNU* | *'with BFD'*)
-	test no != "$with_gnu_ld" && break
-	;;
-      *)
-	test yes != "$with_gnu_ld" && break
-	;;
-      esac
-    fi
-  done
-  IFS=$lt_save_ifs
-else
-  lt_cv_path_LD=$LD # Let the user override the test with a path.
-fi])
-LD=$lt_cv_path_LD
-if test -n "$LD"; then
-  AC_MSG_RESULT($LD)
-else
-  AC_MSG_RESULT(no)
-fi
-test -z "$LD" && AC_MSG_ERROR([no acceptable ld found in \$PATH])
-_LT_PATH_LD_GNU
-AC_SUBST([LD])
-
-_LT_TAGDECL([], [LD], [1], [The linker used to build libraries])
-])
-m4trace:m4/libtool.m4:3458: -1- AU_DEFUN([AM_PROG_LD], [m4_if($#, 0, [LT_PATH_LD], [LT_PATH_LD($@)])], [], [])
-m4trace:m4/libtool.m4:3458: -1- AC_DEFUN([AM_PROG_LD], [m4_warn([obsolete], [The macro 'AM_PROG_LD' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_PATH_LD], [LT_PATH_LD($@)])])
-m4trace:m4/libtool.m4:3459: -1- AU_DEFUN([AC_PROG_LD], [m4_if($#, 0, [LT_PATH_LD], [LT_PATH_LD($@)])], [], [])
-m4trace:m4/libtool.m4:3459: -1- AC_DEFUN([AC_PROG_LD], [m4_warn([obsolete], [The macro 'AC_PROG_LD' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_PATH_LD], [LT_PATH_LD($@)])])
-m4trace:m4/libtool.m4:3795: -1- AC_DEFUN([LT_PATH_NM], [AC_REQUIRE([AC_PROG_CC])dnl
-AC_CACHE_CHECK([for BSD- or MS-compatible name lister (nm)], lt_cv_path_NM,
-[if test -n "$NM"; then
-  # Let the user override the test.
-  lt_cv_path_NM=$NM
-else
-  lt_nm_to_check=${ac_tool_prefix}nm
-  if test -n "$ac_tool_prefix" && test "$build" = "$host"; then
-    lt_nm_to_check="$lt_nm_to_check nm"
-  fi
-  for lt_tmp_nm in $lt_nm_to_check; do
-    lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-    for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do
-      IFS=$lt_save_ifs
-      test -z "$ac_dir" && ac_dir=.
-      tmp_nm=$ac_dir/$lt_tmp_nm
-      if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then
-	# Check to see if the nm accepts a BSD-compat flag.
-	# Adding the 'sed 1q' prevents false positives on HP-UX, which says:
-	#   nm: unknown option "B" ignored
-	# Tru64's nm complains that /dev/null is an invalid object file
-	# MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty
-	case $build_os in
-	mingw* | windows*) lt_bad_file=conftest.nm/nofile ;;
-	*) lt_bad_file=/dev/null ;;
-	esac
-	case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in
-	*$lt_bad_file* | *'Invalid file or object type'*)
-	  lt_cv_path_NM="$tmp_nm -B"
-	  break 2
-	  ;;
-	*)
-	  case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in
-	  */dev/null*)
-	    lt_cv_path_NM="$tmp_nm -p"
-	    break 2
-	    ;;
-	  *)
-	    lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but
-	    continue # so that we can try to find one that supports BSD flags
-	    ;;
-	  esac
-	  ;;
-	esac
-      fi
-    done
-    IFS=$lt_save_ifs
-  done
-  : ${lt_cv_path_NM=no}
-fi])
-if test no != "$lt_cv_path_NM"; then
-  NM=$lt_cv_path_NM
-else
-  # Didn't find any BSD compatible name lister, look for dumpbin.
-  if test -n "$DUMPBIN"; then :
-    # Let the user override the test.
-  else
-    AC_CHECK_TOOLS(DUMPBIN, [dumpbin "link -dump"], :)
-    case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in
-    *COFF*)
-      DUMPBIN="$DUMPBIN -symbols -headers"
-      ;;
-    *)
-      DUMPBIN=:
-      ;;
-    esac
-  fi
-  AC_SUBST([DUMPBIN])
-  if test : != "$DUMPBIN"; then
-    NM=$DUMPBIN
-  fi
-fi
-test -z "$NM" && NM=nm
-AC_SUBST([NM])
-_LT_DECL([], [NM], [1], [A BSD- or MS-compatible name lister])dnl
-
-AC_CACHE_CHECK([the name lister ($NM) interface], [lt_cv_nm_interface],
-  [lt_cv_nm_interface="BSD nm"
-  echo "int some_variable = 0;" > conftest.$ac_ext
-  (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&AS_MESSAGE_LOG_FD)
-  (eval "$ac_compile" 2>conftest.err)
-  cat conftest.err >&AS_MESSAGE_LOG_FD
-  (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&AS_MESSAGE_LOG_FD)
-  (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
-  cat conftest.err >&AS_MESSAGE_LOG_FD
-  (eval echo "\"\$as_me:$LINENO: output\"" >&AS_MESSAGE_LOG_FD)
-  cat conftest.out >&AS_MESSAGE_LOG_FD
-  if $GREP 'External.*some_variable' conftest.out > /dev/null; then
-    lt_cv_nm_interface="MS dumpbin"
-  fi
-  rm -f conftest*])
-])
-m4trace:m4/libtool.m4:3890: -1- AU_DEFUN([AM_PROG_NM], [m4_if($#, 0, [LT_PATH_NM], [LT_PATH_NM($@)])], [], [])
-m4trace:m4/libtool.m4:3890: -1- AC_DEFUN([AM_PROG_NM], [m4_warn([obsolete], [The macro 'AM_PROG_NM' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_PATH_NM], [LT_PATH_NM($@)])])
-m4trace:m4/libtool.m4:3891: -1- AU_DEFUN([AC_PROG_NM], [m4_if($#, 0, [LT_PATH_NM], [LT_PATH_NM($@)])], [], [])
-m4trace:m4/libtool.m4:3891: -1- AC_DEFUN([AC_PROG_NM], [m4_warn([obsolete], [The macro 'AC_PROG_NM' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_PATH_NM], [LT_PATH_NM($@)])])
-m4trace:m4/libtool.m4:3962: -1- AC_DEFUN([_LT_DLL_DEF_P], [dnl
-  test DEF = "`$SED -n dnl
-    -e '\''s/^[[	 ]]*//'\'' dnl Strip leading whitespace
-    -e '\''/^\(;.*\)*$/d'\'' dnl      Delete empty lines and comments
-    -e '\''s/^\(EXPORTS\|LIBRARY\)\([[	 ]].*\)*$/DEF/p'\'' dnl
-    -e q dnl                          Only consider the first "real" line
-    $1`" dnl
-])
-m4trace:m4/libtool.m4:3976: -1- AC_DEFUN([LT_LIB_M], [AC_REQUIRE([AC_CANONICAL_HOST])dnl
-LIBM=
-case $host in
-*-*-beos* | *-*-cegcc* | *-*-cygwin* | *-*-haiku* | *-*-mingw* | *-*-pw32* | *-*-darwin*)
-  # These system don't have libm, or don't need it
-  ;;
-*-ncr-sysv4.3*)
-  AC_CHECK_LIB(mw, _mwvalidcheckl, LIBM=-lmw)
-  AC_CHECK_LIB(m, cos, LIBM="$LIBM -lm")
-  ;;
-*)
-  AC_CHECK_LIB(m, cos, LIBM=-lm)
-  ;;
-esac
-AC_SUBST([LIBM])
-])
-m4trace:m4/libtool.m4:3995: -1- AU_DEFUN([AC_CHECK_LIBM], [m4_if($#, 0, [LT_LIB_M], [LT_LIB_M($@)])], [], [])
-m4trace:m4/libtool.m4:3995: -1- AC_DEFUN([AC_CHECK_LIBM], [m4_warn([obsolete], [The macro 'AC_CHECK_LIBM' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_LIB_M], [LT_LIB_M($@)])])
-m4trace:m4/libtool.m4:8300: -1- AC_DEFUN([LT_PROG_GCJ], [m4_ifdef([AC_PROG_GCJ], [AC_PROG_GCJ],
-  [m4_ifdef([A][M_PROG_GCJ], [A][M_PROG_GCJ],
-    [AC_CHECK_TOOL(GCJ, gcj,)
-      test set = "${GCJFLAGS+set}" || GCJFLAGS="-g -O2"
-      AC_SUBST(GCJFLAGS)])])[]dnl
-])
-m4trace:m4/libtool.m4:8309: -1- AU_DEFUN([LT_AC_PROG_GCJ], [m4_if($#, 0, [LT_PROG_GCJ], [LT_PROG_GCJ($@)])], [], [])
-m4trace:m4/libtool.m4:8309: -1- AC_DEFUN([LT_AC_PROG_GCJ], [m4_warn([obsolete], [The macro 'LT_AC_PROG_GCJ' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_PROG_GCJ], [LT_PROG_GCJ($@)])])
-m4trace:m4/libtool.m4:8316: -1- AC_DEFUN([LT_PROG_GO], [AC_CHECK_TOOL(GOC, gccgo,)
-])
-m4trace:m4/libtool.m4:8323: -1- AC_DEFUN([LT_PROG_RC], [AC_CHECK_TOOL(RC, windres,)
-])
-m4trace:m4/libtool.m4:8328: -1- AU_DEFUN([LT_AC_PROG_RC], [m4_if($#, 0, [LT_PROG_RC], [LT_PROG_RC($@)])], [], [])
-m4trace:m4/libtool.m4:8328: -1- AC_DEFUN([LT_AC_PROG_RC], [m4_warn([obsolete], [The macro 'LT_AC_PROG_RC' is obsolete.
-You should run autoupdate.])dnl
-m4_if($#, 0, [LT_PROG_RC], [LT_PROG_RC($@)])])
-m4trace:m4/ltoptions.m4:14: -1- AC_DEFUN([LTOPTIONS_VERSION], [m4_if([1])])
-m4trace:m4/ltoptions.m4:113: -1- AU_DEFUN([AC_LIBTOOL_DLOPEN], [_LT_SET_OPTION([LT_INIT], [dlopen])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'dlopen' option into LT_INIT's first parameter.])
-])
-m4trace:m4/ltoptions.m4:113: -1- AC_DEFUN([AC_LIBTOOL_DLOPEN], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_DLOPEN' is obsolete.
-You should run autoupdate.])dnl
-_LT_SET_OPTION([LT_INIT], [dlopen])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'dlopen' option into LT_INIT's first parameter.])
-])
-m4trace:m4/ltoptions.m4:148: -1- AU_DEFUN([AC_LIBTOOL_WIN32_DLL], [AC_REQUIRE([AC_CANONICAL_HOST])dnl
-_LT_SET_OPTION([LT_INIT], [win32-dll])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'win32-dll' option into LT_INIT's first parameter.])
-])
-m4trace:m4/ltoptions.m4:148: -1- AC_DEFUN([AC_LIBTOOL_WIN32_DLL], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_WIN32_DLL' is obsolete.
-You should run autoupdate.])dnl
-AC_REQUIRE([AC_CANONICAL_HOST])dnl
-_LT_SET_OPTION([LT_INIT], [win32-dll])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'win32-dll' option into LT_INIT's first parameter.])
-])
-m4trace:m4/ltoptions.m4:197: -1- AC_DEFUN([AC_ENABLE_SHARED], [_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[shared])
-])
-m4trace:m4/ltoptions.m4:201: -1- AC_DEFUN([AC_DISABLE_SHARED], [_LT_SET_OPTION([LT_INIT], [disable-shared])
-])
-m4trace:m4/ltoptions.m4:205: -1- AU_DEFUN([AM_ENABLE_SHARED], [AC_ENABLE_SHARED($@)])
-m4trace:m4/ltoptions.m4:205: -1- AC_DEFUN([AM_ENABLE_SHARED], [m4_warn([obsolete], [The macro 'AM_ENABLE_SHARED' is obsolete.
-You should run autoupdate.])dnl
-AC_ENABLE_SHARED($@)])
-m4trace:m4/ltoptions.m4:206: -1- AU_DEFUN([AM_DISABLE_SHARED], [AC_DISABLE_SHARED($@)])
-m4trace:m4/ltoptions.m4:206: -1- AC_DEFUN([AM_DISABLE_SHARED], [m4_warn([obsolete], [The macro 'AM_DISABLE_SHARED' is obsolete.
-You should run autoupdate.])dnl
-AC_DISABLE_SHARED($@)])
-m4trace:m4/ltoptions.m4:251: -1- AC_DEFUN([AC_ENABLE_STATIC], [_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[static])
-])
-m4trace:m4/ltoptions.m4:255: -1- AC_DEFUN([AC_DISABLE_STATIC], [_LT_SET_OPTION([LT_INIT], [disable-static])
-])
-m4trace:m4/ltoptions.m4:259: -1- AU_DEFUN([AM_ENABLE_STATIC], [AC_ENABLE_STATIC($@)])
-m4trace:m4/ltoptions.m4:259: -1- AC_DEFUN([AM_ENABLE_STATIC], [m4_warn([obsolete], [The macro 'AM_ENABLE_STATIC' is obsolete.
-You should run autoupdate.])dnl
-AC_ENABLE_STATIC($@)])
-m4trace:m4/ltoptions.m4:260: -1- AU_DEFUN([AM_DISABLE_STATIC], [AC_DISABLE_STATIC($@)])
-m4trace:m4/ltoptions.m4:260: -1- AC_DEFUN([AM_DISABLE_STATIC], [m4_warn([obsolete], [The macro 'AM_DISABLE_STATIC' is obsolete.
-You should run autoupdate.])dnl
-AC_DISABLE_STATIC($@)])
-m4trace:m4/ltoptions.m4:305: -1- AU_DEFUN([AC_ENABLE_FAST_INSTALL], [_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[fast-install])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you put
-the 'fast-install' option into LT_INIT's first parameter.])
-])
-m4trace:m4/ltoptions.m4:305: -1- AC_DEFUN([AC_ENABLE_FAST_INSTALL], [m4_warn([obsolete], [The macro 'AC_ENABLE_FAST_INSTALL' is obsolete.
-You should run autoupdate.])dnl
-_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[fast-install])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you put
-the 'fast-install' option into LT_INIT's first parameter.])
-])
-m4trace:m4/ltoptions.m4:312: -1- AU_DEFUN([AC_DISABLE_FAST_INSTALL], [_LT_SET_OPTION([LT_INIT], [disable-fast-install])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you put
-the 'disable-fast-install' option into LT_INIT's first parameter.])
-])
-m4trace:m4/ltoptions.m4:312: -1- AC_DEFUN([AC_DISABLE_FAST_INSTALL], [m4_warn([obsolete], [The macro 'AC_DISABLE_FAST_INSTALL' is obsolete.
-You should run autoupdate.])dnl
-_LT_SET_OPTION([LT_INIT], [disable-fast-install])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you put
-the 'disable-fast-install' option into LT_INIT's first parameter.])
-])
-m4trace:m4/ltoptions.m4:441: -1- AU_DEFUN([AC_LIBTOOL_PICMODE], [_LT_SET_OPTION([LT_INIT], [pic-only])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'pic-only' option into LT_INIT's first parameter.])
-])
-m4trace:m4/ltoptions.m4:441: -1- AC_DEFUN([AC_LIBTOOL_PICMODE], [m4_warn([obsolete], [The macro 'AC_LIBTOOL_PICMODE' is obsolete.
-You should run autoupdate.])dnl
-_LT_SET_OPTION([LT_INIT], [pic-only])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'pic-only' option into LT_INIT's first parameter.])
-])
-m4trace:m4/ltsugar.m4:14: -1- AC_DEFUN([LTSUGAR_VERSION], [m4_if([0.1])])
-m4trace:m4/ltversion.m4:19: -1- AC_DEFUN([LTVERSION_VERSION], [macro_version='2.5.4'
-macro_revision='2.5.4'
-_LT_DECL(, macro_version, 0, [Which release of libtool.m4 was used?])
-_LT_DECL(, macro_revision, 0)
-])
-m4trace:m4/lt~obsolete.m4:37: -1- AC_DEFUN([LTOBSOLETE_VERSION], [m4_if([1])])
-m4trace:m4/lt~obsolete.m4:41: -1- AC_DEFUN([_LT_AC_PROG_ECHO_BACKSLASH])
-m4trace:m4/lt~obsolete.m4:42: -1- AC_DEFUN([_LT_AC_SHELL_INIT])
-m4trace:m4/lt~obsolete.m4:43: -1- AC_DEFUN([_LT_AC_SYS_LIBPATH_AIX])
-m4trace:m4/lt~obsolete.m4:45: -1- AC_DEFUN([_LT_AC_TAGVAR])
-m4trace:m4/lt~obsolete.m4:46: -1- AC_DEFUN([AC_LTDL_ENABLE_INSTALL])
-m4trace:m4/lt~obsolete.m4:47: -1- AC_DEFUN([AC_LTDL_PREOPEN])
-m4trace:m4/lt~obsolete.m4:48: -1- AC_DEFUN([_LT_AC_SYS_COMPILER])
-m4trace:m4/lt~obsolete.m4:49: -1- AC_DEFUN([_LT_AC_LOCK])
-m4trace:m4/lt~obsolete.m4:50: -1- AC_DEFUN([AC_LIBTOOL_SYS_OLD_ARCHIVE])
-m4trace:m4/lt~obsolete.m4:51: -1- AC_DEFUN([_LT_AC_TRY_DLOPEN_SELF])
-m4trace:m4/lt~obsolete.m4:52: -1- AC_DEFUN([AC_LIBTOOL_PROG_CC_C_O])
-m4trace:m4/lt~obsolete.m4:53: -1- AC_DEFUN([AC_LIBTOOL_SYS_HARD_LINK_LOCKS])
-m4trace:m4/lt~obsolete.m4:54: -1- AC_DEFUN([AC_LIBTOOL_OBJDIR])
-m4trace:m4/lt~obsolete.m4:55: -1- AC_DEFUN([AC_LTDL_OBJDIR])
-m4trace:m4/lt~obsolete.m4:56: -1- AC_DEFUN([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH])
-m4trace:m4/lt~obsolete.m4:57: -1- AC_DEFUN([AC_LIBTOOL_SYS_LIB_STRIP])
-m4trace:m4/lt~obsolete.m4:58: -1- AC_DEFUN([AC_PATH_MAGIC])
-m4trace:m4/lt~obsolete.m4:59: -1- AC_DEFUN([AC_PROG_LD_GNU])
-m4trace:m4/lt~obsolete.m4:60: -1- AC_DEFUN([AC_PROG_LD_RELOAD_FLAG])
-m4trace:m4/lt~obsolete.m4:61: -1- AC_DEFUN([AC_DEPLIBS_CHECK_METHOD])
-m4trace:m4/lt~obsolete.m4:62: -1- AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_NO_RTTI])
-m4trace:m4/lt~obsolete.m4:63: -1- AC_DEFUN([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE])
-m4trace:m4/lt~obsolete.m4:64: -1- AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_PIC])
-m4trace:m4/lt~obsolete.m4:65: -1- AC_DEFUN([AC_LIBTOOL_PROG_LD_SHLIBS])
-m4trace:m4/lt~obsolete.m4:66: -1- AC_DEFUN([AC_LIBTOOL_POSTDEP_PREDEP])
-m4trace:m4/lt~obsolete.m4:67: -1- AC_DEFUN([LT_AC_PROG_EGREP])
-m4trace:m4/lt~obsolete.m4:68: -1- AC_DEFUN([LT_AC_PROG_SED])
-m4trace:m4/lt~obsolete.m4:72: -1- AC_DEFUN([_AC_PROG_LIBTOOL])
-m4trace:m4/lt~obsolete.m4:73: -1- AC_DEFUN([AC_LIBTOOL_SETUP])
-m4trace:m4/lt~obsolete.m4:74: -1- AC_DEFUN([_LT_AC_CHECK_DLFCN])
-m4trace:m4/lt~obsolete.m4:75: -1- AC_DEFUN([AC_LIBTOOL_SYS_DYNAMIC_LINKER])
-m4trace:m4/lt~obsolete.m4:76: -1- AC_DEFUN([_LT_AC_TAGCONFIG])
-m4trace:m4/lt~obsolete.m4:78: -1- AC_DEFUN([_LT_AC_LANG_CXX])
-m4trace:m4/lt~obsolete.m4:79: -1- AC_DEFUN([_LT_AC_LANG_F77])
-m4trace:m4/lt~obsolete.m4:80: -1- AC_DEFUN([_LT_AC_LANG_GCJ])
-m4trace:m4/lt~obsolete.m4:81: -1- AC_DEFUN([AC_LIBTOOL_LANG_C_CONFIG])
-m4trace:m4/lt~obsolete.m4:82: -1- AC_DEFUN([_LT_AC_LANG_C_CONFIG])
-m4trace:m4/lt~obsolete.m4:83: -1- AC_DEFUN([AC_LIBTOOL_LANG_CXX_CONFIG])
-m4trace:m4/lt~obsolete.m4:84: -1- AC_DEFUN([_LT_AC_LANG_CXX_CONFIG])
-m4trace:m4/lt~obsolete.m4:85: -1- AC_DEFUN([AC_LIBTOOL_LANG_F77_CONFIG])
-m4trace:m4/lt~obsolete.m4:86: -1- AC_DEFUN([_LT_AC_LANG_F77_CONFIG])
-m4trace:m4/lt~obsolete.m4:87: -1- AC_DEFUN([AC_LIBTOOL_LANG_GCJ_CONFIG])
-m4trace:m4/lt~obsolete.m4:88: -1- AC_DEFUN([_LT_AC_LANG_GCJ_CONFIG])
-m4trace:m4/lt~obsolete.m4:89: -1- AC_DEFUN([AC_LIBTOOL_LANG_RC_CONFIG])
-m4trace:m4/lt~obsolete.m4:90: -1- AC_DEFUN([_LT_AC_LANG_RC_CONFIG])
-m4trace:m4/lt~obsolete.m4:91: -1- AC_DEFUN([AC_LIBTOOL_CONFIG])
-m4trace:m4/lt~obsolete.m4:92: -1- AC_DEFUN([_LT_AC_FILE_LTDLL_C])
-m4trace:m4/lt~obsolete.m4:94: -1- AC_DEFUN([_LT_AC_PROG_CXXCPP])
-m4trace:m4/lt~obsolete.m4:97: -1- AC_DEFUN([_LT_PROG_F77])
-m4trace:m4/lt~obsolete.m4:98: -1- AC_DEFUN([_LT_PROG_FC])
-m4trace:m4/lt~obsolete.m4:99: -1- AC_DEFUN([_LT_PROG_CXX])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^_?A[CHUM]_])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([_AC_])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^LIBOBJS$], [do not use LIBOBJS directly, use AC_LIBOBJ (see section 'AC_LIBOBJ vs LIBOBJS'])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^AS_FLAGS$])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^_?m4_])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^dnl$])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^_?AS_])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^SHELL$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PATH_SEPARATOR$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_NAME$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_TARNAME$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_VERSION$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_STRING$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_BUGREPORT$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_URL$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^exec_prefix$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^prefix$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^program_transform_name$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^bindir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^sbindir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^libexecdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^datarootdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^datadir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^sysconfdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^sharedstatedir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^localstatedir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^runstatedir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^includedir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^oldincludedir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^docdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^infodir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^htmldir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^dvidir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^pdfdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^psdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^libdir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^localedir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^mandir$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_NAME$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_TARNAME$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_VERSION$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_STRING$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_BUGREPORT$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_URL$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^DEFS$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^LIBS$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^build_alias$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^host_alias$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^target_alias$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^ECHO_C$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^ECHO_N$])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^ECHO_T$])
-m4trace:configure.ac:8: -1- AC_CONFIG_MACRO_DIR([m4])
-m4trace:configure.ac:8: -1- AC_CONFIG_MACRO_DIR_TRACE([m4])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_stdio_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" stdio.h ]AS_TR_SH([stdio.h]) AS_TR_CPP([HAVE_stdio.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CFLAGS$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^LDFLAGS$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^LIBS$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CPPFLAGS$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^ac_ct_CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^EXEEXT$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^OBJEXT$])
-m4trace:configure.ac:13: -1- _AM_PROG_CC_C_O
-m4trace:configure.ac:13: -1- AM_AUX_DIR_EXPAND
-m4trace:configure.ac:13: -1- AM_RUN_LOG([$CC -c conftest.$ac_ext -o conftest2.$ac_objext])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_stdlib_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" stdlib.h ]AS_TR_SH([stdlib.h]) AS_TR_CPP([HAVE_stdlib.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_string_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" string.h ]AS_TR_SH([string.h]) AS_TR_CPP([HAVE_string.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_inttypes_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" inttypes.h ]AS_TR_SH([inttypes.h]) AS_TR_CPP([HAVE_inttypes.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_stdint_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" stdint.h ]AS_TR_SH([stdint.h]) AS_TR_CPP([HAVE_stdint.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_strings_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" strings.h ]AS_TR_SH([strings.h]) AS_TR_CPP([HAVE_strings.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_sys_stat_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" sys/stat.h ]AS_TR_SH([sys/stat.h]) AS_TR_CPP([HAVE_sys/stat.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_sys_types_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" sys/types.h ]AS_TR_SH([sys/types.h]) AS_TR_CPP([HAVE_sys/types.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_unistd_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" unistd.h ]AS_TR_SH([unistd.h]) AS_TR_CPP([HAVE_unistd.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^STDC_HEADERS$])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_wchar_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" wchar.h ]AS_TR_SH([wchar.h]) AS_TR_CPP([HAVE_wchar.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- AC_DEFUN([_AC_Header_minix_config_h], [m4_divert_text([INIT_PREPARE],
-  [AS_VAR_APPEND([ac_header_]]_AC_LANG_ABBREV[[_list],
-  [" minix/config.h ]AS_TR_SH([minix/config.h]) AS_TR_CPP([HAVE_minix/config.h])["])])_AC_HEADERS_EXPANSION(_AC_LANG_ABBREV)])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_ALL_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_COSMO_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_DARWIN_C_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_GNU_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_HPUX_ALT_XOPEN_SOCKET_API$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_NETBSD_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_OPENBSD_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_POSIX_PTHREAD_SEMANTICS$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_ATTRIBS_EXT__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_BFP_EXT__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_DFP_EXT__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_EXT__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_FUNCS_EXT__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_TYPES_EXT__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_LIB_EXT2__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_MATH_SPEC_FUNCS__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_TANDEM_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_MINIX$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_POSIX_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_POSIX_1_SOURCE$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__EXTENSIONS__$])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_XOPEN_SOURCE$])
-m4trace:configure.ac:16: -1- AM_INIT_AUTOMAKE([foreign dist-xz])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_[A-Z]+FLAGS$])
-m4trace:configure.ac:16: -1- AM_SET_CURRENT_AUTOMAKE_VERSION
-m4trace:configure.ac:16: -1- AM_AUTOMAKE_VERSION([1.18.1])
-m4trace:configure.ac:16: -1- _AM_AUTOCONF_VERSION([2.73])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_PROGRAM$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_SCRIPT$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_DATA$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__isrc$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__isrc])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CYGPATH_W$])
-m4trace:configure.ac:16: -1- _AM_SET_OPTIONS([foreign dist-xz])
-m4trace:configure.ac:16: -1- _AM_SET_OPTION([foreign])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([foreign])
-m4trace:configure.ac:16: -1- _AM_SET_OPTION([dist-xz])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([dist-xz])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^PACKAGE$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^VERSION$])
-m4trace:configure.ac:16: -1- _AM_IF_OPTION([no-define], [], [AC_DEFINE_UNQUOTED([PACKAGE], ["$PACKAGE"], [Name of package])
- AC_DEFINE_UNQUOTED([VERSION], ["$VERSION"], [Version number of package])])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([no-define])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^PACKAGE$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^VERSION$])
-m4trace:configure.ac:16: -1- AM_SANITY_CHECK
-m4trace:configure.ac:16: -1- _AM_FILESYSTEM_TIMESTAMP_RESOLUTION
-m4trace:configure.ac:16: -1- _AM_SLEEP_FRACTIONAL_SECONDS
-m4trace:configure.ac:16: -1- AM_MISSING_PROG([ACLOCAL], [aclocal-${am__api_version}])
-m4trace:configure.ac:16: -1- AM_MISSING_HAS_RUN
-m4trace:configure.ac:16: -1- m4_pattern_allow([^ACLOCAL$])
-m4trace:configure.ac:16: -1- AM_MISSING_PROG([AUTOCONF], [autoconf])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AUTOCONF$])
-m4trace:configure.ac:16: -1- AM_MISSING_PROG([AUTOMAKE], [automake-${am__api_version}])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AUTOMAKE$])
-m4trace:configure.ac:16: -1- AM_MISSING_PROG([AUTOHEADER], [autoheader])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AUTOHEADER$])
-m4trace:configure.ac:16: -1- AM_MISSING_PROG([MAKEINFO], [makeinfo])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^MAKEINFO$])
-m4trace:configure.ac:16: -1- AM_PROG_INSTALL_SH
-m4trace:configure.ac:16: -1- m4_pattern_allow([^install_sh$])
-m4trace:configure.ac:16: -1- AM_PROG_INSTALL_STRIP
-m4trace:configure.ac:16: -1- m4_pattern_allow([^STRIP$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_STRIP_PROGRAM$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^MKDIR_P$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^mkdir_p$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AWK$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^SET_MAKE$])
-m4trace:configure.ac:16: -1- AM_SET_LEADING_DOT
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__leading_dot$])
-m4trace:configure.ac:16: -1- _AM_IF_OPTION([tar-ustar], [_AM_PROG_TAR([ustar])], [_AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])],
-    [_AM_IF_OPTION([tar-v7], [_AM_PROG_TAR([v7])],
-      [_AM_PROG_TAR([ustar])])])])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([tar-ustar])
-m4trace:configure.ac:16: -1- _AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])], [_AM_IF_OPTION([tar-v7], [_AM_PROG_TAR([v7])],
-      [_AM_PROG_TAR([ustar])])])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([tar-pax])
-m4trace:configure.ac:16: -1- _AM_IF_OPTION([tar-v7], [_AM_PROG_TAR([v7])], [_AM_PROG_TAR([ustar])])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([tar-v7])
-m4trace:configure.ac:16: -1- _AM_PROG_TAR([ustar])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMTAR$])
-m4trace:configure.ac:16: -1- AM_RUN_LOG([$_am_tar --version])
-m4trace:configure.ac:16: -1- AM_RUN_LOG([tardir=conftest.dir && eval $am__tar_ >conftest.tar])
-m4trace:configure.ac:16: -1- AM_RUN_LOG([$am__untar <conftest.tar])
-m4trace:configure.ac:16: -1- AM_RUN_LOG([cat conftest.dir/file])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__tar$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__untar$])
-m4trace:configure.ac:16: -1- _AM_IF_OPTION([no-dependencies], [], [AC_PROVIDE_IFELSE([AC_PROG_CC],
-		  [_AM_DEPENDENCIES([CC])],
-		  [m4_define([AC_PROG_CC],
-			     m4_defn([AC_PROG_CC])[_AM_DEPENDENCIES([CC])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_CXX],
-		  [_AM_DEPENDENCIES([CXX])],
-		  [m4_define([AC_PROG_CXX],
-			     m4_defn([AC_PROG_CXX])[_AM_DEPENDENCIES([CXX])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_OBJC],
-		  [_AM_DEPENDENCIES([OBJC])],
-		  [m4_define([AC_PROG_OBJC],
-			     m4_defn([AC_PROG_OBJC])[_AM_DEPENDENCIES([OBJC])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_OBJCXX],
-		  [_AM_DEPENDENCIES([OBJCXX])],
-		  [m4_define([AC_PROG_OBJCXX],
-			     m4_defn([AC_PROG_OBJCXX])[_AM_DEPENDENCIES([OBJCXX])])])dnl
-])
-m4trace:configure.ac:16: -2- _AM_MANGLE_OPTION([no-dependencies])
-m4trace:configure.ac:16: -1- _AM_DEPENDENCIES([CC])
-m4trace:configure.ac:16: -1- AM_SET_DEPDIR
-m4trace:configure.ac:16: -1- m4_pattern_allow([^DEPDIR$])
-m4trace:configure.ac:16: -1- AM_OUTPUT_DEPENDENCY_COMMANDS
-m4trace:configure.ac:16: -1- AM_MAKE_INCLUDE
-m4trace:configure.ac:16: -1- AM_RUN_LOG([${MAKE-make} -f confmf.$s && cat confinc.out])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__include$])
-m4trace:configure.ac:16: -1- AM_DEP_TRACK
-m4trace:configure.ac:16: -1- AM_CONDITIONAL([AMDEP], [test "x$enable_dependency_tracking" != xno])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMDEP_TRUE$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMDEP_FALSE$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AMDEP_TRUE])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AMDEP_FALSE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMDEPBACKSLASH$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AMDEPBACKSLASH])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__nodep$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__nodep])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CCDEPMODE$])
-m4trace:configure.ac:16: -1- AM_CONDITIONAL([am__fastdepCC], [
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_CC_dependencies_compiler_type" = gcc3])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__fastdepCC_TRUE$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__fastdepCC_FALSE$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__fastdepCC_TRUE])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__fastdepCC_FALSE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CTAGS$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^ETAGS$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CSCOPE$])
-m4trace:configure.ac:16: -1- _AM_SILENT_RULES
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_V$])
-m4trace:configure.ac:16: -1- AM_SUBST_NOTMAKE([AM_V])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AM_V])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_DEFAULT_V$])
-m4trace:configure.ac:16: -1- AM_SUBST_NOTMAKE([AM_DEFAULT_V])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AM_DEFAULT_V])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_DEFAULT_VERBOSITY$])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_BACKSLASH$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AM_BACKSLASH])
-m4trace:configure.ac:16: -1- _AM_PROG_RM_F
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__rm_f_notfound$])
-m4trace:configure.ac:16: -1- _AM_PROG_XARGS_N
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__xargs_n$])
-m4trace:configure.ac:19: -1- LT_INIT
-m4trace:configure.ac:19: -1- m4_pattern_forbid([^_?LT_[A-Z_]+$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^(_LT_EOF|LT_DLGLOBAL|LT_DLLAZY_OR_NOW|LT_MULTI_MODULE)$])
-m4trace:configure.ac:19: -1- LTOPTIONS_VERSION
-m4trace:configure.ac:19: -1- LTSUGAR_VERSION
-m4trace:configure.ac:19: -1- LTVERSION_VERSION
-m4trace:configure.ac:19: -1- LTOBSOLETE_VERSION
-m4trace:configure.ac:19: -1- _LT_PROG_LTMAIN
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LIBTOOL$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build_cpu$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build_vendor$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build_os$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host_cpu$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host_vendor$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host_os$])
-m4trace:configure.ac:19: -1- _LT_PREPARE_SED_QUOTE_VARS
-m4trace:configure.ac:19: -1- _LT_PROG_ECHO_BACKSLASH
-m4trace:configure.ac:19: -1- LT_PATH_LD
-m4trace:configure.ac:19: -1- m4_pattern_allow([^SED$])
-m4trace:configure.ac:19: -1- AC_PROG_EGREP
-m4trace:configure.ac:19: -1- m4_pattern_allow([^GREP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^EGREP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^FGREP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^GREP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LD$])
-m4trace:configure.ac:19: -1- LT_PATH_NM
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DUMPBIN$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^ac_ct_DUMPBIN$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DUMPBIN$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^NM$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LN_S$])
-m4trace:configure.ac:19: -1- LT_CMD_MAX_LEN
-m4trace:configure.ac:19: -1- m4_pattern_allow([^FILECMD$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OBJDUMP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OBJDUMP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DLLTOOL$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DLLTOOL$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^AR$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^ac_ct_AR$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^STRIP$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^RANLIB$])
-m4trace:configure.ac:19: -1- _LT_WITH_SYSROOT
-m4trace:configure.ac:19: -1- m4_pattern_allow([LT_OBJDIR])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LT_OBJDIR$])
-m4trace:configure.ac:19: -1- _LT_CC_BASENAME([$compiler])
-m4trace:configure.ac:19: -1- _LT_PATH_TOOL_PREFIX([${ac_tool_prefix}file], [/usr/bin$PATH_SEPARATOR$PATH])
-m4trace:configure.ac:19: -1- _LT_PATH_TOOL_PREFIX([file], [/usr/bin$PATH_SEPARATOR$PATH])
-m4trace:configure.ac:19: -1- LT_SUPPORTED_TAG([CC])
-m4trace:configure.ac:19: -1- _LT_COMPILER_BOILERPLATE
-m4trace:configure.ac:19: -1- _LT_LINKER_BOILERPLATE
-m4trace:configure.ac:19: -1- _LT_COMPILER_OPTION([if $compiler supports -fno-rtti -fno-exceptions], [lt_cv_prog_compiler_rtti_exceptions], [-fno-rtti -fno-exceptions], [], [_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, )="$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, ) -fno-rtti -fno-exceptions"])
-m4trace:configure.ac:19: -1- _LT_COMPILER_OPTION([if $compiler PIC flag $_LT_TAGVAR(lt_prog_compiler_pic, ) works], [_LT_TAGVAR(lt_cv_prog_compiler_pic_works, )], [$_LT_TAGVAR(lt_prog_compiler_pic, )@&t@m4_if([],[],[ -DPIC],[m4_if([],[CXX],[ -DPIC],[])])], [], [case $_LT_TAGVAR(lt_prog_compiler_pic, ) in
-     "" | " "*) ;;
-     *) _LT_TAGVAR(lt_prog_compiler_pic, )=" $_LT_TAGVAR(lt_prog_compiler_pic, )" ;;
-     esac], [_LT_TAGVAR(lt_prog_compiler_pic, )=
-     _LT_TAGVAR(lt_prog_compiler_can_build_shared, )=no])
-m4trace:configure.ac:19: -1- _LT_LINKER_OPTION([if $compiler static flag $lt_tmp_static_flag works], [lt_cv_prog_compiler_static_works], [$lt_tmp_static_flag], [], [_LT_TAGVAR(lt_prog_compiler_static, )=])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^MANIFEST_TOOL$])
-m4trace:configure.ac:19: -1- _LT_DLL_DEF_P([$export_symbols])
-m4trace:configure.ac:19: -1- _LT_DLL_DEF_P([$export_symbols])
-m4trace:configure.ac:19: -1- _LT_REQUIRED_DARWIN_CHECKS
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DSYMUTIL$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^NMEDIT$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LIPO$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OTOOL$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OTOOL64$])
-m4trace:configure.ac:19: -1- _LT_LINKER_OPTION([if $CC understands -b], [lt_cv_prog_compiler__b], [-b], [_LT_TAGVAR(archive_cmds, )='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'], [_LT_TAGVAR(archive_cmds, )='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LT_SYS_LIBRARY_PATH$])
-m4trace:configure.ac:19: -1- _LT_COMPILER_OPTION([if $compiler PIC flag $_LT_TAGVAR(lt_prog_compiler_pic, ) works], [_LT_TAGVAR(lt_cv_prog_compiler_pic_works, )], [$_LT_TAGVAR(lt_prog_compiler_pic, )@&t@m4_if([],[],[ -DPIC],[m4_if([],[CXX],[ -DPIC],[])])], [], [case $_LT_TAGVAR(lt_prog_compiler_pic, ) in
-     "" | " "*) ;;
-     *) _LT_TAGVAR(lt_prog_compiler_pic, )=" $_LT_TAGVAR(lt_prog_compiler_pic, )" ;;
-     esac], [_LT_TAGVAR(lt_prog_compiler_pic, )=
-     _LT_TAGVAR(lt_prog_compiler_can_build_shared, )=no])
-m4trace:configure.ac:19: -1- _LT_LINKER_OPTION([if $compiler static flag $lt_tmp_static_flag works], [lt_cv_prog_compiler_static_works], [$lt_tmp_static_flag], [], [_LT_TAGVAR(lt_prog_compiler_static, )=])
-m4trace:configure.ac:19: -1- LT_SYS_DLOPEN_SELF
-m4trace:configure.ac:19: -1- m4_pattern_allow([^HAVE_DLFCN_H$])
-m4trace:configure.ac:25: -1- XORG_DEFAULT_OPTIONS
-m4trace:configure.ac:25: -1- XORG_COMPILER_FLAGS
-m4trace:configure.ac:25: -1- XORG_COMPILER_BRAND
-m4trace:configure.ac:25: -1- AC_DEFUN([_AC_UNDECLARED_BUILTIN_c], [_AC_UNDECLARED_BUILTIN])
-m4trace:configure.ac:25: -1- AC_DEFUN([_AC_FUTURE_DARWIN_c], [_AC_FUTURE_DARWIN])
-m4trace:configure.ac:25: -1- AC_DEFUN([_AC_UNDECLARED_BUILTIN_c], [_AC_UNDECLARED_BUILTIN])
-m4trace:configure.ac:25: -1- AC_DEFUN([_AC_FUTURE_DARWIN_c], [_AC_FUTURE_DARWIN])
-m4trace:configure.ac:25: -1- AC_DEFUN([_AC_UNDECLARED_BUILTIN_c], [_AC_UNDECLARED_BUILTIN])
-m4trace:configure.ac:25: -1- AC_DEFUN([_AC_FUTURE_DARWIN_c], [_AC_FUTURE_DARWIN])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wall])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wpointer-arith])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-declarations])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wformat=2], [-Wformat])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wstrict-prototypes])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-prototypes])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wnested-externs])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wbad-function-cast])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wold-style-definition], [-fd])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wunused])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wuninitialized])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wshadow])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-noreturn])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-format-attribute])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wredundant-decls])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wlogical-op])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=implicit], [-errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=nonnull])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=init-self])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=main])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=missing-braces])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=sequence-point])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=return-type], [-errwarn=E_FUNC_HAS_NO_RETURN_STMT])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=trigraphs])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=array-bounds])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=write-strings])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=address])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=int-to-pointer-cast], [-errwarn=E_BAD_PTR_INT_COMBINATION])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=pointer-to-int-cast])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wimplicit])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wnonnull])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Winit-self])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmain])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-braces])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wsequence-point])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wreturn-type])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wtrigraphs])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Warray-bounds])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wwrite-strings])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Waddress])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wint-to-pointer-cast])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wpointer-to-int-cast])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^BASE_CFLAGS$])
-m4trace:configure.ac:25: -1- XORG_CWARNFLAGS
-m4trace:configure.ac:25: -1- m4_pattern_allow([^CWARNFLAGS$])
-m4trace:configure.ac:25: -1- XORG_STRICT_OPTION
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-pedantic])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-Werror], [-errwarn])
-m4trace:configure.ac:25: -1- XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-Werror=attributes])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^STRICT_CFLAGS$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^BASE_CFLAGS$])
-m4trace:configure.ac:25: -2- m4_pattern_allow([^CWARNFLAGS$])
-m4trace:configure.ac:25: -1- XORG_DEFAULT_NOCODE_OPTIONS
-m4trace:configure.ac:25: -1- XORG_RELEASE_VERSION
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PACKAGE_VERSION_MAJOR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PACKAGE_VERSION_MINOR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PACKAGE_VERSION_PATCHLEVEL$])
-m4trace:configure.ac:25: -1- XORG_CHANGELOG
-m4trace:configure.ac:25: -1- m4_pattern_allow([^CHANGELOG_CMD$])
-m4trace:configure.ac:25: -1- XORG_INSTALL
-m4trace:configure.ac:25: -1- PKG_PROG_PKG_CONFIG
-m4trace:configure.ac:25: -1- m4_pattern_forbid([^_?PKG_[A-Z_]+$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG(_(PATH|LIBDIR|SYSROOT_DIR|ALLOW_SYSTEM_(CFLAGS|LIBS)))?$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG_(DISABLE_UNINSTALLED|TOP_BUILD_DIR|DEBUG_SPEW)$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG_PATH$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG_LIBDIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^INSTALL_CMD$])
-m4trace:configure.ac:25: -1- XORG_MANPAGE_SECTIONS
-m4trace:configure.ac:25: -1- _m4_warn([cross], [cannot check for file existence when cross compiling], [./lib/autoconf/general.m4:3066: AC_CHECK_FILE is expanded from...
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:113: XORG_MANPAGE_SECTIONS is expanded from...
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1822: XORG_DEFAULT_NOCODE_OPTIONS is expanded from...
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/aclocal/xorg-macros.m4:1838: XORG_DEFAULT_OPTIONS is expanded from...
-configure.ac:25: the top level])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^APP_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^LIB_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^FILE_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^MISC_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^DRIVER_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^ADMIN_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^APP_MAN_DIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^LIB_MAN_DIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^FILE_MAN_DIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^MISC_MAN_DIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^DRIVER_MAN_DIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^ADMIN_MAN_DIR$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^XORG_MAN_PAGE$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^MAN_SUBSTS$])
-m4trace:configure.ac:25: -1- AM_SILENT_RULES([yes])
-m4trace:configure.ac:26: -1- XORG_ENABLE_SPECS
-m4trace:configure.ac:26: -1- AM_CONDITIONAL([ENABLE_SPECS], [test x$build_specs = xyes])
-m4trace:configure.ac:26: -1- m4_pattern_allow([^ENABLE_SPECS_TRUE$])
-m4trace:configure.ac:26: -1- m4_pattern_allow([^ENABLE_SPECS_FALSE$])
-m4trace:configure.ac:26: -1- _AM_SUBST_NOTMAKE([ENABLE_SPECS_TRUE])
-m4trace:configure.ac:26: -1- _AM_SUBST_NOTMAKE([ENABLE_SPECS_FALSE])
-m4trace:configure.ac:27: -1- XORG_WITH_XMLTO([0.0.22])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^XMLTO$])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^XMLTO$])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^XMLTO$])
-m4trace:configure.ac:27: -1- AM_CONDITIONAL([HAVE_XMLTO_TEXT], [test $have_xmlto_text = yes])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_TEXT_TRUE$])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_TEXT_FALSE$])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_TEXT_TRUE])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_TEXT_FALSE])
-m4trace:configure.ac:27: -1- AM_CONDITIONAL([HAVE_XMLTO], [test "$have_xmlto" = yes])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_TRUE$])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_FALSE$])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_TRUE])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_FALSE])
-m4trace:configure.ac:28: -1- XORG_WITH_FOP
-m4trace:configure.ac:28: -1- m4_pattern_allow([^FOP$])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^FOP$])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^FOP$])
-m4trace:configure.ac:28: -1- AM_CONDITIONAL([HAVE_FOP], [test "$have_fop" = yes])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^HAVE_FOP_TRUE$])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^HAVE_FOP_FALSE$])
-m4trace:configure.ac:28: -1- _AM_SUBST_NOTMAKE([HAVE_FOP_TRUE])
-m4trace:configure.ac:28: -1- _AM_SUBST_NOTMAKE([HAVE_FOP_FALSE])
-m4trace:configure.ac:29: -1- XORG_WITH_XSLTPROC
-m4trace:configure.ac:29: -1- m4_pattern_allow([^XSLTPROC$])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^XSLTPROC$])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^XSLTPROC$])
-m4trace:configure.ac:29: -1- AM_CONDITIONAL([HAVE_XSLTPROC], [test "$have_xsltproc" = yes])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^HAVE_XSLTPROC_TRUE$])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^HAVE_XSLTPROC_FALSE$])
-m4trace:configure.ac:29: -1- _AM_SUBST_NOTMAKE([HAVE_XSLTPROC_TRUE])
-m4trace:configure.ac:29: -1- _AM_SUBST_NOTMAKE([HAVE_XSLTPROC_FALSE])
-m4trace:configure.ac:30: -1- XORG_CHECK_SGML_DOCTOOLS([1.8])
-m4trace:configure.ac:30: -1- PKG_CHECK_EXISTS([xorg-sgml-doctools m4_ifval([1.8],[>= 1.8])], [XORG_SGML_PATH=`$PKG_CONFIG --variable=sgmlrootdir xorg-sgml-doctools`], [m4_ifval([1.8],[:],
-        [if test x"$cross_compiling" != x"yes" ; then
-            AC_CHECK_FILE([$prefix/share/sgml/X11/defs.ent],
-                          [XORG_SGML_PATH=$prefix/share/sgml])
-         fi])
-    ])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^XORG_SGML_PATH$])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^STYLESHEET_SRCDIR$])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^XSL_STYLESHEET$])
-m4trace:configure.ac:30: -1- AM_CONDITIONAL([HAVE_STYLESHEETS], [test "x$XSL_STYLESHEET" != "x"])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^HAVE_STYLESHEETS_TRUE$])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^HAVE_STYLESHEETS_FALSE$])
-m4trace:configure.ac:30: -1- _AM_SUBST_NOTMAKE([HAVE_STYLESHEETS_TRUE])
-m4trace:configure.ac:30: -1- _AM_SUBST_NOTMAKE([HAVE_STYLESHEETS_FALSE])
-m4trace:configure.ac:31: -1- XORG_CHECK_MALLOC_ZERO
-m4trace:configure.ac:31: -1- m4_pattern_allow([^MALLOC_ZERO_CFLAGS$])
-m4trace:configure.ac:31: -1- m4_pattern_allow([^XMALLOC_ZERO_CFLAGS$])
-m4trace:configure.ac:31: -1- m4_pattern_allow([^XTMALLOC_ZERO_CFLAGS$])
-m4trace:configure.ac:42: -1- m4_pattern_allow([^XEXT_SOREV$])
-m4trace:configure.ac:45: -1- PKG_CHECK_MODULES([XEXT], [xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99])
-m4trace:configure.ac:45: -1- m4_pattern_allow([^XEXT_CFLAGS$])
-m4trace:configure.ac:45: -1- m4_pattern_allow([^XEXT_LIBS$])
-m4trace:configure.ac:45: -1- PKG_CHECK_EXISTS([xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99], [pkg_cv_[]XEXT_CFLAGS=`$PKG_CONFIG --[]cflags "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes ], [pkg_failed=yes])
-m4trace:configure.ac:45: -1- PKG_CHECK_EXISTS([xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99], [pkg_cv_[]XEXT_LIBS=`$PKG_CONFIG --[]libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes ], [pkg_failed=yes])
-m4trace:configure.ac:45: -1- _PKG_SHORT_ERRORS_SUPPORTED
-m4trace:configure.ac:47: -1- AX_GCC_BUILTIN([__builtin_popcountl])
-m4trace:configure.ac:47: -1- m4_pattern_allow([^HAVE___BUILTIN_POPCOUNTL$])
-m4trace:configure.ac:48: -1- m4_pattern_allow([^HAVE_REALLOCARRAY$])
-m4trace:configure.ac:48: -1- m4_pattern_allow([^LIB@&t@OBJS$])
-m4trace:configure.ac:51: -1- XORG_WITH_LINT
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT$])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_FLAGS$])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT$])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_FLAGS$])
-m4trace:configure.ac:51: -1- AM_CONDITIONAL([LINT], [test "x$LINT" != x])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_TRUE$])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_FALSE$])
-m4trace:configure.ac:51: -1- _AM_SUBST_NOTMAKE([LINT_TRUE])
-m4trace:configure.ac:51: -1- _AM_SUBST_NOTMAKE([LINT_FALSE])
-m4trace:configure.ac:52: -1- XORG_LINT_LIBRARY([Xext])
-m4trace:configure.ac:52: -1- m4_pattern_allow([^LINTLIB$])
-m4trace:configure.ac:52: -1- AM_CONDITIONAL([MAKE_LINT_LIB], [test x$make_lint_lib != xno])
-m4trace:configure.ac:52: -1- m4_pattern_allow([^MAKE_LINT_LIB_TRUE$])
-m4trace:configure.ac:52: -1- m4_pattern_allow([^MAKE_LINT_LIB_FALSE$])
-m4trace:configure.ac:52: -1- _AM_SUBST_NOTMAKE([MAKE_LINT_LIB_TRUE])
-m4trace:configure.ac:52: -1- _AM_SUBST_NOTMAKE([MAKE_LINT_LIB_FALSE])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^LIB@&t@OBJS$])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^LTLIBOBJS$])
-m4trace:configure.ac:59: -1- AM_CONDITIONAL([am__EXEEXT], [test -n "$EXEEXT"])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^am__EXEEXT_TRUE$])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^am__EXEEXT_FALSE$])
-m4trace:configure.ac:59: -1- _AM_SUBST_NOTMAKE([am__EXEEXT_TRUE])
-m4trace:configure.ac:59: -1- _AM_SUBST_NOTMAKE([am__EXEEXT_FALSE])
-m4trace:configure.ac:59: -1- _AC_AM_CONFIG_HEADER_HOOK(["$ac_file"])
-m4trace:configure.ac:59: -1- _AM_OUTPUT_DEPENDENCY_COMMANDS
-m4trace:configure.ac:59: -1- AM_RUN_LOG([cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles])
-m4trace:configure.ac:59: -1- _LT_PROG_LTMAIN
diff --git a/experiments/wasm-gui/third_party/libXext/autom4te.cache/traces.3 b/experiments/wasm-gui/third_party/libXext/autom4te.cache/traces.3
deleted file mode 100644
index 8316de261..000000000
--- a/experiments/wasm-gui/third_party/libXext/autom4te.cache/traces.3
+++ /dev/null
@@ -1,929 +0,0 @@
-m4trace:aclocal.m4:2934: -1- AC_SUBST([am__quote])
-m4trace:aclocal.m4:2934: -1- AC_SUBST_TRACE([am__quote])
-m4trace:aclocal.m4:2934: -1- m4_pattern_allow([^am__quote$])
-m4trace:aclocal.m4:3590: -1- m4_include([m4/ax_gcc_builtin.m4])
-m4trace:aclocal.m4:3591: -1- m4_include([m4/libtool.m4])
-m4trace:aclocal.m4:3592: -1- m4_include([m4/ltoptions.m4])
-m4trace:aclocal.m4:3593: -1- m4_include([m4/ltsugar.m4])
-m4trace:aclocal.m4:3594: -1- m4_include([m4/ltversion.m4])
-m4trace:aclocal.m4:3595: -1- m4_include([m4/lt~obsolete.m4])
-m4trace:configure.ac:4: -1- AC_INIT([libXext], [1.3.7], [https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues], [libXext])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^_?A[CHUM]_])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([_AC_])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^LIBOBJS$], [do not use LIBOBJS directly, use AC_LIBOBJ (see section 'AC_LIBOBJ vs LIBOBJS'])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^AS_FLAGS$])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^_?m4_])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^dnl$])
-m4trace:configure.ac:4: -1- m4_pattern_forbid([^_?AS_])
-m4trace:configure.ac:4: -1- AC_SUBST([SHELL])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([SHELL])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^SHELL$])
-m4trace:configure.ac:4: -1- AC_SUBST([PATH_SEPARATOR])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PATH_SEPARATOR])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PATH_SEPARATOR$])
-m4trace:configure.ac:4: -1- AC_SUBST([PACKAGE_NAME], [m4_ifdef([AC_PACKAGE_NAME],      ['AC_PACKAGE_NAME'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PACKAGE_NAME])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_NAME$])
-m4trace:configure.ac:4: -1- AC_SUBST([PACKAGE_TARNAME], [m4_ifdef([AC_PACKAGE_TARNAME],   ['AC_PACKAGE_TARNAME'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PACKAGE_TARNAME])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_TARNAME$])
-m4trace:configure.ac:4: -1- AC_SUBST([PACKAGE_VERSION], [m4_ifdef([AC_PACKAGE_VERSION],   ['AC_PACKAGE_VERSION'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PACKAGE_VERSION])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_VERSION$])
-m4trace:configure.ac:4: -1- AC_SUBST([PACKAGE_STRING], [m4_ifdef([AC_PACKAGE_STRING],    ['AC_PACKAGE_STRING'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PACKAGE_STRING])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_STRING$])
-m4trace:configure.ac:4: -1- AC_SUBST([PACKAGE_BUGREPORT], [m4_ifdef([AC_PACKAGE_BUGREPORT], ['AC_PACKAGE_BUGREPORT'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PACKAGE_BUGREPORT])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_BUGREPORT$])
-m4trace:configure.ac:4: -1- AC_SUBST([PACKAGE_URL], [m4_ifdef([AC_PACKAGE_URL],       ['AC_PACKAGE_URL'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([PACKAGE_URL])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_URL$])
-m4trace:configure.ac:4: -1- AC_SUBST([exec_prefix], [NONE])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([exec_prefix])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^exec_prefix$])
-m4trace:configure.ac:4: -1- AC_SUBST([prefix], [NONE])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([prefix])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^prefix$])
-m4trace:configure.ac:4: -1- AC_SUBST([program_transform_name], [s,x,x,])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([program_transform_name])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^program_transform_name$])
-m4trace:configure.ac:4: -1- AC_SUBST([bindir], ['${exec_prefix}/bin'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([bindir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^bindir$])
-m4trace:configure.ac:4: -1- AC_SUBST([sbindir], ['${exec_prefix}/sbin'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([sbindir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^sbindir$])
-m4trace:configure.ac:4: -1- AC_SUBST([libexecdir], ['${exec_prefix}/libexec'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([libexecdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^libexecdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([datarootdir], ['${prefix}/share'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([datarootdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^datarootdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([datadir], ['${datarootdir}'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([datadir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^datadir$])
-m4trace:configure.ac:4: -1- AC_SUBST([sysconfdir], ['${prefix}/etc'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([sysconfdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^sysconfdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([sharedstatedir], ['${prefix}/com'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([sharedstatedir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^sharedstatedir$])
-m4trace:configure.ac:4: -1- AC_SUBST([localstatedir], ['${prefix}/var'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([localstatedir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^localstatedir$])
-m4trace:configure.ac:4: -1- AC_SUBST([runstatedir], ['${localstatedir}/run'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([runstatedir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^runstatedir$])
-m4trace:configure.ac:4: -1- AC_SUBST([includedir], ['${prefix}/include'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([includedir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^includedir$])
-m4trace:configure.ac:4: -1- AC_SUBST([oldincludedir], ['/usr/include'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([oldincludedir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^oldincludedir$])
-m4trace:configure.ac:4: -1- AC_SUBST([docdir], [m4_ifset([AC_PACKAGE_TARNAME],
-				     ['${datarootdir}/doc/${PACKAGE_TARNAME}'],
-				     ['${datarootdir}/doc/${PACKAGE}'])])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([docdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^docdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([infodir], ['${datarootdir}/info'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([infodir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^infodir$])
-m4trace:configure.ac:4: -1- AC_SUBST([htmldir], ['${docdir}'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([htmldir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^htmldir$])
-m4trace:configure.ac:4: -1- AC_SUBST([dvidir], ['${docdir}'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([dvidir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^dvidir$])
-m4trace:configure.ac:4: -1- AC_SUBST([pdfdir], ['${docdir}'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([pdfdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^pdfdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([psdir], ['${docdir}'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([psdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^psdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([libdir], ['${exec_prefix}/lib'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([libdir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^libdir$])
-m4trace:configure.ac:4: -1- AC_SUBST([localedir], ['${datarootdir}/locale'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([localedir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^localedir$])
-m4trace:configure.ac:4: -1- AC_SUBST([mandir], ['${datarootdir}/man'])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([mandir])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^mandir$])
-m4trace:configure.ac:4: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_NAME])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_NAME$])
-m4trace:configure.ac:4: -1- AH_OUTPUT([PACKAGE_NAME], [/* Define to the full name of this package. */
-@%:@undef PACKAGE_NAME])
-m4trace:configure.ac:4: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_TARNAME])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_TARNAME$])
-m4trace:configure.ac:4: -1- AH_OUTPUT([PACKAGE_TARNAME], [/* Define to the one symbol short name of this package. */
-@%:@undef PACKAGE_TARNAME])
-m4trace:configure.ac:4: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_VERSION])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_VERSION$])
-m4trace:configure.ac:4: -1- AH_OUTPUT([PACKAGE_VERSION], [/* Define to the version of this package. */
-@%:@undef PACKAGE_VERSION])
-m4trace:configure.ac:4: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_STRING])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_STRING$])
-m4trace:configure.ac:4: -1- AH_OUTPUT([PACKAGE_STRING], [/* Define to the full name and version of this package. */
-@%:@undef PACKAGE_STRING])
-m4trace:configure.ac:4: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_BUGREPORT])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_BUGREPORT$])
-m4trace:configure.ac:4: -1- AH_OUTPUT([PACKAGE_BUGREPORT], [/* Define to the address where bug reports for this package should be sent. */
-@%:@undef PACKAGE_BUGREPORT])
-m4trace:configure.ac:4: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_URL])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^PACKAGE_URL$])
-m4trace:configure.ac:4: -1- AH_OUTPUT([PACKAGE_URL], [/* Define to the home page for this package. */
-@%:@undef PACKAGE_URL])
-m4trace:configure.ac:4: -1- AC_SUBST([DEFS])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([DEFS])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^DEFS$])
-m4trace:configure.ac:4: -1- AC_SUBST([LIBS])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([LIBS])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^LIBS$])
-m4trace:configure.ac:4: -1- AC_SUBST([build_alias])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([build_alias])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^build_alias$])
-m4trace:configure.ac:4: -1- AC_SUBST([host_alias])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([host_alias])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^host_alias$])
-m4trace:configure.ac:4: -1- AC_SUBST([target_alias])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([target_alias])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^target_alias$])
-m4trace:configure.ac:4: -1- AC_SUBST([ECHO_C])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([ECHO_C])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^ECHO_C$])
-m4trace:configure.ac:4: -1- AC_SUBST([ECHO_N])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([ECHO_N])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^ECHO_N$])
-m4trace:configure.ac:4: -1- AC_SUBST([ECHO_T])
-m4trace:configure.ac:4: -1- AC_SUBST_TRACE([ECHO_T])
-m4trace:configure.ac:4: -1- m4_pattern_allow([^ECHO_T$])
-m4trace:configure.ac:7: -1- AC_CONFIG_HEADERS([config.h])
-m4trace:configure.ac:8: -1- AC_CONFIG_MACRO_DIR([m4])
-m4trace:configure.ac:8: -1- AC_CONFIG_MACRO_DIR_TRACE([m4])
-m4trace:configure.ac:13: -1- AH_OUTPUT([USE_SYSTEM_EXTENSIONS], [/* Enable extensions on AIX, Interix, z/OS.  */
-#ifndef _ALL_SOURCE
-# undef _ALL_SOURCE
-#endif
-/* Enable extensions on Cosmopolitan Libc. */
-#ifndef _COSMO_SOURCE
-# undef _COSMO_SOURCE
-#endif
-/* Enable general extensions on macOS.  */
-#ifndef _DARWIN_C_SOURCE
-# undef _DARWIN_C_SOURCE
-#endif
-/* Enable general extensions on Solaris.  */
-#ifndef __EXTENSIONS__
-# undef __EXTENSIONS__
-#endif
-/* Enable GNU extensions on systems that have them.  */
-#ifndef _GNU_SOURCE
-# undef _GNU_SOURCE
-#endif
-/* Enable X/Open compliant socket functions that do not require linking
-   with -lxnet on HP-UX 11.11.  */
-#ifndef _HPUX_ALT_XOPEN_SOCKET_API
-# undef _HPUX_ALT_XOPEN_SOCKET_API
-#endif
-/* Identify the host operating system as Minix.
-   This macro does not affect the system headers\' behavior.
-   A future release of Autoconf may stop defining this macro.  */
-#ifndef _MINIX
-# undef _MINIX
-#endif
-/* Enable general extensions on NetBSD.
-   Enable NetBSD compatibility extensions on Minix.  */
-#ifndef _NETBSD_SOURCE
-# undef _NETBSD_SOURCE
-#endif
-/* Enable OpenBSD compatibility extensions on NetBSD.
-   Oddly enough, this does nothing on OpenBSD.  */
-#ifndef _OPENBSD_SOURCE
-# undef _OPENBSD_SOURCE
-#endif
-/* Define to 1 if needed for POSIX-compatible behavior.  */
-#ifndef _POSIX_SOURCE
-# undef _POSIX_SOURCE
-#endif
-/* Define to 2 if needed for POSIX-compatible behavior.  */
-#ifndef _POSIX_1_SOURCE
-# undef _POSIX_1_SOURCE
-#endif
-/* Enable POSIX-compatible threading on Solaris.  */
-#ifndef _POSIX_PTHREAD_SEMANTICS
-# undef _POSIX_PTHREAD_SEMANTICS
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-5:2014.  */
-#ifndef __STDC_WANT_IEC_60559_ATTRIBS_EXT__
-# undef __STDC_WANT_IEC_60559_ATTRIBS_EXT__
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-1:2014.  */
-#ifndef __STDC_WANT_IEC_60559_BFP_EXT__
-# undef __STDC_WANT_IEC_60559_BFP_EXT__
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-2:2015.  */
-#ifndef __STDC_WANT_IEC_60559_DFP_EXT__
-# undef __STDC_WANT_IEC_60559_DFP_EXT__
-#endif
-/* Enable extensions specified by C23 Annex F.  */
-#ifndef __STDC_WANT_IEC_60559_EXT__
-# undef __STDC_WANT_IEC_60559_EXT__
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-4:2015.  */
-#ifndef __STDC_WANT_IEC_60559_FUNCS_EXT__
-# undef __STDC_WANT_IEC_60559_FUNCS_EXT__
-#endif
-/* Enable extensions specified by C23 Annex H and ISO/IEC TS 18661-3:2015.  */
-#ifndef __STDC_WANT_IEC_60559_TYPES_EXT__
-# undef __STDC_WANT_IEC_60559_TYPES_EXT__
-#endif
-/* Enable extensions specified by ISO/IEC TR 24731-2:2010.  */
-#ifndef __STDC_WANT_LIB_EXT2__
-# undef __STDC_WANT_LIB_EXT2__
-#endif
-/* Enable extensions specified by ISO/IEC 24747:2009.  */
-#ifndef __STDC_WANT_MATH_SPEC_FUNCS__
-# undef __STDC_WANT_MATH_SPEC_FUNCS__
-#endif
-/* Enable extensions on HP NonStop.  */
-#ifndef _TANDEM_SOURCE
-# undef _TANDEM_SOURCE
-#endif
-/* Enable X/Open extensions.  Define to 500 only if necessary
-   to make mbstate_t available.  */
-#ifndef _XOPEN_SOURCE
-# undef _XOPEN_SOURCE
-#endif
-])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_STDIO_H], [/* Define to 1 if you have the <stdio.h> header file. */
-@%:@undef HAVE_STDIO_H])
-m4trace:configure.ac:13: -1- AC_SUBST([CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([CFLAGS])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CFLAGS])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CFLAGS$])
-m4trace:configure.ac:13: -1- AC_SUBST([LDFLAGS])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([LDFLAGS])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^LDFLAGS$])
-m4trace:configure.ac:13: -1- AC_SUBST([LIBS])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([LIBS])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^LIBS$])
-m4trace:configure.ac:13: -1- AC_SUBST([CPPFLAGS])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CPPFLAGS])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CPPFLAGS$])
-m4trace:configure.ac:13: -1- AC_SUBST([CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([ac_ct_CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([ac_ct_CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^ac_ct_CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([CC])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([CC])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^CC$])
-m4trace:configure.ac:13: -1- AC_SUBST([EXEEXT], [$ac_cv_exeext])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([EXEEXT])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^EXEEXT$])
-m4trace:configure.ac:13: -1- AC_SUBST([OBJEXT], [$ac_cv_objext])
-m4trace:configure.ac:13: -1- AC_SUBST_TRACE([OBJEXT])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^OBJEXT$])
-m4trace:configure.ac:13: -1- AC_REQUIRE_AUX_FILE([compile])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_STDLIB_H], [/* Define to 1 if you have the <stdlib.h> header file. */
-@%:@undef HAVE_STDLIB_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_STRING_H], [/* Define to 1 if you have the <string.h> header file. */
-@%:@undef HAVE_STRING_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_INTTYPES_H], [/* Define to 1 if you have the <inttypes.h> header file. */
-@%:@undef HAVE_INTTYPES_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_STDINT_H], [/* Define to 1 if you have the <stdint.h> header file. */
-@%:@undef HAVE_STDINT_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_STRINGS_H], [/* Define to 1 if you have the <strings.h> header file. */
-@%:@undef HAVE_STRINGS_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_SYS_STAT_H], [/* Define to 1 if you have the <sys/stat.h> header file. */
-@%:@undef HAVE_SYS_STAT_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_SYS_TYPES_H], [/* Define to 1 if you have the <sys/types.h> header file. */
-@%:@undef HAVE_SYS_TYPES_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_UNISTD_H], [/* Define to 1 if you have the <unistd.h> header file. */
-@%:@undef HAVE_UNISTD_H])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([STDC_HEADERS])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^STDC_HEADERS$])
-m4trace:configure.ac:13: -1- AH_OUTPUT([STDC_HEADERS], [/* Define to 1 if all of the C89 standard headers exist (not just the ones
-   required in a freestanding environment). This macro is provided for
-   backward compatibility; new code need not use it. */
-@%:@undef STDC_HEADERS])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_WCHAR_H], [/* Define to 1 if you have the <wchar.h> header file. */
-@%:@undef HAVE_WCHAR_H])
-m4trace:configure.ac:13: -1- AH_OUTPUT([HAVE_MINIX_CONFIG_H], [/* Define to 1 if you have the <minix/config.h> header file. */
-@%:@undef HAVE_MINIX_CONFIG_H])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_ALL_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_ALL_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_COSMO_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_COSMO_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_DARWIN_C_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_DARWIN_C_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_GNU_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_GNU_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_HPUX_ALT_XOPEN_SOCKET_API])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_HPUX_ALT_XOPEN_SOCKET_API$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_NETBSD_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_NETBSD_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_OPENBSD_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_OPENBSD_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_POSIX_PTHREAD_SEMANTICS])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_POSIX_PTHREAD_SEMANTICS$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_IEC_60559_ATTRIBS_EXT__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_ATTRIBS_EXT__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_IEC_60559_BFP_EXT__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_BFP_EXT__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_IEC_60559_DFP_EXT__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_DFP_EXT__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_IEC_60559_EXT__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_EXT__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_IEC_60559_FUNCS_EXT__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_FUNCS_EXT__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_IEC_60559_TYPES_EXT__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_IEC_60559_TYPES_EXT__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_LIB_EXT2__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_LIB_EXT2__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__STDC_WANT_MATH_SPEC_FUNCS__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__STDC_WANT_MATH_SPEC_FUNCS__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_TANDEM_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_TANDEM_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_MINIX])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_MINIX$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_POSIX_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_POSIX_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_POSIX_1_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_POSIX_1_SOURCE$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([__EXTENSIONS__])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^__EXTENSIONS__$])
-m4trace:configure.ac:13: -1- AC_DEFINE_TRACE_LITERAL([_XOPEN_SOURCE])
-m4trace:configure.ac:13: -1- m4_pattern_allow([^_XOPEN_SOURCE$])
-m4trace:configure.ac:16: -1- AM_INIT_AUTOMAKE([foreign dist-xz])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_[A-Z]+FLAGS$])
-m4trace:configure.ac:16: -1- AM_AUTOMAKE_VERSION([1.18.1])
-m4trace:configure.ac:16: -1- AC_REQUIRE_AUX_FILE([install-sh])
-m4trace:configure.ac:16: -1- AC_SUBST([INSTALL_PROGRAM])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([INSTALL_PROGRAM])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_PROGRAM$])
-m4trace:configure.ac:16: -1- AC_SUBST([INSTALL_SCRIPT])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([INSTALL_SCRIPT])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_SCRIPT$])
-m4trace:configure.ac:16: -1- AC_SUBST([INSTALL_DATA])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([INSTALL_DATA])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_DATA$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__isrc], [' -I$(srcdir)'])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__isrc])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__isrc$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__isrc])
-m4trace:configure.ac:16: -1- AC_SUBST([CYGPATH_W])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([CYGPATH_W])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CYGPATH_W$])
-m4trace:configure.ac:16: -1- AC_SUBST([PACKAGE], ['AC_PACKAGE_TARNAME'])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([PACKAGE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^PACKAGE$])
-m4trace:configure.ac:16: -1- AC_SUBST([VERSION], ['AC_PACKAGE_VERSION'])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([VERSION])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^VERSION$])
-m4trace:configure.ac:16: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^PACKAGE$])
-m4trace:configure.ac:16: -1- AH_OUTPUT([PACKAGE], [/* Name of package */
-@%:@undef PACKAGE])
-m4trace:configure.ac:16: -1- AC_DEFINE_TRACE_LITERAL([VERSION])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^VERSION$])
-m4trace:configure.ac:16: -1- AH_OUTPUT([VERSION], [/* Version number of package */
-@%:@undef VERSION])
-m4trace:configure.ac:16: -1- AC_REQUIRE_AUX_FILE([missing])
-m4trace:configure.ac:16: -1- AC_SUBST([ACLOCAL])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([ACLOCAL])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^ACLOCAL$])
-m4trace:configure.ac:16: -1- AC_SUBST([AUTOCONF])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AUTOCONF])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AUTOCONF$])
-m4trace:configure.ac:16: -1- AC_SUBST([AUTOMAKE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AUTOMAKE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AUTOMAKE$])
-m4trace:configure.ac:16: -1- AC_SUBST([AUTOHEADER])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AUTOHEADER])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AUTOHEADER$])
-m4trace:configure.ac:16: -1- AC_SUBST([MAKEINFO])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([MAKEINFO])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^MAKEINFO$])
-m4trace:configure.ac:16: -1- AC_SUBST([install_sh])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([install_sh])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^install_sh$])
-m4trace:configure.ac:16: -1- AC_SUBST([STRIP])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([STRIP])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^STRIP$])
-m4trace:configure.ac:16: -1- AC_SUBST([INSTALL_STRIP_PROGRAM])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([INSTALL_STRIP_PROGRAM])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^INSTALL_STRIP_PROGRAM$])
-m4trace:configure.ac:16: -1- AC_REQUIRE_AUX_FILE([install-sh])
-m4trace:configure.ac:16: -1- AC_SUBST([MKDIR_P])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([MKDIR_P])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^MKDIR_P$])
-m4trace:configure.ac:16: -1- AC_SUBST([mkdir_p], ['$(MKDIR_P)'])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([mkdir_p])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^mkdir_p$])
-m4trace:configure.ac:16: -1- AC_SUBST([AWK])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AWK])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AWK$])
-m4trace:configure.ac:16: -1- AC_SUBST([SET_MAKE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([SET_MAKE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^SET_MAKE$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__leading_dot])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__leading_dot])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__leading_dot$])
-m4trace:configure.ac:16: -1- AC_SUBST([AMTAR], ['$${TAR-tar}'])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AMTAR])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMTAR$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__tar])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__tar])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__tar$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__untar])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__untar])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__untar$])
-m4trace:configure.ac:16: -1- AC_SUBST([DEPDIR], ["${am__leading_dot}deps"])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([DEPDIR])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^DEPDIR$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__include])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__include])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__include$])
-m4trace:configure.ac:16: -1- AM_CONDITIONAL([AMDEP], [test "x$enable_dependency_tracking" != xno])
-m4trace:configure.ac:16: -1- AC_SUBST([AMDEP_TRUE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AMDEP_TRUE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMDEP_TRUE$])
-m4trace:configure.ac:16: -1- AC_SUBST([AMDEP_FALSE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AMDEP_FALSE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMDEP_FALSE$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AMDEP_TRUE])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AMDEP_FALSE])
-m4trace:configure.ac:16: -1- AC_SUBST([AMDEPBACKSLASH])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AMDEPBACKSLASH])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AMDEPBACKSLASH$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AMDEPBACKSLASH])
-m4trace:configure.ac:16: -1- AC_SUBST([am__nodep])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__nodep])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__nodep$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__nodep])
-m4trace:configure.ac:16: -1- AC_SUBST([CCDEPMODE], [depmode=$am_cv_CC_dependencies_compiler_type])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([CCDEPMODE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CCDEPMODE$])
-m4trace:configure.ac:16: -1- AM_CONDITIONAL([am__fastdepCC], [
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_CC_dependencies_compiler_type" = gcc3])
-m4trace:configure.ac:16: -1- AC_SUBST([am__fastdepCC_TRUE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__fastdepCC_TRUE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__fastdepCC_TRUE$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__fastdepCC_FALSE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__fastdepCC_FALSE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__fastdepCC_FALSE$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__fastdepCC_TRUE])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([am__fastdepCC_FALSE])
-m4trace:configure.ac:16: -1- AC_SUBST([CTAGS])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([CTAGS])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CTAGS$])
-m4trace:configure.ac:16: -1- AC_SUBST([ETAGS])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([ETAGS])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^ETAGS$])
-m4trace:configure.ac:16: -1- AC_SUBST([CSCOPE])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([CSCOPE])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^CSCOPE$])
-m4trace:configure.ac:16: -1- AC_SUBST([AM_V])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AM_V])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_V$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AM_V])
-m4trace:configure.ac:16: -1- AC_SUBST([AM_DEFAULT_V])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AM_DEFAULT_V])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_DEFAULT_V$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AM_DEFAULT_V])
-m4trace:configure.ac:16: -1- AC_SUBST([AM_DEFAULT_VERBOSITY])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AM_DEFAULT_VERBOSITY])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_DEFAULT_VERBOSITY$])
-m4trace:configure.ac:16: -1- AC_SUBST([AM_BACKSLASH])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([AM_BACKSLASH])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^AM_BACKSLASH$])
-m4trace:configure.ac:16: -1- _AM_SUBST_NOTMAKE([AM_BACKSLASH])
-m4trace:configure.ac:16: -1- AC_SUBST([am__rm_f_notfound])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__rm_f_notfound])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__rm_f_notfound$])
-m4trace:configure.ac:16: -1- AC_SUBST([am__xargs_n])
-m4trace:configure.ac:16: -1- AC_SUBST_TRACE([am__xargs_n])
-m4trace:configure.ac:16: -1- m4_pattern_allow([^am__xargs_n$])
-m4trace:configure.ac:19: -1- LT_INIT
-m4trace:configure.ac:19: -1- m4_pattern_forbid([^_?LT_[A-Z_]+$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^(_LT_EOF|LT_DLGLOBAL|LT_DLLAZY_OR_NOW|LT_MULTI_MODULE)$])
-m4trace:configure.ac:19: -1- AC_REQUIRE_AUX_FILE([ltmain.sh])
-m4trace:configure.ac:19: -1- AC_SUBST([LIBTOOL])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([LIBTOOL])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LIBTOOL$])
-m4trace:configure.ac:19: -1- AC_CANONICAL_HOST
-m4trace:configure.ac:19: -1- AC_CANONICAL_BUILD
-m4trace:configure.ac:19: -1- AC_REQUIRE_AUX_FILE([config.sub])
-m4trace:configure.ac:19: -1- AC_REQUIRE_AUX_FILE([config.guess])
-m4trace:configure.ac:19: -1- AC_SUBST([build], [$ac_cv_build])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([build])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build$])
-m4trace:configure.ac:19: -1- AC_SUBST([build_cpu], [$[1]])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([build_cpu])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build_cpu$])
-m4trace:configure.ac:19: -1- AC_SUBST([build_vendor], [$[2]])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([build_vendor])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build_vendor$])
-m4trace:configure.ac:19: -1- AC_SUBST([build_os])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([build_os])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^build_os$])
-m4trace:configure.ac:19: -1- AC_SUBST([host], [$ac_cv_host])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([host])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host$])
-m4trace:configure.ac:19: -1- AC_SUBST([host_cpu], [$[1]])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([host_cpu])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host_cpu$])
-m4trace:configure.ac:19: -1- AC_SUBST([host_vendor], [$[2]])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([host_vendor])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host_vendor$])
-m4trace:configure.ac:19: -1- AC_SUBST([host_os])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([host_os])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^host_os$])
-m4trace:configure.ac:19: -1- AC_SUBST([SED])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([SED])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^SED$])
-m4trace:configure.ac:19: -1- AC_SUBST([GREP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([GREP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^GREP$])
-m4trace:configure.ac:19: -1- AC_SUBST([EGREP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([EGREP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^EGREP$])
-m4trace:configure.ac:19: -1- AC_SUBST([FGREP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([FGREP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^FGREP$])
-m4trace:configure.ac:19: -1- AC_SUBST([GREP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([GREP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^GREP$])
-m4trace:configure.ac:19: -1- AC_SUBST([LD])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([LD])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LD$])
-m4trace:configure.ac:19: -1- AC_SUBST([DUMPBIN])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([DUMPBIN])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DUMPBIN$])
-m4trace:configure.ac:19: -1- AC_SUBST([ac_ct_DUMPBIN])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([ac_ct_DUMPBIN])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^ac_ct_DUMPBIN$])
-m4trace:configure.ac:19: -1- AC_SUBST([DUMPBIN])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([DUMPBIN])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DUMPBIN$])
-m4trace:configure.ac:19: -1- AC_SUBST([NM])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([NM])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^NM$])
-m4trace:configure.ac:19: -1- AC_SUBST([LN_S], [$as_ln_s])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([LN_S])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LN_S$])
-m4trace:configure.ac:19: -1- AC_SUBST([FILECMD])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([FILECMD])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^FILECMD$])
-m4trace:configure.ac:19: -1- AC_SUBST([OBJDUMP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([OBJDUMP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OBJDUMP$])
-m4trace:configure.ac:19: -1- AC_SUBST([OBJDUMP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([OBJDUMP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OBJDUMP$])
-m4trace:configure.ac:19: -1- AC_SUBST([DLLTOOL])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([DLLTOOL])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DLLTOOL$])
-m4trace:configure.ac:19: -1- AC_SUBST([DLLTOOL])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([DLLTOOL])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DLLTOOL$])
-m4trace:configure.ac:19: -1- AC_SUBST([AR])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([AR])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^AR$])
-m4trace:configure.ac:19: -1- AC_SUBST([ac_ct_AR])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([ac_ct_AR])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^ac_ct_AR$])
-m4trace:configure.ac:19: -1- AC_SUBST([STRIP])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([STRIP])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^STRIP$])
-m4trace:configure.ac:19: -1- AC_SUBST([RANLIB])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([RANLIB])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^RANLIB$])
-m4trace:configure.ac:19: -1- m4_pattern_allow([LT_OBJDIR])
-m4trace:configure.ac:19: -1- AC_DEFINE_TRACE_LITERAL([LT_OBJDIR])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LT_OBJDIR$])
-m4trace:configure.ac:19: -1- AH_OUTPUT([LT_OBJDIR], [/* Define to the sub-directory where libtool stores uninstalled libraries. */
-@%:@undef LT_OBJDIR])
-m4trace:configure.ac:19: -1- LT_SUPPORTED_TAG([CC])
-m4trace:configure.ac:19: -1- AC_SUBST([MANIFEST_TOOL])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([MANIFEST_TOOL])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^MANIFEST_TOOL$])
-m4trace:configure.ac:19: -1- AC_SUBST([DSYMUTIL])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([DSYMUTIL])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^DSYMUTIL$])
-m4trace:configure.ac:19: -1- AC_SUBST([NMEDIT])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([NMEDIT])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^NMEDIT$])
-m4trace:configure.ac:19: -1- AC_SUBST([LIPO])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([LIPO])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LIPO$])
-m4trace:configure.ac:19: -1- AC_SUBST([OTOOL])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([OTOOL])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OTOOL$])
-m4trace:configure.ac:19: -1- AC_SUBST([OTOOL64])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([OTOOL64])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^OTOOL64$])
-m4trace:configure.ac:19: -1- AC_SUBST([LT_SYS_LIBRARY_PATH])
-m4trace:configure.ac:19: -1- AC_SUBST_TRACE([LT_SYS_LIBRARY_PATH])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^LT_SYS_LIBRARY_PATH$])
-m4trace:configure.ac:19: -1- AH_OUTPUT([HAVE_DLFCN_H], [/* Define to 1 if you have the <dlfcn.h> header file. */
-@%:@undef HAVE_DLFCN_H])
-m4trace:configure.ac:19: -1- AC_DEFINE_TRACE_LITERAL([HAVE_DLFCN_H])
-m4trace:configure.ac:19: -1- m4_pattern_allow([^HAVE_DLFCN_H$])
-m4trace:configure.ac:25: -1- AC_SUBST([BASE_CFLAGS])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([BASE_CFLAGS])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^BASE_CFLAGS$])
-m4trace:configure.ac:25: -1- AC_SUBST([CWARNFLAGS])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([CWARNFLAGS])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^CWARNFLAGS$])
-m4trace:configure.ac:25: -1- AC_SUBST([STRICT_CFLAGS])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([STRICT_CFLAGS])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^STRICT_CFLAGS$])
-m4trace:configure.ac:25: -1- AC_SUBST([BASE_CFLAGS])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([BASE_CFLAGS])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^BASE_CFLAGS$])
-m4trace:configure.ac:25: -2- AC_SUBST([CWARNFLAGS])
-m4trace:configure.ac:25: -2- AC_SUBST_TRACE([CWARNFLAGS])
-m4trace:configure.ac:25: -2- m4_pattern_allow([^CWARNFLAGS$])
-m4trace:configure.ac:25: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_VERSION_MAJOR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PACKAGE_VERSION_MAJOR$])
-m4trace:configure.ac:25: -1- AH_OUTPUT([PACKAGE_VERSION_MAJOR], [/* Major version of this package */
-@%:@undef PACKAGE_VERSION_MAJOR])
-m4trace:configure.ac:25: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_VERSION_MINOR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PACKAGE_VERSION_MINOR$])
-m4trace:configure.ac:25: -1- AH_OUTPUT([PACKAGE_VERSION_MINOR], [/* Minor version of this package */
-@%:@undef PACKAGE_VERSION_MINOR])
-m4trace:configure.ac:25: -1- AC_DEFINE_TRACE_LITERAL([PACKAGE_VERSION_PATCHLEVEL])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PACKAGE_VERSION_PATCHLEVEL$])
-m4trace:configure.ac:25: -1- AH_OUTPUT([PACKAGE_VERSION_PATCHLEVEL], [/* Patch version of this package */
-@%:@undef PACKAGE_VERSION_PATCHLEVEL])
-m4trace:configure.ac:25: -1- AC_SUBST([CHANGELOG_CMD])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([CHANGELOG_CMD])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^CHANGELOG_CMD$])
-m4trace:configure.ac:25: -1- m4_pattern_forbid([^_?PKG_[A-Z_]+$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG(_(PATH|LIBDIR|SYSROOT_DIR|ALLOW_SYSTEM_(CFLAGS|LIBS)))?$])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG_(DISABLE_UNINSTALLED|TOP_BUILD_DIR|DEBUG_SPEW)$])
-m4trace:configure.ac:25: -1- AC_SUBST([PKG_CONFIG])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([PKG_CONFIG])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG$])
-m4trace:configure.ac:25: -1- AC_SUBST([PKG_CONFIG_PATH])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([PKG_CONFIG_PATH])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG_PATH$])
-m4trace:configure.ac:25: -1- AC_SUBST([PKG_CONFIG_LIBDIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([PKG_CONFIG_LIBDIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG_LIBDIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([PKG_CONFIG])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([PKG_CONFIG])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^PKG_CONFIG$])
-m4trace:configure.ac:25: -1- AC_SUBST([INSTALL_CMD])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([INSTALL_CMD])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^INSTALL_CMD$])
-m4trace:configure.ac:25: -1- _m4_warn([cross], [cannot check for file existence when cross compiling], [./lib/autoconf/general.m4:3066: AC_CHECK_FILE is expanded from...
-aclocal.m4:479: XORG_MANPAGE_SECTIONS is expanded from...
-aclocal.m4:2188: XORG_DEFAULT_NOCODE_OPTIONS is expanded from...
-aclocal.m4:2204: XORG_DEFAULT_OPTIONS is expanded from...
-configure.ac:25: the top level])
-m4trace:configure.ac:25: -1- AC_SUBST([APP_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([APP_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^APP_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- AC_SUBST([LIB_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([LIB_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^LIB_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- AC_SUBST([FILE_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([FILE_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^FILE_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- AC_SUBST([MISC_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([MISC_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^MISC_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- AC_SUBST([DRIVER_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([DRIVER_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^DRIVER_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- AC_SUBST([ADMIN_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([ADMIN_MAN_SUFFIX])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^ADMIN_MAN_SUFFIX$])
-m4trace:configure.ac:25: -1- AC_SUBST([APP_MAN_DIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([APP_MAN_DIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^APP_MAN_DIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([LIB_MAN_DIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([LIB_MAN_DIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^LIB_MAN_DIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([FILE_MAN_DIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([FILE_MAN_DIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^FILE_MAN_DIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([MISC_MAN_DIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([MISC_MAN_DIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^MISC_MAN_DIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([DRIVER_MAN_DIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([DRIVER_MAN_DIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^DRIVER_MAN_DIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([ADMIN_MAN_DIR])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([ADMIN_MAN_DIR])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^ADMIN_MAN_DIR$])
-m4trace:configure.ac:25: -1- AC_SUBST([XORG_MAN_PAGE])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([XORG_MAN_PAGE])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^XORG_MAN_PAGE$])
-m4trace:configure.ac:25: -1- AC_SUBST([MAN_SUBSTS])
-m4trace:configure.ac:25: -1- AC_SUBST_TRACE([MAN_SUBSTS])
-m4trace:configure.ac:25: -1- m4_pattern_allow([^MAN_SUBSTS$])
-m4trace:configure.ac:25: -1- AM_SILENT_RULES([yes])
-m4trace:configure.ac:26: -1- AM_CONDITIONAL([ENABLE_SPECS], [test x$build_specs = xyes])
-m4trace:configure.ac:26: -1- AC_SUBST([ENABLE_SPECS_TRUE])
-m4trace:configure.ac:26: -1- AC_SUBST_TRACE([ENABLE_SPECS_TRUE])
-m4trace:configure.ac:26: -1- m4_pattern_allow([^ENABLE_SPECS_TRUE$])
-m4trace:configure.ac:26: -1- AC_SUBST([ENABLE_SPECS_FALSE])
-m4trace:configure.ac:26: -1- AC_SUBST_TRACE([ENABLE_SPECS_FALSE])
-m4trace:configure.ac:26: -1- m4_pattern_allow([^ENABLE_SPECS_FALSE$])
-m4trace:configure.ac:26: -1- _AM_SUBST_NOTMAKE([ENABLE_SPECS_TRUE])
-m4trace:configure.ac:26: -1- _AM_SUBST_NOTMAKE([ENABLE_SPECS_FALSE])
-m4trace:configure.ac:27: -1- AC_SUBST([XMLTO])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([XMLTO])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^XMLTO$])
-m4trace:configure.ac:27: -1- AC_SUBST([XMLTO])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([XMLTO])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^XMLTO$])
-m4trace:configure.ac:27: -1- AC_SUBST([XMLTO])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([XMLTO])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^XMLTO$])
-m4trace:configure.ac:27: -1- AM_CONDITIONAL([HAVE_XMLTO_TEXT], [test $have_xmlto_text = yes])
-m4trace:configure.ac:27: -1- AC_SUBST([HAVE_XMLTO_TEXT_TRUE])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([HAVE_XMLTO_TEXT_TRUE])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_TEXT_TRUE$])
-m4trace:configure.ac:27: -1- AC_SUBST([HAVE_XMLTO_TEXT_FALSE])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([HAVE_XMLTO_TEXT_FALSE])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_TEXT_FALSE$])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_TEXT_TRUE])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_TEXT_FALSE])
-m4trace:configure.ac:27: -1- AM_CONDITIONAL([HAVE_XMLTO], [test "$have_xmlto" = yes])
-m4trace:configure.ac:27: -1- AC_SUBST([HAVE_XMLTO_TRUE])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([HAVE_XMLTO_TRUE])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_TRUE$])
-m4trace:configure.ac:27: -1- AC_SUBST([HAVE_XMLTO_FALSE])
-m4trace:configure.ac:27: -1- AC_SUBST_TRACE([HAVE_XMLTO_FALSE])
-m4trace:configure.ac:27: -1- m4_pattern_allow([^HAVE_XMLTO_FALSE$])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_TRUE])
-m4trace:configure.ac:27: -1- _AM_SUBST_NOTMAKE([HAVE_XMLTO_FALSE])
-m4trace:configure.ac:28: -1- AC_SUBST([FOP])
-m4trace:configure.ac:28: -1- AC_SUBST_TRACE([FOP])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^FOP$])
-m4trace:configure.ac:28: -1- AC_SUBST([FOP])
-m4trace:configure.ac:28: -1- AC_SUBST_TRACE([FOP])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^FOP$])
-m4trace:configure.ac:28: -1- AC_SUBST([FOP])
-m4trace:configure.ac:28: -1- AC_SUBST_TRACE([FOP])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^FOP$])
-m4trace:configure.ac:28: -1- AM_CONDITIONAL([HAVE_FOP], [test "$have_fop" = yes])
-m4trace:configure.ac:28: -1- AC_SUBST([HAVE_FOP_TRUE])
-m4trace:configure.ac:28: -1- AC_SUBST_TRACE([HAVE_FOP_TRUE])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^HAVE_FOP_TRUE$])
-m4trace:configure.ac:28: -1- AC_SUBST([HAVE_FOP_FALSE])
-m4trace:configure.ac:28: -1- AC_SUBST_TRACE([HAVE_FOP_FALSE])
-m4trace:configure.ac:28: -1- m4_pattern_allow([^HAVE_FOP_FALSE$])
-m4trace:configure.ac:28: -1- _AM_SUBST_NOTMAKE([HAVE_FOP_TRUE])
-m4trace:configure.ac:28: -1- _AM_SUBST_NOTMAKE([HAVE_FOP_FALSE])
-m4trace:configure.ac:29: -1- AC_SUBST([XSLTPROC])
-m4trace:configure.ac:29: -1- AC_SUBST_TRACE([XSLTPROC])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^XSLTPROC$])
-m4trace:configure.ac:29: -1- AC_SUBST([XSLTPROC])
-m4trace:configure.ac:29: -1- AC_SUBST_TRACE([XSLTPROC])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^XSLTPROC$])
-m4trace:configure.ac:29: -1- AC_SUBST([XSLTPROC])
-m4trace:configure.ac:29: -1- AC_SUBST_TRACE([XSLTPROC])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^XSLTPROC$])
-m4trace:configure.ac:29: -1- AM_CONDITIONAL([HAVE_XSLTPROC], [test "$have_xsltproc" = yes])
-m4trace:configure.ac:29: -1- AC_SUBST([HAVE_XSLTPROC_TRUE])
-m4trace:configure.ac:29: -1- AC_SUBST_TRACE([HAVE_XSLTPROC_TRUE])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^HAVE_XSLTPROC_TRUE$])
-m4trace:configure.ac:29: -1- AC_SUBST([HAVE_XSLTPROC_FALSE])
-m4trace:configure.ac:29: -1- AC_SUBST_TRACE([HAVE_XSLTPROC_FALSE])
-m4trace:configure.ac:29: -1- m4_pattern_allow([^HAVE_XSLTPROC_FALSE$])
-m4trace:configure.ac:29: -1- _AM_SUBST_NOTMAKE([HAVE_XSLTPROC_TRUE])
-m4trace:configure.ac:29: -1- _AM_SUBST_NOTMAKE([HAVE_XSLTPROC_FALSE])
-m4trace:configure.ac:30: -1- AC_SUBST([XORG_SGML_PATH])
-m4trace:configure.ac:30: -1- AC_SUBST_TRACE([XORG_SGML_PATH])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^XORG_SGML_PATH$])
-m4trace:configure.ac:30: -1- AC_SUBST([STYLESHEET_SRCDIR])
-m4trace:configure.ac:30: -1- AC_SUBST_TRACE([STYLESHEET_SRCDIR])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^STYLESHEET_SRCDIR$])
-m4trace:configure.ac:30: -1- AC_SUBST([XSL_STYLESHEET])
-m4trace:configure.ac:30: -1- AC_SUBST_TRACE([XSL_STYLESHEET])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^XSL_STYLESHEET$])
-m4trace:configure.ac:30: -1- AM_CONDITIONAL([HAVE_STYLESHEETS], [test "x$XSL_STYLESHEET" != "x"])
-m4trace:configure.ac:30: -1- AC_SUBST([HAVE_STYLESHEETS_TRUE])
-m4trace:configure.ac:30: -1- AC_SUBST_TRACE([HAVE_STYLESHEETS_TRUE])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^HAVE_STYLESHEETS_TRUE$])
-m4trace:configure.ac:30: -1- AC_SUBST([HAVE_STYLESHEETS_FALSE])
-m4trace:configure.ac:30: -1- AC_SUBST_TRACE([HAVE_STYLESHEETS_FALSE])
-m4trace:configure.ac:30: -1- m4_pattern_allow([^HAVE_STYLESHEETS_FALSE$])
-m4trace:configure.ac:30: -1- _AM_SUBST_NOTMAKE([HAVE_STYLESHEETS_TRUE])
-m4trace:configure.ac:30: -1- _AM_SUBST_NOTMAKE([HAVE_STYLESHEETS_FALSE])
-m4trace:configure.ac:31: -1- AC_SUBST([MALLOC_ZERO_CFLAGS])
-m4trace:configure.ac:31: -1- AC_SUBST_TRACE([MALLOC_ZERO_CFLAGS])
-m4trace:configure.ac:31: -1- m4_pattern_allow([^MALLOC_ZERO_CFLAGS$])
-m4trace:configure.ac:31: -1- AC_SUBST([XMALLOC_ZERO_CFLAGS])
-m4trace:configure.ac:31: -1- AC_SUBST_TRACE([XMALLOC_ZERO_CFLAGS])
-m4trace:configure.ac:31: -1- m4_pattern_allow([^XMALLOC_ZERO_CFLAGS$])
-m4trace:configure.ac:31: -1- AC_SUBST([XTMALLOC_ZERO_CFLAGS])
-m4trace:configure.ac:31: -1- AC_SUBST_TRACE([XTMALLOC_ZERO_CFLAGS])
-m4trace:configure.ac:31: -1- m4_pattern_allow([^XTMALLOC_ZERO_CFLAGS$])
-m4trace:configure.ac:42: -1- AC_SUBST([XEXT_SOREV])
-m4trace:configure.ac:42: -1- AC_SUBST_TRACE([XEXT_SOREV])
-m4trace:configure.ac:42: -1- m4_pattern_allow([^XEXT_SOREV$])
-m4trace:configure.ac:45: -1- AC_SUBST([XEXT_CFLAGS])
-m4trace:configure.ac:45: -1- AC_SUBST_TRACE([XEXT_CFLAGS])
-m4trace:configure.ac:45: -1- m4_pattern_allow([^XEXT_CFLAGS$])
-m4trace:configure.ac:45: -1- AC_SUBST([XEXT_LIBS])
-m4trace:configure.ac:45: -1- AC_SUBST_TRACE([XEXT_LIBS])
-m4trace:configure.ac:45: -1- m4_pattern_allow([^XEXT_LIBS$])
-m4trace:configure.ac:47: -1- AC_DEFINE_TRACE_LITERAL([HAVE___BUILTIN_POPCOUNTL])
-m4trace:configure.ac:47: -1- m4_pattern_allow([^HAVE___BUILTIN_POPCOUNTL$])
-m4trace:configure.ac:47: -1- AH_OUTPUT([HAVE___BUILTIN_POPCOUNTL], [/* Define to 1 if the system has the `__builtin_popcountl\' built-in function
-   */
-@%:@undef HAVE___BUILTIN_POPCOUNTL])
-m4trace:configure.ac:48: -1- AH_OUTPUT([HAVE_REALLOCARRAY], [/* Define to 1 if you have the \'reallocarray\' function. */
-@%:@undef HAVE_REALLOCARRAY])
-m4trace:configure.ac:48: -1- AC_LIBSOURCE([reallocarray.c])
-m4trace:configure.ac:48: -1- AC_DEFINE_TRACE_LITERAL([HAVE_REALLOCARRAY])
-m4trace:configure.ac:48: -1- m4_pattern_allow([^HAVE_REALLOCARRAY$])
-m4trace:configure.ac:48: -1- AC_SUBST([LIB@&t@OBJS], ["$LIB@&t@OBJS reallocarray.$ac_objext"])
-m4trace:configure.ac:48: -1- AC_SUBST_TRACE([LIB@&t@OBJS])
-m4trace:configure.ac:48: -1- m4_pattern_allow([^LIB@&t@OBJS$])
-m4trace:configure.ac:51: -1- AC_SUBST([LINT])
-m4trace:configure.ac:51: -1- AC_SUBST_TRACE([LINT])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT$])
-m4trace:configure.ac:51: -1- AC_SUBST([LINT_FLAGS])
-m4trace:configure.ac:51: -1- AC_SUBST_TRACE([LINT_FLAGS])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_FLAGS$])
-m4trace:configure.ac:51: -1- AC_SUBST([LINT])
-m4trace:configure.ac:51: -1- AC_SUBST_TRACE([LINT])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT$])
-m4trace:configure.ac:51: -1- AC_SUBST([LINT_FLAGS], [$lint_options])
-m4trace:configure.ac:51: -1- AC_SUBST_TRACE([LINT_FLAGS])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_FLAGS$])
-m4trace:configure.ac:51: -1- AM_CONDITIONAL([LINT], [test "x$LINT" != x])
-m4trace:configure.ac:51: -1- AC_SUBST([LINT_TRUE])
-m4trace:configure.ac:51: -1- AC_SUBST_TRACE([LINT_TRUE])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_TRUE$])
-m4trace:configure.ac:51: -1- AC_SUBST([LINT_FALSE])
-m4trace:configure.ac:51: -1- AC_SUBST_TRACE([LINT_FALSE])
-m4trace:configure.ac:51: -1- m4_pattern_allow([^LINT_FALSE$])
-m4trace:configure.ac:51: -1- _AM_SUBST_NOTMAKE([LINT_TRUE])
-m4trace:configure.ac:51: -1- _AM_SUBST_NOTMAKE([LINT_FALSE])
-m4trace:configure.ac:52: -1- AC_SUBST([LINTLIB])
-m4trace:configure.ac:52: -1- AC_SUBST_TRACE([LINTLIB])
-m4trace:configure.ac:52: -1- m4_pattern_allow([^LINTLIB$])
-m4trace:configure.ac:52: -1- AM_CONDITIONAL([MAKE_LINT_LIB], [test x$make_lint_lib != xno])
-m4trace:configure.ac:52: -1- AC_SUBST([MAKE_LINT_LIB_TRUE])
-m4trace:configure.ac:52: -1- AC_SUBST_TRACE([MAKE_LINT_LIB_TRUE])
-m4trace:configure.ac:52: -1- m4_pattern_allow([^MAKE_LINT_LIB_TRUE$])
-m4trace:configure.ac:52: -1- AC_SUBST([MAKE_LINT_LIB_FALSE])
-m4trace:configure.ac:52: -1- AC_SUBST_TRACE([MAKE_LINT_LIB_FALSE])
-m4trace:configure.ac:52: -1- m4_pattern_allow([^MAKE_LINT_LIB_FALSE$])
-m4trace:configure.ac:52: -1- _AM_SUBST_NOTMAKE([MAKE_LINT_LIB_TRUE])
-m4trace:configure.ac:52: -1- _AM_SUBST_NOTMAKE([MAKE_LINT_LIB_FALSE])
-m4trace:configure.ac:54: -1- AC_CONFIG_FILES([Makefile
-		man/Makefile
-		src/Makefile
-		specs/Makefile
-		xext.pc])
-m4trace:configure.ac:59: -1- AC_SUBST([LIB@&t@OBJS], [$ac_libobjs])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([LIB@&t@OBJS])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^LIB@&t@OBJS$])
-m4trace:configure.ac:59: -1- AC_SUBST([LTLIBOBJS], [$ac_ltlibobjs])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([LTLIBOBJS])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^LTLIBOBJS$])
-m4trace:configure.ac:59: -1- AM_CONDITIONAL([am__EXEEXT], [test -n "$EXEEXT"])
-m4trace:configure.ac:59: -1- AC_SUBST([am__EXEEXT_TRUE])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([am__EXEEXT_TRUE])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^am__EXEEXT_TRUE$])
-m4trace:configure.ac:59: -1- AC_SUBST([am__EXEEXT_FALSE])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([am__EXEEXT_FALSE])
-m4trace:configure.ac:59: -1- m4_pattern_allow([^am__EXEEXT_FALSE$])
-m4trace:configure.ac:59: -1- _AM_SUBST_NOTMAKE([am__EXEEXT_TRUE])
-m4trace:configure.ac:59: -1- _AM_SUBST_NOTMAKE([am__EXEEXT_FALSE])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([top_builddir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([top_build_prefix])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([srcdir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([abs_srcdir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([top_srcdir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([abs_top_srcdir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([builddir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([abs_builddir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([abs_top_builddir])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([INSTALL])
-m4trace:configure.ac:59: -1- AC_SUBST_TRACE([MKDIR_P])
-m4trace:configure.ac:59: -1- AC_REQUIRE_AUX_FILE([ltmain.sh])
diff --git a/experiments/wasm-gui/third_party/libXext/compile b/experiments/wasm-gui/third_party/libXext/compile
deleted file mode 100755
index 02ff093c3..000000000
--- a/experiments/wasm-gui/third_party/libXext/compile
+++ /dev/null
@@ -1,364 +0,0 @@
-#! /bin/sh
-# Wrapper for compilers which do not understand '-c -o'.
-
-scriptversion=2025-06-18.21; # UTC
-
-# Copyright (C) 1999-2025 Free Software Foundation, Inc.
-# Written by Tom Tromey <tromey@cygnus.com>.
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2, or (at your option)
-# any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <https://www.gnu.org/licenses/>.
-
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program that contains a
-# configuration script generated by Autoconf, you may include it under
-# the same distribution terms that you use for the rest of that program.
-
-# This file is maintained in Automake, please report
-# bugs to <bug-automake@gnu.org> or send patches to
-# <automake-patches@gnu.org>.
-
-nl='
-'
-
-# We need space, tab and new line, in precisely that order.  Quoting is
-# there to prevent tools from complaining about whitespace usage.
-IFS=" ""	$nl"
-
-file_conv=
-
-# func_file_conv build_file unneeded_conversions
-# Convert a $build file to $host form and store it in $file
-# Currently only supports Windows hosts. If the determined conversion
-# type is listed in (the comma separated) UNNEEDED_CONVERSIONS, no
-# conversion will take place.
-func_file_conv ()
-{
-  file=$1
-  case $file in
-    / | /[!/]*) # absolute file, and not a UNC file
-      if test -z "$file_conv"; then
-	# lazily determine how to convert abs files
-	case `uname -s` in
-	  MINGW*)
-	    if test -n "$MSYSTEM" && (cygpath --version) >/dev/null 2>&1; then
-	      # MSYS2 environment.
-	      file_conv=cygwin
-	    else
-	      # Original MinGW environment.
-	      file_conv=mingw
-	    fi
-	    ;;
-	  MSYS*)
-	    # Old MSYS environment, or MSYS2 with 32-bit MSYS2 shell.
-	    file_conv=cygwin
-	    ;;
-	  CYGWIN*)
-	    # Cygwin environment.
-	    file_conv=cygwin
-	    ;;
-	  *)
-	    file_conv=wine
-	    ;;
-	esac
-      fi
-      case $file_conv/,$2, in
-	*,$file_conv,*)
-	  # This is the optimization mentioned above:
-	  # If UNNEEDED_CONVERSIONS contains $file_conv, don't convert.
-	  ;;
-	mingw/*)
-	  file=`cmd //C echo "$file " | sed -e 's/"\(.*\) " *$/\1/'`
-	  ;;
-	cygwin/*)
-	  file=`cygpath -w "$file" || echo "$file"`
-	  ;;
-	wine/*)
-	  file=`winepath -w "$file" || echo "$file"`
-	  ;;
-      esac
-      ;;
-  esac
-}
-
-# func_cl_dashL linkdir
-# Make cl look for libraries in LINKDIR
-func_cl_dashL ()
-{
-  func_file_conv "$1"
-  if test -z "$lib_path"; then
-    lib_path=$file
-  else
-    lib_path="$lib_path;$file"
-  fi
-  linker_opts="$linker_opts -LIBPATH:$file"
-}
-
-# func_cl_dashl library
-# Do a library search-path lookup for cl
-func_cl_dashl ()
-{
-  lib=$1
-  found=no
-  save_IFS=$IFS
-  IFS=';'
-  for dir in $lib_path $LIB
-  do
-    IFS=$save_IFS
-    if $shared && test -f "$dir/$lib.dll.lib"; then
-      found=yes
-      lib=$dir/$lib.dll.lib
-      break
-    fi
-    if test -f "$dir/$lib.lib"; then
-      found=yes
-      lib=$dir/$lib.lib
-      break
-    fi
-    if test -f "$dir/lib$lib.a"; then
-      found=yes
-      lib=$dir/lib$lib.a
-      break
-    fi
-  done
-  IFS=$save_IFS
-
-  if test "$found" != yes; then
-    lib=$lib.lib
-  fi
-}
-
-# func_cl_wrapper cl arg...
-# Adjust compile command to suit cl
-func_cl_wrapper ()
-{
-  # Assume a capable shell
-  lib_path=
-  shared=:
-  linker_opts=
-  for arg
-  do
-    if test -n "$eat"; then
-      eat=
-    else
-      case $1 in
-	-o)
-	  # configure might choose to run compile as 'compile cc -o foo foo.c'.
-	  eat=1
-	  case $2 in
-	    *.o | *.lo | *.[oO][bB][jJ])
-	      func_file_conv "$2"
-	      set x "$@" -Fo"$file"
-	      shift
-	      ;;
-	    *)
-	      func_file_conv "$2"
-	      set x "$@" -Fe"$file"
-	      shift
-	      ;;
-	  esac
-	  ;;
-	-I)
-	  eat=1
-	  func_file_conv "$2" mingw
-	  set x "$@" -I"$file"
-	  shift
-	  ;;
-	-I*)
-	  func_file_conv "${1#-I}" mingw
-	  set x "$@" -I"$file"
-	  shift
-	  ;;
-	-l)
-	  eat=1
-	  func_cl_dashl "$2"
-	  set x "$@" "$lib"
-	  shift
-	  ;;
-	-l*)
-	  func_cl_dashl "${1#-l}"
-	  set x "$@" "$lib"
-	  shift
-	  ;;
-	-L)
-	  eat=1
-	  func_cl_dashL "$2"
-	  ;;
-	-L*)
-	  func_cl_dashL "${1#-L}"
-	  ;;
-	-static)
-	  shared=false
-	  ;;
-	-Wl,*)
-	  arg=${1#-Wl,}
-	  save_ifs="$IFS"; IFS=','
-	  for flag in $arg; do
-	    IFS="$save_ifs"
-	    linker_opts="$linker_opts $flag"
-	  done
-	  IFS="$save_ifs"
-	  ;;
-	-Xlinker)
-	  eat=1
-	  linker_opts="$linker_opts $2"
-	  ;;
-	-*)
-	  set x "$@" "$1"
-	  shift
-	  ;;
-	*.cc | *.CC | *.cxx | *.CXX | *.[cC]++)
-	  func_file_conv "$1"
-	  set x "$@" -Tp"$file"
-	  shift
-	  ;;
-	*.c | *.cpp | *.CPP | *.lib | *.LIB | *.Lib | *.OBJ | *.obj | *.[oO])
-	  func_file_conv "$1" mingw
-	  set x "$@" "$file"
-	  shift
-	  ;;
-	*)
-	  set x "$@" "$1"
-	  shift
-	  ;;
-      esac
-    fi
-    shift
-  done
-  if test -n "$linker_opts"; then
-    linker_opts="-link$linker_opts"
-  fi
-  exec "$@" $linker_opts
-  exit 1
-}
-
-eat=
-
-case $1 in
-  '')
-     echo "$0: No command.  Try '$0 --help' for more information." 1>&2
-     exit 1;
-     ;;
-  -h | --h*)
-    cat <<\EOF
-Usage: compile [--help] [--version] PROGRAM [ARGS]
-
-Wrapper for compilers which do not understand '-c -o'.
-Remove '-o dest.o' from ARGS, run PROGRAM with the remaining
-arguments, and rename the output as expected.
-
-If you are trying to build a whole package this is not the
-right script to run: please start by reading the file 'INSTALL'.
-
-Report bugs to <bug-automake@gnu.org>.
-GNU Automake home page: <https://www.gnu.org/software/automake/>.
-General help using GNU software: <https://www.gnu.org/gethelp/>.
-EOF
-    exit $?
-    ;;
-  -v | --v*)
-    echo "compile (GNU Automake) $scriptversion"
-    exit $?
-    ;;
-  cl | *[/\\]cl | cl.exe | *[/\\]cl.exe | \
-  clang-cl | *[/\\]clang-cl | clang-cl.exe | *[/\\]clang-cl.exe | \
-  icl | *[/\\]icl | icl.exe | *[/\\]icl.exe )
-    func_cl_wrapper "$@"      # Doesn't return...
-    ;;
-esac
-
-ofile=
-cfile=
-
-for arg
-do
-  if test -n "$eat"; then
-    eat=
-  else
-    case $1 in
-      -o)
-	# configure might choose to run compile as 'compile cc -o foo foo.c'.
-	# So we strip '-o arg' only if arg is an object.
-	eat=1
-	case $2 in
-	  *.o | *.obj)
-	    ofile=$2
-	    ;;
-	  *)
-	    set x "$@" -o "$2"
-	    shift
-	    ;;
-	esac
-	;;
-      *.c)
-	cfile=$1
-	set x "$@" "$1"
-	shift
-	;;
-      *)
-	set x "$@" "$1"
-	shift
-	;;
-    esac
-  fi
-  shift
-done
-
-if test -z "$ofile" || test -z "$cfile"; then
-  # If no '-o' option was seen then we might have been invoked from a
-  # pattern rule where we don't need one.  That is ok -- this is a
-  # normal compilation that the losing compiler can handle.  If no
-  # '.c' file was seen then we are probably linking.  That is also
-  # ok.
-  exec "$@"
-fi
-
-# Name of file we expect compiler to create.
-cofile=`echo "$cfile" | sed 's|^.*[\\/]||; s|^[a-zA-Z]:||; s/\.c$/.o/'`
-
-# Create the lock directory.
-# Note: use '[/\\:.-]' here to ensure that we don't use the same name
-# that we are using for the .o file.  Also, base the name on the expected
-# object file name, since that is what matters with a parallel build.
-lockdir=`echo "$cofile" | sed -e 's|[/\\:.-]|_|g'`.d
-while true; do
-  if mkdir "$lockdir" >/dev/null 2>&1; then
-    break
-  fi
-  sleep 1
-done
-# FIXME: race condition here if user kills between mkdir and trap.
-trap "rmdir '$lockdir'; exit 1" 1 2 15
-
-# Run the compile.
-"$@"
-ret=$?
-
-if test -f "$cofile"; then
-  test "$cofile" = "$ofile" || mv "$cofile" "$ofile"
-elif test -f "${cofile}bj"; then
-  test "${cofile}bj" = "$ofile" || mv "${cofile}bj" "$ofile"
-fi
-
-rmdir "$lockdir"
-exit $ret
-
-# Local Variables:
-# mode: shell-script
-# sh-indentation: 2
-# eval: (add-hook 'before-save-hook 'time-stamp nil t)
-# time-stamp-start: "scriptversion="
-# time-stamp-format: "%Y-%02m-%02d.%02H"
-# time-stamp-time-zone: "UTC0"
-# time-stamp-end: "; # UTC"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXext/config.guess b/experiments/wasm-gui/third_party/libXext/config.guess
deleted file mode 100755
index a9d01fde4..000000000
--- a/experiments/wasm-gui/third_party/libXext/config.guess
+++ /dev/null
@@ -1,1818 +0,0 @@
-#! /bin/sh
-# Attempt to guess a canonical system name.
-#   Copyright 1992-2025 Free Software Foundation, Inc.
-
-# shellcheck disable=SC2006,SC2268 # see below for rationale
-
-timestamp='2025-07-10'
-
-# This file is free software; you can redistribute it and/or modify it
-# under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-# General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, see <https://www.gnu.org/licenses/>.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program that contains a
-# configuration script generated by Autoconf, you may include it under
-# the same distribution terms that you use for the rest of that
-# program.  This Exception is an additional permission under section 7
-# of the GNU General Public License, version 3 ("GPLv3").
-#
-# Originally written by Per Bothner; maintained since 2000 by Ben Elliston.
-#
-# You can get the latest version of this script from:
-# https://git.savannah.gnu.org/cgit/config.git/plain/config.guess
-#
-# Please send patches to <config-patches@gnu.org>.
-
-
-# The "shellcheck disable" line above the timestamp inhibits complaints
-# about features and limitations of the classic Bourne shell that were
-# superseded or lifted in POSIX.  However, this script identifies a wide
-# variety of pre-POSIX systems that do not have POSIX shells at all, and
-# even some reasonably current systems (Solaris 10 as case-in-point) still
-# have a pre-POSIX /bin/sh.
-
-
-me=`echo "$0" | sed -e 's,.*/,,'`
-
-usage="\
-Usage: $0 [OPTION]
-
-Output the configuration name of the system '$me' is run on.
-
-Options:
-  -h, --help         print this help, then exit
-  -t, --time-stamp   print date of last modification, then exit
-  -v, --version      print version number, then exit
-
-Report bugs and patches to <config-patches@gnu.org>."
-
-version="\
-GNU config.guess ($timestamp)
-
-Originally written by Per Bothner.
-Copyright 1992-2025 Free Software Foundation, Inc.
-
-This is free software; see the source for copying conditions.  There is NO
-warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE."
-
-help="
-Try '$me --help' for more information."
-
-# Parse command line
-while test $# -gt 0 ; do
-  case $1 in
-    --time-stamp | --time* | -t )
-       echo "$timestamp" ; exit ;;
-    --version | -v )
-       echo "$version" ; exit ;;
-    --help | --h* | -h )
-       echo "$usage"; exit ;;
-    -- )     # Stop option processing
-       shift; break ;;
-    - )	# Use stdin as input.
-       break ;;
-    -* )
-       echo "$me: invalid option $1$help" >&2
-       exit 1 ;;
-    * )
-       break ;;
-  esac
-done
-
-if test $# != 0; then
-  echo "$me: too many arguments$help" >&2
-  exit 1
-fi
-
-# Just in case it came from the environment.
-GUESS=
-
-# CC_FOR_BUILD -- compiler used by this script. Note that the use of a
-# compiler to aid in system detection is discouraged as it requires
-# temporary files to be created and, as you can see below, it is a
-# headache to deal with in a portable fashion.
-
-# Historically, 'CC_FOR_BUILD' used to be named 'HOST_CC'. We still
-# use 'HOST_CC' if defined, but it is deprecated.
-
-# Portable tmp directory creation inspired by the Autoconf team.
-
-tmp=
-# shellcheck disable=SC2172
-trap 'test -z "$tmp" || rm -fr "$tmp"' 0 1 2 13 15
-
-set_cc_for_build() {
-    # prevent multiple calls if $tmp is already set
-    test "$tmp" && return 0
-    : "${TMPDIR=/tmp}"
-    # shellcheck disable=SC2039,SC3028
-    { tmp=`(umask 077 && mktemp -d "$TMPDIR/cgXXXXXX") 2>/dev/null` && test -n "$tmp" && test -d "$tmp" ; } ||
-	{ test -n "$RANDOM" && tmp=$TMPDIR/cg$$-$RANDOM && (umask 077 && mkdir "$tmp" 2>/dev/null) ; } ||
-	{ tmp=$TMPDIR/cg-$$ && (umask 077 && mkdir "$tmp" 2>/dev/null) && echo "Warning: creating insecure temp directory" >&2 ; } ||
-	{ echo "$me: cannot create a temporary directory in $TMPDIR" >&2 ; exit 1 ; }
-    dummy=$tmp/dummy
-    case ${CC_FOR_BUILD-},${HOST_CC-},${CC-} in
-	,,)    echo "int x;" > "$dummy.c"
-	       for driver in cc gcc c17 c99 c89 ; do
-		   if ($driver -c -o "$dummy.o" "$dummy.c") >/dev/null 2>&1 ; then
-		       CC_FOR_BUILD=$driver
-		       break
-		   fi
-	       done
-	       if test x"$CC_FOR_BUILD" = x ; then
-		   CC_FOR_BUILD=no_compiler_found
-	       fi
-	       ;;
-	,,*)   CC_FOR_BUILD=$CC ;;
-	,*,*)  CC_FOR_BUILD=$HOST_CC ;;
-    esac
-}
-
-# This is needed to find uname on a Pyramid OSx when run in the BSD universe.
-# (ghazi@noc.rutgers.edu 1994-08-24)
-if test -f /.attbin/uname ; then
-	PATH=$PATH:/.attbin ; export PATH
-fi
-
-UNAME_MACHINE=`(uname -m) 2>/dev/null` || UNAME_MACHINE=unknown
-UNAME_RELEASE=`(uname -r) 2>/dev/null` || UNAME_RELEASE=unknown
-UNAME_SYSTEM=`(uname -s) 2>/dev/null` || UNAME_SYSTEM=unknown
-UNAME_VERSION=`(uname -v) 2>/dev/null` || UNAME_VERSION=unknown
-
-case $UNAME_SYSTEM in
-Linux|GNU|GNU/*)
-	LIBC=unknown
-
-	set_cc_for_build
-	cat <<-EOF > "$dummy.c"
-	#if defined(__ANDROID__)
-	LIBC=android
-	#else
-	#include <features.h>
-	#if defined(__UCLIBC__)
-	LIBC=uclibc
-	#elif defined(__dietlibc__)
-	LIBC=dietlibc
-	#elif defined(__GLIBC__)
-	LIBC=gnu
-	#elif defined(__LLVM_LIBC__)
-	LIBC=llvm
-	#else
-	#include <stdarg.h>
-	/* First heuristic to detect musl libc.  */
-	#ifdef __DEFINED_va_list
-	LIBC=musl
-	#endif
-	#endif
-	#endif
-	EOF
-	cc_set_libc=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^LIBC' | sed 's, ,,g'`
-	eval "$cc_set_libc"
-
-	# Second heuristic to detect musl libc.
-	if [ "$LIBC" = unknown ] &&
-	   command -v ldd >/dev/null &&
-	   ldd --version 2>&1 | grep -q ^musl; then
-		LIBC=musl
-	fi
-
-	# If the system lacks a compiler, then just pick glibc.
-	# We could probably try harder.
-	if [ "$LIBC" = unknown ]; then
-		LIBC=gnu
-	fi
-	;;
-esac
-
-# Note: order is significant - the case branches are not exclusive.
-
-case $UNAME_MACHINE:$UNAME_SYSTEM:$UNAME_RELEASE:$UNAME_VERSION in
-    *:NetBSD:*:*)
-	# NetBSD (nbsd) targets should (where applicable) match one or
-	# more of the tuples: *-*-netbsdelf*, *-*-netbsdaout*,
-	# *-*-netbsdecoff* and *-*-netbsd*.  For targets that recently
-	# switched to ELF, *-*-netbsd* would select the old
-	# object file format.  This provides both forward
-	# compatibility and a consistent mechanism for selecting the
-	# object file format.
-	#
-	# Note: NetBSD doesn't particularly care about the vendor
-	# portion of the name.  We always set it to "unknown".
-	UNAME_MACHINE_ARCH=`(uname -p 2>/dev/null || \
-	    /sbin/sysctl -n hw.machine_arch 2>/dev/null || \
-	    /usr/sbin/sysctl -n hw.machine_arch 2>/dev/null || \
-	    echo unknown)`
-	case $UNAME_MACHINE_ARCH in
-	    aarch64eb) machine=aarch64_be-unknown ;;
-	    armeb) machine=armeb-unknown ;;
-	    arm*) machine=arm-unknown ;;
-	    sh3el) machine=shl-unknown ;;
-	    sh3eb) machine=sh-unknown ;;
-	    sh5el) machine=sh5le-unknown ;;
-	    earmv*)
-		arch=`echo "$UNAME_MACHINE_ARCH" | sed -e 's,^e\(armv[0-9]\).*$,\1,'`
-		endian=`echo "$UNAME_MACHINE_ARCH" | sed -ne 's,^.*\(eb\)$,\1,p'`
-		machine=${arch}${endian}-unknown
-		;;
-	    *) machine=$UNAME_MACHINE_ARCH-unknown ;;
-	esac
-	# The Operating System including object format, if it has switched
-	# to ELF recently (or will in the future) and ABI.
-	case $UNAME_MACHINE_ARCH in
-	    earm*)
-		os=netbsdelf
-		;;
-	    arm*|i386|m68k|ns32k|sh3*|sparc|vax)
-		set_cc_for_build
-		if echo __ELF__ | $CC_FOR_BUILD -E - 2>/dev/null \
-			| grep -q __ELF__
-		then
-		    # Once all utilities can be ECOFF (netbsdecoff) or a.out (netbsdaout).
-		    # Return netbsd for either.  FIX?
-		    os=netbsd
-		else
-		    os=netbsdelf
-		fi
-		;;
-	    *)
-		os=netbsd
-		;;
-	esac
-	# Determine ABI tags.
-	case $UNAME_MACHINE_ARCH in
-	    earm*)
-		expr='s/^earmv[0-9]/-eabi/;s/eb$//'
-		abi=`echo "$UNAME_MACHINE_ARCH" | sed -e "$expr"`
-		;;
-	esac
-	# The OS release
-	# Debian GNU/NetBSD machines have a different userland, and
-	# thus, need a distinct triplet. However, they do not need
-	# kernel version information, so it can be replaced with a
-	# suitable tag, in the style of linux-gnu.
-	case $UNAME_VERSION in
-	    Debian*)
-		release='-gnu'
-		;;
-	    *)
-		release=`echo "$UNAME_RELEASE" | sed -e 's/[-_].*//' | cut -d. -f1,2`
-		;;
-	esac
-	# Since CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM:
-	# contains redundant information, the shorter form:
-	# CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM is used.
-	GUESS=$machine-${os}${release}${abi-}
-	;;
-    *:Bitrig:*:*)
-	UNAME_MACHINE_ARCH=`arch | sed 's/Bitrig.//'`
-	GUESS=$UNAME_MACHINE_ARCH-unknown-bitrig$UNAME_RELEASE
-	;;
-    *:OpenBSD:*:*)
-	UNAME_MACHINE_ARCH=`arch | sed 's/OpenBSD.//'`
-	GUESS=$UNAME_MACHINE_ARCH-unknown-openbsd$UNAME_RELEASE
-	;;
-    *:SecBSD:*:*)
-	UNAME_MACHINE_ARCH=`arch | sed 's/SecBSD.//'`
-	GUESS=$UNAME_MACHINE_ARCH-unknown-secbsd$UNAME_RELEASE
-	;;
-    *:LibertyBSD:*:*)
-	UNAME_MACHINE_ARCH=`arch | sed 's/^.*BSD\.//'`
-	GUESS=$UNAME_MACHINE_ARCH-unknown-libertybsd$UNAME_RELEASE
-	;;
-    *:MidnightBSD:*:*)
-	GUESS=$UNAME_MACHINE-unknown-midnightbsd$UNAME_RELEASE
-	;;
-    *:ekkoBSD:*:*)
-	GUESS=$UNAME_MACHINE-unknown-ekkobsd$UNAME_RELEASE
-	;;
-    *:SolidBSD:*:*)
-	GUESS=$UNAME_MACHINE-unknown-solidbsd$UNAME_RELEASE
-	;;
-    *:OS108:*:*)
-	GUESS=$UNAME_MACHINE-unknown-os108_$UNAME_RELEASE
-	;;
-    macppc:MirBSD:*:*)
-	GUESS=powerpc-unknown-mirbsd$UNAME_RELEASE
-	;;
-    *:MirBSD:*:*)
-	GUESS=$UNAME_MACHINE-unknown-mirbsd$UNAME_RELEASE
-	;;
-    *:Sortix:*:*)
-	GUESS=$UNAME_MACHINE-unknown-sortix
-	;;
-    *:Twizzler:*:*)
-	GUESS=$UNAME_MACHINE-unknown-twizzler
-	;;
-    *:Redox:*:*)
-	GUESS=$UNAME_MACHINE-unknown-redox
-	;;
-    mips:OSF1:*.*)
-	GUESS=mips-dec-osf1
-	;;
-    alpha:OSF1:*:*)
-	# Reset EXIT trap before exiting to avoid spurious non-zero exit code.
-	trap '' 0
-	case $UNAME_RELEASE in
-	*4.0)
-		UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $3}'`
-		;;
-	*5.*)
-		UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $4}'`
-		;;
-	esac
-	# According to Compaq, /usr/sbin/psrinfo has been available on
-	# OSF/1 and Tru64 systems produced since 1995.  I hope that
-	# covers most systems running today.  This code pipes the CPU
-	# types through head -n 1, so we only detect the type of CPU 0.
-	ALPHA_CPU_TYPE=`/usr/sbin/psrinfo -v | sed -n -e 's/^  The alpha \(.*\) processor.*$/\1/p' | head -n 1`
-	case $ALPHA_CPU_TYPE in
-	    "EV4 (21064)")
-		UNAME_MACHINE=alpha ;;
-	    "EV4.5 (21064)")
-		UNAME_MACHINE=alpha ;;
-	    "LCA4 (21066/21068)")
-		UNAME_MACHINE=alpha ;;
-	    "EV5 (21164)")
-		UNAME_MACHINE=alphaev5 ;;
-	    "EV5.6 (21164A)")
-		UNAME_MACHINE=alphaev56 ;;
-	    "EV5.6 (21164PC)")
-		UNAME_MACHINE=alphapca56 ;;
-	    "EV5.7 (21164PC)")
-		UNAME_MACHINE=alphapca57 ;;
-	    "EV6 (21264)")
-		UNAME_MACHINE=alphaev6 ;;
-	    "EV6.7 (21264A)")
-		UNAME_MACHINE=alphaev67 ;;
-	    "EV6.8CB (21264C)")
-		UNAME_MACHINE=alphaev68 ;;
-	    "EV6.8AL (21264B)")
-		UNAME_MACHINE=alphaev68 ;;
-	    "EV6.8CX (21264D)")
-		UNAME_MACHINE=alphaev68 ;;
-	    "EV6.9A (21264/EV69A)")
-		UNAME_MACHINE=alphaev69 ;;
-	    "EV7 (21364)")
-		UNAME_MACHINE=alphaev7 ;;
-	    "EV7.9 (21364A)")
-		UNAME_MACHINE=alphaev79 ;;
-	esac
-	# A Pn.n version is a patched version.
-	# A Vn.n version is a released version.
-	# A Tn.n version is a released field test version.
-	# A Xn.n version is an unreleased experimental baselevel.
-	# 1.2 uses "1.2" for uname -r.
-	OSF_REL=`echo "$UNAME_RELEASE" | sed -e 's/^[PVTX]//' | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz`
-	GUESS=$UNAME_MACHINE-dec-osf$OSF_REL
-	;;
-    Amiga*:UNIX_System_V:4.0:*)
-	GUESS=m68k-unknown-sysv4
-	;;
-    *:[Aa]miga[Oo][Ss]:*:*)
-	GUESS=$UNAME_MACHINE-unknown-amigaos
-	;;
-    *:[Mm]orph[Oo][Ss]:*:*)
-	GUESS=$UNAME_MACHINE-unknown-morphos
-	;;
-    *:OS/390:*:*)
-	GUESS=i370-ibm-openedition
-	;;
-    *:z/VM:*:*)
-	GUESS=s390-ibm-zvmoe
-	;;
-    *:OS400:*:*)
-	GUESS=powerpc-ibm-os400
-	;;
-    arm:RISC*:1.[012]*:*|arm:riscix:1.[012]*:*)
-	GUESS=arm-acorn-riscix$UNAME_RELEASE
-	;;
-    arm*:riscos:*:*|arm*:RISCOS:*:*)
-	GUESS=arm-unknown-riscos
-	;;
-    SR2?01:HI-UX/MPP:*:* | SR8000:HI-UX/MPP:*:*)
-	GUESS=hppa1.1-hitachi-hiuxmpp
-	;;
-    Pyramid*:OSx*:*:* | MIS*:OSx*:*:* | MIS*:SMP_DC-OSx*:*:*)
-	# akee@wpdis03.wpafb.af.mil (Earle F. Ake) contributed MIS and NILE.
-	case `(/bin/universe) 2>/dev/null` in
-	    att) GUESS=pyramid-pyramid-sysv3 ;;
-	    *)   GUESS=pyramid-pyramid-bsd   ;;
-	esac
-	;;
-    NILE*:*:*:dcosx)
-	GUESS=pyramid-pyramid-svr4
-	;;
-    DRS?6000:unix:4.0:6*)
-	GUESS=sparc-icl-nx6
-	;;
-    DRS?6000:UNIX_SV:4.2*:7* | DRS?6000:isis:4.2*:7*)
-	case `/usr/bin/uname -p` in
-	    sparc) GUESS=sparc-icl-nx7 ;;
-	esac
-	;;
-    s390x:SunOS:*:*)
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=$UNAME_MACHINE-ibm-solaris2$SUN_REL
-	;;
-    sun4H:SunOS:5.*:*)
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=sparc-hal-solaris2$SUN_REL
-	;;
-    sun4*:SunOS:5.*:* | tadpole*:SunOS:5.*:*)
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=sparc-sun-solaris2$SUN_REL
-	;;
-    i86pc:AuroraUX:5.*:* | i86xen:AuroraUX:5.*:*)
-	GUESS=i386-pc-auroraux$UNAME_RELEASE
-	;;
-    i86pc:SunOS:5.*:* | i86xen:SunOS:5.*:*)
-	set_cc_for_build
-	SUN_ARCH=i386
-	# If there is a compiler, see if it is configured for 64-bit objects.
-	# Note that the Sun cc does not turn __LP64__ into 1 like gcc does.
-	# This test works for both compilers.
-	if test "$CC_FOR_BUILD" != no_compiler_found; then
-	    if (echo '#ifdef __amd64'; echo IS_64BIT_ARCH; echo '#endif') | \
-		(CCOPTS="" $CC_FOR_BUILD -m64 -E - 2>/dev/null) | \
-		grep IS_64BIT_ARCH >/dev/null
-	    then
-		SUN_ARCH=x86_64
-	    fi
-	fi
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=$SUN_ARCH-pc-solaris2$SUN_REL
-	;;
-    sun4*:SunOS:6*:*)
-	# According to config.sub, this is the proper way to canonicalize
-	# SunOS6.  Hard to guess exactly what SunOS6 will be like, but
-	# it's likely to be more like Solaris than SunOS4.
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=sparc-sun-solaris3$SUN_REL
-	;;
-    sun4*:SunOS:*:*)
-	case `/usr/bin/arch -k` in
-	    Series*|S4*)
-		UNAME_RELEASE=`uname -v`
-		;;
-	esac
-	# Japanese Language versions have a version number like '4.1.3-JL'.
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/-/_/'`
-	GUESS=sparc-sun-sunos$SUN_REL
-	;;
-    sun3*:SunOS:*:*)
-	GUESS=m68k-sun-sunos$UNAME_RELEASE
-	;;
-    sun*:*:4.2BSD:*)
-	UNAME_RELEASE=`(sed 1q /etc/motd | awk '{print substr($5,1,3)}') 2>/dev/null`
-	test "x$UNAME_RELEASE" = x && UNAME_RELEASE=3
-	case `/bin/arch` in
-	    sun3)
-		GUESS=m68k-sun-sunos$UNAME_RELEASE
-		;;
-	    sun4)
-		GUESS=sparc-sun-sunos$UNAME_RELEASE
-		;;
-	esac
-	;;
-    aushp:SunOS:*:*)
-	GUESS=sparc-auspex-sunos$UNAME_RELEASE
-	;;
-    # The situation for MiNT is a little confusing.  The machine name
-    # can be virtually everything (everything which is not
-    # "atarist" or "atariste" at least should have a processor
-    # > m68000).  The system name ranges from "MiNT" over "FreeMiNT"
-    # to the lowercase version "mint" (or "freemint").  Finally
-    # the system name "TOS" denotes a system which is actually not
-    # MiNT.  But MiNT is downward compatible to TOS, so this should
-    # be no problem.
-    atarist[e]:*MiNT:*:* | atarist[e]:*mint:*:* | atarist[e]:*TOS:*:*)
-	GUESS=m68k-atari-mint$UNAME_RELEASE
-	;;
-    atari*:*MiNT:*:* | atari*:*mint:*:* | atarist[e]:*TOS:*:*)
-	GUESS=m68k-atari-mint$UNAME_RELEASE
-	;;
-    *falcon*:*MiNT:*:* | *falcon*:*mint:*:* | *falcon*:*TOS:*:*)
-	GUESS=m68k-atari-mint$UNAME_RELEASE
-	;;
-    milan*:*MiNT:*:* | milan*:*mint:*:* | *milan*:*TOS:*:*)
-	GUESS=m68k-milan-mint$UNAME_RELEASE
-	;;
-    hades*:*MiNT:*:* | hades*:*mint:*:* | *hades*:*TOS:*:*)
-	GUESS=m68k-hades-mint$UNAME_RELEASE
-	;;
-    *:*MiNT:*:* | *:*mint:*:* | *:*TOS:*:*)
-	GUESS=m68k-unknown-mint$UNAME_RELEASE
-	;;
-    m68k:machten:*:*)
-	GUESS=m68k-apple-machten$UNAME_RELEASE
-	;;
-    powerpc:machten:*:*)
-	GUESS=powerpc-apple-machten$UNAME_RELEASE
-	;;
-    RISC*:Mach:*:*)
-	GUESS=mips-dec-mach_bsd4.3
-	;;
-    RISC*:ULTRIX:*:*)
-	GUESS=mips-dec-ultrix$UNAME_RELEASE
-	;;
-    VAX*:ULTRIX*:*:*)
-	GUESS=vax-dec-ultrix$UNAME_RELEASE
-	;;
-    2020:CLIX:*:* | 2430:CLIX:*:*)
-	GUESS=clipper-intergraph-clix$UNAME_RELEASE
-	;;
-    mips:*:*:UMIPS | mips:*:*:RISCos)
-	set_cc_for_build
-	sed 's/^	//' << EOF > "$dummy.c"
-#ifdef __cplusplus
-#include <stdio.h>  /* for printf() prototype */
-	int main (int argc, char *argv[]) {
-#else
-	int main (argc, argv) int argc; char *argv[]; {
-#endif
-	#if defined (host_mips) && defined (MIPSEB)
-	#if defined (SYSTYPE_SYSV)
-	  printf ("mips-mips-riscos%ssysv\\n", argv[1]); exit (0);
-	#endif
-	#if defined (SYSTYPE_SVR4)
-	  printf ("mips-mips-riscos%ssvr4\\n", argv[1]); exit (0);
-	#endif
-	#if defined (SYSTYPE_BSD43) || defined(SYSTYPE_BSD)
-	  printf ("mips-mips-riscos%sbsd\\n", argv[1]); exit (0);
-	#endif
-	#endif
-	  exit (-1);
-	}
-EOF
-	$CC_FOR_BUILD -o "$dummy" "$dummy.c" &&
-	  dummyarg=`echo "$UNAME_RELEASE" | sed -n 's/\([0-9]*\).*/\1/p'` &&
-	  SYSTEM_NAME=`"$dummy" "$dummyarg"` &&
-	    { echo "$SYSTEM_NAME"; exit; }
-	GUESS=mips-mips-riscos$UNAME_RELEASE
-	;;
-    Motorola:PowerMAX_OS:*:*)
-	GUESS=powerpc-motorola-powermax
-	;;
-    Motorola:*:4.3:PL8-*)
-	GUESS=powerpc-harris-powermax
-	;;
-    Night_Hawk:*:*:PowerMAX_OS | Synergy:PowerMAX_OS:*:*)
-	GUESS=powerpc-harris-powermax
-	;;
-    Night_Hawk:Power_UNIX:*:*)
-	GUESS=powerpc-harris-powerunix
-	;;
-    m88k:CX/UX:7*:*)
-	GUESS=m88k-harris-cxux7
-	;;
-    m88k:*:4*:R4*)
-	GUESS=m88k-motorola-sysv4
-	;;
-    m88k:*:3*:R3*)
-	GUESS=m88k-motorola-sysv3
-	;;
-    AViiON:dgux:*:*)
-	# DG/UX returns AViiON for all architectures
-	UNAME_PROCESSOR=`/usr/bin/uname -p`
-	if test "$UNAME_PROCESSOR" = mc88100 || test "$UNAME_PROCESSOR" = mc88110
-	then
-	    if test "$TARGET_BINARY_INTERFACE"x = m88kdguxelfx || \
-	       test "$TARGET_BINARY_INTERFACE"x = x
-	    then
-		GUESS=m88k-dg-dgux$UNAME_RELEASE
-	    else
-		GUESS=m88k-dg-dguxbcs$UNAME_RELEASE
-	    fi
-	else
-	    GUESS=i586-dg-dgux$UNAME_RELEASE
-	fi
-	;;
-    M88*:DolphinOS:*:*)	# DolphinOS (SVR3)
-	GUESS=m88k-dolphin-sysv3
-	;;
-    M88*:*:R3*:*)
-	# Delta 88k system running SVR3
-	GUESS=m88k-motorola-sysv3
-	;;
-    XD88*:*:*:*) # Tektronix XD88 system running UTekV (SVR3)
-	GUESS=m88k-tektronix-sysv3
-	;;
-    Tek43[0-9][0-9]:UTek:*:*) # Tektronix 4300 system running UTek (BSD)
-	GUESS=m68k-tektronix-bsd
-	;;
-    *:IRIX*:*:*)
-	IRIX_REL=`echo "$UNAME_RELEASE" | sed -e 's/-/_/g'`
-	GUESS=mips-sgi-irix$IRIX_REL
-	;;
-    ????????:AIX?:[12].1:2)   # AIX 2.2.1 or AIX 2.1.1 is RT/PC AIX.
-	GUESS=romp-ibm-aix    # uname -m gives an 8 hex-code CPU id
-	;;                    # Note that: echo "'`uname -s`'" gives 'AIX '
-    i*86:AIX:*:*)
-	GUESS=i386-ibm-aix
-	;;
-    ia64:AIX:*:*)
-	if test -x /usr/bin/oslevel ; then
-		IBM_REV=`/usr/bin/oslevel`
-	else
-		IBM_REV=$UNAME_VERSION.$UNAME_RELEASE
-	fi
-	GUESS=$UNAME_MACHINE-ibm-aix$IBM_REV
-	;;
-    *:AIX:2:3)
-	if grep bos325 /usr/include/stdio.h >/dev/null 2>&1; then
-		set_cc_for_build
-		sed 's/^		//' << EOF > "$dummy.c"
-		#include <sys/systemcfg.h>
-
-		int
-		main ()
-			{
-			if (!__power_pc())
-				exit(1);
-			puts("powerpc-ibm-aix3.2.5");
-			exit(0);
-			}
-EOF
-		if $CC_FOR_BUILD -o "$dummy" "$dummy.c" && SYSTEM_NAME=`"$dummy"`
-		then
-			GUESS=$SYSTEM_NAME
-		else
-			GUESS=rs6000-ibm-aix3.2.5
-		fi
-	elif grep bos324 /usr/include/stdio.h >/dev/null 2>&1; then
-		GUESS=rs6000-ibm-aix3.2.4
-	else
-		GUESS=rs6000-ibm-aix3.2
-	fi
-	;;
-    *:AIX:*:[4567])
-	IBM_CPU_ID=`/usr/sbin/lsdev -C -c processor -S available | sed 1q | awk '{ print $1 }'`
-	if /usr/sbin/lsattr -El "$IBM_CPU_ID" | grep ' POWER' >/dev/null 2>&1; then
-		IBM_ARCH=rs6000
-	else
-		IBM_ARCH=powerpc
-	fi
-	if test -x /usr/bin/lslpp ; then
-		IBM_REV=`/usr/bin/lslpp -Lqc bos.rte.libc | \
-			   awk -F: '{ print $3 }' | sed s/[0-9]*$/0/`
-	else
-		IBM_REV=$UNAME_VERSION.$UNAME_RELEASE
-	fi
-	GUESS=$IBM_ARCH-ibm-aix$IBM_REV
-	;;
-    *:AIX:*:*)
-	GUESS=rs6000-ibm-aix
-	;;
-    ibmrt:4.4BSD:*|romp-ibm:4.4BSD:*)
-	GUESS=romp-ibm-bsd4.4
-	;;
-    ibmrt:*BSD:*|romp-ibm:BSD:*)            # covers RT/PC BSD and
-	GUESS=romp-ibm-bsd$UNAME_RELEASE    # 4.3 with uname added to
-	;;                                  # report: romp-ibm BSD 4.3
-    *:BOSX:*:*)
-	GUESS=rs6000-bull-bosx
-	;;
-    DPX/2?00:B.O.S.:*:*)
-	GUESS=m68k-bull-sysv3
-	;;
-    9000/[34]??:4.3bsd:1.*:*)
-	GUESS=m68k-hp-bsd
-	;;
-    hp300:4.4BSD:*:* | 9000/[34]??:4.3bsd:2.*:*)
-	GUESS=m68k-hp-bsd4.4
-	;;
-    9000/[34678]??:HP-UX:*:*)
-	HPUX_REV=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*.[0B]*//'`
-	case $UNAME_MACHINE in
-	    9000/31?)            HP_ARCH=m68000 ;;
-	    9000/[34]??)         HP_ARCH=m68k ;;
-	    9000/[678][0-9][0-9])
-		if test -x /usr/bin/getconf; then
-		    sc_cpu_version=`/usr/bin/getconf SC_CPU_VERSION 2>/dev/null`
-		    sc_kernel_bits=`/usr/bin/getconf SC_KERNEL_BITS 2>/dev/null`
-		    case $sc_cpu_version in
-		      523) HP_ARCH=hppa1.0 ;; # CPU_PA_RISC1_0
-		      528) HP_ARCH=hppa1.1 ;; # CPU_PA_RISC1_1
-		      532)                      # CPU_PA_RISC2_0
-			case $sc_kernel_bits in
-			  32) HP_ARCH=hppa2.0n ;;
-			  64) HP_ARCH=hppa2.0w ;;
-			  '') HP_ARCH=hppa2.0 ;;   # HP-UX 10.20
-			esac ;;
-		    esac
-		fi
-		if test "$HP_ARCH" = ""; then
-		    set_cc_for_build
-		    sed 's/^		//' << EOF > "$dummy.c"
-
-		#define _HPUX_SOURCE
-		#include <stdlib.h>
-		#include <unistd.h>
-
-		int
-		main ()
-		{
-		#if defined(_SC_KERNEL_BITS)
-		    long bits = sysconf(_SC_KERNEL_BITS);
-		#endif
-		    long cpu  = sysconf (_SC_CPU_VERSION);
-
-		    switch (cpu)
-			{
-			case CPU_PA_RISC1_0: puts ("hppa1.0"); break;
-			case CPU_PA_RISC1_1: puts ("hppa1.1"); break;
-			case CPU_PA_RISC2_0:
-		#if defined(_SC_KERNEL_BITS)
-			    switch (bits)
-				{
-				case 64: puts ("hppa2.0w"); break;
-				case 32: puts ("hppa2.0n"); break;
-				default: puts ("hppa2.0"); break;
-				} break;
-		#else  /* !defined(_SC_KERNEL_BITS) */
-			    puts ("hppa2.0"); break;
-		#endif
-			default: puts ("hppa1.0"); break;
-			}
-		    exit (0);
-		}
-EOF
-		    (CCOPTS="" $CC_FOR_BUILD -o "$dummy" "$dummy.c" 2>/dev/null) && HP_ARCH=`"$dummy"`
-		    test -z "$HP_ARCH" && HP_ARCH=hppa
-		fi ;;
-	esac
-	if test "$HP_ARCH" = hppa2.0w
-	then
-	    set_cc_for_build
-
-	    # hppa2.0w-hp-hpux* has a 64-bit kernel and a compiler generating
-	    # 32-bit code.  hppa64-hp-hpux* has the same kernel and a compiler
-	    # generating 64-bit code.  GNU and HP use different nomenclature:
-	    #
-	    # $ CC_FOR_BUILD=cc ./config.guess
-	    # => hppa2.0w-hp-hpux11.23
-	    # $ CC_FOR_BUILD="cc +DA2.0w" ./config.guess
-	    # => hppa64-hp-hpux11.23
-
-	    if echo __LP64__ | (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) |
-		grep -q __LP64__
-	    then
-		HP_ARCH=hppa2.0w
-	    else
-		HP_ARCH=hppa64
-	    fi
-	fi
-	GUESS=$HP_ARCH-hp-hpux$HPUX_REV
-	;;
-    ia64:HP-UX:*:*)
-	HPUX_REV=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*.[0B]*//'`
-	GUESS=ia64-hp-hpux$HPUX_REV
-	;;
-    3050*:HI-UX:*:*)
-	set_cc_for_build
-	sed 's/^	//' << EOF > "$dummy.c"
-	#include <unistd.h>
-	int
-	main ()
-	{
-	  long cpu = sysconf (_SC_CPU_VERSION);
-	  /* The order matters, because CPU_IS_HP_MC68K erroneously returns
-	     true for CPU_PA_RISC1_0.  CPU_IS_PA_RISC returns correct
-	     results, however.  */
-	  if (CPU_IS_PA_RISC (cpu))
-	    {
-	      switch (cpu)
-		{
-		  case CPU_PA_RISC1_0: puts ("hppa1.0-hitachi-hiuxwe2"); break;
-		  case CPU_PA_RISC1_1: puts ("hppa1.1-hitachi-hiuxwe2"); break;
-		  case CPU_PA_RISC2_0: puts ("hppa2.0-hitachi-hiuxwe2"); break;
-		  default: puts ("hppa-hitachi-hiuxwe2"); break;
-		}
-	    }
-	  else if (CPU_IS_HP_MC68K (cpu))
-	    puts ("m68k-hitachi-hiuxwe2");
-	  else puts ("unknown-hitachi-hiuxwe2");
-	  exit (0);
-	}
-EOF
-	$CC_FOR_BUILD -o "$dummy" "$dummy.c" && SYSTEM_NAME=`"$dummy"` &&
-		{ echo "$SYSTEM_NAME"; exit; }
-	GUESS=unknown-hitachi-hiuxwe2
-	;;
-    9000/7??:4.3bsd:*:* | 9000/8?[79]:4.3bsd:*:*)
-	GUESS=hppa1.1-hp-bsd
-	;;
-    9000/8??:4.3bsd:*:*)
-	GUESS=hppa1.0-hp-bsd
-	;;
-    *9??*:MPE/iX:*:* | *3000*:MPE/iX:*:*)
-	GUESS=hppa1.0-hp-mpeix
-	;;
-    hp7??:OSF1:*:* | hp8?[79]:OSF1:*:*)
-	GUESS=hppa1.1-hp-osf
-	;;
-    hp8??:OSF1:*:*)
-	GUESS=hppa1.0-hp-osf
-	;;
-    i*86:OSF1:*:*)
-	if test -x /usr/sbin/sysversion ; then
-	    GUESS=$UNAME_MACHINE-unknown-osf1mk
-	else
-	    GUESS=$UNAME_MACHINE-unknown-osf1
-	fi
-	;;
-    parisc*:Lites*:*:*)
-	GUESS=hppa1.1-hp-lites
-	;;
-    C1*:ConvexOS:*:* | convex:ConvexOS:C1*:*)
-	GUESS=c1-convex-bsd
-	;;
-    C2*:ConvexOS:*:* | convex:ConvexOS:C2*:*)
-	if getsysinfo -f scalar_acc
-	then echo c32-convex-bsd
-	else echo c2-convex-bsd
-	fi
-	exit ;;
-    C34*:ConvexOS:*:* | convex:ConvexOS:C34*:*)
-	GUESS=c34-convex-bsd
-	;;
-    C38*:ConvexOS:*:* | convex:ConvexOS:C38*:*)
-	GUESS=c38-convex-bsd
-	;;
-    C4*:ConvexOS:*:* | convex:ConvexOS:C4*:*)
-	GUESS=c4-convex-bsd
-	;;
-    CRAY*Y-MP:*:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=ymp-cray-unicos$CRAY_REL
-	;;
-    CRAY*[A-Z]90:*:*:*)
-	echo "$UNAME_MACHINE"-cray-unicos"$UNAME_RELEASE" \
-	| sed -e 's/CRAY.*\([A-Z]90\)/\1/' \
-	      -e y/ABCDEFGHIJKLMNOPQRSTUVWXYZ/abcdefghijklmnopqrstuvwxyz/ \
-	      -e 's/\.[^.]*$/.X/'
-	exit ;;
-    CRAY*TS:*:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=t90-cray-unicos$CRAY_REL
-	;;
-    CRAY*T3E:*:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=alphaev5-cray-unicosmk$CRAY_REL
-	;;
-    CRAY*SV1:*:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=sv1-cray-unicos$CRAY_REL
-	;;
-    *:UNICOS/mp:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=craynv-cray-unicosmp$CRAY_REL
-	;;
-    F30[01]:UNIX_System_V:*:* | F700:UNIX_System_V:*:*)
-	FUJITSU_PROC=`uname -m | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz`
-	FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'`
-	FUJITSU_REL=`echo "$UNAME_RELEASE" | sed -e 's/ /_/'`
-	GUESS=${FUJITSU_PROC}-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}
-	;;
-    5000:UNIX_System_V:4.*:*)
-	FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'`
-	FUJITSU_REL=`echo "$UNAME_RELEASE" | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/ /_/'`
-	GUESS=sparc-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}
-	;;
-    i*86:BSD/386:*:* | i*86:BSD/OS:*:* | *:Ascend\ Embedded/OS:*:*)
-	GUESS=$UNAME_MACHINE-pc-bsdi$UNAME_RELEASE
-	;;
-    sparc*:BSD/OS:*:*)
-	GUESS=sparc-unknown-bsdi$UNAME_RELEASE
-	;;
-    *:BSD/OS:*:*)
-	GUESS=$UNAME_MACHINE-unknown-bsdi$UNAME_RELEASE
-	;;
-    arm:FreeBSD:*:*)
-	UNAME_PROCESSOR=`uname -p`
-	set_cc_for_build
-	if echo __ARM_PCS_VFP | $CC_FOR_BUILD -E - 2>/dev/null \
-	    | grep -q __ARM_PCS_VFP
-	then
-	    FREEBSD_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	    GUESS=$UNAME_PROCESSOR-unknown-freebsd$FREEBSD_REL-gnueabi
-	else
-	    FREEBSD_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	    GUESS=$UNAME_PROCESSOR-unknown-freebsd$FREEBSD_REL-gnueabihf
-	fi
-	;;
-    *:FreeBSD:*:*)
-	UNAME_PROCESSOR=`uname -p`
-	case $UNAME_PROCESSOR in
-	    amd64)
-		UNAME_PROCESSOR=x86_64 ;;
-	    i386)
-		UNAME_PROCESSOR=i586 ;;
-	esac
-	FREEBSD_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	GUESS=$UNAME_PROCESSOR-unknown-freebsd$FREEBSD_REL
-	;;
-    i*:CYGWIN*:*)
-	GUESS=$UNAME_MACHINE-pc-cygwin
-	;;
-    *:MINGW64*:*)
-	GUESS=$UNAME_MACHINE-pc-mingw64
-	;;
-    *:MINGW*:*)
-	GUESS=$UNAME_MACHINE-pc-mingw32
-	;;
-    *:MSYS*:*)
-	GUESS=$UNAME_MACHINE-pc-msys
-	;;
-    i*:PW*:*)
-	GUESS=$UNAME_MACHINE-pc-pw32
-	;;
-    *:SerenityOS:*:*)
-        GUESS=$UNAME_MACHINE-pc-serenity
-        ;;
-    *:Interix*:*)
-	case $UNAME_MACHINE in
-	    x86)
-		GUESS=i586-pc-interix$UNAME_RELEASE
-		;;
-	    authenticamd | genuineintel | EM64T)
-		GUESS=x86_64-unknown-interix$UNAME_RELEASE
-		;;
-	    IA64)
-		GUESS=ia64-unknown-interix$UNAME_RELEASE
-		;;
-	esac ;;
-    i*:UWIN*:*)
-	GUESS=$UNAME_MACHINE-pc-uwin
-	;;
-    amd64:CYGWIN*:*:* | x86_64:CYGWIN*:*:*)
-	GUESS=x86_64-pc-cygwin
-	;;
-    prep*:SunOS:5.*:*)
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=powerpcle-unknown-solaris2$SUN_REL
-	;;
-    *:GNU:*:*)
-	# the GNU system
-	GNU_ARCH=`echo "$UNAME_MACHINE" | sed -e 's,[-/].*$,,'`
-	GNU_REL=`echo "$UNAME_RELEASE" | sed -e 's,/.*$,,'`
-	GUESS=$GNU_ARCH-unknown-$LIBC$GNU_REL
-	;;
-    *:GNU/*:*:*)
-	# other systems with GNU libc and userland
-	GNU_SYS=`echo "$UNAME_SYSTEM" | sed 's,^[^/]*/,,' | tr "[:upper:]" "[:lower:]"`
-	GNU_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	GUESS=$UNAME_MACHINE-unknown-$GNU_SYS$GNU_REL-$LIBC
-	;;
-    x86_64:[Mm]anagarm:*:*|i?86:[Mm]anagarm:*:*)
-	GUESS="$UNAME_MACHINE-pc-managarm-mlibc"
-	;;
-    *:[Mm]anagarm:*:*)
-	GUESS="$UNAME_MACHINE-unknown-managarm-mlibc"
-	;;
-    *:Minix:*:*)
-	GUESS=$UNAME_MACHINE-unknown-minix
-	;;
-    aarch64:Linux:*:*)
-	set_cc_for_build
-	CPU=$UNAME_MACHINE
-	LIBCABI=$LIBC
-	if test "$CC_FOR_BUILD" != no_compiler_found; then
-	    ABI=64
-	    sed 's/^	    //' << EOF > "$dummy.c"
-	    #ifdef __ARM_EABI__
-	    #ifdef __ARM_PCS_VFP
-	    ABI=eabihf
-	    #else
-	    ABI=eabi
-	    #endif
-	    #endif
-EOF
-	    cc_set_abi=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^ABI' | sed 's, ,,g'`
-	    eval "$cc_set_abi"
-	    case $ABI in
-		eabi | eabihf) CPU=armv8l; LIBCABI=$LIBC$ABI ;;
-	    esac
-	fi
-	GUESS=$CPU-unknown-linux-$LIBCABI
-	;;
-    aarch64_be:Linux:*:*)
-	UNAME_MACHINE=aarch64_be
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    alpha:Linux:*:*)
-	case `sed -n '/^cpu model/s/^.*: \(.*\)/\1/p' /proc/cpuinfo 2>/dev/null` in
-	  EV5)   UNAME_MACHINE=alphaev5 ;;
-	  EV56)  UNAME_MACHINE=alphaev56 ;;
-	  PCA56) UNAME_MACHINE=alphapca56 ;;
-	  PCA57) UNAME_MACHINE=alphapca56 ;;
-	  EV6)   UNAME_MACHINE=alphaev6 ;;
-	  EV67)  UNAME_MACHINE=alphaev67 ;;
-	  EV68*) UNAME_MACHINE=alphaev68 ;;
-	esac
-	objdump --private-headers /bin/sh | grep -q ld.so.1
-	if test "$?" = 0 ; then LIBC=gnulibc1 ; fi
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    arc:Linux:*:* | arceb:Linux:*:* | arc32:Linux:*:* | arc64:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    arm*:Linux:*:*)
-	set_cc_for_build
-	if echo __ARM_EABI__ | $CC_FOR_BUILD -E - 2>/dev/null \
-	    | grep -q __ARM_EABI__
-	then
-	    GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	else
-	    if echo __ARM_PCS_VFP | $CC_FOR_BUILD -E - 2>/dev/null \
-		| grep -q __ARM_PCS_VFP
-	    then
-		GUESS=$UNAME_MACHINE-unknown-linux-${LIBC}eabi
-	    else
-		GUESS=$UNAME_MACHINE-unknown-linux-${LIBC}eabihf
-	    fi
-	fi
-	;;
-    avr32*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    cris:Linux:*:*)
-	GUESS=$UNAME_MACHINE-axis-linux-$LIBC
-	;;
-    crisv32:Linux:*:*)
-	GUESS=$UNAME_MACHINE-axis-linux-$LIBC
-	;;
-    e2k:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    frv:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    hexagon:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    i*86:Linux:*:*)
-	GUESS=$UNAME_MACHINE-pc-linux-$LIBC
-	;;
-    ia64:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    k1om:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    kvx:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    kvx:cos:*:*)
-	GUESS=$UNAME_MACHINE-unknown-cos
-	;;
-    kvx:mbr:*:*)
-	GUESS=$UNAME_MACHINE-unknown-mbr
-	;;
-    loongarch32:Linux:*:* | loongarch64:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    m32r*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    m68*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    mips:Linux:*:* | mips64:Linux:*:*)
-	set_cc_for_build
-	IS_GLIBC=0
-	test x"${LIBC}" = xgnu && IS_GLIBC=1
-	sed 's/^	//' << EOF > "$dummy.c"
-	#undef CPU
-	#undef mips
-	#undef mipsel
-	#undef mips64
-	#undef mips64el
-	#if ${IS_GLIBC} && defined(_ABI64)
-	LIBCABI=gnuabi64
-	#else
-	#if ${IS_GLIBC} && defined(_ABIN32)
-	LIBCABI=gnuabin32
-	#else
-	LIBCABI=${LIBC}
-	#endif
-	#endif
-
-	#if ${IS_GLIBC} && defined(__mips64) && defined(__mips_isa_rev) && __mips_isa_rev>=6
-	CPU=mipsisa64r6
-	#else
-	#if ${IS_GLIBC} && !defined(__mips64) && defined(__mips_isa_rev) && __mips_isa_rev>=6
-	CPU=mipsisa32r6
-	#else
-	#if defined(__mips64)
-	CPU=mips64
-	#else
-	CPU=mips
-	#endif
-	#endif
-	#endif
-
-	#if defined(__MIPSEL__) || defined(__MIPSEL) || defined(_MIPSEL) || defined(MIPSEL)
-	MIPS_ENDIAN=el
-	#else
-	#if defined(__MIPSEB__) || defined(__MIPSEB) || defined(_MIPSEB) || defined(MIPSEB)
-	MIPS_ENDIAN=
-	#else
-	MIPS_ENDIAN=
-	#endif
-	#endif
-EOF
-	cc_set_vars=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^CPU\|^MIPS_ENDIAN\|^LIBCABI'`
-	eval "$cc_set_vars"
-	test "x$CPU" != x && { echo "$CPU${MIPS_ENDIAN}-unknown-linux-$LIBCABI"; exit; }
-	;;
-    mips64el:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    openrisc*:Linux:*:*)
-	GUESS=or1k-unknown-linux-$LIBC
-	;;
-    or32:Linux:*:* | or1k*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    padre:Linux:*:*)
-	GUESS=sparc-unknown-linux-$LIBC
-	;;
-    parisc64:Linux:*:* | hppa64:Linux:*:*)
-	GUESS=hppa64-unknown-linux-$LIBC
-	;;
-    parisc:Linux:*:* | hppa:Linux:*:*)
-	# Look for CPU level
-	case `grep '^cpu[^a-z]*:' /proc/cpuinfo 2>/dev/null | cut -d' ' -f2` in
-	  PA7*) GUESS=hppa1.1-unknown-linux-$LIBC ;;
-	  PA8*) GUESS=hppa2.0-unknown-linux-$LIBC ;;
-	  *)    GUESS=hppa-unknown-linux-$LIBC ;;
-	esac
-	;;
-    ppc64:Linux:*:*)
-	GUESS=powerpc64-unknown-linux-$LIBC
-	;;
-    ppc:Linux:*:*)
-	GUESS=powerpc-unknown-linux-$LIBC
-	;;
-    ppc64le:Linux:*:*)
-	GUESS=powerpc64le-unknown-linux-$LIBC
-	;;
-    ppcle:Linux:*:*)
-	GUESS=powerpcle-unknown-linux-$LIBC
-	;;
-    riscv32:Linux:*:* | riscv32be:Linux:*:* | riscv64:Linux:*:* | riscv64be:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    s390:Linux:*:* | s390x:Linux:*:*)
-	GUESS=$UNAME_MACHINE-ibm-linux-$LIBC
-	;;
-    sh64*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    sh*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    sparc:Linux:*:* | sparc64:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    tile*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    vax:Linux:*:*)
-	GUESS=$UNAME_MACHINE-dec-linux-$LIBC
-	;;
-    x86_64:Linux:*:*)
-	set_cc_for_build
-	CPU=$UNAME_MACHINE
-	LIBCABI=$LIBC
-	if test "$CC_FOR_BUILD" != no_compiler_found; then
-	    ABI=64
-	    sed 's/^	    //' << EOF > "$dummy.c"
-	    #ifdef __i386__
-	    ABI=x86
-	    #else
-	    #ifdef __ILP32__
-	    ABI=x32
-	    #endif
-	    #endif
-EOF
-	    cc_set_abi=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^ABI' | sed 's, ,,g'`
-	    eval "$cc_set_abi"
-	    case $ABI in
-		x86) CPU=i686 ;;
-		x32) LIBCABI=${LIBC}x32 ;;
-	    esac
-	fi
-	GUESS=$CPU-pc-linux-$LIBCABI
-	;;
-    xtensa*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    i*86:DYNIX/ptx:4*:*)
-	# ptx 4.0 does uname -s correctly, with DYNIX/ptx in there.
-	# earlier versions are messed up and put the nodename in both
-	# sysname and nodename.
-	GUESS=i386-sequent-sysv4
-	;;
-    i*86:UNIX_SV:4.2MP:2.*)
-	# Unixware is an offshoot of SVR4, but it has its own version
-	# number series starting with 2...
-	# I am not positive that other SVR4 systems won't match this,
-	# I just have to hope.  -- rms.
-	# Use sysv4.2uw... so that sysv4* matches it.
-	GUESS=$UNAME_MACHINE-pc-sysv4.2uw$UNAME_VERSION
-	;;
-    i*86:OS/2:*:*)
-	# If we were able to find 'uname', then EMX Unix compatibility
-	# is probably installed.
-	GUESS=$UNAME_MACHINE-pc-os2-emx
-	;;
-    i*86:XTS-300:*:STOP)
-	GUESS=$UNAME_MACHINE-unknown-stop
-	;;
-    i*86:atheos:*:*)
-	GUESS=$UNAME_MACHINE-unknown-atheos
-	;;
-    i*86:syllable:*:*)
-	GUESS=$UNAME_MACHINE-pc-syllable
-	;;
-    i*86:LynxOS:2.*:* | i*86:LynxOS:3.[01]*:* | i*86:LynxOS:4.[02]*:*)
-	GUESS=i386-unknown-lynxos$UNAME_RELEASE
-	;;
-    i*86:*DOS:*:*)
-	GUESS=$UNAME_MACHINE-pc-msdosdjgpp
-	;;
-    i*86:*:4.*:*)
-	UNAME_REL=`echo "$UNAME_RELEASE" | sed 's/\/MP$//'`
-	if grep Novell /usr/include/link.h >/dev/null 2>/dev/null; then
-		GUESS=$UNAME_MACHINE-univel-sysv$UNAME_REL
-	else
-		GUESS=$UNAME_MACHINE-pc-sysv$UNAME_REL
-	fi
-	;;
-    i*86:*:5:[678]*)
-	# UnixWare 7.x, OpenUNIX and OpenServer 6.
-	case `/bin/uname -X | grep "^Machine"` in
-	    *486*)	     UNAME_MACHINE=i486 ;;
-	    *Pentium)	     UNAME_MACHINE=i586 ;;
-	    *Pent*|*Celeron) UNAME_MACHINE=i686 ;;
-	esac
-	GUESS=$UNAME_MACHINE-unknown-sysv${UNAME_RELEASE}${UNAME_SYSTEM}${UNAME_VERSION}
-	;;
-    i*86:*:3.2:*)
-	if test -f /usr/options/cb.name; then
-		UNAME_REL=`sed -n 's/.*Version //p' </usr/options/cb.name`
-		GUESS=$UNAME_MACHINE-pc-isc$UNAME_REL
-	elif /bin/uname -X 2>/dev/null >/dev/null ; then
-		UNAME_REL=`(/bin/uname -X|grep Release|sed -e 's/.*= //')`
-		(/bin/uname -X|grep i80486 >/dev/null) && UNAME_MACHINE=i486
-		(/bin/uname -X|grep '^Machine.*Pentium' >/dev/null) \
-			&& UNAME_MACHINE=i586
-		(/bin/uname -X|grep '^Machine.*Pent *II' >/dev/null) \
-			&& UNAME_MACHINE=i686
-		(/bin/uname -X|grep '^Machine.*Pentium Pro' >/dev/null) \
-			&& UNAME_MACHINE=i686
-		GUESS=$UNAME_MACHINE-pc-sco$UNAME_REL
-	else
-		GUESS=$UNAME_MACHINE-pc-sysv32
-	fi
-	;;
-    pc:*:*:*)
-	# Left here for compatibility:
-	# uname -m prints for DJGPP always 'pc', but it prints nothing about
-	# the processor, so we play safe by assuming i586.
-	# Note: whatever this is, it MUST be the same as what config.sub
-	# prints for the "djgpp" host, or else GDB configure will decide that
-	# this is a cross-build.
-	GUESS=i586-pc-msdosdjgpp
-	;;
-    Intel:Mach:3*:*)
-	GUESS=i386-pc-mach3
-	;;
-    paragon:*:*:*)
-	GUESS=i860-intel-osf1
-	;;
-    i860:*:4.*:*) # i860-SVR4
-	if grep Stardent /usr/include/sys/uadmin.h >/dev/null 2>&1 ; then
-	  GUESS=i860-stardent-sysv$UNAME_RELEASE    # Stardent Vistra i860-SVR4
-	else # Add other i860-SVR4 vendors below as they are discovered.
-	  GUESS=i860-unknown-sysv$UNAME_RELEASE     # Unknown i860-SVR4
-	fi
-	;;
-    mini*:CTIX:SYS*5:*)
-	# "miniframe"
-	GUESS=m68010-convergent-sysv
-	;;
-    mc68k:UNIX:SYSTEM5:3.51m)
-	GUESS=m68k-convergent-sysv
-	;;
-    M680?0:D-NIX:5.3:*)
-	GUESS=m68k-diab-dnix
-	;;
-    M68*:*:R3V[5678]*:*)
-	test -r /sysV68 && { echo 'm68k-motorola-sysv'; exit; } ;;
-    3[345]??:*:4.0:3.0 | 3[34]??A:*:4.0:3.0 | 3[34]??,*:*:4.0:3.0 | 3[34]??/*:*:4.0:3.0 | 4400:*:4.0:3.0 | 4850:*:4.0:3.0 | SKA40:*:4.0:3.0 | SDS2:*:4.0:3.0 | SHG2:*:4.0:3.0 | S7501*:*:4.0:3.0)
-	OS_REL=''
-	test -r /etc/.relid \
-	&& OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid`
-	/bin/uname -p 2>/dev/null | grep 86 >/dev/null \
-	  && { echo i486-ncr-sysv4.3"$OS_REL"; exit; }
-	/bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \
-	  && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } ;;
-    3[34]??:*:4.0:* | 3[34]??,*:*:4.0:*)
-	/bin/uname -p 2>/dev/null | grep 86 >/dev/null \
-	  && { echo i486-ncr-sysv4; exit; } ;;
-    NCR*:*:4.2:* | MPRAS*:*:4.2:*)
-	OS_REL='.3'
-	test -r /etc/.relid \
-	    && OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid`
-	/bin/uname -p 2>/dev/null | grep 86 >/dev/null \
-	    && { echo i486-ncr-sysv4.3"$OS_REL"; exit; }
-	/bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \
-	    && { echo i586-ncr-sysv4.3"$OS_REL"; exit; }
-	/bin/uname -p 2>/dev/null | /bin/grep pteron >/dev/null \
-	    && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } ;;
-    m68*:LynxOS:2.*:* | m68*:LynxOS:3.0*:*)
-	GUESS=m68k-unknown-lynxos$UNAME_RELEASE
-	;;
-    mc68030:UNIX_System_V:4.*:*)
-	GUESS=m68k-atari-sysv4
-	;;
-    TSUNAMI:LynxOS:2.*:*)
-	GUESS=sparc-unknown-lynxos$UNAME_RELEASE
-	;;
-    rs6000:LynxOS:2.*:*)
-	GUESS=rs6000-unknown-lynxos$UNAME_RELEASE
-	;;
-    PowerPC:LynxOS:2.*:* | PowerPC:LynxOS:3.[01]*:* | PowerPC:LynxOS:4.[02]*:*)
-	GUESS=powerpc-unknown-lynxos$UNAME_RELEASE
-	;;
-    SM[BE]S:UNIX_SV:*:*)
-	GUESS=mips-dde-sysv$UNAME_RELEASE
-	;;
-    RM*:ReliantUNIX-*:*:*)
-	GUESS=mips-sni-sysv4
-	;;
-    RM*:SINIX-*:*:*)
-	GUESS=mips-sni-sysv4
-	;;
-    *:SINIX-*:*:*)
-	if uname -p 2>/dev/null >/dev/null ; then
-		UNAME_MACHINE=`(uname -p) 2>/dev/null`
-		GUESS=$UNAME_MACHINE-sni-sysv4
-	else
-		GUESS=ns32k-sni-sysv
-	fi
-	;;
-    PENTIUM:*:4.0*:*)	# Unisys 'ClearPath HMP IX 4000' SVR4/MP effort
-			# says <Richard.M.Bartel@ccMail.Census.GOV>
-	GUESS=i586-unisys-sysv4
-	;;
-    *:UNIX_System_V:4*:FTX*)
-	# From Gerald Hewes <hewes@openmarket.com>.
-	# How about differentiating between stratus architectures? -djm
-	GUESS=hppa1.1-stratus-sysv4
-	;;
-    *:*:*:FTX*)
-	# From seanf@swdc.stratus.com.
-	GUESS=i860-stratus-sysv4
-	;;
-    i*86:VOS:*:*)
-	# From Paul.Green@stratus.com.
-	GUESS=$UNAME_MACHINE-stratus-vos
-	;;
-    *:VOS:*:*)
-	# From Paul.Green@stratus.com.
-	GUESS=hppa1.1-stratus-vos
-	;;
-    mc68*:A/UX:*:*)
-	GUESS=m68k-apple-aux$UNAME_RELEASE
-	;;
-    news*:NEWS-OS:6*:*)
-	GUESS=mips-sony-newsos6
-	;;
-    R[34]000:*System_V*:*:* | R4000:UNIX_SYSV:*:* | R*000:UNIX_SV:*:*)
-	if test -d /usr/nec; then
-		GUESS=mips-nec-sysv$UNAME_RELEASE
-	else
-		GUESS=mips-unknown-sysv$UNAME_RELEASE
-	fi
-	;;
-    BeBox:BeOS:*:*)	# BeOS running on hardware made by Be, PPC only.
-	GUESS=powerpc-be-beos
-	;;
-    BeMac:BeOS:*:*)	# BeOS running on Mac or Mac clone, PPC only.
-	GUESS=powerpc-apple-beos
-	;;
-    BePC:BeOS:*:*)	# BeOS running on Intel PC compatible.
-	GUESS=i586-pc-beos
-	;;
-    BePC:Haiku:*:*)	# Haiku running on Intel PC compatible.
-	GUESS=i586-pc-haiku
-	;;
-    ppc:Haiku:*:*)	# Haiku running on Apple PowerPC
-	GUESS=powerpc-apple-haiku
-	;;
-    *:Haiku:*:*)	# Haiku modern gcc (not bound by BeOS compat)
-	GUESS=$UNAME_MACHINE-unknown-haiku
-	;;
-    SX-4:SUPER-UX:*:*)
-	GUESS=sx4-nec-superux$UNAME_RELEASE
-	;;
-    SX-5:SUPER-UX:*:*)
-	GUESS=sx5-nec-superux$UNAME_RELEASE
-	;;
-    SX-6:SUPER-UX:*:*)
-	GUESS=sx6-nec-superux$UNAME_RELEASE
-	;;
-    SX-7:SUPER-UX:*:*)
-	GUESS=sx7-nec-superux$UNAME_RELEASE
-	;;
-    SX-8:SUPER-UX:*:*)
-	GUESS=sx8-nec-superux$UNAME_RELEASE
-	;;
-    SX-8R:SUPER-UX:*:*)
-	GUESS=sx8r-nec-superux$UNAME_RELEASE
-	;;
-    SX-ACE:SUPER-UX:*:*)
-	GUESS=sxace-nec-superux$UNAME_RELEASE
-	;;
-    Power*:Rhapsody:*:*)
-	GUESS=powerpc-apple-rhapsody$UNAME_RELEASE
-	;;
-    *:Rhapsody:*:*)
-	GUESS=$UNAME_MACHINE-apple-rhapsody$UNAME_RELEASE
-	;;
-    arm64:Darwin:*:*)
-	GUESS=aarch64-apple-darwin$UNAME_RELEASE
-	;;
-    *:Darwin:*:*)
-	UNAME_PROCESSOR=`uname -p`
-	case $UNAME_PROCESSOR in
-	    unknown) UNAME_PROCESSOR=powerpc ;;
-	esac
-	if command -v xcode-select > /dev/null 2> /dev/null && \
-		! xcode-select --print-path > /dev/null 2> /dev/null ; then
-	    # Avoid executing cc if there is no toolchain installed as
-	    # cc will be a stub that puts up a graphical alert
-	    # prompting the user to install developer tools.
-	    CC_FOR_BUILD=no_compiler_found
-	else
-	    set_cc_for_build
-	fi
-	if test "$CC_FOR_BUILD" != no_compiler_found; then
-	    if (echo '#ifdef __LP64__'; echo IS_64BIT_ARCH; echo '#endif') | \
-		   (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \
-		   grep IS_64BIT_ARCH >/dev/null
-	    then
-		case $UNAME_PROCESSOR in
-		    i386) UNAME_PROCESSOR=x86_64 ;;
-		    powerpc) UNAME_PROCESSOR=powerpc64 ;;
-		esac
-	    fi
-	    # On 10.4-10.6 one might compile for PowerPC via gcc -arch ppc
-	    if (echo '#ifdef __POWERPC__'; echo IS_PPC; echo '#endif') | \
-		   (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \
-		   grep IS_PPC >/dev/null
-	    then
-		UNAME_PROCESSOR=powerpc
-	    fi
-	elif test "$UNAME_PROCESSOR" = i386 ; then
-	    # uname -m returns i386 or x86_64
-	    UNAME_PROCESSOR=$UNAME_MACHINE
-	fi
-	GUESS=$UNAME_PROCESSOR-apple-darwin$UNAME_RELEASE
-	;;
-    *:procnto*:*:* | *:QNX:[0123456789]*:*)
-	UNAME_PROCESSOR=`uname -p`
-	if test "$UNAME_PROCESSOR" = x86; then
-		UNAME_PROCESSOR=i386
-		UNAME_MACHINE=pc
-	fi
-	GUESS=$UNAME_PROCESSOR-$UNAME_MACHINE-nto-qnx$UNAME_RELEASE
-	;;
-    *:QNX:*:4*)
-	GUESS=i386-pc-qnx
-	;;
-    NEO-*:NONSTOP_KERNEL:*:*)
-	GUESS=neo-tandem-nsk$UNAME_RELEASE
-	;;
-    NSE-*:NONSTOP_KERNEL:*:*)
-	GUESS=nse-tandem-nsk$UNAME_RELEASE
-	;;
-    NSR-*:NONSTOP_KERNEL:*:*)
-	GUESS=nsr-tandem-nsk$UNAME_RELEASE
-	;;
-    NSV-*:NONSTOP_KERNEL:*:*)
-	GUESS=nsv-tandem-nsk$UNAME_RELEASE
-	;;
-    NSX-*:NONSTOP_KERNEL:*:*)
-	GUESS=nsx-tandem-nsk$UNAME_RELEASE
-	;;
-    *:NonStop-UX:*:*)
-	GUESS=mips-compaq-nonstopux
-	;;
-    BS2000:POSIX*:*:*)
-	GUESS=bs2000-siemens-sysv
-	;;
-    DS/*:UNIX_System_V:*:*)
-	GUESS=$UNAME_MACHINE-$UNAME_SYSTEM-$UNAME_RELEASE
-	;;
-    *:Plan9:*:*)
-	# "uname -m" is not consistent, so use $cputype instead. 386
-	# is converted to i386 for consistency with other x86
-	# operating systems.
-	if test "${cputype-}" = 386; then
-	    UNAME_MACHINE=i386
-	elif test "x${cputype-}" != x; then
-	    UNAME_MACHINE=$cputype
-	fi
-	GUESS=$UNAME_MACHINE-unknown-plan9
-	;;
-    *:TOPS-10:*:*)
-	GUESS=pdp10-unknown-tops10
-	;;
-    *:TENEX:*:*)
-	GUESS=pdp10-unknown-tenex
-	;;
-    KS10:TOPS-20:*:* | KL10:TOPS-20:*:* | TYPE4:TOPS-20:*:*)
-	GUESS=pdp10-dec-tops20
-	;;
-    XKL-1:TOPS-20:*:* | TYPE5:TOPS-20:*:*)
-	GUESS=pdp10-xkl-tops20
-	;;
-    *:TOPS-20:*:*)
-	GUESS=pdp10-unknown-tops20
-	;;
-    *:ITS:*:*)
-	GUESS=pdp10-unknown-its
-	;;
-    SEI:*:*:SEIUX)
-	GUESS=mips-sei-seiux$UNAME_RELEASE
-	;;
-    *:DragonFly:*:*)
-	DRAGONFLY_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	GUESS=$UNAME_MACHINE-unknown-dragonfly$DRAGONFLY_REL
-	;;
-    *:*VMS:*:*)
-	UNAME_MACHINE=`(uname -p) 2>/dev/null`
-	case $UNAME_MACHINE in
-	    A*) GUESS=alpha-dec-vms ;;
-	    I*) GUESS=ia64-dec-vms ;;
-	    V*) GUESS=vax-dec-vms ;;
-	esac ;;
-    *:XENIX:*:SysV)
-	GUESS=i386-pc-xenix
-	;;
-    i*86:skyos:*:*)
-	SKYOS_REL=`echo "$UNAME_RELEASE" | sed -e 's/ .*$//'`
-	GUESS=$UNAME_MACHINE-pc-skyos$SKYOS_REL
-	;;
-    i*86:rdos:*:*)
-	GUESS=$UNAME_MACHINE-pc-rdos
-	;;
-    i*86:Fiwix:*:*)
-	GUESS=$UNAME_MACHINE-pc-fiwix
-	;;
-    *:AROS:*:*)
-	GUESS=$UNAME_MACHINE-unknown-aros
-	;;
-    x86_64:VMkernel:*:*)
-	GUESS=$UNAME_MACHINE-unknown-esx
-	;;
-    amd64:Isilon\ OneFS:*:*)
-	GUESS=x86_64-unknown-onefs
-	;;
-    *:Unleashed:*:*)
-	GUESS=$UNAME_MACHINE-unknown-unleashed$UNAME_RELEASE
-	;;
-    x86_64:[Ii]ronclad:*:*|i?86:[Ii]ronclad:*:*)
-	GUESS=$UNAME_MACHINE-pc-ironclad-mlibc
-	;;
-    *:[Ii]ronclad:*:*)
-	GUESS=$UNAME_MACHINE-unknown-ironclad-mlibc
-	;;
-esac
-
-# Do we have a guess based on uname results?
-if test "x$GUESS" != x; then
-    echo "$GUESS"
-    exit
-fi
-
-# No uname command or uname output not recognized.
-set_cc_for_build
-cat > "$dummy.c" <<EOF
-#ifdef _SEQUENT_
-#include <sys/types.h>
-#include <sys/utsname.h>
-#endif
-#if defined(ultrix) || defined(_ultrix) || defined(__ultrix) || defined(__ultrix__)
-#if defined (vax) || defined (__vax) || defined (__vax__) || defined(mips) || defined(__mips) || defined(__mips__) || defined(MIPS) || defined(__MIPS__)
-#include <signal.h>
-#if defined(_SIZE_T_) || defined(SIGLOST)
-#include <sys/utsname.h>
-#endif
-#endif
-#endif
-int
-main ()
-{
-#if defined (sony)
-#if defined (MIPSEB)
-  /* BFD wants "bsd" instead of "newsos".  Perhaps BFD should be changed,
-     I don't know....  */
-  printf ("mips-sony-bsd\n"); exit (0);
-#else
-#include <sys/param.h>
-  printf ("m68k-sony-newsos%s\n",
-#ifdef NEWSOS4
-  "4"
-#else
-  ""
-#endif
-  ); exit (0);
-#endif
-#endif
-
-#if defined (NeXT)
-#if !defined (__ARCHITECTURE__)
-#define __ARCHITECTURE__ "m68k"
-#endif
-  int version;
-  version=`(hostinfo | sed -n 's/.*NeXT Mach \([0-9]*\).*/\1/p') 2>/dev/null`;
-  if (version < 4)
-    printf ("%s-next-nextstep%d\n", __ARCHITECTURE__, version);
-  else
-    printf ("%s-next-openstep%d\n", __ARCHITECTURE__, version);
-  exit (0);
-#endif
-
-#if defined (MULTIMAX) || defined (n16)
-#if defined (UMAXV)
-  printf ("ns32k-encore-sysv\n"); exit (0);
-#else
-#if defined (CMU)
-  printf ("ns32k-encore-mach\n"); exit (0);
-#else
-  printf ("ns32k-encore-bsd\n"); exit (0);
-#endif
-#endif
-#endif
-
-#if defined (__386BSD__)
-  printf ("i386-pc-bsd\n"); exit (0);
-#endif
-
-#if defined (sequent)
-#if defined (i386)
-  printf ("i386-sequent-dynix\n"); exit (0);
-#endif
-#if defined (ns32000)
-  printf ("ns32k-sequent-dynix\n"); exit (0);
-#endif
-#endif
-
-#if defined (_SEQUENT_)
-  struct utsname un;
-
-  uname(&un);
-  if (strncmp(un.version, "V2", 2) == 0) {
-    printf ("i386-sequent-ptx2\n"); exit (0);
-  }
-  if (strncmp(un.version, "V1", 2) == 0) { /* XXX is V1 correct? */
-    printf ("i386-sequent-ptx1\n"); exit (0);
-  }
-  printf ("i386-sequent-ptx\n"); exit (0);
-#endif
-
-#if defined (vax)
-#if !defined (ultrix)
-#include <sys/param.h>
-#if defined (BSD)
-#if BSD == 43
-  printf ("vax-dec-bsd4.3\n"); exit (0);
-#else
-#if BSD == 199006
-  printf ("vax-dec-bsd4.3reno\n"); exit (0);
-#else
-  printf ("vax-dec-bsd\n"); exit (0);
-#endif
-#endif
-#else
-  printf ("vax-dec-bsd\n"); exit (0);
-#endif
-#else
-#if defined(_SIZE_T_) || defined(SIGLOST)
-  struct utsname un;
-  uname (&un);
-  printf ("vax-dec-ultrix%s\n", un.release); exit (0);
-#else
-  printf ("vax-dec-ultrix\n"); exit (0);
-#endif
-#endif
-#endif
-#if defined(ultrix) || defined(_ultrix) || defined(__ultrix) || defined(__ultrix__)
-#if defined(mips) || defined(__mips) || defined(__mips__) || defined(MIPS) || defined(__MIPS__)
-#if defined(_SIZE_T_) || defined(SIGLOST)
-  struct utsname *un;
-  uname (&un);
-  printf ("mips-dec-ultrix%s\n", un.release); exit (0);
-#else
-  printf ("mips-dec-ultrix\n"); exit (0);
-#endif
-#endif
-#endif
-
-#if defined (alliant) && defined (i860)
-  printf ("i860-alliant-bsd\n"); exit (0);
-#endif
-
-  exit (1);
-}
-EOF
-
-$CC_FOR_BUILD -o "$dummy" "$dummy.c" 2>/dev/null && SYSTEM_NAME=`"$dummy"` &&
-	{ echo "$SYSTEM_NAME"; exit; }
-
-# Apollos put the system type in the environment.
-test -d /usr/apollo && { echo "$ISP-apollo-$SYSTYPE"; exit; }
-
-echo "$0: unable to guess system type" >&2
-
-case $UNAME_MACHINE:$UNAME_SYSTEM in
-    mips:Linux | mips64:Linux)
-	# If we got here on MIPS GNU/Linux, output extra information.
-	cat >&2 <<EOF
-
-NOTE: MIPS GNU/Linux systems require a C compiler to fully recognize
-the system type. Please install a C compiler and try again.
-EOF
-	;;
-esac
-
-cat >&2 <<EOF
-
-This script (version $timestamp), has failed to recognize the
-operating system you are using. If your script is old, overwrite *all*
-copies of config.guess and config.sub with the latest versions from:
-
-  https://git.savannah.gnu.org/cgit/config.git/plain/config.guess
-and
-  https://git.savannah.gnu.org/cgit/config.git/plain/config.sub
-EOF
-
-our_year=`echo $timestamp | sed 's,-.*,,'`
-thisyear=`date +%Y`
-# shellcheck disable=SC2003
-script_age=`expr "$thisyear" - "$our_year"`
-if test "$script_age" -lt 3 ; then
-   cat >&2 <<EOF
-
-If $0 has already been updated, send the following data and any
-information you think might be pertinent to config-patches@gnu.org to
-provide the necessary information to handle your system.
-
-config.guess timestamp = $timestamp
-
-uname -m = `(uname -m) 2>/dev/null || echo unknown`
-uname -r = `(uname -r) 2>/dev/null || echo unknown`
-uname -s = `(uname -s) 2>/dev/null || echo unknown`
-uname -v = `(uname -v) 2>/dev/null || echo unknown`
-
-/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null`
-/bin/uname -X     = `(/bin/uname -X) 2>/dev/null`
-
-hostinfo               = `(hostinfo) 2>/dev/null`
-/bin/universe          = `(/bin/universe) 2>/dev/null`
-/usr/bin/arch -k       = `(/usr/bin/arch -k) 2>/dev/null`
-/bin/arch              = `(/bin/arch) 2>/dev/null`
-/usr/bin/oslevel       = `(/usr/bin/oslevel) 2>/dev/null`
-/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null`
-
-UNAME_MACHINE = "$UNAME_MACHINE"
-UNAME_RELEASE = "$UNAME_RELEASE"
-UNAME_SYSTEM  = "$UNAME_SYSTEM"
-UNAME_VERSION = "$UNAME_VERSION"
-EOF
-fi
-
-exit 1
-
-# Local variables:
-# eval: (add-hook 'before-save-hook 'time-stamp nil t)
-# time-stamp-start: "timestamp='"
-# time-stamp-format: "%Y-%02m-%02d"
-# time-stamp-end: "'"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXext/config.guess~ b/experiments/wasm-gui/third_party/libXext/config.guess~
deleted file mode 100755
index 48a684601..000000000
--- a/experiments/wasm-gui/third_party/libXext/config.guess~
+++ /dev/null
@@ -1,1815 +0,0 @@
-#! /bin/sh
-# Attempt to guess a canonical system name.
-#   Copyright 1992-2024 Free Software Foundation, Inc.
-
-# shellcheck disable=SC2006,SC2268 # see below for rationale
-
-timestamp='2024-07-27'
-
-# This file is free software; you can redistribute it and/or modify it
-# under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-# General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, see <https://www.gnu.org/licenses/>.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program that contains a
-# configuration script generated by Autoconf, you may include it under
-# the same distribution terms that you use for the rest of that
-# program.  This Exception is an additional permission under section 7
-# of the GNU General Public License, version 3 ("GPLv3").
-#
-# Originally written by Per Bothner; maintained since 2000 by Ben Elliston.
-#
-# You can get the latest version of this script from:
-# https://git.savannah.gnu.org/cgit/config.git/plain/config.guess
-#
-# Please send patches to <config-patches@gnu.org>.
-
-
-# The "shellcheck disable" line above the timestamp inhibits complaints
-# about features and limitations of the classic Bourne shell that were
-# superseded or lifted in POSIX.  However, this script identifies a wide
-# variety of pre-POSIX systems that do not have POSIX shells at all, and
-# even some reasonably current systems (Solaris 10 as case-in-point) still
-# have a pre-POSIX /bin/sh.
-
-
-me=`echo "$0" | sed -e 's,.*/,,'`
-
-usage="\
-Usage: $0 [OPTION]
-
-Output the configuration name of the system '$me' is run on.
-
-Options:
-  -h, --help         print this help, then exit
-  -t, --time-stamp   print date of last modification, then exit
-  -v, --version      print version number, then exit
-
-Report bugs and patches to <config-patches@gnu.org>."
-
-version="\
-GNU config.guess ($timestamp)
-
-Originally written by Per Bothner.
-Copyright 1992-2024 Free Software Foundation, Inc.
-
-This is free software; see the source for copying conditions.  There is NO
-warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE."
-
-help="
-Try '$me --help' for more information."
-
-# Parse command line
-while test $# -gt 0 ; do
-  case $1 in
-    --time-stamp | --time* | -t )
-       echo "$timestamp" ; exit ;;
-    --version | -v )
-       echo "$version" ; exit ;;
-    --help | --h* | -h )
-       echo "$usage"; exit ;;
-    -- )     # Stop option processing
-       shift; break ;;
-    - )	# Use stdin as input.
-       break ;;
-    -* )
-       echo "$me: invalid option $1$help" >&2
-       exit 1 ;;
-    * )
-       break ;;
-  esac
-done
-
-if test $# != 0; then
-  echo "$me: too many arguments$help" >&2
-  exit 1
-fi
-
-# Just in case it came from the environment.
-GUESS=
-
-# CC_FOR_BUILD -- compiler used by this script. Note that the use of a
-# compiler to aid in system detection is discouraged as it requires
-# temporary files to be created and, as you can see below, it is a
-# headache to deal with in a portable fashion.
-
-# Historically, 'CC_FOR_BUILD' used to be named 'HOST_CC'. We still
-# use 'HOST_CC' if defined, but it is deprecated.
-
-# Portable tmp directory creation inspired by the Autoconf team.
-
-tmp=
-# shellcheck disable=SC2172
-trap 'test -z "$tmp" || rm -fr "$tmp"' 0 1 2 13 15
-
-set_cc_for_build() {
-    # prevent multiple calls if $tmp is already set
-    test "$tmp" && return 0
-    : "${TMPDIR=/tmp}"
-    # shellcheck disable=SC2039,SC3028
-    { tmp=`(umask 077 && mktemp -d "$TMPDIR/cgXXXXXX") 2>/dev/null` && test -n "$tmp" && test -d "$tmp" ; } ||
-	{ test -n "$RANDOM" && tmp=$TMPDIR/cg$$-$RANDOM && (umask 077 && mkdir "$tmp" 2>/dev/null) ; } ||
-	{ tmp=$TMPDIR/cg-$$ && (umask 077 && mkdir "$tmp" 2>/dev/null) && echo "Warning: creating insecure temp directory" >&2 ; } ||
-	{ echo "$me: cannot create a temporary directory in $TMPDIR" >&2 ; exit 1 ; }
-    dummy=$tmp/dummy
-    case ${CC_FOR_BUILD-},${HOST_CC-},${CC-} in
-	,,)    echo "int x;" > "$dummy.c"
-	       for driver in cc gcc c17 c99 c89 ; do
-		   if ($driver -c -o "$dummy.o" "$dummy.c") >/dev/null 2>&1 ; then
-		       CC_FOR_BUILD=$driver
-		       break
-		   fi
-	       done
-	       if test x"$CC_FOR_BUILD" = x ; then
-		   CC_FOR_BUILD=no_compiler_found
-	       fi
-	       ;;
-	,,*)   CC_FOR_BUILD=$CC ;;
-	,*,*)  CC_FOR_BUILD=$HOST_CC ;;
-    esac
-}
-
-# This is needed to find uname on a Pyramid OSx when run in the BSD universe.
-# (ghazi@noc.rutgers.edu 1994-08-24)
-if test -f /.attbin/uname ; then
-	PATH=$PATH:/.attbin ; export PATH
-fi
-
-UNAME_MACHINE=`(uname -m) 2>/dev/null` || UNAME_MACHINE=unknown
-UNAME_RELEASE=`(uname -r) 2>/dev/null` || UNAME_RELEASE=unknown
-UNAME_SYSTEM=`(uname -s) 2>/dev/null` || UNAME_SYSTEM=unknown
-UNAME_VERSION=`(uname -v) 2>/dev/null` || UNAME_VERSION=unknown
-
-case $UNAME_SYSTEM in
-Linux|GNU|GNU/*)
-	LIBC=unknown
-
-	set_cc_for_build
-	cat <<-EOF > "$dummy.c"
-	#if defined(__ANDROID__)
-	LIBC=android
-	#else
-	#include <features.h>
-	#if defined(__UCLIBC__)
-	LIBC=uclibc
-	#elif defined(__dietlibc__)
-	LIBC=dietlibc
-	#elif defined(__GLIBC__)
-	LIBC=gnu
-	#elif defined(__LLVM_LIBC__)
-	LIBC=llvm
-	#else
-	#include <stdarg.h>
-	/* First heuristic to detect musl libc.  */
-	#ifdef __DEFINED_va_list
-	LIBC=musl
-	#endif
-	#endif
-	#endif
-	EOF
-	cc_set_libc=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^LIBC' | sed 's, ,,g'`
-	eval "$cc_set_libc"
-
-	# Second heuristic to detect musl libc.
-	if [ "$LIBC" = unknown ] &&
-	   command -v ldd >/dev/null &&
-	   ldd --version 2>&1 | grep -q ^musl; then
-		LIBC=musl
-	fi
-
-	# If the system lacks a compiler, then just pick glibc.
-	# We could probably try harder.
-	if [ "$LIBC" = unknown ]; then
-		LIBC=gnu
-	fi
-	;;
-esac
-
-# Note: order is significant - the case branches are not exclusive.
-
-case $UNAME_MACHINE:$UNAME_SYSTEM:$UNAME_RELEASE:$UNAME_VERSION in
-    *:NetBSD:*:*)
-	# NetBSD (nbsd) targets should (where applicable) match one or
-	# more of the tuples: *-*-netbsdelf*, *-*-netbsdaout*,
-	# *-*-netbsdecoff* and *-*-netbsd*.  For targets that recently
-	# switched to ELF, *-*-netbsd* would select the old
-	# object file format.  This provides both forward
-	# compatibility and a consistent mechanism for selecting the
-	# object file format.
-	#
-	# Note: NetBSD doesn't particularly care about the vendor
-	# portion of the name.  We always set it to "unknown".
-	UNAME_MACHINE_ARCH=`(uname -p 2>/dev/null || \
-	    /sbin/sysctl -n hw.machine_arch 2>/dev/null || \
-	    /usr/sbin/sysctl -n hw.machine_arch 2>/dev/null || \
-	    echo unknown)`
-	case $UNAME_MACHINE_ARCH in
-	    aarch64eb) machine=aarch64_be-unknown ;;
-	    armeb) machine=armeb-unknown ;;
-	    arm*) machine=arm-unknown ;;
-	    sh3el) machine=shl-unknown ;;
-	    sh3eb) machine=sh-unknown ;;
-	    sh5el) machine=sh5le-unknown ;;
-	    earmv*)
-		arch=`echo "$UNAME_MACHINE_ARCH" | sed -e 's,^e\(armv[0-9]\).*$,\1,'`
-		endian=`echo "$UNAME_MACHINE_ARCH" | sed -ne 's,^.*\(eb\)$,\1,p'`
-		machine=${arch}${endian}-unknown
-		;;
-	    *) machine=$UNAME_MACHINE_ARCH-unknown ;;
-	esac
-	# The Operating System including object format, if it has switched
-	# to ELF recently (or will in the future) and ABI.
-	case $UNAME_MACHINE_ARCH in
-	    earm*)
-		os=netbsdelf
-		;;
-	    arm*|i386|m68k|ns32k|sh3*|sparc|vax)
-		set_cc_for_build
-		if echo __ELF__ | $CC_FOR_BUILD -E - 2>/dev/null \
-			| grep -q __ELF__
-		then
-		    # Once all utilities can be ECOFF (netbsdecoff) or a.out (netbsdaout).
-		    # Return netbsd for either.  FIX?
-		    os=netbsd
-		else
-		    os=netbsdelf
-		fi
-		;;
-	    *)
-		os=netbsd
-		;;
-	esac
-	# Determine ABI tags.
-	case $UNAME_MACHINE_ARCH in
-	    earm*)
-		expr='s/^earmv[0-9]/-eabi/;s/eb$//'
-		abi=`echo "$UNAME_MACHINE_ARCH" | sed -e "$expr"`
-		;;
-	esac
-	# The OS release
-	# Debian GNU/NetBSD machines have a different userland, and
-	# thus, need a distinct triplet. However, they do not need
-	# kernel version information, so it can be replaced with a
-	# suitable tag, in the style of linux-gnu.
-	case $UNAME_VERSION in
-	    Debian*)
-		release='-gnu'
-		;;
-	    *)
-		release=`echo "$UNAME_RELEASE" | sed -e 's/[-_].*//' | cut -d. -f1,2`
-		;;
-	esac
-	# Since CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM:
-	# contains redundant information, the shorter form:
-	# CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM is used.
-	GUESS=$machine-${os}${release}${abi-}
-	;;
-    *:Bitrig:*:*)
-	UNAME_MACHINE_ARCH=`arch | sed 's/Bitrig.//'`
-	GUESS=$UNAME_MACHINE_ARCH-unknown-bitrig$UNAME_RELEASE
-	;;
-    *:OpenBSD:*:*)
-	UNAME_MACHINE_ARCH=`arch | sed 's/OpenBSD.//'`
-	GUESS=$UNAME_MACHINE_ARCH-unknown-openbsd$UNAME_RELEASE
-	;;
-    *:SecBSD:*:*)
-	UNAME_MACHINE_ARCH=`arch | sed 's/SecBSD.//'`
-	GUESS=$UNAME_MACHINE_ARCH-unknown-secbsd$UNAME_RELEASE
-	;;
-    *:LibertyBSD:*:*)
-	UNAME_MACHINE_ARCH=`arch | sed 's/^.*BSD\.//'`
-	GUESS=$UNAME_MACHINE_ARCH-unknown-libertybsd$UNAME_RELEASE
-	;;
-    *:MidnightBSD:*:*)
-	GUESS=$UNAME_MACHINE-unknown-midnightbsd$UNAME_RELEASE
-	;;
-    *:ekkoBSD:*:*)
-	GUESS=$UNAME_MACHINE-unknown-ekkobsd$UNAME_RELEASE
-	;;
-    *:SolidBSD:*:*)
-	GUESS=$UNAME_MACHINE-unknown-solidbsd$UNAME_RELEASE
-	;;
-    *:OS108:*:*)
-	GUESS=$UNAME_MACHINE-unknown-os108_$UNAME_RELEASE
-	;;
-    macppc:MirBSD:*:*)
-	GUESS=powerpc-unknown-mirbsd$UNAME_RELEASE
-	;;
-    *:MirBSD:*:*)
-	GUESS=$UNAME_MACHINE-unknown-mirbsd$UNAME_RELEASE
-	;;
-    *:Sortix:*:*)
-	GUESS=$UNAME_MACHINE-unknown-sortix
-	;;
-    *:Twizzler:*:*)
-	GUESS=$UNAME_MACHINE-unknown-twizzler
-	;;
-    *:Redox:*:*)
-	GUESS=$UNAME_MACHINE-unknown-redox
-	;;
-    mips:OSF1:*.*)
-	GUESS=mips-dec-osf1
-	;;
-    alpha:OSF1:*:*)
-	# Reset EXIT trap before exiting to avoid spurious non-zero exit code.
-	trap '' 0
-	case $UNAME_RELEASE in
-	*4.0)
-		UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $3}'`
-		;;
-	*5.*)
-		UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $4}'`
-		;;
-	esac
-	# According to Compaq, /usr/sbin/psrinfo has been available on
-	# OSF/1 and Tru64 systems produced since 1995.  I hope that
-	# covers most systems running today.  This code pipes the CPU
-	# types through head -n 1, so we only detect the type of CPU 0.
-	ALPHA_CPU_TYPE=`/usr/sbin/psrinfo -v | sed -n -e 's/^  The alpha \(.*\) processor.*$/\1/p' | head -n 1`
-	case $ALPHA_CPU_TYPE in
-	    "EV4 (21064)")
-		UNAME_MACHINE=alpha ;;
-	    "EV4.5 (21064)")
-		UNAME_MACHINE=alpha ;;
-	    "LCA4 (21066/21068)")
-		UNAME_MACHINE=alpha ;;
-	    "EV5 (21164)")
-		UNAME_MACHINE=alphaev5 ;;
-	    "EV5.6 (21164A)")
-		UNAME_MACHINE=alphaev56 ;;
-	    "EV5.6 (21164PC)")
-		UNAME_MACHINE=alphapca56 ;;
-	    "EV5.7 (21164PC)")
-		UNAME_MACHINE=alphapca57 ;;
-	    "EV6 (21264)")
-		UNAME_MACHINE=alphaev6 ;;
-	    "EV6.7 (21264A)")
-		UNAME_MACHINE=alphaev67 ;;
-	    "EV6.8CB (21264C)")
-		UNAME_MACHINE=alphaev68 ;;
-	    "EV6.8AL (21264B)")
-		UNAME_MACHINE=alphaev68 ;;
-	    "EV6.8CX (21264D)")
-		UNAME_MACHINE=alphaev68 ;;
-	    "EV6.9A (21264/EV69A)")
-		UNAME_MACHINE=alphaev69 ;;
-	    "EV7 (21364)")
-		UNAME_MACHINE=alphaev7 ;;
-	    "EV7.9 (21364A)")
-		UNAME_MACHINE=alphaev79 ;;
-	esac
-	# A Pn.n version is a patched version.
-	# A Vn.n version is a released version.
-	# A Tn.n version is a released field test version.
-	# A Xn.n version is an unreleased experimental baselevel.
-	# 1.2 uses "1.2" for uname -r.
-	OSF_REL=`echo "$UNAME_RELEASE" | sed -e 's/^[PVTX]//' | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz`
-	GUESS=$UNAME_MACHINE-dec-osf$OSF_REL
-	;;
-    Amiga*:UNIX_System_V:4.0:*)
-	GUESS=m68k-unknown-sysv4
-	;;
-    *:[Aa]miga[Oo][Ss]:*:*)
-	GUESS=$UNAME_MACHINE-unknown-amigaos
-	;;
-    *:[Mm]orph[Oo][Ss]:*:*)
-	GUESS=$UNAME_MACHINE-unknown-morphos
-	;;
-    *:OS/390:*:*)
-	GUESS=i370-ibm-openedition
-	;;
-    *:z/VM:*:*)
-	GUESS=s390-ibm-zvmoe
-	;;
-    *:OS400:*:*)
-	GUESS=powerpc-ibm-os400
-	;;
-    arm:RISC*:1.[012]*:*|arm:riscix:1.[012]*:*)
-	GUESS=arm-acorn-riscix$UNAME_RELEASE
-	;;
-    arm*:riscos:*:*|arm*:RISCOS:*:*)
-	GUESS=arm-unknown-riscos
-	;;
-    SR2?01:HI-UX/MPP:*:* | SR8000:HI-UX/MPP:*:*)
-	GUESS=hppa1.1-hitachi-hiuxmpp
-	;;
-    Pyramid*:OSx*:*:* | MIS*:OSx*:*:* | MIS*:SMP_DC-OSx*:*:*)
-	# akee@wpdis03.wpafb.af.mil (Earle F. Ake) contributed MIS and NILE.
-	case `(/bin/universe) 2>/dev/null` in
-	    att) GUESS=pyramid-pyramid-sysv3 ;;
-	    *)   GUESS=pyramid-pyramid-bsd   ;;
-	esac
-	;;
-    NILE*:*:*:dcosx)
-	GUESS=pyramid-pyramid-svr4
-	;;
-    DRS?6000:unix:4.0:6*)
-	GUESS=sparc-icl-nx6
-	;;
-    DRS?6000:UNIX_SV:4.2*:7* | DRS?6000:isis:4.2*:7*)
-	case `/usr/bin/uname -p` in
-	    sparc) GUESS=sparc-icl-nx7 ;;
-	esac
-	;;
-    s390x:SunOS:*:*)
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=$UNAME_MACHINE-ibm-solaris2$SUN_REL
-	;;
-    sun4H:SunOS:5.*:*)
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=sparc-hal-solaris2$SUN_REL
-	;;
-    sun4*:SunOS:5.*:* | tadpole*:SunOS:5.*:*)
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=sparc-sun-solaris2$SUN_REL
-	;;
-    i86pc:AuroraUX:5.*:* | i86xen:AuroraUX:5.*:*)
-	GUESS=i386-pc-auroraux$UNAME_RELEASE
-	;;
-    i86pc:SunOS:5.*:* | i86xen:SunOS:5.*:*)
-	set_cc_for_build
-	SUN_ARCH=i386
-	# If there is a compiler, see if it is configured for 64-bit objects.
-	# Note that the Sun cc does not turn __LP64__ into 1 like gcc does.
-	# This test works for both compilers.
-	if test "$CC_FOR_BUILD" != no_compiler_found; then
-	    if (echo '#ifdef __amd64'; echo IS_64BIT_ARCH; echo '#endif') | \
-		(CCOPTS="" $CC_FOR_BUILD -m64 -E - 2>/dev/null) | \
-		grep IS_64BIT_ARCH >/dev/null
-	    then
-		SUN_ARCH=x86_64
-	    fi
-	fi
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=$SUN_ARCH-pc-solaris2$SUN_REL
-	;;
-    sun4*:SunOS:6*:*)
-	# According to config.sub, this is the proper way to canonicalize
-	# SunOS6.  Hard to guess exactly what SunOS6 will be like, but
-	# it's likely to be more like Solaris than SunOS4.
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=sparc-sun-solaris3$SUN_REL
-	;;
-    sun4*:SunOS:*:*)
-	case `/usr/bin/arch -k` in
-	    Series*|S4*)
-		UNAME_RELEASE=`uname -v`
-		;;
-	esac
-	# Japanese Language versions have a version number like '4.1.3-JL'.
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/-/_/'`
-	GUESS=sparc-sun-sunos$SUN_REL
-	;;
-    sun3*:SunOS:*:*)
-	GUESS=m68k-sun-sunos$UNAME_RELEASE
-	;;
-    sun*:*:4.2BSD:*)
-	UNAME_RELEASE=`(sed 1q /etc/motd | awk '{print substr($5,1,3)}') 2>/dev/null`
-	test "x$UNAME_RELEASE" = x && UNAME_RELEASE=3
-	case `/bin/arch` in
-	    sun3)
-		GUESS=m68k-sun-sunos$UNAME_RELEASE
-		;;
-	    sun4)
-		GUESS=sparc-sun-sunos$UNAME_RELEASE
-		;;
-	esac
-	;;
-    aushp:SunOS:*:*)
-	GUESS=sparc-auspex-sunos$UNAME_RELEASE
-	;;
-    # The situation for MiNT is a little confusing.  The machine name
-    # can be virtually everything (everything which is not
-    # "atarist" or "atariste" at least should have a processor
-    # > m68000).  The system name ranges from "MiNT" over "FreeMiNT"
-    # to the lowercase version "mint" (or "freemint").  Finally
-    # the system name "TOS" denotes a system which is actually not
-    # MiNT.  But MiNT is downward compatible to TOS, so this should
-    # be no problem.
-    atarist[e]:*MiNT:*:* | atarist[e]:*mint:*:* | atarist[e]:*TOS:*:*)
-	GUESS=m68k-atari-mint$UNAME_RELEASE
-	;;
-    atari*:*MiNT:*:* | atari*:*mint:*:* | atarist[e]:*TOS:*:*)
-	GUESS=m68k-atari-mint$UNAME_RELEASE
-	;;
-    *falcon*:*MiNT:*:* | *falcon*:*mint:*:* | *falcon*:*TOS:*:*)
-	GUESS=m68k-atari-mint$UNAME_RELEASE
-	;;
-    milan*:*MiNT:*:* | milan*:*mint:*:* | *milan*:*TOS:*:*)
-	GUESS=m68k-milan-mint$UNAME_RELEASE
-	;;
-    hades*:*MiNT:*:* | hades*:*mint:*:* | *hades*:*TOS:*:*)
-	GUESS=m68k-hades-mint$UNAME_RELEASE
-	;;
-    *:*MiNT:*:* | *:*mint:*:* | *:*TOS:*:*)
-	GUESS=m68k-unknown-mint$UNAME_RELEASE
-	;;
-    m68k:machten:*:*)
-	GUESS=m68k-apple-machten$UNAME_RELEASE
-	;;
-    powerpc:machten:*:*)
-	GUESS=powerpc-apple-machten$UNAME_RELEASE
-	;;
-    RISC*:Mach:*:*)
-	GUESS=mips-dec-mach_bsd4.3
-	;;
-    RISC*:ULTRIX:*:*)
-	GUESS=mips-dec-ultrix$UNAME_RELEASE
-	;;
-    VAX*:ULTRIX*:*:*)
-	GUESS=vax-dec-ultrix$UNAME_RELEASE
-	;;
-    2020:CLIX:*:* | 2430:CLIX:*:*)
-	GUESS=clipper-intergraph-clix$UNAME_RELEASE
-	;;
-    mips:*:*:UMIPS | mips:*:*:RISCos)
-	set_cc_for_build
-	sed 's/^	//' << EOF > "$dummy.c"
-#ifdef __cplusplus
-#include <stdio.h>  /* for printf() prototype */
-	int main (int argc, char *argv[]) {
-#else
-	int main (argc, argv) int argc; char *argv[]; {
-#endif
-	#if defined (host_mips) && defined (MIPSEB)
-	#if defined (SYSTYPE_SYSV)
-	  printf ("mips-mips-riscos%ssysv\\n", argv[1]); exit (0);
-	#endif
-	#if defined (SYSTYPE_SVR4)
-	  printf ("mips-mips-riscos%ssvr4\\n", argv[1]); exit (0);
-	#endif
-	#if defined (SYSTYPE_BSD43) || defined(SYSTYPE_BSD)
-	  printf ("mips-mips-riscos%sbsd\\n", argv[1]); exit (0);
-	#endif
-	#endif
-	  exit (-1);
-	}
-EOF
-	$CC_FOR_BUILD -o "$dummy" "$dummy.c" &&
-	  dummyarg=`echo "$UNAME_RELEASE" | sed -n 's/\([0-9]*\).*/\1/p'` &&
-	  SYSTEM_NAME=`"$dummy" "$dummyarg"` &&
-	    { echo "$SYSTEM_NAME"; exit; }
-	GUESS=mips-mips-riscos$UNAME_RELEASE
-	;;
-    Motorola:PowerMAX_OS:*:*)
-	GUESS=powerpc-motorola-powermax
-	;;
-    Motorola:*:4.3:PL8-*)
-	GUESS=powerpc-harris-powermax
-	;;
-    Night_Hawk:*:*:PowerMAX_OS | Synergy:PowerMAX_OS:*:*)
-	GUESS=powerpc-harris-powermax
-	;;
-    Night_Hawk:Power_UNIX:*:*)
-	GUESS=powerpc-harris-powerunix
-	;;
-    m88k:CX/UX:7*:*)
-	GUESS=m88k-harris-cxux7
-	;;
-    m88k:*:4*:R4*)
-	GUESS=m88k-motorola-sysv4
-	;;
-    m88k:*:3*:R3*)
-	GUESS=m88k-motorola-sysv3
-	;;
-    AViiON:dgux:*:*)
-	# DG/UX returns AViiON for all architectures
-	UNAME_PROCESSOR=`/usr/bin/uname -p`
-	if test "$UNAME_PROCESSOR" = mc88100 || test "$UNAME_PROCESSOR" = mc88110
-	then
-	    if test "$TARGET_BINARY_INTERFACE"x = m88kdguxelfx || \
-	       test "$TARGET_BINARY_INTERFACE"x = x
-	    then
-		GUESS=m88k-dg-dgux$UNAME_RELEASE
-	    else
-		GUESS=m88k-dg-dguxbcs$UNAME_RELEASE
-	    fi
-	else
-	    GUESS=i586-dg-dgux$UNAME_RELEASE
-	fi
-	;;
-    M88*:DolphinOS:*:*)	# DolphinOS (SVR3)
-	GUESS=m88k-dolphin-sysv3
-	;;
-    M88*:*:R3*:*)
-	# Delta 88k system running SVR3
-	GUESS=m88k-motorola-sysv3
-	;;
-    XD88*:*:*:*) # Tektronix XD88 system running UTekV (SVR3)
-	GUESS=m88k-tektronix-sysv3
-	;;
-    Tek43[0-9][0-9]:UTek:*:*) # Tektronix 4300 system running UTek (BSD)
-	GUESS=m68k-tektronix-bsd
-	;;
-    *:IRIX*:*:*)
-	IRIX_REL=`echo "$UNAME_RELEASE" | sed -e 's/-/_/g'`
-	GUESS=mips-sgi-irix$IRIX_REL
-	;;
-    ????????:AIX?:[12].1:2)   # AIX 2.2.1 or AIX 2.1.1 is RT/PC AIX.
-	GUESS=romp-ibm-aix    # uname -m gives an 8 hex-code CPU id
-	;;                    # Note that: echo "'`uname -s`'" gives 'AIX '
-    i*86:AIX:*:*)
-	GUESS=i386-ibm-aix
-	;;
-    ia64:AIX:*:*)
-	if test -x /usr/bin/oslevel ; then
-		IBM_REV=`/usr/bin/oslevel`
-	else
-		IBM_REV=$UNAME_VERSION.$UNAME_RELEASE
-	fi
-	GUESS=$UNAME_MACHINE-ibm-aix$IBM_REV
-	;;
-    *:AIX:2:3)
-	if grep bos325 /usr/include/stdio.h >/dev/null 2>&1; then
-		set_cc_for_build
-		sed 's/^		//' << EOF > "$dummy.c"
-		#include <sys/systemcfg.h>
-
-		int
-		main ()
-			{
-			if (!__power_pc())
-				exit(1);
-			puts("powerpc-ibm-aix3.2.5");
-			exit(0);
-			}
-EOF
-		if $CC_FOR_BUILD -o "$dummy" "$dummy.c" && SYSTEM_NAME=`"$dummy"`
-		then
-			GUESS=$SYSTEM_NAME
-		else
-			GUESS=rs6000-ibm-aix3.2.5
-		fi
-	elif grep bos324 /usr/include/stdio.h >/dev/null 2>&1; then
-		GUESS=rs6000-ibm-aix3.2.4
-	else
-		GUESS=rs6000-ibm-aix3.2
-	fi
-	;;
-    *:AIX:*:[4567])
-	IBM_CPU_ID=`/usr/sbin/lsdev -C -c processor -S available | sed 1q | awk '{ print $1 }'`
-	if /usr/sbin/lsattr -El "$IBM_CPU_ID" | grep ' POWER' >/dev/null 2>&1; then
-		IBM_ARCH=rs6000
-	else
-		IBM_ARCH=powerpc
-	fi
-	if test -x /usr/bin/lslpp ; then
-		IBM_REV=`/usr/bin/lslpp -Lqc bos.rte.libc | \
-			   awk -F: '{ print $3 }' | sed s/[0-9]*$/0/`
-	else
-		IBM_REV=$UNAME_VERSION.$UNAME_RELEASE
-	fi
-	GUESS=$IBM_ARCH-ibm-aix$IBM_REV
-	;;
-    *:AIX:*:*)
-	GUESS=rs6000-ibm-aix
-	;;
-    ibmrt:4.4BSD:*|romp-ibm:4.4BSD:*)
-	GUESS=romp-ibm-bsd4.4
-	;;
-    ibmrt:*BSD:*|romp-ibm:BSD:*)            # covers RT/PC BSD and
-	GUESS=romp-ibm-bsd$UNAME_RELEASE    # 4.3 with uname added to
-	;;                                  # report: romp-ibm BSD 4.3
-    *:BOSX:*:*)
-	GUESS=rs6000-bull-bosx
-	;;
-    DPX/2?00:B.O.S.:*:*)
-	GUESS=m68k-bull-sysv3
-	;;
-    9000/[34]??:4.3bsd:1.*:*)
-	GUESS=m68k-hp-bsd
-	;;
-    hp300:4.4BSD:*:* | 9000/[34]??:4.3bsd:2.*:*)
-	GUESS=m68k-hp-bsd4.4
-	;;
-    9000/[34678]??:HP-UX:*:*)
-	HPUX_REV=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*.[0B]*//'`
-	case $UNAME_MACHINE in
-	    9000/31?)            HP_ARCH=m68000 ;;
-	    9000/[34]??)         HP_ARCH=m68k ;;
-	    9000/[678][0-9][0-9])
-		if test -x /usr/bin/getconf; then
-		    sc_cpu_version=`/usr/bin/getconf SC_CPU_VERSION 2>/dev/null`
-		    sc_kernel_bits=`/usr/bin/getconf SC_KERNEL_BITS 2>/dev/null`
-		    case $sc_cpu_version in
-		      523) HP_ARCH=hppa1.0 ;; # CPU_PA_RISC1_0
-		      528) HP_ARCH=hppa1.1 ;; # CPU_PA_RISC1_1
-		      532)                      # CPU_PA_RISC2_0
-			case $sc_kernel_bits in
-			  32) HP_ARCH=hppa2.0n ;;
-			  64) HP_ARCH=hppa2.0w ;;
-			  '') HP_ARCH=hppa2.0 ;;   # HP-UX 10.20
-			esac ;;
-		    esac
-		fi
-		if test "$HP_ARCH" = ""; then
-		    set_cc_for_build
-		    sed 's/^		//' << EOF > "$dummy.c"
-
-		#define _HPUX_SOURCE
-		#include <stdlib.h>
-		#include <unistd.h>
-
-		int
-		main ()
-		{
-		#if defined(_SC_KERNEL_BITS)
-		    long bits = sysconf(_SC_KERNEL_BITS);
-		#endif
-		    long cpu  = sysconf (_SC_CPU_VERSION);
-
-		    switch (cpu)
-			{
-			case CPU_PA_RISC1_0: puts ("hppa1.0"); break;
-			case CPU_PA_RISC1_1: puts ("hppa1.1"); break;
-			case CPU_PA_RISC2_0:
-		#if defined(_SC_KERNEL_BITS)
-			    switch (bits)
-				{
-				case 64: puts ("hppa2.0w"); break;
-				case 32: puts ("hppa2.0n"); break;
-				default: puts ("hppa2.0"); break;
-				} break;
-		#else  /* !defined(_SC_KERNEL_BITS) */
-			    puts ("hppa2.0"); break;
-		#endif
-			default: puts ("hppa1.0"); break;
-			}
-		    exit (0);
-		}
-EOF
-		    (CCOPTS="" $CC_FOR_BUILD -o "$dummy" "$dummy.c" 2>/dev/null) && HP_ARCH=`"$dummy"`
-		    test -z "$HP_ARCH" && HP_ARCH=hppa
-		fi ;;
-	esac
-	if test "$HP_ARCH" = hppa2.0w
-	then
-	    set_cc_for_build
-
-	    # hppa2.0w-hp-hpux* has a 64-bit kernel and a compiler generating
-	    # 32-bit code.  hppa64-hp-hpux* has the same kernel and a compiler
-	    # generating 64-bit code.  GNU and HP use different nomenclature:
-	    #
-	    # $ CC_FOR_BUILD=cc ./config.guess
-	    # => hppa2.0w-hp-hpux11.23
-	    # $ CC_FOR_BUILD="cc +DA2.0w" ./config.guess
-	    # => hppa64-hp-hpux11.23
-
-	    if echo __LP64__ | (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) |
-		grep -q __LP64__
-	    then
-		HP_ARCH=hppa2.0w
-	    else
-		HP_ARCH=hppa64
-	    fi
-	fi
-	GUESS=$HP_ARCH-hp-hpux$HPUX_REV
-	;;
-    ia64:HP-UX:*:*)
-	HPUX_REV=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*.[0B]*//'`
-	GUESS=ia64-hp-hpux$HPUX_REV
-	;;
-    3050*:HI-UX:*:*)
-	set_cc_for_build
-	sed 's/^	//' << EOF > "$dummy.c"
-	#include <unistd.h>
-	int
-	main ()
-	{
-	  long cpu = sysconf (_SC_CPU_VERSION);
-	  /* The order matters, because CPU_IS_HP_MC68K erroneously returns
-	     true for CPU_PA_RISC1_0.  CPU_IS_PA_RISC returns correct
-	     results, however.  */
-	  if (CPU_IS_PA_RISC (cpu))
-	    {
-	      switch (cpu)
-		{
-		  case CPU_PA_RISC1_0: puts ("hppa1.0-hitachi-hiuxwe2"); break;
-		  case CPU_PA_RISC1_1: puts ("hppa1.1-hitachi-hiuxwe2"); break;
-		  case CPU_PA_RISC2_0: puts ("hppa2.0-hitachi-hiuxwe2"); break;
-		  default: puts ("hppa-hitachi-hiuxwe2"); break;
-		}
-	    }
-	  else if (CPU_IS_HP_MC68K (cpu))
-	    puts ("m68k-hitachi-hiuxwe2");
-	  else puts ("unknown-hitachi-hiuxwe2");
-	  exit (0);
-	}
-EOF
-	$CC_FOR_BUILD -o "$dummy" "$dummy.c" && SYSTEM_NAME=`"$dummy"` &&
-		{ echo "$SYSTEM_NAME"; exit; }
-	GUESS=unknown-hitachi-hiuxwe2
-	;;
-    9000/7??:4.3bsd:*:* | 9000/8?[79]:4.3bsd:*:*)
-	GUESS=hppa1.1-hp-bsd
-	;;
-    9000/8??:4.3bsd:*:*)
-	GUESS=hppa1.0-hp-bsd
-	;;
-    *9??*:MPE/iX:*:* | *3000*:MPE/iX:*:*)
-	GUESS=hppa1.0-hp-mpeix
-	;;
-    hp7??:OSF1:*:* | hp8?[79]:OSF1:*:*)
-	GUESS=hppa1.1-hp-osf
-	;;
-    hp8??:OSF1:*:*)
-	GUESS=hppa1.0-hp-osf
-	;;
-    i*86:OSF1:*:*)
-	if test -x /usr/sbin/sysversion ; then
-	    GUESS=$UNAME_MACHINE-unknown-osf1mk
-	else
-	    GUESS=$UNAME_MACHINE-unknown-osf1
-	fi
-	;;
-    parisc*:Lites*:*:*)
-	GUESS=hppa1.1-hp-lites
-	;;
-    C1*:ConvexOS:*:* | convex:ConvexOS:C1*:*)
-	GUESS=c1-convex-bsd
-	;;
-    C2*:ConvexOS:*:* | convex:ConvexOS:C2*:*)
-	if getsysinfo -f scalar_acc
-	then echo c32-convex-bsd
-	else echo c2-convex-bsd
-	fi
-	exit ;;
-    C34*:ConvexOS:*:* | convex:ConvexOS:C34*:*)
-	GUESS=c34-convex-bsd
-	;;
-    C38*:ConvexOS:*:* | convex:ConvexOS:C38*:*)
-	GUESS=c38-convex-bsd
-	;;
-    C4*:ConvexOS:*:* | convex:ConvexOS:C4*:*)
-	GUESS=c4-convex-bsd
-	;;
-    CRAY*Y-MP:*:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=ymp-cray-unicos$CRAY_REL
-	;;
-    CRAY*[A-Z]90:*:*:*)
-	echo "$UNAME_MACHINE"-cray-unicos"$UNAME_RELEASE" \
-	| sed -e 's/CRAY.*\([A-Z]90\)/\1/' \
-	      -e y/ABCDEFGHIJKLMNOPQRSTUVWXYZ/abcdefghijklmnopqrstuvwxyz/ \
-	      -e 's/\.[^.]*$/.X/'
-	exit ;;
-    CRAY*TS:*:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=t90-cray-unicos$CRAY_REL
-	;;
-    CRAY*T3E:*:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=alphaev5-cray-unicosmk$CRAY_REL
-	;;
-    CRAY*SV1:*:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=sv1-cray-unicos$CRAY_REL
-	;;
-    *:UNICOS/mp:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=craynv-cray-unicosmp$CRAY_REL
-	;;
-    F30[01]:UNIX_System_V:*:* | F700:UNIX_System_V:*:*)
-	FUJITSU_PROC=`uname -m | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz`
-	FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'`
-	FUJITSU_REL=`echo "$UNAME_RELEASE" | sed -e 's/ /_/'`
-	GUESS=${FUJITSU_PROC}-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}
-	;;
-    5000:UNIX_System_V:4.*:*)
-	FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'`
-	FUJITSU_REL=`echo "$UNAME_RELEASE" | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/ /_/'`
-	GUESS=sparc-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}
-	;;
-    i*86:BSD/386:*:* | i*86:BSD/OS:*:* | *:Ascend\ Embedded/OS:*:*)
-	GUESS=$UNAME_MACHINE-pc-bsdi$UNAME_RELEASE
-	;;
-    sparc*:BSD/OS:*:*)
-	GUESS=sparc-unknown-bsdi$UNAME_RELEASE
-	;;
-    *:BSD/OS:*:*)
-	GUESS=$UNAME_MACHINE-unknown-bsdi$UNAME_RELEASE
-	;;
-    arm:FreeBSD:*:*)
-	UNAME_PROCESSOR=`uname -p`
-	set_cc_for_build
-	if echo __ARM_PCS_VFP | $CC_FOR_BUILD -E - 2>/dev/null \
-	    | grep -q __ARM_PCS_VFP
-	then
-	    FREEBSD_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	    GUESS=$UNAME_PROCESSOR-unknown-freebsd$FREEBSD_REL-gnueabi
-	else
-	    FREEBSD_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	    GUESS=$UNAME_PROCESSOR-unknown-freebsd$FREEBSD_REL-gnueabihf
-	fi
-	;;
-    *:FreeBSD:*:*)
-	UNAME_PROCESSOR=`uname -p`
-	case $UNAME_PROCESSOR in
-	    amd64)
-		UNAME_PROCESSOR=x86_64 ;;
-	    i386)
-		UNAME_PROCESSOR=i586 ;;
-	esac
-	FREEBSD_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	GUESS=$UNAME_PROCESSOR-unknown-freebsd$FREEBSD_REL
-	;;
-    i*:CYGWIN*:*)
-	GUESS=$UNAME_MACHINE-pc-cygwin
-	;;
-    *:MINGW64*:*)
-	GUESS=$UNAME_MACHINE-pc-mingw64
-	;;
-    *:MINGW*:*)
-	GUESS=$UNAME_MACHINE-pc-mingw32
-	;;
-    *:MSYS*:*)
-	GUESS=$UNAME_MACHINE-pc-msys
-	;;
-    i*:PW*:*)
-	GUESS=$UNAME_MACHINE-pc-pw32
-	;;
-    *:SerenityOS:*:*)
-        GUESS=$UNAME_MACHINE-pc-serenity
-        ;;
-    *:Interix*:*)
-	case $UNAME_MACHINE in
-	    x86)
-		GUESS=i586-pc-interix$UNAME_RELEASE
-		;;
-	    authenticamd | genuineintel | EM64T)
-		GUESS=x86_64-unknown-interix$UNAME_RELEASE
-		;;
-	    IA64)
-		GUESS=ia64-unknown-interix$UNAME_RELEASE
-		;;
-	esac ;;
-    i*:UWIN*:*)
-	GUESS=$UNAME_MACHINE-pc-uwin
-	;;
-    amd64:CYGWIN*:*:* | x86_64:CYGWIN*:*:*)
-	GUESS=x86_64-pc-cygwin
-	;;
-    prep*:SunOS:5.*:*)
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=powerpcle-unknown-solaris2$SUN_REL
-	;;
-    *:GNU:*:*)
-	# the GNU system
-	GNU_ARCH=`echo "$UNAME_MACHINE" | sed -e 's,[-/].*$,,'`
-	GNU_REL=`echo "$UNAME_RELEASE" | sed -e 's,/.*$,,'`
-	GUESS=$GNU_ARCH-unknown-$LIBC$GNU_REL
-	;;
-    *:GNU/*:*:*)
-	# other systems with GNU libc and userland
-	GNU_SYS=`echo "$UNAME_SYSTEM" | sed 's,^[^/]*/,,' | tr "[:upper:]" "[:lower:]"`
-	GNU_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	GUESS=$UNAME_MACHINE-unknown-$GNU_SYS$GNU_REL-$LIBC
-	;;
-    x86_64:[Mm]anagarm:*:*|i?86:[Mm]anagarm:*:*)
-	GUESS="$UNAME_MACHINE-pc-managarm-mlibc"
-	;;
-    *:[Mm]anagarm:*:*)
-	GUESS="$UNAME_MACHINE-unknown-managarm-mlibc"
-	;;
-    *:Minix:*:*)
-	GUESS=$UNAME_MACHINE-unknown-minix
-	;;
-    aarch64:Linux:*:*)
-	set_cc_for_build
-	CPU=$UNAME_MACHINE
-	LIBCABI=$LIBC
-	if test "$CC_FOR_BUILD" != no_compiler_found; then
-	    ABI=64
-	    sed 's/^	    //' << EOF > "$dummy.c"
-	    #ifdef __ARM_EABI__
-	    #ifdef __ARM_PCS_VFP
-	    ABI=eabihf
-	    #else
-	    ABI=eabi
-	    #endif
-	    #endif
-EOF
-	    cc_set_abi=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^ABI' | sed 's, ,,g'`
-	    eval "$cc_set_abi"
-	    case $ABI in
-		eabi | eabihf) CPU=armv8l; LIBCABI=$LIBC$ABI ;;
-	    esac
-	fi
-	GUESS=$CPU-unknown-linux-$LIBCABI
-	;;
-    aarch64_be:Linux:*:*)
-	UNAME_MACHINE=aarch64_be
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    alpha:Linux:*:*)
-	case `sed -n '/^cpu model/s/^.*: \(.*\)/\1/p' /proc/cpuinfo 2>/dev/null` in
-	  EV5)   UNAME_MACHINE=alphaev5 ;;
-	  EV56)  UNAME_MACHINE=alphaev56 ;;
-	  PCA56) UNAME_MACHINE=alphapca56 ;;
-	  PCA57) UNAME_MACHINE=alphapca56 ;;
-	  EV6)   UNAME_MACHINE=alphaev6 ;;
-	  EV67)  UNAME_MACHINE=alphaev67 ;;
-	  EV68*) UNAME_MACHINE=alphaev68 ;;
-	esac
-	objdump --private-headers /bin/sh | grep -q ld.so.1
-	if test "$?" = 0 ; then LIBC=gnulibc1 ; fi
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    arc:Linux:*:* | arceb:Linux:*:* | arc32:Linux:*:* | arc64:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    arm*:Linux:*:*)
-	set_cc_for_build
-	if echo __ARM_EABI__ | $CC_FOR_BUILD -E - 2>/dev/null \
-	    | grep -q __ARM_EABI__
-	then
-	    GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	else
-	    if echo __ARM_PCS_VFP | $CC_FOR_BUILD -E - 2>/dev/null \
-		| grep -q __ARM_PCS_VFP
-	    then
-		GUESS=$UNAME_MACHINE-unknown-linux-${LIBC}eabi
-	    else
-		GUESS=$UNAME_MACHINE-unknown-linux-${LIBC}eabihf
-	    fi
-	fi
-	;;
-    avr32*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    cris:Linux:*:*)
-	GUESS=$UNAME_MACHINE-axis-linux-$LIBC
-	;;
-    crisv32:Linux:*:*)
-	GUESS=$UNAME_MACHINE-axis-linux-$LIBC
-	;;
-    e2k:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    frv:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    hexagon:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    i*86:Linux:*:*)
-	GUESS=$UNAME_MACHINE-pc-linux-$LIBC
-	;;
-    ia64:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    k1om:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    kvx:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    kvx:cos:*:*)
-	GUESS=$UNAME_MACHINE-unknown-cos
-	;;
-    kvx:mbr:*:*)
-	GUESS=$UNAME_MACHINE-unknown-mbr
-	;;
-    loongarch32:Linux:*:* | loongarch64:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    m32r*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    m68*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    mips:Linux:*:* | mips64:Linux:*:*)
-	set_cc_for_build
-	IS_GLIBC=0
-	test x"${LIBC}" = xgnu && IS_GLIBC=1
-	sed 's/^	//' << EOF > "$dummy.c"
-	#undef CPU
-	#undef mips
-	#undef mipsel
-	#undef mips64
-	#undef mips64el
-	#if ${IS_GLIBC} && defined(_ABI64)
-	LIBCABI=gnuabi64
-	#else
-	#if ${IS_GLIBC} && defined(_ABIN32)
-	LIBCABI=gnuabin32
-	#else
-	LIBCABI=${LIBC}
-	#endif
-	#endif
-
-	#if ${IS_GLIBC} && defined(__mips64) && defined(__mips_isa_rev) && __mips_isa_rev>=6
-	CPU=mipsisa64r6
-	#else
-	#if ${IS_GLIBC} && !defined(__mips64) && defined(__mips_isa_rev) && __mips_isa_rev>=6
-	CPU=mipsisa32r6
-	#else
-	#if defined(__mips64)
-	CPU=mips64
-	#else
-	CPU=mips
-	#endif
-	#endif
-	#endif
-
-	#if defined(__MIPSEL__) || defined(__MIPSEL) || defined(_MIPSEL) || defined(MIPSEL)
-	MIPS_ENDIAN=el
-	#else
-	#if defined(__MIPSEB__) || defined(__MIPSEB) || defined(_MIPSEB) || defined(MIPSEB)
-	MIPS_ENDIAN=
-	#else
-	MIPS_ENDIAN=
-	#endif
-	#endif
-EOF
-	cc_set_vars=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^CPU\|^MIPS_ENDIAN\|^LIBCABI'`
-	eval "$cc_set_vars"
-	test "x$CPU" != x && { echo "$CPU${MIPS_ENDIAN}-unknown-linux-$LIBCABI"; exit; }
-	;;
-    mips64el:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    openrisc*:Linux:*:*)
-	GUESS=or1k-unknown-linux-$LIBC
-	;;
-    or32:Linux:*:* | or1k*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    padre:Linux:*:*)
-	GUESS=sparc-unknown-linux-$LIBC
-	;;
-    parisc64:Linux:*:* | hppa64:Linux:*:*)
-	GUESS=hppa64-unknown-linux-$LIBC
-	;;
-    parisc:Linux:*:* | hppa:Linux:*:*)
-	# Look for CPU level
-	case `grep '^cpu[^a-z]*:' /proc/cpuinfo 2>/dev/null | cut -d' ' -f2` in
-	  PA7*) GUESS=hppa1.1-unknown-linux-$LIBC ;;
-	  PA8*) GUESS=hppa2.0-unknown-linux-$LIBC ;;
-	  *)    GUESS=hppa-unknown-linux-$LIBC ;;
-	esac
-	;;
-    ppc64:Linux:*:*)
-	GUESS=powerpc64-unknown-linux-$LIBC
-	;;
-    ppc:Linux:*:*)
-	GUESS=powerpc-unknown-linux-$LIBC
-	;;
-    ppc64le:Linux:*:*)
-	GUESS=powerpc64le-unknown-linux-$LIBC
-	;;
-    ppcle:Linux:*:*)
-	GUESS=powerpcle-unknown-linux-$LIBC
-	;;
-    riscv32:Linux:*:* | riscv32be:Linux:*:* | riscv64:Linux:*:* | riscv64be:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    s390:Linux:*:* | s390x:Linux:*:*)
-	GUESS=$UNAME_MACHINE-ibm-linux-$LIBC
-	;;
-    sh64*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    sh*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    sparc:Linux:*:* | sparc64:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    tile*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    vax:Linux:*:*)
-	GUESS=$UNAME_MACHINE-dec-linux-$LIBC
-	;;
-    x86_64:Linux:*:*)
-	set_cc_for_build
-	CPU=$UNAME_MACHINE
-	LIBCABI=$LIBC
-	if test "$CC_FOR_BUILD" != no_compiler_found; then
-	    ABI=64
-	    sed 's/^	    //' << EOF > "$dummy.c"
-	    #ifdef __i386__
-	    ABI=x86
-	    #else
-	    #ifdef __ILP32__
-	    ABI=x32
-	    #endif
-	    #endif
-EOF
-	    cc_set_abi=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^ABI' | sed 's, ,,g'`
-	    eval "$cc_set_abi"
-	    case $ABI in
-		x86) CPU=i686 ;;
-		x32) LIBCABI=${LIBC}x32 ;;
-	    esac
-	fi
-	GUESS=$CPU-pc-linux-$LIBCABI
-	;;
-    xtensa*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    i*86:DYNIX/ptx:4*:*)
-	# ptx 4.0 does uname -s correctly, with DYNIX/ptx in there.
-	# earlier versions are messed up and put the nodename in both
-	# sysname and nodename.
-	GUESS=i386-sequent-sysv4
-	;;
-    i*86:UNIX_SV:4.2MP:2.*)
-	# Unixware is an offshoot of SVR4, but it has its own version
-	# number series starting with 2...
-	# I am not positive that other SVR4 systems won't match this,
-	# I just have to hope.  -- rms.
-	# Use sysv4.2uw... so that sysv4* matches it.
-	GUESS=$UNAME_MACHINE-pc-sysv4.2uw$UNAME_VERSION
-	;;
-    i*86:OS/2:*:*)
-	# If we were able to find 'uname', then EMX Unix compatibility
-	# is probably installed.
-	GUESS=$UNAME_MACHINE-pc-os2-emx
-	;;
-    i*86:XTS-300:*:STOP)
-	GUESS=$UNAME_MACHINE-unknown-stop
-	;;
-    i*86:atheos:*:*)
-	GUESS=$UNAME_MACHINE-unknown-atheos
-	;;
-    i*86:syllable:*:*)
-	GUESS=$UNAME_MACHINE-pc-syllable
-	;;
-    i*86:LynxOS:2.*:* | i*86:LynxOS:3.[01]*:* | i*86:LynxOS:4.[02]*:*)
-	GUESS=i386-unknown-lynxos$UNAME_RELEASE
-	;;
-    i*86:*DOS:*:*)
-	GUESS=$UNAME_MACHINE-pc-msdosdjgpp
-	;;
-    i*86:*:4.*:*)
-	UNAME_REL=`echo "$UNAME_RELEASE" | sed 's/\/MP$//'`
-	if grep Novell /usr/include/link.h >/dev/null 2>/dev/null; then
-		GUESS=$UNAME_MACHINE-univel-sysv$UNAME_REL
-	else
-		GUESS=$UNAME_MACHINE-pc-sysv$UNAME_REL
-	fi
-	;;
-    i*86:*:5:[678]*)
-	# UnixWare 7.x, OpenUNIX and OpenServer 6.
-	case `/bin/uname -X | grep "^Machine"` in
-	    *486*)	     UNAME_MACHINE=i486 ;;
-	    *Pentium)	     UNAME_MACHINE=i586 ;;
-	    *Pent*|*Celeron) UNAME_MACHINE=i686 ;;
-	esac
-	GUESS=$UNAME_MACHINE-unknown-sysv${UNAME_RELEASE}${UNAME_SYSTEM}${UNAME_VERSION}
-	;;
-    i*86:*:3.2:*)
-	if test -f /usr/options/cb.name; then
-		UNAME_REL=`sed -n 's/.*Version //p' </usr/options/cb.name`
-		GUESS=$UNAME_MACHINE-pc-isc$UNAME_REL
-	elif /bin/uname -X 2>/dev/null >/dev/null ; then
-		UNAME_REL=`(/bin/uname -X|grep Release|sed -e 's/.*= //')`
-		(/bin/uname -X|grep i80486 >/dev/null) && UNAME_MACHINE=i486
-		(/bin/uname -X|grep '^Machine.*Pentium' >/dev/null) \
-			&& UNAME_MACHINE=i586
-		(/bin/uname -X|grep '^Machine.*Pent *II' >/dev/null) \
-			&& UNAME_MACHINE=i686
-		(/bin/uname -X|grep '^Machine.*Pentium Pro' >/dev/null) \
-			&& UNAME_MACHINE=i686
-		GUESS=$UNAME_MACHINE-pc-sco$UNAME_REL
-	else
-		GUESS=$UNAME_MACHINE-pc-sysv32
-	fi
-	;;
-    pc:*:*:*)
-	# Left here for compatibility:
-	# uname -m prints for DJGPP always 'pc', but it prints nothing about
-	# the processor, so we play safe by assuming i586.
-	# Note: whatever this is, it MUST be the same as what config.sub
-	# prints for the "djgpp" host, or else GDB configure will decide that
-	# this is a cross-build.
-	GUESS=i586-pc-msdosdjgpp
-	;;
-    Intel:Mach:3*:*)
-	GUESS=i386-pc-mach3
-	;;
-    paragon:*:*:*)
-	GUESS=i860-intel-osf1
-	;;
-    i860:*:4.*:*) # i860-SVR4
-	if grep Stardent /usr/include/sys/uadmin.h >/dev/null 2>&1 ; then
-	  GUESS=i860-stardent-sysv$UNAME_RELEASE    # Stardent Vistra i860-SVR4
-	else # Add other i860-SVR4 vendors below as they are discovered.
-	  GUESS=i860-unknown-sysv$UNAME_RELEASE     # Unknown i860-SVR4
-	fi
-	;;
-    mini*:CTIX:SYS*5:*)
-	# "miniframe"
-	GUESS=m68010-convergent-sysv
-	;;
-    mc68k:UNIX:SYSTEM5:3.51m)
-	GUESS=m68k-convergent-sysv
-	;;
-    M680?0:D-NIX:5.3:*)
-	GUESS=m68k-diab-dnix
-	;;
-    M68*:*:R3V[5678]*:*)
-	test -r /sysV68 && { echo 'm68k-motorola-sysv'; exit; } ;;
-    3[345]??:*:4.0:3.0 | 3[34]??A:*:4.0:3.0 | 3[34]??,*:*:4.0:3.0 | 3[34]??/*:*:4.0:3.0 | 4400:*:4.0:3.0 | 4850:*:4.0:3.0 | SKA40:*:4.0:3.0 | SDS2:*:4.0:3.0 | SHG2:*:4.0:3.0 | S7501*:*:4.0:3.0)
-	OS_REL=''
-	test -r /etc/.relid \
-	&& OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid`
-	/bin/uname -p 2>/dev/null | grep 86 >/dev/null \
-	  && { echo i486-ncr-sysv4.3"$OS_REL"; exit; }
-	/bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \
-	  && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } ;;
-    3[34]??:*:4.0:* | 3[34]??,*:*:4.0:*)
-	/bin/uname -p 2>/dev/null | grep 86 >/dev/null \
-	  && { echo i486-ncr-sysv4; exit; } ;;
-    NCR*:*:4.2:* | MPRAS*:*:4.2:*)
-	OS_REL='.3'
-	test -r /etc/.relid \
-	    && OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid`
-	/bin/uname -p 2>/dev/null | grep 86 >/dev/null \
-	    && { echo i486-ncr-sysv4.3"$OS_REL"; exit; }
-	/bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \
-	    && { echo i586-ncr-sysv4.3"$OS_REL"; exit; }
-	/bin/uname -p 2>/dev/null | /bin/grep pteron >/dev/null \
-	    && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } ;;
-    m68*:LynxOS:2.*:* | m68*:LynxOS:3.0*:*)
-	GUESS=m68k-unknown-lynxos$UNAME_RELEASE
-	;;
-    mc68030:UNIX_System_V:4.*:*)
-	GUESS=m68k-atari-sysv4
-	;;
-    TSUNAMI:LynxOS:2.*:*)
-	GUESS=sparc-unknown-lynxos$UNAME_RELEASE
-	;;
-    rs6000:LynxOS:2.*:*)
-	GUESS=rs6000-unknown-lynxos$UNAME_RELEASE
-	;;
-    PowerPC:LynxOS:2.*:* | PowerPC:LynxOS:3.[01]*:* | PowerPC:LynxOS:4.[02]*:*)
-	GUESS=powerpc-unknown-lynxos$UNAME_RELEASE
-	;;
-    SM[BE]S:UNIX_SV:*:*)
-	GUESS=mips-dde-sysv$UNAME_RELEASE
-	;;
-    RM*:ReliantUNIX-*:*:*)
-	GUESS=mips-sni-sysv4
-	;;
-    RM*:SINIX-*:*:*)
-	GUESS=mips-sni-sysv4
-	;;
-    *:SINIX-*:*:*)
-	if uname -p 2>/dev/null >/dev/null ; then
-		UNAME_MACHINE=`(uname -p) 2>/dev/null`
-		GUESS=$UNAME_MACHINE-sni-sysv4
-	else
-		GUESS=ns32k-sni-sysv
-	fi
-	;;
-    PENTIUM:*:4.0*:*)	# Unisys 'ClearPath HMP IX 4000' SVR4/MP effort
-			# says <Richard.M.Bartel@ccMail.Census.GOV>
-	GUESS=i586-unisys-sysv4
-	;;
-    *:UNIX_System_V:4*:FTX*)
-	# From Gerald Hewes <hewes@openmarket.com>.
-	# How about differentiating between stratus architectures? -djm
-	GUESS=hppa1.1-stratus-sysv4
-	;;
-    *:*:*:FTX*)
-	# From seanf@swdc.stratus.com.
-	GUESS=i860-stratus-sysv4
-	;;
-    i*86:VOS:*:*)
-	# From Paul.Green@stratus.com.
-	GUESS=$UNAME_MACHINE-stratus-vos
-	;;
-    *:VOS:*:*)
-	# From Paul.Green@stratus.com.
-	GUESS=hppa1.1-stratus-vos
-	;;
-    mc68*:A/UX:*:*)
-	GUESS=m68k-apple-aux$UNAME_RELEASE
-	;;
-    news*:NEWS-OS:6*:*)
-	GUESS=mips-sony-newsos6
-	;;
-    R[34]000:*System_V*:*:* | R4000:UNIX_SYSV:*:* | R*000:UNIX_SV:*:*)
-	if test -d /usr/nec; then
-		GUESS=mips-nec-sysv$UNAME_RELEASE
-	else
-		GUESS=mips-unknown-sysv$UNAME_RELEASE
-	fi
-	;;
-    BeBox:BeOS:*:*)	# BeOS running on hardware made by Be, PPC only.
-	GUESS=powerpc-be-beos
-	;;
-    BeMac:BeOS:*:*)	# BeOS running on Mac or Mac clone, PPC only.
-	GUESS=powerpc-apple-beos
-	;;
-    BePC:BeOS:*:*)	# BeOS running on Intel PC compatible.
-	GUESS=i586-pc-beos
-	;;
-    BePC:Haiku:*:*)	# Haiku running on Intel PC compatible.
-	GUESS=i586-pc-haiku
-	;;
-    ppc:Haiku:*:*)	# Haiku running on Apple PowerPC
-	GUESS=powerpc-apple-haiku
-	;;
-    *:Haiku:*:*)	# Haiku modern gcc (not bound by BeOS compat)
-	GUESS=$UNAME_MACHINE-unknown-haiku
-	;;
-    SX-4:SUPER-UX:*:*)
-	GUESS=sx4-nec-superux$UNAME_RELEASE
-	;;
-    SX-5:SUPER-UX:*:*)
-	GUESS=sx5-nec-superux$UNAME_RELEASE
-	;;
-    SX-6:SUPER-UX:*:*)
-	GUESS=sx6-nec-superux$UNAME_RELEASE
-	;;
-    SX-7:SUPER-UX:*:*)
-	GUESS=sx7-nec-superux$UNAME_RELEASE
-	;;
-    SX-8:SUPER-UX:*:*)
-	GUESS=sx8-nec-superux$UNAME_RELEASE
-	;;
-    SX-8R:SUPER-UX:*:*)
-	GUESS=sx8r-nec-superux$UNAME_RELEASE
-	;;
-    SX-ACE:SUPER-UX:*:*)
-	GUESS=sxace-nec-superux$UNAME_RELEASE
-	;;
-    Power*:Rhapsody:*:*)
-	GUESS=powerpc-apple-rhapsody$UNAME_RELEASE
-	;;
-    *:Rhapsody:*:*)
-	GUESS=$UNAME_MACHINE-apple-rhapsody$UNAME_RELEASE
-	;;
-    arm64:Darwin:*:*)
-	GUESS=aarch64-apple-darwin$UNAME_RELEASE
-	;;
-    *:Darwin:*:*)
-	UNAME_PROCESSOR=`uname -p`
-	case $UNAME_PROCESSOR in
-	    unknown) UNAME_PROCESSOR=powerpc ;;
-	esac
-	if command -v xcode-select > /dev/null 2> /dev/null && \
-		! xcode-select --print-path > /dev/null 2> /dev/null ; then
-	    # Avoid executing cc if there is no toolchain installed as
-	    # cc will be a stub that puts up a graphical alert
-	    # prompting the user to install developer tools.
-	    CC_FOR_BUILD=no_compiler_found
-	else
-	    set_cc_for_build
-	fi
-	if test "$CC_FOR_BUILD" != no_compiler_found; then
-	    if (echo '#ifdef __LP64__'; echo IS_64BIT_ARCH; echo '#endif') | \
-		   (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \
-		   grep IS_64BIT_ARCH >/dev/null
-	    then
-		case $UNAME_PROCESSOR in
-		    i386) UNAME_PROCESSOR=x86_64 ;;
-		    powerpc) UNAME_PROCESSOR=powerpc64 ;;
-		esac
-	    fi
-	    # On 10.4-10.6 one might compile for PowerPC via gcc -arch ppc
-	    if (echo '#ifdef __POWERPC__'; echo IS_PPC; echo '#endif') | \
-		   (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \
-		   grep IS_PPC >/dev/null
-	    then
-		UNAME_PROCESSOR=powerpc
-	    fi
-	elif test "$UNAME_PROCESSOR" = i386 ; then
-	    # uname -m returns i386 or x86_64
-	    UNAME_PROCESSOR=$UNAME_MACHINE
-	fi
-	GUESS=$UNAME_PROCESSOR-apple-darwin$UNAME_RELEASE
-	;;
-    *:procnto*:*:* | *:QNX:[0123456789]*:*)
-	UNAME_PROCESSOR=`uname -p`
-	if test "$UNAME_PROCESSOR" = x86; then
-		UNAME_PROCESSOR=i386
-		UNAME_MACHINE=pc
-	fi
-	GUESS=$UNAME_PROCESSOR-$UNAME_MACHINE-nto-qnx$UNAME_RELEASE
-	;;
-    *:QNX:*:4*)
-	GUESS=i386-pc-qnx
-	;;
-    NEO-*:NONSTOP_KERNEL:*:*)
-	GUESS=neo-tandem-nsk$UNAME_RELEASE
-	;;
-    NSE-*:NONSTOP_KERNEL:*:*)
-	GUESS=nse-tandem-nsk$UNAME_RELEASE
-	;;
-    NSR-*:NONSTOP_KERNEL:*:*)
-	GUESS=nsr-tandem-nsk$UNAME_RELEASE
-	;;
-    NSV-*:NONSTOP_KERNEL:*:*)
-	GUESS=nsv-tandem-nsk$UNAME_RELEASE
-	;;
-    NSX-*:NONSTOP_KERNEL:*:*)
-	GUESS=nsx-tandem-nsk$UNAME_RELEASE
-	;;
-    *:NonStop-UX:*:*)
-	GUESS=mips-compaq-nonstopux
-	;;
-    BS2000:POSIX*:*:*)
-	GUESS=bs2000-siemens-sysv
-	;;
-    DS/*:UNIX_System_V:*:*)
-	GUESS=$UNAME_MACHINE-$UNAME_SYSTEM-$UNAME_RELEASE
-	;;
-    *:Plan9:*:*)
-	# "uname -m" is not consistent, so use $cputype instead. 386
-	# is converted to i386 for consistency with other x86
-	# operating systems.
-	if test "${cputype-}" = 386; then
-	    UNAME_MACHINE=i386
-	elif test "x${cputype-}" != x; then
-	    UNAME_MACHINE=$cputype
-	fi
-	GUESS=$UNAME_MACHINE-unknown-plan9
-	;;
-    *:TOPS-10:*:*)
-	GUESS=pdp10-unknown-tops10
-	;;
-    *:TENEX:*:*)
-	GUESS=pdp10-unknown-tenex
-	;;
-    KS10:TOPS-20:*:* | KL10:TOPS-20:*:* | TYPE4:TOPS-20:*:*)
-	GUESS=pdp10-dec-tops20
-	;;
-    XKL-1:TOPS-20:*:* | TYPE5:TOPS-20:*:*)
-	GUESS=pdp10-xkl-tops20
-	;;
-    *:TOPS-20:*:*)
-	GUESS=pdp10-unknown-tops20
-	;;
-    *:ITS:*:*)
-	GUESS=pdp10-unknown-its
-	;;
-    SEI:*:*:SEIUX)
-	GUESS=mips-sei-seiux$UNAME_RELEASE
-	;;
-    *:DragonFly:*:*)
-	DRAGONFLY_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	GUESS=$UNAME_MACHINE-unknown-dragonfly$DRAGONFLY_REL
-	;;
-    *:*VMS:*:*)
-	UNAME_MACHINE=`(uname -p) 2>/dev/null`
-	case $UNAME_MACHINE in
-	    A*) GUESS=alpha-dec-vms ;;
-	    I*) GUESS=ia64-dec-vms ;;
-	    V*) GUESS=vax-dec-vms ;;
-	esac ;;
-    *:XENIX:*:SysV)
-	GUESS=i386-pc-xenix
-	;;
-    i*86:skyos:*:*)
-	SKYOS_REL=`echo "$UNAME_RELEASE" | sed -e 's/ .*$//'`
-	GUESS=$UNAME_MACHINE-pc-skyos$SKYOS_REL
-	;;
-    i*86:rdos:*:*)
-	GUESS=$UNAME_MACHINE-pc-rdos
-	;;
-    i*86:Fiwix:*:*)
-	GUESS=$UNAME_MACHINE-pc-fiwix
-	;;
-    *:AROS:*:*)
-	GUESS=$UNAME_MACHINE-unknown-aros
-	;;
-    x86_64:VMkernel:*:*)
-	GUESS=$UNAME_MACHINE-unknown-esx
-	;;
-    amd64:Isilon\ OneFS:*:*)
-	GUESS=x86_64-unknown-onefs
-	;;
-    *:Unleashed:*:*)
-	GUESS=$UNAME_MACHINE-unknown-unleashed$UNAME_RELEASE
-	;;
-    *:Ironclad:*:*)
-	GUESS=$UNAME_MACHINE-unknown-ironclad
-	;;
-esac
-
-# Do we have a guess based on uname results?
-if test "x$GUESS" != x; then
-    echo "$GUESS"
-    exit
-fi
-
-# No uname command or uname output not recognized.
-set_cc_for_build
-cat > "$dummy.c" <<EOF
-#ifdef _SEQUENT_
-#include <sys/types.h>
-#include <sys/utsname.h>
-#endif
-#if defined(ultrix) || defined(_ultrix) || defined(__ultrix) || defined(__ultrix__)
-#if defined (vax) || defined (__vax) || defined (__vax__) || defined(mips) || defined(__mips) || defined(__mips__) || defined(MIPS) || defined(__MIPS__)
-#include <signal.h>
-#if defined(_SIZE_T_) || defined(SIGLOST)
-#include <sys/utsname.h>
-#endif
-#endif
-#endif
-int
-main ()
-{
-#if defined (sony)
-#if defined (MIPSEB)
-  /* BFD wants "bsd" instead of "newsos".  Perhaps BFD should be changed,
-     I don't know....  */
-  printf ("mips-sony-bsd\n"); exit (0);
-#else
-#include <sys/param.h>
-  printf ("m68k-sony-newsos%s\n",
-#ifdef NEWSOS4
-  "4"
-#else
-  ""
-#endif
-  ); exit (0);
-#endif
-#endif
-
-#if defined (NeXT)
-#if !defined (__ARCHITECTURE__)
-#define __ARCHITECTURE__ "m68k"
-#endif
-  int version;
-  version=`(hostinfo | sed -n 's/.*NeXT Mach \([0-9]*\).*/\1/p') 2>/dev/null`;
-  if (version < 4)
-    printf ("%s-next-nextstep%d\n", __ARCHITECTURE__, version);
-  else
-    printf ("%s-next-openstep%d\n", __ARCHITECTURE__, version);
-  exit (0);
-#endif
-
-#if defined (MULTIMAX) || defined (n16)
-#if defined (UMAXV)
-  printf ("ns32k-encore-sysv\n"); exit (0);
-#else
-#if defined (CMU)
-  printf ("ns32k-encore-mach\n"); exit (0);
-#else
-  printf ("ns32k-encore-bsd\n"); exit (0);
-#endif
-#endif
-#endif
-
-#if defined (__386BSD__)
-  printf ("i386-pc-bsd\n"); exit (0);
-#endif
-
-#if defined (sequent)
-#if defined (i386)
-  printf ("i386-sequent-dynix\n"); exit (0);
-#endif
-#if defined (ns32000)
-  printf ("ns32k-sequent-dynix\n"); exit (0);
-#endif
-#endif
-
-#if defined (_SEQUENT_)
-  struct utsname un;
-
-  uname(&un);
-  if (strncmp(un.version, "V2", 2) == 0) {
-    printf ("i386-sequent-ptx2\n"); exit (0);
-  }
-  if (strncmp(un.version, "V1", 2) == 0) { /* XXX is V1 correct? */
-    printf ("i386-sequent-ptx1\n"); exit (0);
-  }
-  printf ("i386-sequent-ptx\n"); exit (0);
-#endif
-
-#if defined (vax)
-#if !defined (ultrix)
-#include <sys/param.h>
-#if defined (BSD)
-#if BSD == 43
-  printf ("vax-dec-bsd4.3\n"); exit (0);
-#else
-#if BSD == 199006
-  printf ("vax-dec-bsd4.3reno\n"); exit (0);
-#else
-  printf ("vax-dec-bsd\n"); exit (0);
-#endif
-#endif
-#else
-  printf ("vax-dec-bsd\n"); exit (0);
-#endif
-#else
-#if defined(_SIZE_T_) || defined(SIGLOST)
-  struct utsname un;
-  uname (&un);
-  printf ("vax-dec-ultrix%s\n", un.release); exit (0);
-#else
-  printf ("vax-dec-ultrix\n"); exit (0);
-#endif
-#endif
-#endif
-#if defined(ultrix) || defined(_ultrix) || defined(__ultrix) || defined(__ultrix__)
-#if defined(mips) || defined(__mips) || defined(__mips__) || defined(MIPS) || defined(__MIPS__)
-#if defined(_SIZE_T_) || defined(SIGLOST)
-  struct utsname *un;
-  uname (&un);
-  printf ("mips-dec-ultrix%s\n", un.release); exit (0);
-#else
-  printf ("mips-dec-ultrix\n"); exit (0);
-#endif
-#endif
-#endif
-
-#if defined (alliant) && defined (i860)
-  printf ("i860-alliant-bsd\n"); exit (0);
-#endif
-
-  exit (1);
-}
-EOF
-
-$CC_FOR_BUILD -o "$dummy" "$dummy.c" 2>/dev/null && SYSTEM_NAME=`"$dummy"` &&
-	{ echo "$SYSTEM_NAME"; exit; }
-
-# Apollos put the system type in the environment.
-test -d /usr/apollo && { echo "$ISP-apollo-$SYSTYPE"; exit; }
-
-echo "$0: unable to guess system type" >&2
-
-case $UNAME_MACHINE:$UNAME_SYSTEM in
-    mips:Linux | mips64:Linux)
-	# If we got here on MIPS GNU/Linux, output extra information.
-	cat >&2 <<EOF
-
-NOTE: MIPS GNU/Linux systems require a C compiler to fully recognize
-the system type. Please install a C compiler and try again.
-EOF
-	;;
-esac
-
-cat >&2 <<EOF
-
-This script (version $timestamp), has failed to recognize the
-operating system you are using. If your script is old, overwrite *all*
-copies of config.guess and config.sub with the latest versions from:
-
-  https://git.savannah.gnu.org/cgit/config.git/plain/config.guess
-and
-  https://git.savannah.gnu.org/cgit/config.git/plain/config.sub
-EOF
-
-our_year=`echo $timestamp | sed 's,-.*,,'`
-thisyear=`date +%Y`
-# shellcheck disable=SC2003
-script_age=`expr "$thisyear" - "$our_year"`
-if test "$script_age" -lt 3 ; then
-   cat >&2 <<EOF
-
-If $0 has already been updated, send the following data and any
-information you think might be pertinent to config-patches@gnu.org to
-provide the necessary information to handle your system.
-
-config.guess timestamp = $timestamp
-
-uname -m = `(uname -m) 2>/dev/null || echo unknown`
-uname -r = `(uname -r) 2>/dev/null || echo unknown`
-uname -s = `(uname -s) 2>/dev/null || echo unknown`
-uname -v = `(uname -v) 2>/dev/null || echo unknown`
-
-/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null`
-/bin/uname -X     = `(/bin/uname -X) 2>/dev/null`
-
-hostinfo               = `(hostinfo) 2>/dev/null`
-/bin/universe          = `(/bin/universe) 2>/dev/null`
-/usr/bin/arch -k       = `(/usr/bin/arch -k) 2>/dev/null`
-/bin/arch              = `(/bin/arch) 2>/dev/null`
-/usr/bin/oslevel       = `(/usr/bin/oslevel) 2>/dev/null`
-/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null`
-
-UNAME_MACHINE = "$UNAME_MACHINE"
-UNAME_RELEASE = "$UNAME_RELEASE"
-UNAME_SYSTEM  = "$UNAME_SYSTEM"
-UNAME_VERSION = "$UNAME_VERSION"
-EOF
-fi
-
-exit 1
-
-# Local variables:
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-start: "timestamp='"
-# time-stamp-format: "%:y-%02m-%02d"
-# time-stamp-end: "'"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXext/config.h b/experiments/wasm-gui/third_party/libXext/config.h
deleted file mode 100644
index e16504164..000000000
--- a/experiments/wasm-gui/third_party/libXext/config.h
+++ /dev/null
@@ -1,182 +0,0 @@
-/* config.h.  Generated from config.h.in by configure.  */
-/* config.h.in.  Generated from configure.ac by autoheader.  */
-
-/* Define to 1 if you have the <dlfcn.h> header file. */
-#define HAVE_DLFCN_H 1
-
-/* Define to 1 if you have the <inttypes.h> header file. */
-#define HAVE_INTTYPES_H 1
-
-/* Define to 1 if you have the <minix/config.h> header file. */
-/* #undef HAVE_MINIX_CONFIG_H */
-
-/* Define to 1 if you have the 'reallocarray' function. */
-#define HAVE_REALLOCARRAY 1
-
-/* Define to 1 if you have the <stdint.h> header file. */
-#define HAVE_STDINT_H 1
-
-/* Define to 1 if you have the <stdio.h> header file. */
-#define HAVE_STDIO_H 1
-
-/* Define to 1 if you have the <stdlib.h> header file. */
-#define HAVE_STDLIB_H 1
-
-/* Define to 1 if you have the <strings.h> header file. */
-#define HAVE_STRINGS_H 1
-
-/* Define to 1 if you have the <string.h> header file. */
-#define HAVE_STRING_H 1
-
-/* Define to 1 if you have the <sys/stat.h> header file. */
-#define HAVE_SYS_STAT_H 1
-
-/* Define to 1 if you have the <sys/types.h> header file. */
-#define HAVE_SYS_TYPES_H 1
-
-/* Define to 1 if you have the <unistd.h> header file. */
-#define HAVE_UNISTD_H 1
-
-/* Define to 1 if you have the <wchar.h> header file. */
-#define HAVE_WCHAR_H 1
-
-/* Define to 1 if the system has the `__builtin_popcountl' built-in function
-   */
-#define HAVE___BUILTIN_POPCOUNTL 1
-
-/* Define to the sub-directory where libtool stores uninstalled libraries. */
-#define LT_OBJDIR ".libs/"
-
-/* Name of package */
-#define PACKAGE "libXext"
-
-/* Define to the address where bug reports for this package should be sent. */
-#define PACKAGE_BUGREPORT "https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues"
-
-/* Define to the full name of this package. */
-#define PACKAGE_NAME "libXext"
-
-/* Define to the full name and version of this package. */
-#define PACKAGE_STRING "libXext 1.3.7"
-
-/* Define to the one symbol short name of this package. */
-#define PACKAGE_TARNAME "libXext"
-
-/* Define to the home page for this package. */
-#define PACKAGE_URL ""
-
-/* Define to the version of this package. */
-#define PACKAGE_VERSION "1.3.7"
-
-/* Major version of this package */
-#define PACKAGE_VERSION_MAJOR 1
-
-/* Minor version of this package */
-#define PACKAGE_VERSION_MINOR 3
-
-/* Patch version of this package */
-#define PACKAGE_VERSION_PATCHLEVEL 7
-
-/* Define to 1 if all of the C89 standard headers exist (not just the ones
-   required in a freestanding environment). This macro is provided for
-   backward compatibility; new code need not use it. */
-#define STDC_HEADERS 1
-
-/* Enable extensions on AIX, Interix, z/OS.  */
-#ifndef _ALL_SOURCE
-# define _ALL_SOURCE 1
-#endif
-/* Enable extensions on Cosmopolitan Libc. */
-#ifndef _COSMO_SOURCE
-# define _COSMO_SOURCE 1
-#endif
-/* Enable general extensions on macOS.  */
-#ifndef _DARWIN_C_SOURCE
-# define _DARWIN_C_SOURCE 1
-#endif
-/* Enable general extensions on Solaris.  */
-#ifndef __EXTENSIONS__
-# define __EXTENSIONS__ 1
-#endif
-/* Enable GNU extensions on systems that have them.  */
-#ifndef _GNU_SOURCE
-# define _GNU_SOURCE 1
-#endif
-/* Enable X/Open compliant socket functions that do not require linking
-   with -lxnet on HP-UX 11.11.  */
-#ifndef _HPUX_ALT_XOPEN_SOCKET_API
-# define _HPUX_ALT_XOPEN_SOCKET_API 1
-#endif
-/* Identify the host operating system as Minix.
-   This macro does not affect the system headers' behavior.
-   A future release of Autoconf may stop defining this macro.  */
-#ifndef _MINIX
-/* # undef _MINIX */
-#endif
-/* Enable general extensions on NetBSD.
-   Enable NetBSD compatibility extensions on Minix.  */
-#ifndef _NETBSD_SOURCE
-# define _NETBSD_SOURCE 1
-#endif
-/* Enable OpenBSD compatibility extensions on NetBSD.
-   Oddly enough, this does nothing on OpenBSD.  */
-#ifndef _OPENBSD_SOURCE
-# define _OPENBSD_SOURCE 1
-#endif
-/* Define to 1 if needed for POSIX-compatible behavior.  */
-#ifndef _POSIX_SOURCE
-/* # undef _POSIX_SOURCE */
-#endif
-/* Define to 2 if needed for POSIX-compatible behavior.  */
-#ifndef _POSIX_1_SOURCE
-/* # undef _POSIX_1_SOURCE */
-#endif
-/* Enable POSIX-compatible threading on Solaris.  */
-#ifndef _POSIX_PTHREAD_SEMANTICS
-# define _POSIX_PTHREAD_SEMANTICS 1
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-5:2014.  */
-#ifndef __STDC_WANT_IEC_60559_ATTRIBS_EXT__
-# define __STDC_WANT_IEC_60559_ATTRIBS_EXT__ 1
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-1:2014.  */
-#ifndef __STDC_WANT_IEC_60559_BFP_EXT__
-# define __STDC_WANT_IEC_60559_BFP_EXT__ 1
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-2:2015.  */
-#ifndef __STDC_WANT_IEC_60559_DFP_EXT__
-# define __STDC_WANT_IEC_60559_DFP_EXT__ 1
-#endif
-/* Enable extensions specified by C23 Annex F.  */
-#ifndef __STDC_WANT_IEC_60559_EXT__
-# define __STDC_WANT_IEC_60559_EXT__ 1
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-4:2015.  */
-#ifndef __STDC_WANT_IEC_60559_FUNCS_EXT__
-# define __STDC_WANT_IEC_60559_FUNCS_EXT__ 1
-#endif
-/* Enable extensions specified by C23 Annex H and ISO/IEC TS 18661-3:2015.  */
-#ifndef __STDC_WANT_IEC_60559_TYPES_EXT__
-# define __STDC_WANT_IEC_60559_TYPES_EXT__ 1
-#endif
-/* Enable extensions specified by ISO/IEC TR 24731-2:2010.  */
-#ifndef __STDC_WANT_LIB_EXT2__
-# define __STDC_WANT_LIB_EXT2__ 1
-#endif
-/* Enable extensions specified by ISO/IEC 24747:2009.  */
-#ifndef __STDC_WANT_MATH_SPEC_FUNCS__
-# define __STDC_WANT_MATH_SPEC_FUNCS__ 1
-#endif
-/* Enable extensions on HP NonStop.  */
-#ifndef _TANDEM_SOURCE
-# define _TANDEM_SOURCE 1
-#endif
-/* Enable X/Open extensions.  Define to 500 only if necessary
-   to make mbstate_t available.  */
-#ifndef _XOPEN_SOURCE
-/* # undef _XOPEN_SOURCE */
-#endif
-
-
-/* Version number of package */
-#define VERSION "1.3.7"
diff --git a/experiments/wasm-gui/third_party/libXext/config.h.in b/experiments/wasm-gui/third_party/libXext/config.h.in
deleted file mode 100644
index dd6e15d2b..000000000
--- a/experiments/wasm-gui/third_party/libXext/config.h.in
+++ /dev/null
@@ -1,181 +0,0 @@
-/* config.h.in.  Generated from configure.ac by autoheader.  */
-
-/* Define to 1 if you have the <dlfcn.h> header file. */
-#undef HAVE_DLFCN_H
-
-/* Define to 1 if you have the <inttypes.h> header file. */
-#undef HAVE_INTTYPES_H
-
-/* Define to 1 if you have the <minix/config.h> header file. */
-#undef HAVE_MINIX_CONFIG_H
-
-/* Define to 1 if you have the 'reallocarray' function. */
-#undef HAVE_REALLOCARRAY
-
-/* Define to 1 if you have the <stdint.h> header file. */
-#undef HAVE_STDINT_H
-
-/* Define to 1 if you have the <stdio.h> header file. */
-#undef HAVE_STDIO_H
-
-/* Define to 1 if you have the <stdlib.h> header file. */
-#undef HAVE_STDLIB_H
-
-/* Define to 1 if you have the <strings.h> header file. */
-#undef HAVE_STRINGS_H
-
-/* Define to 1 if you have the <string.h> header file. */
-#undef HAVE_STRING_H
-
-/* Define to 1 if you have the <sys/stat.h> header file. */
-#undef HAVE_SYS_STAT_H
-
-/* Define to 1 if you have the <sys/types.h> header file. */
-#undef HAVE_SYS_TYPES_H
-
-/* Define to 1 if you have the <unistd.h> header file. */
-#undef HAVE_UNISTD_H
-
-/* Define to 1 if you have the <wchar.h> header file. */
-#undef HAVE_WCHAR_H
-
-/* Define to 1 if the system has the `__builtin_popcountl' built-in function
-   */
-#undef HAVE___BUILTIN_POPCOUNTL
-
-/* Define to the sub-directory where libtool stores uninstalled libraries. */
-#undef LT_OBJDIR
-
-/* Name of package */
-#undef PACKAGE
-
-/* Define to the address where bug reports for this package should be sent. */
-#undef PACKAGE_BUGREPORT
-
-/* Define to the full name of this package. */
-#undef PACKAGE_NAME
-
-/* Define to the full name and version of this package. */
-#undef PACKAGE_STRING
-
-/* Define to the one symbol short name of this package. */
-#undef PACKAGE_TARNAME
-
-/* Define to the home page for this package. */
-#undef PACKAGE_URL
-
-/* Define to the version of this package. */
-#undef PACKAGE_VERSION
-
-/* Major version of this package */
-#undef PACKAGE_VERSION_MAJOR
-
-/* Minor version of this package */
-#undef PACKAGE_VERSION_MINOR
-
-/* Patch version of this package */
-#undef PACKAGE_VERSION_PATCHLEVEL
-
-/* Define to 1 if all of the C89 standard headers exist (not just the ones
-   required in a freestanding environment). This macro is provided for
-   backward compatibility; new code need not use it. */
-#undef STDC_HEADERS
-
-/* Enable extensions on AIX, Interix, z/OS.  */
-#ifndef _ALL_SOURCE
-# undef _ALL_SOURCE
-#endif
-/* Enable extensions on Cosmopolitan Libc. */
-#ifndef _COSMO_SOURCE
-# undef _COSMO_SOURCE
-#endif
-/* Enable general extensions on macOS.  */
-#ifndef _DARWIN_C_SOURCE
-# undef _DARWIN_C_SOURCE
-#endif
-/* Enable general extensions on Solaris.  */
-#ifndef __EXTENSIONS__
-# undef __EXTENSIONS__
-#endif
-/* Enable GNU extensions on systems that have them.  */
-#ifndef _GNU_SOURCE
-# undef _GNU_SOURCE
-#endif
-/* Enable X/Open compliant socket functions that do not require linking
-   with -lxnet on HP-UX 11.11.  */
-#ifndef _HPUX_ALT_XOPEN_SOCKET_API
-# undef _HPUX_ALT_XOPEN_SOCKET_API
-#endif
-/* Identify the host operating system as Minix.
-   This macro does not affect the system headers' behavior.
-   A future release of Autoconf may stop defining this macro.  */
-#ifndef _MINIX
-# undef _MINIX
-#endif
-/* Enable general extensions on NetBSD.
-   Enable NetBSD compatibility extensions on Minix.  */
-#ifndef _NETBSD_SOURCE
-# undef _NETBSD_SOURCE
-#endif
-/* Enable OpenBSD compatibility extensions on NetBSD.
-   Oddly enough, this does nothing on OpenBSD.  */
-#ifndef _OPENBSD_SOURCE
-# undef _OPENBSD_SOURCE
-#endif
-/* Define to 1 if needed for POSIX-compatible behavior.  */
-#ifndef _POSIX_SOURCE
-# undef _POSIX_SOURCE
-#endif
-/* Define to 2 if needed for POSIX-compatible behavior.  */
-#ifndef _POSIX_1_SOURCE
-# undef _POSIX_1_SOURCE
-#endif
-/* Enable POSIX-compatible threading on Solaris.  */
-#ifndef _POSIX_PTHREAD_SEMANTICS
-# undef _POSIX_PTHREAD_SEMANTICS
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-5:2014.  */
-#ifndef __STDC_WANT_IEC_60559_ATTRIBS_EXT__
-# undef __STDC_WANT_IEC_60559_ATTRIBS_EXT__
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-1:2014.  */
-#ifndef __STDC_WANT_IEC_60559_BFP_EXT__
-# undef __STDC_WANT_IEC_60559_BFP_EXT__
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-2:2015.  */
-#ifndef __STDC_WANT_IEC_60559_DFP_EXT__
-# undef __STDC_WANT_IEC_60559_DFP_EXT__
-#endif
-/* Enable extensions specified by C23 Annex F.  */
-#ifndef __STDC_WANT_IEC_60559_EXT__
-# undef __STDC_WANT_IEC_60559_EXT__
-#endif
-/* Enable extensions specified by ISO/IEC TS 18661-4:2015.  */
-#ifndef __STDC_WANT_IEC_60559_FUNCS_EXT__
-# undef __STDC_WANT_IEC_60559_FUNCS_EXT__
-#endif
-/* Enable extensions specified by C23 Annex H and ISO/IEC TS 18661-3:2015.  */
-#ifndef __STDC_WANT_IEC_60559_TYPES_EXT__
-# undef __STDC_WANT_IEC_60559_TYPES_EXT__
-#endif
-/* Enable extensions specified by ISO/IEC TR 24731-2:2010.  */
-#ifndef __STDC_WANT_LIB_EXT2__
-# undef __STDC_WANT_LIB_EXT2__
-#endif
-/* Enable extensions specified by ISO/IEC 24747:2009.  */
-#ifndef __STDC_WANT_MATH_SPEC_FUNCS__
-# undef __STDC_WANT_MATH_SPEC_FUNCS__
-#endif
-/* Enable extensions on HP NonStop.  */
-#ifndef _TANDEM_SOURCE
-# undef _TANDEM_SOURCE
-#endif
-/* Enable X/Open extensions.  Define to 500 only if necessary
-   to make mbstate_t available.  */
-#ifndef _XOPEN_SOURCE
-# undef _XOPEN_SOURCE
-#endif
-
-
-/* Version number of package */
-#undef VERSION
diff --git a/experiments/wasm-gui/third_party/libXext/config.log b/experiments/wasm-gui/third_party/libXext/config.log
deleted file mode 100644
index 450b37c1c..000000000
--- a/experiments/wasm-gui/third_party/libXext/config.log
+++ /dev/null
@@ -1,1592 +0,0 @@
-This file contains any messages produced by compilers while
-running configure, to aid debugging if configure makes a mistake.
-
-It was created by libXext configure 1.3.7, which was
-generated by GNU Autoconf 2.73.  Invocation command line was
-
-  $ ./configure --host=wasm32-wasi --prefix=/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix --enable-static --disable-shared --disable-specs --without-xmlto --without-fop
-
-## --------- ##
-## Platform. ##
-## --------- ##
-
-hostname = nathan-dev
-uname -m = x86_64
-uname -r = 6.1.0-41-amd64
-uname -s = Linux
-uname -v = #1 SMP PREEMPT_DYNAMIC Debian 6.1.158-1 (2025-11-09)
-
-/usr/bin/uname -p = unknown
-/bin/uname -X     = unknown
-
-/bin/arch              = x86_64
-/usr/bin/arch -k       = unknown
-/usr/convex/getsysinfo = unknown
-/usr/bin/hostinfo      = unknown
-/bin/machine           = unknown
-/usr/bin/oslevel       = unknown
-/bin/universe          = unknown
-
-PATH: /home/linuxbrew/.linuxbrew/bin/
-PATH: /home/nathan/misc/bun/bin/
-PATH: /home/nathan/.bun/bin/
-PATH: /home/nathan/.bun/bin/
-PATH: /home/nathan/.bun/bin/
-PATH: /home/nathan/.bun/bin/
-PATH: /home/nathan/.wasmer/bin/
-PATH: /home/nathan/.opencode/bin/
-PATH: /home/nathan/.local/bin/
-PATH: /home/nathan/.bun/bin/
-PATH: /home/nathan/.cargo/bin/
-PATH: /home/nathan/.nix-profile/bin/
-PATH: /nix/var/nix/profiles/default/bin/
-PATH: /home/linuxbrew/.linuxbrew/bin/
-PATH: /home/linuxbrew/.linuxbrew/sbin/
-PATH: /home/nathan/.local/bin/
-PATH: /home/linuxbrew/.linuxbrew/opt/rustup/bin/
-PATH: /home/nathan/.local/bin/
-PATH: /home/nathan/.atuin/bin/
-PATH: /home/nathan/misc/bun/bin/
-PATH: /home/nathan/.bun/bin/
-PATH: /home/nathan/.bun/bin/
-PATH: /home/nathan/.bun/bin/
-PATH: /home/nathan/.bun/bin/
-PATH: /home/nathan/.wasmer/bin/
-PATH: /home/nathan/.deno/bin/
-PATH: /home/nathan/.opencode/bin/
-PATH: /home/nathan/.local/bin/
-PATH: /home/nathan/.bun/bin/
-PATH: /home/nathan/.cargo/bin/
-PATH: /home/nathan/.nix-profile/bin/
-PATH: /nix/var/nix/profiles/default/bin/
-PATH: /tmp/pnpm/
-PATH: /home/linuxbrew/.linuxbrew/bin/
-PATH: /home/linuxbrew/.linuxbrew/sbin/
-PATH: /home/nathan/.nvm/versions/node/v24.13.0/bin/
-PATH: /home/nathan/.nix-profile/bin/
-PATH: /nix/var/nix/profiles/default/bin/
-PATH: /usr/local/bin/
-PATH: /usr/bin/
-PATH: /bin/
-PATH: /usr/local/games/
-PATH: /usr/games/
-
-
-## ----------- ##
-## Core tests. ##
-## ----------- ##
-
-configure:2691: looking for aux files: config.guess config.sub ltmain.sh missing install-sh compile
-configure:2704:  trying ./
-configure:2733:   ./config.guess found
-configure:2733:   ./config.sub found
-configure:2733:   ./ltmain.sh found
-configure:2733:   ./missing found
-configure:2715:   ./install-sh found
-configure:2733:   ./compile found
-configure:2901: checking for wasm32-wasi-gcc
-configure:2934: result: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang
-configure:3339: checking for C compiler version
-configure:3348: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang --version >&5
-clang version 19.1.5-wasi-sdk (https://github.com/llvm/llvm-project ab4b5a2db582958af1ee308a790cfdb42bd24720)
-Target: wasm32-unknown-wasi
-Thread model: posix
-InstalledDir: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin
-configure:3359: $? = 0
-configure:3348: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -v >&5
-clang version 19.1.5-wasi-sdk (https://github.com/llvm/llvm-project ab4b5a2db582958af1ee308a790cfdb42bd24720)
-Target: wasm32-unknown-wasi
-Thread model: posix
-InstalledDir: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin
-configure:3359: $? = 0
-configure:3348: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -V >&5
-clang: error: argument to '-V' is missing (expected 1 value)
-clang: error: no input files
-configure:3359: $? = 1
-configure:3348: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -qversion >&5
-clang: error: unknown argument '-qversion'; did you mean '--version'?
-clang: error: no input files
-configure:3359: $? = 1
-configure:3348: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -version >&5
-clang: error: unknown argument '-version'; did you mean '--version'?
-clang: error: no input files
-configure:3359: $? = 1
-configure:3379: checking whether the C compiler works
-configure:3401: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:3405: $? = 0
-configure:3456: result: yes
-configure:3460: checking for C compiler default output file name
-configure:3462: result: a.out
-configure:3468: checking for suffix of executables
-configure:3475: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:3479: $? = 0
-configure:3503: result: 
-configure:3527: checking whether we are cross compiling
-configure:3535: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:3539: $? = 0
-configure:3546: ./conftest
-./configure: line 3548: ./conftest: cannot execute binary file: Exec format error
-configure:3550: $? = 126
-configure:3565: result: yes
-configure:3571: checking for suffix of object files
-configure:3594: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:3598: $? = 0
-configure:3622: result: o
-configure:3626: checking whether the compiler supports GNU C
-configure:3646: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:3646: $? = 0
-configure:3658: result: yes
-configure:3669: checking whether /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang accepts -g
-configure:3690: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -c -g --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:3690: $? = 0
-configure:3737: result: yes
-configure:3757: checking for /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang option to enable C23 features
-configure:3772: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang  -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-conftest.c:14:3: error: "Compiler advertises conformance to C17 or earlier"
-   14 | # error "Compiler advertises conformance to C17 or earlier"
-      |   ^
-conftest.c:18:23: error: expected function body after function declarator
-   18 | char alignas (double) c23_aligned_as_double;
-      |                       ^
-conftest.c:19:15: error: expected parameter declarator
-   19 | char alignas (0) c23_no_special_alignment;
-      |               ^
-conftest.c:19:15: error: expected ')'
-conftest.c:19:14: note: to match this '('
-   19 | char alignas (0) c23_no_special_alignment;
-      |              ^
-conftest.c:19:18: error: expected function body after function declarator
-   19 | char alignas (0) c23_no_special_alignment;
-      |                  ^
-conftest.c:21:15: error: expected parameter declarator
-   21 | char alignas (0) alignas (int) c23_aligned_as_int;
-      |               ^
-conftest.c:21:15: error: expected ')'
-conftest.c:21:14: note: to match this '('
-   21 | char alignas (0) alignas (int) c23_aligned_as_int;
-      |              ^
-conftest.c:21:18: error: expected function body after function declarator
-   21 | char alignas (0) alignas (int) c23_aligned_as_int;
-      |                  ^
-conftest.c:26:23: error: call to undeclared function 'alignof'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration]
-   26 |   c23_int_alignment = alignof (int),
-      |                       ^
-conftest.c:26:32: error: expected expression
-   26 |   c23_int_alignment = alignof (int),
-      |                                ^
-conftest.c:27:38: error: expected expression
-   27 |   c23_int_array_alignment = alignof (int[100]),
-      |                                      ^
-conftest.c:28:33: error: expected expression
-   28 |   c23_char_alignment = alignof (char)
-      |                                 ^
-conftest.c:30:16: error: expected parameter declarator
-   30 | static_assert (0 < -alignof (int), "alignof is signed");
-      |                ^
-conftest.c:30:16: error: expected ')'
-conftest.c:30:15: note: to match this '('
-   30 | static_assert (0 < -alignof (int), "alignof is signed");
-      |               ^
-conftest.c:30:1: error: type specifier missing, defaults to 'int'; ISO C99 and later do not support implicit int [-Wimplicit-int]
-   30 | static_assert (0 < -alignof (int), "alignof is signed");
-      | ^
-      | int
-conftest.c:32:41: warning: omitting the parameter name in a function definition is a C23 extension [-Wc23-extensions]
-   32 | int function_with_unnamed_parameter (int) { return 0; }
-      |                                         ^
-conftest.c:38:1: error: unknown type name 'bool'
-   38 | bool use_u8 = (!sizeof u8"\xFF") == (!u8'x');
-      | ^
-conftest.c:38:39: error: use of undeclared identifier 'u8'
-   38 | bool use_u8 = (!sizeof u8"\xFF") == (!u8'x');
-      |                                       ^
-conftest.c:40:1: error: unknown type name 'bool'
-   40 | bool check_that_bool_works = true | false | !nullptr;
-      | ^
-conftest.c:40:30: error: use of undeclared identifier 'true'
-   40 | bool check_that_bool_works = true | false | !nullptr;
-      |                              ^
-fatal error: too many errors emitted, stopping now [-ferror-limit=]
-1 warning and 20 errors generated.
-configure:3772: $? = 1
-configure: failed program was:
-| /* confdefs.h */
-| #define PACKAGE_NAME "libXext"
-| #define PACKAGE_TARNAME "libXext"
-| #define PACKAGE_VERSION "1.3.7"
-| #define PACKAGE_STRING "libXext 1.3.7"
-| #define PACKAGE_BUGREPORT "https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues"
-| #define PACKAGE_URL ""
-| /* end confdefs.h.  */
-| 
-| /* Does the compiler advertise conformance to C17 or earlier?
-|    Although GCC 14 does not do that, even with -std=gnu23,
-|    it is close enough, and defines __STDC_VERSION == 202000L.  */
-| #if !defined __STDC_VERSION__ || __STDC_VERSION__ <= 201710L
-| # error "Compiler advertises conformance to C17 or earlier"
-| #endif
-| 
-| // Check alignas.
-| char alignas (double) c23_aligned_as_double;
-| char alignas (0) c23_no_special_alignment;
-| extern char c23_aligned_as_int;
-| char alignas (0) alignas (int) c23_aligned_as_int;
-| 
-| // Check alignof.
-| enum
-| {
-|   c23_int_alignment = alignof (int),
-|   c23_int_array_alignment = alignof (int[100]),
-|   c23_char_alignment = alignof (char)
-| };
-| static_assert (0 < -alignof (int), "alignof is signed");
-| 
-| int function_with_unnamed_parameter (int) { return 0; }
-| 
-| void c23_noreturn ();
-| 
-| /* Test parsing of string and char UTF-8 literals (including hex escapes).
-|    The parens pacify GCC 15.  */
-| bool use_u8 = (!sizeof u8"\xFF") == (!u8'x');
-| 
-| bool check_that_bool_works = true | false | !nullptr;
-| #if !true
-| # error "true does not work in #if"
-| #endif
-| #if false
-| #elifdef __STDC_VERSION__
-| #else
-| # error "#elifdef does not work"
-| #endif
-| 
-| #ifndef __has_c_attribute
-| # error "__has_c_attribute not defined"
-| #endif
-| 
-| #ifndef __has_include
-| # error "__has_include not defined"
-| #endif
-| 
-| #define LPAREN() (
-| #define FORTY_TWO(x) 42
-| #define VA_OPT_TEST(r, x, ...) __VA_OPT__ (FORTY_TWO r x))
-| static_assert (VA_OPT_TEST (LPAREN (), 0, <:-) == 42);
-| 
-| static_assert (0b101010 == 42);
-| static_assert (0B101010 == 42);
-| static_assert (0xDEAD'BEEF == 3'735'928'559);
-| static_assert (0.500'000'000 == 0.5);
-| 
-| enum unsignedish : unsigned int { uione = 1 };
-| static_assert (0 < -uione);
-| 
-| #include <stddef.h>
-| constexpr nullptr_t null_pointer = nullptr;
-| 
-| static typeof (1 + 1L) two () { return 2; }
-| static long int three () { return 3; }
-| 
-| 
-| int
-| main (int, char **)
-| {
-|   int ok = 0;
-|   
-|   {
-|     label_before_declaration:
-|       int arr[10] = {};
-|       if (arr[0])
-|         goto label_before_declaration;
-|       if (!arr[0])
-|         goto label_at_end_of_block;
-|     label_at_end_of_block:
-|   }
-|   ok |= !null_pointer;
-|   ok |= two != three;
-| 
-|   return ok;
-| }
-| 
-configure:3772: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-conftest.c:40:46: warning: implicit conversion of nullptr constant to 'bool' [-Wnull-conversion]
-   40 | bool check_that_bool_works = true | false | !nullptr;
-      |                                             ~^~~~~~~
-      |                                              0
-conftest.c:92:10: warning: implicit conversion of nullptr constant to 'bool' [-Wnull-conversion]
-   92 |   ok |= !null_pointer;
-      |         ~^~~~~~~~~~~~
-      |          0
-2 warnings generated.
-configure:3772: $? = 0
-configure:3794: result: -std=gnu23
-configure:3964: checking whether /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 understands -c and -o together
-configure:3987: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c conftest.c -o conftest2.o
-configure:3990: $? = 0
-configure:3987: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c conftest.c -o conftest2.o
-configure:3990: $? = 0
-configure:4006: result: yes
-configure:4028: checking for stdio.h
-configure:4028: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:4028: $? = 0
-configure:4028: result: yes
-configure:4028: checking for stdlib.h
-configure:4028: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:4028: $? = 0
-configure:4028: result: yes
-configure:4028: checking for string.h
-configure:4028: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:4028: $? = 0
-configure:4028: result: yes
-configure:4028: checking for inttypes.h
-configure:4028: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:4028: $? = 0
-configure:4028: result: yes
-configure:4028: checking for stdint.h
-configure:4028: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:4028: $? = 0
-configure:4028: result: yes
-configure:4028: checking for strings.h
-configure:4028: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:4028: $? = 0
-configure:4028: result: yes
-configure:4028: checking for sys/stat.h
-configure:4028: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:4028: $? = 0
-configure:4028: result: yes
-configure:4028: checking for sys/types.h
-configure:4028: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:4028: $? = 0
-configure:4028: result: yes
-configure:4028: checking for unistd.h
-configure:4028: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:4028: $? = 0
-configure:4028: result: yes
-configure:4028: checking for wchar.h
-configure:4028: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:4028: $? = 0
-configure:4028: result: yes
-configure:4028: checking for minix/config.h
-configure:4028: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-conftest.c:47:10: fatal error: 'minix/config.h' file not found
-   47 | #include <minix/config.h>
-      |          ^~~~~~~~~~~~~~~~
-1 error generated.
-configure:4028: $? = 1
-configure: failed program was:
-| /* confdefs.h */
-| #define PACKAGE_NAME "libXext"
-| #define PACKAGE_TARNAME "libXext"
-| #define PACKAGE_VERSION "1.3.7"
-| #define PACKAGE_STRING "libXext 1.3.7"
-| #define PACKAGE_BUGREPORT "https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues"
-| #define PACKAGE_URL ""
-| #define HAVE_STDIO_H 1
-| #define HAVE_STDLIB_H 1
-| #define HAVE_STRING_H 1
-| #define HAVE_INTTYPES_H 1
-| #define HAVE_STDINT_H 1
-| #define HAVE_STRINGS_H 1
-| #define HAVE_SYS_STAT_H 1
-| #define HAVE_SYS_TYPES_H 1
-| #define HAVE_UNISTD_H 1
-| #define HAVE_WCHAR_H 1
-| /* end confdefs.h.  */
-| #include <stddef.h>
-| #ifdef HAVE_STDIO_H
-| # include <stdio.h>
-| #endif
-| #ifdef HAVE_STDLIB_H
-| # include <stdlib.h>
-| #endif
-| #ifdef HAVE_STRING_H
-| # include <string.h>
-| #endif
-| #ifdef HAVE_INTTYPES_H
-| # include <inttypes.h>
-| #endif
-| #ifdef HAVE_STDINT_H
-| # include <stdint.h>
-| #endif
-| #ifdef HAVE_STRINGS_H
-| # include <strings.h>
-| #endif
-| #ifdef HAVE_SYS_TYPES_H
-| # include <sys/types.h>
-| #endif
-| #ifdef HAVE_SYS_STAT_H
-| # include <sys/stat.h>
-| #endif
-| #ifdef HAVE_UNISTD_H
-| # include <unistd.h>
-| #endif
-| #include <minix/config.h>
-configure:4028: result: no
-configure:4059: checking whether it is safe to define __EXTENSIONS__
-configure:4078: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:4078: $? = 0
-configure:4088: result: yes
-configure:4091: checking whether _XOPEN_SOURCE should be defined
-configure:4113: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:4113: $? = 0
-configure:4142: result: no
-configure:4222: checking for a BSD-compatible install
-configure:4296: result: /usr/bin/install -c
-configure:4307: checking whether sleep supports fractional seconds
-configure:4323: result: yes
-configure:4326: checking filesystem timestamp resolution
-configure:4461: result: 0.01
-configure:4466: checking whether build environment is sane
-configure:4511: result: yes
-configure:4573: checking for wasm32-wasi-strip
-configure:4609: result: no
-configure:4619: checking for strip
-configure:4640: found /home/linuxbrew/.linuxbrew/bin/strip
-configure:4652: result: strip
-configure:4664: WARNING: using cross tools not prefixed with host triplet
-configure:4678: checking for a race-free mkdir -p
-configure:4721: result: /usr/bin/mkdir -p
-configure:4728: checking for gawk
-configure:4764: result: no
-configure:4728: checking for mawk
-configure:4749: found /usr/bin/mawk
-configure:4761: result: mawk
-configure:4772: checking whether make sets $(MAKE)
-configure:4796: result: yes
-configure:4818: checking whether make supports the include directive
-configure:4833: make -f confmf.GNU && cat confinc.out
-this is the am__doit target
-configure:4836: $? = 0
-configure:4855: result: yes (GNU style)
-configure:4886: checking whether make supports nested variables
-configure:4905: result: yes
-configure:4919: checking xargs -n works
-configure:4935: result: yes
-configure:5020: checking whether UID '1000' is supported by ustar format
-configure:5026: result: yes
-configure:5033: checking whether GID '1000' is supported by ustar format
-configure:5039: result: yes
-configure:5047: checking how to create a ustar tar archive
-configure:5058: tar --version
-tar (GNU tar) 1.34
-Copyright (C) 2021 Free Software Foundation, Inc.
-License GPLv3+: GNU GPL version 3 or later <https://gnu.org/licenses/gpl.html>.
-This is free software: you are free to change and redistribute it.
-There is NO WARRANTY, to the extent permitted by law.
-
-Written by John Gilmore and Jay Fenlason.
-configure:5061: $? = 0
-configure:5101: tardir=conftest.dir && eval tar --format=ustar -chf - "$tardir" >conftest.tar
-configure:5104: $? = 0
-configure:5108: tar -xf - <conftest.tar
-configure:5111: $? = 0
-configure:5113: cat conftest.dir/file
-GrepMe
-configure:5116: $? = 0
-configure:5131: result: gnutar
-configure:5140: checking dependency style of /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23
-configure:5253: result: gcc3
-configure:5321: checking build system type
-configure:5337: result: x86_64-pc-linux-gnu
-configure:5357: checking host system type
-configure:5372: result: wasm32-unknown-wasi
-configure:5413: checking how to print strings
-configure:5440: result: printf
-configure:5461: checking for a sed that does not truncate output
-configure:5533: result: /usr/bin/sed
-configure:5551: checking for grep that handles long lines and -e
-configure:5617: result: /usr/bin/grep
-configure:5622: checking for egrep
-configure:5692: result: /usr/bin/grep -E
-configure:5699: checking for fgrep
-configure:5769: result: /usr/bin/grep -F
-configure:5806: checking for ld used by /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23
-configure:5875: result: /home/linuxbrew/.linuxbrew/bin/ld
-configure:5882: checking if the linker (/home/linuxbrew/.linuxbrew/bin/ld) is GNU ld
-configure:5899: result: yes
-configure:5911: checking for BSD- or MS-compatible name lister (nm)
-configure:5967: result: no
-configure:5981: checking for wasm32-wasi-dumpbin
-configure:6017: result: no
-configure:5981: checking for wasm32-wasi-link
-configure:6017: result: no
-configure:6031: checking for dumpbin
-configure:6067: result: no
-configure:6031: checking for link
-configure:6052: found /usr/bin/link
-configure:6064: result: link -dump
-configure:6109: checking the name lister (nm) interface
-configure:6117: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:6120: nm "conftest.o"
-nm: conftest.o: file format not recognized
-configure:6123: output
-configure:6131: result: BSD nm
-configure:6134: checking whether ln -s works
-configure:6138: result: yes
-configure:6146: checking the maximum length of command line arguments
-configure:6279: result: 1572864
-configure:6327: checking how to convert x86_64-pc-linux-gnu file names to wasm32-unknown-wasi format
-configure:6369: result: func_convert_file_noop
-configure:6376: checking how to convert x86_64-pc-linux-gnu file names to toolchain format
-configure:6398: result: func_convert_file_noop
-configure:6405: checking for /home/linuxbrew/.linuxbrew/bin/ld option to reload object files
-configure:6414: result: -r
-configure:6447: checking for file
-configure:6468: found /usr/bin/file
-configure:6481: result: file
-configure:6498: checking for wasm32-wasi-objdump
-configure:6534: result: no
-configure:6544: checking for objdump
-configure:6565: found /home/linuxbrew/.linuxbrew/bin/objdump
-configure:6577: result: objdump
-configure:6609: checking how to recognize dependent libraries
-configure:6818: result: unknown
-configure:6863: checking for wasm32-wasi-dlltool
-configure:6899: result: no
-configure:6909: checking for dlltool
-configure:6930: found /home/linuxbrew/.linuxbrew/bin/dlltool
-configure:6942: result: dlltool
-configure:6975: checking how to associate runtime and link libraries
-configure:7004: result: printf %s\n
-configure:7018: checking for wasm32-wasi-ranlib
-configure:7051: result: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ranlib
-configure:7124: checking for wasm32-wasi-ar
-configure:7157: result: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ar
-configure:7260: checking for archiver @FILE support
-configure:7278: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:7278: $? = 0
-configure:7282: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ar cr libconftest.a @conftest.lst >&5
-configure:7285: $? = 0
-configure:7290: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ar cr libconftest.a @conftest.lst >&5
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ar: error: conftest.o: No such file or directory
-configure:7293: $? = 1
-configure:7306: result: @
-configure:7324: checking for wasm32-wasi-strip
-configure:7357: result: strip
-configure:7506: checking command to parse nm output from /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 object
-configure:7660: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:7663: $? = 0
-configure:7667: nm conftest.o | /usr/bin/sed -n -e 's/^.*[	 ]\([ABCDGIRSTW][ABCDGIRSTW]*\)[	 ][	 ]*\([_A-Za-z][_A-Za-z0-9]*\)$/\1 \2 \2/p' | /usr/bin/sed '/ __gnu_lto/d' > conftest.nm
-nm: conftest.o: file format not recognized
-cannot run /usr/bin/sed -n -e 's/^.*[	 ]\([ABCDGIRSTW][ABCDGIRSTW]*\)[	 ][	 ]*\([_A-Za-z][_A-Za-z0-9]*\)$/\1 \2 \2/p' | /usr/bin/sed '/ __gnu_lto/d'
-configure:7660: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:7663: $? = 0
-configure:7667: nm conftest.o | /usr/bin/sed -n -e 's/^.*[	 ]\([ABCDGIRSTW][ABCDGIRSTW]*\)[	 ][	 ]*_\([_A-Za-z][_A-Za-z0-9]*\)$/\1 _\2 \2/p' | /usr/bin/sed '/ __gnu_lto/d' > conftest.nm
-nm: conftest.o: file format not recognized
-cannot run /usr/bin/sed -n -e 's/^.*[	 ]\([ABCDGIRSTW][ABCDGIRSTW]*\)[	 ][	 ]*_\([_A-Za-z][_A-Za-z0-9]*\)$/\1 _\2 \2/p' | /usr/bin/sed '/ __gnu_lto/d'
-configure:7772: result: failed
-configure:7822: checking for sysroot
-configure:7856: result: no
-configure:7863: checking for a working dd
-configure:7908: result: /usr/bin/dd
-configure:7912: checking how to truncate binary pipes
-configure:7929: result: /usr/bin/dd bs=4096 count=1
-configure:8223: checking for wasm32-wasi-mt
-configure:8259: result: no
-configure:8269: checking for mt
-configure:8290: found /usr/bin/mt
-configure:8302: result: mt
-configure:8325: checking if mt is a manifest tool
-configure:8332: mt '-?'
-configure:8341: result: no
-configure:9134: checking for dlfcn.h
-configure:9134: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:9134: $? = 0
-configure:9134: result: yes
-configure:9437: checking for objdir
-configure:9454: result: .libs
-configure:9720: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -fno-rtti -fno-exceptions
-configure:9739: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -fno-rtti -fno-exceptions conftest.c >&5
-configure:9743: $? = 0
-configure:9757: result: yes
-configure:10130: checking for /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 option to produce PIC
-configure:10139: result: -fPIC -DPIC
-configure:10147: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 PIC flag -fPIC -DPIC works
-configure:10166: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -fPIC -DPIC -DPIC conftest.c >&5
-configure:10170: $? = 0
-configure:10184: result: yes
-configure:10213: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 static flag -static works
-configure:10243: result: yes
-configure:10258: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -c -o file.o
-configure:10280: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -o out/conftest2.o conftest.c >&5
-configure:10284: $? = 0
-configure:10307: result: yes
-configure:10315: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -c -o file.o
-configure:10364: result: yes
-configure:10397: checking whether the /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 linker (/home/linuxbrew/.linuxbrew/bin/ld) supports shared libraries
-configure:11681: result: yes
-configure:11923: checking dynamic linker characteristics
-configure:13307: result: no
-configure:13429: checking how to hardcode library paths into programs
-configure:13454: result: immediate
-configure:14054: checking whether stripping libraries is possible
-configure:14063: result: yes
-configure:14105: checking if libtool supports shared libraries
-configure:14107: result: no
-configure:14110: checking whether to build shared libraries
-configure:14135: result: no
-configure:14138: checking whether to build static libraries
-configure:14142: result: yes
-configure:14192: checking for /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 options to detect undeclared functions
-configure:14214: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h  --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-conftest.c:46:8: error: call to undeclared library function 'strchr' with type 'char *(const char *, int)'; ISO C99 and later do not support implicit function declarations [-Wimplicit-function-declaration]
-   46 | (void) strchr;
-      |        ^
-conftest.c:46:8: note: include the header <string.h> or explicitly provide a declaration for 'strchr'
-1 error generated.
-configure:14214: $? = 1
-configure: failed program was:
-| /* confdefs.h */
-| #define PACKAGE_NAME "libXext"
-| #define PACKAGE_TARNAME "libXext"
-| #define PACKAGE_VERSION "1.3.7"
-| #define PACKAGE_STRING "libXext 1.3.7"
-| #define PACKAGE_BUGREPORT "https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues"
-| #define PACKAGE_URL ""
-| #define HAVE_STDIO_H 1
-| #define HAVE_STDLIB_H 1
-| #define HAVE_STRING_H 1
-| #define HAVE_INTTYPES_H 1
-| #define HAVE_STDINT_H 1
-| #define HAVE_STRINGS_H 1
-| #define HAVE_SYS_STAT_H 1
-| #define HAVE_SYS_TYPES_H 1
-| #define HAVE_UNISTD_H 1
-| #define HAVE_WCHAR_H 1
-| #define STDC_HEADERS 1
-| #define _ALL_SOURCE 1
-| #define _COSMO_SOURCE 1
-| #define _DARWIN_C_SOURCE 1
-| #define _GNU_SOURCE 1
-| #define _HPUX_ALT_XOPEN_SOCKET_API 1
-| #define _NETBSD_SOURCE 1
-| #define _OPENBSD_SOURCE 1
-| #define _POSIX_PTHREAD_SEMANTICS 1
-| #define __STDC_WANT_IEC_60559_ATTRIBS_EXT__ 1
-| #define __STDC_WANT_IEC_60559_BFP_EXT__ 1
-| #define __STDC_WANT_IEC_60559_DFP_EXT__ 1
-| #define __STDC_WANT_IEC_60559_EXT__ 1
-| #define __STDC_WANT_IEC_60559_FUNCS_EXT__ 1
-| #define __STDC_WANT_IEC_60559_TYPES_EXT__ 1
-| #define __STDC_WANT_LIB_EXT2__ 1
-| #define __STDC_WANT_MATH_SPEC_FUNCS__ 1
-| #define _TANDEM_SOURCE 1
-| #define __EXTENSIONS__ 1
-| #define PACKAGE "libXext"
-| #define VERSION "1.3.7"
-| #define HAVE_DLFCN_H 1
-| #define LT_OBJDIR ".libs/"
-| /* end confdefs.h.  */
-| 
-| int
-| main (void)
-| {
-| (void) strchr;
-|   ;
-|   return 0;
-| }
-configure:14241: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h  --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:14241: $? = 0
-configure:14261: result: none needed
-configure:14275: checking for /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 options to ignore future-version functions
-configure:14297: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5 -Werror=unguarded-availability-new
-conftest.c:43:6: error: "-Werror=unguarded-availability-new not needed here"
-   43 |            #error "-Werror=unguarded-availability-new not needed here"
-      |             ^
-1 error generated.
-configure:14297: $? = 1
-configure: failed program was:
-| /* confdefs.h */
-| #define PACKAGE_NAME "libXext"
-| #define PACKAGE_TARNAME "libXext"
-| #define PACKAGE_VERSION "1.3.7"
-| #define PACKAGE_STRING "libXext 1.3.7"
-| #define PACKAGE_BUGREPORT "https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues"
-| #define PACKAGE_URL ""
-| #define HAVE_STDIO_H 1
-| #define HAVE_STDLIB_H 1
-| #define HAVE_STRING_H 1
-| #define HAVE_INTTYPES_H 1
-| #define HAVE_STDINT_H 1
-| #define HAVE_STRINGS_H 1
-| #define HAVE_SYS_STAT_H 1
-| #define HAVE_SYS_TYPES_H 1
-| #define HAVE_UNISTD_H 1
-| #define HAVE_WCHAR_H 1
-| #define STDC_HEADERS 1
-| #define _ALL_SOURCE 1
-| #define _COSMO_SOURCE 1
-| #define _DARWIN_C_SOURCE 1
-| #define _GNU_SOURCE 1
-| #define _HPUX_ALT_XOPEN_SOCKET_API 1
-| #define _NETBSD_SOURCE 1
-| #define _OPENBSD_SOURCE 1
-| #define _POSIX_PTHREAD_SEMANTICS 1
-| #define __STDC_WANT_IEC_60559_ATTRIBS_EXT__ 1
-| #define __STDC_WANT_IEC_60559_BFP_EXT__ 1
-| #define __STDC_WANT_IEC_60559_DFP_EXT__ 1
-| #define __STDC_WANT_IEC_60559_EXT__ 1
-| #define __STDC_WANT_IEC_60559_FUNCS_EXT__ 1
-| #define __STDC_WANT_IEC_60559_TYPES_EXT__ 1
-| #define __STDC_WANT_LIB_EXT2__ 1
-| #define __STDC_WANT_MATH_SPEC_FUNCS__ 1
-| #define _TANDEM_SOURCE 1
-| #define __EXTENSIONS__ 1
-| #define PACKAGE "libXext"
-| #define VERSION "1.3.7"
-| #define HAVE_DLFCN_H 1
-| #define LT_OBJDIR ".libs/"
-| /* end confdefs.h.  */
-| #if ! (defined __APPLE__ && defined __MACH__)
-| 	   #error "-Werror=unguarded-availability-new not needed here"
-| 	  #endif
-| 
-| int
-| main (void)
-| {
-| 
-|   ;
-|   return 0;
-| }
-configure:14309: result: none needed
-configure:14322: checking whether __clang__ is declared
-configure:14322: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h  --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:14322: $? = 0
-configure:14322: result: yes
-configure:14330: checking whether __INTEL_COMPILER is declared
-configure:14330: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h  --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-conftest.c:77:10: error: use of undeclared identifier '__INTEL_COMPILER'
-   77 |   (void) __INTEL_COMPILER;
-      |          ^
-1 error generated.
-configure:14330: $? = 1
-configure: failed program was:
-| /* confdefs.h */
-| #define PACKAGE_NAME "libXext"
-| #define PACKAGE_TARNAME "libXext"
-| #define PACKAGE_VERSION "1.3.7"
-| #define PACKAGE_STRING "libXext 1.3.7"
-| #define PACKAGE_BUGREPORT "https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues"
-| #define PACKAGE_URL ""
-| #define HAVE_STDIO_H 1
-| #define HAVE_STDLIB_H 1
-| #define HAVE_STRING_H 1
-| #define HAVE_INTTYPES_H 1
-| #define HAVE_STDINT_H 1
-| #define HAVE_STRINGS_H 1
-| #define HAVE_SYS_STAT_H 1
-| #define HAVE_SYS_TYPES_H 1
-| #define HAVE_UNISTD_H 1
-| #define HAVE_WCHAR_H 1
-| #define STDC_HEADERS 1
-| #define _ALL_SOURCE 1
-| #define _COSMO_SOURCE 1
-| #define _DARWIN_C_SOURCE 1
-| #define _GNU_SOURCE 1
-| #define _HPUX_ALT_XOPEN_SOCKET_API 1
-| #define _NETBSD_SOURCE 1
-| #define _OPENBSD_SOURCE 1
-| #define _POSIX_PTHREAD_SEMANTICS 1
-| #define __STDC_WANT_IEC_60559_ATTRIBS_EXT__ 1
-| #define __STDC_WANT_IEC_60559_BFP_EXT__ 1
-| #define __STDC_WANT_IEC_60559_DFP_EXT__ 1
-| #define __STDC_WANT_IEC_60559_EXT__ 1
-| #define __STDC_WANT_IEC_60559_FUNCS_EXT__ 1
-| #define __STDC_WANT_IEC_60559_TYPES_EXT__ 1
-| #define __STDC_WANT_LIB_EXT2__ 1
-| #define __STDC_WANT_MATH_SPEC_FUNCS__ 1
-| #define _TANDEM_SOURCE 1
-| #define __EXTENSIONS__ 1
-| #define PACKAGE "libXext"
-| #define VERSION "1.3.7"
-| #define HAVE_DLFCN_H 1
-| #define LT_OBJDIR ".libs/"
-| /* end confdefs.h.  */
-| #include <stddef.h>
-| #ifdef HAVE_STDIO_H
-| # include <stdio.h>
-| #endif
-| #ifdef HAVE_STDLIB_H
-| # include <stdlib.h>
-| #endif
-| #ifdef HAVE_STRING_H
-| # include <string.h>
-| #endif
-| #ifdef HAVE_INTTYPES_H
-| # include <inttypes.h>
-| #endif
-| #ifdef HAVE_STDINT_H
-| # include <stdint.h>
-| #endif
-| #ifdef HAVE_STRINGS_H
-| # include <strings.h>
-| #endif
-| #ifdef HAVE_SYS_TYPES_H
-| # include <sys/types.h>
-| #endif
-| #ifdef HAVE_SYS_STAT_H
-| # include <sys/stat.h>
-| #endif
-| #ifdef HAVE_UNISTD_H
-| # include <unistd.h>
-| #endif
-| int
-| main (void)
-| {
-| #ifndef __INTEL_COMPILER
-| #ifdef __cplusplus
-|   (void) __INTEL_COMPILER;
-| #else
-|   (void) __INTEL_COMPILER;
-| #endif
-| #endif
-| 
-|   ;
-|   return 0;
-| }
-configure:14330: result: no
-configure:14338: checking whether __SUNPRO_C is declared
-configure:14338: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h  --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-conftest.c:77:10: error: use of undeclared identifier '__SUNPRO_C'
-   77 |   (void) __SUNPRO_C;
-      |          ^
-1 error generated.
-configure:14338: $? = 1
-configure: failed program was:
-| /* confdefs.h */
-| #define PACKAGE_NAME "libXext"
-| #define PACKAGE_TARNAME "libXext"
-| #define PACKAGE_VERSION "1.3.7"
-| #define PACKAGE_STRING "libXext 1.3.7"
-| #define PACKAGE_BUGREPORT "https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues"
-| #define PACKAGE_URL ""
-| #define HAVE_STDIO_H 1
-| #define HAVE_STDLIB_H 1
-| #define HAVE_STRING_H 1
-| #define HAVE_INTTYPES_H 1
-| #define HAVE_STDINT_H 1
-| #define HAVE_STRINGS_H 1
-| #define HAVE_SYS_STAT_H 1
-| #define HAVE_SYS_TYPES_H 1
-| #define HAVE_UNISTD_H 1
-| #define HAVE_WCHAR_H 1
-| #define STDC_HEADERS 1
-| #define _ALL_SOURCE 1
-| #define _COSMO_SOURCE 1
-| #define _DARWIN_C_SOURCE 1
-| #define _GNU_SOURCE 1
-| #define _HPUX_ALT_XOPEN_SOCKET_API 1
-| #define _NETBSD_SOURCE 1
-| #define _OPENBSD_SOURCE 1
-| #define _POSIX_PTHREAD_SEMANTICS 1
-| #define __STDC_WANT_IEC_60559_ATTRIBS_EXT__ 1
-| #define __STDC_WANT_IEC_60559_BFP_EXT__ 1
-| #define __STDC_WANT_IEC_60559_DFP_EXT__ 1
-| #define __STDC_WANT_IEC_60559_EXT__ 1
-| #define __STDC_WANT_IEC_60559_FUNCS_EXT__ 1
-| #define __STDC_WANT_IEC_60559_TYPES_EXT__ 1
-| #define __STDC_WANT_LIB_EXT2__ 1
-| #define __STDC_WANT_MATH_SPEC_FUNCS__ 1
-| #define _TANDEM_SOURCE 1
-| #define __EXTENSIONS__ 1
-| #define PACKAGE "libXext"
-| #define VERSION "1.3.7"
-| #define HAVE_DLFCN_H 1
-| #define LT_OBJDIR ".libs/"
-| /* end confdefs.h.  */
-| #include <stddef.h>
-| #ifdef HAVE_STDIO_H
-| # include <stdio.h>
-| #endif
-| #ifdef HAVE_STDLIB_H
-| # include <stdlib.h>
-| #endif
-| #ifdef HAVE_STRING_H
-| # include <string.h>
-| #endif
-| #ifdef HAVE_INTTYPES_H
-| # include <inttypes.h>
-| #endif
-| #ifdef HAVE_STDINT_H
-| # include <stdint.h>
-| #endif
-| #ifdef HAVE_STRINGS_H
-| # include <strings.h>
-| #endif
-| #ifdef HAVE_SYS_TYPES_H
-| # include <sys/types.h>
-| #endif
-| #ifdef HAVE_SYS_STAT_H
-| # include <sys/stat.h>
-| #endif
-| #ifdef HAVE_UNISTD_H
-| # include <unistd.h>
-| #endif
-| int
-| main (void)
-| {
-| #ifndef __SUNPRO_C
-| #ifdef __cplusplus
-|   (void) __SUNPRO_C;
-| #else
-|   (void) __SUNPRO_C;
-| #endif
-| #endif
-| 
-|   ;
-|   return 0;
-| }
-configure:14338: result: no
-configure:14358: checking for wasm32-wasi-pkg-config
-configure:14397: result: no
-configure:14407: checking for pkg-config
-configure:14430: found /usr/bin/pkg-config
-configure:14443: result: /usr/bin/pkg-config
-configure:14468: checking pkg-config is at least version 0.9.0
-configure:14471: result: yes
-configure:14522: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=unknown-warning-option
-configure:14532: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:14532: $? = 0
-configure:14542: result: yes
-configure:14553: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=unused-command-line-argument
-configure:14563: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -c --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include conftest.c >&5
-configure:14563: $? = 0
-configure:14573: result: yes
-configure:14592: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wall
-configure:14610: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wall --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:14610: $? = 0
-configure:14626: result: yes
-configure:14722: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wpointer-arith
-configure:14740: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wpointer-arith --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:14740: $? = 0
-configure:14756: result: yes
-configure:14852: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wmissing-declarations
-configure:14870: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wmissing-declarations --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:14870: $? = 0
-configure:14886: result: yes
-configure:14982: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wformat=2
-configure:15000: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wformat=2 --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:15000: $? = 0
-configure:15016: result: yes
-configure:15167: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wstrict-prototypes
-configure:15185: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wstrict-prototypes --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:15185: $? = 0
-configure:15201: result: yes
-configure:15297: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wmissing-prototypes
-configure:15315: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wmissing-prototypes --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:15315: $? = 0
-configure:15331: result: yes
-configure:15427: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wnested-externs
-configure:15445: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wnested-externs --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:15445: $? = 0
-configure:15461: result: yes
-configure:15557: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wbad-function-cast
-configure:15575: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wbad-function-cast --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:15575: $? = 0
-configure:15591: result: yes
-configure:15687: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wold-style-definition
-configure:15705: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wold-style-definition --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:15705: $? = 0
-configure:15721: result: yes
-configure:15874: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wunused
-configure:15892: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wunused --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:15892: $? = 0
-configure:15908: result: yes
-configure:16004: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wuninitialized
-configure:16022: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wuninitialized --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:16022: $? = 0
-configure:16038: result: yes
-configure:16134: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wshadow
-configure:16152: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wshadow --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:16152: $? = 0
-configure:16168: result: yes
-configure:16264: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wmissing-noreturn
-configure:16282: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wmissing-noreturn --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:16282: $? = 0
-configure:16298: result: yes
-configure:16394: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wmissing-format-attribute
-configure:16412: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wmissing-format-attribute --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:16412: $? = 0
-configure:16428: result: yes
-configure:16524: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wredundant-decls
-configure:16542: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wredundant-decls --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:16542: $? = 0
-configure:16558: result: yes
-configure:16654: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Wlogical-op
-configure:16672: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Wlogical-op --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-error: unknown warning option '-Wlogical-op'; did you mean '-Wlong-long'? [-Werror,-Wunknown-warning-option]
-configure:16672: $? = 1
-configure: failed program was:
-| /* confdefs.h */
-| #define PACKAGE_NAME "libXext"
-| #define PACKAGE_TARNAME "libXext"
-| #define PACKAGE_VERSION "1.3.7"
-| #define PACKAGE_STRING "libXext 1.3.7"
-| #define PACKAGE_BUGREPORT "https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues"
-| #define PACKAGE_URL ""
-| #define HAVE_STDIO_H 1
-| #define HAVE_STDLIB_H 1
-| #define HAVE_STRING_H 1
-| #define HAVE_INTTYPES_H 1
-| #define HAVE_STDINT_H 1
-| #define HAVE_STRINGS_H 1
-| #define HAVE_SYS_STAT_H 1
-| #define HAVE_SYS_TYPES_H 1
-| #define HAVE_UNISTD_H 1
-| #define HAVE_WCHAR_H 1
-| #define STDC_HEADERS 1
-| #define _ALL_SOURCE 1
-| #define _COSMO_SOURCE 1
-| #define _DARWIN_C_SOURCE 1
-| #define _GNU_SOURCE 1
-| #define _HPUX_ALT_XOPEN_SOCKET_API 1
-| #define _NETBSD_SOURCE 1
-| #define _OPENBSD_SOURCE 1
-| #define _POSIX_PTHREAD_SEMANTICS 1
-| #define __STDC_WANT_IEC_60559_ATTRIBS_EXT__ 1
-| #define __STDC_WANT_IEC_60559_BFP_EXT__ 1
-| #define __STDC_WANT_IEC_60559_DFP_EXT__ 1
-| #define __STDC_WANT_IEC_60559_EXT__ 1
-| #define __STDC_WANT_IEC_60559_FUNCS_EXT__ 1
-| #define __STDC_WANT_IEC_60559_TYPES_EXT__ 1
-| #define __STDC_WANT_LIB_EXT2__ 1
-| #define __STDC_WANT_MATH_SPEC_FUNCS__ 1
-| #define _TANDEM_SOURCE 1
-| #define __EXTENSIONS__ 1
-| #define PACKAGE "libXext"
-| #define VERSION "1.3.7"
-| #define HAVE_DLFCN_H 1
-| #define LT_OBJDIR ".libs/"
-| /* end confdefs.h.  */
-| int i;
-| int
-| main (void)
-| {
-| 
-|   ;
-|   return 0;
-| }
-configure:16688: result: no
-configure:16796: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=implicit
-configure:16814: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=implicit --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:16814: $? = 0
-configure:16830: result: yes
-configure:16979: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=nonnull
-configure:16997: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=nonnull --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:16997: $? = 0
-configure:17013: result: yes
-configure:17109: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=init-self
-configure:17127: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=init-self --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:17127: $? = 0
-configure:17143: result: yes
-configure:17239: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=main
-configure:17257: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=main --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:17257: $? = 0
-configure:17273: result: yes
-configure:17369: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=missing-braces
-configure:17387: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=missing-braces --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:17387: $? = 0
-configure:17403: result: yes
-configure:17499: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=sequence-point
-configure:17517: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=sequence-point --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:17517: $? = 0
-configure:17533: result: yes
-configure:17629: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=return-type
-configure:17647: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=return-type --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:17647: $? = 0
-configure:17663: result: yes
-configure:17812: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=trigraphs
-configure:17830: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=trigraphs --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:17830: $? = 0
-configure:17846: result: yes
-configure:17942: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=array-bounds
-configure:17960: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=array-bounds --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:17960: $? = 0
-configure:17976: result: yes
-configure:18072: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=write-strings
-configure:18090: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=write-strings --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:18090: $? = 0
-configure:18106: result: yes
-configure:18202: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=address
-configure:18220: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=address --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:18220: $? = 0
-configure:18236: result: yes
-configure:18332: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=int-to-pointer-cast
-configure:18350: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=int-to-pointer-cast --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:18350: $? = 0
-configure:18366: result: yes
-configure:18515: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=pointer-to-int-cast
-configure:18533: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=pointer-to-int-cast --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:18533: $? = 0
-configure:18549: result: yes
-configure:20373: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -pedantic
-configure:20391: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -pedantic --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:20391: $? = 0
-configure:20407: result: yes
-configure:20503: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror
-configure:20521: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:20521: $? = 0
-configure:20537: result: yes
-configure:20689: checking if /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 supports -Werror=attributes
-configure:20707: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h -Werror=unknown-warning-option -Werror=unused-command-line-argument -Werror=attributes --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-configure:20707: $? = 0
-configure:20723: result: yes
-configure:20932: checking whether to build functional specifications
-configure:20934: result: no
-configure:21305: checking for xsltproc
-configure:21328: found /home/linuxbrew/.linuxbrew/bin/xsltproc
-configure:21341: result: /home/linuxbrew/.linuxbrew/bin/xsltproc
-configure:21427: checking for X.Org SGML entities >= 1.8
-configure:21431: $PKG_CONFIG --exists --print-errors "xorg-sgml-doctools >= 1.8"
-Package xorg-sgml-doctools was not found in the pkg-config search path.
-Perhaps you should add the directory containing `xorg-sgml-doctools.pc'
-to the PKG_CONFIG_PATH environment variable
-Package 'xorg-sgml-doctools', required by 'virtual:world', not found
-configure:21434: $? = 1
-configure:21450: result: no
-configure:21477: checking whether to act as if malloc(0) can return NULL
-configure:21479: result: yes
-configure:21511: checking for xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99
-configure:21518: $PKG_CONFIG --exists --print-errors "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99"
-configure:21521: $? = 0
-configure:21535: $PKG_CONFIG --exists --print-errors "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99"
-configure:21538: $? = 0
-configure:21596: result: yes
-configure:21604: checking for __builtin_popcountl
-configure:21624: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-conftest.c:50:13: warning: ignoring return value of function declared with const attribute [-Wunused-value]
-   50 |             __builtin_popcountl(0)
-      |             ^~~~~~~~~~~~~~~~~~~ ~
-1 warning generated.
-configure:21624: $? = 0
-configure:21636: result: yes
-configure:21648: checking for reallocarray
-configure:21648: /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23 -o conftest --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman conftest.c  >&5
-wasm-ld: warning: function signature mismatch: reallocarray
->>> defined as () -> i32 in /tmp/conftest-31e02f.o
->>> defined as (i32, i32, i32) -> i32 in /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1/libc.a(reallocarray.o)
-configure:21648: $? = 0
-configure:21648: result: yes
-configure:21881: checking that generated files are newer than configure
-configure:21887: result: done
-configure:21962: creating ./config.status
-
-## ---------------------- ##
-## Running config.status. ##
-## ---------------------- ##
-
-This file was extended by libXext config.status 1.3.7, which was
-generated by GNU Autoconf 2.73.  Invocation command line was
-
-  CONFIG_FILES    = 
-  CONFIG_HEADERS  = 
-  CONFIG_LINKS    = 
-  CONFIG_COMMANDS = 
-  $ ./config.status 
-
-on nathan-dev
-
-config.status:1167: creating Makefile
-config.status:1167: creating man/Makefile
-config.status:1167: creating src/Makefile
-config.status:1167: creating specs/Makefile
-config.status:1167: creating xext.pc
-config.status:1167: creating config.h
-config.status:1396: executing depfiles commands
-config.status:1473: cd src       && sed -e '/# am--include-marker/d' Makefile         | make -f - am--depfiles
-config.status:1478: $? = 0
-config.status:1396: executing libtool commands
-
-## ---------------- ##
-## Cache variables. ##
-## ---------------- ##
-
-ac_cv_build=x86_64-pc-linux-gnu
-ac_cv_c_compiler_gnu=yes
-ac_cv_c_future_darwin_options='none needed'
-ac_cv_c_undeclared_builtin_options='none needed'
-ac_cv_env_CC_set=set
-ac_cv_env_CC_value=/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang
-ac_cv_env_CFLAGS_set=set
-ac_cv_env_CFLAGS_value='--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h'
-ac_cv_env_CPPFLAGS_set=set
-ac_cv_env_CPPFLAGS_value='--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include'
-ac_cv_env_FOP_set=
-ac_cv_env_FOP_value=
-ac_cv_env_LDFLAGS_set=set
-ac_cv_env_LDFLAGS_value='--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman'
-ac_cv_env_LIBS_set=
-ac_cv_env_LIBS_value=
-ac_cv_env_LINT_FLAGS_set=
-ac_cv_env_LINT_FLAGS_value=
-ac_cv_env_LINT_set=
-ac_cv_env_LINT_value=
-ac_cv_env_LT_SYS_LIBRARY_PATH_set=
-ac_cv_env_LT_SYS_LIBRARY_PATH_value=
-ac_cv_env_PKG_CONFIG_LIBDIR_set=set
-ac_cv_env_PKG_CONFIG_LIBDIR_value=/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/pkgconfig
-ac_cv_env_PKG_CONFIG_PATH_set=
-ac_cv_env_PKG_CONFIG_PATH_value=
-ac_cv_env_PKG_CONFIG_set=
-ac_cv_env_PKG_CONFIG_value=
-ac_cv_env_XEXT_CFLAGS_set=
-ac_cv_env_XEXT_CFLAGS_value=
-ac_cv_env_XEXT_LIBS_set=
-ac_cv_env_XEXT_LIBS_value=
-ac_cv_env_XMLTO_set=
-ac_cv_env_XMLTO_value=
-ac_cv_env_XSLTPROC_set=
-ac_cv_env_XSLTPROC_value=
-ac_cv_env_build_alias_set=
-ac_cv_env_build_alias_value=
-ac_cv_env_host_alias_set=set
-ac_cv_env_host_alias_value=wasm32-wasi
-ac_cv_env_target_alias_set=
-ac_cv_env_target_alias_value=
-ac_cv_func_reallocarray=yes
-ac_cv_have_decl___INTEL_COMPILER=no
-ac_cv_have_decl___SUNPRO_C=no
-ac_cv_have_decl___clang__=yes
-ac_cv_header_dlfcn_h=yes
-ac_cv_header_inttypes_h=yes
-ac_cv_header_minix_config_h=no
-ac_cv_header_stdint_h=yes
-ac_cv_header_stdio_h=yes
-ac_cv_header_stdlib_h=yes
-ac_cv_header_string_h=yes
-ac_cv_header_strings_h=yes
-ac_cv_header_sys_stat_h=yes
-ac_cv_header_sys_types_h=yes
-ac_cv_header_unistd_h=yes
-ac_cv_header_wchar_h=yes
-ac_cv_host=wasm32-unknown-wasi
-ac_cv_objext=o
-ac_cv_path_EGREP='/usr/bin/grep -E'
-ac_cv_path_EGREP_TRADITIONAL='/usr/bin/grep -E'
-ac_cv_path_FGREP='/usr/bin/grep -F'
-ac_cv_path_GREP=/usr/bin/grep
-ac_cv_path_SED=/usr/bin/sed
-ac_cv_path_XSLTPROC=/home/linuxbrew/.linuxbrew/bin/xsltproc
-ac_cv_path_ac_pt_PKG_CONFIG=/usr/bin/pkg-config
-ac_cv_path_install='/usr/bin/install -c'
-ac_cv_path_lt_DD=/usr/bin/dd
-ac_cv_path_mkdir=/usr/bin/mkdir
-ac_cv_prog_AR=/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ar
-ac_cv_prog_AWK=mawk
-ac_cv_prog_CC=/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang
-ac_cv_prog_FILECMD=file
-ac_cv_prog_RANLIB=/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ranlib
-ac_cv_prog_STRIP=strip
-ac_cv_prog_ac_ct_DLLTOOL=dlltool
-ac_cv_prog_ac_ct_DUMPBIN='link -dump'
-ac_cv_prog_ac_ct_MANIFEST_TOOL=mt
-ac_cv_prog_ac_ct_OBJDUMP=objdump
-ac_cv_prog_ac_ct_STRIP=strip
-ac_cv_prog_cc_c23=-std=gnu23
-ac_cv_prog_cc_g=yes
-ac_cv_prog_cc_stdc=-std=gnu23
-ac_cv_prog_make_make_set=yes
-ac_cv_safe_to_define___extensions__=yes
-ac_cv_should_define__xopen_source=no
-am_cv_CC_dependencies_compiler_type=gcc3
-am_cv_filesystem_timestamp_resolution=0.01
-am_cv_make_support_nested_variables=yes
-am_cv_prog_cc_c_o=yes
-am_cv_prog_tar_ustar=gnutar
-am_cv_sleep_fractional_seconds=yes
-am_cv_xargs_n_works=yes
-ax_cv_have___builtin_popcountl=yes
-lt_cv_ar_at_file=@
-lt_cv_deplibs_check_method=unknown
-lt_cv_file_magic_cmd='$MAGIC_CMD'
-lt_cv_file_magic_test_file=
-lt_cv_ld_reload_flag=-r
-lt_cv_nm_interface='BSD nm'
-lt_cv_objdir=.libs
-lt_cv_path_LD=/home/linuxbrew/.linuxbrew/bin/ld
-lt_cv_path_NM=no
-lt_cv_path_manifest_tool=no
-lt_cv_prog_compiler_c_o=yes
-lt_cv_prog_compiler_pic='-fPIC -DPIC'
-lt_cv_prog_compiler_pic_works=yes
-lt_cv_prog_compiler_rtti_exceptions=yes
-lt_cv_prog_compiler_static_works=yes
-lt_cv_prog_gnu_ld=yes
-lt_cv_sharedlib_from_linklib_cmd='printf %s\n'
-lt_cv_sys_global_symbol_pipe=
-lt_cv_sys_global_symbol_to_c_name_address='/usr/bin/sed -n -e '\''s/^: \(.*\) .*$/  {"\1", (void *) 0},/p'\'' -e '\''s/^[ABCDGIRSTW][ABCDGIRSTW]* .* \(.*\)$/  {"\1", (void *) \&\1},/p'\'''
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='/usr/bin/sed -n -e '\''s/^: \(.*\) .*$/  {"\1", (void *) 0},/p'\'' -e '\''s/^[ABCDGIRSTW][ABCDGIRSTW]* .* \(lib.*\)$/  {"\1", (void *) \&\1},/p'\'' -e '\''s/^[ABCDGIRSTW][ABCDGIRSTW]* .* \(.*\)$/  {"lib\1", (void *) \&\1},/p'\'''
-lt_cv_sys_global_symbol_to_cdecl=
-lt_cv_sys_global_symbol_to_import=
-lt_cv_sys_max_cmd_len=1572864
-lt_cv_to_host_file_cmd=func_convert_file_noop
-lt_cv_to_tool_file_cmd=func_convert_file_noop
-lt_cv_truncate_bin='/usr/bin/dd bs=4096 count=1'
-pkg_cv_XEXT_CFLAGS='-I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include '
-pkg_cv_XEXT_LIBS='-L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -lX11 '
-xorg_cv_cc_flag__Wall=yes
-xorg_cv_cc_flag__Wbad_function_cast=yes
-xorg_cv_cc_flag__Werror=yes
-xorg_cv_cc_flag__Werror_address=yes
-xorg_cv_cc_flag__Werror_array_bounds=yes
-xorg_cv_cc_flag__Werror_attributes=yes
-xorg_cv_cc_flag__Werror_implicit=yes
-xorg_cv_cc_flag__Werror_init_self=yes
-xorg_cv_cc_flag__Werror_int_to_pointer_cast=yes
-xorg_cv_cc_flag__Werror_main=yes
-xorg_cv_cc_flag__Werror_missing_braces=yes
-xorg_cv_cc_flag__Werror_nonnull=yes
-xorg_cv_cc_flag__Werror_pointer_to_int_cast=yes
-xorg_cv_cc_flag__Werror_return_type=yes
-xorg_cv_cc_flag__Werror_sequence_point=yes
-xorg_cv_cc_flag__Werror_trigraphs=yes
-xorg_cv_cc_flag__Werror_write_strings=yes
-xorg_cv_cc_flag__Wformat_2=yes
-xorg_cv_cc_flag__Wlogical_op=no
-xorg_cv_cc_flag__Wmissing_declarations=yes
-xorg_cv_cc_flag__Wmissing_format_attribute=yes
-xorg_cv_cc_flag__Wmissing_noreturn=yes
-xorg_cv_cc_flag__Wmissing_prototypes=yes
-xorg_cv_cc_flag__Wnested_externs=yes
-xorg_cv_cc_flag__Wold_style_definition=yes
-xorg_cv_cc_flag__Wpointer_arith=yes
-xorg_cv_cc_flag__Wredundant_decls=yes
-xorg_cv_cc_flag__Wshadow=yes
-xorg_cv_cc_flag__Wstrict_prototypes=yes
-xorg_cv_cc_flag__Wuninitialized=yes
-xorg_cv_cc_flag__Wunused=yes
-xorg_cv_cc_flag__pedantic=yes
-xorg_cv_cc_flag_unknown_warning_option=yes
-xorg_cv_cc_flag_unused_command_line_argument=yes
-
-## ----------------- ##
-## Output variables. ##
-## ----------------- ##
-
-ACLOCAL='${SHELL} '\''/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing'\'' aclocal-1.18'
-ADMIN_MAN_DIR='$(mandir)/man$(ADMIN_MAN_SUFFIX)'
-ADMIN_MAN_SUFFIX='8'
-AMDEPBACKSLASH='\'
-AMDEP_FALSE='#'
-AMDEP_TRUE=''
-AMTAR='$${TAR-tar}'
-AM_BACKSLASH='\'
-AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-AM_DEFAULT_VERBOSITY='0'
-AM_V='$(V)'
-APP_MAN_DIR='$(mandir)/man$(APP_MAN_SUFFIX)'
-APP_MAN_SUFFIX='1'
-AR='/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ar'
-AUTOCONF='${SHELL} '\''/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing'\'' autoconf'
-AUTOHEADER='${SHELL} '\''/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing'\'' autoheader'
-AUTOMAKE='${SHELL} '\''/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing'\'' automake-1.18'
-AWK='mawk'
-BASE_CFLAGS=' -Wall -Wpointer-arith -Wmissing-declarations -Wformat=2 -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Wbad-function-cast -Wold-style-definition -Wunused -Wuninitialized -Wshadow -Wmissing-noreturn -Wmissing-format-attribute -Wredundant-decls -Werror=implicit -Werror=nonnull -Werror=init-self -Werror=main -Werror=missing-braces -Werror=sequence-point -Werror=return-type -Werror=trigraphs -Werror=array-bounds -Werror=write-strings -Werror=address -Werror=int-to-pointer-cast -Werror=pointer-to-int-cast'
-CC='/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23'
-CCDEPMODE='depmode=gcc3'
-CFLAGS='--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h'
-CHANGELOG_CMD='((GIT_DIR=$(top_srcdir)/.git git log > $(top_srcdir)/.changelog.tmp) 2>/dev/null && mv $(top_srcdir)/.changelog.tmp $(top_srcdir)/ChangeLog) || (rm -f $(top_srcdir)/.changelog.tmp; test -e $(top_srcdir)/ChangeLog || ( touch $(top_srcdir)/ChangeLog; echo '\''git failed to create ChangeLog: installing empty ChangeLog.'\'' >&2))'
-CPPFLAGS='--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include'
-CSCOPE='cscope'
-CTAGS='ctags'
-CWARNFLAGS=' -Wall -Wpointer-arith -Wmissing-declarations -Wformat=2 -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Wbad-function-cast -Wold-style-definition -Wunused -Wuninitialized -Wshadow -Wmissing-noreturn -Wmissing-format-attribute -Wredundant-decls -Werror=implicit -Werror=nonnull -Werror=init-self -Werror=main -Werror=missing-braces -Werror=sequence-point -Werror=return-type -Werror=trigraphs -Werror=array-bounds -Werror=write-strings -Werror=address -Werror=int-to-pointer-cast -Werror=pointer-to-int-cast -fno-strict-aliasing'
-CYGPATH_W='echo'
-DEFS='-DHAVE_CONFIG_H'
-DEPDIR='.deps'
-DLLTOOL='dlltool'
-DRIVER_MAN_DIR='$(mandir)/man$(DRIVER_MAN_SUFFIX)'
-DRIVER_MAN_SUFFIX='4'
-DSYMUTIL=''
-DUMPBIN=':'
-ECHO_C=''
-ECHO_N='-n'
-ECHO_T=''
-EGREP='/usr/bin/grep -E'
-ENABLE_SPECS_FALSE=''
-ENABLE_SPECS_TRUE='#'
-ETAGS='etags'
-EXEEXT=''
-FGREP='/usr/bin/grep -F'
-FILECMD='file'
-FILE_MAN_DIR='$(mandir)/man$(FILE_MAN_SUFFIX)'
-FILE_MAN_SUFFIX='5'
-FOP=''
-GREP='/usr/bin/grep'
-HAVE_FOP_FALSE=''
-HAVE_FOP_TRUE='#'
-HAVE_STYLESHEETS_FALSE=''
-HAVE_STYLESHEETS_TRUE='#'
-HAVE_XMLTO_FALSE=''
-HAVE_XMLTO_TEXT_FALSE=''
-HAVE_XMLTO_TEXT_TRUE='#'
-HAVE_XMLTO_TRUE='#'
-HAVE_XSLTPROC_FALSE='#'
-HAVE_XSLTPROC_TRUE=''
-INSTALL_CMD='(cp -f /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/util-macros/INSTALL $(top_srcdir)/.INSTALL.tmp && mv $(top_srcdir)/.INSTALL.tmp $(top_srcdir)/INSTALL) || (rm -f $(top_srcdir)/.INSTALL.tmp; test -e $(top_srcdir)/INSTALL || ( touch $(top_srcdir)/INSTALL; echo '\''failed to copy INSTALL from util-macros: installing empty INSTALL.'\'' >&2))'
-INSTALL_DATA='${INSTALL} -m 644'
-INSTALL_PROGRAM='${INSTALL}'
-INSTALL_SCRIPT='${INSTALL}'
-INSTALL_STRIP_PROGRAM='$(install_sh) -c -s'
-LD='/home/linuxbrew/.linuxbrew/bin/ld'
-LDFLAGS='--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman'
-LIBOBJS=''
-LIBS=''
-LIBTOOL='$(SHELL) $(top_builddir)/libtool'
-LIB_MAN_DIR='$(mandir)/man$(LIB_MAN_SUFFIX)'
-LIB_MAN_SUFFIX='3'
-LINT=''
-LINTLIB=''
-LINT_FALSE=''
-LINT_FLAGS=''
-LINT_TRUE='#'
-LIPO=''
-LN_S='ln -s'
-LTLIBOBJS=''
-LT_SYS_LIBRARY_PATH=''
-MAKEINFO='${SHELL} '\''/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing'\'' makeinfo'
-MAKE_LINT_LIB_FALSE=''
-MAKE_LINT_LIB_TRUE='#'
-MALLOC_ZERO_CFLAGS='-DMALLOC_0_RETURNS_NULL'
-MANIFEST_TOOL=':'
-MAN_SUBSTS='	-e '\''s|__vendorversion__|"$(PACKAGE_STRING)" "$(XORG_MAN_PAGE)"|'\'' 	-e '\''s|__xorgversion__|"$(PACKAGE_STRING)" "$(XORG_MAN_PAGE)"|'\'' 	-e '\''s|__xservername__|Xorg|g'\'' 	-e '\''s|__xconfigfile__|xorg.conf|g'\'' 	-e '\''s|__projectroot__|$(prefix)|g'\'' 	-e '\''s|__apploaddir__|$(appdefaultdir)|g'\'' 	-e '\''s|__appmansuffix__|$(APP_MAN_SUFFIX)|g'\'' 	-e '\''s|__drivermansuffix__|$(DRIVER_MAN_SUFFIX)|g'\'' 	-e '\''s|__adminmansuffix__|$(ADMIN_MAN_SUFFIX)|g'\'' 	-e '\''s|__libmansuffix__|$(LIB_MAN_SUFFIX)|g'\'' 	-e '\''s|__miscmansuffix__|$(MISC_MAN_SUFFIX)|g'\'' 	-e '\''s|__filemansuffix__|$(FILE_MAN_SUFFIX)|g'\'''
-MISC_MAN_DIR='$(mandir)/man$(MISC_MAN_SUFFIX)'
-MISC_MAN_SUFFIX='7'
-MKDIR_P='/usr/bin/mkdir -p'
-NM='nm'
-NMEDIT=''
-OBJDUMP='objdump'
-OBJEXT='o'
-OTOOL64=''
-OTOOL=''
-PACKAGE='libXext'
-PACKAGE_BUGREPORT='https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues'
-PACKAGE_NAME='libXext'
-PACKAGE_STRING='libXext 1.3.7'
-PACKAGE_TARNAME='libXext'
-PACKAGE_URL=''
-PACKAGE_VERSION='1.3.7'
-PATH_SEPARATOR=':'
-PKG_CONFIG='/usr/bin/pkg-config'
-PKG_CONFIG_LIBDIR='/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/pkgconfig'
-PKG_CONFIG_PATH=''
-RANLIB='/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ranlib'
-SED='/usr/bin/sed'
-SET_MAKE=''
-SHELL='/bin/bash'
-STRICT_CFLAGS=' -pedantic -Werror -Werror=attributes'
-STRIP='strip'
-STYLESHEET_SRCDIR=''
-VERSION='1.3.7'
-XEXT_CFLAGS='-I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include '
-XEXT_LIBS='-L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -lX11 '
-XEXT_SOREV='6:4:0'
-XMALLOC_ZERO_CFLAGS='-DMALLOC_0_RETURNS_NULL'
-XMLTO=''
-XORG_MAN_PAGE='X Version 11'
-XORG_SGML_PATH=''
-XSLTPROC='/home/linuxbrew/.linuxbrew/bin/xsltproc'
-XSL_STYLESHEET=''
-XTMALLOC_ZERO_CFLAGS='-DMALLOC_0_RETURNS_NULL -DXTMALLOC_BC'
-ac_ct_AR=''
-ac_ct_CC=''
-ac_ct_DUMPBIN='link -dump'
-am__EXEEXT_FALSE=''
-am__EXEEXT_TRUE='#'
-am__fastdepCC_FALSE='#'
-am__fastdepCC_TRUE=''
-am__include='include'
-am__isrc=''
-am__leading_dot='.'
-am__nodep='_no'
-am__quote=''
-am__rm_f_notfound=''
-am__tar='tar --format=ustar -chf - "$$tardir"'
-am__untar='tar -xf -'
-am__xargs_n='xargs -n'
-bindir='${exec_prefix}/bin'
-build='x86_64-pc-linux-gnu'
-build_alias=''
-build_cpu='x86_64'
-build_os='linux-gnu'
-build_vendor='pc'
-datadir='${datarootdir}'
-datarootdir='${prefix}/share'
-docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
-dvidir='${docdir}'
-exec_prefix='${prefix}'
-host='wasm32-unknown-wasi'
-host_alias='wasm32-wasi'
-host_cpu='wasm32'
-host_os='wasi'
-host_vendor='unknown'
-htmldir='${docdir}'
-includedir='${prefix}/include'
-infodir='${datarootdir}/info'
-install_sh='${SHELL} /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/install-sh'
-libdir='${exec_prefix}/lib'
-libexecdir='${exec_prefix}/libexec'
-localedir='${datarootdir}/locale'
-localstatedir='${prefix}/var'
-mandir='${datarootdir}/man'
-mkdir_p='$(MKDIR_P)'
-oldincludedir='/usr/include'
-pdfdir='${docdir}'
-prefix='/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix'
-program_transform_name='s,x,x,'
-psdir='${docdir}'
-runstatedir='${localstatedir}/run'
-sbindir='${exec_prefix}/sbin'
-sharedstatedir='${prefix}/com'
-sysconfdir='${prefix}/etc'
-target_alias=''
-
-## ----------- ##
-## confdefs.h. ##
-## ----------- ##
-
-/* confdefs.h */
-#define PACKAGE_NAME "libXext"
-#define PACKAGE_TARNAME "libXext"
-#define PACKAGE_VERSION "1.3.7"
-#define PACKAGE_STRING "libXext 1.3.7"
-#define PACKAGE_BUGREPORT "https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues"
-#define PACKAGE_URL ""
-#define HAVE_STDIO_H 1
-#define HAVE_STDLIB_H 1
-#define HAVE_STRING_H 1
-#define HAVE_INTTYPES_H 1
-#define HAVE_STDINT_H 1
-#define HAVE_STRINGS_H 1
-#define HAVE_SYS_STAT_H 1
-#define HAVE_SYS_TYPES_H 1
-#define HAVE_UNISTD_H 1
-#define HAVE_WCHAR_H 1
-#define STDC_HEADERS 1
-#define _ALL_SOURCE 1
-#define _COSMO_SOURCE 1
-#define _DARWIN_C_SOURCE 1
-#define _GNU_SOURCE 1
-#define _HPUX_ALT_XOPEN_SOCKET_API 1
-#define _NETBSD_SOURCE 1
-#define _OPENBSD_SOURCE 1
-#define _POSIX_PTHREAD_SEMANTICS 1
-#define __STDC_WANT_IEC_60559_ATTRIBS_EXT__ 1
-#define __STDC_WANT_IEC_60559_BFP_EXT__ 1
-#define __STDC_WANT_IEC_60559_DFP_EXT__ 1
-#define __STDC_WANT_IEC_60559_EXT__ 1
-#define __STDC_WANT_IEC_60559_FUNCS_EXT__ 1
-#define __STDC_WANT_IEC_60559_TYPES_EXT__ 1
-#define __STDC_WANT_LIB_EXT2__ 1
-#define __STDC_WANT_MATH_SPEC_FUNCS__ 1
-#define _TANDEM_SOURCE 1
-#define __EXTENSIONS__ 1
-#define PACKAGE "libXext"
-#define VERSION "1.3.7"
-#define HAVE_DLFCN_H 1
-#define LT_OBJDIR ".libs/"
-#define PACKAGE_VERSION_MAJOR 1
-#define PACKAGE_VERSION_MINOR 3
-#define PACKAGE_VERSION_PATCHLEVEL 7
-#define HAVE___BUILTIN_POPCOUNTL 1
-#define HAVE_REALLOCARRAY 1
-
-configure: exit 
diff --git a/experiments/wasm-gui/third_party/libXext/config.status b/experiments/wasm-gui/third_party/libXext/config.status
deleted file mode 100755
index 0a758c30a..000000000
--- a/experiments/wasm-gui/third_party/libXext/config.status
+++ /dev/null
@@ -1,2053 +0,0 @@
-#! /bin/bash
-# Generated by configure.
-# Run this file to recreate the current configuration.
-# Compiler output produced by configure, useful for debugging
-# configure, is in config.log if it exists.
-
-debug=false
-ac_cs_recheck=false
-ac_cs_silent=false
-
-SHELL=${CONFIG_SHELL-/bin/bash}
-export SHELL
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else case e in #(
-  e) case `(set -o) 2>/dev/null` in #(
-  *posix*) :
-    set -o posix ;; #(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-
-
-
-# Reset variables that may have inherited troublesome values from
-# the environment.
-
-# IFS needs to be set, to space, tab, and newline, in precisely that order.
-# (If _AS_PATH_WALK were called with IFS unset, it would have the
-# side effect of setting IFS to empty, thus disabling word splitting.)
-# Quoting is to prevent editors from complaining about space-tab.
-as_nl='
-'
-export as_nl
-IFS=" ""	$as_nl"
-
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# Ensure predictable behavior from utilities with locale-dependent output.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# We cannot yet rely on "unset" to work, but we need these variables
-# to be unset--not just set to an empty or harmless value--now, to
-# avoid bugs in old shells (e.g. pre-3.0 UWIN ksh).  This construct
-# also avoids known problems related to "unset" and subshell syntax
-# in other old shells (e.g. bash 2.01 and pdksh 5.2.14).
-for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH
-do eval test \${$as_var+y} \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-
-# Ensure that fds 0, 1, and 2 are open.
-if (exec 3>&0) 2>/dev/null; then :; else exec 0</dev/null; fi
-if (exec 3>&1) 2>/dev/null; then :; else exec 1>/dev/null; fi
-if (exec 3>&2)            ; then :; else exec 2>/dev/null; fi
-
-# The user is always right.
-if ${PATH_SEPARATOR+false} :; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in #((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    test -r "$as_dir$0" && as_myself=$as_dir$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as 'sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  printf '%s\n' "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-
-
-# as_fn_error STATUS ERROR [LINENO LOG_FD]
-# ----------------------------------------
-# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-# script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  printf '%s\n' "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} # as_fn_error
-
-
-# as_fn_set_status STATUS
-# -----------------------
-# Set $? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} # as_fn_set_status
-
-# as_fn_exit STATUS
-# -----------------
-# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} # as_fn_exit
-
-# as_fn_unset VAR
-# ---------------
-# Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-# as_fn_append VAR VALUE
-# ----------------------
-# Append the text in VALUE to the end of the definition contained in VAR. Take
-# advantage of any shell optimizations that allow amortized linear growth over
-# repeated appends, instead of the typical quadratic growth present in naive
-# implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null
-then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else case e in #(
-  e) as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  } ;;
-esac
-fi # as_fn_append
-
-# as_fn_arith ARG...
-# ------------------
-# Perform arithmetic evaluation on the ARGs, and store the result in the
-# global $as_val. Take advantage of shells that can avoid forks. The arguments
-# must be portable across $(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null
-then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else case e in #(
-  e) as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  } ;;
-esac
-fi # as_fn_arith
-
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both 'ln -s file dir' and 'ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; 'ln -s' creates a wrapper executable.
-    # In both cases, we have to default to 'cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-
-# as_fn_mkdir_p
-# -------------
-# Create "$as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`printf '%s\n' "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} # as_fn_mkdir_p
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-
-# as_fn_executable_p FILE
-# -----------------------
-# Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} # as_fn_executable_p
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_sed_cpp="y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g"
-as_tr_cpp="eval sed '$as_sed_cpp'" # deprecated
-
-# Sed expression to map a string onto a valid variable name.
-as_sed_sh="y%*+%pp%;s%[^_$as_cr_alnum]%_%g"
-as_tr_sh="eval sed '$as_sed_sh'" # deprecated
-
-
-exec 6>&1
-## ------------------------------------- ##
-## Main body of "$CONFIG_STATUS" script. ##
-## ------------------------------------- ##
-# Save the log message, to keep $0 and so on meaningful, and to
-# report actual input values of CONFIG_FILES etc. instead of their
-# values after options handling.
-ac_log="
-This file was extended by libXext $as_me 1.3.7, which was
-generated by GNU Autoconf 2.73.  Invocation command line was
-
-  CONFIG_FILES    = $CONFIG_FILES
-  CONFIG_HEADERS  = $CONFIG_HEADERS
-  CONFIG_LINKS    = $CONFIG_LINKS
-  CONFIG_COMMANDS = $CONFIG_COMMANDS
-  $ $0 $@
-
-on `(hostname || uname -n) 2>/dev/null | sed 1q`
-"
-
-# Files that config.status was made for.
-config_files=" Makefile man/Makefile src/Makefile specs/Makefile xext.pc"
-config_headers=" config.h"
-config_commands=" depfiles libtool"
-
-ac_cs_usage="\
-'$as_me' instantiates files and other configuration actions
-from templates according to the current configuration.  Unless the files
-and actions are specified as TAGs, all are instantiated by default.
-
-Usage: $0 [OPTION]... [TAG]...
-
-  -h, --help       print this help, then exit
-  -V, --version    print version number and configuration settings, then exit
-      --config     print configuration, then exit
-  -q, --quiet, --silent
-                   do not print progress messages
-  -d, --debug      don't remove temporary files
-      --recheck    update $as_me by reconfiguring in the same conditions
-      --file=FILE[:TEMPLATE]
-                   instantiate the configuration file FILE
-      --header=FILE[:TEMPLATE]
-                   instantiate the configuration header FILE
-
-Configuration files:
-$config_files
-
-Configuration headers:
-$config_headers
-
-Configuration commands:
-$config_commands
-
-Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>."
-
-ac_cs_config='--host=wasm32-wasi --prefix=/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix --enable-static --disable-shared --disable-specs --without-xmlto --without-fop host_alias=wasm32-wasi CC=/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang '\''CFLAGS=--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h'\'' '\''LDFLAGS=--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman'\'' '\''CPPFLAGS=--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include'\'' PKG_CONFIG_LIBDIR=/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/pkgconfig'
-ac_cs_version="\
-libXext config.status 1.3.7
-configured by ./configure, generated by GNU Autoconf 2.73,
-  with options \"$ac_cs_config\"
-
-Copyright (C) 2026 Free Software Foundation, Inc.
-This config.status script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it."
-
-ac_pwd='/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext'
-srcdir='.'
-INSTALL='/usr/bin/install -c'
-MKDIR_P='/usr/bin/mkdir -p'
-AWK='mawk'
-test -n "$AWK" || {
-  awk '' </dev/null ||
-    as_fn_error $? "try installing gawk"
-  AWK=awk
-}
-# The default lists apply if the user does not specify any file.
-ac_need_defaults=:
-while test $# != 0
-do
-  case $1 in
-  --*=?*)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'`
-    ac_shift=:
-    ;;
-  --*=)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=
-    ac_shift=:
-    ;;
-  *)
-    ac_option=$1
-    ac_optarg=$2
-    ac_shift=shift
-    ;;
-  esac
-
-  case $ac_option in
-  # Handling of the options.
-  -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r)
-    ac_cs_recheck=: ;;
-  --version | --versio | --versi | --vers | --ver | --ve | --v | -V )
-    printf '%s\n' "$ac_cs_version"; exit ;;
-  --config | --confi | --conf | --con | --co | --c )
-    printf '%s\n' "$ac_cs_config"; exit ;;
-  --debug | --debu | --deb | --de | --d | -d )
-    debug=: ;;
-  --file | --fil | --fi | --f )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf '%s\n' "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    '') as_fn_error $? "missing file argument" ;;
-    esac
-    as_fn_append CONFIG_FILES " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --header | --heade | --head | --hea )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf '%s\n' "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    as_fn_append CONFIG_HEADERS " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --he | --h)
-    # Conflict between --help and --header
-    as_fn_error $? "ambiguous option: '$1'
-Try '$0 --help' for more information.";;
-  --help | --hel | -h )
-    printf '%s\n' "$ac_cs_usage"; exit ;;
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil | --si | --s)
-    ac_cs_silent=: ;;
-
-  # This is an error.
-  -*) as_fn_error $? "unrecognized option: '$1'
-Try '$0 --help' for more information." ;;
-
-  *) as_fn_append ac_config_targets " $1"
-     ac_need_defaults=false ;;
-
-  esac
-  shift
-done
-
-ac_configure_extra_args=
-
-if $ac_cs_silent; then
-  exec 6>/dev/null
-  ac_configure_extra_args="$ac_configure_extra_args --silent"
-fi
-
-if $ac_cs_recheck; then
-  set X /bin/bash './configure'  '--host=wasm32-wasi' '--prefix=/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix' '--enable-static' '--disable-shared' '--disable-specs' '--without-xmlto' '--without-fop' 'host_alias=wasm32-wasi' 'CC=/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang' 'CFLAGS=--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h' 'LDFLAGS=--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman' 'CPPFLAGS=--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include' 'PKG_CONFIG_LIBDIR=/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/pkgconfig' $ac_configure_extra_args --no-create --no-recursion
-  shift
-  \printf '%s\n' "running CONFIG_SHELL=/bin/bash $*" >&6
-  CONFIG_SHELL='/bin/bash'
-  export CONFIG_SHELL
-  exec "$@"
-fi
-
-exec 5>>config.log
-{
-  echo
-  sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX
-## Running $as_me. ##
-_ASBOX
-  printf '%s\n' "$ac_log"
-} >&5
-
-#
-# INIT-COMMANDS
-#
-AMDEP_TRUE="" MAKE="make"
-
-
-# The HP-UX ksh and POSIX shell print the target directory to stdout
-# if CDPATH is set.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-sed_quote_subst='s/\(["`$\\]\)/\\\1/g'
-double_quote_subst='s/\(["`\\]\)/\\\1/g'
-delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g'
-macro_version='2.5.4'
-macro_revision='2.5.4'
-enable_shared='no'
-enable_static='yes'
-pic_mode='default'
-enable_fast_install='needless'
-shared_archive_member_spec=''
-SHELL='/bin/bash'
-ECHO='printf %s\n'
-PATH_SEPARATOR=':'
-host_alias='wasm32-wasi'
-host='wasm32-unknown-wasi'
-host_os='wasi'
-build_alias=''
-build='x86_64-pc-linux-gnu'
-build_os='linux-gnu'
-SED='/usr/bin/sed'
-Xsed='/usr/bin/sed -e 1s/^X//'
-GREP='/usr/bin/grep'
-EGREP='/usr/bin/grep -E'
-FGREP='/usr/bin/grep -F'
-LD='/home/linuxbrew/.linuxbrew/bin/ld'
-NM='nm'
-LN_S='ln -s'
-max_cmd_len='1572864'
-ac_objext='o'
-exeext=''
-lt_unset='unset'
-lt_SP2NL='tr \040 \012'
-lt_NL2SP='tr \015\012 \040\040'
-lt_cv_to_host_file_cmd='func_convert_file_noop'
-lt_cv_to_tool_file_cmd='func_convert_file_noop'
-reload_flag=' -r'
-reload_cmds='$LD$reload_flag -o $output$reload_objs'
-FILECMD='file'
-OBJDUMP='objdump'
-deplibs_check_method='unknown'
-file_magic_cmd='$MAGIC_CMD'
-file_magic_glob=''
-want_nocaseglob='no'
-DLLTOOL='dlltool'
-sharedlib_from_linklib_cmd='printf %s\n'
-AR='/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ar'
-lt_ar_flags='cr'
-AR_FLAGS='cr'
-archiver_list_spec='@'
-STRIP='strip'
-RANLIB='/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ranlib'
-old_postinstall_cmds='chmod 644 $oldlib~$RANLIB $tool_oldlib'
-old_postuninstall_cmds=''
-old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs~$RANLIB $tool_oldlib'
-lock_old_archive_extraction='no'
-CC='/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23'
-CFLAGS='--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h'
-compiler='/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23'
-GCC='yes'
-lt_cv_sys_global_symbol_pipe=''
-lt_cv_sys_global_symbol_to_cdecl=''
-lt_cv_sys_global_symbol_to_import=''
-lt_cv_sys_global_symbol_to_c_name_address='/usr/bin/sed -n -e '\''s/^: \(.*\) .*$/  {"\1", (void *) 0},/p'\'' -e '\''s/^[ABCDGIRSTW][ABCDGIRSTW]* .* \(.*\)$/  {"\1", (void *) \&\1},/p'\'''
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='/usr/bin/sed -n -e '\''s/^: \(.*\) .*$/  {"\1", (void *) 0},/p'\'' -e '\''s/^[ABCDGIRSTW][ABCDGIRSTW]* .* \(lib.*\)$/  {"\1", (void *) \&\1},/p'\'' -e '\''s/^[ABCDGIRSTW][ABCDGIRSTW]* .* \(.*\)$/  {"lib\1", (void *) \&\1},/p'\'''
-lt_cv_nm_interface='BSD nm'
-nm_file_list_spec='@'
-lt_sysroot=''
-lt_cv_truncate_bin='/usr/bin/dd bs=4096 count=1'
-objdir='.libs'
-MAGIC_CMD='file'
-lt_prog_compiler_no_builtin_flag=' -fno-builtin -fno-rtti -fno-exceptions'
-lt_prog_compiler_pic=' -fPIC -DPIC'
-lt_prog_compiler_wl='-Wl,'
-lt_prog_compiler_static='-static'
-lt_cv_prog_compiler_c_o='yes'
-need_locks='no'
-MANIFEST_TOOL=':'
-DSYMUTIL=''
-NMEDIT=''
-LIPO=''
-OTOOL=''
-OTOOL64=''
-libext='a'
-shrext_cmds='.so'
-extract_expsyms_cmds=''
-archive_cmds_need_lc='yes'
-enable_shared_with_static_runtimes='no'
-export_dynamic_flag_spec='$wl--export-dynamic'
-whole_archive_flag_spec='$wl--whole-archive$convenience $wl--no-whole-archive'
-compiler_needs_object='no'
-old_archive_from_new_cmds=''
-old_archive_from_expsyms_cmds=''
-archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-module_cmds=''
-module_expsym_cmds=''
-with_gnu_ld='yes'
-allow_undefined_flag=''
-no_undefined_flag=''
-hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-hardcode_libdir_separator=''
-hardcode_direct='no'
-hardcode_direct_absolute='no'
-hardcode_minus_L='no'
-hardcode_shlibpath_var='unsupported'
-hardcode_automatic='no'
-inherit_rpath='no'
-link_all_deplibs='unknown'
-always_export_symbols='no'
-export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
-exclude_expsyms='_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*'
-include_expsyms=''
-prelink_cmds=''
-postlink_cmds=''
-file_list_spec=''
-variables_saved_for_relink='PATH  LD_RUN_PATH GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH'
-need_lib_prefix='unknown'
-need_version='unknown'
-version_type='none'
-runpath_var='LD_RUN_PATH'
-shlibpath_var=''
-shlibpath_overrides_runpath='unknown'
-libname_spec='lib$name'
-library_names_spec=''
-soname_spec=''
-install_override_mode=''
-postinstall_cmds=''
-postuninstall_cmds=''
-finish_cmds=''
-finish_eval=''
-hardcode_into_libs='no'
-sys_lib_search_path_spec='/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19 /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasi '
-configure_time_dlsearch_path='/lib /usr/lib'
-configure_time_lt_sys_library_path=''
-hardcode_action='immediate'
-enable_dlopen='unknown'
-enable_dlopen_self='unknown'
-enable_dlopen_self_static='unknown'
-old_striplib='strip --strip-debug'
-striplib='strip --strip-unneeded'
-
-LTCC='/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23'
-LTCFLAGS='--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h'
-compiler='/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23'
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-$1
-_LTECHO_EOF'
-}
-
-# Quote evaled strings.
-for var in SHELL ECHO PATH_SEPARATOR SED GREP EGREP FGREP LD NM LN_S lt_SP2NL lt_NL2SP reload_flag FILECMD OBJDUMP deplibs_check_method file_magic_cmd file_magic_glob want_nocaseglob DLLTOOL sharedlib_from_linklib_cmd AR archiver_list_spec STRIP RANLIB CC CFLAGS compiler lt_cv_sys_global_symbol_pipe lt_cv_sys_global_symbol_to_cdecl lt_cv_sys_global_symbol_to_import lt_cv_sys_global_symbol_to_c_name_address lt_cv_sys_global_symbol_to_c_name_address_lib_prefix lt_cv_nm_interface nm_file_list_spec lt_cv_truncate_bin lt_prog_compiler_no_builtin_flag lt_prog_compiler_pic lt_prog_compiler_wl lt_prog_compiler_static lt_cv_prog_compiler_c_o need_locks MANIFEST_TOOL DSYMUTIL NMEDIT LIPO OTOOL OTOOL64 shrext_cmds export_dynamic_flag_spec whole_archive_flag_spec compiler_needs_object with_gnu_ld allow_undefined_flag no_undefined_flag hardcode_libdir_flag_spec hardcode_libdir_separator exclude_expsyms include_expsyms file_list_spec variables_saved_for_relink libname_spec library_names_spec soname_spec install_override_mode finish_eval old_striplib striplib; do
-    case `eval \\$ECHO \\""\\$$var"\\"` in
-    *[\\\`\"\$]*)
-      eval "lt_$var=\\\"\`\$ECHO \"\$$var\" | \$SED \"\$sed_quote_subst\"\`\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_$var=\\\"\$$var\\\""
-      ;;
-    esac
-done
-
-# Double-quote double-evaled strings.
-for var in reload_cmds old_postinstall_cmds old_postuninstall_cmds old_archive_cmds extract_expsyms_cmds old_archive_from_new_cmds old_archive_from_expsyms_cmds archive_cmds archive_expsym_cmds module_cmds module_expsym_cmds export_symbols_cmds prelink_cmds postlink_cmds postinstall_cmds postuninstall_cmds finish_cmds sys_lib_search_path_spec configure_time_dlsearch_path configure_time_lt_sys_library_path; do
-    case `eval \\$ECHO \\""\\$$var"\\"` in
-    *[\\\`\"\$]*)
-      eval "lt_$var=\\\"\`\$ECHO \"\$$var\" | \$SED -e \"\$double_quote_subst\" -e \"\$sed_quote_subst\" -e \"\$delay_variable_subst\"\`\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_$var=\\\"\$$var\\\""
-      ;;
-    esac
-done
-
-ac_aux_dir='./'
-
-# See if we are running on zsh, and set the options that allow our
-# commands through without removal of \ escapes INIT.
-if test -n "${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-
-    PACKAGE='libXext'
-    VERSION='1.3.7'
-    RM='rm -f'
-    ofile='libtool'
-
-
-
-
-
-# Handling of arguments.
-for ac_config_target in $ac_config_targets
-do
-  case $ac_config_target in
-    "config.h") CONFIG_HEADERS="$CONFIG_HEADERS config.h" ;;
-    "depfiles") CONFIG_COMMANDS="$CONFIG_COMMANDS depfiles" ;;
-    "libtool") CONFIG_COMMANDS="$CONFIG_COMMANDS libtool" ;;
-    "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;;
-    "man/Makefile") CONFIG_FILES="$CONFIG_FILES man/Makefile" ;;
-    "src/Makefile") CONFIG_FILES="$CONFIG_FILES src/Makefile" ;;
-    "specs/Makefile") CONFIG_FILES="$CONFIG_FILES specs/Makefile" ;;
-    "xext.pc") CONFIG_FILES="$CONFIG_FILES xext.pc" ;;
-
-  *) as_fn_error $? "invalid argument: '$ac_config_target'" "$LINENO" 5;;
-  esac
-done
-
-
-# If the user did not use the arguments to specify the items to instantiate,
-# then the envvar interface is used.  Set only those that are not.
-# We use the long form for the default assignment because of an extremely
-# bizarre bug on SunOS 4.1.3.
-if $ac_need_defaults; then
-  test ${CONFIG_FILES+y} || CONFIG_FILES=$config_files
-  test ${CONFIG_HEADERS+y} || CONFIG_HEADERS=$config_headers
-  test ${CONFIG_COMMANDS+y} || CONFIG_COMMANDS=$config_commands
-fi
-
-# Have a temporary directory for convenience.  Make it in the build tree
-# simply because there is no reason against having it here, and in addition,
-# creating and moving files from /tmp can sometimes cause problems.
-# Hook for its removal unless debugging.
-# Note that there is a small window in which the directory will not be cleaned:
-# after its creation but before its name has been assigned to '$tmp'.
-$debug ||
-{
-  tmp= ac_tmp=
-  trap 'exit_status=$?
-  : "${ac_tmp:=$tmp}"
-  { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status
-' 0
-  trap 'as_fn_exit 1' 1 2 13 15
-}
-# Create a (secure) tmp directory for tmp files.
-
-{
-  tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` &&
-  test -d "$tmp"
-}  ||
-{
-  tmp=./conf$$-$RANDOM
-  (umask 077 && mkdir "$tmp")
-} || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5
-ac_tmp=$tmp
-
-# Set up the scripts for CONFIG_FILES section.
-# No need to generate them if there are no CONFIG_FILES.
-# This happens for instance with './config.status config.h'.
-if test -n "$CONFIG_FILES"; then
-
-
-ac_cr=`echo X | tr X '\015'`
-# On cygwin, bash can eat \r inside `` if the user requested igncr.
-# But we know of no other shell where ac_cr would be empty at this
-# point, so we can use a bashism as a fallback.
-if test "x$ac_cr" = x; then
-  eval ac_cr=\$\'\\r\'
-fi
-ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' </dev/null 2>/dev/null`
-if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then
-  ac_cs_awk_cr='\\r'
-else
-  ac_cs_awk_cr=$ac_cr
-fi
-
-echo 'BEGIN {' >"$ac_tmp/subs1.awk" &&
-cat >>"$ac_tmp/subs1.awk" <<\_ACAWK &&
-S["am__EXEEXT_FALSE"]=""
-S["am__EXEEXT_TRUE"]="#"
-S["LTLIBOBJS"]=""
-S["MAKE_LINT_LIB_FALSE"]=""
-S["MAKE_LINT_LIB_TRUE"]="#"
-S["LINTLIB"]=""
-S["LINT_FALSE"]=""
-S["LINT_TRUE"]="#"
-S["LINT_FLAGS"]=""
-S["LINT"]=""
-S["LIBOBJS"]=""
-S["XEXT_LIBS"]="-L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -lX11 "
-S["XEXT_CFLAGS"]="-I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include "
-S["XEXT_SOREV"]="6:4:0"
-S["XTMALLOC_ZERO_CFLAGS"]="-DMALLOC_0_RETURNS_NULL -DXTMALLOC_BC"
-S["XMALLOC_ZERO_CFLAGS"]="-DMALLOC_0_RETURNS_NULL"
-S["MALLOC_ZERO_CFLAGS"]="-DMALLOC_0_RETURNS_NULL"
-S["HAVE_STYLESHEETS_FALSE"]=""
-S["HAVE_STYLESHEETS_TRUE"]="#"
-S["XSL_STYLESHEET"]=""
-S["STYLESHEET_SRCDIR"]=""
-S["XORG_SGML_PATH"]=""
-S["HAVE_XSLTPROC_FALSE"]="#"
-S["HAVE_XSLTPROC_TRUE"]=""
-S["XSLTPROC"]="/home/linuxbrew/.linuxbrew/bin/xsltproc"
-S["HAVE_FOP_FALSE"]=""
-S["HAVE_FOP_TRUE"]="#"
-S["FOP"]=""
-S["HAVE_XMLTO_FALSE"]=""
-S["HAVE_XMLTO_TRUE"]="#"
-S["HAVE_XMLTO_TEXT_FALSE"]=""
-S["HAVE_XMLTO_TEXT_TRUE"]="#"
-S["XMLTO"]=""
-S["ENABLE_SPECS_FALSE"]=""
-S["ENABLE_SPECS_TRUE"]="#"
-S["MAN_SUBSTS"]="	-e 's|__vendorversion__|\"$(PACKAGE_STRING)\" \"$(XORG_MAN_PAGE)\"|' 	-e 's|__xorgversion__|\"$(PACKAGE_STRING)\" \"$(XORG_MAN_PAGE)\"|' 	-e 's|__xserverna"\
-"me__|Xorg|g' 	-e 's|__xconfigfile__|xorg.conf|g' 	-e 's|__projectroot__|$(prefix)|g' 	-e 's|__apploaddir__|$(appdefaultdir)|g' 	-e 's|__appmansuffix"\
-"__|$(APP_MAN_SUFFIX)|g' 	-e 's|__drivermansuffix__|$(DRIVER_MAN_SUFFIX)|g' 	-e 's|__adminmansuffix__|$(ADMIN_MAN_SUFFIX)|g' 	-e 's|__libmansuffix__|"\
-"$(LIB_MAN_SUFFIX)|g' 	-e 's|__miscmansuffix__|$(MISC_MAN_SUFFIX)|g' 	-e 's|__filemansuffix__|$(FILE_MAN_SUFFIX)|g'"
-S["XORG_MAN_PAGE"]="X Version 11"
-S["ADMIN_MAN_DIR"]="$(mandir)/man$(ADMIN_MAN_SUFFIX)"
-S["DRIVER_MAN_DIR"]="$(mandir)/man$(DRIVER_MAN_SUFFIX)"
-S["MISC_MAN_DIR"]="$(mandir)/man$(MISC_MAN_SUFFIX)"
-S["FILE_MAN_DIR"]="$(mandir)/man$(FILE_MAN_SUFFIX)"
-S["LIB_MAN_DIR"]="$(mandir)/man$(LIB_MAN_SUFFIX)"
-S["APP_MAN_DIR"]="$(mandir)/man$(APP_MAN_SUFFIX)"
-S["ADMIN_MAN_SUFFIX"]="8"
-S["DRIVER_MAN_SUFFIX"]="4"
-S["MISC_MAN_SUFFIX"]="7"
-S["FILE_MAN_SUFFIX"]="5"
-S["LIB_MAN_SUFFIX"]="3"
-S["APP_MAN_SUFFIX"]="1"
-S["INSTALL_CMD"]="(cp -f /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/util-macros/INSTALL $(top_srcdir)/.INSTALL.tmp && mv $(top_srcdir"\
-")/.INSTALL.tmp $(top_srcdir)/INSTALL) || (rm -f $(top_srcdir)/.INSTALL.tmp; test -e $(top_srcdir)/INSTALL || ( touch $(top_srcdir)/INSTALL; echo 'fa"\
-"iled to copy INSTALL from util-macros: installing empty INSTALL.' >&2))"
-S["PKG_CONFIG_LIBDIR"]="/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-p"\
-"refix/share/pkgconfig"
-S["PKG_CONFIG_PATH"]=""
-S["PKG_CONFIG"]="/usr/bin/pkg-config"
-S["CHANGELOG_CMD"]="((GIT_DIR=$(top_srcdir)/.git git log > $(top_srcdir)/.changelog.tmp) 2>/dev/null && mv $(top_srcdir)/.changelog.tmp $(top_srcdir)/ChangeLog) || (rm "\
-"-f $(top_srcdir)/.changelog.tmp; test -e $(top_srcdir)/ChangeLog || ( touch $(top_srcdir)/ChangeLog; echo 'git failed to create ChangeLog: installin"\
-"g empty ChangeLog.' >&2))"
-S["STRICT_CFLAGS"]=" -pedantic -Werror -Werror=attributes"
-S["CWARNFLAGS"]=" -Wall -Wpointer-arith -Wmissing-declarations -Wformat=2 -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Wbad-function-cast -Wold-style-d"\
-"efinition -Wunused -Wuninitialized -Wshadow -Wmissing-noreturn -Wmissing-format-attribute -Wredundant-decls -Werror=implicit -Werror=nonnull -Werror"\
-"=init-self -Werror=main -Werror=missing-braces -Werror=sequence-point -Werror=return-type -Werror=trigraphs -Werror=array-bounds -Werror=write-strin"\
-"gs -Werror=address -Werror=int-to-pointer-cast -Werror=pointer-to-int-cast -fno-strict-aliasing"
-S["BASE_CFLAGS"]=" -Wall -Wpointer-arith -Wmissing-declarations -Wformat=2 -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Wbad-function-cast -Wold-style-d"\
-"efinition -Wunused -Wuninitialized -Wshadow -Wmissing-noreturn -Wmissing-format-attribute -Wredundant-decls -Werror=implicit -Werror=nonnull -Werror"\
-"=init-self -Werror=main -Werror=missing-braces -Werror=sequence-point -Werror=return-type -Werror=trigraphs -Werror=array-bounds -Werror=write-strin"\
-"gs -Werror=address -Werror=int-to-pointer-cast -Werror=pointer-to-int-cast"
-S["LT_SYS_LIBRARY_PATH"]=""
-S["OTOOL64"]=""
-S["OTOOL"]=""
-S["LIPO"]=""
-S["NMEDIT"]=""
-S["DSYMUTIL"]=""
-S["MANIFEST_TOOL"]=":"
-S["RANLIB"]="/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ranlib"
-S["ac_ct_AR"]=""
-S["AR"]="/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ar"
-S["DLLTOOL"]="dlltool"
-S["OBJDUMP"]="objdump"
-S["FILECMD"]="file"
-S["LN_S"]="ln -s"
-S["NM"]="nm"
-S["ac_ct_DUMPBIN"]="link -dump"
-S["DUMPBIN"]=":"
-S["LD"]="/home/linuxbrew/.linuxbrew/bin/ld"
-S["FGREP"]="/usr/bin/grep -F"
-S["EGREP"]="/usr/bin/grep -E"
-S["GREP"]="/usr/bin/grep"
-S["SED"]="/usr/bin/sed"
-S["host_os"]="wasi"
-S["host_vendor"]="unknown"
-S["host_cpu"]="wasm32"
-S["host"]="wasm32-unknown-wasi"
-S["build_os"]="linux-gnu"
-S["build_vendor"]="pc"
-S["build_cpu"]="x86_64"
-S["build"]="x86_64-pc-linux-gnu"
-S["LIBTOOL"]="$(SHELL) $(top_builddir)/libtool"
-S["am__xargs_n"]="xargs -n"
-S["am__rm_f_notfound"]=""
-S["AM_BACKSLASH"]="\\"
-S["AM_DEFAULT_VERBOSITY"]="0"
-S["AM_DEFAULT_V"]="$(AM_DEFAULT_VERBOSITY)"
-S["AM_V"]="$(V)"
-S["CSCOPE"]="cscope"
-S["ETAGS"]="etags"
-S["CTAGS"]="ctags"
-S["am__fastdepCC_FALSE"]="#"
-S["am__fastdepCC_TRUE"]=""
-S["CCDEPMODE"]="depmode=gcc3"
-S["am__nodep"]="_no"
-S["AMDEPBACKSLASH"]="\\"
-S["AMDEP_FALSE"]="#"
-S["AMDEP_TRUE"]=""
-S["am__include"]="include"
-S["DEPDIR"]=".deps"
-S["am__untar"]="tar -xf -"
-S["am__tar"]="tar --format=ustar -chf - \"$$tardir\""
-S["AMTAR"]="$${TAR-tar}"
-S["am__leading_dot"]="."
-S["SET_MAKE"]=""
-S["AWK"]="mawk"
-S["mkdir_p"]="$(MKDIR_P)"
-S["MKDIR_P"]="/usr/bin/mkdir -p"
-S["INSTALL_STRIP_PROGRAM"]="$(install_sh) -c -s"
-S["STRIP"]="strip"
-S["install_sh"]="${SHELL} /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/install-sh"
-S["MAKEINFO"]="${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' makeinfo"
-S["AUTOHEADER"]="${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' autoheader"
-S["AUTOMAKE"]="${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' automake-1.18"
-S["AUTOCONF"]="${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' autoconf"
-S["ACLOCAL"]="${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' aclocal-1.18"
-S["VERSION"]="1.3.7"
-S["PACKAGE"]="libXext"
-S["CYGPATH_W"]="echo"
-S["am__isrc"]=""
-S["INSTALL_DATA"]="${INSTALL} -m 644"
-S["INSTALL_SCRIPT"]="${INSTALL}"
-S["INSTALL_PROGRAM"]="${INSTALL}"
-S["OBJEXT"]="o"
-S["EXEEXT"]=""
-S["ac_ct_CC"]=""
-S["CPPFLAGS"]="--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm"\
-"-prefix/include"
-S["LDFLAGS"]="--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm"\
-"-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman"
-S["CFLAGS"]="--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/natha"\
-"n/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h"
-S["CC"]="/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23"
-S["ECHO_T"]=""
-S["ECHO_N"]="-n"
-S["ECHO_C"]=""
-S["target_alias"]=""
-S["host_alias"]="wasm32-wasi"
-S["build_alias"]=""
-S["LIBS"]=""
-S["DEFS"]="-DHAVE_CONFIG_H"
-S["mandir"]="${datarootdir}/man"
-S["localedir"]="${datarootdir}/locale"
-S["libdir"]="${exec_prefix}/lib"
-S["psdir"]="${docdir}"
-S["pdfdir"]="${docdir}"
-S["dvidir"]="${docdir}"
-S["htmldir"]="${docdir}"
-S["infodir"]="${datarootdir}/info"
-S["docdir"]="${datarootdir}/doc/${PACKAGE_TARNAME}"
-S["oldincludedir"]="/usr/include"
-S["includedir"]="${prefix}/include"
-S["runstatedir"]="${localstatedir}/run"
-S["localstatedir"]="${prefix}/var"
-S["sharedstatedir"]="${prefix}/com"
-S["sysconfdir"]="${prefix}/etc"
-S["datadir"]="${datarootdir}"
-S["datarootdir"]="${prefix}/share"
-S["libexecdir"]="${exec_prefix}/libexec"
-S["sbindir"]="${exec_prefix}/sbin"
-S["bindir"]="${exec_prefix}/bin"
-S["program_transform_name"]="s,x,x,"
-S["prefix"]="/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix"
-S["exec_prefix"]="${prefix}"
-S["PACKAGE_URL"]=""
-S["PACKAGE_BUGREPORT"]="https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues"
-S["PACKAGE_STRING"]="libXext 1.3.7"
-S["PACKAGE_VERSION"]="1.3.7"
-S["PACKAGE_TARNAME"]="libXext"
-S["PACKAGE_NAME"]="libXext"
-S["PATH_SEPARATOR"]=":"
-S["SHELL"]="/bin/bash"
-S["am__quote"]=""
-_ACAWK
-cat >>"$ac_tmp/subs1.awk" <<_ACAWK &&
-  for (key in S) S_is_set[key] = 1
-  FS = ""
-
-}
-{
-  line = $ 0
-  nfields = split(line, field, "@")
-  substed = 0
-  len = length(field[1])
-  for (i = 2; i < nfields; i++) {
-    key = field[i]
-    keylen = length(key)
-    if (S_is_set[key]) {
-      value = S[key]
-      line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3)
-      len += length(value) + length(field[++i])
-      substed = 1
-    } else
-      len += 1 + keylen
-  }
-
-  print line
-}
-
-_ACAWK
-if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then
-  sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g"
-else
-  cat
-fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \
-  || as_fn_error $? "could not setup config files machinery" "$LINENO" 5
-fi # test -n "$CONFIG_FILES"
-
-# Set up the scripts for CONFIG_HEADERS section.
-# No need to generate them if there are no CONFIG_HEADERS.
-# This happens for instance with './config.status Makefile'.
-if test -n "$CONFIG_HEADERS"; then
-cat >"$ac_tmp/defines.awk" <<\_ACAWK ||
-BEGIN {
-D["PACKAGE_NAME"]=" \"libXext\""
-D["PACKAGE_TARNAME"]=" \"libXext\""
-D["PACKAGE_VERSION"]=" \"1.3.7\""
-D["PACKAGE_STRING"]=" \"libXext 1.3.7\""
-D["PACKAGE_BUGREPORT"]=" \"https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues\""
-D["PACKAGE_URL"]=" \"\""
-D["HAVE_STDIO_H"]=" 1"
-D["HAVE_STDLIB_H"]=" 1"
-D["HAVE_STRING_H"]=" 1"
-D["HAVE_INTTYPES_H"]=" 1"
-D["HAVE_STDINT_H"]=" 1"
-D["HAVE_STRINGS_H"]=" 1"
-D["HAVE_SYS_STAT_H"]=" 1"
-D["HAVE_SYS_TYPES_H"]=" 1"
-D["HAVE_UNISTD_H"]=" 1"
-D["HAVE_WCHAR_H"]=" 1"
-D["STDC_HEADERS"]=" 1"
-D["_ALL_SOURCE"]=" 1"
-D["_COSMO_SOURCE"]=" 1"
-D["_DARWIN_C_SOURCE"]=" 1"
-D["_GNU_SOURCE"]=" 1"
-D["_HPUX_ALT_XOPEN_SOCKET_API"]=" 1"
-D["_NETBSD_SOURCE"]=" 1"
-D["_OPENBSD_SOURCE"]=" 1"
-D["_POSIX_PTHREAD_SEMANTICS"]=" 1"
-D["__STDC_WANT_IEC_60559_ATTRIBS_EXT__"]=" 1"
-D["__STDC_WANT_IEC_60559_BFP_EXT__"]=" 1"
-D["__STDC_WANT_IEC_60559_DFP_EXT__"]=" 1"
-D["__STDC_WANT_IEC_60559_EXT__"]=" 1"
-D["__STDC_WANT_IEC_60559_FUNCS_EXT__"]=" 1"
-D["__STDC_WANT_IEC_60559_TYPES_EXT__"]=" 1"
-D["__STDC_WANT_LIB_EXT2__"]=" 1"
-D["__STDC_WANT_MATH_SPEC_FUNCS__"]=" 1"
-D["_TANDEM_SOURCE"]=" 1"
-D["__EXTENSIONS__"]=" 1"
-D["PACKAGE"]=" \"libXext\""
-D["VERSION"]=" \"1.3.7\""
-D["HAVE_DLFCN_H"]=" 1"
-D["LT_OBJDIR"]=" \".libs/\""
-D["PACKAGE_VERSION_MAJOR"]=" 1"
-D["PACKAGE_VERSION_MINOR"]=" 3"
-D["PACKAGE_VERSION_PATCHLEVEL"]=" 7"
-D["HAVE___BUILTIN_POPCOUNTL"]=" 1"
-D["HAVE_REALLOCARRAY"]=" 1"
-  for (key in D) D_is_set[key] = 1
-  FS = ""
-}
-/^[\t ]*#[\t ]*(define|undef)[\t ]+[_abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ][_abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789]*([\t (]|$)/ {
-  line = $ 0
-  split(line, arg, " ")
-  if (arg[1] == "#") {
-    defundef = arg[2]
-    mac1 = arg[3]
-  } else {
-    defundef = substr(arg[1], 2)
-    mac1 = arg[2]
-  }
-  split(mac1, mac2, "(") #)
-  macro = mac2[1]
-  prefix = substr(line, 1, index(line, defundef) - 1)
-  if (D_is_set[macro]) {
-    suffix = P[macro] D[macro]
-    while (suffix ~ /[\t ]$/) {
-      suffix = substr(suffix, 1, length(suffix) - 1)
-    }
-    # Preserve the white space surrounding the "#".
-    print prefix "define", macro suffix
-    next
-  } else {
-    # Replace #undef with comments.  This is necessary, for example,
-    # in the case of _POSIX_SOURCE, which is predefined and required
-    # on some systems where configure will not decide to define it.
-    if (defundef == "undef") {
-      print "/*", prefix defundef, macro, "*/"
-      next
-    }
-  }
-}
-{ print }
-_ACAWK
-  as_fn_error $? "could not setup config headers machinery" "$LINENO" 5
-fi # test -n "$CONFIG_HEADERS"
-
-
-eval set X "  :F $CONFIG_FILES  :H $CONFIG_HEADERS    :C $CONFIG_COMMANDS"
-shift
-for ac_tag
-do
-  case $ac_tag in
-  :[FHLC]) ac_mode=$ac_tag; continue;;
-  esac
-  case $ac_mode$ac_tag in
-  :[FHL]*:*);;
-  :L* | :C*:*) as_fn_error $? "invalid tag '$ac_tag'" "$LINENO" 5;;
-  :[FH]-) ac_tag=-:-;;
-  :[FH]*) ac_tag=$ac_tag:$ac_tag.in;;
-  esac
-  ac_save_IFS=$IFS
-  IFS=:
-  set x $ac_tag
-  IFS=$ac_save_IFS
-  shift
-  ac_file=$1
-  shift
-
-  case $ac_mode in
-  :L) ac_source=$1;;
-  :[FH])
-    ac_file_inputs=
-    for ac_f
-    do
-      case $ac_f in
-      -) ac_f="$ac_tmp/stdin";;
-      *) # Look for the file first in the build tree, then in the source tree
-	 # (if the path is not absolute).  The absolute path cannot be DOS-style,
-	 # because $ac_f cannot contain ':'.
-	 test -f "$ac_f" ||
-	   case $ac_f in
-	   [\\/$]*) false;;
-	   *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";;
-	   esac ||
-	   as_fn_error 1 "cannot find input file: '$ac_f'" "$LINENO" 5;;
-      esac
-      case $ac_f in *\'*) ac_f=`printf '%s\n' "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac
-      as_fn_append ac_file_inputs " '$ac_f'"
-    done
-
-    # Let's still pretend it is 'configure' which instantiates (i.e., don't
-    # use $as_me), people would be surprised to read:
-    #    /* config.h.  Generated by config.status.  */
-    configure_input='Generated from '`
-	  printf '%s\n' "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g'
-	`' by configure.'
-    if test x"$ac_file" != x-; then
-      configure_input="$ac_file.  $configure_input"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5
-printf '%s\n' "$as_me: creating $ac_file" >&6;}
-    fi
-    # Neutralize special characters interpreted by sed in replacement strings.
-    case $configure_input in #(
-    *\&* | *\|* | *\\* )
-       ac_sed_conf_input=`printf '%s\n' "$configure_input" |
-       sed 's/[\\\\&|]/\\\\&/g'`;; #(
-    *) ac_sed_conf_input=$configure_input;;
-    esac
-
-    case $ac_tag in
-    *:-:* | *:-) cat >"$ac_tmp/stdin" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;;
-    esac
-    ;;
-  esac
-
-  ac_dir=`$as_dirname -- "$ac_file" ||
-$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$ac_file" : 'X\(//\)[^/]' \| \
-	 X"$ac_file" : 'X\(//\)$' \| \
-	 X"$ac_file" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$ac_file" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  as_dir="$ac_dir"; as_fn_mkdir_p
-  ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`printf '%s\n' "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`printf '%s\n' "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-
-  case $ac_mode in
-  :F)
-  #
-  # CONFIG_FILE
-  #
-
-  case $INSTALL in
-  [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;;
-  *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;;
-  esac
-  ac_MKDIR_P=$MKDIR_P
-  case $MKDIR_P in
-  [\\/$]* | ?:[\\/]* ) ;;
-  */*) ac_MKDIR_P=$ac_top_build_prefix$MKDIR_P ;;
-  esac
-# If the template does not know about datarootdir, expand it.
-# FIXME: This hack should be removed a few years after 2.60.
-ac_datarootdir_hack=; ac_datarootdir_seen=
-ac_sed_dataroot='
-/datarootdir/ {
-  p
-  q
-}
-/@datadir@/p
-/@docdir@/p
-/@infodir@/p
-/@localedir@/p
-/@mandir@/p'
-case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in
-*datarootdir*) ac_datarootdir_seen=yes;;
-*@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*)
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5
-printf '%s\n' "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;}
-  ac_datarootdir_hack='
-  s&@datadir@&${datarootdir}&g
-  s&@docdir@&${datarootdir}/doc/${PACKAGE_TARNAME}&g
-  s&@infodir@&${datarootdir}/info&g
-  s&@localedir@&${datarootdir}/locale&g
-  s&@mandir@&${datarootdir}/man&g
-  s&\${datarootdir}&${prefix}/share&g' ;;
-esac
-ac_sed_extra="/^[	 ]*VPATH[	 ]*=[	 ]*/{
-h
-s///
-s/^/:/
-s/[	 ]*$/:/
-s/:\$(srcdir):/:/g
-s/:\${srcdir}:/:/g
-s/:@srcdir@:/:/g
-s/^:*//
-s/:*$//
-x
-s/\(=[	 ]*\).*/\1/
-G
-s/\n//
-s/^[^=]*=[	 ]*$//
-}
-
-:t
-/@[a-zA-Z_][a-zA-Z_0-9]*@/!b
-s|@configure_input@|$ac_sed_conf_input|;t t
-s&@top_builddir@&$ac_top_builddir_sub&;t t
-s&@top_build_prefix@&$ac_top_build_prefix&;t t
-s&@srcdir@&$ac_srcdir&;t t
-s&@abs_srcdir@&$ac_abs_srcdir&;t t
-s&@top_srcdir@&$ac_top_srcdir&;t t
-s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t
-s&@builddir@&$ac_builddir&;t t
-s&@abs_builddir@&$ac_abs_builddir&;t t
-s&@abs_top_builddir@&$ac_abs_top_builddir&;t t
-s&@INSTALL@&$ac_INSTALL&;t t
-s&@MKDIR_P@&$ac_MKDIR_P&;t t
-$ac_datarootdir_hack
-"
-eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \
-  >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-
-test -z "$ac_datarootdir_hack$ac_datarootdir_seen" &&
-  { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } &&
-  { ac_out=`sed -n '/^[	 ]*datarootdir[	 ]*:*=/p' \
-      "$ac_tmp/out"`; test -z "$ac_out"; } &&
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable 'datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&5
-printf '%s\n' "$as_me: WARNING: $ac_file contains a reference to the variable 'datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&2;}
-
-  rm -f "$ac_tmp/stdin"
-  case $ac_file in
-  -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";;
-  *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";;
-  esac \
-  || as_fn_error $? "could not create $ac_file" "$LINENO" 5
- ;;
-  :H)
-  #
-  # CONFIG_HEADER
-  #
-  if test x"$ac_file" != x-; then
-    {
-      printf '%s\n' "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs"
-    } >"$ac_tmp/config.h" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5
-printf '%s\n' "$as_me: $ac_file is unchanged" >&6;}
-    else
-      rm -f "$ac_file"
-      mv "$ac_tmp/config.h" "$ac_file" \
-	|| as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    fi
-  else
-    printf '%s\n' "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \
-      || as_fn_error $? "could not create -" "$LINENO" 5
-  fi
-# Compute "$ac_file"'s index in $config_headers.
-_am_arg="$ac_file"
-_am_stamp_count=1
-for _am_header in $config_headers :; do
-  case $_am_header in
-    $_am_arg | $_am_arg:* )
-      break ;;
-    * )
-      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
-  esac
-done
-echo "timestamp for $_am_arg" >`$as_dirname -- "$_am_arg" ||
-$as_expr X"$_am_arg" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$_am_arg" : 'X\(//\)[^/]' \| \
-	 X"$_am_arg" : 'X\(//\)$' \| \
-	 X"$_am_arg" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$_am_arg" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`/stamp-h$_am_stamp_count
- ;;
-
-  :C)  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: executing $ac_file commands" >&5
-printf '%s\n' "$as_me: executing $ac_file commands" >&6;}
- ;;
-  esac
-
-
-  case $ac_file$ac_mode in
-    "depfiles":C) test x"$AMDEP_TRUE" != x"" || {
-  # Older Autoconf quotes --file arguments for eval, but not when files
-  # are listed without --file.  Let's play safe and only enable the eval
-  # if we detect the quoting.
-  # TODO: see whether this extra hack can be removed once we start
-  # requiring Autoconf 2.70 or later.
-  case $CONFIG_FILES in #(
-  *\'*) :
-    eval set x "$CONFIG_FILES" ;; #(
-  *) :
-    set x $CONFIG_FILES ;; #(
-  *) :
-     ;;
-esac
-  shift
-  # Used to flag and report bootstrapping failures.
-  am_rc=0
-  for am_mf
-  do
-    # Strip MF so we end up with the name of the file.
-    am_mf=`printf '%s\n' "$am_mf" | sed -e 's/:.*$//'`
-    # Check whether this is an Automake generated Makefile which includes
-    # dependency-tracking related rules and includes.
-    # Grep'ing the whole file directly is not great: AIX grep has a line
-    # limit of 2048, but all sed's we know have understand at least 4000.
-    sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \
-      || continue
-    am_dirpart=`$as_dirname -- "$am_mf" ||
-$as_expr X"$am_mf" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$am_mf" : 'X\(//\)[^/]' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$am_mf" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    am_filepart=`$as_basename -- "$am_mf" ||
-$as_expr X/"$am_mf" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$am_mf" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    { echo "$as_me:$LINENO: cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles" >&5
-   (cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } || am_rc=$?
-  done
-  if test $am_rc -ne 0; then
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "Something went wrong bootstrapping makefile fragments
-    for automatic dependency tracking.  If GNU make was not used, consider
-    re-running the configure script with MAKE=\"gmake\" (or whatever is
-    necessary).  You can also try re-running configure with the
-    '--disable-dependency-tracking' option to at least be able to build
-    the package (albeit without support for automatic dependency tracking).
-See 'config.log' for more details" "$LINENO" 5; }
-  fi
-  { am_dirpart=; unset am_dirpart;}
-  { am_filepart=; unset am_filepart;}
-  { am_mf=; unset am_mf;}
-  { am_rc=; unset am_rc;}
-  rm -f conftest-deps.mk
-}
- ;;
-    "libtool":C)
-
-    # See if we are running on zsh, and set the options that allow our
-    # commands through without removal of \ escapes.
-    if test -n "${ZSH_VERSION+set}"; then
-      setopt NO_GLOB_SUBST
-    fi
-
-    cfgfile=${ofile}T
-    trap "$RM \"$cfgfile\"; exit 1" 1 2 15
-    $RM "$cfgfile"
-
-    cat <<_LT_EOF >> "$cfgfile"
-#! $SHELL
-# Generated automatically by $as_me ($PACKAGE) $VERSION
-# NOTE: Changes made to this file will be lost: look at ltmain.sh.
-
-# Provide generalized library-building support services.
-# Written by Gordon Matzigkeit, 1996
-
-# Copyright (C) 2024 Free Software Foundation, Inc.
-# This is free software; see the source for copying conditions.  There is NO
-# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-
-# GNU Libtool is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program or library that is built
-# using GNU Libtool, you may include this file under the  same
-# distribution terms that you use for the rest of that program.
-#
-# GNU Libtool is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-
-# The names of the tagged configurations supported by this script.
-available_tags=''
-
-# Configured defaults for sys_lib_dlsearch_path munging.
-: \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"}
-
-# ### BEGIN LIBTOOL CONFIG
-
-# Which release of libtool.m4 was used?
-macro_version=$macro_version
-macro_revision=$macro_revision
-
-# Whether or not to build shared libraries.
-build_libtool_libs=$enable_shared
-
-# Whether or not to build static libraries.
-build_old_libs=$enable_static
-
-# What type of objects to build.
-pic_mode=$pic_mode
-
-# Whether or not to optimize for fast installation.
-fast_install=$enable_fast_install
-
-# Shared archive member basename,for filename based shared library versioning on AIX.
-shared_archive_member_spec=$shared_archive_member_spec
-
-# Shell to use when invoking shell scripts.
-SHELL=$lt_SHELL
-
-# An echo program that protects backslashes.
-ECHO=$lt_ECHO
-
-# The PATH separator for the build system.
-PATH_SEPARATOR=$lt_PATH_SEPARATOR
-
-# The host system.
-host_alias=$host_alias
-host=$host
-host_os=$host_os
-
-# The build system.
-build_alias=$build_alias
-build=$build
-build_os=$build_os
-
-# A sed program that does not truncate output.
-SED=$lt_SED
-
-# Sed that helps us avoid accidentally triggering echo(1) options like -n.
-Xsed="\$SED -e 1s/^X//"
-
-# A grep program that handles long lines.
-GREP=$lt_GREP
-
-# An ERE matcher.
-EGREP=$lt_EGREP
-
-# A literal string matcher.
-FGREP=$lt_FGREP
-
-# A BSD- or MS-compatible name lister.
-NM=$lt_NM
-
-# Whether we need soft or hard links.
-LN_S=$lt_LN_S
-
-# What is the maximum length of a command?
-max_cmd_len=$max_cmd_len
-
-# Object file suffix (normally "o").
-objext=$ac_objext
-
-# Executable file suffix (normally "").
-exeext=$exeext
-
-# whether the shell understands "unset".
-lt_unset=$lt_unset
-
-# turn spaces into newlines.
-SP2NL=$lt_lt_SP2NL
-
-# turn newlines into spaces.
-NL2SP=$lt_lt_NL2SP
-
-# convert \$build file names to \$host format.
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-
-# convert \$build files to toolchain format.
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-
-# A file(cmd) program that detects file types.
-FILECMD=$lt_FILECMD
-
-# An object symbol dumper.
-OBJDUMP=$lt_OBJDUMP
-
-# Method to check whether dependent libraries are shared objects.
-deplibs_check_method=$lt_deplibs_check_method
-
-# Command to use when deplibs_check_method = "file_magic".
-file_magic_cmd=$lt_file_magic_cmd
-
-# How to find potential files when deplibs_check_method = "file_magic".
-file_magic_glob=$lt_file_magic_glob
-
-# Find potential files using nocaseglob when deplibs_check_method = "file_magic".
-want_nocaseglob=$lt_want_nocaseglob
-
-# DLL creation program.
-DLLTOOL=$lt_DLLTOOL
-
-# Command to associate shared and link libraries.
-sharedlib_from_linklib_cmd=$lt_sharedlib_from_linklib_cmd
-
-# The archiver.
-AR=$lt_AR
-
-# Flags to create an archive (by configure).
-lt_ar_flags=$lt_ar_flags
-
-# Flags to create an archive.
-AR_FLAGS=\${ARFLAGS-"\$lt_ar_flags"}
-
-# How to feed a file listing to the archiver.
-archiver_list_spec=$lt_archiver_list_spec
-
-# A symbol stripping program.
-STRIP=$lt_STRIP
-
-# Commands used to install an old-style archive.
-RANLIB=$lt_RANLIB
-old_postinstall_cmds=$lt_old_postinstall_cmds
-old_postuninstall_cmds=$lt_old_postuninstall_cmds
-
-# Whether to use a lock for old archive extraction.
-lock_old_archive_extraction=$lock_old_archive_extraction
-
-# A C compiler.
-LTCC=$lt_CC
-
-# LTCC compiler flags.
-LTCFLAGS=$lt_CFLAGS
-
-# Take the output of nm and produce a listing of raw symbols and C names.
-global_symbol_pipe=$lt_lt_cv_sys_global_symbol_pipe
-
-# Transform the output of nm in a proper C declaration.
-global_symbol_to_cdecl=$lt_lt_cv_sys_global_symbol_to_cdecl
-
-# Transform the output of nm into a list of symbols to manually relocate.
-global_symbol_to_import=$lt_lt_cv_sys_global_symbol_to_import
-
-# Transform the output of nm in a C name address pair.
-global_symbol_to_c_name_address=$lt_lt_cv_sys_global_symbol_to_c_name_address
-
-# Transform the output of nm in a C name address pair when lib prefix is needed.
-global_symbol_to_c_name_address_lib_prefix=$lt_lt_cv_sys_global_symbol_to_c_name_address_lib_prefix
-
-# The name lister interface.
-nm_interface=$lt_lt_cv_nm_interface
-
-# Specify filename containing input files for \$NM.
-nm_file_list_spec=$lt_nm_file_list_spec
-
-# The root where to search for dependent libraries,and where our libraries should be installed.
-lt_sysroot=$lt_sysroot
-
-# Command to truncate a binary pipe.
-lt_truncate_bin=$lt_lt_cv_truncate_bin
-
-# The name of the directory that contains temporary libtool files.
-objdir=$objdir
-
-# Used to examine libraries when file_magic_cmd begins with "file".
-MAGIC_CMD=$MAGIC_CMD
-
-# Must we lock files when doing compilation?
-need_locks=$lt_need_locks
-
-# Manifest tool.
-MANIFEST_TOOL=$lt_MANIFEST_TOOL
-
-# Tool to manipulate archived DWARF debug symbol files on Mac OS X.
-DSYMUTIL=$lt_DSYMUTIL
-
-# Tool to change global to local symbols on Mac OS X.
-NMEDIT=$lt_NMEDIT
-
-# Tool to manipulate fat objects and archives on Mac OS X.
-LIPO=$lt_LIPO
-
-# ldd/readelf like tool for Mach-O binaries on Mac OS X.
-OTOOL=$lt_OTOOL
-
-# ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4.
-OTOOL64=$lt_OTOOL64
-
-# Old archive suffix (normally "a").
-libext=$libext
-
-# Shared library suffix (normally ".so").
-shrext_cmds=$lt_shrext_cmds
-
-# The commands to extract the exported symbol list from a shared archive.
-extract_expsyms_cmds=$lt_extract_expsyms_cmds
-
-# Variables whose values should be saved in libtool wrapper scripts and
-# restored at link time.
-variables_saved_for_relink=$lt_variables_saved_for_relink
-
-# Do we need the "lib" prefix for modules?
-need_lib_prefix=$need_lib_prefix
-
-# Do we need a version for libraries?
-need_version=$need_version
-
-# Library versioning type.
-version_type=$version_type
-
-# Shared library runtime path variable.
-runpath_var=$runpath_var
-
-# Shared library path variable.
-shlibpath_var=$shlibpath_var
-
-# Is shlibpath searched before the hard-coded library search path?
-shlibpath_overrides_runpath=$shlibpath_overrides_runpath
-
-# Format of library name prefix.
-libname_spec=$lt_libname_spec
-
-# List of archive names.  First name is the real one, the rest are links.
-# The last name is the one that the linker finds with -lNAME
-library_names_spec=$lt_library_names_spec
-
-# The coded name of the library, if different from the real name.
-soname_spec=$lt_soname_spec
-
-# Permission mode override for installation of shared libraries.
-install_override_mode=$lt_install_override_mode
-
-# Command to use after installation of a shared archive.
-postinstall_cmds=$lt_postinstall_cmds
-
-# Command to use after uninstallation of a shared archive.
-postuninstall_cmds=$lt_postuninstall_cmds
-
-# Commands used to finish a libtool library installation in a directory.
-finish_cmds=$lt_finish_cmds
-
-# As "finish_cmds", except a single script fragment to be evaled but
-# not shown.
-finish_eval=$lt_finish_eval
-
-# Whether we should hardcode library paths into libraries.
-hardcode_into_libs=$hardcode_into_libs
-
-# Compile-time system search path for libraries.
-sys_lib_search_path_spec=$lt_sys_lib_search_path_spec
-
-# Detected run-time system search path for libraries.
-sys_lib_dlsearch_path_spec=$lt_configure_time_dlsearch_path
-
-# Explicit LT_SYS_LIBRARY_PATH set during ./configure time.
-configure_time_lt_sys_library_path=$lt_configure_time_lt_sys_library_path
-
-# Whether dlopen is supported.
-dlopen_support=$enable_dlopen
-
-# Whether dlopen of programs is supported.
-dlopen_self=$enable_dlopen_self
-
-# Whether dlopen of statically linked programs is supported.
-dlopen_self_static=$enable_dlopen_self_static
-
-# Commands to strip libraries.
-old_striplib=$lt_old_striplib
-striplib=$lt_striplib
-
-
-# The linker used to build libraries.
-LD=$lt_LD
-
-# How to create reloadable object files.
-reload_flag=$lt_reload_flag
-reload_cmds=$lt_reload_cmds
-
-# Commands used to build an old-style archive.
-old_archive_cmds=$lt_old_archive_cmds
-
-# A language specific compiler.
-CC=$lt_compiler
-
-# Is the compiler the GNU compiler?
-with_gcc=$GCC
-
-# Compiler flag to turn off builtin functions.
-no_builtin_flag=$lt_lt_prog_compiler_no_builtin_flag
-
-# Additional compiler flags for building library objects.
-pic_flag=$lt_lt_prog_compiler_pic
-
-# How to pass a linker flag through the compiler.
-wl=$lt_lt_prog_compiler_wl
-
-# Compiler flag to prevent dynamic linking.
-link_static_flag=$lt_lt_prog_compiler_static
-
-# Does compiler simultaneously support -c and -o options?
-compiler_c_o=$lt_lt_cv_prog_compiler_c_o
-
-# Whether or not to add -lc for building shared libraries.
-build_libtool_need_lc=$archive_cmds_need_lc
-
-# Whether or not to disallow shared libs when runtime libs are static.
-allow_libtool_libs_with_static_runtimes=$enable_shared_with_static_runtimes
-
-# Compiler flag to allow reflexive dlopens.
-export_dynamic_flag_spec=$lt_export_dynamic_flag_spec
-
-# Compiler flag to generate shared objects directly from archives.
-whole_archive_flag_spec=$lt_whole_archive_flag_spec
-
-# Whether the compiler copes with passing no objects directly.
-compiler_needs_object=$lt_compiler_needs_object
-
-# Create an old-style archive from a shared archive.
-old_archive_from_new_cmds=$lt_old_archive_from_new_cmds
-
-# Create a temporary old-style archive to link instead of a shared archive.
-old_archive_from_expsyms_cmds=$lt_old_archive_from_expsyms_cmds
-
-# Commands used to build a shared archive.
-archive_cmds=$lt_archive_cmds
-archive_expsym_cmds=$lt_archive_expsym_cmds
-
-# Commands used to build a loadable module if different from building
-# a shared archive.
-module_cmds=$lt_module_cmds
-module_expsym_cmds=$lt_module_expsym_cmds
-
-# Whether we are building with GNU ld or not.
-with_gnu_ld=$lt_with_gnu_ld
-
-# Flag that allows shared libraries with undefined symbols to be built.
-allow_undefined_flag=$lt_allow_undefined_flag
-
-# Flag that enforces no undefined symbols.
-no_undefined_flag=$lt_no_undefined_flag
-
-# Flag to hardcode \$libdir into a binary during linking.
-# This must work even if \$libdir does not exist
-hardcode_libdir_flag_spec=$lt_hardcode_libdir_flag_spec
-
-# Whether we need a single "-rpath" flag with a separated argument.
-hardcode_libdir_separator=$lt_hardcode_libdir_separator
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary.
-hardcode_direct=$hardcode_direct
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary and the resulting library dependency is
-# "absolute",i.e. impossible to change by setting \$shlibpath_var if the
-# library is relocated.
-hardcode_direct_absolute=$hardcode_direct_absolute
-
-# Set to "yes" if using the -LDIR flag during linking hardcodes DIR
-# into the resulting binary.
-hardcode_minus_L=$hardcode_minus_L
-
-# Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR
-# into the resulting binary.
-hardcode_shlibpath_var=$hardcode_shlibpath_var
-
-# Set to "yes" if building a shared library automatically hardcodes DIR
-# into the library and all subsequent libraries and executables linked
-# against it.
-hardcode_automatic=$hardcode_automatic
-
-# Set to yes if linker adds runtime paths of dependent libraries
-# to runtime path list.
-inherit_rpath=$inherit_rpath
-
-# Whether libtool must link a program against all its dependency libraries.
-link_all_deplibs=$link_all_deplibs
-
-# Set to "yes" if exported symbols are required.
-always_export_symbols=$always_export_symbols
-
-# The commands to list exported symbols.
-export_symbols_cmds=$lt_export_symbols_cmds
-
-# Symbols that should not be listed in the preloaded symbols.
-exclude_expsyms=$lt_exclude_expsyms
-
-# Symbols that must always be exported.
-include_expsyms=$lt_include_expsyms
-
-# Commands necessary for linking programs (against libraries) with templates.
-prelink_cmds=$lt_prelink_cmds
-
-# Commands necessary for finishing linking programs.
-postlink_cmds=$lt_postlink_cmds
-
-# Specify filename containing input files.
-file_list_spec=$lt_file_list_spec
-
-# How to hardcode a shared library path into an executable.
-hardcode_action=$hardcode_action
-
-# ### END LIBTOOL CONFIG
-
-_LT_EOF
-
-    cat <<'_LT_EOF' >> "$cfgfile"
-
-# ### BEGIN FUNCTIONS SHARED WITH CONFIGURE
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x$2 in
-    x)
-        ;;
-    *:)
-        eval $1=\"`$ECHO $2 | $SED 's/:/ /g'` \$$1\"
-        ;;
-    x:*)
-        eval $1=\"\$$1 `$ECHO $2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval $1=\"\$$1\ `$ECHO $2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval $1=\"`$ECHO $2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \$$1\"
-        ;;
-    *)
-        eval $1=\"`$ECHO $2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in $*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-
-# ### END FUNCTIONS SHARED WITH CONFIGURE
-
-_LT_EOF
-
-  case $host_os in
-  aix3*)
-    cat <<\_LT_EOF >> "$cfgfile"
-# AIX sometimes has problems with the GCC collect2 program.  For some
-# reason, if we set the COLLECT_NAMES environment variable, the problems
-# vanish in a puff of smoke.
-if test set != "${COLLECT_NAMES+set}"; then
-  COLLECT_NAMES=
-  export COLLECT_NAMES
-fi
-_LT_EOF
-    ;;
-  esac
-
-
-
-ltmain=$ac_aux_dir/ltmain.sh
-
-
-  # We use sed instead of cat because bash on DJGPP gets confused if
-  # if finds mixed CR/LF and LF-only lines.  Since sed operates in
-  # text mode, it properly converts lines to CR/LF.  This bash problem
-  # is reportedly fixed, but why not run on old versions too?
-  $SED '$q' "$ltmain" >> "$cfgfile" \
-     || (rm -f "$cfgfile"; exit 1)
-
-   mv -f "$cfgfile" "$ofile" ||
-    (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile")
-  chmod +x "$ofile"
-
- ;;
-
-  esac
-done # for ac_tag
-
-
-as_fn_exit 0
diff --git a/experiments/wasm-gui/third_party/libXext/config.sub b/experiments/wasm-gui/third_party/libXext/config.sub
deleted file mode 100755
index 3d35cde17..000000000
--- a/experiments/wasm-gui/third_party/libXext/config.sub
+++ /dev/null
@@ -1,2364 +0,0 @@
-#! /bin/sh
-# Configuration validation subroutine script.
-#   Copyright 1992-2025 Free Software Foundation, Inc.
-
-# shellcheck disable=SC2006,SC2268,SC2162 # see below for rationale
-
-timestamp='2025-07-10'
-
-# This file is free software; you can redistribute it and/or modify it
-# under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-# General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, see <https://www.gnu.org/licenses/>.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program that contains a
-# configuration script generated by Autoconf, you may include it under
-# the same distribution terms that you use for the rest of that
-# program.  This Exception is an additional permission under section 7
-# of the GNU General Public License, version 3 ("GPLv3").
-
-
-# Please send patches to <config-patches@gnu.org>.
-#
-# Configuration subroutine to validate and canonicalize a configuration type.
-# Supply the specified configuration type as an argument.
-# If it is invalid, we print an error message on stderr and exit with code 1.
-# Otherwise, we print the canonical config type on stdout and succeed.
-
-# You can get the latest version of this script from:
-# https://git.savannah.gnu.org/cgit/config.git/plain/config.sub
-
-# This file is supposed to be the same for all GNU packages
-# and recognize all the CPU types, system types and aliases
-# that are meaningful with *any* GNU software.
-# Each package is responsible for reporting which valid configurations
-# it does not support.  The user should be able to distinguish
-# a failure to support a valid configuration from a meaningless
-# configuration.
-
-# The goal of this file is to map all the various variations of a given
-# machine specification into a single specification in the form:
-#	CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM
-# or in some cases, the newer four-part form:
-#	CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM
-# It is wrong to echo any other type of specification.
-
-# The "shellcheck disable" line above the timestamp inhibits complaints
-# about features and limitations of the classic Bourne shell that were
-# superseded or lifted in POSIX.  However, this script identifies a wide
-# variety of pre-POSIX systems that do not have POSIX shells at all, and
-# even some reasonably current systems (Solaris 10 as case-in-point) still
-# have a pre-POSIX /bin/sh.
-
-me=`echo "$0" | sed -e 's,.*/,,'`
-
-usage="\
-Usage: $0 [OPTION] CPU-MFR-OPSYS or ALIAS
-
-Canonicalize a configuration name.
-
-Options:
-  -h, --help         print this help, then exit
-  -t, --time-stamp   print date of last modification, then exit
-  -v, --version      print version number, then exit
-
-Report bugs and patches to <config-patches@gnu.org>."
-
-version="\
-GNU config.sub ($timestamp)
-
-Copyright 1992-2025 Free Software Foundation, Inc.
-
-This is free software; see the source for copying conditions.  There is NO
-warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE."
-
-help="
-Try '$me --help' for more information."
-
-# Parse command line
-while test $# -gt 0 ; do
-  case $1 in
-    --time-stamp | --time* | -t )
-       echo "$timestamp" ; exit ;;
-    --version | -v )
-       echo "$version" ; exit ;;
-    --help | --h* | -h )
-       echo "$usage"; exit ;;
-    -- )     # Stop option processing
-       shift; break ;;
-    - )	# Use stdin as input.
-       break ;;
-    -* )
-       echo "$me: invalid option $1$help" >&2
-       exit 1 ;;
-
-    *local*)
-       # First pass through any local machine types.
-       echo "$1"
-       exit ;;
-
-    * )
-       break ;;
-  esac
-done
-
-case $# in
- 0) echo "$me: missing argument$help" >&2
-    exit 1;;
- 1) ;;
- *) echo "$me: too many arguments$help" >&2
-    exit 1;;
-esac
-
-# Split fields of configuration type
-saved_IFS=$IFS
-IFS="-" read field1 field2 field3 field4 <<EOF
-$1
-EOF
-IFS=$saved_IFS
-
-# Separate into logical components for further validation
-case $1 in
-	*-*-*-*-*)
-		echo "Invalid configuration '$1': more than four components" >&2
-		exit 1
-		;;
-	*-*-*-*)
-		basic_machine=$field1-$field2
-		basic_os=$field3-$field4
-		;;
-	*-*-*)
-		# Ambiguous whether COMPANY is present, or skipped and KERNEL-OS is two
-		# parts
-		maybe_os=$field2-$field3
-		case $maybe_os in
-			  cloudabi*-eabi* \
-			| kfreebsd*-gnu* \
-			| knetbsd*-gnu* \
-			| kopensolaris*-gnu* \
-			| ironclad-* \
-			| linux-* \
-			| managarm-* \
-			| netbsd*-eabi* \
-			| netbsd*-gnu* \
-			| nto-qnx* \
-			| os2-emx* \
-			| rtmk-nova* \
-			| storm-chaos* \
-			| uclinux-gnu* \
-			| uclinux-uclibc* \
-			| windows-* )
-				basic_machine=$field1
-				basic_os=$maybe_os
-				;;
-			android-linux)
-				basic_machine=$field1-unknown
-				basic_os=linux-android
-				;;
-			*)
-				basic_machine=$field1-$field2
-				basic_os=$field3
-				;;
-		esac
-		;;
-	*-*)
-		case $field1-$field2 in
-			# Shorthands that happen to contain a single dash
-			convex-c[12] | convex-c3[248])
-				basic_machine=$field2-convex
-				basic_os=
-				;;
-			decstation-3100)
-				basic_machine=mips-dec
-				basic_os=
-				;;
-			*-*)
-				# Second component is usually, but not always the OS
-				case $field2 in
-					# Do not treat sunos as a manufacturer
-					sun*os*)
-						basic_machine=$field1
-						basic_os=$field2
-						;;
-					# Manufacturers
-					  3100* \
-					| 32* \
-					| 3300* \
-					| 3600* \
-					| 7300* \
-					| acorn \
-					| altos* \
-					| apollo \
-					| apple \
-					| atari \
-					| att* \
-					| axis \
-					| be \
-					| bull \
-					| cbm \
-					| ccur \
-					| cisco \
-					| commodore \
-					| convergent* \
-					| convex* \
-					| cray \
-					| crds \
-					| dec* \
-					| delta* \
-					| dg \
-					| digital \
-					| dolphin \
-					| encore* \
-					| gould \
-					| harris \
-					| highlevel \
-					| hitachi* \
-					| hp \
-					| ibm* \
-					| intergraph \
-					| isi* \
-					| knuth \
-					| masscomp \
-					| microblaze* \
-					| mips* \
-					| motorola* \
-					| ncr* \
-					| news \
-					| next \
-					| ns \
-					| oki \
-					| omron* \
-					| pc533* \
-					| rebel \
-					| rom68k \
-					| rombug \
-					| semi \
-					| sequent* \
-					| sgi* \
-					| siemens \
-					| sim \
-					| sni \
-					| sony* \
-					| stratus \
-					| sun \
-					| sun[234]* \
-					| tektronix \
-					| tti* \
-					| ultra \
-					| unicom* \
-					| wec \
-					| winbond \
-					| wrs)
-						basic_machine=$field1-$field2
-						basic_os=
-						;;
-					tock* | zephyr*)
-						basic_machine=$field1-unknown
-						basic_os=$field2
-						;;
-					*)
-						basic_machine=$field1
-						basic_os=$field2
-						;;
-				esac
-			;;
-		esac
-		;;
-	*)
-		# Convert single-component short-hands not valid as part of
-		# multi-component configurations.
-		case $field1 in
-			386bsd)
-				basic_machine=i386-pc
-				basic_os=bsd
-				;;
-			a29khif)
-				basic_machine=a29k-amd
-				basic_os=udi
-				;;
-			adobe68k)
-				basic_machine=m68010-adobe
-				basic_os=scout
-				;;
-			alliant)
-				basic_machine=fx80-alliant
-				basic_os=
-				;;
-			altos | altos3068)
-				basic_machine=m68k-altos
-				basic_os=
-				;;
-			am29k)
-				basic_machine=a29k-none
-				basic_os=bsd
-				;;
-			amdahl)
-				basic_machine=580-amdahl
-				basic_os=sysv
-				;;
-			amiga)
-				basic_machine=m68k-unknown
-				basic_os=
-				;;
-			amigaos | amigados)
-				basic_machine=m68k-unknown
-				basic_os=amigaos
-				;;
-			amigaunix | amix)
-				basic_machine=m68k-unknown
-				basic_os=sysv4
-				;;
-			apollo68)
-				basic_machine=m68k-apollo
-				basic_os=sysv
-				;;
-			apollo68bsd)
-				basic_machine=m68k-apollo
-				basic_os=bsd
-				;;
-			aros)
-				basic_machine=i386-pc
-				basic_os=aros
-				;;
-			aux)
-				basic_machine=m68k-apple
-				basic_os=aux
-				;;
-			balance)
-				basic_machine=ns32k-sequent
-				basic_os=dynix
-				;;
-			blackfin)
-				basic_machine=bfin-unknown
-				basic_os=linux
-				;;
-			cegcc)
-				basic_machine=arm-unknown
-				basic_os=cegcc
-				;;
-			cray)
-				basic_machine=j90-cray
-				basic_os=unicos
-				;;
-			crds | unos)
-				basic_machine=m68k-crds
-				basic_os=
-				;;
-			da30)
-				basic_machine=m68k-da30
-				basic_os=
-				;;
-			decstation | pmax | pmin | dec3100 | decstatn)
-				basic_machine=mips-dec
-				basic_os=
-				;;
-			delta88)
-				basic_machine=m88k-motorola
-				basic_os=sysv3
-				;;
-			dicos)
-				basic_machine=i686-pc
-				basic_os=dicos
-				;;
-			djgpp)
-				basic_machine=i586-pc
-				basic_os=msdosdjgpp
-				;;
-			ebmon29k)
-				basic_machine=a29k-amd
-				basic_os=ebmon
-				;;
-			es1800 | OSE68k | ose68k | ose | OSE)
-				basic_machine=m68k-ericsson
-				basic_os=ose
-				;;
-			gmicro)
-				basic_machine=tron-gmicro
-				basic_os=sysv
-				;;
-			go32)
-				basic_machine=i386-pc
-				basic_os=go32
-				;;
-			h8300hms)
-				basic_machine=h8300-hitachi
-				basic_os=hms
-				;;
-			h8300xray)
-				basic_machine=h8300-hitachi
-				basic_os=xray
-				;;
-			h8500hms)
-				basic_machine=h8500-hitachi
-				basic_os=hms
-				;;
-			harris)
-				basic_machine=m88k-harris
-				basic_os=sysv3
-				;;
-			hp300 | hp300hpux)
-				basic_machine=m68k-hp
-				basic_os=hpux
-				;;
-			hp300bsd)
-				basic_machine=m68k-hp
-				basic_os=bsd
-				;;
-			hppaosf)
-				basic_machine=hppa1.1-hp
-				basic_os=osf
-				;;
-			hppro)
-				basic_machine=hppa1.1-hp
-				basic_os=proelf
-				;;
-			i386mach)
-				basic_machine=i386-mach
-				basic_os=mach
-				;;
-			isi68 | isi)
-				basic_machine=m68k-isi
-				basic_os=sysv
-				;;
-			m68knommu)
-				basic_machine=m68k-unknown
-				basic_os=linux
-				;;
-			magnum | m3230)
-				basic_machine=mips-mips
-				basic_os=sysv
-				;;
-			merlin)
-				basic_machine=ns32k-utek
-				basic_os=sysv
-				;;
-			mingw64)
-				basic_machine=x86_64-pc
-				basic_os=mingw64
-				;;
-			mingw32)
-				basic_machine=i686-pc
-				basic_os=mingw32
-				;;
-			mingw32ce)
-				basic_machine=arm-unknown
-				basic_os=mingw32ce
-				;;
-			monitor)
-				basic_machine=m68k-rom68k
-				basic_os=coff
-				;;
-			morphos)
-				basic_machine=powerpc-unknown
-				basic_os=morphos
-				;;
-			moxiebox)
-				basic_machine=moxie-unknown
-				basic_os=moxiebox
-				;;
-			msdos)
-				basic_machine=i386-pc
-				basic_os=msdos
-				;;
-			msys)
-				basic_machine=i686-pc
-				basic_os=msys
-				;;
-			mvs)
-				basic_machine=i370-ibm
-				basic_os=mvs
-				;;
-			nacl)
-				basic_machine=le32-unknown
-				basic_os=nacl
-				;;
-			ncr3000)
-				basic_machine=i486-ncr
-				basic_os=sysv4
-				;;
-			netbsd386)
-				basic_machine=i386-pc
-				basic_os=netbsd
-				;;
-			netwinder)
-				basic_machine=armv4l-rebel
-				basic_os=linux
-				;;
-			news | news700 | news800 | news900)
-				basic_machine=m68k-sony
-				basic_os=newsos
-				;;
-			news1000)
-				basic_machine=m68030-sony
-				basic_os=newsos
-				;;
-			necv70)
-				basic_machine=v70-nec
-				basic_os=sysv
-				;;
-			nh3000)
-				basic_machine=m68k-harris
-				basic_os=cxux
-				;;
-			nh[45]000)
-				basic_machine=m88k-harris
-				basic_os=cxux
-				;;
-			nindy960)
-				basic_machine=i960-intel
-				basic_os=nindy
-				;;
-			mon960)
-				basic_machine=i960-intel
-				basic_os=mon960
-				;;
-			nonstopux)
-				basic_machine=mips-compaq
-				basic_os=nonstopux
-				;;
-			os400)
-				basic_machine=powerpc-ibm
-				basic_os=os400
-				;;
-			OSE68000 | ose68000)
-				basic_machine=m68000-ericsson
-				basic_os=ose
-				;;
-			os68k)
-				basic_machine=m68k-none
-				basic_os=os68k
-				;;
-			paragon)
-				basic_machine=i860-intel
-				basic_os=osf
-				;;
-			parisc)
-				basic_machine=hppa-unknown
-				basic_os=linux
-				;;
-			psp)
-				basic_machine=mipsallegrexel-sony
-				basic_os=psp
-				;;
-			pw32)
-				basic_machine=i586-unknown
-				basic_os=pw32
-				;;
-			rdos | rdos64)
-				basic_machine=x86_64-pc
-				basic_os=rdos
-				;;
-			rdos32)
-				basic_machine=i386-pc
-				basic_os=rdos
-				;;
-			rom68k)
-				basic_machine=m68k-rom68k
-				basic_os=coff
-				;;
-			sa29200)
-				basic_machine=a29k-amd
-				basic_os=udi
-				;;
-			sei)
-				basic_machine=mips-sei
-				basic_os=seiux
-				;;
-			sequent)
-				basic_machine=i386-sequent
-				basic_os=
-				;;
-			sps7)
-				basic_machine=m68k-bull
-				basic_os=sysv2
-				;;
-			st2000)
-				basic_machine=m68k-tandem
-				basic_os=
-				;;
-			stratus)
-				basic_machine=i860-stratus
-				basic_os=sysv4
-				;;
-			sun2)
-				basic_machine=m68000-sun
-				basic_os=
-				;;
-			sun2os3)
-				basic_machine=m68000-sun
-				basic_os=sunos3
-				;;
-			sun2os4)
-				basic_machine=m68000-sun
-				basic_os=sunos4
-				;;
-			sun3)
-				basic_machine=m68k-sun
-				basic_os=
-				;;
-			sun3os3)
-				basic_machine=m68k-sun
-				basic_os=sunos3
-				;;
-			sun3os4)
-				basic_machine=m68k-sun
-				basic_os=sunos4
-				;;
-			sun4)
-				basic_machine=sparc-sun
-				basic_os=
-				;;
-			sun4os3)
-				basic_machine=sparc-sun
-				basic_os=sunos3
-				;;
-			sun4os4)
-				basic_machine=sparc-sun
-				basic_os=sunos4
-				;;
-			sun4sol2)
-				basic_machine=sparc-sun
-				basic_os=solaris2
-				;;
-			sun386 | sun386i | roadrunner)
-				basic_machine=i386-sun
-				basic_os=
-				;;
-			sv1)
-				basic_machine=sv1-cray
-				basic_os=unicos
-				;;
-			symmetry)
-				basic_machine=i386-sequent
-				basic_os=dynix
-				;;
-			t3e)
-				basic_machine=alphaev5-cray
-				basic_os=unicos
-				;;
-			t90)
-				basic_machine=t90-cray
-				basic_os=unicos
-				;;
-			toad1)
-				basic_machine=pdp10-xkl
-				basic_os=tops20
-				;;
-			tpf)
-				basic_machine=s390x-ibm
-				basic_os=tpf
-				;;
-			udi29k)
-				basic_machine=a29k-amd
-				basic_os=udi
-				;;
-			ultra3)
-				basic_machine=a29k-nyu
-				basic_os=sym1
-				;;
-			v810 | necv810)
-				basic_machine=v810-nec
-				basic_os=none
-				;;
-			vaxv)
-				basic_machine=vax-dec
-				basic_os=sysv
-				;;
-			vms)
-				basic_machine=vax-dec
-				basic_os=vms
-				;;
-			vsta)
-				basic_machine=i386-pc
-				basic_os=vsta
-				;;
-			vxworks960)
-				basic_machine=i960-wrs
-				basic_os=vxworks
-				;;
-			vxworks68)
-				basic_machine=m68k-wrs
-				basic_os=vxworks
-				;;
-			vxworks29k)
-				basic_machine=a29k-wrs
-				basic_os=vxworks
-				;;
-			xbox)
-				basic_machine=i686-pc
-				basic_os=mingw32
-				;;
-			ymp)
-				basic_machine=ymp-cray
-				basic_os=unicos
-				;;
-			*)
-				basic_machine=$1
-				basic_os=
-				;;
-		esac
-		;;
-esac
-
-# Decode 1-component or ad-hoc basic machines
-case $basic_machine in
-	# Here we handle the default manufacturer of certain CPU types.  It is in
-	# some cases the only manufacturer, in others, it is the most popular.
-	w89k)
-		cpu=hppa1.1
-		vendor=winbond
-		;;
-	op50n)
-		cpu=hppa1.1
-		vendor=oki
-		;;
-	op60c)
-		cpu=hppa1.1
-		vendor=oki
-		;;
-	ibm*)
-		cpu=i370
-		vendor=ibm
-		;;
-	orion105)
-		cpu=clipper
-		vendor=highlevel
-		;;
-	mac | mpw | mac-mpw)
-		cpu=m68k
-		vendor=apple
-		;;
-	pmac | pmac-mpw)
-		cpu=powerpc
-		vendor=apple
-		;;
-
-	# Recognize the various machine names and aliases which stand
-	# for a CPU type and a company and sometimes even an OS.
-	3b1 | 7300 | 7300-att | att-7300 | pc7300 | safari | unixpc)
-		cpu=m68000
-		vendor=att
-		;;
-	3b*)
-		cpu=we32k
-		vendor=att
-		;;
-	bluegene*)
-		cpu=powerpc
-		vendor=ibm
-		basic_os=cnk
-		;;
-	decsystem10* | dec10*)
-		cpu=pdp10
-		vendor=dec
-		basic_os=tops10
-		;;
-	decsystem20* | dec20*)
-		cpu=pdp10
-		vendor=dec
-		basic_os=tops20
-		;;
-	delta | 3300 | delta-motorola | 3300-motorola | motorola-delta | motorola-3300)
-		cpu=m68k
-		vendor=motorola
-		;;
-	# This used to be dpx2*, but that gets the RS6000-based
-	# DPX/20 and the x86-based DPX/2-100 wrong.  See
-	# https://oldskool.silicium.org/stations/bull_dpx20.htm
-	# https://www.feb-patrimoine.com/english/bull_dpx2.htm
-	# https://www.feb-patrimoine.com/english/unix_and_bull.htm
-	dpx2 | dpx2[23]00 | dpx2[23]xx)
-		cpu=m68k
-		vendor=bull
-		;;
-	dpx2100 | dpx21xx)
-		cpu=i386
-		vendor=bull
-		;;
-	dpx20)
-		cpu=rs6000
-		vendor=bull
-		;;
-	encore | umax | mmax)
-		cpu=ns32k
-		vendor=encore
-		;;
-	elxsi)
-		cpu=elxsi
-		vendor=elxsi
-		basic_os=${basic_os:-bsd}
-		;;
-	fx2800)
-		cpu=i860
-		vendor=alliant
-		;;
-	genix)
-		cpu=ns32k
-		vendor=ns
-		;;
-	h3050r* | hiux*)
-		cpu=hppa1.1
-		vendor=hitachi
-		basic_os=hiuxwe2
-		;;
-	hp3k9[0-9][0-9] | hp9[0-9][0-9])
-		cpu=hppa1.0
-		vendor=hp
-		;;
-	hp9k2[0-9][0-9] | hp9k31[0-9])
-		cpu=m68000
-		vendor=hp
-		;;
-	hp9k3[2-9][0-9])
-		cpu=m68k
-		vendor=hp
-		;;
-	hp9k6[0-9][0-9] | hp6[0-9][0-9])
-		cpu=hppa1.0
-		vendor=hp
-		;;
-	hp9k7[0-79][0-9] | hp7[0-79][0-9])
-		cpu=hppa1.1
-		vendor=hp
-		;;
-	hp9k78[0-9] | hp78[0-9])
-		# FIXME: really hppa2.0-hp
-		cpu=hppa1.1
-		vendor=hp
-		;;
-	hp9k8[67]1 | hp8[67]1 | hp9k80[24] | hp80[24] | hp9k8[78]9 | hp8[78]9 | hp9k893 | hp893)
-		# FIXME: really hppa2.0-hp
-		cpu=hppa1.1
-		vendor=hp
-		;;
-	hp9k8[0-9][13679] | hp8[0-9][13679])
-		cpu=hppa1.1
-		vendor=hp
-		;;
-	hp9k8[0-9][0-9] | hp8[0-9][0-9])
-		cpu=hppa1.0
-		vendor=hp
-		;;
-	i*86v32)
-		cpu=`echo "$1" | sed -e 's/86.*/86/'`
-		vendor=pc
-		basic_os=sysv32
-		;;
-	i*86v4*)
-		cpu=`echo "$1" | sed -e 's/86.*/86/'`
-		vendor=pc
-		basic_os=sysv4
-		;;
-	i*86v)
-		cpu=`echo "$1" | sed -e 's/86.*/86/'`
-		vendor=pc
-		basic_os=sysv
-		;;
-	i*86sol2)
-		cpu=`echo "$1" | sed -e 's/86.*/86/'`
-		vendor=pc
-		basic_os=solaris2
-		;;
-	j90 | j90-cray)
-		cpu=j90
-		vendor=cray
-		basic_os=${basic_os:-unicos}
-		;;
-	iris | iris4d)
-		cpu=mips
-		vendor=sgi
-		case $basic_os in
-		    irix*)
-			;;
-		    *)
-			basic_os=irix4
-			;;
-		esac
-		;;
-	miniframe)
-		cpu=m68000
-		vendor=convergent
-		;;
-	*mint | mint[0-9]* | *MiNT | *MiNT[0-9]*)
-		cpu=m68k
-		vendor=atari
-		basic_os=mint
-		;;
-	news-3600 | risc-news)
-		cpu=mips
-		vendor=sony
-		basic_os=newsos
-		;;
-	next | m*-next)
-		cpu=m68k
-		vendor=next
-		;;
-	np1)
-		cpu=np1
-		vendor=gould
-		;;
-	op50n-* | op60c-*)
-		cpu=hppa1.1
-		vendor=oki
-		basic_os=proelf
-		;;
-	pa-hitachi)
-		cpu=hppa1.1
-		vendor=hitachi
-		basic_os=hiuxwe2
-		;;
-	pbd)
-		cpu=sparc
-		vendor=tti
-		;;
-	pbb)
-		cpu=m68k
-		vendor=tti
-		;;
-	pc532)
-		cpu=ns32k
-		vendor=pc532
-		;;
-	pn)
-		cpu=pn
-		vendor=gould
-		;;
-	power)
-		cpu=power
-		vendor=ibm
-		;;
-	ps2)
-		cpu=i386
-		vendor=ibm
-		;;
-	rm[46]00)
-		cpu=mips
-		vendor=siemens
-		;;
-	rtpc | rtpc-*)
-		cpu=romp
-		vendor=ibm
-		;;
-	sde)
-		cpu=mipsisa32
-		vendor=sde
-		basic_os=${basic_os:-elf}
-		;;
-	simso-wrs)
-		cpu=sparclite
-		vendor=wrs
-		basic_os=vxworks
-		;;
-	tower | tower-32)
-		cpu=m68k
-		vendor=ncr
-		;;
-	vpp*|vx|vx-*)
-		cpu=f301
-		vendor=fujitsu
-		;;
-	w65)
-		cpu=w65
-		vendor=wdc
-		;;
-	w89k-*)
-		cpu=hppa1.1
-		vendor=winbond
-		basic_os=proelf
-		;;
-	none)
-		cpu=none
-		vendor=none
-		;;
-	leon|leon[3-9])
-		cpu=sparc
-		vendor=$basic_machine
-		;;
-	leon-*|leon[3-9]-*)
-		cpu=sparc
-		vendor=`echo "$basic_machine" | sed 's/-.*//'`
-		;;
-
-	*-*)
-		saved_IFS=$IFS
-		IFS="-" read cpu vendor <<EOF
-$basic_machine
-EOF
-		IFS=$saved_IFS
-		;;
-	# We use 'pc' rather than 'unknown'
-	# because (1) that's what they normally are, and
-	# (2) the word "unknown" tends to confuse beginning users.
-	i*86 | x86_64)
-		cpu=$basic_machine
-		vendor=pc
-		;;
-	# These rules are duplicated from below for sake of the special case above;
-	# i.e. things that normalized to x86 arches should also default to "pc"
-	pc98)
-		cpu=i386
-		vendor=pc
-		;;
-	x64 | amd64)
-		cpu=x86_64
-		vendor=pc
-		;;
-	# Recognize the basic CPU types without company name.
-	*)
-		cpu=$basic_machine
-		vendor=unknown
-		;;
-esac
-
-unset -v basic_machine
-
-# Decode basic machines in the full and proper CPU-Company form.
-case $cpu-$vendor in
-	# Here we handle the default manufacturer of certain CPU types in canonical form.
-	# It is in some cases the only manufacturer, in others, it is the most popular.
-	c[12]-convex | c[12]-unknown | c3[248]-convex | c3[248]-unknown)
-		vendor=convex
-		basic_os=${basic_os:-bsd}
-		;;
-	craynv-unknown)
-		vendor=cray
-		basic_os=${basic_os:-unicosmp}
-		;;
-	c90-unknown | c90-cray)
-		vendor=cray
-		basic_os=${basic_os:-unicos}
-		;;
-	fx80-unknown)
-		vendor=alliant
-		;;
-	romp-unknown)
-		vendor=ibm
-		;;
-	mmix-unknown)
-		vendor=knuth
-		;;
-	microblaze-unknown | microblazeel-unknown)
-		vendor=xilinx
-		;;
-	rs6000-unknown)
-		vendor=ibm
-		;;
-	vax-unknown)
-		vendor=dec
-		;;
-	pdp11-unknown)
-		vendor=dec
-		;;
-	we32k-unknown)
-		vendor=att
-		;;
-	cydra-unknown)
-		vendor=cydrome
-		;;
-	i370-ibm*)
-		vendor=ibm
-		;;
-	orion-unknown)
-		vendor=highlevel
-		;;
-	xps-unknown | xps100-unknown)
-		cpu=xps100
-		vendor=honeywell
-		;;
-
-	# Here we normalize CPU types with a missing or matching vendor
-	armh-unknown | armh-alt)
-		cpu=armv7l
-		vendor=alt
-		basic_os=${basic_os:-linux-gnueabihf}
-		;;
-
-	# Normalized CPU+vendor pairs that imply an OS, if not otherwise specified
-	m68k-isi)
-		basic_os=${basic_os:-sysv}
-		;;
-	m68k-sony)
-		basic_os=${basic_os:-newsos}
-		;;
-	m68k-tektronix)
-		basic_os=${basic_os:-bsd}
-		;;
-	m88k-harris)
-		basic_os=${basic_os:-sysv3}
-		;;
-	i386-bull | m68k-bull)
-		basic_os=${basic_os:-sysv3}
-		;;
-	rs6000-bull)
-		basic_os=${basic_os:-bosx}
-		;;
-	mips-sni)
-		basic_os=${basic_os:-sysv4}
-		;;
-
-	# Here we normalize CPU types irrespective of the vendor
-	amd64-*)
-		cpu=x86_64
-		;;
-	blackfin-*)
-		cpu=bfin
-		basic_os=${basic_os:-linux}
-		;;
-	c54x-*)
-		cpu=tic54x
-		;;
-	c55x-*)
-		cpu=tic55x
-		;;
-	c6x-*)
-		cpu=tic6x
-		;;
-	e500v[12]-*)
-		cpu=powerpc
-		basic_os=${basic_os}"spe"
-		;;
-	mips3*-*)
-		cpu=mips64
-		;;
-	ms1-*)
-		cpu=mt
-		;;
-	m68knommu-*)
-		cpu=m68k
-		basic_os=${basic_os:-linux}
-		;;
-	m9s12z-* | m68hcs12z-* | hcs12z-* | s12z-*)
-		cpu=s12z
-		;;
-	openrisc-*)
-		cpu=or32
-		;;
-	parisc-*)
-		cpu=hppa
-		basic_os=${basic_os:-linux}
-		;;
-	pentium-* | p5-* | k5-* | k6-* | nexgen-* | viac3-*)
-		cpu=i586
-		;;
-	pentiumpro-* | p6-* | 6x86-* | athlon-* | athlon_*-*)
-		cpu=i686
-		;;
-	pentiumii-* | pentium2-* | pentiumiii-* | pentium3-*)
-		cpu=i686
-		;;
-	pentium4-*)
-		cpu=i786
-		;;
-	ppc-* | ppcbe-*)
-		cpu=powerpc
-		;;
-	ppcle-* | powerpclittle-*)
-		cpu=powerpcle
-		;;
-	ppc64-*)
-		cpu=powerpc64
-		;;
-	ppc64le-* | powerpc64little-*)
-		cpu=powerpc64le
-		;;
-	sb1-*)
-		cpu=mipsisa64sb1
-		;;
-	sb1el-*)
-		cpu=mipsisa64sb1el
-		;;
-	sh5e[lb]-*)
-		cpu=`echo "$cpu" | sed 's/^\(sh.\)e\(.\)$/\1\2e/'`
-		;;
-	spur-*)
-		cpu=spur
-		;;
-	strongarm-* | thumb-*)
-		cpu=arm
-		;;
-	tx39-*)
-		cpu=mipstx39
-		;;
-	tx39el-*)
-		cpu=mipstx39el
-		;;
-	xscale-* | xscalee[bl]-*)
-		cpu=`echo "$cpu" | sed 's/^xscale/arm/'`
-		;;
-	arm64-* | aarch64le-* | arm64_32-*)
-		cpu=aarch64
-		;;
-
-	# Recognize the canonical CPU Types that limit and/or modify the
-	# company names they are paired with.
-	cr16-*)
-		basic_os=${basic_os:-elf}
-		;;
-	crisv32-* | etraxfs*-*)
-		cpu=crisv32
-		vendor=axis
-		;;
-	cris-* | etrax*-*)
-		cpu=cris
-		vendor=axis
-		;;
-	crx-*)
-		basic_os=${basic_os:-elf}
-		;;
-	neo-tandem)
-		cpu=neo
-		vendor=tandem
-		;;
-	nse-tandem)
-		cpu=nse
-		vendor=tandem
-		;;
-	nsr-tandem)
-		cpu=nsr
-		vendor=tandem
-		;;
-	nsv-tandem)
-		cpu=nsv
-		vendor=tandem
-		;;
-	nsx-tandem)
-		cpu=nsx
-		vendor=tandem
-		;;
-	mipsallegrexel-sony)
-		cpu=mipsallegrexel
-		vendor=sony
-		;;
-	tile*-*)
-		basic_os=${basic_os:-linux-gnu}
-		;;
-
-	*)
-		# Recognize the canonical CPU types that are allowed with any
-		# company name.
-		case $cpu in
-			  1750a \
-			| 580 \
-			| [cjt]90 \
-			| a29k \
-			| aarch64 \
-			| aarch64_be \
-			| aarch64c \
-			| abacus \
-			| alpha \
-			| alpha64 \
-			| alpha64ev56 \
-			| alpha64ev6[78] \
-			| alpha64ev[4-8] \
-			| alpha64pca5[67] \
-			| alphaev56 \
-			| alphaev6[78] \
-			| alphaev[4-8] \
-			| alphapca5[67] \
-			| am33_2.0 \
-			| amdgcn \
-			| arc \
-			| arc32 \
-			| arc64 \
-			| arceb \
-			| arm \
-			| arm64e \
-			| arm64ec \
-			| arm[lb]e \
-			| arme[lb] \
-			| armv* \
-			| asmjs \
-			| avr \
-			| avr32 \
-			| ba \
-			| be32 \
-			| be64 \
-			| bfin \
-			| bpf \
-			| bs2000 \
-			| c30 \
-			| c4x \
-			| c8051 \
-			| c[123]* \
-			| clipper \
-			| craynv \
-			| csky \
-			| cydra \
-			| d10v \
-			| d30v \
-			| dlx \
-			| dsp16xx \
-			| e2k \
-			| elxsi \
-			| epiphany \
-			| f30[01] \
-			| f700 \
-			| fido \
-			| fr30 \
-			| frv \
-			| ft32 \
-			| fx80 \
-			| h8300 \
-			| h8500 \
-			| hexagon \
-			| hppa \
-			| hppa1.[01] \
-			| hppa2.0 \
-			| hppa2.0[nw] \
-			| hppa64 \
-			| i*86 \
-			| i370 \
-			| i860 \
-			| i960 \
-			| ia16 \
-			| ia64 \
-			| intelgt \
-			| ip2k \
-			| iq2000 \
-			| javascript \
-			| k1om \
-			| kvx \
-			| le32 \
-			| le64 \
-			| lm32 \
-			| loongarch32 \
-			| loongarch64 \
-			| m32c \
-			| m32r \
-			| m32rle \
-			| m5200 \
-			| m68000 \
-			| m680[012346]0 \
-			| m6811 \
-			| m6812 \
-			| m68360 \
-			| m683?2 \
-			| m68hc11 \
-			| m68hc12 \
-			| m68hcs12x \
-			| m68k \
-			| m88110 \
-			| m88k \
-			| maxq \
-			| mb \
-			| mcore \
-			| mep \
-			| metag \
-			| microblaze \
-			| microblazeel \
-			| mips* \
-			| mmix \
-			| mn10200 \
-			| mn10300 \
-			| moxie \
-			| msp430 \
-			| mt \
-			| nanomips* \
-			| nds32 \
-			| nds32be \
-			| nds32le \
-			| nfp \
-			| nios \
-			| nios2 \
-			| nios2eb \
-			| nios2el \
-			| none \
-			| np1 \
-			| ns16k \
-			| ns32k \
-			| nvptx \
-			| open8 \
-			| or1k* \
-			| or32 \
-			| orion \
-			| pdp10 \
-			| pdp11 \
-			| picochip \
-			| pj \
-			| pjl \
-			| pn \
-			| power \
-			| powerpc \
-			| powerpc64 \
-			| powerpc64le \
-			| powerpcle \
-			| powerpcspe \
-			| pru \
-			| pyramid \
-			| riscv \
-			| riscv32 \
-			| riscv32be \
-			| riscv64 \
-			| riscv64be \
-			| rl78 \
-			| romp \
-			| rs6000 \
-			| rx \
-			| s390 \
-			| s390x \
-			| score \
-			| sh \
-			| sh64 \
-			| sh64le \
-			| sh[12345][lb]e \
-			| sh[1234] \
-			| sh[1234]e[lb] \
-			| sh[23]e \
-			| sh[23]ele \
-			| sh[24]a \
-			| sh[24]ae[lb] \
-			| sh[lb]e \
-			| she[lb] \
-			| shl \
-			| sparc \
-			| sparc64 \
-			| sparc64b \
-			| sparc64v \
-			| sparc86x \
-			| sparclet \
-			| sparclite \
-			| sparcv8 \
-			| sparcv9 \
-			| sparcv9b \
-			| sparcv9v \
-			| spu \
-			| sv1 \
-			| sx* \
-			| tahoe \
-			| thumbv7* \
-			| tic30 \
-			| tic4x \
-			| tic54x \
-			| tic55x \
-			| tic6x \
-			| tic80 \
-			| tron \
-			| ubicom32 \
-			| v70 \
-			| v810 \
-			| v850 \
-			| v850e \
-			| v850e1 \
-			| v850e2 \
-			| v850e2v3 \
-			| v850es \
-			| vax \
-			| vc4 \
-			| visium \
-			| w65 \
-			| wasm32 \
-			| wasm64 \
-			| we32k \
-			| x86 \
-			| x86_64 \
-			| xc16x \
-			| xgate \
-			| xps100 \
-			| xstormy16 \
-			| xtensa* \
-			| ymp \
-			| z80 \
-			| z8k)
-				;;
-
-			*)
-				echo "Invalid configuration '$1': machine '$cpu-$vendor' not recognized" 1>&2
-				exit 1
-				;;
-		esac
-		;;
-esac
-
-# Here we canonicalize certain aliases for manufacturers.
-case $vendor in
-	digital*)
-		vendor=dec
-		;;
-	commodore*)
-		vendor=cbm
-		;;
-	*)
-		;;
-esac
-
-# Decode manufacturer-specific aliases for certain operating systems.
-
-if test x"$basic_os" != x
-then
-
-# First recognize some ad-hoc cases, or perhaps split kernel-os, or else just
-# set os.
-obj=
-case $basic_os in
-	gnu/linux*)
-		kernel=linux
-		os=`echo "$basic_os" | sed -e 's|gnu/linux|gnu|'`
-		;;
-	os2-emx)
-		kernel=os2
-		os=`echo "$basic_os" | sed -e 's|os2-emx|emx|'`
-		;;
-	nto-qnx*)
-		kernel=nto
-		os=`echo "$basic_os" | sed -e 's|nto-qnx|qnx|'`
-		;;
-	*-*)
-		saved_IFS=$IFS
-		IFS="-" read kernel os <<EOF
-$basic_os
-EOF
-		IFS=$saved_IFS
-		;;
-	# Default OS when just kernel was specified
-	nto*)
-		kernel=nto
-		os=`echo "$basic_os" | sed -e 's|nto|qnx|'`
-		;;
-	ironclad*)
-		kernel=ironclad
-		os=`echo "$basic_os" | sed -e 's|ironclad|mlibc|'`
-		;;
-	linux*)
-		kernel=linux
-		os=`echo "$basic_os" | sed -e 's|linux|gnu|'`
-		;;
-	managarm*)
-		kernel=managarm
-		os=`echo "$basic_os" | sed -e 's|managarm|mlibc|'`
-		;;
-	*)
-		kernel=
-		os=$basic_os
-		;;
-esac
-
-# Now, normalize the OS (knowing we just have one component, it's not a kernel,
-# etc.)
-case $os in
-	# First match some system type aliases that might get confused
-	# with valid system types.
-	# solaris* is a basic system type, with this one exception.
-	auroraux)
-		os=auroraux
-		;;
-	bluegene*)
-		os=cnk
-		;;
-	solaris1 | solaris1.*)
-		os=`echo "$os" | sed -e 's|solaris1|sunos4|'`
-		;;
-	solaris)
-		os=solaris2
-		;;
-	unixware*)
-		os=sysv4.2uw
-		;;
-	# The marketing names for NeXT's operating systems were
-	# NeXTSTEP, NeXTSTEP 2, OpenSTEP 3, OpenSTEP 4.  'openstep' is
-	# mapped to 'openstep3', but 'openstep1' and 'openstep2' are
-	# mapped to 'nextstep' and 'nextstep2', consistent with the
-	# treatment of SunOS/Solaris.
-	ns | ns1 | nextstep | nextstep1 | openstep1)
-		os=nextstep
-		;;
-	ns2 | nextstep2 | openstep2)
-		os=nextstep2
-		;;
-	ns3 | nextstep3 | openstep | openstep3)
-		os=openstep3
-		;;
-	ns4 | nextstep4 | openstep4)
-		os=openstep4
-		;;
-	# es1800 is here to avoid being matched by es* (a different OS)
-	es1800*)
-		os=ose
-		;;
-	# Some version numbers need modification
-	chorusos*)
-		os=chorusos
-		;;
-	isc)
-		os=isc2.2
-		;;
-	sco6)
-		os=sco5v6
-		;;
-	sco5)
-		os=sco3.2v5
-		;;
-	sco4)
-		os=sco3.2v4
-		;;
-	sco3.2.[4-9]*)
-		os=`echo "$os" | sed -e 's/sco3.2./sco3.2v/'`
-		;;
-	sco*v* | scout)
-		# Don't match below
-		;;
-	sco*)
-		os=sco3.2v2
-		;;
-	psos*)
-		os=psos
-		;;
-	qnx*)
-		os=qnx
-		;;
-	hiux*)
-		os=hiuxwe2
-		;;
-	lynx*178)
-		os=lynxos178
-		;;
-	lynx*5)
-		os=lynxos5
-		;;
-	lynxos*)
-		# don't get caught up in next wildcard
-		;;
-	lynx*)
-		os=lynxos
-		;;
-	mac[0-9]*)
-		os=`echo "$os" | sed -e 's|mac|macos|'`
-		;;
-	opened*)
-		os=openedition
-		;;
-	os400*)
-		os=os400
-		;;
-	sunos5*)
-		os=`echo "$os" | sed -e 's|sunos5|solaris2|'`
-		;;
-	sunos6*)
-		os=`echo "$os" | sed -e 's|sunos6|solaris3|'`
-		;;
-	wince*)
-		os=wince
-		;;
-	utek*)
-		os=bsd
-		vendor=`echo "$vendor" | sed -e 's|^unknown$|tektronix|'`
-		;;
-	dynix*)
-		os=bsd
-		;;
-	acis*)
-		os=aos
-		;;
-	atheos*)
-		os=atheos
-		;;
-	syllable*)
-		os=syllable
-		;;
-	386bsd)
-		os=bsd
-		;;
-	ctix*)
-		os=sysv
-		vendor=`echo "$vendor" | sed -e 's|^unknown$|convergent|'`
-		;;
-	uts*)
-		os=sysv
-		;;
-	nova*)
-		kernel=rtmk
-		os=nova
-		;;
-	# Preserve the version number of sinix5.
-	sinix5.*)
-		os=`echo "$os" | sed -e 's|sinix|sysv|'`
-		vendor=`echo "$vendor" | sed -e 's|^unknown$|sni|'`
-		;;
-	sinix*)
-		os=sysv4
-		vendor=`echo "$vendor" | sed -e 's|^unknown$|sni|'`
-		;;
-	tpf*)
-		os=tpf
-		;;
-	triton*)
-		os=sysv3
-		;;
-	oss*)
-		os=sysv3
-		;;
-	svr4*)
-		os=sysv4
-		;;
-	svr3)
-		os=sysv3
-		;;
-	sysvr4)
-		os=sysv4
-		;;
-	ose*)
-		os=ose
-		;;
-	*mint | mint[0-9]* | *MiNT | MiNT[0-9]*)
-		os=mint
-		;;
-	dicos*)
-		os=dicos
-		;;
-	pikeos*)
-		# Until real need of OS specific support for
-		# particular features comes up, bare metal
-		# configurations are quite functional.
-		case $cpu in
-		    arm*)
-			os=eabi
-			;;
-		    *)
-			os=
-			obj=elf
-			;;
-		esac
-		;;
-	aout* | coff* | elf* | pe*)
-		# These are machine code file formats, not OSes
-		obj=$os
-		os=
-		;;
-	*)
-		# No normalization, but not necessarily accepted, that comes below.
-		;;
-esac
-
-else
-
-# Here we handle the default operating systems that come with various machines.
-# The value should be what the vendor currently ships out the door with their
-# machine or put another way, the most popular os provided with the machine.
-
-# Note that if you're going to try to match "-MANUFACTURER" here (say,
-# "-sun"), then you have to tell the case statement up towards the top
-# that MANUFACTURER isn't an operating system.  Otherwise, code above
-# will signal an error saying that MANUFACTURER isn't an operating
-# system, and we'll never get to this point.
-
-kernel=
-obj=
-case $cpu-$vendor in
-	score-*)
-		os=
-		obj=elf
-		;;
-	spu-*)
-		os=
-		obj=elf
-		;;
-	*-acorn)
-		os=riscix1.2
-		;;
-	arm*-rebel)
-		kernel=linux
-		os=gnu
-		;;
-	arm*-semi)
-		os=
-		obj=aout
-		;;
-	c4x-* | tic4x-*)
-		os=
-		obj=coff
-		;;
-	c8051-*)
-		os=
-		obj=elf
-		;;
-	clipper-intergraph)
-		os=clix
-		;;
-	hexagon-*)
-		os=
-		obj=elf
-		;;
-	tic54x-*)
-		os=
-		obj=coff
-		;;
-	tic55x-*)
-		os=
-		obj=coff
-		;;
-	tic6x-*)
-		os=
-		obj=coff
-		;;
-	# This must come before the *-dec entry.
-	pdp10-*)
-		os=tops20
-		;;
-	pdp11-*)
-		os=none
-		;;
-	*-dec | vax-*)
-		os=ultrix4.2
-		;;
-	m68*-apollo)
-		os=domain
-		;;
-	i386-sun)
-		os=sunos4.0.2
-		;;
-	m68000-sun)
-		os=sunos3
-		;;
-	m68*-cisco)
-		os=
-		obj=aout
-		;;
-	mep-*)
-		os=
-		obj=elf
-		;;
-	# The -sgi and -siemens entries must be before the mips- entry
-	# or we get the wrong os.
-	*-sgi)
-		os=irix
-		;;
-	*-siemens)
-		os=sysv4
-		;;
-	mips*-cisco)
-		os=
-		obj=elf
-		;;
-	mips*-*|nanomips*-*)
-		os=
-		obj=elf
-		;;
-	or32-*)
-		os=
-		obj=coff
-		;;
-	# This must be before the sparc-* entry or we get the wrong os.
-	*-tti)
-		os=sysv3
-		;;
-	sparc-* | *-sun)
-		os=sunos4.1.1
-		;;
-	pru-*)
-		os=
-		obj=elf
-		;;
-	*-be)
-		os=beos
-		;;
-	*-ibm)
-		os=aix
-		;;
-	*-knuth)
-		os=mmixware
-		;;
-	*-wec)
-		os=proelf
-		;;
-	*-winbond)
-		os=proelf
-		;;
-	*-oki)
-		os=proelf
-		;;
-	*-hp)
-		os=hpux
-		;;
-	*-hitachi)
-		os=hiuxwe2
-		;;
-	i860-* | *-att | *-ncr | *-altos | *-motorola | *-convergent)
-		os=sysv
-		;;
-	*-cbm)
-		os=amigaos
-		;;
-	*-dg)
-		os=dgux
-		;;
-	*-dolphin)
-		os=sysv3
-		;;
-	m68k-ccur)
-		os=rtu
-		;;
-	m88k-omron*)
-		os=luna
-		;;
-	*-next)
-		os=nextstep
-		;;
-	*-sequent)
-		os=ptx
-		;;
-	*-crds)
-		os=unos
-		;;
-	*-ns)
-		os=genix
-		;;
-	i370-*)
-		os=mvs
-		;;
-	*-gould)
-		os=sysv
-		;;
-	*-highlevel)
-		os=bsd
-		;;
-	*-encore)
-		os=bsd
-		;;
-	*-masscomp)
-		os=rtu
-		;;
-	f30[01]-fujitsu | f700-fujitsu)
-		os=uxpv
-		;;
-	*-rom68k)
-		os=
-		obj=coff
-		;;
-	*-*bug)
-		os=
-		obj=coff
-		;;
-	*-apple)
-		os=macos
-		;;
-	*-atari*)
-		os=mint
-		;;
-	*-wrs)
-		os=vxworks
-		;;
-	*)
-		os=none
-		;;
-esac
-
-fi
-
-# Now, validate our (potentially fixed-up) individual pieces (OS, OBJ).
-
-case $os in
-	# Sometimes we do "kernel-libc", so those need to count as OSes.
-	llvm* | musl* | newlib* | relibc* | uclibc*)
-		;;
-	# Likewise for "kernel-abi"
-	eabi* | gnueabi*)
-		;;
-	# VxWorks passes extra cpu info in the 4th filed.
-	simlinux | simwindows | spe)
-		;;
-	# See `case $cpu-$os` validation below
-	ghcjs)
-		;;
-	# Now accept the basic system types.
-	# Each alternative MUST end in a * to match a version number.
-	  abug \
-	| aix* \
-	| amdhsa* \
-	| amigados* \
-	| amigaos* \
-	| android* \
-	| aof* \
-	| aos* \
-	| aros* \
-	| atheos* \
-	| auroraux* \
-	| aux* \
-	| banan_os* \
-	| beos* \
-	| bitrig* \
-	| bme* \
-	| bosx* \
-	| bsd* \
-	| cegcc* \
-	| chorusos* \
-	| chorusrdb* \
-	| clix* \
-	| cloudabi* \
-	| cnk* \
-	| conix* \
-	| cos* \
-	| cxux* \
-	| cygwin* \
-	| darwin* \
-	| dgux* \
-	| dicos* \
-	| dnix* \
-	| domain* \
-	| dragonfly* \
-	| drops* \
-	| ebmon* \
-	| ecoff* \
-	| ekkobsd* \
-	| emscripten* \
-	| emx* \
-	| es* \
-	| fiwix* \
-	| freebsd* \
-	| fuchsia* \
-	| genix* \
-	| genode* \
-	| glidix* \
-	| gnu* \
-	| go32* \
-	| haiku* \
-	| hcos* \
-	| hiux* \
-	| hms* \
-	| hpux* \
-	| ieee* \
-	| interix* \
-	| ios* \
-	| iris* \
-	| irix* \
-	| isc* \
-	| its* \
-	| l4re* \
-	| libertybsd* \
-	| lites* \
-	| lnews* \
-	| luna* \
-	| lynxos* \
-	| mach* \
-	| macos* \
-	| magic* \
-	| mbr* \
-	| midipix* \
-	| midnightbsd* \
-	| mingw32* \
-	| mingw64* \
-	| minix* \
-	| mint* \
-	| mirbsd* \
-	| mks* \
-	| mlibc* \
-	| mmixware* \
-	| mon960* \
-	| morphos* \
-	| moss* \
-	| moxiebox* \
-	| mpeix* \
-	| mpw* \
-	| msdos* \
-	| msys* \
-	| mvs* \
-	| nacl* \
-	| netbsd* \
-	| netware* \
-	| newsos* \
-	| nextstep* \
-	| nindy* \
-	| nonstopux* \
-	| nova* \
-	| nsk* \
-	| nucleus* \
-	| nx6 \
-	| nx7 \
-	| oabi* \
-	| ohos* \
-	| onefs* \
-	| openbsd* \
-	| openedition* \
-	| openstep* \
-	| os108* \
-	| os2* \
-	| os400* \
-	| os68k* \
-	| os9* \
-	| ose* \
-	| osf* \
-	| oskit* \
-	| osx* \
-	| palmos* \
-	| phoenix* \
-	| plan9* \
-	| powermax* \
-	| powerunix* \
-	| proelf* \
-	| psos* \
-	| psp* \
-	| ptx* \
-	| pw32* \
-	| qnx* \
-	| rdos* \
-	| redox* \
-	| rhapsody* \
-	| riscix* \
-	| riscos* \
-	| rtems* \
-	| rtmk* \
-	| rtu* \
-	| scout* \
-	| secbsd* \
-	| sei* \
-	| serenity* \
-	| sim* \
-	| skyos* \
-	| solaris* \
-	| solidbsd* \
-	| sortix* \
-	| storm-chaos* \
-	| sunos \
-	| sunos[34]* \
-	| superux* \
-	| syllable* \
-	| sym* \
-	| sysv* \
-	| tenex* \
-	| tirtos* \
-	| tock* \
-	| toppers* \
-	| tops10* \
-	| tops20* \
-	| tpf* \
-	| tvos* \
-	| twizzler* \
-	| uclinux* \
-	| udi* \
-	| udk* \
-	| ultrix* \
-	| unicos* \
-	| uniplus* \
-	| unleashed* \
-	| unos* \
-	| uwin* \
-	| uxpv* \
-	| v88r* \
-	|*vms* \
-	| vos* \
-	| vsta* \
-	| vxsim* \
-	| vxworks* \
-	| wasi* \
-	| watchos* \
-	| wince* \
-	| windiss* \
-	| windows* \
-	| winnt* \
-	| xenix* \
-	| xray* \
-	| zephyr* \
-	| zvmoe* )
-		;;
-	# This one is extra strict with allowed versions
-	sco3.2v2 | sco3.2v[4-9]* | sco5v6*)
-		# Don't forget version if it is 3.2v4 or newer.
-		;;
-	# This refers to builds using the UEFI calling convention
-	# (which depends on the architecture) and PE file format.
-	# Note that this is both a different calling convention and
-	# different file format than that of GNU-EFI
-	# (x86_64-w64-mingw32).
-	uefi)
-		;;
-	none)
-		;;
-	kernel* | msvc* )
-		# Restricted further below
-		;;
-	'')
-		if test x"$obj" = x
-		then
-			echo "Invalid configuration '$1': Blank OS only allowed with explicit machine code file format" 1>&2
-		fi
-		;;
-	*)
-		echo "Invalid configuration '$1': OS '$os' not recognized" 1>&2
-		exit 1
-		;;
-esac
-
-case $obj in
-	aout* | coff* | elf* | pe*)
-		;;
-	'')
-		# empty is fine
-		;;
-	*)
-		echo "Invalid configuration '$1': Machine code format '$obj' not recognized" 1>&2
-		exit 1
-		;;
-esac
-
-# Here we handle the constraint that a (synthetic) cpu and os are
-# valid only in combination with each other and nowhere else.
-case $cpu-$os in
-	# The "javascript-unknown-ghcjs" triple is used by GHC; we
-	# accept it here in order to tolerate that, but reject any
-	# variations.
-	javascript-ghcjs)
-		;;
-	javascript-* | *-ghcjs)
-		echo "Invalid configuration '$1': cpu '$cpu' is not valid with os '$os$obj'" 1>&2
-		exit 1
-		;;
-esac
-
-# As a final step for OS-related things, validate the OS-kernel combination
-# (given a valid OS), if there is a kernel.
-case $kernel-$os-$obj in
-	linux-gnu*- | linux-android*- | linux-dietlibc*- | linux-llvm*- \
-		    | linux-mlibc*- | linux-musl*- | linux-newlib*- \
-		    | linux-relibc*- | linux-uclibc*- | linux-ohos*- )
-		;;
-	uclinux-uclibc*- | uclinux-gnu*- )
-		;;
-	ironclad-mlibc*-)
-		;;
-	managarm-mlibc*- | managarm-kernel*- )
-		;;
-	windows*-msvc*-)
-		;;
-	-dietlibc*- | -llvm*- | -mlibc*- | -musl*- | -newlib*- | -relibc*- \
-		    | -uclibc*- )
-		# These are just libc implementations, not actual OSes, and thus
-		# require a kernel.
-		echo "Invalid configuration '$1': libc '$os' needs explicit kernel." 1>&2
-		exit 1
-		;;
-	-kernel*- )
-		echo "Invalid configuration '$1': '$os' needs explicit kernel." 1>&2
-		exit 1
-		;;
-	*-kernel*- )
-		echo "Invalid configuration '$1': '$kernel' does not support '$os'." 1>&2
-		exit 1
-		;;
-	*-msvc*- )
-		echo "Invalid configuration '$1': '$os' needs 'windows'." 1>&2
-		exit 1
-		;;
-	kfreebsd*-gnu*- | knetbsd*-gnu*- | netbsd*-gnu*- | kopensolaris*-gnu*-)
-		;;
-	vxworks-simlinux- | vxworks-simwindows- | vxworks-spe-)
-		;;
-	nto-qnx*-)
-		;;
-	os2-emx-)
-		;;
-	rtmk-nova-)
-		;;
-	*-eabi*- | *-gnueabi*-)
-		;;
-	ios*-simulator- | tvos*-simulator- | watchos*-simulator- )
-		;;
-	none--*)
-		# None (no kernel, i.e. freestanding / bare metal),
-		# can be paired with an machine code file format
-		;;
-	-*-)
-		# Blank kernel with real OS is always fine.
-		;;
-	--*)
-		# Blank kernel and OS with real machine code file format is always fine.
-		;;
-	*-*-*)
-		echo "Invalid configuration '$1': Kernel '$kernel' not known to work with OS '$os'." 1>&2
-		exit 1
-		;;
-esac
-
-# Here we handle the case where we know the os, and the CPU type, but not the
-# manufacturer.  We pick the logical manufacturer.
-case $vendor in
-	unknown)
-		case $cpu-$os in
-			*-riscix*)
-				vendor=acorn
-				;;
-			*-sunos* | *-solaris*)
-				vendor=sun
-				;;
-			*-cnk* | *-aix*)
-				vendor=ibm
-				;;
-			*-beos*)
-				vendor=be
-				;;
-			*-hpux*)
-				vendor=hp
-				;;
-			*-mpeix*)
-				vendor=hp
-				;;
-			*-hiux*)
-				vendor=hitachi
-				;;
-			*-unos*)
-				vendor=crds
-				;;
-			*-dgux*)
-				vendor=dg
-				;;
-			*-luna*)
-				vendor=omron
-				;;
-			*-genix*)
-				vendor=ns
-				;;
-			*-clix*)
-				vendor=intergraph
-				;;
-			*-mvs* | *-opened*)
-				vendor=ibm
-				;;
-			*-os400*)
-				vendor=ibm
-				;;
-			s390-* | s390x-*)
-				vendor=ibm
-				;;
-			*-ptx*)
-				vendor=sequent
-				;;
-			*-tpf*)
-				vendor=ibm
-				;;
-			*-vxsim* | *-vxworks* | *-windiss*)
-				vendor=wrs
-				;;
-			*-aux*)
-				vendor=apple
-				;;
-			*-hms*)
-				vendor=hitachi
-				;;
-			*-mpw* | *-macos*)
-				vendor=apple
-				;;
-			*-*mint | *-mint[0-9]* | *-*MiNT | *-MiNT[0-9]*)
-				vendor=atari
-				;;
-			*-vos*)
-				vendor=stratus
-				;;
-		esac
-		;;
-esac
-
-echo "$cpu-$vendor${kernel:+-$kernel}${os:+-$os}${obj:+-$obj}"
-exit
-
-# Local variables:
-# eval: (add-hook 'before-save-hook 'time-stamp nil t)
-# time-stamp-start: "timestamp='"
-# time-stamp-format: "%Y-%02m-%02d"
-# time-stamp-end: "'"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXext/config.sub~ b/experiments/wasm-gui/third_party/libXext/config.sub~
deleted file mode 100755
index 4aaae46f6..000000000
--- a/experiments/wasm-gui/third_party/libXext/config.sub~
+++ /dev/null
@@ -1,2354 +0,0 @@
-#! /bin/sh
-# Configuration validation subroutine script.
-#   Copyright 1992-2024 Free Software Foundation, Inc.
-
-# shellcheck disable=SC2006,SC2268,SC2162 # see below for rationale
-
-timestamp='2024-05-27'
-
-# This file is free software; you can redistribute it and/or modify it
-# under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-# General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, see <https://www.gnu.org/licenses/>.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program that contains a
-# configuration script generated by Autoconf, you may include it under
-# the same distribution terms that you use for the rest of that
-# program.  This Exception is an additional permission under section 7
-# of the GNU General Public License, version 3 ("GPLv3").
-
-
-# Please send patches to <config-patches@gnu.org>.
-#
-# Configuration subroutine to validate and canonicalize a configuration type.
-# Supply the specified configuration type as an argument.
-# If it is invalid, we print an error message on stderr and exit with code 1.
-# Otherwise, we print the canonical config type on stdout and succeed.
-
-# You can get the latest version of this script from:
-# https://git.savannah.gnu.org/cgit/config.git/plain/config.sub
-
-# This file is supposed to be the same for all GNU packages
-# and recognize all the CPU types, system types and aliases
-# that are meaningful with *any* GNU software.
-# Each package is responsible for reporting which valid configurations
-# it does not support.  The user should be able to distinguish
-# a failure to support a valid configuration from a meaningless
-# configuration.
-
-# The goal of this file is to map all the various variations of a given
-# machine specification into a single specification in the form:
-#	CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM
-# or in some cases, the newer four-part form:
-#	CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM
-# It is wrong to echo any other type of specification.
-
-# The "shellcheck disable" line above the timestamp inhibits complaints
-# about features and limitations of the classic Bourne shell that were
-# superseded or lifted in POSIX.  However, this script identifies a wide
-# variety of pre-POSIX systems that do not have POSIX shells at all, and
-# even some reasonably current systems (Solaris 10 as case-in-point) still
-# have a pre-POSIX /bin/sh.
-
-me=`echo "$0" | sed -e 's,.*/,,'`
-
-usage="\
-Usage: $0 [OPTION] CPU-MFR-OPSYS or ALIAS
-
-Canonicalize a configuration name.
-
-Options:
-  -h, --help         print this help, then exit
-  -t, --time-stamp   print date of last modification, then exit
-  -v, --version      print version number, then exit
-
-Report bugs and patches to <config-patches@gnu.org>."
-
-version="\
-GNU config.sub ($timestamp)
-
-Copyright 1992-2024 Free Software Foundation, Inc.
-
-This is free software; see the source for copying conditions.  There is NO
-warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE."
-
-help="
-Try '$me --help' for more information."
-
-# Parse command line
-while test $# -gt 0 ; do
-  case $1 in
-    --time-stamp | --time* | -t )
-       echo "$timestamp" ; exit ;;
-    --version | -v )
-       echo "$version" ; exit ;;
-    --help | --h* | -h )
-       echo "$usage"; exit ;;
-    -- )     # Stop option processing
-       shift; break ;;
-    - )	# Use stdin as input.
-       break ;;
-    -* )
-       echo "$me: invalid option $1$help" >&2
-       exit 1 ;;
-
-    *local*)
-       # First pass through any local machine types.
-       echo "$1"
-       exit ;;
-
-    * )
-       break ;;
-  esac
-done
-
-case $# in
- 0) echo "$me: missing argument$help" >&2
-    exit 1;;
- 1) ;;
- *) echo "$me: too many arguments$help" >&2
-    exit 1;;
-esac
-
-# Split fields of configuration type
-saved_IFS=$IFS
-IFS="-" read field1 field2 field3 field4 <<EOF
-$1
-EOF
-IFS=$saved_IFS
-
-# Separate into logical components for further validation
-case $1 in
-	*-*-*-*-*)
-		echo "Invalid configuration '$1': more than four components" >&2
-		exit 1
-		;;
-	*-*-*-*)
-		basic_machine=$field1-$field2
-		basic_os=$field3-$field4
-		;;
-	*-*-*)
-		# Ambiguous whether COMPANY is present, or skipped and KERNEL-OS is two
-		# parts
-		maybe_os=$field2-$field3
-		case $maybe_os in
-			  cloudabi*-eabi* \
-			| kfreebsd*-gnu* \
-			| knetbsd*-gnu* \
-			| kopensolaris*-gnu* \
-			| linux-* \
-			| managarm-* \
-			| netbsd*-eabi* \
-			| netbsd*-gnu* \
-			| nto-qnx* \
-			| os2-emx* \
-			| rtmk-nova* \
-			| storm-chaos* \
-			| uclinux-gnu* \
-			| uclinux-uclibc* \
-			| windows-* )
-				basic_machine=$field1
-				basic_os=$maybe_os
-				;;
-			android-linux)
-				basic_machine=$field1-unknown
-				basic_os=linux-android
-				;;
-			*)
-				basic_machine=$field1-$field2
-				basic_os=$field3
-				;;
-		esac
-		;;
-	*-*)
-		case $field1-$field2 in
-			# Shorthands that happen to contain a single dash
-			convex-c[12] | convex-c3[248])
-				basic_machine=$field2-convex
-				basic_os=
-				;;
-			decstation-3100)
-				basic_machine=mips-dec
-				basic_os=
-				;;
-			*-*)
-				# Second component is usually, but not always the OS
-				case $field2 in
-					# Do not treat sunos as a manufacturer
-					sun*os*)
-						basic_machine=$field1
-						basic_os=$field2
-						;;
-					# Manufacturers
-					  3100* \
-					| 32* \
-					| 3300* \
-					| 3600* \
-					| 7300* \
-					| acorn \
-					| altos* \
-					| apollo \
-					| apple \
-					| atari \
-					| att* \
-					| axis \
-					| be \
-					| bull \
-					| cbm \
-					| ccur \
-					| cisco \
-					| commodore \
-					| convergent* \
-					| convex* \
-					| cray \
-					| crds \
-					| dec* \
-					| delta* \
-					| dg \
-					| digital \
-					| dolphin \
-					| encore* \
-					| gould \
-					| harris \
-					| highlevel \
-					| hitachi* \
-					| hp \
-					| ibm* \
-					| intergraph \
-					| isi* \
-					| knuth \
-					| masscomp \
-					| microblaze* \
-					| mips* \
-					| motorola* \
-					| ncr* \
-					| news \
-					| next \
-					| ns \
-					| oki \
-					| omron* \
-					| pc533* \
-					| rebel \
-					| rom68k \
-					| rombug \
-					| semi \
-					| sequent* \
-					| siemens \
-					| sgi* \
-					| siemens \
-					| sim \
-					| sni \
-					| sony* \
-					| stratus \
-					| sun \
-					| sun[234]* \
-					| tektronix \
-					| tti* \
-					| ultra \
-					| unicom* \
-					| wec \
-					| winbond \
-					| wrs)
-						basic_machine=$field1-$field2
-						basic_os=
-						;;
-					zephyr*)
-						basic_machine=$field1-unknown
-						basic_os=$field2
-						;;
-					*)
-						basic_machine=$field1
-						basic_os=$field2
-						;;
-				esac
-			;;
-		esac
-		;;
-	*)
-		# Convert single-component short-hands not valid as part of
-		# multi-component configurations.
-		case $field1 in
-			386bsd)
-				basic_machine=i386-pc
-				basic_os=bsd
-				;;
-			a29khif)
-				basic_machine=a29k-amd
-				basic_os=udi
-				;;
-			adobe68k)
-				basic_machine=m68010-adobe
-				basic_os=scout
-				;;
-			alliant)
-				basic_machine=fx80-alliant
-				basic_os=
-				;;
-			altos | altos3068)
-				basic_machine=m68k-altos
-				basic_os=
-				;;
-			am29k)
-				basic_machine=a29k-none
-				basic_os=bsd
-				;;
-			amdahl)
-				basic_machine=580-amdahl
-				basic_os=sysv
-				;;
-			amiga)
-				basic_machine=m68k-unknown
-				basic_os=
-				;;
-			amigaos | amigados)
-				basic_machine=m68k-unknown
-				basic_os=amigaos
-				;;
-			amigaunix | amix)
-				basic_machine=m68k-unknown
-				basic_os=sysv4
-				;;
-			apollo68)
-				basic_machine=m68k-apollo
-				basic_os=sysv
-				;;
-			apollo68bsd)
-				basic_machine=m68k-apollo
-				basic_os=bsd
-				;;
-			aros)
-				basic_machine=i386-pc
-				basic_os=aros
-				;;
-			aux)
-				basic_machine=m68k-apple
-				basic_os=aux
-				;;
-			balance)
-				basic_machine=ns32k-sequent
-				basic_os=dynix
-				;;
-			blackfin)
-				basic_machine=bfin-unknown
-				basic_os=linux
-				;;
-			cegcc)
-				basic_machine=arm-unknown
-				basic_os=cegcc
-				;;
-			cray)
-				basic_machine=j90-cray
-				basic_os=unicos
-				;;
-			crds | unos)
-				basic_machine=m68k-crds
-				basic_os=
-				;;
-			da30)
-				basic_machine=m68k-da30
-				basic_os=
-				;;
-			decstation | pmax | pmin | dec3100 | decstatn)
-				basic_machine=mips-dec
-				basic_os=
-				;;
-			delta88)
-				basic_machine=m88k-motorola
-				basic_os=sysv3
-				;;
-			dicos)
-				basic_machine=i686-pc
-				basic_os=dicos
-				;;
-			djgpp)
-				basic_machine=i586-pc
-				basic_os=msdosdjgpp
-				;;
-			ebmon29k)
-				basic_machine=a29k-amd
-				basic_os=ebmon
-				;;
-			es1800 | OSE68k | ose68k | ose | OSE)
-				basic_machine=m68k-ericsson
-				basic_os=ose
-				;;
-			gmicro)
-				basic_machine=tron-gmicro
-				basic_os=sysv
-				;;
-			go32)
-				basic_machine=i386-pc
-				basic_os=go32
-				;;
-			h8300hms)
-				basic_machine=h8300-hitachi
-				basic_os=hms
-				;;
-			h8300xray)
-				basic_machine=h8300-hitachi
-				basic_os=xray
-				;;
-			h8500hms)
-				basic_machine=h8500-hitachi
-				basic_os=hms
-				;;
-			harris)
-				basic_machine=m88k-harris
-				basic_os=sysv3
-				;;
-			hp300 | hp300hpux)
-				basic_machine=m68k-hp
-				basic_os=hpux
-				;;
-			hp300bsd)
-				basic_machine=m68k-hp
-				basic_os=bsd
-				;;
-			hppaosf)
-				basic_machine=hppa1.1-hp
-				basic_os=osf
-				;;
-			hppro)
-				basic_machine=hppa1.1-hp
-				basic_os=proelf
-				;;
-			i386mach)
-				basic_machine=i386-mach
-				basic_os=mach
-				;;
-			isi68 | isi)
-				basic_machine=m68k-isi
-				basic_os=sysv
-				;;
-			m68knommu)
-				basic_machine=m68k-unknown
-				basic_os=linux
-				;;
-			magnum | m3230)
-				basic_machine=mips-mips
-				basic_os=sysv
-				;;
-			merlin)
-				basic_machine=ns32k-utek
-				basic_os=sysv
-				;;
-			mingw64)
-				basic_machine=x86_64-pc
-				basic_os=mingw64
-				;;
-			mingw32)
-				basic_machine=i686-pc
-				basic_os=mingw32
-				;;
-			mingw32ce)
-				basic_machine=arm-unknown
-				basic_os=mingw32ce
-				;;
-			monitor)
-				basic_machine=m68k-rom68k
-				basic_os=coff
-				;;
-			morphos)
-				basic_machine=powerpc-unknown
-				basic_os=morphos
-				;;
-			moxiebox)
-				basic_machine=moxie-unknown
-				basic_os=moxiebox
-				;;
-			msdos)
-				basic_machine=i386-pc
-				basic_os=msdos
-				;;
-			msys)
-				basic_machine=i686-pc
-				basic_os=msys
-				;;
-			mvs)
-				basic_machine=i370-ibm
-				basic_os=mvs
-				;;
-			nacl)
-				basic_machine=le32-unknown
-				basic_os=nacl
-				;;
-			ncr3000)
-				basic_machine=i486-ncr
-				basic_os=sysv4
-				;;
-			netbsd386)
-				basic_machine=i386-pc
-				basic_os=netbsd
-				;;
-			netwinder)
-				basic_machine=armv4l-rebel
-				basic_os=linux
-				;;
-			news | news700 | news800 | news900)
-				basic_machine=m68k-sony
-				basic_os=newsos
-				;;
-			news1000)
-				basic_machine=m68030-sony
-				basic_os=newsos
-				;;
-			necv70)
-				basic_machine=v70-nec
-				basic_os=sysv
-				;;
-			nh3000)
-				basic_machine=m68k-harris
-				basic_os=cxux
-				;;
-			nh[45]000)
-				basic_machine=m88k-harris
-				basic_os=cxux
-				;;
-			nindy960)
-				basic_machine=i960-intel
-				basic_os=nindy
-				;;
-			mon960)
-				basic_machine=i960-intel
-				basic_os=mon960
-				;;
-			nonstopux)
-				basic_machine=mips-compaq
-				basic_os=nonstopux
-				;;
-			os400)
-				basic_machine=powerpc-ibm
-				basic_os=os400
-				;;
-			OSE68000 | ose68000)
-				basic_machine=m68000-ericsson
-				basic_os=ose
-				;;
-			os68k)
-				basic_machine=m68k-none
-				basic_os=os68k
-				;;
-			paragon)
-				basic_machine=i860-intel
-				basic_os=osf
-				;;
-			parisc)
-				basic_machine=hppa-unknown
-				basic_os=linux
-				;;
-			psp)
-				basic_machine=mipsallegrexel-sony
-				basic_os=psp
-				;;
-			pw32)
-				basic_machine=i586-unknown
-				basic_os=pw32
-				;;
-			rdos | rdos64)
-				basic_machine=x86_64-pc
-				basic_os=rdos
-				;;
-			rdos32)
-				basic_machine=i386-pc
-				basic_os=rdos
-				;;
-			rom68k)
-				basic_machine=m68k-rom68k
-				basic_os=coff
-				;;
-			sa29200)
-				basic_machine=a29k-amd
-				basic_os=udi
-				;;
-			sei)
-				basic_machine=mips-sei
-				basic_os=seiux
-				;;
-			sequent)
-				basic_machine=i386-sequent
-				basic_os=
-				;;
-			sps7)
-				basic_machine=m68k-bull
-				basic_os=sysv2
-				;;
-			st2000)
-				basic_machine=m68k-tandem
-				basic_os=
-				;;
-			stratus)
-				basic_machine=i860-stratus
-				basic_os=sysv4
-				;;
-			sun2)
-				basic_machine=m68000-sun
-				basic_os=
-				;;
-			sun2os3)
-				basic_machine=m68000-sun
-				basic_os=sunos3
-				;;
-			sun2os4)
-				basic_machine=m68000-sun
-				basic_os=sunos4
-				;;
-			sun3)
-				basic_machine=m68k-sun
-				basic_os=
-				;;
-			sun3os3)
-				basic_machine=m68k-sun
-				basic_os=sunos3
-				;;
-			sun3os4)
-				basic_machine=m68k-sun
-				basic_os=sunos4
-				;;
-			sun4)
-				basic_machine=sparc-sun
-				basic_os=
-				;;
-			sun4os3)
-				basic_machine=sparc-sun
-				basic_os=sunos3
-				;;
-			sun4os4)
-				basic_machine=sparc-sun
-				basic_os=sunos4
-				;;
-			sun4sol2)
-				basic_machine=sparc-sun
-				basic_os=solaris2
-				;;
-			sun386 | sun386i | roadrunner)
-				basic_machine=i386-sun
-				basic_os=
-				;;
-			sv1)
-				basic_machine=sv1-cray
-				basic_os=unicos
-				;;
-			symmetry)
-				basic_machine=i386-sequent
-				basic_os=dynix
-				;;
-			t3e)
-				basic_machine=alphaev5-cray
-				basic_os=unicos
-				;;
-			t90)
-				basic_machine=t90-cray
-				basic_os=unicos
-				;;
-			toad1)
-				basic_machine=pdp10-xkl
-				basic_os=tops20
-				;;
-			tpf)
-				basic_machine=s390x-ibm
-				basic_os=tpf
-				;;
-			udi29k)
-				basic_machine=a29k-amd
-				basic_os=udi
-				;;
-			ultra3)
-				basic_machine=a29k-nyu
-				basic_os=sym1
-				;;
-			v810 | necv810)
-				basic_machine=v810-nec
-				basic_os=none
-				;;
-			vaxv)
-				basic_machine=vax-dec
-				basic_os=sysv
-				;;
-			vms)
-				basic_machine=vax-dec
-				basic_os=vms
-				;;
-			vsta)
-				basic_machine=i386-pc
-				basic_os=vsta
-				;;
-			vxworks960)
-				basic_machine=i960-wrs
-				basic_os=vxworks
-				;;
-			vxworks68)
-				basic_machine=m68k-wrs
-				basic_os=vxworks
-				;;
-			vxworks29k)
-				basic_machine=a29k-wrs
-				basic_os=vxworks
-				;;
-			xbox)
-				basic_machine=i686-pc
-				basic_os=mingw32
-				;;
-			ymp)
-				basic_machine=ymp-cray
-				basic_os=unicos
-				;;
-			*)
-				basic_machine=$1
-				basic_os=
-				;;
-		esac
-		;;
-esac
-
-# Decode 1-component or ad-hoc basic machines
-case $basic_machine in
-	# Here we handle the default manufacturer of certain CPU types.  It is in
-	# some cases the only manufacturer, in others, it is the most popular.
-	w89k)
-		cpu=hppa1.1
-		vendor=winbond
-		;;
-	op50n)
-		cpu=hppa1.1
-		vendor=oki
-		;;
-	op60c)
-		cpu=hppa1.1
-		vendor=oki
-		;;
-	ibm*)
-		cpu=i370
-		vendor=ibm
-		;;
-	orion105)
-		cpu=clipper
-		vendor=highlevel
-		;;
-	mac | mpw | mac-mpw)
-		cpu=m68k
-		vendor=apple
-		;;
-	pmac | pmac-mpw)
-		cpu=powerpc
-		vendor=apple
-		;;
-
-	# Recognize the various machine names and aliases which stand
-	# for a CPU type and a company and sometimes even an OS.
-	3b1 | 7300 | 7300-att | att-7300 | pc7300 | safari | unixpc)
-		cpu=m68000
-		vendor=att
-		;;
-	3b*)
-		cpu=we32k
-		vendor=att
-		;;
-	bluegene*)
-		cpu=powerpc
-		vendor=ibm
-		basic_os=cnk
-		;;
-	decsystem10* | dec10*)
-		cpu=pdp10
-		vendor=dec
-		basic_os=tops10
-		;;
-	decsystem20* | dec20*)
-		cpu=pdp10
-		vendor=dec
-		basic_os=tops20
-		;;
-	delta | 3300 | delta-motorola | 3300-motorola | motorola-delta | motorola-3300)
-		cpu=m68k
-		vendor=motorola
-		;;
-	# This used to be dpx2*, but that gets the RS6000-based
-	# DPX/20 and the x86-based DPX/2-100 wrong.  See
-	# https://oldskool.silicium.org/stations/bull_dpx20.htm
-	# https://www.feb-patrimoine.com/english/bull_dpx2.htm
-	# https://www.feb-patrimoine.com/english/unix_and_bull.htm
-	dpx2 | dpx2[23]00 | dpx2[23]xx)
-		cpu=m68k
-		vendor=bull
-		;;
-	dpx2100 | dpx21xx)
-		cpu=i386
-		vendor=bull
-		;;
-	dpx20)
-		cpu=rs6000
-		vendor=bull
-		;;
-	encore | umax | mmax)
-		cpu=ns32k
-		vendor=encore
-		;;
-	elxsi)
-		cpu=elxsi
-		vendor=elxsi
-		basic_os=${basic_os:-bsd}
-		;;
-	fx2800)
-		cpu=i860
-		vendor=alliant
-		;;
-	genix)
-		cpu=ns32k
-		vendor=ns
-		;;
-	h3050r* | hiux*)
-		cpu=hppa1.1
-		vendor=hitachi
-		basic_os=hiuxwe2
-		;;
-	hp3k9[0-9][0-9] | hp9[0-9][0-9])
-		cpu=hppa1.0
-		vendor=hp
-		;;
-	hp9k2[0-9][0-9] | hp9k31[0-9])
-		cpu=m68000
-		vendor=hp
-		;;
-	hp9k3[2-9][0-9])
-		cpu=m68k
-		vendor=hp
-		;;
-	hp9k6[0-9][0-9] | hp6[0-9][0-9])
-		cpu=hppa1.0
-		vendor=hp
-		;;
-	hp9k7[0-79][0-9] | hp7[0-79][0-9])
-		cpu=hppa1.1
-		vendor=hp
-		;;
-	hp9k78[0-9] | hp78[0-9])
-		# FIXME: really hppa2.0-hp
-		cpu=hppa1.1
-		vendor=hp
-		;;
-	hp9k8[67]1 | hp8[67]1 | hp9k80[24] | hp80[24] | hp9k8[78]9 | hp8[78]9 | hp9k893 | hp893)
-		# FIXME: really hppa2.0-hp
-		cpu=hppa1.1
-		vendor=hp
-		;;
-	hp9k8[0-9][13679] | hp8[0-9][13679])
-		cpu=hppa1.1
-		vendor=hp
-		;;
-	hp9k8[0-9][0-9] | hp8[0-9][0-9])
-		cpu=hppa1.0
-		vendor=hp
-		;;
-	i*86v32)
-		cpu=`echo "$1" | sed -e 's/86.*/86/'`
-		vendor=pc
-		basic_os=sysv32
-		;;
-	i*86v4*)
-		cpu=`echo "$1" | sed -e 's/86.*/86/'`
-		vendor=pc
-		basic_os=sysv4
-		;;
-	i*86v)
-		cpu=`echo "$1" | sed -e 's/86.*/86/'`
-		vendor=pc
-		basic_os=sysv
-		;;
-	i*86sol2)
-		cpu=`echo "$1" | sed -e 's/86.*/86/'`
-		vendor=pc
-		basic_os=solaris2
-		;;
-	j90 | j90-cray)
-		cpu=j90
-		vendor=cray
-		basic_os=${basic_os:-unicos}
-		;;
-	iris | iris4d)
-		cpu=mips
-		vendor=sgi
-		case $basic_os in
-		    irix*)
-			;;
-		    *)
-			basic_os=irix4
-			;;
-		esac
-		;;
-	miniframe)
-		cpu=m68000
-		vendor=convergent
-		;;
-	*mint | mint[0-9]* | *MiNT | *MiNT[0-9]*)
-		cpu=m68k
-		vendor=atari
-		basic_os=mint
-		;;
-	news-3600 | risc-news)
-		cpu=mips
-		vendor=sony
-		basic_os=newsos
-		;;
-	next | m*-next)
-		cpu=m68k
-		vendor=next
-		;;
-	np1)
-		cpu=np1
-		vendor=gould
-		;;
-	op50n-* | op60c-*)
-		cpu=hppa1.1
-		vendor=oki
-		basic_os=proelf
-		;;
-	pa-hitachi)
-		cpu=hppa1.1
-		vendor=hitachi
-		basic_os=hiuxwe2
-		;;
-	pbd)
-		cpu=sparc
-		vendor=tti
-		;;
-	pbb)
-		cpu=m68k
-		vendor=tti
-		;;
-	pc532)
-		cpu=ns32k
-		vendor=pc532
-		;;
-	pn)
-		cpu=pn
-		vendor=gould
-		;;
-	power)
-		cpu=power
-		vendor=ibm
-		;;
-	ps2)
-		cpu=i386
-		vendor=ibm
-		;;
-	rm[46]00)
-		cpu=mips
-		vendor=siemens
-		;;
-	rtpc | rtpc-*)
-		cpu=romp
-		vendor=ibm
-		;;
-	sde)
-		cpu=mipsisa32
-		vendor=sde
-		basic_os=${basic_os:-elf}
-		;;
-	simso-wrs)
-		cpu=sparclite
-		vendor=wrs
-		basic_os=vxworks
-		;;
-	tower | tower-32)
-		cpu=m68k
-		vendor=ncr
-		;;
-	vpp*|vx|vx-*)
-		cpu=f301
-		vendor=fujitsu
-		;;
-	w65)
-		cpu=w65
-		vendor=wdc
-		;;
-	w89k-*)
-		cpu=hppa1.1
-		vendor=winbond
-		basic_os=proelf
-		;;
-	none)
-		cpu=none
-		vendor=none
-		;;
-	leon|leon[3-9])
-		cpu=sparc
-		vendor=$basic_machine
-		;;
-	leon-*|leon[3-9]-*)
-		cpu=sparc
-		vendor=`echo "$basic_machine" | sed 's/-.*//'`
-		;;
-
-	*-*)
-		saved_IFS=$IFS
-		IFS="-" read cpu vendor <<EOF
-$basic_machine
-EOF
-		IFS=$saved_IFS
-		;;
-	# We use 'pc' rather than 'unknown'
-	# because (1) that's what they normally are, and
-	# (2) the word "unknown" tends to confuse beginning users.
-	i*86 | x86_64)
-		cpu=$basic_machine
-		vendor=pc
-		;;
-	# These rules are duplicated from below for sake of the special case above;
-	# i.e. things that normalized to x86 arches should also default to "pc"
-	pc98)
-		cpu=i386
-		vendor=pc
-		;;
-	x64 | amd64)
-		cpu=x86_64
-		vendor=pc
-		;;
-	# Recognize the basic CPU types without company name.
-	*)
-		cpu=$basic_machine
-		vendor=unknown
-		;;
-esac
-
-unset -v basic_machine
-
-# Decode basic machines in the full and proper CPU-Company form.
-case $cpu-$vendor in
-	# Here we handle the default manufacturer of certain CPU types in canonical form.
-	# It is in some cases the only manufacturer, in others, it is the most popular.
-	c[12]-convex | c[12]-unknown | c3[248]-convex | c3[248]-unknown)
-		vendor=convex
-		basic_os=${basic_os:-bsd}
-		;;
-	craynv-unknown)
-		vendor=cray
-		basic_os=${basic_os:-unicosmp}
-		;;
-	c90-unknown | c90-cray)
-		vendor=cray
-		basic_os=${basic_os:-unicos}
-		;;
-	fx80-unknown)
-		vendor=alliant
-		;;
-	romp-unknown)
-		vendor=ibm
-		;;
-	mmix-unknown)
-		vendor=knuth
-		;;
-	microblaze-unknown | microblazeel-unknown)
-		vendor=xilinx
-		;;
-	rs6000-unknown)
-		vendor=ibm
-		;;
-	vax-unknown)
-		vendor=dec
-		;;
-	pdp11-unknown)
-		vendor=dec
-		;;
-	we32k-unknown)
-		vendor=att
-		;;
-	cydra-unknown)
-		vendor=cydrome
-		;;
-	i370-ibm*)
-		vendor=ibm
-		;;
-	orion-unknown)
-		vendor=highlevel
-		;;
-	xps-unknown | xps100-unknown)
-		cpu=xps100
-		vendor=honeywell
-		;;
-
-	# Here we normalize CPU types with a missing or matching vendor
-	armh-unknown | armh-alt)
-		cpu=armv7l
-		vendor=alt
-		basic_os=${basic_os:-linux-gnueabihf}
-		;;
-
-	# Normalized CPU+vendor pairs that imply an OS, if not otherwise specified
-	m68k-isi)
-		basic_os=${basic_os:-sysv}
-		;;
-	m68k-sony)
-		basic_os=${basic_os:-newsos}
-		;;
-	m68k-tektronix)
-		basic_os=${basic_os:-bsd}
-		;;
-	m88k-harris)
-		basic_os=${basic_os:-sysv3}
-		;;
-	i386-bull | m68k-bull)
-		basic_os=${basic_os:-sysv3}
-		;;
-	rs6000-bull)
-		basic_os=${basic_os:-bosx}
-		;;
-	mips-sni)
-		basic_os=${basic_os:-sysv4}
-		;;
-
-	# Here we normalize CPU types irrespective of the vendor
-	amd64-*)
-		cpu=x86_64
-		;;
-	blackfin-*)
-		cpu=bfin
-		basic_os=${basic_os:-linux}
-		;;
-	c54x-*)
-		cpu=tic54x
-		;;
-	c55x-*)
-		cpu=tic55x
-		;;
-	c6x-*)
-		cpu=tic6x
-		;;
-	e500v[12]-*)
-		cpu=powerpc
-		basic_os=${basic_os}"spe"
-		;;
-	mips3*-*)
-		cpu=mips64
-		;;
-	ms1-*)
-		cpu=mt
-		;;
-	m68knommu-*)
-		cpu=m68k
-		basic_os=${basic_os:-linux}
-		;;
-	m9s12z-* | m68hcs12z-* | hcs12z-* | s12z-*)
-		cpu=s12z
-		;;
-	openrisc-*)
-		cpu=or32
-		;;
-	parisc-*)
-		cpu=hppa
-		basic_os=${basic_os:-linux}
-		;;
-	pentium-* | p5-* | k5-* | k6-* | nexgen-* | viac3-*)
-		cpu=i586
-		;;
-	pentiumpro-* | p6-* | 6x86-* | athlon-* | athlon_*-*)
-		cpu=i686
-		;;
-	pentiumii-* | pentium2-* | pentiumiii-* | pentium3-*)
-		cpu=i686
-		;;
-	pentium4-*)
-		cpu=i786
-		;;
-	ppc-* | ppcbe-*)
-		cpu=powerpc
-		;;
-	ppcle-* | powerpclittle-*)
-		cpu=powerpcle
-		;;
-	ppc64-*)
-		cpu=powerpc64
-		;;
-	ppc64le-* | powerpc64little-*)
-		cpu=powerpc64le
-		;;
-	sb1-*)
-		cpu=mipsisa64sb1
-		;;
-	sb1el-*)
-		cpu=mipsisa64sb1el
-		;;
-	sh5e[lb]-*)
-		cpu=`echo "$cpu" | sed 's/^\(sh.\)e\(.\)$/\1\2e/'`
-		;;
-	spur-*)
-		cpu=spur
-		;;
-	strongarm-* | thumb-*)
-		cpu=arm
-		;;
-	tx39-*)
-		cpu=mipstx39
-		;;
-	tx39el-*)
-		cpu=mipstx39el
-		;;
-	xscale-* | xscalee[bl]-*)
-		cpu=`echo "$cpu" | sed 's/^xscale/arm/'`
-		;;
-	arm64-* | aarch64le-*)
-		cpu=aarch64
-		;;
-
-	# Recognize the canonical CPU Types that limit and/or modify the
-	# company names they are paired with.
-	cr16-*)
-		basic_os=${basic_os:-elf}
-		;;
-	crisv32-* | etraxfs*-*)
-		cpu=crisv32
-		vendor=axis
-		;;
-	cris-* | etrax*-*)
-		cpu=cris
-		vendor=axis
-		;;
-	crx-*)
-		basic_os=${basic_os:-elf}
-		;;
-	neo-tandem)
-		cpu=neo
-		vendor=tandem
-		;;
-	nse-tandem)
-		cpu=nse
-		vendor=tandem
-		;;
-	nsr-tandem)
-		cpu=nsr
-		vendor=tandem
-		;;
-	nsv-tandem)
-		cpu=nsv
-		vendor=tandem
-		;;
-	nsx-tandem)
-		cpu=nsx
-		vendor=tandem
-		;;
-	mipsallegrexel-sony)
-		cpu=mipsallegrexel
-		vendor=sony
-		;;
-	tile*-*)
-		basic_os=${basic_os:-linux-gnu}
-		;;
-
-	*)
-		# Recognize the canonical CPU types that are allowed with any
-		# company name.
-		case $cpu in
-			  1750a \
-			| 580 \
-			| [cjt]90 \
-			| a29k \
-			| aarch64 \
-			| aarch64_be \
-			| aarch64c \
-			| abacus \
-			| alpha \
-			| alpha64 \
-			| alpha64ev56 \
-			| alpha64ev6[78] \
-			| alpha64ev[4-8] \
-			| alpha64pca5[67] \
-			| alphaev56 \
-			| alphaev6[78] \
-			| alphaev[4-8] \
-			| alphapca5[67] \
-			| am33_2.0 \
-			| amdgcn \
-			| arc \
-			| arc32 \
-			| arc64 \
-			| arceb \
-			| arm \
-			| arm64e \
-			| arm64ec \
-			| arm[lb]e \
-			| arme[lb] \
-			| armv* \
-			| asmjs \
-			| avr \
-			| avr32 \
-			| ba \
-			| be32 \
-			| be64 \
-			| bfin \
-			| bpf \
-			| bs2000 \
-			| c30 \
-			| c4x \
-			| c8051 \
-			| c[123]* \
-			| clipper \
-			| craynv \
-			| csky \
-			| cydra \
-			| d10v \
-			| d30v \
-			| dlx \
-			| dsp16xx \
-			| e2k \
-			| elxsi \
-			| epiphany \
-			| f30[01] \
-			| f700 \
-			| fido \
-			| fr30 \
-			| frv \
-			| ft32 \
-			| fx80 \
-			| h8300 \
-			| h8500 \
-			| hexagon \
-			| hppa \
-			| hppa1.[01] \
-			| hppa2.0 \
-			| hppa2.0[nw] \
-			| hppa64 \
-			| i*86 \
-			| i370 \
-			| i860 \
-			| i960 \
-			| ia16 \
-			| ia64 \
-			| ip2k \
-			| iq2000 \
-			| javascript \
-			| k1om \
-			| kvx \
-			| le32 \
-			| le64 \
-			| lm32 \
-			| loongarch32 \
-			| loongarch64 \
-			| m32c \
-			| m32r \
-			| m32rle \
-			| m5200 \
-			| m68000 \
-			| m680[012346]0 \
-			| m6811 \
-			| m6812 \
-			| m68360 \
-			| m683?2 \
-			| m68hc11 \
-			| m68hc12 \
-			| m68hcs12x \
-			| m68k \
-			| m88110 \
-			| m88k \
-			| maxq \
-			| mb \
-			| mcore \
-			| mep \
-			| metag \
-			| microblaze \
-			| microblazeel \
-			| mips* \
-			| mmix \
-			| mn10200 \
-			| mn10300 \
-			| moxie \
-			| msp430 \
-			| mt \
-			| nanomips* \
-			| nds32 \
-			| nds32be \
-			| nds32le \
-			| nfp \
-			| nios \
-			| nios2 \
-			| nios2eb \
-			| nios2el \
-			| none \
-			| np1 \
-			| ns16k \
-			| ns32k \
-			| nvptx \
-			| open8 \
-			| or1k* \
-			| or32 \
-			| orion \
-			| pdp10 \
-			| pdp11 \
-			| picochip \
-			| pj \
-			| pjl \
-			| pn \
-			| power \
-			| powerpc \
-			| powerpc64 \
-			| powerpc64le \
-			| powerpcle \
-			| powerpcspe \
-			| pru \
-			| pyramid \
-			| riscv \
-			| riscv32 \
-			| riscv32be \
-			| riscv64 \
-			| riscv64be \
-			| rl78 \
-			| romp \
-			| rs6000 \
-			| rx \
-			| s390 \
-			| s390x \
-			| score \
-			| sh \
-			| sh64 \
-			| sh64le \
-			| sh[12345][lb]e \
-			| sh[1234] \
-			| sh[1234]e[lb] \
-			| sh[23]e \
-			| sh[23]ele \
-			| sh[24]a \
-			| sh[24]ae[lb] \
-			| sh[lb]e \
-			| she[lb] \
-			| shl \
-			| sparc \
-			| sparc64 \
-			| sparc64b \
-			| sparc64v \
-			| sparc86x \
-			| sparclet \
-			| sparclite \
-			| sparcv8 \
-			| sparcv9 \
-			| sparcv9b \
-			| sparcv9v \
-			| spu \
-			| sv1 \
-			| sx* \
-			| tahoe \
-			| thumbv7* \
-			| tic30 \
-			| tic4x \
-			| tic54x \
-			| tic55x \
-			| tic6x \
-			| tic80 \
-			| tron \
-			| ubicom32 \
-			| v70 \
-			| v810 \
-			| v850 \
-			| v850e \
-			| v850e1 \
-			| v850e2 \
-			| v850e2v3 \
-			| v850es \
-			| vax \
-			| vc4 \
-			| visium \
-			| w65 \
-			| wasm32 \
-			| wasm64 \
-			| we32k \
-			| x86 \
-			| x86_64 \
-			| xc16x \
-			| xgate \
-			| xps100 \
-			| xstormy16 \
-			| xtensa* \
-			| ymp \
-			| z80 \
-			| z8k)
-				;;
-
-			*)
-				echo "Invalid configuration '$1': machine '$cpu-$vendor' not recognized" 1>&2
-				exit 1
-				;;
-		esac
-		;;
-esac
-
-# Here we canonicalize certain aliases for manufacturers.
-case $vendor in
-	digital*)
-		vendor=dec
-		;;
-	commodore*)
-		vendor=cbm
-		;;
-	*)
-		;;
-esac
-
-# Decode manufacturer-specific aliases for certain operating systems.
-
-if test x"$basic_os" != x
-then
-
-# First recognize some ad-hoc cases, or perhaps split kernel-os, or else just
-# set os.
-obj=
-case $basic_os in
-	gnu/linux*)
-		kernel=linux
-		os=`echo "$basic_os" | sed -e 's|gnu/linux|gnu|'`
-		;;
-	os2-emx)
-		kernel=os2
-		os=`echo "$basic_os" | sed -e 's|os2-emx|emx|'`
-		;;
-	nto-qnx*)
-		kernel=nto
-		os=`echo "$basic_os" | sed -e 's|nto-qnx|qnx|'`
-		;;
-	*-*)
-		saved_IFS=$IFS
-		IFS="-" read kernel os <<EOF
-$basic_os
-EOF
-		IFS=$saved_IFS
-		;;
-	# Default OS when just kernel was specified
-	nto*)
-		kernel=nto
-		os=`echo "$basic_os" | sed -e 's|nto|qnx|'`
-		;;
-	linux*)
-		kernel=linux
-		os=`echo "$basic_os" | sed -e 's|linux|gnu|'`
-		;;
-	managarm*)
-		kernel=managarm
-		os=`echo "$basic_os" | sed -e 's|managarm|mlibc|'`
-		;;
-	*)
-		kernel=
-		os=$basic_os
-		;;
-esac
-
-# Now, normalize the OS (knowing we just have one component, it's not a kernel,
-# etc.)
-case $os in
-	# First match some system type aliases that might get confused
-	# with valid system types.
-	# solaris* is a basic system type, with this one exception.
-	auroraux)
-		os=auroraux
-		;;
-	bluegene*)
-		os=cnk
-		;;
-	solaris1 | solaris1.*)
-		os=`echo "$os" | sed -e 's|solaris1|sunos4|'`
-		;;
-	solaris)
-		os=solaris2
-		;;
-	unixware*)
-		os=sysv4.2uw
-		;;
-	# The marketing names for NeXT's operating systems were
-	# NeXTSTEP, NeXTSTEP 2, OpenSTEP 3, OpenSTEP 4.  'openstep' is
-	# mapped to 'openstep3', but 'openstep1' and 'openstep2' are
-	# mapped to 'nextstep' and 'nextstep2', consistent with the
-	# treatment of SunOS/Solaris.
-	ns | ns1 | nextstep | nextstep1 | openstep1)
-		os=nextstep
-		;;
-	ns2 | nextstep2 | openstep2)
-		os=nextstep2
-		;;
-	ns3 | nextstep3 | openstep | openstep3)
-		os=openstep3
-		;;
-	ns4 | nextstep4 | openstep4)
-		os=openstep4
-		;;
-	# es1800 is here to avoid being matched by es* (a different OS)
-	es1800*)
-		os=ose
-		;;
-	# Some version numbers need modification
-	chorusos*)
-		os=chorusos
-		;;
-	isc)
-		os=isc2.2
-		;;
-	sco6)
-		os=sco5v6
-		;;
-	sco5)
-		os=sco3.2v5
-		;;
-	sco4)
-		os=sco3.2v4
-		;;
-	sco3.2.[4-9]*)
-		os=`echo "$os" | sed -e 's/sco3.2./sco3.2v/'`
-		;;
-	sco*v* | scout)
-		# Don't match below
-		;;
-	sco*)
-		os=sco3.2v2
-		;;
-	psos*)
-		os=psos
-		;;
-	qnx*)
-		os=qnx
-		;;
-	hiux*)
-		os=hiuxwe2
-		;;
-	lynx*178)
-		os=lynxos178
-		;;
-	lynx*5)
-		os=lynxos5
-		;;
-	lynxos*)
-		# don't get caught up in next wildcard
-		;;
-	lynx*)
-		os=lynxos
-		;;
-	mac[0-9]*)
-		os=`echo "$os" | sed -e 's|mac|macos|'`
-		;;
-	opened*)
-		os=openedition
-		;;
-	os400*)
-		os=os400
-		;;
-	sunos5*)
-		os=`echo "$os" | sed -e 's|sunos5|solaris2|'`
-		;;
-	sunos6*)
-		os=`echo "$os" | sed -e 's|sunos6|solaris3|'`
-		;;
-	wince*)
-		os=wince
-		;;
-	utek*)
-		os=bsd
-		vendor=`echo "$vendor" | sed -e 's|^unknown$|tektronix|'`
-		;;
-	dynix*)
-		os=bsd
-		;;
-	acis*)
-		os=aos
-		;;
-	atheos*)
-		os=atheos
-		;;
-	syllable*)
-		os=syllable
-		;;
-	386bsd)
-		os=bsd
-		;;
-	ctix*)
-		os=sysv
-		vendor=`echo "$vendor" | sed -e 's|^unknown$|convergent|'`
-		;;
-	uts*)
-		os=sysv
-		;;
-	nova*)
-		kernel=rtmk
-		os=nova
-		;;
-	# Preserve the version number of sinix5.
-	sinix5.*)
-		os=`echo "$os" | sed -e 's|sinix|sysv|'`
-		vendor=`echo "$vendor" | sed -e 's|^unknown$|sni|'`
-		;;
-	sinix*)
-		os=sysv4
-		vendor=`echo "$vendor" | sed -e 's|^unknown$|sni|'`
-		;;
-	tpf*)
-		os=tpf
-		;;
-	triton*)
-		os=sysv3
-		;;
-	oss*)
-		os=sysv3
-		;;
-	svr4*)
-		os=sysv4
-		;;
-	svr3)
-		os=sysv3
-		;;
-	sysvr4)
-		os=sysv4
-		;;
-	ose*)
-		os=ose
-		;;
-	*mint | mint[0-9]* | *MiNT | MiNT[0-9]*)
-		os=mint
-		;;
-	dicos*)
-		os=dicos
-		;;
-	pikeos*)
-		# Until real need of OS specific support for
-		# particular features comes up, bare metal
-		# configurations are quite functional.
-		case $cpu in
-		    arm*)
-			os=eabi
-			;;
-		    *)
-			os=
-			obj=elf
-			;;
-		esac
-		;;
-	aout* | coff* | elf* | pe*)
-		# These are machine code file formats, not OSes
-		obj=$os
-		os=
-		;;
-	*)
-		# No normalization, but not necessarily accepted, that comes below.
-		;;
-esac
-
-else
-
-# Here we handle the default operating systems that come with various machines.
-# The value should be what the vendor currently ships out the door with their
-# machine or put another way, the most popular os provided with the machine.
-
-# Note that if you're going to try to match "-MANUFACTURER" here (say,
-# "-sun"), then you have to tell the case statement up towards the top
-# that MANUFACTURER isn't an operating system.  Otherwise, code above
-# will signal an error saying that MANUFACTURER isn't an operating
-# system, and we'll never get to this point.
-
-kernel=
-obj=
-case $cpu-$vendor in
-	score-*)
-		os=
-		obj=elf
-		;;
-	spu-*)
-		os=
-		obj=elf
-		;;
-	*-acorn)
-		os=riscix1.2
-		;;
-	arm*-rebel)
-		kernel=linux
-		os=gnu
-		;;
-	arm*-semi)
-		os=
-		obj=aout
-		;;
-	c4x-* | tic4x-*)
-		os=
-		obj=coff
-		;;
-	c8051-*)
-		os=
-		obj=elf
-		;;
-	clipper-intergraph)
-		os=clix
-		;;
-	hexagon-*)
-		os=
-		obj=elf
-		;;
-	tic54x-*)
-		os=
-		obj=coff
-		;;
-	tic55x-*)
-		os=
-		obj=coff
-		;;
-	tic6x-*)
-		os=
-		obj=coff
-		;;
-	# This must come before the *-dec entry.
-	pdp10-*)
-		os=tops20
-		;;
-	pdp11-*)
-		os=none
-		;;
-	*-dec | vax-*)
-		os=ultrix4.2
-		;;
-	m68*-apollo)
-		os=domain
-		;;
-	i386-sun)
-		os=sunos4.0.2
-		;;
-	m68000-sun)
-		os=sunos3
-		;;
-	m68*-cisco)
-		os=
-		obj=aout
-		;;
-	mep-*)
-		os=
-		obj=elf
-		;;
-	# The -sgi and -siemens entries must be before the mips- entry
-	# or we get the wrong os.
-	*-sgi)
-		os=irix
-		;;
-	*-siemens)
-		os=sysv4
-		;;
-	mips*-cisco)
-		os=
-		obj=elf
-		;;
-	mips*-*|nanomips*-*)
-		os=
-		obj=elf
-		;;
-	or32-*)
-		os=
-		obj=coff
-		;;
-	# This must be before the sparc-* entry or we get the wrong os.
-	*-tti)
-		os=sysv3
-		;;
-	sparc-* | *-sun)
-		os=sunos4.1.1
-		;;
-	pru-*)
-		os=
-		obj=elf
-		;;
-	*-be)
-		os=beos
-		;;
-	*-ibm)
-		os=aix
-		;;
-	*-knuth)
-		os=mmixware
-		;;
-	*-wec)
-		os=proelf
-		;;
-	*-winbond)
-		os=proelf
-		;;
-	*-oki)
-		os=proelf
-		;;
-	*-hp)
-		os=hpux
-		;;
-	*-hitachi)
-		os=hiuxwe2
-		;;
-	i860-* | *-att | *-ncr | *-altos | *-motorola | *-convergent)
-		os=sysv
-		;;
-	*-cbm)
-		os=amigaos
-		;;
-	*-dg)
-		os=dgux
-		;;
-	*-dolphin)
-		os=sysv3
-		;;
-	m68k-ccur)
-		os=rtu
-		;;
-	m88k-omron*)
-		os=luna
-		;;
-	*-next)
-		os=nextstep
-		;;
-	*-sequent)
-		os=ptx
-		;;
-	*-crds)
-		os=unos
-		;;
-	*-ns)
-		os=genix
-		;;
-	i370-*)
-		os=mvs
-		;;
-	*-gould)
-		os=sysv
-		;;
-	*-highlevel)
-		os=bsd
-		;;
-	*-encore)
-		os=bsd
-		;;
-	*-masscomp)
-		os=rtu
-		;;
-	f30[01]-fujitsu | f700-fujitsu)
-		os=uxpv
-		;;
-	*-rom68k)
-		os=
-		obj=coff
-		;;
-	*-*bug)
-		os=
-		obj=coff
-		;;
-	*-apple)
-		os=macos
-		;;
-	*-atari*)
-		os=mint
-		;;
-	*-wrs)
-		os=vxworks
-		;;
-	*)
-		os=none
-		;;
-esac
-
-fi
-
-# Now, validate our (potentially fixed-up) individual pieces (OS, OBJ).
-
-case $os in
-	# Sometimes we do "kernel-libc", so those need to count as OSes.
-	llvm* | musl* | newlib* | relibc* | uclibc*)
-		;;
-	# Likewise for "kernel-abi"
-	eabi* | gnueabi*)
-		;;
-	# VxWorks passes extra cpu info in the 4th filed.
-	simlinux | simwindows | spe)
-		;;
-	# See `case $cpu-$os` validation below
-	ghcjs)
-		;;
-	# Now accept the basic system types.
-	# Each alternative MUST end in a * to match a version number.
-	  abug \
-	| aix* \
-	| amdhsa* \
-	| amigados* \
-	| amigaos* \
-	| android* \
-	| aof* \
-	| aos* \
-	| aros* \
-	| atheos* \
-	| auroraux* \
-	| aux* \
-	| beos* \
-	| bitrig* \
-	| bme* \
-	| bosx* \
-	| bsd* \
-	| cegcc* \
-	| chorusos* \
-	| chorusrdb* \
-	| clix* \
-	| cloudabi* \
-	| cnk* \
-	| conix* \
-	| cos* \
-	| cxux* \
-	| cygwin* \
-	| darwin* \
-	| dgux* \
-	| dicos* \
-	| dnix* \
-	| domain* \
-	| dragonfly* \
-	| drops* \
-	| ebmon* \
-	| ecoff* \
-	| ekkobsd* \
-	| emscripten* \
-	| emx* \
-	| es* \
-	| fiwix* \
-	| freebsd* \
-	| fuchsia* \
-	| genix* \
-	| genode* \
-	| glidix* \
-	| gnu* \
-	| go32* \
-	| haiku* \
-	| hcos* \
-	| hiux* \
-	| hms* \
-	| hpux* \
-	| ieee* \
-	| interix* \
-	| ios* \
-	| iris* \
-	| irix* \
-	| ironclad* \
-	| isc* \
-	| its* \
-	| l4re* \
-	| libertybsd* \
-	| lites* \
-	| lnews* \
-	| luna* \
-	| lynxos* \
-	| mach* \
-	| macos* \
-	| magic* \
-	| mbr* \
-	| midipix* \
-	| midnightbsd* \
-	| mingw32* \
-	| mingw64* \
-	| minix* \
-	| mint* \
-	| mirbsd* \
-	| mks* \
-	| mlibc* \
-	| mmixware* \
-	| mon960* \
-	| morphos* \
-	| moss* \
-	| moxiebox* \
-	| mpeix* \
-	| mpw* \
-	| msdos* \
-	| msys* \
-	| mvs* \
-	| nacl* \
-	| netbsd* \
-	| netware* \
-	| newsos* \
-	| nextstep* \
-	| nindy* \
-	| nonstopux* \
-	| nova* \
-	| nsk* \
-	| nucleus* \
-	| nx6 \
-	| nx7 \
-	| oabi* \
-	| ohos* \
-	| onefs* \
-	| openbsd* \
-	| openedition* \
-	| openstep* \
-	| os108* \
-	| os2* \
-	| os400* \
-	| os68k* \
-	| os9* \
-	| ose* \
-	| osf* \
-	| oskit* \
-	| osx* \
-	| palmos* \
-	| phoenix* \
-	| plan9* \
-	| powermax* \
-	| powerunix* \
-	| proelf* \
-	| psos* \
-	| psp* \
-	| ptx* \
-	| pw32* \
-	| qnx* \
-	| rdos* \
-	| redox* \
-	| rhapsody* \
-	| riscix* \
-	| riscos* \
-	| rtems* \
-	| rtmk* \
-	| rtu* \
-	| scout* \
-	| secbsd* \
-	| sei* \
-	| serenity* \
-	| sim* \
-	| skyos* \
-	| solaris* \
-	| solidbsd* \
-	| sortix* \
-	| storm-chaos* \
-	| sunos \
-	| sunos[34]* \
-	| superux* \
-	| syllable* \
-	| sym* \
-	| sysv* \
-	| tenex* \
-	| tirtos* \
-	| toppers* \
-	| tops10* \
-	| tops20* \
-	| tpf* \
-	| tvos* \
-	| twizzler* \
-	| uclinux* \
-	| udi* \
-	| udk* \
-	| ultrix* \
-	| unicos* \
-	| uniplus* \
-	| unleashed* \
-	| unos* \
-	| uwin* \
-	| uxpv* \
-	| v88r* \
-	|*vms* \
-	| vos* \
-	| vsta* \
-	| vxsim* \
-	| vxworks* \
-	| wasi* \
-	| watchos* \
-	| wince* \
-	| windiss* \
-	| windows* \
-	| winnt* \
-	| xenix* \
-	| xray* \
-	| zephyr* \
-	| zvmoe* )
-		;;
-	# This one is extra strict with allowed versions
-	sco3.2v2 | sco3.2v[4-9]* | sco5v6*)
-		# Don't forget version if it is 3.2v4 or newer.
-		;;
-	# This refers to builds using the UEFI calling convention
-	# (which depends on the architecture) and PE file format.
-	# Note that this is both a different calling convention and
-	# different file format than that of GNU-EFI
-	# (x86_64-w64-mingw32).
-	uefi)
-		;;
-	none)
-		;;
-	kernel* | msvc* )
-		# Restricted further below
-		;;
-	'')
-		if test x"$obj" = x
-		then
-			echo "Invalid configuration '$1': Blank OS only allowed with explicit machine code file format" 1>&2
-		fi
-		;;
-	*)
-		echo "Invalid configuration '$1': OS '$os' not recognized" 1>&2
-		exit 1
-		;;
-esac
-
-case $obj in
-	aout* | coff* | elf* | pe*)
-		;;
-	'')
-		# empty is fine
-		;;
-	*)
-		echo "Invalid configuration '$1': Machine code format '$obj' not recognized" 1>&2
-		exit 1
-		;;
-esac
-
-# Here we handle the constraint that a (synthetic) cpu and os are
-# valid only in combination with each other and nowhere else.
-case $cpu-$os in
-	# The "javascript-unknown-ghcjs" triple is used by GHC; we
-	# accept it here in order to tolerate that, but reject any
-	# variations.
-	javascript-ghcjs)
-		;;
-	javascript-* | *-ghcjs)
-		echo "Invalid configuration '$1': cpu '$cpu' is not valid with os '$os$obj'" 1>&2
-		exit 1
-		;;
-esac
-
-# As a final step for OS-related things, validate the OS-kernel combination
-# (given a valid OS), if there is a kernel.
-case $kernel-$os-$obj in
-	linux-gnu*- | linux-android*- | linux-dietlibc*- | linux-llvm*- \
-		    | linux-mlibc*- | linux-musl*- | linux-newlib*- \
-		    | linux-relibc*- | linux-uclibc*- | linux-ohos*- )
-		;;
-	uclinux-uclibc*- | uclinux-gnu*- )
-		;;
-	managarm-mlibc*- | managarm-kernel*- )
-		;;
-	windows*-msvc*-)
-		;;
-	-dietlibc*- | -llvm*- | -mlibc*- | -musl*- | -newlib*- | -relibc*- \
-		    | -uclibc*- )
-		# These are just libc implementations, not actual OSes, and thus
-		# require a kernel.
-		echo "Invalid configuration '$1': libc '$os' needs explicit kernel." 1>&2
-		exit 1
-		;;
-	-kernel*- )
-		echo "Invalid configuration '$1': '$os' needs explicit kernel." 1>&2
-		exit 1
-		;;
-	*-kernel*- )
-		echo "Invalid configuration '$1': '$kernel' does not support '$os'." 1>&2
-		exit 1
-		;;
-	*-msvc*- )
-		echo "Invalid configuration '$1': '$os' needs 'windows'." 1>&2
-		exit 1
-		;;
-	kfreebsd*-gnu*- | knetbsd*-gnu*- | netbsd*-gnu*- | kopensolaris*-gnu*-)
-		;;
-	vxworks-simlinux- | vxworks-simwindows- | vxworks-spe-)
-		;;
-	nto-qnx*-)
-		;;
-	os2-emx-)
-		;;
-	rtmk-nova-)
-		;;
-	*-eabi*- | *-gnueabi*-)
-		;;
-	none--*)
-		# None (no kernel, i.e. freestanding / bare metal),
-		# can be paired with an machine code file format
-		;;
-	-*-)
-		# Blank kernel with real OS is always fine.
-		;;
-	--*)
-		# Blank kernel and OS with real machine code file format is always fine.
-		;;
-	*-*-*)
-		echo "Invalid configuration '$1': Kernel '$kernel' not known to work with OS '$os'." 1>&2
-		exit 1
-		;;
-esac
-
-# Here we handle the case where we know the os, and the CPU type, but not the
-# manufacturer.  We pick the logical manufacturer.
-case $vendor in
-	unknown)
-		case $cpu-$os in
-			*-riscix*)
-				vendor=acorn
-				;;
-			*-sunos* | *-solaris*)
-				vendor=sun
-				;;
-			*-cnk* | *-aix*)
-				vendor=ibm
-				;;
-			*-beos*)
-				vendor=be
-				;;
-			*-hpux*)
-				vendor=hp
-				;;
-			*-mpeix*)
-				vendor=hp
-				;;
-			*-hiux*)
-				vendor=hitachi
-				;;
-			*-unos*)
-				vendor=crds
-				;;
-			*-dgux*)
-				vendor=dg
-				;;
-			*-luna*)
-				vendor=omron
-				;;
-			*-genix*)
-				vendor=ns
-				;;
-			*-clix*)
-				vendor=intergraph
-				;;
-			*-mvs* | *-opened*)
-				vendor=ibm
-				;;
-			*-os400*)
-				vendor=ibm
-				;;
-			s390-* | s390x-*)
-				vendor=ibm
-				;;
-			*-ptx*)
-				vendor=sequent
-				;;
-			*-tpf*)
-				vendor=ibm
-				;;
-			*-vxsim* | *-vxworks* | *-windiss*)
-				vendor=wrs
-				;;
-			*-aux*)
-				vendor=apple
-				;;
-			*-hms*)
-				vendor=hitachi
-				;;
-			*-mpw* | *-macos*)
-				vendor=apple
-				;;
-			*-*mint | *-mint[0-9]* | *-*MiNT | *-MiNT[0-9]*)
-				vendor=atari
-				;;
-			*-vos*)
-				vendor=stratus
-				;;
-		esac
-		;;
-esac
-
-echo "$cpu-$vendor${kernel:+-$kernel}${os:+-$os}${obj:+-$obj}"
-exit
-
-# Local variables:
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-start: "timestamp='"
-# time-stamp-format: "%:y-%02m-%02d"
-# time-stamp-end: "'"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXext/configure b/experiments/wasm-gui/third_party/libXext/configure
deleted file mode 100755
index c09a698cd..000000000
--- a/experiments/wasm-gui/third_party/libXext/configure
+++ /dev/null
@@ -1,24110 +0,0 @@
-#! /bin/sh
-# Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.73 for libXext 1.3.7.
-#
-# Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>.
-#
-#
-# Copyright (C) 1992-1996, 1998-2017, 2020-2026 Free Software Foundation,
-# Inc.
-#
-#
-# This configure script is free software; the Free Software Foundation
-# gives unlimited permission to copy, distribute and modify it.
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else case e in #(
-  e) case `(set -o) 2>/dev/null` in #(
-  *posix*) :
-    set -o posix ;; #(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-
-
-
-# Reset variables that may have inherited troublesome values from
-# the environment.
-
-# IFS needs to be set, to space, tab, and newline, in precisely that order.
-# (If _AS_PATH_WALK were called with IFS unset, it would have the
-# side effect of setting IFS to empty, thus disabling word splitting.)
-# Quoting is to prevent editors from complaining about space-tab.
-as_nl='
-'
-export as_nl
-IFS=" ""	$as_nl"
-
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# Ensure predictable behavior from utilities with locale-dependent output.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# We cannot yet rely on "unset" to work, but we need these variables
-# to be unset--not just set to an empty or harmless value--now, to
-# avoid bugs in old shells (e.g. pre-3.0 UWIN ksh).  This construct
-# also avoids known problems related to "unset" and subshell syntax
-# in other old shells (e.g. bash 2.01 and pdksh 5.2.14).
-for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH
-do eval test \${$as_var+y} \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-
-# Ensure that fds 0, 1, and 2 are open.
-if (exec 3>&0) 2>/dev/null; then :; else exec 0</dev/null; fi
-if (exec 3>&1) 2>/dev/null; then :; else exec 1>/dev/null; fi
-if (exec 3>&2)            ; then :; else exec 2>/dev/null; fi
-
-# The user is always right.
-if ${PATH_SEPARATOR+false} :; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in #((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    test -r "$as_dir$0" && as_myself=$as_dir$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as 'sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  printf '%s\n' "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-
-# Use a proper internal environment variable to ensure we don't fall
-  # into an infinite loop, continuously re-executing ourselves.
-  if test x"${_as_can_reexec}" != xno && test "x$CONFIG_SHELL" != x; then
-    _as_can_reexec=no; export _as_can_reexec;
-    # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in # ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-case $# in # ((
-  0) exec $CONFIG_SHELL $as_opts "$as_myself" ;;
-  *) exec $CONFIG_SHELL $as_opts "$as_myself" "$@" ;;
-esac
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed 'exec'.
-printf '%s\n' "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-  fi
-  # We don't want this to propagate to other subprocesses.
-          { _as_can_reexec=; unset _as_can_reexec;}
-if test "x$CONFIG_SHELL" = x; then
-  as_bourne_compatible="if test \${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '\${1+\"\$@\"}'='\"\$@\"'
-  setopt NO_GLOB_SUBST
-else case e in #(
-  e) case \`(set -o) 2>/dev/null\` in #(
-  *posix*) :
-    set -o posix ;; #(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-"
-  as_required="as_fn_return () { (exit \$1); }
-as_fn_success () { as_fn_return 0; }
-as_fn_failure () { as_fn_return 1; }
-as_fn_ret_success () { return 0; }
-as_fn_ret_failure () { return 1; }
-
-exitcode=0
-as_fn_success || { exitcode=1; echo as_fn_success failed.; }
-as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; }
-as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; }
-as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; }
-if ( set x; as_fn_ret_success y && test x = \"\$1\" )
-then :
-
-else case e in #(
-  e) exitcode=1; echo positional parameters were not saved. ;;
-esac
-fi
-test x\$exitcode = x0 || exit 1
-blah=\$(echo \$(echo blah))
-test x\"\$blah\" = xblah || exit 1
-test -x / || exit 1"
-  as_suggested="  as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO
-  as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO
-  eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" &&
-  test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1
-
-  test -n \"\${ZSH_VERSION+set}\${BASH_VERSION+set}\" || (
-    ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-    ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO
-    ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO
-    PATH=/empty FPATH=/empty; export PATH FPATH
-    test \"X\`printf %s \$ECHO\`\" = \"X\$ECHO\" \\
-      || test \"X\`print -r -- \$ECHO\`\" = \"X\$ECHO\" ) || exit 1
-test \$(( 1 + 1 )) = 2 || exit 1"
-  if (eval "$as_required") 2>/dev/null
-then :
-  as_have_required=yes
-else case e in #(
-  e) as_have_required=no ;;
-esac
-fi
-  if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null
-then :
-
-else case e in #(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-  as_found=:
-  case $as_dir in #(
-	 /*)
-	   for as_base in sh bash ksh sh5; do
-	     # Try only shells that exist, to save several forks.
-	     as_shell=$as_dir$as_base
-	     if { test -f "$as_shell" || test -f "$as_shell.exe"; } &&
-		    as_run=a "$as_shell" -c "$as_bourne_compatible""$as_required" 2>/dev/null
-then :
-  CONFIG_SHELL=$as_shell as_have_required=yes
-		   if as_run=a "$as_shell" -c "$as_bourne_compatible""$as_suggested" 2>/dev/null
-then :
-  break 2
-fi
-fi
-	   done;;
-       esac
-  as_found=false
-done
-IFS=$as_save_IFS
-if $as_found
-then :
-
-else case e in #(
-  e) if { test -f "$SHELL" || test -f "$SHELL.exe"; } &&
-	      as_run=a "$SHELL" -c "$as_bourne_compatible""$as_required" 2>/dev/null
-then :
-  CONFIG_SHELL=$SHELL as_have_required=yes
-fi ;;
-esac
-fi
-
-
-      if test "x$CONFIG_SHELL" != x
-then :
-  export CONFIG_SHELL
-             # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in # ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-case $# in # ((
-  0) exec $CONFIG_SHELL $as_opts "$as_myself" ;;
-  *) exec $CONFIG_SHELL $as_opts "$as_myself" "$@" ;;
-esac
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed 'exec'.
-printf '%s\n' "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-fi
-
-    if test x$as_have_required = xno
-then :
-  printf '%s\n' "$0: This script requires a shell more modern than all"
-  printf '%s\n' "$0: the shells that I found on your system."
-  if test ${ZSH_VERSION+y} ; then
-    printf '%s\n' "$0: In particular, zsh $ZSH_VERSION has bugs and should"
-    printf '%s\n' "$0: be upgraded to zsh 4.3.4 or later."
-  else
-    printf '%s\n' "$0: Please tell bug-autoconf@gnu.org and
-$0: https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues
-$0: about your system, including any error possibly output
-$0: before this message. Then install a modern shell, or
-$0: manually run the script under such a shell if you do
-$0: have one."
-  fi
-  exit 1
-fi ;;
-esac
-fi
-fi
-SHELL=${CONFIG_SHELL-/bin/sh}
-export SHELL
-# Unset more variables known to interfere with behavior of common tools.
-CLICOLOR_FORCE= GREP_OPTIONS=
-unset CLICOLOR_FORCE GREP_OPTIONS
-
-## --------------------- ##
-## M4sh Shell Functions. ##
-## --------------------- ##
-# as_fn_unset VAR
-# ---------------
-# Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-
-# as_fn_set_status STATUS
-# -----------------------
-# Set $? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} # as_fn_set_status
-
-# as_fn_exit STATUS
-# -----------------
-# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} # as_fn_exit
-
-# as_fn_mkdir_p
-# -------------
-# Create "$as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`printf '%s\n' "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} # as_fn_mkdir_p
-
-# as_fn_executable_p FILE
-# -----------------------
-# Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} # as_fn_executable_p
-# as_fn_append VAR VALUE
-# ----------------------
-# Append the text in VALUE to the end of the definition contained in VAR. Take
-# advantage of any shell optimizations that allow amortized linear growth over
-# repeated appends, instead of the typical quadratic growth present in naive
-# implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null
-then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else case e in #(
-  e) as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  } ;;
-esac
-fi # as_fn_append
-
-# as_fn_arith ARG...
-# ------------------
-# Perform arithmetic evaluation on the ARGs, and store the result in the
-# global $as_val. Take advantage of shells that can avoid forks. The arguments
-# must be portable across $(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null
-then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else case e in #(
-  e) as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  } ;;
-esac
-fi # as_fn_arith
-
-
-# as_fn_error STATUS ERROR [LINENO LOG_FD]
-# ----------------------------------------
-# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-# script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  printf '%s\n' "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} # as_fn_error
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-
-  as_lineno_1=$LINENO as_lineno_1a=$LINENO
-  as_lineno_2=$LINENO as_lineno_2a=$LINENO
-  eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" &&
-  test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || {
-  # Blame Lee E. McMahon (1931-1989) for sed's syntax.  :-)
-  sed -n '
-    p
-    /[$]LINENO/=
-  ' <$as_myself |
-    sed '
-      t clear
-      :clear
-      s/[$]LINENO.*/&-/
-      t lineno
-      b
-      :lineno
-      N
-      :loop
-      s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/
-      t loop
-      s/-\n.*//
-    ' >$as_me.lineno &&
-  chmod +x "$as_me.lineno" ||
-    { printf '%s\n' "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; }
-
-  # If we had to re-execute with $CONFIG_SHELL, we're ensured to have
-  # already done that, so ensure we don't try to do so again and fall
-  # in an infinite loop.  This has already happened in practice.
-  _as_can_reexec=no; export _as_can_reexec
-  # Don't try to exec as it changes $[0], causing all sort of problems
-  # (the dirname of $[0] is not the place where we might find the
-  # original and so on.  Autoconf is especially sensitive to this).
-  . "./$as_me.lineno"
-  # Exit status is that of the last command.
-  exit
-}
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both 'ln -s file dir' and 'ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; 'ln -s' creates a wrapper executable.
-    # In both cases, we have to default to 'cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_sed_cpp="y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g"
-as_tr_cpp="eval sed '$as_sed_cpp'" # deprecated
-
-# Sed expression to map a string onto a valid variable name.
-as_sed_sh="y%*+%pp%;s%[^_$as_cr_alnum]%_%g"
-as_tr_sh="eval sed '$as_sed_sh'" # deprecated
-
-SHELL=${CONFIG_SHELL-/bin/sh}
-
-as_awk_strverscmp='
-  # Use only awk features that work with 7th edition Unix awk (1978).
-  # My, what an old awk you have, Mr. Solaris!
-  END {
-    while (length(v1) && length(v2)) {
-      # Set d1 to be the next thing to compare from v1, and likewise for d2.
-      # Normally this is a single character, but if v1 and v2 contain digits,
-      # compare them as integers and fractions as strverscmp does.
-      if (v1 ~ /^[0-9]/ && v2 ~ /^[0-9]/) {
-	# Split v1 and v2 into their leading digit string components d1 and d2,
-	# and advance v1 and v2 past the leading digit strings.
-	for (len1 = 1; substr(v1, len1 + 1) ~ /^[0-9]/; len1++) continue
-	for (len2 = 1; substr(v2, len2 + 1) ~ /^[0-9]/; len2++) continue
-	d1 = substr(v1, 1, len1); v1 = substr(v1, len1 + 1)
-	d2 = substr(v2, 1, len2); v2 = substr(v2, len2 + 1)
-	if (d1 ~ /^0/) {
-	  if (d2 ~ /^0/) {
-	    # Compare two fractions.
-	    while (d1 ~ /^0/ && d2 ~ /^0/) {
-	      d1 = substr(d1, 2); len1--
-	      d2 = substr(d2, 2); len2--
-	    }
-	    if (len1 != len2 && ! (len1 && len2 && substr(d1, 1, 1) == substr(d2, 1, 1))) {
-	      # The two components differ in length, and the common prefix
-	      # contains only leading zeros.  Consider the longer to be less.
-	      d1 = -len1
-	      d2 = -len2
-	    } else {
-	      # Otherwise, compare as strings.
-	      d1 = "x" d1
-	      d2 = "x" d2
-	    }
-	  } else {
-	    # A fraction is less than an integer.
-	    exit 1
-	  }
-	} else {
-	  if (d2 ~ /^0/) {
-	    # An integer is greater than a fraction.
-	    exit 2
-	  } else {
-	    # Compare two integers.
-	    d1 += 0
-	    d2 += 0
-	  }
-	}
-      } else {
-	# The normal case, without worrying about digits.
-	d1 = substr(v1, 1, 1); v1 = substr(v1, 2)
-	d2 = substr(v2, 1, 1); v2 = substr(v2, 2)
-      }
-      if (d1 < d2) exit 1
-      if (d1 > d2) exit 2
-    }
-    # Beware Solaris 11 /usr/xgp4/bin/awk, which mishandles some
-    # comparisons of empty strings to integers.  For example,
-    # LC_ALL=C /usr/xpg4/bin/awk "BEGIN {if (-1 < \"\") print \"a\"}"
-    # prints "a".
-    if (length(v2)) exit 1
-    if (length(v1)) exit 2
-  }
-'
-
-test -n "$DJDIR" || exec 7<&0 </dev/null
-exec 6>&1
-
-# Name of the host.
-# hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status,
-# so uname gets run too.
-ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q`
-
-#
-# Initializations.
-#
-ac_default_prefix=/usr/local
-ac_clean_CONFIG_STATUS=
-ac_clean_files=
-ac_config_libobj_dir=.
-LIBOBJS=
-cross_compiling=no
-subdirs=
-MFLAGS=
-MAKEFLAGS=
-
-# Identity of this package.
-PACKAGE_NAME='libXext'
-PACKAGE_TARNAME='libXext'
-PACKAGE_VERSION='1.3.7'
-PACKAGE_STRING='libXext 1.3.7'
-PACKAGE_BUGREPORT='https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues'
-PACKAGE_URL=''
-
-ac_unique_file="Makefile.am"
-# Factoring default headers for most tests.
-ac_includes_default="\
-#include <stddef.h>
-#ifdef HAVE_STDIO_H
-# include <stdio.h>
-#endif
-#ifdef HAVE_STDLIB_H
-# include <stdlib.h>
-#endif
-#ifdef HAVE_STRING_H
-# include <string.h>
-#endif
-#ifdef HAVE_INTTYPES_H
-# include <inttypes.h>
-#endif
-#ifdef HAVE_STDINT_H
-# include <stdint.h>
-#endif
-#ifdef HAVE_STRINGS_H
-# include <strings.h>
-#endif
-#ifdef HAVE_SYS_TYPES_H
-# include <sys/types.h>
-#endif
-#ifdef HAVE_SYS_STAT_H
-# include <sys/stat.h>
-#endif
-#ifdef HAVE_UNISTD_H
-# include <unistd.h>
-#endif"
-
-ac_header_c_list=
-ac_subst_vars='am__EXEEXT_FALSE
-am__EXEEXT_TRUE
-LTLIBOBJS
-MAKE_LINT_LIB_FALSE
-MAKE_LINT_LIB_TRUE
-LINTLIB
-LINT_FALSE
-LINT_TRUE
-LINT_FLAGS
-LINT
-LIBOBJS
-XEXT_LIBS
-XEXT_CFLAGS
-XEXT_SOREV
-XTMALLOC_ZERO_CFLAGS
-XMALLOC_ZERO_CFLAGS
-MALLOC_ZERO_CFLAGS
-HAVE_STYLESHEETS_FALSE
-HAVE_STYLESHEETS_TRUE
-XSL_STYLESHEET
-STYLESHEET_SRCDIR
-XORG_SGML_PATH
-HAVE_XSLTPROC_FALSE
-HAVE_XSLTPROC_TRUE
-XSLTPROC
-HAVE_FOP_FALSE
-HAVE_FOP_TRUE
-FOP
-HAVE_XMLTO_FALSE
-HAVE_XMLTO_TRUE
-HAVE_XMLTO_TEXT_FALSE
-HAVE_XMLTO_TEXT_TRUE
-XMLTO
-ENABLE_SPECS_FALSE
-ENABLE_SPECS_TRUE
-MAN_SUBSTS
-XORG_MAN_PAGE
-ADMIN_MAN_DIR
-DRIVER_MAN_DIR
-MISC_MAN_DIR
-FILE_MAN_DIR
-LIB_MAN_DIR
-APP_MAN_DIR
-ADMIN_MAN_SUFFIX
-DRIVER_MAN_SUFFIX
-MISC_MAN_SUFFIX
-FILE_MAN_SUFFIX
-LIB_MAN_SUFFIX
-APP_MAN_SUFFIX
-INSTALL_CMD
-PKG_CONFIG_LIBDIR
-PKG_CONFIG_PATH
-PKG_CONFIG
-CHANGELOG_CMD
-STRICT_CFLAGS
-CWARNFLAGS
-BASE_CFLAGS
-LT_SYS_LIBRARY_PATH
-OTOOL64
-OTOOL
-LIPO
-NMEDIT
-DSYMUTIL
-MANIFEST_TOOL
-RANLIB
-ac_ct_AR
-AR
-DLLTOOL
-OBJDUMP
-FILECMD
-LN_S
-NM
-ac_ct_DUMPBIN
-DUMPBIN
-LD
-FGREP
-EGREP
-GREP
-SED
-host_os
-host_vendor
-host_cpu
-host
-build_os
-build_vendor
-build_cpu
-build
-LIBTOOL
-am__xargs_n
-am__rm_f_notfound
-AM_BACKSLASH
-AM_DEFAULT_VERBOSITY
-AM_DEFAULT_V
-AM_V
-CSCOPE
-ETAGS
-CTAGS
-am__fastdepCC_FALSE
-am__fastdepCC_TRUE
-CCDEPMODE
-am__nodep
-AMDEPBACKSLASH
-AMDEP_FALSE
-AMDEP_TRUE
-am__include
-DEPDIR
-am__untar
-am__tar
-AMTAR
-am__leading_dot
-SET_MAKE
-AWK
-mkdir_p
-MKDIR_P
-INSTALL_STRIP_PROGRAM
-STRIP
-install_sh
-MAKEINFO
-AUTOHEADER
-AUTOMAKE
-AUTOCONF
-ACLOCAL
-VERSION
-PACKAGE
-CYGPATH_W
-am__isrc
-INSTALL_DATA
-INSTALL_SCRIPT
-INSTALL_PROGRAM
-OBJEXT
-EXEEXT
-ac_ct_CC
-CPPFLAGS
-LDFLAGS
-CFLAGS
-CC
-ECHO_T
-ECHO_N
-ECHO_C
-target_alias
-host_alias
-build_alias
-LIBS
-DEFS
-mandir
-localedir
-libdir
-psdir
-pdfdir
-dvidir
-htmldir
-infodir
-docdir
-oldincludedir
-includedir
-runstatedir
-localstatedir
-sharedstatedir
-sysconfdir
-datadir
-datarootdir
-libexecdir
-sbindir
-bindir
-program_transform_name
-prefix
-exec_prefix
-PACKAGE_URL
-PACKAGE_BUGREPORT
-PACKAGE_STRING
-PACKAGE_VERSION
-PACKAGE_TARNAME
-PACKAGE_NAME
-PATH_SEPARATOR
-SHELL
-am__quote'
-ac_subst_files=''
-ac_user_opts='
-enable_option_checking
-enable_dependency_tracking
-enable_silent_rules
-enable_shared
-enable_static
-enable_pic
-with_pic
-enable_fast_install
-enable_aix_soname
-with_aix_soname
-with_gnu_ld
-with_sysroot
-enable_libtool_lock
-enable_selective_werror
-enable_strict_compilation
-enable_specs
-with_xmlto
-with_fop
-with_xsltproc
-enable_malloc0returnsnull
-with_lint
-enable_lint_library
-'
-      ac_precious_vars='build_alias
-host_alias
-target_alias
-CC
-CFLAGS
-LDFLAGS
-LIBS
-CPPFLAGS
-LT_SYS_LIBRARY_PATH
-PKG_CONFIG
-PKG_CONFIG_PATH
-PKG_CONFIG_LIBDIR
-XMLTO
-FOP
-XSLTPROC
-XEXT_CFLAGS
-XEXT_LIBS
-LINT
-LINT_FLAGS'
-
-
-# Initialize some variables set by options.
-ac_init_help=
-ac_init_version=false
-ac_unrecognized_opts=
-ac_unrecognized_sep=
-# The variables have the same names as the options, with
-# dashes changed to underlines.
-cache_file=/dev/null
-exec_prefix=NONE
-no_create=
-no_recursion=
-prefix=NONE
-program_prefix=NONE
-program_suffix=NONE
-program_transform_name=s,x,x,
-silent=
-site=
-srcdir=
-verbose=
-x_includes=NONE
-x_libraries=NONE
-
-# Installation directory options.
-# These are left unexpanded so users can "make install exec_prefix=/foo"
-# and all the variables that are supposed to be based on exec_prefix
-# by default will actually change.
-# Use braces instead of parens because sh, perl, etc. also accept them.
-# (The list follows the same order as the GNU Coding Standards.)
-bindir='${exec_prefix}/bin'
-sbindir='${exec_prefix}/sbin'
-libexecdir='${exec_prefix}/libexec'
-datarootdir='${prefix}/share'
-datadir='${datarootdir}'
-sysconfdir='${prefix}/etc'
-sharedstatedir='${prefix}/com'
-localstatedir='${prefix}/var'
-runstatedir='${localstatedir}/run'
-includedir='${prefix}/include'
-oldincludedir='/usr/include'
-docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
-infodir='${datarootdir}/info'
-htmldir='${docdir}'
-dvidir='${docdir}'
-pdfdir='${docdir}'
-psdir='${docdir}'
-libdir='${exec_prefix}/lib'
-localedir='${datarootdir}/locale'
-mandir='${datarootdir}/man'
-
-ac_prev=
-ac_dashdash=
-for ac_option
-do
-  # If the previous option needs an argument, assign it.
-  if test -n "$ac_prev"; then
-    eval $ac_prev=\$ac_option
-    ac_prev=
-    continue
-  fi
-
-  case $ac_option in
-  *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;;
-  *=)   ac_optarg= ;;
-  *)    ac_optarg=yes ;;
-  esac
-
-  case $ac_dashdash$ac_option in
-  --)
-    ac_dashdash=yes ;;
-
-  -bindir | --bindir | --bindi | --bind | --bin | --bi)
-    ac_prev=bindir ;;
-  -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*)
-    bindir=$ac_optarg ;;
-
-  -build | --build | --buil | --bui | --bu)
-    ac_prev=build_alias ;;
-  -build=* | --build=* | --buil=* | --bui=* | --bu=*)
-    build_alias=$ac_optarg ;;
-
-  -cache-file | --cache-file | --cache-fil | --cache-fi \
-  | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c)
-    ac_prev=cache_file ;;
-  -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \
-  | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*)
-    cache_file=$ac_optarg ;;
-
-  --config-cache | -C)
-    cache_file=config.cache ;;
-
-  -datadir | --datadir | --datadi | --datad)
-    ac_prev=datadir ;;
-  -datadir=* | --datadir=* | --datadi=* | --datad=*)
-    datadir=$ac_optarg ;;
-
-  -datarootdir | --datarootdir | --datarootdi | --datarootd | --dataroot \
-  | --dataroo | --dataro | --datar)
-    ac_prev=datarootdir ;;
-  -datarootdir=* | --datarootdir=* | --datarootdi=* | --datarootd=* \
-  | --dataroot=* | --dataroo=* | --dataro=* | --datar=*)
-    datarootdir=$ac_optarg ;;
-
-  -disable-* | --disable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=no ;;
-
-  -docdir | --docdir | --docdi | --doc | --do)
-    ac_prev=docdir ;;
-  -docdir=* | --docdir=* | --docdi=* | --doc=* | --do=*)
-    docdir=$ac_optarg ;;
-
-  -dvidir | --dvidir | --dvidi | --dvid | --dvi | --dv)
-    ac_prev=dvidir ;;
-  -dvidir=* | --dvidir=* | --dvidi=* | --dvid=* | --dvi=* | --dv=*)
-    dvidir=$ac_optarg ;;
-
-  -enable-* | --enable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=\$ac_optarg ;;
-
-  -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \
-  | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \
-  | --exec | --exe | --ex)
-    ac_prev=exec_prefix ;;
-  -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \
-  | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \
-  | --exec=* | --exe=* | --ex=*)
-    exec_prefix=$ac_optarg ;;
-
-  -gas | --gas | --ga | --g)
-    # Obsolete; use --with-gas.
-    with_gas=yes ;;
-
-  -help | --help | --hel | --he | -h)
-    ac_init_help=long ;;
-  -help=r* | --help=r* | --hel=r* | --he=r* | -hr*)
-    ac_init_help=recursive ;;
-  -help=s* | --help=s* | --hel=s* | --he=s* | -hs*)
-    ac_init_help=short ;;
-
-  -host | --host | --hos | --ho)
-    ac_prev=host_alias ;;
-  -host=* | --host=* | --hos=* | --ho=*)
-    host_alias=$ac_optarg ;;
-
-  -htmldir | --htmldir | --htmldi | --htmld | --html | --htm | --ht)
-    ac_prev=htmldir ;;
-  -htmldir=* | --htmldir=* | --htmldi=* | --htmld=* | --html=* | --htm=* \
-  | --ht=*)
-    htmldir=$ac_optarg ;;
-
-  -includedir | --includedir | --includedi | --included | --include \
-  | --includ | --inclu | --incl | --inc)
-    ac_prev=includedir ;;
-  -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \
-  | --includ=* | --inclu=* | --incl=* | --inc=*)
-    includedir=$ac_optarg ;;
-
-  -infodir | --infodir | --infodi | --infod | --info | --inf)
-    ac_prev=infodir ;;
-  -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*)
-    infodir=$ac_optarg ;;
-
-  -libdir | --libdir | --libdi | --libd)
-    ac_prev=libdir ;;
-  -libdir=* | --libdir=* | --libdi=* | --libd=*)
-    libdir=$ac_optarg ;;
-
-  -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \
-  | --libexe | --libex | --libe)
-    ac_prev=libexecdir ;;
-  -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \
-  | --libexe=* | --libex=* | --libe=*)
-    libexecdir=$ac_optarg ;;
-
-  -localedir | --localedir | --localedi | --localed | --locale)
-    ac_prev=localedir ;;
-  -localedir=* | --localedir=* | --localedi=* | --localed=* | --locale=*)
-    localedir=$ac_optarg ;;
-
-  -localstatedir | --localstatedir | --localstatedi | --localstated \
-  | --localstate | --localstat | --localsta | --localst | --locals)
-    ac_prev=localstatedir ;;
-  -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \
-  | --localstate=* | --localstat=* | --localsta=* | --localst=* | --locals=*)
-    localstatedir=$ac_optarg ;;
-
-  -mandir | --mandir | --mandi | --mand | --man | --ma | --m)
-    ac_prev=mandir ;;
-  -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*)
-    mandir=$ac_optarg ;;
-
-  -nfp | --nfp | --nf)
-    # Obsolete; use --without-fp.
-    with_fp=no ;;
-
-  -no-create | --no-create | --no-creat | --no-crea | --no-cre \
-  | --no-cr | --no-c | -n)
-    no_create=yes ;;
-
-  -no-recursion | --no-recursion | --no-recursio | --no-recursi \
-  | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r)
-    no_recursion=yes ;;
-
-  -oldincludedir | --oldincludedir | --oldincludedi | --oldincluded \
-  | --oldinclude | --oldinclud | --oldinclu | --oldincl | --oldinc \
-  | --oldin | --oldi | --old | --ol | --o)
-    ac_prev=oldincludedir ;;
-  -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \
-  | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \
-  | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*)
-    oldincludedir=$ac_optarg ;;
-
-  -prefix | --prefix | --prefi | --pref | --pre | --pr | --p)
-    ac_prev=prefix ;;
-  -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*)
-    prefix=$ac_optarg ;;
-
-  -program-prefix | --program-prefix | --program-prefi | --program-pref \
-  | --program-pre | --program-pr | --program-p)
-    ac_prev=program_prefix ;;
-  -program-prefix=* | --program-prefix=* | --program-prefi=* \
-  | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*)
-    program_prefix=$ac_optarg ;;
-
-  -program-suffix | --program-suffix | --program-suffi | --program-suff \
-  | --program-suf | --program-su | --program-s)
-    ac_prev=program_suffix ;;
-  -program-suffix=* | --program-suffix=* | --program-suffi=* \
-  | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*)
-    program_suffix=$ac_optarg ;;
-
-  -program-transform-name | --program-transform-name \
-  | --program-transform-nam | --program-transform-na \
-  | --program-transform-n | --program-transform- \
-  | --program-transform | --program-transfor \
-  | --program-transfo | --program-transf \
-  | --program-trans | --program-tran \
-  | --progr-tra | --program-tr | --program-t)
-    ac_prev=program_transform_name ;;
-  -program-transform-name=* | --program-transform-name=* \
-  | --program-transform-nam=* | --program-transform-na=* \
-  | --program-transform-n=* | --program-transform-=* \
-  | --program-transform=* | --program-transfor=* \
-  | --program-transfo=* | --program-transf=* \
-  | --program-trans=* | --program-tran=* \
-  | --progr-tra=* | --program-tr=* | --program-t=*)
-    program_transform_name=$ac_optarg ;;
-
-  -pdfdir | --pdfdir | --pdfdi | --pdfd | --pdf | --pd)
-    ac_prev=pdfdir ;;
-  -pdfdir=* | --pdfdir=* | --pdfdi=* | --pdfd=* | --pdf=* | --pd=*)
-    pdfdir=$ac_optarg ;;
-
-  -psdir | --psdir | --psdi | --psd | --ps)
-    ac_prev=psdir ;;
-  -psdir=* | --psdir=* | --psdi=* | --psd=* | --ps=*)
-    psdir=$ac_optarg ;;
-
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil)
-    silent=yes ;;
-
-  -runstatedir | --runstatedir | --runstatedi | --runstated \
-  | --runstate | --runstat | --runsta | --runst | --runs \
-  | --run | --ru | --r)
-    ac_prev=runstatedir ;;
-  -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \
-  | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \
-  | --run=* | --ru=* | --r=*)
-    runstatedir=$ac_optarg ;;
-
-  -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
-    ac_prev=sbindir ;;
-  -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
-  | --sbi=* | --sb=*)
-    sbindir=$ac_optarg ;;
-
-  -sharedstatedir | --sharedstatedir | --sharedstatedi \
-  | --sharedstated | --sharedstate | --sharedstat | --sharedsta \
-  | --sharedst | --shareds | --shared | --share | --shar \
-  | --sha | --sh)
-    ac_prev=sharedstatedir ;;
-  -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \
-  | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \
-  | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \
-  | --sha=* | --sh=*)
-    sharedstatedir=$ac_optarg ;;
-
-  -site | --site | --sit)
-    ac_prev=site ;;
-  -site=* | --site=* | --sit=*)
-    site=$ac_optarg ;;
-
-  -srcdir | --srcdir | --srcdi | --srcd | --src | --sr)
-    ac_prev=srcdir ;;
-  -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*)
-    srcdir=$ac_optarg ;;
-
-  -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \
-  | --syscon | --sysco | --sysc | --sys | --sy)
-    ac_prev=sysconfdir ;;
-  -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \
-  | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*)
-    sysconfdir=$ac_optarg ;;
-
-  -target | --target | --targe | --targ | --tar | --ta | --t)
-    ac_prev=target_alias ;;
-  -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*)
-    target_alias=$ac_optarg ;;
-
-  -v | -verbose | --verbose | --verbos | --verbo | --verb)
-    verbose=yes ;;
-
-  -version | --version | --versio | --versi | --vers | -V)
-    ac_init_version=: ;;
-
-  -with-* | --with-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=\$ac_optarg ;;
-
-  -without-* | --without-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: '$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf '%s\n' "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=no ;;
-
-  --x)
-    # Obsolete; use --with-x.
-    with_x=yes ;;
-
-  -x-includes | --x-includes | --x-include | --x-includ | --x-inclu \
-  | --x-incl | --x-inc | --x-in | --x-i)
-    ac_prev=x_includes ;;
-  -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \
-  | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*)
-    x_includes=$ac_optarg ;;
-
-  -x-libraries | --x-libraries | --x-librarie | --x-librari \
-  | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l)
-    ac_prev=x_libraries ;;
-  -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \
-  | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*)
-    x_libraries=$ac_optarg ;;
-
-  -*) as_fn_error $? "unrecognized option: '$ac_option'
-Try '$0 --help' for more information"
-    ;;
-
-  *=*)
-    ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='`
-    # Reject names that are not valid shell variable names.
-    case $ac_envvar in #(
-      '' | [0-9]* | *[!_$as_cr_alnum]* )
-      as_fn_error $? "invalid variable name: '$ac_envvar'" ;;
-    esac
-    eval $ac_envvar=\$ac_optarg
-    export $ac_envvar ;;
-
-  *)
-    # FIXME: should be removed in autoconf 3.0.
-    printf '%s\n' "$as_me: WARNING: you should use --build, --host, --target" >&2
-    expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null &&
-      printf '%s\n' "$as_me: WARNING: invalid host type: $ac_option" >&2
-    : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}"
-    ;;
-
-  esac
-done
-
-if test -n "$ac_prev"; then
-  ac_option=--`printf '%s\n' $ac_prev | sed 's/_/-/g'`
-  as_fn_error $? "missing argument to $ac_option"
-fi
-
-if test -n "$ac_unrecognized_opts"; then
-  case $enable_option_checking in
-    no) ;;
-    fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;;
-    *)     printf '%s\n' "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;;
-  esac
-fi
-
-# Check all directory arguments for consistency.
-for ac_var in	exec_prefix prefix bindir sbindir libexecdir datarootdir \
-		datadir sysconfdir sharedstatedir localstatedir includedir \
-		oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
-		libdir localedir mandir runstatedir
-do
-  eval ac_val=\$$ac_var
-  # Remove trailing slashes.
-  case $ac_val in
-    */ )
-      ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'`
-      eval $ac_var=\$ac_val;;
-  esac
-  # Be sure to have absolute directory names.
-  case $ac_val in
-    [\\/$]* | ?:[\\/]* )  continue;;
-    NONE | '' ) case $ac_var in *prefix ) continue;; esac;;
-  esac
-  as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val"
-done
-
-# There might be people who depend on the old broken behavior: '$host'
-# used to hold the argument of --host etc.
-# FIXME: To remove some day.
-build=$build_alias
-host=$host_alias
-target=$target_alias
-
-# FIXME: To remove some day.
-if test "x$host_alias" != x; then
-  if test "x$build_alias" = x; then
-    cross_compiling=maybe
-  elif test "x$build_alias" != "x$host_alias"; then
-    cross_compiling=yes
-  fi
-fi
-
-ac_tool_prefix=
-test -n "$host_alias" && ac_tool_prefix=$host_alias-
-
-test "$silent" = yes && exec 6>/dev/null
-
-
-ac_pwd=`pwd` && test -n "$ac_pwd" &&
-ac_ls_di=`ls -di .` &&
-ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` ||
-  as_fn_error $? "working directory cannot be determined"
-test "X$ac_ls_di" = "X$ac_pwd_ls_di" ||
-  as_fn_error $? "pwd does not report name of working directory"
-
-
-# Find the source files, if location was not specified.
-if test -z "$srcdir"; then
-  ac_srcdir_defaulted=yes
-  # Try the directory containing this script, then the parent directory.
-  ac_confdir=`$as_dirname -- "$as_myself" ||
-$as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_myself" : 'X\(//\)[^/]' \| \
-	 X"$as_myself" : 'X\(//\)$' \| \
-	 X"$as_myself" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_myself" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  srcdir=$ac_confdir
-  if test ! -r "$srcdir/$ac_unique_file"; then
-    srcdir=..
-  fi
-else
-  ac_srcdir_defaulted=no
-fi
-if test ! -r "$srcdir/$ac_unique_file"; then
-  test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .."
-  as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir"
-fi
-ac_msg="sources are in $srcdir, but 'cd $srcdir' does not work"
-ac_abs_confdir=`(
-	cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg"
-	pwd)`
-# When building in place, set srcdir=.
-if test "$ac_abs_confdir" = "$ac_pwd"; then
-  srcdir=.
-fi
-# Remove unnecessary trailing slashes from srcdir.
-# Double slashes in file names in object file debugging info
-# mess up M-x gdb in Emacs.
-case $srcdir in
-*/) srcdir=`expr "X$srcdir" : 'X\(.*[^/]\)' \| "X$srcdir" : 'X\(.*\)'`;;
-esac
-for ac_var in $ac_precious_vars; do
-  eval ac_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_env_${ac_var}_value=\$${ac_var}
-  eval ac_cv_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_cv_env_${ac_var}_value=\$${ac_var}
-done
-
-#
-# Report the --help message.
-#
-if test "$ac_init_help" = "long"; then
-  # Omit some internal or obsolete options to make the list less imposing.
-  # This message is too long to be a string in the A/UX 3.1 sh.
-  cat <<_ACEOF
-'configure' configures libXext 1.3.7 to adapt to many kinds of systems.
-
-Usage: $0 [OPTION]... [VAR=VALUE]...
-
-To assign environment variables (e.g., CC, CFLAGS...), specify them as
-VAR=VALUE.  See below for descriptions of some of the useful variables.
-
-Defaults for the options are specified in brackets.
-
-Configuration:
-  -h, --help              display this help and exit
-      --help=short        display options specific to this package
-      --help=recursive    display the short help of all the included packages
-  -V, --version           display version information and exit
-  -q, --quiet, --silent   do not print 'checking ...' messages
-      --cache-file=FILE   cache test results in FILE [disabled]
-  -C, --config-cache      alias for '--cache-file=config.cache'
-  -n, --no-create         do not create output files
-      --srcdir=DIR        find the sources in DIR [configure dir or '..']
-
-Installation directories:
-  --prefix=PREFIX         install architecture-independent files in PREFIX
-                          [$ac_default_prefix]
-  --exec-prefix=EPREFIX   install architecture-dependent files in EPREFIX
-                          [PREFIX]
-
-By default, 'make install' will install all the files in
-'$ac_default_prefix/bin', '$ac_default_prefix/lib' etc.  You can specify
-an installation prefix other than '$ac_default_prefix' using '--prefix',
-for instance '--prefix=\$HOME'.
-
-For better control, use the options below.
-
-Fine tuning of the installation directories:
-  --bindir=DIR            user executables [EPREFIX/bin]
-  --sbindir=DIR           system admin executables [EPREFIX/sbin]
-  --libexecdir=DIR        program executables [EPREFIX/libexec]
-  --sysconfdir=DIR        read-only single-machine data [PREFIX/etc]
-  --sharedstatedir=DIR    modifiable architecture-independent data [PREFIX/com]
-  --localstatedir=DIR     modifiable single-machine data [PREFIX/var]
-  --runstatedir=DIR       modifiable per-process data [LOCALSTATEDIR/run]
-  --libdir=DIR            object code libraries [EPREFIX/lib]
-  --includedir=DIR        C header files [PREFIX/include]
-  --oldincludedir=DIR     C header files for non-gcc [/usr/include]
-  --datarootdir=DIR       read-only arch.-independent data root [PREFIX/share]
-  --datadir=DIR           read-only architecture-independent data [DATAROOTDIR]
-  --infodir=DIR           info documentation [DATAROOTDIR/info]
-  --localedir=DIR         locale-dependent data [DATAROOTDIR/locale]
-  --mandir=DIR            man documentation [DATAROOTDIR/man]
-  --docdir=DIR            documentation root [DATAROOTDIR/doc/libXext]
-  --htmldir=DIR           html documentation [DOCDIR]
-  --dvidir=DIR            dvi documentation [DOCDIR]
-  --pdfdir=DIR            pdf documentation [DOCDIR]
-  --psdir=DIR             ps documentation [DOCDIR]
-_ACEOF
-
-  cat <<\_ACEOF
-
-Program names:
-  --program-prefix=PREFIX            prepend PREFIX to installed program names
-  --program-suffix=SUFFIX            append SUFFIX to installed program names
-  --program-transform-name=PROGRAM   run sed PROGRAM on installed program names
-
-System types:
-  --build=BUILD     configure for building on BUILD [guessed]
-  --host=HOST       cross-compile to build programs to run on HOST [BUILD]
-_ACEOF
-fi
-
-if test -n "$ac_init_help"; then
-  case $ac_init_help in
-     short | recursive ) echo "Configuration of libXext 1.3.7:";;
-   esac
-  cat <<\_ACEOF
-
-Optional Features:
-  --disable-option-checking  ignore unrecognized --enable/--with options
-  --disable-FEATURE       do not include FEATURE (same as --enable-FEATURE=no)
-  --enable-FEATURE[=ARG]  include FEATURE [ARG=yes]
-  --enable-dependency-tracking
-                          do not reject slow dependency extractors
-  --disable-dependency-tracking
-                          speeds up one-time build
-  --enable-silent-rules   less verbose build output (undo: "make V=1")
-  --disable-silent-rules  verbose build output (undo: "make V=0")
-  --enable-shared[=PKGS]  build shared libraries [default=yes]
-  --enable-static[=PKGS]  build static libraries [default=yes]
-  --enable-pic[=PKGS]     try to use only PIC/non-PIC objects [default=use
-                          both]
-  --enable-fast-install[=PKGS]
-                          optimize for fast installation [default=yes]
-  --enable-aix-soname=aix|svr4|both
-                          shared library versioning (aka "SONAME") variant to
-                          provide on AIX, [default=aix].
-  --disable-libtool-lock  avoid locking (might break parallel builds)
-  --disable-selective-werror
-                          Turn off selective compiler errors. (default:
-                          enabled)
-  --enable-strict-compilation
-                          Enable all warnings from compiler and make them
-                          errors (default: disabled)
-  --enable-specs          Enable building the specs (default: yes)
-  --enable-malloc0returnsnull
-                          assume malloc(0) can return NULL (default: yes)
-  --enable-lint-library   Create lint library (default: disabled)
-
-Optional Packages:
-  --with-PACKAGE[=ARG]    use PACKAGE [ARG=yes]
-  --without-PACKAGE       do not use PACKAGE (same as --with-PACKAGE=no)
-  --with-gnu-ld           assume the C compiler uses GNU ld [default=no]
-  --with-sysroot[=DIR]    Search for dependent libraries within DIR (or the
-                          compiler's sysroot if not specified).
-  --with-xmlto            Use xmlto to regenerate documentation (default:
-                          auto)
-  --with-fop              Use fop to regenerate documentation (default: auto)
-  --with-xsltproc         Use xsltproc for the transformation of XML documents
-                          (default: auto)
-  --with-lint             Use a lint-style source code checker (default:
-                          disabled)
-
-Some influential environment variables:
-  CC          C compiler command
-  CFLAGS      C compiler flags
-  LDFLAGS     linker flags, e.g. -L<lib dir> if you have libraries in a
-              nonstandard directory <lib dir>
-  LIBS        libraries to pass to the linker, e.g. -l<library>
-  CPPFLAGS    (Objective) C/C++ preprocessor flags, e.g. -I<include dir> if
-              you have headers in a nonstandard directory <include dir>
-  LT_SYS_LIBRARY_PATH
-              User-defined run-time library search path.
-  PKG_CONFIG  path to pkg-config utility
-  PKG_CONFIG_PATH
-              directories to add to pkg-config's search path
-  PKG_CONFIG_LIBDIR
-              path overriding pkg-config's built-in search path
-  XMLTO       Path to xmlto command
-  FOP         Path to fop command
-  XSLTPROC    Path to xsltproc command
-  XEXT_CFLAGS C compiler flags for XEXT, overriding pkg-config
-  XEXT_LIBS   linker flags for XEXT, overriding pkg-config
-  LINT        Path to a lint-style command
-  LINT_FLAGS  Flags for the lint-style command
-
-Use these variables to override the choices made by 'configure' or to help
-it to find libraries and programs with nonstandard names/locations.
-
-Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>.
-_ACEOF
-ac_status=$?
-fi
-
-if test "$ac_init_help" = "recursive"; then
-  # If there are subdirs, report their specific --help.
-  for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue
-    test -d "$ac_dir" ||
-      { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } ||
-      continue
-    ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`printf '%s\n' "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`printf '%s\n' "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-    cd "$ac_dir" || { ac_status=$?; continue; }
-    # Check for configure.gnu first; this name is used for a wrapper for
-    # Metaconfig's "Configure" on case-insensitive file systems.
-    if test -f "$ac_srcdir/configure.gnu"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure.gnu" --help=recursive
-    elif test -f "$ac_srcdir/configure"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure" --help=recursive
-    else
-      printf '%s\n' "$as_me: WARNING: no configuration information is in $ac_dir" >&2
-    fi || ac_status=$?
-    cd "$ac_pwd" || { ac_status=$?; break; }
-  done
-fi
-
-test -n "$ac_init_help" && exit $ac_status
-if $ac_init_version; then
-  cat <<\_ACEOF
-libXext configure 1.3.7
-generated by GNU Autoconf 2.73
-
-Copyright (C) 2026 Free Software Foundation, Inc.
-This configure script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it.
-_ACEOF
-  exit
-fi
-
-## ------------------------ ##
-## Autoconf initialization. ##
-## ------------------------ ##
-
-# ac_fn_c_try_compile LINENO
-# --------------------------
-# Try to compile conftest.$ac_ext, and return whether this succeeded.
-ac_fn_c_try_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest.beam
-  if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest.$ac_objext
-then :
-  ac_retval=0
-else case e in #(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1 ;;
-esac
-fi
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} # ac_fn_c_try_compile
-
-# ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES
-# -------------------------------------------------------
-# Tests whether HEADER exists and can be compiled using the include files in
-# INCLUDES, setting the cache variable VAR accordingly.
-ac_fn_c_check_header_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-printf %s "checking for $2... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-#include <$2>
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  eval "$3=yes"
-else case e in #(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_header_compile
-
-# ac_fn_c_try_link LINENO
-# -----------------------
-# Try to link conftest.$ac_ext, and return whether this succeeded.
-ac_fn_c_try_link ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest.beam conftest$ac_exeext
-  if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest$ac_exeext && {
-	 test "$cross_compiling" = yes ||
-	 test -x conftest$ac_exeext
-       }
-then :
-  ac_retval=0
-else case e in #(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1 ;;
-esac
-fi
-  # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information
-  # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would
-  # interfere with the next link command; also delete a directory that is
-  # left behind by Apple's compiler.  We do this before executing the actions.
-  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} # ac_fn_c_try_link
-
-# ac_fn_c_check_func LINENO FUNC VAR
-# ----------------------------------
-# Tests whether FUNC exists, setting the cache variable VAR accordingly
-ac_fn_c_check_func ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-printf %s "checking for $2... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-/* Define $2 to an innocuous variant, in case <limits.h> declares $2.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $2 innocuous_$2
-
-/* System header to define __stub macros and hopefully few prototypes,
-   which can conflict with char $2 (void); below.  */
-
-#include <limits.h>
-#undef $2
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $2 (void);
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$2 || defined __stub___$2
-choke me
-#endif
-
-int
-main (void)
-{
-return $2 ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval "$3=yes"
-else case e in #(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_func
-
-# ac_fn_check_decl LINENO SYMBOL VAR INCLUDES EXTRA-OPTIONS FLAG-VAR
-# ------------------------------------------------------------------
-# Tests whether SYMBOL is declared in INCLUDES, setting cache variable VAR
-# accordingly. Pass EXTRA-OPTIONS to the compiler, using FLAG-VAR.
-ac_fn_check_decl ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  as_decl_name=`echo $2|sed 's/ *(.*//'`
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $as_decl_name is declared" >&5
-printf %s "checking whether $as_decl_name is declared... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'`
-  eval ac_save_FLAGS=\$$6
-  as_fn_append $6 " $5"
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-int
-main (void)
-{
-#ifndef $as_decl_name
-#ifdef __cplusplus
-  (void) $as_decl_use;
-#else
-  (void) $as_decl_name;
-#endif
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  eval "$3=yes"
-else case e in #(
-  e) eval "$3=no" ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-  eval $6=\$ac_save_FLAGS
- ;;
-esac
-fi
-eval ac_res=\$$3
-	       { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf '%s\n' "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_check_decl
-ac_configure_args_raw=
-for ac_arg
-do
-  case $ac_arg in
-  *\'*)
-    ac_arg=`printf '%s\n' "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
-  esac
-  as_fn_append ac_configure_args_raw " '$ac_arg'"
-done
-
-case $ac_configure_args_raw in
-  *$as_nl*)
-    ac_safe_unquote= ;;
-  *)
-    ac_unsafe_z='|&;<>()$`\\"*?[ ''	' # This string ends in space, tab.
-    ac_unsafe_a="$ac_unsafe_z#~"
-    ac_safe_unquote="s/ '\\([^$ac_unsafe_a][^$ac_unsafe_z]*\\)'/ \\1/g"
-    ac_configure_args_raw=`      printf '%s\n' "$ac_configure_args_raw" | sed "$ac_safe_unquote"`;;
-esac
-
-cat >config.log <<_ACEOF
-This file contains any messages produced by compilers while
-running configure, to aid debugging if configure makes a mistake.
-
-It was created by libXext $as_me 1.3.7, which was
-generated by GNU Autoconf 2.73.  Invocation command line was
-
-  $ $0$ac_configure_args_raw
-
-_ACEOF
-exec 5>>config.log
-{
-cat <<_ASUNAME
-## --------- ##
-## Platform. ##
-## --------- ##
-
-hostname = `(hostname || uname -n) 2>/dev/null | sed 1q`
-uname -m = `(uname -m) 2>/dev/null || echo unknown`
-uname -r = `(uname -r) 2>/dev/null || echo unknown`
-uname -s = `(uname -s) 2>/dev/null || echo unknown`
-uname -v = `(uname -v) 2>/dev/null || echo unknown`
-
-/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown`
-/bin/uname -X     = `(/bin/uname -X) 2>/dev/null     || echo unknown`
-
-/bin/arch              = `(/bin/arch) 2>/dev/null              || echo unknown`
-/usr/bin/arch -k       = `(/usr/bin/arch -k) 2>/dev/null       || echo unknown`
-/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown`
-/usr/bin/hostinfo      = `(/usr/bin/hostinfo) 2>/dev/null      || echo unknown`
-/bin/machine           = `(/bin/machine) 2>/dev/null           || echo unknown`
-/usr/bin/oslevel       = `(/usr/bin/oslevel) 2>/dev/null       || echo unknown`
-/bin/universe          = `(/bin/universe) 2>/dev/null          || echo unknown`
-
-_ASUNAME
-
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    printf '%s\n' "PATH: $as_dir"
-  done
-IFS=$as_save_IFS
-
-} >&5
-
-cat >&5 <<_ACEOF
-
-
-## ----------- ##
-## Core tests. ##
-## ----------- ##
-
-_ACEOF
-
-
-# Keep a trace of the command line.
-# Strip out --no-create and --no-recursion so they do not pile up.
-# Strip out --silent because we don't want to record it for future runs.
-# Also quote any args containing shell meta-characters.
-# Make two passes to allow for proper duplicate-argument suppression.
-ac_configure_args=
-ac_configure_args0=
-ac_configure_args1=
-ac_must_keep_next=false
-for ac_pass in 1 2
-do
-  for ac_arg
-  do
-    case $ac_arg in
-    -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;;
-    -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-    | -silent | --silent | --silen | --sile | --sil)
-      continue ;;
-    *\'*)
-      ac_arg=`printf '%s\n' "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    case $ac_pass in
-    1) as_fn_append ac_configure_args0 " '$ac_arg'" ;;
-    2)
-      as_fn_append ac_configure_args1 " '$ac_arg'"
-      if test $ac_must_keep_next = true; then
-	ac_must_keep_next=false # Got value, back to normal.
-      else
-	case $ac_arg in
-	  *=* | --config-cache | -C | -disable-* | --disable-* \
-	  | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \
-	  | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \
-	  | -with-* | --with-* | -without-* | --without-* | --x)
-	    case "$ac_configure_args0 " in
-	      "$ac_configure_args1"*" '$ac_arg' "* ) continue ;;
-	    esac
-	    ;;
-	  -* ) ac_must_keep_next=true ;;
-	esac
-      fi
-      as_fn_append ac_configure_args " '$ac_arg'"
-      ;;
-    esac
-  done
-done
-{ ac_configure_args0=; unset ac_configure_args0;}
-{ ac_configure_args1=; unset ac_configure_args1;}
-
-# Dump the cache to stdout.  It can be in a pipe (this is a requirement).
-ac_cache_dump ()
-{
-  # The following way of writing the cache mishandles newlines in values,
-# but we know of no workaround that is simple, portable, and efficient.
-# So, we kill variables containing newlines.
-# Ultrix sh set writes to stderr and can't be redirected directly,
-# and sets the high bit in the cache file unless we assign to the vars.
-(
-  for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do
-    eval ac_val=\$$ac_var
-    case $ac_val in #(
-    *${as_nl}*)
-      case $ac_var in #(
-      *_cv_*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
-printf '%s\n' "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
-      esac
-      case $ac_var in #(
-      _ | IFS | as_nl) ;; #(
-      BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
-      *) { eval $ac_var=; unset $ac_var;} ;;
-      esac ;;
-    esac
-  done
-
-  (set) 2>&1 |
-    case $as_nl`(ac_space=' '; set) 2>&1` in #(
-    *${as_nl}ac_space=\ *)
-      # 'set' does not quote correctly, so add quotes: double-quote
-      # substitution turns \\\\ into \\, and sed turns \\ into \.
-      sed -n \
-	"s/'/'\\\\''/g;
-	  s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p"
-      ;; #(
-    *)
-      # 'set' quotes correctly as required by POSIX, so do not add quotes.
-      sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
-      ;;
-    esac |
-    sort
-)
-}
-
-# Print debugging info to stdout.
-ac_dump_debugging_info ()
-{
-  echo
-
-  printf '%s\n' "## ---------------- ##
-## Cache variables. ##
-## ---------------- ##"
-  echo
-  ac_cache_dump
-  echo
-
-  printf '%s\n' "## ----------------- ##
-## Output variables. ##
-## ----------------- ##"
-  echo
-  for ac_var in $ac_subst_vars
-  do
-    eval ac_val=\$$ac_var
-    case $ac_val in
-    *\'*) ac_val=`printf '%s\n' "$ac_val" | sed "s/'/'\\\\\\\\''/g"`;;
-    esac
-    printf '%s\n' "$ac_var='$ac_val'"
-  done | sort
-  echo
-
-  if test -n "$ac_subst_files"; then
-    printf '%s\n' "## ------------------- ##
-## File substitutions. ##
-## ------------------- ##"
-    echo
-    for ac_var in $ac_subst_files
-    do
-      eval ac_val=\$$ac_var
-      case $ac_val in
-      *\'*) ac_val=`printf '%s\n' "$ac_val" | sed "s/'/'\\\\\\\\''/g"`;;
-      esac
-      printf '%s\n' "$ac_var='$ac_val'"
-    done | sort
-    echo
-  fi
-
-  if test -s confdefs.h; then
-    printf '%s\n' "## ----------- ##
-## confdefs.h. ##
-## ----------- ##"
-    echo
-    cat confdefs.h
-    echo
-  fi
-  test "$ac_signal" != 0 &&
-    printf '%s\n' "$as_me: caught signal $ac_signal"
-  printf '%s\n' "$as_me: exit $exit_status"
-}
-
-# When interrupted or exit'd, cleanup temporary files, and complete
-# config.log.
-ac_exit_trap ()
-{
-  exit_status=
-  # Sanitize IFS.
-  IFS=" ""	$as_nl"
-  # Save into config.log some information that might help in debugging.
-  ac_dump_debugging_info >&5
-  eval "rm -f $ac_clean_CONFIG_STATUS core *.core core.conftest.*" &&
-    rm -f -r conftest* confdefs* conf$$* $ac_clean_files &&
-    exit $exit_status
-}
-
-trap 'ac_exit_trap $?' 0
-for ac_signal in 1 2 13 15; do
-  trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal
-done
-ac_signal=0
-
-# confdefs.h avoids OS command line length limits that DEFS can exceed.
-rm -f -r conftest* confdefs.h
-
-printf '%s\n' "/* confdefs.h */" > confdefs.h
-
-# Predefined preprocessor variables.
-
-printf '%s\n' "#define PACKAGE_NAME \"$PACKAGE_NAME\"" >>confdefs.h
-
-printf '%s\n' "#define PACKAGE_TARNAME \"$PACKAGE_TARNAME\"" >>confdefs.h
-
-printf '%s\n' "#define PACKAGE_VERSION \"$PACKAGE_VERSION\"" >>confdefs.h
-
-printf '%s\n' "#define PACKAGE_STRING \"$PACKAGE_STRING\"" >>confdefs.h
-
-printf '%s\n' "#define PACKAGE_BUGREPORT \"$PACKAGE_BUGREPORT\"" >>confdefs.h
-
-printf '%s\n' "#define PACKAGE_URL \"$PACKAGE_URL\"" >>confdefs.h
-
-
-# Let the site file select an alternate cache file if it wants to.
-# Prefer an explicitly selected file to automatically selected ones.
-if test -n "$CONFIG_SITE"; then
-  ac_site_files="$CONFIG_SITE"
-elif test "x$prefix" != xNONE; then
-  ac_site_files="$prefix/share/config.site $prefix/etc/config.site"
-else
-  ac_site_files="$ac_default_prefix/share/config.site $ac_default_prefix/etc/config.site"
-fi
-
-for ac_site_file in $ac_site_files
-do
-  case $ac_site_file in #(
-  */*) :
-     ;; #(
-  *) :
-    ac_site_file=./$ac_site_file ;;
-esac
-  if test -f "$ac_site_file" && test -r "$ac_site_file"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5
-printf '%s\n' "$as_me: loading site script $ac_site_file" >&6;}
-    sed 's/^/| /' "$ac_site_file" >&5
-    . "$ac_site_file" \
-      || { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "failed to load site script $ac_site_file
-See 'config.log' for more details" "$LINENO" 5; }
-  fi
-done
-
-if test -r "$cache_file"; then
-  # Some versions of bash will fail to source /dev/null (special files
-  # actually), so we avoid doing that.  DJGPP emulates it as a regular file.
-  if test /dev/null != "$cache_file" && test -f "$cache_file"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5
-printf '%s\n' "$as_me: loading cache $cache_file" >&6;}
-    case $cache_file in
-      [\\/]* | ?:[\\/]* ) . "$cache_file";;
-      *)                      . "./$cache_file";;
-    esac
-  fi
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5
-printf '%s\n' "$as_me: creating cache $cache_file" >&6;}
-  >$cache_file
-fi
-
-as_fn_append ac_header_c_list " stdio.h stdio_h HAVE_STDIO_H"
-# Test code for whether the C compiler supports C23 (global declarations)
-ac_c_conftest_c23_globals='
-/* Does the compiler advertise conformance to C17 or earlier?
-   Although GCC 14 does not do that, even with -std=gnu23,
-   it is close enough, and defines __STDC_VERSION == 202000L.  */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ <= 201710L
-# error "Compiler advertises conformance to C17 or earlier"
-#endif
-
-// Check alignas.
-char alignas (double) c23_aligned_as_double;
-char alignas (0) c23_no_special_alignment;
-extern char c23_aligned_as_int;
-char alignas (0) alignas (int) c23_aligned_as_int;
-
-// Check alignof.
-enum
-{
-  c23_int_alignment = alignof (int),
-  c23_int_array_alignment = alignof (int[100]),
-  c23_char_alignment = alignof (char)
-};
-static_assert (0 < -alignof (int), "alignof is signed");
-
-int function_with_unnamed_parameter (int) { return 0; }
-
-void c23_noreturn ();
-
-/* Test parsing of string and char UTF-8 literals (including hex escapes).
-   The parens pacify GCC 15.  */
-bool use_u8 = (!sizeof u8"\xFF") == (!u8'\''x'\'');
-
-bool check_that_bool_works = true | false | !nullptr;
-#if !true
-# error "true does not work in #if"
-#endif
-#if false
-#elifdef __STDC_VERSION__
-#else
-# error "#elifdef does not work"
-#endif
-
-#ifndef __has_c_attribute
-# error "__has_c_attribute not defined"
-#endif
-
-#ifndef __has_include
-# error "__has_include not defined"
-#endif
-
-#define LPAREN() (
-#define FORTY_TWO(x) 42
-#define VA_OPT_TEST(r, x, ...) __VA_OPT__ (FORTY_TWO r x))
-static_assert (VA_OPT_TEST (LPAREN (), 0, <:-) == 42);
-
-static_assert (0b101010 == 42);
-static_assert (0B101010 == 42);
-static_assert (0xDEAD'\''BEEF == 3'\''735'\''928'\''559);
-static_assert (0.500'\''000'\''000 == 0.5);
-
-enum unsignedish : unsigned int { uione = 1 };
-static_assert (0 < -uione);
-
-#include <stddef.h>
-constexpr nullptr_t null_pointer = nullptr;
-
-static typeof (1 + 1L) two () { return 2; }
-static long int three () { return 3; }
-'
-
-# Test code for whether the C compiler supports C23 (body of main).
-ac_c_conftest_c23_main='
-  {
-    label_before_declaration:
-      int arr[10] = {};
-      if (arr[0])
-        goto label_before_declaration;
-      if (!arr[0])
-        goto label_at_end_of_block;
-    label_at_end_of_block:
-  }
-  ok |= !null_pointer;
-  ok |= two != three;
-'
-
-# Test code for whether the C compiler supports C23 (complete).
-ac_c_conftest_c23_program="${ac_c_conftest_c23_globals}
-
-int
-main (int, char **)
-{
-  int ok = 0;
-  ${ac_c_conftest_c23_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C89 (global declarations)
-ac_c_conftest_c89_globals='
-/* Do not test the value of __STDC__, because some compilers define it to 0
-   or do not define it, while otherwise adequately conforming.  */
-
-#include <stddef.h>
-#include <stdarg.h>
-struct stat;
-/* Most of the following tests are stolen from RCS 5.7 src/conf.sh.  */
-struct buf { int x; };
-struct buf * (*rcsopen) (struct buf *, struct stat *, int);
-static char *e (char **p, int i)
-{
-  return p[i];
-}
-static char *f (char * (*g) (char **, int), char **p, ...)
-{
-  char *s;
-  va_list v;
-  va_start (v,p);
-  s = g (p, va_arg (v,int));
-  va_end (v);
-  return s;
-}
-
-/* C89 style stringification. */
-#define noexpand_stringify(a) #a
-const char *stringified = noexpand_stringify(arbitrary+token=sequence);
-
-/* C89 style token pasting.  Exercises some of the corner cases that
-   e.g. old MSVC gets wrong, but not very hard. */
-#define noexpand_concat(a,b) a##b
-#define expand_concat(a,b) noexpand_concat(a,b)
-extern int vA;
-extern int vbee;
-#define aye A
-#define bee B
-int *pvA = &expand_concat(v,aye);
-int *pvbee = &noexpand_concat(v,bee);
-
-/* OSF 4.0 Compaq cc is some sort of almost-ANSI by default.  It has
-   function prototypes and stuff, but not \xHH hex character constants.
-   These do not provoke an error unfortunately, instead are silently treated
-   as an "x".  The following induces an error, until -std is added to get
-   proper ANSI mode.  Curiously \x00 != x always comes out true, for an
-   array size at least.  It is necessary to write \x00 == 0 to get something
-   that is true only with -std.  */
-int osf4_cc_array ['\''\x00'\'' == 0 ? 1 : -1];
-
-/* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters
-   inside strings and character constants.  */
-#define FOO(x) '\''x'\''
-int xlc6_cc_array[FOO(a) == '\''x'\'' ? 1 : -1];
-
-int test (int i, double x);
-struct s1 {int (*f) (int a);};
-struct s2 {int (*f) (double a);};
-int pairnames (int, char **, int *(*)(struct buf *, struct stat *, int),
-               int, int);'
-
-# Test code for whether the C compiler supports C89 (body of main).
-ac_c_conftest_c89_main='
-ok |= (argc == 0 || f (e, argv, 0) != argv[0] || f (e, argv, 1) != argv[1]);
-'
-
-# Test code for whether the C compiler supports C99 (global declarations)
-ac_c_conftest_c99_globals='
-/* Does the compiler advertise C99 conformance? */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ < 199901L
-# error "Compiler does not advertise C99 conformance"
-#endif
-
-// See if C++-style comments work.
-
-#include <stdbool.h>
-extern int puts (const char *);
-extern int printf (const char *, ...);
-extern int dprintf (int, const char *, ...);
-extern void *malloc (size_t);
-extern void free (void *);
-
-// Check varargs macros.  These examples are taken from C99 6.10.3.5.
-// dprintf is used instead of fprintf to avoid needing to declare
-// FILE and stderr, and "aND" is used instead of "and" to work around
-// GCC bug 40564 which is irrelevant here.
-#define debug(...) dprintf (2, __VA_ARGS__)
-#define showlist(...) puts (#__VA_ARGS__)
-#define report(test,...) ((test) ? puts (#test) : printf (__VA_ARGS__))
-static void
-test_varargs_macros (void)
-{
-  int x = 1234;
-  int y = 5678;
-  debug ("Flag");
-  debug ("X = %d\n", x);
-  showlist (The first, second, aND third items.);
-  report (x>y, "x is %d but y is %d", x, y);
-}
-
-// Check long long types.
-#define BIG64 18446744073709551615ull
-#define BIG32 4294967295ul
-#define BIG_OK (BIG64 / BIG32 == 4294967297ull && BIG64 % BIG32 == 0)
-#if !BIG_OK
-  #error "your preprocessor is broken"
-#endif
-#if BIG_OK
-#else
-  #error "your preprocessor is broken"
-#endif
-static long long int bignum = -9223372036854775807LL;
-static unsigned long long int ubignum = BIG64;
-
-struct incomplete_array
-{
-  int datasize;
-  double data[];
-};
-
-struct named_init {
-  int number;
-  const wchar_t *name;
-  double average;
-};
-
-typedef const char *ccp;
-
-static inline int
-test_restrict (ccp restrict text)
-{
-  // Iterate through items via the restricted pointer.
-  // Also check for declarations in for loops.
-  for (unsigned int i = 0; *(text+i) != '\''\0'\''; ++i)
-    continue;
-  return 0;
-}
-
-// Check varargs and va_copy.
-static bool
-test_varargs (const char *format, ...)
-{
-  va_list args;
-  va_start (args, format);
-  va_list args_copy;
-  va_copy (args_copy, args);
-
-  const char *str = "";
-  int number = 0;
-  float fnumber = 0;
-
-  while (*format)
-    {
-      switch (*format++)
-	{
-	case '\''s'\'': // string
-	  str = va_arg (args_copy, const char *);
-	  break;
-	case '\''d'\'': // int
-	  number = va_arg (args_copy, int);
-	  break;
-	case '\''f'\'': // float
-	  fnumber = va_arg (args_copy, double);
-	  break;
-	default:
-	  break;
-	}
-    }
-  va_end (args_copy);
-  va_end (args);
-
-  return *str && number && fnumber;
-}
-'
-
-# Test code for whether the C compiler supports C99 (body of main).
-ac_c_conftest_c99_main='
-  // Check bool.
-  _Bool success = false;
-  success |= (argc != 0);
-
-  // Check restrict.
-  if (test_restrict ("String literal") == 0)
-    success = true;
-  const char *restrict newvar = "Another string";
-
-  // Check varargs.
-  success &= test_varargs ("s, d'\'' f .", "string", 65, 34.234);
-  test_varargs_macros ();
-
-  // Check flexible array members.
-  static struct incomplete_array *volatile incomplete_array_pointer;
-  struct incomplete_array *ia = incomplete_array_pointer;
-  ia->datasize = 10;
-  for (int i = 0; i < ia->datasize; ++i)
-    ia->data[i] = i * 1.234;
-  // Work around memory leak warnings.
-  free (ia);
-
-  // Check named initializers.
-  struct named_init ni = {
-    .number = 34,
-    .name = L"Test wide string",
-    .average = 543.34343,
-  };
-
-  ni.number = 58;
-
-  // Do not test for VLAs, as some otherwise-conforming compilers lack them.
-  // C code should instead use __STDC_NO_VLA__; see Autoconf manual.
-
-  // work around unused variable warnings
-  ok |= (!success || bignum == 0LL || ubignum == 0uLL || newvar[0] == '\''x'\''
-	 || ni.number != 58);
-'
-
-# Test code for whether the C compiler supports C11 (global declarations)
-ac_c_conftest_c11_globals='
-/* Does the compiler advertise C11 conformance? */
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ < 201112L
-# error "Compiler does not advertise C11 conformance"
-#endif
-
-// Check _Alignas.
-char _Alignas (double) aligned_as_double;
-char _Alignas (0) no_special_alignment;
-extern char aligned_as_int;
-char _Alignas (0) _Alignas (int) aligned_as_int;
-
-// Check _Alignof.
-enum
-{
-  int_alignment = _Alignof (int),
-  int_array_alignment = _Alignof (int[100]),
-  char_alignment = _Alignof (char)
-};
-_Static_assert (0 < -_Alignof (int), "_Alignof is signed");
-
-// Check _Noreturn.
-int _Noreturn does_not_return (void) { for (;;) continue; }
-
-// Check _Static_assert.
-struct test_static_assert
-{
-  int x;
-  _Static_assert (sizeof (int) <= sizeof (long int),
-                  "_Static_assert does not work in struct");
-  long int y;
-};
-
-// Check UTF-8 literals.
-#define u8 syntax error!
-char const utf8_literal[] = u8"happens to be ASCII" "another string";
-
-// Check duplicate typedefs.
-typedef long *long_ptr;
-typedef long int *long_ptr;
-typedef long_ptr long_ptr;
-
-// Anonymous structures and unions -- taken from C11 6.7.2.1 Example 1.
-struct anonymous
-{
-  union {
-    struct { int i; int j; };
-    struct { int k; long int l; } w;
-  };
-  int m;
-} v1;
-'
-
-# Test code for whether the C compiler supports C11 (body of main).
-ac_c_conftest_c11_main='
-  _Static_assert ((offsetof (struct anonymous, i)
-		   == offsetof (struct anonymous, w.k)),
-		  "Anonymous union alignment botch");
-  v1.i = 2;
-  v1.w.k = 5;
-  ok |= v1.i != 5;
-'
-
-# Test code for whether the C compiler supports C11 (complete).
-ac_c_conftest_c11_program="${ac_c_conftest_c89_globals}
-${ac_c_conftest_c99_globals}
-${ac_c_conftest_c11_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  ${ac_c_conftest_c99_main}
-  ${ac_c_conftest_c11_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C99 (complete).
-ac_c_conftest_c99_program="${ac_c_conftest_c89_globals}
-${ac_c_conftest_c99_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  ${ac_c_conftest_c99_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C89 (complete).
-ac_c_conftest_c89_program="${ac_c_conftest_c89_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  return ok;
-}
-"
-
-as_fn_append ac_header_c_list " stdlib.h stdlib_h HAVE_STDLIB_H"
-as_fn_append ac_header_c_list " string.h string_h HAVE_STRING_H"
-as_fn_append ac_header_c_list " inttypes.h inttypes_h HAVE_INTTYPES_H"
-as_fn_append ac_header_c_list " stdint.h stdint_h HAVE_STDINT_H"
-as_fn_append ac_header_c_list " strings.h strings_h HAVE_STRINGS_H"
-as_fn_append ac_header_c_list " sys/stat.h sys_stat_h HAVE_SYS_STAT_H"
-as_fn_append ac_header_c_list " sys/types.h sys_types_h HAVE_SYS_TYPES_H"
-as_fn_append ac_header_c_list " unistd.h unistd_h HAVE_UNISTD_H"
-as_fn_append ac_header_c_list " wchar.h wchar_h HAVE_WCHAR_H"
-as_fn_append ac_header_c_list " minix/config.h minix_config_h HAVE_MINIX_CONFIG_H"
-
-# Auxiliary files required by this configure script.
-ac_aux_files="config.guess config.sub ltmain.sh missing install-sh compile"
-
-# Locations in which to look for auxiliary files.
-ac_aux_dir_candidates="${srcdir}${PATH_SEPARATOR}${srcdir}/..${PATH_SEPARATOR}${srcdir}/../.."
-
-# Search for a directory containing all of the required auxiliary files,
-# $ac_aux_files, from the $PATH-style list $ac_aux_dir_candidates.
-# If we don't find one directory that contains all the files we need,
-# we report the set of missing files from the *first* directory in
-# $ac_aux_dir_candidates and give up.
-ac_missing_aux_files=""
-ac_first_candidate=:
-printf '%s\n' "$as_me:${as_lineno-$LINENO}: looking for aux files: $ac_aux_files" >&5
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in $ac_aux_dir_candidates
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-  as_found=:
-
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}:  trying $as_dir" >&5
-  ac_aux_dir_found=yes
-  ac_install_sh=
-  for ac_aux in $ac_aux_files
-  do
-    # As a special case, if "install-sh" is required, that requirement
-    # can be satisfied by any of "install-sh", "install.sh", or "shtool",
-    # and $ac_install_sh is set appropriately for whichever one is found.
-    if test x"$ac_aux" = x"install-sh"
-    then
-      if test -f "${as_dir}install-sh"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}install-sh found" >&5
-        ac_install_sh="${as_dir}install-sh -c"
-      elif test -f "${as_dir}install.sh"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}install.sh found" >&5
-        ac_install_sh="${as_dir}install.sh -c"
-      elif test -f "${as_dir}shtool"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}shtool found" >&5
-        ac_install_sh="${as_dir}shtool install -c"
-      else
-        ac_aux_dir_found=no
-        if $ac_first_candidate; then
-          ac_missing_aux_files="${ac_missing_aux_files} install-sh"
-        else
-          break
-        fi
-      fi
-    else
-      if test -f "${as_dir}${ac_aux}"; then
-        printf '%s\n' "$as_me:${as_lineno-$LINENO}:   ${as_dir}${ac_aux} found" >&5
-      else
-        ac_aux_dir_found=no
-        if $ac_first_candidate; then
-          ac_missing_aux_files="${ac_missing_aux_files} ${ac_aux}"
-        else
-          break
-        fi
-      fi
-    fi
-  done
-  if test "$ac_aux_dir_found" = yes; then
-    ac_aux_dir="$as_dir"
-    break
-  fi
-  ac_first_candidate=false
-
-  as_found=false
-done
-IFS=$as_save_IFS
-if $as_found
-then :
-
-else case e in #(
-  e) as_fn_error $? "cannot find required auxiliary files:$ac_missing_aux_files" "$LINENO" 5 ;;
-esac
-fi
-
-
-# These three variables are undocumented and unsupported,
-# and are intended to be withdrawn in a future Autoconf release.
-# They can cause serious problems if a builder's source tree is in a directory
-# whose full name contains unusual characters.
-if test -f "${ac_aux_dir}config.guess"; then
-  ac_config_guess="$SHELL ${ac_aux_dir}config.guess"
-fi
-if test -f "${ac_aux_dir}config.sub"; then
-  ac_config_sub="$SHELL ${ac_aux_dir}config.sub"
-fi
-if test -f "$ac_aux_dir/configure"; then
-  ac_configure="$SHELL ${ac_aux_dir}configure"
-fi
-
-# Check that the precious variables saved in the cache have kept the same
-# value.
-ac_cache_corrupted=false
-for ac_var in $ac_precious_vars; do
-  eval ac_old_set=\$ac_cv_env_${ac_var}_set
-  eval ac_new_set=\$ac_env_${ac_var}_set
-  eval ac_old_val=\$ac_cv_env_${ac_var}_value
-  eval ac_new_val=\$ac_env_${ac_var}_value
-  case $ac_old_set,$ac_new_set in
-    set,)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' was set to '$ac_old_val' in the previous run" >&5
-printf '%s\n' "$as_me: error: '$ac_var' was set to '$ac_old_val' in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,set)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' was not set in the previous run" >&5
-printf '%s\n' "$as_me: error: '$ac_var' was not set in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,);;
-    *)
-      if test "x$ac_old_val" != "x$ac_new_val"; then
-	# differences in whitespace do not lead to failure.
-	ac_old_val_w=
-	for ac_val in x $ac_old_val; do
-	  ac_old_val_w="$ac_old_val_w $ac_val"
-	done
-	ac_new_val_w=
-	for ac_val in x $ac_new_val; do
-	  ac_new_val_w="$ac_new_val_w $ac_val"
-	done
-	if test "$ac_old_val_w" != "$ac_new_val_w"; then
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: '$ac_var' has changed since the previous run:" >&5
-printf '%s\n' "$as_me: error: '$ac_var' has changed since the previous run:" >&2;}
-	  ac_cache_corrupted=:
-	else
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in '$ac_var' since the previous run:" >&5
-printf '%s\n' "$as_me: warning: ignoring whitespace changes in '$ac_var' since the previous run:" >&2;}
-	  eval $ac_var=\$ac_old_val
-	fi
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}:   former value:  '$ac_old_val'" >&5
-printf '%s\n' "$as_me:   former value:  '$ac_old_val'" >&2;}
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}:   current value: '$ac_new_val'" >&5
-printf '%s\n' "$as_me:   current value: '$ac_new_val'" >&2;}
-      fi;;
-  esac
-  # Pass precious variables to config.status.
-  if test "$ac_new_set" = set; then
-    case $ac_new_val in
-    *\'*) ac_arg=$ac_var=`printf '%s\n' "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;;
-    *) ac_arg=$ac_var=$ac_new_val ;;
-    esac
-    case " $ac_configure_args " in
-      *" '$ac_arg' "*) ;; # Avoid dups.  Use of quotes ensures accuracy.
-      *) as_fn_append ac_configure_args " '$ac_arg'" ;;
-    esac
-  fi
-done
-if $ac_cache_corrupted; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5
-printf '%s\n' "$as_me: error: changes in the environment can compromise the build" >&2;}
-  as_fn_error $? "run '${MAKE-make} distclean' and/or 'rm $cache_file'
-	    and start over" "$LINENO" 5
-fi
-## -------------------- ##
-## Main body of script. ##
-## -------------------- ##
-
-
-# Determine whether it's possible to make 'echo' print without a newline.
-# These variables are no longer used directly by Autoconf, but are AC_SUBSTed
-# for compatibility with existing Makefiles.
-ECHO_C= ECHO_N= ECHO_T=
-case `echo -n x` in #(((((
--n*)
-  case `echo 'xy\c'` in
-  *c*) ECHO_T='	';;	# ECHO_T is single tab character.
-  xy)  ECHO_C='\c';;
-  *)   echo `echo ksh88 bug on AIX 6.1` > /dev/null
-       ECHO_T='	';;
-  esac;;
-*)
-  ECHO_N='-n';;
-esac
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-
-ac_config_headers="$ac_config_headers config.h"
-
-
-
-# Set common system defines for POSIX extensions, such as _GNU_SOURCE
-# Must be called before any macros that run the compiler (like LT_INIT)
-# to avoid autoconf errors.
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-# Expand $ac_aux_dir to an absolute path.
-am_aux_dir=`cd "$ac_aux_dir" && pwd`
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}gcc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}gcc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "gcc", so it can be a program name with args.
-set dummy gcc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="gcc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-else
-  CC="$ac_cv_prog_CC"
-fi
-
-if test -z "$CC"; then
-          if test -n "$ac_tool_prefix"; then
-    # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}cc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}cc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  fi
-fi
-if test -z "$CC"; then
-  # Extract the first word of "cc", so it can be a program name with args.
-set dummy cc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-  ac_prog_rejected=no
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    if test "$as_dir$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then
-       ac_prog_rejected=yes
-       continue
-     fi
-    ac_cv_prog_CC="cc"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-if test $ac_prog_rejected = yes; then
-  # We found a bogon in the path, so make sure we never use it.
-  set dummy $ac_cv_prog_CC
-  shift
-  if test $# != 0; then
-    # We chose a different compiler from the bogus one.
-    # However, it has the same basename, so the bogon will be chosen
-    # first if we set CC to just the basename; use the full file name.
-    shift
-    ac_cv_prog_CC="$as_dir$ac_word${1+' '}$@"
-  fi
-fi
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  for ac_prog in cl.exe
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$CC" && break
-  done
-fi
-if test -z "$CC"; then
-  ac_ct_CC=$CC
-  for ac_prog in cl.exe
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_CC" && break
-done
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-fi
-
-fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}clang", so it can be a program name with args.
-set dummy ${ac_tool_prefix}clang; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}clang"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf '%s\n' "$CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "clang", so it can be a program name with args.
-set dummy clang; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="clang"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf '%s\n' "$ac_ct_CC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-else
-  CC="$ac_cv_prog_CC"
-fi
-
-fi
-
-
-test -z "$CC" && { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "no acceptable C compiler found in \$PATH
-See 'config.log' for more details" "$LINENO" 5; }
-
-# Provide some information about the compiler.
-printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5
-set X $ac_compile
-ac_compiler=$2
-for ac_option in --version -v -V -qversion -version; do
-  { { ac_try="$ac_compiler $ac_option >&5"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compiler $ac_option >&5") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    sed '10a\
-... rest of stderr output deleted ...
-         10q' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-  fi
-  rm -f conftest.er1 conftest.err
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-done
-
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files_save=$ac_clean_files
-ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out"
-# Try to create an executable without -o first, disregard a.out.
-# It will help us diagnose broken compilers, and finding out an intuition
-# of exeext.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5
-printf %s "checking whether the C compiler works... " >&6; }
-ac_link_default=`printf '%s\n' "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
-
-# The possible output files:
-ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*"
-
-ac_rmfiles=
-for ac_file in $ac_files
-do
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    * ) ac_rmfiles="$ac_rmfiles $ac_file";;
-  esac
-done
-rm -f $ac_rmfiles
-
-if { { ac_try="$ac_link_default"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link_default") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  # Autoconf-2.13 could set the ac_cv_exeext variable to 'no'.
-# So ignore a value of 'no', otherwise this would lead to 'EXEEXT = no'
-# in a Makefile.  We should not override ac_cv_exeext if it was cached,
-# so that the user can short-circuit this test for compilers unknown to
-# Autoconf.
-for ac_file in $ac_files ''
-do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj )
-	;;
-    [ab].out )
-	# We found the default executable, but exeext='' is most
-	# certainly right.
-	break;;
-    *.* )
-	if test ${ac_cv_exeext+y} && test "$ac_cv_exeext" != no;
-	then :; else
-	   ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	fi
-	# We set ac_cv_exeext here because the later test for it is not
-	# safe: cross compilers may not add the suffix if given an '-o'
-	# argument, so we may need to know it at that point already.
-	# Even if this section looks crufty: it has the advantage of
-	# actually working.
-	break;;
-    * )
-	break;;
-  esac
-done
-test "$ac_cv_exeext" = no && ac_cv_exeext=
-
-else case e in #(
-  e) ac_file='' ;;
-esac
-fi
-if test -z "$ac_file"
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error 77 "C compiler cannot create executables
-See 'config.log' for more details" "$LINENO" 5; }
-else case e in #(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; } ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5
-printf %s "checking for C compiler default output file name... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5
-printf '%s\n' "$ac_file" >&6; }
-ac_exeext=$ac_cv_exeext
-
-rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out
-ac_clean_files=$ac_clean_files_save
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5
-printf %s "checking for suffix of executables... " >&6; }
-if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  # If both 'conftest.exe' and 'conftest' are 'present' (well, observable)
-# catch 'conftest.exe'.  For instance with Cygwin, 'ls conftest' will
-# work properly (i.e., refer to 'conftest.exe'), while it won't with
-# 'rm'.
-for ac_file in conftest.exe conftest conftest.*; do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	  break;;
-    * ) break;;
-  esac
-done
-else case e in #(
-  e) { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of executables: cannot compile and link
-See 'config.log' for more details" "$LINENO" 5; } ;;
-esac
-fi
-rm -f conftest conftest$ac_cv_exeext
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5
-printf '%s\n' "$ac_cv_exeext" >&6; }
-
-rm -f conftest.$ac_ext
-EXEEXT=$ac_cv_exeext
-ac_exeext=$EXEEXT
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <stdio.h>
-int
-main (void)
-{
-FILE *f = fopen ("conftest.out", "w");
- if (!f)
-  return 1;
- return ferror (f) || fclose (f) != 0;
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files="$ac_clean_files conftest.out"
-# Check that the compiler produces executables we can run.  If not, either
-# the compiler is broken, or we cross compile.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5
-printf %s "checking whether we are cross compiling... " >&6; }
-if test "$cross_compiling" != yes; then
-  { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-  if { ac_try='./conftest$ac_cv_exeext'
-  { { case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; }; then
-    cross_compiling=no
-  else
-    if test "$cross_compiling" = maybe; then
-	cross_compiling=yes
-    else
-	{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error 77 "cannot run C compiled programs.
-If you meant to cross compile, use '--host'.
-See 'config.log' for more details" "$LINENO" 5; }
-    fi
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5
-printf '%s\n' "$cross_compiling" >&6; }
-
-rm -f conftest.$ac_ext conftest$ac_cv_exeext \
-  conftest.o conftest.obj conftest.out
-ac_clean_files=$ac_clean_files_save
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5
-printf %s "checking for suffix of object files... " >&6; }
-if test ${ac_cv_objext+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.o conftest.obj
-if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf '%s\n' "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  for ac_file in conftest.o conftest.obj conftest.*; do
-  test -f "$ac_file" || continue;
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;;
-    *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'`
-       break;;
-  esac
-done
-else case e in #(
-  e) printf '%s\n' "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of object files: cannot compile
-See 'config.log' for more details" "$LINENO" 5; } ;;
-esac
-fi
-rm -f conftest.$ac_cv_objext conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5
-printf '%s\n' "$ac_cv_objext" >&6; }
-OBJEXT=$ac_cv_objext
-ac_objext=$OBJEXT
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the compiler supports GNU C" >&5
-printf %s "checking whether the compiler supports GNU C... " >&6; }
-if test ${ac_cv_c_compiler_gnu+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-#ifndef __GNUC__
-       choke me
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_compiler_gnu=yes
-else case e in #(
-  e) ac_compiler_gnu=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-ac_cv_c_compiler_gnu=$ac_compiler_gnu
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5
-printf '%s\n' "$ac_cv_c_compiler_gnu" >&6; }
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-if test $ac_compiler_gnu = yes; then
-  GCC=yes
-else
-  GCC=
-fi
-ac_test_CFLAGS=${CFLAGS+y}
-ac_save_CFLAGS=$CFLAGS
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5
-printf %s "checking whether $CC accepts -g... " >&6; }
-if test ${ac_cv_prog_cc_g+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_save_c_werror_flag=$ac_c_werror_flag
-   ac_c_werror_flag=yes
-   ac_cv_prog_cc_g=no
-   CFLAGS="-g"
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_g=yes
-else case e in #(
-  e) CFLAGS=""
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-
-else case e in #(
-  e) ac_c_werror_flag=$ac_save_c_werror_flag
-	 CFLAGS="-g"
-	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_g=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ac_c_werror_flag=$ac_save_c_werror_flag ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5
-printf '%s\n' "$ac_cv_prog_cc_g" >&6; }
-if test $ac_test_CFLAGS; then
-  CFLAGS=$ac_save_CFLAGS
-elif test $ac_cv_prog_cc_g = yes; then
-  if test "$GCC" = yes; then
-    CFLAGS="-g -O2"
-  else
-    CFLAGS="-g"
-  fi
-else
-  if test "$GCC" = yes; then
-    CFLAGS="-O2"
-  else
-    CFLAGS=
-  fi
-fi
-ac_prog_cc_stdc=no
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C23 features" >&5
-printf %s "checking for $CC option to enable C23 features... " >&6; }
-if test ${ac_cv_prog_cc_c23+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_cv_prog_cc_c23=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c23_program
-_ACEOF
-for ac_arg in '' -std=gnu23
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c23=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c23" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c23" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in #(
-  e) if test "x$ac_cv_prog_cc_c23" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in #(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c23" >&5
-printf '%s\n' "$ac_cv_prog_cc_c23" >&6; }
-     CC="$CC $ac_cv_prog_cc_c23" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c23
-  ac_prog_cc_stdc=c23 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C11 features" >&5
-printf %s "checking for $CC option to enable C11 features... " >&6; }
-if test ${ac_cv_prog_cc_c11+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_cv_prog_cc_c11=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c11_program
-_ACEOF
-for ac_arg in '' -std=gnu11 -std:c11
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c11=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c11" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c11" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in #(
-  e) if test "x$ac_cv_prog_cc_c11" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in #(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c11" >&5
-printf '%s\n' "$ac_cv_prog_cc_c11" >&6; }
-     CC="$CC $ac_cv_prog_cc_c11" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c11
-  ac_prog_cc_stdc=c11 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C99 features" >&5
-printf %s "checking for $CC option to enable C99 features... " >&6; }
-if test ${ac_cv_prog_cc_c99+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_cv_prog_cc_c99=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c99_program
-_ACEOF
-for ac_arg in '' -std=gnu99 -std=c99 -c99 -qlanglvl=extc1x -qlanglvl=extc99 -AC99 -D_STDC_C99=
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c99=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c99" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c99" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in #(
-  e) if test "x$ac_cv_prog_cc_c99" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in #(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c99" >&5
-printf '%s\n' "$ac_cv_prog_cc_c99" >&6; }
-     CC="$CC $ac_cv_prog_cc_c99" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c99
-  ac_prog_cc_stdc=c99 ;;
-esac
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C89 features" >&5
-printf %s "checking for $CC option to enable C89 features... " >&6; }
-if test ${ac_cv_prog_cc_c89+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_cv_prog_cc_c89=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c89_program
-_ACEOF
-for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std -Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__"
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c89=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c89" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC ;;
-esac
-fi
-
-if test "x$ac_cv_prog_cc_c89" = xno
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf '%s\n' "unsupported" >&6; }
-else case e in #(
-  e) if test "x$ac_cv_prog_cc_c89" = x
-then :
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf '%s\n' "none needed" >&6; }
-else case e in #(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5
-printf '%s\n' "$ac_cv_prog_cc_c89" >&6; }
-     CC="$CC $ac_cv_prog_cc_c89" ;;
-esac
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c89
-  ac_prog_cc_stdc=c89 ;;
-esac
-fi
-fi
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-  ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $CC understands -c and -o together" >&5
-printf %s "checking whether $CC understands -c and -o together... " >&6; }
-if test ${am_cv_prog_cc_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-  # Make sure it works both with $CC and with simple cc.
-  # Following AC_PROG_CC_C_O, we do the test twice because some
-  # compilers refuse to overwrite an existing .o file with -o,
-  # though they will create one.
-  am_cv_prog_cc_c_o=yes
-  for am_i in 1 2; do
-    if { echo "$as_me:$LINENO: $CC -c conftest.$ac_ext -o conftest2.$ac_objext" >&5
-   ($CC -c conftest.$ac_ext -o conftest2.$ac_objext) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } \
-         && test -f conftest2.$ac_objext; then
-      : OK
-    else
-      am_cv_prog_cc_c_o=no
-      break
-    fi
-  done
-  # aligned with autoconf, so not including core; see bug#72225.
-  rm -f -r a.out a.exe b.out conftest.$ac_ext conftest.$ac_objext \
-    conftest.dSYM conftest1.$ac_ext conftest1.$ac_objext conftest1.dSYM \
-    conftest2.$ac_ext conftest2.$ac_objext conftest2.dSYM
-  unset am_i ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_prog_cc_c_o" >&5
-printf '%s\n' "$am_cv_prog_cc_c_o" >&6; }
-if test "$am_cv_prog_cc_c_o" != yes; then
-   # Losing compiler, so override with the script.
-   # FIXME: It is wrong to rewrite CC.
-   # But if we don't then we get into trouble of one sort or another.
-   # A longer-term fix would be to have automake use am__CC in this case,
-   # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)"
-   CC="$am_aux_dir/compile $CC"
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-
-ac_header= ac_cache=
-for ac_item in $ac_header_c_list
-do
-  if test $ac_cache; then
-    ac_fn_c_check_header_compile "$LINENO" $ac_header ac_cv_header_$ac_cache "$ac_includes_default"
-    if eval test \"x\$ac_cv_header_$ac_cache\" = xyes; then
-      printf '%s\n' "#define $ac_item 1" >> confdefs.h
-    fi
-    ac_header= ac_cache=
-  elif test $ac_header; then
-    ac_cache=$ac_item
-  else
-    ac_header=$ac_item
-  fi
-done
-
-
-
-
-
-
-
-
-if test $ac_cv_header_stdlib_h = yes && test $ac_cv_header_string_h = yes
-then :
-
-printf '%s\n' "#define STDC_HEADERS 1" >>confdefs.h
-
-fi
-
-
-
-
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether it is safe to define __EXTENSIONS__" >&5
-printf %s "checking whether it is safe to define __EXTENSIONS__... " >&6; }
-if test ${ac_cv_safe_to_define___extensions__+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-#         define __EXTENSIONS__ 1
-          $ac_includes_default
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_safe_to_define___extensions__=yes
-else case e in #(
-  e) ac_cv_safe_to_define___extensions__=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_safe_to_define___extensions__" >&5
-printf '%s\n' "$ac_cv_safe_to_define___extensions__" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether _XOPEN_SOURCE should be defined" >&5
-printf %s "checking whether _XOPEN_SOURCE should be defined... " >&6; }
-if test ${ac_cv_should_define__xopen_source+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_cv_should_define__xopen_source=no
-    if test $ac_cv_header_wchar_h = yes
-then :
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-          #include <wchar.h>
-          mbstate_t x;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-            #define _XOPEN_SOURCE 500
-            #include <wchar.h>
-            mbstate_t x;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_should_define__xopen_source=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_should_define__xopen_source" >&5
-printf '%s\n' "$ac_cv_should_define__xopen_source" >&6; }
-
-  printf '%s\n' "#define _ALL_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "#define _COSMO_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "#define _DARWIN_C_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "#define _GNU_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "#define _HPUX_ALT_XOPEN_SOCKET_API 1" >>confdefs.h
-
-  printf '%s\n' "#define _NETBSD_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "#define _OPENBSD_SOURCE 1" >>confdefs.h
-
-  printf '%s\n' "#define _POSIX_PTHREAD_SEMANTICS 1" >>confdefs.h
-
-  printf '%s\n' "#define __STDC_WANT_IEC_60559_ATTRIBS_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "#define __STDC_WANT_IEC_60559_BFP_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "#define __STDC_WANT_IEC_60559_DFP_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "#define __STDC_WANT_IEC_60559_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "#define __STDC_WANT_IEC_60559_FUNCS_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "#define __STDC_WANT_IEC_60559_TYPES_EXT__ 1" >>confdefs.h
-
-  printf '%s\n' "#define __STDC_WANT_LIB_EXT2__ 1" >>confdefs.h
-
-  printf '%s\n' "#define __STDC_WANT_MATH_SPEC_FUNCS__ 1" >>confdefs.h
-
-  printf '%s\n' "#define _TANDEM_SOURCE 1" >>confdefs.h
-
-  if test $ac_cv_header_minix_config_h = yes
-then :
-  MINIX=yes
-    printf '%s\n' "#define _MINIX 1" >>confdefs.h
-
-    printf '%s\n' "#define _POSIX_SOURCE 1" >>confdefs.h
-
-    printf '%s\n' "#define _POSIX_1_SOURCE 2" >>confdefs.h
-
-else case e in #(
-  e) MINIX= ;;
-esac
-fi
-  if test $ac_cv_safe_to_define___extensions__ = yes
-then :
-  printf '%s\n' "#define __EXTENSIONS__ 1" >>confdefs.h
-
-fi
-  if test $ac_cv_should_define__xopen_source = yes
-then :
-  printf '%s\n' "#define _XOPEN_SOURCE 500" >>confdefs.h
-
-fi
-
-
-# Initialize Automake
-am__api_version='1.18'
-
-
-  # Find a good install program.  We prefer a C program (faster),
-# so one script is as good as another.  But avoid the broken or
-# incompatible versions:
-# SysV /etc/install, /usr/sbin/install
-# SunOS /usr/etc/install
-# IRIX /sbin/install
-# AIX /bin/install
-# AmigaOS /C/install, which installs bootblocks on floppy discs
-# AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag
-# AFS /usr/afsws/bin/install, which mishandles nonexistent args
-# SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
-# OS/2's system install, which has a completely different semantic
-# ./install, which can be erroneously created by make from ./install.sh.
-# Reject install programs that cannot install multiple files.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5
-printf %s "checking for a BSD-compatible install... " >&6; }
-if test -z "$INSTALL"; then
-if test ${ac_cv_path_install+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    # Account for fact that we put trailing slashes in our PATH walk.
-case $as_dir in #((
-  ./ | /[cC]/* | \
-  /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \
-  ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \
-  /usr/ucb/* ) ;;
-  *)
-    # OSF/1 and SCO ODT 3.0 have their own names for install.
-    # Don't use installbsd from OSF/1 since it installs stuff as root
-    # by default.
-    for ac_prog in ginstall scoinst install; do
-      for ac_exec_ext in '' $ac_executable_extensions; do
-	if as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext"; then
-	  if test $ac_prog = install &&
-	    grep dspmsg "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # AIX install.  It has an incompatible calling convention.
-	    :
-	  elif test $ac_prog = install &&
-	    grep pwplus "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # program-specific install script used by HP pwplus--don't use.
-	    :
-	  else
-	    rm -rf conftest.one conftest.two conftest.dir
-	    echo one > conftest.one
-	    echo two > conftest.two
-	    mkdir conftest.dir
-	    if "$as_dir$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir/" &&
-	      test -s conftest.one && test -s conftest.two &&
-	      test -s conftest.dir/conftest.one &&
-	      test -s conftest.dir/conftest.two
-	    then
-	      ac_cv_path_install="$as_dir$ac_prog$ac_exec_ext -c"
-	      break 3
-	    fi
-	  fi
-	fi
-      done
-    done
-    ;;
-esac
-
-  done
-IFS=$as_save_IFS
-
-rm -rf conftest.one conftest.two conftest.dir
- ;;
-esac
-fi
-  if test ${ac_cv_path_install+y}; then
-    INSTALL=$ac_cv_path_install
-  else
-    # As a last resort, use the slow shell script.  Don't cache a
-    # value for INSTALL within a source directory, because that will
-    # break other packages using the cache if that directory is
-    # removed, or if the value is a relative name.
-    INSTALL=$ac_install_sh
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5
-printf '%s\n' "$INSTALL" >&6; }
-
-# Use test -z because SunOS4 sh mishandles braces in ${var-val}.
-# It thinks the first close brace ends the variable substitution.
-test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}'
-
-test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}'
-
-test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether sleep supports fractional seconds" >&5
-printf %s "checking whether sleep supports fractional seconds... " >&6; }
-if test ${am_cv_sleep_fractional_seconds+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if sleep 0.001 2>/dev/null
-then :
-  am_cv_sleep_fractional_seconds=yes
-else case e in #(
-  e) am_cv_sleep_fractional_seconds=no ;;
-esac
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_sleep_fractional_seconds" >&5
-printf '%s\n' "$am_cv_sleep_fractional_seconds" >&6; }
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking filesystem timestamp resolution" >&5
-printf %s "checking filesystem timestamp resolution... " >&6; }
-if test ${am_cv_filesystem_timestamp_resolution+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) # Default to the worst case.
-am_cv_filesystem_timestamp_resolution=2
-
-# Only try to go finer than 1 sec if sleep can do it.
-# Don't try 1 sec, because if 0.01 sec and 0.1 sec don't work,
-# - 1 sec is not much of a win compared to 2 sec, and
-# - it takes 2 seconds to perform the test whether 1 sec works.
-#
-# Instead, just use the default 2s on platforms that have 1s resolution,
-# accept the extra 1s delay when using $sleep in the Automake tests, in
-# exchange for not incurring the 2s delay for running the test for all
-# packages.
-#
-am_try_resolutions=
-if test "$am_cv_sleep_fractional_seconds" = yes; then
-  # Even a millisecond often causes a bunch of false positives,
-  # so just try a hundredth of a second. The time saved between .001 and
-  # .01 is not terribly consequential.
-  am_try_resolutions="0.01 0.1 $am_try_resolutions"
-fi
-
-# In order to catch current-generation FAT out, we must *modify* files
-# that already exist; the *creation* timestamp is finer.  Use names
-# that make ls -t sort them differently when they have equal
-# timestamps than when they have distinct timestamps, keeping
-# in mind that ls -t prints the *newest* file first.
-rm -f conftest.ts?
-: > conftest.ts1
-: > conftest.ts2
-: > conftest.ts3
-
-# Make sure ls -t actually works.  Do 'set' in a subshell so we don't
-# clobber the current shell's arguments. (Outer-level square brackets
-# are removed by m4; they're present so that m4 does not expand
-# <dollar><star>; be careful, easy to get confused.)
-if (
-     set X `ls -t conftest.ts[12]` &&
-     {
-       test "$*" != "X conftest.ts1 conftest.ts2" ||
-       test "$*" != "X conftest.ts2 conftest.ts1";
-     }
-); then :; else
-  # If neither matched, then we have a broken ls.  This can happen
-  # if, for instance, CONFIG_SHELL is bash and it inherits a
-  # broken ls alias from the environment.  This has actually
-  # happened.  Such a system could not be considered "sane".
-  printf '%s\n' ""Bad output from ls -t: \"`ls -t conftest.ts[12]`\""" >&5
-  { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "ls -t produces unexpected output.
-Make sure there is not a broken ls alias in your environment.
-See 'config.log' for more details" "$LINENO" 5; }
-fi
-
-for am_try_res in $am_try_resolutions; do
-  # Any one fine-grained sleep might happen to cross the boundary
-  # between two values of a coarser actual resolution, but if we do
-  # two fine-grained sleeps in a row, at least one of them will fall
-  # entirely within a coarse interval.
-  echo alpha > conftest.ts1
-  sleep $am_try_res
-  echo beta > conftest.ts2
-  sleep $am_try_res
-  echo gamma > conftest.ts3
-
-  # We assume that 'ls -t' will make use of high-resolution
-  # timestamps if the operating system supports them at all.
-  if (set X `ls -t conftest.ts?` &&
-      test "$2" = conftest.ts3 &&
-      test "$3" = conftest.ts2 &&
-      test "$4" = conftest.ts1); then
-    #
-    # Ok, ls -t worked. If we're at a resolution of 1 second, we're done,
-    # because we don't need to test make.
-    make_ok=true
-    if test $am_try_res != 1; then
-      # But if we've succeeded so far with a subsecond resolution, we
-      # have one more thing to check: make. It can happen that
-      # everything else supports the subsecond mtimes, but make doesn't;
-      # notably on macOS, which ships make 3.81 from 2006 (the last one
-      # released under GPLv2). https://bugs.gnu.org/68808
-      #
-      # We test $MAKE if it is defined in the environment, else "make".
-      # It might get overridden later, but our hope is that in practice
-      # it does not matter: it is the system "make" which is (by far)
-      # the most likely to be broken, whereas if the user overrides it,
-      # probably they did so with a better, or at least not worse, make.
-      # https://lists.gnu.org/archive/html/automake/2024-06/msg00051.html
-      #
-      # Create a Makefile (real tab character here):
-      rm -f conftest.mk
-      echo 'conftest.ts1: conftest.ts2' >conftest.mk
-      echo '	touch conftest.ts2' >>conftest.mk
-      #
-      # Now, running
-      #   touch conftest.ts1; touch conftest.ts2; make
-      # should touch ts1 because ts2 is newer. This could happen by luck,
-      # but most often, it will fail if make's support is insufficient. So
-      # test for several consecutive successes.
-      #
-      # (We reuse conftest.ts[12] because we still want to modify existing
-      # files, not create new ones, per above.)
-      n=0
-      make=${MAKE-make}
-      until test $n -eq 3; do
-        echo one > conftest.ts1
-        sleep $am_try_res
-        echo two > conftest.ts2 # ts2 should now be newer than ts1
-        if $make -f conftest.mk | grep 'up to date' >/dev/null; then
-          make_ok=false
-          break # out of $n loop
-        fi
-        n=`expr $n + 1`
-      done
-    fi
-    #
-    if $make_ok; then
-      # Everything we know to check worked out, so call this resolution good.
-      am_cv_filesystem_timestamp_resolution=$am_try_res
-      break # out of $am_try_res loop
-    fi
-    # Otherwise, we'll go on to check the next resolution.
-  fi
-done
-rm -f conftest.ts?
-# (end _am_filesystem_timestamp_resolution)
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_filesystem_timestamp_resolution" >&5
-printf '%s\n' "$am_cv_filesystem_timestamp_resolution" >&6; }
-
-# This check should not be cached, as it may vary across builds of
-# different projects.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether build environment is sane" >&5
-printf %s "checking whether build environment is sane... " >&6; }
-# Reject unsafe characters in $srcdir or the absolute working directory
-# name.  Accept space and tab only in the latter.
-am_lf='
-'
-case `pwd` in
-  *[\\\"\#\$\&\'\`$am_lf]*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-    as_fn_error $? "unsafe absolute working directory name" "$LINENO" 5;;
-esac
-case $srcdir in
-  *[\\\"\#\$\&\'\`$am_lf\ \	]*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-    as_fn_error $? "unsafe srcdir value: '$srcdir'" "$LINENO" 5;;
-esac
-
-# Do 'set' in a subshell so we don't clobber the current shell's
-# arguments.  Must try -L first in case configure is actually a
-# symlink; some systems play weird games with the mod time of symlinks
-# (eg FreeBSD returns the mod time of the symlink's containing
-# directory).
-am_build_env_is_sane=no
-am_has_slept=no
-rm -f conftest.file
-for am_try in 1 2; do
-  echo "timestamp, slept: $am_has_slept" > conftest.file
-  if (
-    set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null`
-    if test "$*" = "X"; then
-      # -L didn't work.
-      set X `ls -t "$srcdir/configure" conftest.file`
-    fi
-    test "$2" = conftest.file
-  ); then
-    am_build_env_is_sane=yes
-    break
-  fi
-  # Just in case.
-  sleep "$am_cv_filesystem_timestamp_resolution"
-  am_has_slept=yes
-done
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_build_env_is_sane" >&5
-printf '%s\n' "$am_build_env_is_sane" >&6; }
-if test "$am_build_env_is_sane" = no; then
-  as_fn_error $? "newly created file is older than distributed files!
-Check your system clock" "$LINENO" 5
-fi
-
-# If we didn't sleep, we still need to ensure time stamps of config.status and
-# generated files are strictly newer.
-am_sleep_pid=
-if test -e conftest.file || grep 'slept: no' conftest.file >/dev/null 2>&1
-then :
-
-else case e in #(
-  e)   ( sleep "$am_cv_filesystem_timestamp_resolution" ) &
-  am_sleep_pid=$!
- ;;
-esac
-fi
-
-rm -f conftest.file
-
-test "$program_prefix" != NONE &&
-  program_transform_name="s&^&$program_prefix&;$program_transform_name"
-# Use a double $ so make ignores it.
-test "$program_suffix" != NONE &&
-  program_transform_name="s&\$&$program_suffix&;$program_transform_name"
-# Double any \ or $.
-# By default was 's,x,x', remove it if useless.
-ac_script='s/[\\$]/&&/g;s/;s,x,x,$//'
-program_transform_name=`printf '%s\n' "$program_transform_name" | sed "$ac_script"`
-
-
-  if test x"${MISSING+set}" != xset; then
-  MISSING="\${SHELL} '$am_aux_dir/missing'"
-fi
-# Use eval to expand $SHELL
-if eval "$MISSING --is-lightweight"; then
-  am_missing_run="$MISSING "
-else
-  am_missing_run=
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: 'missing' script is too old or missing" >&5
-printf '%s\n' "$as_me: WARNING: 'missing' script is too old or missing" >&2;}
-fi
-
-if test x"${install_sh+set}" != xset; then
-  case $am_aux_dir in
-  *\ * | *\	*)
-    install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;;
-  *)
-    install_sh="\${SHELL} $am_aux_dir/install-sh"
-  esac
-fi
-
-# Installed binaries are usually stripped using 'strip' when the user
-# run "make install-strip".  However 'strip' might not be the right
-# tool to use in cross-compilation environments, therefore Automake
-# will honor the 'STRIP' environment variable to overrule this program.
-if test "$cross_compiling" != no; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-printf '%s\n' "$STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-printf '%s\n' "$ac_ct_STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-fi
-INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s"
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a race-free mkdir -p" >&5
-printf %s "checking for a race-free mkdir -p... " >&6; }
-if test -z "$MKDIR_P"; then
-  if test ${ac_cv_path_mkdir+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/opt/sfw/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in mkdir gmkdir; do
-	 for ac_exec_ext in '' $ac_executable_extensions; do
-	   as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext" || continue
-	   case `"$as_dir$ac_prog$ac_exec_ext" --version 2>&1` in #(
-	     'mkdir ('*'coreutils) '* | \
-	     *'BusyBox '* | \
-	     'mkdir (fileutils) '4.1*)
-	       ac_cv_path_mkdir=$as_dir$ac_prog$ac_exec_ext
-	       break 3;;
-	   esac
-	 done
-       done
-  done
-IFS=$as_save_IFS
- ;;
-esac
-fi
-
-  test -d ./--version && rmdir ./--version
-  if test ${ac_cv_path_mkdir+y}; then
-    MKDIR_P="$ac_cv_path_mkdir -p"
-  else
-    # As a last resort, use plain mkdir -p,
-    # in the hope it doesn't have the bugs of ancient mkdir.
-    MKDIR_P='mkdir -p'
-  fi
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MKDIR_P" >&5
-printf '%s\n' "$MKDIR_P" >&6; }
-
-for ac_prog in gawk mawk nawk awk 'busybox awk'
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_AWK+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$AWK"; then
-  ac_cv_prog_AWK="$AWK" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AWK="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-AWK=$ac_cv_prog_AWK
-if test -n "$AWK"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5
-printf '%s\n' "$AWK" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$AWK" && break
-done
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} sets \$(MAKE)" >&5
-printf %s "checking whether ${MAKE-make} sets \$(MAKE)... " >&6; }
-set x ${MAKE-make}
-ac_make=`printf '%s\n' "$2" | sed 's/+/p/g; s/[^a-zA-Z0-9_]/_/g'`
-if eval test \${ac_cv_prog_make_${ac_make}_set+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat >conftest.make <<\_ACEOF
-SHELL = /bin/sh
-all:
-	@printf '%s\n' '@@@%%%=$(MAKE)=@@@%%%'
-_ACEOF
-# GNU make sometimes prints "make[1]: Entering ...", which would confuse us.
-case `${MAKE-make} -f conftest.make 2>/dev/null` in
-  *@@@%%%=?*=@@@%%%*)
-    eval ac_cv_prog_make_${ac_make}_set=yes;;
-  *)
-    eval ac_cv_prog_make_${ac_make}_set=no;;
-esac
-rm -f conftest.make ;;
-esac
-fi
-if eval test \$ac_cv_prog_make_${ac_make}_set = yes; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-  SET_MAKE=
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-  SET_MAKE="MAKE=${MAKE-make}"
-fi
-
-rm -rf .tst 2>/dev/null
-mkdir .tst 2>/dev/null
-if test -d .tst; then
-  am__leading_dot=.
-else
-  am__leading_dot=_
-fi
-rmdir .tst 2>/dev/null
-
-DEPDIR="${am__leading_dot}deps"
-
-ac_config_commands="$ac_config_commands depfiles"
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} supports the include directive" >&5
-printf %s "checking whether ${MAKE-make} supports the include directive... " >&6; }
-cat > confinc.mk << 'END'
-am__doit:
-	@echo this is the am__doit target >confinc.out
-.PHONY: am__doit
-END
-am__include="#"
-am__quote=
-# BSD make does it like this.
-echo '.include "confinc.mk" # ignored' > confmf.BSD
-# Other make implementations (GNU, Solaris 10, AIX) do it like this.
-echo 'include confinc.mk # ignored' > confmf.GNU
-_am_result=no
-for s in GNU BSD; do
-  { echo "$as_me:$LINENO: ${MAKE-make} -f confmf.$s && cat confinc.out" >&5
-   (${MAKE-make} -f confmf.$s && cat confinc.out) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-  case $?:`cat confinc.out 2>/dev/null` in #(
-  '0:this is the am__doit target') :
-    case $s in #(
-  BSD) :
-    am__include='.include' am__quote='"' ;; #(
-  *) :
-    am__include='include' am__quote='' ;;
-esac ;; #(
-  *) :
-     ;;
-esac
-  if test "$am__include" != "#"; then
-    _am_result="yes ($s style)"
-    break
-  fi
-done
-rm -f confinc.* confmf.*
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ${_am_result}" >&5
-printf '%s\n' "${_am_result}" >&6; }
-
-# Check whether --enable-dependency-tracking was given.
-if test ${enable_dependency_tracking+y}
-then :
-  enableval=$enable_dependency_tracking;
-fi
-
-if test "x$enable_dependency_tracking" != xno; then
-  am_depcomp="$ac_aux_dir/depcomp"
-  AMDEPBACKSLASH='\'
-  am__nodep='_no'
-fi
- if test "x$enable_dependency_tracking" != xno; then
-  AMDEP_TRUE=
-  AMDEP_FALSE='#'
-else
-  AMDEP_TRUE='#'
-  AMDEP_FALSE=
-fi
-
-
-AM_DEFAULT_VERBOSITY=1
-# Check whether --enable-silent-rules was given.
-if test ${enable_silent_rules+y}
-then :
-  enableval=$enable_silent_rules;
-fi
-
-am_make=${MAKE-make}
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5
-printf %s "checking whether $am_make supports nested variables... " >&6; }
-if test ${am_cv_make_support_nested_variables+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if printf '%s\n' 'TRUE=$(BAR$(V))
-BAR0=false
-BAR1=true
-V=1
-am__doit:
-	@$(TRUE)
-.PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then
-  am_cv_make_support_nested_variables=yes
-else
-  am_cv_make_support_nested_variables=no
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5
-printf '%s\n' "$am_cv_make_support_nested_variables" >&6; }
-AM_BACKSLASH='\'
-
-am__rm_f_notfound=
-if (rm -f && rm -fr && rm -rf) 2>/dev/null
-then :
-
-else case e in #(
-  e) am__rm_f_notfound='""' ;;
-esac
-fi
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking xargs -n works" >&5
-printf %s "checking xargs -n works... " >&6; }
-if test ${am_cv_xargs_n_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test "`echo 1 2 3 | xargs -n2 echo`" = "1 2
-3"
-then :
-  am_cv_xargs_n_works=yes
-else case e in #(
-  e) am_cv_xargs_n_works=no ;;
-esac
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_xargs_n_works" >&5
-printf '%s\n' "$am_cv_xargs_n_works" >&6; }
-if test "$am_cv_xargs_n_works" = yes
-then :
-  am__xargs_n='xargs -n'
-else case e in #(
-  e)   am__xargs_n='am__xargs_n () { shift; sed "s/ /\\n/g" | while read am__xargs_n_arg; do "" "$am__xargs_n_arg"; done; }'
- ;;
-esac
-fi
-
-if test "`cd $srcdir && pwd`" != "`pwd`"; then
-  # Use -I$(srcdir) only when $(srcdir) != ., so that make's output
-  # is not polluted with repeated "-I."
-  am__isrc=' -I$(srcdir)'
-  # test to see if srcdir already configured
-  if test -f $srcdir/config.status; then
-    as_fn_error $? "source directory already configured; run \"make distclean\" there first" "$LINENO" 5
-  fi
-fi
-
-# test whether we have cygpath
-if test -z "$CYGPATH_W"; then
-  if (cygpath --version) >/dev/null 2>/dev/null; then
-    CYGPATH_W='cygpath -w'
-  else
-    CYGPATH_W=echo
-  fi
-fi
-
-
-# Define the identity of the package.
- PACKAGE='libXext'
- VERSION='1.3.7'
-
-
-printf '%s\n' "#define PACKAGE \"$PACKAGE\"" >>confdefs.h
-
-
-printf '%s\n' "#define VERSION \"$VERSION\"" >>confdefs.h
-
-# Some tools Automake needs.
-
-ACLOCAL=${ACLOCAL-"${am_missing_run}aclocal-${am__api_version}"}
-
-
-AUTOCONF=${AUTOCONF-"${am_missing_run}autoconf"}
-
-
-AUTOMAKE=${AUTOMAKE-"${am_missing_run}automake-${am__api_version}"}
-
-
-AUTOHEADER=${AUTOHEADER-"${am_missing_run}autoheader"}
-
-
-MAKEINFO=${MAKEINFO-"${am_missing_run}makeinfo"}
-
-# For better backward compatibility.  To be removed once Automake 1.9.x
-# dies out for good.  For more background, see:
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00001.html>
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00014.html>
-mkdir_p='$(MKDIR_P)'
-
-# We need awk for the "check" target (and possibly the TAP driver).  The
-# system "awk" is bad on some platforms.
-# Always define AMTAR for backward compatibility.  Yes, it's still used
-# in the wild :-(  We should find a proper way to deprecate it ...
-AMTAR='$${TAR-tar}'
-
-
-# We'll loop over all known methods to create a tar archive until one works.
-_am_tools='gnutar plaintar pax cpio none'
-
-# The POSIX 1988 'ustar' format is defined with fixed-size fields.
-      # There is notably a 21 bits limit for the UID and the GID.  In fact,
-      # the 'pax' utility can hang on bigger UID/GID (see automake bug#8343
-      # and bug#13588).
-      am_max_uid=2097151 # 2^21 - 1
-      am_max_gid=$am_max_uid
-      # The $UID and $GID variables are not portable, so we need to resort
-      # to the POSIX-mandated id(1) utility.  Errors in the 'id' calls
-      # below are definitely unexpected, so allow the users to see them
-      # (that is, avoid stderr redirection).
-      am_uid=`id -u || echo unknown`
-      am_gid=`id -g || echo unknown`
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether UID '$am_uid' is supported by ustar format" >&5
-printf %s "checking whether UID '$am_uid' is supported by ustar format... " >&6; }
-      if test x$am_uid = xunknown; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ancient id detected; assuming current UID is ok, but dist-ustar might not work" >&5
-printf '%s\n' "$as_me: WARNING: ancient id detected; assuming current UID is ok, but dist-ustar might not work" >&2;}
-      elif test $am_uid -le $am_max_uid; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        _am_tools=none
-      fi
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether GID '$am_gid' is supported by ustar format" >&5
-printf %s "checking whether GID '$am_gid' is supported by ustar format... " >&6; }
-      if test x$gm_gid = xunknown; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ancient id detected; assuming current GID is ok, but dist-ustar might not work" >&5
-printf '%s\n' "$as_me: WARNING: ancient id detected; assuming current GID is ok, but dist-ustar might not work" >&2;}
-      elif test $am_gid -le $am_max_gid; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        _am_tools=none
-      fi
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to create a ustar tar archive" >&5
-printf %s "checking how to create a ustar tar archive... " >&6; }
-
-  # Go ahead even if we have the value already cached.  We do so because we
-  # need to set the values for the 'am__tar' and 'am__untar' variables.
-  _am_tools=${am_cv_prog_tar_ustar-$_am_tools}
-
-  for _am_tool in $_am_tools; do
-    case $_am_tool in
-    gnutar)
-      for _am_tar in tar gnutar gtar; do
-        { echo "$as_me:$LINENO: $_am_tar --version" >&5
-   ($_am_tar --version) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } && break
-      done
-      am__tar="$_am_tar --format=ustar -chf - "'"$$tardir"'
-      am__tar_="$_am_tar --format=ustar -chf - "'"$tardir"'
-      am__untar="$_am_tar -xf -"
-      ;;
-    plaintar)
-      # Must skip GNU tar: if it does not support --format= it doesn't create
-      # ustar tarball either.
-      (tar --version) >/dev/null 2>&1 && continue
-      am__tar='tar chf - "$$tardir"'
-      am__tar_='tar chf - "$tardir"'
-      am__untar='tar xf -'
-      ;;
-    pax)
-      am__tar='pax -L -x ustar -w "$$tardir"'
-      am__tar_='pax -L -x ustar -w "$tardir"'
-      am__untar='pax -r'
-      ;;
-    cpio)
-      am__tar='find "$$tardir" -print | cpio -o -H ustar -L'
-      am__tar_='find "$tardir" -print | cpio -o -H ustar -L'
-      am__untar='cpio -i -H ustar -d'
-      ;;
-    none)
-      am__tar=false
-      am__tar_=false
-      am__untar=false
-      ;;
-    esac
-
-    # If the value was cached, stop now.  We just wanted to have am__tar
-    # and am__untar set.
-    test -n "${am_cv_prog_tar_ustar}" && break
-
-    # tar/untar a dummy directory, and stop if the command works.
-    rm -rf conftest.dir
-    mkdir conftest.dir
-    echo GrepMe > conftest.dir/file
-    { echo "$as_me:$LINENO: tardir=conftest.dir && eval $am__tar_ >conftest.tar" >&5
-   (tardir=conftest.dir && eval $am__tar_ >conftest.tar) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-    rm -rf conftest.dir
-    if test -s conftest.tar; then
-      { echo "$as_me:$LINENO: $am__untar <conftest.tar" >&5
-   ($am__untar <conftest.tar) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-      { echo "$as_me:$LINENO: cat conftest.dir/file" >&5
-   (cat conftest.dir/file) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-      grep GrepMe conftest.dir/file >/dev/null 2>&1 && break
-    fi
-  done
-  rm -rf conftest.dir
-
-  if test ${am_cv_prog_tar_ustar+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) am_cv_prog_tar_ustar=$_am_tool ;;
-esac
-fi
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_prog_tar_ustar" >&5
-printf '%s\n' "$am_cv_prog_tar_ustar" >&6; }
-
-
-
-
-
-depcc="$CC"   am_compiler_list=
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking dependency style of $depcc" >&5
-printf %s "checking dependency style of $depcc... " >&6; }
-if test ${am_cv_CC_dependencies_compiler_type+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then
-  # We make a subdir and do the tests there.  Otherwise we can end up
-  # making bogus files that we don't know about and never remove.  For
-  # instance it was reported that on HP-UX the gcc test will end up
-  # making a dummy file named 'D' -- because '-MD' means "put the output
-  # in D".
-  rm -rf conftest.dir
-  mkdir conftest.dir
-  # Copy depcomp to subdir because otherwise we won't find it if we're
-  # using a relative directory.
-  cp "$am_depcomp" conftest.dir
-  cd conftest.dir
-  # We will build objects and dependencies in a subdirectory because
-  # it helps to detect inapplicable dependency modes.  For instance
-  # both Tru64's cc and ICC support -MD to output dependencies as a
-  # side effect of compilation, but ICC will put the dependencies in
-  # the current directory while Tru64 will put them in the object
-  # directory.
-  mkdir sub
-
-  am_cv_CC_dependencies_compiler_type=none
-  if test "$am_compiler_list" = ""; then
-     am_compiler_list=`sed -n 's/^#*\([a-zA-Z0-9]*\))$/\1/p' < ./depcomp`
-  fi
-  am__universal=false
-  case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac
-
-  for depmode in $am_compiler_list; do
-    # Setup a source with many dependencies, because some compilers
-    # like to wrap large dependency lists on column 80 (with \), and
-    # we should not choose a depcomp mode which is confused by this.
-    #
-    # We need to recreate these files for each test, as the compiler may
-    # overwrite some of them when testing with obscure command lines.
-    # This happens at least with the AIX C compiler.
-    : > sub/conftest.c
-    for i in 1 2 3 4 5 6; do
-      echo '#include "conftst'$i'.h"' >> sub/conftest.c
-      # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with
-      # Solaris 10 /bin/sh.
-      echo '/* dummy */' > sub/conftst$i.h
-    done
-    echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
-
-    # We check with '-c' and '-o' for the sake of the "dashmstdout"
-    # mode.  It turns out that the SunPro C++ compiler does not properly
-    # handle '-M -o', and we need to detect this.  Also, some Intel
-    # versions had trouble with output in subdirs.
-    am__obj=sub/conftest.${OBJEXT-o}
-    am__minus_obj="-o $am__obj"
-    case $depmode in
-    gcc)
-      # This depmode causes a compiler race in universal mode.
-      test "$am__universal" = false || continue
-      ;;
-    nosideeffect)
-      # After this tag, mechanisms are not by side-effect, so they'll
-      # only be used when explicitly requested.
-      if test "x$enable_dependency_tracking" = xyes; then
-	continue
-      else
-	break
-      fi
-      ;;
-    msvc7 | msvc7msys | msvisualcpp | msvcmsys)
-      # This compiler won't grok '-c -o', but also, the minuso test has
-      # not run yet.  These depmodes are late enough in the game, and
-      # so weak that their functioning should not be impacted.
-      am__obj=conftest.${OBJEXT-o}
-      am__minus_obj=
-      ;;
-    none) break ;;
-    esac
-    if depmode=$depmode \
-       source=sub/conftest.c object=$am__obj \
-       depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
-       $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \
-         >/dev/null 2>conftest.err &&
-       grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep $am__obj sub/conftest.Po > /dev/null 2>&1 &&
-       ${MAKE-make} -s -f confmf > /dev/null 2>&1; then
-      # icc doesn't choke on unknown options, it will just issue warnings
-      # or remarks (even with -Werror).  So we grep stderr for any message
-      # that says an option was ignored or not supported.
-      # When given -MP, icc 7.0 and 7.1 complain thus:
-      #   icc: Command line warning: ignoring option '-M'; no argument required
-      # The diagnosis changed in icc 8.0:
-      #   icc: Command line remark: option '-MP' not supported
-      if (grep 'ignoring option' conftest.err ||
-          grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else
-        am_cv_CC_dependencies_compiler_type=$depmode
-        break
-      fi
-    fi
-  done
-
-  cd ..
-  rm -rf conftest.dir
-else
-  am_cv_CC_dependencies_compiler_type=none
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $am_cv_CC_dependencies_compiler_type" >&5
-printf '%s\n' "$am_cv_CC_dependencies_compiler_type" >&6; }
-CCDEPMODE=depmode=$am_cv_CC_dependencies_compiler_type
-
- if
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_CC_dependencies_compiler_type" = gcc3; then
-  am__fastdepCC_TRUE=
-  am__fastdepCC_FALSE='#'
-else
-  am__fastdepCC_TRUE='#'
-  am__fastdepCC_FALSE=
-fi
-
-
-# Variables for tags utilities; see am/tags.am
-if test -z "$CTAGS"; then
-  CTAGS=ctags
-fi
-
-if test -z "$ETAGS"; then
-  ETAGS=etags
-fi
-
-if test -z "$CSCOPE"; then
-  CSCOPE=cscope
-fi
-
-
-
-
-
-
-
-
-# Initialize libtool
-case `pwd` in
-  *\ * | *\	*)
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&5
-printf '%s\n' "$as_me: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&2;} ;;
-esac
-
-
-
-macro_version='2.5.4'
-macro_revision='2.5.4'
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-ltmain=$ac_aux_dir/ltmain.sh
-
-
-
-  # Make sure we can run config.sub.
-$SHELL "${ac_aux_dir}config.sub" sun4 >/dev/null 2>&1 ||
-  as_fn_error $? "cannot run $SHELL ${ac_aux_dir}config.sub" "$LINENO" 5
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking build system type" >&5
-printf %s "checking build system type... " >&6; }
-if test ${ac_cv_build+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_build_alias=$build_alias
-test "x$ac_build_alias" = x &&
-  ac_build_alias=`$SHELL "${ac_aux_dir}config.guess"`
-test "x$ac_build_alias" = x &&
-  as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5
-ac_cv_build=`$SHELL "${ac_aux_dir}config.sub" $ac_build_alias` ||
-  as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $ac_build_alias failed" "$LINENO" 5
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5
-printf '%s\n' "$ac_cv_build" >&6; }
-case $ac_cv_build in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical build" "$LINENO" 5;;
-esac
-build=$ac_cv_build
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_build
-shift
-build_cpu=$1
-build_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-build_os=$*
-IFS=$ac_save_IFS
-case $build_os in *\ *) build_os=`printf '%s\n' "$build_os" | sed 's/ /-/g'`;; esac
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking host system type" >&5
-printf %s "checking host system type... " >&6; }
-if test ${ac_cv_host+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test "x$host_alias" = x; then
-  ac_cv_host=$ac_cv_build
-else
-  ac_cv_host=`$SHELL "${ac_aux_dir}config.sub" $host_alias` ||
-    as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $host_alias failed" "$LINENO" 5
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5
-printf '%s\n' "$ac_cv_host" >&6; }
-case $ac_cv_host in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical host" "$LINENO" 5;;
-esac
-host=$ac_cv_host
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_host
-shift
-host_cpu=$1
-host_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-host_os=$*
-IFS=$ac_save_IFS
-case $host_os in *\ *) host_os=`printf '%s\n' "$host_os" | sed 's/ /-/g'`;; esac
-
-
-# Backslashify metacharacters that are still active within
-# double-quoted strings.
-sed_quote_subst='s/\(["`$\\]\)/\\\1/g'
-
-# Same as above, but do not quote variable references.
-double_quote_subst='s/\(["`\\]\)/\\\1/g'
-
-# Sed substitution to delay expansion of an escaped shell variable in a
-# double_quote_subst'ed string.
-delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g'
-
-# Sed substitution to delay expansion of an escaped single quote.
-delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g'
-
-# Sed substitution to avoid accidental globbing in evaled expressions
-no_glob_subst='s/\*/\\\*/g'
-
-ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to print strings" >&5
-printf %s "checking how to print strings... " >&6; }
-# Test print first, because it will be a builtin if present.
-if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \
-   test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='print -r --'
-elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='printf %s\n'
-else
-  # Use this function as a fallback that always works.
-  func_fallback_echo ()
-  {
-    eval 'cat <<_LTECHO_EOF
-$1
-_LTECHO_EOF'
-  }
-  ECHO='func_fallback_echo'
-fi
-
-# func_echo_all arg...
-# Invoke $ECHO with all args, space-separated.
-func_echo_all ()
-{
-    $ECHO ""
-}
-
-case $ECHO in
-  printf*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: printf" >&5
-printf '%s\n' "printf" >&6; } ;;
-  print*) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: print -r" >&5
-printf '%s\n' "print -r" >&6; } ;;
-  *) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: cat" >&5
-printf '%s\n' "cat" >&6; } ;;
-esac
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a sed that does not truncate output" >&5
-printf %s "checking for a sed that does not truncate output... " >&6; }
-if test ${ac_cv_path_SED+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e)           ac_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/
-     for ac_i in 1 2 3 4 5 6 7; do
-       ac_script="$ac_script$as_nl$ac_script"
-     done
-     echo "$ac_script" 2>/dev/null | sed 99q >conftest.sed
-     { ac_script=; unset ac_script;}
-     if test -z "$SED"; then
-  ac_path_SED_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in sed gsed
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_SED="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_SED" || continue
-# Check for GNU ac_path_SED and select it if it is found.
-  # Check for GNU $ac_path_SED
-case `"$ac_path_SED" --version 2>&1` in #(
-*GNU*)
-  ac_cv_path_SED="$ac_path_SED" ac_path_SED_found=:;;
-#(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' '' >> "conftest.nl"
-    "$ac_path_SED" -f conftest.sed < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_SED_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_SED="$ac_path_SED"
-      ac_path_SED_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_SED_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_SED"; then
-    as_fn_error $? "no acceptable sed could be found in \$PATH" "$LINENO" 5
-  fi
-else
-  ac_cv_path_SED=$SED
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_SED" >&5
-printf '%s\n' "$ac_cv_path_SED" >&6; }
- SED="$ac_cv_path_SED"
-  rm -f conftest.sed
-
-test -z "$SED" && SED=sed
-Xsed="$SED -e 1s/^X//"
-
-
-
-
-
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5
-printf %s "checking for grep that handles long lines and -e... " >&6; }
-if test ${ac_cv_path_GREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -z "$GREP"; then
-  ac_path_GREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in grep ggrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_GREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_GREP" || continue
-# Check for GNU ac_path_GREP and select it if it is found.
-  # Check for GNU $ac_path_GREP
-case `"$ac_path_GREP" --version 2>&1` in #(
-*GNU*)
-  ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;;
-#(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'GREP' >> "conftest.nl"
-    "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_GREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_GREP="$ac_path_GREP"
-      ac_path_GREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_GREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_GREP"; then
-    as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_GREP=$GREP
-fi
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5
-printf '%s\n' "$ac_cv_path_GREP" >&6; }
- GREP="$ac_cv_path_GREP"
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
-printf %s "checking for egrep... " >&6; }
-if test ${ac_cv_path_EGREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
-   then ac_cv_path_EGREP="$GREP -E"
-   else
-     if test -z "$EGREP"; then
-  ac_path_EGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in egrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_EGREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_EGREP" || continue
-# Check for GNU ac_path_EGREP and select it if it is found.
-  # Check for GNU $ac_path_EGREP
-case `"$ac_path_EGREP" --version 2>&1` in #(
-*GNU*)
-  ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
-#(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'EGREP' >> "conftest.nl"
-    "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_EGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_EGREP="$ac_path_EGREP"
-      ac_path_EGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_EGREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_EGREP"; then
-    as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_EGREP=$EGREP
-fi
-
-   fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
-printf '%s\n' "$ac_cv_path_EGREP" >&6; }
- EGREP="$ac_cv_path_EGREP"
-
-         EGREP_TRADITIONAL=$EGREP
- ac_cv_path_EGREP_TRADITIONAL=$EGREP
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for fgrep" >&5
-printf %s "checking for fgrep... " >&6; }
-if test ${ac_cv_path_FGREP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if echo 'ab*c' | $GREP -F 'ab*c' >/dev/null 2>&1
-   then ac_cv_path_FGREP="$GREP -F"
-   else
-     if test -z "$FGREP"; then
-  ac_path_FGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in fgrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_FGREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_FGREP" || continue
-# Check for GNU ac_path_FGREP and select it if it is found.
-  # Check for GNU $ac_path_FGREP
-case `"$ac_path_FGREP" --version 2>&1` in #(
-*GNU*)
-  ac_cv_path_FGREP="$ac_path_FGREP" ac_path_FGREP_found=:;;
-#(
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf '%s\n' 'FGREP' >> "conftest.nl"
-    "$ac_path_FGREP" FGREP < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_FGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_FGREP="$ac_path_FGREP"
-      ac_path_FGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_FGREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_FGREP"; then
-    as_fn_error $? "no acceptable fgrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_FGREP=$FGREP
-fi
-
-   fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_FGREP" >&5
-printf '%s\n' "$ac_cv_path_FGREP" >&6; }
- FGREP="$ac_cv_path_FGREP"
-
-
-test -z "$GREP" && GREP=grep
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-# Check whether --with-gnu-ld was given.
-if test ${with_gnu_ld+y}
-then :
-  withval=$with_gnu_ld; test no = "$withval" || with_gnu_ld=yes
-else case e in #(
-  e) with_gnu_ld=no ;;
-esac
-fi
-
-ac_prog=ld
-if test yes = "$GCC"; then
-  # Check if gcc -print-prog-name=ld gives a path.
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for ld used by $CC" >&5
-printf %s "checking for ld used by $CC... " >&6; }
-  case $host in
-  *-*-mingw* | *-*-windows*)
-    # gcc leaves a trailing carriage return, which upsets mingw
-    ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;;
-  *)
-    ac_prog=`($CC -print-prog-name=ld) 2>&5` ;;
-  esac
-  case $ac_prog in
-    # Accept absolute paths.
-    [\\/]* | ?:[\\/]*)
-      re_direlt='/[^/][^/]*/\.\./'
-      # Canonicalize the pathname of ld
-      ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'`
-      while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do
-	ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"`
-      done
-      test -z "$LD" && LD=$ac_prog
-      ;;
-  "")
-    # If it fails, then pretend we aren't using GCC.
-    ac_prog=ld
-    ;;
-  *)
-    # If it is relative, then search for the first ld in PATH.
-    with_gnu_ld=unknown
-    ;;
-  esac
-elif test yes = "$with_gnu_ld"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for GNU ld" >&5
-printf %s "checking for GNU ld... " >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for non-GNU ld" >&5
-printf %s "checking for non-GNU ld... " >&6; }
-fi
-if test ${lt_cv_path_LD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -z "$LD"; then
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  for ac_dir in $PATH; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then
-      lt_cv_path_LD=$ac_dir/$ac_prog
-      # Check to see if the program is GNU ld.  I'd rather use --version,
-      # but apparently some variants of GNU ld only accept -v.
-      # Break only if it was the GNU/non-GNU ld that we prefer.
-      case `"$lt_cv_path_LD" -v 2>&1 </dev/null` in
-      *GNU* | *'with BFD'*)
-	test no != "$with_gnu_ld" && break
-	;;
-      *)
-	test yes != "$with_gnu_ld" && break
-	;;
-      esac
-    fi
-  done
-  IFS=$lt_save_ifs
-else
-  lt_cv_path_LD=$LD # Let the user override the test with a path.
-fi ;;
-esac
-fi
-
-LD=$lt_cv_path_LD
-if test -n "$LD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LD" >&5
-printf '%s\n' "$LD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-test -z "$LD" && as_fn_error $? "no acceptable ld found in \$PATH" "$LINENO" 5
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if the linker ($LD) is GNU ld" >&5
-printf %s "checking if the linker ($LD) is GNU ld... " >&6; }
-if test ${lt_cv_prog_gnu_ld+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) # I'd rather use --version here, but apparently some GNU lds only accept -v.
-case `$LD -v 2>&1 </dev/null` in
-*GNU* | *'with BFD'*)
-  lt_cv_prog_gnu_ld=yes
-  ;;
-*)
-  lt_cv_prog_gnu_ld=no
-  ;;
-esac ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_gnu_ld" >&5
-printf '%s\n' "$lt_cv_prog_gnu_ld" >&6; }
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-
-
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for BSD- or MS-compatible name lister (nm)" >&5
-printf %s "checking for BSD- or MS-compatible name lister (nm)... " >&6; }
-if test ${lt_cv_path_NM+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$NM"; then
-  # Let the user override the test.
-  lt_cv_path_NM=$NM
-else
-  lt_nm_to_check=${ac_tool_prefix}nm
-  if test -n "$ac_tool_prefix" && test "$build" = "$host"; then
-    lt_nm_to_check="$lt_nm_to_check nm"
-  fi
-  for lt_tmp_nm in $lt_nm_to_check; do
-    lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-    for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do
-      IFS=$lt_save_ifs
-      test -z "$ac_dir" && ac_dir=.
-      tmp_nm=$ac_dir/$lt_tmp_nm
-      if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then
-	# Check to see if the nm accepts a BSD-compat flag.
-	# Adding the 'sed 1q' prevents false positives on HP-UX, which says:
-	#   nm: unknown option "B" ignored
-	# Tru64's nm complains that /dev/null is an invalid object file
-	# MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty
-	case $build_os in
-	mingw* | windows*) lt_bad_file=conftest.nm/nofile ;;
-	*) lt_bad_file=/dev/null ;;
-	esac
-	case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in
-	*$lt_bad_file* | *'Invalid file or object type'*)
-	  lt_cv_path_NM="$tmp_nm -B"
-	  break 2
-	  ;;
-	*)
-	  case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in
-	  */dev/null*)
-	    lt_cv_path_NM="$tmp_nm -p"
-	    break 2
-	    ;;
-	  *)
-	    lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but
-	    continue # so that we can try to find one that supports BSD flags
-	    ;;
-	  esac
-	  ;;
-	esac
-      fi
-    done
-    IFS=$lt_save_ifs
-  done
-  : ${lt_cv_path_NM=no}
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_NM" >&5
-printf '%s\n' "$lt_cv_path_NM" >&6; }
-if test no != "$lt_cv_path_NM"; then
-  NM=$lt_cv_path_NM
-else
-  # Didn't find any BSD compatible name lister, look for dumpbin.
-  if test -n "$DUMPBIN"; then :
-    # Let the user override the test.
-  else
-    if test -n "$ac_tool_prefix"; then
-  for ac_prog in dumpbin "link -dump"
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DUMPBIN+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$DUMPBIN"; then
-  ac_cv_prog_DUMPBIN="$DUMPBIN" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DUMPBIN="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DUMPBIN=$ac_cv_prog_DUMPBIN
-if test -n "$DUMPBIN"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DUMPBIN" >&5
-printf '%s\n' "$DUMPBIN" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$DUMPBIN" && break
-  done
-fi
-if test -z "$DUMPBIN"; then
-  ac_ct_DUMPBIN=$DUMPBIN
-  for ac_prog in dumpbin "link -dump"
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DUMPBIN+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_DUMPBIN"; then
-  ac_cv_prog_ac_ct_DUMPBIN="$ac_ct_DUMPBIN" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DUMPBIN="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DUMPBIN=$ac_cv_prog_ac_ct_DUMPBIN
-if test -n "$ac_ct_DUMPBIN"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DUMPBIN" >&5
-printf '%s\n' "$ac_ct_DUMPBIN" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_DUMPBIN" && break
-done
-
-  if test "x$ac_ct_DUMPBIN" = x; then
-    DUMPBIN=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DUMPBIN=$ac_ct_DUMPBIN
-  fi
-fi
-
-    case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in
-    *COFF*)
-      DUMPBIN="$DUMPBIN -symbols -headers"
-      ;;
-    *)
-      DUMPBIN=:
-      ;;
-    esac
-  fi
-
-  if test : != "$DUMPBIN"; then
-    NM=$DUMPBIN
-  fi
-fi
-test -z "$NM" && NM=nm
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the name lister ($NM) interface" >&5
-printf %s "checking the name lister ($NM) interface... " >&6; }
-if test ${lt_cv_nm_interface+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_nm_interface="BSD nm"
-  echo "int some_variable = 0;" > conftest.$ac_ext
-  (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&5)
-  (eval "$ac_compile" 2>conftest.err)
-  cat conftest.err >&5
-  (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&5)
-  (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
-  cat conftest.err >&5
-  (eval echo "\"\$as_me:$LINENO: output\"" >&5)
-  cat conftest.out >&5
-  if $GREP 'External.*some_variable' conftest.out > /dev/null; then
-    lt_cv_nm_interface="MS dumpbin"
-  fi
-  rm -f conftest* ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_nm_interface" >&5
-printf '%s\n' "$lt_cv_nm_interface" >&6; }
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether ln -s works" >&5
-printf %s "checking whether ln -s works... " >&6; }
-LN_S=$as_ln_s
-if test "$LN_S" = "ln -s"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no, using $LN_S" >&5
-printf '%s\n' "no, using $LN_S" >&6; }
-fi
-
-# find the maximum length of command line arguments
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the maximum length of command line arguments" >&5
-printf %s "checking the maximum length of command line arguments... " >&6; }
-if test ${lt_cv_sys_max_cmd_len+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e)   i=0
-  teststring=ABCD
-
-  case $build_os in
-  msdosdjgpp*)
-    # On DJGPP, this test can blow up pretty badly due to problems in libc
-    # (any single argument exceeding 2000 bytes causes a buffer overrun
-    # during glob expansion).  Even if it were fixed, the result of this
-    # check would be larger than it should be.
-    lt_cv_sys_max_cmd_len=12288;    # 12K is about right
-    ;;
-
-  gnu* | ironclad*)
-    # Under GNU Hurd and Ironclad, this test is not required because there
-    # is no limit to the length of command line arguments.
-    # Libtool will interpret -1 as no limit whatsoever
-    lt_cv_sys_max_cmd_len=-1;
-    ;;
-
-  cygwin* | mingw* | windows* | cegcc*)
-    # On Win9x/ME, this test blows up -- it succeeds, but takes
-    # about 5 minutes as the teststring grows exponentially.
-    # Worse, since 9x/ME are not pre-emptively multitasking,
-    # you end up with a "frozen" computer, even though with patience
-    # the test eventually succeeds (with a max line length of 256k).
-    # Instead, let's just punt: use the minimum linelength reported by
-    # all of the supported platforms: 8192 (on NT/2K/XP).
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  mint*)
-    # On MiNT this can take a long time and run out of memory.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  amigaos*)
-    # On AmigaOS with pdksh, this test takes hours, literally.
-    # So we just punt and use a minimum line length of 8192.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*)
-    # This has been around since 386BSD, at least.  Likely further.
-    if test -x /sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax`
-    elif test -x /usr/sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax`
-    else
-      lt_cv_sys_max_cmd_len=65536	# usable default for all BSDs
-    fi
-    # And add a safety zone
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    ;;
-
-  interix*)
-    # We know the value 262144 and hardcode it with a safety zone (like BSD)
-    lt_cv_sys_max_cmd_len=196608
-    ;;
-
-  os2*)
-    # The test takes a long time on OS/2.
-    lt_cv_sys_max_cmd_len=8192
-    ;;
-
-  osf*)
-    # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure
-    # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not
-    # nice to cause kernel panics so lets avoid the loop below.
-    # First set a reasonable default.
-    lt_cv_sys_max_cmd_len=16384
-    #
-    if test -x /sbin/sysconfig; then
-      case `/sbin/sysconfig -q proc exec_disable_arg_limit` in
-        *1*) lt_cv_sys_max_cmd_len=-1 ;;
-      esac
-    fi
-    ;;
-  sco3.2v5*)
-    lt_cv_sys_max_cmd_len=102400
-    ;;
-  sysv5* | sco5v6* | sysv4.2uw2*)
-    kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null`
-    if test -n "$kargmax"; then
-      lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[	 ]//'`
-    else
-      lt_cv_sys_max_cmd_len=32768
-    fi
-    ;;
-  *)
-    lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null`
-    if test -n "$lt_cv_sys_max_cmd_len" && \
-       test undefined != "$lt_cv_sys_max_cmd_len"; then
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    else
-      # Make teststring a little bigger before we do anything with it.
-      # a 1K string should be a reasonable start.
-      for i in 1 2 3 4 5 6 7 8; do
-        teststring=$teststring$teststring
-      done
-      SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}}
-      # If test is not a shell built-in, we'll probably end up computing a
-      # maximum length that is only half of the actual maximum length, but
-      # we can't tell.
-      while { test X`env echo "$teststring$teststring" 2>/dev/null` \
-	         = "X$teststring$teststring"; } >/dev/null 2>&1 &&
-	      test 17 != "$i" # 1/2 MB should be enough
-      do
-        i=`expr $i + 1`
-        teststring=$teststring$teststring
-      done
-      # Only check the string length outside the loop.
-      lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1`
-      teststring=
-      # Add a significant safety factor because C++ compilers can tack on
-      # massive amounts of additional arguments before passing them to the
-      # linker.  It appears as though 1/2 is a usable value.
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2`
-    fi
-    ;;
-  esac
- ;;
-esac
-fi
-
-if test -n "$lt_cv_sys_max_cmd_len"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sys_max_cmd_len" >&5
-printf '%s\n' "$lt_cv_sys_max_cmd_len" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: none" >&5
-printf '%s\n' "none" >&6; }
-fi
-max_cmd_len=$lt_cv_sys_max_cmd_len
-
-
-
-
-
-
-: ${CP="cp -f"}
-: ${MV="mv -f"}
-: ${RM="rm -f"}
-
-if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then
-  lt_unset=unset
-else
-  lt_unset=false
-fi
-
-
-
-
-
-# test EBCDIC or ASCII
-case `echo X|tr X '\101'` in
- A) # ASCII based system
-    # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr
-  lt_SP2NL='tr \040 \012'
-  lt_NL2SP='tr \015\012 \040\040'
-  ;;
- *) # EBCDIC based system
-  lt_SP2NL='tr \100 \n'
-  lt_NL2SP='tr \r\n \100\100'
-  ;;
-esac
-
-
-
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to $host format" >&5
-printf %s "checking how to convert $build file names to $host format... " >&6; }
-if test ${lt_cv_to_host_file_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) case $host in
-  *-*-mingw* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32
-        ;;
-    esac
-    ;;
-  *-*-cygwin* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_noop
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin
-        ;;
-    esac
-    ;;
-  * ) # unhandled hosts (and "normal" native builds)
-    lt_cv_to_host_file_cmd=func_convert_file_noop
-    ;;
-esac
- ;;
-esac
-fi
-
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_host_file_cmd" >&5
-printf '%s\n' "$lt_cv_to_host_file_cmd" >&6; }
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to toolchain format" >&5
-printf %s "checking how to convert $build file names to toolchain format... " >&6; }
-if test ${lt_cv_to_tool_file_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) #assume ordinary cross tools, or native build.
-lt_cv_to_tool_file_cmd=func_convert_file_noop
-case $host in
-  *-*-mingw* | *-*-windows* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32
-        ;;
-    esac
-    ;;
-esac
- ;;
-esac
-fi
-
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_tool_file_cmd" >&5
-printf '%s\n' "$lt_cv_to_tool_file_cmd" >&6; }
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $LD option to reload object files" >&5
-printf %s "checking for $LD option to reload object files... " >&6; }
-if test ${lt_cv_ld_reload_flag+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_ld_reload_flag='-r' ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_reload_flag" >&5
-printf '%s\n' "$lt_cv_ld_reload_flag" >&6; }
-reload_flag=$lt_cv_ld_reload_flag
-case $reload_flag in
-"" | " "*) ;;
-*) reload_flag=" $reload_flag" ;;
-esac
-reload_cmds='$LD$reload_flag -o $output$reload_objs'
-case $host_os in
-  cygwin* | mingw* | windows* | pw32* | cegcc*)
-    if test yes != "$GCC"; then
-      reload_cmds=false
-    fi
-    ;;
-  darwin*)
-    if test yes = "$GCC"; then
-      reload_cmds='$LTCC $LTCFLAGS -nostdlib $wl-r -o $output$reload_objs'
-    else
-      reload_cmds='$LD$reload_flag -o $output$reload_objs'
-    fi
-    ;;
-esac
-
-
-
-
-
-
-
-
-
-# Extract the first word of "file", so it can be a program name with args.
-set dummy file; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_FILECMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$FILECMD"; then
-  ac_cv_prog_FILECMD="$FILECMD" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_FILECMD="file"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  test -z "$ac_cv_prog_FILECMD" && ac_cv_prog_FILECMD=":"
-fi ;;
-esac
-fi
-FILECMD=$ac_cv_prog_FILECMD
-if test -n "$FILECMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FILECMD" >&5
-printf '%s\n' "$FILECMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-
-
-
-
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}objdump", so it can be a program name with args.
-set dummy ${ac_tool_prefix}objdump; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OBJDUMP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$OBJDUMP"; then
-  ac_cv_prog_OBJDUMP="$OBJDUMP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OBJDUMP="${ac_tool_prefix}objdump"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OBJDUMP=$ac_cv_prog_OBJDUMP
-if test -n "$OBJDUMP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OBJDUMP" >&5
-printf '%s\n' "$OBJDUMP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OBJDUMP"; then
-  ac_ct_OBJDUMP=$OBJDUMP
-  # Extract the first word of "objdump", so it can be a program name with args.
-set dummy objdump; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OBJDUMP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_OBJDUMP"; then
-  ac_cv_prog_ac_ct_OBJDUMP="$ac_ct_OBJDUMP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OBJDUMP="objdump"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OBJDUMP=$ac_cv_prog_ac_ct_OBJDUMP
-if test -n "$ac_ct_OBJDUMP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OBJDUMP" >&5
-printf '%s\n' "$ac_ct_OBJDUMP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OBJDUMP" = x; then
-    OBJDUMP="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OBJDUMP=$ac_ct_OBJDUMP
-  fi
-else
-  OBJDUMP="$ac_cv_prog_OBJDUMP"
-fi
-
-test -z "$OBJDUMP" && OBJDUMP=objdump
-
-
-
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to recognize dependent libraries" >&5
-printf %s "checking how to recognize dependent libraries... " >&6; }
-if test ${lt_cv_deplibs_check_method+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_file_magic_cmd='$MAGIC_CMD'
-lt_cv_file_magic_test_file=
-lt_cv_deplibs_check_method='unknown'
-# Need to set the preceding variable on all platforms that support
-# interlibrary dependencies.
-# 'none' -- dependencies not supported.
-# 'unknown' -- same as none, but documents that we really don't know.
-# 'pass_all' -- all dependencies passed with no checks.
-# 'file_magic [[regex]]' -- check by looking for files in library path
-# that responds to the $file_magic_cmd with a given extended regex.
-# If you have 'file' or equivalent on your system and you're not sure
-# whether 'pass_all' will *always* work, you probably want this one.
-
-case $host_os in
-aix[4-9]*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-beos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-bsdi[45]*)
-  lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib)'
-  lt_cv_file_magic_cmd='$FILECMD -L'
-  lt_cv_file_magic_test_file=/shlib/libc.so
-  ;;
-
-cygwin*)
-  # func_win32_libid is a shell function defined in ltmain.sh
-  lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-  lt_cv_file_magic_cmd='func_win32_libid'
-  ;;
-
-mingw* | windows* | pw32*)
-  # Base MSYS/MinGW do not provide the 'file' command needed by
-  # func_win32_libid shell function, so use a weaker test based on 'objdump',
-  # unless we find 'file', for example because we are cross-compiling.
-  if ( file / ) >/dev/null 2>&1; then
-    lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-    lt_cv_file_magic_cmd='func_win32_libid'
-  else
-    # Keep this pattern in sync with the one in func_win32_libid.
-    lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64|pe-aarch64)'
-    lt_cv_file_magic_cmd='$OBJDUMP -f'
-  fi
-  ;;
-
-cegcc*)
-  # use the weaker test based on 'objdump'. See mingw*.
-  lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?'
-  lt_cv_file_magic_cmd='$OBJDUMP -f'
-  ;;
-
-darwin* | rhapsody*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    case $host_cpu in
-    i*86 )
-      # Not sure whether the presence of OpenBSD here was a mistake.
-      # Let's accept both of them until this is cleared up.
-      lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[3-9]86 (compact )?demand paged shared library'
-      lt_cv_file_magic_cmd=$FILECMD
-      lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*`
-      ;;
-    esac
-  else
-    lt_cv_deplibs_check_method=pass_all
-  fi
-  ;;
-
-haiku*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-hpux10.20* | hpux11*)
-  lt_cv_file_magic_cmd=$FILECMD
-  case $host_cpu in
-  ia64*)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF-[0-9][0-9]) shared object file - IA64'
-    lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so
-    ;;
-  hppa*64*)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]'
-    lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl
-    ;;
-  *)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|PA-RISC[0-9]\.[0-9]) shared library'
-    lt_cv_file_magic_test_file=/usr/lib/libc.sl
-    ;;
-  esac
-  ;;
-
-interix[3-9]*)
-  # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here
-  lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|\.a)$'
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $LD in
-  *-32|*"-32 ") libmagic=32-bit;;
-  *-n32|*"-n32 ") libmagic=N32;;
-  *-64|*"-64 ") libmagic=64-bit;;
-  *) libmagic=never-match;;
-  esac
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-*-mlibc)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-netbsd* | netbsdelf*-gnu)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|_pic\.a)$'
-  fi
-  ;;
-
-newos6*)
-  lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (executable|dynamic lib)'
-  lt_cv_file_magic_cmd=$FILECMD
-  lt_cv_file_magic_test_file=/usr/lib/libnls.so
-  ;;
-
-*nto* | *qnx*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-openbsd*)
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|\.so|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
-  fi
-  ;;
-
-osf3* | osf4* | osf5*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-rdos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-serenity*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-solaris*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv4 | sysv4.3*)
-  case $host_vendor in
-  motorola)
-    lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib) M[0-9][0-9]* Version [0-9]'
-    lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*`
-    ;;
-  ncr)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  sequent)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [LM]SB (shared object|dynamic lib )'
-    ;;
-  sni)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method="file_magic ELF [0-9][0-9]*-bit [LM]SB dynamic lib"
-    lt_cv_file_magic_test_file=/lib/libc.so
-    ;;
-  siemens)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  pc)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  esac
-  ;;
-
-tpf*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-os2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-esac
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_deplibs_check_method" >&5
-printf '%s\n' "$lt_cv_deplibs_check_method" >&6; }
-
-file_magic_glob=
-want_nocaseglob=no
-if test "$build" = "$host"; then
-  case $host_os in
-  mingw* | windows* | pw32*)
-    if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then
-      want_nocaseglob=yes
-    else
-      file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[\1]\/[\1]\/g;/g"`
-    fi
-    ;;
-  esac
-fi
-
-file_magic_cmd=$lt_cv_file_magic_cmd
-deplibs_check_method=$lt_cv_deplibs_check_method
-test -z "$deplibs_check_method" && deplibs_check_method=unknown
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}dlltool", so it can be a program name with args.
-set dummy ${ac_tool_prefix}dlltool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DLLTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$DLLTOOL"; then
-  ac_cv_prog_DLLTOOL="$DLLTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DLLTOOL="${ac_tool_prefix}dlltool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DLLTOOL=$ac_cv_prog_DLLTOOL
-if test -n "$DLLTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DLLTOOL" >&5
-printf '%s\n' "$DLLTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_DLLTOOL"; then
-  ac_ct_DLLTOOL=$DLLTOOL
-  # Extract the first word of "dlltool", so it can be a program name with args.
-set dummy dlltool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DLLTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_DLLTOOL"; then
-  ac_cv_prog_ac_ct_DLLTOOL="$ac_ct_DLLTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DLLTOOL="dlltool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DLLTOOL=$ac_cv_prog_ac_ct_DLLTOOL
-if test -n "$ac_ct_DLLTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DLLTOOL" >&5
-printf '%s\n' "$ac_ct_DLLTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_DLLTOOL" = x; then
-    DLLTOOL="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DLLTOOL=$ac_ct_DLLTOOL
-  fi
-else
-  DLLTOOL="$ac_cv_prog_DLLTOOL"
-fi
-
-test -z "$DLLTOOL" && DLLTOOL=dlltool
-
-
-
-
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to associate runtime and link libraries" >&5
-printf %s "checking how to associate runtime and link libraries... " >&6; }
-if test ${lt_cv_sharedlib_from_linklib_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_sharedlib_from_linklib_cmd='unknown'
-
-case $host_os in
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  # two different shell functions defined in ltmain.sh;
-  # decide which one to use based on capabilities of $DLLTOOL
-  case `$DLLTOOL --help 2>&1` in
-  *--identify-strict*)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib
-    ;;
-  *)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback
-    ;;
-  esac
-  ;;
-*)
-  # fallback: assume linklib IS sharedlib
-  lt_cv_sharedlib_from_linklib_cmd=$ECHO
-  ;;
-esac
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sharedlib_from_linklib_cmd" >&5
-printf '%s\n' "$lt_cv_sharedlib_from_linklib_cmd" >&6; }
-sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd
-test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO
-
-
-
-
-
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args.
-set dummy ${ac_tool_prefix}ranlib; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_RANLIB+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$RANLIB"; then
-  ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-RANLIB=$ac_cv_prog_RANLIB
-if test -n "$RANLIB"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5
-printf '%s\n' "$RANLIB" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_RANLIB"; then
-  ac_ct_RANLIB=$RANLIB
-  # Extract the first word of "ranlib", so it can be a program name with args.
-set dummy ranlib; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_RANLIB+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_RANLIB"; then
-  ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_RANLIB="ranlib"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB
-if test -n "$ac_ct_RANLIB"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5
-printf '%s\n' "$ac_ct_RANLIB" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_RANLIB" = x; then
-    RANLIB=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    RANLIB=$ac_ct_RANLIB
-  fi
-else
-  RANLIB="$ac_cv_prog_RANLIB"
-fi
-
-if test -n "$ac_tool_prefix"; then
-  for ac_prog in ar
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_AR+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$AR"; then
-  ac_cv_prog_AR="$AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AR="$ac_tool_prefix$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-AR=$ac_cv_prog_AR
-if test -n "$AR"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $AR" >&5
-printf '%s\n' "$AR" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-    test -n "$AR" && break
-  done
-fi
-if test -z "$AR"; then
-  ac_ct_AR=$AR
-  for ac_prog in ar
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_AR+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_AR"; then
-  ac_cv_prog_ac_ct_AR="$ac_ct_AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_AR="$ac_prog"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_AR=$ac_cv_prog_ac_ct_AR
-if test -n "$ac_ct_AR"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_AR" >&5
-printf '%s\n' "$ac_ct_AR" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_AR" && break
-done
-
-  if test "x$ac_ct_AR" = x; then
-    AR="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    AR=$ac_ct_AR
-  fi
-fi
-
-: ${AR=ar}
-
-
-
-
-
-
-# Use ARFLAGS variable as AR's operation code to sync the variable naming with
-# Automake.  If both AR_FLAGS and ARFLAGS are specified, AR_FLAGS should have
-# higher priority because that's what people were doing historically (setting
-# ARFLAGS for automake and AR_FLAGS for libtool).  FIXME: Make the AR_FLAGS
-# variable obsoleted/removed.
-
-test ${AR_FLAGS+y} || AR_FLAGS=${ARFLAGS-cr}
-lt_ar_flags=$AR_FLAGS
-
-
-
-
-
-
-# Make AR_FLAGS overridable by 'make ARFLAGS='.  Don't try to run-time override
-# by AR_FLAGS because that was never working and AR_FLAGS is about to die.
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for archiver @FILE support" >&5
-printf %s "checking for archiver @FILE support... " >&6; }
-if test ${lt_cv_ar_at_file+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_ar_at_file=no
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  echo conftest.$ac_objext > conftest.lst
-      lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&5'
-      { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5
-  (eval $lt_ar_try) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-      if test 0 -eq "$ac_status"; then
-	# Ensure the archiver fails upon bogus file names.
-	rm -f conftest.$ac_objext libconftest.a
-	{ { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5
-  (eval $lt_ar_try) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-	if test 0 -ne "$ac_status"; then
-          lt_cv_ar_at_file=@
-        fi
-      fi
-      rm -f conftest.* libconftest.a
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ar_at_file" >&5
-printf '%s\n' "$lt_cv_ar_at_file" >&6; }
-
-if test no = "$lt_cv_ar_at_file"; then
-  archiver_list_spec=
-else
-  archiver_list_spec=$lt_cv_ar_at_file
-fi
-
-
-
-
-
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-printf '%s\n' "$STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-printf '%s\n' "$ac_ct_STRIP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-test -z "$STRIP" && STRIP=:
-
-
-
-
-
-
-
-test -z "$RANLIB" && RANLIB=:
-
-
-
-
-
-
-# Determine commands to create old-style static archives.
-old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs'
-old_postinstall_cmds='chmod 644 $oldlib'
-old_postuninstall_cmds=
-
-if test -n "$RANLIB"; then
-  old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib"
-  old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib"
-fi
-
-case $host_os in
-  darwin*)
-    lock_old_archive_extraction=yes ;;
-  *)
-    lock_old_archive_extraction=no ;;
-esac
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-
-
-# Check for command to grab the raw symbol name followed by C symbol from nm.
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking command to parse $NM output from $compiler object" >&5
-printf %s "checking command to parse $NM output from $compiler object... " >&6; }
-if test ${lt_cv_sys_global_symbol_pipe+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e)
-# These are sane defaults that work on at least a few old systems.
-# [They come from Ultrix.  What could be older than Ultrix?!! ;)]
-
-# Character class describing NM global symbol codes.
-symcode='[BCDEGRST]'
-
-# Regexp to match symbols that can be accessed directly from C.
-sympat='\([_A-Za-z][_A-Za-z0-9]*\)'
-
-# Define system-specific variables.
-case $host_os in
-aix*)
-  symcode='[BCDT]'
-  ;;
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  symcode='[ABCDGISTW]'
-  ;;
-hpux*)
-  if test ia64 = "$host_cpu"; then
-    symcode='[ABCDEGRST]'
-  fi
-  ;;
-irix* | nonstopux*)
-  symcode='[BCDEGRST]'
-  ;;
-osf*)
-  symcode='[BCDEGQRST]'
-  ;;
-solaris*)
-  symcode='[BCDRT]'
-  ;;
-sco3.2v5*)
-  symcode='[DT]'
-  ;;
-sysv4.2uw2*)
-  symcode='[DT]'
-  ;;
-sysv5* | sco5v6* | unixware* | OpenUNIX*)
-  symcode='[ABDT]'
-  ;;
-sysv4)
-  symcode='[DFNSTU]'
-  ;;
-esac
-
-# If we're using GNU nm, then use its standard symbol codes.
-case `$NM -V 2>&1` in
-*GNU* | *'with BFD'*)
-  symcode='[ABCDGIRSTW]' ;;
-esac
-
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  # Gets list of data symbols to import.
-  lt_cv_sys_global_symbol_to_import="$SED -n -e 's/^I .* \(.*\)$/\1/p'"
-  # Adjust the below global symbol transforms to fixup imported variables.
-  lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'"
-  lt_c_name_hook=" -e 's/^I .* \(.*\)$/  {\"\1\", (void *) 0},/p'"
-  lt_c_name_lib_hook="\
-  -e 's/^I .* \(lib.*\)$/  {\"\1\", (void *) 0},/p'\
-  -e 's/^I .* \(.*\)$/  {\"lib\1\", (void *) 0},/p'"
-else
-  # Disable hooks by default.
-  lt_cv_sys_global_symbol_to_import=
-  lt_cdecl_hook=
-  lt_c_name_hook=
-  lt_c_name_lib_hook=
-fi
-
-# Transform an extracted symbol line into a proper C declaration.
-# Some systems (esp. on ia64) link data and code symbols differently,
-# so use this general approach.
-lt_cv_sys_global_symbol_to_cdecl="$SED -n"\
-$lt_cdecl_hook\
-" -e 's/^T .* \(.*\)$/extern int \1();/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'"
-
-# Transform an extracted symbol line into symbol name and symbol address
-lt_cv_sys_global_symbol_to_c_name_address="$SED -n"\
-$lt_c_name_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/p'"
-
-# Transform an extracted symbol line into symbol name with lib prefix and
-# symbol address.
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="$SED -n"\
-$lt_c_name_lib_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(lib.*\)$/  {\"\1\", (void *) \&\1},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"lib\1\", (void *) \&\1},/p'"
-
-# Handle CRLF in mingw tool chain
-opt_cr=
-case $build_os in
-mingw* | windows*)
-  opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp
-  ;;
-esac
-
-# Try without a prefix underscore, then with it.
-for ac_symprfx in "" "_"; do
-
-  # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol.
-  symxfrm="\\1 $ac_symprfx\\2 \\2"
-
-  # Write the raw and C identifiers.
-  if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-    # Fake it for dumpbin and say T for any non-static function,
-    # D for any global variable and I for any imported variable.
-    # Also find C++ and __fastcall symbols from MSVC++ or ICC,
-    # which start with @ or ?.
-    lt_cv_sys_global_symbol_pipe="$AWK '"\
-"     {last_section=section; section=\$ 3};"\
-"     /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\
-"     /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\
-"     /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\
-"     /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\
-"     /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\
-"     \$ 0!~/External *\|/{next};"\
-"     / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\
-"     {if(hide[section]) next};"\
-"     {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\
-"     {split(\$ 0,a,/\||\r/); split(a[2],s)};"\
-"     s[1]~/^[@?]/{print f,s[1],s[1]; next};"\
-"     s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\
-"     ' prfx=^$ac_symprfx"
-  else
-    lt_cv_sys_global_symbol_pipe="$SED -n -e 's/^.*[	 ]\($symcode$symcode*\)[	 ][	 ]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'"
-  fi
-  lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | $SED '/ __gnu_lto/d'"
-
-  # Check to see that the pipe works correctly.
-  pipe_works=no
-
-  rm -f conftest*
-  cat > conftest.$ac_ext <<_LT_EOF
-#ifdef __cplusplus
-extern "C" {
-#endif
-char nm_test_var;
-void nm_test_func(void);
-void nm_test_func(void){}
-#ifdef __cplusplus
-}
-#endif
-int main(void){nm_test_var='a';nm_test_func();return(0);}
-_LT_EOF
-
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    # Now try to grab the symbols.
-    nlist=conftest.nm
-    $ECHO "$as_me:$LINENO: $NM conftest.$ac_objext | $lt_cv_sys_global_symbol_pipe > $nlist" >&5
-    if eval "$NM" conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist 2>&5 && test -s "$nlist"; then
-      # Try sorting and uniquifying the output.
-      if sort "$nlist" | uniq > "$nlist"T; then
-	mv -f "$nlist"T "$nlist"
-      else
-	rm -f "$nlist"T
-      fi
-
-      # Make sure that we snagged all the symbols we need.
-      if $GREP ' nm_test_var$' "$nlist" >/dev/null; then
-	if $GREP ' nm_test_func$' "$nlist" >/dev/null; then
-	  cat <<_LT_EOF > conftest.$ac_ext
-/* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests.  */
-#if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE
-/* DATA imports from DLLs on WIN32 can't be const, because runtime
-   relocations are performed -- see ld's documentation on pseudo-relocs.  */
-# define LT_DLSYM_CONST
-#elif defined __osf__
-/* This system does not cope well with relocations in const data.  */
-# define LT_DLSYM_CONST
-#else
-# define LT_DLSYM_CONST const
-#endif
-
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-_LT_EOF
-	  # Now generate the symbol file.
-	  eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext'
-
-	  cat <<_LT_EOF >> conftest.$ac_ext
-
-/* The mapping between symbol names and symbols.  */
-LT_DLSYM_CONST struct {
-  const char *name;
-  void       *address;
-}
-lt__PROGRAM__LTX_preloaded_symbols[] =
-{
-  { "@PROGRAM@", (void *) 0 },
-_LT_EOF
-	  $SED "s/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext
-	  cat <<\_LT_EOF >> conftest.$ac_ext
-  {0, (void *) 0}
-};
-
-/* This works around a problem in FreeBSD linker */
-#ifdef FREEBSD_WORKAROUND
-static const void *lt_preloaded_setup() {
-  return lt__PROGRAM__LTX_preloaded_symbols;
-}
-#endif
-
-#ifdef __cplusplus
-}
-#endif
-_LT_EOF
-	  # Now try linking the two files.
-	  mv conftest.$ac_objext conftstm.$ac_objext
-	  lt_globsym_save_LIBS=$LIBS
-	  lt_globsym_save_CFLAGS=$CFLAGS
-	  LIBS=conftstm.$ac_objext
-	  CFLAGS="$CFLAGS$lt_prog_compiler_no_builtin_flag"
-	  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s conftest$ac_exeext; then
-	    pipe_works=yes
-	  fi
-	  LIBS=$lt_globsym_save_LIBS
-	  CFLAGS=$lt_globsym_save_CFLAGS
-	else
-	  echo "cannot find nm_test_func in $nlist" >&5
-	fi
-      else
-	echo "cannot find nm_test_var in $nlist" >&5
-      fi
-    else
-      echo "cannot run $lt_cv_sys_global_symbol_pipe" >&5
-    fi
-  else
-    echo "$progname: failed program was:" >&5
-    cat conftest.$ac_ext >&5
-  fi
-  rm -rf conftest* conftst*
-
-  # Do not use the global_symbol_pipe unless it works.
-  if test yes = "$pipe_works"; then
-    break
-  else
-    lt_cv_sys_global_symbol_pipe=
-  fi
-done
- ;;
-esac
-fi
-
-if test -z "$lt_cv_sys_global_symbol_pipe"; then
-  lt_cv_sys_global_symbol_to_cdecl=
-fi
-if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: failed" >&5
-printf '%s\n' "failed" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ok" >&5
-printf '%s\n' "ok" >&6; }
-fi
-
-# Response file support.
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  nm_file_list_spec='@'
-elif $NM --help 2>/dev/null | grep '[@]FILE' >/dev/null; then
-  nm_file_list_spec='@'
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for sysroot" >&5
-printf %s "checking for sysroot... " >&6; }
-
-# Check whether --with-sysroot was given.
-if test ${with_sysroot+y}
-then :
-  withval=$with_sysroot;
-else case e in #(
-  e) with_sysroot=no ;;
-esac
-fi
-
-
-lt_sysroot=
-case $with_sysroot in #(
- yes)
-   if test yes = "$GCC"; then
-     # Trim trailing / since we'll always append absolute paths and we want
-     # to avoid //, if only for less confusing output for the user.
-     lt_sysroot=`$CC --print-sysroot 2>/dev/null | $SED 's:/\+$::'`
-   fi
-   ;; #(
- /*)
-   lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"`
-   ;; #(
- no|'')
-   ;; #(
- *)
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $with_sysroot" >&5
-printf '%s\n' "$with_sysroot" >&6; }
-   as_fn_error $? "The sysroot must be an absolute path." "$LINENO" 5
-   ;;
-esac
-
- { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: ${lt_sysroot:-no}" >&5
-printf '%s\n' "${lt_sysroot:-no}" >&6; }
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for a working dd" >&5
-printf %s "checking for a working dd... " >&6; }
-if test ${ac_cv_path_lt_DD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-: ${lt_DD:=$DD}
-if test -z "$lt_DD"; then
-  ac_path_lt_DD_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in dd
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_lt_DD="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_lt_DD" || continue
-if "$ac_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=:
-fi
-      $ac_path_lt_DD_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_lt_DD"; then
-    :
-  fi
-else
-  ac_cv_path_lt_DD=$lt_DD
-fi
-
-rm -f conftest.i conftest2.i conftest.out ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_lt_DD" >&5
-printf '%s\n' "$ac_cv_path_lt_DD" >&6; }
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to truncate binary pipes" >&5
-printf %s "checking how to truncate binary pipes... " >&6; }
-if test ${lt_cv_truncate_bin+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-lt_cv_truncate_bin=
-if "$ac_cv_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1"
-fi
-rm -f conftest.i conftest2.i conftest.out
-test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q" ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_truncate_bin" >&5
-printf '%s\n' "$lt_cv_truncate_bin" >&6; }
-
-
-
-
-
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in $*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-# Check whether --enable-libtool-lock was given.
-if test ${enable_libtool_lock+y}
-then :
-  enableval=$enable_libtool_lock;
-fi
-
-test no = "$enable_libtool_lock" || enable_libtool_lock=yes
-
-# Some flags need to be propagated to the compiler or linker for good
-# libtool support.
-case $host in
-ia64-*-hpux*)
-  # Find out what ABI is being produced by ac_compile, and set mode
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.$ac_objext` in
-      *ELF-32*)
-	HPUX_IA64_MODE=32
-	;;
-      *ELF-64*)
-	HPUX_IA64_MODE=64
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-*-*-irix6*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '#line '$LINENO' "configure"' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    if test yes = "$lt_cv_prog_gnu_ld"; then
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -melf32bsmip"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -melf32bmipn32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -melf64bmip"
-	;;
-      esac
-    else
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -32"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -n32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -64"
-	  ;;
-      esac
-    fi
-  fi
-  rm -rf conftest*
-  ;;
-
-mips64*-*linux*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '#line '$LINENO' "configure"' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    emul=elf
-    case `$FILECMD conftest.$ac_objext` in
-      *32-bit*)
-	emul="${emul}32"
-	;;
-      *64-bit*)
-	emul="${emul}64"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *MSB*)
-	emul="${emul}btsmip"
-	;;
-      *LSB*)
-	emul="${emul}ltsmip"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *N32*)
-	emul="${emul}n32"
-	;;
-    esac
-    LD="${LD-ld} -m $emul"
-  fi
-  rm -rf conftest*
-  ;;
-
-x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \
-s390*-*linux*|s390*-*tpf*|sparc*-*linux*|x86_64-gnu*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.  Note that the listed cases only cover the
-  # situations where additional linker options are needed (such as when
-  # doing 32-bit compilation for a host where ld defaults to 64-bit, or
-  # vice versa); the common cases where no linker options are needed do
-  # not appear in the list.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.o` in
-      *32-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_i386_fbsd"
-	    ;;
-	  x86_64-*linux*|x86_64-gnu*)
-	    case `$FILECMD conftest.o` in
-	      *x86-64*)
-		LD="${LD-ld} -m elf32_x86_64"
-		;;
-	      *)
-		LD="${LD-ld} -m elf_i386"
-		;;
-	    esac
-	    ;;
-	  powerpc64le-*linux*)
-	    LD="${LD-ld} -m elf32lppclinux"
-	    ;;
-	  powerpc64-*linux*)
-	    LD="${LD-ld} -m elf32ppclinux"
-	    ;;
-	  s390x-*linux*)
-	    LD="${LD-ld} -m elf_s390"
-	    ;;
-	  sparc64-*linux*)
-	    LD="${LD-ld} -m elf32_sparc"
-	    ;;
-	esac
-	;;
-      *64-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_x86_64_fbsd"
-	    ;;
-	  x86_64-*linux*|x86_64-gnu*)
-	    LD="${LD-ld} -m elf_x86_64"
-	    ;;
-	  powerpcle-*linux*)
-	    LD="${LD-ld} -m elf64lppc"
-	    ;;
-	  powerpc-*linux*)
-	    LD="${LD-ld} -m elf64ppc"
-	    ;;
-	  s390*-*linux*|s390*-*tpf*)
-	    LD="${LD-ld} -m elf64_s390"
-	    ;;
-	  sparc*-*linux*)
-	    LD="${LD-ld} -m elf64_sparc"
-	    ;;
-	esac
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-
-*-*-sco3.2v5*)
-  # On SCO OpenServer 5, we need -belf to get full-featured binaries.
-  SAVE_CFLAGS=$CFLAGS
-  CFLAGS="$CFLAGS -belf"
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the C compiler needs -belf" >&5
-printf %s "checking whether the C compiler needs -belf... " >&6; }
-if test ${lt_cv_cc_needs_belf+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-     cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_cc_needs_belf=yes
-else case e in #(
-  e) lt_cv_cc_needs_belf=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-     ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_cc_needs_belf" >&5
-printf '%s\n' "$lt_cv_cc_needs_belf" >&6; }
-  if test yes != "$lt_cv_cc_needs_belf"; then
-    # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf
-    CFLAGS=$SAVE_CFLAGS
-  fi
-  ;;
-*-*solaris*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.o` in
-    *64-bit*)
-      case $lt_cv_prog_gnu_ld in
-      yes*)
-        case $host in
-        i?86-*-solaris*|x86_64-*-solaris*)
-          LD="${LD-ld} -m elf_x86_64"
-          ;;
-        sparc*-*-solaris*)
-          LD="${LD-ld} -m elf64_sparc"
-          ;;
-        esac
-        # GNU ld 2.21 introduced _sol2 emulations.  Use them if available.
-        if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then
-          LD=${LD-ld}_sol2
-        fi
-        ;;
-      *)
-	if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then
-	  LD="${LD-ld} -64"
-	fi
-	;;
-      esac
-      ;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-esac
-
-need_locks=$enable_libtool_lock
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}mt", so it can be a program name with args.
-set dummy ${ac_tool_prefix}mt; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_MANIFEST_TOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$MANIFEST_TOOL"; then
-  ac_cv_prog_MANIFEST_TOOL="$MANIFEST_TOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_MANIFEST_TOOL="${ac_tool_prefix}mt"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-MANIFEST_TOOL=$ac_cv_prog_MANIFEST_TOOL
-if test -n "$MANIFEST_TOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MANIFEST_TOOL" >&5
-printf '%s\n' "$MANIFEST_TOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_MANIFEST_TOOL"; then
-  ac_ct_MANIFEST_TOOL=$MANIFEST_TOOL
-  # Extract the first word of "mt", so it can be a program name with args.
-set dummy mt; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_MANIFEST_TOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_MANIFEST_TOOL"; then
-  ac_cv_prog_ac_ct_MANIFEST_TOOL="$ac_ct_MANIFEST_TOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_MANIFEST_TOOL="mt"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_MANIFEST_TOOL=$ac_cv_prog_ac_ct_MANIFEST_TOOL
-if test -n "$ac_ct_MANIFEST_TOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_MANIFEST_TOOL" >&5
-printf '%s\n' "$ac_ct_MANIFEST_TOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_MANIFEST_TOOL" = x; then
-    MANIFEST_TOOL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    MANIFEST_TOOL=$ac_ct_MANIFEST_TOOL
-  fi
-else
-  MANIFEST_TOOL="$ac_cv_prog_MANIFEST_TOOL"
-fi
-
-test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $MANIFEST_TOOL is a manifest tool" >&5
-printf %s "checking if $MANIFEST_TOOL is a manifest tool... " >&6; }
-if test ${lt_cv_path_manifest_tool+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_path_manifest_tool=no
-  echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&5
-  $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out
-  cat conftest.err >&5
-  if $GREP 'Manifest Tool' conftest.out > /dev/null; then
-    lt_cv_path_manifest_tool=yes
-  fi
-  rm -f conftest* ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_manifest_tool" >&5
-printf '%s\n' "$lt_cv_path_manifest_tool" >&6; }
-if test yes != "$lt_cv_path_manifest_tool"; then
-  MANIFEST_TOOL=:
-fi
-
-
-
-
-
-
-  case $host_os in
-    rhapsody* | darwin*)
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}dsymutil", so it can be a program name with args.
-set dummy ${ac_tool_prefix}dsymutil; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DSYMUTIL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$DSYMUTIL"; then
-  ac_cv_prog_DSYMUTIL="$DSYMUTIL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DSYMUTIL="${ac_tool_prefix}dsymutil"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-DSYMUTIL=$ac_cv_prog_DSYMUTIL
-if test -n "$DSYMUTIL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $DSYMUTIL" >&5
-printf '%s\n' "$DSYMUTIL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_DSYMUTIL"; then
-  ac_ct_DSYMUTIL=$DSYMUTIL
-  # Extract the first word of "dsymutil", so it can be a program name with args.
-set dummy dsymutil; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DSYMUTIL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_DSYMUTIL"; then
-  ac_cv_prog_ac_ct_DSYMUTIL="$ac_ct_DSYMUTIL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DSYMUTIL="dsymutil"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_DSYMUTIL=$ac_cv_prog_ac_ct_DSYMUTIL
-if test -n "$ac_ct_DSYMUTIL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DSYMUTIL" >&5
-printf '%s\n' "$ac_ct_DSYMUTIL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_DSYMUTIL" = x; then
-    DSYMUTIL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DSYMUTIL=$ac_ct_DSYMUTIL
-  fi
-else
-  DSYMUTIL="$ac_cv_prog_DSYMUTIL"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}nmedit", so it can be a program name with args.
-set dummy ${ac_tool_prefix}nmedit; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_NMEDIT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$NMEDIT"; then
-  ac_cv_prog_NMEDIT="$NMEDIT" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_NMEDIT="${ac_tool_prefix}nmedit"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-NMEDIT=$ac_cv_prog_NMEDIT
-if test -n "$NMEDIT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $NMEDIT" >&5
-printf '%s\n' "$NMEDIT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_NMEDIT"; then
-  ac_ct_NMEDIT=$NMEDIT
-  # Extract the first word of "nmedit", so it can be a program name with args.
-set dummy nmedit; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_NMEDIT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_NMEDIT"; then
-  ac_cv_prog_ac_ct_NMEDIT="$ac_ct_NMEDIT" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_NMEDIT="nmedit"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_NMEDIT=$ac_cv_prog_ac_ct_NMEDIT
-if test -n "$ac_ct_NMEDIT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_NMEDIT" >&5
-printf '%s\n' "$ac_ct_NMEDIT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_NMEDIT" = x; then
-    NMEDIT=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    NMEDIT=$ac_ct_NMEDIT
-  fi
-else
-  NMEDIT="$ac_cv_prog_NMEDIT"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}lipo", so it can be a program name with args.
-set dummy ${ac_tool_prefix}lipo; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_LIPO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$LIPO"; then
-  ac_cv_prog_LIPO="$LIPO" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_LIPO="${ac_tool_prefix}lipo"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-LIPO=$ac_cv_prog_LIPO
-if test -n "$LIPO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LIPO" >&5
-printf '%s\n' "$LIPO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_LIPO"; then
-  ac_ct_LIPO=$LIPO
-  # Extract the first word of "lipo", so it can be a program name with args.
-set dummy lipo; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_LIPO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_LIPO"; then
-  ac_cv_prog_ac_ct_LIPO="$ac_ct_LIPO" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_LIPO="lipo"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_LIPO=$ac_cv_prog_ac_ct_LIPO
-if test -n "$ac_ct_LIPO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_LIPO" >&5
-printf '%s\n' "$ac_ct_LIPO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_LIPO" = x; then
-    LIPO=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    LIPO=$ac_ct_LIPO
-  fi
-else
-  LIPO="$ac_cv_prog_LIPO"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}otool", so it can be a program name with args.
-set dummy ${ac_tool_prefix}otool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$OTOOL"; then
-  ac_cv_prog_OTOOL="$OTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OTOOL="${ac_tool_prefix}otool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OTOOL=$ac_cv_prog_OTOOL
-if test -n "$OTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OTOOL" >&5
-printf '%s\n' "$OTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OTOOL"; then
-  ac_ct_OTOOL=$OTOOL
-  # Extract the first word of "otool", so it can be a program name with args.
-set dummy otool; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_OTOOL"; then
-  ac_cv_prog_ac_ct_OTOOL="$ac_ct_OTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OTOOL="otool"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OTOOL=$ac_cv_prog_ac_ct_OTOOL
-if test -n "$ac_ct_OTOOL"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL" >&5
-printf '%s\n' "$ac_ct_OTOOL" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OTOOL" = x; then
-    OTOOL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OTOOL=$ac_ct_OTOOL
-  fi
-else
-  OTOOL="$ac_cv_prog_OTOOL"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}otool64", so it can be a program name with args.
-set dummy ${ac_tool_prefix}otool64; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OTOOL64+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$OTOOL64"; then
-  ac_cv_prog_OTOOL64="$OTOOL64" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OTOOL64="${ac_tool_prefix}otool64"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-OTOOL64=$ac_cv_prog_OTOOL64
-if test -n "$OTOOL64"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $OTOOL64" >&5
-printf '%s\n' "$OTOOL64" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OTOOL64"; then
-  ac_ct_OTOOL64=$OTOOL64
-  # Extract the first word of "otool64", so it can be a program name with args.
-set dummy otool64; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OTOOL64+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) if test -n "$ac_ct_OTOOL64"; then
-  ac_cv_prog_ac_ct_OTOOL64="$ac_ct_OTOOL64" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OTOOL64="otool64"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi ;;
-esac
-fi
-ac_ct_OTOOL64=$ac_cv_prog_ac_ct_OTOOL64
-if test -n "$ac_ct_OTOOL64"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL64" >&5
-printf '%s\n' "$ac_ct_OTOOL64" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_ct_OTOOL64" = x; then
-    OTOOL64=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OTOOL64=$ac_ct_OTOOL64
-  fi
-else
-  OTOOL64="$ac_cv_prog_OTOOL64"
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -single_module linker flag" >&5
-printf %s "checking for -single_module linker flag... " >&6; }
-if test ${lt_cv_apple_cc_single_mod+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_apple_cc_single_mod=no
-      if test -z "$LT_MULTI_MODULE"; then
-	# By default we will add the -single_module flag. You can override
-	# by either setting the environment variable LT_MULTI_MODULE
-	# non-empty at configure time, or by adding -multi_module to the
-	# link flags.
-	rm -rf libconftest.dylib*
-	echo "int foo(void){return 1;}" > conftest.c
-	echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
--dynamiclib -Wl,-single_module conftest.c" >&5
-	$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
-	  -dynamiclib -Wl,-single_module conftest.c 2>conftest.err
-        _lt_result=$?
-	# If there is a non-empty error log, and "single_module"
-	# appears in it, assume the flag caused a linker warning
-        if test -s conftest.err && $GREP single_module conftest.err; then
-	  cat conftest.err >&5
-	# Otherwise, if the output was created with a 0 exit code from
-	# the compiler, it worked.
-	elif test -f libconftest.dylib && test 0 = "$_lt_result"; then
-	  lt_cv_apple_cc_single_mod=yes
-	else
-	  cat conftest.err >&5
-	fi
-	rm -rf libconftest.dylib*
-	rm -f conftest.*
-      fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_apple_cc_single_mod" >&5
-printf '%s\n' "$lt_cv_apple_cc_single_mod" >&6; }
-
-    # Feature test to disable chained fixups since it is not
-    # compatible with '-undefined dynamic_lookup'
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -no_fixup_chains linker flag" >&5
-printf %s "checking for -no_fixup_chains linker flag... " >&6; }
-if test ${lt_cv_support_no_fixup_chains+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e)  save_LDFLAGS=$LDFLAGS
-        LDFLAGS="$LDFLAGS -Wl,-no_fixup_chains"
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_support_no_fixup_chains=yes
-else case e in #(
-  e) lt_cv_support_no_fixup_chains=no
-         ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-        LDFLAGS=$save_LDFLAGS
-
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_support_no_fixup_chains" >&5
-printf '%s\n' "$lt_cv_support_no_fixup_chains" >&6; }
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -exported_symbols_list linker flag" >&5
-printf %s "checking for -exported_symbols_list linker flag... " >&6; }
-if test ${lt_cv_ld_exported_symbols_list+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_ld_exported_symbols_list=no
-      save_LDFLAGS=$LDFLAGS
-      echo "_main" > conftest.sym
-      LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym"
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_ld_exported_symbols_list=yes
-else case e in #(
-  e) lt_cv_ld_exported_symbols_list=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-	LDFLAGS=$save_LDFLAGS
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_exported_symbols_list" >&5
-printf '%s\n' "$lt_cv_ld_exported_symbols_list" >&6; }
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for -force_load linker flag" >&5
-printf %s "checking for -force_load linker flag... " >&6; }
-if test ${lt_cv_ld_force_load+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_ld_force_load=no
-      cat > conftest.c << _LT_EOF
-int forced_loaded() { return 2;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&5
-      $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&5
-      echo "$AR $AR_FLAGS libconftest.a conftest.o" >&5
-      $AR $AR_FLAGS libconftest.a conftest.o 2>&5
-      echo "$RANLIB libconftest.a" >&5
-      $RANLIB libconftest.a 2>&5
-      cat > conftest.c << _LT_EOF
-int main(void) { return 0;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&5
-      $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err
-      _lt_result=$?
-      if test -s conftest.err && $GREP force_load conftest.err; then
-	cat conftest.err >&5
-      elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then
-	lt_cv_ld_force_load=yes
-      else
-	cat conftest.err >&5
-      fi
-        rm -f conftest.err libconftest.a conftest conftest.c
-        rm -rf conftest.dSYM
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_force_load" >&5
-printf '%s\n' "$lt_cv_ld_force_load" >&6; }
-    case $host_os in
-    rhapsody* | darwin1.[012])
-      _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;;
-    darwin1.*)
-      _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-    darwin*)
-      case $MACOSX_DEPLOYMENT_TARGET,$host in
-        10.[012],*|,*powerpc*-darwin[5-8]*)
-          _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-        *)
-          _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup'
-          if test yes = "$lt_cv_support_no_fixup_chains"; then
-            as_fn_append _lt_dar_allow_undefined ' $wl-no_fixup_chains'
-          fi
-        ;;
-      esac
-    ;;
-  esac
-    if test yes = "$lt_cv_apple_cc_single_mod"; then
-      _lt_dar_single_mod='$single_module'
-    fi
-    _lt_dar_needs_single_mod=no
-    case $host_os in
-    rhapsody* | darwin1.*)
-      _lt_dar_needs_single_mod=yes ;;
-    darwin*)
-      # When targeting Mac OS X 10.4 (darwin 8) or later,
-      # -single_module is the default and -multi_module is unsupported.
-      # The toolchain on macOS 10.14 (darwin 18) and later cannot
-      # target any OS version that needs -single_module.
-      case ${MACOSX_DEPLOYMENT_TARGET-10.0},$host in
-      10.0,*-darwin[567].*|10.[0-3],*-darwin[5-9].*|10.[0-3],*-darwin1[0-7].*)
-        _lt_dar_needs_single_mod=yes ;;
-      esac
-    ;;
-    esac
-    if test yes = "$lt_cv_ld_exported_symbols_list"; then
-      _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym'
-    else
-      _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib'
-    fi
-    if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then
-      _lt_dsymutil='~$DSYMUTIL $lib || :'
-    else
-      _lt_dsymutil=
-    fi
-    ;;
-  esac
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x$2 in
-    x)
-        ;;
-    *:)
-        eval $1=\"`$ECHO $2 | $SED 's/:/ /g'` \$$1\"
-        ;;
-    x:*)
-        eval $1=\"\$$1 `$ECHO $2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval $1=\"\$$1\ `$ECHO $2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval $1=\"`$ECHO $2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \$$1\"
-        ;;
-    *)
-        eval $1=\"`$ECHO $2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-ac_fn_c_check_header_compile "$LINENO" "dlfcn.h" "ac_cv_header_dlfcn_h" "$ac_includes_default
-"
-if test "x$ac_cv_header_dlfcn_h" = xyes
-then :
-  printf '%s\n' "#define HAVE_DLFCN_H 1" >>confdefs.h
-
-fi
-
-
-
-
-
-# Set options
-
-
-
-        enable_dlopen=no
-
-
-  enable_win32_dll=no
-
-
-            # Check whether --enable-shared was given.
-if test ${enable_shared+y}
-then :
-  enableval=$enable_shared; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_shared=yes ;;
-    no) enable_shared=no ;;
-    *)
-      enable_shared=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_shared=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in #(
-  e) enable_shared=yes ;;
-esac
-fi
-
-
-
-
-
-
-
-
-
-  # Check whether --enable-static was given.
-if test ${enable_static+y}
-then :
-  enableval=$enable_static; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_static=yes ;;
-    no) enable_static=no ;;
-    *)
-     enable_static=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_static=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in #(
-  e) enable_static=yes ;;
-esac
-fi
-
-
-
-
-
-
-
-
-
-  # Check whether --enable-pic was given.
-if test ${enable_pic+y}
-then :
-  enableval=$enable_pic; lt_p=${PACKAGE-default}
-     case $enableval in
-     yes|no) pic_mode=$enableval ;;
-     *)
-       pic_mode=default
-       # Look at the argument we got.  We use all the common list separators.
-       lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-       for lt_pkg in $enableval; do
-	 IFS=$lt_save_ifs
-	 if test "X$lt_pkg" = "X$lt_p"; then
-	   pic_mode=yes
-	 fi
-       done
-       IFS=$lt_save_ifs
-       ;;
-     esac
-else case e in #(
-  e)           # Check whether --with-pic was given.
-if test ${with_pic+y}
-then :
-  withval=$with_pic; lt_p=${PACKAGE-default}
-	 case $withval in
-	 yes|no) pic_mode=$withval ;;
-	 *)
-	   pic_mode=default
-	   # Look at the argument we got.  We use all the common list separators.
-	   lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-	   for lt_pkg in $withval; do
-	     IFS=$lt_save_ifs
-	     if test "X$lt_pkg" = "X$lt_p"; then
-	       pic_mode=yes
-	     fi
-	   done
-	   IFS=$lt_save_ifs
-	   ;;
-	 esac
-else case e in #(
-  e) pic_mode=default ;;
-esac
-fi
-
-     ;;
-esac
-fi
-
-
-
-
-
-
-
-
-  # Check whether --enable-fast-install was given.
-if test ${enable_fast_install+y}
-then :
-  enableval=$enable_fast_install; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_fast_install=yes ;;
-    no) enable_fast_install=no ;;
-    *)
-      enable_fast_install=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_fast_install=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else case e in #(
-  e) enable_fast_install=yes ;;
-esac
-fi
-
-
-
-
-
-
-
-
-  shared_archive_member_spec=
-case $host,$enable_shared in
-power*-*-aix[5-9]*,yes)
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking which variant of shared library versioning to provide" >&5
-printf %s "checking which variant of shared library versioning to provide... " >&6; }
-  # Check whether --enable-aix-soname was given.
-if test ${enable_aix_soname+y}
-then :
-  enableval=$enable_aix_soname; case $enableval in
-     aix|svr4|both)
-       ;;
-     *)
-       as_fn_error $? "Unknown argument to --enable-aix-soname" "$LINENO" 5
-       ;;
-     esac
-     lt_cv_with_aix_soname=$enable_aix_soname
-else case e in #(
-  e) # Check whether --with-aix-soname was given.
-if test ${with_aix_soname+y}
-then :
-  withval=$with_aix_soname; case $withval in
-         aix|svr4|both)
-           ;;
-         *)
-           as_fn_error $? "Unknown argument to --with-aix-soname" "$LINENO" 5
-           ;;
-         esac
-         lt_cv_with_aix_soname=$with_aix_soname
-else case e in #(
-  e) if test ${lt_cv_with_aix_soname+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_with_aix_soname=aix ;;
-esac
-fi
- ;;
-esac
-fi
-
-     enable_aix_soname=$lt_cv_with_aix_soname ;;
-esac
-fi
-
-  with_aix_soname=$enable_aix_soname
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $with_aix_soname" >&5
-printf '%s\n' "$with_aix_soname" >&6; }
-  if test aix != "$with_aix_soname"; then
-    # For the AIX way of multilib, we name the shared archive member
-    # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o',
-    # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File.
-    # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag,
-    # the AIX toolchain works better with OBJECT_MODE set (default 32).
-    if test 64 = "${OBJECT_MODE-32}"; then
-      shared_archive_member_spec=shr_64
-    else
-      shared_archive_member_spec=shr
-    fi
-  fi
-  ;;
-*)
-  with_aix_soname=aix
-  ;;
-esac
-
-
-
-
-
-
-
-
-
-
-# This can be used to rebuild libtool when needed
-LIBTOOL_DEPS=$ltmain
-
-# Always use our own libtool.
-LIBTOOL='$(SHELL) $(top_builddir)/libtool'
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-test -z "$LN_S" && LN_S="ln -s"
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-if test -n "${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for objdir" >&5
-printf %s "checking for objdir... " >&6; }
-if test ${lt_cv_objdir+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) rm -f .libs 2>/dev/null
-mkdir .libs 2>/dev/null
-if test -d .libs; then
-  lt_cv_objdir=.libs
-else
-  # MS-DOS does not allow filenames that begin with a dot.
-  lt_cv_objdir=_libs
-fi
-rmdir .libs 2>/dev/null ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_objdir" >&5
-printf '%s\n' "$lt_cv_objdir" >&6; }
-objdir=$lt_cv_objdir
-
-
-
-
-
-printf '%s\n' "#define LT_OBJDIR \"$lt_cv_objdir/\"" >>confdefs.h
-
-
-
-
-case $host_os in
-aix3*)
-  # AIX sometimes has problems with the GCC collect2 program.  For some
-  # reason, if we set the COLLECT_NAMES environment variable, the problems
-  # vanish in a puff of smoke.
-  if test set != "${COLLECT_NAMES+set}"; then
-    COLLECT_NAMES=
-    export COLLECT_NAMES
-  fi
-  ;;
-esac
-
-# Global variables:
-ofile=libtool
-can_build_shared=yes
-
-# All known linkers require a '.a' archive for static linking (except MSVC and
-# ICC, which need '.lib').
-libext=a
-
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-old_CC=$CC
-old_CFLAGS=$CFLAGS
-
-# Set sane defaults for various variables
-test -z "$CC" && CC=cc
-test -z "$LTCC" && LTCC=$CC
-test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS
-test -z "$LD" && LD=ld
-test -z "$ac_objext" && ac_objext=o
-
-func_cc_basename $compiler
-cc_basename=$func_cc_basename_result
-
-
-# Only perform the check for file, if the check method requires it
-test -z "$MAGIC_CMD" && MAGIC_CMD=file
-case $deplibs_check_method in
-file_magic*)
-  if test "$file_magic_cmd" = '$MAGIC_CMD'; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for ${ac_tool_prefix}file" >&5
-printf %s "checking for ${ac_tool_prefix}file... " >&6; }
-if test ${lt_cv_path_MAGIC_CMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) case $MAGIC_CMD in
-[\\/*] |  ?:[\\/]*)
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  ac_dummy="/usr/bin$PATH_SEPARATOR$PATH"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/${ac_tool_prefix}file"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"${ac_tool_prefix}file"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac ;;
-esac
-fi
-
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5
-printf '%s\n' "$MAGIC_CMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-
-
-
-if test -z "$lt_cv_path_MAGIC_CMD"; then
-  if test -n "$ac_tool_prefix"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for file" >&5
-printf %s "checking for file... " >&6; }
-if test ${lt_cv_path_MAGIC_CMD+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) case $MAGIC_CMD in
-[\\/*] |  ?:[\\/]*)
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  ac_dummy="/usr/bin$PATH_SEPARATOR$PATH"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/file"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"file"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac ;;
-esac
-fi
-
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5
-printf '%s\n' "$MAGIC_CMD" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-  else
-    MAGIC_CMD=:
-  fi
-fi
-
-  fi
-  ;;
-esac
-
-# Use C for the default configuration in the libtool script
-
-lt_save_CC=$CC
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-# Source file extension for C test sources.
-ac_ext=c
-
-# Object file extension for compiled C test sources.
-objext=o
-objext=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code="int some_variable = 0;"
-
-# Code to be used in simple link tests
-lt_simple_link_test_code='int main(void){return(0);}'
-
-
-
-
-
-
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-
-# Save the default compiler, since it gets overwritten when the other
-# tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP.
-compiler_DEFAULT=$CC
-
-# save warnings/boilerplate of simple test code
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_compile_test_code" >conftest.$ac_ext
-eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_compiler_boilerplate=`cat conftest.err`
-$RM conftest*
-
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_link_test_code" >conftest.$ac_ext
-eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_linker_boilerplate=`cat conftest.err`
-$RM -r conftest*
-
-
-## CAVEAT EMPTOR:
-## There is no encapsulation within the following macros, do not change
-## the running order or otherwise move them around unless you know exactly
-## what you are doing...
-if test -n "$compiler"; then
-
-lt_prog_compiler_no_builtin_flag=
-
-if test yes = "$GCC"; then
-  case $cc_basename in
-  nvcc*)
-    lt_prog_compiler_no_builtin_flag=' -Xcompiler -fno-builtin' ;;
-  *)
-    lt_prog_compiler_no_builtin_flag=' -fno-builtin' ;;
-  esac
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -fno-rtti -fno-exceptions" >&5
-printf %s "checking if $compiler supports -fno-rtti -fno-exceptions... " >&6; }
-if test ${lt_cv_prog_compiler_rtti_exceptions+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_prog_compiler_rtti_exceptions=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="-fno-rtti -fno-exceptions"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_rtti_exceptions=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_rtti_exceptions" >&5
-printf '%s\n' "$lt_cv_prog_compiler_rtti_exceptions" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_rtti_exceptions"; then
-    lt_prog_compiler_no_builtin_flag="$lt_prog_compiler_no_builtin_flag -fno-rtti -fno-exceptions"
-else
-    :
-fi
-
-fi
-
-
-
-
-
-
-  lt_prog_compiler_wl=
-lt_prog_compiler_pic=
-lt_prog_compiler_static=
-
-
-  if test yes = "$GCC"; then
-    lt_prog_compiler_wl='-Wl,'
-    lt_prog_compiler_static='-static'
-
-    case $host_os in
-      aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            lt_prog_compiler_pic='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            lt_prog_compiler_pic='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      ;;
-
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      lt_prog_compiler_static=
-      ;;
-
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='-fPIC'
-	;;
-      esac
-      ;;
-
-    interix[3-9]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-
-    msdosdjgpp*)
-      # Just because we use GCC doesn't mean we suddenly get shared libraries
-      # on systems that don't support them.
-      lt_prog_compiler_can_build_shared=no
-      enable_shared=no
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic=-Kconform_pic
-      fi
-      ;;
-
-    *)
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-    esac
-
-    case $cc_basename in
-    nvcc*) # Cuda Compiler Driver 2.2
-      lt_prog_compiler_wl='-Xlinker '
-      if test -n "$lt_prog_compiler_pic"; then
-        lt_prog_compiler_pic="-Xcompiler $lt_prog_compiler_pic"
-      fi
-      ;;
-    esac
-  else
-    # PORTME Check for flag to pass linker flags through the system compiler.
-    case $host_os in
-    aix*)
-      lt_prog_compiler_wl='-Wl,'
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      else
-	lt_prog_compiler_static='-bnso -bI:/lib/syscalls.exp'
-      fi
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      case $cc_basename in
-      nagfor*)
-        # NAG Fortran compiler
-        lt_prog_compiler_wl='-Wl,-Wl,,'
-        lt_prog_compiler_pic='-PIC'
-        lt_prog_compiler_static='-Bstatic'
-        ;;
-      esac
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    hpux9* | hpux10* | hpux11*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
-      # not for PA HP-UX.
-      case $host_cpu in
-      hppa*64*|ia64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='+Z'
-	;;
-      esac
-      # Is there a better lt_prog_compiler_static that works with the bundled CC?
-      lt_prog_compiler_static='$wl-a ${wl}archive'
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC (with -KPIC) is the default.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-      case $cc_basename in
-      # old Intel for x86_64, which still supported -KPIC.
-      ecc*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-KPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      *flang* | ftn | f18* | f95*)
-        # Flang compiler.
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # icc used to be incompatible with GCC.
-      # ICC 10 doesn't accept -KPIC any more.
-      icc* | ifort*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # Lahey Fortran 8.1.
-      lf95*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='--shared'
-	lt_prog_compiler_static='--static'
-	;;
-      nagfor*)
-	# NAG Fortran compiler
-	lt_prog_compiler_wl='-Wl,-Wl,,'
-	lt_prog_compiler_pic='-PIC'
-	lt_prog_compiler_static='-Bstatic'
-	;;
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-	;;
-      pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
-        # Portland Group compilers (*not* the Pentium gcc compiler,
-	# which looks to be a dead project)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fpic'
-	lt_prog_compiler_static='-Bstatic'
-        ;;
-      ccc*)
-        lt_prog_compiler_wl='-Wl,'
-        # All Alpha code is PIC.
-        lt_prog_compiler_static='-non_shared'
-        ;;
-      xl* | bgxl* | bgf* | mpixl*)
-	# IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-qpic'
-	lt_prog_compiler_static='-qstaticlink'
-	;;
-      *)
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [1-7].* | *Sun*Fortran*\ 8.[0-3]*)
-	  # Sun Fortran 8.3 passes all unrecognized flags to the linker
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl=''
-	  ;;
-	*Sun\ F* | *Sun*Fortran*)
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Qoption ld '
-	  ;;
-	*Sun\ C*)
-	  # Sun C 5.9
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Wl,'
-	  ;;
-        *Intel*\ [CF]*Compiler*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fPIC'
-	  lt_prog_compiler_static='-static'
-	  ;;
-	*Portland\ Group*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fpic'
-	  lt_prog_compiler_static='-Bstatic'
-	  ;;
-	esac
-	;;
-      esac
-      ;;
-
-    newsos6)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *-mlibc)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-fPIC'
-      lt_prog_compiler_static='-static'
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    osf3* | osf4* | osf5*)
-      lt_prog_compiler_wl='-Wl,'
-      # All OSF/1 code is PIC.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    rdos*)
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      case $cc_basename in
-      f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
-	lt_prog_compiler_wl='-Qoption ld ';;
-      *)
-	lt_prog_compiler_wl='-Wl,';;
-      esac
-      ;;
-
-    sunos4*)
-      lt_prog_compiler_wl='-Qoption ld '
-      lt_prog_compiler_pic='-PIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4 | sysv4.2uw2* | sysv4.3*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic='-Kconform_pic'
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      ;;
-
-    sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    unicos*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_can_build_shared=no
-      ;;
-
-    uts4*)
-      lt_prog_compiler_pic='-pic'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *)
-      lt_prog_compiler_can_build_shared=no
-      ;;
-    esac
-  fi
-
-case $host_os in
-  # For platforms that do not support PIC, -DPIC is meaningless:
-  *djgpp*)
-    lt_prog_compiler_pic=
-    ;;
-  *)
-    lt_prog_compiler_pic="$lt_prog_compiler_pic -DPIC"
-    ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $compiler option to produce PIC" >&5
-printf %s "checking for $compiler option to produce PIC... " >&6; }
-if test ${lt_cv_prog_compiler_pic+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_prog_compiler_pic=$lt_prog_compiler_pic ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic" >&6; }
-lt_prog_compiler_pic=$lt_cv_prog_compiler_pic
-
-#
-# Check to make sure the PIC flag actually works.
-#
-if test -n "$lt_prog_compiler_pic"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler PIC flag $lt_prog_compiler_pic works" >&5
-printf %s "checking if $compiler PIC flag $lt_prog_compiler_pic works... " >&6; }
-if test ${lt_cv_prog_compiler_pic_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_prog_compiler_pic_works=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$lt_prog_compiler_pic -DPIC"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_pic_works=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_pic_works"; then
-    case $lt_prog_compiler_pic in
-     "" | " "*) ;;
-     *) lt_prog_compiler_pic=" $lt_prog_compiler_pic" ;;
-     esac
-else
-    lt_prog_compiler_pic=
-     lt_prog_compiler_can_build_shared=no
-fi
-
-fi
-
-
-
-
-
-
-
-
-
-
-
-#
-# Check to make sure the static flag actually works.
-#
-wl=$lt_prog_compiler_wl eval lt_tmp_static_flag=\"$lt_prog_compiler_static\"
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler static flag $lt_tmp_static_flag works" >&5
-printf %s "checking if $compiler static flag $lt_tmp_static_flag works... " >&6; }
-if test ${lt_cv_prog_compiler_static_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_prog_compiler_static_works=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $lt_tmp_static_flag"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler_static_works=yes
-       fi
-     else
-       lt_cv_prog_compiler_static_works=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_static_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_static_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_static_works"; then
-    :
-else
-    lt_prog_compiler_static=
-fi
-
-
-
-
-
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5
-printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; }
-if test ${lt_cv_prog_compiler_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_prog_compiler_c_o=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_c_o=yes
-     fi
-   fi
-   chmod u+w . 2>&5
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5
-printf '%s\n' "$lt_cv_prog_compiler_c_o" >&6; }
-
-
-
-
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5
-printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; }
-if test ${lt_cv_prog_compiler_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_prog_compiler_c_o=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_c_o=yes
-     fi
-   fi
-   chmod u+w . 2>&5
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5
-printf '%s\n' "$lt_cv_prog_compiler_c_o" >&6; }
-
-
-
-
-hard_links=nottested
-if test no = "$lt_cv_prog_compiler_c_o" && test no != "$need_locks"; then
-  # do not overwrite the value of need_locks provided by the user
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if we can lock with hard links" >&5
-printf %s "checking if we can lock with hard links... " >&6; }
-  hard_links=yes
-  $RM conftest*
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  touch conftest.a
-  ln conftest.a conftest.b 2>&5 || hard_links=no
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $hard_links" >&5
-printf '%s\n' "$hard_links" >&6; }
-  if test no = "$hard_links"; then
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&5
-printf '%s\n' "$as_me: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&2;}
-    need_locks=warn
-  fi
-else
-  need_locks=no
-fi
-
-
-
-
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the $compiler linker ($LD) supports shared libraries" >&5
-printf %s "checking whether the $compiler linker ($LD) supports shared libraries... " >&6; }
-
-  runpath_var=
-  allow_undefined_flag=
-  always_export_symbols=no
-  archive_cmds=
-  archive_expsym_cmds=
-  compiler_needs_object=no
-  enable_shared_with_static_runtimes=no
-  export_dynamic_flag_spec=
-  export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
-  hardcode_automatic=no
-  hardcode_direct=no
-  hardcode_direct_absolute=no
-  hardcode_libdir_flag_spec=
-  hardcode_libdir_separator=
-  hardcode_minus_L=no
-  hardcode_shlibpath_var=unsupported
-  inherit_rpath=no
-  link_all_deplibs=unknown
-  module_cmds=
-  module_expsym_cmds=
-  old_archive_from_new_cmds=
-  old_archive_from_expsyms_cmds=
-  thread_safe_flag_spec=
-  whole_archive_flag_spec=
-  # include_expsyms should be a list of space-separated symbols to be *always*
-  # included in the symbol list
-  include_expsyms=
-  # exclude_expsyms can be an extended regexp of symbols to exclude
-  # it will be wrapped by ' (' and ')$', so one must not match beginning or
-  # end of line.  Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc',
-  # as well as any symbol that contains 'd'.
-  exclude_expsyms='_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*'
-  # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out
-  # platforms (ab)use it in PIC code, but their linkers get confused if
-  # the symbol is explicitly referenced.  Since portable code cannot
-  # rely on this symbol name, it's probably fine to never include it in
-  # preloaded symbol tables.
-  # Exclude shared library initialization/finalization symbols.
-  extract_expsyms_cmds=
-
-  case $host_os in
-  cygwin* | mingw* | windows* | pw32* | cegcc*)
-    # FIXME: the MSVC++ and ICC port hasn't been tested in a loooong time
-    # When not using gcc, we currently assume that we are using
-    # Microsoft Visual C++ or Intel C++ Compiler.
-    if test yes != "$GCC"; then
-      with_gnu_ld=no
-    fi
-    ;;
-  interix*)
-    # we just hope/assume this is gcc and not c89 (= MSVC++ or ICC)
-    with_gnu_ld=yes
-    ;;
-  esac
-
-  ld_shlibs=yes
-
-  # On some targets, GNU ld is compatible enough with the native linker
-  # that we're better off using the native interface for both.
-  lt_use_gnu_ld_interface=no
-  if test yes = "$with_gnu_ld"; then
-    case $host_os in
-      aix*)
-	# The AIX port of GNU ld has always aspired to compatibility
-	# with the native linker.  However, as the warning in the GNU ld
-	# block says, versions before 2.19.5* couldn't really create working
-	# shared libraries, regardless of the interface used.
-	case `$LD -v 2>&1` in
-	  *\ \(GNU\ Binutils\)\ 2.19.5*) ;;
-	  *\ \(GNU\ Binutils\)\ 2.[2-9]*) ;;
-	  *\ \(GNU\ Binutils\)\ [3-9]*) ;;
-	  *)
-	    lt_use_gnu_ld_interface=yes
-	    ;;
-	esac
-	;;
-      *)
-	lt_use_gnu_ld_interface=yes
-	;;
-    esac
-  fi
-
-  if test yes = "$lt_use_gnu_ld_interface"; then
-    # If archive_cmds runs LD, not CC, wlarc should be empty
-    wlarc='$wl'
-
-    # Set some defaults for GNU ld with shared library support. These
-    # are reset later if shared libraries are not supported. Putting them
-    # here allows them to be overridden if necessary.
-    runpath_var=LD_RUN_PATH
-    hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-    export_dynamic_flag_spec='$wl--export-dynamic'
-    # ancient GNU ld didn't support --whole-archive et. al.
-    if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then
-      whole_archive_flag_spec=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
-    else
-      whole_archive_flag_spec=
-    fi
-    supports_anon_versioning=no
-    case `$LD -v | $SED -e 's/([^)]\+)\s\+//' 2>&1` in
-      *GNU\ gold*) supports_anon_versioning=yes ;;
-      *\ [01].* | *\ 2.[0-9].* | *\ 2.10.*) ;; # catch versions < 2.11
-      *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ...
-      *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ...
-      *\ 2.11.*) ;; # other 2.11 versions
-      *) supports_anon_versioning=yes ;;
-    esac
-
-    # See if GNU ld supports shared libraries.
-    case $host_os in
-    aix[3-9]*)
-      # On AIX/PPC, the GNU linker is very broken
-      if test ia64 != "$host_cpu"; then
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: the GNU linker, at least up to release 2.19, is reported
-*** to be unable to reliably create shared libraries on AIX.
-*** Therefore, libtool is disabling shared libraries support.  If you
-*** really care for shared libraries, you may want to install binutils
-*** 2.20 or above, or modify your PATH so that a non-GNU linker is found.
-*** You will then need to restart the configuration process.
-
-_LT_EOF
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            archive_expsym_cmds=''
-        ;;
-      m68k)
-            archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            hardcode_libdir_flag_spec='-L$libdir'
-            hardcode_minus_L=yes
-        ;;
-      esac
-      ;;
-
-    beos*)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	allow_undefined_flag=unsupported
-	# Joseph Beckenbach <jrb3@best.com> says some releases of gcc
-	# support --undefined.  This deserves some investigation.  FIXME
-	archive_cmds='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    cygwin* | mingw* | windows* | pw32* | cegcc*)
-      # _LT_TAGVAR(hardcode_libdir_flag_spec, ) is actually meaningless,
-      # as there is no search path for DLLs.
-      hardcode_libdir_flag_spec='-L$libdir'
-      export_dynamic_flag_spec='$wl--export-all-symbols'
-      allow_undefined_flag=unsupported
-      always_export_symbols=no
-      enable_shared_with_static_runtimes=yes
-      export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1 DATA/;s/^.*[ ]__nm__\([^ ]*\)[ ][^ ]*/\1 DATA/;/^I[ ]/d;/^[AITW][ ]/s/.* //'\'' | sort | uniq > $export_symbols'
-      exclude_expsyms='[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname'
-      file_list_spec='@'
-
-      if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then
-        archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-	# If the export-symbols file already is a .def file, use it as
-	# is; otherwise, prepend EXPORTS...
-	archive_expsym_cmds='if   test DEF = "`$SED -n     -e '\''s/^[	 ]*//'\''     -e '\''/^\(;.*\)*$/d'\''     -e '\''s/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p'\''     -e q     $export_symbols`" ; then
-          cp $export_symbols $output_objdir/$soname.def;
-        else
-          echo EXPORTS > $output_objdir/$soname.def;
-          cat $export_symbols >> $output_objdir/$soname.def;
-        fi~
-        $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    haiku*)
-      archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      link_all_deplibs=no
-      ;;
-
-    os2*)
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_minus_L=yes
-      allow_undefined_flag=unsupported
-      shrext_cmds=.dll
-      archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      old_archive_from_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      enable_shared_with_static_runtimes=yes
-      file_list_spec='@'
-      ;;
-
-    interix[3-9]*)
-      hardcode_direct=no
-      hardcode_shlibpath_var=no
-      hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-      export_dynamic_flag_spec='$wl-E'
-      # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc.
-      # Instead, shared libraries are loaded at an image base (0x10000000 by
-      # default) and relocated if they conflict, which is a slow very memory
-      # consuming and fragmenting process.  To avoid this, we pick a random,
-      # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link
-      # time.  Moving up from 0x10000000 also allows more sbrk(2) space.
-      archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      archive_expsym_cmds='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      ;;
-
-    gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu)
-      tmp_diet=no
-      if test linux-dietlibc = "$host_os"; then
-	case $cc_basename in
-	  diet\ *) tmp_diet=yes;;	# linux-dietlibc with static linking (!diet-dyn)
-	esac
-      fi
-      if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \
-	 && test no = "$tmp_diet"
-      then
-	tmp_addflag=' $pic_flag'
-	tmp_sharedflag='-shared'
-	case $cc_basename,$host_cpu in
-        pgcc*)				# Portland Group C compiler
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag'
-	  ;;
-	pgf77* | pgf90* | pgf95* | pgfortran*)
-					# Portland Group f77 and f90 compilers
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag -Mnomain' ;;
-	ecc*,ia64* | icc*,ia64*)	# Intel C compiler on ia64
-	  tmp_addflag=' -i_dynamic' ;;
-	efc*,ia64* | ifort*,ia64*)	# Intel Fortran compiler on ia64
-	  tmp_addflag=' -i_dynamic -nofor_main' ;;
-	ifc* | ifort*)			# Intel Fortran compiler
-	  tmp_addflag=' -nofor_main' ;;
-	lf95*)				# Lahey Fortran 8.1
-	  whole_archive_flag_spec=
-	  tmp_sharedflag='--shared' ;;
-        nagfor*)                        # NAGFOR 5.3
-          tmp_sharedflag='-Wl,-shared' ;;
-	xl[cC]* | bgxl[cC]* | mpixl[cC]*) # IBM XL C 8.0 on PPC (deal with xlf below)
-	  tmp_sharedflag='-qmkshrobj'
-	  tmp_addflag= ;;
-	nvcc*)	# Cuda Compiler Driver 2.2
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  compiler_needs_object=yes
-	  ;;
-	esac
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ C*)			# Sun C 5.9
-	  whole_archive_flag_spec='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  compiler_needs_object=yes
-	  tmp_sharedflag='-G' ;;
-	*Sun\ F*)			# Sun Fortran 8.3
-	  tmp_sharedflag='-G' ;;
-	esac
-	archive_cmds='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-
-        if test yes = "$supports_anon_versioning"; then
-          archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~
-            cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-            echo "local: *; };" >> $output_objdir/$libname.ver~
-            $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib'
-        fi
-
-	case $cc_basename in
-	tcc*)
-	  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	  export_dynamic_flag_spec='-rdynamic'
-	  ;;
-	xlf* | bgf* | bgxlf* | mpixlf*)
-	  # IBM XL Fortran 10.1 on PPC cannot create shared libs itself
-	  whole_archive_flag_spec='--whole-archive$convenience --no-whole-archive'
-	  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	  archive_cmds='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib'
-	  if test yes = "$supports_anon_versioning"; then
-	    archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~
-              cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-              echo "local: *; };" >> $output_objdir/$libname.ver~
-              $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib'
-	  fi
-	  ;;
-	esac
-      else
-        ld_shlibs=no
-      fi
-      ;;
-
-    *-mlibc)
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      ;;
-
-    netbsd* | netbsdelf*-gnu)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	archive_cmds='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib'
-	wlarc=
-      else
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      fi
-      ;;
-
-    solaris*)
-      if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: The releases 2.8.* of the GNU linker cannot reliably
-*** create shared libraries on Solaris systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.9.1 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-      elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*)
-      case `$LD -v 2>&1` in
-        *\ [01].* | *\ 2.[0-9].* | *\ 2.1[0-5].*)
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot
-*** reliably create shared libraries on SCO systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.16.91.0.3 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-	;;
-	*)
-	  # For security reasons, it is highly recommended that you always
-	  # use absolute paths for naming shared libraries, and exclude the
-	  # DT_RUNPATH tag from executables and libraries.  But doing so
-	  # requires that you compile everything twice, which is a pain.
-	  if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	    hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	    archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	    archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-	  else
-	    ld_shlibs=no
-	  fi
-	;;
-      esac
-      ;;
-
-    sunos4*)
-      archive_cmds='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      wlarc=
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    *)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-    esac
-
-    if test no = "$ld_shlibs"; then
-      runpath_var=
-      hardcode_libdir_flag_spec=
-      export_dynamic_flag_spec=
-      whole_archive_flag_spec=
-    fi
-  else
-    # PORTME fill in a description of your system's linker (not GNU ld)
-    case $host_os in
-    aix3*)
-      allow_undefined_flag=unsupported
-      always_export_symbols=yes
-      archive_expsym_cmds='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname'
-      # Note: this linker hardcodes the directories in LIBPATH if there
-      # are no directories specified by -L.
-      hardcode_minus_L=yes
-      if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then
-	# Neither direct hardcoding nor static linking is supported with a
-	# broken collect2.
-	hardcode_direct=unsupported
-      fi
-      ;;
-
-    aix[4-9]*)
-      if test ia64 = "$host_cpu"; then
-	# On IA64, the linker does run time linking by default, so we don't
-	# have to do anything special.
-	aix_use_runtimelinking=no
-	exp_sym_flag='-Bexport'
-	no_entry_flag=
-      else
-	# If we're using GNU nm, then we don't want the "-C" option.
-	# -C means demangle to GNU nm, but means don't demangle to AIX nm.
-	# Without the "-l" option, or with the "-B" option, AIX nm treats
-	# weak defined symbols like other global defined symbols, whereas
-	# GNU nm marks them as "W".
-	# While the 'weak' keyword is ignored in the Export File, we need
-	# it in the Import File for the 'aix-soname' feature, so we have
-	# to replace the "-B" option with "-P" for AIX nm.
-	if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then
-	  export_symbols_cmds='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && (substr(\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols'
-	else
-	  export_symbols_cmds='`func_echo_all $NM | $SED -e '\''s/B\([^B]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && (substr(\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols'
-	fi
-	aix_use_runtimelinking=no
-
-	# Test if we are trying to use run time linking or normal
-	# AIX style linking. If -brtl is somewhere in LDFLAGS, we
-	# have runtime linking enabled, and use it for executables.
-	# For shared libraries, we enable/disable runtime linking
-	# depending on the kind of the shared library created -
-	# when "with_aix_soname,aix_use_runtimelinking" is:
-	# "aix,no"   lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "aix,yes"  lib.so          shared, rtl:yes, for executables
-	#            lib.a           static archive
-	# "both,no"  lib.so.V(shr.o) shared, rtl:yes
-	#            lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a(lib.so.V) shared, rtl:no
-	# "svr4,*"   lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a           static archive
-	case $host_os in aix4.[23]|aix4.[23].*|aix[5-9]*)
-	  for ld_flag in $LDFLAGS; do
-	  if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then
-	    aix_use_runtimelinking=yes
-	    break
-	  fi
-	  done
-	  if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then
-	    # With aix-soname=svr4, we create the lib.so.V shared archives only,
-	    # so we don't have lib.a shared libs to link our executables.
-	    # We have to force runtime linking in this case.
-	    aix_use_runtimelinking=yes
-	    LDFLAGS="$LDFLAGS -Wl,-brtl"
-	  fi
-	  ;;
-	esac
-
-	exp_sym_flag='-bexport'
-	no_entry_flag='-bnoentry'
-      fi
-
-      # When large executables or shared objects are built, AIX ld can
-      # have problems creating the table of contents.  If linking a library
-      # or program results in "error TOC overflow" add -mminimal-toc to
-      # CXXFLAGS/CFLAGS for g++/gcc.  In the cases where that is not
-      # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS.
-
-      archive_cmds=''
-      hardcode_direct=yes
-      hardcode_direct_absolute=yes
-      hardcode_libdir_separator=':'
-      link_all_deplibs=yes
-      file_list_spec='$wl-f,'
-      case $with_aix_soname,$aix_use_runtimelinking in
-      aix,*) ;; # traditional, no import file
-      svr4,* | *,yes) # use import file
-	# The Import File defines what to hardcode.
-	hardcode_direct=no
-	hardcode_direct_absolute=no
-	;;
-      esac
-
-      if test yes = "$GCC"; then
-	case $host_os in aix4.[012]|aix4.[012].*)
-	# We only want to do this on AIX 4.2 and lower, the check
-	# below for broken collect2 doesn't work under 4.3+
-	  collect2name=`$CC -print-prog-name=collect2`
-	  if test -f "$collect2name" &&
-	   strings "$collect2name" | $GREP resolve_lib_name >/dev/null
-	  then
-	  # We have reworked collect2
-	  :
-	  else
-	  # We have old collect2
-	  hardcode_direct=unsupported
-	  # It fails to find uninstalled libraries when the uninstalled
-	  # path is not listed in the libpath.  Setting hardcode_minus_L
-	  # to unsupported forces relinking
-	  hardcode_minus_L=yes
-	  hardcode_libdir_flag_spec='-L$libdir'
-	  hardcode_libdir_separator=
-	  fi
-	  ;;
-	esac
-	shared_flag='-shared'
-	if test yes = "$aix_use_runtimelinking"; then
-	  shared_flag="$shared_flag "'$wl-G'
-	fi
-	# Need to ensure runtime linking is disabled for the traditional
-	# shared library, or the linker may eventually find shared libraries
-	# /with/ Import File - we do not want to mix them.
-	shared_flag_aix='-shared'
-	shared_flag_svr4='-shared $wl-G'
-      else
-	# not using gcc
-	if test ia64 = "$host_cpu"; then
-	# VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release
-	# chokes on -Wl,-G. The following line is correct:
-	  shared_flag='-G'
-	else
-	  if test yes = "$aix_use_runtimelinking"; then
-	    shared_flag='$wl-G'
-	  else
-	    shared_flag='$wl-bM:SRE'
-	  fi
-	  shared_flag_aix='$wl-bM:SRE'
-	  shared_flag_svr4='$wl-G'
-	fi
-      fi
-
-      export_dynamic_flag_spec='$wl-bexpall'
-      # It seems that -bexpall does not export symbols beginning with
-      # underscore (_), so it is better to generate a list of symbols to export.
-      always_export_symbols=yes
-      if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then
-	# Warning - without using the other runtime loading flags (-brtl),
-	# -berok will link without error, but may produce a broken library.
-	allow_undefined_flag='-berok'
-        # Determine the default libpath from the value encoded in an
-        # empty executable.
-        if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  if test ${lt_cv_aix_libpath_+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-
-  lt_aix_libpath_sed='
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }'
-  lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=/usr/lib:/lib
-  fi
-   ;;
-esac
-fi
-
-  aix_libpath=$lt_cv_aix_libpath_
-fi
-
-        hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath"
-        archive_expsym_cmds='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag
-      else
-	if test ia64 = "$host_cpu"; then
-	  hardcode_libdir_flag_spec='$wl-R $libdir:/usr/lib:/lib'
-	  allow_undefined_flag="-z nodefs"
-	  archive_expsym_cmds="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols"
-	else
-	 # Determine the default libpath from the value encoded in an
-	 # empty executable.
-	 if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  if test ${lt_cv_aix_libpath_+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-
-  lt_aix_libpath_sed='
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }'
-  lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=/usr/lib:/lib
-  fi
-   ;;
-esac
-fi
-
-  aix_libpath=$lt_cv_aix_libpath_
-fi
-
-	 hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath"
-	  # Warning - without using the other run time loading flags,
-	  # -berok will link without error, but may produce a broken library.
-	  no_undefined_flag=' $wl-bernotok'
-	  allow_undefined_flag=' $wl-berok'
-	  if test yes = "$with_gnu_ld"; then
-	    # We only use this code for GNU lds that support --whole-archive.
-	    whole_archive_flag_spec='$wl--whole-archive$convenience $wl--no-whole-archive'
-	  else
-	    # Exported symbols can be pulled into shared objects from archives
-	    whole_archive_flag_spec='$convenience'
-	  fi
-	  archive_cmds_need_lc=yes
-	  archive_expsym_cmds='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d'
-	  # -brtl affects multiple linker settings, -berok does not and is overridden later
-	  compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([, ]\\)%-berok\\1%g"`'
-	  if test svr4 != "$with_aix_soname"; then
-	    # This is similar to how AIX traditionally builds its shared libraries.
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname'
-	  fi
-	  if test aix != "$with_aix_soname"; then
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp'
-	  else
-	    # used by -dlpreopen to get the symbols
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$MV  $output_objdir/$realname.d/$soname $output_objdir'
-	  fi
-	  archive_expsym_cmds="$archive_expsym_cmds"'~$RM -r $output_objdir/$realname.d'
-	fi
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            archive_expsym_cmds=''
-        ;;
-      m68k)
-            archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            hardcode_libdir_flag_spec='-L$libdir'
-            hardcode_minus_L=yes
-        ;;
-      esac
-      ;;
-
-    bsdi[45]*)
-      export_dynamic_flag_spec=-rdynamic
-      ;;
-
-    cygwin* | mingw* | windows* | pw32* | cegcc*)
-      # When not using gcc, we currently assume that we are using
-      # Microsoft Visual C++ or Intel C++ Compiler.
-      # hardcode_libdir_flag_spec is actually meaningless, as there is
-      # no search path for DLLs.
-      case $cc_basename in
-      cl* | icl*)
-	# Native MSVC or ICC
-	hardcode_libdir_flag_spec=' '
-	allow_undefined_flag=unsupported
-	always_export_symbols=yes
-	file_list_spec='@'
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	archive_cmds='$CC -Fe$output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames='
-	archive_expsym_cmds='if   test DEF = "`$SED -n     -e '\''s/^[	 ]*//'\''     -e '\''/^\(;.*\)*$/d'\''     -e '\''s/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p'\''     -e q     $export_symbols`" ; then
-            cp "$export_symbols" "$output_objdir/$soname.def";
-            echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp";
-          else
-            $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp;
-          fi~
-          $CC -Fe$tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~
-          linknames='
-	# The linker will not automatically build a static lib if we build a DLL.
-	# _LT_TAGVAR(old_archive_from_new_cmds, )='true'
-	enable_shared_with_static_runtimes=yes
-	exclude_expsyms='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*'
-	export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1,DATA/'\'' | $SED -e '\''/^[AITW][ ]/s/.*[ ]//'\'' | sort | uniq > $export_symbols'
-	# Don't use ranlib
-	old_postinstall_cmds='chmod 644 $oldlib'
-	postlink_cmds='lt_outputfile="@OUTPUT@"~
-          lt_tool_outputfile="@TOOL_OUTPUT@"~
-          case $lt_outputfile in
-            *.exe|*.EXE) ;;
-            *)
-              lt_outputfile=$lt_outputfile.exe
-              lt_tool_outputfile=$lt_tool_outputfile.exe
-              ;;
-          esac~
-          if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then
-            $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1;
-            $RM "$lt_outputfile.manifest";
-          fi'
-	;;
-      *)
-	# Assume MSVC and ICC wrapper
-	hardcode_libdir_flag_spec=' '
-	allow_undefined_flag=unsupported
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	archive_cmds='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames='
-	# The linker will automatically build a .lib file if we build a DLL.
-	old_archive_from_new_cmds='true'
-	# FIXME: Should let the user specify the lib program.
-	old_archive_cmds='lib -OUT:$oldlib$oldobjs$old_deplibs'
-	enable_shared_with_static_runtimes=yes
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-
-
-  archive_cmds_need_lc=no
-  hardcode_direct=no
-  hardcode_automatic=yes
-  hardcode_shlibpath_var=unsupported
-  if test yes = "$lt_cv_ld_force_load"; then
-    whole_archive_flag_spec='`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`'
-
-  else
-    whole_archive_flag_spec=''
-  fi
-  link_all_deplibs=yes
-  allow_undefined_flag=$_lt_dar_allow_undefined
-  case $cc_basename in
-     ifort*|nagfor*) _lt_dar_can_shared=yes ;;
-     *) _lt_dar_can_shared=$GCC ;;
-  esac
-  if test yes = "$_lt_dar_can_shared"; then
-    output_verbose_link_cmd=func_echo_all
-    archive_cmds="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil"
-    module_cmds="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil"
-    archive_expsym_cmds="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil"
-    module_expsym_cmds="$SED -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil"
-
-  else
-  ld_shlibs=no
-  fi
-
-      ;;
-
-    dgux*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_shlibpath_var=no
-      ;;
-
-    # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor
-    # support.  Future versions do this automatically, but an explicit c++rt0.o
-    # does not break anything, and helps significantly (at the cost of a little
-    # extra space).
-    freebsd2.2*)
-      archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o'
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    # Unfortunately, older versions of FreeBSD 2 do not have this feature.
-    freebsd2.*)
-      archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_direct=yes
-      hardcode_minus_L=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    # FreeBSD 3 and greater uses gcc -shared to do shared libraries.
-    freebsd* | dragonfly* | midnightbsd*)
-      archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    hpux9*)
-      if test yes = "$GCC"; then
-	archive_cmds='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      else
-	archive_cmds='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      fi
-      hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-      hardcode_libdir_separator=:
-      hardcode_direct=yes
-
-      # hardcode_minus_L: Not really in the search PATH,
-      # but as the default location of the library.
-      hardcode_minus_L=yes
-      export_dynamic_flag_spec='$wl-E'
-      ;;
-
-    hpux10*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      if test no = "$with_gnu_ld"; then
-	hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-	hardcode_libdir_separator=:
-	hardcode_direct=yes
-	hardcode_direct_absolute=yes
-	export_dynamic_flag_spec='$wl-E'
-	# hardcode_minus_L: Not really in the search PATH,
-	# but as the default location of the library.
-	hardcode_minus_L=yes
-      fi
-      ;;
-
-    hpux11*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	case $host_cpu in
-	hppa*64*)
-	  archive_cmds='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	  archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	esac
-      else
-	case $host_cpu in
-	hppa*64*)
-	  archive_cmds='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  archive_cmds='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-
-	  # Older versions of the 11.00 compiler do not understand -b yet
-	  # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does)
-	  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC understands -b" >&5
-printf %s "checking if $CC understands -b... " >&6; }
-if test ${lt_cv_prog_compiler__b+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_prog_compiler__b=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS -b"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler__b=yes
-       fi
-     else
-       lt_cv_prog_compiler__b=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler__b" >&5
-printf '%s\n' "$lt_cv_prog_compiler__b" >&6; }
-
-if test yes = "$lt_cv_prog_compiler__b"; then
-    archive_cmds='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-else
-    archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-fi
-
-	  ;;
-	esac
-      fi
-      if test no = "$with_gnu_ld"; then
-	hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-	hardcode_libdir_separator=:
-
-	case $host_cpu in
-	hppa*64*|ia64*)
-	  hardcode_direct=no
-	  hardcode_shlibpath_var=no
-	  ;;
-	*)
-	  hardcode_direct=yes
-	  hardcode_direct_absolute=yes
-	  export_dynamic_flag_spec='$wl-E'
-
-	  # hardcode_minus_L: Not really in the search PATH,
-	  # but as the default location of the library.
-	  hardcode_minus_L=yes
-	  ;;
-	esac
-      fi
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	# Try to use the -exported_symbol ld option, if it does not
-	# work, assume that -exports_file does not work either and
-	# implicitly export all symbols.
-	# This should be the same for all languages, so no per-tag cache variable.
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether the $host_os linker accepts -exported_symbol" >&5
-printf %s "checking whether the $host_os linker accepts -exported_symbol... " >&6; }
-if test ${lt_cv_irix_exported_symbol+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) save_LDFLAGS=$LDFLAGS
-	   LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null"
-	   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int foo (void) { return 0; }
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_irix_exported_symbol=yes
-else case e in #(
-  e) lt_cv_irix_exported_symbol=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-           LDFLAGS=$save_LDFLAGS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_irix_exported_symbol" >&5
-printf '%s\n' "$lt_cv_irix_exported_symbol" >&6; }
-	if test yes = "$lt_cv_irix_exported_symbol"; then
-          archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib'
-	fi
-      else
-	archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      inherit_rpath=yes
-      link_all_deplibs=yes
-      ;;
-
-    linux*)
-      case $cc_basename in
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	ld_shlibs=yes
-	archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	;;
-      esac
-      ;;
-
-    *-mlibc)
-      ;;
-
-    netbsd* | netbsdelf*-gnu)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'  # a.out
-      else
-	archive_cmds='$LD -shared -o $lib $libobjs $deplibs $linker_flags'      # ELF
-      fi
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    newsos6)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_direct=yes
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      hardcode_shlibpath_var=no
-      ;;
-
-    *nto* | *qnx*)
-      ;;
-
-    openbsd*)
-      if test -f /usr/libexec/ld.so; then
-	hardcode_direct=yes
-	hardcode_shlibpath_var=no
-	hardcode_direct_absolute=yes
-	if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-	  archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  archive_expsym_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols'
-	  hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-	  export_dynamic_flag_spec='$wl-E'
-	else
-	  archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-	fi
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    os2*)
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_minus_L=yes
-      allow_undefined_flag=unsupported
-      shrext_cmds=.dll
-      archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      old_archive_from_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      enable_shared_with_static_runtimes=yes
-      file_list_spec='@'
-      ;;
-
-    osf3*)
-      if test yes = "$GCC"; then
-	allow_undefined_flag=' $wl-expect_unresolved $wl\*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-      else
-	allow_undefined_flag=' -expect_unresolved \*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      ;;
-
-    osf4* | osf5*)	# as osf3* with the addition of -msym flag
-      if test yes = "$GCC"; then
-	allow_undefined_flag=' $wl-expect_unresolved $wl\*'
-	archive_cmds='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      else
-	allow_undefined_flag=' -expect_unresolved \*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	archive_expsym_cmds='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~
-          $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp'
-
-	# Both c and cxx compiler support -rpath directly
-	hardcode_libdir_flag_spec='-rpath $libdir'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_separator=:
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      no_undefined_flag=' -z defs'
-      if test yes = "$GCC"; then
-	wlarc='$wl'
-	archive_cmds='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-          $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-      else
-	case `$CC -V 2>&1` in
-	*"Compilers 5.0"*)
-	  wlarc=''
-	  archive_cmds='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp'
-	  ;;
-	*)
-	  wlarc='$wl'
-	  archive_cmds='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags'
-	  archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-	  ;;
-	esac
-      fi
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_shlibpath_var=no
-      case $host_os in
-      solaris2.[0-5] | solaris2.[0-5].*) ;;
-      *)
-	# The compiler driver will combine and reorder linker options,
-	# but understands '-z linker_flag'.  GCC discards it without '$wl',
-	# but is careful enough not to reorder.
-	# Supported since Solaris 2.6 (maybe 2.5.1?)
-	if test yes = "$GCC"; then
-	  whole_archive_flag_spec='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract'
-	else
-	  whole_archive_flag_spec='-z allextract$convenience -z defaultextract'
-	fi
-	;;
-      esac
-      link_all_deplibs=yes
-      ;;
-
-    sunos4*)
-      if test sequent = "$host_vendor"; then
-	# Use $CC to link under sequent, because it throws in some extra .o
-	# files that make .init and .fini sections work.
-	archive_cmds='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_direct=yes
-      hardcode_minus_L=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    sysv4)
-      case $host_vendor in
-	sni)
-	  archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  hardcode_direct=yes # is this really true???
-	;;
-	siemens)
-	  ## LD is ld it makes a PLAMLIB
-	  ## CC just makes a GrossModule.
-	  archive_cmds='$LD -G -o $lib $libobjs $deplibs $linker_flags'
-	  reload_cmds='$CC -r -o $output$reload_objs'
-	  hardcode_direct=no
-        ;;
-	motorola)
-	  archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  hardcode_direct=no #Motorola manual says yes, but my tests say they lie
-	;;
-      esac
-      runpath_var='LD_RUN_PATH'
-      hardcode_shlibpath_var=no
-      ;;
-
-    sysv4.3*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_shlibpath_var=no
-      export_dynamic_flag_spec='-Bexport'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	hardcode_shlibpath_var=no
-	runpath_var=LD_RUN_PATH
-	hardcode_runpath_var=yes
-	ld_shlibs=yes
-      fi
-      ;;
-
-    sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[01].[10]* | unixware7* | sco3.2v5.0.[024]*)
-      no_undefined_flag='$wl-z,text'
-      archive_cmds_need_lc=no
-      hardcode_shlibpath_var=no
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6*)
-      # Note: We CANNOT use -z defs as we might desire, because we do not
-      # link with -lc, and that would cause any symbols used from libc to
-      # always be unresolved, which means just about no library would
-      # ever link correctly.  If we're not using GNU ld we use -z text
-      # though, which does catch some bad symbols but isn't as heavy-handed
-      # as -z defs.
-      no_undefined_flag='$wl-z,text'
-      allow_undefined_flag='$wl-z,nodefs'
-      archive_cmds_need_lc=no
-      hardcode_shlibpath_var=no
-      hardcode_libdir_flag_spec='$wl-R,$libdir'
-      hardcode_libdir_separator=':'
-      link_all_deplibs=yes
-      export_dynamic_flag_spec='$wl-Bexport'
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    uts4*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_shlibpath_var=no
-      ;;
-
-    *)
-      ld_shlibs=no
-      ;;
-    esac
-
-    if test sni = "$host_vendor"; then
-      case $host in
-      sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*)
-	export_dynamic_flag_spec='$wl-Blargedynsym'
-	;;
-      esac
-    fi
-  fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ld_shlibs" >&5
-printf '%s\n' "$ld_shlibs" >&6; }
-test no = "$ld_shlibs" && can_build_shared=no
-
-with_gnu_ld=$with_gnu_ld
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-#
-# Do we need to explicitly link libc?
-#
-case "x$archive_cmds_need_lc" in
-x|xyes)
-  # Assume -lc should be added
-  archive_cmds_need_lc=yes
-
-  if test yes,yes = "$GCC,$enable_shared"; then
-    case $archive_cmds in
-    *'~'*)
-      # FIXME: we may have to deal with multi-command sequences.
-      ;;
-    '$CC '*)
-      # Test whether the compiler implicitly links with -lc since on some
-      # systems, -lgcc has to come before -lc. If gcc already passes -lc
-      # to ld, don't add -lc before -lgcc.
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether -lc should be explicitly linked in" >&5
-printf %s "checking whether -lc should be explicitly linked in... " >&6; }
-if test ${lt_cv_archive_cmds_need_lc+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) $RM conftest*
-	echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-	if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } 2>conftest.err; then
-	  soname=conftest
-	  lib=conftest
-	  libobjs=conftest.$ac_objext
-	  deplibs=
-	  wl=$lt_prog_compiler_wl
-	  pic_flag=$lt_prog_compiler_pic
-	  compiler_flags=-v
-	  linker_flags=-v
-	  verstring=
-	  output_objdir=.
-	  libname=conftest
-	  lt_save_allow_undefined_flag=$allow_undefined_flag
-	  allow_undefined_flag=
-	  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1\""; } >&5
-  (eval $archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-	  then
-	    lt_cv_archive_cmds_need_lc=no
-	  else
-	    lt_cv_archive_cmds_need_lc=yes
-	  fi
-	  allow_undefined_flag=$lt_save_allow_undefined_flag
-	else
-	  cat conftest.err 1>&5
-	fi
-	$RM conftest*
-	 ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_archive_cmds_need_lc" >&5
-printf '%s\n' "$lt_cv_archive_cmds_need_lc" >&6; }
-      archive_cmds_need_lc=$lt_cv_archive_cmds_need_lc
-      ;;
-    esac
-  fi
-  ;;
-esac
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking dynamic linker characteristics" >&5
-printf %s "checking dynamic linker characteristics... " >&6; }
-
-if test yes = "$GCC"; then
-  case $host_os in
-    darwin*) lt_awk_arg='/^libraries:/,/LR/' ;;
-    *) lt_awk_arg='/^libraries:/' ;;
-  esac
-  case $host_os in
-    mingw* | windows* | cegcc*) lt_sed_strip_eq='s|=\([A-Za-z]:\)|\1|g' ;;
-    *) lt_sed_strip_eq='s|=/|/|g' ;;
-  esac
-  lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq`
-  case $lt_search_path_spec in
-  *\;*)
-    # if the path contains ";" then we assume it to be the separator
-    # otherwise default to the standard path separator (i.e. ":") - it is
-    # assumed that no part of a normal pathname contains ";" but that should
-    # okay in the real world where ";" in dirpaths is itself problematic.
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'`
-    ;;
-  *)
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"`
-    ;;
-  esac
-  # Ok, now we have the path, separated by spaces, we can step through it
-  # and add multilib dir if necessary...
-  lt_tmp_lt_search_path_spec=
-  lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null`
-  # ...but if some path component already ends with the multilib dir we assume
-  # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer).
-  case "$lt_multi_os_dir; $lt_search_path_spec " in
-  "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*)
-    lt_multi_os_dir=
-    ;;
-  esac
-  for lt_sys_path in $lt_search_path_spec; do
-    if test -d "$lt_sys_path$lt_multi_os_dir"; then
-      lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir"
-    elif test -n "$lt_multi_os_dir"; then
-      test -d "$lt_sys_path" && \
-	lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path"
-    fi
-  done
-  lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk '
-BEGIN {RS = " "; FS = "/|\n";} {
-  lt_foo = "";
-  lt_count = 0;
-  for (lt_i = NF; lt_i > 0; lt_i--) {
-    if ($lt_i != "" && $lt_i != ".") {
-      if ($lt_i == "..") {
-        lt_count++;
-      } else {
-        if (lt_count == 0) {
-          lt_foo = "/" $lt_i lt_foo;
-        } else {
-          lt_count--;
-        }
-      }
-    }
-  }
-  if (lt_foo != "") { lt_freq[lt_foo]++; }
-  if (lt_freq[lt_foo] == 1) { print lt_foo; }
-}'`
-  # AWK program above erroneously prepends '/' to C:/dos/paths
-  # for these hosts.
-  case $host_os in
-    mingw* | windows* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\
-      $SED 's|/\([A-Za-z]:\)|\1|g'` ;;
-  esac
-  sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP`
-else
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-fi
-library_names_spec=
-libname_spec='lib$name'
-soname_spec=
-shrext_cmds=.so
-postinstall_cmds=
-postuninstall_cmds=
-finish_cmds=
-finish_eval=
-shlibpath_var=
-shlibpath_overrides_runpath=unknown
-version_type=none
-dynamic_linker="$host_os ld.so"
-sys_lib_dlsearch_path_spec="/lib /usr/lib"
-need_lib_prefix=unknown
-hardcode_into_libs=no
-
-# when you set need_version to no, make sure it does not cause -set_version
-# flags to be left without arguments
-need_version=unknown
-
-
-
-case $host_os in
-aix3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname.a'
-  shlibpath_var=LIBPATH
-
-  # AIX 3 has no versioning support, so we append a major version to the name.
-  soname_spec='$libname$release$shared_ext$major'
-  ;;
-
-aix[4-9]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  hardcode_into_libs=yes
-  if test ia64 = "$host_cpu"; then
-    # AIX 5 supports IA64
-    library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext'
-    shlibpath_var=LD_LIBRARY_PATH
-  else
-    # With GCC up to 2.95.x, collect2 would create an import file
-    # for dependence libraries.  The import file would start with
-    # the line '#! .'.  This would cause the generated library to
-    # depend on '.', always an invalid library.  This was fixed in
-    # development snapshots of GCC prior to 3.0.
-    case $host_os in
-      aix4 | aix4.[01] | aix4.[01].*)
-      if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)'
-	   echo ' yes '
-	   echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then
-	:
-      else
-	can_build_shared=no
-      fi
-      ;;
-    esac
-    # Using Import Files as archive members, it is possible to support
-    # filename-based versioning of shared library archives on AIX. While
-    # this would work for both with and without runtime linking, it will
-    # prevent static linking of such archives. So we do filename-based
-    # shared library versioning with .so extension only, which is used
-    # when both runtime linking and shared linking is enabled.
-    # Unfortunately, runtime linking may impact performance, so we do
-    # not want this to be the default eventually. Also, we use the
-    # versioned .so libs for executables only if there is the -brtl
-    # linker flag in LDFLAGS as well, or --enable-aix-soname=svr4 only.
-    # To allow for filename-based versioning support, we need to create
-    # libNAME.so.V as an archive file, containing:
-    # *) an Import File, referring to the versioned filename of the
-    #    archive as well as the shared archive member, telling the
-    #    bitwidth (32 or 64) of that shared object, and providing the
-    #    list of exported symbols of that shared object, eventually
-    #    decorated with the 'weak' keyword
-    # *) the shared object with the F_LOADONLY flag set, to really avoid
-    #    it being seen by the linker.
-    # At run time we better use the real file rather than another symlink,
-    # but for link time we create the symlink libNAME.so -> libNAME.so.V
-
-    case $with_aix_soname,$aix_use_runtimelinking in
-    # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct
-    # soname into executable. Probably we can add versioning support to
-    # collect2, so additional links can be useful in future.
-    aix,yes) # traditional libtool
-      dynamic_linker='AIX unversionable lib.so'
-      # If using run time linking (on AIX 4.2 or later) use lib<name>.so
-      # instead of lib<name>.a to let people know that these are not
-      # typical AIX shared libraries.
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      ;;
-    aix,no) # traditional AIX only
-      dynamic_linker='AIX lib.a(lib.so.V)'
-      # We preserve .a as extension for shared libraries through AIX4.2
-      # and later when we are not doing run time linking.
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      ;;
-    svr4,*) # full svr4 only
-      dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o)"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,yes) # both, prefer svr4
-      dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o), lib.a(lib.so.V)"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # unpreferred sharedlib libNAME.a needs extra handling
-      postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"'
-      postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,no) # both, prefer aix
-      dynamic_linker="AIX lib.a(lib.so.V), lib.so.V($shared_archive_member_spec.o)"
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling
-      postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)'
-      postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"'
-      ;;
-    esac
-    shlibpath_var=LIBPATH
-  fi
-  ;;
-
-amigaos*)
-  case $host_cpu in
-  powerpc)
-    # Since July 2007 AmigaOS4 officially supports .so libraries.
-    # When compiling the executable, add -use-dynld -Lsobjs: to the compileline.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    ;;
-  m68k)
-    library_names_spec='$libname.ixlibrary $libname.a'
-    # Create ${libname}_ixlibrary.a entries in /sys/libs.
-    finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([^/]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done'
-    ;;
-  esac
-  ;;
-
-beos*)
-  library_names_spec='$libname$shared_ext'
-  dynamic_linker="$host_os ld.so"
-  shlibpath_var=LIBRARY_PATH
-  ;;
-
-bsdi[45]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib"
-  # the default ld.so.conf also contains /usr/contrib/lib and
-  # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow
-  # libtool to hard-code these into programs
-  ;;
-
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-
-  case $GCC,$cc_basename in
-  yes,*)
-    # gcc
-    library_names_spec='$libname.dll.a'
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    # If user builds GCC with multilib enabled,
-    # it should just install on $(libdir)
-    # not on $(libdir)/../bin or 32 bits dlls would override 64 bit ones.
-    if test xyes = x"$multilib"; then
-      postinstall_cmds='base_file=`basename \$file`~
-        dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-        dldir=$destdir/`dirname \$dlpath`~
-        $install_prog $dir/$dlname $destdir/$dlname~
-        chmod a+x $destdir/$dlname~
-        if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-          eval '\''$striplib $destdir/$dlname'\'' || exit \$?;
-        fi'
-    else
-      postinstall_cmds='base_file=`basename \$file`~
-        dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-        dldir=$destdir/`dirname \$dlpath`~
-        test -d \$dldir || mkdir -p \$dldir~
-        $install_prog $dir/$dlname \$dldir/$dlname~
-        chmod a+x \$dldir/$dlname~
-        if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-          eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-        fi'
-    fi
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-
-    case $host_os in
-    cygwin*)
-      # Cygwin DLLs use 'cyg' prefix rather than 'lib'
-      soname_spec='`echo $libname | $SED -e 's/^lib/cyg/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-
-      sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api"
-      ;;
-    mingw* | windows* | cegcc*)
-      # MinGW DLLs use traditional 'lib' prefix
-      soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-      ;;
-    pw32*)
-      # pw32 DLLs use 'pw' prefix rather than 'lib'
-      library_names_spec='`echo $libname | $SED -e 's/^lib/pw/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-      ;;
-    esac
-    dynamic_linker='Win32 ld.exe'
-    ;;
-
-  *,cl* | *,icl*)
-    # Native MSVC or ICC
-    libname_spec='$name'
-    soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-    library_names_spec='$libname.dll.lib'
-
-    case $build_os in
-    mingw* | windows*)
-      sys_lib_search_path_spec=
-      lt_save_ifs=$IFS
-      IFS=';'
-      for lt_path in $LIB
-      do
-        IFS=$lt_save_ifs
-        # Let DOS variable expansion print the short 8.3 style file name.
-        lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"`
-        sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path"
-      done
-      IFS=$lt_save_ifs
-      # Convert to MSYS style.
-      sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's|\\\\|/|g' -e 's| \\([a-zA-Z]\\):| /\\1|g' -e 's|^ ||'`
-      ;;
-    cygwin*)
-      # Convert to unix form, then to dos form, then back to unix form
-      # but this time dos style (no spaces!) so that the unix form looks
-      # like /cygdrive/c/PROGRA~1:/cygdr...
-      sys_lib_search_path_spec=`cygpath --path --unix "$LIB"`
-      sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null`
-      sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      ;;
-    *)
-      sys_lib_search_path_spec=$LIB
-      if $ECHO "$sys_lib_search_path_spec" | $GREP ';[c-zC-Z]:/' >/dev/null; then
-        # It is most probably a Windows format PATH.
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'`
-      else
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      fi
-      # FIXME: find the short name or the path components, as spaces are
-      # common. (e.g. "Program Files" -> "PROGRA~1")
-      ;;
-    esac
-
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    postinstall_cmds='base_file=`basename \$file`~
-      dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-      dldir=$destdir/`dirname \$dlpath`~
-      test -d \$dldir || mkdir -p \$dldir~
-      $install_prog $dir/$dlname \$dldir/$dlname'
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-    dynamic_linker='Win32 link.exe'
-    ;;
-
-  *)
-    # Assume MSVC and ICC wrapper
-    library_names_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext $libname.lib'
-    dynamic_linker='Win32 ld.exe'
-    ;;
-  esac
-  # FIXME: first we should search . and the directory the executable is in
-  shlibpath_var=PATH
-  ;;
-
-darwin* | rhapsody*)
-  dynamic_linker="$host_os dyld"
-  version_type=darwin
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$major$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$major$shared_ext'
-  shlibpath_overrides_runpath=yes
-  shlibpath_var=DYLD_LIBRARY_PATH
-  shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`'
-
-  sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib"
-  sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib'
-  ;;
-
-dgux*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  # DragonFly does not have aout.  When/if they implement a new
-  # versioning mechanism, adjust this.
-  if test -x /usr/bin/objformat; then
-    objformat=`/usr/bin/objformat`
-  else
-    case $host_os in
-    freebsd[23].*) objformat=aout ;;
-    *) objformat=elf ;;
-    esac
-  fi
-  version_type=freebsd-$objformat
-  case $version_type in
-    freebsd-elf*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      soname_spec='$libname$release$shared_ext$major'
-      need_version=no
-      need_lib_prefix=no
-      ;;
-    freebsd-*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-      need_version=yes
-      ;;
-  esac
-  case $host_cpu in
-    powerpc64)
-      # On FreeBSD bi-arch platforms, a different variable is used for 32-bit
-      # binaries.  See <https://man.freebsd.org/cgi/man.cgi?query=ld.so>.
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int test_pointer_size[sizeof (void *) - 5];
-
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  shlibpath_var=LD_LIBRARY_PATH
-else case e in #(
-  e) shlibpath_var=LD_32_LIBRARY_PATH ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-      ;;
-    *)
-      shlibpath_var=LD_LIBRARY_PATH
-      ;;
-  esac
-  case $host_os in
-  freebsd2.*)
-    shlibpath_overrides_runpath=yes
-    ;;
-  freebsd3.[01]* | freebsdelf3.[01]*)
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  freebsd3.[2-9]* | freebsdelf3.[2-9]* | \
-  freebsd4.[0-5] | freebsdelf4.[0-5] | freebsd4.1.1 | freebsdelf4.1.1)
-    shlibpath_overrides_runpath=no
-    hardcode_into_libs=yes
-    ;;
-  *) # from 4.6 on, and DragonFly
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  esac
-  ;;
-
-haiku*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  dynamic_linker="$host_os runtime_loader"
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec='/boot/system/non-packaged/develop/lib /boot/system/develop/lib'
-  sys_lib_dlsearch_path_spec='/boot/home/config/non-packaged/lib /boot/home/config/lib /boot/system/non-packaged/lib /boot/system/lib'
-  hardcode_into_libs=no
-  ;;
-
-hpux9* | hpux10* | hpux11*)
-  # Give a soname corresponding to the major version so that dld.sl refuses to
-  # link against other versions.
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  case $host_cpu in
-  ia64*)
-    shrext_cmds='.so'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.so"
-    shlibpath_var=LD_LIBRARY_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    if test 32 = "$HPUX_IA64_MODE"; then
-      sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux32
-    else
-      sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux64
-    fi
-    ;;
-  hppa*64*)
-    shrext_cmds='.sl'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64"
-    sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-    ;;
-  *)
-    shrext_cmds='.sl'
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=SHLIB_PATH
-    shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    ;;
-  esac
-  # HP-UX runs *really* slowly unless shared libraries are mode 555, ...
-  postinstall_cmds='chmod 555 $lib'
-  # or fails outright, so override atomically:
-  install_override_mode=555
-  ;;
-
-interix[3-9]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $host_os in
-    nonstopux*) version_type=nonstopux ;;
-    *)
-	if test yes = "$lt_cv_prog_gnu_ld"; then
-		version_type=linux # correct to gnu/linux during the next big refactor
-	else
-		version_type=irix
-	fi ;;
-  esac
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext'
-  case $host_os in
-  irix5* | nonstopux*)
-    libsuff= shlibsuff=
-    ;;
-  *)
-    case $LD in # libtool.m4 will add one of these switches to LD
-    *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ")
-      libsuff= shlibsuff= libmagic=32-bit;;
-    *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ")
-      libsuff=32 shlibsuff=N32 libmagic=N32;;
-    *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ")
-      libsuff=64 shlibsuff=64 libmagic=64-bit;;
-    *) libsuff= shlibsuff= libmagic=never-match;;
-    esac
-    ;;
-  esac
-  shlibpath_var=LD_LIBRARY${shlibsuff}_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff"
-  sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff"
-  hardcode_into_libs=yes
-  ;;
-
-# No shared lib support for Linux oldld, aout, or coff.
-linux*oldld* | linux*aout* | linux*coff*)
-  dynamic_linker=no
-  ;;
-
-linux*android*)
-  version_type=none # Android doesn't support versioned libraries.
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  dynamic_linker='Android linker'
-  # -rpath works at least for libraries that are not overridden by
-  # libraries installed in system locations.
-  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-
-  # Some binutils ld are patched to set DT_RUNPATH
-  if test ${lt_cv_shlibpath_overrides_runpath+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_shlibpath_overrides_runpath=no
-    save_LDFLAGS=$LDFLAGS
-    save_libdir=$libdir
-    eval "libdir=/foo; wl=\"$lt_prog_compiler_wl\"; \
-	 LDFLAGS=\"\$LDFLAGS $hardcode_libdir_flag_spec\""
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  if  ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null
-then :
-  lt_cv_shlibpath_overrides_runpath=yes
-fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-    LDFLAGS=$save_LDFLAGS
-    libdir=$save_libdir
-     ;;
-esac
-fi
-
-  shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  # Ideally, we could use ldconfig to report *all* directories which are
-  # searched for libraries, however this is still not possible.  Aside from not
-  # being certain /sbin/ldconfig is available, command
-  # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64,
-  # even though it is searched at run-time.  Try to do the best guess by
-  # appending ld.so.conf contents (and includes) to the search path.
-  if test -f /etc/ld.so.conf; then
-    lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \$2)); skip = 1; } { if (!skip) print \$0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[	 ]*hwcap[	 ]/d;s/[:,	]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '`
-    sys_lib_dlsearch_path_spec="/lib /usr/lib $lt_ld_extra"
-  fi
-
-  # We used to test for /lib/ld.so.1 and disable shared libraries on
-  # powerpc, because MkLinux only supported shared libraries with the
-  # GNU dynamic linker.  Since this was broken with cross compilers,
-  # most powerpc-linux boxes support dynamic linking these days and
-  # people can always --disable-shared, the test was removed, and we
-  # assume the GNU/Linux dynamic linker is in use.
-  dynamic_linker='GNU/Linux ld.so'
-  ;;
-
-netbsdelf*-gnu)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='NetBSD ld.elf_so'
-  ;;
-
-netbsd*)
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-    finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-    dynamic_linker='NetBSD (a.out) ld.so'
-  else
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    dynamic_linker='NetBSD ld.elf_so'
-  fi
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  ;;
-
-*-mlibc)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='mlibc ld.so'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-newsos6)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-*nto* | *qnx*)
-  version_type=qnx
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='ldqnx.so'
-  ;;
-
-openbsd*)
-  version_type=sunos
-  sys_lib_dlsearch_path_spec=/usr/lib
-  need_lib_prefix=no
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    need_version=no
-  else
-    need_version=yes
-  fi
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-os2*)
-  libname_spec='$name'
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-  # OS/2 can only load a DLL with a base name of 8 characters or less.
-  soname_spec='`test -n "$os2dllname" && libname="$os2dllname";
-    v=$($ECHO $release$versuffix | tr -d .-);
-    n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _);
-    $ECHO $n$v`$shared_ext'
-  library_names_spec='${libname}_dll.$libext'
-  dynamic_linker='OS/2 ld.exe'
-  shlibpath_var=BEGINLIBPATH
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  postinstall_cmds='base_file=`basename \$file`~
-    dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~
-    dldir=$destdir/`dirname \$dlpath`~
-    test -d \$dldir || mkdir -p \$dldir~
-    $install_prog $dir/$dlname \$dldir/$dlname~
-    chmod a+x \$dldir/$dlname~
-    if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-      eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-    fi'
-  postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~
-    dlpath=$dir/\$dldll~
-    $RM \$dlpath'
-  ;;
-
-osf3* | osf4* | osf5*)
-  version_type=osf
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  ;;
-
-rdos*)
-  dynamic_linker=no
-  ;;
-
-serenity*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  dynamic_linker='SerenityOS LibELF'
-  ;;
-
-solaris*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  # ldd complains unless libraries are executable
-  postinstall_cmds='chmod +x $lib'
-  ;;
-
-sunos4*)
-  version_type=sunos
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  if test yes = "$with_gnu_ld"; then
-    need_lib_prefix=no
-  fi
-  need_version=yes
-  ;;
-
-sysv4 | sysv4.3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  case $host_vendor in
-    sni)
-      shlibpath_overrides_runpath=no
-      need_lib_prefix=no
-      runpath_var=LD_RUN_PATH
-      ;;
-    siemens)
-      need_lib_prefix=no
-      ;;
-    motorola)
-      need_lib_prefix=no
-      need_version=no
-      shlibpath_overrides_runpath=no
-      sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib'
-      ;;
-  esac
-  ;;
-
-sysv4*MP*)
-  if test -d /usr/nec; then
-    version_type=linux # correct to gnu/linux during the next big refactor
-    library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext'
-    soname_spec='$libname$shared_ext.$major'
-    shlibpath_var=LD_LIBRARY_PATH
-  fi
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  version_type=sco
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  if test yes = "$with_gnu_ld"; then
-    sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib'
-  else
-    sys_lib_search_path_spec='/usr/ccs/lib /usr/lib'
-    case $host_os in
-      sco3.2v5*)
-        sys_lib_search_path_spec="$sys_lib_search_path_spec /lib"
-	;;
-    esac
-  fi
-  sys_lib_dlsearch_path_spec='/usr/lib'
-  ;;
-
-tpf*)
-  # TPF is a cross-target only.  Preferred cross-host = GNU/Linux.
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-uts4*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-emscripten*)
-  version_type=none
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  dynamic_linker="Emscripten linker"
-  lt_prog_compiler_wl=
-lt_prog_compiler_pic=
-lt_prog_compiler_static=
-
-
-  if test yes = "$GCC"; then
-    lt_prog_compiler_wl='-Wl,'
-    lt_prog_compiler_static='-static'
-
-    case $host_os in
-      aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            lt_prog_compiler_pic='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            lt_prog_compiler_pic='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      ;;
-
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      lt_prog_compiler_static=
-      ;;
-
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='-fPIC'
-	;;
-      esac
-      ;;
-
-    interix[3-9]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-
-    msdosdjgpp*)
-      # Just because we use GCC doesn't mean we suddenly get shared libraries
-      # on systems that don't support them.
-      lt_prog_compiler_can_build_shared=no
-      enable_shared=no
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic=-Kconform_pic
-      fi
-      ;;
-
-    *)
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-    esac
-
-    case $cc_basename in
-    nvcc*) # Cuda Compiler Driver 2.2
-      lt_prog_compiler_wl='-Xlinker '
-      if test -n "$lt_prog_compiler_pic"; then
-        lt_prog_compiler_pic="-Xcompiler $lt_prog_compiler_pic"
-      fi
-      ;;
-    esac
-  else
-    # PORTME Check for flag to pass linker flags through the system compiler.
-    case $host_os in
-    aix*)
-      lt_prog_compiler_wl='-Wl,'
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      else
-	lt_prog_compiler_static='-bnso -bI:/lib/syscalls.exp'
-      fi
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      case $cc_basename in
-      nagfor*)
-        # NAG Fortran compiler
-        lt_prog_compiler_wl='-Wl,-Wl,,'
-        lt_prog_compiler_pic='-PIC'
-        lt_prog_compiler_static='-Bstatic'
-        ;;
-      esac
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    hpux9* | hpux10* | hpux11*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
-      # not for PA HP-UX.
-      case $host_cpu in
-      hppa*64*|ia64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='+Z'
-	;;
-      esac
-      # Is there a better lt_prog_compiler_static that works with the bundled CC?
-      lt_prog_compiler_static='$wl-a ${wl}archive'
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC (with -KPIC) is the default.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-      case $cc_basename in
-      # old Intel for x86_64, which still supported -KPIC.
-      ecc*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-KPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      *flang* | ftn | f18* | f95*)
-        # Flang compiler.
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # icc used to be incompatible with GCC.
-      # ICC 10 doesn't accept -KPIC any more.
-      icc* | ifort*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # Lahey Fortran 8.1.
-      lf95*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='--shared'
-	lt_prog_compiler_static='--static'
-	;;
-      nagfor*)
-	# NAG Fortran compiler
-	lt_prog_compiler_wl='-Wl,-Wl,,'
-	lt_prog_compiler_pic='-PIC'
-	lt_prog_compiler_static='-Bstatic'
-	;;
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-	;;
-      pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
-        # Portland Group compilers (*not* the Pentium gcc compiler,
-	# which looks to be a dead project)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fpic'
-	lt_prog_compiler_static='-Bstatic'
-        ;;
-      ccc*)
-        lt_prog_compiler_wl='-Wl,'
-        # All Alpha code is PIC.
-        lt_prog_compiler_static='-non_shared'
-        ;;
-      xl* | bgxl* | bgf* | mpixl*)
-	# IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-qpic'
-	lt_prog_compiler_static='-qstaticlink'
-	;;
-      *)
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [1-7].* | *Sun*Fortran*\ 8.[0-3]*)
-	  # Sun Fortran 8.3 passes all unrecognized flags to the linker
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl=''
-	  ;;
-	*Sun\ F* | *Sun*Fortran*)
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Qoption ld '
-	  ;;
-	*Sun\ C*)
-	  # Sun C 5.9
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Wl,'
-	  ;;
-        *Intel*\ [CF]*Compiler*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fPIC'
-	  lt_prog_compiler_static='-static'
-	  ;;
-	*Portland\ Group*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fpic'
-	  lt_prog_compiler_static='-Bstatic'
-	  ;;
-	esac
-	;;
-      esac
-      ;;
-
-    newsos6)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *-mlibc)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-fPIC'
-      lt_prog_compiler_static='-static'
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    osf3* | osf4* | osf5*)
-      lt_prog_compiler_wl='-Wl,'
-      # All OSF/1 code is PIC.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    rdos*)
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      case $cc_basename in
-      f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
-	lt_prog_compiler_wl='-Qoption ld ';;
-      *)
-	lt_prog_compiler_wl='-Wl,';;
-      esac
-      ;;
-
-    sunos4*)
-      lt_prog_compiler_wl='-Qoption ld '
-      lt_prog_compiler_pic='-PIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4 | sysv4.2uw2* | sysv4.3*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic='-Kconform_pic'
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      ;;
-
-    sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    unicos*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_can_build_shared=no
-      ;;
-
-    uts4*)
-      lt_prog_compiler_pic='-pic'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *)
-      lt_prog_compiler_can_build_shared=no
-      ;;
-    esac
-  fi
-
-case $host_os in
-  # For platforms that do not support PIC, -DPIC is meaningless:
-  *djgpp*)
-    lt_prog_compiler_pic=
-    ;;
-  *)
-    lt_prog_compiler_pic="$lt_prog_compiler_pic -DPIC"
-    ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $compiler option to produce PIC" >&5
-printf %s "checking for $compiler option to produce PIC... " >&6; }
-if test ${lt_cv_prog_compiler_pic+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_prog_compiler_pic=$lt_prog_compiler_pic ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic" >&6; }
-lt_prog_compiler_pic=$lt_cv_prog_compiler_pic
-
-#
-# Check to make sure the PIC flag actually works.
-#
-if test -n "$lt_prog_compiler_pic"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler PIC flag $lt_prog_compiler_pic works" >&5
-printf %s "checking if $compiler PIC flag $lt_prog_compiler_pic works... " >&6; }
-if test ${lt_cv_prog_compiler_pic_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_prog_compiler_pic_works=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$lt_prog_compiler_pic -DPIC"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_pic_works=yes
-     fi
-   fi
-   $RM conftest*
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_pic_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_pic_works"; then
-    case $lt_prog_compiler_pic in
-     "" | " "*) ;;
-     *) lt_prog_compiler_pic=" $lt_prog_compiler_pic" ;;
-     esac
-else
-    lt_prog_compiler_pic=
-     lt_prog_compiler_can_build_shared=no
-fi
-
-fi
-
-
-
-
-
-#
-# Check to make sure the static flag actually works.
-#
-wl=$lt_prog_compiler_wl eval lt_tmp_static_flag=\"$lt_prog_compiler_static\"
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $compiler static flag $lt_tmp_static_flag works" >&5
-printf %s "checking if $compiler static flag $lt_tmp_static_flag works... " >&6; }
-if test ${lt_cv_prog_compiler_static_works+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) lt_cv_prog_compiler_static_works=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $lt_tmp_static_flag"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler_static_works=yes
-       fi
-     else
-       lt_cv_prog_compiler_static_works=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
- ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_static_works" >&5
-printf '%s\n' "$lt_cv_prog_compiler_static_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_static_works"; then
-    :
-else
-    lt_prog_compiler_static=
-fi
-
-
-
-='-fPIC'
-  archive_cmds='$CC -sSIDE_MODULE=2 -shared $libobjs $deplibs $compiler_flags -o $lib'
-  archive_expsym_cmds='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -sSIDE_MODULE=2 -shared $libobjs $deplibs $compiler_flags -o $lib -s EXPORTED_FUNCTIONS=@$output_objdir/$soname.expsym'
-  archive_cmds_need_lc=no
-  no_undefined_flag=
-  ;;
-
-*)
-  dynamic_linker=no
-  ;;
-esac
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $dynamic_linker" >&5
-printf '%s\n' "$dynamic_linker" >&6; }
-test no = "$dynamic_linker" && can_build_shared=no
-
-variables_saved_for_relink="PATH $shlibpath_var $runpath_var"
-if test yes = "$GCC"; then
-  variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH"
-fi
-
-if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then
-  sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec
-fi
-
-if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then
-  sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec
-fi
-
-# remember unaugmented sys_lib_dlsearch_path content for libtool script decls...
-configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec
-
-# ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code
-func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH"
-
-# to be used as default LT_SYS_LIBRARY_PATH value in generated libtool
-configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking how to hardcode library paths into programs" >&5
-printf %s "checking how to hardcode library paths into programs... " >&6; }
-hardcode_action=
-if test -n "$hardcode_libdir_flag_spec" ||
-   test -n "$runpath_var" ||
-   test yes = "$hardcode_automatic"; then
-
-  # We can hardcode non-existent directories.
-  if test no != "$hardcode_direct" &&
-     # If the only mechanism to avoid hardcoding is shlibpath_var, we
-     # have to relink, otherwise we might link with an installed library
-     # when we should be linking with a yet-to-be-installed one
-     ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, )" &&
-     test no != "$hardcode_minus_L"; then
-    # Linking always hardcodes the temporary library directory.
-    hardcode_action=relink
-  else
-    # We can link without hardcoding, and we can hardcode nonexisting dirs.
-    hardcode_action=immediate
-  fi
-else
-  # We cannot hardcode anything, or else we can only hardcode existing
-  # directories.
-  hardcode_action=unsupported
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $hardcode_action" >&5
-printf '%s\n' "$hardcode_action" >&6; }
-
-if test relink = "$hardcode_action" ||
-   test yes = "$inherit_rpath"; then
-  # Fast installation is not supported
-  enable_fast_install=no
-elif test yes = "$shlibpath_overrides_runpath" ||
-     test no = "$enable_shared"; then
-  # Fast installation is not necessary
-  enable_fast_install=needless
-fi
-
-
-
-
-
-
-  if test yes != "$enable_dlopen"; then
-  enable_dlopen=unknown
-  enable_dlopen_self=unknown
-  enable_dlopen_self_static=unknown
-else
-  lt_cv_dlopen=no
-  lt_cv_dlopen_libs=
-
-  case $host_os in
-  beos*)
-    lt_cv_dlopen=load_add_on
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ;;
-
-  mingw* | windows* | pw32* | cegcc*)
-    lt_cv_dlopen=LoadLibrary
-    lt_cv_dlopen_libs=
-    ;;
-
-  cygwin*)
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    ;;
-
-  darwin*)
-    # if libdl is installed we need to link against it
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
-printf %s "checking for dlopen in -ldl... " >&6; }
-if test ${ac_cv_lib_dl_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dl_dlopen=yes
-else case e in #(
-  e) ac_cv_lib_dl_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_dl_dlopen" >&6; }
-if test "x$ac_cv_lib_dl_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl
-else case e in #(
-  e)
-    lt_cv_dlopen=dyld
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-     ;;
-esac
-fi
-
-    ;;
-
-  tpf*)
-    # Don't try to run any link tests for TPF.  We know it's impossible
-    # because TPF is a cross-compiler, and we know how we open DSOs.
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=no
-    ;;
-
-  *)
-    ac_fn_c_check_func "$LINENO" "shl_load" "ac_cv_func_shl_load"
-if test "x$ac_cv_func_shl_load" = xyes
-then :
-  lt_cv_dlopen=shl_load
-else case e in #(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for shl_load in -ldld" >&5
-printf %s "checking for shl_load in -ldld... " >&6; }
-if test ${ac_cv_lib_dld_shl_load+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char shl_load (void);
-int
-main (void)
-{
-return shl_load ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dld_shl_load=yes
-else case e in #(
-  e) ac_cv_lib_dld_shl_load=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_shl_load" >&5
-printf '%s\n' "$ac_cv_lib_dld_shl_load" >&6; }
-if test "x$ac_cv_lib_dld_shl_load" = xyes
-then :
-  lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld
-else case e in #(
-  e) ac_fn_c_check_func "$LINENO" "dlopen" "ac_cv_func_dlopen"
-if test "x$ac_cv_func_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen
-else case e in #(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
-printf %s "checking for dlopen in -ldl... " >&6; }
-if test ${ac_cv_lib_dl_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dl_dlopen=yes
-else case e in #(
-  e) ac_cv_lib_dl_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_dl_dlopen" >&6; }
-if test "x$ac_cv_lib_dl_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl
-else case e in #(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dlopen in -lsvld" >&5
-printf %s "checking for dlopen in -lsvld... " >&6; }
-if test ${ac_cv_lib_svld_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-lsvld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dlopen (void);
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_svld_dlopen=yes
-else case e in #(
-  e) ac_cv_lib_svld_dlopen=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_svld_dlopen" >&5
-printf '%s\n' "$ac_cv_lib_svld_dlopen" >&6; }
-if test "x$ac_cv_lib_svld_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld
-else case e in #(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for dld_link in -ldld" >&5
-printf %s "checking for dld_link in -ldld... " >&6; }
-if test ${ac_cv_lib_dld_dld_link+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.
-   The 'extern "C"' is for builds by C++ compilers;
-   although this is not generally supported in C code supporting it here
-   has little cost and some practical benefit (sr 110532).  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char dld_link (void);
-int
-main (void)
-{
-return dld_link ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dld_dld_link=yes
-else case e in #(
-  e) ac_cv_lib_dld_dld_link=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_dld_link" >&5
-printf '%s\n' "$ac_cv_lib_dld_dld_link" >&6; }
-if test "x$ac_cv_lib_dld_dld_link" = xyes
-then :
-  lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld
-fi
-
-	       ;;
-esac
-fi
-
-	     ;;
-esac
-fi
-
-	   ;;
-esac
-fi
-
-	 ;;
-esac
-fi
-
-       ;;
-esac
-fi
-
-    ;;
-  esac
-
-  if test no = "$lt_cv_dlopen"; then
-    enable_dlopen=no
-  else
-    enable_dlopen=yes
-  fi
-
-  case $lt_cv_dlopen in
-  dlopen)
-    save_CPPFLAGS=$CPPFLAGS
-    test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H"
-
-    save_LDFLAGS=$LDFLAGS
-    wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\"
-
-    save_LIBS=$LIBS
-    LIBS="$lt_cv_dlopen_libs $LIBS"
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether a program can dlopen itself" >&5
-printf %s "checking whether a program can dlopen itself... " >&6; }
-if test ${lt_cv_dlopen_self+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) 	  if test yes = "$cross_compiling"; then :
-  lt_cv_dlopen_self=cross
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord (void) __attribute__((visibility("default")));
-#endif
-
-int fnord (void) { return 42; }
-int main (void)
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}
-_LT_EOF
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&5 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) lt_cv_dlopen_self=yes ;;
-      x$lt_dlneed_uscore) lt_cv_dlopen_self=yes ;;
-      x$lt_dlunknown|x*) lt_cv_dlopen_self=no ;;
-    esac
-  else :
-    # compilation failed
-    lt_cv_dlopen_self=no
-  fi
-fi
-rm -fr conftest*
-
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self" >&5
-printf '%s\n' "$lt_cv_dlopen_self" >&6; }
-
-    if test yes = "$lt_cv_dlopen_self"; then
-      wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether a statically linked program can dlopen itself" >&5
-printf %s "checking whether a statically linked program can dlopen itself... " >&6; }
-if test ${lt_cv_dlopen_self_static+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) 	  if test yes = "$cross_compiling"; then :
-  lt_cv_dlopen_self_static=cross
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord (void) __attribute__((visibility("default")));
-#endif
-
-int fnord (void) { return 42; }
-int main (void)
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}
-_LT_EOF
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&5 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) lt_cv_dlopen_self_static=yes ;;
-      x$lt_dlneed_uscore) lt_cv_dlopen_self_static=yes ;;
-      x$lt_dlunknown|x*) lt_cv_dlopen_self_static=no ;;
-    esac
-  else :
-    # compilation failed
-    lt_cv_dlopen_self_static=no
-  fi
-fi
-rm -fr conftest*
-
-       ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self_static" >&5
-printf '%s\n' "$lt_cv_dlopen_self_static" >&6; }
-    fi
-
-    CPPFLAGS=$save_CPPFLAGS
-    LDFLAGS=$save_LDFLAGS
-    LIBS=$save_LIBS
-    ;;
-  esac
-
-  case $lt_cv_dlopen_self in
-  yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;;
-  *) enable_dlopen_self=unknown ;;
-  esac
-
-  case $lt_cv_dlopen_self_static in
-  yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;;
-  *) enable_dlopen_self_static=unknown ;;
-  esac
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-striplib=
-old_striplib=
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether stripping libraries is possible" >&5
-printf %s "checking whether stripping libraries is possible... " >&6; }
-if test -z "$STRIP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-else
-  if $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then
-    old_striplib="$STRIP --strip-debug"
-    striplib="$STRIP --strip-unneeded"
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-  else
-    case $host_os in
-    darwin*)
-      # FIXME - insert some real tests, host_os isn't really good enough
-      striplib="$STRIP -x"
-      old_striplib="$STRIP -S"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      ;;
-    freebsd*)
-      if $STRIP -V 2>&1 | $GREP "elftoolchain" >/dev/null; then
-        old_striplib="$STRIP --strip-debug"
-        striplib="$STRIP --strip-unneeded"
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-      else
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-      fi
-      ;;
-    *)
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-      ;;
-    esac
-  fi
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-  # Report what library types will actually be built
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if libtool supports shared libraries" >&5
-printf %s "checking if libtool supports shared libraries... " >&6; }
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $can_build_shared" >&5
-printf '%s\n' "$can_build_shared" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build shared libraries" >&5
-printf %s "checking whether to build shared libraries... " >&6; }
-  test no = "$can_build_shared" && enable_shared=no
-
-  # On AIX, shared libraries and static libraries use the same namespace, and
-  # are all built from PIC.
-  case $host_os in
-  aix3*)
-    test yes = "$enable_shared" && enable_static=no
-    if test -n "$RANLIB"; then
-      archive_cmds="$archive_cmds~\$RANLIB \$lib"
-      postinstall_cmds='$RANLIB $lib'
-    fi
-    ;;
-
-  aix[4-9]*)
-    if test ia64 != "$host_cpu"; then
-      case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
-      yes,aix,yes) ;;			# shared object as lib.so file only
-      yes,svr4,*) ;;			# shared object as lib.so archive member only
-      yes,*) enable_static=no ;;	# shared object in lib.a archive as well
-      esac
-    fi
-    ;;
-  esac
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $enable_shared" >&5
-printf '%s\n' "$enable_shared" >&6; }
-
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build static libraries" >&5
-printf %s "checking whether to build static libraries... " >&6; }
-  # Make sure either enable_shared or enable_static is yes.
-  test yes = "$enable_shared" || enable_static=yes
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $enable_static" >&5
-printf '%s\n' "$enable_static" >&6; }
-
-
-
-
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-CC=$lt_save_CC
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-        ac_config_commands="$ac_config_commands libtool"
-
-
-
-
-# Only expand once:
-
-
-
-# Require xorg-macros minimum of 1.12 for DocBook external references
-
-
-
-
-
-
-
-
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC options to detect undeclared functions" >&5
-printf %s "checking for $CC options to detect undeclared functions... " >&6; }
-if test ${ac_cv_c_undeclared_builtin_options+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) ac_save_CFLAGS=$CFLAGS
-   ac_cv_c_undeclared_builtin_options='cannot detect'
-   for ac_arg in '' -fno-builtin; do
-     CFLAGS="$ac_save_CFLAGS $ac_arg"
-     # This test program should *not* compile successfully.
-     cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-(void) strchr;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-
-else case e in #(
-  e) # This test program should compile successfully.
-        # No library function is consistently available on
-        # freestanding implementations, so test against a dummy
-        # declaration.  Include always-available headers on the
-        # off chance that they somehow elicit warnings.
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <float.h>
-#include <limits.h>
-#include <stdarg.h>
-#include <stddef.h>
-extern void ac_decl (int, char *);
-
-int
-main (void)
-{
-(void) ac_decl (0, (char *) 0);
-  (void) ac_decl;
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  if test x"$ac_arg" = x
-then :
-  ac_cv_c_undeclared_builtin_options='none needed'
-else case e in #(
-  e) ac_cv_c_undeclared_builtin_options=$ac_arg ;;
-esac
-fi
-          break
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-    done
-    CFLAGS=$ac_save_CFLAGS
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_undeclared_builtin_options" >&5
-printf '%s\n' "$ac_cv_c_undeclared_builtin_options" >&6; }
-  case $ac_cv_c_undeclared_builtin_options in #(
-  'cannot detect') :
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "cannot make $CC report undeclared builtins
-See 'config.log' for more details" "$LINENO" 5; } ;; #(
-  'none needed') :
-    ac_c_undeclared_builtin_options='' ;; #(
-  *) :
-    ac_c_undeclared_builtin_options=$ac_cv_c_undeclared_builtin_options ;;
-esac
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $CC options to ignore future-version functions" >&5
-printf %s "checking for $CC options to ignore future-version functions... " >&6; }
-if test ${ac_cv_c_future_darwin_options+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e)       ac_compile_saved="$ac_compile"
-   ac_compile="$ac_compile -Werror=unguarded-availability-new"
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#if ! (defined __APPLE__ && defined __MACH__)
-	   #error "-Werror=unguarded-availability-new not needed here"
-	  #endif
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_c_future_darwin_options='-Werror=unguarded-availability-new'
-else case e in #(
-  e) ac_cv_c_future_darwin_options='none needed' ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ac_compile="$ac_compile_saved"
-   ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_future_darwin_options" >&5
-printf '%s\n' "$ac_cv_c_future_darwin_options" >&6; }
- case $ac_cv_c_future_darwin_options in #(
-  'none needed') :
-    ac_c_future_darwin_options='' ;; #(
-  *) :
-    ac_c_future_darwin_options=$ac_cv_c_future_darwin_options ;;
-esac
-
-
-
-
-
-ac_fn_check_decl "$LINENO" "__clang__" "ac_cv_have_decl___clang__" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___clang__" = xyes
-then :
-  CLANGCC="yes"
-else case e in #(
-  e) CLANGCC="no" ;;
-esac
-fi
-ac_fn_check_decl "$LINENO" "__INTEL_COMPILER" "ac_cv_have_decl___INTEL_COMPILER" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___INTEL_COMPILER" = xyes
-then :
-  INTELCC="yes"
-else case e in #(
-  e) INTELCC="no" ;;
-esac
-fi
-ac_fn_check_decl "$LINENO" "__SUNPRO_C" "ac_cv_have_decl___SUNPRO_C" "$ac_includes_default" "$ac_c_undeclared_builtin_options$ac_c_future_darwin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___SUNPRO_C" = xyes
-then :
-  SUNCC="yes"
-else case e in #(
-  e) SUNCC="no" ;;
-esac
-fi
-
-
-
-
-
-
-
-
-if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
-	if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args.
-set dummy ${ac_tool_prefix}pkg-config; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_PKG_CONFIG+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) case $PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PKG_CONFIG="$PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-PKG_CONFIG=$ac_cv_path_PKG_CONFIG
-if test -n "$PKG_CONFIG"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $PKG_CONFIG" >&5
-printf '%s\n' "$PKG_CONFIG" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_path_PKG_CONFIG"; then
-  ac_pt_PKG_CONFIG=$PKG_CONFIG
-  # Extract the first word of "pkg-config", so it can be a program name with args.
-set dummy pkg-config; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_ac_pt_PKG_CONFIG+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) case $ac_pt_PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_ac_pt_PKG_CONFIG="$ac_pt_PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_ac_pt_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-ac_pt_PKG_CONFIG=$ac_cv_path_ac_pt_PKG_CONFIG
-if test -n "$ac_pt_PKG_CONFIG"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKG_CONFIG" >&5
-printf '%s\n' "$ac_pt_PKG_CONFIG" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-  if test "x$ac_pt_PKG_CONFIG" = x; then
-    PKG_CONFIG=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf '%s\n' "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    PKG_CONFIG=$ac_pt_PKG_CONFIG
-  fi
-else
-  PKG_CONFIG="$ac_cv_path_PKG_CONFIG"
-fi
-
-fi
-if test -n "$PKG_CONFIG"; then
-	_pkg_min_version=0.9.0
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking pkg-config is at least version $_pkg_min_version" >&5
-printf %s "checking pkg-config is at least version $_pkg_min_version... " >&6; }
-	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-	else
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-		PKG_CONFIG=""
-	fi
-fi
-
-
-
-
-
-# Check whether --enable-selective-werror was given.
-if test ${enable_selective_werror+y}
-then :
-  enableval=$enable_selective_werror; SELECTIVE_WERROR=$enableval
-else case e in #(
-  e) SELECTIVE_WERROR=yes ;;
-esac
-fi
-
-
-
-
-
-# -v is too short to test reliably with XORG_TESTSET_CFLAG
-if test "x$SUNCC" = "xyes"; then
-    BASE_CFLAGS="-v"
-else
-    BASE_CFLAGS=""
-fi
-
-# This chunk of warnings were those that existed in the legacy CWARNFLAGS
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wall"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wall" >&5
-printf %s "checking if $CC supports -Wall... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wall
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wall"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wpointer-arith"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-arith" >&5
-printf %s "checking if $CC supports -Wpointer-arith... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wpointer_arith
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wpointer-arith"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-declarations"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-declarations" >&5
-printf %s "checking if $CC supports -Wmissing-declarations... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_declarations
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-declarations"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wformat=2"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat=2" >&5
-printf %s "checking if $CC supports -Wformat=2... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wformat_2
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wformat=2"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wformat"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat" >&5
-printf %s "checking if $CC supports -Wformat... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wformat
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wformat"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wstrict-prototypes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wstrict-prototypes" >&5
-printf %s "checking if $CC supports -Wstrict-prototypes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wstrict_prototypes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wstrict-prototypes"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-prototypes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-prototypes" >&5
-printf %s "checking if $CC supports -Wmissing-prototypes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_prototypes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-prototypes"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wnested-externs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wnested-externs" >&5
-printf %s "checking if $CC supports -Wnested-externs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wnested_externs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wnested-externs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wbad-function-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wbad-function-cast" >&5
-printf %s "checking if $CC supports -Wbad-function-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wbad_function_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wbad-function-cast"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wold-style-definition"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wold-style-definition" >&5
-printf %s "checking if $CC supports -Wold-style-definition... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wold_style_definition
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wold-style-definition"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -fd"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -fd" >&5
-printf %s "checking if $CC supports -fd... " >&6; }
-		cacheid=xorg_cv_cc_flag__fd
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -fd"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-# This chunk adds additional warnings that could catch undesired effects.
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wunused"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wunused" >&5
-printf %s "checking if $CC supports -Wunused... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wunused
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wunused"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wuninitialized"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wuninitialized" >&5
-printf %s "checking if $CC supports -Wuninitialized... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wuninitialized
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wuninitialized"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wshadow"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wshadow" >&5
-printf %s "checking if $CC supports -Wshadow... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wshadow
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wshadow"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-noreturn"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-noreturn" >&5
-printf %s "checking if $CC supports -Wmissing-noreturn... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_noreturn
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-noreturn"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-format-attribute"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-format-attribute" >&5
-printf %s "checking if $CC supports -Wmissing-format-attribute... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_format_attribute
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-format-attribute"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wredundant-decls"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wredundant-decls" >&5
-printf %s "checking if $CC supports -Wredundant-decls... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wredundant_decls
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wredundant-decls"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wlogical-op"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wlogical-op" >&5
-printf %s "checking if $CC supports -Wlogical-op... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wlogical_op
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wlogical-op"
-			found="yes"
-		fi
-	fi
-
-
-
-# These are currently disabled because they are noisy.  They will be enabled
-# in the future once the codebase is sufficiently modernized to silence
-# them.  For now, I don't want them to drown out the other warnings.
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wparentheses])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-align])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-qual])
-
-# Turn some warnings into errors, so we don't accidentally get successful builds
-# when there are problems that should be fixed.
-
-if test "x$SELECTIVE_WERROR" = "xyes" ; then
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=implicit"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=implicit" >&5
-printf %s "checking if $CC supports -Werror=implicit... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_implicit
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=implicit"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED" >&5
-printf %s "checking if $CC supports -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_NO_EXPLICIT_TYPE_GIVEN__errwarn_E_NO_IMPLICIT_DECL_ALLOWED
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=nonnull"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=nonnull" >&5
-printf %s "checking if $CC supports -Werror=nonnull... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_nonnull
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=nonnull"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=init-self"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=init-self" >&5
-printf %s "checking if $CC supports -Werror=init-self... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_init_self
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=init-self"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=main"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=main" >&5
-printf %s "checking if $CC supports -Werror=main... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_main
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=main"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=missing-braces"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=missing-braces" >&5
-printf %s "checking if $CC supports -Werror=missing-braces... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_missing_braces
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=missing-braces"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=sequence-point"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=sequence-point" >&5
-printf %s "checking if $CC supports -Werror=sequence-point... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_sequence_point
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=sequence-point"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=return-type"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=return-type" >&5
-printf %s "checking if $CC supports -Werror=return-type... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_return_type
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=return-type"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_FUNC_HAS_NO_RETURN_STMT"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_FUNC_HAS_NO_RETURN_STMT" >&5
-printf %s "checking if $CC supports -errwarn=E_FUNC_HAS_NO_RETURN_STMT... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_FUNC_HAS_NO_RETURN_STMT
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_FUNC_HAS_NO_RETURN_STMT"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=trigraphs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=trigraphs" >&5
-printf %s "checking if $CC supports -Werror=trigraphs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_trigraphs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=trigraphs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=array-bounds"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=array-bounds" >&5
-printf %s "checking if $CC supports -Werror=array-bounds... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_array_bounds
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=array-bounds"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=write-strings"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=write-strings" >&5
-printf %s "checking if $CC supports -Werror=write-strings... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_write_strings
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=write-strings"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=address"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=address" >&5
-printf %s "checking if $CC supports -Werror=address... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_address
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=address"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=int-to-pointer-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=int-to-pointer-cast" >&5
-printf %s "checking if $CC supports -Werror=int-to-pointer-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_int_to_pointer_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=int-to-pointer-cast"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_BAD_PTR_INT_COMBINATION"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_BAD_PTR_INT_COMBINATION" >&5
-printf %s "checking if $CC supports -errwarn=E_BAD_PTR_INT_COMBINATION... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_BAD_PTR_INT_COMBINATION
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_BAD_PTR_INT_COMBINATION"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=pointer-to-int-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=pointer-to-int-cast" >&5
-printf %s "checking if $CC supports -Werror=pointer-to-int-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_pointer_to_int_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=pointer-to-int-cast"
-			found="yes"
-		fi
-	fi
-
- # Also -errwarn=E_BAD_PTR_INT_COMBINATION
-else
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT" >&5
-printf '%s\n' "$as_me: WARNING: You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT" >&2;}
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wimplicit"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wimplicit" >&5
-printf %s "checking if $CC supports -Wimplicit... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wimplicit
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wimplicit"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wnonnull"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wnonnull" >&5
-printf %s "checking if $CC supports -Wnonnull... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wnonnull
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wnonnull"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Winit-self"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Winit-self" >&5
-printf %s "checking if $CC supports -Winit-self... " >&6; }
-		cacheid=xorg_cv_cc_flag__Winit_self
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Winit-self"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmain"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmain" >&5
-printf %s "checking if $CC supports -Wmain... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmain
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmain"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-braces"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-braces" >&5
-printf %s "checking if $CC supports -Wmissing-braces... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_braces
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-braces"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wsequence-point"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wsequence-point" >&5
-printf %s "checking if $CC supports -Wsequence-point... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wsequence_point
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wsequence-point"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wreturn-type"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wreturn-type" >&5
-printf %s "checking if $CC supports -Wreturn-type... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wreturn_type
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wreturn-type"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wtrigraphs"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wtrigraphs" >&5
-printf %s "checking if $CC supports -Wtrigraphs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wtrigraphs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wtrigraphs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Warray-bounds"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Warray-bounds" >&5
-printf %s "checking if $CC supports -Warray-bounds... " >&6; }
-		cacheid=xorg_cv_cc_flag__Warray_bounds
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Warray-bounds"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wwrite-strings"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wwrite-strings" >&5
-printf %s "checking if $CC supports -Wwrite-strings... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wwrite_strings
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wwrite-strings"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Waddress"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Waddress" >&5
-printf %s "checking if $CC supports -Waddress... " >&6; }
-		cacheid=xorg_cv_cc_flag__Waddress
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Waddress"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wint-to-pointer-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wint-to-pointer-cast" >&5
-printf %s "checking if $CC supports -Wint-to-pointer-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wint_to_pointer_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wint-to-pointer-cast"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wpointer-to-int-cast"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-to-int-cast" >&5
-printf %s "checking if $CC supports -Wpointer-to-int-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wpointer_to_int_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wpointer-to-int-cast"
-			found="yes"
-		fi
-	fi
-
-
-fi
-
-
-
-
-
-
-
-		CWARNFLAGS="$BASE_CFLAGS"
-		if  test "x$GCC" = xyes ; then
-		    CWARNFLAGS="$CWARNFLAGS -fno-strict-aliasing"
-		fi
-
-
-
-
-
-
-
-
-# Check whether --enable-strict-compilation was given.
-if test ${enable_strict_compilation+y}
-then :
-  enableval=$enable_strict_compilation; STRICT_COMPILE=$enableval
-else case e in #(
-  e) STRICT_COMPILE=no ;;
-esac
-fi
-
-
-
-
-
-
-STRICT_CFLAGS=""
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -pedantic"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -pedantic" >&5
-printf %s "checking if $CC supports -pedantic... " >&6; }
-		cacheid=xorg_cv_cc_flag__pedantic
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -pedantic"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror" >&5
-printf %s "checking if $CC supports -Werror... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -Werror"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn" >&5
-printf %s "checking if $CC supports -errwarn... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -errwarn"
-			found="yes"
-		fi
-	fi
-
-
-
-# Earlier versions of gcc (eg: 4.2) support -Werror=attributes, but do not
-# activate it with -Werror, so we add it here explicitly.
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unknown_warning_option=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else case e in #(
-  e) xorg_cv_cc_flag_unused_command_line_argument=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf '%s\n' "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=attributes"
-
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=attributes" >&5
-printf %s "checking if $CC supports -Werror=attributes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_attributes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else case e in #(
-  e) eval $cacheid=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext ;;
-esac
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf '%s\n' "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -Werror=attributes"
-			found="yes"
-		fi
-	fi
-
-
-
-if test "x$STRICT_COMPILE" = "xyes"; then
-    BASE_CFLAGS="$BASE_CFLAGS $STRICT_CFLAGS"
-    CWARNFLAGS="$CWARNFLAGS $STRICT_CFLAGS"
-fi
-
-
-
-
-
-
-
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_VERSION_MAJOR `echo $PACKAGE_VERSION | cut -d . -f 1`
-_ACEOF
-
-	PVM=`echo $PACKAGE_VERSION | cut -d . -f 2 | cut -d - -f 1`
-	if test "x$PVM" = "x"; then
-		PVM="0"
-	fi
-
-printf '%s\n' "#define PACKAGE_VERSION_MINOR $PVM" >>confdefs.h
-
-	PVP=`echo $PACKAGE_VERSION | cut -d . -f 3 | cut -d - -f 1`
-	if test "x$PVP" = "x"; then
-		PVP="0"
-	fi
-
-printf '%s\n' "#define PACKAGE_VERSION_PATCHLEVEL $PVP" >>confdefs.h
-
-
-
-CHANGELOG_CMD="((GIT_DIR=\$(top_srcdir)/.git git log > \$(top_srcdir)/.changelog.tmp) 2>/dev/null && \
-mv \$(top_srcdir)/.changelog.tmp \$(top_srcdir)/ChangeLog) \
-|| (rm -f \$(top_srcdir)/.changelog.tmp; test -e \$(top_srcdir)/ChangeLog || ( \
-touch \$(top_srcdir)/ChangeLog; \
-echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))"
-
-
-
-
-macros_datadir=`$PKG_CONFIG --print-errors --variable=pkgdatadir xorg-macros`
-INSTALL_CMD="(cp -f "$macros_datadir/INSTALL" \$(top_srcdir)/.INSTALL.tmp && \
-mv \$(top_srcdir)/.INSTALL.tmp \$(top_srcdir)/INSTALL) \
-|| (rm -f \$(top_srcdir)/.INSTALL.tmp; test -e \$(top_srcdir)/INSTALL || ( \
-touch \$(top_srcdir)/INSTALL; \
-echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))"
-
-
-
-
-
-
-case $host_os in
-    solaris*)
-        # Solaris 2.0 - 11.3 use SysV man page section numbers, so we
-        # check for a man page file found in later versions that use
-        # traditional section numbers instead
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for /usr/share/man/man7/attributes.7" >&5
-printf %s "checking for /usr/share/man/man7/attributes.7... " >&6; }
-if test ${ac_cv_file__usr_share_man_man7_attributes_7+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) test "$cross_compiling" = yes &&
-  as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5
-if test -r "/usr/share/man/man7/attributes.7"; then
-  ac_cv_file__usr_share_man_man7_attributes_7=yes
-else
-  ac_cv_file__usr_share_man_man7_attributes_7=no
-fi ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ac_cv_file__usr_share_man_man7_attributes_7" >&5
-printf '%s\n' "$ac_cv_file__usr_share_man_man7_attributes_7" >&6; }
-if test "x$ac_cv_file__usr_share_man_man7_attributes_7" = xyes
-then :
-  SYSV_MAN_SECTIONS=false
-else case e in #(
-  e) SYSV_MAN_SECTIONS=true ;;
-esac
-fi
-
-        ;;
-    *) SYSV_MAN_SECTIONS=false ;;
-esac
-
-if test x$APP_MAN_SUFFIX = x    ; then
-    APP_MAN_SUFFIX=1
-fi
-if test x$APP_MAN_DIR = x    ; then
-    APP_MAN_DIR='$(mandir)/man$(APP_MAN_SUFFIX)'
-fi
-
-if test x$LIB_MAN_SUFFIX = x    ; then
-    LIB_MAN_SUFFIX=3
-fi
-if test x$LIB_MAN_DIR = x    ; then
-    LIB_MAN_DIR='$(mandir)/man$(LIB_MAN_SUFFIX)'
-fi
-
-if test x$FILE_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				FILE_MAN_SUFFIX=4  ;;
-	*)				FILE_MAN_SUFFIX=5  ;;
-    esac
-fi
-if test x$FILE_MAN_DIR = x    ; then
-    FILE_MAN_DIR='$(mandir)/man$(FILE_MAN_SUFFIX)'
-fi
-
-if test x$MISC_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				MISC_MAN_SUFFIX=5  ;;
-	*)				MISC_MAN_SUFFIX=7  ;;
-    esac
-fi
-if test x$MISC_MAN_DIR = x    ; then
-    MISC_MAN_DIR='$(mandir)/man$(MISC_MAN_SUFFIX)'
-fi
-
-if test x$DRIVER_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				DRIVER_MAN_SUFFIX=7  ;;
-	*)				DRIVER_MAN_SUFFIX=4  ;;
-    esac
-fi
-if test x$DRIVER_MAN_DIR = x    ; then
-    DRIVER_MAN_DIR='$(mandir)/man$(DRIVER_MAN_SUFFIX)'
-fi
-
-if test x$ADMIN_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				ADMIN_MAN_SUFFIX=1m ;;
-	*)				ADMIN_MAN_SUFFIX=8  ;;
-    esac
-fi
-if test x$ADMIN_MAN_DIR = x    ; then
-    ADMIN_MAN_DIR='$(mandir)/man$(ADMIN_MAN_SUFFIX)'
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-XORG_MAN_PAGE="X Version 11"
-
-MAN_SUBSTS="\
-	-e 's|__vendorversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xorgversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xservername__|Xorg|g' \
-	-e 's|__xconfigfile__|xorg.conf|g' \
-	-e 's|__projectroot__|\$(prefix)|g' \
-	-e 's|__apploaddir__|\$(appdefaultdir)|g' \
-	-e 's|__appmansuffix__|\$(APP_MAN_SUFFIX)|g' \
-	-e 's|__drivermansuffix__|\$(DRIVER_MAN_SUFFIX)|g' \
-	-e 's|__adminmansuffix__|\$(ADMIN_MAN_SUFFIX)|g' \
-	-e 's|__libmansuffix__|\$(LIB_MAN_SUFFIX)|g' \
-	-e 's|__miscmansuffix__|\$(MISC_MAN_SUFFIX)|g' \
-	-e 's|__filemansuffix__|\$(FILE_MAN_SUFFIX)|g'"
-
-
-
-
-AM_DEFAULT_VERBOSITY=0
-
-
-
-
-
-
-# Check whether --enable-specs was given.
-if test ${enable_specs+y}
-then :
-  enableval=$enable_specs; build_specs=$enableval
-else case e in #(
-  e) build_specs=yes ;;
-esac
-fi
-
-
- if test x$build_specs = xyes; then
-  ENABLE_SPECS_TRUE=
-  ENABLE_SPECS_FALSE='#'
-else
-  ENABLE_SPECS_TRUE='#'
-  ENABLE_SPECS_FALSE=
-fi
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to build functional specifications" >&5
-printf %s "checking whether to build functional specifications... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $build_specs" >&5
-printf '%s\n' "$build_specs" >&6; }
-
-
-
-
-
-# Check whether --with-xmlto was given.
-if test ${with_xmlto+y}
-then :
-  withval=$with_xmlto; use_xmlto=$withval
-else case e in #(
-  e) use_xmlto=auto ;;
-esac
-fi
-
-
-
-if test "x$use_xmlto" = x"auto"; then
-   # Extract the first word of "xmlto", so it can be a program name with args.
-set dummy xmlto; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XMLTO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) case $XMLTO in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XMLTO="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XMLTO=$ac_cv_path_XMLTO
-if test -n "$XMLTO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XMLTO" >&5
-printf '%s\n' "$XMLTO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XMLTO" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto not found - documentation targets will be skipped" >&5
-printf '%s\n' "$as_me: WARNING: xmlto not found - documentation targets will be skipped" >&2;}
-	have_xmlto=no
-   else
-        have_xmlto=yes
-   fi
-elif test "x$use_xmlto" = x"yes" ; then
-   # Extract the first word of "xmlto", so it can be a program name with args.
-set dummy xmlto; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XMLTO+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) case $XMLTO in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XMLTO="$XMLTO" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XMLTO="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XMLTO=$ac_cv_path_XMLTO
-if test -n "$XMLTO"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XMLTO" >&5
-printf '%s\n' "$XMLTO" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XMLTO" = "x"; then
-        as_fn_error $? "--with-xmlto=yes specified but xmlto not found in PATH" "$LINENO" 5
-   fi
-   have_xmlto=yes
-elif test "x$use_xmlto" = x"no" ; then
-   if test "x$XMLTO" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring XMLTO environment variable since --with-xmlto=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring XMLTO environment variable since --with-xmlto=no was specified" >&2;}
-   fi
-   have_xmlto=no
-else
-   as_fn_error $? "--with-xmlto expects 'yes' or 'no'" "$LINENO" 5
-fi
-
-# Test for a minimum version of xmlto, if provided.
-if test "$have_xmlto" = yes; then
-    # scrape the xmlto version
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking the xmlto version" >&5
-printf %s "checking the xmlto version... " >&6; }
-    xmlto_version=`$XMLTO --version 2>/dev/null | cut -d' ' -f3`
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $xmlto_version" >&5
-printf '%s\n' "$xmlto_version" >&6; }
-    as_arg_v1=$xmlto_version
-as_arg_v2=0.0.22
-awk "$as_awk_strverscmp" v1="$as_arg_v1" v2="$as_arg_v2" /dev/null
-case $? in #(
-  1) :
-    if test "x$use_xmlto" = xauto; then
-            { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto version $xmlto_version found, but 0.0.22 needed" >&5
-printf '%s\n' "$as_me: WARNING: xmlto version $xmlto_version found, but 0.0.22 needed" >&2;}
-            have_xmlto=no
-        else
-            as_fn_error $? "xmlto version $xmlto_version found, but 0.0.22 needed" "$LINENO" 5
-        fi ;; #(
-  0) :
-     ;; #(
-  2) :
-     ;; #(
-  *) :
-     ;;
-esac
-fi
-
-# Test for the ability of xmlto to generate a text target
-#
-# NOTE: xmlto 0.0.27 or higher return a non-zero return code in the
-# following test for empty XML docbook files.
-# For compatibility reasons use the following empty XML docbook file and if
-# it fails try it again with a non-empty XML file.
-have_xmlto_text=no
-cat > conftest.xml << "EOF"
-EOF
-if test "$have_xmlto" = yes
-then :
-  if $XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1
-then :
-  have_xmlto_text=yes
-else case e in #(
-  e) # Try it again with a non-empty XML file.
-              cat > conftest.xml << "EOF"
-<x></x>
-EOF
-              if $XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1
-then :
-  have_xmlto_text=yes
-else case e in #(
-  e) { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xmlto cannot generate text format, this format skipped" >&5
-printf '%s\n' "$as_me: WARNING: xmlto cannot generate text format, this format skipped" >&2;} ;;
-esac
-fi ;;
-esac
-fi
-fi
-rm -f conftest.xml
- if test $have_xmlto_text = yes; then
-  HAVE_XMLTO_TEXT_TRUE=
-  HAVE_XMLTO_TEXT_FALSE='#'
-else
-  HAVE_XMLTO_TEXT_TRUE='#'
-  HAVE_XMLTO_TEXT_FALSE=
-fi
-
- if test "$have_xmlto" = yes; then
-  HAVE_XMLTO_TRUE=
-  HAVE_XMLTO_FALSE='#'
-else
-  HAVE_XMLTO_TRUE='#'
-  HAVE_XMLTO_FALSE=
-fi
-
-
-
-
-
-
-# Check whether --with-fop was given.
-if test ${with_fop+y}
-then :
-  withval=$with_fop; use_fop=$withval
-else case e in #(
-  e) use_fop=auto ;;
-esac
-fi
-
-
-
-if test "x$use_fop" = x"auto"; then
-   # Extract the first word of "fop", so it can be a program name with args.
-set dummy fop; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_FOP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) case $FOP in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_FOP="$FOP" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_FOP="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-FOP=$ac_cv_path_FOP
-if test -n "$FOP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FOP" >&5
-printf '%s\n' "$FOP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$FOP" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: fop not found - documentation targets will be skipped" >&5
-printf '%s\n' "$as_me: WARNING: fop not found - documentation targets will be skipped" >&2;}
-	have_fop=no
-   else
-        have_fop=yes
-   fi
-elif test "x$use_fop" = x"yes" ; then
-   # Extract the first word of "fop", so it can be a program name with args.
-set dummy fop; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_FOP+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) case $FOP in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_FOP="$FOP" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_FOP="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-FOP=$ac_cv_path_FOP
-if test -n "$FOP"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $FOP" >&5
-printf '%s\n' "$FOP" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$FOP" = "x"; then
-        as_fn_error $? "--with-fop=yes specified but fop not found in PATH" "$LINENO" 5
-   fi
-   have_fop=yes
-elif test "x$use_fop" = x"no" ; then
-   if test "x$FOP" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring FOP environment variable since --with-fop=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring FOP environment variable since --with-fop=no was specified" >&2;}
-   fi
-   have_fop=no
-else
-   as_fn_error $? "--with-fop expects 'yes' or 'no'" "$LINENO" 5
-fi
-
-# Test for a minimum version of fop, if provided.
-
- if test "$have_fop" = yes; then
-  HAVE_FOP_TRUE=
-  HAVE_FOP_FALSE='#'
-else
-  HAVE_FOP_TRUE='#'
-  HAVE_FOP_FALSE=
-fi
-
-
-
-
-# Preserves the interface, should it be implemented later
-
-
-
-# Check whether --with-xsltproc was given.
-if test ${with_xsltproc+y}
-then :
-  withval=$with_xsltproc; use_xsltproc=$withval
-else case e in #(
-  e) use_xsltproc=auto ;;
-esac
-fi
-
-
-
-if test "x$use_xsltproc" = x"auto"; then
-   # Extract the first word of "xsltproc", so it can be a program name with args.
-set dummy xsltproc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XSLTPROC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) case $XSLTPROC in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XSLTPROC="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XSLTPROC=$ac_cv_path_XSLTPROC
-if test -n "$XSLTPROC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XSLTPROC" >&5
-printf '%s\n' "$XSLTPROC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XSLTPROC" = "x"; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: xsltproc not found - cannot transform XML documents" >&5
-printf '%s\n' "$as_me: WARNING: xsltproc not found - cannot transform XML documents" >&2;}
-	have_xsltproc=no
-   else
-        have_xsltproc=yes
-   fi
-elif test "x$use_xsltproc" = x"yes" ; then
-   # Extract the first word of "xsltproc", so it can be a program name with args.
-set dummy xsltproc; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_XSLTPROC+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) case $XSLTPROC in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_XSLTPROC="$XSLTPROC" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_XSLTPROC="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-XSLTPROC=$ac_cv_path_XSLTPROC
-if test -n "$XSLTPROC"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XSLTPROC" >&5
-printf '%s\n' "$XSLTPROC" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$XSLTPROC" = "x"; then
-        as_fn_error $? "--with-xsltproc=yes specified but xsltproc not found in PATH" "$LINENO" 5
-   fi
-   have_xsltproc=yes
-elif test "x$use_xsltproc" = x"no" ; then
-   if test "x$XSLTPROC" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring XSLTPROC environment variable since --with-xsltproc=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring XSLTPROC environment variable since --with-xsltproc=no was specified" >&2;}
-   fi
-   have_xsltproc=no
-else
-   as_fn_error $? "--with-xsltproc expects 'yes' or 'no'" "$LINENO" 5
-fi
-
- if test "$have_xsltproc" = yes; then
-  HAVE_XSLTPROC_TRUE=
-  HAVE_XSLTPROC_FALSE='#'
-else
-  HAVE_XSLTPROC_TRUE='#'
-  HAVE_XSLTPROC_FALSE=
-fi
-
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for X.Org SGML entities >= 1.8" >&5
-printf %s "checking for X.Org SGML entities >= 1.8... " >&6; }
-XORG_SGML_PATH=
-if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xorg-sgml-doctools >= 1.8\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xorg-sgml-doctools >= 1.8") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  XORG_SGML_PATH=`$PKG_CONFIG --variable=sgmlrootdir xorg-sgml-doctools`
-else
-  :
-
-fi
-
-# Define variables STYLESHEET_SRCDIR and XSL_STYLESHEET containing
-# the path and the name of the doc stylesheet
-if test "x$XORG_SGML_PATH" != "x" ; then
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $XORG_SGML_PATH" >&5
-printf '%s\n' "$XORG_SGML_PATH" >&6; }
-   STYLESHEET_SRCDIR=$XORG_SGML_PATH/X11
-   XSL_STYLESHEET=$STYLESHEET_SRCDIR/xorg.xsl
-else
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-
-
- if test "x$XSL_STYLESHEET" != "x"; then
-  HAVE_STYLESHEETS_TRUE=
-  HAVE_STYLESHEETS_FALSE='#'
-else
-  HAVE_STYLESHEETS_TRUE='#'
-  HAVE_STYLESHEETS_FALSE=
-fi
-
-
-
-# Check whether --enable-malloc0returnsnull was given.
-if test ${enable_malloc0returnsnull+y}
-then :
-  enableval=$enable_malloc0returnsnull; MALLOC_ZERO_RETURNS_NULL=$enableval
-else case e in #(
-  e) MALLOC_ZERO_RETURNS_NULL=yes ;;
-esac
-fi
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking whether to act as if malloc(0) can return NULL" >&5
-printf %s "checking whether to act as if malloc(0) can return NULL... " >&6; }
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $MALLOC_ZERO_RETURNS_NULL" >&5
-printf '%s\n' "$MALLOC_ZERO_RETURNS_NULL" >&6; }
-
-if test "x$MALLOC_ZERO_RETURNS_NULL" = xyes; then
-	MALLOC_ZERO_CFLAGS="-DMALLOC_0_RETURNS_NULL"
-	XMALLOC_ZERO_CFLAGS=$MALLOC_ZERO_CFLAGS
-	XTMALLOC_ZERO_CFLAGS="$MALLOC_ZERO_CFLAGS -DXTMALLOC_BC"
-else
-	MALLOC_ZERO_CFLAGS=""
-	XMALLOC_ZERO_CFLAGS=""
-	XTMALLOC_ZERO_CFLAGS=""
-fi
-
-
-
-
-
-
-# Determine .so library version per platform
-# based on SharedXextRev in monolith xc/config/cf/*Lib.tmpl
-if test "x$XEXT_SOREV" = "x" ; then
-    case $host_os in
-	openbsd*)	XEXT_SOREV=8:0 		;;
-	solaris*)       XEXT_SOREV=0 		;;
-	*)              XEXT_SOREV=6:4:0 	;;
-    esac
-fi
-
-
-# Obtain compiler/linker options for dependencies
-
-pkg_failed=no
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" >&5
-printf %s "checking for xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99... " >&6; }
-
-if test -n "$XEXT_CFLAGS"; then
-    pkg_cv_XEXT_CFLAGS="$XEXT_CFLAGS"
- elif test -n "$PKG_CONFIG"; then
-    if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  pkg_cv_XEXT_CFLAGS=`$PKG_CONFIG --cflags "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes
-else
-  pkg_failed=yes
-fi
- else
-    pkg_failed=untried
-fi
-if test -n "$XEXT_LIBS"; then
-    pkg_cv_XEXT_LIBS="$XEXT_LIBS"
- elif test -n "$PKG_CONFIG"; then
-    if test -n "$PKG_CONFIG" && \
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99") 2>&5
-  ac_status=$?
-  printf '%s\n' "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  pkg_cv_XEXT_LIBS=`$PKG_CONFIG --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes
-else
-  pkg_failed=yes
-fi
- else
-    pkg_failed=untried
-fi
-
-
-
-if test $pkg_failed = yes; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-
-if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
-        _pkg_short_errors_supported=yes
-else
-        _pkg_short_errors_supported=no
-fi
-        if test $_pkg_short_errors_supported = yes; then
-                XEXT_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>&1`
-        else
-                XEXT_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99" 2>&1`
-        fi
-        # Put the nasty error message in config.log where it belongs
-        echo "$XEXT_PKG_ERRORS" >&5
-
-        as_fn_error $? "Package requirements (xproto >= 7.0.13 x11 >= 1.6 xextproto >= 7.1.99) were not met:
-
-$XEXT_PKG_ERRORS
-
-Consider adjusting the PKG_CONFIG_PATH environment variable if you
-installed software in a non-standard prefix.
-
-Alternatively, you may set the environment variables XEXT_CFLAGS
-and XEXT_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details." "$LINENO" 5
-elif test $pkg_failed = untried; then
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-        { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "The pkg-config script could not be found or is too old.  Make sure it
-is in your PATH or set the PKG_CONFIG environment variable to the full
-path to pkg-config.
-
-Alternatively, you may set the environment variables XEXT_CFLAGS
-and XEXT_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details.
-
-To get pkg-config, see <http://pkg-config.freedesktop.org/>.
-See 'config.log' for more details" "$LINENO" 5; }
-else
-        XEXT_CFLAGS=$pkg_cv_XEXT_CFLAGS
-        XEXT_LIBS=$pkg_cv_XEXT_LIBS
-        { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf '%s\n' "yes" >&6; }
-
-fi
-
-
-
-
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for __builtin_popcountl" >&5
-printf %s "checking for __builtin_popcountl... " >&6; }
-if test ${ax_cv_have___builtin_popcountl+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e)
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-            __builtin_popcountl(0)
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ax_cv_have___builtin_popcountl=yes
-else case e in #(
-  e) ax_cv_have___builtin_popcountl=no ;;
-esac
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-     ;;
-esac
-fi
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $ax_cv_have___builtin_popcountl" >&5
-printf '%s\n' "$ax_cv_have___builtin_popcountl" >&6; }
-
-    if test yes = $ax_cv_have___builtin_popcountl
-then :
-
-printf '%s\n' "#define HAVE___BUILTIN_POPCOUNTL 1" >>confdefs.h
-
-fi
-
-
-
-ac_fn_c_check_func "$LINENO" "reallocarray" "ac_cv_func_reallocarray"
-if test "x$ac_cv_func_reallocarray" = xyes
-then :
-  printf '%s\n' "#define HAVE_REALLOCARRAY 1" >>confdefs.h
-
-else case e in #(
-  e) case " $LIBOBJS " in
-  *" reallocarray.$ac_objext "* ) ;;
-  *) LIBOBJS="$LIBOBJS reallocarray.$ac_objext"
- ;;
-esac
- ;;
-esac
-fi
-
-
-# Allow checking code with lint, sparse, etc.
-
-
-
-
-
-# Check whether --with-lint was given.
-if test ${with_lint+y}
-then :
-  withval=$with_lint; use_lint=$withval
-else case e in #(
-  e) use_lint=no ;;
-esac
-fi
-
-
-# Obtain platform specific info like program name and options
-# The lint program on FreeBSD and NetBSD is different from the one on Solaris
-case $host_os in
-  *linux* | *openbsd* | kfreebsd*-gnu | darwin* | cygwin*)
-	lint_name=splint
-	lint_options="-badflag"
-	;;
-  *freebsd* | *netbsd*)
-	lint_name=lint
-	lint_options="-u -b"
-	;;
-  *solaris*)
-	lint_name=lint
-	lint_options="-u -b -h -erroff=E_INDISTING_FROM_TRUNC2"
-	;;
-esac
-
-# Test for the presence of the program (either guessed by the code or spelled out by the user)
-if test "x$use_lint" = x"yes" ; then
-   # Extract the first word of "$lint_name", so it can be a program name with args.
-set dummy $lint_name; ac_word=$2
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_LINT+y}
-then :
-  printf %s "(cached) " >&6
-else case e in #(
-  e) case $LINT in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_LINT="$LINT" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_LINT="$as_dir$ac_word$ac_exec_ext"
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac ;;
-esac
-fi
-LINT=$ac_cv_path_LINT
-if test -n "$LINT"; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: $LINT" >&5
-printf '%s\n' "$LINT" >&6; }
-else
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf '%s\n' "no" >&6; }
-fi
-
-
-   if test "x$LINT" = "x"; then
-        as_fn_error $? "--with-lint=yes specified but lint-style tool not found in PATH" "$LINENO" 5
-   fi
-elif test "x$use_lint" = x"no" ; then
-   if test "x$LINT" != "x"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: ignoring LINT environment variable since --with-lint=no was specified" >&5
-printf '%s\n' "$as_me: WARNING: ignoring LINT environment variable since --with-lint=no was specified" >&2;}
-   fi
-else
-   as_fn_error $? "--with-lint expects 'yes' or 'no'. Use LINT variable to specify path." "$LINENO" 5
-fi
-
-# User supplied flags override default flags
-if test "x$LINT_FLAGS" != "x"; then
-   lint_options=$LINT_FLAGS
-fi
-
-LINT_FLAGS=$lint_options
-
- if test "x$LINT" != x; then
-  LINT_TRUE=
-  LINT_FALSE='#'
-else
-  LINT_TRUE='#'
-  LINT_FALSE=
-fi
-
-
-
-
-
-# Check whether --enable-lint-library was given.
-if test ${enable_lint_library+y}
-then :
-  enableval=$enable_lint_library; make_lint_lib=$enableval
-else case e in #(
-  e) make_lint_lib=no ;;
-esac
-fi
-
-
-if test "x$make_lint_lib" = x"yes" ; then
-   LINTLIB=llib-lXext.ln
-   if test "x$LINT" = "x"; then
-        as_fn_error $? "Cannot make lint library without --with-lint" "$LINENO" 5
-   fi
-elif test "x$make_lint_lib" != x"no" ; then
-   as_fn_error $? "--enable-lint-library expects 'yes' or 'no'." "$LINENO" 5
-fi
-
-
- if test x$make_lint_lib != xno; then
-  MAKE_LINT_LIB_TRUE=
-  MAKE_LINT_LIB_FALSE='#'
-else
-  MAKE_LINT_LIB_TRUE='#'
-  MAKE_LINT_LIB_FALSE=
-fi
-
-
-
-
-ac_config_files="$ac_config_files Makefile man/Makefile src/Makefile specs/Makefile xext.pc"
-
-cat >confcache <<\_ACEOF
-# This file is a shell script that caches the results of configure
-# tests run on this system so they can be shared between configure
-# scripts and configure runs, see configure's option --config-cache.
-# It is not useful on other systems.  If it contains results you don't
-# want to keep, you may remove or edit it.
-#
-# config.status only pays attention to the cache file if you give it
-# the --recheck option to rerun configure.
-#
-# 'ac_cv_env_foo' variables (set or unset) will be overridden when
-# loading this file, other *unset* 'ac_cv_foo' will be assigned the
-# following values.
-
-_ACEOF
-
-ac_cache_dump |
-  sed '
-     /^ac_cv_env_/b end
-     t clear
-     :clear
-     s/^\([^=]*\)=\(.*[{}].*\)$/test ${\1+y} || &/
-     t end
-     s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/
-     :end' >>confcache
-if diff "$cache_file" confcache >/dev/null 2>&1; then :; else
-  if test -w "$cache_file"; then
-    if test "x$cache_file" != "x/dev/null"; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5
-printf '%s\n' "$as_me: updating cache $cache_file" >&6;}
-      if test ! -f "$cache_file" || test -h "$cache_file"; then
-	cat confcache >"$cache_file"
-      else
-        case $cache_file in #(
-        */* | ?:*)
-	  mv -f confcache "$cache_file"$$ &&
-	  mv -f "$cache_file"$$ "$cache_file" ;; #(
-        *)
-	  mv -f confcache "$cache_file" ;;
-	esac
-      fi
-    fi
-  else
-    { printf '%s\n' "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5
-printf '%s\n' "$as_me: not updating unwritable cache $cache_file" >&6;}
-  fi
-fi
-rm -f confcache
-
-test "x$prefix" = xNONE && prefix=$ac_default_prefix
-# Let make expand exec_prefix.
-test "x$exec_prefix" = xNONE && exec_prefix='${prefix}'
-
-DEFS=-DHAVE_CONFIG_H
-
-ac_libobjs=
-ac_ltlibobjs=
-U=
-for ac_i in : $LIBOBJS; do test "x$ac_i" = x: && continue
-  # 1. Remove the extension, and $U if already installed.
-  ac_script='s/\$U\././;s/\.o$//;s/\.obj$//'
-  ac_i=`printf '%s\n' "$ac_i" | sed "$ac_script"`
-  # 2. Prepend LIBOBJDIR.  When used with automake>=1.10 LIBOBJDIR
-  #    will be set to the directory where LIBOBJS objects are built.
-  as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext"
-  as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo'
-done
-LIBOBJS=$ac_libobjs
-
-LTLIBOBJS=$ac_ltlibobjs
-
-
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: checking that generated files are newer than configure" >&5
-printf %s "checking that generated files are newer than configure... " >&6; }
-   if test -n "$am_sleep_pid"; then
-     # Hide warnings about reused PIDs.
-     wait $am_sleep_pid 2>/dev/null
-   fi
-   { printf '%s\n' "$as_me:${as_lineno-$LINENO}: result: done" >&5
-printf '%s\n' "done" >&6; }
-if test -z "${AMDEP_TRUE}" && test -z "${AMDEP_FALSE}"; then
-  as_fn_error $? "conditional \"AMDEP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${am__fastdepCC_TRUE}" && test -z "${am__fastdepCC_FALSE}"; then
-  as_fn_error $? "conditional \"am__fastdepCC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-case $enable_silent_rules in # (((
-  yes) AM_DEFAULT_VERBOSITY=0;;
-   no) AM_DEFAULT_VERBOSITY=1;;
-esac
-if test $am_cv_make_support_nested_variables = yes; then
-    AM_V='$(V)'
-  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-else
-  AM_V=$AM_DEFAULT_VERBOSITY
-  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
-fi
-
- if test -n "$EXEEXT"; then
-  am__EXEEXT_TRUE=
-  am__EXEEXT_FALSE='#'
-else
-  am__EXEEXT_TRUE='#'
-  am__EXEEXT_FALSE=
-fi
-
-if test -z "${ENABLE_SPECS_TRUE}" && test -z "${ENABLE_SPECS_FALSE}"; then
-  as_fn_error $? "conditional \"ENABLE_SPECS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XMLTO_TEXT_TRUE}" && test -z "${HAVE_XMLTO_TEXT_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XMLTO_TEXT\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XMLTO_TRUE}" && test -z "${HAVE_XMLTO_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XMLTO\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_FOP_TRUE}" && test -z "${HAVE_FOP_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_FOP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_XSLTPROC_TRUE}" && test -z "${HAVE_XSLTPROC_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_XSLTPROC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${HAVE_STYLESHEETS_TRUE}" && test -z "${HAVE_STYLESHEETS_FALSE}"; then
-  as_fn_error $? "conditional \"HAVE_STYLESHEETS\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${LINT_TRUE}" && test -z "${LINT_FALSE}"; then
-  as_fn_error $? "conditional \"LINT\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${MAKE_LINT_LIB_TRUE}" && test -z "${MAKE_LINT_LIB_FALSE}"; then
-  as_fn_error $? "conditional \"MAKE_LINT_LIB\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-
-: "${CONFIG_STATUS=./config.status}"
-case $CONFIG_STATUS in #(
-  -*) :
-    CONFIG_STATUS=./$CONFIG_STATUS ;; #(
-  */*) :
-     ;; #(
-  *) :
-    CONFIG_STATUS=./$CONFIG_STATUS ;;
-esac
-
-ac_write_fail=0
-ac_clean_CONFIG_STATUS='"$CONFIG_STATUS"'
-{ printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5
-printf '%s\n' "$as_me: creating $CONFIG_STATUS" >&6;}
-as_write_fail=0
-cat >"$CONFIG_STATUS" <<_ASEOF || as_write_fail=1
-#! $SHELL
-# Generated by $as_me.
-# Run this file to recreate the current configuration.
-# Compiler output produced by configure, useful for debugging
-# configure, is in config.log if it exists.
-
-debug=false
-ac_cs_recheck=false
-ac_cs_silent=false
-
-SHELL=\${CONFIG_SHELL-$SHELL}
-export SHELL
-_ASEOF
-cat >>"$CONFIG_STATUS" <<\_ASEOF || as_write_fail=1
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # contradicts POSIX and common usage.  Disable this.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else case e in #(
-  e) case `(set -o) 2>/dev/null` in #(
-  *posix*) :
-    set -o posix ;; #(
-  *) :
-     ;;
-esac ;;
-esac
-fi
-
-
-
-# Reset variables that may have inherited troublesome values from
-# the environment.
-
-# IFS needs to be set, to space, tab, and newline, in precisely that order.
-# (If _AS_PATH_WALK were called with IFS unset, it would have the
-# side effect of setting IFS to empty, thus disabling word splitting.)
-# Quoting is to prevent editors from complaining about space-tab.
-as_nl='
-'
-export as_nl
-IFS=" ""	$as_nl"
-
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# Ensure predictable behavior from utilities with locale-dependent output.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# We cannot yet rely on "unset" to work, but we need these variables
-# to be unset--not just set to an empty or harmless value--now, to
-# avoid bugs in old shells (e.g. pre-3.0 UWIN ksh).  This construct
-# also avoids known problems related to "unset" and subshell syntax
-# in other old shells (e.g. bash 2.01 and pdksh 5.2.14).
-for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH
-do eval test \${$as_var+y} \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-
-# Ensure that fds 0, 1, and 2 are open.
-if (exec 3>&0) 2>/dev/null; then :; else exec 0</dev/null; fi
-if (exec 3>&1) 2>/dev/null; then :; else exec 1>/dev/null; fi
-if (exec 3>&2)            ; then :; else exec 2>/dev/null; fi
-
-# The user is always right.
-if ${PATH_SEPARATOR+false} :; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in #((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    test -r "$as_dir$0" && as_myself=$as_dir$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as 'sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  printf '%s\n' "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-
-
-# as_fn_error STATUS ERROR [LINENO LOG_FD]
-# ----------------------------------------
-# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-# script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  printf '%s\n' "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} # as_fn_error
-
-
-# as_fn_set_status STATUS
-# -----------------------
-# Set $? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} # as_fn_set_status
-
-# as_fn_exit STATUS
-# -----------------
-# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} # as_fn_exit
-
-# as_fn_unset VAR
-# ---------------
-# Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-# as_fn_append VAR VALUE
-# ----------------------
-# Append the text in VALUE to the end of the definition contained in VAR. Take
-# advantage of any shell optimizations that allow amortized linear growth over
-# repeated appends, instead of the typical quadratic growth present in naive
-# implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null
-then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else case e in #(
-  e) as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  } ;;
-esac
-fi # as_fn_append
-
-# as_fn_arith ARG...
-# ------------------
-# Perform arithmetic evaluation on the ARGs, and store the result in the
-# global $as_val. Take advantage of shells that can avoid forks. The arguments
-# must be portable across $(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null
-then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else case e in #(
-  e) as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  } ;;
-esac
-fi # as_fn_arith
-
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both 'ln -s file dir' and 'ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; 'ln -s' creates a wrapper executable.
-    # In both cases, we have to default to 'cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-
-# as_fn_mkdir_p
-# -------------
-# Create "$as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`printf '%s\n' "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} # as_fn_mkdir_p
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-
-# as_fn_executable_p FILE
-# -----------------------
-# Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} # as_fn_executable_p
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_sed_cpp="y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g"
-as_tr_cpp="eval sed '$as_sed_cpp'" # deprecated
-
-# Sed expression to map a string onto a valid variable name.
-as_sed_sh="y%*+%pp%;s%[^_$as_cr_alnum]%_%g"
-as_tr_sh="eval sed '$as_sed_sh'" # deprecated
-
-
-exec 6>&1
-## ------------------------------------- ##
-## Main body of "$CONFIG_STATUS" script. ##
-## ------------------------------------- ##
-_ASEOF
-test $as_write_fail = 0 && chmod +x "$CONFIG_STATUS" || ac_write_fail=1
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# Save the log message, to keep $0 and so on meaningful, and to
-# report actual input values of CONFIG_FILES etc. instead of their
-# values after options handling.
-ac_log="
-This file was extended by libXext $as_me 1.3.7, which was
-generated by GNU Autoconf 2.73.  Invocation command line was
-
-  CONFIG_FILES    = $CONFIG_FILES
-  CONFIG_HEADERS  = $CONFIG_HEADERS
-  CONFIG_LINKS    = $CONFIG_LINKS
-  CONFIG_COMMANDS = $CONFIG_COMMANDS
-  $ $0 $@
-
-on `(hostname || uname -n) 2>/dev/null | sed 1q`
-"
-
-_ACEOF
-
-case $ac_config_files in *"
-"*) set x $ac_config_files; shift; ac_config_files=$*;;
-esac
-
-case $ac_config_headers in *"
-"*) set x $ac_config_headers; shift; ac_config_headers=$*;;
-esac
-
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-# Files that config.status was made for.
-config_files="$ac_config_files"
-config_headers="$ac_config_headers"
-config_commands="$ac_config_commands"
-
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-ac_cs_usage="\
-'$as_me' instantiates files and other configuration actions
-from templates according to the current configuration.  Unless the files
-and actions are specified as TAGs, all are instantiated by default.
-
-Usage: $0 [OPTION]... [TAG]...
-
-  -h, --help       print this help, then exit
-  -V, --version    print version number and configuration settings, then exit
-      --config     print configuration, then exit
-  -q, --quiet, --silent
-                   do not print progress messages
-  -d, --debug      don't remove temporary files
-      --recheck    update $as_me by reconfiguring in the same conditions
-      --file=FILE[:TEMPLATE]
-                   instantiate the configuration file FILE
-      --header=FILE[:TEMPLATE]
-                   instantiate the configuration header FILE
-
-Configuration files:
-$config_files
-
-Configuration headers:
-$config_headers
-
-Configuration commands:
-$config_commands
-
-Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues>."
-
-_ACEOF
-ac_cs_config=`printf '%s\n' "$ac_configure_args" | sed "$ac_safe_unquote"`
-ac_cs_config_escaped=`printf '%s\n' "$ac_cs_config" | sed "s/^ //; s/'/'\\\\\\\\''/g"`
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-ac_cs_config='$ac_cs_config_escaped'
-ac_cs_version="\\
-libXext config.status 1.3.7
-configured by $0, generated by GNU Autoconf 2.73,
-  with options \\"\$ac_cs_config\\"
-
-Copyright (C) 2026 Free Software Foundation, Inc.
-This config.status script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it."
-
-ac_pwd='$ac_pwd'
-srcdir='$srcdir'
-INSTALL='$INSTALL'
-MKDIR_P='$MKDIR_P'
-AWK='$AWK'
-test -n "\$AWK" || {
-  awk '' </dev/null ||
-    as_fn_error \$? "try installing gawk"
-  AWK=awk
-}
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# The default lists apply if the user does not specify any file.
-ac_need_defaults=:
-while test $# != 0
-do
-  case $1 in
-  --*=?*)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'`
-    ac_shift=:
-    ;;
-  --*=)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=
-    ac_shift=:
-    ;;
-  *)
-    ac_option=$1
-    ac_optarg=$2
-    ac_shift=shift
-    ;;
-  esac
-
-  case $ac_option in
-  # Handling of the options.
-  -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r)
-    ac_cs_recheck=: ;;
-  --version | --versio | --versi | --vers | --ver | --ve | --v | -V )
-    printf '%s\n' "$ac_cs_version"; exit ;;
-  --config | --confi | --conf | --con | --co | --c )
-    printf '%s\n' "$ac_cs_config"; exit ;;
-  --debug | --debu | --deb | --de | --d | -d )
-    debug=: ;;
-  --file | --fil | --fi | --f )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf '%s\n' "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    '') as_fn_error $? "missing file argument" ;;
-    esac
-    as_fn_append CONFIG_FILES " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --header | --heade | --head | --hea )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf '%s\n' "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    as_fn_append CONFIG_HEADERS " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --he | --h)
-    # Conflict between --help and --header
-    as_fn_error $? "ambiguous option: '$1'
-Try '$0 --help' for more information.";;
-  --help | --hel | -h )
-    printf '%s\n' "$ac_cs_usage"; exit ;;
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil | --si | --s)
-    ac_cs_silent=: ;;
-
-  # This is an error.
-  -*) as_fn_error $? "unrecognized option: '$1'
-Try '$0 --help' for more information." ;;
-
-  *) as_fn_append ac_config_targets " $1"
-     ac_need_defaults=false ;;
-
-  esac
-  shift
-done
-
-ac_configure_extra_args=
-
-if $ac_cs_silent; then
-  exec 6>/dev/null
-  ac_configure_extra_args="$ac_configure_extra_args --silent"
-fi
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-if \$ac_cs_recheck; then
-  set X $SHELL '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion
-  shift
-  \printf '%s\n' "running CONFIG_SHELL=$SHELL \$*" >&6
-  CONFIG_SHELL='$SHELL'
-  export CONFIG_SHELL
-  exec "\$@"
-fi
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-exec 5>>config.log
-{
-  echo
-  sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX
-## Running $as_me. ##
-_ASBOX
-  printf '%s\n' "$ac_log"
-} >&5
-
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-#
-# INIT-COMMANDS
-#
-AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}"
-
-
-# The HP-UX ksh and POSIX shell print the target directory to stdout
-# if CDPATH is set.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-sed_quote_subst='$sed_quote_subst'
-double_quote_subst='$double_quote_subst'
-delay_variable_subst='$delay_variable_subst'
-macro_version='`$ECHO "$macro_version" | $SED "$delay_single_quote_subst"`'
-macro_revision='`$ECHO "$macro_revision" | $SED "$delay_single_quote_subst"`'
-enable_shared='`$ECHO "$enable_shared" | $SED "$delay_single_quote_subst"`'
-enable_static='`$ECHO "$enable_static" | $SED "$delay_single_quote_subst"`'
-pic_mode='`$ECHO "$pic_mode" | $SED "$delay_single_quote_subst"`'
-enable_fast_install='`$ECHO "$enable_fast_install" | $SED "$delay_single_quote_subst"`'
-shared_archive_member_spec='`$ECHO "$shared_archive_member_spec" | $SED "$delay_single_quote_subst"`'
-SHELL='`$ECHO "$SHELL" | $SED "$delay_single_quote_subst"`'
-ECHO='`$ECHO "$ECHO" | $SED "$delay_single_quote_subst"`'
-PATH_SEPARATOR='`$ECHO "$PATH_SEPARATOR" | $SED "$delay_single_quote_subst"`'
-host_alias='`$ECHO "$host_alias" | $SED "$delay_single_quote_subst"`'
-host='`$ECHO "$host" | $SED "$delay_single_quote_subst"`'
-host_os='`$ECHO "$host_os" | $SED "$delay_single_quote_subst"`'
-build_alias='`$ECHO "$build_alias" | $SED "$delay_single_quote_subst"`'
-build='`$ECHO "$build" | $SED "$delay_single_quote_subst"`'
-build_os='`$ECHO "$build_os" | $SED "$delay_single_quote_subst"`'
-SED='`$ECHO "$SED" | $SED "$delay_single_quote_subst"`'
-Xsed='`$ECHO "$Xsed" | $SED "$delay_single_quote_subst"`'
-GREP='`$ECHO "$GREP" | $SED "$delay_single_quote_subst"`'
-EGREP='`$ECHO "$EGREP" | $SED "$delay_single_quote_subst"`'
-FGREP='`$ECHO "$FGREP" | $SED "$delay_single_quote_subst"`'
-LD='`$ECHO "$LD" | $SED "$delay_single_quote_subst"`'
-NM='`$ECHO "$NM" | $SED "$delay_single_quote_subst"`'
-LN_S='`$ECHO "$LN_S" | $SED "$delay_single_quote_subst"`'
-max_cmd_len='`$ECHO "$max_cmd_len" | $SED "$delay_single_quote_subst"`'
-ac_objext='`$ECHO "$ac_objext" | $SED "$delay_single_quote_subst"`'
-exeext='`$ECHO "$exeext" | $SED "$delay_single_quote_subst"`'
-lt_unset='`$ECHO "$lt_unset" | $SED "$delay_single_quote_subst"`'
-lt_SP2NL='`$ECHO "$lt_SP2NL" | $SED "$delay_single_quote_subst"`'
-lt_NL2SP='`$ECHO "$lt_NL2SP" | $SED "$delay_single_quote_subst"`'
-lt_cv_to_host_file_cmd='`$ECHO "$lt_cv_to_host_file_cmd" | $SED "$delay_single_quote_subst"`'
-lt_cv_to_tool_file_cmd='`$ECHO "$lt_cv_to_tool_file_cmd" | $SED "$delay_single_quote_subst"`'
-reload_flag='`$ECHO "$reload_flag" | $SED "$delay_single_quote_subst"`'
-reload_cmds='`$ECHO "$reload_cmds" | $SED "$delay_single_quote_subst"`'
-FILECMD='`$ECHO "$FILECMD" | $SED "$delay_single_quote_subst"`'
-OBJDUMP='`$ECHO "$OBJDUMP" | $SED "$delay_single_quote_subst"`'
-deplibs_check_method='`$ECHO "$deplibs_check_method" | $SED "$delay_single_quote_subst"`'
-file_magic_cmd='`$ECHO "$file_magic_cmd" | $SED "$delay_single_quote_subst"`'
-file_magic_glob='`$ECHO "$file_magic_glob" | $SED "$delay_single_quote_subst"`'
-want_nocaseglob='`$ECHO "$want_nocaseglob" | $SED "$delay_single_quote_subst"`'
-DLLTOOL='`$ECHO "$DLLTOOL" | $SED "$delay_single_quote_subst"`'
-sharedlib_from_linklib_cmd='`$ECHO "$sharedlib_from_linklib_cmd" | $SED "$delay_single_quote_subst"`'
-AR='`$ECHO "$AR" | $SED "$delay_single_quote_subst"`'
-lt_ar_flags='`$ECHO "$lt_ar_flags" | $SED "$delay_single_quote_subst"`'
-AR_FLAGS='`$ECHO "$AR_FLAGS" | $SED "$delay_single_quote_subst"`'
-archiver_list_spec='`$ECHO "$archiver_list_spec" | $SED "$delay_single_quote_subst"`'
-STRIP='`$ECHO "$STRIP" | $SED "$delay_single_quote_subst"`'
-RANLIB='`$ECHO "$RANLIB" | $SED "$delay_single_quote_subst"`'
-old_postinstall_cmds='`$ECHO "$old_postinstall_cmds" | $SED "$delay_single_quote_subst"`'
-old_postuninstall_cmds='`$ECHO "$old_postuninstall_cmds" | $SED "$delay_single_quote_subst"`'
-old_archive_cmds='`$ECHO "$old_archive_cmds" | $SED "$delay_single_quote_subst"`'
-lock_old_archive_extraction='`$ECHO "$lock_old_archive_extraction" | $SED "$delay_single_quote_subst"`'
-CC='`$ECHO "$CC" | $SED "$delay_single_quote_subst"`'
-CFLAGS='`$ECHO "$CFLAGS" | $SED "$delay_single_quote_subst"`'
-compiler='`$ECHO "$compiler" | $SED "$delay_single_quote_subst"`'
-GCC='`$ECHO "$GCC" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_pipe='`$ECHO "$lt_cv_sys_global_symbol_pipe" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_cdecl='`$ECHO "$lt_cv_sys_global_symbol_to_cdecl" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_import='`$ECHO "$lt_cv_sys_global_symbol_to_import" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_c_name_address='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address_lib_prefix" | $SED "$delay_single_quote_subst"`'
-lt_cv_nm_interface='`$ECHO "$lt_cv_nm_interface" | $SED "$delay_single_quote_subst"`'
-nm_file_list_spec='`$ECHO "$nm_file_list_spec" | $SED "$delay_single_quote_subst"`'
-lt_sysroot='`$ECHO "$lt_sysroot" | $SED "$delay_single_quote_subst"`'
-lt_cv_truncate_bin='`$ECHO "$lt_cv_truncate_bin" | $SED "$delay_single_quote_subst"`'
-objdir='`$ECHO "$objdir" | $SED "$delay_single_quote_subst"`'
-MAGIC_CMD='`$ECHO "$MAGIC_CMD" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_no_builtin_flag='`$ECHO "$lt_prog_compiler_no_builtin_flag" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_pic='`$ECHO "$lt_prog_compiler_pic" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_wl='`$ECHO "$lt_prog_compiler_wl" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_static='`$ECHO "$lt_prog_compiler_static" | $SED "$delay_single_quote_subst"`'
-lt_cv_prog_compiler_c_o='`$ECHO "$lt_cv_prog_compiler_c_o" | $SED "$delay_single_quote_subst"`'
-need_locks='`$ECHO "$need_locks" | $SED "$delay_single_quote_subst"`'
-MANIFEST_TOOL='`$ECHO "$MANIFEST_TOOL" | $SED "$delay_single_quote_subst"`'
-DSYMUTIL='`$ECHO "$DSYMUTIL" | $SED "$delay_single_quote_subst"`'
-NMEDIT='`$ECHO "$NMEDIT" | $SED "$delay_single_quote_subst"`'
-LIPO='`$ECHO "$LIPO" | $SED "$delay_single_quote_subst"`'
-OTOOL='`$ECHO "$OTOOL" | $SED "$delay_single_quote_subst"`'
-OTOOL64='`$ECHO "$OTOOL64" | $SED "$delay_single_quote_subst"`'
-libext='`$ECHO "$libext" | $SED "$delay_single_quote_subst"`'
-shrext_cmds='`$ECHO "$shrext_cmds" | $SED "$delay_single_quote_subst"`'
-extract_expsyms_cmds='`$ECHO "$extract_expsyms_cmds" | $SED "$delay_single_quote_subst"`'
-archive_cmds_need_lc='`$ECHO "$archive_cmds_need_lc" | $SED "$delay_single_quote_subst"`'
-enable_shared_with_static_runtimes='`$ECHO "$enable_shared_with_static_runtimes" | $SED "$delay_single_quote_subst"`'
-export_dynamic_flag_spec='`$ECHO "$export_dynamic_flag_spec" | $SED "$delay_single_quote_subst"`'
-whole_archive_flag_spec='`$ECHO "$whole_archive_flag_spec" | $SED "$delay_single_quote_subst"`'
-compiler_needs_object='`$ECHO "$compiler_needs_object" | $SED "$delay_single_quote_subst"`'
-old_archive_from_new_cmds='`$ECHO "$old_archive_from_new_cmds" | $SED "$delay_single_quote_subst"`'
-old_archive_from_expsyms_cmds='`$ECHO "$old_archive_from_expsyms_cmds" | $SED "$delay_single_quote_subst"`'
-archive_cmds='`$ECHO "$archive_cmds" | $SED "$delay_single_quote_subst"`'
-archive_expsym_cmds='`$ECHO "$archive_expsym_cmds" | $SED "$delay_single_quote_subst"`'
-module_cmds='`$ECHO "$module_cmds" | $SED "$delay_single_quote_subst"`'
-module_expsym_cmds='`$ECHO "$module_expsym_cmds" | $SED "$delay_single_quote_subst"`'
-with_gnu_ld='`$ECHO "$with_gnu_ld" | $SED "$delay_single_quote_subst"`'
-allow_undefined_flag='`$ECHO "$allow_undefined_flag" | $SED "$delay_single_quote_subst"`'
-no_undefined_flag='`$ECHO "$no_undefined_flag" | $SED "$delay_single_quote_subst"`'
-hardcode_libdir_flag_spec='`$ECHO "$hardcode_libdir_flag_spec" | $SED "$delay_single_quote_subst"`'
-hardcode_libdir_separator='`$ECHO "$hardcode_libdir_separator" | $SED "$delay_single_quote_subst"`'
-hardcode_direct='`$ECHO "$hardcode_direct" | $SED "$delay_single_quote_subst"`'
-hardcode_direct_absolute='`$ECHO "$hardcode_direct_absolute" | $SED "$delay_single_quote_subst"`'
-hardcode_minus_L='`$ECHO "$hardcode_minus_L" | $SED "$delay_single_quote_subst"`'
-hardcode_shlibpath_var='`$ECHO "$hardcode_shlibpath_var" | $SED "$delay_single_quote_subst"`'
-hardcode_automatic='`$ECHO "$hardcode_automatic" | $SED "$delay_single_quote_subst"`'
-inherit_rpath='`$ECHO "$inherit_rpath" | $SED "$delay_single_quote_subst"`'
-link_all_deplibs='`$ECHO "$link_all_deplibs" | $SED "$delay_single_quote_subst"`'
-always_export_symbols='`$ECHO "$always_export_symbols" | $SED "$delay_single_quote_subst"`'
-export_symbols_cmds='`$ECHO "$export_symbols_cmds" | $SED "$delay_single_quote_subst"`'
-exclude_expsyms='`$ECHO "$exclude_expsyms" | $SED "$delay_single_quote_subst"`'
-include_expsyms='`$ECHO "$include_expsyms" | $SED "$delay_single_quote_subst"`'
-prelink_cmds='`$ECHO "$prelink_cmds" | $SED "$delay_single_quote_subst"`'
-postlink_cmds='`$ECHO "$postlink_cmds" | $SED "$delay_single_quote_subst"`'
-file_list_spec='`$ECHO "$file_list_spec" | $SED "$delay_single_quote_subst"`'
-variables_saved_for_relink='`$ECHO "$variables_saved_for_relink" | $SED "$delay_single_quote_subst"`'
-need_lib_prefix='`$ECHO "$need_lib_prefix" | $SED "$delay_single_quote_subst"`'
-need_version='`$ECHO "$need_version" | $SED "$delay_single_quote_subst"`'
-version_type='`$ECHO "$version_type" | $SED "$delay_single_quote_subst"`'
-runpath_var='`$ECHO "$runpath_var" | $SED "$delay_single_quote_subst"`'
-shlibpath_var='`$ECHO "$shlibpath_var" | $SED "$delay_single_quote_subst"`'
-shlibpath_overrides_runpath='`$ECHO "$shlibpath_overrides_runpath" | $SED "$delay_single_quote_subst"`'
-libname_spec='`$ECHO "$libname_spec" | $SED "$delay_single_quote_subst"`'
-library_names_spec='`$ECHO "$library_names_spec" | $SED "$delay_single_quote_subst"`'
-soname_spec='`$ECHO "$soname_spec" | $SED "$delay_single_quote_subst"`'
-install_override_mode='`$ECHO "$install_override_mode" | $SED "$delay_single_quote_subst"`'
-postinstall_cmds='`$ECHO "$postinstall_cmds" | $SED "$delay_single_quote_subst"`'
-postuninstall_cmds='`$ECHO "$postuninstall_cmds" | $SED "$delay_single_quote_subst"`'
-finish_cmds='`$ECHO "$finish_cmds" | $SED "$delay_single_quote_subst"`'
-finish_eval='`$ECHO "$finish_eval" | $SED "$delay_single_quote_subst"`'
-hardcode_into_libs='`$ECHO "$hardcode_into_libs" | $SED "$delay_single_quote_subst"`'
-sys_lib_search_path_spec='`$ECHO "$sys_lib_search_path_spec" | $SED "$delay_single_quote_subst"`'
-configure_time_dlsearch_path='`$ECHO "$configure_time_dlsearch_path" | $SED "$delay_single_quote_subst"`'
-configure_time_lt_sys_library_path='`$ECHO "$configure_time_lt_sys_library_path" | $SED "$delay_single_quote_subst"`'
-hardcode_action='`$ECHO "$hardcode_action" | $SED "$delay_single_quote_subst"`'
-enable_dlopen='`$ECHO "$enable_dlopen" | $SED "$delay_single_quote_subst"`'
-enable_dlopen_self='`$ECHO "$enable_dlopen_self" | $SED "$delay_single_quote_subst"`'
-enable_dlopen_self_static='`$ECHO "$enable_dlopen_self_static" | $SED "$delay_single_quote_subst"`'
-old_striplib='`$ECHO "$old_striplib" | $SED "$delay_single_quote_subst"`'
-striplib='`$ECHO "$striplib" | $SED "$delay_single_quote_subst"`'
-
-LTCC='$LTCC'
-LTCFLAGS='$LTCFLAGS'
-compiler='$compiler_DEFAULT'
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-\$1
-_LTECHO_EOF'
-}
-
-# Quote evaled strings.
-for var in SHELL \
-ECHO \
-PATH_SEPARATOR \
-SED \
-GREP \
-EGREP \
-FGREP \
-LD \
-NM \
-LN_S \
-lt_SP2NL \
-lt_NL2SP \
-reload_flag \
-FILECMD \
-OBJDUMP \
-deplibs_check_method \
-file_magic_cmd \
-file_magic_glob \
-want_nocaseglob \
-DLLTOOL \
-sharedlib_from_linklib_cmd \
-AR \
-archiver_list_spec \
-STRIP \
-RANLIB \
-CC \
-CFLAGS \
-compiler \
-lt_cv_sys_global_symbol_pipe \
-lt_cv_sys_global_symbol_to_cdecl \
-lt_cv_sys_global_symbol_to_import \
-lt_cv_sys_global_symbol_to_c_name_address \
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix \
-lt_cv_nm_interface \
-nm_file_list_spec \
-lt_cv_truncate_bin \
-lt_prog_compiler_no_builtin_flag \
-lt_prog_compiler_pic \
-lt_prog_compiler_wl \
-lt_prog_compiler_static \
-lt_cv_prog_compiler_c_o \
-need_locks \
-MANIFEST_TOOL \
-DSYMUTIL \
-NMEDIT \
-LIPO \
-OTOOL \
-OTOOL64 \
-shrext_cmds \
-export_dynamic_flag_spec \
-whole_archive_flag_spec \
-compiler_needs_object \
-with_gnu_ld \
-allow_undefined_flag \
-no_undefined_flag \
-hardcode_libdir_flag_spec \
-hardcode_libdir_separator \
-exclude_expsyms \
-include_expsyms \
-file_list_spec \
-variables_saved_for_relink \
-libname_spec \
-library_names_spec \
-soname_spec \
-install_override_mode \
-finish_eval \
-old_striplib \
-striplib; do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[\\\\\\\`\\"\\\$]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-# Double-quote double-evaled strings.
-for var in reload_cmds \
-old_postinstall_cmds \
-old_postuninstall_cmds \
-old_archive_cmds \
-extract_expsyms_cmds \
-old_archive_from_new_cmds \
-old_archive_from_expsyms_cmds \
-archive_cmds \
-archive_expsym_cmds \
-module_cmds \
-module_expsym_cmds \
-export_symbols_cmds \
-prelink_cmds \
-postlink_cmds \
-postinstall_cmds \
-postuninstall_cmds \
-finish_cmds \
-sys_lib_search_path_spec \
-configure_time_dlsearch_path \
-configure_time_lt_sys_library_path; do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[\\\\\\\`\\"\\\$]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-ac_aux_dir='$ac_aux_dir'
-
-# See if we are running on zsh, and set the options that allow our
-# commands through without removal of \ escapes INIT.
-if test -n "\${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-
-    PACKAGE='$PACKAGE'
-    VERSION='$VERSION'
-    RM='$RM'
-    ofile='$ofile'
-
-
-
-
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-
-# Handling of arguments.
-for ac_config_target in $ac_config_targets
-do
-  case $ac_config_target in
-    "config.h") CONFIG_HEADERS="$CONFIG_HEADERS config.h" ;;
-    "depfiles") CONFIG_COMMANDS="$CONFIG_COMMANDS depfiles" ;;
-    "libtool") CONFIG_COMMANDS="$CONFIG_COMMANDS libtool" ;;
-    "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;;
-    "man/Makefile") CONFIG_FILES="$CONFIG_FILES man/Makefile" ;;
-    "src/Makefile") CONFIG_FILES="$CONFIG_FILES src/Makefile" ;;
-    "specs/Makefile") CONFIG_FILES="$CONFIG_FILES specs/Makefile" ;;
-    "xext.pc") CONFIG_FILES="$CONFIG_FILES xext.pc" ;;
-
-  *) as_fn_error $? "invalid argument: '$ac_config_target'" "$LINENO" 5;;
-  esac
-done
-
-
-# If the user did not use the arguments to specify the items to instantiate,
-# then the envvar interface is used.  Set only those that are not.
-# We use the long form for the default assignment because of an extremely
-# bizarre bug on SunOS 4.1.3.
-if $ac_need_defaults; then
-  test ${CONFIG_FILES+y} || CONFIG_FILES=$config_files
-  test ${CONFIG_HEADERS+y} || CONFIG_HEADERS=$config_headers
-  test ${CONFIG_COMMANDS+y} || CONFIG_COMMANDS=$config_commands
-fi
-
-# Have a temporary directory for convenience.  Make it in the build tree
-# simply because there is no reason against having it here, and in addition,
-# creating and moving files from /tmp can sometimes cause problems.
-# Hook for its removal unless debugging.
-# Note that there is a small window in which the directory will not be cleaned:
-# after its creation but before its name has been assigned to '$tmp'.
-$debug ||
-{
-  tmp= ac_tmp=
-  trap 'exit_status=$?
-  : "${ac_tmp:=$tmp}"
-  { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status
-' 0
-  trap 'as_fn_exit 1' 1 2 13 15
-}
-# Create a (secure) tmp directory for tmp files.
-
-{
-  tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` &&
-  test -d "$tmp"
-}  ||
-{
-  tmp=./conf$$-$RANDOM
-  (umask 077 && mkdir "$tmp")
-} || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5
-ac_tmp=$tmp
-
-# Set up the scripts for CONFIG_FILES section.
-# No need to generate them if there are no CONFIG_FILES.
-# This happens for instance with './config.status config.h'.
-if test -n "$CONFIG_FILES"; then
-
-
-ac_cr=`echo X | tr X '\015'`
-# On cygwin, bash can eat \r inside `` if the user requested igncr.
-# But we know of no other shell where ac_cr would be empty at this
-# point, so we can use a bashism as a fallback.
-if test "x$ac_cr" = x; then
-  eval ac_cr=\$\'\\r\'
-fi
-ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' </dev/null 2>/dev/null`
-if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then
-  ac_cs_awk_cr='\\r'
-else
-  ac_cs_awk_cr=$ac_cr
-fi
-
-echo 'BEGIN {' >"$ac_tmp/subs1.awk" &&
-_ACEOF
-
-
-{
-  echo "cat >conf$$subs.awk <<_ACEOF" &&
-  echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' &&
-  echo "_ACEOF"
-} >conf$$subs.sh ||
-  as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-ac_delim_num=`echo "$ac_subst_vars" | sed -n '$='`
-ac_delim='%!_!# '
-for ac_last_try in false false false false false :; do
-  . ./conf$$subs.sh ||
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-
-  ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | sed -n '$='`
-  if test $ac_delim_n = $ac_delim_num; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-rm -f conf$$subs.sh
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK &&
-_ACEOF
-sed -n '
-h
-s/^/S["/; s/!.*/"]=/
-p
-g
-s/^[^!]*!//
-:repl
-t repl
-s/'"$ac_delim"'$//
-t delim
-:nl
-h
-s/\(.\{148\}\)..*/\1/
-t more1
-s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/
-p
-n
-b repl
-:more1
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t nl
-:delim
-h
-s/\(.\{148\}\)..*/\1/
-t more2
-s/["\\]/\\&/g; s/^/"/; s/$/"/
-p
-b
-:more2
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t delim
-' <conf$$subs.awk | sed '
-/^[^""]/{
-  N
-  s/\n//
-}
-' >>"$CONFIG_STATUS" || ac_write_fail=1
-rm -f conf$$subs.awk
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-_ACAWK
-cat >>"\$ac_tmp/subs1.awk" <<_ACAWK &&
-  for (key in S) S_is_set[key] = 1
-  FS = ""
-
-}
-{
-  line = $ 0
-  nfields = split(line, field, "@")
-  substed = 0
-  len = length(field[1])
-  for (i = 2; i < nfields; i++) {
-    key = field[i]
-    keylen = length(key)
-    if (S_is_set[key]) {
-      value = S[key]
-      line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3)
-      len += length(value) + length(field[++i])
-      substed = 1
-    } else
-      len += 1 + keylen
-  }
-
-  print line
-}
-
-_ACAWK
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then
-  sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g"
-else
-  cat
-fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \
-  || as_fn_error $? "could not setup config files machinery" "$LINENO" 5
-_ACEOF
-
-# VPATH may cause trouble with some makes, so we remove sole $(srcdir),
-# ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and
-# trailing colons and then remove the whole line if VPATH becomes empty
-# (actually we leave an empty line to preserve line numbers).
-if test "x$srcdir" = x.; then
-  ac_vpsub='/^[	 ]*VPATH[	 ]*=[	 ]*/{
-h
-s///
-s/^/:/
-s/[	 ]*$/:/
-s/:\$(srcdir):/:/g
-s/:\${srcdir}:/:/g
-s/:@srcdir@:/:/g
-s/^:*//
-s/:*$//
-x
-s/\(=[	 ]*\).*/\1/
-G
-s/\n//
-s/^[^=]*=[	 ]*$//
-}'
-fi
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-fi # test -n "$CONFIG_FILES"
-
-# Set up the scripts for CONFIG_HEADERS section.
-# No need to generate them if there are no CONFIG_HEADERS.
-# This happens for instance with './config.status Makefile'.
-if test -n "$CONFIG_HEADERS"; then
-cat >"$ac_tmp/defines.awk" <<\_ACAWK ||
-BEGIN {
-_ACEOF
-
-# Transform confdefs.h into an awk script 'defines.awk', embedded as
-# here-document in config.status, that substitutes the proper values into
-# config.h.in to produce config.h.
-
-# Create a delimiter string that does not exist in confdefs.h, to ease
-# handling of long lines.
-ac_delim='%!_!# '
-for ac_last_try in false false :; do
-  ac_tt=`sed -n "/$ac_delim/p" confdefs.h`
-  if test -z "$ac_tt"; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-
-# For the awk script, D is an array of macro values keyed by name,
-# likewise P contains macro parameters if any.  Preserve backslash
-# newline sequences.
-
-ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]*
-sed -n '
-s/.\{148\}/&'"$ac_delim"'/g
-t rset
-:rset
-s/^[	 ]*#[	 ]*define[	 ][	 ]*/ /
-t def
-d
-:def
-s/\\$//
-t bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3"/p
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2"/p
-d
-:bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3\\\\\\n"\\/p
-t cont
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p
-t cont
-d
-:cont
-n
-s/.\{148\}/&'"$ac_delim"'/g
-t clear
-:clear
-s/\\$//
-t bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/"/p
-d
-:bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p
-b cont
-' <confdefs.h | sed '
-s/'"$ac_delim"'/"\\\
-"/g' >>"$CONFIG_STATUS" || ac_write_fail=1
-
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-  for (key in D) D_is_set[key] = 1
-  FS = ""
-}
-/^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ {
-  line = \$ 0
-  split(line, arg, " ")
-  if (arg[1] == "#") {
-    defundef = arg[2]
-    mac1 = arg[3]
-  } else {
-    defundef = substr(arg[1], 2)
-    mac1 = arg[2]
-  }
-  split(mac1, mac2, "(") #)
-  macro = mac2[1]
-  prefix = substr(line, 1, index(line, defundef) - 1)
-  if (D_is_set[macro]) {
-    suffix = P[macro] D[macro]
-    while (suffix ~ /[\t ]$/) {
-      suffix = substr(suffix, 1, length(suffix) - 1)
-    }
-    # Preserve the white space surrounding the "#".
-    print prefix "define", macro suffix
-    next
-  } else {
-    # Replace #undef with comments.  This is necessary, for example,
-    # in the case of _POSIX_SOURCE, which is predefined and required
-    # on some systems where configure will not decide to define it.
-    if (defundef == "undef") {
-      print "/*", prefix defundef, macro, "*/"
-      next
-    }
-  }
-}
-{ print }
-_ACAWK
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-  as_fn_error $? "could not setup config headers machinery" "$LINENO" 5
-fi # test -n "$CONFIG_HEADERS"
-
-
-eval set X "  :F $CONFIG_FILES  :H $CONFIG_HEADERS    :C $CONFIG_COMMANDS"
-shift
-for ac_tag
-do
-  case $ac_tag in
-  :[FHLC]) ac_mode=$ac_tag; continue;;
-  esac
-  case $ac_mode$ac_tag in
-  :[FHL]*:*);;
-  :L* | :C*:*) as_fn_error $? "invalid tag '$ac_tag'" "$LINENO" 5;;
-  :[FH]-) ac_tag=-:-;;
-  :[FH]*) ac_tag=$ac_tag:$ac_tag.in;;
-  esac
-  ac_save_IFS=$IFS
-  IFS=:
-  set x $ac_tag
-  IFS=$ac_save_IFS
-  shift
-  ac_file=$1
-  shift
-
-  case $ac_mode in
-  :L) ac_source=$1;;
-  :[FH])
-    ac_file_inputs=
-    for ac_f
-    do
-      case $ac_f in
-      -) ac_f="$ac_tmp/stdin";;
-      *) # Look for the file first in the build tree, then in the source tree
-	 # (if the path is not absolute).  The absolute path cannot be DOS-style,
-	 # because $ac_f cannot contain ':'.
-	 test -f "$ac_f" ||
-	   case $ac_f in
-	   [\\/$]*) false;;
-	   *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";;
-	   esac ||
-	   as_fn_error 1 "cannot find input file: '$ac_f'" "$LINENO" 5;;
-      esac
-      case $ac_f in *\'*) ac_f=`printf '%s\n' "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac
-      as_fn_append ac_file_inputs " '$ac_f'"
-    done
-
-    # Let's still pretend it is 'configure' which instantiates (i.e., don't
-    # use $as_me), people would be surprised to read:
-    #    /* config.h.  Generated by config.status.  */
-    configure_input='Generated from '`
-	  printf '%s\n' "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g'
-	`' by configure.'
-    if test x"$ac_file" != x-; then
-      configure_input="$ac_file.  $configure_input"
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5
-printf '%s\n' "$as_me: creating $ac_file" >&6;}
-    fi
-    # Neutralize special characters interpreted by sed in replacement strings.
-    case $configure_input in #(
-    *\&* | *\|* | *\\* )
-       ac_sed_conf_input=`printf '%s\n' "$configure_input" |
-       sed 's/[\\\\&|]/\\\\&/g'`;; #(
-    *) ac_sed_conf_input=$configure_input;;
-    esac
-
-    case $ac_tag in
-    *:-:* | *:-) cat >"$ac_tmp/stdin" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;;
-    esac
-    ;;
-  esac
-
-  ac_dir=`$as_dirname -- "$ac_file" ||
-$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$ac_file" : 'X\(//\)[^/]' \| \
-	 X"$ac_file" : 'X\(//\)$' \| \
-	 X"$ac_file" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$ac_file" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  as_dir="$ac_dir"; as_fn_mkdir_p
-  ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`printf '%s\n' "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`printf '%s\n' "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-
-  case $ac_mode in
-  :F)
-  #
-  # CONFIG_FILE
-  #
-
-  case $INSTALL in
-  [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;;
-  *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;;
-  esac
-  ac_MKDIR_P=$MKDIR_P
-  case $MKDIR_P in
-  [\\/$]* | ?:[\\/]* ) ;;
-  */*) ac_MKDIR_P=$ac_top_build_prefix$MKDIR_P ;;
-  esac
-_ACEOF
-
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-# If the template does not know about datarootdir, expand it.
-# FIXME: This hack should be removed a few years after 2.60.
-ac_datarootdir_hack=; ac_datarootdir_seen=
-ac_sed_dataroot='
-/datarootdir/ {
-  p
-  q
-}
-/@datadir@/p
-/@docdir@/p
-/@infodir@/p
-/@localedir@/p
-/@mandir@/p'
-case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in
-*datarootdir*) ac_datarootdir_seen=yes;;
-*@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*)
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5
-printf '%s\n' "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;}
-_ACEOF
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-  ac_datarootdir_hack='
-  s&@datadir@&$datadir&g
-  s&@docdir@&$docdir&g
-  s&@infodir@&$infodir&g
-  s&@localedir@&$localedir&g
-  s&@mandir@&$mandir&g
-  s&\\\${datarootdir}&$datarootdir&g' ;;
-esac
-_ACEOF
-
-# Neutralize VPATH when '$srcdir' = '.'.
-# Shell code in configure.ac might set extrasub.
-# FIXME: do we really want to maintain this feature?
-cat >>"$CONFIG_STATUS" <<_ACEOF || ac_write_fail=1
-ac_sed_extra="$ac_vpsub
-$extrasub
-_ACEOF
-cat >>"$CONFIG_STATUS" <<\_ACEOF || ac_write_fail=1
-:t
-/@[a-zA-Z_][a-zA-Z_0-9]*@/!b
-s|@configure_input@|$ac_sed_conf_input|;t t
-s&@top_builddir@&$ac_top_builddir_sub&;t t
-s&@top_build_prefix@&$ac_top_build_prefix&;t t
-s&@srcdir@&$ac_srcdir&;t t
-s&@abs_srcdir@&$ac_abs_srcdir&;t t
-s&@top_srcdir@&$ac_top_srcdir&;t t
-s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t
-s&@builddir@&$ac_builddir&;t t
-s&@abs_builddir@&$ac_abs_builddir&;t t
-s&@abs_top_builddir@&$ac_abs_top_builddir&;t t
-s&@INSTALL@&$ac_INSTALL&;t t
-s&@MKDIR_P@&$ac_MKDIR_P&;t t
-$ac_datarootdir_hack
-"
-eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \
-  >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-
-test -z "$ac_datarootdir_hack$ac_datarootdir_seen" &&
-  { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } &&
-  { ac_out=`sed -n '/^[	 ]*datarootdir[	 ]*:*=/p' \
-      "$ac_tmp/out"`; test -z "$ac_out"; } &&
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable 'datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&5
-printf '%s\n' "$as_me: WARNING: $ac_file contains a reference to the variable 'datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&2;}
-
-  rm -f "$ac_tmp/stdin"
-  case $ac_file in
-  -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";;
-  *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";;
-  esac \
-  || as_fn_error $? "could not create $ac_file" "$LINENO" 5
- ;;
-  :H)
-  #
-  # CONFIG_HEADER
-  #
-  if test x"$ac_file" != x-; then
-    {
-      printf '%s\n' "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs"
-    } >"$ac_tmp/config.h" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then
-      { printf '%s\n' "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5
-printf '%s\n' "$as_me: $ac_file is unchanged" >&6;}
-    else
-      rm -f "$ac_file"
-      mv "$ac_tmp/config.h" "$ac_file" \
-	|| as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    fi
-  else
-    printf '%s\n' "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \
-      || as_fn_error $? "could not create -" "$LINENO" 5
-  fi
-# Compute "$ac_file"'s index in $config_headers.
-_am_arg="$ac_file"
-_am_stamp_count=1
-for _am_header in $config_headers :; do
-  case $_am_header in
-    $_am_arg | $_am_arg:* )
-      break ;;
-    * )
-      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
-  esac
-done
-echo "timestamp for $_am_arg" >`$as_dirname -- "$_am_arg" ||
-$as_expr X"$_am_arg" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$_am_arg" : 'X\(//\)[^/]' \| \
-	 X"$_am_arg" : 'X\(//\)$' \| \
-	 X"$_am_arg" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$_am_arg" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`/stamp-h$_am_stamp_count
- ;;
-
-  :C)  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: executing $ac_file commands" >&5
-printf '%s\n' "$as_me: executing $ac_file commands" >&6;}
- ;;
-  esac
-
-
-  case $ac_file$ac_mode in
-    "depfiles":C) test x"$AMDEP_TRUE" != x"" || {
-  # Older Autoconf quotes --file arguments for eval, but not when files
-  # are listed without --file.  Let's play safe and only enable the eval
-  # if we detect the quoting.
-  # TODO: see whether this extra hack can be removed once we start
-  # requiring Autoconf 2.70 or later.
-  case $CONFIG_FILES in #(
-  *\'*) :
-    eval set x "$CONFIG_FILES" ;; #(
-  *) :
-    set x $CONFIG_FILES ;; #(
-  *) :
-     ;;
-esac
-  shift
-  # Used to flag and report bootstrapping failures.
-  am_rc=0
-  for am_mf
-  do
-    # Strip MF so we end up with the name of the file.
-    am_mf=`printf '%s\n' "$am_mf" | sed -e 's/:.*$//'`
-    # Check whether this is an Automake generated Makefile which includes
-    # dependency-tracking related rules and includes.
-    # Grep'ing the whole file directly is not great: AIX grep has a line
-    # limit of 2048, but all sed's we know have understand at least 4000.
-    sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \
-      || continue
-    am_dirpart=`$as_dirname -- "$am_mf" ||
-$as_expr X"$am_mf" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$am_mf" : 'X\(//\)[^/]' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X"$am_mf" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    am_filepart=`$as_basename -- "$am_mf" ||
-$as_expr X/"$am_mf" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf '%s\n' X/"$am_mf" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    { echo "$as_me:$LINENO: cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles" >&5
-   (cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } || am_rc=$?
-  done
-  if test $am_rc -ne 0; then
-    { { printf '%s\n' "$as_me:${as_lineno-$LINENO}: error: in '$ac_pwd':" >&5
-printf '%s\n' "$as_me: error: in '$ac_pwd':" >&2;}
-as_fn_error $? "Something went wrong bootstrapping makefile fragments
-    for automatic dependency tracking.  If GNU make was not used, consider
-    re-running the configure script with MAKE=\"gmake\" (or whatever is
-    necessary).  You can also try re-running configure with the
-    '--disable-dependency-tracking' option to at least be able to build
-    the package (albeit without support for automatic dependency tracking).
-See 'config.log' for more details" "$LINENO" 5; }
-  fi
-  { am_dirpart=; unset am_dirpart;}
-  { am_filepart=; unset am_filepart;}
-  { am_mf=; unset am_mf;}
-  { am_rc=; unset am_rc;}
-  rm -f conftest-deps.mk
-}
- ;;
-    "libtool":C)
-
-    # See if we are running on zsh, and set the options that allow our
-    # commands through without removal of \ escapes.
-    if test -n "${ZSH_VERSION+set}"; then
-      setopt NO_GLOB_SUBST
-    fi
-
-    cfgfile=${ofile}T
-    trap "$RM \"$cfgfile\"; exit 1" 1 2 15
-    $RM "$cfgfile"
-
-    cat <<_LT_EOF >> "$cfgfile"
-#! $SHELL
-# Generated automatically by $as_me ($PACKAGE) $VERSION
-# NOTE: Changes made to this file will be lost: look at ltmain.sh.
-
-# Provide generalized library-building support services.
-# Written by Gordon Matzigkeit, 1996
-
-# Copyright (C) 2024 Free Software Foundation, Inc.
-# This is free software; see the source for copying conditions.  There is NO
-# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-
-# GNU Libtool is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program or library that is built
-# using GNU Libtool, you may include this file under the  same
-# distribution terms that you use for the rest of that program.
-#
-# GNU Libtool is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-
-# The names of the tagged configurations supported by this script.
-available_tags=''
-
-# Configured defaults for sys_lib_dlsearch_path munging.
-: \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"}
-
-# ### BEGIN LIBTOOL CONFIG
-
-# Which release of libtool.m4 was used?
-macro_version=$macro_version
-macro_revision=$macro_revision
-
-# Whether or not to build shared libraries.
-build_libtool_libs=$enable_shared
-
-# Whether or not to build static libraries.
-build_old_libs=$enable_static
-
-# What type of objects to build.
-pic_mode=$pic_mode
-
-# Whether or not to optimize for fast installation.
-fast_install=$enable_fast_install
-
-# Shared archive member basename,for filename based shared library versioning on AIX.
-shared_archive_member_spec=$shared_archive_member_spec
-
-# Shell to use when invoking shell scripts.
-SHELL=$lt_SHELL
-
-# An echo program that protects backslashes.
-ECHO=$lt_ECHO
-
-# The PATH separator for the build system.
-PATH_SEPARATOR=$lt_PATH_SEPARATOR
-
-# The host system.
-host_alias=$host_alias
-host=$host
-host_os=$host_os
-
-# The build system.
-build_alias=$build_alias
-build=$build
-build_os=$build_os
-
-# A sed program that does not truncate output.
-SED=$lt_SED
-
-# Sed that helps us avoid accidentally triggering echo(1) options like -n.
-Xsed="\$SED -e 1s/^X//"
-
-# A grep program that handles long lines.
-GREP=$lt_GREP
-
-# An ERE matcher.
-EGREP=$lt_EGREP
-
-# A literal string matcher.
-FGREP=$lt_FGREP
-
-# A BSD- or MS-compatible name lister.
-NM=$lt_NM
-
-# Whether we need soft or hard links.
-LN_S=$lt_LN_S
-
-# What is the maximum length of a command?
-max_cmd_len=$max_cmd_len
-
-# Object file suffix (normally "o").
-objext=$ac_objext
-
-# Executable file suffix (normally "").
-exeext=$exeext
-
-# whether the shell understands "unset".
-lt_unset=$lt_unset
-
-# turn spaces into newlines.
-SP2NL=$lt_lt_SP2NL
-
-# turn newlines into spaces.
-NL2SP=$lt_lt_NL2SP
-
-# convert \$build file names to \$host format.
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-
-# convert \$build files to toolchain format.
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-
-# A file(cmd) program that detects file types.
-FILECMD=$lt_FILECMD
-
-# An object symbol dumper.
-OBJDUMP=$lt_OBJDUMP
-
-# Method to check whether dependent libraries are shared objects.
-deplibs_check_method=$lt_deplibs_check_method
-
-# Command to use when deplibs_check_method = "file_magic".
-file_magic_cmd=$lt_file_magic_cmd
-
-# How to find potential files when deplibs_check_method = "file_magic".
-file_magic_glob=$lt_file_magic_glob
-
-# Find potential files using nocaseglob when deplibs_check_method = "file_magic".
-want_nocaseglob=$lt_want_nocaseglob
-
-# DLL creation program.
-DLLTOOL=$lt_DLLTOOL
-
-# Command to associate shared and link libraries.
-sharedlib_from_linklib_cmd=$lt_sharedlib_from_linklib_cmd
-
-# The archiver.
-AR=$lt_AR
-
-# Flags to create an archive (by configure).
-lt_ar_flags=$lt_ar_flags
-
-# Flags to create an archive.
-AR_FLAGS=\${ARFLAGS-"\$lt_ar_flags"}
-
-# How to feed a file listing to the archiver.
-archiver_list_spec=$lt_archiver_list_spec
-
-# A symbol stripping program.
-STRIP=$lt_STRIP
-
-# Commands used to install an old-style archive.
-RANLIB=$lt_RANLIB
-old_postinstall_cmds=$lt_old_postinstall_cmds
-old_postuninstall_cmds=$lt_old_postuninstall_cmds
-
-# Whether to use a lock for old archive extraction.
-lock_old_archive_extraction=$lock_old_archive_extraction
-
-# A C compiler.
-LTCC=$lt_CC
-
-# LTCC compiler flags.
-LTCFLAGS=$lt_CFLAGS
-
-# Take the output of nm and produce a listing of raw symbols and C names.
-global_symbol_pipe=$lt_lt_cv_sys_global_symbol_pipe
-
-# Transform the output of nm in a proper C declaration.
-global_symbol_to_cdecl=$lt_lt_cv_sys_global_symbol_to_cdecl
-
-# Transform the output of nm into a list of symbols to manually relocate.
-global_symbol_to_import=$lt_lt_cv_sys_global_symbol_to_import
-
-# Transform the output of nm in a C name address pair.
-global_symbol_to_c_name_address=$lt_lt_cv_sys_global_symbol_to_c_name_address
-
-# Transform the output of nm in a C name address pair when lib prefix is needed.
-global_symbol_to_c_name_address_lib_prefix=$lt_lt_cv_sys_global_symbol_to_c_name_address_lib_prefix
-
-# The name lister interface.
-nm_interface=$lt_lt_cv_nm_interface
-
-# Specify filename containing input files for \$NM.
-nm_file_list_spec=$lt_nm_file_list_spec
-
-# The root where to search for dependent libraries,and where our libraries should be installed.
-lt_sysroot=$lt_sysroot
-
-# Command to truncate a binary pipe.
-lt_truncate_bin=$lt_lt_cv_truncate_bin
-
-# The name of the directory that contains temporary libtool files.
-objdir=$objdir
-
-# Used to examine libraries when file_magic_cmd begins with "file".
-MAGIC_CMD=$MAGIC_CMD
-
-# Must we lock files when doing compilation?
-need_locks=$lt_need_locks
-
-# Manifest tool.
-MANIFEST_TOOL=$lt_MANIFEST_TOOL
-
-# Tool to manipulate archived DWARF debug symbol files on Mac OS X.
-DSYMUTIL=$lt_DSYMUTIL
-
-# Tool to change global to local symbols on Mac OS X.
-NMEDIT=$lt_NMEDIT
-
-# Tool to manipulate fat objects and archives on Mac OS X.
-LIPO=$lt_LIPO
-
-# ldd/readelf like tool for Mach-O binaries on Mac OS X.
-OTOOL=$lt_OTOOL
-
-# ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4.
-OTOOL64=$lt_OTOOL64
-
-# Old archive suffix (normally "a").
-libext=$libext
-
-# Shared library suffix (normally ".so").
-shrext_cmds=$lt_shrext_cmds
-
-# The commands to extract the exported symbol list from a shared archive.
-extract_expsyms_cmds=$lt_extract_expsyms_cmds
-
-# Variables whose values should be saved in libtool wrapper scripts and
-# restored at link time.
-variables_saved_for_relink=$lt_variables_saved_for_relink
-
-# Do we need the "lib" prefix for modules?
-need_lib_prefix=$need_lib_prefix
-
-# Do we need a version for libraries?
-need_version=$need_version
-
-# Library versioning type.
-version_type=$version_type
-
-# Shared library runtime path variable.
-runpath_var=$runpath_var
-
-# Shared library path variable.
-shlibpath_var=$shlibpath_var
-
-# Is shlibpath searched before the hard-coded library search path?
-shlibpath_overrides_runpath=$shlibpath_overrides_runpath
-
-# Format of library name prefix.
-libname_spec=$lt_libname_spec
-
-# List of archive names.  First name is the real one, the rest are links.
-# The last name is the one that the linker finds with -lNAME
-library_names_spec=$lt_library_names_spec
-
-# The coded name of the library, if different from the real name.
-soname_spec=$lt_soname_spec
-
-# Permission mode override for installation of shared libraries.
-install_override_mode=$lt_install_override_mode
-
-# Command to use after installation of a shared archive.
-postinstall_cmds=$lt_postinstall_cmds
-
-# Command to use after uninstallation of a shared archive.
-postuninstall_cmds=$lt_postuninstall_cmds
-
-# Commands used to finish a libtool library installation in a directory.
-finish_cmds=$lt_finish_cmds
-
-# As "finish_cmds", except a single script fragment to be evaled but
-# not shown.
-finish_eval=$lt_finish_eval
-
-# Whether we should hardcode library paths into libraries.
-hardcode_into_libs=$hardcode_into_libs
-
-# Compile-time system search path for libraries.
-sys_lib_search_path_spec=$lt_sys_lib_search_path_spec
-
-# Detected run-time system search path for libraries.
-sys_lib_dlsearch_path_spec=$lt_configure_time_dlsearch_path
-
-# Explicit LT_SYS_LIBRARY_PATH set during ./configure time.
-configure_time_lt_sys_library_path=$lt_configure_time_lt_sys_library_path
-
-# Whether dlopen is supported.
-dlopen_support=$enable_dlopen
-
-# Whether dlopen of programs is supported.
-dlopen_self=$enable_dlopen_self
-
-# Whether dlopen of statically linked programs is supported.
-dlopen_self_static=$enable_dlopen_self_static
-
-# Commands to strip libraries.
-old_striplib=$lt_old_striplib
-striplib=$lt_striplib
-
-
-# The linker used to build libraries.
-LD=$lt_LD
-
-# How to create reloadable object files.
-reload_flag=$lt_reload_flag
-reload_cmds=$lt_reload_cmds
-
-# Commands used to build an old-style archive.
-old_archive_cmds=$lt_old_archive_cmds
-
-# A language specific compiler.
-CC=$lt_compiler
-
-# Is the compiler the GNU compiler?
-with_gcc=$GCC
-
-# Compiler flag to turn off builtin functions.
-no_builtin_flag=$lt_lt_prog_compiler_no_builtin_flag
-
-# Additional compiler flags for building library objects.
-pic_flag=$lt_lt_prog_compiler_pic
-
-# How to pass a linker flag through the compiler.
-wl=$lt_lt_prog_compiler_wl
-
-# Compiler flag to prevent dynamic linking.
-link_static_flag=$lt_lt_prog_compiler_static
-
-# Does compiler simultaneously support -c and -o options?
-compiler_c_o=$lt_lt_cv_prog_compiler_c_o
-
-# Whether or not to add -lc for building shared libraries.
-build_libtool_need_lc=$archive_cmds_need_lc
-
-# Whether or not to disallow shared libs when runtime libs are static.
-allow_libtool_libs_with_static_runtimes=$enable_shared_with_static_runtimes
-
-# Compiler flag to allow reflexive dlopens.
-export_dynamic_flag_spec=$lt_export_dynamic_flag_spec
-
-# Compiler flag to generate shared objects directly from archives.
-whole_archive_flag_spec=$lt_whole_archive_flag_spec
-
-# Whether the compiler copes with passing no objects directly.
-compiler_needs_object=$lt_compiler_needs_object
-
-# Create an old-style archive from a shared archive.
-old_archive_from_new_cmds=$lt_old_archive_from_new_cmds
-
-# Create a temporary old-style archive to link instead of a shared archive.
-old_archive_from_expsyms_cmds=$lt_old_archive_from_expsyms_cmds
-
-# Commands used to build a shared archive.
-archive_cmds=$lt_archive_cmds
-archive_expsym_cmds=$lt_archive_expsym_cmds
-
-# Commands used to build a loadable module if different from building
-# a shared archive.
-module_cmds=$lt_module_cmds
-module_expsym_cmds=$lt_module_expsym_cmds
-
-# Whether we are building with GNU ld or not.
-with_gnu_ld=$lt_with_gnu_ld
-
-# Flag that allows shared libraries with undefined symbols to be built.
-allow_undefined_flag=$lt_allow_undefined_flag
-
-# Flag that enforces no undefined symbols.
-no_undefined_flag=$lt_no_undefined_flag
-
-# Flag to hardcode \$libdir into a binary during linking.
-# This must work even if \$libdir does not exist
-hardcode_libdir_flag_spec=$lt_hardcode_libdir_flag_spec
-
-# Whether we need a single "-rpath" flag with a separated argument.
-hardcode_libdir_separator=$lt_hardcode_libdir_separator
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary.
-hardcode_direct=$hardcode_direct
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary and the resulting library dependency is
-# "absolute",i.e. impossible to change by setting \$shlibpath_var if the
-# library is relocated.
-hardcode_direct_absolute=$hardcode_direct_absolute
-
-# Set to "yes" if using the -LDIR flag during linking hardcodes DIR
-# into the resulting binary.
-hardcode_minus_L=$hardcode_minus_L
-
-# Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR
-# into the resulting binary.
-hardcode_shlibpath_var=$hardcode_shlibpath_var
-
-# Set to "yes" if building a shared library automatically hardcodes DIR
-# into the library and all subsequent libraries and executables linked
-# against it.
-hardcode_automatic=$hardcode_automatic
-
-# Set to yes if linker adds runtime paths of dependent libraries
-# to runtime path list.
-inherit_rpath=$inherit_rpath
-
-# Whether libtool must link a program against all its dependency libraries.
-link_all_deplibs=$link_all_deplibs
-
-# Set to "yes" if exported symbols are required.
-always_export_symbols=$always_export_symbols
-
-# The commands to list exported symbols.
-export_symbols_cmds=$lt_export_symbols_cmds
-
-# Symbols that should not be listed in the preloaded symbols.
-exclude_expsyms=$lt_exclude_expsyms
-
-# Symbols that must always be exported.
-include_expsyms=$lt_include_expsyms
-
-# Commands necessary for linking programs (against libraries) with templates.
-prelink_cmds=$lt_prelink_cmds
-
-# Commands necessary for finishing linking programs.
-postlink_cmds=$lt_postlink_cmds
-
-# Specify filename containing input files.
-file_list_spec=$lt_file_list_spec
-
-# How to hardcode a shared library path into an executable.
-hardcode_action=$hardcode_action
-
-# ### END LIBTOOL CONFIG
-
-_LT_EOF
-
-    cat <<'_LT_EOF' >> "$cfgfile"
-
-# ### BEGIN FUNCTIONS SHARED WITH CONFIGURE
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x$2 in
-    x)
-        ;;
-    *:)
-        eval $1=\"`$ECHO $2 | $SED 's/:/ /g'` \$$1\"
-        ;;
-    x:*)
-        eval $1=\"\$$1 `$ECHO $2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval $1=\"\$$1\ `$ECHO $2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval $1=\"`$ECHO $2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \$$1\"
-        ;;
-    *)
-        eval $1=\"`$ECHO $2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in $*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-
-# ### END FUNCTIONS SHARED WITH CONFIGURE
-
-_LT_EOF
-
-  case $host_os in
-  aix3*)
-    cat <<\_LT_EOF >> "$cfgfile"
-# AIX sometimes has problems with the GCC collect2 program.  For some
-# reason, if we set the COLLECT_NAMES environment variable, the problems
-# vanish in a puff of smoke.
-if test set != "${COLLECT_NAMES+set}"; then
-  COLLECT_NAMES=
-  export COLLECT_NAMES
-fi
-_LT_EOF
-    ;;
-  esac
-
-
-
-ltmain=$ac_aux_dir/ltmain.sh
-
-
-  # We use sed instead of cat because bash on DJGPP gets confused if
-  # if finds mixed CR/LF and LF-only lines.  Since sed operates in
-  # text mode, it properly converts lines to CR/LF.  This bash problem
-  # is reportedly fixed, but why not run on old versions too?
-  $SED '$q' "$ltmain" >> "$cfgfile" \
-     || (rm -f "$cfgfile"; exit 1)
-
-   mv -f "$cfgfile" "$ofile" ||
-    (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile")
-  chmod +x "$ofile"
-
- ;;
-
-  esac
-done # for ac_tag
-
-
-as_fn_exit 0
-_ACEOF
-ac_clean_CONFIG_STATUS=
-
-test $ac_write_fail = 0 ||
-  as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5
-
-
-# configure is writing to config.log, and then calls config.status.
-# config.status does its own redirection, appending to config.log.
-# Unfortunately, on DOS this fails, as config.log is still kept open
-# by configure, so config.status won't be able to write to it; its
-# output is simply discarded.  So we exec the FD to /dev/null,
-# effectively closing config.log, so it can be properly (re)opened and
-# appended to by config.status.  When coming back to configure, we
-# need to make the FD available again.
-if test "$no_create" != yes; then
-  ac_cs_success=:
-  case $CONFIG_STATUS in #(
-  -*) :
-    ac_no_opts=-- ;; #(
-  *) :
-    ac_no_opts= ;;
-esac
-  ac_config_status_args=
-  test "$silent" = yes &&
-    ac_config_status_args="$ac_config_status_args --quiet"
-  exec 5>/dev/null
-  $SHELL $ac_no_opts "$CONFIG_STATUS" $ac_config_status_args ||
-    ac_cs_success=false
-  exec 5>>config.log
-  # Use ||, not &&, to avoid exiting from the if with $? = 1, which
-  # would make configure fail if this is the last instruction.
-  $ac_cs_success || as_fn_exit 1
-fi
-if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then
-  { printf '%s\n' "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5
-printf '%s\n' "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
-fi
-
-
diff --git a/experiments/wasm-gui/third_party/libXext/depcomp b/experiments/wasm-gui/third_party/libXext/depcomp
deleted file mode 100755
index 9f6725b9e..000000000
--- a/experiments/wasm-gui/third_party/libXext/depcomp
+++ /dev/null
@@ -1,792 +0,0 @@
-#! /bin/sh
-# depcomp - compile a program generating dependencies as side-effects
-
-scriptversion=2025-06-18.21; # UTC
-
-# Copyright (C) 1999-2025 Free Software Foundation, Inc.
-
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2, or (at your option)
-# any later version.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <https://www.gnu.org/licenses/>.
-
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program that contains a
-# configuration script generated by Autoconf, you may include it under
-# the same distribution terms that you use for the rest of that program.
-
-# Originally written by Alexandre Oliva <oliva@dcc.unicamp.br>.
-
-case $1 in
-  '')
-    echo "$0: No command.  Try '$0 --help' for more information." 1>&2
-    exit 1;
-    ;;
-  -h | --h*)
-    cat <<\EOF
-Usage: depcomp [--help] [--version] PROGRAM [ARGS]
-
-Run PROGRAMS ARGS to compile a file, generating dependencies
-as side-effects.
-
-Environment variables:
-  depmode     Dependency tracking mode.
-  source      Source file read by 'PROGRAMS ARGS'.
-  object      Object file output by 'PROGRAMS ARGS'.
-  DEPDIR      directory where to store dependencies.
-  depfile     Dependency file to output.
-  tmpdepfile  Temporary file to use when outputting dependencies.
-  libtool     Whether libtool is used (yes/no).
-
-Report bugs to <bug-automake@gnu.org>.
-GNU Automake home page: <https://www.gnu.org/software/automake/>.
-General help using GNU software: <https://www.gnu.org/gethelp/>.
-EOF
-    exit $?
-    ;;
-  -v | --v*)
-    echo "depcomp (GNU Automake) $scriptversion"
-    exit $?
-    ;;
-esac
-
-# Get the directory component of the given path, and save it in the
-# global variables '$dir'.  Note that this directory component will
-# be either empty or ending with a '/' character.  This is deliberate.
-set_dir_from ()
-{
-  case $1 in
-    */*) dir=`echo "$1" | sed -e 's|/[^/]*$|/|'`;;
-      *) dir=;;
-  esac
-}
-
-# Get the suffix-stripped basename of the given path, and save it the
-# global variable '$base'.
-set_base_from ()
-{
-  base=`echo "$1" | sed -e 's|^.*/||' -e 's/\.[^.]*$//'`
-}
-
-# If no dependency file was actually created by the compiler invocation,
-# we still have to create a dummy depfile, to avoid errors with the
-# Makefile "include basename.Plo" scheme.
-make_dummy_depfile ()
-{
-  echo "#dummy" > "$depfile"
-}
-
-# Factor out some common post-processing of the generated depfile.
-# Requires the auxiliary global variable '$tmpdepfile' to be set.
-aix_post_process_depfile ()
-{
-  # If the compiler actually managed to produce a dependency file,
-  # post-process it.
-  if test -f "$tmpdepfile"; then
-    # Each line is of the form 'foo.o: dependency.h'.
-    # Do two passes, one to just change these to
-    #   $object: dependency.h
-    # and one to simply output
-    #   dependency.h:
-    # which is needed to avoid the deleted-header problem.
-    { sed -e "s,^.*\.[$lower]*:,$object:," < "$tmpdepfile"
-      sed -e "s,^.*\.[$lower]*:[$tab ]*,," -e 's,$,:,' < "$tmpdepfile"
-    } > "$depfile"
-    rm -f "$tmpdepfile"
-  else
-    make_dummy_depfile
-  fi
-}
-
-# A tabulation character.
-tab='	'
-# A newline character.
-nl='
-'
-# Character ranges might be problematic outside the C locale.
-# These definitions help.
-upper=ABCDEFGHIJKLMNOPQRSTUVWXYZ
-lower=abcdefghijklmnopqrstuvwxyz
-alpha=${upper}${lower}
-
-if test -z "$depmode" || test -z "$source" || test -z "$object"; then
-  echo "depcomp: Variables source, object and depmode must be set" 1>&2
-  exit 1
-fi
-
-# Dependencies for sub/bar.o or sub/bar.obj go into sub/.deps/bar.Po.
-depfile=${depfile-`echo "$object" |
-  sed 's|[^\\/]*$|'${DEPDIR-.deps}'/&|;s|\.\([^.]*\)$|.P\1|;s|Pobj$|Po|'`}
-tmpdepfile=${tmpdepfile-`echo "$depfile" | sed 's/\.\([^.]*\)$/.T\1/'`}
-
-rm -f "$tmpdepfile"
-
-# Avoid interference from the environment.
-gccflag= dashmflag=
-
-# Some modes work just like other modes, but use different flags.  We
-# parameterize here, but still list the modes in the big case below,
-# to make depend.m4 easier to write.  Note that we *cannot* use a case
-# here, because this file can only contain one case statement.
-if test "$depmode" = hp; then
-  # HP compiler uses -M and no extra arg.
-  gccflag=-M
-  depmode=gcc
-fi
-
-if test "$depmode" = dashXmstdout; then
-  # This is just like dashmstdout with a different argument.
-  dashmflag=-xM
-  depmode=dashmstdout
-fi
-
-cygpath_u="cygpath -u -f -"
-if test "$depmode" = msvcmsys; then
-  # This is just like msvisualcpp but w/o cygpath translation.
-  # Just convert the backslash-escaped backslashes to single forward
-  # slashes to satisfy depend.m4
-  cygpath_u='sed s,\\\\,/,g'
-  depmode=msvisualcpp
-fi
-
-if test "$depmode" = msvc7msys; then
-  # This is just like msvc7 but w/o cygpath translation.
-  # Just convert the backslash-escaped backslashes to single forward
-  # slashes to satisfy depend.m4
-  cygpath_u='sed s,\\\\,/,g'
-  depmode=msvc7
-fi
-
-if test "$depmode" = xlc; then
-  # IBM C/C++ Compilers xlc/xlC can output gcc-like dependency information.
-  gccflag=-qmakedep=gcc,-MF
-  depmode=gcc
-fi
-
-case "$depmode" in
-gcc3)
-## gcc 3 implements dependency tracking that does exactly what
-## we want.  Yay!  Note: for some reason libtool 1.4 doesn't like
-## it if -MD -MP comes after the -MF stuff.  Hmm.
-## Unfortunately, FreeBSD c89 acceptance of flags depends upon
-## the command line argument order; so add the flags where they
-## appear in depend2.am.  Note that the slowdown incurred here
-## affects only configure: in makefiles, %FASTDEP% shortcuts this.
-  for arg
-  do
-    case $arg in
-    -c) set fnord "$@" -MT "$object" -MD -MP -MF "$tmpdepfile" "$arg" ;;
-    *)  set fnord "$@" "$arg" ;;
-    esac
-    shift # fnord
-    shift # $arg
-  done
-  "$@"
-  stat=$?
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile"
-    exit $stat
-  fi
-  mv "$tmpdepfile" "$depfile"
-  ;;
-
-gcc)
-## Note that this doesn't just cater to obsolete pre-3.x GCC compilers.
-## but also to in-use compilers like IBM xlc/xlC and the HP C compiler.
-## (see the conditional assignment to $gccflag above).
-## There are various ways to get dependency output from gcc.  Here's
-## why we pick this rather obscure method:
-## - Don't want to use -MD because we'd like the dependencies to end
-##   up in a subdir.  Having to rename by hand is ugly.
-##   (We might end up doing this anyway to support other compilers.)
-## - The DEPENDENCIES_OUTPUT environment variable makes gcc act like
-##   -MM, not -M (despite what the docs say).  Also, it might not be
-##   supported by the other compilers which use the 'gcc' depmode.
-## - Using -M directly means running the compiler twice (even worse
-##   than renaming).
-  if test -z "$gccflag"; then
-    gccflag=-MD,
-  fi
-  "$@" -Wp,"$gccflag$tmpdepfile"
-  stat=$?
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile"
-    exit $stat
-  fi
-  rm -f "$depfile"
-  echo "$object : \\" > "$depfile"
-  # The second -e expression handles DOS-style file names with drive
-  # letters.
-  sed -e 's/^[^:]*: / /' \
-      -e 's/^['$alpha']:\/[^:]*: / /' < "$tmpdepfile" >> "$depfile"
-## This next piece of magic avoids the "deleted header file" problem.
-## The problem is that when a header file which appears in a .P file
-## is deleted, the dependency causes make to die (because there is
-## typically no way to rebuild the header).  We avoid this by adding
-## dummy dependencies for each header file.  Too bad gcc doesn't do
-## this for us directly.
-## Some versions of gcc put a space before the ':'.  On the theory
-## that the space means something, we add a space to the output as
-## well.  hp depmode also adds that space, but also prefixes the VPATH
-## to the object.  Take care to not repeat it in the output.
-## Some versions of the HPUX 10.20 sed can't process this invocation
-## correctly.  Breaking it into two sed invocations is a workaround.
-  tr ' ' "$nl" < "$tmpdepfile" \
-    | sed -e 's/^\\$//' -e '/^$/d' -e "s|.*$object$||" -e '/:$/d' \
-    | sed -e 's/$/ :/' >> "$depfile"
-  rm -f "$tmpdepfile"
-  ;;
-
-hp)
-  # This case exists only to let depend.m4 do its work.  It works by
-  # looking at the text of this script.  This case will never be run,
-  # since it is checked for above.
-  exit 1
-  ;;
-
-sgi)
-  if test "$libtool" = yes; then
-    "$@" "-Wp,-MDupdate,$tmpdepfile"
-  else
-    "$@" -MDupdate "$tmpdepfile"
-  fi
-  stat=$?
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile"
-    exit $stat
-  fi
-  rm -f "$depfile"
-
-  if test -f "$tmpdepfile"; then  # yes, the sourcefile depend on other files
-    echo "$object : \\" > "$depfile"
-    # Clip off the initial element (the dependent).  Don't try to be
-    # clever and replace this with sed code, as IRIX sed won't handle
-    # lines with more than a fixed number of characters (4096 in
-    # IRIX 6.2 sed, 8192 in IRIX 6.5).  We also remove comment lines;
-    # the IRIX cc adds comments like '#:fec' to the end of the
-    # dependency line.
-    tr ' ' "$nl" < "$tmpdepfile" \
-      | sed -e 's/^.*\.o://' -e 's/#.*$//' -e '/^$/ d' \
-      | tr "$nl" ' ' >> "$depfile"
-    echo >> "$depfile"
-    # The second pass generates a dummy entry for each header file.
-    tr ' ' "$nl" < "$tmpdepfile" \
-      | sed -e 's/^.*\.o://' -e 's/#.*$//' -e '/^$/ d' -e 's/$/:/' \
-      >> "$depfile"
-  else
-    make_dummy_depfile
-  fi
-  rm -f "$tmpdepfile"
-  ;;
-
-xlc)
-  # This case exists only to let depend.m4 do its work.  It works by
-  # looking at the text of this script.  This case will never be run,
-  # since it is checked for above.
-  exit 1
-  ;;
-
-aix)
-  # The C for AIX Compiler uses -M and outputs the dependencies
-  # in a .u file.  In older versions, this file always lives in the
-  # current directory.  Also, the AIX compiler puts '$object:' at the
-  # start of each line; $object doesn't have directory information.
-  # Version 6 uses the directory in both cases.
-  set_dir_from "$object"
-  set_base_from "$object"
-  if test "$libtool" = yes; then
-    tmpdepfile1=$dir$base.u
-    tmpdepfile2=$base.u
-    tmpdepfile3=$dir.libs/$base.u
-    "$@" -Wc,-M
-  else
-    tmpdepfile1=$dir$base.u
-    tmpdepfile2=$dir$base.u
-    tmpdepfile3=$dir$base.u
-    "$@" -M
-  fi
-  stat=$?
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3"
-    exit $stat
-  fi
-
-  for tmpdepfile in "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3"
-  do
-    test -f "$tmpdepfile" && break
-  done
-  aix_post_process_depfile
-  ;;
-
-tcc)
-  # tcc (Tiny C Compiler) understand '-MD -MF file' since version 0.9.26
-  # FIXME: That version still under development at the moment of writing.
-  #        Make that this statement remains true also for stable, released
-  #        versions.
-  # It will wrap lines (doesn't matter whether long or short) with a
-  # trailing '\', as in:
-  #
-  #   foo.o : \
-  #    foo.c \
-  #    foo.h \
-  #
-  # It will put a trailing '\' even on the last line, and will use leading
-  # spaces rather than leading tabs (at least since its commit 0394caf7
-  # "Emit spaces for -MD").
-  "$@" -MD -MF "$tmpdepfile"
-  stat=$?
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile"
-    exit $stat
-  fi
-  rm -f "$depfile"
-  # Each non-empty line is of the form 'foo.o : \' or ' dep.h \'.
-  # We have to change lines of the first kind to '$object: \'.
-  sed -e "s|.*:|$object :|" < "$tmpdepfile" > "$depfile"
-  # And for each line of the second kind, we have to emit a 'dep.h:'
-  # dummy dependency, to avoid the deleted-header problem.
-  sed -n -e 's|^  *\(.*\) *\\$|\1:|p' < "$tmpdepfile" >> "$depfile"
-  rm -f "$tmpdepfile"
-  ;;
-
-## The order of this option in the case statement is important, since the
-## shell code in configure will try each of these formats in the order
-## listed in this file.  A plain '-MD' option would be understood by many
-## compilers, so we must ensure this comes after the gcc and icc options.
-pgcc)
-  # Portland's C compiler understands '-MD'.
-  # Will always output deps to 'file.d' where file is the root name of the
-  # source file under compilation, even if file resides in a subdirectory.
-  # The object file name does not affect the name of the '.d' file.
-  # pgcc 10.2 will output
-  #    foo.o: sub/foo.c sub/foo.h
-  # and will wrap long lines using '\' :
-  #    foo.o: sub/foo.c ... \
-  #     sub/foo.h ... \
-  #     ...
-  set_dir_from "$object"
-  # Use the source, not the object, to determine the base name, since
-  # that's sadly what pgcc will do too.
-  set_base_from "$source"
-  tmpdepfile=$base.d
-
-  # For projects that build the same source file twice into different object
-  # files, the pgcc approach of using the *source* file root name can cause
-  # problems in parallel builds.  Use a locking strategy to avoid stomping on
-  # the same $tmpdepfile.
-  lockdir=$base.d-lock
-  trap "
-    echo '$0: caught signal, cleaning up...' >&2
-    rmdir '$lockdir'
-    exit 1
-  " 1 2 13 15
-  numtries=100
-  i=$numtries
-  while test $i -gt 0; do
-    # mkdir is a portable test-and-set.
-    if mkdir "$lockdir" 2>/dev/null; then
-      # This process acquired the lock.
-      "$@" -MD
-      stat=$?
-      # Release the lock.
-      rmdir "$lockdir"
-      break
-    else
-      # If the lock is being held by a different process, wait
-      # until the winning process is done or we timeout.
-      while test -d "$lockdir" && test $i -gt 0; do
-        sleep 1
-        i=`expr $i - 1`
-      done
-    fi
-    i=`expr $i - 1`
-  done
-  trap - 1 2 13 15
-  if test $i -le 0; then
-    echo "$0: failed to acquire lock after $numtries attempts" >&2
-    echo "$0: check lockdir '$lockdir'" >&2
-    exit 1
-  fi
-
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile"
-    exit $stat
-  fi
-  rm -f "$depfile"
-  # Each line is of the form `foo.o: dependent.h',
-  # or `foo.o: dep1.h dep2.h \', or ` dep3.h dep4.h \'.
-  # Do two passes, one to just change these to
-  # `$object: dependent.h' and one to simply `dependent.h:'.
-  sed "s,^[^:]*:,$object :," < "$tmpdepfile" > "$depfile"
-  # Some versions of the HPUX 10.20 sed can't process this invocation
-  # correctly.  Breaking it into two sed invocations is a workaround.
-  sed 's,^[^:]*: \(.*\)$,\1,;s/^\\$//;/^$/d;/:$/d' < "$tmpdepfile" \
-    | sed -e 's/$/ :/' >> "$depfile"
-  rm -f "$tmpdepfile"
-  ;;
-
-hp2)
-  # The "hp" stanza above does not work with aCC (C++) and HP's ia64
-  # compilers, which have integrated preprocessors.  The correct option
-  # to use with these is +Maked; it writes dependencies to a file named
-  # 'foo.d', which lands next to the object file, wherever that
-  # happens to be.
-  # Much of this is similar to the tru64 case; see comments there.
-  set_dir_from  "$object"
-  set_base_from "$object"
-  if test "$libtool" = yes; then
-    tmpdepfile1=$dir$base.d
-    tmpdepfile2=$dir.libs/$base.d
-    "$@" -Wc,+Maked
-  else
-    tmpdepfile1=$dir$base.d
-    tmpdepfile2=$dir$base.d
-    "$@" +Maked
-  fi
-  stat=$?
-  if test $stat -ne 0; then
-     rm -f "$tmpdepfile1" "$tmpdepfile2"
-     exit $stat
-  fi
-
-  for tmpdepfile in "$tmpdepfile1" "$tmpdepfile2"
-  do
-    test -f "$tmpdepfile" && break
-  done
-  if test -f "$tmpdepfile"; then
-    sed -e "s,^.*\.[$lower]*:,$object:," "$tmpdepfile" > "$depfile"
-    # Add 'dependent.h:' lines.
-    sed -ne '2,${
-               s/^ *//
-               s/ \\*$//
-               s/$/:/
-               p
-             }' "$tmpdepfile" >> "$depfile"
-  else
-    make_dummy_depfile
-  fi
-  rm -f "$tmpdepfile" "$tmpdepfile2"
-  ;;
-
-tru64)
-  # The Tru64 compiler uses -MD to generate dependencies as a side
-  # effect.  'cc -MD -o foo.o ...' puts the dependencies into 'foo.o.d'.
-  # At least on Alpha/Redhat 6.1, Compaq CCC V6.2-504 seems to put
-  # dependencies in 'foo.d' instead, so we check for that too.
-  # Subdirectories are respected.
-  set_dir_from  "$object"
-  set_base_from "$object"
-
-  if test "$libtool" = yes; then
-    # Libtool generates 2 separate objects for the 2 libraries.  These
-    # two compilations output dependencies in $dir.libs/$base.o.d and
-    # in $dir$base.o.d.  We have to check for both files, because
-    # one of the two compilations can be disabled.  We should prefer
-    # $dir$base.o.d over $dir.libs/$base.o.d because the latter is
-    # automatically cleaned when .libs/ is deleted, while ignoring
-    # the former would cause a distcleancheck panic.
-    tmpdepfile1=$dir$base.o.d          # libtool 1.5
-    tmpdepfile2=$dir.libs/$base.o.d    # Likewise.
-    tmpdepfile3=$dir.libs/$base.d      # Compaq CCC V6.2-504
-    "$@" -Wc,-MD
-  else
-    tmpdepfile1=$dir$base.d
-    tmpdepfile2=$dir$base.d
-    tmpdepfile3=$dir$base.d
-    "$@" -MD
-  fi
-
-  stat=$?
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3"
-    exit $stat
-  fi
-
-  for tmpdepfile in "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3"
-  do
-    test -f "$tmpdepfile" && break
-  done
-  # Same post-processing that is required for AIX mode.
-  aix_post_process_depfile
-  ;;
-
-msvc7)
-  if test "$libtool" = yes; then
-    showIncludes=-Wc,-showIncludes
-  else
-    showIncludes=-showIncludes
-  fi
-  "$@" $showIncludes > "$tmpdepfile"
-  stat=$?
-  grep -v '^Note: including file: ' "$tmpdepfile"
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile"
-    exit $stat
-  fi
-  rm -f "$depfile"
-  echo "$object : \\" > "$depfile"
-  # The first sed program below extracts the file names and escapes
-  # backslashes for cygpath.  The second sed program outputs the file
-  # name when reading, but also accumulates all include files in the
-  # hold buffer in order to output them again at the end.  This only
-  # works with sed implementations that can handle large buffers.
-  sed < "$tmpdepfile" -n '
-/^Note: including file:  *\(.*\)/ {
-  s//\1/
-  s/\\/\\\\/g
-  p
-}' | $cygpath_u | sort -u | sed -n '
-s/ /\\ /g
-s/\(.*\)/'"$tab"'\1 \\/p
-s/.\(.*\) \\/\1:/
-H
-$ {
-  s/.*/'"$tab"'/
-  G
-  p
-}' >> "$depfile"
-  echo >> "$depfile" # make sure the fragment doesn't end with a backslash
-  rm -f "$tmpdepfile"
-  ;;
-
-msvc7msys)
-  # This case exists only to let depend.m4 do its work.  It works by
-  # looking at the text of this script.  This case will never be run,
-  # since it is checked for above.
-  exit 1
-  ;;
-
-#nosideeffect)
-  # This comment above is used by automake to tell side-effect
-  # dependency tracking mechanisms from slower ones.
-
-dashmstdout)
-  # Important note: in order to support this mode, a compiler *must*
-  # always write the preprocessed file to stdout, regardless of -o.
-  "$@" || exit $?
-
-  # Remove the call to Libtool.
-  if test "$libtool" = yes; then
-    while test "X$1" != 'X--mode=compile'; do
-      shift
-    done
-    shift
-  fi
-
-  # Remove '-o $object'.
-  IFS=" "
-  for arg
-  do
-    case $arg in
-    -o)
-      shift
-      ;;
-    $object)
-      shift
-      ;;
-    *)
-      set fnord "$@" "$arg"
-      shift # fnord
-      shift # $arg
-      ;;
-    esac
-  done
-
-  test -z "$dashmflag" && dashmflag=-M
-  # Require at least two characters before searching for ':'
-  # in the target name.  This is to cope with DOS-style filenames:
-  # a dependency such as 'c:/foo/bar' could be seen as target 'c' otherwise.
-  "$@" $dashmflag |
-    sed "s|^[$tab ]*[^:$tab ][^:][^:]*:[$tab ]*|$object: |" > "$tmpdepfile"
-  rm -f "$depfile"
-  cat < "$tmpdepfile" > "$depfile"
-  # Some versions of the HPUX 10.20 sed can't process this sed invocation
-  # correctly.  Breaking it into two sed invocations is a workaround.
-  tr ' ' "$nl" < "$tmpdepfile" \
-    | sed -e 's/^\\$//' -e '/^$/d' -e '/:$/d' \
-    | sed -e 's/$/ :/' >> "$depfile"
-  rm -f "$tmpdepfile"
-  ;;
-
-dashXmstdout)
-  # This case only exists to satisfy depend.m4.  It is never actually
-  # run, as this mode is specially recognized in the preamble.
-  exit 1
-  ;;
-
-makedepend)
-  "$@" || exit $?
-  # Remove any Libtool call
-  if test "$libtool" = yes; then
-    while test "X$1" != 'X--mode=compile'; do
-      shift
-    done
-    shift
-  fi
-  # X makedepend
-  shift
-  cleared=no eat=no
-  for arg
-  do
-    case $cleared in
-    no)
-      set ""; shift
-      cleared=yes ;;
-    esac
-    if test $eat = yes; then
-      eat=no
-      continue
-    fi
-    case "$arg" in
-    -D*|-I*)
-      set fnord "$@" "$arg"; shift ;;
-    # Strip any option that makedepend may not understand.  Remove
-    # the object too, otherwise makedepend will parse it as a source file.
-    -arch)
-      eat=yes ;;
-    -*|$object)
-      ;;
-    *)
-      set fnord "$@" "$arg"; shift ;;
-    esac
-  done
-  obj_suffix=`echo "$object" | sed 's/^.*\././'`
-  touch "$tmpdepfile"
-  ${MAKEDEPEND-makedepend} -o"$obj_suffix" -f"$tmpdepfile" "$@"
-  rm -f "$depfile"
-  # makedepend may prepend the VPATH from the source file name to the object.
-  # No need to regex-escape $object, excess matching of '.' is harmless.
-  sed "s|^.*\($object *:\)|\1|" "$tmpdepfile" > "$depfile"
-  # Some versions of the HPUX 10.20 sed can't process the last invocation
-  # correctly.  Breaking it into two sed invocations is a workaround.
-  sed '1,2d' "$tmpdepfile" \
-    | tr ' ' "$nl" \
-    | sed -e 's/^\\$//' -e '/^$/d' -e '/:$/d' \
-    | sed -e 's/$/ :/' >> "$depfile"
-  rm -f "$tmpdepfile" "$tmpdepfile".bak
-  ;;
-
-cpp)
-  # Important note: in order to support this mode, a compiler *must*
-  # always write the preprocessed file to stdout.
-  "$@" || exit $?
-
-  # Remove the call to Libtool.
-  if test "$libtool" = yes; then
-    while test "X$1" != 'X--mode=compile'; do
-      shift
-    done
-    shift
-  fi
-
-  # Remove '-o $object'.
-  IFS=" "
-  for arg
-  do
-    case $arg in
-    -o)
-      shift
-      ;;
-    $object)
-      shift
-      ;;
-    *)
-      set fnord "$@" "$arg"
-      shift # fnord
-      shift # $arg
-      ;;
-    esac
-  done
-
-  "$@" -E \
-    | sed -n -e '/^# [0-9][0-9]* "\([^"]*\)".*/ s:: \1 \\:p' \
-             -e '/^#line [0-9][0-9]* "\([^"]*\)".*/ s:: \1 \\:p' \
-    | sed '$ s: \\$::' > "$tmpdepfile"
-  rm -f "$depfile"
-  echo "$object : \\" > "$depfile"
-  cat < "$tmpdepfile" >> "$depfile"
-  sed < "$tmpdepfile" '/^$/d;s/^ //;s/ \\$//;s/$/ :/' >> "$depfile"
-  rm -f "$tmpdepfile"
-  ;;
-
-msvisualcpp)
-  # Important note: in order to support this mode, a compiler *must*
-  # always write the preprocessed file to stdout.
-  "$@" || exit $?
-
-  # Remove the call to Libtool.
-  if test "$libtool" = yes; then
-    while test "X$1" != 'X--mode=compile'; do
-      shift
-    done
-    shift
-  fi
-
-  IFS=" "
-  for arg
-  do
-    case "$arg" in
-    -o)
-      shift
-      ;;
-    $object)
-      shift
-      ;;
-    "-Gm"|"/Gm"|"-Gi"|"/Gi"|"-ZI"|"/ZI")
-        set fnord "$@"
-        shift
-        shift
-        ;;
-    *)
-        set fnord "$@" "$arg"
-        shift
-        shift
-        ;;
-    esac
-  done
-  "$@" -E 2>/dev/null |
-  sed -n '/^#line [0-9][0-9]* "\([^"]*\)"/ s::\1:p' | $cygpath_u | sort -u > "$tmpdepfile"
-  rm -f "$depfile"
-  echo "$object : \\" > "$depfile"
-  sed < "$tmpdepfile" -n -e 's% %\\ %g' -e '/^\(.*\)$/ s::'"$tab"'\1 \\:p' >> "$depfile"
-  echo "$tab" >> "$depfile"
-  sed < "$tmpdepfile" -n -e 's% %\\ %g' -e '/^\(.*\)$/ s::\1\::p' >> "$depfile"
-  rm -f "$tmpdepfile"
-  ;;
-
-msvcmsys)
-  # This case exists only to let depend.m4 do its work.  It works by
-  # looking at the text of this script.  This case will never be run,
-  # since it is checked for above.
-  exit 1
-  ;;
-
-none)
-  exec "$@"
-  ;;
-
-*)
-  echo "Unknown depmode $depmode" 1>&2
-  exit 1
-  ;;
-esac
-
-exit 0
-
-# Local Variables:
-# mode: shell-script
-# sh-indentation: 2
-# eval: (add-hook 'before-save-hook 'time-stamp nil t)
-# time-stamp-start: "scriptversion="
-# time-stamp-format: "%Y-%02m-%02d.%02H"
-# time-stamp-time-zone: "UTC0"
-# time-stamp-end: "; # UTC"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXext/install-sh b/experiments/wasm-gui/third_party/libXext/install-sh
deleted file mode 100755
index 1d8d96696..000000000
--- a/experiments/wasm-gui/third_party/libXext/install-sh
+++ /dev/null
@@ -1,541 +0,0 @@
-#!/bin/sh
-# install - install a program, script, or datafile
-
-scriptversion=2025-06-18.21; # UTC
-
-# This originates from X11R5 (mit/util/scripts/install.sh), which was
-# later released in X11R6 (xc/config/util/install.sh) with the
-# following copyright and license.
-#
-# Copyright (C) 1994 X Consortium
-#
-# Permission is hereby granted, free of charge, to any person obtaining a copy
-# of this software and associated documentation files (the "Software"), to
-# deal in the Software without restriction, including without limitation the
-# rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
-# sell copies of the Software, and to permit persons to whom the Software is
-# furnished to do so, subject to the following conditions:
-#
-# The above copyright notice and this permission notice shall be included in
-# all copies or substantial portions of the Software.
-#
-# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
-# X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
-# AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNEC-
-# TION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-#
-# Except as contained in this notice, the name of the X Consortium shall not
-# be used in advertising or otherwise to promote the sale, use or other deal-
-# ings in this Software without prior written authorization from the X Consor-
-# tium.
-#
-#
-# FSF changes to this file are in the public domain.
-#
-# Calling this script install-sh is preferred over install.sh, to prevent
-# 'make' implicit rules from creating a file called install from it
-# when there is no Makefile.
-#
-# This script is compatible with the BSD install script, but was written
-# from scratch.
-
-tab='	'
-nl='
-'
-IFS=" $tab$nl"
-
-# Set DOITPROG to "echo" to test this script.
-
-doit=${DOITPROG-}
-doit_exec=${doit:-exec}
-
-# Put in absolute file names if you don't have them in your path;
-# or use environment vars.
-
-chgrpprog=${CHGRPPROG-chgrp}
-chmodprog=${CHMODPROG-chmod}
-chownprog=${CHOWNPROG-chown}
-cmpprog=${CMPPROG-cmp}
-cpprog=${CPPROG-cp}
-mkdirprog=${MKDIRPROG-mkdir}
-mvprog=${MVPROG-mv}
-rmprog=${RMPROG-rm}
-stripprog=${STRIPPROG-strip}
-
-posix_mkdir=
-
-# Desired mode of installed file.
-mode=0755
-
-# Create dirs (including intermediate dirs) using mode 755.
-# This is like GNU 'install' as of coreutils 8.32 (2020).
-mkdir_umask=22
-
-backupsuffix=
-chgrpcmd=
-chmodcmd=$chmodprog
-chowncmd=
-mvcmd=$mvprog
-rmcmd="$rmprog -f"
-stripcmd=
-
-src=
-dst=
-dir_arg=
-dst_arg=
-
-copy_on_change=false
-is_target_a_directory=possibly
-
-usage="\
-Usage: $0 [OPTION]... [-T] SRCFILE DSTFILE
-   or: $0 [OPTION]... SRCFILES... DIRECTORY
-   or: $0 [OPTION]... -t DIRECTORY SRCFILES...
-   or: $0 [OPTION]... -d DIRECTORIES...
-
-In the 1st form, copy SRCFILE to DSTFILE.
-In the 2nd and 3rd, copy all SRCFILES to DIRECTORY.
-In the 4th, create DIRECTORIES.
-
-Options:
-     --help     display this help and exit.
-     --version  display version info and exit.
-
-  -c            (ignored)
-  -C            install only if different (preserve data modification time)
-  -d            create directories instead of installing files.
-  -g GROUP      $chgrpprog installed files to GROUP.
-  -m MODE       $chmodprog installed files to MODE.
-  -o USER       $chownprog installed files to USER.
-  -p            pass -p to $cpprog.
-  -s            $stripprog installed files.
-  -S SUFFIX     attempt to back up existing files, with suffix SUFFIX.
-  -t DIRECTORY  install into DIRECTORY.
-  -T            report an error if DSTFILE is a directory.
-
-Environment variables override the default commands:
-  CHGRPPROG CHMODPROG CHOWNPROG CMPPROG CPPROG MKDIRPROG MVPROG
-  RMPROG STRIPPROG
-
-By default, rm is invoked with -f; when overridden with RMPROG,
-it's up to you to specify -f if you want it.
-
-If -S is not specified, no backups are attempted.
-
-Report bugs to <bug-automake@gnu.org>.
-GNU Automake home page: <https://www.gnu.org/software/automake/>.
-General help using GNU software: <https://www.gnu.org/gethelp/>."
-
-while test $# -ne 0; do
-  case $1 in
-    -c) ;;
-
-    -C) copy_on_change=true;;
-
-    -d) dir_arg=true;;
-
-    -g) chgrpcmd="$chgrpprog $2"
-        shift;;
-
-    --help) echo "$usage"; exit $?;;
-
-    -m) mode=$2
-        case $mode in
-          *' '* | *"$tab"* | *"$nl"* | *'*'* | *'?'* | *'['*)
-            echo "$0: invalid mode: $mode" >&2
-            exit 1;;
-        esac
-        shift;;
-
-    -o) chowncmd="$chownprog $2"
-        shift;;
-
-    -p) cpprog="$cpprog -p";;
-
-    -s) stripcmd=$stripprog;;
-
-    -S) backupsuffix="$2"
-        shift;;
-
-    -t)
-        is_target_a_directory=always
-        dst_arg=$2
-        # Protect names problematic for 'test' and other utilities.
-        case $dst_arg in
-          -* | [=\(\)!]) dst_arg=./$dst_arg;;
-        esac
-        shift;;
-
-    -T) is_target_a_directory=never;;
-
-    --version) echo "$0 (GNU Automake) $scriptversion"; exit $?;;
-
-    --) shift
-        break;;
-
-    -*) echo "$0: invalid option: $1" >&2
-        exit 1;;
-
-    *)  break;;
-  esac
-  shift
-done
-
-# We allow the use of options -d and -T together, by making -d
-# take the precedence; this is for compatibility with GNU install.
-
-if test -n "$dir_arg"; then
-  if test -n "$dst_arg"; then
-    echo "$0: target directory not allowed when installing a directory." >&2
-    exit 1
-  fi
-fi
-
-if test $# -ne 0 && test -z "$dir_arg$dst_arg"; then
-  # When -d is used, all remaining arguments are directories to create.
-  # When -t is used, the destination is already specified.
-  # Otherwise, the last argument is the destination.  Remove it from $@.
-  for arg
-  do
-    if test -n "$dst_arg"; then
-      # $@ is not empty: it contains at least $arg.
-      set fnord "$@" "$dst_arg"
-      shift # fnord
-    fi
-    shift # arg
-    dst_arg=$arg
-    # Protect names problematic for 'test' and other utilities.
-    case $dst_arg in
-      -* | [=\(\)!]) dst_arg=./$dst_arg;;
-    esac
-  done
-fi
-
-if test $# -eq 0; then
-  if test -z "$dir_arg"; then
-    echo "$0: no input file specified." >&2
-    exit 1
-  fi
-  # It's OK to call 'install-sh -d' without argument.
-  # This can happen when creating conditional directories.
-  exit 0
-fi
-
-if test -z "$dir_arg"; then
-  if test $# -gt 1 || test "$is_target_a_directory" = always; then
-    if test ! -d "$dst_arg"; then
-      echo "$0: $dst_arg: Is not a directory." >&2
-      exit 1
-    fi
-  fi
-fi
-
-if test -z "$dir_arg"; then
-  do_exit='(exit $ret); exit $ret'
-  trap "ret=129; $do_exit" 1
-  trap "ret=130; $do_exit" 2
-  trap "ret=141; $do_exit" 13
-  trap "ret=143; $do_exit" 15
-
-  # Set umask so as not to create temps with too-generous modes.
-  # However, 'strip' requires both read and write access to temps.
-  case $mode in
-    # Optimize common cases.
-    *644) cp_umask=133;;
-    *755) cp_umask=22;;
-
-    *[0-7])
-      if test -z "$stripcmd"; then
-        u_plus_rw=
-      else
-        u_plus_rw='% 200'
-      fi
-      cp_umask=`expr '(' 777 - $mode % 1000 ')' $u_plus_rw`;;
-    *)
-      if test -z "$stripcmd"; then
-        u_plus_rw=
-      else
-        u_plus_rw=,u+rw
-      fi
-      cp_umask=$mode$u_plus_rw;;
-  esac
-fi
-
-for src
-do
-  # Protect names problematic for 'test' and other utilities.
-  case $src in
-    -* | [=\(\)!]) src=./$src;;
-  esac
-
-  if test -n "$dir_arg"; then
-    dst=$src
-    dstdir=$dst
-    test -d "$dstdir"
-    dstdir_status=$?
-    # Don't chown directories that already exist.
-    if test $dstdir_status = 0; then
-      chowncmd=""
-    fi
-  else
-
-    # Waiting for this to be detected by the "$cpprog $src $dsttmp" command
-    # might cause directories to be created, which would be especially bad
-    # if $src (and thus $dsttmp) contains '*'.
-    if test ! -f "$src" && test ! -d "$src"; then
-      echo "$0: $src does not exist." >&2
-      exit 1
-    fi
-
-    if test -z "$dst_arg"; then
-      echo "$0: no destination specified." >&2
-      exit 1
-    fi
-    dst=$dst_arg
-
-    # If destination is a directory, append the input filename.
-    if test -d "$dst"; then
-      if test "$is_target_a_directory" = never; then
-        echo "$0: $dst_arg: Is a directory" >&2
-        exit 1
-      fi
-      dstdir=$dst
-      dstbase=`basename "$src"`
-      case $dst in
-	*/) dst=$dst$dstbase;;
-	*)  dst=$dst/$dstbase;;
-      esac
-      dstdir_status=0
-    else
-      dstdir=`dirname "$dst"`
-      test -d "$dstdir"
-      dstdir_status=$?
-    fi
-  fi
-
-  case $dstdir in
-    */) dstdirslash=$dstdir;;
-    *)  dstdirslash=$dstdir/;;
-  esac
-
-  obsolete_mkdir_used=false
-
-  if test $dstdir_status != 0; then
-    case $posix_mkdir in
-      '')
-        # With -d, create the new directory with the user-specified mode.
-        # Otherwise, rely on $mkdir_umask.
-        if test -n "$dir_arg"; then
-          mkdir_mode=-m$mode
-        else
-          mkdir_mode=
-        fi
-
-        posix_mkdir=false
-	# The $RANDOM variable is not portable (e.g., dash).  Use it
-	# here however when possible just to lower collision chance.
-	tmpdir=${TMPDIR-/tmp}/ins$RANDOM-$$
-
-	trap '
-	  ret=$?
-	  rmdir "$tmpdir/a/b" "$tmpdir/a" "$tmpdir" 2>/dev/null
-	  exit $ret
-	' 0
-
-	# Because "mkdir -p" follows existing symlinks and we likely work
-	# directly in world-writable /tmp, make sure that the '$tmpdir'
-	# directory is successfully created first before we actually test
-	# 'mkdir -p'.
-	if (umask $mkdir_umask &&
-	    $mkdirprog $mkdir_mode "$tmpdir" &&
-	    exec $mkdirprog $mkdir_mode -p -- "$tmpdir/a/b") >/dev/null 2>&1
-	then
-	  if test -z "$dir_arg" || {
-	       # Check for POSIX incompatibility with -m.
-	       # HP-UX 11.23 and IRIX 6.5 mkdir -m -p sets group- or
-	       # other-writable bit of parent directory when it shouldn't.
-	       # FreeBSD 6.1 mkdir -m -p sets mode of existing directory.
-	       test_tmpdir="$tmpdir/a"
-	       ls_ld_tmpdir=`ls -ld "$test_tmpdir"`
-	       case $ls_ld_tmpdir in
-		 d????-?r-*) different_mode=700;;
-		 d????-?--*) different_mode=755;;
-		 *) false;;
-	       esac &&
-	       $mkdirprog -m$different_mode -p -- "$test_tmpdir" && {
-		 ls_ld_tmpdir_1=`ls -ld "$test_tmpdir"`
-		 test "$ls_ld_tmpdir" = "$ls_ld_tmpdir_1"
-	       }
-	     }
-	  then posix_mkdir=:
-	  fi
-	  rmdir "$tmpdir/a/b" "$tmpdir/a" "$tmpdir"
-	else
-	  # Remove any dirs left behind by ancient mkdir implementations.
-	  rmdir ./$mkdir_mode ./-p ./-- "$tmpdir" 2>/dev/null
-	fi
-	trap '' 0;;
-    esac
-
-    if
-      $posix_mkdir && (
-        umask $mkdir_umask &&
-        $doit_exec $mkdirprog $mkdir_mode -p -- "$dstdir"
-      )
-    then :
-    else
-
-      # mkdir does not conform to POSIX,
-      # or it failed possibly due to a race condition.  Create the
-      # directory the slow way, step by step, checking for races as we go.
-
-      case $dstdir in
-        /*) prefix='/';;
-        [-=\(\)!]*) prefix='./';;
-        *)  prefix='';;
-      esac
-
-      oIFS=$IFS
-      IFS=/
-      set -f
-      set fnord $dstdir
-      shift
-      set +f
-      IFS=$oIFS
-
-      prefixes=
-
-      for d
-      do
-        test X"$d" = X && continue
-
-        prefix=$prefix$d
-        if test -d "$prefix"; then
-          prefixes=
-        else
-          if $posix_mkdir; then
-            (umask $mkdir_umask &&
-             $doit_exec $mkdirprog $mkdir_mode -p -- "$dstdir") && break
-            # Don't fail if two instances are running concurrently.
-            test -d "$prefix" || exit 1
-          else
-            case $prefix in
-              *\'*) qprefix=`echo "$prefix" | sed "s/'/'\\\\\\\\''/g"`;;
-              *) qprefix=$prefix;;
-            esac
-            prefixes="$prefixes '$qprefix'"
-          fi
-        fi
-        prefix=$prefix/
-      done
-
-      if test -n "$prefixes"; then
-        # Don't fail if two instances are running concurrently.
-        (umask $mkdir_umask &&
-         eval "\$doit_exec \$mkdirprog $prefixes") ||
-          test -d "$dstdir" || exit 1
-        obsolete_mkdir_used=true
-      fi
-    fi
-  fi
-
-  if test -n "$dir_arg"; then
-    { test -z "$chowncmd" || $doit $chowncmd "$dst"; } &&
-    { test -z "$chgrpcmd" || $doit $chgrpcmd "$dst"; } &&
-    { test "$obsolete_mkdir_used$chowncmd$chgrpcmd" = false ||
-      test -z "$chmodcmd" || $doit $chmodcmd $mode "$dst"; } || exit 1
-  else
-
-    # Make a couple of temp file names in the proper directory.
-    dsttmp=${dstdirslash}_inst.$$_
-    rmtmp=${dstdirslash}_rm.$$_
-
-    # Trap to clean up those temp files at exit.
-    trap 'ret=$?; rm -f "$dsttmp" "$rmtmp" && exit $ret' 0
-
-    # Copy the file name to the temp name.
-    (umask $cp_umask &&
-     { test -z "$stripcmd" || {
-	 # Create $dsttmp read-write so that cp doesn't create it read-only,
-	 # which would cause strip to fail.
-	 if test -z "$doit"; then
-	   : >"$dsttmp" # No need to fork-exec 'touch'.
-	 else
-	   $doit touch "$dsttmp"
-	 fi
-       }
-     } &&
-     $doit_exec $cpprog "$src" "$dsttmp") &&
-
-    # and set any options; do chmod last to preserve setuid bits.
-    #
-    # If any of these fail, we abort the whole thing.  If we want to
-    # ignore errors from any of these, just make sure not to ignore
-    # errors from the above "$doit $cpprog $src $dsttmp" command.
-    #
-    { test -z "$chowncmd" || $doit $chowncmd "$dsttmp"; } &&
-    { test -z "$chgrpcmd" || $doit $chgrpcmd "$dsttmp"; } &&
-    { test -z "$stripcmd" || $doit $stripcmd "$dsttmp"; } &&
-    { test -z "$chmodcmd" || $doit $chmodcmd $mode "$dsttmp"; } &&
-
-    # If -C, don't bother to copy if it wouldn't change the file.
-    if $copy_on_change &&
-       old=`LC_ALL=C ls -dlL "$dst"     2>/dev/null` &&
-       new=`LC_ALL=C ls -dlL "$dsttmp"  2>/dev/null` &&
-       set -f &&
-       set X $old && old=:$2:$4:$5:$6 &&
-       set X $new && new=:$2:$4:$5:$6 &&
-       set +f &&
-       test "$old" = "$new" &&
-       $cmpprog "$dst" "$dsttmp" >/dev/null 2>&1
-    then
-      rm -f "$dsttmp"
-    else
-      # If $backupsuffix is set, and the file being installed
-      # already exists, attempt a backup.  Don't worry if it fails,
-      # e.g., if mv doesn't support -f.
-      if test -n "$backupsuffix" && test -f "$dst"; then
-        $doit $mvcmd -f "$dst" "$dst$backupsuffix" 2>/dev/null
-      fi
-
-      # Rename the file to the real destination.
-      $doit $mvcmd -f "$dsttmp" "$dst" 2>/dev/null ||
-
-      # The rename failed, perhaps because mv can't rename something else
-      # to itself, or perhaps because mv is so ancient that it does not
-      # support -f.
-      {
-        # Now remove or move aside any old file at destination location.
-        # We try this two ways since rm can't unlink itself on some
-        # systems and the destination file might be busy for other
-        # reasons.  In this case, the final cleanup might fail but the new
-        # file should still install successfully.
-        {
-          test ! -f "$dst" ||
-          $doit $rmcmd "$dst" 2>/dev/null ||
-          { $doit $mvcmd -f "$dst" "$rmtmp" 2>/dev/null &&
-            { $doit $rmcmd "$rmtmp" 2>/dev/null; :; }
-          } ||
-          { echo "$0: cannot unlink or rename $dst" >&2
-            (exit 1); exit 1
-          }
-        } &&
-
-        # Now rename the file to the real destination.
-        $doit $mvcmd "$dsttmp" "$dst"
-      }
-    fi || exit 1
-
-    trap '' 0
-  fi
-done
-
-# Local variables:
-# eval: (add-hook 'before-save-hook 'time-stamp nil t)
-# time-stamp-start: "scriptversion="
-# time-stamp-format: "%Y-%02m-%02d.%02H"
-# time-stamp-time-zone: "UTC0"
-# time-stamp-end: "; # UTC"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXext/libtool b/experiments/wasm-gui/third_party/libXext/libtool
deleted file mode 100755
index 5d60c70e3..000000000
--- a/experiments/wasm-gui/third_party/libXext/libtool
+++ /dev/null
@@ -1,12024 +0,0 @@
-#! /bin/bash
-# Generated automatically by config.status (libXext) 1.3.7
-# NOTE: Changes made to this file will be lost: look at ltmain.sh.
-
-# Provide generalized library-building support services.
-# Written by Gordon Matzigkeit, 1996
-
-# Copyright (C) 2024 Free Software Foundation, Inc.
-# This is free software; see the source for copying conditions.  There is NO
-# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-
-# GNU Libtool is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program or library that is built
-# using GNU Libtool, you may include this file under the  same
-# distribution terms that you use for the rest of that program.
-#
-# GNU Libtool is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-
-# The names of the tagged configurations supported by this script.
-available_tags=''
-
-# Configured defaults for sys_lib_dlsearch_path munging.
-: ${LT_SYS_LIBRARY_PATH=""}
-
-# ### BEGIN LIBTOOL CONFIG
-
-# Which release of libtool.m4 was used?
-macro_version=2.5.4
-macro_revision=2.5.4
-
-# Whether or not to build shared libraries.
-build_libtool_libs=no
-
-# Whether or not to build static libraries.
-build_old_libs=yes
-
-# What type of objects to build.
-pic_mode=default
-
-# Whether or not to optimize for fast installation.
-fast_install=needless
-
-# Shared archive member basename,for filename based shared library versioning on AIX.
-shared_archive_member_spec=
-
-# Shell to use when invoking shell scripts.
-SHELL="/bin/bash"
-
-# An echo program that protects backslashes.
-ECHO="printf %s\\n"
-
-# The PATH separator for the build system.
-PATH_SEPARATOR=":"
-
-# The host system.
-host_alias=wasm32-wasi
-host=wasm32-unknown-wasi
-host_os=wasi
-
-# The build system.
-build_alias=
-build=x86_64-pc-linux-gnu
-build_os=linux-gnu
-
-# A sed program that does not truncate output.
-SED="/usr/bin/sed"
-
-# Sed that helps us avoid accidentally triggering echo(1) options like -n.
-Xsed="$SED -e 1s/^X//"
-
-# A grep program that handles long lines.
-GREP="/usr/bin/grep"
-
-# An ERE matcher.
-EGREP="/usr/bin/grep -E"
-
-# A literal string matcher.
-FGREP="/usr/bin/grep -F"
-
-# A BSD- or MS-compatible name lister.
-NM="nm"
-
-# Whether we need soft or hard links.
-LN_S="ln -s"
-
-# What is the maximum length of a command?
-max_cmd_len=1572864
-
-# Object file suffix (normally "o").
-objext=o
-
-# Executable file suffix (normally "").
-exeext=
-
-# whether the shell understands "unset".
-lt_unset=unset
-
-# turn spaces into newlines.
-SP2NL="tr \\040 \\012"
-
-# turn newlines into spaces.
-NL2SP="tr \\015\\012 \\040\\040"
-
-# convert $build file names to $host format.
-to_host_file_cmd=func_convert_file_noop
-
-# convert $build files to toolchain format.
-to_tool_file_cmd=func_convert_file_noop
-
-# A file(cmd) program that detects file types.
-FILECMD="file"
-
-# An object symbol dumper.
-OBJDUMP="objdump"
-
-# Method to check whether dependent libraries are shared objects.
-deplibs_check_method="unknown"
-
-# Command to use when deplibs_check_method = "file_magic".
-file_magic_cmd="\$MAGIC_CMD"
-
-# How to find potential files when deplibs_check_method = "file_magic".
-file_magic_glob=""
-
-# Find potential files using nocaseglob when deplibs_check_method = "file_magic".
-want_nocaseglob="no"
-
-# DLL creation program.
-DLLTOOL="dlltool"
-
-# Command to associate shared and link libraries.
-sharedlib_from_linklib_cmd="printf %s\\n"
-
-# The archiver.
-AR="/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ar"
-
-# Flags to create an archive (by configure).
-lt_ar_flags=cr
-
-# Flags to create an archive.
-AR_FLAGS=${ARFLAGS-"$lt_ar_flags"}
-
-# How to feed a file listing to the archiver.
-archiver_list_spec="@"
-
-# A symbol stripping program.
-STRIP="strip"
-
-# Commands used to install an old-style archive.
-RANLIB="/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ranlib"
-old_postinstall_cmds="chmod 644 \$oldlib~\$RANLIB \$tool_oldlib"
-old_postuninstall_cmds=""
-
-# Whether to use a lock for old archive extraction.
-lock_old_archive_extraction=no
-
-# A C compiler.
-LTCC="/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23"
-
-# LTCC compiler flags.
-LTCFLAGS="--target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h"
-
-# Take the output of nm and produce a listing of raw symbols and C names.
-global_symbol_pipe=""
-
-# Transform the output of nm in a proper C declaration.
-global_symbol_to_cdecl=""
-
-# Transform the output of nm into a list of symbols to manually relocate.
-global_symbol_to_import=""
-
-# Transform the output of nm in a C name address pair.
-global_symbol_to_c_name_address="/usr/bin/sed -n -e 's/^: \\(.*\\) .*\$/  {\"\\1\", (void *) 0},/p' -e 's/^[ABCDGIRSTW][ABCDGIRSTW]* .* \\(.*\\)\$/  {\"\\1\", (void *) \\&\\1},/p'"
-
-# Transform the output of nm in a C name address pair when lib prefix is needed.
-global_symbol_to_c_name_address_lib_prefix="/usr/bin/sed -n -e 's/^: \\(.*\\) .*\$/  {\"\\1\", (void *) 0},/p' -e 's/^[ABCDGIRSTW][ABCDGIRSTW]* .* \\(lib.*\\)\$/  {\"\\1\", (void *) \\&\\1},/p' -e 's/^[ABCDGIRSTW][ABCDGIRSTW]* .* \\(.*\\)\$/  {\"lib\\1\", (void *) \\&\\1},/p'"
-
-# The name lister interface.
-nm_interface="BSD nm"
-
-# Specify filename containing input files for $NM.
-nm_file_list_spec="@"
-
-# The root where to search for dependent libraries,and where our libraries should be installed.
-lt_sysroot=
-
-# Command to truncate a binary pipe.
-lt_truncate_bin="/usr/bin/dd bs=4096 count=1"
-
-# The name of the directory that contains temporary libtool files.
-objdir=.libs
-
-# Used to examine libraries when file_magic_cmd begins with "file".
-MAGIC_CMD=file
-
-# Must we lock files when doing compilation?
-need_locks="no"
-
-# Manifest tool.
-MANIFEST_TOOL=":"
-
-# Tool to manipulate archived DWARF debug symbol files on Mac OS X.
-DSYMUTIL=""
-
-# Tool to change global to local symbols on Mac OS X.
-NMEDIT=""
-
-# Tool to manipulate fat objects and archives on Mac OS X.
-LIPO=""
-
-# ldd/readelf like tool for Mach-O binaries on Mac OS X.
-OTOOL=""
-
-# ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4.
-OTOOL64=""
-
-# Old archive suffix (normally "a").
-libext=a
-
-# Shared library suffix (normally ".so").
-shrext_cmds=".so"
-
-# The commands to extract the exported symbol list from a shared archive.
-extract_expsyms_cmds=""
-
-# Variables whose values should be saved in libtool wrapper scripts and
-# restored at link time.
-variables_saved_for_relink="PATH  LD_RUN_PATH GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH"
-
-# Do we need the "lib" prefix for modules?
-need_lib_prefix=unknown
-
-# Do we need a version for libraries?
-need_version=unknown
-
-# Library versioning type.
-version_type=none
-
-# Shared library runtime path variable.
-runpath_var=LD_RUN_PATH
-
-# Shared library path variable.
-shlibpath_var=
-
-# Is shlibpath searched before the hard-coded library search path?
-shlibpath_overrides_runpath=unknown
-
-# Format of library name prefix.
-libname_spec="lib\$name"
-
-# List of archive names.  First name is the real one, the rest are links.
-# The last name is the one that the linker finds with -lNAME
-library_names_spec=""
-
-# The coded name of the library, if different from the real name.
-soname_spec=""
-
-# Permission mode override for installation of shared libraries.
-install_override_mode=""
-
-# Command to use after installation of a shared archive.
-postinstall_cmds=""
-
-# Command to use after uninstallation of a shared archive.
-postuninstall_cmds=""
-
-# Commands used to finish a libtool library installation in a directory.
-finish_cmds=""
-
-# As "finish_cmds", except a single script fragment to be evaled but
-# not shown.
-finish_eval=""
-
-# Whether we should hardcode library paths into libraries.
-hardcode_into_libs=no
-
-# Compile-time system search path for libraries.
-sys_lib_search_path_spec="/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19 /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasi "
-
-# Detected run-time system search path for libraries.
-sys_lib_dlsearch_path_spec="/lib /usr/lib"
-
-# Explicit LT_SYS_LIBRARY_PATH set during ./configure time.
-configure_time_lt_sys_library_path=""
-
-# Whether dlopen is supported.
-dlopen_support=unknown
-
-# Whether dlopen of programs is supported.
-dlopen_self=unknown
-
-# Whether dlopen of statically linked programs is supported.
-dlopen_self_static=unknown
-
-# Commands to strip libraries.
-old_striplib="strip --strip-debug"
-striplib="strip --strip-unneeded"
-
-
-# The linker used to build libraries.
-LD="/home/linuxbrew/.linuxbrew/bin/ld"
-
-# How to create reloadable object files.
-reload_flag=" -r"
-reload_cmds="\$LD\$reload_flag -o \$output\$reload_objs"
-
-# Commands used to build an old-style archive.
-old_archive_cmds="\$AR \$AR_FLAGS \$oldlib\$oldobjs~\$RANLIB \$tool_oldlib"
-
-# A language specific compiler.
-CC="/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23"
-
-# Is the compiler the GNU compiler?
-with_gcc=yes
-
-# Compiler flag to turn off builtin functions.
-no_builtin_flag=" -fno-builtin -fno-rtti -fno-exceptions"
-
-# Additional compiler flags for building library objects.
-pic_flag=" -fPIC -DPIC"
-
-# How to pass a linker flag through the compiler.
-wl="-Wl,"
-
-# Compiler flag to prevent dynamic linking.
-link_static_flag="-static"
-
-# Does compiler simultaneously support -c and -o options?
-compiler_c_o="yes"
-
-# Whether or not to add -lc for building shared libraries.
-build_libtool_need_lc=yes
-
-# Whether or not to disallow shared libs when runtime libs are static.
-allow_libtool_libs_with_static_runtimes=no
-
-# Compiler flag to allow reflexive dlopens.
-export_dynamic_flag_spec="\$wl--export-dynamic"
-
-# Compiler flag to generate shared objects directly from archives.
-whole_archive_flag_spec="\$wl--whole-archive\$convenience \$wl--no-whole-archive"
-
-# Whether the compiler copes with passing no objects directly.
-compiler_needs_object="no"
-
-# Create an old-style archive from a shared archive.
-old_archive_from_new_cmds=""
-
-# Create a temporary old-style archive to link instead of a shared archive.
-old_archive_from_expsyms_cmds=""
-
-# Commands used to build a shared archive.
-archive_cmds="\$CC -shared \$pic_flag \$libobjs \$deplibs \$compiler_flags \$wl-soname \$wl\$soname -o \$lib"
-archive_expsym_cmds="\$CC -shared \$pic_flag \$libobjs \$deplibs \$compiler_flags \$wl-soname \$wl\$soname \$wl-retain-symbols-file \$wl\$export_symbols -o \$lib"
-
-# Commands used to build a loadable module if different from building
-# a shared archive.
-module_cmds=""
-module_expsym_cmds=""
-
-# Whether we are building with GNU ld or not.
-with_gnu_ld="yes"
-
-# Flag that allows shared libraries with undefined symbols to be built.
-allow_undefined_flag=""
-
-# Flag that enforces no undefined symbols.
-no_undefined_flag=""
-
-# Flag to hardcode $libdir into a binary during linking.
-# This must work even if $libdir does not exist
-hardcode_libdir_flag_spec="\$wl-rpath \$wl\$libdir"
-
-# Whether we need a single "-rpath" flag with a separated argument.
-hardcode_libdir_separator=""
-
-# Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes
-# DIR into the resulting binary.
-hardcode_direct=no
-
-# Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes
-# DIR into the resulting binary and the resulting library dependency is
-# "absolute",i.e. impossible to change by setting $shlibpath_var if the
-# library is relocated.
-hardcode_direct_absolute=no
-
-# Set to "yes" if using the -LDIR flag during linking hardcodes DIR
-# into the resulting binary.
-hardcode_minus_L=no
-
-# Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR
-# into the resulting binary.
-hardcode_shlibpath_var=unsupported
-
-# Set to "yes" if building a shared library automatically hardcodes DIR
-# into the library and all subsequent libraries and executables linked
-# against it.
-hardcode_automatic=no
-
-# Set to yes if linker adds runtime paths of dependent libraries
-# to runtime path list.
-inherit_rpath=no
-
-# Whether libtool must link a program against all its dependency libraries.
-link_all_deplibs=unknown
-
-# Set to "yes" if exported symbols are required.
-always_export_symbols=no
-
-# The commands to list exported symbols.
-export_symbols_cmds="\$NM \$libobjs \$convenience | \$global_symbol_pipe | \$SED 's/.* //' | sort | uniq > \$export_symbols"
-
-# Symbols that should not be listed in the preloaded symbols.
-exclude_expsyms="_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*"
-
-# Symbols that must always be exported.
-include_expsyms=""
-
-# Commands necessary for linking programs (against libraries) with templates.
-prelink_cmds=""
-
-# Commands necessary for finishing linking programs.
-postlink_cmds=""
-
-# Specify filename containing input files.
-file_list_spec=""
-
-# How to hardcode a shared library path into an executable.
-hardcode_action=immediate
-
-# ### END LIBTOOL CONFIG
-
-
-# ### BEGIN FUNCTIONS SHARED WITH CONFIGURE
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x$2 in
-    x)
-        ;;
-    *:)
-        eval $1=\"`$ECHO $2 | $SED 's/:/ /g'` \$$1\"
-        ;;
-    x:*)
-        eval $1=\"\$$1 `$ECHO $2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval $1=\"\$$1\ `$ECHO $2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval $1=\"`$ECHO $2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \$$1\"
-        ;;
-    *)
-        eval $1=\"`$ECHO $2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in $*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-
-# ### END FUNCTIONS SHARED WITH CONFIGURE
-
-#! /usr/bin/env sh
-## DO NOT EDIT - This file generated from ./build-aux/ltmain.in
-##               by inline-source v2019-02-19.15
-
-# libtool (GNU libtool) 2.5.4
-# Provide generalized library-building support services.
-# Written by Gordon Matzigkeit <gord@gnu.ai.mit.edu>, 1996
-
-# Copyright (C) 1996-2019, 2021-2024 Free Software Foundation, Inc.
-# This is free software; see the source for copying conditions.  There is NO
-# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-
-# GNU Libtool is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# As a special exception to the GNU General Public License,
-# if you distribute this file as part of a program or library that
-# is built using GNU Libtool, you may include this file under the
-# same distribution terms that you use for the rest of that program.
-#
-# GNU Libtool is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-# General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-
-PROGRAM=libtool
-PACKAGE=libtool
-VERSION=2.5.4
-package_revision=2.5.4
-
-
-## ------ ##
-## Usage. ##
-## ------ ##
-
-# Run './libtool --help' for help with using this script from the
-# command line.
-
-
-## ------------------------------- ##
-## User overridable command paths. ##
-## ------------------------------- ##
-
-# After configure completes, it has a better idea of some of the
-# shell tools we need than the defaults used by the functions shared
-# with bootstrap, so set those here where they can still be over-
-# ridden by the user, but otherwise take precedence.
-
-: ${AUTOCONF="autoconf"}
-: ${AUTOMAKE="automake"}
-
-
-## -------------------------- ##
-## Source external libraries. ##
-## -------------------------- ##
-
-# Much of our low-level functionality needs to be sourced from external
-# libraries, which are installed to $pkgauxdir.
-
-# Set a version string for this script.
-scriptversion=2019-02-19.15; # UTC
-
-# General shell script boiler plate, and helper functions.
-# Written by Gary V. Vaughan, 2004
-
-# This is free software.  There is NO warranty; not even for
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-#
-# Copyright (C) 2004-2019, 2021, 2023-2024 Bootstrap Authors
-#
-# This file is dual licensed under the terms of the MIT license
-# <https://opensource.org/licenses/MIT>, and GPL version 2 or later
-# <https://www.gnu.org/licenses/gpl-2.0.html>.  You must apply one of
-# these licenses when using or redistributing this software or any of
-# the files within it.  See the URLs above, or the file `LICENSE`
-# included in the Bootstrap distribution for the full license texts.
-
-# Please report bugs or propose patches to:
-# <https://github.com/gnulib-modules/bootstrap/issues>
-
-
-## ------ ##
-## Usage. ##
-## ------ ##
-
-# Evaluate this file near the top of your script to gain access to
-# the functions and variables defined here:
-#
-#   . `echo "$0" | ${SED-sed} 's|[^/]*$||'`/build-aux/funclib.sh
-#
-# If you need to override any of the default environment variable
-# settings, do that before evaluating this file.
-
-
-## -------------------- ##
-## Shell normalisation. ##
-## -------------------- ##
-
-# Some shells need a little help to be as Bourne compatible as possible.
-# Before doing anything else, make sure all that help has been provided!
-
-DUALCASE=1; export DUALCASE # for MKS sh
-if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # is contrary to our usage.  Disable this feature.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else
-  case `(set -o) 2>/dev/null` in *posix*) set -o posix ;; esac
-fi
-
-# NLS nuisances: We save the old values in case they are required later.
-_G_user_locale=
-_G_safe_locale=
-for _G_var in LANG LANGUAGE LC_ALL LC_CTYPE LC_COLLATE LC_MESSAGES
-do
-  eval "if test set = \"\${$_G_var+set}\"; then
-          save_$_G_var=\$$_G_var
-          $_G_var=C
-	  export $_G_var
-	  _G_user_locale=\"$_G_var=\\\$save_\$_G_var; \$_G_user_locale\"
-	  _G_safe_locale=\"$_G_var=C; \$_G_safe_locale\"
-	fi"
-done
-# These NLS vars are set unconditionally (bootstrap issue #24).  Unset those
-# in case the environment reset is needed later and the $save_* variant is not
-# defined (see the code above).
-LC_ALL=C
-LANGUAGE=C
-export LANGUAGE LC_ALL
-
-# Make sure IFS has a sensible default
-sp=' '
-nl='
-'
-IFS="$sp	$nl"
-
-# There are apparently some systems that use ';' as a PATH separator!
-if test "${PATH_SEPARATOR+set}" != set; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# func_unset VAR
-# --------------
-# Portably unset VAR.
-# In some shells, an 'unset VAR' statement leaves a non-zero return
-# status if VAR is already unset, which might be problematic if the
-# statement is used at the end of a function (thus poisoning its return
-# value) or when 'set -e' is active (causing even a spurious abort of
-# the script in this case).
-func_unset ()
-{
-    { eval $1=; (eval unset $1) >/dev/null 2>&1 && eval unset $1 || : ; }
-}
-
-
-# Make sure CDPATH doesn't cause `cd` commands to output the target dir.
-func_unset CDPATH
-
-# Make sure ${,E,F}GREP behave sanely.
-func_unset GREP_OPTIONS
-
-
-## ------------------------- ##
-## Locate command utilities. ##
-## ------------------------- ##
-
-
-# func_executable_p FILE
-# ----------------------
-# Check that FILE is an executable regular file.
-func_executable_p ()
-{
-    test -f "$1" && test -x "$1"
-}
-
-
-# func_path_progs PROGS_LIST CHECK_FUNC [PATH]
-# --------------------------------------------
-# Search for either a program that responds to --version with output
-# containing "GNU", or else returned by CHECK_FUNC otherwise, by
-# trying all the directories in PATH with each of the elements of
-# PROGS_LIST.
-#
-# CHECK_FUNC should accept the path to a candidate program, and
-# set $func_check_prog_result if it truncates its output less than
-# $_G_path_prog_max characters.
-func_path_progs ()
-{
-    _G_progs_list=$1
-    _G_check_func=$2
-    _G_PATH=${3-"$PATH"}
-
-    _G_path_prog_max=0
-    _G_path_prog_found=false
-    _G_save_IFS=$IFS; IFS=${PATH_SEPARATOR-:}
-    for _G_dir in $_G_PATH; do
-      IFS=$_G_save_IFS
-      test -z "$_G_dir" && _G_dir=.
-      for _G_prog_name in $_G_progs_list; do
-        for _exeext in '' .EXE; do
-          _G_path_prog=$_G_dir/$_G_prog_name$_exeext
-          func_executable_p "$_G_path_prog" || continue
-          case `"$_G_path_prog" --version 2>&1` in
-            *GNU*) func_path_progs_result=$_G_path_prog _G_path_prog_found=: ;;
-            *)     $_G_check_func $_G_path_prog
-		   func_path_progs_result=$func_check_prog_result
-		   ;;
-          esac
-          $_G_path_prog_found && break 3
-        done
-      done
-    done
-    IFS=$_G_save_IFS
-    test -z "$func_path_progs_result" && {
-      echo "no acceptable sed could be found in \$PATH" >&2
-      exit 1
-    }
-}
-
-
-# We want to be able to use the functions in this file before configure
-# has figured out where the best binaries are kept, which means we have
-# to search for them ourselves - except when the results are already set
-# where we skip the searches.
-
-# Unless the user overrides by setting SED, search the path for either GNU
-# sed, or the sed that truncates its output the least.
-test -z "$SED" && {
-  _G_sed_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/
-  for _G_i in 1 2 3 4 5 6 7; do
-    _G_sed_script=$_G_sed_script$nl$_G_sed_script
-  done
-  echo "$_G_sed_script" 2>/dev/null | sed 99q >conftest.sed
-  _G_sed_script=
-
-  func_check_prog_sed ()
-  {
-    _G_path_prog=$1
-
-    _G_count=0
-    printf 0123456789 >conftest.in
-    while :
-    do
-      cat conftest.in conftest.in >conftest.tmp
-      mv conftest.tmp conftest.in
-      cp conftest.in conftest.nl
-      echo '' >> conftest.nl
-      "$_G_path_prog" -f conftest.sed <conftest.nl >conftest.out 2>/dev/null || break
-      diff conftest.out conftest.nl >/dev/null 2>&1 || break
-      _G_count=`expr $_G_count + 1`
-      if test "$_G_count" -gt "$_G_path_prog_max"; then
-        # Best one so far, save it but keep looking for a better one
-        func_check_prog_result=$_G_path_prog
-        _G_path_prog_max=$_G_count
-      fi
-      # 10*(2^10) chars as input seems more than enough
-      test 10 -lt "$_G_count" && break
-    done
-    rm -f conftest.in conftest.tmp conftest.nl conftest.out
-  }
-
-  func_path_progs "sed gsed" func_check_prog_sed "$PATH:/usr/xpg4/bin"
-  rm -f conftest.sed
-  SED=$func_path_progs_result
-}
-
-
-# Unless the user overrides by setting GREP, search the path for either GNU
-# grep, or the grep that truncates its output the least.
-test -z "$GREP" && {
-  func_check_prog_grep ()
-  {
-    _G_path_prog=$1
-
-    _G_count=0
-    _G_path_prog_max=0
-    printf 0123456789 >conftest.in
-    while :
-    do
-      cat conftest.in conftest.in >conftest.tmp
-      mv conftest.tmp conftest.in
-      cp conftest.in conftest.nl
-      echo 'GREP' >> conftest.nl
-      "$_G_path_prog" -e 'GREP$' -e '-(cannot match)-' <conftest.nl >conftest.out 2>/dev/null || break
-      diff conftest.out conftest.nl >/dev/null 2>&1 || break
-      _G_count=`expr $_G_count + 1`
-      if test "$_G_count" -gt "$_G_path_prog_max"; then
-        # Best one so far, save it but keep looking for a better one
-        func_check_prog_result=$_G_path_prog
-        _G_path_prog_max=$_G_count
-      fi
-      # 10*(2^10) chars as input seems more than enough
-      test 10 -lt "$_G_count" && break
-    done
-    rm -f conftest.in conftest.tmp conftest.nl conftest.out
-  }
-
-  func_path_progs "grep ggrep" func_check_prog_grep "$PATH:/usr/xpg4/bin"
-  GREP=$func_path_progs_result
-}
-
-
-## ------------------------------- ##
-## User overridable command paths. ##
-## ------------------------------- ##
-
-# All uppercase variable names are used for environment variables.  These
-# variables can be overridden by the user before calling a script that
-# uses them if a suitable command of that name is not already available
-# in the command search PATH.
-
-: ${CP="cp -f"}
-: ${ECHO="printf %s\n"}
-: ${EGREP="$GREP -E"}
-: ${FGREP="$GREP -F"}
-: ${LN_S="ln -s"}
-: ${MAKE="make"}
-: ${MKDIR="mkdir"}
-: ${MV="mv -f"}
-: ${RM="rm -f"}
-: ${SHELL="${CONFIG_SHELL-/bin/sh}"}
-
-
-## -------------------- ##
-## Useful sed snippets. ##
-## -------------------- ##
-
-sed_dirname='s|/[^/]*$||'
-sed_basename='s|^.*/||'
-
-# Sed substitution that helps us do robust quoting.  It backslashifies
-# metacharacters that are still active within double-quoted strings.
-sed_quote_subst='s|\([`"$\\]\)|\\\1|g'
-
-# Same as above, but do not quote variable references.
-sed_double_quote_subst='s/\(["`\\]\)/\\\1/g'
-
-# Sed substitution that turns a string into a regex matching for the
-# string literally.
-sed_make_literal_regex='s|[].[^$\\*\/]|\\&|g'
-
-# Sed substitution that converts a w32 file name or path
-# that contains forward slashes, into one that contains
-# (escaped) backslashes.  A very naive implementation.
-sed_naive_backslashify='s|\\\\*|\\|g;s|/|\\|g;s|\\|\\\\|g'
-
-# Re-'\' parameter expansions in output of sed_double_quote_subst that
-# were '\'-ed in input to the same.  If an odd number of '\' preceded a
-# '$' in input to sed_double_quote_subst, that '$' was protected from
-# expansion.  Since each input '\' is now two '\'s, look for any number
-# of runs of four '\'s followed by two '\'s and then a '$'.  '\' that '$'.
-_G_bs='\\'
-_G_bs2='\\\\'
-_G_bs4='\\\\\\\\'
-_G_dollar='\$'
-sed_double_backslash="\
-  s/$_G_bs4/&\\
-/g
-  s/^$_G_bs2$_G_dollar/$_G_bs&/
-  s/\\([^$_G_bs]\\)$_G_bs2$_G_dollar/\\1$_G_bs2$_G_bs$_G_dollar/g
-  s/\n//g"
-
-# require_check_ifs_backslash
-# ---------------------------
-# Check if we can use backslash as IFS='\' separator, and set
-# $check_ifs_backshlash_broken to ':' or 'false'.
-require_check_ifs_backslash=func_require_check_ifs_backslash
-func_require_check_ifs_backslash ()
-{
-  _G_save_IFS=$IFS
-  IFS='\'
-  _G_check_ifs_backshlash='a\\b'
-  for _G_i in $_G_check_ifs_backshlash
-  do
-  case $_G_i in
-  a)
-    check_ifs_backshlash_broken=false
-    ;;
-  '')
-    break
-    ;;
-  *)
-    check_ifs_backshlash_broken=:
-    break
-    ;;
-  esac
-  done
-  IFS=$_G_save_IFS
-  require_check_ifs_backslash=:
-}
-
-
-## ----------------- ##
-## Global variables. ##
-## ----------------- ##
-
-# Except for the global variables explicitly listed below, the following
-# functions in the '^func_' namespace, and the '^require_' namespace
-# variables initialised in the 'Resource management' section, sourcing
-# this file will not pollute your global namespace with anything
-# else. There's no portable way to scope variables in Bourne shell
-# though, so actually running these functions will sometimes place
-# results into a variable named after the function, and often use
-# temporary variables in the '^_G_' namespace. If you are careful to
-# avoid using those namespaces casually in your sourcing script, things
-# should continue to work as you expect. And, of course, you can freely
-# overwrite any of the functions or variables defined here before
-# calling anything to customize them.
-
-EXIT_SUCCESS=0
-EXIT_FAILURE=1
-EXIT_MISMATCH=63  # $? = 63 is used to indicate version mismatch to missing.
-EXIT_SKIP=77	  # $? = 77 is used to indicate a skipped test to automake.
-
-# Allow overriding, eg assuming that you follow the convention of
-# putting '$debug_cmd' at the start of all your functions, you can get
-# bash to show function call trace with:
-#
-#    debug_cmd='eval echo "${FUNCNAME[0]} $*" >&2' bash your-script-name
-debug_cmd=${debug_cmd-":"}
-exit_cmd=:
-
-# By convention, finish your script with:
-#
-#    exit $exit_status
-#
-# so that you can set exit_status to non-zero if you want to indicate
-# something went wrong during execution without actually bailing out at
-# the point of failure.
-exit_status=$EXIT_SUCCESS
-
-# Work around backward compatibility issue on IRIX 6.5. On IRIX 6.4+, sh
-# is ksh but when the shell is invoked as "sh" and the current value of
-# the _XPG environment variable is not equal to 1 (one), the special
-# positional parameter $0, within a function call, is the name of the
-# function.
-progpath=$0
-
-# The name of this program.
-progname=`$ECHO "$progpath" |$SED "$sed_basename"`
-
-# Make sure we have an absolute progpath for reexecution:
-case $progpath in
-  [\\/]*|[A-Za-z]:\\*) ;;
-  *[\\/]*)
-     progdir=`$ECHO "$progpath" |$SED "$sed_dirname"`
-     progdir=`cd "$progdir" && pwd`
-     progpath=$progdir/$progname
-     ;;
-  *)
-     _G_IFS=$IFS
-     IFS=${PATH_SEPARATOR-:}
-     for progdir in $PATH; do
-       IFS=$_G_IFS
-       test -x "$progdir/$progname" && break
-     done
-     IFS=$_G_IFS
-     test -n "$progdir" || progdir=`pwd`
-     progpath=$progdir/$progname
-     ;;
-esac
-
-
-## ----------------- ##
-## Standard options. ##
-## ----------------- ##
-
-# The following options affect the operation of the functions defined
-# below, and should be set appropriately depending on run-time para-
-# meters passed on the command line.
-
-opt_dry_run=false
-opt_quiet=false
-opt_verbose=false
-
-# Categories 'all' and 'none' are always available.  Append any others
-# you will pass as the first argument to func_warning from your own
-# code.
-warning_categories=
-
-# By default, display warnings according to 'opt_warning_types'.  Set
-# 'warning_func'  to ':' to elide all warnings, or func_fatal_error to
-# treat the next displayed warning as a fatal error.
-warning_func=func_warn_and_continue
-
-# Set to 'all' to display all warnings, 'none' to suppress all
-# warnings, or a space delimited list of some subset of
-# 'warning_categories' to display only the listed warnings.
-opt_warning_types=all
-
-
-## -------------------- ##
-## Resource management. ##
-## -------------------- ##
-
-# This section contains definitions for functions that each ensure a
-# particular resource (a file, or a non-empty configuration variable for
-# example) is available, and if appropriate to extract default values
-# from pertinent package files. Call them using their associated
-# 'require_*' variable to ensure that they are executed, at most, once.
-#
-# It's entirely deliberate that calling these functions can set
-# variables that don't obey the namespace limitations obeyed by the rest
-# of this file, in order that that they be as useful as possible to
-# callers.
-
-
-# require_term_colors
-# -------------------
-# Allow display of bold text on terminals that support it.
-require_term_colors=func_require_term_colors
-func_require_term_colors ()
-{
-    $debug_cmd
-
-    test -t 1 && {
-      # COLORTERM and USE_ANSI_COLORS environment variables take
-      # precedence, because most terminfo databases neglect to describe
-      # whether color sequences are supported.
-      test -n "${COLORTERM+set}" && : ${USE_ANSI_COLORS="1"}
-
-      if test 1 = "$USE_ANSI_COLORS"; then
-        # Standard ANSI escape sequences
-        tc_reset=''
-        tc_bold='';   tc_standout=''
-        tc_red='';   tc_green=''
-        tc_blue='';  tc_cyan=''
-      else
-        # Otherwise trust the terminfo database after all.
-        test -n "`tput sgr0 2>/dev/null`" && {
-          tc_reset=`tput sgr0`
-          test -n "`tput bold 2>/dev/null`" && tc_bold=`tput bold`
-          tc_standout=$tc_bold
-          test -n "`tput smso 2>/dev/null`" && tc_standout=`tput smso`
-          test -n "`tput setaf 1 2>/dev/null`" && tc_red=`tput setaf 1`
-          test -n "`tput setaf 2 2>/dev/null`" && tc_green=`tput setaf 2`
-          test -n "`tput setaf 4 2>/dev/null`" && tc_blue=`tput setaf 4`
-          test -n "`tput setaf 5 2>/dev/null`" && tc_cyan=`tput setaf 5`
-        }
-      fi
-    }
-
-    require_term_colors=:
-}
-
-
-## ----------------- ##
-## Function library. ##
-## ----------------- ##
-
-# This section contains a variety of useful functions to call in your
-# scripts. Take note of the portable wrappers for features provided by
-# some modern shells, which will fall back to slower equivalents on
-# less featureful shells.
-
-
-# func_append VAR VALUE
-# ---------------------
-# Append VALUE onto the existing contents of VAR.
-
-  # We should try to minimise forks, especially on Windows where they are
-  # unreasonably slow, so skip the feature probes when bash or zsh are
-  # being used:
-  if test set = "${BASH_VERSION+set}${ZSH_VERSION+set}"; then
-    : ${_G_HAVE_ARITH_OP="yes"}
-    : ${_G_HAVE_XSI_OPS="yes"}
-    # The += operator was introduced in bash 3.1
-    case $BASH_VERSION in
-      [12].* | 3.0 | 3.0*) ;;
-      *)
-        : ${_G_HAVE_PLUSEQ_OP="yes"}
-        ;;
-    esac
-  fi
-
-  # _G_HAVE_PLUSEQ_OP
-  # Can be empty, in which case the shell is probed, "yes" if += is
-  # usable or anything else if it does not work.
-  test -z "$_G_HAVE_PLUSEQ_OP" \
-    && (eval 'x=a; x+=" b"; test "a b" = "$x"') 2>/dev/null \
-    && _G_HAVE_PLUSEQ_OP=yes
-
-if test yes = "$_G_HAVE_PLUSEQ_OP"
-then
-  # This is an XSI compatible shell, allowing a faster implementation...
-  eval 'func_append ()
-  {
-    $debug_cmd
-
-    eval "$1+=\$2"
-  }'
-else
-  # ...otherwise fall back to using expr, which is often a shell builtin.
-  func_append ()
-  {
-    $debug_cmd
-
-    eval "$1=\$$1\$2"
-  }
-fi
-
-
-# func_append_quoted VAR VALUE
-# ----------------------------
-# Quote VALUE and append to the end of shell variable VAR, separated
-# by a space.
-if test yes = "$_G_HAVE_PLUSEQ_OP"; then
-  eval 'func_append_quoted ()
-  {
-    $debug_cmd
-
-    func_quote_arg pretty "$2"
-    eval "$1+=\\ \$func_quote_arg_result"
-  }'
-else
-  func_append_quoted ()
-  {
-    $debug_cmd
-
-    func_quote_arg pretty "$2"
-    eval "$1=\$$1\\ \$func_quote_arg_result"
-  }
-fi
-
-
-# func_append_uniq VAR VALUE
-# --------------------------
-# Append unique VALUE onto the existing contents of VAR, assuming
-# entries are delimited by the first character of VALUE.  For example:
-#
-#   func_append_uniq options " --another-option option-argument"
-#
-# will only append to $options if " --another-option option-argument "
-# is not already present somewhere in $options already (note spaces at
-# each end implied by leading space in second argument).
-func_append_uniq ()
-{
-    $debug_cmd
-
-    eval _G_current_value='`$ECHO $'$1'`'
-    _G_delim=`expr "$2" : '\(.\)'`
-
-    case $_G_delim$_G_current_value$_G_delim in
-      *"$2$_G_delim"*) ;;
-      *) func_append "$@" ;;
-    esac
-}
-
-
-# func_arith TERM...
-# ------------------
-# Set func_arith_result to the result of evaluating TERMs.
-  test -z "$_G_HAVE_ARITH_OP" \
-    && (eval 'test 2 = $(( 1 + 1 ))') 2>/dev/null \
-    && _G_HAVE_ARITH_OP=yes
-
-if test yes = "$_G_HAVE_ARITH_OP"; then
-  eval 'func_arith ()
-  {
-    $debug_cmd
-
-    func_arith_result=$(( $* ))
-  }'
-else
-  func_arith ()
-  {
-    $debug_cmd
-
-    func_arith_result=`expr "$@"`
-  }
-fi
-
-
-# func_basename FILE
-# ------------------
-# Set func_basename_result to FILE with everything up to and including
-# the last / stripped.
-if test yes = "$_G_HAVE_XSI_OPS"; then
-  # If this shell supports suffix pattern removal, then use it to avoid
-  # forking. Hide the definitions single quotes in case the shell chokes
-  # on unsupported syntax...
-  _b='func_basename_result=${1##*/}'
-  _d='case $1 in
-        */*) func_dirname_result=${1%/*}$2 ;;
-        *  ) func_dirname_result=$3        ;;
-      esac'
-
-else
-  # ...otherwise fall back to using sed.
-  _b='func_basename_result=`$ECHO "$1" |$SED "$sed_basename"`'
-  _d='func_dirname_result=`$ECHO "$1"  |$SED "$sed_dirname"`
-      if test "X$func_dirname_result" = "X$1"; then
-        func_dirname_result=$3
-      else
-        func_append func_dirname_result "$2"
-      fi'
-fi
-
-eval 'func_basename ()
-{
-    $debug_cmd
-
-    '"$_b"'
-}'
-
-
-# func_dirname FILE APPEND NONDIR_REPLACEMENT
-# -------------------------------------------
-# Compute the dirname of FILE.  If nonempty, add APPEND to the result,
-# otherwise set result to NONDIR_REPLACEMENT.
-eval 'func_dirname ()
-{
-    $debug_cmd
-
-    '"$_d"'
-}'
-
-
-# func_dirname_and_basename FILE APPEND NONDIR_REPLACEMENT
-# --------------------------------------------------------
-# Perform func_basename and func_dirname in a single function
-# call:
-#   dirname:  Compute the dirname of FILE.  If nonempty,
-#             add APPEND to the result, otherwise set result
-#             to NONDIR_REPLACEMENT.
-#             value returned in "$func_dirname_result"
-#   basename: Compute filename of FILE.
-#             value returned in "$func_basename_result"
-# For efficiency, we do not delegate to the functions above but instead
-# duplicate the functionality here.
-eval 'func_dirname_and_basename ()
-{
-    $debug_cmd
-
-    '"$_b"'
-    '"$_d"'
-}'
-
-
-# func_echo ARG...
-# ----------------
-# Echo program name prefixed message.
-func_echo ()
-{
-    $debug_cmd
-
-    _G_message=$*
-
-    func_echo_IFS=$IFS
-    IFS=$nl
-    for _G_line in $_G_message; do
-      IFS=$func_echo_IFS
-      $ECHO "$progname: $_G_line"
-    done
-    IFS=$func_echo_IFS
-}
-
-
-# func_echo_all ARG...
-# --------------------
-# Invoke $ECHO with all args, space-separated.
-func_echo_all ()
-{
-    $ECHO "$*"
-}
-
-
-# func_echo_infix_1 INFIX ARG...
-# ------------------------------
-# Echo program name, followed by INFIX on the first line, with any
-# additional lines not showing INFIX.
-func_echo_infix_1 ()
-{
-    $debug_cmd
-
-    $require_term_colors
-
-    _G_infix=$1; shift
-    _G_indent=$_G_infix
-    _G_prefix="$progname: $_G_infix: "
-    _G_message=$*
-
-    # Strip color escape sequences before counting printable length
-    for _G_tc in "$tc_reset" "$tc_bold" "$tc_standout" "$tc_red" "$tc_green" "$tc_blue" "$tc_cyan"
-    do
-      test -n "$_G_tc" && {
-        _G_esc_tc=`$ECHO "$_G_tc" | $SED "$sed_make_literal_regex"`
-        _G_indent=`$ECHO "$_G_indent" | $SED "s|$_G_esc_tc||g"`
-      }
-    done
-    _G_indent="$progname: "`echo "$_G_indent" | $SED 's|.| |g'`"  " ## exclude from sc_prohibit_nested_quotes
-
-    func_echo_infix_1_IFS=$IFS
-    IFS=$nl
-    for _G_line in $_G_message; do
-      IFS=$func_echo_infix_1_IFS
-      $ECHO "$_G_prefix$tc_bold$_G_line$tc_reset" >&2
-      _G_prefix=$_G_indent
-    done
-    IFS=$func_echo_infix_1_IFS
-}
-
-
-# func_error ARG...
-# -----------------
-# Echo program name prefixed message to standard error.
-func_error ()
-{
-    $debug_cmd
-
-    $require_term_colors
-
-    func_echo_infix_1 "  $tc_standout${tc_red}error$tc_reset" "$*" >&2
-}
-
-
-# func_fatal_error ARG...
-# -----------------------
-# Echo program name prefixed message to standard error, and exit.
-func_fatal_error ()
-{
-    $debug_cmd
-
-    func_error "$*"
-    exit $EXIT_FAILURE
-}
-
-
-# func_grep EXPRESSION FILENAME
-# -----------------------------
-# Check whether EXPRESSION matches any line of FILENAME, without output.
-func_grep ()
-{
-    $debug_cmd
-
-    $GREP "$1" "$2" >/dev/null 2>&1
-}
-
-
-# func_len STRING
-# ---------------
-# Set func_len_result to the length of STRING. STRING may not
-# start with a hyphen.
-  test -z "$_G_HAVE_XSI_OPS" \
-    && (eval 'x=a/b/c;
-      test 5aa/bb/cc = "${#x}${x%%/*}${x%/*}${x#*/}${x##*/}"') 2>/dev/null \
-    && _G_HAVE_XSI_OPS=yes
-
-if test yes = "$_G_HAVE_XSI_OPS"; then
-  eval 'func_len ()
-  {
-    $debug_cmd
-
-    func_len_result=${#1}
-  }'
-else
-  func_len ()
-  {
-    $debug_cmd
-
-    func_len_result=`expr "$1" : ".*" 2>/dev/null || echo $max_cmd_len`
-  }
-fi
-
-
-# func_mkdir_p DIRECTORY-PATH
-# ---------------------------
-# Make sure the entire path to DIRECTORY-PATH is available.
-func_mkdir_p ()
-{
-    $debug_cmd
-
-    _G_directory_path=$1
-    _G_dir_list=
-
-    if test -n "$_G_directory_path" && test : != "$opt_dry_run"; then
-
-      # Protect directory names starting with '-'
-      case $_G_directory_path in
-        -*) _G_directory_path=./$_G_directory_path ;;
-      esac
-
-      # While some portion of DIR does not yet exist...
-      while test ! -d "$_G_directory_path"; do
-        # ...make a list in topmost first order.  Use a colon delimited
-	# list in case some portion of path contains whitespace.
-        _G_dir_list=$_G_directory_path:$_G_dir_list
-
-        # If the last portion added has no slash in it, the list is done
-        case $_G_directory_path in */*) ;; *) break ;; esac
-
-        # ...otherwise throw away the child directory and loop
-        _G_directory_path=`$ECHO "$_G_directory_path" | $SED -e "$sed_dirname"`
-      done
-      _G_dir_list=`$ECHO "$_G_dir_list" | $SED 's|:*$||'`
-
-      func_mkdir_p_IFS=$IFS; IFS=:
-      for _G_dir in $_G_dir_list; do
-	IFS=$func_mkdir_p_IFS
-        # mkdir can fail with a 'File exist' error if two processes
-        # try to create one of the directories concurrently.  Don't
-        # stop in that case!
-        $MKDIR "$_G_dir" 2>/dev/null || :
-      done
-      IFS=$func_mkdir_p_IFS
-
-      # Bail out if we (or some other process) failed to create a directory.
-      test -d "$_G_directory_path" || \
-        func_fatal_error "Failed to create '$1'"
-    fi
-}
-
-
-# func_mktempdir [BASENAME]
-# -------------------------
-# Make a temporary directory that won't clash with other running
-# libtool processes, and avoids race conditions if possible.  If
-# given, BASENAME is the basename for that directory.
-func_mktempdir ()
-{
-    $debug_cmd
-
-    _G_template=${TMPDIR-/tmp}/${1-$progname}
-
-    if test : = "$opt_dry_run"; then
-      # Return a directory name, but don't create it in dry-run mode
-      _G_tmpdir=$_G_template-$$
-    else
-
-      # If mktemp works, use that first and foremost
-      _G_tmpdir=`mktemp -d "$_G_template-XXXXXXXX" 2>/dev/null`
-
-      if test ! -d "$_G_tmpdir"; then
-        # Failing that, at least try and use $RANDOM to avoid a race
-        _G_tmpdir=$_G_template-${RANDOM-0}$$
-
-        func_mktempdir_umask=`umask`
-        umask 0077
-        $MKDIR "$_G_tmpdir"
-        umask $func_mktempdir_umask
-      fi
-
-      # If we're not in dry-run mode, bomb out on failure
-      test -d "$_G_tmpdir" || \
-        func_fatal_error "cannot create temporary directory '$_G_tmpdir'"
-    fi
-
-    $ECHO "$_G_tmpdir"
-}
-
-
-# func_normal_abspath PATH
-# ------------------------
-# Remove doubled-up and trailing slashes, "." path components,
-# and cancel out any ".." path components in PATH after making
-# it an absolute path.
-func_normal_abspath ()
-{
-    $debug_cmd
-
-    # These SED scripts presuppose an absolute path with a trailing slash.
-    _G_pathcar='s|^/\([^/]*\).*$|\1|'
-    _G_pathcdr='s|^/[^/]*||'
-    _G_removedotparts=':dotsl
-		s|/\./|/|g
-		t dotsl
-		s|/\.$|/|'
-    _G_collapseslashes='s|/\{1,\}|/|g'
-    _G_finalslash='s|/*$|/|'
-
-    # Start from root dir and reassemble the path.
-    func_normal_abspath_result=
-    func_normal_abspath_tpath=$1
-    func_normal_abspath_altnamespace=
-    case $func_normal_abspath_tpath in
-      "")
-        # Empty path, that just means $cwd.
-        func_stripname '' '/' "`pwd`"
-        func_normal_abspath_result=$func_stripname_result
-        return
-        ;;
-      # The next three entries are used to spot a run of precisely
-      # two leading slashes without using negated character classes;
-      # we take advantage of case's first-match behaviour.
-      ///*)
-        # Unusual form of absolute path, do nothing.
-        ;;
-      //*)
-        # Not necessarily an ordinary path; POSIX reserves leading '//'
-        # and for example Cygwin uses it to access remote file shares
-        # over CIFS/SMB, so we conserve a leading double slash if found.
-        func_normal_abspath_altnamespace=/
-        ;;
-      /*)
-        # Absolute path, do nothing.
-        ;;
-      *)
-        # Relative path, prepend $cwd.
-        func_normal_abspath_tpath=`pwd`/$func_normal_abspath_tpath
-        ;;
-    esac
-
-    # Cancel out all the simple stuff to save iterations.  We also want
-    # the path to end with a slash for ease of parsing, so make sure
-    # there is one (and only one) here.
-    func_normal_abspath_tpath=`$ECHO "$func_normal_abspath_tpath" | $SED \
-          -e "$_G_removedotparts" -e "$_G_collapseslashes" -e "$_G_finalslash"`
-    while :; do
-      # Processed it all yet?
-      if test / = "$func_normal_abspath_tpath"; then
-        # If we ascended to the root using ".." the result may be empty now.
-        if test -z "$func_normal_abspath_result"; then
-          func_normal_abspath_result=/
-        fi
-        break
-      fi
-      func_normal_abspath_tcomponent=`$ECHO "$func_normal_abspath_tpath" | $SED \
-          -e "$_G_pathcar"`
-      func_normal_abspath_tpath=`$ECHO "$func_normal_abspath_tpath" | $SED \
-          -e "$_G_pathcdr"`
-      # Figure out what to do with it
-      case $func_normal_abspath_tcomponent in
-        "")
-          # Trailing empty path component, ignore it.
-          ;;
-        ..)
-          # Parent dir; strip last assembled component from result.
-          func_dirname "$func_normal_abspath_result"
-          func_normal_abspath_result=$func_dirname_result
-          ;;
-        *)
-          # Actual path component, append it.
-          func_append func_normal_abspath_result "/$func_normal_abspath_tcomponent"
-          ;;
-      esac
-    done
-    # Restore leading double-slash if one was found on entry.
-    func_normal_abspath_result=$func_normal_abspath_altnamespace$func_normal_abspath_result
-}
-
-
-# func_notquiet ARG...
-# --------------------
-# Echo program name prefixed message only when not in quiet mode.
-func_notquiet ()
-{
-    $debug_cmd
-
-    $opt_quiet || func_echo ${1+"$@"}
-
-    # A bug in bash halts the script if the last line of a function
-    # fails when set -e is in force, so we need another command to
-    # work around that:
-    :
-}
-
-
-# func_relative_path SRCDIR DSTDIR
-# --------------------------------
-# Set func_relative_path_result to the relative path from SRCDIR to DSTDIR.
-func_relative_path ()
-{
-    $debug_cmd
-
-    func_relative_path_result=
-    func_normal_abspath "$1"
-    func_relative_path_tlibdir=$func_normal_abspath_result
-    func_normal_abspath "$2"
-    func_relative_path_tbindir=$func_normal_abspath_result
-
-    # Ascend the tree starting from libdir
-    while :; do
-      # check if we have found a prefix of bindir
-      case $func_relative_path_tbindir in
-        $func_relative_path_tlibdir)
-          # found an exact match
-          func_relative_path_tcancelled=
-          break
-          ;;
-        $func_relative_path_tlibdir*)
-          # found a matching prefix
-          func_stripname "$func_relative_path_tlibdir" '' "$func_relative_path_tbindir"
-          func_relative_path_tcancelled=$func_stripname_result
-          if test -z "$func_relative_path_result"; then
-            func_relative_path_result=.
-          fi
-          break
-          ;;
-        *)
-          func_dirname $func_relative_path_tlibdir
-          func_relative_path_tlibdir=$func_dirname_result
-          if test -z "$func_relative_path_tlibdir"; then
-            # Have to descend all the way to the root!
-            func_relative_path_result=../$func_relative_path_result
-            func_relative_path_tcancelled=$func_relative_path_tbindir
-            break
-          fi
-          func_relative_path_result=../$func_relative_path_result
-          ;;
-      esac
-    done
-
-    # Now calculate path; take care to avoid doubling-up slashes.
-    func_stripname '' '/' "$func_relative_path_result"
-    func_relative_path_result=$func_stripname_result
-    func_stripname '/' '/' "$func_relative_path_tcancelled"
-    if test -n "$func_stripname_result"; then
-      func_append func_relative_path_result "/$func_stripname_result"
-    fi
-
-    # Normalisation. If bindir is libdir, return '.' else relative path.
-    if test -n "$func_relative_path_result"; then
-      func_stripname './' '' "$func_relative_path_result"
-      func_relative_path_result=$func_stripname_result
-    fi
-
-    test -n "$func_relative_path_result" || func_relative_path_result=.
-
-    :
-}
-
-
-# func_quote_portable EVAL ARG
-# ----------------------------
-# Internal function to portably implement func_quote_arg.  Note that we still
-# keep attention to performance here so we as much as possible try to avoid
-# calling sed binary (so far O(N) complexity as long as func_append is O(1)).
-func_quote_portable ()
-{
-    $debug_cmd
-
-    $require_check_ifs_backslash
-
-    func_quote_portable_result=$2
-
-    # one-time-loop (easy break)
-    while true
-    do
-      if $1; then
-        func_quote_portable_result=`$ECHO "$2" | $SED \
-          -e "$sed_double_quote_subst" -e "$sed_double_backslash"`
-        break
-      fi
-
-      # Quote for eval.
-      case $func_quote_portable_result in
-        *[\\\`\"\$]*)
-          # Fallback to sed for $func_check_bs_ifs_broken=:, or when the string
-          # contains the shell wildcard characters.
-          case $check_ifs_backshlash_broken$func_quote_portable_result in
-            :*|*[\[\*\?]*)
-              func_quote_portable_result=`$ECHO "$func_quote_portable_result" \
-                  | $SED "$sed_quote_subst"`
-              break
-              ;;
-          esac
-
-          func_quote_portable_old_IFS=$IFS
-          for _G_char in '\' '`' '"' '$'
-          do
-            # STATE($1) PREV($2) SEPARATOR($3)
-            set start "" ""
-            func_quote_portable_result=dummy"$_G_char$func_quote_portable_result$_G_char"dummy
-            IFS=$_G_char
-            for _G_part in $func_quote_portable_result
-            do
-              case $1 in
-              quote)
-                func_append func_quote_portable_result "$3$2"
-                set quote "$_G_part" "\\$_G_char"
-                ;;
-              start)
-                set first "" ""
-                func_quote_portable_result=
-                ;;
-              first)
-                set quote "$_G_part" ""
-                ;;
-              esac
-            done
-          done
-          IFS=$func_quote_portable_old_IFS
-          ;;
-        *) ;;
-      esac
-      break
-    done
-
-    func_quote_portable_unquoted_result=$func_quote_portable_result
-    case $func_quote_portable_result in
-      # double-quote args containing shell metacharacters to delay
-      # word splitting, command substitution and variable expansion
-      # for a subsequent eval.
-      # many bourne shells cannot handle close brackets correctly
-      # in scan sets, so we specify it separately.
-      *[\[\~\#\^\&\*\(\)\{\}\|\;\<\>\?\'\ \	]*|*]*|"")
-        func_quote_portable_result=\"$func_quote_portable_result\"
-        ;;
-    esac
-}
-
-
-# func_quotefast_eval ARG
-# -----------------------
-# Quote one ARG (internal).  This is equivalent to 'func_quote_arg eval ARG',
-# but optimized for speed.  Result is stored in $func_quotefast_eval.
-if test xyes = `(x=; printf -v x %q yes; echo x"$x") 2>/dev/null`; then
-  printf -v _GL_test_printf_tilde %q '~'
-  if test '\~' = "$_GL_test_printf_tilde"; then
-    func_quotefast_eval ()
-    {
-      printf -v func_quotefast_eval_result %q "$1"
-    }
-  else
-    # Broken older Bash implementations.  Make those faster too if possible.
-    func_quotefast_eval ()
-    {
-      case $1 in
-        '~'*)
-          func_quote_portable false "$1"
-          func_quotefast_eval_result=$func_quote_portable_result
-          ;;
-        *)
-          printf -v func_quotefast_eval_result %q "$1"
-          ;;
-      esac
-    }
-  fi
-else
-  func_quotefast_eval ()
-  {
-    func_quote_portable false "$1"
-    func_quotefast_eval_result=$func_quote_portable_result
-  }
-fi
-
-
-# func_quote_arg MODEs ARG
-# ------------------------
-# Quote one ARG to be evaled later.  MODEs argument may contain zero or more
-# specifiers listed below separated by ',' character.  This function returns two
-# values:
-#   i) func_quote_arg_result
-#      double-quoted (when needed), suitable for a subsequent eval
-#  ii) func_quote_arg_unquoted_result
-#      has all characters that are still active within double
-#      quotes backslashified.  Available only if 'unquoted' is specified.
-#
-# Available modes:
-# ----------------
-# 'eval' (default)
-#       - escape shell special characters
-# 'expand'
-#       - the same as 'eval';  but do not quote variable references
-# 'pretty'
-#       - request aesthetic output, i.e. '"a b"' instead of 'a\ b'.  This might
-#         be used later in func_quote to get output like: 'echo "a b"' instead
-#         of 'echo a\ b'.  This is slower than default on some shells.
-# 'unquoted'
-#       - produce also $func_quote_arg_unquoted_result which does not contain
-#         wrapping double-quotes.
-#
-# Examples for 'func_quote_arg pretty,unquoted string':
-#
-#   string      | *_result              | *_unquoted_result
-#   ------------+-----------------------+-------------------
-#   "           | \"                    | \"
-#   a b         | "a b"                 | a b
-#   "a b"       | "\"a b\""             | \"a b\"
-#   *           | "*"                   | *
-#   z="${x-$y}" | "z=\"\${x-\$y}\""     | z=\"\${x-\$y}\"
-#
-# Examples for 'func_quote_arg pretty,unquoted,expand string':
-#
-#   string        |   *_result          |  *_unquoted_result
-#   --------------+---------------------+--------------------
-#   z="${x-$y}"   | "z=\"${x-$y}\""     | z=\"${x-$y}\"
-func_quote_arg ()
-{
-    _G_quote_expand=false
-    case ,$1, in
-      *,expand,*)
-        _G_quote_expand=:
-        ;;
-    esac
-
-    case ,$1, in
-      *,pretty,*|*,expand,*|*,unquoted,*)
-        func_quote_portable $_G_quote_expand "$2"
-        func_quote_arg_result=$func_quote_portable_result
-        func_quote_arg_unquoted_result=$func_quote_portable_unquoted_result
-        ;;
-      *)
-        # Faster quote-for-eval for some shells.
-        func_quotefast_eval "$2"
-        func_quote_arg_result=$func_quotefast_eval_result
-        ;;
-    esac
-}
-
-
-# func_quote MODEs ARGs...
-# ------------------------
-# Quote all ARGs to be evaled later and join them into single command.  See
-# func_quote_arg's description for more info.
-func_quote ()
-{
-    $debug_cmd
-    _G_func_quote_mode=$1 ; shift
-    func_quote_result=
-    while test 0 -lt $#; do
-      func_quote_arg "$_G_func_quote_mode" "$1"
-      if test -n "$func_quote_result"; then
-        func_append func_quote_result " $func_quote_arg_result"
-      else
-        func_append func_quote_result "$func_quote_arg_result"
-      fi
-      shift
-    done
-}
-
-
-# func_stripname PREFIX SUFFIX NAME
-# ---------------------------------
-# strip PREFIX and SUFFIX from NAME, and store in func_stripname_result.
-# PREFIX and SUFFIX must not contain globbing or regex special
-# characters, hashes, percent signs, but SUFFIX may contain a leading
-# dot (in which case that matches only a dot).
-if test yes = "$_G_HAVE_XSI_OPS"; then
-  eval 'func_stripname ()
-  {
-    $debug_cmd
-
-    # pdksh 5.2.14 does not do ${X%$Y} correctly if both X and Y are
-    # positional parameters, so assign one to ordinary variable first.
-    func_stripname_result=$3
-    func_stripname_result=${func_stripname_result#"$1"}
-    func_stripname_result=${func_stripname_result%"$2"}
-  }'
-else
-  func_stripname ()
-  {
-    $debug_cmd
-
-    case $2 in
-      .*) func_stripname_result=`$ECHO "$3" | $SED -e "s%^$1%%" -e "s%\\\\$2\$%%"`;;
-      *)  func_stripname_result=`$ECHO "$3" | $SED -e "s%^$1%%" -e "s%$2\$%%"`;;
-    esac
-  }
-fi
-
-
-# func_show_eval CMD [FAIL_EXP]
-# -----------------------------
-# Unless opt_quiet is true, then output CMD.  Then, if opt_dryrun is
-# not true, evaluate CMD.  If the evaluation of CMD fails, and FAIL_EXP
-# is given, then evaluate it.
-func_show_eval ()
-{
-    $debug_cmd
-
-    _G_cmd=$1
-    _G_fail_exp=${2-':'}
-
-    func_quote_arg pretty,expand "$_G_cmd"
-    eval "func_notquiet $func_quote_arg_result"
-
-    $opt_dry_run || {
-      eval "$_G_cmd"
-      _G_status=$?
-      if test 0 -ne "$_G_status"; then
-	eval "(exit $_G_status); $_G_fail_exp"
-      fi
-    }
-}
-
-
-# func_show_eval_locale CMD [FAIL_EXP]
-# ------------------------------------
-# Unless opt_quiet is true, then output CMD.  Then, if opt_dryrun is
-# not true, evaluate CMD.  If the evaluation of CMD fails, and FAIL_EXP
-# is given, then evaluate it.  Use the saved locale for evaluation.
-func_show_eval_locale ()
-{
-    $debug_cmd
-
-    _G_cmd=$1
-    _G_fail_exp=${2-':'}
-
-    $opt_quiet || {
-      func_quote_arg expand,pretty "$_G_cmd"
-      eval "func_echo $func_quote_arg_result"
-    }
-
-    $opt_dry_run || {
-      eval "$_G_user_locale
-	    $_G_cmd"
-      _G_status=$?
-      eval "$_G_safe_locale"
-      if test 0 -ne "$_G_status"; then
-	eval "(exit $_G_status); $_G_fail_exp"
-      fi
-    }
-}
-
-
-# func_tr_sh
-# ----------
-# Turn $1 into a string suitable for a shell variable name.
-# Result is stored in $func_tr_sh_result.  All characters
-# not in the set a-zA-Z0-9_ are replaced with '_'. Further,
-# if $1 begins with a digit, a '_' is prepended as well.
-func_tr_sh ()
-{
-    $debug_cmd
-
-    case $1 in
-    [0-9]* | *[!a-zA-Z0-9_]*)
-      func_tr_sh_result=`$ECHO "$1" | $SED -e 's/^\([0-9]\)/_\1/' -e 's/[^a-zA-Z0-9_]/_/g'`
-      ;;
-    * )
-      func_tr_sh_result=$1
-      ;;
-    esac
-}
-
-
-# func_verbose ARG...
-# -------------------
-# Echo program name prefixed message in verbose mode only.
-func_verbose ()
-{
-    $debug_cmd
-
-    $opt_verbose && func_echo "$*"
-
-    :
-}
-
-
-# func_warn_and_continue ARG...
-# -----------------------------
-# Echo program name prefixed warning message to standard error.
-func_warn_and_continue ()
-{
-    $debug_cmd
-
-    $require_term_colors
-
-    func_echo_infix_1 "${tc_red}warning$tc_reset" "$*" >&2
-}
-
-
-# func_warning CATEGORY ARG...
-# ----------------------------
-# Echo program name prefixed warning message to standard error. Warning
-# messages can be filtered according to CATEGORY, where this function
-# elides messages where CATEGORY is not listed in the global variable
-# 'opt_warning_types'.
-func_warning ()
-{
-    $debug_cmd
-
-    # CATEGORY must be in the warning_categories list!
-    case " $warning_categories " in
-      *" $1 "*) ;;
-      *) func_internal_error "invalid warning category '$1'" ;;
-    esac
-
-    _G_category=$1
-    shift
-
-    case " $opt_warning_types " in
-      *" $_G_category "*) $warning_func ${1+"$@"} ;;
-    esac
-}
-
-
-# func_sort_ver VER1 VER2
-# -----------------------
-# 'sort -V' is not generally available.
-# Note this deviates from the version comparison in automake
-# in that it treats 1.5 < 1.5.0, and treats 1.4.4a < 1.4-p3a
-# but this should suffice as we won't be specifying old
-# version formats or redundant trailing .0 in bootstrap.conf.
-# If we did want full compatibility then we should probably
-# use m4_version_compare from autoconf.
-func_sort_ver ()
-{
-    $debug_cmd
-
-    printf '%s\n%s\n' "$1" "$2" \
-      | sort -t. -k 1,1n -k 2,2n -k 3,3n -k 4,4n -k 5,5n -k 6,6n -k 7,7n -k 8,8n -k 9,9n
-}
-
-# func_lt_ver PREV CURR
-# ---------------------
-# Return true if PREV and CURR are in the correct order according to
-# func_sort_ver, otherwise false.  Use it like this:
-#
-#  func_lt_ver "$prev_ver" "$proposed_ver" || func_fatal_error "..."
-func_lt_ver ()
-{
-    $debug_cmd
-
-    test "x$1" = x`func_sort_ver "$1" "$2" | $SED 1q`
-}
-
-
-# Local variables:
-# mode: shell-script
-# sh-indentation: 2
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-pattern: "10/scriptversion=%:y-%02m-%02d.%02H; # UTC"
-# time-stamp-time-zone: "UTC"
-# End:
-#! /bin/sh
-
-# A portable, pluggable option parser for Bourne shell.
-# Written by Gary V. Vaughan, 2010
-
-# This is free software.  There is NO warranty; not even for
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-#
-# Copyright (C) 2010-2019, 2021, 2023-2024 Bootstrap Authors
-#
-# This file is dual licensed under the terms of the MIT license
-# <https://opensource.org/licenses/MIT>, and GPL version 2 or later
-# <https://www.gnu.org/licenses/gpl-2.0.html>.  You must apply one of
-# these licenses when using or redistributing this software or any of
-# the files within it.  See the URLs above, or the file `LICENSE`
-# included in the Bootstrap distribution for the full license texts.
-
-# Please report bugs or propose patches to:
-# <https://github.com/gnulib-modules/bootstrap/issues>
-
-# Set a version string for this script.
-scriptversion=2019-02-19.15; # UTC
-
-
-## ------ ##
-## Usage. ##
-## ------ ##
-
-# This file is a library for parsing options in your shell scripts along
-# with assorted other useful supporting features that you can make use
-# of too.
-#
-# For the simplest scripts you might need only:
-#
-#   #!/bin/sh
-#   . relative/path/to/funclib.sh
-#   . relative/path/to/options-parser
-#   scriptversion=1.0
-#   func_options ${1+"$@"}
-#   eval set dummy "$func_options_result"; shift
-#   ...rest of your script...
-#
-# In order for the '--version' option to work, you will need to have a
-# suitably formatted comment like the one at the top of this file
-# starting with '# Written by ' and ending with '# Copyright'.
-#
-# For '-h' and '--help' to work, you will also need a one line
-# description of your script's purpose in a comment directly above the
-# '# Written by ' line, like the one at the top of this file.
-#
-# The default options also support '--debug', which will turn on shell
-# execution tracing (see the comment above debug_cmd below for another
-# use), and '--verbose' and the func_verbose function to allow your script
-# to display verbose messages only when your user has specified
-# '--verbose'.
-#
-# After sourcing this file, you can plug in processing for additional
-# options by amending the variables from the 'Configuration' section
-# below, and following the instructions in the 'Option parsing'
-# section further down.
-
-## -------------- ##
-## Configuration. ##
-## -------------- ##
-
-# You should override these variables in your script after sourcing this
-# file so that they reflect the customisations you have added to the
-# option parser.
-
-# The usage line for option parsing errors and the start of '-h' and
-# '--help' output messages. You can embed shell variables for delayed
-# expansion at the time the message is displayed, but you will need to
-# quote other shell meta-characters carefully to prevent them being
-# expanded when the contents are evaled.
-usage='$progpath [OPTION]...'
-
-# Short help message in response to '-h' and '--help'.  Add to this or
-# override it after sourcing this library to reflect the full set of
-# options your script accepts.
-usage_message="\
-       --debug        enable verbose shell tracing
-   -W, --warnings=CATEGORY
-                      report the warnings falling in CATEGORY [all]
-   -v, --verbose      verbosely report processing
-       --version      print version information and exit
-   -h, --help         print short or long help message and exit
-"
-
-# Additional text appended to 'usage_message' in response to '--help'.
-long_help_message="
-Warning categories include:
-       'all'          show all warnings
-       'none'         turn off all the warnings
-       'error'        warnings are treated as fatal errors"
-
-# Help message printed before fatal option parsing errors.
-fatal_help="Try '\$progname --help' for more information."
-
-
-
-## ------------------------- ##
-## Hook function management. ##
-## ------------------------- ##
-
-# This section contains functions for adding, removing, and running hooks
-# in the main code.  A hook is just a list of function names that can be
-# run in order later on.
-
-# func_hookable FUNC_NAME
-# -----------------------
-# Declare that FUNC_NAME will run hooks added with
-# 'func_add_hook FUNC_NAME ...'.
-func_hookable ()
-{
-    $debug_cmd
-
-    func_append hookable_fns " $1"
-}
-
-
-# func_add_hook FUNC_NAME HOOK_FUNC
-# ---------------------------------
-# Request that FUNC_NAME call HOOK_FUNC before it returns.  FUNC_NAME must
-# first have been declared "hookable" by a call to 'func_hookable'.
-func_add_hook ()
-{
-    $debug_cmd
-
-    case " $hookable_fns " in
-      *" $1 "*) ;;
-      *) func_fatal_error "'$1' does not accept hook functions." ;;
-    esac
-
-    eval func_append ${1}_hooks '" $2"'
-}
-
-
-# func_remove_hook FUNC_NAME HOOK_FUNC
-# ------------------------------------
-# Remove HOOK_FUNC from the list of hook functions to be called by
-# FUNC_NAME.
-func_remove_hook ()
-{
-    $debug_cmd
-
-    eval ${1}_hooks='`$ECHO "\$'$1'_hooks" |$SED "s| '$2'||"`'
-}
-
-
-# func_propagate_result FUNC_NAME_A FUNC_NAME_B
-# ---------------------------------------------
-# If the *_result variable of FUNC_NAME_A _is set_, assign its value to
-# *_result variable of FUNC_NAME_B.
-func_propagate_result ()
-{
-    $debug_cmd
-
-    func_propagate_result_result=:
-    if eval "test \"\${${1}_result+set}\" = set"
-    then
-      eval "${2}_result=\$${1}_result"
-    else
-      func_propagate_result_result=false
-    fi
-}
-
-
-# func_run_hooks FUNC_NAME [ARG]...
-# ---------------------------------
-# Run all hook functions registered to FUNC_NAME.
-# It's assumed that the list of hook functions contains nothing more
-# than a whitespace-delimited list of legal shell function names, and
-# no effort is wasted trying to catch shell meta-characters or preserve
-# whitespace.
-func_run_hooks ()
-{
-    $debug_cmd
-
-    case " $hookable_fns " in
-      *" $1 "*) ;;
-      *) func_fatal_error "'$1' does not support hook functions." ;;
-    esac
-
-    eval _G_hook_fns=\$$1_hooks; shift
-
-    for _G_hook in $_G_hook_fns; do
-      func_unset "${_G_hook}_result"
-      eval $_G_hook '${1+"$@"}'
-      func_propagate_result $_G_hook func_run_hooks
-      if $func_propagate_result_result; then
-        eval set dummy "$func_run_hooks_result"; shift
-      fi
-    done
-}
-
-
-
-## --------------- ##
-## Option parsing. ##
-## --------------- ##
-
-# In order to add your own option parsing hooks, you must accept the
-# full positional parameter list from your hook function.  You may remove
-# or edit any options that you action, and then pass back the remaining
-# unprocessed options in '<hooked_function_name>_result', escaped
-# suitably for 'eval'.
-#
-# The '<hooked_function_name>_result' variable is automatically unset
-# before your hook gets called; for best performance, only set the
-# *_result variable when necessary (i.e. don't call the 'func_quote'
-# function unnecessarily because it can be an expensive operation on some
-# machines).
-#
-# Like this:
-#
-#    my_options_prep ()
-#    {
-#        $debug_cmd
-#
-#        # Extend the existing usage message.
-#        usage_message=$usage_message'
-#      -s, --silent       don'\''t print informational messages
-#    '
-#        # No change in '$@' (ignored completely by this hook).  Leave
-#        # my_options_prep_result variable intact.
-#    }
-#    func_add_hook func_options_prep my_options_prep
-#
-#
-#    my_silent_option ()
-#    {
-#        $debug_cmd
-#
-#        args_changed=false
-#
-#        # Note that, for efficiency, we parse as many options as we can
-#        # recognise in a loop before passing the remainder back to the
-#        # caller on the first unrecognised argument we encounter.
-#        while test $# -gt 0; do
-#          opt=$1; shift
-#          case $opt in
-#            --silent|-s) opt_silent=:
-#                         args_changed=:
-#                         ;;
-#            # Separate non-argument short options:
-#            -s*)         func_split_short_opt "$_G_opt"
-#                         set dummy "$func_split_short_opt_name" \
-#                             "-$func_split_short_opt_arg" ${1+"$@"}
-#                         shift
-#                         args_changed=:
-#                         ;;
-#            *)           # Make sure the first unrecognised option "$_G_opt"
-#                         # is added back to "$@" in case we need it later,
-#                         # if $args_changed was set to 'true'.
-#                         set dummy "$_G_opt" ${1+"$@"}; shift; break ;;
-#          esac
-#        done
-#
-#        # Only call 'func_quote' here if we processed at least one argument.
-#        if $args_changed; then
-#          func_quote eval ${1+"$@"}
-#          my_silent_option_result=$func_quote_result
-#        fi
-#    }
-#    func_add_hook func_parse_options my_silent_option
-#
-#
-#    my_option_validation ()
-#    {
-#        $debug_cmd
-#
-#        $opt_silent && $opt_verbose && func_fatal_help "\
-#    '--silent' and '--verbose' options are mutually exclusive."
-#    }
-#    func_add_hook func_validate_options my_option_validation
-#
-# You'll also need to manually amend $usage_message to reflect the extra
-# options you parse.  It's preferable to append if you can, so that
-# multiple option parsing hooks can be added safely.
-
-
-# func_options_finish [ARG]...
-# ----------------------------
-# Finishing the option parse loop (call 'func_options' hooks ATM).
-func_options_finish ()
-{
-    $debug_cmd
-
-    func_run_hooks func_options ${1+"$@"}
-    func_propagate_result func_run_hooks func_options_finish
-}
-
-
-# func_options [ARG]...
-# ---------------------
-# All the functions called inside func_options are hookable. See the
-# individual implementations for details.
-func_hookable func_options
-func_options ()
-{
-    $debug_cmd
-
-    _G_options_quoted=false
-
-    for my_func in options_prep parse_options validate_options options_finish
-    do
-      func_unset func_${my_func}_result
-      func_unset func_run_hooks_result
-      eval func_$my_func '${1+"$@"}'
-      func_propagate_result func_$my_func func_options
-      if $func_propagate_result_result; then
-        eval set dummy "$func_options_result"; shift
-        _G_options_quoted=:
-      fi
-    done
-
-    $_G_options_quoted || {
-      # As we (func_options) are top-level options-parser function and
-      # nobody quoted "$@" for us yet, we need to do it explicitly for
-      # caller.
-      func_quote eval ${1+"$@"}
-      func_options_result=$func_quote_result
-    }
-}
-
-
-# func_options_prep [ARG]...
-# --------------------------
-# All initialisations required before starting the option parse loop.
-# Note that when calling hook functions, we pass through the list of
-# positional parameters.  If a hook function modifies that list, and
-# needs to propagate that back to rest of this script, then the complete
-# modified list must be put in 'func_run_hooks_result' before returning.
-func_hookable func_options_prep
-func_options_prep ()
-{
-    $debug_cmd
-
-    # Option defaults:
-    opt_verbose=false
-    opt_warning_types=
-
-    func_run_hooks func_options_prep ${1+"$@"}
-    func_propagate_result func_run_hooks func_options_prep
-}
-
-
-# func_parse_options [ARG]...
-# ---------------------------
-# The main option parsing loop.
-func_hookable func_parse_options
-func_parse_options ()
-{
-    $debug_cmd
-
-    _G_parse_options_requote=false
-    # this just eases exit handling
-    while test $# -gt 0; do
-      # Defer to hook functions for initial option parsing, so they
-      # get priority in the event of reusing an option name.
-      func_run_hooks func_parse_options ${1+"$@"}
-      func_propagate_result func_run_hooks func_parse_options
-      if $func_propagate_result_result; then
-        eval set dummy "$func_parse_options_result"; shift
-        # Even though we may have changed "$@", we passed the "$@" array
-        # down into the hook and it quoted it for us (because we are in
-        # this if-branch).  No need to quote it again.
-        _G_parse_options_requote=false
-      fi
-
-      # Break out of the loop if we already parsed every option.
-      test $# -gt 0 || break
-
-      # We expect that one of the options parsed in this function matches
-      # and thus we remove _G_opt from "$@" and need to re-quote.
-      _G_match_parse_options=:
-      _G_opt=$1
-      shift
-      case $_G_opt in
-        --debug|-x)   debug_cmd='set -x'
-                      func_echo "enabling shell trace mode" >&2
-                      $debug_cmd
-                      ;;
-
-        --no-warnings|--no-warning|--no-warn)
-                      set dummy --warnings none ${1+"$@"}
-                      shift
-		      ;;
-
-        --warnings|--warning|-W)
-                      if test $# = 0 && func_missing_arg $_G_opt; then
-                        _G_parse_options_requote=:
-                        break
-                      fi
-                      case " $warning_categories $1" in
-                        *" $1 "*)
-                          # trailing space prevents matching last $1 above
-                          func_append_uniq opt_warning_types " $1"
-                          ;;
-                        *all)
-                          opt_warning_types=$warning_categories
-                          ;;
-                        *none)
-                          opt_warning_types=none
-                          warning_func=:
-                          ;;
-                        *error)
-                          opt_warning_types=$warning_categories
-                          warning_func=func_fatal_error
-                          ;;
-                        *)
-                          func_fatal_error \
-                             "unsupported warning category: '$1'"
-                          ;;
-                      esac
-                      shift
-                      ;;
-
-        --verbose|-v) opt_verbose=: ;;
-        --version)    func_version ;;
-        -\?|-h)       func_usage ;;
-        --help)       func_help ;;
-
-	# Separate optargs to long options (plugins may need this):
-	--*=*)        func_split_equals "$_G_opt"
-	              set dummy "$func_split_equals_lhs" \
-                          "$func_split_equals_rhs" ${1+"$@"}
-                      shift
-                      ;;
-
-       # Separate optargs to short options:
-        -W*)
-                      func_split_short_opt "$_G_opt"
-                      set dummy "$func_split_short_opt_name" \
-                          "$func_split_short_opt_arg" ${1+"$@"}
-                      shift
-                      ;;
-
-        # Separate non-argument short options:
-        -\?*|-h*|-v*|-x*)
-                      func_split_short_opt "$_G_opt"
-                      set dummy "$func_split_short_opt_name" \
-                          "-$func_split_short_opt_arg" ${1+"$@"}
-                      shift
-                      ;;
-
-        --)           _G_parse_options_requote=: ; break ;;
-        -*)           func_fatal_help "unrecognised option: '$_G_opt'" ;;
-        *)            set dummy "$_G_opt" ${1+"$@"}; shift
-                      _G_match_parse_options=false
-                      break
-                      ;;
-      esac
-
-      if $_G_match_parse_options; then
-        _G_parse_options_requote=:
-      fi
-    done
-
-    if $_G_parse_options_requote; then
-      # save modified positional parameters for caller
-      func_quote eval ${1+"$@"}
-      func_parse_options_result=$func_quote_result
-    fi
-}
-
-
-# func_validate_options [ARG]...
-# ------------------------------
-# Perform any sanity checks on option settings and/or unconsumed
-# arguments.
-func_hookable func_validate_options
-func_validate_options ()
-{
-    $debug_cmd
-
-    # Display all warnings if -W was not given.
-    test -n "$opt_warning_types" || opt_warning_types=" $warning_categories"
-
-    func_run_hooks func_validate_options ${1+"$@"}
-    func_propagate_result func_run_hooks func_validate_options
-
-    # Bail if the options were screwed!
-    $exit_cmd $EXIT_FAILURE
-}
-
-
-
-## ----------------- ##
-## Helper functions. ##
-## ----------------- ##
-
-# This section contains the helper functions used by the rest of the
-# hookable option parser framework in ascii-betical order.
-
-
-# func_fatal_help ARG...
-# ----------------------
-# Echo program name prefixed message to standard error, followed by
-# a help hint, and exit.
-func_fatal_help ()
-{
-    $debug_cmd
-
-    eval \$ECHO \""Usage: $usage"\"
-    eval \$ECHO \""$fatal_help"\"
-    func_error ${1+"$@"}
-    exit $EXIT_FAILURE
-}
-
-
-# func_help
-# ---------
-# Echo long help message to standard output and exit.
-func_help ()
-{
-    $debug_cmd
-
-    func_usage_message
-    $ECHO "$long_help_message"
-    exit 0
-}
-
-
-# func_missing_arg ARGNAME
-# ------------------------
-# Echo program name prefixed message to standard error and set global
-# exit_cmd.
-func_missing_arg ()
-{
-    $debug_cmd
-
-    func_error "Missing argument for '$1'."
-    exit_cmd=exit
-}
-
-
-# func_split_equals STRING
-# ------------------------
-# Set func_split_equals_lhs and func_split_equals_rhs shell variables
-# after splitting STRING at the '=' sign.
-test -z "$_G_HAVE_XSI_OPS" \
-    && (eval 'x=a/b/c;
-      test 5aa/bb/cc = "${#x}${x%%/*}${x%/*}${x#*/}${x##*/}"') 2>/dev/null \
-    && _G_HAVE_XSI_OPS=yes
-
-if test yes = "$_G_HAVE_XSI_OPS"
-then
-  # This is an XSI compatible shell, allowing a faster implementation...
-  eval 'func_split_equals ()
-  {
-      $debug_cmd
-
-      func_split_equals_lhs=${1%%=*}
-      func_split_equals_rhs=${1#*=}
-      if test "x$func_split_equals_lhs" = "x$1"; then
-        func_split_equals_rhs=
-      fi
-  }'
-else
-  # ...otherwise fall back to using expr, which is often a shell builtin.
-  func_split_equals ()
-  {
-      $debug_cmd
-
-      func_split_equals_lhs=`expr "x$1" : 'x\([^=]*\)'`
-      func_split_equals_rhs=
-      test "x$func_split_equals_lhs=" = "x$1" \
-        || func_split_equals_rhs=`expr "x$1" : 'x[^=]*=\(.*\)$'`
-  }
-fi #func_split_equals
-
-
-# func_split_short_opt SHORTOPT
-# -----------------------------
-# Set func_split_short_opt_name and func_split_short_opt_arg shell
-# variables after splitting SHORTOPT after the 2nd character.
-if test yes = "$_G_HAVE_XSI_OPS"
-then
-  # This is an XSI compatible shell, allowing a faster implementation...
-  eval 'func_split_short_opt ()
-  {
-      $debug_cmd
-
-      func_split_short_opt_arg=${1#??}
-      func_split_short_opt_name=${1%"$func_split_short_opt_arg"}
-  }'
-else
-  # ...otherwise fall back to using expr, which is often a shell builtin.
-  func_split_short_opt ()
-  {
-      $debug_cmd
-
-      func_split_short_opt_name=`expr "x$1" : 'x\(-.\)'`
-      func_split_short_opt_arg=`expr "x$1" : 'x-.\(.*\)$'`
-  }
-fi #func_split_short_opt
-
-
-# func_usage
-# ----------
-# Echo short help message to standard output and exit.
-func_usage ()
-{
-    $debug_cmd
-
-    func_usage_message
-    $ECHO "Run '$progname --help |${PAGER-more}' for full usage"
-    exit 0
-}
-
-
-# func_usage_message
-# ------------------
-# Echo short help message to standard output.
-func_usage_message ()
-{
-    $debug_cmd
-
-    eval \$ECHO \""Usage: $usage"\"
-    echo
-    $SED -n 's|^# ||
-        /^Written by/{
-          x;p;x
-        }
-	h
-	/^Written by/q' < "$progpath"
-    echo
-    eval \$ECHO \""$usage_message"\"
-}
-
-
-# func_version
-# ------------
-# Echo version message to standard output and exit.
-# The version message is extracted from the calling file's header
-# comments, with leading '# ' stripped:
-#   1. First display the progname and version
-#   2. Followed by the header comment line matching  /^# Written by /
-#   3. Then a blank line followed by the first following line matching
-#      /^# Copyright /
-#   4. Immediately followed by any lines between the previous matches,
-#      except lines preceding the intervening completely blank line.
-# For example, see the header comments of this file.
-func_version ()
-{
-    $debug_cmd
-
-    printf '%s\n' "$progname $scriptversion"
-    $SED -n '
-        /^# Written by /!b
-        s|^# ||; p; n
-
-        :fwd2blnk
-        /./ {
-          n
-          b fwd2blnk
-        }
-        p; n
-
-        :holdwrnt
-        s|^# ||
-        s|^# *$||
-        /^Copyright /!{
-          /./H
-          n
-          b holdwrnt
-        }
-
-        s|\((C)\)[ 0-9,-]*[ ,-]\([1-9][0-9]* \)|\1 \2|
-        G
-        s|\(\n\)\n*|\1|g
-        p; q' < "$progpath"
-
-    exit $?
-}
-
-
-# Local variables:
-# mode: shell-script
-# sh-indentation: 2
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-pattern: "30/scriptversion=%:y-%02m-%02d.%02H; # UTC"
-# time-stamp-time-zone: "UTC"
-# End:
-
-# Set a version string.
-scriptversion='(GNU libtool) 2.5.4'
-
-# func_version
-# ------------
-# Echo version message to standard output and exit.
-func_version ()
-{
-    $debug_cmd
-
-	year=`date +%Y`
-
-	cat <<EOF
-$progname $scriptversion
-Copyright (C) $year Free Software Foundation, Inc.
-License GPLv2+: GNU GPL version 2 or later <https://gnu.org/licenses/gpl.html>
-This is free software: you are free to change and redistribute it.
-There is NO WARRANTY, to the extent permitted by law.
-
-Originally written by Gordon Matzigkeit, 1996
-(See AUTHORS for complete contributor listing)
-EOF
-
-    exit $?
-}
-
-
-# func_echo ARG...
-# ----------------
-# Libtool also displays the current mode in messages, so override
-# funclib.sh func_echo with this custom definition.
-func_echo ()
-{
-    $debug_cmd
-
-    _G_message=$*
-
-    func_echo_IFS=$IFS
-    IFS=$nl
-    for _G_line in $_G_message; do
-      IFS=$func_echo_IFS
-      $ECHO "$progname${opt_mode+: $opt_mode}: $_G_line"
-    done
-    IFS=$func_echo_IFS
-}
-
-
-## ---------------- ##
-## Options parsing. ##
-## ---------------- ##
-
-# Hook in the functions to make sure our own options are parsed during
-# the option parsing loop.
-
-usage='$progpath [OPTION]... [MODE-ARG]...'
-
-# Short help message in response to '-h'.
-usage_message="Options:
-       --config                 show all configuration variables
-       --debug                  enable verbose shell tracing
-   -n, --dry-run                display commands without modifying any files
-       --features               display basic configuration information
-       --finish                 use operation '--mode=finish'
-       --mode=MODE              use operation mode MODE
-       --no-finish              don't update shared library cache
-       --no-quiet, --no-silent  print default informational messages
-       --no-warnings            equivalent to '-Wnone'
-       --preserve-dup-deps      don't remove duplicate dependency libraries
-       --quiet, --silent        don't print informational messages
-       --reorder-cache=DIRS     reorder shared library cache for preferred DIRS
-       --tag=TAG                use configuration variables from tag TAG
-   -v, --verbose                print more informational messages than default
-       --version                print version information
-   -W, --warnings=CATEGORY      report the warnings falling in CATEGORY [all]
-   -h, --help, --help-all       print short, long, or detailed help message
-"
-
-# Additional text appended to 'usage_message' in response to '--help'.
-func_help ()
-{
-    $debug_cmd
-
-    func_usage_message
-    $ECHO "$long_help_message
-
-MODE must be one of the following:
-
-       clean           remove files from the build directory
-       compile         compile a source file into a libtool object
-       execute         automatically set library path, then run a program
-       finish          complete the installation of libtool libraries
-       install         install libraries or executables
-       link            create a library or an executable
-       uninstall       remove libraries from an installed directory
-
-MODE-ARGS vary depending on the MODE.  When passed as first option,
-'--mode=MODE' may be abbreviated as 'MODE' or a unique abbreviation of that.
-Try '$progname --help --mode=MODE' for a more detailed description of MODE.
-
-When reporting a bug, please describe a test case to reproduce it and
-include the following information:
-
-       host-triplet:   $host
-       shell:          $SHELL
-       compiler:       $LTCC
-       compiler flags: $LTCFLAGS
-       linker:         $LD (gnu? $with_gnu_ld)
-       version:        $progname $scriptversion
-       automake:       `($AUTOMAKE --version) 2>/dev/null |$SED 1q`
-       autoconf:       `($AUTOCONF --version) 2>/dev/null |$SED 1q`
-
-Report bugs to <bug-libtool@gnu.org>.
-GNU libtool home page: <https://www.gnu.org/software/libtool/>.
-General help using GNU software: <https://www.gnu.org/gethelp/>."
-    exit 0
-}
-
-
-# func_lo2o OBJECT-NAME
-# ---------------------
-# Transform OBJECT-NAME from a '.lo' suffix to the platform specific
-# object suffix.
-
-lo2o=s/\\.lo\$/.$objext/
-o2lo=s/\\.$objext\$/.lo/
-
-if test yes = "$_G_HAVE_XSI_OPS"; then
-  eval 'func_lo2o ()
-  {
-    case $1 in
-      *.lo) func_lo2o_result=${1%.lo}.$objext ;;
-      *   ) func_lo2o_result=$1               ;;
-    esac
-  }'
-
-  # func_xform LIBOBJ-OR-SOURCE
-  # ---------------------------
-  # Transform LIBOBJ-OR-SOURCE from a '.o' or '.c' (or otherwise)
-  # suffix to a '.lo' libtool-object suffix.
-  eval 'func_xform ()
-  {
-    func_xform_result=${1%.*}.lo
-  }'
-else
-  # ...otherwise fall back to using sed.
-  func_lo2o ()
-  {
-    func_lo2o_result=`$ECHO "$1" | $SED "$lo2o"`
-  }
-
-  func_xform ()
-  {
-    func_xform_result=`$ECHO "$1" | $SED 's|\.[^.]*$|.lo|'`
-  }
-fi
-
-
-# func_fatal_configuration ARG...
-# -------------------------------
-# Echo program name prefixed message to standard error, followed by
-# a configuration failure hint, and exit.
-func_fatal_configuration ()
-{
-    func_fatal_error ${1+"$@"} \
-      "See the $PACKAGE documentation for more information." \
-      "Fatal configuration error."
-}
-
-
-# func_config
-# -----------
-# Display the configuration for all the tags in this script.
-func_config ()
-{
-    re_begincf='^# ### BEGIN LIBTOOL'
-    re_endcf='^# ### END LIBTOOL'
-
-    # Default configuration.
-    $SED "1,/$re_begincf CONFIG/d;/$re_endcf CONFIG/,\$d" < "$progpath"
-
-    # Now print the configurations for the tags.
-    for tagname in $taglist; do
-      $SED -n "/$re_begincf TAG CONFIG: $tagname\$/,/$re_endcf TAG CONFIG: $tagname\$/p" < "$progpath"
-    done
-
-    exit $?
-}
-
-
-# func_features
-# -------------
-# Display the features supported by this script.
-func_features ()
-{
-    echo "host: $host"
-    if test yes = "$build_libtool_libs"; then
-      echo "enable shared libraries"
-    else
-      echo "disable shared libraries"
-    fi
-    if test yes = "$build_old_libs"; then
-      echo "enable static libraries"
-    else
-      echo "disable static libraries"
-    fi
-
-    exit $?
-}
-
-
-# func_enable_tag TAGNAME
-# -----------------------
-# Verify that TAGNAME is valid, and either flag an error and exit, or
-# enable the TAGNAME tag.  We also add TAGNAME to the global $taglist
-# variable here.
-func_enable_tag ()
-{
-    # Global variable:
-    tagname=$1
-
-    re_begincf="^# ### BEGIN LIBTOOL TAG CONFIG: $tagname\$"
-    re_endcf="^# ### END LIBTOOL TAG CONFIG: $tagname\$"
-    sed_extractcf=/$re_begincf/,/$re_endcf/p
-
-    # Validate tagname.
-    case $tagname in
-      *[!-_A-Za-z0-9,/]*)
-        func_fatal_error "invalid tag name: $tagname"
-        ;;
-    esac
-
-    # Don't test for the "default" C tag, as we know it's
-    # there but not specially marked.
-    case $tagname in
-        CC) ;;
-    *)
-        if $GREP "$re_begincf" "$progpath" >/dev/null 2>&1; then
-	  taglist="$taglist $tagname"
-
-	  # Evaluate the configuration.  Be careful to quote the path
-	  # and the sed script, to avoid splitting on whitespace, but
-	  # also don't use non-portable quotes within backquotes within
-	  # quotes we have to do it in 2 steps:
-	  extractedcf=`$SED -n -e "$sed_extractcf" < "$progpath"`
-	  eval "$extractedcf"
-        else
-	  func_error "ignoring unknown tag $tagname"
-        fi
-        ;;
-    esac
-}
-
-
-# func_check_version_match
-# ------------------------
-# Ensure that we are using m4 macros, and libtool script from the same
-# release of libtool.
-func_check_version_match ()
-{
-    if test "$package_revision" != "$macro_revision"; then
-      if test "$VERSION" != "$macro_version"; then
-        if test -z "$macro_version"; then
-          cat >&2 <<_LT_EOF
-$progname: Version mismatch error.  This is $PACKAGE $VERSION, but the
-$progname: definition of this LT_INIT comes from an older release.
-$progname: You should recreate aclocal.m4 with macros from $PACKAGE $VERSION
-$progname: and run autoconf again.
-_LT_EOF
-        else
-          cat >&2 <<_LT_EOF
-$progname: Version mismatch error.  This is $PACKAGE $VERSION, but the
-$progname: definition of this LT_INIT comes from $PACKAGE $macro_version.
-$progname: You should recreate aclocal.m4 with macros from $PACKAGE $VERSION
-$progname: and run autoconf again.
-_LT_EOF
-        fi
-      else
-        cat >&2 <<_LT_EOF
-$progname: Version mismatch error.  This is $PACKAGE $VERSION, revision $package_revision,
-$progname: but the definition of this LT_INIT comes from revision $macro_revision.
-$progname: You should recreate aclocal.m4 with macros from revision $package_revision
-$progname: of $PACKAGE $VERSION and run autoconf again.
-_LT_EOF
-      fi
-
-      exit $EXIT_MISMATCH
-    fi
-}
-
-
-# libtool_options_prep [ARG]...
-# -----------------------------
-# Preparation for options parsed by libtool.
-libtool_options_prep ()
-{
-    $debug_mode
-
-    # Option defaults:
-    opt_config=false
-    opt_dlopen=
-    opt_dry_run=false
-    opt_help=false
-    opt_mode=
-    opt_reorder_cache=false
-    opt_preserve_dup_deps=false
-    opt_quiet=false
-    opt_finishing=true
-    opt_warning=
-
-    nonopt=
-    preserve_args=
-
-    _G_rc_lt_options_prep=:
-
-    # Shorthand for --mode=foo, only valid as the first argument
-    case $1 in
-    clean|clea|cle|cl)
-      shift; set dummy --mode clean ${1+"$@"}; shift
-      ;;
-    compile|compil|compi|comp|com|co|c)
-      shift; set dummy --mode compile ${1+"$@"}; shift
-      ;;
-    execute|execut|execu|exec|exe|ex|e)
-      shift; set dummy --mode execute ${1+"$@"}; shift
-      ;;
-    finish|finis|fini|fin|fi|f)
-      shift; set dummy --mode finish ${1+"$@"}; shift
-      ;;
-    install|instal|insta|inst|ins|in|i)
-      shift; set dummy --mode install ${1+"$@"}; shift
-      ;;
-    link|lin|li|l)
-      shift; set dummy --mode link ${1+"$@"}; shift
-      ;;
-    uninstall|uninstal|uninsta|uninst|unins|unin|uni|un|u)
-      shift; set dummy --mode uninstall ${1+"$@"}; shift
-      ;;
-    *)
-      _G_rc_lt_options_prep=false
-      ;;
-    esac
-
-    if $_G_rc_lt_options_prep; then
-      # Pass back the list of options.
-      func_quote eval ${1+"$@"}
-      libtool_options_prep_result=$func_quote_result
-    fi
-}
-func_add_hook func_options_prep libtool_options_prep
-
-
-# libtool_parse_options [ARG]...
-# ---------------------------------
-# Provide handling for libtool specific options.
-libtool_parse_options ()
-{
-    $debug_cmd
-
-    _G_rc_lt_parse_options=false
-
-    # Perform our own loop to consume as many options as possible in
-    # each iteration.
-    while test $# -gt 0; do
-      _G_match_lt_parse_options=:
-      _G_opt=$1
-      shift
-      case $_G_opt in
-        --dry-run|--dryrun|-n)
-                        opt_dry_run=:
-                        ;;
-
-        --config)       func_config ;;
-
-        --dlopen|-dlopen)
-                        opt_dlopen="${opt_dlopen+$opt_dlopen
-}$1"
-                        shift
-                        ;;
-
-        --preserve-dup-deps)
-                        opt_preserve_dup_deps=: ;;
-
-        --features)     func_features ;;
-
-        --finish)       set dummy --mode finish ${1+"$@"}; shift ;;
-
-        --help)         opt_help=: ;;
-
-        --help-all)     opt_help=': help-all' ;;
-
-        --mode)         test $# = 0 && func_missing_arg $_G_opt && break
-                        opt_mode=$1
-                        case $1 in
-                          # Valid mode arguments:
-                          clean|compile|execute|finish|install|link|relink|uninstall) ;;
-
-                          # Catch anything else as an error
-                          *) func_error "invalid argument '$1' for $_G_opt"
-                             exit_cmd=exit
-                             ;;
-                        esac
-                        shift
-                        ;;
-
-        --no-finish)
-                        opt_finishing=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --no-silent|--no-quiet)
-                        opt_quiet=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --no-warnings|--no-warning|--no-warn)
-                        opt_warning=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --no-verbose)
-                        opt_verbose=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --reorder-cache)
-                        opt_reorder_cache=true
-                        shared_lib_dirs=$1
-                        if test -n "$shared_lib_dirs"; then
-                          case $1 in
-                            # Must begin with /:
-                            /*) ;;
-
-                            # Catch anything else as an error (relative paths)
-                            *) func_error "invalid argument '$1' for $_G_opt"
-                               func_error "absolute paths are required for $_G_opt"
-                               exit_cmd=exit
-                               ;;
-                          esac
-                        fi
-                        shift
-                        ;;
-
-        --silent|--quiet)
-                        opt_quiet=:
-                        opt_verbose=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --tag)          test $# = 0 && func_missing_arg $_G_opt && break
-                        opt_tag=$1
-                        func_append preserve_args " $_G_opt $1"
-                        func_enable_tag "$1"
-                        shift
-                        ;;
-
-        --verbose|-v)   opt_quiet=false
-                        opt_verbose=:
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        # An option not handled by this hook function:
-        *)              set dummy "$_G_opt" ${1+"$@"} ; shift
-                        _G_match_lt_parse_options=false
-                        break
-                        ;;
-      esac
-      $_G_match_lt_parse_options && _G_rc_lt_parse_options=:
-    done
-
-    if $_G_rc_lt_parse_options; then
-      # save modified positional parameters for caller
-      func_quote eval ${1+"$@"}
-      libtool_parse_options_result=$func_quote_result
-    fi
-}
-func_add_hook func_parse_options libtool_parse_options
-
-
-# func_warning ARG...
-# -------------------
-# Libtool warnings are not categorized, so override funclib.sh
-# func_warning with this simpler definition.
-func_warning ()
-{
-    if $opt_warning; then
-        $debug_cmd
-        $warning_func ${1+"$@"}
-    fi
-}
-
-
-# libtool_validate_options [ARG]...
-# ---------------------------------
-# Perform any sanity checks on option settings and/or unconsumed
-# arguments.
-libtool_validate_options ()
-{
-    # save first non-option argument
-    if test 0 -lt $#; then
-      nonopt=$1
-      shift
-    fi
-
-    # preserve --debug
-    test : = "$debug_cmd" || func_append preserve_args " --debug"
-
-    case $host_os in
-      # Solaris2 added to fix http://debbugs.gnu.org/cgi/bugreport.cgi?bug=16452
-      # see also: http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59788
-      cygwin* | mingw* | windows* | pw32* | cegcc* | solaris2* | os2*)
-        # don't eliminate duplications in $postdeps and $predeps
-        opt_duplicate_compiler_generated_deps=:
-        ;;
-      *)
-        opt_duplicate_compiler_generated_deps=$opt_preserve_dup_deps
-        ;;
-    esac
-
-    $opt_help || {
-      # Sanity checks first:
-      func_check_version_match
-
-      test yes != "$build_libtool_libs" \
-        && test yes != "$build_old_libs" \
-        && func_fatal_configuration "not configured to build any kind of library"
-
-      # Darwin sucks
-      eval std_shrext=\"$shrext_cmds\"
-
-      # Only execute mode is allowed to have -dlopen flags.
-      if test -n "$opt_dlopen" && test execute != "$opt_mode"; then
-        func_error "unrecognized option '-dlopen'"
-        $ECHO "$help" 1>&2
-        exit $EXIT_FAILURE
-      fi
-
-      # Change the help message to a mode-specific one.
-      generic_help=$help
-      help="Try '$progname --help --mode=$opt_mode' for more information."
-    }
-
-    # Pass back the unparsed argument list
-    func_quote eval ${1+"$@"}
-    libtool_validate_options_result=$func_quote_result
-}
-func_add_hook func_validate_options libtool_validate_options
-
-
-# Process options as early as possible so that --help and --version
-# can return quickly.
-func_options ${1+"$@"}
-eval set dummy "$func_options_result"; shift
-
-
-
-## ----------- ##
-##    Main.    ##
-## ----------- ##
-
-magic='%%%MAGIC variable%%%'
-magic_exe='%%%MAGIC EXE variable%%%'
-
-# Global variables.
-extracted_archives=
-extracted_serial=0
-
-# If this variable is set in any of the actions, the command in it
-# will be execed at the end.  This prevents here-documents from being
-# left over by shells.
-exec_cmd=
-
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-$1
-_LTECHO_EOF'
-}
-
-# func_generated_by_libtool
-# True iff stdin has been generated by Libtool. This function is only
-# a basic sanity check; it will hardly flush out determined imposters.
-func_generated_by_libtool_p ()
-{
-  $GREP "^# Generated by .*$PACKAGE" > /dev/null 2>&1
-}
-
-# func_lalib_p file
-# True iff FILE is a libtool '.la' library or '.lo' object file.
-# This function is only a basic sanity check; it will hardly flush out
-# determined imposters.
-func_lalib_p ()
-{
-    test -f "$1" &&
-      $SED -e 4q "$1" 2>/dev/null | func_generated_by_libtool_p
-}
-
-# func_lalib_unsafe_p file
-# True iff FILE is a libtool '.la' library or '.lo' object file.
-# This function implements the same check as func_lalib_p without
-# resorting to external programs.  To this end, it redirects stdin and
-# closes it afterwards, without saving the original file descriptor.
-# As a safety measure, use it only where a negative result would be
-# fatal anyway.  Works if 'file' does not exist.
-func_lalib_unsafe_p ()
-{
-    lalib_p=no
-    if test -f "$1" && test -r "$1" && exec 5<&0 <"$1"; then
-	for lalib_p_l in 1 2 3 4
-	do
-	    read lalib_p_line
-	    case $lalib_p_line in
-		\#\ Generated\ by\ *$PACKAGE* ) lalib_p=yes; break;;
-	    esac
-	done
-	exec 0<&5 5<&-
-    fi
-    test yes = "$lalib_p"
-}
-
-# func_ltwrapper_script_p file
-# True iff FILE is a libtool wrapper script
-# This function is only a basic sanity check; it will hardly flush out
-# determined imposters.
-func_ltwrapper_script_p ()
-{
-    test -f "$1" &&
-      $lt_truncate_bin < "$1" 2>/dev/null | func_generated_by_libtool_p
-}
-
-# func_ltwrapper_executable_p file
-# True iff FILE is a libtool wrapper executable
-# This function is only a basic sanity check; it will hardly flush out
-# determined imposters.
-func_ltwrapper_executable_p ()
-{
-    func_ltwrapper_exec_suffix=
-    case $1 in
-    *.exe) ;;
-    *) func_ltwrapper_exec_suffix=.exe ;;
-    esac
-    $GREP "$magic_exe" "$1$func_ltwrapper_exec_suffix" >/dev/null 2>&1
-}
-
-# func_ltwrapper_scriptname file
-# Assumes file is an ltwrapper_executable
-# uses $file to determine the appropriate filename for a
-# temporary ltwrapper_script.
-func_ltwrapper_scriptname ()
-{
-    func_dirname_and_basename "$1" "" "."
-    func_stripname '' '.exe' "$func_basename_result"
-    func_ltwrapper_scriptname_result=$func_dirname_result/$objdir/${func_stripname_result}_ltshwrapper
-}
-
-# func_ltwrapper_p file
-# True iff FILE is a libtool wrapper script or wrapper executable
-# This function is only a basic sanity check; it will hardly flush out
-# determined imposters.
-func_ltwrapper_p ()
-{
-    func_ltwrapper_script_p "$1" || func_ltwrapper_executable_p "$1"
-}
-
-
-# func_execute_cmds commands fail_cmd
-# Execute tilde-delimited COMMANDS.
-# If FAIL_CMD is given, eval that upon failure.
-# FAIL_CMD may read-access the current command in variable CMD!
-func_execute_cmds ()
-{
-    $debug_cmd
-
-    save_ifs=$IFS; IFS='~'
-    for cmd in $1; do
-      IFS=$sp$nl
-      eval cmd=\"$cmd\"
-      IFS=$save_ifs
-      func_show_eval "$cmd" "${2-:}"
-    done
-    IFS=$save_ifs
-}
-
-
-# func_source file
-# Source FILE, adding directory component if necessary.
-# Note that it is not necessary on cygwin/mingw to append a dot to
-# FILE even if both FILE and FILE.exe exist: automatic-append-.exe
-# behavior happens only for exec(3), not for open(2)!  Also, sourcing
-# 'FILE.' does not work on cygwin managed mounts.
-func_source ()
-{
-    $debug_cmd
-
-    case $1 in
-    */* | *\\*)	. "$1" ;;
-    *)		. "./$1" ;;
-    esac
-}
-
-
-# func_resolve_sysroot PATH
-# Replace a leading = in PATH with a sysroot.  Store the result into
-# func_resolve_sysroot_result
-func_resolve_sysroot ()
-{
-  func_resolve_sysroot_result=$1
-  case $func_resolve_sysroot_result in
-  =*)
-    func_stripname '=' '' "$func_resolve_sysroot_result"
-    func_resolve_sysroot_result=$lt_sysroot$func_stripname_result
-    ;;
-  esac
-}
-
-# func_replace_sysroot PATH
-# If PATH begins with the sysroot, replace it with = and
-# store the result into func_replace_sysroot_result.
-func_replace_sysroot ()
-{
-  case $lt_sysroot:$1 in
-  ?*:"$lt_sysroot"*)
-    func_stripname "$lt_sysroot" '' "$1"
-    func_replace_sysroot_result='='$func_stripname_result
-    ;;
-  *)
-    # Including no sysroot.
-    func_replace_sysroot_result=$1
-    ;;
-  esac
-}
-
-# func_infer_tag arg
-# Infer tagged configuration to use if any are available and
-# if one wasn't chosen via the "--tag" command line option.
-# Only attempt this if the compiler in the base compile
-# command doesn't match the default compiler.
-# arg is usually of the form 'gcc ...'
-func_infer_tag ()
-{
-    $debug_cmd
-
-    if test -n "$available_tags" && test -z "$tagname"; then
-      CC_quoted=
-      for arg in $CC; do
-	func_append_quoted CC_quoted "$arg"
-      done
-      CC_expanded=`func_echo_all $CC`
-      CC_quoted_expanded=`func_echo_all $CC_quoted`
-      case $@ in
-      # Blanks in the command may have been stripped by the calling shell,
-      # but not from the CC environment variable when configure was run.
-      " $CC "* | "$CC "* | " $CC_expanded "* | "$CC_expanded "* | \
-      " $CC_quoted"* | "$CC_quoted "* | " $CC_quoted_expanded "* | "$CC_quoted_expanded "*) ;;
-      # Blanks at the start of $base_compile will cause this to fail
-      # if we don't check for them as well.
-      *)
-	for z in $available_tags; do
-	  if $GREP "^# ### BEGIN LIBTOOL TAG CONFIG: $z$" < "$progpath" > /dev/null; then
-	    # Evaluate the configuration.
-	    eval "`$SED -n -e '/^# ### BEGIN LIBTOOL TAG CONFIG: '$z'$/,/^# ### END LIBTOOL TAG CONFIG: '$z'$/p' < $progpath`"
-	    CC_quoted=
-	    for arg in $CC; do
-	      # Double-quote args containing other shell metacharacters.
-	      func_append_quoted CC_quoted "$arg"
-	    done
-	    CC_expanded=`func_echo_all $CC`
-	    CC_quoted_expanded=`func_echo_all $CC_quoted`
-	    case "$@ " in
-	    " $CC "* | "$CC "* | " $CC_expanded "* | "$CC_expanded "* | \
-	    " $CC_quoted"* | "$CC_quoted "* | " $CC_quoted_expanded "* | "$CC_quoted_expanded "*)
-	      # The compiler in the base compile command matches
-	      # the one in the tagged configuration.
-	      # Assume this is the tagged configuration we want.
-	      tagname=$z
-	      break
-	      ;;
-	    esac
-	  fi
-	done
-	# If $tagname still isn't set, then no tagged configuration
-	# was found and let the user know that the "--tag" command
-	# line option must be used.
-	if test -z "$tagname"; then
-	  func_echo "unable to infer tagged configuration"
-	  func_fatal_error "specify a tag with '--tag'"
-#	else
-#	  func_verbose "using $tagname tagged configuration"
-	fi
-	;;
-      esac
-    fi
-}
-
-
-
-# func_write_libtool_object output_name pic_name nonpic_name
-# Create a libtool object file (analogous to a ".la" file),
-# but don't create it if we're doing a dry run.
-func_write_libtool_object ()
-{
-    write_libobj=$1
-    if test yes = "$build_libtool_libs"; then
-      write_lobj=\'$2\'
-    else
-      write_lobj=none
-    fi
-
-    if test yes = "$build_old_libs"; then
-      write_oldobj=\'$3\'
-    else
-      write_oldobj=none
-    fi
-
-    $opt_dry_run || {
-      cat >${write_libobj}T <<EOF
-# $write_libobj - a libtool object file
-# Generated by $PROGRAM (GNU $PACKAGE) $VERSION
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=$write_lobj
-
-# Name of the non-PIC object
-non_pic_object=$write_oldobj
-
-EOF
-      $MV "${write_libobj}T" "$write_libobj"
-    }
-}
-
-
-##################################################
-# FILE NAME AND PATH CONVERSION HELPER FUNCTIONS #
-##################################################
-
-# func_convert_core_file_wine_to_w32 ARG
-# Helper function used by file name conversion functions when $build is *nix,
-# and $host is mingw, windows, cygwin, or some other w32 environment. Relies on a
-# correctly configured wine environment available, with the winepath program
-# in $build's $PATH.
-#
-# ARG is the $build file name to be converted to w32 format.
-# Result is available in $func_convert_core_file_wine_to_w32_result, and will
-# be empty on error (or when ARG is empty)
-func_convert_core_file_wine_to_w32 ()
-{
-  $debug_cmd
-
-  func_convert_core_file_wine_to_w32_result=$1
-  if test -n "$1"; then
-    # Unfortunately, winepath does not exit with a non-zero error code, so we
-    # are forced to check the contents of stdout. On the other hand, if the
-    # command is not found, the shell will set an exit code of 127 and print
-    # *an error message* to stdout. So we must check for both error code of
-    # zero AND non-empty stdout, which explains the odd construction:
-    func_convert_core_file_wine_to_w32_tmp=`winepath -w "$1" 2>/dev/null`
-    if test "$?" -eq 0 && test -n "$func_convert_core_file_wine_to_w32_tmp"; then
-      func_convert_core_file_wine_to_w32_result=`$ECHO "$func_convert_core_file_wine_to_w32_tmp" |
-        $SED -e "$sed_naive_backslashify"`
-    else
-      func_convert_core_file_wine_to_w32_result=
-    fi
-  fi
-}
-# end: func_convert_core_file_wine_to_w32
-
-
-# func_convert_core_path_wine_to_w32 ARG
-# Helper function used by path conversion functions when $build is *nix, and
-# $host is mingw, windows, cygwin, or some other w32 environment. Relies on a
-# correctly configured wine environment available, with the winepath program
-# in $build's $PATH. Assumes ARG has no leading or trailing path separator
-# characters.
-#
-# ARG is path to be converted from $build format to win32.
-# Result is available in $func_convert_core_path_wine_to_w32_result.
-# Unconvertible file (directory) names in ARG are skipped; if no directory names
-# are convertible, then the result may be empty.
-func_convert_core_path_wine_to_w32 ()
-{
-  $debug_cmd
-
-  # unfortunately, winepath doesn't convert paths, only file names
-  func_convert_core_path_wine_to_w32_result=
-  if test -n "$1"; then
-    oldIFS=$IFS
-    IFS=:
-    for func_convert_core_path_wine_to_w32_f in $1; do
-      IFS=$oldIFS
-      func_convert_core_file_wine_to_w32 "$func_convert_core_path_wine_to_w32_f"
-      if test -n "$func_convert_core_file_wine_to_w32_result"; then
-        if test -z "$func_convert_core_path_wine_to_w32_result"; then
-          func_convert_core_path_wine_to_w32_result=$func_convert_core_file_wine_to_w32_result
-        else
-          func_append func_convert_core_path_wine_to_w32_result ";$func_convert_core_file_wine_to_w32_result"
-        fi
-      fi
-    done
-    IFS=$oldIFS
-  fi
-}
-# end: func_convert_core_path_wine_to_w32
-
-
-# func_cygpath ARGS...
-# Wrapper around calling the cygpath program via LT_CYGPATH. This is used when
-# when (1) $build is *nix and Cygwin is hosted via a wine environment; or (2)
-# $build is MSYS and $host is Cygwin, or (3) $build is Cygwin. In case (1) or
-# (2), returns the Cygwin file name or path in func_cygpath_result (input
-# file name or path is assumed to be in w32 format, as previously converted
-# from $build's *nix or MSYS format). In case (3), returns the w32 file name
-# or path in func_cygpath_result (input file name or path is assumed to be in
-# Cygwin format). Returns an empty string on error.
-#
-# ARGS are passed to cygpath, with the last one being the file name or path to
-# be converted.
-#
-# Specify the absolute *nix (or w32) name to cygpath in the LT_CYGPATH
-# environment variable; do not put it in $PATH.
-func_cygpath ()
-{
-  $debug_cmd
-
-  if test -n "$LT_CYGPATH" && test -f "$LT_CYGPATH"; then
-    func_cygpath_result=`$LT_CYGPATH "$@" 2>/dev/null`
-    if test "$?" -ne 0; then
-      # on failure, ensure result is empty
-      func_cygpath_result=
-    fi
-  else
-    func_cygpath_result=
-    func_error "LT_CYGPATH is empty or specifies non-existent file: '$LT_CYGPATH'"
-  fi
-}
-#end: func_cygpath
-
-
-# func_convert_core_msys_to_w32 ARG
-# Convert file name or path ARG from MSYS format to w32 format.  Return
-# result in func_convert_core_msys_to_w32_result.
-func_convert_core_msys_to_w32 ()
-{
-  $debug_cmd
-
-  # awkward: cmd appends spaces to result
-  func_convert_core_msys_to_w32_result=`( cmd //c echo "$1" ) 2>/dev/null |
-    $SED -e 's/[ ]*$//' -e "$sed_naive_backslashify"`
-}
-#end: func_convert_core_msys_to_w32
-
-
-# func_convert_file_check ARG1 ARG2
-# Verify that ARG1 (a file name in $build format) was converted to $host
-# format in ARG2. Otherwise, emit an error message, but continue (resetting
-# func_to_host_file_result to ARG1).
-func_convert_file_check ()
-{
-  $debug_cmd
-
-  if test -z "$2" && test -n "$1"; then
-    func_error "Could not determine host file name corresponding to"
-    func_error "  '$1'"
-    func_error "Continuing, but uninstalled executables may not work."
-    # Fallback:
-    func_to_host_file_result=$1
-  fi
-}
-# end func_convert_file_check
-
-
-# func_convert_path_check FROM_PATHSEP TO_PATHSEP FROM_PATH TO_PATH
-# Verify that FROM_PATH (a path in $build format) was converted to $host
-# format in TO_PATH. Otherwise, emit an error message, but continue, resetting
-# func_to_host_file_result to a simplistic fallback value (see below).
-func_convert_path_check ()
-{
-  $debug_cmd
-
-  if test -z "$4" && test -n "$3"; then
-    func_error "Could not determine the host path corresponding to"
-    func_error "  '$3'"
-    func_error "Continuing, but uninstalled executables may not work."
-    # Fallback.  This is a deliberately simplistic "conversion" and
-    # should not be "improved".  See libtool.info.
-    if test "x$1" != "x$2"; then
-      lt_replace_pathsep_chars="s|$1|$2|g"
-      func_to_host_path_result=`echo "$3" |
-        $SED -e "$lt_replace_pathsep_chars"`
-    else
-      func_to_host_path_result=$3
-    fi
-  fi
-}
-# end func_convert_path_check
-
-
-# func_convert_path_front_back_pathsep FRONTPAT BACKPAT REPL ORIG
-# Modifies func_to_host_path_result by prepending REPL if ORIG matches FRONTPAT
-# and appending REPL if ORIG matches BACKPAT.
-func_convert_path_front_back_pathsep ()
-{
-  $debug_cmd
-
-  case $4 in
-  $1 ) func_to_host_path_result=$3$func_to_host_path_result
-    ;;
-  esac
-  case $4 in
-  $2 ) func_append func_to_host_path_result "$3"
-    ;;
-  esac
-}
-# end func_convert_path_front_back_pathsep
-
-
-# func_convert_delimited_path PATH ORIG_DELIMITER NEW_DELIMITER
-# Replaces a delimiter for a given path.
-func_convert_delimited_path ()
-{
-	converted_path=`$ECHO "$1" | $SED "s#$2#$3#g"`
-}
-# end func_convert_delimited_path
-
-
-##################################################
-# $build to $host FILE NAME CONVERSION FUNCTIONS #
-##################################################
-# invoked via '$to_host_file_cmd ARG'
-#
-# In each case, ARG is the path to be converted from $build to $host format.
-# Result will be available in $func_to_host_file_result.
-
-
-# func_to_host_file ARG
-# Converts the file name ARG from $build format to $host format. Return result
-# in func_to_host_file_result.
-func_to_host_file ()
-{
-  $debug_cmd
-
-  $to_host_file_cmd "$1"
-}
-# end func_to_host_file
-
-
-# func_to_tool_file ARG LAZY
-# converts the file name ARG from $build format to toolchain format. Return
-# result in func_to_tool_file_result.  If the conversion in use is listed
-# in (the comma separated) LAZY, no conversion takes place.
-func_to_tool_file ()
-{
-  $debug_cmd
-
-  case ,$2, in
-    *,"$to_tool_file_cmd",*)
-      func_to_tool_file_result=$1
-      ;;
-    *)
-      $to_tool_file_cmd "$1"
-      func_to_tool_file_result=$func_to_host_file_result
-      ;;
-  esac
-}
-# end func_to_tool_file
-
-
-# func_convert_file_noop ARG
-# Copy ARG to func_to_host_file_result.
-func_convert_file_noop ()
-{
-  func_to_host_file_result=$1
-}
-# end func_convert_file_noop
-
-
-# func_convert_file_msys_to_w32 ARG
-# Convert file name ARG from (mingw) MSYS to (mingw) w32 format; automatic
-# conversion to w32 is not available inside the cwrapper.  Returns result in
-# func_to_host_file_result.
-func_convert_file_msys_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    func_convert_core_msys_to_w32 "$1"
-    func_to_host_file_result=$func_convert_core_msys_to_w32_result
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_msys_to_w32
-
-
-# func_convert_file_cygwin_to_w32 ARG
-# Convert file name ARG from Cygwin to w32 format.  Returns result in
-# func_to_host_file_result.
-func_convert_file_cygwin_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    # because $build is cygwin, we call "the" cygpath in $PATH; no need to use
-    # LT_CYGPATH in this case.
-    func_to_host_file_result=`cygpath -m "$1"`
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_cygwin_to_w32
-
-
-# func_convert_file_nix_to_w32 ARG
-# Convert file name ARG from *nix to w32 format.  Requires a wine environment
-# and a working winepath. Returns result in func_to_host_file_result.
-func_convert_file_nix_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    func_convert_core_file_wine_to_w32 "$1"
-    func_to_host_file_result=$func_convert_core_file_wine_to_w32_result
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_nix_to_w32
-
-
-# func_convert_file_msys_to_cygwin ARG
-# Convert file name ARG from MSYS to Cygwin format.  Requires LT_CYGPATH set.
-# Returns result in func_to_host_file_result.
-func_convert_file_msys_to_cygwin ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    func_convert_core_msys_to_w32 "$1"
-    func_cygpath -u "$func_convert_core_msys_to_w32_result"
-    func_to_host_file_result=$func_cygpath_result
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_msys_to_cygwin
-
-
-# func_convert_file_nix_to_cygwin ARG
-# Convert file name ARG from *nix to Cygwin format.  Requires Cygwin installed
-# in a wine environment, working winepath, and LT_CYGPATH set.  Returns result
-# in func_to_host_file_result.
-func_convert_file_nix_to_cygwin ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    # convert from *nix to w32, then use cygpath to convert from w32 to cygwin.
-    func_convert_core_file_wine_to_w32 "$1"
-    func_cygpath -u "$func_convert_core_file_wine_to_w32_result"
-    func_to_host_file_result=$func_cygpath_result
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_nix_to_cygwin
-
-
-#############################################
-# $build to $host PATH CONVERSION FUNCTIONS #
-#############################################
-# invoked via '$to_host_path_cmd ARG'
-#
-# In each case, ARG is the path to be converted from $build to $host format.
-# The result will be available in $func_to_host_path_result.
-#
-# Path separators are also converted from $build format to $host format.  If
-# ARG begins or ends with a path separator character, it is preserved (but
-# converted to $host format) on output.
-#
-# All path conversion functions are named using the following convention:
-#   file name conversion function    : func_convert_file_X_to_Y ()
-#   path conversion function         : func_convert_path_X_to_Y ()
-# where, for any given $build/$host combination the 'X_to_Y' value is the
-# same.  If conversion functions are added for new $build/$host combinations,
-# the two new functions must follow this pattern, or func_init_to_host_path_cmd
-# will break.
-
-
-# func_init_to_host_path_cmd
-# Ensures that function "pointer" variable $to_host_path_cmd is set to the
-# appropriate value, based on the value of $to_host_file_cmd.
-to_host_path_cmd=
-func_init_to_host_path_cmd ()
-{
-  $debug_cmd
-
-  if test -z "$to_host_path_cmd"; then
-    func_stripname 'func_convert_file_' '' "$to_host_file_cmd"
-    to_host_path_cmd=func_convert_path_$func_stripname_result
-  fi
-}
-
-
-# func_to_host_path ARG
-# Converts the path ARG from $build format to $host format. Return result
-# in func_to_host_path_result.
-func_to_host_path ()
-{
-  $debug_cmd
-
-  func_init_to_host_path_cmd
-  $to_host_path_cmd "$1"
-}
-# end func_to_host_path
-
-
-# func_convert_path_noop ARG
-# Copy ARG to func_to_host_path_result.
-func_convert_path_noop ()
-{
-  func_to_host_path_result=$1
-}
-# end func_convert_path_noop
-
-
-# func_convert_path_msys_to_w32 ARG
-# Convert path ARG from (mingw) MSYS to (mingw) w32 format; automatic
-# conversion to w32 is not available inside the cwrapper.  Returns result in
-# func_to_host_path_result.
-func_convert_path_msys_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # Remove leading and trailing path separator characters from ARG.  MSYS
-    # behavior is inconsistent here; cygpath turns them into '.;' and ';.';
-    # and winepath ignores them completely.
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_convert_core_msys_to_w32 "$func_to_host_path_tmp1"
-    func_to_host_path_result=$func_convert_core_msys_to_w32_result
-    func_convert_path_check : ";" \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" ";" "$1"
-  fi
-}
-# end func_convert_path_msys_to_w32
-
-
-# func_convert_path_cygwin_to_w32 ARG
-# Convert path ARG from Cygwin to w32 format.  Returns result in
-# func_to_host_file_result.
-func_convert_path_cygwin_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # See func_convert_path_msys_to_w32:
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_to_host_path_result=`cygpath -m -p "$func_to_host_path_tmp1"`
-    func_convert_path_check : ";" \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" ";" "$1"
-  fi
-}
-# end func_convert_path_cygwin_to_w32
-
-
-# func_convert_path_nix_to_w32 ARG
-# Convert path ARG from *nix to w32 format.  Requires a wine environment and
-# a working winepath.  Returns result in func_to_host_file_result.
-func_convert_path_nix_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # See func_convert_path_msys_to_w32:
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_convert_core_path_wine_to_w32 "$func_to_host_path_tmp1"
-    func_to_host_path_result=$func_convert_core_path_wine_to_w32_result
-    func_convert_path_check : ";" \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" ";" "$1"
-  fi
-}
-# end func_convert_path_nix_to_w32
-
-
-# func_convert_path_msys_to_cygwin ARG
-# Convert path ARG from MSYS to Cygwin format.  Requires LT_CYGPATH set.
-# Returns result in func_to_host_file_result.
-func_convert_path_msys_to_cygwin ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # See func_convert_path_msys_to_w32:
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_convert_core_msys_to_w32 "$func_to_host_path_tmp1"
-    func_cygpath -u -p "$func_convert_core_msys_to_w32_result"
-    func_to_host_path_result=$func_cygpath_result
-    func_convert_path_check : : \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" : "$1"
-  fi
-}
-# end func_convert_path_msys_to_cygwin
-
-
-# func_convert_path_nix_to_cygwin ARG
-# Convert path ARG from *nix to Cygwin format.  Requires Cygwin installed in a
-# a wine environment, working winepath, and LT_CYGPATH set.  Returns result in
-# func_to_host_file_result.
-func_convert_path_nix_to_cygwin ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # Remove leading and trailing path separator characters from
-    # ARG. msys behavior is inconsistent here, cygpath turns them
-    # into '.;' and ';.', and winepath ignores them completely.
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_convert_core_path_wine_to_w32 "$func_to_host_path_tmp1"
-    func_cygpath -u -p "$func_convert_core_path_wine_to_w32_result"
-    func_to_host_path_result=$func_cygpath_result
-    func_convert_path_check : : \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" : "$1"
-  fi
-}
-# end func_convert_path_nix_to_cygwin
-
-
-# func_dll_def_p FILE
-# True iff FILE is a Windows DLL '.def' file.
-# Keep in sync with _LT_DLL_DEF_P in libtool.m4
-func_dll_def_p ()
-{
-  $debug_cmd
-
-  func_dll_def_p_tmp=`$SED -n \
-    -e 's/^[	 ]*//' \
-    -e '/^\(;.*\)*$/d' \
-    -e 's/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p' \
-    -e q \
-    "$1"`
-  test DEF = "$func_dll_def_p_tmp"
-}
-
-
-# func_reorder_shared_lib_cache DIRS
-# Reorder the shared library cache by unconfiguring previous shared library cache
-# and configuring preferred search directories before previous search directories.
-# Previous shared library cache: /usr/lib /usr/local/lib
-# Preferred search directories: /tmp/testing
-# Reordered shared library cache: /tmp/testing /usr/lib /usr/local/lib
-func_reorder_shared_lib_cache ()
-{
-	$debug_cmd
-
-	case $host_os in
-	  openbsd*)
-	    get_search_directories=`PATH="$PATH:/sbin" ldconfig -r | $GREP "search directories" | $SED "s#.*search directories:\ ##g"`
-	    func_convert_delimited_path "$get_search_directories" ':' '\ '
-	    save_search_directories=$converted_path
-	    func_convert_delimited_path "$1" ':' '\ '
-
-	    # Ensure directories exist
-	    for dir in $converted_path; do
-	      # Ensure each directory is an absolute path
-	      case $dir in
-	        /*) ;;
-	        *) func_error "Directory '$dir' is not an absolute path"
-	           exit $EXIT_FAILURE ;;
-	      esac
-	      # Ensure no trailing slashes
-	      func_stripname '' '/' "$dir"
-	      dir=$func_stripname_result
-	      if test -d "$dir"; then
-	        if test -n "$preferred_search_directories"; then
-	          preferred_search_directories="$preferred_search_directories $dir"
-	        else
-	          preferred_search_directories=$dir
-	        fi
-	      else
-	        func_error "Directory '$dir' does not exist"
-	        exit $EXIT_FAILURE
-	      fi
-	    done
-
-	    PATH="$PATH:/sbin" ldconfig -U $save_search_directories
-	    PATH="$PATH:/sbin" ldconfig -m $preferred_search_directories $save_search_directories
-	    get_search_directories=`PATH="$PATH:/sbin" ldconfig -r | $GREP "search directories" | $SED "s#.*search directories:\ ##g"`
-	    func_convert_delimited_path "$get_search_directories" ':' '\ '
-	    reordered_search_directories=$converted_path
-
-	    $ECHO "Original: $save_search_directories"
-	    $ECHO "Reordered: $reordered_search_directories"
-	    exit $EXIT_SUCCESS
-	  ;;
-	  *)
-	    func_error "--reorder-cache is not supported for host_os=$host_os."
-	    exit $EXIT_FAILURE
-	  ;;
-	esac
-}
-# end func_reorder_shared_lib_cache
-
-
-# func_mode_compile arg...
-func_mode_compile ()
-{
-    $debug_cmd
-
-    # Get the compilation command and the source file.
-    base_compile=
-    srcfile=$nonopt  #  always keep a non-empty value in "srcfile"
-    suppress_opt=yes
-    suppress_output=
-    arg_mode=normal
-    libobj=
-    later=
-    pie_flag=
-
-    for arg
-    do
-      case $arg_mode in
-      arg  )
-	# do not "continue".  Instead, add this to base_compile
-	lastarg=$arg
-	arg_mode=normal
-	;;
-
-      target )
-	libobj=$arg
-	arg_mode=normal
-	continue
-	;;
-
-      normal )
-	# Accept any command-line options.
-	case $arg in
-	-o)
-	  test -n "$libobj" && \
-	    func_fatal_error "you cannot specify '-o' more than once"
-	  arg_mode=target
-	  continue
-	  ;;
-
-	-pie | -fpie | -fPIE)
-          func_append pie_flag " $arg"
-	  continue
-	  ;;
-
-	-shared | -static | -prefer-pic | -prefer-non-pic)
-	  func_append later " $arg"
-	  continue
-	  ;;
-
-	-no-suppress)
-	  suppress_opt=no
-	  continue
-	  ;;
-
-	-Xcompiler)
-	  arg_mode=arg  #  the next one goes into the "base_compile" arg list
-	  continue      #  The current "srcfile" will either be retained or
-	  ;;            #  replaced later.  I would guess that would be a bug.
-
-	-Wc,*)
-	  func_stripname '-Wc,' '' "$arg"
-	  args=$func_stripname_result
-	  lastarg=
-	  save_ifs=$IFS; IFS=,
-	  for arg in $args; do
-	    IFS=$save_ifs
-	    func_append_quoted lastarg "$arg"
-	  done
-	  IFS=$save_ifs
-	  func_stripname ' ' '' "$lastarg"
-	  lastarg=$func_stripname_result
-
-	  # Add the arguments to base_compile.
-	  func_append base_compile " $lastarg"
-	  continue
-	  ;;
-
-	*)
-	  # Accept the current argument as the source file.
-	  # The previous "srcfile" becomes the current argument.
-	  #
-	  lastarg=$srcfile
-	  srcfile=$arg
-	  ;;
-	esac  #  case $arg
-	;;
-      esac    #  case $arg_mode
-
-      # Aesthetically quote the previous argument.
-      func_append_quoted base_compile "$lastarg"
-    done # for arg
-
-    case $arg_mode in
-    arg)
-      func_fatal_error "you must specify an argument for -Xcompile"
-      ;;
-    target)
-      func_fatal_error "you must specify a target with '-o'"
-      ;;
-    *)
-      # Get the name of the library object.
-      test -z "$libobj" && {
-	func_basename "$srcfile"
-	libobj=$func_basename_result
-      }
-      ;;
-    esac
-
-    # Recognize several different file suffixes.
-    # If the user specifies -o file.o, it is replaced with file.lo
-    case $libobj in
-    *.[cCFSifmso] | \
-    *.ada | *.adb | *.ads | *.asm | \
-    *.c++ | *.cc | *.ii | *.class | *.cpp | *.cxx | \
-    *.[fF][09]? | *.for | *.java | *.go | *.obj | *.sx | *.cu | *.cup)
-      func_xform "$libobj"
-      libobj=$func_xform_result
-      ;;
-    esac
-
-    case $libobj in
-    *.lo) func_lo2o "$libobj"; obj=$func_lo2o_result ;;
-    *)
-      func_fatal_error "cannot determine name of library object from '$libobj'"
-      ;;
-    esac
-
-    func_infer_tag $base_compile
-
-    for arg in $later; do
-      case $arg in
-      -shared)
-	test yes = "$build_libtool_libs" \
-	  || func_fatal_configuration "cannot build a shared library"
-	build_old_libs=no
-	continue
-	;;
-
-      -static)
-	build_libtool_libs=no
-	build_old_libs=yes
-	continue
-	;;
-
-      -prefer-pic)
-	pic_mode=yes
-	continue
-	;;
-
-      -prefer-non-pic)
-	pic_mode=no
-	continue
-	;;
-      esac
-    done
-
-    func_quote_arg pretty "$libobj"
-    test "X$libobj" != "X$func_quote_arg_result" \
-      && $ECHO "X$libobj" | $GREP '[]~#^*{};<>?"'"'"'	 &()|`$[]' \
-      && func_warning "libobj name '$libobj' may not contain shell special characters."
-    func_dirname_and_basename "$obj" "/" ""
-    objname=$func_basename_result
-    xdir=$func_dirname_result
-    lobj=$xdir$objdir/$objname
-
-    test -z "$base_compile" && \
-      func_fatal_help "you must specify a compilation command"
-
-    # Delete any leftover library objects.
-    if test yes = "$build_old_libs"; then
-      removelist="$obj $lobj $libobj ${libobj}T"
-    else
-      removelist="$lobj $libobj ${libobj}T"
-    fi
-
-    # On Cygwin there's no "real" PIC flag so we must build both object types
-    case $host_os in
-    cygwin* | mingw* | windows* | pw32* | os2* | cegcc*)
-      pic_mode=default
-      ;;
-    esac
-    if test no = "$pic_mode" && test pass_all != "$deplibs_check_method"; then
-      # non-PIC code in shared libraries is not supported
-      pic_mode=default
-    fi
-
-    # Calculate the filename of the output object if compiler does
-    # not support -o with -c
-    if test no = "$compiler_c_o"; then
-      output_obj=`$ECHO "$srcfile" | $SED 's%^.*/%%; s%\.[^.]*$%%'`.$objext
-      lockfile=$output_obj.lock
-    else
-      output_obj=
-      need_locks=no
-      lockfile=
-    fi
-
-    # Lock this critical section if it is needed
-    # We use this script file to make the link, it avoids creating a new file
-    if test yes = "$need_locks"; then
-      until $opt_dry_run || ln "$progpath" "$lockfile" 2>/dev/null; do
-	func_echo "Waiting for $lockfile to be removed"
-	sleep 2
-      done
-    elif test warn = "$need_locks"; then
-      if test -f "$lockfile"; then
-	$ECHO "\
-*** ERROR, $lockfile exists and contains:
-`cat $lockfile 2>/dev/null`
-
-This indicates that another process is trying to use the same
-temporary object file, and libtool could not work around it because
-your compiler does not support '-c' and '-o' together.  If you
-repeat this compilation, it may succeed, by chance, but you had better
-avoid parallel builds (make -j) in this platform, or get a better
-compiler."
-
-	$opt_dry_run || $RM $removelist
-	exit $EXIT_FAILURE
-      fi
-      func_append removelist " $output_obj"
-      $ECHO "$srcfile" > "$lockfile"
-    fi
-
-    $opt_dry_run || $RM $removelist
-    func_append removelist " $lockfile"
-    trap '$opt_dry_run || $RM $removelist; exit $EXIT_FAILURE' 1 2 15
-
-    func_to_tool_file "$srcfile" func_convert_file_msys_to_w32
-    srcfile=$func_to_tool_file_result
-    func_quote_arg pretty "$srcfile"
-    qsrcfile=$func_quote_arg_result
-
-    # Only build a PIC object if we are building libtool libraries.
-    if test yes = "$build_libtool_libs"; then
-      # Without this assignment, base_compile gets emptied.
-      fbsd_hideous_sh_bug=$base_compile
-
-      if test no != "$pic_mode"; then
-	command="$base_compile $qsrcfile $pic_flag"
-      else
-	# Don't build PIC code
-	command="$base_compile $qsrcfile"
-      fi
-
-      func_mkdir_p "$xdir$objdir"
-
-      if test -z "$output_obj"; then
-	# Place PIC objects in $objdir
-	func_append command " -o $lobj"
-      fi
-
-      func_show_eval_locale "$command"	\
-          'test -n "$output_obj" && $RM $removelist; exit $EXIT_FAILURE'
-
-      if test warn = "$need_locks" &&
-	 test "X`cat $lockfile 2>/dev/null`" != "X$srcfile"; then
-	$ECHO "\
-*** ERROR, $lockfile contains:
-`cat $lockfile 2>/dev/null`
-
-but it should contain:
-$srcfile
-
-This indicates that another process is trying to use the same
-temporary object file, and libtool could not work around it because
-your compiler does not support '-c' and '-o' together.  If you
-repeat this compilation, it may succeed, by chance, but you had better
-avoid parallel builds (make -j) in this platform, or get a better
-compiler."
-
-	$opt_dry_run || $RM $removelist
-	exit $EXIT_FAILURE
-      fi
-
-      # Just move the object if needed, then go on to compile the next one
-      if test -n "$output_obj" && test "X$output_obj" != "X$lobj"; then
-	func_show_eval '$MV "$output_obj" "$lobj"' \
-	  'error=$?; $opt_dry_run || $RM $removelist; exit $error'
-      fi
-
-      # Allow error messages only from the first compilation.
-      if test yes = "$suppress_opt"; then
-	suppress_output=' >/dev/null 2>&1'
-      fi
-    fi
-
-    # Only build a position-dependent object if we build old libraries.
-    if test yes = "$build_old_libs"; then
-      if test yes != "$pic_mode"; then
-	# Don't build PIC code
-	command="$base_compile $qsrcfile$pie_flag"
-      else
-	command="$base_compile $qsrcfile $pic_flag"
-      fi
-      if test yes = "$compiler_c_o"; then
-	func_append command " -o $obj"
-      fi
-
-      # Suppress compiler output if we already did a PIC compilation.
-      func_append command "$suppress_output"
-      func_show_eval_locale "$command" \
-        '$opt_dry_run || $RM $removelist; exit $EXIT_FAILURE'
-
-      if test warn = "$need_locks" &&
-	 test "X`cat $lockfile 2>/dev/null`" != "X$srcfile"; then
-	$ECHO "\
-*** ERROR, $lockfile contains:
-`cat $lockfile 2>/dev/null`
-
-but it should contain:
-$srcfile
-
-This indicates that another process is trying to use the same
-temporary object file, and libtool could not work around it because
-your compiler does not support '-c' and '-o' together.  If you
-repeat this compilation, it may succeed, by chance, but you had better
-avoid parallel builds (make -j) in this platform, or get a better
-compiler."
-
-	$opt_dry_run || $RM $removelist
-	exit $EXIT_FAILURE
-      fi
-
-      # Just move the object if needed
-      if test -n "$output_obj" && test "X$output_obj" != "X$obj"; then
-	func_show_eval '$MV "$output_obj" "$obj"' \
-	  'error=$?; $opt_dry_run || $RM $removelist; exit $error'
-      fi
-    fi
-
-    $opt_dry_run || {
-      func_write_libtool_object "$libobj" "$objdir/$objname" "$objname"
-
-      # Unlock the critical section if it was locked
-      if test no != "$need_locks"; then
-	removelist=$lockfile
-        $RM "$lockfile"
-      fi
-    }
-
-    exit $EXIT_SUCCESS
-}
-
-$opt_help || {
-  test compile = "$opt_mode" && func_mode_compile ${1+"$@"}
-}
-
-func_mode_help ()
-{
-    # We need to display help for each of the modes.
-    case $opt_mode in
-      "")
-        # Generic help is extracted from the usage comments
-        # at the start of this file.
-        func_help
-        ;;
-
-      clean)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=clean RM [RM-OPTION]... FILE...
-
-Remove files from the build directory.
-
-RM is the name of the program to use to delete files associated with each FILE
-(typically '/bin/rm').  RM-OPTIONS are options (such as '-f') to be passed
-to RM.
-
-If FILE is a libtool library, object or program, all the files associated
-with it are deleted. Otherwise, only FILE itself is deleted using RM."
-        ;;
-
-      compile)
-      $ECHO \
-"Usage: $progname [OPTION]... --mode=compile COMPILE-COMMAND... SOURCEFILE
-
-Compile a source file into a libtool library object.
-
-This mode accepts the following additional options:
-
-  -o OUTPUT-FILE    set the output file name to OUTPUT-FILE
-  -no-suppress      do not suppress compiler output for multiple passes
-  -prefer-pic       try to build PIC objects only
-  -prefer-non-pic   try to build non-PIC objects only
-  -shared           do not build a '.o' file suitable for static linking
-  -static           only build a '.o' file suitable for static linking
-  -Wc,FLAG
-  -Xcompiler FLAG   pass FLAG directly to the compiler
-
-COMPILE-COMMAND is a command to be used in creating a 'standard' object file
-from the given SOURCEFILE.
-
-The output file name is determined by removing the directory component from
-SOURCEFILE, then substituting the C source code suffix '.c' with the
-library object suffix, '.lo'."
-        ;;
-
-      execute)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=execute COMMAND [ARGS]...
-
-Automatically set library path, then run a program.
-
-This mode accepts the following additional options:
-
-  -dlopen FILE      add the directory containing FILE to the library path
-
-This mode sets the library path environment variable according to '-dlopen'
-flags.
-
-If any of the ARGS are libtool executable wrappers, then they are translated
-into their corresponding uninstalled binary, and any of their required library
-directories are added to the library path.
-
-Then, COMMAND is executed, with ARGS as arguments."
-        ;;
-
-      finish)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=finish [LIBDIR]...
-
-Complete the installation of libtool libraries.
-
-Each LIBDIR is a directory that contains libtool libraries.
-
-The commands that this mode executes may require superuser privileges.  Use
-the '--dry-run' option if you just want to see what would be executed."
-        ;;
-
-      install)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=install INSTALL-COMMAND...
-
-Install executables or libraries.
-
-INSTALL-COMMAND is the installation command.  The first component should be
-either the 'install' or 'cp' program.
-
-The following components of INSTALL-COMMAND are treated specially:
-
-  -inst-prefix-dir PREFIX-DIR  Use PREFIX-DIR as a staging area for installation
-
-The rest of the components are interpreted as arguments to that command (only
-BSD-compatible install options are recognized)."
-        ;;
-
-      link)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=link LINK-COMMAND...
-
-Link object files or libraries together to form another library, or to
-create an executable program.
-
-LINK-COMMAND is a command using the C compiler that you would use to create
-a program from several object files.
-
-The following components of LINK-COMMAND are treated specially:
-
-  -all-static       do not do any dynamic linking at all
-  -avoid-version    do not add a version suffix if possible
-  -bindir BINDIR    specify path to binaries directory (for systems where
-                    libraries must be found in the PATH setting at runtime)
-  -dlopen FILE      '-dlpreopen' FILE if it cannot be dlopened at runtime
-  -dlpreopen FILE   link in FILE and add its symbols to lt_preloaded_symbols
-  -export-dynamic   allow symbols from OUTPUT-FILE to be resolved with dlsym(3)
-  -export-symbols SYMFILE
-                    try to export only the symbols listed in SYMFILE
-  -export-symbols-regex REGEX
-                    try to export only the symbols matching REGEX
-  -LLIBDIR          search LIBDIR for required installed libraries
-  -lNAME            OUTPUT-FILE requires the installed library libNAME
-  -module           build a library that can dlopened
-  -no-fast-install  disable the fast-install mode
-  -no-install       link a not-installable executable
-  -no-undefined     declare that a library does not refer to external symbols
-  -o OUTPUT-FILE    create OUTPUT-FILE from the specified objects
-  -objectlist FILE  use a list of object files found in FILE to specify objects
-  -os2dllname NAME  force a short DLL name on OS/2 (no effect on other OSes)
-  -precious-files-regex REGEX
-                    don't remove output files matching REGEX
-  -release RELEASE  specify package release information
-  -rpath LIBDIR     the created library will eventually be installed in LIBDIR
-  -R[ ]LIBDIR       add LIBDIR to the runtime path of programs and libraries
-  -shared           only do dynamic linking of libtool libraries
-  -shrext SUFFIX    override the standard shared library file extension
-  -static           do not do any dynamic linking of uninstalled libtool libraries
-  -static-libtool-libs
-                    do not do any dynamic linking of libtool libraries
-  -version-info CURRENT[:REVISION[:AGE]]
-                    specify library version info [each variable defaults to 0]
-  -weak LIBNAME     declare that the target provides the LIBNAME interface
-  -Wc,FLAG
-  -Xcompiler FLAG   pass linker-specific FLAG directly to the compiler
-  -Wa,FLAG
-  -Xassembler FLAG  pass linker-specific FLAG directly to the assembler
-  -Wl,FLAG
-  -Xlinker FLAG     pass linker-specific FLAG directly to the linker
-  -XCClinker FLAG   pass link-specific FLAG to the compiler driver (CC)
-
-All other options (arguments beginning with '-') are ignored.
-
-Every other argument is treated as a filename.  Files ending in '.la' are
-treated as uninstalled libtool libraries, other files are standard or library
-object files.
-
-If the OUTPUT-FILE ends in '.la', then a libtool library is created,
-only library objects ('.lo' files) may be specified, and '-rpath' is
-required, except when creating a convenience library.
-
-If OUTPUT-FILE ends in '.a' or '.lib', then a standard library is created
-using 'ar' and 'ranlib', or on Windows using 'lib'.
-
-If OUTPUT-FILE ends in '.lo' or '.$objext', then a reloadable object file
-is created, otherwise an executable program is created."
-        ;;
-
-      uninstall)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=uninstall RM [RM-OPTION]... FILE...
-
-Remove libraries from an installation directory.
-
-RM is the name of the program to use to delete files associated with each FILE
-(typically '/bin/rm').  RM-OPTIONS are options (such as '-f') to be passed
-to RM.
-
-If FILE is a libtool library, all the files associated with it are deleted.
-Otherwise, only FILE itself is deleted using RM."
-        ;;
-
-      *)
-        func_fatal_help "invalid operation mode '$opt_mode'"
-        ;;
-    esac
-
-    echo
-    $ECHO "Try '$progname --help' for more information about other modes."
-}
-
-# Now that we've collected a possible --mode arg, show help if necessary
-if $opt_help; then
-  if test : = "$opt_help"; then
-    func_mode_help
-  else
-    {
-      func_help noexit
-      for opt_mode in compile link execute install finish uninstall clean; do
-	func_mode_help
-      done
-    } | $SED -n '1p; 2,$s/^Usage:/  or: /p'
-    {
-      func_help noexit
-      for opt_mode in compile link execute install finish uninstall clean; do
-	echo
-	func_mode_help
-      done
-    } |
-    $SED '1d
-      /^When reporting/,/^Report/{
-	H
-	d
-      }
-      $x
-      /information about other modes/d
-      /more detailed .*MODE/d
-      s/^Usage:.*--mode=\([^ ]*\) .*/Description of \1 mode:/'
-  fi
-  exit $?
-fi
-
-
-# If option '--reorder-cache', reorder the shared library cache and exit.
-if $opt_reorder_cache; then
-    func_reorder_shared_lib_cache $shared_lib_dirs
-fi
-
-
-# func_mode_execute arg...
-func_mode_execute ()
-{
-    $debug_cmd
-
-    # The first argument is the command name.
-    cmd=$nonopt
-    test -z "$cmd" && \
-      func_fatal_help "you must specify a COMMAND"
-
-    # Handle -dlopen flags immediately.
-    for file in $opt_dlopen; do
-      test -f "$file" \
-	|| func_fatal_help "'$file' is not a file"
-
-      dir=
-      case $file in
-      *.la)
-	func_resolve_sysroot "$file"
-	file=$func_resolve_sysroot_result
-
-	# Check to see that this really is a libtool archive.
-	func_lalib_unsafe_p "$file" \
-	  || func_fatal_help "'$lib' is not a valid libtool archive"
-
-	# Read the libtool library.
-	dlname=
-	library_names=
-	func_source "$file"
-
-	# Skip this library if it cannot be dlopened.
-	if test -z "$dlname"; then
-	  # Warn if it was a shared library.
-	  test -n "$library_names" && \
-	    func_warning "'$file' was not linked with '-export-dynamic'"
-	  continue
-	fi
-
-	func_dirname "$file" "" "."
-	dir=$func_dirname_result
-
-	if test -f "$dir/$objdir/$dlname"; then
-	  func_append dir "/$objdir"
-	else
-	  if test ! -f "$dir/$dlname"; then
-	    func_fatal_error "cannot find '$dlname' in '$dir' or '$dir/$objdir'"
-	  fi
-	fi
-	;;
-
-      *.lo)
-	# Just add the directory containing the .lo file.
-	func_dirname "$file" "" "."
-	dir=$func_dirname_result
-	;;
-
-      *)
-	func_warning "'-dlopen' is ignored for non-libtool libraries and objects"
-	continue
-	;;
-      esac
-
-      # Get the absolute pathname.
-      absdir=`cd "$dir" && pwd`
-      test -n "$absdir" && dir=$absdir
-
-      # Now add the directory to shlibpath_var.
-      if eval "test -z \"\$$shlibpath_var\""; then
-	eval "$shlibpath_var=\"\$dir\""
-      else
-	eval "$shlibpath_var=\"\$dir:\$$shlibpath_var\""
-      fi
-    done
-
-    # This variable tells wrapper scripts just to set shlibpath_var
-    # rather than running their programs.
-    libtool_execute_magic=$magic
-
-    # Check if any of the arguments is a wrapper script.
-    args=
-    for file
-    do
-      case $file in
-      -* | *.la | *.lo ) ;;
-      *)
-	# Do a test to see if this is really a libtool program.
-	if func_ltwrapper_script_p "$file"; then
-	  func_source "$file"
-	  # Transform arg to wrapped name.
-	  file=$progdir/$program
-	elif func_ltwrapper_executable_p "$file"; then
-	  func_ltwrapper_scriptname "$file"
-	  func_source "$func_ltwrapper_scriptname_result"
-	  # Transform arg to wrapped name.
-	  file=$progdir/$program
-	fi
-	;;
-      esac
-      # Quote arguments (to preserve shell metacharacters).
-      func_append_quoted args "$file"
-    done
-
-    if $opt_dry_run; then
-      # Display what would be done.
-      if test -n "$shlibpath_var"; then
-	eval "\$ECHO \"\$shlibpath_var=\$$shlibpath_var\""
-	echo "export $shlibpath_var"
-      fi
-      $ECHO "$cmd$args"
-      exit $EXIT_SUCCESS
-    else
-      if test -n "$shlibpath_var"; then
-	# Export the shlibpath_var.
-	eval "export $shlibpath_var"
-      fi
-
-      # Restore saved environment variables
-      for lt_var in LANG LANGUAGE LC_ALL LC_CTYPE LC_COLLATE LC_MESSAGES
-      do
-	eval "if test \"\${save_$lt_var+set}\" = set; then
-                $lt_var=\$save_$lt_var; export $lt_var
-	      else
-		$lt_unset $lt_var
-	      fi"
-      done
-
-      # Now prepare to actually exec the command.
-      exec_cmd=\$cmd$args
-    fi
-}
-
-test execute = "$opt_mode" && func_mode_execute ${1+"$@"}
-
-
-# func_mode_finish arg...
-func_mode_finish ()
-{
-    $debug_cmd
-
-    libs=
-    libdirs=
-    admincmds=
-
-    for opt in "$nonopt" ${1+"$@"}
-    do
-      if test -d "$opt"; then
-	func_append libdirs " $opt"
-
-      elif test -f "$opt"; then
-	if func_lalib_unsafe_p "$opt"; then
-	  func_append libs " $opt"
-	else
-	  func_warning "'$opt' is not a valid libtool archive"
-	fi
-
-      else
-	func_fatal_error "invalid argument '$opt'"
-      fi
-    done
-
-    if test -n "$libs"; then
-      if test -n "$lt_sysroot"; then
-        sysroot_regex=`$ECHO "$lt_sysroot" | $SED "$sed_make_literal_regex"`
-        sysroot_cmd="s/\([ ']\)$sysroot_regex/\1/g;"
-      else
-        sysroot_cmd=
-      fi
-
-      # Remove sysroot references
-      if $opt_dry_run; then
-        for lib in $libs; do
-          echo "removing references to $lt_sysroot and '=' prefixes from $lib"
-        done
-      else
-        tmpdir=`func_mktempdir`
-        for lib in $libs; do
-	  $SED -e "$sysroot_cmd s/\([ ']-[LR]\)=/\1/g; s/\([ ']\)=/\1/g" $lib \
-	    > $tmpdir/tmp-la
-	  mv -f $tmpdir/tmp-la $lib
-	done
-        ${RM}r "$tmpdir"
-      fi
-    fi
-
-    if test -n "$finish_cmds$finish_eval" && test -n "$libdirs" && $opt_finishing; then
-      for libdir in $libdirs; do
-	if test -n "$finish_cmds"; then
-	  # Do each command in the finish commands.
-	  func_execute_cmds "$finish_cmds" 'admincmds="$admincmds
-'"$cmd"'"'
-	fi
-	if test -n "$finish_eval"; then
-	  # Do the single finish_eval.
-	  eval cmds=\"$finish_eval\"
-	  $opt_dry_run || eval "$cmds" || func_append admincmds "
-       $cmds"
-	fi
-      done
-    fi
-
-    # Exit here if they wanted silent mode.
-    $opt_quiet && exit $EXIT_SUCCESS
-
-    if test -n "$finish_cmds$finish_eval" && test -n "$libdirs"; then
-      echo "----------------------------------------------------------------------"
-      echo "Libraries have been installed in:"
-      for libdir in $libdirs; do
-	$ECHO "   $libdir"
-      done
-      if test "false" = "$opt_finishing"; then
-        echo
-        echo "NOTE: finish_cmds were not executed during testing, so you must"
-        echo "manually run ldconfig to add a given test directory, LIBDIR, to"
-        echo "the search path for generated executables."
-      fi
-      echo
-      echo "If you ever happen to want to link against installed libraries"
-      echo "in a given directory, LIBDIR, you must either use libtool, and"
-      echo "specify the full pathname of the library, or use the '-LLIBDIR'"
-      echo "flag during linking and do at least one of the following:"
-      if test -n "$shlibpath_var"; then
-	echo "   - add LIBDIR to the '$shlibpath_var' environment variable"
-	echo "     during execution"
-      fi
-      if test -n "$runpath_var"; then
-	echo "   - add LIBDIR to the '$runpath_var' environment variable"
-	echo "     during linking"
-      fi
-      if test -n "$hardcode_libdir_flag_spec"; then
-	libdir=LIBDIR
-	eval flag=\"$hardcode_libdir_flag_spec\"
-
-	$ECHO "   - use the '$flag' linker flag"
-      fi
-      if test -n "$admincmds"; then
-	$ECHO "   - have your system administrator run these commands:$admincmds"
-      fi
-      if test -f /etc/ld.so.conf; then
-	echo "   - have your system administrator add LIBDIR to '/etc/ld.so.conf'"
-      fi
-      echo
-
-      echo "See any operating system documentation about shared libraries for"
-      case $host in
-	solaris2.[6789]|solaris2.1[0-9])
-	  echo "more information, such as the ld(1), crle(1) and ld.so(8) manual"
-	  echo "pages."
-	  ;;
-	*)
-	  echo "more information, such as the ld(1) and ld.so(8) manual pages."
-	  ;;
-      esac
-      echo "----------------------------------------------------------------------"
-    fi
-    exit $EXIT_SUCCESS
-}
-
-test finish = "$opt_mode" && func_mode_finish ${1+"$@"}
-
-
-# func_mode_install arg...
-func_mode_install ()
-{
-    $debug_cmd
-
-    # There may be an optional sh(1) argument at the beginning of
-    # install_prog (especially on Windows NT).
-    if test "$SHELL" = "$nonopt" || test /bin/sh = "$nonopt" ||
-       # Allow the use of GNU shtool's install command.
-       case $nonopt in *shtool*) :;; *) false;; esac
-    then
-      # Aesthetically quote it.
-      func_quote_arg pretty "$nonopt"
-      install_prog="$func_quote_arg_result "
-      arg=$1
-      shift
-    else
-      install_prog=
-      arg=$nonopt
-    fi
-
-    # The real first argument should be the name of the installation program.
-    # Aesthetically quote it.
-    func_quote_arg pretty "$arg"
-    func_append install_prog "$func_quote_arg_result"
-    install_shared_prog=$install_prog
-    case " $install_prog " in
-      *[\\\ /]cp\ *) install_cp=: ;;
-      *) install_cp=false ;;
-    esac
-
-    # We need to accept at least all the BSD install flags.
-    dest=
-    files=
-    opts=
-    prev=
-    install_type=
-    isdir=false
-    stripme=
-    no_mode=:
-    for arg
-    do
-      arg2=
-      if test -n "$dest"; then
-	func_append files " $dest"
-	dest=$arg
-	continue
-      fi
-
-      case $arg in
-      -d) isdir=: ;;
-      -f)
-	if $install_cp; then :; else
-	  prev=$arg
-	fi
-	;;
-      -g | -m | -o)
-	prev=$arg
-	;;
-      -s)
-	stripme=" -s"
-	continue
-	;;
-      -*)
-	;;
-      *)
-	# If the previous option needed an argument, then skip it.
-	if test -n "$prev"; then
-	  if test X-m = "X$prev" && test -n "$install_override_mode"; then
-	    arg2=$install_override_mode
-	    no_mode=false
-	  fi
-	  prev=
-	else
-	  dest=$arg
-	  continue
-	fi
-	;;
-      esac
-
-      # Aesthetically quote the argument.
-      func_quote_arg pretty "$arg"
-      func_append install_prog " $func_quote_arg_result"
-      if test -n "$arg2"; then
-	func_quote_arg pretty "$arg2"
-      fi
-      func_append install_shared_prog " $func_quote_arg_result"
-    done
-
-    test -z "$install_prog" && \
-      func_fatal_help "you must specify an install program"
-
-    test -n "$prev" && \
-      func_fatal_help "the '$prev' option requires an argument"
-
-    if test -n "$install_override_mode" && $no_mode; then
-      if $install_cp; then :; else
-	func_quote_arg pretty "$install_override_mode"
-	func_append install_shared_prog " -m $func_quote_arg_result"
-      fi
-    fi
-
-    if test -z "$files"; then
-      if test -z "$dest"; then
-	func_fatal_help "no file or destination specified"
-      else
-	func_fatal_help "you must specify a destination"
-      fi
-    fi
-
-    # Strip any trailing slash from the destination.
-    func_stripname '' '/' "$dest"
-    dest=$func_stripname_result
-
-    # Check to see that the destination is a directory.
-    test -d "$dest" && isdir=:
-    if $isdir; then
-      destdir=$dest
-      destname=
-    else
-      func_dirname_and_basename "$dest" "" "."
-      destdir=$func_dirname_result
-      destname=$func_basename_result
-
-      # Not a directory, so check to see that there is only one file specified.
-      set dummy $files; shift
-      test "$#" -gt 1 && \
-	func_fatal_help "'$dest' is not a directory"
-    fi
-    case $destdir in
-    [\\/]* | [A-Za-z]:[\\/]*) ;;
-    *)
-      for file in $files; do
-	case $file in
-	*.lo) ;;
-	*)
-	  func_fatal_help "'$destdir' must be an absolute directory name"
-	  ;;
-	esac
-      done
-      ;;
-    esac
-
-    # This variable tells wrapper scripts just to set variables rather
-    # than running their programs.
-    libtool_install_magic=$magic
-
-    staticlibs=
-    future_libdirs=
-    current_libdirs=
-    for file in $files; do
-
-      # Do each installation.
-      case $file in
-      *.$libext)
-	# Do the static libraries later.
-	func_append staticlibs " $file"
-	;;
-
-      *.la)
-	func_resolve_sysroot "$file"
-	file=$func_resolve_sysroot_result
-
-	# Check to see that this really is a libtool archive.
-	func_lalib_unsafe_p "$file" \
-	  || func_fatal_help "'$file' is not a valid libtool archive"
-
-	library_names=
-	old_library=
-	relink_command=
-	func_source "$file"
-
-	# Add the libdir to current_libdirs if it is the destination.
-	if test "X$destdir" = "X$libdir"; then
-	  case "$current_libdirs " in
-	  *" $libdir "*) ;;
-	  *) func_append current_libdirs " $libdir" ;;
-	  esac
-	else
-	  # Note the libdir as a future libdir.
-	  case "$future_libdirs " in
-	  *" $libdir "*) ;;
-	  *) func_append future_libdirs " $libdir" ;;
-	  esac
-	fi
-
-	func_dirname "$file" "/" ""
-	dir=$func_dirname_result
-	func_append dir "$objdir"
-
-	if test -n "$relink_command"; then
-	  # Strip any trailing slash from the destination.
-	  func_stripname '' '/' "$libdir"
-	  destlibdir=$func_stripname_result
-
-	  func_stripname '' '/' "$destdir"
-	  s_destdir=$func_stripname_result
-
-	  # Determine the prefix the user has applied to our future dir.
-	  inst_prefix_dir=`$ECHO "X$s_destdir" | $Xsed -e "s%$destlibdir\$%%"`
-
-	  # Don't allow the user to place us outside of our expected
-	  # location b/c this prevents finding dependent libraries that
-	  # are installed to the same prefix.
-	  # At present, this check doesn't affect windows .dll's that
-	  # are installed into $libdir/../bin (currently, that works fine)
-	  # but it's something to keep an eye on.
-	  test "$inst_prefix_dir" = "$destdir" && \
-	    func_fatal_error "error: cannot install '$file' to a directory not ending in $libdir"
-
-	  if test -n "$inst_prefix_dir"; then
-	    # Stick the inst_prefix_dir data into the link command.
-	    relink_command=`$ECHO "$relink_command" | $SED "s%@inst_prefix_dir@%-inst-prefix-dir $inst_prefix_dir%"`
-	  else
-	    relink_command=`$ECHO "$relink_command" | $SED "s%@inst_prefix_dir@%%"`
-	  fi
-
-	  func_warning "relinking '$file'"
-	  func_show_eval "$relink_command" \
-	    'func_fatal_error "error: relink '\''$file'\'' with the above command before installing it"'
-	fi
-
-	# See the names of the shared library.
-	set dummy $library_names; shift
-	if test -n "$1"; then
-	  realname=$1
-	  shift
-
-	  srcname=$realname
-	  test -n "$relink_command" && srcname=${realname}T
-
-	  # Install the shared library and build the symlinks.
-	  func_show_eval "$install_shared_prog $dir/$srcname $destdir/$realname" \
-	      'exit $?'
-	  tstripme=$stripme
-	  case $host_os in
-	  cygwin* | mingw* | windows* | pw32* | cegcc*)
-	    case $realname in
-	    *.dll.a)
-	      tstripme=
-	      ;;
-	    esac
-	    ;;
-	  os2*)
-	    case $realname in
-	    *_dll.a)
-	      tstripme=
-	      ;;
-	    esac
-	    ;;
-	  esac
-	  if test -n "$tstripme" && test -n "$striplib"; then
-	    func_show_eval "$striplib $destdir/$realname" 'exit $?'
-	  fi
-
-	  if test "$#" -gt 0; then
-	    # Delete the old symlinks, and create new ones.
-	    # Try 'ln -sf' first, because the 'ln' binary might depend on
-	    # the symlink we replace!  Solaris /bin/ln does not understand -f,
-	    # so we also need to try rm && ln -s.
-	    for linkname
-	    do
-	      test "$linkname" != "$realname" \
-		&& func_show_eval "(cd $destdir && { $LN_S -f $realname $linkname || { $RM $linkname && $LN_S $realname $linkname; }; })"
-	    done
-	  fi
-
-	  # Do each command in the postinstall commands.
-	  lib=$destdir/$realname
-	  func_execute_cmds "$postinstall_cmds" 'exit $?'
-	fi
-
-	# Install the pseudo-library for information purposes.
-	func_basename "$file"
-	name=$func_basename_result
-	instname=$dir/${name}i
-	func_show_eval "$install_prog $instname $destdir/$name" 'exit $?'
-
-	# Maybe install the static library, too.
-	test -n "$old_library" && func_append staticlibs " $dir/$old_library"
-	;;
-
-      *.lo)
-	# Install (i.e. copy) a libtool object.
-
-	# Figure out destination file name, if it wasn't already specified.
-	if test -n "$destname"; then
-	  destfile=$destdir/$destname
-	else
-	  func_basename "$file"
-	  destfile=$func_basename_result
-	  destfile=$destdir/$destfile
-	fi
-
-	# Deduce the name of the destination old-style object file.
-	case $destfile in
-	*.lo)
-	  func_lo2o "$destfile"
-	  staticdest=$func_lo2o_result
-	  ;;
-	*.$objext)
-	  staticdest=$destfile
-	  destfile=
-	  ;;
-	*)
-	  func_fatal_help "cannot copy a libtool object to '$destfile'"
-	  ;;
-	esac
-
-	# Install the libtool object if requested.
-	test -n "$destfile" && \
-	  func_show_eval "$install_prog $file $destfile" 'exit $?'
-
-	# Install the old object if enabled.
-	if test yes = "$build_old_libs"; then
-	  # Deduce the name of the old-style object file.
-	  func_lo2o "$file"
-	  staticobj=$func_lo2o_result
-	  func_show_eval "$install_prog \$staticobj \$staticdest" 'exit $?'
-	fi
-	exit $EXIT_SUCCESS
-	;;
-
-      *)
-	# Figure out destination file name, if it wasn't already specified.
-	if test -n "$destname"; then
-	  destfile=$destdir/$destname
-	else
-	  func_basename "$file"
-	  destfile=$func_basename_result
-	  destfile=$destdir/$destfile
-	fi
-
-	# If the file is missing, and there is a .exe on the end, strip it
-	# because it is most likely a libtool script we actually want to
-	# install
-	stripped_ext=
-	case $file in
-	  *.exe)
-	    if test ! -f "$file"; then
-	      func_stripname '' '.exe' "$file"
-	      file=$func_stripname_result
-	      stripped_ext=.exe
-	    fi
-	    ;;
-	esac
-
-	# Do a test to see if this is really a libtool program.
-	case $host in
-	*cygwin* | *mingw* | *windows*)
-	    if func_ltwrapper_executable_p "$file"; then
-	      func_ltwrapper_scriptname "$file"
-	      wrapper=$func_ltwrapper_scriptname_result
-	    else
-	      func_stripname '' '.exe' "$file"
-	      wrapper=$func_stripname_result
-	    fi
-	    ;;
-	*)
-	    wrapper=$file
-	    ;;
-	esac
-	if func_ltwrapper_script_p "$wrapper"; then
-	  notinst_deplibs=
-	  relink_command=
-
-	  func_source "$wrapper"
-
-	  # Check the variables that should have been set.
-	  test -z "$generated_by_libtool_version" && \
-	    func_fatal_error "invalid libtool wrapper script '$wrapper'"
-
-	  finalize=:
-	  for lib in $notinst_deplibs; do
-	    # Check to see that each library is installed.
-	    libdir=
-	    if test -f "$lib"; then
-	      func_source "$lib"
-	    fi
-	    libfile=$libdir/`$ECHO "$lib" | $SED 's%^.*/%%g'`
-	    if test -n "$libdir" && test ! -f "$libfile"; then
-	      func_warning "'$lib' has not been installed in '$libdir'"
-	      finalize=false
-	    fi
-	  done
-
-	  relink_command=
-	  func_source "$wrapper"
-
-	  outputname=
-	  if test no = "$fast_install" && test -n "$relink_command"; then
-	    $opt_dry_run || {
-	      if $finalize; then
-	        tmpdir=`func_mktempdir`
-		func_basename "$file$stripped_ext"
-		file=$func_basename_result
-	        outputname=$tmpdir/$file
-	        # Replace the output file specification.
-	        relink_command=`$ECHO "$relink_command" | $SED 's%@OUTPUT@%'"$outputname"'%g'`
-
-	        $opt_quiet || {
-	          func_quote_arg expand,pretty "$relink_command"
-		  eval "func_echo $func_quote_arg_result"
-	        }
-	        if eval "$relink_command"; then :
-	          else
-		  func_error "error: relink '$file' with the above command before installing it"
-		  $opt_dry_run || ${RM}r "$tmpdir"
-		  continue
-	        fi
-	        file=$outputname
-	      else
-	        func_warning "cannot relink '$file'"
-	      fi
-	    }
-	  else
-	    # Install the binary that we compiled earlier.
-	    file=`$ECHO "$file$stripped_ext" | $SED "s%\([^/]*\)$%$objdir/\1%"`
-	  fi
-	fi
-
-	# remove .exe since cygwin /usr/bin/install will append another
-	# one anyway
-	case $install_prog,$host in
-	*/usr/bin/install*,*cygwin*)
-	  case $file:$destfile in
-	  *.exe:*.exe)
-	    # this is ok
-	    ;;
-	  *.exe:*)
-	    destfile=$destfile.exe
-	    ;;
-	  *:*.exe)
-	    func_stripname '' '.exe' "$destfile"
-	    destfile=$func_stripname_result
-	    ;;
-	  esac
-	  ;;
-	esac
-	func_show_eval "$install_prog\$stripme \$file \$destfile" 'exit $?'
-	$opt_dry_run || if test -n "$outputname"; then
-	  ${RM}r "$tmpdir"
-	fi
-	;;
-      esac
-    done
-
-    for file in $staticlibs; do
-      func_basename "$file"
-      name=$func_basename_result
-
-      # Set up the ranlib parameters.
-      oldlib=$destdir/$name
-      func_to_tool_file "$oldlib" func_convert_file_msys_to_w32
-      tool_oldlib=$func_to_tool_file_result
-
-      func_show_eval "$install_prog \$file \$oldlib" 'exit $?'
-
-      if test -n "$stripme" && test -n "$old_striplib"; then
-	func_show_eval "$old_striplib $tool_oldlib" 'exit $?'
-      fi
-
-      # Do each command in the postinstall commands.
-      func_execute_cmds "$old_postinstall_cmds" 'exit $?'
-    done
-
-    test -n "$future_libdirs" && \
-      func_warning "remember to run '$progname --finish$future_libdirs'"
-
-    if test -n "$current_libdirs"; then
-      # Maybe just do a dry run.
-      $opt_dry_run && current_libdirs=" -n$current_libdirs"
-      exec_cmd='$SHELL "$progpath" $preserve_args --finish$current_libdirs'
-    else
-      exit $EXIT_SUCCESS
-    fi
-}
-
-test install = "$opt_mode" && func_mode_install ${1+"$@"}
-
-
-# func_generate_dlsyms outputname originator pic_p
-# Extract symbols from dlprefiles and create ${outputname}S.o with
-# a dlpreopen symbol table.
-func_generate_dlsyms ()
-{
-    $debug_cmd
-
-    my_outputname=$1
-    my_originator=$2
-    my_pic_p=${3-false}
-    my_prefix=`$ECHO "$my_originator" | $SED 's%[^a-zA-Z0-9]%_%g'`
-    my_dlsyms=
-
-    if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then
-      if test -n "$NM" && test -n "$global_symbol_pipe"; then
-	my_dlsyms=${my_outputname}S.c
-      else
-	func_error "not configured to extract global symbols from dlpreopened files"
-      fi
-    fi
-
-    if test -n "$my_dlsyms"; then
-      case $my_dlsyms in
-      "") ;;
-      *.c)
-	# Discover the nlist of each of the dlfiles.
-	nlist=$output_objdir/$my_outputname.nm
-
-	func_show_eval "$RM $nlist ${nlist}S ${nlist}T"
-
-	# Parse the name list into a source file.
-	func_verbose "creating $output_objdir/$my_dlsyms"
-
-	$opt_dry_run || $ECHO > "$output_objdir/$my_dlsyms" "\
-/* $my_dlsyms - symbol resolution table for '$my_outputname' dlsym emulation. */
-/* Generated by $PROGRAM (GNU $PACKAGE) $VERSION */
-
-#ifdef __cplusplus
-extern \"C\" {
-#endif
-
-#if defined __GNUC__ && (((__GNUC__ == 4) && (__GNUC_MINOR__ >= 4)) || (__GNUC__ > 4))
-#pragma GCC diagnostic ignored \"-Wstrict-prototypes\"
-#endif
-
-/* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests.  */
-#if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE
-/* DATA imports from DLLs on WIN32 can't be const, because runtime
-   relocations are performed -- see ld's documentation on pseudo-relocs.  */
-# define LT_DLSYM_CONST
-#elif defined __osf__
-/* This system does not cope well with relocations in const data.  */
-# define LT_DLSYM_CONST
-#else
-# define LT_DLSYM_CONST const
-#endif
-
-#define STREQ(s1, s2) (strcmp ((s1), (s2)) == 0)
-
-/* External symbol declarations for the compiler. */\
-"
-
-	if test yes = "$dlself"; then
-	  func_verbose "generating symbol list for '$output'"
-
-	  $opt_dry_run || echo ': @PROGRAM@ ' > "$nlist"
-
-	  # Add our own program objects to the symbol list.
-	  progfiles=`$ECHO "$objs$old_deplibs" | $SP2NL | $SED "$lo2o" | $NL2SP`
-	  for progfile in $progfiles; do
-	    func_to_tool_file "$progfile" func_convert_file_msys_to_w32
-	    func_verbose "extracting global C symbols from '$func_to_tool_file_result'"
-	    $opt_dry_run || eval "$NM $func_to_tool_file_result | $global_symbol_pipe >> '$nlist'"
-	  done
-
-	  if test -n "$exclude_expsyms"; then
-	    $opt_dry_run || {
-	      eval '$EGREP -v " ($exclude_expsyms)$" "$nlist" > "$nlist"T'
-	      eval '$MV "$nlist"T "$nlist"'
-	    }
-	  fi
-
-	  if test -n "$export_symbols_regex"; then
-	    $opt_dry_run || {
-	      eval '$EGREP -e "$export_symbols_regex" "$nlist" > "$nlist"T'
-	      eval '$MV "$nlist"T "$nlist"'
-	    }
-	  fi
-
-	  # Prepare the list of exported symbols
-	  if test -z "$export_symbols"; then
-	    export_symbols=$output_objdir/$outputname.exp
-	    $opt_dry_run || {
-	      $RM $export_symbols
-	      eval "$SED -n -e '/^: @PROGRAM@ $/d' -e 's/^.* \(.*\)$/\1/p' "'< "$nlist" > "$export_symbols"'
-	      case $host in
-	      *cygwin* | *mingw* | *windows* | *cegcc* )
-                eval "echo EXPORTS "'> "$output_objdir/$outputname.def"'
-                eval 'cat "$export_symbols" >> "$output_objdir/$outputname.def"'
-	        ;;
-	      esac
-	    }
-	  else
-	    $opt_dry_run || {
-	      eval "$SED -e 's/\([].[*^$]\)/\\\\\1/g' -e 's/^/ /' -e 's/$/$/'"' < "$export_symbols" > "$output_objdir/$outputname.exp"'
-	      eval '$GREP -f "$output_objdir/$outputname.exp" < "$nlist" > "$nlist"T'
-	      eval '$MV "$nlist"T "$nlist"'
-	      case $host in
-	        *cygwin* | *mingw* | *windows* | *cegcc* )
-	          eval "echo EXPORTS "'> "$output_objdir/$outputname.def"'
-	          eval 'cat "$nlist" >> "$output_objdir/$outputname.def"'
-	          ;;
-	      esac
-	    }
-	  fi
-	fi
-
-	for dlprefile in $dlprefiles; do
-	  func_verbose "extracting global C symbols from '$dlprefile'"
-	  func_basename "$dlprefile"
-	  name=$func_basename_result
-          case $host in
-	    *cygwin* | *mingw* | *windows* | *cegcc* )
-	      # if an import library, we need to obtain dlname
-	      if func_win32_import_lib_p "$dlprefile"; then
-	        func_tr_sh "$dlprefile"
-	        eval "curr_lafile=\$libfile_$func_tr_sh_result"
-	        dlprefile_dlbasename=
-	        if test -n "$curr_lafile" && func_lalib_p "$curr_lafile"; then
-	          # Use subshell, to avoid clobbering current variable values
-	          dlprefile_dlname=`source "$curr_lafile" && echo "$dlname"`
-	          if test -n "$dlprefile_dlname"; then
-	            func_basename "$dlprefile_dlname"
-	            dlprefile_dlbasename=$func_basename_result
-	          else
-	            # no lafile. user explicitly requested -dlpreopen <import library>.
-	            $sharedlib_from_linklib_cmd "$dlprefile"
-	            dlprefile_dlbasename=$sharedlib_from_linklib_result
-	          fi
-	        fi
-	        $opt_dry_run || {
-	          if test -n "$dlprefile_dlbasename"; then
-	            eval '$ECHO ": $dlprefile_dlbasename" >> "$nlist"'
-	          else
-	            func_warning "Could not compute DLL name from $name"
-	            eval '$ECHO ": $name " >> "$nlist"'
-	          fi
-	          func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32
-	          case $host in
-	            i[3456]86-*-mingw32*)
-	              eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe |
-	                $SED -e '/I __imp/d' -e 's/I __nm_/D /;s/_nm__//' >> '$nlist'"
-	            ;;
-	            *)
-	              eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe |
-	                $SED -e '/I __imp/d' -e 's/I __nm_/D /;s/__nm_//' >> '$nlist'"
-	            ;;
-	          esac
-	        }
-	      else # not an import lib
-	        $opt_dry_run || {
-	          eval '$ECHO ": $name " >> "$nlist"'
-	          func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32
-	          eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe >> '$nlist'"
-	        }
-	      fi
-	    ;;
-	    *)
-	      $opt_dry_run || {
-	        eval '$ECHO ": $name " >> "$nlist"'
-	        func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32
-	        eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe >> '$nlist'"
-	      }
-	    ;;
-          esac
-	done
-
-	$opt_dry_run || {
-	  # Make sure we have at least an empty file.
-	  test -f "$nlist" || : > "$nlist"
-
-	  if test -n "$exclude_expsyms"; then
-	    $EGREP -v " ($exclude_expsyms)$" "$nlist" > "$nlist"T
-	    $MV "$nlist"T "$nlist"
-	  fi
-
-	  # Try sorting and uniquifying the output.
-	  if $GREP -v "^: " < "$nlist" |
-	      if sort -k 3 </dev/null >/dev/null 2>&1; then
-		sort -k 3
-	      else
-		sort +2
-	      fi |
-	      uniq > "$nlist"S; then
-	    :
-	  else
-	    $GREP -v "^: " < "$nlist" > "$nlist"S
-	  fi
-
-	  if test -f "$nlist"S; then
-	    eval "$global_symbol_to_cdecl"' < "$nlist"S >> "$output_objdir/$my_dlsyms"'
-	  else
-	    echo '/* NONE */' >> "$output_objdir/$my_dlsyms"
-	  fi
-
-	  func_show_eval '$RM "${nlist}I"'
-	  if test -n "$global_symbol_to_import"; then
-	    eval "$global_symbol_to_import"' < "$nlist"S > "$nlist"I'
-	  fi
-
-	  echo >> "$output_objdir/$my_dlsyms" "\
-
-/* The mapping between symbol names and symbols.  */
-typedef struct {
-  const char *name;
-  void *address;
-} lt_dlsymlist;
-extern LT_DLSYM_CONST lt_dlsymlist
-lt_${my_prefix}_LTX_preloaded_symbols[];\
-"
-
-	  if test -s "$nlist"I; then
-	    echo >> "$output_objdir/$my_dlsyms" "\
-static void lt_syminit(void)
-{
-  LT_DLSYM_CONST lt_dlsymlist *symbol = lt_${my_prefix}_LTX_preloaded_symbols;
-  for (; symbol->name; ++symbol)
-    {"
-	    $SED 's/.*/      if (STREQ (symbol->name, \"&\")) symbol->address = (void *) \&&;/' < "$nlist"I >> "$output_objdir/$my_dlsyms"
-	    echo >> "$output_objdir/$my_dlsyms" "\
-    }
-}"
-	  fi
-	  echo >> "$output_objdir/$my_dlsyms" "\
-LT_DLSYM_CONST lt_dlsymlist
-lt_${my_prefix}_LTX_preloaded_symbols[] =
-{ {\"$my_originator\", (void *) 0},"
-
-	  if test -s "$nlist"I; then
-	    echo >> "$output_objdir/$my_dlsyms" "\
-  {\"@INIT@\", (void *) &lt_syminit},"
-	  fi
-
-	  case $need_lib_prefix in
-	  no)
-	    eval "$global_symbol_to_c_name_address" < "$nlist" >> "$output_objdir/$my_dlsyms"
-	    ;;
-	  *)
-	    eval "$global_symbol_to_c_name_address_lib_prefix" < "$nlist" >> "$output_objdir/$my_dlsyms"
-	    ;;
-	  esac
-	  echo >> "$output_objdir/$my_dlsyms" "\
-  {0, (void *) 0}
-};
-
-/* This works around a problem in FreeBSD linker */
-#ifdef FREEBSD_WORKAROUND
-static const void *lt_preloaded_setup() {
-  return lt_${my_prefix}_LTX_preloaded_symbols;
-}
-#endif
-
-#ifdef __cplusplus
-}
-#endif\
-"
-	} # !$opt_dry_run
-
-	pic_flag_for_symtable=
-	case "$compile_command " in
-	*" -static "*) ;;
-	*)
-	  case $host in
-	  # compiling the symbol table file with pic_flag works around
-	  # a FreeBSD bug that causes programs to crash when -lm is
-	  # linked before any other PIC object.  But we must not use
-	  # pic_flag when linking with -static.  The problem exists in
-	  # FreeBSD 2.2.6 and is fixed in FreeBSD 3.1.
-	  *-*-freebsd2.*|*-*-freebsd3.0*|*-*-freebsdelf3.0*)
-	    pic_flag_for_symtable=" $pic_flag -DFREEBSD_WORKAROUND" ;;
-	  *-*-hpux*)
-	    pic_flag_for_symtable=" $pic_flag"  ;;
-	  *)
-	    $my_pic_p && pic_flag_for_symtable=" $pic_flag"
-	    ;;
-	  esac
-	  ;;
-	esac
-	symtab_cflags=
-	for arg in $LTCFLAGS; do
-	  case $arg in
-	  -pie | -fpie | -fPIE) ;;
-	  *) func_append symtab_cflags " $arg" ;;
-	  esac
-	done
-
-	# Now compile the dynamic symbol file.
-	func_show_eval '(cd $output_objdir && $LTCC$symtab_cflags -c$no_builtin_flag$pic_flag_for_symtable "$my_dlsyms")' 'exit $?'
-
-	# Clean up the generated files.
-	func_show_eval '$RM "$output_objdir/$my_dlsyms" "$nlist" "${nlist}S" "${nlist}T" "${nlist}I"'
-
-	# Transform the symbol file into the correct name.
-	symfileobj=$output_objdir/${my_outputname}S.$objext
-	case $host in
-	*cygwin* | *mingw* | *windows* | *cegcc* )
-	  if test -f "$output_objdir/$my_outputname.def"; then
-	    compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"`
-	    finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"`
-	  else
-	    compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$symfileobj%"`
-	    finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$symfileobj%"`
-	  fi
-	  ;;
-	*)
-	  compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$symfileobj%"`
-	  finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$symfileobj%"`
-	  ;;
-	esac
-	;;
-      *)
-	func_fatal_error "unknown suffix for '$my_dlsyms'"
-	;;
-      esac
-    else
-      # We keep going just in case the user didn't refer to
-      # lt_preloaded_symbols.  The linker will fail if global_symbol_pipe
-      # really was required.
-
-      # Nullify the symbol file.
-      compile_command=`$ECHO "$compile_command" | $SED "s% @SYMFILE@%%"`
-      finalize_command=`$ECHO "$finalize_command" | $SED "s% @SYMFILE@%%"`
-    fi
-}
-
-# func_cygming_gnu_implib_p ARG
-# This predicate returns with zero status (TRUE) if
-# ARG is a GNU/binutils-style import library. Returns
-# with nonzero status (FALSE) otherwise.
-func_cygming_gnu_implib_p ()
-{
-  $debug_cmd
-
-  func_to_tool_file "$1" func_convert_file_msys_to_w32
-  func_cygming_gnu_implib_tmp=`$NM "$func_to_tool_file_result" | eval "$global_symbol_pipe" | $EGREP ' (_head_[A-Za-z0-9_]+_[ad]l*|[A-Za-z0-9_]+_[ad]l*_iname)$'`
-  test -n "$func_cygming_gnu_implib_tmp"
-}
-
-# func_cygming_ms_implib_p ARG
-# This predicate returns with zero status (TRUE) if
-# ARG is an MS-style import library. Returns
-# with nonzero status (FALSE) otherwise.
-func_cygming_ms_implib_p ()
-{
-  $debug_cmd
-
-  func_to_tool_file "$1" func_convert_file_msys_to_w32
-  func_cygming_ms_implib_tmp=`$NM "$func_to_tool_file_result" | eval "$global_symbol_pipe" | $GREP '_NULL_IMPORT_DESCRIPTOR'`
-  test -n "$func_cygming_ms_implib_tmp"
-}
-
-# func_win32_libid arg
-# return the library type of file 'arg'
-#
-# Need a lot of goo to handle *both* DLLs and import libs
-# Has to be a shell function in order to 'eat' the argument
-# that is supplied when $file_magic_command is called.
-# Despite the name, also deal with 64 bit binaries.
-func_win32_libid ()
-{
-  $debug_cmd
-
-  win32_libid_type=unknown
-  win32_fileres=`file -L $1 2>/dev/null`
-  case $win32_fileres in
-  *ar\ archive\ import\ library*) # definitely import
-    win32_libid_type="x86 archive import"
-    ;;
-  *ar\ archive*) # could be an import, or static
-    # Keep the egrep pattern in sync with the one in _LT_CHECK_MAGIC_METHOD.
-    if eval $OBJDUMP -f $1 | $SED -e '10q' 2>/dev/null |
-       $EGREP 'file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64|pe-aarch64)' >/dev/null; then
-      case $nm_interface in
-      "MS dumpbin")
-	if func_cygming_ms_implib_p "$1" ||
-	   func_cygming_gnu_implib_p "$1"
-	then
-	  win32_nmres=import
-	else
-	  win32_nmres=
-	fi
-	;;
-      *)
-	func_to_tool_file "$1" func_convert_file_msys_to_w32
-	win32_nmres=`eval $NM -f posix -A \"$func_to_tool_file_result\" |
-	  $SED -n -e '
-	    1,100{
-		/ I /{
-		    s|.*|import|
-		    p
-		    q
-		}
-	    }'`
-	;;
-      esac
-      case $win32_nmres in
-      import*)  win32_libid_type="x86 archive import";;
-      *)        win32_libid_type="x86 archive static";;
-      esac
-    fi
-    ;;
-  *DLL*)
-    win32_libid_type="x86 DLL"
-    ;;
-  *executable*) # but shell scripts are "executable" too...
-    case $win32_fileres in
-    *MS\ Windows\ PE\ Intel*)
-      win32_libid_type="x86 DLL"
-      ;;
-    esac
-    ;;
-  esac
-  $ECHO "$win32_libid_type"
-}
-
-# func_cygming_dll_for_implib ARG
-#
-# Platform-specific function to extract the
-# name of the DLL associated with the specified
-# import library ARG.
-# Invoked by eval'ing the libtool variable
-#    $sharedlib_from_linklib_cmd
-# Result is available in the variable
-#    $sharedlib_from_linklib_result
-func_cygming_dll_for_implib ()
-{
-  $debug_cmd
-
-  sharedlib_from_linklib_result=`$DLLTOOL --identify-strict --identify "$1"`
-}
-
-# func_cygming_dll_for_implib_fallback_core SECTION_NAME LIBNAMEs
-#
-# The is the core of a fallback implementation of a
-# platform-specific function to extract the name of the
-# DLL associated with the specified import library LIBNAME.
-#
-# SECTION_NAME is either .idata$6 or .idata$7, depending
-# on the platform and compiler that created the implib.
-#
-# Echos the name of the DLL associated with the
-# specified import library.
-func_cygming_dll_for_implib_fallback_core ()
-{
-  $debug_cmd
-
-  match_literal=`$ECHO "$1" | $SED "$sed_make_literal_regex"`
-  $OBJDUMP -s --section "$1" "$2" 2>/dev/null |
-    $SED '/^Contents of section '"$match_literal"':/{
-      # Place marker at beginning of archive member dllname section
-      s/.*/====MARK====/
-      p
-      d
-    }
-    # These lines can sometimes be longer than 43 characters, but
-    # are always uninteresting
-    /:[	 ]*file format pe[i]\{,1\}-/d
-    /^In archive [^:]*:/d
-    # Ensure marker is printed
-    /^====MARK====/p
-    # Remove all lines with less than 43 characters
-    /^.\{43\}/!d
-    # From remaining lines, remove first 43 characters
-    s/^.\{43\}//' |
-    $SED -n '
-      # Join marker and all lines until next marker into a single line
-      /^====MARK====/ b para
-      H
-      $ b para
-      b
-      :para
-      x
-      s/\n//g
-      # Remove the marker
-      s/^====MARK====//
-      # Remove trailing dots and whitespace
-      s/[\. \t]*$//
-      # Print
-      /./p' |
-    # we now have a list, one entry per line, of the stringified
-    # contents of the appropriate section of all members of the
-    # archive that possess that section. Heuristic: eliminate
-    # all those that have a first or second character that is
-    # a '.' (that is, objdump's representation of an unprintable
-    # character.) This should work for all archives with less than
-    # 0x302f exports -- but will fail for DLLs whose name actually
-    # begins with a literal '.' or a single character followed by
-    # a '.'.
-    #
-    # Of those that remain, print the first one.
-    $SED -e '/^\./d;/^.\./d;q'
-}
-
-# func_cygming_dll_for_implib_fallback ARG
-# Platform-specific function to extract the
-# name of the DLL associated with the specified
-# import library ARG.
-#
-# This fallback implementation is for use when $DLLTOOL
-# does not support the --identify-strict option.
-# Invoked by eval'ing the libtool variable
-#    $sharedlib_from_linklib_cmd
-# Result is available in the variable
-#    $sharedlib_from_linklib_result
-func_cygming_dll_for_implib_fallback ()
-{
-  $debug_cmd
-
-  if func_cygming_gnu_implib_p "$1"; then
-    # binutils import library
-    sharedlib_from_linklib_result=`func_cygming_dll_for_implib_fallback_core '.idata$7' "$1"`
-  elif func_cygming_ms_implib_p "$1"; then
-    # ms-generated import library
-    sharedlib_from_linklib_result=`func_cygming_dll_for_implib_fallback_core '.idata$6' "$1"`
-  else
-    # unknown
-    sharedlib_from_linklib_result=
-  fi
-}
-
-
-# func_extract_an_archive dir oldlib
-func_extract_an_archive ()
-{
-    $debug_cmd
-
-    f_ex_an_ar_dir=$1; shift
-    f_ex_an_ar_oldlib=$1
-    if test yes = "$lock_old_archive_extraction"; then
-      lockfile=$f_ex_an_ar_oldlib.lock
-      until $opt_dry_run || ln "$progpath" "$lockfile" 2>/dev/null; do
-	func_echo "Waiting for $lockfile to be removed"
-	sleep 2
-      done
-    fi
-    func_show_eval "(cd \$f_ex_an_ar_dir && $AR x \"\$f_ex_an_ar_oldlib\")" \
-		   'stat=$?; rm -f "$lockfile"; exit $stat'
-    if test yes = "$lock_old_archive_extraction"; then
-      $opt_dry_run || rm -f "$lockfile"
-    fi
-    if ($AR t "$f_ex_an_ar_oldlib" | sort | sort -uc >/dev/null 2>&1); then
-     :
-    else
-      func_fatal_error "object name conflicts in archive: $f_ex_an_ar_dir/$f_ex_an_ar_oldlib"
-    fi
-}
-
-
-# func_extract_archives gentop oldlib ...
-func_extract_archives ()
-{
-    $debug_cmd
-
-    my_gentop=$1; shift
-    my_oldlibs=${1+"$@"}
-    my_oldobjs=
-    my_xlib=
-    my_xabs=
-    my_xdir=
-
-    for my_xlib in $my_oldlibs; do
-      # Extract the objects.
-      case $my_xlib in
-	[\\/]* | [A-Za-z]:[\\/]*) my_xabs=$my_xlib ;;
-	*) my_xabs=`pwd`"/$my_xlib" ;;
-      esac
-      func_basename "$my_xlib"
-      my_xlib=$func_basename_result
-      my_xlib_u=$my_xlib
-      while :; do
-        case " $extracted_archives " in
-	*" $my_xlib_u "*)
-	  func_arith $extracted_serial + 1
-	  extracted_serial=$func_arith_result
-	  my_xlib_u=lt$extracted_serial-$my_xlib ;;
-	*) break ;;
-	esac
-      done
-      extracted_archives="$extracted_archives $my_xlib_u"
-      my_xdir=$my_gentop/$my_xlib_u
-
-      func_mkdir_p "$my_xdir"
-
-      case $host in
-      *-darwin*)
-	func_verbose "Extracting $my_xabs"
-	# Do not bother doing anything if just a dry run
-	$opt_dry_run || {
-	  darwin_orig_dir=`pwd`
-	  cd $my_xdir || exit $?
-	  darwin_archive=$my_xabs
-	  darwin_curdir=`pwd`
-	  func_basename "$darwin_archive"
-	  darwin_base_archive=$func_basename_result
-	  darwin_arches=`$LIPO -info "$darwin_archive" 2>/dev/null | $GREP Architectures 2>/dev/null || true`
-	  if test -n "$darwin_arches"; then
-	    darwin_arches=`$ECHO "$darwin_arches" | $SED -e 's/.*are://'`
-	    darwin_arch=
-	    func_verbose "$darwin_base_archive has multiple architectures $darwin_arches"
-	    for darwin_arch in  $darwin_arches; do
-	      func_mkdir_p "unfat-$$/$darwin_base_archive-$darwin_arch"
-	      $LIPO -thin $darwin_arch -output "unfat-$$/$darwin_base_archive-$darwin_arch/$darwin_base_archive" "$darwin_archive"
-	      cd "unfat-$$/$darwin_base_archive-$darwin_arch"
-	      func_extract_an_archive "`pwd`" "$darwin_base_archive"
-	      cd "$darwin_curdir"
-	      $RM "unfat-$$/$darwin_base_archive-$darwin_arch/$darwin_base_archive"
-	    done # $darwin_arches
-            ## Okay now we've a bunch of thin objects, gotta fatten them up :)
-	    darwin_filelist=`find unfat-$$ -type f -name \*.o -print -o -name \*.lo -print | $SED -e "$sed_basename" | sort -u`
-	    darwin_file=
-	    darwin_files=
-	    for darwin_file in $darwin_filelist; do
-	      darwin_files=`find unfat-$$ -name $darwin_file -print | sort | $NL2SP`
-	      $LIPO -create -output "$darwin_file" $darwin_files
-	    done # $darwin_filelist
-	    $RM -rf unfat-$$
-	    cd "$darwin_orig_dir"
-	  else
-	    cd $darwin_orig_dir
-	    func_extract_an_archive "$my_xdir" "$my_xabs"
-	  fi # $darwin_arches
-	} # !$opt_dry_run
-	;;
-      *)
-        func_extract_an_archive "$my_xdir" "$my_xabs"
-	;;
-      esac
-      my_oldobjs="$my_oldobjs "`find $my_xdir -name \*.$objext -print -o -name \*.lo -print | sort | $NL2SP`
-    done
-
-    func_extract_archives_result=$my_oldobjs
-}
-
-
-# func_emit_wrapper [arg=no]
-#
-# Emit a libtool wrapper script on stdout.
-# Don't directly open a file because we may want to
-# incorporate the script contents within a cygwin/mingw/windows
-# wrapper executable.  Must ONLY be called from within
-# func_mode_link because it depends on a number of variables
-# set therein.
-#
-# ARG is the value that the WRAPPER_SCRIPT_BELONGS_IN_OBJDIR
-# variable will take.  If 'yes', then the emitted script
-# will assume that the directory where it is stored is
-# the $objdir directory.  This is a cygwin/mingw/windows-specific
-# behavior.
-func_emit_wrapper ()
-{
-	func_emit_wrapper_arg1=${1-no}
-
-	$ECHO "\
-#! $SHELL
-
-# $output - temporary wrapper script for $objdir/$outputname
-# Generated by $PROGRAM (GNU $PACKAGE) $VERSION
-#
-# The $output program cannot be directly executed until all the libtool
-# libraries that it depends on are installed.
-#
-# This wrapper script should never be moved out of the build directory.
-# If it is, it will not operate correctly.
-
-# Sed substitution that helps us do robust quoting.  It backslashifies
-# metacharacters that are still active within double-quoted strings.
-sed_quote_subst='$sed_quote_subst'
-
-# Be Bourne compatible
-if test -n \"\${ZSH_VERSION+set}\" && (emulate sh) >/dev/null 2>&1; then
-  emulate sh
-  NULLCMD=:
-  # Zsh 3.x and 4.x performs word splitting on \${1+\"\$@\"}, which
-  # is contrary to our usage.  Disable this feature.
-  alias -g '\${1+\"\$@\"}'='\"\$@\"'
-  setopt NO_GLOB_SUBST
-else
-  case \`(set -o) 2>/dev/null\` in *posix*) set -o posix;; esac
-fi
-BIN_SH=xpg4; export BIN_SH # for Tru64
-DUALCASE=1; export DUALCASE # for MKS sh
-
-# The HP-UX ksh and POSIX shell print the target directory to stdout
-# if CDPATH is set.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-relink_command=\"$relink_command\"
-
-# This environment variable determines our operation mode.
-if test \"\$libtool_install_magic\" = \"$magic\"; then
-  # install mode needs the following variables:
-  generated_by_libtool_version='$macro_version'
-  notinst_deplibs='$notinst_deplibs'
-else
-  # When we are sourced in execute mode, \$file and \$ECHO are already set.
-  if test \"\$libtool_execute_magic\" != \"$magic\"; then
-    file=\"\$0\""
-
-    func_quote_arg pretty "$ECHO"
-    qECHO=$func_quote_arg_result
-    $ECHO "\
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-\$1
-_LTECHO_EOF'
-}
-    ECHO=$qECHO
-  fi
-
-# Very basic option parsing. These options are (a) specific to
-# the libtool wrapper, (b) are identical between the wrapper
-# /script/ and the wrapper /executable/ that is used only on
-# windows platforms, and (c) all begin with the string "--lt-"
-# (application programs are unlikely to have options that match
-# this pattern).
-#
-# There are only two supported options: --lt-debug and
-# --lt-dump-script. There is, deliberately, no --lt-help.
-#
-# The first argument to this parsing function should be the
-# script's $0 value, followed by "$@".
-lt_option_debug=
-func_parse_lt_options ()
-{
-  lt_script_arg0=\$0
-  shift
-  for lt_opt
-  do
-    case \"\$lt_opt\" in
-    --lt-debug) lt_option_debug=1 ;;
-    --lt-dump-script)
-        lt_dump_D=\`\$ECHO \"X\$lt_script_arg0\" | $SED -e 's/^X//' -e 's%/[^/]*$%%'\`
-        test \"X\$lt_dump_D\" = \"X\$lt_script_arg0\" && lt_dump_D=.
-        lt_dump_F=\`\$ECHO \"X\$lt_script_arg0\" | $SED -e 's/^X//' -e 's%^.*/%%'\`
-        cat \"\$lt_dump_D/\$lt_dump_F\"
-        exit 0
-      ;;
-    --lt-*)
-        \$ECHO \"Unrecognized --lt- option: '\$lt_opt'\" 1>&2
-        exit 1
-      ;;
-    esac
-  done
-
-  # Print the debug banner immediately:
-  if test -n \"\$lt_option_debug\"; then
-    echo \"$outputname:$output:\$LINENO: libtool wrapper (GNU $PACKAGE) $VERSION\" 1>&2
-  fi
-}
-
-# Used when --lt-debug. Prints its arguments to stdout
-# (redirection is the responsibility of the caller)
-func_lt_dump_args ()
-{
-  lt_dump_args_N=1;
-  for lt_arg
-  do
-    \$ECHO \"$outputname:$output:\$LINENO: newargv[\$lt_dump_args_N]: \$lt_arg\"
-    lt_dump_args_N=\`expr \$lt_dump_args_N + 1\`
-  done
-}
-
-# Core function for launching the target application
-func_exec_program_core ()
-{
-"
-  case $host in
-  # Backslashes separate directories on plain windows
-  *-*-mingw* | *-*-windows* | *-*-os2* | *-cegcc*)
-    $ECHO "\
-      if test -n \"\$lt_option_debug\"; then
-        \$ECHO \"$outputname:$output:\$LINENO: newargv[0]: \$progdir\\\\\$program\" 1>&2
-        func_lt_dump_args \${1+\"\$@\"} 1>&2
-      fi
-      exec \"\$progdir\\\\\$program\" \${1+\"\$@\"}
-"
-    ;;
-
-  *)
-    $ECHO "\
-      if test -n \"\$lt_option_debug\"; then
-        \$ECHO \"$outputname:$output:\$LINENO: newargv[0]: \$progdir/\$program\" 1>&2
-        func_lt_dump_args \${1+\"\$@\"} 1>&2
-      fi
-      exec \"\$progdir/\$program\" \${1+\"\$@\"}
-"
-    ;;
-  esac
-  $ECHO "\
-      \$ECHO \"\$0: cannot exec \$program \$*\" 1>&2
-      exit 1
-}
-
-# A function to encapsulate launching the target application
-# Strips options in the --lt-* namespace from \$@ and
-# launches target application with the remaining arguments.
-func_exec_program ()
-{
-  case \" \$* \" in
-  *\\ --lt-*)
-    for lt_wr_arg
-    do
-      case \$lt_wr_arg in
-      --lt-*) ;;
-      *) set x \"\$@\" \"\$lt_wr_arg\"; shift;;
-      esac
-      shift
-    done ;;
-  esac
-  func_exec_program_core \${1+\"\$@\"}
-}
-
-  # Parse options
-  func_parse_lt_options \"\$0\" \${1+\"\$@\"}
-
-  # Find the directory that this script lives in.
-  thisdir=\`\$ECHO \"\$file\" | $SED 's%/[^/]*$%%'\`
-  test \"x\$thisdir\" = \"x\$file\" && thisdir=.
-
-  # Follow symbolic links until we get to the real thisdir.
-  file=\`ls -ld \"\$file\" | $SED -n 's/.*-> //p'\`
-  while test -n \"\$file\"; do
-    destdir=\`\$ECHO \"\$file\" | $SED 's%/[^/]*\$%%'\`
-
-    # If there was a directory component, then change thisdir.
-    if test \"x\$destdir\" != \"x\$file\"; then
-      case \"\$destdir\" in
-      [\\\\/]* | [A-Za-z]:[\\\\/]*) thisdir=\"\$destdir\" ;;
-      *) thisdir=\"\$thisdir/\$destdir\" ;;
-      esac
-    fi
-
-    file=\`\$ECHO \"\$file\" | $SED 's%^.*/%%'\`
-    file=\`ls -ld \"\$thisdir/\$file\" | $SED -n 's/.*-> //p'\`
-  done
-
-  # Usually 'no', except on cygwin/mingw/windows when embedded into
-  # the cwrapper.
-  WRAPPER_SCRIPT_BELONGS_IN_OBJDIR=$func_emit_wrapper_arg1
-  if test \"\$WRAPPER_SCRIPT_BELONGS_IN_OBJDIR\" = \"yes\"; then
-    # special case for '.'
-    if test \"\$thisdir\" = \".\"; then
-      thisdir=\`pwd\`
-    fi
-    # remove .libs from thisdir
-    case \"\$thisdir\" in
-    *[\\\\/]$objdir ) thisdir=\`\$ECHO \"\$thisdir\" | $SED 's%[\\\\/][^\\\\/]*$%%'\` ;;
-    $objdir )   thisdir=. ;;
-    esac
-  fi
-
-  # Try to get the absolute directory name.
-  absdir=\`cd \"\$thisdir\" && pwd\`
-  test -n \"\$absdir\" && thisdir=\"\$absdir\"
-"
-
-	if test yes = "$fast_install"; then
-	  $ECHO "\
-  program=lt-'$outputname'$exeext
-  progdir=\"\$thisdir/$objdir\"
-
-  if test ! -f \"\$progdir/\$program\" ||
-     { file=\`ls -1dt \"\$progdir/\$program\" \"\$progdir/../\$program\" 2>/dev/null | $SED 1q\`; \\
-       test \"X\$file\" != \"X\$progdir/\$program\"; }; then
-
-    file=\"\$\$-\$program\"
-
-    if test ! -d \"\$progdir\"; then
-      $MKDIR \"\$progdir\"
-    else
-      $RM \"\$progdir/\$file\"
-    fi"
-
-	  $ECHO "\
-
-    # relink executable if necessary
-    if test -n \"\$relink_command\"; then
-      if relink_command_output=\`eval \$relink_command 2>&1\`; then :
-      else
-	\$ECHO \"\$relink_command_output\" >&2
-	$RM \"\$progdir/\$file\"
-	exit 1
-      fi
-    fi
-
-    $MV \"\$progdir/\$file\" \"\$progdir/\$program\" 2>/dev/null ||
-    { $RM \"\$progdir/\$program\";
-      $MV \"\$progdir/\$file\" \"\$progdir/\$program\"; }
-    $RM \"\$progdir/\$file\"
-  fi"
-	else
-	  $ECHO "\
-  program='$outputname'
-  progdir=\"\$thisdir/$objdir\"
-"
-	fi
-
-	$ECHO "\
-
-  if test -f \"\$progdir/\$program\"; then"
-
-	# fixup the dll searchpath if we need to.
-	#
-	# Fix the DLL searchpath if we need to.  Do this before prepending
-	# to shlibpath, because on Windows, both are PATH and uninstalled
-	# libraries must come first.
-	if test -n "$dllsearchpath"; then
-	  $ECHO "\
-    # Add the dll search path components to the executable PATH
-    PATH=$dllsearchpath:\$PATH
-"
-	fi
-
-	# Export our shlibpath_var if we have one.
-	if test yes = "$shlibpath_overrides_runpath" && test -n "$shlibpath_var" && test -n "$temp_rpath"; then
-	  $ECHO "\
-    # Add our own library path to $shlibpath_var
-    $shlibpath_var=\"$temp_rpath\$$shlibpath_var\"
-
-    # Some systems cannot cope with colon-terminated $shlibpath_var
-    # The second colon is a workaround for a bug in BeOS R4 sed
-    $shlibpath_var=\`\$ECHO \"\$$shlibpath_var\" | $SED 's/::*\$//'\`
-
-    export $shlibpath_var
-"
-	fi
-
-	$ECHO "\
-    if test \"\$libtool_execute_magic\" != \"$magic\"; then
-      # Run the actual program with our arguments.
-      func_exec_program \${1+\"\$@\"}
-    fi
-  else
-    # The program doesn't exist.
-    \$ECHO \"\$0: error: '\$progdir/\$program' does not exist\" 1>&2
-    \$ECHO \"This script is just a wrapper for \$program.\" 1>&2
-    \$ECHO \"See the $PACKAGE documentation for more information.\" 1>&2
-    exit 1
-  fi
-fi\
-"
-}
-
-
-# func_emit_cwrapperexe_src
-# emit the source code for a wrapper executable on stdout
-# Must ONLY be called from within func_mode_link because
-# it depends on a number of variable set therein.
-func_emit_cwrapperexe_src ()
-{
-	cat <<EOF
-
-/* $cwrappersource - temporary wrapper executable for $objdir/$outputname
-   Generated by $PROGRAM (GNU $PACKAGE) $VERSION
-
-   The $output program cannot be directly executed until all the libtool
-   libraries that it depends on are installed.
-
-   This wrapper executable should never be moved out of the build directory.
-   If it is, it will not operate correctly.
-*/
-EOF
-	    cat <<"EOF"
-#ifdef _MSC_VER
-# define _CRT_SECURE_NO_DEPRECATE 1
-#endif
-#include <stdio.h>
-#include <stdlib.h>
-#if defined _WIN32 && !defined __GNUC__
-# include <direct.h>
-# include <process.h>
-# include <io.h>
-#else
-# include <unistd.h>
-# include <stdint.h>
-# ifdef __CYGWIN__
-#  include <io.h>
-# endif
-#endif
-#include <malloc.h>
-#include <stdarg.h>
-#include <assert.h>
-#include <string.h>
-#include <ctype.h>
-#include <errno.h>
-#include <fcntl.h>
-#include <sys/stat.h>
-
-#define STREQ(s1, s2) (strcmp ((s1), (s2)) == 0)
-
-/* declarations of non-ANSI functions */
-#if defined __MINGW32__
-# ifdef __STRICT_ANSI__
-_CRTIMP int __cdecl _putenv (const char *);
-# endif
-#elif defined __CYGWIN__
-# ifdef __STRICT_ANSI__
-char *realpath (const char *, char *);
-int putenv (char *);
-int setenv (const char *, const char *, int);
-# endif
-/* #elif defined other_platform || defined ... */
-#endif
-
-/* portability defines, excluding path handling macros */
-#if defined _MSC_VER
-# define setmode _setmode
-# define stat    _stat
-# define chmod   _chmod
-# define getcwd  _getcwd
-# define putenv  _putenv
-# define S_IXUSR _S_IEXEC
-#elif defined __MINGW32__
-# define setmode _setmode
-# define stat    _stat
-# define chmod   _chmod
-# define getcwd  _getcwd
-# define putenv  _putenv
-#elif defined __CYGWIN__
-# define HAVE_SETENV
-# define FOPEN_WB "wb"
-/* #elif defined other platforms ... */
-#endif
-
-#if defined PATH_MAX
-# define LT_PATHMAX PATH_MAX
-#elif defined MAXPATHLEN
-# define LT_PATHMAX MAXPATHLEN
-#else
-# define LT_PATHMAX 1024
-#endif
-
-#ifndef S_IXOTH
-# define S_IXOTH 0
-#endif
-#ifndef S_IXGRP
-# define S_IXGRP 0
-#endif
-
-/* path handling portability macros */
-#ifndef DIR_SEPARATOR
-# define DIR_SEPARATOR '/'
-# define PATH_SEPARATOR ':'
-#endif
-
-#if defined _WIN32 || defined __MSDOS__ || defined __DJGPP__ || \
-  defined __OS2__
-# define HAVE_DOS_BASED_FILE_SYSTEM
-# define FOPEN_WB "wb"
-# ifndef DIR_SEPARATOR_2
-#  define DIR_SEPARATOR_2 '\\'
-# endif
-# ifndef PATH_SEPARATOR_2
-#  define PATH_SEPARATOR_2 ';'
-# endif
-#endif
-
-#ifndef DIR_SEPARATOR_2
-# define IS_DIR_SEPARATOR(ch) ((ch) == DIR_SEPARATOR)
-#else /* DIR_SEPARATOR_2 */
-# define IS_DIR_SEPARATOR(ch) \
-	(((ch) == DIR_SEPARATOR) || ((ch) == DIR_SEPARATOR_2))
-#endif /* DIR_SEPARATOR_2 */
-
-#ifndef PATH_SEPARATOR_2
-# define IS_PATH_SEPARATOR(ch) ((ch) == PATH_SEPARATOR)
-#else /* PATH_SEPARATOR_2 */
-# define IS_PATH_SEPARATOR(ch) ((ch) == PATH_SEPARATOR_2)
-#endif /* PATH_SEPARATOR_2 */
-
-#ifndef FOPEN_WB
-# define FOPEN_WB "w"
-#endif
-#ifndef _O_BINARY
-# define _O_BINARY 0
-#endif
-
-#define XMALLOC(type, num)      ((type *) xmalloc ((num) * sizeof(type)))
-#define XFREE(stale) do { \
-  if (stale) { free (stale); stale = 0; } \
-} while (0)
-
-#if defined LT_DEBUGWRAPPER
-static int lt_debug = 1;
-#else
-static int lt_debug = 0;
-#endif
-
-const char *program_name = "libtool-wrapper"; /* in case xstrdup fails */
-
-void *xmalloc (size_t num);
-char *xstrdup (const char *string);
-const char *base_name (const char *name);
-char *find_executable (const char *wrapper);
-char *chase_symlinks (const char *pathspec);
-int make_executable (const char *path);
-int check_executable (const char *path);
-char *strendzap (char *str, const char *pat);
-void lt_debugprintf (const char *file, int line, const char *fmt, ...);
-void lt_fatal (const char *file, int line, const char *message, ...);
-static const char *nonnull (const char *s);
-static const char *nonempty (const char *s);
-void lt_setenv (const char *name, const char *value);
-char *lt_extend_str (const char *orig_value, const char *add, int to_end);
-void lt_update_exe_path (const char *name, const char *value);
-void lt_update_lib_path (const char *name, const char *value);
-char **prepare_spawn (char **argv);
-void lt_dump_script (FILE *f);
-EOF
-
-	    cat <<EOF
-#if __GNUC__ < 4 || (__GNUC__ == 4 && __GNUC_MINOR__ < 5)
-# define externally_visible volatile
-#else
-# define externally_visible __attribute__((externally_visible)) volatile
-#endif
-externally_visible const char * MAGIC_EXE = "$magic_exe";
-const char * LIB_PATH_VARNAME = "$shlibpath_var";
-EOF
-
-	    if test yes = "$shlibpath_overrides_runpath" && test -n "$shlibpath_var" && test -n "$temp_rpath"; then
-              func_to_host_path "$temp_rpath"
-	      cat <<EOF
-const char * LIB_PATH_VALUE   = "$func_to_host_path_result";
-EOF
-	    else
-	      cat <<"EOF"
-const char * LIB_PATH_VALUE   = "";
-EOF
-	    fi
-
-	    if test -n "$dllsearchpath"; then
-              func_to_host_path "$dllsearchpath:"
-	      cat <<EOF
-const char * EXE_PATH_VARNAME = "PATH";
-const char * EXE_PATH_VALUE   = "$func_to_host_path_result";
-EOF
-	    else
-	      cat <<"EOF"
-const char * EXE_PATH_VARNAME = "";
-const char * EXE_PATH_VALUE   = "";
-EOF
-	    fi
-
-	    if test yes = "$fast_install"; then
-	      cat <<EOF
-const char * TARGET_PROGRAM_NAME = "lt-$outputname"; /* hopefully, no .exe */
-EOF
-	    else
-	      cat <<EOF
-const char * TARGET_PROGRAM_NAME = "$outputname"; /* hopefully, no .exe */
-EOF
-	    fi
-
-
-	    cat <<"EOF"
-
-#define LTWRAPPER_OPTION_PREFIX         "--lt-"
-
-static const char *ltwrapper_option_prefix = LTWRAPPER_OPTION_PREFIX;
-static const char *dumpscript_opt       = LTWRAPPER_OPTION_PREFIX "dump-script";
-static const char *debug_opt            = LTWRAPPER_OPTION_PREFIX "debug";
-
-int
-main (int argc, char *argv[])
-{
-  char **newargz;
-  int  newargc;
-  char *tmp_pathspec;
-  char *actual_cwrapper_path;
-  char *actual_cwrapper_name;
-  char *target_name;
-  char *lt_argv_zero;
-  int rval = 127;
-
-  int i;
-
-  program_name = (char *) xstrdup (base_name (argv[0]));
-  newargz = XMALLOC (char *, (size_t) argc + 1);
-
-  /* very simple arg parsing; don't want to rely on getopt
-   * also, copy all non cwrapper options to newargz, except
-   * argz[0], which is handled differently
-   */
-  newargc=0;
-  for (i = 1; i < argc; i++)
-    {
-      if (STREQ (argv[i], dumpscript_opt))
-	{
-EOF
-	    case $host in
-	      *mingw* | *windows* | *cygwin* )
-		# make stdout use "unix" line endings
-		echo "          setmode(1,_O_BINARY);"
-		;;
-	      esac
-
-	    cat <<"EOF"
-	  lt_dump_script (stdout);
-	  return 0;
-	}
-      if (STREQ (argv[i], debug_opt))
-	{
-          lt_debug = 1;
-          continue;
-	}
-      if (STREQ (argv[i], ltwrapper_option_prefix))
-        {
-          /* however, if there is an option in the LTWRAPPER_OPTION_PREFIX
-             namespace, but it is not one of the ones we know about and
-             have already dealt with, above (including dump-script), then
-             report an error. Otherwise, targets might begin to believe
-             they are allowed to use options in the LTWRAPPER_OPTION_PREFIX
-             namespace. The first time any user complains about this, we'll
-             need to make LTWRAPPER_OPTION_PREFIX a configure-time option
-             or a configure.ac-settable value.
-           */
-          lt_fatal (__FILE__, __LINE__,
-		    "unrecognized %s option: '%s'",
-                    ltwrapper_option_prefix, argv[i]);
-        }
-      /* otherwise ... */
-      newargz[++newargc] = xstrdup (argv[i]);
-    }
-  newargz[++newargc] = NULL;
-
-EOF
-	    cat <<EOF
-  /* The GNU banner must be the first non-error debug message */
-  lt_debugprintf (__FILE__, __LINE__, "libtool wrapper (GNU $PACKAGE) $VERSION\n");
-EOF
-	    cat <<"EOF"
-  lt_debugprintf (__FILE__, __LINE__, "(main) argv[0]: %s\n", argv[0]);
-  lt_debugprintf (__FILE__, __LINE__, "(main) program_name: %s\n", program_name);
-
-  tmp_pathspec = find_executable (argv[0]);
-  if (tmp_pathspec == NULL)
-    lt_fatal (__FILE__, __LINE__, "couldn't find %s", argv[0]);
-  lt_debugprintf (__FILE__, __LINE__,
-                  "(main) found exe (before symlink chase) at: %s\n",
-		  tmp_pathspec);
-
-  actual_cwrapper_path = chase_symlinks (tmp_pathspec);
-  lt_debugprintf (__FILE__, __LINE__,
-                  "(main) found exe (after symlink chase) at: %s\n",
-		  actual_cwrapper_path);
-  XFREE (tmp_pathspec);
-
-  actual_cwrapper_name = xstrdup (base_name (actual_cwrapper_path));
-  strendzap (actual_cwrapper_path, actual_cwrapper_name);
-
-  /* wrapper name transforms */
-  strendzap (actual_cwrapper_name, ".exe");
-  tmp_pathspec = lt_extend_str (actual_cwrapper_name, ".exe", 1);
-  XFREE (actual_cwrapper_name);
-  actual_cwrapper_name = tmp_pathspec;
-  tmp_pathspec = 0;
-
-  /* target_name transforms -- use actual target program name; might have lt- prefix */
-  target_name = xstrdup (base_name (TARGET_PROGRAM_NAME));
-  strendzap (target_name, ".exe");
-  tmp_pathspec = lt_extend_str (target_name, ".exe", 1);
-  XFREE (target_name);
-  target_name = tmp_pathspec;
-  tmp_pathspec = 0;
-
-  lt_debugprintf (__FILE__, __LINE__,
-		  "(main) libtool target name: %s\n",
-		  target_name);
-EOF
-
-	    cat <<EOF
-  newargz[0] =
-    XMALLOC (char, (strlen (actual_cwrapper_path) +
-		    strlen ("$objdir") + 1 + strlen (actual_cwrapper_name) + 1));
-  strcpy (newargz[0], actual_cwrapper_path);
-  strcat (newargz[0], "$objdir");
-  strcat (newargz[0], "/");
-EOF
-
-	    cat <<"EOF"
-  /* stop here, and copy so we don't have to do this twice */
-  tmp_pathspec = xstrdup (newargz[0]);
-
-  /* do NOT want the lt- prefix here, so use actual_cwrapper_name */
-  strcat (newargz[0], actual_cwrapper_name);
-
-  /* DO want the lt- prefix here if it exists, so use target_name */
-  lt_argv_zero = lt_extend_str (tmp_pathspec, target_name, 1);
-  XFREE (tmp_pathspec);
-  tmp_pathspec = NULL;
-EOF
-
-	    case $host_os in
-	      mingw* | windows*)
-	    cat <<"EOF"
-  {
-    char* p;
-    while ((p = strchr (newargz[0], '\\')) != NULL)
-      {
-	*p = '/';
-      }
-    while ((p = strchr (lt_argv_zero, '\\')) != NULL)
-      {
-	*p = '/';
-      }
-  }
-EOF
-	    ;;
-	    esac
-
-	    cat <<"EOF"
-  XFREE (target_name);
-  XFREE (actual_cwrapper_path);
-  XFREE (actual_cwrapper_name);
-
-  lt_setenv ("BIN_SH", "xpg4"); /* for Tru64 */
-  lt_setenv ("DUALCASE", "1");  /* for MSK sh */
-  /* Update the DLL searchpath.  EXE_PATH_VALUE ($dllsearchpath) must
-     be prepended before (that is, appear after) LIB_PATH_VALUE ($temp_rpath)
-     because on Windows, both *_VARNAMEs are PATH but uninstalled
-     libraries must come first. */
-  lt_update_exe_path (EXE_PATH_VARNAME, EXE_PATH_VALUE);
-  lt_update_lib_path (LIB_PATH_VARNAME, LIB_PATH_VALUE);
-
-  lt_debugprintf (__FILE__, __LINE__, "(main) lt_argv_zero: %s\n",
-		  nonnull (lt_argv_zero));
-  for (i = 0; i < newargc; i++)
-    {
-      lt_debugprintf (__FILE__, __LINE__, "(main) newargz[%d]: %s\n",
-		      i, nonnull (newargz[i]));
-    }
-
-EOF
-
-	    case $host_os in
-	      mingw* | windows*)
-		cat <<"EOF"
-  /* execv doesn't actually work on mingw as expected on unix */
-  newargz = prepare_spawn (newargz);
-  rval = (int) _spawnv (_P_WAIT, lt_argv_zero, (const char * const *) newargz);
-  if (rval == -1)
-    {
-      /* failed to start process */
-      lt_debugprintf (__FILE__, __LINE__,
-		      "(main) failed to launch target \"%s\": %s\n",
-		      lt_argv_zero, nonnull (strerror (errno)));
-      return 127;
-    }
-  return rval;
-EOF
-		;;
-	      *)
-		cat <<"EOF"
-  execv (lt_argv_zero, newargz);
-  return rval; /* =127, but avoids unused variable warning */
-EOF
-		;;
-	    esac
-
-	    cat <<"EOF"
-}
-
-void *
-xmalloc (size_t num)
-{
-  void *p = (void *) malloc (num);
-  if (!p)
-    lt_fatal (__FILE__, __LINE__, "memory exhausted");
-
-  return p;
-}
-
-char *
-xstrdup (const char *string)
-{
-  return string ? strcpy ((char *) xmalloc (strlen (string) + 1),
-			  string) : NULL;
-}
-
-const char *
-base_name (const char *name)
-{
-  const char *base;
-
-#if defined HAVE_DOS_BASED_FILE_SYSTEM
-  /* Skip over the disk name in MSDOS pathnames. */
-  if (isalpha ((unsigned char) name[0]) && name[1] == ':')
-    name += 2;
-#endif
-
-  for (base = name; *name; name++)
-    if (IS_DIR_SEPARATOR (*name))
-      base = name + 1;
-  return base;
-}
-
-int
-check_executable (const char *path)
-{
-  struct stat st;
-
-  lt_debugprintf (__FILE__, __LINE__, "(check_executable): %s\n",
-                  nonempty (path));
-  if ((!path) || (!*path))
-    return 0;
-
-  if ((stat (path, &st) >= 0)
-      && (st.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH)))
-    return 1;
-  else
-    return 0;
-}
-
-int
-make_executable (const char *path)
-{
-  int rval = 0;
-  struct stat st;
-
-  lt_debugprintf (__FILE__, __LINE__, "(make_executable): %s\n",
-                  nonempty (path));
-  if ((!path) || (!*path))
-    return 0;
-
-  if (stat (path, &st) >= 0)
-    {
-      rval = chmod (path, st.st_mode | S_IXOTH | S_IXGRP | S_IXUSR);
-    }
-  return rval;
-}
-
-/* Searches for the full path of the wrapper.  Returns
-   newly allocated full path name if found, NULL otherwise
-   Does not chase symlinks, even on platforms that support them.
-*/
-char *
-find_executable (const char *wrapper)
-{
-  int has_slash = 0;
-  const char *p;
-  const char *p_next;
-  /* static buffer for getcwd */
-  char tmp[LT_PATHMAX + 1];
-  size_t tmp_len;
-  char *concat_name;
-
-  lt_debugprintf (__FILE__, __LINE__, "(find_executable): %s\n",
-                  nonempty (wrapper));
-
-  if ((wrapper == NULL) || (*wrapper == '\0'))
-    return NULL;
-
-  /* Absolute path? */
-#if defined HAVE_DOS_BASED_FILE_SYSTEM
-  if (isalpha ((unsigned char) wrapper[0]) && wrapper[1] == ':')
-    {
-      concat_name = xstrdup (wrapper);
-      if (check_executable (concat_name))
-	return concat_name;
-      XFREE (concat_name);
-    }
-  else
-    {
-#endif
-      if (IS_DIR_SEPARATOR (wrapper[0]))
-	{
-	  concat_name = xstrdup (wrapper);
-	  if (check_executable (concat_name))
-	    return concat_name;
-	  XFREE (concat_name);
-	}
-#if defined HAVE_DOS_BASED_FILE_SYSTEM
-    }
-#endif
-
-  for (p = wrapper; *p; p++)
-    if (*p == '/')
-      {
-	has_slash = 1;
-	break;
-      }
-  if (!has_slash)
-    {
-      /* no slashes; search PATH */
-      const char *path = getenv ("PATH");
-      if (path != NULL)
-	{
-	  for (p = path; *p; p = p_next)
-	    {
-	      const char *q;
-	      size_t p_len;
-	      for (q = p; *q; q++)
-		if (IS_PATH_SEPARATOR (*q))
-		  break;
-	      p_len = (size_t) (q - p);
-	      p_next = (*q == '\0' ? q : q + 1);
-	      if (p_len == 0)
-		{
-		  /* empty path: current directory */
-		  if (getcwd (tmp, LT_PATHMAX) == NULL)
-		    lt_fatal (__FILE__, __LINE__, "getcwd failed: %s",
-                              nonnull (strerror (errno)));
-		  tmp_len = strlen (tmp);
-		  concat_name =
-		    XMALLOC (char, tmp_len + 1 + strlen (wrapper) + 1);
-		  memcpy (concat_name, tmp, tmp_len);
-		  concat_name[tmp_len] = '/';
-		  strcpy (concat_name + tmp_len + 1, wrapper);
-		}
-	      else
-		{
-		  concat_name =
-		    XMALLOC (char, p_len + 1 + strlen (wrapper) + 1);
-		  memcpy (concat_name, p, p_len);
-		  concat_name[p_len] = '/';
-		  strcpy (concat_name + p_len + 1, wrapper);
-		}
-	      if (check_executable (concat_name))
-		return concat_name;
-	      XFREE (concat_name);
-	    }
-	}
-      /* not found in PATH; assume curdir */
-    }
-  /* Relative path | not found in path: prepend cwd */
-  if (getcwd (tmp, LT_PATHMAX) == NULL)
-    lt_fatal (__FILE__, __LINE__, "getcwd failed: %s",
-              nonnull (strerror (errno)));
-  tmp_len = strlen (tmp);
-  concat_name = XMALLOC (char, tmp_len + 1 + strlen (wrapper) + 1);
-  memcpy (concat_name, tmp, tmp_len);
-  concat_name[tmp_len] = '/';
-  strcpy (concat_name + tmp_len + 1, wrapper);
-
-  if (check_executable (concat_name))
-    return concat_name;
-  XFREE (concat_name);
-  return NULL;
-}
-
-char *
-chase_symlinks (const char *pathspec)
-{
-#ifndef S_ISLNK
-  return xstrdup (pathspec);
-#else
-  char buf[LT_PATHMAX];
-  struct stat s;
-  char *tmp_pathspec = xstrdup (pathspec);
-  char *p;
-  int has_symlinks = 0;
-  while (strlen (tmp_pathspec) && !has_symlinks)
-    {
-      lt_debugprintf (__FILE__, __LINE__,
-		      "checking path component for symlinks: %s\n",
-		      tmp_pathspec);
-      if (lstat (tmp_pathspec, &s) == 0)
-	{
-	  if (S_ISLNK (s.st_mode) != 0)
-	    {
-	      has_symlinks = 1;
-	      break;
-	    }
-
-	  /* search backwards for last DIR_SEPARATOR */
-	  p = tmp_pathspec + strlen (tmp_pathspec) - 1;
-	  while ((p > tmp_pathspec) && (!IS_DIR_SEPARATOR (*p)))
-	    p--;
-	  if ((p == tmp_pathspec) && (!IS_DIR_SEPARATOR (*p)))
-	    {
-	      /* no more DIR_SEPARATORS left */
-	      break;
-	    }
-	  *p = '\0';
-	}
-      else
-	{
-	  lt_fatal (__FILE__, __LINE__,
-		    "error accessing file \"%s\": %s",
-		    tmp_pathspec, nonnull (strerror (errno)));
-	}
-    }
-  XFREE (tmp_pathspec);
-
-  if (!has_symlinks)
-    {
-      return xstrdup (pathspec);
-    }
-
-  tmp_pathspec = realpath (pathspec, buf);
-  if (tmp_pathspec == 0)
-    {
-      lt_fatal (__FILE__, __LINE__,
-		"could not follow symlinks for %s", pathspec);
-    }
-  return xstrdup (tmp_pathspec);
-#endif
-}
-
-char *
-strendzap (char *str, const char *pat)
-{
-  size_t len, patlen;
-
-  assert (str != NULL);
-  assert (pat != NULL);
-
-  len = strlen (str);
-  patlen = strlen (pat);
-
-  if (patlen <= len)
-    {
-      str += len - patlen;
-      if (STREQ (str, pat))
-	*str = '\0';
-    }
-  return str;
-}
-
-void
-lt_debugprintf (const char *file, int line, const char *fmt, ...)
-{
-  va_list args;
-  if (lt_debug)
-    {
-      (void) fprintf (stderr, "%s:%s:%d: ", program_name, file, line);
-      va_start (args, fmt);
-      (void) vfprintf (stderr, fmt, args);
-      va_end (args);
-    }
-}
-
-static void
-lt_error_core (int exit_status, const char *file,
-	       int line, const char *mode,
-	       const char *message, va_list ap)
-{
-  fprintf (stderr, "%s:%s:%d: %s: ", program_name, file, line, mode);
-  vfprintf (stderr, message, ap);
-  fprintf (stderr, ".\n");
-
-  if (exit_status >= 0)
-    exit (exit_status);
-}
-
-void
-lt_fatal (const char *file, int line, const char *message, ...)
-{
-  va_list ap;
-  va_start (ap, message);
-  lt_error_core (EXIT_FAILURE, file, line, "FATAL", message, ap);
-  va_end (ap);
-}
-
-static const char *
-nonnull (const char *s)
-{
-  return s ? s : "(null)";
-}
-
-static const char *
-nonempty (const char *s)
-{
-  return (s && !*s) ? "(empty)" : nonnull (s);
-}
-
-void
-lt_setenv (const char *name, const char *value)
-{
-  lt_debugprintf (__FILE__, __LINE__,
-		  "(lt_setenv) setting '%s' to '%s'\n",
-                  nonnull (name), nonnull (value));
-  {
-#ifdef HAVE_SETENV
-    /* always make a copy, for consistency with !HAVE_SETENV */
-    char *str = xstrdup (value);
-    setenv (name, str, 1);
-#else
-    size_t len = strlen (name) + 1 + strlen (value) + 1;
-    char *str = XMALLOC (char, len);
-    sprintf (str, "%s=%s", name, value);
-    if (putenv (str) != EXIT_SUCCESS)
-      {
-        XFREE (str);
-      }
-#endif
-  }
-}
-
-char *
-lt_extend_str (const char *orig_value, const char *add, int to_end)
-{
-  char *new_value;
-  if (orig_value && *orig_value)
-    {
-      size_t orig_value_len = strlen (orig_value);
-      size_t add_len = strlen (add);
-      new_value = XMALLOC (char, add_len + orig_value_len + 1);
-      if (to_end)
-        {
-          strcpy (new_value, orig_value);
-          strcpy (new_value + orig_value_len, add);
-        }
-      else
-        {
-          strcpy (new_value, add);
-          strcpy (new_value + add_len, orig_value);
-        }
-    }
-  else
-    {
-      new_value = xstrdup (add);
-    }
-  return new_value;
-}
-
-void
-lt_update_exe_path (const char *name, const char *value)
-{
-  lt_debugprintf (__FILE__, __LINE__,
-		  "(lt_update_exe_path) modifying '%s' by prepending '%s'\n",
-                  nonnull (name), nonnull (value));
-
-  if (name && *name && value && *value)
-    {
-      char *new_value = lt_extend_str (getenv (name), value, 0);
-      /* some systems can't cope with a ':'-terminated path #' */
-      size_t len = strlen (new_value);
-      while ((len > 0) && IS_PATH_SEPARATOR (new_value[len-1]))
-        {
-          new_value[--len] = '\0';
-        }
-      lt_setenv (name, new_value);
-      XFREE (new_value);
-    }
-}
-
-void
-lt_update_lib_path (const char *name, const char *value)
-{
-  lt_debugprintf (__FILE__, __LINE__,
-		  "(lt_update_lib_path) modifying '%s' by prepending '%s'\n",
-                  nonnull (name), nonnull (value));
-
-  if (name && *name && value && *value)
-    {
-      char *new_value = lt_extend_str (getenv (name), value, 0);
-      lt_setenv (name, new_value);
-      XFREE (new_value);
-    }
-}
-
-EOF
-	    case $host_os in
-	      mingw* | windows*)
-		cat <<"EOF"
-
-/* Prepares an argument vector before calling spawn().
-   Note that spawn() does not by itself call the command interpreter
-     (getenv ("COMSPEC") != NULL ? getenv ("COMSPEC") :
-      ({ OSVERSIONINFO v; v.dwOSVersionInfoSize = sizeof(OSVERSIONINFO);
-         GetVersionEx(&v);
-         v.dwPlatformId == VER_PLATFORM_WIN32_NT;
-      }) ? "cmd.exe" : "command.com").
-   Instead it simply concatenates the arguments, separated by ' ', and calls
-   CreateProcess().  We must quote the arguments since Win32 CreateProcess()
-   interprets characters like ' ', '\t', '\\', '"' (but not '<' and '>') in a
-   special way:
-   - Space and tab are interpreted as delimiters. They are not treated as
-     delimiters if they are surrounded by double quotes: "...".
-   - Unescaped double quotes are removed from the input. Their only effect is
-     that within double quotes, space and tab are treated like normal
-     characters.
-   - Backslashes not followed by double quotes are not special.
-   - But 2*n+1 backslashes followed by a double quote become
-     n backslashes followed by a double quote (n >= 0):
-       \" -> "
-       \\\" -> \"
-       \\\\\" -> \\"
- */
-#define SHELL_SPECIAL_CHARS "\"\\ \001\002\003\004\005\006\007\010\011\012\013\014\015\016\017\020\021\022\023\024\025\026\027\030\031\032\033\034\035\036\037"
-#define SHELL_SPACE_CHARS " \001\002\003\004\005\006\007\010\011\012\013\014\015\016\017\020\021\022\023\024\025\026\027\030\031\032\033\034\035\036\037"
-char **
-prepare_spawn (char **argv)
-{
-  size_t argc;
-  char **new_argv;
-  size_t i;
-
-  /* Count number of arguments.  */
-  for (argc = 0; argv[argc] != NULL; argc++)
-    ;
-
-  /* Allocate new argument vector.  */
-  new_argv = XMALLOC (char *, argc + 1);
-
-  /* Put quoted arguments into the new argument vector.  */
-  for (i = 0; i < argc; i++)
-    {
-      const char *string = argv[i];
-
-      if (string[0] == '\0')
-	new_argv[i] = xstrdup ("\"\"");
-      else if (strpbrk (string, SHELL_SPECIAL_CHARS) != NULL)
-	{
-	  int quote_around = (strpbrk (string, SHELL_SPACE_CHARS) != NULL);
-	  size_t length;
-	  unsigned int backslashes;
-	  const char *s;
-	  char *quoted_string;
-	  char *p;
-
-	  length = 0;
-	  backslashes = 0;
-	  if (quote_around)
-	    length++;
-	  for (s = string; *s != '\0'; s++)
-	    {
-	      char c = *s;
-	      if (c == '"')
-		length += backslashes + 1;
-	      length++;
-	      if (c == '\\')
-		backslashes++;
-	      else
-		backslashes = 0;
-	    }
-	  if (quote_around)
-	    length += backslashes + 1;
-
-	  quoted_string = XMALLOC (char, length + 1);
-
-	  p = quoted_string;
-	  backslashes = 0;
-	  if (quote_around)
-	    *p++ = '"';
-	  for (s = string; *s != '\0'; s++)
-	    {
-	      char c = *s;
-	      if (c == '"')
-		{
-		  unsigned int j;
-		  for (j = backslashes + 1; j > 0; j--)
-		    *p++ = '\\';
-		}
-	      *p++ = c;
-	      if (c == '\\')
-		backslashes++;
-	      else
-		backslashes = 0;
-	    }
-	  if (quote_around)
-	    {
-	      unsigned int j;
-	      for (j = backslashes; j > 0; j--)
-		*p++ = '\\';
-	      *p++ = '"';
-	    }
-	  *p = '\0';
-
-	  new_argv[i] = quoted_string;
-	}
-      else
-	new_argv[i] = (char *) string;
-    }
-  new_argv[argc] = NULL;
-
-  return new_argv;
-}
-EOF
-		;;
-	    esac
-
-            cat <<"EOF"
-void lt_dump_script (FILE* f)
-{
-EOF
-	    func_emit_wrapper yes |
-	      $SED -n -e '
-s/^\(.\{79\}\)\(..*\)/\1\
-\2/
-h
-s/\([\\"]\)/\\\1/g
-s/$/\\n/
-s/\([^\n]*\).*/  fputs ("\1", f);/p
-g
-D'
-            cat <<"EOF"
-}
-EOF
-}
-# end: func_emit_cwrapperexe_src
-
-# func_win32_import_lib_p ARG
-# True if ARG is an import lib, as indicated by $file_magic_cmd
-func_win32_import_lib_p ()
-{
-    $debug_cmd
-
-    case `eval $file_magic_cmd \"\$1\" 2>/dev/null | $SED -e 10q` in
-    *import*) : ;;
-    *) false ;;
-    esac
-}
-
-# func_suncc_cstd_abi
-# !!ONLY CALL THIS FOR SUN CC AFTER $compile_command IS FULLY EXPANDED!!
-# Several compiler flags select an ABI that is incompatible with the
-# Cstd library. Avoid specifying it if any are in CXXFLAGS.
-func_suncc_cstd_abi ()
-{
-    $debug_cmd
-
-    case " $compile_command " in
-    *" -compat=g "*|*\ -std=c++[0-9][0-9]\ *|*" -library=stdcxx4 "*|*" -library=stlport4 "*)
-      suncc_use_cstd_abi=no
-      ;;
-    *)
-      suncc_use_cstd_abi=yes
-      ;;
-    esac
-}
-
-# func_mode_link arg...
-func_mode_link ()
-{
-    $debug_cmd
-
-    case $host in
-    *-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-cegcc*)
-      # It is impossible to link a dll without this setting, and
-      # we shouldn't force the makefile maintainer to figure out
-      # what system we are compiling for in order to pass an extra
-      # flag for every libtool invocation.
-      # allow_undefined=no
-
-      # FIXME: Unfortunately, there are problems with the above when trying
-      # to make a dll that has undefined symbols, in which case not
-      # even a static library is built.  For now, we need to specify
-      # -no-undefined on the libtool link line when we can be certain
-      # that all symbols are satisfied, otherwise we get a static library.
-      allow_undefined=yes
-      ;;
-    *)
-      allow_undefined=yes
-      ;;
-    esac
-    libtool_args=$nonopt
-    base_compile="$nonopt $@"
-    compile_command=$nonopt
-    finalize_command=$nonopt
-
-    compile_rpath=
-    compile_rpath_tail=
-    finalize_rpath=
-    compile_shlibpath=
-    finalize_shlibpath=
-    convenience=
-    old_convenience=
-    deplibs=
-    old_deplibs=
-    compiler_flags=
-    linker_flags=
-    dllsearchpath=
-    lib_search_path=`pwd`
-    inst_prefix_dir=
-    new_inherited_linker_flags=
-
-    avoid_version=no
-    bindir=
-    dlfiles=
-    dlprefiles=
-    dlself=no
-    export_dynamic=no
-    export_symbols=
-    export_symbols_regex=
-    generated=
-    libobjs=
-    ltlibs=
-    module=no
-    no_install=no
-    objs=
-    os2dllname=
-    non_pic_objects=
-    precious_files_regex=
-    prefer_static_libs=no
-    preload=false
-    prev=
-    prevarg=
-    release=
-    rpath=
-    xrpath=
-    perm_rpath=
-    temp_rpath=
-    temp_rpath_tail=
-    thread_safe=no
-    vinfo=
-    vinfo_number=no
-    weak_libs=
-    rpath_arg=
-    single_module=$wl-single_module
-    func_infer_tag $base_compile
-
-    # We need to know -static, to get the right output filenames.
-    for arg
-    do
-      case $arg in
-      -shared)
-	test yes != "$build_libtool_libs" \
-	  && func_fatal_configuration "cannot build a shared library"
-	build_old_libs=no
-	break
-	;;
-      -all-static | -static | -static-libtool-libs)
-	case $arg in
-	-all-static)
-	  if test yes = "$build_libtool_libs" && test -z "$link_static_flag"; then
-	    func_warning "complete static linking is impossible in this configuration"
-	  fi
-	  if test -n "$link_static_flag"; then
-	    dlopen_self=$dlopen_self_static
-	  fi
-	  prefer_static_libs=yes
-	  ;;
-	-static)
-	  if test -z "$pic_flag" && test -n "$link_static_flag"; then
-	    dlopen_self=$dlopen_self_static
-	  fi
-	  prefer_static_libs=built
-	  ;;
-	-static-libtool-libs)
-	  if test -z "$pic_flag" && test -n "$link_static_flag"; then
-	    dlopen_self=$dlopen_self_static
-	  fi
-	  prefer_static_libs=yes
-	  ;;
-	esac
-	build_libtool_libs=no
-	build_old_libs=yes
-	break
-	;;
-      esac
-    done
-
-    # See if our shared archives depend on static archives.
-    test -n "$old_archive_from_new_cmds" && build_old_libs=yes
-
-    # Go through the arguments, transforming them on the way.
-    while test "$#" -gt 0; do
-      arg=$1
-      shift
-      func_quote_arg pretty,unquoted "$arg"
-      qarg=$func_quote_arg_unquoted_result
-      func_append libtool_args " $func_quote_arg_result"
-
-      # If the previous option needs an argument, assign it.
-      if test -n "$prev"; then
-	case $prev in
-	output)
-	  func_append compile_command " @OUTPUT@"
-	  func_append finalize_command " @OUTPUT@"
-	  ;;
-	esac
-
-	case $prev in
-	bindir)
-	  bindir=$arg
-	  prev=
-	  continue
-	  ;;
-	dlfiles|dlprefiles)
-	  $preload || {
-	    # Add the symbol object into the linking commands.
-	    func_append compile_command " @SYMFILE@"
-	    func_append finalize_command " @SYMFILE@"
-	    preload=:
-	  }
-	  case $arg in
-	  *.la | *.lo) ;;  # We handle these cases below.
-	  force)
-	    if test no = "$dlself"; then
-	      dlself=needless
-	      export_dynamic=yes
-	    fi
-	    prev=
-	    continue
-	    ;;
-	  self)
-	    if test dlprefiles = "$prev"; then
-	      dlself=yes
-	    elif test dlfiles = "$prev" && test yes != "$dlopen_self"; then
-	      dlself=yes
-	    else
-	      dlself=needless
-	      export_dynamic=yes
-	    fi
-	    prev=
-	    continue
-	    ;;
-	  *)
-	    if test dlfiles = "$prev"; then
-	      func_append dlfiles " $arg"
-	    else
-	      func_append dlprefiles " $arg"
-	    fi
-	    prev=
-	    continue
-	    ;;
-	  esac
-	  ;;
-	expsyms)
-	  export_symbols=$arg
-	  test -f "$arg" \
-	    || func_fatal_error "symbol file '$arg' does not exist"
-	  prev=
-	  continue
-	  ;;
-	expsyms_regex)
-	  export_symbols_regex=$arg
-	  prev=
-	  continue
-	  ;;
-	framework)
-	  case $host in
-	    *-*-darwin*)
-	      case "$deplibs " in
-		*" $qarg.ltframework "*) ;;
-		*) func_append deplibs " $qarg.ltframework" # this is fixed later
-		   ;;
-	      esac
-	      ;;
-	  esac
-	  prev=
-	  continue
-	  ;;
-	inst_prefix)
-	  inst_prefix_dir=$arg
-	  prev=
-	  continue
-	  ;;
-	mllvm)
-	  # Clang does not use LLVM to link, so we can simply discard any
-	  # '-mllvm $arg' options when doing the link step.
-	  prev=
-	  continue
-	  ;;
-	objectlist)
-	  if test -f "$arg"; then
-	    save_arg=$arg
-	    moreargs=
-	    for fil in `cat "$save_arg"`
-	    do
-#	      func_append moreargs " $fil"
-	      arg=$fil
-	      # A libtool-controlled object.
-
-	      # Check to see that this really is a libtool object.
-	      if func_lalib_unsafe_p "$arg"; then
-		pic_object=
-		non_pic_object=
-
-		# Read the .lo file
-		func_source "$arg"
-
-		if test -z "$pic_object" ||
-		   test -z "$non_pic_object" ||
-		   test none = "$pic_object" &&
-		   test none = "$non_pic_object"; then
-		  func_fatal_error "cannot find name of object for '$arg'"
-		fi
-
-		# Extract subdirectory from the argument.
-		func_dirname "$arg" "/" ""
-		xdir=$func_dirname_result
-
-		if test none != "$pic_object"; then
-		  # Prepend the subdirectory the object is found in.
-		  pic_object=$xdir$pic_object
-
-		  if test dlfiles = "$prev"; then
-		    if test yes = "$build_libtool_libs" && test yes = "$dlopen_support"; then
-		      func_append dlfiles " $pic_object"
-		      prev=
-		      continue
-		    else
-		      # If libtool objects are unsupported, then we need to preload.
-		      prev=dlprefiles
-		    fi
-		  fi
-
-		  # CHECK ME:  I think I busted this.  -Ossama
-		  if test dlprefiles = "$prev"; then
-		    # Preload the old-style object.
-		    func_append dlprefiles " $pic_object"
-		    prev=
-		  fi
-
-		  # A PIC object.
-		  func_append libobjs " $pic_object"
-		  arg=$pic_object
-		fi
-
-		# Non-PIC object.
-		if test none != "$non_pic_object"; then
-		  # Prepend the subdirectory the object is found in.
-		  non_pic_object=$xdir$non_pic_object
-
-		  # A standard non-PIC object
-		  func_append non_pic_objects " $non_pic_object"
-		  if test -z "$pic_object" || test none = "$pic_object"; then
-		    arg=$non_pic_object
-		  fi
-		else
-		  # If the PIC object exists, use it instead.
-		  # $xdir was prepended to $pic_object above.
-		  non_pic_object=$pic_object
-		  func_append non_pic_objects " $non_pic_object"
-		fi
-	      else
-		# Only an error if not doing a dry-run.
-		if $opt_dry_run; then
-		  # Extract subdirectory from the argument.
-		  func_dirname "$arg" "/" ""
-		  xdir=$func_dirname_result
-
-		  func_lo2o "$arg"
-		  pic_object=$xdir$objdir/$func_lo2o_result
-		  non_pic_object=$xdir$func_lo2o_result
-		  func_append libobjs " $pic_object"
-		  func_append non_pic_objects " $non_pic_object"
-	        else
-		  func_fatal_error "'$arg' is not a valid libtool object"
-		fi
-	      fi
-	    done
-	  else
-	    func_fatal_error "link input file '$arg' does not exist"
-	  fi
-	  arg=$save_arg
-	  prev=
-	  continue
-	  ;;
-	os2dllname)
-	  os2dllname=$arg
-	  prev=
-	  continue
-	  ;;
-	precious_regex)
-	  precious_files_regex=$arg
-	  prev=
-	  continue
-	  ;;
-	release)
-	  release=-$arg
-	  prev=
-	  continue
-	  ;;
-	rpath | xrpath)
-	  # We need an absolute path.
-	  case $arg in
-	  [\\/]* | [A-Za-z]:[\\/]*) ;;
-	  *)
-	    func_fatal_error "argument to -rpath is not absolute: $arg"
-	    ;;
-	  esac
-	  if test rpath = "$prev"; then
-	    case "$rpath " in
-	    *" $arg "*) ;;
-	    *) func_append rpath " $arg" ;;
-	    esac
-	  else
-	    case "$xrpath " in
-	    *" $arg "*) ;;
-	    *) func_append xrpath " $arg" ;;
-	    esac
-	  fi
-	  prev=
-	  continue
-	  ;;
-	shrext)
-	  shrext_cmds=$arg
-	  prev=
-	  continue
-	  ;;
-	weak)
-	  func_append weak_libs " $arg"
-	  prev=
-	  continue
-	  ;;
-	xassembler)
-	  func_append compiler_flags " -Xassembler $qarg"
-	  prev=
-	  func_append compile_command " -Xassembler $qarg"
-	  func_append finalize_command " -Xassembler $qarg"
-	  continue
-	  ;;
-	xcclinker)
-	  func_append linker_flags " $qarg"
-	  func_append compiler_flags " $qarg"
-	  prev=
-	  func_append compile_command " $qarg"
-	  func_append finalize_command " $qarg"
-	  continue
-	  ;;
-	xcompiler)
-	  func_append compiler_flags " $qarg"
-	  prev=
-	  func_append compile_command " $qarg"
-	  func_append finalize_command " $qarg"
-	  continue
-	  ;;
-	xlinker)
-	  func_append linker_flags " $qarg"
-	  func_append compiler_flags " $wl$qarg"
-	  prev=
-	  func_append compile_command " $wl$qarg"
-	  func_append finalize_command " $wl$qarg"
-	  continue
-	  ;;
-	*)
-	  eval "$prev=\"\$arg\""
-	  prev=
-	  continue
-	  ;;
-	esac
-      fi # test -n "$prev"
-
-      prevarg=$arg
-
-      case $arg in
-      -all-static)
-	if test -n "$link_static_flag"; then
-	  # See comment for -static flag below, for more details.
-	  func_append compile_command " $link_static_flag"
-	  func_append finalize_command " $link_static_flag"
-	fi
-	continue
-	;;
-
-      -allow-undefined)
-	# FIXME: remove this flag sometime in the future.
-	func_fatal_error "'-allow-undefined' must not be used because it is the default"
-	;;
-
-      -avoid-version)
-	avoid_version=yes
-	continue
-	;;
-
-      -bindir)
-	prev=bindir
-	continue
-	;;
-
-      -dlopen)
-	prev=dlfiles
-	continue
-	;;
-
-      -dlpreopen)
-	prev=dlprefiles
-	continue
-	;;
-
-      -export-dynamic)
-	export_dynamic=yes
-	continue
-	;;
-
-      -export-symbols | -export-symbols-regex)
-	if test -n "$export_symbols" || test -n "$export_symbols_regex"; then
-	  func_fatal_error "more than one -exported-symbols argument is not allowed"
-	fi
-	if test X-export-symbols = "X$arg"; then
-	  prev=expsyms
-	else
-	  prev=expsyms_regex
-	fi
-	continue
-	;;
-
-      -framework)
-	prev=framework
-	continue
-	;;
-
-      -inst-prefix-dir)
-	prev=inst_prefix
-	continue
-	;;
-
-      # The native IRIX linker understands -LANG:*, -LIST:* and -LNO:*
-      # so, if we see these flags be careful not to treat them like -L
-      -L[A-Z][A-Z]*:*)
-	case $with_gcc/$host in
-	no/*-*-irix* | /*-*-irix*)
-	  func_append compile_command " $arg"
-	  func_append finalize_command " $arg"
-	  ;;
-	esac
-	continue
-	;;
-
-      -L*)
-	func_stripname "-L" '' "$arg"
-	if test -z "$func_stripname_result"; then
-	  if test "$#" -gt 0; then
-	    func_fatal_error "require no space between '-L' and '$1'"
-	  else
-	    func_fatal_error "need path for '-L' option"
-	  fi
-	fi
-	func_resolve_sysroot "$func_stripname_result"
-	dir=$func_resolve_sysroot_result
-	# We need an absolute path.
-	case $dir in
-	[\\/]* | [A-Za-z]:[\\/]*) ;;
-	*)
-	  absdir=`cd "$dir" && pwd`
-	  test -z "$absdir" && \
-	    func_fatal_error "cannot determine absolute directory name of '$dir'"
-	  dir=$absdir
-	  ;;
-	esac
-	case "$deplibs " in
-	*" -L$dir "* | *" $arg "*)
-	  # Will only happen for absolute or sysroot arguments
-	  ;;
-	*)
-	  # Preserve sysroot, but never include relative directories
-	  case $dir in
-	    [\\/]* | [A-Za-z]:[\\/]* | =*) func_append deplibs " $arg" ;;
-	    *) func_append deplibs " -L$dir" ;;
-	  esac
-	  func_append lib_search_path " $dir"
-	  ;;
-	esac
-	case $host in
-	*-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-cegcc*)
-	  testbindir=`$ECHO "$dir" | $SED 's*/lib$*/bin*'`
-	  case :$dllsearchpath: in
-	  *":$dir:"*) ;;
-	  ::) dllsearchpath=$dir;;
-	  *) func_append dllsearchpath ":$dir";;
-	  esac
-	  case :$dllsearchpath: in
-	  *":$testbindir:"*) ;;
-	  ::) dllsearchpath=$testbindir;;
-	  *) func_append dllsearchpath ":$testbindir";;
-	  esac
-	  ;;
-	esac
-	continue
-	;;
-
-      -l*)
-	if test X-lc = "X$arg" || test X-lm = "X$arg"; then
-	  case $host in
-	  *-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-beos* | *-cegcc* | *-*-haiku*)
-	    # These systems don't actually have a C or math library (as such)
-	    continue
-	    ;;
-	  *-*-os2*)
-	    # These systems don't actually have a C library (as such)
-	    test X-lc = "X$arg" && continue
-	    ;;
-	  *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-midnightbsd*)
-	    # Do not include libc due to us having libc/libc_r.
-	    test X-lc = "X$arg" && continue
-	    ;;
-	  *-*-rhapsody* | *-*-darwin1.[012])
-	    # Rhapsody C and math libraries are in the System framework
-	    func_append deplibs " System.ltframework"
-	    continue
-	    ;;
-	  *-*-sco3.2v5* | *-*-sco5v6*)
-	    # Causes problems with __ctype
-	    test X-lc = "X$arg" && continue
-	    ;;
-	  *-*-sysv4.2uw2* | *-*-sysv5* | *-*-unixware* | *-*-OpenUNIX*)
-	    # Compiler inserts libc in the correct place for threads to work
-	    test X-lc = "X$arg" && continue
-	    ;;
-	  esac
-	elif test X-lc_r = "X$arg"; then
-	 case $host in
-	 *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-midnightbsd*)
-	   # Do not include libc_r directly, use -pthread flag.
-	   continue
-	   ;;
-	 esac
-	fi
-	func_append deplibs " $arg"
-	continue
-	;;
-
-      -mllvm)
-	prev=mllvm
-	continue
-	;;
-
-      -module)
-	module=yes
-	continue
-	;;
-
-      # Tru64 UNIX uses -model [arg] to determine the layout of C++
-      # classes, name mangling, and exception handling.
-      # Darwin uses the -arch flag to determine output architecture.
-      # -q <option> for IBM XL C/C++ compiler.
-      -model|-arch|-isysroot|--sysroot|-q)
-	func_append compiler_flags " $arg"
-	func_append compile_command " $arg"
-	func_append finalize_command " $arg"
-	prev=xcompiler
-	continue
-	;;
-     # Solaris ld rejects as of 11.4. Refer to Oracle bug 22985199.
-     -pthread)
-	case $host in
-	  *solaris2*) ;;
-	  *)
-	    case "$new_inherited_linker_flags " in
-	        *" $arg "*) ;;
-	        * ) func_append new_inherited_linker_flags " $arg" ;;
-	    esac
-	  ;;
-	esac
-	continue
-	;;
-      -mt|-mthreads|-kthread|-Kthread|-pthreads|--thread-safe \
-      |-threads|-fopenmp|-fopenmp=*|-openmp|-mp|-xopenmp|-omp|-qsmp=*)
-	func_append compiler_flags " $arg"
-	func_append compile_command " $arg"
-	func_append finalize_command " $arg"
-	case "$new_inherited_linker_flags " in
-	    *" $arg "*) ;;
-	    * ) func_append new_inherited_linker_flags " $arg" ;;
-	esac
-	continue
-	;;
-
-      -multi_module)
-	single_module=$wl-multi_module
-	continue
-	;;
-
-      -no-fast-install)
-	fast_install=no
-	continue
-	;;
-
-      -no-install)
-	case $host in
-	*-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-*-darwin* | *-cegcc*)
-	  # The PATH hackery in wrapper scripts is required on Windows
-	  # and Darwin in order for the loader to find any dlls it needs.
-	  func_warning "'-no-install' is ignored for $host"
-	  func_warning "assuming '-no-fast-install' instead"
-	  fast_install=no
-	  ;;
-	*) no_install=yes ;;
-	esac
-	continue
-	;;
-
-      -no-undefined)
-	allow_undefined=no
-	continue
-	;;
-
-      -objectlist)
-	prev=objectlist
-	continue
-	;;
-
-      -os2dllname)
-	prev=os2dllname
-	continue
-	;;
-
-      -o) prev=output ;;
-
-      -precious-files-regex)
-	prev=precious_regex
-	continue
-	;;
-
-      -release)
-	prev=release
-	continue
-	;;
-
-      -rpath)
-	prev=rpath
-	continue
-	;;
-
-      -R)
-	prev=xrpath
-	continue
-	;;
-
-      -R*)
-	func_stripname '-R' '' "$arg"
-	dir=$func_stripname_result
-	# We need an absolute path.
-	case $dir in
-	[\\/]* | [A-Za-z]:[\\/]*) ;;
-	=*)
-	  func_stripname '=' '' "$dir"
-	  dir=$lt_sysroot$func_stripname_result
-	  ;;
-	*)
-	  func_fatal_error "argument ($arg) to '-R' is not an absolute path: $dir"
-	  ;;
-	esac
-	case "$xrpath " in
-	*" $dir "*) ;;
-	*) func_append xrpath " $dir" ;;
-	esac
-	continue
-	;;
-
-      -shared)
-	# The effects of -shared are defined in a previous loop.
-	continue
-	;;
-
-      -shrext)
-	prev=shrext
-	continue
-	;;
-
-      -static | -static-libtool-libs)
-	# The effects of -static are defined in a previous loop.
-	# We used to do the same as -all-static on platforms that
-	# didn't have a PIC flag, but the assumption that the effects
-	# would be equivalent was wrong.  It would break on at least
-	# Digital Unix and AIX.
-	continue
-	;;
-
-      -thread-safe)
-	thread_safe=yes
-	continue
-	;;
-
-      -version-info)
-	prev=vinfo
-	continue
-	;;
-
-      -version-number)
-	prev=vinfo
-	vinfo_number=yes
-	continue
-	;;
-
-      -weak)
-        prev=weak
-	continue
-	;;
-
-      -Wc,*)
-	func_stripname '-Wc,' '' "$arg"
-	args=$func_stripname_result
-	arg=
-	save_ifs=$IFS; IFS=,
-	for flag in $args; do
-	  IFS=$save_ifs
-          func_quote_arg pretty "$flag"
-	  func_append arg " $func_quote_arg_result"
-	  func_append compiler_flags " $func_quote_arg_result"
-	done
-	IFS=$save_ifs
-	func_stripname ' ' '' "$arg"
-	arg=$func_stripname_result
-	;;
-
-      -Wl,*)
-	func_stripname '-Wl,' '' "$arg"
-	args=$func_stripname_result
-	arg=
-	save_ifs=$IFS; IFS=,
-	for flag in $args; do
-	  IFS=$save_ifs
-          func_quote_arg pretty "$flag"
-	  func_append arg " $wl$func_quote_arg_result"
-	  func_append compiler_flags " $wl$func_quote_arg_result"
-	  func_append linker_flags " $func_quote_arg_result"
-	done
-	IFS=$save_ifs
-	func_stripname ' ' '' "$arg"
-	arg=$func_stripname_result
-	;;
-
-      -Xassembler)
-        prev=xassembler
-        continue
-        ;;
-
-      -Xcompiler)
-	prev=xcompiler
-	continue
-	;;
-
-      -Xlinker)
-	prev=xlinker
-	continue
-	;;
-
-      -XCClinker)
-	prev=xcclinker
-	continue
-	;;
-
-      # -msg_* for osf cc
-      -msg_*)
-	func_quote_arg pretty "$arg"
-	arg=$func_quote_arg_result
-	;;
-
-      # Flags to be passed through unchanged, with rationale:
-      # -64, -mips[0-9]      enable 64-bit mode for the SGI compiler
-      # -r[0-9][0-9]*        specify processor for the SGI compiler
-      # -xarch=*, -xtarget=* enable 64-bit mode for the Sun compiler
-      # +DA*, +DD*           enable 64-bit mode for the HP compiler
-      # -q*                  compiler args for the IBM compiler
-      # -m*, -t[45]*, -txscale* architecture-specific flags for GCC
-      # -F/path              path to uninstalled frameworks, gcc on darwin
-      # -p, -pg, --coverage, -fprofile-*  profiling flags for GCC
-      # -fstack-protector*   stack protector flags for GCC
-      # @file                GCC response files
-      # -tp=*                Portland pgcc target processor selection
-      # --sysroot=*          for sysroot support
-      # -O*, -g*, -flto*, -fwhopr*, -fuse-linker-plugin GCC link-time optimization
-      # -specs=*             GCC specs files
-      # -stdlib=*            select c++ std lib with clang
-      # -fdiagnostics-color* simply affects output
-      # -frecord-gcc-switches used to verify flags were respected
-      # -fsanitize=*         Clang/GCC memory and address sanitizer
-      # -fno-sanitize*       Clang/GCC memory and address sanitizer
-      # -shared-libsan       Link with shared sanitizer runtimes (Clang)
-      # -static-libsan       Link with static sanitizer runtimes (Clang)
-      # -no-canonical-prefixes Do not expand any symbolic links
-      # -fuse-ld=*           Linker select flags for GCC
-      # -static-*            direct GCC to link specific libraries statically
-      # -fcilkplus           Cilk Plus language extension features for C/C++
-      # -rtlib=*             select c runtime lib with clang
-      # --unwindlib=*        select unwinder library with clang
-      # -f{file|debug|macro|profile}-prefix-map=* needed for lto linking
-      # -Wa,*                Pass flags directly to the assembler
-      # -Werror, -Werror=*   Report (specified) warnings as errors
-      -64|-mips[0-9]|-r[0-9][0-9]*|-xarch=*|-xtarget=*|+DA*|+DD*|-q*|-m*| \
-      -t[45]*|-txscale*|-p|-pg|--coverage|-fprofile-*|-F*|@*|-tp=*|--sysroot=*| \
-      -O*|-g*|-flto*|-fwhopr*|-fuse-linker-plugin|-fstack-protector*|-no-canonical-prefixes| \
-      -stdlib=*|-rtlib=*|--unwindlib=*| \
-      -specs=*|-fsanitize=*|-fno-sanitize*|-shared-libsan|-static-libsan| \
-      -ffile-prefix-map=*|-fdebug-prefix-map=*|-fmacro-prefix-map=*|-fprofile-prefix-map=*| \
-      -fdiagnostics-color*|-frecord-gcc-switches| \
-      -fuse-ld=*|-static-*|-fcilkplus|-Wa,*|-Werror|-Werror=*)
-        func_quote_arg pretty "$arg"
-	arg=$func_quote_arg_result
-        func_append compile_command " $arg"
-        func_append finalize_command " $arg"
-        func_append compiler_flags " $arg"
-        continue
-        ;;
-
-      -Z*)
-        if test os2 = "`expr $host : '.*\(os2\)'`"; then
-          # OS/2 uses -Zxxx to specify OS/2-specific options
-	  compiler_flags="$compiler_flags $arg"
-	  func_append compile_command " $arg"
-	  func_append finalize_command " $arg"
-	  case $arg in
-	  -Zlinker | -Zstack)
-	    prev=xcompiler
-	    ;;
-	  esac
-	  continue
-        else
-	  # Otherwise treat like 'Some other compiler flag' below
-	  func_quote_arg pretty "$arg"
-	  arg=$func_quote_arg_result
-        fi
-	;;
-
-      # Some other compiler flag.
-      -* | +*)
-        func_quote_arg pretty "$arg"
-	arg=$func_quote_arg_result
-	;;
-
-      *.$objext)
-	# A standard object.
-	func_append objs " $arg"
-	;;
-
-      *.lo)
-	# A libtool-controlled object.
-
-	# Check to see that this really is a libtool object.
-	if func_lalib_unsafe_p "$arg"; then
-	  pic_object=
-	  non_pic_object=
-
-	  # Read the .lo file
-	  func_source "$arg"
-
-	  if test -z "$pic_object" ||
-	     test -z "$non_pic_object" ||
-	     test none = "$pic_object" &&
-	     test none = "$non_pic_object"; then
-	    func_fatal_error "cannot find name of object for '$arg'"
-	  fi
-
-	  # Extract subdirectory from the argument.
-	  func_dirname "$arg" "/" ""
-	  xdir=$func_dirname_result
-
-	  test none = "$pic_object" || {
-	    # Prepend the subdirectory the object is found in.
-	    pic_object=$xdir$pic_object
-
-	    if test dlfiles = "$prev"; then
-	      if test yes = "$build_libtool_libs" && test yes = "$dlopen_support"; then
-		func_append dlfiles " $pic_object"
-		prev=
-		continue
-	      else
-		# If libtool objects are unsupported, then we need to preload.
-		prev=dlprefiles
-	      fi
-	    fi
-
-	    # CHECK ME:  I think I busted this.  -Ossama
-	    if test dlprefiles = "$prev"; then
-	      # Preload the old-style object.
-	      func_append dlprefiles " $pic_object"
-	      prev=
-	    fi
-
-	    # A PIC object.
-	    func_append libobjs " $pic_object"
-	    arg=$pic_object
-	  }
-
-	  # Non-PIC object.
-	  if test none != "$non_pic_object"; then
-	    # Prepend the subdirectory the object is found in.
-	    non_pic_object=$xdir$non_pic_object
-
-	    # A standard non-PIC object
-	    func_append non_pic_objects " $non_pic_object"
-	    if test -z "$pic_object" || test none = "$pic_object"; then
-	      arg=$non_pic_object
-	    fi
-	  else
-	    # If the PIC object exists, use it instead.
-	    # $xdir was prepended to $pic_object above.
-	    non_pic_object=$pic_object
-	    func_append non_pic_objects " $non_pic_object"
-	  fi
-	else
-	  # Only an error if not doing a dry-run.
-	  if $opt_dry_run; then
-	    # Extract subdirectory from the argument.
-	    func_dirname "$arg" "/" ""
-	    xdir=$func_dirname_result
-
-	    func_lo2o "$arg"
-	    pic_object=$xdir$objdir/$func_lo2o_result
-	    non_pic_object=$xdir$func_lo2o_result
-	    func_append libobjs " $pic_object"
-	    func_append non_pic_objects " $non_pic_object"
-	  else
-	    func_fatal_error "'$arg' is not a valid libtool object"
-	  fi
-	fi
-	;;
-
-      *.$libext)
-	# An archive.
-	func_append deplibs " $arg"
-	func_append old_deplibs " $arg"
-	continue
-	;;
-
-      *.la)
-	# A libtool-controlled library.
-
-	func_resolve_sysroot "$arg"
-	if test dlfiles = "$prev"; then
-	  # This library was specified with -dlopen.
-	  func_append dlfiles " $func_resolve_sysroot_result"
-	  prev=
-	elif test dlprefiles = "$prev"; then
-	  # The library was specified with -dlpreopen.
-	  func_append dlprefiles " $func_resolve_sysroot_result"
-	  prev=
-	else
-	  func_append deplibs " $func_resolve_sysroot_result"
-	fi
-	continue
-	;;
-
-      # Some other compiler argument.
-      *)
-	# Unknown arguments in both finalize_command and compile_command need
-	# to be aesthetically quoted because they are evaled later.
-	func_quote_arg pretty "$arg"
-	arg=$func_quote_arg_result
-	;;
-      esac # arg
-
-      # Now actually substitute the argument into the commands.
-      if test -n "$arg"; then
-	if test -n "$rpath_arg"; then
-          func_append finalize_rpath " ${arg##*,}"
-	  unset rpath_arg
-	else
-	  case $arg in
-          -Wl,-rpath,*)
-	    func_append finalize_rpath " ${arg##*,}";;
-          -Wl,-rpath)
-	    rpath_arg=1;;
-          *)
-            func_append compile_command " $arg"
-	    func_append finalize_command " $arg"
-	  esac
-        fi
-      fi
-    done # argument parsing loop
-
-    test -n "$prev" && \
-      func_fatal_help "the '$prevarg' option requires an argument"
-
-    if test yes = "$export_dynamic" && test -n "$export_dynamic_flag_spec"; then
-      eval arg=\"$export_dynamic_flag_spec\"
-      func_append compile_command " $arg"
-      func_append finalize_command " $arg"
-    fi
-
-    oldlibs=
-    # calculate the name of the file, without its directory
-    func_basename "$output"
-    outputname=$func_basename_result
-    libobjs_save=$libobjs
-
-    if test -n "$shlibpath_var"; then
-      # get the directories listed in $shlibpath_var
-      eval shlib_search_path=\`\$ECHO \"\$$shlibpath_var\" \| \$SED \'s/:/ /g\'\`
-    else
-      shlib_search_path=
-    fi
-    eval sys_lib_search_path=\"$sys_lib_search_path_spec\"
-    eval sys_lib_dlsearch_path=\"$sys_lib_dlsearch_path_spec\"
-
-    # Definition is injected by LT_CONFIG during libtool generation.
-    func_munge_path_list sys_lib_dlsearch_path "$LT_SYS_LIBRARY_PATH"
-
-    func_dirname "$output" "/" ""
-    output_objdir=$func_dirname_result$objdir
-    func_to_tool_file "$output_objdir/"
-    tool_output_objdir=$func_to_tool_file_result
-    # Create the object directory.
-    func_mkdir_p "$output_objdir"
-
-    # Determine the type of output
-    case $output in
-    "")
-      func_fatal_help "you must specify an output file"
-      ;;
-    *.$libext) linkmode=oldlib ;;
-    *.lo | *.$objext) linkmode=obj ;;
-    *.la) linkmode=lib ;;
-    *) linkmode=prog ;; # Anything else should be a program.
-    esac
-
-    specialdeplibs=
-
-    libs=
-    # Find all interdependent deplibs by searching for libraries
-    # that are linked more than once (e.g. -la -lb -la)
-    for deplib in $deplibs; do
-      if $opt_preserve_dup_deps; then
-	case "$libs " in
-	*" $deplib "*) func_append specialdeplibs " $deplib" ;;
-	esac
-      fi
-      func_append libs " $deplib"
-    done
-
-    if test lib = "$linkmode"; then
-      libs="$predeps $libs $compiler_lib_search_path $postdeps"
-
-      # Compute libraries that are listed more than once in $predeps
-      # $postdeps and mark them as special (i.e., whose duplicates are
-      # not to be eliminated).
-      pre_post_deps=
-      if $opt_duplicate_compiler_generated_deps; then
-	for pre_post_dep in $predeps $postdeps; do
-	  case "$pre_post_deps " in
-	  *" $pre_post_dep "*) func_append specialdeplibs " $pre_post_deps" ;;
-	  esac
-	  func_append pre_post_deps " $pre_post_dep"
-	done
-      fi
-      pre_post_deps=
-    fi
-
-    deplibs=
-    newdependency_libs=
-    newlib_search_path=
-    need_relink=no # whether we're linking any uninstalled libtool libraries
-    notinst_deplibs= # not-installed libtool libraries
-    notinst_path= # paths that contain not-installed libtool libraries
-
-    case $linkmode in
-    lib)
-	passes="conv dlpreopen link"
-	for file in $dlfiles $dlprefiles; do
-	  case $file in
-	  *.la) ;;
-	  *)
-	    func_fatal_help "libraries can '-dlopen' only libtool libraries: $file"
-	    ;;
-	  esac
-	done
-	;;
-    prog)
-	compile_deplibs=
-	finalize_deplibs=
-	alldeplibs=false
-	newdlfiles=
-	newdlprefiles=
-	passes="conv scan dlopen dlpreopen link"
-	;;
-    *)  passes="conv"
-	;;
-    esac
-
-    for pass in $passes; do
-      # The preopen pass in lib mode reverses $deplibs; put it back here
-      # so that -L comes before libs that need it for instance...
-      if test lib,link = "$linkmode,$pass"; then
-	## FIXME: Find the place where the list is rebuilt in the wrong
-	##        order, and fix it there properly
-        tmp_deplibs=
-	for deplib in $deplibs; do
-	  tmp_deplibs="$deplib $tmp_deplibs"
-	done
-	deplibs=$tmp_deplibs
-      fi
-
-      if test lib,link = "$linkmode,$pass" ||
-	 test prog,scan = "$linkmode,$pass"; then
-	libs=$deplibs
-	deplibs=
-      fi
-      if test prog = "$linkmode"; then
-	case $pass in
-	dlopen) libs=$dlfiles ;;
-	dlpreopen) libs=$dlprefiles ;;
-	link) libs="$deplibs %DEPLIBS% $dependency_libs" ;;
-	esac
-      fi
-      if test lib,dlpreopen = "$linkmode,$pass"; then
-	# Collect and forward deplibs of preopened libtool libs
-	for lib in $dlprefiles; do
-	  # Ignore non-libtool-libs
-	  dependency_libs=
-	  func_resolve_sysroot "$lib"
-	  case $lib in
-	  *.la)	func_source "$func_resolve_sysroot_result" ;;
-	  esac
-
-	  # Collect preopened libtool deplibs, except any this library
-	  # has declared as weak libs
-	  for deplib in $dependency_libs; do
-	    func_basename "$deplib"
-            deplib_base=$func_basename_result
-	    case " $weak_libs " in
-	    *" $deplib_base "*) ;;
-	    *) func_append deplibs " $deplib" ;;
-	    esac
-	  done
-	done
-	libs=$dlprefiles
-      fi
-      if test dlopen = "$pass"; then
-	# Collect dlpreopened libraries
-	save_deplibs=$deplibs
-	deplibs=
-      fi
-
-      for deplib in $libs; do
-	lib=
-	found=false
-	case $deplib in
-	-mt|-mthreads|-kthread|-Kthread|-pthread|-pthreads|--thread-safe \
-        |-threads|-fopenmp|-fopenmp=*|-openmp|-mp|-xopenmp|-omp|-qsmp=*)
-	  if test prog,link = "$linkmode,$pass"; then
-	    compile_deplibs="$deplib $compile_deplibs"
-	    finalize_deplibs="$deplib $finalize_deplibs"
-	  else
-	    func_append compiler_flags " $deplib"
-	    if test lib = "$linkmode"; then
-		case "$new_inherited_linker_flags " in
-		    *" $deplib "*) ;;
-		    * ) func_append new_inherited_linker_flags " $deplib" ;;
-		esac
-	    fi
-	  fi
-	  continue
-	  ;;
-	-l*)
-	  if test lib != "$linkmode" && test prog != "$linkmode"; then
-	    func_warning "'-l' is ignored for archives/objects"
-	    continue
-	  fi
-	  func_stripname '-l' '' "$deplib"
-	  name=$func_stripname_result
-	  if test lib = "$linkmode"; then
-	    searchdirs="$newlib_search_path $lib_search_path $compiler_lib_search_dirs $sys_lib_search_path $shlib_search_path"
-	  else
-	    searchdirs="$newlib_search_path $lib_search_path $sys_lib_search_path $shlib_search_path"
-	  fi
-	  for searchdir in $searchdirs; do
-	    for search_ext in .la $std_shrext .so .a; do
-	      # Search the libtool library
-	      lib=$searchdir/lib$name$search_ext
-	      if test -f "$lib"; then
-		if test .la = "$search_ext"; then
-		  found=:
-		else
-		  found=false
-		fi
-		break 2
-	      fi
-	    done
-	  done
-	  if $found; then
-	    # deplib is a libtool library
-	    # If $allow_libtool_libs_with_static_runtimes && $deplib is a stdlib,
-	    # We need to do some special things here, and not later.
-	    if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-	      case " $predeps $postdeps " in
-	      *" $deplib "*)
-		if func_lalib_p "$lib"; then
-		  library_names=
-		  old_library=
-		  func_source "$lib"
-		  for l in $old_library $library_names; do
-		    ll=$l
-		  done
-		  if test "X$ll" = "X$old_library"; then # only static version available
-		    found=false
-		    func_dirname "$lib" "" "."
-		    ladir=$func_dirname_result
-		    lib=$ladir/$old_library
-		    if test prog,link = "$linkmode,$pass"; then
-		      compile_deplibs="$deplib $compile_deplibs"
-		      finalize_deplibs="$deplib $finalize_deplibs"
-		    else
-		      deplibs="$deplib $deplibs"
-		      test lib = "$linkmode" && newdependency_libs="$deplib $newdependency_libs"
-		    fi
-		    continue
-		  fi
-		fi
-		;;
-	      *) ;;
-	      esac
-	    fi
-	  else
-	    # deplib doesn't seem to be a libtool library
-	    if test prog,link = "$linkmode,$pass"; then
-	      compile_deplibs="$deplib $compile_deplibs"
-	      finalize_deplibs="$deplib $finalize_deplibs"
-	    else
-	      deplibs="$deplib $deplibs"
-	      test lib = "$linkmode" && newdependency_libs="$deplib $newdependency_libs"
-	    fi
-	    continue
-	  fi
-	  ;; # -l
-	*.ltframework)
-	  if test prog,link = "$linkmode,$pass"; then
-	    compile_deplibs="$deplib $compile_deplibs"
-	    finalize_deplibs="$deplib $finalize_deplibs"
-	  else
-	    deplibs="$deplib $deplibs"
-	    if test lib = "$linkmode"; then
-		case "$new_inherited_linker_flags " in
-		    *" $deplib "*) ;;
-		    * ) func_append new_inherited_linker_flags " $deplib" ;;
-		esac
-	    fi
-	  fi
-	  continue
-	  ;;
-	-L*)
-	  case $linkmode in
-	  lib)
-	    deplibs="$deplib $deplibs"
-	    test conv = "$pass" && continue
-	    newdependency_libs="$deplib $newdependency_libs"
-	    func_stripname '-L' '' "$deplib"
-	    func_resolve_sysroot "$func_stripname_result"
-	    func_append newlib_search_path " $func_resolve_sysroot_result"
-	    ;;
-	  prog)
-	    if test conv = "$pass"; then
-	      deplibs="$deplib $deplibs"
-	      continue
-	    fi
-	    if test scan = "$pass"; then
-	      deplibs="$deplib $deplibs"
-	    else
-	      compile_deplibs="$deplib $compile_deplibs"
-	      finalize_deplibs="$deplib $finalize_deplibs"
-	    fi
-	    func_stripname '-L' '' "$deplib"
-	    func_resolve_sysroot "$func_stripname_result"
-	    func_append newlib_search_path " $func_resolve_sysroot_result"
-	    ;;
-	  *)
-	    func_warning "'-L' is ignored for archives/objects"
-	    ;;
-	  esac # linkmode
-	  continue
-	  ;; # -L
-	-R*)
-	  if test link = "$pass"; then
-	    func_stripname '-R' '' "$deplib"
-	    func_resolve_sysroot "$func_stripname_result"
-	    dir=$func_resolve_sysroot_result
-	    # Make sure the xrpath contains only unique directories.
-	    case "$xrpath " in
-	    *" $dir "*) ;;
-	    *) func_append xrpath " $dir" ;;
-	    esac
-	  fi
-	  deplibs="$deplib $deplibs"
-	  continue
-	  ;;
-	*.la)
-	  func_resolve_sysroot "$deplib"
-	  lib=$func_resolve_sysroot_result
-	  ;;
-	*.$libext)
-	  if test conv = "$pass"; then
-	    deplibs="$deplib $deplibs"
-	    continue
-	  fi
-	  case $linkmode in
-	  lib)
-	    # Linking convenience modules into shared libraries is allowed,
-	    # but linking other static libraries is non-portable.
-	    case " $dlpreconveniencelibs " in
-	    *" $deplib "*) ;;
-	    *)
-	      valid_a_lib=false
-	      case $deplibs_check_method in
-		match_pattern*)
-		  set dummy $deplibs_check_method; shift
-		  match_pattern_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"`
-		  if eval "\$ECHO \"$deplib\"" 2>/dev/null | $SED 10q \
-		    | $EGREP "$match_pattern_regex" > /dev/null; then
-		    valid_a_lib=:
-		  fi
-		;;
-		pass_all)
-		  valid_a_lib=:
-		;;
-	      esac
-	      if $valid_a_lib; then
-		func_warning "Linking the shared library $output against the static library $deplib is not portable!"
-		deplibs="$deplib $deplibs"
-	      else
-		func_warning "Trying to link with static lib archive $deplib."
-		func_warning "I have the capability to make that library automatically link in when"
-		func_warning "you link to this library.  But I can only do this if you have a"
-		func_warning "shared version of the library, which you do not appear to have"
-		func_warning "because the file extensions .$libext of this argument makes me believe"
-		func_warning "that it is just a static archive that I should not use here."
-	      fi
-	      ;;
-	    esac
-	    continue
-	    ;;
-	  prog)
-	    if test link != "$pass"; then
-	      deplibs="$deplib $deplibs"
-	    else
-	      compile_deplibs="$deplib $compile_deplibs"
-	      finalize_deplibs="$deplib $finalize_deplibs"
-	    fi
-	    continue
-	    ;;
-	  esac # linkmode
-	  ;; # *.$libext
-	*.lo | *.$objext)
-	  if test conv = "$pass"; then
-	    deplibs="$deplib $deplibs"
-	  elif test prog = "$linkmode"; then
-	    if test dlpreopen = "$pass" || test yes != "$dlopen_support" || test no = "$build_libtool_libs"; then
-	      # If there is no dlopen support or we're linking statically,
-	      # we need to preload.
-	      func_append newdlprefiles " $deplib"
-	      compile_deplibs="$deplib $compile_deplibs"
-	      finalize_deplibs="$deplib $finalize_deplibs"
-	    else
-	      func_append newdlfiles " $deplib"
-	    fi
-	  fi
-	  continue
-	  ;;
-	%DEPLIBS%)
-	  alldeplibs=:
-	  continue
-	  ;;
-	esac # case $deplib
-
-	$found || test -f "$lib" \
-	  || func_fatal_error "cannot find the library '$lib' or unhandled argument '$deplib'"
-
-	# Check to see that this really is a libtool archive.
-	func_lalib_unsafe_p "$lib" \
-	  || func_fatal_error "'$lib' is not a valid libtool archive"
-
-	func_dirname "$lib" "" "."
-	ladir=$func_dirname_result
-
-	dlname=
-	dlopen=
-	dlpreopen=
-	libdir=
-	library_names=
-	old_library=
-	inherited_linker_flags=
-	# If the library was installed with an old release of libtool,
-	# it will not redefine variables installed, or shouldnotlink
-	installed=yes
-	shouldnotlink=no
-	avoidtemprpath=
-
-
-	# Read the .la file
-	func_source "$lib"
-
-	# Convert "-framework foo" to "foo.ltframework"
-	if test -n "$inherited_linker_flags"; then
-	  tmp_inherited_linker_flags=`$ECHO "$inherited_linker_flags" | $SED 's/-framework \([^ $]*\)/\1.ltframework/g'`
-	  for tmp_inherited_linker_flag in $tmp_inherited_linker_flags; do
-	    case " $new_inherited_linker_flags " in
-	      *" $tmp_inherited_linker_flag "*) ;;
-	      *) func_append new_inherited_linker_flags " $tmp_inherited_linker_flag";;
-	    esac
-	  done
-	fi
-	dependency_libs=`$ECHO " $dependency_libs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	if test lib,link = "$linkmode,$pass" ||
-	   test prog,scan = "$linkmode,$pass" ||
-	   { test prog != "$linkmode" && test lib != "$linkmode"; }; then
-	  test -n "$dlopen" && func_append dlfiles " $dlopen"
-	  test -n "$dlpreopen" && func_append dlprefiles " $dlpreopen"
-	fi
-
-	if test conv = "$pass"; then
-	  # Only check for convenience libraries
-	  deplibs="$lib $deplibs"
-	  if test -z "$libdir"; then
-	    if test -z "$old_library"; then
-	      func_fatal_error "cannot find name of link library for '$lib'"
-	    fi
-	    # It is a libtool convenience library, so add in its objects.
-	    func_append convenience " $ladir/$objdir/$old_library"
-	    func_append old_convenience " $ladir/$objdir/$old_library"
-	  elif test prog != "$linkmode" && test lib != "$linkmode"; then
-	    func_fatal_error "'$lib' is not a convenience library"
-	  fi
-	  tmp_libs=
-	  for deplib in $dependency_libs; do
-	    deplibs="$deplib $deplibs"
-	    if $opt_preserve_dup_deps; then
-	      case "$tmp_libs " in
-	      *" $deplib "*) func_append specialdeplibs " $deplib" ;;
-	      esac
-	    fi
-	    func_append tmp_libs " $deplib"
-	  done
-	  continue
-	fi # $pass = conv
-
-
-	# Get the name of the library we link against.
-	linklib=
-	if test -n "$old_library" &&
-	   { test yes = "$prefer_static_libs" ||
-	     test built,no = "$prefer_static_libs,$installed"; }; then
-	  linklib=$old_library
-	else
-	  for l in $old_library $library_names; do
-	    linklib=$l
-	  done
-	fi
-	if test -z "$linklib"; then
-	  func_fatal_error "cannot find name of link library for '$lib'"
-	fi
-
-	# This library was specified with -dlopen.
-	if test dlopen = "$pass"; then
-	  test -z "$libdir" \
-	    && func_fatal_error "cannot -dlopen a convenience library: '$lib'"
-	  if test -z "$dlname" ||
-	     test yes != "$dlopen_support" ||
-	     test no = "$build_libtool_libs"
-	  then
-	    # If there is no dlname, no dlopen support or we're linking
-	    # statically, we need to preload.  We also need to preload any
-	    # dependent libraries so libltdl's deplib preloader doesn't
-	    # bomb out in the load deplibs phase.
-	    func_append dlprefiles " $lib $dependency_libs"
-	  else
-	    func_append newdlfiles " $lib"
-	  fi
-	  continue
-	fi # $pass = dlopen
-
-	# We need an absolute path.
-	case $ladir in
-	[\\/]* | [A-Za-z]:[\\/]*) abs_ladir=$ladir ;;
-	*)
-	  abs_ladir=`cd "$ladir" && pwd`
-	  if test -z "$abs_ladir"; then
-	    func_warning "cannot determine absolute directory name of '$ladir'"
-	    func_warning "passing it literally to the linker, although it might fail"
-	    abs_ladir=$ladir
-	  fi
-	  ;;
-	esac
-	func_basename "$lib"
-	laname=$func_basename_result
-
-	# Find the relevant object directory and library name.
-	if test yes = "$installed"; then
-	  if test ! -f "$lt_sysroot$libdir/$linklib" && test -f "$abs_ladir/$linklib"; then
-	    func_warning "library '$lib' was moved."
-	    dir=$ladir
-	    absdir=$abs_ladir
-	    libdir=$abs_ladir
-	  else
-	    dir=$lt_sysroot$libdir
-	    absdir=$lt_sysroot$libdir
-	  fi
-	  test yes = "$hardcode_automatic" && avoidtemprpath=yes
-	else
-	  if test ! -f "$ladir/$objdir/$linklib" && test -f "$abs_ladir/$linklib"; then
-	    dir=$ladir
-	    absdir=$abs_ladir
-	    # Remove this search path later
-	    func_append notinst_path " $abs_ladir"
-	  else
-	    dir=$ladir/$objdir
-	    absdir=$abs_ladir/$objdir
-	    # Remove this search path later
-	    func_append notinst_path " $abs_ladir"
-	  fi
-	fi # $installed = yes
-	func_stripname 'lib' '.la' "$laname"
-	name=$func_stripname_result
-
-	# This library was specified with -dlpreopen.
-	if test dlpreopen = "$pass"; then
-	  if test -z "$libdir" && test prog = "$linkmode"; then
-	    func_fatal_error "only libraries may -dlpreopen a convenience library: '$lib'"
-	  fi
-	  case $host in
-	    # special handling for platforms with PE-DLLs.
-	    *cygwin* | *mingw* | *windows* | *cegcc* )
-	      # Linker will automatically link against shared library if both
-	      # static and shared are present.  Therefore, ensure we extract
-	      # symbols from the import library if a shared library is present
-	      # (otherwise, the dlopen module name will be incorrect).  We do
-	      # this by putting the import library name into $newdlprefiles.
-	      # We recover the dlopen module name by 'saving' the la file
-	      # name in a special purpose variable, and (later) extracting the
-	      # dlname from the la file.
-	      if test -n "$dlname"; then
-	        func_tr_sh "$dir/$linklib"
-	        eval "libfile_$func_tr_sh_result=\$abs_ladir/\$laname"
-	        func_append newdlprefiles " $dir/$linklib"
-	      else
-	        func_append newdlprefiles " $dir/$old_library"
-	        # Keep a list of preopened convenience libraries to check
-	        # that they are being used correctly in the link pass.
-	        test -z "$libdir" && \
-	          func_append dlpreconveniencelibs " $dir/$old_library"
-	      fi
-	    ;;
-	    * )
-	      # Prefer using a static library (so that no silly _DYNAMIC symbols
-	      # are required to link).
-	      if test -n "$old_library"; then
-	        func_append newdlprefiles " $dir/$old_library"
-	        # Keep a list of preopened convenience libraries to check
-	        # that they are being used correctly in the link pass.
-	        test -z "$libdir" && \
-	          func_append dlpreconveniencelibs " $dir/$old_library"
-	      # Otherwise, use the dlname, so that lt_dlopen finds it.
-	      elif test -n "$dlname"; then
-	        func_append newdlprefiles " $dir/$dlname"
-	      else
-	        func_append newdlprefiles " $dir/$linklib"
-	      fi
-	    ;;
-	  esac
-	fi # $pass = dlpreopen
-
-	if test -z "$libdir"; then
-	  # Link the convenience library
-	  if test lib = "$linkmode"; then
-	    deplibs="$dir/$old_library $deplibs"
-	  elif test prog,link = "$linkmode,$pass"; then
-	    compile_deplibs="$dir/$old_library $compile_deplibs"
-	    finalize_deplibs="$dir/$old_library $finalize_deplibs"
-	  else
-	    deplibs="$lib $deplibs" # used for prog,scan pass
-	  fi
-	  continue
-	fi
-
-
-	if test prog = "$linkmode" && test link != "$pass"; then
-	  func_append newlib_search_path " $ladir"
-	  deplibs="$lib $deplibs"
-
-	  linkalldeplibs=false
-	  if test no != "$link_all_deplibs" || test -z "$library_names" ||
-	     test no = "$build_libtool_libs"; then
-	    linkalldeplibs=:
-	  fi
-
-	  tmp_libs=
-	  for deplib in $dependency_libs; do
-	    case $deplib in
-	    -L*) func_stripname '-L' '' "$deplib"
-	         func_resolve_sysroot "$func_stripname_result"
-	         func_append newlib_search_path " $func_resolve_sysroot_result"
-		 ;;
-	    esac
-	    # Need to link against all dependency_libs?
-	    if $linkalldeplibs; then
-	      deplibs="$deplib $deplibs"
-	    else
-	      # Need to hardcode shared library paths
-	      # or/and link against static libraries
-	      newdependency_libs="$deplib $newdependency_libs"
-	    fi
-	    if $opt_preserve_dup_deps; then
-	      case "$tmp_libs " in
-	      *" $deplib "*) func_append specialdeplibs " $deplib" ;;
-	      esac
-	    fi
-	    func_append tmp_libs " $deplib"
-	  done # for deplib
-	  continue
-	fi # $linkmode = prog...
-
-	if test prog,link = "$linkmode,$pass"; then
-	  if test -n "$library_names" &&
-	     { { test no = "$prefer_static_libs" ||
-	         test built,yes = "$prefer_static_libs,$installed"; } ||
-	       test -z "$old_library"; }; then
-	    # We need to hardcode the library path
-	    if test -n "$shlibpath_var" && test -z "$avoidtemprpath"; then
-	      # Make sure the rpath contains only unique directories.
-	      case $temp_rpath: in
-	      *"$absdir:"*) ;;
-              *) case $absdir in
-                 "$progdir/"*) func_append temp_rpath "$absdir:" ;;
-                 *)            func_append temp_rpath_tail "$absdir:" ;;
-                 esac
-	      esac
-	    fi
-
-	    # Hardcode the library path.
-	    # Skip directories that are in the system default run-time
-	    # search path.
-	    case " $sys_lib_dlsearch_path " in
-	    *" $absdir "*) ;;
-	    *)
-	      case "$compile_rpath$compile_rpath_tail " in
-	      *" $absdir "*) ;;
-	      *) case $absdir in
-                 "$progdir/"*) func_append compile_rpath " $absdir" ;;
-                 *) func_append compile_rpath_tail " $absdir" ;;
-		 esac
-	      esac
-	      ;;
-	    esac
-	    case " $sys_lib_dlsearch_path " in
-	    *" $libdir "*) ;;
-	    *)
-	      case "$finalize_rpath " in
-	      *" $libdir "*) ;;
-	      *) func_append finalize_rpath " $libdir" ;;
-	      esac
-	      ;;
-	    esac
-	  fi # $linkmode,$pass = prog,link...
-
-	  if $alldeplibs &&
-	     { test pass_all = "$deplibs_check_method" ||
-	       { test yes = "$build_libtool_libs" &&
-		 test -n "$library_names"; }; }; then
-	    # We only need to search for static libraries
-	    continue
-	  fi
-	fi
-
-	link_static=no # Whether the deplib will be linked statically
-	use_static_libs=$prefer_static_libs
-	if test built = "$use_static_libs" && test yes = "$installed"; then
-	  use_static_libs=no
-	fi
-	if test -n "$library_names" &&
-	   { test no = "$use_static_libs" || test -z "$old_library"; }; then
-	  case $host_os in
-	  cygwin* | mingw* | windows* | cegcc* | os2*)
-	      # No point in relinking DLLs because paths are not encoded
-	      func_append notinst_deplibs " $lib"
-	      need_relink=no
-	    ;;
-	  *)
-	    if test no = "$installed"; then
-	      func_append notinst_deplibs " $lib"
-	      need_relink=yes
-	    fi
-	    ;;
-	  esac
-	  # This is a shared library
-
-	  # Warn about portability, can't link against -module's on some
-	  # systems (darwin).  Don't bleat about dlopened modules though!
-	  dlopenmodule=
-	  for dlpremoduletest in $dlprefiles; do
-	    if test "X$dlpremoduletest" = "X$lib"; then
-	      dlopenmodule=$dlpremoduletest
-	      break
-	    fi
-	  done
-	  if test -z "$dlopenmodule" && test yes = "$shouldnotlink" && test link = "$pass"; then
-	    echo
-	    if test prog = "$linkmode"; then
-	      func_warning "Linking the executable $output against the loadable module"
-	    else
-	      func_warning "Linking the shared library $output against the loadable module"
-	    fi
-	    func_warning "$linklib is not portable!"
-	  fi
-	  if test lib = "$linkmode" &&
-	     test yes = "$hardcode_into_libs"; then
-	    # Hardcode the library path.
-	    # Skip directories that are in the system default run-time
-	    # search path.
-	    case " $sys_lib_dlsearch_path " in
-	    *" $absdir "*) ;;
-	    *)
-	      case "$compile_rpath$compile_rpath_tail " in
-	      *" $absdir "*) ;;
-	      *) case $absdir in
-                 "$progdir/"*) func_append compile_rpath " $absdir" ;;
-                 *) func_append compile_rpath_tail " $absdir" ;;
-		 esac
-	      esac
-	      ;;
-	    esac
-	    case " $sys_lib_dlsearch_path " in
-	    *" $libdir "*) ;;
-	    *)
-	      case "$finalize_rpath " in
-	      *" $libdir "*) ;;
-	      *) func_append finalize_rpath " $libdir" ;;
-	      esac
-	      ;;
-	    esac
-	  fi
-
-	  if test -n "$old_archive_from_expsyms_cmds"; then
-	    # figure out the soname
-	    set dummy $library_names
-	    shift
-	    realname=$1
-	    shift
-	    libname=`eval "\\$ECHO \"$libname_spec\""`
-	    # use dlname if we got it. it's perfectly good, no?
-	    if test -n "$dlname"; then
-	      soname=$dlname
-	    elif test -n "$soname_spec"; then
-	      # bleh windows
-	      case $host_os in
-	      cygwin* | mingw* | windows* | cegcc* | os2*)
-	        func_arith $current - $age
-		major=$func_arith_result
-		versuffix=-$major
-		;;
-	      esac
-	      eval soname=\"$soname_spec\"
-	    else
-	      soname=$realname
-	    fi
-
-	    # Make a new name for the extract_expsyms_cmds to use
-	    soroot=$soname
-	    func_basename "$soroot"
-	    soname=$func_basename_result
-	    func_stripname 'lib' '.dll' "$soname"
-	    newlib=libimp-$func_stripname_result.a
-
-	    # If the library has no export list, then create one now
-	    if test -f "$output_objdir/$soname-def"; then :
-	    else
-	      func_verbose "extracting exported symbol list from '$soname'"
-	      func_execute_cmds "$extract_expsyms_cmds" 'exit $?'
-	    fi
-
-	    # Create $newlib
-	    if test -f "$output_objdir/$newlib"; then :; else
-	      func_verbose "generating import library for '$soname'"
-	      func_execute_cmds "$old_archive_from_expsyms_cmds" 'exit $?'
-	    fi
-	    # make sure the library variables are pointing to the new library
-	    dir=$output_objdir
-	    linklib=$newlib
-	  fi # test -n "$old_archive_from_expsyms_cmds"
-
-	  if test prog = "$linkmode" || test relink != "$opt_mode"; then
-	    add_shlibpath=
-	    add_dir=
-	    add=
-	    lib_linked=yes
-	    case $hardcode_action in
-	    immediate | unsupported)
-	      if test no = "$hardcode_direct"; then
-		add=$dir/$linklib
-		case $host in
-		  *-*-sco3.2v5.0.[024]*) add_dir=-L$dir ;;
-		  *-*-sysv4*uw2*) add_dir=-L$dir ;;
-		  *-*-emscripten*) add_dir=-L$dir ;;
-		  *-*-sysv5OpenUNIX* | *-*-sysv5UnixWare7.[01].[10]* | \
-		    *-*-unixware7*) add_dir=-L$dir ;;
-		  *-*-darwin* )
-		    # if the lib is a (non-dlopened) module then we cannot
-		    # link against it, someone is ignoring the earlier warnings
-		    if /usr/bin/file -L $add 2> /dev/null |
-			 $GREP ": [^:]* bundle" >/dev/null; then
-		      if test "X$dlopenmodule" != "X$lib"; then
-			func_warning "lib $linklib is a module, not a shared library"
-			if test -z "$old_library"; then
-			  func_warning "And there doesn't seem to be a static archive available"
-			  func_warning "The link will probably fail, sorry"
-			else
-			  add=$dir/$old_library
-			fi
-		      elif test -n "$old_library"; then
-			add=$dir/$old_library
-		      fi
-		    fi
-		esac
-	      elif test no = "$hardcode_minus_L"; then
-		case $host in
-		*-*-sunos*) add_shlibpath=$dir ;;
-		esac
-		add_dir=-L$dir
-		add=-l$name
-	      elif test no = "$hardcode_shlibpath_var"; then
-		add_shlibpath=$dir
-		add=-l$name
-	      else
-		lib_linked=no
-	      fi
-	      ;;
-	    relink)
-	      if test yes = "$hardcode_direct" &&
-	         test no = "$hardcode_direct_absolute"; then
-		add=$dir/$linklib
-	      elif test yes = "$hardcode_minus_L"; then
-		add_dir=-L$absdir
-		# Try looking first in the location we're being installed to.
-		if test -n "$inst_prefix_dir"; then
-		  case $libdir in
-		    [\\/]*)
-		      func_append add_dir " -L$inst_prefix_dir$libdir"
-		      ;;
-		  esac
-		fi
-		add=-l$name
-	      elif test yes = "$hardcode_shlibpath_var"; then
-		add_shlibpath=$dir
-		add=-l$name
-	      else
-		lib_linked=no
-	      fi
-	      ;;
-	    *) lib_linked=no ;;
-	    esac
-
-	    if test yes != "$lib_linked"; then
-	      func_fatal_configuration "unsupported hardcode properties"
-	    fi
-
-	    if test -n "$add_shlibpath"; then
-	      case :$compile_shlibpath: in
-	      *":$add_shlibpath:"*) ;;
-	      *) func_append compile_shlibpath "$add_shlibpath:" ;;
-	      esac
-	    fi
-	    if test prog = "$linkmode"; then
-	      test -n "$add_dir" && compile_deplibs="$add_dir $compile_deplibs"
-	      test -n "$add" && compile_deplibs="$add $compile_deplibs"
-	    else
-	      test -n "$add_dir" && deplibs="$add_dir $deplibs"
-	      test -n "$add" && deplibs="$add $deplibs"
-	      if test yes != "$hardcode_direct" &&
-		 test yes != "$hardcode_minus_L" &&
-		 test yes = "$hardcode_shlibpath_var"; then
-		case :$finalize_shlibpath: in
-		*":$libdir:"*) ;;
-		*) func_append finalize_shlibpath "$libdir:" ;;
-		esac
-	      fi
-	    fi
-	  fi
-
-	  if test prog = "$linkmode" || test relink = "$opt_mode"; then
-	    add_shlibpath=
-	    add_dir=
-	    add=
-	    # Finalize command for both is simple: just hardcode it.
-	    if test yes = "$hardcode_direct" &&
-	       test no = "$hardcode_direct_absolute"; then
-	      add=$libdir/$linklib
-	    elif test yes = "$hardcode_minus_L"; then
-	      add_dir=-L$lt_sysroot$libdir
-	      add=-l$name
-	    elif test yes = "$hardcode_shlibpath_var"; then
-	      case :$finalize_shlibpath: in
-	      *":$libdir:"*) ;;
-	      *) func_append finalize_shlibpath "$libdir:" ;;
-	      esac
-	      add=-l$name
-	    elif test yes = "$hardcode_automatic"; then
-	      if test -n "$inst_prefix_dir" &&
-		 test -f "$inst_prefix_dir$libdir/$linklib"; then
-		add=$inst_prefix_dir$libdir/$linklib
-	      else
-		add=$libdir/$linklib
-	      fi
-	    else
-	      # We cannot seem to hardcode it, guess we'll fake it.
-	      add_dir=-L$lt_sysroot$libdir
-	      # Try looking first in the location we're being installed to.
-	      if test -n "$inst_prefix_dir"; then
-		case $libdir in
-		  [\\/]*)
-		    func_append add_dir " -L$inst_prefix_dir$libdir"
-		    ;;
-		esac
-	      fi
-	      add=-l$name
-	    fi
-
-	    if test prog = "$linkmode"; then
-	      test -n "$add_dir" && finalize_deplibs="$add_dir $finalize_deplibs"
-	      test -n "$add" && finalize_deplibs="$add $finalize_deplibs"
-	    else
-	      test -n "$add_dir" && deplibs="$add_dir $deplibs"
-	      test -n "$add" && deplibs="$add $deplibs"
-	    fi
-	  fi
-	elif test prog = "$linkmode"; then
-	  # Here we assume that one of hardcode_direct or hardcode_minus_L
-	  # is not unsupported.  This is valid on all known static and
-	  # shared platforms.
-	  if test unsupported != "$hardcode_direct"; then
-	    test -n "$old_library" && linklib=$old_library
-	    compile_deplibs="$dir/$linklib $compile_deplibs"
-	    finalize_deplibs="$dir/$linklib $finalize_deplibs"
-	  else
-	    compile_deplibs="-l$name -L$dir $compile_deplibs"
-	    finalize_deplibs="-l$name -L$dir $finalize_deplibs"
-	  fi
-	elif test yes = "$build_libtool_libs"; then
-	  # Not a shared library
-	  if test pass_all != "$deplibs_check_method"; then
-	    # We're trying link a shared library against a static one
-	    # but the system doesn't support it.
-
-	    # Just print a warning and add the library to dependency_libs so
-	    # that the program can be linked against the static library.
-	    func_warning "This system cannot link to static lib archive $lib."
-	    func_warning "I have the capability to make that library automatically link in when"
-	    func_warning "you link to this library.  But I can only do this if you have a"
-	    func_warning "shared version of the library, which you do not appear to have."
-	    if test yes = "$module"; then
-	      func_warning "But as you try to build a module library, libtool will still create "
-	      func_warning "a static module, that should work as long as the dlopening application"
-	      func_warning "is linked with the -dlopen flag to resolve symbols at runtime."
-	      if test -z "$global_symbol_pipe"; then
-		func_warning "However, this would only work if libtool was able to extract symbol"
-		func_warning "lists from a program, using 'nm' or equivalent, but libtool could"
-		func_warning "not find such a program.  So, this module is probably useless."
-		func_warning "'nm' from GNU binutils and a full rebuild may help."
-	      fi
-	      if test no = "$build_old_libs"; then
-		build_libtool_libs=module
-		build_old_libs=yes
-	      else
-		build_libtool_libs=no
-	      fi
-	    fi
-	  else
-	    deplibs="$dir/$old_library $deplibs"
-	    link_static=yes
-	  fi
-	fi # link shared/static library?
-
-	if test lib = "$linkmode"; then
-	  if test -n "$dependency_libs" &&
-	     { test yes != "$hardcode_into_libs" ||
-	       test yes = "$build_old_libs" ||
-	       test yes = "$link_static"; }; then
-	    # Extract -R from dependency_libs
-	    temp_deplibs=
-	    for libdir in $dependency_libs; do
-	      case $libdir in
-	      -R*) func_stripname '-R' '' "$libdir"
-	           temp_xrpath=$func_stripname_result
-		   case " $xrpath " in
-		   *" $temp_xrpath "*) ;;
-		   *) func_append xrpath " $temp_xrpath";;
-		   esac;;
-	      *) func_append temp_deplibs " $libdir";;
-	      esac
-	    done
-	    dependency_libs=$temp_deplibs
-	  fi
-
-	  func_append newlib_search_path " $absdir"
-	  # Link against this library
-	  test no = "$link_static" && newdependency_libs="$abs_ladir/$laname $newdependency_libs"
-	  # ... and its dependency_libs
-	  tmp_libs=
-	  for deplib in $dependency_libs; do
-	    newdependency_libs="$deplib $newdependency_libs"
-	    case $deplib in
-              -L*) func_stripname '-L' '' "$deplib"
-                   func_resolve_sysroot "$func_stripname_result";;
-              *) func_resolve_sysroot "$deplib" ;;
-            esac
-	    if $opt_preserve_dup_deps; then
-	      case "$tmp_libs " in
-	      *" $func_resolve_sysroot_result "*)
-                func_append specialdeplibs " $func_resolve_sysroot_result" ;;
-	      esac
-	    fi
-	    func_append tmp_libs " $func_resolve_sysroot_result"
-	  done
-
-	  if test no != "$link_all_deplibs"; then
-	    # Add the search paths of all dependency libraries
-	    for deplib in $dependency_libs; do
-	      path=
-	      case $deplib in
-	      -L*) path=$deplib ;;
-	      *.la)
-	        func_resolve_sysroot "$deplib"
-	        deplib=$func_resolve_sysroot_result
-	        func_dirname "$deplib" "" "."
-		dir=$func_dirname_result
-		# We need an absolute path.
-		case $dir in
-		[\\/]* | [A-Za-z]:[\\/]*) absdir=$dir ;;
-		*)
-		  absdir=`cd "$dir" && pwd`
-		  if test -z "$absdir"; then
-		    func_warning "cannot determine absolute directory name of '$dir'"
-		    absdir=$dir
-		  fi
-		  ;;
-		esac
-		if $GREP "^installed=no" $deplib > /dev/null; then
-		case $host in
-		*-*-darwin*)
-		  depdepl=
-		  eval deplibrary_names=`$SED -n -e 's/^library_names=\(.*\)$/\1/p' $deplib`
-		  if test -n "$deplibrary_names"; then
-		    for tmp in $deplibrary_names; do
-		      depdepl=$tmp
-		    done
-		    if test -f "$absdir/$objdir/$depdepl"; then
-		      depdepl=$absdir/$objdir/$depdepl
-		      darwin_install_name=`$OTOOL -L $depdepl | awk '{if (NR == 2) {print $1;exit}}'`
-                      if test -z "$darwin_install_name"; then
-                          darwin_install_name=`$OTOOL64 -L $depdepl  | awk '{if (NR == 2) {print $1;exit}}'`
-                      fi
-		      func_append compiler_flags " $wl-dylib_file $wl$darwin_install_name:$depdepl"
-		      func_append linker_flags " -dylib_file $darwin_install_name:$depdepl"
-		      path=
-		    fi
-		  fi
-		  ;;
-		*)
-		  path=-L$absdir/$objdir
-		  ;;
-		esac
-		else
-		  eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $deplib`
-		  test -z "$libdir" && \
-		    func_fatal_error "'$deplib' is not a valid libtool archive"
-		  test "$absdir" != "$libdir" && \
-		    func_warning "'$deplib' seems to be moved"
-
-		  path=-L$absdir
-		fi
-		;;
-	      esac
-	      case " $deplibs " in
-	      *" $path "*) ;;
-	      *) deplibs="$path $deplibs" ;;
-	      esac
-	    done
-	  fi # link_all_deplibs != no
-	fi # linkmode = lib
-      done # for deplib in $libs
-
-      func_append temp_rpath "$temp_rpath_tail"
-      func_append compile_rpath "$compile_rpath_tail"
-
-      if test link = "$pass"; then
-	if test prog = "$linkmode"; then
-	  compile_deplibs="$new_inherited_linker_flags $compile_deplibs"
-	  finalize_deplibs="$new_inherited_linker_flags $finalize_deplibs"
-	else
-	  compiler_flags="$compiler_flags "`$ECHO " $new_inherited_linker_flags" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	fi
-      fi
-      dependency_libs=$newdependency_libs
-      if test dlpreopen = "$pass"; then
-	# Link the dlpreopened libraries before other libraries
-	for deplib in $save_deplibs; do
-	  deplibs="$deplib $deplibs"
-	done
-      fi
-      if test dlopen != "$pass"; then
-	test conv = "$pass" || {
-	  # Make sure lib_search_path contains only unique directories.
-	  lib_search_path=
-	  for dir in $newlib_search_path; do
-	    case "$lib_search_path " in
-	    *" $dir "*) ;;
-	    *) func_append lib_search_path " $dir" ;;
-	    esac
-	  done
-	  newlib_search_path=
-	}
-
-	if test prog,link = "$linkmode,$pass"; then
-	  vars="compile_deplibs finalize_deplibs"
-	else
-	  vars=deplibs
-	fi
-	for var in $vars dependency_libs; do
-	  # Add libraries to $var in reverse order
-	  eval tmp_libs=\"\$$var\"
-	  new_libs=
-	  # FIXME: Pedantically, this is the right thing to do, so
-	  #        that some nasty dependency loop isn't accidentally
-	  #        broken: new_libs="$deplib $new_libs"
-	  for deplib in $tmp_libs; do
-	    if $opt_preserve_dup_deps; then
-	      new_libs="$deplib $new_libs"
-	    else
-	      # Pragmatically, this seems to cause very few problems in
-	      # practice:
-	      case $deplib in
-	      -L*) new_libs="$deplib $new_libs" ;;
-	      -R*) ;;
-	      *)
-	        # And here is the reason: when a library appears more
-	        # than once as an explicit dependence of a library, or
-	        # is implicitly linked in more than once by the
-	        # compiler, it is considered special, and multiple
-	        # occurrences thereof are not removed.  Compare this
-	        # with having the same library being listed as a
-	        # dependency of multiple other libraries: in this case,
-	        # we know (pedantically, we assume) the library does not
-	        # need to be listed more than once, so we keep only the
-	        # last copy.  This is not always right, but it is rare
-	        # enough that we require users that really mean to play
-	        # such unportable linking tricks to link the library
-	        # using -Wl,-lname, so that libtool does not consider it
-	        # for duplicate removal.  And if not possible for portability
-	        # reasons, then --preserve-dup-deps should be used.
-	        case " $specialdeplibs " in
-	        *" $deplib "*) new_libs="$deplib $new_libs" ;;
-	        *)
-	          case " $new_libs " in
-	          *" $deplib "*) ;;
-	          *) new_libs="$deplib $new_libs" ;;
-	          esac
-	          ;;
-	        esac
-	        ;;
-	      esac
-	    fi
-	  done
-	  tmp_libs=
-	  for deplib in $new_libs; do
-	    case $deplib in
-	    -L*)
-	      case " $tmp_libs " in
-	      *" $deplib "*) ;;
-	      *) func_append tmp_libs " $deplib" ;;
-	      esac
-	      ;;
-	    *) func_append tmp_libs " $deplib" ;;
-	    esac
-	  done
-	  eval $var=\"$tmp_libs\"
-	done # for var
-      fi
-
-      # Add Sun CC postdeps if required:
-      test CXX = "$tagname" && {
-        case $host_os in
-        linux*)
-          case `$CC -V 2>&1 | $SED 5q` in
-          *Sun\ C*) # Sun C++ 5.9
-            func_suncc_cstd_abi
-
-            if test no != "$suncc_use_cstd_abi"; then
-              func_append postdeps ' -library=Cstd -library=Crun'
-            fi
-            ;;
-          esac
-          ;;
-
-        solaris*)
-          func_cc_basename "$CC"
-          case $func_cc_basename_result in
-          CC* | sunCC*)
-            func_suncc_cstd_abi
-
-            if test no != "$suncc_use_cstd_abi"; then
-              func_append postdeps ' -library=Cstd -library=Crun'
-            fi
-            ;;
-          esac
-          ;;
-        esac
-      }
-
-      # Last step: remove runtime libs from dependency_libs
-      # (they stay in deplibs)
-      tmp_libs=
-      for i in $dependency_libs; do
-	case " $predeps $postdeps $compiler_lib_search_path " in
-	*" $i "*)
-	  i=
-	  ;;
-	esac
-	if test -n "$i"; then
-	  func_append tmp_libs " $i"
-	fi
-      done
-      dependency_libs=$tmp_libs
-    done # for pass
-    if test prog = "$linkmode"; then
-      dlfiles=$newdlfiles
-    fi
-    if test prog = "$linkmode" || test lib = "$linkmode"; then
-      dlprefiles=$newdlprefiles
-    fi
-
-    case $linkmode in
-    oldlib)
-      if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then
-	func_warning "'-dlopen' is ignored for archives"
-      fi
-
-      case " $deplibs" in
-      *\ -l* | *\ -L*)
-	func_warning "'-l' and '-L' are ignored for archives" ;;
-      esac
-
-      test -n "$rpath" && \
-	func_warning "'-rpath' is ignored for archives"
-
-      test -n "$xrpath" && \
-	func_warning "'-R' is ignored for archives"
-
-      test -n "$vinfo" && \
-	func_warning "'-version-info/-version-number' is ignored for archives"
-
-      test -n "$release" && \
-	func_warning "'-release' is ignored for archives"
-
-      test -n "$export_symbols$export_symbols_regex" && \
-	func_warning "'-export-symbols' is ignored for archives"
-
-      # Now set the variables for building old libraries.
-      build_libtool_libs=no
-      oldlibs=$output
-      func_append objs "$old_deplibs"
-      ;;
-
-    lib)
-      # Make sure we only generate libraries of the form 'libNAME.la'.
-      case $outputname in
-      lib*)
-	func_stripname 'lib' '.la' "$outputname"
-	name=$func_stripname_result
-	eval shared_ext=\"$shrext_cmds\"
-	eval libname=\"$libname_spec\"
-	;;
-      *)
-	test no = "$module" \
-	  && func_fatal_help "libtool library '$output' must begin with 'lib'"
-
-	if test no != "$need_lib_prefix"; then
-	  # Add the "lib" prefix for modules if required
-	  func_stripname '' '.la' "$outputname"
-	  name=$func_stripname_result
-	  eval shared_ext=\"$shrext_cmds\"
-	  eval libname=\"$libname_spec\"
-	else
-	  func_stripname '' '.la' "$outputname"
-	  libname=$func_stripname_result
-	fi
-	;;
-      esac
-
-      if test -n "$objs"; then
-	if test pass_all != "$deplibs_check_method"; then
-	  func_fatal_error "cannot build libtool library '$output' from non-libtool objects on this host:$objs"
-	else
-	  func_warning "Linking the shared library $output against the non-libtool objects $objs is not portable!"
-	  func_append libobjs " $objs"
-	fi
-      fi
-
-      test no = "$dlself" \
-	|| func_warning "'-dlopen self' is ignored for libtool libraries"
-
-      set dummy $rpath
-      shift
-      test 1 -lt "$#" \
-	&& func_warning "ignoring multiple '-rpath's for a libtool library"
-
-      install_libdir=$1
-
-      oldlibs=
-      if test -z "$rpath"; then
-	if test yes = "$build_libtool_libs"; then
-	  # Building a libtool convenience library.
-	  # Some compilers have problems with a '.al' extension so
-	  # convenience libraries should have the same extension an
-	  # archive normally would.
-	  oldlibs="$output_objdir/$libname.$libext $oldlibs"
-	  build_libtool_libs=convenience
-	  build_old_libs=yes
-	fi
-
-	test -n "$vinfo" && \
-	  func_warning "'-version-info/-version-number' is ignored for convenience libraries"
-
-	test -n "$release" && \
-	  func_warning "'-release' is ignored for convenience libraries"
-      else
-
-	# Parse the version information argument.
-	save_ifs=$IFS; IFS=:
-	set dummy $vinfo 0 0 0
-	shift
-	IFS=$save_ifs
-
-	test -n "$7" && \
-	  func_fatal_help "too many parameters to '-version-info'"
-
-	# convert absolute version numbers to libtool ages
-	# this retains compatibility with .la files and attempts
-	# to make the code below a bit more comprehensible
-
-	case $vinfo_number in
-	yes)
-	  number_major=$1
-	  number_minor=$2
-	  number_revision=$3
-	  #
-	  # There are really only two kinds -- those that
-	  # use the current revision as the major version
-	  # and those that subtract age and use age as
-	  # a minor version.  But, then there is irix
-	  # that has an extra 1 added just for fun
-	  #
-	  case $version_type in
-	  # correct linux to gnu/linux during the next big refactor
-	  darwin|freebsd-elf|linux|midnightbsd-elf|osf|qnx|windows|none)
-	    func_arith $number_major + $number_minor
-	    current=$func_arith_result
-	    age=$number_minor
-	    revision=$number_revision
-	    ;;
-	  freebsd-aout|sco|sunos)
-	    current=$number_major
-	    revision=$number_minor
-	    age=0
-	    ;;
-	  irix|nonstopux)
-	    func_arith $number_major + $number_minor
-	    current=$func_arith_result
-	    age=$number_minor
-	    revision=$number_minor
-	    lt_irix_increment=no
-	    ;;
-	  *)
-	    func_fatal_configuration "$modename: unknown library version type '$version_type'"
-	    ;;
-	  esac
-	  ;;
-	no)
-	  current=$1
-	  revision=$2
-	  age=$3
-	  ;;
-	esac
-
-	# Check that each of the things are valid numbers.
-	case $current in
-	0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;;
-	*)
-	  func_error "CURRENT '$current' must be a nonnegative integer"
-	  func_fatal_error "'$vinfo' is not valid version information"
-	  ;;
-	esac
-
-	case $revision in
-	0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;;
-	*)
-	  func_error "REVISION '$revision' must be a nonnegative integer"
-	  func_fatal_error "'$vinfo' is not valid version information"
-	  ;;
-	esac
-
-	case $age in
-	0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;;
-	*)
-	  func_error "AGE '$age' must be a nonnegative integer"
-	  func_fatal_error "'$vinfo' is not valid version information"
-	  ;;
-	esac
-
-	if test "$age" -gt "$current"; then
-	  func_error "AGE '$age' is greater than the current interface number '$current'"
-	  func_fatal_error "'$vinfo' is not valid version information"
-	fi
-
-	# Calculate the version variables.
-	major=
-	versuffix=
-	verstring=
-	case $version_type in
-	none) ;;
-
-	darwin)
-	  # Like Linux, but with the current version available in
-	  # verstring for coding it into the library header
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=$major.$age.$revision
-	  # Darwin ld doesn't like 0 for these options...
-	  func_arith $current + 1
-	  minor_current=$func_arith_result
-	  xlcverstring="$wl-compatibility_version $wl$minor_current $wl-current_version $wl$minor_current.$revision"
-	  verstring="-compatibility_version $minor_current -current_version $minor_current.$revision"
-          # On Darwin other compilers
-          case $CC in
-              nagfor*)
-                  verstring="$wl-compatibility_version $wl$minor_current $wl-current_version $wl$minor_current.$revision"
-                  ;;
-              *)
-                  verstring="-compatibility_version $minor_current -current_version $minor_current.$revision"
-                  ;;
-          esac
-	  ;;
-
-	freebsd-aout)
-	  major=.$current
-	  versuffix=.$current.$revision
-	  ;;
-
-	freebsd-elf | midnightbsd-elf)
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=$major.$age.$revision
-	  ;;
-
-	irix | nonstopux)
-	  if test no = "$lt_irix_increment"; then
-	    func_arith $current - $age
-	  else
-	    func_arith $current - $age + 1
-	  fi
-	  major=$func_arith_result
-
-	  case $version_type in
-	    nonstopux) verstring_prefix=nonstopux ;;
-	    *)         verstring_prefix=sgi ;;
-	  esac
-	  verstring=$verstring_prefix$major.$revision
-
-	  # Add in all the interfaces that we are compatible with.
-	  loop=$revision
-	  while test 0 -ne "$loop"; do
-	    func_arith $revision - $loop
-	    iface=$func_arith_result
-	    func_arith $loop - 1
-	    loop=$func_arith_result
-	    verstring=$verstring_prefix$major.$iface:$verstring
-	  done
-
-	  # Before this point, $major must not contain '.'.
-	  major=.$major
-	  versuffix=$major.$revision
-	  ;;
-
-	linux) # correct to gnu/linux during the next big refactor
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=$major.$age.$revision
-	  ;;
-
-	osf)
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=.$current.$age.$revision
-	  verstring=$current.$age.$revision
-
-	  # Add in all the interfaces that we are compatible with.
-	  loop=$age
-	  while test 0 -ne "$loop"; do
-	    func_arith $current - $loop
-	    iface=$func_arith_result
-	    func_arith $loop - 1
-	    loop=$func_arith_result
-	    verstring=$verstring:$iface.0
-	  done
-
-	  # Make executables depend on our current version.
-	  func_append verstring ":$current.0"
-	  ;;
-
-	qnx)
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=$major.$age.$revision
-	  ;;
-
-	sco)
-	  major=.$current
-	  versuffix=.$current
-	  ;;
-
-	sunos)
-	  major=.$current
-	  versuffix=.$current.$revision
-	  ;;
-
-	windows)
-	  # Use '-' rather than '.', since we only want one
-	  # extension on DOS 8.3 file systems.
-	  func_arith $current - $age
-	  major=$func_arith_result
-	  versuffix=-$major
-	  ;;
-
-	*)
-	  func_fatal_configuration "unknown library version type '$version_type'"
-	  ;;
-	esac
-
-	# Clear the version info if we defaulted, and they specified a release.
-	if test -z "$vinfo" && test -n "$release"; then
-	  major=
-	  case $version_type in
-	  darwin)
-	    # we can't check for "0.0" in archive_cmds due to quoting
-	    # problems, so we reset it completely
-	    verstring=
-	    ;;
-	  *)
-	    verstring=0.0
-	    ;;
-	  esac
-	  if test no = "$need_version"; then
-	    versuffix=
-	  else
-	    versuffix=.0.0
-	  fi
-	fi
-
-	# Remove version info from name if versioning should be avoided
-	if test yes,no = "$avoid_version,$need_version"; then
-	  major=
-	  versuffix=
-	  verstring=
-	fi
-
-	# Check to see if the archive will have undefined symbols.
-	if test yes = "$allow_undefined"; then
-	  if test unsupported = "$allow_undefined_flag"; then
-	    if test yes = "$build_old_libs"; then
-	      func_warning "undefined symbols not allowed in $host shared libraries; building static only"
-	      build_libtool_libs=no
-	    else
-	      func_fatal_error "can't build $host shared library unless -no-undefined is specified"
-	    fi
-	  fi
-	else
-	  # Don't allow undefined symbols.
-	  allow_undefined_flag=$no_undefined_flag
-	fi
-
-      fi
-
-      func_generate_dlsyms "$libname" "$libname" :
-      func_append libobjs " $symfileobj"
-      test " " = "$libobjs" && libobjs=
-
-      if test relink != "$opt_mode"; then
-	# Remove our outputs, but don't remove object files since they
-	# may have been created when compiling PIC objects.
-	removelist=
-	tempremovelist=`$ECHO "$output_objdir/*"`
-	for p in $tempremovelist; do
-	  case $p in
-	    *.$objext | *.gcno)
-	       ;;
-	    $output_objdir/$outputname | $output_objdir/$libname.* | $output_objdir/$libname$release.*)
-	       if test -n "$precious_files_regex"; then
-		 if $ECHO "$p" | $EGREP -e "$precious_files_regex" >/dev/null 2>&1
-		 then
-		   continue
-		 fi
-	       fi
-	       func_append removelist " $p"
-	       ;;
-	    *) ;;
-	  esac
-	done
-	test -n "$removelist" && \
-	  func_show_eval "${RM}r \$removelist"
-      fi
-
-      # Now set the variables for building old libraries.
-      if test yes = "$build_old_libs" && test convenience != "$build_libtool_libs"; then
-	func_append oldlibs " $output_objdir/$libname.$libext"
-
-	# Transform .lo files to .o files.
-	oldobjs="$objs "`$ECHO "$libobjs" | $SP2NL | $SED "/\.$libext$/d; $lo2o" | $NL2SP`
-      fi
-
-      # Eliminate all temporary directories.
-      #for path in $notinst_path; do
-      #	lib_search_path=`$ECHO "$lib_search_path " | $SED "s% $path % %g"`
-      #	deplibs=`$ECHO "$deplibs " | $SED "s% -L$path % %g"`
-      #	dependency_libs=`$ECHO "$dependency_libs " | $SED "s% -L$path % %g"`
-      #done
-
-      if test -n "$xrpath"; then
-	# If the user specified any rpath flags, then add them.
-	temp_xrpath=
-	for libdir in $xrpath; do
-	  func_replace_sysroot "$libdir"
-	  func_append temp_xrpath " -R$func_replace_sysroot_result"
-	  case "$finalize_rpath " in
-	  *" $libdir "*) ;;
-	  *) func_append finalize_rpath " $libdir" ;;
-	  esac
-	done
-	if test yes != "$hardcode_into_libs" || test yes = "$build_old_libs"; then
-	  dependency_libs="$temp_xrpath $dependency_libs"
-	fi
-      fi
-
-      # Make sure dlfiles contains only unique files that won't be dlpreopened
-      old_dlfiles=$dlfiles
-      dlfiles=
-      for lib in $old_dlfiles; do
-	case " $dlprefiles $dlfiles " in
-	*" $lib "*) ;;
-	*) func_append dlfiles " $lib" ;;
-	esac
-      done
-
-      # Make sure dlprefiles contains only unique files
-      old_dlprefiles=$dlprefiles
-      dlprefiles=
-      for lib in $old_dlprefiles; do
-	case "$dlprefiles " in
-	*" $lib "*) ;;
-	*) func_append dlprefiles " $lib" ;;
-	esac
-      done
-
-      if test yes = "$build_libtool_libs"; then
-	if test -n "$rpath"; then
-	  case $host in
-	  *-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-*-beos* | *-cegcc* | *-*-haiku*)
-	    # these systems don't actually have a c library (as such)!
-	    ;;
-	  *-*-rhapsody* | *-*-darwin1.[012])
-	    # Rhapsody C library is in the System framework
-	    func_append deplibs " System.ltframework"
-	    ;;
-	  *-*-netbsd*)
-	    # Don't link with libc until the a.out ld.so is fixed.
-	    ;;
-	  *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-midnightbsd*)
-	    # Do not include libc due to us having libc/libc_r.
-	    ;;
-	  *-*-sco3.2v5* | *-*-sco5v6*)
-	    # Causes problems with __ctype
-	    ;;
-	  *-*-sysv4.2uw2* | *-*-sysv5* | *-*-unixware* | *-*-OpenUNIX*)
-	    # Compiler inserts libc in the correct place for threads to work
-	    ;;
-	  *)
-	    # Add libc to deplibs on all other systems if necessary.
-	    if test yes = "$build_libtool_need_lc"; then
-	      func_append deplibs " -lc"
-	    fi
-	    ;;
-	  esac
-	fi
-
-	# Transform deplibs into only deplibs that can be linked in shared.
-	name_save=$name
-	libname_save=$libname
-	release_save=$release
-	versuffix_save=$versuffix
-	major_save=$major
-	# I'm not sure if I'm treating the release correctly.  I think
-	# release should show up in the -l (ie -lgmp5) so we don't want to
-	# add it in twice.  Is that correct?
-	release=
-	versuffix=
-	major=
-	newdeplibs=
-	droppeddeps=no
-	case $deplibs_check_method in
-	pass_all)
-	  # Don't check for shared/static.  Everything works.
-	  # This might be a little naive.  We might want to check
-	  # whether the library exists or not.  But this is on
-	  # osf3 & osf4 and I'm not really sure... Just
-	  # implementing what was already the behavior.
-	  newdeplibs=$deplibs
-	  ;;
-	file_magic*)
-	  set dummy $deplibs_check_method; shift
-	  file_magic_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"`
-	  for a_deplib in $deplibs; do
-	    case $a_deplib in
-	    -l*)
-	      func_stripname -l '' "$a_deplib"
-	      name=$func_stripname_result
-	      if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-		case " $predeps $postdeps " in
-		*" $a_deplib "*)
-		  func_append newdeplibs " $a_deplib"
-		  a_deplib=
-		  ;;
-		esac
-	      fi
-	      if test -n "$a_deplib"; then
-		libname=`eval "\\$ECHO \"$libname_spec\""`
-		if test -n "$file_magic_glob"; then
-		  libnameglob=`func_echo_all "$libname" | $SED -e $file_magic_glob`
-		else
-		  libnameglob=$libname
-		fi
-		test yes = "$want_nocaseglob" && nocaseglob=`shopt -p nocaseglob`
-		for i in $lib_search_path $sys_lib_search_path $shlib_search_path; do
-		  if test yes = "$want_nocaseglob"; then
-		    shopt -s nocaseglob
-		    potential_libs=`ls $i/$libnameglob[.-]* 2>/dev/null`
-		    $nocaseglob
-		  else
-		    potential_libs=`ls $i/$libnameglob[.-]* 2>/dev/null`
-		  fi
-		  for potent_lib in $potential_libs; do
-		      # Follow soft links.
-		      if ls -lLd "$potent_lib" 2>/dev/null |
-			 $GREP " -> " >/dev/null; then
-			continue
-		      fi
-		      # The statement above tries to avoid entering an
-		      # endless loop below, in case of cyclic links.
-		      # We might still enter an endless loop, since a link
-		      # loop can be closed while we follow links,
-		      # but so what?
-		      potlib=$potent_lib
-		      while test -h "$potlib" 2>/dev/null; do
-			potliblink=`ls -ld $potlib | $SED 's/.* -> //'`
-			case $potliblink in
-			[\\/]* | [A-Za-z]:[\\/]*) potlib=$potliblink;;
-			*) potlib=`$ECHO "$potlib" | $SED 's|[^/]*$||'`"$potliblink";;
-			esac
-		      done
-		      if eval $file_magic_cmd \"\$potlib\" 2>/dev/null |
-			 $SED -e 10q |
-			 $EGREP "$file_magic_regex" > /dev/null; then
-			func_append newdeplibs " $a_deplib"
-			a_deplib=
-			break 2
-		      fi
-		  done
-		done
-	      fi
-	      if test -n "$a_deplib"; then
-		droppeddeps=yes
-		func_warning "Linker path does not have real file for library $a_deplib."
-		func_warning "I have the capability to make that library automatically link in when"
-		func_warning "you link to this library.  But I can only do this if you have a"
-		func_warning "shared version of the library, which you do not appear to have"
-		func_warning "because I did check the linker path looking for a file starting"
-		if test -z "$potlib"; then
-		  func_warning "with $libname but no candidates were found. (...for file magic test)"
-		else
-		  func_warning "with $libname and none of the candidates passed a file format test"
-		  func_warning "using a file magic. Last file checked: $potlib"
-		fi
-	      fi
-	      ;;
-	    *)
-	      # Add a -L argument.
-	      func_append newdeplibs " $a_deplib"
-	      ;;
-	    esac
-	  done # Gone through all deplibs.
-	  ;;
-	match_pattern*)
-	  set dummy $deplibs_check_method; shift
-	  match_pattern_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"`
-	  for a_deplib in $deplibs; do
-	    case $a_deplib in
-	    -l*)
-	      func_stripname -l '' "$a_deplib"
-	      name=$func_stripname_result
-	      if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-		case " $predeps $postdeps " in
-		*" $a_deplib "*)
-		  func_append newdeplibs " $a_deplib"
-		  a_deplib=
-		  ;;
-		esac
-	      fi
-	      if test -n "$a_deplib"; then
-		libname=`eval "\\$ECHO \"$libname_spec\""`
-		for i in $lib_search_path $sys_lib_search_path $shlib_search_path; do
-		  potential_libs=`ls $i/$libname[.-]* 2>/dev/null`
-		  for potent_lib in $potential_libs; do
-		    potlib=$potent_lib # see symlink-check above in file_magic test
-		    if eval "\$ECHO \"$potent_lib\"" 2>/dev/null | $SED 10q | \
-		       $EGREP "$match_pattern_regex" > /dev/null; then
-		      func_append newdeplibs " $a_deplib"
-		      a_deplib=
-		      break 2
-		    fi
-		  done
-		done
-	      fi
-	      if test -n "$a_deplib"; then
-		droppeddeps=yes
-		func_warning "Linker path does not have real file for library $a_deplib."
-		func_warning "I have the capability to make that library automatically link in when"
-		func_warning "you link to this library.  But I can only do this if you have a"
-		func_warning "shared version of the library, which you do not appear to have"
-		func_warning "because I did check the linker path looking for a file starting"
-		if test -z "$potlib"; then
-		  func_warning "with $libname but no candidates were found. (...for regex pattern test)"
-		else
-		  func_warning "with $libname and none of the candidates passed a file format test"
-		  func_warning "using a regex pattern. Last file checked: $potlib"
-		fi
-	      fi
-	      ;;
-	    *)
-	      # Add a -L argument.
-	      func_append newdeplibs " $a_deplib"
-	      ;;
-	    esac
-	  done # Gone through all deplibs.
-	  ;;
-	none | unknown | *)
-	  newdeplibs=
-	  tmp_deplibs=`$ECHO " $deplibs" | $SED 's/ -lc$//; s/ -[LR][^ ]*//g'`
-	  if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-	    for i in $predeps $postdeps; do
-	      # can't use Xsed below, because $i might contain '/'
-	      tmp_deplibs=`$ECHO " $tmp_deplibs" | $SED "s|$i||"`
-	    done
-	  fi
-	  case $tmp_deplibs in
-	  *[!\	\ ]*)
-	    echo
-	    if test none = "$deplibs_check_method"; then
-	      func_warning "Inter-library dependencies are not supported in this platform."
-	    else
-	      func_warning "Inter-library dependencies are not known to be supported."
-	    fi
-	    func_warning "All declared inter-library dependencies are being dropped."
-	    droppeddeps=yes
-	    ;;
-	  esac
-	  ;;
-	esac
-	versuffix=$versuffix_save
-	major=$major_save
-	release=$release_save
-	libname=$libname_save
-	name=$name_save
-
-	case $host in
-	*-*-rhapsody* | *-*-darwin1.[012])
-	  # On Rhapsody replace the C library with the System framework
-	  newdeplibs=`$ECHO " $newdeplibs" | $SED 's/ -lc / System.ltframework /'`
-	  ;;
-	esac
-
-	if test yes = "$droppeddeps"; then
-	  if test yes = "$module"; then
-	    func_warning "libtool could not satisfy all declared inter-library"
-	    func_warning "dependencies of module $libname.  Therefore, libtool will create"
-	    func_warning "a static module, that should work as long as the dlopening"
-	    func_warning "application is linked with the -dlopen flag."
-	    if test -z "$global_symbol_pipe"; then
-	      func_warning "However, this would only work if libtool was able to extract symbol"
-	      func_warning "lists from a program, using 'nm' or equivalent, but libtool could"
-	      func_warning "not find such a program.  So, this module is probably useless."
-	      func_warning "'nm' from GNU binutils and a full rebuild may help."
-	    fi
-	    if test no = "$build_old_libs"; then
-	      oldlibs=$output_objdir/$libname.$libext
-	      build_libtool_libs=module
-	      build_old_libs=yes
-	    else
-	      build_libtool_libs=no
-	    fi
-	  else
-	    echo "*** The inter-library dependencies that have been dropped here will be"
-	    echo "*** automatically added whenever a program is linked with this library"
-	    echo "*** or is declared to -dlopen it."
-
-	    if test no = "$allow_undefined"; then
-	      echo
-	      echo "*** Since this library must not contain undefined symbols,"
-	      echo "*** because either the platform does not support them or"
-	      echo "*** it was explicitly requested with -no-undefined,"
-	      echo "*** libtool will only create a static version of it."
-	      if test no = "$build_old_libs"; then
-		oldlibs=$output_objdir/$libname.$libext
-		build_libtool_libs=module
-		build_old_libs=yes
-	      else
-		build_libtool_libs=no
-	      fi
-	    fi
-	  fi
-	fi
-	# Done checking deplibs!
-	deplibs=$newdeplibs
-      fi
-      # Time to change all our "foo.ltframework" stuff back to "-framework foo"
-      case $host in
-	*-*-darwin*)
-	  newdeplibs=`$ECHO " $newdeplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	  new_inherited_linker_flags=`$ECHO " $new_inherited_linker_flags" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	  deplibs=`$ECHO " $deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	  ;;
-      esac
-
-      # move library search paths that coincide with paths to not yet
-      # installed libraries to the beginning of the library search list
-      new_libs=
-      for path in $notinst_path; do
-	case " $new_libs " in
-	*" -L$path/$objdir "*) ;;
-	*)
-	  case " $deplibs " in
-	  *" -L$path/$objdir "*)
-	    func_append new_libs " -L$path/$objdir" ;;
-	  esac
-	  ;;
-	esac
-      done
-      for deplib in $deplibs; do
-	case $deplib in
-	-L*)
-	  case " $new_libs " in
-	  *" $deplib "*) ;;
-	  *) func_append new_libs " $deplib" ;;
-	  esac
-	  ;;
-	*) func_append new_libs " $deplib" ;;
-	esac
-      done
-      deplibs=$new_libs
-
-      # All the library-specific variables (install_libdir is set above).
-      library_names=
-      old_library=
-      dlname=
-
-      # Test again, we may have decided not to build it any more
-      if test yes = "$build_libtool_libs"; then
-	# Remove $wl instances when linking with ld.
-	# FIXME: should test the right _cmds variable.
-	case $archive_cmds in
-	  *\$LD\ *) wl= ;;
-        esac
-	if test yes = "$hardcode_into_libs"; then
-	  # Hardcode the library paths
-	  hardcode_libdirs=
-	  dep_rpath=
-	  rpath=$finalize_rpath
-	  test relink = "$opt_mode" || rpath=$compile_rpath$rpath
-	  for libdir in $rpath; do
-	    if test -n "$hardcode_libdir_flag_spec"; then
-	      if test -n "$hardcode_libdir_separator"; then
-		func_replace_sysroot "$libdir"
-		libdir=$func_replace_sysroot_result
-		if test -z "$hardcode_libdirs"; then
-		  hardcode_libdirs=$libdir
-		else
-		  # Just accumulate the unique libdirs.
-		  case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in
-		  *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*)
-		    ;;
-		  *)
-		    func_append hardcode_libdirs "$hardcode_libdir_separator$libdir"
-		    ;;
-		  esac
-		fi
-	      else
-		eval flag=\"$hardcode_libdir_flag_spec\"
-		func_append dep_rpath " $flag"
-	      fi
-	    elif test -n "$runpath_var"; then
-	      case "$perm_rpath " in
-	      *" $libdir "*) ;;
-	      *) func_append perm_rpath " $libdir" ;;
-	      esac
-	    fi
-	  done
-	  # Substitute the hardcoded libdirs into the rpath.
-	  if test -n "$hardcode_libdir_separator" &&
-	     test -n "$hardcode_libdirs"; then
-	    libdir=$hardcode_libdirs
-	    eval "dep_rpath=\"$hardcode_libdir_flag_spec\""
-	  fi
-	  if test -n "$runpath_var" && test -n "$perm_rpath"; then
-	    # We should set the runpath_var.
-	    rpath=
-	    for dir in $perm_rpath; do
-	      func_append rpath "$dir:"
-	    done
-	    eval "$runpath_var='$rpath\$$runpath_var'; export $runpath_var"
-	  fi
-	  test -n "$dep_rpath" && deplibs="$dep_rpath $deplibs"
-	fi
-
-	shlibpath=$finalize_shlibpath
-	test relink = "$opt_mode" || shlibpath=$compile_shlibpath$shlibpath
-	if test -n "$shlibpath"; then
-	  eval "$shlibpath_var='$shlibpath\$$shlibpath_var'; export $shlibpath_var"
-	fi
-
-	# Get the real and link names of the library.
-	eval shared_ext=\"$shrext_cmds\"
-	eval library_names=\"$library_names_spec\"
-	set dummy $library_names
-	shift
-	realname=$1
-	shift
-
-	if test -n "$soname_spec"; then
-	  eval soname=\"$soname_spec\"
-	else
-	  soname=$realname
-	fi
-	if test -z "$dlname"; then
-	  dlname=$soname
-	fi
-
-	lib=$output_objdir/$realname
-	linknames=
-	for link
-	do
-	  func_append linknames " $link"
-	done
-
-	# Use standard objects if they are pic
-	test -z "$pic_flag" && libobjs=`$ECHO "$libobjs" | $SP2NL | $SED "$lo2o" | $NL2SP`
-	test "X$libobjs" = "X " && libobjs=
-
-	delfiles=
-	if test -n "$export_symbols" && test -n "$include_expsyms"; then
-	  $opt_dry_run || cp "$export_symbols" "$output_objdir/$libname.uexp"
-	  export_symbols=$output_objdir/$libname.uexp
-	  func_append delfiles " $export_symbols"
-	fi
-
-	orig_export_symbols=
-	case $host_os in
-	cygwin* | mingw* | windows* | cegcc*)
-	  if test -n "$export_symbols" && test -z "$export_symbols_regex"; then
-	    # exporting using user supplied symfile
-	    func_dll_def_p "$export_symbols" || {
-	      # and it's NOT already a .def file. Must figure out
-	      # which of the given symbols are data symbols and tag
-	      # them as such. So, trigger use of export_symbols_cmds.
-	      # export_symbols gets reassigned inside the "prepare
-	      # the list of exported symbols" if statement, so the
-	      # include_expsyms logic still works.
-	      orig_export_symbols=$export_symbols
-	      export_symbols=
-	      always_export_symbols=yes
-	    }
-	  fi
-	  ;;
-	esac
-
-	# Prepare the list of exported symbols
-	if test -z "$export_symbols"; then
-	  if test yes = "$always_export_symbols" || test -n "$export_symbols_regex"; then
-	    func_verbose "generating symbol list for '$libname.la'"
-	    export_symbols=$output_objdir/$libname.exp
-	    $opt_dry_run || $RM $export_symbols
-	    cmds=$export_symbols_cmds
-	    save_ifs=$IFS; IFS='~'
-	    for cmd1 in $cmds; do
-	      IFS=$save_ifs
-	      # Take the normal branch if the nm_file_list_spec branch
-	      # doesn't work or if tool conversion is not needed.
-	      case $nm_file_list_spec~$to_tool_file_cmd in
-		*~func_convert_file_noop | *~func_convert_file_msys_to_w32 | ~*)
-		  try_normal_branch=yes
-		  eval cmd=\"$cmd1\"
-		  func_len " $cmd"
-		  len=$func_len_result
-		  ;;
-		*)
-		  try_normal_branch=no
-		  ;;
-	      esac
-	      if test yes = "$try_normal_branch" \
-		 && { test "$len" -lt "$max_cmd_len" \
-		      || test "$max_cmd_len" -le -1; }
-	      then
-		func_show_eval "$cmd" 'exit $?'
-		skipped_export=false
-	      elif test -n "$nm_file_list_spec"; then
-		func_basename "$output"
-		output_la=$func_basename_result
-		save_libobjs=$libobjs
-		save_output=$output
-		output=$output_objdir/$output_la.nm
-		func_to_tool_file "$output"
-		libobjs=$nm_file_list_spec$func_to_tool_file_result
-		func_append delfiles " $output"
-		func_verbose "creating $NM input file list: $output"
-		for obj in $save_libobjs; do
-		  func_to_tool_file "$obj"
-		  $ECHO "$func_to_tool_file_result"
-		done > "$output"
-		eval cmd=\"$cmd1\"
-		func_show_eval "$cmd" 'exit $?'
-		output=$save_output
-		libobjs=$save_libobjs
-		skipped_export=false
-	      else
-		# The command line is too long to execute in one step.
-		func_verbose "using reloadable object file for export list..."
-		skipped_export=:
-		# Break out early, otherwise skipped_export may be
-		# set to false by a later but shorter cmd.
-		break
-	      fi
-	    done
-	    IFS=$save_ifs
-	    if test -n "$export_symbols_regex" && test : != "$skipped_export"; then
-	      func_show_eval '$EGREP -e "$export_symbols_regex" "$export_symbols" > "${export_symbols}T"'
-	      func_show_eval '$MV "${export_symbols}T" "$export_symbols"'
-	    fi
-	  fi
-	fi
-
-	if test -n "$export_symbols" && test -n "$include_expsyms"; then
-	  tmp_export_symbols=$export_symbols
-	  test -n "$orig_export_symbols" && tmp_export_symbols=$orig_export_symbols
-	  $opt_dry_run || eval '$ECHO "$include_expsyms" | $SP2NL >> "$tmp_export_symbols"'
-	fi
-
-	if test : != "$skipped_export" && test -n "$orig_export_symbols"; then
-	  # The given exports_symbols file has to be filtered, so filter it.
-	  func_verbose "filter symbol list for '$libname.la' to tag DATA exports"
-	  # FIXME: $output_objdir/$libname.filter potentially contains lots of
-	  # 's' commands, which not all seds can handle. GNU sed should be fine
-	  # though. Also, the filter scales superlinearly with the number of
-	  # global variables. join(1) would be nice here, but unfortunately
-	  # isn't a blessed tool.
-	  $opt_dry_run || $SED -e '/[ ,]DATA/!d;s,\(.*\)\([ \,].*\),s|^\1$|\1\2|,' < $export_symbols > $output_objdir/$libname.filter
-	  func_append delfiles " $export_symbols $output_objdir/$libname.filter"
-	  export_symbols=$output_objdir/$libname.def
-	  $opt_dry_run || $SED -f $output_objdir/$libname.filter < $orig_export_symbols > $export_symbols
-	fi
-
-	tmp_deplibs=
-	for test_deplib in $deplibs; do
-	  case " $convenience " in
-	  *" $test_deplib "*) ;;
-	  *)
-	    func_append tmp_deplibs " $test_deplib"
-	    ;;
-	  esac
-	done
-	deplibs=$tmp_deplibs
-
-	if test -n "$convenience"; then
-	  if test -n "$whole_archive_flag_spec" &&
-	    test yes = "$compiler_needs_object" &&
-	    test -z "$libobjs"; then
-	    # extract the archives, so we have objects to list.
-	    # TODO: could optimize this to just extract one archive.
-	    whole_archive_flag_spec=
-	  fi
-	  if test -n "$whole_archive_flag_spec"; then
-	    save_libobjs=$libobjs
-	    eval libobjs=\"\$libobjs $whole_archive_flag_spec\"
-	    test "X$libobjs" = "X " && libobjs=
-	  else
-	    gentop=$output_objdir/${outputname}x
-	    func_append generated " $gentop"
-
-	    func_extract_archives $gentop $convenience
-	    func_append libobjs " $func_extract_archives_result"
-	    test "X$libobjs" = "X " && libobjs=
-	  fi
-	fi
-
-	if test yes = "$thread_safe" && test -n "$thread_safe_flag_spec"; then
-	  eval flag=\"$thread_safe_flag_spec\"
-	  func_append linker_flags " $flag"
-	fi
-
-	# Make a backup of the uninstalled library when relinking
-	if test relink = "$opt_mode"; then
-	  $opt_dry_run || eval '(cd $output_objdir && $RM ${realname}U && $MV $realname ${realname}U)' || exit $?
-	fi
-
-	# Do each of the archive commands.
-	if test yes = "$module" && test -n "$module_cmds"; then
-	  if test -n "$export_symbols" && test -n "$module_expsym_cmds"; then
-	    eval test_cmds=\"$module_expsym_cmds\"
-	    cmds=$module_expsym_cmds
-	  else
-	    eval test_cmds=\"$module_cmds\"
-	    cmds=$module_cmds
-	  fi
-	else
-	  if test -n "$export_symbols" && test -n "$archive_expsym_cmds"; then
-	    eval test_cmds=\"$archive_expsym_cmds\"
-	    cmds=$archive_expsym_cmds
-	  else
-	    eval test_cmds=\"$archive_cmds\"
-	    cmds=$archive_cmds
-	  fi
-	fi
-
-	if test : != "$skipped_export" &&
-	   func_len " $test_cmds" &&
-	   len=$func_len_result &&
-	   test "$len" -lt "$max_cmd_len" || test "$max_cmd_len" -le -1; then
-	  :
-	else
-	  # The command line is too long to link in one step, link piecewise
-	  # or, if using GNU ld and skipped_export is not :, use a linker
-	  # script.
-
-	  # Save the value of $output and $libobjs because we want to
-	  # use them later.  If we have whole_archive_flag_spec, we
-	  # want to use save_libobjs as it was before
-	  # whole_archive_flag_spec was expanded, because we can't
-	  # assume the linker understands whole_archive_flag_spec.
-	  # This may have to be revisited, in case too many
-	  # convenience libraries get linked in and end up exceeding
-	  # the spec.
-	  if test -z "$convenience" || test -z "$whole_archive_flag_spec"; then
-	    save_libobjs=$libobjs
-	  fi
-	  save_output=$output
-	  func_basename "$output"
-	  output_la=$func_basename_result
-
-	  # Clear the reloadable object creation command queue and
-	  # initialize k to one.
-	  test_cmds=
-	  concat_cmds=
-	  objlist=
-	  last_robj=
-	  k=1
-
-	  if test -n "$save_libobjs" && test : != "$skipped_export" && test -n "$file_list_spec"; then
-	    output=$output_objdir/$output_la.lnk
-	    func_verbose "creating linker input file list: $output"
-	    : > $output
-	    set x $save_libobjs
-	    shift
-	    firstobj=
-	    if test yes = "$compiler_needs_object"; then
-	      firstobj="$1 "
-	      shift
-	    fi
-	    for obj
-	    do
-	      func_to_tool_file "$obj"
-	      $ECHO "$func_to_tool_file_result" >> $output
-	    done
-	    func_append delfiles " $output"
-	    func_to_tool_file "$output"
-	    output=$firstobj\"$file_list_spec$func_to_tool_file_result\"
-	  elif test -n "$save_libobjs" && test : != "$skipped_export" && test yes = "$with_gnu_ld"; then
-	    output=$output_objdir/$output_la.lnkscript
-	    func_verbose "creating GNU ld script: $output"
-	    echo 'INPUT (' > $output
-	    for obj in $save_libobjs
-	    do
-	      func_to_tool_file "$obj"
-	      $ECHO "$func_to_tool_file_result" >> $output
-	    done
-	    echo ')' >> $output
-	    func_append delfiles " $output"
-	    func_to_tool_file "$output"
-	    output=$func_to_tool_file_result
-	  else
-	    if test -n "$save_libobjs"; then
-	      func_verbose "creating reloadable object files..."
-	      output=$output_objdir/$output_la-$k.$objext
-	      eval test_cmds=\"$reload_cmds\"
-	      func_len " $test_cmds"
-	      len0=$func_len_result
-	      len=$len0
-
-	      # Loop over the list of objects to be linked.
-	      for obj in $save_libobjs
-	      do
-		func_len " $obj"
-		func_arith $len + $func_len_result
-		len=$func_arith_result
-		if test -z "$objlist" ||
-		   test "$len" -lt "$max_cmd_len"; then
-		  func_append objlist " $obj"
-		else
-		  # The command $test_cmds is almost too long, add a
-		  # command to the queue.
-		  if test 1 -eq "$k"; then
-		    # The first file doesn't have a previous command to add.
-		    reload_objs=$objlist
-		    eval concat_cmds=\"$reload_cmds\"
-		  else
-		    # All subsequent reloadable object files will link in
-		    # the last one created.
-		    reload_objs="$objlist $last_robj"
-		    eval concat_cmds=\"\$concat_cmds~$reload_cmds~\$RM $last_robj\"
-		  fi
-		  last_robj=$output_objdir/$output_la-$k.$objext
-		  func_arith $k + 1
-		  k=$func_arith_result
-		  output=$output_objdir/$output_la-$k.$objext
-		  objlist=" $obj"
-		  func_len " $last_robj"
-		  func_arith $len0 + $func_len_result
-		  len=$func_arith_result
-		fi
-	      done
-	      # Handle the remaining objects by creating one last
-	      # reloadable object file.  All subsequent reloadable object
-	      # files will link in the last one created.
-	      test -z "$concat_cmds" || concat_cmds=$concat_cmds~
-	      reload_objs="$objlist $last_robj"
-	      eval concat_cmds=\"\$concat_cmds$reload_cmds\"
-	      if test -n "$last_robj"; then
-	        eval concat_cmds=\"\$concat_cmds~\$RM $last_robj\"
-	      fi
-	      func_append delfiles " $output"
-
-	    else
-	      output=
-	    fi
-
-	    ${skipped_export-false} && {
-	      func_verbose "generating symbol list for '$libname.la'"
-	      export_symbols=$output_objdir/$libname.exp
-	      $opt_dry_run || $RM $export_symbols
-	      libobjs=$output
-	      # Append the command to create the export file.
-	      test -z "$concat_cmds" || concat_cmds=$concat_cmds~
-	      eval concat_cmds=\"\$concat_cmds$export_symbols_cmds\"
-	      if test -n "$last_robj"; then
-		eval concat_cmds=\"\$concat_cmds~\$RM $last_robj\"
-	      fi
-	    }
-
-	    test -n "$save_libobjs" &&
-	      func_verbose "creating a temporary reloadable object file: $output"
-
-	    # Loop through the commands generated above and execute them.
-	    save_ifs=$IFS; IFS='~'
-	    for cmd in $concat_cmds; do
-	      IFS=$save_ifs
-	      $opt_quiet || {
-		  func_quote_arg expand,pretty "$cmd"
-		  eval "func_echo $func_quote_arg_result"
-	      }
-	      $opt_dry_run || eval "$cmd" || {
-		lt_exit=$?
-
-		# Restore the uninstalled library and exit
-		if test relink = "$opt_mode"; then
-		  ( cd "$output_objdir" && \
-		    $RM "${realname}T" && \
-		    $MV "${realname}U" "$realname" )
-		fi
-
-		exit $lt_exit
-	      }
-	    done
-	    IFS=$save_ifs
-
-	    if test -n "$export_symbols_regex" && ${skipped_export-false}; then
-	      func_show_eval '$EGREP -e "$export_symbols_regex" "$export_symbols" > "${export_symbols}T"'
-	      func_show_eval '$MV "${export_symbols}T" "$export_symbols"'
-	    fi
-	  fi
-
-          ${skipped_export-false} && {
-	    if test -n "$export_symbols" && test -n "$include_expsyms"; then
-	      tmp_export_symbols=$export_symbols
-	      test -n "$orig_export_symbols" && tmp_export_symbols=$orig_export_symbols
-	      $opt_dry_run || eval '$ECHO "$include_expsyms" | $SP2NL >> "$tmp_export_symbols"'
-	    fi
-
-	    if test -n "$orig_export_symbols"; then
-	      # The given exports_symbols file has to be filtered, so filter it.
-	      func_verbose "filter symbol list for '$libname.la' to tag DATA exports"
-	      # FIXME: $output_objdir/$libname.filter potentially contains lots of
-	      # 's' commands, which not all seds can handle. GNU sed should be fine
-	      # though. Also, the filter scales superlinearly with the number of
-	      # global variables. join(1) would be nice here, but unfortunately
-	      # isn't a blessed tool.
-	      $opt_dry_run || $SED -e '/[ ,]DATA/!d;s,\(.*\)\([ \,].*\),s|^\1$|\1\2|,' < $export_symbols > $output_objdir/$libname.filter
-	      func_append delfiles " $export_symbols $output_objdir/$libname.filter"
-	      export_symbols=$output_objdir/$libname.def
-	      $opt_dry_run || $SED -f $output_objdir/$libname.filter < $orig_export_symbols > $export_symbols
-	    fi
-	  }
-
-	  libobjs=$output
-	  # Restore the value of output.
-	  output=$save_output
-
-	  if test -n "$convenience" && test -n "$whole_archive_flag_spec"; then
-	    eval libobjs=\"\$libobjs $whole_archive_flag_spec\"
-	    test "X$libobjs" = "X " && libobjs=
-	  fi
-	  # Expand the library linking commands again to reset the
-	  # value of $libobjs for piecewise linking.
-
-	  # Do each of the archive commands.
-	  if test yes = "$module" && test -n "$module_cmds"; then
-	    if test -n "$export_symbols" && test -n "$module_expsym_cmds"; then
-	      cmds=$module_expsym_cmds
-	    else
-	      cmds=$module_cmds
-	    fi
-	  else
-	    if test -n "$export_symbols" && test -n "$archive_expsym_cmds"; then
-	      cmds=$archive_expsym_cmds
-	    else
-	      cmds=$archive_cmds
-	    fi
-	  fi
-	fi
-
-	if test -n "$delfiles"; then
-	  # Append the command to remove temporary files to $cmds.
-	  eval cmds=\"\$cmds~\$RM $delfiles\"
-	fi
-
-	# Add any objects from preloaded convenience libraries
-	if test -n "$dlprefiles"; then
-	  gentop=$output_objdir/${outputname}x
-	  func_append generated " $gentop"
-
-	  func_extract_archives $gentop $dlprefiles
-	  func_append libobjs " $func_extract_archives_result"
-	  test "X$libobjs" = "X " && libobjs=
-	fi
-
-	save_ifs=$IFS; IFS='~'
-	for cmd in $cmds; do
-	  IFS=$sp$nl
-	  eval cmd=\"$cmd\"
-	  IFS=$save_ifs
-	  $opt_quiet || {
-	    func_quote_arg expand,pretty "$cmd"
-	    eval "func_echo $func_quote_arg_result"
-	  }
-	  $opt_dry_run || eval "$cmd" || {
-	    lt_exit=$?
-
-	    # Restore the uninstalled library and exit
-	    if test relink = "$opt_mode"; then
-	      ( cd "$output_objdir" && \
-	        $RM "${realname}T" && \
-		$MV "${realname}U" "$realname" )
-	    fi
-
-	    exit $lt_exit
-	  }
-	done
-	IFS=$save_ifs
-
-	# Restore the uninstalled library and exit
-	if test relink = "$opt_mode"; then
-	  $opt_dry_run || eval '(cd $output_objdir && $RM ${realname}T && $MV $realname ${realname}T && $MV ${realname}U $realname)' || exit $?
-
-	  if test -n "$convenience"; then
-	    if test -z "$whole_archive_flag_spec"; then
-	      func_show_eval '${RM}r "$gentop"'
-	    fi
-	  fi
-
-	  exit $EXIT_SUCCESS
-	fi
-
-	# Create links to the real library.
-	for linkname in $linknames; do
-	  if test "$realname" != "$linkname"; then
-	    func_show_eval '(cd "$output_objdir" && $RM "$linkname" && $LN_S "$realname" "$linkname")' 'exit $?'
-	  fi
-	done
-
-	# If -module or -export-dynamic was specified, set the dlname.
-	if test yes = "$module" || test yes = "$export_dynamic"; then
-	  # On all known operating systems, these are identical.
-	  dlname=$soname
-	fi
-      fi
-      ;;
-
-    obj)
-      if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then
-	func_warning "'-dlopen' is ignored for objects"
-      fi
-
-      case " $deplibs" in
-      *\ -l* | *\ -L*)
-	func_warning "'-l' and '-L' are ignored for objects" ;;
-      esac
-
-      test -n "$rpath" && \
-	func_warning "'-rpath' is ignored for objects"
-
-      test -n "$xrpath" && \
-	func_warning "'-R' is ignored for objects"
-
-      test -n "$vinfo" && \
-	func_warning "'-version-info' is ignored for objects"
-
-      test -n "$release" && \
-	func_warning "'-release' is ignored for objects"
-
-      case $output in
-      *.lo)
-	test -n "$objs$old_deplibs" && \
-	  func_fatal_error "cannot build library object '$output' from non-libtool objects"
-
-	libobj=$output
-	func_lo2o "$libobj"
-	obj=$func_lo2o_result
-	;;
-      *)
-	libobj=
-	obj=$output
-	;;
-      esac
-
-      # Delete the old objects.
-      $opt_dry_run || $RM $obj $libobj
-
-      # Objects from convenience libraries.  This assumes
-      # single-version convenience libraries.  Whenever we create
-      # different ones for PIC/non-PIC, this we'll have to duplicate
-      # the extraction.
-      reload_conv_objs=
-      gentop=
-      # if reload_cmds runs $LD directly, get rid of -Wl from
-      # whole_archive_flag_spec and hope we can get by with turning comma
-      # into space.
-      case $reload_cmds in
-        *\$LD[\ \$]*) wl= ;;
-      esac
-      if test -n "$convenience"; then
-	if test -n "$whole_archive_flag_spec"; then
-	  eval tmp_whole_archive_flags=\"$whole_archive_flag_spec\"
-	  test -n "$wl" || tmp_whole_archive_flags=`$ECHO "$tmp_whole_archive_flags" | $SED 's|,| |g'`
-	  reload_conv_objs=$reload_objs\ $tmp_whole_archive_flags
-	else
-	  gentop=$output_objdir/${obj}x
-	  func_append generated " $gentop"
-
-	  func_extract_archives $gentop $convenience
-	  reload_conv_objs="$reload_objs $func_extract_archives_result"
-	fi
-      fi
-
-      # If we're not building shared, we need to use non_pic_objs
-      test yes = "$build_libtool_libs" || libobjs=$non_pic_objects
-
-      # Create the old-style object.
-      reload_objs=$objs$old_deplibs' '`$ECHO "$libobjs" | $SP2NL | $SED "/\.$libext$/d; /\.lib$/d; $lo2o" | $NL2SP`' '$reload_conv_objs
-
-      output=$obj
-      func_execute_cmds "$reload_cmds" 'exit $?'
-
-      # Exit if we aren't doing a library object file.
-      if test -z "$libobj"; then
-	if test -n "$gentop"; then
-	  func_show_eval '${RM}r "$gentop"'
-	fi
-
-	exit $EXIT_SUCCESS
-      fi
-
-      test yes = "$build_libtool_libs" || {
-	if test -n "$gentop"; then
-	  func_show_eval '${RM}r "$gentop"'
-	fi
-
-	# Create an invalid libtool object if no PIC, so that we don't
-	# accidentally link it into a program.
-	# $show "echo timestamp > $libobj"
-	# $opt_dry_run || eval "echo timestamp > $libobj" || exit $?
-	exit $EXIT_SUCCESS
-      }
-
-      if test -n "$pic_flag" || test default != "$pic_mode"; then
-	# Only do commands if we really have different PIC objects.
-	reload_objs="$libobjs $reload_conv_objs"
-	output=$libobj
-	func_execute_cmds "$reload_cmds" 'exit $?'
-      fi
-
-      if test -n "$gentop"; then
-	func_show_eval '${RM}r "$gentop"'
-      fi
-
-      exit $EXIT_SUCCESS
-      ;;
-
-    prog)
-      case $host in
-	*cygwin*) func_stripname '' '.exe' "$output"
-	          output=$func_stripname_result.exe;;
-      esac
-      test -n "$vinfo" && \
-	func_warning "'-version-info' is ignored for programs"
-
-      test -n "$release" && \
-	func_warning "'-release' is ignored for programs"
-
-      $preload \
-	&& test unknown,unknown,unknown = "$dlopen_support,$dlopen_self,$dlopen_self_static" \
-	&& func_warning "'LT_INIT([dlopen])' not used. Assuming no dlopen support."
-
-      case $host in
-      *-*-rhapsody* | *-*-darwin1.[012])
-	# On Rhapsody replace the C library is the System framework
-	compile_deplibs=`$ECHO " $compile_deplibs" | $SED 's/ -lc / System.ltframework /'`
-	finalize_deplibs=`$ECHO " $finalize_deplibs" | $SED 's/ -lc / System.ltframework /'`
-	;;
-      esac
-
-      case $host in
-      *-*-darwin*)
-	# Don't allow lazy linking, it breaks C++ global constructors
-	# But is supposedly fixed on 10.4 or later (yay!).
-	if test CXX = "$tagname"; then
-	  case ${MACOSX_DEPLOYMENT_TARGET-10.0} in
-	    10.[0123])
-	      func_append compile_command " $wl-bind_at_load"
-	      func_append finalize_command " $wl-bind_at_load"
-	    ;;
-	  esac
-	fi
-	# Time to change all our "foo.ltframework" stuff back to "-framework foo"
-	compile_deplibs=`$ECHO " $compile_deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	finalize_deplibs=`$ECHO " $finalize_deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	;;
-      esac
-
-
-      # move library search paths that coincide with paths to not yet
-      # installed libraries to the beginning of the library search list
-      new_libs=
-      for path in $notinst_path; do
-	case " $new_libs " in
-	*" -L$path/$objdir "*) ;;
-	*)
-	  case " $compile_deplibs " in
-	  *" -L$path/$objdir "*)
-	    func_append new_libs " -L$path/$objdir" ;;
-	  esac
-	  ;;
-	esac
-      done
-      for deplib in $compile_deplibs; do
-	case $deplib in
-	-L*)
-	  case " $new_libs " in
-	  *" $deplib "*) ;;
-	  *) func_append new_libs " $deplib" ;;
-	  esac
-	  ;;
-	*) func_append new_libs " $deplib" ;;
-	esac
-      done
-      compile_deplibs=$new_libs
-
-
-      func_append compile_command " $compile_deplibs"
-      func_append finalize_command " $finalize_deplibs"
-
-      if test -n "$rpath$xrpath"; then
-	# If the user specified any rpath flags, then add them.
-	for libdir in $rpath $xrpath; do
-	  # This is the magic to use -rpath.
-	  case "$finalize_rpath " in
-	  *" $libdir "*) ;;
-	  *) func_append finalize_rpath " $libdir" ;;
-	  esac
-	done
-      fi
-
-      # Now hardcode the library paths
-      rpath=
-      hardcode_libdirs=
-      for libdir in $compile_rpath $finalize_rpath; do
-	if test -n "$hardcode_libdir_flag_spec"; then
-	  if test -n "$hardcode_libdir_separator"; then
-	    if test -z "$hardcode_libdirs"; then
-	      hardcode_libdirs=$libdir
-	    else
-	      # Just accumulate the unique libdirs.
-	      case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in
-	      *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*)
-		;;
-	      *)
-		func_append hardcode_libdirs "$hardcode_libdir_separator$libdir"
-		;;
-	      esac
-	    fi
-	  else
-	    eval flag=\"$hardcode_libdir_flag_spec\"
-	    func_append rpath " $flag"
-	  fi
-	elif test -n "$runpath_var"; then
-	  case "$perm_rpath " in
-	  *" $libdir "*) ;;
-	  *) func_append perm_rpath " $libdir" ;;
-	  esac
-	fi
-	case $host in
-	*-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-cegcc*)
-	  testbindir=`$ECHO "$libdir" | $SED -e 's*/lib$*/bin*'`
-	  case :$dllsearchpath: in
-	  *":$libdir:"*) ;;
-	  ::) dllsearchpath=$libdir;;
-	  *) func_append dllsearchpath ":$libdir";;
-	  esac
-	  case :$dllsearchpath: in
-	  *":$testbindir:"*) ;;
-	  ::) dllsearchpath=$testbindir;;
-	  *) func_append dllsearchpath ":$testbindir";;
-	  esac
-	  ;;
-	esac
-      done
-      # Substitute the hardcoded libdirs into the rpath.
-      if test -n "$hardcode_libdir_separator" &&
-	 test -n "$hardcode_libdirs"; then
-	libdir=$hardcode_libdirs
-	eval rpath=\" $hardcode_libdir_flag_spec\"
-      fi
-      compile_rpath=$rpath
-
-      rpath=
-      hardcode_libdirs=
-      for libdir in $finalize_rpath; do
-	if test -n "$hardcode_libdir_flag_spec"; then
-	  if test -n "$hardcode_libdir_separator"; then
-	    if test -z "$hardcode_libdirs"; then
-	      hardcode_libdirs=$libdir
-	    else
-	      # Just accumulate the unique libdirs.
-	      case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in
-	      *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*)
-		;;
-	      *)
-		func_append hardcode_libdirs "$hardcode_libdir_separator$libdir"
-		;;
-	      esac
-	    fi
-	  else
-	    eval flag=\"$hardcode_libdir_flag_spec\"
-	    func_append rpath " $flag"
-	  fi
-	elif test -n "$runpath_var"; then
-	  case "$finalize_perm_rpath " in
-	  *" $libdir "*) ;;
-	  *) func_append finalize_perm_rpath " $libdir" ;;
-	  esac
-	fi
-      done
-      # Substitute the hardcoded libdirs into the rpath.
-      if test -n "$hardcode_libdir_separator" &&
-	 test -n "$hardcode_libdirs"; then
-	libdir=$hardcode_libdirs
-	eval rpath=\" $hardcode_libdir_flag_spec\"
-      fi
-      finalize_rpath=$rpath
-
-      if test -n "$libobjs" && test yes = "$build_old_libs"; then
-	# Transform all the library objects into standard objects.
-	compile_command=`$ECHO "$compile_command" | $SP2NL | $SED "$lo2o" | $NL2SP`
-	finalize_command=`$ECHO "$finalize_command" | $SP2NL | $SED "$lo2o" | $NL2SP`
-      fi
-
-      func_generate_dlsyms "$outputname" "@PROGRAM@" false
-
-      # template prelinking step
-      if test -n "$prelink_cmds"; then
-	func_execute_cmds "$prelink_cmds" 'exit $?'
-      fi
-
-      wrappers_required=:
-      case $host in
-      *cegcc* | *mingw32ce*)
-        # Disable wrappers for cegcc and mingw32ce hosts, we are cross compiling anyway.
-        wrappers_required=false
-        ;;
-      *cygwin* | *mingw* | *windows* )
-        test yes = "$build_libtool_libs" || wrappers_required=false
-        ;;
-      *)
-        if test no = "$need_relink" || test yes != "$build_libtool_libs"; then
-          wrappers_required=false
-        fi
-        ;;
-      esac
-      $wrappers_required || {
-	# Replace the output file specification.
-	compile_command=`$ECHO "$compile_command" | $SED 's%@OUTPUT@%'"$output"'%g'`
-	link_command=$compile_command$compile_rpath
-
-	# We have no uninstalled library dependencies, so finalize right now.
-	exit_status=0
-	func_show_eval "$link_command" 'exit_status=$?'
-
-	if test -n "$postlink_cmds"; then
-	  func_to_tool_file "$output"
-	  postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'`
-	  func_execute_cmds "$postlink_cmds" 'exit $?'
-	fi
-
-	# Delete the generated files.
-	if test -f "$output_objdir/${outputname}S.$objext"; then
-	  func_show_eval '$RM "$output_objdir/${outputname}S.$objext"'
-	fi
-
-	exit $exit_status
-      }
-
-      if test -n "$compile_shlibpath$finalize_shlibpath"; then
-	compile_command="$shlibpath_var=\"$compile_shlibpath$finalize_shlibpath\$$shlibpath_var\" $compile_command"
-      fi
-      if test -n "$finalize_shlibpath"; then
-	finalize_command="$shlibpath_var=\"$finalize_shlibpath\$$shlibpath_var\" $finalize_command"
-      fi
-
-      compile_var=
-      finalize_var=
-      if test -n "$runpath_var"; then
-	if test -n "$perm_rpath"; then
-	  # We should set the runpath_var.
-	  rpath=
-	  for dir in $perm_rpath; do
-	    func_append rpath "$dir:"
-	  done
-	  compile_var="$runpath_var=\"$rpath\$$runpath_var\" "
-	fi
-	if test -n "$finalize_perm_rpath"; then
-	  # We should set the runpath_var.
-	  rpath=
-	  for dir in $finalize_perm_rpath; do
-	    func_append rpath "$dir:"
-	  done
-	  finalize_var="$runpath_var=\"$rpath\$$runpath_var\" "
-	fi
-      fi
-
-      if test yes = "$no_install"; then
-	# We don't need to create a wrapper script.
-	link_command=$compile_var$compile_command$compile_rpath
-	# Replace the output file specification.
-	link_command=`$ECHO "$link_command" | $SED 's%@OUTPUT@%'"$output"'%g'`
-	# Delete the old output file.
-	$opt_dry_run || $RM $output
-	# Link the executable and exit
-	func_show_eval "$link_command" 'exit $?'
-
-	if test -n "$postlink_cmds"; then
-	  func_to_tool_file "$output"
-	  postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'`
-	  func_execute_cmds "$postlink_cmds" 'exit $?'
-	fi
-
-	exit $EXIT_SUCCESS
-      fi
-
-      case $hardcode_action,$fast_install in
-        relink,*)
-	  # Fast installation is not supported
-	  link_command=$compile_var$compile_command$compile_rpath
-	  relink_command=$finalize_var$finalize_command$finalize_rpath
-
-	  func_warning "this platform does not like uninstalled shared libraries"
-	  func_warning "'$output' will be relinked during installation"
-	  ;;
-        *,yes)
-	  link_command=$finalize_var$compile_command$finalize_rpath
-	  relink_command=`$ECHO "$compile_var$compile_command$compile_rpath" | $SED 's%@OUTPUT@%\$progdir/\$file%g'`
-          ;;
-	*,no)
-	  link_command=$compile_var$compile_command$compile_rpath
-	  relink_command=$finalize_var$finalize_command$finalize_rpath
-          ;;
-	*,needless)
-	  link_command=$finalize_var$compile_command$finalize_rpath
-	  relink_command=
-          ;;
-      esac
-
-      # Replace the output file specification.
-      link_command=`$ECHO "$link_command" | $SED 's%@OUTPUT@%'"$output_objdir/$outputname"'%g'`
-
-      # Delete the old output files.
-      $opt_dry_run || $RM $output $output_objdir/$outputname $output_objdir/lt-$outputname
-
-      func_show_eval "$link_command" 'exit $?'
-
-      if test -n "$postlink_cmds"; then
-	func_to_tool_file "$output_objdir/$outputname"
-	postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output_objdir/$outputname"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'`
-	func_execute_cmds "$postlink_cmds" 'exit $?'
-      fi
-
-      # Now create the wrapper script.
-      func_verbose "creating $output"
-
-      # Quote the relink command for shipping.
-      if test -n "$relink_command"; then
-	# Preserve any variables that may affect compiler behavior
-	for var in $variables_saved_for_relink; do
-	  if eval test -z \"\${$var+set}\"; then
-	    relink_command="{ test -z \"\${$var+set}\" || $lt_unset $var || { $var=; export $var; }; }; $relink_command"
-	  elif eval var_value=\$$var; test -z "$var_value"; then
-	    relink_command="$var=; export $var; $relink_command"
-	  else
-	    func_quote_arg pretty "$var_value"
-	    relink_command="$var=$func_quote_arg_result; export $var; $relink_command"
-	  fi
-	done
-	func_quote eval cd "`pwd`"
-	func_quote_arg pretty,unquoted "($func_quote_result; $relink_command)"
-	relink_command=$func_quote_arg_unquoted_result
-      fi
-
-      # Only actually do things if not in dry run mode.
-      $opt_dry_run || {
-	# win32 will think the script is a binary if it has
-	# a .exe suffix, so we strip it off here.
-	case $output in
-	  *.exe) func_stripname '' '.exe' "$output"
-	         output=$func_stripname_result ;;
-	esac
-	# test for cygwin because mv fails w/o .exe extensions
-	case $host in
-	  *cygwin*)
-	    exeext=.exe
-	    func_stripname '' '.exe' "$outputname"
-	    outputname=$func_stripname_result ;;
-	  *) exeext= ;;
-	esac
-	case $host in
-	  *cygwin* | *mingw* | windows* )
-	    func_dirname_and_basename "$output" "" "."
-	    output_name=$func_basename_result
-	    output_path=$func_dirname_result
-	    cwrappersource=$output_path/$objdir/lt-$output_name.c
-	    cwrapper=$output_path/$output_name.exe
-	    $RM $cwrappersource $cwrapper
-	    trap "$RM $cwrappersource $cwrapper; exit $EXIT_FAILURE" 1 2 15
-
-	    func_emit_cwrapperexe_src > $cwrappersource
-
-	    # The wrapper executable is built using the $host compiler,
-	    # because it contains $host paths and files. If cross-
-	    # compiling, it, like the target executable, must be
-	    # executed on the $host or under an emulation environment.
-	    $opt_dry_run || {
-	      $LTCC $LTCFLAGS -o $cwrapper $cwrappersource
-	      $STRIP $cwrapper
-	    }
-
-	    # Now, create the wrapper script for func_source use:
-	    func_ltwrapper_scriptname $cwrapper
-	    $RM $func_ltwrapper_scriptname_result
-	    trap "$RM $func_ltwrapper_scriptname_result; exit $EXIT_FAILURE" 1 2 15
-	    $opt_dry_run || {
-	      # note: this script will not be executed, so do not chmod.
-	      if test "x$build" = "x$host"; then
-		$cwrapper --lt-dump-script > $func_ltwrapper_scriptname_result
-	      else
-		func_emit_wrapper no > $func_ltwrapper_scriptname_result
-	      fi
-	    }
-	  ;;
-	  * )
-	    $RM $output
-	    trap "$RM $output; exit $EXIT_FAILURE" 1 2 15
-
-	    func_emit_wrapper no > $output
-	    chmod +x $output
-	  ;;
-	esac
-      }
-      exit $EXIT_SUCCESS
-      ;;
-    esac
-
-    # See if we need to build an old-fashioned archive.
-    for oldlib in $oldlibs; do
-
-      case $build_libtool_libs in
-        convenience)
-	  oldobjs="$libobjs_save $symfileobj"
-	  addlibs=$convenience
-	  build_libtool_libs=no
-	  ;;
-	module)
-	  oldobjs=$libobjs_save
-	  addlibs=$old_convenience
-	  build_libtool_libs=no
-          ;;
-	*)
-	  oldobjs="$old_deplibs $non_pic_objects"
-	  $preload && test -f "$symfileobj" \
-	    && func_append oldobjs " $symfileobj"
-	  addlibs=$old_convenience
-	  ;;
-      esac
-
-      if test -n "$addlibs"; then
-	gentop=$output_objdir/${outputname}x
-	func_append generated " $gentop"
-
-	func_extract_archives $gentop $addlibs
-	func_append oldobjs " $func_extract_archives_result"
-      fi
-
-      # Do each command in the archive commands.
-      if test -n "$old_archive_from_new_cmds" && test yes = "$build_libtool_libs"; then
-	cmds=$old_archive_from_new_cmds
-      else
-
-	# Add any objects from preloaded convenience libraries
-	if test -n "$dlprefiles"; then
-	  gentop=$output_objdir/${outputname}x
-	  func_append generated " $gentop"
-
-	  func_extract_archives $gentop $dlprefiles
-	  func_append oldobjs " $func_extract_archives_result"
-	fi
-
-	# POSIX demands no paths to be encoded in archives.  We have
-	# to avoid creating archives with duplicate basenames if we
-	# might have to extract them afterwards, e.g., when creating a
-	# static archive out of a convenience library, or when linking
-	# the entirety of a libtool archive into another (currently
-	# not supported by libtool).
-	if (for obj in $oldobjs
-	    do
-	      func_basename "$obj"
-	      $ECHO "$func_basename_result"
-	    done | sort | sort -uc >/dev/null 2>&1); then
-	  :
-	else
-	  echo "copying selected object files to avoid basename conflicts..."
-	  gentop=$output_objdir/${outputname}x
-	  func_append generated " $gentop"
-	  func_mkdir_p "$gentop"
-	  save_oldobjs=$oldobjs
-	  oldobjs=
-	  counter=1
-	  for obj in $save_oldobjs
-	  do
-	    func_basename "$obj"
-	    objbase=$func_basename_result
-	    case " $oldobjs " in
-	    " ") oldobjs=$obj ;;
-	    *[\ /]"$objbase "*)
-	      while :; do
-		# Make sure we don't pick an alternate name that also
-		# overlaps.
-		newobj=lt$counter-$objbase
-		func_arith $counter + 1
-		counter=$func_arith_result
-		case " $oldobjs " in
-		*[\ /]"$newobj "*) ;;
-		*) if test ! -f "$gentop/$newobj"; then break; fi ;;
-		esac
-	      done
-	      func_show_eval "ln $obj $gentop/$newobj || cp $obj $gentop/$newobj"
-	      func_append oldobjs " $gentop/$newobj"
-	      ;;
-	    *) func_append oldobjs " $obj" ;;
-	    esac
-	  done
-	fi
-	func_to_tool_file "$oldlib" func_convert_file_msys_to_w32
-	tool_oldlib=$func_to_tool_file_result
-	eval cmds=\"$old_archive_cmds\"
-
-	func_len " $cmds"
-	len=$func_len_result
-	if test "$len" -lt "$max_cmd_len" || test "$max_cmd_len" -le -1; then
-	  cmds=$old_archive_cmds
-	elif test -n "$archiver_list_spec"; then
-	  func_verbose "using command file archive linking..."
-	  for obj in $oldobjs
-	  do
-	    func_to_tool_file "$obj"
-	    $ECHO "$func_to_tool_file_result"
-	  done > $output_objdir/$libname.libcmd
-	  func_to_tool_file "$output_objdir/$libname.libcmd"
-	  oldobjs=" $archiver_list_spec$func_to_tool_file_result"
-	  cmds=$old_archive_cmds
-	else
-	  # the command line is too long to link in one step, link in parts
-	  func_verbose "using piecewise archive linking..."
-	  save_RANLIB=$RANLIB
-	  RANLIB=:
-	  objlist=
-	  concat_cmds=
-	  save_oldobjs=$oldobjs
-	  oldobjs=
-	  # Is there a better way of finding the last object in the list?
-	  for obj in $save_oldobjs
-	  do
-	    last_oldobj=$obj
-	  done
-	  eval test_cmds=\"$old_archive_cmds\"
-	  func_len " $test_cmds"
-	  len0=$func_len_result
-	  len=$len0
-	  for obj in $save_oldobjs
-	  do
-	    func_len " $obj"
-	    func_arith $len + $func_len_result
-	    len=$func_arith_result
-	    func_append objlist " $obj"
-	    if test "$len" -lt "$max_cmd_len"; then
-	      :
-	    else
-	      # the above command should be used before it gets too long
-	      oldobjs=$objlist
-	      if test "$obj" = "$last_oldobj"; then
-		RANLIB=$save_RANLIB
-	      fi
-	      test -z "$concat_cmds" || concat_cmds=$concat_cmds~
-	      eval concat_cmds=\"\$concat_cmds$old_archive_cmds\"
-	      objlist=
-	      len=$len0
-	    fi
-	  done
-	  RANLIB=$save_RANLIB
-	  oldobjs=$objlist
-	  if test -z "$oldobjs"; then
-	    eval cmds=\"\$concat_cmds\"
-	  else
-	    eval cmds=\"\$concat_cmds~\$old_archive_cmds\"
-	  fi
-	fi
-      fi
-      func_execute_cmds "$cmds" 'exit $?'
-    done
-
-    test -n "$generated" && \
-      func_show_eval "${RM}r$generated"
-
-    # Now create the libtool archive.
-    case $output in
-    *.la)
-      old_library=
-      test yes = "$build_old_libs" && old_library=$libname.$libext
-      func_verbose "creating $output"
-
-      # Preserve any variables that may affect compiler behavior
-      for var in $variables_saved_for_relink; do
-	if eval test -z \"\${$var+set}\"; then
-	  relink_command="{ test -z \"\${$var+set}\" || $lt_unset $var || { $var=; export $var; }; }; $relink_command"
-	elif eval var_value=\$$var; test -z "$var_value"; then
-	  relink_command="$var=; export $var; $relink_command"
-	else
-	  func_quote_arg pretty,unquoted "$var_value"
-	  relink_command="$var=$func_quote_arg_unquoted_result; export $var; $relink_command"
-	fi
-      done
-      # Quote the link command for shipping.
-      func_quote eval cd "`pwd`"
-      relink_command="($func_quote_result; $SHELL \"$progpath\" $preserve_args --mode=relink $libtool_args @inst_prefix_dir@)"
-      func_quote_arg pretty,unquoted "$relink_command"
-      relink_command=$func_quote_arg_unquoted_result
-      if test yes = "$hardcode_automatic"; then
-	relink_command=
-      fi
-
-      # Only create the output if not a dry run.
-      $opt_dry_run || {
-	for installed in no yes; do
-	  if test yes = "$installed"; then
-	    if test -z "$install_libdir"; then
-	      break
-	    fi
-	    output=$output_objdir/${outputname}i
-	    # Replace all uninstalled libtool libraries with the installed ones
-	    newdependency_libs=
-	    for deplib in $dependency_libs; do
-	      case $deplib in
-	      *.la)
-		func_basename "$deplib"
-		name=$func_basename_result
-		func_resolve_sysroot "$deplib"
-		eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $func_resolve_sysroot_result`
-		test -z "$libdir" && \
-		  func_fatal_error "'$deplib' is not a valid libtool archive"
-		func_append newdependency_libs " ${lt_sysroot:+=}$libdir/$name"
-		;;
-	      -L*)
-		func_stripname -L '' "$deplib"
-		func_replace_sysroot "$func_stripname_result"
-		func_append newdependency_libs " -L$func_replace_sysroot_result"
-		;;
-	      -R*)
-		func_stripname -R '' "$deplib"
-		func_replace_sysroot "$func_stripname_result"
-		func_append newdependency_libs " -R$func_replace_sysroot_result"
-		;;
-	      *) func_append newdependency_libs " $deplib" ;;
-	      esac
-	    done
-	    dependency_libs=$newdependency_libs
-	    newdlfiles=
-
-	    for lib in $dlfiles; do
-	      case $lib in
-	      *.la)
-	        func_basename "$lib"
-		name=$func_basename_result
-		eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $lib`
-		test -z "$libdir" && \
-		  func_fatal_error "'$lib' is not a valid libtool archive"
-		func_append newdlfiles " ${lt_sysroot:+=}$libdir/$name"
-		;;
-	      *) func_append newdlfiles " $lib" ;;
-	      esac
-	    done
-	    dlfiles=$newdlfiles
-	    newdlprefiles=
-	    for lib in $dlprefiles; do
-	      case $lib in
-	      *.la)
-		# Only pass preopened files to the pseudo-archive (for
-		# eventual linking with the app. that links it) if we
-		# didn't already link the preopened objects directly into
-		# the library:
-		func_basename "$lib"
-		name=$func_basename_result
-		eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $lib`
-		test -z "$libdir" && \
-		  func_fatal_error "'$lib' is not a valid libtool archive"
-		func_append newdlprefiles " ${lt_sysroot:+=}$libdir/$name"
-		;;
-	      esac
-	    done
-	    dlprefiles=$newdlprefiles
-	  else
-	    newdlfiles=
-	    for lib in $dlfiles; do
-	      case $lib in
-		[\\/]* | [A-Za-z]:[\\/]*) abs=$lib ;;
-		*) abs=`pwd`"/$lib" ;;
-	      esac
-	      func_append newdlfiles " $abs"
-	    done
-	    dlfiles=$newdlfiles
-	    newdlprefiles=
-	    for lib in $dlprefiles; do
-	      case $lib in
-		[\\/]* | [A-Za-z]:[\\/]*) abs=$lib ;;
-		*) abs=`pwd`"/$lib" ;;
-	      esac
-	      func_append newdlprefiles " $abs"
-	    done
-	    dlprefiles=$newdlprefiles
-	  fi
-	  $RM $output
-	  # place dlname in correct position for cygwin
-	  # In fact, it would be nice if we could use this code for all target
-	  # systems that can't hard-code library paths into their executables
-	  # and that have no shared library path variable independent of PATH,
-	  # but it turns out we can't easily determine that from inspecting
-	  # libtool variables, so we have to hard-code the OSs to which it
-	  # applies here; at the moment, that means platforms that use the PE
-	  # object format with DLL files.  See the long comment at the top of
-	  # tests/bindir.at for full details.
-	  tdlname=$dlname
-	  case $host,$output,$installed,$module,$dlname in
-	    *cygwin*,*lai,yes,no,*.dll | *mingw*,*lai,yes,no,*.dll | *windows*,*lai,yes,no,*.dll | *cegcc*,*lai,yes,no,*.dll)
-	      # If a -bindir argument was supplied, place the dll there.
-	      if test -n "$bindir"; then
-		func_relative_path "$install_libdir" "$bindir"
-		tdlname=$func_relative_path_result/$dlname
-	      else
-		# Otherwise fall back on heuristic.
-		tdlname=../bin/$dlname
-	      fi
-	      ;;
-	  esac
-	  $ECHO > $output "\
-# $outputname - a libtool library file
-# Generated by $PROGRAM (GNU $PACKAGE) $VERSION
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# The name that we can dlopen(3).
-dlname='$tdlname'
-
-# Names of this library.
-library_names='$library_names'
-
-# The name of the static archive.
-old_library='$old_library'
-
-# Linker flags that cannot go in dependency_libs.
-inherited_linker_flags='$new_inherited_linker_flags'
-
-# Libraries that this one depends upon.
-dependency_libs='$dependency_libs'
-
-# Names of additional weak libraries provided by this library
-weak_library_names='$weak_libs'
-
-# Version information for $libname.
-current=$current
-age=$age
-revision=$revision
-
-# Is this an already installed library?
-installed=$installed
-
-# Should we warn about portability when linking against -modules?
-shouldnotlink=$module
-
-# Files to dlopen/dlpreopen
-dlopen='$dlfiles'
-dlpreopen='$dlprefiles'
-
-# Directory that this library needs to be installed in:
-libdir='$install_libdir'"
-	  if test no,yes = "$installed,$need_relink"; then
-	    $ECHO >> $output "\
-relink_command=\"$relink_command\""
-	  fi
-	done
-      }
-
-      # Do a symbolic link so that the libtool archive can be found in
-      # LD_LIBRARY_PATH before the program is installed.
-      func_show_eval '( cd "$output_objdir" && $RM "$outputname" && $LN_S "../$outputname" "$outputname" )' 'exit $?'
-      ;;
-    esac
-    exit $EXIT_SUCCESS
-}
-
-if test link = "$opt_mode" || test relink = "$opt_mode"; then
-  func_mode_link ${1+"$@"}
-fi
-
-
-# func_mode_uninstall arg...
-func_mode_uninstall ()
-{
-    $debug_cmd
-
-    RM=$nonopt
-    files=
-    rmforce=false
-    exit_status=0
-
-    # This variable tells wrapper scripts just to set variables rather
-    # than running their programs.
-    libtool_install_magic=$magic
-
-    for arg
-    do
-      case $arg in
-      -f) func_append RM " $arg"; rmforce=: ;;
-      -*) func_append RM " $arg" ;;
-      *) func_append files " $arg" ;;
-      esac
-    done
-
-    test -z "$RM" && \
-      func_fatal_help "you must specify an RM program"
-
-    rmdirs=
-
-    for file in $files; do
-      func_dirname "$file" "" "."
-      dir=$func_dirname_result
-      if test . = "$dir"; then
-	odir=$objdir
-      else
-	odir=$dir/$objdir
-      fi
-      func_basename "$file"
-      name=$func_basename_result
-      test uninstall = "$opt_mode" && odir=$dir
-
-      # Remember odir for removal later, being careful to avoid duplicates
-      if test clean = "$opt_mode"; then
-	case " $rmdirs " in
-	  *" $odir "*) ;;
-	  *) func_append rmdirs " $odir" ;;
-	esac
-      fi
-
-      # Don't error if the file doesn't exist and rm -f was used.
-      if { test -L "$file"; } >/dev/null 2>&1 ||
-	 { test -h "$file"; } >/dev/null 2>&1 ||
-	 test -f "$file"; then
-	:
-      elif test -d "$file"; then
-	exit_status=1
-	continue
-      elif $rmforce; then
-	continue
-      fi
-
-      rmfiles=$file
-
-      case $name in
-      *.la)
-	# Possibly a libtool archive, so verify it.
-	if func_lalib_p "$file"; then
-	  func_source $dir/$name
-
-	  # Delete the libtool libraries and symlinks.
-	  for n in $library_names; do
-	    func_append rmfiles " $odir/$n"
-	  done
-	  test -n "$old_library" && func_append rmfiles " $odir/$old_library"
-
-	  case $opt_mode in
-	  clean)
-	    case " $library_names " in
-	    *" $dlname "*) ;;
-	    *) test -n "$dlname" && func_append rmfiles " $odir/$dlname" ;;
-	    esac
-	    test -n "$libdir" && func_append rmfiles " $odir/$name $odir/${name}i"
-	    ;;
-	  uninstall)
-	    if test -n "$library_names"; then
-	      # Do each command in the postuninstall commands.
-	      func_execute_cmds "$postuninstall_cmds" '$rmforce || exit_status=1'
-	    fi
-
-	    if test -n "$old_library"; then
-	      # Do each command in the old_postuninstall commands.
-	      func_execute_cmds "$old_postuninstall_cmds" '$rmforce || exit_status=1'
-	    fi
-	    # FIXME: should reinstall the best remaining shared library.
-	    ;;
-	  esac
-	fi
-	;;
-
-      *.lo)
-	# Possibly a libtool object, so verify it.
-	if func_lalib_p "$file"; then
-
-	  # Read the .lo file
-	  func_source $dir/$name
-
-	  # Add PIC object to the list of files to remove.
-	  if test -n "$pic_object" && test none != "$pic_object"; then
-	    func_append rmfiles " $dir/$pic_object"
-	  fi
-
-	  # Add non-PIC object to the list of files to remove.
-	  if test -n "$non_pic_object" && test none != "$non_pic_object"; then
-	    func_append rmfiles " $dir/$non_pic_object"
-	  fi
-	fi
-	;;
-
-      *)
-	if test clean = "$opt_mode"; then
-	  noexename=$name
-	  case $file in
-	  *.exe)
-	    func_stripname '' '.exe' "$file"
-	    file=$func_stripname_result
-	    func_stripname '' '.exe' "$name"
-	    noexename=$func_stripname_result
-	    # $file with .exe has already been added to rmfiles,
-	    # add $file without .exe
-	    func_append rmfiles " $file"
-	    ;;
-	  esac
-	  # Do a test to see if this is a libtool program.
-	  if func_ltwrapper_p "$file"; then
-	    if func_ltwrapper_executable_p "$file"; then
-	      func_ltwrapper_scriptname "$file"
-	      relink_command=
-	      func_source $func_ltwrapper_scriptname_result
-	      func_append rmfiles " $func_ltwrapper_scriptname_result"
-	    else
-	      relink_command=
-	      func_source $dir/$noexename
-	    fi
-
-	    # note $name still contains .exe if it was in $file originally
-	    # as does the version of $file that was added into $rmfiles
-	    func_append rmfiles " $odir/$name $odir/${name}S.$objext"
-	    if test yes = "$fast_install" && test -n "$relink_command"; then
-	      func_append rmfiles " $odir/lt-$name"
-	    fi
-	    if test "X$noexename" != "X$name"; then
-	      func_append rmfiles " $odir/lt-$noexename.c"
-	    fi
-	  fi
-	fi
-	;;
-      esac
-      func_show_eval "$RM $rmfiles" 'exit_status=1'
-    done
-
-    # Try to remove the $objdir's in the directories where we deleted files
-    for dir in $rmdirs; do
-      if test -d "$dir"; then
-	func_show_eval "rmdir $dir >/dev/null 2>&1"
-      fi
-    done
-
-    exit $exit_status
-}
-
-if test uninstall = "$opt_mode" || test clean = "$opt_mode"; then
-  func_mode_uninstall ${1+"$@"}
-fi
-
-test -z "$opt_mode" && {
-  help=$generic_help
-  func_fatal_help "you must specify a MODE"
-}
-
-test -z "$exec_cmd" && \
-  func_fatal_help "invalid operation mode '$opt_mode'"
-
-if test -n "$exec_cmd"; then
-  eval exec "$exec_cmd"
-  exit $EXIT_FAILURE
-fi
-
-exit $exit_status
-
-
-# The TAGs below are defined such that we never get into a situation
-# where we disable both kinds of libraries.  Given conflicting
-# choices, we go for a static library, that is the most portable,
-# since we can't tell whether shared libraries were disabled because
-# the user asked for that or because the platform doesn't support
-# them.  This is particularly important on AIX, because we don't
-# support having both static and shared libraries enabled at the same
-# time on that platform, so we default to a shared-only configuration.
-# If a disable-shared tag is given, we'll fallback to a static-only
-# configuration.  But we'll never go from static-only to shared-only.
-
-# ### BEGIN LIBTOOL TAG CONFIG: disable-shared
-build_libtool_libs=no
-build_old_libs=yes
-# ### END LIBTOOL TAG CONFIG: disable-shared
-
-# ### BEGIN LIBTOOL TAG CONFIG: disable-static
-build_old_libs=`case $build_libtool_libs in yes) echo no;; *) echo yes;; esac`
-# ### END LIBTOOL TAG CONFIG: disable-static
-
-# Local Variables:
-# mode:shell-script
-# sh-indentation:2
-# End:
diff --git a/experiments/wasm-gui/third_party/libXext/ltmain.sh b/experiments/wasm-gui/third_party/libXext/ltmain.sh
deleted file mode 100644
index 3e6a3db3a..000000000
--- a/experiments/wasm-gui/third_party/libXext/ltmain.sh
+++ /dev/null
@@ -1,11524 +0,0 @@
-#! /usr/bin/env sh
-## DO NOT EDIT - This file generated from ./build-aux/ltmain.in
-##               by inline-source v2019-02-19.15
-
-# libtool (GNU libtool) 2.5.4
-# Provide generalized library-building support services.
-# Written by Gordon Matzigkeit <gord@gnu.ai.mit.edu>, 1996
-
-# Copyright (C) 1996-2019, 2021-2024 Free Software Foundation, Inc.
-# This is free software; see the source for copying conditions.  There is NO
-# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-
-# GNU Libtool is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# As a special exception to the GNU General Public License,
-# if you distribute this file as part of a program or library that
-# is built using GNU Libtool, you may include this file under the
-# same distribution terms that you use for the rest of that program.
-#
-# GNU Libtool is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-# General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-
-PROGRAM=libtool
-PACKAGE=libtool
-VERSION=2.5.4
-package_revision=2.5.4
-
-
-## ------ ##
-## Usage. ##
-## ------ ##
-
-# Run './libtool --help' for help with using this script from the
-# command line.
-
-
-## ------------------------------- ##
-## User overridable command paths. ##
-## ------------------------------- ##
-
-# After configure completes, it has a better idea of some of the
-# shell tools we need than the defaults used by the functions shared
-# with bootstrap, so set those here where they can still be over-
-# ridden by the user, but otherwise take precedence.
-
-: ${AUTOCONF="autoconf"}
-: ${AUTOMAKE="automake"}
-
-
-## -------------------------- ##
-## Source external libraries. ##
-## -------------------------- ##
-
-# Much of our low-level functionality needs to be sourced from external
-# libraries, which are installed to $pkgauxdir.
-
-# Set a version string for this script.
-scriptversion=2019-02-19.15; # UTC
-
-# General shell script boiler plate, and helper functions.
-# Written by Gary V. Vaughan, 2004
-
-# This is free software.  There is NO warranty; not even for
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-#
-# Copyright (C) 2004-2019, 2021, 2023-2024 Bootstrap Authors
-#
-# This file is dual licensed under the terms of the MIT license
-# <https://opensource.org/licenses/MIT>, and GPL version 2 or later
-# <https://www.gnu.org/licenses/gpl-2.0.html>.  You must apply one of
-# these licenses when using or redistributing this software or any of
-# the files within it.  See the URLs above, or the file `LICENSE`
-# included in the Bootstrap distribution for the full license texts.
-
-# Please report bugs or propose patches to:
-# <https://github.com/gnulib-modules/bootstrap/issues>
-
-
-## ------ ##
-## Usage. ##
-## ------ ##
-
-# Evaluate this file near the top of your script to gain access to
-# the functions and variables defined here:
-#
-#   . `echo "$0" | ${SED-sed} 's|[^/]*$||'`/build-aux/funclib.sh
-#
-# If you need to override any of the default environment variable
-# settings, do that before evaluating this file.
-
-
-## -------------------- ##
-## Shell normalisation. ##
-## -------------------- ##
-
-# Some shells need a little help to be as Bourne compatible as possible.
-# Before doing anything else, make sure all that help has been provided!
-
-DUALCASE=1; export DUALCASE # for MKS sh
-if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # is contrary to our usage.  Disable this feature.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else
-  case `(set -o) 2>/dev/null` in *posix*) set -o posix ;; esac
-fi
-
-# NLS nuisances: We save the old values in case they are required later.
-_G_user_locale=
-_G_safe_locale=
-for _G_var in LANG LANGUAGE LC_ALL LC_CTYPE LC_COLLATE LC_MESSAGES
-do
-  eval "if test set = \"\${$_G_var+set}\"; then
-          save_$_G_var=\$$_G_var
-          $_G_var=C
-	  export $_G_var
-	  _G_user_locale=\"$_G_var=\\\$save_\$_G_var; \$_G_user_locale\"
-	  _G_safe_locale=\"$_G_var=C; \$_G_safe_locale\"
-	fi"
-done
-# These NLS vars are set unconditionally (bootstrap issue #24).  Unset those
-# in case the environment reset is needed later and the $save_* variant is not
-# defined (see the code above).
-LC_ALL=C
-LANGUAGE=C
-export LANGUAGE LC_ALL
-
-# Make sure IFS has a sensible default
-sp=' '
-nl='
-'
-IFS="$sp	$nl"
-
-# There are apparently some systems that use ';' as a PATH separator!
-if test "${PATH_SEPARATOR+set}" != set; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# func_unset VAR
-# --------------
-# Portably unset VAR.
-# In some shells, an 'unset VAR' statement leaves a non-zero return
-# status if VAR is already unset, which might be problematic if the
-# statement is used at the end of a function (thus poisoning its return
-# value) or when 'set -e' is active (causing even a spurious abort of
-# the script in this case).
-func_unset ()
-{
-    { eval $1=; (eval unset $1) >/dev/null 2>&1 && eval unset $1 || : ; }
-}
-
-
-# Make sure CDPATH doesn't cause `cd` commands to output the target dir.
-func_unset CDPATH
-
-# Make sure ${,E,F}GREP behave sanely.
-func_unset GREP_OPTIONS
-
-
-## ------------------------- ##
-## Locate command utilities. ##
-## ------------------------- ##
-
-
-# func_executable_p FILE
-# ----------------------
-# Check that FILE is an executable regular file.
-func_executable_p ()
-{
-    test -f "$1" && test -x "$1"
-}
-
-
-# func_path_progs PROGS_LIST CHECK_FUNC [PATH]
-# --------------------------------------------
-# Search for either a program that responds to --version with output
-# containing "GNU", or else returned by CHECK_FUNC otherwise, by
-# trying all the directories in PATH with each of the elements of
-# PROGS_LIST.
-#
-# CHECK_FUNC should accept the path to a candidate program, and
-# set $func_check_prog_result if it truncates its output less than
-# $_G_path_prog_max characters.
-func_path_progs ()
-{
-    _G_progs_list=$1
-    _G_check_func=$2
-    _G_PATH=${3-"$PATH"}
-
-    _G_path_prog_max=0
-    _G_path_prog_found=false
-    _G_save_IFS=$IFS; IFS=${PATH_SEPARATOR-:}
-    for _G_dir in $_G_PATH; do
-      IFS=$_G_save_IFS
-      test -z "$_G_dir" && _G_dir=.
-      for _G_prog_name in $_G_progs_list; do
-        for _exeext in '' .EXE; do
-          _G_path_prog=$_G_dir/$_G_prog_name$_exeext
-          func_executable_p "$_G_path_prog" || continue
-          case `"$_G_path_prog" --version 2>&1` in
-            *GNU*) func_path_progs_result=$_G_path_prog _G_path_prog_found=: ;;
-            *)     $_G_check_func $_G_path_prog
-		   func_path_progs_result=$func_check_prog_result
-		   ;;
-          esac
-          $_G_path_prog_found && break 3
-        done
-      done
-    done
-    IFS=$_G_save_IFS
-    test -z "$func_path_progs_result" && {
-      echo "no acceptable sed could be found in \$PATH" >&2
-      exit 1
-    }
-}
-
-
-# We want to be able to use the functions in this file before configure
-# has figured out where the best binaries are kept, which means we have
-# to search for them ourselves - except when the results are already set
-# where we skip the searches.
-
-# Unless the user overrides by setting SED, search the path for either GNU
-# sed, or the sed that truncates its output the least.
-test -z "$SED" && {
-  _G_sed_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/
-  for _G_i in 1 2 3 4 5 6 7; do
-    _G_sed_script=$_G_sed_script$nl$_G_sed_script
-  done
-  echo "$_G_sed_script" 2>/dev/null | sed 99q >conftest.sed
-  _G_sed_script=
-
-  func_check_prog_sed ()
-  {
-    _G_path_prog=$1
-
-    _G_count=0
-    printf 0123456789 >conftest.in
-    while :
-    do
-      cat conftest.in conftest.in >conftest.tmp
-      mv conftest.tmp conftest.in
-      cp conftest.in conftest.nl
-      echo '' >> conftest.nl
-      "$_G_path_prog" -f conftest.sed <conftest.nl >conftest.out 2>/dev/null || break
-      diff conftest.out conftest.nl >/dev/null 2>&1 || break
-      _G_count=`expr $_G_count + 1`
-      if test "$_G_count" -gt "$_G_path_prog_max"; then
-        # Best one so far, save it but keep looking for a better one
-        func_check_prog_result=$_G_path_prog
-        _G_path_prog_max=$_G_count
-      fi
-      # 10*(2^10) chars as input seems more than enough
-      test 10 -lt "$_G_count" && break
-    done
-    rm -f conftest.in conftest.tmp conftest.nl conftest.out
-  }
-
-  func_path_progs "sed gsed" func_check_prog_sed "$PATH:/usr/xpg4/bin"
-  rm -f conftest.sed
-  SED=$func_path_progs_result
-}
-
-
-# Unless the user overrides by setting GREP, search the path for either GNU
-# grep, or the grep that truncates its output the least.
-test -z "$GREP" && {
-  func_check_prog_grep ()
-  {
-    _G_path_prog=$1
-
-    _G_count=0
-    _G_path_prog_max=0
-    printf 0123456789 >conftest.in
-    while :
-    do
-      cat conftest.in conftest.in >conftest.tmp
-      mv conftest.tmp conftest.in
-      cp conftest.in conftest.nl
-      echo 'GREP' >> conftest.nl
-      "$_G_path_prog" -e 'GREP$' -e '-(cannot match)-' <conftest.nl >conftest.out 2>/dev/null || break
-      diff conftest.out conftest.nl >/dev/null 2>&1 || break
-      _G_count=`expr $_G_count + 1`
-      if test "$_G_count" -gt "$_G_path_prog_max"; then
-        # Best one so far, save it but keep looking for a better one
-        func_check_prog_result=$_G_path_prog
-        _G_path_prog_max=$_G_count
-      fi
-      # 10*(2^10) chars as input seems more than enough
-      test 10 -lt "$_G_count" && break
-    done
-    rm -f conftest.in conftest.tmp conftest.nl conftest.out
-  }
-
-  func_path_progs "grep ggrep" func_check_prog_grep "$PATH:/usr/xpg4/bin"
-  GREP=$func_path_progs_result
-}
-
-
-## ------------------------------- ##
-## User overridable command paths. ##
-## ------------------------------- ##
-
-# All uppercase variable names are used for environment variables.  These
-# variables can be overridden by the user before calling a script that
-# uses them if a suitable command of that name is not already available
-# in the command search PATH.
-
-: ${CP="cp -f"}
-: ${ECHO="printf %s\n"}
-: ${EGREP="$GREP -E"}
-: ${FGREP="$GREP -F"}
-: ${LN_S="ln -s"}
-: ${MAKE="make"}
-: ${MKDIR="mkdir"}
-: ${MV="mv -f"}
-: ${RM="rm -f"}
-: ${SHELL="${CONFIG_SHELL-/bin/sh}"}
-
-
-## -------------------- ##
-## Useful sed snippets. ##
-## -------------------- ##
-
-sed_dirname='s|/[^/]*$||'
-sed_basename='s|^.*/||'
-
-# Sed substitution that helps us do robust quoting.  It backslashifies
-# metacharacters that are still active within double-quoted strings.
-sed_quote_subst='s|\([`"$\\]\)|\\\1|g'
-
-# Same as above, but do not quote variable references.
-sed_double_quote_subst='s/\(["`\\]\)/\\\1/g'
-
-# Sed substitution that turns a string into a regex matching for the
-# string literally.
-sed_make_literal_regex='s|[].[^$\\*\/]|\\&|g'
-
-# Sed substitution that converts a w32 file name or path
-# that contains forward slashes, into one that contains
-# (escaped) backslashes.  A very naive implementation.
-sed_naive_backslashify='s|\\\\*|\\|g;s|/|\\|g;s|\\|\\\\|g'
-
-# Re-'\' parameter expansions in output of sed_double_quote_subst that
-# were '\'-ed in input to the same.  If an odd number of '\' preceded a
-# '$' in input to sed_double_quote_subst, that '$' was protected from
-# expansion.  Since each input '\' is now two '\'s, look for any number
-# of runs of four '\'s followed by two '\'s and then a '$'.  '\' that '$'.
-_G_bs='\\'
-_G_bs2='\\\\'
-_G_bs4='\\\\\\\\'
-_G_dollar='\$'
-sed_double_backslash="\
-  s/$_G_bs4/&\\
-/g
-  s/^$_G_bs2$_G_dollar/$_G_bs&/
-  s/\\([^$_G_bs]\\)$_G_bs2$_G_dollar/\\1$_G_bs2$_G_bs$_G_dollar/g
-  s/\n//g"
-
-# require_check_ifs_backslash
-# ---------------------------
-# Check if we can use backslash as IFS='\' separator, and set
-# $check_ifs_backshlash_broken to ':' or 'false'.
-require_check_ifs_backslash=func_require_check_ifs_backslash
-func_require_check_ifs_backslash ()
-{
-  _G_save_IFS=$IFS
-  IFS='\'
-  _G_check_ifs_backshlash='a\\b'
-  for _G_i in $_G_check_ifs_backshlash
-  do
-  case $_G_i in
-  a)
-    check_ifs_backshlash_broken=false
-    ;;
-  '')
-    break
-    ;;
-  *)
-    check_ifs_backshlash_broken=:
-    break
-    ;;
-  esac
-  done
-  IFS=$_G_save_IFS
-  require_check_ifs_backslash=:
-}
-
-
-## ----------------- ##
-## Global variables. ##
-## ----------------- ##
-
-# Except for the global variables explicitly listed below, the following
-# functions in the '^func_' namespace, and the '^require_' namespace
-# variables initialised in the 'Resource management' section, sourcing
-# this file will not pollute your global namespace with anything
-# else. There's no portable way to scope variables in Bourne shell
-# though, so actually running these functions will sometimes place
-# results into a variable named after the function, and often use
-# temporary variables in the '^_G_' namespace. If you are careful to
-# avoid using those namespaces casually in your sourcing script, things
-# should continue to work as you expect. And, of course, you can freely
-# overwrite any of the functions or variables defined here before
-# calling anything to customize them.
-
-EXIT_SUCCESS=0
-EXIT_FAILURE=1
-EXIT_MISMATCH=63  # $? = 63 is used to indicate version mismatch to missing.
-EXIT_SKIP=77	  # $? = 77 is used to indicate a skipped test to automake.
-
-# Allow overriding, eg assuming that you follow the convention of
-# putting '$debug_cmd' at the start of all your functions, you can get
-# bash to show function call trace with:
-#
-#    debug_cmd='eval echo "${FUNCNAME[0]} $*" >&2' bash your-script-name
-debug_cmd=${debug_cmd-":"}
-exit_cmd=:
-
-# By convention, finish your script with:
-#
-#    exit $exit_status
-#
-# so that you can set exit_status to non-zero if you want to indicate
-# something went wrong during execution without actually bailing out at
-# the point of failure.
-exit_status=$EXIT_SUCCESS
-
-# Work around backward compatibility issue on IRIX 6.5. On IRIX 6.4+, sh
-# is ksh but when the shell is invoked as "sh" and the current value of
-# the _XPG environment variable is not equal to 1 (one), the special
-# positional parameter $0, within a function call, is the name of the
-# function.
-progpath=$0
-
-# The name of this program.
-progname=`$ECHO "$progpath" |$SED "$sed_basename"`
-
-# Make sure we have an absolute progpath for reexecution:
-case $progpath in
-  [\\/]*|[A-Za-z]:\\*) ;;
-  *[\\/]*)
-     progdir=`$ECHO "$progpath" |$SED "$sed_dirname"`
-     progdir=`cd "$progdir" && pwd`
-     progpath=$progdir/$progname
-     ;;
-  *)
-     _G_IFS=$IFS
-     IFS=${PATH_SEPARATOR-:}
-     for progdir in $PATH; do
-       IFS=$_G_IFS
-       test -x "$progdir/$progname" && break
-     done
-     IFS=$_G_IFS
-     test -n "$progdir" || progdir=`pwd`
-     progpath=$progdir/$progname
-     ;;
-esac
-
-
-## ----------------- ##
-## Standard options. ##
-## ----------------- ##
-
-# The following options affect the operation of the functions defined
-# below, and should be set appropriately depending on run-time para-
-# meters passed on the command line.
-
-opt_dry_run=false
-opt_quiet=false
-opt_verbose=false
-
-# Categories 'all' and 'none' are always available.  Append any others
-# you will pass as the first argument to func_warning from your own
-# code.
-warning_categories=
-
-# By default, display warnings according to 'opt_warning_types'.  Set
-# 'warning_func'  to ':' to elide all warnings, or func_fatal_error to
-# treat the next displayed warning as a fatal error.
-warning_func=func_warn_and_continue
-
-# Set to 'all' to display all warnings, 'none' to suppress all
-# warnings, or a space delimited list of some subset of
-# 'warning_categories' to display only the listed warnings.
-opt_warning_types=all
-
-
-## -------------------- ##
-## Resource management. ##
-## -------------------- ##
-
-# This section contains definitions for functions that each ensure a
-# particular resource (a file, or a non-empty configuration variable for
-# example) is available, and if appropriate to extract default values
-# from pertinent package files. Call them using their associated
-# 'require_*' variable to ensure that they are executed, at most, once.
-#
-# It's entirely deliberate that calling these functions can set
-# variables that don't obey the namespace limitations obeyed by the rest
-# of this file, in order that that they be as useful as possible to
-# callers.
-
-
-# require_term_colors
-# -------------------
-# Allow display of bold text on terminals that support it.
-require_term_colors=func_require_term_colors
-func_require_term_colors ()
-{
-    $debug_cmd
-
-    test -t 1 && {
-      # COLORTERM and USE_ANSI_COLORS environment variables take
-      # precedence, because most terminfo databases neglect to describe
-      # whether color sequences are supported.
-      test -n "${COLORTERM+set}" && : ${USE_ANSI_COLORS="1"}
-
-      if test 1 = "$USE_ANSI_COLORS"; then
-        # Standard ANSI escape sequences
-        tc_reset=''
-        tc_bold='';   tc_standout=''
-        tc_red='';   tc_green=''
-        tc_blue='';  tc_cyan=''
-      else
-        # Otherwise trust the terminfo database after all.
-        test -n "`tput sgr0 2>/dev/null`" && {
-          tc_reset=`tput sgr0`
-          test -n "`tput bold 2>/dev/null`" && tc_bold=`tput bold`
-          tc_standout=$tc_bold
-          test -n "`tput smso 2>/dev/null`" && tc_standout=`tput smso`
-          test -n "`tput setaf 1 2>/dev/null`" && tc_red=`tput setaf 1`
-          test -n "`tput setaf 2 2>/dev/null`" && tc_green=`tput setaf 2`
-          test -n "`tput setaf 4 2>/dev/null`" && tc_blue=`tput setaf 4`
-          test -n "`tput setaf 5 2>/dev/null`" && tc_cyan=`tput setaf 5`
-        }
-      fi
-    }
-
-    require_term_colors=:
-}
-
-
-## ----------------- ##
-## Function library. ##
-## ----------------- ##
-
-# This section contains a variety of useful functions to call in your
-# scripts. Take note of the portable wrappers for features provided by
-# some modern shells, which will fall back to slower equivalents on
-# less featureful shells.
-
-
-# func_append VAR VALUE
-# ---------------------
-# Append VALUE onto the existing contents of VAR.
-
-  # We should try to minimise forks, especially on Windows where they are
-  # unreasonably slow, so skip the feature probes when bash or zsh are
-  # being used:
-  if test set = "${BASH_VERSION+set}${ZSH_VERSION+set}"; then
-    : ${_G_HAVE_ARITH_OP="yes"}
-    : ${_G_HAVE_XSI_OPS="yes"}
-    # The += operator was introduced in bash 3.1
-    case $BASH_VERSION in
-      [12].* | 3.0 | 3.0*) ;;
-      *)
-        : ${_G_HAVE_PLUSEQ_OP="yes"}
-        ;;
-    esac
-  fi
-
-  # _G_HAVE_PLUSEQ_OP
-  # Can be empty, in which case the shell is probed, "yes" if += is
-  # usable or anything else if it does not work.
-  test -z "$_G_HAVE_PLUSEQ_OP" \
-    && (eval 'x=a; x+=" b"; test "a b" = "$x"') 2>/dev/null \
-    && _G_HAVE_PLUSEQ_OP=yes
-
-if test yes = "$_G_HAVE_PLUSEQ_OP"
-then
-  # This is an XSI compatible shell, allowing a faster implementation...
-  eval 'func_append ()
-  {
-    $debug_cmd
-
-    eval "$1+=\$2"
-  }'
-else
-  # ...otherwise fall back to using expr, which is often a shell builtin.
-  func_append ()
-  {
-    $debug_cmd
-
-    eval "$1=\$$1\$2"
-  }
-fi
-
-
-# func_append_quoted VAR VALUE
-# ----------------------------
-# Quote VALUE and append to the end of shell variable VAR, separated
-# by a space.
-if test yes = "$_G_HAVE_PLUSEQ_OP"; then
-  eval 'func_append_quoted ()
-  {
-    $debug_cmd
-
-    func_quote_arg pretty "$2"
-    eval "$1+=\\ \$func_quote_arg_result"
-  }'
-else
-  func_append_quoted ()
-  {
-    $debug_cmd
-
-    func_quote_arg pretty "$2"
-    eval "$1=\$$1\\ \$func_quote_arg_result"
-  }
-fi
-
-
-# func_append_uniq VAR VALUE
-# --------------------------
-# Append unique VALUE onto the existing contents of VAR, assuming
-# entries are delimited by the first character of VALUE.  For example:
-#
-#   func_append_uniq options " --another-option option-argument"
-#
-# will only append to $options if " --another-option option-argument "
-# is not already present somewhere in $options already (note spaces at
-# each end implied by leading space in second argument).
-func_append_uniq ()
-{
-    $debug_cmd
-
-    eval _G_current_value='`$ECHO $'$1'`'
-    _G_delim=`expr "$2" : '\(.\)'`
-
-    case $_G_delim$_G_current_value$_G_delim in
-      *"$2$_G_delim"*) ;;
-      *) func_append "$@" ;;
-    esac
-}
-
-
-# func_arith TERM...
-# ------------------
-# Set func_arith_result to the result of evaluating TERMs.
-  test -z "$_G_HAVE_ARITH_OP" \
-    && (eval 'test 2 = $(( 1 + 1 ))') 2>/dev/null \
-    && _G_HAVE_ARITH_OP=yes
-
-if test yes = "$_G_HAVE_ARITH_OP"; then
-  eval 'func_arith ()
-  {
-    $debug_cmd
-
-    func_arith_result=$(( $* ))
-  }'
-else
-  func_arith ()
-  {
-    $debug_cmd
-
-    func_arith_result=`expr "$@"`
-  }
-fi
-
-
-# func_basename FILE
-# ------------------
-# Set func_basename_result to FILE with everything up to and including
-# the last / stripped.
-if test yes = "$_G_HAVE_XSI_OPS"; then
-  # If this shell supports suffix pattern removal, then use it to avoid
-  # forking. Hide the definitions single quotes in case the shell chokes
-  # on unsupported syntax...
-  _b='func_basename_result=${1##*/}'
-  _d='case $1 in
-        */*) func_dirname_result=${1%/*}$2 ;;
-        *  ) func_dirname_result=$3        ;;
-      esac'
-
-else
-  # ...otherwise fall back to using sed.
-  _b='func_basename_result=`$ECHO "$1" |$SED "$sed_basename"`'
-  _d='func_dirname_result=`$ECHO "$1"  |$SED "$sed_dirname"`
-      if test "X$func_dirname_result" = "X$1"; then
-        func_dirname_result=$3
-      else
-        func_append func_dirname_result "$2"
-      fi'
-fi
-
-eval 'func_basename ()
-{
-    $debug_cmd
-
-    '"$_b"'
-}'
-
-
-# func_dirname FILE APPEND NONDIR_REPLACEMENT
-# -------------------------------------------
-# Compute the dirname of FILE.  If nonempty, add APPEND to the result,
-# otherwise set result to NONDIR_REPLACEMENT.
-eval 'func_dirname ()
-{
-    $debug_cmd
-
-    '"$_d"'
-}'
-
-
-# func_dirname_and_basename FILE APPEND NONDIR_REPLACEMENT
-# --------------------------------------------------------
-# Perform func_basename and func_dirname in a single function
-# call:
-#   dirname:  Compute the dirname of FILE.  If nonempty,
-#             add APPEND to the result, otherwise set result
-#             to NONDIR_REPLACEMENT.
-#             value returned in "$func_dirname_result"
-#   basename: Compute filename of FILE.
-#             value returned in "$func_basename_result"
-# For efficiency, we do not delegate to the functions above but instead
-# duplicate the functionality here.
-eval 'func_dirname_and_basename ()
-{
-    $debug_cmd
-
-    '"$_b"'
-    '"$_d"'
-}'
-
-
-# func_echo ARG...
-# ----------------
-# Echo program name prefixed message.
-func_echo ()
-{
-    $debug_cmd
-
-    _G_message=$*
-
-    func_echo_IFS=$IFS
-    IFS=$nl
-    for _G_line in $_G_message; do
-      IFS=$func_echo_IFS
-      $ECHO "$progname: $_G_line"
-    done
-    IFS=$func_echo_IFS
-}
-
-
-# func_echo_all ARG...
-# --------------------
-# Invoke $ECHO with all args, space-separated.
-func_echo_all ()
-{
-    $ECHO "$*"
-}
-
-
-# func_echo_infix_1 INFIX ARG...
-# ------------------------------
-# Echo program name, followed by INFIX on the first line, with any
-# additional lines not showing INFIX.
-func_echo_infix_1 ()
-{
-    $debug_cmd
-
-    $require_term_colors
-
-    _G_infix=$1; shift
-    _G_indent=$_G_infix
-    _G_prefix="$progname: $_G_infix: "
-    _G_message=$*
-
-    # Strip color escape sequences before counting printable length
-    for _G_tc in "$tc_reset" "$tc_bold" "$tc_standout" "$tc_red" "$tc_green" "$tc_blue" "$tc_cyan"
-    do
-      test -n "$_G_tc" && {
-        _G_esc_tc=`$ECHO "$_G_tc" | $SED "$sed_make_literal_regex"`
-        _G_indent=`$ECHO "$_G_indent" | $SED "s|$_G_esc_tc||g"`
-      }
-    done
-    _G_indent="$progname: "`echo "$_G_indent" | $SED 's|.| |g'`"  " ## exclude from sc_prohibit_nested_quotes
-
-    func_echo_infix_1_IFS=$IFS
-    IFS=$nl
-    for _G_line in $_G_message; do
-      IFS=$func_echo_infix_1_IFS
-      $ECHO "$_G_prefix$tc_bold$_G_line$tc_reset" >&2
-      _G_prefix=$_G_indent
-    done
-    IFS=$func_echo_infix_1_IFS
-}
-
-
-# func_error ARG...
-# -----------------
-# Echo program name prefixed message to standard error.
-func_error ()
-{
-    $debug_cmd
-
-    $require_term_colors
-
-    func_echo_infix_1 "  $tc_standout${tc_red}error$tc_reset" "$*" >&2
-}
-
-
-# func_fatal_error ARG...
-# -----------------------
-# Echo program name prefixed message to standard error, and exit.
-func_fatal_error ()
-{
-    $debug_cmd
-
-    func_error "$*"
-    exit $EXIT_FAILURE
-}
-
-
-# func_grep EXPRESSION FILENAME
-# -----------------------------
-# Check whether EXPRESSION matches any line of FILENAME, without output.
-func_grep ()
-{
-    $debug_cmd
-
-    $GREP "$1" "$2" >/dev/null 2>&1
-}
-
-
-# func_len STRING
-# ---------------
-# Set func_len_result to the length of STRING. STRING may not
-# start with a hyphen.
-  test -z "$_G_HAVE_XSI_OPS" \
-    && (eval 'x=a/b/c;
-      test 5aa/bb/cc = "${#x}${x%%/*}${x%/*}${x#*/}${x##*/}"') 2>/dev/null \
-    && _G_HAVE_XSI_OPS=yes
-
-if test yes = "$_G_HAVE_XSI_OPS"; then
-  eval 'func_len ()
-  {
-    $debug_cmd
-
-    func_len_result=${#1}
-  }'
-else
-  func_len ()
-  {
-    $debug_cmd
-
-    func_len_result=`expr "$1" : ".*" 2>/dev/null || echo $max_cmd_len`
-  }
-fi
-
-
-# func_mkdir_p DIRECTORY-PATH
-# ---------------------------
-# Make sure the entire path to DIRECTORY-PATH is available.
-func_mkdir_p ()
-{
-    $debug_cmd
-
-    _G_directory_path=$1
-    _G_dir_list=
-
-    if test -n "$_G_directory_path" && test : != "$opt_dry_run"; then
-
-      # Protect directory names starting with '-'
-      case $_G_directory_path in
-        -*) _G_directory_path=./$_G_directory_path ;;
-      esac
-
-      # While some portion of DIR does not yet exist...
-      while test ! -d "$_G_directory_path"; do
-        # ...make a list in topmost first order.  Use a colon delimited
-	# list in case some portion of path contains whitespace.
-        _G_dir_list=$_G_directory_path:$_G_dir_list
-
-        # If the last portion added has no slash in it, the list is done
-        case $_G_directory_path in */*) ;; *) break ;; esac
-
-        # ...otherwise throw away the child directory and loop
-        _G_directory_path=`$ECHO "$_G_directory_path" | $SED -e "$sed_dirname"`
-      done
-      _G_dir_list=`$ECHO "$_G_dir_list" | $SED 's|:*$||'`
-
-      func_mkdir_p_IFS=$IFS; IFS=:
-      for _G_dir in $_G_dir_list; do
-	IFS=$func_mkdir_p_IFS
-        # mkdir can fail with a 'File exist' error if two processes
-        # try to create one of the directories concurrently.  Don't
-        # stop in that case!
-        $MKDIR "$_G_dir" 2>/dev/null || :
-      done
-      IFS=$func_mkdir_p_IFS
-
-      # Bail out if we (or some other process) failed to create a directory.
-      test -d "$_G_directory_path" || \
-        func_fatal_error "Failed to create '$1'"
-    fi
-}
-
-
-# func_mktempdir [BASENAME]
-# -------------------------
-# Make a temporary directory that won't clash with other running
-# libtool processes, and avoids race conditions if possible.  If
-# given, BASENAME is the basename for that directory.
-func_mktempdir ()
-{
-    $debug_cmd
-
-    _G_template=${TMPDIR-/tmp}/${1-$progname}
-
-    if test : = "$opt_dry_run"; then
-      # Return a directory name, but don't create it in dry-run mode
-      _G_tmpdir=$_G_template-$$
-    else
-
-      # If mktemp works, use that first and foremost
-      _G_tmpdir=`mktemp -d "$_G_template-XXXXXXXX" 2>/dev/null`
-
-      if test ! -d "$_G_tmpdir"; then
-        # Failing that, at least try and use $RANDOM to avoid a race
-        _G_tmpdir=$_G_template-${RANDOM-0}$$
-
-        func_mktempdir_umask=`umask`
-        umask 0077
-        $MKDIR "$_G_tmpdir"
-        umask $func_mktempdir_umask
-      fi
-
-      # If we're not in dry-run mode, bomb out on failure
-      test -d "$_G_tmpdir" || \
-        func_fatal_error "cannot create temporary directory '$_G_tmpdir'"
-    fi
-
-    $ECHO "$_G_tmpdir"
-}
-
-
-# func_normal_abspath PATH
-# ------------------------
-# Remove doubled-up and trailing slashes, "." path components,
-# and cancel out any ".." path components in PATH after making
-# it an absolute path.
-func_normal_abspath ()
-{
-    $debug_cmd
-
-    # These SED scripts presuppose an absolute path with a trailing slash.
-    _G_pathcar='s|^/\([^/]*\).*$|\1|'
-    _G_pathcdr='s|^/[^/]*||'
-    _G_removedotparts=':dotsl
-		s|/\./|/|g
-		t dotsl
-		s|/\.$|/|'
-    _G_collapseslashes='s|/\{1,\}|/|g'
-    _G_finalslash='s|/*$|/|'
-
-    # Start from root dir and reassemble the path.
-    func_normal_abspath_result=
-    func_normal_abspath_tpath=$1
-    func_normal_abspath_altnamespace=
-    case $func_normal_abspath_tpath in
-      "")
-        # Empty path, that just means $cwd.
-        func_stripname '' '/' "`pwd`"
-        func_normal_abspath_result=$func_stripname_result
-        return
-        ;;
-      # The next three entries are used to spot a run of precisely
-      # two leading slashes without using negated character classes;
-      # we take advantage of case's first-match behaviour.
-      ///*)
-        # Unusual form of absolute path, do nothing.
-        ;;
-      //*)
-        # Not necessarily an ordinary path; POSIX reserves leading '//'
-        # and for example Cygwin uses it to access remote file shares
-        # over CIFS/SMB, so we conserve a leading double slash if found.
-        func_normal_abspath_altnamespace=/
-        ;;
-      /*)
-        # Absolute path, do nothing.
-        ;;
-      *)
-        # Relative path, prepend $cwd.
-        func_normal_abspath_tpath=`pwd`/$func_normal_abspath_tpath
-        ;;
-    esac
-
-    # Cancel out all the simple stuff to save iterations.  We also want
-    # the path to end with a slash for ease of parsing, so make sure
-    # there is one (and only one) here.
-    func_normal_abspath_tpath=`$ECHO "$func_normal_abspath_tpath" | $SED \
-          -e "$_G_removedotparts" -e "$_G_collapseslashes" -e "$_G_finalslash"`
-    while :; do
-      # Processed it all yet?
-      if test / = "$func_normal_abspath_tpath"; then
-        # If we ascended to the root using ".." the result may be empty now.
-        if test -z "$func_normal_abspath_result"; then
-          func_normal_abspath_result=/
-        fi
-        break
-      fi
-      func_normal_abspath_tcomponent=`$ECHO "$func_normal_abspath_tpath" | $SED \
-          -e "$_G_pathcar"`
-      func_normal_abspath_tpath=`$ECHO "$func_normal_abspath_tpath" | $SED \
-          -e "$_G_pathcdr"`
-      # Figure out what to do with it
-      case $func_normal_abspath_tcomponent in
-        "")
-          # Trailing empty path component, ignore it.
-          ;;
-        ..)
-          # Parent dir; strip last assembled component from result.
-          func_dirname "$func_normal_abspath_result"
-          func_normal_abspath_result=$func_dirname_result
-          ;;
-        *)
-          # Actual path component, append it.
-          func_append func_normal_abspath_result "/$func_normal_abspath_tcomponent"
-          ;;
-      esac
-    done
-    # Restore leading double-slash if one was found on entry.
-    func_normal_abspath_result=$func_normal_abspath_altnamespace$func_normal_abspath_result
-}
-
-
-# func_notquiet ARG...
-# --------------------
-# Echo program name prefixed message only when not in quiet mode.
-func_notquiet ()
-{
-    $debug_cmd
-
-    $opt_quiet || func_echo ${1+"$@"}
-
-    # A bug in bash halts the script if the last line of a function
-    # fails when set -e is in force, so we need another command to
-    # work around that:
-    :
-}
-
-
-# func_relative_path SRCDIR DSTDIR
-# --------------------------------
-# Set func_relative_path_result to the relative path from SRCDIR to DSTDIR.
-func_relative_path ()
-{
-    $debug_cmd
-
-    func_relative_path_result=
-    func_normal_abspath "$1"
-    func_relative_path_tlibdir=$func_normal_abspath_result
-    func_normal_abspath "$2"
-    func_relative_path_tbindir=$func_normal_abspath_result
-
-    # Ascend the tree starting from libdir
-    while :; do
-      # check if we have found a prefix of bindir
-      case $func_relative_path_tbindir in
-        $func_relative_path_tlibdir)
-          # found an exact match
-          func_relative_path_tcancelled=
-          break
-          ;;
-        $func_relative_path_tlibdir*)
-          # found a matching prefix
-          func_stripname "$func_relative_path_tlibdir" '' "$func_relative_path_tbindir"
-          func_relative_path_tcancelled=$func_stripname_result
-          if test -z "$func_relative_path_result"; then
-            func_relative_path_result=.
-          fi
-          break
-          ;;
-        *)
-          func_dirname $func_relative_path_tlibdir
-          func_relative_path_tlibdir=$func_dirname_result
-          if test -z "$func_relative_path_tlibdir"; then
-            # Have to descend all the way to the root!
-            func_relative_path_result=../$func_relative_path_result
-            func_relative_path_tcancelled=$func_relative_path_tbindir
-            break
-          fi
-          func_relative_path_result=../$func_relative_path_result
-          ;;
-      esac
-    done
-
-    # Now calculate path; take care to avoid doubling-up slashes.
-    func_stripname '' '/' "$func_relative_path_result"
-    func_relative_path_result=$func_stripname_result
-    func_stripname '/' '/' "$func_relative_path_tcancelled"
-    if test -n "$func_stripname_result"; then
-      func_append func_relative_path_result "/$func_stripname_result"
-    fi
-
-    # Normalisation. If bindir is libdir, return '.' else relative path.
-    if test -n "$func_relative_path_result"; then
-      func_stripname './' '' "$func_relative_path_result"
-      func_relative_path_result=$func_stripname_result
-    fi
-
-    test -n "$func_relative_path_result" || func_relative_path_result=.
-
-    :
-}
-
-
-# func_quote_portable EVAL ARG
-# ----------------------------
-# Internal function to portably implement func_quote_arg.  Note that we still
-# keep attention to performance here so we as much as possible try to avoid
-# calling sed binary (so far O(N) complexity as long as func_append is O(1)).
-func_quote_portable ()
-{
-    $debug_cmd
-
-    $require_check_ifs_backslash
-
-    func_quote_portable_result=$2
-
-    # one-time-loop (easy break)
-    while true
-    do
-      if $1; then
-        func_quote_portable_result=`$ECHO "$2" | $SED \
-          -e "$sed_double_quote_subst" -e "$sed_double_backslash"`
-        break
-      fi
-
-      # Quote for eval.
-      case $func_quote_portable_result in
-        *[\\\`\"\$]*)
-          # Fallback to sed for $func_check_bs_ifs_broken=:, or when the string
-          # contains the shell wildcard characters.
-          case $check_ifs_backshlash_broken$func_quote_portable_result in
-            :*|*[\[\*\?]*)
-              func_quote_portable_result=`$ECHO "$func_quote_portable_result" \
-                  | $SED "$sed_quote_subst"`
-              break
-              ;;
-          esac
-
-          func_quote_portable_old_IFS=$IFS
-          for _G_char in '\' '`' '"' '$'
-          do
-            # STATE($1) PREV($2) SEPARATOR($3)
-            set start "" ""
-            func_quote_portable_result=dummy"$_G_char$func_quote_portable_result$_G_char"dummy
-            IFS=$_G_char
-            for _G_part in $func_quote_portable_result
-            do
-              case $1 in
-              quote)
-                func_append func_quote_portable_result "$3$2"
-                set quote "$_G_part" "\\$_G_char"
-                ;;
-              start)
-                set first "" ""
-                func_quote_portable_result=
-                ;;
-              first)
-                set quote "$_G_part" ""
-                ;;
-              esac
-            done
-          done
-          IFS=$func_quote_portable_old_IFS
-          ;;
-        *) ;;
-      esac
-      break
-    done
-
-    func_quote_portable_unquoted_result=$func_quote_portable_result
-    case $func_quote_portable_result in
-      # double-quote args containing shell metacharacters to delay
-      # word splitting, command substitution and variable expansion
-      # for a subsequent eval.
-      # many bourne shells cannot handle close brackets correctly
-      # in scan sets, so we specify it separately.
-      *[\[\~\#\^\&\*\(\)\{\}\|\;\<\>\?\'\ \	]*|*]*|"")
-        func_quote_portable_result=\"$func_quote_portable_result\"
-        ;;
-    esac
-}
-
-
-# func_quotefast_eval ARG
-# -----------------------
-# Quote one ARG (internal).  This is equivalent to 'func_quote_arg eval ARG',
-# but optimized for speed.  Result is stored in $func_quotefast_eval.
-if test xyes = `(x=; printf -v x %q yes; echo x"$x") 2>/dev/null`; then
-  printf -v _GL_test_printf_tilde %q '~'
-  if test '\~' = "$_GL_test_printf_tilde"; then
-    func_quotefast_eval ()
-    {
-      printf -v func_quotefast_eval_result %q "$1"
-    }
-  else
-    # Broken older Bash implementations.  Make those faster too if possible.
-    func_quotefast_eval ()
-    {
-      case $1 in
-        '~'*)
-          func_quote_portable false "$1"
-          func_quotefast_eval_result=$func_quote_portable_result
-          ;;
-        *)
-          printf -v func_quotefast_eval_result %q "$1"
-          ;;
-      esac
-    }
-  fi
-else
-  func_quotefast_eval ()
-  {
-    func_quote_portable false "$1"
-    func_quotefast_eval_result=$func_quote_portable_result
-  }
-fi
-
-
-# func_quote_arg MODEs ARG
-# ------------------------
-# Quote one ARG to be evaled later.  MODEs argument may contain zero or more
-# specifiers listed below separated by ',' character.  This function returns two
-# values:
-#   i) func_quote_arg_result
-#      double-quoted (when needed), suitable for a subsequent eval
-#  ii) func_quote_arg_unquoted_result
-#      has all characters that are still active within double
-#      quotes backslashified.  Available only if 'unquoted' is specified.
-#
-# Available modes:
-# ----------------
-# 'eval' (default)
-#       - escape shell special characters
-# 'expand'
-#       - the same as 'eval';  but do not quote variable references
-# 'pretty'
-#       - request aesthetic output, i.e. '"a b"' instead of 'a\ b'.  This might
-#         be used later in func_quote to get output like: 'echo "a b"' instead
-#         of 'echo a\ b'.  This is slower than default on some shells.
-# 'unquoted'
-#       - produce also $func_quote_arg_unquoted_result which does not contain
-#         wrapping double-quotes.
-#
-# Examples for 'func_quote_arg pretty,unquoted string':
-#
-#   string      | *_result              | *_unquoted_result
-#   ------------+-----------------------+-------------------
-#   "           | \"                    | \"
-#   a b         | "a b"                 | a b
-#   "a b"       | "\"a b\""             | \"a b\"
-#   *           | "*"                   | *
-#   z="${x-$y}" | "z=\"\${x-\$y}\""     | z=\"\${x-\$y}\"
-#
-# Examples for 'func_quote_arg pretty,unquoted,expand string':
-#
-#   string        |   *_result          |  *_unquoted_result
-#   --------------+---------------------+--------------------
-#   z="${x-$y}"   | "z=\"${x-$y}\""     | z=\"${x-$y}\"
-func_quote_arg ()
-{
-    _G_quote_expand=false
-    case ,$1, in
-      *,expand,*)
-        _G_quote_expand=:
-        ;;
-    esac
-
-    case ,$1, in
-      *,pretty,*|*,expand,*|*,unquoted,*)
-        func_quote_portable $_G_quote_expand "$2"
-        func_quote_arg_result=$func_quote_portable_result
-        func_quote_arg_unquoted_result=$func_quote_portable_unquoted_result
-        ;;
-      *)
-        # Faster quote-for-eval for some shells.
-        func_quotefast_eval "$2"
-        func_quote_arg_result=$func_quotefast_eval_result
-        ;;
-    esac
-}
-
-
-# func_quote MODEs ARGs...
-# ------------------------
-# Quote all ARGs to be evaled later and join them into single command.  See
-# func_quote_arg's description for more info.
-func_quote ()
-{
-    $debug_cmd
-    _G_func_quote_mode=$1 ; shift
-    func_quote_result=
-    while test 0 -lt $#; do
-      func_quote_arg "$_G_func_quote_mode" "$1"
-      if test -n "$func_quote_result"; then
-        func_append func_quote_result " $func_quote_arg_result"
-      else
-        func_append func_quote_result "$func_quote_arg_result"
-      fi
-      shift
-    done
-}
-
-
-# func_stripname PREFIX SUFFIX NAME
-# ---------------------------------
-# strip PREFIX and SUFFIX from NAME, and store in func_stripname_result.
-# PREFIX and SUFFIX must not contain globbing or regex special
-# characters, hashes, percent signs, but SUFFIX may contain a leading
-# dot (in which case that matches only a dot).
-if test yes = "$_G_HAVE_XSI_OPS"; then
-  eval 'func_stripname ()
-  {
-    $debug_cmd
-
-    # pdksh 5.2.14 does not do ${X%$Y} correctly if both X and Y are
-    # positional parameters, so assign one to ordinary variable first.
-    func_stripname_result=$3
-    func_stripname_result=${func_stripname_result#"$1"}
-    func_stripname_result=${func_stripname_result%"$2"}
-  }'
-else
-  func_stripname ()
-  {
-    $debug_cmd
-
-    case $2 in
-      .*) func_stripname_result=`$ECHO "$3" | $SED -e "s%^$1%%" -e "s%\\\\$2\$%%"`;;
-      *)  func_stripname_result=`$ECHO "$3" | $SED -e "s%^$1%%" -e "s%$2\$%%"`;;
-    esac
-  }
-fi
-
-
-# func_show_eval CMD [FAIL_EXP]
-# -----------------------------
-# Unless opt_quiet is true, then output CMD.  Then, if opt_dryrun is
-# not true, evaluate CMD.  If the evaluation of CMD fails, and FAIL_EXP
-# is given, then evaluate it.
-func_show_eval ()
-{
-    $debug_cmd
-
-    _G_cmd=$1
-    _G_fail_exp=${2-':'}
-
-    func_quote_arg pretty,expand "$_G_cmd"
-    eval "func_notquiet $func_quote_arg_result"
-
-    $opt_dry_run || {
-      eval "$_G_cmd"
-      _G_status=$?
-      if test 0 -ne "$_G_status"; then
-	eval "(exit $_G_status); $_G_fail_exp"
-      fi
-    }
-}
-
-
-# func_show_eval_locale CMD [FAIL_EXP]
-# ------------------------------------
-# Unless opt_quiet is true, then output CMD.  Then, if opt_dryrun is
-# not true, evaluate CMD.  If the evaluation of CMD fails, and FAIL_EXP
-# is given, then evaluate it.  Use the saved locale for evaluation.
-func_show_eval_locale ()
-{
-    $debug_cmd
-
-    _G_cmd=$1
-    _G_fail_exp=${2-':'}
-
-    $opt_quiet || {
-      func_quote_arg expand,pretty "$_G_cmd"
-      eval "func_echo $func_quote_arg_result"
-    }
-
-    $opt_dry_run || {
-      eval "$_G_user_locale
-	    $_G_cmd"
-      _G_status=$?
-      eval "$_G_safe_locale"
-      if test 0 -ne "$_G_status"; then
-	eval "(exit $_G_status); $_G_fail_exp"
-      fi
-    }
-}
-
-
-# func_tr_sh
-# ----------
-# Turn $1 into a string suitable for a shell variable name.
-# Result is stored in $func_tr_sh_result.  All characters
-# not in the set a-zA-Z0-9_ are replaced with '_'. Further,
-# if $1 begins with a digit, a '_' is prepended as well.
-func_tr_sh ()
-{
-    $debug_cmd
-
-    case $1 in
-    [0-9]* | *[!a-zA-Z0-9_]*)
-      func_tr_sh_result=`$ECHO "$1" | $SED -e 's/^\([0-9]\)/_\1/' -e 's/[^a-zA-Z0-9_]/_/g'`
-      ;;
-    * )
-      func_tr_sh_result=$1
-      ;;
-    esac
-}
-
-
-# func_verbose ARG...
-# -------------------
-# Echo program name prefixed message in verbose mode only.
-func_verbose ()
-{
-    $debug_cmd
-
-    $opt_verbose && func_echo "$*"
-
-    :
-}
-
-
-# func_warn_and_continue ARG...
-# -----------------------------
-# Echo program name prefixed warning message to standard error.
-func_warn_and_continue ()
-{
-    $debug_cmd
-
-    $require_term_colors
-
-    func_echo_infix_1 "${tc_red}warning$tc_reset" "$*" >&2
-}
-
-
-# func_warning CATEGORY ARG...
-# ----------------------------
-# Echo program name prefixed warning message to standard error. Warning
-# messages can be filtered according to CATEGORY, where this function
-# elides messages where CATEGORY is not listed in the global variable
-# 'opt_warning_types'.
-func_warning ()
-{
-    $debug_cmd
-
-    # CATEGORY must be in the warning_categories list!
-    case " $warning_categories " in
-      *" $1 "*) ;;
-      *) func_internal_error "invalid warning category '$1'" ;;
-    esac
-
-    _G_category=$1
-    shift
-
-    case " $opt_warning_types " in
-      *" $_G_category "*) $warning_func ${1+"$@"} ;;
-    esac
-}
-
-
-# func_sort_ver VER1 VER2
-# -----------------------
-# 'sort -V' is not generally available.
-# Note this deviates from the version comparison in automake
-# in that it treats 1.5 < 1.5.0, and treats 1.4.4a < 1.4-p3a
-# but this should suffice as we won't be specifying old
-# version formats or redundant trailing .0 in bootstrap.conf.
-# If we did want full compatibility then we should probably
-# use m4_version_compare from autoconf.
-func_sort_ver ()
-{
-    $debug_cmd
-
-    printf '%s\n%s\n' "$1" "$2" \
-      | sort -t. -k 1,1n -k 2,2n -k 3,3n -k 4,4n -k 5,5n -k 6,6n -k 7,7n -k 8,8n -k 9,9n
-}
-
-# func_lt_ver PREV CURR
-# ---------------------
-# Return true if PREV and CURR are in the correct order according to
-# func_sort_ver, otherwise false.  Use it like this:
-#
-#  func_lt_ver "$prev_ver" "$proposed_ver" || func_fatal_error "..."
-func_lt_ver ()
-{
-    $debug_cmd
-
-    test "x$1" = x`func_sort_ver "$1" "$2" | $SED 1q`
-}
-
-
-# Local variables:
-# mode: shell-script
-# sh-indentation: 2
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-pattern: "10/scriptversion=%:y-%02m-%02d.%02H; # UTC"
-# time-stamp-time-zone: "UTC"
-# End:
-#! /bin/sh
-
-# A portable, pluggable option parser for Bourne shell.
-# Written by Gary V. Vaughan, 2010
-
-# This is free software.  There is NO warranty; not even for
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-#
-# Copyright (C) 2010-2019, 2021, 2023-2024 Bootstrap Authors
-#
-# This file is dual licensed under the terms of the MIT license
-# <https://opensource.org/licenses/MIT>, and GPL version 2 or later
-# <https://www.gnu.org/licenses/gpl-2.0.html>.  You must apply one of
-# these licenses when using or redistributing this software or any of
-# the files within it.  See the URLs above, or the file `LICENSE`
-# included in the Bootstrap distribution for the full license texts.
-
-# Please report bugs or propose patches to:
-# <https://github.com/gnulib-modules/bootstrap/issues>
-
-# Set a version string for this script.
-scriptversion=2019-02-19.15; # UTC
-
-
-## ------ ##
-## Usage. ##
-## ------ ##
-
-# This file is a library for parsing options in your shell scripts along
-# with assorted other useful supporting features that you can make use
-# of too.
-#
-# For the simplest scripts you might need only:
-#
-#   #!/bin/sh
-#   . relative/path/to/funclib.sh
-#   . relative/path/to/options-parser
-#   scriptversion=1.0
-#   func_options ${1+"$@"}
-#   eval set dummy "$func_options_result"; shift
-#   ...rest of your script...
-#
-# In order for the '--version' option to work, you will need to have a
-# suitably formatted comment like the one at the top of this file
-# starting with '# Written by ' and ending with '# Copyright'.
-#
-# For '-h' and '--help' to work, you will also need a one line
-# description of your script's purpose in a comment directly above the
-# '# Written by ' line, like the one at the top of this file.
-#
-# The default options also support '--debug', which will turn on shell
-# execution tracing (see the comment above debug_cmd below for another
-# use), and '--verbose' and the func_verbose function to allow your script
-# to display verbose messages only when your user has specified
-# '--verbose'.
-#
-# After sourcing this file, you can plug in processing for additional
-# options by amending the variables from the 'Configuration' section
-# below, and following the instructions in the 'Option parsing'
-# section further down.
-
-## -------------- ##
-## Configuration. ##
-## -------------- ##
-
-# You should override these variables in your script after sourcing this
-# file so that they reflect the customisations you have added to the
-# option parser.
-
-# The usage line for option parsing errors and the start of '-h' and
-# '--help' output messages. You can embed shell variables for delayed
-# expansion at the time the message is displayed, but you will need to
-# quote other shell meta-characters carefully to prevent them being
-# expanded when the contents are evaled.
-usage='$progpath [OPTION]...'
-
-# Short help message in response to '-h' and '--help'.  Add to this or
-# override it after sourcing this library to reflect the full set of
-# options your script accepts.
-usage_message="\
-       --debug        enable verbose shell tracing
-   -W, --warnings=CATEGORY
-                      report the warnings falling in CATEGORY [all]
-   -v, --verbose      verbosely report processing
-       --version      print version information and exit
-   -h, --help         print short or long help message and exit
-"
-
-# Additional text appended to 'usage_message' in response to '--help'.
-long_help_message="
-Warning categories include:
-       'all'          show all warnings
-       'none'         turn off all the warnings
-       'error'        warnings are treated as fatal errors"
-
-# Help message printed before fatal option parsing errors.
-fatal_help="Try '\$progname --help' for more information."
-
-
-
-## ------------------------- ##
-## Hook function management. ##
-## ------------------------- ##
-
-# This section contains functions for adding, removing, and running hooks
-# in the main code.  A hook is just a list of function names that can be
-# run in order later on.
-
-# func_hookable FUNC_NAME
-# -----------------------
-# Declare that FUNC_NAME will run hooks added with
-# 'func_add_hook FUNC_NAME ...'.
-func_hookable ()
-{
-    $debug_cmd
-
-    func_append hookable_fns " $1"
-}
-
-
-# func_add_hook FUNC_NAME HOOK_FUNC
-# ---------------------------------
-# Request that FUNC_NAME call HOOK_FUNC before it returns.  FUNC_NAME must
-# first have been declared "hookable" by a call to 'func_hookable'.
-func_add_hook ()
-{
-    $debug_cmd
-
-    case " $hookable_fns " in
-      *" $1 "*) ;;
-      *) func_fatal_error "'$1' does not accept hook functions." ;;
-    esac
-
-    eval func_append ${1}_hooks '" $2"'
-}
-
-
-# func_remove_hook FUNC_NAME HOOK_FUNC
-# ------------------------------------
-# Remove HOOK_FUNC from the list of hook functions to be called by
-# FUNC_NAME.
-func_remove_hook ()
-{
-    $debug_cmd
-
-    eval ${1}_hooks='`$ECHO "\$'$1'_hooks" |$SED "s| '$2'||"`'
-}
-
-
-# func_propagate_result FUNC_NAME_A FUNC_NAME_B
-# ---------------------------------------------
-# If the *_result variable of FUNC_NAME_A _is set_, assign its value to
-# *_result variable of FUNC_NAME_B.
-func_propagate_result ()
-{
-    $debug_cmd
-
-    func_propagate_result_result=:
-    if eval "test \"\${${1}_result+set}\" = set"
-    then
-      eval "${2}_result=\$${1}_result"
-    else
-      func_propagate_result_result=false
-    fi
-}
-
-
-# func_run_hooks FUNC_NAME [ARG]...
-# ---------------------------------
-# Run all hook functions registered to FUNC_NAME.
-# It's assumed that the list of hook functions contains nothing more
-# than a whitespace-delimited list of legal shell function names, and
-# no effort is wasted trying to catch shell meta-characters or preserve
-# whitespace.
-func_run_hooks ()
-{
-    $debug_cmd
-
-    case " $hookable_fns " in
-      *" $1 "*) ;;
-      *) func_fatal_error "'$1' does not support hook functions." ;;
-    esac
-
-    eval _G_hook_fns=\$$1_hooks; shift
-
-    for _G_hook in $_G_hook_fns; do
-      func_unset "${_G_hook}_result"
-      eval $_G_hook '${1+"$@"}'
-      func_propagate_result $_G_hook func_run_hooks
-      if $func_propagate_result_result; then
-        eval set dummy "$func_run_hooks_result"; shift
-      fi
-    done
-}
-
-
-
-## --------------- ##
-## Option parsing. ##
-## --------------- ##
-
-# In order to add your own option parsing hooks, you must accept the
-# full positional parameter list from your hook function.  You may remove
-# or edit any options that you action, and then pass back the remaining
-# unprocessed options in '<hooked_function_name>_result', escaped
-# suitably for 'eval'.
-#
-# The '<hooked_function_name>_result' variable is automatically unset
-# before your hook gets called; for best performance, only set the
-# *_result variable when necessary (i.e. don't call the 'func_quote'
-# function unnecessarily because it can be an expensive operation on some
-# machines).
-#
-# Like this:
-#
-#    my_options_prep ()
-#    {
-#        $debug_cmd
-#
-#        # Extend the existing usage message.
-#        usage_message=$usage_message'
-#      -s, --silent       don'\''t print informational messages
-#    '
-#        # No change in '$@' (ignored completely by this hook).  Leave
-#        # my_options_prep_result variable intact.
-#    }
-#    func_add_hook func_options_prep my_options_prep
-#
-#
-#    my_silent_option ()
-#    {
-#        $debug_cmd
-#
-#        args_changed=false
-#
-#        # Note that, for efficiency, we parse as many options as we can
-#        # recognise in a loop before passing the remainder back to the
-#        # caller on the first unrecognised argument we encounter.
-#        while test $# -gt 0; do
-#          opt=$1; shift
-#          case $opt in
-#            --silent|-s) opt_silent=:
-#                         args_changed=:
-#                         ;;
-#            # Separate non-argument short options:
-#            -s*)         func_split_short_opt "$_G_opt"
-#                         set dummy "$func_split_short_opt_name" \
-#                             "-$func_split_short_opt_arg" ${1+"$@"}
-#                         shift
-#                         args_changed=:
-#                         ;;
-#            *)           # Make sure the first unrecognised option "$_G_opt"
-#                         # is added back to "$@" in case we need it later,
-#                         # if $args_changed was set to 'true'.
-#                         set dummy "$_G_opt" ${1+"$@"}; shift; break ;;
-#          esac
-#        done
-#
-#        # Only call 'func_quote' here if we processed at least one argument.
-#        if $args_changed; then
-#          func_quote eval ${1+"$@"}
-#          my_silent_option_result=$func_quote_result
-#        fi
-#    }
-#    func_add_hook func_parse_options my_silent_option
-#
-#
-#    my_option_validation ()
-#    {
-#        $debug_cmd
-#
-#        $opt_silent && $opt_verbose && func_fatal_help "\
-#    '--silent' and '--verbose' options are mutually exclusive."
-#    }
-#    func_add_hook func_validate_options my_option_validation
-#
-# You'll also need to manually amend $usage_message to reflect the extra
-# options you parse.  It's preferable to append if you can, so that
-# multiple option parsing hooks can be added safely.
-
-
-# func_options_finish [ARG]...
-# ----------------------------
-# Finishing the option parse loop (call 'func_options' hooks ATM).
-func_options_finish ()
-{
-    $debug_cmd
-
-    func_run_hooks func_options ${1+"$@"}
-    func_propagate_result func_run_hooks func_options_finish
-}
-
-
-# func_options [ARG]...
-# ---------------------
-# All the functions called inside func_options are hookable. See the
-# individual implementations for details.
-func_hookable func_options
-func_options ()
-{
-    $debug_cmd
-
-    _G_options_quoted=false
-
-    for my_func in options_prep parse_options validate_options options_finish
-    do
-      func_unset func_${my_func}_result
-      func_unset func_run_hooks_result
-      eval func_$my_func '${1+"$@"}'
-      func_propagate_result func_$my_func func_options
-      if $func_propagate_result_result; then
-        eval set dummy "$func_options_result"; shift
-        _G_options_quoted=:
-      fi
-    done
-
-    $_G_options_quoted || {
-      # As we (func_options) are top-level options-parser function and
-      # nobody quoted "$@" for us yet, we need to do it explicitly for
-      # caller.
-      func_quote eval ${1+"$@"}
-      func_options_result=$func_quote_result
-    }
-}
-
-
-# func_options_prep [ARG]...
-# --------------------------
-# All initialisations required before starting the option parse loop.
-# Note that when calling hook functions, we pass through the list of
-# positional parameters.  If a hook function modifies that list, and
-# needs to propagate that back to rest of this script, then the complete
-# modified list must be put in 'func_run_hooks_result' before returning.
-func_hookable func_options_prep
-func_options_prep ()
-{
-    $debug_cmd
-
-    # Option defaults:
-    opt_verbose=false
-    opt_warning_types=
-
-    func_run_hooks func_options_prep ${1+"$@"}
-    func_propagate_result func_run_hooks func_options_prep
-}
-
-
-# func_parse_options [ARG]...
-# ---------------------------
-# The main option parsing loop.
-func_hookable func_parse_options
-func_parse_options ()
-{
-    $debug_cmd
-
-    _G_parse_options_requote=false
-    # this just eases exit handling
-    while test $# -gt 0; do
-      # Defer to hook functions for initial option parsing, so they
-      # get priority in the event of reusing an option name.
-      func_run_hooks func_parse_options ${1+"$@"}
-      func_propagate_result func_run_hooks func_parse_options
-      if $func_propagate_result_result; then
-        eval set dummy "$func_parse_options_result"; shift
-        # Even though we may have changed "$@", we passed the "$@" array
-        # down into the hook and it quoted it for us (because we are in
-        # this if-branch).  No need to quote it again.
-        _G_parse_options_requote=false
-      fi
-
-      # Break out of the loop if we already parsed every option.
-      test $# -gt 0 || break
-
-      # We expect that one of the options parsed in this function matches
-      # and thus we remove _G_opt from "$@" and need to re-quote.
-      _G_match_parse_options=:
-      _G_opt=$1
-      shift
-      case $_G_opt in
-        --debug|-x)   debug_cmd='set -x'
-                      func_echo "enabling shell trace mode" >&2
-                      $debug_cmd
-                      ;;
-
-        --no-warnings|--no-warning|--no-warn)
-                      set dummy --warnings none ${1+"$@"}
-                      shift
-		      ;;
-
-        --warnings|--warning|-W)
-                      if test $# = 0 && func_missing_arg $_G_opt; then
-                        _G_parse_options_requote=:
-                        break
-                      fi
-                      case " $warning_categories $1" in
-                        *" $1 "*)
-                          # trailing space prevents matching last $1 above
-                          func_append_uniq opt_warning_types " $1"
-                          ;;
-                        *all)
-                          opt_warning_types=$warning_categories
-                          ;;
-                        *none)
-                          opt_warning_types=none
-                          warning_func=:
-                          ;;
-                        *error)
-                          opt_warning_types=$warning_categories
-                          warning_func=func_fatal_error
-                          ;;
-                        *)
-                          func_fatal_error \
-                             "unsupported warning category: '$1'"
-                          ;;
-                      esac
-                      shift
-                      ;;
-
-        --verbose|-v) opt_verbose=: ;;
-        --version)    func_version ;;
-        -\?|-h)       func_usage ;;
-        --help)       func_help ;;
-
-	# Separate optargs to long options (plugins may need this):
-	--*=*)        func_split_equals "$_G_opt"
-	              set dummy "$func_split_equals_lhs" \
-                          "$func_split_equals_rhs" ${1+"$@"}
-                      shift
-                      ;;
-
-       # Separate optargs to short options:
-        -W*)
-                      func_split_short_opt "$_G_opt"
-                      set dummy "$func_split_short_opt_name" \
-                          "$func_split_short_opt_arg" ${1+"$@"}
-                      shift
-                      ;;
-
-        # Separate non-argument short options:
-        -\?*|-h*|-v*|-x*)
-                      func_split_short_opt "$_G_opt"
-                      set dummy "$func_split_short_opt_name" \
-                          "-$func_split_short_opt_arg" ${1+"$@"}
-                      shift
-                      ;;
-
-        --)           _G_parse_options_requote=: ; break ;;
-        -*)           func_fatal_help "unrecognised option: '$_G_opt'" ;;
-        *)            set dummy "$_G_opt" ${1+"$@"}; shift
-                      _G_match_parse_options=false
-                      break
-                      ;;
-      esac
-
-      if $_G_match_parse_options; then
-        _G_parse_options_requote=:
-      fi
-    done
-
-    if $_G_parse_options_requote; then
-      # save modified positional parameters for caller
-      func_quote eval ${1+"$@"}
-      func_parse_options_result=$func_quote_result
-    fi
-}
-
-
-# func_validate_options [ARG]...
-# ------------------------------
-# Perform any sanity checks on option settings and/or unconsumed
-# arguments.
-func_hookable func_validate_options
-func_validate_options ()
-{
-    $debug_cmd
-
-    # Display all warnings if -W was not given.
-    test -n "$opt_warning_types" || opt_warning_types=" $warning_categories"
-
-    func_run_hooks func_validate_options ${1+"$@"}
-    func_propagate_result func_run_hooks func_validate_options
-
-    # Bail if the options were screwed!
-    $exit_cmd $EXIT_FAILURE
-}
-
-
-
-## ----------------- ##
-## Helper functions. ##
-## ----------------- ##
-
-# This section contains the helper functions used by the rest of the
-# hookable option parser framework in ascii-betical order.
-
-
-# func_fatal_help ARG...
-# ----------------------
-# Echo program name prefixed message to standard error, followed by
-# a help hint, and exit.
-func_fatal_help ()
-{
-    $debug_cmd
-
-    eval \$ECHO \""Usage: $usage"\"
-    eval \$ECHO \""$fatal_help"\"
-    func_error ${1+"$@"}
-    exit $EXIT_FAILURE
-}
-
-
-# func_help
-# ---------
-# Echo long help message to standard output and exit.
-func_help ()
-{
-    $debug_cmd
-
-    func_usage_message
-    $ECHO "$long_help_message"
-    exit 0
-}
-
-
-# func_missing_arg ARGNAME
-# ------------------------
-# Echo program name prefixed message to standard error and set global
-# exit_cmd.
-func_missing_arg ()
-{
-    $debug_cmd
-
-    func_error "Missing argument for '$1'."
-    exit_cmd=exit
-}
-
-
-# func_split_equals STRING
-# ------------------------
-# Set func_split_equals_lhs and func_split_equals_rhs shell variables
-# after splitting STRING at the '=' sign.
-test -z "$_G_HAVE_XSI_OPS" \
-    && (eval 'x=a/b/c;
-      test 5aa/bb/cc = "${#x}${x%%/*}${x%/*}${x#*/}${x##*/}"') 2>/dev/null \
-    && _G_HAVE_XSI_OPS=yes
-
-if test yes = "$_G_HAVE_XSI_OPS"
-then
-  # This is an XSI compatible shell, allowing a faster implementation...
-  eval 'func_split_equals ()
-  {
-      $debug_cmd
-
-      func_split_equals_lhs=${1%%=*}
-      func_split_equals_rhs=${1#*=}
-      if test "x$func_split_equals_lhs" = "x$1"; then
-        func_split_equals_rhs=
-      fi
-  }'
-else
-  # ...otherwise fall back to using expr, which is often a shell builtin.
-  func_split_equals ()
-  {
-      $debug_cmd
-
-      func_split_equals_lhs=`expr "x$1" : 'x\([^=]*\)'`
-      func_split_equals_rhs=
-      test "x$func_split_equals_lhs=" = "x$1" \
-        || func_split_equals_rhs=`expr "x$1" : 'x[^=]*=\(.*\)$'`
-  }
-fi #func_split_equals
-
-
-# func_split_short_opt SHORTOPT
-# -----------------------------
-# Set func_split_short_opt_name and func_split_short_opt_arg shell
-# variables after splitting SHORTOPT after the 2nd character.
-if test yes = "$_G_HAVE_XSI_OPS"
-then
-  # This is an XSI compatible shell, allowing a faster implementation...
-  eval 'func_split_short_opt ()
-  {
-      $debug_cmd
-
-      func_split_short_opt_arg=${1#??}
-      func_split_short_opt_name=${1%"$func_split_short_opt_arg"}
-  }'
-else
-  # ...otherwise fall back to using expr, which is often a shell builtin.
-  func_split_short_opt ()
-  {
-      $debug_cmd
-
-      func_split_short_opt_name=`expr "x$1" : 'x\(-.\)'`
-      func_split_short_opt_arg=`expr "x$1" : 'x-.\(.*\)$'`
-  }
-fi #func_split_short_opt
-
-
-# func_usage
-# ----------
-# Echo short help message to standard output and exit.
-func_usage ()
-{
-    $debug_cmd
-
-    func_usage_message
-    $ECHO "Run '$progname --help |${PAGER-more}' for full usage"
-    exit 0
-}
-
-
-# func_usage_message
-# ------------------
-# Echo short help message to standard output.
-func_usage_message ()
-{
-    $debug_cmd
-
-    eval \$ECHO \""Usage: $usage"\"
-    echo
-    $SED -n 's|^# ||
-        /^Written by/{
-          x;p;x
-        }
-	h
-	/^Written by/q' < "$progpath"
-    echo
-    eval \$ECHO \""$usage_message"\"
-}
-
-
-# func_version
-# ------------
-# Echo version message to standard output and exit.
-# The version message is extracted from the calling file's header
-# comments, with leading '# ' stripped:
-#   1. First display the progname and version
-#   2. Followed by the header comment line matching  /^# Written by /
-#   3. Then a blank line followed by the first following line matching
-#      /^# Copyright /
-#   4. Immediately followed by any lines between the previous matches,
-#      except lines preceding the intervening completely blank line.
-# For example, see the header comments of this file.
-func_version ()
-{
-    $debug_cmd
-
-    printf '%s\n' "$progname $scriptversion"
-    $SED -n '
-        /^# Written by /!b
-        s|^# ||; p; n
-
-        :fwd2blnk
-        /./ {
-          n
-          b fwd2blnk
-        }
-        p; n
-
-        :holdwrnt
-        s|^# ||
-        s|^# *$||
-        /^Copyright /!{
-          /./H
-          n
-          b holdwrnt
-        }
-
-        s|\((C)\)[ 0-9,-]*[ ,-]\([1-9][0-9]* \)|\1 \2|
-        G
-        s|\(\n\)\n*|\1|g
-        p; q' < "$progpath"
-
-    exit $?
-}
-
-
-# Local variables:
-# mode: shell-script
-# sh-indentation: 2
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-pattern: "30/scriptversion=%:y-%02m-%02d.%02H; # UTC"
-# time-stamp-time-zone: "UTC"
-# End:
-
-# Set a version string.
-scriptversion='(GNU libtool) 2.5.4'
-
-# func_version
-# ------------
-# Echo version message to standard output and exit.
-func_version ()
-{
-    $debug_cmd
-
-	year=`date +%Y`
-
-	cat <<EOF
-$progname $scriptversion
-Copyright (C) $year Free Software Foundation, Inc.
-License GPLv2+: GNU GPL version 2 or later <https://gnu.org/licenses/gpl.html>
-This is free software: you are free to change and redistribute it.
-There is NO WARRANTY, to the extent permitted by law.
-
-Originally written by Gordon Matzigkeit, 1996
-(See AUTHORS for complete contributor listing)
-EOF
-
-    exit $?
-}
-
-
-# func_echo ARG...
-# ----------------
-# Libtool also displays the current mode in messages, so override
-# funclib.sh func_echo with this custom definition.
-func_echo ()
-{
-    $debug_cmd
-
-    _G_message=$*
-
-    func_echo_IFS=$IFS
-    IFS=$nl
-    for _G_line in $_G_message; do
-      IFS=$func_echo_IFS
-      $ECHO "$progname${opt_mode+: $opt_mode}: $_G_line"
-    done
-    IFS=$func_echo_IFS
-}
-
-
-## ---------------- ##
-## Options parsing. ##
-## ---------------- ##
-
-# Hook in the functions to make sure our own options are parsed during
-# the option parsing loop.
-
-usage='$progpath [OPTION]... [MODE-ARG]...'
-
-# Short help message in response to '-h'.
-usage_message="Options:
-       --config                 show all configuration variables
-       --debug                  enable verbose shell tracing
-   -n, --dry-run                display commands without modifying any files
-       --features               display basic configuration information
-       --finish                 use operation '--mode=finish'
-       --mode=MODE              use operation mode MODE
-       --no-finish              don't update shared library cache
-       --no-quiet, --no-silent  print default informational messages
-       --no-warnings            equivalent to '-Wnone'
-       --preserve-dup-deps      don't remove duplicate dependency libraries
-       --quiet, --silent        don't print informational messages
-       --reorder-cache=DIRS     reorder shared library cache for preferred DIRS
-       --tag=TAG                use configuration variables from tag TAG
-   -v, --verbose                print more informational messages than default
-       --version                print version information
-   -W, --warnings=CATEGORY      report the warnings falling in CATEGORY [all]
-   -h, --help, --help-all       print short, long, or detailed help message
-"
-
-# Additional text appended to 'usage_message' in response to '--help'.
-func_help ()
-{
-    $debug_cmd
-
-    func_usage_message
-    $ECHO "$long_help_message
-
-MODE must be one of the following:
-
-       clean           remove files from the build directory
-       compile         compile a source file into a libtool object
-       execute         automatically set library path, then run a program
-       finish          complete the installation of libtool libraries
-       install         install libraries or executables
-       link            create a library or an executable
-       uninstall       remove libraries from an installed directory
-
-MODE-ARGS vary depending on the MODE.  When passed as first option,
-'--mode=MODE' may be abbreviated as 'MODE' or a unique abbreviation of that.
-Try '$progname --help --mode=MODE' for a more detailed description of MODE.
-
-When reporting a bug, please describe a test case to reproduce it and
-include the following information:
-
-       host-triplet:   $host
-       shell:          $SHELL
-       compiler:       $LTCC
-       compiler flags: $LTCFLAGS
-       linker:         $LD (gnu? $with_gnu_ld)
-       version:        $progname $scriptversion
-       automake:       `($AUTOMAKE --version) 2>/dev/null |$SED 1q`
-       autoconf:       `($AUTOCONF --version) 2>/dev/null |$SED 1q`
-
-Report bugs to <bug-libtool@gnu.org>.
-GNU libtool home page: <https://www.gnu.org/software/libtool/>.
-General help using GNU software: <https://www.gnu.org/gethelp/>."
-    exit 0
-}
-
-
-# func_lo2o OBJECT-NAME
-# ---------------------
-# Transform OBJECT-NAME from a '.lo' suffix to the platform specific
-# object suffix.
-
-lo2o=s/\\.lo\$/.$objext/
-o2lo=s/\\.$objext\$/.lo/
-
-if test yes = "$_G_HAVE_XSI_OPS"; then
-  eval 'func_lo2o ()
-  {
-    case $1 in
-      *.lo) func_lo2o_result=${1%.lo}.$objext ;;
-      *   ) func_lo2o_result=$1               ;;
-    esac
-  }'
-
-  # func_xform LIBOBJ-OR-SOURCE
-  # ---------------------------
-  # Transform LIBOBJ-OR-SOURCE from a '.o' or '.c' (or otherwise)
-  # suffix to a '.lo' libtool-object suffix.
-  eval 'func_xform ()
-  {
-    func_xform_result=${1%.*}.lo
-  }'
-else
-  # ...otherwise fall back to using sed.
-  func_lo2o ()
-  {
-    func_lo2o_result=`$ECHO "$1" | $SED "$lo2o"`
-  }
-
-  func_xform ()
-  {
-    func_xform_result=`$ECHO "$1" | $SED 's|\.[^.]*$|.lo|'`
-  }
-fi
-
-
-# func_fatal_configuration ARG...
-# -------------------------------
-# Echo program name prefixed message to standard error, followed by
-# a configuration failure hint, and exit.
-func_fatal_configuration ()
-{
-    func_fatal_error ${1+"$@"} \
-      "See the $PACKAGE documentation for more information." \
-      "Fatal configuration error."
-}
-
-
-# func_config
-# -----------
-# Display the configuration for all the tags in this script.
-func_config ()
-{
-    re_begincf='^# ### BEGIN LIBTOOL'
-    re_endcf='^# ### END LIBTOOL'
-
-    # Default configuration.
-    $SED "1,/$re_begincf CONFIG/d;/$re_endcf CONFIG/,\$d" < "$progpath"
-
-    # Now print the configurations for the tags.
-    for tagname in $taglist; do
-      $SED -n "/$re_begincf TAG CONFIG: $tagname\$/,/$re_endcf TAG CONFIG: $tagname\$/p" < "$progpath"
-    done
-
-    exit $?
-}
-
-
-# func_features
-# -------------
-# Display the features supported by this script.
-func_features ()
-{
-    echo "host: $host"
-    if test yes = "$build_libtool_libs"; then
-      echo "enable shared libraries"
-    else
-      echo "disable shared libraries"
-    fi
-    if test yes = "$build_old_libs"; then
-      echo "enable static libraries"
-    else
-      echo "disable static libraries"
-    fi
-
-    exit $?
-}
-
-
-# func_enable_tag TAGNAME
-# -----------------------
-# Verify that TAGNAME is valid, and either flag an error and exit, or
-# enable the TAGNAME tag.  We also add TAGNAME to the global $taglist
-# variable here.
-func_enable_tag ()
-{
-    # Global variable:
-    tagname=$1
-
-    re_begincf="^# ### BEGIN LIBTOOL TAG CONFIG: $tagname\$"
-    re_endcf="^# ### END LIBTOOL TAG CONFIG: $tagname\$"
-    sed_extractcf=/$re_begincf/,/$re_endcf/p
-
-    # Validate tagname.
-    case $tagname in
-      *[!-_A-Za-z0-9,/]*)
-        func_fatal_error "invalid tag name: $tagname"
-        ;;
-    esac
-
-    # Don't test for the "default" C tag, as we know it's
-    # there but not specially marked.
-    case $tagname in
-        CC) ;;
-    *)
-        if $GREP "$re_begincf" "$progpath" >/dev/null 2>&1; then
-	  taglist="$taglist $tagname"
-
-	  # Evaluate the configuration.  Be careful to quote the path
-	  # and the sed script, to avoid splitting on whitespace, but
-	  # also don't use non-portable quotes within backquotes within
-	  # quotes we have to do it in 2 steps:
-	  extractedcf=`$SED -n -e "$sed_extractcf" < "$progpath"`
-	  eval "$extractedcf"
-        else
-	  func_error "ignoring unknown tag $tagname"
-        fi
-        ;;
-    esac
-}
-
-
-# func_check_version_match
-# ------------------------
-# Ensure that we are using m4 macros, and libtool script from the same
-# release of libtool.
-func_check_version_match ()
-{
-    if test "$package_revision" != "$macro_revision"; then
-      if test "$VERSION" != "$macro_version"; then
-        if test -z "$macro_version"; then
-          cat >&2 <<_LT_EOF
-$progname: Version mismatch error.  This is $PACKAGE $VERSION, but the
-$progname: definition of this LT_INIT comes from an older release.
-$progname: You should recreate aclocal.m4 with macros from $PACKAGE $VERSION
-$progname: and run autoconf again.
-_LT_EOF
-        else
-          cat >&2 <<_LT_EOF
-$progname: Version mismatch error.  This is $PACKAGE $VERSION, but the
-$progname: definition of this LT_INIT comes from $PACKAGE $macro_version.
-$progname: You should recreate aclocal.m4 with macros from $PACKAGE $VERSION
-$progname: and run autoconf again.
-_LT_EOF
-        fi
-      else
-        cat >&2 <<_LT_EOF
-$progname: Version mismatch error.  This is $PACKAGE $VERSION, revision $package_revision,
-$progname: but the definition of this LT_INIT comes from revision $macro_revision.
-$progname: You should recreate aclocal.m4 with macros from revision $package_revision
-$progname: of $PACKAGE $VERSION and run autoconf again.
-_LT_EOF
-      fi
-
-      exit $EXIT_MISMATCH
-    fi
-}
-
-
-# libtool_options_prep [ARG]...
-# -----------------------------
-# Preparation for options parsed by libtool.
-libtool_options_prep ()
-{
-    $debug_mode
-
-    # Option defaults:
-    opt_config=false
-    opt_dlopen=
-    opt_dry_run=false
-    opt_help=false
-    opt_mode=
-    opt_reorder_cache=false
-    opt_preserve_dup_deps=false
-    opt_quiet=false
-    opt_finishing=true
-    opt_warning=
-
-    nonopt=
-    preserve_args=
-
-    _G_rc_lt_options_prep=:
-
-    # Shorthand for --mode=foo, only valid as the first argument
-    case $1 in
-    clean|clea|cle|cl)
-      shift; set dummy --mode clean ${1+"$@"}; shift
-      ;;
-    compile|compil|compi|comp|com|co|c)
-      shift; set dummy --mode compile ${1+"$@"}; shift
-      ;;
-    execute|execut|execu|exec|exe|ex|e)
-      shift; set dummy --mode execute ${1+"$@"}; shift
-      ;;
-    finish|finis|fini|fin|fi|f)
-      shift; set dummy --mode finish ${1+"$@"}; shift
-      ;;
-    install|instal|insta|inst|ins|in|i)
-      shift; set dummy --mode install ${1+"$@"}; shift
-      ;;
-    link|lin|li|l)
-      shift; set dummy --mode link ${1+"$@"}; shift
-      ;;
-    uninstall|uninstal|uninsta|uninst|unins|unin|uni|un|u)
-      shift; set dummy --mode uninstall ${1+"$@"}; shift
-      ;;
-    *)
-      _G_rc_lt_options_prep=false
-      ;;
-    esac
-
-    if $_G_rc_lt_options_prep; then
-      # Pass back the list of options.
-      func_quote eval ${1+"$@"}
-      libtool_options_prep_result=$func_quote_result
-    fi
-}
-func_add_hook func_options_prep libtool_options_prep
-
-
-# libtool_parse_options [ARG]...
-# ---------------------------------
-# Provide handling for libtool specific options.
-libtool_parse_options ()
-{
-    $debug_cmd
-
-    _G_rc_lt_parse_options=false
-
-    # Perform our own loop to consume as many options as possible in
-    # each iteration.
-    while test $# -gt 0; do
-      _G_match_lt_parse_options=:
-      _G_opt=$1
-      shift
-      case $_G_opt in
-        --dry-run|--dryrun|-n)
-                        opt_dry_run=:
-                        ;;
-
-        --config)       func_config ;;
-
-        --dlopen|-dlopen)
-                        opt_dlopen="${opt_dlopen+$opt_dlopen
-}$1"
-                        shift
-                        ;;
-
-        --preserve-dup-deps)
-                        opt_preserve_dup_deps=: ;;
-
-        --features)     func_features ;;
-
-        --finish)       set dummy --mode finish ${1+"$@"}; shift ;;
-
-        --help)         opt_help=: ;;
-
-        --help-all)     opt_help=': help-all' ;;
-
-        --mode)         test $# = 0 && func_missing_arg $_G_opt && break
-                        opt_mode=$1
-                        case $1 in
-                          # Valid mode arguments:
-                          clean|compile|execute|finish|install|link|relink|uninstall) ;;
-
-                          # Catch anything else as an error
-                          *) func_error "invalid argument '$1' for $_G_opt"
-                             exit_cmd=exit
-                             ;;
-                        esac
-                        shift
-                        ;;
-
-        --no-finish)
-                        opt_finishing=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --no-silent|--no-quiet)
-                        opt_quiet=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --no-warnings|--no-warning|--no-warn)
-                        opt_warning=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --no-verbose)
-                        opt_verbose=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --reorder-cache)
-                        opt_reorder_cache=true
-                        shared_lib_dirs=$1
-                        if test -n "$shared_lib_dirs"; then
-                          case $1 in
-                            # Must begin with /:
-                            /*) ;;
-
-                            # Catch anything else as an error (relative paths)
-                            *) func_error "invalid argument '$1' for $_G_opt"
-                               func_error "absolute paths are required for $_G_opt"
-                               exit_cmd=exit
-                               ;;
-                          esac
-                        fi
-                        shift
-                        ;;
-
-        --silent|--quiet)
-                        opt_quiet=:
-                        opt_verbose=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --tag)          test $# = 0 && func_missing_arg $_G_opt && break
-                        opt_tag=$1
-                        func_append preserve_args " $_G_opt $1"
-                        func_enable_tag "$1"
-                        shift
-                        ;;
-
-        --verbose|-v)   opt_quiet=false
-                        opt_verbose=:
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        # An option not handled by this hook function:
-        *)              set dummy "$_G_opt" ${1+"$@"} ; shift
-                        _G_match_lt_parse_options=false
-                        break
-                        ;;
-      esac
-      $_G_match_lt_parse_options && _G_rc_lt_parse_options=:
-    done
-
-    if $_G_rc_lt_parse_options; then
-      # save modified positional parameters for caller
-      func_quote eval ${1+"$@"}
-      libtool_parse_options_result=$func_quote_result
-    fi
-}
-func_add_hook func_parse_options libtool_parse_options
-
-
-# func_warning ARG...
-# -------------------
-# Libtool warnings are not categorized, so override funclib.sh
-# func_warning with this simpler definition.
-func_warning ()
-{
-    if $opt_warning; then
-        $debug_cmd
-        $warning_func ${1+"$@"}
-    fi
-}
-
-
-# libtool_validate_options [ARG]...
-# ---------------------------------
-# Perform any sanity checks on option settings and/or unconsumed
-# arguments.
-libtool_validate_options ()
-{
-    # save first non-option argument
-    if test 0 -lt $#; then
-      nonopt=$1
-      shift
-    fi
-
-    # preserve --debug
-    test : = "$debug_cmd" || func_append preserve_args " --debug"
-
-    case $host_os in
-      # Solaris2 added to fix http://debbugs.gnu.org/cgi/bugreport.cgi?bug=16452
-      # see also: http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59788
-      cygwin* | mingw* | windows* | pw32* | cegcc* | solaris2* | os2*)
-        # don't eliminate duplications in $postdeps and $predeps
-        opt_duplicate_compiler_generated_deps=:
-        ;;
-      *)
-        opt_duplicate_compiler_generated_deps=$opt_preserve_dup_deps
-        ;;
-    esac
-
-    $opt_help || {
-      # Sanity checks first:
-      func_check_version_match
-
-      test yes != "$build_libtool_libs" \
-        && test yes != "$build_old_libs" \
-        && func_fatal_configuration "not configured to build any kind of library"
-
-      # Darwin sucks
-      eval std_shrext=\"$shrext_cmds\"
-
-      # Only execute mode is allowed to have -dlopen flags.
-      if test -n "$opt_dlopen" && test execute != "$opt_mode"; then
-        func_error "unrecognized option '-dlopen'"
-        $ECHO "$help" 1>&2
-        exit $EXIT_FAILURE
-      fi
-
-      # Change the help message to a mode-specific one.
-      generic_help=$help
-      help="Try '$progname --help --mode=$opt_mode' for more information."
-    }
-
-    # Pass back the unparsed argument list
-    func_quote eval ${1+"$@"}
-    libtool_validate_options_result=$func_quote_result
-}
-func_add_hook func_validate_options libtool_validate_options
-
-
-# Process options as early as possible so that --help and --version
-# can return quickly.
-func_options ${1+"$@"}
-eval set dummy "$func_options_result"; shift
-
-
-
-## ----------- ##
-##    Main.    ##
-## ----------- ##
-
-magic='%%%MAGIC variable%%%'
-magic_exe='%%%MAGIC EXE variable%%%'
-
-# Global variables.
-extracted_archives=
-extracted_serial=0
-
-# If this variable is set in any of the actions, the command in it
-# will be execed at the end.  This prevents here-documents from being
-# left over by shells.
-exec_cmd=
-
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-$1
-_LTECHO_EOF'
-}
-
-# func_generated_by_libtool
-# True iff stdin has been generated by Libtool. This function is only
-# a basic sanity check; it will hardly flush out determined imposters.
-func_generated_by_libtool_p ()
-{
-  $GREP "^# Generated by .*$PACKAGE" > /dev/null 2>&1
-}
-
-# func_lalib_p file
-# True iff FILE is a libtool '.la' library or '.lo' object file.
-# This function is only a basic sanity check; it will hardly flush out
-# determined imposters.
-func_lalib_p ()
-{
-    test -f "$1" &&
-      $SED -e 4q "$1" 2>/dev/null | func_generated_by_libtool_p
-}
-
-# func_lalib_unsafe_p file
-# True iff FILE is a libtool '.la' library or '.lo' object file.
-# This function implements the same check as func_lalib_p without
-# resorting to external programs.  To this end, it redirects stdin and
-# closes it afterwards, without saving the original file descriptor.
-# As a safety measure, use it only where a negative result would be
-# fatal anyway.  Works if 'file' does not exist.
-func_lalib_unsafe_p ()
-{
-    lalib_p=no
-    if test -f "$1" && test -r "$1" && exec 5<&0 <"$1"; then
-	for lalib_p_l in 1 2 3 4
-	do
-	    read lalib_p_line
-	    case $lalib_p_line in
-		\#\ Generated\ by\ *$PACKAGE* ) lalib_p=yes; break;;
-	    esac
-	done
-	exec 0<&5 5<&-
-    fi
-    test yes = "$lalib_p"
-}
-
-# func_ltwrapper_script_p file
-# True iff FILE is a libtool wrapper script
-# This function is only a basic sanity check; it will hardly flush out
-# determined imposters.
-func_ltwrapper_script_p ()
-{
-    test -f "$1" &&
-      $lt_truncate_bin < "$1" 2>/dev/null | func_generated_by_libtool_p
-}
-
-# func_ltwrapper_executable_p file
-# True iff FILE is a libtool wrapper executable
-# This function is only a basic sanity check; it will hardly flush out
-# determined imposters.
-func_ltwrapper_executable_p ()
-{
-    func_ltwrapper_exec_suffix=
-    case $1 in
-    *.exe) ;;
-    *) func_ltwrapper_exec_suffix=.exe ;;
-    esac
-    $GREP "$magic_exe" "$1$func_ltwrapper_exec_suffix" >/dev/null 2>&1
-}
-
-# func_ltwrapper_scriptname file
-# Assumes file is an ltwrapper_executable
-# uses $file to determine the appropriate filename for a
-# temporary ltwrapper_script.
-func_ltwrapper_scriptname ()
-{
-    func_dirname_and_basename "$1" "" "."
-    func_stripname '' '.exe' "$func_basename_result"
-    func_ltwrapper_scriptname_result=$func_dirname_result/$objdir/${func_stripname_result}_ltshwrapper
-}
-
-# func_ltwrapper_p file
-# True iff FILE is a libtool wrapper script or wrapper executable
-# This function is only a basic sanity check; it will hardly flush out
-# determined imposters.
-func_ltwrapper_p ()
-{
-    func_ltwrapper_script_p "$1" || func_ltwrapper_executable_p "$1"
-}
-
-
-# func_execute_cmds commands fail_cmd
-# Execute tilde-delimited COMMANDS.
-# If FAIL_CMD is given, eval that upon failure.
-# FAIL_CMD may read-access the current command in variable CMD!
-func_execute_cmds ()
-{
-    $debug_cmd
-
-    save_ifs=$IFS; IFS='~'
-    for cmd in $1; do
-      IFS=$sp$nl
-      eval cmd=\"$cmd\"
-      IFS=$save_ifs
-      func_show_eval "$cmd" "${2-:}"
-    done
-    IFS=$save_ifs
-}
-
-
-# func_source file
-# Source FILE, adding directory component if necessary.
-# Note that it is not necessary on cygwin/mingw to append a dot to
-# FILE even if both FILE and FILE.exe exist: automatic-append-.exe
-# behavior happens only for exec(3), not for open(2)!  Also, sourcing
-# 'FILE.' does not work on cygwin managed mounts.
-func_source ()
-{
-    $debug_cmd
-
-    case $1 in
-    */* | *\\*)	. "$1" ;;
-    *)		. "./$1" ;;
-    esac
-}
-
-
-# func_resolve_sysroot PATH
-# Replace a leading = in PATH with a sysroot.  Store the result into
-# func_resolve_sysroot_result
-func_resolve_sysroot ()
-{
-  func_resolve_sysroot_result=$1
-  case $func_resolve_sysroot_result in
-  =*)
-    func_stripname '=' '' "$func_resolve_sysroot_result"
-    func_resolve_sysroot_result=$lt_sysroot$func_stripname_result
-    ;;
-  esac
-}
-
-# func_replace_sysroot PATH
-# If PATH begins with the sysroot, replace it with = and
-# store the result into func_replace_sysroot_result.
-func_replace_sysroot ()
-{
-  case $lt_sysroot:$1 in
-  ?*:"$lt_sysroot"*)
-    func_stripname "$lt_sysroot" '' "$1"
-    func_replace_sysroot_result='='$func_stripname_result
-    ;;
-  *)
-    # Including no sysroot.
-    func_replace_sysroot_result=$1
-    ;;
-  esac
-}
-
-# func_infer_tag arg
-# Infer tagged configuration to use if any are available and
-# if one wasn't chosen via the "--tag" command line option.
-# Only attempt this if the compiler in the base compile
-# command doesn't match the default compiler.
-# arg is usually of the form 'gcc ...'
-func_infer_tag ()
-{
-    $debug_cmd
-
-    if test -n "$available_tags" && test -z "$tagname"; then
-      CC_quoted=
-      for arg in $CC; do
-	func_append_quoted CC_quoted "$arg"
-      done
-      CC_expanded=`func_echo_all $CC`
-      CC_quoted_expanded=`func_echo_all $CC_quoted`
-      case $@ in
-      # Blanks in the command may have been stripped by the calling shell,
-      # but not from the CC environment variable when configure was run.
-      " $CC "* | "$CC "* | " $CC_expanded "* | "$CC_expanded "* | \
-      " $CC_quoted"* | "$CC_quoted "* | " $CC_quoted_expanded "* | "$CC_quoted_expanded "*) ;;
-      # Blanks at the start of $base_compile will cause this to fail
-      # if we don't check for them as well.
-      *)
-	for z in $available_tags; do
-	  if $GREP "^# ### BEGIN LIBTOOL TAG CONFIG: $z$" < "$progpath" > /dev/null; then
-	    # Evaluate the configuration.
-	    eval "`$SED -n -e '/^# ### BEGIN LIBTOOL TAG CONFIG: '$z'$/,/^# ### END LIBTOOL TAG CONFIG: '$z'$/p' < $progpath`"
-	    CC_quoted=
-	    for arg in $CC; do
-	      # Double-quote args containing other shell metacharacters.
-	      func_append_quoted CC_quoted "$arg"
-	    done
-	    CC_expanded=`func_echo_all $CC`
-	    CC_quoted_expanded=`func_echo_all $CC_quoted`
-	    case "$@ " in
-	    " $CC "* | "$CC "* | " $CC_expanded "* | "$CC_expanded "* | \
-	    " $CC_quoted"* | "$CC_quoted "* | " $CC_quoted_expanded "* | "$CC_quoted_expanded "*)
-	      # The compiler in the base compile command matches
-	      # the one in the tagged configuration.
-	      # Assume this is the tagged configuration we want.
-	      tagname=$z
-	      break
-	      ;;
-	    esac
-	  fi
-	done
-	# If $tagname still isn't set, then no tagged configuration
-	# was found and let the user know that the "--tag" command
-	# line option must be used.
-	if test -z "$tagname"; then
-	  func_echo "unable to infer tagged configuration"
-	  func_fatal_error "specify a tag with '--tag'"
-#	else
-#	  func_verbose "using $tagname tagged configuration"
-	fi
-	;;
-      esac
-    fi
-}
-
-
-
-# func_write_libtool_object output_name pic_name nonpic_name
-# Create a libtool object file (analogous to a ".la" file),
-# but don't create it if we're doing a dry run.
-func_write_libtool_object ()
-{
-    write_libobj=$1
-    if test yes = "$build_libtool_libs"; then
-      write_lobj=\'$2\'
-    else
-      write_lobj=none
-    fi
-
-    if test yes = "$build_old_libs"; then
-      write_oldobj=\'$3\'
-    else
-      write_oldobj=none
-    fi
-
-    $opt_dry_run || {
-      cat >${write_libobj}T <<EOF
-# $write_libobj - a libtool object file
-# Generated by $PROGRAM (GNU $PACKAGE) $VERSION
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=$write_lobj
-
-# Name of the non-PIC object
-non_pic_object=$write_oldobj
-
-EOF
-      $MV "${write_libobj}T" "$write_libobj"
-    }
-}
-
-
-##################################################
-# FILE NAME AND PATH CONVERSION HELPER FUNCTIONS #
-##################################################
-
-# func_convert_core_file_wine_to_w32 ARG
-# Helper function used by file name conversion functions when $build is *nix,
-# and $host is mingw, windows, cygwin, or some other w32 environment. Relies on a
-# correctly configured wine environment available, with the winepath program
-# in $build's $PATH.
-#
-# ARG is the $build file name to be converted to w32 format.
-# Result is available in $func_convert_core_file_wine_to_w32_result, and will
-# be empty on error (or when ARG is empty)
-func_convert_core_file_wine_to_w32 ()
-{
-  $debug_cmd
-
-  func_convert_core_file_wine_to_w32_result=$1
-  if test -n "$1"; then
-    # Unfortunately, winepath does not exit with a non-zero error code, so we
-    # are forced to check the contents of stdout. On the other hand, if the
-    # command is not found, the shell will set an exit code of 127 and print
-    # *an error message* to stdout. So we must check for both error code of
-    # zero AND non-empty stdout, which explains the odd construction:
-    func_convert_core_file_wine_to_w32_tmp=`winepath -w "$1" 2>/dev/null`
-    if test "$?" -eq 0 && test -n "$func_convert_core_file_wine_to_w32_tmp"; then
-      func_convert_core_file_wine_to_w32_result=`$ECHO "$func_convert_core_file_wine_to_w32_tmp" |
-        $SED -e "$sed_naive_backslashify"`
-    else
-      func_convert_core_file_wine_to_w32_result=
-    fi
-  fi
-}
-# end: func_convert_core_file_wine_to_w32
-
-
-# func_convert_core_path_wine_to_w32 ARG
-# Helper function used by path conversion functions when $build is *nix, and
-# $host is mingw, windows, cygwin, or some other w32 environment. Relies on a
-# correctly configured wine environment available, with the winepath program
-# in $build's $PATH. Assumes ARG has no leading or trailing path separator
-# characters.
-#
-# ARG is path to be converted from $build format to win32.
-# Result is available in $func_convert_core_path_wine_to_w32_result.
-# Unconvertible file (directory) names in ARG are skipped; if no directory names
-# are convertible, then the result may be empty.
-func_convert_core_path_wine_to_w32 ()
-{
-  $debug_cmd
-
-  # unfortunately, winepath doesn't convert paths, only file names
-  func_convert_core_path_wine_to_w32_result=
-  if test -n "$1"; then
-    oldIFS=$IFS
-    IFS=:
-    for func_convert_core_path_wine_to_w32_f in $1; do
-      IFS=$oldIFS
-      func_convert_core_file_wine_to_w32 "$func_convert_core_path_wine_to_w32_f"
-      if test -n "$func_convert_core_file_wine_to_w32_result"; then
-        if test -z "$func_convert_core_path_wine_to_w32_result"; then
-          func_convert_core_path_wine_to_w32_result=$func_convert_core_file_wine_to_w32_result
-        else
-          func_append func_convert_core_path_wine_to_w32_result ";$func_convert_core_file_wine_to_w32_result"
-        fi
-      fi
-    done
-    IFS=$oldIFS
-  fi
-}
-# end: func_convert_core_path_wine_to_w32
-
-
-# func_cygpath ARGS...
-# Wrapper around calling the cygpath program via LT_CYGPATH. This is used when
-# when (1) $build is *nix and Cygwin is hosted via a wine environment; or (2)
-# $build is MSYS and $host is Cygwin, or (3) $build is Cygwin. In case (1) or
-# (2), returns the Cygwin file name or path in func_cygpath_result (input
-# file name or path is assumed to be in w32 format, as previously converted
-# from $build's *nix or MSYS format). In case (3), returns the w32 file name
-# or path in func_cygpath_result (input file name or path is assumed to be in
-# Cygwin format). Returns an empty string on error.
-#
-# ARGS are passed to cygpath, with the last one being the file name or path to
-# be converted.
-#
-# Specify the absolute *nix (or w32) name to cygpath in the LT_CYGPATH
-# environment variable; do not put it in $PATH.
-func_cygpath ()
-{
-  $debug_cmd
-
-  if test -n "$LT_CYGPATH" && test -f "$LT_CYGPATH"; then
-    func_cygpath_result=`$LT_CYGPATH "$@" 2>/dev/null`
-    if test "$?" -ne 0; then
-      # on failure, ensure result is empty
-      func_cygpath_result=
-    fi
-  else
-    func_cygpath_result=
-    func_error "LT_CYGPATH is empty or specifies non-existent file: '$LT_CYGPATH'"
-  fi
-}
-#end: func_cygpath
-
-
-# func_convert_core_msys_to_w32 ARG
-# Convert file name or path ARG from MSYS format to w32 format.  Return
-# result in func_convert_core_msys_to_w32_result.
-func_convert_core_msys_to_w32 ()
-{
-  $debug_cmd
-
-  # awkward: cmd appends spaces to result
-  func_convert_core_msys_to_w32_result=`( cmd //c echo "$1" ) 2>/dev/null |
-    $SED -e 's/[ ]*$//' -e "$sed_naive_backslashify"`
-}
-#end: func_convert_core_msys_to_w32
-
-
-# func_convert_file_check ARG1 ARG2
-# Verify that ARG1 (a file name in $build format) was converted to $host
-# format in ARG2. Otherwise, emit an error message, but continue (resetting
-# func_to_host_file_result to ARG1).
-func_convert_file_check ()
-{
-  $debug_cmd
-
-  if test -z "$2" && test -n "$1"; then
-    func_error "Could not determine host file name corresponding to"
-    func_error "  '$1'"
-    func_error "Continuing, but uninstalled executables may not work."
-    # Fallback:
-    func_to_host_file_result=$1
-  fi
-}
-# end func_convert_file_check
-
-
-# func_convert_path_check FROM_PATHSEP TO_PATHSEP FROM_PATH TO_PATH
-# Verify that FROM_PATH (a path in $build format) was converted to $host
-# format in TO_PATH. Otherwise, emit an error message, but continue, resetting
-# func_to_host_file_result to a simplistic fallback value (see below).
-func_convert_path_check ()
-{
-  $debug_cmd
-
-  if test -z "$4" && test -n "$3"; then
-    func_error "Could not determine the host path corresponding to"
-    func_error "  '$3'"
-    func_error "Continuing, but uninstalled executables may not work."
-    # Fallback.  This is a deliberately simplistic "conversion" and
-    # should not be "improved".  See libtool.info.
-    if test "x$1" != "x$2"; then
-      lt_replace_pathsep_chars="s|$1|$2|g"
-      func_to_host_path_result=`echo "$3" |
-        $SED -e "$lt_replace_pathsep_chars"`
-    else
-      func_to_host_path_result=$3
-    fi
-  fi
-}
-# end func_convert_path_check
-
-
-# func_convert_path_front_back_pathsep FRONTPAT BACKPAT REPL ORIG
-# Modifies func_to_host_path_result by prepending REPL if ORIG matches FRONTPAT
-# and appending REPL if ORIG matches BACKPAT.
-func_convert_path_front_back_pathsep ()
-{
-  $debug_cmd
-
-  case $4 in
-  $1 ) func_to_host_path_result=$3$func_to_host_path_result
-    ;;
-  esac
-  case $4 in
-  $2 ) func_append func_to_host_path_result "$3"
-    ;;
-  esac
-}
-# end func_convert_path_front_back_pathsep
-
-
-# func_convert_delimited_path PATH ORIG_DELIMITER NEW_DELIMITER
-# Replaces a delimiter for a given path.
-func_convert_delimited_path ()
-{
-	converted_path=`$ECHO "$1" | $SED "s#$2#$3#g"`
-}
-# end func_convert_delimited_path
-
-
-##################################################
-# $build to $host FILE NAME CONVERSION FUNCTIONS #
-##################################################
-# invoked via '$to_host_file_cmd ARG'
-#
-# In each case, ARG is the path to be converted from $build to $host format.
-# Result will be available in $func_to_host_file_result.
-
-
-# func_to_host_file ARG
-# Converts the file name ARG from $build format to $host format. Return result
-# in func_to_host_file_result.
-func_to_host_file ()
-{
-  $debug_cmd
-
-  $to_host_file_cmd "$1"
-}
-# end func_to_host_file
-
-
-# func_to_tool_file ARG LAZY
-# converts the file name ARG from $build format to toolchain format. Return
-# result in func_to_tool_file_result.  If the conversion in use is listed
-# in (the comma separated) LAZY, no conversion takes place.
-func_to_tool_file ()
-{
-  $debug_cmd
-
-  case ,$2, in
-    *,"$to_tool_file_cmd",*)
-      func_to_tool_file_result=$1
-      ;;
-    *)
-      $to_tool_file_cmd "$1"
-      func_to_tool_file_result=$func_to_host_file_result
-      ;;
-  esac
-}
-# end func_to_tool_file
-
-
-# func_convert_file_noop ARG
-# Copy ARG to func_to_host_file_result.
-func_convert_file_noop ()
-{
-  func_to_host_file_result=$1
-}
-# end func_convert_file_noop
-
-
-# func_convert_file_msys_to_w32 ARG
-# Convert file name ARG from (mingw) MSYS to (mingw) w32 format; automatic
-# conversion to w32 is not available inside the cwrapper.  Returns result in
-# func_to_host_file_result.
-func_convert_file_msys_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    func_convert_core_msys_to_w32 "$1"
-    func_to_host_file_result=$func_convert_core_msys_to_w32_result
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_msys_to_w32
-
-
-# func_convert_file_cygwin_to_w32 ARG
-# Convert file name ARG from Cygwin to w32 format.  Returns result in
-# func_to_host_file_result.
-func_convert_file_cygwin_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    # because $build is cygwin, we call "the" cygpath in $PATH; no need to use
-    # LT_CYGPATH in this case.
-    func_to_host_file_result=`cygpath -m "$1"`
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_cygwin_to_w32
-
-
-# func_convert_file_nix_to_w32 ARG
-# Convert file name ARG from *nix to w32 format.  Requires a wine environment
-# and a working winepath. Returns result in func_to_host_file_result.
-func_convert_file_nix_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    func_convert_core_file_wine_to_w32 "$1"
-    func_to_host_file_result=$func_convert_core_file_wine_to_w32_result
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_nix_to_w32
-
-
-# func_convert_file_msys_to_cygwin ARG
-# Convert file name ARG from MSYS to Cygwin format.  Requires LT_CYGPATH set.
-# Returns result in func_to_host_file_result.
-func_convert_file_msys_to_cygwin ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    func_convert_core_msys_to_w32 "$1"
-    func_cygpath -u "$func_convert_core_msys_to_w32_result"
-    func_to_host_file_result=$func_cygpath_result
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_msys_to_cygwin
-
-
-# func_convert_file_nix_to_cygwin ARG
-# Convert file name ARG from *nix to Cygwin format.  Requires Cygwin installed
-# in a wine environment, working winepath, and LT_CYGPATH set.  Returns result
-# in func_to_host_file_result.
-func_convert_file_nix_to_cygwin ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    # convert from *nix to w32, then use cygpath to convert from w32 to cygwin.
-    func_convert_core_file_wine_to_w32 "$1"
-    func_cygpath -u "$func_convert_core_file_wine_to_w32_result"
-    func_to_host_file_result=$func_cygpath_result
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_nix_to_cygwin
-
-
-#############################################
-# $build to $host PATH CONVERSION FUNCTIONS #
-#############################################
-# invoked via '$to_host_path_cmd ARG'
-#
-# In each case, ARG is the path to be converted from $build to $host format.
-# The result will be available in $func_to_host_path_result.
-#
-# Path separators are also converted from $build format to $host format.  If
-# ARG begins or ends with a path separator character, it is preserved (but
-# converted to $host format) on output.
-#
-# All path conversion functions are named using the following convention:
-#   file name conversion function    : func_convert_file_X_to_Y ()
-#   path conversion function         : func_convert_path_X_to_Y ()
-# where, for any given $build/$host combination the 'X_to_Y' value is the
-# same.  If conversion functions are added for new $build/$host combinations,
-# the two new functions must follow this pattern, or func_init_to_host_path_cmd
-# will break.
-
-
-# func_init_to_host_path_cmd
-# Ensures that function "pointer" variable $to_host_path_cmd is set to the
-# appropriate value, based on the value of $to_host_file_cmd.
-to_host_path_cmd=
-func_init_to_host_path_cmd ()
-{
-  $debug_cmd
-
-  if test -z "$to_host_path_cmd"; then
-    func_stripname 'func_convert_file_' '' "$to_host_file_cmd"
-    to_host_path_cmd=func_convert_path_$func_stripname_result
-  fi
-}
-
-
-# func_to_host_path ARG
-# Converts the path ARG from $build format to $host format. Return result
-# in func_to_host_path_result.
-func_to_host_path ()
-{
-  $debug_cmd
-
-  func_init_to_host_path_cmd
-  $to_host_path_cmd "$1"
-}
-# end func_to_host_path
-
-
-# func_convert_path_noop ARG
-# Copy ARG to func_to_host_path_result.
-func_convert_path_noop ()
-{
-  func_to_host_path_result=$1
-}
-# end func_convert_path_noop
-
-
-# func_convert_path_msys_to_w32 ARG
-# Convert path ARG from (mingw) MSYS to (mingw) w32 format; automatic
-# conversion to w32 is not available inside the cwrapper.  Returns result in
-# func_to_host_path_result.
-func_convert_path_msys_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # Remove leading and trailing path separator characters from ARG.  MSYS
-    # behavior is inconsistent here; cygpath turns them into '.;' and ';.';
-    # and winepath ignores them completely.
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_convert_core_msys_to_w32 "$func_to_host_path_tmp1"
-    func_to_host_path_result=$func_convert_core_msys_to_w32_result
-    func_convert_path_check : ";" \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" ";" "$1"
-  fi
-}
-# end func_convert_path_msys_to_w32
-
-
-# func_convert_path_cygwin_to_w32 ARG
-# Convert path ARG from Cygwin to w32 format.  Returns result in
-# func_to_host_file_result.
-func_convert_path_cygwin_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # See func_convert_path_msys_to_w32:
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_to_host_path_result=`cygpath -m -p "$func_to_host_path_tmp1"`
-    func_convert_path_check : ";" \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" ";" "$1"
-  fi
-}
-# end func_convert_path_cygwin_to_w32
-
-
-# func_convert_path_nix_to_w32 ARG
-# Convert path ARG from *nix to w32 format.  Requires a wine environment and
-# a working winepath.  Returns result in func_to_host_file_result.
-func_convert_path_nix_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # See func_convert_path_msys_to_w32:
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_convert_core_path_wine_to_w32 "$func_to_host_path_tmp1"
-    func_to_host_path_result=$func_convert_core_path_wine_to_w32_result
-    func_convert_path_check : ";" \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" ";" "$1"
-  fi
-}
-# end func_convert_path_nix_to_w32
-
-
-# func_convert_path_msys_to_cygwin ARG
-# Convert path ARG from MSYS to Cygwin format.  Requires LT_CYGPATH set.
-# Returns result in func_to_host_file_result.
-func_convert_path_msys_to_cygwin ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # See func_convert_path_msys_to_w32:
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_convert_core_msys_to_w32 "$func_to_host_path_tmp1"
-    func_cygpath -u -p "$func_convert_core_msys_to_w32_result"
-    func_to_host_path_result=$func_cygpath_result
-    func_convert_path_check : : \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" : "$1"
-  fi
-}
-# end func_convert_path_msys_to_cygwin
-
-
-# func_convert_path_nix_to_cygwin ARG
-# Convert path ARG from *nix to Cygwin format.  Requires Cygwin installed in a
-# a wine environment, working winepath, and LT_CYGPATH set.  Returns result in
-# func_to_host_file_result.
-func_convert_path_nix_to_cygwin ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # Remove leading and trailing path separator characters from
-    # ARG. msys behavior is inconsistent here, cygpath turns them
-    # into '.;' and ';.', and winepath ignores them completely.
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_convert_core_path_wine_to_w32 "$func_to_host_path_tmp1"
-    func_cygpath -u -p "$func_convert_core_path_wine_to_w32_result"
-    func_to_host_path_result=$func_cygpath_result
-    func_convert_path_check : : \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" : "$1"
-  fi
-}
-# end func_convert_path_nix_to_cygwin
-
-
-# func_dll_def_p FILE
-# True iff FILE is a Windows DLL '.def' file.
-# Keep in sync with _LT_DLL_DEF_P in libtool.m4
-func_dll_def_p ()
-{
-  $debug_cmd
-
-  func_dll_def_p_tmp=`$SED -n \
-    -e 's/^[	 ]*//' \
-    -e '/^\(;.*\)*$/d' \
-    -e 's/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p' \
-    -e q \
-    "$1"`
-  test DEF = "$func_dll_def_p_tmp"
-}
-
-
-# func_reorder_shared_lib_cache DIRS
-# Reorder the shared library cache by unconfiguring previous shared library cache
-# and configuring preferred search directories before previous search directories.
-# Previous shared library cache: /usr/lib /usr/local/lib
-# Preferred search directories: /tmp/testing
-# Reordered shared library cache: /tmp/testing /usr/lib /usr/local/lib
-func_reorder_shared_lib_cache ()
-{
-	$debug_cmd
-
-	case $host_os in
-	  openbsd*)
-	    get_search_directories=`PATH="$PATH:/sbin" ldconfig -r | $GREP "search directories" | $SED "s#.*search directories:\ ##g"`
-	    func_convert_delimited_path "$get_search_directories" ':' '\ '
-	    save_search_directories=$converted_path
-	    func_convert_delimited_path "$1" ':' '\ '
-
-	    # Ensure directories exist
-	    for dir in $converted_path; do
-	      # Ensure each directory is an absolute path
-	      case $dir in
-	        /*) ;;
-	        *) func_error "Directory '$dir' is not an absolute path"
-	           exit $EXIT_FAILURE ;;
-	      esac
-	      # Ensure no trailing slashes
-	      func_stripname '' '/' "$dir"
-	      dir=$func_stripname_result
-	      if test -d "$dir"; then
-	        if test -n "$preferred_search_directories"; then
-	          preferred_search_directories="$preferred_search_directories $dir"
-	        else
-	          preferred_search_directories=$dir
-	        fi
-	      else
-	        func_error "Directory '$dir' does not exist"
-	        exit $EXIT_FAILURE
-	      fi
-	    done
-
-	    PATH="$PATH:/sbin" ldconfig -U $save_search_directories
-	    PATH="$PATH:/sbin" ldconfig -m $preferred_search_directories $save_search_directories
-	    get_search_directories=`PATH="$PATH:/sbin" ldconfig -r | $GREP "search directories" | $SED "s#.*search directories:\ ##g"`
-	    func_convert_delimited_path "$get_search_directories" ':' '\ '
-	    reordered_search_directories=$converted_path
-
-	    $ECHO "Original: $save_search_directories"
-	    $ECHO "Reordered: $reordered_search_directories"
-	    exit $EXIT_SUCCESS
-	  ;;
-	  *)
-	    func_error "--reorder-cache is not supported for host_os=$host_os."
-	    exit $EXIT_FAILURE
-	  ;;
-	esac
-}
-# end func_reorder_shared_lib_cache
-
-
-# func_mode_compile arg...
-func_mode_compile ()
-{
-    $debug_cmd
-
-    # Get the compilation command and the source file.
-    base_compile=
-    srcfile=$nonopt  #  always keep a non-empty value in "srcfile"
-    suppress_opt=yes
-    suppress_output=
-    arg_mode=normal
-    libobj=
-    later=
-    pie_flag=
-
-    for arg
-    do
-      case $arg_mode in
-      arg  )
-	# do not "continue".  Instead, add this to base_compile
-	lastarg=$arg
-	arg_mode=normal
-	;;
-
-      target )
-	libobj=$arg
-	arg_mode=normal
-	continue
-	;;
-
-      normal )
-	# Accept any command-line options.
-	case $arg in
-	-o)
-	  test -n "$libobj" && \
-	    func_fatal_error "you cannot specify '-o' more than once"
-	  arg_mode=target
-	  continue
-	  ;;
-
-	-pie | -fpie | -fPIE)
-          func_append pie_flag " $arg"
-	  continue
-	  ;;
-
-	-shared | -static | -prefer-pic | -prefer-non-pic)
-	  func_append later " $arg"
-	  continue
-	  ;;
-
-	-no-suppress)
-	  suppress_opt=no
-	  continue
-	  ;;
-
-	-Xcompiler)
-	  arg_mode=arg  #  the next one goes into the "base_compile" arg list
-	  continue      #  The current "srcfile" will either be retained or
-	  ;;            #  replaced later.  I would guess that would be a bug.
-
-	-Wc,*)
-	  func_stripname '-Wc,' '' "$arg"
-	  args=$func_stripname_result
-	  lastarg=
-	  save_ifs=$IFS; IFS=,
-	  for arg in $args; do
-	    IFS=$save_ifs
-	    func_append_quoted lastarg "$arg"
-	  done
-	  IFS=$save_ifs
-	  func_stripname ' ' '' "$lastarg"
-	  lastarg=$func_stripname_result
-
-	  # Add the arguments to base_compile.
-	  func_append base_compile " $lastarg"
-	  continue
-	  ;;
-
-	*)
-	  # Accept the current argument as the source file.
-	  # The previous "srcfile" becomes the current argument.
-	  #
-	  lastarg=$srcfile
-	  srcfile=$arg
-	  ;;
-	esac  #  case $arg
-	;;
-      esac    #  case $arg_mode
-
-      # Aesthetically quote the previous argument.
-      func_append_quoted base_compile "$lastarg"
-    done # for arg
-
-    case $arg_mode in
-    arg)
-      func_fatal_error "you must specify an argument for -Xcompile"
-      ;;
-    target)
-      func_fatal_error "you must specify a target with '-o'"
-      ;;
-    *)
-      # Get the name of the library object.
-      test -z "$libobj" && {
-	func_basename "$srcfile"
-	libobj=$func_basename_result
-      }
-      ;;
-    esac
-
-    # Recognize several different file suffixes.
-    # If the user specifies -o file.o, it is replaced with file.lo
-    case $libobj in
-    *.[cCFSifmso] | \
-    *.ada | *.adb | *.ads | *.asm | \
-    *.c++ | *.cc | *.ii | *.class | *.cpp | *.cxx | \
-    *.[fF][09]? | *.for | *.java | *.go | *.obj | *.sx | *.cu | *.cup)
-      func_xform "$libobj"
-      libobj=$func_xform_result
-      ;;
-    esac
-
-    case $libobj in
-    *.lo) func_lo2o "$libobj"; obj=$func_lo2o_result ;;
-    *)
-      func_fatal_error "cannot determine name of library object from '$libobj'"
-      ;;
-    esac
-
-    func_infer_tag $base_compile
-
-    for arg in $later; do
-      case $arg in
-      -shared)
-	test yes = "$build_libtool_libs" \
-	  || func_fatal_configuration "cannot build a shared library"
-	build_old_libs=no
-	continue
-	;;
-
-      -static)
-	build_libtool_libs=no
-	build_old_libs=yes
-	continue
-	;;
-
-      -prefer-pic)
-	pic_mode=yes
-	continue
-	;;
-
-      -prefer-non-pic)
-	pic_mode=no
-	continue
-	;;
-      esac
-    done
-
-    func_quote_arg pretty "$libobj"
-    test "X$libobj" != "X$func_quote_arg_result" \
-      && $ECHO "X$libobj" | $GREP '[]~#^*{};<>?"'"'"'	 &()|`$[]' \
-      && func_warning "libobj name '$libobj' may not contain shell special characters."
-    func_dirname_and_basename "$obj" "/" ""
-    objname=$func_basename_result
-    xdir=$func_dirname_result
-    lobj=$xdir$objdir/$objname
-
-    test -z "$base_compile" && \
-      func_fatal_help "you must specify a compilation command"
-
-    # Delete any leftover library objects.
-    if test yes = "$build_old_libs"; then
-      removelist="$obj $lobj $libobj ${libobj}T"
-    else
-      removelist="$lobj $libobj ${libobj}T"
-    fi
-
-    # On Cygwin there's no "real" PIC flag so we must build both object types
-    case $host_os in
-    cygwin* | mingw* | windows* | pw32* | os2* | cegcc*)
-      pic_mode=default
-      ;;
-    esac
-    if test no = "$pic_mode" && test pass_all != "$deplibs_check_method"; then
-      # non-PIC code in shared libraries is not supported
-      pic_mode=default
-    fi
-
-    # Calculate the filename of the output object if compiler does
-    # not support -o with -c
-    if test no = "$compiler_c_o"; then
-      output_obj=`$ECHO "$srcfile" | $SED 's%^.*/%%; s%\.[^.]*$%%'`.$objext
-      lockfile=$output_obj.lock
-    else
-      output_obj=
-      need_locks=no
-      lockfile=
-    fi
-
-    # Lock this critical section if it is needed
-    # We use this script file to make the link, it avoids creating a new file
-    if test yes = "$need_locks"; then
-      until $opt_dry_run || ln "$progpath" "$lockfile" 2>/dev/null; do
-	func_echo "Waiting for $lockfile to be removed"
-	sleep 2
-      done
-    elif test warn = "$need_locks"; then
-      if test -f "$lockfile"; then
-	$ECHO "\
-*** ERROR, $lockfile exists and contains:
-`cat $lockfile 2>/dev/null`
-
-This indicates that another process is trying to use the same
-temporary object file, and libtool could not work around it because
-your compiler does not support '-c' and '-o' together.  If you
-repeat this compilation, it may succeed, by chance, but you had better
-avoid parallel builds (make -j) in this platform, or get a better
-compiler."
-
-	$opt_dry_run || $RM $removelist
-	exit $EXIT_FAILURE
-      fi
-      func_append removelist " $output_obj"
-      $ECHO "$srcfile" > "$lockfile"
-    fi
-
-    $opt_dry_run || $RM $removelist
-    func_append removelist " $lockfile"
-    trap '$opt_dry_run || $RM $removelist; exit $EXIT_FAILURE' 1 2 15
-
-    func_to_tool_file "$srcfile" func_convert_file_msys_to_w32
-    srcfile=$func_to_tool_file_result
-    func_quote_arg pretty "$srcfile"
-    qsrcfile=$func_quote_arg_result
-
-    # Only build a PIC object if we are building libtool libraries.
-    if test yes = "$build_libtool_libs"; then
-      # Without this assignment, base_compile gets emptied.
-      fbsd_hideous_sh_bug=$base_compile
-
-      if test no != "$pic_mode"; then
-	command="$base_compile $qsrcfile $pic_flag"
-      else
-	# Don't build PIC code
-	command="$base_compile $qsrcfile"
-      fi
-
-      func_mkdir_p "$xdir$objdir"
-
-      if test -z "$output_obj"; then
-	# Place PIC objects in $objdir
-	func_append command " -o $lobj"
-      fi
-
-      func_show_eval_locale "$command"	\
-          'test -n "$output_obj" && $RM $removelist; exit $EXIT_FAILURE'
-
-      if test warn = "$need_locks" &&
-	 test "X`cat $lockfile 2>/dev/null`" != "X$srcfile"; then
-	$ECHO "\
-*** ERROR, $lockfile contains:
-`cat $lockfile 2>/dev/null`
-
-but it should contain:
-$srcfile
-
-This indicates that another process is trying to use the same
-temporary object file, and libtool could not work around it because
-your compiler does not support '-c' and '-o' together.  If you
-repeat this compilation, it may succeed, by chance, but you had better
-avoid parallel builds (make -j) in this platform, or get a better
-compiler."
-
-	$opt_dry_run || $RM $removelist
-	exit $EXIT_FAILURE
-      fi
-
-      # Just move the object if needed, then go on to compile the next one
-      if test -n "$output_obj" && test "X$output_obj" != "X$lobj"; then
-	func_show_eval '$MV "$output_obj" "$lobj"' \
-	  'error=$?; $opt_dry_run || $RM $removelist; exit $error'
-      fi
-
-      # Allow error messages only from the first compilation.
-      if test yes = "$suppress_opt"; then
-	suppress_output=' >/dev/null 2>&1'
-      fi
-    fi
-
-    # Only build a position-dependent object if we build old libraries.
-    if test yes = "$build_old_libs"; then
-      if test yes != "$pic_mode"; then
-	# Don't build PIC code
-	command="$base_compile $qsrcfile$pie_flag"
-      else
-	command="$base_compile $qsrcfile $pic_flag"
-      fi
-      if test yes = "$compiler_c_o"; then
-	func_append command " -o $obj"
-      fi
-
-      # Suppress compiler output if we already did a PIC compilation.
-      func_append command "$suppress_output"
-      func_show_eval_locale "$command" \
-        '$opt_dry_run || $RM $removelist; exit $EXIT_FAILURE'
-
-      if test warn = "$need_locks" &&
-	 test "X`cat $lockfile 2>/dev/null`" != "X$srcfile"; then
-	$ECHO "\
-*** ERROR, $lockfile contains:
-`cat $lockfile 2>/dev/null`
-
-but it should contain:
-$srcfile
-
-This indicates that another process is trying to use the same
-temporary object file, and libtool could not work around it because
-your compiler does not support '-c' and '-o' together.  If you
-repeat this compilation, it may succeed, by chance, but you had better
-avoid parallel builds (make -j) in this platform, or get a better
-compiler."
-
-	$opt_dry_run || $RM $removelist
-	exit $EXIT_FAILURE
-      fi
-
-      # Just move the object if needed
-      if test -n "$output_obj" && test "X$output_obj" != "X$obj"; then
-	func_show_eval '$MV "$output_obj" "$obj"' \
-	  'error=$?; $opt_dry_run || $RM $removelist; exit $error'
-      fi
-    fi
-
-    $opt_dry_run || {
-      func_write_libtool_object "$libobj" "$objdir/$objname" "$objname"
-
-      # Unlock the critical section if it was locked
-      if test no != "$need_locks"; then
-	removelist=$lockfile
-        $RM "$lockfile"
-      fi
-    }
-
-    exit $EXIT_SUCCESS
-}
-
-$opt_help || {
-  test compile = "$opt_mode" && func_mode_compile ${1+"$@"}
-}
-
-func_mode_help ()
-{
-    # We need to display help for each of the modes.
-    case $opt_mode in
-      "")
-        # Generic help is extracted from the usage comments
-        # at the start of this file.
-        func_help
-        ;;
-
-      clean)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=clean RM [RM-OPTION]... FILE...
-
-Remove files from the build directory.
-
-RM is the name of the program to use to delete files associated with each FILE
-(typically '/bin/rm').  RM-OPTIONS are options (such as '-f') to be passed
-to RM.
-
-If FILE is a libtool library, object or program, all the files associated
-with it are deleted. Otherwise, only FILE itself is deleted using RM."
-        ;;
-
-      compile)
-      $ECHO \
-"Usage: $progname [OPTION]... --mode=compile COMPILE-COMMAND... SOURCEFILE
-
-Compile a source file into a libtool library object.
-
-This mode accepts the following additional options:
-
-  -o OUTPUT-FILE    set the output file name to OUTPUT-FILE
-  -no-suppress      do not suppress compiler output for multiple passes
-  -prefer-pic       try to build PIC objects only
-  -prefer-non-pic   try to build non-PIC objects only
-  -shared           do not build a '.o' file suitable for static linking
-  -static           only build a '.o' file suitable for static linking
-  -Wc,FLAG
-  -Xcompiler FLAG   pass FLAG directly to the compiler
-
-COMPILE-COMMAND is a command to be used in creating a 'standard' object file
-from the given SOURCEFILE.
-
-The output file name is determined by removing the directory component from
-SOURCEFILE, then substituting the C source code suffix '.c' with the
-library object suffix, '.lo'."
-        ;;
-
-      execute)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=execute COMMAND [ARGS]...
-
-Automatically set library path, then run a program.
-
-This mode accepts the following additional options:
-
-  -dlopen FILE      add the directory containing FILE to the library path
-
-This mode sets the library path environment variable according to '-dlopen'
-flags.
-
-If any of the ARGS are libtool executable wrappers, then they are translated
-into their corresponding uninstalled binary, and any of their required library
-directories are added to the library path.
-
-Then, COMMAND is executed, with ARGS as arguments."
-        ;;
-
-      finish)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=finish [LIBDIR]...
-
-Complete the installation of libtool libraries.
-
-Each LIBDIR is a directory that contains libtool libraries.
-
-The commands that this mode executes may require superuser privileges.  Use
-the '--dry-run' option if you just want to see what would be executed."
-        ;;
-
-      install)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=install INSTALL-COMMAND...
-
-Install executables or libraries.
-
-INSTALL-COMMAND is the installation command.  The first component should be
-either the 'install' or 'cp' program.
-
-The following components of INSTALL-COMMAND are treated specially:
-
-  -inst-prefix-dir PREFIX-DIR  Use PREFIX-DIR as a staging area for installation
-
-The rest of the components are interpreted as arguments to that command (only
-BSD-compatible install options are recognized)."
-        ;;
-
-      link)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=link LINK-COMMAND...
-
-Link object files or libraries together to form another library, or to
-create an executable program.
-
-LINK-COMMAND is a command using the C compiler that you would use to create
-a program from several object files.
-
-The following components of LINK-COMMAND are treated specially:
-
-  -all-static       do not do any dynamic linking at all
-  -avoid-version    do not add a version suffix if possible
-  -bindir BINDIR    specify path to binaries directory (for systems where
-                    libraries must be found in the PATH setting at runtime)
-  -dlopen FILE      '-dlpreopen' FILE if it cannot be dlopened at runtime
-  -dlpreopen FILE   link in FILE and add its symbols to lt_preloaded_symbols
-  -export-dynamic   allow symbols from OUTPUT-FILE to be resolved with dlsym(3)
-  -export-symbols SYMFILE
-                    try to export only the symbols listed in SYMFILE
-  -export-symbols-regex REGEX
-                    try to export only the symbols matching REGEX
-  -LLIBDIR          search LIBDIR for required installed libraries
-  -lNAME            OUTPUT-FILE requires the installed library libNAME
-  -module           build a library that can dlopened
-  -no-fast-install  disable the fast-install mode
-  -no-install       link a not-installable executable
-  -no-undefined     declare that a library does not refer to external symbols
-  -o OUTPUT-FILE    create OUTPUT-FILE from the specified objects
-  -objectlist FILE  use a list of object files found in FILE to specify objects
-  -os2dllname NAME  force a short DLL name on OS/2 (no effect on other OSes)
-  -precious-files-regex REGEX
-                    don't remove output files matching REGEX
-  -release RELEASE  specify package release information
-  -rpath LIBDIR     the created library will eventually be installed in LIBDIR
-  -R[ ]LIBDIR       add LIBDIR to the runtime path of programs and libraries
-  -shared           only do dynamic linking of libtool libraries
-  -shrext SUFFIX    override the standard shared library file extension
-  -static           do not do any dynamic linking of uninstalled libtool libraries
-  -static-libtool-libs
-                    do not do any dynamic linking of libtool libraries
-  -version-info CURRENT[:REVISION[:AGE]]
-                    specify library version info [each variable defaults to 0]
-  -weak LIBNAME     declare that the target provides the LIBNAME interface
-  -Wc,FLAG
-  -Xcompiler FLAG   pass linker-specific FLAG directly to the compiler
-  -Wa,FLAG
-  -Xassembler FLAG  pass linker-specific FLAG directly to the assembler
-  -Wl,FLAG
-  -Xlinker FLAG     pass linker-specific FLAG directly to the linker
-  -XCClinker FLAG   pass link-specific FLAG to the compiler driver (CC)
-
-All other options (arguments beginning with '-') are ignored.
-
-Every other argument is treated as a filename.  Files ending in '.la' are
-treated as uninstalled libtool libraries, other files are standard or library
-object files.
-
-If the OUTPUT-FILE ends in '.la', then a libtool library is created,
-only library objects ('.lo' files) may be specified, and '-rpath' is
-required, except when creating a convenience library.
-
-If OUTPUT-FILE ends in '.a' or '.lib', then a standard library is created
-using 'ar' and 'ranlib', or on Windows using 'lib'.
-
-If OUTPUT-FILE ends in '.lo' or '.$objext', then a reloadable object file
-is created, otherwise an executable program is created."
-        ;;
-
-      uninstall)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=uninstall RM [RM-OPTION]... FILE...
-
-Remove libraries from an installation directory.
-
-RM is the name of the program to use to delete files associated with each FILE
-(typically '/bin/rm').  RM-OPTIONS are options (such as '-f') to be passed
-to RM.
-
-If FILE is a libtool library, all the files associated with it are deleted.
-Otherwise, only FILE itself is deleted using RM."
-        ;;
-
-      *)
-        func_fatal_help "invalid operation mode '$opt_mode'"
-        ;;
-    esac
-
-    echo
-    $ECHO "Try '$progname --help' for more information about other modes."
-}
-
-# Now that we've collected a possible --mode arg, show help if necessary
-if $opt_help; then
-  if test : = "$opt_help"; then
-    func_mode_help
-  else
-    {
-      func_help noexit
-      for opt_mode in compile link execute install finish uninstall clean; do
-	func_mode_help
-      done
-    } | $SED -n '1p; 2,$s/^Usage:/  or: /p'
-    {
-      func_help noexit
-      for opt_mode in compile link execute install finish uninstall clean; do
-	echo
-	func_mode_help
-      done
-    } |
-    $SED '1d
-      /^When reporting/,/^Report/{
-	H
-	d
-      }
-      $x
-      /information about other modes/d
-      /more detailed .*MODE/d
-      s/^Usage:.*--mode=\([^ ]*\) .*/Description of \1 mode:/'
-  fi
-  exit $?
-fi
-
-
-# If option '--reorder-cache', reorder the shared library cache and exit.
-if $opt_reorder_cache; then
-    func_reorder_shared_lib_cache $shared_lib_dirs
-fi
-
-
-# func_mode_execute arg...
-func_mode_execute ()
-{
-    $debug_cmd
-
-    # The first argument is the command name.
-    cmd=$nonopt
-    test -z "$cmd" && \
-      func_fatal_help "you must specify a COMMAND"
-
-    # Handle -dlopen flags immediately.
-    for file in $opt_dlopen; do
-      test -f "$file" \
-	|| func_fatal_help "'$file' is not a file"
-
-      dir=
-      case $file in
-      *.la)
-	func_resolve_sysroot "$file"
-	file=$func_resolve_sysroot_result
-
-	# Check to see that this really is a libtool archive.
-	func_lalib_unsafe_p "$file" \
-	  || func_fatal_help "'$lib' is not a valid libtool archive"
-
-	# Read the libtool library.
-	dlname=
-	library_names=
-	func_source "$file"
-
-	# Skip this library if it cannot be dlopened.
-	if test -z "$dlname"; then
-	  # Warn if it was a shared library.
-	  test -n "$library_names" && \
-	    func_warning "'$file' was not linked with '-export-dynamic'"
-	  continue
-	fi
-
-	func_dirname "$file" "" "."
-	dir=$func_dirname_result
-
-	if test -f "$dir/$objdir/$dlname"; then
-	  func_append dir "/$objdir"
-	else
-	  if test ! -f "$dir/$dlname"; then
-	    func_fatal_error "cannot find '$dlname' in '$dir' or '$dir/$objdir'"
-	  fi
-	fi
-	;;
-
-      *.lo)
-	# Just add the directory containing the .lo file.
-	func_dirname "$file" "" "."
-	dir=$func_dirname_result
-	;;
-
-      *)
-	func_warning "'-dlopen' is ignored for non-libtool libraries and objects"
-	continue
-	;;
-      esac
-
-      # Get the absolute pathname.
-      absdir=`cd "$dir" && pwd`
-      test -n "$absdir" && dir=$absdir
-
-      # Now add the directory to shlibpath_var.
-      if eval "test -z \"\$$shlibpath_var\""; then
-	eval "$shlibpath_var=\"\$dir\""
-      else
-	eval "$shlibpath_var=\"\$dir:\$$shlibpath_var\""
-      fi
-    done
-
-    # This variable tells wrapper scripts just to set shlibpath_var
-    # rather than running their programs.
-    libtool_execute_magic=$magic
-
-    # Check if any of the arguments is a wrapper script.
-    args=
-    for file
-    do
-      case $file in
-      -* | *.la | *.lo ) ;;
-      *)
-	# Do a test to see if this is really a libtool program.
-	if func_ltwrapper_script_p "$file"; then
-	  func_source "$file"
-	  # Transform arg to wrapped name.
-	  file=$progdir/$program
-	elif func_ltwrapper_executable_p "$file"; then
-	  func_ltwrapper_scriptname "$file"
-	  func_source "$func_ltwrapper_scriptname_result"
-	  # Transform arg to wrapped name.
-	  file=$progdir/$program
-	fi
-	;;
-      esac
-      # Quote arguments (to preserve shell metacharacters).
-      func_append_quoted args "$file"
-    done
-
-    if $opt_dry_run; then
-      # Display what would be done.
-      if test -n "$shlibpath_var"; then
-	eval "\$ECHO \"\$shlibpath_var=\$$shlibpath_var\""
-	echo "export $shlibpath_var"
-      fi
-      $ECHO "$cmd$args"
-      exit $EXIT_SUCCESS
-    else
-      if test -n "$shlibpath_var"; then
-	# Export the shlibpath_var.
-	eval "export $shlibpath_var"
-      fi
-
-      # Restore saved environment variables
-      for lt_var in LANG LANGUAGE LC_ALL LC_CTYPE LC_COLLATE LC_MESSAGES
-      do
-	eval "if test \"\${save_$lt_var+set}\" = set; then
-                $lt_var=\$save_$lt_var; export $lt_var
-	      else
-		$lt_unset $lt_var
-	      fi"
-      done
-
-      # Now prepare to actually exec the command.
-      exec_cmd=\$cmd$args
-    fi
-}
-
-test execute = "$opt_mode" && func_mode_execute ${1+"$@"}
-
-
-# func_mode_finish arg...
-func_mode_finish ()
-{
-    $debug_cmd
-
-    libs=
-    libdirs=
-    admincmds=
-
-    for opt in "$nonopt" ${1+"$@"}
-    do
-      if test -d "$opt"; then
-	func_append libdirs " $opt"
-
-      elif test -f "$opt"; then
-	if func_lalib_unsafe_p "$opt"; then
-	  func_append libs " $opt"
-	else
-	  func_warning "'$opt' is not a valid libtool archive"
-	fi
-
-      else
-	func_fatal_error "invalid argument '$opt'"
-      fi
-    done
-
-    if test -n "$libs"; then
-      if test -n "$lt_sysroot"; then
-        sysroot_regex=`$ECHO "$lt_sysroot" | $SED "$sed_make_literal_regex"`
-        sysroot_cmd="s/\([ ']\)$sysroot_regex/\1/g;"
-      else
-        sysroot_cmd=
-      fi
-
-      # Remove sysroot references
-      if $opt_dry_run; then
-        for lib in $libs; do
-          echo "removing references to $lt_sysroot and '=' prefixes from $lib"
-        done
-      else
-        tmpdir=`func_mktempdir`
-        for lib in $libs; do
-	  $SED -e "$sysroot_cmd s/\([ ']-[LR]\)=/\1/g; s/\([ ']\)=/\1/g" $lib \
-	    > $tmpdir/tmp-la
-	  mv -f $tmpdir/tmp-la $lib
-	done
-        ${RM}r "$tmpdir"
-      fi
-    fi
-
-    if test -n "$finish_cmds$finish_eval" && test -n "$libdirs" && $opt_finishing; then
-      for libdir in $libdirs; do
-	if test -n "$finish_cmds"; then
-	  # Do each command in the finish commands.
-	  func_execute_cmds "$finish_cmds" 'admincmds="$admincmds
-'"$cmd"'"'
-	fi
-	if test -n "$finish_eval"; then
-	  # Do the single finish_eval.
-	  eval cmds=\"$finish_eval\"
-	  $opt_dry_run || eval "$cmds" || func_append admincmds "
-       $cmds"
-	fi
-      done
-    fi
-
-    # Exit here if they wanted silent mode.
-    $opt_quiet && exit $EXIT_SUCCESS
-
-    if test -n "$finish_cmds$finish_eval" && test -n "$libdirs"; then
-      echo "----------------------------------------------------------------------"
-      echo "Libraries have been installed in:"
-      for libdir in $libdirs; do
-	$ECHO "   $libdir"
-      done
-      if test "false" = "$opt_finishing"; then
-        echo
-        echo "NOTE: finish_cmds were not executed during testing, so you must"
-        echo "manually run ldconfig to add a given test directory, LIBDIR, to"
-        echo "the search path for generated executables."
-      fi
-      echo
-      echo "If you ever happen to want to link against installed libraries"
-      echo "in a given directory, LIBDIR, you must either use libtool, and"
-      echo "specify the full pathname of the library, or use the '-LLIBDIR'"
-      echo "flag during linking and do at least one of the following:"
-      if test -n "$shlibpath_var"; then
-	echo "   - add LIBDIR to the '$shlibpath_var' environment variable"
-	echo "     during execution"
-      fi
-      if test -n "$runpath_var"; then
-	echo "   - add LIBDIR to the '$runpath_var' environment variable"
-	echo "     during linking"
-      fi
-      if test -n "$hardcode_libdir_flag_spec"; then
-	libdir=LIBDIR
-	eval flag=\"$hardcode_libdir_flag_spec\"
-
-	$ECHO "   - use the '$flag' linker flag"
-      fi
-      if test -n "$admincmds"; then
-	$ECHO "   - have your system administrator run these commands:$admincmds"
-      fi
-      if test -f /etc/ld.so.conf; then
-	echo "   - have your system administrator add LIBDIR to '/etc/ld.so.conf'"
-      fi
-      echo
-
-      echo "See any operating system documentation about shared libraries for"
-      case $host in
-	solaris2.[6789]|solaris2.1[0-9])
-	  echo "more information, such as the ld(1), crle(1) and ld.so(8) manual"
-	  echo "pages."
-	  ;;
-	*)
-	  echo "more information, such as the ld(1) and ld.so(8) manual pages."
-	  ;;
-      esac
-      echo "----------------------------------------------------------------------"
-    fi
-    exit $EXIT_SUCCESS
-}
-
-test finish = "$opt_mode" && func_mode_finish ${1+"$@"}
-
-
-# func_mode_install arg...
-func_mode_install ()
-{
-    $debug_cmd
-
-    # There may be an optional sh(1) argument at the beginning of
-    # install_prog (especially on Windows NT).
-    if test "$SHELL" = "$nonopt" || test /bin/sh = "$nonopt" ||
-       # Allow the use of GNU shtool's install command.
-       case $nonopt in *shtool*) :;; *) false;; esac
-    then
-      # Aesthetically quote it.
-      func_quote_arg pretty "$nonopt"
-      install_prog="$func_quote_arg_result "
-      arg=$1
-      shift
-    else
-      install_prog=
-      arg=$nonopt
-    fi
-
-    # The real first argument should be the name of the installation program.
-    # Aesthetically quote it.
-    func_quote_arg pretty "$arg"
-    func_append install_prog "$func_quote_arg_result"
-    install_shared_prog=$install_prog
-    case " $install_prog " in
-      *[\\\ /]cp\ *) install_cp=: ;;
-      *) install_cp=false ;;
-    esac
-
-    # We need to accept at least all the BSD install flags.
-    dest=
-    files=
-    opts=
-    prev=
-    install_type=
-    isdir=false
-    stripme=
-    no_mode=:
-    for arg
-    do
-      arg2=
-      if test -n "$dest"; then
-	func_append files " $dest"
-	dest=$arg
-	continue
-      fi
-
-      case $arg in
-      -d) isdir=: ;;
-      -f)
-	if $install_cp; then :; else
-	  prev=$arg
-	fi
-	;;
-      -g | -m | -o)
-	prev=$arg
-	;;
-      -s)
-	stripme=" -s"
-	continue
-	;;
-      -*)
-	;;
-      *)
-	# If the previous option needed an argument, then skip it.
-	if test -n "$prev"; then
-	  if test X-m = "X$prev" && test -n "$install_override_mode"; then
-	    arg2=$install_override_mode
-	    no_mode=false
-	  fi
-	  prev=
-	else
-	  dest=$arg
-	  continue
-	fi
-	;;
-      esac
-
-      # Aesthetically quote the argument.
-      func_quote_arg pretty "$arg"
-      func_append install_prog " $func_quote_arg_result"
-      if test -n "$arg2"; then
-	func_quote_arg pretty "$arg2"
-      fi
-      func_append install_shared_prog " $func_quote_arg_result"
-    done
-
-    test -z "$install_prog" && \
-      func_fatal_help "you must specify an install program"
-
-    test -n "$prev" && \
-      func_fatal_help "the '$prev' option requires an argument"
-
-    if test -n "$install_override_mode" && $no_mode; then
-      if $install_cp; then :; else
-	func_quote_arg pretty "$install_override_mode"
-	func_append install_shared_prog " -m $func_quote_arg_result"
-      fi
-    fi
-
-    if test -z "$files"; then
-      if test -z "$dest"; then
-	func_fatal_help "no file or destination specified"
-      else
-	func_fatal_help "you must specify a destination"
-      fi
-    fi
-
-    # Strip any trailing slash from the destination.
-    func_stripname '' '/' "$dest"
-    dest=$func_stripname_result
-
-    # Check to see that the destination is a directory.
-    test -d "$dest" && isdir=:
-    if $isdir; then
-      destdir=$dest
-      destname=
-    else
-      func_dirname_and_basename "$dest" "" "."
-      destdir=$func_dirname_result
-      destname=$func_basename_result
-
-      # Not a directory, so check to see that there is only one file specified.
-      set dummy $files; shift
-      test "$#" -gt 1 && \
-	func_fatal_help "'$dest' is not a directory"
-    fi
-    case $destdir in
-    [\\/]* | [A-Za-z]:[\\/]*) ;;
-    *)
-      for file in $files; do
-	case $file in
-	*.lo) ;;
-	*)
-	  func_fatal_help "'$destdir' must be an absolute directory name"
-	  ;;
-	esac
-      done
-      ;;
-    esac
-
-    # This variable tells wrapper scripts just to set variables rather
-    # than running their programs.
-    libtool_install_magic=$magic
-
-    staticlibs=
-    future_libdirs=
-    current_libdirs=
-    for file in $files; do
-
-      # Do each installation.
-      case $file in
-      *.$libext)
-	# Do the static libraries later.
-	func_append staticlibs " $file"
-	;;
-
-      *.la)
-	func_resolve_sysroot "$file"
-	file=$func_resolve_sysroot_result
-
-	# Check to see that this really is a libtool archive.
-	func_lalib_unsafe_p "$file" \
-	  || func_fatal_help "'$file' is not a valid libtool archive"
-
-	library_names=
-	old_library=
-	relink_command=
-	func_source "$file"
-
-	# Add the libdir to current_libdirs if it is the destination.
-	if test "X$destdir" = "X$libdir"; then
-	  case "$current_libdirs " in
-	  *" $libdir "*) ;;
-	  *) func_append current_libdirs " $libdir" ;;
-	  esac
-	else
-	  # Note the libdir as a future libdir.
-	  case "$future_libdirs " in
-	  *" $libdir "*) ;;
-	  *) func_append future_libdirs " $libdir" ;;
-	  esac
-	fi
-
-	func_dirname "$file" "/" ""
-	dir=$func_dirname_result
-	func_append dir "$objdir"
-
-	if test -n "$relink_command"; then
-	  # Strip any trailing slash from the destination.
-	  func_stripname '' '/' "$libdir"
-	  destlibdir=$func_stripname_result
-
-	  func_stripname '' '/' "$destdir"
-	  s_destdir=$func_stripname_result
-
-	  # Determine the prefix the user has applied to our future dir.
-	  inst_prefix_dir=`$ECHO "X$s_destdir" | $Xsed -e "s%$destlibdir\$%%"`
-
-	  # Don't allow the user to place us outside of our expected
-	  # location b/c this prevents finding dependent libraries that
-	  # are installed to the same prefix.
-	  # At present, this check doesn't affect windows .dll's that
-	  # are installed into $libdir/../bin (currently, that works fine)
-	  # but it's something to keep an eye on.
-	  test "$inst_prefix_dir" = "$destdir" && \
-	    func_fatal_error "error: cannot install '$file' to a directory not ending in $libdir"
-
-	  if test -n "$inst_prefix_dir"; then
-	    # Stick the inst_prefix_dir data into the link command.
-	    relink_command=`$ECHO "$relink_command" | $SED "s%@inst_prefix_dir@%-inst-prefix-dir $inst_prefix_dir%"`
-	  else
-	    relink_command=`$ECHO "$relink_command" | $SED "s%@inst_prefix_dir@%%"`
-	  fi
-
-	  func_warning "relinking '$file'"
-	  func_show_eval "$relink_command" \
-	    'func_fatal_error "error: relink '\''$file'\'' with the above command before installing it"'
-	fi
-
-	# See the names of the shared library.
-	set dummy $library_names; shift
-	if test -n "$1"; then
-	  realname=$1
-	  shift
-
-	  srcname=$realname
-	  test -n "$relink_command" && srcname=${realname}T
-
-	  # Install the shared library and build the symlinks.
-	  func_show_eval "$install_shared_prog $dir/$srcname $destdir/$realname" \
-	      'exit $?'
-	  tstripme=$stripme
-	  case $host_os in
-	  cygwin* | mingw* | windows* | pw32* | cegcc*)
-	    case $realname in
-	    *.dll.a)
-	      tstripme=
-	      ;;
-	    esac
-	    ;;
-	  os2*)
-	    case $realname in
-	    *_dll.a)
-	      tstripme=
-	      ;;
-	    esac
-	    ;;
-	  esac
-	  if test -n "$tstripme" && test -n "$striplib"; then
-	    func_show_eval "$striplib $destdir/$realname" 'exit $?'
-	  fi
-
-	  if test "$#" -gt 0; then
-	    # Delete the old symlinks, and create new ones.
-	    # Try 'ln -sf' first, because the 'ln' binary might depend on
-	    # the symlink we replace!  Solaris /bin/ln does not understand -f,
-	    # so we also need to try rm && ln -s.
-	    for linkname
-	    do
-	      test "$linkname" != "$realname" \
-		&& func_show_eval "(cd $destdir && { $LN_S -f $realname $linkname || { $RM $linkname && $LN_S $realname $linkname; }; })"
-	    done
-	  fi
-
-	  # Do each command in the postinstall commands.
-	  lib=$destdir/$realname
-	  func_execute_cmds "$postinstall_cmds" 'exit $?'
-	fi
-
-	# Install the pseudo-library for information purposes.
-	func_basename "$file"
-	name=$func_basename_result
-	instname=$dir/${name}i
-	func_show_eval "$install_prog $instname $destdir/$name" 'exit $?'
-
-	# Maybe install the static library, too.
-	test -n "$old_library" && func_append staticlibs " $dir/$old_library"
-	;;
-
-      *.lo)
-	# Install (i.e. copy) a libtool object.
-
-	# Figure out destination file name, if it wasn't already specified.
-	if test -n "$destname"; then
-	  destfile=$destdir/$destname
-	else
-	  func_basename "$file"
-	  destfile=$func_basename_result
-	  destfile=$destdir/$destfile
-	fi
-
-	# Deduce the name of the destination old-style object file.
-	case $destfile in
-	*.lo)
-	  func_lo2o "$destfile"
-	  staticdest=$func_lo2o_result
-	  ;;
-	*.$objext)
-	  staticdest=$destfile
-	  destfile=
-	  ;;
-	*)
-	  func_fatal_help "cannot copy a libtool object to '$destfile'"
-	  ;;
-	esac
-
-	# Install the libtool object if requested.
-	test -n "$destfile" && \
-	  func_show_eval "$install_prog $file $destfile" 'exit $?'
-
-	# Install the old object if enabled.
-	if test yes = "$build_old_libs"; then
-	  # Deduce the name of the old-style object file.
-	  func_lo2o "$file"
-	  staticobj=$func_lo2o_result
-	  func_show_eval "$install_prog \$staticobj \$staticdest" 'exit $?'
-	fi
-	exit $EXIT_SUCCESS
-	;;
-
-      *)
-	# Figure out destination file name, if it wasn't already specified.
-	if test -n "$destname"; then
-	  destfile=$destdir/$destname
-	else
-	  func_basename "$file"
-	  destfile=$func_basename_result
-	  destfile=$destdir/$destfile
-	fi
-
-	# If the file is missing, and there is a .exe on the end, strip it
-	# because it is most likely a libtool script we actually want to
-	# install
-	stripped_ext=
-	case $file in
-	  *.exe)
-	    if test ! -f "$file"; then
-	      func_stripname '' '.exe' "$file"
-	      file=$func_stripname_result
-	      stripped_ext=.exe
-	    fi
-	    ;;
-	esac
-
-	# Do a test to see if this is really a libtool program.
-	case $host in
-	*cygwin* | *mingw* | *windows*)
-	    if func_ltwrapper_executable_p "$file"; then
-	      func_ltwrapper_scriptname "$file"
-	      wrapper=$func_ltwrapper_scriptname_result
-	    else
-	      func_stripname '' '.exe' "$file"
-	      wrapper=$func_stripname_result
-	    fi
-	    ;;
-	*)
-	    wrapper=$file
-	    ;;
-	esac
-	if func_ltwrapper_script_p "$wrapper"; then
-	  notinst_deplibs=
-	  relink_command=
-
-	  func_source "$wrapper"
-
-	  # Check the variables that should have been set.
-	  test -z "$generated_by_libtool_version" && \
-	    func_fatal_error "invalid libtool wrapper script '$wrapper'"
-
-	  finalize=:
-	  for lib in $notinst_deplibs; do
-	    # Check to see that each library is installed.
-	    libdir=
-	    if test -f "$lib"; then
-	      func_source "$lib"
-	    fi
-	    libfile=$libdir/`$ECHO "$lib" | $SED 's%^.*/%%g'`
-	    if test -n "$libdir" && test ! -f "$libfile"; then
-	      func_warning "'$lib' has not been installed in '$libdir'"
-	      finalize=false
-	    fi
-	  done
-
-	  relink_command=
-	  func_source "$wrapper"
-
-	  outputname=
-	  if test no = "$fast_install" && test -n "$relink_command"; then
-	    $opt_dry_run || {
-	      if $finalize; then
-	        tmpdir=`func_mktempdir`
-		func_basename "$file$stripped_ext"
-		file=$func_basename_result
-	        outputname=$tmpdir/$file
-	        # Replace the output file specification.
-	        relink_command=`$ECHO "$relink_command" | $SED 's%@OUTPUT@%'"$outputname"'%g'`
-
-	        $opt_quiet || {
-	          func_quote_arg expand,pretty "$relink_command"
-		  eval "func_echo $func_quote_arg_result"
-	        }
-	        if eval "$relink_command"; then :
-	          else
-		  func_error "error: relink '$file' with the above command before installing it"
-		  $opt_dry_run || ${RM}r "$tmpdir"
-		  continue
-	        fi
-	        file=$outputname
-	      else
-	        func_warning "cannot relink '$file'"
-	      fi
-	    }
-	  else
-	    # Install the binary that we compiled earlier.
-	    file=`$ECHO "$file$stripped_ext" | $SED "s%\([^/]*\)$%$objdir/\1%"`
-	  fi
-	fi
-
-	# remove .exe since cygwin /usr/bin/install will append another
-	# one anyway
-	case $install_prog,$host in
-	*/usr/bin/install*,*cygwin*)
-	  case $file:$destfile in
-	  *.exe:*.exe)
-	    # this is ok
-	    ;;
-	  *.exe:*)
-	    destfile=$destfile.exe
-	    ;;
-	  *:*.exe)
-	    func_stripname '' '.exe' "$destfile"
-	    destfile=$func_stripname_result
-	    ;;
-	  esac
-	  ;;
-	esac
-	func_show_eval "$install_prog\$stripme \$file \$destfile" 'exit $?'
-	$opt_dry_run || if test -n "$outputname"; then
-	  ${RM}r "$tmpdir"
-	fi
-	;;
-      esac
-    done
-
-    for file in $staticlibs; do
-      func_basename "$file"
-      name=$func_basename_result
-
-      # Set up the ranlib parameters.
-      oldlib=$destdir/$name
-      func_to_tool_file "$oldlib" func_convert_file_msys_to_w32
-      tool_oldlib=$func_to_tool_file_result
-
-      func_show_eval "$install_prog \$file \$oldlib" 'exit $?'
-
-      if test -n "$stripme" && test -n "$old_striplib"; then
-	func_show_eval "$old_striplib $tool_oldlib" 'exit $?'
-      fi
-
-      # Do each command in the postinstall commands.
-      func_execute_cmds "$old_postinstall_cmds" 'exit $?'
-    done
-
-    test -n "$future_libdirs" && \
-      func_warning "remember to run '$progname --finish$future_libdirs'"
-
-    if test -n "$current_libdirs"; then
-      # Maybe just do a dry run.
-      $opt_dry_run && current_libdirs=" -n$current_libdirs"
-      exec_cmd='$SHELL "$progpath" $preserve_args --finish$current_libdirs'
-    else
-      exit $EXIT_SUCCESS
-    fi
-}
-
-test install = "$opt_mode" && func_mode_install ${1+"$@"}
-
-
-# func_generate_dlsyms outputname originator pic_p
-# Extract symbols from dlprefiles and create ${outputname}S.o with
-# a dlpreopen symbol table.
-func_generate_dlsyms ()
-{
-    $debug_cmd
-
-    my_outputname=$1
-    my_originator=$2
-    my_pic_p=${3-false}
-    my_prefix=`$ECHO "$my_originator" | $SED 's%[^a-zA-Z0-9]%_%g'`
-    my_dlsyms=
-
-    if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then
-      if test -n "$NM" && test -n "$global_symbol_pipe"; then
-	my_dlsyms=${my_outputname}S.c
-      else
-	func_error "not configured to extract global symbols from dlpreopened files"
-      fi
-    fi
-
-    if test -n "$my_dlsyms"; then
-      case $my_dlsyms in
-      "") ;;
-      *.c)
-	# Discover the nlist of each of the dlfiles.
-	nlist=$output_objdir/$my_outputname.nm
-
-	func_show_eval "$RM $nlist ${nlist}S ${nlist}T"
-
-	# Parse the name list into a source file.
-	func_verbose "creating $output_objdir/$my_dlsyms"
-
-	$opt_dry_run || $ECHO > "$output_objdir/$my_dlsyms" "\
-/* $my_dlsyms - symbol resolution table for '$my_outputname' dlsym emulation. */
-/* Generated by $PROGRAM (GNU $PACKAGE) $VERSION */
-
-#ifdef __cplusplus
-extern \"C\" {
-#endif
-
-#if defined __GNUC__ && (((__GNUC__ == 4) && (__GNUC_MINOR__ >= 4)) || (__GNUC__ > 4))
-#pragma GCC diagnostic ignored \"-Wstrict-prototypes\"
-#endif
-
-/* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests.  */
-#if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE
-/* DATA imports from DLLs on WIN32 can't be const, because runtime
-   relocations are performed -- see ld's documentation on pseudo-relocs.  */
-# define LT_DLSYM_CONST
-#elif defined __osf__
-/* This system does not cope well with relocations in const data.  */
-# define LT_DLSYM_CONST
-#else
-# define LT_DLSYM_CONST const
-#endif
-
-#define STREQ(s1, s2) (strcmp ((s1), (s2)) == 0)
-
-/* External symbol declarations for the compiler. */\
-"
-
-	if test yes = "$dlself"; then
-	  func_verbose "generating symbol list for '$output'"
-
-	  $opt_dry_run || echo ': @PROGRAM@ ' > "$nlist"
-
-	  # Add our own program objects to the symbol list.
-	  progfiles=`$ECHO "$objs$old_deplibs" | $SP2NL | $SED "$lo2o" | $NL2SP`
-	  for progfile in $progfiles; do
-	    func_to_tool_file "$progfile" func_convert_file_msys_to_w32
-	    func_verbose "extracting global C symbols from '$func_to_tool_file_result'"
-	    $opt_dry_run || eval "$NM $func_to_tool_file_result | $global_symbol_pipe >> '$nlist'"
-	  done
-
-	  if test -n "$exclude_expsyms"; then
-	    $opt_dry_run || {
-	      eval '$EGREP -v " ($exclude_expsyms)$" "$nlist" > "$nlist"T'
-	      eval '$MV "$nlist"T "$nlist"'
-	    }
-	  fi
-
-	  if test -n "$export_symbols_regex"; then
-	    $opt_dry_run || {
-	      eval '$EGREP -e "$export_symbols_regex" "$nlist" > "$nlist"T'
-	      eval '$MV "$nlist"T "$nlist"'
-	    }
-	  fi
-
-	  # Prepare the list of exported symbols
-	  if test -z "$export_symbols"; then
-	    export_symbols=$output_objdir/$outputname.exp
-	    $opt_dry_run || {
-	      $RM $export_symbols
-	      eval "$SED -n -e '/^: @PROGRAM@ $/d' -e 's/^.* \(.*\)$/\1/p' "'< "$nlist" > "$export_symbols"'
-	      case $host in
-	      *cygwin* | *mingw* | *windows* | *cegcc* )
-                eval "echo EXPORTS "'> "$output_objdir/$outputname.def"'
-                eval 'cat "$export_symbols" >> "$output_objdir/$outputname.def"'
-	        ;;
-	      esac
-	    }
-	  else
-	    $opt_dry_run || {
-	      eval "$SED -e 's/\([].[*^$]\)/\\\\\1/g' -e 's/^/ /' -e 's/$/$/'"' < "$export_symbols" > "$output_objdir/$outputname.exp"'
-	      eval '$GREP -f "$output_objdir/$outputname.exp" < "$nlist" > "$nlist"T'
-	      eval '$MV "$nlist"T "$nlist"'
-	      case $host in
-	        *cygwin* | *mingw* | *windows* | *cegcc* )
-	          eval "echo EXPORTS "'> "$output_objdir/$outputname.def"'
-	          eval 'cat "$nlist" >> "$output_objdir/$outputname.def"'
-	          ;;
-	      esac
-	    }
-	  fi
-	fi
-
-	for dlprefile in $dlprefiles; do
-	  func_verbose "extracting global C symbols from '$dlprefile'"
-	  func_basename "$dlprefile"
-	  name=$func_basename_result
-          case $host in
-	    *cygwin* | *mingw* | *windows* | *cegcc* )
-	      # if an import library, we need to obtain dlname
-	      if func_win32_import_lib_p "$dlprefile"; then
-	        func_tr_sh "$dlprefile"
-	        eval "curr_lafile=\$libfile_$func_tr_sh_result"
-	        dlprefile_dlbasename=
-	        if test -n "$curr_lafile" && func_lalib_p "$curr_lafile"; then
-	          # Use subshell, to avoid clobbering current variable values
-	          dlprefile_dlname=`source "$curr_lafile" && echo "$dlname"`
-	          if test -n "$dlprefile_dlname"; then
-	            func_basename "$dlprefile_dlname"
-	            dlprefile_dlbasename=$func_basename_result
-	          else
-	            # no lafile. user explicitly requested -dlpreopen <import library>.
-	            $sharedlib_from_linklib_cmd "$dlprefile"
-	            dlprefile_dlbasename=$sharedlib_from_linklib_result
-	          fi
-	        fi
-	        $opt_dry_run || {
-	          if test -n "$dlprefile_dlbasename"; then
-	            eval '$ECHO ": $dlprefile_dlbasename" >> "$nlist"'
-	          else
-	            func_warning "Could not compute DLL name from $name"
-	            eval '$ECHO ": $name " >> "$nlist"'
-	          fi
-	          func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32
-	          case $host in
-	            i[3456]86-*-mingw32*)
-	              eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe |
-	                $SED -e '/I __imp/d' -e 's/I __nm_/D /;s/_nm__//' >> '$nlist'"
-	            ;;
-	            *)
-	              eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe |
-	                $SED -e '/I __imp/d' -e 's/I __nm_/D /;s/__nm_//' >> '$nlist'"
-	            ;;
-	          esac
-	        }
-	      else # not an import lib
-	        $opt_dry_run || {
-	          eval '$ECHO ": $name " >> "$nlist"'
-	          func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32
-	          eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe >> '$nlist'"
-	        }
-	      fi
-	    ;;
-	    *)
-	      $opt_dry_run || {
-	        eval '$ECHO ": $name " >> "$nlist"'
-	        func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32
-	        eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe >> '$nlist'"
-	      }
-	    ;;
-          esac
-	done
-
-	$opt_dry_run || {
-	  # Make sure we have at least an empty file.
-	  test -f "$nlist" || : > "$nlist"
-
-	  if test -n "$exclude_expsyms"; then
-	    $EGREP -v " ($exclude_expsyms)$" "$nlist" > "$nlist"T
-	    $MV "$nlist"T "$nlist"
-	  fi
-
-	  # Try sorting and uniquifying the output.
-	  if $GREP -v "^: " < "$nlist" |
-	      if sort -k 3 </dev/null >/dev/null 2>&1; then
-		sort -k 3
-	      else
-		sort +2
-	      fi |
-	      uniq > "$nlist"S; then
-	    :
-	  else
-	    $GREP -v "^: " < "$nlist" > "$nlist"S
-	  fi
-
-	  if test -f "$nlist"S; then
-	    eval "$global_symbol_to_cdecl"' < "$nlist"S >> "$output_objdir/$my_dlsyms"'
-	  else
-	    echo '/* NONE */' >> "$output_objdir/$my_dlsyms"
-	  fi
-
-	  func_show_eval '$RM "${nlist}I"'
-	  if test -n "$global_symbol_to_import"; then
-	    eval "$global_symbol_to_import"' < "$nlist"S > "$nlist"I'
-	  fi
-
-	  echo >> "$output_objdir/$my_dlsyms" "\
-
-/* The mapping between symbol names and symbols.  */
-typedef struct {
-  const char *name;
-  void *address;
-} lt_dlsymlist;
-extern LT_DLSYM_CONST lt_dlsymlist
-lt_${my_prefix}_LTX_preloaded_symbols[];\
-"
-
-	  if test -s "$nlist"I; then
-	    echo >> "$output_objdir/$my_dlsyms" "\
-static void lt_syminit(void)
-{
-  LT_DLSYM_CONST lt_dlsymlist *symbol = lt_${my_prefix}_LTX_preloaded_symbols;
-  for (; symbol->name; ++symbol)
-    {"
-	    $SED 's/.*/      if (STREQ (symbol->name, \"&\")) symbol->address = (void *) \&&;/' < "$nlist"I >> "$output_objdir/$my_dlsyms"
-	    echo >> "$output_objdir/$my_dlsyms" "\
-    }
-}"
-	  fi
-	  echo >> "$output_objdir/$my_dlsyms" "\
-LT_DLSYM_CONST lt_dlsymlist
-lt_${my_prefix}_LTX_preloaded_symbols[] =
-{ {\"$my_originator\", (void *) 0},"
-
-	  if test -s "$nlist"I; then
-	    echo >> "$output_objdir/$my_dlsyms" "\
-  {\"@INIT@\", (void *) &lt_syminit},"
-	  fi
-
-	  case $need_lib_prefix in
-	  no)
-	    eval "$global_symbol_to_c_name_address" < "$nlist" >> "$output_objdir/$my_dlsyms"
-	    ;;
-	  *)
-	    eval "$global_symbol_to_c_name_address_lib_prefix" < "$nlist" >> "$output_objdir/$my_dlsyms"
-	    ;;
-	  esac
-	  echo >> "$output_objdir/$my_dlsyms" "\
-  {0, (void *) 0}
-};
-
-/* This works around a problem in FreeBSD linker */
-#ifdef FREEBSD_WORKAROUND
-static const void *lt_preloaded_setup() {
-  return lt_${my_prefix}_LTX_preloaded_symbols;
-}
-#endif
-
-#ifdef __cplusplus
-}
-#endif\
-"
-	} # !$opt_dry_run
-
-	pic_flag_for_symtable=
-	case "$compile_command " in
-	*" -static "*) ;;
-	*)
-	  case $host in
-	  # compiling the symbol table file with pic_flag works around
-	  # a FreeBSD bug that causes programs to crash when -lm is
-	  # linked before any other PIC object.  But we must not use
-	  # pic_flag when linking with -static.  The problem exists in
-	  # FreeBSD 2.2.6 and is fixed in FreeBSD 3.1.
-	  *-*-freebsd2.*|*-*-freebsd3.0*|*-*-freebsdelf3.0*)
-	    pic_flag_for_symtable=" $pic_flag -DFREEBSD_WORKAROUND" ;;
-	  *-*-hpux*)
-	    pic_flag_for_symtable=" $pic_flag"  ;;
-	  *)
-	    $my_pic_p && pic_flag_for_symtable=" $pic_flag"
-	    ;;
-	  esac
-	  ;;
-	esac
-	symtab_cflags=
-	for arg in $LTCFLAGS; do
-	  case $arg in
-	  -pie | -fpie | -fPIE) ;;
-	  *) func_append symtab_cflags " $arg" ;;
-	  esac
-	done
-
-	# Now compile the dynamic symbol file.
-	func_show_eval '(cd $output_objdir && $LTCC$symtab_cflags -c$no_builtin_flag$pic_flag_for_symtable "$my_dlsyms")' 'exit $?'
-
-	# Clean up the generated files.
-	func_show_eval '$RM "$output_objdir/$my_dlsyms" "$nlist" "${nlist}S" "${nlist}T" "${nlist}I"'
-
-	# Transform the symbol file into the correct name.
-	symfileobj=$output_objdir/${my_outputname}S.$objext
-	case $host in
-	*cygwin* | *mingw* | *windows* | *cegcc* )
-	  if test -f "$output_objdir/$my_outputname.def"; then
-	    compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"`
-	    finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"`
-	  else
-	    compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$symfileobj%"`
-	    finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$symfileobj%"`
-	  fi
-	  ;;
-	*)
-	  compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$symfileobj%"`
-	  finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$symfileobj%"`
-	  ;;
-	esac
-	;;
-      *)
-	func_fatal_error "unknown suffix for '$my_dlsyms'"
-	;;
-      esac
-    else
-      # We keep going just in case the user didn't refer to
-      # lt_preloaded_symbols.  The linker will fail if global_symbol_pipe
-      # really was required.
-
-      # Nullify the symbol file.
-      compile_command=`$ECHO "$compile_command" | $SED "s% @SYMFILE@%%"`
-      finalize_command=`$ECHO "$finalize_command" | $SED "s% @SYMFILE@%%"`
-    fi
-}
-
-# func_cygming_gnu_implib_p ARG
-# This predicate returns with zero status (TRUE) if
-# ARG is a GNU/binutils-style import library. Returns
-# with nonzero status (FALSE) otherwise.
-func_cygming_gnu_implib_p ()
-{
-  $debug_cmd
-
-  func_to_tool_file "$1" func_convert_file_msys_to_w32
-  func_cygming_gnu_implib_tmp=`$NM "$func_to_tool_file_result" | eval "$global_symbol_pipe" | $EGREP ' (_head_[A-Za-z0-9_]+_[ad]l*|[A-Za-z0-9_]+_[ad]l*_iname)$'`
-  test -n "$func_cygming_gnu_implib_tmp"
-}
-
-# func_cygming_ms_implib_p ARG
-# This predicate returns with zero status (TRUE) if
-# ARG is an MS-style import library. Returns
-# with nonzero status (FALSE) otherwise.
-func_cygming_ms_implib_p ()
-{
-  $debug_cmd
-
-  func_to_tool_file "$1" func_convert_file_msys_to_w32
-  func_cygming_ms_implib_tmp=`$NM "$func_to_tool_file_result" | eval "$global_symbol_pipe" | $GREP '_NULL_IMPORT_DESCRIPTOR'`
-  test -n "$func_cygming_ms_implib_tmp"
-}
-
-# func_win32_libid arg
-# return the library type of file 'arg'
-#
-# Need a lot of goo to handle *both* DLLs and import libs
-# Has to be a shell function in order to 'eat' the argument
-# that is supplied when $file_magic_command is called.
-# Despite the name, also deal with 64 bit binaries.
-func_win32_libid ()
-{
-  $debug_cmd
-
-  win32_libid_type=unknown
-  win32_fileres=`file -L $1 2>/dev/null`
-  case $win32_fileres in
-  *ar\ archive\ import\ library*) # definitely import
-    win32_libid_type="x86 archive import"
-    ;;
-  *ar\ archive*) # could be an import, or static
-    # Keep the egrep pattern in sync with the one in _LT_CHECK_MAGIC_METHOD.
-    if eval $OBJDUMP -f $1 | $SED -e '10q' 2>/dev/null |
-       $EGREP 'file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64|pe-aarch64)' >/dev/null; then
-      case $nm_interface in
-      "MS dumpbin")
-	if func_cygming_ms_implib_p "$1" ||
-	   func_cygming_gnu_implib_p "$1"
-	then
-	  win32_nmres=import
-	else
-	  win32_nmres=
-	fi
-	;;
-      *)
-	func_to_tool_file "$1" func_convert_file_msys_to_w32
-	win32_nmres=`eval $NM -f posix -A \"$func_to_tool_file_result\" |
-	  $SED -n -e '
-	    1,100{
-		/ I /{
-		    s|.*|import|
-		    p
-		    q
-		}
-	    }'`
-	;;
-      esac
-      case $win32_nmres in
-      import*)  win32_libid_type="x86 archive import";;
-      *)        win32_libid_type="x86 archive static";;
-      esac
-    fi
-    ;;
-  *DLL*)
-    win32_libid_type="x86 DLL"
-    ;;
-  *executable*) # but shell scripts are "executable" too...
-    case $win32_fileres in
-    *MS\ Windows\ PE\ Intel*)
-      win32_libid_type="x86 DLL"
-      ;;
-    esac
-    ;;
-  esac
-  $ECHO "$win32_libid_type"
-}
-
-# func_cygming_dll_for_implib ARG
-#
-# Platform-specific function to extract the
-# name of the DLL associated with the specified
-# import library ARG.
-# Invoked by eval'ing the libtool variable
-#    $sharedlib_from_linklib_cmd
-# Result is available in the variable
-#    $sharedlib_from_linklib_result
-func_cygming_dll_for_implib ()
-{
-  $debug_cmd
-
-  sharedlib_from_linklib_result=`$DLLTOOL --identify-strict --identify "$1"`
-}
-
-# func_cygming_dll_for_implib_fallback_core SECTION_NAME LIBNAMEs
-#
-# The is the core of a fallback implementation of a
-# platform-specific function to extract the name of the
-# DLL associated with the specified import library LIBNAME.
-#
-# SECTION_NAME is either .idata$6 or .idata$7, depending
-# on the platform and compiler that created the implib.
-#
-# Echos the name of the DLL associated with the
-# specified import library.
-func_cygming_dll_for_implib_fallback_core ()
-{
-  $debug_cmd
-
-  match_literal=`$ECHO "$1" | $SED "$sed_make_literal_regex"`
-  $OBJDUMP -s --section "$1" "$2" 2>/dev/null |
-    $SED '/^Contents of section '"$match_literal"':/{
-      # Place marker at beginning of archive member dllname section
-      s/.*/====MARK====/
-      p
-      d
-    }
-    # These lines can sometimes be longer than 43 characters, but
-    # are always uninteresting
-    /:[	 ]*file format pe[i]\{,1\}-/d
-    /^In archive [^:]*:/d
-    # Ensure marker is printed
-    /^====MARK====/p
-    # Remove all lines with less than 43 characters
-    /^.\{43\}/!d
-    # From remaining lines, remove first 43 characters
-    s/^.\{43\}//' |
-    $SED -n '
-      # Join marker and all lines until next marker into a single line
-      /^====MARK====/ b para
-      H
-      $ b para
-      b
-      :para
-      x
-      s/\n//g
-      # Remove the marker
-      s/^====MARK====//
-      # Remove trailing dots and whitespace
-      s/[\. \t]*$//
-      # Print
-      /./p' |
-    # we now have a list, one entry per line, of the stringified
-    # contents of the appropriate section of all members of the
-    # archive that possess that section. Heuristic: eliminate
-    # all those that have a first or second character that is
-    # a '.' (that is, objdump's representation of an unprintable
-    # character.) This should work for all archives with less than
-    # 0x302f exports -- but will fail for DLLs whose name actually
-    # begins with a literal '.' or a single character followed by
-    # a '.'.
-    #
-    # Of those that remain, print the first one.
-    $SED -e '/^\./d;/^.\./d;q'
-}
-
-# func_cygming_dll_for_implib_fallback ARG
-# Platform-specific function to extract the
-# name of the DLL associated with the specified
-# import library ARG.
-#
-# This fallback implementation is for use when $DLLTOOL
-# does not support the --identify-strict option.
-# Invoked by eval'ing the libtool variable
-#    $sharedlib_from_linklib_cmd
-# Result is available in the variable
-#    $sharedlib_from_linklib_result
-func_cygming_dll_for_implib_fallback ()
-{
-  $debug_cmd
-
-  if func_cygming_gnu_implib_p "$1"; then
-    # binutils import library
-    sharedlib_from_linklib_result=`func_cygming_dll_for_implib_fallback_core '.idata$7' "$1"`
-  elif func_cygming_ms_implib_p "$1"; then
-    # ms-generated import library
-    sharedlib_from_linklib_result=`func_cygming_dll_for_implib_fallback_core '.idata$6' "$1"`
-  else
-    # unknown
-    sharedlib_from_linklib_result=
-  fi
-}
-
-
-# func_extract_an_archive dir oldlib
-func_extract_an_archive ()
-{
-    $debug_cmd
-
-    f_ex_an_ar_dir=$1; shift
-    f_ex_an_ar_oldlib=$1
-    if test yes = "$lock_old_archive_extraction"; then
-      lockfile=$f_ex_an_ar_oldlib.lock
-      until $opt_dry_run || ln "$progpath" "$lockfile" 2>/dev/null; do
-	func_echo "Waiting for $lockfile to be removed"
-	sleep 2
-      done
-    fi
-    func_show_eval "(cd \$f_ex_an_ar_dir && $AR x \"\$f_ex_an_ar_oldlib\")" \
-		   'stat=$?; rm -f "$lockfile"; exit $stat'
-    if test yes = "$lock_old_archive_extraction"; then
-      $opt_dry_run || rm -f "$lockfile"
-    fi
-    if ($AR t "$f_ex_an_ar_oldlib" | sort | sort -uc >/dev/null 2>&1); then
-     :
-    else
-      func_fatal_error "object name conflicts in archive: $f_ex_an_ar_dir/$f_ex_an_ar_oldlib"
-    fi
-}
-
-
-# func_extract_archives gentop oldlib ...
-func_extract_archives ()
-{
-    $debug_cmd
-
-    my_gentop=$1; shift
-    my_oldlibs=${1+"$@"}
-    my_oldobjs=
-    my_xlib=
-    my_xabs=
-    my_xdir=
-
-    for my_xlib in $my_oldlibs; do
-      # Extract the objects.
-      case $my_xlib in
-	[\\/]* | [A-Za-z]:[\\/]*) my_xabs=$my_xlib ;;
-	*) my_xabs=`pwd`"/$my_xlib" ;;
-      esac
-      func_basename "$my_xlib"
-      my_xlib=$func_basename_result
-      my_xlib_u=$my_xlib
-      while :; do
-        case " $extracted_archives " in
-	*" $my_xlib_u "*)
-	  func_arith $extracted_serial + 1
-	  extracted_serial=$func_arith_result
-	  my_xlib_u=lt$extracted_serial-$my_xlib ;;
-	*) break ;;
-	esac
-      done
-      extracted_archives="$extracted_archives $my_xlib_u"
-      my_xdir=$my_gentop/$my_xlib_u
-
-      func_mkdir_p "$my_xdir"
-
-      case $host in
-      *-darwin*)
-	func_verbose "Extracting $my_xabs"
-	# Do not bother doing anything if just a dry run
-	$opt_dry_run || {
-	  darwin_orig_dir=`pwd`
-	  cd $my_xdir || exit $?
-	  darwin_archive=$my_xabs
-	  darwin_curdir=`pwd`
-	  func_basename "$darwin_archive"
-	  darwin_base_archive=$func_basename_result
-	  darwin_arches=`$LIPO -info "$darwin_archive" 2>/dev/null | $GREP Architectures 2>/dev/null || true`
-	  if test -n "$darwin_arches"; then
-	    darwin_arches=`$ECHO "$darwin_arches" | $SED -e 's/.*are://'`
-	    darwin_arch=
-	    func_verbose "$darwin_base_archive has multiple architectures $darwin_arches"
-	    for darwin_arch in  $darwin_arches; do
-	      func_mkdir_p "unfat-$$/$darwin_base_archive-$darwin_arch"
-	      $LIPO -thin $darwin_arch -output "unfat-$$/$darwin_base_archive-$darwin_arch/$darwin_base_archive" "$darwin_archive"
-	      cd "unfat-$$/$darwin_base_archive-$darwin_arch"
-	      func_extract_an_archive "`pwd`" "$darwin_base_archive"
-	      cd "$darwin_curdir"
-	      $RM "unfat-$$/$darwin_base_archive-$darwin_arch/$darwin_base_archive"
-	    done # $darwin_arches
-            ## Okay now we've a bunch of thin objects, gotta fatten them up :)
-	    darwin_filelist=`find unfat-$$ -type f -name \*.o -print -o -name \*.lo -print | $SED -e "$sed_basename" | sort -u`
-	    darwin_file=
-	    darwin_files=
-	    for darwin_file in $darwin_filelist; do
-	      darwin_files=`find unfat-$$ -name $darwin_file -print | sort | $NL2SP`
-	      $LIPO -create -output "$darwin_file" $darwin_files
-	    done # $darwin_filelist
-	    $RM -rf unfat-$$
-	    cd "$darwin_orig_dir"
-	  else
-	    cd $darwin_orig_dir
-	    func_extract_an_archive "$my_xdir" "$my_xabs"
-	  fi # $darwin_arches
-	} # !$opt_dry_run
-	;;
-      *)
-        func_extract_an_archive "$my_xdir" "$my_xabs"
-	;;
-      esac
-      my_oldobjs="$my_oldobjs "`find $my_xdir -name \*.$objext -print -o -name \*.lo -print | sort | $NL2SP`
-    done
-
-    func_extract_archives_result=$my_oldobjs
-}
-
-
-# func_emit_wrapper [arg=no]
-#
-# Emit a libtool wrapper script on stdout.
-# Don't directly open a file because we may want to
-# incorporate the script contents within a cygwin/mingw/windows
-# wrapper executable.  Must ONLY be called from within
-# func_mode_link because it depends on a number of variables
-# set therein.
-#
-# ARG is the value that the WRAPPER_SCRIPT_BELONGS_IN_OBJDIR
-# variable will take.  If 'yes', then the emitted script
-# will assume that the directory where it is stored is
-# the $objdir directory.  This is a cygwin/mingw/windows-specific
-# behavior.
-func_emit_wrapper ()
-{
-	func_emit_wrapper_arg1=${1-no}
-
-	$ECHO "\
-#! $SHELL
-
-# $output - temporary wrapper script for $objdir/$outputname
-# Generated by $PROGRAM (GNU $PACKAGE) $VERSION
-#
-# The $output program cannot be directly executed until all the libtool
-# libraries that it depends on are installed.
-#
-# This wrapper script should never be moved out of the build directory.
-# If it is, it will not operate correctly.
-
-# Sed substitution that helps us do robust quoting.  It backslashifies
-# metacharacters that are still active within double-quoted strings.
-sed_quote_subst='$sed_quote_subst'
-
-# Be Bourne compatible
-if test -n \"\${ZSH_VERSION+set}\" && (emulate sh) >/dev/null 2>&1; then
-  emulate sh
-  NULLCMD=:
-  # Zsh 3.x and 4.x performs word splitting on \${1+\"\$@\"}, which
-  # is contrary to our usage.  Disable this feature.
-  alias -g '\${1+\"\$@\"}'='\"\$@\"'
-  setopt NO_GLOB_SUBST
-else
-  case \`(set -o) 2>/dev/null\` in *posix*) set -o posix;; esac
-fi
-BIN_SH=xpg4; export BIN_SH # for Tru64
-DUALCASE=1; export DUALCASE # for MKS sh
-
-# The HP-UX ksh and POSIX shell print the target directory to stdout
-# if CDPATH is set.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-relink_command=\"$relink_command\"
-
-# This environment variable determines our operation mode.
-if test \"\$libtool_install_magic\" = \"$magic\"; then
-  # install mode needs the following variables:
-  generated_by_libtool_version='$macro_version'
-  notinst_deplibs='$notinst_deplibs'
-else
-  # When we are sourced in execute mode, \$file and \$ECHO are already set.
-  if test \"\$libtool_execute_magic\" != \"$magic\"; then
-    file=\"\$0\""
-
-    func_quote_arg pretty "$ECHO"
-    qECHO=$func_quote_arg_result
-    $ECHO "\
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-\$1
-_LTECHO_EOF'
-}
-    ECHO=$qECHO
-  fi
-
-# Very basic option parsing. These options are (a) specific to
-# the libtool wrapper, (b) are identical between the wrapper
-# /script/ and the wrapper /executable/ that is used only on
-# windows platforms, and (c) all begin with the string "--lt-"
-# (application programs are unlikely to have options that match
-# this pattern).
-#
-# There are only two supported options: --lt-debug and
-# --lt-dump-script. There is, deliberately, no --lt-help.
-#
-# The first argument to this parsing function should be the
-# script's $0 value, followed by "$@".
-lt_option_debug=
-func_parse_lt_options ()
-{
-  lt_script_arg0=\$0
-  shift
-  for lt_opt
-  do
-    case \"\$lt_opt\" in
-    --lt-debug) lt_option_debug=1 ;;
-    --lt-dump-script)
-        lt_dump_D=\`\$ECHO \"X\$lt_script_arg0\" | $SED -e 's/^X//' -e 's%/[^/]*$%%'\`
-        test \"X\$lt_dump_D\" = \"X\$lt_script_arg0\" && lt_dump_D=.
-        lt_dump_F=\`\$ECHO \"X\$lt_script_arg0\" | $SED -e 's/^X//' -e 's%^.*/%%'\`
-        cat \"\$lt_dump_D/\$lt_dump_F\"
-        exit 0
-      ;;
-    --lt-*)
-        \$ECHO \"Unrecognized --lt- option: '\$lt_opt'\" 1>&2
-        exit 1
-      ;;
-    esac
-  done
-
-  # Print the debug banner immediately:
-  if test -n \"\$lt_option_debug\"; then
-    echo \"$outputname:$output:\$LINENO: libtool wrapper (GNU $PACKAGE) $VERSION\" 1>&2
-  fi
-}
-
-# Used when --lt-debug. Prints its arguments to stdout
-# (redirection is the responsibility of the caller)
-func_lt_dump_args ()
-{
-  lt_dump_args_N=1;
-  for lt_arg
-  do
-    \$ECHO \"$outputname:$output:\$LINENO: newargv[\$lt_dump_args_N]: \$lt_arg\"
-    lt_dump_args_N=\`expr \$lt_dump_args_N + 1\`
-  done
-}
-
-# Core function for launching the target application
-func_exec_program_core ()
-{
-"
-  case $host in
-  # Backslashes separate directories on plain windows
-  *-*-mingw* | *-*-windows* | *-*-os2* | *-cegcc*)
-    $ECHO "\
-      if test -n \"\$lt_option_debug\"; then
-        \$ECHO \"$outputname:$output:\$LINENO: newargv[0]: \$progdir\\\\\$program\" 1>&2
-        func_lt_dump_args \${1+\"\$@\"} 1>&2
-      fi
-      exec \"\$progdir\\\\\$program\" \${1+\"\$@\"}
-"
-    ;;
-
-  *)
-    $ECHO "\
-      if test -n \"\$lt_option_debug\"; then
-        \$ECHO \"$outputname:$output:\$LINENO: newargv[0]: \$progdir/\$program\" 1>&2
-        func_lt_dump_args \${1+\"\$@\"} 1>&2
-      fi
-      exec \"\$progdir/\$program\" \${1+\"\$@\"}
-"
-    ;;
-  esac
-  $ECHO "\
-      \$ECHO \"\$0: cannot exec \$program \$*\" 1>&2
-      exit 1
-}
-
-# A function to encapsulate launching the target application
-# Strips options in the --lt-* namespace from \$@ and
-# launches target application with the remaining arguments.
-func_exec_program ()
-{
-  case \" \$* \" in
-  *\\ --lt-*)
-    for lt_wr_arg
-    do
-      case \$lt_wr_arg in
-      --lt-*) ;;
-      *) set x \"\$@\" \"\$lt_wr_arg\"; shift;;
-      esac
-      shift
-    done ;;
-  esac
-  func_exec_program_core \${1+\"\$@\"}
-}
-
-  # Parse options
-  func_parse_lt_options \"\$0\" \${1+\"\$@\"}
-
-  # Find the directory that this script lives in.
-  thisdir=\`\$ECHO \"\$file\" | $SED 's%/[^/]*$%%'\`
-  test \"x\$thisdir\" = \"x\$file\" && thisdir=.
-
-  # Follow symbolic links until we get to the real thisdir.
-  file=\`ls -ld \"\$file\" | $SED -n 's/.*-> //p'\`
-  while test -n \"\$file\"; do
-    destdir=\`\$ECHO \"\$file\" | $SED 's%/[^/]*\$%%'\`
-
-    # If there was a directory component, then change thisdir.
-    if test \"x\$destdir\" != \"x\$file\"; then
-      case \"\$destdir\" in
-      [\\\\/]* | [A-Za-z]:[\\\\/]*) thisdir=\"\$destdir\" ;;
-      *) thisdir=\"\$thisdir/\$destdir\" ;;
-      esac
-    fi
-
-    file=\`\$ECHO \"\$file\" | $SED 's%^.*/%%'\`
-    file=\`ls -ld \"\$thisdir/\$file\" | $SED -n 's/.*-> //p'\`
-  done
-
-  # Usually 'no', except on cygwin/mingw/windows when embedded into
-  # the cwrapper.
-  WRAPPER_SCRIPT_BELONGS_IN_OBJDIR=$func_emit_wrapper_arg1
-  if test \"\$WRAPPER_SCRIPT_BELONGS_IN_OBJDIR\" = \"yes\"; then
-    # special case for '.'
-    if test \"\$thisdir\" = \".\"; then
-      thisdir=\`pwd\`
-    fi
-    # remove .libs from thisdir
-    case \"\$thisdir\" in
-    *[\\\\/]$objdir ) thisdir=\`\$ECHO \"\$thisdir\" | $SED 's%[\\\\/][^\\\\/]*$%%'\` ;;
-    $objdir )   thisdir=. ;;
-    esac
-  fi
-
-  # Try to get the absolute directory name.
-  absdir=\`cd \"\$thisdir\" && pwd\`
-  test -n \"\$absdir\" && thisdir=\"\$absdir\"
-"
-
-	if test yes = "$fast_install"; then
-	  $ECHO "\
-  program=lt-'$outputname'$exeext
-  progdir=\"\$thisdir/$objdir\"
-
-  if test ! -f \"\$progdir/\$program\" ||
-     { file=\`ls -1dt \"\$progdir/\$program\" \"\$progdir/../\$program\" 2>/dev/null | $SED 1q\`; \\
-       test \"X\$file\" != \"X\$progdir/\$program\"; }; then
-
-    file=\"\$\$-\$program\"
-
-    if test ! -d \"\$progdir\"; then
-      $MKDIR \"\$progdir\"
-    else
-      $RM \"\$progdir/\$file\"
-    fi"
-
-	  $ECHO "\
-
-    # relink executable if necessary
-    if test -n \"\$relink_command\"; then
-      if relink_command_output=\`eval \$relink_command 2>&1\`; then :
-      else
-	\$ECHO \"\$relink_command_output\" >&2
-	$RM \"\$progdir/\$file\"
-	exit 1
-      fi
-    fi
-
-    $MV \"\$progdir/\$file\" \"\$progdir/\$program\" 2>/dev/null ||
-    { $RM \"\$progdir/\$program\";
-      $MV \"\$progdir/\$file\" \"\$progdir/\$program\"; }
-    $RM \"\$progdir/\$file\"
-  fi"
-	else
-	  $ECHO "\
-  program='$outputname'
-  progdir=\"\$thisdir/$objdir\"
-"
-	fi
-
-	$ECHO "\
-
-  if test -f \"\$progdir/\$program\"; then"
-
-	# fixup the dll searchpath if we need to.
-	#
-	# Fix the DLL searchpath if we need to.  Do this before prepending
-	# to shlibpath, because on Windows, both are PATH and uninstalled
-	# libraries must come first.
-	if test -n "$dllsearchpath"; then
-	  $ECHO "\
-    # Add the dll search path components to the executable PATH
-    PATH=$dllsearchpath:\$PATH
-"
-	fi
-
-	# Export our shlibpath_var if we have one.
-	if test yes = "$shlibpath_overrides_runpath" && test -n "$shlibpath_var" && test -n "$temp_rpath"; then
-	  $ECHO "\
-    # Add our own library path to $shlibpath_var
-    $shlibpath_var=\"$temp_rpath\$$shlibpath_var\"
-
-    # Some systems cannot cope with colon-terminated $shlibpath_var
-    # The second colon is a workaround for a bug in BeOS R4 sed
-    $shlibpath_var=\`\$ECHO \"\$$shlibpath_var\" | $SED 's/::*\$//'\`
-
-    export $shlibpath_var
-"
-	fi
-
-	$ECHO "\
-    if test \"\$libtool_execute_magic\" != \"$magic\"; then
-      # Run the actual program with our arguments.
-      func_exec_program \${1+\"\$@\"}
-    fi
-  else
-    # The program doesn't exist.
-    \$ECHO \"\$0: error: '\$progdir/\$program' does not exist\" 1>&2
-    \$ECHO \"This script is just a wrapper for \$program.\" 1>&2
-    \$ECHO \"See the $PACKAGE documentation for more information.\" 1>&2
-    exit 1
-  fi
-fi\
-"
-}
-
-
-# func_emit_cwrapperexe_src
-# emit the source code for a wrapper executable on stdout
-# Must ONLY be called from within func_mode_link because
-# it depends on a number of variable set therein.
-func_emit_cwrapperexe_src ()
-{
-	cat <<EOF
-
-/* $cwrappersource - temporary wrapper executable for $objdir/$outputname
-   Generated by $PROGRAM (GNU $PACKAGE) $VERSION
-
-   The $output program cannot be directly executed until all the libtool
-   libraries that it depends on are installed.
-
-   This wrapper executable should never be moved out of the build directory.
-   If it is, it will not operate correctly.
-*/
-EOF
-	    cat <<"EOF"
-#ifdef _MSC_VER
-# define _CRT_SECURE_NO_DEPRECATE 1
-#endif
-#include <stdio.h>
-#include <stdlib.h>
-#if defined _WIN32 && !defined __GNUC__
-# include <direct.h>
-# include <process.h>
-# include <io.h>
-#else
-# include <unistd.h>
-# include <stdint.h>
-# ifdef __CYGWIN__
-#  include <io.h>
-# endif
-#endif
-#include <malloc.h>
-#include <stdarg.h>
-#include <assert.h>
-#include <string.h>
-#include <ctype.h>
-#include <errno.h>
-#include <fcntl.h>
-#include <sys/stat.h>
-
-#define STREQ(s1, s2) (strcmp ((s1), (s2)) == 0)
-
-/* declarations of non-ANSI functions */
-#if defined __MINGW32__
-# ifdef __STRICT_ANSI__
-_CRTIMP int __cdecl _putenv (const char *);
-# endif
-#elif defined __CYGWIN__
-# ifdef __STRICT_ANSI__
-char *realpath (const char *, char *);
-int putenv (char *);
-int setenv (const char *, const char *, int);
-# endif
-/* #elif defined other_platform || defined ... */
-#endif
-
-/* portability defines, excluding path handling macros */
-#if defined _MSC_VER
-# define setmode _setmode
-# define stat    _stat
-# define chmod   _chmod
-# define getcwd  _getcwd
-# define putenv  _putenv
-# define S_IXUSR _S_IEXEC
-#elif defined __MINGW32__
-# define setmode _setmode
-# define stat    _stat
-# define chmod   _chmod
-# define getcwd  _getcwd
-# define putenv  _putenv
-#elif defined __CYGWIN__
-# define HAVE_SETENV
-# define FOPEN_WB "wb"
-/* #elif defined other platforms ... */
-#endif
-
-#if defined PATH_MAX
-# define LT_PATHMAX PATH_MAX
-#elif defined MAXPATHLEN
-# define LT_PATHMAX MAXPATHLEN
-#else
-# define LT_PATHMAX 1024
-#endif
-
-#ifndef S_IXOTH
-# define S_IXOTH 0
-#endif
-#ifndef S_IXGRP
-# define S_IXGRP 0
-#endif
-
-/* path handling portability macros */
-#ifndef DIR_SEPARATOR
-# define DIR_SEPARATOR '/'
-# define PATH_SEPARATOR ':'
-#endif
-
-#if defined _WIN32 || defined __MSDOS__ || defined __DJGPP__ || \
-  defined __OS2__
-# define HAVE_DOS_BASED_FILE_SYSTEM
-# define FOPEN_WB "wb"
-# ifndef DIR_SEPARATOR_2
-#  define DIR_SEPARATOR_2 '\\'
-# endif
-# ifndef PATH_SEPARATOR_2
-#  define PATH_SEPARATOR_2 ';'
-# endif
-#endif
-
-#ifndef DIR_SEPARATOR_2
-# define IS_DIR_SEPARATOR(ch) ((ch) == DIR_SEPARATOR)
-#else /* DIR_SEPARATOR_2 */
-# define IS_DIR_SEPARATOR(ch) \
-	(((ch) == DIR_SEPARATOR) || ((ch) == DIR_SEPARATOR_2))
-#endif /* DIR_SEPARATOR_2 */
-
-#ifndef PATH_SEPARATOR_2
-# define IS_PATH_SEPARATOR(ch) ((ch) == PATH_SEPARATOR)
-#else /* PATH_SEPARATOR_2 */
-# define IS_PATH_SEPARATOR(ch) ((ch) == PATH_SEPARATOR_2)
-#endif /* PATH_SEPARATOR_2 */
-
-#ifndef FOPEN_WB
-# define FOPEN_WB "w"
-#endif
-#ifndef _O_BINARY
-# define _O_BINARY 0
-#endif
-
-#define XMALLOC(type, num)      ((type *) xmalloc ((num) * sizeof(type)))
-#define XFREE(stale) do { \
-  if (stale) { free (stale); stale = 0; } \
-} while (0)
-
-#if defined LT_DEBUGWRAPPER
-static int lt_debug = 1;
-#else
-static int lt_debug = 0;
-#endif
-
-const char *program_name = "libtool-wrapper"; /* in case xstrdup fails */
-
-void *xmalloc (size_t num);
-char *xstrdup (const char *string);
-const char *base_name (const char *name);
-char *find_executable (const char *wrapper);
-char *chase_symlinks (const char *pathspec);
-int make_executable (const char *path);
-int check_executable (const char *path);
-char *strendzap (char *str, const char *pat);
-void lt_debugprintf (const char *file, int line, const char *fmt, ...);
-void lt_fatal (const char *file, int line, const char *message, ...);
-static const char *nonnull (const char *s);
-static const char *nonempty (const char *s);
-void lt_setenv (const char *name, const char *value);
-char *lt_extend_str (const char *orig_value, const char *add, int to_end);
-void lt_update_exe_path (const char *name, const char *value);
-void lt_update_lib_path (const char *name, const char *value);
-char **prepare_spawn (char **argv);
-void lt_dump_script (FILE *f);
-EOF
-
-	    cat <<EOF
-#if __GNUC__ < 4 || (__GNUC__ == 4 && __GNUC_MINOR__ < 5)
-# define externally_visible volatile
-#else
-# define externally_visible __attribute__((externally_visible)) volatile
-#endif
-externally_visible const char * MAGIC_EXE = "$magic_exe";
-const char * LIB_PATH_VARNAME = "$shlibpath_var";
-EOF
-
-	    if test yes = "$shlibpath_overrides_runpath" && test -n "$shlibpath_var" && test -n "$temp_rpath"; then
-              func_to_host_path "$temp_rpath"
-	      cat <<EOF
-const char * LIB_PATH_VALUE   = "$func_to_host_path_result";
-EOF
-	    else
-	      cat <<"EOF"
-const char * LIB_PATH_VALUE   = "";
-EOF
-	    fi
-
-	    if test -n "$dllsearchpath"; then
-              func_to_host_path "$dllsearchpath:"
-	      cat <<EOF
-const char * EXE_PATH_VARNAME = "PATH";
-const char * EXE_PATH_VALUE   = "$func_to_host_path_result";
-EOF
-	    else
-	      cat <<"EOF"
-const char * EXE_PATH_VARNAME = "";
-const char * EXE_PATH_VALUE   = "";
-EOF
-	    fi
-
-	    if test yes = "$fast_install"; then
-	      cat <<EOF
-const char * TARGET_PROGRAM_NAME = "lt-$outputname"; /* hopefully, no .exe */
-EOF
-	    else
-	      cat <<EOF
-const char * TARGET_PROGRAM_NAME = "$outputname"; /* hopefully, no .exe */
-EOF
-	    fi
-
-
-	    cat <<"EOF"
-
-#define LTWRAPPER_OPTION_PREFIX         "--lt-"
-
-static const char *ltwrapper_option_prefix = LTWRAPPER_OPTION_PREFIX;
-static const char *dumpscript_opt       = LTWRAPPER_OPTION_PREFIX "dump-script";
-static const char *debug_opt            = LTWRAPPER_OPTION_PREFIX "debug";
-
-int
-main (int argc, char *argv[])
-{
-  char **newargz;
-  int  newargc;
-  char *tmp_pathspec;
-  char *actual_cwrapper_path;
-  char *actual_cwrapper_name;
-  char *target_name;
-  char *lt_argv_zero;
-  int rval = 127;
-
-  int i;
-
-  program_name = (char *) xstrdup (base_name (argv[0]));
-  newargz = XMALLOC (char *, (size_t) argc + 1);
-
-  /* very simple arg parsing; don't want to rely on getopt
-   * also, copy all non cwrapper options to newargz, except
-   * argz[0], which is handled differently
-   */
-  newargc=0;
-  for (i = 1; i < argc; i++)
-    {
-      if (STREQ (argv[i], dumpscript_opt))
-	{
-EOF
-	    case $host in
-	      *mingw* | *windows* | *cygwin* )
-		# make stdout use "unix" line endings
-		echo "          setmode(1,_O_BINARY);"
-		;;
-	      esac
-
-	    cat <<"EOF"
-	  lt_dump_script (stdout);
-	  return 0;
-	}
-      if (STREQ (argv[i], debug_opt))
-	{
-          lt_debug = 1;
-          continue;
-	}
-      if (STREQ (argv[i], ltwrapper_option_prefix))
-        {
-          /* however, if there is an option in the LTWRAPPER_OPTION_PREFIX
-             namespace, but it is not one of the ones we know about and
-             have already dealt with, above (including dump-script), then
-             report an error. Otherwise, targets might begin to believe
-             they are allowed to use options in the LTWRAPPER_OPTION_PREFIX
-             namespace. The first time any user complains about this, we'll
-             need to make LTWRAPPER_OPTION_PREFIX a configure-time option
-             or a configure.ac-settable value.
-           */
-          lt_fatal (__FILE__, __LINE__,
-		    "unrecognized %s option: '%s'",
-                    ltwrapper_option_prefix, argv[i]);
-        }
-      /* otherwise ... */
-      newargz[++newargc] = xstrdup (argv[i]);
-    }
-  newargz[++newargc] = NULL;
-
-EOF
-	    cat <<EOF
-  /* The GNU banner must be the first non-error debug message */
-  lt_debugprintf (__FILE__, __LINE__, "libtool wrapper (GNU $PACKAGE) $VERSION\n");
-EOF
-	    cat <<"EOF"
-  lt_debugprintf (__FILE__, __LINE__, "(main) argv[0]: %s\n", argv[0]);
-  lt_debugprintf (__FILE__, __LINE__, "(main) program_name: %s\n", program_name);
-
-  tmp_pathspec = find_executable (argv[0]);
-  if (tmp_pathspec == NULL)
-    lt_fatal (__FILE__, __LINE__, "couldn't find %s", argv[0]);
-  lt_debugprintf (__FILE__, __LINE__,
-                  "(main) found exe (before symlink chase) at: %s\n",
-		  tmp_pathspec);
-
-  actual_cwrapper_path = chase_symlinks (tmp_pathspec);
-  lt_debugprintf (__FILE__, __LINE__,
-                  "(main) found exe (after symlink chase) at: %s\n",
-		  actual_cwrapper_path);
-  XFREE (tmp_pathspec);
-
-  actual_cwrapper_name = xstrdup (base_name (actual_cwrapper_path));
-  strendzap (actual_cwrapper_path, actual_cwrapper_name);
-
-  /* wrapper name transforms */
-  strendzap (actual_cwrapper_name, ".exe");
-  tmp_pathspec = lt_extend_str (actual_cwrapper_name, ".exe", 1);
-  XFREE (actual_cwrapper_name);
-  actual_cwrapper_name = tmp_pathspec;
-  tmp_pathspec = 0;
-
-  /* target_name transforms -- use actual target program name; might have lt- prefix */
-  target_name = xstrdup (base_name (TARGET_PROGRAM_NAME));
-  strendzap (target_name, ".exe");
-  tmp_pathspec = lt_extend_str (target_name, ".exe", 1);
-  XFREE (target_name);
-  target_name = tmp_pathspec;
-  tmp_pathspec = 0;
-
-  lt_debugprintf (__FILE__, __LINE__,
-		  "(main) libtool target name: %s\n",
-		  target_name);
-EOF
-
-	    cat <<EOF
-  newargz[0] =
-    XMALLOC (char, (strlen (actual_cwrapper_path) +
-		    strlen ("$objdir") + 1 + strlen (actual_cwrapper_name) + 1));
-  strcpy (newargz[0], actual_cwrapper_path);
-  strcat (newargz[0], "$objdir");
-  strcat (newargz[0], "/");
-EOF
-
-	    cat <<"EOF"
-  /* stop here, and copy so we don't have to do this twice */
-  tmp_pathspec = xstrdup (newargz[0]);
-
-  /* do NOT want the lt- prefix here, so use actual_cwrapper_name */
-  strcat (newargz[0], actual_cwrapper_name);
-
-  /* DO want the lt- prefix here if it exists, so use target_name */
-  lt_argv_zero = lt_extend_str (tmp_pathspec, target_name, 1);
-  XFREE (tmp_pathspec);
-  tmp_pathspec = NULL;
-EOF
-
-	    case $host_os in
-	      mingw* | windows*)
-	    cat <<"EOF"
-  {
-    char* p;
-    while ((p = strchr (newargz[0], '\\')) != NULL)
-      {
-	*p = '/';
-      }
-    while ((p = strchr (lt_argv_zero, '\\')) != NULL)
-      {
-	*p = '/';
-      }
-  }
-EOF
-	    ;;
-	    esac
-
-	    cat <<"EOF"
-  XFREE (target_name);
-  XFREE (actual_cwrapper_path);
-  XFREE (actual_cwrapper_name);
-
-  lt_setenv ("BIN_SH", "xpg4"); /* for Tru64 */
-  lt_setenv ("DUALCASE", "1");  /* for MSK sh */
-  /* Update the DLL searchpath.  EXE_PATH_VALUE ($dllsearchpath) must
-     be prepended before (that is, appear after) LIB_PATH_VALUE ($temp_rpath)
-     because on Windows, both *_VARNAMEs are PATH but uninstalled
-     libraries must come first. */
-  lt_update_exe_path (EXE_PATH_VARNAME, EXE_PATH_VALUE);
-  lt_update_lib_path (LIB_PATH_VARNAME, LIB_PATH_VALUE);
-
-  lt_debugprintf (__FILE__, __LINE__, "(main) lt_argv_zero: %s\n",
-		  nonnull (lt_argv_zero));
-  for (i = 0; i < newargc; i++)
-    {
-      lt_debugprintf (__FILE__, __LINE__, "(main) newargz[%d]: %s\n",
-		      i, nonnull (newargz[i]));
-    }
-
-EOF
-
-	    case $host_os in
-	      mingw* | windows*)
-		cat <<"EOF"
-  /* execv doesn't actually work on mingw as expected on unix */
-  newargz = prepare_spawn (newargz);
-  rval = (int) _spawnv (_P_WAIT, lt_argv_zero, (const char * const *) newargz);
-  if (rval == -1)
-    {
-      /* failed to start process */
-      lt_debugprintf (__FILE__, __LINE__,
-		      "(main) failed to launch target \"%s\": %s\n",
-		      lt_argv_zero, nonnull (strerror (errno)));
-      return 127;
-    }
-  return rval;
-EOF
-		;;
-	      *)
-		cat <<"EOF"
-  execv (lt_argv_zero, newargz);
-  return rval; /* =127, but avoids unused variable warning */
-EOF
-		;;
-	    esac
-
-	    cat <<"EOF"
-}
-
-void *
-xmalloc (size_t num)
-{
-  void *p = (void *) malloc (num);
-  if (!p)
-    lt_fatal (__FILE__, __LINE__, "memory exhausted");
-
-  return p;
-}
-
-char *
-xstrdup (const char *string)
-{
-  return string ? strcpy ((char *) xmalloc (strlen (string) + 1),
-			  string) : NULL;
-}
-
-const char *
-base_name (const char *name)
-{
-  const char *base;
-
-#if defined HAVE_DOS_BASED_FILE_SYSTEM
-  /* Skip over the disk name in MSDOS pathnames. */
-  if (isalpha ((unsigned char) name[0]) && name[1] == ':')
-    name += 2;
-#endif
-
-  for (base = name; *name; name++)
-    if (IS_DIR_SEPARATOR (*name))
-      base = name + 1;
-  return base;
-}
-
-int
-check_executable (const char *path)
-{
-  struct stat st;
-
-  lt_debugprintf (__FILE__, __LINE__, "(check_executable): %s\n",
-                  nonempty (path));
-  if ((!path) || (!*path))
-    return 0;
-
-  if ((stat (path, &st) >= 0)
-      && (st.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH)))
-    return 1;
-  else
-    return 0;
-}
-
-int
-make_executable (const char *path)
-{
-  int rval = 0;
-  struct stat st;
-
-  lt_debugprintf (__FILE__, __LINE__, "(make_executable): %s\n",
-                  nonempty (path));
-  if ((!path) || (!*path))
-    return 0;
-
-  if (stat (path, &st) >= 0)
-    {
-      rval = chmod (path, st.st_mode | S_IXOTH | S_IXGRP | S_IXUSR);
-    }
-  return rval;
-}
-
-/* Searches for the full path of the wrapper.  Returns
-   newly allocated full path name if found, NULL otherwise
-   Does not chase symlinks, even on platforms that support them.
-*/
-char *
-find_executable (const char *wrapper)
-{
-  int has_slash = 0;
-  const char *p;
-  const char *p_next;
-  /* static buffer for getcwd */
-  char tmp[LT_PATHMAX + 1];
-  size_t tmp_len;
-  char *concat_name;
-
-  lt_debugprintf (__FILE__, __LINE__, "(find_executable): %s\n",
-                  nonempty (wrapper));
-
-  if ((wrapper == NULL) || (*wrapper == '\0'))
-    return NULL;
-
-  /* Absolute path? */
-#if defined HAVE_DOS_BASED_FILE_SYSTEM
-  if (isalpha ((unsigned char) wrapper[0]) && wrapper[1] == ':')
-    {
-      concat_name = xstrdup (wrapper);
-      if (check_executable (concat_name))
-	return concat_name;
-      XFREE (concat_name);
-    }
-  else
-    {
-#endif
-      if (IS_DIR_SEPARATOR (wrapper[0]))
-	{
-	  concat_name = xstrdup (wrapper);
-	  if (check_executable (concat_name))
-	    return concat_name;
-	  XFREE (concat_name);
-	}
-#if defined HAVE_DOS_BASED_FILE_SYSTEM
-    }
-#endif
-
-  for (p = wrapper; *p; p++)
-    if (*p == '/')
-      {
-	has_slash = 1;
-	break;
-      }
-  if (!has_slash)
-    {
-      /* no slashes; search PATH */
-      const char *path = getenv ("PATH");
-      if (path != NULL)
-	{
-	  for (p = path; *p; p = p_next)
-	    {
-	      const char *q;
-	      size_t p_len;
-	      for (q = p; *q; q++)
-		if (IS_PATH_SEPARATOR (*q))
-		  break;
-	      p_len = (size_t) (q - p);
-	      p_next = (*q == '\0' ? q : q + 1);
-	      if (p_len == 0)
-		{
-		  /* empty path: current directory */
-		  if (getcwd (tmp, LT_PATHMAX) == NULL)
-		    lt_fatal (__FILE__, __LINE__, "getcwd failed: %s",
-                              nonnull (strerror (errno)));
-		  tmp_len = strlen (tmp);
-		  concat_name =
-		    XMALLOC (char, tmp_len + 1 + strlen (wrapper) + 1);
-		  memcpy (concat_name, tmp, tmp_len);
-		  concat_name[tmp_len] = '/';
-		  strcpy (concat_name + tmp_len + 1, wrapper);
-		}
-	      else
-		{
-		  concat_name =
-		    XMALLOC (char, p_len + 1 + strlen (wrapper) + 1);
-		  memcpy (concat_name, p, p_len);
-		  concat_name[p_len] = '/';
-		  strcpy (concat_name + p_len + 1, wrapper);
-		}
-	      if (check_executable (concat_name))
-		return concat_name;
-	      XFREE (concat_name);
-	    }
-	}
-      /* not found in PATH; assume curdir */
-    }
-  /* Relative path | not found in path: prepend cwd */
-  if (getcwd (tmp, LT_PATHMAX) == NULL)
-    lt_fatal (__FILE__, __LINE__, "getcwd failed: %s",
-              nonnull (strerror (errno)));
-  tmp_len = strlen (tmp);
-  concat_name = XMALLOC (char, tmp_len + 1 + strlen (wrapper) + 1);
-  memcpy (concat_name, tmp, tmp_len);
-  concat_name[tmp_len] = '/';
-  strcpy (concat_name + tmp_len + 1, wrapper);
-
-  if (check_executable (concat_name))
-    return concat_name;
-  XFREE (concat_name);
-  return NULL;
-}
-
-char *
-chase_symlinks (const char *pathspec)
-{
-#ifndef S_ISLNK
-  return xstrdup (pathspec);
-#else
-  char buf[LT_PATHMAX];
-  struct stat s;
-  char *tmp_pathspec = xstrdup (pathspec);
-  char *p;
-  int has_symlinks = 0;
-  while (strlen (tmp_pathspec) && !has_symlinks)
-    {
-      lt_debugprintf (__FILE__, __LINE__,
-		      "checking path component for symlinks: %s\n",
-		      tmp_pathspec);
-      if (lstat (tmp_pathspec, &s) == 0)
-	{
-	  if (S_ISLNK (s.st_mode) != 0)
-	    {
-	      has_symlinks = 1;
-	      break;
-	    }
-
-	  /* search backwards for last DIR_SEPARATOR */
-	  p = tmp_pathspec + strlen (tmp_pathspec) - 1;
-	  while ((p > tmp_pathspec) && (!IS_DIR_SEPARATOR (*p)))
-	    p--;
-	  if ((p == tmp_pathspec) && (!IS_DIR_SEPARATOR (*p)))
-	    {
-	      /* no more DIR_SEPARATORS left */
-	      break;
-	    }
-	  *p = '\0';
-	}
-      else
-	{
-	  lt_fatal (__FILE__, __LINE__,
-		    "error accessing file \"%s\": %s",
-		    tmp_pathspec, nonnull (strerror (errno)));
-	}
-    }
-  XFREE (tmp_pathspec);
-
-  if (!has_symlinks)
-    {
-      return xstrdup (pathspec);
-    }
-
-  tmp_pathspec = realpath (pathspec, buf);
-  if (tmp_pathspec == 0)
-    {
-      lt_fatal (__FILE__, __LINE__,
-		"could not follow symlinks for %s", pathspec);
-    }
-  return xstrdup (tmp_pathspec);
-#endif
-}
-
-char *
-strendzap (char *str, const char *pat)
-{
-  size_t len, patlen;
-
-  assert (str != NULL);
-  assert (pat != NULL);
-
-  len = strlen (str);
-  patlen = strlen (pat);
-
-  if (patlen <= len)
-    {
-      str += len - patlen;
-      if (STREQ (str, pat))
-	*str = '\0';
-    }
-  return str;
-}
-
-void
-lt_debugprintf (const char *file, int line, const char *fmt, ...)
-{
-  va_list args;
-  if (lt_debug)
-    {
-      (void) fprintf (stderr, "%s:%s:%d: ", program_name, file, line);
-      va_start (args, fmt);
-      (void) vfprintf (stderr, fmt, args);
-      va_end (args);
-    }
-}
-
-static void
-lt_error_core (int exit_status, const char *file,
-	       int line, const char *mode,
-	       const char *message, va_list ap)
-{
-  fprintf (stderr, "%s:%s:%d: %s: ", program_name, file, line, mode);
-  vfprintf (stderr, message, ap);
-  fprintf (stderr, ".\n");
-
-  if (exit_status >= 0)
-    exit (exit_status);
-}
-
-void
-lt_fatal (const char *file, int line, const char *message, ...)
-{
-  va_list ap;
-  va_start (ap, message);
-  lt_error_core (EXIT_FAILURE, file, line, "FATAL", message, ap);
-  va_end (ap);
-}
-
-static const char *
-nonnull (const char *s)
-{
-  return s ? s : "(null)";
-}
-
-static const char *
-nonempty (const char *s)
-{
-  return (s && !*s) ? "(empty)" : nonnull (s);
-}
-
-void
-lt_setenv (const char *name, const char *value)
-{
-  lt_debugprintf (__FILE__, __LINE__,
-		  "(lt_setenv) setting '%s' to '%s'\n",
-                  nonnull (name), nonnull (value));
-  {
-#ifdef HAVE_SETENV
-    /* always make a copy, for consistency with !HAVE_SETENV */
-    char *str = xstrdup (value);
-    setenv (name, str, 1);
-#else
-    size_t len = strlen (name) + 1 + strlen (value) + 1;
-    char *str = XMALLOC (char, len);
-    sprintf (str, "%s=%s", name, value);
-    if (putenv (str) != EXIT_SUCCESS)
-      {
-        XFREE (str);
-      }
-#endif
-  }
-}
-
-char *
-lt_extend_str (const char *orig_value, const char *add, int to_end)
-{
-  char *new_value;
-  if (orig_value && *orig_value)
-    {
-      size_t orig_value_len = strlen (orig_value);
-      size_t add_len = strlen (add);
-      new_value = XMALLOC (char, add_len + orig_value_len + 1);
-      if (to_end)
-        {
-          strcpy (new_value, orig_value);
-          strcpy (new_value + orig_value_len, add);
-        }
-      else
-        {
-          strcpy (new_value, add);
-          strcpy (new_value + add_len, orig_value);
-        }
-    }
-  else
-    {
-      new_value = xstrdup (add);
-    }
-  return new_value;
-}
-
-void
-lt_update_exe_path (const char *name, const char *value)
-{
-  lt_debugprintf (__FILE__, __LINE__,
-		  "(lt_update_exe_path) modifying '%s' by prepending '%s'\n",
-                  nonnull (name), nonnull (value));
-
-  if (name && *name && value && *value)
-    {
-      char *new_value = lt_extend_str (getenv (name), value, 0);
-      /* some systems can't cope with a ':'-terminated path #' */
-      size_t len = strlen (new_value);
-      while ((len > 0) && IS_PATH_SEPARATOR (new_value[len-1]))
-        {
-          new_value[--len] = '\0';
-        }
-      lt_setenv (name, new_value);
-      XFREE (new_value);
-    }
-}
-
-void
-lt_update_lib_path (const char *name, const char *value)
-{
-  lt_debugprintf (__FILE__, __LINE__,
-		  "(lt_update_lib_path) modifying '%s' by prepending '%s'\n",
-                  nonnull (name), nonnull (value));
-
-  if (name && *name && value && *value)
-    {
-      char *new_value = lt_extend_str (getenv (name), value, 0);
-      lt_setenv (name, new_value);
-      XFREE (new_value);
-    }
-}
-
-EOF
-	    case $host_os in
-	      mingw* | windows*)
-		cat <<"EOF"
-
-/* Prepares an argument vector before calling spawn().
-   Note that spawn() does not by itself call the command interpreter
-     (getenv ("COMSPEC") != NULL ? getenv ("COMSPEC") :
-      ({ OSVERSIONINFO v; v.dwOSVersionInfoSize = sizeof(OSVERSIONINFO);
-         GetVersionEx(&v);
-         v.dwPlatformId == VER_PLATFORM_WIN32_NT;
-      }) ? "cmd.exe" : "command.com").
-   Instead it simply concatenates the arguments, separated by ' ', and calls
-   CreateProcess().  We must quote the arguments since Win32 CreateProcess()
-   interprets characters like ' ', '\t', '\\', '"' (but not '<' and '>') in a
-   special way:
-   - Space and tab are interpreted as delimiters. They are not treated as
-     delimiters if they are surrounded by double quotes: "...".
-   - Unescaped double quotes are removed from the input. Their only effect is
-     that within double quotes, space and tab are treated like normal
-     characters.
-   - Backslashes not followed by double quotes are not special.
-   - But 2*n+1 backslashes followed by a double quote become
-     n backslashes followed by a double quote (n >= 0):
-       \" -> "
-       \\\" -> \"
-       \\\\\" -> \\"
- */
-#define SHELL_SPECIAL_CHARS "\"\\ \001\002\003\004\005\006\007\010\011\012\013\014\015\016\017\020\021\022\023\024\025\026\027\030\031\032\033\034\035\036\037"
-#define SHELL_SPACE_CHARS " \001\002\003\004\005\006\007\010\011\012\013\014\015\016\017\020\021\022\023\024\025\026\027\030\031\032\033\034\035\036\037"
-char **
-prepare_spawn (char **argv)
-{
-  size_t argc;
-  char **new_argv;
-  size_t i;
-
-  /* Count number of arguments.  */
-  for (argc = 0; argv[argc] != NULL; argc++)
-    ;
-
-  /* Allocate new argument vector.  */
-  new_argv = XMALLOC (char *, argc + 1);
-
-  /* Put quoted arguments into the new argument vector.  */
-  for (i = 0; i < argc; i++)
-    {
-      const char *string = argv[i];
-
-      if (string[0] == '\0')
-	new_argv[i] = xstrdup ("\"\"");
-      else if (strpbrk (string, SHELL_SPECIAL_CHARS) != NULL)
-	{
-	  int quote_around = (strpbrk (string, SHELL_SPACE_CHARS) != NULL);
-	  size_t length;
-	  unsigned int backslashes;
-	  const char *s;
-	  char *quoted_string;
-	  char *p;
-
-	  length = 0;
-	  backslashes = 0;
-	  if (quote_around)
-	    length++;
-	  for (s = string; *s != '\0'; s++)
-	    {
-	      char c = *s;
-	      if (c == '"')
-		length += backslashes + 1;
-	      length++;
-	      if (c == '\\')
-		backslashes++;
-	      else
-		backslashes = 0;
-	    }
-	  if (quote_around)
-	    length += backslashes + 1;
-
-	  quoted_string = XMALLOC (char, length + 1);
-
-	  p = quoted_string;
-	  backslashes = 0;
-	  if (quote_around)
-	    *p++ = '"';
-	  for (s = string; *s != '\0'; s++)
-	    {
-	      char c = *s;
-	      if (c == '"')
-		{
-		  unsigned int j;
-		  for (j = backslashes + 1; j > 0; j--)
-		    *p++ = '\\';
-		}
-	      *p++ = c;
-	      if (c == '\\')
-		backslashes++;
-	      else
-		backslashes = 0;
-	    }
-	  if (quote_around)
-	    {
-	      unsigned int j;
-	      for (j = backslashes; j > 0; j--)
-		*p++ = '\\';
-	      *p++ = '"';
-	    }
-	  *p = '\0';
-
-	  new_argv[i] = quoted_string;
-	}
-      else
-	new_argv[i] = (char *) string;
-    }
-  new_argv[argc] = NULL;
-
-  return new_argv;
-}
-EOF
-		;;
-	    esac
-
-            cat <<"EOF"
-void lt_dump_script (FILE* f)
-{
-EOF
-	    func_emit_wrapper yes |
-	      $SED -n -e '
-s/^\(.\{79\}\)\(..*\)/\1\
-\2/
-h
-s/\([\\"]\)/\\\1/g
-s/$/\\n/
-s/\([^\n]*\).*/  fputs ("\1", f);/p
-g
-D'
-            cat <<"EOF"
-}
-EOF
-}
-# end: func_emit_cwrapperexe_src
-
-# func_win32_import_lib_p ARG
-# True if ARG is an import lib, as indicated by $file_magic_cmd
-func_win32_import_lib_p ()
-{
-    $debug_cmd
-
-    case `eval $file_magic_cmd \"\$1\" 2>/dev/null | $SED -e 10q` in
-    *import*) : ;;
-    *) false ;;
-    esac
-}
-
-# func_suncc_cstd_abi
-# !!ONLY CALL THIS FOR SUN CC AFTER $compile_command IS FULLY EXPANDED!!
-# Several compiler flags select an ABI that is incompatible with the
-# Cstd library. Avoid specifying it if any are in CXXFLAGS.
-func_suncc_cstd_abi ()
-{
-    $debug_cmd
-
-    case " $compile_command " in
-    *" -compat=g "*|*\ -std=c++[0-9][0-9]\ *|*" -library=stdcxx4 "*|*" -library=stlport4 "*)
-      suncc_use_cstd_abi=no
-      ;;
-    *)
-      suncc_use_cstd_abi=yes
-      ;;
-    esac
-}
-
-# func_mode_link arg...
-func_mode_link ()
-{
-    $debug_cmd
-
-    case $host in
-    *-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-cegcc*)
-      # It is impossible to link a dll without this setting, and
-      # we shouldn't force the makefile maintainer to figure out
-      # what system we are compiling for in order to pass an extra
-      # flag for every libtool invocation.
-      # allow_undefined=no
-
-      # FIXME: Unfortunately, there are problems with the above when trying
-      # to make a dll that has undefined symbols, in which case not
-      # even a static library is built.  For now, we need to specify
-      # -no-undefined on the libtool link line when we can be certain
-      # that all symbols are satisfied, otherwise we get a static library.
-      allow_undefined=yes
-      ;;
-    *)
-      allow_undefined=yes
-      ;;
-    esac
-    libtool_args=$nonopt
-    base_compile="$nonopt $@"
-    compile_command=$nonopt
-    finalize_command=$nonopt
-
-    compile_rpath=
-    compile_rpath_tail=
-    finalize_rpath=
-    compile_shlibpath=
-    finalize_shlibpath=
-    convenience=
-    old_convenience=
-    deplibs=
-    old_deplibs=
-    compiler_flags=
-    linker_flags=
-    dllsearchpath=
-    lib_search_path=`pwd`
-    inst_prefix_dir=
-    new_inherited_linker_flags=
-
-    avoid_version=no
-    bindir=
-    dlfiles=
-    dlprefiles=
-    dlself=no
-    export_dynamic=no
-    export_symbols=
-    export_symbols_regex=
-    generated=
-    libobjs=
-    ltlibs=
-    module=no
-    no_install=no
-    objs=
-    os2dllname=
-    non_pic_objects=
-    precious_files_regex=
-    prefer_static_libs=no
-    preload=false
-    prev=
-    prevarg=
-    release=
-    rpath=
-    xrpath=
-    perm_rpath=
-    temp_rpath=
-    temp_rpath_tail=
-    thread_safe=no
-    vinfo=
-    vinfo_number=no
-    weak_libs=
-    rpath_arg=
-    single_module=$wl-single_module
-    func_infer_tag $base_compile
-
-    # We need to know -static, to get the right output filenames.
-    for arg
-    do
-      case $arg in
-      -shared)
-	test yes != "$build_libtool_libs" \
-	  && func_fatal_configuration "cannot build a shared library"
-	build_old_libs=no
-	break
-	;;
-      -all-static | -static | -static-libtool-libs)
-	case $arg in
-	-all-static)
-	  if test yes = "$build_libtool_libs" && test -z "$link_static_flag"; then
-	    func_warning "complete static linking is impossible in this configuration"
-	  fi
-	  if test -n "$link_static_flag"; then
-	    dlopen_self=$dlopen_self_static
-	  fi
-	  prefer_static_libs=yes
-	  ;;
-	-static)
-	  if test -z "$pic_flag" && test -n "$link_static_flag"; then
-	    dlopen_self=$dlopen_self_static
-	  fi
-	  prefer_static_libs=built
-	  ;;
-	-static-libtool-libs)
-	  if test -z "$pic_flag" && test -n "$link_static_flag"; then
-	    dlopen_self=$dlopen_self_static
-	  fi
-	  prefer_static_libs=yes
-	  ;;
-	esac
-	build_libtool_libs=no
-	build_old_libs=yes
-	break
-	;;
-      esac
-    done
-
-    # See if our shared archives depend on static archives.
-    test -n "$old_archive_from_new_cmds" && build_old_libs=yes
-
-    # Go through the arguments, transforming them on the way.
-    while test "$#" -gt 0; do
-      arg=$1
-      shift
-      func_quote_arg pretty,unquoted "$arg"
-      qarg=$func_quote_arg_unquoted_result
-      func_append libtool_args " $func_quote_arg_result"
-
-      # If the previous option needs an argument, assign it.
-      if test -n "$prev"; then
-	case $prev in
-	output)
-	  func_append compile_command " @OUTPUT@"
-	  func_append finalize_command " @OUTPUT@"
-	  ;;
-	esac
-
-	case $prev in
-	bindir)
-	  bindir=$arg
-	  prev=
-	  continue
-	  ;;
-	dlfiles|dlprefiles)
-	  $preload || {
-	    # Add the symbol object into the linking commands.
-	    func_append compile_command " @SYMFILE@"
-	    func_append finalize_command " @SYMFILE@"
-	    preload=:
-	  }
-	  case $arg in
-	  *.la | *.lo) ;;  # We handle these cases below.
-	  force)
-	    if test no = "$dlself"; then
-	      dlself=needless
-	      export_dynamic=yes
-	    fi
-	    prev=
-	    continue
-	    ;;
-	  self)
-	    if test dlprefiles = "$prev"; then
-	      dlself=yes
-	    elif test dlfiles = "$prev" && test yes != "$dlopen_self"; then
-	      dlself=yes
-	    else
-	      dlself=needless
-	      export_dynamic=yes
-	    fi
-	    prev=
-	    continue
-	    ;;
-	  *)
-	    if test dlfiles = "$prev"; then
-	      func_append dlfiles " $arg"
-	    else
-	      func_append dlprefiles " $arg"
-	    fi
-	    prev=
-	    continue
-	    ;;
-	  esac
-	  ;;
-	expsyms)
-	  export_symbols=$arg
-	  test -f "$arg" \
-	    || func_fatal_error "symbol file '$arg' does not exist"
-	  prev=
-	  continue
-	  ;;
-	expsyms_regex)
-	  export_symbols_regex=$arg
-	  prev=
-	  continue
-	  ;;
-	framework)
-	  case $host in
-	    *-*-darwin*)
-	      case "$deplibs " in
-		*" $qarg.ltframework "*) ;;
-		*) func_append deplibs " $qarg.ltframework" # this is fixed later
-		   ;;
-	      esac
-	      ;;
-	  esac
-	  prev=
-	  continue
-	  ;;
-	inst_prefix)
-	  inst_prefix_dir=$arg
-	  prev=
-	  continue
-	  ;;
-	mllvm)
-	  # Clang does not use LLVM to link, so we can simply discard any
-	  # '-mllvm $arg' options when doing the link step.
-	  prev=
-	  continue
-	  ;;
-	objectlist)
-	  if test -f "$arg"; then
-	    save_arg=$arg
-	    moreargs=
-	    for fil in `cat "$save_arg"`
-	    do
-#	      func_append moreargs " $fil"
-	      arg=$fil
-	      # A libtool-controlled object.
-
-	      # Check to see that this really is a libtool object.
-	      if func_lalib_unsafe_p "$arg"; then
-		pic_object=
-		non_pic_object=
-
-		# Read the .lo file
-		func_source "$arg"
-
-		if test -z "$pic_object" ||
-		   test -z "$non_pic_object" ||
-		   test none = "$pic_object" &&
-		   test none = "$non_pic_object"; then
-		  func_fatal_error "cannot find name of object for '$arg'"
-		fi
-
-		# Extract subdirectory from the argument.
-		func_dirname "$arg" "/" ""
-		xdir=$func_dirname_result
-
-		if test none != "$pic_object"; then
-		  # Prepend the subdirectory the object is found in.
-		  pic_object=$xdir$pic_object
-
-		  if test dlfiles = "$prev"; then
-		    if test yes = "$build_libtool_libs" && test yes = "$dlopen_support"; then
-		      func_append dlfiles " $pic_object"
-		      prev=
-		      continue
-		    else
-		      # If libtool objects are unsupported, then we need to preload.
-		      prev=dlprefiles
-		    fi
-		  fi
-
-		  # CHECK ME:  I think I busted this.  -Ossama
-		  if test dlprefiles = "$prev"; then
-		    # Preload the old-style object.
-		    func_append dlprefiles " $pic_object"
-		    prev=
-		  fi
-
-		  # A PIC object.
-		  func_append libobjs " $pic_object"
-		  arg=$pic_object
-		fi
-
-		# Non-PIC object.
-		if test none != "$non_pic_object"; then
-		  # Prepend the subdirectory the object is found in.
-		  non_pic_object=$xdir$non_pic_object
-
-		  # A standard non-PIC object
-		  func_append non_pic_objects " $non_pic_object"
-		  if test -z "$pic_object" || test none = "$pic_object"; then
-		    arg=$non_pic_object
-		  fi
-		else
-		  # If the PIC object exists, use it instead.
-		  # $xdir was prepended to $pic_object above.
-		  non_pic_object=$pic_object
-		  func_append non_pic_objects " $non_pic_object"
-		fi
-	      else
-		# Only an error if not doing a dry-run.
-		if $opt_dry_run; then
-		  # Extract subdirectory from the argument.
-		  func_dirname "$arg" "/" ""
-		  xdir=$func_dirname_result
-
-		  func_lo2o "$arg"
-		  pic_object=$xdir$objdir/$func_lo2o_result
-		  non_pic_object=$xdir$func_lo2o_result
-		  func_append libobjs " $pic_object"
-		  func_append non_pic_objects " $non_pic_object"
-	        else
-		  func_fatal_error "'$arg' is not a valid libtool object"
-		fi
-	      fi
-	    done
-	  else
-	    func_fatal_error "link input file '$arg' does not exist"
-	  fi
-	  arg=$save_arg
-	  prev=
-	  continue
-	  ;;
-	os2dllname)
-	  os2dllname=$arg
-	  prev=
-	  continue
-	  ;;
-	precious_regex)
-	  precious_files_regex=$arg
-	  prev=
-	  continue
-	  ;;
-	release)
-	  release=-$arg
-	  prev=
-	  continue
-	  ;;
-	rpath | xrpath)
-	  # We need an absolute path.
-	  case $arg in
-	  [\\/]* | [A-Za-z]:[\\/]*) ;;
-	  *)
-	    func_fatal_error "argument to -rpath is not absolute: $arg"
-	    ;;
-	  esac
-	  if test rpath = "$prev"; then
-	    case "$rpath " in
-	    *" $arg "*) ;;
-	    *) func_append rpath " $arg" ;;
-	    esac
-	  else
-	    case "$xrpath " in
-	    *" $arg "*) ;;
-	    *) func_append xrpath " $arg" ;;
-	    esac
-	  fi
-	  prev=
-	  continue
-	  ;;
-	shrext)
-	  shrext_cmds=$arg
-	  prev=
-	  continue
-	  ;;
-	weak)
-	  func_append weak_libs " $arg"
-	  prev=
-	  continue
-	  ;;
-	xassembler)
-	  func_append compiler_flags " -Xassembler $qarg"
-	  prev=
-	  func_append compile_command " -Xassembler $qarg"
-	  func_append finalize_command " -Xassembler $qarg"
-	  continue
-	  ;;
-	xcclinker)
-	  func_append linker_flags " $qarg"
-	  func_append compiler_flags " $qarg"
-	  prev=
-	  func_append compile_command " $qarg"
-	  func_append finalize_command " $qarg"
-	  continue
-	  ;;
-	xcompiler)
-	  func_append compiler_flags " $qarg"
-	  prev=
-	  func_append compile_command " $qarg"
-	  func_append finalize_command " $qarg"
-	  continue
-	  ;;
-	xlinker)
-	  func_append linker_flags " $qarg"
-	  func_append compiler_flags " $wl$qarg"
-	  prev=
-	  func_append compile_command " $wl$qarg"
-	  func_append finalize_command " $wl$qarg"
-	  continue
-	  ;;
-	*)
-	  eval "$prev=\"\$arg\""
-	  prev=
-	  continue
-	  ;;
-	esac
-      fi # test -n "$prev"
-
-      prevarg=$arg
-
-      case $arg in
-      -all-static)
-	if test -n "$link_static_flag"; then
-	  # See comment for -static flag below, for more details.
-	  func_append compile_command " $link_static_flag"
-	  func_append finalize_command " $link_static_flag"
-	fi
-	continue
-	;;
-
-      -allow-undefined)
-	# FIXME: remove this flag sometime in the future.
-	func_fatal_error "'-allow-undefined' must not be used because it is the default"
-	;;
-
-      -avoid-version)
-	avoid_version=yes
-	continue
-	;;
-
-      -bindir)
-	prev=bindir
-	continue
-	;;
-
-      -dlopen)
-	prev=dlfiles
-	continue
-	;;
-
-      -dlpreopen)
-	prev=dlprefiles
-	continue
-	;;
-
-      -export-dynamic)
-	export_dynamic=yes
-	continue
-	;;
-
-      -export-symbols | -export-symbols-regex)
-	if test -n "$export_symbols" || test -n "$export_symbols_regex"; then
-	  func_fatal_error "more than one -exported-symbols argument is not allowed"
-	fi
-	if test X-export-symbols = "X$arg"; then
-	  prev=expsyms
-	else
-	  prev=expsyms_regex
-	fi
-	continue
-	;;
-
-      -framework)
-	prev=framework
-	continue
-	;;
-
-      -inst-prefix-dir)
-	prev=inst_prefix
-	continue
-	;;
-
-      # The native IRIX linker understands -LANG:*, -LIST:* and -LNO:*
-      # so, if we see these flags be careful not to treat them like -L
-      -L[A-Z][A-Z]*:*)
-	case $with_gcc/$host in
-	no/*-*-irix* | /*-*-irix*)
-	  func_append compile_command " $arg"
-	  func_append finalize_command " $arg"
-	  ;;
-	esac
-	continue
-	;;
-
-      -L*)
-	func_stripname "-L" '' "$arg"
-	if test -z "$func_stripname_result"; then
-	  if test "$#" -gt 0; then
-	    func_fatal_error "require no space between '-L' and '$1'"
-	  else
-	    func_fatal_error "need path for '-L' option"
-	  fi
-	fi
-	func_resolve_sysroot "$func_stripname_result"
-	dir=$func_resolve_sysroot_result
-	# We need an absolute path.
-	case $dir in
-	[\\/]* | [A-Za-z]:[\\/]*) ;;
-	*)
-	  absdir=`cd "$dir" && pwd`
-	  test -z "$absdir" && \
-	    func_fatal_error "cannot determine absolute directory name of '$dir'"
-	  dir=$absdir
-	  ;;
-	esac
-	case "$deplibs " in
-	*" -L$dir "* | *" $arg "*)
-	  # Will only happen for absolute or sysroot arguments
-	  ;;
-	*)
-	  # Preserve sysroot, but never include relative directories
-	  case $dir in
-	    [\\/]* | [A-Za-z]:[\\/]* | =*) func_append deplibs " $arg" ;;
-	    *) func_append deplibs " -L$dir" ;;
-	  esac
-	  func_append lib_search_path " $dir"
-	  ;;
-	esac
-	case $host in
-	*-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-cegcc*)
-	  testbindir=`$ECHO "$dir" | $SED 's*/lib$*/bin*'`
-	  case :$dllsearchpath: in
-	  *":$dir:"*) ;;
-	  ::) dllsearchpath=$dir;;
-	  *) func_append dllsearchpath ":$dir";;
-	  esac
-	  case :$dllsearchpath: in
-	  *":$testbindir:"*) ;;
-	  ::) dllsearchpath=$testbindir;;
-	  *) func_append dllsearchpath ":$testbindir";;
-	  esac
-	  ;;
-	esac
-	continue
-	;;
-
-      -l*)
-	if test X-lc = "X$arg" || test X-lm = "X$arg"; then
-	  case $host in
-	  *-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-beos* | *-cegcc* | *-*-haiku*)
-	    # These systems don't actually have a C or math library (as such)
-	    continue
-	    ;;
-	  *-*-os2*)
-	    # These systems don't actually have a C library (as such)
-	    test X-lc = "X$arg" && continue
-	    ;;
-	  *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-midnightbsd*)
-	    # Do not include libc due to us having libc/libc_r.
-	    test X-lc = "X$arg" && continue
-	    ;;
-	  *-*-rhapsody* | *-*-darwin1.[012])
-	    # Rhapsody C and math libraries are in the System framework
-	    func_append deplibs " System.ltframework"
-	    continue
-	    ;;
-	  *-*-sco3.2v5* | *-*-sco5v6*)
-	    # Causes problems with __ctype
-	    test X-lc = "X$arg" && continue
-	    ;;
-	  *-*-sysv4.2uw2* | *-*-sysv5* | *-*-unixware* | *-*-OpenUNIX*)
-	    # Compiler inserts libc in the correct place for threads to work
-	    test X-lc = "X$arg" && continue
-	    ;;
-	  esac
-	elif test X-lc_r = "X$arg"; then
-	 case $host in
-	 *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-midnightbsd*)
-	   # Do not include libc_r directly, use -pthread flag.
-	   continue
-	   ;;
-	 esac
-	fi
-	func_append deplibs " $arg"
-	continue
-	;;
-
-      -mllvm)
-	prev=mllvm
-	continue
-	;;
-
-      -module)
-	module=yes
-	continue
-	;;
-
-      # Tru64 UNIX uses -model [arg] to determine the layout of C++
-      # classes, name mangling, and exception handling.
-      # Darwin uses the -arch flag to determine output architecture.
-      # -q <option> for IBM XL C/C++ compiler.
-      -model|-arch|-isysroot|--sysroot|-q)
-	func_append compiler_flags " $arg"
-	func_append compile_command " $arg"
-	func_append finalize_command " $arg"
-	prev=xcompiler
-	continue
-	;;
-     # Solaris ld rejects as of 11.4. Refer to Oracle bug 22985199.
-     -pthread)
-	case $host in
-	  *solaris2*) ;;
-	  *)
-	    case "$new_inherited_linker_flags " in
-	        *" $arg "*) ;;
-	        * ) func_append new_inherited_linker_flags " $arg" ;;
-	    esac
-	  ;;
-	esac
-	continue
-	;;
-      -mt|-mthreads|-kthread|-Kthread|-pthreads|--thread-safe \
-      |-threads|-fopenmp|-fopenmp=*|-openmp|-mp|-xopenmp|-omp|-qsmp=*)
-	func_append compiler_flags " $arg"
-	func_append compile_command " $arg"
-	func_append finalize_command " $arg"
-	case "$new_inherited_linker_flags " in
-	    *" $arg "*) ;;
-	    * ) func_append new_inherited_linker_flags " $arg" ;;
-	esac
-	continue
-	;;
-
-      -multi_module)
-	single_module=$wl-multi_module
-	continue
-	;;
-
-      -no-fast-install)
-	fast_install=no
-	continue
-	;;
-
-      -no-install)
-	case $host in
-	*-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-*-darwin* | *-cegcc*)
-	  # The PATH hackery in wrapper scripts is required on Windows
-	  # and Darwin in order for the loader to find any dlls it needs.
-	  func_warning "'-no-install' is ignored for $host"
-	  func_warning "assuming '-no-fast-install' instead"
-	  fast_install=no
-	  ;;
-	*) no_install=yes ;;
-	esac
-	continue
-	;;
-
-      -no-undefined)
-	allow_undefined=no
-	continue
-	;;
-
-      -objectlist)
-	prev=objectlist
-	continue
-	;;
-
-      -os2dllname)
-	prev=os2dllname
-	continue
-	;;
-
-      -o) prev=output ;;
-
-      -precious-files-regex)
-	prev=precious_regex
-	continue
-	;;
-
-      -release)
-	prev=release
-	continue
-	;;
-
-      -rpath)
-	prev=rpath
-	continue
-	;;
-
-      -R)
-	prev=xrpath
-	continue
-	;;
-
-      -R*)
-	func_stripname '-R' '' "$arg"
-	dir=$func_stripname_result
-	# We need an absolute path.
-	case $dir in
-	[\\/]* | [A-Za-z]:[\\/]*) ;;
-	=*)
-	  func_stripname '=' '' "$dir"
-	  dir=$lt_sysroot$func_stripname_result
-	  ;;
-	*)
-	  func_fatal_error "argument ($arg) to '-R' is not an absolute path: $dir"
-	  ;;
-	esac
-	case "$xrpath " in
-	*" $dir "*) ;;
-	*) func_append xrpath " $dir" ;;
-	esac
-	continue
-	;;
-
-      -shared)
-	# The effects of -shared are defined in a previous loop.
-	continue
-	;;
-
-      -shrext)
-	prev=shrext
-	continue
-	;;
-
-      -static | -static-libtool-libs)
-	# The effects of -static are defined in a previous loop.
-	# We used to do the same as -all-static on platforms that
-	# didn't have a PIC flag, but the assumption that the effects
-	# would be equivalent was wrong.  It would break on at least
-	# Digital Unix and AIX.
-	continue
-	;;
-
-      -thread-safe)
-	thread_safe=yes
-	continue
-	;;
-
-      -version-info)
-	prev=vinfo
-	continue
-	;;
-
-      -version-number)
-	prev=vinfo
-	vinfo_number=yes
-	continue
-	;;
-
-      -weak)
-        prev=weak
-	continue
-	;;
-
-      -Wc,*)
-	func_stripname '-Wc,' '' "$arg"
-	args=$func_stripname_result
-	arg=
-	save_ifs=$IFS; IFS=,
-	for flag in $args; do
-	  IFS=$save_ifs
-          func_quote_arg pretty "$flag"
-	  func_append arg " $func_quote_arg_result"
-	  func_append compiler_flags " $func_quote_arg_result"
-	done
-	IFS=$save_ifs
-	func_stripname ' ' '' "$arg"
-	arg=$func_stripname_result
-	;;
-
-      -Wl,*)
-	func_stripname '-Wl,' '' "$arg"
-	args=$func_stripname_result
-	arg=
-	save_ifs=$IFS; IFS=,
-	for flag in $args; do
-	  IFS=$save_ifs
-          func_quote_arg pretty "$flag"
-	  func_append arg " $wl$func_quote_arg_result"
-	  func_append compiler_flags " $wl$func_quote_arg_result"
-	  func_append linker_flags " $func_quote_arg_result"
-	done
-	IFS=$save_ifs
-	func_stripname ' ' '' "$arg"
-	arg=$func_stripname_result
-	;;
-
-      -Xassembler)
-        prev=xassembler
-        continue
-        ;;
-
-      -Xcompiler)
-	prev=xcompiler
-	continue
-	;;
-
-      -Xlinker)
-	prev=xlinker
-	continue
-	;;
-
-      -XCClinker)
-	prev=xcclinker
-	continue
-	;;
-
-      # -msg_* for osf cc
-      -msg_*)
-	func_quote_arg pretty "$arg"
-	arg=$func_quote_arg_result
-	;;
-
-      # Flags to be passed through unchanged, with rationale:
-      # -64, -mips[0-9]      enable 64-bit mode for the SGI compiler
-      # -r[0-9][0-9]*        specify processor for the SGI compiler
-      # -xarch=*, -xtarget=* enable 64-bit mode for the Sun compiler
-      # +DA*, +DD*           enable 64-bit mode for the HP compiler
-      # -q*                  compiler args for the IBM compiler
-      # -m*, -t[45]*, -txscale* architecture-specific flags for GCC
-      # -F/path              path to uninstalled frameworks, gcc on darwin
-      # -p, -pg, --coverage, -fprofile-*  profiling flags for GCC
-      # -fstack-protector*   stack protector flags for GCC
-      # @file                GCC response files
-      # -tp=*                Portland pgcc target processor selection
-      # --sysroot=*          for sysroot support
-      # -O*, -g*, -flto*, -fwhopr*, -fuse-linker-plugin GCC link-time optimization
-      # -specs=*             GCC specs files
-      # -stdlib=*            select c++ std lib with clang
-      # -fdiagnostics-color* simply affects output
-      # -frecord-gcc-switches used to verify flags were respected
-      # -fsanitize=*         Clang/GCC memory and address sanitizer
-      # -fno-sanitize*       Clang/GCC memory and address sanitizer
-      # -shared-libsan       Link with shared sanitizer runtimes (Clang)
-      # -static-libsan       Link with static sanitizer runtimes (Clang)
-      # -no-canonical-prefixes Do not expand any symbolic links
-      # -fuse-ld=*           Linker select flags for GCC
-      # -static-*            direct GCC to link specific libraries statically
-      # -fcilkplus           Cilk Plus language extension features for C/C++
-      # -rtlib=*             select c runtime lib with clang
-      # --unwindlib=*        select unwinder library with clang
-      # -f{file|debug|macro|profile}-prefix-map=* needed for lto linking
-      # -Wa,*                Pass flags directly to the assembler
-      # -Werror, -Werror=*   Report (specified) warnings as errors
-      -64|-mips[0-9]|-r[0-9][0-9]*|-xarch=*|-xtarget=*|+DA*|+DD*|-q*|-m*| \
-      -t[45]*|-txscale*|-p|-pg|--coverage|-fprofile-*|-F*|@*|-tp=*|--sysroot=*| \
-      -O*|-g*|-flto*|-fwhopr*|-fuse-linker-plugin|-fstack-protector*|-no-canonical-prefixes| \
-      -stdlib=*|-rtlib=*|--unwindlib=*| \
-      -specs=*|-fsanitize=*|-fno-sanitize*|-shared-libsan|-static-libsan| \
-      -ffile-prefix-map=*|-fdebug-prefix-map=*|-fmacro-prefix-map=*|-fprofile-prefix-map=*| \
-      -fdiagnostics-color*|-frecord-gcc-switches| \
-      -fuse-ld=*|-static-*|-fcilkplus|-Wa,*|-Werror|-Werror=*)
-        func_quote_arg pretty "$arg"
-	arg=$func_quote_arg_result
-        func_append compile_command " $arg"
-        func_append finalize_command " $arg"
-        func_append compiler_flags " $arg"
-        continue
-        ;;
-
-      -Z*)
-        if test os2 = "`expr $host : '.*\(os2\)'`"; then
-          # OS/2 uses -Zxxx to specify OS/2-specific options
-	  compiler_flags="$compiler_flags $arg"
-	  func_append compile_command " $arg"
-	  func_append finalize_command " $arg"
-	  case $arg in
-	  -Zlinker | -Zstack)
-	    prev=xcompiler
-	    ;;
-	  esac
-	  continue
-        else
-	  # Otherwise treat like 'Some other compiler flag' below
-	  func_quote_arg pretty "$arg"
-	  arg=$func_quote_arg_result
-        fi
-	;;
-
-      # Some other compiler flag.
-      -* | +*)
-        func_quote_arg pretty "$arg"
-	arg=$func_quote_arg_result
-	;;
-
-      *.$objext)
-	# A standard object.
-	func_append objs " $arg"
-	;;
-
-      *.lo)
-	# A libtool-controlled object.
-
-	# Check to see that this really is a libtool object.
-	if func_lalib_unsafe_p "$arg"; then
-	  pic_object=
-	  non_pic_object=
-
-	  # Read the .lo file
-	  func_source "$arg"
-
-	  if test -z "$pic_object" ||
-	     test -z "$non_pic_object" ||
-	     test none = "$pic_object" &&
-	     test none = "$non_pic_object"; then
-	    func_fatal_error "cannot find name of object for '$arg'"
-	  fi
-
-	  # Extract subdirectory from the argument.
-	  func_dirname "$arg" "/" ""
-	  xdir=$func_dirname_result
-
-	  test none = "$pic_object" || {
-	    # Prepend the subdirectory the object is found in.
-	    pic_object=$xdir$pic_object
-
-	    if test dlfiles = "$prev"; then
-	      if test yes = "$build_libtool_libs" && test yes = "$dlopen_support"; then
-		func_append dlfiles " $pic_object"
-		prev=
-		continue
-	      else
-		# If libtool objects are unsupported, then we need to preload.
-		prev=dlprefiles
-	      fi
-	    fi
-
-	    # CHECK ME:  I think I busted this.  -Ossama
-	    if test dlprefiles = "$prev"; then
-	      # Preload the old-style object.
-	      func_append dlprefiles " $pic_object"
-	      prev=
-	    fi
-
-	    # A PIC object.
-	    func_append libobjs " $pic_object"
-	    arg=$pic_object
-	  }
-
-	  # Non-PIC object.
-	  if test none != "$non_pic_object"; then
-	    # Prepend the subdirectory the object is found in.
-	    non_pic_object=$xdir$non_pic_object
-
-	    # A standard non-PIC object
-	    func_append non_pic_objects " $non_pic_object"
-	    if test -z "$pic_object" || test none = "$pic_object"; then
-	      arg=$non_pic_object
-	    fi
-	  else
-	    # If the PIC object exists, use it instead.
-	    # $xdir was prepended to $pic_object above.
-	    non_pic_object=$pic_object
-	    func_append non_pic_objects " $non_pic_object"
-	  fi
-	else
-	  # Only an error if not doing a dry-run.
-	  if $opt_dry_run; then
-	    # Extract subdirectory from the argument.
-	    func_dirname "$arg" "/" ""
-	    xdir=$func_dirname_result
-
-	    func_lo2o "$arg"
-	    pic_object=$xdir$objdir/$func_lo2o_result
-	    non_pic_object=$xdir$func_lo2o_result
-	    func_append libobjs " $pic_object"
-	    func_append non_pic_objects " $non_pic_object"
-	  else
-	    func_fatal_error "'$arg' is not a valid libtool object"
-	  fi
-	fi
-	;;
-
-      *.$libext)
-	# An archive.
-	func_append deplibs " $arg"
-	func_append old_deplibs " $arg"
-	continue
-	;;
-
-      *.la)
-	# A libtool-controlled library.
-
-	func_resolve_sysroot "$arg"
-	if test dlfiles = "$prev"; then
-	  # This library was specified with -dlopen.
-	  func_append dlfiles " $func_resolve_sysroot_result"
-	  prev=
-	elif test dlprefiles = "$prev"; then
-	  # The library was specified with -dlpreopen.
-	  func_append dlprefiles " $func_resolve_sysroot_result"
-	  prev=
-	else
-	  func_append deplibs " $func_resolve_sysroot_result"
-	fi
-	continue
-	;;
-
-      # Some other compiler argument.
-      *)
-	# Unknown arguments in both finalize_command and compile_command need
-	# to be aesthetically quoted because they are evaled later.
-	func_quote_arg pretty "$arg"
-	arg=$func_quote_arg_result
-	;;
-      esac # arg
-
-      # Now actually substitute the argument into the commands.
-      if test -n "$arg"; then
-	if test -n "$rpath_arg"; then
-          func_append finalize_rpath " ${arg##*,}"
-	  unset rpath_arg
-	else
-	  case $arg in
-          -Wl,-rpath,*)
-	    func_append finalize_rpath " ${arg##*,}";;
-          -Wl,-rpath)
-	    rpath_arg=1;;
-          *)
-            func_append compile_command " $arg"
-	    func_append finalize_command " $arg"
-	  esac
-        fi
-      fi
-    done # argument parsing loop
-
-    test -n "$prev" && \
-      func_fatal_help "the '$prevarg' option requires an argument"
-
-    if test yes = "$export_dynamic" && test -n "$export_dynamic_flag_spec"; then
-      eval arg=\"$export_dynamic_flag_spec\"
-      func_append compile_command " $arg"
-      func_append finalize_command " $arg"
-    fi
-
-    oldlibs=
-    # calculate the name of the file, without its directory
-    func_basename "$output"
-    outputname=$func_basename_result
-    libobjs_save=$libobjs
-
-    if test -n "$shlibpath_var"; then
-      # get the directories listed in $shlibpath_var
-      eval shlib_search_path=\`\$ECHO \"\$$shlibpath_var\" \| \$SED \'s/:/ /g\'\`
-    else
-      shlib_search_path=
-    fi
-    eval sys_lib_search_path=\"$sys_lib_search_path_spec\"
-    eval sys_lib_dlsearch_path=\"$sys_lib_dlsearch_path_spec\"
-
-    # Definition is injected by LT_CONFIG during libtool generation.
-    func_munge_path_list sys_lib_dlsearch_path "$LT_SYS_LIBRARY_PATH"
-
-    func_dirname "$output" "/" ""
-    output_objdir=$func_dirname_result$objdir
-    func_to_tool_file "$output_objdir/"
-    tool_output_objdir=$func_to_tool_file_result
-    # Create the object directory.
-    func_mkdir_p "$output_objdir"
-
-    # Determine the type of output
-    case $output in
-    "")
-      func_fatal_help "you must specify an output file"
-      ;;
-    *.$libext) linkmode=oldlib ;;
-    *.lo | *.$objext) linkmode=obj ;;
-    *.la) linkmode=lib ;;
-    *) linkmode=prog ;; # Anything else should be a program.
-    esac
-
-    specialdeplibs=
-
-    libs=
-    # Find all interdependent deplibs by searching for libraries
-    # that are linked more than once (e.g. -la -lb -la)
-    for deplib in $deplibs; do
-      if $opt_preserve_dup_deps; then
-	case "$libs " in
-	*" $deplib "*) func_append specialdeplibs " $deplib" ;;
-	esac
-      fi
-      func_append libs " $deplib"
-    done
-
-    if test lib = "$linkmode"; then
-      libs="$predeps $libs $compiler_lib_search_path $postdeps"
-
-      # Compute libraries that are listed more than once in $predeps
-      # $postdeps and mark them as special (i.e., whose duplicates are
-      # not to be eliminated).
-      pre_post_deps=
-      if $opt_duplicate_compiler_generated_deps; then
-	for pre_post_dep in $predeps $postdeps; do
-	  case "$pre_post_deps " in
-	  *" $pre_post_dep "*) func_append specialdeplibs " $pre_post_deps" ;;
-	  esac
-	  func_append pre_post_deps " $pre_post_dep"
-	done
-      fi
-      pre_post_deps=
-    fi
-
-    deplibs=
-    newdependency_libs=
-    newlib_search_path=
-    need_relink=no # whether we're linking any uninstalled libtool libraries
-    notinst_deplibs= # not-installed libtool libraries
-    notinst_path= # paths that contain not-installed libtool libraries
-
-    case $linkmode in
-    lib)
-	passes="conv dlpreopen link"
-	for file in $dlfiles $dlprefiles; do
-	  case $file in
-	  *.la) ;;
-	  *)
-	    func_fatal_help "libraries can '-dlopen' only libtool libraries: $file"
-	    ;;
-	  esac
-	done
-	;;
-    prog)
-	compile_deplibs=
-	finalize_deplibs=
-	alldeplibs=false
-	newdlfiles=
-	newdlprefiles=
-	passes="conv scan dlopen dlpreopen link"
-	;;
-    *)  passes="conv"
-	;;
-    esac
-
-    for pass in $passes; do
-      # The preopen pass in lib mode reverses $deplibs; put it back here
-      # so that -L comes before libs that need it for instance...
-      if test lib,link = "$linkmode,$pass"; then
-	## FIXME: Find the place where the list is rebuilt in the wrong
-	##        order, and fix it there properly
-        tmp_deplibs=
-	for deplib in $deplibs; do
-	  tmp_deplibs="$deplib $tmp_deplibs"
-	done
-	deplibs=$tmp_deplibs
-      fi
-
-      if test lib,link = "$linkmode,$pass" ||
-	 test prog,scan = "$linkmode,$pass"; then
-	libs=$deplibs
-	deplibs=
-      fi
-      if test prog = "$linkmode"; then
-	case $pass in
-	dlopen) libs=$dlfiles ;;
-	dlpreopen) libs=$dlprefiles ;;
-	link) libs="$deplibs %DEPLIBS% $dependency_libs" ;;
-	esac
-      fi
-      if test lib,dlpreopen = "$linkmode,$pass"; then
-	# Collect and forward deplibs of preopened libtool libs
-	for lib in $dlprefiles; do
-	  # Ignore non-libtool-libs
-	  dependency_libs=
-	  func_resolve_sysroot "$lib"
-	  case $lib in
-	  *.la)	func_source "$func_resolve_sysroot_result" ;;
-	  esac
-
-	  # Collect preopened libtool deplibs, except any this library
-	  # has declared as weak libs
-	  for deplib in $dependency_libs; do
-	    func_basename "$deplib"
-            deplib_base=$func_basename_result
-	    case " $weak_libs " in
-	    *" $deplib_base "*) ;;
-	    *) func_append deplibs " $deplib" ;;
-	    esac
-	  done
-	done
-	libs=$dlprefiles
-      fi
-      if test dlopen = "$pass"; then
-	# Collect dlpreopened libraries
-	save_deplibs=$deplibs
-	deplibs=
-      fi
-
-      for deplib in $libs; do
-	lib=
-	found=false
-	case $deplib in
-	-mt|-mthreads|-kthread|-Kthread|-pthread|-pthreads|--thread-safe \
-        |-threads|-fopenmp|-fopenmp=*|-openmp|-mp|-xopenmp|-omp|-qsmp=*)
-	  if test prog,link = "$linkmode,$pass"; then
-	    compile_deplibs="$deplib $compile_deplibs"
-	    finalize_deplibs="$deplib $finalize_deplibs"
-	  else
-	    func_append compiler_flags " $deplib"
-	    if test lib = "$linkmode"; then
-		case "$new_inherited_linker_flags " in
-		    *" $deplib "*) ;;
-		    * ) func_append new_inherited_linker_flags " $deplib" ;;
-		esac
-	    fi
-	  fi
-	  continue
-	  ;;
-	-l*)
-	  if test lib != "$linkmode" && test prog != "$linkmode"; then
-	    func_warning "'-l' is ignored for archives/objects"
-	    continue
-	  fi
-	  func_stripname '-l' '' "$deplib"
-	  name=$func_stripname_result
-	  if test lib = "$linkmode"; then
-	    searchdirs="$newlib_search_path $lib_search_path $compiler_lib_search_dirs $sys_lib_search_path $shlib_search_path"
-	  else
-	    searchdirs="$newlib_search_path $lib_search_path $sys_lib_search_path $shlib_search_path"
-	  fi
-	  for searchdir in $searchdirs; do
-	    for search_ext in .la $std_shrext .so .a; do
-	      # Search the libtool library
-	      lib=$searchdir/lib$name$search_ext
-	      if test -f "$lib"; then
-		if test .la = "$search_ext"; then
-		  found=:
-		else
-		  found=false
-		fi
-		break 2
-	      fi
-	    done
-	  done
-	  if $found; then
-	    # deplib is a libtool library
-	    # If $allow_libtool_libs_with_static_runtimes && $deplib is a stdlib,
-	    # We need to do some special things here, and not later.
-	    if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-	      case " $predeps $postdeps " in
-	      *" $deplib "*)
-		if func_lalib_p "$lib"; then
-		  library_names=
-		  old_library=
-		  func_source "$lib"
-		  for l in $old_library $library_names; do
-		    ll=$l
-		  done
-		  if test "X$ll" = "X$old_library"; then # only static version available
-		    found=false
-		    func_dirname "$lib" "" "."
-		    ladir=$func_dirname_result
-		    lib=$ladir/$old_library
-		    if test prog,link = "$linkmode,$pass"; then
-		      compile_deplibs="$deplib $compile_deplibs"
-		      finalize_deplibs="$deplib $finalize_deplibs"
-		    else
-		      deplibs="$deplib $deplibs"
-		      test lib = "$linkmode" && newdependency_libs="$deplib $newdependency_libs"
-		    fi
-		    continue
-		  fi
-		fi
-		;;
-	      *) ;;
-	      esac
-	    fi
-	  else
-	    # deplib doesn't seem to be a libtool library
-	    if test prog,link = "$linkmode,$pass"; then
-	      compile_deplibs="$deplib $compile_deplibs"
-	      finalize_deplibs="$deplib $finalize_deplibs"
-	    else
-	      deplibs="$deplib $deplibs"
-	      test lib = "$linkmode" && newdependency_libs="$deplib $newdependency_libs"
-	    fi
-	    continue
-	  fi
-	  ;; # -l
-	*.ltframework)
-	  if test prog,link = "$linkmode,$pass"; then
-	    compile_deplibs="$deplib $compile_deplibs"
-	    finalize_deplibs="$deplib $finalize_deplibs"
-	  else
-	    deplibs="$deplib $deplibs"
-	    if test lib = "$linkmode"; then
-		case "$new_inherited_linker_flags " in
-		    *" $deplib "*) ;;
-		    * ) func_append new_inherited_linker_flags " $deplib" ;;
-		esac
-	    fi
-	  fi
-	  continue
-	  ;;
-	-L*)
-	  case $linkmode in
-	  lib)
-	    deplibs="$deplib $deplibs"
-	    test conv = "$pass" && continue
-	    newdependency_libs="$deplib $newdependency_libs"
-	    func_stripname '-L' '' "$deplib"
-	    func_resolve_sysroot "$func_stripname_result"
-	    func_append newlib_search_path " $func_resolve_sysroot_result"
-	    ;;
-	  prog)
-	    if test conv = "$pass"; then
-	      deplibs="$deplib $deplibs"
-	      continue
-	    fi
-	    if test scan = "$pass"; then
-	      deplibs="$deplib $deplibs"
-	    else
-	      compile_deplibs="$deplib $compile_deplibs"
-	      finalize_deplibs="$deplib $finalize_deplibs"
-	    fi
-	    func_stripname '-L' '' "$deplib"
-	    func_resolve_sysroot "$func_stripname_result"
-	    func_append newlib_search_path " $func_resolve_sysroot_result"
-	    ;;
-	  *)
-	    func_warning "'-L' is ignored for archives/objects"
-	    ;;
-	  esac # linkmode
-	  continue
-	  ;; # -L
-	-R*)
-	  if test link = "$pass"; then
-	    func_stripname '-R' '' "$deplib"
-	    func_resolve_sysroot "$func_stripname_result"
-	    dir=$func_resolve_sysroot_result
-	    # Make sure the xrpath contains only unique directories.
-	    case "$xrpath " in
-	    *" $dir "*) ;;
-	    *) func_append xrpath " $dir" ;;
-	    esac
-	  fi
-	  deplibs="$deplib $deplibs"
-	  continue
-	  ;;
-	*.la)
-	  func_resolve_sysroot "$deplib"
-	  lib=$func_resolve_sysroot_result
-	  ;;
-	*.$libext)
-	  if test conv = "$pass"; then
-	    deplibs="$deplib $deplibs"
-	    continue
-	  fi
-	  case $linkmode in
-	  lib)
-	    # Linking convenience modules into shared libraries is allowed,
-	    # but linking other static libraries is non-portable.
-	    case " $dlpreconveniencelibs " in
-	    *" $deplib "*) ;;
-	    *)
-	      valid_a_lib=false
-	      case $deplibs_check_method in
-		match_pattern*)
-		  set dummy $deplibs_check_method; shift
-		  match_pattern_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"`
-		  if eval "\$ECHO \"$deplib\"" 2>/dev/null | $SED 10q \
-		    | $EGREP "$match_pattern_regex" > /dev/null; then
-		    valid_a_lib=:
-		  fi
-		;;
-		pass_all)
-		  valid_a_lib=:
-		;;
-	      esac
-	      if $valid_a_lib; then
-		func_warning "Linking the shared library $output against the static library $deplib is not portable!"
-		deplibs="$deplib $deplibs"
-	      else
-		func_warning "Trying to link with static lib archive $deplib."
-		func_warning "I have the capability to make that library automatically link in when"
-		func_warning "you link to this library.  But I can only do this if you have a"
-		func_warning "shared version of the library, which you do not appear to have"
-		func_warning "because the file extensions .$libext of this argument makes me believe"
-		func_warning "that it is just a static archive that I should not use here."
-	      fi
-	      ;;
-	    esac
-	    continue
-	    ;;
-	  prog)
-	    if test link != "$pass"; then
-	      deplibs="$deplib $deplibs"
-	    else
-	      compile_deplibs="$deplib $compile_deplibs"
-	      finalize_deplibs="$deplib $finalize_deplibs"
-	    fi
-	    continue
-	    ;;
-	  esac # linkmode
-	  ;; # *.$libext
-	*.lo | *.$objext)
-	  if test conv = "$pass"; then
-	    deplibs="$deplib $deplibs"
-	  elif test prog = "$linkmode"; then
-	    if test dlpreopen = "$pass" || test yes != "$dlopen_support" || test no = "$build_libtool_libs"; then
-	      # If there is no dlopen support or we're linking statically,
-	      # we need to preload.
-	      func_append newdlprefiles " $deplib"
-	      compile_deplibs="$deplib $compile_deplibs"
-	      finalize_deplibs="$deplib $finalize_deplibs"
-	    else
-	      func_append newdlfiles " $deplib"
-	    fi
-	  fi
-	  continue
-	  ;;
-	%DEPLIBS%)
-	  alldeplibs=:
-	  continue
-	  ;;
-	esac # case $deplib
-
-	$found || test -f "$lib" \
-	  || func_fatal_error "cannot find the library '$lib' or unhandled argument '$deplib'"
-
-	# Check to see that this really is a libtool archive.
-	func_lalib_unsafe_p "$lib" \
-	  || func_fatal_error "'$lib' is not a valid libtool archive"
-
-	func_dirname "$lib" "" "."
-	ladir=$func_dirname_result
-
-	dlname=
-	dlopen=
-	dlpreopen=
-	libdir=
-	library_names=
-	old_library=
-	inherited_linker_flags=
-	# If the library was installed with an old release of libtool,
-	# it will not redefine variables installed, or shouldnotlink
-	installed=yes
-	shouldnotlink=no
-	avoidtemprpath=
-
-
-	# Read the .la file
-	func_source "$lib"
-
-	# Convert "-framework foo" to "foo.ltframework"
-	if test -n "$inherited_linker_flags"; then
-	  tmp_inherited_linker_flags=`$ECHO "$inherited_linker_flags" | $SED 's/-framework \([^ $]*\)/\1.ltframework/g'`
-	  for tmp_inherited_linker_flag in $tmp_inherited_linker_flags; do
-	    case " $new_inherited_linker_flags " in
-	      *" $tmp_inherited_linker_flag "*) ;;
-	      *) func_append new_inherited_linker_flags " $tmp_inherited_linker_flag";;
-	    esac
-	  done
-	fi
-	dependency_libs=`$ECHO " $dependency_libs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	if test lib,link = "$linkmode,$pass" ||
-	   test prog,scan = "$linkmode,$pass" ||
-	   { test prog != "$linkmode" && test lib != "$linkmode"; }; then
-	  test -n "$dlopen" && func_append dlfiles " $dlopen"
-	  test -n "$dlpreopen" && func_append dlprefiles " $dlpreopen"
-	fi
-
-	if test conv = "$pass"; then
-	  # Only check for convenience libraries
-	  deplibs="$lib $deplibs"
-	  if test -z "$libdir"; then
-	    if test -z "$old_library"; then
-	      func_fatal_error "cannot find name of link library for '$lib'"
-	    fi
-	    # It is a libtool convenience library, so add in its objects.
-	    func_append convenience " $ladir/$objdir/$old_library"
-	    func_append old_convenience " $ladir/$objdir/$old_library"
-	  elif test prog != "$linkmode" && test lib != "$linkmode"; then
-	    func_fatal_error "'$lib' is not a convenience library"
-	  fi
-	  tmp_libs=
-	  for deplib in $dependency_libs; do
-	    deplibs="$deplib $deplibs"
-	    if $opt_preserve_dup_deps; then
-	      case "$tmp_libs " in
-	      *" $deplib "*) func_append specialdeplibs " $deplib" ;;
-	      esac
-	    fi
-	    func_append tmp_libs " $deplib"
-	  done
-	  continue
-	fi # $pass = conv
-
-
-	# Get the name of the library we link against.
-	linklib=
-	if test -n "$old_library" &&
-	   { test yes = "$prefer_static_libs" ||
-	     test built,no = "$prefer_static_libs,$installed"; }; then
-	  linklib=$old_library
-	else
-	  for l in $old_library $library_names; do
-	    linklib=$l
-	  done
-	fi
-	if test -z "$linklib"; then
-	  func_fatal_error "cannot find name of link library for '$lib'"
-	fi
-
-	# This library was specified with -dlopen.
-	if test dlopen = "$pass"; then
-	  test -z "$libdir" \
-	    && func_fatal_error "cannot -dlopen a convenience library: '$lib'"
-	  if test -z "$dlname" ||
-	     test yes != "$dlopen_support" ||
-	     test no = "$build_libtool_libs"
-	  then
-	    # If there is no dlname, no dlopen support or we're linking
-	    # statically, we need to preload.  We also need to preload any
-	    # dependent libraries so libltdl's deplib preloader doesn't
-	    # bomb out in the load deplibs phase.
-	    func_append dlprefiles " $lib $dependency_libs"
-	  else
-	    func_append newdlfiles " $lib"
-	  fi
-	  continue
-	fi # $pass = dlopen
-
-	# We need an absolute path.
-	case $ladir in
-	[\\/]* | [A-Za-z]:[\\/]*) abs_ladir=$ladir ;;
-	*)
-	  abs_ladir=`cd "$ladir" && pwd`
-	  if test -z "$abs_ladir"; then
-	    func_warning "cannot determine absolute directory name of '$ladir'"
-	    func_warning "passing it literally to the linker, although it might fail"
-	    abs_ladir=$ladir
-	  fi
-	  ;;
-	esac
-	func_basename "$lib"
-	laname=$func_basename_result
-
-	# Find the relevant object directory and library name.
-	if test yes = "$installed"; then
-	  if test ! -f "$lt_sysroot$libdir/$linklib" && test -f "$abs_ladir/$linklib"; then
-	    func_warning "library '$lib' was moved."
-	    dir=$ladir
-	    absdir=$abs_ladir
-	    libdir=$abs_ladir
-	  else
-	    dir=$lt_sysroot$libdir
-	    absdir=$lt_sysroot$libdir
-	  fi
-	  test yes = "$hardcode_automatic" && avoidtemprpath=yes
-	else
-	  if test ! -f "$ladir/$objdir/$linklib" && test -f "$abs_ladir/$linklib"; then
-	    dir=$ladir
-	    absdir=$abs_ladir
-	    # Remove this search path later
-	    func_append notinst_path " $abs_ladir"
-	  else
-	    dir=$ladir/$objdir
-	    absdir=$abs_ladir/$objdir
-	    # Remove this search path later
-	    func_append notinst_path " $abs_ladir"
-	  fi
-	fi # $installed = yes
-	func_stripname 'lib' '.la' "$laname"
-	name=$func_stripname_result
-
-	# This library was specified with -dlpreopen.
-	if test dlpreopen = "$pass"; then
-	  if test -z "$libdir" && test prog = "$linkmode"; then
-	    func_fatal_error "only libraries may -dlpreopen a convenience library: '$lib'"
-	  fi
-	  case $host in
-	    # special handling for platforms with PE-DLLs.
-	    *cygwin* | *mingw* | *windows* | *cegcc* )
-	      # Linker will automatically link against shared library if both
-	      # static and shared are present.  Therefore, ensure we extract
-	      # symbols from the import library if a shared library is present
-	      # (otherwise, the dlopen module name will be incorrect).  We do
-	      # this by putting the import library name into $newdlprefiles.
-	      # We recover the dlopen module name by 'saving' the la file
-	      # name in a special purpose variable, and (later) extracting the
-	      # dlname from the la file.
-	      if test -n "$dlname"; then
-	        func_tr_sh "$dir/$linklib"
-	        eval "libfile_$func_tr_sh_result=\$abs_ladir/\$laname"
-	        func_append newdlprefiles " $dir/$linklib"
-	      else
-	        func_append newdlprefiles " $dir/$old_library"
-	        # Keep a list of preopened convenience libraries to check
-	        # that they are being used correctly in the link pass.
-	        test -z "$libdir" && \
-	          func_append dlpreconveniencelibs " $dir/$old_library"
-	      fi
-	    ;;
-	    * )
-	      # Prefer using a static library (so that no silly _DYNAMIC symbols
-	      # are required to link).
-	      if test -n "$old_library"; then
-	        func_append newdlprefiles " $dir/$old_library"
-	        # Keep a list of preopened convenience libraries to check
-	        # that they are being used correctly in the link pass.
-	        test -z "$libdir" && \
-	          func_append dlpreconveniencelibs " $dir/$old_library"
-	      # Otherwise, use the dlname, so that lt_dlopen finds it.
-	      elif test -n "$dlname"; then
-	        func_append newdlprefiles " $dir/$dlname"
-	      else
-	        func_append newdlprefiles " $dir/$linklib"
-	      fi
-	    ;;
-	  esac
-	fi # $pass = dlpreopen
-
-	if test -z "$libdir"; then
-	  # Link the convenience library
-	  if test lib = "$linkmode"; then
-	    deplibs="$dir/$old_library $deplibs"
-	  elif test prog,link = "$linkmode,$pass"; then
-	    compile_deplibs="$dir/$old_library $compile_deplibs"
-	    finalize_deplibs="$dir/$old_library $finalize_deplibs"
-	  else
-	    deplibs="$lib $deplibs" # used for prog,scan pass
-	  fi
-	  continue
-	fi
-
-
-	if test prog = "$linkmode" && test link != "$pass"; then
-	  func_append newlib_search_path " $ladir"
-	  deplibs="$lib $deplibs"
-
-	  linkalldeplibs=false
-	  if test no != "$link_all_deplibs" || test -z "$library_names" ||
-	     test no = "$build_libtool_libs"; then
-	    linkalldeplibs=:
-	  fi
-
-	  tmp_libs=
-	  for deplib in $dependency_libs; do
-	    case $deplib in
-	    -L*) func_stripname '-L' '' "$deplib"
-	         func_resolve_sysroot "$func_stripname_result"
-	         func_append newlib_search_path " $func_resolve_sysroot_result"
-		 ;;
-	    esac
-	    # Need to link against all dependency_libs?
-	    if $linkalldeplibs; then
-	      deplibs="$deplib $deplibs"
-	    else
-	      # Need to hardcode shared library paths
-	      # or/and link against static libraries
-	      newdependency_libs="$deplib $newdependency_libs"
-	    fi
-	    if $opt_preserve_dup_deps; then
-	      case "$tmp_libs " in
-	      *" $deplib "*) func_append specialdeplibs " $deplib" ;;
-	      esac
-	    fi
-	    func_append tmp_libs " $deplib"
-	  done # for deplib
-	  continue
-	fi # $linkmode = prog...
-
-	if test prog,link = "$linkmode,$pass"; then
-	  if test -n "$library_names" &&
-	     { { test no = "$prefer_static_libs" ||
-	         test built,yes = "$prefer_static_libs,$installed"; } ||
-	       test -z "$old_library"; }; then
-	    # We need to hardcode the library path
-	    if test -n "$shlibpath_var" && test -z "$avoidtemprpath"; then
-	      # Make sure the rpath contains only unique directories.
-	      case $temp_rpath: in
-	      *"$absdir:"*) ;;
-              *) case $absdir in
-                 "$progdir/"*) func_append temp_rpath "$absdir:" ;;
-                 *)            func_append temp_rpath_tail "$absdir:" ;;
-                 esac
-	      esac
-	    fi
-
-	    # Hardcode the library path.
-	    # Skip directories that are in the system default run-time
-	    # search path.
-	    case " $sys_lib_dlsearch_path " in
-	    *" $absdir "*) ;;
-	    *)
-	      case "$compile_rpath$compile_rpath_tail " in
-	      *" $absdir "*) ;;
-	      *) case $absdir in
-                 "$progdir/"*) func_append compile_rpath " $absdir" ;;
-                 *) func_append compile_rpath_tail " $absdir" ;;
-		 esac
-	      esac
-	      ;;
-	    esac
-	    case " $sys_lib_dlsearch_path " in
-	    *" $libdir "*) ;;
-	    *)
-	      case "$finalize_rpath " in
-	      *" $libdir "*) ;;
-	      *) func_append finalize_rpath " $libdir" ;;
-	      esac
-	      ;;
-	    esac
-	  fi # $linkmode,$pass = prog,link...
-
-	  if $alldeplibs &&
-	     { test pass_all = "$deplibs_check_method" ||
-	       { test yes = "$build_libtool_libs" &&
-		 test -n "$library_names"; }; }; then
-	    # We only need to search for static libraries
-	    continue
-	  fi
-	fi
-
-	link_static=no # Whether the deplib will be linked statically
-	use_static_libs=$prefer_static_libs
-	if test built = "$use_static_libs" && test yes = "$installed"; then
-	  use_static_libs=no
-	fi
-	if test -n "$library_names" &&
-	   { test no = "$use_static_libs" || test -z "$old_library"; }; then
-	  case $host_os in
-	  cygwin* | mingw* | windows* | cegcc* | os2*)
-	      # No point in relinking DLLs because paths are not encoded
-	      func_append notinst_deplibs " $lib"
-	      need_relink=no
-	    ;;
-	  *)
-	    if test no = "$installed"; then
-	      func_append notinst_deplibs " $lib"
-	      need_relink=yes
-	    fi
-	    ;;
-	  esac
-	  # This is a shared library
-
-	  # Warn about portability, can't link against -module's on some
-	  # systems (darwin).  Don't bleat about dlopened modules though!
-	  dlopenmodule=
-	  for dlpremoduletest in $dlprefiles; do
-	    if test "X$dlpremoduletest" = "X$lib"; then
-	      dlopenmodule=$dlpremoduletest
-	      break
-	    fi
-	  done
-	  if test -z "$dlopenmodule" && test yes = "$shouldnotlink" && test link = "$pass"; then
-	    echo
-	    if test prog = "$linkmode"; then
-	      func_warning "Linking the executable $output against the loadable module"
-	    else
-	      func_warning "Linking the shared library $output against the loadable module"
-	    fi
-	    func_warning "$linklib is not portable!"
-	  fi
-	  if test lib = "$linkmode" &&
-	     test yes = "$hardcode_into_libs"; then
-	    # Hardcode the library path.
-	    # Skip directories that are in the system default run-time
-	    # search path.
-	    case " $sys_lib_dlsearch_path " in
-	    *" $absdir "*) ;;
-	    *)
-	      case "$compile_rpath$compile_rpath_tail " in
-	      *" $absdir "*) ;;
-	      *) case $absdir in
-                 "$progdir/"*) func_append compile_rpath " $absdir" ;;
-                 *) func_append compile_rpath_tail " $absdir" ;;
-		 esac
-	      esac
-	      ;;
-	    esac
-	    case " $sys_lib_dlsearch_path " in
-	    *" $libdir "*) ;;
-	    *)
-	      case "$finalize_rpath " in
-	      *" $libdir "*) ;;
-	      *) func_append finalize_rpath " $libdir" ;;
-	      esac
-	      ;;
-	    esac
-	  fi
-
-	  if test -n "$old_archive_from_expsyms_cmds"; then
-	    # figure out the soname
-	    set dummy $library_names
-	    shift
-	    realname=$1
-	    shift
-	    libname=`eval "\\$ECHO \"$libname_spec\""`
-	    # use dlname if we got it. it's perfectly good, no?
-	    if test -n "$dlname"; then
-	      soname=$dlname
-	    elif test -n "$soname_spec"; then
-	      # bleh windows
-	      case $host_os in
-	      cygwin* | mingw* | windows* | cegcc* | os2*)
-	        func_arith $current - $age
-		major=$func_arith_result
-		versuffix=-$major
-		;;
-	      esac
-	      eval soname=\"$soname_spec\"
-	    else
-	      soname=$realname
-	    fi
-
-	    # Make a new name for the extract_expsyms_cmds to use
-	    soroot=$soname
-	    func_basename "$soroot"
-	    soname=$func_basename_result
-	    func_stripname 'lib' '.dll' "$soname"
-	    newlib=libimp-$func_stripname_result.a
-
-	    # If the library has no export list, then create one now
-	    if test -f "$output_objdir/$soname-def"; then :
-	    else
-	      func_verbose "extracting exported symbol list from '$soname'"
-	      func_execute_cmds "$extract_expsyms_cmds" 'exit $?'
-	    fi
-
-	    # Create $newlib
-	    if test -f "$output_objdir/$newlib"; then :; else
-	      func_verbose "generating import library for '$soname'"
-	      func_execute_cmds "$old_archive_from_expsyms_cmds" 'exit $?'
-	    fi
-	    # make sure the library variables are pointing to the new library
-	    dir=$output_objdir
-	    linklib=$newlib
-	  fi # test -n "$old_archive_from_expsyms_cmds"
-
-	  if test prog = "$linkmode" || test relink != "$opt_mode"; then
-	    add_shlibpath=
-	    add_dir=
-	    add=
-	    lib_linked=yes
-	    case $hardcode_action in
-	    immediate | unsupported)
-	      if test no = "$hardcode_direct"; then
-		add=$dir/$linklib
-		case $host in
-		  *-*-sco3.2v5.0.[024]*) add_dir=-L$dir ;;
-		  *-*-sysv4*uw2*) add_dir=-L$dir ;;
-		  *-*-emscripten*) add_dir=-L$dir ;;
-		  *-*-sysv5OpenUNIX* | *-*-sysv5UnixWare7.[01].[10]* | \
-		    *-*-unixware7*) add_dir=-L$dir ;;
-		  *-*-darwin* )
-		    # if the lib is a (non-dlopened) module then we cannot
-		    # link against it, someone is ignoring the earlier warnings
-		    if /usr/bin/file -L $add 2> /dev/null |
-			 $GREP ": [^:]* bundle" >/dev/null; then
-		      if test "X$dlopenmodule" != "X$lib"; then
-			func_warning "lib $linklib is a module, not a shared library"
-			if test -z "$old_library"; then
-			  func_warning "And there doesn't seem to be a static archive available"
-			  func_warning "The link will probably fail, sorry"
-			else
-			  add=$dir/$old_library
-			fi
-		      elif test -n "$old_library"; then
-			add=$dir/$old_library
-		      fi
-		    fi
-		esac
-	      elif test no = "$hardcode_minus_L"; then
-		case $host in
-		*-*-sunos*) add_shlibpath=$dir ;;
-		esac
-		add_dir=-L$dir
-		add=-l$name
-	      elif test no = "$hardcode_shlibpath_var"; then
-		add_shlibpath=$dir
-		add=-l$name
-	      else
-		lib_linked=no
-	      fi
-	      ;;
-	    relink)
-	      if test yes = "$hardcode_direct" &&
-	         test no = "$hardcode_direct_absolute"; then
-		add=$dir/$linklib
-	      elif test yes = "$hardcode_minus_L"; then
-		add_dir=-L$absdir
-		# Try looking first in the location we're being installed to.
-		if test -n "$inst_prefix_dir"; then
-		  case $libdir in
-		    [\\/]*)
-		      func_append add_dir " -L$inst_prefix_dir$libdir"
-		      ;;
-		  esac
-		fi
-		add=-l$name
-	      elif test yes = "$hardcode_shlibpath_var"; then
-		add_shlibpath=$dir
-		add=-l$name
-	      else
-		lib_linked=no
-	      fi
-	      ;;
-	    *) lib_linked=no ;;
-	    esac
-
-	    if test yes != "$lib_linked"; then
-	      func_fatal_configuration "unsupported hardcode properties"
-	    fi
-
-	    if test -n "$add_shlibpath"; then
-	      case :$compile_shlibpath: in
-	      *":$add_shlibpath:"*) ;;
-	      *) func_append compile_shlibpath "$add_shlibpath:" ;;
-	      esac
-	    fi
-	    if test prog = "$linkmode"; then
-	      test -n "$add_dir" && compile_deplibs="$add_dir $compile_deplibs"
-	      test -n "$add" && compile_deplibs="$add $compile_deplibs"
-	    else
-	      test -n "$add_dir" && deplibs="$add_dir $deplibs"
-	      test -n "$add" && deplibs="$add $deplibs"
-	      if test yes != "$hardcode_direct" &&
-		 test yes != "$hardcode_minus_L" &&
-		 test yes = "$hardcode_shlibpath_var"; then
-		case :$finalize_shlibpath: in
-		*":$libdir:"*) ;;
-		*) func_append finalize_shlibpath "$libdir:" ;;
-		esac
-	      fi
-	    fi
-	  fi
-
-	  if test prog = "$linkmode" || test relink = "$opt_mode"; then
-	    add_shlibpath=
-	    add_dir=
-	    add=
-	    # Finalize command for both is simple: just hardcode it.
-	    if test yes = "$hardcode_direct" &&
-	       test no = "$hardcode_direct_absolute"; then
-	      add=$libdir/$linklib
-	    elif test yes = "$hardcode_minus_L"; then
-	      add_dir=-L$lt_sysroot$libdir
-	      add=-l$name
-	    elif test yes = "$hardcode_shlibpath_var"; then
-	      case :$finalize_shlibpath: in
-	      *":$libdir:"*) ;;
-	      *) func_append finalize_shlibpath "$libdir:" ;;
-	      esac
-	      add=-l$name
-	    elif test yes = "$hardcode_automatic"; then
-	      if test -n "$inst_prefix_dir" &&
-		 test -f "$inst_prefix_dir$libdir/$linklib"; then
-		add=$inst_prefix_dir$libdir/$linklib
-	      else
-		add=$libdir/$linklib
-	      fi
-	    else
-	      # We cannot seem to hardcode it, guess we'll fake it.
-	      add_dir=-L$lt_sysroot$libdir
-	      # Try looking first in the location we're being installed to.
-	      if test -n "$inst_prefix_dir"; then
-		case $libdir in
-		  [\\/]*)
-		    func_append add_dir " -L$inst_prefix_dir$libdir"
-		    ;;
-		esac
-	      fi
-	      add=-l$name
-	    fi
-
-	    if test prog = "$linkmode"; then
-	      test -n "$add_dir" && finalize_deplibs="$add_dir $finalize_deplibs"
-	      test -n "$add" && finalize_deplibs="$add $finalize_deplibs"
-	    else
-	      test -n "$add_dir" && deplibs="$add_dir $deplibs"
-	      test -n "$add" && deplibs="$add $deplibs"
-	    fi
-	  fi
-	elif test prog = "$linkmode"; then
-	  # Here we assume that one of hardcode_direct or hardcode_minus_L
-	  # is not unsupported.  This is valid on all known static and
-	  # shared platforms.
-	  if test unsupported != "$hardcode_direct"; then
-	    test -n "$old_library" && linklib=$old_library
-	    compile_deplibs="$dir/$linklib $compile_deplibs"
-	    finalize_deplibs="$dir/$linklib $finalize_deplibs"
-	  else
-	    compile_deplibs="-l$name -L$dir $compile_deplibs"
-	    finalize_deplibs="-l$name -L$dir $finalize_deplibs"
-	  fi
-	elif test yes = "$build_libtool_libs"; then
-	  # Not a shared library
-	  if test pass_all != "$deplibs_check_method"; then
-	    # We're trying link a shared library against a static one
-	    # but the system doesn't support it.
-
-	    # Just print a warning and add the library to dependency_libs so
-	    # that the program can be linked against the static library.
-	    func_warning "This system cannot link to static lib archive $lib."
-	    func_warning "I have the capability to make that library automatically link in when"
-	    func_warning "you link to this library.  But I can only do this if you have a"
-	    func_warning "shared version of the library, which you do not appear to have."
-	    if test yes = "$module"; then
-	      func_warning "But as you try to build a module library, libtool will still create "
-	      func_warning "a static module, that should work as long as the dlopening application"
-	      func_warning "is linked with the -dlopen flag to resolve symbols at runtime."
-	      if test -z "$global_symbol_pipe"; then
-		func_warning "However, this would only work if libtool was able to extract symbol"
-		func_warning "lists from a program, using 'nm' or equivalent, but libtool could"
-		func_warning "not find such a program.  So, this module is probably useless."
-		func_warning "'nm' from GNU binutils and a full rebuild may help."
-	      fi
-	      if test no = "$build_old_libs"; then
-		build_libtool_libs=module
-		build_old_libs=yes
-	      else
-		build_libtool_libs=no
-	      fi
-	    fi
-	  else
-	    deplibs="$dir/$old_library $deplibs"
-	    link_static=yes
-	  fi
-	fi # link shared/static library?
-
-	if test lib = "$linkmode"; then
-	  if test -n "$dependency_libs" &&
-	     { test yes != "$hardcode_into_libs" ||
-	       test yes = "$build_old_libs" ||
-	       test yes = "$link_static"; }; then
-	    # Extract -R from dependency_libs
-	    temp_deplibs=
-	    for libdir in $dependency_libs; do
-	      case $libdir in
-	      -R*) func_stripname '-R' '' "$libdir"
-	           temp_xrpath=$func_stripname_result
-		   case " $xrpath " in
-		   *" $temp_xrpath "*) ;;
-		   *) func_append xrpath " $temp_xrpath";;
-		   esac;;
-	      *) func_append temp_deplibs " $libdir";;
-	      esac
-	    done
-	    dependency_libs=$temp_deplibs
-	  fi
-
-	  func_append newlib_search_path " $absdir"
-	  # Link against this library
-	  test no = "$link_static" && newdependency_libs="$abs_ladir/$laname $newdependency_libs"
-	  # ... and its dependency_libs
-	  tmp_libs=
-	  for deplib in $dependency_libs; do
-	    newdependency_libs="$deplib $newdependency_libs"
-	    case $deplib in
-              -L*) func_stripname '-L' '' "$deplib"
-                   func_resolve_sysroot "$func_stripname_result";;
-              *) func_resolve_sysroot "$deplib" ;;
-            esac
-	    if $opt_preserve_dup_deps; then
-	      case "$tmp_libs " in
-	      *" $func_resolve_sysroot_result "*)
-                func_append specialdeplibs " $func_resolve_sysroot_result" ;;
-	      esac
-	    fi
-	    func_append tmp_libs " $func_resolve_sysroot_result"
-	  done
-
-	  if test no != "$link_all_deplibs"; then
-	    # Add the search paths of all dependency libraries
-	    for deplib in $dependency_libs; do
-	      path=
-	      case $deplib in
-	      -L*) path=$deplib ;;
-	      *.la)
-	        func_resolve_sysroot "$deplib"
-	        deplib=$func_resolve_sysroot_result
-	        func_dirname "$deplib" "" "."
-		dir=$func_dirname_result
-		# We need an absolute path.
-		case $dir in
-		[\\/]* | [A-Za-z]:[\\/]*) absdir=$dir ;;
-		*)
-		  absdir=`cd "$dir" && pwd`
-		  if test -z "$absdir"; then
-		    func_warning "cannot determine absolute directory name of '$dir'"
-		    absdir=$dir
-		  fi
-		  ;;
-		esac
-		if $GREP "^installed=no" $deplib > /dev/null; then
-		case $host in
-		*-*-darwin*)
-		  depdepl=
-		  eval deplibrary_names=`$SED -n -e 's/^library_names=\(.*\)$/\1/p' $deplib`
-		  if test -n "$deplibrary_names"; then
-		    for tmp in $deplibrary_names; do
-		      depdepl=$tmp
-		    done
-		    if test -f "$absdir/$objdir/$depdepl"; then
-		      depdepl=$absdir/$objdir/$depdepl
-		      darwin_install_name=`$OTOOL -L $depdepl | awk '{if (NR == 2) {print $1;exit}}'`
-                      if test -z "$darwin_install_name"; then
-                          darwin_install_name=`$OTOOL64 -L $depdepl  | awk '{if (NR == 2) {print $1;exit}}'`
-                      fi
-		      func_append compiler_flags " $wl-dylib_file $wl$darwin_install_name:$depdepl"
-		      func_append linker_flags " -dylib_file $darwin_install_name:$depdepl"
-		      path=
-		    fi
-		  fi
-		  ;;
-		*)
-		  path=-L$absdir/$objdir
-		  ;;
-		esac
-		else
-		  eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $deplib`
-		  test -z "$libdir" && \
-		    func_fatal_error "'$deplib' is not a valid libtool archive"
-		  test "$absdir" != "$libdir" && \
-		    func_warning "'$deplib' seems to be moved"
-
-		  path=-L$absdir
-		fi
-		;;
-	      esac
-	      case " $deplibs " in
-	      *" $path "*) ;;
-	      *) deplibs="$path $deplibs" ;;
-	      esac
-	    done
-	  fi # link_all_deplibs != no
-	fi # linkmode = lib
-      done # for deplib in $libs
-
-      func_append temp_rpath "$temp_rpath_tail"
-      func_append compile_rpath "$compile_rpath_tail"
-
-      if test link = "$pass"; then
-	if test prog = "$linkmode"; then
-	  compile_deplibs="$new_inherited_linker_flags $compile_deplibs"
-	  finalize_deplibs="$new_inherited_linker_flags $finalize_deplibs"
-	else
-	  compiler_flags="$compiler_flags "`$ECHO " $new_inherited_linker_flags" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	fi
-      fi
-      dependency_libs=$newdependency_libs
-      if test dlpreopen = "$pass"; then
-	# Link the dlpreopened libraries before other libraries
-	for deplib in $save_deplibs; do
-	  deplibs="$deplib $deplibs"
-	done
-      fi
-      if test dlopen != "$pass"; then
-	test conv = "$pass" || {
-	  # Make sure lib_search_path contains only unique directories.
-	  lib_search_path=
-	  for dir in $newlib_search_path; do
-	    case "$lib_search_path " in
-	    *" $dir "*) ;;
-	    *) func_append lib_search_path " $dir" ;;
-	    esac
-	  done
-	  newlib_search_path=
-	}
-
-	if test prog,link = "$linkmode,$pass"; then
-	  vars="compile_deplibs finalize_deplibs"
-	else
-	  vars=deplibs
-	fi
-	for var in $vars dependency_libs; do
-	  # Add libraries to $var in reverse order
-	  eval tmp_libs=\"\$$var\"
-	  new_libs=
-	  # FIXME: Pedantically, this is the right thing to do, so
-	  #        that some nasty dependency loop isn't accidentally
-	  #        broken: new_libs="$deplib $new_libs"
-	  for deplib in $tmp_libs; do
-	    if $opt_preserve_dup_deps; then
-	      new_libs="$deplib $new_libs"
-	    else
-	      # Pragmatically, this seems to cause very few problems in
-	      # practice:
-	      case $deplib in
-	      -L*) new_libs="$deplib $new_libs" ;;
-	      -R*) ;;
-	      *)
-	        # And here is the reason: when a library appears more
-	        # than once as an explicit dependence of a library, or
-	        # is implicitly linked in more than once by the
-	        # compiler, it is considered special, and multiple
-	        # occurrences thereof are not removed.  Compare this
-	        # with having the same library being listed as a
-	        # dependency of multiple other libraries: in this case,
-	        # we know (pedantically, we assume) the library does not
-	        # need to be listed more than once, so we keep only the
-	        # last copy.  This is not always right, but it is rare
-	        # enough that we require users that really mean to play
-	        # such unportable linking tricks to link the library
-	        # using -Wl,-lname, so that libtool does not consider it
-	        # for duplicate removal.  And if not possible for portability
-	        # reasons, then --preserve-dup-deps should be used.
-	        case " $specialdeplibs " in
-	        *" $deplib "*) new_libs="$deplib $new_libs" ;;
-	        *)
-	          case " $new_libs " in
-	          *" $deplib "*) ;;
-	          *) new_libs="$deplib $new_libs" ;;
-	          esac
-	          ;;
-	        esac
-	        ;;
-	      esac
-	    fi
-	  done
-	  tmp_libs=
-	  for deplib in $new_libs; do
-	    case $deplib in
-	    -L*)
-	      case " $tmp_libs " in
-	      *" $deplib "*) ;;
-	      *) func_append tmp_libs " $deplib" ;;
-	      esac
-	      ;;
-	    *) func_append tmp_libs " $deplib" ;;
-	    esac
-	  done
-	  eval $var=\"$tmp_libs\"
-	done # for var
-      fi
-
-      # Add Sun CC postdeps if required:
-      test CXX = "$tagname" && {
-        case $host_os in
-        linux*)
-          case `$CC -V 2>&1 | $SED 5q` in
-          *Sun\ C*) # Sun C++ 5.9
-            func_suncc_cstd_abi
-
-            if test no != "$suncc_use_cstd_abi"; then
-              func_append postdeps ' -library=Cstd -library=Crun'
-            fi
-            ;;
-          esac
-          ;;
-
-        solaris*)
-          func_cc_basename "$CC"
-          case $func_cc_basename_result in
-          CC* | sunCC*)
-            func_suncc_cstd_abi
-
-            if test no != "$suncc_use_cstd_abi"; then
-              func_append postdeps ' -library=Cstd -library=Crun'
-            fi
-            ;;
-          esac
-          ;;
-        esac
-      }
-
-      # Last step: remove runtime libs from dependency_libs
-      # (they stay in deplibs)
-      tmp_libs=
-      for i in $dependency_libs; do
-	case " $predeps $postdeps $compiler_lib_search_path " in
-	*" $i "*)
-	  i=
-	  ;;
-	esac
-	if test -n "$i"; then
-	  func_append tmp_libs " $i"
-	fi
-      done
-      dependency_libs=$tmp_libs
-    done # for pass
-    if test prog = "$linkmode"; then
-      dlfiles=$newdlfiles
-    fi
-    if test prog = "$linkmode" || test lib = "$linkmode"; then
-      dlprefiles=$newdlprefiles
-    fi
-
-    case $linkmode in
-    oldlib)
-      if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then
-	func_warning "'-dlopen' is ignored for archives"
-      fi
-
-      case " $deplibs" in
-      *\ -l* | *\ -L*)
-	func_warning "'-l' and '-L' are ignored for archives" ;;
-      esac
-
-      test -n "$rpath" && \
-	func_warning "'-rpath' is ignored for archives"
-
-      test -n "$xrpath" && \
-	func_warning "'-R' is ignored for archives"
-
-      test -n "$vinfo" && \
-	func_warning "'-version-info/-version-number' is ignored for archives"
-
-      test -n "$release" && \
-	func_warning "'-release' is ignored for archives"
-
-      test -n "$export_symbols$export_symbols_regex" && \
-	func_warning "'-export-symbols' is ignored for archives"
-
-      # Now set the variables for building old libraries.
-      build_libtool_libs=no
-      oldlibs=$output
-      func_append objs "$old_deplibs"
-      ;;
-
-    lib)
-      # Make sure we only generate libraries of the form 'libNAME.la'.
-      case $outputname in
-      lib*)
-	func_stripname 'lib' '.la' "$outputname"
-	name=$func_stripname_result
-	eval shared_ext=\"$shrext_cmds\"
-	eval libname=\"$libname_spec\"
-	;;
-      *)
-	test no = "$module" \
-	  && func_fatal_help "libtool library '$output' must begin with 'lib'"
-
-	if test no != "$need_lib_prefix"; then
-	  # Add the "lib" prefix for modules if required
-	  func_stripname '' '.la' "$outputname"
-	  name=$func_stripname_result
-	  eval shared_ext=\"$shrext_cmds\"
-	  eval libname=\"$libname_spec\"
-	else
-	  func_stripname '' '.la' "$outputname"
-	  libname=$func_stripname_result
-	fi
-	;;
-      esac
-
-      if test -n "$objs"; then
-	if test pass_all != "$deplibs_check_method"; then
-	  func_fatal_error "cannot build libtool library '$output' from non-libtool objects on this host:$objs"
-	else
-	  func_warning "Linking the shared library $output against the non-libtool objects $objs is not portable!"
-	  func_append libobjs " $objs"
-	fi
-      fi
-
-      test no = "$dlself" \
-	|| func_warning "'-dlopen self' is ignored for libtool libraries"
-
-      set dummy $rpath
-      shift
-      test 1 -lt "$#" \
-	&& func_warning "ignoring multiple '-rpath's for a libtool library"
-
-      install_libdir=$1
-
-      oldlibs=
-      if test -z "$rpath"; then
-	if test yes = "$build_libtool_libs"; then
-	  # Building a libtool convenience library.
-	  # Some compilers have problems with a '.al' extension so
-	  # convenience libraries should have the same extension an
-	  # archive normally would.
-	  oldlibs="$output_objdir/$libname.$libext $oldlibs"
-	  build_libtool_libs=convenience
-	  build_old_libs=yes
-	fi
-
-	test -n "$vinfo" && \
-	  func_warning "'-version-info/-version-number' is ignored for convenience libraries"
-
-	test -n "$release" && \
-	  func_warning "'-release' is ignored for convenience libraries"
-      else
-
-	# Parse the version information argument.
-	save_ifs=$IFS; IFS=:
-	set dummy $vinfo 0 0 0
-	shift
-	IFS=$save_ifs
-
-	test -n "$7" && \
-	  func_fatal_help "too many parameters to '-version-info'"
-
-	# convert absolute version numbers to libtool ages
-	# this retains compatibility with .la files and attempts
-	# to make the code below a bit more comprehensible
-
-	case $vinfo_number in
-	yes)
-	  number_major=$1
-	  number_minor=$2
-	  number_revision=$3
-	  #
-	  # There are really only two kinds -- those that
-	  # use the current revision as the major version
-	  # and those that subtract age and use age as
-	  # a minor version.  But, then there is irix
-	  # that has an extra 1 added just for fun
-	  #
-	  case $version_type in
-	  # correct linux to gnu/linux during the next big refactor
-	  darwin|freebsd-elf|linux|midnightbsd-elf|osf|qnx|windows|none)
-	    func_arith $number_major + $number_minor
-	    current=$func_arith_result
-	    age=$number_minor
-	    revision=$number_revision
-	    ;;
-	  freebsd-aout|sco|sunos)
-	    current=$number_major
-	    revision=$number_minor
-	    age=0
-	    ;;
-	  irix|nonstopux)
-	    func_arith $number_major + $number_minor
-	    current=$func_arith_result
-	    age=$number_minor
-	    revision=$number_minor
-	    lt_irix_increment=no
-	    ;;
-	  *)
-	    func_fatal_configuration "$modename: unknown library version type '$version_type'"
-	    ;;
-	  esac
-	  ;;
-	no)
-	  current=$1
-	  revision=$2
-	  age=$3
-	  ;;
-	esac
-
-	# Check that each of the things are valid numbers.
-	case $current in
-	0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;;
-	*)
-	  func_error "CURRENT '$current' must be a nonnegative integer"
-	  func_fatal_error "'$vinfo' is not valid version information"
-	  ;;
-	esac
-
-	case $revision in
-	0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;;
-	*)
-	  func_error "REVISION '$revision' must be a nonnegative integer"
-	  func_fatal_error "'$vinfo' is not valid version information"
-	  ;;
-	esac
-
-	case $age in
-	0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;;
-	*)
-	  func_error "AGE '$age' must be a nonnegative integer"
-	  func_fatal_error "'$vinfo' is not valid version information"
-	  ;;
-	esac
-
-	if test "$age" -gt "$current"; then
-	  func_error "AGE '$age' is greater than the current interface number '$current'"
-	  func_fatal_error "'$vinfo' is not valid version information"
-	fi
-
-	# Calculate the version variables.
-	major=
-	versuffix=
-	verstring=
-	case $version_type in
-	none) ;;
-
-	darwin)
-	  # Like Linux, but with the current version available in
-	  # verstring for coding it into the library header
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=$major.$age.$revision
-	  # Darwin ld doesn't like 0 for these options...
-	  func_arith $current + 1
-	  minor_current=$func_arith_result
-	  xlcverstring="$wl-compatibility_version $wl$minor_current $wl-current_version $wl$minor_current.$revision"
-	  verstring="-compatibility_version $minor_current -current_version $minor_current.$revision"
-          # On Darwin other compilers
-          case $CC in
-              nagfor*)
-                  verstring="$wl-compatibility_version $wl$minor_current $wl-current_version $wl$minor_current.$revision"
-                  ;;
-              *)
-                  verstring="-compatibility_version $minor_current -current_version $minor_current.$revision"
-                  ;;
-          esac
-	  ;;
-
-	freebsd-aout)
-	  major=.$current
-	  versuffix=.$current.$revision
-	  ;;
-
-	freebsd-elf | midnightbsd-elf)
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=$major.$age.$revision
-	  ;;
-
-	irix | nonstopux)
-	  if test no = "$lt_irix_increment"; then
-	    func_arith $current - $age
-	  else
-	    func_arith $current - $age + 1
-	  fi
-	  major=$func_arith_result
-
-	  case $version_type in
-	    nonstopux) verstring_prefix=nonstopux ;;
-	    *)         verstring_prefix=sgi ;;
-	  esac
-	  verstring=$verstring_prefix$major.$revision
-
-	  # Add in all the interfaces that we are compatible with.
-	  loop=$revision
-	  while test 0 -ne "$loop"; do
-	    func_arith $revision - $loop
-	    iface=$func_arith_result
-	    func_arith $loop - 1
-	    loop=$func_arith_result
-	    verstring=$verstring_prefix$major.$iface:$verstring
-	  done
-
-	  # Before this point, $major must not contain '.'.
-	  major=.$major
-	  versuffix=$major.$revision
-	  ;;
-
-	linux) # correct to gnu/linux during the next big refactor
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=$major.$age.$revision
-	  ;;
-
-	osf)
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=.$current.$age.$revision
-	  verstring=$current.$age.$revision
-
-	  # Add in all the interfaces that we are compatible with.
-	  loop=$age
-	  while test 0 -ne "$loop"; do
-	    func_arith $current - $loop
-	    iface=$func_arith_result
-	    func_arith $loop - 1
-	    loop=$func_arith_result
-	    verstring=$verstring:$iface.0
-	  done
-
-	  # Make executables depend on our current version.
-	  func_append verstring ":$current.0"
-	  ;;
-
-	qnx)
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=$major.$age.$revision
-	  ;;
-
-	sco)
-	  major=.$current
-	  versuffix=.$current
-	  ;;
-
-	sunos)
-	  major=.$current
-	  versuffix=.$current.$revision
-	  ;;
-
-	windows)
-	  # Use '-' rather than '.', since we only want one
-	  # extension on DOS 8.3 file systems.
-	  func_arith $current - $age
-	  major=$func_arith_result
-	  versuffix=-$major
-	  ;;
-
-	*)
-	  func_fatal_configuration "unknown library version type '$version_type'"
-	  ;;
-	esac
-
-	# Clear the version info if we defaulted, and they specified a release.
-	if test -z "$vinfo" && test -n "$release"; then
-	  major=
-	  case $version_type in
-	  darwin)
-	    # we can't check for "0.0" in archive_cmds due to quoting
-	    # problems, so we reset it completely
-	    verstring=
-	    ;;
-	  *)
-	    verstring=0.0
-	    ;;
-	  esac
-	  if test no = "$need_version"; then
-	    versuffix=
-	  else
-	    versuffix=.0.0
-	  fi
-	fi
-
-	# Remove version info from name if versioning should be avoided
-	if test yes,no = "$avoid_version,$need_version"; then
-	  major=
-	  versuffix=
-	  verstring=
-	fi
-
-	# Check to see if the archive will have undefined symbols.
-	if test yes = "$allow_undefined"; then
-	  if test unsupported = "$allow_undefined_flag"; then
-	    if test yes = "$build_old_libs"; then
-	      func_warning "undefined symbols not allowed in $host shared libraries; building static only"
-	      build_libtool_libs=no
-	    else
-	      func_fatal_error "can't build $host shared library unless -no-undefined is specified"
-	    fi
-	  fi
-	else
-	  # Don't allow undefined symbols.
-	  allow_undefined_flag=$no_undefined_flag
-	fi
-
-      fi
-
-      func_generate_dlsyms "$libname" "$libname" :
-      func_append libobjs " $symfileobj"
-      test " " = "$libobjs" && libobjs=
-
-      if test relink != "$opt_mode"; then
-	# Remove our outputs, but don't remove object files since they
-	# may have been created when compiling PIC objects.
-	removelist=
-	tempremovelist=`$ECHO "$output_objdir/*"`
-	for p in $tempremovelist; do
-	  case $p in
-	    *.$objext | *.gcno)
-	       ;;
-	    $output_objdir/$outputname | $output_objdir/$libname.* | $output_objdir/$libname$release.*)
-	       if test -n "$precious_files_regex"; then
-		 if $ECHO "$p" | $EGREP -e "$precious_files_regex" >/dev/null 2>&1
-		 then
-		   continue
-		 fi
-	       fi
-	       func_append removelist " $p"
-	       ;;
-	    *) ;;
-	  esac
-	done
-	test -n "$removelist" && \
-	  func_show_eval "${RM}r \$removelist"
-      fi
-
-      # Now set the variables for building old libraries.
-      if test yes = "$build_old_libs" && test convenience != "$build_libtool_libs"; then
-	func_append oldlibs " $output_objdir/$libname.$libext"
-
-	# Transform .lo files to .o files.
-	oldobjs="$objs "`$ECHO "$libobjs" | $SP2NL | $SED "/\.$libext$/d; $lo2o" | $NL2SP`
-      fi
-
-      # Eliminate all temporary directories.
-      #for path in $notinst_path; do
-      #	lib_search_path=`$ECHO "$lib_search_path " | $SED "s% $path % %g"`
-      #	deplibs=`$ECHO "$deplibs " | $SED "s% -L$path % %g"`
-      #	dependency_libs=`$ECHO "$dependency_libs " | $SED "s% -L$path % %g"`
-      #done
-
-      if test -n "$xrpath"; then
-	# If the user specified any rpath flags, then add them.
-	temp_xrpath=
-	for libdir in $xrpath; do
-	  func_replace_sysroot "$libdir"
-	  func_append temp_xrpath " -R$func_replace_sysroot_result"
-	  case "$finalize_rpath " in
-	  *" $libdir "*) ;;
-	  *) func_append finalize_rpath " $libdir" ;;
-	  esac
-	done
-	if test yes != "$hardcode_into_libs" || test yes = "$build_old_libs"; then
-	  dependency_libs="$temp_xrpath $dependency_libs"
-	fi
-      fi
-
-      # Make sure dlfiles contains only unique files that won't be dlpreopened
-      old_dlfiles=$dlfiles
-      dlfiles=
-      for lib in $old_dlfiles; do
-	case " $dlprefiles $dlfiles " in
-	*" $lib "*) ;;
-	*) func_append dlfiles " $lib" ;;
-	esac
-      done
-
-      # Make sure dlprefiles contains only unique files
-      old_dlprefiles=$dlprefiles
-      dlprefiles=
-      for lib in $old_dlprefiles; do
-	case "$dlprefiles " in
-	*" $lib "*) ;;
-	*) func_append dlprefiles " $lib" ;;
-	esac
-      done
-
-      if test yes = "$build_libtool_libs"; then
-	if test -n "$rpath"; then
-	  case $host in
-	  *-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-*-beos* | *-cegcc* | *-*-haiku*)
-	    # these systems don't actually have a c library (as such)!
-	    ;;
-	  *-*-rhapsody* | *-*-darwin1.[012])
-	    # Rhapsody C library is in the System framework
-	    func_append deplibs " System.ltframework"
-	    ;;
-	  *-*-netbsd*)
-	    # Don't link with libc until the a.out ld.so is fixed.
-	    ;;
-	  *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-midnightbsd*)
-	    # Do not include libc due to us having libc/libc_r.
-	    ;;
-	  *-*-sco3.2v5* | *-*-sco5v6*)
-	    # Causes problems with __ctype
-	    ;;
-	  *-*-sysv4.2uw2* | *-*-sysv5* | *-*-unixware* | *-*-OpenUNIX*)
-	    # Compiler inserts libc in the correct place for threads to work
-	    ;;
-	  *)
-	    # Add libc to deplibs on all other systems if necessary.
-	    if test yes = "$build_libtool_need_lc"; then
-	      func_append deplibs " -lc"
-	    fi
-	    ;;
-	  esac
-	fi
-
-	# Transform deplibs into only deplibs that can be linked in shared.
-	name_save=$name
-	libname_save=$libname
-	release_save=$release
-	versuffix_save=$versuffix
-	major_save=$major
-	# I'm not sure if I'm treating the release correctly.  I think
-	# release should show up in the -l (ie -lgmp5) so we don't want to
-	# add it in twice.  Is that correct?
-	release=
-	versuffix=
-	major=
-	newdeplibs=
-	droppeddeps=no
-	case $deplibs_check_method in
-	pass_all)
-	  # Don't check for shared/static.  Everything works.
-	  # This might be a little naive.  We might want to check
-	  # whether the library exists or not.  But this is on
-	  # osf3 & osf4 and I'm not really sure... Just
-	  # implementing what was already the behavior.
-	  newdeplibs=$deplibs
-	  ;;
-	file_magic*)
-	  set dummy $deplibs_check_method; shift
-	  file_magic_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"`
-	  for a_deplib in $deplibs; do
-	    case $a_deplib in
-	    -l*)
-	      func_stripname -l '' "$a_deplib"
-	      name=$func_stripname_result
-	      if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-		case " $predeps $postdeps " in
-		*" $a_deplib "*)
-		  func_append newdeplibs " $a_deplib"
-		  a_deplib=
-		  ;;
-		esac
-	      fi
-	      if test -n "$a_deplib"; then
-		libname=`eval "\\$ECHO \"$libname_spec\""`
-		if test -n "$file_magic_glob"; then
-		  libnameglob=`func_echo_all "$libname" | $SED -e $file_magic_glob`
-		else
-		  libnameglob=$libname
-		fi
-		test yes = "$want_nocaseglob" && nocaseglob=`shopt -p nocaseglob`
-		for i in $lib_search_path $sys_lib_search_path $shlib_search_path; do
-		  if test yes = "$want_nocaseglob"; then
-		    shopt -s nocaseglob
-		    potential_libs=`ls $i/$libnameglob[.-]* 2>/dev/null`
-		    $nocaseglob
-		  else
-		    potential_libs=`ls $i/$libnameglob[.-]* 2>/dev/null`
-		  fi
-		  for potent_lib in $potential_libs; do
-		      # Follow soft links.
-		      if ls -lLd "$potent_lib" 2>/dev/null |
-			 $GREP " -> " >/dev/null; then
-			continue
-		      fi
-		      # The statement above tries to avoid entering an
-		      # endless loop below, in case of cyclic links.
-		      # We might still enter an endless loop, since a link
-		      # loop can be closed while we follow links,
-		      # but so what?
-		      potlib=$potent_lib
-		      while test -h "$potlib" 2>/dev/null; do
-			potliblink=`ls -ld $potlib | $SED 's/.* -> //'`
-			case $potliblink in
-			[\\/]* | [A-Za-z]:[\\/]*) potlib=$potliblink;;
-			*) potlib=`$ECHO "$potlib" | $SED 's|[^/]*$||'`"$potliblink";;
-			esac
-		      done
-		      if eval $file_magic_cmd \"\$potlib\" 2>/dev/null |
-			 $SED -e 10q |
-			 $EGREP "$file_magic_regex" > /dev/null; then
-			func_append newdeplibs " $a_deplib"
-			a_deplib=
-			break 2
-		      fi
-		  done
-		done
-	      fi
-	      if test -n "$a_deplib"; then
-		droppeddeps=yes
-		func_warning "Linker path does not have real file for library $a_deplib."
-		func_warning "I have the capability to make that library automatically link in when"
-		func_warning "you link to this library.  But I can only do this if you have a"
-		func_warning "shared version of the library, which you do not appear to have"
-		func_warning "because I did check the linker path looking for a file starting"
-		if test -z "$potlib"; then
-		  func_warning "with $libname but no candidates were found. (...for file magic test)"
-		else
-		  func_warning "with $libname and none of the candidates passed a file format test"
-		  func_warning "using a file magic. Last file checked: $potlib"
-		fi
-	      fi
-	      ;;
-	    *)
-	      # Add a -L argument.
-	      func_append newdeplibs " $a_deplib"
-	      ;;
-	    esac
-	  done # Gone through all deplibs.
-	  ;;
-	match_pattern*)
-	  set dummy $deplibs_check_method; shift
-	  match_pattern_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"`
-	  for a_deplib in $deplibs; do
-	    case $a_deplib in
-	    -l*)
-	      func_stripname -l '' "$a_deplib"
-	      name=$func_stripname_result
-	      if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-		case " $predeps $postdeps " in
-		*" $a_deplib "*)
-		  func_append newdeplibs " $a_deplib"
-		  a_deplib=
-		  ;;
-		esac
-	      fi
-	      if test -n "$a_deplib"; then
-		libname=`eval "\\$ECHO \"$libname_spec\""`
-		for i in $lib_search_path $sys_lib_search_path $shlib_search_path; do
-		  potential_libs=`ls $i/$libname[.-]* 2>/dev/null`
-		  for potent_lib in $potential_libs; do
-		    potlib=$potent_lib # see symlink-check above in file_magic test
-		    if eval "\$ECHO \"$potent_lib\"" 2>/dev/null | $SED 10q | \
-		       $EGREP "$match_pattern_regex" > /dev/null; then
-		      func_append newdeplibs " $a_deplib"
-		      a_deplib=
-		      break 2
-		    fi
-		  done
-		done
-	      fi
-	      if test -n "$a_deplib"; then
-		droppeddeps=yes
-		func_warning "Linker path does not have real file for library $a_deplib."
-		func_warning "I have the capability to make that library automatically link in when"
-		func_warning "you link to this library.  But I can only do this if you have a"
-		func_warning "shared version of the library, which you do not appear to have"
-		func_warning "because I did check the linker path looking for a file starting"
-		if test -z "$potlib"; then
-		  func_warning "with $libname but no candidates were found. (...for regex pattern test)"
-		else
-		  func_warning "with $libname and none of the candidates passed a file format test"
-		  func_warning "using a regex pattern. Last file checked: $potlib"
-		fi
-	      fi
-	      ;;
-	    *)
-	      # Add a -L argument.
-	      func_append newdeplibs " $a_deplib"
-	      ;;
-	    esac
-	  done # Gone through all deplibs.
-	  ;;
-	none | unknown | *)
-	  newdeplibs=
-	  tmp_deplibs=`$ECHO " $deplibs" | $SED 's/ -lc$//; s/ -[LR][^ ]*//g'`
-	  if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-	    for i in $predeps $postdeps; do
-	      # can't use Xsed below, because $i might contain '/'
-	      tmp_deplibs=`$ECHO " $tmp_deplibs" | $SED "s|$i||"`
-	    done
-	  fi
-	  case $tmp_deplibs in
-	  *[!\	\ ]*)
-	    echo
-	    if test none = "$deplibs_check_method"; then
-	      func_warning "Inter-library dependencies are not supported in this platform."
-	    else
-	      func_warning "Inter-library dependencies are not known to be supported."
-	    fi
-	    func_warning "All declared inter-library dependencies are being dropped."
-	    droppeddeps=yes
-	    ;;
-	  esac
-	  ;;
-	esac
-	versuffix=$versuffix_save
-	major=$major_save
-	release=$release_save
-	libname=$libname_save
-	name=$name_save
-
-	case $host in
-	*-*-rhapsody* | *-*-darwin1.[012])
-	  # On Rhapsody replace the C library with the System framework
-	  newdeplibs=`$ECHO " $newdeplibs" | $SED 's/ -lc / System.ltframework /'`
-	  ;;
-	esac
-
-	if test yes = "$droppeddeps"; then
-	  if test yes = "$module"; then
-	    func_warning "libtool could not satisfy all declared inter-library"
-	    func_warning "dependencies of module $libname.  Therefore, libtool will create"
-	    func_warning "a static module, that should work as long as the dlopening"
-	    func_warning "application is linked with the -dlopen flag."
-	    if test -z "$global_symbol_pipe"; then
-	      func_warning "However, this would only work if libtool was able to extract symbol"
-	      func_warning "lists from a program, using 'nm' or equivalent, but libtool could"
-	      func_warning "not find such a program.  So, this module is probably useless."
-	      func_warning "'nm' from GNU binutils and a full rebuild may help."
-	    fi
-	    if test no = "$build_old_libs"; then
-	      oldlibs=$output_objdir/$libname.$libext
-	      build_libtool_libs=module
-	      build_old_libs=yes
-	    else
-	      build_libtool_libs=no
-	    fi
-	  else
-	    echo "*** The inter-library dependencies that have been dropped here will be"
-	    echo "*** automatically added whenever a program is linked with this library"
-	    echo "*** or is declared to -dlopen it."
-
-	    if test no = "$allow_undefined"; then
-	      echo
-	      echo "*** Since this library must not contain undefined symbols,"
-	      echo "*** because either the platform does not support them or"
-	      echo "*** it was explicitly requested with -no-undefined,"
-	      echo "*** libtool will only create a static version of it."
-	      if test no = "$build_old_libs"; then
-		oldlibs=$output_objdir/$libname.$libext
-		build_libtool_libs=module
-		build_old_libs=yes
-	      else
-		build_libtool_libs=no
-	      fi
-	    fi
-	  fi
-	fi
-	# Done checking deplibs!
-	deplibs=$newdeplibs
-      fi
-      # Time to change all our "foo.ltframework" stuff back to "-framework foo"
-      case $host in
-	*-*-darwin*)
-	  newdeplibs=`$ECHO " $newdeplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	  new_inherited_linker_flags=`$ECHO " $new_inherited_linker_flags" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	  deplibs=`$ECHO " $deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	  ;;
-      esac
-
-      # move library search paths that coincide with paths to not yet
-      # installed libraries to the beginning of the library search list
-      new_libs=
-      for path in $notinst_path; do
-	case " $new_libs " in
-	*" -L$path/$objdir "*) ;;
-	*)
-	  case " $deplibs " in
-	  *" -L$path/$objdir "*)
-	    func_append new_libs " -L$path/$objdir" ;;
-	  esac
-	  ;;
-	esac
-      done
-      for deplib in $deplibs; do
-	case $deplib in
-	-L*)
-	  case " $new_libs " in
-	  *" $deplib "*) ;;
-	  *) func_append new_libs " $deplib" ;;
-	  esac
-	  ;;
-	*) func_append new_libs " $deplib" ;;
-	esac
-      done
-      deplibs=$new_libs
-
-      # All the library-specific variables (install_libdir is set above).
-      library_names=
-      old_library=
-      dlname=
-
-      # Test again, we may have decided not to build it any more
-      if test yes = "$build_libtool_libs"; then
-	# Remove $wl instances when linking with ld.
-	# FIXME: should test the right _cmds variable.
-	case $archive_cmds in
-	  *\$LD\ *) wl= ;;
-        esac
-	if test yes = "$hardcode_into_libs"; then
-	  # Hardcode the library paths
-	  hardcode_libdirs=
-	  dep_rpath=
-	  rpath=$finalize_rpath
-	  test relink = "$opt_mode" || rpath=$compile_rpath$rpath
-	  for libdir in $rpath; do
-	    if test -n "$hardcode_libdir_flag_spec"; then
-	      if test -n "$hardcode_libdir_separator"; then
-		func_replace_sysroot "$libdir"
-		libdir=$func_replace_sysroot_result
-		if test -z "$hardcode_libdirs"; then
-		  hardcode_libdirs=$libdir
-		else
-		  # Just accumulate the unique libdirs.
-		  case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in
-		  *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*)
-		    ;;
-		  *)
-		    func_append hardcode_libdirs "$hardcode_libdir_separator$libdir"
-		    ;;
-		  esac
-		fi
-	      else
-		eval flag=\"$hardcode_libdir_flag_spec\"
-		func_append dep_rpath " $flag"
-	      fi
-	    elif test -n "$runpath_var"; then
-	      case "$perm_rpath " in
-	      *" $libdir "*) ;;
-	      *) func_append perm_rpath " $libdir" ;;
-	      esac
-	    fi
-	  done
-	  # Substitute the hardcoded libdirs into the rpath.
-	  if test -n "$hardcode_libdir_separator" &&
-	     test -n "$hardcode_libdirs"; then
-	    libdir=$hardcode_libdirs
-	    eval "dep_rpath=\"$hardcode_libdir_flag_spec\""
-	  fi
-	  if test -n "$runpath_var" && test -n "$perm_rpath"; then
-	    # We should set the runpath_var.
-	    rpath=
-	    for dir in $perm_rpath; do
-	      func_append rpath "$dir:"
-	    done
-	    eval "$runpath_var='$rpath\$$runpath_var'; export $runpath_var"
-	  fi
-	  test -n "$dep_rpath" && deplibs="$dep_rpath $deplibs"
-	fi
-
-	shlibpath=$finalize_shlibpath
-	test relink = "$opt_mode" || shlibpath=$compile_shlibpath$shlibpath
-	if test -n "$shlibpath"; then
-	  eval "$shlibpath_var='$shlibpath\$$shlibpath_var'; export $shlibpath_var"
-	fi
-
-	# Get the real and link names of the library.
-	eval shared_ext=\"$shrext_cmds\"
-	eval library_names=\"$library_names_spec\"
-	set dummy $library_names
-	shift
-	realname=$1
-	shift
-
-	if test -n "$soname_spec"; then
-	  eval soname=\"$soname_spec\"
-	else
-	  soname=$realname
-	fi
-	if test -z "$dlname"; then
-	  dlname=$soname
-	fi
-
-	lib=$output_objdir/$realname
-	linknames=
-	for link
-	do
-	  func_append linknames " $link"
-	done
-
-	# Use standard objects if they are pic
-	test -z "$pic_flag" && libobjs=`$ECHO "$libobjs" | $SP2NL | $SED "$lo2o" | $NL2SP`
-	test "X$libobjs" = "X " && libobjs=
-
-	delfiles=
-	if test -n "$export_symbols" && test -n "$include_expsyms"; then
-	  $opt_dry_run || cp "$export_symbols" "$output_objdir/$libname.uexp"
-	  export_symbols=$output_objdir/$libname.uexp
-	  func_append delfiles " $export_symbols"
-	fi
-
-	orig_export_symbols=
-	case $host_os in
-	cygwin* | mingw* | windows* | cegcc*)
-	  if test -n "$export_symbols" && test -z "$export_symbols_regex"; then
-	    # exporting using user supplied symfile
-	    func_dll_def_p "$export_symbols" || {
-	      # and it's NOT already a .def file. Must figure out
-	      # which of the given symbols are data symbols and tag
-	      # them as such. So, trigger use of export_symbols_cmds.
-	      # export_symbols gets reassigned inside the "prepare
-	      # the list of exported symbols" if statement, so the
-	      # include_expsyms logic still works.
-	      orig_export_symbols=$export_symbols
-	      export_symbols=
-	      always_export_symbols=yes
-	    }
-	  fi
-	  ;;
-	esac
-
-	# Prepare the list of exported symbols
-	if test -z "$export_symbols"; then
-	  if test yes = "$always_export_symbols" || test -n "$export_symbols_regex"; then
-	    func_verbose "generating symbol list for '$libname.la'"
-	    export_symbols=$output_objdir/$libname.exp
-	    $opt_dry_run || $RM $export_symbols
-	    cmds=$export_symbols_cmds
-	    save_ifs=$IFS; IFS='~'
-	    for cmd1 in $cmds; do
-	      IFS=$save_ifs
-	      # Take the normal branch if the nm_file_list_spec branch
-	      # doesn't work or if tool conversion is not needed.
-	      case $nm_file_list_spec~$to_tool_file_cmd in
-		*~func_convert_file_noop | *~func_convert_file_msys_to_w32 | ~*)
-		  try_normal_branch=yes
-		  eval cmd=\"$cmd1\"
-		  func_len " $cmd"
-		  len=$func_len_result
-		  ;;
-		*)
-		  try_normal_branch=no
-		  ;;
-	      esac
-	      if test yes = "$try_normal_branch" \
-		 && { test "$len" -lt "$max_cmd_len" \
-		      || test "$max_cmd_len" -le -1; }
-	      then
-		func_show_eval "$cmd" 'exit $?'
-		skipped_export=false
-	      elif test -n "$nm_file_list_spec"; then
-		func_basename "$output"
-		output_la=$func_basename_result
-		save_libobjs=$libobjs
-		save_output=$output
-		output=$output_objdir/$output_la.nm
-		func_to_tool_file "$output"
-		libobjs=$nm_file_list_spec$func_to_tool_file_result
-		func_append delfiles " $output"
-		func_verbose "creating $NM input file list: $output"
-		for obj in $save_libobjs; do
-		  func_to_tool_file "$obj"
-		  $ECHO "$func_to_tool_file_result"
-		done > "$output"
-		eval cmd=\"$cmd1\"
-		func_show_eval "$cmd" 'exit $?'
-		output=$save_output
-		libobjs=$save_libobjs
-		skipped_export=false
-	      else
-		# The command line is too long to execute in one step.
-		func_verbose "using reloadable object file for export list..."
-		skipped_export=:
-		# Break out early, otherwise skipped_export may be
-		# set to false by a later but shorter cmd.
-		break
-	      fi
-	    done
-	    IFS=$save_ifs
-	    if test -n "$export_symbols_regex" && test : != "$skipped_export"; then
-	      func_show_eval '$EGREP -e "$export_symbols_regex" "$export_symbols" > "${export_symbols}T"'
-	      func_show_eval '$MV "${export_symbols}T" "$export_symbols"'
-	    fi
-	  fi
-	fi
-
-	if test -n "$export_symbols" && test -n "$include_expsyms"; then
-	  tmp_export_symbols=$export_symbols
-	  test -n "$orig_export_symbols" && tmp_export_symbols=$orig_export_symbols
-	  $opt_dry_run || eval '$ECHO "$include_expsyms" | $SP2NL >> "$tmp_export_symbols"'
-	fi
-
-	if test : != "$skipped_export" && test -n "$orig_export_symbols"; then
-	  # The given exports_symbols file has to be filtered, so filter it.
-	  func_verbose "filter symbol list for '$libname.la' to tag DATA exports"
-	  # FIXME: $output_objdir/$libname.filter potentially contains lots of
-	  # 's' commands, which not all seds can handle. GNU sed should be fine
-	  # though. Also, the filter scales superlinearly with the number of
-	  # global variables. join(1) would be nice here, but unfortunately
-	  # isn't a blessed tool.
-	  $opt_dry_run || $SED -e '/[ ,]DATA/!d;s,\(.*\)\([ \,].*\),s|^\1$|\1\2|,' < $export_symbols > $output_objdir/$libname.filter
-	  func_append delfiles " $export_symbols $output_objdir/$libname.filter"
-	  export_symbols=$output_objdir/$libname.def
-	  $opt_dry_run || $SED -f $output_objdir/$libname.filter < $orig_export_symbols > $export_symbols
-	fi
-
-	tmp_deplibs=
-	for test_deplib in $deplibs; do
-	  case " $convenience " in
-	  *" $test_deplib "*) ;;
-	  *)
-	    func_append tmp_deplibs " $test_deplib"
-	    ;;
-	  esac
-	done
-	deplibs=$tmp_deplibs
-
-	if test -n "$convenience"; then
-	  if test -n "$whole_archive_flag_spec" &&
-	    test yes = "$compiler_needs_object" &&
-	    test -z "$libobjs"; then
-	    # extract the archives, so we have objects to list.
-	    # TODO: could optimize this to just extract one archive.
-	    whole_archive_flag_spec=
-	  fi
-	  if test -n "$whole_archive_flag_spec"; then
-	    save_libobjs=$libobjs
-	    eval libobjs=\"\$libobjs $whole_archive_flag_spec\"
-	    test "X$libobjs" = "X " && libobjs=
-	  else
-	    gentop=$output_objdir/${outputname}x
-	    func_append generated " $gentop"
-
-	    func_extract_archives $gentop $convenience
-	    func_append libobjs " $func_extract_archives_result"
-	    test "X$libobjs" = "X " && libobjs=
-	  fi
-	fi
-
-	if test yes = "$thread_safe" && test -n "$thread_safe_flag_spec"; then
-	  eval flag=\"$thread_safe_flag_spec\"
-	  func_append linker_flags " $flag"
-	fi
-
-	# Make a backup of the uninstalled library when relinking
-	if test relink = "$opt_mode"; then
-	  $opt_dry_run || eval '(cd $output_objdir && $RM ${realname}U && $MV $realname ${realname}U)' || exit $?
-	fi
-
-	# Do each of the archive commands.
-	if test yes = "$module" && test -n "$module_cmds"; then
-	  if test -n "$export_symbols" && test -n "$module_expsym_cmds"; then
-	    eval test_cmds=\"$module_expsym_cmds\"
-	    cmds=$module_expsym_cmds
-	  else
-	    eval test_cmds=\"$module_cmds\"
-	    cmds=$module_cmds
-	  fi
-	else
-	  if test -n "$export_symbols" && test -n "$archive_expsym_cmds"; then
-	    eval test_cmds=\"$archive_expsym_cmds\"
-	    cmds=$archive_expsym_cmds
-	  else
-	    eval test_cmds=\"$archive_cmds\"
-	    cmds=$archive_cmds
-	  fi
-	fi
-
-	if test : != "$skipped_export" &&
-	   func_len " $test_cmds" &&
-	   len=$func_len_result &&
-	   test "$len" -lt "$max_cmd_len" || test "$max_cmd_len" -le -1; then
-	  :
-	else
-	  # The command line is too long to link in one step, link piecewise
-	  # or, if using GNU ld and skipped_export is not :, use a linker
-	  # script.
-
-	  # Save the value of $output and $libobjs because we want to
-	  # use them later.  If we have whole_archive_flag_spec, we
-	  # want to use save_libobjs as it was before
-	  # whole_archive_flag_spec was expanded, because we can't
-	  # assume the linker understands whole_archive_flag_spec.
-	  # This may have to be revisited, in case too many
-	  # convenience libraries get linked in and end up exceeding
-	  # the spec.
-	  if test -z "$convenience" || test -z "$whole_archive_flag_spec"; then
-	    save_libobjs=$libobjs
-	  fi
-	  save_output=$output
-	  func_basename "$output"
-	  output_la=$func_basename_result
-
-	  # Clear the reloadable object creation command queue and
-	  # initialize k to one.
-	  test_cmds=
-	  concat_cmds=
-	  objlist=
-	  last_robj=
-	  k=1
-
-	  if test -n "$save_libobjs" && test : != "$skipped_export" && test -n "$file_list_spec"; then
-	    output=$output_objdir/$output_la.lnk
-	    func_verbose "creating linker input file list: $output"
-	    : > $output
-	    set x $save_libobjs
-	    shift
-	    firstobj=
-	    if test yes = "$compiler_needs_object"; then
-	      firstobj="$1 "
-	      shift
-	    fi
-	    for obj
-	    do
-	      func_to_tool_file "$obj"
-	      $ECHO "$func_to_tool_file_result" >> $output
-	    done
-	    func_append delfiles " $output"
-	    func_to_tool_file "$output"
-	    output=$firstobj\"$file_list_spec$func_to_tool_file_result\"
-	  elif test -n "$save_libobjs" && test : != "$skipped_export" && test yes = "$with_gnu_ld"; then
-	    output=$output_objdir/$output_la.lnkscript
-	    func_verbose "creating GNU ld script: $output"
-	    echo 'INPUT (' > $output
-	    for obj in $save_libobjs
-	    do
-	      func_to_tool_file "$obj"
-	      $ECHO "$func_to_tool_file_result" >> $output
-	    done
-	    echo ')' >> $output
-	    func_append delfiles " $output"
-	    func_to_tool_file "$output"
-	    output=$func_to_tool_file_result
-	  else
-	    if test -n "$save_libobjs"; then
-	      func_verbose "creating reloadable object files..."
-	      output=$output_objdir/$output_la-$k.$objext
-	      eval test_cmds=\"$reload_cmds\"
-	      func_len " $test_cmds"
-	      len0=$func_len_result
-	      len=$len0
-
-	      # Loop over the list of objects to be linked.
-	      for obj in $save_libobjs
-	      do
-		func_len " $obj"
-		func_arith $len + $func_len_result
-		len=$func_arith_result
-		if test -z "$objlist" ||
-		   test "$len" -lt "$max_cmd_len"; then
-		  func_append objlist " $obj"
-		else
-		  # The command $test_cmds is almost too long, add a
-		  # command to the queue.
-		  if test 1 -eq "$k"; then
-		    # The first file doesn't have a previous command to add.
-		    reload_objs=$objlist
-		    eval concat_cmds=\"$reload_cmds\"
-		  else
-		    # All subsequent reloadable object files will link in
-		    # the last one created.
-		    reload_objs="$objlist $last_robj"
-		    eval concat_cmds=\"\$concat_cmds~$reload_cmds~\$RM $last_robj\"
-		  fi
-		  last_robj=$output_objdir/$output_la-$k.$objext
-		  func_arith $k + 1
-		  k=$func_arith_result
-		  output=$output_objdir/$output_la-$k.$objext
-		  objlist=" $obj"
-		  func_len " $last_robj"
-		  func_arith $len0 + $func_len_result
-		  len=$func_arith_result
-		fi
-	      done
-	      # Handle the remaining objects by creating one last
-	      # reloadable object file.  All subsequent reloadable object
-	      # files will link in the last one created.
-	      test -z "$concat_cmds" || concat_cmds=$concat_cmds~
-	      reload_objs="$objlist $last_robj"
-	      eval concat_cmds=\"\$concat_cmds$reload_cmds\"
-	      if test -n "$last_robj"; then
-	        eval concat_cmds=\"\$concat_cmds~\$RM $last_robj\"
-	      fi
-	      func_append delfiles " $output"
-
-	    else
-	      output=
-	    fi
-
-	    ${skipped_export-false} && {
-	      func_verbose "generating symbol list for '$libname.la'"
-	      export_symbols=$output_objdir/$libname.exp
-	      $opt_dry_run || $RM $export_symbols
-	      libobjs=$output
-	      # Append the command to create the export file.
-	      test -z "$concat_cmds" || concat_cmds=$concat_cmds~
-	      eval concat_cmds=\"\$concat_cmds$export_symbols_cmds\"
-	      if test -n "$last_robj"; then
-		eval concat_cmds=\"\$concat_cmds~\$RM $last_robj\"
-	      fi
-	    }
-
-	    test -n "$save_libobjs" &&
-	      func_verbose "creating a temporary reloadable object file: $output"
-
-	    # Loop through the commands generated above and execute them.
-	    save_ifs=$IFS; IFS='~'
-	    for cmd in $concat_cmds; do
-	      IFS=$save_ifs
-	      $opt_quiet || {
-		  func_quote_arg expand,pretty "$cmd"
-		  eval "func_echo $func_quote_arg_result"
-	      }
-	      $opt_dry_run || eval "$cmd" || {
-		lt_exit=$?
-
-		# Restore the uninstalled library and exit
-		if test relink = "$opt_mode"; then
-		  ( cd "$output_objdir" && \
-		    $RM "${realname}T" && \
-		    $MV "${realname}U" "$realname" )
-		fi
-
-		exit $lt_exit
-	      }
-	    done
-	    IFS=$save_ifs
-
-	    if test -n "$export_symbols_regex" && ${skipped_export-false}; then
-	      func_show_eval '$EGREP -e "$export_symbols_regex" "$export_symbols" > "${export_symbols}T"'
-	      func_show_eval '$MV "${export_symbols}T" "$export_symbols"'
-	    fi
-	  fi
-
-          ${skipped_export-false} && {
-	    if test -n "$export_symbols" && test -n "$include_expsyms"; then
-	      tmp_export_symbols=$export_symbols
-	      test -n "$orig_export_symbols" && tmp_export_symbols=$orig_export_symbols
-	      $opt_dry_run || eval '$ECHO "$include_expsyms" | $SP2NL >> "$tmp_export_symbols"'
-	    fi
-
-	    if test -n "$orig_export_symbols"; then
-	      # The given exports_symbols file has to be filtered, so filter it.
-	      func_verbose "filter symbol list for '$libname.la' to tag DATA exports"
-	      # FIXME: $output_objdir/$libname.filter potentially contains lots of
-	      # 's' commands, which not all seds can handle. GNU sed should be fine
-	      # though. Also, the filter scales superlinearly with the number of
-	      # global variables. join(1) would be nice here, but unfortunately
-	      # isn't a blessed tool.
-	      $opt_dry_run || $SED -e '/[ ,]DATA/!d;s,\(.*\)\([ \,].*\),s|^\1$|\1\2|,' < $export_symbols > $output_objdir/$libname.filter
-	      func_append delfiles " $export_symbols $output_objdir/$libname.filter"
-	      export_symbols=$output_objdir/$libname.def
-	      $opt_dry_run || $SED -f $output_objdir/$libname.filter < $orig_export_symbols > $export_symbols
-	    fi
-	  }
-
-	  libobjs=$output
-	  # Restore the value of output.
-	  output=$save_output
-
-	  if test -n "$convenience" && test -n "$whole_archive_flag_spec"; then
-	    eval libobjs=\"\$libobjs $whole_archive_flag_spec\"
-	    test "X$libobjs" = "X " && libobjs=
-	  fi
-	  # Expand the library linking commands again to reset the
-	  # value of $libobjs for piecewise linking.
-
-	  # Do each of the archive commands.
-	  if test yes = "$module" && test -n "$module_cmds"; then
-	    if test -n "$export_symbols" && test -n "$module_expsym_cmds"; then
-	      cmds=$module_expsym_cmds
-	    else
-	      cmds=$module_cmds
-	    fi
-	  else
-	    if test -n "$export_symbols" && test -n "$archive_expsym_cmds"; then
-	      cmds=$archive_expsym_cmds
-	    else
-	      cmds=$archive_cmds
-	    fi
-	  fi
-	fi
-
-	if test -n "$delfiles"; then
-	  # Append the command to remove temporary files to $cmds.
-	  eval cmds=\"\$cmds~\$RM $delfiles\"
-	fi
-
-	# Add any objects from preloaded convenience libraries
-	if test -n "$dlprefiles"; then
-	  gentop=$output_objdir/${outputname}x
-	  func_append generated " $gentop"
-
-	  func_extract_archives $gentop $dlprefiles
-	  func_append libobjs " $func_extract_archives_result"
-	  test "X$libobjs" = "X " && libobjs=
-	fi
-
-	save_ifs=$IFS; IFS='~'
-	for cmd in $cmds; do
-	  IFS=$sp$nl
-	  eval cmd=\"$cmd\"
-	  IFS=$save_ifs
-	  $opt_quiet || {
-	    func_quote_arg expand,pretty "$cmd"
-	    eval "func_echo $func_quote_arg_result"
-	  }
-	  $opt_dry_run || eval "$cmd" || {
-	    lt_exit=$?
-
-	    # Restore the uninstalled library and exit
-	    if test relink = "$opt_mode"; then
-	      ( cd "$output_objdir" && \
-	        $RM "${realname}T" && \
-		$MV "${realname}U" "$realname" )
-	    fi
-
-	    exit $lt_exit
-	  }
-	done
-	IFS=$save_ifs
-
-	# Restore the uninstalled library and exit
-	if test relink = "$opt_mode"; then
-	  $opt_dry_run || eval '(cd $output_objdir && $RM ${realname}T && $MV $realname ${realname}T && $MV ${realname}U $realname)' || exit $?
-
-	  if test -n "$convenience"; then
-	    if test -z "$whole_archive_flag_spec"; then
-	      func_show_eval '${RM}r "$gentop"'
-	    fi
-	  fi
-
-	  exit $EXIT_SUCCESS
-	fi
-
-	# Create links to the real library.
-	for linkname in $linknames; do
-	  if test "$realname" != "$linkname"; then
-	    func_show_eval '(cd "$output_objdir" && $RM "$linkname" && $LN_S "$realname" "$linkname")' 'exit $?'
-	  fi
-	done
-
-	# If -module or -export-dynamic was specified, set the dlname.
-	if test yes = "$module" || test yes = "$export_dynamic"; then
-	  # On all known operating systems, these are identical.
-	  dlname=$soname
-	fi
-      fi
-      ;;
-
-    obj)
-      if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then
-	func_warning "'-dlopen' is ignored for objects"
-      fi
-
-      case " $deplibs" in
-      *\ -l* | *\ -L*)
-	func_warning "'-l' and '-L' are ignored for objects" ;;
-      esac
-
-      test -n "$rpath" && \
-	func_warning "'-rpath' is ignored for objects"
-
-      test -n "$xrpath" && \
-	func_warning "'-R' is ignored for objects"
-
-      test -n "$vinfo" && \
-	func_warning "'-version-info' is ignored for objects"
-
-      test -n "$release" && \
-	func_warning "'-release' is ignored for objects"
-
-      case $output in
-      *.lo)
-	test -n "$objs$old_deplibs" && \
-	  func_fatal_error "cannot build library object '$output' from non-libtool objects"
-
-	libobj=$output
-	func_lo2o "$libobj"
-	obj=$func_lo2o_result
-	;;
-      *)
-	libobj=
-	obj=$output
-	;;
-      esac
-
-      # Delete the old objects.
-      $opt_dry_run || $RM $obj $libobj
-
-      # Objects from convenience libraries.  This assumes
-      # single-version convenience libraries.  Whenever we create
-      # different ones for PIC/non-PIC, this we'll have to duplicate
-      # the extraction.
-      reload_conv_objs=
-      gentop=
-      # if reload_cmds runs $LD directly, get rid of -Wl from
-      # whole_archive_flag_spec and hope we can get by with turning comma
-      # into space.
-      case $reload_cmds in
-        *\$LD[\ \$]*) wl= ;;
-      esac
-      if test -n "$convenience"; then
-	if test -n "$whole_archive_flag_spec"; then
-	  eval tmp_whole_archive_flags=\"$whole_archive_flag_spec\"
-	  test -n "$wl" || tmp_whole_archive_flags=`$ECHO "$tmp_whole_archive_flags" | $SED 's|,| |g'`
-	  reload_conv_objs=$reload_objs\ $tmp_whole_archive_flags
-	else
-	  gentop=$output_objdir/${obj}x
-	  func_append generated " $gentop"
-
-	  func_extract_archives $gentop $convenience
-	  reload_conv_objs="$reload_objs $func_extract_archives_result"
-	fi
-      fi
-
-      # If we're not building shared, we need to use non_pic_objs
-      test yes = "$build_libtool_libs" || libobjs=$non_pic_objects
-
-      # Create the old-style object.
-      reload_objs=$objs$old_deplibs' '`$ECHO "$libobjs" | $SP2NL | $SED "/\.$libext$/d; /\.lib$/d; $lo2o" | $NL2SP`' '$reload_conv_objs
-
-      output=$obj
-      func_execute_cmds "$reload_cmds" 'exit $?'
-
-      # Exit if we aren't doing a library object file.
-      if test -z "$libobj"; then
-	if test -n "$gentop"; then
-	  func_show_eval '${RM}r "$gentop"'
-	fi
-
-	exit $EXIT_SUCCESS
-      fi
-
-      test yes = "$build_libtool_libs" || {
-	if test -n "$gentop"; then
-	  func_show_eval '${RM}r "$gentop"'
-	fi
-
-	# Create an invalid libtool object if no PIC, so that we don't
-	# accidentally link it into a program.
-	# $show "echo timestamp > $libobj"
-	# $opt_dry_run || eval "echo timestamp > $libobj" || exit $?
-	exit $EXIT_SUCCESS
-      }
-
-      if test -n "$pic_flag" || test default != "$pic_mode"; then
-	# Only do commands if we really have different PIC objects.
-	reload_objs="$libobjs $reload_conv_objs"
-	output=$libobj
-	func_execute_cmds "$reload_cmds" 'exit $?'
-      fi
-
-      if test -n "$gentop"; then
-	func_show_eval '${RM}r "$gentop"'
-      fi
-
-      exit $EXIT_SUCCESS
-      ;;
-
-    prog)
-      case $host in
-	*cygwin*) func_stripname '' '.exe' "$output"
-	          output=$func_stripname_result.exe;;
-      esac
-      test -n "$vinfo" && \
-	func_warning "'-version-info' is ignored for programs"
-
-      test -n "$release" && \
-	func_warning "'-release' is ignored for programs"
-
-      $preload \
-	&& test unknown,unknown,unknown = "$dlopen_support,$dlopen_self,$dlopen_self_static" \
-	&& func_warning "'LT_INIT([dlopen])' not used. Assuming no dlopen support."
-
-      case $host in
-      *-*-rhapsody* | *-*-darwin1.[012])
-	# On Rhapsody replace the C library is the System framework
-	compile_deplibs=`$ECHO " $compile_deplibs" | $SED 's/ -lc / System.ltframework /'`
-	finalize_deplibs=`$ECHO " $finalize_deplibs" | $SED 's/ -lc / System.ltframework /'`
-	;;
-      esac
-
-      case $host in
-      *-*-darwin*)
-	# Don't allow lazy linking, it breaks C++ global constructors
-	# But is supposedly fixed on 10.4 or later (yay!).
-	if test CXX = "$tagname"; then
-	  case ${MACOSX_DEPLOYMENT_TARGET-10.0} in
-	    10.[0123])
-	      func_append compile_command " $wl-bind_at_load"
-	      func_append finalize_command " $wl-bind_at_load"
-	    ;;
-	  esac
-	fi
-	# Time to change all our "foo.ltframework" stuff back to "-framework foo"
-	compile_deplibs=`$ECHO " $compile_deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	finalize_deplibs=`$ECHO " $finalize_deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	;;
-      esac
-
-
-      # move library search paths that coincide with paths to not yet
-      # installed libraries to the beginning of the library search list
-      new_libs=
-      for path in $notinst_path; do
-	case " $new_libs " in
-	*" -L$path/$objdir "*) ;;
-	*)
-	  case " $compile_deplibs " in
-	  *" -L$path/$objdir "*)
-	    func_append new_libs " -L$path/$objdir" ;;
-	  esac
-	  ;;
-	esac
-      done
-      for deplib in $compile_deplibs; do
-	case $deplib in
-	-L*)
-	  case " $new_libs " in
-	  *" $deplib "*) ;;
-	  *) func_append new_libs " $deplib" ;;
-	  esac
-	  ;;
-	*) func_append new_libs " $deplib" ;;
-	esac
-      done
-      compile_deplibs=$new_libs
-
-
-      func_append compile_command " $compile_deplibs"
-      func_append finalize_command " $finalize_deplibs"
-
-      if test -n "$rpath$xrpath"; then
-	# If the user specified any rpath flags, then add them.
-	for libdir in $rpath $xrpath; do
-	  # This is the magic to use -rpath.
-	  case "$finalize_rpath " in
-	  *" $libdir "*) ;;
-	  *) func_append finalize_rpath " $libdir" ;;
-	  esac
-	done
-      fi
-
-      # Now hardcode the library paths
-      rpath=
-      hardcode_libdirs=
-      for libdir in $compile_rpath $finalize_rpath; do
-	if test -n "$hardcode_libdir_flag_spec"; then
-	  if test -n "$hardcode_libdir_separator"; then
-	    if test -z "$hardcode_libdirs"; then
-	      hardcode_libdirs=$libdir
-	    else
-	      # Just accumulate the unique libdirs.
-	      case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in
-	      *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*)
-		;;
-	      *)
-		func_append hardcode_libdirs "$hardcode_libdir_separator$libdir"
-		;;
-	      esac
-	    fi
-	  else
-	    eval flag=\"$hardcode_libdir_flag_spec\"
-	    func_append rpath " $flag"
-	  fi
-	elif test -n "$runpath_var"; then
-	  case "$perm_rpath " in
-	  *" $libdir "*) ;;
-	  *) func_append perm_rpath " $libdir" ;;
-	  esac
-	fi
-	case $host in
-	*-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-os2* | *-cegcc*)
-	  testbindir=`$ECHO "$libdir" | $SED -e 's*/lib$*/bin*'`
-	  case :$dllsearchpath: in
-	  *":$libdir:"*) ;;
-	  ::) dllsearchpath=$libdir;;
-	  *) func_append dllsearchpath ":$libdir";;
-	  esac
-	  case :$dllsearchpath: in
-	  *":$testbindir:"*) ;;
-	  ::) dllsearchpath=$testbindir;;
-	  *) func_append dllsearchpath ":$testbindir";;
-	  esac
-	  ;;
-	esac
-      done
-      # Substitute the hardcoded libdirs into the rpath.
-      if test -n "$hardcode_libdir_separator" &&
-	 test -n "$hardcode_libdirs"; then
-	libdir=$hardcode_libdirs
-	eval rpath=\" $hardcode_libdir_flag_spec\"
-      fi
-      compile_rpath=$rpath
-
-      rpath=
-      hardcode_libdirs=
-      for libdir in $finalize_rpath; do
-	if test -n "$hardcode_libdir_flag_spec"; then
-	  if test -n "$hardcode_libdir_separator"; then
-	    if test -z "$hardcode_libdirs"; then
-	      hardcode_libdirs=$libdir
-	    else
-	      # Just accumulate the unique libdirs.
-	      case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in
-	      *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*)
-		;;
-	      *)
-		func_append hardcode_libdirs "$hardcode_libdir_separator$libdir"
-		;;
-	      esac
-	    fi
-	  else
-	    eval flag=\"$hardcode_libdir_flag_spec\"
-	    func_append rpath " $flag"
-	  fi
-	elif test -n "$runpath_var"; then
-	  case "$finalize_perm_rpath " in
-	  *" $libdir "*) ;;
-	  *) func_append finalize_perm_rpath " $libdir" ;;
-	  esac
-	fi
-      done
-      # Substitute the hardcoded libdirs into the rpath.
-      if test -n "$hardcode_libdir_separator" &&
-	 test -n "$hardcode_libdirs"; then
-	libdir=$hardcode_libdirs
-	eval rpath=\" $hardcode_libdir_flag_spec\"
-      fi
-      finalize_rpath=$rpath
-
-      if test -n "$libobjs" && test yes = "$build_old_libs"; then
-	# Transform all the library objects into standard objects.
-	compile_command=`$ECHO "$compile_command" | $SP2NL | $SED "$lo2o" | $NL2SP`
-	finalize_command=`$ECHO "$finalize_command" | $SP2NL | $SED "$lo2o" | $NL2SP`
-      fi
-
-      func_generate_dlsyms "$outputname" "@PROGRAM@" false
-
-      # template prelinking step
-      if test -n "$prelink_cmds"; then
-	func_execute_cmds "$prelink_cmds" 'exit $?'
-      fi
-
-      wrappers_required=:
-      case $host in
-      *cegcc* | *mingw32ce*)
-        # Disable wrappers for cegcc and mingw32ce hosts, we are cross compiling anyway.
-        wrappers_required=false
-        ;;
-      *cygwin* | *mingw* | *windows* )
-        test yes = "$build_libtool_libs" || wrappers_required=false
-        ;;
-      *)
-        if test no = "$need_relink" || test yes != "$build_libtool_libs"; then
-          wrappers_required=false
-        fi
-        ;;
-      esac
-      $wrappers_required || {
-	# Replace the output file specification.
-	compile_command=`$ECHO "$compile_command" | $SED 's%@OUTPUT@%'"$output"'%g'`
-	link_command=$compile_command$compile_rpath
-
-	# We have no uninstalled library dependencies, so finalize right now.
-	exit_status=0
-	func_show_eval "$link_command" 'exit_status=$?'
-
-	if test -n "$postlink_cmds"; then
-	  func_to_tool_file "$output"
-	  postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'`
-	  func_execute_cmds "$postlink_cmds" 'exit $?'
-	fi
-
-	# Delete the generated files.
-	if test -f "$output_objdir/${outputname}S.$objext"; then
-	  func_show_eval '$RM "$output_objdir/${outputname}S.$objext"'
-	fi
-
-	exit $exit_status
-      }
-
-      if test -n "$compile_shlibpath$finalize_shlibpath"; then
-	compile_command="$shlibpath_var=\"$compile_shlibpath$finalize_shlibpath\$$shlibpath_var\" $compile_command"
-      fi
-      if test -n "$finalize_shlibpath"; then
-	finalize_command="$shlibpath_var=\"$finalize_shlibpath\$$shlibpath_var\" $finalize_command"
-      fi
-
-      compile_var=
-      finalize_var=
-      if test -n "$runpath_var"; then
-	if test -n "$perm_rpath"; then
-	  # We should set the runpath_var.
-	  rpath=
-	  for dir in $perm_rpath; do
-	    func_append rpath "$dir:"
-	  done
-	  compile_var="$runpath_var=\"$rpath\$$runpath_var\" "
-	fi
-	if test -n "$finalize_perm_rpath"; then
-	  # We should set the runpath_var.
-	  rpath=
-	  for dir in $finalize_perm_rpath; do
-	    func_append rpath "$dir:"
-	  done
-	  finalize_var="$runpath_var=\"$rpath\$$runpath_var\" "
-	fi
-      fi
-
-      if test yes = "$no_install"; then
-	# We don't need to create a wrapper script.
-	link_command=$compile_var$compile_command$compile_rpath
-	# Replace the output file specification.
-	link_command=`$ECHO "$link_command" | $SED 's%@OUTPUT@%'"$output"'%g'`
-	# Delete the old output file.
-	$opt_dry_run || $RM $output
-	# Link the executable and exit
-	func_show_eval "$link_command" 'exit $?'
-
-	if test -n "$postlink_cmds"; then
-	  func_to_tool_file "$output"
-	  postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'`
-	  func_execute_cmds "$postlink_cmds" 'exit $?'
-	fi
-
-	exit $EXIT_SUCCESS
-      fi
-
-      case $hardcode_action,$fast_install in
-        relink,*)
-	  # Fast installation is not supported
-	  link_command=$compile_var$compile_command$compile_rpath
-	  relink_command=$finalize_var$finalize_command$finalize_rpath
-
-	  func_warning "this platform does not like uninstalled shared libraries"
-	  func_warning "'$output' will be relinked during installation"
-	  ;;
-        *,yes)
-	  link_command=$finalize_var$compile_command$finalize_rpath
-	  relink_command=`$ECHO "$compile_var$compile_command$compile_rpath" | $SED 's%@OUTPUT@%\$progdir/\$file%g'`
-          ;;
-	*,no)
-	  link_command=$compile_var$compile_command$compile_rpath
-	  relink_command=$finalize_var$finalize_command$finalize_rpath
-          ;;
-	*,needless)
-	  link_command=$finalize_var$compile_command$finalize_rpath
-	  relink_command=
-          ;;
-      esac
-
-      # Replace the output file specification.
-      link_command=`$ECHO "$link_command" | $SED 's%@OUTPUT@%'"$output_objdir/$outputname"'%g'`
-
-      # Delete the old output files.
-      $opt_dry_run || $RM $output $output_objdir/$outputname $output_objdir/lt-$outputname
-
-      func_show_eval "$link_command" 'exit $?'
-
-      if test -n "$postlink_cmds"; then
-	func_to_tool_file "$output_objdir/$outputname"
-	postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output_objdir/$outputname"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'`
-	func_execute_cmds "$postlink_cmds" 'exit $?'
-      fi
-
-      # Now create the wrapper script.
-      func_verbose "creating $output"
-
-      # Quote the relink command for shipping.
-      if test -n "$relink_command"; then
-	# Preserve any variables that may affect compiler behavior
-	for var in $variables_saved_for_relink; do
-	  if eval test -z \"\${$var+set}\"; then
-	    relink_command="{ test -z \"\${$var+set}\" || $lt_unset $var || { $var=; export $var; }; }; $relink_command"
-	  elif eval var_value=\$$var; test -z "$var_value"; then
-	    relink_command="$var=; export $var; $relink_command"
-	  else
-	    func_quote_arg pretty "$var_value"
-	    relink_command="$var=$func_quote_arg_result; export $var; $relink_command"
-	  fi
-	done
-	func_quote eval cd "`pwd`"
-	func_quote_arg pretty,unquoted "($func_quote_result; $relink_command)"
-	relink_command=$func_quote_arg_unquoted_result
-      fi
-
-      # Only actually do things if not in dry run mode.
-      $opt_dry_run || {
-	# win32 will think the script is a binary if it has
-	# a .exe suffix, so we strip it off here.
-	case $output in
-	  *.exe) func_stripname '' '.exe' "$output"
-	         output=$func_stripname_result ;;
-	esac
-	# test for cygwin because mv fails w/o .exe extensions
-	case $host in
-	  *cygwin*)
-	    exeext=.exe
-	    func_stripname '' '.exe' "$outputname"
-	    outputname=$func_stripname_result ;;
-	  *) exeext= ;;
-	esac
-	case $host in
-	  *cygwin* | *mingw* | windows* )
-	    func_dirname_and_basename "$output" "" "."
-	    output_name=$func_basename_result
-	    output_path=$func_dirname_result
-	    cwrappersource=$output_path/$objdir/lt-$output_name.c
-	    cwrapper=$output_path/$output_name.exe
-	    $RM $cwrappersource $cwrapper
-	    trap "$RM $cwrappersource $cwrapper; exit $EXIT_FAILURE" 1 2 15
-
-	    func_emit_cwrapperexe_src > $cwrappersource
-
-	    # The wrapper executable is built using the $host compiler,
-	    # because it contains $host paths and files. If cross-
-	    # compiling, it, like the target executable, must be
-	    # executed on the $host or under an emulation environment.
-	    $opt_dry_run || {
-	      $LTCC $LTCFLAGS -o $cwrapper $cwrappersource
-	      $STRIP $cwrapper
-	    }
-
-	    # Now, create the wrapper script for func_source use:
-	    func_ltwrapper_scriptname $cwrapper
-	    $RM $func_ltwrapper_scriptname_result
-	    trap "$RM $func_ltwrapper_scriptname_result; exit $EXIT_FAILURE" 1 2 15
-	    $opt_dry_run || {
-	      # note: this script will not be executed, so do not chmod.
-	      if test "x$build" = "x$host"; then
-		$cwrapper --lt-dump-script > $func_ltwrapper_scriptname_result
-	      else
-		func_emit_wrapper no > $func_ltwrapper_scriptname_result
-	      fi
-	    }
-	  ;;
-	  * )
-	    $RM $output
-	    trap "$RM $output; exit $EXIT_FAILURE" 1 2 15
-
-	    func_emit_wrapper no > $output
-	    chmod +x $output
-	  ;;
-	esac
-      }
-      exit $EXIT_SUCCESS
-      ;;
-    esac
-
-    # See if we need to build an old-fashioned archive.
-    for oldlib in $oldlibs; do
-
-      case $build_libtool_libs in
-        convenience)
-	  oldobjs="$libobjs_save $symfileobj"
-	  addlibs=$convenience
-	  build_libtool_libs=no
-	  ;;
-	module)
-	  oldobjs=$libobjs_save
-	  addlibs=$old_convenience
-	  build_libtool_libs=no
-          ;;
-	*)
-	  oldobjs="$old_deplibs $non_pic_objects"
-	  $preload && test -f "$symfileobj" \
-	    && func_append oldobjs " $symfileobj"
-	  addlibs=$old_convenience
-	  ;;
-      esac
-
-      if test -n "$addlibs"; then
-	gentop=$output_objdir/${outputname}x
-	func_append generated " $gentop"
-
-	func_extract_archives $gentop $addlibs
-	func_append oldobjs " $func_extract_archives_result"
-      fi
-
-      # Do each command in the archive commands.
-      if test -n "$old_archive_from_new_cmds" && test yes = "$build_libtool_libs"; then
-	cmds=$old_archive_from_new_cmds
-      else
-
-	# Add any objects from preloaded convenience libraries
-	if test -n "$dlprefiles"; then
-	  gentop=$output_objdir/${outputname}x
-	  func_append generated " $gentop"
-
-	  func_extract_archives $gentop $dlprefiles
-	  func_append oldobjs " $func_extract_archives_result"
-	fi
-
-	# POSIX demands no paths to be encoded in archives.  We have
-	# to avoid creating archives with duplicate basenames if we
-	# might have to extract them afterwards, e.g., when creating a
-	# static archive out of a convenience library, or when linking
-	# the entirety of a libtool archive into another (currently
-	# not supported by libtool).
-	if (for obj in $oldobjs
-	    do
-	      func_basename "$obj"
-	      $ECHO "$func_basename_result"
-	    done | sort | sort -uc >/dev/null 2>&1); then
-	  :
-	else
-	  echo "copying selected object files to avoid basename conflicts..."
-	  gentop=$output_objdir/${outputname}x
-	  func_append generated " $gentop"
-	  func_mkdir_p "$gentop"
-	  save_oldobjs=$oldobjs
-	  oldobjs=
-	  counter=1
-	  for obj in $save_oldobjs
-	  do
-	    func_basename "$obj"
-	    objbase=$func_basename_result
-	    case " $oldobjs " in
-	    " ") oldobjs=$obj ;;
-	    *[\ /]"$objbase "*)
-	      while :; do
-		# Make sure we don't pick an alternate name that also
-		# overlaps.
-		newobj=lt$counter-$objbase
-		func_arith $counter + 1
-		counter=$func_arith_result
-		case " $oldobjs " in
-		*[\ /]"$newobj "*) ;;
-		*) if test ! -f "$gentop/$newobj"; then break; fi ;;
-		esac
-	      done
-	      func_show_eval "ln $obj $gentop/$newobj || cp $obj $gentop/$newobj"
-	      func_append oldobjs " $gentop/$newobj"
-	      ;;
-	    *) func_append oldobjs " $obj" ;;
-	    esac
-	  done
-	fi
-	func_to_tool_file "$oldlib" func_convert_file_msys_to_w32
-	tool_oldlib=$func_to_tool_file_result
-	eval cmds=\"$old_archive_cmds\"
-
-	func_len " $cmds"
-	len=$func_len_result
-	if test "$len" -lt "$max_cmd_len" || test "$max_cmd_len" -le -1; then
-	  cmds=$old_archive_cmds
-	elif test -n "$archiver_list_spec"; then
-	  func_verbose "using command file archive linking..."
-	  for obj in $oldobjs
-	  do
-	    func_to_tool_file "$obj"
-	    $ECHO "$func_to_tool_file_result"
-	  done > $output_objdir/$libname.libcmd
-	  func_to_tool_file "$output_objdir/$libname.libcmd"
-	  oldobjs=" $archiver_list_spec$func_to_tool_file_result"
-	  cmds=$old_archive_cmds
-	else
-	  # the command line is too long to link in one step, link in parts
-	  func_verbose "using piecewise archive linking..."
-	  save_RANLIB=$RANLIB
-	  RANLIB=:
-	  objlist=
-	  concat_cmds=
-	  save_oldobjs=$oldobjs
-	  oldobjs=
-	  # Is there a better way of finding the last object in the list?
-	  for obj in $save_oldobjs
-	  do
-	    last_oldobj=$obj
-	  done
-	  eval test_cmds=\"$old_archive_cmds\"
-	  func_len " $test_cmds"
-	  len0=$func_len_result
-	  len=$len0
-	  for obj in $save_oldobjs
-	  do
-	    func_len " $obj"
-	    func_arith $len + $func_len_result
-	    len=$func_arith_result
-	    func_append objlist " $obj"
-	    if test "$len" -lt "$max_cmd_len"; then
-	      :
-	    else
-	      # the above command should be used before it gets too long
-	      oldobjs=$objlist
-	      if test "$obj" = "$last_oldobj"; then
-		RANLIB=$save_RANLIB
-	      fi
-	      test -z "$concat_cmds" || concat_cmds=$concat_cmds~
-	      eval concat_cmds=\"\$concat_cmds$old_archive_cmds\"
-	      objlist=
-	      len=$len0
-	    fi
-	  done
-	  RANLIB=$save_RANLIB
-	  oldobjs=$objlist
-	  if test -z "$oldobjs"; then
-	    eval cmds=\"\$concat_cmds\"
-	  else
-	    eval cmds=\"\$concat_cmds~\$old_archive_cmds\"
-	  fi
-	fi
-      fi
-      func_execute_cmds "$cmds" 'exit $?'
-    done
-
-    test -n "$generated" && \
-      func_show_eval "${RM}r$generated"
-
-    # Now create the libtool archive.
-    case $output in
-    *.la)
-      old_library=
-      test yes = "$build_old_libs" && old_library=$libname.$libext
-      func_verbose "creating $output"
-
-      # Preserve any variables that may affect compiler behavior
-      for var in $variables_saved_for_relink; do
-	if eval test -z \"\${$var+set}\"; then
-	  relink_command="{ test -z \"\${$var+set}\" || $lt_unset $var || { $var=; export $var; }; }; $relink_command"
-	elif eval var_value=\$$var; test -z "$var_value"; then
-	  relink_command="$var=; export $var; $relink_command"
-	else
-	  func_quote_arg pretty,unquoted "$var_value"
-	  relink_command="$var=$func_quote_arg_unquoted_result; export $var; $relink_command"
-	fi
-      done
-      # Quote the link command for shipping.
-      func_quote eval cd "`pwd`"
-      relink_command="($func_quote_result; $SHELL \"$progpath\" $preserve_args --mode=relink $libtool_args @inst_prefix_dir@)"
-      func_quote_arg pretty,unquoted "$relink_command"
-      relink_command=$func_quote_arg_unquoted_result
-      if test yes = "$hardcode_automatic"; then
-	relink_command=
-      fi
-
-      # Only create the output if not a dry run.
-      $opt_dry_run || {
-	for installed in no yes; do
-	  if test yes = "$installed"; then
-	    if test -z "$install_libdir"; then
-	      break
-	    fi
-	    output=$output_objdir/${outputname}i
-	    # Replace all uninstalled libtool libraries with the installed ones
-	    newdependency_libs=
-	    for deplib in $dependency_libs; do
-	      case $deplib in
-	      *.la)
-		func_basename "$deplib"
-		name=$func_basename_result
-		func_resolve_sysroot "$deplib"
-		eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $func_resolve_sysroot_result`
-		test -z "$libdir" && \
-		  func_fatal_error "'$deplib' is not a valid libtool archive"
-		func_append newdependency_libs " ${lt_sysroot:+=}$libdir/$name"
-		;;
-	      -L*)
-		func_stripname -L '' "$deplib"
-		func_replace_sysroot "$func_stripname_result"
-		func_append newdependency_libs " -L$func_replace_sysroot_result"
-		;;
-	      -R*)
-		func_stripname -R '' "$deplib"
-		func_replace_sysroot "$func_stripname_result"
-		func_append newdependency_libs " -R$func_replace_sysroot_result"
-		;;
-	      *) func_append newdependency_libs " $deplib" ;;
-	      esac
-	    done
-	    dependency_libs=$newdependency_libs
-	    newdlfiles=
-
-	    for lib in $dlfiles; do
-	      case $lib in
-	      *.la)
-	        func_basename "$lib"
-		name=$func_basename_result
-		eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $lib`
-		test -z "$libdir" && \
-		  func_fatal_error "'$lib' is not a valid libtool archive"
-		func_append newdlfiles " ${lt_sysroot:+=}$libdir/$name"
-		;;
-	      *) func_append newdlfiles " $lib" ;;
-	      esac
-	    done
-	    dlfiles=$newdlfiles
-	    newdlprefiles=
-	    for lib in $dlprefiles; do
-	      case $lib in
-	      *.la)
-		# Only pass preopened files to the pseudo-archive (for
-		# eventual linking with the app. that links it) if we
-		# didn't already link the preopened objects directly into
-		# the library:
-		func_basename "$lib"
-		name=$func_basename_result
-		eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $lib`
-		test -z "$libdir" && \
-		  func_fatal_error "'$lib' is not a valid libtool archive"
-		func_append newdlprefiles " ${lt_sysroot:+=}$libdir/$name"
-		;;
-	      esac
-	    done
-	    dlprefiles=$newdlprefiles
-	  else
-	    newdlfiles=
-	    for lib in $dlfiles; do
-	      case $lib in
-		[\\/]* | [A-Za-z]:[\\/]*) abs=$lib ;;
-		*) abs=`pwd`"/$lib" ;;
-	      esac
-	      func_append newdlfiles " $abs"
-	    done
-	    dlfiles=$newdlfiles
-	    newdlprefiles=
-	    for lib in $dlprefiles; do
-	      case $lib in
-		[\\/]* | [A-Za-z]:[\\/]*) abs=$lib ;;
-		*) abs=`pwd`"/$lib" ;;
-	      esac
-	      func_append newdlprefiles " $abs"
-	    done
-	    dlprefiles=$newdlprefiles
-	  fi
-	  $RM $output
-	  # place dlname in correct position for cygwin
-	  # In fact, it would be nice if we could use this code for all target
-	  # systems that can't hard-code library paths into their executables
-	  # and that have no shared library path variable independent of PATH,
-	  # but it turns out we can't easily determine that from inspecting
-	  # libtool variables, so we have to hard-code the OSs to which it
-	  # applies here; at the moment, that means platforms that use the PE
-	  # object format with DLL files.  See the long comment at the top of
-	  # tests/bindir.at for full details.
-	  tdlname=$dlname
-	  case $host,$output,$installed,$module,$dlname in
-	    *cygwin*,*lai,yes,no,*.dll | *mingw*,*lai,yes,no,*.dll | *windows*,*lai,yes,no,*.dll | *cegcc*,*lai,yes,no,*.dll)
-	      # If a -bindir argument was supplied, place the dll there.
-	      if test -n "$bindir"; then
-		func_relative_path "$install_libdir" "$bindir"
-		tdlname=$func_relative_path_result/$dlname
-	      else
-		# Otherwise fall back on heuristic.
-		tdlname=../bin/$dlname
-	      fi
-	      ;;
-	  esac
-	  $ECHO > $output "\
-# $outputname - a libtool library file
-# Generated by $PROGRAM (GNU $PACKAGE) $VERSION
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# The name that we can dlopen(3).
-dlname='$tdlname'
-
-# Names of this library.
-library_names='$library_names'
-
-# The name of the static archive.
-old_library='$old_library'
-
-# Linker flags that cannot go in dependency_libs.
-inherited_linker_flags='$new_inherited_linker_flags'
-
-# Libraries that this one depends upon.
-dependency_libs='$dependency_libs'
-
-# Names of additional weak libraries provided by this library
-weak_library_names='$weak_libs'
-
-# Version information for $libname.
-current=$current
-age=$age
-revision=$revision
-
-# Is this an already installed library?
-installed=$installed
-
-# Should we warn about portability when linking against -modules?
-shouldnotlink=$module
-
-# Files to dlopen/dlpreopen
-dlopen='$dlfiles'
-dlpreopen='$dlprefiles'
-
-# Directory that this library needs to be installed in:
-libdir='$install_libdir'"
-	  if test no,yes = "$installed,$need_relink"; then
-	    $ECHO >> $output "\
-relink_command=\"$relink_command\""
-	  fi
-	done
-      }
-
-      # Do a symbolic link so that the libtool archive can be found in
-      # LD_LIBRARY_PATH before the program is installed.
-      func_show_eval '( cd "$output_objdir" && $RM "$outputname" && $LN_S "../$outputname" "$outputname" )' 'exit $?'
-      ;;
-    esac
-    exit $EXIT_SUCCESS
-}
-
-if test link = "$opt_mode" || test relink = "$opt_mode"; then
-  func_mode_link ${1+"$@"}
-fi
-
-
-# func_mode_uninstall arg...
-func_mode_uninstall ()
-{
-    $debug_cmd
-
-    RM=$nonopt
-    files=
-    rmforce=false
-    exit_status=0
-
-    # This variable tells wrapper scripts just to set variables rather
-    # than running their programs.
-    libtool_install_magic=$magic
-
-    for arg
-    do
-      case $arg in
-      -f) func_append RM " $arg"; rmforce=: ;;
-      -*) func_append RM " $arg" ;;
-      *) func_append files " $arg" ;;
-      esac
-    done
-
-    test -z "$RM" && \
-      func_fatal_help "you must specify an RM program"
-
-    rmdirs=
-
-    for file in $files; do
-      func_dirname "$file" "" "."
-      dir=$func_dirname_result
-      if test . = "$dir"; then
-	odir=$objdir
-      else
-	odir=$dir/$objdir
-      fi
-      func_basename "$file"
-      name=$func_basename_result
-      test uninstall = "$opt_mode" && odir=$dir
-
-      # Remember odir for removal later, being careful to avoid duplicates
-      if test clean = "$opt_mode"; then
-	case " $rmdirs " in
-	  *" $odir "*) ;;
-	  *) func_append rmdirs " $odir" ;;
-	esac
-      fi
-
-      # Don't error if the file doesn't exist and rm -f was used.
-      if { test -L "$file"; } >/dev/null 2>&1 ||
-	 { test -h "$file"; } >/dev/null 2>&1 ||
-	 test -f "$file"; then
-	:
-      elif test -d "$file"; then
-	exit_status=1
-	continue
-      elif $rmforce; then
-	continue
-      fi
-
-      rmfiles=$file
-
-      case $name in
-      *.la)
-	# Possibly a libtool archive, so verify it.
-	if func_lalib_p "$file"; then
-	  func_source $dir/$name
-
-	  # Delete the libtool libraries and symlinks.
-	  for n in $library_names; do
-	    func_append rmfiles " $odir/$n"
-	  done
-	  test -n "$old_library" && func_append rmfiles " $odir/$old_library"
-
-	  case $opt_mode in
-	  clean)
-	    case " $library_names " in
-	    *" $dlname "*) ;;
-	    *) test -n "$dlname" && func_append rmfiles " $odir/$dlname" ;;
-	    esac
-	    test -n "$libdir" && func_append rmfiles " $odir/$name $odir/${name}i"
-	    ;;
-	  uninstall)
-	    if test -n "$library_names"; then
-	      # Do each command in the postuninstall commands.
-	      func_execute_cmds "$postuninstall_cmds" '$rmforce || exit_status=1'
-	    fi
-
-	    if test -n "$old_library"; then
-	      # Do each command in the old_postuninstall commands.
-	      func_execute_cmds "$old_postuninstall_cmds" '$rmforce || exit_status=1'
-	    fi
-	    # FIXME: should reinstall the best remaining shared library.
-	    ;;
-	  esac
-	fi
-	;;
-
-      *.lo)
-	# Possibly a libtool object, so verify it.
-	if func_lalib_p "$file"; then
-
-	  # Read the .lo file
-	  func_source $dir/$name
-
-	  # Add PIC object to the list of files to remove.
-	  if test -n "$pic_object" && test none != "$pic_object"; then
-	    func_append rmfiles " $dir/$pic_object"
-	  fi
-
-	  # Add non-PIC object to the list of files to remove.
-	  if test -n "$non_pic_object" && test none != "$non_pic_object"; then
-	    func_append rmfiles " $dir/$non_pic_object"
-	  fi
-	fi
-	;;
-
-      *)
-	if test clean = "$opt_mode"; then
-	  noexename=$name
-	  case $file in
-	  *.exe)
-	    func_stripname '' '.exe' "$file"
-	    file=$func_stripname_result
-	    func_stripname '' '.exe' "$name"
-	    noexename=$func_stripname_result
-	    # $file with .exe has already been added to rmfiles,
-	    # add $file without .exe
-	    func_append rmfiles " $file"
-	    ;;
-	  esac
-	  # Do a test to see if this is a libtool program.
-	  if func_ltwrapper_p "$file"; then
-	    if func_ltwrapper_executable_p "$file"; then
-	      func_ltwrapper_scriptname "$file"
-	      relink_command=
-	      func_source $func_ltwrapper_scriptname_result
-	      func_append rmfiles " $func_ltwrapper_scriptname_result"
-	    else
-	      relink_command=
-	      func_source $dir/$noexename
-	    fi
-
-	    # note $name still contains .exe if it was in $file originally
-	    # as does the version of $file that was added into $rmfiles
-	    func_append rmfiles " $odir/$name $odir/${name}S.$objext"
-	    if test yes = "$fast_install" && test -n "$relink_command"; then
-	      func_append rmfiles " $odir/lt-$name"
-	    fi
-	    if test "X$noexename" != "X$name"; then
-	      func_append rmfiles " $odir/lt-$noexename.c"
-	    fi
-	  fi
-	fi
-	;;
-      esac
-      func_show_eval "$RM $rmfiles" 'exit_status=1'
-    done
-
-    # Try to remove the $objdir's in the directories where we deleted files
-    for dir in $rmdirs; do
-      if test -d "$dir"; then
-	func_show_eval "rmdir $dir >/dev/null 2>&1"
-      fi
-    done
-
-    exit $exit_status
-}
-
-if test uninstall = "$opt_mode" || test clean = "$opt_mode"; then
-  func_mode_uninstall ${1+"$@"}
-fi
-
-test -z "$opt_mode" && {
-  help=$generic_help
-  func_fatal_help "you must specify a MODE"
-}
-
-test -z "$exec_cmd" && \
-  func_fatal_help "invalid operation mode '$opt_mode'"
-
-if test -n "$exec_cmd"; then
-  eval exec "$exec_cmd"
-  exit $EXIT_FAILURE
-fi
-
-exit $exit_status
-
-
-# The TAGs below are defined such that we never get into a situation
-# where we disable both kinds of libraries.  Given conflicting
-# choices, we go for a static library, that is the most portable,
-# since we can't tell whether shared libraries were disabled because
-# the user asked for that or because the platform doesn't support
-# them.  This is particularly important on AIX, because we don't
-# support having both static and shared libraries enabled at the same
-# time on that platform, so we default to a shared-only configuration.
-# If a disable-shared tag is given, we'll fallback to a static-only
-# configuration.  But we'll never go from static-only to shared-only.
-
-# ### BEGIN LIBTOOL TAG CONFIG: disable-shared
-build_libtool_libs=no
-build_old_libs=yes
-# ### END LIBTOOL TAG CONFIG: disable-shared
-
-# ### BEGIN LIBTOOL TAG CONFIG: disable-static
-build_old_libs=`case $build_libtool_libs in yes) echo no;; *) echo yes;; esac`
-# ### END LIBTOOL TAG CONFIG: disable-static
-
-# Local Variables:
-# mode:shell-script
-# sh-indentation:2
-# End:
diff --git a/experiments/wasm-gui/third_party/libXext/m4/libtool.m4 b/experiments/wasm-gui/third_party/libXext/m4/libtool.m4
deleted file mode 100644
index 8d323b3ee..000000000
--- a/experiments/wasm-gui/third_party/libXext/m4/libtool.m4
+++ /dev/null
@@ -1,8488 +0,0 @@
-# libtool.m4 - Configure libtool for the host system. -*-Autoconf-*-
-#
-#   Copyright (C) 1996-2001, 2003-2019, 2021-2024 Free Software
-#   Foundation, Inc.
-#   Written by Gordon Matzigkeit, 1996
-#
-# This file is free software; the Free Software Foundation gives
-# unlimited permission to copy and/or distribute it, with or without
-# modifications, as long as this notice is preserved.
-
-m4_define([_LT_COPYING], [dnl
-# Copyright (C) 2024 Free Software Foundation, Inc.
-# This is free software; see the source for copying conditions.  There is NO
-# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-
-# GNU Libtool is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program or library that is built
-# using GNU Libtool, you may include this file under the  same
-# distribution terms that you use for the rest of that program.
-#
-# GNU Libtool is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-])
-
-# serial 63 LT_INIT
-
-
-# LT_PREREQ(VERSION)
-# ------------------
-# Complain and exit if this libtool version is less that VERSION.
-m4_defun([LT_PREREQ],
-[m4_if(m4_version_compare(m4_defn([LT_PACKAGE_VERSION]), [$1]), -1,
-       [m4_default([$3],
-		   [m4_fatal([Libtool version $1 or higher is required],
-		             63)])],
-       [$2])])
-
-
-# _LT_CHECK_BUILDDIR
-# ------------------
-# Complain if the absolute build directory name contains unusual characters
-m4_defun([_LT_CHECK_BUILDDIR],
-[case `pwd` in
-  *\ * | *\	*)
-    AC_MSG_WARN([Libtool does not cope well with whitespace in `pwd`]) ;;
-esac
-])
-
-
-# LT_INIT([OPTIONS])
-# ------------------
-AC_DEFUN([LT_INIT],
-[AC_PREREQ([2.64])dnl We use AC_PATH_PROGS_FEATURE_CHECK
-AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl
-AC_BEFORE([$0], [LT_LANG])dnl
-AC_BEFORE([$0], [LT_OUTPUT])dnl
-AC_BEFORE([$0], [LTDL_INIT])dnl
-m4_require([_LT_CHECK_BUILDDIR])dnl
-
-dnl Autoconf doesn't catch unexpanded LT_ macros by default:
-m4_pattern_forbid([^_?LT_[A-Z_]+$])dnl
-m4_pattern_allow([^(_LT_EOF|LT_DLGLOBAL|LT_DLLAZY_OR_NOW|LT_MULTI_MODULE)$])dnl
-dnl aclocal doesn't pull ltoptions.m4, ltsugar.m4, or ltversion.m4
-dnl unless we require an AC_DEFUNed macro:
-AC_REQUIRE([LTOPTIONS_VERSION])dnl
-AC_REQUIRE([LTSUGAR_VERSION])dnl
-AC_REQUIRE([LTVERSION_VERSION])dnl
-AC_REQUIRE([LTOBSOLETE_VERSION])dnl
-m4_require([_LT_PROG_LTMAIN])dnl
-
-_LT_SHELL_INIT([SHELL=${CONFIG_SHELL-/bin/sh}])
-
-dnl Parse OPTIONS
-_LT_SET_OPTIONS([$0], [$1])
-
-# This can be used to rebuild libtool when needed
-LIBTOOL_DEPS=$ltmain
-
-# Always use our own libtool.
-LIBTOOL='$(SHELL) $(top_builddir)/libtool'
-AC_SUBST(LIBTOOL)dnl
-
-_LT_SETUP
-
-# Only expand once:
-m4_define([LT_INIT])
-])# LT_INIT
-
-# Old names:
-AU_ALIAS([AC_PROG_LIBTOOL], [LT_INIT])
-AU_ALIAS([AM_PROG_LIBTOOL], [LT_INIT])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_PROG_LIBTOOL], [])
-dnl AC_DEFUN([AM_PROG_LIBTOOL], [])
-
-
-# _LT_PREPARE_CC_BASENAME
-# -----------------------
-m4_defun([_LT_PREPARE_CC_BASENAME], [
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in @S|@*""; do
-      case $cc_temp in
-        compile | *[[\\/]]compile | ccache | *[[\\/]]ccache ) ;;
-        distcc | *[[\\/]]distcc | purify | *[[\\/]]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-])# _LT_PREPARE_CC_BASENAME
-
-
-# _LT_CC_BASENAME(CC)
-# -------------------
-# It would be clearer to call AC_REQUIREs from _LT_PREPARE_CC_BASENAME,
-# but that macro is also expanded into generated libtool script, which
-# arranges for $SED and $ECHO to be set by different means.
-m4_defun([_LT_CC_BASENAME],
-[m4_require([_LT_PREPARE_CC_BASENAME])dnl
-AC_REQUIRE([_LT_DECL_SED])dnl
-AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])dnl
-func_cc_basename $1
-cc_basename=$func_cc_basename_result
-])
-
-
-# _LT_FILEUTILS_DEFAULTS
-# ----------------------
-# It is okay to use these file commands and assume they have been set
-# sensibly after 'm4_require([_LT_FILEUTILS_DEFAULTS])'.
-m4_defun([_LT_FILEUTILS_DEFAULTS],
-[: ${CP="cp -f"}
-: ${MV="mv -f"}
-: ${RM="rm -f"}
-])# _LT_FILEUTILS_DEFAULTS
-
-
-# _LT_SETUP
-# ---------
-m4_defun([_LT_SETUP],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-AC_REQUIRE([AC_CANONICAL_BUILD])dnl
-AC_REQUIRE([_LT_PREPARE_SED_QUOTE_VARS])dnl
-AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])dnl
-
-_LT_DECL([], [PATH_SEPARATOR], [1], [The PATH separator for the build system])dnl
-dnl
-_LT_DECL([], [host_alias], [0], [The host system])dnl
-_LT_DECL([], [host], [0])dnl
-_LT_DECL([], [host_os], [0])dnl
-dnl
-_LT_DECL([], [build_alias], [0], [The build system])dnl
-_LT_DECL([], [build], [0])dnl
-_LT_DECL([], [build_os], [0])dnl
-dnl
-AC_REQUIRE([AC_PROG_CC])dnl
-AC_REQUIRE([LT_PATH_LD])dnl
-AC_REQUIRE([LT_PATH_NM])dnl
-dnl
-AC_REQUIRE([AC_PROG_LN_S])dnl
-test -z "$LN_S" && LN_S="ln -s"
-_LT_DECL([], [LN_S], [1], [Whether we need soft or hard links])dnl
-dnl
-AC_REQUIRE([LT_CMD_MAX_LEN])dnl
-_LT_DECL([objext], [ac_objext], [0], [Object file suffix (normally "o")])dnl
-_LT_DECL([], [exeext], [0], [Executable file suffix (normally "")])dnl
-dnl
-m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_CHECK_SHELL_FEATURES])dnl
-m4_require([_LT_PATH_CONVERSION_FUNCTIONS])dnl
-m4_require([_LT_CMD_RELOAD])dnl
-m4_require([_LT_DECL_FILECMD])dnl
-m4_require([_LT_CHECK_MAGIC_METHOD])dnl
-m4_require([_LT_CHECK_SHAREDLIB_FROM_LINKLIB])dnl
-m4_require([_LT_CMD_OLD_ARCHIVE])dnl
-m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl
-m4_require([_LT_WITH_SYSROOT])dnl
-m4_require([_LT_CMD_TRUNCATE])dnl
-
-_LT_CONFIG_LIBTOOL_INIT([
-# See if we are running on zsh, and set the options that allow our
-# commands through without removal of \ escapes INIT.
-if test -n "\${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-])
-if test -n "${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-_LT_CHECK_OBJDIR
-
-m4_require([_LT_TAG_COMPILER])dnl
-
-case $host_os in
-aix3*)
-  # AIX sometimes has problems with the GCC collect2 program.  For some
-  # reason, if we set the COLLECT_NAMES environment variable, the problems
-  # vanish in a puff of smoke.
-  if test set != "${COLLECT_NAMES+set}"; then
-    COLLECT_NAMES=
-    export COLLECT_NAMES
-  fi
-  ;;
-esac
-
-# Global variables:
-ofile=libtool
-can_build_shared=yes
-
-# All known linkers require a '.a' archive for static linking (except MSVC and
-# ICC, which need '.lib').
-libext=a
-
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-old_CC=$CC
-old_CFLAGS=$CFLAGS
-
-# Set sane defaults for various variables
-test -z "$CC" && CC=cc
-test -z "$LTCC" && LTCC=$CC
-test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS
-test -z "$LD" && LD=ld
-test -z "$ac_objext" && ac_objext=o
-
-_LT_CC_BASENAME([$compiler])
-
-# Only perform the check for file, if the check method requires it
-test -z "$MAGIC_CMD" && MAGIC_CMD=file
-case $deplibs_check_method in
-file_magic*)
-  if test "$file_magic_cmd" = '$MAGIC_CMD'; then
-    _LT_PATH_MAGIC
-  fi
-  ;;
-esac
-
-# Use C for the default configuration in the libtool script
-LT_SUPPORTED_TAG([CC])
-_LT_LANG_C_CONFIG
-_LT_LANG_DEFAULT_CONFIG
-_LT_CONFIG_COMMANDS
-])# _LT_SETUP
-
-
-# _LT_PREPARE_SED_QUOTE_VARS
-# --------------------------
-# Define a few sed substitution that help us do robust quoting.
-m4_defun([_LT_PREPARE_SED_QUOTE_VARS],
-[# Backslashify metacharacters that are still active within
-# double-quoted strings.
-sed_quote_subst='s/\([["`$\\]]\)/\\\1/g'
-
-# Same as above, but do not quote variable references.
-double_quote_subst='s/\([["`\\]]\)/\\\1/g'
-
-# Sed substitution to delay expansion of an escaped shell variable in a
-# double_quote_subst'ed string.
-delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g'
-
-# Sed substitution to delay expansion of an escaped single quote.
-delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g'
-
-# Sed substitution to avoid accidental globbing in evaled expressions
-no_glob_subst='s/\*/\\\*/g'
-])
-
-# _LT_PROG_LTMAIN
-# ---------------
-# Note that this code is called both from 'configure', and 'config.status'
-# now that we use AC_CONFIG_COMMANDS to generate libtool.  Notably,
-# 'config.status' has no value for ac_aux_dir unless we are using Automake,
-# so we pass a copy along to make sure it has a sensible value anyway.
-m4_defun([_LT_PROG_LTMAIN],
-[m4_ifdef([AC_REQUIRE_AUX_FILE], [AC_REQUIRE_AUX_FILE([ltmain.sh])])dnl
-_LT_CONFIG_LIBTOOL_INIT([ac_aux_dir='$ac_aux_dir'])
-ltmain=$ac_aux_dir/ltmain.sh
-])# _LT_PROG_LTMAIN
-
-
-## ------------------------------------- ##
-## Accumulate code for creating libtool. ##
-## ------------------------------------- ##
-
-# So that we can recreate a full libtool script including additional
-# tags, we accumulate the chunks of code to send to AC_CONFIG_COMMANDS
-# in macros and then make a single call at the end using the 'libtool'
-# label.
-
-
-# _LT_CONFIG_LIBTOOL_INIT([INIT-COMMANDS])
-# ----------------------------------------
-# Register INIT-COMMANDS to be passed to AC_CONFIG_COMMANDS later.
-m4_define([_LT_CONFIG_LIBTOOL_INIT],
-[m4_ifval([$1],
-          [m4_append([_LT_OUTPUT_LIBTOOL_INIT],
-                     [$1
-])])])
-
-# Initialize.
-m4_define([_LT_OUTPUT_LIBTOOL_INIT])
-
-
-# _LT_CONFIG_LIBTOOL([COMMANDS])
-# ------------------------------
-# Register COMMANDS to be passed to AC_CONFIG_COMMANDS later.
-m4_define([_LT_CONFIG_LIBTOOL],
-[m4_ifval([$1],
-          [m4_append([_LT_OUTPUT_LIBTOOL_COMMANDS],
-                     [$1
-])])])
-
-# Initialize.
-m4_define([_LT_OUTPUT_LIBTOOL_COMMANDS])
-
-
-# _LT_CONFIG_SAVE_COMMANDS([COMMANDS], [INIT_COMMANDS])
-# -----------------------------------------------------
-m4_defun([_LT_CONFIG_SAVE_COMMANDS],
-[_LT_CONFIG_LIBTOOL([$1])
-_LT_CONFIG_LIBTOOL_INIT([$2])
-])
-
-
-# _LT_FORMAT_COMMENT([COMMENT])
-# -----------------------------
-# Add leading comment marks to the start of each line, and a trailing
-# full-stop to the whole comment if one is not present already.
-m4_define([_LT_FORMAT_COMMENT],
-[m4_ifval([$1], [
-m4_bpatsubst([m4_bpatsubst([$1], [^ *], [# ])],
-              [['`$\]], [\\\&])]m4_bmatch([$1], [[!?.]$], [], [.])
-)])
-
-
-
-## ------------------------ ##
-## FIXME: Eliminate VARNAME ##
-## ------------------------ ##
-
-
-# _LT_DECL([CONFIGNAME], VARNAME, VALUE, [DESCRIPTION], [IS-TAGGED?])
-# -------------------------------------------------------------------
-# CONFIGNAME is the name given to the value in the libtool script.
-# VARNAME is the (base) name used in the configure script.
-# VALUE may be 0, 1 or 2 for a computed quote escaped value based on
-# VARNAME.  Any other value will be used directly.
-m4_define([_LT_DECL],
-[lt_if_append_uniq([lt_decl_varnames], [$2], [, ],
-    [lt_dict_add_subkey([lt_decl_dict], [$2], [libtool_name],
-	[m4_ifval([$1], [$1], [$2])])
-    lt_dict_add_subkey([lt_decl_dict], [$2], [value], [$3])
-    m4_ifval([$4],
-	[lt_dict_add_subkey([lt_decl_dict], [$2], [description], [$4])])
-    lt_dict_add_subkey([lt_decl_dict], [$2],
-	[tagged?], [m4_ifval([$5], [yes], [no])])])
-])
-
-
-# _LT_TAGDECL([CONFIGNAME], VARNAME, VALUE, [DESCRIPTION])
-# --------------------------------------------------------
-m4_define([_LT_TAGDECL], [_LT_DECL([$1], [$2], [$3], [$4], [yes])])
-
-
-# lt_decl_tag_varnames([SEPARATOR], [VARNAME1...])
-# ------------------------------------------------
-m4_define([lt_decl_tag_varnames],
-[_lt_decl_filter([tagged?], [yes], $@)])
-
-
-# _lt_decl_filter(SUBKEY, VALUE, [SEPARATOR], [VARNAME1..])
-# ---------------------------------------------------------
-m4_define([_lt_decl_filter],
-[m4_case([$#],
-  [0], [m4_fatal([$0: too few arguments: $#])],
-  [1], [m4_fatal([$0: too few arguments: $#: $1])],
-  [2], [lt_dict_filter([lt_decl_dict], [$1], [$2], [], lt_decl_varnames)],
-  [3], [lt_dict_filter([lt_decl_dict], [$1], [$2], [$3], lt_decl_varnames)],
-  [lt_dict_filter([lt_decl_dict], $@)])[]dnl
-])
-
-
-# lt_decl_quote_varnames([SEPARATOR], [VARNAME1...])
-# --------------------------------------------------
-m4_define([lt_decl_quote_varnames],
-[_lt_decl_filter([value], [1], $@)])
-
-
-# lt_decl_dquote_varnames([SEPARATOR], [VARNAME1...])
-# ---------------------------------------------------
-m4_define([lt_decl_dquote_varnames],
-[_lt_decl_filter([value], [2], $@)])
-
-
-# lt_decl_varnames_tagged([SEPARATOR], [VARNAME1...])
-# ---------------------------------------------------
-m4_define([lt_decl_varnames_tagged],
-[m4_assert([$# <= 2])dnl
-_$0(m4_quote(m4_default([$1], [[, ]])),
-    m4_ifval([$2], [[$2]], [m4_dquote(lt_decl_tag_varnames)]),
-    m4_split(m4_normalize(m4_quote(_LT_TAGS)), [ ]))])
-m4_define([_lt_decl_varnames_tagged],
-[m4_ifval([$3], [lt_combine([$1], [$2], [_], $3)])])
-
-
-# lt_decl_all_varnames([SEPARATOR], [VARNAME1...])
-# ------------------------------------------------
-m4_define([lt_decl_all_varnames],
-[_$0(m4_quote(m4_default([$1], [[, ]])),
-     m4_if([$2], [],
-	   m4_quote(lt_decl_varnames),
-	m4_quote(m4_shift($@))))[]dnl
-])
-m4_define([_lt_decl_all_varnames],
-[lt_join($@, lt_decl_varnames_tagged([$1],
-			lt_decl_tag_varnames([[, ]], m4_shift($@))))dnl
-])
-
-
-# _LT_CONFIG_STATUS_DECLARE([VARNAME])
-# ------------------------------------
-# Quote a variable value, and forward it to 'config.status' so that its
-# declaration there will have the same value as in 'configure'.  VARNAME
-# must have a single quote delimited value for this to work.
-m4_define([_LT_CONFIG_STATUS_DECLARE],
-[$1='`$ECHO "$][$1" | $SED "$delay_single_quote_subst"`'])
-
-
-# _LT_CONFIG_STATUS_DECLARATIONS
-# ------------------------------
-# We delimit libtool config variables with single quotes, so when
-# we write them to config.status, we have to be sure to quote all
-# embedded single quotes properly.  In configure, this macro expands
-# each variable declared with _LT_DECL (and _LT_TAGDECL) into:
-#
-#    <var>='`$ECHO "$<var>" | $SED "$delay_single_quote_subst"`'
-m4_defun([_LT_CONFIG_STATUS_DECLARATIONS],
-[m4_foreach([_lt_var], m4_quote(lt_decl_all_varnames),
-    [m4_n([_LT_CONFIG_STATUS_DECLARE(_lt_var)])])])
-
-
-# _LT_LIBTOOL_TAGS
-# ----------------
-# Output comment and list of tags supported by the script
-m4_defun([_LT_LIBTOOL_TAGS],
-[_LT_FORMAT_COMMENT([The names of the tagged configurations supported by this script])dnl
-available_tags='_LT_TAGS'dnl
-])
-
-
-# _LT_LIBTOOL_DECLARE(VARNAME, [TAG])
-# -----------------------------------
-# Extract the dictionary values for VARNAME (optionally with TAG) and
-# expand to a commented shell variable setting:
-#
-#    # Some comment about what VAR is for.
-#    visible_name=$lt_internal_name
-m4_define([_LT_LIBTOOL_DECLARE],
-[_LT_FORMAT_COMMENT(m4_quote(lt_dict_fetch([lt_decl_dict], [$1],
-					   [description])))[]dnl
-m4_pushdef([_libtool_name],
-    m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [libtool_name])))[]dnl
-m4_case(m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [value])),
-    [0], [_libtool_name=[$]$1],
-    [1], [_libtool_name=$lt_[]$1],
-    [2], [_libtool_name=$lt_[]$1],
-    [_libtool_name=lt_dict_fetch([lt_decl_dict], [$1], [value])])[]dnl
-m4_ifval([$2], [_$2])[]m4_popdef([_libtool_name])[]dnl
-])
-
-
-# _LT_LIBTOOL_CONFIG_VARS
-# -----------------------
-# Produce commented declarations of non-tagged libtool config variables
-# suitable for insertion in the LIBTOOL CONFIG section of the 'libtool'
-# script.  Tagged libtool config variables (even for the LIBTOOL CONFIG
-# section) are produced by _LT_LIBTOOL_TAG_VARS.
-m4_defun([_LT_LIBTOOL_CONFIG_VARS],
-[m4_foreach([_lt_var],
-    m4_quote(_lt_decl_filter([tagged?], [no], [], lt_decl_varnames)),
-    [m4_n([_LT_LIBTOOL_DECLARE(_lt_var)])])])
-
-
-# _LT_LIBTOOL_TAG_VARS(TAG)
-# -------------------------
-m4_define([_LT_LIBTOOL_TAG_VARS],
-[m4_foreach([_lt_var], m4_quote(lt_decl_tag_varnames),
-    [m4_n([_LT_LIBTOOL_DECLARE(_lt_var, [$1])])])])
-
-
-# _LT_TAGVAR(VARNAME, [TAGNAME])
-# ------------------------------
-m4_define([_LT_TAGVAR], [m4_ifval([$2], [$1_$2], [$1])])
-
-
-# _LT_CONFIG_COMMANDS
-# -------------------
-# Send accumulated output to $CONFIG_STATUS.  Thanks to the lists of
-# variables for single and double quote escaping we saved from calls
-# to _LT_DECL, we can put quote escaped variables declarations
-# into 'config.status', and then the shell code to quote escape them in
-# for loops in 'config.status'.  Finally, any additional code accumulated
-# from calls to _LT_CONFIG_LIBTOOL_INIT is expanded.
-m4_defun([_LT_CONFIG_COMMANDS],
-[AC_PROVIDE_IFELSE([LT_OUTPUT],
-	dnl If the libtool generation code has been placed in $CONFIG_LT,
-	dnl instead of duplicating it all over again into config.status,
-	dnl then we will have config.status run $CONFIG_LT later, so it
-	dnl needs to know what name is stored there:
-        [AC_CONFIG_COMMANDS([libtool],
-            [$SHELL $CONFIG_LT || AS_EXIT(1)], [CONFIG_LT='$CONFIG_LT'])],
-    dnl If the libtool generation code is destined for config.status,
-    dnl expand the accumulated commands and init code now:
-    [AC_CONFIG_COMMANDS([libtool],
-        [_LT_OUTPUT_LIBTOOL_COMMANDS], [_LT_OUTPUT_LIBTOOL_COMMANDS_INIT])])
-])#_LT_CONFIG_COMMANDS
-
-
-# Initialize.
-m4_define([_LT_OUTPUT_LIBTOOL_COMMANDS_INIT],
-[
-
-# The HP-UX ksh and POSIX shell print the target directory to stdout
-# if CDPATH is set.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-sed_quote_subst='$sed_quote_subst'
-double_quote_subst='$double_quote_subst'
-delay_variable_subst='$delay_variable_subst'
-_LT_CONFIG_STATUS_DECLARATIONS
-LTCC='$LTCC'
-LTCFLAGS='$LTCFLAGS'
-compiler='$compiler_DEFAULT'
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-\$[]1
-_LTECHO_EOF'
-}
-
-# Quote evaled strings.
-for var in lt_decl_all_varnames([[ \
-]], lt_decl_quote_varnames); do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[[\\\\\\\`\\"\\\$]]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-# Double-quote double-evaled strings.
-for var in lt_decl_all_varnames([[ \
-]], lt_decl_dquote_varnames); do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[[\\\\\\\`\\"\\\$]]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-_LT_OUTPUT_LIBTOOL_INIT
-])
-
-# _LT_GENERATED_FILE_INIT(FILE, [COMMENT])
-# ------------------------------------
-# Generate a child script FILE with all initialization necessary to
-# reuse the environment learned by the parent script, and make the
-# file executable.  If COMMENT is supplied, it is inserted after the
-# '#!' sequence but before initialization text begins.  After this
-# macro, additional text can be appended to FILE to form the body of
-# the child script.  The macro ends with non-zero status if the
-# file could not be fully written (such as if the disk is full).
-m4_ifdef([AS_INIT_GENERATED],
-[m4_defun([_LT_GENERATED_FILE_INIT],[AS_INIT_GENERATED($@)])],
-[m4_defun([_LT_GENERATED_FILE_INIT],
-[m4_require([AS_PREPARE])]dnl
-[m4_pushdef([AS_MESSAGE_LOG_FD])]dnl
-[lt_write_fail=0
-cat >$1 <<_ASEOF || lt_write_fail=1
-#! $SHELL
-# Generated by $as_me.
-$2
-SHELL=\${CONFIG_SHELL-$SHELL}
-export SHELL
-_ASEOF
-cat >>$1 <<\_ASEOF || lt_write_fail=1
-AS_SHELL_SANITIZE
-_AS_PREPARE
-exec AS_MESSAGE_FD>&1
-_ASEOF
-test 0 = "$lt_write_fail" && chmod +x $1[]dnl
-m4_popdef([AS_MESSAGE_LOG_FD])])])# _LT_GENERATED_FILE_INIT
-
-# LT_OUTPUT
-# ---------
-# This macro allows early generation of the libtool script (before
-# AC_OUTPUT is called), in case it is used in configure for compilation
-# tests.
-AC_DEFUN([LT_OUTPUT],
-[: ${CONFIG_LT=./config.lt}
-AC_MSG_NOTICE([creating $CONFIG_LT])
-_LT_GENERATED_FILE_INIT(["$CONFIG_LT"],
-[# Run this file to recreate a libtool stub with the current configuration.])
-
-cat >>"$CONFIG_LT" <<\_LTEOF
-lt_cl_silent=false
-exec AS_MESSAGE_LOG_FD>>config.log
-{
-  echo
-  AS_BOX([Running $as_me.])
-} >&AS_MESSAGE_LOG_FD
-
-lt_cl_help="\
-'$as_me' creates a local libtool stub from the current configuration,
-for use in further configure time tests before the real libtool is
-generated.
-
-Usage: $[0] [[OPTIONS]]
-
-  -h, --help      print this help, then exit
-  -V, --version   print version number, then exit
-  -q, --quiet     do not print progress messages
-  -d, --debug     don't remove temporary files
-
-Report bugs to <bug-libtool@gnu.org>."
-
-lt_cl_version="\
-m4_ifset([AC_PACKAGE_NAME], [AC_PACKAGE_NAME ])config.lt[]dnl
-m4_ifset([AC_PACKAGE_VERSION], [ AC_PACKAGE_VERSION])
-configured by $[0], generated by m4_PACKAGE_STRING.
-
-Copyright (C) 2024 Free Software Foundation, Inc.
-This config.lt script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it."
-
-while test 0 != $[#]
-do
-  case $[1] in
-    --version | --v* | -V )
-      echo "$lt_cl_version"; exit 0 ;;
-    --help | --h* | -h )
-      echo "$lt_cl_help"; exit 0 ;;
-    --debug | --d* | -d )
-      debug=: ;;
-    --quiet | --q* | --silent | --s* | -q )
-      lt_cl_silent=: ;;
-
-    -*) AC_MSG_ERROR([unrecognized option: $[1]
-Try '$[0] --help' for more information.]) ;;
-
-    *) AC_MSG_ERROR([unrecognized argument: $[1]
-Try '$[0] --help' for more information.]) ;;
-  esac
-  shift
-done
-
-if $lt_cl_silent; then
-  exec AS_MESSAGE_FD>/dev/null
-fi
-_LTEOF
-
-cat >>"$CONFIG_LT" <<_LTEOF
-_LT_OUTPUT_LIBTOOL_COMMANDS_INIT
-_LTEOF
-
-cat >>"$CONFIG_LT" <<\_LTEOF
-AC_MSG_NOTICE([creating $ofile])
-_LT_OUTPUT_LIBTOOL_COMMANDS
-AS_EXIT(0)
-_LTEOF
-chmod +x "$CONFIG_LT"
-
-# configure is writing to config.log, but config.lt does its own redirection,
-# appending to config.log, which fails on DOS, as config.log is still kept
-# open by configure.  Here we exec the FD to /dev/null, effectively closing
-# config.log, so it can be properly (re)opened and appended to by config.lt.
-lt_cl_success=:
-test yes = "$silent" &&
-  lt_config_lt_args="$lt_config_lt_args --quiet"
-exec AS_MESSAGE_LOG_FD>/dev/null
-$SHELL "$CONFIG_LT" $lt_config_lt_args || lt_cl_success=false
-exec AS_MESSAGE_LOG_FD>>config.log
-$lt_cl_success || AS_EXIT(1)
-])# LT_OUTPUT
-
-
-# _LT_CONFIG(TAG)
-# ---------------
-# If TAG is the built-in tag, create an initial libtool script with a
-# default configuration from the untagged config vars.  Otherwise add code
-# to config.status for appending the configuration named by TAG from the
-# matching tagged config vars.
-m4_defun([_LT_CONFIG],
-[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-_LT_CONFIG_SAVE_COMMANDS([
-  m4_define([_LT_TAG], m4_if([$1], [], [C], [$1]))dnl
-  m4_if(_LT_TAG, [C], [
-    # See if we are running on zsh, and set the options that allow our
-    # commands through without removal of \ escapes.
-    if test -n "${ZSH_VERSION+set}"; then
-      setopt NO_GLOB_SUBST
-    fi
-
-    cfgfile=${ofile}T
-    trap "$RM \"$cfgfile\"; exit 1" 1 2 15
-    $RM "$cfgfile"
-
-    cat <<_LT_EOF >> "$cfgfile"
-#! $SHELL
-# Generated automatically by $as_me ($PACKAGE) $VERSION
-# NOTE: Changes made to this file will be lost: look at ltmain.sh.
-
-# Provide generalized library-building support services.
-# Written by Gordon Matzigkeit, 1996
-
-_LT_COPYING
-_LT_LIBTOOL_TAGS
-
-# Configured defaults for sys_lib_dlsearch_path munging.
-: \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"}
-
-# ### BEGIN LIBTOOL CONFIG
-_LT_LIBTOOL_CONFIG_VARS
-_LT_LIBTOOL_TAG_VARS
-# ### END LIBTOOL CONFIG
-
-_LT_EOF
-
-    cat <<'_LT_EOF' >> "$cfgfile"
-
-# ### BEGIN FUNCTIONS SHARED WITH CONFIGURE
-
-_LT_PREPARE_MUNGE_PATH_LIST
-_LT_PREPARE_CC_BASENAME
-
-# ### END FUNCTIONS SHARED WITH CONFIGURE
-
-_LT_EOF
-
-  case $host_os in
-  aix3*)
-    cat <<\_LT_EOF >> "$cfgfile"
-# AIX sometimes has problems with the GCC collect2 program.  For some
-# reason, if we set the COLLECT_NAMES environment variable, the problems
-# vanish in a puff of smoke.
-if test set != "${COLLECT_NAMES+set}"; then
-  COLLECT_NAMES=
-  export COLLECT_NAMES
-fi
-_LT_EOF
-    ;;
-  esac
-
-  _LT_PROG_LTMAIN
-
-  # We use sed instead of cat because bash on DJGPP gets confused if
-  # if finds mixed CR/LF and LF-only lines.  Since sed operates in
-  # text mode, it properly converts lines to CR/LF.  This bash problem
-  # is reportedly fixed, but why not run on old versions too?
-  $SED '$q' "$ltmain" >> "$cfgfile" \
-     || (rm -f "$cfgfile"; exit 1)
-
-   mv -f "$cfgfile" "$ofile" ||
-    (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile")
-  chmod +x "$ofile"
-],
-[cat <<_LT_EOF >> "$ofile"
-
-dnl Unfortunately we have to use $1 here, since _LT_TAG is not expanded
-dnl in a comment (ie after a #).
-# ### BEGIN LIBTOOL TAG CONFIG: $1
-_LT_LIBTOOL_TAG_VARS(_LT_TAG)
-# ### END LIBTOOL TAG CONFIG: $1
-_LT_EOF
-])dnl /m4_if
-],
-[m4_if([$1], [], [
-    PACKAGE='$PACKAGE'
-    VERSION='$VERSION'
-    RM='$RM'
-    ofile='$ofile'], [])
-])dnl /_LT_CONFIG_SAVE_COMMANDS
-])# _LT_CONFIG
-
-
-# LT_SUPPORTED_TAG(TAG)
-# ---------------------
-# Trace this macro to discover what tags are supported by the libtool
-# --tag option, using:
-#    autoconf --trace 'LT_SUPPORTED_TAG:$1'
-AC_DEFUN([LT_SUPPORTED_TAG], [])
-
-
-# C support is built-in for now
-m4_define([_LT_LANG_C_enabled], [])
-m4_define([_LT_TAGS], [])
-
-
-# LT_LANG(LANG)
-# -------------
-# Enable libtool support for the given language if not already enabled.
-AC_DEFUN([LT_LANG],
-[AC_BEFORE([$0], [LT_OUTPUT])dnl
-m4_case([$1],
-  [C],			[_LT_LANG(C)],
-  [C++],		[_LT_LANG(CXX)],
-  [Go],			[_LT_LANG(GO)],
-  [Java],		[_LT_LANG(GCJ)],
-  [Fortran 77],		[_LT_LANG(F77)],
-  [Fortran],		[_LT_LANG(FC)],
-  [Windows Resource],	[_LT_LANG(RC)],
-  [m4_ifdef([_LT_LANG_]$1[_CONFIG],
-    [_LT_LANG($1)],
-    [m4_fatal([$0: unsupported language: "$1"])])])dnl
-])# LT_LANG
-
-
-# _LT_LANG(LANGNAME)
-# ------------------
-m4_defun([_LT_LANG],
-[m4_ifdef([_LT_LANG_]$1[_enabled], [],
-  [LT_SUPPORTED_TAG([$1])dnl
-  m4_append([_LT_TAGS], [$1 ])dnl
-  m4_define([_LT_LANG_]$1[_enabled], [])dnl
-  _LT_LANG_$1_CONFIG($1)])dnl
-])# _LT_LANG
-
-
-m4_ifndef([AC_PROG_GO], [
-############################################################
-# NOTE: This macro has been submitted for inclusion into   #
-#  GNU Autoconf as AC_PROG_GO.  When it is available in    #
-#  a released version of Autoconf we should remove this    #
-#  macro and use it instead.                               #
-############################################################
-m4_defun([AC_PROG_GO],
-[AC_LANG_PUSH(Go)dnl
-AC_ARG_VAR([GOC],     [Go compiler command])dnl
-AC_ARG_VAR([GOFLAGS], [Go compiler flags])dnl
-_AC_ARG_VAR_LDFLAGS()dnl
-AC_CHECK_TOOL(GOC, gccgo)
-if test -z "$GOC"; then
-  if test -n "$ac_tool_prefix"; then
-    AC_CHECK_PROG(GOC, [${ac_tool_prefix}gccgo], [${ac_tool_prefix}gccgo])
-  fi
-fi
-if test -z "$GOC"; then
-  AC_CHECK_PROG(GOC, gccgo, gccgo, false)
-fi
-])#m4_defun
-])#m4_ifndef
-
-
-# _LT_LANG_DEFAULT_CONFIG
-# -----------------------
-m4_defun([_LT_LANG_DEFAULT_CONFIG],
-[AC_PROVIDE_IFELSE([AC_PROG_CXX],
-  [LT_LANG(CXX)],
-  [m4_define([AC_PROG_CXX], defn([AC_PROG_CXX])[LT_LANG(CXX)])])
-
-AC_PROVIDE_IFELSE([AC_PROG_F77],
-  [LT_LANG(F77)],
-  [m4_define([AC_PROG_F77], defn([AC_PROG_F77])[LT_LANG(F77)])])
-
-AC_PROVIDE_IFELSE([AC_PROG_FC],
-  [LT_LANG(FC)],
-  [m4_define([AC_PROG_FC], defn([AC_PROG_FC])[LT_LANG(FC)])])
-
-dnl The call to [A][M_PROG_GCJ] is quoted like that to stop aclocal
-dnl pulling things in needlessly.
-AC_PROVIDE_IFELSE([AC_PROG_GCJ],
-  [LT_LANG(GCJ)],
-  [AC_PROVIDE_IFELSE([A][M_PROG_GCJ],
-    [LT_LANG(GCJ)],
-    [AC_PROVIDE_IFELSE([LT_PROG_GCJ],
-      [LT_LANG(GCJ)],
-      [m4_ifdef([AC_PROG_GCJ],
-	[m4_define([AC_PROG_GCJ], defn([AC_PROG_GCJ])[LT_LANG(GCJ)])])
-       m4_ifdef([A][M_PROG_GCJ],
-	[m4_define([A][M_PROG_GCJ], defn([A][M_PROG_GCJ])[LT_LANG(GCJ)])])
-       m4_ifdef([LT_PROG_GCJ],
-	[m4_define([LT_PROG_GCJ], defn([LT_PROG_GCJ])[LT_LANG(GCJ)])])])])])
-
-AC_PROVIDE_IFELSE([AC_PROG_GO],
-  [LT_LANG(GO)],
-  [m4_define([AC_PROG_GO], defn([AC_PROG_GO])[LT_LANG(GO)])])
-
-AC_PROVIDE_IFELSE([LT_PROG_RC],
-  [LT_LANG(RC)],
-  [m4_define([LT_PROG_RC], defn([LT_PROG_RC])[LT_LANG(RC)])])
-])# _LT_LANG_DEFAULT_CONFIG
-
-# Obsolete macros:
-AU_DEFUN([AC_LIBTOOL_CXX], [LT_LANG(C++)])
-AU_DEFUN([AC_LIBTOOL_F77], [LT_LANG(Fortran 77)])
-AU_DEFUN([AC_LIBTOOL_FC], [LT_LANG(Fortran)])
-AU_DEFUN([AC_LIBTOOL_GCJ], [LT_LANG(Java)])
-AU_DEFUN([AC_LIBTOOL_RC], [LT_LANG(Windows Resource)])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_CXX], [])
-dnl AC_DEFUN([AC_LIBTOOL_F77], [])
-dnl AC_DEFUN([AC_LIBTOOL_FC], [])
-dnl AC_DEFUN([AC_LIBTOOL_GCJ], [])
-dnl AC_DEFUN([AC_LIBTOOL_RC], [])
-
-
-# _LT_TAG_COMPILER
-# ----------------
-m4_defun([_LT_TAG_COMPILER],
-[AC_REQUIRE([AC_PROG_CC])dnl
-
-_LT_DECL([LTCC], [CC], [1], [A C compiler])dnl
-_LT_DECL([LTCFLAGS], [CFLAGS], [1], [LTCC compiler flags])dnl
-_LT_TAGDECL([CC], [compiler], [1], [A language specific compiler])dnl
-_LT_TAGDECL([with_gcc], [GCC], [0], [Is the compiler the GNU compiler?])dnl
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-])# _LT_TAG_COMPILER
-
-
-# _LT_COMPILER_BOILERPLATE
-# ------------------------
-# Check for compiler boilerplate output or warnings with
-# the simple compiler test code.
-m4_defun([_LT_COMPILER_BOILERPLATE],
-[m4_require([_LT_DECL_SED])dnl
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_compile_test_code" >conftest.$ac_ext
-eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_compiler_boilerplate=`cat conftest.err`
-$RM conftest*
-])# _LT_COMPILER_BOILERPLATE
-
-
-# _LT_LINKER_BOILERPLATE
-# ----------------------
-# Check for linker boilerplate output or warnings with
-# the simple link test code.
-m4_defun([_LT_LINKER_BOILERPLATE],
-[m4_require([_LT_DECL_SED])dnl
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_link_test_code" >conftest.$ac_ext
-eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_linker_boilerplate=`cat conftest.err`
-$RM -r conftest*
-])# _LT_LINKER_BOILERPLATE
-
-
-# _LT_REQUIRED_DARWIN_CHECKS
-# -------------------------
-m4_defun_once([_LT_REQUIRED_DARWIN_CHECKS],[
-  case $host_os in
-    rhapsody* | darwin*)
-    AC_CHECK_TOOL([DSYMUTIL], [dsymutil], [:])
-    AC_CHECK_TOOL([NMEDIT], [nmedit], [:])
-    AC_CHECK_TOOL([LIPO], [lipo], [:])
-    AC_CHECK_TOOL([OTOOL], [otool], [:])
-    AC_CHECK_TOOL([OTOOL64], [otool64], [:])
-    _LT_DECL([], [DSYMUTIL], [1],
-      [Tool to manipulate archived DWARF debug symbol files on Mac OS X])
-    _LT_DECL([], [NMEDIT], [1],
-      [Tool to change global to local symbols on Mac OS X])
-    _LT_DECL([], [LIPO], [1],
-      [Tool to manipulate fat objects and archives on Mac OS X])
-    _LT_DECL([], [OTOOL], [1],
-      [ldd/readelf like tool for Mach-O binaries on Mac OS X])
-    _LT_DECL([], [OTOOL64], [1],
-      [ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4])
-
-    AC_CACHE_CHECK([for -single_module linker flag],[lt_cv_apple_cc_single_mod],
-      [lt_cv_apple_cc_single_mod=no
-      if test -z "$LT_MULTI_MODULE"; then
-	# By default we will add the -single_module flag. You can override
-	# by either setting the environment variable LT_MULTI_MODULE
-	# non-empty at configure time, or by adding -multi_module to the
-	# link flags.
-	rm -rf libconftest.dylib*
-	echo "int foo(void){return 1;}" > conftest.c
-	echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
--dynamiclib -Wl,-single_module conftest.c" >&AS_MESSAGE_LOG_FD
-	$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
-	  -dynamiclib -Wl,-single_module conftest.c 2>conftest.err
-        _lt_result=$?
-	# If there is a non-empty error log, and "single_module"
-	# appears in it, assume the flag caused a linker warning
-        if test -s conftest.err && $GREP single_module conftest.err; then
-	  cat conftest.err >&AS_MESSAGE_LOG_FD
-	# Otherwise, if the output was created with a 0 exit code from
-	# the compiler, it worked.
-	elif test -f libconftest.dylib && test 0 = "$_lt_result"; then
-	  lt_cv_apple_cc_single_mod=yes
-	else
-	  cat conftest.err >&AS_MESSAGE_LOG_FD
-	fi
-	rm -rf libconftest.dylib*
-	rm -f conftest.*
-      fi])
-
-    # Feature test to disable chained fixups since it is not
-    # compatible with '-undefined dynamic_lookup'
-    AC_CACHE_CHECK([for -no_fixup_chains linker flag],
-      [lt_cv_support_no_fixup_chains],
-      [ save_LDFLAGS=$LDFLAGS
-        LDFLAGS="$LDFLAGS -Wl,-no_fixup_chains"
-        AC_LINK_IFELSE(
-          [AC_LANG_PROGRAM([],[])],
-          lt_cv_support_no_fixup_chains=yes,
-          lt_cv_support_no_fixup_chains=no
-        )
-        LDFLAGS=$save_LDFLAGS
-      ]
-    )
-
-    AC_CACHE_CHECK([for -exported_symbols_list linker flag],
-      [lt_cv_ld_exported_symbols_list],
-      [lt_cv_ld_exported_symbols_list=no
-      save_LDFLAGS=$LDFLAGS
-      echo "_main" > conftest.sym
-      LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym"
-      AC_LINK_IFELSE([AC_LANG_PROGRAM([],[])],
-	[lt_cv_ld_exported_symbols_list=yes],
-	[lt_cv_ld_exported_symbols_list=no])
-	LDFLAGS=$save_LDFLAGS
-    ])
-
-    AC_CACHE_CHECK([for -force_load linker flag],[lt_cv_ld_force_load],
-      [lt_cv_ld_force_load=no
-      cat > conftest.c << _LT_EOF
-int forced_loaded() { return 2;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&AS_MESSAGE_LOG_FD
-      $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&AS_MESSAGE_LOG_FD
-      echo "$AR $AR_FLAGS libconftest.a conftest.o" >&AS_MESSAGE_LOG_FD
-      $AR $AR_FLAGS libconftest.a conftest.o 2>&AS_MESSAGE_LOG_FD
-      echo "$RANLIB libconftest.a" >&AS_MESSAGE_LOG_FD
-      $RANLIB libconftest.a 2>&AS_MESSAGE_LOG_FD
-      cat > conftest.c << _LT_EOF
-int main(void) { return 0;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&AS_MESSAGE_LOG_FD
-      $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err
-      _lt_result=$?
-      if test -s conftest.err && $GREP force_load conftest.err; then
-	cat conftest.err >&AS_MESSAGE_LOG_FD
-      elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then
-	lt_cv_ld_force_load=yes
-      else
-	cat conftest.err >&AS_MESSAGE_LOG_FD
-      fi
-        rm -f conftest.err libconftest.a conftest conftest.c
-        rm -rf conftest.dSYM
-    ])
-    case $host_os in
-    rhapsody* | darwin1.[[012]])
-      _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;;
-    darwin1.*)
-      _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-    darwin*)
-      case $MACOSX_DEPLOYMENT_TARGET,$host in
-        10.[[012]],*|,*powerpc*-darwin[[5-8]]*)
-          _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-        *)
-          _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup'
-          if test yes = "$lt_cv_support_no_fixup_chains"; then
-            AS_VAR_APPEND([_lt_dar_allow_undefined], [' $wl-no_fixup_chains'])
-          fi
-        ;;
-      esac
-    ;;
-  esac
-    if test yes = "$lt_cv_apple_cc_single_mod"; then
-      _lt_dar_single_mod='$single_module'
-    fi
-    _lt_dar_needs_single_mod=no
-    case $host_os in
-    rhapsody* | darwin1.*)
-      _lt_dar_needs_single_mod=yes ;;
-    darwin*)
-      # When targeting Mac OS X 10.4 (darwin 8) or later,
-      # -single_module is the default and -multi_module is unsupported.
-      # The toolchain on macOS 10.14 (darwin 18) and later cannot
-      # target any OS version that needs -single_module.
-      case ${MACOSX_DEPLOYMENT_TARGET-10.0},$host in
-      10.0,*-darwin[[567]].*|10.[[0-3]],*-darwin[[5-9]].*|10.[[0-3]],*-darwin1[[0-7]].*)
-        _lt_dar_needs_single_mod=yes ;;
-      esac
-    ;;
-    esac
-    if test yes = "$lt_cv_ld_exported_symbols_list"; then
-      _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym'
-    else
-      _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib'
-    fi
-    if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then
-      _lt_dsymutil='~$DSYMUTIL $lib || :'
-    else
-      _lt_dsymutil=
-    fi
-    ;;
-  esac
-])
-
-
-# _LT_DARWIN_LINKER_FEATURES([TAG])
-# ---------------------------------
-# Checks for linker and compiler features on darwin
-m4_defun([_LT_DARWIN_LINKER_FEATURES],
-[
-  m4_require([_LT_REQUIRED_DARWIN_CHECKS])
-  _LT_TAGVAR(archive_cmds_need_lc, $1)=no
-  _LT_TAGVAR(hardcode_direct, $1)=no
-  _LT_TAGVAR(hardcode_automatic, $1)=yes
-  _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported
-  if test yes = "$lt_cv_ld_force_load"; then
-    _LT_TAGVAR(whole_archive_flag_spec, $1)='`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`'
-    m4_case([$1], [F77], [_LT_TAGVAR(compiler_needs_object, $1)=yes],
-                  [FC],  [_LT_TAGVAR(compiler_needs_object, $1)=yes])
-  else
-    _LT_TAGVAR(whole_archive_flag_spec, $1)=''
-  fi
-  _LT_TAGVAR(link_all_deplibs, $1)=yes
-  _LT_TAGVAR(allow_undefined_flag, $1)=$_lt_dar_allow_undefined
-  case $cc_basename in
-     ifort*|nagfor*) _lt_dar_can_shared=yes ;;
-     *) _lt_dar_can_shared=$GCC ;;
-  esac
-  if test yes = "$_lt_dar_can_shared"; then
-    output_verbose_link_cmd=func_echo_all
-    _LT_TAGVAR(archive_cmds, $1)="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil"
-    _LT_TAGVAR(module_cmds, $1)="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil"
-    _LT_TAGVAR(archive_expsym_cmds, $1)="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil"
-    _LT_TAGVAR(module_expsym_cmds, $1)="$SED -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil"
-    m4_if([$1], [CXX],
-[   if test yes = "$_lt_dar_needs_single_mod" -a yes != "$lt_cv_apple_cc_single_mod"; then
-      _LT_TAGVAR(archive_cmds, $1)="\$CC -r -keep_private_externs -nostdlib -o \$lib-master.o \$libobjs~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$lib-master.o \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring$_lt_dsymutil"
-      _LT_TAGVAR(archive_expsym_cmds, $1)="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -r -keep_private_externs -nostdlib -o \$lib-master.o \$libobjs~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$lib-master.o \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring$_lt_dar_export_syms$_lt_dsymutil"
-    fi
-],[])
-  else
-  _LT_TAGVAR(ld_shlibs, $1)=no
-  fi
-])
-
-# _LT_SYS_MODULE_PATH_AIX([TAGNAME])
-# ----------------------------------
-# Links a minimal program and checks the executable
-# for the system default hardcoded library path. In most cases,
-# this is /usr/lib:/lib, but when the MPI compilers are used
-# the location of the communication and MPI libs are included too.
-# If we don't find anything, use the default library path according
-# to the aix ld manual.
-# Store the results from the different compilers for each TAGNAME.
-# Allow to override them for all tags through lt_cv_aix_libpath.
-m4_defun([_LT_SYS_MODULE_PATH_AIX],
-[m4_require([_LT_DECL_SED])dnl
-if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  AC_CACHE_VAL([_LT_TAGVAR([lt_cv_aix_libpath_], [$1])],
-  [AC_LINK_IFELSE([AC_LANG_PROGRAM],[
-  lt_aix_libpath_sed='[
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }]'
-  _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])"; then
-    _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi],[])
-  if test -z "$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])"; then
-    _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=/usr/lib:/lib
-  fi
-  ])
-  aix_libpath=$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])
-fi
-])# _LT_SYS_MODULE_PATH_AIX
-
-
-# _LT_SHELL_INIT(ARG)
-# -------------------
-m4_define([_LT_SHELL_INIT],
-[m4_divert_text([M4SH-INIT], [$1
-])])# _LT_SHELL_INIT
-
-
-
-# _LT_PROG_ECHO_BACKSLASH
-# -----------------------
-# Find how we can fake an echo command that does not interpret backslash.
-# In particular, with Autoconf 2.60 or later we add some code to the start
-# of the generated configure script that will find a shell with a builtin
-# printf (that we can use as an echo command).
-m4_defun([_LT_PROG_ECHO_BACKSLASH],
-[ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO
-
-AC_MSG_CHECKING([how to print strings])
-# Test print first, because it will be a builtin if present.
-if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \
-   test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='print -r --'
-elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='printf %s\n'
-else
-  # Use this function as a fallback that always works.
-  func_fallback_echo ()
-  {
-    eval 'cat <<_LTECHO_EOF
-$[]1
-_LTECHO_EOF'
-  }
-  ECHO='func_fallback_echo'
-fi
-
-# func_echo_all arg...
-# Invoke $ECHO with all args, space-separated.
-func_echo_all ()
-{
-    $ECHO "$*"
-}
-
-case $ECHO in
-  printf*) AC_MSG_RESULT([printf]) ;;
-  print*) AC_MSG_RESULT([print -r]) ;;
-  *) AC_MSG_RESULT([cat]) ;;
-esac
-
-m4_ifdef([_AS_DETECT_SUGGESTED],
-[_AS_DETECT_SUGGESTED([
-  test -n "${ZSH_VERSION+set}${BASH_VERSION+set}" || (
-    ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-    ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO
-    ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO
-    PATH=/empty FPATH=/empty; export PATH FPATH
-    test "X`printf %s $ECHO`" = "X$ECHO" \
-      || test "X`print -r -- $ECHO`" = "X$ECHO" )])])
-
-_LT_DECL([], [SHELL], [1], [Shell to use when invoking shell scripts])
-_LT_DECL([], [ECHO], [1], [An echo program that protects backslashes])
-])# _LT_PROG_ECHO_BACKSLASH
-
-
-# _LT_WITH_SYSROOT
-# ----------------
-AC_DEFUN([_LT_WITH_SYSROOT],
-[m4_require([_LT_DECL_SED])dnl
-AC_MSG_CHECKING([for sysroot])
-AC_ARG_WITH([sysroot],
-[AS_HELP_STRING([--with-sysroot@<:@=DIR@:>@],
-  [Search for dependent libraries within DIR (or the compiler's sysroot
-   if not specified).])],
-[], [with_sysroot=no])
-
-dnl lt_sysroot will always be passed unquoted.  We quote it here
-dnl in case the user passed a directory name.
-lt_sysroot=
-case $with_sysroot in #(
- yes)
-   if test yes = "$GCC"; then
-     # Trim trailing / since we'll always append absolute paths and we want
-     # to avoid //, if only for less confusing output for the user.
-     lt_sysroot=`$CC --print-sysroot 2>/dev/null | $SED 's:/\+$::'`
-   fi
-   ;; #(
- /*)
-   lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"`
-   ;; #(
- no|'')
-   ;; #(
- *)
-   AC_MSG_RESULT([$with_sysroot])
-   AC_MSG_ERROR([The sysroot must be an absolute path.])
-   ;;
-esac
-
- AC_MSG_RESULT([${lt_sysroot:-no}])
-_LT_DECL([], [lt_sysroot], [0], [The root where to search for ]dnl
-[dependent libraries, and where our libraries should be installed.])])
-
-# _LT_ENABLE_LOCK
-# ---------------
-m4_defun([_LT_ENABLE_LOCK],
-[AC_ARG_ENABLE([libtool-lock],
-  [AS_HELP_STRING([--disable-libtool-lock],
-    [avoid locking (might break parallel builds)])])
-test no = "$enable_libtool_lock" || enable_libtool_lock=yes
-
-# Some flags need to be propagated to the compiler or linker for good
-# libtool support.
-case $host in
-ia64-*-hpux*)
-  # Find out what ABI is being produced by ac_compile, and set mode
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if AC_TRY_EVAL(ac_compile); then
-    case `$FILECMD conftest.$ac_objext` in
-      *ELF-32*)
-	HPUX_IA64_MODE=32
-	;;
-      *ELF-64*)
-	HPUX_IA64_MODE=64
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-*-*-irix6*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '[#]line '$LINENO' "configure"' > conftest.$ac_ext
-  if AC_TRY_EVAL(ac_compile); then
-    if test yes = "$lt_cv_prog_gnu_ld"; then
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -melf32bsmip"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -melf32bmipn32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -melf64bmip"
-	;;
-      esac
-    else
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -32"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -n32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -64"
-	  ;;
-      esac
-    fi
-  fi
-  rm -rf conftest*
-  ;;
-
-mips64*-*linux*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '[#]line '$LINENO' "configure"' > conftest.$ac_ext
-  if AC_TRY_EVAL(ac_compile); then
-    emul=elf
-    case `$FILECMD conftest.$ac_objext` in
-      *32-bit*)
-	emul="${emul}32"
-	;;
-      *64-bit*)
-	emul="${emul}64"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *MSB*)
-	emul="${emul}btsmip"
-	;;
-      *LSB*)
-	emul="${emul}ltsmip"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *N32*)
-	emul="${emul}n32"
-	;;
-    esac
-    LD="${LD-ld} -m $emul"
-  fi
-  rm -rf conftest*
-  ;;
-
-x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \
-s390*-*linux*|s390*-*tpf*|sparc*-*linux*|x86_64-gnu*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.  Note that the listed cases only cover the
-  # situations where additional linker options are needed (such as when
-  # doing 32-bit compilation for a host where ld defaults to 64-bit, or
-  # vice versa); the common cases where no linker options are needed do
-  # not appear in the list.
-  echo 'int i;' > conftest.$ac_ext
-  if AC_TRY_EVAL(ac_compile); then
-    case `$FILECMD conftest.o` in
-      *32-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_i386_fbsd"
-	    ;;
-	  x86_64-*linux*|x86_64-gnu*)
-	    case `$FILECMD conftest.o` in
-	      *x86-64*)
-		LD="${LD-ld} -m elf32_x86_64"
-		;;
-	      *)
-		LD="${LD-ld} -m elf_i386"
-		;;
-	    esac
-	    ;;
-	  powerpc64le-*linux*)
-	    LD="${LD-ld} -m elf32lppclinux"
-	    ;;
-	  powerpc64-*linux*)
-	    LD="${LD-ld} -m elf32ppclinux"
-	    ;;
-	  s390x-*linux*)
-	    LD="${LD-ld} -m elf_s390"
-	    ;;
-	  sparc64-*linux*)
-	    LD="${LD-ld} -m elf32_sparc"
-	    ;;
-	esac
-	;;
-      *64-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_x86_64_fbsd"
-	    ;;
-	  x86_64-*linux*|x86_64-gnu*)
-	    LD="${LD-ld} -m elf_x86_64"
-	    ;;
-	  powerpcle-*linux*)
-	    LD="${LD-ld} -m elf64lppc"
-	    ;;
-	  powerpc-*linux*)
-	    LD="${LD-ld} -m elf64ppc"
-	    ;;
-	  s390*-*linux*|s390*-*tpf*)
-	    LD="${LD-ld} -m elf64_s390"
-	    ;;
-	  sparc*-*linux*)
-	    LD="${LD-ld} -m elf64_sparc"
-	    ;;
-	esac
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-
-*-*-sco3.2v5*)
-  # On SCO OpenServer 5, we need -belf to get full-featured binaries.
-  SAVE_CFLAGS=$CFLAGS
-  CFLAGS="$CFLAGS -belf"
-  AC_CACHE_CHECK([whether the C compiler needs -belf], lt_cv_cc_needs_belf,
-    [AC_LANG_PUSH(C)
-     AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],[[]])],[lt_cv_cc_needs_belf=yes],[lt_cv_cc_needs_belf=no])
-     AC_LANG_POP])
-  if test yes != "$lt_cv_cc_needs_belf"; then
-    # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf
-    CFLAGS=$SAVE_CFLAGS
-  fi
-  ;;
-*-*solaris*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if AC_TRY_EVAL(ac_compile); then
-    case `$FILECMD conftest.o` in
-    *64-bit*)
-      case $lt_cv_prog_gnu_ld in
-      yes*)
-        case $host in
-        i?86-*-solaris*|x86_64-*-solaris*)
-          LD="${LD-ld} -m elf_x86_64"
-          ;;
-        sparc*-*-solaris*)
-          LD="${LD-ld} -m elf64_sparc"
-          ;;
-        esac
-        # GNU ld 2.21 introduced _sol2 emulations.  Use them if available.
-        if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then
-          LD=${LD-ld}_sol2
-        fi
-        ;;
-      *)
-	if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then
-	  LD="${LD-ld} -64"
-	fi
-	;;
-      esac
-      ;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-esac
-
-need_locks=$enable_libtool_lock
-])# _LT_ENABLE_LOCK
-
-
-# _LT_PROG_AR
-# -----------
-m4_defun([_LT_PROG_AR],
-[AC_CHECK_TOOLS(AR, [ar], false)
-: ${AR=ar}
-_LT_DECL([], [AR], [1], [The archiver])
-
-# Use ARFLAGS variable as AR's operation code to sync the variable naming with
-# Automake.  If both AR_FLAGS and ARFLAGS are specified, AR_FLAGS should have
-# higher priority because that's what people were doing historically (setting
-# ARFLAGS for automake and AR_FLAGS for libtool).  FIXME: Make the AR_FLAGS
-# variable obsoleted/removed.
-
-test ${AR_FLAGS+y} || AR_FLAGS=${ARFLAGS-cr}
-lt_ar_flags=$AR_FLAGS
-_LT_DECL([], [lt_ar_flags], [0], [Flags to create an archive (by configure)])
-
-# Make AR_FLAGS overridable by 'make ARFLAGS='.  Don't try to run-time override
-# by AR_FLAGS because that was never working and AR_FLAGS is about to die.
-_LT_DECL([], [AR_FLAGS], [\@S|@{ARFLAGS-"\@S|@lt_ar_flags"}],
-         [Flags to create an archive])
-
-AC_CACHE_CHECK([for archiver @FILE support], [lt_cv_ar_at_file],
-  [lt_cv_ar_at_file=no
-   AC_COMPILE_IFELSE([AC_LANG_PROGRAM],
-     [echo conftest.$ac_objext > conftest.lst
-      lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&AS_MESSAGE_LOG_FD'
-      AC_TRY_EVAL([lt_ar_try])
-      if test 0 -eq "$ac_status"; then
-	# Ensure the archiver fails upon bogus file names.
-	rm -f conftest.$ac_objext libconftest.a
-	AC_TRY_EVAL([lt_ar_try])
-	if test 0 -ne "$ac_status"; then
-          lt_cv_ar_at_file=@
-        fi
-      fi
-      rm -f conftest.* libconftest.a
-     ])
-  ])
-
-if test no = "$lt_cv_ar_at_file"; then
-  archiver_list_spec=
-else
-  archiver_list_spec=$lt_cv_ar_at_file
-fi
-_LT_DECL([], [archiver_list_spec], [1],
-  [How to feed a file listing to the archiver])
-])# _LT_PROG_AR
-
-
-# _LT_CMD_OLD_ARCHIVE
-# -------------------
-m4_defun([_LT_CMD_OLD_ARCHIVE],
-[_LT_PROG_AR
-
-AC_CHECK_TOOL(STRIP, strip, :)
-test -z "$STRIP" && STRIP=:
-_LT_DECL([], [STRIP], [1], [A symbol stripping program])
-
-AC_REQUIRE([AC_PROG_RANLIB])
-test -z "$RANLIB" && RANLIB=:
-_LT_DECL([], [RANLIB], [1],
-    [Commands used to install an old-style archive])
-
-# Determine commands to create old-style static archives.
-old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs'
-old_postinstall_cmds='chmod 644 $oldlib'
-old_postuninstall_cmds=
-
-if test -n "$RANLIB"; then
-  old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib"
-  old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib"
-fi
-
-case $host_os in
-  darwin*)
-    lock_old_archive_extraction=yes ;;
-  *)
-    lock_old_archive_extraction=no ;;
-esac
-_LT_DECL([], [old_postinstall_cmds], [2])
-_LT_DECL([], [old_postuninstall_cmds], [2])
-_LT_TAGDECL([], [old_archive_cmds], [2],
-    [Commands used to build an old-style archive])
-_LT_DECL([], [lock_old_archive_extraction], [0],
-    [Whether to use a lock for old archive extraction])
-])# _LT_CMD_OLD_ARCHIVE
-
-
-# _LT_COMPILER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS,
-#		[OUTPUT-FILE], [ACTION-SUCCESS], [ACTION-FAILURE])
-# ----------------------------------------------------------------
-# Check whether the given compiler option works
-AC_DEFUN([_LT_COMPILER_OPTION],
-[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_SED])dnl
-AC_CACHE_CHECK([$1], [$2],
-  [$2=no
-   m4_if([$4], , [ac_outfile=conftest.$ac_objext], [ac_outfile=$4])
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$3"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&AS_MESSAGE_LOG_FD
-   echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       $2=yes
-     fi
-   fi
-   $RM conftest*
-])
-
-if test yes = "[$]$2"; then
-    m4_if([$5], , :, [$5])
-else
-    m4_if([$6], , :, [$6])
-fi
-])# _LT_COMPILER_OPTION
-
-# Old name:
-AU_ALIAS([AC_LIBTOOL_COMPILER_OPTION], [_LT_COMPILER_OPTION])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_COMPILER_OPTION], [])
-
-
-# _LT_LINKER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS,
-#                  [ACTION-SUCCESS], [ACTION-FAILURE])
-# ----------------------------------------------------
-# Check whether the given linker option works
-AC_DEFUN([_LT_LINKER_OPTION],
-[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_SED])dnl
-AC_CACHE_CHECK([$1], [$2],
-  [$2=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $3"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&AS_MESSAGE_LOG_FD
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         $2=yes
-       fi
-     else
-       $2=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
-])
-
-if test yes = "[$]$2"; then
-    m4_if([$4], , :, [$4])
-else
-    m4_if([$5], , :, [$5])
-fi
-])# _LT_LINKER_OPTION
-
-# Old name:
-AU_ALIAS([AC_LIBTOOL_LINKER_OPTION], [_LT_LINKER_OPTION])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_LINKER_OPTION], [])
-
-
-# LT_CMD_MAX_LEN
-#---------------
-AC_DEFUN([LT_CMD_MAX_LEN],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-# find the maximum length of command line arguments
-AC_MSG_CHECKING([the maximum length of command line arguments])
-AC_CACHE_VAL([lt_cv_sys_max_cmd_len], [dnl
-  i=0
-  teststring=ABCD
-
-  case $build_os in
-  msdosdjgpp*)
-    # On DJGPP, this test can blow up pretty badly due to problems in libc
-    # (any single argument exceeding 2000 bytes causes a buffer overrun
-    # during glob expansion).  Even if it were fixed, the result of this
-    # check would be larger than it should be.
-    lt_cv_sys_max_cmd_len=12288;    # 12K is about right
-    ;;
-
-  gnu* | ironclad*)
-    # Under GNU Hurd and Ironclad, this test is not required because there
-    # is no limit to the length of command line arguments.
-    # Libtool will interpret -1 as no limit whatsoever
-    lt_cv_sys_max_cmd_len=-1;
-    ;;
-
-  cygwin* | mingw* | windows* | cegcc*)
-    # On Win9x/ME, this test blows up -- it succeeds, but takes
-    # about 5 minutes as the teststring grows exponentially.
-    # Worse, since 9x/ME are not pre-emptively multitasking,
-    # you end up with a "frozen" computer, even though with patience
-    # the test eventually succeeds (with a max line length of 256k).
-    # Instead, let's just punt: use the minimum linelength reported by
-    # all of the supported platforms: 8192 (on NT/2K/XP).
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  mint*)
-    # On MiNT this can take a long time and run out of memory.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  amigaos*)
-    # On AmigaOS with pdksh, this test takes hours, literally.
-    # So we just punt and use a minimum line length of 8192.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*)
-    # This has been around since 386BSD, at least.  Likely further.
-    if test -x /sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax`
-    elif test -x /usr/sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax`
-    else
-      lt_cv_sys_max_cmd_len=65536	# usable default for all BSDs
-    fi
-    # And add a safety zone
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    ;;
-
-  interix*)
-    # We know the value 262144 and hardcode it with a safety zone (like BSD)
-    lt_cv_sys_max_cmd_len=196608
-    ;;
-
-  os2*)
-    # The test takes a long time on OS/2.
-    lt_cv_sys_max_cmd_len=8192
-    ;;
-
-  osf*)
-    # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure
-    # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not
-    # nice to cause kernel panics so lets avoid the loop below.
-    # First set a reasonable default.
-    lt_cv_sys_max_cmd_len=16384
-    #
-    if test -x /sbin/sysconfig; then
-      case `/sbin/sysconfig -q proc exec_disable_arg_limit` in
-        *1*) lt_cv_sys_max_cmd_len=-1 ;;
-      esac
-    fi
-    ;;
-  sco3.2v5*)
-    lt_cv_sys_max_cmd_len=102400
-    ;;
-  sysv5* | sco5v6* | sysv4.2uw2*)
-    kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null`
-    if test -n "$kargmax"; then
-      lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[[	 ]]//'`
-    else
-      lt_cv_sys_max_cmd_len=32768
-    fi
-    ;;
-  *)
-    lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null`
-    if test -n "$lt_cv_sys_max_cmd_len" && \
-       test undefined != "$lt_cv_sys_max_cmd_len"; then
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    else
-      # Make teststring a little bigger before we do anything with it.
-      # a 1K string should be a reasonable start.
-      for i in 1 2 3 4 5 6 7 8; do
-        teststring=$teststring$teststring
-      done
-      SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}}
-      # If test is not a shell built-in, we'll probably end up computing a
-      # maximum length that is only half of the actual maximum length, but
-      # we can't tell.
-      while { test X`env echo "$teststring$teststring" 2>/dev/null` \
-	         = "X$teststring$teststring"; } >/dev/null 2>&1 &&
-	      test 17 != "$i" # 1/2 MB should be enough
-      do
-        i=`expr $i + 1`
-        teststring=$teststring$teststring
-      done
-      # Only check the string length outside the loop.
-      lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1`
-      teststring=
-      # Add a significant safety factor because C++ compilers can tack on
-      # massive amounts of additional arguments before passing them to the
-      # linker.  It appears as though 1/2 is a usable value.
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2`
-    fi
-    ;;
-  esac
-])
-if test -n "$lt_cv_sys_max_cmd_len"; then
-  AC_MSG_RESULT($lt_cv_sys_max_cmd_len)
-else
-  AC_MSG_RESULT(none)
-fi
-max_cmd_len=$lt_cv_sys_max_cmd_len
-_LT_DECL([], [max_cmd_len], [0],
-    [What is the maximum length of a command?])
-])# LT_CMD_MAX_LEN
-
-# Old name:
-AU_ALIAS([AC_LIBTOOL_SYS_MAX_CMD_LEN], [LT_CMD_MAX_LEN])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_SYS_MAX_CMD_LEN], [])
-
-
-# _LT_HEADER_DLFCN
-# ----------------
-m4_defun([_LT_HEADER_DLFCN],
-[AC_CHECK_HEADERS([dlfcn.h], [], [], [AC_INCLUDES_DEFAULT])dnl
-])# _LT_HEADER_DLFCN
-
-
-# _LT_TRY_DLOPEN_SELF (ACTION-IF-TRUE, ACTION-IF-TRUE-W-USCORE,
-#                      ACTION-IF-FALSE, ACTION-IF-CROSS-COMPILING)
-# ----------------------------------------------------------------
-m4_defun([_LT_TRY_DLOPEN_SELF],
-[m4_require([_LT_HEADER_DLFCN])dnl
-if test yes = "$cross_compiling"; then :
-  [$4]
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-[#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord (void) __attribute__((visibility("default")));
-#endif
-
-int fnord (void) { return 42; }
-int main (void)
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}]
-_LT_EOF
-  if AC_TRY_EVAL(ac_link) && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&AS_MESSAGE_LOG_FD 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) $1 ;;
-      x$lt_dlneed_uscore) $2 ;;
-      x$lt_dlunknown|x*) $3 ;;
-    esac
-  else :
-    # compilation failed
-    $3
-  fi
-fi
-rm -fr conftest*
-])# _LT_TRY_DLOPEN_SELF
-
-
-# LT_SYS_DLOPEN_SELF
-# ------------------
-AC_DEFUN([LT_SYS_DLOPEN_SELF],
-[m4_require([_LT_HEADER_DLFCN])dnl
-if test yes != "$enable_dlopen"; then
-  enable_dlopen=unknown
-  enable_dlopen_self=unknown
-  enable_dlopen_self_static=unknown
-else
-  lt_cv_dlopen=no
-  lt_cv_dlopen_libs=
-
-  case $host_os in
-  beos*)
-    lt_cv_dlopen=load_add_on
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ;;
-
-  mingw* | windows* | pw32* | cegcc*)
-    lt_cv_dlopen=LoadLibrary
-    lt_cv_dlopen_libs=
-    ;;
-
-  cygwin*)
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    ;;
-
-  darwin*)
-    # if libdl is installed we need to link against it
-    AC_CHECK_LIB([dl], [dlopen],
-		[lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl],[
-    lt_cv_dlopen=dyld
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ])
-    ;;
-
-  tpf*)
-    # Don't try to run any link tests for TPF.  We know it's impossible
-    # because TPF is a cross-compiler, and we know how we open DSOs.
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=no
-    ;;
-
-  *)
-    AC_CHECK_FUNC([shl_load],
-	  [lt_cv_dlopen=shl_load],
-      [AC_CHECK_LIB([dld], [shl_load],
-	    [lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld],
-	[AC_CHECK_FUNC([dlopen],
-	      [lt_cv_dlopen=dlopen],
-	  [AC_CHECK_LIB([dl], [dlopen],
-		[lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl],
-	    [AC_CHECK_LIB([svld], [dlopen],
-		  [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld],
-	      [AC_CHECK_LIB([dld], [dld_link],
-		    [lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld])
-	      ])
-	    ])
-	  ])
-	])
-      ])
-    ;;
-  esac
-
-  if test no = "$lt_cv_dlopen"; then
-    enable_dlopen=no
-  else
-    enable_dlopen=yes
-  fi
-
-  case $lt_cv_dlopen in
-  dlopen)
-    save_CPPFLAGS=$CPPFLAGS
-    test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H"
-
-    save_LDFLAGS=$LDFLAGS
-    wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\"
-
-    save_LIBS=$LIBS
-    LIBS="$lt_cv_dlopen_libs $LIBS"
-
-    AC_CACHE_CHECK([whether a program can dlopen itself],
-	  lt_cv_dlopen_self, [dnl
-	  _LT_TRY_DLOPEN_SELF(
-	    lt_cv_dlopen_self=yes, lt_cv_dlopen_self=yes,
-	    lt_cv_dlopen_self=no, lt_cv_dlopen_self=cross)
-    ])
-
-    if test yes = "$lt_cv_dlopen_self"; then
-      wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\"
-      AC_CACHE_CHECK([whether a statically linked program can dlopen itself],
-	  lt_cv_dlopen_self_static, [dnl
-	  _LT_TRY_DLOPEN_SELF(
-	    lt_cv_dlopen_self_static=yes, lt_cv_dlopen_self_static=yes,
-	    lt_cv_dlopen_self_static=no,  lt_cv_dlopen_self_static=cross)
-      ])
-    fi
-
-    CPPFLAGS=$save_CPPFLAGS
-    LDFLAGS=$save_LDFLAGS
-    LIBS=$save_LIBS
-    ;;
-  esac
-
-  case $lt_cv_dlopen_self in
-  yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;;
-  *) enable_dlopen_self=unknown ;;
-  esac
-
-  case $lt_cv_dlopen_self_static in
-  yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;;
-  *) enable_dlopen_self_static=unknown ;;
-  esac
-fi
-_LT_DECL([dlopen_support], [enable_dlopen], [0],
-	 [Whether dlopen is supported])
-_LT_DECL([dlopen_self], [enable_dlopen_self], [0],
-	 [Whether dlopen of programs is supported])
-_LT_DECL([dlopen_self_static], [enable_dlopen_self_static], [0],
-	 [Whether dlopen of statically linked programs is supported])
-])# LT_SYS_DLOPEN_SELF
-
-# Old name:
-AU_ALIAS([AC_LIBTOOL_DLOPEN_SELF], [LT_SYS_DLOPEN_SELF])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_DLOPEN_SELF], [])
-
-
-# _LT_COMPILER_C_O([TAGNAME])
-# ---------------------------
-# Check to see if options -c and -o are simultaneously supported by compiler.
-# This macro does not hard code the compiler like AC_PROG_CC_C_O.
-m4_defun([_LT_COMPILER_C_O],
-[m4_require([_LT_DECL_SED])dnl
-m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_TAG_COMPILER])dnl
-AC_CACHE_CHECK([if $compiler supports -c -o file.$ac_objext],
-  [_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)],
-  [_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&AS_MESSAGE_LOG_FD
-   echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       _LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes
-     fi
-   fi
-   chmod u+w . 2>&AS_MESSAGE_LOG_FD
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
-])
-_LT_TAGDECL([compiler_c_o], [lt_cv_prog_compiler_c_o], [1],
-	[Does compiler simultaneously support -c and -o options?])
-])# _LT_COMPILER_C_O
-
-
-# _LT_COMPILER_FILE_LOCKS([TAGNAME])
-# ----------------------------------
-# Check to see if we can do hard links to lock some files if needed
-m4_defun([_LT_COMPILER_FILE_LOCKS],
-[m4_require([_LT_ENABLE_LOCK])dnl
-m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-_LT_COMPILER_C_O([$1])
-
-hard_links=nottested
-if test no = "$_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)" && test no != "$need_locks"; then
-  # do not overwrite the value of need_locks provided by the user
-  AC_MSG_CHECKING([if we can lock with hard links])
-  hard_links=yes
-  $RM conftest*
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  touch conftest.a
-  ln conftest.a conftest.b 2>&5 || hard_links=no
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  AC_MSG_RESULT([$hard_links])
-  if test no = "$hard_links"; then
-    AC_MSG_WARN(['$CC' does not support '-c -o', so 'make -j' may be unsafe])
-    need_locks=warn
-  fi
-else
-  need_locks=no
-fi
-_LT_DECL([], [need_locks], [1], [Must we lock files when doing compilation?])
-])# _LT_COMPILER_FILE_LOCKS
-
-
-# _LT_CHECK_OBJDIR
-# ----------------
-m4_defun([_LT_CHECK_OBJDIR],
-[AC_CACHE_CHECK([for objdir], [lt_cv_objdir],
-[rm -f .libs 2>/dev/null
-mkdir .libs 2>/dev/null
-if test -d .libs; then
-  lt_cv_objdir=.libs
-else
-  # MS-DOS does not allow filenames that begin with a dot.
-  lt_cv_objdir=_libs
-fi
-rmdir .libs 2>/dev/null])
-objdir=$lt_cv_objdir
-_LT_DECL([], [objdir], [0],
-         [The name of the directory that contains temporary libtool files])dnl
-m4_pattern_allow([LT_OBJDIR])dnl
-AC_DEFINE_UNQUOTED([LT_OBJDIR], "$lt_cv_objdir/",
-  [Define to the sub-directory where libtool stores uninstalled libraries.])
-])# _LT_CHECK_OBJDIR
-
-
-# _LT_LINKER_HARDCODE_LIBPATH([TAGNAME])
-# --------------------------------------
-# Check hardcoding attributes.
-m4_defun([_LT_LINKER_HARDCODE_LIBPATH],
-[AC_MSG_CHECKING([how to hardcode library paths into programs])
-_LT_TAGVAR(hardcode_action, $1)=
-if test -n "$_LT_TAGVAR(hardcode_libdir_flag_spec, $1)" ||
-   test -n "$_LT_TAGVAR(runpath_var, $1)" ||
-   test yes = "$_LT_TAGVAR(hardcode_automatic, $1)"; then
-
-  # We can hardcode non-existent directories.
-  if test no != "$_LT_TAGVAR(hardcode_direct, $1)" &&
-     # If the only mechanism to avoid hardcoding is shlibpath_var, we
-     # have to relink, otherwise we might link with an installed library
-     # when we should be linking with a yet-to-be-installed one
-     ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, $1)" &&
-     test no != "$_LT_TAGVAR(hardcode_minus_L, $1)"; then
-    # Linking always hardcodes the temporary library directory.
-    _LT_TAGVAR(hardcode_action, $1)=relink
-  else
-    # We can link without hardcoding, and we can hardcode nonexisting dirs.
-    _LT_TAGVAR(hardcode_action, $1)=immediate
-  fi
-else
-  # We cannot hardcode anything, or else we can only hardcode existing
-  # directories.
-  _LT_TAGVAR(hardcode_action, $1)=unsupported
-fi
-AC_MSG_RESULT([$_LT_TAGVAR(hardcode_action, $1)])
-
-if test relink = "$_LT_TAGVAR(hardcode_action, $1)" ||
-   test yes = "$_LT_TAGVAR(inherit_rpath, $1)"; then
-  # Fast installation is not supported
-  enable_fast_install=no
-elif test yes = "$shlibpath_overrides_runpath" ||
-     test no = "$enable_shared"; then
-  # Fast installation is not necessary
-  enable_fast_install=needless
-fi
-_LT_TAGDECL([], [hardcode_action], [0],
-    [How to hardcode a shared library path into an executable])
-])# _LT_LINKER_HARDCODE_LIBPATH
-
-
-# _LT_CMD_STRIPLIB
-# ----------------
-m4_defun([_LT_CMD_STRIPLIB],
-[m4_require([_LT_DECL_EGREP])
-striplib=
-old_striplib=
-AC_MSG_CHECKING([whether stripping libraries is possible])
-if test -z "$STRIP"; then
-  AC_MSG_RESULT([no])
-else
-  if $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then
-    old_striplib="$STRIP --strip-debug"
-    striplib="$STRIP --strip-unneeded"
-    AC_MSG_RESULT([yes])
-  else
-    case $host_os in
-    darwin*)
-      # FIXME - insert some real tests, host_os isn't really good enough
-      striplib="$STRIP -x"
-      old_striplib="$STRIP -S"
-      AC_MSG_RESULT([yes])
-      ;;
-    freebsd*)
-      if $STRIP -V 2>&1 | $GREP "elftoolchain" >/dev/null; then
-        old_striplib="$STRIP --strip-debug"
-        striplib="$STRIP --strip-unneeded"
-        AC_MSG_RESULT([yes])
-      else
-        AC_MSG_RESULT([no])
-      fi
-      ;;
-    *)
-      AC_MSG_RESULT([no])
-      ;;
-    esac
-  fi
-fi
-_LT_DECL([], [old_striplib], [1], [Commands to strip libraries])
-_LT_DECL([], [striplib], [1])
-])# _LT_CMD_STRIPLIB
-
-
-# _LT_PREPARE_MUNGE_PATH_LIST
-# ---------------------------
-# Make sure func_munge_path_list() is defined correctly.
-m4_defun([_LT_PREPARE_MUNGE_PATH_LIST],
-[[# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x@S|@2 in
-    x)
-        ;;
-    *:)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\"
-        ;;
-    x:*)
-        eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\"
-        ;;
-    *)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-]])# _LT_PREPARE_PATH_LIST
-
-
-# _LT_SYS_DYNAMIC_LINKER([TAG])
-# -----------------------------
-# PORTME Fill in your ld.so characteristics
-m4_defun([_LT_SYS_DYNAMIC_LINKER],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-m4_require([_LT_DECL_EGREP])dnl
-m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_OBJDUMP])dnl
-m4_require([_LT_DECL_SED])dnl
-m4_require([_LT_CHECK_SHELL_FEATURES])dnl
-m4_require([_LT_PREPARE_MUNGE_PATH_LIST])dnl
-AC_MSG_CHECKING([dynamic linker characteristics])
-m4_if([$1],
-	[], [
-if test yes = "$GCC"; then
-  case $host_os in
-    darwin*) lt_awk_arg='/^libraries:/,/LR/' ;;
-    *) lt_awk_arg='/^libraries:/' ;;
-  esac
-  case $host_os in
-    mingw* | windows* | cegcc*) lt_sed_strip_eq='s|=\([[A-Za-z]]:\)|\1|g' ;;
-    *) lt_sed_strip_eq='s|=/|/|g' ;;
-  esac
-  lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq`
-  case $lt_search_path_spec in
-  *\;*)
-    # if the path contains ";" then we assume it to be the separator
-    # otherwise default to the standard path separator (i.e. ":") - it is
-    # assumed that no part of a normal pathname contains ";" but that should
-    # okay in the real world where ";" in dirpaths is itself problematic.
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'`
-    ;;
-  *)
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"`
-    ;;
-  esac
-  # Ok, now we have the path, separated by spaces, we can step through it
-  # and add multilib dir if necessary...
-  lt_tmp_lt_search_path_spec=
-  lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null`
-  # ...but if some path component already ends with the multilib dir we assume
-  # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer).
-  case "$lt_multi_os_dir; $lt_search_path_spec " in
-  "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*)
-    lt_multi_os_dir=
-    ;;
-  esac
-  for lt_sys_path in $lt_search_path_spec; do
-    if test -d "$lt_sys_path$lt_multi_os_dir"; then
-      lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir"
-    elif test -n "$lt_multi_os_dir"; then
-      test -d "$lt_sys_path" && \
-	lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path"
-    fi
-  done
-  lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk '
-BEGIN {RS = " "; FS = "/|\n";} {
-  lt_foo = "";
-  lt_count = 0;
-  for (lt_i = NF; lt_i > 0; lt_i--) {
-    if ($lt_i != "" && $lt_i != ".") {
-      if ($lt_i == "..") {
-        lt_count++;
-      } else {
-        if (lt_count == 0) {
-          lt_foo = "/" $lt_i lt_foo;
-        } else {
-          lt_count--;
-        }
-      }
-    }
-  }
-  if (lt_foo != "") { lt_freq[[lt_foo]]++; }
-  if (lt_freq[[lt_foo]] == 1) { print lt_foo; }
-}'`
-  # AWK program above erroneously prepends '/' to C:/dos/paths
-  # for these hosts.
-  case $host_os in
-    mingw* | windows* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\
-      $SED 's|/\([[A-Za-z]]:\)|\1|g'` ;;
-  esac
-  sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP`
-else
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-fi])
-library_names_spec=
-libname_spec='lib$name'
-soname_spec=
-shrext_cmds=.so
-postinstall_cmds=
-postuninstall_cmds=
-finish_cmds=
-finish_eval=
-shlibpath_var=
-shlibpath_overrides_runpath=unknown
-version_type=none
-dynamic_linker="$host_os ld.so"
-sys_lib_dlsearch_path_spec="/lib /usr/lib"
-need_lib_prefix=unknown
-hardcode_into_libs=no
-
-# when you set need_version to no, make sure it does not cause -set_version
-# flags to be left without arguments
-need_version=unknown
-
-AC_ARG_VAR([LT_SYS_LIBRARY_PATH],
-[User-defined run-time library search path.])
-
-case $host_os in
-aix3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname.a'
-  shlibpath_var=LIBPATH
-
-  # AIX 3 has no versioning support, so we append a major version to the name.
-  soname_spec='$libname$release$shared_ext$major'
-  ;;
-
-aix[[4-9]]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  hardcode_into_libs=yes
-  if test ia64 = "$host_cpu"; then
-    # AIX 5 supports IA64
-    library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext'
-    shlibpath_var=LD_LIBRARY_PATH
-  else
-    # With GCC up to 2.95.x, collect2 would create an import file
-    # for dependence libraries.  The import file would start with
-    # the line '#! .'.  This would cause the generated library to
-    # depend on '.', always an invalid library.  This was fixed in
-    # development snapshots of GCC prior to 3.0.
-    case $host_os in
-      aix4 | aix4.[[01]] | aix4.[[01]].*)
-      if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)'
-	   echo ' yes '
-	   echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then
-	:
-      else
-	can_build_shared=no
-      fi
-      ;;
-    esac
-    # Using Import Files as archive members, it is possible to support
-    # filename-based versioning of shared library archives on AIX. While
-    # this would work for both with and without runtime linking, it will
-    # prevent static linking of such archives. So we do filename-based
-    # shared library versioning with .so extension only, which is used
-    # when both runtime linking and shared linking is enabled.
-    # Unfortunately, runtime linking may impact performance, so we do
-    # not want this to be the default eventually. Also, we use the
-    # versioned .so libs for executables only if there is the -brtl
-    # linker flag in LDFLAGS as well, or --enable-aix-soname=svr4 only.
-    # To allow for filename-based versioning support, we need to create
-    # libNAME.so.V as an archive file, containing:
-    # *) an Import File, referring to the versioned filename of the
-    #    archive as well as the shared archive member, telling the
-    #    bitwidth (32 or 64) of that shared object, and providing the
-    #    list of exported symbols of that shared object, eventually
-    #    decorated with the 'weak' keyword
-    # *) the shared object with the F_LOADONLY flag set, to really avoid
-    #    it being seen by the linker.
-    # At run time we better use the real file rather than another symlink,
-    # but for link time we create the symlink libNAME.so -> libNAME.so.V
-
-    case $with_aix_soname,$aix_use_runtimelinking in
-    # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct
-    # soname into executable. Probably we can add versioning support to
-    # collect2, so additional links can be useful in future.
-    aix,yes) # traditional libtool
-      dynamic_linker='AIX unversionable lib.so'
-      # If using run time linking (on AIX 4.2 or later) use lib<name>.so
-      # instead of lib<name>.a to let people know that these are not
-      # typical AIX shared libraries.
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      ;;
-    aix,no) # traditional AIX only
-      dynamic_linker='AIX lib.a[(]lib.so.V[)]'
-      # We preserve .a as extension for shared libraries through AIX4.2
-      # and later when we are not doing run time linking.
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      ;;
-    svr4,*) # full svr4 only
-      dynamic_linker="AIX lib.so.V[(]$shared_archive_member_spec.o[)]"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,yes) # both, prefer svr4
-      dynamic_linker="AIX lib.so.V[(]$shared_archive_member_spec.o[)], lib.a[(]lib.so.V[)]"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # unpreferred sharedlib libNAME.a needs extra handling
-      postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"'
-      postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,no) # both, prefer aix
-      dynamic_linker="AIX lib.a[(]lib.so.V[)], lib.so.V[(]$shared_archive_member_spec.o[)]"
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling
-      postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)'
-      postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"'
-      ;;
-    esac
-    shlibpath_var=LIBPATH
-  fi
-  ;;
-
-amigaos*)
-  case $host_cpu in
-  powerpc)
-    # Since July 2007 AmigaOS4 officially supports .so libraries.
-    # When compiling the executable, add -use-dynld -Lsobjs: to the compileline.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    ;;
-  m68k)
-    library_names_spec='$libname.ixlibrary $libname.a'
-    # Create ${libname}_ixlibrary.a entries in /sys/libs.
-    finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([[^/]]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done'
-    ;;
-  esac
-  ;;
-
-beos*)
-  library_names_spec='$libname$shared_ext'
-  dynamic_linker="$host_os ld.so"
-  shlibpath_var=LIBRARY_PATH
-  ;;
-
-bsdi[[45]]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib"
-  # the default ld.so.conf also contains /usr/contrib/lib and
-  # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow
-  # libtool to hard-code these into programs
-  ;;
-
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-
-  case $GCC,$cc_basename in
-  yes,*)
-    # gcc
-    library_names_spec='$libname.dll.a'
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    # If user builds GCC with multilib enabled,
-    # it should just install on $(libdir)
-    # not on $(libdir)/../bin or 32 bits dlls would override 64 bit ones.
-    if test xyes = x"$multilib"; then
-      postinstall_cmds='base_file=`basename \$file`~
-        dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-        dldir=$destdir/`dirname \$dlpath`~
-        $install_prog $dir/$dlname $destdir/$dlname~
-        chmod a+x $destdir/$dlname~
-        if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-          eval '\''$striplib $destdir/$dlname'\'' || exit \$?;
-        fi'
-    else
-      postinstall_cmds='base_file=`basename \$file`~
-        dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-        dldir=$destdir/`dirname \$dlpath`~
-        test -d \$dldir || mkdir -p \$dldir~
-        $install_prog $dir/$dlname \$dldir/$dlname~
-        chmod a+x \$dldir/$dlname~
-        if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-          eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-        fi'
-    fi
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-
-    case $host_os in
-    cygwin*)
-      # Cygwin DLLs use 'cyg' prefix rather than 'lib'
-      soname_spec='`echo $libname | $SED -e 's/^lib/cyg/'``echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext'
-m4_if([$1], [],[
-      sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api"])
-      ;;
-    mingw* | windows* | cegcc*)
-      # MinGW DLLs use traditional 'lib' prefix
-      soname_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext'
-      ;;
-    pw32*)
-      # pw32 DLLs use 'pw' prefix rather than 'lib'
-      library_names_spec='`echo $libname | $SED -e 's/^lib/pw/'``echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext'
-      ;;
-    esac
-    dynamic_linker='Win32 ld.exe'
-    ;;
-
-  *,cl* | *,icl*)
-    # Native MSVC or ICC
-    libname_spec='$name'
-    soname_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext'
-    library_names_spec='$libname.dll.lib'
-
-    case $build_os in
-    mingw* | windows*)
-      sys_lib_search_path_spec=
-      lt_save_ifs=$IFS
-      IFS=';'
-      for lt_path in $LIB
-      do
-        IFS=$lt_save_ifs
-        # Let DOS variable expansion print the short 8.3 style file name.
-        lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"`
-        sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path"
-      done
-      IFS=$lt_save_ifs
-      # Convert to MSYS style.
-      sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's|\\\\|/|g' -e 's| \\([[a-zA-Z]]\\):| /\\1|g' -e 's|^ ||'`
-      ;;
-    cygwin*)
-      # Convert to unix form, then to dos form, then back to unix form
-      # but this time dos style (no spaces!) so that the unix form looks
-      # like /cygdrive/c/PROGRA~1:/cygdr...
-      sys_lib_search_path_spec=`cygpath --path --unix "$LIB"`
-      sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null`
-      sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      ;;
-    *)
-      sys_lib_search_path_spec=$LIB
-      if $ECHO "$sys_lib_search_path_spec" | [$GREP ';[c-zC-Z]:/' >/dev/null]; then
-        # It is most probably a Windows format PATH.
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'`
-      else
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      fi
-      # FIXME: find the short name or the path components, as spaces are
-      # common. (e.g. "Program Files" -> "PROGRA~1")
-      ;;
-    esac
-
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    postinstall_cmds='base_file=`basename \$file`~
-      dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-      dldir=$destdir/`dirname \$dlpath`~
-      test -d \$dldir || mkdir -p \$dldir~
-      $install_prog $dir/$dlname \$dldir/$dlname'
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-    dynamic_linker='Win32 link.exe'
-    ;;
-
-  *)
-    # Assume MSVC and ICC wrapper
-    library_names_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext $libname.lib'
-    dynamic_linker='Win32 ld.exe'
-    ;;
-  esac
-  # FIXME: first we should search . and the directory the executable is in
-  shlibpath_var=PATH
-  ;;
-
-darwin* | rhapsody*)
-  dynamic_linker="$host_os dyld"
-  version_type=darwin
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$major$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$major$shared_ext'
-  shlibpath_overrides_runpath=yes
-  shlibpath_var=DYLD_LIBRARY_PATH
-  shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`'
-m4_if([$1], [],[
-  sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib"])
-  sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib'
-  ;;
-
-dgux*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  # DragonFly does not have aout.  When/if they implement a new
-  # versioning mechanism, adjust this.
-  if test -x /usr/bin/objformat; then
-    objformat=`/usr/bin/objformat`
-  else
-    case $host_os in
-    freebsd[[23]].*) objformat=aout ;;
-    *) objformat=elf ;;
-    esac
-  fi
-  version_type=freebsd-$objformat
-  case $version_type in
-    freebsd-elf*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      soname_spec='$libname$release$shared_ext$major'
-      need_version=no
-      need_lib_prefix=no
-      ;;
-    freebsd-*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-      need_version=yes
-      ;;
-  esac
-  case $host_cpu in
-    powerpc64)
-      # On FreeBSD bi-arch platforms, a different variable is used for 32-bit
-      # binaries.  See <https://man.freebsd.org/cgi/man.cgi?query=ld.so>.
-      AC_COMPILE_IFELSE(
-        [AC_LANG_SOURCE(
-           [[int test_pointer_size[sizeof (void *) - 5];
-           ]])],
-        [shlibpath_var=LD_LIBRARY_PATH],
-        [shlibpath_var=LD_32_LIBRARY_PATH])
-      ;;
-    *)
-      shlibpath_var=LD_LIBRARY_PATH
-      ;;
-  esac
-  case $host_os in
-  freebsd2.*)
-    shlibpath_overrides_runpath=yes
-    ;;
-  freebsd3.[[01]]* | freebsdelf3.[[01]]*)
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  freebsd3.[[2-9]]* | freebsdelf3.[[2-9]]* | \
-  freebsd4.[[0-5]] | freebsdelf4.[[0-5]] | freebsd4.1.1 | freebsdelf4.1.1)
-    shlibpath_overrides_runpath=no
-    hardcode_into_libs=yes
-    ;;
-  *) # from 4.6 on, and DragonFly
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  esac
-  ;;
-
-haiku*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  dynamic_linker="$host_os runtime_loader"
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec='/boot/system/non-packaged/develop/lib /boot/system/develop/lib'
-  sys_lib_dlsearch_path_spec='/boot/home/config/non-packaged/lib /boot/home/config/lib /boot/system/non-packaged/lib /boot/system/lib'
-  hardcode_into_libs=no
-  ;;
-
-hpux9* | hpux10* | hpux11*)
-  # Give a soname corresponding to the major version so that dld.sl refuses to
-  # link against other versions.
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  case $host_cpu in
-  ia64*)
-    shrext_cmds='.so'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.so"
-    shlibpath_var=LD_LIBRARY_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    if test 32 = "$HPUX_IA64_MODE"; then
-      sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux32
-    else
-      sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux64
-    fi
-    ;;
-  hppa*64*)
-    shrext_cmds='.sl'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64"
-    sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-    ;;
-  *)
-    shrext_cmds='.sl'
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=SHLIB_PATH
-    shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    ;;
-  esac
-  # HP-UX runs *really* slowly unless shared libraries are mode 555, ...
-  postinstall_cmds='chmod 555 $lib'
-  # or fails outright, so override atomically:
-  install_override_mode=555
-  ;;
-
-interix[[3-9]]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $host_os in
-    nonstopux*) version_type=nonstopux ;;
-    *)
-	if test yes = "$lt_cv_prog_gnu_ld"; then
-		version_type=linux # correct to gnu/linux during the next big refactor
-	else
-		version_type=irix
-	fi ;;
-  esac
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext'
-  case $host_os in
-  irix5* | nonstopux*)
-    libsuff= shlibsuff=
-    ;;
-  *)
-    case $LD in # libtool.m4 will add one of these switches to LD
-    *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ")
-      libsuff= shlibsuff= libmagic=32-bit;;
-    *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ")
-      libsuff=32 shlibsuff=N32 libmagic=N32;;
-    *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ")
-      libsuff=64 shlibsuff=64 libmagic=64-bit;;
-    *) libsuff= shlibsuff= libmagic=never-match;;
-    esac
-    ;;
-  esac
-  shlibpath_var=LD_LIBRARY${shlibsuff}_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff"
-  sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff"
-  hardcode_into_libs=yes
-  ;;
-
-# No shared lib support for Linux oldld, aout, or coff.
-linux*oldld* | linux*aout* | linux*coff*)
-  dynamic_linker=no
-  ;;
-
-linux*android*)
-  version_type=none # Android doesn't support versioned libraries.
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  dynamic_linker='Android linker'
-  # -rpath works at least for libraries that are not overridden by
-  # libraries installed in system locations.
-  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-
-  # Some binutils ld are patched to set DT_RUNPATH
-  AC_CACHE_VAL([lt_cv_shlibpath_overrides_runpath],
-    [lt_cv_shlibpath_overrides_runpath=no
-    save_LDFLAGS=$LDFLAGS
-    save_libdir=$libdir
-    eval "libdir=/foo; wl=\"$_LT_TAGVAR(lt_prog_compiler_wl, $1)\"; \
-	 LDFLAGS=\"\$LDFLAGS $_LT_TAGVAR(hardcode_libdir_flag_spec, $1)\""
-    AC_LINK_IFELSE([AC_LANG_PROGRAM([],[])],
-      [AS_IF([ ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null],
-	 [lt_cv_shlibpath_overrides_runpath=yes])])
-    LDFLAGS=$save_LDFLAGS
-    libdir=$save_libdir
-    ])
-  shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  # Ideally, we could use ldconfig to report *all* directories which are
-  # searched for libraries, however this is still not possible.  Aside from not
-  # being certain /sbin/ldconfig is available, command
-  # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64,
-  # even though it is searched at run-time.  Try to do the best guess by
-  # appending ld.so.conf contents (and includes) to the search path.
-  if test -f /etc/ld.so.conf; then
-    lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \[$]2)); skip = 1; } { if (!skip) print \[$]0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[	 ]*hwcap[	 ]/d;s/[:,	]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '`
-    sys_lib_dlsearch_path_spec="/lib /usr/lib $lt_ld_extra"
-  fi
-
-  # We used to test for /lib/ld.so.1 and disable shared libraries on
-  # powerpc, because MkLinux only supported shared libraries with the
-  # GNU dynamic linker.  Since this was broken with cross compilers,
-  # most powerpc-linux boxes support dynamic linking these days and
-  # people can always --disable-shared, the test was removed, and we
-  # assume the GNU/Linux dynamic linker is in use.
-  dynamic_linker='GNU/Linux ld.so'
-  ;;
-
-netbsdelf*-gnu)
-  version_type=linux
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='NetBSD ld.elf_so'
-  ;;
-
-netbsd*)
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-    finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-    dynamic_linker='NetBSD (a.out) ld.so'
-  else
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    dynamic_linker='NetBSD ld.elf_so'
-  fi
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  ;;
-
-*-mlibc)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='mlibc ld.so'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-newsos6)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-*nto* | *qnx*)
-  version_type=qnx
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='ldqnx.so'
-  ;;
-
-openbsd*)
-  version_type=sunos
-  sys_lib_dlsearch_path_spec=/usr/lib
-  need_lib_prefix=no
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    need_version=no
-  else
-    need_version=yes
-  fi
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-os2*)
-  libname_spec='$name'
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-  # OS/2 can only load a DLL with a base name of 8 characters or less.
-  soname_spec='`test -n "$os2dllname" && libname="$os2dllname";
-    v=$($ECHO $release$versuffix | tr -d .-);
-    n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _);
-    $ECHO $n$v`$shared_ext'
-  library_names_spec='${libname}_dll.$libext'
-  dynamic_linker='OS/2 ld.exe'
-  shlibpath_var=BEGINLIBPATH
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  postinstall_cmds='base_file=`basename \$file`~
-    dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~
-    dldir=$destdir/`dirname \$dlpath`~
-    test -d \$dldir || mkdir -p \$dldir~
-    $install_prog $dir/$dlname \$dldir/$dlname~
-    chmod a+x \$dldir/$dlname~
-    if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-      eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-    fi'
-  postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~
-    dlpath=$dir/\$dldll~
-    $RM \$dlpath'
-  ;;
-
-osf3* | osf4* | osf5*)
-  version_type=osf
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  ;;
-
-rdos*)
-  dynamic_linker=no
-  ;;
-
-serenity*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  dynamic_linker='SerenityOS LibELF'
-  ;;
-
-solaris*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  # ldd complains unless libraries are executable
-  postinstall_cmds='chmod +x $lib'
-  ;;
-
-sunos4*)
-  version_type=sunos
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  if test yes = "$with_gnu_ld"; then
-    need_lib_prefix=no
-  fi
-  need_version=yes
-  ;;
-
-sysv4 | sysv4.3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  case $host_vendor in
-    sni)
-      shlibpath_overrides_runpath=no
-      need_lib_prefix=no
-      runpath_var=LD_RUN_PATH
-      ;;
-    siemens)
-      need_lib_prefix=no
-      ;;
-    motorola)
-      need_lib_prefix=no
-      need_version=no
-      shlibpath_overrides_runpath=no
-      sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib'
-      ;;
-  esac
-  ;;
-
-sysv4*MP*)
-  if test -d /usr/nec; then
-    version_type=linux # correct to gnu/linux during the next big refactor
-    library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext'
-    soname_spec='$libname$shared_ext.$major'
-    shlibpath_var=LD_LIBRARY_PATH
-  fi
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  version_type=sco
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  if test yes = "$with_gnu_ld"; then
-    sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib'
-  else
-    sys_lib_search_path_spec='/usr/ccs/lib /usr/lib'
-    case $host_os in
-      sco3.2v5*)
-        sys_lib_search_path_spec="$sys_lib_search_path_spec /lib"
-	;;
-    esac
-  fi
-  sys_lib_dlsearch_path_spec='/usr/lib'
-  ;;
-
-tpf*)
-  # TPF is a cross-target only.  Preferred cross-host = GNU/Linux.
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-uts4*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-emscripten*)
-  version_type=none
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  dynamic_linker="Emscripten linker"
-  _LT_COMPILER_PIC($1)='-fPIC'
-  _LT_TAGVAR(archive_cmds, $1)='$CC -sSIDE_MODULE=2 -shared $libobjs $deplibs $compiler_flags -o $lib'
-  _LT_TAGVAR(archive_expsym_cmds, $1)='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -sSIDE_MODULE=2 -shared $libobjs $deplibs $compiler_flags -o $lib -s EXPORTED_FUNCTIONS=@$output_objdir/$soname.expsym'
-  _LT_TAGVAR(archive_cmds_need_lc, $1)=no
-  _LT_TAGVAR(no_undefined_flag, $1)=
-  ;;
-
-*)
-  dynamic_linker=no
-  ;;
-esac
-AC_MSG_RESULT([$dynamic_linker])
-test no = "$dynamic_linker" && can_build_shared=no
-
-variables_saved_for_relink="PATH $shlibpath_var $runpath_var"
-if test yes = "$GCC"; then
-  variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH"
-fi
-
-if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then
-  sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec
-fi
-
-if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then
-  sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec
-fi
-
-# remember unaugmented sys_lib_dlsearch_path content for libtool script decls...
-configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec
-
-# ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code
-func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH"
-
-# to be used as default LT_SYS_LIBRARY_PATH value in generated libtool
-configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH
-
-_LT_DECL([], [variables_saved_for_relink], [1],
-    [Variables whose values should be saved in libtool wrapper scripts and
-    restored at link time])
-_LT_DECL([], [need_lib_prefix], [0],
-    [Do we need the "lib" prefix for modules?])
-_LT_DECL([], [need_version], [0], [Do we need a version for libraries?])
-_LT_DECL([], [version_type], [0], [Library versioning type])
-_LT_DECL([], [runpath_var], [0],  [Shared library runtime path variable])
-_LT_DECL([], [shlibpath_var], [0],[Shared library path variable])
-_LT_DECL([], [shlibpath_overrides_runpath], [0],
-    [Is shlibpath searched before the hard-coded library search path?])
-_LT_DECL([], [libname_spec], [1], [Format of library name prefix])
-_LT_DECL([], [library_names_spec], [1],
-    [[List of archive names.  First name is the real one, the rest are links.
-    The last name is the one that the linker finds with -lNAME]])
-_LT_DECL([], [soname_spec], [1],
-    [[The coded name of the library, if different from the real name]])
-_LT_DECL([], [install_override_mode], [1],
-    [Permission mode override for installation of shared libraries])
-_LT_DECL([], [postinstall_cmds], [2],
-    [Command to use after installation of a shared archive])
-_LT_DECL([], [postuninstall_cmds], [2],
-    [Command to use after uninstallation of a shared archive])
-_LT_DECL([], [finish_cmds], [2],
-    [Commands used to finish a libtool library installation in a directory])
-_LT_DECL([], [finish_eval], [1],
-    [[As "finish_cmds", except a single script fragment to be evaled but
-    not shown]])
-_LT_DECL([], [hardcode_into_libs], [0],
-    [Whether we should hardcode library paths into libraries])
-_LT_DECL([], [sys_lib_search_path_spec], [2],
-    [Compile-time system search path for libraries])
-_LT_DECL([sys_lib_dlsearch_path_spec], [configure_time_dlsearch_path], [2],
-    [Detected run-time system search path for libraries])
-_LT_DECL([], [configure_time_lt_sys_library_path], [2],
-    [Explicit LT_SYS_LIBRARY_PATH set during ./configure time])
-])# _LT_SYS_DYNAMIC_LINKER
-
-
-# _LT_PATH_TOOL_PREFIX(TOOL)
-# --------------------------
-# find a file program that can recognize shared library
-AC_DEFUN([_LT_PATH_TOOL_PREFIX],
-[m4_require([_LT_DECL_EGREP])dnl
-AC_MSG_CHECKING([for $1])
-AC_CACHE_VAL(lt_cv_path_MAGIC_CMD,
-[case $MAGIC_CMD in
-[[\\/*] |  ?:[\\/]*])
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-dnl $ac_dummy forces splitting on constant user-supplied paths.
-dnl POSIX.2 word splitting is done only on the output of word expansions,
-dnl not every word.  This closes a longstanding sh security hole.
-  ac_dummy="m4_if([$2], , $PATH, [$2])"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$1"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"$1"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac])
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  AC_MSG_RESULT($MAGIC_CMD)
-else
-  AC_MSG_RESULT(no)
-fi
-_LT_DECL([], [MAGIC_CMD], [0],
-	 [Used to examine libraries when file_magic_cmd begins with "file"])dnl
-])# _LT_PATH_TOOL_PREFIX
-
-# Old name:
-AU_ALIAS([AC_PATH_TOOL_PREFIX], [_LT_PATH_TOOL_PREFIX])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_PATH_TOOL_PREFIX], [])
-
-
-# _LT_PATH_MAGIC
-# --------------
-# find a file program that can recognize a shared library
-m4_defun([_LT_PATH_MAGIC],
-[_LT_PATH_TOOL_PREFIX(${ac_tool_prefix}file, /usr/bin$PATH_SEPARATOR$PATH)
-if test -z "$lt_cv_path_MAGIC_CMD"; then
-  if test -n "$ac_tool_prefix"; then
-    _LT_PATH_TOOL_PREFIX(file, /usr/bin$PATH_SEPARATOR$PATH)
-  else
-    MAGIC_CMD=:
-  fi
-fi
-])# _LT_PATH_MAGIC
-
-
-# LT_PATH_LD
-# ----------
-# find the pathname to the GNU or non-GNU linker
-AC_DEFUN([LT_PATH_LD],
-[AC_REQUIRE([AC_PROG_CC])dnl
-AC_REQUIRE([AC_CANONICAL_HOST])dnl
-AC_REQUIRE([AC_CANONICAL_BUILD])dnl
-m4_require([_LT_DECL_SED])dnl
-m4_require([_LT_DECL_EGREP])dnl
-m4_require([_LT_PROG_ECHO_BACKSLASH])dnl
-
-AC_ARG_WITH([gnu-ld],
-    [AS_HELP_STRING([--with-gnu-ld],
-	[assume the C compiler uses GNU ld @<:@default=no@:>@])],
-    [test no = "$withval" || with_gnu_ld=yes],
-    [with_gnu_ld=no])dnl
-
-ac_prog=ld
-if test yes = "$GCC"; then
-  # Check if gcc -print-prog-name=ld gives a path.
-  AC_MSG_CHECKING([for ld used by $CC])
-  case $host in
-  *-*-mingw* | *-*-windows*)
-    # gcc leaves a trailing carriage return, which upsets mingw
-    ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;;
-  *)
-    ac_prog=`($CC -print-prog-name=ld) 2>&5` ;;
-  esac
-  case $ac_prog in
-    # Accept absolute paths.
-    [[\\/]]* | ?:[[\\/]]*)
-      re_direlt='/[[^/]][[^/]]*/\.\./'
-      # Canonicalize the pathname of ld
-      ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'`
-      while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do
-	ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"`
-      done
-      test -z "$LD" && LD=$ac_prog
-      ;;
-  "")
-    # If it fails, then pretend we aren't using GCC.
-    ac_prog=ld
-    ;;
-  *)
-    # If it is relative, then search for the first ld in PATH.
-    with_gnu_ld=unknown
-    ;;
-  esac
-elif test yes = "$with_gnu_ld"; then
-  AC_MSG_CHECKING([for GNU ld])
-else
-  AC_MSG_CHECKING([for non-GNU ld])
-fi
-AC_CACHE_VAL(lt_cv_path_LD,
-[if test -z "$LD"; then
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  for ac_dir in $PATH; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then
-      lt_cv_path_LD=$ac_dir/$ac_prog
-      # Check to see if the program is GNU ld.  I'd rather use --version,
-      # but apparently some variants of GNU ld only accept -v.
-      # Break only if it was the GNU/non-GNU ld that we prefer.
-      case `"$lt_cv_path_LD" -v 2>&1 </dev/null` in
-      *GNU* | *'with BFD'*)
-	test no != "$with_gnu_ld" && break
-	;;
-      *)
-	test yes != "$with_gnu_ld" && break
-	;;
-      esac
-    fi
-  done
-  IFS=$lt_save_ifs
-else
-  lt_cv_path_LD=$LD # Let the user override the test with a path.
-fi])
-LD=$lt_cv_path_LD
-if test -n "$LD"; then
-  AC_MSG_RESULT($LD)
-else
-  AC_MSG_RESULT(no)
-fi
-test -z "$LD" && AC_MSG_ERROR([no acceptable ld found in \$PATH])
-_LT_PATH_LD_GNU
-AC_SUBST([LD])
-
-_LT_TAGDECL([], [LD], [1], [The linker used to build libraries])
-])# LT_PATH_LD
-
-# Old names:
-AU_ALIAS([AM_PROG_LD], [LT_PATH_LD])
-AU_ALIAS([AC_PROG_LD], [LT_PATH_LD])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AM_PROG_LD], [])
-dnl AC_DEFUN([AC_PROG_LD], [])
-
-
-# _LT_PATH_LD_GNU
-#- --------------
-m4_defun([_LT_PATH_LD_GNU],
-[AC_CACHE_CHECK([if the linker ($LD) is GNU ld], lt_cv_prog_gnu_ld,
-[# I'd rather use --version here, but apparently some GNU lds only accept -v.
-case `$LD -v 2>&1 </dev/null` in
-*GNU* | *'with BFD'*)
-  lt_cv_prog_gnu_ld=yes
-  ;;
-*)
-  lt_cv_prog_gnu_ld=no
-  ;;
-esac])
-with_gnu_ld=$lt_cv_prog_gnu_ld
-])# _LT_PATH_LD_GNU
-
-
-# _LT_CMD_RELOAD
-# --------------
-# find reload flag for linker
-#   -- PORTME Some linkers may need a different reload flag.
-m4_defun([_LT_CMD_RELOAD],
-[AC_CACHE_CHECK([for $LD option to reload object files],
-  lt_cv_ld_reload_flag,
-  [lt_cv_ld_reload_flag='-r'])
-reload_flag=$lt_cv_ld_reload_flag
-case $reload_flag in
-"" | " "*) ;;
-*) reload_flag=" $reload_flag" ;;
-esac
-reload_cmds='$LD$reload_flag -o $output$reload_objs'
-case $host_os in
-  cygwin* | mingw* | windows* | pw32* | cegcc*)
-    if test yes != "$GCC"; then
-      reload_cmds=false
-    fi
-    ;;
-  darwin*)
-    if test yes = "$GCC"; then
-      reload_cmds='$LTCC $LTCFLAGS -nostdlib $wl-r -o $output$reload_objs'
-    else
-      reload_cmds='$LD$reload_flag -o $output$reload_objs'
-    fi
-    ;;
-esac
-_LT_TAGDECL([], [reload_flag], [1], [How to create reloadable object files])dnl
-_LT_TAGDECL([], [reload_cmds], [2])dnl
-])# _LT_CMD_RELOAD
-
-
-# _LT_PATH_DD
-# -----------
-# find a working dd
-m4_defun([_LT_PATH_DD],
-[AC_CACHE_CHECK([for a working dd], [ac_cv_path_lt_DD],
-[printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-: ${lt_DD:=$DD}
-AC_PATH_PROGS_FEATURE_CHECK([lt_DD], [dd],
-[if "$ac_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=:
-fi])
-rm -f conftest.i conftest2.i conftest.out])
-])# _LT_PATH_DD
-
-
-# _LT_CMD_TRUNCATE
-# ----------------
-# find command to truncate a binary pipe
-m4_defun([_LT_CMD_TRUNCATE],
-[m4_require([_LT_PATH_DD])
-AC_CACHE_CHECK([how to truncate binary pipes], [lt_cv_truncate_bin],
-[printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-lt_cv_truncate_bin=
-if "$ac_cv_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1"
-fi
-rm -f conftest.i conftest2.i conftest.out
-test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q"])
-_LT_DECL([lt_truncate_bin], [lt_cv_truncate_bin], [1],
-  [Command to truncate a binary pipe])
-])# _LT_CMD_TRUNCATE
-
-
-# _LT_CHECK_MAGIC_METHOD
-# ----------------------
-# how to check for library dependencies
-#  -- PORTME fill in with the dynamic library characteristics
-m4_defun([_LT_CHECK_MAGIC_METHOD],
-[m4_require([_LT_DECL_EGREP])
-m4_require([_LT_DECL_OBJDUMP])
-AC_CACHE_CHECK([how to recognize dependent libraries],
-lt_cv_deplibs_check_method,
-[lt_cv_file_magic_cmd='$MAGIC_CMD'
-lt_cv_file_magic_test_file=
-lt_cv_deplibs_check_method='unknown'
-# Need to set the preceding variable on all platforms that support
-# interlibrary dependencies.
-# 'none' -- dependencies not supported.
-# 'unknown' -- same as none, but documents that we really don't know.
-# 'pass_all' -- all dependencies passed with no checks.
-# 'file_magic [[regex]]' -- check by looking for files in library path
-# that responds to the $file_magic_cmd with a given extended regex.
-# If you have 'file' or equivalent on your system and you're not sure
-# whether 'pass_all' will *always* work, you probably want this one.
-
-case $host_os in
-aix[[4-9]]*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-beos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-bsdi[[45]]*)
-  lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (shared object|dynamic lib)'
-  lt_cv_file_magic_cmd='$FILECMD -L'
-  lt_cv_file_magic_test_file=/shlib/libc.so
-  ;;
-
-cygwin*)
-  # func_win32_libid is a shell function defined in ltmain.sh
-  lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-  lt_cv_file_magic_cmd='func_win32_libid'
-  ;;
-
-mingw* | windows* | pw32*)
-  # Base MSYS/MinGW do not provide the 'file' command needed by
-  # func_win32_libid shell function, so use a weaker test based on 'objdump',
-  # unless we find 'file', for example because we are cross-compiling.
-  if ( file / ) >/dev/null 2>&1; then
-    lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-    lt_cv_file_magic_cmd='func_win32_libid'
-  else
-    # Keep this pattern in sync with the one in func_win32_libid.
-    lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64|pe-aarch64)'
-    lt_cv_file_magic_cmd='$OBJDUMP -f'
-  fi
-  ;;
-
-cegcc*)
-  # use the weaker test based on 'objdump'. See mingw*.
-  lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?'
-  lt_cv_file_magic_cmd='$OBJDUMP -f'
-  ;;
-
-darwin* | rhapsody*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    case $host_cpu in
-    i*86 )
-      # Not sure whether the presence of OpenBSD here was a mistake.
-      # Let's accept both of them until this is cleared up.
-      lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[[3-9]]86 (compact )?demand paged shared library'
-      lt_cv_file_magic_cmd=$FILECMD
-      lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*`
-      ;;
-    esac
-  else
-    lt_cv_deplibs_check_method=pass_all
-  fi
-  ;;
-
-haiku*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-hpux10.20* | hpux11*)
-  lt_cv_file_magic_cmd=$FILECMD
-  case $host_cpu in
-  ia64*)
-    lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|ELF-[[0-9]][[0-9]]) shared object file - IA64'
-    lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so
-    ;;
-  hppa*64*)
-    [lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]']
-    lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl
-    ;;
-  *)
-    lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|PA-RISC[[0-9]]\.[[0-9]]) shared library'
-    lt_cv_file_magic_test_file=/usr/lib/libc.sl
-    ;;
-  esac
-  ;;
-
-interix[[3-9]]*)
-  # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here
-  lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|\.a)$'
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $LD in
-  *-32|*"-32 ") libmagic=32-bit;;
-  *-n32|*"-n32 ") libmagic=N32;;
-  *-64|*"-64 ") libmagic=64-bit;;
-  *) libmagic=never-match;;
-  esac
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-*-mlibc)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-netbsd* | netbsdelf*-gnu)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|_pic\.a)$'
-  fi
-  ;;
-
-newos6*)
-  lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (executable|dynamic lib)'
-  lt_cv_file_magic_cmd=$FILECMD
-  lt_cv_file_magic_test_file=/usr/lib/libnls.so
-  ;;
-
-*nto* | *qnx*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-openbsd*)
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|\.so|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$'
-  fi
-  ;;
-
-osf3* | osf4* | osf5*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-rdos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-serenity*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-solaris*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv4 | sysv4.3*)
-  case $host_vendor in
-  motorola)
-    lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (shared object|dynamic lib) M[[0-9]][[0-9]]* Version [[0-9]]'
-    lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*`
-    ;;
-  ncr)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  sequent)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB (shared object|dynamic lib )'
-    ;;
-  sni)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method="file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB dynamic lib"
-    lt_cv_file_magic_test_file=/lib/libc.so
-    ;;
-  siemens)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  pc)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  esac
-  ;;
-
-tpf*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-os2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-esac
-])
-
-file_magic_glob=
-want_nocaseglob=no
-if test "$build" = "$host"; then
-  case $host_os in
-  mingw* | windows* | pw32*)
-    if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then
-      want_nocaseglob=yes
-    else
-      file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[[\1]]\/[[\1]]\/g;/g"`
-    fi
-    ;;
-  esac
-fi
-
-file_magic_cmd=$lt_cv_file_magic_cmd
-deplibs_check_method=$lt_cv_deplibs_check_method
-test -z "$deplibs_check_method" && deplibs_check_method=unknown
-
-_LT_DECL([], [deplibs_check_method], [1],
-    [Method to check whether dependent libraries are shared objects])
-_LT_DECL([], [file_magic_cmd], [1],
-    [Command to use when deplibs_check_method = "file_magic"])
-_LT_DECL([], [file_magic_glob], [1],
-    [How to find potential files when deplibs_check_method = "file_magic"])
-_LT_DECL([], [want_nocaseglob], [1],
-    [Find potential files using nocaseglob when deplibs_check_method = "file_magic"])
-])# _LT_CHECK_MAGIC_METHOD
-
-
-# LT_PATH_NM
-# ----------
-# find the pathname to a BSD- or MS-compatible name lister
-AC_DEFUN([LT_PATH_NM],
-[AC_REQUIRE([AC_PROG_CC])dnl
-AC_CACHE_CHECK([for BSD- or MS-compatible name lister (nm)], lt_cv_path_NM,
-[if test -n "$NM"; then
-  # Let the user override the test.
-  lt_cv_path_NM=$NM
-else
-  lt_nm_to_check=${ac_tool_prefix}nm
-  if test -n "$ac_tool_prefix" && test "$build" = "$host"; then
-    lt_nm_to_check="$lt_nm_to_check nm"
-  fi
-  for lt_tmp_nm in $lt_nm_to_check; do
-    lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-    for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do
-      IFS=$lt_save_ifs
-      test -z "$ac_dir" && ac_dir=.
-      tmp_nm=$ac_dir/$lt_tmp_nm
-      if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then
-	# Check to see if the nm accepts a BSD-compat flag.
-	# Adding the 'sed 1q' prevents false positives on HP-UX, which says:
-	#   nm: unknown option "B" ignored
-	# Tru64's nm complains that /dev/null is an invalid object file
-	# MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty
-	case $build_os in
-	mingw* | windows*) lt_bad_file=conftest.nm/nofile ;;
-	*) lt_bad_file=/dev/null ;;
-	esac
-	case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in
-	*$lt_bad_file* | *'Invalid file or object type'*)
-	  lt_cv_path_NM="$tmp_nm -B"
-	  break 2
-	  ;;
-	*)
-	  case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in
-	  */dev/null*)
-	    lt_cv_path_NM="$tmp_nm -p"
-	    break 2
-	    ;;
-	  *)
-	    lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but
-	    continue # so that we can try to find one that supports BSD flags
-	    ;;
-	  esac
-	  ;;
-	esac
-      fi
-    done
-    IFS=$lt_save_ifs
-  done
-  : ${lt_cv_path_NM=no}
-fi])
-if test no != "$lt_cv_path_NM"; then
-  NM=$lt_cv_path_NM
-else
-  # Didn't find any BSD compatible name lister, look for dumpbin.
-  if test -n "$DUMPBIN"; then :
-    # Let the user override the test.
-  else
-    AC_CHECK_TOOLS(DUMPBIN, [dumpbin "link -dump"], :)
-    case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in
-    *COFF*)
-      DUMPBIN="$DUMPBIN -symbols -headers"
-      ;;
-    *)
-      DUMPBIN=:
-      ;;
-    esac
-  fi
-  AC_SUBST([DUMPBIN])
-  if test : != "$DUMPBIN"; then
-    NM=$DUMPBIN
-  fi
-fi
-test -z "$NM" && NM=nm
-AC_SUBST([NM])
-_LT_DECL([], [NM], [1], [A BSD- or MS-compatible name lister])dnl
-
-AC_CACHE_CHECK([the name lister ($NM) interface], [lt_cv_nm_interface],
-  [lt_cv_nm_interface="BSD nm"
-  echo "int some_variable = 0;" > conftest.$ac_ext
-  (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&AS_MESSAGE_LOG_FD)
-  (eval "$ac_compile" 2>conftest.err)
-  cat conftest.err >&AS_MESSAGE_LOG_FD
-  (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&AS_MESSAGE_LOG_FD)
-  (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
-  cat conftest.err >&AS_MESSAGE_LOG_FD
-  (eval echo "\"\$as_me:$LINENO: output\"" >&AS_MESSAGE_LOG_FD)
-  cat conftest.out >&AS_MESSAGE_LOG_FD
-  if $GREP 'External.*some_variable' conftest.out > /dev/null; then
-    lt_cv_nm_interface="MS dumpbin"
-  fi
-  rm -f conftest*])
-])# LT_PATH_NM
-
-# Old names:
-AU_ALIAS([AM_PROG_NM], [LT_PATH_NM])
-AU_ALIAS([AC_PROG_NM], [LT_PATH_NM])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AM_PROG_NM], [])
-dnl AC_DEFUN([AC_PROG_NM], [])
-
-# _LT_CHECK_SHAREDLIB_FROM_LINKLIB
-# --------------------------------
-# how to determine the name of the shared library
-# associated with a specific link library.
-#  -- PORTME fill in with the dynamic library characteristics
-m4_defun([_LT_CHECK_SHAREDLIB_FROM_LINKLIB],
-[m4_require([_LT_DECL_EGREP])
-m4_require([_LT_DECL_OBJDUMP])
-m4_require([_LT_DECL_DLLTOOL])
-AC_CACHE_CHECK([how to associate runtime and link libraries],
-lt_cv_sharedlib_from_linklib_cmd,
-[lt_cv_sharedlib_from_linklib_cmd='unknown'
-
-case $host_os in
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  # two different shell functions defined in ltmain.sh;
-  # decide which one to use based on capabilities of $DLLTOOL
-  case `$DLLTOOL --help 2>&1` in
-  *--identify-strict*)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib
-    ;;
-  *)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback
-    ;;
-  esac
-  ;;
-*)
-  # fallback: assume linklib IS sharedlib
-  lt_cv_sharedlib_from_linklib_cmd=$ECHO
-  ;;
-esac
-])
-sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd
-test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO
-
-_LT_DECL([], [sharedlib_from_linklib_cmd], [1],
-    [Command to associate shared and link libraries])
-])# _LT_CHECK_SHAREDLIB_FROM_LINKLIB
-
-
-# _LT_PATH_MANIFEST_TOOL
-# ----------------------
-# locate the manifest tool
-m4_defun([_LT_PATH_MANIFEST_TOOL],
-[AC_CHECK_TOOL(MANIFEST_TOOL, mt, :)
-test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt
-AC_CACHE_CHECK([if $MANIFEST_TOOL is a manifest tool], [lt_cv_path_manifest_tool],
-  [lt_cv_path_manifest_tool=no
-  echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&AS_MESSAGE_LOG_FD
-  $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out
-  cat conftest.err >&AS_MESSAGE_LOG_FD
-  if $GREP 'Manifest Tool' conftest.out > /dev/null; then
-    lt_cv_path_manifest_tool=yes
-  fi
-  rm -f conftest*])
-if test yes != "$lt_cv_path_manifest_tool"; then
-  MANIFEST_TOOL=:
-fi
-_LT_DECL([], [MANIFEST_TOOL], [1], [Manifest tool])dnl
-])# _LT_PATH_MANIFEST_TOOL
-
-
-# _LT_DLL_DEF_P([FILE])
-# ---------------------
-# True iff FILE is a Windows DLL '.def' file.
-# Keep in sync with func_dll_def_p in the libtool script
-AC_DEFUN([_LT_DLL_DEF_P],
-[dnl
-  test DEF = "`$SED -n dnl
-    -e '\''s/^[[	 ]]*//'\'' dnl Strip leading whitespace
-    -e '\''/^\(;.*\)*$/d'\'' dnl      Delete empty lines and comments
-    -e '\''s/^\(EXPORTS\|LIBRARY\)\([[	 ]].*\)*$/DEF/p'\'' dnl
-    -e q dnl                          Only consider the first "real" line
-    $1`" dnl
-])# _LT_DLL_DEF_P
-
-
-# LT_LIB_M
-# --------
-# check for math library
-AC_DEFUN([LT_LIB_M],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-LIBM=
-case $host in
-*-*-beos* | *-*-cegcc* | *-*-cygwin* | *-*-haiku* | *-*-mingw* | *-*-pw32* | *-*-darwin*)
-  # These system don't have libm, or don't need it
-  ;;
-*-ncr-sysv4.3*)
-  AC_CHECK_LIB(mw, _mwvalidcheckl, LIBM=-lmw)
-  AC_CHECK_LIB(m, cos, LIBM="$LIBM -lm")
-  ;;
-*)
-  AC_CHECK_LIB(m, cos, LIBM=-lm)
-  ;;
-esac
-AC_SUBST([LIBM])
-])# LT_LIB_M
-
-# Old name:
-AU_ALIAS([AC_CHECK_LIBM], [LT_LIB_M])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_CHECK_LIBM], [])
-
-
-# _LT_COMPILER_NO_RTTI([TAGNAME])
-# -------------------------------
-m4_defun([_LT_COMPILER_NO_RTTI],
-[m4_require([_LT_TAG_COMPILER])dnl
-
-_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=
-
-if test yes = "$GCC"; then
-  case $cc_basename in
-  nvcc*)
-    _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -Xcompiler -fno-builtin' ;;
-  *)
-    _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin' ;;
-  esac
-
-  _LT_COMPILER_OPTION([if $compiler supports -fno-rtti -fno-exceptions],
-    lt_cv_prog_compiler_rtti_exceptions,
-    [-fno-rtti -fno-exceptions], [],
-    [_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)="$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1) -fno-rtti -fno-exceptions"])
-fi
-_LT_TAGDECL([no_builtin_flag], [lt_prog_compiler_no_builtin_flag], [1],
-	[Compiler flag to turn off builtin functions])
-])# _LT_COMPILER_NO_RTTI
-
-
-# _LT_CMD_GLOBAL_SYMBOLS
-# ----------------------
-m4_defun([_LT_CMD_GLOBAL_SYMBOLS],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-AC_REQUIRE([AC_PROG_CC])dnl
-AC_REQUIRE([AC_PROG_AWK])dnl
-AC_REQUIRE([LT_PATH_NM])dnl
-AC_REQUIRE([LT_PATH_LD])dnl
-m4_require([_LT_DECL_SED])dnl
-m4_require([_LT_DECL_EGREP])dnl
-m4_require([_LT_TAG_COMPILER])dnl
-
-# Check for command to grab the raw symbol name followed by C symbol from nm.
-AC_MSG_CHECKING([command to parse $NM output from $compiler object])
-AC_CACHE_VAL([lt_cv_sys_global_symbol_pipe],
-[
-# These are sane defaults that work on at least a few old systems.
-# [They come from Ultrix.  What could be older than Ultrix?!! ;)]
-
-# Character class describing NM global symbol codes.
-symcode='[[BCDEGRST]]'
-
-# Regexp to match symbols that can be accessed directly from C.
-sympat='\([[_A-Za-z]][[_A-Za-z0-9]]*\)'
-
-# Define system-specific variables.
-case $host_os in
-aix*)
-  symcode='[[BCDT]]'
-  ;;
-cygwin* | mingw* | windows* | pw32* | cegcc*)
-  symcode='[[ABCDGISTW]]'
-  ;;
-hpux*)
-  if test ia64 = "$host_cpu"; then
-    symcode='[[ABCDEGRST]]'
-  fi
-  ;;
-irix* | nonstopux*)
-  symcode='[[BCDEGRST]]'
-  ;;
-osf*)
-  symcode='[[BCDEGQRST]]'
-  ;;
-solaris*)
-  symcode='[[BCDRT]]'
-  ;;
-sco3.2v5*)
-  symcode='[[DT]]'
-  ;;
-sysv4.2uw2*)
-  symcode='[[DT]]'
-  ;;
-sysv5* | sco5v6* | unixware* | OpenUNIX*)
-  symcode='[[ABDT]]'
-  ;;
-sysv4)
-  symcode='[[DFNSTU]]'
-  ;;
-esac
-
-# If we're using GNU nm, then use its standard symbol codes.
-case `$NM -V 2>&1` in
-*GNU* | *'with BFD'*)
-  symcode='[[ABCDGIRSTW]]' ;;
-esac
-
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  # Gets list of data symbols to import.
-  lt_cv_sys_global_symbol_to_import="$SED -n -e 's/^I .* \(.*\)$/\1/p'"
-  # Adjust the below global symbol transforms to fixup imported variables.
-  lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'"
-  lt_c_name_hook=" -e 's/^I .* \(.*\)$/  {\"\1\", (void *) 0},/p'"
-  lt_c_name_lib_hook="\
-  -e 's/^I .* \(lib.*\)$/  {\"\1\", (void *) 0},/p'\
-  -e 's/^I .* \(.*\)$/  {\"lib\1\", (void *) 0},/p'"
-else
-  # Disable hooks by default.
-  lt_cv_sys_global_symbol_to_import=
-  lt_cdecl_hook=
-  lt_c_name_hook=
-  lt_c_name_lib_hook=
-fi
-
-# Transform an extracted symbol line into a proper C declaration.
-# Some systems (esp. on ia64) link data and code symbols differently,
-# so use this general approach.
-lt_cv_sys_global_symbol_to_cdecl="$SED -n"\
-$lt_cdecl_hook\
-" -e 's/^T .* \(.*\)$/extern int \1();/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'"
-
-# Transform an extracted symbol line into symbol name and symbol address
-lt_cv_sys_global_symbol_to_c_name_address="$SED -n"\
-$lt_c_name_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/p'"
-
-# Transform an extracted symbol line into symbol name with lib prefix and
-# symbol address.
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="$SED -n"\
-$lt_c_name_lib_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(lib.*\)$/  {\"\1\", (void *) \&\1},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"lib\1\", (void *) \&\1},/p'"
-
-# Handle CRLF in mingw tool chain
-opt_cr=
-case $build_os in
-mingw* | windows*)
-  opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp
-  ;;
-esac
-
-# Try without a prefix underscore, then with it.
-for ac_symprfx in "" "_"; do
-
-  # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol.
-  symxfrm="\\1 $ac_symprfx\\2 \\2"
-
-  # Write the raw and C identifiers.
-  if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-    # Fake it for dumpbin and say T for any non-static function,
-    # D for any global variable and I for any imported variable.
-    # Also find C++ and __fastcall symbols from MSVC++ or ICC,
-    # which start with @ or ?.
-    lt_cv_sys_global_symbol_pipe="$AWK ['"\
-"     {last_section=section; section=\$ 3};"\
-"     /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\
-"     /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\
-"     /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\
-"     /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\
-"     /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\
-"     \$ 0!~/External *\|/{next};"\
-"     / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\
-"     {if(hide[section]) next};"\
-"     {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\
-"     {split(\$ 0,a,/\||\r/); split(a[2],s)};"\
-"     s[1]~/^[@?]/{print f,s[1],s[1]; next};"\
-"     s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\
-"     ' prfx=^$ac_symprfx]"
-  else
-    lt_cv_sys_global_symbol_pipe="$SED -n -e 's/^.*[[	 ]]\($symcode$symcode*\)[[	 ]][[	 ]]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'"
-  fi
-  lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | $SED '/ __gnu_lto/d'"
-
-  # Check to see that the pipe works correctly.
-  pipe_works=no
-
-  rm -f conftest*
-  cat > conftest.$ac_ext <<_LT_EOF
-#ifdef __cplusplus
-extern "C" {
-#endif
-char nm_test_var;
-void nm_test_func(void);
-void nm_test_func(void){}
-#ifdef __cplusplus
-}
-#endif
-int main(void){nm_test_var='a';nm_test_func();return(0);}
-_LT_EOF
-
-  if AC_TRY_EVAL(ac_compile); then
-    # Now try to grab the symbols.
-    nlist=conftest.nm
-    $ECHO "$as_me:$LINENO: $NM conftest.$ac_objext | $lt_cv_sys_global_symbol_pipe > $nlist" >&AS_MESSAGE_LOG_FD
-    if eval "$NM" conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist 2>&AS_MESSAGE_LOG_FD && test -s "$nlist"; then
-      # Try sorting and uniquifying the output.
-      if sort "$nlist" | uniq > "$nlist"T; then
-	mv -f "$nlist"T "$nlist"
-      else
-	rm -f "$nlist"T
-      fi
-
-      # Make sure that we snagged all the symbols we need.
-      if $GREP ' nm_test_var$' "$nlist" >/dev/null; then
-	if $GREP ' nm_test_func$' "$nlist" >/dev/null; then
-	  cat <<_LT_EOF > conftest.$ac_ext
-/* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests.  */
-#if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE
-/* DATA imports from DLLs on WIN32 can't be const, because runtime
-   relocations are performed -- see ld's documentation on pseudo-relocs.  */
-# define LT@&t@_DLSYM_CONST
-#elif defined __osf__
-/* This system does not cope well with relocations in const data.  */
-# define LT@&t@_DLSYM_CONST
-#else
-# define LT@&t@_DLSYM_CONST const
-#endif
-
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-_LT_EOF
-	  # Now generate the symbol file.
-	  eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext'
-
-	  cat <<_LT_EOF >> conftest.$ac_ext
-
-/* The mapping between symbol names and symbols.  */
-LT@&t@_DLSYM_CONST struct {
-  const char *name;
-  void       *address;
-}
-lt__PROGRAM__LTX_preloaded_symbols[[]] =
-{
-  { "@PROGRAM@", (void *) 0 },
-_LT_EOF
-	  $SED "s/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext
-	  cat <<\_LT_EOF >> conftest.$ac_ext
-  {0, (void *) 0}
-};
-
-/* This works around a problem in FreeBSD linker */
-#ifdef FREEBSD_WORKAROUND
-static const void *lt_preloaded_setup() {
-  return lt__PROGRAM__LTX_preloaded_symbols;
-}
-#endif
-
-#ifdef __cplusplus
-}
-#endif
-_LT_EOF
-	  # Now try linking the two files.
-	  mv conftest.$ac_objext conftstm.$ac_objext
-	  lt_globsym_save_LIBS=$LIBS
-	  lt_globsym_save_CFLAGS=$CFLAGS
-	  LIBS=conftstm.$ac_objext
-	  CFLAGS="$CFLAGS$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)"
-	  if AC_TRY_EVAL(ac_link) && test -s conftest$ac_exeext; then
-	    pipe_works=yes
-	  fi
-	  LIBS=$lt_globsym_save_LIBS
-	  CFLAGS=$lt_globsym_save_CFLAGS
-	else
-	  echo "cannot find nm_test_func in $nlist" >&AS_MESSAGE_LOG_FD
-	fi
-      else
-	echo "cannot find nm_test_var in $nlist" >&AS_MESSAGE_LOG_FD
-      fi
-    else
-      echo "cannot run $lt_cv_sys_global_symbol_pipe" >&AS_MESSAGE_LOG_FD
-    fi
-  else
-    echo "$progname: failed program was:" >&AS_MESSAGE_LOG_FD
-    cat conftest.$ac_ext >&5
-  fi
-  rm -rf conftest* conftst*
-
-  # Do not use the global_symbol_pipe unless it works.
-  if test yes = "$pipe_works"; then
-    break
-  else
-    lt_cv_sys_global_symbol_pipe=
-  fi
-done
-])
-if test -z "$lt_cv_sys_global_symbol_pipe"; then
-  lt_cv_sys_global_symbol_to_cdecl=
-fi
-if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then
-  AC_MSG_RESULT(failed)
-else
-  AC_MSG_RESULT(ok)
-fi
-
-# Response file support.
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  nm_file_list_spec='@'
-elif $NM --help 2>/dev/null | grep '[[@]]FILE' >/dev/null; then
-  nm_file_list_spec='@'
-fi
-
-_LT_DECL([global_symbol_pipe], [lt_cv_sys_global_symbol_pipe], [1],
-    [Take the output of nm and produce a listing of raw symbols and C names])
-_LT_DECL([global_symbol_to_cdecl], [lt_cv_sys_global_symbol_to_cdecl], [1],
-    [Transform the output of nm in a proper C declaration])
-_LT_DECL([global_symbol_to_import], [lt_cv_sys_global_symbol_to_import], [1],
-    [Transform the output of nm into a list of symbols to manually relocate])
-_LT_DECL([global_symbol_to_c_name_address],
-    [lt_cv_sys_global_symbol_to_c_name_address], [1],
-    [Transform the output of nm in a C name address pair])
-_LT_DECL([global_symbol_to_c_name_address_lib_prefix],
-    [lt_cv_sys_global_symbol_to_c_name_address_lib_prefix], [1],
-    [Transform the output of nm in a C name address pair when lib prefix is needed])
-_LT_DECL([nm_interface], [lt_cv_nm_interface], [1],
-    [The name lister interface])
-_LT_DECL([], [nm_file_list_spec], [1],
-    [Specify filename containing input files for $NM])
-]) # _LT_CMD_GLOBAL_SYMBOLS
-
-
-# _LT_COMPILER_PIC([TAGNAME])
-# ---------------------------
-m4_defun([_LT_COMPILER_PIC],
-[m4_require([_LT_TAG_COMPILER])dnl
-_LT_TAGVAR(lt_prog_compiler_wl, $1)=
-_LT_TAGVAR(lt_prog_compiler_pic, $1)=
-_LT_TAGVAR(lt_prog_compiler_static, $1)=
-
-m4_if([$1], [CXX], [
-  # C++ specific cases for pic, static, wl, etc.
-  if test yes = "$GXX"; then
-    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-    _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-
-    case $host_os in
-    aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      fi
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            _LT_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-    mingw* | windows* | cygwin* | os2* | pw32* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      m4_if([$1], [GCJ], [],
-	[_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT'])
-      case $host_os in
-      os2*)
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static'
-	;;
-      esac
-      ;;
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common'
-      ;;
-    *djgpp*)
-      # DJGPP does not support shared libraries at all
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)=
-      ;;
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      _LT_TAGVAR(lt_prog_compiler_static, $1)=
-      ;;
-    interix[[3-9]]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic
-      fi
-      ;;
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	;;
-      *)
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	;;
-      esac
-      ;;
-    *qnx* | *nto*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared'
-      ;;
-    *)
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-      ;;
-    esac
-  else
-    case $host_os in
-      aix[[4-9]]*)
-	# All AIX code is PIC.
-	if test ia64 = "$host_cpu"; then
-	  # AIX 5 now supports IA64 processor
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	else
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp'
-	fi
-	;;
-      chorus*)
-	case $cc_basename in
-	cxch68*)
-	  # Green Hills C++ Compiler
-	  # _LT_TAGVAR(lt_prog_compiler_static, $1)="--no_auto_instantiation -u __main -u __premain -u _abort -r $COOL_DIR/lib/libOrb.a $MVME_DIR/lib/CC/libC.a $MVME_DIR/lib/classix/libcx.s.a"
-	  ;;
-	esac
-	;;
-      mingw* | windows* | cygwin* | os2* | pw32* | cegcc*)
-	# This hack is so that the source file can tell whether it is being
-	# built for inclusion in a dll (and should export symbols for example).
-	m4_if([$1], [GCJ], [],
-	  [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT'])
-	;;
-      dgux*)
-	case $cc_basename in
-	  ec++*)
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	    ;;
-	  ghcx*)
-	    # Green Hills C++ Compiler
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      freebsd* | dragonfly* | midnightbsd*)
-	# FreeBSD uses GNU C++
-	;;
-      hpux9* | hpux10* | hpux11*)
-	case $cc_basename in
-	  CC*)
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive'
-	    if test ia64 != "$host_cpu"; then
-	      _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z'
-	    fi
-	    ;;
-	  aCC*)
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive'
-	    case $host_cpu in
-	    hppa*64*|ia64*)
-	      # +Z the default
-	      ;;
-	    *)
-	      _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z'
-	      ;;
-	    esac
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      interix*)
-	# This is c89, which is MS Visual C++ (no shared libs)
-	# Anyone wants to do a port?
-	;;
-      irix5* | irix6* | nonstopux*)
-	case $cc_basename in
-	  CC*)
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-	    # CC pic flag -KPIC is the default.
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-	case $cc_basename in
-	  KCC*)
-	    # KAI C++ Compiler
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	    ;;
-	  ecpc* )
-	    # old Intel C++ for x86_64, which still supported -KPIC.
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-	    ;;
-	  icpc* )
-	    # Intel C++, used to be incompatible with GCC.
-	    # ICC 10 doesn't accept -KPIC any more.
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-	    ;;
-	  pgCC* | pgcpp*)
-	    # Portland Group C++ compiler
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	    ;;
-	  cxx*)
-	    # Compaq C++
-	    # Make sure the PIC flag is empty.  It appears that all Alpha
-	    # Linux and Compaq Tru64 Unix objects are PIC.
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)=
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-	    ;;
-	  xlc* | xlC* | bgxl[[cC]]* | mpixl[[cC]]*)
-	    # IBM XL 8.0, 9.0 on PPC and BlueGene
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-qpic'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-qstaticlink'
-	    ;;
-	  *)
-	    case `$CC -V 2>&1 | $SED 5q` in
-	    *Sun\ C*)
-	      # Sun C++ 5.9
-	      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld '
-	      ;;
-	    esac
-	    ;;
-	esac
-	;;
-      lynxos*)
-	;;
-      m88k*)
-	;;
-      mvs*)
-	case $cc_basename in
-	  cxx*)
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-W c,exportall'
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      netbsd* | netbsdelf*-gnu)
-	;;
-      *-mlibc)
-	;;
-      *qnx* | *nto*)
-        # QNX uses GNU C++, but need to define -shared option too, otherwise
-        # it will coredump.
-        _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared'
-        ;;
-      osf3* | osf4* | osf5*)
-	case $cc_basename in
-	  KCC*)
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,'
-	    ;;
-	  RCC*)
-	    # Rational C++ 2.4.1
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
-	    ;;
-	  cxx*)
-	    # Digital/Compaq C++
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    # Make sure the PIC flag is empty.  It appears that all Alpha
-	    # Linux and Compaq Tru64 Unix objects are PIC.
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)=
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      psos*)
-	;;
-      serenity*)
-        ;;
-      solaris*)
-	case $cc_basename in
-	  CC* | sunCC*)
-	    # Sun C++ 4.2, 5.x and Centerline C++
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld '
-	    ;;
-	  gcx*)
-	    # Green Hills C++ Compiler
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC'
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      sunos4*)
-	case $cc_basename in
-	  CC*)
-	    # Sun C++ 4.x
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	    ;;
-	  lcc*)
-	    # Lucid
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-	case $cc_basename in
-	  CC*)
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	    ;;
-	esac
-	;;
-      tandem*)
-	case $cc_basename in
-	  NCC*)
-	    # NonStop-UX NCC 3.20
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      vxworks*)
-	;;
-      *)
-	_LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no
-	;;
-    esac
-  fi
-],
-[
-  if test yes = "$GCC"; then
-    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-    _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-
-    case $host_os in
-      aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      fi
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            _LT_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      m4_if([$1], [GCJ], [],
-	[_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT'])
-      case $host_os in
-      os2*)
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static'
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common'
-      ;;
-
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      _LT_TAGVAR(lt_prog_compiler_static, $1)=
-      ;;
-
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	# +Z the default
-	;;
-      *)
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	;;
-      esac
-      ;;
-
-    interix[[3-9]]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-
-    msdosdjgpp*)
-      # Just because we use GCC doesn't mean we suddenly get shared libraries
-      # on systems that don't support them.
-      _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no
-      enable_shared=no
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic
-      fi
-      ;;
-
-    *)
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-      ;;
-    esac
-
-    case $cc_basename in
-    nvcc*) # Cuda Compiler Driver 2.2
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Xlinker '
-      if test -n "$_LT_TAGVAR(lt_prog_compiler_pic, $1)"; then
-        _LT_TAGVAR(lt_prog_compiler_pic, $1)="-Xcompiler $_LT_TAGVAR(lt_prog_compiler_pic, $1)"
-      fi
-      ;;
-    esac
-  else
-    # PORTME Check for flag to pass linker flags through the system compiler.
-    case $host_os in
-    aix*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      else
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp'
-      fi
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common'
-      case $cc_basename in
-      nagfor*)
-        # NAG Fortran compiler
-        _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,-Wl,,'
-        _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC'
-        _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-        ;;
-      esac
-      ;;
-
-    mingw* | windows* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      m4_if([$1], [GCJ], [],
-	[_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT'])
-      case $host_os in
-      os2*)
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static'
-	;;
-      esac
-      ;;
-
-    hpux9* | hpux10* | hpux11*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
-      # not for PA HP-UX.
-      case $host_cpu in
-      hppa*64*|ia64*)
-	# +Z the default
-	;;
-      *)
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z'
-	;;
-      esac
-      # Is there a better lt_prog_compiler_static that works with the bundled CC?
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive'
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      # PIC (with -KPIC) is the default.
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-      ;;
-
-    linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-      case $cc_basename in
-      # old Intel for x86_64, which still supported -KPIC.
-      ecc*)
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-        ;;
-      *flang* | ftn | f18* | f95*)
-        # Flang compiler.
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-        ;;
-      # icc used to be incompatible with GCC.
-      # ICC 10 doesn't accept -KPIC any more.
-      icc* | ifort*)
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-        ;;
-      # Lahey Fortran 8.1.
-      lf95*)
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='--shared'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='--static'
-	;;
-      nagfor*)
-	# NAG Fortran compiler
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,-Wl,,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	;;
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-	;;
-      pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
-        # Portland Group compilers (*not* the Pentium gcc compiler,
-	# which looks to be a dead project)
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-        ;;
-      ccc*)
-        _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-        # All Alpha code is PIC.
-        _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-        ;;
-      xl* | bgxl* | bgf* | mpixl*)
-	# IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-qpic'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-qstaticlink'
-	;;
-      *)
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [[1-7]].* | *Sun*Fortran*\ 8.[[0-3]]*)
-	  # Sun Fortran 8.3 passes all unrecognized flags to the linker
-	  _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	  _LT_TAGVAR(lt_prog_compiler_wl, $1)=''
-	  ;;
-	*Sun\ F* | *Sun*Fortran*)
-	  _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	  _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld '
-	  ;;
-	*Sun\ C*)
-	  # Sun C 5.9
-	  _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	  _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	  ;;
-        *Intel*\ [[CF]]*Compiler*)
-	  _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	  _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-	  ;;
-	*Portland\ Group*)
-	  _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	  _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic'
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	  ;;
-	esac
-	;;
-      esac
-      ;;
-
-    newsos6)
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      ;;
-
-    *-mlibc)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared'
-      ;;
-
-    osf3* | osf4* | osf5*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      # All OSF/1 code is PIC.
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-      ;;
-
-    rdos*)
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      case $cc_basename in
-      f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ';;
-      *)
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,';;
-      esac
-      ;;
-
-    sunos4*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld '
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC'
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      ;;
-
-    sysv4 | sysv4.2uw2* | sysv4.3*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-Kconform_pic'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      fi
-      ;;
-
-    sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      ;;
-
-    unicos*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no
-      ;;
-
-    uts4*)
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      ;;
-
-    *)
-      _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no
-      ;;
-    esac
-  fi
-])
-case $host_os in
-  # For platforms that do not support PIC, -DPIC is meaningless:
-  *djgpp*)
-    _LT_TAGVAR(lt_prog_compiler_pic, $1)=
-    ;;
-  *)
-    _LT_TAGVAR(lt_prog_compiler_pic, $1)="$_LT_TAGVAR(lt_prog_compiler_pic, $1)@&t@m4_if([$1],[],[ -DPIC],[m4_if([$1],[CXX],[ -DPIC],[])])"
-    ;;
-esac
-
-AC_CACHE_CHECK([for $compiler option to produce PIC],
-  [_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)],
-  [_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)=$_LT_TAGVAR(lt_prog_compiler_pic, $1)])
-_LT_TAGVAR(lt_prog_compiler_pic, $1)=$_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)
-
-#
-# Check to make sure the PIC flag actually works.
-#
-if test -n "$_LT_TAGVAR(lt_prog_compiler_pic, $1)"; then
-  _LT_COMPILER_OPTION([if $compiler PIC flag $_LT_TAGVAR(lt_prog_compiler_pic, $1) works],
-    [_LT_TAGVAR(lt_cv_prog_compiler_pic_works, $1)],
-    [$_LT_TAGVAR(lt_prog_compiler_pic, $1)@&t@m4_if([$1],[],[ -DPIC],[m4_if([$1],[CXX],[ -DPIC],[])])], [],
-    [case $_LT_TAGVAR(lt_prog_compiler_pic, $1) in
-     "" | " "*) ;;
-     *) _LT_TAGVAR(lt_prog_compiler_pic, $1)=" $_LT_TAGVAR(lt_prog_compiler_pic, $1)" ;;
-     esac],
-    [_LT_TAGVAR(lt_prog_compiler_pic, $1)=
-     _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no])
-fi
-_LT_TAGDECL([pic_flag], [lt_prog_compiler_pic], [1],
-	[Additional compiler flags for building library objects])
-
-_LT_TAGDECL([wl], [lt_prog_compiler_wl], [1],
-	[How to pass a linker flag through the compiler])
-#
-# Check to make sure the static flag actually works.
-#
-wl=$_LT_TAGVAR(lt_prog_compiler_wl, $1) eval lt_tmp_static_flag=\"$_LT_TAGVAR(lt_prog_compiler_static, $1)\"
-_LT_LINKER_OPTION([if $compiler static flag $lt_tmp_static_flag works],
-  _LT_TAGVAR(lt_cv_prog_compiler_static_works, $1),
-  $lt_tmp_static_flag,
-  [],
-  [_LT_TAGVAR(lt_prog_compiler_static, $1)=])
-_LT_TAGDECL([link_static_flag], [lt_prog_compiler_static], [1],
-	[Compiler flag to prevent dynamic linking])
-])# _LT_COMPILER_PIC
-
-
-# _LT_LINKER_SHLIBS([TAGNAME])
-# ----------------------------
-# See if the linker supports building shared libraries.
-m4_defun([_LT_LINKER_SHLIBS],
-[AC_REQUIRE([LT_PATH_LD])dnl
-AC_REQUIRE([LT_PATH_NM])dnl
-m4_require([_LT_PATH_MANIFEST_TOOL])dnl
-m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_EGREP])dnl
-m4_require([_LT_DECL_SED])dnl
-m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl
-m4_require([_LT_TAG_COMPILER])dnl
-AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries])
-m4_if([$1], [CXX], [
-  _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
-  _LT_TAGVAR(exclude_expsyms, $1)=['_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*']
-  case $host_os in
-  aix[[4-9]]*)
-    # If we're using GNU nm, then we don't want the "-C" option.
-    # -C means demangle to GNU nm, but means don't demangle to AIX nm.
-    # Without the "-l" option, or with the "-B" option, AIX nm treats
-    # weak defined symbols like other global defined symbols, whereas
-    # GNU nm marks them as "W".
-    # While the 'weak' keyword is ignored in the Export File, we need
-    # it in the Import File for the 'aix-soname' feature, so we have
-    # to replace the "-B" option with "-P" for AIX nm.
-    if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then
-      _LT_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && ([substr](\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols'
-    else
-      _LT_TAGVAR(export_symbols_cmds, $1)='`func_echo_all $NM | $SED -e '\''s/B\([[^B]]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && ([substr](\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols'
-    fi
-    ;;
-  pw32*)
-    _LT_TAGVAR(export_symbols_cmds, $1)=$ltdll_cmds
-    ;;
-  cygwin* | mingw* | windows* | cegcc*)
-    case $cc_basename in
-    cl* | icl*)
-      _LT_TAGVAR(exclude_expsyms, $1)='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*'
-      ;;
-    *)
-      _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1 DATA/;s/^.*[[ ]]__nm__\([[^ ]]*\)[[ ]][[^ ]]*/\1 DATA/;/^I[[ ]]/d;/^[[AITW]][[ ]]/s/.* //'\'' | sort | uniq > $export_symbols'
-      _LT_TAGVAR(exclude_expsyms, $1)=['[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname']
-      ;;
-    esac
-    ;;
-  *)
-    _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
-    ;;
-  esac
-], [
-  runpath_var=
-  _LT_TAGVAR(allow_undefined_flag, $1)=
-  _LT_TAGVAR(always_export_symbols, $1)=no
-  _LT_TAGVAR(archive_cmds, $1)=
-  _LT_TAGVAR(archive_expsym_cmds, $1)=
-  _LT_TAGVAR(compiler_needs_object, $1)=no
-  _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no
-  _LT_TAGVAR(export_dynamic_flag_spec, $1)=
-  _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
-  _LT_TAGVAR(hardcode_automatic, $1)=no
-  _LT_TAGVAR(hardcode_direct, $1)=no
-  _LT_TAGVAR(hardcode_direct_absolute, $1)=no
-  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
-  _LT_TAGVAR(hardcode_libdir_separator, $1)=
-  _LT_TAGVAR(hardcode_minus_L, $1)=no
-  _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported
-  _LT_TAGVAR(inherit_rpath, $1)=no
-  _LT_TAGVAR(link_all_deplibs, $1)=unknown
-  _LT_TAGVAR(module_cmds, $1)=
-  _LT_TAGVAR(module_expsym_cmds, $1)=
-  _LT_TAGVAR(old_archive_from_new_cmds, $1)=
-  _LT_TAGVAR(old_archive_from_expsyms_cmds, $1)=
-  _LT_TAGVAR(thread_safe_flag_spec, $1)=
-  _LT_TAGVAR(whole_archive_flag_spec, $1)=
-  # include_expsyms should be a list of space-separated symbols to be *always*
-  # included in the symbol list
-  _LT_TAGVAR(include_expsyms, $1)=
-  # exclude_expsyms can be an extended regexp of symbols to exclude
-  # it will be wrapped by ' (' and ')$', so one must not match beginning or
-  # end of line.  Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc',
-  # as well as any symbol that contains 'd'.
-  _LT_TAGVAR(exclude_expsyms, $1)=['_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*']
-  # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out
-  # platforms (ab)use it in PIC code, but their linkers get confused if
-  # the symbol is explicitly referenced.  Since portable code cannot
-  # rely on this symbol name, it's probably fine to never include it in
-  # preloaded symbol tables.
-  # Exclude shared library initialization/finalization symbols.
-dnl Note also adjust exclude_expsyms for C++ above.
-  extract_expsyms_cmds=
-
-  case $host_os in
-  cygwin* | mingw* | windows* | pw32* | cegcc*)
-    # FIXME: the MSVC++ and ICC port hasn't been tested in a loooong time
-    # When not using gcc, we currently assume that we are using
-    # Microsoft Visual C++ or Intel C++ Compiler.
-    if test yes != "$GCC"; then
-      with_gnu_ld=no
-    fi
-    ;;
-  interix*)
-    # we just hope/assume this is gcc and not c89 (= MSVC++ or ICC)
-    with_gnu_ld=yes
-    ;;
-  esac
-
-  _LT_TAGVAR(ld_shlibs, $1)=yes
-
-  # On some targets, GNU ld is compatible enough with the native linker
-  # that we're better off using the native interface for both.
-  lt_use_gnu_ld_interface=no
-  if test yes = "$with_gnu_ld"; then
-    case $host_os in
-      aix*)
-	# The AIX port of GNU ld has always aspired to compatibility
-	# with the native linker.  However, as the warning in the GNU ld
-	# block says, versions before 2.19.5* couldn't really create working
-	# shared libraries, regardless of the interface used.
-	case `$LD -v 2>&1` in
-	  *\ \(GNU\ Binutils\)\ 2.19.5*) ;;
-	  *\ \(GNU\ Binutils\)\ 2.[[2-9]]*) ;;
-	  *\ \(GNU\ Binutils\)\ [[3-9]]*) ;;
-	  *)
-	    lt_use_gnu_ld_interface=yes
-	    ;;
-	esac
-	;;
-      *)
-	lt_use_gnu_ld_interface=yes
-	;;
-    esac
-  fi
-
-  if test yes = "$lt_use_gnu_ld_interface"; then
-    # If archive_cmds runs LD, not CC, wlarc should be empty
-    wlarc='$wl'
-
-    # Set some defaults for GNU ld with shared library support. These
-    # are reset later if shared libraries are not supported. Putting them
-    # here allows them to be overridden if necessary.
-    runpath_var=LD_RUN_PATH
-    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-    _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
-    # ancient GNU ld didn't support --whole-archive et. al.
-    if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then
-      _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
-    else
-      _LT_TAGVAR(whole_archive_flag_spec, $1)=
-    fi
-    supports_anon_versioning=no
-    case `$LD -v | $SED -e 's/([[^)]]\+)\s\+//' 2>&1` in
-      *GNU\ gold*) supports_anon_versioning=yes ;;
-      *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.10.*) ;; # catch versions < 2.11
-      *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ...
-      *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ...
-      *\ 2.11.*) ;; # other 2.11 versions
-      *) supports_anon_versioning=yes ;;
-    esac
-
-    # See if GNU ld supports shared libraries.
-    case $host_os in
-    aix[[3-9]]*)
-      # On AIX/PPC, the GNU linker is very broken
-      if test ia64 != "$host_cpu"; then
-	_LT_TAGVAR(ld_shlibs, $1)=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: the GNU linker, at least up to release 2.19, is reported
-*** to be unable to reliably create shared libraries on AIX.
-*** Therefore, libtool is disabling shared libraries support.  If you
-*** really care for shared libraries, you may want to install binutils
-*** 2.20 or above, or modify your PATH so that a non-GNU linker is found.
-*** You will then need to restart the configuration process.
-
-_LT_EOF
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            _LT_TAGVAR(archive_expsym_cmds, $1)=''
-        ;;
-      m68k)
-            _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-            _LT_TAGVAR(hardcode_minus_L, $1)=yes
-        ;;
-      esac
-      ;;
-
-    beos*)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	_LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	# Joseph Beckenbach <jrb3@best.com> says some releases of gcc
-	# support --undefined.  This deserves some investigation.  FIXME
-	_LT_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      else
-	_LT_TAGVAR(ld_shlibs, $1)=no
-      fi
-      ;;
-
-    cygwin* | mingw* | windows* | pw32* | cegcc*)
-      # _LT_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless,
-      # as there is no search path for DLLs.
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-all-symbols'
-      _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-      _LT_TAGVAR(always_export_symbols, $1)=no
-      _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-      _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1 DATA/;s/^.*[[ ]]__nm__\([[^ ]]*\)[[ ]][[^ ]]*/\1 DATA/;/^I[[ ]]/d;/^[[AITW]][[ ]]/s/.* //'\'' | sort | uniq > $export_symbols'
-      _LT_TAGVAR(exclude_expsyms, $1)=['[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname']
-      _LT_TAGVAR(file_list_spec, $1)='@'
-
-      if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then
-        _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-	# If the export-symbols file already is a .def file, use it as
-	# is; otherwise, prepend EXPORTS...
-	_LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then
-          cp $export_symbols $output_objdir/$soname.def;
-        else
-          echo EXPORTS > $output_objdir/$soname.def;
-          cat $export_symbols >> $output_objdir/$soname.def;
-        fi~
-        $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-      else
-	_LT_TAGVAR(ld_shlibs, $1)=no
-      fi
-      ;;
-
-    haiku*)
-      _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      _LT_TAGVAR(link_all_deplibs, $1)=no
-      ;;
-
-    os2*)
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-      _LT_TAGVAR(hardcode_minus_L, $1)=yes
-      _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-      shrext_cmds=.dll
-      _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      _LT_TAGVAR(old_archive_from_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-      _LT_TAGVAR(file_list_spec, $1)='@'
-      ;;
-
-    interix[[3-9]]*)
-      _LT_TAGVAR(hardcode_direct, $1)=no
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-      # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc.
-      # Instead, shared libraries are loaded at an image base (0x10000000 by
-      # default) and relocated if they conflict, which is a slow very memory
-      # consuming and fragmenting process.  To avoid this, we pick a random,
-      # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link
-      # time.  Moving up from 0x10000000 also allows more sbrk(2) space.
-      _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      _LT_TAGVAR(archive_expsym_cmds, $1)='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      ;;
-
-    gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu)
-      tmp_diet=no
-      if test linux-dietlibc = "$host_os"; then
-	case $cc_basename in
-	  diet\ *) tmp_diet=yes;;	# linux-dietlibc with static linking (!diet-dyn)
-	esac
-      fi
-      if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \
-	 && test no = "$tmp_diet"
-      then
-	tmp_addflag=' $pic_flag'
-	tmp_sharedflag='-shared'
-	case $cc_basename,$host_cpu in
-        pgcc*)				# Portland Group C compiler
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag'
-	  ;;
-	pgf77* | pgf90* | pgf95* | pgfortran*)
-					# Portland Group f77 and f90 compilers
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag -Mnomain' ;;
-	ecc*,ia64* | icc*,ia64*)	# Intel C compiler on ia64
-	  tmp_addflag=' -i_dynamic' ;;
-	efc*,ia64* | ifort*,ia64*)	# Intel Fortran compiler on ia64
-	  tmp_addflag=' -i_dynamic -nofor_main' ;;
-	ifc* | ifort*)			# Intel Fortran compiler
-	  tmp_addflag=' -nofor_main' ;;
-	lf95*)				# Lahey Fortran 8.1
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)=
-	  tmp_sharedflag='--shared' ;;
-        nagfor*)                        # NAGFOR 5.3
-          tmp_sharedflag='-Wl,-shared' ;;
-	xl[[cC]]* | bgxl[[cC]]* | mpixl[[cC]]*) # IBM XL C 8.0 on PPC (deal with xlf below)
-	  tmp_sharedflag='-qmkshrobj'
-	  tmp_addflag= ;;
-	nvcc*)	# Cuda Compiler Driver 2.2
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  _LT_TAGVAR(compiler_needs_object, $1)=yes
-	  ;;
-	esac
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ C*)			# Sun C 5.9
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  _LT_TAGVAR(compiler_needs_object, $1)=yes
-	  tmp_sharedflag='-G' ;;
-	*Sun\ F*)			# Sun Fortran 8.3
-	  tmp_sharedflag='-G' ;;
-	esac
-	_LT_TAGVAR(archive_cmds, $1)='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-
-        if test yes = "$supports_anon_versioning"; then
-          _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~
-            cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-            echo "local: *; };" >> $output_objdir/$libname.ver~
-            $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib'
-        fi
-
-	case $cc_basename in
-	tcc*)
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-	  _LT_TAGVAR(export_dynamic_flag_spec, $1)='-rdynamic'
-	  ;;
-	xlf* | bgf* | bgxlf* | mpixlf*)
-	  # IBM XL Fortran 10.1 on PPC cannot create shared libs itself
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='--whole-archive$convenience --no-whole-archive'
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-	  _LT_TAGVAR(archive_cmds, $1)='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib'
-	  if test yes = "$supports_anon_versioning"; then
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~
-              cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-              echo "local: *; };" >> $output_objdir/$libname.ver~
-              $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib'
-	  fi
-	  ;;
-	esac
-      else
-        _LT_TAGVAR(ld_shlibs, $1)=no
-      fi
-      ;;
-
-    *-mlibc)
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      ;;
-
-    netbsd* | netbsdelf*-gnu)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	_LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib'
-	wlarc=
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      fi
-      ;;
-
-    solaris*)
-      if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then
-	_LT_TAGVAR(ld_shlibs, $1)=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: The releases 2.8.* of the GNU linker cannot reliably
-*** create shared libraries on Solaris systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.9.1 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-      elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	_LT_TAGVAR(ld_shlibs, $1)=no
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*)
-      case `$LD -v 2>&1` in
-        *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.1[[0-5]].*)
-	_LT_TAGVAR(ld_shlibs, $1)=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot
-*** reliably create shared libraries on SCO systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.16.91.0.3 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-	;;
-	*)
-	  # For security reasons, it is highly recommended that you always
-	  # use absolute paths for naming shared libraries, and exclude the
-	  # DT_RUNPATH tag from executables and libraries.  But doing so
-	  # requires that you compile everything twice, which is a pain.
-	  if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-	  else
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	  fi
-	;;
-      esac
-      ;;
-
-    sunos4*)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      wlarc=
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    *)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	_LT_TAGVAR(ld_shlibs, $1)=no
-      fi
-      ;;
-    esac
-
-    if test no = "$_LT_TAGVAR(ld_shlibs, $1)"; then
-      runpath_var=
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)=
-      _LT_TAGVAR(whole_archive_flag_spec, $1)=
-    fi
-  else
-    # PORTME fill in a description of your system's linker (not GNU ld)
-    case $host_os in
-    aix3*)
-      _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-      _LT_TAGVAR(always_export_symbols, $1)=yes
-      _LT_TAGVAR(archive_expsym_cmds, $1)='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname'
-      # Note: this linker hardcodes the directories in LIBPATH if there
-      # are no directories specified by -L.
-      _LT_TAGVAR(hardcode_minus_L, $1)=yes
-      if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then
-	# Neither direct hardcoding nor static linking is supported with a
-	# broken collect2.
-	_LT_TAGVAR(hardcode_direct, $1)=unsupported
-      fi
-      ;;
-
-    aix[[4-9]]*)
-      if test ia64 = "$host_cpu"; then
-	# On IA64, the linker does run time linking by default, so we don't
-	# have to do anything special.
-	aix_use_runtimelinking=no
-	exp_sym_flag='-Bexport'
-	no_entry_flag=
-      else
-	# If we're using GNU nm, then we don't want the "-C" option.
-	# -C means demangle to GNU nm, but means don't demangle to AIX nm.
-	# Without the "-l" option, or with the "-B" option, AIX nm treats
-	# weak defined symbols like other global defined symbols, whereas
-	# GNU nm marks them as "W".
-	# While the 'weak' keyword is ignored in the Export File, we need
-	# it in the Import File for the 'aix-soname' feature, so we have
-	# to replace the "-B" option with "-P" for AIX nm.
-	if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then
-	  _LT_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && ([substr](\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols'
-	else
-	  _LT_TAGVAR(export_symbols_cmds, $1)='`func_echo_all $NM | $SED -e '\''s/B\([[^B]]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && ([substr](\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols'
-	fi
-	aix_use_runtimelinking=no
-
-	# Test if we are trying to use run time linking or normal
-	# AIX style linking. If -brtl is somewhere in LDFLAGS, we
-	# have runtime linking enabled, and use it for executables.
-	# For shared libraries, we enable/disable runtime linking
-	# depending on the kind of the shared library created -
-	# when "with_aix_soname,aix_use_runtimelinking" is:
-	# "aix,no"   lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "aix,yes"  lib.so          shared, rtl:yes, for executables
-	#            lib.a           static archive
-	# "both,no"  lib.so.V(shr.o) shared, rtl:yes
-	#            lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a(lib.so.V) shared, rtl:no
-	# "svr4,*"   lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a           static archive
-	case $host_os in aix4.[[23]]|aix4.[[23]].*|aix[[5-9]]*)
-	  for ld_flag in $LDFLAGS; do
-	  if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then
-	    aix_use_runtimelinking=yes
-	    break
-	  fi
-	  done
-	  if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then
-	    # With aix-soname=svr4, we create the lib.so.V shared archives only,
-	    # so we don't have lib.a shared libs to link our executables.
-	    # We have to force runtime linking in this case.
-	    aix_use_runtimelinking=yes
-	    LDFLAGS="$LDFLAGS -Wl,-brtl"
-	  fi
-	  ;;
-	esac
-
-	exp_sym_flag='-bexport'
-	no_entry_flag='-bnoentry'
-      fi
-
-      # When large executables or shared objects are built, AIX ld can
-      # have problems creating the table of contents.  If linking a library
-      # or program results in "error TOC overflow" add -mminimal-toc to
-      # CXXFLAGS/CFLAGS for g++/gcc.  In the cases where that is not
-      # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS.
-
-      _LT_TAGVAR(archive_cmds, $1)=''
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=':'
-      _LT_TAGVAR(link_all_deplibs, $1)=yes
-      _LT_TAGVAR(file_list_spec, $1)='$wl-f,'
-      case $with_aix_soname,$aix_use_runtimelinking in
-      aix,*) ;; # traditional, no import file
-      svr4,* | *,yes) # use import file
-	# The Import File defines what to hardcode.
-	_LT_TAGVAR(hardcode_direct, $1)=no
-	_LT_TAGVAR(hardcode_direct_absolute, $1)=no
-	;;
-      esac
-
-      if test yes = "$GCC"; then
-	case $host_os in aix4.[[012]]|aix4.[[012]].*)
-	# We only want to do this on AIX 4.2 and lower, the check
-	# below for broken collect2 doesn't work under 4.3+
-	  collect2name=`$CC -print-prog-name=collect2`
-	  if test -f "$collect2name" &&
-	   strings "$collect2name" | $GREP resolve_lib_name >/dev/null
-	  then
-	  # We have reworked collect2
-	  :
-	  else
-	  # We have old collect2
-	  _LT_TAGVAR(hardcode_direct, $1)=unsupported
-	  # It fails to find uninstalled libraries when the uninstalled
-	  # path is not listed in the libpath.  Setting hardcode_minus_L
-	  # to unsupported forces relinking
-	  _LT_TAGVAR(hardcode_minus_L, $1)=yes
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-	  _LT_TAGVAR(hardcode_libdir_separator, $1)=
-	  fi
-	  ;;
-	esac
-	shared_flag='-shared'
-	if test yes = "$aix_use_runtimelinking"; then
-	  shared_flag="$shared_flag "'$wl-G'
-	fi
-	# Need to ensure runtime linking is disabled for the traditional
-	# shared library, or the linker may eventually find shared libraries
-	# /with/ Import File - we do not want to mix them.
-	shared_flag_aix='-shared'
-	shared_flag_svr4='-shared $wl-G'
-      else
-	# not using gcc
-	if test ia64 = "$host_cpu"; then
-	# VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release
-	# chokes on -Wl,-G. The following line is correct:
-	  shared_flag='-G'
-	else
-	  if test yes = "$aix_use_runtimelinking"; then
-	    shared_flag='$wl-G'
-	  else
-	    shared_flag='$wl-bM:SRE'
-	  fi
-	  shared_flag_aix='$wl-bM:SRE'
-	  shared_flag_svr4='$wl-G'
-	fi
-      fi
-
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-bexpall'
-      # It seems that -bexpall does not export symbols beginning with
-      # underscore (_), so it is better to generate a list of symbols to export.
-      _LT_TAGVAR(always_export_symbols, $1)=yes
-      if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then
-	# Warning - without using the other runtime loading flags (-brtl),
-	# -berok will link without error, but may produce a broken library.
-	_LT_TAGVAR(allow_undefined_flag, $1)='-berok'
-        # Determine the default libpath from the value encoded in an
-        # empty executable.
-        _LT_SYS_MODULE_PATH_AIX([$1])
-        _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath"
-        _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag
-      else
-	if test ia64 = "$host_cpu"; then
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $libdir:/usr/lib:/lib'
-	  _LT_TAGVAR(allow_undefined_flag, $1)="-z nodefs"
-	  _LT_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols"
-	else
-	 # Determine the default libpath from the value encoded in an
-	 # empty executable.
-	 _LT_SYS_MODULE_PATH_AIX([$1])
-	 _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath"
-	  # Warning - without using the other run time loading flags,
-	  # -berok will link without error, but may produce a broken library.
-	  _LT_TAGVAR(no_undefined_flag, $1)=' $wl-bernotok'
-	  _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-berok'
-	  if test yes = "$with_gnu_ld"; then
-	    # We only use this code for GNU lds that support --whole-archive.
-	    _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive'
-	  else
-	    # Exported symbols can be pulled into shared objects from archives
-	    _LT_TAGVAR(whole_archive_flag_spec, $1)='$convenience'
-	  fi
-	  _LT_TAGVAR(archive_cmds_need_lc, $1)=yes
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d'
-	  # -brtl affects multiple linker settings, -berok does not and is overridden later
-	  compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([[, ]]\\)%-berok\\1%g"`'
-	  if test svr4 != "$with_aix_soname"; then
-	    # This is similar to how AIX traditionally builds its shared libraries.
-	    _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname'
-	  fi
-	  if test aix != "$with_aix_soname"; then
-	    _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp'
-	  else
-	    # used by -dlpreopen to get the symbols
-	    _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$MV  $output_objdir/$realname.d/$soname $output_objdir'
-	  fi
-	  _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$RM -r $output_objdir/$realname.d'
-	fi
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            _LT_TAGVAR(archive_expsym_cmds, $1)=''
-        ;;
-      m68k)
-            _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-            _LT_TAGVAR(hardcode_minus_L, $1)=yes
-        ;;
-      esac
-      ;;
-
-    bsdi[[45]]*)
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)=-rdynamic
-      ;;
-
-    cygwin* | mingw* | windows* | pw32* | cegcc*)
-      # When not using gcc, we currently assume that we are using
-      # Microsoft Visual C++ or Intel C++ Compiler.
-      # hardcode_libdir_flag_spec is actually meaningless, as there is
-      # no search path for DLLs.
-      case $cc_basename in
-      cl* | icl*)
-	# Native MSVC or ICC
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' '
-	_LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	_LT_TAGVAR(always_export_symbols, $1)=yes
-	_LT_TAGVAR(file_list_spec, $1)='@'
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	_LT_TAGVAR(archive_cmds, $1)='$CC -Fe$output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames='
-	_LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then
-            cp "$export_symbols" "$output_objdir/$soname.def";
-            echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp";
-          else
-            $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp;
-          fi~
-          $CC -Fe$tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~
-          linknames='
-	# The linker will not automatically build a static lib if we build a DLL.
-	# _LT_TAGVAR(old_archive_from_new_cmds, $1)='true'
-	_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-	_LT_TAGVAR(exclude_expsyms, $1)='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*'
-	_LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1,DATA/'\'' | $SED -e '\''/^[[AITW]][[ ]]/s/.*[[ ]]//'\'' | sort | uniq > $export_symbols'
-	# Don't use ranlib
-	_LT_TAGVAR(old_postinstall_cmds, $1)='chmod 644 $oldlib'
-	_LT_TAGVAR(postlink_cmds, $1)='lt_outputfile="@OUTPUT@"~
-          lt_tool_outputfile="@TOOL_OUTPUT@"~
-          case $lt_outputfile in
-            *.exe|*.EXE) ;;
-            *)
-              lt_outputfile=$lt_outputfile.exe
-              lt_tool_outputfile=$lt_tool_outputfile.exe
-              ;;
-          esac~
-          if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then
-            $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1;
-            $RM "$lt_outputfile.manifest";
-          fi'
-	;;
-      *)
-	# Assume MSVC and ICC wrapper
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' '
-	_LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	_LT_TAGVAR(archive_cmds, $1)='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames='
-	# The linker will automatically build a .lib file if we build a DLL.
-	_LT_TAGVAR(old_archive_from_new_cmds, $1)='true'
-	# FIXME: Should let the user specify the lib program.
-	_LT_TAGVAR(old_archive_cmds, $1)='lib -OUT:$oldlib$oldobjs$old_deplibs'
-	_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      _LT_DARWIN_LINKER_FEATURES($1)
-      ;;
-
-    dgux*)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor
-    # support.  Future versions do this automatically, but an explicit c++rt0.o
-    # does not break anything, and helps significantly (at the cost of a little
-    # extra space).
-    freebsd2.2*)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o'
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    # Unfortunately, older versions of FreeBSD 2 do not have this feature.
-    freebsd2.*)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_minus_L, $1)=yes
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    # FreeBSD 3 and greater uses gcc -shared to do shared libraries.
-    freebsd* | dragonfly* | midnightbsd*)
-      _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    hpux9*)
-      if test yes = "$GCC"; then
-	_LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      fi
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-
-      # hardcode_minus_L: Not really in the search PATH,
-      # but as the default location of the library.
-      _LT_TAGVAR(hardcode_minus_L, $1)=yes
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-      ;;
-
-    hpux10*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      if test no = "$with_gnu_ld"; then
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
-	_LT_TAGVAR(hardcode_libdir_separator, $1)=:
-	_LT_TAGVAR(hardcode_direct, $1)=yes
-	_LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-	_LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-	# hardcode_minus_L: Not really in the search PATH,
-	# but as the default location of the library.
-	_LT_TAGVAR(hardcode_minus_L, $1)=yes
-      fi
-      ;;
-
-    hpux11*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	case $host_cpu in
-	hppa*64*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	esac
-      else
-	case $host_cpu in
-	hppa*64*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	m4_if($1, [], [
-	  # Older versions of the 11.00 compiler do not understand -b yet
-	  # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does)
-	  _LT_LINKER_OPTION([if $CC understands -b],
-	    _LT_TAGVAR(lt_cv_prog_compiler__b, $1), [-b],
-	    [_LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'],
-	    [_LT_TAGVAR(archive_cmds, $1)='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'])],
-	  [_LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'])
-	  ;;
-	esac
-      fi
-      if test no = "$with_gnu_ld"; then
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
-	_LT_TAGVAR(hardcode_libdir_separator, $1)=:
-
-	case $host_cpu in
-	hppa*64*|ia64*)
-	  _LT_TAGVAR(hardcode_direct, $1)=no
-	  _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	  ;;
-	*)
-	  _LT_TAGVAR(hardcode_direct, $1)=yes
-	  _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-	  _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-
-	  # hardcode_minus_L: Not really in the search PATH,
-	  # but as the default location of the library.
-	  _LT_TAGVAR(hardcode_minus_L, $1)=yes
-	  ;;
-	esac
-      fi
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      if test yes = "$GCC"; then
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	# Try to use the -exported_symbol ld option, if it does not
-	# work, assume that -exports_file does not work either and
-	# implicitly export all symbols.
-	# This should be the same for all languages, so no per-tag cache variable.
-	AC_CACHE_CHECK([whether the $host_os linker accepts -exported_symbol],
-	  [lt_cv_irix_exported_symbol],
-	  [save_LDFLAGS=$LDFLAGS
-	   LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null"
-	   AC_LINK_IFELSE(
-	     [AC_LANG_SOURCE(
-	        [AC_LANG_CASE([C], [[int foo (void) { return 0; }]],
-			      [C++], [[int foo (void) { return 0; }]],
-			      [Fortran 77], [[
-      subroutine foo
-      end]],
-			      [Fortran], [[
-      subroutine foo
-      end]])])],
-	      [lt_cv_irix_exported_symbol=yes],
-	      [lt_cv_irix_exported_symbol=no])
-           LDFLAGS=$save_LDFLAGS])
-	if test yes = "$lt_cv_irix_exported_symbol"; then
-          _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib'
-	fi
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib'
-      fi
-      _LT_TAGVAR(archive_cmds_need_lc, $1)='no'
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-      _LT_TAGVAR(inherit_rpath, $1)=yes
-      _LT_TAGVAR(link_all_deplibs, $1)=yes
-      ;;
-
-    linux*)
-      case $cc_basename in
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	_LT_TAGVAR(ld_shlibs, $1)=yes
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-	;;
-      esac
-      ;;
-
-    *-mlibc)
-      ;;
-
-    netbsd* | netbsdelf*-gnu)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	_LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'  # a.out
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$LD -shared -o $lib $libobjs $deplibs $linker_flags'      # ELF
-      fi
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    newsos6)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    *nto* | *qnx*)
-      ;;
-
-    openbsd*)
-      if test -f /usr/libexec/ld.so; then
-	_LT_TAGVAR(hardcode_direct, $1)=yes
-	_LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	_LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-	if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols'
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	  _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-	else
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	fi
-      else
-	_LT_TAGVAR(ld_shlibs, $1)=no
-      fi
-      ;;
-
-    os2*)
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-      _LT_TAGVAR(hardcode_minus_L, $1)=yes
-      _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-      shrext_cmds=.dll
-      _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      _LT_TAGVAR(old_archive_from_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-      _LT_TAGVAR(file_list_spec, $1)='@'
-      ;;
-
-    osf3*)
-      if test yes = "$GCC"; then
-	_LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*'
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-      else
-	_LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*'
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-      fi
-      _LT_TAGVAR(archive_cmds_need_lc, $1)='no'
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-      ;;
-
-    osf4* | osf5*)	# as osf3* with the addition of -msym flag
-      if test yes = "$GCC"; then
-	_LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*'
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-      else
-	_LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*'
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~
-          $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp'
-
-	# Both c and cxx compiler support -rpath directly
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir'
-      fi
-      _LT_TAGVAR(archive_cmds_need_lc, $1)='no'
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-      ;;
-
-    serenity*)
-      ;;
-
-    solaris*)
-      _LT_TAGVAR(no_undefined_flag, $1)=' -z defs'
-      if test yes = "$GCC"; then
-	wlarc='$wl'
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-          $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-      else
-	case `$CC -V 2>&1` in
-	*"Compilers 5.0"*)
-	  wlarc=''
-	  _LT_TAGVAR(archive_cmds, $1)='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp'
-	  ;;
-	*)
-	  wlarc='$wl'
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags'
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-	  ;;
-	esac
-      fi
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      case $host_os in
-      solaris2.[[0-5]] | solaris2.[[0-5]].*) ;;
-      *)
-	# The compiler driver will combine and reorder linker options,
-	# but understands '-z linker_flag'.  GCC discards it without '$wl',
-	# but is careful enough not to reorder.
-	# Supported since Solaris 2.6 (maybe 2.5.1?)
-	if test yes = "$GCC"; then
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract'
-	else
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='-z allextract$convenience -z defaultextract'
-	fi
-	;;
-      esac
-      _LT_TAGVAR(link_all_deplibs, $1)=yes
-      ;;
-
-    sunos4*)
-      if test sequent = "$host_vendor"; then
-	# Use $CC to link under sequent, because it throws in some extra .o
-	# files that make .init and .fini sections work.
-	_LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_minus_L, $1)=yes
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    sysv4)
-      case $host_vendor in
-	sni)
-	  _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  _LT_TAGVAR(hardcode_direct, $1)=yes # is this really true???
-	;;
-	siemens)
-	  ## LD is ld it makes a PLAMLIB
-	  ## CC just makes a GrossModule.
-	  _LT_TAGVAR(archive_cmds, $1)='$LD -G -o $lib $libobjs $deplibs $linker_flags'
-	  _LT_TAGVAR(reload_cmds, $1)='$CC -r -o $output$reload_objs'
-	  _LT_TAGVAR(hardcode_direct, $1)=no
-        ;;
-	motorola)
-	  _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  _LT_TAGVAR(hardcode_direct, $1)=no #Motorola manual says yes, but my tests say they lie
-	;;
-      esac
-      runpath_var='LD_RUN_PATH'
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    sysv4.3*)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)='-Bexport'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	_LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	_LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	runpath_var=LD_RUN_PATH
-	hardcode_runpath_var=yes
-	_LT_TAGVAR(ld_shlibs, $1)=yes
-      fi
-      ;;
-
-    sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7* | sco3.2v5.0.[[024]]*)
-      _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text'
-      _LT_TAGVAR(archive_cmds_need_lc, $1)=no
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6*)
-      # Note: We CANNOT use -z defs as we might desire, because we do not
-      # link with -lc, and that would cause any symbols used from libc to
-      # always be unresolved, which means just about no library would
-      # ever link correctly.  If we're not using GNU ld we use -z text
-      # though, which does catch some bad symbols but isn't as heavy-handed
-      # as -z defs.
-      _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text'
-      _LT_TAGVAR(allow_undefined_flag, $1)='$wl-z,nodefs'
-      _LT_TAGVAR(archive_cmds_need_lc, $1)=no
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R,$libdir'
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=':'
-      _LT_TAGVAR(link_all_deplibs, $1)=yes
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Bexport'
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    uts4*)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    *)
-      _LT_TAGVAR(ld_shlibs, $1)=no
-      ;;
-    esac
-
-    if test sni = "$host_vendor"; then
-      case $host in
-      sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*)
-	_LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Blargedynsym'
-	;;
-      esac
-    fi
-  fi
-])
-AC_MSG_RESULT([$_LT_TAGVAR(ld_shlibs, $1)])
-test no = "$_LT_TAGVAR(ld_shlibs, $1)" && can_build_shared=no
-
-_LT_TAGVAR(with_gnu_ld, $1)=$with_gnu_ld
-
-_LT_DECL([], [libext], [0], [Old archive suffix (normally "a")])dnl
-_LT_DECL([], [shrext_cmds], [1], [Shared library suffix (normally ".so")])dnl
-_LT_DECL([], [extract_expsyms_cmds], [2],
-    [The commands to extract the exported symbol list from a shared archive])
-
-#
-# Do we need to explicitly link libc?
-#
-case "x$_LT_TAGVAR(archive_cmds_need_lc, $1)" in
-x|xyes)
-  # Assume -lc should be added
-  _LT_TAGVAR(archive_cmds_need_lc, $1)=yes
-
-  if test yes,yes = "$GCC,$enable_shared"; then
-    case $_LT_TAGVAR(archive_cmds, $1) in
-    *'~'*)
-      # FIXME: we may have to deal with multi-command sequences.
-      ;;
-    '$CC '*)
-      # Test whether the compiler implicitly links with -lc since on some
-      # systems, -lgcc has to come before -lc. If gcc already passes -lc
-      # to ld, don't add -lc before -lgcc.
-      AC_CACHE_CHECK([whether -lc should be explicitly linked in],
-	[lt_cv_]_LT_TAGVAR(archive_cmds_need_lc, $1),
-	[$RM conftest*
-	echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-	if AC_TRY_EVAL(ac_compile) 2>conftest.err; then
-	  soname=conftest
-	  lib=conftest
-	  libobjs=conftest.$ac_objext
-	  deplibs=
-	  wl=$_LT_TAGVAR(lt_prog_compiler_wl, $1)
-	  pic_flag=$_LT_TAGVAR(lt_prog_compiler_pic, $1)
-	  compiler_flags=-v
-	  linker_flags=-v
-	  verstring=
-	  output_objdir=.
-	  libname=conftest
-	  lt_save_allow_undefined_flag=$_LT_TAGVAR(allow_undefined_flag, $1)
-	  _LT_TAGVAR(allow_undefined_flag, $1)=
-	  if AC_TRY_EVAL(_LT_TAGVAR(archive_cmds, $1) 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1)
-	  then
-	    lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-	  else
-	    lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)=yes
-	  fi
-	  _LT_TAGVAR(allow_undefined_flag, $1)=$lt_save_allow_undefined_flag
-	else
-	  cat conftest.err 1>&5
-	fi
-	$RM conftest*
-	])
-      _LT_TAGVAR(archive_cmds_need_lc, $1)=$lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)
-      ;;
-    esac
-  fi
-  ;;
-esac
-
-_LT_TAGDECL([build_libtool_need_lc], [archive_cmds_need_lc], [0],
-    [Whether or not to add -lc for building shared libraries])
-_LT_TAGDECL([allow_libtool_libs_with_static_runtimes],
-    [enable_shared_with_static_runtimes], [0],
-    [Whether or not to disallow shared libs when runtime libs are static])
-_LT_TAGDECL([], [export_dynamic_flag_spec], [1],
-    [Compiler flag to allow reflexive dlopens])
-_LT_TAGDECL([], [whole_archive_flag_spec], [1],
-    [Compiler flag to generate shared objects directly from archives])
-_LT_TAGDECL([], [compiler_needs_object], [1],
-    [Whether the compiler copes with passing no objects directly])
-_LT_TAGDECL([], [old_archive_from_new_cmds], [2],
-    [Create an old-style archive from a shared archive])
-_LT_TAGDECL([], [old_archive_from_expsyms_cmds], [2],
-    [Create a temporary old-style archive to link instead of a shared archive])
-_LT_TAGDECL([], [archive_cmds], [2], [Commands used to build a shared archive])
-_LT_TAGDECL([], [archive_expsym_cmds], [2])
-_LT_TAGDECL([], [module_cmds], [2],
-    [Commands used to build a loadable module if different from building
-    a shared archive.])
-_LT_TAGDECL([], [module_expsym_cmds], [2])
-_LT_TAGDECL([], [with_gnu_ld], [1],
-    [Whether we are building with GNU ld or not])
-_LT_TAGDECL([], [allow_undefined_flag], [1],
-    [Flag that allows shared libraries with undefined symbols to be built])
-_LT_TAGDECL([], [no_undefined_flag], [1],
-    [Flag that enforces no undefined symbols])
-_LT_TAGDECL([], [hardcode_libdir_flag_spec], [1],
-    [Flag to hardcode $libdir into a binary during linking.
-    This must work even if $libdir does not exist])
-_LT_TAGDECL([], [hardcode_libdir_separator], [1],
-    [Whether we need a single "-rpath" flag with a separated argument])
-_LT_TAGDECL([], [hardcode_direct], [0],
-    [Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes
-    DIR into the resulting binary])
-_LT_TAGDECL([], [hardcode_direct_absolute], [0],
-    [Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes
-    DIR into the resulting binary and the resulting library dependency is
-    "absolute", i.e. impossible to change by setting $shlibpath_var if the
-    library is relocated])
-_LT_TAGDECL([], [hardcode_minus_L], [0],
-    [Set to "yes" if using the -LDIR flag during linking hardcodes DIR
-    into the resulting binary])
-_LT_TAGDECL([], [hardcode_shlibpath_var], [0],
-    [Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR
-    into the resulting binary])
-_LT_TAGDECL([], [hardcode_automatic], [0],
-    [Set to "yes" if building a shared library automatically hardcodes DIR
-    into the library and all subsequent libraries and executables linked
-    against it])
-_LT_TAGDECL([], [inherit_rpath], [0],
-    [Set to yes if linker adds runtime paths of dependent libraries
-    to runtime path list])
-_LT_TAGDECL([], [link_all_deplibs], [0],
-    [Whether libtool must link a program against all its dependency libraries])
-_LT_TAGDECL([], [always_export_symbols], [0],
-    [Set to "yes" if exported symbols are required])
-_LT_TAGDECL([], [export_symbols_cmds], [2],
-    [The commands to list exported symbols])
-_LT_TAGDECL([], [exclude_expsyms], [1],
-    [Symbols that should not be listed in the preloaded symbols])
-_LT_TAGDECL([], [include_expsyms], [1],
-    [Symbols that must always be exported])
-_LT_TAGDECL([], [prelink_cmds], [2],
-    [Commands necessary for linking programs (against libraries) with templates])
-_LT_TAGDECL([], [postlink_cmds], [2],
-    [Commands necessary for finishing linking programs])
-_LT_TAGDECL([], [file_list_spec], [1],
-    [Specify filename containing input files])
-dnl FIXME: Not yet implemented
-dnl _LT_TAGDECL([], [thread_safe_flag_spec], [1],
-dnl    [Compiler flag to generate thread safe objects])
-])# _LT_LINKER_SHLIBS
-
-
-# _LT_LANG_C_CONFIG([TAG])
-# ------------------------
-# Ensure that the configuration variables for a C compiler are suitably
-# defined.  These variables are subsequently used by _LT_CONFIG to write
-# the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_C_CONFIG],
-[m4_require([_LT_DECL_EGREP])dnl
-lt_save_CC=$CC
-AC_LANG_PUSH(C)
-
-# Source file extension for C test sources.
-ac_ext=c
-
-# Object file extension for compiled C test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code="int some_variable = 0;"
-
-# Code to be used in simple link tests
-lt_simple_link_test_code='int main(void){return(0);}'
-
-_LT_TAG_COMPILER
-# Save the default compiler, since it gets overwritten when the other
-# tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP.
-compiler_DEFAULT=$CC
-
-# save warnings/boilerplate of simple test code
-_LT_COMPILER_BOILERPLATE
-_LT_LINKER_BOILERPLATE
-
-## CAVEAT EMPTOR:
-## There is no encapsulation within the following macros, do not change
-## the running order or otherwise move them around unless you know exactly
-## what you are doing...
-if test -n "$compiler"; then
-  _LT_COMPILER_NO_RTTI($1)
-  _LT_COMPILER_PIC($1)
-  _LT_COMPILER_C_O($1)
-  _LT_COMPILER_FILE_LOCKS($1)
-  _LT_LINKER_SHLIBS($1)
-  _LT_SYS_DYNAMIC_LINKER($1)
-  _LT_LINKER_HARDCODE_LIBPATH($1)
-  LT_SYS_DLOPEN_SELF
-  _LT_CMD_STRIPLIB
-
-  # Report what library types will actually be built
-  AC_MSG_CHECKING([if libtool supports shared libraries])
-  AC_MSG_RESULT([$can_build_shared])
-
-  AC_MSG_CHECKING([whether to build shared libraries])
-  test no = "$can_build_shared" && enable_shared=no
-
-  # On AIX, shared libraries and static libraries use the same namespace, and
-  # are all built from PIC.
-  case $host_os in
-  aix3*)
-    test yes = "$enable_shared" && enable_static=no
-    if test -n "$RANLIB"; then
-      archive_cmds="$archive_cmds~\$RANLIB \$lib"
-      postinstall_cmds='$RANLIB $lib'
-    fi
-    ;;
-
-  aix[[4-9]]*)
-    if test ia64 != "$host_cpu"; then
-      case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
-      yes,aix,yes) ;;			# shared object as lib.so file only
-      yes,svr4,*) ;;			# shared object as lib.so archive member only
-      yes,*) enable_static=no ;;	# shared object in lib.a archive as well
-      esac
-    fi
-    ;;
-  esac
-  AC_MSG_RESULT([$enable_shared])
-
-  AC_MSG_CHECKING([whether to build static libraries])
-  # Make sure either enable_shared or enable_static is yes.
-  test yes = "$enable_shared" || enable_static=yes
-  AC_MSG_RESULT([$enable_static])
-
-  _LT_CONFIG($1)
-fi
-AC_LANG_POP
-CC=$lt_save_CC
-])# _LT_LANG_C_CONFIG
-
-
-# _LT_LANG_CXX_CONFIG([TAG])
-# --------------------------
-# Ensure that the configuration variables for a C++ compiler are suitably
-# defined.  These variables are subsequently used by _LT_CONFIG to write
-# the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_CXX_CONFIG],
-[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_EGREP])dnl
-m4_require([_LT_PATH_MANIFEST_TOOL])dnl
-if test -n "$CXX" && ( test no != "$CXX" &&
-    ( (test g++ = "$CXX" && `g++ -v >/dev/null 2>&1` ) ||
-    (test g++ != "$CXX"))); then
-  AC_PROG_CXXCPP
-else
-  _lt_caught_CXX_error=yes
-fi
-
-AC_LANG_PUSH(C++)
-_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-_LT_TAGVAR(allow_undefined_flag, $1)=
-_LT_TAGVAR(always_export_symbols, $1)=no
-_LT_TAGVAR(archive_expsym_cmds, $1)=
-_LT_TAGVAR(compiler_needs_object, $1)=no
-_LT_TAGVAR(export_dynamic_flag_spec, $1)=
-_LT_TAGVAR(hardcode_direct, $1)=no
-_LT_TAGVAR(hardcode_direct_absolute, $1)=no
-_LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
-_LT_TAGVAR(hardcode_libdir_separator, $1)=
-_LT_TAGVAR(hardcode_minus_L, $1)=no
-_LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported
-_LT_TAGVAR(hardcode_automatic, $1)=no
-_LT_TAGVAR(inherit_rpath, $1)=no
-_LT_TAGVAR(module_cmds, $1)=
-_LT_TAGVAR(module_expsym_cmds, $1)=
-_LT_TAGVAR(link_all_deplibs, $1)=unknown
-_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
-_LT_TAGVAR(reload_flag, $1)=$reload_flag
-_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
-_LT_TAGVAR(no_undefined_flag, $1)=
-_LT_TAGVAR(whole_archive_flag_spec, $1)=
-_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no
-
-# Source file extension for C++ test sources.
-ac_ext=cpp
-
-# Object file extension for compiled C++ test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# No sense in running all these tests if we already determined that
-# the CXX compiler isn't working.  Some variables (like enable_shared)
-# are currently assumed to apply to all compilers on this platform,
-# and will be corrupted by setting them based on a non-working compiler.
-if test yes != "$_lt_caught_CXX_error"; then
-  # Code to be used in simple compile tests
-  lt_simple_compile_test_code="int some_variable = 0;"
-
-  # Code to be used in simple link tests
-  lt_simple_link_test_code='int main(int, char *[[]]) { return(0); }'
-
-  # ltmain only uses $CC for tagged configurations so make sure $CC is set.
-  _LT_TAG_COMPILER
-
-  # save warnings/boilerplate of simple test code
-  _LT_COMPILER_BOILERPLATE
-  _LT_LINKER_BOILERPLATE
-
-  # Allow CC to be a program name with arguments.
-  lt_save_CC=$CC
-  lt_save_CFLAGS=$CFLAGS
-  lt_save_LD=$LD
-  lt_save_GCC=$GCC
-  GCC=$GXX
-  lt_save_with_gnu_ld=$with_gnu_ld
-  lt_save_path_LD=$lt_cv_path_LD
-  if test -n "${lt_cv_prog_gnu_ldcxx+set}"; then
-    lt_cv_prog_gnu_ld=$lt_cv_prog_gnu_ldcxx
-  else
-    $as_unset lt_cv_prog_gnu_ld
-  fi
-  if test -n "${lt_cv_path_LDCXX+set}"; then
-    lt_cv_path_LD=$lt_cv_path_LDCXX
-  else
-    $as_unset lt_cv_path_LD
-  fi
-  test -z "${LDCXX+set}" || LD=$LDCXX
-  CC=${CXX-"c++"}
-  CFLAGS=$CXXFLAGS
-  compiler=$CC
-  _LT_TAGVAR(compiler, $1)=$CC
-  _LT_CC_BASENAME([$compiler])
-
-  if test -n "$compiler"; then
-    # We don't want -fno-exception when compiling C++ code, so set the
-    # no_builtin_flag separately
-    if test yes = "$GXX"; then
-      _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin'
-    else
-      _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=
-    fi
-
-    if test yes = "$GXX"; then
-      # Set up default GNU C++ configuration
-
-      LT_PATH_LD
-
-      # Check if GNU C++ uses GNU ld as the underlying linker, since the
-      # archiving commands below assume that GNU ld is being used.
-      if test yes = "$with_gnu_ld"; then
-        _LT_TAGVAR(archive_cmds, $1)='$CC $pic_flag -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
-        _LT_TAGVAR(archive_expsym_cmds, $1)='$CC $pic_flag -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-
-        _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-        _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
-
-        # If archive_cmds runs LD, not CC, wlarc should be empty
-        # XXX I think wlarc can be eliminated in ltcf-cxx, but I need to
-        #     investigate it a little bit more. (MM)
-        wlarc='$wl'
-
-        # ancient GNU ld didn't support --whole-archive et. al.
-        if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then
-          _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
-        else
-          _LT_TAGVAR(whole_archive_flag_spec, $1)=
-        fi
-      else
-        with_gnu_ld=no
-        wlarc=
-
-        # A generic and very simple default shared library creation
-        # command for GNU C++ for the case where it uses the native
-        # linker, instead of GNU ld.  If possible, this setting should
-        # overridden to take advantage of the native linker features on
-        # the platform it is being used on.
-        _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib'
-      fi
-
-      # Commands to make compiler produce verbose output that lists
-      # what "hidden" libraries, object files and flags are used when
-      # linking a shared library.
-      output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP " [[-]]L"'
-
-    else
-      GXX=no
-      with_gnu_ld=no
-      wlarc=
-    fi
-
-    # PORTME: fill in a description of your system's C++ link characteristics
-    AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries])
-    _LT_TAGVAR(ld_shlibs, $1)=yes
-    case $host_os in
-      aix3*)
-        # FIXME: insert proper C++ library support
-        _LT_TAGVAR(ld_shlibs, $1)=no
-        ;;
-      aix[[4-9]]*)
-        if test ia64 = "$host_cpu"; then
-          # On IA64, the linker does run time linking by default, so we don't
-          # have to do anything special.
-          aix_use_runtimelinking=no
-          exp_sym_flag='-Bexport'
-          no_entry_flag=
-        else
-          aix_use_runtimelinking=no
-
-          # Test if we are trying to use run time linking or normal
-          # AIX style linking. If -brtl is somewhere in LDFLAGS, we
-          # have runtime linking enabled, and use it for executables.
-          # For shared libraries, we enable/disable runtime linking
-          # depending on the kind of the shared library created -
-          # when "with_aix_soname,aix_use_runtimelinking" is:
-          # "aix,no"   lib.a(lib.so.V) shared, rtl:no,  for executables
-          # "aix,yes"  lib.so          shared, rtl:yes, for executables
-          #            lib.a           static archive
-          # "both,no"  lib.so.V(shr.o) shared, rtl:yes
-          #            lib.a(lib.so.V) shared, rtl:no,  for executables
-          # "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables
-          #            lib.a(lib.so.V) shared, rtl:no
-          # "svr4,*"   lib.so.V(shr.o) shared, rtl:yes, for executables
-          #            lib.a           static archive
-          case $host_os in aix4.[[23]]|aix4.[[23]].*|aix[[5-9]]*)
-	    for ld_flag in $LDFLAGS; do
-	      case $ld_flag in
-	      *-brtl*)
-	        aix_use_runtimelinking=yes
-	        break
-	        ;;
-	      esac
-	    done
-	    if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then
-	      # With aix-soname=svr4, we create the lib.so.V shared archives only,
-	      # so we don't have lib.a shared libs to link our executables.
-	      # We have to force runtime linking in this case.
-	      aix_use_runtimelinking=yes
-	      LDFLAGS="$LDFLAGS -Wl,-brtl"
-	    fi
-	    ;;
-          esac
-
-          exp_sym_flag='-bexport'
-          no_entry_flag='-bnoentry'
-        fi
-
-        # When large executables or shared objects are built, AIX ld can
-        # have problems creating the table of contents.  If linking a library
-        # or program results in "error TOC overflow" add -mminimal-toc to
-        # CXXFLAGS/CFLAGS for g++/gcc.  In the cases where that is not
-        # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS.
-
-        _LT_TAGVAR(archive_cmds, $1)=''
-        _LT_TAGVAR(hardcode_direct, $1)=yes
-        _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-        _LT_TAGVAR(hardcode_libdir_separator, $1)=':'
-        _LT_TAGVAR(link_all_deplibs, $1)=yes
-        _LT_TAGVAR(file_list_spec, $1)='$wl-f,'
-        case $with_aix_soname,$aix_use_runtimelinking in
-        aix,*) ;;	# no import file
-        svr4,* | *,yes) # use import file
-          # The Import File defines what to hardcode.
-          _LT_TAGVAR(hardcode_direct, $1)=no
-          _LT_TAGVAR(hardcode_direct_absolute, $1)=no
-          ;;
-        esac
-
-        if test yes = "$GXX"; then
-          case $host_os in aix4.[[012]]|aix4.[[012]].*)
-          # We only want to do this on AIX 4.2 and lower, the check
-          # below for broken collect2 doesn't work under 4.3+
-	  collect2name=`$CC -print-prog-name=collect2`
-	  if test -f "$collect2name" &&
-	     strings "$collect2name" | $GREP resolve_lib_name >/dev/null
-	  then
-	    # We have reworked collect2
-	    :
-	  else
-	    # We have old collect2
-	    _LT_TAGVAR(hardcode_direct, $1)=unsupported
-	    # It fails to find uninstalled libraries when the uninstalled
-	    # path is not listed in the libpath.  Setting hardcode_minus_L
-	    # to unsupported forces relinking
-	    _LT_TAGVAR(hardcode_minus_L, $1)=yes
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-	    _LT_TAGVAR(hardcode_libdir_separator, $1)=
-	  fi
-          esac
-          shared_flag='-shared'
-	  if test yes = "$aix_use_runtimelinking"; then
-	    shared_flag=$shared_flag' $wl-G'
-	  fi
-	  # Need to ensure runtime linking is disabled for the traditional
-	  # shared library, or the linker may eventually find shared libraries
-	  # /with/ Import File - we do not want to mix them.
-	  shared_flag_aix='-shared'
-	  shared_flag_svr4='-shared $wl-G'
-        else
-          # not using gcc
-          if test ia64 = "$host_cpu"; then
-	  # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release
-	  # chokes on -Wl,-G. The following line is correct:
-	  shared_flag='-G'
-          else
-	    if test yes = "$aix_use_runtimelinking"; then
-	      shared_flag='$wl-G'
-	    else
-	      shared_flag='$wl-bM:SRE'
-	    fi
-	    shared_flag_aix='$wl-bM:SRE'
-	    shared_flag_svr4='$wl-G'
-          fi
-        fi
-
-        _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-bexpall'
-        # It seems that -bexpall does not export symbols beginning with
-        # underscore (_), so it is better to generate a list of symbols to
-	# export.
-        _LT_TAGVAR(always_export_symbols, $1)=yes
-	if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then
-          # Warning - without using the other runtime loading flags (-brtl),
-          # -berok will link without error, but may produce a broken library.
-          # The "-G" linker flag allows undefined symbols.
-          _LT_TAGVAR(no_undefined_flag, $1)='-bernotok'
-          # Determine the default libpath from the value encoded in an empty
-          # executable.
-          _LT_SYS_MODULE_PATH_AIX([$1])
-          _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath"
-
-          _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag
-        else
-          if test ia64 = "$host_cpu"; then
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $libdir:/usr/lib:/lib'
-	    _LT_TAGVAR(allow_undefined_flag, $1)="-z nodefs"
-	    _LT_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols"
-          else
-	    # Determine the default libpath from the value encoded in an
-	    # empty executable.
-	    _LT_SYS_MODULE_PATH_AIX([$1])
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath"
-	    # Warning - without using the other run time loading flags,
-	    # -berok will link without error, but may produce a broken library.
-	    _LT_TAGVAR(no_undefined_flag, $1)=' $wl-bernotok'
-	    _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-berok'
-	    if test yes = "$with_gnu_ld"; then
-	      # We only use this code for GNU lds that support --whole-archive.
-	      _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive'
-	    else
-	      # Exported symbols can be pulled into shared objects from archives
-	      _LT_TAGVAR(whole_archive_flag_spec, $1)='$convenience'
-	    fi
-	    _LT_TAGVAR(archive_cmds_need_lc, $1)=yes
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d'
-	    # -brtl affects multiple linker settings, -berok does not and is overridden later
-	    compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([[, ]]\\)%-berok\\1%g"`'
-	    if test svr4 != "$with_aix_soname"; then
-	      # This is similar to how AIX traditionally builds its shared
-	      # libraries. Need -bnortl late, we may have -brtl in LDFLAGS.
-	      _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname'
-	    fi
-	    if test aix != "$with_aix_soname"; then
-	      _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp'
-	    else
-	      # used by -dlpreopen to get the symbols
-	      _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$MV  $output_objdir/$realname.d/$soname $output_objdir'
-	    fi
-	    _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$RM -r $output_objdir/$realname.d'
-          fi
-        fi
-        ;;
-
-      beos*)
-	if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	  _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	  # Joseph Beckenbach <jrb3@best.com> says some releases of gcc
-	  # support --undefined.  This deserves some investigation.  FIXME
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	else
-	  _LT_TAGVAR(ld_shlibs, $1)=no
-	fi
-	;;
-
-      chorus*)
-        case $cc_basename in
-          *)
-	  # FIXME: insert proper C++ library support
-	  _LT_TAGVAR(ld_shlibs, $1)=no
-	  ;;
-        esac
-        ;;
-
-      cygwin* | mingw* | windows* | pw32* | cegcc*)
-	case $GXX,$cc_basename in
-	,cl* | no,cl* | ,icl* | no,icl*)
-	  # Native MSVC or ICC
-	  # hardcode_libdir_flag_spec is actually meaningless, as there is
-	  # no search path for DLLs.
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' '
-	  _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	  _LT_TAGVAR(always_export_symbols, $1)=yes
-	  _LT_TAGVAR(file_list_spec, $1)='@'
-	  # Tell ltmain to make .lib files, not .a files.
-	  libext=lib
-	  # Tell ltmain to make .dll files, not .so files.
-	  shrext_cmds=.dll
-	  # FIXME: Setting linknames here is a bad hack.
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames='
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then
-              cp "$export_symbols" "$output_objdir/$soname.def";
-              echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp";
-            else
-              $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp;
-            fi~
-            $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~
-            linknames='
-	  # The linker will not automatically build a static lib if we build a DLL.
-	  # _LT_TAGVAR(old_archive_from_new_cmds, $1)='true'
-	  _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-	  # Don't use ranlib
-	  _LT_TAGVAR(old_postinstall_cmds, $1)='chmod 644 $oldlib'
-	  _LT_TAGVAR(postlink_cmds, $1)='lt_outputfile="@OUTPUT@"~
-            lt_tool_outputfile="@TOOL_OUTPUT@"~
-            case $lt_outputfile in
-              *.exe|*.EXE) ;;
-              *)
-                lt_outputfile=$lt_outputfile.exe
-                lt_tool_outputfile=$lt_tool_outputfile.exe
-                ;;
-            esac~
-            func_to_tool_file "$lt_outputfile"~
-            if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then
-              $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1;
-              $RM "$lt_outputfile.manifest";
-            fi'
-	  ;;
-	*)
-	  # g++
-	  # _LT_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless,
-	  # as there is no search path for DLLs.
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-	  _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-all-symbols'
-	  _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	  _LT_TAGVAR(always_export_symbols, $1)=no
-	  _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-	  _LT_TAGVAR(file_list_spec, $1)='@'
-
-	  if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-	    # If the export-symbols file already is a .def file, use it as
-	    # is; otherwise, prepend EXPORTS...
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then
-              cp $export_symbols $output_objdir/$soname.def;
-            else
-              echo EXPORTS > $output_objdir/$soname.def;
-              cat $export_symbols >> $output_objdir/$soname.def;
-            fi~
-            $CC -shared -nostdlib $output_objdir/$soname.def $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-	  else
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	  fi
-	  ;;
-	esac
-	;;
-      darwin* | rhapsody*)
-        _LT_DARWIN_LINKER_FEATURES($1)
-	;;
-
-      os2*)
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-	_LT_TAGVAR(hardcode_minus_L, $1)=yes
-	_LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	shrext_cmds=.dll
-	_LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	  $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	  $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	  $ECHO EXPORTS >> $output_objdir/$libname.def~
-	  emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	  $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	  emximp -o $lib $output_objdir/$libname.def'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	  $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	  $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	  $ECHO EXPORTS >> $output_objdir/$libname.def~
-	  prefix_cmds="$SED"~
-	  if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	    prefix_cmds="$prefix_cmds -e 1d";
-	  fi~
-	  prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	  cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	  $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	  emximp -o $lib $output_objdir/$libname.def'
-	_LT_TAGVAR(old_archive_from_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-	_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-	_LT_TAGVAR(file_list_spec, $1)='@'
-	;;
-
-      dgux*)
-        case $cc_basename in
-          ec++*)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          ghcx*)
-	    # Green Hills C++ Compiler
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          *)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-        esac
-        ;;
-
-      freebsd2.*)
-        # C++ shared libraries reported to be fairly broken before
-	# switch to ELF
-        _LT_TAGVAR(ld_shlibs, $1)=no
-        ;;
-
-      freebsd-elf*)
-        _LT_TAGVAR(archive_cmds_need_lc, $1)=no
-        ;;
-
-      freebsd* | dragonfly* | midnightbsd*)
-        # FreeBSD 3 and later use GNU C++ and GNU ld with standard ELF
-        # conventions
-        _LT_TAGVAR(ld_shlibs, $1)=yes
-        ;;
-
-      haiku*)
-        _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-        _LT_TAGVAR(link_all_deplibs, $1)=no
-        ;;
-
-      hpux9*)
-        _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
-        _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-        _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-        _LT_TAGVAR(hardcode_direct, $1)=yes
-        _LT_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH,
-				             # but as the default
-				             # location of the library.
-
-        case $cc_basename in
-          CC*)
-            # FIXME: insert proper C++ library support
-            _LT_TAGVAR(ld_shlibs, $1)=no
-            ;;
-          aCC*)
-            _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -b $wl+b $wl$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-            # Commands to make compiler produce verbose output that lists
-            # what "hidden" libraries, object files and flags are used when
-            # linking a shared library.
-            #
-            # There doesn't appear to be a way to prevent this compiler from
-            # explicitly linking system object files so we need to strip them
-            # from the output so that they don't get included in the library
-            # dependencies.
-            output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | $EGREP "[[-]]L"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"'
-            ;;
-          *)
-            if test yes = "$GXX"; then
-              _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -shared -nostdlib $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-            else
-              # FIXME: insert proper C++ library support
-              _LT_TAGVAR(ld_shlibs, $1)=no
-            fi
-            ;;
-        esac
-        ;;
-
-      hpux10*|hpux11*)
-        if test no = "$with_gnu_ld"; then
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
-	  _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-
-          case $host_cpu in
-            hppa*64*|ia64*)
-              ;;
-            *)
-	      _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-              ;;
-          esac
-        fi
-        case $host_cpu in
-          hppa*64*|ia64*)
-            _LT_TAGVAR(hardcode_direct, $1)=no
-            _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-            ;;
-          *)
-            _LT_TAGVAR(hardcode_direct, $1)=yes
-            _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-            _LT_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH,
-					         # but as the default
-					         # location of the library.
-            ;;
-        esac
-
-        case $cc_basename in
-          CC*)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          aCC*)
-	    case $host_cpu in
-	      hppa*64*)
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	        ;;
-	      ia64*)
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	        ;;
-	      *)
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	        ;;
-	    esac
-	    # Commands to make compiler produce verbose output that lists
-	    # what "hidden" libraries, object files and flags are used when
-	    # linking a shared library.
-	    #
-	    # There doesn't appear to be a way to prevent this compiler from
-	    # explicitly linking system object files so we need to strip them
-	    # from the output so that they don't get included in the library
-	    # dependencies.
-	    output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | $GREP " [[-]]L"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"'
-	    ;;
-          *)
-	    if test yes = "$GXX"; then
-	      if test no = "$with_gnu_ld"; then
-	        case $host_cpu in
-	          hppa*64*)
-	            _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib -fPIC $wl+h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	            ;;
-	          ia64*)
-	            _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	            ;;
-	          *)
-	            _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	            ;;
-	        esac
-	      fi
-	    else
-	      # FIXME: insert proper C++ library support
-	      _LT_TAGVAR(ld_shlibs, $1)=no
-	    fi
-	    ;;
-        esac
-        ;;
-
-      interix[[3-9]]*)
-	_LT_TAGVAR(hardcode_direct, $1)=no
-	_LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	_LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-	# Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc.
-	# Instead, shared libraries are loaded at an image base (0x10000000 by
-	# default) and relocated if they conflict, which is a slow very memory
-	# consuming and fragmenting process.  To avoid this, we pick a random,
-	# 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link
-	# time.  Moving up from 0x10000000 also allows more sbrk(2) space.
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-	;;
-      irix5* | irix6*)
-        case $cc_basename in
-          CC*)
-	    # SGI C++
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -shared -all -multigot $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-
-	    # Archives containing C++ object files must be created using
-	    # "CC -ar", where "CC" is the IRIX C++ compiler.  This is
-	    # necessary to make sure instantiated templates are included
-	    # in the archive.
-	    _LT_TAGVAR(old_archive_cmds, $1)='$CC -ar -WR,-u -o $oldlib $oldobjs'
-	    ;;
-          *)
-	    if test yes = "$GXX"; then
-	      if test no = "$with_gnu_ld"; then
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	      else
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` -o $lib'
-	      fi
-	    fi
-	    _LT_TAGVAR(link_all_deplibs, $1)=yes
-	    ;;
-        esac
-        _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-        _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-        _LT_TAGVAR(inherit_rpath, $1)=yes
-        ;;
-
-      linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-        case $cc_basename in
-          KCC*)
-	    # Kuck and Associates, Inc. (KAI) C++ Compiler
-
-	    # KCC will only create a shared library if the output file
-	    # ends with ".so" (or ".sl" for HP-UX), so rename the library
-	    # to its proper name (with version) after linking.
-	    _LT_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib'
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib $wl-retain-symbols-file,$export_symbols; mv \$templib $lib'
-	    # Commands to make compiler produce verbose output that lists
-	    # what "hidden" libraries, object files and flags are used when
-	    # linking a shared library.
-	    #
-	    # There doesn't appear to be a way to prevent this compiler from
-	    # explicitly linking system object files so we need to strip them
-	    # from the output so that they don't get included in the library
-	    # dependencies.
-	    output_verbose_link_cmd='templist=`$CC $CFLAGS -v conftest.$objext -o libconftest$shared_ext 2>&1 | $GREP "ld"`; rm -f libconftest$shared_ext; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"'
-
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	    _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
-
-	    # Archives containing C++ object files must be created using
-	    # "CC -Bstatic", where "CC" is the KAI C++ compiler.
-	    _LT_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs'
-	    ;;
-	  icpc* | ecpc* )
-	    # Intel C++
-	    with_gnu_ld=yes
-	    # version 8.0 and above of icpc choke on multiply defined symbols
-	    # if we add $predep_objects and $postdep_objects, however 7.1 and
-	    # earlier do not add the objects themselves.
-	    case `$CC -V 2>&1` in
-	      *"Version 7."*)
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
-		_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-		;;
-	      *)  # Version 8.0 or newer
-	        tmp_idyn=
-	        case $host_cpu in
-		  ia64*) tmp_idyn=' -i_dynamic';;
-		esac
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-		_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-		;;
-	    esac
-	    _LT_TAGVAR(archive_cmds_need_lc, $1)=no
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	    _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
-	    _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive'
-	    ;;
-          pgCC* | pgcpp*)
-            # Portland Group C++ compiler
-	    case `$CC -V` in
-	    *pgCC\ [[1-5]].* | *pgcpp\ [[1-5]].*)
-	      _LT_TAGVAR(prelink_cmds, $1)='tpldir=Template.dir~
-               rm -rf $tpldir~
-               $CC --prelink_objects --instantiation_dir $tpldir $objs $libobjs $compile_deplibs~
-               compile_command="$compile_command `find $tpldir -name \*.o | sort | $NL2SP`"'
-	      _LT_TAGVAR(old_archive_cmds, $1)='tpldir=Template.dir~
-                rm -rf $tpldir~
-                $CC --prelink_objects --instantiation_dir $tpldir $oldobjs$old_deplibs~
-                $AR $AR_FLAGS $oldlib$oldobjs$old_deplibs `find $tpldir -name \*.o | sort | $NL2SP`~
-                $RANLIB $oldlib'
-	      _LT_TAGVAR(archive_cmds, $1)='tpldir=Template.dir~
-                rm -rf $tpldir~
-                $CC --prelink_objects --instantiation_dir $tpldir $predep_objects $libobjs $deplibs $convenience $postdep_objects~
-                $CC -shared $pic_flag $predep_objects $libobjs $deplibs `find $tpldir -name \*.o | sort | $NL2SP` $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
-	      _LT_TAGVAR(archive_expsym_cmds, $1)='tpldir=Template.dir~
-                rm -rf $tpldir~
-                $CC --prelink_objects --instantiation_dir $tpldir $predep_objects $libobjs $deplibs $convenience $postdep_objects~
-                $CC -shared $pic_flag $predep_objects $libobjs $deplibs `find $tpldir -name \*.o | sort | $NL2SP` $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-	      ;;
-	    *) # Version 6 and above use weak symbols
-	      _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
-	      _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-	      ;;
-	    esac
-
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl--rpath $wl$libdir'
-	    _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
-	    _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-            ;;
-	  cxx*)
-	    # Compaq C++
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname  -o $lib $wl-retain-symbols-file $wl$export_symbols'
-
-	    runpath_var=LD_RUN_PATH
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir'
-	    _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-
-	    # Commands to make compiler produce verbose output that lists
-	    # what "hidden" libraries, object files and flags are used when
-	    # linking a shared library.
-	    #
-	    # There doesn't appear to be a way to prevent this compiler from
-	    # explicitly linking system object files so we need to strip them
-	    # from the output so that they don't get included in the library
-	    # dependencies.
-	    output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP "ld"`; templist=`func_echo_all "$templist" | $SED "s/\(^.*ld.*\)\( .*ld .*$\)/\1/"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "X$list" | $Xsed'
-	    ;;
-	  xl* | mpixl* | bgxl*)
-	    # IBM XL 8.0 on PPC, with GNU ld
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-	    _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -qmkshrobj $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	    if test yes = "$supports_anon_versioning"; then
-	      _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~
-                cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-                echo "local: *; };" >> $output_objdir/$libname.ver~
-                $CC -qmkshrobj $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib'
-	    fi
-	    ;;
-	  *)
-	    case `$CC -V 2>&1 | $SED 5q` in
-	    *Sun\ C*)
-	      # Sun C++ 5.9
-	      _LT_TAGVAR(no_undefined_flag, $1)=' -zdefs'
-	      _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	      _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-retain-symbols-file $wl$export_symbols'
-	      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-	      _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	      _LT_TAGVAR(compiler_needs_object, $1)=yes
-
-	      # Not sure whether something based on
-	      # $CC $CFLAGS -v conftest.$objext -o libconftest$shared_ext 2>&1
-	      # would be better.
-	      output_verbose_link_cmd='func_echo_all'
-
-	      # Archives containing C++ object files must be created using
-	      # "CC -xar", where "CC" is the Sun C++ compiler.  This is
-	      # necessary to make sure instantiated templates are included
-	      # in the archive.
-	      _LT_TAGVAR(old_archive_cmds, $1)='$CC -xar -o $oldlib $oldobjs'
-	      ;;
-	    esac
-	    ;;
-	esac
-	;;
-
-      lynxos*)
-        # FIXME: insert proper C++ library support
-	_LT_TAGVAR(ld_shlibs, $1)=no
-	;;
-
-      m88k*)
-        # FIXME: insert proper C++ library support
-        _LT_TAGVAR(ld_shlibs, $1)=no
-	;;
-
-      mvs*)
-        case $cc_basename in
-          cxx*)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-	  *)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-	esac
-	;;
-
-      *-mlibc)
-        _LT_TAGVAR(ld_shlibs, $1)=yes
-	;;
-
-      netbsd*)
-        if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	  _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable  -o $lib $predep_objects $libobjs $deplibs $postdep_objects $linker_flags'
-	  wlarc=
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-	  _LT_TAGVAR(hardcode_direct, $1)=yes
-	  _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	fi
-	# Workaround some broken pre-1.5 toolchains
-	output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP conftest.$objext | $SED -e "s:-lgcc -lc -lgcc::"'
-	;;
-
-      *nto* | *qnx*)
-        _LT_TAGVAR(ld_shlibs, $1)=yes
-	;;
-
-      openbsd*)
-	if test -f /usr/libexec/ld.so; then
-	  _LT_TAGVAR(hardcode_direct, $1)=yes
-	  _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	  _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib'
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	  if test -z "`echo __ELF__ | $CC -E - | grep __ELF__`"; then
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-retain-symbols-file,$export_symbols -o $lib'
-	    _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-	    _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
-	  fi
-	  output_verbose_link_cmd=func_echo_all
-	else
-	  _LT_TAGVAR(ld_shlibs, $1)=no
-	fi
-	;;
-
-      osf3* | osf4* | osf5*)
-        case $cc_basename in
-          KCC*)
-	    # Kuck and Associates, Inc. (KAI) C++ Compiler
-
-	    # KCC will only create a shared library if the output file
-	    # ends with ".so" (or ".sl" for HP-UX), so rename the library
-	    # to its proper name (with version) after linking.
-	    _LT_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo "$lib" | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib'
-
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	    _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-
-	    # Archives containing C++ object files must be created using
-	    # the KAI C++ compiler.
-	    case $host in
-	      osf3*) _LT_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs' ;;
-	      *) _LT_TAGVAR(old_archive_cmds, $1)='$CC -o $oldlib $oldobjs' ;;
-	    esac
-	    ;;
-          RCC*)
-	    # Rational C++ 2.4.1
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          cxx*)
-	    case $host in
-	      osf3*)
-	        _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*'
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $soname `test -n "$verstring" && func_echo_all "$wl-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	        _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-		;;
-	      *)
-	        _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*'
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	        _LT_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done~
-                  echo "-hidden">> $lib.exp~
-                  $CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname $wl-input $wl$lib.exp  `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~
-                  $RM $lib.exp'
-	        _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir'
-		;;
-	    esac
-
-	    _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-
-	    # Commands to make compiler produce verbose output that lists
-	    # what "hidden" libraries, object files and flags are used when
-	    # linking a shared library.
-	    #
-	    # There doesn't appear to be a way to prevent this compiler from
-	    # explicitly linking system object files so we need to strip them
-	    # from the output so that they don't get included in the library
-	    # dependencies.
-	    output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP "ld" | $GREP -v "ld:"`; templist=`func_echo_all "$templist" | $SED "s/\(^.*ld.*\)\( .*ld.*$\)/\1/"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"'
-	    ;;
-	  *)
-	    if test yes,no = "$GXX,$with_gnu_ld"; then
-	      _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*'
-	      case $host in
-	        osf3*)
-	          _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-		  ;;
-	        *)
-	          _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-		  ;;
-	      esac
-
-	      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-	      _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-
-	      # Commands to make compiler produce verbose output that lists
-	      # what "hidden" libraries, object files and flags are used when
-	      # linking a shared library.
-	      output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP " [[-]]L"'
-
-	    else
-	      # FIXME: insert proper C++ library support
-	      _LT_TAGVAR(ld_shlibs, $1)=no
-	    fi
-	    ;;
-        esac
-        ;;
-
-      psos*)
-        # FIXME: insert proper C++ library support
-        _LT_TAGVAR(ld_shlibs, $1)=no
-        ;;
-
-      serenity*)
-        ;;
-
-      sunos4*)
-        case $cc_basename in
-          CC*)
-	    # Sun C++ 4.x
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          lcc*)
-	    # Lucid
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          *)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-        esac
-        ;;
-
-      solaris*)
-        case $cc_basename in
-          CC* | sunCC*)
-	    # Sun C++ 4.2, 5.x and Centerline C++
-            _LT_TAGVAR(archive_cmds_need_lc,$1)=yes
-	    _LT_TAGVAR(no_undefined_flag, $1)=' -zdefs'
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-              $CC -G$allow_undefined_flag $wl-M $wl$lib.exp -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp'
-
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-	    _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	    case $host_os in
-	      solaris2.[[0-5]] | solaris2.[[0-5]].*) ;;
-	      *)
-		# The compiler driver will combine and reorder linker options,
-		# but understands '-z linker_flag'.
-	        # Supported since Solaris 2.6 (maybe 2.5.1?)
-		_LT_TAGVAR(whole_archive_flag_spec, $1)='-z allextract$convenience -z defaultextract'
-	        ;;
-	    esac
-	    _LT_TAGVAR(link_all_deplibs, $1)=yes
-
-	    output_verbose_link_cmd='func_echo_all'
-
-	    # Archives containing C++ object files must be created using
-	    # "CC -xar", where "CC" is the Sun C++ compiler.  This is
-	    # necessary to make sure instantiated templates are included
-	    # in the archive.
-	    _LT_TAGVAR(old_archive_cmds, $1)='$CC -xar -o $oldlib $oldobjs'
-	    ;;
-          gcx*)
-	    # Green Hills C++ Compiler
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib'
-
-	    # The C++ compiler must be used to create the archive.
-	    _LT_TAGVAR(old_archive_cmds, $1)='$CC $LDFLAGS -archive -o $oldlib $oldobjs'
-	    ;;
-          *)
-	    # GNU C++ compiler with Solaris linker
-	    if test yes,no = "$GXX,$with_gnu_ld"; then
-	      _LT_TAGVAR(no_undefined_flag, $1)=' $wl-z ${wl}defs'
-	      if $CC --version | $GREP -v '^2\.7' > /dev/null; then
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib'
-	        _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-                  $CC -shared $pic_flag -nostdlib $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp'
-
-	        # Commands to make compiler produce verbose output that lists
-	        # what "hidden" libraries, object files and flags are used when
-	        # linking a shared library.
-	        output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP " [[-]]L"'
-	      else
-	        # g++ 2.7 appears to require '-G' NOT '-shared' on this
-	        # platform.
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -G -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib'
-	        _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-                  $CC -G -nostdlib $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp'
-
-	        # Commands to make compiler produce verbose output that lists
-	        # what "hidden" libraries, object files and flags are used when
-	        # linking a shared library.
-	        output_verbose_link_cmd='$CC -G $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP " [[-]]L"'
-	      fi
-
-	      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $wl$libdir'
-	      case $host_os in
-		solaris2.[[0-5]] | solaris2.[[0-5]].*) ;;
-		*)
-		  _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract'
-		  ;;
-	      esac
-	    fi
-	    ;;
-        esac
-        ;;
-
-    sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7* | sco3.2v5.0.[[024]]*)
-      _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text'
-      _LT_TAGVAR(archive_cmds_need_lc, $1)=no
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      runpath_var='LD_RUN_PATH'
-
-      case $cc_basename in
-        CC*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-      esac
-      ;;
-
-      sysv5* | sco3.2v5* | sco5v6*)
-	# Note: We CANNOT use -z defs as we might desire, because we do not
-	# link with -lc, and that would cause any symbols used from libc to
-	# always be unresolved, which means just about no library would
-	# ever link correctly.  If we're not using GNU ld we use -z text
-	# though, which does catch some bad symbols but isn't as heavy-handed
-	# as -z defs.
-	_LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text'
-	_LT_TAGVAR(allow_undefined_flag, $1)='$wl-z,nodefs'
-	_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-	_LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R,$libdir'
-	_LT_TAGVAR(hardcode_libdir_separator, $1)=':'
-	_LT_TAGVAR(link_all_deplibs, $1)=yes
-	_LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Bexport'
-	runpath_var='LD_RUN_PATH'
-
-	case $cc_basename in
-          CC*)
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	    _LT_TAGVAR(old_archive_cmds, $1)='$CC -Tprelink_objects $oldobjs~
-              '"$_LT_TAGVAR(old_archive_cmds, $1)"
-	    _LT_TAGVAR(reload_cmds, $1)='$CC -Tprelink_objects $reload_objs~
-              '"$_LT_TAGVAR(reload_cmds, $1)"
-	    ;;
-	  *)
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	    ;;
-	esac
-      ;;
-
-      tandem*)
-        case $cc_basename in
-          NCC*)
-	    # NonStop-UX NCC 3.20
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          *)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-        esac
-        ;;
-
-      vxworks*)
-        # FIXME: insert proper C++ library support
-        _LT_TAGVAR(ld_shlibs, $1)=no
-        ;;
-
-      *)
-        # FIXME: insert proper C++ library support
-        _LT_TAGVAR(ld_shlibs, $1)=no
-        ;;
-    esac
-
-    AC_MSG_RESULT([$_LT_TAGVAR(ld_shlibs, $1)])
-    test no = "$_LT_TAGVAR(ld_shlibs, $1)" && can_build_shared=no
-
-    _LT_TAGVAR(GCC, $1)=$GXX
-    _LT_TAGVAR(LD, $1)=$LD
-
-    ## CAVEAT EMPTOR:
-    ## There is no encapsulation within the following macros, do not change
-    ## the running order or otherwise move them around unless you know exactly
-    ## what you are doing...
-    _LT_SYS_HIDDEN_LIBDEPS($1)
-    _LT_COMPILER_PIC($1)
-    _LT_COMPILER_C_O($1)
-    _LT_COMPILER_FILE_LOCKS($1)
-    _LT_LINKER_SHLIBS($1)
-    _LT_SYS_DYNAMIC_LINKER($1)
-    _LT_LINKER_HARDCODE_LIBPATH($1)
-
-    _LT_CONFIG($1)
-  fi # test -n "$compiler"
-
-  CC=$lt_save_CC
-  CFLAGS=$lt_save_CFLAGS
-  LDCXX=$LD
-  LD=$lt_save_LD
-  GCC=$lt_save_GCC
-  with_gnu_ld=$lt_save_with_gnu_ld
-  lt_cv_path_LDCXX=$lt_cv_path_LD
-  lt_cv_path_LD=$lt_save_path_LD
-  lt_cv_prog_gnu_ldcxx=$lt_cv_prog_gnu_ld
-  lt_cv_prog_gnu_ld=$lt_save_with_gnu_ld
-fi # test yes != "$_lt_caught_CXX_error"
-
-AC_LANG_POP
-])# _LT_LANG_CXX_CONFIG
-
-
-# _LT_FUNC_STRIPNAME_CNF
-# ----------------------
-# func_stripname_cnf prefix suffix name
-# strip PREFIX and SUFFIX off of NAME.
-# PREFIX and SUFFIX must not contain globbing or regex special
-# characters, hashes, percent signs, but SUFFIX may contain a leading
-# dot (in which case that matches only a dot).
-#
-# This function is identical to the (non-XSI) version of func_stripname,
-# except this one can be used by m4 code that may be executed by configure,
-# rather than the libtool script.
-m4_defun([_LT_FUNC_STRIPNAME_CNF],[dnl
-AC_REQUIRE([_LT_DECL_SED])
-AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])
-func_stripname_cnf ()
-{
-  case @S|@2 in
-  .*) func_stripname_result=`$ECHO "@S|@3" | $SED "s%^@S|@1%%; s%\\\\@S|@2\$%%"`;;
-  *)  func_stripname_result=`$ECHO "@S|@3" | $SED "s%^@S|@1%%; s%@S|@2\$%%"`;;
-  esac
-} # func_stripname_cnf
-])# _LT_FUNC_STRIPNAME_CNF
-
-
-# _LT_SYS_HIDDEN_LIBDEPS([TAGNAME])
-# ---------------------------------
-# Figure out "hidden" library dependencies from verbose
-# compiler output when linking a shared library.
-# Parse the compiler output and extract the necessary
-# objects, libraries and library flags.
-m4_defun([_LT_SYS_HIDDEN_LIBDEPS],
-[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-AC_REQUIRE([_LT_FUNC_STRIPNAME_CNF])dnl
-# Dependencies to place before and after the object being linked:
-_LT_TAGVAR(predep_objects, $1)=
-_LT_TAGVAR(postdep_objects, $1)=
-_LT_TAGVAR(predeps, $1)=
-_LT_TAGVAR(postdeps, $1)=
-_LT_TAGVAR(compiler_lib_search_path, $1)=
-
-dnl we can't use the lt_simple_compile_test_code here,
-dnl because it contains code intended for an executable,
-dnl not a library.  It's possible we should let each
-dnl tag define a new lt_????_link_test_code variable,
-dnl but it's only used here...
-m4_if([$1], [], [cat > conftest.$ac_ext <<_LT_EOF
-int a;
-void foo (void) { a = 0; }
-_LT_EOF
-], [$1], [CXX], [cat > conftest.$ac_ext <<_LT_EOF
-class Foo
-{
-public:
-  Foo (void) { a = 0; }
-private:
-  int a;
-};
-_LT_EOF
-], [$1], [F77], [cat > conftest.$ac_ext <<_LT_EOF
-      subroutine foo
-      implicit none
-      integer*4 a
-      a=0
-      return
-      end
-_LT_EOF
-], [$1], [FC], [cat > conftest.$ac_ext <<_LT_EOF
-      subroutine foo
-      implicit none
-      integer a
-      a=0
-      return
-      end
-_LT_EOF
-], [$1], [GCJ], [cat > conftest.$ac_ext <<_LT_EOF
-public class foo {
-  private int a;
-  public void bar (void) {
-    a = 0;
-  }
-};
-_LT_EOF
-], [$1], [GO], [cat > conftest.$ac_ext <<_LT_EOF
-package foo
-func foo() {
-}
-_LT_EOF
-])
-
-_lt_libdeps_save_CFLAGS=$CFLAGS
-case "$CC $CFLAGS " in #(
-*\ -flto*\ *) CFLAGS="$CFLAGS -fno-lto" ;;
-*\ -fwhopr*\ *) CFLAGS="$CFLAGS -fno-whopr" ;;
-*\ -fuse-linker-plugin*\ *) CFLAGS="$CFLAGS -fno-use-linker-plugin" ;;
-esac
-
-dnl Parse the compiler output and extract the necessary
-dnl objects, libraries and library flags.
-if AC_TRY_EVAL(ac_compile); then
-  # Parse the compiler output and extract the necessary
-  # objects, libraries and library flags.
-
-  # Sentinel used to keep track of whether or not we are before
-  # the conftest object file.
-  pre_test_object_deps_done=no
-
-  for p in `eval "$output_verbose_link_cmd"`; do
-    case $prev$p in
-
-    -L* | -R* | -l*)
-       # Some compilers place space between "-{L,R,l}" and the path.
-       # Remove the space.
-       if test x-L = x"$p" ||
-          test x-R = x"$p" ||
-          test x-l = x"$p"; then
-	 prev=$p
-	 continue
-       fi
-
-       # Expand the sysroot to ease extracting the directories later.
-       if test -z "$prev"; then
-         case $p in
-         -L*) func_stripname_cnf '-L' '' "$p"; prev=-L; p=$func_stripname_result ;;
-         -R*) func_stripname_cnf '-R' '' "$p"; prev=-R; p=$func_stripname_result ;;
-         -l*) func_stripname_cnf '-l' '' "$p"; prev=-l; p=$func_stripname_result ;;
-         esac
-       fi
-       case $p in
-       =*) func_stripname_cnf '=' '' "$p"; p=$lt_sysroot$func_stripname_result ;;
-       esac
-       if test no = "$pre_test_object_deps_done"; then
-	 case $prev in
-	 -L | -R)
-	   # Internal compiler library paths should come after those
-	   # provided the user.  The postdeps already come after the
-	   # user supplied libs so there is no need to process them.
-	   if test -z "$_LT_TAGVAR(compiler_lib_search_path, $1)"; then
-	     _LT_TAGVAR(compiler_lib_search_path, $1)=$prev$p
-	   else
-	     _LT_TAGVAR(compiler_lib_search_path, $1)="${_LT_TAGVAR(compiler_lib_search_path, $1)} $prev$p"
-	   fi
-	   ;;
-	 # The "-l" case would never come before the object being
-	 # linked, so don't bother handling this case.
-	 esac
-       else
-	 if test -z "$_LT_TAGVAR(postdeps, $1)"; then
-	   _LT_TAGVAR(postdeps, $1)=$prev$p
-	 else
-	   _LT_TAGVAR(postdeps, $1)="${_LT_TAGVAR(postdeps, $1)} $prev$p"
-	 fi
-       fi
-       prev=
-       ;;
-
-    *.lto.$objext) ;; # Ignore GCC LTO objects
-    *.$objext)
-       # This assumes that the test object file only shows up
-       # once in the compiler output.
-       if test "$p" = "conftest.$objext"; then
-	 pre_test_object_deps_done=yes
-	 continue
-       fi
-
-       if test no = "$pre_test_object_deps_done"; then
-	 if test -z "$_LT_TAGVAR(predep_objects, $1)"; then
-	   _LT_TAGVAR(predep_objects, $1)=$p
-	 else
-	   _LT_TAGVAR(predep_objects, $1)="$_LT_TAGVAR(predep_objects, $1) $p"
-	 fi
-       else
-	 if test -z "$_LT_TAGVAR(postdep_objects, $1)"; then
-	   _LT_TAGVAR(postdep_objects, $1)=$p
-	 else
-	   _LT_TAGVAR(postdep_objects, $1)="$_LT_TAGVAR(postdep_objects, $1) $p"
-	 fi
-       fi
-       ;;
-
-    *) ;; # Ignore the rest.
-
-    esac
-  done
-
-  # Clean up.
-  rm -f a.out a.exe
-else
-  echo "libtool.m4: error: problem compiling $1 test program"
-fi
-
-$RM -f confest.$objext
-CFLAGS=$_lt_libdeps_save_CFLAGS
-
-# PORTME: override above test on systems where it is broken
-m4_if([$1], [CXX],
-[case $host_os in
-interix[[3-9]]*)
-  # Interix 3.5 installs completely hosed .la files for C++, so rather than
-  # hack all around it, let's just trust "g++" to DTRT.
-  _LT_TAGVAR(predep_objects,$1)=
-  _LT_TAGVAR(postdep_objects,$1)=
-  _LT_TAGVAR(postdeps,$1)=
-  ;;
-esac
-])
-
-case " $_LT_TAGVAR(postdeps, $1) " in
-*" -lc "*) _LT_TAGVAR(archive_cmds_need_lc, $1)=no ;;
-esac
- _LT_TAGVAR(compiler_lib_search_dirs, $1)=
-if test -n "${_LT_TAGVAR(compiler_lib_search_path, $1)}"; then
- _LT_TAGVAR(compiler_lib_search_dirs, $1)=`echo " ${_LT_TAGVAR(compiler_lib_search_path, $1)}" | $SED -e 's! -L! !g' -e 's!^ !!'`
-fi
-_LT_TAGDECL([], [compiler_lib_search_dirs], [1],
-    [The directories searched by this compiler when creating a shared library])
-_LT_TAGDECL([], [predep_objects], [1],
-    [Dependencies to place before and after the objects being linked to
-    create a shared library])
-_LT_TAGDECL([], [postdep_objects], [1])
-_LT_TAGDECL([], [predeps], [1])
-_LT_TAGDECL([], [postdeps], [1])
-_LT_TAGDECL([], [compiler_lib_search_path], [1],
-    [The library search path used internally by the compiler when linking
-    a shared library])
-])# _LT_SYS_HIDDEN_LIBDEPS
-
-
-# _LT_LANG_F77_CONFIG([TAG])
-# --------------------------
-# Ensure that the configuration variables for a Fortran 77 compiler are
-# suitably defined.  These variables are subsequently used by _LT_CONFIG
-# to write the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_F77_CONFIG],
-[AC_LANG_PUSH(Fortran 77)
-if test -z "$F77" || test no = "$F77"; then
-  _lt_disable_F77=yes
-fi
-
-_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-_LT_TAGVAR(allow_undefined_flag, $1)=
-_LT_TAGVAR(always_export_symbols, $1)=no
-_LT_TAGVAR(archive_expsym_cmds, $1)=
-_LT_TAGVAR(export_dynamic_flag_spec, $1)=
-_LT_TAGVAR(hardcode_direct, $1)=no
-_LT_TAGVAR(hardcode_direct_absolute, $1)=no
-_LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
-_LT_TAGVAR(hardcode_libdir_separator, $1)=
-_LT_TAGVAR(hardcode_minus_L, $1)=no
-_LT_TAGVAR(hardcode_automatic, $1)=no
-_LT_TAGVAR(inherit_rpath, $1)=no
-_LT_TAGVAR(module_cmds, $1)=
-_LT_TAGVAR(module_expsym_cmds, $1)=
-_LT_TAGVAR(link_all_deplibs, $1)=unknown
-_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
-_LT_TAGVAR(reload_flag, $1)=$reload_flag
-_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
-_LT_TAGVAR(no_undefined_flag, $1)=
-_LT_TAGVAR(whole_archive_flag_spec, $1)=
-_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no
-
-# Source file extension for f77 test sources.
-ac_ext=f
-
-# Object file extension for compiled f77 test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# No sense in running all these tests if we already determined that
-# the F77 compiler isn't working.  Some variables (like enable_shared)
-# are currently assumed to apply to all compilers on this platform,
-# and will be corrupted by setting them based on a non-working compiler.
-if test yes != "$_lt_disable_F77"; then
-  # Code to be used in simple compile tests
-  lt_simple_compile_test_code="\
-      subroutine t
-      return
-      end
-"
-
-  # Code to be used in simple link tests
-  lt_simple_link_test_code="\
-      program t
-      end
-"
-
-  # ltmain only uses $CC for tagged configurations so make sure $CC is set.
-  _LT_TAG_COMPILER
-
-  # save warnings/boilerplate of simple test code
-  _LT_COMPILER_BOILERPLATE
-  _LT_LINKER_BOILERPLATE
-
-  # Allow CC to be a program name with arguments.
-  lt_save_CC=$CC
-  lt_save_GCC=$GCC
-  lt_save_CFLAGS=$CFLAGS
-  CC=${F77-"f77"}
-  CFLAGS=$FFLAGS
-  compiler=$CC
-  _LT_TAGVAR(compiler, $1)=$CC
-  _LT_CC_BASENAME([$compiler])
-  GCC=$G77
-  if test -n "$compiler"; then
-    AC_MSG_CHECKING([if libtool supports shared libraries])
-    AC_MSG_RESULT([$can_build_shared])
-
-    AC_MSG_CHECKING([whether to build shared libraries])
-    test no = "$can_build_shared" && enable_shared=no
-
-    # On AIX, shared libraries and static libraries use the same namespace, and
-    # are all built from PIC.
-    case $host_os in
-      aix3*)
-        test yes = "$enable_shared" && enable_static=no
-        if test -n "$RANLIB"; then
-          archive_cmds="$archive_cmds~\$RANLIB \$lib"
-          postinstall_cmds='$RANLIB $lib'
-        fi
-        ;;
-      aix[[4-9]]*)
-	if test ia64 != "$host_cpu"; then
-	  case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
-	  yes,aix,yes) ;;		# shared object as lib.so file only
-	  yes,svr4,*) ;;		# shared object as lib.so archive member only
-	  yes,*) enable_static=no ;;	# shared object in lib.a archive as well
-	  esac
-	fi
-        ;;
-    esac
-    AC_MSG_RESULT([$enable_shared])
-
-    AC_MSG_CHECKING([whether to build static libraries])
-    # Make sure either enable_shared or enable_static is yes.
-    test yes = "$enable_shared" || enable_static=yes
-    AC_MSG_RESULT([$enable_static])
-
-    _LT_TAGVAR(GCC, $1)=$G77
-    _LT_TAGVAR(LD, $1)=$LD
-
-    ## CAVEAT EMPTOR:
-    ## There is no encapsulation within the following macros, do not change
-    ## the running order or otherwise move them around unless you know exactly
-    ## what you are doing...
-    _LT_COMPILER_PIC($1)
-    _LT_COMPILER_C_O($1)
-    _LT_COMPILER_FILE_LOCKS($1)
-    _LT_LINKER_SHLIBS($1)
-    _LT_SYS_DYNAMIC_LINKER($1)
-    _LT_LINKER_HARDCODE_LIBPATH($1)
-
-    _LT_CONFIG($1)
-  fi # test -n "$compiler"
-
-  GCC=$lt_save_GCC
-  CC=$lt_save_CC
-  CFLAGS=$lt_save_CFLAGS
-fi # test yes != "$_lt_disable_F77"
-
-AC_LANG_POP
-])# _LT_LANG_F77_CONFIG
-
-
-# _LT_LANG_FC_CONFIG([TAG])
-# -------------------------
-# Ensure that the configuration variables for a Fortran compiler are
-# suitably defined.  These variables are subsequently used by _LT_CONFIG
-# to write the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_FC_CONFIG],
-[AC_LANG_PUSH(Fortran)
-
-if test -z "$FC" || test no = "$FC"; then
-  _lt_disable_FC=yes
-fi
-
-_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-_LT_TAGVAR(allow_undefined_flag, $1)=
-_LT_TAGVAR(always_export_symbols, $1)=no
-_LT_TAGVAR(archive_expsym_cmds, $1)=
-_LT_TAGVAR(export_dynamic_flag_spec, $1)=
-_LT_TAGVAR(hardcode_direct, $1)=no
-_LT_TAGVAR(hardcode_direct_absolute, $1)=no
-_LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
-_LT_TAGVAR(hardcode_libdir_separator, $1)=
-_LT_TAGVAR(hardcode_minus_L, $1)=no
-_LT_TAGVAR(hardcode_automatic, $1)=no
-_LT_TAGVAR(inherit_rpath, $1)=no
-_LT_TAGVAR(module_cmds, $1)=
-_LT_TAGVAR(module_expsym_cmds, $1)=
-_LT_TAGVAR(link_all_deplibs, $1)=unknown
-_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
-_LT_TAGVAR(reload_flag, $1)=$reload_flag
-_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
-_LT_TAGVAR(no_undefined_flag, $1)=
-_LT_TAGVAR(whole_archive_flag_spec, $1)=
-_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no
-
-# Source file extension for fc test sources.
-ac_ext=${ac_fc_srcext-f}
-
-# Object file extension for compiled fc test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# No sense in running all these tests if we already determined that
-# the FC compiler isn't working.  Some variables (like enable_shared)
-# are currently assumed to apply to all compilers on this platform,
-# and will be corrupted by setting them based on a non-working compiler.
-if test yes != "$_lt_disable_FC"; then
-  # Code to be used in simple compile tests
-  lt_simple_compile_test_code="\
-      subroutine t
-      return
-      end
-"
-
-  # Code to be used in simple link tests
-  lt_simple_link_test_code="\
-      program t
-      end
-"
-
-  # ltmain only uses $CC for tagged configurations so make sure $CC is set.
-  _LT_TAG_COMPILER
-
-  # save warnings/boilerplate of simple test code
-  _LT_COMPILER_BOILERPLATE
-  _LT_LINKER_BOILERPLATE
-
-  # Allow CC to be a program name with arguments.
-  lt_save_CC=$CC
-  lt_save_GCC=$GCC
-  lt_save_CFLAGS=$CFLAGS
-  CC=${FC-"f95"}
-  CFLAGS=$FCFLAGS
-  compiler=$CC
-  GCC=$ac_cv_fc_compiler_gnu
-
-  _LT_TAGVAR(compiler, $1)=$CC
-  _LT_CC_BASENAME([$compiler])
-
-  if test -n "$compiler"; then
-    AC_MSG_CHECKING([if libtool supports shared libraries])
-    AC_MSG_RESULT([$can_build_shared])
-
-    AC_MSG_CHECKING([whether to build shared libraries])
-    test no = "$can_build_shared" && enable_shared=no
-
-    # On AIX, shared libraries and static libraries use the same namespace, and
-    # are all built from PIC.
-    case $host_os in
-      aix3*)
-        test yes = "$enable_shared" && enable_static=no
-        if test -n "$RANLIB"; then
-          archive_cmds="$archive_cmds~\$RANLIB \$lib"
-          postinstall_cmds='$RANLIB $lib'
-        fi
-        ;;
-      aix[[4-9]]*)
-	if test ia64 != "$host_cpu"; then
-	  case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
-	  yes,aix,yes) ;;		# shared object as lib.so file only
-	  yes,svr4,*) ;;		# shared object as lib.so archive member only
-	  yes,*) enable_static=no ;;	# shared object in lib.a archive as well
-	  esac
-	fi
-        ;;
-    esac
-    AC_MSG_RESULT([$enable_shared])
-
-    AC_MSG_CHECKING([whether to build static libraries])
-    # Make sure either enable_shared or enable_static is yes.
-    test yes = "$enable_shared" || enable_static=yes
-    AC_MSG_RESULT([$enable_static])
-
-    _LT_TAGVAR(GCC, $1)=$ac_cv_fc_compiler_gnu
-    _LT_TAGVAR(LD, $1)=$LD
-
-    ## CAVEAT EMPTOR:
-    ## There is no encapsulation within the following macros, do not change
-    ## the running order or otherwise move them around unless you know exactly
-    ## what you are doing...
-    _LT_SYS_HIDDEN_LIBDEPS($1)
-    _LT_COMPILER_PIC($1)
-    _LT_COMPILER_C_O($1)
-    _LT_COMPILER_FILE_LOCKS($1)
-    _LT_LINKER_SHLIBS($1)
-    _LT_SYS_DYNAMIC_LINKER($1)
-    _LT_LINKER_HARDCODE_LIBPATH($1)
-
-    _LT_CONFIG($1)
-  fi # test -n "$compiler"
-
-  GCC=$lt_save_GCC
-  CC=$lt_save_CC
-  CFLAGS=$lt_save_CFLAGS
-fi # test yes != "$_lt_disable_FC"
-
-AC_LANG_POP
-])# _LT_LANG_FC_CONFIG
-
-
-# _LT_LANG_GCJ_CONFIG([TAG])
-# --------------------------
-# Ensure that the configuration variables for the GNU Java Compiler compiler
-# are suitably defined.  These variables are subsequently used by _LT_CONFIG
-# to write the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_GCJ_CONFIG],
-[AC_REQUIRE([LT_PROG_GCJ])dnl
-AC_LANG_SAVE
-
-# Source file extension for Java test sources.
-ac_ext=java
-
-# Object file extension for compiled Java test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code="class foo {}"
-
-# Code to be used in simple link tests
-lt_simple_link_test_code='public class conftest { public static void main(String[[]] argv) {}; }'
-
-# ltmain only uses $CC for tagged configurations so make sure $CC is set.
-_LT_TAG_COMPILER
-
-# save warnings/boilerplate of simple test code
-_LT_COMPILER_BOILERPLATE
-_LT_LINKER_BOILERPLATE
-
-# Allow CC to be a program name with arguments.
-lt_save_CC=$CC
-lt_save_CFLAGS=$CFLAGS
-lt_save_GCC=$GCC
-GCC=yes
-CC=${GCJ-"gcj"}
-CFLAGS=$GCJFLAGS
-compiler=$CC
-_LT_TAGVAR(compiler, $1)=$CC
-_LT_TAGVAR(LD, $1)=$LD
-_LT_CC_BASENAME([$compiler])
-
-# GCJ did not exist at the time GCC didn't implicitly link libc in.
-_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-
-_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
-_LT_TAGVAR(reload_flag, $1)=$reload_flag
-_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
-
-## CAVEAT EMPTOR:
-## There is no encapsulation within the following macros, do not change
-## the running order or otherwise move them around unless you know exactly
-## what you are doing...
-if test -n "$compiler"; then
-  _LT_COMPILER_NO_RTTI($1)
-  _LT_COMPILER_PIC($1)
-  _LT_COMPILER_C_O($1)
-  _LT_COMPILER_FILE_LOCKS($1)
-  _LT_LINKER_SHLIBS($1)
-  _LT_LINKER_HARDCODE_LIBPATH($1)
-
-  _LT_CONFIG($1)
-fi
-
-AC_LANG_RESTORE
-
-GCC=$lt_save_GCC
-CC=$lt_save_CC
-CFLAGS=$lt_save_CFLAGS
-])# _LT_LANG_GCJ_CONFIG
-
-
-# _LT_LANG_GO_CONFIG([TAG])
-# --------------------------
-# Ensure that the configuration variables for the GNU Go compiler
-# are suitably defined.  These variables are subsequently used by _LT_CONFIG
-# to write the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_GO_CONFIG],
-[AC_REQUIRE([LT_PROG_GO])dnl
-AC_LANG_SAVE
-
-# Source file extension for Go test sources.
-ac_ext=go
-
-# Object file extension for compiled Go test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code="package main; func main() { }"
-
-# Code to be used in simple link tests
-lt_simple_link_test_code='package main; func main() { }'
-
-# ltmain only uses $CC for tagged configurations so make sure $CC is set.
-_LT_TAG_COMPILER
-
-# save warnings/boilerplate of simple test code
-_LT_COMPILER_BOILERPLATE
-_LT_LINKER_BOILERPLATE
-
-# Allow CC to be a program name with arguments.
-lt_save_CC=$CC
-lt_save_CFLAGS=$CFLAGS
-lt_save_GCC=$GCC
-GCC=yes
-CC=${GOC-"gccgo"}
-CFLAGS=$GOFLAGS
-compiler=$CC
-_LT_TAGVAR(compiler, $1)=$CC
-_LT_TAGVAR(LD, $1)=$LD
-_LT_CC_BASENAME([$compiler])
-
-# Go did not exist at the time GCC didn't implicitly link libc in.
-_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-
-_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
-_LT_TAGVAR(reload_flag, $1)=$reload_flag
-_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
-
-## CAVEAT EMPTOR:
-## There is no encapsulation within the following macros, do not change
-## the running order or otherwise move them around unless you know exactly
-## what you are doing...
-if test -n "$compiler"; then
-  _LT_COMPILER_NO_RTTI($1)
-  _LT_COMPILER_PIC($1)
-  _LT_COMPILER_C_O($1)
-  _LT_COMPILER_FILE_LOCKS($1)
-  _LT_LINKER_SHLIBS($1)
-  _LT_LINKER_HARDCODE_LIBPATH($1)
-
-  _LT_CONFIG($1)
-fi
-
-AC_LANG_RESTORE
-
-GCC=$lt_save_GCC
-CC=$lt_save_CC
-CFLAGS=$lt_save_CFLAGS
-])# _LT_LANG_GO_CONFIG
-
-
-# _LT_LANG_RC_CONFIG([TAG])
-# -------------------------
-# Ensure that the configuration variables for the Windows resource compiler
-# are suitably defined.  These variables are subsequently used by _LT_CONFIG
-# to write the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_RC_CONFIG],
-[AC_REQUIRE([LT_PROG_RC])dnl
-AC_LANG_SAVE
-
-# Source file extension for RC test sources.
-ac_ext=rc
-
-# Object file extension for compiled RC test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code='sample MENU { MENUITEM "&Soup", 100, CHECKED }'
-
-# Code to be used in simple link tests
-lt_simple_link_test_code=$lt_simple_compile_test_code
-
-# ltmain only uses $CC for tagged configurations so make sure $CC is set.
-_LT_TAG_COMPILER
-
-# save warnings/boilerplate of simple test code
-_LT_COMPILER_BOILERPLATE
-_LT_LINKER_BOILERPLATE
-
-# Allow CC to be a program name with arguments.
-lt_save_CC=$CC
-lt_save_CFLAGS=$CFLAGS
-lt_save_GCC=$GCC
-GCC=
-CC=${RC-"windres"}
-CFLAGS=
-compiler=$CC
-_LT_TAGVAR(compiler, $1)=$CC
-_LT_CC_BASENAME([$compiler])
-_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes
-
-if test -n "$compiler"; then
-  :
-  _LT_CONFIG($1)
-fi
-
-GCC=$lt_save_GCC
-AC_LANG_RESTORE
-CC=$lt_save_CC
-CFLAGS=$lt_save_CFLAGS
-])# _LT_LANG_RC_CONFIG
-
-
-# LT_PROG_GCJ
-# -----------
-AC_DEFUN([LT_PROG_GCJ],
-[m4_ifdef([AC_PROG_GCJ], [AC_PROG_GCJ],
-  [m4_ifdef([A][M_PROG_GCJ], [A][M_PROG_GCJ],
-    [AC_CHECK_TOOL(GCJ, gcj,)
-      test set = "${GCJFLAGS+set}" || GCJFLAGS="-g -O2"
-      AC_SUBST(GCJFLAGS)])])[]dnl
-])
-
-# Old name:
-AU_ALIAS([LT_AC_PROG_GCJ], [LT_PROG_GCJ])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([LT_AC_PROG_GCJ], [])
-
-
-# LT_PROG_GO
-# ----------
-AC_DEFUN([LT_PROG_GO],
-[AC_CHECK_TOOL(GOC, gccgo,)
-])
-
-
-# LT_PROG_RC
-# ----------
-AC_DEFUN([LT_PROG_RC],
-[AC_CHECK_TOOL(RC, windres,)
-])
-
-# Old name:
-AU_ALIAS([LT_AC_PROG_RC], [LT_PROG_RC])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([LT_AC_PROG_RC], [])
-
-
-# _LT_DECL_EGREP
-# --------------
-# If we don't have a new enough Autoconf to choose the best grep
-# available, choose the one first in the user's PATH.
-m4_defun([_LT_DECL_EGREP],
-[AC_REQUIRE([AC_PROG_EGREP])dnl
-AC_REQUIRE([AC_PROG_FGREP])dnl
-test -z "$GREP" && GREP=grep
-_LT_DECL([], [GREP], [1], [A grep program that handles long lines])
-_LT_DECL([], [EGREP], [1], [An ERE matcher])
-_LT_DECL([], [FGREP], [1], [A literal string matcher])
-dnl Non-bleeding-edge autoconf doesn't subst GREP, so do it here too
-AC_SUBST([GREP])
-])
-
-
-# _LT_DECL_OBJDUMP
-# --------------
-# If we don't have a new enough Autoconf to choose the best objdump
-# available, choose the one first in the user's PATH.
-m4_defun([_LT_DECL_OBJDUMP],
-[AC_CHECK_TOOL(OBJDUMP, objdump, false)
-test -z "$OBJDUMP" && OBJDUMP=objdump
-_LT_DECL([], [OBJDUMP], [1], [An object symbol dumper])
-AC_SUBST([OBJDUMP])
-])
-
-# _LT_DECL_DLLTOOL
-# ----------------
-# Ensure DLLTOOL variable is set.
-m4_defun([_LT_DECL_DLLTOOL],
-[AC_CHECK_TOOL(DLLTOOL, dlltool, false)
-test -z "$DLLTOOL" && DLLTOOL=dlltool
-_LT_DECL([], [DLLTOOL], [1], [DLL creation program])
-AC_SUBST([DLLTOOL])
-])
-
-# _LT_DECL_FILECMD
-# ----------------
-# Check for a file(cmd) program that can be used to detect file type and magic
-m4_defun([_LT_DECL_FILECMD],
-[AC_CHECK_PROG([FILECMD], [file], [file], [:])
-_LT_DECL([], [FILECMD], [1], [A file(cmd) program that detects file types])
-])# _LD_DECL_FILECMD
-
-# _LT_DECL_SED
-# ------------
-# Check for a fully-functional sed program, that truncates
-# as few characters as possible.  Prefer GNU sed if found.
-m4_defun([_LT_DECL_SED],
-[AC_PROG_SED
-test -z "$SED" && SED=sed
-Xsed="$SED -e 1s/^X//"
-_LT_DECL([], [SED], [1], [A sed program that does not truncate output])
-_LT_DECL([], [Xsed], ["\$SED -e 1s/^X//"],
-    [Sed that helps us avoid accidentally triggering echo(1) options like -n])
-])# _LT_DECL_SED
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([LT_AC_PROG_SED], [])
-
-
-# _LT_CHECK_SHELL_FEATURES
-# ------------------------
-# Find out whether the shell is Bourne or XSI compatible,
-# or has some other useful features.
-m4_defun([_LT_CHECK_SHELL_FEATURES],
-[if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then
-  lt_unset=unset
-else
-  lt_unset=false
-fi
-_LT_DECL([], [lt_unset], [0], [whether the shell understands "unset"])dnl
-
-# test EBCDIC or ASCII
-case `echo X|tr X '\101'` in
- A) # ASCII based system
-    # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr
-  lt_SP2NL='tr \040 \012'
-  lt_NL2SP='tr \015\012 \040\040'
-  ;;
- *) # EBCDIC based system
-  lt_SP2NL='tr \100 \n'
-  lt_NL2SP='tr \r\n \100\100'
-  ;;
-esac
-_LT_DECL([SP2NL], [lt_SP2NL], [1], [turn spaces into newlines])dnl
-_LT_DECL([NL2SP], [lt_NL2SP], [1], [turn newlines into spaces])dnl
-])# _LT_CHECK_SHELL_FEATURES
-
-
-# _LT_PATH_CONVERSION_FUNCTIONS
-# -----------------------------
-# Determine what file name conversion functions should be used by
-# func_to_host_file (and, implicitly, by func_to_host_path).  These are needed
-# for certain cross-compile configurations and native mingw.
-m4_defun([_LT_PATH_CONVERSION_FUNCTIONS],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-AC_REQUIRE([AC_CANONICAL_BUILD])dnl
-AC_MSG_CHECKING([how to convert $build file names to $host format])
-AC_CACHE_VAL(lt_cv_to_host_file_cmd,
-[case $host in
-  *-*-mingw* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32
-        ;;
-    esac
-    ;;
-  *-*-cygwin* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_noop
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin
-        ;;
-    esac
-    ;;
-  * ) # unhandled hosts (and "normal" native builds)
-    lt_cv_to_host_file_cmd=func_convert_file_noop
-    ;;
-esac
-])
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-AC_MSG_RESULT([$lt_cv_to_host_file_cmd])
-_LT_DECL([to_host_file_cmd], [lt_cv_to_host_file_cmd],
-         [0], [convert $build file names to $host format])dnl
-
-AC_MSG_CHECKING([how to convert $build file names to toolchain format])
-AC_CACHE_VAL(lt_cv_to_tool_file_cmd,
-[#assume ordinary cross tools, or native build.
-lt_cv_to_tool_file_cmd=func_convert_file_noop
-case $host in
-  *-*-mingw* | *-*-windows* )
-    case $build in
-      *-*-mingw* | *-*-windows* ) # actually msys
-        lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32
-        ;;
-    esac
-    ;;
-esac
-])
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-AC_MSG_RESULT([$lt_cv_to_tool_file_cmd])
-_LT_DECL([to_tool_file_cmd], [lt_cv_to_tool_file_cmd],
-         [0], [convert $build files to toolchain format])dnl
-])# _LT_PATH_CONVERSION_FUNCTIONS
diff --git a/experiments/wasm-gui/third_party/libXext/m4/ltoptions.m4 b/experiments/wasm-gui/third_party/libXext/m4/ltoptions.m4
deleted file mode 100644
index 25caa8902..000000000
--- a/experiments/wasm-gui/third_party/libXext/m4/ltoptions.m4
+++ /dev/null
@@ -1,467 +0,0 @@
-# Helper functions for option handling.                    -*- Autoconf -*-
-#
-#   Copyright (C) 2004-2005, 2007-2009, 2011-2019, 2021-2024 Free
-#   Software Foundation, Inc.
-#   Written by Gary V. Vaughan, 2004
-#
-# This file is free software; the Free Software Foundation gives
-# unlimited permission to copy and/or distribute it, with or without
-# modifications, as long as this notice is preserved.
-
-# serial 10 ltoptions.m4
-
-# This is to help aclocal find these macros, as it can't see m4_define.
-AC_DEFUN([LTOPTIONS_VERSION], [m4_if([1])])
-
-
-# _LT_MANGLE_OPTION(MACRO-NAME, OPTION-NAME)
-# ------------------------------------------
-m4_define([_LT_MANGLE_OPTION],
-[[_LT_OPTION_]m4_bpatsubst($1__$2, [[^a-zA-Z0-9_]], [_])])
-
-
-# _LT_SET_OPTION(MACRO-NAME, OPTION-NAME)
-# ---------------------------------------
-# Set option OPTION-NAME for macro MACRO-NAME, and if there is a
-# matching handler defined, dispatch to it.  Other OPTION-NAMEs are
-# saved as a flag.
-m4_define([_LT_SET_OPTION],
-[m4_define(_LT_MANGLE_OPTION([$1], [$2]))dnl
-m4_ifdef(_LT_MANGLE_DEFUN([$1], [$2]),
-        _LT_MANGLE_DEFUN([$1], [$2]),
-    [m4_warning([Unknown $1 option '$2'])])[]dnl
-])
-
-
-# _LT_IF_OPTION(MACRO-NAME, OPTION-NAME, IF-SET, [IF-NOT-SET])
-# ------------------------------------------------------------
-# Execute IF-SET if OPTION is set, IF-NOT-SET otherwise.
-m4_define([_LT_IF_OPTION],
-[m4_ifdef(_LT_MANGLE_OPTION([$1], [$2]), [$3], [$4])])
-
-
-# _LT_UNLESS_OPTIONS(MACRO-NAME, OPTION-LIST, IF-NOT-SET)
-# -------------------------------------------------------
-# Execute IF-NOT-SET unless all options in OPTION-LIST for MACRO-NAME
-# are set.
-m4_define([_LT_UNLESS_OPTIONS],
-[m4_foreach([_LT_Option], m4_split(m4_normalize([$2])),
-	    [m4_ifdef(_LT_MANGLE_OPTION([$1], _LT_Option),
-		      [m4_define([$0_found])])])[]dnl
-m4_ifdef([$0_found], [m4_undefine([$0_found])], [$3
-])[]dnl
-])
-
-
-# _LT_SET_OPTIONS(MACRO-NAME, OPTION-LIST)
-# ----------------------------------------
-# OPTION-LIST is a space-separated list of Libtool options associated
-# with MACRO-NAME.  If any OPTION has a matching handler declared with
-# LT_OPTION_DEFINE, dispatch to that macro; otherwise complain about
-# the unknown option and exit.
-m4_defun([_LT_SET_OPTIONS],
-[# Set options
-m4_foreach([_LT_Option], m4_split(m4_normalize([$2])),
-    [_LT_SET_OPTION([$1], _LT_Option)])
-
-m4_if([$1],[LT_INIT],[
-  dnl
-  dnl Simply set some default values (i.e off) if boolean options were not
-  dnl specified:
-  _LT_UNLESS_OPTIONS([LT_INIT], [dlopen], [enable_dlopen=no
-  ])
-  _LT_UNLESS_OPTIONS([LT_INIT], [win32-dll], [enable_win32_dll=no
-  ])
-  dnl
-  dnl If no reference was made to various pairs of opposing options, then
-  dnl we run the default mode handler for the pair.  For example, if neither
-  dnl 'shared' nor 'disable-shared' was passed, we enable building of shared
-  dnl archives by default:
-  _LT_UNLESS_OPTIONS([LT_INIT], [shared disable-shared], [_LT_ENABLE_SHARED])
-  _LT_UNLESS_OPTIONS([LT_INIT], [static disable-static], [_LT_ENABLE_STATIC])
-  _LT_UNLESS_OPTIONS([LT_INIT], [pic-only no-pic], [_LT_WITH_PIC])
-  _LT_UNLESS_OPTIONS([LT_INIT], [fast-install disable-fast-install],
-		   [_LT_ENABLE_FAST_INSTALL])
-  _LT_UNLESS_OPTIONS([LT_INIT], [aix-soname=aix aix-soname=both aix-soname=svr4],
-		   [_LT_WITH_AIX_SONAME([aix])])
-  ])
-])# _LT_SET_OPTIONS
-
-
-## --------------------------------- ##
-## Macros to handle LT_INIT options. ##
-## --------------------------------- ##
-
-# _LT_MANGLE_DEFUN(MACRO-NAME, OPTION-NAME)
-# -----------------------------------------
-m4_define([_LT_MANGLE_DEFUN],
-[[_LT_OPTION_DEFUN_]m4_bpatsubst(m4_toupper([$1__$2]), [[^A-Z0-9_]], [_])])
-
-
-# LT_OPTION_DEFINE(MACRO-NAME, OPTION-NAME, CODE)
-# -----------------------------------------------
-m4_define([LT_OPTION_DEFINE],
-[m4_define(_LT_MANGLE_DEFUN([$1], [$2]), [$3])[]dnl
-])# LT_OPTION_DEFINE
-
-
-# dlopen
-# ------
-LT_OPTION_DEFINE([LT_INIT], [dlopen], [enable_dlopen=yes
-])
-
-AU_DEFUN([AC_LIBTOOL_DLOPEN],
-[_LT_SET_OPTION([LT_INIT], [dlopen])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'dlopen' option into LT_INIT's first parameter.])
-])
-
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_DLOPEN], [])
-
-
-# win32-dll
-# ---------
-# Declare package support for building win32 dll's.
-LT_OPTION_DEFINE([LT_INIT], [win32-dll],
-[enable_win32_dll=yes
-
-case $host in
-*-*-cygwin* | *-*-mingw* | *-*-windows* | *-*-pw32* | *-*-cegcc*)
-  AC_CHECK_TOOL(AS, as, false)
-  AC_CHECK_TOOL(DLLTOOL, dlltool, false)
-  AC_CHECK_TOOL(OBJDUMP, objdump, false)
-  ;;
-esac
-
-test -z "$AS" && AS=as
-_LT_DECL([], [AS],      [1], [Assembler program])dnl
-
-test -z "$DLLTOOL" && DLLTOOL=dlltool
-_LT_DECL([], [DLLTOOL], [1], [DLL creation program])dnl
-
-test -z "$OBJDUMP" && OBJDUMP=objdump
-_LT_DECL([], [OBJDUMP], [1], [Object dumper program])dnl
-])# win32-dll
-
-AU_DEFUN([AC_LIBTOOL_WIN32_DLL],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-_LT_SET_OPTION([LT_INIT], [win32-dll])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'win32-dll' option into LT_INIT's first parameter.])
-])
-
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_WIN32_DLL], [])
-
-
-# _LT_ENABLE_SHARED([DEFAULT])
-# ----------------------------
-# implement the --enable-shared flag, and supports the 'shared' and
-# 'disable-shared' LT_INIT options.
-# DEFAULT is either 'yes' or 'no'.  If omitted, it defaults to 'yes'.
-m4_define([_LT_ENABLE_SHARED],
-[m4_define([_LT_ENABLE_SHARED_DEFAULT], [m4_if($1, no, no, yes)])dnl
-AC_ARG_ENABLE([shared],
-    [AS_HELP_STRING([--enable-shared@<:@=PKGS@:>@],
-	[build shared libraries @<:@default=]_LT_ENABLE_SHARED_DEFAULT[@:>@])],
-    [p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_shared=yes ;;
-    no) enable_shared=no ;;
-    *)
-      enable_shared=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_shared=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac],
-    [enable_shared=]_LT_ENABLE_SHARED_DEFAULT)
-
-    _LT_DECL([build_libtool_libs], [enable_shared], [0],
-	[Whether or not to build shared libraries])
-])# _LT_ENABLE_SHARED
-
-LT_OPTION_DEFINE([LT_INIT], [shared], [_LT_ENABLE_SHARED([yes])])
-LT_OPTION_DEFINE([LT_INIT], [disable-shared], [_LT_ENABLE_SHARED([no])])
-
-# Old names:
-AC_DEFUN([AC_ENABLE_SHARED],
-[_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[shared])
-])
-
-AC_DEFUN([AC_DISABLE_SHARED],
-[_LT_SET_OPTION([LT_INIT], [disable-shared])
-])
-
-AU_DEFUN([AM_ENABLE_SHARED], [AC_ENABLE_SHARED($@)])
-AU_DEFUN([AM_DISABLE_SHARED], [AC_DISABLE_SHARED($@)])
-
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AM_ENABLE_SHARED], [])
-dnl AC_DEFUN([AM_DISABLE_SHARED], [])
-
-
-
-# _LT_ENABLE_STATIC([DEFAULT])
-# ----------------------------
-# implement the --enable-static flag, and support the 'static' and
-# 'disable-static' LT_INIT options.
-# DEFAULT is either 'yes' or 'no'.  If omitted, it defaults to 'yes'.
-m4_define([_LT_ENABLE_STATIC],
-[m4_define([_LT_ENABLE_STATIC_DEFAULT], [m4_if($1, no, no, yes)])dnl
-AC_ARG_ENABLE([static],
-    [AS_HELP_STRING([--enable-static@<:@=PKGS@:>@],
-	[build static libraries @<:@default=]_LT_ENABLE_STATIC_DEFAULT[@:>@])],
-    [p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_static=yes ;;
-    no) enable_static=no ;;
-    *)
-     enable_static=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_static=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac],
-    [enable_static=]_LT_ENABLE_STATIC_DEFAULT)
-
-    _LT_DECL([build_old_libs], [enable_static], [0],
-	[Whether or not to build static libraries])
-])# _LT_ENABLE_STATIC
-
-LT_OPTION_DEFINE([LT_INIT], [static], [_LT_ENABLE_STATIC([yes])])
-LT_OPTION_DEFINE([LT_INIT], [disable-static], [_LT_ENABLE_STATIC([no])])
-
-# Old names:
-AC_DEFUN([AC_ENABLE_STATIC],
-[_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[static])
-])
-
-AC_DEFUN([AC_DISABLE_STATIC],
-[_LT_SET_OPTION([LT_INIT], [disable-static])
-])
-
-AU_DEFUN([AM_ENABLE_STATIC], [AC_ENABLE_STATIC($@)])
-AU_DEFUN([AM_DISABLE_STATIC], [AC_DISABLE_STATIC($@)])
-
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AM_ENABLE_STATIC], [])
-dnl AC_DEFUN([AM_DISABLE_STATIC], [])
-
-
-
-# _LT_ENABLE_FAST_INSTALL([DEFAULT])
-# ----------------------------------
-# implement the --enable-fast-install flag, and support the 'fast-install'
-# and 'disable-fast-install' LT_INIT options.
-# DEFAULT is either 'yes' or 'no'.  If omitted, it defaults to 'yes'.
-m4_define([_LT_ENABLE_FAST_INSTALL],
-[m4_define([_LT_ENABLE_FAST_INSTALL_DEFAULT], [m4_if($1, no, no, yes)])dnl
-AC_ARG_ENABLE([fast-install],
-    [AS_HELP_STRING([--enable-fast-install@<:@=PKGS@:>@],
-    [optimize for fast installation @<:@default=]_LT_ENABLE_FAST_INSTALL_DEFAULT[@:>@])],
-    [p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_fast_install=yes ;;
-    no) enable_fast_install=no ;;
-    *)
-      enable_fast_install=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_fast_install=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac],
-    [enable_fast_install=]_LT_ENABLE_FAST_INSTALL_DEFAULT)
-
-_LT_DECL([fast_install], [enable_fast_install], [0],
-	 [Whether or not to optimize for fast installation])dnl
-])# _LT_ENABLE_FAST_INSTALL
-
-LT_OPTION_DEFINE([LT_INIT], [fast-install], [_LT_ENABLE_FAST_INSTALL([yes])])
-LT_OPTION_DEFINE([LT_INIT], [disable-fast-install], [_LT_ENABLE_FAST_INSTALL([no])])
-
-# Old names:
-AU_DEFUN([AC_ENABLE_FAST_INSTALL],
-[_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[fast-install])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you put
-the 'fast-install' option into LT_INIT's first parameter.])
-])
-
-AU_DEFUN([AC_DISABLE_FAST_INSTALL],
-[_LT_SET_OPTION([LT_INIT], [disable-fast-install])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you put
-the 'disable-fast-install' option into LT_INIT's first parameter.])
-])
-
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_ENABLE_FAST_INSTALL], [])
-dnl AC_DEFUN([AM_DISABLE_FAST_INSTALL], [])
-
-
-# _LT_WITH_AIX_SONAME([DEFAULT])
-# ----------------------------------
-# implement the --enable-aix-soname configure option, and support the
-# `aix-soname=aix' and `aix-soname=both' and `aix-soname=svr4' LT_INIT options.
-# DEFAULT is either `aix', `both', or `svr4'.  If omitted, it defaults to `aix'.
-m4_define([_LT_WITH_AIX_SONAME],
-[m4_define([_LT_WITH_AIX_SONAME_DEFAULT], [m4_if($1, svr4, svr4, m4_if($1, both, both, aix))])dnl
-shared_archive_member_spec=
-case $host,$enable_shared in
-power*-*-aix[[5-9]]*,yes)
-  AC_MSG_CHECKING([which variant of shared library versioning to provide])
-  AC_ARG_ENABLE([aix-soname],
-    [AS_HELP_STRING([--enable-aix-soname=aix|svr4|both],
-      [shared library versioning (aka "SONAME") variant to provide on AIX, @<:@default=]_LT_WITH_AIX_SONAME_DEFAULT[@:>@.])],
-    [case $enableval in
-     aix|svr4|both)
-       ;;
-     *)
-       AC_MSG_ERROR([Unknown argument to --enable-aix-soname])
-       ;;
-     esac
-     lt_cv_with_aix_soname=$enable_aix_soname],
-    [_AC_ENABLE_IF([with], [aix-soname],
-        [case $withval in
-         aix|svr4|both)
-           ;;
-         *)
-           AC_MSG_ERROR([Unknown argument to --with-aix-soname])
-           ;;
-         esac
-         lt_cv_with_aix_soname=$with_aix_soname],
-        [AC_CACHE_VAL([lt_cv_with_aix_soname],
-           [lt_cv_with_aix_soname=]_LT_WITH_AIX_SONAME_DEFAULT)])
-     enable_aix_soname=$lt_cv_with_aix_soname])
-  with_aix_soname=$enable_aix_soname
-  AC_MSG_RESULT([$with_aix_soname])
-  if test aix != "$with_aix_soname"; then
-    # For the AIX way of multilib, we name the shared archive member
-    # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o',
-    # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File.
-    # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag,
-    # the AIX toolchain works better with OBJECT_MODE set (default 32).
-    if test 64 = "${OBJECT_MODE-32}"; then
-      shared_archive_member_spec=shr_64
-    else
-      shared_archive_member_spec=shr
-    fi
-  fi
-  ;;
-*)
-  with_aix_soname=aix
-  ;;
-esac
-
-_LT_DECL([], [shared_archive_member_spec], [0],
-    [Shared archive member basename, for filename based shared library versioning on AIX])dnl
-])# _LT_WITH_AIX_SONAME
-
-LT_OPTION_DEFINE([LT_INIT], [aix-soname=aix], [_LT_WITH_AIX_SONAME([aix])])
-LT_OPTION_DEFINE([LT_INIT], [aix-soname=both], [_LT_WITH_AIX_SONAME([both])])
-LT_OPTION_DEFINE([LT_INIT], [aix-soname=svr4], [_LT_WITH_AIX_SONAME([svr4])])
-
-
-# _LT_WITH_PIC([MODE])
-# --------------------
-# implement the --enable-pic flag, and support the 'pic-only' and 'no-pic'
-# LT_INIT options.
-# MODE is either 'yes' or 'no'.  If omitted, it defaults to 'both'.
-m4_define([_LT_WITH_PIC],
-[AC_ARG_ENABLE([pic],
-    [AS_HELP_STRING([--enable-pic@<:@=PKGS@:>@],
-	[try to use only PIC/non-PIC objects @<:@default=use both@:>@])],
-    [lt_p=${PACKAGE-default}
-     case $enableval in
-     yes|no) pic_mode=$enableval ;;
-     *)
-       pic_mode=default
-       # Look at the argument we got.  We use all the common list separators.
-       lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-       for lt_pkg in $enableval; do
-	 IFS=$lt_save_ifs
-	 if test "X$lt_pkg" = "X$lt_p"; then
-	   pic_mode=yes
-	 fi
-       done
-       IFS=$lt_save_ifs
-       ;;
-     esac],
-    [dnl Continue to support --with-pic and --without-pic, for backward
-     dnl compatibility.
-     _AC_ENABLE_IF([with], [pic],
-	[lt_p=${PACKAGE-default}
-	 case $withval in
-	 yes|no) pic_mode=$withval ;;
-	 *)
-	   pic_mode=default
-	   # Look at the argument we got.  We use all the common list separators.
-	   lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-	   for lt_pkg in $withval; do
-	     IFS=$lt_save_ifs
-	     if test "X$lt_pkg" = "X$lt_p"; then
-	       pic_mode=yes
-	     fi
-	   done
-	   IFS=$lt_save_ifs
-	   ;;
-	 esac],
-	[pic_mode=m4_default([$1], [default])])]
-    )
-
-_LT_DECL([], [pic_mode], [0], [What type of objects to build])dnl
-])# _LT_WITH_PIC
-
-LT_OPTION_DEFINE([LT_INIT], [pic-only], [_LT_WITH_PIC([yes])])
-LT_OPTION_DEFINE([LT_INIT], [no-pic], [_LT_WITH_PIC([no])])
-
-# Old name:
-AU_DEFUN([AC_LIBTOOL_PICMODE],
-[_LT_SET_OPTION([LT_INIT], [pic-only])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'pic-only' option into LT_INIT's first parameter.])
-])
-
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_PICMODE], [])
-
-## ----------------- ##
-## LTDL_INIT Options ##
-## ----------------- ##
-
-m4_define([_LTDL_MODE], [])
-LT_OPTION_DEFINE([LTDL_INIT], [nonrecursive],
-		 [m4_define([_LTDL_MODE], [nonrecursive])])
-LT_OPTION_DEFINE([LTDL_INIT], [recursive],
-		 [m4_define([_LTDL_MODE], [recursive])])
-LT_OPTION_DEFINE([LTDL_INIT], [subproject],
-		 [m4_define([_LTDL_MODE], [subproject])])
-
-m4_define([_LTDL_TYPE], [])
-LT_OPTION_DEFINE([LTDL_INIT], [installable],
-		 [m4_define([_LTDL_TYPE], [installable])])
-LT_OPTION_DEFINE([LTDL_INIT], [convenience],
-		 [m4_define([_LTDL_TYPE], [convenience])])
diff --git a/experiments/wasm-gui/third_party/libXext/m4/ltsugar.m4 b/experiments/wasm-gui/third_party/libXext/m4/ltsugar.m4
deleted file mode 100644
index 5b5c80a3a..000000000
--- a/experiments/wasm-gui/third_party/libXext/m4/ltsugar.m4
+++ /dev/null
@@ -1,124 +0,0 @@
-# ltsugar.m4 -- libtool m4 base layer.                         -*-Autoconf-*-
-#
-# Copyright (C) 2004-2005, 2007-2008, 2011-2019, 2021-2024 Free Software
-# Foundation, Inc.
-# Written by Gary V. Vaughan, 2004
-#
-# This file is free software; the Free Software Foundation gives
-# unlimited permission to copy and/or distribute it, with or without
-# modifications, as long as this notice is preserved.
-
-# serial 6 ltsugar.m4
-
-# This is to help aclocal find these macros, as it can't see m4_define.
-AC_DEFUN([LTSUGAR_VERSION], [m4_if([0.1])])
-
-
-# lt_join(SEP, ARG1, [ARG2...])
-# -----------------------------
-# Produce ARG1SEPARG2...SEPARGn, omitting [] arguments and their
-# associated separator.
-# Needed until we can rely on m4_join from Autoconf 2.62, since all earlier
-# versions in m4sugar had bugs.
-m4_define([lt_join],
-[m4_if([$#], [1], [],
-       [$#], [2], [[$2]],
-       [m4_if([$2], [], [], [[$2]_])$0([$1], m4_shift(m4_shift($@)))])])
-m4_define([_lt_join],
-[m4_if([$#$2], [2], [],
-       [m4_if([$2], [], [], [[$1$2]])$0([$1], m4_shift(m4_shift($@)))])])
-
-
-# lt_car(LIST)
-# lt_cdr(LIST)
-# ------------
-# Manipulate m4 lists.
-# These macros are necessary as long as will still need to support
-# Autoconf-2.59, which quotes differently.
-m4_define([lt_car], [[$1]])
-m4_define([lt_cdr],
-[m4_if([$#], 0, [m4_fatal([$0: cannot be called without arguments])],
-       [$#], 1, [],
-       [m4_dquote(m4_shift($@))])])
-m4_define([lt_unquote], $1)
-
-
-# lt_append(MACRO-NAME, STRING, [SEPARATOR])
-# ------------------------------------------
-# Redefine MACRO-NAME to hold its former content plus 'SEPARATOR''STRING'.
-# Note that neither SEPARATOR nor STRING are expanded; they are appended
-# to MACRO-NAME as is (leaving the expansion for when MACRO-NAME is invoked).
-# No SEPARATOR is output if MACRO-NAME was previously undefined (different
-# than defined and empty).
-#
-# This macro is needed until we can rely on Autoconf 2.62, since earlier
-# versions of m4sugar mistakenly expanded SEPARATOR but not STRING.
-m4_define([lt_append],
-[m4_define([$1],
-	   m4_ifdef([$1], [m4_defn([$1])[$3]])[$2])])
-
-
-
-# lt_combine(SEP, PREFIX-LIST, INFIX, SUFFIX1, [SUFFIX2...])
-# ----------------------------------------------------------
-# Produce a SEP delimited list of all paired combinations of elements of
-# PREFIX-LIST with SUFFIX1 through SUFFIXn.  Each element of the list
-# has the form PREFIXmINFIXSUFFIXn.
-# Needed until we can rely on m4_combine added in Autoconf 2.62.
-m4_define([lt_combine],
-[m4_if(m4_eval([$# > 3]), [1],
-       [m4_pushdef([_Lt_sep], [m4_define([_Lt_sep], m4_defn([lt_car]))])]]dnl
-[[m4_foreach([_Lt_prefix], [$2],
-	     [m4_foreach([_Lt_suffix],
-		]m4_dquote(m4_dquote(m4_shift(m4_shift(m4_shift($@)))))[,
-	[_Lt_sep([$1])[]m4_defn([_Lt_prefix])[$3]m4_defn([_Lt_suffix])])])])])
-
-
-# lt_if_append_uniq(MACRO-NAME, VARNAME, [SEPARATOR], [UNIQ], [NOT-UNIQ])
-# -----------------------------------------------------------------------
-# Iff MACRO-NAME does not yet contain VARNAME, then append it (delimited
-# by SEPARATOR if supplied) and expand UNIQ, else NOT-UNIQ.
-m4_define([lt_if_append_uniq],
-[m4_ifdef([$1],
-	  [m4_if(m4_index([$3]m4_defn([$1])[$3], [$3$2$3]), [-1],
-		 [lt_append([$1], [$2], [$3])$4],
-		 [$5])],
-	  [lt_append([$1], [$2], [$3])$4])])
-
-
-# lt_dict_add(DICT, KEY, VALUE)
-# -----------------------------
-m4_define([lt_dict_add],
-[m4_define([$1($2)], [$3])])
-
-
-# lt_dict_add_subkey(DICT, KEY, SUBKEY, VALUE)
-# --------------------------------------------
-m4_define([lt_dict_add_subkey],
-[m4_define([$1($2:$3)], [$4])])
-
-
-# lt_dict_fetch(DICT, KEY, [SUBKEY])
-# ----------------------------------
-m4_define([lt_dict_fetch],
-[m4_ifval([$3],
-	m4_ifdef([$1($2:$3)], [m4_defn([$1($2:$3)])]),
-    m4_ifdef([$1($2)], [m4_defn([$1($2)])]))])
-
-
-# lt_if_dict_fetch(DICT, KEY, [SUBKEY], VALUE, IF-TRUE, [IF-FALSE])
-# -----------------------------------------------------------------
-m4_define([lt_if_dict_fetch],
-[m4_if(lt_dict_fetch([$1], [$2], [$3]), [$4],
-	[$5],
-    [$6])])
-
-
-# lt_dict_filter(DICT, [SUBKEY], VALUE, [SEPARATOR], KEY, [...])
-# --------------------------------------------------------------
-m4_define([lt_dict_filter],
-[m4_if([$5], [], [],
-  [lt_join(m4_quote(m4_default([$4], [[, ]])),
-           lt_unquote(m4_split(m4_normalize(m4_foreach(_Lt_key, lt_car([m4_shiftn(4, $@)]),
-		      [lt_if_dict_fetch([$1], _Lt_key, [$2], [$3], [_Lt_key ])])))))])[]dnl
-])
diff --git a/experiments/wasm-gui/third_party/libXext/m4/ltversion.m4 b/experiments/wasm-gui/third_party/libXext/m4/ltversion.m4
deleted file mode 100644
index 228df3f39..000000000
--- a/experiments/wasm-gui/third_party/libXext/m4/ltversion.m4
+++ /dev/null
@@ -1,24 +0,0 @@
-# ltversion.m4 -- version numbers			-*- Autoconf -*-
-#
-#   Copyright (C) 2004, 2011-2019, 2021-2024 Free Software Foundation,
-#   Inc.
-#   Written by Scott James Remnant, 2004
-#
-# This file is free software; the Free Software Foundation gives
-# unlimited permission to copy and/or distribute it, with or without
-# modifications, as long as this notice is preserved.
-
-# @configure_input@
-
-# serial 4441 ltversion.m4
-# This file is part of GNU Libtool
-
-m4_define([LT_PACKAGE_VERSION], [2.5.4])
-m4_define([LT_PACKAGE_REVISION], [2.5.4])
-
-AC_DEFUN([LTVERSION_VERSION],
-[macro_version='2.5.4'
-macro_revision='2.5.4'
-_LT_DECL(, macro_version, 0, [Which release of libtool.m4 was used?])
-_LT_DECL(, macro_revision, 0)
-])
diff --git a/experiments/wasm-gui/third_party/libXext/m4/lt~obsolete.m4 b/experiments/wasm-gui/third_party/libXext/m4/lt~obsolete.m4
deleted file mode 100644
index 22b534697..000000000
--- a/experiments/wasm-gui/third_party/libXext/m4/lt~obsolete.m4
+++ /dev/null
@@ -1,99 +0,0 @@
-# lt~obsolete.m4 -- aclocal satisfying obsolete definitions.    -*-Autoconf-*-
-#
-#   Copyright (C) 2004-2005, 2007, 2009, 2011-2019, 2021-2024 Free
-#   Software Foundation, Inc.
-#   Written by Scott James Remnant, 2004.
-#
-# This file is free software; the Free Software Foundation gives
-# unlimited permission to copy and/or distribute it, with or without
-# modifications, as long as this notice is preserved.
-
-# serial 5 lt~obsolete.m4
-
-# These exist entirely to fool aclocal when bootstrapping libtool.
-#
-# In the past libtool.m4 has provided macros via AC_DEFUN (or AU_DEFUN),
-# which have later been changed to m4_define as they aren't part of the
-# exported API, or moved to Autoconf or Automake where they belong.
-#
-# The trouble is, aclocal is a bit thick.  It'll see the old AC_DEFUN
-# in /usr/share/aclocal/libtool.m4 and remember it, then when it sees us
-# using a macro with the same name in our local m4/libtool.m4 it'll
-# pull the old libtool.m4 in (it doesn't see our shiny new m4_define
-# and doesn't know about Autoconf macros at all.)
-#
-# So we provide this file, which has a silly filename so it's always
-# included after everything else.  This provides aclocal with the
-# AC_DEFUNs it wants, but when m4 processes it, it doesn't do anything
-# because those macros already exist, or will be overwritten later.
-# We use AC_DEFUN over AU_DEFUN for compatibility with aclocal-1.6.
-#
-# Anytime we withdraw an AC_DEFUN or AU_DEFUN, remember to add it here.
-# Yes, that means every name once taken will need to remain here until
-# we give up compatibility with versions before 1.7, at which point
-# we need to keep only those names which we still refer to.
-
-# This is to help aclocal find these macros, as it can't see m4_define.
-AC_DEFUN([LTOBSOLETE_VERSION], [m4_if([1])])
-
-m4_ifndef([AC_LIBTOOL_LINKER_OPTION],	[AC_DEFUN([AC_LIBTOOL_LINKER_OPTION])])
-m4_ifndef([AC_PROG_EGREP],		[AC_DEFUN([AC_PROG_EGREP])])
-m4_ifndef([_LT_AC_PROG_ECHO_BACKSLASH],	[AC_DEFUN([_LT_AC_PROG_ECHO_BACKSLASH])])
-m4_ifndef([_LT_AC_SHELL_INIT],		[AC_DEFUN([_LT_AC_SHELL_INIT])])
-m4_ifndef([_LT_AC_SYS_LIBPATH_AIX],	[AC_DEFUN([_LT_AC_SYS_LIBPATH_AIX])])
-m4_ifndef([_LT_PROG_LTMAIN],		[AC_DEFUN([_LT_PROG_LTMAIN])])
-m4_ifndef([_LT_AC_TAGVAR],		[AC_DEFUN([_LT_AC_TAGVAR])])
-m4_ifndef([AC_LTDL_ENABLE_INSTALL],	[AC_DEFUN([AC_LTDL_ENABLE_INSTALL])])
-m4_ifndef([AC_LTDL_PREOPEN],		[AC_DEFUN([AC_LTDL_PREOPEN])])
-m4_ifndef([_LT_AC_SYS_COMPILER],	[AC_DEFUN([_LT_AC_SYS_COMPILER])])
-m4_ifndef([_LT_AC_LOCK],		[AC_DEFUN([_LT_AC_LOCK])])
-m4_ifndef([AC_LIBTOOL_SYS_OLD_ARCHIVE],	[AC_DEFUN([AC_LIBTOOL_SYS_OLD_ARCHIVE])])
-m4_ifndef([_LT_AC_TRY_DLOPEN_SELF],	[AC_DEFUN([_LT_AC_TRY_DLOPEN_SELF])])
-m4_ifndef([AC_LIBTOOL_PROG_CC_C_O],	[AC_DEFUN([AC_LIBTOOL_PROG_CC_C_O])])
-m4_ifndef([AC_LIBTOOL_SYS_HARD_LINK_LOCKS], [AC_DEFUN([AC_LIBTOOL_SYS_HARD_LINK_LOCKS])])
-m4_ifndef([AC_LIBTOOL_OBJDIR],		[AC_DEFUN([AC_LIBTOOL_OBJDIR])])
-m4_ifndef([AC_LTDL_OBJDIR],		[AC_DEFUN([AC_LTDL_OBJDIR])])
-m4_ifndef([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH], [AC_DEFUN([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH])])
-m4_ifndef([AC_LIBTOOL_SYS_LIB_STRIP],	[AC_DEFUN([AC_LIBTOOL_SYS_LIB_STRIP])])
-m4_ifndef([AC_PATH_MAGIC],		[AC_DEFUN([AC_PATH_MAGIC])])
-m4_ifndef([AC_PROG_LD_GNU],		[AC_DEFUN([AC_PROG_LD_GNU])])
-m4_ifndef([AC_PROG_LD_RELOAD_FLAG],	[AC_DEFUN([AC_PROG_LD_RELOAD_FLAG])])
-m4_ifndef([AC_DEPLIBS_CHECK_METHOD],	[AC_DEFUN([AC_DEPLIBS_CHECK_METHOD])])
-m4_ifndef([AC_LIBTOOL_PROG_COMPILER_NO_RTTI], [AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_NO_RTTI])])
-m4_ifndef([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE], [AC_DEFUN([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE])])
-m4_ifndef([AC_LIBTOOL_PROG_COMPILER_PIC], [AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_PIC])])
-m4_ifndef([AC_LIBTOOL_PROG_LD_SHLIBS],	[AC_DEFUN([AC_LIBTOOL_PROG_LD_SHLIBS])])
-m4_ifndef([AC_LIBTOOL_POSTDEP_PREDEP],	[AC_DEFUN([AC_LIBTOOL_POSTDEP_PREDEP])])
-m4_ifndef([LT_AC_PROG_EGREP],		[AC_DEFUN([LT_AC_PROG_EGREP])])
-m4_ifndef([LT_AC_PROG_SED],		[AC_DEFUN([LT_AC_PROG_SED])])
-m4_ifndef([_LT_CC_BASENAME],		[AC_DEFUN([_LT_CC_BASENAME])])
-m4_ifndef([_LT_COMPILER_BOILERPLATE],	[AC_DEFUN([_LT_COMPILER_BOILERPLATE])])
-m4_ifndef([_LT_LINKER_BOILERPLATE],	[AC_DEFUN([_LT_LINKER_BOILERPLATE])])
-m4_ifndef([_AC_PROG_LIBTOOL],		[AC_DEFUN([_AC_PROG_LIBTOOL])])
-m4_ifndef([AC_LIBTOOL_SETUP],		[AC_DEFUN([AC_LIBTOOL_SETUP])])
-m4_ifndef([_LT_AC_CHECK_DLFCN],		[AC_DEFUN([_LT_AC_CHECK_DLFCN])])
-m4_ifndef([AC_LIBTOOL_SYS_DYNAMIC_LINKER],	[AC_DEFUN([AC_LIBTOOL_SYS_DYNAMIC_LINKER])])
-m4_ifndef([_LT_AC_TAGCONFIG],		[AC_DEFUN([_LT_AC_TAGCONFIG])])
-m4_ifndef([AC_DISABLE_FAST_INSTALL],	[AC_DEFUN([AC_DISABLE_FAST_INSTALL])])
-m4_ifndef([_LT_AC_LANG_CXX],		[AC_DEFUN([_LT_AC_LANG_CXX])])
-m4_ifndef([_LT_AC_LANG_F77],		[AC_DEFUN([_LT_AC_LANG_F77])])
-m4_ifndef([_LT_AC_LANG_GCJ],		[AC_DEFUN([_LT_AC_LANG_GCJ])])
-m4_ifndef([AC_LIBTOOL_LANG_C_CONFIG],	[AC_DEFUN([AC_LIBTOOL_LANG_C_CONFIG])])
-m4_ifndef([_LT_AC_LANG_C_CONFIG],	[AC_DEFUN([_LT_AC_LANG_C_CONFIG])])
-m4_ifndef([AC_LIBTOOL_LANG_CXX_CONFIG],	[AC_DEFUN([AC_LIBTOOL_LANG_CXX_CONFIG])])
-m4_ifndef([_LT_AC_LANG_CXX_CONFIG],	[AC_DEFUN([_LT_AC_LANG_CXX_CONFIG])])
-m4_ifndef([AC_LIBTOOL_LANG_F77_CONFIG],	[AC_DEFUN([AC_LIBTOOL_LANG_F77_CONFIG])])
-m4_ifndef([_LT_AC_LANG_F77_CONFIG],	[AC_DEFUN([_LT_AC_LANG_F77_CONFIG])])
-m4_ifndef([AC_LIBTOOL_LANG_GCJ_CONFIG],	[AC_DEFUN([AC_LIBTOOL_LANG_GCJ_CONFIG])])
-m4_ifndef([_LT_AC_LANG_GCJ_CONFIG],	[AC_DEFUN([_LT_AC_LANG_GCJ_CONFIG])])
-m4_ifndef([AC_LIBTOOL_LANG_RC_CONFIG],	[AC_DEFUN([AC_LIBTOOL_LANG_RC_CONFIG])])
-m4_ifndef([_LT_AC_LANG_RC_CONFIG],	[AC_DEFUN([_LT_AC_LANG_RC_CONFIG])])
-m4_ifndef([AC_LIBTOOL_CONFIG],		[AC_DEFUN([AC_LIBTOOL_CONFIG])])
-m4_ifndef([_LT_AC_FILE_LTDLL_C],	[AC_DEFUN([_LT_AC_FILE_LTDLL_C])])
-m4_ifndef([_LT_REQUIRED_DARWIN_CHECKS],	[AC_DEFUN([_LT_REQUIRED_DARWIN_CHECKS])])
-m4_ifndef([_LT_AC_PROG_CXXCPP],		[AC_DEFUN([_LT_AC_PROG_CXXCPP])])
-m4_ifndef([_LT_PREPARE_SED_QUOTE_VARS],	[AC_DEFUN([_LT_PREPARE_SED_QUOTE_VARS])])
-m4_ifndef([_LT_PROG_ECHO_BACKSLASH],	[AC_DEFUN([_LT_PROG_ECHO_BACKSLASH])])
-m4_ifndef([_LT_PROG_F77],		[AC_DEFUN([_LT_PROG_F77])])
-m4_ifndef([_LT_PROG_FC],		[AC_DEFUN([_LT_PROG_FC])])
-m4_ifndef([_LT_PROG_CXX],		[AC_DEFUN([_LT_PROG_CXX])])
diff --git a/experiments/wasm-gui/third_party/libXext/man/DBE.3 b/experiments/wasm-gui/third_party/libXext/man/DBE.3
deleted file mode 100644
index 689daa8a5..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/DBE.3
+++ /dev/null
@@ -1,331 +0,0 @@
-.\" Copyright (c) 1995  Hewlett-Packard Company
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" HEWLETT-PACKARD COMPANY BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of the Hewlett-Packard Company shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from the
-.\" Hewlett-Packard Company.
-.\"
-.TH DBE 3 1996-03-11 "libXext 1.3.7" "X Version 11"
-.SH NAME
-DBE - Double Buffer Extension
-.SH SYNOPSIS
-The Double Buffer Extension (DBE) provides a standard way to utilize
-double-buffering within the framework of the X Window System.
-Double-buffering uses two buffers, called front and back, which hold images.
-The front buffer is visible to the user; the back buffer is not.
-Successive frames of an animation are rendered into the back buffer while the
-previously rendered frame is displayed in the front buffer.
-When a new frame is ready, the back and front buffers swap roles,
-making the new frame visible.
-Ideally, this exchange appears to happen instantaneously to the user,
-with no visual artifacts.
-Thus, only completely rendered images are presented to the user,
-and remain visible during the entire time it takes to render a new frame.
-The result is a flicker-free animation.
-.SH DESCRIPTION
-.B Concepts
-.RS
-Normal windows are created using
-.B XCreateWindow()
-or
-.BR XCreateSimpleWindow() ,
-which allocate a set of window attributes and, for InputOutput windows,
-a front buffer, into which an image can be drawn.
-The contents of this buffer will be displayed when the window is visible.
-.PP
-This extension enables applications to use double-buffering with a window.
-This involves creating a second buffer, called a back buffer, and associating
-one or more back buffer names
-.RI ( XIDs )
-with the window, for use when referring
-to (i.e., drawing to or reading from) the window's back buffer.
-The back buffer name is a drawable of type
-.BR XdbeBackBuffer .
-.PP
-DBE provides a relative double-buffering model.
-One XID, the window, always refers to the front buffer.
-One or more other XIDs, the back buffer names, always refer to the back buffer.
-After a buffer swap, the window continues to refer to the (new) front buffer,
-and the back buffer name continues to refer to the (new) back buffer.
-Thus, applications and toolkits that want to just render to the back buffer
-always use the back buffer name for all drawing requests to the window.
-Portions of an application that want to render to the front buffer always use
-the window XID for all drawing requests to the window.
-.PP
-Multiple clients and toolkits can all use double-buffering on the same window.
-DBE does not provide a request for querying whether a window has
-double-buffering support, and if so, what the back buffer name is.
-Given the asynchronous nature of the X Window System, this would cause race
-conditions.
-Instead, DBE allows multiple back buffer names to exist for the same window;
-they all refer to the same physical back buffer.
-The first time a back buffer name is allocated for a window, the window becomes
-double-buffered and the back buffer name is associated with the window.
-Subsequently, the window already is a double-buffered window, and nothing
-about the window changes when a new back buffer name is allocated, except
-that the new back buffer name is associated with the window.
-The window remains double-buffered until either the window is destroyed,
-or until all of the back buffer names for the window are deallocated.
-.PP
-In general, both the front and back buffers ae treated the same.
-In particular, here are some important characteristics:
-.RS
-.PP
-Only one buffer per window can be visible at a time (the front buffer).
-.PP
-Both buffers associated with a window have the same visual type, depth,
-width, height, and shape as the window.
-.PP
-Both buffers associated with a window are "visible" (or "obscured") in
-the same way.
-When an Expose event is generated for a window,
-this event is considered to apply to both buffers equally.
-When a double-buffered window is exposed,
-both buffers are tiled with the window background.
-Even though the back buffer is not visible, terms such as obscure apply to the
-back buffer as well as to the front buffer.
-.PP
-It is acceptable at any time to pass an
-.B XdbeBackBuffer
-in any function that expects a drawable.
-This enables an application to draw directly into
-.B XdbeBackBuffer
-in the same fashion as it would draw into any other drawable.
-.PP
-It is an error (Window) to pass an
-.B XdbeBackBuffer
-in a function that expects a Window.
-.PP
-An
-.B XdbeBackBuffer
-will never be sent in a reply, event, or error where a Window is specified.
-.PP
-If backing-store and save-under applies to a double-buffered
-window, it applies to both buffers equally.
-.PP
-If the
-.B XClearArea()
-or
-.B XClearWindow()
-function is executed on a
-double-buffered window, the same area in both the front and back buffers
-is cleared.
-.RE
-.PP
-The effect of passing a window to a function that accepts a drawable
-is unchanged by this extension.
-The window and front buffer are synonymous with each other.
-This includes obeying the
-.B XGetImage()
-and
-.B XGetSubImage()
-semantics and the subwindow-mode semantics if a graphics context is
-involved.
-Regardless of whether the window was explicitly passed in an
-.B XGetImage()
-or
-.B XGetSubImage()
-call, or implicitly referenced (i.e., one of
-the window's ancestors was passed in the function), the front (i.e. visible)
-buffer is always referenced.
-Thus, DBE-naive screen dump clients will always get the front buffer.
-.B XGetImage()
-and
-.B XGetSubImage()
-on a back
-buffer return undefined image contents for any obscured regions of the back
-buffer that fall within the image.
-.PP
-Drawing to a back buffer always uses the clip region that would be used to
-draw to the front buffer with a GC subwindow-mode of ClipByChildren.
-If an ancestor of a double-buffered window is drawn to with a GC having a
-subwindow-mode of IncludeInferiors, the effect on the double-buffered
-window's back buffer depends on the depth of the double-buffered window
-and the ancestor.
-If the depths are the same, the contents of the back buffer
-of the double-buffered window are not changed.
-If the depths are different,
-the contents of the back buffer of the double-buffered window are undefined
-for the pixels that the IncludeInferiors drawing touched.
-.PP
-DBE adds no new events.
-DBE does not extend the semantics of any existing
-events with the exception of adding a new drawable type called
-.BR XdbeBackBuffer .
-.PP
-If events, replies, or errors that contain a drawable
-(e.g., GraphicsExpose) are generated in response to a request, the
-drawable returned will be the one specified in the request.
-.PP
-DBE advertises which visuals support double buffering.
-.PP
-DBE does not include any timing or synchronization facilities.
-Applications that need such facilities (e.g., to maintain a constant frame rate)
-should investigate the Synchronization Extension, an X Consortium standard.
-.RE
-.PP
-.B Window Management Operations
-.RS
-.PP
-The basic philosophy of DBE is that both buffers are treated the same by
-X window management operations.
-.PP
-When a double-buffered window is destroyed,
-both buffers associated with the window are destroyed, and all back buffer
-names associated with the window are freed.
-.PP
-If the size of a double-buffered window changes, both
-buffers assume the new size.  If the window's size increases, the effect on the
-buffers depends on whether the implementation honors bit gravity for buffers.
-If bit gravity is implemented, then the contents of both buffers are moved in
-accordance with the window's bit gravity,
-and the remaining areas are tiled with the window background.
-If bit gravity is not implemented, then the entire unobscured region of both
-buffers is tiled with the window background.
-In either case, Expose events are
-generated for the region that is tiled with the window background.
-.PP
-If the
-.B XGetGeometry()
-function is executed on an
-.BR XdbeBackBuffer ,
-the returned x, y, and border-width will be zero.
-.PP
-If the Shape extension
-.B ShapeRectangles, ShapeMask, ShapeCombine,
-or
-.B ShapeOffset
-request is executed on a double-buffered window, both
-buffers are reshaped to match the new window shape.
-The region difference
-\fID = new shape - old shape\fP is tiled with the window background in both
-buffers, and Expose events are generated for D.
-.RE
-.PP
-.B Complex Swap Actions
-.RS
-.PP
-DBE has no explicit knowledge of ancillary buffers (e.g. depth buffers or
-alpha buffers), and only has a limited set of defined swap actions.
-Some applications may need a richer set of swap actions than DBE provides.
-Some DBE implementations have knowledge of ancillary buffers,
-and/or can provide a rich set of swap actions.
-Instead of continually extending DBE to increase
-its set of swap actions, DBE provides a flexible "idiom" mechanism.
-If an application's needs are served by the defined swap actions, it should use
-them; otherwise, it should use the following method of expressing a complex
-swap action as an idiom.
-Following this policy will ensure the best possible
-performance across a wide variety of implementations.
-.PP
-As suggested by the term "idiom," a complex swap action should be expressed
-as a group/series of requests.
-Taken together, this group of requests may be combined into an atomic operation
-by the implementation, in order to maximize performance.
-The set of idioms actually recognized for optimization
-is implementation dependent.
-To help with idiom expression and
-interpretation, an idiom must be surrounded by two function calls:
-.B XdbeBeginIdiom()
-and
-.B XdbeEndIdiom().
-Unless this begin-end pair
-surrounds the idiom, it may not be recognized by a given implementation, and
-performance will suffer.
-.PP
-For example, if an application wants to swap buffers for two windows, and use
-X to clear only certain planes of the back buffers, the application would
-make the following calls as a group, and in the following order:
-.RS
-.PP
-.B XdbeBeginIdiom().
-.PP
-.B XdbeSwapBuffers()
-with XIDs for two windows, each of which uses a swap action of Untouched.
-.PP
-.B XFillRectangle()
-to the back buffer of one window.
-.PP
-.B XFillRectangle()
-to the back buffer of the other window.
-.PP
-.B XdbeEndIdiom().
-.RE
-.PP
-The
-.B XdbeBeginIdiom()
-and
-.B XdbeEndIdiom()
-functions do not perform any
-actions themselves.
-They are treated as markers by implementations that can
-combine certain groups/series of requests as idioms, and are ignored by other
-implementations or for non-recognized groups/series of requests.
-If these function calls are made out of order, or are mismatched, no errors are
-sent, and the functions are executed as usual, though performance may suffer.
-.PP
-.B XdbeSwapBuffers()
-need not be included in an idiom.
-For example, if a swap action of Copied is desired, but only some of the planes
-should be copied,
-.B XCopyArea()
-may be used instead of
-.B XdbeSwapBuffers().
-If
-.B XdbeSwapBuffers()
-is included in an idiom, it should immediately follow the
-.B XdbeBeginIdiom()
-call.
-Also, when the
-.B XdbeSwapBuffers()
-is included in an idiom, that request's swap action will
-still be valid, and if the swap action might overlap with another request, then
-the final result of the idiom must be as if the separate requests were executed
-serially.
-For example, if the specified swap action is Untouched, and if a
-.B XFillRectangle()
-using a client clip rectangle is done to the window's back
-buffer after the
-.B XdbeSwapBuffers()
-call, then the contents of the new
-back buffer (after the idiom) will be the same as if the idiom was not
-recognized by the implementation.
-.PP
-It is highly recommended that API providers define, and application
-developers use, "convenience" functions that allow client applications to call
-one procedure that encapsulates common idioms.
-These functions will generate the
-.B XdbeBeginIdiom(),
-idiom, and
-.B XdbeEndIdiom()
-calls.
-Usage of these functions will ensure best possible
-performance across a wide variety of implementations.
-.SH SEE ALSO
-.BR XdbeAllocateBackBufferName (3),
-.BR XdbeBeginIdiom (3),
-.BR XdbeDeallocateBackBufferName (3),
-.BR XdbeEndIdiom (3),
-.BR XdbeFreeVisualInfo (3),
-.BR XdbeGetBackBufferAttributes (3),
-.BR XdbeGetVisualInfo (3),
-.BR XdbeQueryExtension (3),
-.BR XdbeSwapBuffers (3).
diff --git a/experiments/wasm-gui/third_party/libXext/man/DPMSCapable.3 b/experiments/wasm-gui/third_party/libXext/man/DPMSCapable.3
deleted file mode 100644
index 11af59921..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/DPMSCapable.3
+++ /dev/null
@@ -1,63 +0,0 @@
-.\" Copyright \(co Digital Equipment Corporation, 1996
-.\"
-.\" Permission to use, copy, modify, distribute, and sell this
-.\" documentation for any purpose is hereby granted without fee,
-.\" provided that the above copyright notice and this permission
-.\" notice appear in all copies.  Digital Equipment Corporation
-.\" makes no representations about the suitability for any purpose
-.\" of the information in this document.  This documentation is
-.\" provided ``as is'' without express or implied warranty.
-.\"
-.\" Copyright (c) 1999, 2005, Oracle and/or its affiliates.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software is furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice (including the next
-.\" paragraph) shall be included in all copies or substantial portions of the
-.\" Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-.\" LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-.\" FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-.\" DEALINGS IN THE SOFTWARE.
-.\"
-.TH DPMSCapable 3 2005-06-28 "libXext 1.3.7" "X Version 11"
-.SH NAME
-DPMSCapable \- returns the DPMS capability of the X server
-.SH SYNOPSIS
-.nf
-\fBcc\fR [ \fIflag\fR \&.\&.\&. ] \fIfile\fR \&.\&.\&. -\fBlXext\fR [ \fIlibrary\fR \&.\&.\&. ]
-\&#include <X11/extensions/dpms.h>
-.sp
-.BR "Bool DPMSCapable" " ( Display *\fIdisplay\fP\^ );"
-.if n .ti +5n
-.if t .ti +.5i
-.SH ARGUMENTS
-.TP
-.I display
-Specifies the connection to the X server
-.SH DESCRIPTION
-The
-.B DPMSCapable
-function returns the Display Power Management Signaling (DPMS) capability of
-the X server, either TRUE \^(capable of DPMS\^) or FALSE \^(incapable of
-DPMS\^).
-.SH "RETURN VALUES"
-.TP 15
-.B True
-The
-.B DPMSCapable
-function returns True if the X server is capable of DPMS.
-.TP 15
-.B False
-The
-.B DPMSCapable
-function returns True if the X server is incapable of DPMS.
diff --git a/experiments/wasm-gui/third_party/libXext/man/DPMSDisable.3 b/experiments/wasm-gui/third_party/libXext/man/DPMSDisable.3
deleted file mode 100644
index 9e80d829a..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/DPMSDisable.3
+++ /dev/null
@@ -1,65 +0,0 @@
-.\" Copyright \(co Digital Equipment Corporation, 1996
-.\"
-.\" Permission to use, copy, modify, distribute, and sell this
-.\" documentation for any purpose is hereby granted without fee,
-.\" provided that the above copyright notice and this permission
-.\" notice appear in all copies.  Digital Equipment Corporation
-.\" makes no representations about the suitability for any purpose
-.\" of the information in this document.  This documentation is
-.\" provided ``as is'' without express or implied warranty.
-.\"
-.\" Copyright (c) 1999, 2005, Oracle and/or its affiliates.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software is furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice (including the next
-.\" paragraph) shall be included in all copies or substantial portions of the
-.\" Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-.\" LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-.\" FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-.\" DEALINGS IN THE SOFTWARE.
-.\"
-.TH DPMSDisable 3 2005-06-28 "libXext 1.3.7" "X Version 11"
-.SH NAME
-DPMSDisable \- disables DPMS on the specified display
-.SH SYNOPSIS
-.nf
-\fBcc\fR [ \fIflag\fR \&.\&.\&. ] \fIfile\fR \&.\&.\&. -\fBlXext\fR [ \fIlibrary\fR \&.\&.\&. ]
-\&#include <X11/extensions/dpms.h>
-.sp
-.BR "Status DPMSDisable" " ( Display \fI*display\fP\^ );"
-.if n .ti +5n
-.if t .ti +.5i
-.SH ARGUMENTS
-.TP
-.I display
-Specifies the connection to the X server
-.SH DESCRIPTION
-The
-.B DPMSDisable
-function disables Display Power Management Signaling (DPMS) on the specified
-.IR display .
-When disabled, DPMS sets the display to DPMSModeOn.
-If
-.B DPMSDisable
-is invoked on a display with DPMS already disabled or on a display which does
-not support DPMS, no change is made and no error is returned.
-.SH "RETURN VALUES"
-.TP 15
-.B TRUE
-The
-.B DPMSDisable
-function always returns TRUE.
-.SH "SEE ALSO"
-.BR DPMSCapable (3),
-.BR DPMSEnable (3)
diff --git a/experiments/wasm-gui/third_party/libXext/man/DPMSEnable.3 b/experiments/wasm-gui/third_party/libXext/man/DPMSEnable.3
deleted file mode 100644
index 3c37964de..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/DPMSEnable.3
+++ /dev/null
@@ -1,76 +0,0 @@
-.\" Copyright \(co Digital Equipment Corporation, 1996
-.\"
-.\" Permission to use, copy, modify, distribute, and sell this
-.\" documentation for any purpose is hereby granted without fee,
-.\" provided that the above copyright notice and this permission
-.\" notice appear in all copies.  Digital Equipment Corporation
-.\" makes no representations about the suitability for any purpose
-.\" of the information in this document.  This documentation is
-.\" provided ``as is'' without express or implied warranty.
-.\"
-.\" Copyright (c) 1999, 2005, Oracle and/or its affiliates.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software is furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice (including the next
-.\" paragraph) shall be included in all copies or substantial portions of the
-.\" Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-.\" LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-.\" FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-.\" DEALINGS IN THE SOFTWARE.
-.\"
-.\" X Window System is a trademark of The Open Group.
-.\"
-.TH DPMSEnable 3 2005-06-28 "libXext 1.3.7" "X Version 11"
-.SH NAME
-DPMSEnable \- enables DPMS on the specified display
-.SH SYNOPSIS
-.nf
-\fBcc\fR [ \fIflag\fR \&.\&.\&. ] \fIfile\fR \&.\&.\&. -\fBlXext\fR [ \fIlibrary\fR \&.\&.\&. ]
-\&#include <X11/extensions/dpms.h>
-.sp
-.BR "Status DPMSEnable" " ( Display *\fIdisplay\fP\^ );"
-.if n .ti +5n
-.if t .ti +.5i
-.SH ARGUMENTS
-.TP
-.I display
-Specifies the connection to the X server
-.SH DESCRIPTION
-The
-.B DPMSEnable
-function enables Display Power Management Signaling (DPMS) on the specified
-.IR display .
-When DPMS is enabled, DPMS will use the currently saved timeout values.
-It will trigger the appropriate DPMS power level based on the timeout values.
-Refer to
-.BR DPMSSetTimeouts (3).
-All physical screens are affected by
-.B DPMSEnable
-at the same time.
-.PP
-If
-.B DPMSEnable
-is invoked on a display which has DPMS already enabled, or on a display which
-does not support DPMS, no change is made and no error is returned.
-.SH "RETURN VALUES"
-.TP 15
-.B TRUE
-The
-.B DPMSEnable
-function always returns TRUE.
-.SH "SEE ALSO"
-.BR DPMSCapable (3),
-.BR DPMSDisable (3),
-.BR DPMSGetTimeouts (3),
-.BR DPMSSetTimeouts (3)
diff --git a/experiments/wasm-gui/third_party/libXext/man/DPMSForceLevel.3 b/experiments/wasm-gui/third_party/libXext/man/DPMSForceLevel.3
deleted file mode 100644
index d940a63cd..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/DPMSForceLevel.3
+++ /dev/null
@@ -1,93 +0,0 @@
-.\" Copyright \(co Digital Equipment Corporation, 1996
-.\"
-.\" Permission to use, copy, modify, distribute, and sell this
-.\" documentation for any purpose is hereby granted without fee,
-.\" provided that the above copyright notice and this permission
-.\" notice appear in all copies.  Digital Equipment Corporation
-.\" makes no representations about the suitability for any purpose
-.\" of the information in this document.  This documentation is
-.\" provided ``as is'' without express or implied warranty.
-.\"
-.\" Copyright (c) 1999, 2005, Oracle and/or its affiliates.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software is furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice (including the next
-.\" paragraph) shall be included in all copies or substantial portions of the
-.\" Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-.\" LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-.\" FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-.\" DEALINGS IN THE SOFTWARE.
-.\"
-.\" X Window System is a trademark of The Open Group.
-.\"
-.TH DPMSForceLevel 3 2005-06-28 "libXext 1.3.7" "X Version 11"
-.SH NAME
-DPMSForceLevel \- forces a DPMS capable display into the
-specified power level
-.SH SYNOPSIS
-.nf
-\fBcc\fR [ \fIflag\fR \&.\&.\&. ] \fIfile\fR \&.\&.\&. -\fBlXext\fR [ \fIlibrary\fR \&.\&.\&. ]
-\&#include <X11/extensions/dpms.h>
-.sp
-.BR "Status DPMSForceLevel" " ( Display \fI*display\fP\^, CARD16 \fIlevel\fP\^ );"
-.if n .ti +5n
-.if t .ti +.5i
-.SH ARGUMENTS
-.TP 15
-.I display
-Specifies the connection to the X server
-.TP 15
-.I level
-Specifies the level to force power to
-.SH DESCRIPTION
-The
-.B DPMSForceLevel
-function forces a DPMS capable display into the specified power level.
-The \fIlevel\fP must be one of following four states:
-.BR DPMSModeOn ,
-.BR DPMSModeStandby ,
-.BR DPMSModeSuspend ,
-or
-.BR DPMSModeOff .
-Values other than these will result in a
-.B BadValue
-error.
-If DPMS is disabled on the display,
-trying to set the power level on the display will result in a
-.B BadMatch
-protocol error.
-.SH "RETURN VALUES"
-.TP 15
-.B TRUE
-The
-.I DPMSForceLevel
-function always returns TRUE.
-.SH ERRORS
-.TP 15
-.SM BadValue
-A level other than
-.BR DPMSModeOn ,
-.BR DPMSModeStandby ,
-.BR DPMSModeSuspend ,
-or
-.B DPMSModeOff
-was specified.
-.TP 15
-.SM BadMatch
-DPMS is disabled on the specified display.
-.SH "SEE ALSO"
-.BR DPMSCapable (3),
-.BR DPMSInfo (3),
-.BR DPMSGetTimeouts (3),
-.BR DPMSSetTimeouts (3)
diff --git a/experiments/wasm-gui/third_party/libXext/man/DPMSGetTimeouts.3 b/experiments/wasm-gui/third_party/libXext/man/DPMSGetTimeouts.3
deleted file mode 100644
index 2a79b7e4d..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/DPMSGetTimeouts.3
+++ /dev/null
@@ -1,95 +0,0 @@
-.\" Copyright \(co Digital Equipment Corporation, 1996
-.\"
-.\" Permission to use, copy, modify, distribute, and sell this
-.\" documentation for any purpose is hereby granted without fee,
-.\" provided that the above copyright notice and this permission
-.\" notice appear in all copies.  Digital Equipment Corporation
-.\" makes no representations about the suitability for any purpose
-.\" of the information in this document.  This documentation is
-.\" provided ``as is'' without express or implied warranty.
-.\"
-.\" Copyright (c) 1999, 2005, Oracle and/or its affiliates.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software is furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice (including the next
-.\" paragraph) shall be included in all copies or substantial portions of the
-.\" Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-.\" LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-.\" FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-.\" DEALINGS IN THE SOFTWARE.
-.\"
-.\" X Window System is a trademark of The Open Group.
-.\"
-.TH DPMSGetTimeouts 3 2005-06-28 "libXext 1.3.7" "X Version 11"
-.SH NAME
-DPMSGetTimeouts \- retrieves the timeout values used by the X server for DPMS
-timings
-.SH SYNOPSIS
-.nf
-\fBcc\fR [ \fIflag\fR \&.\&.\&. ] \fIfile\fR \&.\&.\&. -\fBlXext\fR [ \fIlibrary\fR \&.\&.\&. ]
-\&#include <X11/extensions/dpms.h>
-.sp
-.B Bool DPMSGetTimeouts  (
-      Display *\fIdisplay\fP\^,
-      CARD16 *\fIstandby\fP\^,
-      CARD16 *\fIsuspend\fP\^,
-      CARD16 *\fIoff\fP\^
-);
-.if n .ti +5n
-.if t .ti +.5i
-.SH ARGUMENTS
-.TP 15
-.I display
-Specifies the connection to the X server
-.TP 15
-.I standby
-Specifies the current standby timeout in seconds
-.TP 15
-.I suspend
-Specifies the current suspend timeout in seconds
-.TP 15
-.I off
-Specifies the current off timeout in seconds
-.SH DESCRIPTION
-The
-.B DPMSGetTimeouts
-function retrieves the timeout values used by the X server for DPMS timings.
-.LP
-The value
-.I standby
-is the amount of time of inactivity in seconds before standby mode is invoked.
-A value of zero indicates that this mode has been disabled.
-.LP
-The value \fIsuspend\fP is the amount of time of inactivity in seconds before
-the second level of power savings is invoked.
-A value of zero indicates that this mode has been disabled.
-.LP
-The value \fIoff\fP is the amount of time of inactivity in seconds before the
-third and final level of power savings is invoked.
-A value of zero indicates that this mode has been disabled.
-.SH "RETURN VALUES"
-.TP 15
-.B TRUE
-The
-.I DPMSGetTimeouts
-function returns TRUE when values are returned.
-.TP 15
-.B FALSE
-The
-.I DPMSGetTimeouts
-function returns FALSE when no values are returned.
-.SH "SEE ALSO"
-.BR DPMSCapable (3),
-.BR DPMSInfo (3),
-.BR DPMSSetTimeouts (3)
diff --git a/experiments/wasm-gui/third_party/libXext/man/DPMSGetVersion.3 b/experiments/wasm-gui/third_party/libXext/man/DPMSGetVersion.3
deleted file mode 100644
index 451f39020..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/DPMSGetVersion.3
+++ /dev/null
@@ -1,82 +0,0 @@
-.\" Copyright \(co Digital Equipment Corporation, 1996
-.\"
-.\" Permission to use, copy, modify, distribute, and sell this
-.\" documentation for any purpose is hereby granted without fee,
-.\" provided that the above copyright notice and this permission
-.\" notice appear in all copies.  Digital Equipment Corporation
-.\" makes no representations about the suitability for any purpose
-.\" of the information in this document.  This documentation is
-.\" provided ``as is'' without express or implied warranty.
-.\"
-.\" Copyright (c) 1999, 2005, Oracle and/or its affiliates.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software is furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice (including the next
-.\" paragraph) shall be included in all copies or substantial portions of the
-.\" Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-.\" LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-.\" FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-.\" DEALINGS IN THE SOFTWARE.
-.\"
-.\" X Window System is a trademark of The Open Group.
-.\"
-.TH DPMSGetVersion 3 2005-09-24 "libXext 1.3.7" "X Version 11"
-.SH NAME
-DPMSGetVersion \- returns the version of the DPMS extension implemented by
-the X server
-.SH SYNOPSIS
-.nf
-\fBcc\fR [ \fIflag\fR \&.\&.\&. ] \fIfile\fR \&.\&.\&. -\fBlXext\fR [ \fIlibrary\fR \&.\&.\&. ]
-\&#include <X11/extensions/dpms.h>
-.sp
-.B Status DPMSGetVersion (
-      Display *\fIdisplay\fP\^,
-      int *\fImajor_version\fP\^,
-      int *\fIminor_version\fP\^
-);
-.if n .ti +5n
-.if t .ti +.5i
-.SH ARGUMENTS
-.TP 15
-.I display
-Specifies the connection to the X server
-.TP 15
-.I major_version
-Specifies the return location for the extension major version
-.TP 15
-.I minor_version
-Specifies the return location for the extension minor version
-.SH DESCRIPTION
-The
-.B DPMSGetVersion
-function returns the version of the Display Power Management Signaling (DPMS)
-extension implemented by the X server.
-It returns a major and minor version number.
-The major version number will be incremented for protocol incompatible changes,
-and the minor version number will be incremented for small, upward compatible
-changes.
-.SH "RETURN VALUES"
-.TP 15
-.B TRUE
-The
-.B DPMSGetVersion
-function returns TRUE when the extension is supported and values are returned.
-.TP 15
-.B FALSE
-The
-.B DPMSGetVersion
-function returns FALSE when the extension is not supported.
-.SH "SEE ALSO"
-.BR DPMSCapable (3),
-.BR DPMSQueryExtension (3)
diff --git a/experiments/wasm-gui/third_party/libXext/man/DPMSInfo.3 b/experiments/wasm-gui/third_party/libXext/man/DPMSInfo.3
deleted file mode 100644
index 635ada3fd..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/DPMSInfo.3
+++ /dev/null
@@ -1,85 +0,0 @@
-.\" Copyright \(co Digital Equipment Corporation, 1996
-.\"
-.\" Permission to use, copy, modify, distribute, and sell this
-.\" documentation for any purpose is hereby granted without fee,
-.\" provided that the above copyright notice and this permission
-.\" notice appear in all copies.  Digital Equipment Corporation
-.\" makes no representations about the suitability for any purpose
-.\" of the information in this document.  This documentation is
-.\" provided ``as is'' without express or implied warranty.
-.\"
-.\" Copyright (c) 1999, 2005, Oracle and/or its affiliates.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software is furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice (including the next
-.\" paragraph) shall be included in all copies or substantial portions of the
-.\" Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-.\" LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-.\" FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-.\" DEALINGS IN THE SOFTWARE.
-.\"
-.\" X Window System is a trademark of The Open Group.
-.\"
-.TH DPMSInfo 3 2005-06-28 "libXext 1.3.7" "X Version 11"
-.SH NAME
-DPMSInfo \- returns information about the current DPMS state
-.SH SYNOPSIS
-.nf
-\fBcc\fR [ \fIflag\fR \&.\&.\&. ] \fIfile\fR \&.\&.\&. -\fBlXext\fR [ \fIlibrary\fR \&.\&.\&. ]
-\&#include <X11/extensions/dpms.h>
-.sp
-.B Status DPMSInfo (
-      Display \fI*display\fP\^,
-      CARD16 \fI*power_level\fP\^,
-      BOOL \fI*state\fP\^
-);
-.if n .ti +5n
-.if t .ti +.5i
-.SH ARGUMENTS
-.TP 15
-.I display
-Specifies the connection to the X server
-.TP 15
-.I power_level
-Specifies the current power level
-.TP 15
-.I state
-Specifies the current DPMS state
-.SH DESCRIPTION
-The
-.B DPMSInfo
-function returns information about the current Display Power Management
-Signaling (DPMS) state.
-The \fIstate\fP return parameter indicates whether or not DPMS is
-enabled \^(TRUE\^) or disabled \^(FALSE\^).
-The \fIpower_level\fP return parameter indicates the
-current power level \^(one of
-.BR DPMSModeOn ,
-.BR DPMSModeStandby ,
-.BR DPMSModeSuspend ,
-or
-.BR DPMSModeOff .\^)
-.SH "RETURN VALUES"
-.TP 15
-.B TRUE
-The
-.I DPMSInfo
-function returns TRUE, if values are returned.
-.TP 15
-.B FALSE
-The
-.I DPMSInfo
-function returns FALSE, if no values are returned.
-.SH "SEE ALSO"
-.BR DPMSEnable (3)
diff --git a/experiments/wasm-gui/third_party/libXext/man/DPMSQueryExtension.3 b/experiments/wasm-gui/third_party/libXext/man/DPMSQueryExtension.3
deleted file mode 100644
index b3e92edfd..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/DPMSQueryExtension.3
+++ /dev/null
@@ -1,97 +0,0 @@
-.\" Copyright \(co Digital Equipment Corporation, 1996
-.\"
-.\" Permission to use, copy, modify, distribute, and sell this
-.\" documentation for any purpose is hereby granted without fee,
-.\" provided that the above copyright notice and this permission
-.\" notice appear in all copies.  Digital Equipment Corporation
-.\" makes no representations about the suitability for any purpose
-.\" of the information in this document.  This documentation is
-.\" provided ``as is'' without express or implied warranty.
-.\"
-.\" Copyright (c) 1999, 2005, Oracle and/or its affiliates.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software is furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice (including the next
-.\" paragraph) shall be included in all copies or substantial portions of the
-.\" Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-.\" LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-.\" FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-.\" DEALINGS IN THE SOFTWARE.
-.\"
-.\" X Window System is a trademark of The Open Group.
-.\"
-.TH DPMSQueryExtension 3 2005-09-24 "libXext 1.3.7" "X Version 11"
-.SH NAME
-DPMSQueryExtension \- queries the X server to determine the availability
-of the DPMS Extension
-.SH SYNOPSIS
-.nf
-\fBcc\fR [ \fIflag\fR \&.\&.\&. ] \fIfile\fR \&.\&.\&. -\fBlXext\fR [ \fIlibrary\fR \&.\&.\&. ]
-\&#include <X11/extensions/dpms.h>
-.sp
-.B Bool DPMSQueryExtension (
-      Display \fI*display\fP\^,
-      int \fI*event_base\fP\^,
-      int \fI*error_base\fP\^
-);
-.if n .ti +5n
-.if t .ti +.5i
-.SH ARGUMENTS
-.TP 15
-.I display
-Specifies the connection to the X server
-.TP 15
-.I event_base
-Specifies the return location for the assigned base event
-.TP 15
-.I error_base
-Specifies the return location for the assigned base error
-.SH DESCRIPTION
-The
-.B DPMSQueryExtension
-function queries the X server to determine the availability of the
-Display Power Management Signaling (DPMS) Extension.
-If the extension is available, it returns TRUE, and the
-.I event_base
-and
-.I error_base
-are set to the base event and error numbers, respectively.
-Otherwise, the return value is FALSE, and the values of
-.I event_base
-and
-.I error_base
-are undefined.
-.SH "RETURN VALUES"
-.TP 15
-.B TRUE
-The
-.B DPMSQueryExtension
-function returns TRUE if the extension is available,
-and
-.I event_base
-and
-.I error_base
-are set to the base event number and base error number for the extension,
-respectively.
-.TP 15
-.B FALSE
-The
-.B DPMSQueryExtension
-function returns FALSE if extension is not available, and the values of
-.I event_base
-and
-.I error_base
-are undefined.
-.SH "SEE ALSO"
-.BR DPMSGetVersion (3)
diff --git a/experiments/wasm-gui/third_party/libXext/man/DPMSSetTimeouts.3 b/experiments/wasm-gui/third_party/libXext/man/DPMSSetTimeouts.3
deleted file mode 100644
index 36f1ea9e9..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/DPMSSetTimeouts.3
+++ /dev/null
@@ -1,120 +0,0 @@
-.\" Copyright \(co Digital Equipment Corporation, 1996
-.\"
-.\" Permission to use, copy, modify, distribute, and sell this
-.\" documentation for any purpose is hereby granted without fee,
-.\" provided that the above copyright notice and this permission
-.\" notice appear in all copies.  Digital Equipment Corporation
-.\" makes no representations about the suitability for any purpose
-.\" of the information in this document.  This documentation is
-.\" provided ``as is'' without express or implied warranty.
-.\"
-.\" Copyright (c) 1999, 2005, Oracle and/or its affiliates.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software is furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice (including the next
-.\" paragraph) shall be included in all copies or substantial portions of the
-.\" Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-.\" LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-.\" FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-.\" DEALINGS IN THE SOFTWARE.
-.\"
-.\" X Window System is a trademark of The Open Group.
-.\"
-.TH DPMSSetTimeouts 3 2005-06-28 "libXext 1.3.7" "X Version 11"
-.SH NAME
-DPMSSetTimeouts \- permits applications to set the timeout values
-used by the X server for DPMS timings
-.SH SYNOPSIS
-.nf
-\fBcc\fR [ \fIflag\fR \&.\&.\&. ] \fIfile\fR \&.\&.\&. -\fBlXext\fR [ \fIlibrary\fR \&.\&.\&. ]
-\&#include <X11/extensions/dpms.h>
-.sp
-.B Status DPMSSetTimeouts (
-      Display *\fIdisplay\fP\^,
-      CARD16 \fIstandby\fP\^,
-      CARD16 \fIsuspend\fP\^,
-      CARD16 \fIoff\fP\^
-);
-.if n .ti +5n
-.if t .ti +.5i
-.SH ARGUMENTS
-.TP 15
-.I display
-Specifies the connection to the X server
-.TP 15
-.I standby
-Specifies the new standby timeout in seconds
-.TP 15
-.I suspend
-Specifies the new suspend timeout in seconds
-.TP 15
-.I off
-Specifies the new off timeout in seconds
-.SH DESCRIPTION
-The
-.B DPMSSetTimeouts
-function permits applications to set the timeout values
-used by the X server for Display Power Management Signaling (DPMS) timings.
-.LP
-The value \fIstandby\fP is the amount of inactivity time, in seconds, before
-standby mode is invoked.
-The actual effects of this mode are dependent on the characteristics of the
-monitor and frame buffer card.
-Standby mode is implemented by shutting off the horizontal sync signal,
-and pulsing the vertical sync signal.
-Standby mode provides the quickest monitor recovery time.
-Note also that many monitors implement this mode identical to suspend mode.
-A value of zero disables the standby mode.
-.LP
-The value \fIsuspend\fP is the amount of time of inactivity, in seconds,
-before the second level of power savings is invoked.
-Suspend mode's physical and electrical characteristics are
-implementation defined.
-For DPMS compliant hardware, setting the suspend mode is implemented by
-pulsing the horizontal sync signal and shutting off the vertical sync signal.
-In general, suspend mode recovery is considered to be slower than
-standby mode, but faster than off mode.
-However it may vary from monitor to monitor.
-As noted above, many monitors implement this mode identical to the standby mode.
-A value of zero disables this mode.
-.LP
-The value \fIoff\fP is the amount of time of inactivity, in seconds,
-before the third and final level of power savings is invoked.
-Off mode's physical and electrical characteristics are implementation defined.
-In DPMS compliant hardware, it is implemented by shutting off both horizontal
-and vertical sync signals, resulting in powering down of the monitor.
-Recovery time is implementation dependent.
-Usually the recovery time is very close to the power-up time of the monitor.
-A value of zero disables this mode.
-.LP
-Chronologically,
-\fIstandby\fP mode occurs before or simultaneously with \fIsuspend\fP mode, and
-\fIsuspend\fP mode must occur before or simultaneously with \fIoff\fP mode.
-Therefore, non-zero mode timeout values must be greater than or equal to the
-timeout values of earlier modes.
-If inconsistent values are supplied, a \fBBadValue\fP error will result.
-.SH "RETURN VALUES"
-.TP 15
-.B TRUE
-The
-.I DPMSSetTimeouts
-function returns TRUE when the function has succeeded.
-.SH ERRORS
-.TP 15
-.SM BadValue
-An argument is out of range.
-.SH "SEE ALSO"
-.BR DPMSCapable (3),
-.BR DPMSInfo (3),
-.BR DPMSGetTimeouts (3)
diff --git a/experiments/wasm-gui/third_party/libXext/man/Makefile b/experiments/wasm-gui/third_party/libXext/man/Makefile
deleted file mode 100644
index b1dda1913..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/Makefile
+++ /dev/null
@@ -1,627 +0,0 @@
-# Makefile.in generated by automake 1.18.1 from Makefile.am.
-# man/Makefile.  Generated from Makefile.in by configure.
-
-# Copyright (C) 1994-2025 Free Software Foundation, Inc.
-
-# This Makefile.in is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-
-
-
-am__is_gnu_make = { \
-  if test -z '$(MAKELEVEL)'; then \
-    false; \
-  elif test -n '$(MAKE_HOST)'; then \
-    true; \
-  elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \
-    true; \
-  else \
-    false; \
-  fi; \
-}
-am__make_running_with_option = \
-  case $${target_option-} in \
-      ?) ;; \
-      *) echo "am__make_running_with_option: internal error: invalid" \
-              "target option '$${target_option-}' specified" >&2; \
-         exit 1;; \
-  esac; \
-  has_opt=no; \
-  sane_makeflags=$$MAKEFLAGS; \
-  if $(am__is_gnu_make); then \
-    sane_makeflags=$$MFLAGS; \
-  else \
-    case $$MAKEFLAGS in \
-      *\\[\ \	]*) \
-        bs=\\; \
-        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
-          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
-    esac; \
-  fi; \
-  skip_next=no; \
-  strip_trailopt () \
-  { \
-    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
-  }; \
-  for flg in $$sane_makeflags; do \
-    test $$skip_next = yes && { skip_next=no; continue; }; \
-    case $$flg in \
-      *=*|--*) continue;; \
-        -*I) strip_trailopt 'I'; skip_next=yes;; \
-      -*I?*) strip_trailopt 'I';; \
-        -*O) strip_trailopt 'O'; skip_next=yes;; \
-      -*O?*) strip_trailopt 'O';; \
-        -*l) strip_trailopt 'l'; skip_next=yes;; \
-      -*l?*) strip_trailopt 'l';; \
-      -[dEDm]) skip_next=yes;; \
-      -[JT]) skip_next=yes;; \
-    esac; \
-    case $$flg in \
-      *$$target_option*) has_opt=yes; break;; \
-    esac; \
-  done; \
-  test $$has_opt = yes
-am__make_dryrun = (target_option=n; $(am__make_running_with_option))
-am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
-am__rm_f = rm -f $(am__rm_f_notfound)
-am__rm_rf = rm -rf $(am__rm_f_notfound)
-pkgdatadir = $(datadir)/libXext
-pkgincludedir = $(includedir)/libXext
-pkglibdir = $(libdir)/libXext
-pkglibexecdir = $(libexecdir)/libXext
-am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
-install_sh_DATA = $(install_sh) -c -m 644
-install_sh_PROGRAM = $(install_sh) -c
-install_sh_SCRIPT = $(install_sh) -c
-INSTALL_HEADER = $(INSTALL_DATA)
-transform = $(program_transform_name)
-NORMAL_INSTALL = :
-PRE_INSTALL = :
-POST_INSTALL = :
-NORMAL_UNINSTALL = :
-PRE_UNINSTALL = :
-POST_UNINSTALL = :
-build_triplet = x86_64-pc-linux-gnu
-host_triplet = wasm32-unknown-wasi
-subdir = man
-ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/ax_gcc_builtin.m4 \
-	$(top_srcdir)/m4/libtool.m4 $(top_srcdir)/m4/ltoptions.m4 \
-	$(top_srcdir)/m4/ltsugar.m4 $(top_srcdir)/m4/ltversion.m4 \
-	$(top_srcdir)/m4/lt~obsolete.m4 $(top_srcdir)/configure.ac
-am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
-	$(ACLOCAL_M4)
-DIST_COMMON = $(srcdir)/Makefile.am $(am__DIST_COMMON)
-mkinstalldirs = $(install_sh) -d
-CONFIG_HEADER = $(top_builddir)/config.h
-CONFIG_CLEAN_FILES =
-CONFIG_CLEAN_VPATH_FILES =
-AM_V_P = $(am__v_P_$(V))
-am__v_P_ = $(am__v_P_$(AM_DEFAULT_VERBOSITY))
-am__v_P_0 = false
-am__v_P_1 = :
-AM_V_GEN = $(am__v_GEN_$(V))
-am__v_GEN_ = $(am__v_GEN_$(AM_DEFAULT_VERBOSITY))
-am__v_GEN_0 = @echo "  GEN     " $@;
-am__v_GEN_1 = 
-AM_V_at = $(am__v_at_$(V))
-am__v_at_ = $(am__v_at_$(AM_DEFAULT_VERBOSITY))
-am__v_at_0 = @
-am__v_at_1 = 
-SOURCES =
-DIST_SOURCES =
-am__can_run_installinfo = \
-  case $$AM_UPDATE_INFO_DIR in \
-    n|no|NO) false;; \
-    *) (install-info --version) >/dev/null 2>&1;; \
-  esac
-am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
-am__vpath_adj = case $$p in \
-    $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
-    *) f=$$p;; \
-  esac;
-am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
-am__install_max = 40
-am__nobase_strip_setup = \
-  srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
-am__nobase_strip = \
-  for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
-am__nobase_list = $(am__nobase_strip_setup); \
-  for p in $$list; do echo "$$p $$p"; done | \
-  sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
-  $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
-    if (++n[$$2] == $(am__install_max)) \
-      { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
-    END { for (dir in files) print dir, files[dir] }'
-am__base_list = \
-  sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
-  sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
-am__uninstall_files_from_dir = { \
-  { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
-  || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
-       $(am__cd) "$$dir" && echo $$files | $(am__xargs_n) 40 $(am__rm_f); }; \
-  }
-am__installdirs = "$(DESTDIR)$(libmandir)"
-DATA = $(libman_DATA)
-am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
-am__DIST_COMMON = $(srcdir)/Makefile.in
-DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
-ACLOCAL = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' aclocal-1.18
-ADMIN_MAN_DIR = $(mandir)/man$(ADMIN_MAN_SUFFIX)
-ADMIN_MAN_SUFFIX = 8
-AMTAR = $${TAR-tar}
-AM_DEFAULT_VERBOSITY = 0
-APP_MAN_DIR = $(mandir)/man$(APP_MAN_SUFFIX)
-APP_MAN_SUFFIX = 1
-AR = /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ar
-AUTOCONF = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' autoconf
-AUTOHEADER = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' autoheader
-AUTOMAKE = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' automake-1.18
-AWK = mawk
-BASE_CFLAGS =  -Wall -Wpointer-arith -Wmissing-declarations -Wformat=2 -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Wbad-function-cast -Wold-style-definition -Wunused -Wuninitialized -Wshadow -Wmissing-noreturn -Wmissing-format-attribute -Wredundant-decls -Werror=implicit -Werror=nonnull -Werror=init-self -Werror=main -Werror=missing-braces -Werror=sequence-point -Werror=return-type -Werror=trigraphs -Werror=array-bounds -Werror=write-strings -Werror=address -Werror=int-to-pointer-cast -Werror=pointer-to-int-cast
-CC = /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23
-CCDEPMODE = depmode=gcc3
-CFLAGS = --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h
-CHANGELOG_CMD = ((GIT_DIR=$(top_srcdir)/.git git log > $(top_srcdir)/.changelog.tmp) 2>/dev/null && mv $(top_srcdir)/.changelog.tmp $(top_srcdir)/ChangeLog) || (rm -f $(top_srcdir)/.changelog.tmp; test -e $(top_srcdir)/ChangeLog || ( touch $(top_srcdir)/ChangeLog; echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))
-CPPFLAGS = --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include
-CSCOPE = cscope
-CTAGS = ctags
-CWARNFLAGS =  -Wall -Wpointer-arith -Wmissing-declarations -Wformat=2 -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Wbad-function-cast -Wold-style-definition -Wunused -Wuninitialized -Wshadow -Wmissing-noreturn -Wmissing-format-attribute -Wredundant-decls -Werror=implicit -Werror=nonnull -Werror=init-self -Werror=main -Werror=missing-braces -Werror=sequence-point -Werror=return-type -Werror=trigraphs -Werror=array-bounds -Werror=write-strings -Werror=address -Werror=int-to-pointer-cast -Werror=pointer-to-int-cast -fno-strict-aliasing
-CYGPATH_W = echo
-DEFS = -DHAVE_CONFIG_H
-DEPDIR = .deps
-DLLTOOL = dlltool
-DRIVER_MAN_DIR = $(mandir)/man$(DRIVER_MAN_SUFFIX)
-DRIVER_MAN_SUFFIX = 4
-DSYMUTIL = 
-DUMPBIN = :
-ECHO_C = 
-ECHO_N = -n
-ECHO_T = 
-EGREP = /usr/bin/grep -E
-ETAGS = etags
-EXEEXT = 
-FGREP = /usr/bin/grep -F
-FILECMD = file
-FILE_MAN_DIR = $(mandir)/man$(FILE_MAN_SUFFIX)
-FILE_MAN_SUFFIX = 5
-FOP = 
-GREP = /usr/bin/grep
-INSTALL = /usr/bin/install -c
-INSTALL_CMD = (cp -f /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/util-macros/INSTALL $(top_srcdir)/.INSTALL.tmp && mv $(top_srcdir)/.INSTALL.tmp $(top_srcdir)/INSTALL) || (rm -f $(top_srcdir)/.INSTALL.tmp; test -e $(top_srcdir)/INSTALL || ( touch $(top_srcdir)/INSTALL; echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))
-INSTALL_DATA = ${INSTALL} -m 644
-INSTALL_PROGRAM = ${INSTALL}
-INSTALL_SCRIPT = ${INSTALL}
-INSTALL_STRIP_PROGRAM = $(install_sh) -c -s
-LD = /home/linuxbrew/.linuxbrew/bin/ld
-LDFLAGS = --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman
-LIBOBJS = 
-LIBS = 
-LIBTOOL = $(SHELL) $(top_builddir)/libtool
-LIB_MAN_DIR = $(mandir)/man$(LIB_MAN_SUFFIX)
-LIB_MAN_SUFFIX = 3
-LINT = 
-LINTLIB = 
-LINT_FLAGS = 
-LIPO = 
-LN_S = ln -s
-LTLIBOBJS = 
-LT_SYS_LIBRARY_PATH = 
-MAKEINFO = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' makeinfo
-MALLOC_ZERO_CFLAGS = -DMALLOC_0_RETURNS_NULL
-MANIFEST_TOOL = :
-MAN_SUBSTS = 	-e 's|__vendorversion__|"$(PACKAGE_STRING)" "$(XORG_MAN_PAGE)"|' 	-e 's|__xorgversion__|"$(PACKAGE_STRING)" "$(XORG_MAN_PAGE)"|' 	-e 's|__xservername__|Xorg|g' 	-e 's|__xconfigfile__|xorg.conf|g' 	-e 's|__projectroot__|$(prefix)|g' 	-e 's|__apploaddir__|$(appdefaultdir)|g' 	-e 's|__appmansuffix__|$(APP_MAN_SUFFIX)|g' 	-e 's|__drivermansuffix__|$(DRIVER_MAN_SUFFIX)|g' 	-e 's|__adminmansuffix__|$(ADMIN_MAN_SUFFIX)|g' 	-e 's|__libmansuffix__|$(LIB_MAN_SUFFIX)|g' 	-e 's|__miscmansuffix__|$(MISC_MAN_SUFFIX)|g' 	-e 's|__filemansuffix__|$(FILE_MAN_SUFFIX)|g'
-MISC_MAN_DIR = $(mandir)/man$(MISC_MAN_SUFFIX)
-MISC_MAN_SUFFIX = 7
-MKDIR_P = /usr/bin/mkdir -p
-NM = nm
-NMEDIT = 
-OBJDUMP = objdump
-OBJEXT = o
-OTOOL = 
-OTOOL64 = 
-PACKAGE = libXext
-PACKAGE_BUGREPORT = https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues
-PACKAGE_NAME = libXext
-PACKAGE_STRING = libXext 1.3.7
-PACKAGE_TARNAME = libXext
-PACKAGE_URL = 
-PACKAGE_VERSION = 1.3.7
-PATH_SEPARATOR = :
-PKG_CONFIG = /usr/bin/pkg-config
-PKG_CONFIG_LIBDIR = /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/pkgconfig
-PKG_CONFIG_PATH = 
-RANLIB = /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ranlib
-SED = /usr/bin/sed
-SET_MAKE = 
-SHELL = /bin/bash
-STRICT_CFLAGS =  -pedantic -Werror -Werror=attributes
-STRIP = strip
-STYLESHEET_SRCDIR = 
-VERSION = 1.3.7
-XEXT_CFLAGS = -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include 
-XEXT_LIBS = -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -lX11 
-XEXT_SOREV = 6:4:0
-XMALLOC_ZERO_CFLAGS = -DMALLOC_0_RETURNS_NULL
-XMLTO = 
-XORG_MAN_PAGE = X Version 11
-XORG_SGML_PATH = 
-XSLTPROC = /home/linuxbrew/.linuxbrew/bin/xsltproc
-XSL_STYLESHEET = 
-XTMALLOC_ZERO_CFLAGS = -DMALLOC_0_RETURNS_NULL -DXTMALLOC_BC
-abs_builddir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/man
-abs_srcdir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/man
-abs_top_builddir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext
-abs_top_srcdir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext
-ac_ct_AR = 
-ac_ct_CC = 
-ac_ct_DUMPBIN = link -dump
-am__include = include
-am__leading_dot = .
-am__quote = 
-am__rm_f_notfound = 
-am__tar = tar --format=ustar -chf - "$$tardir"
-am__untar = tar -xf -
-am__xargs_n = xargs -n
-bindir = ${exec_prefix}/bin
-build = x86_64-pc-linux-gnu
-build_alias = 
-build_cpu = x86_64
-build_os = linux-gnu
-build_vendor = pc
-builddir = .
-datadir = ${datarootdir}
-datarootdir = ${prefix}/share
-docdir = ${datarootdir}/doc/${PACKAGE_TARNAME}
-dvidir = ${docdir}
-exec_prefix = ${prefix}
-host = wasm32-unknown-wasi
-host_alias = wasm32-wasi
-host_cpu = wasm32
-host_os = wasi
-host_vendor = unknown
-htmldir = ${docdir}
-includedir = ${prefix}/include
-infodir = ${datarootdir}/info
-install_sh = ${SHELL} /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/install-sh
-libdir = ${exec_prefix}/lib
-libexecdir = ${exec_prefix}/libexec
-localedir = ${datarootdir}/locale
-localstatedir = ${prefix}/var
-mandir = ${datarootdir}/man
-mkdir_p = $(MKDIR_P)
-oldincludedir = /usr/include
-pdfdir = ${docdir}
-prefix = /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix
-program_transform_name = s,x,x,
-psdir = ${docdir}
-runstatedir = ${localstatedir}/run
-sbindir = ${exec_prefix}/sbin
-sharedstatedir = ${prefix}/com
-srcdir = .
-sysconfdir = ${prefix}/etc
-target_alias = 
-top_build_prefix = ../
-top_builddir = ..
-top_srcdir = ..
-libmandir = $(LIB_MAN_DIR)
-libman_PRE = \
-	$(all_shadows:=.man)			\
-	DBE.man					\
-	DPMSCapable.man				\
-	DPMSDisable.man				\
-	DPMSEnable.man				\
-	DPMSForceLevel.man			\
-	DPMSGetTimeouts.man			\
-	DPMSGetVersion.man			\
-	DPMSInfo.man				\
-	DPMSQueryExtension.man			\
-	DPMSSetTimeouts.man			\
-	XShape.man				\
-	XShm.man				\
-	XcupGetReservedColormapEntries.man	\
-	XcupQueryVersion.man			\
-	XcupStoreColors.man			\
-	XdbeAllocateBackBufferName.man		\
-	XdbeBeginIdiom.man			\
-	XdbeDeallocateBackBufferName.man	\
-	XdbeEndIdiom.man			\
-	XdbeFreeVisualInfo.man			\
-	XdbeGetBackBufferAttributes.man		\
-	XdbeGetVisualInfo.man			\
-	XdbeQueryExtension.man			\
-	XdbeSwapBuffers.man			\
-	Xevi.man				\
-	Xmbuf.man
-
-XShape_shadows = \
-	XShapeQueryExtension			\
-	XShapeQueryVersion			\
-	XShapeCombineRegion			\
-	XShapeCombineRectangles			\
-	XShapeCombineMask			\
-	XShapeCombineShape			\
-	XShapeOffsetShape			\
-	XShapeQueryExtents			\
-	XShapeSelectInput			\
-	XShapeInputSelected			\
-	XShapeGetRectangles
-
-XShm_shadows = \
-	XShmQueryExtension			\
-	XShmQueryVersion			\
-	XShmPixmapFormat			\
-	XShmAttach				\
-	XShmDetach				\
-	XShmCreateImage				\
-	XShmPutImage				\
-	XShmGetImage				\
-	XShmCreatePixmap			\
-	XShmGetEventBase
-
-Xmbuf_shadows = \
-	XmbufQueryExtension			\
-	XmbufGetVersion				\
-	XmbufCreateBuffers			\
-	XmbufDestroyBuffers			\
-	XmbufDisplayBuffers			\
-	XmbufGetWindowAttributes		\
-	XmbufChangeWindowAttributes		\
-	XmbufGetBufferAttributes		\
-	XmbufChangeBufferAttributes		\
-	XmbufGetScreenInfo			\
-	XmbufCreateStereoWindow
-
-Xevi_shadows = \
-	XeviQueryVersion			\
-	XeviGetVisualInfo			\
-	XeviQueryExtension
-
-all_shadows = $(XShape_shadows) $(XShm_shadows) $(Xmbuf_shadows) $(Xevi_shadows)
-libman_DATA = $(libman_PRE:man=3)
-EXTRA_DIST = $(libman_PRE)
-CLEANFILES = $(libman_DATA)
-SUFFIXES = .$(LIB_MAN_SUFFIX) .man
-all: all-am
-
-.SUFFIXES:
-.SUFFIXES: .$(LIB_MAN_SUFFIX) .man
-$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
-	@for dep in $?; do \
-	  case '$(am__configure_deps)' in \
-	    *$$dep*) \
-	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
-	        && { if test -f $@; then exit 0; else break; fi; }; \
-	      exit 1;; \
-	  esac; \
-	done; \
-	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign man/Makefile'; \
-	$(am__cd) $(top_srcdir) && \
-	  $(AUTOMAKE) --foreign man/Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
-	@case '$?' in \
-	  *config.status*) \
-	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
-	  *) \
-	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles)'; \
-	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles);; \
-	esac;
-
-$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-
-$(top_srcdir)/configure:  $(am__configure_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(am__aclocal_m4_deps):
-
-mostlyclean-libtool:
-	-rm -f *.lo
-
-clean-libtool:
-	-rm -rf .libs _libs
-install-libmanDATA: $(libman_DATA)
-	@$(NORMAL_INSTALL)
-	@list='$(libman_DATA)'; test -n "$(libmandir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(libmandir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(libmandir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(libmandir)'"; \
-	  $(INSTALL_DATA) $$files "$(DESTDIR)$(libmandir)" || exit $$?; \
-	done
-
-uninstall-libmanDATA:
-	@$(NORMAL_UNINSTALL)
-	@list='$(libman_DATA)'; test -n "$(libmandir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(libmandir)'; $(am__uninstall_files_from_dir)
-tags TAGS:
-
-ctags CTAGS:
-
-cscope cscopelist:
-
-
-distdir: $(BUILT_SOURCES)
-	$(MAKE) $(AM_MAKEFLAGS) distdir-am
-
-distdir-am: $(DISTFILES)
-	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	list='$(DISTFILES)'; \
-	  dist_files=`for file in $$list; do echo $$file; done | \
-	  sed -e "s|^$$srcdirstrip/||;t" \
-	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
-	case $$dist_files in \
-	  */*) $(MKDIR_P) `echo "$$dist_files" | \
-			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
-			   sort -u` ;; \
-	esac; \
-	for file in $$dist_files; do \
-	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
-	  if test -d $$d/$$file; then \
-	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
-	    if test -d "$(distdir)/$$file"; then \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
-	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
-	  else \
-	    test -f "$(distdir)/$$file" \
-	    || cp -p $$d/$$file "$(distdir)/$$file" \
-	    || exit 1; \
-	  fi; \
-	done
-check-am: all-am
-check: check-am
-all-am: Makefile $(DATA)
-installdirs:
-	for dir in "$(DESTDIR)$(libmandir)"; do \
-	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
-	done
-install: install-am
-install-exec: install-exec-am
-install-data: install-data-am
-uninstall: uninstall-am
-
-install-am: all-am
-	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
-
-installcheck: installcheck-am
-install-strip:
-	if test -z '$(STRIP)'; then \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	      install; \
-	else \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
-	fi
-mostlyclean-generic:
-
-clean-generic:
-	-$(am__rm_f) $(CLEANFILES)
-
-distclean-generic:
-	-$(am__rm_f) $(CONFIG_CLEAN_FILES)
-	-test . = "$(srcdir)" || $(am__rm_f) $(CONFIG_CLEAN_VPATH_FILES)
-
-maintainer-clean-generic:
-	@echo "This command is intended for maintainers to use"
-	@echo "it deletes files that may require special tools to rebuild."
-clean: clean-am
-
-clean-am: clean-generic clean-libtool mostlyclean-am
-
-distclean: distclean-am
-	-rm -f Makefile
-distclean-am: clean-am distclean-generic
-
-dvi: dvi-am
-
-dvi-am:
-
-html: html-am
-
-html-am:
-
-info: info-am
-
-info-am:
-
-install-data-am: install-libmanDATA
-
-install-dvi: install-dvi-am
-
-install-dvi-am:
-
-install-exec-am:
-
-install-html: install-html-am
-
-install-html-am:
-
-install-info: install-info-am
-
-install-info-am:
-
-install-man:
-
-install-pdf: install-pdf-am
-
-install-pdf-am:
-
-install-ps: install-ps-am
-
-install-ps-am:
-
-installcheck-am:
-
-maintainer-clean: maintainer-clean-am
-	-rm -f Makefile
-maintainer-clean-am: distclean-am maintainer-clean-generic
-
-mostlyclean: mostlyclean-am
-
-mostlyclean-am: mostlyclean-generic mostlyclean-libtool
-
-pdf: pdf-am
-
-pdf-am:
-
-ps: ps-am
-
-ps-am:
-
-uninstall-am: uninstall-libmanDATA
-
-.MAKE: install-am install-strip
-
-.PHONY: all all-am check check-am clean clean-generic clean-libtool \
-	cscopelist-am ctags-am distclean distclean-generic \
-	distclean-libtool distdir dvi dvi-am html html-am info info-am \
-	install install-am install-data install-data-am install-dvi \
-	install-dvi-am install-exec install-exec-am install-html \
-	install-html-am install-info install-info-am \
-	install-libmanDATA install-man install-pdf install-pdf-am \
-	install-ps install-ps-am install-strip installcheck \
-	installcheck-am installdirs maintainer-clean \
-	maintainer-clean-generic mostlyclean mostlyclean-generic \
-	mostlyclean-libtool pdf pdf-am ps ps-am tags-am uninstall \
-	uninstall-am uninstall-libmanDATA
-
-.PRECIOUS: Makefile
-
-
-# String replacements in MAN_SUBSTS now come from xorg-macros.m4 via configure
-.man.$(LIB_MAN_SUFFIX):
-	$(AM_V_GEN)$(SED) $(MAN_SUBSTS) < $< > $@
-
-# Tell versions [3.59,3.63) of GNU make to not export all variables.
-# Otherwise a system limit (for SysV at least) may be exceeded.
-.NOEXPORT:
-
-# Tell GNU make to disable its built-in pattern rules.
-%:: %,v
-%:: RCS/%,v
-%:: RCS/%
-%:: s.%
-%:: SCCS/s.%
diff --git a/experiments/wasm-gui/third_party/libXext/man/Makefile.in b/experiments/wasm-gui/third_party/libXext/man/Makefile.in
deleted file mode 100644
index 2dffcf953..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/Makefile.in
+++ /dev/null
@@ -1,627 +0,0 @@
-# Makefile.in generated by automake 1.18.1 from Makefile.am.
-# @configure_input@
-
-# Copyright (C) 1994-2025 Free Software Foundation, Inc.
-
-# This Makefile.in is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-@SET_MAKE@
-
-VPATH = @srcdir@
-am__is_gnu_make = { \
-  if test -z '$(MAKELEVEL)'; then \
-    false; \
-  elif test -n '$(MAKE_HOST)'; then \
-    true; \
-  elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \
-    true; \
-  else \
-    false; \
-  fi; \
-}
-am__make_running_with_option = \
-  case $${target_option-} in \
-      ?) ;; \
-      *) echo "am__make_running_with_option: internal error: invalid" \
-              "target option '$${target_option-}' specified" >&2; \
-         exit 1;; \
-  esac; \
-  has_opt=no; \
-  sane_makeflags=$$MAKEFLAGS; \
-  if $(am__is_gnu_make); then \
-    sane_makeflags=$$MFLAGS; \
-  else \
-    case $$MAKEFLAGS in \
-      *\\[\ \	]*) \
-        bs=\\; \
-        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
-          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
-    esac; \
-  fi; \
-  skip_next=no; \
-  strip_trailopt () \
-  { \
-    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
-  }; \
-  for flg in $$sane_makeflags; do \
-    test $$skip_next = yes && { skip_next=no; continue; }; \
-    case $$flg in \
-      *=*|--*) continue;; \
-        -*I) strip_trailopt 'I'; skip_next=yes;; \
-      -*I?*) strip_trailopt 'I';; \
-        -*O) strip_trailopt 'O'; skip_next=yes;; \
-      -*O?*) strip_trailopt 'O';; \
-        -*l) strip_trailopt 'l'; skip_next=yes;; \
-      -*l?*) strip_trailopt 'l';; \
-      -[dEDm]) skip_next=yes;; \
-      -[JT]) skip_next=yes;; \
-    esac; \
-    case $$flg in \
-      *$$target_option*) has_opt=yes; break;; \
-    esac; \
-  done; \
-  test $$has_opt = yes
-am__make_dryrun = (target_option=n; $(am__make_running_with_option))
-am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
-am__rm_f = rm -f $(am__rm_f_notfound)
-am__rm_rf = rm -rf $(am__rm_f_notfound)
-pkgdatadir = $(datadir)/@PACKAGE@
-pkgincludedir = $(includedir)/@PACKAGE@
-pkglibdir = $(libdir)/@PACKAGE@
-pkglibexecdir = $(libexecdir)/@PACKAGE@
-am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
-install_sh_DATA = $(install_sh) -c -m 644
-install_sh_PROGRAM = $(install_sh) -c
-install_sh_SCRIPT = $(install_sh) -c
-INSTALL_HEADER = $(INSTALL_DATA)
-transform = $(program_transform_name)
-NORMAL_INSTALL = :
-PRE_INSTALL = :
-POST_INSTALL = :
-NORMAL_UNINSTALL = :
-PRE_UNINSTALL = :
-POST_UNINSTALL = :
-build_triplet = @build@
-host_triplet = @host@
-subdir = man
-ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/ax_gcc_builtin.m4 \
-	$(top_srcdir)/m4/libtool.m4 $(top_srcdir)/m4/ltoptions.m4 \
-	$(top_srcdir)/m4/ltsugar.m4 $(top_srcdir)/m4/ltversion.m4 \
-	$(top_srcdir)/m4/lt~obsolete.m4 $(top_srcdir)/configure.ac
-am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
-	$(ACLOCAL_M4)
-DIST_COMMON = $(srcdir)/Makefile.am $(am__DIST_COMMON)
-mkinstalldirs = $(install_sh) -d
-CONFIG_HEADER = $(top_builddir)/config.h
-CONFIG_CLEAN_FILES =
-CONFIG_CLEAN_VPATH_FILES =
-AM_V_P = $(am__v_P_@AM_V@)
-am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
-am__v_P_0 = false
-am__v_P_1 = :
-AM_V_GEN = $(am__v_GEN_@AM_V@)
-am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
-am__v_GEN_0 = @echo "  GEN     " $@;
-am__v_GEN_1 = 
-AM_V_at = $(am__v_at_@AM_V@)
-am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
-am__v_at_0 = @
-am__v_at_1 = 
-SOURCES =
-DIST_SOURCES =
-am__can_run_installinfo = \
-  case $$AM_UPDATE_INFO_DIR in \
-    n|no|NO) false;; \
-    *) (install-info --version) >/dev/null 2>&1;; \
-  esac
-am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
-am__vpath_adj = case $$p in \
-    $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
-    *) f=$$p;; \
-  esac;
-am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
-am__install_max = 40
-am__nobase_strip_setup = \
-  srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
-am__nobase_strip = \
-  for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
-am__nobase_list = $(am__nobase_strip_setup); \
-  for p in $$list; do echo "$$p $$p"; done | \
-  sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
-  $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
-    if (++n[$$2] == $(am__install_max)) \
-      { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
-    END { for (dir in files) print dir, files[dir] }'
-am__base_list = \
-  sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
-  sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
-am__uninstall_files_from_dir = { \
-  { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
-  || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
-       $(am__cd) "$$dir" && echo $$files | $(am__xargs_n) 40 $(am__rm_f); }; \
-  }
-am__installdirs = "$(DESTDIR)$(libmandir)"
-DATA = $(libman_DATA)
-am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
-am__DIST_COMMON = $(srcdir)/Makefile.in
-DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
-ACLOCAL = @ACLOCAL@
-ADMIN_MAN_DIR = @ADMIN_MAN_DIR@
-ADMIN_MAN_SUFFIX = @ADMIN_MAN_SUFFIX@
-AMTAR = @AMTAR@
-AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
-APP_MAN_DIR = @APP_MAN_DIR@
-APP_MAN_SUFFIX = @APP_MAN_SUFFIX@
-AR = @AR@
-AUTOCONF = @AUTOCONF@
-AUTOHEADER = @AUTOHEADER@
-AUTOMAKE = @AUTOMAKE@
-AWK = @AWK@
-BASE_CFLAGS = @BASE_CFLAGS@
-CC = @CC@
-CCDEPMODE = @CCDEPMODE@
-CFLAGS = @CFLAGS@
-CHANGELOG_CMD = @CHANGELOG_CMD@
-CPPFLAGS = @CPPFLAGS@
-CSCOPE = @CSCOPE@
-CTAGS = @CTAGS@
-CWARNFLAGS = @CWARNFLAGS@
-CYGPATH_W = @CYGPATH_W@
-DEFS = @DEFS@
-DEPDIR = @DEPDIR@
-DLLTOOL = @DLLTOOL@
-DRIVER_MAN_DIR = @DRIVER_MAN_DIR@
-DRIVER_MAN_SUFFIX = @DRIVER_MAN_SUFFIX@
-DSYMUTIL = @DSYMUTIL@
-DUMPBIN = @DUMPBIN@
-ECHO_C = @ECHO_C@
-ECHO_N = @ECHO_N@
-ECHO_T = @ECHO_T@
-EGREP = @EGREP@
-ETAGS = @ETAGS@
-EXEEXT = @EXEEXT@
-FGREP = @FGREP@
-FILECMD = @FILECMD@
-FILE_MAN_DIR = @FILE_MAN_DIR@
-FILE_MAN_SUFFIX = @FILE_MAN_SUFFIX@
-FOP = @FOP@
-GREP = @GREP@
-INSTALL = @INSTALL@
-INSTALL_CMD = @INSTALL_CMD@
-INSTALL_DATA = @INSTALL_DATA@
-INSTALL_PROGRAM = @INSTALL_PROGRAM@
-INSTALL_SCRIPT = @INSTALL_SCRIPT@
-INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
-LD = @LD@
-LDFLAGS = @LDFLAGS@
-LIBOBJS = @LIBOBJS@
-LIBS = @LIBS@
-LIBTOOL = @LIBTOOL@
-LIB_MAN_DIR = @LIB_MAN_DIR@
-LIB_MAN_SUFFIX = @LIB_MAN_SUFFIX@
-LINT = @LINT@
-LINTLIB = @LINTLIB@
-LINT_FLAGS = @LINT_FLAGS@
-LIPO = @LIPO@
-LN_S = @LN_S@
-LTLIBOBJS = @LTLIBOBJS@
-LT_SYS_LIBRARY_PATH = @LT_SYS_LIBRARY_PATH@
-MAKEINFO = @MAKEINFO@
-MALLOC_ZERO_CFLAGS = @MALLOC_ZERO_CFLAGS@
-MANIFEST_TOOL = @MANIFEST_TOOL@
-MAN_SUBSTS = @MAN_SUBSTS@
-MISC_MAN_DIR = @MISC_MAN_DIR@
-MISC_MAN_SUFFIX = @MISC_MAN_SUFFIX@
-MKDIR_P = @MKDIR_P@
-NM = @NM@
-NMEDIT = @NMEDIT@
-OBJDUMP = @OBJDUMP@
-OBJEXT = @OBJEXT@
-OTOOL = @OTOOL@
-OTOOL64 = @OTOOL64@
-PACKAGE = @PACKAGE@
-PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
-PACKAGE_NAME = @PACKAGE_NAME@
-PACKAGE_STRING = @PACKAGE_STRING@
-PACKAGE_TARNAME = @PACKAGE_TARNAME@
-PACKAGE_URL = @PACKAGE_URL@
-PACKAGE_VERSION = @PACKAGE_VERSION@
-PATH_SEPARATOR = @PATH_SEPARATOR@
-PKG_CONFIG = @PKG_CONFIG@
-PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
-PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
-RANLIB = @RANLIB@
-SED = @SED@
-SET_MAKE = @SET_MAKE@
-SHELL = @SHELL@
-STRICT_CFLAGS = @STRICT_CFLAGS@
-STRIP = @STRIP@
-STYLESHEET_SRCDIR = @STYLESHEET_SRCDIR@
-VERSION = @VERSION@
-XEXT_CFLAGS = @XEXT_CFLAGS@
-XEXT_LIBS = @XEXT_LIBS@
-XEXT_SOREV = @XEXT_SOREV@
-XMALLOC_ZERO_CFLAGS = @XMALLOC_ZERO_CFLAGS@
-XMLTO = @XMLTO@
-XORG_MAN_PAGE = @XORG_MAN_PAGE@
-XORG_SGML_PATH = @XORG_SGML_PATH@
-XSLTPROC = @XSLTPROC@
-XSL_STYLESHEET = @XSL_STYLESHEET@
-XTMALLOC_ZERO_CFLAGS = @XTMALLOC_ZERO_CFLAGS@
-abs_builddir = @abs_builddir@
-abs_srcdir = @abs_srcdir@
-abs_top_builddir = @abs_top_builddir@
-abs_top_srcdir = @abs_top_srcdir@
-ac_ct_AR = @ac_ct_AR@
-ac_ct_CC = @ac_ct_CC@
-ac_ct_DUMPBIN = @ac_ct_DUMPBIN@
-am__include = @am__include@
-am__leading_dot = @am__leading_dot@
-am__quote = @am__quote@
-am__rm_f_notfound = @am__rm_f_notfound@
-am__tar = @am__tar@
-am__untar = @am__untar@
-am__xargs_n = @am__xargs_n@
-bindir = @bindir@
-build = @build@
-build_alias = @build_alias@
-build_cpu = @build_cpu@
-build_os = @build_os@
-build_vendor = @build_vendor@
-builddir = @builddir@
-datadir = @datadir@
-datarootdir = @datarootdir@
-docdir = @docdir@
-dvidir = @dvidir@
-exec_prefix = @exec_prefix@
-host = @host@
-host_alias = @host_alias@
-host_cpu = @host_cpu@
-host_os = @host_os@
-host_vendor = @host_vendor@
-htmldir = @htmldir@
-includedir = @includedir@
-infodir = @infodir@
-install_sh = @install_sh@
-libdir = @libdir@
-libexecdir = @libexecdir@
-localedir = @localedir@
-localstatedir = @localstatedir@
-mandir = @mandir@
-mkdir_p = @mkdir_p@
-oldincludedir = @oldincludedir@
-pdfdir = @pdfdir@
-prefix = @prefix@
-program_transform_name = @program_transform_name@
-psdir = @psdir@
-runstatedir = @runstatedir@
-sbindir = @sbindir@
-sharedstatedir = @sharedstatedir@
-srcdir = @srcdir@
-sysconfdir = @sysconfdir@
-target_alias = @target_alias@
-top_build_prefix = @top_build_prefix@
-top_builddir = @top_builddir@
-top_srcdir = @top_srcdir@
-libmandir = $(LIB_MAN_DIR)
-libman_PRE = \
-	$(all_shadows:=.man)			\
-	DBE.man					\
-	DPMSCapable.man				\
-	DPMSDisable.man				\
-	DPMSEnable.man				\
-	DPMSForceLevel.man			\
-	DPMSGetTimeouts.man			\
-	DPMSGetVersion.man			\
-	DPMSInfo.man				\
-	DPMSQueryExtension.man			\
-	DPMSSetTimeouts.man			\
-	XShape.man				\
-	XShm.man				\
-	XcupGetReservedColormapEntries.man	\
-	XcupQueryVersion.man			\
-	XcupStoreColors.man			\
-	XdbeAllocateBackBufferName.man		\
-	XdbeBeginIdiom.man			\
-	XdbeDeallocateBackBufferName.man	\
-	XdbeEndIdiom.man			\
-	XdbeFreeVisualInfo.man			\
-	XdbeGetBackBufferAttributes.man		\
-	XdbeGetVisualInfo.man			\
-	XdbeQueryExtension.man			\
-	XdbeSwapBuffers.man			\
-	Xevi.man				\
-	Xmbuf.man
-
-XShape_shadows = \
-	XShapeQueryExtension			\
-	XShapeQueryVersion			\
-	XShapeCombineRegion			\
-	XShapeCombineRectangles			\
-	XShapeCombineMask			\
-	XShapeCombineShape			\
-	XShapeOffsetShape			\
-	XShapeQueryExtents			\
-	XShapeSelectInput			\
-	XShapeInputSelected			\
-	XShapeGetRectangles
-
-XShm_shadows = \
-	XShmQueryExtension			\
-	XShmQueryVersion			\
-	XShmPixmapFormat			\
-	XShmAttach				\
-	XShmDetach				\
-	XShmCreateImage				\
-	XShmPutImage				\
-	XShmGetImage				\
-	XShmCreatePixmap			\
-	XShmGetEventBase
-
-Xmbuf_shadows = \
-	XmbufQueryExtension			\
-	XmbufGetVersion				\
-	XmbufCreateBuffers			\
-	XmbufDestroyBuffers			\
-	XmbufDisplayBuffers			\
-	XmbufGetWindowAttributes		\
-	XmbufChangeWindowAttributes		\
-	XmbufGetBufferAttributes		\
-	XmbufChangeBufferAttributes		\
-	XmbufGetScreenInfo			\
-	XmbufCreateStereoWindow
-
-Xevi_shadows = \
-	XeviQueryVersion			\
-	XeviGetVisualInfo			\
-	XeviQueryExtension
-
-all_shadows = $(XShape_shadows) $(XShm_shadows) $(Xmbuf_shadows) $(Xevi_shadows)
-libman_DATA = $(libman_PRE:man=@LIB_MAN_SUFFIX@)
-EXTRA_DIST = $(libman_PRE)
-CLEANFILES = $(libman_DATA)
-SUFFIXES = .$(LIB_MAN_SUFFIX) .man
-all: all-am
-
-.SUFFIXES:
-.SUFFIXES: .$(LIB_MAN_SUFFIX) .man
-$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
-	@for dep in $?; do \
-	  case '$(am__configure_deps)' in \
-	    *$$dep*) \
-	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
-	        && { if test -f $@; then exit 0; else break; fi; }; \
-	      exit 1;; \
-	  esac; \
-	done; \
-	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign man/Makefile'; \
-	$(am__cd) $(top_srcdir) && \
-	  $(AUTOMAKE) --foreign man/Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
-	@case '$?' in \
-	  *config.status*) \
-	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
-	  *) \
-	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles)'; \
-	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles);; \
-	esac;
-
-$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-
-$(top_srcdir)/configure:  $(am__configure_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(am__aclocal_m4_deps):
-
-mostlyclean-libtool:
-	-rm -f *.lo
-
-clean-libtool:
-	-rm -rf .libs _libs
-install-libmanDATA: $(libman_DATA)
-	@$(NORMAL_INSTALL)
-	@list='$(libman_DATA)'; test -n "$(libmandir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(libmandir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(libmandir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(libmandir)'"; \
-	  $(INSTALL_DATA) $$files "$(DESTDIR)$(libmandir)" || exit $$?; \
-	done
-
-uninstall-libmanDATA:
-	@$(NORMAL_UNINSTALL)
-	@list='$(libman_DATA)'; test -n "$(libmandir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(libmandir)'; $(am__uninstall_files_from_dir)
-tags TAGS:
-
-ctags CTAGS:
-
-cscope cscopelist:
-
-
-distdir: $(BUILT_SOURCES)
-	$(MAKE) $(AM_MAKEFLAGS) distdir-am
-
-distdir-am: $(DISTFILES)
-	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	list='$(DISTFILES)'; \
-	  dist_files=`for file in $$list; do echo $$file; done | \
-	  sed -e "s|^$$srcdirstrip/||;t" \
-	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
-	case $$dist_files in \
-	  */*) $(MKDIR_P) `echo "$$dist_files" | \
-			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
-			   sort -u` ;; \
-	esac; \
-	for file in $$dist_files; do \
-	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
-	  if test -d $$d/$$file; then \
-	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
-	    if test -d "$(distdir)/$$file"; then \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
-	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
-	  else \
-	    test -f "$(distdir)/$$file" \
-	    || cp -p $$d/$$file "$(distdir)/$$file" \
-	    || exit 1; \
-	  fi; \
-	done
-check-am: all-am
-check: check-am
-all-am: Makefile $(DATA)
-installdirs:
-	for dir in "$(DESTDIR)$(libmandir)"; do \
-	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
-	done
-install: install-am
-install-exec: install-exec-am
-install-data: install-data-am
-uninstall: uninstall-am
-
-install-am: all-am
-	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
-
-installcheck: installcheck-am
-install-strip:
-	if test -z '$(STRIP)'; then \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	      install; \
-	else \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
-	fi
-mostlyclean-generic:
-
-clean-generic:
-	-$(am__rm_f) $(CLEANFILES)
-
-distclean-generic:
-	-$(am__rm_f) $(CONFIG_CLEAN_FILES)
-	-test . = "$(srcdir)" || $(am__rm_f) $(CONFIG_CLEAN_VPATH_FILES)
-
-maintainer-clean-generic:
-	@echo "This command is intended for maintainers to use"
-	@echo "it deletes files that may require special tools to rebuild."
-clean: clean-am
-
-clean-am: clean-generic clean-libtool mostlyclean-am
-
-distclean: distclean-am
-	-rm -f Makefile
-distclean-am: clean-am distclean-generic
-
-dvi: dvi-am
-
-dvi-am:
-
-html: html-am
-
-html-am:
-
-info: info-am
-
-info-am:
-
-install-data-am: install-libmanDATA
-
-install-dvi: install-dvi-am
-
-install-dvi-am:
-
-install-exec-am:
-
-install-html: install-html-am
-
-install-html-am:
-
-install-info: install-info-am
-
-install-info-am:
-
-install-man:
-
-install-pdf: install-pdf-am
-
-install-pdf-am:
-
-install-ps: install-ps-am
-
-install-ps-am:
-
-installcheck-am:
-
-maintainer-clean: maintainer-clean-am
-	-rm -f Makefile
-maintainer-clean-am: distclean-am maintainer-clean-generic
-
-mostlyclean: mostlyclean-am
-
-mostlyclean-am: mostlyclean-generic mostlyclean-libtool
-
-pdf: pdf-am
-
-pdf-am:
-
-ps: ps-am
-
-ps-am:
-
-uninstall-am: uninstall-libmanDATA
-
-.MAKE: install-am install-strip
-
-.PHONY: all all-am check check-am clean clean-generic clean-libtool \
-	cscopelist-am ctags-am distclean distclean-generic \
-	distclean-libtool distdir dvi dvi-am html html-am info info-am \
-	install install-am install-data install-data-am install-dvi \
-	install-dvi-am install-exec install-exec-am install-html \
-	install-html-am install-info install-info-am \
-	install-libmanDATA install-man install-pdf install-pdf-am \
-	install-ps install-ps-am install-strip installcheck \
-	installcheck-am installdirs maintainer-clean \
-	maintainer-clean-generic mostlyclean mostlyclean-generic \
-	mostlyclean-libtool pdf pdf-am ps ps-am tags-am uninstall \
-	uninstall-am uninstall-libmanDATA
-
-.PRECIOUS: Makefile
-
-
-# String replacements in MAN_SUBSTS now come from xorg-macros.m4 via configure
-.man.$(LIB_MAN_SUFFIX):
-	$(AM_V_GEN)$(SED) $(MAN_SUBSTS) < $< > $@
-
-# Tell versions [3.59,3.63) of GNU make to not export all variables.
-# Otherwise a system limit (for SysV at least) may be exceeded.
-.NOEXPORT:
-
-# Tell GNU make to disable its built-in pattern rules.
-%:: %,v
-%:: RCS/%,v
-%:: RCS/%
-%:: s.%
-%:: SCCS/s.%
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShape.3 b/experiments/wasm-gui/third_party/libXext/man/XShape.3
deleted file mode 100644
index f415fc2ef..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShape.3
+++ /dev/null
@@ -1,173 +0,0 @@
-.\" Copyright (c) 1989, 1994  X Consortium
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of the X Consortium shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from the
-.\" X Consortium.
-.\"
-.TH XSHAPE 3 1994-04-17 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XShapeQueryExtension, XShapeQueryVersion, XShapeCombineRegion,
-XShapeCombineRectangles, XShapeCombineMask, XShapeCombineShape,
-XShapeOffsetShape, XShapeQueryExtents, XShapeSelectInput, XShapeInputSelected,
-XShapeGetRectangles \- X nonrectangular shape functions
-.SH SYNTAX
-.nf
-.LP
-\&#include <X11/extensions/shape.h>
-.LP
-Bool XShapeQueryExtension (
-	Display *dpy,
-	int *event_basep,
-	int *error_basep);
-.LP
-Status XShapeQueryVersion (
-	Display *dpy,
-	int *major_versionp,
-	int *minor_versionp);
-.LP
-void XShapeCombineRegion (
-	Display *dpy,
-	Window dest,
-	int destKind,
-	int xOff,
-	int yOff,
-	struct _XRegion *r,
-	int op);
-.LP
-void XShapeCombineRectangles (
-	Display *dpy,
-	XID dest,
-	int destKind,
-	int xOff,
-	int yOff,
-	XRectangle *rects,
-	int n_rects,
-	int op,
-	int ordering);
-.LP
-void XShapeCombineMask (
-	Display *dpy,
-	XID dest,
-	int destKind,
-	int xOff,
-	int yOff,
-	Pixmap src,
-	int op);
-.LP
-void XShapeCombineShape (
-	Display *dpy,
-	XID dest,
-	int destKind,
-	int xOff,
-	int yOff,
-	Pixmap src,
-	int srcKind,
-	int op);
-.LP
-void XShapeOffsetShape (
-	Display *dpy,
-	XID dest,
-	int destKind,
-	int xOff,
-	int yOff);
-.LP
-Status XShapeQueryExtents (
-	Display *dpy,
-	Window window,
-	int *bShaped,
-	int *xbs,
-	int *ybs,
-	unsigned int *wbs,
-	unsigned int *hbs,
-	int *cShaped,
-	int *xcs,
-	int *ycs,
-	unsigned int *wcs,
-	unsigned int *hcs);
-.LP
-void XShapeSelectInput (
-	Display *dpy,
-	Window window,
-	unsigned longmask);
-.LP
-unsigned long XShapeInputSelected (
-	Display *dpy,
-	Window window);
-.LP
-XRectangle *XShapeGetRectangles (
-	Display *dpy,
-	Window window,
-	int kind,
-	int *count,
-	int *ordering);
-.fi
-.SH STRUCTURES
-.nf
-.ft CW
-typedef struct {
-    int type;	/\&* of event */
-    unsigned long serial;	/\&* # of last request processed by server */
-    Bool send_event;	/\&* true if this came from a SendEvent request */
-    Display *display;	/\&* Display the event was read from */
-    Window window;	/\&* window of event */
-    int kind;	/\&* ShapeBounding or ShapeClip */
-    int x, y;	/\&* extents of new region */
-    unsigned width, height;
-    Time time;	/\&* server timestamp when region changed */
-    Bool shaped;	/\&* true if the region exists */
-} XShapeEvent;
-.ft
-.fi
-.SH DESCRIPTION
-The \fIX11 Nonrectangular Window Shape Extension\fP adds nonrectangular
-windows to the X Window System.
-.SH PREDEFINED VALUES
-Operations:
-.RS
-.nf
-.B ShapeSet
-.B ShapeUnion
-.B ShapeIntersect
-.B ShapeSubtract
-.B ShapeInvert
-.fi
-.RE
-.sp
-Shape Kinds:
-.RS
-.nf
-.B ShapeBounding
-.B ShapeClip
-.fi
-.RE
-.sp
-Event defines:
-.RS
-.nf
-.B ShapeNotifyMask
-.B ShapeNotify
-.fi
-.RE
-.SH BUGS
-This manual page needs a lot more work.
-.SH SEE ALSO
-\fIX11 Nonrectangular Window Shape Extension\fP
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShapeCombineMask.3 b/experiments/wasm-gui/third_party/libXext/man/XShapeCombineMask.3
deleted file mode 100644
index 32d748322..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShapeCombineMask.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShape.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShapeCombineRectangles.3 b/experiments/wasm-gui/third_party/libXext/man/XShapeCombineRectangles.3
deleted file mode 100644
index 32d748322..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShapeCombineRectangles.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShape.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShapeCombineRegion.3 b/experiments/wasm-gui/third_party/libXext/man/XShapeCombineRegion.3
deleted file mode 100644
index 32d748322..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShapeCombineRegion.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShape.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShapeCombineShape.3 b/experiments/wasm-gui/third_party/libXext/man/XShapeCombineShape.3
deleted file mode 100644
index 32d748322..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShapeCombineShape.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShape.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShapeGetRectangles.3 b/experiments/wasm-gui/third_party/libXext/man/XShapeGetRectangles.3
deleted file mode 100644
index 32d748322..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShapeGetRectangles.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShape.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShapeInputSelected.3 b/experiments/wasm-gui/third_party/libXext/man/XShapeInputSelected.3
deleted file mode 100644
index 32d748322..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShapeInputSelected.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShape.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShapeOffsetShape.3 b/experiments/wasm-gui/third_party/libXext/man/XShapeOffsetShape.3
deleted file mode 100644
index 32d748322..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShapeOffsetShape.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShape.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShapeQueryExtension.3 b/experiments/wasm-gui/third_party/libXext/man/XShapeQueryExtension.3
deleted file mode 100644
index 32d748322..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShapeQueryExtension.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShape.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShapeQueryExtents.3 b/experiments/wasm-gui/third_party/libXext/man/XShapeQueryExtents.3
deleted file mode 100644
index 32d748322..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShapeQueryExtents.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShape.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShapeQueryVersion.3 b/experiments/wasm-gui/third_party/libXext/man/XShapeQueryVersion.3
deleted file mode 100644
index 32d748322..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShapeQueryVersion.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShape.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShapeSelectInput.3 b/experiments/wasm-gui/third_party/libXext/man/XShapeSelectInput.3
deleted file mode 100644
index 32d748322..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShapeSelectInput.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShape.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShm.3 b/experiments/wasm-gui/third_party/libXext/man/XShm.3
deleted file mode 100644
index 64f8be71d..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShm.3
+++ /dev/null
@@ -1,202 +0,0 @@
-.\" Copyright (c) 1991  X Consortium
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of the X Consortium shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from the
-.\" X Consortium.
-.\"
-.\" Copyright (c) 2006, Oracle and/or its affiliates.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software is furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice (including the next
-.\" paragraph) shall be included in all copies or substantial portions of the
-.\" Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-.\" LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-.\" FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-.\" DEALINGS IN THE SOFTWARE.
-.\"
-.\" X Window System is a trademark of The Open Group.
-.\"
-.TH XShm 3 2010-07-22 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XShmQueryExtension, XShmQueryVersion, XShmPixmapFormat, XShmAttach, XShmDetach
-XShmCreateImage, XShmPutImage, XShmGetImage, XShmCreatePixmap, XShmGetEventBase
-- X Shared Memory extension functions
-.SH SYNTAX
-.nf
-.LP
-\&#include <X11/Xlib.h>
-\&#include <sys/ipc.h>
-\&#include <sys/shm.h>
-\&#include <X11/extensions/XShm.h>
-.LP
-Bool	XShmQueryExtension(
-	Display *display);
-.LP
-Bool XShmQueryVersion(
-	Display *display;
-	int *major, *minor;
-	Bool *pixmaps);
-.LP
-int XShmPixmapFormat(
-	Display *display);
-.LP
-Bool XShmAttach(
-	Display *display;
-	XShmSegmentInfo *shminfo);
-.LP
-Bool XShmDetach(
-	Display *display;
-	XShmSegmentInfo *shminfo);
-.LP
-XImage *XShmCreateImage (
-	Display *display;
-	Visual *visual;
-	unsigned int depth;
-	int format;
-	char *data;
-	XShmSegmentInfo *shminfo;
-	unsigned int width, height);
-.LP
-Bool XShmPutImage(
-	Display *display;
-	Drawable d;
-	GC gc;
-	XImage *image;
-	int src_x, src_y, dest_x, dest_y;
-	unsigned int width, height;
-	bool send_event);
-.LP
-Bool XShmGetImage (
-	Display *display;
-	Drawable d;
-	XImage *image;
-	int x, y;
-	unsigned long plane_mask);
-.LP
-Pixmap XShmCreatePixmap(
-        Display *display;
-        Drawable d;
-        char *data;
-	XShmSegmentInfo *shminfo;
-	unsigned int width, height, depth);
-.LP
-Status XShmGetEventBase(
-	Display *display);
-.fi
-.SH STRUCTURES
-.nf
-.ta 3i
-\fIEvents:\fP
-.sp
-typedef struct {
-    int type;               /\&* of event */
-    unsigned long serial;   /\&* # of last request processed by server*/
-    Bool send_event;        /\&* true if this came from a SendEvent request*/
-    Display *display;       /\&* Display the event was read from */
-    Drawable drawable;      /\&* drawable of request */
-    int major_code;         /\&* ShmReqCode */
-    int minor_code;         /\&* X_ShmPutImage */
-    ShmSeg shmseg;          /\&* the ShmSeg used in the request*/
-    unsigned long offset;   /\&* the offset into ShmSeg used in the request*/
-} XShmCompletionEvent;
-.LP
-\fIa structure of type XShmSegmentInfo :\fP
-.sp
-typedef struct {
-    ShmSeg shmseg;      /\&* resource id */
-    int shmid;          /\&* kernel id */
-    char *shmaddr;      /\&* address in client */
-    Bool readOnly;      /\&* how the server should attach it */
-} XShmSegmentInfo;
-.SH DESCRIPTION
-.B XShmQueryExtension
-checks to see if the shared memory extensions are available for the
-specified display.
-.PP
-.B XShmQueryVersion
-returns the version numbers of the extension implementation.
-Shared memory pixmaps are supported if the
-.I pixmaps
-argument returns true.
-.PP
-.B XShmAttach
-tells the server to attach to your shared memory segment.
-If all goes well, you will get a non-zero status back,
-and your XImage is ready for use.
-.PP
-.B XShmDetach
-tells the server to detach from your shared memory segment.
-.PP
-.B XShmPutImage
-combines an image in memory with a shape of the specified drawable.
-If XYBitmap format is used, the depth must be one, or a
-.B BadMatch
-error results.
-The foreground pixel in the GC defines the source for the one bits in the image,
-and the background pixel defines the source for the zero bits.
-For XYPixmap and ZPixmap, the depth must match the
-depth of the drawable, or a
-.B BadMatch
-error results.
-.PP
-.B XShmGetImage
-reads image data into a shared memory XImage where
-.I display
-is the display of interest,
-.I drawable
-is the source drawable,
-.I image
-is the destination XImage,
-.IR x " and " y
-are offsets within the drawable, and
-.I plane_mask
-defines which planes are to be read.
-.PP
-.B XShmCreateImage
-allocates the memory needed for an XImage structure for the specified
-display but does not allocate space for the image itself.
-.PP
-.B XShmPixmapFormat
-gets the format for the server.
-If your application can deal with the server pixmap data format,
-a shared memory segment and shminfo structure are created.
-.PP
-.B XShmCreatePixmap
-points to a pixmap which you can manipulate in all of the usual ways,
-with the added bonus of being able to edit its contents directly
-through the shared memory segment.
-.PP
-.B XShmGetEventBase
-gets the completion event value.
-.SH SEE ALSO
-\fIMIT-SHM - The MIT Shared Memory Extension\fP
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShmAttach.3 b/experiments/wasm-gui/third_party/libXext/man/XShmAttach.3
deleted file mode 100644
index 956fff1f9..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShmAttach.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShm.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShmCreateImage.3 b/experiments/wasm-gui/third_party/libXext/man/XShmCreateImage.3
deleted file mode 100644
index 956fff1f9..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShmCreateImage.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShm.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShmCreatePixmap.3 b/experiments/wasm-gui/third_party/libXext/man/XShmCreatePixmap.3
deleted file mode 100644
index 956fff1f9..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShmCreatePixmap.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShm.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShmDetach.3 b/experiments/wasm-gui/third_party/libXext/man/XShmDetach.3
deleted file mode 100644
index 956fff1f9..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShmDetach.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShm.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShmGetEventBase.3 b/experiments/wasm-gui/third_party/libXext/man/XShmGetEventBase.3
deleted file mode 100644
index 956fff1f9..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShmGetEventBase.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShm.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShmGetImage.3 b/experiments/wasm-gui/third_party/libXext/man/XShmGetImage.3
deleted file mode 100644
index 956fff1f9..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShmGetImage.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShm.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShmPixmapFormat.3 b/experiments/wasm-gui/third_party/libXext/man/XShmPixmapFormat.3
deleted file mode 100644
index 956fff1f9..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShmPixmapFormat.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShm.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShmPutImage.3 b/experiments/wasm-gui/third_party/libXext/man/XShmPutImage.3
deleted file mode 100644
index 956fff1f9..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShmPutImage.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShm.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShmQueryExtension.3 b/experiments/wasm-gui/third_party/libXext/man/XShmQueryExtension.3
deleted file mode 100644
index 956fff1f9..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShmQueryExtension.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShm.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XShmQueryVersion.3 b/experiments/wasm-gui/third_party/libXext/man/XShmQueryVersion.3
deleted file mode 100644
index 956fff1f9..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XShmQueryVersion.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/XShm.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XcupGetReservedColormapEntries.3 b/experiments/wasm-gui/third_party/libXext/man/XcupGetReservedColormapEntries.3
deleted file mode 100644
index dcd287b4a..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XcupGetReservedColormapEntries.3
+++ /dev/null
@@ -1,69 +0,0 @@
-.\" Copyright \(co 1986-1997   The Open Group    All Rights Reserved
-.\" Copyright (c) 1999, 2005, Oracle and/or its affiliates.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software is furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice (including the next
-.\" paragraph) shall be included in all copies or substantial portions of the
-.\" Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-.\" LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-.\" FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-.\" DEALINGS IN THE SOFTWARE.
-.\"
-.\" X Window System is a trademark of The Open Group.
-.\"
-.TH XcupGetReservedColormapEntries 3 2005-01-22 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XcupGetReservedColormapEntries \- list colormap entries reserved by the system
-.SH SYNOPSIS
-.nf
-\fBcc\fR [ \fIflag\fR \&.\&.\&. ] \fIfile\fR \&.\&.\&. -\fBlXext\fR [ \fIlibrary\fR \&.\&.\&. ]
-\&#include <X11/extensions/Xcup.h>
-.sp
-Status \fBXcupGetReservedColormapEntries\fP\^(\^Display *\fIdisplay\fP\^,
-    int \fIscreen\fP\^, XColor **\fIcolors_out\fP\^, int *\fIncolors\fP\^);
-.if n .ti +5n
-.if t .ti +.5i
-.SH ARGUMENTS
-.IP \fIdisplay\fP 1i
-Specifies the connection to the X server.
-.IP \fIscreen\fP 1i
-Screen number on the host server.
-.IP \fIcolors_out\fP 1i
-Returns the values reserved by the server.
-.IP \fIncolors\fP 1i
-Returns the number of items in \fIcolors_out\fP.
-.SH DESCRIPTION
-The
-.B XcupGetReservedColormapEntries
-function returns a list of colormap entries (pixels) that are reserved
-by the system.
-This list will, at a minimum, contain entries for the
-BlackPixel and WhitePixel of the specified screen.
-Use
-.B XFree
-to free
-.I colors_out.
-.LP
-To minimize colormap flash, an application which installs its own private
-colormap should query the special colors by calling
-.BR XCupGetReservedColormapEntries ,
-and can then store those entries (in the
-proper location) in its private colormap using
-.BR XCupStoreColors .
-.SH "SEE ALSO"
-.BR XcupQueryVersion (3Xext),
-.BR XcupStoreColors (3Xext),
-.BR XFree (3X11),
-.br
-\fIColormap Utilization Policy and Extension\fP
diff --git a/experiments/wasm-gui/third_party/libXext/man/XcupQueryVersion.3 b/experiments/wasm-gui/third_party/libXext/man/XcupQueryVersion.3
deleted file mode 100644
index 2d3a38cec..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XcupQueryVersion.3
+++ /dev/null
@@ -1,71 +0,0 @@
-.\" Copyright \(co 1986-1997   The Open Group    All Rights Reserved
-.\" Copyright (c) 1999, 2005, Oracle and/or its affiliates.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software is furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice (including the next
-.\" paragraph) shall be included in all copies or substantial portions of the
-.\" Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-.\" LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-.\" FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-.\" DEALINGS IN THE SOFTWARE.
-.\"
-.\" X Window System is a trademark of The Open Group.
-.\"
-.TH XcupQueryVersion 3 2005-01-22 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XcupQueryVersion \- Returns TOG-CUP protocol version supported by the X server
-.SH SYNOPSIS
-.nf
-\fBcc\fR [ \fIflag\fR \&.\&.\&. ] \fIfile\fR \&.\&.\&. -\fBlXext\fR [ \fIlibrary\fR \&.\&.\&. ]
-\&#include <X11/extensions/Xcup.h>
-.sp
-Status \fBXcupQueryVersion\fP\^(\^Display *\fIdisplay\fP\^,
-    int *\fImajor_version_return\fP\^, int *\fIminor_version_return\fP\^);
-.if n .ti +5n
-.if t .ti +.5i
-.SH ARGUMENTS
-.IP \fIdisplay\fP 1i
-Specifies the connection to the X server
-.IP \fImajor_version_return\fP 1i
-Returns the major version supported by the server
-.IP \fIminor_version_return\fP 1i
-Returns the minor version supported by the server
-.SH DESCRIPTION
-.B XcupQueryVersion
-sets
-.I major_version_return
-and
-.I minor_version_return
-to the major and minor TOG-CUP protocol version supported by the
-server.
-If the TOG-CUP library is compatible with the version returned
-by the server, it returns nonzero.
-If the server does not support the TOG-CUP extension,
-or if there was an error during communications with the server,
-or if the server and library protocol versions are incompatible,
-it returns zero.
-No other Xcup functions may be called before this function.
-If a client violates this rule, the effects of
-all subsequent Xcup calls that it makes are undefined.
-.LP
-To get the list of reserved colormap entries, use
-.BR XcupGetReservedColormapEntries .
-.LP
-To allocate one or more read-only color cells with RGB values, use
-.BR XcupStoreColors .
-.SH "SEE ALSO"
-.BR XcupGetReservedColormapEntries (3Xext),
-.BR XcupStoreColors (3Xext),
-.br
-\fIColormap Utilization Policy and Extension\fP
diff --git a/experiments/wasm-gui/third_party/libXext/man/XcupStoreColors.3 b/experiments/wasm-gui/third_party/libXext/man/XcupStoreColors.3
deleted file mode 100644
index 7345f9e8f..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XcupStoreColors.3
+++ /dev/null
@@ -1,74 +0,0 @@
-.\" Copyright \(co 1986-1997   The Open Group    All Rights Reserved
-.\" Copyright (c) 1999, 2005, Oracle and/or its affiliates.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software is furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice (including the next
-.\" paragraph) shall be included in all copies or substantial portions of the
-.\" Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-.\" LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-.\" FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-.\" DEALINGS IN THE SOFTWARE.
-.\"
-.\" X Window System is a trademark of The Open Group.
-.\"
-.TH XcupStoreColors 3 2005-01-22 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XcupStoreColors \- initialize shareable colormap entries at specific locations
-.SH SYNOPSIS
-.nf
-\fBcc\fR [ \fIflag\fR \&.\&.\&. ] \fIfile\fR \&.\&.\&. -\fBlXext\fR [ \fIlibrary\fR \&.\&.\&. ]
-\&#include <X11/extensions/Xcup.h>
-.sp
-Status \fBXcupStoreColors\fP\^(\^Display *\fIdisplay\fP\^, Colormap \fIcolormap\fP\^,
-    XColor *\fIcolors_in_out\fP\^, int \fIncolors\fP\^);
-.if n .ti +5n
-.if t .ti +.5i
-.SH ARGUMENTS
-.IP \fIdisplay\fP 1i
-Specifies the connection to the X server
-.IP \fIcolormap\fP 1i
-Specifies the colormap
-.IP \fIcolors_in_out\fP 1i
-Specifies and returns the values actually used in the colormap
-.IP \fIncolors\fP 1i
-Specifies the number of items in colors_in_out
-.SH DESCRIPTION
-The
-.B XcupStoreColors
-function changes the colormap entries of the pixel values in the pixel
-members of the XColor structures.
-The colormap entries are allocated as if an AllocColor has been used instead,
-i.e. the colors are read-only (shareable).
-.B XcupStoreColors
-returns the number of colors that were successfully allocated in the colormap.
-.LP
-A
-.B Value
-error is generated if a pixel is not a valid index into the colormap.
-A
-.B BadMatch
-error is generated if the colormap does not belong to a GrayScale,
-PseudoColor, or DirectColor visual.
-.LP
-Applications which allocate many colors in a screen's default colormap, e.g.
-a color-cube or a gray-ramp, should allocate them with
-.BR XCupStoreColors .
-By using XCupStoreColors the colors will be allocated shareable (read-only)
-and any other application which allocates the same color will share that
-color cell.
-.SH "SEE ALSO"
-.BR XcupQueryVersion (3Xext),
-.BR XcupGetReservedColormapEntries (3Xext),
-.br
-\fIColormap Utilization Policy and Extension\fP
diff --git a/experiments/wasm-gui/third_party/libXext/man/XdbeAllocateBackBufferName.3 b/experiments/wasm-gui/third_party/libXext/man/XdbeAllocateBackBufferName.3
deleted file mode 100644
index e162d0311..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XdbeAllocateBackBufferName.3
+++ /dev/null
@@ -1,71 +0,0 @@
-.\" Copyright (c) 1995  Hewlett-Packard Company
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" HEWLETT-PACKARD COMPANY BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of the Hewlett-Packard Company shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from the
-.\" Hewlett-Packard Company.
-.\"
-.TH XdbeAllocateBackBufferName 3 1996-03-11 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XdbeAllocateBackBufferName - allocates a DBE buffer.
-.SH SYNOPSIS
-\&#include <X11/extensions/Xdbe.h>
-.sp
-.nf
-XdbeBackBuffer XdbeAllocateBackBufferName(
-    Display        *dpy,
-    Window         window,
-    XdbeSwapAction swap_action)
-.fi
-.SH DESCRIPTION
-This function returns a drawable ID used to refer to the back buffer of the
-specified window.
-The
-.I swap_action
-is a hint to indicate the swap action that
-will likely be used in subsequent calls to
-.BR XdbeSwapBuffers (3).
-The actual swap action used in calls to
-.BR XdbeSwapBuffers (3)
-does not have to be the same as the
-.I swap_action
-passed to this function, though clients are encouraged to provide
-accurate information whenever possible.
-.SH ERRORS
-.IP BadAlloc
-.IP BadIDChoice
-.IP BadMatch
-The specified window is not an InputOutput window or its visual does not
-support DBE.
-.IP BadValue
-An invalid swap action was specified.
-.IP BadWindow
-An invalid window was specified.
-.SH SEE ALSO
-.BR DBE (3),
-.BR XdbeBeginIdiom (3),
-.BR XdbeDeallocateBackBufferName (3),
-.BR XdbeEndIdiom (3),
-.BR XdbeFreeVisualInfo (3),
-.BR XdbeGetBackBufferAttributes (3),
-.BR XdbeGetVisualInfo (3),
-.BR XdbeQueryExtension (3),
-.BR XdbeSwapBuffers (3).
diff --git a/experiments/wasm-gui/third_party/libXext/man/XdbeBeginIdiom.3 b/experiments/wasm-gui/third_party/libXext/man/XdbeBeginIdiom.3
deleted file mode 100644
index 25030e9fa..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XdbeBeginIdiom.3
+++ /dev/null
@@ -1,47 +0,0 @@
-.\" Copyright (c) 1995  Hewlett-Packard Company
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" HEWLETT-PACKARD COMPANY BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of the Hewlett-Packard Company shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from the
-.\" Hewlett-Packard Company.
-.\"
-.TH DBE 3 1996-03-11 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XdbeBeginIdiom - marks the beginning of a DBE idiom sequence.
-.SH SYNOPSIS
-.nf
-\&#include <X11/extensions/Xdbe.h>
-.sp
-Status XdbeBeginIdiom(
-    Display *dpy)
-.fi
-.SH DESCRIPTION
-This function marks the beginning of an idiom sequence.
-.SH SEE ALSO
-.BR DBE (3),
-.BR XdbeAllocateBackBufferName (3),
-.BR XdbeDeallocateBackBufferName (3),
-.BR XdbeEndIdiom (3),
-.BR XdbeFreeVisualInfo (3),
-.BR XdbeGetBackBufferAttributes (3),
-.BR XdbeGetVisualInfo (3),
-.BR XdbeQueryExtension (3),
-.BR XdbeSwapBuffers (3).
diff --git a/experiments/wasm-gui/third_party/libXext/man/XdbeDeallocateBackBufferName.3 b/experiments/wasm-gui/third_party/libXext/man/XdbeDeallocateBackBufferName.3
deleted file mode 100644
index 461856861..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XdbeDeallocateBackBufferName.3
+++ /dev/null
@@ -1,56 +0,0 @@
-.\" Copyright (c) 1995  Hewlett-Packard Company
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" HEWLETT-PACKARD COMPANY BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of the Hewlett-Packard Company shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from the
-.\" Hewlett-Packard Company.
-.\"
-.TH XdbeDeallocateBackBufferName 3 1996-03-11 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XdbeDeallocateBackBufferName - frees a DBE buffer.
-.SH SYNOPSIS
-.nf
-\&#include <X11/extensions/Xdbe.h>
-.sp
-Status XdbeDeallocateBackBufferName(
-    Display        *dpy,
-    XdbeBackBuffer buffer)
-.fi
-.SH DESCRIPTION
-This function frees a drawable ID,
-.IR buffer ,
-that was obtained via
-.BR XdbeAllocateBackBufferName (3).
-The buffer must be a valid name for the back
-buffer of a window, or a protocol error results.
-.SH ERRORS
-.IP BadBuffer
-The specified buffer is not associated with a window.
-.SH SEE ALSO
-.BR DBE (3),
-.BR XdbeAllocateBackBufferName (3),
-.BR XdbeBeginIdiom (3),
-.BR XdbeEndIdiom (3),
-.BR XdbeFreeVisualInfo (3),
-.BR XdbeGetBackBufferAttributes (3),
-.BR XdbeGetVisualInfo (3),
-.BR XdbeQueryExtension (3),
-.BR XdbeSwapBuffers (3).
diff --git a/experiments/wasm-gui/third_party/libXext/man/XdbeEndIdiom.3 b/experiments/wasm-gui/third_party/libXext/man/XdbeEndIdiom.3
deleted file mode 100644
index 0856b6062..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XdbeEndIdiom.3
+++ /dev/null
@@ -1,47 +0,0 @@
-.\" Copyright (c) 1995  Hewlett-Packard Company
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" HEWLETT-PACKARD COMPANY BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of the Hewlett-Packard Company shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from the
-.\" Hewlett-Packard Company.
-.\"
-.TH XdbeEndIdiom 3 1996-03-11 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XdbeEndIdiom - marks the end of a DBE idiom sequence.
-.SH SYNOPSIS
-.nf
-\&#include <X11/extensions/Xdbe.h>
-.sp
-Status XdbeEndIdiom(
-    Display *dpy)
-.fi
-.SH DESCRIPTION
-This function marks the end of an idiom sequence.
-.SH SEE ALSO
-.BR DBE (3),
-.BR XdbeAllocateBackBufferName (3),
-.BR XdbeBeginIdiom (3),
-.BR XdbeDeallocateBackBufferName (3),
-.BR XdbeFreeVisualInfo (3),
-.BR XdbeGetBackBufferAttributes (3),
-.BR XdbeGetVisualInfo (3),
-.BR XdbeQueryExtension (3),
-.BR XdbeSwapBuffers (3).
diff --git a/experiments/wasm-gui/third_party/libXext/man/XdbeFreeVisualInfo.3 b/experiments/wasm-gui/third_party/libXext/man/XdbeFreeVisualInfo.3
deleted file mode 100644
index cabae7be0..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XdbeFreeVisualInfo.3
+++ /dev/null
@@ -1,51 +0,0 @@
-.\" Copyright (c) 1995  Hewlett-Packard Company
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" HEWLETT-PACKARD COMPANY BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of the Hewlett-Packard Company shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from the
-.\" Hewlett-Packard Company.
-.\"
-.TH XdbeFreeVisualInfo 3 1996-03-11 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XdbeFreeVisualInfo - frees information returned by
-.B XdbeGetVisualInfo().
-.SH SYNOPSIS
-.nf
-\&#include <X11/extensions/Xdbe.h>
-.sp
-void XdbeFreeVisualInfo(
-    XdbeScreenVisualInfo *visual_info)
-.fi
-.SH DESCRIPTION
-This function frees the list of
-.B XdbeScreenVisualInfo
-returned by the function
-.BR XdbeGetVisualInfo (3).
-.SH SEE ALSO
-.BR DBE (3),
-.BR XdbeAllocateBackBufferName (3),
-.BR XdbeBeginIdiom (3),
-.BR XdbeDeallocateBackBufferName (3),
-.BR XdbeEndIdiom (3),
-.BR XdbeGetBackBufferAttributes (3),
-.BR XdbeGetVisualInfo (3),
-.BR XdbeQueryExtension (3),
-.BR XdbeSwapBuffers (3).
diff --git a/experiments/wasm-gui/third_party/libXext/man/XdbeGetBackBufferAttributes.3 b/experiments/wasm-gui/third_party/libXext/man/XdbeGetBackBufferAttributes.3
deleted file mode 100644
index eb092e3ed..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XdbeGetBackBufferAttributes.3
+++ /dev/null
@@ -1,66 +0,0 @@
-.\" Copyright (c) 1995  Hewlett-Packard Company
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" HEWLETT-PACKARD COMPANY BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of the Hewlett-Packard Company shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from the
-.\" Hewlett-Packard Company.
-.\"
-.TH XdbeGetBackBufferAttributes 3 1996-03-11 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XdbeGetBackBufferAttributes - returns attributes of a DBE buffer.
-.SH SYNOPSIS
-.nf
-\&#include <X11/extensions/Xdbe.h>
-.sp
-XdbeBackBufferAttributes *XdbeGetBackBufferAttributes(
-    Display        *dpy,
-    XdbeBackBuffer buffer)
-.fi
-.SH DESCRIPTION
-This function returns the attributes associated with the specified buffer.
-.PP
-The
-.B XdbeBackBufferAttributes
-structure has the following fields:
-.PP
-.RS
-Window     window     window that buffer belongs to
-.RE
-.PP
-If buffer is not a valid
-.B XdbeBackBuffer,
-window returns None.
-.PP
-The returned
-.B XdbeBackBufferAttributes
-structure can be freed with the
-Xlib function
-.BR Xfree (3).
-.SH SEE ALSO
-.BR DBE (3),
-.BR XdbeAllocateBackBufferName (3),
-.BR XdbeBeginIdiom (3),
-.BR XdbeDeallocateBackBufferName (3),
-.BR XdbeEndIdiom (3),
-.BR XdbeFreeVisualInfo (3),
-.BR XdbeGetVisualInfo (3),
-.BR XdbeQueryExtension (3),
-.BR XdbeSwapBuffers (3).
diff --git a/experiments/wasm-gui/third_party/libXext/man/XdbeGetVisualInfo.3 b/experiments/wasm-gui/third_party/libXext/man/XdbeGetVisualInfo.3
deleted file mode 100644
index eaf0ec8b7..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XdbeGetVisualInfo.3
+++ /dev/null
@@ -1,129 +0,0 @@
-.\" Copyright (c) 1995  Hewlett-Packard Company
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" HEWLETT-PACKARD COMPANY BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of the Hewlett-Packard Company shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from the
-.\" Hewlett-Packard Company.
-.\"
-.TH XdbeGetVisualInfo 3 1996-03-11 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XdbeGetVisualInfo - Get dbe Visual Information
-.SH SYNOPSIS
-.nf
-\&#include <X11/extensions/Xdbe.h>
-.sp
-XdbeScreenVisualInfo *XdbeGetVisualInfo(
-    Display  *dpy,
-    Drawable *screen_specifiers,
-    int      *num_screens)
-.fi
-.SH DESCRIPTION
-This function returns information about which visuals support double
-buffering.  The argument
-.I num_screens
-specifies how many elements there are
-in the
-.I screen_specifiers
-list.
-Each drawable in
-.I screen_specifiers
-designates a
-screen for which the supported visuals are being requested.
-If
-.I num_screens
-is zero, information for all screens is requested.
-In this case, upon return from this function,
-.I num_screens
-will be set to the number of screens that were found.
-If an error occurs, this function returns NULL, else it returns a
-pointer to a list of
-.B XdbeScreenVisualInfo
-structures of length
-.I num_screens.
-The nth
-element in the returned list corresponds to the nth drawable in the
-.I screen_specifiers
-list, unless
-.I num_screens
-was passed in with the value zero,
-in which case the nth element in the returned list corresponds to the nth screen
-of the server, starting with screen zero.
-The
-.B XdbeScreenVisualInfo
-structure has the following fields:
-.nf
-     int            count
-     XdbeVisualInfo *visinfo
-.fi
-.I count
-specifies the number of items in
-.I visinfo.
-.I visinfo
-specifies a list of visuals, depths, and performance hints for this screen.
-.PP
-The
-.B XdbeVisualInfo
-structure has the following fields:
-.nf
-     VisualID visual
-     int      depth
-     int      perflevel
-.fi
-.I visual
-specifies one visual ID that supports double-buffering.
-.I depth
-specifies the depth of the visual.
-.I perflevel
-is a performance hint.
-.PP
-The only operation defined on a
-.I perflevel
-is comparison to a
-.I perflevel
-of another visual on the same screen.
-The visual having the higher
-.I perflevel
-is likely to have better double-buffering graphics performance than the visual
-having the lower
-.IR perflevel .
-Nothing can be deduced from the following:
-the magnitude of the difference of two
-.IR perflevels ,
-a
-.I perflevel
-value in isolation, or comparing
-.I perflevels
-from different servers.
-.SH ERRORS
-.IP BadDrawable
-One or more values passed in
-.I screen_specifiers
-is not a valid drawable.
-.SH SEE ALSO
-.BR DBE (3),
-.BR XdbeAllocateBackBufferName (3),
-.BR XdbeBeginIdiom (3),
-.BR XdbeDeallocateBackBufferName (3),
-.BR XdbeEndIdiom (3),
-.BR XdbeFreeVisualInfo (3),
-.BR XdbeGetBackBufferAttributes (3),
-.BR XdbeQueryExtension (3),
-.BR XdbeSwapBuffers (3).
diff --git a/experiments/wasm-gui/third_party/libXext/man/XdbeQueryExtension.3 b/experiments/wasm-gui/third_party/libXext/man/XdbeQueryExtension.3
deleted file mode 100644
index 21fda49b4..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XdbeQueryExtension.3
+++ /dev/null
@@ -1,65 +0,0 @@
-.\" Copyright (c) 1995  Hewlett-Packard Company
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" HEWLETT-PACKARD COMPANY BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of the Hewlett-Packard Company shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from the
-.\" Hewlett-Packard Company.
-.\"
-.TH XdbeQueryExtension 3 1996-03-11 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XdbeQueryExtension - returns the version of DBE supported by the server.
-.SH SYNOPSIS
-.nf
-\&#include <X11/extensions/Xdbe.h>
-.sp
-Status XdbeQueryExtension(
-    Display *dpy,
-    int     *major_version_return,
-    int     *minor_version_return)
-.fi
-.SH DESCRIPTION
-Sets
-.I major_version_return
-and
-.I minor_version_return
-to the major and minor
-DBE protocol version supported by the server.
-If the DBE library is compatible with the version returned by the server,
-this function returns non-zero.
-If
-.I dpy
-does not support the DBE extension,
-or if there was an error during communication with the server,
-or if the server and library protocol versions are incompatible,
-this function returns zero.
-No other Xdbe functions may be called before this function.
-If a client violates this rule,
-the effects of all subsequent Xdbe calls that it makes are undefined.
-.SH SEE ALSO
-.BR DBE (3),
-.BR XdbeAllocateBackBufferName (3),
-.BR XdbeBeginIdiom (3),
-.BR XdbeDeallocateBackBufferName (3),
-.BR XdbeEndIdiom (3),
-.BR XdbeFreeVisualInfo (3),
-.BR XdbeGetBackBufferAttributes (3),
-.BR XdbeGetVisualInfo (3),
-.BR XdbeSwapBuffers (3).
diff --git a/experiments/wasm-gui/third_party/libXext/man/XdbeSwapBuffers.3 b/experiments/wasm-gui/third_party/libXext/man/XdbeSwapBuffers.3
deleted file mode 100644
index 8df64518c..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XdbeSwapBuffers.3
+++ /dev/null
@@ -1,100 +0,0 @@
-.\" Copyright (c) 1995  Hewlett-Packard Company
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" HEWLETT-PACKARD COMPANY BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of the Hewlett-Packard Company shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from the
-.\" Hewlett-Packard Company.
-.\"
-.TH XdbeSwapBuffers 3 1996-03-11 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XdbeSwapBuffers - swaps front and back DBE buffers.
-.SH SYNOPSIS
-.nf
-\&#include <X11/extensions/Xdbe.h>
-.sp
-Status XdbeSwapBuffers(
-    Display      *dpy,
-    XdbeSwapInfo *swap_info,
-    int          num_windows)
-.fi
-.SH DESCRIPTION
-This function swaps the front and back buffers for a list of windows.
-The
-argument
-.I num_windows
-specifies how many windows are to have their buffers
-swapped; it is the number of elements in the
-.I swap_info
-array.
-The argument
-.I swap_info
-specifies the information needed per window to do the swap.
-.PP
-The
-.I XdbeSwapInfo
-structure has the following fields:
-.nf
-     Window            swap_window
-     XdbeSwapAction    swap_action
-.fi
-.I swap_window
-specifies the window for which to swap buffers.
-.I swap_action
-specifies the swap action to use for this
-.IR swap_window .
-.PP
-.I swap_action
-determines what will happen to the new back buffer of the
-.I swap_window
-it is paired with in the list in addition to making the old back buffer
-become visible.
-The defined actions are as follows:
-.IP XdbeUndefined
-The contents of the new back buffer become undefined.
-This may be the most efficient action since it allows the implementation to
-discard the contents of the buffer if it needs to.
-.IP XdbeBackground
-The unobscured region of the new back buffer will be tiled with the
-window background.
-The background action allows devices to use a fast clear
-capability during a swap.
-.IP XdbeUntouched
-The unobscured region of the new back buffer will be unmodified by the swap.
-.IP XdbeCopied
-The unobscured region of the new back buffer will be the contents of the old
-back buffer.
-.SH ERRORS
-.IP BadMatch
-A non-double-buffered window was specified or a window was specified twice.
-.IP BadWindow
-An invalid window was specified.
-.IP BadValue
-An invalid swap action was specified.
-.SH SEE ALSO
-.BR DBE (3),
-.BR XdbeAllocateBackBufferName (3),
-.BR XdbeBeginIdiom (3),
-.BR XdbeDeallocateBackBufferName (3),
-.BR XdbeEndIdiom (3),
-.BR XdbeFreeVisualInfo (3),
-.BR XdbeGetBackBufferAttributes (3),
-.BR XdbeGetVisualInfo (3),
-.BR XdbeQueryExtension (3).
diff --git a/experiments/wasm-gui/third_party/libXext/man/Xevi.3 b/experiments/wasm-gui/third_party/libXext/man/Xevi.3
deleted file mode 100644
index f83e4e5a5..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/Xevi.3
+++ /dev/null
@@ -1,168 +0,0 @@
-.\" Copyright (c) 1997  Silicon Graphics, Inc.
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" SILICON GRAPHICS, INC. BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of Silicon Graphics, Inc. shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from
-.\" Silicon Graphics, Inc.
-.\"
-.TH XEVI 3 1997-12-24 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XeviQueryExtension, XeviQueryVersion, XeviGetVisualInfo \- X Extended
-Visual Information functions
-.SH SYNOPSIS
-.nf
-\&#include <X11/extensions/XEVI.h>
-.sp
-\fBBool\fP
-\fBXeviQueryExtension\fP (\fBDisplay *\fP\fIdpy\fP);
-.sp
-\fBBool\fP
-\fBXeviQueryVersion\fP (\fBDisplay *\fP\fIdpy\fP,
-    \fBint *\fP\fImajor_version_return\fP,
-    \fBint *\fP\fIminor_version_return\fP);
-.sp
-\fBint
-\fBXeviGetVisualInfo\fP (\fBDisplay *\fP\fIdpy\fP, \fBVisualID *\fP\fIvisual\fP,
-    \fBint\fP \fIn_visual\fP, \fBExtendedVisualInfo **\fP\fIevi_return\fP,
-    \fBint *\fP\fIn_info_return\fP);
-.fi
-.SH DESCRIPTION
-The
-X11 Extended Visual Information extension (EVI) allows a client to determine
-information about core X visuals beyond what the core protocol provides.
-.PP
-The EVI application programming library contains the interfaces described below.
-With the exception of
-.BR XeviQueryExtension ,
-if any of these routines are
-called with a display that does not support the extension,
-the ExtensionErrorHandler (which can be set with
-.B XSetExtensionErrorHandler
-and functions the same way as
-.BR XSetErrorHandler )
-will be called and the function will then return.
-.PP
-.B XeviQueryExtension
-returns
-.B True
-if the Extended Visual Information extension is available on the given display.
-A client must call
-.B XeviQueryExtension
-before calling any other EVI
-function in order to negotiate a compatible protocol version;
-otherwise the client will get undefined behavior
-(EVI may or may not work).
-.PP
-.B XeviQueryVersion
-returns
-.B True
-if the request succeeded; the values of the major and minor protocol
-version supported by the server are returned in
-.I major_version_return
-and
-.IR minor_version_return .
-.PP
-.B XeviGetVisualInfo
-returns a list of ExtendedVisualInfo structures that describe
-visual information beyond that supported by the core protocol.
-This includes layer information relevant for systems
-supporting overlays and/or underlay planes,
-and information that allows applications better to determine the level
-of hardware support for multiple colormaps.
-XeviGetVisualInfo returns
-.B Success
-if successful, or an X error otherwise.
-If the argument
-.I visual
-is NULL, then information for all visuals of all
-screens is returned.
-Otherwise, it's a pointer to a list of visuals for which
-extended visual information is desired.
-.I n_visual
-is the number of elements in the array visual.
-.I evi_return
-returns a pointer to a list of ExtendedVisualInfo.
-When done, the client
-should free the list using XFree.
-.I n_info_return
-returns the number of elements in the array evi_return.
-.LP
-The
-.B ExtendedVisualInfo
-structure has the following fields:
-.in +0.5i
-.nf
-.ta 1.6i
-VisualID	\fIcore_visual_id\fR
-int 	\fIscreen\fR
-int 	\fIlevel\fR
-unsigned int	\fItransparency_type\fR
-unsigned int	\fItransparency_value\fR
-unsigned int	\fImin_hw_colormaps\fR
-unsigned int	\fImax_hw_colormaps\fR
-unsigned int	\fInum_colormap_conflicts\fR
-VisualID *  	\fIcolormap_conflicts\fR
-.fi
-.LP
-The combination of
-.I core_visual_id
-and
-.I screen
-number uniquely specify the visual being described.
-.LP
-.I level
-returns the level number for the visual, 0 for normal planes,
-> 0 for overlays, < 0 for underlays.
-.LP
-.I
-transparency_type
-returns the type of transparency supported by the visual.
-XEVI_TRANSPARENCY_NONE if there are no transparent pixels,
-XEVI_TRANSPARENCY_PIXEL if the visual supports a transparent pixel,
-XEVI_TRANSPARENCY_MASK if the visual supports transparent plane(s).
-.LP
-.I transparency_value
-returns the pixel/plane value to set for transparency if transparency_type isn't
-XEVI_TRANSPARENCY_NONE.
-.LP
-.I min_hw_colormaps
-and
-.I max_hw_colormaps
-return the minimum and maximum number of hardware colormaps backing up the
-visual.
-.LP
-.I num_colormap_conflicts
-returns the number of elements in
-.IR colormap_conflicts .
-This array returns a list of visuals that may cause conflicts in the use of the
-hardware colormap.
-For example, if a 12-bit hardware colormap is overloaded to
-support 8-bit colormaps,
-the corresponding 8-bit visuals would conflict with the 12-bit visuals.
-.SH ERRORS
-.B XeviGetVisualInfo
-will return
-.I BadValue
-if passed an invalid visual ID,
-.I BadAccess
-if the X server does not respond,
-.I BadAlloc
-if there is a memory allocation failure.
diff --git a/experiments/wasm-gui/third_party/libXext/man/XeviGetVisualInfo.3 b/experiments/wasm-gui/third_party/libXext/man/XeviGetVisualInfo.3
deleted file mode 100644
index cd79bd740..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XeviGetVisualInfo.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xevi.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XeviQueryExtension.3 b/experiments/wasm-gui/third_party/libXext/man/XeviQueryExtension.3
deleted file mode 100644
index cd79bd740..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XeviQueryExtension.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xevi.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XeviQueryVersion.3 b/experiments/wasm-gui/third_party/libXext/man/XeviQueryVersion.3
deleted file mode 100644
index cd79bd740..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XeviQueryVersion.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xevi.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/Xmbuf.3 b/experiments/wasm-gui/third_party/libXext/man/Xmbuf.3
deleted file mode 100644
index d872fbf9e..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/Xmbuf.3
+++ /dev/null
@@ -1,391 +0,0 @@
-.\" Copyright (c) 1989, 1994  X Consortium
-.\"
-.\" Permission is hereby granted, free of charge, to any person obtaining a
-.\" copy of this software and associated documentation files (the "Software"),
-.\" to deal in the Software without restriction, including without limitation
-.\" the rights to use, copy, modify, merge, publish, distribute, sublicense,
-.\" and/or sell copies of the Software, and to permit persons to whom the
-.\" Software furnished to do so, subject to the following conditions:
-.\"
-.\" The above copyright notice and this permission notice shall be included in
-.\" all copies or substantial portions of the Software.
-.\"
-.\" THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-.\" IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-.\" FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-.\" THE X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY,
-.\" WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF
-.\" OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
-.\" SOFTWARE.
-.\"
-.\" Except as contained in this notice, the name of the X Consortium shall not
-.\" be used in advertising or otherwise to promote the sale, use or other
-.\" dealing in this Software without prior written authorization from the
-.\" X Consortium.
-.\"
-.\" Copyright 1989, Digital Equipment Corporation.
-.\" Permission to use, copy, modify, distribute, and sell this documentation
-.\" for any purpose and without fee is hereby granted, provided that the above
-.\" copyright notice and this permission notice appear in all copies.
-.\" Digital Equipment Corporation makes no representations
-.\" about the suitability for any purpose of the information in
-.\" this document.  This documentation is provided "as is"
-.\" without express or implied warranty.
-.\"
-.de EX
-.nf
-.ft CW
-..
-.de EE
-.ft
-.fi
-..
-.TH XMBUF 3 1994-04-17 "libXext 1.3.7" "X Version 11"
-.SH NAME
-XmbufQueryExtension, XmbufGetVersion, XmbufCreateBuffers, XmbufDestroyBuffers,
-XmbufDisplayBuffers, XmbufGetWindowAttributes, XmbufChangeWindowAttributes,
-XmbufGetBufferAttributes, XmbufChangeBufferAttributes, XmbufGetScreenInfo,
-XmbufCreateStereoWindow - X multibuffering functions
-.SH SYNTAX
-.EX
-\&#include <X11/extensions/multibuf.h>
-.sp
-Bool XmbufQueryExtension(
-    Display *dpy,
-    int *event_base_return,
-    int *error_base_return);
-.sp
-Status XmbufGetVersion(
-    Display *dpy,
-    int *major_version_return,
-    int *minor_version_return);
-.sp
-int XmbufCreateBuffers(
-    Display *dpy,
-    Window window,
-    int count,
-    int update_action,
-    int update_hint,
-    Multibuffer *buffers_update);
-.sp
-void XmbufDestroyBuffers(
-    Display *dpy,
-    Window window);
-.sp
-void XmbufDisplayBuffers(
-    Display *dpy,
-    int count,
-    Multibuffer *buffers,
-    int min_delay,
-    int max_delay);
-.sp
-Status XmbufGetWindowAttributes(
-    Display *dpy,
-    Window window,
-    XmbufWindowAttributes *attributes);
-.sp
-void XmbufChangeWindowAttributes(
-    Display *dpy,
-    Window window,
-    unsigned long valuemask,
-    XmbufSetWindowAttributes *attributes);
-.sp
-Status XmbufGetBufferAttributes(
-    Display *dpy,
-    Multibuffer buffer,
-    XmbufBufferAttributes *attributes);
-.sp
-void XmbufChangeBufferAttributes(
-    Display *dpy,
-    Multibuffer buffer,
-    unsigned long valuemask,
-    XmbufSetBufferAttributes *attributes);
-.sp
-Status XmbufGetScreenInfo(
-    Display *dpy,
-    Drawable drawable,
-    int *nmono_return,
-    XmbufBufferInfo **mono_info_return,
-    int *nstereo_return,
-    XmbufBufferInfo **stereo_info_return);
-.sp
-Window XmbufCreateStereoWindow(
-    Display *dpy,
-    Window parent,
-    int x,
-    int y,
-    unsigned int width,
-    unsigned int height,
-    unsigned int border_width,
-    int depth,
-    unsigned int class,                 /\&* InputOutput, InputOnly*/
-    Visual *visual,
-    unsigned long valuemask,
-    XSetWindowAttributes *attributes,
-    Multibuffer *left_return,
-    Multibuffer *right_return);
-.EE
-.SH STRUCTURES
-\fIEvents:\fP
-.EX
-typedef struct {
-    int type;   /\&* of event */
-    unsigned long serial;       /\&* # of last request processed by server */
-    int send_event;     /\&* true if this came from a SendEvent request */
-    Display *display;   /\&* Display the event was read from */
-    Multibuffer buffer; /\&* buffer of event */
-    int state;  /\&* see Clobbered constants above */
-} XmbufClobberNotifyEvent;
-.sp
-typedef struct {
-    int type;   /\&* of event */
-    unsigned long serial;       /\&* # of last request processed by server */
-    int send_event;     /\&* true if this came from a SendEvent request */
-    Display *display;   /\&* Display the event was read from */
-    Multibuffer buffer; /\&* buffer of event */
-} XmbufUpdateNotifyEvent;
-.EE
-.PP
-\fIPer-window attributes that can be got:\fP
-.EX
-typedef struct {
-    int displayed_index;	/\&* which buffer is being displayed */
-    int update_action;	/\&* Undefined, Background, Untouched, Copied */
-    int update_hint;	/\&* Frequent, Intermittent, Static */
-    int window_mode;	/\&* Mono, Stereo */
-    int nbuffers;	/\&* Number of buffers */
-    Multibuffer *buffers;	/\&* Buffers */
-} XmbufWindowAttributes;
-.EE
-.PP
-\fIPer-window attributes that can be set:\fP
-.EX
-typedef struct {
-    int update_hint;	/\&* Frequent, Intermittent, Static */
-} XmbufSetWindowAttributes;
-.EE
-.PP
-\fIPer-buffer attributes that can be got:\fP
-.EX
-typedef struct {
-    Window window;	/\&* which window this belongs to */
-    unsigned long event_mask;	/\&* events that have been selected */
-    int buffer_index;	/\&* which buffer is this */
-    int side;	/\&* Mono, Left, Right */
-} XmbufBufferAttributes;
-.EE
-.PP
-\fIPer-buffer attributes that can be set:\fP
-.EX
-typedef struct {
-    unsigned long event_mask;	/\&* events that have been selected */
-} XmbufSetBufferAttributes;
-.EE
-.PP
-\fIPer-screen buffer info (there will be lists of them):\fP
-.EX
-typedef struct {
-    VisualID visualid;	/\&* visual usable at this depth */
-    int max_buffers;	/\&* most buffers for this visual */
-    int depth;	/\&* depth of buffers to be created */
-} XmbufBufferInfo;
-.EE
-.SH DESCRIPTION
-The application programming library for the
-\fIX11 Double-Buffering, Multi-Buffering, and Stereo Extension\fP
-contains the interfaces described below.
-With the exception of
-.BR XmbufQueryExtension ,
-if any of these routines are
-called with a display that does not support the extension, the
-ExtensionErrorHandler (which can be set with
-.B XSetExtensionErrorHandler
-and functions the same way as
-.BR XSetErrorHandler )
-will be called and the function will then return.
-.PP
-.B XmbufQueryExtension
-returns
-.B True
-if the multibuffering/stereo extension is available on the given display.
-If the extension exists, the value of the first event
-code (which should be added to the event type constants
-.B MultibufferClobberNotify
-and
-.B MultibufferUpdateNotify
-to get the actual values) is stored into
-.I event_base_return
-and the value of the first error code
-(which should be added to the error type constant
-.B MultibufferBadBuffer
-to get the actual value) is stored into
-.IR error_base_return .
-.PP
-.B XmbufGetVersion
-gets the major and minor version numbers of the extension.
-The return
-value is zero if an error occurs or non-zero if no error happens.
-.PP
-.B XmbufCreateBuffers
-requests that
-.I count
-buffers be created with the given
-.I update_action
-and
-.I update_hint
-and be associated with the indicated
-.IR window .
-The number of buffers created is returned (zero if an error occurred)
-and
-.I buffers_update
-is filled in with that many Multibuffer identifiers.
-.PP
-.B XmbufDestroyBuffers
-destroys the buffers associated with the given
-.IR window .
-.PP
-.B XmbufDisplayBuffers
-displays the indicated buffers their appropriate windows within
-.I max_delay
-milliseconds after
-.I min_delay
-milliseconds have passed.
-No two buffers may be associated with the same window or else a Match
-error is generated.
-.PP
-.B XmbufGetWindowAttributes
-gets the multibuffering attributes that apply to all buffers associated
-with the given
-.IR window .
-The list of
-.I attributes
-returned may be freed with
-.BR XFree .
-Returns non-zero on success and zero if an error occurs.
-.PP
-.B XmbufChangeWindowAttributes
-sets the multibuffering attributes
-that apply to all buffers associated
-with the given window.
-This is currently limited to the
-.IR update_hint .
-.PP
-.B XmbufGetBufferAttributes
-gets the attributes for the indicated buffer.
-Returns non-zero on success and zero if an error occurs.
-.PP
-.B XmbufChangeBufferAttributes
-sets the
-.I attributes
-for the indicated
-.IR buffer .
-This is currently limited to the
-.IR event_mask .
-.PP
-.B XmbufGetScreenInfo
-gets the parameters controlling how mono and stereo windows may be
-created on the screen of the given
-.IR drawable .
-The numbers of sets of visual and depths are returned in
-.I nmono_return
-and
-.IR nstereo_return .
-If
-.I nmono_return
-is greater than zero, then
-.I mono_info_return
-is set to the address of an array of
-.B XmbufBufferInfo
-structures describing the
-various visuals and depths that may be used.
-Otherwise,
-.I mono_info_return
-is set to NULL.
-Similarly,
-.I stereo_info_return
-is set according to
-.IR nstereo_return .
-The storage returned in
-.I mono_info_return
-and
-.I stereo_info_return
-may be released by
-.BR XFree .
-If no errors are encountered, non-zero will be returned.
-.PP
-.B XmbufCreateStereoWindow
-creates a stereo window in the same way that
-.B XCreateWindow
-creates a mono window.
-The buffer ids for the left and right buffers are returned in
-.I left_return
-and
-.IR right_return ,
-respectively.
-If an extension error handler that returns is installed,
-.B None
-will be returned if the extension is not available on this display.
-.SH PREDEFINED VALUES
-Update_action field:
-.RS
-.nf
-.B MultibufferUpdateActionUndefined
-.B MultibufferUpdateActionBackground
-.B MultibufferUpdateActionUntouched
-.B MultibufferUpdateActionCopied
-.fi
-.RE
-.sp
-Update_hint field:
-.RS
-.nf
-.B MultibufferUpdateHintFrequent
-.B MultibufferUpdateHintIntermittent
-.B MultibufferUpdateHintStatic
-.fi
-.RE
-.sp
-Valuemask fields:
-.RS
-.nf
-.B MultibufferWindowUpdateHint
-.B MultibufferBufferEventMask
-.fi
-.RE
-.sp
-Mono vs. stereo and left vs. right:
-.RS
-.nf
-.B MultibufferModeMono
-.B MultibufferModeStereo
-.B MultibufferSideMono
-.B MultibufferSideLeft
-.B MultibufferSideRight
-.fi
-.RE
-.sp
-Clobber state:
-.RS
-.nf
-.B MultibufferUnclobbered
-.B MultibufferPartiallyClobbered
-.B MultibufferFullyClobbered
-.fi
-.RE
-.sp
-Event stuff:
-.RS
-.nf
-.B MultibufferClobberNotifyMask
-.B MultibufferUpdateNotifyMask
-.B MultibufferClobberNotify
-.B MultibufferUpdateNotify
-.B MultibufferNumberEvents
-.B MultibufferBadBuffer
-.B MultibufferNumberErrors
-.fi
-.RE
-.SH BUGS
-This manual page needs more work.
-.SH SEE ALSO
-\fIExtending X for Double Buffering, Multi-Buffering, and Stereo\fP
diff --git a/experiments/wasm-gui/third_party/libXext/man/XmbufChangeBufferAttributes.3 b/experiments/wasm-gui/third_party/libXext/man/XmbufChangeBufferAttributes.3
deleted file mode 100644
index 32bdd0386..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XmbufChangeBufferAttributes.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xmbuf.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XmbufChangeWindowAttributes.3 b/experiments/wasm-gui/third_party/libXext/man/XmbufChangeWindowAttributes.3
deleted file mode 100644
index 32bdd0386..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XmbufChangeWindowAttributes.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xmbuf.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XmbufCreateBuffers.3 b/experiments/wasm-gui/third_party/libXext/man/XmbufCreateBuffers.3
deleted file mode 100644
index 32bdd0386..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XmbufCreateBuffers.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xmbuf.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XmbufCreateStereoWindow.3 b/experiments/wasm-gui/third_party/libXext/man/XmbufCreateStereoWindow.3
deleted file mode 100644
index 32bdd0386..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XmbufCreateStereoWindow.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xmbuf.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XmbufDestroyBuffers.3 b/experiments/wasm-gui/third_party/libXext/man/XmbufDestroyBuffers.3
deleted file mode 100644
index 32bdd0386..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XmbufDestroyBuffers.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xmbuf.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XmbufDisplayBuffers.3 b/experiments/wasm-gui/third_party/libXext/man/XmbufDisplayBuffers.3
deleted file mode 100644
index 32bdd0386..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XmbufDisplayBuffers.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xmbuf.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XmbufGetBufferAttributes.3 b/experiments/wasm-gui/third_party/libXext/man/XmbufGetBufferAttributes.3
deleted file mode 100644
index 32bdd0386..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XmbufGetBufferAttributes.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xmbuf.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XmbufGetScreenInfo.3 b/experiments/wasm-gui/third_party/libXext/man/XmbufGetScreenInfo.3
deleted file mode 100644
index 32bdd0386..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XmbufGetScreenInfo.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xmbuf.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XmbufGetVersion.3 b/experiments/wasm-gui/third_party/libXext/man/XmbufGetVersion.3
deleted file mode 100644
index 32bdd0386..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XmbufGetVersion.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xmbuf.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XmbufGetWindowAttributes.3 b/experiments/wasm-gui/third_party/libXext/man/XmbufGetWindowAttributes.3
deleted file mode 100644
index 32bdd0386..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XmbufGetWindowAttributes.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xmbuf.3
diff --git a/experiments/wasm-gui/third_party/libXext/man/XmbufQueryExtension.3 b/experiments/wasm-gui/third_party/libXext/man/XmbufQueryExtension.3
deleted file mode 100644
index 32bdd0386..000000000
--- a/experiments/wasm-gui/third_party/libXext/man/XmbufQueryExtension.3
+++ /dev/null
@@ -1 +0,0 @@
-.so man3/Xmbuf.3
diff --git a/experiments/wasm-gui/third_party/libXext/missing b/experiments/wasm-gui/third_party/libXext/missing
deleted file mode 100755
index 5e450bab3..000000000
--- a/experiments/wasm-gui/third_party/libXext/missing
+++ /dev/null
@@ -1,236 +0,0 @@
-#! /bin/sh
-# Common wrapper for a few potentially missing GNU and other programs.
-
-scriptversion=2025-06-18.21; # UTC
-
-# shellcheck disable=SC2006,SC2268 # we must support pre-POSIX shells
-
-# Copyright (C) 1996-2025 Free Software Foundation, Inc.
-# Originally written by Fran,cois Pinard <pinard@iro.umontreal.ca>, 1996.
-
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2, or (at your option)
-# any later version.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <https://www.gnu.org/licenses/>.
-
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program that contains a
-# configuration script generated by Autoconf, you may include it under
-# the same distribution terms that you use for the rest of that program.
-
-if test $# -eq 0; then
-  echo 1>&2 "Try '$0 --help' for more information"
-  exit 1
-fi
-
-case $1 in
-
-  --is-lightweight)
-    # Used by our autoconf macros to check whether the available missing
-    # script is modern enough.
-    exit 0
-    ;;
-
-  --run)
-    # Back-compat with the calling convention used by older automake.
-    shift
-    ;;
-
-  -h|--h|--he|--hel|--help)
-    echo "\
-$0 [OPTION]... PROGRAM [ARGUMENT]...
-
-Run 'PROGRAM [ARGUMENT]...', returning a proper advice when this fails due
-to PROGRAM being missing or too old.
-
-Options:
-  -h, --help      display this help and exit
-  -v, --version   output version information and exit
-
-Supported PROGRAM values:
-aclocal autoconf autogen  autoheader autom4te automake autoreconf
-bison   flex     help2man lex        makeinfo perl     yacc
-
-Version suffixes to PROGRAM as well as the prefixes 'gnu-', 'gnu', and
-'g' are ignored when checking the name.
-
-Report bugs to <bug-automake@gnu.org>.
-GNU Automake home page: <https://www.gnu.org/software/automake/>.
-General help using GNU software: <https://www.gnu.org/gethelp/>."
-    exit $?
-    ;;
-
-  -v|--v|--ve|--ver|--vers|--versi|--versio|--version)
-    echo "missing (GNU Automake) $scriptversion"
-    exit $?
-    ;;
-
-  -*)
-    echo 1>&2 "$0: unknown '$1' option"
-    echo 1>&2 "Try '$0 --help' for more information"
-    exit 1
-    ;;
-
-esac
-
-# Run the given program, remember its exit status.
-"$@"; st=$?
-
-# If it succeeded, we are done.
-test $st -eq 0 && exit 0
-
-# Also exit now if we it failed (or wasn't found), and '--version' was
-# passed; such an option is passed most likely to detect whether the
-# program is present and works.
-case $2 in --version|--help) exit $st;; esac
-
-# Exit code 63 means version mismatch.  This often happens when the user
-# tries to use an ancient version of a tool on a file that requires a
-# minimum version.
-if test $st -eq 63; then
-  msg="probably too old"
-elif test $st -eq 127; then
-  # Program was missing.
-  msg="missing on your system"
-else
-  # Program was found and executed, but failed.  Give up.
-  exit $st
-fi
-
-perl_URL=https://www.perl.org/
-flex_URL=https://github.com/westes/flex
-gnu_software_URL=https://www.gnu.org/software
-
-program_details ()
-{
-  case $1 in
-    aclocal|automake|autoreconf)
-      echo "The '$1' program is part of the GNU Automake package:"
-      echo "<$gnu_software_URL/automake>"
-      echo "It also requires GNU Autoconf, GNU m4 and Perl in order to run:"
-      echo "<$gnu_software_URL/autoconf>"
-      echo "<$gnu_software_URL/m4/>"
-      echo "<$perl_URL>"
-      ;;
-    autoconf|autom4te|autoheader)
-      echo "The '$1' program is part of the GNU Autoconf package:"
-      echo "<$gnu_software_URL/autoconf/>"
-      echo "It also requires GNU m4 and Perl in order to run:"
-      echo "<$gnu_software_URL/m4/>"
-      echo "<$perl_URL>"
-      ;;
-    *)
-      :
-      ;;
-  esac
-}
-
-give_advice ()
-{
-  # Normalize program name to check for.
-  normalized_program=`echo "$1" | sed '
-    s/^gnu-//; t
-    s/^gnu//; t
-    s/^g//; t'`
-
-  printf '%s\n' "'$1' is $msg."
-
-  configure_deps="'configure.ac' or m4 files included by 'configure.ac'"
-  autoheader_deps="'acconfig.h'"
-  automake_deps="'Makefile.am'"
-  aclocal_deps="'acinclude.m4'"
-  case $normalized_program in
-    aclocal*)
-      echo "You should only need it if you modified $aclocal_deps or"
-      echo "$configure_deps."
-      ;;
-    autoconf*)
-      echo "You should only need it if you modified $configure_deps."
-      ;;
-    autogen*)
-      echo "You should only need it if you modified a '.def' or '.tpl' file."
-      echo "You may want to install the GNU AutoGen package:"
-      echo "<$gnu_software_URL/autogen/>"
-      ;;
-    autoheader*)
-      echo "You should only need it if you modified $autoheader_deps or"
-      echo "$configure_deps."
-      ;;
-    automake*)
-      echo "You should only need it if you modified $automake_deps or"
-      echo "$configure_deps."
-      ;;
-    autom4te*)
-      echo "You might have modified some maintainer files that require"
-      echo "the 'autom4te' program to be rebuilt."
-      ;;
-    autoreconf*)
-      echo "You should only need it if you modified $aclocal_deps or"
-      echo "$automake_deps or $autoheader_deps or $automake_deps or"
-      echo "$configure_deps."
-      ;;
-    bison*|yacc*)
-      echo "You should only need it if you modified a '.y' file."
-      echo "You may want to install the GNU Bison package:"
-      echo "<$gnu_software_URL/bison/>"
-      ;;
-    help2man*)
-      echo "You should only need it if you modified a dependency" \
-           "of a man page."
-      echo "You may want to install the GNU Help2man package:"
-      echo "<$gnu_software_URL/help2man/>"
-    ;;
-    lex*|flex*)
-      echo "You should only need it if you modified a '.l' file."
-      echo "You may want to install the Fast Lexical Analyzer package:"
-      echo "<$flex_URL>"
-      ;;
-    makeinfo*)
-      echo "You should only need it if you modified a '.texi' file, or"
-      echo "any other file indirectly affecting the aspect of the manual."
-      echo "You might want to install the Texinfo package:"
-      echo "<$gnu_software_URL/texinfo/>"
-      echo "The spurious makeinfo call might also be the consequence of"
-      echo "using a buggy 'make' (AIX, DU, IRIX), in which case you might"
-      echo "want to install GNU make:"
-      echo "<$gnu_software_URL/make/>"
-      ;;
-    perl*)
-      echo "You should only need it to run GNU Autoconf, GNU Automake, "
-      echo "  assorted other tools, or if you modified a Perl source file."
-      echo "You may want to install the Perl 5 language interpreter:"
-      echo "<$perl_URL>"
-      ;;
-    *)
-      echo "You might have modified some files without having the proper"
-      echo "tools for further handling them.  Check the 'README' file, it"
-      echo "often tells you about the needed prerequisites for installing"
-      echo "this package.  You may also peek at any GNU archive site, in"
-      echo "case some other package contains this missing '$1' program."
-      ;;
-  esac
-  program_details "$normalized_program"
-}
-
-give_advice "$1" | sed -e '1s/^/WARNING: /' \
-                       -e '2,$s/^/         /' >&2
-
-# Propagate the correct exit status (expected to be 127 for a program
-# not found, 63 for a program that failed due to version mismatch).
-exit $st
-
-# Local variables:
-# eval: (add-hook 'before-save-hook 'time-stamp nil t)
-# time-stamp-start: "scriptversion="
-# time-stamp-format: "%Y-%02m-%02d.%02H"
-# time-stamp-time-zone: "UTC0"
-# time-stamp-end: "; # UTC"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXext/specs/Makefile b/experiments/wasm-gui/third_party/libXext/specs/Makefile
deleted file mode 100644
index 55a04c81b..000000000
--- a/experiments/wasm-gui/third_party/libXext/specs/Makefile
+++ /dev/null
@@ -1,668 +0,0 @@
-# Makefile.in generated by automake 1.18.1 from Makefile.am.
-# specs/Makefile.  Generated from Makefile.in by configure.
-
-# Copyright (C) 1994-2025 Free Software Foundation, Inc.
-
-# This Makefile.in is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-
-
-#
-# Generate output formats for a single DocBook/XML with/without chapters
-#
-# Variables set by the calling Makefile:
-# shelfdir: the location where the docs/specs are installed. Typically $(docdir)
-# docbook:  the main DocBook/XML file, no chapters, appendix or image files
-# chapters: all files pulled in by an XInclude statement and images.
-#
-
-#
-# This makefile is intended for Users Documentation and Functional Specifications.
-# Do not use for Developer Documentation which is not installed and does not require olink.
-# Refer to http://www.x.org/releases/X11R7.6/doc/xorg-docs/ReleaseNotes.html#id2584393
-# for an explanation on documents classification.
-#
-
-
-am__is_gnu_make = { \
-  if test -z '$(MAKELEVEL)'; then \
-    false; \
-  elif test -n '$(MAKE_HOST)'; then \
-    true; \
-  elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \
-    true; \
-  else \
-    false; \
-  fi; \
-}
-am__make_running_with_option = \
-  case $${target_option-} in \
-      ?) ;; \
-      *) echo "am__make_running_with_option: internal error: invalid" \
-              "target option '$${target_option-}' specified" >&2; \
-         exit 1;; \
-  esac; \
-  has_opt=no; \
-  sane_makeflags=$$MAKEFLAGS; \
-  if $(am__is_gnu_make); then \
-    sane_makeflags=$$MFLAGS; \
-  else \
-    case $$MAKEFLAGS in \
-      *\\[\ \	]*) \
-        bs=\\; \
-        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
-          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
-    esac; \
-  fi; \
-  skip_next=no; \
-  strip_trailopt () \
-  { \
-    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
-  }; \
-  for flg in $$sane_makeflags; do \
-    test $$skip_next = yes && { skip_next=no; continue; }; \
-    case $$flg in \
-      *=*|--*) continue;; \
-        -*I) strip_trailopt 'I'; skip_next=yes;; \
-      -*I?*) strip_trailopt 'I';; \
-        -*O) strip_trailopt 'O'; skip_next=yes;; \
-      -*O?*) strip_trailopt 'O';; \
-        -*l) strip_trailopt 'l'; skip_next=yes;; \
-      -*l?*) strip_trailopt 'l';; \
-      -[dEDm]) skip_next=yes;; \
-      -[JT]) skip_next=yes;; \
-    esac; \
-    case $$flg in \
-      *$$target_option*) has_opt=yes; break;; \
-    esac; \
-  done; \
-  test $$has_opt = yes
-am__make_dryrun = (target_option=n; $(am__make_running_with_option))
-am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
-am__rm_f = rm -f $(am__rm_f_notfound)
-am__rm_rf = rm -rf $(am__rm_f_notfound)
-pkgdatadir = $(datadir)/libXext
-pkgincludedir = $(includedir)/libXext
-pkglibdir = $(libdir)/libXext
-pkglibexecdir = $(libexecdir)/libXext
-am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
-install_sh_DATA = $(install_sh) -c -m 644
-install_sh_PROGRAM = $(install_sh) -c
-install_sh_SCRIPT = $(install_sh) -c
-INSTALL_HEADER = $(INSTALL_DATA)
-transform = $(program_transform_name)
-NORMAL_INSTALL = :
-PRE_INSTALL = :
-POST_INSTALL = :
-NORMAL_UNINSTALL = :
-PRE_UNINSTALL = :
-POST_UNINSTALL = :
-build_triplet = x86_64-pc-linux-gnu
-host_triplet = wasm32-unknown-wasi
-###am__append_1 = $(docbook:.xml=.html)
-####am__append_2 = $(docbook:.xml=.txt)
-####am__append_3 = $(docbook:.xml=.pdf) \
-####	$(docbook:.xml=.ps)
-###am__append_4 = $(docbook:.xml=.html.db) \
-###	$(docbook:.xml=.pdf.db)
-subdir = specs
-ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/ax_gcc_builtin.m4 \
-	$(top_srcdir)/m4/libtool.m4 $(top_srcdir)/m4/ltoptions.m4 \
-	$(top_srcdir)/m4/ltsugar.m4 $(top_srcdir)/m4/ltversion.m4 \
-	$(top_srcdir)/m4/lt~obsolete.m4 $(top_srcdir)/configure.ac
-am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
-	$(ACLOCAL_M4)
-DIST_COMMON = $(srcdir)/Makefile.am $(am__dist_shelf_DATA_DIST) \
-	$(am__DIST_COMMON)
-mkinstalldirs = $(install_sh) -d
-CONFIG_HEADER = $(top_builddir)/config.h
-CONFIG_CLEAN_FILES =
-CONFIG_CLEAN_VPATH_FILES =
-AM_V_P = $(am__v_P_$(V))
-am__v_P_ = $(am__v_P_$(AM_DEFAULT_VERBOSITY))
-am__v_P_0 = false
-am__v_P_1 = :
-AM_V_GEN = $(am__v_GEN_$(V))
-am__v_GEN_ = $(am__v_GEN_$(AM_DEFAULT_VERBOSITY))
-am__v_GEN_0 = @echo "  GEN     " $@;
-am__v_GEN_1 = 
-AM_V_at = $(am__v_at_$(V))
-am__v_at_ = $(am__v_at_$(AM_DEFAULT_VERBOSITY))
-am__v_at_0 = @
-am__v_at_1 = 
-SOURCES =
-DIST_SOURCES =
-am__can_run_installinfo = \
-  case $$AM_UPDATE_INFO_DIR in \
-    n|no|NO) false;; \
-    *) (install-info --version) >/dev/null 2>&1;; \
-  esac
-am__dist_shelf_DATA_DIST = dbelib.xml dpmslib.xml shapelib.xml \
-	synclib.xml xtest1.xml
-am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
-am__vpath_adj = case $$p in \
-    $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
-    *) f=$$p;; \
-  esac;
-am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
-am__install_max = 40
-am__nobase_strip_setup = \
-  srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
-am__nobase_strip = \
-  for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
-am__nobase_list = $(am__nobase_strip_setup); \
-  for p in $$list; do echo "$$p $$p"; done | \
-  sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
-  $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
-    if (++n[$$2] == $(am__install_max)) \
-      { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
-    END { for (dir in files) print dir, files[dir] }'
-am__base_list = \
-  sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
-  sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
-am__uninstall_files_from_dir = { \
-  { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
-  || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
-       $(am__cd) "$$dir" && echo $$files | $(am__xargs_n) 40 $(am__rm_f); }; \
-  }
-am__installdirs = "$(DESTDIR)$(shelfdir)" "$(DESTDIR)$(shelfdir)"
-DATA = $(dist_shelf_DATA) $(shelf_DATA)
-am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
-am__DIST_COMMON = $(srcdir)/Makefile.in $(top_srcdir)/docbook.am
-DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
-ACLOCAL = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' aclocal-1.18
-ADMIN_MAN_DIR = $(mandir)/man$(ADMIN_MAN_SUFFIX)
-ADMIN_MAN_SUFFIX = 8
-AMTAR = $${TAR-tar}
-AM_DEFAULT_VERBOSITY = 0
-APP_MAN_DIR = $(mandir)/man$(APP_MAN_SUFFIX)
-APP_MAN_SUFFIX = 1
-AR = /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ar
-AUTOCONF = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' autoconf
-AUTOHEADER = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' autoheader
-AUTOMAKE = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' automake-1.18
-AWK = mawk
-BASE_CFLAGS =  -Wall -Wpointer-arith -Wmissing-declarations -Wformat=2 -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Wbad-function-cast -Wold-style-definition -Wunused -Wuninitialized -Wshadow -Wmissing-noreturn -Wmissing-format-attribute -Wredundant-decls -Werror=implicit -Werror=nonnull -Werror=init-self -Werror=main -Werror=missing-braces -Werror=sequence-point -Werror=return-type -Werror=trigraphs -Werror=array-bounds -Werror=write-strings -Werror=address -Werror=int-to-pointer-cast -Werror=pointer-to-int-cast
-CC = /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23
-CCDEPMODE = depmode=gcc3
-CFLAGS = --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h
-CHANGELOG_CMD = ((GIT_DIR=$(top_srcdir)/.git git log > $(top_srcdir)/.changelog.tmp) 2>/dev/null && mv $(top_srcdir)/.changelog.tmp $(top_srcdir)/ChangeLog) || (rm -f $(top_srcdir)/.changelog.tmp; test -e $(top_srcdir)/ChangeLog || ( touch $(top_srcdir)/ChangeLog; echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))
-CPPFLAGS = --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include
-CSCOPE = cscope
-CTAGS = ctags
-CWARNFLAGS =  -Wall -Wpointer-arith -Wmissing-declarations -Wformat=2 -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Wbad-function-cast -Wold-style-definition -Wunused -Wuninitialized -Wshadow -Wmissing-noreturn -Wmissing-format-attribute -Wredundant-decls -Werror=implicit -Werror=nonnull -Werror=init-self -Werror=main -Werror=missing-braces -Werror=sequence-point -Werror=return-type -Werror=trigraphs -Werror=array-bounds -Werror=write-strings -Werror=address -Werror=int-to-pointer-cast -Werror=pointer-to-int-cast -fno-strict-aliasing
-CYGPATH_W = echo
-DEFS = -DHAVE_CONFIG_H
-DEPDIR = .deps
-DLLTOOL = dlltool
-DRIVER_MAN_DIR = $(mandir)/man$(DRIVER_MAN_SUFFIX)
-DRIVER_MAN_SUFFIX = 4
-DSYMUTIL = 
-DUMPBIN = :
-ECHO_C = 
-ECHO_N = -n
-ECHO_T = 
-EGREP = /usr/bin/grep -E
-ETAGS = etags
-EXEEXT = 
-FGREP = /usr/bin/grep -F
-FILECMD = file
-FILE_MAN_DIR = $(mandir)/man$(FILE_MAN_SUFFIX)
-FILE_MAN_SUFFIX = 5
-FOP = 
-GREP = /usr/bin/grep
-INSTALL = /usr/bin/install -c
-INSTALL_CMD = (cp -f /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/util-macros/INSTALL $(top_srcdir)/.INSTALL.tmp && mv $(top_srcdir)/.INSTALL.tmp $(top_srcdir)/INSTALL) || (rm -f $(top_srcdir)/.INSTALL.tmp; test -e $(top_srcdir)/INSTALL || ( touch $(top_srcdir)/INSTALL; echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))
-INSTALL_DATA = ${INSTALL} -m 644
-INSTALL_PROGRAM = ${INSTALL}
-INSTALL_SCRIPT = ${INSTALL}
-INSTALL_STRIP_PROGRAM = $(install_sh) -c -s
-LD = /home/linuxbrew/.linuxbrew/bin/ld
-LDFLAGS = --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman
-LIBOBJS = 
-LIBS = 
-LIBTOOL = $(SHELL) $(top_builddir)/libtool
-LIB_MAN_DIR = $(mandir)/man$(LIB_MAN_SUFFIX)
-LIB_MAN_SUFFIX = 3
-LINT = 
-LINTLIB = 
-LINT_FLAGS = 
-LIPO = 
-LN_S = ln -s
-LTLIBOBJS = 
-LT_SYS_LIBRARY_PATH = 
-MAKEINFO = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' makeinfo
-MALLOC_ZERO_CFLAGS = -DMALLOC_0_RETURNS_NULL
-MANIFEST_TOOL = :
-MAN_SUBSTS = 	-e 's|__vendorversion__|"$(PACKAGE_STRING)" "$(XORG_MAN_PAGE)"|' 	-e 's|__xorgversion__|"$(PACKAGE_STRING)" "$(XORG_MAN_PAGE)"|' 	-e 's|__xservername__|Xorg|g' 	-e 's|__xconfigfile__|xorg.conf|g' 	-e 's|__projectroot__|$(prefix)|g' 	-e 's|__apploaddir__|$(appdefaultdir)|g' 	-e 's|__appmansuffix__|$(APP_MAN_SUFFIX)|g' 	-e 's|__drivermansuffix__|$(DRIVER_MAN_SUFFIX)|g' 	-e 's|__adminmansuffix__|$(ADMIN_MAN_SUFFIX)|g' 	-e 's|__libmansuffix__|$(LIB_MAN_SUFFIX)|g' 	-e 's|__miscmansuffix__|$(MISC_MAN_SUFFIX)|g' 	-e 's|__filemansuffix__|$(FILE_MAN_SUFFIX)|g'
-MISC_MAN_DIR = $(mandir)/man$(MISC_MAN_SUFFIX)
-MISC_MAN_SUFFIX = 7
-MKDIR_P = /usr/bin/mkdir -p
-NM = nm
-NMEDIT = 
-OBJDUMP = objdump
-OBJEXT = o
-OTOOL = 
-OTOOL64 = 
-PACKAGE = libXext
-PACKAGE_BUGREPORT = https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues
-PACKAGE_NAME = libXext
-PACKAGE_STRING = libXext 1.3.7
-PACKAGE_TARNAME = libXext
-PACKAGE_URL = 
-PACKAGE_VERSION = 1.3.7
-PATH_SEPARATOR = :
-PKG_CONFIG = /usr/bin/pkg-config
-PKG_CONFIG_LIBDIR = /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/pkgconfig
-PKG_CONFIG_PATH = 
-RANLIB = /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ranlib
-SED = /usr/bin/sed
-SET_MAKE = 
-SHELL = /bin/bash
-STRICT_CFLAGS =  -pedantic -Werror -Werror=attributes
-STRIP = strip
-STYLESHEET_SRCDIR = 
-VERSION = 1.3.7
-XEXT_CFLAGS = -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include 
-XEXT_LIBS = -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -lX11 
-XEXT_SOREV = 6:4:0
-XMALLOC_ZERO_CFLAGS = -DMALLOC_0_RETURNS_NULL
-XMLTO = 
-XORG_MAN_PAGE = X Version 11
-XORG_SGML_PATH = 
-XSLTPROC = /home/linuxbrew/.linuxbrew/bin/xsltproc
-XSL_STYLESHEET = 
-XTMALLOC_ZERO_CFLAGS = -DMALLOC_0_RETURNS_NULL -DXTMALLOC_BC
-abs_builddir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/specs
-abs_srcdir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/specs
-abs_top_builddir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext
-abs_top_srcdir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext
-ac_ct_AR = 
-ac_ct_CC = 
-ac_ct_DUMPBIN = link -dump
-am__include = include
-am__leading_dot = .
-am__quote = 
-am__rm_f_notfound = 
-am__tar = tar --format=ustar -chf - "$$tardir"
-am__untar = tar -xf -
-am__xargs_n = xargs -n
-bindir = ${exec_prefix}/bin
-build = x86_64-pc-linux-gnu
-build_alias = 
-build_cpu = x86_64
-build_os = linux-gnu
-build_vendor = pc
-builddir = .
-datadir = ${datarootdir}
-datarootdir = ${prefix}/share
-docdir = ${datarootdir}/doc/${PACKAGE_TARNAME}
-dvidir = ${docdir}
-exec_prefix = ${prefix}
-host = wasm32-unknown-wasi
-host_alias = wasm32-wasi
-host_cpu = wasm32
-host_os = wasi
-host_vendor = unknown
-htmldir = ${docdir}
-includedir = ${prefix}/include
-infodir = ${datarootdir}/info
-install_sh = ${SHELL} /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/install-sh
-libdir = ${exec_prefix}/lib
-libexecdir = ${exec_prefix}/libexec
-localedir = ${datarootdir}/locale
-localstatedir = ${prefix}/var
-mandir = ${datarootdir}/man
-mkdir_p = $(MKDIR_P)
-oldincludedir = /usr/include
-pdfdir = ${docdir}
-prefix = /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix
-program_transform_name = s,x,x,
-psdir = ${docdir}
-runstatedir = ${localstatedir}/run
-sbindir = ${exec_prefix}/sbin
-sharedstatedir = ${prefix}/com
-srcdir = .
-sysconfdir = ${prefix}/etc
-target_alias = 
-top_build_prefix = ../
-top_builddir = ..
-top_srcdir = ..
-
-# Main DocBook/XML files (DOCTYPE book)
-#docbook = dbelib.xml dpmslib.xml shapelib.xml synclib.xml xtest1.xml
-
-# The location where the DocBook/XML files and their generated formats are installed
-#shelfdir = $(docdir)
-
-# DocBook/XML generated output formats to be installed
-#shelf_DATA = $(am__append_1) $(am__append_2) \
-#	$(am__append_3) $(am__append_4)
-
-# DocBook/XML file with chapters, appendix and images it includes
-#dist_shelf_DATA = $(docbook) $(chapters)
-###XMLTO_SEARCHPATH_FLAGS = \
-###	--searchpath "$(XORG_SGML_PATH)/X11" 		\
-###	--searchpath "$(abs_top_builddir)"
-
-###XMLTO_HTML_OLINK_FLAGS = \
-###	--stringparam target.database.document=$(XORG_SGML_PATH)/X11/dbs/masterdb.html.xml \
-###	--stringparam current.docid="$(<:.xml=)"
-
-###XMLTO_HTML_STYLESHEET_FLAGS = -x $(STYLESHEET_SRCDIR)/xorg-xhtml.xsl
-###XMLTO_HTML_FLAGS = \
-###	$(XMLTO_SEARCHPATH_FLAGS)			\
-###	$(XMLTO_HTML_STYLESHEET_FLAGS)			\
-###	$(XMLTO_HTML_OLINK_FLAGS)
-
-####XMLTO_FO_IMAGEPATH_FLAGS = --stringparam img.src.path=$(abs_builddir)/
-####XMLTO_PDF_OLINK_FLAGS = \
-####	--stringparam target.database.document=$(XORG_SGML_PATH)/X11/dbs/masterdb.pdf.xml \
-####	--stringparam current.docid="$(<:.xml=)"
-
-####XMLTO_FO_STYLESHEET_FLAGS = -x $(STYLESHEET_SRCDIR)/xorg-fo.xsl
-####XMLTO_FO_FLAGS = \
-####	$(XMLTO_SEARCHPATH_FLAGS)			\
-####	$(XMLTO_FO_STYLESHEET_FLAGS)			\
-####	$(XMLTO_FO_IMAGEPATH_FLAGS)			\
-####	$(XMLTO_PDF_OLINK_FLAGS)
-
-
-# Generate documents cross-reference target databases
-###XSLT_SEARCHPATH_FLAGS = \
-###	--path "$(XORG_SGML_PATH)/X11"			\
-###	--path "$(abs_top_builddir)"
-
-###XSLT_OLINK_FLAGS = \
-###	--stringparam targets.filename "$@" 		\
-###	--stringparam collect.xref.targets "only" 	\
-###	--stringparam olink.base.uri "$(@:.db=)"
-
-###XSLT_HTML_FLAGS = \
-###	$(XSLT_SEARCHPATH_FLAGS) 			\
-###	$(XSLT_OLINK_FLAGS)				\
-###	--nonet --xinclude				\
-###	$(STYLESHEET_SRCDIR)/xorg-xhtml.xsl
-
-###XSLT_PDF_FLAGS = \
-###	$(XSLT_SEARCHPATH_FLAGS) 			\
-###	$(XSLT_OLINK_FLAGS)				\
-###	--nonet --xinclude				\
-###	$(STYLESHEET_SRCDIR)/xorg-fo.xsl
-
-#CLEANFILES = $(shelf_DATA)
-all: all-am
-
-.SUFFIXES:
-$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am $(top_srcdir)/docbook.am $(am__configure_deps)
-	@for dep in $?; do \
-	  case '$(am__configure_deps)' in \
-	    *$$dep*) \
-	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
-	        && { if test -f $@; then exit 0; else break; fi; }; \
-	      exit 1;; \
-	  esac; \
-	done; \
-	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign specs/Makefile'; \
-	$(am__cd) $(top_srcdir) && \
-	  $(AUTOMAKE) --foreign specs/Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
-	@case '$?' in \
-	  *config.status*) \
-	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
-	  *) \
-	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles)'; \
-	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles);; \
-	esac;
-$(top_srcdir)/docbook.am $(am__empty):
-
-$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-
-$(top_srcdir)/configure:  $(am__configure_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(am__aclocal_m4_deps):
-
-mostlyclean-libtool:
-	-rm -f *.lo
-
-clean-libtool:
-	-rm -rf .libs _libs
-install-dist_shelfDATA: $(dist_shelf_DATA)
-	@$(NORMAL_INSTALL)
-	@list='$(dist_shelf_DATA)'; test -n "$(shelfdir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(shelfdir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(shelfdir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(shelfdir)'"; \
-	  $(INSTALL_DATA) $$files "$(DESTDIR)$(shelfdir)" || exit $$?; \
-	done
-
-uninstall-dist_shelfDATA:
-	@$(NORMAL_UNINSTALL)
-	@list='$(dist_shelf_DATA)'; test -n "$(shelfdir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(shelfdir)'; $(am__uninstall_files_from_dir)
-install-shelfDATA: $(shelf_DATA)
-	@$(NORMAL_INSTALL)
-	@list='$(shelf_DATA)'; test -n "$(shelfdir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(shelfdir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(shelfdir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(shelfdir)'"; \
-	  $(INSTALL_DATA) $$files "$(DESTDIR)$(shelfdir)" || exit $$?; \
-	done
-
-uninstall-shelfDATA:
-	@$(NORMAL_UNINSTALL)
-	@list='$(shelf_DATA)'; test -n "$(shelfdir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(shelfdir)'; $(am__uninstall_files_from_dir)
-tags TAGS:
-
-ctags CTAGS:
-
-cscope cscopelist:
-
-
-distdir: $(BUILT_SOURCES)
-	$(MAKE) $(AM_MAKEFLAGS) distdir-am
-
-distdir-am: $(DISTFILES)
-	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	list='$(DISTFILES)'; \
-	  dist_files=`for file in $$list; do echo $$file; done | \
-	  sed -e "s|^$$srcdirstrip/||;t" \
-	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
-	case $$dist_files in \
-	  */*) $(MKDIR_P) `echo "$$dist_files" | \
-			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
-			   sort -u` ;; \
-	esac; \
-	for file in $$dist_files; do \
-	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
-	  if test -d $$d/$$file; then \
-	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
-	    if test -d "$(distdir)/$$file"; then \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
-	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
-	  else \
-	    test -f "$(distdir)/$$file" \
-	    || cp -p $$d/$$file "$(distdir)/$$file" \
-	    || exit 1; \
-	  fi; \
-	done
-check-am: all-am
-check: check-am
-all-am: Makefile $(DATA)
-installdirs:
-	for dir in "$(DESTDIR)$(shelfdir)" "$(DESTDIR)$(shelfdir)"; do \
-	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
-	done
-install: install-am
-install-exec: install-exec-am
-install-data: install-data-am
-uninstall: uninstall-am
-
-install-am: all-am
-	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
-
-installcheck: installcheck-am
-install-strip:
-	if test -z '$(STRIP)'; then \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	      install; \
-	else \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
-	fi
-mostlyclean-generic:
-
-clean-generic:
-	-$(am__rm_f) $(CLEANFILES)
-
-distclean-generic:
-	-$(am__rm_f) $(CONFIG_CLEAN_FILES)
-	-test . = "$(srcdir)" || $(am__rm_f) $(CONFIG_CLEAN_VPATH_FILES)
-
-maintainer-clean-generic:
-	@echo "This command is intended for maintainers to use"
-	@echo "it deletes files that may require special tools to rebuild."
-clean: clean-am
-
-clean-am: clean-generic clean-libtool mostlyclean-am
-
-distclean: distclean-am
-	-rm -f Makefile
-distclean-am: clean-am distclean-generic
-
-dvi: dvi-am
-
-dvi-am:
-
-html: html-am
-
-html-am:
-
-info: info-am
-
-info-am:
-
-install-data-am: install-dist_shelfDATA install-shelfDATA
-
-install-dvi: install-dvi-am
-
-install-dvi-am:
-
-install-exec-am:
-
-install-html: install-html-am
-
-install-html-am:
-
-install-info: install-info-am
-
-install-info-am:
-
-install-man:
-
-install-pdf: install-pdf-am
-
-install-pdf-am:
-
-install-ps: install-ps-am
-
-install-ps-am:
-
-installcheck-am:
-
-maintainer-clean: maintainer-clean-am
-	-rm -f Makefile
-maintainer-clean-am: distclean-am maintainer-clean-generic
-
-mostlyclean: mostlyclean-am
-
-mostlyclean-am: mostlyclean-generic mostlyclean-libtool
-
-pdf: pdf-am
-
-pdf-am:
-
-ps: ps-am
-
-ps-am:
-
-uninstall-am: uninstall-dist_shelfDATA uninstall-shelfDATA
-
-.MAKE: install-am install-strip
-
-.PHONY: all all-am check check-am clean clean-generic clean-libtool \
-	cscopelist-am ctags-am distclean distclean-generic \
-	distclean-libtool distdir dvi dvi-am html html-am info info-am \
-	install install-am install-data install-data-am \
-	install-dist_shelfDATA install-dvi install-dvi-am install-exec \
-	install-exec-am install-html install-html-am install-info \
-	install-info-am install-man install-pdf install-pdf-am \
-	install-ps install-ps-am install-shelfDATA install-strip \
-	installcheck installcheck-am installdirs maintainer-clean \
-	maintainer-clean-generic mostlyclean mostlyclean-generic \
-	mostlyclean-libtool pdf pdf-am ps ps-am tags-am uninstall \
-	uninstall-am uninstall-dist_shelfDATA uninstall-shelfDATA
-
-.PRECIOUS: Makefile
-
-###%.html: %.xml $(chapters)
-###	$(AM_V_GEN)$(XMLTO) $(XMLTO_HTML_FLAGS) xhtml-nochunks $<
-####%.txt: %.xml $(chapters)
-####	$(AM_V_GEN)$(XMLTO) $(XMLTO_HTML_FLAGS) txt $<
-####%.pdf: %.xml $(chapters)
-####	$(AM_V_GEN)$(XMLTO) $(XMLTO_FO_FLAGS) --with-fop pdf $<
-####%.ps: %.xml $(chapters)
-####	$(AM_V_GEN)$(XMLTO) $(XMLTO_FO_FLAGS) --with-fop ps $<
-###%.html.db: %.xml  $(chapters)
-###	$(AM_V_GEN)$(XSLTPROC) $(XSLT_HTML_FLAGS) $<
-###%.pdf.db: %.xml $(chapters)
-###	$(AM_V_GEN)$(XSLTPROC) $(XSLT_PDF_FLAGS) $<
-
-# Generate DocBook/XML output formats with or without stylesheets
-
-# Tell versions [3.59,3.63) of GNU make to not export all variables.
-# Otherwise a system limit (for SysV at least) may be exceeded.
-.NOEXPORT:
-
-# Tell GNU make to disable its built-in pattern rules.
-%:: %,v
-%:: RCS/%,v
-%:: RCS/%
-%:: s.%
-%:: SCCS/s.%
diff --git a/experiments/wasm-gui/third_party/libXext/specs/Makefile.in b/experiments/wasm-gui/third_party/libXext/specs/Makefile.in
deleted file mode 100644
index b9493f945..000000000
--- a/experiments/wasm-gui/third_party/libXext/specs/Makefile.in
+++ /dev/null
@@ -1,668 +0,0 @@
-# Makefile.in generated by automake 1.18.1 from Makefile.am.
-# @configure_input@
-
-# Copyright (C) 1994-2025 Free Software Foundation, Inc.
-
-# This Makefile.in is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-@SET_MAKE@
-
-#
-# Generate output formats for a single DocBook/XML with/without chapters
-#
-# Variables set by the calling Makefile:
-# shelfdir: the location where the docs/specs are installed. Typically $(docdir)
-# docbook:  the main DocBook/XML file, no chapters, appendix or image files
-# chapters: all files pulled in by an XInclude statement and images.
-#
-
-#
-# This makefile is intended for Users Documentation and Functional Specifications.
-# Do not use for Developer Documentation which is not installed and does not require olink.
-# Refer to http://www.x.org/releases/X11R7.6/doc/xorg-docs/ReleaseNotes.html#id2584393
-# for an explanation on documents classification.
-#
-
-VPATH = @srcdir@
-am__is_gnu_make = { \
-  if test -z '$(MAKELEVEL)'; then \
-    false; \
-  elif test -n '$(MAKE_HOST)'; then \
-    true; \
-  elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \
-    true; \
-  else \
-    false; \
-  fi; \
-}
-am__make_running_with_option = \
-  case $${target_option-} in \
-      ?) ;; \
-      *) echo "am__make_running_with_option: internal error: invalid" \
-              "target option '$${target_option-}' specified" >&2; \
-         exit 1;; \
-  esac; \
-  has_opt=no; \
-  sane_makeflags=$$MAKEFLAGS; \
-  if $(am__is_gnu_make); then \
-    sane_makeflags=$$MFLAGS; \
-  else \
-    case $$MAKEFLAGS in \
-      *\\[\ \	]*) \
-        bs=\\; \
-        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
-          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
-    esac; \
-  fi; \
-  skip_next=no; \
-  strip_trailopt () \
-  { \
-    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
-  }; \
-  for flg in $$sane_makeflags; do \
-    test $$skip_next = yes && { skip_next=no; continue; }; \
-    case $$flg in \
-      *=*|--*) continue;; \
-        -*I) strip_trailopt 'I'; skip_next=yes;; \
-      -*I?*) strip_trailopt 'I';; \
-        -*O) strip_trailopt 'O'; skip_next=yes;; \
-      -*O?*) strip_trailopt 'O';; \
-        -*l) strip_trailopt 'l'; skip_next=yes;; \
-      -*l?*) strip_trailopt 'l';; \
-      -[dEDm]) skip_next=yes;; \
-      -[JT]) skip_next=yes;; \
-    esac; \
-    case $$flg in \
-      *$$target_option*) has_opt=yes; break;; \
-    esac; \
-  done; \
-  test $$has_opt = yes
-am__make_dryrun = (target_option=n; $(am__make_running_with_option))
-am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
-am__rm_f = rm -f $(am__rm_f_notfound)
-am__rm_rf = rm -rf $(am__rm_f_notfound)
-pkgdatadir = $(datadir)/@PACKAGE@
-pkgincludedir = $(includedir)/@PACKAGE@
-pkglibdir = $(libdir)/@PACKAGE@
-pkglibexecdir = $(libexecdir)/@PACKAGE@
-am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
-install_sh_DATA = $(install_sh) -c -m 644
-install_sh_PROGRAM = $(install_sh) -c
-install_sh_SCRIPT = $(install_sh) -c
-INSTALL_HEADER = $(INSTALL_DATA)
-transform = $(program_transform_name)
-NORMAL_INSTALL = :
-PRE_INSTALL = :
-POST_INSTALL = :
-NORMAL_UNINSTALL = :
-PRE_UNINSTALL = :
-POST_UNINSTALL = :
-build_triplet = @build@
-host_triplet = @host@
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@am__append_1 = $(docbook:.xml=.html)
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TEXT_TRUE@@HAVE_XMLTO_TRUE@am__append_2 = $(docbook:.xml=.txt)
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@am__append_3 = $(docbook:.xml=.pdf) \
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	$(docbook:.xml=.ps)
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@am__append_4 = $(docbook:.xml=.html.db) \
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	$(docbook:.xml=.pdf.db)
-subdir = specs
-ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/ax_gcc_builtin.m4 \
-	$(top_srcdir)/m4/libtool.m4 $(top_srcdir)/m4/ltoptions.m4 \
-	$(top_srcdir)/m4/ltsugar.m4 $(top_srcdir)/m4/ltversion.m4 \
-	$(top_srcdir)/m4/lt~obsolete.m4 $(top_srcdir)/configure.ac
-am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
-	$(ACLOCAL_M4)
-DIST_COMMON = $(srcdir)/Makefile.am $(am__dist_shelf_DATA_DIST) \
-	$(am__DIST_COMMON)
-mkinstalldirs = $(install_sh) -d
-CONFIG_HEADER = $(top_builddir)/config.h
-CONFIG_CLEAN_FILES =
-CONFIG_CLEAN_VPATH_FILES =
-AM_V_P = $(am__v_P_@AM_V@)
-am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
-am__v_P_0 = false
-am__v_P_1 = :
-AM_V_GEN = $(am__v_GEN_@AM_V@)
-am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
-am__v_GEN_0 = @echo "  GEN     " $@;
-am__v_GEN_1 = 
-AM_V_at = $(am__v_at_@AM_V@)
-am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
-am__v_at_0 = @
-am__v_at_1 = 
-SOURCES =
-DIST_SOURCES =
-am__can_run_installinfo = \
-  case $$AM_UPDATE_INFO_DIR in \
-    n|no|NO) false;; \
-    *) (install-info --version) >/dev/null 2>&1;; \
-  esac
-am__dist_shelf_DATA_DIST = dbelib.xml dpmslib.xml shapelib.xml \
-	synclib.xml xtest1.xml
-am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
-am__vpath_adj = case $$p in \
-    $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
-    *) f=$$p;; \
-  esac;
-am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
-am__install_max = 40
-am__nobase_strip_setup = \
-  srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
-am__nobase_strip = \
-  for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
-am__nobase_list = $(am__nobase_strip_setup); \
-  for p in $$list; do echo "$$p $$p"; done | \
-  sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
-  $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
-    if (++n[$$2] == $(am__install_max)) \
-      { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
-    END { for (dir in files) print dir, files[dir] }'
-am__base_list = \
-  sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
-  sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
-am__uninstall_files_from_dir = { \
-  { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
-  || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
-       $(am__cd) "$$dir" && echo $$files | $(am__xargs_n) 40 $(am__rm_f); }; \
-  }
-am__installdirs = "$(DESTDIR)$(shelfdir)" "$(DESTDIR)$(shelfdir)"
-DATA = $(dist_shelf_DATA) $(shelf_DATA)
-am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
-am__DIST_COMMON = $(srcdir)/Makefile.in $(top_srcdir)/docbook.am
-DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
-ACLOCAL = @ACLOCAL@
-ADMIN_MAN_DIR = @ADMIN_MAN_DIR@
-ADMIN_MAN_SUFFIX = @ADMIN_MAN_SUFFIX@
-AMTAR = @AMTAR@
-AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
-APP_MAN_DIR = @APP_MAN_DIR@
-APP_MAN_SUFFIX = @APP_MAN_SUFFIX@
-AR = @AR@
-AUTOCONF = @AUTOCONF@
-AUTOHEADER = @AUTOHEADER@
-AUTOMAKE = @AUTOMAKE@
-AWK = @AWK@
-BASE_CFLAGS = @BASE_CFLAGS@
-CC = @CC@
-CCDEPMODE = @CCDEPMODE@
-CFLAGS = @CFLAGS@
-CHANGELOG_CMD = @CHANGELOG_CMD@
-CPPFLAGS = @CPPFLAGS@
-CSCOPE = @CSCOPE@
-CTAGS = @CTAGS@
-CWARNFLAGS = @CWARNFLAGS@
-CYGPATH_W = @CYGPATH_W@
-DEFS = @DEFS@
-DEPDIR = @DEPDIR@
-DLLTOOL = @DLLTOOL@
-DRIVER_MAN_DIR = @DRIVER_MAN_DIR@
-DRIVER_MAN_SUFFIX = @DRIVER_MAN_SUFFIX@
-DSYMUTIL = @DSYMUTIL@
-DUMPBIN = @DUMPBIN@
-ECHO_C = @ECHO_C@
-ECHO_N = @ECHO_N@
-ECHO_T = @ECHO_T@
-EGREP = @EGREP@
-ETAGS = @ETAGS@
-EXEEXT = @EXEEXT@
-FGREP = @FGREP@
-FILECMD = @FILECMD@
-FILE_MAN_DIR = @FILE_MAN_DIR@
-FILE_MAN_SUFFIX = @FILE_MAN_SUFFIX@
-FOP = @FOP@
-GREP = @GREP@
-INSTALL = @INSTALL@
-INSTALL_CMD = @INSTALL_CMD@
-INSTALL_DATA = @INSTALL_DATA@
-INSTALL_PROGRAM = @INSTALL_PROGRAM@
-INSTALL_SCRIPT = @INSTALL_SCRIPT@
-INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
-LD = @LD@
-LDFLAGS = @LDFLAGS@
-LIBOBJS = @LIBOBJS@
-LIBS = @LIBS@
-LIBTOOL = @LIBTOOL@
-LIB_MAN_DIR = @LIB_MAN_DIR@
-LIB_MAN_SUFFIX = @LIB_MAN_SUFFIX@
-LINT = @LINT@
-LINTLIB = @LINTLIB@
-LINT_FLAGS = @LINT_FLAGS@
-LIPO = @LIPO@
-LN_S = @LN_S@
-LTLIBOBJS = @LTLIBOBJS@
-LT_SYS_LIBRARY_PATH = @LT_SYS_LIBRARY_PATH@
-MAKEINFO = @MAKEINFO@
-MALLOC_ZERO_CFLAGS = @MALLOC_ZERO_CFLAGS@
-MANIFEST_TOOL = @MANIFEST_TOOL@
-MAN_SUBSTS = @MAN_SUBSTS@
-MISC_MAN_DIR = @MISC_MAN_DIR@
-MISC_MAN_SUFFIX = @MISC_MAN_SUFFIX@
-MKDIR_P = @MKDIR_P@
-NM = @NM@
-NMEDIT = @NMEDIT@
-OBJDUMP = @OBJDUMP@
-OBJEXT = @OBJEXT@
-OTOOL = @OTOOL@
-OTOOL64 = @OTOOL64@
-PACKAGE = @PACKAGE@
-PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
-PACKAGE_NAME = @PACKAGE_NAME@
-PACKAGE_STRING = @PACKAGE_STRING@
-PACKAGE_TARNAME = @PACKAGE_TARNAME@
-PACKAGE_URL = @PACKAGE_URL@
-PACKAGE_VERSION = @PACKAGE_VERSION@
-PATH_SEPARATOR = @PATH_SEPARATOR@
-PKG_CONFIG = @PKG_CONFIG@
-PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
-PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
-RANLIB = @RANLIB@
-SED = @SED@
-SET_MAKE = @SET_MAKE@
-SHELL = @SHELL@
-STRICT_CFLAGS = @STRICT_CFLAGS@
-STRIP = @STRIP@
-STYLESHEET_SRCDIR = @STYLESHEET_SRCDIR@
-VERSION = @VERSION@
-XEXT_CFLAGS = @XEXT_CFLAGS@
-XEXT_LIBS = @XEXT_LIBS@
-XEXT_SOREV = @XEXT_SOREV@
-XMALLOC_ZERO_CFLAGS = @XMALLOC_ZERO_CFLAGS@
-XMLTO = @XMLTO@
-XORG_MAN_PAGE = @XORG_MAN_PAGE@
-XORG_SGML_PATH = @XORG_SGML_PATH@
-XSLTPROC = @XSLTPROC@
-XSL_STYLESHEET = @XSL_STYLESHEET@
-XTMALLOC_ZERO_CFLAGS = @XTMALLOC_ZERO_CFLAGS@
-abs_builddir = @abs_builddir@
-abs_srcdir = @abs_srcdir@
-abs_top_builddir = @abs_top_builddir@
-abs_top_srcdir = @abs_top_srcdir@
-ac_ct_AR = @ac_ct_AR@
-ac_ct_CC = @ac_ct_CC@
-ac_ct_DUMPBIN = @ac_ct_DUMPBIN@
-am__include = @am__include@
-am__leading_dot = @am__leading_dot@
-am__quote = @am__quote@
-am__rm_f_notfound = @am__rm_f_notfound@
-am__tar = @am__tar@
-am__untar = @am__untar@
-am__xargs_n = @am__xargs_n@
-bindir = @bindir@
-build = @build@
-build_alias = @build_alias@
-build_cpu = @build_cpu@
-build_os = @build_os@
-build_vendor = @build_vendor@
-builddir = @builddir@
-datadir = @datadir@
-datarootdir = @datarootdir@
-docdir = @docdir@
-dvidir = @dvidir@
-exec_prefix = @exec_prefix@
-host = @host@
-host_alias = @host_alias@
-host_cpu = @host_cpu@
-host_os = @host_os@
-host_vendor = @host_vendor@
-htmldir = @htmldir@
-includedir = @includedir@
-infodir = @infodir@
-install_sh = @install_sh@
-libdir = @libdir@
-libexecdir = @libexecdir@
-localedir = @localedir@
-localstatedir = @localstatedir@
-mandir = @mandir@
-mkdir_p = @mkdir_p@
-oldincludedir = @oldincludedir@
-pdfdir = @pdfdir@
-prefix = @prefix@
-program_transform_name = @program_transform_name@
-psdir = @psdir@
-runstatedir = @runstatedir@
-sbindir = @sbindir@
-sharedstatedir = @sharedstatedir@
-srcdir = @srcdir@
-sysconfdir = @sysconfdir@
-target_alias = @target_alias@
-top_build_prefix = @top_build_prefix@
-top_builddir = @top_builddir@
-top_srcdir = @top_srcdir@
-
-# Main DocBook/XML files (DOCTYPE book)
-@ENABLE_SPECS_TRUE@docbook = dbelib.xml dpmslib.xml shapelib.xml synclib.xml xtest1.xml
-
-# The location where the DocBook/XML files and their generated formats are installed
-@ENABLE_SPECS_TRUE@shelfdir = $(docdir)
-
-# DocBook/XML generated output formats to be installed
-@ENABLE_SPECS_TRUE@shelf_DATA = $(am__append_1) $(am__append_2) \
-@ENABLE_SPECS_TRUE@	$(am__append_3) $(am__append_4)
-
-# DocBook/XML file with chapters, appendix and images it includes
-@ENABLE_SPECS_TRUE@dist_shelf_DATA = $(docbook) $(chapters)
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@XMLTO_SEARCHPATH_FLAGS = \
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	--searchpath "$(XORG_SGML_PATH)/X11" 		\
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	--searchpath "$(abs_top_builddir)"
-
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@XMLTO_HTML_OLINK_FLAGS = \
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	--stringparam target.database.document=$(XORG_SGML_PATH)/X11/dbs/masterdb.html.xml \
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	--stringparam current.docid="$(<:.xml=)"
-
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@XMLTO_HTML_STYLESHEET_FLAGS = -x $(STYLESHEET_SRCDIR)/xorg-xhtml.xsl
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@XMLTO_HTML_FLAGS = \
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	$(XMLTO_SEARCHPATH_FLAGS)			\
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	$(XMLTO_HTML_STYLESHEET_FLAGS)			\
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	$(XMLTO_HTML_OLINK_FLAGS)
-
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@XMLTO_FO_IMAGEPATH_FLAGS = --stringparam img.src.path=$(abs_builddir)/
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@XMLTO_PDF_OLINK_FLAGS = \
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	--stringparam target.database.document=$(XORG_SGML_PATH)/X11/dbs/masterdb.pdf.xml \
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	--stringparam current.docid="$(<:.xml=)"
-
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@XMLTO_FO_STYLESHEET_FLAGS = -x $(STYLESHEET_SRCDIR)/xorg-fo.xsl
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@XMLTO_FO_FLAGS = \
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	$(XMLTO_SEARCHPATH_FLAGS)			\
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	$(XMLTO_FO_STYLESHEET_FLAGS)			\
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	$(XMLTO_FO_IMAGEPATH_FLAGS)			\
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	$(XMLTO_PDF_OLINK_FLAGS)
-
-
-# Generate documents cross-reference target databases
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@XSLT_SEARCHPATH_FLAGS = \
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	--path "$(XORG_SGML_PATH)/X11"			\
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	--path "$(abs_top_builddir)"
-
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@XSLT_OLINK_FLAGS = \
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	--stringparam targets.filename "$@" 		\
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	--stringparam collect.xref.targets "only" 	\
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	--stringparam olink.base.uri "$(@:.db=)"
-
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@XSLT_HTML_FLAGS = \
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	$(XSLT_SEARCHPATH_FLAGS) 			\
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	$(XSLT_OLINK_FLAGS)				\
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	--nonet --xinclude				\
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	$(STYLESHEET_SRCDIR)/xorg-xhtml.xsl
-
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@XSLT_PDF_FLAGS = \
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	$(XSLT_SEARCHPATH_FLAGS) 			\
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	$(XSLT_OLINK_FLAGS)				\
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	--nonet --xinclude				\
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	$(STYLESHEET_SRCDIR)/xorg-fo.xsl
-
-@ENABLE_SPECS_TRUE@CLEANFILES = $(shelf_DATA)
-all: all-am
-
-.SUFFIXES:
-$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am $(top_srcdir)/docbook.am $(am__configure_deps)
-	@for dep in $?; do \
-	  case '$(am__configure_deps)' in \
-	    *$$dep*) \
-	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
-	        && { if test -f $@; then exit 0; else break; fi; }; \
-	      exit 1;; \
-	  esac; \
-	done; \
-	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign specs/Makefile'; \
-	$(am__cd) $(top_srcdir) && \
-	  $(AUTOMAKE) --foreign specs/Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
-	@case '$?' in \
-	  *config.status*) \
-	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
-	  *) \
-	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles)'; \
-	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles);; \
-	esac;
-$(top_srcdir)/docbook.am $(am__empty):
-
-$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-
-$(top_srcdir)/configure:  $(am__configure_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(am__aclocal_m4_deps):
-
-mostlyclean-libtool:
-	-rm -f *.lo
-
-clean-libtool:
-	-rm -rf .libs _libs
-install-dist_shelfDATA: $(dist_shelf_DATA)
-	@$(NORMAL_INSTALL)
-	@list='$(dist_shelf_DATA)'; test -n "$(shelfdir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(shelfdir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(shelfdir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(shelfdir)'"; \
-	  $(INSTALL_DATA) $$files "$(DESTDIR)$(shelfdir)" || exit $$?; \
-	done
-
-uninstall-dist_shelfDATA:
-	@$(NORMAL_UNINSTALL)
-	@list='$(dist_shelf_DATA)'; test -n "$(shelfdir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(shelfdir)'; $(am__uninstall_files_from_dir)
-install-shelfDATA: $(shelf_DATA)
-	@$(NORMAL_INSTALL)
-	@list='$(shelf_DATA)'; test -n "$(shelfdir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(shelfdir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(shelfdir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(shelfdir)'"; \
-	  $(INSTALL_DATA) $$files "$(DESTDIR)$(shelfdir)" || exit $$?; \
-	done
-
-uninstall-shelfDATA:
-	@$(NORMAL_UNINSTALL)
-	@list='$(shelf_DATA)'; test -n "$(shelfdir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(shelfdir)'; $(am__uninstall_files_from_dir)
-tags TAGS:
-
-ctags CTAGS:
-
-cscope cscopelist:
-
-
-distdir: $(BUILT_SOURCES)
-	$(MAKE) $(AM_MAKEFLAGS) distdir-am
-
-distdir-am: $(DISTFILES)
-	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	list='$(DISTFILES)'; \
-	  dist_files=`for file in $$list; do echo $$file; done | \
-	  sed -e "s|^$$srcdirstrip/||;t" \
-	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
-	case $$dist_files in \
-	  */*) $(MKDIR_P) `echo "$$dist_files" | \
-			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
-			   sort -u` ;; \
-	esac; \
-	for file in $$dist_files; do \
-	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
-	  if test -d $$d/$$file; then \
-	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
-	    if test -d "$(distdir)/$$file"; then \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
-	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
-	  else \
-	    test -f "$(distdir)/$$file" \
-	    || cp -p $$d/$$file "$(distdir)/$$file" \
-	    || exit 1; \
-	  fi; \
-	done
-check-am: all-am
-check: check-am
-all-am: Makefile $(DATA)
-installdirs:
-	for dir in "$(DESTDIR)$(shelfdir)" "$(DESTDIR)$(shelfdir)"; do \
-	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
-	done
-install: install-am
-install-exec: install-exec-am
-install-data: install-data-am
-uninstall: uninstall-am
-
-install-am: all-am
-	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
-
-installcheck: installcheck-am
-install-strip:
-	if test -z '$(STRIP)'; then \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	      install; \
-	else \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
-	fi
-mostlyclean-generic:
-
-clean-generic:
-	-$(am__rm_f) $(CLEANFILES)
-
-distclean-generic:
-	-$(am__rm_f) $(CONFIG_CLEAN_FILES)
-	-test . = "$(srcdir)" || $(am__rm_f) $(CONFIG_CLEAN_VPATH_FILES)
-
-maintainer-clean-generic:
-	@echo "This command is intended for maintainers to use"
-	@echo "it deletes files that may require special tools to rebuild."
-clean: clean-am
-
-clean-am: clean-generic clean-libtool mostlyclean-am
-
-distclean: distclean-am
-	-rm -f Makefile
-distclean-am: clean-am distclean-generic
-
-dvi: dvi-am
-
-dvi-am:
-
-html: html-am
-
-html-am:
-
-info: info-am
-
-info-am:
-
-install-data-am: install-dist_shelfDATA install-shelfDATA
-
-install-dvi: install-dvi-am
-
-install-dvi-am:
-
-install-exec-am:
-
-install-html: install-html-am
-
-install-html-am:
-
-install-info: install-info-am
-
-install-info-am:
-
-install-man:
-
-install-pdf: install-pdf-am
-
-install-pdf-am:
-
-install-ps: install-ps-am
-
-install-ps-am:
-
-installcheck-am:
-
-maintainer-clean: maintainer-clean-am
-	-rm -f Makefile
-maintainer-clean-am: distclean-am maintainer-clean-generic
-
-mostlyclean: mostlyclean-am
-
-mostlyclean-am: mostlyclean-generic mostlyclean-libtool
-
-pdf: pdf-am
-
-pdf-am:
-
-ps: ps-am
-
-ps-am:
-
-uninstall-am: uninstall-dist_shelfDATA uninstall-shelfDATA
-
-.MAKE: install-am install-strip
-
-.PHONY: all all-am check check-am clean clean-generic clean-libtool \
-	cscopelist-am ctags-am distclean distclean-generic \
-	distclean-libtool distdir dvi dvi-am html html-am info info-am \
-	install install-am install-data install-data-am \
-	install-dist_shelfDATA install-dvi install-dvi-am install-exec \
-	install-exec-am install-html install-html-am install-info \
-	install-info-am install-man install-pdf install-pdf-am \
-	install-ps install-ps-am install-shelfDATA install-strip \
-	installcheck installcheck-am installdirs maintainer-clean \
-	maintainer-clean-generic mostlyclean mostlyclean-generic \
-	mostlyclean-libtool pdf pdf-am ps ps-am tags-am uninstall \
-	uninstall-am uninstall-dist_shelfDATA uninstall-shelfDATA
-
-.PRECIOUS: Makefile
-
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@%.html: %.xml $(chapters)
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	$(AM_V_GEN)$(XMLTO) $(XMLTO_HTML_FLAGS) xhtml-nochunks $<
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TEXT_TRUE@@HAVE_XMLTO_TRUE@%.txt: %.xml $(chapters)
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TEXT_TRUE@@HAVE_XMLTO_TRUE@	$(AM_V_GEN)$(XMLTO) $(XMLTO_HTML_FLAGS) txt $<
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@%.pdf: %.xml $(chapters)
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	$(AM_V_GEN)$(XMLTO) $(XMLTO_FO_FLAGS) --with-fop pdf $<
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@%.ps: %.xml $(chapters)
-@ENABLE_SPECS_TRUE@@HAVE_FOP_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@	$(AM_V_GEN)$(XMLTO) $(XMLTO_FO_FLAGS) --with-fop ps $<
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@%.html.db: %.xml  $(chapters)
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	$(AM_V_GEN)$(XSLTPROC) $(XSLT_HTML_FLAGS) $<
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@%.pdf.db: %.xml $(chapters)
-@ENABLE_SPECS_TRUE@@HAVE_STYLESHEETS_TRUE@@HAVE_XMLTO_TRUE@@HAVE_XSLTPROC_TRUE@	$(AM_V_GEN)$(XSLTPROC) $(XSLT_PDF_FLAGS) $<
-
-# Generate DocBook/XML output formats with or without stylesheets
-
-# Tell versions [3.59,3.63) of GNU make to not export all variables.
-# Otherwise a system limit (for SysV at least) may be exceeded.
-.NOEXPORT:
-
-# Tell GNU make to disable its built-in pattern rules.
-%:: %,v
-%:: RCS/%,v
-%:: RCS/%
-%:: s.%
-%:: SCCS/s.%
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/DPMS.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/DPMS.Plo
deleted file mode 100644
index 4259e09bb..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/DPMS.Plo
+++ /dev/null
@@ -1,120 +0,0 @@
-DPMS.lo: DPMS.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  ../include/X11/extensions/dpms.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/dpmsconst.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/dpmsproto.h \
-  ../include/X11/extensions/Xext.h ../include/X11/extensions/extutil.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-../include/X11/extensions/dpms.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/dpmsconst.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/dpmsproto.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/extutil.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/MITMisc.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/MITMisc.Plo
deleted file mode 100644
index 3096e40b4..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/MITMisc.Plo
+++ /dev/null
@@ -1,116 +0,0 @@
-MITMisc.lo: MITMisc.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  ../include/X11/extensions/MITMisc.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/mitmiscconst.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/mitmiscproto.h \
-  ../include/X11/extensions/Xext.h ../include/X11/extensions/extutil.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-../include/X11/extensions/MITMisc.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/mitmiscconst.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/mitmiscproto.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/extutil.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/XAppgroup.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/XAppgroup.Plo
deleted file mode 100644
index 97e3225d4..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/XAppgroup.Plo
+++ /dev/null
@@ -1,130 +0,0 @@
-XAppgroup.lo: XAppgroup.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  ../include/X11/extensions/Xag.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/ag.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdarg.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stdarg_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stdarg___gnuc_va_list.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stdarg_va_list.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stdarg_va_arg.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stdarg___va_copy.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stdarg_va_copy.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/agproto.h \
-  ../include/X11/extensions/Xext.h ../include/X11/extensions/extutil.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-../include/X11/extensions/Xag.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/ag.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdarg.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stdarg_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stdarg___gnuc_va_list.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stdarg_va_list.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stdarg_va_arg.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stdarg___va_copy.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stdarg_va_copy.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/agproto.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/extutil.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/XEVI.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/XEVI.Plo
deleted file mode 100644
index 5775d70e4..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/XEVI.Plo
+++ /dev/null
@@ -1,132 +0,0 @@
-XEVI.lo: XEVI.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  ../include/X11/extensions/XEVI.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/EVI.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/EVIproto.h \
-  ../include/X11/extensions/Xext.h ../include/X11/extensions/extutil.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xutil.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/keysym.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/keysymdef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_PAGESIZE.h \
-  reallocarray.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-../include/X11/extensions/XEVI.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/EVI.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/EVIproto.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/extutil.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xutil.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/keysym.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/keysymdef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_PAGESIZE.h:
-reallocarray.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/XLbx.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/XLbx.Plo
deleted file mode 100644
index ec77bff15..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/XLbx.Plo
+++ /dev/null
@@ -1,122 +0,0 @@
-XLbx.lo: XLbx.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  ../include/X11/extensions/XLbx.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xdefs.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/lbx.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/lbxproto.h \
-  ../include/X11/extensions/Xext.h ../include/X11/extensions/extutil.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-../include/X11/extensions/XLbx.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xdefs.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/lbx.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/lbxproto.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/extutil.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/XMultibuf.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/XMultibuf.Plo
deleted file mode 100644
index 13ed03b9b..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/XMultibuf.Plo
+++ /dev/null
@@ -1,120 +0,0 @@
-XMultibuf.lo: XMultibuf.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h \
-  ../include/X11/extensions/Xext.h ../include/X11/extensions/extutil.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/multibufproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/multibufconst.h \
-  ../include/X11/extensions/multibuf.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/extutil.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/multibufproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/multibufconst.h:
-../include/X11/extensions/multibuf.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/XSecurity.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/XSecurity.Plo
deleted file mode 100644
index d6d7112e9..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/XSecurity.Plo
+++ /dev/null
@@ -1,124 +0,0 @@
-XSecurity.lo: XSecurity.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h \
-  ../include/X11/extensions/Xext.h ../include/X11/extensions/extutil.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/securproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/secur.h \
-  ../include/X11/extensions/security.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xauth.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/assert.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/extutil.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/securproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/secur.h:
-../include/X11/extensions/security.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xauth.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/assert.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/XShape.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/XShape.Plo
deleted file mode 100644
index 7632f1b7a..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/XShape.Plo
+++ /dev/null
@@ -1,134 +0,0 @@
-XShape.lo: XShape.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xutil.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/keysym.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/keysymdef.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xregion.h \
-  ../include/X11/extensions/Xext.h ../include/X11/extensions/extutil.h \
-  ../include/X11/extensions/shape.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/shapeconst.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/shapeproto.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_PAGESIZE.h \
-  reallocarray.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xutil.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/keysym.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/keysymdef.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xregion.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/extutil.h:
-../include/X11/extensions/shape.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/shapeconst.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/shapeproto.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_PAGESIZE.h:
-reallocarray.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/XShm.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/XShm.Plo
deleted file mode 100644
index 14bbd711f..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/XShm.Plo
+++ /dev/null
@@ -1,122 +0,0 @@
-XShm.lo: XShm.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/ImUtil.h \
-  ../include/X11/extensions/XShm.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/shm.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/shmproto.h \
-  ../include/X11/extensions/Xext.h ../include/X11/extensions/extutil.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/ImUtil.h:
-../include/X11/extensions/XShm.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/shm.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/shmproto.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/extutil.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/XSync.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/XSync.Plo
deleted file mode 100644
index a164f6994..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/XSync.Plo
+++ /dev/null
@@ -1,128 +0,0 @@
-XSync.lo: XSync.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  ../include/X11/extensions/Xext.h ../include/X11/extensions/extutil.h \
-  ../include/X11/extensions/sync.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/syncconst.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/syncproto.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_PAGESIZE.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/extutil.h:
-../include/X11/extensions/sync.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/syncconst.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/syncproto.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_PAGESIZE.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/XTestExt1.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/XTestExt1.Plo
deleted file mode 100644
index bf10e9158..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/XTestExt1.Plo
+++ /dev/null
@@ -1,117 +0,0 @@
-XTestExt1.lo: XTestExt1.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  ../include/X11/extensions/xtestext1.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/xtestext1const.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/xtestext1proto.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-../include/X11/extensions/xtestext1.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/xtestext1const.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/xtestext1proto.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/Xcup.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/Xcup.Plo
deleted file mode 100644
index e64e5fc83..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/Xcup.Plo
+++ /dev/null
@@ -1,124 +0,0 @@
-Xcup.lo: Xcup.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  ../include/X11/extensions/Xcup.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/cup.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/cupproto.h \
-  ../include/X11/extensions/Xext.h ../include/X11/extensions/extutil.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_PAGESIZE.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-../include/X11/extensions/Xcup.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/cup.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/cupproto.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/extutil.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_PAGESIZE.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/Xdbe.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/Xdbe.Plo
deleted file mode 100644
index afe67d5b3..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/Xdbe.Plo
+++ /dev/null
@@ -1,130 +0,0 @@
-Xdbe.lo: Xdbe.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  ../include/X11/extensions/Xext.h ../include/X11/extensions/extutil.h \
-  ../include/X11/extensions/Xdbe.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/dbe.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/dbeproto.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/limits.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_PAGESIZE.h \
-  reallocarray.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/extutil.h:
-../include/X11/extensions/Xdbe.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/dbe.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/dbeproto.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/limits.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_PAGESIZE.h:
-reallocarray.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/Xge.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/Xge.Plo
deleted file mode 100644
index 33c86f7df..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/Xge.Plo
+++ /dev/null
@@ -1,121 +0,0 @@
-Xge.lo: Xge.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/geproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/ge.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  ../include/X11/extensions/extutil.h ../include/X11/extensions/Xext.h \
-  ../include/X11/extensions/Xge.h extutilP.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/geproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/ge.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-../include/X11/extensions/extutil.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/Xge.h:
-extutilP.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/extutil.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/extutil.Plo
deleted file mode 100644
index abc2e92bd..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/extutil.Plo
+++ /dev/null
@@ -1,118 +0,0 @@
-extutil.lo: extutil.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h \
-  ../include/X11/extensions/Xext.h ../include/X11/extensions/extutil.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/ge.h \
-  extutilP.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdio.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__seek.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/wasi/api.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdint.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/stdint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlibint.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xmd.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xprotostr.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/XlibConf.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__errno_values.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncs.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_string.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_memcpy.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/strings.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__functions_malloc.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__header_stdlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/alloca.h:
-../include/X11/extensions/Xext.h:
-../include/X11/extensions/extutil.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/extensions/ge.h:
-extutilP.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/globals.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/globals.Plo
deleted file mode 100644
index 517083006..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/.deps/globals.Plo
+++ /dev/null
@@ -1,67 +0,0 @@
-globals.lo: globals.c \
-  /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h \
-  ../config.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h \
-  /home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h \
-  /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h \
-  /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h \
-  ../include/X11/extensions/Xext.h
-/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h:
-../config.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xlib.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/types.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/features.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/bits/alltypes.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_time_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_suseconds_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clockid_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_clock_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timeval.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_timespec.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__struct_iovec.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/stddef.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_size_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/endian.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/sys/select.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_sigset_t.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__typedef_fd_set.h:
-/home/nathan/secure-exec/registry/native/c/sysroot/include/wasm32-wasip1/__macro_FD_SETSIZE.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/X.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xfuncproto.h:
-/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include/X11/Xosdefs.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_header_macro.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_ptrdiff_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_wchar_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_null.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_nullptr_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_unreachable.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_max_align_t.h:
-/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/lib/clang/19/include/__stddef_offsetof.h:
-../include/X11/extensions/Xext.h:
diff --git a/experiments/wasm-gui/third_party/libXext/src/.deps/reallocarray.Plo b/experiments/wasm-gui/third_party/libXext/src/.deps/reallocarray.Plo
deleted file mode 100644
index e69de29bb..000000000
diff --git a/experiments/wasm-gui/third_party/libXext/src/DPMS.lo b/experiments/wasm-gui/third_party/libXext/src/DPMS.lo
deleted file mode 100644
index 4098a7d16..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/DPMS.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# DPMS.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='DPMS.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/MITMisc.lo b/experiments/wasm-gui/third_party/libXext/src/MITMisc.lo
deleted file mode 100644
index 793b0a397..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/MITMisc.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# MITMisc.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='MITMisc.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/Makefile b/experiments/wasm-gui/third_party/libXext/src/Makefile
deleted file mode 100644
index eb1916b66..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/Makefile
+++ /dev/null
@@ -1,864 +0,0 @@
-# Makefile.in generated by automake 1.18.1 from Makefile.am.
-# src/Makefile.  Generated from Makefile.in by configure.
-
-# Copyright (C) 1994-2025 Free Software Foundation, Inc.
-
-# This Makefile.in is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-
-
-
-
-
-am__is_gnu_make = { \
-  if test -z '$(MAKELEVEL)'; then \
-    false; \
-  elif test -n '$(MAKE_HOST)'; then \
-    true; \
-  elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \
-    true; \
-  else \
-    false; \
-  fi; \
-}
-am__make_running_with_option = \
-  case $${target_option-} in \
-      ?) ;; \
-      *) echo "am__make_running_with_option: internal error: invalid" \
-              "target option '$${target_option-}' specified" >&2; \
-         exit 1;; \
-  esac; \
-  has_opt=no; \
-  sane_makeflags=$$MAKEFLAGS; \
-  if $(am__is_gnu_make); then \
-    sane_makeflags=$$MFLAGS; \
-  else \
-    case $$MAKEFLAGS in \
-      *\\[\ \	]*) \
-        bs=\\; \
-        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
-          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
-    esac; \
-  fi; \
-  skip_next=no; \
-  strip_trailopt () \
-  { \
-    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
-  }; \
-  for flg in $$sane_makeflags; do \
-    test $$skip_next = yes && { skip_next=no; continue; }; \
-    case $$flg in \
-      *=*|--*) continue;; \
-        -*I) strip_trailopt 'I'; skip_next=yes;; \
-      -*I?*) strip_trailopt 'I';; \
-        -*O) strip_trailopt 'O'; skip_next=yes;; \
-      -*O?*) strip_trailopt 'O';; \
-        -*l) strip_trailopt 'l'; skip_next=yes;; \
-      -*l?*) strip_trailopt 'l';; \
-      -[dEDm]) skip_next=yes;; \
-      -[JT]) skip_next=yes;; \
-    esac; \
-    case $$flg in \
-      *$$target_option*) has_opt=yes; break;; \
-    esac; \
-  done; \
-  test $$has_opt = yes
-am__make_dryrun = (target_option=n; $(am__make_running_with_option))
-am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
-am__rm_f = rm -f $(am__rm_f_notfound)
-am__rm_rf = rm -rf $(am__rm_f_notfound)
-pkgdatadir = $(datadir)/libXext
-pkgincludedir = $(includedir)/libXext
-pkglibdir = $(libdir)/libXext
-pkglibexecdir = $(libexecdir)/libXext
-am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
-install_sh_DATA = $(install_sh) -c -m 644
-install_sh_PROGRAM = $(install_sh) -c
-install_sh_SCRIPT = $(install_sh) -c
-INSTALL_HEADER = $(INSTALL_DATA)
-transform = $(program_transform_name)
-NORMAL_INSTALL = :
-PRE_INSTALL = :
-POST_INSTALL = :
-NORMAL_UNINSTALL = :
-PRE_UNINSTALL = :
-POST_UNINSTALL = :
-build_triplet = x86_64-pc-linux-gnu
-host_triplet = wasm32-unknown-wasi
-subdir = src
-ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/ax_gcc_builtin.m4 \
-	$(top_srcdir)/m4/libtool.m4 $(top_srcdir)/m4/ltoptions.m4 \
-	$(top_srcdir)/m4/ltsugar.m4 $(top_srcdir)/m4/ltversion.m4 \
-	$(top_srcdir)/m4/lt~obsolete.m4 $(top_srcdir)/configure.ac
-am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
-	$(ACLOCAL_M4)
-DIST_COMMON = $(srcdir)/Makefile.am $(libXextinclude_HEADERS) \
-	$(am__DIST_COMMON)
-mkinstalldirs = $(install_sh) -d
-CONFIG_HEADER = $(top_builddir)/config.h
-CONFIG_CLEAN_FILES =
-CONFIG_CLEAN_VPATH_FILES =
-am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
-am__vpath_adj = case $$p in \
-    $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
-    *) f=$$p;; \
-  esac;
-am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
-am__install_max = 40
-am__nobase_strip_setup = \
-  srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
-am__nobase_strip = \
-  for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
-am__nobase_list = $(am__nobase_strip_setup); \
-  for p in $$list; do echo "$$p $$p"; done | \
-  sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
-  $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
-    if (++n[$$2] == $(am__install_max)) \
-      { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
-    END { for (dir in files) print dir, files[dir] }'
-am__base_list = \
-  sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
-  sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
-am__uninstall_files_from_dir = { \
-  { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
-  || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
-       $(am__cd) "$$dir" && echo $$files | $(am__xargs_n) 40 $(am__rm_f); }; \
-  }
-am__installdirs = "$(DESTDIR)$(libdir)" "$(DESTDIR)$(lintlibdir)" \
-	"$(DESTDIR)$(libXextincludedir)"
-LTLIBRARIES = $(lib_LTLIBRARIES)
-am__DEPENDENCIES_1 =
-libXext_la_DEPENDENCIES = $(LTLIBOBJS) $(am__DEPENDENCIES_1)
-am_libXext_la_OBJECTS = DPMS.lo MITMisc.lo XAppgroup.lo XEVI.lo \
-	XLbx.lo XMultibuf.lo XSecurity.lo XShape.lo XShm.lo XSync.lo \
-	XTestExt1.lo Xcup.lo Xdbe.lo Xge.lo extutil.lo globals.lo
-libXext_la_OBJECTS = $(am_libXext_la_OBJECTS)
-AM_V_lt = $(am__v_lt_$(V))
-am__v_lt_ = $(am__v_lt_$(AM_DEFAULT_VERBOSITY))
-am__v_lt_0 = --silent
-am__v_lt_1 = 
-libXext_la_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \
-	$(LIBTOOLFLAGS) --mode=link $(CCLD) $(AM_CFLAGS) $(CFLAGS) \
-	$(libXext_la_LDFLAGS) $(LDFLAGS) -o $@
-AM_V_P = $(am__v_P_$(V))
-am__v_P_ = $(am__v_P_$(AM_DEFAULT_VERBOSITY))
-am__v_P_0 = false
-am__v_P_1 = :
-AM_V_GEN = $(am__v_GEN_$(V))
-am__v_GEN_ = $(am__v_GEN_$(AM_DEFAULT_VERBOSITY))
-am__v_GEN_0 = @echo "  GEN     " $@;
-am__v_GEN_1 = 
-AM_V_at = $(am__v_at_$(V))
-am__v_at_ = $(am__v_at_$(AM_DEFAULT_VERBOSITY))
-am__v_at_0 = @
-am__v_at_1 = 
-DEFAULT_INCLUDES = -I. -I$(top_builddir)
-depcomp = $(SHELL) $(top_srcdir)/depcomp
-am__maybe_remake_depfiles = depfiles
-am__depfiles_remade = $(DEPDIR)/reallocarray.Plo ./$(DEPDIR)/DPMS.Plo \
-	./$(DEPDIR)/MITMisc.Plo ./$(DEPDIR)/XAppgroup.Plo \
-	./$(DEPDIR)/XEVI.Plo ./$(DEPDIR)/XLbx.Plo \
-	./$(DEPDIR)/XMultibuf.Plo ./$(DEPDIR)/XSecurity.Plo \
-	./$(DEPDIR)/XShape.Plo ./$(DEPDIR)/XShm.Plo \
-	./$(DEPDIR)/XSync.Plo ./$(DEPDIR)/XTestExt1.Plo \
-	./$(DEPDIR)/Xcup.Plo ./$(DEPDIR)/Xdbe.Plo ./$(DEPDIR)/Xge.Plo \
-	./$(DEPDIR)/extutil.Plo ./$(DEPDIR)/globals.Plo
-am__mv = mv -f
-COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \
-	$(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
-LTCOMPILE = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \
-	$(LIBTOOLFLAGS) --mode=compile $(CC) $(DEFS) \
-	$(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) \
-	$(AM_CFLAGS) $(CFLAGS)
-AM_V_CC = $(am__v_CC_$(V))
-am__v_CC_ = $(am__v_CC_$(AM_DEFAULT_VERBOSITY))
-am__v_CC_0 = @echo "  CC      " $@;
-am__v_CC_1 = 
-CCLD = $(CC)
-LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \
-	$(LIBTOOLFLAGS) --mode=link $(CCLD) $(AM_CFLAGS) $(CFLAGS) \
-	$(AM_LDFLAGS) $(LDFLAGS) -o $@
-AM_V_CCLD = $(am__v_CCLD_$(V))
-am__v_CCLD_ = $(am__v_CCLD_$(AM_DEFAULT_VERBOSITY))
-am__v_CCLD_0 = @echo "  CCLD    " $@;
-am__v_CCLD_1 = 
-SOURCES = $(libXext_la_SOURCES)
-DIST_SOURCES = $(libXext_la_SOURCES)
-am__can_run_installinfo = \
-  case $$AM_UPDATE_INFO_DIR in \
-    n|no|NO) false;; \
-    *) (install-info --version) >/dev/null 2>&1;; \
-  esac
-DATA = $(lintlib_DATA)
-HEADERS = $(libXextinclude_HEADERS)
-am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
-# Read a list of newline-separated strings from the standard input,
-# and print each of them once, without duplicates.  Input order is
-# *not* preserved.
-am__uniquify_input = $(AWK) '\
-  BEGIN { nonempty = 0; } \
-  { items[$$0] = 1; nonempty = 1; } \
-  END { if (nonempty) { for (i in items) print i; }; } \
-'
-# Make sure the list of sources is unique.  This is necessary because,
-# e.g., the same source file might be shared among _SOURCES variables
-# for different programs/libraries.
-am__define_uniq_tagged_files = \
-  list='$(am__tagged_files)'; \
-  unique=`for i in $$list; do \
-    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
-  done | $(am__uniquify_input)`
-am__DIST_COMMON = $(srcdir)/Makefile.in $(top_srcdir)/depcomp \
-	reallocarray.c
-DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
-ACLOCAL = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' aclocal-1.18
-ADMIN_MAN_DIR = $(mandir)/man$(ADMIN_MAN_SUFFIX)
-ADMIN_MAN_SUFFIX = 8
-AMTAR = $${TAR-tar}
-AM_DEFAULT_VERBOSITY = 0
-APP_MAN_DIR = $(mandir)/man$(APP_MAN_SUFFIX)
-APP_MAN_SUFFIX = 1
-AR = /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ar
-AUTOCONF = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' autoconf
-AUTOHEADER = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' autoheader
-AUTOMAKE = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' automake-1.18
-AWK = mawk
-BASE_CFLAGS =  -Wall -Wpointer-arith -Wmissing-declarations -Wformat=2 -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Wbad-function-cast -Wold-style-definition -Wunused -Wuninitialized -Wshadow -Wmissing-noreturn -Wmissing-format-attribute -Wredundant-decls -Werror=implicit -Werror=nonnull -Werror=init-self -Werror=main -Werror=missing-braces -Werror=sequence-point -Werror=return-type -Werror=trigraphs -Werror=array-bounds -Werror=write-strings -Werror=address -Werror=int-to-pointer-cast -Werror=pointer-to-int-cast
-CC = /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang -std=gnu23
-CCDEPMODE = depmode=gcc3
-CFLAGS = --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -O2 -D_WASI_EMULATED_MMAN -mllvm -wasm-enable-sjlj -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include -include /home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h
-CHANGELOG_CMD = ((GIT_DIR=$(top_srcdir)/.git git log > $(top_srcdir)/.changelog.tmp) 2>/dev/null && mv $(top_srcdir)/.changelog.tmp $(top_srcdir)/ChangeLog) || (rm -f $(top_srcdir)/.changelog.tmp; test -e $(top_srcdir)/ChangeLog || ( touch $(top_srcdir)/ChangeLog; echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))
-CPPFLAGS = --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include
-CSCOPE = cscope
-CTAGS = ctags
-CWARNFLAGS =  -Wall -Wpointer-arith -Wmissing-declarations -Wformat=2 -Wstrict-prototypes -Wmissing-prototypes -Wnested-externs -Wbad-function-cast -Wold-style-definition -Wunused -Wuninitialized -Wshadow -Wmissing-noreturn -Wmissing-format-attribute -Wredundant-decls -Werror=implicit -Werror=nonnull -Werror=init-self -Werror=main -Werror=missing-braces -Werror=sequence-point -Werror=return-type -Werror=trigraphs -Werror=array-bounds -Werror=write-strings -Werror=address -Werror=int-to-pointer-cast -Werror=pointer-to-int-cast -fno-strict-aliasing
-CYGPATH_W = echo
-DEFS = -DHAVE_CONFIG_H
-DEPDIR = .deps
-DLLTOOL = dlltool
-DRIVER_MAN_DIR = $(mandir)/man$(DRIVER_MAN_SUFFIX)
-DRIVER_MAN_SUFFIX = 4
-DSYMUTIL = 
-DUMPBIN = :
-ECHO_C = 
-ECHO_N = -n
-ECHO_T = 
-EGREP = /usr/bin/grep -E
-ETAGS = etags
-EXEEXT = 
-FGREP = /usr/bin/grep -F
-FILECMD = file
-FILE_MAN_DIR = $(mandir)/man$(FILE_MAN_SUFFIX)
-FILE_MAN_SUFFIX = 5
-FOP = 
-GREP = /usr/bin/grep
-INSTALL = /usr/bin/install -c
-INSTALL_CMD = (cp -f /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/util-macros/INSTALL $(top_srcdir)/.INSTALL.tmp && mv $(top_srcdir)/.INSTALL.tmp $(top_srcdir)/INSTALL) || (rm -f $(top_srcdir)/.INSTALL.tmp; test -e $(top_srcdir)/INSTALL || ( touch $(top_srcdir)/INSTALL; echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))
-INSTALL_DATA = ${INSTALL} -m 644
-INSTALL_PROGRAM = ${INSTALL}
-INSTALL_SCRIPT = ${INSTALL}
-INSTALL_STRIP_PROGRAM = $(install_sh) -c -s
-LD = /home/linuxbrew/.linuxbrew/bin/ld
-LDFLAGS = --target=wasm32-wasip1 --sysroot=/home/nathan/secure-exec/registry/native/c/sysroot -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman
-LIBOBJS = 
-LIBS = 
-LIBTOOL = $(SHELL) $(top_builddir)/libtool
-LIB_MAN_DIR = $(mandir)/man$(LIB_MAN_SUFFIX)
-LIB_MAN_SUFFIX = 3
-LINT = 
-LINTLIB = 
-LINT_FLAGS = 
-LIPO = 
-LN_S = ln -s
-LTLIBOBJS = 
-LT_SYS_LIBRARY_PATH = 
-MAKEINFO = ${SHELL} '/home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/missing' makeinfo
-MALLOC_ZERO_CFLAGS = -DMALLOC_0_RETURNS_NULL
-MANIFEST_TOOL = :
-MAN_SUBSTS = 	-e 's|__vendorversion__|"$(PACKAGE_STRING)" "$(XORG_MAN_PAGE)"|' 	-e 's|__xorgversion__|"$(PACKAGE_STRING)" "$(XORG_MAN_PAGE)"|' 	-e 's|__xservername__|Xorg|g' 	-e 's|__xconfigfile__|xorg.conf|g' 	-e 's|__projectroot__|$(prefix)|g' 	-e 's|__apploaddir__|$(appdefaultdir)|g' 	-e 's|__appmansuffix__|$(APP_MAN_SUFFIX)|g' 	-e 's|__drivermansuffix__|$(DRIVER_MAN_SUFFIX)|g' 	-e 's|__adminmansuffix__|$(ADMIN_MAN_SUFFIX)|g' 	-e 's|__libmansuffix__|$(LIB_MAN_SUFFIX)|g' 	-e 's|__miscmansuffix__|$(MISC_MAN_SUFFIX)|g' 	-e 's|__filemansuffix__|$(FILE_MAN_SUFFIX)|g'
-MISC_MAN_DIR = $(mandir)/man$(MISC_MAN_SUFFIX)
-MISC_MAN_SUFFIX = 7
-MKDIR_P = /usr/bin/mkdir -p
-NM = nm
-NMEDIT = 
-OBJDUMP = objdump
-OBJEXT = o
-OTOOL = 
-OTOOL64 = 
-PACKAGE = libXext
-PACKAGE_BUGREPORT = https://gitlab.freedesktop.org/xorg/lib/libxext/-/issues
-PACKAGE_NAME = libXext
-PACKAGE_STRING = libXext 1.3.7
-PACKAGE_TARNAME = libXext
-PACKAGE_URL = 
-PACKAGE_VERSION = 1.3.7
-PATH_SEPARATOR = :
-PKG_CONFIG = /usr/bin/pkg-config
-PKG_CONFIG_LIBDIR = /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/pkgconfig
-PKG_CONFIG_PATH = 
-RANLIB = /home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/llvm-ranlib
-SED = /usr/bin/sed
-SET_MAKE = 
-SHELL = /bin/bash
-STRICT_CFLAGS =  -pedantic -Werror -Werror=attributes
-STRIP = strip
-STYLESHEET_SRCDIR = 
-VERSION = 1.3.7
-XEXT_CFLAGS = -I/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/include 
-XEXT_LIBS = -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -lX11 
-XEXT_SOREV = 6:4:0
-XMALLOC_ZERO_CFLAGS = -DMALLOC_0_RETURNS_NULL
-XMLTO = 
-XORG_MAN_PAGE = X Version 11
-XORG_SGML_PATH = 
-XSLTPROC = /home/linuxbrew/.linuxbrew/bin/xsltproc
-XSL_STYLESHEET = 
-XTMALLOC_ZERO_CFLAGS = -DMALLOC_0_RETURNS_NULL -DXTMALLOC_BC
-abs_builddir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/src
-abs_srcdir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/src
-abs_top_builddir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext
-abs_top_srcdir = /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext
-ac_ct_AR = 
-ac_ct_CC = 
-ac_ct_DUMPBIN = link -dump
-am__include = include
-am__leading_dot = .
-am__quote = 
-am__rm_f_notfound = 
-am__tar = tar --format=ustar -chf - "$$tardir"
-am__untar = tar -xf -
-am__xargs_n = xargs -n
-bindir = ${exec_prefix}/bin
-build = x86_64-pc-linux-gnu
-build_alias = 
-build_cpu = x86_64
-build_os = linux-gnu
-build_vendor = pc
-builddir = .
-datadir = ${datarootdir}
-datarootdir = ${prefix}/share
-docdir = ${datarootdir}/doc/${PACKAGE_TARNAME}
-dvidir = ${docdir}
-exec_prefix = ${prefix}
-host = wasm32-unknown-wasi
-host_alias = wasm32-wasi
-host_cpu = wasm32
-host_os = wasi
-host_vendor = unknown
-htmldir = ${docdir}
-includedir = ${prefix}/include
-infodir = ${datarootdir}/info
-install_sh = ${SHELL} /home/nathan/secure-exec/experiments/wasm-gui/third_party/libXext/install-sh
-libdir = ${exec_prefix}/lib
-libexecdir = ${exec_prefix}/libexec
-localedir = ${datarootdir}/locale
-localstatedir = ${prefix}/var
-mandir = ${datarootdir}/man
-mkdir_p = $(MKDIR_P)
-oldincludedir = /usr/include
-pdfdir = ${docdir}
-prefix = /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix
-program_transform_name = s,x,x,
-psdir = ${docdir}
-runstatedir = ${localstatedir}/run
-sbindir = ${exec_prefix}/sbin
-sharedstatedir = ${prefix}/com
-srcdir = .
-sysconfdir = ${prefix}/etc
-target_alias = 
-top_build_prefix = ../
-top_builddir = ..
-top_srcdir = ..
-lib_LTLIBRARIES = libXext.la
-AM_CPPFLAGS = \
-          -I$(top_srcdir)/include \
-          -I$(top_srcdir)/include/X11/extensions\
-          $(XEXT_CFLAGS) $(MALLOC_ZERO_CFLAGS)
-
-AM_CFLAGS = $(CWARNFLAGS)
-libXext_la_LDFLAGS = -version-number $(XEXT_SOREV) -no-undefined
-libXext_la_LIBADD = $(LTLIBOBJS) $(XEXT_LIBS)
-libXext_la_SOURCES = \
-	DPMS.c \
-	MITMisc.c \
-	XAppgroup.c \
-	XEVI.c \
-	XLbx.c \
-	XMultibuf.c \
-	XSecurity.c \
-	XShape.c \
-	XShm.c \
-	XSync.c \
-	XTestExt1.c \
-	Xcup.c \
-	Xdbe.c \
-        Xge.c \
-	extutil.c \
-	extutilP.h \
-	reallocarray.h \
-        globals.c
-
-libXextincludedir = $(includedir)/X11/extensions
-libXextinclude_HEADERS = $(top_srcdir)/include/X11/extensions/dpms.h \
-			 $(top_srcdir)/include/X11/extensions/extutil.h \
-			 $(top_srcdir)/include/X11/extensions/MITMisc.h \
-			 $(top_srcdir)/include/X11/extensions/multibuf.h \
-			 $(top_srcdir)/include/X11/extensions/security.h \
-			 $(top_srcdir)/include/X11/extensions/shape.h \
-			 $(top_srcdir)/include/X11/extensions/sync.h \
-			 $(top_srcdir)/include/X11/extensions/Xag.h \
-			 $(top_srcdir)/include/X11/extensions/Xcup.h \
-			 $(top_srcdir)/include/X11/extensions/Xdbe.h \
-			 $(top_srcdir)/include/X11/extensions/XEVI.h \
-			 $(top_srcdir)/include/X11/extensions/Xext.h \
-			 $(top_srcdir)/include/X11/extensions/Xge.h \
-			 $(top_srcdir)/include/X11/extensions/XLbx.h \
-			 $(top_srcdir)/include/X11/extensions/XShm.h \
-			 $(top_srcdir)/include/X11/extensions/xtestext1.h
-
-#ALL_LINT_FLAGS = $(LINT_FLAGS) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) \
-#                $(AM_CPPFLAGS) $(CPPFLAGS)
-
-#lintlibdir = $(libdir)
-#lintlib_DATA = $(LINTLIB)
-all: all-am
-
-.SUFFIXES:
-.SUFFIXES: .c .lo .o .obj
-$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
-	@for dep in $?; do \
-	  case '$(am__configure_deps)' in \
-	    *$$dep*) \
-	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
-	        && { if test -f $@; then exit 0; else break; fi; }; \
-	      exit 1;; \
-	  esac; \
-	done; \
-	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign src/Makefile'; \
-	$(am__cd) $(top_srcdir) && \
-	  $(AUTOMAKE) --foreign src/Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
-	@case '$?' in \
-	  *config.status*) \
-	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
-	  *) \
-	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles)'; \
-	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles);; \
-	esac;
-
-$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-
-$(top_srcdir)/configure:  $(am__configure_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(am__aclocal_m4_deps):
-
-install-libLTLIBRARIES: $(lib_LTLIBRARIES)
-	@$(NORMAL_INSTALL)
-	@list='$(lib_LTLIBRARIES)'; test -n "$(libdir)" || list=; \
-	list2=; for p in $$list; do \
-	  if test -f $$p; then \
-	    list2="$$list2 $$p"; \
-	  else :; fi; \
-	done; \
-	test -z "$$list2" || { \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(libdir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(libdir)" || exit 1; \
-	  echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 '$(DESTDIR)$(libdir)'"; \
-	  $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 "$(DESTDIR)$(libdir)"; \
-	}
-
-uninstall-libLTLIBRARIES:
-	@$(NORMAL_UNINSTALL)
-	@list='$(lib_LTLIBRARIES)'; test -n "$(libdir)" || list=; \
-	for p in $$list; do \
-	  $(am__strip_dir) \
-	  echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f '$(DESTDIR)$(libdir)/$$f'"; \
-	  $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f "$(DESTDIR)$(libdir)/$$f"; \
-	done
-
-clean-libLTLIBRARIES:
-	-$(am__rm_f) $(lib_LTLIBRARIES)
-	@list='$(lib_LTLIBRARIES)'; \
-	locs=`for p in $$list; do echo $$p; done | \
-	      sed 's|^[^/]*$$|.|; s|/[^/]*$$||; s|$$|/so_locations|' | \
-	      sort -u`; \
-	echo rm -f $${locs}; \
-	$(am__rm_f) $${locs}
-
-libXext.la: $(libXext_la_OBJECTS) $(libXext_la_DEPENDENCIES) $(EXTRA_libXext_la_DEPENDENCIES) 
-	$(AM_V_CCLD)$(libXext_la_LINK) -rpath $(libdir) $(libXext_la_OBJECTS) $(libXext_la_LIBADD) $(LIBS)
-
-mostlyclean-compile:
-	-rm -f *.$(OBJEXT)
-
-distclean-compile:
-	-rm -f *.tab.c
-
-include $(DEPDIR)/reallocarray.Plo # am--include-marker
-include ./$(DEPDIR)/DPMS.Plo # am--include-marker
-include ./$(DEPDIR)/MITMisc.Plo # am--include-marker
-include ./$(DEPDIR)/XAppgroup.Plo # am--include-marker
-include ./$(DEPDIR)/XEVI.Plo # am--include-marker
-include ./$(DEPDIR)/XLbx.Plo # am--include-marker
-include ./$(DEPDIR)/XMultibuf.Plo # am--include-marker
-include ./$(DEPDIR)/XSecurity.Plo # am--include-marker
-include ./$(DEPDIR)/XShape.Plo # am--include-marker
-include ./$(DEPDIR)/XShm.Plo # am--include-marker
-include ./$(DEPDIR)/XSync.Plo # am--include-marker
-include ./$(DEPDIR)/XTestExt1.Plo # am--include-marker
-include ./$(DEPDIR)/Xcup.Plo # am--include-marker
-include ./$(DEPDIR)/Xdbe.Plo # am--include-marker
-include ./$(DEPDIR)/Xge.Plo # am--include-marker
-include ./$(DEPDIR)/extutil.Plo # am--include-marker
-include ./$(DEPDIR)/globals.Plo # am--include-marker
-
-$(am__depfiles_remade):
-	@$(MKDIR_P) $(@D)
-	@: >>$@
-
-am--depfiles: $(am__depfiles_remade)
-
-.c.o:
-	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
-	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
-#	$(AM_V_CC)source='$<' object='$@' libtool=no \
-#	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-#	$(AM_V_CC_no)$(COMPILE) -c -o $@ $<
-
-.c.obj:
-	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ `$(CYGPATH_W) '$<'`
-	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
-#	$(AM_V_CC)source='$<' object='$@' libtool=no \
-#	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-#	$(AM_V_CC_no)$(COMPILE) -c -o $@ `$(CYGPATH_W) '$<'`
-
-.c.lo:
-	$(AM_V_CC)$(LTCOMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
-	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Plo
-#	$(AM_V_CC)source='$<' object='$@' libtool=yes \
-#	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) \
-#	$(AM_V_CC_no)$(LTCOMPILE) -c -o $@ $<
-
-mostlyclean-libtool:
-	-rm -f *.lo
-
-clean-libtool:
-	-rm -rf .libs _libs
-install-lintlibDATA: $(lintlib_DATA)
-	@$(NORMAL_INSTALL)
-	@list='$(lintlib_DATA)'; test -n "$(lintlibdir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(lintlibdir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(lintlibdir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(lintlibdir)'"; \
-	  $(INSTALL_DATA) $$files "$(DESTDIR)$(lintlibdir)" || exit $$?; \
-	done
-
-uninstall-lintlibDATA:
-	@$(NORMAL_UNINSTALL)
-	@list='$(lintlib_DATA)'; test -n "$(lintlibdir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(lintlibdir)'; $(am__uninstall_files_from_dir)
-install-libXextincludeHEADERS: $(libXextinclude_HEADERS)
-	@$(NORMAL_INSTALL)
-	@list='$(libXextinclude_HEADERS)'; test -n "$(libXextincludedir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(libXextincludedir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(libXextincludedir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_HEADER) $$files '$(DESTDIR)$(libXextincludedir)'"; \
-	  $(INSTALL_HEADER) $$files "$(DESTDIR)$(libXextincludedir)" || exit $$?; \
-	done
-
-uninstall-libXextincludeHEADERS:
-	@$(NORMAL_UNINSTALL)
-	@list='$(libXextinclude_HEADERS)'; test -n "$(libXextincludedir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(libXextincludedir)'; $(am__uninstall_files_from_dir)
-
-ID: $(am__tagged_files)
-	$(am__define_uniq_tagged_files); mkid -fID $$unique
-tags: tags-am
-TAGS: tags
-
-tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
-	set x; \
-	here=`pwd`; \
-	$(am__define_uniq_tagged_files); \
-	shift; \
-	if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
-	  test -n "$$unique" || unique=$$empty_fix; \
-	  if test $$# -gt 0; then \
-	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
-	      "$$@" $$unique; \
-	  else \
-	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
-	      $$unique; \
-	  fi; \
-	fi
-ctags: ctags-am
-
-CTAGS: ctags
-ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
-	$(am__define_uniq_tagged_files); \
-	test -z "$(CTAGS_ARGS)$$unique" \
-	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
-	     $$unique
-
-GTAGS:
-	here=`$(am__cd) $(top_builddir) && pwd` \
-	  && $(am__cd) $(top_srcdir) \
-	  && gtags -i $(GTAGS_ARGS) "$$here"
-cscopelist: cscopelist-am
-
-cscopelist-am: $(am__tagged_files)
-	list='$(am__tagged_files)'; \
-	case "$(srcdir)" in \
-	  [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
-	  *) sdir=$(subdir)/$(srcdir) ;; \
-	esac; \
-	for i in $$list; do \
-	  if test -f "$$i"; then \
-	    echo "$(subdir)/$$i"; \
-	  else \
-	    echo "$$sdir/$$i"; \
-	  fi; \
-	done >> $(top_builddir)/cscope.files
-
-distclean-tags:
-	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
-
-distdir: $(BUILT_SOURCES)
-	$(MAKE) $(AM_MAKEFLAGS) distdir-am
-
-distdir-am: $(DISTFILES)
-	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	list='$(DISTFILES)'; \
-	  dist_files=`for file in $$list; do echo $$file; done | \
-	  sed -e "s|^$$srcdirstrip/||;t" \
-	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
-	case $$dist_files in \
-	  */*) $(MKDIR_P) `echo "$$dist_files" | \
-			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
-			   sort -u` ;; \
-	esac; \
-	for file in $$dist_files; do \
-	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
-	  if test -d $$d/$$file; then \
-	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
-	    if test -d "$(distdir)/$$file"; then \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
-	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
-	  else \
-	    test -f "$(distdir)/$$file" \
-	    || cp -p $$d/$$file "$(distdir)/$$file" \
-	    || exit 1; \
-	  fi; \
-	done
-check-am: all-am
-check: check-am
-all-am: Makefile $(LTLIBRARIES) $(DATA) $(HEADERS)
-installdirs:
-	for dir in "$(DESTDIR)$(libdir)" "$(DESTDIR)$(lintlibdir)" "$(DESTDIR)$(libXextincludedir)"; do \
-	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
-	done
-install: install-am
-install-exec: install-exec-am
-install-data: install-data-am
-uninstall: uninstall-am
-
-install-am: all-am
-	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
-
-installcheck: installcheck-am
-install-strip:
-	if test -z '$(STRIP)'; then \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	      install; \
-	else \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
-	fi
-mostlyclean-generic:
-
-clean-generic:
-
-distclean-generic:
-	-$(am__rm_f) $(CONFIG_CLEAN_FILES)
-	-test . = "$(srcdir)" || $(am__rm_f) $(CONFIG_CLEAN_VPATH_FILES)
-
-maintainer-clean-generic:
-	@echo "This command is intended for maintainers to use"
-	@echo "it deletes files that may require special tools to rebuild."
-clean: clean-am
-
-clean-am: clean-generic clean-libLTLIBRARIES clean-libtool \
-	mostlyclean-am
-
-distclean: distclean-am
-	-rm -f $(DEPDIR)/reallocarray.Plo
-	-rm -f ./$(DEPDIR)/DPMS.Plo
-	-rm -f ./$(DEPDIR)/MITMisc.Plo
-	-rm -f ./$(DEPDIR)/XAppgroup.Plo
-	-rm -f ./$(DEPDIR)/XEVI.Plo
-	-rm -f ./$(DEPDIR)/XLbx.Plo
-	-rm -f ./$(DEPDIR)/XMultibuf.Plo
-	-rm -f ./$(DEPDIR)/XSecurity.Plo
-	-rm -f ./$(DEPDIR)/XShape.Plo
-	-rm -f ./$(DEPDIR)/XShm.Plo
-	-rm -f ./$(DEPDIR)/XSync.Plo
-	-rm -f ./$(DEPDIR)/XTestExt1.Plo
-	-rm -f ./$(DEPDIR)/Xcup.Plo
-	-rm -f ./$(DEPDIR)/Xdbe.Plo
-	-rm -f ./$(DEPDIR)/Xge.Plo
-	-rm -f ./$(DEPDIR)/extutil.Plo
-	-rm -f ./$(DEPDIR)/globals.Plo
-	-rm -f Makefile
-distclean-am: clean-am distclean-compile distclean-generic \
-	distclean-tags
-
-dvi: dvi-am
-
-dvi-am:
-
-html: html-am
-
-html-am:
-
-info: info-am
-
-info-am:
-
-install-data-am: install-libXextincludeHEADERS install-lintlibDATA
-
-install-dvi: install-dvi-am
-
-install-dvi-am:
-
-install-exec-am: install-libLTLIBRARIES
-
-install-html: install-html-am
-
-install-html-am:
-
-install-info: install-info-am
-
-install-info-am:
-
-install-man:
-
-install-pdf: install-pdf-am
-
-install-pdf-am:
-
-install-ps: install-ps-am
-
-install-ps-am:
-
-installcheck-am:
-
-maintainer-clean: maintainer-clean-am
-	-rm -f $(DEPDIR)/reallocarray.Plo
-	-rm -f ./$(DEPDIR)/DPMS.Plo
-	-rm -f ./$(DEPDIR)/MITMisc.Plo
-	-rm -f ./$(DEPDIR)/XAppgroup.Plo
-	-rm -f ./$(DEPDIR)/XEVI.Plo
-	-rm -f ./$(DEPDIR)/XLbx.Plo
-	-rm -f ./$(DEPDIR)/XMultibuf.Plo
-	-rm -f ./$(DEPDIR)/XSecurity.Plo
-	-rm -f ./$(DEPDIR)/XShape.Plo
-	-rm -f ./$(DEPDIR)/XShm.Plo
-	-rm -f ./$(DEPDIR)/XSync.Plo
-	-rm -f ./$(DEPDIR)/XTestExt1.Plo
-	-rm -f ./$(DEPDIR)/Xcup.Plo
-	-rm -f ./$(DEPDIR)/Xdbe.Plo
-	-rm -f ./$(DEPDIR)/Xge.Plo
-	-rm -f ./$(DEPDIR)/extutil.Plo
-	-rm -f ./$(DEPDIR)/globals.Plo
-	-rm -f Makefile
-maintainer-clean-am: distclean-am maintainer-clean-generic
-
-mostlyclean: mostlyclean-am
-
-mostlyclean-am: mostlyclean-compile mostlyclean-generic \
-	mostlyclean-libtool
-
-pdf: pdf-am
-
-pdf-am:
-
-ps: ps-am
-
-ps-am:
-
-uninstall-am: uninstall-libLTLIBRARIES uninstall-libXextincludeHEADERS \
-	uninstall-lintlibDATA
-
-.MAKE: install-am install-strip
-
-.PHONY: CTAGS GTAGS TAGS all all-am am--depfiles check check-am clean \
-	clean-generic clean-libLTLIBRARIES clean-libtool cscopelist-am \
-	ctags ctags-am distclean distclean-compile distclean-generic \
-	distclean-libtool distclean-tags distdir dvi dvi-am html \
-	html-am info info-am install install-am install-data \
-	install-data-am install-dvi install-dvi-am install-exec \
-	install-exec-am install-html install-html-am install-info \
-	install-info-am install-libLTLIBRARIES \
-	install-libXextincludeHEADERS install-lintlibDATA install-man \
-	install-pdf install-pdf-am install-ps install-ps-am \
-	install-strip installcheck installcheck-am installdirs \
-	maintainer-clean maintainer-clean-generic mostlyclean \
-	mostlyclean-compile mostlyclean-generic mostlyclean-libtool \
-	pdf pdf-am ps ps-am tags tags-am uninstall uninstall-am \
-	uninstall-libLTLIBRARIES uninstall-libXextincludeHEADERS \
-	uninstall-lintlibDATA
-
-.PRECIOUS: Makefile
-
-
-#lint:
-#	$(LINT) $(ALL_LINT_FLAGS) $(libXext_la_SOURCES) $(XEXT_LIBS)
-
-#$(LINTLIB): $(libXext_la_SOURCES)
-#	$(LINT) -y -oXext -x $(ALL_LINT_FLAGS) $(libXext_la_SOURCES)
-
-# Tell versions [3.59,3.63) of GNU make to not export all variables.
-# Otherwise a system limit (for SysV at least) may be exceeded.
-.NOEXPORT:
-
-# Tell GNU make to disable its built-in pattern rules.
-%:: %,v
-%:: RCS/%,v
-%:: RCS/%
-%:: s.%
-%:: SCCS/s.%
diff --git a/experiments/wasm-gui/third_party/libXext/src/Makefile.in b/experiments/wasm-gui/third_party/libXext/src/Makefile.in
deleted file mode 100644
index 2aafb5647..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/Makefile.in
+++ /dev/null
@@ -1,864 +0,0 @@
-# Makefile.in generated by automake 1.18.1 from Makefile.am.
-# @configure_input@
-
-# Copyright (C) 1994-2025 Free Software Foundation, Inc.
-
-# This Makefile.in is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-@SET_MAKE@
-
-
-
-VPATH = @srcdir@
-am__is_gnu_make = { \
-  if test -z '$(MAKELEVEL)'; then \
-    false; \
-  elif test -n '$(MAKE_HOST)'; then \
-    true; \
-  elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \
-    true; \
-  else \
-    false; \
-  fi; \
-}
-am__make_running_with_option = \
-  case $${target_option-} in \
-      ?) ;; \
-      *) echo "am__make_running_with_option: internal error: invalid" \
-              "target option '$${target_option-}' specified" >&2; \
-         exit 1;; \
-  esac; \
-  has_opt=no; \
-  sane_makeflags=$$MAKEFLAGS; \
-  if $(am__is_gnu_make); then \
-    sane_makeflags=$$MFLAGS; \
-  else \
-    case $$MAKEFLAGS in \
-      *\\[\ \	]*) \
-        bs=\\; \
-        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
-          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
-    esac; \
-  fi; \
-  skip_next=no; \
-  strip_trailopt () \
-  { \
-    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
-  }; \
-  for flg in $$sane_makeflags; do \
-    test $$skip_next = yes && { skip_next=no; continue; }; \
-    case $$flg in \
-      *=*|--*) continue;; \
-        -*I) strip_trailopt 'I'; skip_next=yes;; \
-      -*I?*) strip_trailopt 'I';; \
-        -*O) strip_trailopt 'O'; skip_next=yes;; \
-      -*O?*) strip_trailopt 'O';; \
-        -*l) strip_trailopt 'l'; skip_next=yes;; \
-      -*l?*) strip_trailopt 'l';; \
-      -[dEDm]) skip_next=yes;; \
-      -[JT]) skip_next=yes;; \
-    esac; \
-    case $$flg in \
-      *$$target_option*) has_opt=yes; break;; \
-    esac; \
-  done; \
-  test $$has_opt = yes
-am__make_dryrun = (target_option=n; $(am__make_running_with_option))
-am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
-am__rm_f = rm -f $(am__rm_f_notfound)
-am__rm_rf = rm -rf $(am__rm_f_notfound)
-pkgdatadir = $(datadir)/@PACKAGE@
-pkgincludedir = $(includedir)/@PACKAGE@
-pkglibdir = $(libdir)/@PACKAGE@
-pkglibexecdir = $(libexecdir)/@PACKAGE@
-am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
-install_sh_DATA = $(install_sh) -c -m 644
-install_sh_PROGRAM = $(install_sh) -c
-install_sh_SCRIPT = $(install_sh) -c
-INSTALL_HEADER = $(INSTALL_DATA)
-transform = $(program_transform_name)
-NORMAL_INSTALL = :
-PRE_INSTALL = :
-POST_INSTALL = :
-NORMAL_UNINSTALL = :
-PRE_UNINSTALL = :
-POST_UNINSTALL = :
-build_triplet = @build@
-host_triplet = @host@
-subdir = src
-ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/ax_gcc_builtin.m4 \
-	$(top_srcdir)/m4/libtool.m4 $(top_srcdir)/m4/ltoptions.m4 \
-	$(top_srcdir)/m4/ltsugar.m4 $(top_srcdir)/m4/ltversion.m4 \
-	$(top_srcdir)/m4/lt~obsolete.m4 $(top_srcdir)/configure.ac
-am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
-	$(ACLOCAL_M4)
-DIST_COMMON = $(srcdir)/Makefile.am $(libXextinclude_HEADERS) \
-	$(am__DIST_COMMON)
-mkinstalldirs = $(install_sh) -d
-CONFIG_HEADER = $(top_builddir)/config.h
-CONFIG_CLEAN_FILES =
-CONFIG_CLEAN_VPATH_FILES =
-am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
-am__vpath_adj = case $$p in \
-    $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
-    *) f=$$p;; \
-  esac;
-am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
-am__install_max = 40
-am__nobase_strip_setup = \
-  srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
-am__nobase_strip = \
-  for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
-am__nobase_list = $(am__nobase_strip_setup); \
-  for p in $$list; do echo "$$p $$p"; done | \
-  sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
-  $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
-    if (++n[$$2] == $(am__install_max)) \
-      { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
-    END { for (dir in files) print dir, files[dir] }'
-am__base_list = \
-  sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
-  sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
-am__uninstall_files_from_dir = { \
-  { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
-  || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
-       $(am__cd) "$$dir" && echo $$files | $(am__xargs_n) 40 $(am__rm_f); }; \
-  }
-am__installdirs = "$(DESTDIR)$(libdir)" "$(DESTDIR)$(lintlibdir)" \
-	"$(DESTDIR)$(libXextincludedir)"
-LTLIBRARIES = $(lib_LTLIBRARIES)
-am__DEPENDENCIES_1 =
-libXext_la_DEPENDENCIES = $(LTLIBOBJS) $(am__DEPENDENCIES_1)
-am_libXext_la_OBJECTS = DPMS.lo MITMisc.lo XAppgroup.lo XEVI.lo \
-	XLbx.lo XMultibuf.lo XSecurity.lo XShape.lo XShm.lo XSync.lo \
-	XTestExt1.lo Xcup.lo Xdbe.lo Xge.lo extutil.lo globals.lo
-libXext_la_OBJECTS = $(am_libXext_la_OBJECTS)
-AM_V_lt = $(am__v_lt_@AM_V@)
-am__v_lt_ = $(am__v_lt_@AM_DEFAULT_V@)
-am__v_lt_0 = --silent
-am__v_lt_1 = 
-libXext_la_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \
-	$(LIBTOOLFLAGS) --mode=link $(CCLD) $(AM_CFLAGS) $(CFLAGS) \
-	$(libXext_la_LDFLAGS) $(LDFLAGS) -o $@
-AM_V_P = $(am__v_P_@AM_V@)
-am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
-am__v_P_0 = false
-am__v_P_1 = :
-AM_V_GEN = $(am__v_GEN_@AM_V@)
-am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
-am__v_GEN_0 = @echo "  GEN     " $@;
-am__v_GEN_1 = 
-AM_V_at = $(am__v_at_@AM_V@)
-am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
-am__v_at_0 = @
-am__v_at_1 = 
-DEFAULT_INCLUDES = -I.@am__isrc@ -I$(top_builddir)
-depcomp = $(SHELL) $(top_srcdir)/depcomp
-am__maybe_remake_depfiles = depfiles
-am__depfiles_remade = $(DEPDIR)/reallocarray.Plo ./$(DEPDIR)/DPMS.Plo \
-	./$(DEPDIR)/MITMisc.Plo ./$(DEPDIR)/XAppgroup.Plo \
-	./$(DEPDIR)/XEVI.Plo ./$(DEPDIR)/XLbx.Plo \
-	./$(DEPDIR)/XMultibuf.Plo ./$(DEPDIR)/XSecurity.Plo \
-	./$(DEPDIR)/XShape.Plo ./$(DEPDIR)/XShm.Plo \
-	./$(DEPDIR)/XSync.Plo ./$(DEPDIR)/XTestExt1.Plo \
-	./$(DEPDIR)/Xcup.Plo ./$(DEPDIR)/Xdbe.Plo ./$(DEPDIR)/Xge.Plo \
-	./$(DEPDIR)/extutil.Plo ./$(DEPDIR)/globals.Plo
-am__mv = mv -f
-COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \
-	$(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
-LTCOMPILE = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \
-	$(LIBTOOLFLAGS) --mode=compile $(CC) $(DEFS) \
-	$(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) \
-	$(AM_CFLAGS) $(CFLAGS)
-AM_V_CC = $(am__v_CC_@AM_V@)
-am__v_CC_ = $(am__v_CC_@AM_DEFAULT_V@)
-am__v_CC_0 = @echo "  CC      " $@;
-am__v_CC_1 = 
-CCLD = $(CC)
-LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \
-	$(LIBTOOLFLAGS) --mode=link $(CCLD) $(AM_CFLAGS) $(CFLAGS) \
-	$(AM_LDFLAGS) $(LDFLAGS) -o $@
-AM_V_CCLD = $(am__v_CCLD_@AM_V@)
-am__v_CCLD_ = $(am__v_CCLD_@AM_DEFAULT_V@)
-am__v_CCLD_0 = @echo "  CCLD    " $@;
-am__v_CCLD_1 = 
-SOURCES = $(libXext_la_SOURCES)
-DIST_SOURCES = $(libXext_la_SOURCES)
-am__can_run_installinfo = \
-  case $$AM_UPDATE_INFO_DIR in \
-    n|no|NO) false;; \
-    *) (install-info --version) >/dev/null 2>&1;; \
-  esac
-DATA = $(lintlib_DATA)
-HEADERS = $(libXextinclude_HEADERS)
-am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
-# Read a list of newline-separated strings from the standard input,
-# and print each of them once, without duplicates.  Input order is
-# *not* preserved.
-am__uniquify_input = $(AWK) '\
-  BEGIN { nonempty = 0; } \
-  { items[$$0] = 1; nonempty = 1; } \
-  END { if (nonempty) { for (i in items) print i; }; } \
-'
-# Make sure the list of sources is unique.  This is necessary because,
-# e.g., the same source file might be shared among _SOURCES variables
-# for different programs/libraries.
-am__define_uniq_tagged_files = \
-  list='$(am__tagged_files)'; \
-  unique=`for i in $$list; do \
-    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
-  done | $(am__uniquify_input)`
-am__DIST_COMMON = $(srcdir)/Makefile.in $(top_srcdir)/depcomp \
-	reallocarray.c
-DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
-ACLOCAL = @ACLOCAL@
-ADMIN_MAN_DIR = @ADMIN_MAN_DIR@
-ADMIN_MAN_SUFFIX = @ADMIN_MAN_SUFFIX@
-AMTAR = @AMTAR@
-AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
-APP_MAN_DIR = @APP_MAN_DIR@
-APP_MAN_SUFFIX = @APP_MAN_SUFFIX@
-AR = @AR@
-AUTOCONF = @AUTOCONF@
-AUTOHEADER = @AUTOHEADER@
-AUTOMAKE = @AUTOMAKE@
-AWK = @AWK@
-BASE_CFLAGS = @BASE_CFLAGS@
-CC = @CC@
-CCDEPMODE = @CCDEPMODE@
-CFLAGS = @CFLAGS@
-CHANGELOG_CMD = @CHANGELOG_CMD@
-CPPFLAGS = @CPPFLAGS@
-CSCOPE = @CSCOPE@
-CTAGS = @CTAGS@
-CWARNFLAGS = @CWARNFLAGS@
-CYGPATH_W = @CYGPATH_W@
-DEFS = @DEFS@
-DEPDIR = @DEPDIR@
-DLLTOOL = @DLLTOOL@
-DRIVER_MAN_DIR = @DRIVER_MAN_DIR@
-DRIVER_MAN_SUFFIX = @DRIVER_MAN_SUFFIX@
-DSYMUTIL = @DSYMUTIL@
-DUMPBIN = @DUMPBIN@
-ECHO_C = @ECHO_C@
-ECHO_N = @ECHO_N@
-ECHO_T = @ECHO_T@
-EGREP = @EGREP@
-ETAGS = @ETAGS@
-EXEEXT = @EXEEXT@
-FGREP = @FGREP@
-FILECMD = @FILECMD@
-FILE_MAN_DIR = @FILE_MAN_DIR@
-FILE_MAN_SUFFIX = @FILE_MAN_SUFFIX@
-FOP = @FOP@
-GREP = @GREP@
-INSTALL = @INSTALL@
-INSTALL_CMD = @INSTALL_CMD@
-INSTALL_DATA = @INSTALL_DATA@
-INSTALL_PROGRAM = @INSTALL_PROGRAM@
-INSTALL_SCRIPT = @INSTALL_SCRIPT@
-INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
-LD = @LD@
-LDFLAGS = @LDFLAGS@
-LIBOBJS = @LIBOBJS@
-LIBS = @LIBS@
-LIBTOOL = @LIBTOOL@
-LIB_MAN_DIR = @LIB_MAN_DIR@
-LIB_MAN_SUFFIX = @LIB_MAN_SUFFIX@
-LINT = @LINT@
-LINTLIB = @LINTLIB@
-LINT_FLAGS = @LINT_FLAGS@
-LIPO = @LIPO@
-LN_S = @LN_S@
-LTLIBOBJS = @LTLIBOBJS@
-LT_SYS_LIBRARY_PATH = @LT_SYS_LIBRARY_PATH@
-MAKEINFO = @MAKEINFO@
-MALLOC_ZERO_CFLAGS = @MALLOC_ZERO_CFLAGS@
-MANIFEST_TOOL = @MANIFEST_TOOL@
-MAN_SUBSTS = @MAN_SUBSTS@
-MISC_MAN_DIR = @MISC_MAN_DIR@
-MISC_MAN_SUFFIX = @MISC_MAN_SUFFIX@
-MKDIR_P = @MKDIR_P@
-NM = @NM@
-NMEDIT = @NMEDIT@
-OBJDUMP = @OBJDUMP@
-OBJEXT = @OBJEXT@
-OTOOL = @OTOOL@
-OTOOL64 = @OTOOL64@
-PACKAGE = @PACKAGE@
-PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
-PACKAGE_NAME = @PACKAGE_NAME@
-PACKAGE_STRING = @PACKAGE_STRING@
-PACKAGE_TARNAME = @PACKAGE_TARNAME@
-PACKAGE_URL = @PACKAGE_URL@
-PACKAGE_VERSION = @PACKAGE_VERSION@
-PATH_SEPARATOR = @PATH_SEPARATOR@
-PKG_CONFIG = @PKG_CONFIG@
-PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
-PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
-RANLIB = @RANLIB@
-SED = @SED@
-SET_MAKE = @SET_MAKE@
-SHELL = @SHELL@
-STRICT_CFLAGS = @STRICT_CFLAGS@
-STRIP = @STRIP@
-STYLESHEET_SRCDIR = @STYLESHEET_SRCDIR@
-VERSION = @VERSION@
-XEXT_CFLAGS = @XEXT_CFLAGS@
-XEXT_LIBS = @XEXT_LIBS@
-XEXT_SOREV = @XEXT_SOREV@
-XMALLOC_ZERO_CFLAGS = @XMALLOC_ZERO_CFLAGS@
-XMLTO = @XMLTO@
-XORG_MAN_PAGE = @XORG_MAN_PAGE@
-XORG_SGML_PATH = @XORG_SGML_PATH@
-XSLTPROC = @XSLTPROC@
-XSL_STYLESHEET = @XSL_STYLESHEET@
-XTMALLOC_ZERO_CFLAGS = @XTMALLOC_ZERO_CFLAGS@
-abs_builddir = @abs_builddir@
-abs_srcdir = @abs_srcdir@
-abs_top_builddir = @abs_top_builddir@
-abs_top_srcdir = @abs_top_srcdir@
-ac_ct_AR = @ac_ct_AR@
-ac_ct_CC = @ac_ct_CC@
-ac_ct_DUMPBIN = @ac_ct_DUMPBIN@
-am__include = @am__include@
-am__leading_dot = @am__leading_dot@
-am__quote = @am__quote@
-am__rm_f_notfound = @am__rm_f_notfound@
-am__tar = @am__tar@
-am__untar = @am__untar@
-am__xargs_n = @am__xargs_n@
-bindir = @bindir@
-build = @build@
-build_alias = @build_alias@
-build_cpu = @build_cpu@
-build_os = @build_os@
-build_vendor = @build_vendor@
-builddir = @builddir@
-datadir = @datadir@
-datarootdir = @datarootdir@
-docdir = @docdir@
-dvidir = @dvidir@
-exec_prefix = @exec_prefix@
-host = @host@
-host_alias = @host_alias@
-host_cpu = @host_cpu@
-host_os = @host_os@
-host_vendor = @host_vendor@
-htmldir = @htmldir@
-includedir = @includedir@
-infodir = @infodir@
-install_sh = @install_sh@
-libdir = @libdir@
-libexecdir = @libexecdir@
-localedir = @localedir@
-localstatedir = @localstatedir@
-mandir = @mandir@
-mkdir_p = @mkdir_p@
-oldincludedir = @oldincludedir@
-pdfdir = @pdfdir@
-prefix = @prefix@
-program_transform_name = @program_transform_name@
-psdir = @psdir@
-runstatedir = @runstatedir@
-sbindir = @sbindir@
-sharedstatedir = @sharedstatedir@
-srcdir = @srcdir@
-sysconfdir = @sysconfdir@
-target_alias = @target_alias@
-top_build_prefix = @top_build_prefix@
-top_builddir = @top_builddir@
-top_srcdir = @top_srcdir@
-lib_LTLIBRARIES = libXext.la
-AM_CPPFLAGS = \
-          -I$(top_srcdir)/include \
-          -I$(top_srcdir)/include/X11/extensions\
-          $(XEXT_CFLAGS) $(MALLOC_ZERO_CFLAGS)
-
-AM_CFLAGS = $(CWARNFLAGS)
-libXext_la_LDFLAGS = -version-number $(XEXT_SOREV) -no-undefined
-libXext_la_LIBADD = $(LTLIBOBJS) $(XEXT_LIBS)
-libXext_la_SOURCES = \
-	DPMS.c \
-	MITMisc.c \
-	XAppgroup.c \
-	XEVI.c \
-	XLbx.c \
-	XMultibuf.c \
-	XSecurity.c \
-	XShape.c \
-	XShm.c \
-	XSync.c \
-	XTestExt1.c \
-	Xcup.c \
-	Xdbe.c \
-        Xge.c \
-	extutil.c \
-	extutilP.h \
-	reallocarray.h \
-        globals.c
-
-libXextincludedir = $(includedir)/X11/extensions
-libXextinclude_HEADERS = $(top_srcdir)/include/X11/extensions/dpms.h \
-			 $(top_srcdir)/include/X11/extensions/extutil.h \
-			 $(top_srcdir)/include/X11/extensions/MITMisc.h \
-			 $(top_srcdir)/include/X11/extensions/multibuf.h \
-			 $(top_srcdir)/include/X11/extensions/security.h \
-			 $(top_srcdir)/include/X11/extensions/shape.h \
-			 $(top_srcdir)/include/X11/extensions/sync.h \
-			 $(top_srcdir)/include/X11/extensions/Xag.h \
-			 $(top_srcdir)/include/X11/extensions/Xcup.h \
-			 $(top_srcdir)/include/X11/extensions/Xdbe.h \
-			 $(top_srcdir)/include/X11/extensions/XEVI.h \
-			 $(top_srcdir)/include/X11/extensions/Xext.h \
-			 $(top_srcdir)/include/X11/extensions/Xge.h \
-			 $(top_srcdir)/include/X11/extensions/XLbx.h \
-			 $(top_srcdir)/include/X11/extensions/XShm.h \
-			 $(top_srcdir)/include/X11/extensions/xtestext1.h
-
-@LINT_TRUE@ALL_LINT_FLAGS = $(LINT_FLAGS) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) \
-@LINT_TRUE@                $(AM_CPPFLAGS) $(CPPFLAGS)
-
-@MAKE_LINT_LIB_TRUE@lintlibdir = $(libdir)
-@MAKE_LINT_LIB_TRUE@lintlib_DATA = $(LINTLIB)
-all: all-am
-
-.SUFFIXES:
-.SUFFIXES: .c .lo .o .obj
-$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
-	@for dep in $?; do \
-	  case '$(am__configure_deps)' in \
-	    *$$dep*) \
-	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
-	        && { if test -f $@; then exit 0; else break; fi; }; \
-	      exit 1;; \
-	  esac; \
-	done; \
-	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign src/Makefile'; \
-	$(am__cd) $(top_srcdir) && \
-	  $(AUTOMAKE) --foreign src/Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
-	@case '$?' in \
-	  *config.status*) \
-	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
-	  *) \
-	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles)'; \
-	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles);; \
-	esac;
-
-$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-
-$(top_srcdir)/configure:  $(am__configure_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(am__aclocal_m4_deps):
-
-install-libLTLIBRARIES: $(lib_LTLIBRARIES)
-	@$(NORMAL_INSTALL)
-	@list='$(lib_LTLIBRARIES)'; test -n "$(libdir)" || list=; \
-	list2=; for p in $$list; do \
-	  if test -f $$p; then \
-	    list2="$$list2 $$p"; \
-	  else :; fi; \
-	done; \
-	test -z "$$list2" || { \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(libdir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(libdir)" || exit 1; \
-	  echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 '$(DESTDIR)$(libdir)'"; \
-	  $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 "$(DESTDIR)$(libdir)"; \
-	}
-
-uninstall-libLTLIBRARIES:
-	@$(NORMAL_UNINSTALL)
-	@list='$(lib_LTLIBRARIES)'; test -n "$(libdir)" || list=; \
-	for p in $$list; do \
-	  $(am__strip_dir) \
-	  echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f '$(DESTDIR)$(libdir)/$$f'"; \
-	  $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f "$(DESTDIR)$(libdir)/$$f"; \
-	done
-
-clean-libLTLIBRARIES:
-	-$(am__rm_f) $(lib_LTLIBRARIES)
-	@list='$(lib_LTLIBRARIES)'; \
-	locs=`for p in $$list; do echo $$p; done | \
-	      sed 's|^[^/]*$$|.|; s|/[^/]*$$||; s|$$|/so_locations|' | \
-	      sort -u`; \
-	echo rm -f $${locs}; \
-	$(am__rm_f) $${locs}
-
-libXext.la: $(libXext_la_OBJECTS) $(libXext_la_DEPENDENCIES) $(EXTRA_libXext_la_DEPENDENCIES) 
-	$(AM_V_CCLD)$(libXext_la_LINK) -rpath $(libdir) $(libXext_la_OBJECTS) $(libXext_la_LIBADD) $(LIBS)
-
-mostlyclean-compile:
-	-rm -f *.$(OBJEXT)
-
-distclean-compile:
-	-rm -f *.tab.c
-
-@AMDEP_TRUE@@am__include@ @am__quote@$(DEPDIR)/reallocarray.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/DPMS.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/MITMisc.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/XAppgroup.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/XEVI.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/XLbx.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/XMultibuf.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/XSecurity.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/XShape.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/XShm.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/XSync.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/XTestExt1.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/Xcup.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/Xdbe.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/Xge.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/extutil.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/globals.Plo@am__quote@ # am--include-marker
-
-$(am__depfiles_remade):
-	@$(MKDIR_P) $(@D)
-	@: >>$@
-
-am--depfiles: $(am__depfiles_remade)
-
-.c.o:
-@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
-@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
-@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
-@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
-@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c -o $@ $<
-
-.c.obj:
-@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ `$(CYGPATH_W) '$<'`
-@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
-@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
-@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
-@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c -o $@ `$(CYGPATH_W) '$<'`
-
-.c.lo:
-@am__fastdepCC_TRUE@	$(AM_V_CC)$(LTCOMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
-@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Plo
-@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=yes @AMDEPBACKSLASH@
-@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
-@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(LTCOMPILE) -c -o $@ $<
-
-mostlyclean-libtool:
-	-rm -f *.lo
-
-clean-libtool:
-	-rm -rf .libs _libs
-install-lintlibDATA: $(lintlib_DATA)
-	@$(NORMAL_INSTALL)
-	@list='$(lintlib_DATA)'; test -n "$(lintlibdir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(lintlibdir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(lintlibdir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(lintlibdir)'"; \
-	  $(INSTALL_DATA) $$files "$(DESTDIR)$(lintlibdir)" || exit $$?; \
-	done
-
-uninstall-lintlibDATA:
-	@$(NORMAL_UNINSTALL)
-	@list='$(lintlib_DATA)'; test -n "$(lintlibdir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(lintlibdir)'; $(am__uninstall_files_from_dir)
-install-libXextincludeHEADERS: $(libXextinclude_HEADERS)
-	@$(NORMAL_INSTALL)
-	@list='$(libXextinclude_HEADERS)'; test -n "$(libXextincludedir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(libXextincludedir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(libXextincludedir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_HEADER) $$files '$(DESTDIR)$(libXextincludedir)'"; \
-	  $(INSTALL_HEADER) $$files "$(DESTDIR)$(libXextincludedir)" || exit $$?; \
-	done
-
-uninstall-libXextincludeHEADERS:
-	@$(NORMAL_UNINSTALL)
-	@list='$(libXextinclude_HEADERS)'; test -n "$(libXextincludedir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(libXextincludedir)'; $(am__uninstall_files_from_dir)
-
-ID: $(am__tagged_files)
-	$(am__define_uniq_tagged_files); mkid -fID $$unique
-tags: tags-am
-TAGS: tags
-
-tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
-	set x; \
-	here=`pwd`; \
-	$(am__define_uniq_tagged_files); \
-	shift; \
-	if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
-	  test -n "$$unique" || unique=$$empty_fix; \
-	  if test $$# -gt 0; then \
-	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
-	      "$$@" $$unique; \
-	  else \
-	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
-	      $$unique; \
-	  fi; \
-	fi
-ctags: ctags-am
-
-CTAGS: ctags
-ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
-	$(am__define_uniq_tagged_files); \
-	test -z "$(CTAGS_ARGS)$$unique" \
-	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
-	     $$unique
-
-GTAGS:
-	here=`$(am__cd) $(top_builddir) && pwd` \
-	  && $(am__cd) $(top_srcdir) \
-	  && gtags -i $(GTAGS_ARGS) "$$here"
-cscopelist: cscopelist-am
-
-cscopelist-am: $(am__tagged_files)
-	list='$(am__tagged_files)'; \
-	case "$(srcdir)" in \
-	  [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
-	  *) sdir=$(subdir)/$(srcdir) ;; \
-	esac; \
-	for i in $$list; do \
-	  if test -f "$$i"; then \
-	    echo "$(subdir)/$$i"; \
-	  else \
-	    echo "$$sdir/$$i"; \
-	  fi; \
-	done >> $(top_builddir)/cscope.files
-
-distclean-tags:
-	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
-
-distdir: $(BUILT_SOURCES)
-	$(MAKE) $(AM_MAKEFLAGS) distdir-am
-
-distdir-am: $(DISTFILES)
-	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	list='$(DISTFILES)'; \
-	  dist_files=`for file in $$list; do echo $$file; done | \
-	  sed -e "s|^$$srcdirstrip/||;t" \
-	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
-	case $$dist_files in \
-	  */*) $(MKDIR_P) `echo "$$dist_files" | \
-			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
-			   sort -u` ;; \
-	esac; \
-	for file in $$dist_files; do \
-	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
-	  if test -d $$d/$$file; then \
-	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
-	    if test -d "$(distdir)/$$file"; then \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
-	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
-	  else \
-	    test -f "$(distdir)/$$file" \
-	    || cp -p $$d/$$file "$(distdir)/$$file" \
-	    || exit 1; \
-	  fi; \
-	done
-check-am: all-am
-check: check-am
-all-am: Makefile $(LTLIBRARIES) $(DATA) $(HEADERS)
-installdirs:
-	for dir in "$(DESTDIR)$(libdir)" "$(DESTDIR)$(lintlibdir)" "$(DESTDIR)$(libXextincludedir)"; do \
-	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
-	done
-install: install-am
-install-exec: install-exec-am
-install-data: install-data-am
-uninstall: uninstall-am
-
-install-am: all-am
-	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
-
-installcheck: installcheck-am
-install-strip:
-	if test -z '$(STRIP)'; then \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	      install; \
-	else \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
-	fi
-mostlyclean-generic:
-
-clean-generic:
-
-distclean-generic:
-	-$(am__rm_f) $(CONFIG_CLEAN_FILES)
-	-test . = "$(srcdir)" || $(am__rm_f) $(CONFIG_CLEAN_VPATH_FILES)
-
-maintainer-clean-generic:
-	@echo "This command is intended for maintainers to use"
-	@echo "it deletes files that may require special tools to rebuild."
-clean: clean-am
-
-clean-am: clean-generic clean-libLTLIBRARIES clean-libtool \
-	mostlyclean-am
-
-distclean: distclean-am
-	-rm -f $(DEPDIR)/reallocarray.Plo
-	-rm -f ./$(DEPDIR)/DPMS.Plo
-	-rm -f ./$(DEPDIR)/MITMisc.Plo
-	-rm -f ./$(DEPDIR)/XAppgroup.Plo
-	-rm -f ./$(DEPDIR)/XEVI.Plo
-	-rm -f ./$(DEPDIR)/XLbx.Plo
-	-rm -f ./$(DEPDIR)/XMultibuf.Plo
-	-rm -f ./$(DEPDIR)/XSecurity.Plo
-	-rm -f ./$(DEPDIR)/XShape.Plo
-	-rm -f ./$(DEPDIR)/XShm.Plo
-	-rm -f ./$(DEPDIR)/XSync.Plo
-	-rm -f ./$(DEPDIR)/XTestExt1.Plo
-	-rm -f ./$(DEPDIR)/Xcup.Plo
-	-rm -f ./$(DEPDIR)/Xdbe.Plo
-	-rm -f ./$(DEPDIR)/Xge.Plo
-	-rm -f ./$(DEPDIR)/extutil.Plo
-	-rm -f ./$(DEPDIR)/globals.Plo
-	-rm -f Makefile
-distclean-am: clean-am distclean-compile distclean-generic \
-	distclean-tags
-
-dvi: dvi-am
-
-dvi-am:
-
-html: html-am
-
-html-am:
-
-info: info-am
-
-info-am:
-
-install-data-am: install-libXextincludeHEADERS install-lintlibDATA
-
-install-dvi: install-dvi-am
-
-install-dvi-am:
-
-install-exec-am: install-libLTLIBRARIES
-
-install-html: install-html-am
-
-install-html-am:
-
-install-info: install-info-am
-
-install-info-am:
-
-install-man:
-
-install-pdf: install-pdf-am
-
-install-pdf-am:
-
-install-ps: install-ps-am
-
-install-ps-am:
-
-installcheck-am:
-
-maintainer-clean: maintainer-clean-am
-	-rm -f $(DEPDIR)/reallocarray.Plo
-	-rm -f ./$(DEPDIR)/DPMS.Plo
-	-rm -f ./$(DEPDIR)/MITMisc.Plo
-	-rm -f ./$(DEPDIR)/XAppgroup.Plo
-	-rm -f ./$(DEPDIR)/XEVI.Plo
-	-rm -f ./$(DEPDIR)/XLbx.Plo
-	-rm -f ./$(DEPDIR)/XMultibuf.Plo
-	-rm -f ./$(DEPDIR)/XSecurity.Plo
-	-rm -f ./$(DEPDIR)/XShape.Plo
-	-rm -f ./$(DEPDIR)/XShm.Plo
-	-rm -f ./$(DEPDIR)/XSync.Plo
-	-rm -f ./$(DEPDIR)/XTestExt1.Plo
-	-rm -f ./$(DEPDIR)/Xcup.Plo
-	-rm -f ./$(DEPDIR)/Xdbe.Plo
-	-rm -f ./$(DEPDIR)/Xge.Plo
-	-rm -f ./$(DEPDIR)/extutil.Plo
-	-rm -f ./$(DEPDIR)/globals.Plo
-	-rm -f Makefile
-maintainer-clean-am: distclean-am maintainer-clean-generic
-
-mostlyclean: mostlyclean-am
-
-mostlyclean-am: mostlyclean-compile mostlyclean-generic \
-	mostlyclean-libtool
-
-pdf: pdf-am
-
-pdf-am:
-
-ps: ps-am
-
-ps-am:
-
-uninstall-am: uninstall-libLTLIBRARIES uninstall-libXextincludeHEADERS \
-	uninstall-lintlibDATA
-
-.MAKE: install-am install-strip
-
-.PHONY: CTAGS GTAGS TAGS all all-am am--depfiles check check-am clean \
-	clean-generic clean-libLTLIBRARIES clean-libtool cscopelist-am \
-	ctags ctags-am distclean distclean-compile distclean-generic \
-	distclean-libtool distclean-tags distdir dvi dvi-am html \
-	html-am info info-am install install-am install-data \
-	install-data-am install-dvi install-dvi-am install-exec \
-	install-exec-am install-html install-html-am install-info \
-	install-info-am install-libLTLIBRARIES \
-	install-libXextincludeHEADERS install-lintlibDATA install-man \
-	install-pdf install-pdf-am install-ps install-ps-am \
-	install-strip installcheck installcheck-am installdirs \
-	maintainer-clean maintainer-clean-generic mostlyclean \
-	mostlyclean-compile mostlyclean-generic mostlyclean-libtool \
-	pdf pdf-am ps ps-am tags tags-am uninstall uninstall-am \
-	uninstall-libLTLIBRARIES uninstall-libXextincludeHEADERS \
-	uninstall-lintlibDATA
-
-.PRECIOUS: Makefile
-
-
-@LINT_TRUE@lint:
-@LINT_TRUE@	$(LINT) $(ALL_LINT_FLAGS) $(libXext_la_SOURCES) $(XEXT_LIBS)
-
-@MAKE_LINT_LIB_TRUE@$(LINTLIB): $(libXext_la_SOURCES)
-@MAKE_LINT_LIB_TRUE@	$(LINT) -y -oXext -x $(ALL_LINT_FLAGS) $(libXext_la_SOURCES)
-
-# Tell versions [3.59,3.63) of GNU make to not export all variables.
-# Otherwise a system limit (for SysV at least) may be exceeded.
-.NOEXPORT:
-
-# Tell GNU make to disable its built-in pattern rules.
-%:: %,v
-%:: RCS/%,v
-%:: RCS/%
-%:: s.%
-%:: SCCS/s.%
diff --git a/experiments/wasm-gui/third_party/libXext/src/XAppgroup.lo b/experiments/wasm-gui/third_party/libXext/src/XAppgroup.lo
deleted file mode 100644
index d6e01189c..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/XAppgroup.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# XAppgroup.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='XAppgroup.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/XEVI.lo b/experiments/wasm-gui/third_party/libXext/src/XEVI.lo
deleted file mode 100644
index db3fe8f1b..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/XEVI.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# XEVI.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='XEVI.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/XLbx.lo b/experiments/wasm-gui/third_party/libXext/src/XLbx.lo
deleted file mode 100644
index d1cf35e85..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/XLbx.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# XLbx.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='XLbx.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/XMultibuf.lo b/experiments/wasm-gui/third_party/libXext/src/XMultibuf.lo
deleted file mode 100644
index 9a4ea06f5..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/XMultibuf.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# XMultibuf.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='XMultibuf.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/XSecurity.lo b/experiments/wasm-gui/third_party/libXext/src/XSecurity.lo
deleted file mode 100644
index 69b2fa338..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/XSecurity.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# XSecurity.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='XSecurity.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/XShape.lo b/experiments/wasm-gui/third_party/libXext/src/XShape.lo
deleted file mode 100644
index baeee4c35..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/XShape.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# XShape.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='XShape.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/XShm.lo b/experiments/wasm-gui/third_party/libXext/src/XShm.lo
deleted file mode 100644
index 7360f058f..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/XShm.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# XShm.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='XShm.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/XSync.lo b/experiments/wasm-gui/third_party/libXext/src/XSync.lo
deleted file mode 100644
index b8eb88411..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/XSync.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# XSync.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='XSync.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/XTestExt1.lo b/experiments/wasm-gui/third_party/libXext/src/XTestExt1.lo
deleted file mode 100644
index 27d814506..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/XTestExt1.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# XTestExt1.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='XTestExt1.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/Xcup.lo b/experiments/wasm-gui/third_party/libXext/src/Xcup.lo
deleted file mode 100644
index e248d3b46..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/Xcup.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# Xcup.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='Xcup.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/Xdbe.lo b/experiments/wasm-gui/third_party/libXext/src/Xdbe.lo
deleted file mode 100644
index 00026994e..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/Xdbe.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# Xdbe.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='Xdbe.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/Xge.lo b/experiments/wasm-gui/third_party/libXext/src/Xge.lo
deleted file mode 100644
index 317487d37..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/Xge.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# Xge.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='Xge.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/extutil.lo b/experiments/wasm-gui/third_party/libXext/src/extutil.lo
deleted file mode 100644
index 223f42990..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/extutil.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# extutil.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='extutil.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/globals.lo b/experiments/wasm-gui/third_party/libXext/src/globals.lo
deleted file mode 100644
index 1f6d356d9..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/globals.lo
+++ /dev/null
@@ -1,12 +0,0 @@
-# globals.lo - a libtool object file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=none
-
-# Name of the non-PIC object
-non_pic_object='globals.o'
-
diff --git a/experiments/wasm-gui/third_party/libXext/src/libXext.la b/experiments/wasm-gui/third_party/libXext/src/libXext.la
deleted file mode 100644
index 639a11223..000000000
--- a/experiments/wasm-gui/third_party/libXext/src/libXext.la
+++ /dev/null
@@ -1,41 +0,0 @@
-# libXext.la - a libtool library file
-# Generated by libtool (GNU libtool) 2.5.4
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# The name that we can dlopen(3).
-dlname=''
-
-# Names of this library.
-library_names=''
-
-# The name of the static archive.
-old_library='libXext.a'
-
-# Linker flags that cannot go in dependency_libs.
-inherited_linker_flags=''
-
-# Libraries that this one depends upon.
-dependency_libs=' -L/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1 /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib/libX11.la /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib/libxcb.la -lXau /home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib/libXdmcp.la -lwasi-emulated-mman -ldl'
-
-# Names of additional weak libraries provided by this library
-weak_library_names=''
-
-# Version information for libXext.
-current=10
-age=4
-revision=0
-
-# Is this an already installed library?
-installed=no
-
-# Should we warn about portability when linking against -modules?
-shouldnotlink=no
-
-# Files to dlopen/dlpreopen
-dlopen=''
-dlpreopen=''
-
-# Directory that this library needs to be installed in:
-libdir='/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib'
diff --git a/experiments/wasm-gui/third_party/libXext/stamp-h1 b/experiments/wasm-gui/third_party/libXext/stamp-h1
deleted file mode 100644
index 4547fe1b5..000000000
--- a/experiments/wasm-gui/third_party/libXext/stamp-h1
+++ /dev/null
@@ -1 +0,0 @@
-timestamp for config.h
diff --git a/experiments/wasm-gui/third_party/libXext/xext.pc b/experiments/wasm-gui/third_party/libXext/xext.pc
deleted file mode 100644
index bf1a6a37a..000000000
--- a/experiments/wasm-gui/third_party/libXext/xext.pc
+++ /dev/null
@@ -1,12 +0,0 @@
-prefix=/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix
-exec_prefix=${prefix}
-libdir=${exec_prefix}/lib
-includedir=${prefix}/include
-
-Name: Xext
-Description: Misc X Extension Library
-Version: 1.3.7
-Requires: xextproto
-Requires.private: x11
-Cflags: -I${includedir}
-Libs: -L${libdir} -lXext
diff --git a/experiments/wasm-gui/third_party/libXfixes/AUTHORS b/experiments/wasm-gui/third_party/libXfixes/AUTHORS
deleted file mode 100644
index ab0e01b06..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/AUTHORS
+++ /dev/null
@@ -1 +0,0 @@
-Keith Packard, HP and XFree86.
diff --git a/experiments/wasm-gui/third_party/libXfixes/COPYING b/experiments/wasm-gui/third_party/libXfixes/COPYING
deleted file mode 100644
index 5b17e812d..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/COPYING
+++ /dev/null
@@ -1,41 +0,0 @@
-
-Copyright © 2001,2003 Keith Packard
-
-Permission to use, copy, modify, distribute, and sell this software and its
-documentation for any purpose is hereby granted without fee, provided that
-the above copyright notice appear in all copies and that both that
-copyright notice and this permission notice appear in supporting
-documentation, and that the name of Keith Packard not be used in
-advertising or publicity pertaining to distribution of the software without
-specific, written prior permission.  Keith Packard makes no
-representations about the suitability of this software for any purpose.  It
-is provided "as is" without express or implied warranty.
-
-KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
-INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
-EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
-CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
-DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
-TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
-PERFORMANCE OF THIS SOFTWARE.
-
-Copyright (c) 2006, Oracle and/or its affiliates.
-
-Permission is hereby granted, free of charge, to any person obtaining a
-copy of this software and associated documentation files (the "Software"),
-to deal in the Software without restriction, including without limitation
-the rights to use, copy, modify, merge, publish, distribute, sublicense,
-and/or sell copies of the Software, and to permit persons to whom the
-Software is furnished to do so, subject to the following conditions:
-
-The above copyright notice and this permission notice (including the next
-paragraph) shall be included in all copies or substantial portions of the
-Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-DEALINGS IN THE SOFTWARE.
diff --git a/experiments/wasm-gui/third_party/libXfixes/ChangeLog b/experiments/wasm-gui/third_party/libXfixes/ChangeLog
deleted file mode 100644
index 69994a4d6..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/ChangeLog
+++ /dev/null
@@ -1,938 +0,0 @@
-commit c1cab28e27dd1c5a81394965248b57e490ccf2ca
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sun Apr 9 13:27:07 2023 -0700
-
-    libXfixes 6.0.1
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 1f908b1f27723a9a8f532ab4cc58429c2f174224
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Feb 25 09:24:30 2023 -0800
-
-    Remove "All rights reserved" from Oracle copyright notices
-    
-    Oracle no longer includes this term in our copyright & license notices.
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit ad22c5ade8789cdb606b244336106a713473318c
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Mon Feb 13 15:12:32 2023 -0800
-
-    Require LT_INIT from libtool 2 instead of deprecated AC_PROG_LIBTOOL
-    
-    AC_PROG_LIBTOOL was replaced by LT_INIT in libtool 2 in 2008,
-    so it's time to rely on it.
-    
-    Clears autoconf warnings:
-    
-    configure.ac:44: warning: The macro `AC_PROG_LIBTOOL' is obsolete.
-    configure.ac:44: You should run autoupdate.
-    aclocal.m4:3465: AC_PROG_LIBTOOL is expanded from...
-    configure.ac:44: the top level
-    
-    libtoolize: Consider adding 'AC_CONFIG_MACRO_DIRS([m4])' to configure.ac,
-    libtoolize: and rerunning libtoolize and aclocal.
-    libtoolize: Consider adding '-I m4' to ACLOCAL_AMFLAGS in Makefile.am.
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 332394278b7110a774b5277bb3cfc58c42cd888c
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Nov 19 12:09:43 2022 -0800
-
-    XFixesCloseDisplay: Mark codes as unused
-    
-    Quiets clang warning:
-    Xfixes.c:206:46: warning: unused parameter 'codes' [-Wunused-parameter]
-    XFixesCloseDisplay (Display *dpy, XExtCodes *codes)
-                                                 ^
-    
-    Raises minimum required version of xproto to 7.0.22 (released June 2011)
-    for the definition of _X_UNUSED
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 64fc7592fd27bbee300085773247dd1737a5af1b
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Nov 19 12:05:59 2022 -0800
-
-    Handle 6 of 9 -Wsign-conversion warnings from clang
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 80ea445ff6865f9a04c4522c6d8b6cf940b10397
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Nov 19 11:28:19 2022 -0800
-
-    Handle 60 of 60 -Wimplicit-int-conversion warnings from clang
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 26cd44cc3d2b5db5caa42d9203a866f12c039980
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Nov 19 11:18:11 2022 -0800
-
-    Handle 63 of 63 -Wshorten-64-to-32 warnings from clang
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 2047abb224051d578a6a320b776a7e8a969a980c
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Nov 19 10:52:50 2022 -0800
-
-    Resolve 36 of 40 -Wextra-semi-stmt warnings from clang
-    
-    Wrap XFixesCheckExtension() & XFixesSimpleCheckExtension() macro
-    bodies in do { ... } while(0) so that they use the semicolon
-    provided by callers instead of letting it dangle as another statement.
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 5129fc91b8483ec3a11e18280eac00857311edfa
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Nov 19 10:47:24 2022 -0800
-
-    Quiet -Wconditional-uninitialized warnings from clang
-    
-    I believe these were false positives, as the variables were initialized
-    unless the image = NULL -> if (!image) return NULL code path was followed,
-    but this makes clang stop warning.
-    
-    Cursor.c:144:8: warning: variable 'nbytes' may be uninitialized when used here
-    [-Wconditional-uninitialized]
-        if(nbytes > nread)
-           ^~~~~~
-    Cursor.c:80:21: note: initialize the variable 'nbytes' to silence this warning
-        size_t                              nbytes , nread ;
-                                                  ^
-                                                   = 0
-    Cursor.c:144:17: warning: variable 'nread' may be uninitialized when used here
-    [-Wconditional-uninitialized]
-        if(nbytes > nread)
-                    ^~~~~
-    Cursor.c:80:29: note: initialize the variable 'nread' to silence this warning
-        size_t                              nbytes , nread ;
-                                                          ^
-                                                           = 0
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit aba73d85ce4a2fc1a5fb0ec27b15415eed21ebae
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Nov 19 10:40:43 2022 -0800
-
-    Mark two dpy parameters const as suggested by cppcheck
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 82662a3129c59d5950b52ff4daf2e47c7a87327b
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Nov 19 10:36:54 2022 -0800
-
-    Variable scope reduction as recommended by cppcheck
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit e56e1003ab225d383cda67eb61737bc14e92332c
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Nov 19 10:29:07 2022 -0800
-
-    Remove unnecessary casts from malloc & free calls
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit d10ec36c81a6b488d1f700a28c5bff4714287b78
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sun Jul 17 13:11:17 2022 -0700
-
-    gitlab CI: add a basic build test
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit a38941111da1fe9661fc3b9b505e0ba326d82d72
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sun Jul 17 13:10:06 2022 -0700
-
-    Fix spelling/wording issues
-    
-    Found by using:
-        codespell --builtin clear,rare,usage,informal,code,names
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit c454dac2c64dbf87551e957f4b0558b116621889
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sun Jul 17 13:09:32 2022 -0700
-
-    Build xz tarballs instead of bzip2
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 6fe3bd64dd82f704ed91478acb4c99ab5c00be16
-Author: Peter Hutterer <peter.hutterer@who-t.net>
-Date:   Wed May 12 09:34:39 2021 +1000
-
-    libXfixes 6.0.0
-    
-    Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>
-
-commit 883f89dd39dcdae9a38e46f74a43b316180c8a19
-Author: Olivier Fourdan <ofourdan@redhat.com>
-Date:   Thu Mar 11 09:27:06 2021 +0100
-
-    xfixes: Add ClientDisconnectMode
-    
-    The Xserver itself is capable of terminating itself once all X11 clients
-    are gone, yet in a typical full session, there are a number of X11
-    clients running continuously (e.g. the Xsettings daemon, IBus, etc.).
-    
-    Those always-running clients will prevent the Xserver from terminating,
-    because the actual number of X11 clients will never drop to 0.
-    
-    To solve this issue directly at the Xserver level, this add new entries
-    to the XFixes extension to let the X11 clients themselves specify the
-    disconnect mode they expect.
-    
-    Typically, those X11 daemon clients would specify the disconnect mode
-    XFixesClientDisconnectFlagTerminate to let the Xserver know that they
-    should not be accounted for when checking the remaining clients prior
-    to terminate.
-    
-    Signed-off-by: Olivier Fourdan <ofourdan@redhat.com>
-
-commit 174a94975af710247719310cfc53bd13e1f3b44d
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Mar 16 12:39:31 2019 -0700
-
-    Update configure.ac bug URL for gitlab migration
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 1e238b40bbef0664d281432c19634df39a19b1ee
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Mon Nov 19 21:58:32 2018 -0800
-
-    Update README for gitlab migration
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit b9b75d74c3e78c5df70c512786d1ee6db45975aa
-Author: Mihail Konev <k.mvc@ya.ru>
-Date:   Thu Jan 26 13:52:49 2017 +1000
-
-    autogen: add default patch prefix
-    
-    Signed-off-by: Mihail Konev <k.mvc@ya.ru>
-
-commit 6f950642597f2f1f509c339861d9f40baf28c39b
-Author: Emil Velikov <emil.l.velikov@gmail.com>
-Date:   Mon Mar 9 12:00:52 2015 +0000
-
-    autogen.sh: use quoted string variables
-    
-    Place quotes around the $srcdir, $ORIGDIR and $0 variables to prevent
-    fall-outs, when they contain space.
-    
-    Signed-off-by: Emil Velikov <emil.l.velikov@gmail.com>
-    Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
-    Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>
-
-commit 65845c5fc7098f9232cd356248aebc7db9a38095
-Author: Peter Hutterer <peter.hutterer@who-t.net>
-Date:   Tue Jan 24 10:32:07 2017 +1000
-
-    autogen.sh: use exec instead of waiting for configure to finish
-    
-    Syncs the invocation of configure with the one from the server.
-    
-    Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>
-    Reviewed-by: Emil Velikov <emil.velikov@collabora.com>
-
-commit 84df9cb81cc31bbed27ba241a23ae04f61da57db
-Author: Matthieu Herrb <matthieu.herrb@laas.fr>
-Date:   Tue Oct 4 21:11:55 2016 +0200
-
-    libXfixes 5.0.3
-    
-    Signed-off-by: Matthieu Herrb <matthieu.herrb@laas.fr>
-
-commit 61c1039ee23a2d1de712843bed3480654d7ef42e
-Author: Tobias Stoeckmann <tobias@stoeckmann.org>
-Date:   Sun Sep 25 22:38:44 2016 +0200
-
-    Integer overflow on illegal server response
-    
-    The 32 bit field "rep.length" is not checked for validity, which allows
-    an integer overflow on 32 bit systems.
-    
-    A malicious server could send INT_MAX as length, which gets multiplied
-    by the size of XRectangle. In that case the client won't read the whole
-    data from server, getting out of sync.
-    
-    Signed-off-by: Tobias Stoeckmann <tobias@stoeckmann.org>
-    Reviewed-by: Matthieu Herrb <matthieu@herrb.eu>
-
-commit b2406ed9031991b7ddc5b76b308623afc8a590c5
-Author: Matt Turner <mattst88@gmail.com>
-Date:   Wed May 25 18:53:28 2016 -0700
-
-    libXfixes 5.0.2
-    
-    Signed-off-by: Matt Turner <mattst88@gmail.com>
-
-commit 1702cdfe45c9bdd7dacfc8f27a49f89fcd1d02c3
-Author: Michael Joost <mehl@michael-joost.de>
-Date:   Mon Nov 18 16:11:26 2013 +0100
-
-    Remove fallback for _XEatDataWords, require libX11 1.6 for it
-    
-    _XEatDataWords was orignally introduced with the May 2013 security
-    patches, and in order to ease the process of delivering those,
-    fallback versions of _XEatDataWords were included in the X extension
-    library patches so they could be applied to older versions that didn't
-    have libX11 1.6 yet.   Now that we're past that hurdle, we can drop
-    the fallbacks and just require libX11 1.6 for building new versions
-    of the extension libraries.
-    
-    Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 0cb446962381f750e05d97bfb974ca1e32481d5d
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Tue May 28 21:11:10 2013 -0700
-
-    libXfixes 5.0.1
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit c480fe3271873ec7471b0cbd680f4dac18ca8904
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Apr 13 10:24:08 2013 -0700
-
-    integer overflow in XFixesGetCursorImage() [CVE-2013-1983]
-    
-    If the reported cursor dimensions or name length are too large, the
-    calculations to allocate memory for them may overflow, leaving us
-    writing beyond the bounds of the allocation.
-    
-    Reported-by: Ilja Van Sprundel <ivansprundel@ioactive.com>
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit b031e3b60fa1af9e49449f23d4a84395868be3ab
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Apr 13 10:20:59 2013 -0700
-
-    Use _XEatDataWords to avoid overflow of _XEatData calculations
-    
-    rep.length is a CARD32, so rep.length << 2 could overflow in 32-bit builds
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit f870dfb47da9d43d1750ea5e5fc9288c4158f7ad
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Mar 9 09:26:05 2013 -0800
-
-    XFixesFetchRegionAndBounds: use nread in call to XReadPad
-    
-    We already went through the trouble of calculating a variable with the
-    amount to read, might as well use it instead of recalculating it.
-    
-    Also move initialization of the variable to the point it's needed/used
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-    Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
-
-commit ad2a06d4d3c60198bc40116623153f71a208a240
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Sat Mar 9 09:18:14 2013 -0800
-
-    Remove duplicate declaration of XFixesExtensionName in Xfixesint.h
-    
-    Silences gcc warnings:
-    In file included from Region.c:26:0:
-    Xfixesint.h:52:13: warning: redundant redeclaration of 'XFixesExtensionName' [-Wredundant-decls]
-    Xfixesint.h:34:13: note: previous declaration of 'XFixesExtensionName' was here
-    
-    In file included from Cursor.c:49:0:
-    Xfixesint.h:52:13: warning: redundant redeclaration of 'XFixesExtensionName' [-Wredundant-decls]
-    Xfixesint.h:34:13: note: previous declaration of 'XFixesExtensionName' was here
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-    Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
-
-commit 73a0fbb479f5b7806a3dd0741be55c9abda76220
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Fri Jan 18 23:10:01 2013 -0800
-
-    Replace deprecated Automake INCLUDES variable with AM_CPPFLAGS
-    
-    Excerpt https://lists.gnu.org/archive/html/automake/2012-12/msg00038.html
-    
-      - Support for the long-deprecated INCLUDES variable will be removed
-        altogether in Automake 1.14.  The AM_CPPFLAGS variable should be
-        used instead.
-    
-    This variable was deprecated in Automake releases prior to 1.10, which is
-    the current minimum level required to build X.
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit d6931eda2fe86566823437507b5d818458cfd002
-Author: Colin Walters <walters@verbum.org>
-Date:   Wed Jan 4 17:37:06 2012 -0500
-
-    autogen.sh: Implement GNOME Build API
-    
-    http://people.gnome.org/~walters/docs/build-api.txt
-    
-    Signed-off-by: Adam Jackson <ajax@redhat.com>
-
-commit 945803cdf3442f60ea25763a84b940e11653a205
-Author: Adam Jackson <ajax@redhat.com>
-Date:   Tue Jan 15 14:28:48 2013 -0500
-
-    configure: Remove AM_MAINTAINER_MODE
-    
-    Signed-off-by: Adam Jackson <ajax@redhat.com>
-
-commit 991eb6dad335f4915de8bb2d36d82f0346ae88fb
-Author: Peter Hutterer <peter.hutterer@who-t.net>
-Date:   Fri Feb 11 15:36:33 2011 +1000
-
-    man: remove "current", we're way past 1.0.
-    
-    Claiming "the current 1.0 release" when the library is already past version
-    4 is a tad confusing.
-    
-    Signed-off-by: Peter Hutterer <peter.hutterer@who-t.net>
-
-commit ca7b0066fe6f315d2499338cd133e5b1e9d11236
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Fri Sep 16 22:19:59 2011 -0700
-
-    Strip trailing whitespace
-    
-    Performed with: find * -type f | xargs perl -i -p -e 's{[ \t]+$}{}'
-    git diff -w & git diff -b show no diffs from this change
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 54926675a9bbb732d3317316db4958e22922ea3f
-Author: Adam Jackson <ajax@redhat.com>
-Date:   Mon Nov 22 14:50:13 2010 -0500
-
-    libXfixes v5: Pointer barriers
-    
-    v2: Use int * for device list, consistent with libXi.
-    v3: Update copyright year.
-    
-    Reviewed-by: Julien Cristau <jcristau@debian.org>
-    Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
-    Signed-off-by: Adam Jackson <ajax@redhat.com>
-
-commit c301e75b0316c00599caa88d95f384d63eb8bec0
-Author: Gaetan Nadon <memsize@videotron.ca>
-Date:   Wed Feb 2 11:43:42 2011 -0500
-
-    config: comment, minor upgrade, quote and layout configure.ac
-    
-    Group statements per section as per Autoconf standard layout
-    Quote statements where appropriate.
-    Autoconf recommends not using dnl instead of # for comments
-    
-    Use AC_CONFIG_FILES to replace the deprecated AC_OUTPUT with parameters.
-    Add AC_CONFIG_SRCDIR([Makefile.am])
-    Remove redundant AC_SUBST(*_CFLAGS) and/or *_LIBS
-    No functional configuration changes
-    
-    This helps automated maintenance and release activities.
-    Details can be found in http://wiki.x.org/wiki/NewModuleGuidelines
-
-commit 8196b55a4d84f40f0a0b29b4167992b45df50d70
-Author: Gaetan Nadon <memsize@videotron.ca>
-Date:   Fri Jan 28 19:41:37 2011 -0500
-
-    config: replace deprecated AM_CONFIG_HEADER with AC_CONFIG_HEADERS
-    
-    Signed-off-by: Gaetan Nadon <memsize@videotron.ca>
-
-commit e067891e233e3725e1fa1da72d91c5346f039d00
-Author: Gaetan Nadon <memsize@videotron.ca>
-Date:   Thu Jan 27 18:50:14 2011 -0500
-
-    config: remove AC_PROG_CC as it overrides AC_PROG_C_C99
-    
-    XORG_STRICT_OPTION from XORG_DEFAULT_OPTIONS calls
-    AC_PROG_C_C99. This sets gcc with -std=gnu99.
-    If AC_PROG_CC macro is called afterwards, it resets CC to gcc.
-    
-    Signed-off-by: Gaetan Nadon <memsize@videotron.ca>
-
-commit 1b64f2594c871d1497a032285476222b29cd4537
-Author: Fernando Carrijo <fcarrijo@yahoo.com.br>
-Date:   Thu Jul 1 06:56:35 2010 -0300
-
-    Purge macros NEED_EVENTS and NEED_REPLIES
-    
-    Signed-off-by: Fernando Carrijo <fcarrijo@yahoo.com.br>
-    Acked-by: Tiago Vignatti <tiago.vignatti@nokia.com>
-    Reviewed-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 01e803aebdfddfce6374b03e5f31723698aa0c00
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Wed Jun 9 20:18:25 2010 -0700
-
-    libXfixes 4.0.5
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit 7d08b9841ce01628881969b9cdd08d732c87aad7
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Tue Jun 8 19:14:44 2010 -0700
-
-    Fix .TH values in Xfixes.man
-    
-    Requires xorg-macros 1.8 in order to get the updated XORG_MANPAGE_SECTIONS
-    that sets $(SED) & $(MAN_SUBSTS) from configure for us.
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-    Reviewed-by: Dan Nicholson <dbn.lists@gmail.com>
-
-commit e81d298c3dd043ee2234156f81d75cac394ad896
-Author: Alan Coopersmith <alan.coopersmith@oracle.com>
-Date:   Tue Jun 8 19:04:01 2010 -0700
-
-    Sun's copyrights now belong to Oracle
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@oracle.com>
-
-commit bdebfcf8096b7403c5e59501d73e5b73d2e65f15
-Author: Jamey Sharp <jamey@minilop.net>
-Date:   Fri Apr 9 17:26:31 2010 -0700
-
-    Always call SyncHandle after issuing an X request.
-
-commit e09464e0ec1f6994272f3ef324b7fa77329948d4
-Author: Gaetan Nadon <memsize@videotron.ca>
-Date:   Mon Mar 29 16:50:34 2010 -0400
-
-    config: update AC_PREREQ statement to 2.60
-    
-    Unrelated to the previous patches, the new value simply reflects
-    the reality that the minimum level for autoconf to configure
-    all x.org modules is 2.60 dated June 2006.
-    
-    ftp://ftp.gnu.org/gnu/autoconf/autoconf-2.60.tar.gz
-    
-    Signed-off-by: Gaetan Nadon <memsize@videotron.ca>
-
-commit 946578b59ced5d828b0ad62fe96fc6d9bb31008a
-Author: Gaetan Nadon <memsize@videotron.ca>
-Date:   Mon Mar 29 14:53:48 2010 -0400
-
-    config: remove the pkgconfig pc.in file from EXTRA_DIST
-    
-    Automake always includes it in the tarball.
-    
-    Signed-off-by: Gaetan Nadon <memsize@videotron.ca>
-
-commit e3acd4a80b246166bb971095ff598944fb59281b
-Author: Alan Coopersmith <alan.coopersmith@sun.com>
-Date:   Thu Jan 14 19:09:28 2010 -0800
-
-    Update Sun license notices to current X.Org standard form
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@sun.com>
-
-commit 43397a8cb586caefc60787c98792ae2aae43fddf
-Author: Alan Coopersmith <alan.coopersmith@sun.com>
-Date:   Thu Jan 14 19:07:17 2010 -0800
-
-    Purge CVS/RCS id tags
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@sun.com>
-
-commit e27e229cf7f1809b1997dcafc147e512b0fb014d
-Author: Gaetan Nadon <memsize@videotron.ca>
-Date:   Thu Jan 14 15:54:31 2010 -0500
-
-    COPYING: add missing copyright notice.
-    
-    Refer to: Cursor.c
-    Copyright © 2006 Sun Microsystems
-    
-    Signed-off-by: Gaetan Nadon <memsize@videotron.ca>
-    Reviewed-by: Peter Hutterer <peter.hutterer@who-t.net>
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@sun.com>
-
-commit 9e1da45e4cc425f1aa8bc7021645372cad93f029
-Author: Gaetan Nadon <memsize@videotron.ca>
-Date:   Fri Nov 27 20:56:04 2009 -0500
-
-    Makefile.am: add ChangeLog and INSTALL on MAINTAINERCLEANFILES
-    
-    Now that the INSTALL file is generated.
-    Allows running make maintainer-clean.
-
-commit b228e13d654f07297cc40cabe81fdb50469c1e83
-Author: Gaetan Nadon <memsize@videotron.ca>
-Date:   Wed Oct 28 14:09:10 2009 -0400
-
-    INSTALL, NEWS, README or AUTHORS files are missing/incorrect #24206
-    
-    Add missing INSTALL file. Use standard GNU file on building tarball
-    README may have been updated
-    Remove AUTHORS file as it is empty and no content available yet.
-    Remove NEWS file as it is empty and no content available yet.
-
-commit 12e260765e880ffe2e078e6eb399bd137116d2cc
-Author: Gaetan Nadon <memsize@videotron.ca>
-Date:   Mon Oct 26 22:08:43 2009 -0400
-
-    Makefile.am: ChangeLog not required: EXTRA_DIST or *CLEANFILES #24432
-    
-    ChangeLog filename is known to Automake and requires no further
-    coding in the makefile.
-
-commit 82d17ac11ced59195eb160464b011546ca72a5c7
-Author: Gaetan Nadon <memsize@videotron.ca>
-Date:   Thu Oct 22 12:34:19 2009 -0400
-
-    .gitignore: use common defaults with custom section # 24239
-    
-    Using common defaults will reduce errors and maintenance.
-    Only the very small or inexistent custom section need periodic maintenance
-    when the structure of the component changes. Do not edit defaults.
-
-commit 55d7359a38e2e461a1320872bf955a298f06abd2
-Author: Jeremy Huddleston <jeremyhu@freedesktop.org>
-Date:   Wed Oct 21 12:47:25 2009 -0700
-
-    This is not a GNU project, so declare it foreign.
-    
-    On Wed, 2009-10-21 at 13:36 +1000, Peter Hutterer wrote:
-    > On Tue, Oct 20, 2009 at 08:23:55PM -0700, Jeremy Huddleston wrote:
-    > > I noticed an INSTALL file in xlsclients and libXvMC today, and it
-    > > was quite annoying to work around since 'autoreconf -fvi' replaces
-    > > it and git wants to commit it.  Should these files even be in git?
-    > > Can I nuke them for the betterment of humanity and since they get
-    > > created by autoreconf anyways?
-    >
-    > See https://bugs.freedesktop.org/show_bug.cgi?id=24206
-    
-    As an interim measure, replace AM_INIT_AUTOMAKE([dist-bzip2]) with
-    AM_INIT_AUTOMAKE([foreign dist-bzip2]). This will prevent the generation
-    of the INSTALL file. It is also part of the 24206 solution.
-    
-    Signed-off-by: Jeremy Huddleston <jeremyhu@freedesktop.org>
-
-commit ed2f91926bcef1610abe3c9cef61b1bb1c918ec8
-Author: Alan Coopersmith <alan.coopersmith@sun.com>
-Date:   Thu Oct 8 08:45:02 2009 -0700
-
-    libXfixes 4.0.4
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@sun.com>
-
-commit dc9e2c696121f677065919bc5b011eb650791831
-Author: Alan Coopersmith <alan.coopersmith@sun.com>
-Date:   Thu Oct 8 08:44:24 2009 -0700
-
-    Migrate to xorg macros 1.3 & XORG_DEFAULT_OPTIONS
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@sun.com>
-
-commit c83a721ba0b142177b3f01dd0c0a5e47e06a991a
-Author: Alan Coopersmith <alan.coopersmith@sun.com>
-Date:   Mon Feb 2 20:34:33 2009 -0800
-
-    Add README with pointers to mailing list, bugzilla & git repos
-    
-    Signed-off-by: Alan Coopersmith <alan.coopersmith@sun.com>
-
-commit 9784df5ba9f04163da7486c005eaf2383c37b127
-Author: Paulo Cesar Pereira de Andrade <pcpa@mandriva.com.br>
-Date:   Thu Jan 29 17:40:24 2009 -0200
-
-    Janitor: Correct make distcheck and gcc/sparse warnings.
-
-commit 839ef4a38dceec053c3fb33878e59eb26bd8d580
-Author: Peter Hutterer <peter@cs.unisa.edu.au>
-Date:   Mon May 19 17:31:04 2008 +0930
-
-    Rename parameters to clarify QueryVersion/QueryExtension.
-    
-    These parameters are not treated as input. Rename them to make the inner
-    workings slightly more obvious.
-    
-    X.Org Bug 14511 <http://bugs.freedesktop.org/show_bug.cgi?id=14511>
-
-commit d7778d80356f9a7f0bc4ffd0f0cf0bfa86928249
-Author: Matthieu Herrb <matthieu.herrb@laas.fr>
-Date:   Sun Mar 9 08:19:27 2008 +0100
-
-    nuke RCS Ids
-
-commit e211f3647823d89dd25a1cff8981c3154a6c429d
-Author: James Cloos <cloos@jhcloos.com>
-Date:   Thu Dec 6 16:38:28 2007 -0500
-
-    Replace static ChangeLog with dist-hook to generate from git log
-
-commit cad41f810023db454f33feea4f89d4d053737732
-Author: Daniel Stone <daniel@fooishbar.org>
-Date:   Wed Nov 8 16:14:41 2006 +0200
-
-    bump to 4.0.3
-
-commit 9dc7945eaa9216bf7b0056e815fba5bf8b5ded07
-Author: Lars Knoll <lars@trolltech.com>
-Date:   Sun Oct 15 14:13:14 2006 -0700
-
-    Don't unlock the Display when you have not locked it.
-    
-    Acked-by: Jamey Sharp <jamey@minilop.net>
-
-commit fcd9a56f0614521127d82954c4a4d77c92e62e53
-Author: Adam Jackson <ajax@benzedrine.nwnk.net>
-Date:   Fri Oct 13 16:12:54 2006 -0400
-
-    Bump to 4.0.2
-
-commit 8b43f6b0b5d77ab33efc50e4b1f588e51d029eb8
-Author: Alan Coopersmith <alan.coopersmith@sun.com>
-Date:   Wed Sep 27 19:03:11 2006 -0700
-
-    Add *~ to .gitignore to skip over emacs droppings
-
-commit 6c4d82990973b02a756ab3ba83ea345fed4bf87e
-Author: Stuart Kreitman <stuart.kreitman@sun.com>
-Date:   Wed Sep 27 19:02:02 2006 -0700
-
-    Sun bug #5099413/Xorg bugzilla #1554: Gnopernicus full-screen mag not working
-    
-    Sun bug #5099413: Gnopernicus full-screen magnification not working
-    <http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=5099413>
-    
-    includes fix for Xorg bug #1554: rect defined in XFixesInvertRegion is not used
-    <https://bugs.freedesktop.org/show_bug.cgi?id=1554>
-
-commit cd58068a11dbec3a17099fb699885e5e20e6ae36
-Author: David Nusinow <dnusinow@debian.org>
-Date:   Mon Sep 18 18:24:29 2006 -0400
-
-    Add 01_include_xlib.h.diff. Xfixes.h relies on the "Bool" define from
-    X11/Xlib.h but did not include that header (directly or indirectly)
-    See debian bug #372756
-
-commit 78e08086c13b2053f7cf1f74a8ec49b7e970a420
-Author: Tilman Sauerbeck <tilman@code-monkey.de>
-Date:   Fri Sep 1 17:12:39 2006 +0200
-
-    Bug #4902: _XRead32() expects a signed long pointer on 64 bit systems.
-
-commit 4ac8fb34617e392a5af35bf34d86df61903ec482
-Author: Alan Coopersmith <alan.coopersmith@sun.com>
-Date:   Thu Jul 13 14:58:54 2006 -0700
-
-    renamed: .cvsignore -> .gitignore
-
-commit f506712c5117d48cee6b36bc8b9ef1760b0506d6
-Author: Adam Jackson <ajax@nwnk.net>
-Date:   Fri May 12 15:18:54 2006 +0000
-
-    Fix the soversion to 3.1.0.
-
-commit 2284047bd919826e2ef1a8898eabfc3c8ec5d1a8
-Author: Adam Jackson <ajax@nwnk.net>
-Date:   Fri Apr 28 20:53:15 2006 +0000
-
-    Bump to 4.0
-
-commit 0ce5551f030c27705b3828b41647824577e30f74
-Author: Adam Jackson <ajax@nwnk.net>
-Date:   Mon Apr 3 00:58:13 2006 +0000
-
-    Coverity #576: Plug a leak on the error path.
-
-commit e9e432a987682ee16ed0dbc1e9b520fa5720150c
-Author: Deron Johnson <deron.johnson@sun.com>
-Date:   Mon Mar 13 21:59:05 2006 +0000
-
-    Part 2 of 3 (Other parts are in proto and xserver) Composite Version 0.3:
-        CompositeGetOverlayWindow, CompositeReleaseOverlayWindow Xfixes Version
-        4.0: XFixesHideCursor, XFixesShowCursor
-
-commit 96275f0b9f97be0fd9e002fd14bce4f4a015278a
-Author: Kevin E Martin <kem@kem.org>
-Date:   Thu Dec 15 00:24:29 2005 +0000
-
-    Update package version number for final X11R7 release candidate.
-
-commit c775b60f1aec6730be283cba3e9ba4b2348fb6ba
-Author: Kevin E Martin <kem@kem.org>
-Date:   Tue Dec 6 22:48:43 2005 +0000
-
-    Change *man_SOURCES ==> *man_PRE to fix autotools warnings.
-
-commit eb7159b541fe31d0d84313b49503bedd44a95bec
-Author: Kevin E Martin <kem@kem.org>
-Date:   Sat Dec 3 05:49:43 2005 +0000
-
-    Update package version number for X11R7 RC3 release.
-
-commit be6cbf68064b4d45f77cbb0a1d4670e9789d2343
-Author: Alan Coopersmith <Alan.Coopersmith@sun.com>
-Date:   Mon Nov 28 22:03:05 2005 +0000
-
-    Change *mandir targets to use new *_MAN_DIR variables set by xorg-macros.m4
-        update to fix bug #5167 (Linux prefers *.1x man pages in man1 subdir)
-
-commit 4b9884c72b23b276eeb2b2e6b3c749fbb54fdc36
-Author: Kevin E Martin <kem@kem.org>
-Date:   Sat Nov 19 07:15:41 2005 +0000
-
-    Update pkgconfig files to separate library build-time dependencies from
-        application build-time dependencies, and update package deps to work
-        with separate build roots.
-
-commit 593a37675b72053c36924785a2fea51a06ad1c37
-Author: Alan Coopersmith <Alan.Coopersmith@sun.com>
-Date:   Sun Nov 13 01:48:25 2005 +0000
-
-    Use sed to substitute variables in man pages.
-
-commit b21e46646371edbf7155eae621fefc0b572b006e
-Author: Kevin E Martin <kem@kem.org>
-Date:   Wed Nov 9 21:31:20 2005 +0000
-
-    Bump version numbers for X11R6.9/X11R7 RC2.
-
-commit 097f483e522f721eae4816e659237da94a4796d3
-Author: Kevin E Martin <kem@kem.org>
-Date:   Wed Nov 9 21:19:13 2005 +0000
-
-    Update package version number for X11R7 RC2 release.
-
-commit 750cac0b61ecde7489ea98e69f60417d169329c7
-Author: Kevin E Martin <kem@kem.org>
-Date:   Tue Nov 1 15:11:51 2005 +0000
-
-    Update pkgcheck dependencies to work with separate build roots.
-
-commit 92f0e71679f00f6ce18f445f505962bd1c6c8141
-Author: Adam Jackson <ajax@nwnk.net>
-Date:   Wed Oct 26 22:27:27 2005 +0000
-
-    Bug #4868: Add check for xproto.
-
-commit 15fba21d80922c8f93f5406b0616022b92eaa5c1
-Author: Kevin E Martin <kem@kem.org>
-Date:   Fri Jul 29 21:22:51 2005 +0000
-
-    Various changes preparing packages for RC0:
-    - Verify and update package version numbers as needed
-    - Implement versioning scheme
-    - Change bug address to point to bugzilla bug entry form
-    - Disable loadable i18n in libX11 by default (use --enable-loadable-i18n to
-        reenable it)
-    - Fix makedepend to use pkgconfig and pass distcheck
-    - Update build script to build macros first
-    - Update modular Xorg version
-
-commit c6bd02dc03af0e475d2396d5c399201969348151
-Author: Kevin E Martin <kem@kem.org>
-Date:   Sat Jul 23 05:27:00 2005 +0000
-
-    Fix distchecks
-
-commit abdd66912a8c9087ae171b62c9910af8bb00e437
-Author: Daniel Stone <daniel@fooishbar.org>
-Date:   Sat Jul 16 07:06:31 2005 +0000
-
-    Set soversion to 3.0.0 using -version-number.
-
-commit 366322d9d9354ed80fde808322207ee57599f7cb
-Author: Keith Packard <keithp@keithp.com>
-Date:   Sat Jul 9 06:18:56 2005 +0000
-
-    Add .cvsignore files Switch _la_CFLAGS for AM_CFLAGS to clean up directory
-
-commit c3c7a139e8a4c01aa55a19ecc9a1acf7dad5bbe7
-Author: Daniel Stone <daniel@fooishbar.org>
-Date:   Sun Jul 3 07:00:56 2005 +0000
-
-    Add Xtrans definitions (FONT_t, TRANS_CLIENT) to clean up warnings.
-    Add XSERV_t, TRANS_SERVER, TRANS_REOPEN to quash warnings.
-    Add #include <dix-config.h> or <xorg-config.h>, as appropriate, to all
-        source files in the xserver/xorg tree, predicated on defines of
-        HAVE_{DIX,XORG}_CONFIG_H. Change all Xfont includes to
-        <X11/fonts/foo.h>.
-
-commit 3afe915a1bc5243229d8c31dc6e3023b92821911
-Author: Kevin E Martin <kem@kem.org>
-Date:   Sat Jul 2 06:35:03 2005 +0000
-
-    Add appropriate lib*_CFLAGS to Makefile.am's -- fixes build problems
-
-commit e1825a381734f2bb98430329179b047ec8ca5cb5
-Author: Adam Jackson <ajax@nwnk.net>
-Date:   Thu May 19 00:22:32 2005 +0000
-
-    revert last change, didn't do right thing at all, sorry for the noise
-
-commit 4b09a3bfa3b3fa43230cb8ebc5d84257b31473bc
-Author: Adam Jackson <ajax@nwnk.net>
-Date:   Thu May 19 00:10:08 2005 +0000
-
-    Require automake 1.7 in AM_INIT_AUTOMAKE
-
-commit 1406e1cbe2cf76e6e056377af831f9fdf710e487
-Author: Søren Sandmann Pedersen  <sandmann@daimi.au.dk>
-Date:   Tue May 17 17:02:24 2005 +0000
-
-    Conditionally include config.h in xc/lib/Xdamage and xc/lib/Xfixes
-
-commit 03d31637787906378bc2809758b6dbfe79ea55ad
-Author: Søren Sandmann Pedersen  <sandmann@daimi.au.dk>
-Date:   Tue May 17 16:11:26 2005 +0000
-
-    Remove rest of half-removed if statement
-    remove irrelevant entries
-
-commit 7d85687a6d8319ac1a48e0294228632ffbefdc8a
-Author: Søren Sandmann Pedersen  <sandmann@daimi.au.dk>
-Date:   Tue May 17 15:22:23 2005 +0000
-
-    And here
-
-commit 8424a78dff9a51f7f6ccbfe111a78242867ccdf4
-Author: Søren Sandmann Pedersen  <sandmann@daimi.au.dk>
-Date:   Tue May 17 15:21:58 2005 +0000
-
-    Check in Makefile.am here
-
-commit 23a209b91fd011539c6d9a9447860dac4e12eae9
-Author: Søren Sandmann Pedersen  <sandmann@daimi.au.dk>
-Date:   Tue May 17 15:21:14 2005 +0000
-
-    Really check in the build system for Xfixes
-
-commit 58394a76ec740d0242097975e25ce6a6f148cb9d
-Author: Markus Kuhn <Markus.Kuhn@cl.cam.ac.uk>
-Date:   Sat Dec 4 00:42:47 2004 +0000
-
-    Encoding of numerous files changed to UTF-8
-
-commit b083c691fe7707146f728e563247a18aa601c19b
-Author: Eric Anholt <anholt@freebsd.org>
-Date:   Sat Jul 31 05:50:39 2004 +0000
-
-    Bring in Xfixes, Xdamage, and Xcomposite userland from xserver CVS:
-    - Update Xfixes headers to protocol major version 3.
-    - Add composite headers.
-    - Add libXfixes, libXdamage, and libXcomposite.
-    - Add imake glue for new libraries, but leave Composite off by default
-        until issues are resolved.
diff --git a/experiments/wasm-gui/third_party/libXfixes/INSTALL b/experiments/wasm-gui/third_party/libXfixes/INSTALL
deleted file mode 100644
index a1e89e18a..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/INSTALL
+++ /dev/null
@@ -1,370 +0,0 @@
-Installation Instructions
-*************************
-
-Copyright (C) 1994-1996, 1999-2002, 2004-2011 Free Software Foundation,
-Inc.
-
-   Copying and distribution of this file, with or without modification,
-are permitted in any medium without royalty provided the copyright
-notice and this notice are preserved.  This file is offered as-is,
-without warranty of any kind.
-
-Basic Installation
-==================
-
-   Briefly, the shell commands `./configure; make; make install' should
-configure, build, and install this package.  The following
-more-detailed instructions are generic; see the `README' file for
-instructions specific to this package.  Some packages provide this
-`INSTALL' file but do not implement all of the features documented
-below.  The lack of an optional feature in a given package is not
-necessarily a bug.  More recommendations for GNU packages can be found
-in *note Makefile Conventions: (standards)Makefile Conventions.
-
-   The `configure' shell script attempts to guess correct values for
-various system-dependent variables used during compilation.  It uses
-those values to create a `Makefile' in each directory of the package.
-It may also create one or more `.h' files containing system-dependent
-definitions.  Finally, it creates a shell script `config.status' that
-you can run in the future to recreate the current configuration, and a
-file `config.log' containing compiler output (useful mainly for
-debugging `configure').
-
-   It can also use an optional file (typically called `config.cache'
-and enabled with `--cache-file=config.cache' or simply `-C') that saves
-the results of its tests to speed up reconfiguring.  Caching is
-disabled by default to prevent problems with accidental use of stale
-cache files.
-
-   If you need to do unusual things to compile the package, please try
-to figure out how `configure' could check whether to do them, and mail
-diffs or instructions to the address given in the `README' so they can
-be considered for the next release.  If you are using the cache, and at
-some point `config.cache' contains results you don't want to keep, you
-may remove or edit it.
-
-   The file `configure.ac' (or `configure.in') is used to create
-`configure' by a program called `autoconf'.  You need `configure.ac' if
-you want to change it or regenerate `configure' using a newer version
-of `autoconf'.
-
-   The simplest way to compile this package is:
-
-  1. `cd' to the directory containing the package's source code and type
-     `./configure' to configure the package for your system.
-
-     Running `configure' might take a while.  While running, it prints
-     some messages telling which features it is checking for.
-
-  2. Type `make' to compile the package.
-
-  3. Optionally, type `make check' to run any self-tests that come with
-     the package, generally using the just-built uninstalled binaries.
-
-  4. Type `make install' to install the programs and any data files and
-     documentation.  When installing into a prefix owned by root, it is
-     recommended that the package be configured and built as a regular
-     user, and only the `make install' phase executed with root
-     privileges.
-
-  5. Optionally, type `make installcheck' to repeat any self-tests, but
-     this time using the binaries in their final installed location.
-     This target does not install anything.  Running this target as a
-     regular user, particularly if the prior `make install' required
-     root privileges, verifies that the installation completed
-     correctly.
-
-  6. You can remove the program binaries and object files from the
-     source code directory by typing `make clean'.  To also remove the
-     files that `configure' created (so you can compile the package for
-     a different kind of computer), type `make distclean'.  There is
-     also a `make maintainer-clean' target, but that is intended mainly
-     for the package's developers.  If you use it, you may have to get
-     all sorts of other programs in order to regenerate files that came
-     with the distribution.
-
-  7. Often, you can also type `make uninstall' to remove the installed
-     files again.  In practice, not all packages have tested that
-     uninstallation works correctly, even though it is required by the
-     GNU Coding Standards.
-
-  8. Some packages, particularly those that use Automake, provide `make
-     distcheck', which can by used by developers to test that all other
-     targets like `make install' and `make uninstall' work correctly.
-     This target is generally not run by end users.
-
-Compilers and Options
-=====================
-
-   Some systems require unusual options for compilation or linking that
-the `configure' script does not know about.  Run `./configure --help'
-for details on some of the pertinent environment variables.
-
-   You can give `configure' initial values for configuration parameters
-by setting variables in the command line or in the environment.  Here
-is an example:
-
-     ./configure CC=c99 CFLAGS=-g LIBS=-lposix
-
-   *Note Defining Variables::, for more details.
-
-Compiling For Multiple Architectures
-====================================
-
-   You can compile the package for more than one kind of computer at the
-same time, by placing the object files for each architecture in their
-own directory.  To do this, you can use GNU `make'.  `cd' to the
-directory where you want the object files and executables to go and run
-the `configure' script.  `configure' automatically checks for the
-source code in the directory that `configure' is in and in `..'.  This
-is known as a "VPATH" build.
-
-   With a non-GNU `make', it is safer to compile the package for one
-architecture at a time in the source code directory.  After you have
-installed the package for one architecture, use `make distclean' before
-reconfiguring for another architecture.
-
-   On MacOS X 10.5 and later systems, you can create libraries and
-executables that work on multiple system types--known as "fat" or
-"universal" binaries--by specifying multiple `-arch' options to the
-compiler but only a single `-arch' option to the preprocessor.  Like
-this:
-
-     ./configure CC="gcc -arch i386 -arch x86_64 -arch ppc -arch ppc64" \
-                 CXX="g++ -arch i386 -arch x86_64 -arch ppc -arch ppc64" \
-                 CPP="gcc -E" CXXCPP="g++ -E"
-
-   This is not guaranteed to produce working output in all cases, you
-may have to build one architecture at a time and combine the results
-using the `lipo' tool if you have problems.
-
-Installation Names
-==================
-
-   By default, `make install' installs the package's commands under
-`/usr/local/bin', include files under `/usr/local/include', etc.  You
-can specify an installation prefix other than `/usr/local' by giving
-`configure' the option `--prefix=PREFIX', where PREFIX must be an
-absolute file name.
-
-   You can specify separate installation prefixes for
-architecture-specific files and architecture-independent files.  If you
-pass the option `--exec-prefix=PREFIX' to `configure', the package uses
-PREFIX as the prefix for installing programs and libraries.
-Documentation and other data files still use the regular prefix.
-
-   In addition, if you use an unusual directory layout you can give
-options like `--bindir=DIR' to specify different values for particular
-kinds of files.  Run `configure --help' for a list of the directories
-you can set and what kinds of files go in them.  In general, the
-default for these options is expressed in terms of `${prefix}', so that
-specifying just `--prefix' will affect all of the other directory
-specifications that were not explicitly provided.
-
-   The most portable way to affect installation locations is to pass the
-correct locations to `configure'; however, many packages provide one or
-both of the following shortcuts of passing variable assignments to the
-`make install' command line to change installation locations without
-having to reconfigure or recompile.
-
-   The first method involves providing an override variable for each
-affected directory.  For example, `make install
-prefix=/alternate/directory' will choose an alternate location for all
-directory configuration variables that were expressed in terms of
-`${prefix}'.  Any directories that were specified during `configure',
-but not in terms of `${prefix}', must each be overridden at install
-time for the entire installation to be relocated.  The approach of
-makefile variable overrides for each directory variable is required by
-the GNU Coding Standards, and ideally causes no recompilation.
-However, some platforms have known limitations with the semantics of
-shared libraries that end up requiring recompilation when using this
-method, particularly noticeable in packages that use GNU Libtool.
-
-   The second method involves providing the `DESTDIR' variable.  For
-example, `make install DESTDIR=/alternate/directory' will prepend
-`/alternate/directory' before all installation names.  The approach of
-`DESTDIR' overrides is not required by the GNU Coding Standards, and
-does not work on platforms that have drive letters.  On the other hand,
-it does better at avoiding recompilation issues, and works well even
-when some directory options were not specified in terms of `${prefix}'
-at `configure' time.
-
-Optional Features
-=================
-
-   If the package supports it, you can cause programs to be installed
-with an extra prefix or suffix on their names by giving `configure' the
-option `--program-prefix=PREFIX' or `--program-suffix=SUFFIX'.
-
-   Some packages pay attention to `--enable-FEATURE' options to
-`configure', where FEATURE indicates an optional part of the package.
-They may also pay attention to `--with-PACKAGE' options, where PACKAGE
-is something like `gnu-as' or `x' (for the X Window System).  The
-`README' should mention any `--enable-' and `--with-' options that the
-package recognizes.
-
-   For packages that use the X Window System, `configure' can usually
-find the X include and library files automatically, but if it doesn't,
-you can use the `configure' options `--x-includes=DIR' and
-`--x-libraries=DIR' to specify their locations.
-
-   Some packages offer the ability to configure how verbose the
-execution of `make' will be.  For these packages, running `./configure
---enable-silent-rules' sets the default to minimal output, which can be
-overridden with `make V=1'; while running `./configure
---disable-silent-rules' sets the default to verbose, which can be
-overridden with `make V=0'.
-
-Particular systems
-==================
-
-   On HP-UX, the default C compiler is not ANSI C compatible.  If GNU
-CC is not installed, it is recommended to use the following options in
-order to use an ANSI C compiler:
-
-     ./configure CC="cc -Ae -D_XOPEN_SOURCE=500"
-
-and if that doesn't work, install pre-built binaries of GCC for HP-UX.
-
-   HP-UX `make' updates targets which have the same time stamps as
-their prerequisites, which makes it generally unusable when shipped
-generated files such as `configure' are involved.  Use GNU `make'
-instead.
-
-   On OSF/1 a.k.a. Tru64, some versions of the default C compiler cannot
-parse its `<wchar.h>' header file.  The option `-nodtk' can be used as
-a workaround.  If GNU CC is not installed, it is therefore recommended
-to try
-
-     ./configure CC="cc"
-
-and if that doesn't work, try
-
-     ./configure CC="cc -nodtk"
-
-   On Solaris, don't put `/usr/ucb' early in your `PATH'.  This
-directory contains several dysfunctional programs; working variants of
-these programs are available in `/usr/bin'.  So, if you need `/usr/ucb'
-in your `PATH', put it _after_ `/usr/bin'.
-
-   On Haiku, software installed for all users goes in `/boot/common',
-not `/usr/local'.  It is recommended to use the following options:
-
-     ./configure --prefix=/boot/common
-
-Specifying the System Type
-==========================
-
-   There may be some features `configure' cannot figure out
-automatically, but needs to determine by the type of machine the package
-will run on.  Usually, assuming the package is built to be run on the
-_same_ architectures, `configure' can figure that out, but if it prints
-a message saying it cannot guess the machine type, give it the
-`--build=TYPE' option.  TYPE can either be a short name for the system
-type, such as `sun4', or a canonical name which has the form:
-
-     CPU-COMPANY-SYSTEM
-
-where SYSTEM can have one of these forms:
-
-     OS
-     KERNEL-OS
-
-   See the file `config.sub' for the possible values of each field.  If
-`config.sub' isn't included in this package, then this package doesn't
-need to know the machine type.
-
-   If you are _building_ compiler tools for cross-compiling, you should
-use the option `--target=TYPE' to select the type of system they will
-produce code for.
-
-   If you want to _use_ a cross compiler, that generates code for a
-platform different from the build platform, you should specify the
-"host" platform (i.e., that on which the generated programs will
-eventually be run) with `--host=TYPE'.
-
-Sharing Defaults
-================
-
-   If you want to set default values for `configure' scripts to share,
-you can create a site shell script called `config.site' that gives
-default values for variables like `CC', `cache_file', and `prefix'.
-`configure' looks for `PREFIX/share/config.site' if it exists, then
-`PREFIX/etc/config.site' if it exists.  Or, you can set the
-`CONFIG_SITE' environment variable to the location of the site script.
-A warning: not all `configure' scripts look for a site script.
-
-Defining Variables
-==================
-
-   Variables not defined in a site shell script can be set in the
-environment passed to `configure'.  However, some packages may run
-configure again during the build, and the customized values of these
-variables may be lost.  In order to avoid this problem, you should set
-them in the `configure' command line, using `VAR=value'.  For example:
-
-     ./configure CC=/usr/local2/bin/gcc
-
-causes the specified `gcc' to be used as the C compiler (unless it is
-overridden in the site shell script).
-
-Unfortunately, this technique does not work for `CONFIG_SHELL' due to
-an Autoconf bug.  Until the bug is fixed you can use this workaround:
-
-     CONFIG_SHELL=/bin/bash /bin/bash ./configure CONFIG_SHELL=/bin/bash
-
-`configure' Invocation
-======================
-
-   `configure' recognizes the following options to control how it
-operates.
-
-`--help'
-`-h'
-     Print a summary of all of the options to `configure', and exit.
-
-`--help=short'
-`--help=recursive'
-     Print a summary of the options unique to this package's
-     `configure', and exit.  The `short' variant lists options used
-     only in the top level, while the `recursive' variant lists options
-     also present in any nested packages.
-
-`--version'
-`-V'
-     Print the version of Autoconf used to generate the `configure'
-     script, and exit.
-
-`--cache-file=FILE'
-     Enable the cache: use and save the results of the tests in FILE,
-     traditionally `config.cache'.  FILE defaults to `/dev/null' to
-     disable caching.
-
-`--config-cache'
-`-C'
-     Alias for `--cache-file=config.cache'.
-
-`--quiet'
-`--silent'
-`-q'
-     Do not print messages saying which checks are being made.  To
-     suppress all normal output, redirect it to `/dev/null' (any error
-     messages will still be shown).
-
-`--srcdir=DIR'
-     Look for the package's source code in directory DIR.  Usually
-     `configure' can determine that directory automatically.
-
-`--prefix=DIR'
-     Use DIR as the installation prefix.  *note Installation Names::
-     for more details, including other options available for fine-tuning
-     the installation locations.
-
-`--no-create'
-`-n'
-     Run the configure checks, but stop before creating any output
-     files.
-
-`configure' also accepts some other, not widely useful, options.  Run
-`configure --help' for more details.
-
diff --git a/experiments/wasm-gui/third_party/libXfixes/Makefile.am b/experiments/wasm-gui/third_party/libXfixes/Makefile.am
deleted file mode 100644
index 5276a1921..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/Makefile.am
+++ /dev/null
@@ -1,40 +0,0 @@
-#
-#  Copyright © 2003 Keith Packard, Noah Levitt
-#
-#  Permission to use, copy, modify, distribute, and sell this software and its
-#  documentation for any purpose is hereby granted without fee, provided that
-#  the above copyright notice appear in all copies and that both that
-#  copyright notice and this permission notice appear in supporting
-#  documentation, and that the name of Keith Packard not be used in
-#  advertising or publicity pertaining to distribution of the software without
-#  specific, written prior permission.  Keith Packard makes no
-#  representations about the suitability of this software for any purpose.  It
-#  is provided "as is" without express or implied warranty.
-#
-#  KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
-#  INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
-#  EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
-#  CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
-#  DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
-#  TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
-#  PERFORMANCE OF THIS SOFTWARE.
-
-SUBDIRS = src man
-
-pkgconfigdir = $(libdir)/pkgconfig
-pkgconfig_DATA = xfixes.pc
-
-MAINTAINERCLEANFILES = ChangeLog INSTALL
-
-.PHONY: ChangeLog INSTALL
-
-INSTALL:
-	$(INSTALL_CMD)
-
-ChangeLog:
-	$(CHANGELOG_CMD)
-
-dist-hook: ChangeLog INSTALL
-
-EXTRA_DIST = README.md
-ACLOCAL_AMFLAGS = -I m4
diff --git a/experiments/wasm-gui/third_party/libXfixes/Makefile.in b/experiments/wasm-gui/third_party/libXfixes/Makefile.in
deleted file mode 100644
index eac7d731c..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/Makefile.in
+++ /dev/null
@@ -1,942 +0,0 @@
-# Makefile.in generated by automake 1.16.5 from Makefile.am.
-# @configure_input@
-
-# Copyright (C) 1994-2021 Free Software Foundation, Inc.
-
-# This Makefile.in is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-@SET_MAKE@
-
-#
-#  Copyright © 2003 Keith Packard, Noah Levitt
-#
-#  Permission to use, copy, modify, distribute, and sell this software and its
-#  documentation for any purpose is hereby granted without fee, provided that
-#  the above copyright notice appear in all copies and that both that
-#  copyright notice and this permission notice appear in supporting
-#  documentation, and that the name of Keith Packard not be used in
-#  advertising or publicity pertaining to distribution of the software without
-#  specific, written prior permission.  Keith Packard makes no
-#  representations about the suitability of this software for any purpose.  It
-#  is provided "as is" without express or implied warranty.
-#
-#  KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
-#  INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
-#  EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
-#  CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
-#  DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
-#  TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
-#  PERFORMANCE OF THIS SOFTWARE.
-
-VPATH = @srcdir@
-am__is_gnu_make = { \
-  if test -z '$(MAKELEVEL)'; then \
-    false; \
-  elif test -n '$(MAKE_HOST)'; then \
-    true; \
-  elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \
-    true; \
-  else \
-    false; \
-  fi; \
-}
-am__make_running_with_option = \
-  case $${target_option-} in \
-      ?) ;; \
-      *) echo "am__make_running_with_option: internal error: invalid" \
-              "target option '$${target_option-}' specified" >&2; \
-         exit 1;; \
-  esac; \
-  has_opt=no; \
-  sane_makeflags=$$MAKEFLAGS; \
-  if $(am__is_gnu_make); then \
-    sane_makeflags=$$MFLAGS; \
-  else \
-    case $$MAKEFLAGS in \
-      *\\[\ \	]*) \
-        bs=\\; \
-        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
-          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
-    esac; \
-  fi; \
-  skip_next=no; \
-  strip_trailopt () \
-  { \
-    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
-  }; \
-  for flg in $$sane_makeflags; do \
-    test $$skip_next = yes && { skip_next=no; continue; }; \
-    case $$flg in \
-      *=*|--*) continue;; \
-        -*I) strip_trailopt 'I'; skip_next=yes;; \
-      -*I?*) strip_trailopt 'I';; \
-        -*O) strip_trailopt 'O'; skip_next=yes;; \
-      -*O?*) strip_trailopt 'O';; \
-        -*l) strip_trailopt 'l'; skip_next=yes;; \
-      -*l?*) strip_trailopt 'l';; \
-      -[dEDm]) skip_next=yes;; \
-      -[JT]) skip_next=yes;; \
-    esac; \
-    case $$flg in \
-      *$$target_option*) has_opt=yes; break;; \
-    esac; \
-  done; \
-  test $$has_opt = yes
-am__make_dryrun = (target_option=n; $(am__make_running_with_option))
-am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
-pkgdatadir = $(datadir)/@PACKAGE@
-pkgincludedir = $(includedir)/@PACKAGE@
-pkglibdir = $(libdir)/@PACKAGE@
-pkglibexecdir = $(libexecdir)/@PACKAGE@
-am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
-install_sh_DATA = $(install_sh) -c -m 644
-install_sh_PROGRAM = $(install_sh) -c
-install_sh_SCRIPT = $(install_sh) -c
-INSTALL_HEADER = $(INSTALL_DATA)
-transform = $(program_transform_name)
-NORMAL_INSTALL = :
-PRE_INSTALL = :
-POST_INSTALL = :
-NORMAL_UNINSTALL = :
-PRE_UNINSTALL = :
-POST_UNINSTALL = :
-build_triplet = @build@
-host_triplet = @host@
-subdir = .
-ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/libtool.m4 \
-	$(top_srcdir)/m4/ltoptions.m4 $(top_srcdir)/m4/ltsugar.m4 \
-	$(top_srcdir)/m4/ltversion.m4 $(top_srcdir)/m4/lt~obsolete.m4 \
-	$(top_srcdir)/configure.ac
-am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
-	$(ACLOCAL_M4)
-DIST_COMMON = $(srcdir)/Makefile.am $(top_srcdir)/configure \
-	$(am__configure_deps) $(am__DIST_COMMON)
-am__CONFIG_DISTCLEAN_FILES = config.status config.cache config.log \
- configure.lineno config.status.lineno
-mkinstalldirs = $(install_sh) -d
-CONFIG_HEADER = config.h
-CONFIG_CLEAN_FILES = xfixes.pc
-CONFIG_CLEAN_VPATH_FILES =
-AM_V_P = $(am__v_P_@AM_V@)
-am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
-am__v_P_0 = false
-am__v_P_1 = :
-AM_V_GEN = $(am__v_GEN_@AM_V@)
-am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
-am__v_GEN_0 = @echo "  GEN     " $@;
-am__v_GEN_1 = 
-AM_V_at = $(am__v_at_@AM_V@)
-am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
-am__v_at_0 = @
-am__v_at_1 = 
-SOURCES =
-DIST_SOURCES =
-RECURSIVE_TARGETS = all-recursive check-recursive cscopelist-recursive \
-	ctags-recursive dvi-recursive html-recursive info-recursive \
-	install-data-recursive install-dvi-recursive \
-	install-exec-recursive install-html-recursive \
-	install-info-recursive install-pdf-recursive \
-	install-ps-recursive install-recursive installcheck-recursive \
-	installdirs-recursive pdf-recursive ps-recursive \
-	tags-recursive uninstall-recursive
-am__can_run_installinfo = \
-  case $$AM_UPDATE_INFO_DIR in \
-    n|no|NO) false;; \
-    *) (install-info --version) >/dev/null 2>&1;; \
-  esac
-am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
-am__vpath_adj = case $$p in \
-    $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
-    *) f=$$p;; \
-  esac;
-am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
-am__install_max = 40
-am__nobase_strip_setup = \
-  srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
-am__nobase_strip = \
-  for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
-am__nobase_list = $(am__nobase_strip_setup); \
-  for p in $$list; do echo "$$p $$p"; done | \
-  sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
-  $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
-    if (++n[$$2] == $(am__install_max)) \
-      { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
-    END { for (dir in files) print dir, files[dir] }'
-am__base_list = \
-  sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
-  sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
-am__uninstall_files_from_dir = { \
-  test -z "$$files" \
-    || { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
-    || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
-         $(am__cd) "$$dir" && rm -f $$files; }; \
-  }
-am__installdirs = "$(DESTDIR)$(pkgconfigdir)"
-DATA = $(pkgconfig_DATA)
-RECURSIVE_CLEAN_TARGETS = mostlyclean-recursive clean-recursive	\
-  distclean-recursive maintainer-clean-recursive
-am__recursive_targets = \
-  $(RECURSIVE_TARGETS) \
-  $(RECURSIVE_CLEAN_TARGETS) \
-  $(am__extra_recursive_targets)
-AM_RECURSIVE_TARGETS = $(am__recursive_targets:-recursive=) TAGS CTAGS \
-	cscope distdir distdir-am dist dist-all distcheck
-am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP) \
-	config.h.in
-# Read a list of newline-separated strings from the standard input,
-# and print each of them once, without duplicates.  Input order is
-# *not* preserved.
-am__uniquify_input = $(AWK) '\
-  BEGIN { nonempty = 0; } \
-  { items[$$0] = 1; nonempty = 1; } \
-  END { if (nonempty) { for (i in items) print i; }; } \
-'
-# Make sure the list of sources is unique.  This is necessary because,
-# e.g., the same source file might be shared among _SOURCES variables
-# for different programs/libraries.
-am__define_uniq_tagged_files = \
-  list='$(am__tagged_files)'; \
-  unique=`for i in $$list; do \
-    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
-  done | $(am__uniquify_input)`
-DIST_SUBDIRS = $(SUBDIRS)
-am__DIST_COMMON = $(srcdir)/Makefile.in $(srcdir)/config.h.in \
-	$(srcdir)/xfixes.pc.in AUTHORS COPYING ChangeLog INSTALL \
-	README.md compile config.guess config.sub install-sh ltmain.sh \
-	missing
-DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
-distdir = $(PACKAGE)-$(VERSION)
-top_distdir = $(distdir)
-am__remove_distdir = \
-  if test -d "$(distdir)"; then \
-    find "$(distdir)" -type d ! -perm -200 -exec chmod u+w {} ';' \
-      && rm -rf "$(distdir)" \
-      || { sleep 5 && rm -rf "$(distdir)"; }; \
-  else :; fi
-am__post_remove_distdir = $(am__remove_distdir)
-am__relativize = \
-  dir0=`pwd`; \
-  sed_first='s,^\([^/]*\)/.*$$,\1,'; \
-  sed_rest='s,^[^/]*/*,,'; \
-  sed_last='s,^.*/\([^/]*\)$$,\1,'; \
-  sed_butlast='s,/*[^/]*$$,,'; \
-  while test -n "$$dir1"; do \
-    first=`echo "$$dir1" | sed -e "$$sed_first"`; \
-    if test "$$first" != "."; then \
-      if test "$$first" = ".."; then \
-        dir2=`echo "$$dir0" | sed -e "$$sed_last"`/"$$dir2"; \
-        dir0=`echo "$$dir0" | sed -e "$$sed_butlast"`; \
-      else \
-        first2=`echo "$$dir2" | sed -e "$$sed_first"`; \
-        if test "$$first2" = "$$first"; then \
-          dir2=`echo "$$dir2" | sed -e "$$sed_rest"`; \
-        else \
-          dir2="../$$dir2"; \
-        fi; \
-        dir0="$$dir0"/"$$first"; \
-      fi; \
-    fi; \
-    dir1=`echo "$$dir1" | sed -e "$$sed_rest"`; \
-  done; \
-  reldir="$$dir2"
-DIST_ARCHIVES = $(distdir).tar.gz $(distdir).tar.xz
-GZIP_ENV = --best
-DIST_TARGETS = dist-xz dist-gzip
-# Exists only to be overridden by the user if desired.
-AM_DISTCHECK_DVI_TARGET = dvi
-distuninstallcheck_listfiles = find . -type f -print
-am__distuninstallcheck_listfiles = $(distuninstallcheck_listfiles) \
-  | sed 's|^\./|$(prefix)/|' | grep -v '$(infodir)/dir$$'
-distcleancheck_listfiles = find . -type f -print
-ACLOCAL = @ACLOCAL@
-ADMIN_MAN_DIR = @ADMIN_MAN_DIR@
-ADMIN_MAN_SUFFIX = @ADMIN_MAN_SUFFIX@
-AMTAR = @AMTAR@
-AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
-APP_MAN_DIR = @APP_MAN_DIR@
-APP_MAN_SUFFIX = @APP_MAN_SUFFIX@
-AR = @AR@
-AUTOCONF = @AUTOCONF@
-AUTOHEADER = @AUTOHEADER@
-AUTOMAKE = @AUTOMAKE@
-AWK = @AWK@
-BASE_CFLAGS = @BASE_CFLAGS@
-CC = @CC@
-CCDEPMODE = @CCDEPMODE@
-CFLAGS = @CFLAGS@
-CHANGELOG_CMD = @CHANGELOG_CMD@
-CPPFLAGS = @CPPFLAGS@
-CSCOPE = @CSCOPE@
-CTAGS = @CTAGS@
-CWARNFLAGS = @CWARNFLAGS@
-CYGPATH_W = @CYGPATH_W@
-DEFS = @DEFS@
-DEPDIR = @DEPDIR@
-DLLTOOL = @DLLTOOL@
-DRIVER_MAN_DIR = @DRIVER_MAN_DIR@
-DRIVER_MAN_SUFFIX = @DRIVER_MAN_SUFFIX@
-DSYMUTIL = @DSYMUTIL@
-DUMPBIN = @DUMPBIN@
-ECHO_C = @ECHO_C@
-ECHO_N = @ECHO_N@
-ECHO_T = @ECHO_T@
-EGREP = @EGREP@
-ETAGS = @ETAGS@
-EXEEXT = @EXEEXT@
-FGREP = @FGREP@
-FILECMD = @FILECMD@
-FILE_MAN_DIR = @FILE_MAN_DIR@
-FILE_MAN_SUFFIX = @FILE_MAN_SUFFIX@
-FIXESEXT_CFLAGS = @FIXESEXT_CFLAGS@
-FIXESEXT_LIBS = @FIXESEXT_LIBS@
-FIXESEXT_VERSION = @FIXESEXT_VERSION@
-GREP = @GREP@
-INSTALL = @INSTALL@
-INSTALL_CMD = @INSTALL_CMD@
-INSTALL_DATA = @INSTALL_DATA@
-INSTALL_PROGRAM = @INSTALL_PROGRAM@
-INSTALL_SCRIPT = @INSTALL_SCRIPT@
-INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
-LD = @LD@
-LDFLAGS = @LDFLAGS@
-LIBOBJS = @LIBOBJS@
-LIBS = @LIBS@
-LIBTOOL = @LIBTOOL@
-LIB_MAN_DIR = @LIB_MAN_DIR@
-LIB_MAN_SUFFIX = @LIB_MAN_SUFFIX@
-LIPO = @LIPO@
-LN_S = @LN_S@
-LTLIBOBJS = @LTLIBOBJS@
-LT_SYS_LIBRARY_PATH = @LT_SYS_LIBRARY_PATH@
-MAKEINFO = @MAKEINFO@
-MANIFEST_TOOL = @MANIFEST_TOOL@
-MAN_SUBSTS = @MAN_SUBSTS@
-MISC_MAN_DIR = @MISC_MAN_DIR@
-MISC_MAN_SUFFIX = @MISC_MAN_SUFFIX@
-MKDIR_P = @MKDIR_P@
-NM = @NM@
-NMEDIT = @NMEDIT@
-OBJDUMP = @OBJDUMP@
-OBJEXT = @OBJEXT@
-OTOOL = @OTOOL@
-OTOOL64 = @OTOOL64@
-PACKAGE = @PACKAGE@
-PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
-PACKAGE_NAME = @PACKAGE_NAME@
-PACKAGE_STRING = @PACKAGE_STRING@
-PACKAGE_TARNAME = @PACKAGE_TARNAME@
-PACKAGE_URL = @PACKAGE_URL@
-PACKAGE_VERSION = @PACKAGE_VERSION@
-PATH_SEPARATOR = @PATH_SEPARATOR@
-PKG_CONFIG = @PKG_CONFIG@
-PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
-PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
-RANLIB = @RANLIB@
-SED = @SED@
-SET_MAKE = @SET_MAKE@
-SHELL = @SHELL@
-STRICT_CFLAGS = @STRICT_CFLAGS@
-STRIP = @STRIP@
-VERSION = @VERSION@
-XORG_MAN_PAGE = @XORG_MAN_PAGE@
-abs_builddir = @abs_builddir@
-abs_srcdir = @abs_srcdir@
-abs_top_builddir = @abs_top_builddir@
-abs_top_srcdir = @abs_top_srcdir@
-ac_ct_AR = @ac_ct_AR@
-ac_ct_CC = @ac_ct_CC@
-ac_ct_DUMPBIN = @ac_ct_DUMPBIN@
-am__include = @am__include@
-am__leading_dot = @am__leading_dot@
-am__quote = @am__quote@
-am__tar = @am__tar@
-am__untar = @am__untar@
-bindir = @bindir@
-build = @build@
-build_alias = @build_alias@
-build_cpu = @build_cpu@
-build_os = @build_os@
-build_vendor = @build_vendor@
-builddir = @builddir@
-datadir = @datadir@
-datarootdir = @datarootdir@
-docdir = @docdir@
-dvidir = @dvidir@
-exec_prefix = @exec_prefix@
-host = @host@
-host_alias = @host_alias@
-host_cpu = @host_cpu@
-host_os = @host_os@
-host_vendor = @host_vendor@
-htmldir = @htmldir@
-includedir = @includedir@
-infodir = @infodir@
-install_sh = @install_sh@
-libdir = @libdir@
-libexecdir = @libexecdir@
-localedir = @localedir@
-localstatedir = @localstatedir@
-mandir = @mandir@
-mkdir_p = @mkdir_p@
-oldincludedir = @oldincludedir@
-pdfdir = @pdfdir@
-prefix = @prefix@
-program_transform_name = @program_transform_name@
-psdir = @psdir@
-runstatedir = @runstatedir@
-sbindir = @sbindir@
-sharedstatedir = @sharedstatedir@
-srcdir = @srcdir@
-sysconfdir = @sysconfdir@
-target_alias = @target_alias@
-top_build_prefix = @top_build_prefix@
-top_builddir = @top_builddir@
-top_srcdir = @top_srcdir@
-SUBDIRS = src man
-pkgconfigdir = $(libdir)/pkgconfig
-pkgconfig_DATA = xfixes.pc
-MAINTAINERCLEANFILES = ChangeLog INSTALL
-EXTRA_DIST = README.md
-ACLOCAL_AMFLAGS = -I m4
-all: config.h
-	$(MAKE) $(AM_MAKEFLAGS) all-recursive
-
-.SUFFIXES:
-am--refresh: Makefile
-	@:
-$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
-	@for dep in $?; do \
-	  case '$(am__configure_deps)' in \
-	    *$$dep*) \
-	      echo ' cd $(srcdir) && $(AUTOMAKE) --foreign'; \
-	      $(am__cd) $(srcdir) && $(AUTOMAKE) --foreign \
-		&& exit 0; \
-	      exit 1;; \
-	  esac; \
-	done; \
-	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign Makefile'; \
-	$(am__cd) $(top_srcdir) && \
-	  $(AUTOMAKE) --foreign Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
-	@case '$?' in \
-	  *config.status*) \
-	    echo ' $(SHELL) ./config.status'; \
-	    $(SHELL) ./config.status;; \
-	  *) \
-	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $@ $(am__maybe_remake_depfiles)'; \
-	    cd $(top_builddir) && $(SHELL) ./config.status $@ $(am__maybe_remake_depfiles);; \
-	esac;
-
-$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
-	$(SHELL) ./config.status --recheck
-
-$(top_srcdir)/configure:  $(am__configure_deps)
-	$(am__cd) $(srcdir) && $(AUTOCONF)
-$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
-	$(am__cd) $(srcdir) && $(ACLOCAL) $(ACLOCAL_AMFLAGS)
-$(am__aclocal_m4_deps):
-
-config.h: stamp-h1
-	@test -f $@ || rm -f stamp-h1
-	@test -f $@ || $(MAKE) $(AM_MAKEFLAGS) stamp-h1
-
-stamp-h1: $(srcdir)/config.h.in $(top_builddir)/config.status
-	@rm -f stamp-h1
-	cd $(top_builddir) && $(SHELL) ./config.status config.h
-$(srcdir)/config.h.in:  $(am__configure_deps) 
-	($(am__cd) $(top_srcdir) && $(AUTOHEADER))
-	rm -f stamp-h1
-	touch $@
-
-distclean-hdr:
-	-rm -f config.h stamp-h1
-xfixes.pc: $(top_builddir)/config.status $(srcdir)/xfixes.pc.in
-	cd $(top_builddir) && $(SHELL) ./config.status $@
-
-mostlyclean-libtool:
-	-rm -f *.lo
-
-clean-libtool:
-	-rm -rf .libs _libs
-
-distclean-libtool:
-	-rm -f libtool config.lt
-install-pkgconfigDATA: $(pkgconfig_DATA)
-	@$(NORMAL_INSTALL)
-	@list='$(pkgconfig_DATA)'; test -n "$(pkgconfigdir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(pkgconfigdir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(pkgconfigdir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(pkgconfigdir)'"; \
-	  $(INSTALL_DATA) $$files "$(DESTDIR)$(pkgconfigdir)" || exit $$?; \
-	done
-
-uninstall-pkgconfigDATA:
-	@$(NORMAL_UNINSTALL)
-	@list='$(pkgconfig_DATA)'; test -n "$(pkgconfigdir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(pkgconfigdir)'; $(am__uninstall_files_from_dir)
-
-# This directory's subdirectories are mostly independent; you can cd
-# into them and run 'make' without going through this Makefile.
-# To change the values of 'make' variables: instead of editing Makefiles,
-# (1) if the variable is set in 'config.status', edit 'config.status'
-#     (which will cause the Makefiles to be regenerated when you run 'make');
-# (2) otherwise, pass the desired values on the 'make' command line.
-$(am__recursive_targets):
-	@fail=; \
-	if $(am__make_keepgoing); then \
-	  failcom='fail=yes'; \
-	else \
-	  failcom='exit 1'; \
-	fi; \
-	dot_seen=no; \
-	target=`echo $@ | sed s/-recursive//`; \
-	case "$@" in \
-	  distclean-* | maintainer-clean-*) list='$(DIST_SUBDIRS)' ;; \
-	  *) list='$(SUBDIRS)' ;; \
-	esac; \
-	for subdir in $$list; do \
-	  echo "Making $$target in $$subdir"; \
-	  if test "$$subdir" = "."; then \
-	    dot_seen=yes; \
-	    local_target="$$target-am"; \
-	  else \
-	    local_target="$$target"; \
-	  fi; \
-	  ($(am__cd) $$subdir && $(MAKE) $(AM_MAKEFLAGS) $$local_target) \
-	  || eval $$failcom; \
-	done; \
-	if test "$$dot_seen" = "no"; then \
-	  $(MAKE) $(AM_MAKEFLAGS) "$$target-am" || exit 1; \
-	fi; test -z "$$fail"
-
-ID: $(am__tagged_files)
-	$(am__define_uniq_tagged_files); mkid -fID $$unique
-tags: tags-recursive
-TAGS: tags
-
-tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
-	set x; \
-	here=`pwd`; \
-	if ($(ETAGS) --etags-include --version) >/dev/null 2>&1; then \
-	  include_option=--etags-include; \
-	  empty_fix=.; \
-	else \
-	  include_option=--include; \
-	  empty_fix=; \
-	fi; \
-	list='$(SUBDIRS)'; for subdir in $$list; do \
-	  if test "$$subdir" = .; then :; else \
-	    test ! -f $$subdir/TAGS || \
-	      set "$$@" "$$include_option=$$here/$$subdir/TAGS"; \
-	  fi; \
-	done; \
-	$(am__define_uniq_tagged_files); \
-	shift; \
-	if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
-	  test -n "$$unique" || unique=$$empty_fix; \
-	  if test $$# -gt 0; then \
-	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
-	      "$$@" $$unique; \
-	  else \
-	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
-	      $$unique; \
-	  fi; \
-	fi
-ctags: ctags-recursive
-
-CTAGS: ctags
-ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
-	$(am__define_uniq_tagged_files); \
-	test -z "$(CTAGS_ARGS)$$unique" \
-	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
-	     $$unique
-
-GTAGS:
-	here=`$(am__cd) $(top_builddir) && pwd` \
-	  && $(am__cd) $(top_srcdir) \
-	  && gtags -i $(GTAGS_ARGS) "$$here"
-cscope: cscope.files
-	test ! -s cscope.files \
-	  || $(CSCOPE) -b -q $(AM_CSCOPEFLAGS) $(CSCOPEFLAGS) -i cscope.files $(CSCOPE_ARGS)
-clean-cscope:
-	-rm -f cscope.files
-cscope.files: clean-cscope cscopelist
-cscopelist: cscopelist-recursive
-
-cscopelist-am: $(am__tagged_files)
-	list='$(am__tagged_files)'; \
-	case "$(srcdir)" in \
-	  [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
-	  *) sdir=$(subdir)/$(srcdir) ;; \
-	esac; \
-	for i in $$list; do \
-	  if test -f "$$i"; then \
-	    echo "$(subdir)/$$i"; \
-	  else \
-	    echo "$$sdir/$$i"; \
-	  fi; \
-	done >> $(top_builddir)/cscope.files
-
-distclean-tags:
-	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
-	-rm -f cscope.out cscope.in.out cscope.po.out cscope.files
-distdir: $(BUILT_SOURCES)
-	$(MAKE) $(AM_MAKEFLAGS) distdir-am
-
-distdir-am: $(DISTFILES)
-	$(am__remove_distdir)
-	test -d "$(distdir)" || mkdir "$(distdir)"
-	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	list='$(DISTFILES)'; \
-	  dist_files=`for file in $$list; do echo $$file; done | \
-	  sed -e "s|^$$srcdirstrip/||;t" \
-	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
-	case $$dist_files in \
-	  */*) $(MKDIR_P) `echo "$$dist_files" | \
-			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
-			   sort -u` ;; \
-	esac; \
-	for file in $$dist_files; do \
-	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
-	  if test -d $$d/$$file; then \
-	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
-	    if test -d "$(distdir)/$$file"; then \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
-	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
-	  else \
-	    test -f "$(distdir)/$$file" \
-	    || cp -p $$d/$$file "$(distdir)/$$file" \
-	    || exit 1; \
-	  fi; \
-	done
-	@list='$(DIST_SUBDIRS)'; for subdir in $$list; do \
-	  if test "$$subdir" = .; then :; else \
-	    $(am__make_dryrun) \
-	      || test -d "$(distdir)/$$subdir" \
-	      || $(MKDIR_P) "$(distdir)/$$subdir" \
-	      || exit 1; \
-	    dir1=$$subdir; dir2="$(distdir)/$$subdir"; \
-	    $(am__relativize); \
-	    new_distdir=$$reldir; \
-	    dir1=$$subdir; dir2="$(top_distdir)"; \
-	    $(am__relativize); \
-	    new_top_distdir=$$reldir; \
-	    echo " (cd $$subdir && $(MAKE) $(AM_MAKEFLAGS) top_distdir="$$new_top_distdir" distdir="$$new_distdir" \\"; \
-	    echo "     am__remove_distdir=: am__skip_length_check=: am__skip_mode_fix=: distdir)"; \
-	    ($(am__cd) $$subdir && \
-	      $(MAKE) $(AM_MAKEFLAGS) \
-	        top_distdir="$$new_top_distdir" \
-	        distdir="$$new_distdir" \
-		am__remove_distdir=: \
-		am__skip_length_check=: \
-		am__skip_mode_fix=: \
-	        distdir) \
-	      || exit 1; \
-	  fi; \
-	done
-	$(MAKE) $(AM_MAKEFLAGS) \
-	  top_distdir="$(top_distdir)" distdir="$(distdir)" \
-	  dist-hook
-	-test -n "$(am__skip_mode_fix)" \
-	|| find "$(distdir)" -type d ! -perm -755 \
-		-exec chmod u+rwx,go+rx {} \; -o \
-	  ! -type d ! -perm -444 -links 1 -exec chmod a+r {} \; -o \
-	  ! -type d ! -perm -400 -exec chmod a+r {} \; -o \
-	  ! -type d ! -perm -444 -exec $(install_sh) -c -m a+r {} {} \; \
-	|| chmod -R a+r "$(distdir)"
-dist-gzip: distdir
-	tardir=$(distdir) && $(am__tar) | eval GZIP= gzip $(GZIP_ENV) -c >$(distdir).tar.gz
-	$(am__post_remove_distdir)
-
-dist-bzip2: distdir
-	tardir=$(distdir) && $(am__tar) | BZIP2=$${BZIP2--9} bzip2 -c >$(distdir).tar.bz2
-	$(am__post_remove_distdir)
-
-dist-lzip: distdir
-	tardir=$(distdir) && $(am__tar) | lzip -c $${LZIP_OPT--9} >$(distdir).tar.lz
-	$(am__post_remove_distdir)
-dist-xz: distdir
-	tardir=$(distdir) && $(am__tar) | XZ_OPT=$${XZ_OPT--e} xz -c >$(distdir).tar.xz
-	$(am__post_remove_distdir)
-
-dist-zstd: distdir
-	tardir=$(distdir) && $(am__tar) | zstd -c $${ZSTD_CLEVEL-$${ZSTD_OPT--19}} >$(distdir).tar.zst
-	$(am__post_remove_distdir)
-
-dist-tarZ: distdir
-	@echo WARNING: "Support for distribution archives compressed with" \
-		       "legacy program 'compress' is deprecated." >&2
-	@echo WARNING: "It will be removed altogether in Automake 2.0" >&2
-	tardir=$(distdir) && $(am__tar) | compress -c >$(distdir).tar.Z
-	$(am__post_remove_distdir)
-
-dist-shar: distdir
-	@echo WARNING: "Support for shar distribution archives is" \
-	               "deprecated." >&2
-	@echo WARNING: "It will be removed altogether in Automake 2.0" >&2
-	shar $(distdir) | eval GZIP= gzip $(GZIP_ENV) -c >$(distdir).shar.gz
-	$(am__post_remove_distdir)
-
-dist-zip: distdir
-	-rm -f $(distdir).zip
-	zip -rq $(distdir).zip $(distdir)
-	$(am__post_remove_distdir)
-
-dist dist-all:
-	$(MAKE) $(AM_MAKEFLAGS) $(DIST_TARGETS) am__post_remove_distdir='@:'
-	$(am__post_remove_distdir)
-
-# This target untars the dist file and tries a VPATH configuration.  Then
-# it guarantees that the distribution is self-contained by making another
-# tarfile.
-distcheck: dist
-	case '$(DIST_ARCHIVES)' in \
-	*.tar.gz*) \
-	  eval GZIP= gzip $(GZIP_ENV) -dc $(distdir).tar.gz | $(am__untar) ;;\
-	*.tar.bz2*) \
-	  bzip2 -dc $(distdir).tar.bz2 | $(am__untar) ;;\
-	*.tar.lz*) \
-	  lzip -dc $(distdir).tar.lz | $(am__untar) ;;\
-	*.tar.xz*) \
-	  xz -dc $(distdir).tar.xz | $(am__untar) ;;\
-	*.tar.Z*) \
-	  uncompress -c $(distdir).tar.Z | $(am__untar) ;;\
-	*.shar.gz*) \
-	  eval GZIP= gzip $(GZIP_ENV) -dc $(distdir).shar.gz | unshar ;;\
-	*.zip*) \
-	  unzip $(distdir).zip ;;\
-	*.tar.zst*) \
-	  zstd -dc $(distdir).tar.zst | $(am__untar) ;;\
-	esac
-	chmod -R a-w $(distdir)
-	chmod u+w $(distdir)
-	mkdir $(distdir)/_build $(distdir)/_build/sub $(distdir)/_inst
-	chmod a-w $(distdir)
-	test -d $(distdir)/_build || exit 0; \
-	dc_install_base=`$(am__cd) $(distdir)/_inst && pwd | sed -e 's,^[^:\\/]:[\\/],/,'` \
-	  && dc_destdir="$${TMPDIR-/tmp}/am-dc-$$$$/" \
-	  && am__cwd=`pwd` \
-	  && $(am__cd) $(distdir)/_build/sub \
-	  && ../../configure \
-	    $(AM_DISTCHECK_CONFIGURE_FLAGS) \
-	    $(DISTCHECK_CONFIGURE_FLAGS) \
-	    --srcdir=../.. --prefix="$$dc_install_base" \
-	  && $(MAKE) $(AM_MAKEFLAGS) \
-	  && $(MAKE) $(AM_MAKEFLAGS) $(AM_DISTCHECK_DVI_TARGET) \
-	  && $(MAKE) $(AM_MAKEFLAGS) check \
-	  && $(MAKE) $(AM_MAKEFLAGS) install \
-	  && $(MAKE) $(AM_MAKEFLAGS) installcheck \
-	  && $(MAKE) $(AM_MAKEFLAGS) uninstall \
-	  && $(MAKE) $(AM_MAKEFLAGS) distuninstallcheck_dir="$$dc_install_base" \
-	        distuninstallcheck \
-	  && chmod -R a-w "$$dc_install_base" \
-	  && ({ \
-	       (cd ../.. && umask 077 && mkdir "$$dc_destdir") \
-	       && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" install \
-	       && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" uninstall \
-	       && $(MAKE) $(AM_MAKEFLAGS) DESTDIR="$$dc_destdir" \
-	            distuninstallcheck_dir="$$dc_destdir" distuninstallcheck; \
-	      } || { rm -rf "$$dc_destdir"; exit 1; }) \
-	  && rm -rf "$$dc_destdir" \
-	  && $(MAKE) $(AM_MAKEFLAGS) dist \
-	  && rm -rf $(DIST_ARCHIVES) \
-	  && $(MAKE) $(AM_MAKEFLAGS) distcleancheck \
-	  && cd "$$am__cwd" \
-	  || exit 1
-	$(am__post_remove_distdir)
-	@(echo "$(distdir) archives ready for distribution: "; \
-	  list='$(DIST_ARCHIVES)'; for i in $$list; do echo $$i; done) | \
-	  sed -e 1h -e 1s/./=/g -e 1p -e 1x -e '$$p' -e '$$x'
-distuninstallcheck:
-	@test -n '$(distuninstallcheck_dir)' || { \
-	  echo 'ERROR: trying to run $@ with an empty' \
-	       '$$(distuninstallcheck_dir)' >&2; \
-	  exit 1; \
-	}; \
-	$(am__cd) '$(distuninstallcheck_dir)' || { \
-	  echo 'ERROR: cannot chdir into $(distuninstallcheck_dir)' >&2; \
-	  exit 1; \
-	}; \
-	test `$(am__distuninstallcheck_listfiles) | wc -l` -eq 0 \
-	   || { echo "ERROR: files left after uninstall:" ; \
-	        if test -n "$(DESTDIR)"; then \
-	          echo "  (check DESTDIR support)"; \
-	        fi ; \
-	        $(distuninstallcheck_listfiles) ; \
-	        exit 1; } >&2
-distcleancheck: distclean
-	@if test '$(srcdir)' = . ; then \
-	  echo "ERROR: distcleancheck can only run from a VPATH build" ; \
-	  exit 1 ; \
-	fi
-	@test `$(distcleancheck_listfiles) | wc -l` -eq 0 \
-	  || { echo "ERROR: files left in build directory after distclean:" ; \
-	       $(distcleancheck_listfiles) ; \
-	       exit 1; } >&2
-check-am: all-am
-check: check-recursive
-all-am: Makefile $(DATA) config.h
-installdirs: installdirs-recursive
-installdirs-am:
-	for dir in "$(DESTDIR)$(pkgconfigdir)"; do \
-	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
-	done
-install: install-recursive
-install-exec: install-exec-recursive
-install-data: install-data-recursive
-uninstall: uninstall-recursive
-
-install-am: all-am
-	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
-
-installcheck: installcheck-recursive
-install-strip:
-	if test -z '$(STRIP)'; then \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	      install; \
-	else \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
-	fi
-mostlyclean-generic:
-
-clean-generic:
-
-distclean-generic:
-	-test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES)
-	-test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES)
-
-maintainer-clean-generic:
-	@echo "This command is intended for maintainers to use"
-	@echo "it deletes files that may require special tools to rebuild."
-	-test -z "$(MAINTAINERCLEANFILES)" || rm -f $(MAINTAINERCLEANFILES)
-clean: clean-recursive
-
-clean-am: clean-generic clean-libtool mostlyclean-am
-
-distclean: distclean-recursive
-	-rm -f $(am__CONFIG_DISTCLEAN_FILES)
-	-rm -f Makefile
-distclean-am: clean-am distclean-generic distclean-hdr \
-	distclean-libtool distclean-tags
-
-dvi: dvi-recursive
-
-dvi-am:
-
-html: html-recursive
-
-html-am:
-
-info: info-recursive
-
-info-am:
-
-install-data-am: install-pkgconfigDATA
-
-install-dvi: install-dvi-recursive
-
-install-dvi-am:
-
-install-exec-am:
-
-install-html: install-html-recursive
-
-install-html-am:
-
-install-info: install-info-recursive
-
-install-info-am:
-
-install-man:
-
-install-pdf: install-pdf-recursive
-
-install-pdf-am:
-
-install-ps: install-ps-recursive
-
-install-ps-am:
-
-installcheck-am:
-
-maintainer-clean: maintainer-clean-recursive
-	-rm -f $(am__CONFIG_DISTCLEAN_FILES)
-	-rm -rf $(top_srcdir)/autom4te.cache
-	-rm -f Makefile
-maintainer-clean-am: distclean-am maintainer-clean-generic
-
-mostlyclean: mostlyclean-recursive
-
-mostlyclean-am: mostlyclean-generic mostlyclean-libtool
-
-pdf: pdf-recursive
-
-pdf-am:
-
-ps: ps-recursive
-
-ps-am:
-
-uninstall-am: uninstall-pkgconfigDATA
-
-.MAKE: $(am__recursive_targets) all install-am install-strip
-
-.PHONY: $(am__recursive_targets) CTAGS GTAGS TAGS all all-am \
-	am--refresh check check-am clean clean-cscope clean-generic \
-	clean-libtool cscope cscopelist-am ctags ctags-am dist \
-	dist-all dist-bzip2 dist-gzip dist-hook dist-lzip dist-shar \
-	dist-tarZ dist-xz dist-zip dist-zstd distcheck distclean \
-	distclean-generic distclean-hdr distclean-libtool \
-	distclean-tags distcleancheck distdir distuninstallcheck dvi \
-	dvi-am html html-am info info-am install install-am \
-	install-data install-data-am install-dvi install-dvi-am \
-	install-exec install-exec-am install-html install-html-am \
-	install-info install-info-am install-man install-pdf \
-	install-pdf-am install-pkgconfigDATA install-ps install-ps-am \
-	install-strip installcheck installcheck-am installdirs \
-	installdirs-am maintainer-clean maintainer-clean-generic \
-	mostlyclean mostlyclean-generic mostlyclean-libtool pdf pdf-am \
-	ps ps-am tags tags-am uninstall uninstall-am \
-	uninstall-pkgconfigDATA
-
-.PRECIOUS: Makefile
-
-
-.PHONY: ChangeLog INSTALL
-
-INSTALL:
-	$(INSTALL_CMD)
-
-ChangeLog:
-	$(CHANGELOG_CMD)
-
-dist-hook: ChangeLog INSTALL
-
-# Tell versions [3.59,3.63) of GNU make to not export all variables.
-# Otherwise a system limit (for SysV at least) may be exceeded.
-.NOEXPORT:
diff --git a/experiments/wasm-gui/third_party/libXfixes/README.md b/experiments/wasm-gui/third_party/libXfixes/README.md
deleted file mode 100644
index 6bdfcf3be..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/README.md
+++ /dev/null
@@ -1,18 +0,0 @@
-libXfixes - XFIXES Extension library
-------------------------------------
-
-All questions regarding this software should be directed at the
-Xorg mailing list:
-
-  https://lists.x.org/mailman/listinfo/xorg
-
-The primary development code repository can be found at:
-
-  https://gitlab.freedesktop.org/xorg/lib/libXfixes
-
-Please submit bug reports and requests to merge patches there.
-
-For patch submission instructions, see:
-
-  https://www.x.org/wiki/Development/Documentation/SubmittingPatches
-
diff --git a/experiments/wasm-gui/third_party/libXfixes/aclocal.m4 b/experiments/wasm-gui/third_party/libXfixes/aclocal.m4
deleted file mode 100644
index 63cff8f53..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/aclocal.m4
+++ /dev/null
@@ -1,3370 +0,0 @@
-# generated automatically by aclocal 1.16.5 -*- Autoconf -*-
-
-# Copyright (C) 1996-2021 Free Software Foundation, Inc.
-
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-m4_ifndef([AC_CONFIG_MACRO_DIRS], [m4_defun([_AM_CONFIG_MACRO_DIRS], [])m4_defun([AC_CONFIG_MACRO_DIRS], [_AM_CONFIG_MACRO_DIRS($@)])])
-m4_ifndef([AC_AUTOCONF_VERSION],
-  [m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl
-m4_if(m4_defn([AC_AUTOCONF_VERSION]), [2.71],,
-[m4_warning([this file was generated for autoconf 2.71.
-You have another version of autoconf.  It may work, but is not guaranteed to.
-If you have problems, you may need to regenerate the build system entirely.
-To do so, use the procedure documented by the package, typically 'autoreconf'.])])
-
-# Copyright (C) 2002-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_AUTOMAKE_VERSION(VERSION)
-# ----------------------------
-# Automake X.Y traces this macro to ensure aclocal.m4 has been
-# generated from the m4 files accompanying Automake X.Y.
-# (This private macro should not be called outside this file.)
-AC_DEFUN([AM_AUTOMAKE_VERSION],
-[am__api_version='1.16'
-dnl Some users find AM_AUTOMAKE_VERSION and mistake it for a way to
-dnl require some minimum version.  Point them to the right macro.
-m4_if([$1], [1.16.5], [],
-      [AC_FATAL([Do not call $0, use AM_INIT_AUTOMAKE([$1]).])])dnl
-])
-
-# _AM_AUTOCONF_VERSION(VERSION)
-# -----------------------------
-# aclocal traces this macro to find the Autoconf version.
-# This is a private macro too.  Using m4_define simplifies
-# the logic in aclocal, which can simply ignore this definition.
-m4_define([_AM_AUTOCONF_VERSION], [])
-
-# AM_SET_CURRENT_AUTOMAKE_VERSION
-# -------------------------------
-# Call AM_AUTOMAKE_VERSION and AM_AUTOMAKE_VERSION so they can be traced.
-# This function is AC_REQUIREd by AM_INIT_AUTOMAKE.
-AC_DEFUN([AM_SET_CURRENT_AUTOMAKE_VERSION],
-[AM_AUTOMAKE_VERSION([1.16.5])dnl
-m4_ifndef([AC_AUTOCONF_VERSION],
-  [m4_copy([m4_PACKAGE_VERSION], [AC_AUTOCONF_VERSION])])dnl
-_AM_AUTOCONF_VERSION(m4_defn([AC_AUTOCONF_VERSION]))])
-
-# AM_AUX_DIR_EXPAND                                         -*- Autoconf -*-
-
-# Copyright (C) 2001-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# For projects using AC_CONFIG_AUX_DIR([foo]), Autoconf sets
-# $ac_aux_dir to '$srcdir/foo'.  In other projects, it is set to
-# '$srcdir', '$srcdir/..', or '$srcdir/../..'.
-#
-# Of course, Automake must honor this variable whenever it calls a
-# tool from the auxiliary directory.  The problem is that $srcdir (and
-# therefore $ac_aux_dir as well) can be either absolute or relative,
-# depending on how configure is run.  This is pretty annoying, since
-# it makes $ac_aux_dir quite unusable in subdirectories: in the top
-# source directory, any form will work fine, but in subdirectories a
-# relative path needs to be adjusted first.
-#
-# $ac_aux_dir/missing
-#    fails when called from a subdirectory if $ac_aux_dir is relative
-# $top_srcdir/$ac_aux_dir/missing
-#    fails if $ac_aux_dir is absolute,
-#    fails when called from a subdirectory in a VPATH build with
-#          a relative $ac_aux_dir
-#
-# The reason of the latter failure is that $top_srcdir and $ac_aux_dir
-# are both prefixed by $srcdir.  In an in-source build this is usually
-# harmless because $srcdir is '.', but things will broke when you
-# start a VPATH build or use an absolute $srcdir.
-#
-# So we could use something similar to $top_srcdir/$ac_aux_dir/missing,
-# iff we strip the leading $srcdir from $ac_aux_dir.  That would be:
-#   am_aux_dir='\$(top_srcdir)/'`expr "$ac_aux_dir" : "$srcdir//*\(.*\)"`
-# and then we would define $MISSING as
-#   MISSING="\${SHELL} $am_aux_dir/missing"
-# This will work as long as MISSING is not called from configure, because
-# unfortunately $(top_srcdir) has no meaning in configure.
-# However there are other variables, like CC, which are often used in
-# configure, and could therefore not use this "fixed" $ac_aux_dir.
-#
-# Another solution, used here, is to always expand $ac_aux_dir to an
-# absolute PATH.  The drawback is that using absolute paths prevent a
-# configured tree to be moved without reconfiguration.
-
-AC_DEFUN([AM_AUX_DIR_EXPAND],
-[AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl
-# Expand $ac_aux_dir to an absolute path.
-am_aux_dir=`cd "$ac_aux_dir" && pwd`
-])
-
-# AM_CONDITIONAL                                            -*- Autoconf -*-
-
-# Copyright (C) 1997-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_CONDITIONAL(NAME, SHELL-CONDITION)
-# -------------------------------------
-# Define a conditional.
-AC_DEFUN([AM_CONDITIONAL],
-[AC_PREREQ([2.52])dnl
- m4_if([$1], [TRUE],  [AC_FATAL([$0: invalid condition: $1])],
-       [$1], [FALSE], [AC_FATAL([$0: invalid condition: $1])])dnl
-AC_SUBST([$1_TRUE])dnl
-AC_SUBST([$1_FALSE])dnl
-_AM_SUBST_NOTMAKE([$1_TRUE])dnl
-_AM_SUBST_NOTMAKE([$1_FALSE])dnl
-m4_define([_AM_COND_VALUE_$1], [$2])dnl
-if $2; then
-  $1_TRUE=
-  $1_FALSE='#'
-else
-  $1_TRUE='#'
-  $1_FALSE=
-fi
-AC_CONFIG_COMMANDS_PRE(
-[if test -z "${$1_TRUE}" && test -z "${$1_FALSE}"; then
-  AC_MSG_ERROR([[conditional "$1" was never defined.
-Usually this means the macro was only invoked conditionally.]])
-fi])])
-
-# Copyright (C) 1999-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-
-# There are a few dirty hacks below to avoid letting 'AC_PROG_CC' be
-# written in clear, in which case automake, when reading aclocal.m4,
-# will think it sees a *use*, and therefore will trigger all it's
-# C support machinery.  Also note that it means that autoscan, seeing
-# CC etc. in the Makefile, will ask for an AC_PROG_CC use...
-
-
-# _AM_DEPENDENCIES(NAME)
-# ----------------------
-# See how the compiler implements dependency checking.
-# NAME is "CC", "CXX", "OBJC", "OBJCXX", "UPC", or "GJC".
-# We try a few techniques and use that to set a single cache variable.
-#
-# We don't AC_REQUIRE the corresponding AC_PROG_CC since the latter was
-# modified to invoke _AM_DEPENDENCIES(CC); we would have a circular
-# dependency, and given that the user is not expected to run this macro,
-# just rely on AC_PROG_CC.
-AC_DEFUN([_AM_DEPENDENCIES],
-[AC_REQUIRE([AM_SET_DEPDIR])dnl
-AC_REQUIRE([AM_OUTPUT_DEPENDENCY_COMMANDS])dnl
-AC_REQUIRE([AM_MAKE_INCLUDE])dnl
-AC_REQUIRE([AM_DEP_TRACK])dnl
-
-m4_if([$1], [CC],   [depcc="$CC"   am_compiler_list=],
-      [$1], [CXX],  [depcc="$CXX"  am_compiler_list=],
-      [$1], [OBJC], [depcc="$OBJC" am_compiler_list='gcc3 gcc'],
-      [$1], [OBJCXX], [depcc="$OBJCXX" am_compiler_list='gcc3 gcc'],
-      [$1], [UPC],  [depcc="$UPC"  am_compiler_list=],
-      [$1], [GCJ],  [depcc="$GCJ"  am_compiler_list='gcc3 gcc'],
-                    [depcc="$$1"   am_compiler_list=])
-
-AC_CACHE_CHECK([dependency style of $depcc],
-               [am_cv_$1_dependencies_compiler_type],
-[if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then
-  # We make a subdir and do the tests there.  Otherwise we can end up
-  # making bogus files that we don't know about and never remove.  For
-  # instance it was reported that on HP-UX the gcc test will end up
-  # making a dummy file named 'D' -- because '-MD' means "put the output
-  # in D".
-  rm -rf conftest.dir
-  mkdir conftest.dir
-  # Copy depcomp to subdir because otherwise we won't find it if we're
-  # using a relative directory.
-  cp "$am_depcomp" conftest.dir
-  cd conftest.dir
-  # We will build objects and dependencies in a subdirectory because
-  # it helps to detect inapplicable dependency modes.  For instance
-  # both Tru64's cc and ICC support -MD to output dependencies as a
-  # side effect of compilation, but ICC will put the dependencies in
-  # the current directory while Tru64 will put them in the object
-  # directory.
-  mkdir sub
-
-  am_cv_$1_dependencies_compiler_type=none
-  if test "$am_compiler_list" = ""; then
-     am_compiler_list=`sed -n ['s/^#*\([a-zA-Z0-9]*\))$/\1/p'] < ./depcomp`
-  fi
-  am__universal=false
-  m4_case([$1], [CC],
-    [case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac],
-    [CXX],
-    [case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac])
-
-  for depmode in $am_compiler_list; do
-    # Setup a source with many dependencies, because some compilers
-    # like to wrap large dependency lists on column 80 (with \), and
-    # we should not choose a depcomp mode which is confused by this.
-    #
-    # We need to recreate these files for each test, as the compiler may
-    # overwrite some of them when testing with obscure command lines.
-    # This happens at least with the AIX C compiler.
-    : > sub/conftest.c
-    for i in 1 2 3 4 5 6; do
-      echo '#include "conftst'$i'.h"' >> sub/conftest.c
-      # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with
-      # Solaris 10 /bin/sh.
-      echo '/* dummy */' > sub/conftst$i.h
-    done
-    echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
-
-    # We check with '-c' and '-o' for the sake of the "dashmstdout"
-    # mode.  It turns out that the SunPro C++ compiler does not properly
-    # handle '-M -o', and we need to detect this.  Also, some Intel
-    # versions had trouble with output in subdirs.
-    am__obj=sub/conftest.${OBJEXT-o}
-    am__minus_obj="-o $am__obj"
-    case $depmode in
-    gcc)
-      # This depmode causes a compiler race in universal mode.
-      test "$am__universal" = false || continue
-      ;;
-    nosideeffect)
-      # After this tag, mechanisms are not by side-effect, so they'll
-      # only be used when explicitly requested.
-      if test "x$enable_dependency_tracking" = xyes; then
-	continue
-      else
-	break
-      fi
-      ;;
-    msvc7 | msvc7msys | msvisualcpp | msvcmsys)
-      # This compiler won't grok '-c -o', but also, the minuso test has
-      # not run yet.  These depmodes are late enough in the game, and
-      # so weak that their functioning should not be impacted.
-      am__obj=conftest.${OBJEXT-o}
-      am__minus_obj=
-      ;;
-    none) break ;;
-    esac
-    if depmode=$depmode \
-       source=sub/conftest.c object=$am__obj \
-       depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
-       $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \
-         >/dev/null 2>conftest.err &&
-       grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep $am__obj sub/conftest.Po > /dev/null 2>&1 &&
-       ${MAKE-make} -s -f confmf > /dev/null 2>&1; then
-      # icc doesn't choke on unknown options, it will just issue warnings
-      # or remarks (even with -Werror).  So we grep stderr for any message
-      # that says an option was ignored or not supported.
-      # When given -MP, icc 7.0 and 7.1 complain thusly:
-      #   icc: Command line warning: ignoring option '-M'; no argument required
-      # The diagnosis changed in icc 8.0:
-      #   icc: Command line remark: option '-MP' not supported
-      if (grep 'ignoring option' conftest.err ||
-          grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else
-        am_cv_$1_dependencies_compiler_type=$depmode
-        break
-      fi
-    fi
-  done
-
-  cd ..
-  rm -rf conftest.dir
-else
-  am_cv_$1_dependencies_compiler_type=none
-fi
-])
-AC_SUBST([$1DEPMODE], [depmode=$am_cv_$1_dependencies_compiler_type])
-AM_CONDITIONAL([am__fastdep$1], [
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_$1_dependencies_compiler_type" = gcc3])
-])
-
-
-# AM_SET_DEPDIR
-# -------------
-# Choose a directory name for dependency files.
-# This macro is AC_REQUIREd in _AM_DEPENDENCIES.
-AC_DEFUN([AM_SET_DEPDIR],
-[AC_REQUIRE([AM_SET_LEADING_DOT])dnl
-AC_SUBST([DEPDIR], ["${am__leading_dot}deps"])dnl
-])
-
-
-# AM_DEP_TRACK
-# ------------
-AC_DEFUN([AM_DEP_TRACK],
-[AC_ARG_ENABLE([dependency-tracking], [dnl
-AS_HELP_STRING(
-  [--enable-dependency-tracking],
-  [do not reject slow dependency extractors])
-AS_HELP_STRING(
-  [--disable-dependency-tracking],
-  [speeds up one-time build])])
-if test "x$enable_dependency_tracking" != xno; then
-  am_depcomp="$ac_aux_dir/depcomp"
-  AMDEPBACKSLASH='\'
-  am__nodep='_no'
-fi
-AM_CONDITIONAL([AMDEP], [test "x$enable_dependency_tracking" != xno])
-AC_SUBST([AMDEPBACKSLASH])dnl
-_AM_SUBST_NOTMAKE([AMDEPBACKSLASH])dnl
-AC_SUBST([am__nodep])dnl
-_AM_SUBST_NOTMAKE([am__nodep])dnl
-])
-
-# Generate code to set up dependency tracking.              -*- Autoconf -*-
-
-# Copyright (C) 1999-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_OUTPUT_DEPENDENCY_COMMANDS
-# ------------------------------
-AC_DEFUN([_AM_OUTPUT_DEPENDENCY_COMMANDS],
-[{
-  # Older Autoconf quotes --file arguments for eval, but not when files
-  # are listed without --file.  Let's play safe and only enable the eval
-  # if we detect the quoting.
-  # TODO: see whether this extra hack can be removed once we start
-  # requiring Autoconf 2.70 or later.
-  AS_CASE([$CONFIG_FILES],
-          [*\'*], [eval set x "$CONFIG_FILES"],
-          [*], [set x $CONFIG_FILES])
-  shift
-  # Used to flag and report bootstrapping failures.
-  am_rc=0
-  for am_mf
-  do
-    # Strip MF so we end up with the name of the file.
-    am_mf=`AS_ECHO(["$am_mf"]) | sed -e 's/:.*$//'`
-    # Check whether this is an Automake generated Makefile which includes
-    # dependency-tracking related rules and includes.
-    # Grep'ing the whole file directly is not great: AIX grep has a line
-    # limit of 2048, but all sed's we know have understand at least 4000.
-    sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \
-      || continue
-    am_dirpart=`AS_DIRNAME(["$am_mf"])`
-    am_filepart=`AS_BASENAME(["$am_mf"])`
-    AM_RUN_LOG([cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles]) || am_rc=$?
-  done
-  if test $am_rc -ne 0; then
-    AC_MSG_FAILURE([Something went wrong bootstrapping makefile fragments
-    for automatic dependency tracking.  If GNU make was not used, consider
-    re-running the configure script with MAKE="gmake" (or whatever is
-    necessary).  You can also try re-running configure with the
-    '--disable-dependency-tracking' option to at least be able to build
-    the package (albeit without support for automatic dependency tracking).])
-  fi
-  AS_UNSET([am_dirpart])
-  AS_UNSET([am_filepart])
-  AS_UNSET([am_mf])
-  AS_UNSET([am_rc])
-  rm -f conftest-deps.mk
-}
-])# _AM_OUTPUT_DEPENDENCY_COMMANDS
-
-
-# AM_OUTPUT_DEPENDENCY_COMMANDS
-# -----------------------------
-# This macro should only be invoked once -- use via AC_REQUIRE.
-#
-# This code is only required when automatic dependency tracking is enabled.
-# This creates each '.Po' and '.Plo' makefile fragment that we'll need in
-# order to bootstrap the dependency handling code.
-AC_DEFUN([AM_OUTPUT_DEPENDENCY_COMMANDS],
-[AC_CONFIG_COMMANDS([depfiles],
-     [test x"$AMDEP_TRUE" != x"" || _AM_OUTPUT_DEPENDENCY_COMMANDS],
-     [AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}"])])
-
-# Do all the work for Automake.                             -*- Autoconf -*-
-
-# Copyright (C) 1996-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This macro actually does too much.  Some checks are only needed if
-# your package does certain things.  But this isn't really a big deal.
-
-dnl Redefine AC_PROG_CC to automatically invoke _AM_PROG_CC_C_O.
-m4_define([AC_PROG_CC],
-m4_defn([AC_PROG_CC])
-[_AM_PROG_CC_C_O
-])
-
-# AM_INIT_AUTOMAKE(PACKAGE, VERSION, [NO-DEFINE])
-# AM_INIT_AUTOMAKE([OPTIONS])
-# -----------------------------------------------
-# The call with PACKAGE and VERSION arguments is the old style
-# call (pre autoconf-2.50), which is being phased out.  PACKAGE
-# and VERSION should now be passed to AC_INIT and removed from
-# the call to AM_INIT_AUTOMAKE.
-# We support both call styles for the transition.  After
-# the next Automake release, Autoconf can make the AC_INIT
-# arguments mandatory, and then we can depend on a new Autoconf
-# release and drop the old call support.
-AC_DEFUN([AM_INIT_AUTOMAKE],
-[AC_PREREQ([2.65])dnl
-m4_ifdef([_$0_ALREADY_INIT],
-  [m4_fatal([$0 expanded multiple times
-]m4_defn([_$0_ALREADY_INIT]))],
-  [m4_define([_$0_ALREADY_INIT], m4_expansion_stack)])dnl
-dnl Autoconf wants to disallow AM_ names.  We explicitly allow
-dnl the ones we care about.
-m4_pattern_allow([^AM_[A-Z]+FLAGS$])dnl
-AC_REQUIRE([AM_SET_CURRENT_AUTOMAKE_VERSION])dnl
-AC_REQUIRE([AC_PROG_INSTALL])dnl
-if test "`cd $srcdir && pwd`" != "`pwd`"; then
-  # Use -I$(srcdir) only when $(srcdir) != ., so that make's output
-  # is not polluted with repeated "-I."
-  AC_SUBST([am__isrc], [' -I$(srcdir)'])_AM_SUBST_NOTMAKE([am__isrc])dnl
-  # test to see if srcdir already configured
-  if test -f $srcdir/config.status; then
-    AC_MSG_ERROR([source directory already configured; run "make distclean" there first])
-  fi
-fi
-
-# test whether we have cygpath
-if test -z "$CYGPATH_W"; then
-  if (cygpath --version) >/dev/null 2>/dev/null; then
-    CYGPATH_W='cygpath -w'
-  else
-    CYGPATH_W=echo
-  fi
-fi
-AC_SUBST([CYGPATH_W])
-
-# Define the identity of the package.
-dnl Distinguish between old-style and new-style calls.
-m4_ifval([$2],
-[AC_DIAGNOSE([obsolete],
-             [$0: two- and three-arguments forms are deprecated.])
-m4_ifval([$3], [_AM_SET_OPTION([no-define])])dnl
- AC_SUBST([PACKAGE], [$1])dnl
- AC_SUBST([VERSION], [$2])],
-[_AM_SET_OPTIONS([$1])dnl
-dnl Diagnose old-style AC_INIT with new-style AM_AUTOMAKE_INIT.
-m4_if(
-  m4_ifset([AC_PACKAGE_NAME], [ok]):m4_ifset([AC_PACKAGE_VERSION], [ok]),
-  [ok:ok],,
-  [m4_fatal([AC_INIT should be called with package and version arguments])])dnl
- AC_SUBST([PACKAGE], ['AC_PACKAGE_TARNAME'])dnl
- AC_SUBST([VERSION], ['AC_PACKAGE_VERSION'])])dnl
-
-_AM_IF_OPTION([no-define],,
-[AC_DEFINE_UNQUOTED([PACKAGE], ["$PACKAGE"], [Name of package])
- AC_DEFINE_UNQUOTED([VERSION], ["$VERSION"], [Version number of package])])dnl
-
-# Some tools Automake needs.
-AC_REQUIRE([AM_SANITY_CHECK])dnl
-AC_REQUIRE([AC_ARG_PROGRAM])dnl
-AM_MISSING_PROG([ACLOCAL], [aclocal-${am__api_version}])
-AM_MISSING_PROG([AUTOCONF], [autoconf])
-AM_MISSING_PROG([AUTOMAKE], [automake-${am__api_version}])
-AM_MISSING_PROG([AUTOHEADER], [autoheader])
-AM_MISSING_PROG([MAKEINFO], [makeinfo])
-AC_REQUIRE([AM_PROG_INSTALL_SH])dnl
-AC_REQUIRE([AM_PROG_INSTALL_STRIP])dnl
-AC_REQUIRE([AC_PROG_MKDIR_P])dnl
-# For better backward compatibility.  To be removed once Automake 1.9.x
-# dies out for good.  For more background, see:
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00001.html>
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00014.html>
-AC_SUBST([mkdir_p], ['$(MKDIR_P)'])
-# We need awk for the "check" target (and possibly the TAP driver).  The
-# system "awk" is bad on some platforms.
-AC_REQUIRE([AC_PROG_AWK])dnl
-AC_REQUIRE([AC_PROG_MAKE_SET])dnl
-AC_REQUIRE([AM_SET_LEADING_DOT])dnl
-_AM_IF_OPTION([tar-ustar], [_AM_PROG_TAR([ustar])],
-	      [_AM_IF_OPTION([tar-pax], [_AM_PROG_TAR([pax])],
-			     [_AM_PROG_TAR([v7])])])
-_AM_IF_OPTION([no-dependencies],,
-[AC_PROVIDE_IFELSE([AC_PROG_CC],
-		  [_AM_DEPENDENCIES([CC])],
-		  [m4_define([AC_PROG_CC],
-			     m4_defn([AC_PROG_CC])[_AM_DEPENDENCIES([CC])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_CXX],
-		  [_AM_DEPENDENCIES([CXX])],
-		  [m4_define([AC_PROG_CXX],
-			     m4_defn([AC_PROG_CXX])[_AM_DEPENDENCIES([CXX])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_OBJC],
-		  [_AM_DEPENDENCIES([OBJC])],
-		  [m4_define([AC_PROG_OBJC],
-			     m4_defn([AC_PROG_OBJC])[_AM_DEPENDENCIES([OBJC])])])dnl
-AC_PROVIDE_IFELSE([AC_PROG_OBJCXX],
-		  [_AM_DEPENDENCIES([OBJCXX])],
-		  [m4_define([AC_PROG_OBJCXX],
-			     m4_defn([AC_PROG_OBJCXX])[_AM_DEPENDENCIES([OBJCXX])])])dnl
-])
-# Variables for tags utilities; see am/tags.am
-if test -z "$CTAGS"; then
-  CTAGS=ctags
-fi
-AC_SUBST([CTAGS])
-if test -z "$ETAGS"; then
-  ETAGS=etags
-fi
-AC_SUBST([ETAGS])
-if test -z "$CSCOPE"; then
-  CSCOPE=cscope
-fi
-AC_SUBST([CSCOPE])
-
-AC_REQUIRE([AM_SILENT_RULES])dnl
-dnl The testsuite driver may need to know about EXEEXT, so add the
-dnl 'am__EXEEXT' conditional if _AM_COMPILER_EXEEXT was seen.  This
-dnl macro is hooked onto _AC_COMPILER_EXEEXT early, see below.
-AC_CONFIG_COMMANDS_PRE(dnl
-[m4_provide_if([_AM_COMPILER_EXEEXT],
-  [AM_CONDITIONAL([am__EXEEXT], [test -n "$EXEEXT"])])])dnl
-
-# POSIX will say in a future version that running "rm -f" with no argument
-# is OK; and we want to be able to make that assumption in our Makefile
-# recipes.  So use an aggressive probe to check that the usage we want is
-# actually supported "in the wild" to an acceptable degree.
-# See automake bug#10828.
-# To make any issue more visible, cause the running configure to be aborted
-# by default if the 'rm' program in use doesn't match our expectations; the
-# user can still override this though.
-if rm -f && rm -fr && rm -rf; then : OK; else
-  cat >&2 <<'END'
-Oops!
-
-Your 'rm' program seems unable to run without file operands specified
-on the command line, even when the '-f' option is present.  This is contrary
-to the behaviour of most rm programs out there, and not conforming with
-the upcoming POSIX standard: <http://austingroupbugs.net/view.php?id=542>
-
-Please tell bug-automake@gnu.org about your system, including the value
-of your $PATH and any error possibly output before this message.  This
-can help us improve future automake versions.
-
-END
-  if test x"$ACCEPT_INFERIOR_RM_PROGRAM" = x"yes"; then
-    echo 'Configuration will proceed anyway, since you have set the' >&2
-    echo 'ACCEPT_INFERIOR_RM_PROGRAM variable to "yes"' >&2
-    echo >&2
-  else
-    cat >&2 <<'END'
-Aborting the configuration process, to ensure you take notice of the issue.
-
-You can download and install GNU coreutils to get an 'rm' implementation
-that behaves properly: <https://www.gnu.org/software/coreutils/>.
-
-If you want to complete the configuration process using your problematic
-'rm' anyway, export the environment variable ACCEPT_INFERIOR_RM_PROGRAM
-to "yes", and re-run configure.
-
-END
-    AC_MSG_ERROR([Your 'rm' program is bad, sorry.])
-  fi
-fi
-dnl The trailing newline in this macro's definition is deliberate, for
-dnl backward compatibility and to allow trailing 'dnl'-style comments
-dnl after the AM_INIT_AUTOMAKE invocation. See automake bug#16841.
-])
-
-dnl Hook into '_AC_COMPILER_EXEEXT' early to learn its expansion.  Do not
-dnl add the conditional right here, as _AC_COMPILER_EXEEXT may be further
-dnl mangled by Autoconf and run in a shell conditional statement.
-m4_define([_AC_COMPILER_EXEEXT],
-m4_defn([_AC_COMPILER_EXEEXT])[m4_provide([_AM_COMPILER_EXEEXT])])
-
-# When config.status generates a header, we must update the stamp-h file.
-# This file resides in the same directory as the config header
-# that is generated.  The stamp files are numbered to have different names.
-
-# Autoconf calls _AC_AM_CONFIG_HEADER_HOOK (when defined) in the
-# loop where config.status creates the headers, so we can generate
-# our stamp files there.
-AC_DEFUN([_AC_AM_CONFIG_HEADER_HOOK],
-[# Compute $1's index in $config_headers.
-_am_arg=$1
-_am_stamp_count=1
-for _am_header in $config_headers :; do
-  case $_am_header in
-    $_am_arg | $_am_arg:* )
-      break ;;
-    * )
-      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
-  esac
-done
-echo "timestamp for $_am_arg" >`AS_DIRNAME(["$_am_arg"])`/stamp-h[]$_am_stamp_count])
-
-# Copyright (C) 2001-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_PROG_INSTALL_SH
-# ------------------
-# Define $install_sh.
-AC_DEFUN([AM_PROG_INSTALL_SH],
-[AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-if test x"${install_sh+set}" != xset; then
-  case $am_aux_dir in
-  *\ * | *\	*)
-    install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;;
-  *)
-    install_sh="\${SHELL} $am_aux_dir/install-sh"
-  esac
-fi
-AC_SUBST([install_sh])])
-
-# Copyright (C) 2003-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# Check whether the underlying file-system supports filenames
-# with a leading dot.  For instance MS-DOS doesn't.
-AC_DEFUN([AM_SET_LEADING_DOT],
-[rm -rf .tst 2>/dev/null
-mkdir .tst 2>/dev/null
-if test -d .tst; then
-  am__leading_dot=.
-else
-  am__leading_dot=_
-fi
-rmdir .tst 2>/dev/null
-AC_SUBST([am__leading_dot])])
-
-# Check to see how 'make' treats includes.	            -*- Autoconf -*-
-
-# Copyright (C) 2001-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_MAKE_INCLUDE()
-# -----------------
-# Check whether make has an 'include' directive that can support all
-# the idioms we need for our automatic dependency tracking code.
-AC_DEFUN([AM_MAKE_INCLUDE],
-[AC_MSG_CHECKING([whether ${MAKE-make} supports the include directive])
-cat > confinc.mk << 'END'
-am__doit:
-	@echo this is the am__doit target >confinc.out
-.PHONY: am__doit
-END
-am__include="#"
-am__quote=
-# BSD make does it like this.
-echo '.include "confinc.mk" # ignored' > confmf.BSD
-# Other make implementations (GNU, Solaris 10, AIX) do it like this.
-echo 'include confinc.mk # ignored' > confmf.GNU
-_am_result=no
-for s in GNU BSD; do
-  AM_RUN_LOG([${MAKE-make} -f confmf.$s && cat confinc.out])
-  AS_CASE([$?:`cat confinc.out 2>/dev/null`],
-      ['0:this is the am__doit target'],
-      [AS_CASE([$s],
-          [BSD], [am__include='.include' am__quote='"'],
-          [am__include='include' am__quote=''])])
-  if test "$am__include" != "#"; then
-    _am_result="yes ($s style)"
-    break
-  fi
-done
-rm -f confinc.* confmf.*
-AC_MSG_RESULT([${_am_result}])
-AC_SUBST([am__include])])
-AC_SUBST([am__quote])])
-
-# Fake the existence of programs that GNU maintainers use.  -*- Autoconf -*-
-
-# Copyright (C) 1997-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_MISSING_PROG(NAME, PROGRAM)
-# ------------------------------
-AC_DEFUN([AM_MISSING_PROG],
-[AC_REQUIRE([AM_MISSING_HAS_RUN])
-$1=${$1-"${am_missing_run}$2"}
-AC_SUBST($1)])
-
-# AM_MISSING_HAS_RUN
-# ------------------
-# Define MISSING if not defined so far and test if it is modern enough.
-# If it is, set am_missing_run to use it, otherwise, to nothing.
-AC_DEFUN([AM_MISSING_HAS_RUN],
-[AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-AC_REQUIRE_AUX_FILE([missing])dnl
-if test x"${MISSING+set}" != xset; then
-  MISSING="\${SHELL} '$am_aux_dir/missing'"
-fi
-# Use eval to expand $SHELL
-if eval "$MISSING --is-lightweight"; then
-  am_missing_run="$MISSING "
-else
-  am_missing_run=
-  AC_MSG_WARN(['missing' script is too old or missing])
-fi
-])
-
-# Helper functions for option handling.                     -*- Autoconf -*-
-
-# Copyright (C) 2001-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_MANGLE_OPTION(NAME)
-# -----------------------
-AC_DEFUN([_AM_MANGLE_OPTION],
-[[_AM_OPTION_]m4_bpatsubst($1, [[^a-zA-Z0-9_]], [_])])
-
-# _AM_SET_OPTION(NAME)
-# --------------------
-# Set option NAME.  Presently that only means defining a flag for this option.
-AC_DEFUN([_AM_SET_OPTION],
-[m4_define(_AM_MANGLE_OPTION([$1]), [1])])
-
-# _AM_SET_OPTIONS(OPTIONS)
-# ------------------------
-# OPTIONS is a space-separated list of Automake options.
-AC_DEFUN([_AM_SET_OPTIONS],
-[m4_foreach_w([_AM_Option], [$1], [_AM_SET_OPTION(_AM_Option)])])
-
-# _AM_IF_OPTION(OPTION, IF-SET, [IF-NOT-SET])
-# -------------------------------------------
-# Execute IF-SET if OPTION is set, IF-NOT-SET otherwise.
-AC_DEFUN([_AM_IF_OPTION],
-[m4_ifset(_AM_MANGLE_OPTION([$1]), [$2], [$3])])
-
-# Copyright (C) 1999-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_PROG_CC_C_O
-# ---------------
-# Like AC_PROG_CC_C_O, but changed for automake.  We rewrite AC_PROG_CC
-# to automatically call this.
-AC_DEFUN([_AM_PROG_CC_C_O],
-[AC_REQUIRE([AM_AUX_DIR_EXPAND])dnl
-AC_REQUIRE_AUX_FILE([compile])dnl
-AC_LANG_PUSH([C])dnl
-AC_CACHE_CHECK(
-  [whether $CC understands -c and -o together],
-  [am_cv_prog_cc_c_o],
-  [AC_LANG_CONFTEST([AC_LANG_PROGRAM([])])
-  # Make sure it works both with $CC and with simple cc.
-  # Following AC_PROG_CC_C_O, we do the test twice because some
-  # compilers refuse to overwrite an existing .o file with -o,
-  # though they will create one.
-  am_cv_prog_cc_c_o=yes
-  for am_i in 1 2; do
-    if AM_RUN_LOG([$CC -c conftest.$ac_ext -o conftest2.$ac_objext]) \
-         && test -f conftest2.$ac_objext; then
-      : OK
-    else
-      am_cv_prog_cc_c_o=no
-      break
-    fi
-  done
-  rm -f core conftest*
-  unset am_i])
-if test "$am_cv_prog_cc_c_o" != yes; then
-   # Losing compiler, so override with the script.
-   # FIXME: It is wrong to rewrite CC.
-   # But if we don't then we get into trouble of one sort or another.
-   # A longer-term fix would be to have automake use am__CC in this case,
-   # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)"
-   CC="$am_aux_dir/compile $CC"
-fi
-AC_LANG_POP([C])])
-
-# For backward compatibility.
-AC_DEFUN_ONCE([AM_PROG_CC_C_O], [AC_REQUIRE([AC_PROG_CC])])
-
-# Copyright (C) 2001-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_RUN_LOG(COMMAND)
-# -------------------
-# Run COMMAND, save the exit status in ac_status, and log it.
-# (This has been adapted from Autoconf's _AC_RUN_LOG macro.)
-AC_DEFUN([AM_RUN_LOG],
-[{ echo "$as_me:$LINENO: $1" >&AS_MESSAGE_LOG_FD
-   ($1) >&AS_MESSAGE_LOG_FD 2>&AS_MESSAGE_LOG_FD
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
-   (exit $ac_status); }])
-
-# Check to make sure that the build environment is sane.    -*- Autoconf -*-
-
-# Copyright (C) 1996-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_SANITY_CHECK
-# ---------------
-AC_DEFUN([AM_SANITY_CHECK],
-[AC_MSG_CHECKING([whether build environment is sane])
-# Reject unsafe characters in $srcdir or the absolute working directory
-# name.  Accept space and tab only in the latter.
-am_lf='
-'
-case `pwd` in
-  *[[\\\"\#\$\&\'\`$am_lf]]*)
-    AC_MSG_ERROR([unsafe absolute working directory name]);;
-esac
-case $srcdir in
-  *[[\\\"\#\$\&\'\`$am_lf\ \	]]*)
-    AC_MSG_ERROR([unsafe srcdir value: '$srcdir']);;
-esac
-
-# Do 'set' in a subshell so we don't clobber the current shell's
-# arguments.  Must try -L first in case configure is actually a
-# symlink; some systems play weird games with the mod time of symlinks
-# (eg FreeBSD returns the mod time of the symlink's containing
-# directory).
-if (
-   am_has_slept=no
-   for am_try in 1 2; do
-     echo "timestamp, slept: $am_has_slept" > conftest.file
-     set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null`
-     if test "$[*]" = "X"; then
-	# -L didn't work.
-	set X `ls -t "$srcdir/configure" conftest.file`
-     fi
-     if test "$[*]" != "X $srcdir/configure conftest.file" \
-	&& test "$[*]" != "X conftest.file $srcdir/configure"; then
-
-	# If neither matched, then we have a broken ls.  This can happen
-	# if, for instance, CONFIG_SHELL is bash and it inherits a
-	# broken ls alias from the environment.  This has actually
-	# happened.  Such a system could not be considered "sane".
-	AC_MSG_ERROR([ls -t appears to fail.  Make sure there is not a broken
-  alias in your environment])
-     fi
-     if test "$[2]" = conftest.file || test $am_try -eq 2; then
-       break
-     fi
-     # Just in case.
-     sleep 1
-     am_has_slept=yes
-   done
-   test "$[2]" = conftest.file
-   )
-then
-   # Ok.
-   :
-else
-   AC_MSG_ERROR([newly created file is older than distributed files!
-Check your system clock])
-fi
-AC_MSG_RESULT([yes])
-# If we didn't sleep, we still need to ensure time stamps of config.status and
-# generated files are strictly newer.
-am_sleep_pid=
-if grep 'slept: no' conftest.file >/dev/null 2>&1; then
-  ( sleep 1 ) &
-  am_sleep_pid=$!
-fi
-AC_CONFIG_COMMANDS_PRE(
-  [AC_MSG_CHECKING([that generated files are newer than configure])
-   if test -n "$am_sleep_pid"; then
-     # Hide warnings about reused PIDs.
-     wait $am_sleep_pid 2>/dev/null
-   fi
-   AC_MSG_RESULT([done])])
-rm -f conftest.file
-])
-
-# Copyright (C) 2009-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_SILENT_RULES([DEFAULT])
-# --------------------------
-# Enable less verbose build rules; with the default set to DEFAULT
-# ("yes" being less verbose, "no" or empty being verbose).
-AC_DEFUN([AM_SILENT_RULES],
-[AC_ARG_ENABLE([silent-rules], [dnl
-AS_HELP_STRING(
-  [--enable-silent-rules],
-  [less verbose build output (undo: "make V=1")])
-AS_HELP_STRING(
-  [--disable-silent-rules],
-  [verbose build output (undo: "make V=0")])dnl
-])
-case $enable_silent_rules in @%:@ (((
-  yes) AM_DEFAULT_VERBOSITY=0;;
-   no) AM_DEFAULT_VERBOSITY=1;;
-    *) AM_DEFAULT_VERBOSITY=m4_if([$1], [yes], [0], [1]);;
-esac
-dnl
-dnl A few 'make' implementations (e.g., NonStop OS and NextStep)
-dnl do not support nested variable expansions.
-dnl See automake bug#9928 and bug#10237.
-am_make=${MAKE-make}
-AC_CACHE_CHECK([whether $am_make supports nested variables],
-   [am_cv_make_support_nested_variables],
-   [if AS_ECHO([['TRUE=$(BAR$(V))
-BAR0=false
-BAR1=true
-V=1
-am__doit:
-	@$(TRUE)
-.PHONY: am__doit']]) | $am_make -f - >/dev/null 2>&1; then
-  am_cv_make_support_nested_variables=yes
-else
-  am_cv_make_support_nested_variables=no
-fi])
-if test $am_cv_make_support_nested_variables = yes; then
-  dnl Using '$V' instead of '$(V)' breaks IRIX make.
-  AM_V='$(V)'
-  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-else
-  AM_V=$AM_DEFAULT_VERBOSITY
-  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
-fi
-AC_SUBST([AM_V])dnl
-AM_SUBST_NOTMAKE([AM_V])dnl
-AC_SUBST([AM_DEFAULT_V])dnl
-AM_SUBST_NOTMAKE([AM_DEFAULT_V])dnl
-AC_SUBST([AM_DEFAULT_VERBOSITY])dnl
-AM_BACKSLASH='\'
-AC_SUBST([AM_BACKSLASH])dnl
-_AM_SUBST_NOTMAKE([AM_BACKSLASH])dnl
-])
-
-# Copyright (C) 2001-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# AM_PROG_INSTALL_STRIP
-# ---------------------
-# One issue with vendor 'install' (even GNU) is that you can't
-# specify the program used to strip binaries.  This is especially
-# annoying in cross-compiling environments, where the build's strip
-# is unlikely to handle the host's binaries.
-# Fortunately install-sh will honor a STRIPPROG variable, so we
-# always use install-sh in "make install-strip", and initialize
-# STRIPPROG with the value of the STRIP variable (set by the user).
-AC_DEFUN([AM_PROG_INSTALL_STRIP],
-[AC_REQUIRE([AM_PROG_INSTALL_SH])dnl
-# Installed binaries are usually stripped using 'strip' when the user
-# run "make install-strip".  However 'strip' might not be the right
-# tool to use in cross-compilation environments, therefore Automake
-# will honor the 'STRIP' environment variable to overrule this program.
-dnl Don't test for $cross_compiling = yes, because it might be 'maybe'.
-if test "$cross_compiling" != no; then
-  AC_CHECK_TOOL([STRIP], [strip], :)
-fi
-INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s"
-AC_SUBST([INSTALL_STRIP_PROGRAM])])
-
-# Copyright (C) 2006-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_SUBST_NOTMAKE(VARIABLE)
-# ---------------------------
-# Prevent Automake from outputting VARIABLE = @VARIABLE@ in Makefile.in.
-# This macro is traced by Automake.
-AC_DEFUN([_AM_SUBST_NOTMAKE])
-
-# AM_SUBST_NOTMAKE(VARIABLE)
-# --------------------------
-# Public sister of _AM_SUBST_NOTMAKE.
-AC_DEFUN([AM_SUBST_NOTMAKE], [_AM_SUBST_NOTMAKE($@)])
-
-# Check how to create a tarball.                            -*- Autoconf -*-
-
-# Copyright (C) 2004-2021 Free Software Foundation, Inc.
-#
-# This file is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# _AM_PROG_TAR(FORMAT)
-# --------------------
-# Check how to create a tarball in format FORMAT.
-# FORMAT should be one of 'v7', 'ustar', or 'pax'.
-#
-# Substitute a variable $(am__tar) that is a command
-# writing to stdout a FORMAT-tarball containing the directory
-# $tardir.
-#     tardir=directory && $(am__tar) > result.tar
-#
-# Substitute a variable $(am__untar) that extract such
-# a tarball read from stdin.
-#     $(am__untar) < result.tar
-#
-AC_DEFUN([_AM_PROG_TAR],
-[# Always define AMTAR for backward compatibility.  Yes, it's still used
-# in the wild :-(  We should find a proper way to deprecate it ...
-AC_SUBST([AMTAR], ['$${TAR-tar}'])
-
-# We'll loop over all known methods to create a tar archive until one works.
-_am_tools='gnutar m4_if([$1], [ustar], [plaintar]) pax cpio none'
-
-m4_if([$1], [v7],
-  [am__tar='$${TAR-tar} chof - "$$tardir"' am__untar='$${TAR-tar} xf -'],
-
-  [m4_case([$1],
-    [ustar],
-     [# The POSIX 1988 'ustar' format is defined with fixed-size fields.
-      # There is notably a 21 bits limit for the UID and the GID.  In fact,
-      # the 'pax' utility can hang on bigger UID/GID (see automake bug#8343
-      # and bug#13588).
-      am_max_uid=2097151 # 2^21 - 1
-      am_max_gid=$am_max_uid
-      # The $UID and $GID variables are not portable, so we need to resort
-      # to the POSIX-mandated id(1) utility.  Errors in the 'id' calls
-      # below are definitely unexpected, so allow the users to see them
-      # (that is, avoid stderr redirection).
-      am_uid=`id -u || echo unknown`
-      am_gid=`id -g || echo unknown`
-      AC_MSG_CHECKING([whether UID '$am_uid' is supported by ustar format])
-      if test $am_uid -le $am_max_uid; then
-         AC_MSG_RESULT([yes])
-      else
-         AC_MSG_RESULT([no])
-         _am_tools=none
-      fi
-      AC_MSG_CHECKING([whether GID '$am_gid' is supported by ustar format])
-      if test $am_gid -le $am_max_gid; then
-         AC_MSG_RESULT([yes])
-      else
-        AC_MSG_RESULT([no])
-        _am_tools=none
-      fi],
-
-  [pax],
-    [],
-
-  [m4_fatal([Unknown tar format])])
-
-  AC_MSG_CHECKING([how to create a $1 tar archive])
-
-  # Go ahead even if we have the value already cached.  We do so because we
-  # need to set the values for the 'am__tar' and 'am__untar' variables.
-  _am_tools=${am_cv_prog_tar_$1-$_am_tools}
-
-  for _am_tool in $_am_tools; do
-    case $_am_tool in
-    gnutar)
-      for _am_tar in tar gnutar gtar; do
-        AM_RUN_LOG([$_am_tar --version]) && break
-      done
-      am__tar="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$$tardir"'
-      am__tar_="$_am_tar --format=m4_if([$1], [pax], [posix], [$1]) -chf - "'"$tardir"'
-      am__untar="$_am_tar -xf -"
-      ;;
-    plaintar)
-      # Must skip GNU tar: if it does not support --format= it doesn't create
-      # ustar tarball either.
-      (tar --version) >/dev/null 2>&1 && continue
-      am__tar='tar chf - "$$tardir"'
-      am__tar_='tar chf - "$tardir"'
-      am__untar='tar xf -'
-      ;;
-    pax)
-      am__tar='pax -L -x $1 -w "$$tardir"'
-      am__tar_='pax -L -x $1 -w "$tardir"'
-      am__untar='pax -r'
-      ;;
-    cpio)
-      am__tar='find "$$tardir" -print | cpio -o -H $1 -L'
-      am__tar_='find "$tardir" -print | cpio -o -H $1 -L'
-      am__untar='cpio -i -H $1 -d'
-      ;;
-    none)
-      am__tar=false
-      am__tar_=false
-      am__untar=false
-      ;;
-    esac
-
-    # If the value was cached, stop now.  We just wanted to have am__tar
-    # and am__untar set.
-    test -n "${am_cv_prog_tar_$1}" && break
-
-    # tar/untar a dummy directory, and stop if the command works.
-    rm -rf conftest.dir
-    mkdir conftest.dir
-    echo GrepMe > conftest.dir/file
-    AM_RUN_LOG([tardir=conftest.dir && eval $am__tar_ >conftest.tar])
-    rm -rf conftest.dir
-    if test -s conftest.tar; then
-      AM_RUN_LOG([$am__untar <conftest.tar])
-      AM_RUN_LOG([cat conftest.dir/file])
-      grep GrepMe conftest.dir/file >/dev/null 2>&1 && break
-    fi
-  done
-  rm -rf conftest.dir
-
-  AC_CACHE_VAL([am_cv_prog_tar_$1], [am_cv_prog_tar_$1=$_am_tool])
-  AC_MSG_RESULT([$am_cv_prog_tar_$1])])
-
-AC_SUBST([am__tar])
-AC_SUBST([am__untar])
-]) # _AM_PROG_TAR
-
-dnl pkg.m4 - Macros to locate and utilise pkg-config.   -*- Autoconf -*-
-dnl serial 11 (pkg-config-0.29)
-dnl
-dnl Copyright © 2004 Scott James Remnant <scott@netsplit.com>.
-dnl Copyright © 2012-2015 Dan Nicholson <dbn.lists@gmail.com>
-dnl
-dnl This program is free software; you can redistribute it and/or modify
-dnl it under the terms of the GNU General Public License as published by
-dnl the Free Software Foundation; either version 2 of the License, or
-dnl (at your option) any later version.
-dnl
-dnl This program is distributed in the hope that it will be useful, but
-dnl WITHOUT ANY WARRANTY; without even the implied warranty of
-dnl MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU
-dnl General Public License for more details.
-dnl
-dnl You should have received a copy of the GNU General Public License
-dnl along with this program; if not, write to the Free Software
-dnl Foundation, Inc., 59 Temple Place - Suite 330, Boston, MA
-dnl 02111-1307, USA.
-dnl
-dnl As a special exception to the GNU General Public License, if you
-dnl distribute this file as part of a program that contains a
-dnl configuration script generated by Autoconf, you may include it under
-dnl the same distribution terms that you use for the rest of that
-dnl program.
-
-dnl PKG_PREREQ(MIN-VERSION)
-dnl -----------------------
-dnl Since: 0.29
-dnl
-dnl Verify that the version of the pkg-config macros are at least
-dnl MIN-VERSION. Unlike PKG_PROG_PKG_CONFIG, which checks the user's
-dnl installed version of pkg-config, this checks the developer's version
-dnl of pkg.m4 when generating configure.
-dnl
-dnl To ensure that this macro is defined, also add:
-dnl m4_ifndef([PKG_PREREQ],
-dnl     [m4_fatal([must install pkg-config 0.29 or later before running autoconf/autogen])])
-dnl
-dnl See the "Since" comment for each macro you use to see what version
-dnl of the macros you require.
-m4_defun([PKG_PREREQ],
-[m4_define([PKG_MACROS_VERSION], [0.29])
-m4_if(m4_version_compare(PKG_MACROS_VERSION, [$1]), -1,
-    [m4_fatal([pkg.m4 version $1 or higher is required but ]PKG_MACROS_VERSION[ found])])
-])dnl PKG_PREREQ
-
-dnl PKG_PROG_PKG_CONFIG([MIN-VERSION])
-dnl ----------------------------------
-dnl Since: 0.16
-dnl
-dnl Search for the pkg-config tool and set the PKG_CONFIG variable to
-dnl first found in the path. Checks that the version of pkg-config found
-dnl is at least MIN-VERSION. If MIN-VERSION is not specified, 0.9.0 is
-dnl used since that's the first version where most current features of
-dnl pkg-config existed.
-AC_DEFUN([PKG_PROG_PKG_CONFIG],
-[m4_pattern_forbid([^_?PKG_[A-Z_]+$])
-m4_pattern_allow([^PKG_CONFIG(_(PATH|LIBDIR|SYSROOT_DIR|ALLOW_SYSTEM_(CFLAGS|LIBS)))?$])
-m4_pattern_allow([^PKG_CONFIG_(DISABLE_UNINSTALLED|TOP_BUILD_DIR|DEBUG_SPEW)$])
-AC_ARG_VAR([PKG_CONFIG], [path to pkg-config utility])
-AC_ARG_VAR([PKG_CONFIG_PATH], [directories to add to pkg-config's search path])
-AC_ARG_VAR([PKG_CONFIG_LIBDIR], [path overriding pkg-config's built-in search path])
-
-if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
-	AC_PATH_TOOL([PKG_CONFIG], [pkg-config])
-fi
-if test -n "$PKG_CONFIG"; then
-	_pkg_min_version=m4_default([$1], [0.9.0])
-	AC_MSG_CHECKING([pkg-config is at least version $_pkg_min_version])
-	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
-		AC_MSG_RESULT([yes])
-	else
-		AC_MSG_RESULT([no])
-		PKG_CONFIG=""
-	fi
-fi[]dnl
-])dnl PKG_PROG_PKG_CONFIG
-
-dnl PKG_CHECK_EXISTS(MODULES, [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND])
-dnl -------------------------------------------------------------------
-dnl Since: 0.18
-dnl
-dnl Check to see whether a particular set of modules exists. Similar to
-dnl PKG_CHECK_MODULES(), but does not set variables or print errors.
-dnl
-dnl Please remember that m4 expands AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-dnl only at the first occurence in configure.ac, so if the first place
-dnl it's called might be skipped (such as if it is within an "if", you
-dnl have to call PKG_CHECK_EXISTS manually
-AC_DEFUN([PKG_CHECK_EXISTS],
-[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-if test -n "$PKG_CONFIG" && \
-    AC_RUN_LOG([$PKG_CONFIG --exists --print-errors "$1"]); then
-  m4_default([$2], [:])
-m4_ifvaln([$3], [else
-  $3])dnl
-fi])
-
-dnl _PKG_CONFIG([VARIABLE], [COMMAND], [MODULES])
-dnl ---------------------------------------------
-dnl Internal wrapper calling pkg-config via PKG_CONFIG and setting
-dnl pkg_failed based on the result.
-m4_define([_PKG_CONFIG],
-[if test -n "$$1"; then
-    pkg_cv_[]$1="$$1"
- elif test -n "$PKG_CONFIG"; then
-    PKG_CHECK_EXISTS([$3],
-                     [pkg_cv_[]$1=`$PKG_CONFIG --[]$2 "$3" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes ],
-		     [pkg_failed=yes])
- else
-    pkg_failed=untried
-fi[]dnl
-])dnl _PKG_CONFIG
-
-dnl _PKG_SHORT_ERRORS_SUPPORTED
-dnl ---------------------------
-dnl Internal check to see if pkg-config supports short errors.
-AC_DEFUN([_PKG_SHORT_ERRORS_SUPPORTED],
-[AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
-        _pkg_short_errors_supported=yes
-else
-        _pkg_short_errors_supported=no
-fi[]dnl
-])dnl _PKG_SHORT_ERRORS_SUPPORTED
-
-
-dnl PKG_CHECK_MODULES(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND],
-dnl   [ACTION-IF-NOT-FOUND])
-dnl --------------------------------------------------------------
-dnl Since: 0.4.0
-dnl
-dnl Note that if there is a possibility the first call to
-dnl PKG_CHECK_MODULES might not happen, you should be sure to include an
-dnl explicit call to PKG_PROG_PKG_CONFIG in your configure.ac
-AC_DEFUN([PKG_CHECK_MODULES],
-[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-AC_ARG_VAR([$1][_CFLAGS], [C compiler flags for $1, overriding pkg-config])dnl
-AC_ARG_VAR([$1][_LIBS], [linker flags for $1, overriding pkg-config])dnl
-
-pkg_failed=no
-AC_MSG_CHECKING([for $1])
-
-_PKG_CONFIG([$1][_CFLAGS], [cflags], [$2])
-_PKG_CONFIG([$1][_LIBS], [libs], [$2])
-
-m4_define([_PKG_TEXT], [Alternatively, you may set the environment variables $1[]_CFLAGS
-and $1[]_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details.])
-
-if test $pkg_failed = yes; then
-   	AC_MSG_RESULT([no])
-        _PKG_SHORT_ERRORS_SUPPORTED
-        if test $_pkg_short_errors_supported = yes; then
-	        $1[]_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "$2" 2>&1`
-        else 
-	        $1[]_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "$2" 2>&1`
-        fi
-	# Put the nasty error message in config.log where it belongs
-	echo "$$1[]_PKG_ERRORS" >&AS_MESSAGE_LOG_FD
-
-	m4_default([$4], [AC_MSG_ERROR(
-[Package requirements ($2) were not met:
-
-$$1_PKG_ERRORS
-
-Consider adjusting the PKG_CONFIG_PATH environment variable if you
-installed software in a non-standard prefix.
-
-_PKG_TEXT])[]dnl
-        ])
-elif test $pkg_failed = untried; then
-     	AC_MSG_RESULT([no])
-	m4_default([$4], [AC_MSG_FAILURE(
-[The pkg-config script could not be found or is too old.  Make sure it
-is in your PATH or set the PKG_CONFIG environment variable to the full
-path to pkg-config.
-
-_PKG_TEXT
-
-To get pkg-config, see <http://pkg-config.freedesktop.org/>.])[]dnl
-        ])
-else
-	$1[]_CFLAGS=$pkg_cv_[]$1[]_CFLAGS
-	$1[]_LIBS=$pkg_cv_[]$1[]_LIBS
-        AC_MSG_RESULT([yes])
-	$3
-fi[]dnl
-])dnl PKG_CHECK_MODULES
-
-
-dnl PKG_CHECK_MODULES_STATIC(VARIABLE-PREFIX, MODULES, [ACTION-IF-FOUND],
-dnl   [ACTION-IF-NOT-FOUND])
-dnl ---------------------------------------------------------------------
-dnl Since: 0.29
-dnl
-dnl Checks for existence of MODULES and gathers its build flags with
-dnl static libraries enabled. Sets VARIABLE-PREFIX_CFLAGS from --cflags
-dnl and VARIABLE-PREFIX_LIBS from --libs.
-dnl
-dnl Note that if there is a possibility the first call to
-dnl PKG_CHECK_MODULES_STATIC might not happen, you should be sure to
-dnl include an explicit call to PKG_PROG_PKG_CONFIG in your
-dnl configure.ac.
-AC_DEFUN([PKG_CHECK_MODULES_STATIC],
-[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-_save_PKG_CONFIG=$PKG_CONFIG
-PKG_CONFIG="$PKG_CONFIG --static"
-PKG_CHECK_MODULES($@)
-PKG_CONFIG=$_save_PKG_CONFIG[]dnl
-])dnl PKG_CHECK_MODULES_STATIC
-
-
-dnl PKG_INSTALLDIR([DIRECTORY])
-dnl -------------------------
-dnl Since: 0.27
-dnl
-dnl Substitutes the variable pkgconfigdir as the location where a module
-dnl should install pkg-config .pc files. By default the directory is
-dnl $libdir/pkgconfig, but the default can be changed by passing
-dnl DIRECTORY. The user can override through the --with-pkgconfigdir
-dnl parameter.
-AC_DEFUN([PKG_INSTALLDIR],
-[m4_pushdef([pkg_default], [m4_default([$1], ['${libdir}/pkgconfig'])])
-m4_pushdef([pkg_description],
-    [pkg-config installation directory @<:@]pkg_default[@:>@])
-AC_ARG_WITH([pkgconfigdir],
-    [AS_HELP_STRING([--with-pkgconfigdir], pkg_description)],,
-    [with_pkgconfigdir=]pkg_default)
-AC_SUBST([pkgconfigdir], [$with_pkgconfigdir])
-m4_popdef([pkg_default])
-m4_popdef([pkg_description])
-])dnl PKG_INSTALLDIR
-
-
-dnl PKG_NOARCH_INSTALLDIR([DIRECTORY])
-dnl --------------------------------
-dnl Since: 0.27
-dnl
-dnl Substitutes the variable noarch_pkgconfigdir as the location where a
-dnl module should install arch-independent pkg-config .pc files. By
-dnl default the directory is $datadir/pkgconfig, but the default can be
-dnl changed by passing DIRECTORY. The user can override through the
-dnl --with-noarch-pkgconfigdir parameter.
-AC_DEFUN([PKG_NOARCH_INSTALLDIR],
-[m4_pushdef([pkg_default], [m4_default([$1], ['${datadir}/pkgconfig'])])
-m4_pushdef([pkg_description],
-    [pkg-config arch-independent installation directory @<:@]pkg_default[@:>@])
-AC_ARG_WITH([noarch-pkgconfigdir],
-    [AS_HELP_STRING([--with-noarch-pkgconfigdir], pkg_description)],,
-    [with_noarch_pkgconfigdir=]pkg_default)
-AC_SUBST([noarch_pkgconfigdir], [$with_noarch_pkgconfigdir])
-m4_popdef([pkg_default])
-m4_popdef([pkg_description])
-])dnl PKG_NOARCH_INSTALLDIR
-
-
-dnl PKG_CHECK_VAR(VARIABLE, MODULE, CONFIG-VARIABLE,
-dnl [ACTION-IF-FOUND], [ACTION-IF-NOT-FOUND])
-dnl -------------------------------------------
-dnl Since: 0.28
-dnl
-dnl Retrieves the value of the pkg-config variable for the given module.
-AC_DEFUN([PKG_CHECK_VAR],
-[AC_REQUIRE([PKG_PROG_PKG_CONFIG])dnl
-AC_ARG_VAR([$1], [value of $3 for $2, overriding pkg-config])dnl
-
-_PKG_CONFIG([$1], [variable="][$3]["], [$2])
-AS_VAR_COPY([$1], [pkg_cv_][$1])
-
-AS_VAR_IF([$1], [""], [$5], [$4])dnl
-])dnl PKG_CHECK_VAR
-
-dnl xorg-macros.m4.  Generated from xorg-macros.m4.in xorgversion.m4 by configure.
-dnl
-dnl Copyright (c) 2005, 2023, Oracle and/or its affiliates.
-dnl
-dnl Permission is hereby granted, free of charge, to any person obtaining a
-dnl copy of this software and associated documentation files (the "Software"),
-dnl to deal in the Software without restriction, including without limitation
-dnl the rights to use, copy, modify, merge, publish, distribute, sublicense,
-dnl and/or sell copies of the Software, and to permit persons to whom the
-dnl Software is furnished to do so, subject to the following conditions:
-dnl
-dnl The above copyright notice and this permission notice (including the next
-dnl paragraph) shall be included in all copies or substantial portions of the
-dnl Software.
-dnl
-dnl THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-dnl IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-dnl FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-dnl THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-dnl LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-dnl FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-dnl DEALINGS IN THE SOFTWARE.
-
-# XORG_MACROS_VERSION(required-version)
-# -------------------------------------
-# Minimum version: 1.1.0
-#
-# If you're using a macro added in Version 1.1 or newer, include this in
-# your configure.ac with the minimum required version, such as:
-# XORG_MACROS_VERSION(1.1)
-#
-# To ensure that this macro is defined, also add:
-# m4_ifndef([XORG_MACROS_VERSION],
-#     [m4_fatal([must install xorg-macros 1.1 or later before running autoconf/autogen])])
-#
-#
-# See the "minimum version" comment for each macro you use to see what
-# version you require.
-m4_defun([XORG_MACROS_VERSION],[
-m4_define([vers_have], [1.20.0])
-m4_define([maj_have], m4_substr(vers_have, 0, m4_index(vers_have, [.])))
-m4_define([maj_needed], m4_substr([$1], 0, m4_index([$1], [.])))
-m4_if(m4_cmp(maj_have, maj_needed), 0,,
-    [m4_fatal([xorg-macros major version ]maj_needed[ is required but ]vers_have[ found])])
-m4_if(m4_version_compare(vers_have, [$1]), -1,
-    [m4_fatal([xorg-macros version $1 or higher is required but ]vers_have[ found])])
-m4_undefine([vers_have])
-m4_undefine([maj_have])
-m4_undefine([maj_needed])
-]) # XORG_MACROS_VERSION
-
-# XORG_PROG_RAWCPP()
-# ------------------
-# Minimum version: 1.0.0
-#
-# Find cpp program and necessary flags for use in pre-processing text files
-# such as man pages and config files
-AC_DEFUN([XORG_PROG_RAWCPP],[
-AC_REQUIRE([AC_PROG_CPP])
-AC_PATH_TOOL(RAWCPP, [cpp], [${CPP}],
-   [$PATH:/bin:/usr/bin:/usr/lib:/usr/libexec:/usr/ccs/lib:/usr/ccs/lbin:/lib])
-
-# Check for flag to avoid builtin definitions - assumes unix is predefined,
-# which is not the best choice for supporting other OS'es, but covers most
-# of the ones we need for now.
-AC_MSG_CHECKING([if $RAWCPP requires -undef])
-AC_LANG_CONFTEST([AC_LANG_SOURCE([[Does cpp redefine unix ?]])])
-if test `${RAWCPP} < conftest.$ac_ext | grep -c 'unix'` -eq 1 ; then
-	AC_MSG_RESULT([no])
-else
-	if test `${RAWCPP} -undef < conftest.$ac_ext | grep -c 'unix'` -eq 1 ; then
-		RAWCPPFLAGS=-undef
-		AC_MSG_RESULT([yes])
-	# under Cygwin unix is still defined even with -undef
-	elif test `${RAWCPP} -undef -ansi < conftest.$ac_ext | grep -c 'unix'` -eq 1 ; then
-		RAWCPPFLAGS="-undef -ansi"
-		AC_MSG_RESULT([yes, with -ansi])
-	else
-		AC_MSG_ERROR([${RAWCPP} defines unix with or without -undef.  I don't know what to do.])
-	fi
-fi
-rm -f conftest.$ac_ext
-
-AC_MSG_CHECKING([if $RAWCPP requires -traditional])
-AC_LANG_CONFTEST([AC_LANG_SOURCE([[Does cpp preserve   "whitespace"?]])])
-if test `${RAWCPP} < conftest.$ac_ext | grep -c 'preserve   \"'` -eq 1 ; then
-	AC_MSG_RESULT([no])
-else
-	if test `${RAWCPP} -traditional < conftest.$ac_ext | grep -c 'preserve   \"'` -eq 1 ; then
-		TRADITIONALCPPFLAGS="-traditional"
-		RAWCPPFLAGS="${RAWCPPFLAGS} -traditional"
-		AC_MSG_RESULT([yes])
-	else
-		AC_MSG_ERROR([${RAWCPP} does not preserve whitespace with or without -traditional.  I don't know what to do.])
-	fi
-fi
-rm -f conftest.$ac_ext
-AC_SUBST(RAWCPPFLAGS)
-AC_SUBST(TRADITIONALCPPFLAGS)
-]) # XORG_PROG_RAWCPP
-
-# XORG_MANPAGE_SECTIONS()
-# -----------------------
-# Minimum version: 1.0.0
-#
-# Determine which sections man pages go in for the different man page types
-# on this OS - replaces *ManSuffix settings in old Imake *.cf per-os files.
-# Not sure if there's any better way than just hardcoding by OS name.
-# Override default settings by setting environment variables
-# Added MAN_SUBSTS in version 1.8
-# Added AC_PROG_SED in version 1.8
-
-AC_DEFUN([XORG_MANPAGE_SECTIONS],[
-AC_REQUIRE([AC_CANONICAL_HOST])
-AC_REQUIRE([AC_PROG_SED])
-
-case $host_os in
-    solaris*)
-        # Solaris 2.0 - 11.3 use SysV man page section numbers, so we
-        # check for a man page file found in later versions that use
-        # traditional section numbers instead
-        AC_CHECK_FILE([/usr/share/man/man7/attributes.7],
-                [SYSV_MAN_SECTIONS=false], [SYSV_MAN_SECTIONS=true])
-        ;;
-    *) SYSV_MAN_SECTIONS=false ;;
-esac
-
-if test x$APP_MAN_SUFFIX = x    ; then
-    APP_MAN_SUFFIX=1
-fi
-if test x$APP_MAN_DIR = x    ; then
-    APP_MAN_DIR='$(mandir)/man$(APP_MAN_SUFFIX)'
-fi
-
-if test x$LIB_MAN_SUFFIX = x    ; then
-    LIB_MAN_SUFFIX=3
-fi
-if test x$LIB_MAN_DIR = x    ; then
-    LIB_MAN_DIR='$(mandir)/man$(LIB_MAN_SUFFIX)'
-fi
-
-if test x$FILE_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				FILE_MAN_SUFFIX=4  ;;
-	*)				FILE_MAN_SUFFIX=5  ;;
-    esac
-fi
-if test x$FILE_MAN_DIR = x    ; then
-    FILE_MAN_DIR='$(mandir)/man$(FILE_MAN_SUFFIX)'
-fi
-
-if test x$MISC_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				MISC_MAN_SUFFIX=5  ;;
-	*)				MISC_MAN_SUFFIX=7  ;;
-    esac
-fi
-if test x$MISC_MAN_DIR = x    ; then
-    MISC_MAN_DIR='$(mandir)/man$(MISC_MAN_SUFFIX)'
-fi
-
-if test x$DRIVER_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				DRIVER_MAN_SUFFIX=7  ;;
-	*)				DRIVER_MAN_SUFFIX=4  ;;
-    esac
-fi
-if test x$DRIVER_MAN_DIR = x    ; then
-    DRIVER_MAN_DIR='$(mandir)/man$(DRIVER_MAN_SUFFIX)'
-fi
-
-if test x$ADMIN_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				ADMIN_MAN_SUFFIX=1m ;;
-	*)				ADMIN_MAN_SUFFIX=8  ;;
-    esac
-fi
-if test x$ADMIN_MAN_DIR = x    ; then
-    ADMIN_MAN_DIR='$(mandir)/man$(ADMIN_MAN_SUFFIX)'
-fi
-
-
-AC_SUBST([APP_MAN_SUFFIX])
-AC_SUBST([LIB_MAN_SUFFIX])
-AC_SUBST([FILE_MAN_SUFFIX])
-AC_SUBST([MISC_MAN_SUFFIX])
-AC_SUBST([DRIVER_MAN_SUFFIX])
-AC_SUBST([ADMIN_MAN_SUFFIX])
-AC_SUBST([APP_MAN_DIR])
-AC_SUBST([LIB_MAN_DIR])
-AC_SUBST([FILE_MAN_DIR])
-AC_SUBST([MISC_MAN_DIR])
-AC_SUBST([DRIVER_MAN_DIR])
-AC_SUBST([ADMIN_MAN_DIR])
-
-XORG_MAN_PAGE="X Version 11"
-AC_SUBST([XORG_MAN_PAGE])
-MAN_SUBSTS="\
-	-e 's|__vendorversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xorgversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xservername__|Xorg|g' \
-	-e 's|__xconfigfile__|xorg.conf|g' \
-	-e 's|__projectroot__|\$(prefix)|g' \
-	-e 's|__apploaddir__|\$(appdefaultdir)|g' \
-	-e 's|__appmansuffix__|\$(APP_MAN_SUFFIX)|g' \
-	-e 's|__drivermansuffix__|\$(DRIVER_MAN_SUFFIX)|g' \
-	-e 's|__adminmansuffix__|\$(ADMIN_MAN_SUFFIX)|g' \
-	-e 's|__libmansuffix__|\$(LIB_MAN_SUFFIX)|g' \
-	-e 's|__miscmansuffix__|\$(MISC_MAN_SUFFIX)|g' \
-	-e 's|__filemansuffix__|\$(FILE_MAN_SUFFIX)|g'"
-AC_SUBST([MAN_SUBSTS])
-
-]) # XORG_MANPAGE_SECTIONS
-
-# XORG_CHECK_SGML_DOCTOOLS([MIN-VERSION])
-# ------------------------
-# Minimum version: 1.7.0
-#
-# Defines the variable XORG_SGML_PATH containing the location of X11/defs.ent
-# provided by xorg-sgml-doctools, if installed.
-AC_DEFUN([XORG_CHECK_SGML_DOCTOOLS],[
-AC_MSG_CHECKING([for X.Org SGML entities m4_ifval([$1],[>= $1])])
-XORG_SGML_PATH=
-PKG_CHECK_EXISTS([xorg-sgml-doctools m4_ifval([$1],[>= $1])],
-    [XORG_SGML_PATH=`$PKG_CONFIG --variable=sgmlrootdir xorg-sgml-doctools`],
-    [m4_ifval([$1],[:],
-        [if test x"$cross_compiling" != x"yes" ; then
-            AC_CHECK_FILE([$prefix/share/sgml/X11/defs.ent],
-                          [XORG_SGML_PATH=$prefix/share/sgml])
-         fi])
-    ])
-
-# Define variables STYLESHEET_SRCDIR and XSL_STYLESHEET containing
-# the path and the name of the doc stylesheet
-if test "x$XORG_SGML_PATH" != "x" ; then
-   AC_MSG_RESULT([$XORG_SGML_PATH])
-   STYLESHEET_SRCDIR=$XORG_SGML_PATH/X11
-   XSL_STYLESHEET=$STYLESHEET_SRCDIR/xorg.xsl
-else
-   AC_MSG_RESULT([no])
-fi
-
-AC_SUBST(XORG_SGML_PATH)
-AC_SUBST(STYLESHEET_SRCDIR)
-AC_SUBST(XSL_STYLESHEET)
-AM_CONDITIONAL([HAVE_STYLESHEETS], [test "x$XSL_STYLESHEET" != "x"])
-]) # XORG_CHECK_SGML_DOCTOOLS
-
-# XORG_CHECK_LINUXDOC
-# -------------------
-# Minimum version: 1.0.0
-#
-# Defines the variable MAKE_TEXT if the necessary tools and
-# files are found. $(MAKE_TEXT) blah.sgml will then produce blah.txt.
-# Whether or not the necessary tools and files are found can be checked
-# with the AM_CONDITIONAL "BUILD_LINUXDOC"
-AC_DEFUN([XORG_CHECK_LINUXDOC],[
-AC_REQUIRE([XORG_CHECK_SGML_DOCTOOLS])
-AC_REQUIRE([XORG_WITH_PS2PDF])
-
-AC_PATH_PROG(LINUXDOC, linuxdoc)
-
-AC_MSG_CHECKING([whether to build documentation])
-
-if test x$XORG_SGML_PATH != x && test x$LINUXDOC != x ; then
-   BUILDDOC=yes
-else
-   BUILDDOC=no
-fi
-
-AM_CONDITIONAL(BUILD_LINUXDOC, [test x$BUILDDOC = xyes])
-
-AC_MSG_RESULT([$BUILDDOC])
-
-AC_MSG_CHECKING([whether to build pdf documentation])
-
-if test x$have_ps2pdf != xno && test x$BUILD_PDFDOC != xno; then
-   BUILDPDFDOC=yes
-else
-   BUILDPDFDOC=no
-fi
-
-AM_CONDITIONAL(BUILD_PDFDOC, [test x$BUILDPDFDOC = xyes])
-
-AC_MSG_RESULT([$BUILDPDFDOC])
-
-MAKE_TEXT="SGML_SEARCH_PATH=$XORG_SGML_PATH GROFF_NO_SGR=y $LINUXDOC -B txt -f"
-MAKE_PS="SGML_SEARCH_PATH=$XORG_SGML_PATH $LINUXDOC -B latex --papersize=letter --output=ps"
-MAKE_PDF="$PS2PDF"
-MAKE_HTML="SGML_SEARCH_PATH=$XORG_SGML_PATH $LINUXDOC  -B html --split=0"
-
-AC_SUBST(MAKE_TEXT)
-AC_SUBST(MAKE_PS)
-AC_SUBST(MAKE_PDF)
-AC_SUBST(MAKE_HTML)
-]) # XORG_CHECK_LINUXDOC
-
-# XORG_CHECK_DOCBOOK
-# -------------------
-# Minimum version: 1.0.0
-#
-# Checks for the ability to build output formats from SGML DocBook source.
-# For XXX in {TXT, PDF, PS, HTML}, the AM_CONDITIONAL "BUILD_XXXDOC"
-# indicates whether the necessary tools and files are found and, if set,
-# $(MAKE_XXX) blah.sgml will produce blah.xxx.
-AC_DEFUN([XORG_CHECK_DOCBOOK],[
-AC_REQUIRE([XORG_CHECK_SGML_DOCTOOLS])
-
-BUILDTXTDOC=no
-BUILDPDFDOC=no
-BUILDPSDOC=no
-BUILDHTMLDOC=no
-
-AC_PATH_PROG(DOCBOOKPS, docbook2ps)
-AC_PATH_PROG(DOCBOOKPDF, docbook2pdf)
-AC_PATH_PROG(DOCBOOKHTML, docbook2html)
-AC_PATH_PROG(DOCBOOKTXT, docbook2txt)
-
-AC_MSG_CHECKING([whether to build text documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKTXT != x &&
-   test x$BUILD_TXTDOC != xno; then
-	BUILDTXTDOC=yes
-fi
-AM_CONDITIONAL(BUILD_TXTDOC, [test x$BUILDTXTDOC = xyes])
-AC_MSG_RESULT([$BUILDTXTDOC])
-
-AC_MSG_CHECKING([whether to build PDF documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKPDF != x &&
-   test x$BUILD_PDFDOC != xno; then
-	BUILDPDFDOC=yes
-fi
-AM_CONDITIONAL(BUILD_PDFDOC, [test x$BUILDPDFDOC = xyes])
-AC_MSG_RESULT([$BUILDPDFDOC])
-
-AC_MSG_CHECKING([whether to build PostScript documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKPS != x &&
-   test x$BUILD_PSDOC != xno; then
-	BUILDPSDOC=yes
-fi
-AM_CONDITIONAL(BUILD_PSDOC, [test x$BUILDPSDOC = xyes])
-AC_MSG_RESULT([$BUILDPSDOC])
-
-AC_MSG_CHECKING([whether to build HTML documentation])
-if test x$XORG_SGML_PATH != x && test x$DOCBOOKHTML != x &&
-   test x$BUILD_HTMLDOC != xno; then
-	BUILDHTMLDOC=yes
-fi
-AM_CONDITIONAL(BUILD_HTMLDOC, [test x$BUILDHTMLDOC = xyes])
-AC_MSG_RESULT([$BUILDHTMLDOC])
-
-MAKE_TEXT="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKTXT"
-MAKE_PS="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKPS"
-MAKE_PDF="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKPDF"
-MAKE_HTML="SGML_SEARCH_PATH=$XORG_SGML_PATH $DOCBOOKHTML"
-
-AC_SUBST(MAKE_TEXT)
-AC_SUBST(MAKE_PS)
-AC_SUBST(MAKE_PDF)
-AC_SUBST(MAKE_HTML)
-]) # XORG_CHECK_DOCBOOK
-
-# XORG_WITH_XMLTO([MIN-VERSION], [DEFAULT])
-# ----------------
-# Minimum version: 1.5.0
-# Minimum version for optional DEFAULT argument: 1.11.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a module to test for the
-# presence of the tool and obtain it's path in separate variables. Coupled with
-# the --with-xmlto option, it allows maximum flexibility in making decisions
-# as whether or not to use the xmlto package. When DEFAULT is not specified,
-# --with-xmlto assumes 'auto'.
-#
-# Interface to module:
-# HAVE_XMLTO: 	used in makefiles to conditionally generate documentation
-# XMLTO:	returns the path of the xmlto program found
-#		returns the path set by the user in the environment
-# --with-xmlto:	'yes' user instructs the module to use xmlto
-#		'no' user instructs the module not to use xmlto
-#
-# Added in version 1.10.0
-# HAVE_XMLTO_TEXT: used in makefiles to conditionally generate text documentation
-#                  xmlto for text output requires either lynx, links, or w3m browsers
-#
-# If the user sets the value of XMLTO, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_XMLTO],[
-AC_ARG_VAR([XMLTO], [Path to xmlto command])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(xmlto,
-	AS_HELP_STRING([--with-xmlto],
-	   [Use xmlto to regenerate documentation (default: ]_defopt[)]),
-	   [use_xmlto=$withval], [use_xmlto=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_xmlto" = x"auto"; then
-   AC_PATH_PROG([XMLTO], [xmlto])
-   if test "x$XMLTO" = "x"; then
-        AC_MSG_WARN([xmlto not found - documentation targets will be skipped])
-	have_xmlto=no
-   else
-        have_xmlto=yes
-   fi
-elif test "x$use_xmlto" = x"yes" ; then
-   AC_PATH_PROG([XMLTO], [xmlto])
-   if test "x$XMLTO" = "x"; then
-        AC_MSG_ERROR([--with-xmlto=yes specified but xmlto not found in PATH])
-   fi
-   have_xmlto=yes
-elif test "x$use_xmlto" = x"no" ; then
-   if test "x$XMLTO" != "x"; then
-      AC_MSG_WARN([ignoring XMLTO environment variable since --with-xmlto=no was specified])
-   fi
-   have_xmlto=no
-else
-   AC_MSG_ERROR([--with-xmlto expects 'yes' or 'no'])
-fi
-
-# Test for a minimum version of xmlto, if provided.
-m4_ifval([$1],
-[if test "$have_xmlto" = yes; then
-    # scrape the xmlto version
-    AC_MSG_CHECKING([the xmlto version])
-    xmlto_version=`$XMLTO --version 2>/dev/null | cut -d' ' -f3`
-    AC_MSG_RESULT([$xmlto_version])
-    AS_VERSION_COMPARE([$xmlto_version], [$1],
-        [if test "x$use_xmlto" = xauto; then
-            AC_MSG_WARN([xmlto version $xmlto_version found, but $1 needed])
-            have_xmlto=no
-        else
-            AC_MSG_ERROR([xmlto version $xmlto_version found, but $1 needed])
-        fi])
-fi])
-
-# Test for the ability of xmlto to generate a text target
-#
-# NOTE: xmlto 0.0.27 or higher return a non-zero return code in the
-# following test for empty XML docbook files.
-# For compatibility reasons use the following empty XML docbook file and if
-# it fails try it again with a non-empty XML file.
-have_xmlto_text=no
-cat > conftest.xml << "EOF"
-EOF
-AS_IF([test "$have_xmlto" = yes],
-      [AS_IF([$XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1],
-             [have_xmlto_text=yes],
-             [# Try it again with a non-empty XML file.
-              cat > conftest.xml << "EOF"
-<x></x>
-EOF
-              AS_IF([$XMLTO --skip-validation txt conftest.xml >/dev/null 2>&1],
-                    [have_xmlto_text=yes],
-                    [AC_MSG_WARN([xmlto cannot generate text format, this format skipped])])])])
-rm -f conftest.xml
-AM_CONDITIONAL([HAVE_XMLTO_TEXT], [test $have_xmlto_text = yes])
-AM_CONDITIONAL([HAVE_XMLTO], [test "$have_xmlto" = yes])
-]) # XORG_WITH_XMLTO
-
-# XORG_WITH_XSLTPROC([MIN-VERSION], [DEFAULT])
-# --------------------------------------------
-# Minimum version: 1.12.0
-# Minimum version for optional DEFAULT argument: 1.12.0
-#
-# XSLT (Extensible Stylesheet Language Transformations) is a declarative,
-# XML-based language used for the transformation of XML documents.
-# The xsltproc command line tool is for applying XSLT stylesheets to XML documents.
-# It is used under the cover by xmlto to generate html files from DocBook/XML.
-# The XSLT processor is often used as a standalone tool for transformations.
-# It should not be assumed that this tool is used only to work with documnetation.
-# When DEFAULT is not specified, --with-xsltproc assumes 'auto'.
-#
-# Interface to module:
-# HAVE_XSLTPROC: used in makefiles to conditionally generate documentation
-# XSLTPROC:	 returns the path of the xsltproc program found
-#		 returns the path set by the user in the environment
-# --with-xsltproc: 'yes' user instructs the module to use xsltproc
-#		  'no' user instructs the module not to use xsltproc
-# have_xsltproc: returns yes if xsltproc found in PATH or no
-#
-# If the user sets the value of XSLTPROC, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_XSLTPROC],[
-AC_ARG_VAR([XSLTPROC], [Path to xsltproc command])
-# Preserves the interface, should it be implemented later
-m4_ifval([$1], [m4_warn([syntax], [Checking for xsltproc MIN-VERSION is not implemented])])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(xsltproc,
-	AS_HELP_STRING([--with-xsltproc],
-	   [Use xsltproc for the transformation of XML documents (default: ]_defopt[)]),
-	   [use_xsltproc=$withval], [use_xsltproc=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_xsltproc" = x"auto"; then
-   AC_PATH_PROG([XSLTPROC], [xsltproc])
-   if test "x$XSLTPROC" = "x"; then
-        AC_MSG_WARN([xsltproc not found - cannot transform XML documents])
-	have_xsltproc=no
-   else
-        have_xsltproc=yes
-   fi
-elif test "x$use_xsltproc" = x"yes" ; then
-   AC_PATH_PROG([XSLTPROC], [xsltproc])
-   if test "x$XSLTPROC" = "x"; then
-        AC_MSG_ERROR([--with-xsltproc=yes specified but xsltproc not found in PATH])
-   fi
-   have_xsltproc=yes
-elif test "x$use_xsltproc" = x"no" ; then
-   if test "x$XSLTPROC" != "x"; then
-      AC_MSG_WARN([ignoring XSLTPROC environment variable since --with-xsltproc=no was specified])
-   fi
-   have_xsltproc=no
-else
-   AC_MSG_ERROR([--with-xsltproc expects 'yes' or 'no'])
-fi
-
-AM_CONDITIONAL([HAVE_XSLTPROC], [test "$have_xsltproc" = yes])
-]) # XORG_WITH_XSLTPROC
-
-# XORG_WITH_PERL([MIN-VERSION], [DEFAULT])
-# ----------------------------------------
-# Minimum version: 1.15.0
-#
-# PERL (Practical Extraction and Report Language) is a language optimized for
-# scanning arbitrary text files, extracting information from those text files,
-# and printing reports based on that information.
-#
-# When DEFAULT is not specified, --with-perl assumes 'auto'.
-#
-# Interface to module:
-# HAVE_PERL: used in makefiles to conditionally scan text files
-# PERL:	     returns the path of the perl program found
-#	     returns the path set by the user in the environment
-# --with-perl: 'yes' user instructs the module to use perl
-#	       'no' user instructs the module not to use perl
-# have_perl: returns yes if perl found in PATH or no
-#
-# If the user sets the value of PERL, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_PERL],[
-AC_ARG_VAR([PERL], [Path to perl command])
-# Preserves the interface, should it be implemented later
-m4_ifval([$1], [m4_warn([syntax], [Checking for perl MIN-VERSION is not implemented])])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(perl,
-	AS_HELP_STRING([--with-perl],
-	   [Use perl for extracting information from files (default: ]_defopt[)]),
-	   [use_perl=$withval], [use_perl=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_perl" = x"auto"; then
-   AC_PATH_PROG([PERL], [perl])
-   if test "x$PERL" = "x"; then
-        AC_MSG_WARN([perl not found - cannot extract information and report])
-	have_perl=no
-   else
-        have_perl=yes
-   fi
-elif test "x$use_perl" = x"yes" ; then
-   AC_PATH_PROG([PERL], [perl])
-   if test "x$PERL" = "x"; then
-        AC_MSG_ERROR([--with-perl=yes specified but perl not found in PATH])
-   fi
-   have_perl=yes
-elif test "x$use_perl" = x"no" ; then
-   if test "x$PERL" != "x"; then
-      AC_MSG_WARN([ignoring PERL environment variable since --with-perl=no was specified])
-   fi
-   have_perl=no
-else
-   AC_MSG_ERROR([--with-perl expects 'yes' or 'no'])
-fi
-
-AM_CONDITIONAL([HAVE_PERL], [test "$have_perl" = yes])
-]) # XORG_WITH_PERL
-
-# XORG_WITH_ASCIIDOC([MIN-VERSION], [DEFAULT])
-# ----------------
-# Minimum version: 1.5.0
-# Minimum version for optional DEFAULT argument: 1.11.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a module to test for the
-# presence of the tool and obtain it's path in separate variables. Coupled with
-# the --with-asciidoc option, it allows maximum flexibility in making decisions
-# as whether or not to use the asciidoc package. When DEFAULT is not specified,
-# --with-asciidoc assumes 'auto'.
-#
-# Interface to module:
-# HAVE_ASCIIDOC: used in makefiles to conditionally generate documentation
-# ASCIIDOC:	 returns the path of the asciidoc program found
-#		 returns the path set by the user in the environment
-# --with-asciidoc: 'yes' user instructs the module to use asciidoc
-#		  'no' user instructs the module not to use asciidoc
-#
-# If the user sets the value of ASCIIDOC, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_ASCIIDOC],[
-AC_ARG_VAR([ASCIIDOC], [Path to asciidoc command])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(asciidoc,
-	AS_HELP_STRING([--with-asciidoc],
-	   [Use asciidoc to regenerate documentation (default: ]_defopt[)]),
-	   [use_asciidoc=$withval], [use_asciidoc=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_asciidoc" = x"auto"; then
-   AC_PATH_PROG([ASCIIDOC], [asciidoc])
-   if test "x$ASCIIDOC" = "x"; then
-        AC_MSG_WARN([asciidoc not found - documentation targets will be skipped])
-	have_asciidoc=no
-   else
-        have_asciidoc=yes
-   fi
-elif test "x$use_asciidoc" = x"yes" ; then
-   AC_PATH_PROG([ASCIIDOC], [asciidoc])
-   if test "x$ASCIIDOC" = "x"; then
-        AC_MSG_ERROR([--with-asciidoc=yes specified but asciidoc not found in PATH])
-   fi
-   have_asciidoc=yes
-elif test "x$use_asciidoc" = x"no" ; then
-   if test "x$ASCIIDOC" != "x"; then
-      AC_MSG_WARN([ignoring ASCIIDOC environment variable since --with-asciidoc=no was specified])
-   fi
-   have_asciidoc=no
-else
-   AC_MSG_ERROR([--with-asciidoc expects 'yes' or 'no'])
-fi
-m4_ifval([$1],
-[if test "$have_asciidoc" = yes; then
-    # scrape the asciidoc version
-    AC_MSG_CHECKING([the asciidoc version])
-    asciidoc_version=`$ASCIIDOC --version 2>/dev/null | cut -d' ' -f2`
-    AC_MSG_RESULT([$asciidoc_version])
-    AS_VERSION_COMPARE([$asciidoc_version], [$1],
-        [if test "x$use_asciidoc" = xauto; then
-            AC_MSG_WARN([asciidoc version $asciidoc_version found, but $1 needed])
-            have_asciidoc=no
-        else
-            AC_MSG_ERROR([asciidoc version $asciidoc_version found, but $1 needed])
-        fi])
-fi])
-AM_CONDITIONAL([HAVE_ASCIIDOC], [test "$have_asciidoc" = yes])
-]) # XORG_WITH_ASCIIDOC
-
-# XORG_WITH_DOXYGEN([MIN-VERSION], [DEFAULT])
-# -------------------------------------------
-# Minimum version: 1.5.0
-# Minimum version for optional DEFAULT argument: 1.11.0
-# Minimum version for optional DOT checking: 1.18.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a module to test for the
-# presence of the tool and obtain it's path in separate variables. Coupled with
-# the --with-doxygen option, it allows maximum flexibility in making decisions
-# as whether or not to use the doxygen package. When DEFAULT is not specified,
-# --with-doxygen assumes 'auto'.
-#
-# Interface to module:
-# HAVE_DOXYGEN: used in makefiles to conditionally generate documentation
-# DOXYGEN:	 returns the path of the doxygen program found
-#		 returns the path set by the user in the environment
-# --with-doxygen: 'yes' user instructs the module to use doxygen
-#		  'no' user instructs the module not to use doxygen
-#
-# If the user sets the value of DOXYGEN, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_DOXYGEN],[
-AC_ARG_VAR([DOXYGEN], [Path to doxygen command])
-AC_ARG_VAR([DOT], [Path to the dot graphics utility])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(doxygen,
-	AS_HELP_STRING([--with-doxygen],
-	   [Use doxygen to regenerate documentation (default: ]_defopt[)]),
-	   [use_doxygen=$withval], [use_doxygen=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_doxygen" = x"auto"; then
-   AC_PATH_PROG([DOXYGEN], [doxygen])
-   if test "x$DOXYGEN" = "x"; then
-        AC_MSG_WARN([doxygen not found - documentation targets will be skipped])
-	have_doxygen=no
-   else
-        have_doxygen=yes
-   fi
-elif test "x$use_doxygen" = x"yes" ; then
-   AC_PATH_PROG([DOXYGEN], [doxygen])
-   if test "x$DOXYGEN" = "x"; then
-        AC_MSG_ERROR([--with-doxygen=yes specified but doxygen not found in PATH])
-   fi
-   have_doxygen=yes
-elif test "x$use_doxygen" = x"no" ; then
-   if test "x$DOXYGEN" != "x"; then
-      AC_MSG_WARN([ignoring DOXYGEN environment variable since --with-doxygen=no was specified])
-   fi
-   have_doxygen=no
-else
-   AC_MSG_ERROR([--with-doxygen expects 'yes' or 'no'])
-fi
-m4_ifval([$1],
-[if test "$have_doxygen" = yes; then
-    # scrape the doxygen version
-    AC_MSG_CHECKING([the doxygen version])
-    doxygen_version=`$DOXYGEN --version 2>/dev/null`
-    AC_MSG_RESULT([$doxygen_version])
-    AS_VERSION_COMPARE([$doxygen_version], [$1],
-        [if test "x$use_doxygen" = xauto; then
-            AC_MSG_WARN([doxygen version $doxygen_version found, but $1 needed])
-            have_doxygen=no
-        else
-            AC_MSG_ERROR([doxygen version $doxygen_version found, but $1 needed])
-        fi])
-fi])
-
-dnl Check for DOT if we have doxygen. The caller decides if it is mandatory
-dnl HAVE_DOT is a variable that can be used in your doxygen.in config file:
-dnl 	HAVE_DOT = @HAVE_DOT@
-HAVE_DOT=no
-if test "x$have_doxygen" = "xyes"; then
-  AC_PATH_PROG([DOT], [dot])
-    if test "x$DOT" != "x"; then
-      HAVE_DOT=yes
-    fi
-fi
-
-AC_SUBST([HAVE_DOT])
-AM_CONDITIONAL([HAVE_DOT], [test "$HAVE_DOT" = "yes"])
-AM_CONDITIONAL([HAVE_DOXYGEN], [test "$have_doxygen" = yes])
-]) # XORG_WITH_DOXYGEN
-
-# XORG_WITH_GROFF([DEFAULT])
-# ----------------
-# Minimum version: 1.6.0
-# Minimum version for optional DEFAULT argument: 1.11.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a module to test for the
-# presence of the tool and obtain it's path in separate variables. Coupled with
-# the --with-groff option, it allows maximum flexibility in making decisions
-# as whether or not to use the groff package. When DEFAULT is not specified,
-# --with-groff assumes 'auto'.
-#
-# Interface to module:
-# HAVE_GROFF:	 used in makefiles to conditionally generate documentation
-# HAVE_GROFF_MM: the memorandum macros (-mm) package
-# HAVE_GROFF_MS: the -ms macros package
-# GROFF:	 returns the path of the groff program found
-#		 returns the path set by the user in the environment
-# --with-groff:	 'yes' user instructs the module to use groff
-#		 'no' user instructs the module not to use groff
-#
-# Added in version 1.9.0:
-# HAVE_GROFF_HTML: groff has dependencies to output HTML format:
-#		   pnmcut pnmcrop pnmtopng pnmtops from the netpbm package.
-#		   psselect from the psutils package.
-#		   the ghostcript package. Refer to the grohtml man pages
-#
-# If the user sets the value of GROFF, AC_PATH_PROG skips testing the path.
-#
-# OS and distros often splits groff in a basic and full package, the former
-# having the groff program and the later having devices, fonts and macros
-# Checking for the groff executable is not enough.
-#
-# If macros are missing, we cannot assume that groff is useless, so we don't
-# unset HAVE_GROFF or GROFF env variables.
-# HAVE_GROFF_?? can never be true while HAVE_GROFF is false.
-#
-AC_DEFUN([XORG_WITH_GROFF],[
-AC_ARG_VAR([GROFF], [Path to groff command])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_WITH(groff,
-	AS_HELP_STRING([--with-groff],
-	   [Use groff to regenerate documentation (default: ]_defopt[)]),
-	   [use_groff=$withval], [use_groff=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_groff" = x"auto"; then
-   AC_PATH_PROG([GROFF], [groff])
-   if test "x$GROFF" = "x"; then
-        AC_MSG_WARN([groff not found - documentation targets will be skipped])
-	have_groff=no
-   else
-        have_groff=yes
-   fi
-elif test "x$use_groff" = x"yes" ; then
-   AC_PATH_PROG([GROFF], [groff])
-   if test "x$GROFF" = "x"; then
-        AC_MSG_ERROR([--with-groff=yes specified but groff not found in PATH])
-   fi
-   have_groff=yes
-elif test "x$use_groff" = x"no" ; then
-   if test "x$GROFF" != "x"; then
-      AC_MSG_WARN([ignoring GROFF environment variable since --with-groff=no was specified])
-   fi
-   have_groff=no
-else
-   AC_MSG_ERROR([--with-groff expects 'yes' or 'no'])
-fi
-
-# We have groff, test for the presence of the macro packages
-if test "x$have_groff" = x"yes"; then
-    AC_MSG_CHECKING([for ${GROFF} -ms macros])
-    if ${GROFF} -ms -I. /dev/null >/dev/null 2>&1 ; then
-        groff_ms_works=yes
-    else
-        groff_ms_works=no
-    fi
-    AC_MSG_RESULT([$groff_ms_works])
-    AC_MSG_CHECKING([for ${GROFF} -mm macros])
-    if ${GROFF} -mm -I. /dev/null >/dev/null 2>&1 ; then
-        groff_mm_works=yes
-    else
-        groff_mm_works=no
-    fi
-    AC_MSG_RESULT([$groff_mm_works])
-fi
-
-# We have groff, test for HTML dependencies, one command per package
-if test "x$have_groff" = x"yes"; then
-   AC_PATH_PROGS(GS_PATH, [gs gswin32c])
-   AC_PATH_PROG(PNMTOPNG_PATH, [pnmtopng])
-   AC_PATH_PROG(PSSELECT_PATH, [psselect])
-   if test "x$GS_PATH" != "x" -a "x$PNMTOPNG_PATH" != "x" -a "x$PSSELECT_PATH" != "x"; then
-      have_groff_html=yes
-   else
-      have_groff_html=no
-      AC_MSG_WARN([grohtml dependencies not found - HTML Documentation skipped. Refer to grohtml man pages])
-   fi
-fi
-
-# Set Automake conditionals for Makefiles
-AM_CONDITIONAL([HAVE_GROFF], [test "$have_groff" = yes])
-AM_CONDITIONAL([HAVE_GROFF_MS], [test "$groff_ms_works" = yes])
-AM_CONDITIONAL([HAVE_GROFF_MM], [test "$groff_mm_works" = yes])
-AM_CONDITIONAL([HAVE_GROFF_HTML], [test "$have_groff_html" = yes])
-]) # XORG_WITH_GROFF
-
-# XORG_WITH_FOP([MIN-VERSION], [DEFAULT])
-# ---------------------------------------
-# Minimum version: 1.6.0
-# Minimum version for optional DEFAULT argument: 1.11.0
-# Minimum version for optional MIN-VERSION argument: 1.15.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a module to test for the
-# presence of the tool and obtain it's path in separate variables. Coupled with
-# the --with-fop option, it allows maximum flexibility in making decisions
-# as whether or not to use the fop package. When DEFAULT is not specified,
-# --with-fop assumes 'auto'.
-#
-# Interface to module:
-# HAVE_FOP: 	used in makefiles to conditionally generate documentation
-# FOP:	 	returns the path of the fop program found
-#		returns the path set by the user in the environment
-# --with-fop: 	'yes' user instructs the module to use fop
-#		'no' user instructs the module not to use fop
-#
-# If the user sets the value of FOP, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_FOP],[
-AC_ARG_VAR([FOP], [Path to fop command])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(fop,
-	AS_HELP_STRING([--with-fop],
-	   [Use fop to regenerate documentation (default: ]_defopt[)]),
-	   [use_fop=$withval], [use_fop=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_fop" = x"auto"; then
-   AC_PATH_PROG([FOP], [fop])
-   if test "x$FOP" = "x"; then
-        AC_MSG_WARN([fop not found - documentation targets will be skipped])
-	have_fop=no
-   else
-        have_fop=yes
-   fi
-elif test "x$use_fop" = x"yes" ; then
-   AC_PATH_PROG([FOP], [fop])
-   if test "x$FOP" = "x"; then
-        AC_MSG_ERROR([--with-fop=yes specified but fop not found in PATH])
-   fi
-   have_fop=yes
-elif test "x$use_fop" = x"no" ; then
-   if test "x$FOP" != "x"; then
-      AC_MSG_WARN([ignoring FOP environment variable since --with-fop=no was specified])
-   fi
-   have_fop=no
-else
-   AC_MSG_ERROR([--with-fop expects 'yes' or 'no'])
-fi
-
-# Test for a minimum version of fop, if provided.
-m4_ifval([$1],
-[if test "$have_fop" = yes; then
-    # scrape the fop version
-    AC_MSG_CHECKING([for fop minimum version])
-    fop_version=`$FOP -version 2>/dev/null | cut -d' ' -f3`
-    AC_MSG_RESULT([$fop_version])
-    AS_VERSION_COMPARE([$fop_version], [$1],
-        [if test "x$use_fop" = xauto; then
-            AC_MSG_WARN([fop version $fop_version found, but $1 needed])
-            have_fop=no
-        else
-            AC_MSG_ERROR([fop version $fop_version found, but $1 needed])
-        fi])
-fi])
-AM_CONDITIONAL([HAVE_FOP], [test "$have_fop" = yes])
-]) # XORG_WITH_FOP
-
-# XORG_WITH_M4([MIN-VERSION])
-# ---------------------------
-# Minimum version: 1.19.0
-#
-# This macro attempts to locate an m4 macro processor which supports
-# -I option and is only useful for modules relying on M4 in order to
-# expand macros in source code files.
-#
-# Interface to module:
-# M4:	 	returns the path of the m4 program found
-#		returns the path set by the user in the environment
-#
-AC_DEFUN([XORG_WITH_M4], [
-AC_CACHE_CHECK([for m4 that supports -I option], [ac_cv_path_M4],
-   [AC_PATH_PROGS_FEATURE_CHECK([M4], [m4 gm4],
-       [[$ac_path_M4 -I. /dev/null > /dev/null 2>&1 && \
-         ac_cv_path_M4=$ac_path_M4 ac_path_M4_found=:]],
-   [AC_MSG_ERROR([could not find m4 that supports -I option])],
-   [$PATH:/usr/gnu/bin])])
-
-AC_SUBST([M4], [$ac_cv_path_M4])
-]) # XORG_WITH_M4
-
-# XORG_WITH_PS2PDF([DEFAULT])
-# ----------------
-# Minimum version: 1.6.0
-# Minimum version for optional DEFAULT argument: 1.11.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a module to test for the
-# presence of the tool and obtain it's path in separate variables. Coupled with
-# the --with-ps2pdf option, it allows maximum flexibility in making decisions
-# as whether or not to use the ps2pdf package. When DEFAULT is not specified,
-# --with-ps2pdf assumes 'auto'.
-#
-# Interface to module:
-# HAVE_PS2PDF: 	used in makefiles to conditionally generate documentation
-# PS2PDF:	returns the path of the ps2pdf program found
-#		returns the path set by the user in the environment
-# --with-ps2pdf: 'yes' user instructs the module to use ps2pdf
-#		 'no' user instructs the module not to use ps2pdf
-#
-# If the user sets the value of PS2PDF, AC_PATH_PROG skips testing the path.
-#
-AC_DEFUN([XORG_WITH_PS2PDF],[
-AC_ARG_VAR([PS2PDF], [Path to ps2pdf command])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_WITH(ps2pdf,
-	AS_HELP_STRING([--with-ps2pdf],
-	   [Use ps2pdf to regenerate documentation (default: ]_defopt[)]),
-	   [use_ps2pdf=$withval], [use_ps2pdf=]_defopt)
-m4_undefine([_defopt])
-
-if test "x$use_ps2pdf" = x"auto"; then
-   AC_PATH_PROG([PS2PDF], [ps2pdf])
-   if test "x$PS2PDF" = "x"; then
-        AC_MSG_WARN([ps2pdf not found - documentation targets will be skipped])
-	have_ps2pdf=no
-   else
-        have_ps2pdf=yes
-   fi
-elif test "x$use_ps2pdf" = x"yes" ; then
-   AC_PATH_PROG([PS2PDF], [ps2pdf])
-   if test "x$PS2PDF" = "x"; then
-        AC_MSG_ERROR([--with-ps2pdf=yes specified but ps2pdf not found in PATH])
-   fi
-   have_ps2pdf=yes
-elif test "x$use_ps2pdf" = x"no" ; then
-   if test "x$PS2PDF" != "x"; then
-      AC_MSG_WARN([ignoring PS2PDF environment variable since --with-ps2pdf=no was specified])
-   fi
-   have_ps2pdf=no
-else
-   AC_MSG_ERROR([--with-ps2pdf expects 'yes' or 'no'])
-fi
-AM_CONDITIONAL([HAVE_PS2PDF], [test "$have_ps2pdf" = yes])
-]) # XORG_WITH_PS2PDF
-
-# XORG_ENABLE_DOCS (enable_docs=yes)
-# ----------------
-# Minimum version: 1.6.0
-#
-# Documentation tools are not always available on all platforms and sometimes
-# not at the appropriate level. This macro enables a builder to skip all
-# documentation targets except traditional man pages.
-# Combined with the specific tool checking macros XORG_WITH_*, it provides
-# maximum flexibility in controlling documentation building.
-# Refer to:
-# XORG_WITH_XMLTO         --with-xmlto
-# XORG_WITH_ASCIIDOC      --with-asciidoc
-# XORG_WITH_DOXYGEN       --with-doxygen
-# XORG_WITH_FOP           --with-fop
-# XORG_WITH_GROFF         --with-groff
-# XORG_WITH_PS2PDF        --with-ps2pdf
-#
-# Interface to module:
-# ENABLE_DOCS: 	  used in makefiles to conditionally generate documentation
-# --enable-docs: 'yes' user instructs the module to generate docs
-#		 'no' user instructs the module not to generate docs
-# parm1:	specify the default value, yes or no.
-#
-AC_DEFUN([XORG_ENABLE_DOCS],[
-m4_define([docs_default], m4_default([$1], [yes]))
-AC_ARG_ENABLE(docs,
-	AS_HELP_STRING([--enable-docs],
-	   [Enable building the documentation (default: ]docs_default[)]),
-	   [build_docs=$enableval], [build_docs=]docs_default)
-m4_undefine([docs_default])
-AM_CONDITIONAL(ENABLE_DOCS, [test x$build_docs = xyes])
-AC_MSG_CHECKING([whether to build documentation])
-AC_MSG_RESULT([$build_docs])
-]) # XORG_ENABLE_DOCS
-
-# XORG_ENABLE_DEVEL_DOCS (enable_devel_docs=yes)
-# ----------------
-# Minimum version: 1.6.0
-#
-# This macro enables a builder to skip all developer documentation.
-# Combined with the specific tool checking macros XORG_WITH_*, it provides
-# maximum flexibility in controlling documentation building.
-# Refer to:
-# XORG_WITH_XMLTO         --with-xmlto
-# XORG_WITH_ASCIIDOC      --with-asciidoc
-# XORG_WITH_DOXYGEN       --with-doxygen
-# XORG_WITH_FOP           --with-fop
-# XORG_WITH_GROFF         --with-groff
-# XORG_WITH_PS2PDF        --with-ps2pdf
-#
-# Interface to module:
-# ENABLE_DEVEL_DOCS:	used in makefiles to conditionally generate developer docs
-# --enable-devel-docs:	'yes' user instructs the module to generate developer docs
-#			'no' user instructs the module not to generate developer docs
-# parm1:		specify the default value, yes or no.
-#
-AC_DEFUN([XORG_ENABLE_DEVEL_DOCS],[
-m4_define([devel_default], m4_default([$1], [yes]))
-AC_ARG_ENABLE(devel-docs,
-	AS_HELP_STRING([--enable-devel-docs],
-	   [Enable building the developer documentation (default: ]devel_default[)]),
-	   [build_devel_docs=$enableval], [build_devel_docs=]devel_default)
-m4_undefine([devel_default])
-AM_CONDITIONAL(ENABLE_DEVEL_DOCS, [test x$build_devel_docs = xyes])
-AC_MSG_CHECKING([whether to build developer documentation])
-AC_MSG_RESULT([$build_devel_docs])
-]) # XORG_ENABLE_DEVEL_DOCS
-
-# XORG_ENABLE_SPECS (enable_specs=yes)
-# ----------------
-# Minimum version: 1.6.0
-#
-# This macro enables a builder to skip all functional specification targets.
-# Combined with the specific tool checking macros XORG_WITH_*, it provides
-# maximum flexibility in controlling documentation building.
-# Refer to:
-# XORG_WITH_XMLTO         --with-xmlto
-# XORG_WITH_ASCIIDOC      --with-asciidoc
-# XORG_WITH_DOXYGEN       --with-doxygen
-# XORG_WITH_FOP           --with-fop
-# XORG_WITH_GROFF         --with-groff
-# XORG_WITH_PS2PDF        --with-ps2pdf
-#
-# Interface to module:
-# ENABLE_SPECS:		used in makefiles to conditionally generate specs
-# --enable-specs:	'yes' user instructs the module to generate specs
-#			'no' user instructs the module not to generate specs
-# parm1:		specify the default value, yes or no.
-#
-AC_DEFUN([XORG_ENABLE_SPECS],[
-m4_define([spec_default], m4_default([$1], [yes]))
-AC_ARG_ENABLE(specs,
-	AS_HELP_STRING([--enable-specs],
-	   [Enable building the specs (default: ]spec_default[)]),
-	   [build_specs=$enableval], [build_specs=]spec_default)
-m4_undefine([spec_default])
-AM_CONDITIONAL(ENABLE_SPECS, [test x$build_specs = xyes])
-AC_MSG_CHECKING([whether to build functional specifications])
-AC_MSG_RESULT([$build_specs])
-]) # XORG_ENABLE_SPECS
-
-# XORG_ENABLE_UNIT_TESTS (enable_unit_tests=auto)
-# ----------------------------------------------
-# Minimum version: 1.13.0
-#
-# This macro enables a builder to enable/disable unit testing
-# It makes no assumption about the test cases implementation
-# Test cases may or may not use Automake "Support for test suites"
-# They may or may not use the software utility library GLib
-#
-# When used in conjunction with XORG_WITH_GLIB, use both AM_CONDITIONAL
-# ENABLE_UNIT_TESTS and HAVE_GLIB. Not all unit tests may use glib.
-# The variable enable_unit_tests is used by other macros in this file.
-#
-# Interface to module:
-# ENABLE_UNIT_TESTS:	used in makefiles to conditionally build tests
-# enable_unit_tests:    used in configure.ac for additional configuration
-# --enable-unit-tests:	'yes' user instructs the module to build tests
-#			'no' user instructs the module not to build tests
-# parm1:		specify the default value, yes or no.
-#
-AC_DEFUN([XORG_ENABLE_UNIT_TESTS],[
-AC_BEFORE([$0], [XORG_WITH_GLIB])
-AC_BEFORE([$0], [XORG_LD_WRAP])
-AC_REQUIRE([XORG_MEMORY_CHECK_FLAGS])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_ENABLE(unit-tests, AS_HELP_STRING([--enable-unit-tests],
-	[Enable building unit test cases (default: ]_defopt[)]),
-	[enable_unit_tests=$enableval], [enable_unit_tests=]_defopt)
-m4_undefine([_defopt])
-AM_CONDITIONAL(ENABLE_UNIT_TESTS, [test "x$enable_unit_tests" != xno])
-AC_MSG_CHECKING([whether to build unit test cases])
-AC_MSG_RESULT([$enable_unit_tests])
-]) # XORG_ENABLE_UNIT_TESTS
-
-# XORG_ENABLE_INTEGRATION_TESTS (enable_unit_tests=auto)
-# ------------------------------------------------------
-# Minimum version: 1.17.0
-#
-# This macro enables a builder to enable/disable integration testing
-# It makes no assumption about the test cases' implementation
-# Test cases may or may not use Automake "Support for test suites"
-#
-# Please see XORG_ENABLE_UNIT_TESTS for unit test support. Unit test support
-# usually requires less dependencies and may be built and run under less
-# stringent environments than integration tests.
-#
-# Interface to module:
-# ENABLE_INTEGRATION_TESTS:   used in makefiles to conditionally build tests
-# enable_integration_tests:   used in configure.ac for additional configuration
-# --enable-integration-tests: 'yes' user instructs the module to build tests
-#                             'no' user instructs the module not to build tests
-# parm1:                      specify the default value, yes or no.
-#
-AC_DEFUN([XORG_ENABLE_INTEGRATION_TESTS],[
-AC_REQUIRE([XORG_MEMORY_CHECK_FLAGS])
-m4_define([_defopt], m4_default([$1], [auto]))
-AC_ARG_ENABLE(integration-tests, AS_HELP_STRING([--enable-integration-tests],
-	[Enable building integration test cases (default: ]_defopt[)]),
-	[enable_integration_tests=$enableval],
-	[enable_integration_tests=]_defopt)
-m4_undefine([_defopt])
-AM_CONDITIONAL([ENABLE_INTEGRATION_TESTS],
-	[test "x$enable_integration_tests" != xno])
-AC_MSG_CHECKING([whether to build unit test cases])
-AC_MSG_RESULT([$enable_integration_tests])
-]) # XORG_ENABLE_INTEGRATION_TESTS
-
-# XORG_WITH_GLIB([MIN-VERSION], [DEFAULT])
-# ----------------------------------------
-# Minimum version: 1.13.0
-#
-# GLib is a library which provides advanced data structures and functions.
-# This macro enables a module to test for the presence of Glib.
-#
-# When used with ENABLE_UNIT_TESTS, it is assumed GLib is used for unit testing.
-# Otherwise the value of $enable_unit_tests is blank.
-#
-# Please see XORG_ENABLE_INTEGRATION_TESTS for integration test support. Unit
-# test support usually requires less dependencies and may be built and run under
-# less stringent environments than integration tests.
-#
-# Interface to module:
-# HAVE_GLIB: used in makefiles to conditionally build targets
-# with_glib: used in configure.ac to know if GLib has been found
-# --with-glib:	'yes' user instructs the module to use glib
-#		'no' user instructs the module not to use glib
-#
-AC_DEFUN([XORG_WITH_GLIB],[
-AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-m4_define([_defopt], m4_default([$2], [auto]))
-AC_ARG_WITH(glib, AS_HELP_STRING([--with-glib],
-	[Use GLib library for unit testing (default: ]_defopt[)]),
-	[with_glib=$withval], [with_glib=]_defopt)
-m4_undefine([_defopt])
-
-have_glib=no
-# Do not probe GLib if user explicitly disabled unit testing
-if test "x$enable_unit_tests" != x"no"; then
-  # Do not probe GLib if user explicitly disabled it
-  if test "x$with_glib" != x"no"; then
-    m4_ifval(
-      [$1],
-      [PKG_CHECK_MODULES([GLIB], [glib-2.0 >= $1], [have_glib=yes], [have_glib=no])],
-      [PKG_CHECK_MODULES([GLIB], [glib-2.0], [have_glib=yes], [have_glib=no])]
-    )
-  fi
-fi
-
-# Not having GLib when unit testing has been explicitly requested is an error
-if test "x$enable_unit_tests" = x"yes"; then
-  if test "x$have_glib" = x"no"; then
-    AC_MSG_ERROR([--enable-unit-tests=yes specified but glib-2.0 not found])
-  fi
-fi
-
-# Having unit testing disabled when GLib has been explicitly requested is an error
-if test "x$enable_unit_tests" = x"no"; then
-  if test "x$with_glib" = x"yes"; then
-    AC_MSG_ERROR([--enable-unit-tests=yes specified but glib-2.0 not found])
-  fi
-fi
-
-# Not having GLib when it has been explicitly requested is an error
-if test "x$with_glib" = x"yes"; then
-  if test "x$have_glib" = x"no"; then
-    AC_MSG_ERROR([--with-glib=yes specified but glib-2.0 not found])
-  fi
-fi
-
-AM_CONDITIONAL([HAVE_GLIB], [test "$have_glib" = yes])
-]) # XORG_WITH_GLIB
-
-# XORG_LD_WRAP([required|optional])
-# ---------------------------------
-# Minimum version: 1.13.0
-#
-# Check if linker supports -wrap, passed via compiler flags
-#
-# When used with ENABLE_UNIT_TESTS, it is assumed -wrap is used for unit testing.
-# Otherwise the value of $enable_unit_tests is blank.
-#
-# Argument added in 1.16.0 - default is "required", to match existing behavior
-# of returning an error if enable_unit_tests is yes, and ld -wrap is not
-# available, an argument of "optional" allows use when some unit tests require
-# ld -wrap and others do not.
-#
-AC_DEFUN([XORG_LD_WRAP],[
-XORG_CHECK_LINKER_FLAGS([-Wl,-wrap,exit],[have_ld_wrap=yes],[have_ld_wrap=no],
-    [AC_LANG_PROGRAM([#include <stdlib.h>
-                      void __wrap_exit(int status) { return; }],
-                     [exit(0);])])
-# Not having ld wrap when unit testing has been explicitly requested is an error
-if test "x$enable_unit_tests" = x"yes" -a "x$1" != "xoptional"; then
-  if test "x$have_ld_wrap" = x"no"; then
-    AC_MSG_ERROR([--enable-unit-tests=yes specified but ld -wrap support is not available])
-  fi
-fi
-AM_CONDITIONAL([HAVE_LD_WRAP], [test "$have_ld_wrap" = yes])
-#
-]) # XORG_LD_WRAP
-
-# XORG_CHECK_LINKER_FLAGS
-# -----------------------
-# SYNOPSIS
-#
-#   XORG_CHECK_LINKER_FLAGS(FLAGS, [ACTION-SUCCESS], [ACTION-FAILURE], [PROGRAM-SOURCE])
-#
-# DESCRIPTION
-#
-#   Check whether the given linker FLAGS work with the current language's
-#   linker, or whether they give an error.
-#
-#   ACTION-SUCCESS/ACTION-FAILURE are shell commands to execute on
-#   success/failure.
-#
-#   PROGRAM-SOURCE is the program source to link with, if needed
-#
-#   NOTE: Based on AX_CHECK_COMPILER_FLAGS.
-#
-# LICENSE
-#
-#   Copyright (c) 2009 Mike Frysinger <vapier@gentoo.org>
-#   Copyright (c) 2009 Steven G. Johnson <stevenj@alum.mit.edu>
-#   Copyright (c) 2009 Matteo Frigo
-#
-#   This program is free software: you can redistribute it and/or modify it
-#   under the terms of the GNU General Public License as published by the
-#   Free Software Foundation, either version 3 of the License, or (at your
-#   option) any later version.
-#
-#   This program is distributed in the hope that it will be useful, but
-#   WITHOUT ANY WARRANTY; without even the implied warranty of
-#   MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General
-#   Public License for more details.
-#
-#   You should have received a copy of the GNU General Public License along
-#   with this program. If not, see <http://www.gnu.org/licenses/>.
-#
-#   As a special exception, the respective Autoconf Macro's copyright owner
-#   gives unlimited permission to copy, distribute and modify the configure
-#   scripts that are the output of Autoconf when processing the Macro. You
-#   need not follow the terms of the GNU General Public License when using
-#   or distributing such scripts, even though portions of the text of the
-#   Macro appear in them. The GNU General Public License (GPL) does govern
-#   all other use of the material that constitutes the Autoconf Macro.
-#
-#   This special exception to the GPL applies to versions of the Autoconf
-#   Macro released by the Autoconf Archive. When you make and distribute a
-#   modified version of the Autoconf Macro, you may extend this special
-#   exception to the GPL to apply to your modified version as well.#
-AC_DEFUN([XORG_CHECK_LINKER_FLAGS],
-[AC_MSG_CHECKING([whether the linker accepts $1])
-dnl Some hackery here since AC_CACHE_VAL can't handle a non-literal varname:
-AS_LITERAL_IF([$1],
-  [AC_CACHE_VAL(AS_TR_SH(xorg_cv_linker_flags_[$1]), [
-      ax_save_FLAGS=$LDFLAGS
-      LDFLAGS="$1"
-      AC_LINK_IFELSE([m4_default([$4],[AC_LANG_PROGRAM()])],
-        AS_TR_SH(xorg_cv_linker_flags_[$1])=yes,
-        AS_TR_SH(xorg_cv_linker_flags_[$1])=no)
-      LDFLAGS=$ax_save_FLAGS])],
-  [ax_save_FLAGS=$LDFLAGS
-   LDFLAGS="$1"
-   AC_LINK_IFELSE([AC_LANG_PROGRAM()],
-     eval AS_TR_SH(xorg_cv_linker_flags_[$1])=yes,
-     eval AS_TR_SH(xorg_cv_linker_flags_[$1])=no)
-   LDFLAGS=$ax_save_FLAGS])
-eval xorg_check_linker_flags=$AS_TR_SH(xorg_cv_linker_flags_[$1])
-AC_MSG_RESULT($xorg_check_linker_flags)
-if test "x$xorg_check_linker_flags" = xyes; then
-	m4_default([$2], :)
-else
-	m4_default([$3], :)
-fi
-]) # XORG_CHECK_LINKER_FLAGS
-
-# XORG_MEMORY_CHECK_FLAGS
-# -----------------------
-# Minimum version: 1.16.0
-#
-# This macro attempts to find appropriate memory checking functionality
-# for various platforms which unit testing code may use to catch various
-# forms of memory allocation and access errors in testing.
-#
-# Interface to module:
-# XORG_MALLOC_DEBUG_ENV - environment variables to set to enable debugging
-#                         Usually added to TESTS_ENVIRONMENT in Makefile.am
-#
-# If the user sets the value of XORG_MALLOC_DEBUG_ENV, it is used verbatim.
-#
-AC_DEFUN([XORG_MEMORY_CHECK_FLAGS],[
-
-AC_REQUIRE([AC_CANONICAL_HOST])
-AC_ARG_VAR([XORG_MALLOC_DEBUG_ENV],
-           [Environment variables to enable memory checking in tests])
-
-# Check for different types of support on different platforms
-case $host_os in
-    solaris*)
-        AC_CHECK_LIB([umem], [umem_alloc],
-            [malloc_debug_env='LD_PRELOAD=libumem.so UMEM_DEBUG=default'])
-        ;;
-    *-gnu*) # GNU libc - Value is used as a single byte bit pattern,
-        # both directly and inverted, so should not be 0 or 255.
-        malloc_debug_env='MALLOC_PERTURB_=15'
-        ;;
-    darwin*)
-        malloc_debug_env='MallocPreScribble=1 MallocScribble=1 DYLD_INSERT_LIBRARIES=/usr/lib/libgmalloc.dylib'
-        ;;
-    *bsd*)
-        malloc_debug_env='MallocPreScribble=1 MallocScribble=1'
-        ;;
-esac
-
-# User supplied flags override default flags
-if test "x$XORG_MALLOC_DEBUG_ENV" != "x"; then
-    malloc_debug_env="$XORG_MALLOC_DEBUG_ENV"
-fi
-
-AC_SUBST([XORG_MALLOC_DEBUG_ENV],[$malloc_debug_env])
-]) # XORG_WITH_LINT
-
-# XORG_CHECK_MALLOC_ZERO
-# ----------------------
-# Minimum version: 1.0.0
-#
-# Defines {MALLOC,XMALLOC,XTMALLOC}_ZERO_CFLAGS appropriately if
-# malloc(0) returns NULL.  Packages should add one of these cflags to
-# their AM_CFLAGS (or other appropriate *_CFLAGS) to use them.
-AC_DEFUN([XORG_CHECK_MALLOC_ZERO],[
-AC_ARG_ENABLE(malloc0returnsnull,
-	AS_HELP_STRING([--enable-malloc0returnsnull],
-		       [malloc(0) returns NULL (default: auto)]),
-	[MALLOC_ZERO_RETURNS_NULL=$enableval],
-	[MALLOC_ZERO_RETURNS_NULL=auto])
-
-AC_MSG_CHECKING([whether malloc(0) returns NULL])
-if test "x$MALLOC_ZERO_RETURNS_NULL" = xauto; then
-AC_CACHE_VAL([xorg_cv_malloc0_returns_null],
-	[AC_RUN_IFELSE([AC_LANG_PROGRAM([
-#include <stdlib.h>
-],[
-    char *m0, *r0, *c0, *p;
-    m0 = malloc(0);
-    p = malloc(10);
-    r0 = realloc(p,0);
-    c0 = calloc(0,10);
-    exit((m0 == 0 || r0 == 0 || c0 == 0) ? 0 : 1);
-])],
-		[xorg_cv_malloc0_returns_null=yes],
-		[xorg_cv_malloc0_returns_null=no])])
-MALLOC_ZERO_RETURNS_NULL=$xorg_cv_malloc0_returns_null
-fi
-AC_MSG_RESULT([$MALLOC_ZERO_RETURNS_NULL])
-
-if test "x$MALLOC_ZERO_RETURNS_NULL" = xyes; then
-	MALLOC_ZERO_CFLAGS="-DMALLOC_0_RETURNS_NULL"
-	XMALLOC_ZERO_CFLAGS=$MALLOC_ZERO_CFLAGS
-	XTMALLOC_ZERO_CFLAGS="$MALLOC_ZERO_CFLAGS -DXTMALLOC_BC"
-else
-	MALLOC_ZERO_CFLAGS=""
-	XMALLOC_ZERO_CFLAGS=""
-	XTMALLOC_ZERO_CFLAGS=""
-fi
-
-AC_SUBST([MALLOC_ZERO_CFLAGS])
-AC_SUBST([XMALLOC_ZERO_CFLAGS])
-AC_SUBST([XTMALLOC_ZERO_CFLAGS])
-]) # XORG_CHECK_MALLOC_ZERO
-
-# XORG_WITH_LINT()
-# ----------------
-# Minimum version: 1.1.0
-#
-# This macro enables the use of a tool that flags some suspicious and
-# non-portable constructs (likely to be bugs) in C language source code.
-# It will attempt to locate the tool and use appropriate options.
-# There are various lint type tools on different platforms.
-#
-# Interface to module:
-# LINT:		returns the path to the tool found on the platform
-#		or the value set to LINT on the configure cmd line
-#		also an Automake conditional
-# LINT_FLAGS:	an Automake variable with appropriate flags
-#
-# --with-lint:	'yes' user instructs the module to use lint
-#		'no' user instructs the module not to use lint (default)
-#
-# If the user sets the value of LINT, AC_PATH_PROG skips testing the path.
-# If the user sets the value of LINT_FLAGS, they are used verbatim.
-#
-AC_DEFUN([XORG_WITH_LINT],[
-
-AC_ARG_VAR([LINT], [Path to a lint-style command])
-AC_ARG_VAR([LINT_FLAGS], [Flags for the lint-style command])
-AC_ARG_WITH(lint, [AS_HELP_STRING([--with-lint],
-		[Use a lint-style source code checker (default: disabled)])],
-		[use_lint=$withval], [use_lint=no])
-
-# Obtain platform specific info like program name and options
-# The lint program on FreeBSD and NetBSD is different from the one on Solaris
-case $host_os in
-  *linux* | *openbsd* | kfreebsd*-gnu | darwin* | cygwin*)
-	lint_name=splint
-	lint_options="-badflag"
-	;;
-  *freebsd* | *netbsd*)
-	lint_name=lint
-	lint_options="-u -b"
-	;;
-  *solaris*)
-	lint_name=lint
-	lint_options="-u -b -h -erroff=E_INDISTING_FROM_TRUNC2"
-	;;
-esac
-
-# Test for the presence of the program (either guessed by the code or spelled out by the user)
-if test "x$use_lint" = x"yes" ; then
-   AC_PATH_PROG([LINT], [$lint_name])
-   if test "x$LINT" = "x"; then
-        AC_MSG_ERROR([--with-lint=yes specified but lint-style tool not found in PATH])
-   fi
-elif test "x$use_lint" = x"no" ; then
-   if test "x$LINT" != "x"; then
-      AC_MSG_WARN([ignoring LINT environment variable since --with-lint=no was specified])
-   fi
-else
-   AC_MSG_ERROR([--with-lint expects 'yes' or 'no'. Use LINT variable to specify path.])
-fi
-
-# User supplied flags override default flags
-if test "x$LINT_FLAGS" != "x"; then
-   lint_options=$LINT_FLAGS
-fi
-
-AC_SUBST([LINT_FLAGS],[$lint_options])
-AM_CONDITIONAL(LINT, [test "x$LINT" != x])
-
-]) # XORG_WITH_LINT
-
-# XORG_LINT_LIBRARY(LIBNAME)
-# --------------------------
-# Minimum version: 1.1.0
-#
-# Sets up flags for building lint libraries for checking programs that call
-# functions in the library.
-#
-# Interface to module:
-# LINTLIB		- Automake variable with the name of lint library file to make
-# MAKE_LINT_LIB		- Automake conditional
-#
-# --enable-lint-library:  - 'yes' user instructs the module to created a lint library
-#			  - 'no' user instructs the module not to create a lint library (default)
-
-AC_DEFUN([XORG_LINT_LIBRARY],[
-AC_REQUIRE([XORG_WITH_LINT])
-AC_ARG_ENABLE(lint-library, [AS_HELP_STRING([--enable-lint-library],
-	[Create lint library (default: disabled)])],
-	[make_lint_lib=$enableval], [make_lint_lib=no])
-
-if test "x$make_lint_lib" = x"yes" ; then
-   LINTLIB=llib-l$1.ln
-   if test "x$LINT" = "x"; then
-        AC_MSG_ERROR([Cannot make lint library without --with-lint])
-   fi
-elif test "x$make_lint_lib" != x"no" ; then
-   AC_MSG_ERROR([--enable-lint-library expects 'yes' or 'no'.])
-fi
-
-AC_SUBST(LINTLIB)
-AM_CONDITIONAL(MAKE_LINT_LIB, [test x$make_lint_lib != xno])
-
-]) # XORG_LINT_LIBRARY
-
-# XORG_COMPILER_BRAND
-# -------------------
-# Minimum version: 1.14.0
-#
-# Checks for various brands of compilers and sets flags as appropriate:
-#   GNU gcc - relies on AC_PROG_CC (via AC_PROG_CC_C99) to set GCC to "yes"
-#   GNU g++ - relies on AC_PROG_CXX to set GXX to "yes"
-#   clang compiler - sets CLANGCC to "yes"
-#   Intel compiler - sets INTELCC to "yes"
-#   Sun/Oracle Solaris Studio cc - sets SUNCC to "yes"
-#
-AC_DEFUN([XORG_COMPILER_BRAND], [
-AC_LANG_CASE(
-	[C], [
-		dnl autoconf-2.70 folded AC_PROG_CC_C99 into AC_PROG_CC
-		dnl and complains that AC_PROG_CC_C99 is obsolete
-		m4_version_prereq([2.70],
-			[AC_REQUIRE([AC_PROG_CC])],
-			[AC_REQUIRE([AC_PROG_CC_C99])])
-	],
-	[C++], [
-		AC_REQUIRE([AC_PROG_CXX])
-	]
-)
-AC_CHECK_DECL([__clang__], [CLANGCC="yes"], [CLANGCC="no"])
-AC_CHECK_DECL([__INTEL_COMPILER], [INTELCC="yes"], [INTELCC="no"])
-AC_CHECK_DECL([__SUNPRO_C], [SUNCC="yes"], [SUNCC="no"])
-]) # XORG_COMPILER_BRAND
-
-# XORG_TESTSET_CFLAG(<variable>, <flag>, [<alternative flag>, ...])
-# ---------------
-# Minimum version: 1.16.0
-#
-# Test if the compiler works when passed the given flag as a command line argument.
-# If it succeeds, the flag is appended to the given variable.  If not, it tries the
-# next flag in the list until there are no more options.
-#
-# Note that this does not guarantee that the compiler supports the flag as some
-# compilers will simply ignore arguments that they do not understand, but we do
-# attempt to weed out false positives by using -Werror=unknown-warning-option and
-# -Werror=unused-command-line-argument
-#
-AC_DEFUN([XORG_TESTSET_CFLAG], [
-m4_if([$#], 0, [m4_fatal([XORG_TESTSET_CFLAG was given with an unsupported number of arguments])])
-m4_if([$#], 1, [m4_fatal([XORG_TESTSET_CFLAG was given with an unsupported number of arguments])])
-
-AC_LANG_COMPILER_REQUIRE
-
-AC_LANG_CASE(
-	[C], [
-		dnl autoconf-2.70 folded AC_PROG_CC_C99 into AC_PROG_CC
-		dnl and complains that AC_PROG_CC_C99 is obsolete
-		m4_version_prereq([2.70],
-			[AC_REQUIRE([AC_PROG_CC])],
-			[AC_REQUIRE([AC_PROG_CC_C99])])
-		define([PREFIX], [C])
-		define([CACHE_PREFIX], [cc])
-		define([COMPILER], [$CC])
-	],
-	[C++], [
-		define([PREFIX], [CXX])
-		define([CACHE_PREFIX], [cxx])
-		define([COMPILER], [$CXX])
-	]
-)
-
-[xorg_testset_save_]PREFIX[FLAGS]="$PREFIX[FLAGS]"
-
-if test "x$[xorg_testset_]CACHE_PREFIX[_unknown_warning_option]" = "x" ; then
-	PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unknown-warning-option"
-	AC_CACHE_CHECK([if ]COMPILER[ supports -Werror=unknown-warning-option],
-			[xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option],
-			AC_COMPILE_IFELSE([AC_LANG_SOURCE([int i;])],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option=yes],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option=no]))
-	[xorg_testset_]CACHE_PREFIX[_unknown_warning_option]=$[xorg_cv_]CACHE_PREFIX[_flag_unknown_warning_option]
-	PREFIX[FLAGS]="$[xorg_testset_save_]PREFIX[FLAGS]"
-fi
-
-if test "x$[xorg_testset_]CACHE_PREFIX[_unused_command_line_argument]" = "x" ; then
-	if test "x$[xorg_testset_]CACHE_PREFIX[_unknown_warning_option]" = "xyes" ; then
-		PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unknown-warning-option"
-	fi
-	PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unused-command-line-argument"
-	AC_CACHE_CHECK([if ]COMPILER[ supports -Werror=unused-command-line-argument],
-			[xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument],
-			AC_COMPILE_IFELSE([AC_LANG_SOURCE([int i;])],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument=yes],
-					  [xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument=no]))
-	[xorg_testset_]CACHE_PREFIX[_unused_command_line_argument]=$[xorg_cv_]CACHE_PREFIX[_flag_unused_command_line_argument]
-	PREFIX[FLAGS]="$[xorg_testset_save_]PREFIX[FLAGS]"
-fi
-
-found="no"
-m4_foreach([flag], m4_cdr($@), [
-	if test $found = "no" ; then
-		if test "x$xorg_testset_]CACHE_PREFIX[_unknown_warning_option" = "xyes" ; then
-			PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_]CACHE_PREFIX[_unused_command_line_argument" = "xyes" ; then
-			PREFIX[FLAGS]="$PREFIX[FLAGS] -Werror=unused-command-line-argument"
-		fi
-
-		PREFIX[FLAGS]="$PREFIX[FLAGS] ]flag["
-
-dnl Some hackery here since AC_CACHE_VAL can't handle a non-literal varname
-		AC_MSG_CHECKING([if ]COMPILER[ supports ]flag[])
-		cacheid=AS_TR_SH([xorg_cv_]CACHE_PREFIX[_flag_]flag[])
-		AC_CACHE_VAL($cacheid,
-			     [AC_LINK_IFELSE([AC_LANG_PROGRAM([int i;])],
-					     [eval $cacheid=yes],
-					     [eval $cacheid=no])])
-
-		PREFIX[FLAGS]="$[xorg_testset_save_]PREFIX[FLAGS]"
-
-		eval supported=\$$cacheid
-		AC_MSG_RESULT([$supported])
-		if test "$supported" = "yes" ; then
-			$1="$$1 ]flag["
-			found="yes"
-		fi
-	fi
-])
-]) # XORG_TESTSET_CFLAG
-
-# XORG_COMPILER_FLAGS
-# ---------------
-# Minimum version: 1.16.0
-#
-# Defines BASE_CFLAGS or BASE_CXXFLAGS to contain a set of command line
-# arguments supported by the selected compiler which do NOT alter the generated
-# code.  These arguments will cause the compiler to print various warnings
-# during compilation AND turn a conservative set of warnings into errors.
-#
-# The set of flags supported by BASE_CFLAGS and BASE_CXXFLAGS will grow in
-# future versions of util-macros as options are added to new compilers.
-#
-AC_DEFUN([XORG_COMPILER_FLAGS], [
-AC_REQUIRE([XORG_COMPILER_BRAND])
-
-AC_ARG_ENABLE(selective-werror,
-              AS_HELP_STRING([--disable-selective-werror],
-                             [Turn off selective compiler errors. (default: enabled)]),
-              [SELECTIVE_WERROR=$enableval],
-              [SELECTIVE_WERROR=yes])
-
-AC_LANG_CASE(
-        [C], [
-                define([PREFIX], [C])
-        ],
-        [C++], [
-                define([PREFIX], [CXX])
-        ]
-)
-# -v is too short to test reliably with XORG_TESTSET_CFLAG
-if test "x$SUNCC" = "xyes"; then
-    [BASE_]PREFIX[FLAGS]="-v"
-else
-    [BASE_]PREFIX[FLAGS]=""
-fi
-
-# This chunk of warnings were those that existed in the legacy CWARNFLAGS
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wall])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wpointer-arith])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-declarations])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wformat=2], [-Wformat])
-
-AC_LANG_CASE(
-	[C], [
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wstrict-prototypes])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-prototypes])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wnested-externs])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wbad-function-cast])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wold-style-definition], [-fd])
-		XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wdeclaration-after-statement])
-	]
-)
-
-# This chunk adds additional warnings that could catch undesired effects.
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wunused])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wuninitialized])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wshadow])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-noreturn])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-format-attribute])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wredundant-decls])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wlogical-op])
-
-# These are currently disabled because they are noisy.  They will be enabled
-# in the future once the codebase is sufficiently modernized to silence
-# them.  For now, I don't want them to drown out the other warnings.
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wparentheses])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-align])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-qual])
-
-# Turn some warnings into errors, so we don't accidentally get successful builds
-# when there are problems that should be fixed.
-
-if test "x$SELECTIVE_WERROR" = "xyes" ; then
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=implicit], [-errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=nonnull])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=init-self])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=main])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=missing-braces])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=sequence-point])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=return-type], [-errwarn=E_FUNC_HAS_NO_RETURN_STMT])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=trigraphs])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=array-bounds])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=write-strings])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=address])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=int-to-pointer-cast], [-errwarn=E_BAD_PTR_INT_COMBINATION])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Werror=pointer-to-int-cast]) # Also -errwarn=E_BAD_PTR_INT_COMBINATION
-else
-AC_MSG_WARN([You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wimplicit])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wnonnull])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Winit-self])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmain])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wmissing-braces])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wsequence-point])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wreturn-type])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wtrigraphs])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Warray-bounds])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wwrite-strings])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Waddress])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wint-to-pointer-cast])
-XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wpointer-to-int-cast])
-fi
-
-AC_SUBST([BASE_]PREFIX[FLAGS])
-]) # XORG_COMPILER_FLAGS
-
-# XORG_CWARNFLAGS
-# ---------------
-# Minimum version: 1.2.0
-# Deprecated since: 1.16.0 (Use XORG_COMPILER_FLAGS instead)
-#
-# Defines CWARNFLAGS to enable C compiler warnings.
-#
-# This function is deprecated because it defines -fno-strict-aliasing
-# which alters the code generated by the compiler.  If -fno-strict-aliasing
-# is needed, then it should be added explicitly in the module when
-# it is updated to use BASE_CFLAGS.
-#
-AC_DEFUN([XORG_CWARNFLAGS], [
-AC_REQUIRE([XORG_COMPILER_FLAGS])
-AC_REQUIRE([XORG_COMPILER_BRAND])
-AC_LANG_CASE(
-	[C], [
-		CWARNFLAGS="$BASE_CFLAGS"
-		if  test "x$GCC" = xyes ; then
-		    CWARNFLAGS="$CWARNFLAGS -fno-strict-aliasing"
-		fi
-		AC_SUBST(CWARNFLAGS)
-	]
-)
-]) # XORG_CWARNFLAGS
-
-# XORG_STRICT_OPTION
-# -----------------------
-# Minimum version: 1.3.0
-#
-# Add configure option to enable strict compilation flags, such as treating
-# warnings as fatal errors.
-# If --enable-strict-compilation is passed to configure, adds strict flags to
-# $BASE_CFLAGS or $BASE_CXXFLAGS and the deprecated $CWARNFLAGS.
-#
-# Starting in 1.14.0 also exports $STRICT_CFLAGS for use in other tests or
-# when strict compilation is unconditionally desired.
-AC_DEFUN([XORG_STRICT_OPTION], [
-AC_REQUIRE([XORG_CWARNFLAGS])
-AC_REQUIRE([XORG_COMPILER_FLAGS])
-
-AC_ARG_ENABLE(strict-compilation,
-			  AS_HELP_STRING([--enable-strict-compilation],
-			  [Enable all warnings from compiler and make them errors (default: disabled)]),
-			  [STRICT_COMPILE=$enableval], [STRICT_COMPILE=no])
-
-AC_LANG_CASE(
-        [C], [
-                define([PREFIX], [C])
-        ],
-        [C++], [
-                define([PREFIX], [CXX])
-        ]
-)
-
-[STRICT_]PREFIX[FLAGS]=""
-XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-pedantic])
-XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-Werror], [-errwarn])
-
-# Earlier versions of gcc (eg: 4.2) support -Werror=attributes, but do not
-# activate it with -Werror, so we add it here explicitly.
-XORG_TESTSET_CFLAG([[STRICT_]PREFIX[FLAGS]], [-Werror=attributes])
-
-if test "x$STRICT_COMPILE" = "xyes"; then
-    [BASE_]PREFIX[FLAGS]="$[BASE_]PREFIX[FLAGS] $[STRICT_]PREFIX[FLAGS]"
-    AC_LANG_CASE([C], [CWARNFLAGS="$CWARNFLAGS $STRICT_CFLAGS"])
-fi
-AC_SUBST([STRICT_]PREFIX[FLAGS])
-AC_SUBST([BASE_]PREFIX[FLAGS])
-AC_LANG_CASE([C], AC_SUBST([CWARNFLAGS]))
-]) # XORG_STRICT_OPTION
-
-# XORG_DEFAULT_NOCODE_OPTIONS
-# ---------------------------
-# Minimum version: 1.20.0
-#
-# Defines default options for X.Org modules which don't compile code,
-# such as fonts, bitmaps, cursors, and docs.
-#
-AC_DEFUN([XORG_DEFAULT_NOCODE_OPTIONS], [
-AC_REQUIRE([AC_PROG_INSTALL])
-XORG_RELEASE_VERSION
-XORG_CHANGELOG
-XORG_INSTALL
-XORG_MANPAGE_SECTIONS
-m4_ifdef([AM_SILENT_RULES], [AM_SILENT_RULES([yes])],
-    [AC_SUBST([AM_DEFAULT_VERBOSITY], [1])])
-]) # XORG_DEFAULT_NOCODE_OPTIONS
-
-# XORG_DEFAULT_OPTIONS
-# --------------------
-# Minimum version: 1.3.0
-#
-# Defines default options for X.Org modules which compile code.
-#
-AC_DEFUN([XORG_DEFAULT_OPTIONS], [
-AC_REQUIRE([AC_PROG_INSTALL])
-XORG_COMPILER_FLAGS
-XORG_CWARNFLAGS
-XORG_STRICT_OPTION
-XORG_DEFAULT_NOCODE_OPTIONS
-]) # XORG_DEFAULT_OPTIONS
-
-# XORG_INSTALL()
-# ----------------
-# Minimum version: 1.4.0
-#
-# Defines the variable INSTALL_CMD as the command to copy
-# INSTALL from $prefix/share/util-macros.
-#
-AC_DEFUN([XORG_INSTALL], [
-AC_REQUIRE([PKG_PROG_PKG_CONFIG])
-macros_datadir=`$PKG_CONFIG --print-errors --variable=pkgdatadir xorg-macros`
-INSTALL_CMD="(cp -f "$macros_datadir/INSTALL" \$(top_srcdir)/.INSTALL.tmp && \
-mv \$(top_srcdir)/.INSTALL.tmp \$(top_srcdir)/INSTALL) \
-|| (rm -f \$(top_srcdir)/.INSTALL.tmp; test -e \$(top_srcdir)/INSTALL || ( \
-touch \$(top_srcdir)/INSTALL; \
-echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))"
-AC_SUBST([INSTALL_CMD])
-]) # XORG_INSTALL
-dnl Copyright 2005 Red Hat, Inc
-dnl
-dnl Permission to use, copy, modify, distribute, and sell this software and its
-dnl documentation for any purpose is hereby granted without fee, provided that
-dnl the above copyright notice appear in all copies and that both that
-dnl copyright notice and this permission notice appear in supporting
-dnl documentation.
-dnl
-dnl The above copyright notice and this permission notice shall be included
-dnl in all copies or substantial portions of the Software.
-dnl
-dnl THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS
-dnl OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
-dnl MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.
-dnl IN NO EVENT SHALL THE OPEN GROUP BE LIABLE FOR ANY CLAIM, DAMAGES OR
-dnl OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE,
-dnl ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR
-dnl OTHER DEALINGS IN THE SOFTWARE.
-dnl
-dnl Except as contained in this notice, the name of the copyright holders shall
-dnl not be used in advertising or otherwise to promote the sale, use or
-dnl other dealings in this Software without prior written authorization
-dnl from the copyright holders.
-dnl
-
-# XORG_RELEASE_VERSION
-# --------------------
-# Defines PACKAGE_VERSION_{MAJOR,MINOR,PATCHLEVEL} for modules to use.
-
-AC_DEFUN([XORG_RELEASE_VERSION],[
-	AC_DEFINE_UNQUOTED([PACKAGE_VERSION_MAJOR],
-		[`echo $PACKAGE_VERSION | cut -d . -f 1`],
-		[Major version of this package])
-	PVM=`echo $PACKAGE_VERSION | cut -d . -f 2 | cut -d - -f 1`
-	if test "x$PVM" = "x"; then
-		PVM="0"
-	fi
-	AC_DEFINE_UNQUOTED([PACKAGE_VERSION_MINOR],
-		[$PVM],
-		[Minor version of this package])
-	PVP=`echo $PACKAGE_VERSION | cut -d . -f 3 | cut -d - -f 1`
-	if test "x$PVP" = "x"; then
-		PVP="0"
-	fi
-	AC_DEFINE_UNQUOTED([PACKAGE_VERSION_PATCHLEVEL],
-		[$PVP],
-		[Patch version of this package])
-])
-
-# XORG_CHANGELOG()
-# ----------------
-# Minimum version: 1.2.0
-#
-# Defines the variable CHANGELOG_CMD as the command to generate
-# ChangeLog from git.
-#
-#
-AC_DEFUN([XORG_CHANGELOG], [
-CHANGELOG_CMD="((GIT_DIR=\$(top_srcdir)/.git git log > \$(top_srcdir)/.changelog.tmp) 2>/dev/null && \
-mv \$(top_srcdir)/.changelog.tmp \$(top_srcdir)/ChangeLog) \
-|| (rm -f \$(top_srcdir)/.changelog.tmp; test -e \$(top_srcdir)/ChangeLog || ( \
-touch \$(top_srcdir)/ChangeLog; \
-echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))"
-AC_SUBST([CHANGELOG_CMD])
-]) # XORG_CHANGELOG
-
-m4_include([m4/libtool.m4])
-m4_include([m4/ltoptions.m4])
-m4_include([m4/ltsugar.m4])
-m4_include([m4/ltversion.m4])
-m4_include([m4/lt~obsolete.m4])
diff --git a/experiments/wasm-gui/third_party/libXfixes/compile b/experiments/wasm-gui/third_party/libXfixes/compile
deleted file mode 100755
index df363c8fb..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/compile
+++ /dev/null
@@ -1,348 +0,0 @@
-#! /bin/sh
-# Wrapper for compilers which do not understand '-c -o'.
-
-scriptversion=2018-03-07.03; # UTC
-
-# Copyright (C) 1999-2021 Free Software Foundation, Inc.
-# Written by Tom Tromey <tromey@cygnus.com>.
-#
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2, or (at your option)
-# any later version.
-#
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <https://www.gnu.org/licenses/>.
-
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program that contains a
-# configuration script generated by Autoconf, you may include it under
-# the same distribution terms that you use for the rest of that program.
-
-# This file is maintained in Automake, please report
-# bugs to <bug-automake@gnu.org> or send patches to
-# <automake-patches@gnu.org>.
-
-nl='
-'
-
-# We need space, tab and new line, in precisely that order.  Quoting is
-# there to prevent tools from complaining about whitespace usage.
-IFS=" ""	$nl"
-
-file_conv=
-
-# func_file_conv build_file lazy
-# Convert a $build file to $host form and store it in $file
-# Currently only supports Windows hosts. If the determined conversion
-# type is listed in (the comma separated) LAZY, no conversion will
-# take place.
-func_file_conv ()
-{
-  file=$1
-  case $file in
-    / | /[!/]*) # absolute file, and not a UNC file
-      if test -z "$file_conv"; then
-	# lazily determine how to convert abs files
-	case `uname -s` in
-	  MINGW*)
-	    file_conv=mingw
-	    ;;
-	  CYGWIN* | MSYS*)
-	    file_conv=cygwin
-	    ;;
-	  *)
-	    file_conv=wine
-	    ;;
-	esac
-      fi
-      case $file_conv/,$2, in
-	*,$file_conv,*)
-	  ;;
-	mingw/*)
-	  file=`cmd //C echo "$file " | sed -e 's/"\(.*\) " *$/\1/'`
-	  ;;
-	cygwin/* | msys/*)
-	  file=`cygpath -m "$file" || echo "$file"`
-	  ;;
-	wine/*)
-	  file=`winepath -w "$file" || echo "$file"`
-	  ;;
-      esac
-      ;;
-  esac
-}
-
-# func_cl_dashL linkdir
-# Make cl look for libraries in LINKDIR
-func_cl_dashL ()
-{
-  func_file_conv "$1"
-  if test -z "$lib_path"; then
-    lib_path=$file
-  else
-    lib_path="$lib_path;$file"
-  fi
-  linker_opts="$linker_opts -LIBPATH:$file"
-}
-
-# func_cl_dashl library
-# Do a library search-path lookup for cl
-func_cl_dashl ()
-{
-  lib=$1
-  found=no
-  save_IFS=$IFS
-  IFS=';'
-  for dir in $lib_path $LIB
-  do
-    IFS=$save_IFS
-    if $shared && test -f "$dir/$lib.dll.lib"; then
-      found=yes
-      lib=$dir/$lib.dll.lib
-      break
-    fi
-    if test -f "$dir/$lib.lib"; then
-      found=yes
-      lib=$dir/$lib.lib
-      break
-    fi
-    if test -f "$dir/lib$lib.a"; then
-      found=yes
-      lib=$dir/lib$lib.a
-      break
-    fi
-  done
-  IFS=$save_IFS
-
-  if test "$found" != yes; then
-    lib=$lib.lib
-  fi
-}
-
-# func_cl_wrapper cl arg...
-# Adjust compile command to suit cl
-func_cl_wrapper ()
-{
-  # Assume a capable shell
-  lib_path=
-  shared=:
-  linker_opts=
-  for arg
-  do
-    if test -n "$eat"; then
-      eat=
-    else
-      case $1 in
-	-o)
-	  # configure might choose to run compile as 'compile cc -o foo foo.c'.
-	  eat=1
-	  case $2 in
-	    *.o | *.[oO][bB][jJ])
-	      func_file_conv "$2"
-	      set x "$@" -Fo"$file"
-	      shift
-	      ;;
-	    *)
-	      func_file_conv "$2"
-	      set x "$@" -Fe"$file"
-	      shift
-	      ;;
-	  esac
-	  ;;
-	-I)
-	  eat=1
-	  func_file_conv "$2" mingw
-	  set x "$@" -I"$file"
-	  shift
-	  ;;
-	-I*)
-	  func_file_conv "${1#-I}" mingw
-	  set x "$@" -I"$file"
-	  shift
-	  ;;
-	-l)
-	  eat=1
-	  func_cl_dashl "$2"
-	  set x "$@" "$lib"
-	  shift
-	  ;;
-	-l*)
-	  func_cl_dashl "${1#-l}"
-	  set x "$@" "$lib"
-	  shift
-	  ;;
-	-L)
-	  eat=1
-	  func_cl_dashL "$2"
-	  ;;
-	-L*)
-	  func_cl_dashL "${1#-L}"
-	  ;;
-	-static)
-	  shared=false
-	  ;;
-	-Wl,*)
-	  arg=${1#-Wl,}
-	  save_ifs="$IFS"; IFS=','
-	  for flag in $arg; do
-	    IFS="$save_ifs"
-	    linker_opts="$linker_opts $flag"
-	  done
-	  IFS="$save_ifs"
-	  ;;
-	-Xlinker)
-	  eat=1
-	  linker_opts="$linker_opts $2"
-	  ;;
-	-*)
-	  set x "$@" "$1"
-	  shift
-	  ;;
-	*.cc | *.CC | *.cxx | *.CXX | *.[cC]++)
-	  func_file_conv "$1"
-	  set x "$@" -Tp"$file"
-	  shift
-	  ;;
-	*.c | *.cpp | *.CPP | *.lib | *.LIB | *.Lib | *.OBJ | *.obj | *.[oO])
-	  func_file_conv "$1" mingw
-	  set x "$@" "$file"
-	  shift
-	  ;;
-	*)
-	  set x "$@" "$1"
-	  shift
-	  ;;
-      esac
-    fi
-    shift
-  done
-  if test -n "$linker_opts"; then
-    linker_opts="-link$linker_opts"
-  fi
-  exec "$@" $linker_opts
-  exit 1
-}
-
-eat=
-
-case $1 in
-  '')
-     echo "$0: No command.  Try '$0 --help' for more information." 1>&2
-     exit 1;
-     ;;
-  -h | --h*)
-    cat <<\EOF
-Usage: compile [--help] [--version] PROGRAM [ARGS]
-
-Wrapper for compilers which do not understand '-c -o'.
-Remove '-o dest.o' from ARGS, run PROGRAM with the remaining
-arguments, and rename the output as expected.
-
-If you are trying to build a whole package this is not the
-right script to run: please start by reading the file 'INSTALL'.
-
-Report bugs to <bug-automake@gnu.org>.
-EOF
-    exit $?
-    ;;
-  -v | --v*)
-    echo "compile $scriptversion"
-    exit $?
-    ;;
-  cl | *[/\\]cl | cl.exe | *[/\\]cl.exe | \
-  icl | *[/\\]icl | icl.exe | *[/\\]icl.exe )
-    func_cl_wrapper "$@"      # Doesn't return...
-    ;;
-esac
-
-ofile=
-cfile=
-
-for arg
-do
-  if test -n "$eat"; then
-    eat=
-  else
-    case $1 in
-      -o)
-	# configure might choose to run compile as 'compile cc -o foo foo.c'.
-	# So we strip '-o arg' only if arg is an object.
-	eat=1
-	case $2 in
-	  *.o | *.obj)
-	    ofile=$2
-	    ;;
-	  *)
-	    set x "$@" -o "$2"
-	    shift
-	    ;;
-	esac
-	;;
-      *.c)
-	cfile=$1
-	set x "$@" "$1"
-	shift
-	;;
-      *)
-	set x "$@" "$1"
-	shift
-	;;
-    esac
-  fi
-  shift
-done
-
-if test -z "$ofile" || test -z "$cfile"; then
-  # If no '-o' option was seen then we might have been invoked from a
-  # pattern rule where we don't need one.  That is ok -- this is a
-  # normal compilation that the losing compiler can handle.  If no
-  # '.c' file was seen then we are probably linking.  That is also
-  # ok.
-  exec "$@"
-fi
-
-# Name of file we expect compiler to create.
-cofile=`echo "$cfile" | sed 's|^.*[\\/]||; s|^[a-zA-Z]:||; s/\.c$/.o/'`
-
-# Create the lock directory.
-# Note: use '[/\\:.-]' here to ensure that we don't use the same name
-# that we are using for the .o file.  Also, base the name on the expected
-# object file name, since that is what matters with a parallel build.
-lockdir=`echo "$cofile" | sed -e 's|[/\\:.-]|_|g'`.d
-while true; do
-  if mkdir "$lockdir" >/dev/null 2>&1; then
-    break
-  fi
-  sleep 1
-done
-# FIXME: race condition here if user kills between mkdir and trap.
-trap "rmdir '$lockdir'; exit 1" 1 2 15
-
-# Run the compile.
-"$@"
-ret=$?
-
-if test -f "$cofile"; then
-  test "$cofile" = "$ofile" || mv "$cofile" "$ofile"
-elif test -f "${cofile}bj"; then
-  test "${cofile}bj" = "$ofile" || mv "${cofile}bj" "$ofile"
-fi
-
-rmdir "$lockdir"
-exit $ret
-
-# Local Variables:
-# mode: shell-script
-# sh-indentation: 2
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-start: "scriptversion="
-# time-stamp-format: "%:y-%02m-%02d.%02H"
-# time-stamp-time-zone: "UTC0"
-# time-stamp-end: "; # UTC"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXfixes/config.guess b/experiments/wasm-gui/third_party/libXfixes/config.guess
deleted file mode 100644
index 69188da73..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/config.guess
+++ /dev/null
@@ -1,1774 +0,0 @@
-#! /bin/sh
-# Attempt to guess a canonical system name.
-#   Copyright 1992-2023 Free Software Foundation, Inc.
-
-# shellcheck disable=SC2006,SC2268 # see below for rationale
-
-timestamp='2023-01-01'
-
-# This file is free software; you can redistribute it and/or modify it
-# under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-# General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, see <https://www.gnu.org/licenses/>.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program that contains a
-# configuration script generated by Autoconf, you may include it under
-# the same distribution terms that you use for the rest of that
-# program.  This Exception is an additional permission under section 7
-# of the GNU General Public License, version 3 ("GPLv3").
-#
-# Originally written by Per Bothner; maintained since 2000 by Ben Elliston.
-#
-# You can get the latest version of this script from:
-# https://git.savannah.gnu.org/cgit/config.git/plain/config.guess
-#
-# Please send patches to <config-patches@gnu.org>.
-
-
-# The "shellcheck disable" line above the timestamp inhibits complaints
-# about features and limitations of the classic Bourne shell that were
-# superseded or lifted in POSIX.  However, this script identifies a wide
-# variety of pre-POSIX systems that do not have POSIX shells at all, and
-# even some reasonably current systems (Solaris 10 as case-in-point) still
-# have a pre-POSIX /bin/sh.
-
-
-me=`echo "$0" | sed -e 's,.*/,,'`
-
-usage="\
-Usage: $0 [OPTION]
-
-Output the configuration name of the system \`$me' is run on.
-
-Options:
-  -h, --help         print this help, then exit
-  -t, --time-stamp   print date of last modification, then exit
-  -v, --version      print version number, then exit
-
-Report bugs and patches to <config-patches@gnu.org>."
-
-version="\
-GNU config.guess ($timestamp)
-
-Originally written by Per Bothner.
-Copyright 1992-2023 Free Software Foundation, Inc.
-
-This is free software; see the source for copying conditions.  There is NO
-warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE."
-
-help="
-Try \`$me --help' for more information."
-
-# Parse command line
-while test $# -gt 0 ; do
-  case $1 in
-    --time-stamp | --time* | -t )
-       echo "$timestamp" ; exit ;;
-    --version | -v )
-       echo "$version" ; exit ;;
-    --help | --h* | -h )
-       echo "$usage"; exit ;;
-    -- )     # Stop option processing
-       shift; break ;;
-    - )	# Use stdin as input.
-       break ;;
-    -* )
-       echo "$me: invalid option $1$help" >&2
-       exit 1 ;;
-    * )
-       break ;;
-  esac
-done
-
-if test $# != 0; then
-  echo "$me: too many arguments$help" >&2
-  exit 1
-fi
-
-# Just in case it came from the environment.
-GUESS=
-
-# CC_FOR_BUILD -- compiler used by this script. Note that the use of a
-# compiler to aid in system detection is discouraged as it requires
-# temporary files to be created and, as you can see below, it is a
-# headache to deal with in a portable fashion.
-
-# Historically, `CC_FOR_BUILD' used to be named `HOST_CC'. We still
-# use `HOST_CC' if defined, but it is deprecated.
-
-# Portable tmp directory creation inspired by the Autoconf team.
-
-tmp=
-# shellcheck disable=SC2172
-trap 'test -z "$tmp" || rm -fr "$tmp"' 0 1 2 13 15
-
-set_cc_for_build() {
-    # prevent multiple calls if $tmp is already set
-    test "$tmp" && return 0
-    : "${TMPDIR=/tmp}"
-    # shellcheck disable=SC2039,SC3028
-    { tmp=`(umask 077 && mktemp -d "$TMPDIR/cgXXXXXX") 2>/dev/null` && test -n "$tmp" && test -d "$tmp" ; } ||
-	{ test -n "$RANDOM" && tmp=$TMPDIR/cg$$-$RANDOM && (umask 077 && mkdir "$tmp" 2>/dev/null) ; } ||
-	{ tmp=$TMPDIR/cg-$$ && (umask 077 && mkdir "$tmp" 2>/dev/null) && echo "Warning: creating insecure temp directory" >&2 ; } ||
-	{ echo "$me: cannot create a temporary directory in $TMPDIR" >&2 ; exit 1 ; }
-    dummy=$tmp/dummy
-    case ${CC_FOR_BUILD-},${HOST_CC-},${CC-} in
-	,,)    echo "int x;" > "$dummy.c"
-	       for driver in cc gcc c89 c99 ; do
-		   if ($driver -c -o "$dummy.o" "$dummy.c") >/dev/null 2>&1 ; then
-		       CC_FOR_BUILD=$driver
-		       break
-		   fi
-	       done
-	       if test x"$CC_FOR_BUILD" = x ; then
-		   CC_FOR_BUILD=no_compiler_found
-	       fi
-	       ;;
-	,,*)   CC_FOR_BUILD=$CC ;;
-	,*,*)  CC_FOR_BUILD=$HOST_CC ;;
-    esac
-}
-
-# This is needed to find uname on a Pyramid OSx when run in the BSD universe.
-# (ghazi@noc.rutgers.edu 1994-08-24)
-if test -f /.attbin/uname ; then
-	PATH=$PATH:/.attbin ; export PATH
-fi
-
-UNAME_MACHINE=`(uname -m) 2>/dev/null` || UNAME_MACHINE=unknown
-UNAME_RELEASE=`(uname -r) 2>/dev/null` || UNAME_RELEASE=unknown
-UNAME_SYSTEM=`(uname -s) 2>/dev/null` || UNAME_SYSTEM=unknown
-UNAME_VERSION=`(uname -v) 2>/dev/null` || UNAME_VERSION=unknown
-
-case $UNAME_SYSTEM in
-Linux|GNU|GNU/*)
-	LIBC=unknown
-
-	set_cc_for_build
-	cat <<-EOF > "$dummy.c"
-	#include <features.h>
-	#if defined(__UCLIBC__)
-	LIBC=uclibc
-	#elif defined(__dietlibc__)
-	LIBC=dietlibc
-	#elif defined(__GLIBC__)
-	LIBC=gnu
-	#else
-	#include <stdarg.h>
-	/* First heuristic to detect musl libc.  */
-	#ifdef __DEFINED_va_list
-	LIBC=musl
-	#endif
-	#endif
-	EOF
-	cc_set_libc=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^LIBC' | sed 's, ,,g'`
-	eval "$cc_set_libc"
-
-	# Second heuristic to detect musl libc.
-	if [ "$LIBC" = unknown ] &&
-	   command -v ldd >/dev/null &&
-	   ldd --version 2>&1 | grep -q ^musl; then
-		LIBC=musl
-	fi
-
-	# If the system lacks a compiler, then just pick glibc.
-	# We could probably try harder.
-	if [ "$LIBC" = unknown ]; then
-		LIBC=gnu
-	fi
-	;;
-esac
-
-# Note: order is significant - the case branches are not exclusive.
-
-case $UNAME_MACHINE:$UNAME_SYSTEM:$UNAME_RELEASE:$UNAME_VERSION in
-    *:NetBSD:*:*)
-	# NetBSD (nbsd) targets should (where applicable) match one or
-	# more of the tuples: *-*-netbsdelf*, *-*-netbsdaout*,
-	# *-*-netbsdecoff* and *-*-netbsd*.  For targets that recently
-	# switched to ELF, *-*-netbsd* would select the old
-	# object file format.  This provides both forward
-	# compatibility and a consistent mechanism for selecting the
-	# object file format.
-	#
-	# Note: NetBSD doesn't particularly care about the vendor
-	# portion of the name.  We always set it to "unknown".
-	UNAME_MACHINE_ARCH=`(uname -p 2>/dev/null || \
-	    /sbin/sysctl -n hw.machine_arch 2>/dev/null || \
-	    /usr/sbin/sysctl -n hw.machine_arch 2>/dev/null || \
-	    echo unknown)`
-	case $UNAME_MACHINE_ARCH in
-	    aarch64eb) machine=aarch64_be-unknown ;;
-	    armeb) machine=armeb-unknown ;;
-	    arm*) machine=arm-unknown ;;
-	    sh3el) machine=shl-unknown ;;
-	    sh3eb) machine=sh-unknown ;;
-	    sh5el) machine=sh5le-unknown ;;
-	    earmv*)
-		arch=`echo "$UNAME_MACHINE_ARCH" | sed -e 's,^e\(armv[0-9]\).*$,\1,'`
-		endian=`echo "$UNAME_MACHINE_ARCH" | sed -ne 's,^.*\(eb\)$,\1,p'`
-		machine=${arch}${endian}-unknown
-		;;
-	    *) machine=$UNAME_MACHINE_ARCH-unknown ;;
-	esac
-	# The Operating System including object format, if it has switched
-	# to ELF recently (or will in the future) and ABI.
-	case $UNAME_MACHINE_ARCH in
-	    earm*)
-		os=netbsdelf
-		;;
-	    arm*|i386|m68k|ns32k|sh3*|sparc|vax)
-		set_cc_for_build
-		if echo __ELF__ | $CC_FOR_BUILD -E - 2>/dev/null \
-			| grep -q __ELF__
-		then
-		    # Once all utilities can be ECOFF (netbsdecoff) or a.out (netbsdaout).
-		    # Return netbsd for either.  FIX?
-		    os=netbsd
-		else
-		    os=netbsdelf
-		fi
-		;;
-	    *)
-		os=netbsd
-		;;
-	esac
-	# Determine ABI tags.
-	case $UNAME_MACHINE_ARCH in
-	    earm*)
-		expr='s/^earmv[0-9]/-eabi/;s/eb$//'
-		abi=`echo "$UNAME_MACHINE_ARCH" | sed -e "$expr"`
-		;;
-	esac
-	# The OS release
-	# Debian GNU/NetBSD machines have a different userland, and
-	# thus, need a distinct triplet. However, they do not need
-	# kernel version information, so it can be replaced with a
-	# suitable tag, in the style of linux-gnu.
-	case $UNAME_VERSION in
-	    Debian*)
-		release='-gnu'
-		;;
-	    *)
-		release=`echo "$UNAME_RELEASE" | sed -e 's/[-_].*//' | cut -d. -f1,2`
-		;;
-	esac
-	# Since CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM:
-	# contains redundant information, the shorter form:
-	# CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM is used.
-	GUESS=$machine-${os}${release}${abi-}
-	;;
-    *:Bitrig:*:*)
-	UNAME_MACHINE_ARCH=`arch | sed 's/Bitrig.//'`
-	GUESS=$UNAME_MACHINE_ARCH-unknown-bitrig$UNAME_RELEASE
-	;;
-    *:OpenBSD:*:*)
-	UNAME_MACHINE_ARCH=`arch | sed 's/OpenBSD.//'`
-	GUESS=$UNAME_MACHINE_ARCH-unknown-openbsd$UNAME_RELEASE
-	;;
-    *:SecBSD:*:*)
-	UNAME_MACHINE_ARCH=`arch | sed 's/SecBSD.//'`
-	GUESS=$UNAME_MACHINE_ARCH-unknown-secbsd$UNAME_RELEASE
-	;;
-    *:LibertyBSD:*:*)
-	UNAME_MACHINE_ARCH=`arch | sed 's/^.*BSD\.//'`
-	GUESS=$UNAME_MACHINE_ARCH-unknown-libertybsd$UNAME_RELEASE
-	;;
-    *:MidnightBSD:*:*)
-	GUESS=$UNAME_MACHINE-unknown-midnightbsd$UNAME_RELEASE
-	;;
-    *:ekkoBSD:*:*)
-	GUESS=$UNAME_MACHINE-unknown-ekkobsd$UNAME_RELEASE
-	;;
-    *:SolidBSD:*:*)
-	GUESS=$UNAME_MACHINE-unknown-solidbsd$UNAME_RELEASE
-	;;
-    *:OS108:*:*)
-	GUESS=$UNAME_MACHINE-unknown-os108_$UNAME_RELEASE
-	;;
-    macppc:MirBSD:*:*)
-	GUESS=powerpc-unknown-mirbsd$UNAME_RELEASE
-	;;
-    *:MirBSD:*:*)
-	GUESS=$UNAME_MACHINE-unknown-mirbsd$UNAME_RELEASE
-	;;
-    *:Sortix:*:*)
-	GUESS=$UNAME_MACHINE-unknown-sortix
-	;;
-    *:Twizzler:*:*)
-	GUESS=$UNAME_MACHINE-unknown-twizzler
-	;;
-    *:Redox:*:*)
-	GUESS=$UNAME_MACHINE-unknown-redox
-	;;
-    mips:OSF1:*.*)
-	GUESS=mips-dec-osf1
-	;;
-    alpha:OSF1:*:*)
-	# Reset EXIT trap before exiting to avoid spurious non-zero exit code.
-	trap '' 0
-	case $UNAME_RELEASE in
-	*4.0)
-		UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $3}'`
-		;;
-	*5.*)
-		UNAME_RELEASE=`/usr/sbin/sizer -v | awk '{print $4}'`
-		;;
-	esac
-	# According to Compaq, /usr/sbin/psrinfo has been available on
-	# OSF/1 and Tru64 systems produced since 1995.  I hope that
-	# covers most systems running today.  This code pipes the CPU
-	# types through head -n 1, so we only detect the type of CPU 0.
-	ALPHA_CPU_TYPE=`/usr/sbin/psrinfo -v | sed -n -e 's/^  The alpha \(.*\) processor.*$/\1/p' | head -n 1`
-	case $ALPHA_CPU_TYPE in
-	    "EV4 (21064)")
-		UNAME_MACHINE=alpha ;;
-	    "EV4.5 (21064)")
-		UNAME_MACHINE=alpha ;;
-	    "LCA4 (21066/21068)")
-		UNAME_MACHINE=alpha ;;
-	    "EV5 (21164)")
-		UNAME_MACHINE=alphaev5 ;;
-	    "EV5.6 (21164A)")
-		UNAME_MACHINE=alphaev56 ;;
-	    "EV5.6 (21164PC)")
-		UNAME_MACHINE=alphapca56 ;;
-	    "EV5.7 (21164PC)")
-		UNAME_MACHINE=alphapca57 ;;
-	    "EV6 (21264)")
-		UNAME_MACHINE=alphaev6 ;;
-	    "EV6.7 (21264A)")
-		UNAME_MACHINE=alphaev67 ;;
-	    "EV6.8CB (21264C)")
-		UNAME_MACHINE=alphaev68 ;;
-	    "EV6.8AL (21264B)")
-		UNAME_MACHINE=alphaev68 ;;
-	    "EV6.8CX (21264D)")
-		UNAME_MACHINE=alphaev68 ;;
-	    "EV6.9A (21264/EV69A)")
-		UNAME_MACHINE=alphaev69 ;;
-	    "EV7 (21364)")
-		UNAME_MACHINE=alphaev7 ;;
-	    "EV7.9 (21364A)")
-		UNAME_MACHINE=alphaev79 ;;
-	esac
-	# A Pn.n version is a patched version.
-	# A Vn.n version is a released version.
-	# A Tn.n version is a released field test version.
-	# A Xn.n version is an unreleased experimental baselevel.
-	# 1.2 uses "1.2" for uname -r.
-	OSF_REL=`echo "$UNAME_RELEASE" | sed -e 's/^[PVTX]//' | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz`
-	GUESS=$UNAME_MACHINE-dec-osf$OSF_REL
-	;;
-    Amiga*:UNIX_System_V:4.0:*)
-	GUESS=m68k-unknown-sysv4
-	;;
-    *:[Aa]miga[Oo][Ss]:*:*)
-	GUESS=$UNAME_MACHINE-unknown-amigaos
-	;;
-    *:[Mm]orph[Oo][Ss]:*:*)
-	GUESS=$UNAME_MACHINE-unknown-morphos
-	;;
-    *:OS/390:*:*)
-	GUESS=i370-ibm-openedition
-	;;
-    *:z/VM:*:*)
-	GUESS=s390-ibm-zvmoe
-	;;
-    *:OS400:*:*)
-	GUESS=powerpc-ibm-os400
-	;;
-    arm:RISC*:1.[012]*:*|arm:riscix:1.[012]*:*)
-	GUESS=arm-acorn-riscix$UNAME_RELEASE
-	;;
-    arm*:riscos:*:*|arm*:RISCOS:*:*)
-	GUESS=arm-unknown-riscos
-	;;
-    SR2?01:HI-UX/MPP:*:* | SR8000:HI-UX/MPP:*:*)
-	GUESS=hppa1.1-hitachi-hiuxmpp
-	;;
-    Pyramid*:OSx*:*:* | MIS*:OSx*:*:* | MIS*:SMP_DC-OSx*:*:*)
-	# akee@wpdis03.wpafb.af.mil (Earle F. Ake) contributed MIS and NILE.
-	case `(/bin/universe) 2>/dev/null` in
-	    att) GUESS=pyramid-pyramid-sysv3 ;;
-	    *)   GUESS=pyramid-pyramid-bsd   ;;
-	esac
-	;;
-    NILE*:*:*:dcosx)
-	GUESS=pyramid-pyramid-svr4
-	;;
-    DRS?6000:unix:4.0:6*)
-	GUESS=sparc-icl-nx6
-	;;
-    DRS?6000:UNIX_SV:4.2*:7* | DRS?6000:isis:4.2*:7*)
-	case `/usr/bin/uname -p` in
-	    sparc) GUESS=sparc-icl-nx7 ;;
-	esac
-	;;
-    s390x:SunOS:*:*)
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=$UNAME_MACHINE-ibm-solaris2$SUN_REL
-	;;
-    sun4H:SunOS:5.*:*)
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=sparc-hal-solaris2$SUN_REL
-	;;
-    sun4*:SunOS:5.*:* | tadpole*:SunOS:5.*:*)
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=sparc-sun-solaris2$SUN_REL
-	;;
-    i86pc:AuroraUX:5.*:* | i86xen:AuroraUX:5.*:*)
-	GUESS=i386-pc-auroraux$UNAME_RELEASE
-	;;
-    i86pc:SunOS:5.*:* | i86xen:SunOS:5.*:*)
-	set_cc_for_build
-	SUN_ARCH=i386
-	# If there is a compiler, see if it is configured for 64-bit objects.
-	# Note that the Sun cc does not turn __LP64__ into 1 like gcc does.
-	# This test works for both compilers.
-	if test "$CC_FOR_BUILD" != no_compiler_found; then
-	    if (echo '#ifdef __amd64'; echo IS_64BIT_ARCH; echo '#endif') | \
-		(CCOPTS="" $CC_FOR_BUILD -m64 -E - 2>/dev/null) | \
-		grep IS_64BIT_ARCH >/dev/null
-	    then
-		SUN_ARCH=x86_64
-	    fi
-	fi
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=$SUN_ARCH-pc-solaris2$SUN_REL
-	;;
-    sun4*:SunOS:6*:*)
-	# According to config.sub, this is the proper way to canonicalize
-	# SunOS6.  Hard to guess exactly what SunOS6 will be like, but
-	# it's likely to be more like Solaris than SunOS4.
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=sparc-sun-solaris3$SUN_REL
-	;;
-    sun4*:SunOS:*:*)
-	case `/usr/bin/arch -k` in
-	    Series*|S4*)
-		UNAME_RELEASE=`uname -v`
-		;;
-	esac
-	# Japanese Language versions have a version number like `4.1.3-JL'.
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/-/_/'`
-	GUESS=sparc-sun-sunos$SUN_REL
-	;;
-    sun3*:SunOS:*:*)
-	GUESS=m68k-sun-sunos$UNAME_RELEASE
-	;;
-    sun*:*:4.2BSD:*)
-	UNAME_RELEASE=`(sed 1q /etc/motd | awk '{print substr($5,1,3)}') 2>/dev/null`
-	test "x$UNAME_RELEASE" = x && UNAME_RELEASE=3
-	case `/bin/arch` in
-	    sun3)
-		GUESS=m68k-sun-sunos$UNAME_RELEASE
-		;;
-	    sun4)
-		GUESS=sparc-sun-sunos$UNAME_RELEASE
-		;;
-	esac
-	;;
-    aushp:SunOS:*:*)
-	GUESS=sparc-auspex-sunos$UNAME_RELEASE
-	;;
-    # The situation for MiNT is a little confusing.  The machine name
-    # can be virtually everything (everything which is not
-    # "atarist" or "atariste" at least should have a processor
-    # > m68000).  The system name ranges from "MiNT" over "FreeMiNT"
-    # to the lowercase version "mint" (or "freemint").  Finally
-    # the system name "TOS" denotes a system which is actually not
-    # MiNT.  But MiNT is downward compatible to TOS, so this should
-    # be no problem.
-    atarist[e]:*MiNT:*:* | atarist[e]:*mint:*:* | atarist[e]:*TOS:*:*)
-	GUESS=m68k-atari-mint$UNAME_RELEASE
-	;;
-    atari*:*MiNT:*:* | atari*:*mint:*:* | atarist[e]:*TOS:*:*)
-	GUESS=m68k-atari-mint$UNAME_RELEASE
-	;;
-    *falcon*:*MiNT:*:* | *falcon*:*mint:*:* | *falcon*:*TOS:*:*)
-	GUESS=m68k-atari-mint$UNAME_RELEASE
-	;;
-    milan*:*MiNT:*:* | milan*:*mint:*:* | *milan*:*TOS:*:*)
-	GUESS=m68k-milan-mint$UNAME_RELEASE
-	;;
-    hades*:*MiNT:*:* | hades*:*mint:*:* | *hades*:*TOS:*:*)
-	GUESS=m68k-hades-mint$UNAME_RELEASE
-	;;
-    *:*MiNT:*:* | *:*mint:*:* | *:*TOS:*:*)
-	GUESS=m68k-unknown-mint$UNAME_RELEASE
-	;;
-    m68k:machten:*:*)
-	GUESS=m68k-apple-machten$UNAME_RELEASE
-	;;
-    powerpc:machten:*:*)
-	GUESS=powerpc-apple-machten$UNAME_RELEASE
-	;;
-    RISC*:Mach:*:*)
-	GUESS=mips-dec-mach_bsd4.3
-	;;
-    RISC*:ULTRIX:*:*)
-	GUESS=mips-dec-ultrix$UNAME_RELEASE
-	;;
-    VAX*:ULTRIX*:*:*)
-	GUESS=vax-dec-ultrix$UNAME_RELEASE
-	;;
-    2020:CLIX:*:* | 2430:CLIX:*:*)
-	GUESS=clipper-intergraph-clix$UNAME_RELEASE
-	;;
-    mips:*:*:UMIPS | mips:*:*:RISCos)
-	set_cc_for_build
-	sed 's/^	//' << EOF > "$dummy.c"
-#ifdef __cplusplus
-#include <stdio.h>  /* for printf() prototype */
-	int main (int argc, char *argv[]) {
-#else
-	int main (argc, argv) int argc; char *argv[]; {
-#endif
-	#if defined (host_mips) && defined (MIPSEB)
-	#if defined (SYSTYPE_SYSV)
-	  printf ("mips-mips-riscos%ssysv\\n", argv[1]); exit (0);
-	#endif
-	#if defined (SYSTYPE_SVR4)
-	  printf ("mips-mips-riscos%ssvr4\\n", argv[1]); exit (0);
-	#endif
-	#if defined (SYSTYPE_BSD43) || defined(SYSTYPE_BSD)
-	  printf ("mips-mips-riscos%sbsd\\n", argv[1]); exit (0);
-	#endif
-	#endif
-	  exit (-1);
-	}
-EOF
-	$CC_FOR_BUILD -o "$dummy" "$dummy.c" &&
-	  dummyarg=`echo "$UNAME_RELEASE" | sed -n 's/\([0-9]*\).*/\1/p'` &&
-	  SYSTEM_NAME=`"$dummy" "$dummyarg"` &&
-	    { echo "$SYSTEM_NAME"; exit; }
-	GUESS=mips-mips-riscos$UNAME_RELEASE
-	;;
-    Motorola:PowerMAX_OS:*:*)
-	GUESS=powerpc-motorola-powermax
-	;;
-    Motorola:*:4.3:PL8-*)
-	GUESS=powerpc-harris-powermax
-	;;
-    Night_Hawk:*:*:PowerMAX_OS | Synergy:PowerMAX_OS:*:*)
-	GUESS=powerpc-harris-powermax
-	;;
-    Night_Hawk:Power_UNIX:*:*)
-	GUESS=powerpc-harris-powerunix
-	;;
-    m88k:CX/UX:7*:*)
-	GUESS=m88k-harris-cxux7
-	;;
-    m88k:*:4*:R4*)
-	GUESS=m88k-motorola-sysv4
-	;;
-    m88k:*:3*:R3*)
-	GUESS=m88k-motorola-sysv3
-	;;
-    AViiON:dgux:*:*)
-	# DG/UX returns AViiON for all architectures
-	UNAME_PROCESSOR=`/usr/bin/uname -p`
-	if test "$UNAME_PROCESSOR" = mc88100 || test "$UNAME_PROCESSOR" = mc88110
-	then
-	    if test "$TARGET_BINARY_INTERFACE"x = m88kdguxelfx || \
-	       test "$TARGET_BINARY_INTERFACE"x = x
-	    then
-		GUESS=m88k-dg-dgux$UNAME_RELEASE
-	    else
-		GUESS=m88k-dg-dguxbcs$UNAME_RELEASE
-	    fi
-	else
-	    GUESS=i586-dg-dgux$UNAME_RELEASE
-	fi
-	;;
-    M88*:DolphinOS:*:*)	# DolphinOS (SVR3)
-	GUESS=m88k-dolphin-sysv3
-	;;
-    M88*:*:R3*:*)
-	# Delta 88k system running SVR3
-	GUESS=m88k-motorola-sysv3
-	;;
-    XD88*:*:*:*) # Tektronix XD88 system running UTekV (SVR3)
-	GUESS=m88k-tektronix-sysv3
-	;;
-    Tek43[0-9][0-9]:UTek:*:*) # Tektronix 4300 system running UTek (BSD)
-	GUESS=m68k-tektronix-bsd
-	;;
-    *:IRIX*:*:*)
-	IRIX_REL=`echo "$UNAME_RELEASE" | sed -e 's/-/_/g'`
-	GUESS=mips-sgi-irix$IRIX_REL
-	;;
-    ????????:AIX?:[12].1:2)   # AIX 2.2.1 or AIX 2.1.1 is RT/PC AIX.
-	GUESS=romp-ibm-aix    # uname -m gives an 8 hex-code CPU id
-	;;                    # Note that: echo "'`uname -s`'" gives 'AIX '
-    i*86:AIX:*:*)
-	GUESS=i386-ibm-aix
-	;;
-    ia64:AIX:*:*)
-	if test -x /usr/bin/oslevel ; then
-		IBM_REV=`/usr/bin/oslevel`
-	else
-		IBM_REV=$UNAME_VERSION.$UNAME_RELEASE
-	fi
-	GUESS=$UNAME_MACHINE-ibm-aix$IBM_REV
-	;;
-    *:AIX:2:3)
-	if grep bos325 /usr/include/stdio.h >/dev/null 2>&1; then
-		set_cc_for_build
-		sed 's/^		//' << EOF > "$dummy.c"
-		#include <sys/systemcfg.h>
-
-		main()
-			{
-			if (!__power_pc())
-				exit(1);
-			puts("powerpc-ibm-aix3.2.5");
-			exit(0);
-			}
-EOF
-		if $CC_FOR_BUILD -o "$dummy" "$dummy.c" && SYSTEM_NAME=`"$dummy"`
-		then
-			GUESS=$SYSTEM_NAME
-		else
-			GUESS=rs6000-ibm-aix3.2.5
-		fi
-	elif grep bos324 /usr/include/stdio.h >/dev/null 2>&1; then
-		GUESS=rs6000-ibm-aix3.2.4
-	else
-		GUESS=rs6000-ibm-aix3.2
-	fi
-	;;
-    *:AIX:*:[4567])
-	IBM_CPU_ID=`/usr/sbin/lsdev -C -c processor -S available | sed 1q | awk '{ print $1 }'`
-	if /usr/sbin/lsattr -El "$IBM_CPU_ID" | grep ' POWER' >/dev/null 2>&1; then
-		IBM_ARCH=rs6000
-	else
-		IBM_ARCH=powerpc
-	fi
-	if test -x /usr/bin/lslpp ; then
-		IBM_REV=`/usr/bin/lslpp -Lqc bos.rte.libc | \
-			   awk -F: '{ print $3 }' | sed s/[0-9]*$/0/`
-	else
-		IBM_REV=$UNAME_VERSION.$UNAME_RELEASE
-	fi
-	GUESS=$IBM_ARCH-ibm-aix$IBM_REV
-	;;
-    *:AIX:*:*)
-	GUESS=rs6000-ibm-aix
-	;;
-    ibmrt:4.4BSD:*|romp-ibm:4.4BSD:*)
-	GUESS=romp-ibm-bsd4.4
-	;;
-    ibmrt:*BSD:*|romp-ibm:BSD:*)            # covers RT/PC BSD and
-	GUESS=romp-ibm-bsd$UNAME_RELEASE    # 4.3 with uname added to
-	;;                                  # report: romp-ibm BSD 4.3
-    *:BOSX:*:*)
-	GUESS=rs6000-bull-bosx
-	;;
-    DPX/2?00:B.O.S.:*:*)
-	GUESS=m68k-bull-sysv3
-	;;
-    9000/[34]??:4.3bsd:1.*:*)
-	GUESS=m68k-hp-bsd
-	;;
-    hp300:4.4BSD:*:* | 9000/[34]??:4.3bsd:2.*:*)
-	GUESS=m68k-hp-bsd4.4
-	;;
-    9000/[34678]??:HP-UX:*:*)
-	HPUX_REV=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*.[0B]*//'`
-	case $UNAME_MACHINE in
-	    9000/31?)            HP_ARCH=m68000 ;;
-	    9000/[34]??)         HP_ARCH=m68k ;;
-	    9000/[678][0-9][0-9])
-		if test -x /usr/bin/getconf; then
-		    sc_cpu_version=`/usr/bin/getconf SC_CPU_VERSION 2>/dev/null`
-		    sc_kernel_bits=`/usr/bin/getconf SC_KERNEL_BITS 2>/dev/null`
-		    case $sc_cpu_version in
-		      523) HP_ARCH=hppa1.0 ;; # CPU_PA_RISC1_0
-		      528) HP_ARCH=hppa1.1 ;; # CPU_PA_RISC1_1
-		      532)                      # CPU_PA_RISC2_0
-			case $sc_kernel_bits in
-			  32) HP_ARCH=hppa2.0n ;;
-			  64) HP_ARCH=hppa2.0w ;;
-			  '') HP_ARCH=hppa2.0 ;;   # HP-UX 10.20
-			esac ;;
-		    esac
-		fi
-		if test "$HP_ARCH" = ""; then
-		    set_cc_for_build
-		    sed 's/^		//' << EOF > "$dummy.c"
-
-		#define _HPUX_SOURCE
-		#include <stdlib.h>
-		#include <unistd.h>
-
-		int main ()
-		{
-		#if defined(_SC_KERNEL_BITS)
-		    long bits = sysconf(_SC_KERNEL_BITS);
-		#endif
-		    long cpu  = sysconf (_SC_CPU_VERSION);
-
-		    switch (cpu)
-			{
-			case CPU_PA_RISC1_0: puts ("hppa1.0"); break;
-			case CPU_PA_RISC1_1: puts ("hppa1.1"); break;
-			case CPU_PA_RISC2_0:
-		#if defined(_SC_KERNEL_BITS)
-			    switch (bits)
-				{
-				case 64: puts ("hppa2.0w"); break;
-				case 32: puts ("hppa2.0n"); break;
-				default: puts ("hppa2.0"); break;
-				} break;
-		#else  /* !defined(_SC_KERNEL_BITS) */
-			    puts ("hppa2.0"); break;
-		#endif
-			default: puts ("hppa1.0"); break;
-			}
-		    exit (0);
-		}
-EOF
-		    (CCOPTS="" $CC_FOR_BUILD -o "$dummy" "$dummy.c" 2>/dev/null) && HP_ARCH=`"$dummy"`
-		    test -z "$HP_ARCH" && HP_ARCH=hppa
-		fi ;;
-	esac
-	if test "$HP_ARCH" = hppa2.0w
-	then
-	    set_cc_for_build
-
-	    # hppa2.0w-hp-hpux* has a 64-bit kernel and a compiler generating
-	    # 32-bit code.  hppa64-hp-hpux* has the same kernel and a compiler
-	    # generating 64-bit code.  GNU and HP use different nomenclature:
-	    #
-	    # $ CC_FOR_BUILD=cc ./config.guess
-	    # => hppa2.0w-hp-hpux11.23
-	    # $ CC_FOR_BUILD="cc +DA2.0w" ./config.guess
-	    # => hppa64-hp-hpux11.23
-
-	    if echo __LP64__ | (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) |
-		grep -q __LP64__
-	    then
-		HP_ARCH=hppa2.0w
-	    else
-		HP_ARCH=hppa64
-	    fi
-	fi
-	GUESS=$HP_ARCH-hp-hpux$HPUX_REV
-	;;
-    ia64:HP-UX:*:*)
-	HPUX_REV=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*.[0B]*//'`
-	GUESS=ia64-hp-hpux$HPUX_REV
-	;;
-    3050*:HI-UX:*:*)
-	set_cc_for_build
-	sed 's/^	//' << EOF > "$dummy.c"
-	#include <unistd.h>
-	int
-	main ()
-	{
-	  long cpu = sysconf (_SC_CPU_VERSION);
-	  /* The order matters, because CPU_IS_HP_MC68K erroneously returns
-	     true for CPU_PA_RISC1_0.  CPU_IS_PA_RISC returns correct
-	     results, however.  */
-	  if (CPU_IS_PA_RISC (cpu))
-	    {
-	      switch (cpu)
-		{
-		  case CPU_PA_RISC1_0: puts ("hppa1.0-hitachi-hiuxwe2"); break;
-		  case CPU_PA_RISC1_1: puts ("hppa1.1-hitachi-hiuxwe2"); break;
-		  case CPU_PA_RISC2_0: puts ("hppa2.0-hitachi-hiuxwe2"); break;
-		  default: puts ("hppa-hitachi-hiuxwe2"); break;
-		}
-	    }
-	  else if (CPU_IS_HP_MC68K (cpu))
-	    puts ("m68k-hitachi-hiuxwe2");
-	  else puts ("unknown-hitachi-hiuxwe2");
-	  exit (0);
-	}
-EOF
-	$CC_FOR_BUILD -o "$dummy" "$dummy.c" && SYSTEM_NAME=`"$dummy"` &&
-		{ echo "$SYSTEM_NAME"; exit; }
-	GUESS=unknown-hitachi-hiuxwe2
-	;;
-    9000/7??:4.3bsd:*:* | 9000/8?[79]:4.3bsd:*:*)
-	GUESS=hppa1.1-hp-bsd
-	;;
-    9000/8??:4.3bsd:*:*)
-	GUESS=hppa1.0-hp-bsd
-	;;
-    *9??*:MPE/iX:*:* | *3000*:MPE/iX:*:*)
-	GUESS=hppa1.0-hp-mpeix
-	;;
-    hp7??:OSF1:*:* | hp8?[79]:OSF1:*:*)
-	GUESS=hppa1.1-hp-osf
-	;;
-    hp8??:OSF1:*:*)
-	GUESS=hppa1.0-hp-osf
-	;;
-    i*86:OSF1:*:*)
-	if test -x /usr/sbin/sysversion ; then
-	    GUESS=$UNAME_MACHINE-unknown-osf1mk
-	else
-	    GUESS=$UNAME_MACHINE-unknown-osf1
-	fi
-	;;
-    parisc*:Lites*:*:*)
-	GUESS=hppa1.1-hp-lites
-	;;
-    C1*:ConvexOS:*:* | convex:ConvexOS:C1*:*)
-	GUESS=c1-convex-bsd
-	;;
-    C2*:ConvexOS:*:* | convex:ConvexOS:C2*:*)
-	if getsysinfo -f scalar_acc
-	then echo c32-convex-bsd
-	else echo c2-convex-bsd
-	fi
-	exit ;;
-    C34*:ConvexOS:*:* | convex:ConvexOS:C34*:*)
-	GUESS=c34-convex-bsd
-	;;
-    C38*:ConvexOS:*:* | convex:ConvexOS:C38*:*)
-	GUESS=c38-convex-bsd
-	;;
-    C4*:ConvexOS:*:* | convex:ConvexOS:C4*:*)
-	GUESS=c4-convex-bsd
-	;;
-    CRAY*Y-MP:*:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=ymp-cray-unicos$CRAY_REL
-	;;
-    CRAY*[A-Z]90:*:*:*)
-	echo "$UNAME_MACHINE"-cray-unicos"$UNAME_RELEASE" \
-	| sed -e 's/CRAY.*\([A-Z]90\)/\1/' \
-	      -e y/ABCDEFGHIJKLMNOPQRSTUVWXYZ/abcdefghijklmnopqrstuvwxyz/ \
-	      -e 's/\.[^.]*$/.X/'
-	exit ;;
-    CRAY*TS:*:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=t90-cray-unicos$CRAY_REL
-	;;
-    CRAY*T3E:*:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=alphaev5-cray-unicosmk$CRAY_REL
-	;;
-    CRAY*SV1:*:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=sv1-cray-unicos$CRAY_REL
-	;;
-    *:UNICOS/mp:*:*)
-	CRAY_REL=`echo "$UNAME_RELEASE" | sed -e 's/\.[^.]*$/.X/'`
-	GUESS=craynv-cray-unicosmp$CRAY_REL
-	;;
-    F30[01]:UNIX_System_V:*:* | F700:UNIX_System_V:*:*)
-	FUJITSU_PROC=`uname -m | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz`
-	FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'`
-	FUJITSU_REL=`echo "$UNAME_RELEASE" | sed -e 's/ /_/'`
-	GUESS=${FUJITSU_PROC}-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}
-	;;
-    5000:UNIX_System_V:4.*:*)
-	FUJITSU_SYS=`uname -p | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/\///'`
-	FUJITSU_REL=`echo "$UNAME_RELEASE" | tr ABCDEFGHIJKLMNOPQRSTUVWXYZ abcdefghijklmnopqrstuvwxyz | sed -e 's/ /_/'`
-	GUESS=sparc-fujitsu-${FUJITSU_SYS}${FUJITSU_REL}
-	;;
-    i*86:BSD/386:*:* | i*86:BSD/OS:*:* | *:Ascend\ Embedded/OS:*:*)
-	GUESS=$UNAME_MACHINE-pc-bsdi$UNAME_RELEASE
-	;;
-    sparc*:BSD/OS:*:*)
-	GUESS=sparc-unknown-bsdi$UNAME_RELEASE
-	;;
-    *:BSD/OS:*:*)
-	GUESS=$UNAME_MACHINE-unknown-bsdi$UNAME_RELEASE
-	;;
-    arm:FreeBSD:*:*)
-	UNAME_PROCESSOR=`uname -p`
-	set_cc_for_build
-	if echo __ARM_PCS_VFP | $CC_FOR_BUILD -E - 2>/dev/null \
-	    | grep -q __ARM_PCS_VFP
-	then
-	    FREEBSD_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	    GUESS=$UNAME_PROCESSOR-unknown-freebsd$FREEBSD_REL-gnueabi
-	else
-	    FREEBSD_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	    GUESS=$UNAME_PROCESSOR-unknown-freebsd$FREEBSD_REL-gnueabihf
-	fi
-	;;
-    *:FreeBSD:*:*)
-	UNAME_PROCESSOR=`/usr/bin/uname -p`
-	case $UNAME_PROCESSOR in
-	    amd64)
-		UNAME_PROCESSOR=x86_64 ;;
-	    i386)
-		UNAME_PROCESSOR=i586 ;;
-	esac
-	FREEBSD_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	GUESS=$UNAME_PROCESSOR-unknown-freebsd$FREEBSD_REL
-	;;
-    i*:CYGWIN*:*)
-	GUESS=$UNAME_MACHINE-pc-cygwin
-	;;
-    *:MINGW64*:*)
-	GUESS=$UNAME_MACHINE-pc-mingw64
-	;;
-    *:MINGW*:*)
-	GUESS=$UNAME_MACHINE-pc-mingw32
-	;;
-    *:MSYS*:*)
-	GUESS=$UNAME_MACHINE-pc-msys
-	;;
-    i*:PW*:*)
-	GUESS=$UNAME_MACHINE-pc-pw32
-	;;
-    *:SerenityOS:*:*)
-        GUESS=$UNAME_MACHINE-pc-serenity
-        ;;
-    *:Interix*:*)
-	case $UNAME_MACHINE in
-	    x86)
-		GUESS=i586-pc-interix$UNAME_RELEASE
-		;;
-	    authenticamd | genuineintel | EM64T)
-		GUESS=x86_64-unknown-interix$UNAME_RELEASE
-		;;
-	    IA64)
-		GUESS=ia64-unknown-interix$UNAME_RELEASE
-		;;
-	esac ;;
-    i*:UWIN*:*)
-	GUESS=$UNAME_MACHINE-pc-uwin
-	;;
-    amd64:CYGWIN*:*:* | x86_64:CYGWIN*:*:*)
-	GUESS=x86_64-pc-cygwin
-	;;
-    prep*:SunOS:5.*:*)
-	SUN_REL=`echo "$UNAME_RELEASE" | sed -e 's/[^.]*//'`
-	GUESS=powerpcle-unknown-solaris2$SUN_REL
-	;;
-    *:GNU:*:*)
-	# the GNU system
-	GNU_ARCH=`echo "$UNAME_MACHINE" | sed -e 's,[-/].*$,,'`
-	GNU_REL=`echo "$UNAME_RELEASE" | sed -e 's,/.*$,,'`
-	GUESS=$GNU_ARCH-unknown-$LIBC$GNU_REL
-	;;
-    *:GNU/*:*:*)
-	# other systems with GNU libc and userland
-	GNU_SYS=`echo "$UNAME_SYSTEM" | sed 's,^[^/]*/,,' | tr "[:upper:]" "[:lower:]"`
-	GNU_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	GUESS=$UNAME_MACHINE-unknown-$GNU_SYS$GNU_REL-$LIBC
-	;;
-    x86_64:[Mm]anagarm:*:*|i?86:[Mm]anagarm:*:*)
-	GUESS="$UNAME_MACHINE-pc-managarm-mlibc"
-	;;
-    *:[Mm]anagarm:*:*)
-	GUESS="$UNAME_MACHINE-unknown-managarm-mlibc"
-	;;
-    *:Minix:*:*)
-	GUESS=$UNAME_MACHINE-unknown-minix
-	;;
-    aarch64:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    aarch64_be:Linux:*:*)
-	UNAME_MACHINE=aarch64_be
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    alpha:Linux:*:*)
-	case `sed -n '/^cpu model/s/^.*: \(.*\)/\1/p' /proc/cpuinfo 2>/dev/null` in
-	  EV5)   UNAME_MACHINE=alphaev5 ;;
-	  EV56)  UNAME_MACHINE=alphaev56 ;;
-	  PCA56) UNAME_MACHINE=alphapca56 ;;
-	  PCA57) UNAME_MACHINE=alphapca56 ;;
-	  EV6)   UNAME_MACHINE=alphaev6 ;;
-	  EV67)  UNAME_MACHINE=alphaev67 ;;
-	  EV68*) UNAME_MACHINE=alphaev68 ;;
-	esac
-	objdump --private-headers /bin/sh | grep -q ld.so.1
-	if test "$?" = 0 ; then LIBC=gnulibc1 ; fi
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    arc:Linux:*:* | arceb:Linux:*:* | arc32:Linux:*:* | arc64:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    arm*:Linux:*:*)
-	set_cc_for_build
-	if echo __ARM_EABI__ | $CC_FOR_BUILD -E - 2>/dev/null \
-	    | grep -q __ARM_EABI__
-	then
-	    GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	else
-	    if echo __ARM_PCS_VFP | $CC_FOR_BUILD -E - 2>/dev/null \
-		| grep -q __ARM_PCS_VFP
-	    then
-		GUESS=$UNAME_MACHINE-unknown-linux-${LIBC}eabi
-	    else
-		GUESS=$UNAME_MACHINE-unknown-linux-${LIBC}eabihf
-	    fi
-	fi
-	;;
-    avr32*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    cris:Linux:*:*)
-	GUESS=$UNAME_MACHINE-axis-linux-$LIBC
-	;;
-    crisv32:Linux:*:*)
-	GUESS=$UNAME_MACHINE-axis-linux-$LIBC
-	;;
-    e2k:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    frv:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    hexagon:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    i*86:Linux:*:*)
-	GUESS=$UNAME_MACHINE-pc-linux-$LIBC
-	;;
-    ia64:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    k1om:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    loongarch32:Linux:*:* | loongarch64:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    m32r*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    m68*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    mips:Linux:*:* | mips64:Linux:*:*)
-	set_cc_for_build
-	IS_GLIBC=0
-	test x"${LIBC}" = xgnu && IS_GLIBC=1
-	sed 's/^	//' << EOF > "$dummy.c"
-	#undef CPU
-	#undef mips
-	#undef mipsel
-	#undef mips64
-	#undef mips64el
-	#if ${IS_GLIBC} && defined(_ABI64)
-	LIBCABI=gnuabi64
-	#else
-	#if ${IS_GLIBC} && defined(_ABIN32)
-	LIBCABI=gnuabin32
-	#else
-	LIBCABI=${LIBC}
-	#endif
-	#endif
-
-	#if ${IS_GLIBC} && defined(__mips64) && defined(__mips_isa_rev) && __mips_isa_rev>=6
-	CPU=mipsisa64r6
-	#else
-	#if ${IS_GLIBC} && !defined(__mips64) && defined(__mips_isa_rev) && __mips_isa_rev>=6
-	CPU=mipsisa32r6
-	#else
-	#if defined(__mips64)
-	CPU=mips64
-	#else
-	CPU=mips
-	#endif
-	#endif
-	#endif
-
-	#if defined(__MIPSEL__) || defined(__MIPSEL) || defined(_MIPSEL) || defined(MIPSEL)
-	MIPS_ENDIAN=el
-	#else
-	#if defined(__MIPSEB__) || defined(__MIPSEB) || defined(_MIPSEB) || defined(MIPSEB)
-	MIPS_ENDIAN=
-	#else
-	MIPS_ENDIAN=
-	#endif
-	#endif
-EOF
-	cc_set_vars=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^CPU\|^MIPS_ENDIAN\|^LIBCABI'`
-	eval "$cc_set_vars"
-	test "x$CPU" != x && { echo "$CPU${MIPS_ENDIAN}-unknown-linux-$LIBCABI"; exit; }
-	;;
-    mips64el:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    openrisc*:Linux:*:*)
-	GUESS=or1k-unknown-linux-$LIBC
-	;;
-    or32:Linux:*:* | or1k*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    padre:Linux:*:*)
-	GUESS=sparc-unknown-linux-$LIBC
-	;;
-    parisc64:Linux:*:* | hppa64:Linux:*:*)
-	GUESS=hppa64-unknown-linux-$LIBC
-	;;
-    parisc:Linux:*:* | hppa:Linux:*:*)
-	# Look for CPU level
-	case `grep '^cpu[^a-z]*:' /proc/cpuinfo 2>/dev/null | cut -d' ' -f2` in
-	  PA7*) GUESS=hppa1.1-unknown-linux-$LIBC ;;
-	  PA8*) GUESS=hppa2.0-unknown-linux-$LIBC ;;
-	  *)    GUESS=hppa-unknown-linux-$LIBC ;;
-	esac
-	;;
-    ppc64:Linux:*:*)
-	GUESS=powerpc64-unknown-linux-$LIBC
-	;;
-    ppc:Linux:*:*)
-	GUESS=powerpc-unknown-linux-$LIBC
-	;;
-    ppc64le:Linux:*:*)
-	GUESS=powerpc64le-unknown-linux-$LIBC
-	;;
-    ppcle:Linux:*:*)
-	GUESS=powerpcle-unknown-linux-$LIBC
-	;;
-    riscv32:Linux:*:* | riscv32be:Linux:*:* | riscv64:Linux:*:* | riscv64be:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    s390:Linux:*:* | s390x:Linux:*:*)
-	GUESS=$UNAME_MACHINE-ibm-linux-$LIBC
-	;;
-    sh64*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    sh*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    sparc:Linux:*:* | sparc64:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    tile*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    vax:Linux:*:*)
-	GUESS=$UNAME_MACHINE-dec-linux-$LIBC
-	;;
-    x86_64:Linux:*:*)
-	set_cc_for_build
-	CPU=$UNAME_MACHINE
-	LIBCABI=$LIBC
-	if test "$CC_FOR_BUILD" != no_compiler_found; then
-	    ABI=64
-	    sed 's/^	    //' << EOF > "$dummy.c"
-	    #ifdef __i386__
-	    ABI=x86
-	    #else
-	    #ifdef __ILP32__
-	    ABI=x32
-	    #endif
-	    #endif
-EOF
-	    cc_set_abi=`$CC_FOR_BUILD -E "$dummy.c" 2>/dev/null | grep '^ABI' | sed 's, ,,g'`
-	    eval "$cc_set_abi"
-	    case $ABI in
-		x86) CPU=i686 ;;
-		x32) LIBCABI=${LIBC}x32 ;;
-	    esac
-	fi
-	GUESS=$CPU-pc-linux-$LIBCABI
-	;;
-    xtensa*:Linux:*:*)
-	GUESS=$UNAME_MACHINE-unknown-linux-$LIBC
-	;;
-    i*86:DYNIX/ptx:4*:*)
-	# ptx 4.0 does uname -s correctly, with DYNIX/ptx in there.
-	# earlier versions are messed up and put the nodename in both
-	# sysname and nodename.
-	GUESS=i386-sequent-sysv4
-	;;
-    i*86:UNIX_SV:4.2MP:2.*)
-	# Unixware is an offshoot of SVR4, but it has its own version
-	# number series starting with 2...
-	# I am not positive that other SVR4 systems won't match this,
-	# I just have to hope.  -- rms.
-	# Use sysv4.2uw... so that sysv4* matches it.
-	GUESS=$UNAME_MACHINE-pc-sysv4.2uw$UNAME_VERSION
-	;;
-    i*86:OS/2:*:*)
-	# If we were able to find `uname', then EMX Unix compatibility
-	# is probably installed.
-	GUESS=$UNAME_MACHINE-pc-os2-emx
-	;;
-    i*86:XTS-300:*:STOP)
-	GUESS=$UNAME_MACHINE-unknown-stop
-	;;
-    i*86:atheos:*:*)
-	GUESS=$UNAME_MACHINE-unknown-atheos
-	;;
-    i*86:syllable:*:*)
-	GUESS=$UNAME_MACHINE-pc-syllable
-	;;
-    i*86:LynxOS:2.*:* | i*86:LynxOS:3.[01]*:* | i*86:LynxOS:4.[02]*:*)
-	GUESS=i386-unknown-lynxos$UNAME_RELEASE
-	;;
-    i*86:*DOS:*:*)
-	GUESS=$UNAME_MACHINE-pc-msdosdjgpp
-	;;
-    i*86:*:4.*:*)
-	UNAME_REL=`echo "$UNAME_RELEASE" | sed 's/\/MP$//'`
-	if grep Novell /usr/include/link.h >/dev/null 2>/dev/null; then
-		GUESS=$UNAME_MACHINE-univel-sysv$UNAME_REL
-	else
-		GUESS=$UNAME_MACHINE-pc-sysv$UNAME_REL
-	fi
-	;;
-    i*86:*:5:[678]*)
-	# UnixWare 7.x, OpenUNIX and OpenServer 6.
-	case `/bin/uname -X | grep "^Machine"` in
-	    *486*)	     UNAME_MACHINE=i486 ;;
-	    *Pentium)	     UNAME_MACHINE=i586 ;;
-	    *Pent*|*Celeron) UNAME_MACHINE=i686 ;;
-	esac
-	GUESS=$UNAME_MACHINE-unknown-sysv${UNAME_RELEASE}${UNAME_SYSTEM}${UNAME_VERSION}
-	;;
-    i*86:*:3.2:*)
-	if test -f /usr/options/cb.name; then
-		UNAME_REL=`sed -n 's/.*Version //p' </usr/options/cb.name`
-		GUESS=$UNAME_MACHINE-pc-isc$UNAME_REL
-	elif /bin/uname -X 2>/dev/null >/dev/null ; then
-		UNAME_REL=`(/bin/uname -X|grep Release|sed -e 's/.*= //')`
-		(/bin/uname -X|grep i80486 >/dev/null) && UNAME_MACHINE=i486
-		(/bin/uname -X|grep '^Machine.*Pentium' >/dev/null) \
-			&& UNAME_MACHINE=i586
-		(/bin/uname -X|grep '^Machine.*Pent *II' >/dev/null) \
-			&& UNAME_MACHINE=i686
-		(/bin/uname -X|grep '^Machine.*Pentium Pro' >/dev/null) \
-			&& UNAME_MACHINE=i686
-		GUESS=$UNAME_MACHINE-pc-sco$UNAME_REL
-	else
-		GUESS=$UNAME_MACHINE-pc-sysv32
-	fi
-	;;
-    pc:*:*:*)
-	# Left here for compatibility:
-	# uname -m prints for DJGPP always 'pc', but it prints nothing about
-	# the processor, so we play safe by assuming i586.
-	# Note: whatever this is, it MUST be the same as what config.sub
-	# prints for the "djgpp" host, or else GDB configure will decide that
-	# this is a cross-build.
-	GUESS=i586-pc-msdosdjgpp
-	;;
-    Intel:Mach:3*:*)
-	GUESS=i386-pc-mach3
-	;;
-    paragon:*:*:*)
-	GUESS=i860-intel-osf1
-	;;
-    i860:*:4.*:*) # i860-SVR4
-	if grep Stardent /usr/include/sys/uadmin.h >/dev/null 2>&1 ; then
-	  GUESS=i860-stardent-sysv$UNAME_RELEASE    # Stardent Vistra i860-SVR4
-	else # Add other i860-SVR4 vendors below as they are discovered.
-	  GUESS=i860-unknown-sysv$UNAME_RELEASE     # Unknown i860-SVR4
-	fi
-	;;
-    mini*:CTIX:SYS*5:*)
-	# "miniframe"
-	GUESS=m68010-convergent-sysv
-	;;
-    mc68k:UNIX:SYSTEM5:3.51m)
-	GUESS=m68k-convergent-sysv
-	;;
-    M680?0:D-NIX:5.3:*)
-	GUESS=m68k-diab-dnix
-	;;
-    M68*:*:R3V[5678]*:*)
-	test -r /sysV68 && { echo 'm68k-motorola-sysv'; exit; } ;;
-    3[345]??:*:4.0:3.0 | 3[34]??A:*:4.0:3.0 | 3[34]??,*:*:4.0:3.0 | 3[34]??/*:*:4.0:3.0 | 4400:*:4.0:3.0 | 4850:*:4.0:3.0 | SKA40:*:4.0:3.0 | SDS2:*:4.0:3.0 | SHG2:*:4.0:3.0 | S7501*:*:4.0:3.0)
-	OS_REL=''
-	test -r /etc/.relid \
-	&& OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid`
-	/bin/uname -p 2>/dev/null | grep 86 >/dev/null \
-	  && { echo i486-ncr-sysv4.3"$OS_REL"; exit; }
-	/bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \
-	  && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } ;;
-    3[34]??:*:4.0:* | 3[34]??,*:*:4.0:*)
-	/bin/uname -p 2>/dev/null | grep 86 >/dev/null \
-	  && { echo i486-ncr-sysv4; exit; } ;;
-    NCR*:*:4.2:* | MPRAS*:*:4.2:*)
-	OS_REL='.3'
-	test -r /etc/.relid \
-	    && OS_REL=.`sed -n 's/[^ ]* [^ ]* \([0-9][0-9]\).*/\1/p' < /etc/.relid`
-	/bin/uname -p 2>/dev/null | grep 86 >/dev/null \
-	    && { echo i486-ncr-sysv4.3"$OS_REL"; exit; }
-	/bin/uname -p 2>/dev/null | /bin/grep entium >/dev/null \
-	    && { echo i586-ncr-sysv4.3"$OS_REL"; exit; }
-	/bin/uname -p 2>/dev/null | /bin/grep pteron >/dev/null \
-	    && { echo i586-ncr-sysv4.3"$OS_REL"; exit; } ;;
-    m68*:LynxOS:2.*:* | m68*:LynxOS:3.0*:*)
-	GUESS=m68k-unknown-lynxos$UNAME_RELEASE
-	;;
-    mc68030:UNIX_System_V:4.*:*)
-	GUESS=m68k-atari-sysv4
-	;;
-    TSUNAMI:LynxOS:2.*:*)
-	GUESS=sparc-unknown-lynxos$UNAME_RELEASE
-	;;
-    rs6000:LynxOS:2.*:*)
-	GUESS=rs6000-unknown-lynxos$UNAME_RELEASE
-	;;
-    PowerPC:LynxOS:2.*:* | PowerPC:LynxOS:3.[01]*:* | PowerPC:LynxOS:4.[02]*:*)
-	GUESS=powerpc-unknown-lynxos$UNAME_RELEASE
-	;;
-    SM[BE]S:UNIX_SV:*:*)
-	GUESS=mips-dde-sysv$UNAME_RELEASE
-	;;
-    RM*:ReliantUNIX-*:*:*)
-	GUESS=mips-sni-sysv4
-	;;
-    RM*:SINIX-*:*:*)
-	GUESS=mips-sni-sysv4
-	;;
-    *:SINIX-*:*:*)
-	if uname -p 2>/dev/null >/dev/null ; then
-		UNAME_MACHINE=`(uname -p) 2>/dev/null`
-		GUESS=$UNAME_MACHINE-sni-sysv4
-	else
-		GUESS=ns32k-sni-sysv
-	fi
-	;;
-    PENTIUM:*:4.0*:*)	# Unisys `ClearPath HMP IX 4000' SVR4/MP effort
-			# says <Richard.M.Bartel@ccMail.Census.GOV>
-	GUESS=i586-unisys-sysv4
-	;;
-    *:UNIX_System_V:4*:FTX*)
-	# From Gerald Hewes <hewes@openmarket.com>.
-	# How about differentiating between stratus architectures? -djm
-	GUESS=hppa1.1-stratus-sysv4
-	;;
-    *:*:*:FTX*)
-	# From seanf@swdc.stratus.com.
-	GUESS=i860-stratus-sysv4
-	;;
-    i*86:VOS:*:*)
-	# From Paul.Green@stratus.com.
-	GUESS=$UNAME_MACHINE-stratus-vos
-	;;
-    *:VOS:*:*)
-	# From Paul.Green@stratus.com.
-	GUESS=hppa1.1-stratus-vos
-	;;
-    mc68*:A/UX:*:*)
-	GUESS=m68k-apple-aux$UNAME_RELEASE
-	;;
-    news*:NEWS-OS:6*:*)
-	GUESS=mips-sony-newsos6
-	;;
-    R[34]000:*System_V*:*:* | R4000:UNIX_SYSV:*:* | R*000:UNIX_SV:*:*)
-	if test -d /usr/nec; then
-		GUESS=mips-nec-sysv$UNAME_RELEASE
-	else
-		GUESS=mips-unknown-sysv$UNAME_RELEASE
-	fi
-	;;
-    BeBox:BeOS:*:*)	# BeOS running on hardware made by Be, PPC only.
-	GUESS=powerpc-be-beos
-	;;
-    BeMac:BeOS:*:*)	# BeOS running on Mac or Mac clone, PPC only.
-	GUESS=powerpc-apple-beos
-	;;
-    BePC:BeOS:*:*)	# BeOS running on Intel PC compatible.
-	GUESS=i586-pc-beos
-	;;
-    BePC:Haiku:*:*)	# Haiku running on Intel PC compatible.
-	GUESS=i586-pc-haiku
-	;;
-    ppc:Haiku:*:*)	# Haiku running on Apple PowerPC
-	GUESS=powerpc-apple-haiku
-	;;
-    *:Haiku:*:*)	# Haiku modern gcc (not bound by BeOS compat)
-	GUESS=$UNAME_MACHINE-unknown-haiku
-	;;
-    SX-4:SUPER-UX:*:*)
-	GUESS=sx4-nec-superux$UNAME_RELEASE
-	;;
-    SX-5:SUPER-UX:*:*)
-	GUESS=sx5-nec-superux$UNAME_RELEASE
-	;;
-    SX-6:SUPER-UX:*:*)
-	GUESS=sx6-nec-superux$UNAME_RELEASE
-	;;
-    SX-7:SUPER-UX:*:*)
-	GUESS=sx7-nec-superux$UNAME_RELEASE
-	;;
-    SX-8:SUPER-UX:*:*)
-	GUESS=sx8-nec-superux$UNAME_RELEASE
-	;;
-    SX-8R:SUPER-UX:*:*)
-	GUESS=sx8r-nec-superux$UNAME_RELEASE
-	;;
-    SX-ACE:SUPER-UX:*:*)
-	GUESS=sxace-nec-superux$UNAME_RELEASE
-	;;
-    Power*:Rhapsody:*:*)
-	GUESS=powerpc-apple-rhapsody$UNAME_RELEASE
-	;;
-    *:Rhapsody:*:*)
-	GUESS=$UNAME_MACHINE-apple-rhapsody$UNAME_RELEASE
-	;;
-    arm64:Darwin:*:*)
-	GUESS=aarch64-apple-darwin$UNAME_RELEASE
-	;;
-    *:Darwin:*:*)
-	UNAME_PROCESSOR=`uname -p`
-	case $UNAME_PROCESSOR in
-	    unknown) UNAME_PROCESSOR=powerpc ;;
-	esac
-	if command -v xcode-select > /dev/null 2> /dev/null && \
-		! xcode-select --print-path > /dev/null 2> /dev/null ; then
-	    # Avoid executing cc if there is no toolchain installed as
-	    # cc will be a stub that puts up a graphical alert
-	    # prompting the user to install developer tools.
-	    CC_FOR_BUILD=no_compiler_found
-	else
-	    set_cc_for_build
-	fi
-	if test "$CC_FOR_BUILD" != no_compiler_found; then
-	    if (echo '#ifdef __LP64__'; echo IS_64BIT_ARCH; echo '#endif') | \
-		   (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \
-		   grep IS_64BIT_ARCH >/dev/null
-	    then
-		case $UNAME_PROCESSOR in
-		    i386) UNAME_PROCESSOR=x86_64 ;;
-		    powerpc) UNAME_PROCESSOR=powerpc64 ;;
-		esac
-	    fi
-	    # On 10.4-10.6 one might compile for PowerPC via gcc -arch ppc
-	    if (echo '#ifdef __POWERPC__'; echo IS_PPC; echo '#endif') | \
-		   (CCOPTS="" $CC_FOR_BUILD -E - 2>/dev/null) | \
-		   grep IS_PPC >/dev/null
-	    then
-		UNAME_PROCESSOR=powerpc
-	    fi
-	elif test "$UNAME_PROCESSOR" = i386 ; then
-	    # uname -m returns i386 or x86_64
-	    UNAME_PROCESSOR=$UNAME_MACHINE
-	fi
-	GUESS=$UNAME_PROCESSOR-apple-darwin$UNAME_RELEASE
-	;;
-    *:procnto*:*:* | *:QNX:[0123456789]*:*)
-	UNAME_PROCESSOR=`uname -p`
-	if test "$UNAME_PROCESSOR" = x86; then
-		UNAME_PROCESSOR=i386
-		UNAME_MACHINE=pc
-	fi
-	GUESS=$UNAME_PROCESSOR-$UNAME_MACHINE-nto-qnx$UNAME_RELEASE
-	;;
-    *:QNX:*:4*)
-	GUESS=i386-pc-qnx
-	;;
-    NEO-*:NONSTOP_KERNEL:*:*)
-	GUESS=neo-tandem-nsk$UNAME_RELEASE
-	;;
-    NSE-*:NONSTOP_KERNEL:*:*)
-	GUESS=nse-tandem-nsk$UNAME_RELEASE
-	;;
-    NSR-*:NONSTOP_KERNEL:*:*)
-	GUESS=nsr-tandem-nsk$UNAME_RELEASE
-	;;
-    NSV-*:NONSTOP_KERNEL:*:*)
-	GUESS=nsv-tandem-nsk$UNAME_RELEASE
-	;;
-    NSX-*:NONSTOP_KERNEL:*:*)
-	GUESS=nsx-tandem-nsk$UNAME_RELEASE
-	;;
-    *:NonStop-UX:*:*)
-	GUESS=mips-compaq-nonstopux
-	;;
-    BS2000:POSIX*:*:*)
-	GUESS=bs2000-siemens-sysv
-	;;
-    DS/*:UNIX_System_V:*:*)
-	GUESS=$UNAME_MACHINE-$UNAME_SYSTEM-$UNAME_RELEASE
-	;;
-    *:Plan9:*:*)
-	# "uname -m" is not consistent, so use $cputype instead. 386
-	# is converted to i386 for consistency with other x86
-	# operating systems.
-	if test "${cputype-}" = 386; then
-	    UNAME_MACHINE=i386
-	elif test "x${cputype-}" != x; then
-	    UNAME_MACHINE=$cputype
-	fi
-	GUESS=$UNAME_MACHINE-unknown-plan9
-	;;
-    *:TOPS-10:*:*)
-	GUESS=pdp10-unknown-tops10
-	;;
-    *:TENEX:*:*)
-	GUESS=pdp10-unknown-tenex
-	;;
-    KS10:TOPS-20:*:* | KL10:TOPS-20:*:* | TYPE4:TOPS-20:*:*)
-	GUESS=pdp10-dec-tops20
-	;;
-    XKL-1:TOPS-20:*:* | TYPE5:TOPS-20:*:*)
-	GUESS=pdp10-xkl-tops20
-	;;
-    *:TOPS-20:*:*)
-	GUESS=pdp10-unknown-tops20
-	;;
-    *:ITS:*:*)
-	GUESS=pdp10-unknown-its
-	;;
-    SEI:*:*:SEIUX)
-	GUESS=mips-sei-seiux$UNAME_RELEASE
-	;;
-    *:DragonFly:*:*)
-	DRAGONFLY_REL=`echo "$UNAME_RELEASE" | sed -e 's/[-(].*//'`
-	GUESS=$UNAME_MACHINE-unknown-dragonfly$DRAGONFLY_REL
-	;;
-    *:*VMS:*:*)
-	UNAME_MACHINE=`(uname -p) 2>/dev/null`
-	case $UNAME_MACHINE in
-	    A*) GUESS=alpha-dec-vms ;;
-	    I*) GUESS=ia64-dec-vms ;;
-	    V*) GUESS=vax-dec-vms ;;
-	esac ;;
-    *:XENIX:*:SysV)
-	GUESS=i386-pc-xenix
-	;;
-    i*86:skyos:*:*)
-	SKYOS_REL=`echo "$UNAME_RELEASE" | sed -e 's/ .*$//'`
-	GUESS=$UNAME_MACHINE-pc-skyos$SKYOS_REL
-	;;
-    i*86:rdos:*:*)
-	GUESS=$UNAME_MACHINE-pc-rdos
-	;;
-    i*86:Fiwix:*:*)
-	GUESS=$UNAME_MACHINE-pc-fiwix
-	;;
-    *:AROS:*:*)
-	GUESS=$UNAME_MACHINE-unknown-aros
-	;;
-    x86_64:VMkernel:*:*)
-	GUESS=$UNAME_MACHINE-unknown-esx
-	;;
-    amd64:Isilon\ OneFS:*:*)
-	GUESS=x86_64-unknown-onefs
-	;;
-    *:Unleashed:*:*)
-	GUESS=$UNAME_MACHINE-unknown-unleashed$UNAME_RELEASE
-	;;
-esac
-
-# Do we have a guess based on uname results?
-if test "x$GUESS" != x; then
-    echo "$GUESS"
-    exit
-fi
-
-# No uname command or uname output not recognized.
-set_cc_for_build
-cat > "$dummy.c" <<EOF
-#ifdef _SEQUENT_
-#include <sys/types.h>
-#include <sys/utsname.h>
-#endif
-#if defined(ultrix) || defined(_ultrix) || defined(__ultrix) || defined(__ultrix__)
-#if defined (vax) || defined (__vax) || defined (__vax__) || defined(mips) || defined(__mips) || defined(__mips__) || defined(MIPS) || defined(__MIPS__)
-#include <signal.h>
-#if defined(_SIZE_T_) || defined(SIGLOST)
-#include <sys/utsname.h>
-#endif
-#endif
-#endif
-main ()
-{
-#if defined (sony)
-#if defined (MIPSEB)
-  /* BFD wants "bsd" instead of "newsos".  Perhaps BFD should be changed,
-     I don't know....  */
-  printf ("mips-sony-bsd\n"); exit (0);
-#else
-#include <sys/param.h>
-  printf ("m68k-sony-newsos%s\n",
-#ifdef NEWSOS4
-  "4"
-#else
-  ""
-#endif
-  ); exit (0);
-#endif
-#endif
-
-#if defined (NeXT)
-#if !defined (__ARCHITECTURE__)
-#define __ARCHITECTURE__ "m68k"
-#endif
-  int version;
-  version=`(hostinfo | sed -n 's/.*NeXT Mach \([0-9]*\).*/\1/p') 2>/dev/null`;
-  if (version < 4)
-    printf ("%s-next-nextstep%d\n", __ARCHITECTURE__, version);
-  else
-    printf ("%s-next-openstep%d\n", __ARCHITECTURE__, version);
-  exit (0);
-#endif
-
-#if defined (MULTIMAX) || defined (n16)
-#if defined (UMAXV)
-  printf ("ns32k-encore-sysv\n"); exit (0);
-#else
-#if defined (CMU)
-  printf ("ns32k-encore-mach\n"); exit (0);
-#else
-  printf ("ns32k-encore-bsd\n"); exit (0);
-#endif
-#endif
-#endif
-
-#if defined (__386BSD__)
-  printf ("i386-pc-bsd\n"); exit (0);
-#endif
-
-#if defined (sequent)
-#if defined (i386)
-  printf ("i386-sequent-dynix\n"); exit (0);
-#endif
-#if defined (ns32000)
-  printf ("ns32k-sequent-dynix\n"); exit (0);
-#endif
-#endif
-
-#if defined (_SEQUENT_)
-  struct utsname un;
-
-  uname(&un);
-  if (strncmp(un.version, "V2", 2) == 0) {
-    printf ("i386-sequent-ptx2\n"); exit (0);
-  }
-  if (strncmp(un.version, "V1", 2) == 0) { /* XXX is V1 correct? */
-    printf ("i386-sequent-ptx1\n"); exit (0);
-  }
-  printf ("i386-sequent-ptx\n"); exit (0);
-#endif
-
-#if defined (vax)
-#if !defined (ultrix)
-#include <sys/param.h>
-#if defined (BSD)
-#if BSD == 43
-  printf ("vax-dec-bsd4.3\n"); exit (0);
-#else
-#if BSD == 199006
-  printf ("vax-dec-bsd4.3reno\n"); exit (0);
-#else
-  printf ("vax-dec-bsd\n"); exit (0);
-#endif
-#endif
-#else
-  printf ("vax-dec-bsd\n"); exit (0);
-#endif
-#else
-#if defined(_SIZE_T_) || defined(SIGLOST)
-  struct utsname un;
-  uname (&un);
-  printf ("vax-dec-ultrix%s\n", un.release); exit (0);
-#else
-  printf ("vax-dec-ultrix\n"); exit (0);
-#endif
-#endif
-#endif
-#if defined(ultrix) || defined(_ultrix) || defined(__ultrix) || defined(__ultrix__)
-#if defined(mips) || defined(__mips) || defined(__mips__) || defined(MIPS) || defined(__MIPS__)
-#if defined(_SIZE_T_) || defined(SIGLOST)
-  struct utsname *un;
-  uname (&un);
-  printf ("mips-dec-ultrix%s\n", un.release); exit (0);
-#else
-  printf ("mips-dec-ultrix\n"); exit (0);
-#endif
-#endif
-#endif
-
-#if defined (alliant) && defined (i860)
-  printf ("i860-alliant-bsd\n"); exit (0);
-#endif
-
-  exit (1);
-}
-EOF
-
-$CC_FOR_BUILD -o "$dummy" "$dummy.c" 2>/dev/null && SYSTEM_NAME=`"$dummy"` &&
-	{ echo "$SYSTEM_NAME"; exit; }
-
-# Apollos put the system type in the environment.
-test -d /usr/apollo && { echo "$ISP-apollo-$SYSTYPE"; exit; }
-
-echo "$0: unable to guess system type" >&2
-
-case $UNAME_MACHINE:$UNAME_SYSTEM in
-    mips:Linux | mips64:Linux)
-	# If we got here on MIPS GNU/Linux, output extra information.
-	cat >&2 <<EOF
-
-NOTE: MIPS GNU/Linux systems require a C compiler to fully recognize
-the system type. Please install a C compiler and try again.
-EOF
-	;;
-esac
-
-cat >&2 <<EOF
-
-This script (version $timestamp), has failed to recognize the
-operating system you are using. If your script is old, overwrite *all*
-copies of config.guess and config.sub with the latest versions from:
-
-  https://git.savannah.gnu.org/cgit/config.git/plain/config.guess
-and
-  https://git.savannah.gnu.org/cgit/config.git/plain/config.sub
-EOF
-
-our_year=`echo $timestamp | sed 's,-.*,,'`
-thisyear=`date +%Y`
-# shellcheck disable=SC2003
-script_age=`expr "$thisyear" - "$our_year"`
-if test "$script_age" -lt 3 ; then
-   cat >&2 <<EOF
-
-If $0 has already been updated, send the following data and any
-information you think might be pertinent to config-patches@gnu.org to
-provide the necessary information to handle your system.
-
-config.guess timestamp = $timestamp
-
-uname -m = `(uname -m) 2>/dev/null || echo unknown`
-uname -r = `(uname -r) 2>/dev/null || echo unknown`
-uname -s = `(uname -s) 2>/dev/null || echo unknown`
-uname -v = `(uname -v) 2>/dev/null || echo unknown`
-
-/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null`
-/bin/uname -X     = `(/bin/uname -X) 2>/dev/null`
-
-hostinfo               = `(hostinfo) 2>/dev/null`
-/bin/universe          = `(/bin/universe) 2>/dev/null`
-/usr/bin/arch -k       = `(/usr/bin/arch -k) 2>/dev/null`
-/bin/arch              = `(/bin/arch) 2>/dev/null`
-/usr/bin/oslevel       = `(/usr/bin/oslevel) 2>/dev/null`
-/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null`
-
-UNAME_MACHINE = "$UNAME_MACHINE"
-UNAME_RELEASE = "$UNAME_RELEASE"
-UNAME_SYSTEM  = "$UNAME_SYSTEM"
-UNAME_VERSION = "$UNAME_VERSION"
-EOF
-fi
-
-exit 1
-
-# Local variables:
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-start: "timestamp='"
-# time-stamp-format: "%:y-%02m-%02d"
-# time-stamp-end: "'"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXfixes/config.h.in b/experiments/wasm-gui/third_party/libXfixes/config.h.in
deleted file mode 100644
index c95acc31e..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/config.h.in
+++ /dev/null
@@ -1,72 +0,0 @@
-/* config.h.in.  Generated from configure.ac by autoheader.  */
-
-/* Define to 1 if you have the <dlfcn.h> header file. */
-#undef HAVE_DLFCN_H
-
-/* Define to 1 if you have the <inttypes.h> header file. */
-#undef HAVE_INTTYPES_H
-
-/* Define to 1 if you have the <stdint.h> header file. */
-#undef HAVE_STDINT_H
-
-/* Define to 1 if you have the <stdio.h> header file. */
-#undef HAVE_STDIO_H
-
-/* Define to 1 if you have the <stdlib.h> header file. */
-#undef HAVE_STDLIB_H
-
-/* Define to 1 if you have the <strings.h> header file. */
-#undef HAVE_STRINGS_H
-
-/* Define to 1 if you have the <string.h> header file. */
-#undef HAVE_STRING_H
-
-/* Define to 1 if you have the <sys/stat.h> header file. */
-#undef HAVE_SYS_STAT_H
-
-/* Define to 1 if you have the <sys/types.h> header file. */
-#undef HAVE_SYS_TYPES_H
-
-/* Define to 1 if you have the <unistd.h> header file. */
-#undef HAVE_UNISTD_H
-
-/* Define to the sub-directory where libtool stores uninstalled libraries. */
-#undef LT_OBJDIR
-
-/* Name of package */
-#undef PACKAGE
-
-/* Define to the address where bug reports for this package should be sent. */
-#undef PACKAGE_BUGREPORT
-
-/* Define to the full name of this package. */
-#undef PACKAGE_NAME
-
-/* Define to the full name and version of this package. */
-#undef PACKAGE_STRING
-
-/* Define to the one symbol short name of this package. */
-#undef PACKAGE_TARNAME
-
-/* Define to the home page for this package. */
-#undef PACKAGE_URL
-
-/* Define to the version of this package. */
-#undef PACKAGE_VERSION
-
-/* Major version of this package */
-#undef PACKAGE_VERSION_MAJOR
-
-/* Minor version of this package */
-#undef PACKAGE_VERSION_MINOR
-
-/* Patch version of this package */
-#undef PACKAGE_VERSION_PATCHLEVEL
-
-/* Define to 1 if all of the C90 standard headers exist (not just the ones
-   required in a freestanding environment). This macro is provided for
-   backward compatibility; new code need not use it. */
-#undef STDC_HEADERS
-
-/* Version number of package */
-#undef VERSION
diff --git a/experiments/wasm-gui/third_party/libXfixes/config.sub b/experiments/wasm-gui/third_party/libXfixes/config.sub
deleted file mode 100644
index de4259e40..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/config.sub
+++ /dev/null
@@ -1,1907 +0,0 @@
-#! /bin/sh
-# Configuration validation subroutine script.
-#   Copyright 1992-2023 Free Software Foundation, Inc.
-
-# shellcheck disable=SC2006,SC2268 # see below for rationale
-
-timestamp='2023-01-21'
-
-# This file is free software; you can redistribute it and/or modify it
-# under the terms of the GNU General Public License as published by
-# the Free Software Foundation, either version 3 of the License, or
-# (at your option) any later version.
-#
-# This program is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-# General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program; if not, see <https://www.gnu.org/licenses/>.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program that contains a
-# configuration script generated by Autoconf, you may include it under
-# the same distribution terms that you use for the rest of that
-# program.  This Exception is an additional permission under section 7
-# of the GNU General Public License, version 3 ("GPLv3").
-
-
-# Please send patches to <config-patches@gnu.org>.
-#
-# Configuration subroutine to validate and canonicalize a configuration type.
-# Supply the specified configuration type as an argument.
-# If it is invalid, we print an error message on stderr and exit with code 1.
-# Otherwise, we print the canonical config type on stdout and succeed.
-
-# You can get the latest version of this script from:
-# https://git.savannah.gnu.org/cgit/config.git/plain/config.sub
-
-# This file is supposed to be the same for all GNU packages
-# and recognize all the CPU types, system types and aliases
-# that are meaningful with *any* GNU software.
-# Each package is responsible for reporting which valid configurations
-# it does not support.  The user should be able to distinguish
-# a failure to support a valid configuration from a meaningless
-# configuration.
-
-# The goal of this file is to map all the various variations of a given
-# machine specification into a single specification in the form:
-#	CPU_TYPE-MANUFACTURER-OPERATING_SYSTEM
-# or in some cases, the newer four-part form:
-#	CPU_TYPE-MANUFACTURER-KERNEL-OPERATING_SYSTEM
-# It is wrong to echo any other type of specification.
-
-# The "shellcheck disable" line above the timestamp inhibits complaints
-# about features and limitations of the classic Bourne shell that were
-# superseded or lifted in POSIX.  However, this script identifies a wide
-# variety of pre-POSIX systems that do not have POSIX shells at all, and
-# even some reasonably current systems (Solaris 10 as case-in-point) still
-# have a pre-POSIX /bin/sh.
-
-me=`echo "$0" | sed -e 's,.*/,,'`
-
-usage="\
-Usage: $0 [OPTION] CPU-MFR-OPSYS or ALIAS
-
-Canonicalize a configuration name.
-
-Options:
-  -h, --help         print this help, then exit
-  -t, --time-stamp   print date of last modification, then exit
-  -v, --version      print version number, then exit
-
-Report bugs and patches to <config-patches@gnu.org>."
-
-version="\
-GNU config.sub ($timestamp)
-
-Copyright 1992-2023 Free Software Foundation, Inc.
-
-This is free software; see the source for copying conditions.  There is NO
-warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE."
-
-help="
-Try \`$me --help' for more information."
-
-# Parse command line
-while test $# -gt 0 ; do
-  case $1 in
-    --time-stamp | --time* | -t )
-       echo "$timestamp" ; exit ;;
-    --version | -v )
-       echo "$version" ; exit ;;
-    --help | --h* | -h )
-       echo "$usage"; exit ;;
-    -- )     # Stop option processing
-       shift; break ;;
-    - )	# Use stdin as input.
-       break ;;
-    -* )
-       echo "$me: invalid option $1$help" >&2
-       exit 1 ;;
-
-    *local*)
-       # First pass through any local machine types.
-       echo "$1"
-       exit ;;
-
-    * )
-       break ;;
-  esac
-done
-
-case $# in
- 0) echo "$me: missing argument$help" >&2
-    exit 1;;
- 1) ;;
- *) echo "$me: too many arguments$help" >&2
-    exit 1;;
-esac
-
-# Split fields of configuration type
-# shellcheck disable=SC2162
-saved_IFS=$IFS
-IFS="-" read field1 field2 field3 field4 <<EOF
-$1
-EOF
-IFS=$saved_IFS
-
-# Separate into logical components for further validation
-case $1 in
-	*-*-*-*-*)
-		echo Invalid configuration \`"$1"\': more than four components >&2
-		exit 1
-		;;
-	*-*-*-*)
-		basic_machine=$field1-$field2
-		basic_os=$field3-$field4
-		;;
-	*-*-*)
-		# Ambiguous whether COMPANY is present, or skipped and KERNEL-OS is two
-		# parts
-		maybe_os=$field2-$field3
-		case $maybe_os in
-			nto-qnx* | linux-* | uclinux-uclibc* \
-			| uclinux-gnu* | kfreebsd*-gnu* | knetbsd*-gnu* | netbsd*-gnu* \
-			| netbsd*-eabi* | kopensolaris*-gnu* | cloudabi*-eabi* \
-			| storm-chaos* | os2-emx* | rtmk-nova* | managarm-*)
-				basic_machine=$field1
-				basic_os=$maybe_os
-				;;
-			android-linux)
-				basic_machine=$field1-unknown
-				basic_os=linux-android
-				;;
-			*)
-				basic_machine=$field1-$field2
-				basic_os=$field3
-				;;
-		esac
-		;;
-	*-*)
-		# A lone config we happen to match not fitting any pattern
-		case $field1-$field2 in
-			decstation-3100)
-				basic_machine=mips-dec
-				basic_os=
-				;;
-			*-*)
-				# Second component is usually, but not always the OS
-				case $field2 in
-					# Prevent following clause from handling this valid os
-					sun*os*)
-						basic_machine=$field1
-						basic_os=$field2
-						;;
-					zephyr*)
-						basic_machine=$field1-unknown
-						basic_os=$field2
-						;;
-					# Manufacturers
-					dec* | mips* | sequent* | encore* | pc533* | sgi* | sony* \
-					| att* | 7300* | 3300* | delta* | motorola* | sun[234]* \
-					| unicom* | ibm* | next | hp | isi* | apollo | altos* \
-					| convergent* | ncr* | news | 32* | 3600* | 3100* \
-					| hitachi* | c[123]* | convex* | sun | crds | omron* | dg \
-					| ultra | tti* | harris | dolphin | highlevel | gould \
-					| cbm | ns | masscomp | apple | axis | knuth | cray \
-					| microblaze* | sim | cisco \
-					| oki | wec | wrs | winbond)
-						basic_machine=$field1-$field2
-						basic_os=
-						;;
-					*)
-						basic_machine=$field1
-						basic_os=$field2
-						;;
-				esac
-			;;
-		esac
-		;;
-	*)
-		# Convert single-component short-hands not valid as part of
-		# multi-component configurations.
-		case $field1 in
-			386bsd)
-				basic_machine=i386-pc
-				basic_os=bsd
-				;;
-			a29khif)
-				basic_machine=a29k-amd
-				basic_os=udi
-				;;
-			adobe68k)
-				basic_machine=m68010-adobe
-				basic_os=scout
-				;;
-			alliant)
-				basic_machine=fx80-alliant
-				basic_os=
-				;;
-			altos | altos3068)
-				basic_machine=m68k-altos
-				basic_os=
-				;;
-			am29k)
-				basic_machine=a29k-none
-				basic_os=bsd
-				;;
-			amdahl)
-				basic_machine=580-amdahl
-				basic_os=sysv
-				;;
-			amiga)
-				basic_machine=m68k-unknown
-				basic_os=
-				;;
-			amigaos | amigados)
-				basic_machine=m68k-unknown
-				basic_os=amigaos
-				;;
-			amigaunix | amix)
-				basic_machine=m68k-unknown
-				basic_os=sysv4
-				;;
-			apollo68)
-				basic_machine=m68k-apollo
-				basic_os=sysv
-				;;
-			apollo68bsd)
-				basic_machine=m68k-apollo
-				basic_os=bsd
-				;;
-			aros)
-				basic_machine=i386-pc
-				basic_os=aros
-				;;
-			aux)
-				basic_machine=m68k-apple
-				basic_os=aux
-				;;
-			balance)
-				basic_machine=ns32k-sequent
-				basic_os=dynix
-				;;
-			blackfin)
-				basic_machine=bfin-unknown
-				basic_os=linux
-				;;
-			cegcc)
-				basic_machine=arm-unknown
-				basic_os=cegcc
-				;;
-			convex-c1)
-				basic_machine=c1-convex
-				basic_os=bsd
-				;;
-			convex-c2)
-				basic_machine=c2-convex
-				basic_os=bsd
-				;;
-			convex-c32)
-				basic_machine=c32-convex
-				basic_os=bsd
-				;;
-			convex-c34)
-				basic_machine=c34-convex
-				basic_os=bsd
-				;;
-			convex-c38)
-				basic_machine=c38-convex
-				basic_os=bsd
-				;;
-			cray)
-				basic_machine=j90-cray
-				basic_os=unicos
-				;;
-			crds | unos)
-				basic_machine=m68k-crds
-				basic_os=
-				;;
-			da30)
-				basic_machine=m68k-da30
-				basic_os=
-				;;
-			decstation | pmax | pmin | dec3100 | decstatn)
-				basic_machine=mips-dec
-				basic_os=
-				;;
-			delta88)
-				basic_machine=m88k-motorola
-				basic_os=sysv3
-				;;
-			dicos)
-				basic_machine=i686-pc
-				basic_os=dicos
-				;;
-			djgpp)
-				basic_machine=i586-pc
-				basic_os=msdosdjgpp
-				;;
-			ebmon29k)
-				basic_machine=a29k-amd
-				basic_os=ebmon
-				;;
-			es1800 | OSE68k | ose68k | ose | OSE)
-				basic_machine=m68k-ericsson
-				basic_os=ose
-				;;
-			gmicro)
-				basic_machine=tron-gmicro
-				basic_os=sysv
-				;;
-			go32)
-				basic_machine=i386-pc
-				basic_os=go32
-				;;
-			h8300hms)
-				basic_machine=h8300-hitachi
-				basic_os=hms
-				;;
-			h8300xray)
-				basic_machine=h8300-hitachi
-				basic_os=xray
-				;;
-			h8500hms)
-				basic_machine=h8500-hitachi
-				basic_os=hms
-				;;
-			harris)
-				basic_machine=m88k-harris
-				basic_os=sysv3
-				;;
-			hp300 | hp300hpux)
-				basic_machine=m68k-hp
-				basic_os=hpux
-				;;
-			hp300bsd)
-				basic_machine=m68k-hp
-				basic_os=bsd
-				;;
-			hppaosf)
-				basic_machine=hppa1.1-hp
-				basic_os=osf
-				;;
-			hppro)
-				basic_machine=hppa1.1-hp
-				basic_os=proelf
-				;;
-			i386mach)
-				basic_machine=i386-mach
-				basic_os=mach
-				;;
-			isi68 | isi)
-				basic_machine=m68k-isi
-				basic_os=sysv
-				;;
-			m68knommu)
-				basic_machine=m68k-unknown
-				basic_os=linux
-				;;
-			magnum | m3230)
-				basic_machine=mips-mips
-				basic_os=sysv
-				;;
-			merlin)
-				basic_machine=ns32k-utek
-				basic_os=sysv
-				;;
-			mingw64)
-				basic_machine=x86_64-pc
-				basic_os=mingw64
-				;;
-			mingw32)
-				basic_machine=i686-pc
-				basic_os=mingw32
-				;;
-			mingw32ce)
-				basic_machine=arm-unknown
-				basic_os=mingw32ce
-				;;
-			monitor)
-				basic_machine=m68k-rom68k
-				basic_os=coff
-				;;
-			morphos)
-				basic_machine=powerpc-unknown
-				basic_os=morphos
-				;;
-			moxiebox)
-				basic_machine=moxie-unknown
-				basic_os=moxiebox
-				;;
-			msdos)
-				basic_machine=i386-pc
-				basic_os=msdos
-				;;
-			msys)
-				basic_machine=i686-pc
-				basic_os=msys
-				;;
-			mvs)
-				basic_machine=i370-ibm
-				basic_os=mvs
-				;;
-			nacl)
-				basic_machine=le32-unknown
-				basic_os=nacl
-				;;
-			ncr3000)
-				basic_machine=i486-ncr
-				basic_os=sysv4
-				;;
-			netbsd386)
-				basic_machine=i386-pc
-				basic_os=netbsd
-				;;
-			netwinder)
-				basic_machine=armv4l-rebel
-				basic_os=linux
-				;;
-			news | news700 | news800 | news900)
-				basic_machine=m68k-sony
-				basic_os=newsos
-				;;
-			news1000)
-				basic_machine=m68030-sony
-				basic_os=newsos
-				;;
-			necv70)
-				basic_machine=v70-nec
-				basic_os=sysv
-				;;
-			nh3000)
-				basic_machine=m68k-harris
-				basic_os=cxux
-				;;
-			nh[45]000)
-				basic_machine=m88k-harris
-				basic_os=cxux
-				;;
-			nindy960)
-				basic_machine=i960-intel
-				basic_os=nindy
-				;;
-			mon960)
-				basic_machine=i960-intel
-				basic_os=mon960
-				;;
-			nonstopux)
-				basic_machine=mips-compaq
-				basic_os=nonstopux
-				;;
-			os400)
-				basic_machine=powerpc-ibm
-				basic_os=os400
-				;;
-			OSE68000 | ose68000)
-				basic_machine=m68000-ericsson
-				basic_os=ose
-				;;
-			os68k)
-				basic_machine=m68k-none
-				basic_os=os68k
-				;;
-			paragon)
-				basic_machine=i860-intel
-				basic_os=osf
-				;;
-			parisc)
-				basic_machine=hppa-unknown
-				basic_os=linux
-				;;
-			psp)
-				basic_machine=mipsallegrexel-sony
-				basic_os=psp
-				;;
-			pw32)
-				basic_machine=i586-unknown
-				basic_os=pw32
-				;;
-			rdos | rdos64)
-				basic_machine=x86_64-pc
-				basic_os=rdos
-				;;
-			rdos32)
-				basic_machine=i386-pc
-				basic_os=rdos
-				;;
-			rom68k)
-				basic_machine=m68k-rom68k
-				basic_os=coff
-				;;
-			sa29200)
-				basic_machine=a29k-amd
-				basic_os=udi
-				;;
-			sei)
-				basic_machine=mips-sei
-				basic_os=seiux
-				;;
-			sequent)
-				basic_machine=i386-sequent
-				basic_os=
-				;;
-			sps7)
-				basic_machine=m68k-bull
-				basic_os=sysv2
-				;;
-			st2000)
-				basic_machine=m68k-tandem
-				basic_os=
-				;;
-			stratus)
-				basic_machine=i860-stratus
-				basic_os=sysv4
-				;;
-			sun2)
-				basic_machine=m68000-sun
-				basic_os=
-				;;
-			sun2os3)
-				basic_machine=m68000-sun
-				basic_os=sunos3
-				;;
-			sun2os4)
-				basic_machine=m68000-sun
-				basic_os=sunos4
-				;;
-			sun3)
-				basic_machine=m68k-sun
-				basic_os=
-				;;
-			sun3os3)
-				basic_machine=m68k-sun
-				basic_os=sunos3
-				;;
-			sun3os4)
-				basic_machine=m68k-sun
-				basic_os=sunos4
-				;;
-			sun4)
-				basic_machine=sparc-sun
-				basic_os=
-				;;
-			sun4os3)
-				basic_machine=sparc-sun
-				basic_os=sunos3
-				;;
-			sun4os4)
-				basic_machine=sparc-sun
-				basic_os=sunos4
-				;;
-			sun4sol2)
-				basic_machine=sparc-sun
-				basic_os=solaris2
-				;;
-			sun386 | sun386i | roadrunner)
-				basic_machine=i386-sun
-				basic_os=
-				;;
-			sv1)
-				basic_machine=sv1-cray
-				basic_os=unicos
-				;;
-			symmetry)
-				basic_machine=i386-sequent
-				basic_os=dynix
-				;;
-			t3e)
-				basic_machine=alphaev5-cray
-				basic_os=unicos
-				;;
-			t90)
-				basic_machine=t90-cray
-				basic_os=unicos
-				;;
-			toad1)
-				basic_machine=pdp10-xkl
-				basic_os=tops20
-				;;
-			tpf)
-				basic_machine=s390x-ibm
-				basic_os=tpf
-				;;
-			udi29k)
-				basic_machine=a29k-amd
-				basic_os=udi
-				;;
-			ultra3)
-				basic_machine=a29k-nyu
-				basic_os=sym1
-				;;
-			v810 | necv810)
-				basic_machine=v810-nec
-				basic_os=none
-				;;
-			vaxv)
-				basic_machine=vax-dec
-				basic_os=sysv
-				;;
-			vms)
-				basic_machine=vax-dec
-				basic_os=vms
-				;;
-			vsta)
-				basic_machine=i386-pc
-				basic_os=vsta
-				;;
-			vxworks960)
-				basic_machine=i960-wrs
-				basic_os=vxworks
-				;;
-			vxworks68)
-				basic_machine=m68k-wrs
-				basic_os=vxworks
-				;;
-			vxworks29k)
-				basic_machine=a29k-wrs
-				basic_os=vxworks
-				;;
-			xbox)
-				basic_machine=i686-pc
-				basic_os=mingw32
-				;;
-			ymp)
-				basic_machine=ymp-cray
-				basic_os=unicos
-				;;
-			*)
-				basic_machine=$1
-				basic_os=
-				;;
-		esac
-		;;
-esac
-
-# Decode 1-component or ad-hoc basic machines
-case $basic_machine in
-	# Here we handle the default manufacturer of certain CPU types.  It is in
-	# some cases the only manufacturer, in others, it is the most popular.
-	w89k)
-		cpu=hppa1.1
-		vendor=winbond
-		;;
-	op50n)
-		cpu=hppa1.1
-		vendor=oki
-		;;
-	op60c)
-		cpu=hppa1.1
-		vendor=oki
-		;;
-	ibm*)
-		cpu=i370
-		vendor=ibm
-		;;
-	orion105)
-		cpu=clipper
-		vendor=highlevel
-		;;
-	mac | mpw | mac-mpw)
-		cpu=m68k
-		vendor=apple
-		;;
-	pmac | pmac-mpw)
-		cpu=powerpc
-		vendor=apple
-		;;
-
-	# Recognize the various machine names and aliases which stand
-	# for a CPU type and a company and sometimes even an OS.
-	3b1 | 7300 | 7300-att | att-7300 | pc7300 | safari | unixpc)
-		cpu=m68000
-		vendor=att
-		;;
-	3b*)
-		cpu=we32k
-		vendor=att
-		;;
-	bluegene*)
-		cpu=powerpc
-		vendor=ibm
-		basic_os=cnk
-		;;
-	decsystem10* | dec10*)
-		cpu=pdp10
-		vendor=dec
-		basic_os=tops10
-		;;
-	decsystem20* | dec20*)
-		cpu=pdp10
-		vendor=dec
-		basic_os=tops20
-		;;
-	delta | 3300 | motorola-3300 | motorola-delta \
-	      | 3300-motorola | delta-motorola)
-		cpu=m68k
-		vendor=motorola
-		;;
-	dpx2*)
-		cpu=m68k
-		vendor=bull
-		basic_os=sysv3
-		;;
-	encore | umax | mmax)
-		cpu=ns32k
-		vendor=encore
-		;;
-	elxsi)
-		cpu=elxsi
-		vendor=elxsi
-		basic_os=${basic_os:-bsd}
-		;;
-	fx2800)
-		cpu=i860
-		vendor=alliant
-		;;
-	genix)
-		cpu=ns32k
-		vendor=ns
-		;;
-	h3050r* | hiux*)
-		cpu=hppa1.1
-		vendor=hitachi
-		basic_os=hiuxwe2
-		;;
-	hp3k9[0-9][0-9] | hp9[0-9][0-9])
-		cpu=hppa1.0
-		vendor=hp
-		;;
-	hp9k2[0-9][0-9] | hp9k31[0-9])
-		cpu=m68000
-		vendor=hp
-		;;
-	hp9k3[2-9][0-9])
-		cpu=m68k
-		vendor=hp
-		;;
-	hp9k6[0-9][0-9] | hp6[0-9][0-9])
-		cpu=hppa1.0
-		vendor=hp
-		;;
-	hp9k7[0-79][0-9] | hp7[0-79][0-9])
-		cpu=hppa1.1
-		vendor=hp
-		;;
-	hp9k78[0-9] | hp78[0-9])
-		# FIXME: really hppa2.0-hp
-		cpu=hppa1.1
-		vendor=hp
-		;;
-	hp9k8[67]1 | hp8[67]1 | hp9k80[24] | hp80[24] | hp9k8[78]9 | hp8[78]9 | hp9k893 | hp893)
-		# FIXME: really hppa2.0-hp
-		cpu=hppa1.1
-		vendor=hp
-		;;
-	hp9k8[0-9][13679] | hp8[0-9][13679])
-		cpu=hppa1.1
-		vendor=hp
-		;;
-	hp9k8[0-9][0-9] | hp8[0-9][0-9])
-		cpu=hppa1.0
-		vendor=hp
-		;;
-	i*86v32)
-		cpu=`echo "$1" | sed -e 's/86.*/86/'`
-		vendor=pc
-		basic_os=sysv32
-		;;
-	i*86v4*)
-		cpu=`echo "$1" | sed -e 's/86.*/86/'`
-		vendor=pc
-		basic_os=sysv4
-		;;
-	i*86v)
-		cpu=`echo "$1" | sed -e 's/86.*/86/'`
-		vendor=pc
-		basic_os=sysv
-		;;
-	i*86sol2)
-		cpu=`echo "$1" | sed -e 's/86.*/86/'`
-		vendor=pc
-		basic_os=solaris2
-		;;
-	j90 | j90-cray)
-		cpu=j90
-		vendor=cray
-		basic_os=${basic_os:-unicos}
-		;;
-	iris | iris4d)
-		cpu=mips
-		vendor=sgi
-		case $basic_os in
-		    irix*)
-			;;
-		    *)
-			basic_os=irix4
-			;;
-		esac
-		;;
-	miniframe)
-		cpu=m68000
-		vendor=convergent
-		;;
-	*mint | mint[0-9]* | *MiNT | *MiNT[0-9]*)
-		cpu=m68k
-		vendor=atari
-		basic_os=mint
-		;;
-	news-3600 | risc-news)
-		cpu=mips
-		vendor=sony
-		basic_os=newsos
-		;;
-	next | m*-next)
-		cpu=m68k
-		vendor=next
-		case $basic_os in
-		    openstep*)
-		        ;;
-		    nextstep*)
-			;;
-		    ns2*)
-		      basic_os=nextstep2
-			;;
-		    *)
-		      basic_os=nextstep3
-			;;
-		esac
-		;;
-	np1)
-		cpu=np1
-		vendor=gould
-		;;
-	op50n-* | op60c-*)
-		cpu=hppa1.1
-		vendor=oki
-		basic_os=proelf
-		;;
-	pa-hitachi)
-		cpu=hppa1.1
-		vendor=hitachi
-		basic_os=hiuxwe2
-		;;
-	pbd)
-		cpu=sparc
-		vendor=tti
-		;;
-	pbb)
-		cpu=m68k
-		vendor=tti
-		;;
-	pc532)
-		cpu=ns32k
-		vendor=pc532
-		;;
-	pn)
-		cpu=pn
-		vendor=gould
-		;;
-	power)
-		cpu=power
-		vendor=ibm
-		;;
-	ps2)
-		cpu=i386
-		vendor=ibm
-		;;
-	rm[46]00)
-		cpu=mips
-		vendor=siemens
-		;;
-	rtpc | rtpc-*)
-		cpu=romp
-		vendor=ibm
-		;;
-	sde)
-		cpu=mipsisa32
-		vendor=sde
-		basic_os=${basic_os:-elf}
-		;;
-	simso-wrs)
-		cpu=sparclite
-		vendor=wrs
-		basic_os=vxworks
-		;;
-	tower | tower-32)
-		cpu=m68k
-		vendor=ncr
-		;;
-	vpp*|vx|vx-*)
-		cpu=f301
-		vendor=fujitsu
-		;;
-	w65)
-		cpu=w65
-		vendor=wdc
-		;;
-	w89k-*)
-		cpu=hppa1.1
-		vendor=winbond
-		basic_os=proelf
-		;;
-	none)
-		cpu=none
-		vendor=none
-		;;
-	leon|leon[3-9])
-		cpu=sparc
-		vendor=$basic_machine
-		;;
-	leon-*|leon[3-9]-*)
-		cpu=sparc
-		vendor=`echo "$basic_machine" | sed 's/-.*//'`
-		;;
-
-	*-*)
-		# shellcheck disable=SC2162
-		saved_IFS=$IFS
-		IFS="-" read cpu vendor <<EOF
-$basic_machine
-EOF
-		IFS=$saved_IFS
-		;;
-	# We use `pc' rather than `unknown'
-	# because (1) that's what they normally are, and
-	# (2) the word "unknown" tends to confuse beginning users.
-	i*86 | x86_64)
-		cpu=$basic_machine
-		vendor=pc
-		;;
-	# These rules are duplicated from below for sake of the special case above;
-	# i.e. things that normalized to x86 arches should also default to "pc"
-	pc98)
-		cpu=i386
-		vendor=pc
-		;;
-	x64 | amd64)
-		cpu=x86_64
-		vendor=pc
-		;;
-	# Recognize the basic CPU types without company name.
-	*)
-		cpu=$basic_machine
-		vendor=unknown
-		;;
-esac
-
-unset -v basic_machine
-
-# Decode basic machines in the full and proper CPU-Company form.
-case $cpu-$vendor in
-	# Here we handle the default manufacturer of certain CPU types in canonical form. It is in
-	# some cases the only manufacturer, in others, it is the most popular.
-	craynv-unknown)
-		vendor=cray
-		basic_os=${basic_os:-unicosmp}
-		;;
-	c90-unknown | c90-cray)
-		vendor=cray
-		basic_os=${Basic_os:-unicos}
-		;;
-	fx80-unknown)
-		vendor=alliant
-		;;
-	romp-unknown)
-		vendor=ibm
-		;;
-	mmix-unknown)
-		vendor=knuth
-		;;
-	microblaze-unknown | microblazeel-unknown)
-		vendor=xilinx
-		;;
-	rs6000-unknown)
-		vendor=ibm
-		;;
-	vax-unknown)
-		vendor=dec
-		;;
-	pdp11-unknown)
-		vendor=dec
-		;;
-	we32k-unknown)
-		vendor=att
-		;;
-	cydra-unknown)
-		vendor=cydrome
-		;;
-	i370-ibm*)
-		vendor=ibm
-		;;
-	orion-unknown)
-		vendor=highlevel
-		;;
-	xps-unknown | xps100-unknown)
-		cpu=xps100
-		vendor=honeywell
-		;;
-
-	# Here we normalize CPU types with a missing or matching vendor
-	armh-unknown | armh-alt)
-		cpu=armv7l
-		vendor=alt
-		basic_os=${basic_os:-linux-gnueabihf}
-		;;
-	dpx20-unknown | dpx20-bull)
-		cpu=rs6000
-		vendor=bull
-		basic_os=${basic_os:-bosx}
-		;;
-
-	# Here we normalize CPU types irrespective of the vendor
-	amd64-*)
-		cpu=x86_64
-		;;
-	blackfin-*)
-		cpu=bfin
-		basic_os=linux
-		;;
-	c54x-*)
-		cpu=tic54x
-		;;
-	c55x-*)
-		cpu=tic55x
-		;;
-	c6x-*)
-		cpu=tic6x
-		;;
-	e500v[12]-*)
-		cpu=powerpc
-		basic_os=${basic_os}"spe"
-		;;
-	mips3*-*)
-		cpu=mips64
-		;;
-	ms1-*)
-		cpu=mt
-		;;
-	m68knommu-*)
-		cpu=m68k
-		basic_os=linux
-		;;
-	m9s12z-* | m68hcs12z-* | hcs12z-* | s12z-*)
-		cpu=s12z
-		;;
-	openrisc-*)
-		cpu=or32
-		;;
-	parisc-*)
-		cpu=hppa
-		basic_os=linux
-		;;
-	pentium-* | p5-* | k5-* | k6-* | nexgen-* | viac3-*)
-		cpu=i586
-		;;
-	pentiumpro-* | p6-* | 6x86-* | athlon-* | athlon_*-*)
-		cpu=i686
-		;;
-	pentiumii-* | pentium2-* | pentiumiii-* | pentium3-*)
-		cpu=i686
-		;;
-	pentium4-*)
-		cpu=i786
-		;;
-	pc98-*)
-		cpu=i386
-		;;
-	ppc-* | ppcbe-*)
-		cpu=powerpc
-		;;
-	ppcle-* | powerpclittle-*)
-		cpu=powerpcle
-		;;
-	ppc64-*)
-		cpu=powerpc64
-		;;
-	ppc64le-* | powerpc64little-*)
-		cpu=powerpc64le
-		;;
-	sb1-*)
-		cpu=mipsisa64sb1
-		;;
-	sb1el-*)
-		cpu=mipsisa64sb1el
-		;;
-	sh5e[lb]-*)
-		cpu=`echo "$cpu" | sed 's/^\(sh.\)e\(.\)$/\1\2e/'`
-		;;
-	spur-*)
-		cpu=spur
-		;;
-	strongarm-* | thumb-*)
-		cpu=arm
-		;;
-	tx39-*)
-		cpu=mipstx39
-		;;
-	tx39el-*)
-		cpu=mipstx39el
-		;;
-	x64-*)
-		cpu=x86_64
-		;;
-	xscale-* | xscalee[bl]-*)
-		cpu=`echo "$cpu" | sed 's/^xscale/arm/'`
-		;;
-	arm64-* | aarch64le-*)
-		cpu=aarch64
-		;;
-
-	# Recognize the canonical CPU Types that limit and/or modify the
-	# company names they are paired with.
-	cr16-*)
-		basic_os=${basic_os:-elf}
-		;;
-	crisv32-* | etraxfs*-*)
-		cpu=crisv32
-		vendor=axis
-		;;
-	cris-* | etrax*-*)
-		cpu=cris
-		vendor=axis
-		;;
-	crx-*)
-		basic_os=${basic_os:-elf}
-		;;
-	neo-tandem)
-		cpu=neo
-		vendor=tandem
-		;;
-	nse-tandem)
-		cpu=nse
-		vendor=tandem
-		;;
-	nsr-tandem)
-		cpu=nsr
-		vendor=tandem
-		;;
-	nsv-tandem)
-		cpu=nsv
-		vendor=tandem
-		;;
-	nsx-tandem)
-		cpu=nsx
-		vendor=tandem
-		;;
-	mipsallegrexel-sony)
-		cpu=mipsallegrexel
-		vendor=sony
-		;;
-	tile*-*)
-		basic_os=${basic_os:-linux-gnu}
-		;;
-
-	*)
-		# Recognize the canonical CPU types that are allowed with any
-		# company name.
-		case $cpu in
-			1750a | 580 \
-			| a29k \
-			| aarch64 | aarch64_be \
-			| abacus \
-			| alpha | alphaev[4-8] | alphaev56 | alphaev6[78] \
-			| alpha64 | alpha64ev[4-8] | alpha64ev56 | alpha64ev6[78] \
-			| alphapca5[67] | alpha64pca5[67] \
-			| am33_2.0 \
-			| amdgcn \
-			| arc | arceb | arc32 | arc64 \
-			| arm | arm[lb]e | arme[lb] | armv* \
-			| avr | avr32 \
-			| asmjs \
-			| ba \
-			| be32 | be64 \
-			| bfin | bpf | bs2000 \
-			| c[123]* | c30 | [cjt]90 | c4x \
-			| c8051 | clipper | craynv | csky | cydra \
-			| d10v | d30v | dlx | dsp16xx \
-			| e2k | elxsi | epiphany \
-			| f30[01] | f700 | fido | fr30 | frv | ft32 | fx80 \
-			| h8300 | h8500 \
-			| hppa | hppa1.[01] | hppa2.0 | hppa2.0[nw] | hppa64 \
-			| hexagon \
-			| i370 | i*86 | i860 | i960 | ia16 | ia64 \
-			| ip2k | iq2000 \
-			| k1om \
-			| le32 | le64 \
-			| lm32 \
-			| loongarch32 | loongarch64 \
-			| m32c | m32r | m32rle \
-			| m5200 | m68000 | m680[012346]0 | m68360 | m683?2 | m68k \
-			| m6811 | m68hc11 | m6812 | m68hc12 | m68hcs12x \
-			| m88110 | m88k | maxq | mb | mcore | mep | metag \
-			| microblaze | microblazeel \
-			| mips | mipsbe | mipseb | mipsel | mipsle \
-			| mips16 \
-			| mips64 | mips64eb | mips64el \
-			| mips64octeon | mips64octeonel \
-			| mips64orion | mips64orionel \
-			| mips64r5900 | mips64r5900el \
-			| mips64vr | mips64vrel \
-			| mips64vr4100 | mips64vr4100el \
-			| mips64vr4300 | mips64vr4300el \
-			| mips64vr5000 | mips64vr5000el \
-			| mips64vr5900 | mips64vr5900el \
-			| mipsisa32 | mipsisa32el \
-			| mipsisa32r2 | mipsisa32r2el \
-			| mipsisa32r3 | mipsisa32r3el \
-			| mipsisa32r5 | mipsisa32r5el \
-			| mipsisa32r6 | mipsisa32r6el \
-			| mipsisa64 | mipsisa64el \
-			| mipsisa64r2 | mipsisa64r2el \
-			| mipsisa64r3 | mipsisa64r3el \
-			| mipsisa64r5 | mipsisa64r5el \
-			| mipsisa64r6 | mipsisa64r6el \
-			| mipsisa64sb1 | mipsisa64sb1el \
-			| mipsisa64sr71k | mipsisa64sr71kel \
-			| mipsr5900 | mipsr5900el \
-			| mipstx39 | mipstx39el \
-			| mmix \
-			| mn10200 | mn10300 \
-			| moxie \
-			| mt \
-			| msp430 \
-			| nds32 | nds32le | nds32be \
-			| nfp \
-			| nios | nios2 | nios2eb | nios2el \
-			| none | np1 | ns16k | ns32k | nvptx \
-			| open8 \
-			| or1k* \
-			| or32 \
-			| orion \
-			| picochip \
-			| pdp10 | pdp11 | pj | pjl | pn | power \
-			| powerpc | powerpc64 | powerpc64le | powerpcle | powerpcspe \
-			| pru \
-			| pyramid \
-			| riscv | riscv32 | riscv32be | riscv64 | riscv64be \
-			| rl78 | romp | rs6000 | rx \
-			| s390 | s390x \
-			| score \
-			| sh | shl \
-			| sh[1234] | sh[24]a | sh[24]ae[lb] | sh[23]e | she[lb] | sh[lb]e \
-			| sh[1234]e[lb] |  sh[12345][lb]e | sh[23]ele | sh64 | sh64le \
-			| sparc | sparc64 | sparc64b | sparc64v | sparc86x | sparclet \
-			| sparclite \
-			| sparcv8 | sparcv9 | sparcv9b | sparcv9v | sv1 | sx* \
-			| spu \
-			| tahoe \
-			| thumbv7* \
-			| tic30 | tic4x | tic54x | tic55x | tic6x | tic80 \
-			| tron \
-			| ubicom32 \
-			| v70 | v850 | v850e | v850e1 | v850es | v850e2 | v850e2v3 \
-			| vax \
-			| visium \
-			| w65 \
-			| wasm32 | wasm64 \
-			| we32k \
-			| x86 | x86_64 | xc16x | xgate | xps100 \
-			| xstormy16 | xtensa* \
-			| ymp \
-			| z8k | z80)
-				;;
-
-			*)
-				echo Invalid configuration \`"$1"\': machine \`"$cpu-$vendor"\' not recognized 1>&2
-				exit 1
-				;;
-		esac
-		;;
-esac
-
-# Here we canonicalize certain aliases for manufacturers.
-case $vendor in
-	digital*)
-		vendor=dec
-		;;
-	commodore*)
-		vendor=cbm
-		;;
-	*)
-		;;
-esac
-
-# Decode manufacturer-specific aliases for certain operating systems.
-
-if test x$basic_os != x
-then
-
-# First recognize some ad-hoc cases, or perhaps split kernel-os, or else just
-# set os.
-case $basic_os in
-	gnu/linux*)
-		kernel=linux
-		os=`echo "$basic_os" | sed -e 's|gnu/linux|gnu|'`
-		;;
-	os2-emx)
-		kernel=os2
-		os=`echo "$basic_os" | sed -e 's|os2-emx|emx|'`
-		;;
-	nto-qnx*)
-		kernel=nto
-		os=`echo "$basic_os" | sed -e 's|nto-qnx|qnx|'`
-		;;
-	*-*)
-		# shellcheck disable=SC2162
-		saved_IFS=$IFS
-		IFS="-" read kernel os <<EOF
-$basic_os
-EOF
-		IFS=$saved_IFS
-		;;
-	# Default OS when just kernel was specified
-	nto*)
-		kernel=nto
-		os=`echo "$basic_os" | sed -e 's|nto|qnx|'`
-		;;
-	linux*)
-		kernel=linux
-		os=`echo "$basic_os" | sed -e 's|linux|gnu|'`
-		;;
-	managarm*)
-		kernel=managarm
-		os=`echo "$basic_os" | sed -e 's|managarm|mlibc|'`
-		;;
-	*)
-		kernel=
-		os=$basic_os
-		;;
-esac
-
-# Now, normalize the OS (knowing we just have one component, it's not a kernel,
-# etc.)
-case $os in
-	# First match some system type aliases that might get confused
-	# with valid system types.
-	# solaris* is a basic system type, with this one exception.
-	auroraux)
-		os=auroraux
-		;;
-	bluegene*)
-		os=cnk
-		;;
-	solaris1 | solaris1.*)
-		os=`echo "$os" | sed -e 's|solaris1|sunos4|'`
-		;;
-	solaris)
-		os=solaris2
-		;;
-	unixware*)
-		os=sysv4.2uw
-		;;
-	# es1800 is here to avoid being matched by es* (a different OS)
-	es1800*)
-		os=ose
-		;;
-	# Some version numbers need modification
-	chorusos*)
-		os=chorusos
-		;;
-	isc)
-		os=isc2.2
-		;;
-	sco6)
-		os=sco5v6
-		;;
-	sco5)
-		os=sco3.2v5
-		;;
-	sco4)
-		os=sco3.2v4
-		;;
-	sco3.2.[4-9]*)
-		os=`echo "$os" | sed -e 's/sco3.2./sco3.2v/'`
-		;;
-	sco*v* | scout)
-		# Don't match below
-		;;
-	sco*)
-		os=sco3.2v2
-		;;
-	psos*)
-		os=psos
-		;;
-	qnx*)
-		os=qnx
-		;;
-	hiux*)
-		os=hiuxwe2
-		;;
-	lynx*178)
-		os=lynxos178
-		;;
-	lynx*5)
-		os=lynxos5
-		;;
-	lynxos*)
-		# don't get caught up in next wildcard
-		;;
-	lynx*)
-		os=lynxos
-		;;
-	mac[0-9]*)
-		os=`echo "$os" | sed -e 's|mac|macos|'`
-		;;
-	opened*)
-		os=openedition
-		;;
-	os400*)
-		os=os400
-		;;
-	sunos5*)
-		os=`echo "$os" | sed -e 's|sunos5|solaris2|'`
-		;;
-	sunos6*)
-		os=`echo "$os" | sed -e 's|sunos6|solaris3|'`
-		;;
-	wince*)
-		os=wince
-		;;
-	utek*)
-		os=bsd
-		;;
-	dynix*)
-		os=bsd
-		;;
-	acis*)
-		os=aos
-		;;
-	atheos*)
-		os=atheos
-		;;
-	syllable*)
-		os=syllable
-		;;
-	386bsd)
-		os=bsd
-		;;
-	ctix* | uts*)
-		os=sysv
-		;;
-	nova*)
-		os=rtmk-nova
-		;;
-	ns2)
-		os=nextstep2
-		;;
-	# Preserve the version number of sinix5.
-	sinix5.*)
-		os=`echo "$os" | sed -e 's|sinix|sysv|'`
-		;;
-	sinix*)
-		os=sysv4
-		;;
-	tpf*)
-		os=tpf
-		;;
-	triton*)
-		os=sysv3
-		;;
-	oss*)
-		os=sysv3
-		;;
-	svr4*)
-		os=sysv4
-		;;
-	svr3)
-		os=sysv3
-		;;
-	sysvr4)
-		os=sysv4
-		;;
-	ose*)
-		os=ose
-		;;
-	*mint | mint[0-9]* | *MiNT | MiNT[0-9]*)
-		os=mint
-		;;
-	dicos*)
-		os=dicos
-		;;
-	pikeos*)
-		# Until real need of OS specific support for
-		# particular features comes up, bare metal
-		# configurations are quite functional.
-		case $cpu in
-		    arm*)
-			os=eabi
-			;;
-		    *)
-			os=elf
-			;;
-		esac
-		;;
-	*)
-		# No normalization, but not necessarily accepted, that comes below.
-		;;
-esac
-
-else
-
-# Here we handle the default operating systems that come with various machines.
-# The value should be what the vendor currently ships out the door with their
-# machine or put another way, the most popular os provided with the machine.
-
-# Note that if you're going to try to match "-MANUFACTURER" here (say,
-# "-sun"), then you have to tell the case statement up towards the top
-# that MANUFACTURER isn't an operating system.  Otherwise, code above
-# will signal an error saying that MANUFACTURER isn't an operating
-# system, and we'll never get to this point.
-
-kernel=
-case $cpu-$vendor in
-	score-*)
-		os=elf
-		;;
-	spu-*)
-		os=elf
-		;;
-	*-acorn)
-		os=riscix1.2
-		;;
-	arm*-rebel)
-		kernel=linux
-		os=gnu
-		;;
-	arm*-semi)
-		os=aout
-		;;
-	c4x-* | tic4x-*)
-		os=coff
-		;;
-	c8051-*)
-		os=elf
-		;;
-	clipper-intergraph)
-		os=clix
-		;;
-	hexagon-*)
-		os=elf
-		;;
-	tic54x-*)
-		os=coff
-		;;
-	tic55x-*)
-		os=coff
-		;;
-	tic6x-*)
-		os=coff
-		;;
-	# This must come before the *-dec entry.
-	pdp10-*)
-		os=tops20
-		;;
-	pdp11-*)
-		os=none
-		;;
-	*-dec | vax-*)
-		os=ultrix4.2
-		;;
-	m68*-apollo)
-		os=domain
-		;;
-	i386-sun)
-		os=sunos4.0.2
-		;;
-	m68000-sun)
-		os=sunos3
-		;;
-	m68*-cisco)
-		os=aout
-		;;
-	mep-*)
-		os=elf
-		;;
-	mips*-cisco)
-		os=elf
-		;;
-	mips*-*)
-		os=elf
-		;;
-	or32-*)
-		os=coff
-		;;
-	*-tti)	# must be before sparc entry or we get the wrong os.
-		os=sysv3
-		;;
-	sparc-* | *-sun)
-		os=sunos4.1.1
-		;;
-	pru-*)
-		os=elf
-		;;
-	*-be)
-		os=beos
-		;;
-	*-ibm)
-		os=aix
-		;;
-	*-knuth)
-		os=mmixware
-		;;
-	*-wec)
-		os=proelf
-		;;
-	*-winbond)
-		os=proelf
-		;;
-	*-oki)
-		os=proelf
-		;;
-	*-hp)
-		os=hpux
-		;;
-	*-hitachi)
-		os=hiux
-		;;
-	i860-* | *-att | *-ncr | *-altos | *-motorola | *-convergent)
-		os=sysv
-		;;
-	*-cbm)
-		os=amigaos
-		;;
-	*-dg)
-		os=dgux
-		;;
-	*-dolphin)
-		os=sysv3
-		;;
-	m68k-ccur)
-		os=rtu
-		;;
-	m88k-omron*)
-		os=luna
-		;;
-	*-next)
-		os=nextstep
-		;;
-	*-sequent)
-		os=ptx
-		;;
-	*-crds)
-		os=unos
-		;;
-	*-ns)
-		os=genix
-		;;
-	i370-*)
-		os=mvs
-		;;
-	*-gould)
-		os=sysv
-		;;
-	*-highlevel)
-		os=bsd
-		;;
-	*-encore)
-		os=bsd
-		;;
-	*-sgi)
-		os=irix
-		;;
-	*-siemens)
-		os=sysv4
-		;;
-	*-masscomp)
-		os=rtu
-		;;
-	f30[01]-fujitsu | f700-fujitsu)
-		os=uxpv
-		;;
-	*-rom68k)
-		os=coff
-		;;
-	*-*bug)
-		os=coff
-		;;
-	*-apple)
-		os=macos
-		;;
-	*-atari*)
-		os=mint
-		;;
-	*-wrs)
-		os=vxworks
-		;;
-	*)
-		os=none
-		;;
-esac
-
-fi
-
-# Now, validate our (potentially fixed-up) OS.
-case $os in
-	# Sometimes we do "kernel-libc", so those need to count as OSes.
-	musl* | newlib* | relibc* | uclibc*)
-		;;
-	# Likewise for "kernel-abi"
-	eabi* | gnueabi*)
-		;;
-	# VxWorks passes extra cpu info in the 4th filed.
-	simlinux | simwindows | spe)
-		;;
-	# Now accept the basic system types.
-	# The portable systems comes first.
-	# Each alternative MUST end in a * to match a version number.
-	gnu* | android* | bsd* | mach* | minix* | genix* | ultrix* | irix* \
-	     | *vms* | esix* | aix* | cnk* | sunos | sunos[34]* \
-	     | hpux* | unos* | osf* | luna* | dgux* | auroraux* | solaris* \
-	     | sym* |  plan9* | psp* | sim* | xray* | os68k* | v88r* \
-	     | hiux* | abug | nacl* | netware* | windows* \
-	     | os9* | macos* | osx* | ios* \
-	     | mpw* | magic* | mmixware* | mon960* | lnews* \
-	     | amigaos* | amigados* | msdos* | newsos* | unicos* | aof* \
-	     | aos* | aros* | cloudabi* | sortix* | twizzler* \
-	     | nindy* | vxsim* | vxworks* | ebmon* | hms* | mvs* \
-	     | clix* | riscos* | uniplus* | iris* | isc* | rtu* | xenix* \
-	     | mirbsd* | netbsd* | dicos* | openedition* | ose* \
-	     | bitrig* | openbsd* | secbsd* | solidbsd* | libertybsd* | os108* \
-	     | ekkobsd* | freebsd* | riscix* | lynxos* | os400* \
-	     | bosx* | nextstep* | cxux* | aout* | elf* | oabi* \
-	     | ptx* | coff* | ecoff* | winnt* | domain* | vsta* \
-	     | udi* | lites* | ieee* | go32* | aux* | hcos* \
-	     | chorusrdb* | cegcc* | glidix* | serenity* \
-	     | cygwin* | msys* | pe* | moss* | proelf* | rtems* \
-	     | midipix* | mingw32* | mingw64* | mint* \
-	     | uxpv* | beos* | mpeix* | udk* | moxiebox* \
-	     | interix* | uwin* | mks* | rhapsody* | darwin* \
-	     | openstep* | oskit* | conix* | pw32* | nonstopux* \
-	     | storm-chaos* | tops10* | tenex* | tops20* | its* \
-	     | os2* | vos* | palmos* | uclinux* | nucleus* | morphos* \
-	     | scout* | superux* | sysv* | rtmk* | tpf* | windiss* \
-	     | powermax* | dnix* | nx6 | nx7 | sei* | dragonfly* \
-	     | skyos* | haiku* | rdos* | toppers* | drops* | es* \
-	     | onefs* | tirtos* | phoenix* | fuchsia* | redox* | bme* \
-	     | midnightbsd* | amdhsa* | unleashed* | emscripten* | wasi* \
-	     | nsk* | powerunix* | genode* | zvmoe* | qnx* | emx* | zephyr* \
-	     | fiwix* | mlibc* )
-		;;
-	# This one is extra strict with allowed versions
-	sco3.2v2 | sco3.2v[4-9]* | sco5v6*)
-		# Don't forget version if it is 3.2v4 or newer.
-		;;
-	none)
-		;;
-	kernel* )
-		# Restricted further below
-		;;
-	*)
-		echo Invalid configuration \`"$1"\': OS \`"$os"\' not recognized 1>&2
-		exit 1
-		;;
-esac
-
-# As a final step for OS-related things, validate the OS-kernel combination
-# (given a valid OS), if there is a kernel.
-case $kernel-$os in
-	linux-gnu* | linux-dietlibc* | linux-android* | linux-newlib* \
-		   | linux-musl* | linux-relibc* | linux-uclibc* | linux-mlibc* )
-		;;
-	uclinux-uclibc* )
-		;;
-	managarm-mlibc* | managarm-kernel* )
-		;;
-	-dietlibc* | -newlib* | -musl* | -relibc* | -uclibc* | -mlibc* )
-		# These are just libc implementations, not actual OSes, and thus
-		# require a kernel.
-		echo "Invalid configuration \`$1': libc \`$os' needs explicit kernel." 1>&2
-		exit 1
-		;;
-	-kernel* )
-		echo "Invalid configuration \`$1': \`$os' needs explicit kernel." 1>&2
-		exit 1
-		;;
-	*-kernel* )
-		echo "Invalid configuration \`$1': \`$kernel' does not support \`$os'." 1>&2
-		exit 1
-		;;
-	kfreebsd*-gnu* | kopensolaris*-gnu*)
-		;;
-	vxworks-simlinux | vxworks-simwindows | vxworks-spe)
-		;;
-	nto-qnx*)
-		;;
-	os2-emx)
-		;;
-	*-eabi* | *-gnueabi*)
-		;;
-	-*)
-		# Blank kernel with real OS is always fine.
-		;;
-	*-*)
-		echo "Invalid configuration \`$1': Kernel \`$kernel' not known to work with OS \`$os'." 1>&2
-		exit 1
-		;;
-esac
-
-# Here we handle the case where we know the os, and the CPU type, but not the
-# manufacturer.  We pick the logical manufacturer.
-case $vendor in
-	unknown)
-		case $cpu-$os in
-			*-riscix*)
-				vendor=acorn
-				;;
-			*-sunos*)
-				vendor=sun
-				;;
-			*-cnk* | *-aix*)
-				vendor=ibm
-				;;
-			*-beos*)
-				vendor=be
-				;;
-			*-hpux*)
-				vendor=hp
-				;;
-			*-mpeix*)
-				vendor=hp
-				;;
-			*-hiux*)
-				vendor=hitachi
-				;;
-			*-unos*)
-				vendor=crds
-				;;
-			*-dgux*)
-				vendor=dg
-				;;
-			*-luna*)
-				vendor=omron
-				;;
-			*-genix*)
-				vendor=ns
-				;;
-			*-clix*)
-				vendor=intergraph
-				;;
-			*-mvs* | *-opened*)
-				vendor=ibm
-				;;
-			*-os400*)
-				vendor=ibm
-				;;
-			s390-* | s390x-*)
-				vendor=ibm
-				;;
-			*-ptx*)
-				vendor=sequent
-				;;
-			*-tpf*)
-				vendor=ibm
-				;;
-			*-vxsim* | *-vxworks* | *-windiss*)
-				vendor=wrs
-				;;
-			*-aux*)
-				vendor=apple
-				;;
-			*-hms*)
-				vendor=hitachi
-				;;
-			*-mpw* | *-macos*)
-				vendor=apple
-				;;
-			*-*mint | *-mint[0-9]* | *-*MiNT | *-MiNT[0-9]*)
-				vendor=atari
-				;;
-			*-vos*)
-				vendor=stratus
-				;;
-		esac
-		;;
-esac
-
-echo "$cpu-$vendor-${kernel:+$kernel-}$os"
-exit
-
-# Local variables:
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-start: "timestamp='"
-# time-stamp-format: "%:y-%02m-%02d"
-# time-stamp-end: "'"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXfixes/configure b/experiments/wasm-gui/third_party/libXfixes/configure
deleted file mode 100755
index 1f79bfc40..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/configure
+++ /dev/null
@@ -1,21597 +0,0 @@
-#! /bin/sh
-# Guess values for system-dependent variables and create Makefiles.
-# Generated by GNU Autoconf 2.71 for libXfixes 6.0.1.
-#
-# Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxfixes/-/issues>.
-#
-#
-# Copyright (C) 1992-1996, 1998-2017, 2020-2021 Free Software Foundation,
-# Inc.
-#
-#
-# This configure script is free software; the Free Software Foundation
-# gives unlimited permission to copy, distribute and modify it.
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-as_nop=:
-if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # is contrary to our usage.  Disable this feature.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else $as_nop
-  case `(set -o) 2>/dev/null` in #(
-  *posix*) :
-    set -o posix ;; #(
-  *) :
-     ;;
-esac
-fi
-
-
-
-# Reset variables that may have inherited troublesome values from
-# the environment.
-
-# IFS needs to be set, to space, tab, and newline, in precisely that order.
-# (If _AS_PATH_WALK were called with IFS unset, it would have the
-# side effect of setting IFS to empty, thus disabling word splitting.)
-# Quoting is to prevent editors from complaining about space-tab.
-as_nl='
-'
-export as_nl
-IFS=" ""	$as_nl"
-
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# Ensure predictable behavior from utilities with locale-dependent output.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# We cannot yet rely on "unset" to work, but we need these variables
-# to be unset--not just set to an empty or harmless value--now, to
-# avoid bugs in old shells (e.g. pre-3.0 UWIN ksh).  This construct
-# also avoids known problems related to "unset" and subshell syntax
-# in other old shells (e.g. bash 2.01 and pdksh 5.2.14).
-for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH
-do eval test \${$as_var+y} \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-
-# Ensure that fds 0, 1, and 2 are open.
-if (exec 3>&0) 2>/dev/null; then :; else exec 0</dev/null; fi
-if (exec 3>&1) 2>/dev/null; then :; else exec 1>/dev/null; fi
-if (exec 3>&2)            ; then :; else exec 2>/dev/null; fi
-
-# The user is always right.
-if ${PATH_SEPARATOR+false} :; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in #((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    test -r "$as_dir$0" && as_myself=$as_dir$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as `sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  printf "%s\n" "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-
-# Use a proper internal environment variable to ensure we don't fall
-  # into an infinite loop, continuously re-executing ourselves.
-  if test x"${_as_can_reexec}" != xno && test "x$CONFIG_SHELL" != x; then
-    _as_can_reexec=no; export _as_can_reexec;
-    # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in # ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"}
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed `exec'.
-printf "%s\n" "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-  fi
-  # We don't want this to propagate to other subprocesses.
-          { _as_can_reexec=; unset _as_can_reexec;}
-if test "x$CONFIG_SHELL" = x; then
-  as_bourne_compatible="as_nop=:
-if test \${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on \${1+\"\$@\"}, which
-  # is contrary to our usage.  Disable this feature.
-  alias -g '\${1+\"\$@\"}'='\"\$@\"'
-  setopt NO_GLOB_SUBST
-else \$as_nop
-  case \`(set -o) 2>/dev/null\` in #(
-  *posix*) :
-    set -o posix ;; #(
-  *) :
-     ;;
-esac
-fi
-"
-  as_required="as_fn_return () { (exit \$1); }
-as_fn_success () { as_fn_return 0; }
-as_fn_failure () { as_fn_return 1; }
-as_fn_ret_success () { return 0; }
-as_fn_ret_failure () { return 1; }
-
-exitcode=0
-as_fn_success || { exitcode=1; echo as_fn_success failed.; }
-as_fn_failure && { exitcode=1; echo as_fn_failure succeeded.; }
-as_fn_ret_success || { exitcode=1; echo as_fn_ret_success failed.; }
-as_fn_ret_failure && { exitcode=1; echo as_fn_ret_failure succeeded.; }
-if ( set x; as_fn_ret_success y && test x = \"\$1\" )
-then :
-
-else \$as_nop
-  exitcode=1; echo positional parameters were not saved.
-fi
-test x\$exitcode = x0 || exit 1
-blah=\$(echo \$(echo blah))
-test x\"\$blah\" = xblah || exit 1
-test -x / || exit 1"
-  as_suggested="  as_lineno_1=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_1a=\$LINENO
-  as_lineno_2=";as_suggested=$as_suggested$LINENO;as_suggested=$as_suggested" as_lineno_2a=\$LINENO
-  eval 'test \"x\$as_lineno_1'\$as_run'\" != \"x\$as_lineno_2'\$as_run'\" &&
-  test \"x\`expr \$as_lineno_1'\$as_run' + 1\`\" = \"x\$as_lineno_2'\$as_run'\"' || exit 1
-
-  test -n \"\${ZSH_VERSION+set}\${BASH_VERSION+set}\" || (
-    ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-    ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO
-    ECHO=\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO\$ECHO
-    PATH=/empty FPATH=/empty; export PATH FPATH
-    test \"X\`printf %s \$ECHO\`\" = \"X\$ECHO\" \\
-      || test \"X\`print -r -- \$ECHO\`\" = \"X\$ECHO\" ) || exit 1
-test \$(( 1 + 1 )) = 2 || exit 1"
-  if (eval "$as_required") 2>/dev/null
-then :
-  as_have_required=yes
-else $as_nop
-  as_have_required=no
-fi
-  if test x$as_have_required = xyes && (eval "$as_suggested") 2>/dev/null
-then :
-
-else $as_nop
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in /bin$PATH_SEPARATOR/usr/bin$PATH_SEPARATOR$PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-  as_found=:
-  case $as_dir in #(
-	 /*)
-	   for as_base in sh bash ksh sh5; do
-	     # Try only shells that exist, to save several forks.
-	     as_shell=$as_dir$as_base
-	     if { test -f "$as_shell" || test -f "$as_shell.exe"; } &&
-		    as_run=a "$as_shell" -c "$as_bourne_compatible""$as_required" 2>/dev/null
-then :
-  CONFIG_SHELL=$as_shell as_have_required=yes
-		   if as_run=a "$as_shell" -c "$as_bourne_compatible""$as_suggested" 2>/dev/null
-then :
-  break 2
-fi
-fi
-	   done;;
-       esac
-  as_found=false
-done
-IFS=$as_save_IFS
-if $as_found
-then :
-
-else $as_nop
-  if { test -f "$SHELL" || test -f "$SHELL.exe"; } &&
-	      as_run=a "$SHELL" -c "$as_bourne_compatible""$as_required" 2>/dev/null
-then :
-  CONFIG_SHELL=$SHELL as_have_required=yes
-fi
-fi
-
-
-      if test "x$CONFIG_SHELL" != x
-then :
-  export CONFIG_SHELL
-             # We cannot yet assume a decent shell, so we have to provide a
-# neutralization value for shells without unset; and this also
-# works around shells that cannot unset nonexistent variables.
-# Preserve -v and -x to the replacement shell.
-BASH_ENV=/dev/null
-ENV=/dev/null
-(unset BASH_ENV) >/dev/null 2>&1 && unset BASH_ENV ENV
-case $- in # ((((
-  *v*x* | *x*v* ) as_opts=-vx ;;
-  *v* ) as_opts=-v ;;
-  *x* ) as_opts=-x ;;
-  * ) as_opts= ;;
-esac
-exec $CONFIG_SHELL $as_opts "$as_myself" ${1+"$@"}
-# Admittedly, this is quite paranoid, since all the known shells bail
-# out after a failed `exec'.
-printf "%s\n" "$0: could not re-execute with $CONFIG_SHELL" >&2
-exit 255
-fi
-
-    if test x$as_have_required = xno
-then :
-  printf "%s\n" "$0: This script requires a shell more modern than all"
-  printf "%s\n" "$0: the shells that I found on your system."
-  if test ${ZSH_VERSION+y} ; then
-    printf "%s\n" "$0: In particular, zsh $ZSH_VERSION has bugs and should"
-    printf "%s\n" "$0: be upgraded to zsh 4.3.4 or later."
-  else
-    printf "%s\n" "$0: Please tell bug-autoconf@gnu.org and
-$0: https://gitlab.freedesktop.org/xorg/lib/libxfixes/-/issues
-$0: about your system, including any error possibly output
-$0: before this message. Then install a modern shell, or
-$0: manually run the script under such a shell if you do
-$0: have one."
-  fi
-  exit 1
-fi
-fi
-fi
-SHELL=${CONFIG_SHELL-/bin/sh}
-export SHELL
-# Unset more variables known to interfere with behavior of common tools.
-CLICOLOR_FORCE= GREP_OPTIONS=
-unset CLICOLOR_FORCE GREP_OPTIONS
-
-## --------------------- ##
-## M4sh Shell Functions. ##
-## --------------------- ##
-# as_fn_unset VAR
-# ---------------
-# Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-
-# as_fn_set_status STATUS
-# -----------------------
-# Set $? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} # as_fn_set_status
-
-# as_fn_exit STATUS
-# -----------------
-# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} # as_fn_exit
-# as_fn_nop
-# ---------
-# Do nothing but, unlike ":", preserve the value of $?.
-as_fn_nop ()
-{
-  return $?
-}
-as_nop=as_fn_nop
-
-# as_fn_mkdir_p
-# -------------
-# Create "$as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`printf "%s\n" "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-printf "%s\n" X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} # as_fn_mkdir_p
-
-# as_fn_executable_p FILE
-# -----------------------
-# Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} # as_fn_executable_p
-# as_fn_append VAR VALUE
-# ----------------------
-# Append the text in VALUE to the end of the definition contained in VAR. Take
-# advantage of any shell optimizations that allow amortized linear growth over
-# repeated appends, instead of the typical quadratic growth present in naive
-# implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null
-then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else $as_nop
-  as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  }
-fi # as_fn_append
-
-# as_fn_arith ARG...
-# ------------------
-# Perform arithmetic evaluation on the ARGs, and store the result in the
-# global $as_val. Take advantage of shells that can avoid forks. The arguments
-# must be portable across $(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null
-then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else $as_nop
-  as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  }
-fi # as_fn_arith
-
-# as_fn_nop
-# ---------
-# Do nothing but, unlike ":", preserve the value of $?.
-as_fn_nop ()
-{
-  return $?
-}
-as_nop=as_fn_nop
-
-# as_fn_error STATUS ERROR [LINENO LOG_FD]
-# ----------------------------------------
-# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-# script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  printf "%s\n" "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} # as_fn_error
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-printf "%s\n" X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-
-  as_lineno_1=$LINENO as_lineno_1a=$LINENO
-  as_lineno_2=$LINENO as_lineno_2a=$LINENO
-  eval 'test "x$as_lineno_1'$as_run'" != "x$as_lineno_2'$as_run'" &&
-  test "x`expr $as_lineno_1'$as_run' + 1`" = "x$as_lineno_2'$as_run'"' || {
-  # Blame Lee E. McMahon (1931-1989) for sed's syntax.  :-)
-  sed -n '
-    p
-    /[$]LINENO/=
-  ' <$as_myself |
-    sed '
-      s/[$]LINENO.*/&-/
-      t lineno
-      b
-      :lineno
-      N
-      :loop
-      s/[$]LINENO\([^'$as_cr_alnum'_].*\n\)\(.*\)/\2\1\2/
-      t loop
-      s/-\n.*//
-    ' >$as_me.lineno &&
-  chmod +x "$as_me.lineno" ||
-    { printf "%s\n" "$as_me: error: cannot create $as_me.lineno; rerun with a POSIX shell" >&2; as_fn_exit 1; }
-
-  # If we had to re-execute with $CONFIG_SHELL, we're ensured to have
-  # already done that, so ensure we don't try to do so again and fall
-  # in an infinite loop.  This has already happened in practice.
-  _as_can_reexec=no; export _as_can_reexec
-  # Don't try to exec as it changes $[0], causing all sort of problems
-  # (the dirname of $[0] is not the place where we might find the
-  # original and so on.  Autoconf is especially sensitive to this).
-  . "./$as_me.lineno"
-  # Exit status is that of the last command.
-  exit
-}
-
-
-# Determine whether it's possible to make 'echo' print without a newline.
-# These variables are no longer used directly by Autoconf, but are AC_SUBSTed
-# for compatibility with existing Makefiles.
-ECHO_C= ECHO_N= ECHO_T=
-case `echo -n x` in #(((((
--n*)
-  case `echo 'xy\c'` in
-  *c*) ECHO_T='	';;	# ECHO_T is single tab character.
-  xy)  ECHO_C='\c';;
-  *)   echo `echo ksh88 bug on AIX 6.1` > /dev/null
-       ECHO_T='	';;
-  esac;;
-*)
-  ECHO_N='-n';;
-esac
-
-# For backward compatibility with old third-party macros, we provide
-# the shell variables $as_echo and $as_echo_n.  New code should use
-# AS_ECHO(["message"]) and AS_ECHO_N(["message"]), respectively.
-as_echo='printf %s\n'
-as_echo_n='printf %s'
-
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
-    # In both cases, we have to default to `cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'"
-
-# Sed expression to map a string onto a valid variable name.
-as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'"
-
-SHELL=${CONFIG_SHELL-/bin/sh}
-
-
-test -n "$DJDIR" || exec 7<&0 </dev/null
-exec 6>&1
-
-# Name of the host.
-# hostname on some systems (SVR3.2, old GNU/Linux) returns a bogus exit status,
-# so uname gets run too.
-ac_hostname=`(hostname || uname -n) 2>/dev/null | sed 1q`
-
-#
-# Initializations.
-#
-ac_default_prefix=/usr/local
-ac_clean_files=
-ac_config_libobj_dir=.
-LIBOBJS=
-cross_compiling=no
-subdirs=
-MFLAGS=
-MAKEFLAGS=
-
-# Identity of this package.
-PACKAGE_NAME='libXfixes'
-PACKAGE_TARNAME='libXfixes'
-PACKAGE_VERSION='6.0.1'
-PACKAGE_STRING='libXfixes 6.0.1'
-PACKAGE_BUGREPORT='https://gitlab.freedesktop.org/xorg/lib/libxfixes/-/issues'
-PACKAGE_URL=''
-
-ac_unique_file="Makefile.am"
-# Factoring default headers for most tests.
-ac_includes_default="\
-#include <stddef.h>
-#ifdef HAVE_STDIO_H
-# include <stdio.h>
-#endif
-#ifdef HAVE_STDLIB_H
-# include <stdlib.h>
-#endif
-#ifdef HAVE_STRING_H
-# include <string.h>
-#endif
-#ifdef HAVE_INTTYPES_H
-# include <inttypes.h>
-#endif
-#ifdef HAVE_STDINT_H
-# include <stdint.h>
-#endif
-#ifdef HAVE_STRINGS_H
-# include <strings.h>
-#endif
-#ifdef HAVE_SYS_TYPES_H
-# include <sys/types.h>
-#endif
-#ifdef HAVE_SYS_STAT_H
-# include <sys/stat.h>
-#endif
-#ifdef HAVE_UNISTD_H
-# include <unistd.h>
-#endif"
-
-ac_header_c_list=
-ac_subst_vars='am__EXEEXT_FALSE
-am__EXEEXT_TRUE
-LTLIBOBJS
-LIBOBJS
-FIXESEXT_LIBS
-FIXESEXT_CFLAGS
-FIXESEXT_VERSION
-MAN_SUBSTS
-XORG_MAN_PAGE
-ADMIN_MAN_DIR
-DRIVER_MAN_DIR
-MISC_MAN_DIR
-FILE_MAN_DIR
-LIB_MAN_DIR
-APP_MAN_DIR
-ADMIN_MAN_SUFFIX
-DRIVER_MAN_SUFFIX
-MISC_MAN_SUFFIX
-FILE_MAN_SUFFIX
-LIB_MAN_SUFFIX
-APP_MAN_SUFFIX
-INSTALL_CMD
-PKG_CONFIG_LIBDIR
-PKG_CONFIG_PATH
-PKG_CONFIG
-CHANGELOG_CMD
-STRICT_CFLAGS
-CWARNFLAGS
-BASE_CFLAGS
-LT_SYS_LIBRARY_PATH
-OTOOL64
-OTOOL
-LIPO
-NMEDIT
-DSYMUTIL
-MANIFEST_TOOL
-RANLIB
-ac_ct_AR
-AR
-DLLTOOL
-OBJDUMP
-FILECMD
-LN_S
-NM
-ac_ct_DUMPBIN
-DUMPBIN
-LD
-FGREP
-EGREP
-GREP
-SED
-am__fastdepCC_FALSE
-am__fastdepCC_TRUE
-CCDEPMODE
-am__nodep
-AMDEPBACKSLASH
-AMDEP_FALSE
-AMDEP_TRUE
-am__include
-DEPDIR
-OBJEXT
-EXEEXT
-ac_ct_CC
-CPPFLAGS
-LDFLAGS
-CFLAGS
-CC
-host_os
-host_vendor
-host_cpu
-host
-build_os
-build_vendor
-build_cpu
-build
-LIBTOOL
-AM_BACKSLASH
-AM_DEFAULT_VERBOSITY
-AM_DEFAULT_V
-AM_V
-CSCOPE
-ETAGS
-CTAGS
-am__untar
-am__tar
-AMTAR
-am__leading_dot
-SET_MAKE
-AWK
-mkdir_p
-MKDIR_P
-INSTALL_STRIP_PROGRAM
-STRIP
-install_sh
-MAKEINFO
-AUTOHEADER
-AUTOMAKE
-AUTOCONF
-ACLOCAL
-VERSION
-PACKAGE
-CYGPATH_W
-am__isrc
-INSTALL_DATA
-INSTALL_SCRIPT
-INSTALL_PROGRAM
-target_alias
-host_alias
-build_alias
-LIBS
-ECHO_T
-ECHO_N
-ECHO_C
-DEFS
-mandir
-localedir
-libdir
-psdir
-pdfdir
-dvidir
-htmldir
-infodir
-docdir
-oldincludedir
-includedir
-runstatedir
-localstatedir
-sharedstatedir
-sysconfdir
-datadir
-datarootdir
-libexecdir
-sbindir
-bindir
-program_transform_name
-prefix
-exec_prefix
-PACKAGE_URL
-PACKAGE_BUGREPORT
-PACKAGE_STRING
-PACKAGE_VERSION
-PACKAGE_TARNAME
-PACKAGE_NAME
-PATH_SEPARATOR
-SHELL
-am__quote'
-ac_subst_files=''
-ac_user_opts='
-enable_option_checking
-enable_silent_rules
-enable_shared
-enable_static
-with_pic
-enable_fast_install
-with_aix_soname
-enable_dependency_tracking
-with_gnu_ld
-with_sysroot
-enable_libtool_lock
-enable_selective_werror
-enable_strict_compilation
-'
-      ac_precious_vars='build_alias
-host_alias
-target_alias
-CC
-CFLAGS
-LDFLAGS
-LIBS
-CPPFLAGS
-LT_SYS_LIBRARY_PATH
-PKG_CONFIG
-PKG_CONFIG_PATH
-PKG_CONFIG_LIBDIR
-FIXESEXT_CFLAGS
-FIXESEXT_LIBS'
-
-
-# Initialize some variables set by options.
-ac_init_help=
-ac_init_version=false
-ac_unrecognized_opts=
-ac_unrecognized_sep=
-# The variables have the same names as the options, with
-# dashes changed to underlines.
-cache_file=/dev/null
-exec_prefix=NONE
-no_create=
-no_recursion=
-prefix=NONE
-program_prefix=NONE
-program_suffix=NONE
-program_transform_name=s,x,x,
-silent=
-site=
-srcdir=
-verbose=
-x_includes=NONE
-x_libraries=NONE
-
-# Installation directory options.
-# These are left unexpanded so users can "make install exec_prefix=/foo"
-# and all the variables that are supposed to be based on exec_prefix
-# by default will actually change.
-# Use braces instead of parens because sh, perl, etc. also accept them.
-# (The list follows the same order as the GNU Coding Standards.)
-bindir='${exec_prefix}/bin'
-sbindir='${exec_prefix}/sbin'
-libexecdir='${exec_prefix}/libexec'
-datarootdir='${prefix}/share'
-datadir='${datarootdir}'
-sysconfdir='${prefix}/etc'
-sharedstatedir='${prefix}/com'
-localstatedir='${prefix}/var'
-runstatedir='${localstatedir}/run'
-includedir='${prefix}/include'
-oldincludedir='/usr/include'
-docdir='${datarootdir}/doc/${PACKAGE_TARNAME}'
-infodir='${datarootdir}/info'
-htmldir='${docdir}'
-dvidir='${docdir}'
-pdfdir='${docdir}'
-psdir='${docdir}'
-libdir='${exec_prefix}/lib'
-localedir='${datarootdir}/locale'
-mandir='${datarootdir}/man'
-
-ac_prev=
-ac_dashdash=
-for ac_option
-do
-  # If the previous option needs an argument, assign it.
-  if test -n "$ac_prev"; then
-    eval $ac_prev=\$ac_option
-    ac_prev=
-    continue
-  fi
-
-  case $ac_option in
-  *=?*) ac_optarg=`expr "X$ac_option" : '[^=]*=\(.*\)'` ;;
-  *=)   ac_optarg= ;;
-  *)    ac_optarg=yes ;;
-  esac
-
-  case $ac_dashdash$ac_option in
-  --)
-    ac_dashdash=yes ;;
-
-  -bindir | --bindir | --bindi | --bind | --bin | --bi)
-    ac_prev=bindir ;;
-  -bindir=* | --bindir=* | --bindi=* | --bind=* | --bin=* | --bi=*)
-    bindir=$ac_optarg ;;
-
-  -build | --build | --buil | --bui | --bu)
-    ac_prev=build_alias ;;
-  -build=* | --build=* | --buil=* | --bui=* | --bu=*)
-    build_alias=$ac_optarg ;;
-
-  -cache-file | --cache-file | --cache-fil | --cache-fi \
-  | --cache-f | --cache- | --cache | --cach | --cac | --ca | --c)
-    ac_prev=cache_file ;;
-  -cache-file=* | --cache-file=* | --cache-fil=* | --cache-fi=* \
-  | --cache-f=* | --cache-=* | --cache=* | --cach=* | --cac=* | --ca=* | --c=*)
-    cache_file=$ac_optarg ;;
-
-  --config-cache | -C)
-    cache_file=config.cache ;;
-
-  -datadir | --datadir | --datadi | --datad)
-    ac_prev=datadir ;;
-  -datadir=* | --datadir=* | --datadi=* | --datad=*)
-    datadir=$ac_optarg ;;
-
-  -datarootdir | --datarootdir | --datarootdi | --datarootd | --dataroot \
-  | --dataroo | --dataro | --datar)
-    ac_prev=datarootdir ;;
-  -datarootdir=* | --datarootdir=* | --datarootdi=* | --datarootd=* \
-  | --dataroot=* | --dataroo=* | --dataro=* | --datar=*)
-    datarootdir=$ac_optarg ;;
-
-  -disable-* | --disable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*disable-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: \`$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf "%s\n" "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--disable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=no ;;
-
-  -docdir | --docdir | --docdi | --doc | --do)
-    ac_prev=docdir ;;
-  -docdir=* | --docdir=* | --docdi=* | --doc=* | --do=*)
-    docdir=$ac_optarg ;;
-
-  -dvidir | --dvidir | --dvidi | --dvid | --dvi | --dv)
-    ac_prev=dvidir ;;
-  -dvidir=* | --dvidir=* | --dvidi=* | --dvid=* | --dvi=* | --dv=*)
-    dvidir=$ac_optarg ;;
-
-  -enable-* | --enable-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*enable-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid feature name: \`$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf "%s\n" "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"enable_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--enable-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval enable_$ac_useropt=\$ac_optarg ;;
-
-  -exec-prefix | --exec_prefix | --exec-prefix | --exec-prefi \
-  | --exec-pref | --exec-pre | --exec-pr | --exec-p | --exec- \
-  | --exec | --exe | --ex)
-    ac_prev=exec_prefix ;;
-  -exec-prefix=* | --exec_prefix=* | --exec-prefix=* | --exec-prefi=* \
-  | --exec-pref=* | --exec-pre=* | --exec-pr=* | --exec-p=* | --exec-=* \
-  | --exec=* | --exe=* | --ex=*)
-    exec_prefix=$ac_optarg ;;
-
-  -gas | --gas | --ga | --g)
-    # Obsolete; use --with-gas.
-    with_gas=yes ;;
-
-  -help | --help | --hel | --he | -h)
-    ac_init_help=long ;;
-  -help=r* | --help=r* | --hel=r* | --he=r* | -hr*)
-    ac_init_help=recursive ;;
-  -help=s* | --help=s* | --hel=s* | --he=s* | -hs*)
-    ac_init_help=short ;;
-
-  -host | --host | --hos | --ho)
-    ac_prev=host_alias ;;
-  -host=* | --host=* | --hos=* | --ho=*)
-    host_alias=$ac_optarg ;;
-
-  -htmldir | --htmldir | --htmldi | --htmld | --html | --htm | --ht)
-    ac_prev=htmldir ;;
-  -htmldir=* | --htmldir=* | --htmldi=* | --htmld=* | --html=* | --htm=* \
-  | --ht=*)
-    htmldir=$ac_optarg ;;
-
-  -includedir | --includedir | --includedi | --included | --include \
-  | --includ | --inclu | --incl | --inc)
-    ac_prev=includedir ;;
-  -includedir=* | --includedir=* | --includedi=* | --included=* | --include=* \
-  | --includ=* | --inclu=* | --incl=* | --inc=*)
-    includedir=$ac_optarg ;;
-
-  -infodir | --infodir | --infodi | --infod | --info | --inf)
-    ac_prev=infodir ;;
-  -infodir=* | --infodir=* | --infodi=* | --infod=* | --info=* | --inf=*)
-    infodir=$ac_optarg ;;
-
-  -libdir | --libdir | --libdi | --libd)
-    ac_prev=libdir ;;
-  -libdir=* | --libdir=* | --libdi=* | --libd=*)
-    libdir=$ac_optarg ;;
-
-  -libexecdir | --libexecdir | --libexecdi | --libexecd | --libexec \
-  | --libexe | --libex | --libe)
-    ac_prev=libexecdir ;;
-  -libexecdir=* | --libexecdir=* | --libexecdi=* | --libexecd=* | --libexec=* \
-  | --libexe=* | --libex=* | --libe=*)
-    libexecdir=$ac_optarg ;;
-
-  -localedir | --localedir | --localedi | --localed | --locale)
-    ac_prev=localedir ;;
-  -localedir=* | --localedir=* | --localedi=* | --localed=* | --locale=*)
-    localedir=$ac_optarg ;;
-
-  -localstatedir | --localstatedir | --localstatedi | --localstated \
-  | --localstate | --localstat | --localsta | --localst | --locals)
-    ac_prev=localstatedir ;;
-  -localstatedir=* | --localstatedir=* | --localstatedi=* | --localstated=* \
-  | --localstate=* | --localstat=* | --localsta=* | --localst=* | --locals=*)
-    localstatedir=$ac_optarg ;;
-
-  -mandir | --mandir | --mandi | --mand | --man | --ma | --m)
-    ac_prev=mandir ;;
-  -mandir=* | --mandir=* | --mandi=* | --mand=* | --man=* | --ma=* | --m=*)
-    mandir=$ac_optarg ;;
-
-  -nfp | --nfp | --nf)
-    # Obsolete; use --without-fp.
-    with_fp=no ;;
-
-  -no-create | --no-create | --no-creat | --no-crea | --no-cre \
-  | --no-cr | --no-c | -n)
-    no_create=yes ;;
-
-  -no-recursion | --no-recursion | --no-recursio | --no-recursi \
-  | --no-recurs | --no-recur | --no-recu | --no-rec | --no-re | --no-r)
-    no_recursion=yes ;;
-
-  -oldincludedir | --oldincludedir | --oldincludedi | --oldincluded \
-  | --oldinclude | --oldinclud | --oldinclu | --oldincl | --oldinc \
-  | --oldin | --oldi | --old | --ol | --o)
-    ac_prev=oldincludedir ;;
-  -oldincludedir=* | --oldincludedir=* | --oldincludedi=* | --oldincluded=* \
-  | --oldinclude=* | --oldinclud=* | --oldinclu=* | --oldincl=* | --oldinc=* \
-  | --oldin=* | --oldi=* | --old=* | --ol=* | --o=*)
-    oldincludedir=$ac_optarg ;;
-
-  -prefix | --prefix | --prefi | --pref | --pre | --pr | --p)
-    ac_prev=prefix ;;
-  -prefix=* | --prefix=* | --prefi=* | --pref=* | --pre=* | --pr=* | --p=*)
-    prefix=$ac_optarg ;;
-
-  -program-prefix | --program-prefix | --program-prefi | --program-pref \
-  | --program-pre | --program-pr | --program-p)
-    ac_prev=program_prefix ;;
-  -program-prefix=* | --program-prefix=* | --program-prefi=* \
-  | --program-pref=* | --program-pre=* | --program-pr=* | --program-p=*)
-    program_prefix=$ac_optarg ;;
-
-  -program-suffix | --program-suffix | --program-suffi | --program-suff \
-  | --program-suf | --program-su | --program-s)
-    ac_prev=program_suffix ;;
-  -program-suffix=* | --program-suffix=* | --program-suffi=* \
-  | --program-suff=* | --program-suf=* | --program-su=* | --program-s=*)
-    program_suffix=$ac_optarg ;;
-
-  -program-transform-name | --program-transform-name \
-  | --program-transform-nam | --program-transform-na \
-  | --program-transform-n | --program-transform- \
-  | --program-transform | --program-transfor \
-  | --program-transfo | --program-transf \
-  | --program-trans | --program-tran \
-  | --progr-tra | --program-tr | --program-t)
-    ac_prev=program_transform_name ;;
-  -program-transform-name=* | --program-transform-name=* \
-  | --program-transform-nam=* | --program-transform-na=* \
-  | --program-transform-n=* | --program-transform-=* \
-  | --program-transform=* | --program-transfor=* \
-  | --program-transfo=* | --program-transf=* \
-  | --program-trans=* | --program-tran=* \
-  | --progr-tra=* | --program-tr=* | --program-t=*)
-    program_transform_name=$ac_optarg ;;
-
-  -pdfdir | --pdfdir | --pdfdi | --pdfd | --pdf | --pd)
-    ac_prev=pdfdir ;;
-  -pdfdir=* | --pdfdir=* | --pdfdi=* | --pdfd=* | --pdf=* | --pd=*)
-    pdfdir=$ac_optarg ;;
-
-  -psdir | --psdir | --psdi | --psd | --ps)
-    ac_prev=psdir ;;
-  -psdir=* | --psdir=* | --psdi=* | --psd=* | --ps=*)
-    psdir=$ac_optarg ;;
-
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil)
-    silent=yes ;;
-
-  -runstatedir | --runstatedir | --runstatedi | --runstated \
-  | --runstate | --runstat | --runsta | --runst | --runs \
-  | --run | --ru | --r)
-    ac_prev=runstatedir ;;
-  -runstatedir=* | --runstatedir=* | --runstatedi=* | --runstated=* \
-  | --runstate=* | --runstat=* | --runsta=* | --runst=* | --runs=* \
-  | --run=* | --ru=* | --r=*)
-    runstatedir=$ac_optarg ;;
-
-  -sbindir | --sbindir | --sbindi | --sbind | --sbin | --sbi | --sb)
-    ac_prev=sbindir ;;
-  -sbindir=* | --sbindir=* | --sbindi=* | --sbind=* | --sbin=* \
-  | --sbi=* | --sb=*)
-    sbindir=$ac_optarg ;;
-
-  -sharedstatedir | --sharedstatedir | --sharedstatedi \
-  | --sharedstated | --sharedstate | --sharedstat | --sharedsta \
-  | --sharedst | --shareds | --shared | --share | --shar \
-  | --sha | --sh)
-    ac_prev=sharedstatedir ;;
-  -sharedstatedir=* | --sharedstatedir=* | --sharedstatedi=* \
-  | --sharedstated=* | --sharedstate=* | --sharedstat=* | --sharedsta=* \
-  | --sharedst=* | --shareds=* | --shared=* | --share=* | --shar=* \
-  | --sha=* | --sh=*)
-    sharedstatedir=$ac_optarg ;;
-
-  -site | --site | --sit)
-    ac_prev=site ;;
-  -site=* | --site=* | --sit=*)
-    site=$ac_optarg ;;
-
-  -srcdir | --srcdir | --srcdi | --srcd | --src | --sr)
-    ac_prev=srcdir ;;
-  -srcdir=* | --srcdir=* | --srcdi=* | --srcd=* | --src=* | --sr=*)
-    srcdir=$ac_optarg ;;
-
-  -sysconfdir | --sysconfdir | --sysconfdi | --sysconfd | --sysconf \
-  | --syscon | --sysco | --sysc | --sys | --sy)
-    ac_prev=sysconfdir ;;
-  -sysconfdir=* | --sysconfdir=* | --sysconfdi=* | --sysconfd=* | --sysconf=* \
-  | --syscon=* | --sysco=* | --sysc=* | --sys=* | --sy=*)
-    sysconfdir=$ac_optarg ;;
-
-  -target | --target | --targe | --targ | --tar | --ta | --t)
-    ac_prev=target_alias ;;
-  -target=* | --target=* | --targe=* | --targ=* | --tar=* | --ta=* | --t=*)
-    target_alias=$ac_optarg ;;
-
-  -v | -verbose | --verbose | --verbos | --verbo | --verb)
-    verbose=yes ;;
-
-  -version | --version | --versio | --versi | --vers | -V)
-    ac_init_version=: ;;
-
-  -with-* | --with-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*with-\([^=]*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: \`$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf "%s\n" "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--with-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=\$ac_optarg ;;
-
-  -without-* | --without-*)
-    ac_useropt=`expr "x$ac_option" : 'x-*without-\(.*\)'`
-    # Reject names that are not valid shell variable names.
-    expr "x$ac_useropt" : ".*[^-+._$as_cr_alnum]" >/dev/null &&
-      as_fn_error $? "invalid package name: \`$ac_useropt'"
-    ac_useropt_orig=$ac_useropt
-    ac_useropt=`printf "%s\n" "$ac_useropt" | sed 's/[-+.]/_/g'`
-    case $ac_user_opts in
-      *"
-"with_$ac_useropt"
-"*) ;;
-      *) ac_unrecognized_opts="$ac_unrecognized_opts$ac_unrecognized_sep--without-$ac_useropt_orig"
-	 ac_unrecognized_sep=', ';;
-    esac
-    eval with_$ac_useropt=no ;;
-
-  --x)
-    # Obsolete; use --with-x.
-    with_x=yes ;;
-
-  -x-includes | --x-includes | --x-include | --x-includ | --x-inclu \
-  | --x-incl | --x-inc | --x-in | --x-i)
-    ac_prev=x_includes ;;
-  -x-includes=* | --x-includes=* | --x-include=* | --x-includ=* | --x-inclu=* \
-  | --x-incl=* | --x-inc=* | --x-in=* | --x-i=*)
-    x_includes=$ac_optarg ;;
-
-  -x-libraries | --x-libraries | --x-librarie | --x-librari \
-  | --x-librar | --x-libra | --x-libr | --x-lib | --x-li | --x-l)
-    ac_prev=x_libraries ;;
-  -x-libraries=* | --x-libraries=* | --x-librarie=* | --x-librari=* \
-  | --x-librar=* | --x-libra=* | --x-libr=* | --x-lib=* | --x-li=* | --x-l=*)
-    x_libraries=$ac_optarg ;;
-
-  -*) as_fn_error $? "unrecognized option: \`$ac_option'
-Try \`$0 --help' for more information"
-    ;;
-
-  *=*)
-    ac_envvar=`expr "x$ac_option" : 'x\([^=]*\)='`
-    # Reject names that are not valid shell variable names.
-    case $ac_envvar in #(
-      '' | [0-9]* | *[!_$as_cr_alnum]* )
-      as_fn_error $? "invalid variable name: \`$ac_envvar'" ;;
-    esac
-    eval $ac_envvar=\$ac_optarg
-    export $ac_envvar ;;
-
-  *)
-    # FIXME: should be removed in autoconf 3.0.
-    printf "%s\n" "$as_me: WARNING: you should use --build, --host, --target" >&2
-    expr "x$ac_option" : ".*[^-._$as_cr_alnum]" >/dev/null &&
-      printf "%s\n" "$as_me: WARNING: invalid host type: $ac_option" >&2
-    : "${build_alias=$ac_option} ${host_alias=$ac_option} ${target_alias=$ac_option}"
-    ;;
-
-  esac
-done
-
-if test -n "$ac_prev"; then
-  ac_option=--`echo $ac_prev | sed 's/_/-/g'`
-  as_fn_error $? "missing argument to $ac_option"
-fi
-
-if test -n "$ac_unrecognized_opts"; then
-  case $enable_option_checking in
-    no) ;;
-    fatal) as_fn_error $? "unrecognized options: $ac_unrecognized_opts" ;;
-    *)     printf "%s\n" "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2 ;;
-  esac
-fi
-
-# Check all directory arguments for consistency.
-for ac_var in	exec_prefix prefix bindir sbindir libexecdir datarootdir \
-		datadir sysconfdir sharedstatedir localstatedir includedir \
-		oldincludedir docdir infodir htmldir dvidir pdfdir psdir \
-		libdir localedir mandir runstatedir
-do
-  eval ac_val=\$$ac_var
-  # Remove trailing slashes.
-  case $ac_val in
-    */ )
-      ac_val=`expr "X$ac_val" : 'X\(.*[^/]\)' \| "X$ac_val" : 'X\(.*\)'`
-      eval $ac_var=\$ac_val;;
-  esac
-  # Be sure to have absolute directory names.
-  case $ac_val in
-    [\\/$]* | ?:[\\/]* )  continue;;
-    NONE | '' ) case $ac_var in *prefix ) continue;; esac;;
-  esac
-  as_fn_error $? "expected an absolute directory name for --$ac_var: $ac_val"
-done
-
-# There might be people who depend on the old broken behavior: `$host'
-# used to hold the argument of --host etc.
-# FIXME: To remove some day.
-build=$build_alias
-host=$host_alias
-target=$target_alias
-
-# FIXME: To remove some day.
-if test "x$host_alias" != x; then
-  if test "x$build_alias" = x; then
-    cross_compiling=maybe
-  elif test "x$build_alias" != "x$host_alias"; then
-    cross_compiling=yes
-  fi
-fi
-
-ac_tool_prefix=
-test -n "$host_alias" && ac_tool_prefix=$host_alias-
-
-test "$silent" = yes && exec 6>/dev/null
-
-
-ac_pwd=`pwd` && test -n "$ac_pwd" &&
-ac_ls_di=`ls -di .` &&
-ac_pwd_ls_di=`cd "$ac_pwd" && ls -di .` ||
-  as_fn_error $? "working directory cannot be determined"
-test "X$ac_ls_di" = "X$ac_pwd_ls_di" ||
-  as_fn_error $? "pwd does not report name of working directory"
-
-
-# Find the source files, if location was not specified.
-if test -z "$srcdir"; then
-  ac_srcdir_defaulted=yes
-  # Try the directory containing this script, then the parent directory.
-  ac_confdir=`$as_dirname -- "$as_myself" ||
-$as_expr X"$as_myself" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_myself" : 'X\(//\)[^/]' \| \
-	 X"$as_myself" : 'X\(//\)$' \| \
-	 X"$as_myself" : 'X\(/\)' \| . 2>/dev/null ||
-printf "%s\n" X"$as_myself" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  srcdir=$ac_confdir
-  if test ! -r "$srcdir/$ac_unique_file"; then
-    srcdir=..
-  fi
-else
-  ac_srcdir_defaulted=no
-fi
-if test ! -r "$srcdir/$ac_unique_file"; then
-  test "$ac_srcdir_defaulted" = yes && srcdir="$ac_confdir or .."
-  as_fn_error $? "cannot find sources ($ac_unique_file) in $srcdir"
-fi
-ac_msg="sources are in $srcdir, but \`cd $srcdir' does not work"
-ac_abs_confdir=`(
-	cd "$srcdir" && test -r "./$ac_unique_file" || as_fn_error $? "$ac_msg"
-	pwd)`
-# When building in place, set srcdir=.
-if test "$ac_abs_confdir" = "$ac_pwd"; then
-  srcdir=.
-fi
-# Remove unnecessary trailing slashes from srcdir.
-# Double slashes in file names in object file debugging info
-# mess up M-x gdb in Emacs.
-case $srcdir in
-*/) srcdir=`expr "X$srcdir" : 'X\(.*[^/]\)' \| "X$srcdir" : 'X\(.*\)'`;;
-esac
-for ac_var in $ac_precious_vars; do
-  eval ac_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_env_${ac_var}_value=\$${ac_var}
-  eval ac_cv_env_${ac_var}_set=\${${ac_var}+set}
-  eval ac_cv_env_${ac_var}_value=\$${ac_var}
-done
-
-#
-# Report the --help message.
-#
-if test "$ac_init_help" = "long"; then
-  # Omit some internal or obsolete options to make the list less imposing.
-  # This message is too long to be a string in the A/UX 3.1 sh.
-  cat <<_ACEOF
-\`configure' configures libXfixes 6.0.1 to adapt to many kinds of systems.
-
-Usage: $0 [OPTION]... [VAR=VALUE]...
-
-To assign environment variables (e.g., CC, CFLAGS...), specify them as
-VAR=VALUE.  See below for descriptions of some of the useful variables.
-
-Defaults for the options are specified in brackets.
-
-Configuration:
-  -h, --help              display this help and exit
-      --help=short        display options specific to this package
-      --help=recursive    display the short help of all the included packages
-  -V, --version           display version information and exit
-  -q, --quiet, --silent   do not print \`checking ...' messages
-      --cache-file=FILE   cache test results in FILE [disabled]
-  -C, --config-cache      alias for \`--cache-file=config.cache'
-  -n, --no-create         do not create output files
-      --srcdir=DIR        find the sources in DIR [configure dir or \`..']
-
-Installation directories:
-  --prefix=PREFIX         install architecture-independent files in PREFIX
-                          [$ac_default_prefix]
-  --exec-prefix=EPREFIX   install architecture-dependent files in EPREFIX
-                          [PREFIX]
-
-By default, \`make install' will install all the files in
-\`$ac_default_prefix/bin', \`$ac_default_prefix/lib' etc.  You can specify
-an installation prefix other than \`$ac_default_prefix' using \`--prefix',
-for instance \`--prefix=\$HOME'.
-
-For better control, use the options below.
-
-Fine tuning of the installation directories:
-  --bindir=DIR            user executables [EPREFIX/bin]
-  --sbindir=DIR           system admin executables [EPREFIX/sbin]
-  --libexecdir=DIR        program executables [EPREFIX/libexec]
-  --sysconfdir=DIR        read-only single-machine data [PREFIX/etc]
-  --sharedstatedir=DIR    modifiable architecture-independent data [PREFIX/com]
-  --localstatedir=DIR     modifiable single-machine data [PREFIX/var]
-  --runstatedir=DIR       modifiable per-process data [LOCALSTATEDIR/run]
-  --libdir=DIR            object code libraries [EPREFIX/lib]
-  --includedir=DIR        C header files [PREFIX/include]
-  --oldincludedir=DIR     C header files for non-gcc [/usr/include]
-  --datarootdir=DIR       read-only arch.-independent data root [PREFIX/share]
-  --datadir=DIR           read-only architecture-independent data [DATAROOTDIR]
-  --infodir=DIR           info documentation [DATAROOTDIR/info]
-  --localedir=DIR         locale-dependent data [DATAROOTDIR/locale]
-  --mandir=DIR            man documentation [DATAROOTDIR/man]
-  --docdir=DIR            documentation root [DATAROOTDIR/doc/libXfixes]
-  --htmldir=DIR           html documentation [DOCDIR]
-  --dvidir=DIR            dvi documentation [DOCDIR]
-  --pdfdir=DIR            pdf documentation [DOCDIR]
-  --psdir=DIR             ps documentation [DOCDIR]
-_ACEOF
-
-  cat <<\_ACEOF
-
-Program names:
-  --program-prefix=PREFIX            prepend PREFIX to installed program names
-  --program-suffix=SUFFIX            append SUFFIX to installed program names
-  --program-transform-name=PROGRAM   run sed PROGRAM on installed program names
-
-System types:
-  --build=BUILD     configure for building on BUILD [guessed]
-  --host=HOST       cross-compile to build programs to run on HOST [BUILD]
-_ACEOF
-fi
-
-if test -n "$ac_init_help"; then
-  case $ac_init_help in
-     short | recursive ) echo "Configuration of libXfixes 6.0.1:";;
-   esac
-  cat <<\_ACEOF
-
-Optional Features:
-  --disable-option-checking  ignore unrecognized --enable/--with options
-  --disable-FEATURE       do not include FEATURE (same as --enable-FEATURE=no)
-  --enable-FEATURE[=ARG]  include FEATURE [ARG=yes]
-  --enable-silent-rules   less verbose build output (undo: "make V=1")
-  --disable-silent-rules  verbose build output (undo: "make V=0")
-  --enable-shared[=PKGS]  build shared libraries [default=yes]
-  --enable-static[=PKGS]  build static libraries [default=yes]
-  --enable-fast-install[=PKGS]
-                          optimize for fast installation [default=yes]
-  --enable-dependency-tracking
-                          do not reject slow dependency extractors
-  --disable-dependency-tracking
-                          speeds up one-time build
-  --disable-libtool-lock  avoid locking (might break parallel builds)
-  --disable-selective-werror
-                          Turn off selective compiler errors. (default:
-                          enabled)
-  --enable-strict-compilation
-                          Enable all warnings from compiler and make them
-                          errors (default: disabled)
-
-Optional Packages:
-  --with-PACKAGE[=ARG]    use PACKAGE [ARG=yes]
-  --without-PACKAGE       do not use PACKAGE (same as --with-PACKAGE=no)
-  --with-pic[=PKGS]       try to use only PIC/non-PIC objects [default=use
-                          both]
-  --with-aix-soname=aix|svr4|both
-                          shared library versioning (aka "SONAME") variant to
-                          provide on AIX, [default=aix].
-  --with-gnu-ld           assume the C compiler uses GNU ld [default=no]
-  --with-sysroot[=DIR]    Search for dependent libraries within DIR (or the
-                          compiler's sysroot if not specified).
-
-Some influential environment variables:
-  CC          C compiler command
-  CFLAGS      C compiler flags
-  LDFLAGS     linker flags, e.g. -L<lib dir> if you have libraries in a
-              nonstandard directory <lib dir>
-  LIBS        libraries to pass to the linker, e.g. -l<library>
-  CPPFLAGS    (Objective) C/C++ preprocessor flags, e.g. -I<include dir> if
-              you have headers in a nonstandard directory <include dir>
-  LT_SYS_LIBRARY_PATH
-              User-defined run-time library search path.
-  PKG_CONFIG  path to pkg-config utility
-  PKG_CONFIG_PATH
-              directories to add to pkg-config's search path
-  PKG_CONFIG_LIBDIR
-              path overriding pkg-config's built-in search path
-  FIXESEXT_CFLAGS
-              C compiler flags for FIXESEXT, overriding pkg-config
-  FIXESEXT_LIBS
-              linker flags for FIXESEXT, overriding pkg-config
-
-Use these variables to override the choices made by `configure' or to help
-it to find libraries and programs with nonstandard names/locations.
-
-Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxfixes/-/issues>.
-_ACEOF
-ac_status=$?
-fi
-
-if test "$ac_init_help" = "recursive"; then
-  # If there are subdirs, report their specific --help.
-  for ac_dir in : $ac_subdirs_all; do test "x$ac_dir" = x: && continue
-    test -d "$ac_dir" ||
-      { cd "$srcdir" && ac_pwd=`pwd` && srcdir=. && test -d "$ac_dir"; } ||
-      continue
-    ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`printf "%s\n" "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`printf "%s\n" "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-    cd "$ac_dir" || { ac_status=$?; continue; }
-    # Check for configure.gnu first; this name is used for a wrapper for
-    # Metaconfig's "Configure" on case-insensitive file systems.
-    if test -f "$ac_srcdir/configure.gnu"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure.gnu" --help=recursive
-    elif test -f "$ac_srcdir/configure"; then
-      echo &&
-      $SHELL "$ac_srcdir/configure" --help=recursive
-    else
-      printf "%s\n" "$as_me: WARNING: no configuration information is in $ac_dir" >&2
-    fi || ac_status=$?
-    cd "$ac_pwd" || { ac_status=$?; break; }
-  done
-fi
-
-test -n "$ac_init_help" && exit $ac_status
-if $ac_init_version; then
-  cat <<\_ACEOF
-libXfixes configure 6.0.1
-generated by GNU Autoconf 2.71
-
-Copyright (C) 2021 Free Software Foundation, Inc.
-This configure script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it.
-_ACEOF
-  exit
-fi
-
-## ------------------------ ##
-## Autoconf initialization. ##
-## ------------------------ ##
-
-# ac_fn_c_try_compile LINENO
-# --------------------------
-# Try to compile conftest.$ac_ext, and return whether this succeeded.
-ac_fn_c_try_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest.beam
-  if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf "%s\n" "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest.$ac_objext
-then :
-  ac_retval=0
-else $as_nop
-  printf "%s\n" "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1
-fi
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} # ac_fn_c_try_compile
-
-# ac_fn_c_try_link LINENO
-# -----------------------
-# Try to link conftest.$ac_ext, and return whether this succeeded.
-ac_fn_c_try_link ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  rm -f conftest.$ac_objext conftest.beam conftest$ac_exeext
-  if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf "%s\n" "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    grep -v '^ *+' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-    mv -f conftest.er1 conftest.err
-  fi
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && {
-	 test -z "$ac_c_werror_flag" ||
-	 test ! -s conftest.err
-       } && test -s conftest$ac_exeext && {
-	 test "$cross_compiling" = yes ||
-	 test -x conftest$ac_exeext
-       }
-then :
-  ac_retval=0
-else $as_nop
-  printf "%s\n" "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-	ac_retval=1
-fi
-  # Delete the IPA/IPO (Inter Procedural Analysis/Optimization) information
-  # created by the PGI compiler (conftest_ipa8_conftest.oo), as it would
-  # interfere with the next link command; also delete a directory that is
-  # left behind by Apple's compiler.  We do this before executing the actions.
-  rm -rf conftest.dSYM conftest_ipa8_conftest.oo
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-  as_fn_set_status $ac_retval
-
-} # ac_fn_c_try_link
-
-# ac_fn_c_check_header_compile LINENO HEADER VAR INCLUDES
-# -------------------------------------------------------
-# Tests whether HEADER exists and can be compiled using the include files in
-# INCLUDES, setting the cache variable VAR accordingly.
-ac_fn_c_check_header_compile ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-printf %s "checking for $2... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-#include <$2>
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  eval "$3=yes"
-else $as_nop
-  eval "$3=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-eval ac_res=\$$3
-	       { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf "%s\n" "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_header_compile
-
-# ac_fn_c_check_func LINENO FUNC VAR
-# ----------------------------------
-# Tests whether FUNC exists, setting the cache variable VAR accordingly
-ac_fn_c_check_func ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $2" >&5
-printf %s "checking for $2... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-/* Define $2 to an innocuous variant, in case <limits.h> declares $2.
-   For example, HP-UX 11i <limits.h> declares gettimeofday.  */
-#define $2 innocuous_$2
-
-/* System header to define __stub macros and hopefully few prototypes,
-   which can conflict with char $2 (); below.  */
-
-#include <limits.h>
-#undef $2
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-#ifdef __cplusplus
-extern "C"
-#endif
-char $2 ();
-/* The GNU C library defines this for functions which it implements
-    to always fail with ENOSYS.  Some functions are actually named
-    something starting with __ and the normal name is an alias.  */
-#if defined __stub_$2 || defined __stub___$2
-choke me
-#endif
-
-int
-main (void)
-{
-return $2 ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval "$3=yes"
-else $as_nop
-  eval "$3=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-eval ac_res=\$$3
-	       { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf "%s\n" "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_c_check_func
-
-# ac_fn_check_decl LINENO SYMBOL VAR INCLUDES EXTRA-OPTIONS FLAG-VAR
-# ------------------------------------------------------------------
-# Tests whether SYMBOL is declared in INCLUDES, setting cache variable VAR
-# accordingly. Pass EXTRA-OPTIONS to the compiler, using FLAG-VAR.
-ac_fn_check_decl ()
-{
-  as_lineno=${as_lineno-"$1"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-  as_decl_name=`echo $2|sed 's/ *(.*//'`
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether $as_decl_name is declared" >&5
-printf %s "checking whether $as_decl_name is declared... " >&6; }
-if eval test \${$3+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  as_decl_use=`echo $2|sed -e 's/(/((/' -e 's/)/) 0&/' -e 's/,/) 0& (/g'`
-  eval ac_save_FLAGS=\$$6
-  as_fn_append $6 " $5"
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$4
-int
-main (void)
-{
-#ifndef $as_decl_name
-#ifdef __cplusplus
-  (void) $as_decl_use;
-#else
-  (void) $as_decl_name;
-#endif
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  eval "$3=yes"
-else $as_nop
-  eval "$3=no"
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-  eval $6=\$ac_save_FLAGS
-
-fi
-eval ac_res=\$$3
-	       { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_res" >&5
-printf "%s\n" "$ac_res" >&6; }
-  eval $as_lineno_stack; ${as_lineno_stack:+:} unset as_lineno
-
-} # ac_fn_check_decl
-ac_configure_args_raw=
-for ac_arg
-do
-  case $ac_arg in
-  *\'*)
-    ac_arg=`printf "%s\n" "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
-  esac
-  as_fn_append ac_configure_args_raw " '$ac_arg'"
-done
-
-case $ac_configure_args_raw in
-  *$as_nl*)
-    ac_safe_unquote= ;;
-  *)
-    ac_unsafe_z='|&;<>()$`\\"*?[ ''	' # This string ends in space, tab.
-    ac_unsafe_a="$ac_unsafe_z#~"
-    ac_safe_unquote="s/ '\\([^$ac_unsafe_a][^$ac_unsafe_z]*\\)'/ \\1/g"
-    ac_configure_args_raw=`      printf "%s\n" "$ac_configure_args_raw" | sed "$ac_safe_unquote"`;;
-esac
-
-cat >config.log <<_ACEOF
-This file contains any messages produced by compilers while
-running configure, to aid debugging if configure makes a mistake.
-
-It was created by libXfixes $as_me 6.0.1, which was
-generated by GNU Autoconf 2.71.  Invocation command line was
-
-  $ $0$ac_configure_args_raw
-
-_ACEOF
-exec 5>>config.log
-{
-cat <<_ASUNAME
-## --------- ##
-## Platform. ##
-## --------- ##
-
-hostname = `(hostname || uname -n) 2>/dev/null | sed 1q`
-uname -m = `(uname -m) 2>/dev/null || echo unknown`
-uname -r = `(uname -r) 2>/dev/null || echo unknown`
-uname -s = `(uname -s) 2>/dev/null || echo unknown`
-uname -v = `(uname -v) 2>/dev/null || echo unknown`
-
-/usr/bin/uname -p = `(/usr/bin/uname -p) 2>/dev/null || echo unknown`
-/bin/uname -X     = `(/bin/uname -X) 2>/dev/null     || echo unknown`
-
-/bin/arch              = `(/bin/arch) 2>/dev/null              || echo unknown`
-/usr/bin/arch -k       = `(/usr/bin/arch -k) 2>/dev/null       || echo unknown`
-/usr/convex/getsysinfo = `(/usr/convex/getsysinfo) 2>/dev/null || echo unknown`
-/usr/bin/hostinfo      = `(/usr/bin/hostinfo) 2>/dev/null      || echo unknown`
-/bin/machine           = `(/bin/machine) 2>/dev/null           || echo unknown`
-/usr/bin/oslevel       = `(/usr/bin/oslevel) 2>/dev/null       || echo unknown`
-/bin/universe          = `(/bin/universe) 2>/dev/null          || echo unknown`
-
-_ASUNAME
-
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    printf "%s\n" "PATH: $as_dir"
-  done
-IFS=$as_save_IFS
-
-} >&5
-
-cat >&5 <<_ACEOF
-
-
-## ----------- ##
-## Core tests. ##
-## ----------- ##
-
-_ACEOF
-
-
-# Keep a trace of the command line.
-# Strip out --no-create and --no-recursion so they do not pile up.
-# Strip out --silent because we don't want to record it for future runs.
-# Also quote any args containing shell meta-characters.
-# Make two passes to allow for proper duplicate-argument suppression.
-ac_configure_args=
-ac_configure_args0=
-ac_configure_args1=
-ac_must_keep_next=false
-for ac_pass in 1 2
-do
-  for ac_arg
-  do
-    case $ac_arg in
-    -no-create | --no-c* | -n | -no-recursion | --no-r*) continue ;;
-    -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-    | -silent | --silent | --silen | --sile | --sil)
-      continue ;;
-    *\'*)
-      ac_arg=`printf "%s\n" "$ac_arg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    case $ac_pass in
-    1) as_fn_append ac_configure_args0 " '$ac_arg'" ;;
-    2)
-      as_fn_append ac_configure_args1 " '$ac_arg'"
-      if test $ac_must_keep_next = true; then
-	ac_must_keep_next=false # Got value, back to normal.
-      else
-	case $ac_arg in
-	  *=* | --config-cache | -C | -disable-* | --disable-* \
-	  | -enable-* | --enable-* | -gas | --g* | -nfp | --nf* \
-	  | -q | -quiet | --q* | -silent | --sil* | -v | -verb* \
-	  | -with-* | --with-* | -without-* | --without-* | --x)
-	    case "$ac_configure_args0 " in
-	      "$ac_configure_args1"*" '$ac_arg' "* ) continue ;;
-	    esac
-	    ;;
-	  -* ) ac_must_keep_next=true ;;
-	esac
-      fi
-      as_fn_append ac_configure_args " '$ac_arg'"
-      ;;
-    esac
-  done
-done
-{ ac_configure_args0=; unset ac_configure_args0;}
-{ ac_configure_args1=; unset ac_configure_args1;}
-
-# When interrupted or exit'd, cleanup temporary files, and complete
-# config.log.  We remove comments because anyway the quotes in there
-# would cause problems or look ugly.
-# WARNING: Use '\'' to represent an apostrophe within the trap.
-# WARNING: Do not start the trap code with a newline, due to a FreeBSD 4.0 bug.
-trap 'exit_status=$?
-  # Sanitize IFS.
-  IFS=" ""	$as_nl"
-  # Save into config.log some information that might help in debugging.
-  {
-    echo
-
-    printf "%s\n" "## ---------------- ##
-## Cache variables. ##
-## ---------------- ##"
-    echo
-    # The following way of writing the cache mishandles newlines in values,
-(
-  for ac_var in `(set) 2>&1 | sed -n '\''s/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'\''`; do
-    eval ac_val=\$$ac_var
-    case $ac_val in #(
-    *${as_nl}*)
-      case $ac_var in #(
-      *_cv_*) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
-printf "%s\n" "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
-      esac
-      case $ac_var in #(
-      _ | IFS | as_nl) ;; #(
-      BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
-      *) { eval $ac_var=; unset $ac_var;} ;;
-      esac ;;
-    esac
-  done
-  (set) 2>&1 |
-    case $as_nl`(ac_space='\'' '\''; set) 2>&1` in #(
-    *${as_nl}ac_space=\ *)
-      sed -n \
-	"s/'\''/'\''\\\\'\'''\''/g;
-	  s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\''\\2'\''/p"
-      ;; #(
-    *)
-      sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
-      ;;
-    esac |
-    sort
-)
-    echo
-
-    printf "%s\n" "## ----------------- ##
-## Output variables. ##
-## ----------------- ##"
-    echo
-    for ac_var in $ac_subst_vars
-    do
-      eval ac_val=\$$ac_var
-      case $ac_val in
-      *\'\''*) ac_val=`printf "%s\n" "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
-      esac
-      printf "%s\n" "$ac_var='\''$ac_val'\''"
-    done | sort
-    echo
-
-    if test -n "$ac_subst_files"; then
-      printf "%s\n" "## ------------------- ##
-## File substitutions. ##
-## ------------------- ##"
-      echo
-      for ac_var in $ac_subst_files
-      do
-	eval ac_val=\$$ac_var
-	case $ac_val in
-	*\'\''*) ac_val=`printf "%s\n" "$ac_val" | sed "s/'\''/'\''\\\\\\\\'\'''\''/g"`;;
-	esac
-	printf "%s\n" "$ac_var='\''$ac_val'\''"
-      done | sort
-      echo
-    fi
-
-    if test -s confdefs.h; then
-      printf "%s\n" "## ----------- ##
-## confdefs.h. ##
-## ----------- ##"
-      echo
-      cat confdefs.h
-      echo
-    fi
-    test "$ac_signal" != 0 &&
-      printf "%s\n" "$as_me: caught signal $ac_signal"
-    printf "%s\n" "$as_me: exit $exit_status"
-  } >&5
-  rm -f core *.core core.conftest.* &&
-    rm -f -r conftest* confdefs* conf$$* $ac_clean_files &&
-    exit $exit_status
-' 0
-for ac_signal in 1 2 13 15; do
-  trap 'ac_signal='$ac_signal'; as_fn_exit 1' $ac_signal
-done
-ac_signal=0
-
-# confdefs.h avoids OS command line length limits that DEFS can exceed.
-rm -f -r conftest* confdefs.h
-
-printf "%s\n" "/* confdefs.h */" > confdefs.h
-
-# Predefined preprocessor variables.
-
-printf "%s\n" "#define PACKAGE_NAME \"$PACKAGE_NAME\"" >>confdefs.h
-
-printf "%s\n" "#define PACKAGE_TARNAME \"$PACKAGE_TARNAME\"" >>confdefs.h
-
-printf "%s\n" "#define PACKAGE_VERSION \"$PACKAGE_VERSION\"" >>confdefs.h
-
-printf "%s\n" "#define PACKAGE_STRING \"$PACKAGE_STRING\"" >>confdefs.h
-
-printf "%s\n" "#define PACKAGE_BUGREPORT \"$PACKAGE_BUGREPORT\"" >>confdefs.h
-
-printf "%s\n" "#define PACKAGE_URL \"$PACKAGE_URL\"" >>confdefs.h
-
-
-# Let the site file select an alternate cache file if it wants to.
-# Prefer an explicitly selected file to automatically selected ones.
-if test -n "$CONFIG_SITE"; then
-  ac_site_files="$CONFIG_SITE"
-elif test "x$prefix" != xNONE; then
-  ac_site_files="$prefix/share/config.site $prefix/etc/config.site"
-else
-  ac_site_files="$ac_default_prefix/share/config.site $ac_default_prefix/etc/config.site"
-fi
-
-for ac_site_file in $ac_site_files
-do
-  case $ac_site_file in #(
-  */*) :
-     ;; #(
-  *) :
-    ac_site_file=./$ac_site_file ;;
-esac
-  if test -f "$ac_site_file" && test -r "$ac_site_file"; then
-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: loading site script $ac_site_file" >&5
-printf "%s\n" "$as_me: loading site script $ac_site_file" >&6;}
-    sed 's/^/| /' "$ac_site_file" >&5
-    . "$ac_site_file" \
-      || { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "failed to load site script $ac_site_file
-See \`config.log' for more details" "$LINENO" 5; }
-  fi
-done
-
-if test -r "$cache_file"; then
-  # Some versions of bash will fail to source /dev/null (special files
-  # actually), so we avoid doing that.  DJGPP emulates it as a regular file.
-  if test /dev/null != "$cache_file" && test -f "$cache_file"; then
-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: loading cache $cache_file" >&5
-printf "%s\n" "$as_me: loading cache $cache_file" >&6;}
-    case $cache_file in
-      [\\/]* | ?:[\\/]* ) . "$cache_file";;
-      *)                      . "./$cache_file";;
-    esac
-  fi
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: creating cache $cache_file" >&5
-printf "%s\n" "$as_me: creating cache $cache_file" >&6;}
-  >$cache_file
-fi
-
-# Test code for whether the C compiler supports C89 (global declarations)
-ac_c_conftest_c89_globals='
-/* Does the compiler advertise C89 conformance?
-   Do not test the value of __STDC__, because some compilers set it to 0
-   while being otherwise adequately conformant. */
-#if !defined __STDC__
-# error "Compiler does not advertise C89 conformance"
-#endif
-
-#include <stddef.h>
-#include <stdarg.h>
-struct stat;
-/* Most of the following tests are stolen from RCS 5.7 src/conf.sh.  */
-struct buf { int x; };
-struct buf * (*rcsopen) (struct buf *, struct stat *, int);
-static char *e (p, i)
-     char **p;
-     int i;
-{
-  return p[i];
-}
-static char *f (char * (*g) (char **, int), char **p, ...)
-{
-  char *s;
-  va_list v;
-  va_start (v,p);
-  s = g (p, va_arg (v,int));
-  va_end (v);
-  return s;
-}
-
-/* OSF 4.0 Compaq cc is some sort of almost-ANSI by default.  It has
-   function prototypes and stuff, but not \xHH hex character constants.
-   These do not provoke an error unfortunately, instead are silently treated
-   as an "x".  The following induces an error, until -std is added to get
-   proper ANSI mode.  Curiously \x00 != x always comes out true, for an
-   array size at least.  It is necessary to write \x00 == 0 to get something
-   that is true only with -std.  */
-int osf4_cc_array ['\''\x00'\'' == 0 ? 1 : -1];
-
-/* IBM C 6 for AIX is almost-ANSI by default, but it replaces macro parameters
-   inside strings and character constants.  */
-#define FOO(x) '\''x'\''
-int xlc6_cc_array[FOO(a) == '\''x'\'' ? 1 : -1];
-
-int test (int i, double x);
-struct s1 {int (*f) (int a);};
-struct s2 {int (*f) (double a);};
-int pairnames (int, char **, int *(*)(struct buf *, struct stat *, int),
-               int, int);'
-
-# Test code for whether the C compiler supports C89 (body of main).
-ac_c_conftest_c89_main='
-ok |= (argc == 0 || f (e, argv, 0) != argv[0] || f (e, argv, 1) != argv[1]);
-'
-
-# Test code for whether the C compiler supports C99 (global declarations)
-ac_c_conftest_c99_globals='
-// Does the compiler advertise C99 conformance?
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ < 199901L
-# error "Compiler does not advertise C99 conformance"
-#endif
-
-#include <stdbool.h>
-extern int puts (const char *);
-extern int printf (const char *, ...);
-extern int dprintf (int, const char *, ...);
-extern void *malloc (size_t);
-
-// Check varargs macros.  These examples are taken from C99 6.10.3.5.
-// dprintf is used instead of fprintf to avoid needing to declare
-// FILE and stderr.
-#define debug(...) dprintf (2, __VA_ARGS__)
-#define showlist(...) puts (#__VA_ARGS__)
-#define report(test,...) ((test) ? puts (#test) : printf (__VA_ARGS__))
-static void
-test_varargs_macros (void)
-{
-  int x = 1234;
-  int y = 5678;
-  debug ("Flag");
-  debug ("X = %d\n", x);
-  showlist (The first, second, and third items.);
-  report (x>y, "x is %d but y is %d", x, y);
-}
-
-// Check long long types.
-#define BIG64 18446744073709551615ull
-#define BIG32 4294967295ul
-#define BIG_OK (BIG64 / BIG32 == 4294967297ull && BIG64 % BIG32 == 0)
-#if !BIG_OK
-  #error "your preprocessor is broken"
-#endif
-#if BIG_OK
-#else
-  #error "your preprocessor is broken"
-#endif
-static long long int bignum = -9223372036854775807LL;
-static unsigned long long int ubignum = BIG64;
-
-struct incomplete_array
-{
-  int datasize;
-  double data[];
-};
-
-struct named_init {
-  int number;
-  const wchar_t *name;
-  double average;
-};
-
-typedef const char *ccp;
-
-static inline int
-test_restrict (ccp restrict text)
-{
-  // See if C++-style comments work.
-  // Iterate through items via the restricted pointer.
-  // Also check for declarations in for loops.
-  for (unsigned int i = 0; *(text+i) != '\''\0'\''; ++i)
-    continue;
-  return 0;
-}
-
-// Check varargs and va_copy.
-static bool
-test_varargs (const char *format, ...)
-{
-  va_list args;
-  va_start (args, format);
-  va_list args_copy;
-  va_copy (args_copy, args);
-
-  const char *str = "";
-  int number = 0;
-  float fnumber = 0;
-
-  while (*format)
-    {
-      switch (*format++)
-	{
-	case '\''s'\'': // string
-	  str = va_arg (args_copy, const char *);
-	  break;
-	case '\''d'\'': // int
-	  number = va_arg (args_copy, int);
-	  break;
-	case '\''f'\'': // float
-	  fnumber = va_arg (args_copy, double);
-	  break;
-	default:
-	  break;
-	}
-    }
-  va_end (args_copy);
-  va_end (args);
-
-  return *str && number && fnumber;
-}
-'
-
-# Test code for whether the C compiler supports C99 (body of main).
-ac_c_conftest_c99_main='
-  // Check bool.
-  _Bool success = false;
-  success |= (argc != 0);
-
-  // Check restrict.
-  if (test_restrict ("String literal") == 0)
-    success = true;
-  char *restrict newvar = "Another string";
-
-  // Check varargs.
-  success &= test_varargs ("s, d'\'' f .", "string", 65, 34.234);
-  test_varargs_macros ();
-
-  // Check flexible array members.
-  struct incomplete_array *ia =
-    malloc (sizeof (struct incomplete_array) + (sizeof (double) * 10));
-  ia->datasize = 10;
-  for (int i = 0; i < ia->datasize; ++i)
-    ia->data[i] = i * 1.234;
-
-  // Check named initializers.
-  struct named_init ni = {
-    .number = 34,
-    .name = L"Test wide string",
-    .average = 543.34343,
-  };
-
-  ni.number = 58;
-
-  int dynamic_array[ni.number];
-  dynamic_array[0] = argv[0][0];
-  dynamic_array[ni.number - 1] = 543;
-
-  // work around unused variable warnings
-  ok |= (!success || bignum == 0LL || ubignum == 0uLL || newvar[0] == '\''x'\''
-	 || dynamic_array[ni.number - 1] != 543);
-'
-
-# Test code for whether the C compiler supports C11 (global declarations)
-ac_c_conftest_c11_globals='
-// Does the compiler advertise C11 conformance?
-#if !defined __STDC_VERSION__ || __STDC_VERSION__ < 201112L
-# error "Compiler does not advertise C11 conformance"
-#endif
-
-// Check _Alignas.
-char _Alignas (double) aligned_as_double;
-char _Alignas (0) no_special_alignment;
-extern char aligned_as_int;
-char _Alignas (0) _Alignas (int) aligned_as_int;
-
-// Check _Alignof.
-enum
-{
-  int_alignment = _Alignof (int),
-  int_array_alignment = _Alignof (int[100]),
-  char_alignment = _Alignof (char)
-};
-_Static_assert (0 < -_Alignof (int), "_Alignof is signed");
-
-// Check _Noreturn.
-int _Noreturn does_not_return (void) { for (;;) continue; }
-
-// Check _Static_assert.
-struct test_static_assert
-{
-  int x;
-  _Static_assert (sizeof (int) <= sizeof (long int),
-                  "_Static_assert does not work in struct");
-  long int y;
-};
-
-// Check UTF-8 literals.
-#define u8 syntax error!
-char const utf8_literal[] = u8"happens to be ASCII" "another string";
-
-// Check duplicate typedefs.
-typedef long *long_ptr;
-typedef long int *long_ptr;
-typedef long_ptr long_ptr;
-
-// Anonymous structures and unions -- taken from C11 6.7.2.1 Example 1.
-struct anonymous
-{
-  union {
-    struct { int i; int j; };
-    struct { int k; long int l; } w;
-  };
-  int m;
-} v1;
-'
-
-# Test code for whether the C compiler supports C11 (body of main).
-ac_c_conftest_c11_main='
-  _Static_assert ((offsetof (struct anonymous, i)
-		   == offsetof (struct anonymous, w.k)),
-		  "Anonymous union alignment botch");
-  v1.i = 2;
-  v1.w.k = 5;
-  ok |= v1.i != 5;
-'
-
-# Test code for whether the C compiler supports C11 (complete).
-ac_c_conftest_c11_program="${ac_c_conftest_c89_globals}
-${ac_c_conftest_c99_globals}
-${ac_c_conftest_c11_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  ${ac_c_conftest_c99_main}
-  ${ac_c_conftest_c11_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C99 (complete).
-ac_c_conftest_c99_program="${ac_c_conftest_c89_globals}
-${ac_c_conftest_c99_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  ${ac_c_conftest_c99_main}
-  return ok;
-}
-"
-
-# Test code for whether the C compiler supports C89 (complete).
-ac_c_conftest_c89_program="${ac_c_conftest_c89_globals}
-
-int
-main (int argc, char **argv)
-{
-  int ok = 0;
-  ${ac_c_conftest_c89_main}
-  return ok;
-}
-"
-
-as_fn_append ac_header_c_list " stdio.h stdio_h HAVE_STDIO_H"
-as_fn_append ac_header_c_list " stdlib.h stdlib_h HAVE_STDLIB_H"
-as_fn_append ac_header_c_list " string.h string_h HAVE_STRING_H"
-as_fn_append ac_header_c_list " inttypes.h inttypes_h HAVE_INTTYPES_H"
-as_fn_append ac_header_c_list " stdint.h stdint_h HAVE_STDINT_H"
-as_fn_append ac_header_c_list " strings.h strings_h HAVE_STRINGS_H"
-as_fn_append ac_header_c_list " sys/stat.h sys_stat_h HAVE_SYS_STAT_H"
-as_fn_append ac_header_c_list " sys/types.h sys_types_h HAVE_SYS_TYPES_H"
-as_fn_append ac_header_c_list " unistd.h unistd_h HAVE_UNISTD_H"
-
-# Auxiliary files required by this configure script.
-ac_aux_files="compile config.guess config.sub ltmain.sh missing install-sh"
-
-# Locations in which to look for auxiliary files.
-ac_aux_dir_candidates="${srcdir}${PATH_SEPARATOR}${srcdir}/..${PATH_SEPARATOR}${srcdir}/../.."
-
-# Search for a directory containing all of the required auxiliary files,
-# $ac_aux_files, from the $PATH-style list $ac_aux_dir_candidates.
-# If we don't find one directory that contains all the files we need,
-# we report the set of missing files from the *first* directory in
-# $ac_aux_dir_candidates and give up.
-ac_missing_aux_files=""
-ac_first_candidate=:
-printf "%s\n" "$as_me:${as_lineno-$LINENO}: looking for aux files: $ac_aux_files" >&5
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-as_found=false
-for as_dir in $ac_aux_dir_candidates
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-  as_found=:
-
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}:  trying $as_dir" >&5
-  ac_aux_dir_found=yes
-  ac_install_sh=
-  for ac_aux in $ac_aux_files
-  do
-    # As a special case, if "install-sh" is required, that requirement
-    # can be satisfied by any of "install-sh", "install.sh", or "shtool",
-    # and $ac_install_sh is set appropriately for whichever one is found.
-    if test x"$ac_aux" = x"install-sh"
-    then
-      if test -f "${as_dir}install-sh"; then
-        printf "%s\n" "$as_me:${as_lineno-$LINENO}:   ${as_dir}install-sh found" >&5
-        ac_install_sh="${as_dir}install-sh -c"
-      elif test -f "${as_dir}install.sh"; then
-        printf "%s\n" "$as_me:${as_lineno-$LINENO}:   ${as_dir}install.sh found" >&5
-        ac_install_sh="${as_dir}install.sh -c"
-      elif test -f "${as_dir}shtool"; then
-        printf "%s\n" "$as_me:${as_lineno-$LINENO}:   ${as_dir}shtool found" >&5
-        ac_install_sh="${as_dir}shtool install -c"
-      else
-        ac_aux_dir_found=no
-        if $ac_first_candidate; then
-          ac_missing_aux_files="${ac_missing_aux_files} install-sh"
-        else
-          break
-        fi
-      fi
-    else
-      if test -f "${as_dir}${ac_aux}"; then
-        printf "%s\n" "$as_me:${as_lineno-$LINENO}:   ${as_dir}${ac_aux} found" >&5
-      else
-        ac_aux_dir_found=no
-        if $ac_first_candidate; then
-          ac_missing_aux_files="${ac_missing_aux_files} ${ac_aux}"
-        else
-          break
-        fi
-      fi
-    fi
-  done
-  if test "$ac_aux_dir_found" = yes; then
-    ac_aux_dir="$as_dir"
-    break
-  fi
-  ac_first_candidate=false
-
-  as_found=false
-done
-IFS=$as_save_IFS
-if $as_found
-then :
-
-else $as_nop
-  as_fn_error $? "cannot find required auxiliary files:$ac_missing_aux_files" "$LINENO" 5
-fi
-
-
-# These three variables are undocumented and unsupported,
-# and are intended to be withdrawn in a future Autoconf release.
-# They can cause serious problems if a builder's source tree is in a directory
-# whose full name contains unusual characters.
-if test -f "${ac_aux_dir}config.guess"; then
-  ac_config_guess="$SHELL ${ac_aux_dir}config.guess"
-fi
-if test -f "${ac_aux_dir}config.sub"; then
-  ac_config_sub="$SHELL ${ac_aux_dir}config.sub"
-fi
-if test -f "$ac_aux_dir/configure"; then
-  ac_configure="$SHELL ${ac_aux_dir}configure"
-fi
-
-# Check that the precious variables saved in the cache have kept the same
-# value.
-ac_cache_corrupted=false
-for ac_var in $ac_precious_vars; do
-  eval ac_old_set=\$ac_cv_env_${ac_var}_set
-  eval ac_new_set=\$ac_env_${ac_var}_set
-  eval ac_old_val=\$ac_cv_env_${ac_var}_value
-  eval ac_new_val=\$ac_env_${ac_var}_value
-  case $ac_old_set,$ac_new_set in
-    set,)
-      { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&5
-printf "%s\n" "$as_me: error: \`$ac_var' was set to \`$ac_old_val' in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,set)
-      { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' was not set in the previous run" >&5
-printf "%s\n" "$as_me: error: \`$ac_var' was not set in the previous run" >&2;}
-      ac_cache_corrupted=: ;;
-    ,);;
-    *)
-      if test "x$ac_old_val" != "x$ac_new_val"; then
-	# differences in whitespace do not lead to failure.
-	ac_old_val_w=`echo x $ac_old_val`
-	ac_new_val_w=`echo x $ac_new_val`
-	if test "$ac_old_val_w" != "$ac_new_val_w"; then
-	  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: \`$ac_var' has changed since the previous run:" >&5
-printf "%s\n" "$as_me: error: \`$ac_var' has changed since the previous run:" >&2;}
-	  ac_cache_corrupted=:
-	else
-	  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&5
-printf "%s\n" "$as_me: warning: ignoring whitespace changes in \`$ac_var' since the previous run:" >&2;}
-	  eval $ac_var=\$ac_old_val
-	fi
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}:   former value:  \`$ac_old_val'" >&5
-printf "%s\n" "$as_me:   former value:  \`$ac_old_val'" >&2;}
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}:   current value: \`$ac_new_val'" >&5
-printf "%s\n" "$as_me:   current value: \`$ac_new_val'" >&2;}
-      fi;;
-  esac
-  # Pass precious variables to config.status.
-  if test "$ac_new_set" = set; then
-    case $ac_new_val in
-    *\'*) ac_arg=$ac_var=`printf "%s\n" "$ac_new_val" | sed "s/'/'\\\\\\\\''/g"` ;;
-    *) ac_arg=$ac_var=$ac_new_val ;;
-    esac
-    case " $ac_configure_args " in
-      *" '$ac_arg' "*) ;; # Avoid dups.  Use of quotes ensures accuracy.
-      *) as_fn_append ac_configure_args " '$ac_arg'" ;;
-    esac
-  fi
-done
-if $ac_cache_corrupted; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;}
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: changes in the environment can compromise the build" >&5
-printf "%s\n" "$as_me: error: changes in the environment can compromise the build" >&2;}
-  as_fn_error $? "run \`${MAKE-make} distclean' and/or \`rm $cache_file'
-	    and start over" "$LINENO" 5
-fi
-## -------------------- ##
-## Main body of script. ##
-## -------------------- ##
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-
-ac_config_headers="$ac_config_headers config.h"
-
-
-
-# Initialize Automake
-am__api_version='1.16'
-
-
-
-  # Find a good install program.  We prefer a C program (faster),
-# so one script is as good as another.  But avoid the broken or
-# incompatible versions:
-# SysV /etc/install, /usr/sbin/install
-# SunOS /usr/etc/install
-# IRIX /sbin/install
-# AIX /bin/install
-# AmigaOS /C/install, which installs bootblocks on floppy discs
-# AIX 4 /usr/bin/installbsd, which doesn't work without a -g flag
-# AFS /usr/afsws/bin/install, which mishandles nonexistent args
-# SVR4 /usr/ucb/install, which tries to use the nonexistent group "staff"
-# OS/2's system install, which has a completely different semantic
-# ./install, which can be erroneously created by make from ./install.sh.
-# Reject install programs that cannot install multiple files.
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for a BSD-compatible install" >&5
-printf %s "checking for a BSD-compatible install... " >&6; }
-if test -z "$INSTALL"; then
-if test ${ac_cv_path_install+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    # Account for fact that we put trailing slashes in our PATH walk.
-case $as_dir in #((
-  ./ | /[cC]/* | \
-  /etc/* | /usr/sbin/* | /usr/etc/* | /sbin/* | /usr/afsws/bin/* | \
-  ?:[\\/]os2[\\/]install[\\/]* | ?:[\\/]OS2[\\/]INSTALL[\\/]* | \
-  /usr/ucb/* ) ;;
-  *)
-    # OSF1 and SCO ODT 3.0 have their own names for install.
-    # Don't use installbsd from OSF since it installs stuff as root
-    # by default.
-    for ac_prog in ginstall scoinst install; do
-      for ac_exec_ext in '' $ac_executable_extensions; do
-	if as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext"; then
-	  if test $ac_prog = install &&
-	    grep dspmsg "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # AIX install.  It has an incompatible calling convention.
-	    :
-	  elif test $ac_prog = install &&
-	    grep pwplus "$as_dir$ac_prog$ac_exec_ext" >/dev/null 2>&1; then
-	    # program-specific install script used by HP pwplus--don't use.
-	    :
-	  else
-	    rm -rf conftest.one conftest.two conftest.dir
-	    echo one > conftest.one
-	    echo two > conftest.two
-	    mkdir conftest.dir
-	    if "$as_dir$ac_prog$ac_exec_ext" -c conftest.one conftest.two "`pwd`/conftest.dir/" &&
-	      test -s conftest.one && test -s conftest.two &&
-	      test -s conftest.dir/conftest.one &&
-	      test -s conftest.dir/conftest.two
-	    then
-	      ac_cv_path_install="$as_dir$ac_prog$ac_exec_ext -c"
-	      break 3
-	    fi
-	  fi
-	fi
-      done
-    done
-    ;;
-esac
-
-  done
-IFS=$as_save_IFS
-
-rm -rf conftest.one conftest.two conftest.dir
-
-fi
-  if test ${ac_cv_path_install+y}; then
-    INSTALL=$ac_cv_path_install
-  else
-    # As a last resort, use the slow shell script.  Don't cache a
-    # value for INSTALL within a source directory, because that will
-    # break other packages using the cache if that directory is
-    # removed, or if the value is a relative name.
-    INSTALL=$ac_install_sh
-  fi
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $INSTALL" >&5
-printf "%s\n" "$INSTALL" >&6; }
-
-# Use test -z because SunOS4 sh mishandles braces in ${var-val}.
-# It thinks the first close brace ends the variable substitution.
-test -z "$INSTALL_PROGRAM" && INSTALL_PROGRAM='${INSTALL}'
-
-test -z "$INSTALL_SCRIPT" && INSTALL_SCRIPT='${INSTALL}'
-
-test -z "$INSTALL_DATA" && INSTALL_DATA='${INSTALL} -m 644'
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether build environment is sane" >&5
-printf %s "checking whether build environment is sane... " >&6; }
-# Reject unsafe characters in $srcdir or the absolute working directory
-# name.  Accept space and tab only in the latter.
-am_lf='
-'
-case `pwd` in
-  *[\\\"\#\$\&\'\`$am_lf]*)
-    as_fn_error $? "unsafe absolute working directory name" "$LINENO" 5;;
-esac
-case $srcdir in
-  *[\\\"\#\$\&\'\`$am_lf\ \	]*)
-    as_fn_error $? "unsafe srcdir value: '$srcdir'" "$LINENO" 5;;
-esac
-
-# Do 'set' in a subshell so we don't clobber the current shell's
-# arguments.  Must try -L first in case configure is actually a
-# symlink; some systems play weird games with the mod time of symlinks
-# (eg FreeBSD returns the mod time of the symlink's containing
-# directory).
-if (
-   am_has_slept=no
-   for am_try in 1 2; do
-     echo "timestamp, slept: $am_has_slept" > conftest.file
-     set X `ls -Lt "$srcdir/configure" conftest.file 2> /dev/null`
-     if test "$*" = "X"; then
-	# -L didn't work.
-	set X `ls -t "$srcdir/configure" conftest.file`
-     fi
-     if test "$*" != "X $srcdir/configure conftest.file" \
-	&& test "$*" != "X conftest.file $srcdir/configure"; then
-
-	# If neither matched, then we have a broken ls.  This can happen
-	# if, for instance, CONFIG_SHELL is bash and it inherits a
-	# broken ls alias from the environment.  This has actually
-	# happened.  Such a system could not be considered "sane".
-	as_fn_error $? "ls -t appears to fail.  Make sure there is not a broken
-  alias in your environment" "$LINENO" 5
-     fi
-     if test "$2" = conftest.file || test $am_try -eq 2; then
-       break
-     fi
-     # Just in case.
-     sleep 1
-     am_has_slept=yes
-   done
-   test "$2" = conftest.file
-   )
-then
-   # Ok.
-   :
-else
-   as_fn_error $? "newly created file is older than distributed files!
-Check your system clock" "$LINENO" 5
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf "%s\n" "yes" >&6; }
-# If we didn't sleep, we still need to ensure time stamps of config.status and
-# generated files are strictly newer.
-am_sleep_pid=
-if grep 'slept: no' conftest.file >/dev/null 2>&1; then
-  ( sleep 1 ) &
-  am_sleep_pid=$!
-fi
-
-rm -f conftest.file
-
-test "$program_prefix" != NONE &&
-  program_transform_name="s&^&$program_prefix&;$program_transform_name"
-# Use a double $ so make ignores it.
-test "$program_suffix" != NONE &&
-  program_transform_name="s&\$&$program_suffix&;$program_transform_name"
-# Double any \ or $.
-# By default was `s,x,x', remove it if useless.
-ac_script='s/[\\$]/&&/g;s/;s,x,x,$//'
-program_transform_name=`printf "%s\n" "$program_transform_name" | sed "$ac_script"`
-
-
-# Expand $ac_aux_dir to an absolute path.
-am_aux_dir=`cd "$ac_aux_dir" && pwd`
-
-
-  if test x"${MISSING+set}" != xset; then
-  MISSING="\${SHELL} '$am_aux_dir/missing'"
-fi
-# Use eval to expand $SHELL
-if eval "$MISSING --is-lightweight"; then
-  am_missing_run="$MISSING "
-else
-  am_missing_run=
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: 'missing' script is too old or missing" >&5
-printf "%s\n" "$as_me: WARNING: 'missing' script is too old or missing" >&2;}
-fi
-
-if test x"${install_sh+set}" != xset; then
-  case $am_aux_dir in
-  *\ * | *\	*)
-    install_sh="\${SHELL} '$am_aux_dir/install-sh'" ;;
-  *)
-    install_sh="\${SHELL} $am_aux_dir/install-sh"
-  esac
-fi
-
-# Installed binaries are usually stripped using 'strip' when the user
-# run "make install-strip".  However 'strip' might not be the right
-# tool to use in cross-compilation environments, therefore Automake
-# will honor the 'STRIP' environment variable to overrule this program.
-if test "$cross_compiling" != no; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-printf "%s\n" "$STRIP" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-printf "%s\n" "$ac_ct_STRIP" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-fi
-INSTALL_STRIP_PROGRAM="\$(install_sh) -c -s"
-
-
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for a race-free mkdir -p" >&5
-printf %s "checking for a race-free mkdir -p... " >&6; }
-if test -z "$MKDIR_P"; then
-  if test ${ac_cv_path_mkdir+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/opt/sfw/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in mkdir gmkdir; do
-	 for ac_exec_ext in '' $ac_executable_extensions; do
-	   as_fn_executable_p "$as_dir$ac_prog$ac_exec_ext" || continue
-	   case `"$as_dir$ac_prog$ac_exec_ext" --version 2>&1` in #(
-	     'mkdir ('*'coreutils) '* | \
-	     'BusyBox '* | \
-	     'mkdir (fileutils) '4.1*)
-	       ac_cv_path_mkdir=$as_dir$ac_prog$ac_exec_ext
-	       break 3;;
-	   esac
-	 done
-       done
-  done
-IFS=$as_save_IFS
-
-fi
-
-  test -d ./--version && rmdir ./--version
-  if test ${ac_cv_path_mkdir+y}; then
-    MKDIR_P="$ac_cv_path_mkdir -p"
-  else
-    # As a last resort, use the slow shell script.  Don't cache a
-    # value for MKDIR_P within a source directory, because that will
-    # break other packages using the cache if that directory is
-    # removed, or if the value is a relative name.
-    MKDIR_P="$ac_install_sh -d"
-  fi
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $MKDIR_P" >&5
-printf "%s\n" "$MKDIR_P" >&6; }
-
-for ac_prog in gawk mawk nawk awk
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_AWK+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$AWK"; then
-  ac_cv_prog_AWK="$AWK" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AWK="$ac_prog"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-AWK=$ac_cv_prog_AWK
-if test -n "$AWK"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $AWK" >&5
-printf "%s\n" "$AWK" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-  test -n "$AWK" && break
-done
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} sets \$(MAKE)" >&5
-printf %s "checking whether ${MAKE-make} sets \$(MAKE)... " >&6; }
-set x ${MAKE-make}
-ac_make=`printf "%s\n" "$2" | sed 's/+/p/g; s/[^a-zA-Z0-9_]/_/g'`
-if eval test \${ac_cv_prog_make_${ac_make}_set+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat >conftest.make <<\_ACEOF
-SHELL = /bin/sh
-all:
-	@echo '@@@%%%=$(MAKE)=@@@%%%'
-_ACEOF
-# GNU make sometimes prints "make[1]: Entering ...", which would confuse us.
-case `${MAKE-make} -f conftest.make 2>/dev/null` in
-  *@@@%%%=?*=@@@%%%*)
-    eval ac_cv_prog_make_${ac_make}_set=yes;;
-  *)
-    eval ac_cv_prog_make_${ac_make}_set=no;;
-esac
-rm -f conftest.make
-fi
-if eval test \$ac_cv_prog_make_${ac_make}_set = yes; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf "%s\n" "yes" >&6; }
-  SET_MAKE=
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-  SET_MAKE="MAKE=${MAKE-make}"
-fi
-
-rm -rf .tst 2>/dev/null
-mkdir .tst 2>/dev/null
-if test -d .tst; then
-  am__leading_dot=.
-else
-  am__leading_dot=_
-fi
-rmdir .tst 2>/dev/null
-
-# Check whether --enable-silent-rules was given.
-if test ${enable_silent_rules+y}
-then :
-  enableval=$enable_silent_rules;
-fi
-
-case $enable_silent_rules in # (((
-  yes) AM_DEFAULT_VERBOSITY=0;;
-   no) AM_DEFAULT_VERBOSITY=1;;
-    *) AM_DEFAULT_VERBOSITY=1;;
-esac
-am_make=${MAKE-make}
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5
-printf %s "checking whether $am_make supports nested variables... " >&6; }
-if test ${am_cv_make_support_nested_variables+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if printf "%s\n" 'TRUE=$(BAR$(V))
-BAR0=false
-BAR1=true
-V=1
-am__doit:
-	@$(TRUE)
-.PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then
-  am_cv_make_support_nested_variables=yes
-else
-  am_cv_make_support_nested_variables=no
-fi
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5
-printf "%s\n" "$am_cv_make_support_nested_variables" >&6; }
-if test $am_cv_make_support_nested_variables = yes; then
-    AM_V='$(V)'
-  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-else
-  AM_V=$AM_DEFAULT_VERBOSITY
-  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
-fi
-AM_BACKSLASH='\'
-
-if test "`cd $srcdir && pwd`" != "`pwd`"; then
-  # Use -I$(srcdir) only when $(srcdir) != ., so that make's output
-  # is not polluted with repeated "-I."
-  am__isrc=' -I$(srcdir)'
-  # test to see if srcdir already configured
-  if test -f $srcdir/config.status; then
-    as_fn_error $? "source directory already configured; run \"make distclean\" there first" "$LINENO" 5
-  fi
-fi
-
-# test whether we have cygpath
-if test -z "$CYGPATH_W"; then
-  if (cygpath --version) >/dev/null 2>/dev/null; then
-    CYGPATH_W='cygpath -w'
-  else
-    CYGPATH_W=echo
-  fi
-fi
-
-
-# Define the identity of the package.
- PACKAGE='libXfixes'
- VERSION='6.0.1'
-
-
-printf "%s\n" "#define PACKAGE \"$PACKAGE\"" >>confdefs.h
-
-
-printf "%s\n" "#define VERSION \"$VERSION\"" >>confdefs.h
-
-# Some tools Automake needs.
-
-ACLOCAL=${ACLOCAL-"${am_missing_run}aclocal-${am__api_version}"}
-
-
-AUTOCONF=${AUTOCONF-"${am_missing_run}autoconf"}
-
-
-AUTOMAKE=${AUTOMAKE-"${am_missing_run}automake-${am__api_version}"}
-
-
-AUTOHEADER=${AUTOHEADER-"${am_missing_run}autoheader"}
-
-
-MAKEINFO=${MAKEINFO-"${am_missing_run}makeinfo"}
-
-# For better backward compatibility.  To be removed once Automake 1.9.x
-# dies out for good.  For more background, see:
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00001.html>
-# <https://lists.gnu.org/archive/html/automake/2012-07/msg00014.html>
-mkdir_p='$(MKDIR_P)'
-
-# We need awk for the "check" target (and possibly the TAP driver).  The
-# system "awk" is bad on some platforms.
-# Always define AMTAR for backward compatibility.  Yes, it's still used
-# in the wild :-(  We should find a proper way to deprecate it ...
-AMTAR='$${TAR-tar}'
-
-
-# We'll loop over all known methods to create a tar archive until one works.
-_am_tools='gnutar  pax cpio none'
-
-am__tar='$${TAR-tar} chof - "$$tardir"' am__untar='$${TAR-tar} xf -'
-
-
-
-
-
-# Variables for tags utilities; see am/tags.am
-if test -z "$CTAGS"; then
-  CTAGS=ctags
-fi
-
-if test -z "$ETAGS"; then
-  ETAGS=etags
-fi
-
-if test -z "$CSCOPE"; then
-  CSCOPE=cscope
-fi
-
-
-
-# POSIX will say in a future version that running "rm -f" with no argument
-# is OK; and we want to be able to make that assumption in our Makefile
-# recipes.  So use an aggressive probe to check that the usage we want is
-# actually supported "in the wild" to an acceptable degree.
-# See automake bug#10828.
-# To make any issue more visible, cause the running configure to be aborted
-# by default if the 'rm' program in use doesn't match our expectations; the
-# user can still override this though.
-if rm -f && rm -fr && rm -rf; then : OK; else
-  cat >&2 <<'END'
-Oops!
-
-Your 'rm' program seems unable to run without file operands specified
-on the command line, even when the '-f' option is present.  This is contrary
-to the behaviour of most rm programs out there, and not conforming with
-the upcoming POSIX standard: <http://austingroupbugs.net/view.php?id=542>
-
-Please tell bug-automake@gnu.org about your system, including the value
-of your $PATH and any error possibly output before this message.  This
-can help us improve future automake versions.
-
-END
-  if test x"$ACCEPT_INFERIOR_RM_PROGRAM" = x"yes"; then
-    echo 'Configuration will proceed anyway, since you have set the' >&2
-    echo 'ACCEPT_INFERIOR_RM_PROGRAM variable to "yes"' >&2
-    echo >&2
-  else
-    cat >&2 <<'END'
-Aborting the configuration process, to ensure you take notice of the issue.
-
-You can download and install GNU coreutils to get an 'rm' implementation
-that behaves properly: <https://www.gnu.org/software/coreutils/>.
-
-If you want to complete the configuration process using your problematic
-'rm' anyway, export the environment variable ACCEPT_INFERIOR_RM_PROGRAM
-to "yes", and re-run configure.
-
-END
-    as_fn_error $? "Your 'rm' program is bad, sorry." "$LINENO" 5
-  fi
-fi
-
-
-# Initialize libtool
-case `pwd` in
-  *\ * | *\	*)
-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&5
-printf "%s\n" "$as_me: WARNING: Libtool does not cope well with whitespace in \`pwd\`" >&2;} ;;
-esac
-
-
-
-macro_version='2.4.7'
-macro_revision='2.4.7'
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-ltmain=$ac_aux_dir/ltmain.sh
-
-
-
-  # Make sure we can run config.sub.
-$SHELL "${ac_aux_dir}config.sub" sun4 >/dev/null 2>&1 ||
-  as_fn_error $? "cannot run $SHELL ${ac_aux_dir}config.sub" "$LINENO" 5
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking build system type" >&5
-printf %s "checking build system type... " >&6; }
-if test ${ac_cv_build+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  ac_build_alias=$build_alias
-test "x$ac_build_alias" = x &&
-  ac_build_alias=`$SHELL "${ac_aux_dir}config.guess"`
-test "x$ac_build_alias" = x &&
-  as_fn_error $? "cannot guess build type; you must specify one" "$LINENO" 5
-ac_cv_build=`$SHELL "${ac_aux_dir}config.sub" $ac_build_alias` ||
-  as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $ac_build_alias failed" "$LINENO" 5
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_build" >&5
-printf "%s\n" "$ac_cv_build" >&6; }
-case $ac_cv_build in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical build" "$LINENO" 5;;
-esac
-build=$ac_cv_build
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_build
-shift
-build_cpu=$1
-build_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-build_os=$*
-IFS=$ac_save_IFS
-case $build_os in *\ *) build_os=`echo "$build_os" | sed 's/ /-/g'`;; esac
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking host system type" >&5
-printf %s "checking host system type... " >&6; }
-if test ${ac_cv_host+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test "x$host_alias" = x; then
-  ac_cv_host=$ac_cv_build
-else
-  ac_cv_host=`$SHELL "${ac_aux_dir}config.sub" $host_alias` ||
-    as_fn_error $? "$SHELL ${ac_aux_dir}config.sub $host_alias failed" "$LINENO" 5
-fi
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_host" >&5
-printf "%s\n" "$ac_cv_host" >&6; }
-case $ac_cv_host in
-*-*-*) ;;
-*) as_fn_error $? "invalid value of canonical host" "$LINENO" 5;;
-esac
-host=$ac_cv_host
-ac_save_IFS=$IFS; IFS='-'
-set x $ac_cv_host
-shift
-host_cpu=$1
-host_vendor=$2
-shift; shift
-# Remember, the first character of IFS is used to create $*,
-# except with old shells:
-host_os=$*
-IFS=$ac_save_IFS
-case $host_os in *\ *) host_os=`echo "$host_os" | sed 's/ /-/g'`;; esac
-
-
-# Backslashify metacharacters that are still active within
-# double-quoted strings.
-sed_quote_subst='s/\(["`$\\]\)/\\\1/g'
-
-# Same as above, but do not quote variable references.
-double_quote_subst='s/\(["`\\]\)/\\\1/g'
-
-# Sed substitution to delay expansion of an escaped shell variable in a
-# double_quote_subst'ed string.
-delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g'
-
-# Sed substitution to delay expansion of an escaped single quote.
-delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g'
-
-# Sed substitution to avoid accidental globbing in evaled expressions
-no_glob_subst='s/\*/\\\*/g'
-
-ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to print strings" >&5
-printf %s "checking how to print strings... " >&6; }
-# Test print first, because it will be a builtin if present.
-if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \
-   test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='print -r --'
-elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='printf %s\n'
-else
-  # Use this function as a fallback that always works.
-  func_fallback_echo ()
-  {
-    eval 'cat <<_LTECHO_EOF
-$1
-_LTECHO_EOF'
-  }
-  ECHO='func_fallback_echo'
-fi
-
-# func_echo_all arg...
-# Invoke $ECHO with all args, space-separated.
-func_echo_all ()
-{
-    $ECHO ""
-}
-
-case $ECHO in
-  printf*) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: printf" >&5
-printf "%s\n" "printf" >&6; } ;;
-  print*) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: print -r" >&5
-printf "%s\n" "print -r" >&6; } ;;
-  *) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: cat" >&5
-printf "%s\n" "cat" >&6; } ;;
-esac
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-DEPDIR="${am__leading_dot}deps"
-
-ac_config_commands="$ac_config_commands depfiles"
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether ${MAKE-make} supports the include directive" >&5
-printf %s "checking whether ${MAKE-make} supports the include directive... " >&6; }
-cat > confinc.mk << 'END'
-am__doit:
-	@echo this is the am__doit target >confinc.out
-.PHONY: am__doit
-END
-am__include="#"
-am__quote=
-# BSD make does it like this.
-echo '.include "confinc.mk" # ignored' > confmf.BSD
-# Other make implementations (GNU, Solaris 10, AIX) do it like this.
-echo 'include confinc.mk # ignored' > confmf.GNU
-_am_result=no
-for s in GNU BSD; do
-  { echo "$as_me:$LINENO: ${MAKE-make} -f confmf.$s && cat confinc.out" >&5
-   (${MAKE-make} -f confmf.$s && cat confinc.out) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); }
-  case $?:`cat confinc.out 2>/dev/null` in #(
-  '0:this is the am__doit target') :
-    case $s in #(
-  BSD) :
-    am__include='.include' am__quote='"' ;; #(
-  *) :
-    am__include='include' am__quote='' ;;
-esac ;; #(
-  *) :
-     ;;
-esac
-  if test "$am__include" != "#"; then
-    _am_result="yes ($s style)"
-    break
-  fi
-done
-rm -f confinc.* confmf.*
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: ${_am_result}" >&5
-printf "%s\n" "${_am_result}" >&6; }
-
-# Check whether --enable-dependency-tracking was given.
-if test ${enable_dependency_tracking+y}
-then :
-  enableval=$enable_dependency_tracking;
-fi
-
-if test "x$enable_dependency_tracking" != xno; then
-  am_depcomp="$ac_aux_dir/depcomp"
-  AMDEPBACKSLASH='\'
-  am__nodep='_no'
-fi
- if test "x$enable_dependency_tracking" != xno; then
-  AMDEP_TRUE=
-  AMDEP_FALSE='#'
-else
-  AMDEP_TRUE='#'
-  AMDEP_FALSE=
-fi
-
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}gcc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}gcc; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}gcc"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf "%s\n" "$CC" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "gcc", so it can be a program name with args.
-set dummy gcc; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="gcc"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf "%s\n" "$ac_ct_CC" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-else
-  CC="$ac_cv_prog_CC"
-fi
-
-if test -z "$CC"; then
-          if test -n "$ac_tool_prefix"; then
-    # Extract the first word of "${ac_tool_prefix}cc", so it can be a program name with args.
-set dummy ${ac_tool_prefix}cc; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}cc"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf "%s\n" "$CC" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-  fi
-fi
-if test -z "$CC"; then
-  # Extract the first word of "cc", so it can be a program name with args.
-set dummy cc; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-  ac_prog_rejected=no
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    if test "$as_dir$ac_word$ac_exec_ext" = "/usr/ucb/cc"; then
-       ac_prog_rejected=yes
-       continue
-     fi
-    ac_cv_prog_CC="cc"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-if test $ac_prog_rejected = yes; then
-  # We found a bogon in the path, so make sure we never use it.
-  set dummy $ac_cv_prog_CC
-  shift
-  if test $# != 0; then
-    # We chose a different compiler from the bogus one.
-    # However, it has the same basename, so the bogon will be chosen
-    # first if we set CC to just the basename; use the full file name.
-    shift
-    ac_cv_prog_CC="$as_dir$ac_word${1+' '}$@"
-  fi
-fi
-fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf "%s\n" "$CC" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  for ac_prog in cl.exe
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="$ac_tool_prefix$ac_prog"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf "%s\n" "$CC" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-    test -n "$CC" && break
-  done
-fi
-if test -z "$CC"; then
-  ac_ct_CC=$CC
-  for ac_prog in cl.exe
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="$ac_prog"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf "%s\n" "$ac_ct_CC" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_CC" && break
-done
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-fi
-
-fi
-if test -z "$CC"; then
-  if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}clang", so it can be a program name with args.
-set dummy ${ac_tool_prefix}clang; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_CC+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$CC"; then
-  ac_cv_prog_CC="$CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_CC="${ac_tool_prefix}clang"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-CC=$ac_cv_prog_CC
-if test -n "$CC"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $CC" >&5
-printf "%s\n" "$CC" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_CC"; then
-  ac_ct_CC=$CC
-  # Extract the first word of "clang", so it can be a program name with args.
-set dummy clang; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_CC+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_CC"; then
-  ac_cv_prog_ac_ct_CC="$ac_ct_CC" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_CC="clang"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_CC=$ac_cv_prog_ac_ct_CC
-if test -n "$ac_ct_CC"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_CC" >&5
-printf "%s\n" "$ac_ct_CC" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_CC" = x; then
-    CC=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    CC=$ac_ct_CC
-  fi
-else
-  CC="$ac_cv_prog_CC"
-fi
-
-fi
-
-
-test -z "$CC" && { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "no acceptable C compiler found in \$PATH
-See \`config.log' for more details" "$LINENO" 5; }
-
-# Provide some information about the compiler.
-printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for C compiler version" >&5
-set X $ac_compile
-ac_compiler=$2
-for ac_option in --version -v -V -qversion -version; do
-  { { ac_try="$ac_compiler $ac_option >&5"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf "%s\n" "$ac_try_echo"; } >&5
-  (eval "$ac_compiler $ac_option >&5") 2>conftest.err
-  ac_status=$?
-  if test -s conftest.err; then
-    sed '10a\
-... rest of stderr output deleted ...
-         10q' conftest.err >conftest.er1
-    cat conftest.er1 >&5
-  fi
-  rm -f conftest.er1 conftest.err
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-done
-
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files_save=$ac_clean_files
-ac_clean_files="$ac_clean_files a.out a.out.dSYM a.exe b.out"
-# Try to create an executable without -o first, disregard a.out.
-# It will help us diagnose broken compilers, and finding out an intuition
-# of exeext.
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the C compiler works" >&5
-printf %s "checking whether the C compiler works... " >&6; }
-ac_link_default=`printf "%s\n" "$ac_link" | sed 's/ -o *conftest[^ ]*//'`
-
-# The possible output files:
-ac_files="a.out conftest.exe conftest a.exe a_out.exe b.out conftest.*"
-
-ac_rmfiles=
-for ac_file in $ac_files
-do
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    * ) ac_rmfiles="$ac_rmfiles $ac_file";;
-  esac
-done
-rm -f $ac_rmfiles
-
-if { { ac_try="$ac_link_default"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf "%s\n" "$ac_try_echo"; } >&5
-  (eval "$ac_link_default") 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  # Autoconf-2.13 could set the ac_cv_exeext variable to `no'.
-# So ignore a value of `no', otherwise this would lead to `EXEEXT = no'
-# in a Makefile.  We should not override ac_cv_exeext if it was cached,
-# so that the user can short-circuit this test for compilers unknown to
-# Autoconf.
-for ac_file in $ac_files ''
-do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj )
-	;;
-    [ab].out )
-	# We found the default executable, but exeext='' is most
-	# certainly right.
-	break;;
-    *.* )
-	if test ${ac_cv_exeext+y} && test "$ac_cv_exeext" != no;
-	then :; else
-	   ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	fi
-	# We set ac_cv_exeext here because the later test for it is not
-	# safe: cross compilers may not add the suffix if given an `-o'
-	# argument, so we may need to know it at that point already.
-	# Even if this section looks crufty: it has the advantage of
-	# actually working.
-	break;;
-    * )
-	break;;
-  esac
-done
-test "$ac_cv_exeext" = no && ac_cv_exeext=
-
-else $as_nop
-  ac_file=''
-fi
-if test -z "$ac_file"
-then :
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-printf "%s\n" "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error 77 "C compiler cannot create executables
-See \`config.log' for more details" "$LINENO" 5; }
-else $as_nop
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf "%s\n" "yes" >&6; }
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for C compiler default output file name" >&5
-printf %s "checking for C compiler default output file name... " >&6; }
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_file" >&5
-printf "%s\n" "$ac_file" >&6; }
-ac_exeext=$ac_cv_exeext
-
-rm -f -r a.out a.out.dSYM a.exe conftest$ac_cv_exeext b.out
-ac_clean_files=$ac_clean_files_save
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for suffix of executables" >&5
-printf %s "checking for suffix of executables... " >&6; }
-if { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf "%s\n" "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  # If both `conftest.exe' and `conftest' are `present' (well, observable)
-# catch `conftest.exe'.  For instance with Cygwin, `ls conftest' will
-# work properly (i.e., refer to `conftest.exe'), while it won't with
-# `rm'.
-for ac_file in conftest.exe conftest conftest.*; do
-  test -f "$ac_file" || continue
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM | *.o | *.obj ) ;;
-    *.* ) ac_cv_exeext=`expr "$ac_file" : '[^.]*\(\..*\)'`
-	  break;;
-    * ) break;;
-  esac
-done
-else $as_nop
-  { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of executables: cannot compile and link
-See \`config.log' for more details" "$LINENO" 5; }
-fi
-rm -f conftest conftest$ac_cv_exeext
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_exeext" >&5
-printf "%s\n" "$ac_cv_exeext" >&6; }
-
-rm -f conftest.$ac_ext
-EXEEXT=$ac_cv_exeext
-ac_exeext=$EXEEXT
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <stdio.h>
-int
-main (void)
-{
-FILE *f = fopen ("conftest.out", "w");
- return ferror (f) || fclose (f) != 0;
-
-  ;
-  return 0;
-}
-_ACEOF
-ac_clean_files="$ac_clean_files conftest.out"
-# Check that the compiler produces executables we can run.  If not, either
-# the compiler is broken, or we cross compile.
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether we are cross compiling" >&5
-printf %s "checking whether we are cross compiling... " >&6; }
-if test "$cross_compiling" != yes; then
-  { { ac_try="$ac_link"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf "%s\n" "$ac_try_echo"; } >&5
-  (eval "$ac_link") 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-  if { ac_try='./conftest$ac_cv_exeext'
-  { { case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf "%s\n" "$ac_try_echo"; } >&5
-  (eval "$ac_try") 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; }; then
-    cross_compiling=no
-  else
-    if test "$cross_compiling" = maybe; then
-	cross_compiling=yes
-    else
-	{ { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error 77 "cannot run C compiled programs.
-If you meant to cross compile, use \`--host'.
-See \`config.log' for more details" "$LINENO" 5; }
-    fi
-  fi
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $cross_compiling" >&5
-printf "%s\n" "$cross_compiling" >&6; }
-
-rm -f conftest.$ac_ext conftest$ac_cv_exeext conftest.out
-ac_clean_files=$ac_clean_files_save
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for suffix of object files" >&5
-printf %s "checking for suffix of object files... " >&6; }
-if test ${ac_cv_objext+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-rm -f conftest.o conftest.obj
-if { { ac_try="$ac_compile"
-case "(($ac_try" in
-  *\"* | *\`* | *\\*) ac_try_echo=\$ac_try;;
-  *) ac_try_echo=$ac_try;;
-esac
-eval ac_try_echo="\"\$as_me:${as_lineno-$LINENO}: $ac_try_echo\""
-printf "%s\n" "$ac_try_echo"; } >&5
-  (eval "$ac_compile") 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-then :
-  for ac_file in conftest.o conftest.obj conftest.*; do
-  test -f "$ac_file" || continue;
-  case $ac_file in
-    *.$ac_ext | *.xcoff | *.tds | *.d | *.pdb | *.xSYM | *.bb | *.bbg | *.map | *.inf | *.dSYM ) ;;
-    *) ac_cv_objext=`expr "$ac_file" : '.*\.\(.*\)'`
-       break;;
-  esac
-done
-else $as_nop
-  printf "%s\n" "$as_me: failed program was:" >&5
-sed 's/^/| /' conftest.$ac_ext >&5
-
-{ { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "cannot compute suffix of object files: cannot compile
-See \`config.log' for more details" "$LINENO" 5; }
-fi
-rm -f conftest.$ac_cv_objext conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_objext" >&5
-printf "%s\n" "$ac_cv_objext" >&6; }
-OBJEXT=$ac_cv_objext
-ac_objext=$OBJEXT
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the compiler supports GNU C" >&5
-printf %s "checking whether the compiler supports GNU C... " >&6; }
-if test ${ac_cv_c_compiler_gnu+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-#ifndef __GNUC__
-       choke me
-#endif
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_compiler_gnu=yes
-else $as_nop
-  ac_compiler_gnu=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-ac_cv_c_compiler_gnu=$ac_compiler_gnu
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_compiler_gnu" >&5
-printf "%s\n" "$ac_cv_c_compiler_gnu" >&6; }
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-if test $ac_compiler_gnu = yes; then
-  GCC=yes
-else
-  GCC=
-fi
-ac_test_CFLAGS=${CFLAGS+y}
-ac_save_CFLAGS=$CFLAGS
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether $CC accepts -g" >&5
-printf %s "checking whether $CC accepts -g... " >&6; }
-if test ${ac_cv_prog_cc_g+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  ac_save_c_werror_flag=$ac_c_werror_flag
-   ac_c_werror_flag=yes
-   ac_cv_prog_cc_g=no
-   CFLAGS="-g"
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_g=yes
-else $as_nop
-  CFLAGS=""
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-
-else $as_nop
-  ac_c_werror_flag=$ac_save_c_werror_flag
-	 CFLAGS="-g"
-	 cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_g=yes
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-   ac_c_werror_flag=$ac_save_c_werror_flag
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_g" >&5
-printf "%s\n" "$ac_cv_prog_cc_g" >&6; }
-if test $ac_test_CFLAGS; then
-  CFLAGS=$ac_save_CFLAGS
-elif test $ac_cv_prog_cc_g = yes; then
-  if test "$GCC" = yes; then
-    CFLAGS="-g -O2"
-  else
-    CFLAGS="-g"
-  fi
-else
-  if test "$GCC" = yes; then
-    CFLAGS="-O2"
-  else
-    CFLAGS=
-  fi
-fi
-ac_prog_cc_stdc=no
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C11 features" >&5
-printf %s "checking for $CC option to enable C11 features... " >&6; }
-if test ${ac_cv_prog_cc_c11+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  ac_cv_prog_cc_c11=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c11_program
-_ACEOF
-for ac_arg in '' -std=gnu11
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c11=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c11" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC
-fi
-
-if test "x$ac_cv_prog_cc_c11" = xno
-then :
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf "%s\n" "unsupported" >&6; }
-else $as_nop
-  if test "x$ac_cv_prog_cc_c11" = x
-then :
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf "%s\n" "none needed" >&6; }
-else $as_nop
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c11" >&5
-printf "%s\n" "$ac_cv_prog_cc_c11" >&6; }
-     CC="$CC $ac_cv_prog_cc_c11"
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c11
-  ac_prog_cc_stdc=c11
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C99 features" >&5
-printf %s "checking for $CC option to enable C99 features... " >&6; }
-if test ${ac_cv_prog_cc_c99+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  ac_cv_prog_cc_c99=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c99_program
-_ACEOF
-for ac_arg in '' -std=gnu99 -std=c99 -c99 -qlanglvl=extc1x -qlanglvl=extc99 -AC99 -D_STDC_C99=
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c99=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c99" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC
-fi
-
-if test "x$ac_cv_prog_cc_c99" = xno
-then :
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf "%s\n" "unsupported" >&6; }
-else $as_nop
-  if test "x$ac_cv_prog_cc_c99" = x
-then :
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf "%s\n" "none needed" >&6; }
-else $as_nop
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c99" >&5
-printf "%s\n" "$ac_cv_prog_cc_c99" >&6; }
-     CC="$CC $ac_cv_prog_cc_c99"
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c99
-  ac_prog_cc_stdc=c99
-fi
-fi
-if test x$ac_prog_cc_stdc = xno
-then :
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $CC option to enable C89 features" >&5
-printf %s "checking for $CC option to enable C89 features... " >&6; }
-if test ${ac_cv_prog_cc_c89+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  ac_cv_prog_cc_c89=no
-ac_save_CC=$CC
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-$ac_c_conftest_c89_program
-_ACEOF
-for ac_arg in '' -qlanglvl=extc89 -qlanglvl=ansi -std -Ae "-Aa -D_HPUX_SOURCE" "-Xc -D__EXTENSIONS__"
-do
-  CC="$ac_save_CC $ac_arg"
-  if ac_fn_c_try_compile "$LINENO"
-then :
-  ac_cv_prog_cc_c89=$ac_arg
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam
-  test "x$ac_cv_prog_cc_c89" != "xno" && break
-done
-rm -f conftest.$ac_ext
-CC=$ac_save_CC
-fi
-
-if test "x$ac_cv_prog_cc_c89" = xno
-then :
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: unsupported" >&5
-printf "%s\n" "unsupported" >&6; }
-else $as_nop
-  if test "x$ac_cv_prog_cc_c89" = x
-then :
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: none needed" >&5
-printf "%s\n" "none needed" >&6; }
-else $as_nop
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_prog_cc_c89" >&5
-printf "%s\n" "$ac_cv_prog_cc_c89" >&6; }
-     CC="$CC $ac_cv_prog_cc_c89"
-fi
-  ac_cv_prog_cc_stdc=$ac_cv_prog_cc_c89
-  ac_prog_cc_stdc=c89
-fi
-fi
-
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-  ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether $CC understands -c and -o together" >&5
-printf %s "checking whether $CC understands -c and -o together... " >&6; }
-if test ${am_cv_prog_cc_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-  # Make sure it works both with $CC and with simple cc.
-  # Following AC_PROG_CC_C_O, we do the test twice because some
-  # compilers refuse to overwrite an existing .o file with -o,
-  # though they will create one.
-  am_cv_prog_cc_c_o=yes
-  for am_i in 1 2; do
-    if { echo "$as_me:$LINENO: $CC -c conftest.$ac_ext -o conftest2.$ac_objext" >&5
-   ($CC -c conftest.$ac_ext -o conftest2.$ac_objext) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } \
-         && test -f conftest2.$ac_objext; then
-      : OK
-    else
-      am_cv_prog_cc_c_o=no
-      break
-    fi
-  done
-  rm -f core conftest*
-  unset am_i
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_prog_cc_c_o" >&5
-printf "%s\n" "$am_cv_prog_cc_c_o" >&6; }
-if test "$am_cv_prog_cc_c_o" != yes; then
-   # Losing compiler, so override with the script.
-   # FIXME: It is wrong to rewrite CC.
-   # But if we don't then we get into trouble of one sort or another.
-   # A longer-term fix would be to have automake use am__CC in this case,
-   # and then we could set am__CC="\$(top_srcdir)/compile \$(CC)"
-   CC="$am_aux_dir/compile $CC"
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-depcc="$CC"   am_compiler_list=
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking dependency style of $depcc" >&5
-printf %s "checking dependency style of $depcc... " >&6; }
-if test ${am_cv_CC_dependencies_compiler_type+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -z "$AMDEP_TRUE" && test -f "$am_depcomp"; then
-  # We make a subdir and do the tests there.  Otherwise we can end up
-  # making bogus files that we don't know about and never remove.  For
-  # instance it was reported that on HP-UX the gcc test will end up
-  # making a dummy file named 'D' -- because '-MD' means "put the output
-  # in D".
-  rm -rf conftest.dir
-  mkdir conftest.dir
-  # Copy depcomp to subdir because otherwise we won't find it if we're
-  # using a relative directory.
-  cp "$am_depcomp" conftest.dir
-  cd conftest.dir
-  # We will build objects and dependencies in a subdirectory because
-  # it helps to detect inapplicable dependency modes.  For instance
-  # both Tru64's cc and ICC support -MD to output dependencies as a
-  # side effect of compilation, but ICC will put the dependencies in
-  # the current directory while Tru64 will put them in the object
-  # directory.
-  mkdir sub
-
-  am_cv_CC_dependencies_compiler_type=none
-  if test "$am_compiler_list" = ""; then
-     am_compiler_list=`sed -n 's/^#*\([a-zA-Z0-9]*\))$/\1/p' < ./depcomp`
-  fi
-  am__universal=false
-  case " $depcc " in #(
-     *\ -arch\ *\ -arch\ *) am__universal=true ;;
-     esac
-
-  for depmode in $am_compiler_list; do
-    # Setup a source with many dependencies, because some compilers
-    # like to wrap large dependency lists on column 80 (with \), and
-    # we should not choose a depcomp mode which is confused by this.
-    #
-    # We need to recreate these files for each test, as the compiler may
-    # overwrite some of them when testing with obscure command lines.
-    # This happens at least with the AIX C compiler.
-    : > sub/conftest.c
-    for i in 1 2 3 4 5 6; do
-      echo '#include "conftst'$i'.h"' >> sub/conftest.c
-      # Using ": > sub/conftst$i.h" creates only sub/conftst1.h with
-      # Solaris 10 /bin/sh.
-      echo '/* dummy */' > sub/conftst$i.h
-    done
-    echo "${am__include} ${am__quote}sub/conftest.Po${am__quote}" > confmf
-
-    # We check with '-c' and '-o' for the sake of the "dashmstdout"
-    # mode.  It turns out that the SunPro C++ compiler does not properly
-    # handle '-M -o', and we need to detect this.  Also, some Intel
-    # versions had trouble with output in subdirs.
-    am__obj=sub/conftest.${OBJEXT-o}
-    am__minus_obj="-o $am__obj"
-    case $depmode in
-    gcc)
-      # This depmode causes a compiler race in universal mode.
-      test "$am__universal" = false || continue
-      ;;
-    nosideeffect)
-      # After this tag, mechanisms are not by side-effect, so they'll
-      # only be used when explicitly requested.
-      if test "x$enable_dependency_tracking" = xyes; then
-	continue
-      else
-	break
-      fi
-      ;;
-    msvc7 | msvc7msys | msvisualcpp | msvcmsys)
-      # This compiler won't grok '-c -o', but also, the minuso test has
-      # not run yet.  These depmodes are late enough in the game, and
-      # so weak that their functioning should not be impacted.
-      am__obj=conftest.${OBJEXT-o}
-      am__minus_obj=
-      ;;
-    none) break ;;
-    esac
-    if depmode=$depmode \
-       source=sub/conftest.c object=$am__obj \
-       depfile=sub/conftest.Po tmpdepfile=sub/conftest.TPo \
-       $SHELL ./depcomp $depcc -c $am__minus_obj sub/conftest.c \
-         >/dev/null 2>conftest.err &&
-       grep sub/conftst1.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep sub/conftst6.h sub/conftest.Po > /dev/null 2>&1 &&
-       grep $am__obj sub/conftest.Po > /dev/null 2>&1 &&
-       ${MAKE-make} -s -f confmf > /dev/null 2>&1; then
-      # icc doesn't choke on unknown options, it will just issue warnings
-      # or remarks (even with -Werror).  So we grep stderr for any message
-      # that says an option was ignored or not supported.
-      # When given -MP, icc 7.0 and 7.1 complain thusly:
-      #   icc: Command line warning: ignoring option '-M'; no argument required
-      # The diagnosis changed in icc 8.0:
-      #   icc: Command line remark: option '-MP' not supported
-      if (grep 'ignoring option' conftest.err ||
-          grep 'not supported' conftest.err) >/dev/null 2>&1; then :; else
-        am_cv_CC_dependencies_compiler_type=$depmode
-        break
-      fi
-    fi
-  done
-
-  cd ..
-  rm -rf conftest.dir
-else
-  am_cv_CC_dependencies_compiler_type=none
-fi
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_CC_dependencies_compiler_type" >&5
-printf "%s\n" "$am_cv_CC_dependencies_compiler_type" >&6; }
-CCDEPMODE=depmode=$am_cv_CC_dependencies_compiler_type
-
- if
-  test "x$enable_dependency_tracking" != xno \
-  && test "$am_cv_CC_dependencies_compiler_type" = gcc3; then
-  am__fastdepCC_TRUE=
-  am__fastdepCC_FALSE='#'
-else
-  am__fastdepCC_TRUE='#'
-  am__fastdepCC_FALSE=
-fi
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for a sed that does not truncate output" >&5
-printf %s "checking for a sed that does not truncate output... " >&6; }
-if test ${ac_cv_path_SED+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-            ac_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/
-     for ac_i in 1 2 3 4 5 6 7; do
-       ac_script="$ac_script$as_nl$ac_script"
-     done
-     echo "$ac_script" 2>/dev/null | sed 99q >conftest.sed
-     { ac_script=; unset ac_script;}
-     if test -z "$SED"; then
-  ac_path_SED_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in sed gsed
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_SED="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_SED" || continue
-# Check for GNU ac_path_SED and select it if it is found.
-  # Check for GNU $ac_path_SED
-case `"$ac_path_SED" --version 2>&1` in
-*GNU*)
-  ac_cv_path_SED="$ac_path_SED" ac_path_SED_found=:;;
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf "%s\n" '' >> "conftest.nl"
-    "$ac_path_SED" -f conftest.sed < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_SED_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_SED="$ac_path_SED"
-      ac_path_SED_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_SED_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_SED"; then
-    as_fn_error $? "no acceptable sed could be found in \$PATH" "$LINENO" 5
-  fi
-else
-  ac_cv_path_SED=$SED
-fi
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_SED" >&5
-printf "%s\n" "$ac_cv_path_SED" >&6; }
- SED="$ac_cv_path_SED"
-  rm -f conftest.sed
-
-test -z "$SED" && SED=sed
-Xsed="$SED -e 1s/^X//"
-
-
-
-
-
-
-
-
-
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for grep that handles long lines and -e" >&5
-printf %s "checking for grep that handles long lines and -e... " >&6; }
-if test ${ac_cv_path_GREP+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -z "$GREP"; then
-  ac_path_GREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in grep ggrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_GREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_GREP" || continue
-# Check for GNU ac_path_GREP and select it if it is found.
-  # Check for GNU $ac_path_GREP
-case `"$ac_path_GREP" --version 2>&1` in
-*GNU*)
-  ac_cv_path_GREP="$ac_path_GREP" ac_path_GREP_found=:;;
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf "%s\n" 'GREP' >> "conftest.nl"
-    "$ac_path_GREP" -e 'GREP$' -e '-(cannot match)-' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_GREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_GREP="$ac_path_GREP"
-      ac_path_GREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_GREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_GREP"; then
-    as_fn_error $? "no acceptable grep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_GREP=$GREP
-fi
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_GREP" >&5
-printf "%s\n" "$ac_cv_path_GREP" >&6; }
- GREP="$ac_cv_path_GREP"
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for egrep" >&5
-printf %s "checking for egrep... " >&6; }
-if test ${ac_cv_path_EGREP+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if echo a | $GREP -E '(a|b)' >/dev/null 2>&1
-   then ac_cv_path_EGREP="$GREP -E"
-   else
-     if test -z "$EGREP"; then
-  ac_path_EGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in egrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_EGREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_EGREP" || continue
-# Check for GNU ac_path_EGREP and select it if it is found.
-  # Check for GNU $ac_path_EGREP
-case `"$ac_path_EGREP" --version 2>&1` in
-*GNU*)
-  ac_cv_path_EGREP="$ac_path_EGREP" ac_path_EGREP_found=:;;
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf "%s\n" 'EGREP' >> "conftest.nl"
-    "$ac_path_EGREP" 'EGREP$' < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_EGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_EGREP="$ac_path_EGREP"
-      ac_path_EGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_EGREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_EGREP"; then
-    as_fn_error $? "no acceptable egrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_EGREP=$EGREP
-fi
-
-   fi
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_EGREP" >&5
-printf "%s\n" "$ac_cv_path_EGREP" >&6; }
- EGREP="$ac_cv_path_EGREP"
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for fgrep" >&5
-printf %s "checking for fgrep... " >&6; }
-if test ${ac_cv_path_FGREP+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if echo 'ab*c' | $GREP -F 'ab*c' >/dev/null 2>&1
-   then ac_cv_path_FGREP="$GREP -F"
-   else
-     if test -z "$FGREP"; then
-  ac_path_FGREP_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH$PATH_SEPARATOR/usr/xpg4/bin
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in fgrep
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_FGREP="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_FGREP" || continue
-# Check for GNU ac_path_FGREP and select it if it is found.
-  # Check for GNU $ac_path_FGREP
-case `"$ac_path_FGREP" --version 2>&1` in
-*GNU*)
-  ac_cv_path_FGREP="$ac_path_FGREP" ac_path_FGREP_found=:;;
-*)
-  ac_count=0
-  printf %s 0123456789 >"conftest.in"
-  while :
-  do
-    cat "conftest.in" "conftest.in" >"conftest.tmp"
-    mv "conftest.tmp" "conftest.in"
-    cp "conftest.in" "conftest.nl"
-    printf "%s\n" 'FGREP' >> "conftest.nl"
-    "$ac_path_FGREP" FGREP < "conftest.nl" >"conftest.out" 2>/dev/null || break
-    diff "conftest.out" "conftest.nl" >/dev/null 2>&1 || break
-    as_fn_arith $ac_count + 1 && ac_count=$as_val
-    if test $ac_count -gt ${ac_path_FGREP_max-0}; then
-      # Best one so far, save it but keep looking for a better one
-      ac_cv_path_FGREP="$ac_path_FGREP"
-      ac_path_FGREP_max=$ac_count
-    fi
-    # 10*(2^10) chars as input seems more than enough
-    test $ac_count -gt 10 && break
-  done
-  rm -f conftest.in conftest.tmp conftest.nl conftest.out;;
-esac
-
-      $ac_path_FGREP_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_FGREP"; then
-    as_fn_error $? "no acceptable fgrep could be found in $PATH$PATH_SEPARATOR/usr/xpg4/bin" "$LINENO" 5
-  fi
-else
-  ac_cv_path_FGREP=$FGREP
-fi
-
-   fi
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_FGREP" >&5
-printf "%s\n" "$ac_cv_path_FGREP" >&6; }
- FGREP="$ac_cv_path_FGREP"
-
-
-test -z "$GREP" && GREP=grep
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-# Check whether --with-gnu-ld was given.
-if test ${with_gnu_ld+y}
-then :
-  withval=$with_gnu_ld; test no = "$withval" || with_gnu_ld=yes
-else $as_nop
-  with_gnu_ld=no
-fi
-
-ac_prog=ld
-if test yes = "$GCC"; then
-  # Check if gcc -print-prog-name=ld gives a path.
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for ld used by $CC" >&5
-printf %s "checking for ld used by $CC... " >&6; }
-  case $host in
-  *-*-mingw*)
-    # gcc leaves a trailing carriage return, which upsets mingw
-    ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;;
-  *)
-    ac_prog=`($CC -print-prog-name=ld) 2>&5` ;;
-  esac
-  case $ac_prog in
-    # Accept absolute paths.
-    [\\/]* | ?:[\\/]*)
-      re_direlt='/[^/][^/]*/\.\./'
-      # Canonicalize the pathname of ld
-      ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'`
-      while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do
-	ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"`
-      done
-      test -z "$LD" && LD=$ac_prog
-      ;;
-  "")
-    # If it fails, then pretend we aren't using GCC.
-    ac_prog=ld
-    ;;
-  *)
-    # If it is relative, then search for the first ld in PATH.
-    with_gnu_ld=unknown
-    ;;
-  esac
-elif test yes = "$with_gnu_ld"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for GNU ld" >&5
-printf %s "checking for GNU ld... " >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for non-GNU ld" >&5
-printf %s "checking for non-GNU ld... " >&6; }
-fi
-if test ${lt_cv_path_LD+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -z "$LD"; then
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  for ac_dir in $PATH; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then
-      lt_cv_path_LD=$ac_dir/$ac_prog
-      # Check to see if the program is GNU ld.  I'd rather use --version,
-      # but apparently some variants of GNU ld only accept -v.
-      # Break only if it was the GNU/non-GNU ld that we prefer.
-      case `"$lt_cv_path_LD" -v 2>&1 </dev/null` in
-      *GNU* | *'with BFD'*)
-	test no != "$with_gnu_ld" && break
-	;;
-      *)
-	test yes != "$with_gnu_ld" && break
-	;;
-      esac
-    fi
-  done
-  IFS=$lt_save_ifs
-else
-  lt_cv_path_LD=$LD # Let the user override the test with a path.
-fi
-fi
-
-LD=$lt_cv_path_LD
-if test -n "$LD"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $LD" >&5
-printf "%s\n" "$LD" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-test -z "$LD" && as_fn_error $? "no acceptable ld found in \$PATH" "$LINENO" 5
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if the linker ($LD) is GNU ld" >&5
-printf %s "checking if the linker ($LD) is GNU ld... " >&6; }
-if test ${lt_cv_prog_gnu_ld+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  # I'd rather use --version here, but apparently some GNU lds only accept -v.
-case `$LD -v 2>&1 </dev/null` in
-*GNU* | *'with BFD'*)
-  lt_cv_prog_gnu_ld=yes
-  ;;
-*)
-  lt_cv_prog_gnu_ld=no
-  ;;
-esac
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_gnu_ld" >&5
-printf "%s\n" "$lt_cv_prog_gnu_ld" >&6; }
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-
-
-
-
-
-
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for BSD- or MS-compatible name lister (nm)" >&5
-printf %s "checking for BSD- or MS-compatible name lister (nm)... " >&6; }
-if test ${lt_cv_path_NM+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$NM"; then
-  # Let the user override the test.
-  lt_cv_path_NM=$NM
-else
-  lt_nm_to_check=${ac_tool_prefix}nm
-  if test -n "$ac_tool_prefix" && test "$build" = "$host"; then
-    lt_nm_to_check="$lt_nm_to_check nm"
-  fi
-  for lt_tmp_nm in $lt_nm_to_check; do
-    lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-    for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do
-      IFS=$lt_save_ifs
-      test -z "$ac_dir" && ac_dir=.
-      tmp_nm=$ac_dir/$lt_tmp_nm
-      if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then
-	# Check to see if the nm accepts a BSD-compat flag.
-	# Adding the 'sed 1q' prevents false positives on HP-UX, which says:
-	#   nm: unknown option "B" ignored
-	# Tru64's nm complains that /dev/null is an invalid object file
-	# MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty
-	case $build_os in
-	mingw*) lt_bad_file=conftest.nm/nofile ;;
-	*) lt_bad_file=/dev/null ;;
-	esac
-	case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in
-	*$lt_bad_file* | *'Invalid file or object type'*)
-	  lt_cv_path_NM="$tmp_nm -B"
-	  break 2
-	  ;;
-	*)
-	  case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in
-	  */dev/null*)
-	    lt_cv_path_NM="$tmp_nm -p"
-	    break 2
-	    ;;
-	  *)
-	    lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but
-	    continue # so that we can try to find one that supports BSD flags
-	    ;;
-	  esac
-	  ;;
-	esac
-      fi
-    done
-    IFS=$lt_save_ifs
-  done
-  : ${lt_cv_path_NM=no}
-fi
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_NM" >&5
-printf "%s\n" "$lt_cv_path_NM" >&6; }
-if test no != "$lt_cv_path_NM"; then
-  NM=$lt_cv_path_NM
-else
-  # Didn't find any BSD compatible name lister, look for dumpbin.
-  if test -n "$DUMPBIN"; then :
-    # Let the user override the test.
-  else
-    if test -n "$ac_tool_prefix"; then
-  for ac_prog in dumpbin "link -dump"
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DUMPBIN+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$DUMPBIN"; then
-  ac_cv_prog_DUMPBIN="$DUMPBIN" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DUMPBIN="$ac_tool_prefix$ac_prog"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-DUMPBIN=$ac_cv_prog_DUMPBIN
-if test -n "$DUMPBIN"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $DUMPBIN" >&5
-printf "%s\n" "$DUMPBIN" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-    test -n "$DUMPBIN" && break
-  done
-fi
-if test -z "$DUMPBIN"; then
-  ac_ct_DUMPBIN=$DUMPBIN
-  for ac_prog in dumpbin "link -dump"
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DUMPBIN+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_DUMPBIN"; then
-  ac_cv_prog_ac_ct_DUMPBIN="$ac_ct_DUMPBIN" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DUMPBIN="$ac_prog"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_DUMPBIN=$ac_cv_prog_ac_ct_DUMPBIN
-if test -n "$ac_ct_DUMPBIN"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DUMPBIN" >&5
-printf "%s\n" "$ac_ct_DUMPBIN" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_DUMPBIN" && break
-done
-
-  if test "x$ac_ct_DUMPBIN" = x; then
-    DUMPBIN=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DUMPBIN=$ac_ct_DUMPBIN
-  fi
-fi
-
-    case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in
-    *COFF*)
-      DUMPBIN="$DUMPBIN -symbols -headers"
-      ;;
-    *)
-      DUMPBIN=:
-      ;;
-    esac
-  fi
-
-  if test : != "$DUMPBIN"; then
-    NM=$DUMPBIN
-  fi
-fi
-test -z "$NM" && NM=nm
-
-
-
-
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking the name lister ($NM) interface" >&5
-printf %s "checking the name lister ($NM) interface... " >&6; }
-if test ${lt_cv_nm_interface+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_nm_interface="BSD nm"
-  echo "int some_variable = 0;" > conftest.$ac_ext
-  (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&5)
-  (eval "$ac_compile" 2>conftest.err)
-  cat conftest.err >&5
-  (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&5)
-  (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
-  cat conftest.err >&5
-  (eval echo "\"\$as_me:$LINENO: output\"" >&5)
-  cat conftest.out >&5
-  if $GREP 'External.*some_variable' conftest.out > /dev/null; then
-    lt_cv_nm_interface="MS dumpbin"
-  fi
-  rm -f conftest*
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_nm_interface" >&5
-printf "%s\n" "$lt_cv_nm_interface" >&6; }
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether ln -s works" >&5
-printf %s "checking whether ln -s works... " >&6; }
-LN_S=$as_ln_s
-if test "$LN_S" = "ln -s"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf "%s\n" "yes" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no, using $LN_S" >&5
-printf "%s\n" "no, using $LN_S" >&6; }
-fi
-
-# find the maximum length of command line arguments
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking the maximum length of command line arguments" >&5
-printf %s "checking the maximum length of command line arguments... " >&6; }
-if test ${lt_cv_sys_max_cmd_len+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-    i=0
-  teststring=ABCD
-
-  case $build_os in
-  msdosdjgpp*)
-    # On DJGPP, this test can blow up pretty badly due to problems in libc
-    # (any single argument exceeding 2000 bytes causes a buffer overrun
-    # during glob expansion).  Even if it were fixed, the result of this
-    # check would be larger than it should be.
-    lt_cv_sys_max_cmd_len=12288;    # 12K is about right
-    ;;
-
-  gnu*)
-    # Under GNU Hurd, this test is not required because there is
-    # no limit to the length of command line arguments.
-    # Libtool will interpret -1 as no limit whatsoever
-    lt_cv_sys_max_cmd_len=-1;
-    ;;
-
-  cygwin* | mingw* | cegcc*)
-    # On Win9x/ME, this test blows up -- it succeeds, but takes
-    # about 5 minutes as the teststring grows exponentially.
-    # Worse, since 9x/ME are not pre-emptively multitasking,
-    # you end up with a "frozen" computer, even though with patience
-    # the test eventually succeeds (with a max line length of 256k).
-    # Instead, let's just punt: use the minimum linelength reported by
-    # all of the supported platforms: 8192 (on NT/2K/XP).
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  mint*)
-    # On MiNT this can take a long time and run out of memory.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  amigaos*)
-    # On AmigaOS with pdksh, this test takes hours, literally.
-    # So we just punt and use a minimum line length of 8192.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  bitrig* | darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*)
-    # This has been around since 386BSD, at least.  Likely further.
-    if test -x /sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax`
-    elif test -x /usr/sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax`
-    else
-      lt_cv_sys_max_cmd_len=65536	# usable default for all BSDs
-    fi
-    # And add a safety zone
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    ;;
-
-  interix*)
-    # We know the value 262144 and hardcode it with a safety zone (like BSD)
-    lt_cv_sys_max_cmd_len=196608
-    ;;
-
-  os2*)
-    # The test takes a long time on OS/2.
-    lt_cv_sys_max_cmd_len=8192
-    ;;
-
-  osf*)
-    # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure
-    # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not
-    # nice to cause kernel panics so lets avoid the loop below.
-    # First set a reasonable default.
-    lt_cv_sys_max_cmd_len=16384
-    #
-    if test -x /sbin/sysconfig; then
-      case `/sbin/sysconfig -q proc exec_disable_arg_limit` in
-        *1*) lt_cv_sys_max_cmd_len=-1 ;;
-      esac
-    fi
-    ;;
-  sco3.2v5*)
-    lt_cv_sys_max_cmd_len=102400
-    ;;
-  sysv5* | sco5v6* | sysv4.2uw2*)
-    kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null`
-    if test -n "$kargmax"; then
-      lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[	 ]//'`
-    else
-      lt_cv_sys_max_cmd_len=32768
-    fi
-    ;;
-  *)
-    lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null`
-    if test -n "$lt_cv_sys_max_cmd_len" && \
-       test undefined != "$lt_cv_sys_max_cmd_len"; then
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    else
-      # Make teststring a little bigger before we do anything with it.
-      # a 1K string should be a reasonable start.
-      for i in 1 2 3 4 5 6 7 8; do
-        teststring=$teststring$teststring
-      done
-      SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}}
-      # If test is not a shell built-in, we'll probably end up computing a
-      # maximum length that is only half of the actual maximum length, but
-      # we can't tell.
-      while { test X`env echo "$teststring$teststring" 2>/dev/null` \
-	         = "X$teststring$teststring"; } >/dev/null 2>&1 &&
-	      test 17 != "$i" # 1/2 MB should be enough
-      do
-        i=`expr $i + 1`
-        teststring=$teststring$teststring
-      done
-      # Only check the string length outside the loop.
-      lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1`
-      teststring=
-      # Add a significant safety factor because C++ compilers can tack on
-      # massive amounts of additional arguments before passing them to the
-      # linker.  It appears as though 1/2 is a usable value.
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2`
-    fi
-    ;;
-  esac
-
-fi
-
-if test -n "$lt_cv_sys_max_cmd_len"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sys_max_cmd_len" >&5
-printf "%s\n" "$lt_cv_sys_max_cmd_len" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: none" >&5
-printf "%s\n" "none" >&6; }
-fi
-max_cmd_len=$lt_cv_sys_max_cmd_len
-
-
-
-
-
-
-: ${CP="cp -f"}
-: ${MV="mv -f"}
-: ${RM="rm -f"}
-
-if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then
-  lt_unset=unset
-else
-  lt_unset=false
-fi
-
-
-
-
-
-# test EBCDIC or ASCII
-case `echo X|tr X '\101'` in
- A) # ASCII based system
-    # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr
-  lt_SP2NL='tr \040 \012'
-  lt_NL2SP='tr \015\012 \040\040'
-  ;;
- *) # EBCDIC based system
-  lt_SP2NL='tr \100 \n'
-  lt_NL2SP='tr \r\n \100\100'
-  ;;
-esac
-
-
-
-
-
-
-
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to $host format" >&5
-printf %s "checking how to convert $build file names to $host format... " >&6; }
-if test ${lt_cv_to_host_file_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  case $host in
-  *-*-mingw* )
-    case $build in
-      *-*-mingw* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32
-        ;;
-    esac
-    ;;
-  *-*-cygwin* )
-    case $build in
-      *-*-mingw* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_noop
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin
-        ;;
-    esac
-    ;;
-  * ) # unhandled hosts (and "normal" native builds)
-    lt_cv_to_host_file_cmd=func_convert_file_noop
-    ;;
-esac
-
-fi
-
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_host_file_cmd" >&5
-printf "%s\n" "$lt_cv_to_host_file_cmd" >&6; }
-
-
-
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to convert $build file names to toolchain format" >&5
-printf %s "checking how to convert $build file names to toolchain format... " >&6; }
-if test ${lt_cv_to_tool_file_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  #assume ordinary cross tools, or native build.
-lt_cv_to_tool_file_cmd=func_convert_file_noop
-case $host in
-  *-*-mingw* )
-    case $build in
-      *-*-mingw* ) # actually msys
-        lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32
-        ;;
-    esac
-    ;;
-esac
-
-fi
-
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_to_tool_file_cmd" >&5
-printf "%s\n" "$lt_cv_to_tool_file_cmd" >&6; }
-
-
-
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $LD option to reload object files" >&5
-printf %s "checking for $LD option to reload object files... " >&6; }
-if test ${lt_cv_ld_reload_flag+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_ld_reload_flag='-r'
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_reload_flag" >&5
-printf "%s\n" "$lt_cv_ld_reload_flag" >&6; }
-reload_flag=$lt_cv_ld_reload_flag
-case $reload_flag in
-"" | " "*) ;;
-*) reload_flag=" $reload_flag" ;;
-esac
-reload_cmds='$LD$reload_flag -o $output$reload_objs'
-case $host_os in
-  cygwin* | mingw* | pw32* | cegcc*)
-    if test yes != "$GCC"; then
-      reload_cmds=false
-    fi
-    ;;
-  darwin*)
-    if test yes = "$GCC"; then
-      reload_cmds='$LTCC $LTCFLAGS -nostdlib $wl-r -o $output$reload_objs'
-    else
-      reload_cmds='$LD$reload_flag -o $output$reload_objs'
-    fi
-    ;;
-esac
-
-
-
-
-
-
-
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}file", so it can be a program name with args.
-set dummy ${ac_tool_prefix}file; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_FILECMD+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$FILECMD"; then
-  ac_cv_prog_FILECMD="$FILECMD" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_FILECMD="${ac_tool_prefix}file"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-FILECMD=$ac_cv_prog_FILECMD
-if test -n "$FILECMD"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $FILECMD" >&5
-printf "%s\n" "$FILECMD" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_FILECMD"; then
-  ac_ct_FILECMD=$FILECMD
-  # Extract the first word of "file", so it can be a program name with args.
-set dummy file; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_FILECMD+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_FILECMD"; then
-  ac_cv_prog_ac_ct_FILECMD="$ac_ct_FILECMD" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_FILECMD="file"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_FILECMD=$ac_cv_prog_ac_ct_FILECMD
-if test -n "$ac_ct_FILECMD"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_FILECMD" >&5
-printf "%s\n" "$ac_ct_FILECMD" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_FILECMD" = x; then
-    FILECMD=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    FILECMD=$ac_ct_FILECMD
-  fi
-else
-  FILECMD="$ac_cv_prog_FILECMD"
-fi
-
-
-
-
-
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}objdump", so it can be a program name with args.
-set dummy ${ac_tool_prefix}objdump; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OBJDUMP+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$OBJDUMP"; then
-  ac_cv_prog_OBJDUMP="$OBJDUMP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OBJDUMP="${ac_tool_prefix}objdump"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-OBJDUMP=$ac_cv_prog_OBJDUMP
-if test -n "$OBJDUMP"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $OBJDUMP" >&5
-printf "%s\n" "$OBJDUMP" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OBJDUMP"; then
-  ac_ct_OBJDUMP=$OBJDUMP
-  # Extract the first word of "objdump", so it can be a program name with args.
-set dummy objdump; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OBJDUMP+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_OBJDUMP"; then
-  ac_cv_prog_ac_ct_OBJDUMP="$ac_ct_OBJDUMP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OBJDUMP="objdump"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_OBJDUMP=$ac_cv_prog_ac_ct_OBJDUMP
-if test -n "$ac_ct_OBJDUMP"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OBJDUMP" >&5
-printf "%s\n" "$ac_ct_OBJDUMP" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_OBJDUMP" = x; then
-    OBJDUMP="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OBJDUMP=$ac_ct_OBJDUMP
-  fi
-else
-  OBJDUMP="$ac_cv_prog_OBJDUMP"
-fi
-
-test -z "$OBJDUMP" && OBJDUMP=objdump
-
-
-
-
-
-
-
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to recognize dependent libraries" >&5
-printf %s "checking how to recognize dependent libraries... " >&6; }
-if test ${lt_cv_deplibs_check_method+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_file_magic_cmd='$MAGIC_CMD'
-lt_cv_file_magic_test_file=
-lt_cv_deplibs_check_method='unknown'
-# Need to set the preceding variable on all platforms that support
-# interlibrary dependencies.
-# 'none' -- dependencies not supported.
-# 'unknown' -- same as none, but documents that we really don't know.
-# 'pass_all' -- all dependencies passed with no checks.
-# 'test_compile' -- check by making test program.
-# 'file_magic [[regex]]' -- check by looking for files in library path
-# that responds to the $file_magic_cmd with a given extended regex.
-# If you have 'file' or equivalent on your system and you're not sure
-# whether 'pass_all' will *always* work, you probably want this one.
-
-case $host_os in
-aix[4-9]*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-beos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-bsdi[45]*)
-  lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib)'
-  lt_cv_file_magic_cmd='$FILECMD -L'
-  lt_cv_file_magic_test_file=/shlib/libc.so
-  ;;
-
-cygwin*)
-  # func_win32_libid is a shell function defined in ltmain.sh
-  lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-  lt_cv_file_magic_cmd='func_win32_libid'
-  ;;
-
-mingw* | pw32*)
-  # Base MSYS/MinGW do not provide the 'file' command needed by
-  # func_win32_libid shell function, so use a weaker test based on 'objdump',
-  # unless we find 'file', for example because we are cross-compiling.
-  if ( file / ) >/dev/null 2>&1; then
-    lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-    lt_cv_file_magic_cmd='func_win32_libid'
-  else
-    # Keep this pattern in sync with the one in func_win32_libid.
-    lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64)'
-    lt_cv_file_magic_cmd='$OBJDUMP -f'
-  fi
-  ;;
-
-cegcc*)
-  # use the weaker test based on 'objdump'. See mingw*.
-  lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?'
-  lt_cv_file_magic_cmd='$OBJDUMP -f'
-  ;;
-
-darwin* | rhapsody*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    case $host_cpu in
-    i*86 )
-      # Not sure whether the presence of OpenBSD here was a mistake.
-      # Let's accept both of them until this is cleared up.
-      lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[3-9]86 (compact )?demand paged shared library'
-      lt_cv_file_magic_cmd=$FILECMD
-      lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*`
-      ;;
-    esac
-  else
-    lt_cv_deplibs_check_method=pass_all
-  fi
-  ;;
-
-haiku*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-hpux10.20* | hpux11*)
-  lt_cv_file_magic_cmd=$FILECMD
-  case $host_cpu in
-  ia64*)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF-[0-9][0-9]) shared object file - IA64'
-    lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so
-    ;;
-  hppa*64*)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]'
-    lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl
-    ;;
-  *)
-    lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|PA-RISC[0-9]\.[0-9]) shared library'
-    lt_cv_file_magic_test_file=/usr/lib/libc.sl
-    ;;
-  esac
-  ;;
-
-interix[3-9]*)
-  # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here
-  lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|\.a)$'
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $LD in
-  *-32|*"-32 ") libmagic=32-bit;;
-  *-n32|*"-n32 ") libmagic=N32;;
-  *-64|*"-64 ") libmagic=64-bit;;
-  *) libmagic=never-match;;
-  esac
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-netbsd*)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so|_pic\.a)$'
-  fi
-  ;;
-
-newos6*)
-  lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (executable|dynamic lib)'
-  lt_cv_file_magic_cmd=$FILECMD
-  lt_cv_file_magic_test_file=/usr/lib/libnls.so
-  ;;
-
-*nto* | *qnx*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-openbsd* | bitrig*)
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|\.so|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[^/]+(\.so\.[0-9]+\.[0-9]+|_pic\.a)$'
-  fi
-  ;;
-
-osf3* | osf4* | osf5*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-rdos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-solaris*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv4 | sysv4.3*)
-  case $host_vendor in
-  motorola)
-    lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [ML]SB (shared object|dynamic lib) M[0-9][0-9]* Version [0-9]'
-    lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*`
-    ;;
-  ncr)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  sequent)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method='file_magic ELF [0-9][0-9]*-bit [LM]SB (shared object|dynamic lib )'
-    ;;
-  sni)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method="file_magic ELF [0-9][0-9]*-bit [LM]SB dynamic lib"
-    lt_cv_file_magic_test_file=/lib/libc.so
-    ;;
-  siemens)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  pc)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  esac
-  ;;
-
-tpf*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-os2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-esac
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_deplibs_check_method" >&5
-printf "%s\n" "$lt_cv_deplibs_check_method" >&6; }
-
-file_magic_glob=
-want_nocaseglob=no
-if test "$build" = "$host"; then
-  case $host_os in
-  mingw* | pw32*)
-    if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then
-      want_nocaseglob=yes
-    else
-      file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[\1]\/[\1]\/g;/g"`
-    fi
-    ;;
-  esac
-fi
-
-file_magic_cmd=$lt_cv_file_magic_cmd
-deplibs_check_method=$lt_cv_deplibs_check_method
-test -z "$deplibs_check_method" && deplibs_check_method=unknown
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}dlltool", so it can be a program name with args.
-set dummy ${ac_tool_prefix}dlltool; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DLLTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$DLLTOOL"; then
-  ac_cv_prog_DLLTOOL="$DLLTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DLLTOOL="${ac_tool_prefix}dlltool"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-DLLTOOL=$ac_cv_prog_DLLTOOL
-if test -n "$DLLTOOL"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $DLLTOOL" >&5
-printf "%s\n" "$DLLTOOL" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_DLLTOOL"; then
-  ac_ct_DLLTOOL=$DLLTOOL
-  # Extract the first word of "dlltool", so it can be a program name with args.
-set dummy dlltool; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DLLTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_DLLTOOL"; then
-  ac_cv_prog_ac_ct_DLLTOOL="$ac_ct_DLLTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DLLTOOL="dlltool"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_DLLTOOL=$ac_cv_prog_ac_ct_DLLTOOL
-if test -n "$ac_ct_DLLTOOL"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DLLTOOL" >&5
-printf "%s\n" "$ac_ct_DLLTOOL" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_DLLTOOL" = x; then
-    DLLTOOL="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DLLTOOL=$ac_ct_DLLTOOL
-  fi
-else
-  DLLTOOL="$ac_cv_prog_DLLTOOL"
-fi
-
-test -z "$DLLTOOL" && DLLTOOL=dlltool
-
-
-
-
-
-
-
-
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to associate runtime and link libraries" >&5
-printf %s "checking how to associate runtime and link libraries... " >&6; }
-if test ${lt_cv_sharedlib_from_linklib_cmd+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_sharedlib_from_linklib_cmd='unknown'
-
-case $host_os in
-cygwin* | mingw* | pw32* | cegcc*)
-  # two different shell functions defined in ltmain.sh;
-  # decide which one to use based on capabilities of $DLLTOOL
-  case `$DLLTOOL --help 2>&1` in
-  *--identify-strict*)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib
-    ;;
-  *)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback
-    ;;
-  esac
-  ;;
-*)
-  # fallback: assume linklib IS sharedlib
-  lt_cv_sharedlib_from_linklib_cmd=$ECHO
-  ;;
-esac
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_sharedlib_from_linklib_cmd" >&5
-printf "%s\n" "$lt_cv_sharedlib_from_linklib_cmd" >&6; }
-sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd
-test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO
-
-
-
-
-
-
-
-
-if test -n "$ac_tool_prefix"; then
-  for ac_prog in ar
-  do
-    # Extract the first word of "$ac_tool_prefix$ac_prog", so it can be a program name with args.
-set dummy $ac_tool_prefix$ac_prog; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_AR+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$AR"; then
-  ac_cv_prog_AR="$AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_AR="$ac_tool_prefix$ac_prog"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-AR=$ac_cv_prog_AR
-if test -n "$AR"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $AR" >&5
-printf "%s\n" "$AR" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-    test -n "$AR" && break
-  done
-fi
-if test -z "$AR"; then
-  ac_ct_AR=$AR
-  for ac_prog in ar
-do
-  # Extract the first word of "$ac_prog", so it can be a program name with args.
-set dummy $ac_prog; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_AR+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_AR"; then
-  ac_cv_prog_ac_ct_AR="$ac_ct_AR" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_AR="$ac_prog"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_AR=$ac_cv_prog_ac_ct_AR
-if test -n "$ac_ct_AR"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_AR" >&5
-printf "%s\n" "$ac_ct_AR" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-  test -n "$ac_ct_AR" && break
-done
-
-  if test "x$ac_ct_AR" = x; then
-    AR="false"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    AR=$ac_ct_AR
-  fi
-fi
-
-: ${AR=ar}
-
-
-
-
-
-
-# Use ARFLAGS variable as AR's operation code to sync the variable naming with
-# Automake.  If both AR_FLAGS and ARFLAGS are specified, AR_FLAGS should have
-# higher priority because thats what people were doing historically (setting
-# ARFLAGS for automake and AR_FLAGS for libtool).  FIXME: Make the AR_FLAGS
-# variable obsoleted/removed.
-
-test ${AR_FLAGS+y} || AR_FLAGS=${ARFLAGS-cr}
-lt_ar_flags=$AR_FLAGS
-
-
-
-
-
-
-# Make AR_FLAGS overridable by 'make ARFLAGS='.  Don't try to run-time override
-# by AR_FLAGS because that was never working and AR_FLAGS is about to die.
-
-
-
-
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for archiver @FILE support" >&5
-printf %s "checking for archiver @FILE support... " >&6; }
-if test ${lt_cv_ar_at_file+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_ar_at_file=no
-   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  echo conftest.$ac_objext > conftest.lst
-      lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&5'
-      { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5
-  (eval $lt_ar_try) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-      if test 0 -eq "$ac_status"; then
-	# Ensure the archiver fails upon bogus file names.
-	rm -f conftest.$ac_objext libconftest.a
-	{ { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$lt_ar_try\""; } >&5
-  (eval $lt_ar_try) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-	if test 0 -ne "$ac_status"; then
-          lt_cv_ar_at_file=@
-        fi
-      fi
-      rm -f conftest.* libconftest.a
-
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ar_at_file" >&5
-printf "%s\n" "$lt_cv_ar_at_file" >&6; }
-
-if test no = "$lt_cv_ar_at_file"; then
-  archiver_list_spec=
-else
-  archiver_list_spec=$lt_cv_ar_at_file
-fi
-
-
-
-
-
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}strip", so it can be a program name with args.
-set dummy ${ac_tool_prefix}strip; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$STRIP"; then
-  ac_cv_prog_STRIP="$STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_STRIP="${ac_tool_prefix}strip"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-STRIP=$ac_cv_prog_STRIP
-if test -n "$STRIP"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $STRIP" >&5
-printf "%s\n" "$STRIP" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_STRIP"; then
-  ac_ct_STRIP=$STRIP
-  # Extract the first word of "strip", so it can be a program name with args.
-set dummy strip; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_STRIP+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_STRIP"; then
-  ac_cv_prog_ac_ct_STRIP="$ac_ct_STRIP" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_STRIP="strip"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_STRIP=$ac_cv_prog_ac_ct_STRIP
-if test -n "$ac_ct_STRIP"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_STRIP" >&5
-printf "%s\n" "$ac_ct_STRIP" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_STRIP" = x; then
-    STRIP=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    STRIP=$ac_ct_STRIP
-  fi
-else
-  STRIP="$ac_cv_prog_STRIP"
-fi
-
-test -z "$STRIP" && STRIP=:
-
-
-
-
-
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}ranlib", so it can be a program name with args.
-set dummy ${ac_tool_prefix}ranlib; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_RANLIB+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$RANLIB"; then
-  ac_cv_prog_RANLIB="$RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_RANLIB="${ac_tool_prefix}ranlib"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-RANLIB=$ac_cv_prog_RANLIB
-if test -n "$RANLIB"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $RANLIB" >&5
-printf "%s\n" "$RANLIB" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_RANLIB"; then
-  ac_ct_RANLIB=$RANLIB
-  # Extract the first word of "ranlib", so it can be a program name with args.
-set dummy ranlib; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_RANLIB+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_RANLIB"; then
-  ac_cv_prog_ac_ct_RANLIB="$ac_ct_RANLIB" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_RANLIB="ranlib"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_RANLIB=$ac_cv_prog_ac_ct_RANLIB
-if test -n "$ac_ct_RANLIB"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_RANLIB" >&5
-printf "%s\n" "$ac_ct_RANLIB" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_RANLIB" = x; then
-    RANLIB=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    RANLIB=$ac_ct_RANLIB
-  fi
-else
-  RANLIB="$ac_cv_prog_RANLIB"
-fi
-
-test -z "$RANLIB" && RANLIB=:
-
-
-
-
-
-
-# Determine commands to create old-style static archives.
-old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs'
-old_postinstall_cmds='chmod 644 $oldlib'
-old_postuninstall_cmds=
-
-if test -n "$RANLIB"; then
-  case $host_os in
-  bitrig* | openbsd*)
-    old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB -t \$tool_oldlib"
-    ;;
-  *)
-    old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib"
-    ;;
-  esac
-  old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib"
-fi
-
-case $host_os in
-  darwin*)
-    lock_old_archive_extraction=yes ;;
-  *)
-    lock_old_archive_extraction=no ;;
-esac
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-
-
-# Check for command to grab the raw symbol name followed by C symbol from nm.
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking command to parse $NM output from $compiler object" >&5
-printf %s "checking command to parse $NM output from $compiler object... " >&6; }
-if test ${lt_cv_sys_global_symbol_pipe+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-
-# These are sane defaults that work on at least a few old systems.
-# [They come from Ultrix.  What could be older than Ultrix?!! ;)]
-
-# Character class describing NM global symbol codes.
-symcode='[BCDEGRST]'
-
-# Regexp to match symbols that can be accessed directly from C.
-sympat='\([_A-Za-z][_A-Za-z0-9]*\)'
-
-# Define system-specific variables.
-case $host_os in
-aix*)
-  symcode='[BCDT]'
-  ;;
-cygwin* | mingw* | pw32* | cegcc*)
-  symcode='[ABCDGISTW]'
-  ;;
-hpux*)
-  if test ia64 = "$host_cpu"; then
-    symcode='[ABCDEGRST]'
-  fi
-  ;;
-irix* | nonstopux*)
-  symcode='[BCDEGRST]'
-  ;;
-osf*)
-  symcode='[BCDEGQRST]'
-  ;;
-solaris*)
-  symcode='[BDRT]'
-  ;;
-sco3.2v5*)
-  symcode='[DT]'
-  ;;
-sysv4.2uw2*)
-  symcode='[DT]'
-  ;;
-sysv5* | sco5v6* | unixware* | OpenUNIX*)
-  symcode='[ABDT]'
-  ;;
-sysv4)
-  symcode='[DFNSTU]'
-  ;;
-esac
-
-# If we're using GNU nm, then use its standard symbol codes.
-case `$NM -V 2>&1` in
-*GNU* | *'with BFD'*)
-  symcode='[ABCDGIRSTW]' ;;
-esac
-
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  # Gets list of data symbols to import.
-  lt_cv_sys_global_symbol_to_import="$SED -n -e 's/^I .* \(.*\)$/\1/p'"
-  # Adjust the below global symbol transforms to fixup imported variables.
-  lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'"
-  lt_c_name_hook=" -e 's/^I .* \(.*\)$/  {\"\1\", (void *) 0},/p'"
-  lt_c_name_lib_hook="\
-  -e 's/^I .* \(lib.*\)$/  {\"\1\", (void *) 0},/p'\
-  -e 's/^I .* \(.*\)$/  {\"lib\1\", (void *) 0},/p'"
-else
-  # Disable hooks by default.
-  lt_cv_sys_global_symbol_to_import=
-  lt_cdecl_hook=
-  lt_c_name_hook=
-  lt_c_name_lib_hook=
-fi
-
-# Transform an extracted symbol line into a proper C declaration.
-# Some systems (esp. on ia64) link data and code symbols differently,
-# so use this general approach.
-lt_cv_sys_global_symbol_to_cdecl="$SED -n"\
-$lt_cdecl_hook\
-" -e 's/^T .* \(.*\)$/extern int \1();/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'"
-
-# Transform an extracted symbol line into symbol name and symbol address
-lt_cv_sys_global_symbol_to_c_name_address="$SED -n"\
-$lt_c_name_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/p'"
-
-# Transform an extracted symbol line into symbol name with lib prefix and
-# symbol address.
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="$SED -n"\
-$lt_c_name_lib_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(lib.*\)$/  {\"\1\", (void *) \&\1},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"lib\1\", (void *) \&\1},/p'"
-
-# Handle CRLF in mingw tool chain
-opt_cr=
-case $build_os in
-mingw*)
-  opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp
-  ;;
-esac
-
-# Try without a prefix underscore, then with it.
-for ac_symprfx in "" "_"; do
-
-  # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol.
-  symxfrm="\\1 $ac_symprfx\\2 \\2"
-
-  # Write the raw and C identifiers.
-  if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-    # Fake it for dumpbin and say T for any non-static function,
-    # D for any global variable and I for any imported variable.
-    # Also find C++ and __fastcall symbols from MSVC++ or ICC,
-    # which start with @ or ?.
-    lt_cv_sys_global_symbol_pipe="$AWK '"\
-"     {last_section=section; section=\$ 3};"\
-"     /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\
-"     /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\
-"     /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\
-"     /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\
-"     /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\
-"     \$ 0!~/External *\|/{next};"\
-"     / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\
-"     {if(hide[section]) next};"\
-"     {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\
-"     {split(\$ 0,a,/\||\r/); split(a[2],s)};"\
-"     s[1]~/^[@?]/{print f,s[1],s[1]; next};"\
-"     s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\
-"     ' prfx=^$ac_symprfx"
-  else
-    lt_cv_sys_global_symbol_pipe="$SED -n -e 's/^.*[	 ]\($symcode$symcode*\)[	 ][	 ]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'"
-  fi
-  lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | $SED '/ __gnu_lto/d'"
-
-  # Check to see that the pipe works correctly.
-  pipe_works=no
-
-  rm -f conftest*
-  cat > conftest.$ac_ext <<_LT_EOF
-#ifdef __cplusplus
-extern "C" {
-#endif
-char nm_test_var;
-void nm_test_func(void);
-void nm_test_func(void){}
-#ifdef __cplusplus
-}
-#endif
-int main(){nm_test_var='a';nm_test_func();return(0);}
-_LT_EOF
-
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    # Now try to grab the symbols.
-    nlist=conftest.nm
-    if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist\""; } >&5
-  (eval $NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s "$nlist"; then
-      # Try sorting and uniquifying the output.
-      if sort "$nlist" | uniq > "$nlist"T; then
-	mv -f "$nlist"T "$nlist"
-      else
-	rm -f "$nlist"T
-      fi
-
-      # Make sure that we snagged all the symbols we need.
-      if $GREP ' nm_test_var$' "$nlist" >/dev/null; then
-	if $GREP ' nm_test_func$' "$nlist" >/dev/null; then
-	  cat <<_LT_EOF > conftest.$ac_ext
-/* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests.  */
-#if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE
-/* DATA imports from DLLs on WIN32 can't be const, because runtime
-   relocations are performed -- see ld's documentation on pseudo-relocs.  */
-# define LT_DLSYM_CONST
-#elif defined __osf__
-/* This system does not cope well with relocations in const data.  */
-# define LT_DLSYM_CONST
-#else
-# define LT_DLSYM_CONST const
-#endif
-
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-_LT_EOF
-	  # Now generate the symbol file.
-	  eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext'
-
-	  cat <<_LT_EOF >> conftest.$ac_ext
-
-/* The mapping between symbol names and symbols.  */
-LT_DLSYM_CONST struct {
-  const char *name;
-  void       *address;
-}
-lt__PROGRAM__LTX_preloaded_symbols[] =
-{
-  { "@PROGRAM@", (void *) 0 },
-_LT_EOF
-	  $SED "s/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext
-	  cat <<\_LT_EOF >> conftest.$ac_ext
-  {0, (void *) 0}
-};
-
-/* This works around a problem in FreeBSD linker */
-#ifdef FREEBSD_WORKAROUND
-static const void *lt_preloaded_setup() {
-  return lt__PROGRAM__LTX_preloaded_symbols;
-}
-#endif
-
-#ifdef __cplusplus
-}
-#endif
-_LT_EOF
-	  # Now try linking the two files.
-	  mv conftest.$ac_objext conftstm.$ac_objext
-	  lt_globsym_save_LIBS=$LIBS
-	  lt_globsym_save_CFLAGS=$CFLAGS
-	  LIBS=conftstm.$ac_objext
-	  CFLAGS="$CFLAGS$lt_prog_compiler_no_builtin_flag"
-	  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s conftest$ac_exeext; then
-	    pipe_works=yes
-	  fi
-	  LIBS=$lt_globsym_save_LIBS
-	  CFLAGS=$lt_globsym_save_CFLAGS
-	else
-	  echo "cannot find nm_test_func in $nlist" >&5
-	fi
-      else
-	echo "cannot find nm_test_var in $nlist" >&5
-      fi
-    else
-      echo "cannot run $lt_cv_sys_global_symbol_pipe" >&5
-    fi
-  else
-    echo "$progname: failed program was:" >&5
-    cat conftest.$ac_ext >&5
-  fi
-  rm -rf conftest* conftst*
-
-  # Do not use the global_symbol_pipe unless it works.
-  if test yes = "$pipe_works"; then
-    break
-  else
-    lt_cv_sys_global_symbol_pipe=
-  fi
-done
-
-fi
-
-if test -z "$lt_cv_sys_global_symbol_pipe"; then
-  lt_cv_sys_global_symbol_to_cdecl=
-fi
-if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: failed" >&5
-printf "%s\n" "failed" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: ok" >&5
-printf "%s\n" "ok" >&6; }
-fi
-
-# Response file support.
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  nm_file_list_spec='@'
-elif $NM --help 2>/dev/null | grep '[@]FILE' >/dev/null; then
-  nm_file_list_spec='@'
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for sysroot" >&5
-printf %s "checking for sysroot... " >&6; }
-
-# Check whether --with-sysroot was given.
-if test ${with_sysroot+y}
-then :
-  withval=$with_sysroot;
-else $as_nop
-  with_sysroot=no
-fi
-
-
-lt_sysroot=
-case $with_sysroot in #(
- yes)
-   if test yes = "$GCC"; then
-     lt_sysroot=`$CC --print-sysroot 2>/dev/null`
-   fi
-   ;; #(
- /*)
-   lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"`
-   ;; #(
- no|'')
-   ;; #(
- *)
-   { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $with_sysroot" >&5
-printf "%s\n" "$with_sysroot" >&6; }
-   as_fn_error $? "The sysroot must be an absolute path." "$LINENO" 5
-   ;;
-esac
-
- { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: ${lt_sysroot:-no}" >&5
-printf "%s\n" "${lt_sysroot:-no}" >&6; }
-
-
-
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for a working dd" >&5
-printf %s "checking for a working dd... " >&6; }
-if test ${ac_cv_path_lt_DD+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-: ${lt_DD:=$DD}
-if test -z "$lt_DD"; then
-  ac_path_lt_DD_found=false
-  # Loop through the user's path and test for each of PROGNAME-LIST
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_prog in dd
-   do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      ac_path_lt_DD="$as_dir$ac_prog$ac_exec_ext"
-      as_fn_executable_p "$ac_path_lt_DD" || continue
-if "$ac_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=:
-fi
-      $ac_path_lt_DD_found && break 3
-    done
-  done
-  done
-IFS=$as_save_IFS
-  if test -z "$ac_cv_path_lt_DD"; then
-    :
-  fi
-else
-  ac_cv_path_lt_DD=$lt_DD
-fi
-
-rm -f conftest.i conftest2.i conftest.out
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_path_lt_DD" >&5
-printf "%s\n" "$ac_cv_path_lt_DD" >&6; }
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to truncate binary pipes" >&5
-printf %s "checking how to truncate binary pipes... " >&6; }
-if test ${lt_cv_truncate_bin+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-lt_cv_truncate_bin=
-if "$ac_cv_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1"
-fi
-rm -f conftest.i conftest2.i conftest.out
-test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q"
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_truncate_bin" >&5
-printf "%s\n" "$lt_cv_truncate_bin" >&6; }
-
-
-
-
-
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in $*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-# Check whether --enable-libtool-lock was given.
-if test ${enable_libtool_lock+y}
-then :
-  enableval=$enable_libtool_lock;
-fi
-
-test no = "$enable_libtool_lock" || enable_libtool_lock=yes
-
-# Some flags need to be propagated to the compiler or linker for good
-# libtool support.
-case $host in
-ia64-*-hpux*)
-  # Find out what ABI is being produced by ac_compile, and set mode
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.$ac_objext` in
-      *ELF-32*)
-	HPUX_IA64_MODE=32
-	;;
-      *ELF-64*)
-	HPUX_IA64_MODE=64
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-*-*-irix6*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '#line '$LINENO' "configure"' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    if test yes = "$lt_cv_prog_gnu_ld"; then
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -melf32bsmip"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -melf32bmipn32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -melf64bmip"
-	;;
-      esac
-    else
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -32"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -n32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -64"
-	  ;;
-      esac
-    fi
-  fi
-  rm -rf conftest*
-  ;;
-
-mips64*-*linux*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '#line '$LINENO' "configure"' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    emul=elf
-    case `$FILECMD conftest.$ac_objext` in
-      *32-bit*)
-	emul="${emul}32"
-	;;
-      *64-bit*)
-	emul="${emul}64"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *MSB*)
-	emul="${emul}btsmip"
-	;;
-      *LSB*)
-	emul="${emul}ltsmip"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *N32*)
-	emul="${emul}n32"
-	;;
-    esac
-    LD="${LD-ld} -m $emul"
-  fi
-  rm -rf conftest*
-  ;;
-
-x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \
-s390*-*linux*|s390*-*tpf*|sparc*-*linux*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.  Note that the listed cases only cover the
-  # situations where additional linker options are needed (such as when
-  # doing 32-bit compilation for a host where ld defaults to 64-bit, or
-  # vice versa); the common cases where no linker options are needed do
-  # not appear in the list.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.o` in
-      *32-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_i386_fbsd"
-	    ;;
-	  x86_64-*linux*)
-	    case `$FILECMD conftest.o` in
-	      *x86-64*)
-		LD="${LD-ld} -m elf32_x86_64"
-		;;
-	      *)
-		LD="${LD-ld} -m elf_i386"
-		;;
-	    esac
-	    ;;
-	  powerpc64le-*linux*)
-	    LD="${LD-ld} -m elf32lppclinux"
-	    ;;
-	  powerpc64-*linux*)
-	    LD="${LD-ld} -m elf32ppclinux"
-	    ;;
-	  s390x-*linux*)
-	    LD="${LD-ld} -m elf_s390"
-	    ;;
-	  sparc64-*linux*)
-	    LD="${LD-ld} -m elf32_sparc"
-	    ;;
-	esac
-	;;
-      *64-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_x86_64_fbsd"
-	    ;;
-	  x86_64-*linux*)
-	    LD="${LD-ld} -m elf_x86_64"
-	    ;;
-	  powerpcle-*linux*)
-	    LD="${LD-ld} -m elf64lppc"
-	    ;;
-	  powerpc-*linux*)
-	    LD="${LD-ld} -m elf64ppc"
-	    ;;
-	  s390*-*linux*|s390*-*tpf*)
-	    LD="${LD-ld} -m elf64_s390"
-	    ;;
-	  sparc*-*linux*)
-	    LD="${LD-ld} -m elf64_sparc"
-	    ;;
-	esac
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-
-*-*-sco3.2v5*)
-  # On SCO OpenServer 5, we need -belf to get full-featured binaries.
-  SAVE_CFLAGS=$CFLAGS
-  CFLAGS="$CFLAGS -belf"
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the C compiler needs -belf" >&5
-printf %s "checking whether the C compiler needs -belf... " >&6; }
-if test ${lt_cv_cc_needs_belf+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-     cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_cc_needs_belf=yes
-else $as_nop
-  lt_cv_cc_needs_belf=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-     ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_cc_needs_belf" >&5
-printf "%s\n" "$lt_cv_cc_needs_belf" >&6; }
-  if test yes != "$lt_cv_cc_needs_belf"; then
-    # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf
-    CFLAGS=$SAVE_CFLAGS
-  fi
-  ;;
-*-*solaris*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-    case `$FILECMD conftest.o` in
-    *64-bit*)
-      case $lt_cv_prog_gnu_ld in
-      yes*)
-        case $host in
-        i?86-*-solaris*|x86_64-*-solaris*)
-          LD="${LD-ld} -m elf_x86_64"
-          ;;
-        sparc*-*-solaris*)
-          LD="${LD-ld} -m elf64_sparc"
-          ;;
-        esac
-        # GNU ld 2.21 introduced _sol2 emulations.  Use them if available.
-        if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then
-          LD=${LD-ld}_sol2
-        fi
-        ;;
-      *)
-	if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then
-	  LD="${LD-ld} -64"
-	fi
-	;;
-      esac
-      ;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-esac
-
-need_locks=$enable_libtool_lock
-
-if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}mt", so it can be a program name with args.
-set dummy ${ac_tool_prefix}mt; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_MANIFEST_TOOL+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$MANIFEST_TOOL"; then
-  ac_cv_prog_MANIFEST_TOOL="$MANIFEST_TOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_MANIFEST_TOOL="${ac_tool_prefix}mt"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-MANIFEST_TOOL=$ac_cv_prog_MANIFEST_TOOL
-if test -n "$MANIFEST_TOOL"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $MANIFEST_TOOL" >&5
-printf "%s\n" "$MANIFEST_TOOL" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_MANIFEST_TOOL"; then
-  ac_ct_MANIFEST_TOOL=$MANIFEST_TOOL
-  # Extract the first word of "mt", so it can be a program name with args.
-set dummy mt; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_MANIFEST_TOOL+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_MANIFEST_TOOL"; then
-  ac_cv_prog_ac_ct_MANIFEST_TOOL="$ac_ct_MANIFEST_TOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_MANIFEST_TOOL="mt"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_MANIFEST_TOOL=$ac_cv_prog_ac_ct_MANIFEST_TOOL
-if test -n "$ac_ct_MANIFEST_TOOL"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_MANIFEST_TOOL" >&5
-printf "%s\n" "$ac_ct_MANIFEST_TOOL" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_MANIFEST_TOOL" = x; then
-    MANIFEST_TOOL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    MANIFEST_TOOL=$ac_ct_MANIFEST_TOOL
-  fi
-else
-  MANIFEST_TOOL="$ac_cv_prog_MANIFEST_TOOL"
-fi
-
-test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $MANIFEST_TOOL is a manifest tool" >&5
-printf %s "checking if $MANIFEST_TOOL is a manifest tool... " >&6; }
-if test ${lt_cv_path_mainfest_tool+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_path_mainfest_tool=no
-  echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&5
-  $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out
-  cat conftest.err >&5
-  if $GREP 'Manifest Tool' conftest.out > /dev/null; then
-    lt_cv_path_mainfest_tool=yes
-  fi
-  rm -f conftest*
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_path_mainfest_tool" >&5
-printf "%s\n" "$lt_cv_path_mainfest_tool" >&6; }
-if test yes != "$lt_cv_path_mainfest_tool"; then
-  MANIFEST_TOOL=:
-fi
-
-
-
-
-
-
-  case $host_os in
-    rhapsody* | darwin*)
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}dsymutil", so it can be a program name with args.
-set dummy ${ac_tool_prefix}dsymutil; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_DSYMUTIL+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$DSYMUTIL"; then
-  ac_cv_prog_DSYMUTIL="$DSYMUTIL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_DSYMUTIL="${ac_tool_prefix}dsymutil"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-DSYMUTIL=$ac_cv_prog_DSYMUTIL
-if test -n "$DSYMUTIL"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $DSYMUTIL" >&5
-printf "%s\n" "$DSYMUTIL" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_DSYMUTIL"; then
-  ac_ct_DSYMUTIL=$DSYMUTIL
-  # Extract the first word of "dsymutil", so it can be a program name with args.
-set dummy dsymutil; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_DSYMUTIL+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_DSYMUTIL"; then
-  ac_cv_prog_ac_ct_DSYMUTIL="$ac_ct_DSYMUTIL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_DSYMUTIL="dsymutil"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_DSYMUTIL=$ac_cv_prog_ac_ct_DSYMUTIL
-if test -n "$ac_ct_DSYMUTIL"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_DSYMUTIL" >&5
-printf "%s\n" "$ac_ct_DSYMUTIL" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_DSYMUTIL" = x; then
-    DSYMUTIL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    DSYMUTIL=$ac_ct_DSYMUTIL
-  fi
-else
-  DSYMUTIL="$ac_cv_prog_DSYMUTIL"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}nmedit", so it can be a program name with args.
-set dummy ${ac_tool_prefix}nmedit; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_NMEDIT+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$NMEDIT"; then
-  ac_cv_prog_NMEDIT="$NMEDIT" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_NMEDIT="${ac_tool_prefix}nmedit"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-NMEDIT=$ac_cv_prog_NMEDIT
-if test -n "$NMEDIT"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $NMEDIT" >&5
-printf "%s\n" "$NMEDIT" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_NMEDIT"; then
-  ac_ct_NMEDIT=$NMEDIT
-  # Extract the first word of "nmedit", so it can be a program name with args.
-set dummy nmedit; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_NMEDIT+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_NMEDIT"; then
-  ac_cv_prog_ac_ct_NMEDIT="$ac_ct_NMEDIT" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_NMEDIT="nmedit"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_NMEDIT=$ac_cv_prog_ac_ct_NMEDIT
-if test -n "$ac_ct_NMEDIT"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_NMEDIT" >&5
-printf "%s\n" "$ac_ct_NMEDIT" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_NMEDIT" = x; then
-    NMEDIT=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    NMEDIT=$ac_ct_NMEDIT
-  fi
-else
-  NMEDIT="$ac_cv_prog_NMEDIT"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}lipo", so it can be a program name with args.
-set dummy ${ac_tool_prefix}lipo; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_LIPO+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$LIPO"; then
-  ac_cv_prog_LIPO="$LIPO" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_LIPO="${ac_tool_prefix}lipo"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-LIPO=$ac_cv_prog_LIPO
-if test -n "$LIPO"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $LIPO" >&5
-printf "%s\n" "$LIPO" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_LIPO"; then
-  ac_ct_LIPO=$LIPO
-  # Extract the first word of "lipo", so it can be a program name with args.
-set dummy lipo; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_LIPO+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_LIPO"; then
-  ac_cv_prog_ac_ct_LIPO="$ac_ct_LIPO" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_LIPO="lipo"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_LIPO=$ac_cv_prog_ac_ct_LIPO
-if test -n "$ac_ct_LIPO"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_LIPO" >&5
-printf "%s\n" "$ac_ct_LIPO" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_LIPO" = x; then
-    LIPO=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    LIPO=$ac_ct_LIPO
-  fi
-else
-  LIPO="$ac_cv_prog_LIPO"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}otool", so it can be a program name with args.
-set dummy ${ac_tool_prefix}otool; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$OTOOL"; then
-  ac_cv_prog_OTOOL="$OTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OTOOL="${ac_tool_prefix}otool"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-OTOOL=$ac_cv_prog_OTOOL
-if test -n "$OTOOL"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $OTOOL" >&5
-printf "%s\n" "$OTOOL" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OTOOL"; then
-  ac_ct_OTOOL=$OTOOL
-  # Extract the first word of "otool", so it can be a program name with args.
-set dummy otool; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OTOOL+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_OTOOL"; then
-  ac_cv_prog_ac_ct_OTOOL="$ac_ct_OTOOL" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OTOOL="otool"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_OTOOL=$ac_cv_prog_ac_ct_OTOOL
-if test -n "$ac_ct_OTOOL"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL" >&5
-printf "%s\n" "$ac_ct_OTOOL" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_OTOOL" = x; then
-    OTOOL=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OTOOL=$ac_ct_OTOOL
-  fi
-else
-  OTOOL="$ac_cv_prog_OTOOL"
-fi
-
-    if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}otool64", so it can be a program name with args.
-set dummy ${ac_tool_prefix}otool64; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_OTOOL64+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$OTOOL64"; then
-  ac_cv_prog_OTOOL64="$OTOOL64" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_OTOOL64="${ac_tool_prefix}otool64"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-OTOOL64=$ac_cv_prog_OTOOL64
-if test -n "$OTOOL64"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $OTOOL64" >&5
-printf "%s\n" "$OTOOL64" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_prog_OTOOL64"; then
-  ac_ct_OTOOL64=$OTOOL64
-  # Extract the first word of "otool64", so it can be a program name with args.
-set dummy otool64; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_prog_ac_ct_OTOOL64+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if test -n "$ac_ct_OTOOL64"; then
-  ac_cv_prog_ac_ct_OTOOL64="$ac_ct_OTOOL64" # Let the user override the test.
-else
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_prog_ac_ct_OTOOL64="otool64"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-fi
-fi
-ac_ct_OTOOL64=$ac_cv_prog_ac_ct_OTOOL64
-if test -n "$ac_ct_OTOOL64"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_ct_OTOOL64" >&5
-printf "%s\n" "$ac_ct_OTOOL64" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_ct_OTOOL64" = x; then
-    OTOOL64=":"
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    OTOOL64=$ac_ct_OTOOL64
-  fi
-else
-  OTOOL64="$ac_cv_prog_OTOOL64"
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for -single_module linker flag" >&5
-printf %s "checking for -single_module linker flag... " >&6; }
-if test ${lt_cv_apple_cc_single_mod+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_apple_cc_single_mod=no
-      if test -z "$LT_MULTI_MODULE"; then
-	# By default we will add the -single_module flag. You can override
-	# by either setting the environment variable LT_MULTI_MODULE
-	# non-empty at configure time, or by adding -multi_module to the
-	# link flags.
-	rm -rf libconftest.dylib*
-	echo "int foo(void){return 1;}" > conftest.c
-	echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
--dynamiclib -Wl,-single_module conftest.c" >&5
-	$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
-	  -dynamiclib -Wl,-single_module conftest.c 2>conftest.err
-        _lt_result=$?
-	# If there is a non-empty error log, and "single_module"
-	# appears in it, assume the flag caused a linker warning
-        if test -s conftest.err && $GREP single_module conftest.err; then
-	  cat conftest.err >&5
-	# Otherwise, if the output was created with a 0 exit code from
-	# the compiler, it worked.
-	elif test -f libconftest.dylib && test 0 = "$_lt_result"; then
-	  lt_cv_apple_cc_single_mod=yes
-	else
-	  cat conftest.err >&5
-	fi
-	rm -rf libconftest.dylib*
-	rm -f conftest.*
-      fi
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_apple_cc_single_mod" >&5
-printf "%s\n" "$lt_cv_apple_cc_single_mod" >&6; }
-
-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for -exported_symbols_list linker flag" >&5
-printf %s "checking for -exported_symbols_list linker flag... " >&6; }
-if test ${lt_cv_ld_exported_symbols_list+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_ld_exported_symbols_list=no
-      save_LDFLAGS=$LDFLAGS
-      echo "_main" > conftest.sym
-      LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym"
-      cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_ld_exported_symbols_list=yes
-else $as_nop
-  lt_cv_ld_exported_symbols_list=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-	LDFLAGS=$save_LDFLAGS
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_exported_symbols_list" >&5
-printf "%s\n" "$lt_cv_ld_exported_symbols_list" >&6; }
-
-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for -force_load linker flag" >&5
-printf %s "checking for -force_load linker flag... " >&6; }
-if test ${lt_cv_ld_force_load+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_ld_force_load=no
-      cat > conftest.c << _LT_EOF
-int forced_loaded() { return 2;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&5
-      $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&5
-      echo "$AR $AR_FLAGS libconftest.a conftest.o" >&5
-      $AR $AR_FLAGS libconftest.a conftest.o 2>&5
-      echo "$RANLIB libconftest.a" >&5
-      $RANLIB libconftest.a 2>&5
-      cat > conftest.c << _LT_EOF
-int main() { return 0;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&5
-      $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err
-      _lt_result=$?
-      if test -s conftest.err && $GREP force_load conftest.err; then
-	cat conftest.err >&5
-      elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then
-	lt_cv_ld_force_load=yes
-      else
-	cat conftest.err >&5
-      fi
-        rm -f conftest.err libconftest.a conftest conftest.c
-        rm -rf conftest.dSYM
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_ld_force_load" >&5
-printf "%s\n" "$lt_cv_ld_force_load" >&6; }
-    case $host_os in
-    rhapsody* | darwin1.[012])
-      _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;;
-    darwin1.*)
-      _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-    darwin*)
-      case $MACOSX_DEPLOYMENT_TARGET,$host in
-        10.[012],*|,*powerpc*-darwin[5-8]*)
-          _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-        *)
-          _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup' ;;
-      esac
-    ;;
-  esac
-    if test yes = "$lt_cv_apple_cc_single_mod"; then
-      _lt_dar_single_mod='$single_module'
-    fi
-    if test yes = "$lt_cv_ld_exported_symbols_list"; then
-      _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym'
-    else
-      _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib'
-    fi
-    if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then
-      _lt_dsymutil='~$DSYMUTIL $lib || :'
-    else
-      _lt_dsymutil=
-    fi
-    ;;
-  esac
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x$2 in
-    x)
-        ;;
-    *:)
-        eval $1=\"`$ECHO $2 | $SED 's/:/ /g'` \$$1\"
-        ;;
-    x:*)
-        eval $1=\"\$$1 `$ECHO $2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval $1=\"\$$1\ `$ECHO $2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval $1=\"`$ECHO $2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \$$1\"
-        ;;
-    *)
-        eval $1=\"`$ECHO $2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-ac_header= ac_cache=
-for ac_item in $ac_header_c_list
-do
-  if test $ac_cache; then
-    ac_fn_c_check_header_compile "$LINENO" $ac_header ac_cv_header_$ac_cache "$ac_includes_default"
-    if eval test \"x\$ac_cv_header_$ac_cache\" = xyes; then
-      printf "%s\n" "#define $ac_item 1" >> confdefs.h
-    fi
-    ac_header= ac_cache=
-  elif test $ac_header; then
-    ac_cache=$ac_item
-  else
-    ac_header=$ac_item
-  fi
-done
-
-
-
-
-
-
-
-
-if test $ac_cv_header_stdlib_h = yes && test $ac_cv_header_string_h = yes
-then :
-
-printf "%s\n" "#define STDC_HEADERS 1" >>confdefs.h
-
-fi
-ac_fn_c_check_header_compile "$LINENO" "dlfcn.h" "ac_cv_header_dlfcn_h" "$ac_includes_default
-"
-if test "x$ac_cv_header_dlfcn_h" = xyes
-then :
-  printf "%s\n" "#define HAVE_DLFCN_H 1" >>confdefs.h
-
-fi
-
-
-
-
-
-# Set options
-
-
-
-        enable_dlopen=no
-
-
-  enable_win32_dll=no
-
-
-            # Check whether --enable-shared was given.
-if test ${enable_shared+y}
-then :
-  enableval=$enable_shared; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_shared=yes ;;
-    no) enable_shared=no ;;
-    *)
-      enable_shared=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_shared=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else $as_nop
-  enable_shared=yes
-fi
-
-
-
-
-
-
-
-
-
-  # Check whether --enable-static was given.
-if test ${enable_static+y}
-then :
-  enableval=$enable_static; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_static=yes ;;
-    no) enable_static=no ;;
-    *)
-     enable_static=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_static=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else $as_nop
-  enable_static=yes
-fi
-
-
-
-
-
-
-
-
-
-
-# Check whether --with-pic was given.
-if test ${with_pic+y}
-then :
-  withval=$with_pic; lt_p=${PACKAGE-default}
-    case $withval in
-    yes|no) pic_mode=$withval ;;
-    *)
-      pic_mode=default
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for lt_pkg in $withval; do
-	IFS=$lt_save_ifs
-	if test "X$lt_pkg" = "X$lt_p"; then
-	  pic_mode=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else $as_nop
-  pic_mode=default
-fi
-
-
-
-
-
-
-
-
-  # Check whether --enable-fast-install was given.
-if test ${enable_fast_install+y}
-then :
-  enableval=$enable_fast_install; p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_fast_install=yes ;;
-    no) enable_fast_install=no ;;
-    *)
-      enable_fast_install=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_fast_install=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac
-else $as_nop
-  enable_fast_install=yes
-fi
-
-
-
-
-
-
-
-
-  shared_archive_member_spec=
-case $host,$enable_shared in
-power*-*-aix[5-9]*,yes)
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking which variant of shared library versioning to provide" >&5
-printf %s "checking which variant of shared library versioning to provide... " >&6; }
-
-# Check whether --with-aix-soname was given.
-if test ${with_aix_soname+y}
-then :
-  withval=$with_aix_soname; case $withval in
-    aix|svr4|both)
-      ;;
-    *)
-      as_fn_error $? "Unknown argument to --with-aix-soname" "$LINENO" 5
-      ;;
-    esac
-    lt_cv_with_aix_soname=$with_aix_soname
-else $as_nop
-  if test ${lt_cv_with_aix_soname+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_with_aix_soname=aix
-fi
-
-    with_aix_soname=$lt_cv_with_aix_soname
-fi
-
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $with_aix_soname" >&5
-printf "%s\n" "$with_aix_soname" >&6; }
-  if test aix != "$with_aix_soname"; then
-    # For the AIX way of multilib, we name the shared archive member
-    # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o',
-    # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File.
-    # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag,
-    # the AIX toolchain works better with OBJECT_MODE set (default 32).
-    if test 64 = "${OBJECT_MODE-32}"; then
-      shared_archive_member_spec=shr_64
-    else
-      shared_archive_member_spec=shr
-    fi
-  fi
-  ;;
-*)
-  with_aix_soname=aix
-  ;;
-esac
-
-
-
-
-
-
-
-
-
-
-# This can be used to rebuild libtool when needed
-LIBTOOL_DEPS=$ltmain
-
-# Always use our own libtool.
-LIBTOOL='$(SHELL) $(top_builddir)/libtool'
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-test -z "$LN_S" && LN_S="ln -s"
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-if test -n "${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for objdir" >&5
-printf %s "checking for objdir... " >&6; }
-if test ${lt_cv_objdir+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  rm -f .libs 2>/dev/null
-mkdir .libs 2>/dev/null
-if test -d .libs; then
-  lt_cv_objdir=.libs
-else
-  # MS-DOS does not allow filenames that begin with a dot.
-  lt_cv_objdir=_libs
-fi
-rmdir .libs 2>/dev/null
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_objdir" >&5
-printf "%s\n" "$lt_cv_objdir" >&6; }
-objdir=$lt_cv_objdir
-
-
-
-
-
-printf "%s\n" "#define LT_OBJDIR \"$lt_cv_objdir/\"" >>confdefs.h
-
-
-
-
-case $host_os in
-aix3*)
-  # AIX sometimes has problems with the GCC collect2 program.  For some
-  # reason, if we set the COLLECT_NAMES environment variable, the problems
-  # vanish in a puff of smoke.
-  if test set != "${COLLECT_NAMES+set}"; then
-    COLLECT_NAMES=
-    export COLLECT_NAMES
-  fi
-  ;;
-esac
-
-# Global variables:
-ofile=libtool
-can_build_shared=yes
-
-# All known linkers require a '.a' archive for static linking (except MSVC and
-# ICC, which need '.lib').
-libext=a
-
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-old_CC=$CC
-old_CFLAGS=$CFLAGS
-
-# Set sane defaults for various variables
-test -z "$CC" && CC=cc
-test -z "$LTCC" && LTCC=$CC
-test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS
-test -z "$LD" && LD=ld
-test -z "$ac_objext" && ac_objext=o
-
-func_cc_basename $compiler
-cc_basename=$func_cc_basename_result
-
-
-# Only perform the check for file, if the check method requires it
-test -z "$MAGIC_CMD" && MAGIC_CMD=file
-case $deplibs_check_method in
-file_magic*)
-  if test "$file_magic_cmd" = '$MAGIC_CMD'; then
-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for ${ac_tool_prefix}file" >&5
-printf %s "checking for ${ac_tool_prefix}file... " >&6; }
-if test ${lt_cv_path_MAGIC_CMD+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  case $MAGIC_CMD in
-[\\/*] |  ?:[\\/]*)
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  ac_dummy="/usr/bin$PATH_SEPARATOR$PATH"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/${ac_tool_prefix}file"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"${ac_tool_prefix}file"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac
-fi
-
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5
-printf "%s\n" "$MAGIC_CMD" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-
-
-
-if test -z "$lt_cv_path_MAGIC_CMD"; then
-  if test -n "$ac_tool_prefix"; then
-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for file" >&5
-printf %s "checking for file... " >&6; }
-if test ${lt_cv_path_MAGIC_CMD+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  case $MAGIC_CMD in
-[\\/*] |  ?:[\\/]*)
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  ac_dummy="/usr/bin$PATH_SEPARATOR$PATH"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/file"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"file"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac
-fi
-
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $MAGIC_CMD" >&5
-printf "%s\n" "$MAGIC_CMD" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-  else
-    MAGIC_CMD=:
-  fi
-fi
-
-  fi
-  ;;
-esac
-
-# Use C for the default configuration in the libtool script
-
-lt_save_CC=$CC
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-
-# Source file extension for C test sources.
-ac_ext=c
-
-# Object file extension for compiled C test sources.
-objext=o
-objext=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code="int some_variable = 0;"
-
-# Code to be used in simple link tests
-lt_simple_link_test_code='int main(){return(0);}'
-
-
-
-
-
-
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-
-# Save the default compiler, since it gets overwritten when the other
-# tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP.
-compiler_DEFAULT=$CC
-
-# save warnings/boilerplate of simple test code
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_compile_test_code" >conftest.$ac_ext
-eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_compiler_boilerplate=`cat conftest.err`
-$RM conftest*
-
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_link_test_code" >conftest.$ac_ext
-eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_linker_boilerplate=`cat conftest.err`
-$RM -r conftest*
-
-
-## CAVEAT EMPTOR:
-## There is no encapsulation within the following macros, do not change
-## the running order or otherwise move them around unless you know exactly
-## what you are doing...
-if test -n "$compiler"; then
-
-lt_prog_compiler_no_builtin_flag=
-
-if test yes = "$GCC"; then
-  case $cc_basename in
-  nvcc*)
-    lt_prog_compiler_no_builtin_flag=' -Xcompiler -fno-builtin' ;;
-  *)
-    lt_prog_compiler_no_builtin_flag=' -fno-builtin' ;;
-  esac
-
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -fno-rtti -fno-exceptions" >&5
-printf %s "checking if $compiler supports -fno-rtti -fno-exceptions... " >&6; }
-if test ${lt_cv_prog_compiler_rtti_exceptions+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_prog_compiler_rtti_exceptions=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="-fno-rtti -fno-exceptions"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_rtti_exceptions=yes
-     fi
-   fi
-   $RM conftest*
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_rtti_exceptions" >&5
-printf "%s\n" "$lt_cv_prog_compiler_rtti_exceptions" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_rtti_exceptions"; then
-    lt_prog_compiler_no_builtin_flag="$lt_prog_compiler_no_builtin_flag -fno-rtti -fno-exceptions"
-else
-    :
-fi
-
-fi
-
-
-
-
-
-
-  lt_prog_compiler_wl=
-lt_prog_compiler_pic=
-lt_prog_compiler_static=
-
-
-  if test yes = "$GCC"; then
-    lt_prog_compiler_wl='-Wl,'
-    lt_prog_compiler_static='-static'
-
-    case $host_os in
-      aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            lt_prog_compiler_pic='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            lt_prog_compiler_pic='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-
-    mingw* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      ;;
-
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      lt_prog_compiler_static=
-      ;;
-
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='-fPIC'
-	;;
-      esac
-      ;;
-
-    interix[3-9]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-
-    msdosdjgpp*)
-      # Just because we use GCC doesn't mean we suddenly get shared libraries
-      # on systems that don't support them.
-      lt_prog_compiler_can_build_shared=no
-      enable_shared=no
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic=-Kconform_pic
-      fi
-      ;;
-
-    *)
-      lt_prog_compiler_pic='-fPIC'
-      ;;
-    esac
-
-    case $cc_basename in
-    nvcc*) # Cuda Compiler Driver 2.2
-      lt_prog_compiler_wl='-Xlinker '
-      if test -n "$lt_prog_compiler_pic"; then
-        lt_prog_compiler_pic="-Xcompiler $lt_prog_compiler_pic"
-      fi
-      ;;
-    esac
-  else
-    # PORTME Check for flag to pass linker flags through the system compiler.
-    case $host_os in
-    aix*)
-      lt_prog_compiler_wl='-Wl,'
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	lt_prog_compiler_static='-Bstatic'
-      else
-	lt_prog_compiler_static='-bnso -bI:/lib/syscalls.exp'
-      fi
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      lt_prog_compiler_pic='-fno-common'
-      case $cc_basename in
-      nagfor*)
-        # NAG Fortran compiler
-        lt_prog_compiler_wl='-Wl,-Wl,,'
-        lt_prog_compiler_pic='-PIC'
-        lt_prog_compiler_static='-Bstatic'
-        ;;
-      esac
-      ;;
-
-    mingw* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      lt_prog_compiler_pic='-DDLL_EXPORT'
-      case $host_os in
-      os2*)
-	lt_prog_compiler_static='$wl-static'
-	;;
-      esac
-      ;;
-
-    hpux9* | hpux10* | hpux11*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
-      # not for PA HP-UX.
-      case $host_cpu in
-      hppa*64*|ia64*)
-	# +Z the default
-	;;
-      *)
-	lt_prog_compiler_pic='+Z'
-	;;
-      esac
-      # Is there a better lt_prog_compiler_static that works with the bundled CC?
-      lt_prog_compiler_static='$wl-a ${wl}archive'
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      lt_prog_compiler_wl='-Wl,'
-      # PIC (with -KPIC) is the default.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-      case $cc_basename in
-      # old Intel for x86_64, which still supported -KPIC.
-      ecc*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-KPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # icc used to be incompatible with GCC.
-      # ICC 10 doesn't accept -KPIC any more.
-      icc* | ifort*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-        ;;
-      # Lahey Fortran 8.1.
-      lf95*)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='--shared'
-	lt_prog_compiler_static='--static'
-	;;
-      nagfor*)
-	# NAG Fortran compiler
-	lt_prog_compiler_wl='-Wl,-Wl,,'
-	lt_prog_compiler_pic='-PIC'
-	lt_prog_compiler_static='-Bstatic'
-	;;
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fPIC'
-	lt_prog_compiler_static='-static'
-	;;
-      pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
-        # Portland Group compilers (*not* the Pentium gcc compiler,
-	# which looks to be a dead project)
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-fpic'
-	lt_prog_compiler_static='-Bstatic'
-        ;;
-      ccc*)
-        lt_prog_compiler_wl='-Wl,'
-        # All Alpha code is PIC.
-        lt_prog_compiler_static='-non_shared'
-        ;;
-      xl* | bgxl* | bgf* | mpixl*)
-	# IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
-	lt_prog_compiler_wl='-Wl,'
-	lt_prog_compiler_pic='-qpic'
-	lt_prog_compiler_static='-qstaticlink'
-	;;
-      *)
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [1-7].* | *Sun*Fortran*\ 8.[0-3]*)
-	  # Sun Fortran 8.3 passes all unrecognized flags to the linker
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl=''
-	  ;;
-	*Sun\ F* | *Sun*Fortran*)
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Qoption ld '
-	  ;;
-	*Sun\ C*)
-	  # Sun C 5.9
-	  lt_prog_compiler_pic='-KPIC'
-	  lt_prog_compiler_static='-Bstatic'
-	  lt_prog_compiler_wl='-Wl,'
-	  ;;
-        *Intel*\ [CF]*Compiler*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fPIC'
-	  lt_prog_compiler_static='-static'
-	  ;;
-	*Portland\ Group*)
-	  lt_prog_compiler_wl='-Wl,'
-	  lt_prog_compiler_pic='-fpic'
-	  lt_prog_compiler_static='-Bstatic'
-	  ;;
-	esac
-	;;
-      esac
-      ;;
-
-    newsos6)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      lt_prog_compiler_pic='-fPIC -shared'
-      ;;
-
-    osf3* | osf4* | osf5*)
-      lt_prog_compiler_wl='-Wl,'
-      # All OSF/1 code is PIC.
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    rdos*)
-      lt_prog_compiler_static='-non_shared'
-      ;;
-
-    solaris*)
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      case $cc_basename in
-      f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
-	lt_prog_compiler_wl='-Qoption ld ';;
-      *)
-	lt_prog_compiler_wl='-Wl,';;
-      esac
-      ;;
-
-    sunos4*)
-      lt_prog_compiler_wl='-Qoption ld '
-      lt_prog_compiler_pic='-PIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4 | sysv4.2uw2* | sysv4.3*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	lt_prog_compiler_pic='-Kconform_pic'
-	lt_prog_compiler_static='-Bstatic'
-      fi
-      ;;
-
-    sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_pic='-KPIC'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    unicos*)
-      lt_prog_compiler_wl='-Wl,'
-      lt_prog_compiler_can_build_shared=no
-      ;;
-
-    uts4*)
-      lt_prog_compiler_pic='-pic'
-      lt_prog_compiler_static='-Bstatic'
-      ;;
-
-    *)
-      lt_prog_compiler_can_build_shared=no
-      ;;
-    esac
-  fi
-
-case $host_os in
-  # For platforms that do not support PIC, -DPIC is meaningless:
-  *djgpp*)
-    lt_prog_compiler_pic=
-    ;;
-  *)
-    lt_prog_compiler_pic="$lt_prog_compiler_pic -DPIC"
-    ;;
-esac
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $compiler option to produce PIC" >&5
-printf %s "checking for $compiler option to produce PIC... " >&6; }
-if test ${lt_cv_prog_compiler_pic+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_prog_compiler_pic=$lt_prog_compiler_pic
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic" >&5
-printf "%s\n" "$lt_cv_prog_compiler_pic" >&6; }
-lt_prog_compiler_pic=$lt_cv_prog_compiler_pic
-
-#
-# Check to make sure the PIC flag actually works.
-#
-if test -n "$lt_prog_compiler_pic"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $compiler PIC flag $lt_prog_compiler_pic works" >&5
-printf %s "checking if $compiler PIC flag $lt_prog_compiler_pic works... " >&6; }
-if test ${lt_cv_prog_compiler_pic_works+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_prog_compiler_pic_works=no
-   ac_outfile=conftest.$ac_objext
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$lt_prog_compiler_pic -DPIC"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_pic_works=yes
-     fi
-   fi
-   $RM conftest*
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_pic_works" >&5
-printf "%s\n" "$lt_cv_prog_compiler_pic_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_pic_works"; then
-    case $lt_prog_compiler_pic in
-     "" | " "*) ;;
-     *) lt_prog_compiler_pic=" $lt_prog_compiler_pic" ;;
-     esac
-else
-    lt_prog_compiler_pic=
-     lt_prog_compiler_can_build_shared=no
-fi
-
-fi
-
-
-
-
-
-
-
-
-
-
-
-#
-# Check to make sure the static flag actually works.
-#
-wl=$lt_prog_compiler_wl eval lt_tmp_static_flag=\"$lt_prog_compiler_static\"
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $compiler static flag $lt_tmp_static_flag works" >&5
-printf %s "checking if $compiler static flag $lt_tmp_static_flag works... " >&6; }
-if test ${lt_cv_prog_compiler_static_works+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_prog_compiler_static_works=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $lt_tmp_static_flag"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler_static_works=yes
-       fi
-     else
-       lt_cv_prog_compiler_static_works=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_static_works" >&5
-printf "%s\n" "$lt_cv_prog_compiler_static_works" >&6; }
-
-if test yes = "$lt_cv_prog_compiler_static_works"; then
-    :
-else
-    lt_prog_compiler_static=
-fi
-
-
-
-
-
-
-
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5
-printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; }
-if test ${lt_cv_prog_compiler_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_prog_compiler_c_o=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_c_o=yes
-     fi
-   fi
-   chmod u+w . 2>&5
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5
-printf "%s\n" "$lt_cv_prog_compiler_c_o" >&6; }
-
-
-
-
-
-
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $compiler supports -c -o file.$ac_objext" >&5
-printf %s "checking if $compiler supports -c -o file.$ac_objext... " >&6; }
-if test ${lt_cv_prog_compiler_c_o+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_prog_compiler_c_o=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [^ ]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&5)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&5
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       lt_cv_prog_compiler_c_o=yes
-     fi
-   fi
-   chmod u+w . 2>&5
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler_c_o" >&5
-printf "%s\n" "$lt_cv_prog_compiler_c_o" >&6; }
-
-
-
-
-hard_links=nottested
-if test no = "$lt_cv_prog_compiler_c_o" && test no != "$need_locks"; then
-  # do not overwrite the value of need_locks provided by the user
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if we can lock with hard links" >&5
-printf %s "checking if we can lock with hard links... " >&6; }
-  hard_links=yes
-  $RM conftest*
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  touch conftest.a
-  ln conftest.a conftest.b 2>&5 || hard_links=no
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $hard_links" >&5
-printf "%s\n" "$hard_links" >&6; }
-  if test no = "$hard_links"; then
-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&5
-printf "%s\n" "$as_me: WARNING: '$CC' does not support '-c -o', so 'make -j' may be unsafe" >&2;}
-    need_locks=warn
-  fi
-else
-  need_locks=no
-fi
-
-
-
-
-
-
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the $compiler linker ($LD) supports shared libraries" >&5
-printf %s "checking whether the $compiler linker ($LD) supports shared libraries... " >&6; }
-
-  runpath_var=
-  allow_undefined_flag=
-  always_export_symbols=no
-  archive_cmds=
-  archive_expsym_cmds=
-  compiler_needs_object=no
-  enable_shared_with_static_runtimes=no
-  export_dynamic_flag_spec=
-  export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
-  hardcode_automatic=no
-  hardcode_direct=no
-  hardcode_direct_absolute=no
-  hardcode_libdir_flag_spec=
-  hardcode_libdir_separator=
-  hardcode_minus_L=no
-  hardcode_shlibpath_var=unsupported
-  inherit_rpath=no
-  link_all_deplibs=unknown
-  module_cmds=
-  module_expsym_cmds=
-  old_archive_from_new_cmds=
-  old_archive_from_expsyms_cmds=
-  thread_safe_flag_spec=
-  whole_archive_flag_spec=
-  # include_expsyms should be a list of space-separated symbols to be *always*
-  # included in the symbol list
-  include_expsyms=
-  # exclude_expsyms can be an extended regexp of symbols to exclude
-  # it will be wrapped by ' (' and ')$', so one must not match beginning or
-  # end of line.  Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc',
-  # as well as any symbol that contains 'd'.
-  exclude_expsyms='_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*'
-  # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out
-  # platforms (ab)use it in PIC code, but their linkers get confused if
-  # the symbol is explicitly referenced.  Since portable code cannot
-  # rely on this symbol name, it's probably fine to never include it in
-  # preloaded symbol tables.
-  # Exclude shared library initialization/finalization symbols.
-  extract_expsyms_cmds=
-
-  case $host_os in
-  cygwin* | mingw* | pw32* | cegcc*)
-    # FIXME: the MSVC++ and ICC port hasn't been tested in a loooong time
-    # When not using gcc, we currently assume that we are using
-    # Microsoft Visual C++ or Intel C++ Compiler.
-    if test yes != "$GCC"; then
-      with_gnu_ld=no
-    fi
-    ;;
-  interix*)
-    # we just hope/assume this is gcc and not c89 (= MSVC++ or ICC)
-    with_gnu_ld=yes
-    ;;
-  openbsd* | bitrig*)
-    with_gnu_ld=no
-    ;;
-  esac
-
-  ld_shlibs=yes
-
-  # On some targets, GNU ld is compatible enough with the native linker
-  # that we're better off using the native interface for both.
-  lt_use_gnu_ld_interface=no
-  if test yes = "$with_gnu_ld"; then
-    case $host_os in
-      aix*)
-	# The AIX port of GNU ld has always aspired to compatibility
-	# with the native linker.  However, as the warning in the GNU ld
-	# block says, versions before 2.19.5* couldn't really create working
-	# shared libraries, regardless of the interface used.
-	case `$LD -v 2>&1` in
-	  *\ \(GNU\ Binutils\)\ 2.19.5*) ;;
-	  *\ \(GNU\ Binutils\)\ 2.[2-9]*) ;;
-	  *\ \(GNU\ Binutils\)\ [3-9]*) ;;
-	  *)
-	    lt_use_gnu_ld_interface=yes
-	    ;;
-	esac
-	;;
-      *)
-	lt_use_gnu_ld_interface=yes
-	;;
-    esac
-  fi
-
-  if test yes = "$lt_use_gnu_ld_interface"; then
-    # If archive_cmds runs LD, not CC, wlarc should be empty
-    wlarc='$wl'
-
-    # Set some defaults for GNU ld with shared library support. These
-    # are reset later if shared libraries are not supported. Putting them
-    # here allows them to be overridden if necessary.
-    runpath_var=LD_RUN_PATH
-    hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-    export_dynamic_flag_spec='$wl--export-dynamic'
-    # ancient GNU ld didn't support --whole-archive et. al.
-    if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then
-      whole_archive_flag_spec=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
-    else
-      whole_archive_flag_spec=
-    fi
-    supports_anon_versioning=no
-    case `$LD -v | $SED -e 's/([^)]\+)\s\+//' 2>&1` in
-      *GNU\ gold*) supports_anon_versioning=yes ;;
-      *\ [01].* | *\ 2.[0-9].* | *\ 2.10.*) ;; # catch versions < 2.11
-      *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ...
-      *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ...
-      *\ 2.11.*) ;; # other 2.11 versions
-      *) supports_anon_versioning=yes ;;
-    esac
-
-    # See if GNU ld supports shared libraries.
-    case $host_os in
-    aix[3-9]*)
-      # On AIX/PPC, the GNU linker is very broken
-      if test ia64 != "$host_cpu"; then
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: the GNU linker, at least up to release 2.19, is reported
-*** to be unable to reliably create shared libraries on AIX.
-*** Therefore, libtool is disabling shared libraries support.  If you
-*** really care for shared libraries, you may want to install binutils
-*** 2.20 or above, or modify your PATH so that a non-GNU linker is found.
-*** You will then need to restart the configuration process.
-
-_LT_EOF
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            archive_expsym_cmds=''
-        ;;
-      m68k)
-            archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            hardcode_libdir_flag_spec='-L$libdir'
-            hardcode_minus_L=yes
-        ;;
-      esac
-      ;;
-
-    beos*)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	allow_undefined_flag=unsupported
-	# Joseph Beckenbach <jrb3@best.com> says some releases of gcc
-	# support --undefined.  This deserves some investigation.  FIXME
-	archive_cmds='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    cygwin* | mingw* | pw32* | cegcc*)
-      # _LT_TAGVAR(hardcode_libdir_flag_spec, ) is actually meaningless,
-      # as there is no search path for DLLs.
-      hardcode_libdir_flag_spec='-L$libdir'
-      export_dynamic_flag_spec='$wl--export-all-symbols'
-      allow_undefined_flag=unsupported
-      always_export_symbols=no
-      enable_shared_with_static_runtimes=yes
-      export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1 DATA/;s/^.*[ ]__nm__\([^ ]*\)[ ][^ ]*/\1 DATA/;/^I[ ]/d;/^[AITW][ ]/s/.* //'\'' | sort | uniq > $export_symbols'
-      exclude_expsyms='[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname'
-
-      if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then
-        archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-	# If the export-symbols file already is a .def file, use it as
-	# is; otherwise, prepend EXPORTS...
-	archive_expsym_cmds='if   test DEF = "`$SED -n     -e '\''s/^[	 ]*//'\''     -e '\''/^\(;.*\)*$/d'\''     -e '\''s/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p'\''     -e q     $export_symbols`" ; then
-          cp $export_symbols $output_objdir/$soname.def;
-        else
-          echo EXPORTS > $output_objdir/$soname.def;
-          cat $export_symbols >> $output_objdir/$soname.def;
-        fi~
-        $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    haiku*)
-      archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      link_all_deplibs=yes
-      ;;
-
-    os2*)
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_minus_L=yes
-      allow_undefined_flag=unsupported
-      shrext_cmds=.dll
-      archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      old_archive_From_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      enable_shared_with_static_runtimes=yes
-      file_list_spec='@'
-      ;;
-
-    interix[3-9]*)
-      hardcode_direct=no
-      hardcode_shlibpath_var=no
-      hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-      export_dynamic_flag_spec='$wl-E'
-      # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc.
-      # Instead, shared libraries are loaded at an image base (0x10000000 by
-      # default) and relocated if they conflict, which is a slow very memory
-      # consuming and fragmenting process.  To avoid this, we pick a random,
-      # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link
-      # time.  Moving up from 0x10000000 also allows more sbrk(2) space.
-      archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      archive_expsym_cmds='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      ;;
-
-    gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu)
-      tmp_diet=no
-      if test linux-dietlibc = "$host_os"; then
-	case $cc_basename in
-	  diet\ *) tmp_diet=yes;;	# linux-dietlibc with static linking (!diet-dyn)
-	esac
-      fi
-      if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \
-	 && test no = "$tmp_diet"
-      then
-	tmp_addflag=' $pic_flag'
-	tmp_sharedflag='-shared'
-	case $cc_basename,$host_cpu in
-        pgcc*)				# Portland Group C compiler
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag'
-	  ;;
-	pgf77* | pgf90* | pgf95* | pgfortran*)
-					# Portland Group f77 and f90 compilers
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag -Mnomain' ;;
-	ecc*,ia64* | icc*,ia64*)	# Intel C compiler on ia64
-	  tmp_addflag=' -i_dynamic' ;;
-	efc*,ia64* | ifort*,ia64*)	# Intel Fortran compiler on ia64
-	  tmp_addflag=' -i_dynamic -nofor_main' ;;
-	ifc* | ifort*)			# Intel Fortran compiler
-	  tmp_addflag=' -nofor_main' ;;
-	lf95*)				# Lahey Fortran 8.1
-	  whole_archive_flag_spec=
-	  tmp_sharedflag='--shared' ;;
-        nagfor*)                        # NAGFOR 5.3
-          tmp_sharedflag='-Wl,-shared' ;;
-	xl[cC]* | bgxl[cC]* | mpixl[cC]*) # IBM XL C 8.0 on PPC (deal with xlf below)
-	  tmp_sharedflag='-qmkshrobj'
-	  tmp_addflag= ;;
-	nvcc*)	# Cuda Compiler Driver 2.2
-	  whole_archive_flag_spec='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  compiler_needs_object=yes
-	  ;;
-	esac
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ C*)			# Sun C 5.9
-	  whole_archive_flag_spec='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  compiler_needs_object=yes
-	  tmp_sharedflag='-G' ;;
-	*Sun\ F*)			# Sun Fortran 8.3
-	  tmp_sharedflag='-G' ;;
-	esac
-	archive_cmds='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-
-        if test yes = "$supports_anon_versioning"; then
-          archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~
-            cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-            echo "local: *; };" >> $output_objdir/$libname.ver~
-            $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib'
-        fi
-
-	case $cc_basename in
-	tcc*)
-	  export_dynamic_flag_spec='-rdynamic'
-	  ;;
-	xlf* | bgf* | bgxlf* | mpixlf*)
-	  # IBM XL Fortran 10.1 on PPC cannot create shared libs itself
-	  whole_archive_flag_spec='--whole-archive$convenience --no-whole-archive'
-	  hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	  archive_cmds='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib'
-	  if test yes = "$supports_anon_versioning"; then
-	    archive_expsym_cmds='echo "{ global:" > $output_objdir/$libname.ver~
-              cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-              echo "local: *; };" >> $output_objdir/$libname.ver~
-              $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib'
-	  fi
-	  ;;
-	esac
-      else
-        ld_shlibs=no
-      fi
-      ;;
-
-    netbsd*)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	archive_cmds='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib'
-	wlarc=
-      else
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      fi
-      ;;
-
-    solaris*)
-      if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: The releases 2.8.* of the GNU linker cannot reliably
-*** create shared libraries on Solaris systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.9.1 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-      elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*)
-      case `$LD -v 2>&1` in
-        *\ [01].* | *\ 2.[0-9].* | *\ 2.1[0-5].*)
-	ld_shlibs=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot
-*** reliably create shared libraries on SCO systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.16.91.0.3 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-	;;
-	*)
-	  # For security reasons, it is highly recommended that you always
-	  # use absolute paths for naming shared libraries, and exclude the
-	  # DT_RUNPATH tag from executables and libraries.  But doing so
-	  # requires that you compile everything twice, which is a pain.
-	  if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	    hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-	    archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	    archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-	  else
-	    ld_shlibs=no
-	  fi
-	;;
-      esac
-      ;;
-
-    sunos4*)
-      archive_cmds='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      wlarc=
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    *)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	ld_shlibs=no
-      fi
-      ;;
-    esac
-
-    if test no = "$ld_shlibs"; then
-      runpath_var=
-      hardcode_libdir_flag_spec=
-      export_dynamic_flag_spec=
-      whole_archive_flag_spec=
-    fi
-  else
-    # PORTME fill in a description of your system's linker (not GNU ld)
-    case $host_os in
-    aix3*)
-      allow_undefined_flag=unsupported
-      always_export_symbols=yes
-      archive_expsym_cmds='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname'
-      # Note: this linker hardcodes the directories in LIBPATH if there
-      # are no directories specified by -L.
-      hardcode_minus_L=yes
-      if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then
-	# Neither direct hardcoding nor static linking is supported with a
-	# broken collect2.
-	hardcode_direct=unsupported
-      fi
-      ;;
-
-    aix[4-9]*)
-      if test ia64 = "$host_cpu"; then
-	# On IA64, the linker does run time linking by default, so we don't
-	# have to do anything special.
-	aix_use_runtimelinking=no
-	exp_sym_flag='-Bexport'
-	no_entry_flag=
-      else
-	# If we're using GNU nm, then we don't want the "-C" option.
-	# -C means demangle to GNU nm, but means don't demangle to AIX nm.
-	# Without the "-l" option, or with the "-B" option, AIX nm treats
-	# weak defined symbols like other global defined symbols, whereas
-	# GNU nm marks them as "W".
-	# While the 'weak' keyword is ignored in the Export File, we need
-	# it in the Import File for the 'aix-soname' feature, so we have
-	# to replace the "-B" option with "-P" for AIX nm.
-	if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then
-	  export_symbols_cmds='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && (substr(\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols'
-	else
-	  export_symbols_cmds='`func_echo_all $NM | $SED -e '\''s/B\([^B]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && (substr(\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols'
-	fi
-	aix_use_runtimelinking=no
-
-	# Test if we are trying to use run time linking or normal
-	# AIX style linking. If -brtl is somewhere in LDFLAGS, we
-	# have runtime linking enabled, and use it for executables.
-	# For shared libraries, we enable/disable runtime linking
-	# depending on the kind of the shared library created -
-	# when "with_aix_soname,aix_use_runtimelinking" is:
-	# "aix,no"   lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "aix,yes"  lib.so          shared, rtl:yes, for executables
-	#            lib.a           static archive
-	# "both,no"  lib.so.V(shr.o) shared, rtl:yes
-	#            lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a(lib.so.V) shared, rtl:no
-	# "svr4,*"   lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a           static archive
-	case $host_os in aix4.[23]|aix4.[23].*|aix[5-9]*)
-	  for ld_flag in $LDFLAGS; do
-	  if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then
-	    aix_use_runtimelinking=yes
-	    break
-	  fi
-	  done
-	  if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then
-	    # With aix-soname=svr4, we create the lib.so.V shared archives only,
-	    # so we don't have lib.a shared libs to link our executables.
-	    # We have to force runtime linking in this case.
-	    aix_use_runtimelinking=yes
-	    LDFLAGS="$LDFLAGS -Wl,-brtl"
-	  fi
-	  ;;
-	esac
-
-	exp_sym_flag='-bexport'
-	no_entry_flag='-bnoentry'
-      fi
-
-      # When large executables or shared objects are built, AIX ld can
-      # have problems creating the table of contents.  If linking a library
-      # or program results in "error TOC overflow" add -mminimal-toc to
-      # CXXFLAGS/CFLAGS for g++/gcc.  In the cases where that is not
-      # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS.
-
-      archive_cmds=''
-      hardcode_direct=yes
-      hardcode_direct_absolute=yes
-      hardcode_libdir_separator=':'
-      link_all_deplibs=yes
-      file_list_spec='$wl-f,'
-      case $with_aix_soname,$aix_use_runtimelinking in
-      aix,*) ;; # traditional, no import file
-      svr4,* | *,yes) # use import file
-	# The Import File defines what to hardcode.
-	hardcode_direct=no
-	hardcode_direct_absolute=no
-	;;
-      esac
-
-      if test yes = "$GCC"; then
-	case $host_os in aix4.[012]|aix4.[012].*)
-	# We only want to do this on AIX 4.2 and lower, the check
-	# below for broken collect2 doesn't work under 4.3+
-	  collect2name=`$CC -print-prog-name=collect2`
-	  if test -f "$collect2name" &&
-	   strings "$collect2name" | $GREP resolve_lib_name >/dev/null
-	  then
-	  # We have reworked collect2
-	  :
-	  else
-	  # We have old collect2
-	  hardcode_direct=unsupported
-	  # It fails to find uninstalled libraries when the uninstalled
-	  # path is not listed in the libpath.  Setting hardcode_minus_L
-	  # to unsupported forces relinking
-	  hardcode_minus_L=yes
-	  hardcode_libdir_flag_spec='-L$libdir'
-	  hardcode_libdir_separator=
-	  fi
-	  ;;
-	esac
-	shared_flag='-shared'
-	if test yes = "$aix_use_runtimelinking"; then
-	  shared_flag="$shared_flag "'$wl-G'
-	fi
-	# Need to ensure runtime linking is disabled for the traditional
-	# shared library, or the linker may eventually find shared libraries
-	# /with/ Import File - we do not want to mix them.
-	shared_flag_aix='-shared'
-	shared_flag_svr4='-shared $wl-G'
-      else
-	# not using gcc
-	if test ia64 = "$host_cpu"; then
-	# VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release
-	# chokes on -Wl,-G. The following line is correct:
-	  shared_flag='-G'
-	else
-	  if test yes = "$aix_use_runtimelinking"; then
-	    shared_flag='$wl-G'
-	  else
-	    shared_flag='$wl-bM:SRE'
-	  fi
-	  shared_flag_aix='$wl-bM:SRE'
-	  shared_flag_svr4='$wl-G'
-	fi
-      fi
-
-      export_dynamic_flag_spec='$wl-bexpall'
-      # It seems that -bexpall does not export symbols beginning with
-      # underscore (_), so it is better to generate a list of symbols to export.
-      always_export_symbols=yes
-      if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then
-	# Warning - without using the other runtime loading flags (-brtl),
-	# -berok will link without error, but may produce a broken library.
-	allow_undefined_flag='-berok'
-        # Determine the default libpath from the value encoded in an
-        # empty executable.
-        if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  if test ${lt_cv_aix_libpath_+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-
-  lt_aix_libpath_sed='
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }'
-  lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=/usr/lib:/lib
-  fi
-
-fi
-
-  aix_libpath=$lt_cv_aix_libpath_
-fi
-
-        hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath"
-        archive_expsym_cmds='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag
-      else
-	if test ia64 = "$host_cpu"; then
-	  hardcode_libdir_flag_spec='$wl-R $libdir:/usr/lib:/lib'
-	  allow_undefined_flag="-z nodefs"
-	  archive_expsym_cmds="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols"
-	else
-	 # Determine the default libpath from the value encoded in an
-	 # empty executable.
-	 if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  if test ${lt_cv_aix_libpath_+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-
-  lt_aix_libpath_sed='
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }'
-  lt_cv_aix_libpath_=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-  if test -z "$lt_cv_aix_libpath_"; then
-    lt_cv_aix_libpath_=/usr/lib:/lib
-  fi
-
-fi
-
-  aix_libpath=$lt_cv_aix_libpath_
-fi
-
-	 hardcode_libdir_flag_spec='$wl-blibpath:$libdir:'"$aix_libpath"
-	  # Warning - without using the other run time loading flags,
-	  # -berok will link without error, but may produce a broken library.
-	  no_undefined_flag=' $wl-bernotok'
-	  allow_undefined_flag=' $wl-berok'
-	  if test yes = "$with_gnu_ld"; then
-	    # We only use this code for GNU lds that support --whole-archive.
-	    whole_archive_flag_spec='$wl--whole-archive$convenience $wl--no-whole-archive'
-	  else
-	    # Exported symbols can be pulled into shared objects from archives
-	    whole_archive_flag_spec='$convenience'
-	  fi
-	  archive_cmds_need_lc=yes
-	  archive_expsym_cmds='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d'
-	  # -brtl affects multiple linker settings, -berok does not and is overridden later
-	  compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([, ]\\)%-berok\\1%g"`'
-	  if test svr4 != "$with_aix_soname"; then
-	    # This is similar to how AIX traditionally builds its shared libraries.
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname'
-	  fi
-	  if test aix != "$with_aix_soname"; then
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp'
-	  else
-	    # used by -dlpreopen to get the symbols
-	    archive_expsym_cmds="$archive_expsym_cmds"'~$MV  $output_objdir/$realname.d/$soname $output_objdir'
-	  fi
-	  archive_expsym_cmds="$archive_expsym_cmds"'~$RM -r $output_objdir/$realname.d'
-	fi
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            archive_expsym_cmds=''
-        ;;
-      m68k)
-            archive_cmds='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            hardcode_libdir_flag_spec='-L$libdir'
-            hardcode_minus_L=yes
-        ;;
-      esac
-      ;;
-
-    bsdi[45]*)
-      export_dynamic_flag_spec=-rdynamic
-      ;;
-
-    cygwin* | mingw* | pw32* | cegcc*)
-      # When not using gcc, we currently assume that we are using
-      # Microsoft Visual C++ or Intel C++ Compiler.
-      # hardcode_libdir_flag_spec is actually meaningless, as there is
-      # no search path for DLLs.
-      case $cc_basename in
-      cl* | icl*)
-	# Native MSVC or ICC
-	hardcode_libdir_flag_spec=' '
-	allow_undefined_flag=unsupported
-	always_export_symbols=yes
-	file_list_spec='@'
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	archive_cmds='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames='
-	archive_expsym_cmds='if   test DEF = "`$SED -n     -e '\''s/^[	 ]*//'\''     -e '\''/^\(;.*\)*$/d'\''     -e '\''s/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p'\''     -e q     $export_symbols`" ; then
-            cp "$export_symbols" "$output_objdir/$soname.def";
-            echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp";
-          else
-            $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp;
-          fi~
-          $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~
-          linknames='
-	# The linker will not automatically build a static lib if we build a DLL.
-	# _LT_TAGVAR(old_archive_from_new_cmds, )='true'
-	enable_shared_with_static_runtimes=yes
-	exclude_expsyms='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*'
-	export_symbols_cmds='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[BCDGRS][ ]/s/.*[ ]\([^ ]*\)/\1,DATA/'\'' | $SED -e '\''/^[AITW][ ]/s/.*[ ]//'\'' | sort | uniq > $export_symbols'
-	# Don't use ranlib
-	old_postinstall_cmds='chmod 644 $oldlib'
-	postlink_cmds='lt_outputfile="@OUTPUT@"~
-          lt_tool_outputfile="@TOOL_OUTPUT@"~
-          case $lt_outputfile in
-            *.exe|*.EXE) ;;
-            *)
-              lt_outputfile=$lt_outputfile.exe
-              lt_tool_outputfile=$lt_tool_outputfile.exe
-              ;;
-          esac~
-          if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then
-            $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1;
-            $RM "$lt_outputfile.manifest";
-          fi'
-	;;
-      *)
-	# Assume MSVC and ICC wrapper
-	hardcode_libdir_flag_spec=' '
-	allow_undefined_flag=unsupported
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	archive_cmds='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames='
-	# The linker will automatically build a .lib file if we build a DLL.
-	old_archive_from_new_cmds='true'
-	# FIXME: Should let the user specify the lib program.
-	old_archive_cmds='lib -OUT:$oldlib$oldobjs$old_deplibs'
-	enable_shared_with_static_runtimes=yes
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-
-
-  archive_cmds_need_lc=no
-  hardcode_direct=no
-  hardcode_automatic=yes
-  hardcode_shlibpath_var=unsupported
-  if test yes = "$lt_cv_ld_force_load"; then
-    whole_archive_flag_spec='`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`'
-
-  else
-    whole_archive_flag_spec=''
-  fi
-  link_all_deplibs=yes
-  allow_undefined_flag=$_lt_dar_allow_undefined
-  case $cc_basename in
-     ifort*|nagfor*) _lt_dar_can_shared=yes ;;
-     *) _lt_dar_can_shared=$GCC ;;
-  esac
-  if test yes = "$_lt_dar_can_shared"; then
-    output_verbose_link_cmd=func_echo_all
-    archive_cmds="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil"
-    module_cmds="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil"
-    archive_expsym_cmds="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil"
-    module_expsym_cmds="$SED -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil"
-
-  else
-  ld_shlibs=no
-  fi
-
-      ;;
-
-    dgux*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_shlibpath_var=no
-      ;;
-
-    # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor
-    # support.  Future versions do this automatically, but an explicit c++rt0.o
-    # does not break anything, and helps significantly (at the cost of a little
-    # extra space).
-    freebsd2.2*)
-      archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o'
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    # Unfortunately, older versions of FreeBSD 2 do not have this feature.
-    freebsd2.*)
-      archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_direct=yes
-      hardcode_minus_L=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    # FreeBSD 3 and greater uses gcc -shared to do shared libraries.
-    freebsd* | dragonfly* | midnightbsd*)
-      archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    hpux9*)
-      if test yes = "$GCC"; then
-	archive_cmds='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      else
-	archive_cmds='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      fi
-      hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-      hardcode_libdir_separator=:
-      hardcode_direct=yes
-
-      # hardcode_minus_L: Not really in the search PATH,
-      # but as the default location of the library.
-      hardcode_minus_L=yes
-      export_dynamic_flag_spec='$wl-E'
-      ;;
-
-    hpux10*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      if test no = "$with_gnu_ld"; then
-	hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-	hardcode_libdir_separator=:
-	hardcode_direct=yes
-	hardcode_direct_absolute=yes
-	export_dynamic_flag_spec='$wl-E'
-	# hardcode_minus_L: Not really in the search PATH,
-	# but as the default location of the library.
-	hardcode_minus_L=yes
-      fi
-      ;;
-
-    hpux11*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	case $host_cpu in
-	hppa*64*)
-	  archive_cmds='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	  archive_cmds='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	esac
-      else
-	case $host_cpu in
-	hppa*64*)
-	  archive_cmds='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  archive_cmds='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-
-	  # Older versions of the 11.00 compiler do not understand -b yet
-	  # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does)
-	  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC understands -b" >&5
-printf %s "checking if $CC understands -b... " >&6; }
-if test ${lt_cv_prog_compiler__b+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_prog_compiler__b=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS -b"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&5
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         lt_cv_prog_compiler__b=yes
-       fi
-     else
-       lt_cv_prog_compiler__b=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_prog_compiler__b" >&5
-printf "%s\n" "$lt_cv_prog_compiler__b" >&6; }
-
-if test yes = "$lt_cv_prog_compiler__b"; then
-    archive_cmds='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-else
-    archive_cmds='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-fi
-
-	  ;;
-	esac
-      fi
-      if test no = "$with_gnu_ld"; then
-	hardcode_libdir_flag_spec='$wl+b $wl$libdir'
-	hardcode_libdir_separator=:
-
-	case $host_cpu in
-	hppa*64*|ia64*)
-	  hardcode_direct=no
-	  hardcode_shlibpath_var=no
-	  ;;
-	*)
-	  hardcode_direct=yes
-	  hardcode_direct_absolute=yes
-	  export_dynamic_flag_spec='$wl-E'
-
-	  # hardcode_minus_L: Not really in the search PATH,
-	  # but as the default location of the library.
-	  hardcode_minus_L=yes
-	  ;;
-	esac
-      fi
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	# Try to use the -exported_symbol ld option, if it does not
-	# work, assume that -exports_file does not work either and
-	# implicitly export all symbols.
-	# This should be the same for all languages, so no per-tag cache variable.
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether the $host_os linker accepts -exported_symbol" >&5
-printf %s "checking whether the $host_os linker accepts -exported_symbol... " >&6; }
-if test ${lt_cv_irix_exported_symbol+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  save_LDFLAGS=$LDFLAGS
-	   LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null"
-	   cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int foo (void) { return 0; }
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  lt_cv_irix_exported_symbol=yes
-else $as_nop
-  lt_cv_irix_exported_symbol=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-           LDFLAGS=$save_LDFLAGS
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_irix_exported_symbol" >&5
-printf "%s\n" "$lt_cv_irix_exported_symbol" >&6; }
-	if test yes = "$lt_cv_irix_exported_symbol"; then
-          archive_expsym_cmds='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib'
-	fi
-      else
-	archive_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	archive_expsym_cmds='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      inherit_rpath=yes
-      link_all_deplibs=yes
-      ;;
-
-    linux*)
-      case $cc_basename in
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	ld_shlibs=yes
-	archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	;;
-      esac
-      ;;
-
-    netbsd*)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	archive_cmds='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'  # a.out
-      else
-	archive_cmds='$LD -shared -o $lib $libobjs $deplibs $linker_flags'      # ELF
-      fi
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_direct=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    newsos6)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_direct=yes
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      hardcode_shlibpath_var=no
-      ;;
-
-    *nto* | *qnx*)
-      ;;
-
-    openbsd* | bitrig*)
-      if test -f /usr/libexec/ld.so; then
-	hardcode_direct=yes
-	hardcode_shlibpath_var=no
-	hardcode_direct_absolute=yes
-	if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-	  archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  archive_expsym_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols'
-	  hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-	  export_dynamic_flag_spec='$wl-E'
-	else
-	  archive_cmds='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  hardcode_libdir_flag_spec='$wl-rpath,$libdir'
-	fi
-      else
-	ld_shlibs=no
-      fi
-      ;;
-
-    os2*)
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_minus_L=yes
-      allow_undefined_flag=unsupported
-      shrext_cmds=.dll
-      archive_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      archive_expsym_cmds='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      old_archive_From_new_cmds='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      enable_shared_with_static_runtimes=yes
-      file_list_spec='@'
-      ;;
-
-    osf3*)
-      if test yes = "$GCC"; then
-	allow_undefined_flag=' $wl-expect_unresolved $wl\*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-      else
-	allow_undefined_flag=' -expect_unresolved \*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      hardcode_libdir_separator=:
-      ;;
-
-    osf4* | osf5*)	# as osf3* with the addition of -msym flag
-      if test yes = "$GCC"; then
-	allow_undefined_flag=' $wl-expect_unresolved $wl\*'
-	archive_cmds='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	hardcode_libdir_flag_spec='$wl-rpath $wl$libdir'
-      else
-	allow_undefined_flag=' -expect_unresolved \*'
-	archive_cmds='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	archive_expsym_cmds='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~
-          $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp'
-
-	# Both c and cxx compiler support -rpath directly
-	hardcode_libdir_flag_spec='-rpath $libdir'
-      fi
-      archive_cmds_need_lc='no'
-      hardcode_libdir_separator=:
-      ;;
-
-    solaris*)
-      no_undefined_flag=' -z defs'
-      if test yes = "$GCC"; then
-	wlarc='$wl'
-	archive_cmds='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-          $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-      else
-	case `$CC -V 2>&1` in
-	*"Compilers 5.0"*)
-	  wlarc=''
-	  archive_cmds='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp'
-	  ;;
-	*)
-	  wlarc='$wl'
-	  archive_cmds='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags'
-	  archive_expsym_cmds='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-	  ;;
-	esac
-      fi
-      hardcode_libdir_flag_spec='-R$libdir'
-      hardcode_shlibpath_var=no
-      case $host_os in
-      solaris2.[0-5] | solaris2.[0-5].*) ;;
-      *)
-	# The compiler driver will combine and reorder linker options,
-	# but understands '-z linker_flag'.  GCC discards it without '$wl',
-	# but is careful enough not to reorder.
-	# Supported since Solaris 2.6 (maybe 2.5.1?)
-	if test yes = "$GCC"; then
-	  whole_archive_flag_spec='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract'
-	else
-	  whole_archive_flag_spec='-z allextract$convenience -z defaultextract'
-	fi
-	;;
-      esac
-      link_all_deplibs=yes
-      ;;
-
-    sunos4*)
-      if test sequent = "$host_vendor"; then
-	# Use $CC to link under sequent, because it throws in some extra .o
-	# files that make .init and .fini sections work.
-	archive_cmds='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_direct=yes
-      hardcode_minus_L=yes
-      hardcode_shlibpath_var=no
-      ;;
-
-    sysv4)
-      case $host_vendor in
-	sni)
-	  archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  hardcode_direct=yes # is this really true???
-	;;
-	siemens)
-	  ## LD is ld it makes a PLAMLIB
-	  ## CC just makes a GrossModule.
-	  archive_cmds='$LD -G -o $lib $libobjs $deplibs $linker_flags'
-	  reload_cmds='$CC -r -o $output$reload_objs'
-	  hardcode_direct=no
-        ;;
-	motorola)
-	  archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  hardcode_direct=no #Motorola manual says yes, but my tests say they lie
-	;;
-      esac
-      runpath_var='LD_RUN_PATH'
-      hardcode_shlibpath_var=no
-      ;;
-
-    sysv4.3*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_shlibpath_var=no
-      export_dynamic_flag_spec='-Bexport'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	hardcode_shlibpath_var=no
-	runpath_var=LD_RUN_PATH
-	hardcode_runpath_var=yes
-	ld_shlibs=yes
-      fi
-      ;;
-
-    sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[01].[10]* | unixware7* | sco3.2v5.0.[024]*)
-      no_undefined_flag='$wl-z,text'
-      archive_cmds_need_lc=no
-      hardcode_shlibpath_var=no
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6*)
-      # Note: We CANNOT use -z defs as we might desire, because we do not
-      # link with -lc, and that would cause any symbols used from libc to
-      # always be unresolved, which means just about no library would
-      # ever link correctly.  If we're not using GNU ld we use -z text
-      # though, which does catch some bad symbols but isn't as heavy-handed
-      # as -z defs.
-      no_undefined_flag='$wl-z,text'
-      allow_undefined_flag='$wl-z,nodefs'
-      archive_cmds_need_lc=no
-      hardcode_shlibpath_var=no
-      hardcode_libdir_flag_spec='$wl-R,$libdir'
-      hardcode_libdir_separator=':'
-      link_all_deplibs=yes
-      export_dynamic_flag_spec='$wl-Bexport'
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	archive_cmds='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	archive_cmds='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	archive_expsym_cmds='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    uts4*)
-      archive_cmds='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      hardcode_libdir_flag_spec='-L$libdir'
-      hardcode_shlibpath_var=no
-      ;;
-
-    *)
-      ld_shlibs=no
-      ;;
-    esac
-
-    if test sni = "$host_vendor"; then
-      case $host in
-      sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*)
-	export_dynamic_flag_spec='$wl-Blargedynsym'
-	;;
-      esac
-    fi
-  fi
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ld_shlibs" >&5
-printf "%s\n" "$ld_shlibs" >&6; }
-test no = "$ld_shlibs" && can_build_shared=no
-
-with_gnu_ld=$with_gnu_ld
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-#
-# Do we need to explicitly link libc?
-#
-case "x$archive_cmds_need_lc" in
-x|xyes)
-  # Assume -lc should be added
-  archive_cmds_need_lc=yes
-
-  if test yes,yes = "$GCC,$enable_shared"; then
-    case $archive_cmds in
-    *'~'*)
-      # FIXME: we may have to deal with multi-command sequences.
-      ;;
-    '$CC '*)
-      # Test whether the compiler implicitly links with -lc since on some
-      # systems, -lgcc has to come before -lc. If gcc already passes -lc
-      # to ld, don't add -lc before -lgcc.
-      { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether -lc should be explicitly linked in" >&5
-printf %s "checking whether -lc should be explicitly linked in... " >&6; }
-if test ${lt_cv_archive_cmds_need_lc+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  $RM conftest*
-	echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-	if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_compile\""; } >&5
-  (eval $ac_compile) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } 2>conftest.err; then
-	  soname=conftest
-	  lib=conftest
-	  libobjs=conftest.$ac_objext
-	  deplibs=
-	  wl=$lt_prog_compiler_wl
-	  pic_flag=$lt_prog_compiler_pic
-	  compiler_flags=-v
-	  linker_flags=-v
-	  verstring=
-	  output_objdir=.
-	  libname=conftest
-	  lt_save_allow_undefined_flag=$allow_undefined_flag
-	  allow_undefined_flag=
-	  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1\""; } >&5
-  (eval $archive_cmds 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }
-	  then
-	    lt_cv_archive_cmds_need_lc=no
-	  else
-	    lt_cv_archive_cmds_need_lc=yes
-	  fi
-	  allow_undefined_flag=$lt_save_allow_undefined_flag
-	else
-	  cat conftest.err 1>&5
-	fi
-	$RM conftest*
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_archive_cmds_need_lc" >&5
-printf "%s\n" "$lt_cv_archive_cmds_need_lc" >&6; }
-      archive_cmds_need_lc=$lt_cv_archive_cmds_need_lc
-      ;;
-    esac
-  fi
-  ;;
-esac
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking dynamic linker characteristics" >&5
-printf %s "checking dynamic linker characteristics... " >&6; }
-
-if test yes = "$GCC"; then
-  case $host_os in
-    darwin*) lt_awk_arg='/^libraries:/,/LR/' ;;
-    *) lt_awk_arg='/^libraries:/' ;;
-  esac
-  case $host_os in
-    mingw* | cegcc*) lt_sed_strip_eq='s|=\([A-Za-z]:\)|\1|g' ;;
-    *) lt_sed_strip_eq='s|=/|/|g' ;;
-  esac
-  lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq`
-  case $lt_search_path_spec in
-  *\;*)
-    # if the path contains ";" then we assume it to be the separator
-    # otherwise default to the standard path separator (i.e. ":") - it is
-    # assumed that no part of a normal pathname contains ";" but that should
-    # okay in the real world where ";" in dirpaths is itself problematic.
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'`
-    ;;
-  *)
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"`
-    ;;
-  esac
-  # Ok, now we have the path, separated by spaces, we can step through it
-  # and add multilib dir if necessary...
-  lt_tmp_lt_search_path_spec=
-  lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null`
-  # ...but if some path component already ends with the multilib dir we assume
-  # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer).
-  case "$lt_multi_os_dir; $lt_search_path_spec " in
-  "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*)
-    lt_multi_os_dir=
-    ;;
-  esac
-  for lt_sys_path in $lt_search_path_spec; do
-    if test -d "$lt_sys_path$lt_multi_os_dir"; then
-      lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir"
-    elif test -n "$lt_multi_os_dir"; then
-      test -d "$lt_sys_path" && \
-	lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path"
-    fi
-  done
-  lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk '
-BEGIN {RS = " "; FS = "/|\n";} {
-  lt_foo = "";
-  lt_count = 0;
-  for (lt_i = NF; lt_i > 0; lt_i--) {
-    if ($lt_i != "" && $lt_i != ".") {
-      if ($lt_i == "..") {
-        lt_count++;
-      } else {
-        if (lt_count == 0) {
-          lt_foo = "/" $lt_i lt_foo;
-        } else {
-          lt_count--;
-        }
-      }
-    }
-  }
-  if (lt_foo != "") { lt_freq[lt_foo]++; }
-  if (lt_freq[lt_foo] == 1) { print lt_foo; }
-}'`
-  # AWK program above erroneously prepends '/' to C:/dos/paths
-  # for these hosts.
-  case $host_os in
-    mingw* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\
-      $SED 's|/\([A-Za-z]:\)|\1|g'` ;;
-  esac
-  sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP`
-else
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-fi
-library_names_spec=
-libname_spec='lib$name'
-soname_spec=
-shrext_cmds=.so
-postinstall_cmds=
-postuninstall_cmds=
-finish_cmds=
-finish_eval=
-shlibpath_var=
-shlibpath_overrides_runpath=unknown
-version_type=none
-dynamic_linker="$host_os ld.so"
-sys_lib_dlsearch_path_spec="/lib /usr/lib"
-need_lib_prefix=unknown
-hardcode_into_libs=no
-
-# when you set need_version to no, make sure it does not cause -set_version
-# flags to be left without arguments
-need_version=unknown
-
-
-
-case $host_os in
-aix3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname.a'
-  shlibpath_var=LIBPATH
-
-  # AIX 3 has no versioning support, so we append a major version to the name.
-  soname_spec='$libname$release$shared_ext$major'
-  ;;
-
-aix[4-9]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  hardcode_into_libs=yes
-  if test ia64 = "$host_cpu"; then
-    # AIX 5 supports IA64
-    library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext'
-    shlibpath_var=LD_LIBRARY_PATH
-  else
-    # With GCC up to 2.95.x, collect2 would create an import file
-    # for dependence libraries.  The import file would start with
-    # the line '#! .'.  This would cause the generated library to
-    # depend on '.', always an invalid library.  This was fixed in
-    # development snapshots of GCC prior to 3.0.
-    case $host_os in
-      aix4 | aix4.[01] | aix4.[01].*)
-      if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)'
-	   echo ' yes '
-	   echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then
-	:
-      else
-	can_build_shared=no
-      fi
-      ;;
-    esac
-    # Using Import Files as archive members, it is possible to support
-    # filename-based versioning of shared library archives on AIX. While
-    # this would work for both with and without runtime linking, it will
-    # prevent static linking of such archives. So we do filename-based
-    # shared library versioning with .so extension only, which is used
-    # when both runtime linking and shared linking is enabled.
-    # Unfortunately, runtime linking may impact performance, so we do
-    # not want this to be the default eventually. Also, we use the
-    # versioned .so libs for executables only if there is the -brtl
-    # linker flag in LDFLAGS as well, or --with-aix-soname=svr4 only.
-    # To allow for filename-based versioning support, we need to create
-    # libNAME.so.V as an archive file, containing:
-    # *) an Import File, referring to the versioned filename of the
-    #    archive as well as the shared archive member, telling the
-    #    bitwidth (32 or 64) of that shared object, and providing the
-    #    list of exported symbols of that shared object, eventually
-    #    decorated with the 'weak' keyword
-    # *) the shared object with the F_LOADONLY flag set, to really avoid
-    #    it being seen by the linker.
-    # At run time we better use the real file rather than another symlink,
-    # but for link time we create the symlink libNAME.so -> libNAME.so.V
-
-    case $with_aix_soname,$aix_use_runtimelinking in
-    # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct
-    # soname into executable. Probably we can add versioning support to
-    # collect2, so additional links can be useful in future.
-    aix,yes) # traditional libtool
-      dynamic_linker='AIX unversionable lib.so'
-      # If using run time linking (on AIX 4.2 or later) use lib<name>.so
-      # instead of lib<name>.a to let people know that these are not
-      # typical AIX shared libraries.
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      ;;
-    aix,no) # traditional AIX only
-      dynamic_linker='AIX lib.a(lib.so.V)'
-      # We preserve .a as extension for shared libraries through AIX4.2
-      # and later when we are not doing run time linking.
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      ;;
-    svr4,*) # full svr4 only
-      dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o)"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,yes) # both, prefer svr4
-      dynamic_linker="AIX lib.so.V($shared_archive_member_spec.o), lib.a(lib.so.V)"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # unpreferred sharedlib libNAME.a needs extra handling
-      postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"'
-      postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,no) # both, prefer aix
-      dynamic_linker="AIX lib.a(lib.so.V), lib.so.V($shared_archive_member_spec.o)"
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling
-      postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)'
-      postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"'
-      ;;
-    esac
-    shlibpath_var=LIBPATH
-  fi
-  ;;
-
-amigaos*)
-  case $host_cpu in
-  powerpc)
-    # Since July 2007 AmigaOS4 officially supports .so libraries.
-    # When compiling the executable, add -use-dynld -Lsobjs: to the compileline.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    ;;
-  m68k)
-    library_names_spec='$libname.ixlibrary $libname.a'
-    # Create ${libname}_ixlibrary.a entries in /sys/libs.
-    finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([^/]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done'
-    ;;
-  esac
-  ;;
-
-beos*)
-  library_names_spec='$libname$shared_ext'
-  dynamic_linker="$host_os ld.so"
-  shlibpath_var=LIBRARY_PATH
-  ;;
-
-bsdi[45]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib"
-  # the default ld.so.conf also contains /usr/contrib/lib and
-  # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow
-  # libtool to hard-code these into programs
-  ;;
-
-cygwin* | mingw* | pw32* | cegcc*)
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-
-  case $GCC,$cc_basename in
-  yes,*)
-    # gcc
-    library_names_spec='$libname.dll.a'
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    postinstall_cmds='base_file=`basename \$file`~
-      dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-      dldir=$destdir/`dirname \$dlpath`~
-      test -d \$dldir || mkdir -p \$dldir~
-      $install_prog $dir/$dlname \$dldir/$dlname~
-      chmod a+x \$dldir/$dlname~
-      if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-        eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-      fi'
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-
-    case $host_os in
-    cygwin*)
-      # Cygwin DLLs use 'cyg' prefix rather than 'lib'
-      soname_spec='`echo $libname | $SED -e 's/^lib/cyg/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-
-      sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api"
-      ;;
-    mingw* | cegcc*)
-      # MinGW DLLs use traditional 'lib' prefix
-      soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-      ;;
-    pw32*)
-      # pw32 DLLs use 'pw' prefix rather than 'lib'
-      library_names_spec='`echo $libname | $SED -e 's/^lib/pw/'``echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-      ;;
-    esac
-    dynamic_linker='Win32 ld.exe'
-    ;;
-
-  *,cl* | *,icl*)
-    # Native MSVC or ICC
-    libname_spec='$name'
-    soname_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext'
-    library_names_spec='$libname.dll.lib'
-
-    case $build_os in
-    mingw*)
-      sys_lib_search_path_spec=
-      lt_save_ifs=$IFS
-      IFS=';'
-      for lt_path in $LIB
-      do
-        IFS=$lt_save_ifs
-        # Let DOS variable expansion print the short 8.3 style file name.
-        lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"`
-        sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path"
-      done
-      IFS=$lt_save_ifs
-      # Convert to MSYS style.
-      sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's|\\\\|/|g' -e 's| \\([a-zA-Z]\\):| /\\1|g' -e 's|^ ||'`
-      ;;
-    cygwin*)
-      # Convert to unix form, then to dos form, then back to unix form
-      # but this time dos style (no spaces!) so that the unix form looks
-      # like /cygdrive/c/PROGRA~1:/cygdr...
-      sys_lib_search_path_spec=`cygpath --path --unix "$LIB"`
-      sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null`
-      sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      ;;
-    *)
-      sys_lib_search_path_spec=$LIB
-      if $ECHO "$sys_lib_search_path_spec" | $GREP ';[c-zC-Z]:/' >/dev/null; then
-        # It is most probably a Windows format PATH.
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'`
-      else
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      fi
-      # FIXME: find the short name or the path components, as spaces are
-      # common. (e.g. "Program Files" -> "PROGRA~1")
-      ;;
-    esac
-
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    postinstall_cmds='base_file=`basename \$file`~
-      dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-      dldir=$destdir/`dirname \$dlpath`~
-      test -d \$dldir || mkdir -p \$dldir~
-      $install_prog $dir/$dlname \$dldir/$dlname'
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-    dynamic_linker='Win32 link.exe'
-    ;;
-
-  *)
-    # Assume MSVC and ICC wrapper
-    library_names_spec='$libname`echo $release | $SED -e 's/[.]/-/g'`$versuffix$shared_ext $libname.lib'
-    dynamic_linker='Win32 ld.exe'
-    ;;
-  esac
-  # FIXME: first we should search . and the directory the executable is in
-  shlibpath_var=PATH
-  ;;
-
-darwin* | rhapsody*)
-  dynamic_linker="$host_os dyld"
-  version_type=darwin
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$major$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$major$shared_ext'
-  shlibpath_overrides_runpath=yes
-  shlibpath_var=DYLD_LIBRARY_PATH
-  shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`'
-
-  sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib"
-  sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib'
-  ;;
-
-dgux*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  # DragonFly does not have aout.  When/if they implement a new
-  # versioning mechanism, adjust this.
-  if test -x /usr/bin/objformat; then
-    objformat=`/usr/bin/objformat`
-  else
-    case $host_os in
-    freebsd[23].*) objformat=aout ;;
-    *) objformat=elf ;;
-    esac
-  fi
-  version_type=freebsd-$objformat
-  case $version_type in
-    freebsd-elf*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      soname_spec='$libname$release$shared_ext$major'
-      need_version=no
-      need_lib_prefix=no
-      ;;
-    freebsd-*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-      need_version=yes
-      ;;
-  esac
-  shlibpath_var=LD_LIBRARY_PATH
-  case $host_os in
-  freebsd2.*)
-    shlibpath_overrides_runpath=yes
-    ;;
-  freebsd3.[01]* | freebsdelf3.[01]*)
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  freebsd3.[2-9]* | freebsdelf3.[2-9]* | \
-  freebsd4.[0-5] | freebsdelf4.[0-5] | freebsd4.1.1 | freebsdelf4.1.1)
-    shlibpath_overrides_runpath=no
-    hardcode_into_libs=yes
-    ;;
-  *) # from 4.6 on, and DragonFly
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  esac
-  ;;
-
-haiku*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  dynamic_linker="$host_os runtime_loader"
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_dlsearch_path_spec='/boot/home/config/lib /boot/common/lib /boot/system/lib'
-  hardcode_into_libs=yes
-  ;;
-
-hpux9* | hpux10* | hpux11*)
-  # Give a soname corresponding to the major version so that dld.sl refuses to
-  # link against other versions.
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  case $host_cpu in
-  ia64*)
-    shrext_cmds='.so'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.so"
-    shlibpath_var=LD_LIBRARY_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    if test 32 = "$HPUX_IA64_MODE"; then
-      sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux32
-    else
-      sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux64
-    fi
-    ;;
-  hppa*64*)
-    shrext_cmds='.sl'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64"
-    sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-    ;;
-  *)
-    shrext_cmds='.sl'
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=SHLIB_PATH
-    shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    ;;
-  esac
-  # HP-UX runs *really* slowly unless shared libraries are mode 555, ...
-  postinstall_cmds='chmod 555 $lib'
-  # or fails outright, so override atomically:
-  install_override_mode=555
-  ;;
-
-interix[3-9]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $host_os in
-    nonstopux*) version_type=nonstopux ;;
-    *)
-	if test yes = "$lt_cv_prog_gnu_ld"; then
-		version_type=linux # correct to gnu/linux during the next big refactor
-	else
-		version_type=irix
-	fi ;;
-  esac
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext'
-  case $host_os in
-  irix5* | nonstopux*)
-    libsuff= shlibsuff=
-    ;;
-  *)
-    case $LD in # libtool.m4 will add one of these switches to LD
-    *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ")
-      libsuff= shlibsuff= libmagic=32-bit;;
-    *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ")
-      libsuff=32 shlibsuff=N32 libmagic=N32;;
-    *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ")
-      libsuff=64 shlibsuff=64 libmagic=64-bit;;
-    *) libsuff= shlibsuff= libmagic=never-match;;
-    esac
-    ;;
-  esac
-  shlibpath_var=LD_LIBRARY${shlibsuff}_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff"
-  sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff"
-  hardcode_into_libs=yes
-  ;;
-
-# No shared lib support for Linux oldld, aout, or coff.
-linux*oldld* | linux*aout* | linux*coff*)
-  dynamic_linker=no
-  ;;
-
-linux*android*)
-  version_type=none # Android doesn't support versioned libraries.
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  dynamic_linker='Android linker'
-  # Don't embed -rpath directories since the linker doesn't support them.
-  hardcode_libdir_flag_spec='-L$libdir'
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-
-  # Some binutils ld are patched to set DT_RUNPATH
-  if test ${lt_cv_shlibpath_overrides_runpath+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  lt_cv_shlibpath_overrides_runpath=no
-    save_LDFLAGS=$LDFLAGS
-    save_libdir=$libdir
-    eval "libdir=/foo; wl=\"$lt_prog_compiler_wl\"; \
-	 LDFLAGS=\"\$LDFLAGS $hardcode_libdir_flag_spec\""
-    cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  if  ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null
-then :
-  lt_cv_shlibpath_overrides_runpath=yes
-fi
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-    LDFLAGS=$save_LDFLAGS
-    libdir=$save_libdir
-
-fi
-
-  shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  # Ideally, we could use ldconfig to report *all* directores which are
-  # searched for libraries, however this is still not possible.  Aside from not
-  # being certain /sbin/ldconfig is available, command
-  # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64,
-  # even though it is searched at run-time.  Try to do the best guess by
-  # appending ld.so.conf contents (and includes) to the search path.
-  if test -f /etc/ld.so.conf; then
-    lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \$2)); skip = 1; } { if (!skip) print \$0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[	 ]*hwcap[	 ]/d;s/[:,	]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '`
-    sys_lib_dlsearch_path_spec="/lib /usr/lib $lt_ld_extra"
-  fi
-
-  # We used to test for /lib/ld.so.1 and disable shared libraries on
-  # powerpc, because MkLinux only supported shared libraries with the
-  # GNU dynamic linker.  Since this was broken with cross compilers,
-  # most powerpc-linux boxes support dynamic linking these days and
-  # people can always --disable-shared, the test was removed, and we
-  # assume the GNU/Linux dynamic linker is in use.
-  dynamic_linker='GNU/Linux ld.so'
-  ;;
-
-netbsd*)
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-    finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-    dynamic_linker='NetBSD (a.out) ld.so'
-  else
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    dynamic_linker='NetBSD ld.elf_so'
-  fi
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  ;;
-
-newsos6)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-*nto* | *qnx*)
-  version_type=qnx
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='ldqnx.so'
-  ;;
-
-openbsd* | bitrig*)
-  version_type=sunos
-  sys_lib_dlsearch_path_spec=/usr/lib
-  need_lib_prefix=no
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    need_version=no
-  else
-    need_version=yes
-  fi
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-os2*)
-  libname_spec='$name'
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-  # OS/2 can only load a DLL with a base name of 8 characters or less.
-  soname_spec='`test -n "$os2dllname" && libname="$os2dllname";
-    v=$($ECHO $release$versuffix | tr -d .-);
-    n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _);
-    $ECHO $n$v`$shared_ext'
-  library_names_spec='${libname}_dll.$libext'
-  dynamic_linker='OS/2 ld.exe'
-  shlibpath_var=BEGINLIBPATH
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  postinstall_cmds='base_file=`basename \$file`~
-    dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~
-    dldir=$destdir/`dirname \$dlpath`~
-    test -d \$dldir || mkdir -p \$dldir~
-    $install_prog $dir/$dlname \$dldir/$dlname~
-    chmod a+x \$dldir/$dlname~
-    if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-      eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-    fi'
-  postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~
-    dlpath=$dir/\$dldll~
-    $RM \$dlpath'
-  ;;
-
-osf3* | osf4* | osf5*)
-  version_type=osf
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  ;;
-
-rdos*)
-  dynamic_linker=no
-  ;;
-
-solaris*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  # ldd complains unless libraries are executable
-  postinstall_cmds='chmod +x $lib'
-  ;;
-
-sunos4*)
-  version_type=sunos
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  if test yes = "$with_gnu_ld"; then
-    need_lib_prefix=no
-  fi
-  need_version=yes
-  ;;
-
-sysv4 | sysv4.3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  case $host_vendor in
-    sni)
-      shlibpath_overrides_runpath=no
-      need_lib_prefix=no
-      runpath_var=LD_RUN_PATH
-      ;;
-    siemens)
-      need_lib_prefix=no
-      ;;
-    motorola)
-      need_lib_prefix=no
-      need_version=no
-      shlibpath_overrides_runpath=no
-      sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib'
-      ;;
-  esac
-  ;;
-
-sysv4*MP*)
-  if test -d /usr/nec; then
-    version_type=linux # correct to gnu/linux during the next big refactor
-    library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext'
-    soname_spec='$libname$shared_ext.$major'
-    shlibpath_var=LD_LIBRARY_PATH
-  fi
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  version_type=sco
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  if test yes = "$with_gnu_ld"; then
-    sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib'
-  else
-    sys_lib_search_path_spec='/usr/ccs/lib /usr/lib'
-    case $host_os in
-      sco3.2v5*)
-        sys_lib_search_path_spec="$sys_lib_search_path_spec /lib"
-	;;
-    esac
-  fi
-  sys_lib_dlsearch_path_spec='/usr/lib'
-  ;;
-
-tpf*)
-  # TPF is a cross-target only.  Preferred cross-host = GNU/Linux.
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-uts4*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-*)
-  dynamic_linker=no
-  ;;
-esac
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $dynamic_linker" >&5
-printf "%s\n" "$dynamic_linker" >&6; }
-test no = "$dynamic_linker" && can_build_shared=no
-
-variables_saved_for_relink="PATH $shlibpath_var $runpath_var"
-if test yes = "$GCC"; then
-  variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH"
-fi
-
-if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then
-  sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec
-fi
-
-if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then
-  sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec
-fi
-
-# remember unaugmented sys_lib_dlsearch_path content for libtool script decls...
-configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec
-
-# ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code
-func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH"
-
-# to be used as default LT_SYS_LIBRARY_PATH value in generated libtool
-configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking how to hardcode library paths into programs" >&5
-printf %s "checking how to hardcode library paths into programs... " >&6; }
-hardcode_action=
-if test -n "$hardcode_libdir_flag_spec" ||
-   test -n "$runpath_var" ||
-   test yes = "$hardcode_automatic"; then
-
-  # We can hardcode non-existent directories.
-  if test no != "$hardcode_direct" &&
-     # If the only mechanism to avoid hardcoding is shlibpath_var, we
-     # have to relink, otherwise we might link with an installed library
-     # when we should be linking with a yet-to-be-installed one
-     ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, )" &&
-     test no != "$hardcode_minus_L"; then
-    # Linking always hardcodes the temporary library directory.
-    hardcode_action=relink
-  else
-    # We can link without hardcoding, and we can hardcode nonexisting dirs.
-    hardcode_action=immediate
-  fi
-else
-  # We cannot hardcode anything, or else we can only hardcode existing
-  # directories.
-  hardcode_action=unsupported
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $hardcode_action" >&5
-printf "%s\n" "$hardcode_action" >&6; }
-
-if test relink = "$hardcode_action" ||
-   test yes = "$inherit_rpath"; then
-  # Fast installation is not supported
-  enable_fast_install=no
-elif test yes = "$shlibpath_overrides_runpath" ||
-     test no = "$enable_shared"; then
-  # Fast installation is not necessary
-  enable_fast_install=needless
-fi
-
-
-
-
-
-
-  if test yes != "$enable_dlopen"; then
-  enable_dlopen=unknown
-  enable_dlopen_self=unknown
-  enable_dlopen_self_static=unknown
-else
-  lt_cv_dlopen=no
-  lt_cv_dlopen_libs=
-
-  case $host_os in
-  beos*)
-    lt_cv_dlopen=load_add_on
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ;;
-
-  mingw* | pw32* | cegcc*)
-    lt_cv_dlopen=LoadLibrary
-    lt_cv_dlopen_libs=
-    ;;
-
-  cygwin*)
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    ;;
-
-  darwin*)
-    # if libdl is installed we need to link against it
-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
-printf %s "checking for dlopen in -ldl... " >&6; }
-if test ${ac_cv_lib_dl_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-char dlopen ();
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dl_dlopen=yes
-else $as_nop
-  ac_cv_lib_dl_dlopen=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
-printf "%s\n" "$ac_cv_lib_dl_dlopen" >&6; }
-if test "x$ac_cv_lib_dl_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl
-else $as_nop
-
-    lt_cv_dlopen=dyld
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-
-fi
-
-    ;;
-
-  tpf*)
-    # Don't try to run any link tests for TPF.  We know it's impossible
-    # because TPF is a cross-compiler, and we know how we open DSOs.
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=no
-    ;;
-
-  *)
-    ac_fn_c_check_func "$LINENO" "shl_load" "ac_cv_func_shl_load"
-if test "x$ac_cv_func_shl_load" = xyes
-then :
-  lt_cv_dlopen=shl_load
-else $as_nop
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for shl_load in -ldld" >&5
-printf %s "checking for shl_load in -ldld... " >&6; }
-if test ${ac_cv_lib_dld_shl_load+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-char shl_load ();
-int
-main (void)
-{
-return shl_load ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dld_shl_load=yes
-else $as_nop
-  ac_cv_lib_dld_shl_load=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_shl_load" >&5
-printf "%s\n" "$ac_cv_lib_dld_shl_load" >&6; }
-if test "x$ac_cv_lib_dld_shl_load" = xyes
-then :
-  lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld
-else $as_nop
-  ac_fn_c_check_func "$LINENO" "dlopen" "ac_cv_func_dlopen"
-if test "x$ac_cv_func_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen
-else $as_nop
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for dlopen in -ldl" >&5
-printf %s "checking for dlopen in -ldl... " >&6; }
-if test ${ac_cv_lib_dl_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldl  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-char dlopen ();
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dl_dlopen=yes
-else $as_nop
-  ac_cv_lib_dl_dlopen=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dl_dlopen" >&5
-printf "%s\n" "$ac_cv_lib_dl_dlopen" >&6; }
-if test "x$ac_cv_lib_dl_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl
-else $as_nop
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for dlopen in -lsvld" >&5
-printf %s "checking for dlopen in -lsvld... " >&6; }
-if test ${ac_cv_lib_svld_dlopen+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-lsvld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-char dlopen ();
-int
-main (void)
-{
-return dlopen ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_svld_dlopen=yes
-else $as_nop
-  ac_cv_lib_svld_dlopen=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_svld_dlopen" >&5
-printf "%s\n" "$ac_cv_lib_svld_dlopen" >&6; }
-if test "x$ac_cv_lib_svld_dlopen" = xyes
-then :
-  lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld
-else $as_nop
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for dld_link in -ldld" >&5
-printf %s "checking for dld_link in -ldld... " >&6; }
-if test ${ac_cv_lib_dld_dld_link+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  ac_check_lib_save_LIBS=$LIBS
-LIBS="-ldld  $LIBS"
-cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-/* Override any GCC internal prototype to avoid an error.
-   Use char because int might match the return type of a GCC
-   builtin and then its argument prototype would still apply.  */
-char dld_link ();
-int
-main (void)
-{
-return dld_link ();
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  ac_cv_lib_dld_dld_link=yes
-else $as_nop
-  ac_cv_lib_dld_dld_link=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-LIBS=$ac_check_lib_save_LIBS
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_lib_dld_dld_link" >&5
-printf "%s\n" "$ac_cv_lib_dld_dld_link" >&6; }
-if test "x$ac_cv_lib_dld_dld_link" = xyes
-then :
-  lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld
-fi
-
-
-fi
-
-
-fi
-
-
-fi
-
-
-fi
-
-
-fi
-
-    ;;
-  esac
-
-  if test no = "$lt_cv_dlopen"; then
-    enable_dlopen=no
-  else
-    enable_dlopen=yes
-  fi
-
-  case $lt_cv_dlopen in
-  dlopen)
-    save_CPPFLAGS=$CPPFLAGS
-    test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H"
-
-    save_LDFLAGS=$LDFLAGS
-    wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\"
-
-    save_LIBS=$LIBS
-    LIBS="$lt_cv_dlopen_libs $LIBS"
-
-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether a program can dlopen itself" >&5
-printf %s "checking whether a program can dlopen itself... " >&6; }
-if test ${lt_cv_dlopen_self+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  	  if test yes = "$cross_compiling"; then :
-  lt_cv_dlopen_self=cross
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord () __attribute__((visibility("default")));
-#endif
-
-int fnord () { return 42; }
-int main ()
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}
-_LT_EOF
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&5 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) lt_cv_dlopen_self=yes ;;
-      x$lt_dlneed_uscore) lt_cv_dlopen_self=yes ;;
-      x$lt_dlunknown|x*) lt_cv_dlopen_self=no ;;
-    esac
-  else :
-    # compilation failed
-    lt_cv_dlopen_self=no
-  fi
-fi
-rm -fr conftest*
-
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self" >&5
-printf "%s\n" "$lt_cv_dlopen_self" >&6; }
-
-    if test yes = "$lt_cv_dlopen_self"; then
-      wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\"
-      { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether a statically linked program can dlopen itself" >&5
-printf %s "checking whether a statically linked program can dlopen itself... " >&6; }
-if test ${lt_cv_dlopen_self_static+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  	  if test yes = "$cross_compiling"; then :
-  lt_cv_dlopen_self_static=cross
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord () __attribute__((visibility("default")));
-#endif
-
-int fnord () { return 42; }
-int main ()
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}
-_LT_EOF
-  if { { eval echo "\"\$as_me\":${as_lineno-$LINENO}: \"$ac_link\""; } >&5
-  (eval $ac_link) 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; } && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&5 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) lt_cv_dlopen_self_static=yes ;;
-      x$lt_dlneed_uscore) lt_cv_dlopen_self_static=yes ;;
-      x$lt_dlunknown|x*) lt_cv_dlopen_self_static=no ;;
-    esac
-  else :
-    # compilation failed
-    lt_cv_dlopen_self_static=no
-  fi
-fi
-rm -fr conftest*
-
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $lt_cv_dlopen_self_static" >&5
-printf "%s\n" "$lt_cv_dlopen_self_static" >&6; }
-    fi
-
-    CPPFLAGS=$save_CPPFLAGS
-    LDFLAGS=$save_LDFLAGS
-    LIBS=$save_LIBS
-    ;;
-  esac
-
-  case $lt_cv_dlopen_self in
-  yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;;
-  *) enable_dlopen_self=unknown ;;
-  esac
-
-  case $lt_cv_dlopen_self_static in
-  yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;;
-  *) enable_dlopen_self_static=unknown ;;
-  esac
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-striplib=
-old_striplib=
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether stripping libraries is possible" >&5
-printf %s "checking whether stripping libraries is possible... " >&6; }
-if test -z "$STRIP"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-else
-  if $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then
-    old_striplib="$STRIP --strip-debug"
-    striplib="$STRIP --strip-unneeded"
-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf "%s\n" "yes" >&6; }
-  else
-    case $host_os in
-    darwin*)
-      # FIXME - insert some real tests, host_os isn't really good enough
-      striplib="$STRIP -x"
-      old_striplib="$STRIP -S"
-      { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf "%s\n" "yes" >&6; }
-      ;;
-    freebsd*)
-      if $STRIP -V 2>&1 | $GREP "elftoolchain" >/dev/null; then
-        old_striplib="$STRIP --strip-debug"
-        striplib="$STRIP --strip-unneeded"
-        { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf "%s\n" "yes" >&6; }
-      else
-        { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-      fi
-      ;;
-    *)
-      { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-      ;;
-    esac
-  fi
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-  # Report what library types will actually be built
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if libtool supports shared libraries" >&5
-printf %s "checking if libtool supports shared libraries... " >&6; }
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $can_build_shared" >&5
-printf "%s\n" "$can_build_shared" >&6; }
-
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether to build shared libraries" >&5
-printf %s "checking whether to build shared libraries... " >&6; }
-  test no = "$can_build_shared" && enable_shared=no
-
-  # On AIX, shared libraries and static libraries use the same namespace, and
-  # are all built from PIC.
-  case $host_os in
-  aix3*)
-    test yes = "$enable_shared" && enable_static=no
-    if test -n "$RANLIB"; then
-      archive_cmds="$archive_cmds~\$RANLIB \$lib"
-      postinstall_cmds='$RANLIB $lib'
-    fi
-    ;;
-
-  aix[4-9]*)
-    if test ia64 != "$host_cpu"; then
-      case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
-      yes,aix,yes) ;;			# shared object as lib.so file only
-      yes,svr4,*) ;;			# shared object as lib.so archive member only
-      yes,*) enable_static=no ;;	# shared object in lib.a archive as well
-      esac
-    fi
-    ;;
-  esac
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $enable_shared" >&5
-printf "%s\n" "$enable_shared" >&6; }
-
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether to build static libraries" >&5
-printf %s "checking whether to build static libraries... " >&6; }
-  # Make sure either enable_shared or enable_static is yes.
-  test yes = "$enable_shared" || enable_static=yes
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $enable_static" >&5
-printf "%s\n" "$enable_static" >&6; }
-
-
-
-
-fi
-ac_ext=c
-ac_cpp='$CPP $CPPFLAGS'
-ac_compile='$CC -c $CFLAGS $CPPFLAGS conftest.$ac_ext >&5'
-ac_link='$CC -o conftest$ac_exeext $CFLAGS $CPPFLAGS $LDFLAGS conftest.$ac_ext $LIBS >&5'
-ac_compiler_gnu=$ac_cv_c_compiler_gnu
-
-CC=$lt_save_CC
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-        ac_config_commands="$ac_config_commands libtool"
-
-
-
-
-# Only expand once:
-
-
-
-# Require xorg-macros 1.8 or later for MAN_SUBSTS set by XORG_MANPAGE_SECTIONS
-
-
-
-
-
-
-
-
-
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $CC options needed to detect all undeclared functions" >&5
-printf %s "checking for $CC options needed to detect all undeclared functions... " >&6; }
-if test ${ac_cv_c_undeclared_builtin_options+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  ac_save_CFLAGS=$CFLAGS
-   ac_cv_c_undeclared_builtin_options='cannot detect'
-   for ac_arg in '' -fno-builtin; do
-     CFLAGS="$ac_save_CFLAGS $ac_arg"
-     # This test program should *not* compile successfully.
-     cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-
-int
-main (void)
-{
-(void) strchr;
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-
-else $as_nop
-  # This test program should compile successfully.
-        # No library function is consistently available on
-        # freestanding implementations, so test against a dummy
-        # declaration.  Include always-available headers on the
-        # off chance that they somehow elicit warnings.
-        cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-#include <float.h>
-#include <limits.h>
-#include <stdarg.h>
-#include <stddef.h>
-extern void ac_decl (int, char *);
-
-int
-main (void)
-{
-(void) ac_decl (0, (char *) 0);
-  (void) ac_decl;
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  if test x"$ac_arg" = x
-then :
-  ac_cv_c_undeclared_builtin_options='none needed'
-else $as_nop
-  ac_cv_c_undeclared_builtin_options=$ac_arg
-fi
-          break
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-    done
-    CFLAGS=$ac_save_CFLAGS
-
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_c_undeclared_builtin_options" >&5
-printf "%s\n" "$ac_cv_c_undeclared_builtin_options" >&6; }
-  case $ac_cv_c_undeclared_builtin_options in #(
-  'cannot detect') :
-    { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "cannot make $CC report undeclared builtins
-See \`config.log' for more details" "$LINENO" 5; } ;; #(
-  'none needed') :
-    ac_c_undeclared_builtin_options='' ;; #(
-  *) :
-    ac_c_undeclared_builtin_options=$ac_cv_c_undeclared_builtin_options ;;
-esac
-
-
-
-
-
-ac_fn_check_decl "$LINENO" "__clang__" "ac_cv_have_decl___clang__" "$ac_includes_default" "$ac_c_undeclared_builtin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___clang__" = xyes
-then :
-  CLANGCC="yes"
-else $as_nop
-  CLANGCC="no"
-fi
-ac_fn_check_decl "$LINENO" "__INTEL_COMPILER" "ac_cv_have_decl___INTEL_COMPILER" "$ac_includes_default" "$ac_c_undeclared_builtin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___INTEL_COMPILER" = xyes
-then :
-  INTELCC="yes"
-else $as_nop
-  INTELCC="no"
-fi
-ac_fn_check_decl "$LINENO" "__SUNPRO_C" "ac_cv_have_decl___SUNPRO_C" "$ac_includes_default" "$ac_c_undeclared_builtin_options" "CFLAGS"
-if test "x$ac_cv_have_decl___SUNPRO_C" = xyes
-then :
-  SUNCC="yes"
-else $as_nop
-  SUNCC="no"
-fi
-
-
-
-
-
-
-
-
-if test "x$ac_cv_env_PKG_CONFIG_set" != "xset"; then
-	if test -n "$ac_tool_prefix"; then
-  # Extract the first word of "${ac_tool_prefix}pkg-config", so it can be a program name with args.
-set dummy ${ac_tool_prefix}pkg-config; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_PKG_CONFIG+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  case $PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_PKG_CONFIG="$PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac
-fi
-PKG_CONFIG=$ac_cv_path_PKG_CONFIG
-if test -n "$PKG_CONFIG"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $PKG_CONFIG" >&5
-printf "%s\n" "$PKG_CONFIG" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-
-fi
-if test -z "$ac_cv_path_PKG_CONFIG"; then
-  ac_pt_PKG_CONFIG=$PKG_CONFIG
-  # Extract the first word of "pkg-config", so it can be a program name with args.
-set dummy pkg-config; ac_word=$2
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for $ac_word" >&5
-printf %s "checking for $ac_word... " >&6; }
-if test ${ac_cv_path_ac_pt_PKG_CONFIG+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  case $ac_pt_PKG_CONFIG in
-  [\\/]* | ?:[\\/]*)
-  ac_cv_path_ac_pt_PKG_CONFIG="$ac_pt_PKG_CONFIG" # Let the user override the test with a path.
-  ;;
-  *)
-  as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    for ac_exec_ext in '' $ac_executable_extensions; do
-  if as_fn_executable_p "$as_dir$ac_word$ac_exec_ext"; then
-    ac_cv_path_ac_pt_PKG_CONFIG="$as_dir$ac_word$ac_exec_ext"
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: found $as_dir$ac_word$ac_exec_ext" >&5
-    break 2
-  fi
-done
-  done
-IFS=$as_save_IFS
-
-  ;;
-esac
-fi
-ac_pt_PKG_CONFIG=$ac_cv_path_ac_pt_PKG_CONFIG
-if test -n "$ac_pt_PKG_CONFIG"; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_pt_PKG_CONFIG" >&5
-printf "%s\n" "$ac_pt_PKG_CONFIG" >&6; }
-else
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-fi
-
-  if test "x$ac_pt_PKG_CONFIG" = x; then
-    PKG_CONFIG=""
-  else
-    case $cross_compiling:$ac_tool_warned in
-yes:)
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: using cross tools not prefixed with host triplet" >&5
-printf "%s\n" "$as_me: WARNING: using cross tools not prefixed with host triplet" >&2;}
-ac_tool_warned=yes ;;
-esac
-    PKG_CONFIG=$ac_pt_PKG_CONFIG
-  fi
-else
-  PKG_CONFIG="$ac_cv_path_PKG_CONFIG"
-fi
-
-fi
-if test -n "$PKG_CONFIG"; then
-	_pkg_min_version=0.9.0
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking pkg-config is at least version $_pkg_min_version" >&5
-printf %s "checking pkg-config is at least version $_pkg_min_version... " >&6; }
-	if $PKG_CONFIG --atleast-pkgconfig-version $_pkg_min_version; then
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf "%s\n" "yes" >&6; }
-	else
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-		PKG_CONFIG=""
-	fi
-fi
-
-
-
-
-
-# Check whether --enable-selective-werror was given.
-if test ${enable_selective_werror+y}
-then :
-  enableval=$enable_selective_werror; SELECTIVE_WERROR=$enableval
-else $as_nop
-  SELECTIVE_WERROR=yes
-fi
-
-
-
-
-
-# -v is too short to test reliably with XORG_TESTSET_CFLAG
-if test "x$SUNCC" = "xyes"; then
-    BASE_CFLAGS="-v"
-else
-    BASE_CFLAGS=""
-fi
-
-# This chunk of warnings were those that existed in the legacy CWARNFLAGS
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wall"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wall" >&5
-printf %s "checking if $CC supports -Wall... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wall
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wall"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wpointer-arith"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-arith" >&5
-printf %s "checking if $CC supports -Wpointer-arith... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wpointer_arith
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wpointer-arith"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-declarations"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-declarations" >&5
-printf %s "checking if $CC supports -Wmissing-declarations... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_declarations
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-declarations"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wformat=2"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat=2" >&5
-printf %s "checking if $CC supports -Wformat=2... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wformat_2
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wformat=2"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wformat"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wformat" >&5
-printf %s "checking if $CC supports -Wformat... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wformat
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wformat"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wstrict-prototypes"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wstrict-prototypes" >&5
-printf %s "checking if $CC supports -Wstrict-prototypes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wstrict_prototypes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wstrict-prototypes"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-prototypes"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-prototypes" >&5
-printf %s "checking if $CC supports -Wmissing-prototypes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_prototypes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-prototypes"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wnested-externs"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wnested-externs" >&5
-printf %s "checking if $CC supports -Wnested-externs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wnested_externs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wnested-externs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wbad-function-cast"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wbad-function-cast" >&5
-printf %s "checking if $CC supports -Wbad-function-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wbad_function_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wbad-function-cast"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wold-style-definition"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wold-style-definition" >&5
-printf %s "checking if $CC supports -Wold-style-definition... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wold_style_definition
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wold-style-definition"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -fd"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -fd" >&5
-printf %s "checking if $CC supports -fd... " >&6; }
-		cacheid=xorg_cv_cc_flag__fd
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -fd"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wdeclaration-after-statement"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wdeclaration-after-statement" >&5
-printf %s "checking if $CC supports -Wdeclaration-after-statement... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wdeclaration_after_statement
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wdeclaration-after-statement"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-# This chunk adds additional warnings that could catch undesired effects.
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wunused"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wunused" >&5
-printf %s "checking if $CC supports -Wunused... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wunused
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wunused"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wuninitialized"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wuninitialized" >&5
-printf %s "checking if $CC supports -Wuninitialized... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wuninitialized
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wuninitialized"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wshadow"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wshadow" >&5
-printf %s "checking if $CC supports -Wshadow... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wshadow
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wshadow"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-noreturn"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-noreturn" >&5
-printf %s "checking if $CC supports -Wmissing-noreturn... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_noreturn
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-noreturn"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-format-attribute"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-format-attribute" >&5
-printf %s "checking if $CC supports -Wmissing-format-attribute... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_format_attribute
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-format-attribute"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wredundant-decls"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wredundant-decls" >&5
-printf %s "checking if $CC supports -Wredundant-decls... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wredundant_decls
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wredundant-decls"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wlogical-op"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wlogical-op" >&5
-printf %s "checking if $CC supports -Wlogical-op... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wlogical_op
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wlogical-op"
-			found="yes"
-		fi
-	fi
-
-
-
-# These are currently disabled because they are noisy.  They will be enabled
-# in the future once the codebase is sufficiently modernized to silence
-# them.  For now, I don't want them to drown out the other warnings.
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wparentheses])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-align])
-# XORG_TESTSET_CFLAG([[BASE_]PREFIX[FLAGS]], [-Wcast-qual])
-
-# Turn some warnings into errors, so we don't accidentally get successful builds
-# when there are problems that should be fixed.
-
-if test "x$SELECTIVE_WERROR" = "xyes" ; then
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=implicit"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=implicit" >&5
-printf %s "checking if $CC supports -Werror=implicit... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_implicit
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=implicit"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED" >&5
-printf %s "checking if $CC supports -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_NO_EXPLICIT_TYPE_GIVEN__errwarn_E_NO_IMPLICIT_DECL_ALLOWED
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_NO_EXPLICIT_TYPE_GIVEN -errwarn=E_NO_IMPLICIT_DECL_ALLOWED"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=nonnull"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=nonnull" >&5
-printf %s "checking if $CC supports -Werror=nonnull... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_nonnull
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=nonnull"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=init-self"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=init-self" >&5
-printf %s "checking if $CC supports -Werror=init-self... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_init_self
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=init-self"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=main"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=main" >&5
-printf %s "checking if $CC supports -Werror=main... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_main
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=main"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=missing-braces"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=missing-braces" >&5
-printf %s "checking if $CC supports -Werror=missing-braces... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_missing_braces
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=missing-braces"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=sequence-point"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=sequence-point" >&5
-printf %s "checking if $CC supports -Werror=sequence-point... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_sequence_point
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=sequence-point"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=return-type"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=return-type" >&5
-printf %s "checking if $CC supports -Werror=return-type... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_return_type
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=return-type"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_FUNC_HAS_NO_RETURN_STMT"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_FUNC_HAS_NO_RETURN_STMT" >&5
-printf %s "checking if $CC supports -errwarn=E_FUNC_HAS_NO_RETURN_STMT... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_FUNC_HAS_NO_RETURN_STMT
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_FUNC_HAS_NO_RETURN_STMT"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=trigraphs"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=trigraphs" >&5
-printf %s "checking if $CC supports -Werror=trigraphs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_trigraphs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=trigraphs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=array-bounds"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=array-bounds" >&5
-printf %s "checking if $CC supports -Werror=array-bounds... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_array_bounds
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=array-bounds"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=write-strings"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=write-strings" >&5
-printf %s "checking if $CC supports -Werror=write-strings... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_write_strings
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=write-strings"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=address"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=address" >&5
-printf %s "checking if $CC supports -Werror=address... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_address
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=address"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=int-to-pointer-cast"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=int-to-pointer-cast" >&5
-printf %s "checking if $CC supports -Werror=int-to-pointer-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_int_to_pointer_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=int-to-pointer-cast"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn=E_BAD_PTR_INT_COMBINATION"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn=E_BAD_PTR_INT_COMBINATION" >&5
-printf %s "checking if $CC supports -errwarn=E_BAD_PTR_INT_COMBINATION... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn_E_BAD_PTR_INT_COMBINATION
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -errwarn=E_BAD_PTR_INT_COMBINATION"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=pointer-to-int-cast"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=pointer-to-int-cast" >&5
-printf %s "checking if $CC supports -Werror=pointer-to-int-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_pointer_to_int_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Werror=pointer-to-int-cast"
-			found="yes"
-		fi
-	fi
-
- # Also -errwarn=E_BAD_PTR_INT_COMBINATION
-else
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT" >&5
-printf "%s\n" "$as_me: WARNING: You have chosen not to turn some select compiler warnings into errors.  This should not be necessary.  Please report why you needed to do so in a bug report at $PACKAGE_BUGREPORT" >&2;}
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wimplicit"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wimplicit" >&5
-printf %s "checking if $CC supports -Wimplicit... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wimplicit
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wimplicit"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wnonnull"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wnonnull" >&5
-printf %s "checking if $CC supports -Wnonnull... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wnonnull
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wnonnull"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Winit-self"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Winit-self" >&5
-printf %s "checking if $CC supports -Winit-self... " >&6; }
-		cacheid=xorg_cv_cc_flag__Winit_self
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Winit-self"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmain"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmain" >&5
-printf %s "checking if $CC supports -Wmain... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmain
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmain"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wmissing-braces"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wmissing-braces" >&5
-printf %s "checking if $CC supports -Wmissing-braces... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wmissing_braces
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wmissing-braces"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wsequence-point"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wsequence-point" >&5
-printf %s "checking if $CC supports -Wsequence-point... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wsequence_point
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wsequence-point"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wreturn-type"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wreturn-type" >&5
-printf %s "checking if $CC supports -Wreturn-type... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wreturn_type
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wreturn-type"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wtrigraphs"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wtrigraphs" >&5
-printf %s "checking if $CC supports -Wtrigraphs... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wtrigraphs
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wtrigraphs"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Warray-bounds"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Warray-bounds" >&5
-printf %s "checking if $CC supports -Warray-bounds... " >&6; }
-		cacheid=xorg_cv_cc_flag__Warray_bounds
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Warray-bounds"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wwrite-strings"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wwrite-strings" >&5
-printf %s "checking if $CC supports -Wwrite-strings... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wwrite_strings
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wwrite-strings"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Waddress"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Waddress" >&5
-printf %s "checking if $CC supports -Waddress... " >&6; }
-		cacheid=xorg_cv_cc_flag__Waddress
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Waddress"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wint-to-pointer-cast"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wint-to-pointer-cast" >&5
-printf %s "checking if $CC supports -Wint-to-pointer-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wint_to_pointer_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wint-to-pointer-cast"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Wpointer-to-int-cast"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Wpointer-to-int-cast" >&5
-printf %s "checking if $CC supports -Wpointer-to-int-cast... " >&6; }
-		cacheid=xorg_cv_cc_flag__Wpointer_to_int_cast
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			BASE_CFLAGS="$BASE_CFLAGS -Wpointer-to-int-cast"
-			found="yes"
-		fi
-	fi
-
-
-fi
-
-
-
-
-
-
-
-		CWARNFLAGS="$BASE_CFLAGS"
-		if  test "x$GCC" = xyes ; then
-		    CWARNFLAGS="$CWARNFLAGS -fno-strict-aliasing"
-		fi
-
-
-
-
-
-
-
-
-# Check whether --enable-strict-compilation was given.
-if test ${enable_strict_compilation+y}
-then :
-  enableval=$enable_strict_compilation; STRICT_COMPILE=$enableval
-else $as_nop
-  STRICT_COMPILE=no
-fi
-
-
-
-
-
-
-STRICT_CFLAGS=""
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -pedantic"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -pedantic" >&5
-printf %s "checking if $CC supports -pedantic... " >&6; }
-		cacheid=xorg_cv_cc_flag__pedantic
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -pedantic"
-			found="yes"
-		fi
-	fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror" >&5
-printf %s "checking if $CC supports -Werror... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -Werror"
-			found="yes"
-		fi
-	fi
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -errwarn"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -errwarn" >&5
-printf %s "checking if $CC supports -errwarn... " >&6; }
-		cacheid=xorg_cv_cc_flag__errwarn
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -errwarn"
-			found="yes"
-		fi
-	fi
-
-
-
-# Earlier versions of gcc (eg: 4.2) support -Werror=attributes, but do not
-# activate it with -Werror, so we add it here explicitly.
-
-
-
-
-
-
-
-
-
-
-
-
-
-xorg_testset_save_CFLAGS="$CFLAGS"
-
-if test "x$xorg_testset_cc_unknown_warning_option" = "x" ; then
-	CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unknown-warning-option" >&5
-printf %s "checking if $CC supports -Werror=unknown-warning-option... " >&6; }
-if test ${xorg_cv_cc_flag_unknown_warning_option+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unknown_warning_option=yes
-else $as_nop
-  xorg_cv_cc_flag_unknown_warning_option=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unknown_warning_option" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unknown_warning_option" >&6; }
-	xorg_testset_cc_unknown_warning_option=$xorg_cv_cc_flag_unknown_warning_option
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-if test "x$xorg_testset_cc_unused_command_line_argument" = "x" ; then
-	if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-		CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-	fi
-	CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=unused-command-line-argument" >&5
-printf %s "checking if $CC supports -Werror=unused-command-line-argument... " >&6; }
-if test ${xorg_cv_cc_flag_unused_command_line_argument+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-_ACEOF
-if ac_fn_c_try_compile "$LINENO"
-then :
-  xorg_cv_cc_flag_unused_command_line_argument=yes
-else $as_nop
-  xorg_cv_cc_flag_unused_command_line_argument=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam conftest.$ac_ext
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $xorg_cv_cc_flag_unused_command_line_argument" >&5
-printf "%s\n" "$xorg_cv_cc_flag_unused_command_line_argument" >&6; }
-	xorg_testset_cc_unused_command_line_argument=$xorg_cv_cc_flag_unused_command_line_argument
-	CFLAGS="$xorg_testset_save_CFLAGS"
-fi
-
-found="no"
-
-	if test $found = "no" ; then
-		if test "x$xorg_testset_cc_unknown_warning_option" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unknown-warning-option"
-		fi
-
-		if test "x$xorg_testset_cc_unused_command_line_argument" = "xyes" ; then
-			CFLAGS="$CFLAGS -Werror=unused-command-line-argument"
-		fi
-
-		CFLAGS="$CFLAGS -Werror=attributes"
-
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking if $CC supports -Werror=attributes" >&5
-printf %s "checking if $CC supports -Werror=attributes... " >&6; }
-		cacheid=xorg_cv_cc_flag__Werror_attributes
-		if eval test \${$cacheid+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  cat confdefs.h - <<_ACEOF >conftest.$ac_ext
-/* end confdefs.h.  */
-int i;
-int
-main (void)
-{
-
-  ;
-  return 0;
-}
-_ACEOF
-if ac_fn_c_try_link "$LINENO"
-then :
-  eval $cacheid=yes
-else $as_nop
-  eval $cacheid=no
-fi
-rm -f core conftest.err conftest.$ac_objext conftest.beam \
-    conftest$ac_exeext conftest.$ac_ext
-fi
-
-
-		CFLAGS="$xorg_testset_save_CFLAGS"
-
-		eval supported=\$$cacheid
-		{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $supported" >&5
-printf "%s\n" "$supported" >&6; }
-		if test "$supported" = "yes" ; then
-			STRICT_CFLAGS="$STRICT_CFLAGS -Werror=attributes"
-			found="yes"
-		fi
-	fi
-
-
-
-if test "x$STRICT_COMPILE" = "xyes"; then
-    BASE_CFLAGS="$BASE_CFLAGS $STRICT_CFLAGS"
-    CWARNFLAGS="$CWARNFLAGS $STRICT_CFLAGS"
-fi
-
-
-
-
-
-
-
-
-cat >>confdefs.h <<_ACEOF
-#define PACKAGE_VERSION_MAJOR `echo $PACKAGE_VERSION | cut -d . -f 1`
-_ACEOF
-
-	PVM=`echo $PACKAGE_VERSION | cut -d . -f 2 | cut -d - -f 1`
-	if test "x$PVM" = "x"; then
-		PVM="0"
-	fi
-
-printf "%s\n" "#define PACKAGE_VERSION_MINOR $PVM" >>confdefs.h
-
-	PVP=`echo $PACKAGE_VERSION | cut -d . -f 3 | cut -d - -f 1`
-	if test "x$PVP" = "x"; then
-		PVP="0"
-	fi
-
-printf "%s\n" "#define PACKAGE_VERSION_PATCHLEVEL $PVP" >>confdefs.h
-
-
-
-CHANGELOG_CMD="((GIT_DIR=\$(top_srcdir)/.git git log > \$(top_srcdir)/.changelog.tmp) 2>/dev/null && \
-mv \$(top_srcdir)/.changelog.tmp \$(top_srcdir)/ChangeLog) \
-|| (rm -f \$(top_srcdir)/.changelog.tmp; test -e \$(top_srcdir)/ChangeLog || ( \
-touch \$(top_srcdir)/ChangeLog; \
-echo 'git failed to create ChangeLog: installing empty ChangeLog.' >&2))"
-
-
-
-
-macros_datadir=`$PKG_CONFIG --print-errors --variable=pkgdatadir xorg-macros`
-INSTALL_CMD="(cp -f "$macros_datadir/INSTALL" \$(top_srcdir)/.INSTALL.tmp && \
-mv \$(top_srcdir)/.INSTALL.tmp \$(top_srcdir)/INSTALL) \
-|| (rm -f \$(top_srcdir)/.INSTALL.tmp; test -e \$(top_srcdir)/INSTALL || ( \
-touch \$(top_srcdir)/INSTALL; \
-echo 'failed to copy INSTALL from util-macros: installing empty INSTALL.' >&2))"
-
-
-
-
-
-
-case $host_os in
-    solaris*)
-        # Solaris 2.0 - 11.3 use SysV man page section numbers, so we
-        # check for a man page file found in later versions that use
-        # traditional section numbers instead
-        { printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for /usr/share/man/man7/attributes.7" >&5
-printf %s "checking for /usr/share/man/man7/attributes.7... " >&6; }
-if test ${ac_cv_file__usr_share_man_man7_attributes_7+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  test "$cross_compiling" = yes &&
-  as_fn_error $? "cannot check for file existence when cross compiling" "$LINENO" 5
-if test -r "/usr/share/man/man7/attributes.7"; then
-  ac_cv_file__usr_share_man_man7_attributes_7=yes
-else
-  ac_cv_file__usr_share_man_man7_attributes_7=no
-fi
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $ac_cv_file__usr_share_man_man7_attributes_7" >&5
-printf "%s\n" "$ac_cv_file__usr_share_man_man7_attributes_7" >&6; }
-if test "x$ac_cv_file__usr_share_man_man7_attributes_7" = xyes
-then :
-  SYSV_MAN_SECTIONS=false
-else $as_nop
-  SYSV_MAN_SECTIONS=true
-fi
-
-        ;;
-    *) SYSV_MAN_SECTIONS=false ;;
-esac
-
-if test x$APP_MAN_SUFFIX = x    ; then
-    APP_MAN_SUFFIX=1
-fi
-if test x$APP_MAN_DIR = x    ; then
-    APP_MAN_DIR='$(mandir)/man$(APP_MAN_SUFFIX)'
-fi
-
-if test x$LIB_MAN_SUFFIX = x    ; then
-    LIB_MAN_SUFFIX=3
-fi
-if test x$LIB_MAN_DIR = x    ; then
-    LIB_MAN_DIR='$(mandir)/man$(LIB_MAN_SUFFIX)'
-fi
-
-if test x$FILE_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				FILE_MAN_SUFFIX=4  ;;
-	*)				FILE_MAN_SUFFIX=5  ;;
-    esac
-fi
-if test x$FILE_MAN_DIR = x    ; then
-    FILE_MAN_DIR='$(mandir)/man$(FILE_MAN_SUFFIX)'
-fi
-
-if test x$MISC_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				MISC_MAN_SUFFIX=5  ;;
-	*)				MISC_MAN_SUFFIX=7  ;;
-    esac
-fi
-if test x$MISC_MAN_DIR = x    ; then
-    MISC_MAN_DIR='$(mandir)/man$(MISC_MAN_SUFFIX)'
-fi
-
-if test x$DRIVER_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				DRIVER_MAN_SUFFIX=7  ;;
-	*)				DRIVER_MAN_SUFFIX=4  ;;
-    esac
-fi
-if test x$DRIVER_MAN_DIR = x    ; then
-    DRIVER_MAN_DIR='$(mandir)/man$(DRIVER_MAN_SUFFIX)'
-fi
-
-if test x$ADMIN_MAN_SUFFIX = x    ; then
-    case $SYSV_MAN_SECTIONS in
-	true)				ADMIN_MAN_SUFFIX=1m ;;
-	*)				ADMIN_MAN_SUFFIX=8  ;;
-    esac
-fi
-if test x$ADMIN_MAN_DIR = x    ; then
-    ADMIN_MAN_DIR='$(mandir)/man$(ADMIN_MAN_SUFFIX)'
-fi
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-XORG_MAN_PAGE="X Version 11"
-
-MAN_SUBSTS="\
-	-e 's|__vendorversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xorgversion__|\"\$(PACKAGE_STRING)\" \"\$(XORG_MAN_PAGE)\"|' \
-	-e 's|__xservername__|Xorg|g' \
-	-e 's|__xconfigfile__|xorg.conf|g' \
-	-e 's|__projectroot__|\$(prefix)|g' \
-	-e 's|__apploaddir__|\$(appdefaultdir)|g' \
-	-e 's|__appmansuffix__|\$(APP_MAN_SUFFIX)|g' \
-	-e 's|__drivermansuffix__|\$(DRIVER_MAN_SUFFIX)|g' \
-	-e 's|__adminmansuffix__|\$(ADMIN_MAN_SUFFIX)|g' \
-	-e 's|__libmansuffix__|\$(LIB_MAN_SUFFIX)|g' \
-	-e 's|__miscmansuffix__|\$(MISC_MAN_SUFFIX)|g' \
-	-e 's|__filemansuffix__|\$(FILE_MAN_SUFFIX)|g'"
-
-
-
-# Check whether --enable-silent-rules was given.
-if test ${enable_silent_rules+y}
-then :
-  enableval=$enable_silent_rules;
-fi
-
-case $enable_silent_rules in # (((
-  yes) AM_DEFAULT_VERBOSITY=0;;
-   no) AM_DEFAULT_VERBOSITY=1;;
-    *) AM_DEFAULT_VERBOSITY=0;;
-esac
-am_make=${MAKE-make}
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking whether $am_make supports nested variables" >&5
-printf %s "checking whether $am_make supports nested variables... " >&6; }
-if test ${am_cv_make_support_nested_variables+y}
-then :
-  printf %s "(cached) " >&6
-else $as_nop
-  if printf "%s\n" 'TRUE=$(BAR$(V))
-BAR0=false
-BAR1=true
-V=1
-am__doit:
-	@$(TRUE)
-.PHONY: am__doit' | $am_make -f - >/dev/null 2>&1; then
-  am_cv_make_support_nested_variables=yes
-else
-  am_cv_make_support_nested_variables=no
-fi
-fi
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: $am_cv_make_support_nested_variables" >&5
-printf "%s\n" "$am_cv_make_support_nested_variables" >&6; }
-if test $am_cv_make_support_nested_variables = yes; then
-    AM_V='$(V)'
-  AM_DEFAULT_V='$(AM_DEFAULT_VERBOSITY)'
-else
-  AM_V=$AM_DEFAULT_VERBOSITY
-  AM_DEFAULT_V=$AM_DEFAULT_VERBOSITY
-fi
-AM_BACKSLASH='\'
-
-
-
-
-# Check fixesext configuration, strip extra digits from package version to
-# find the required protocol version
-FIXESEXT_VERSION=`echo $VERSION | sed 's/^\([0-9][0-9]*\.[0-9][0-9]*\).*$/\1/'`
-
-
-# Obtain compiler/linker options for dependencies
-
-pkg_failed=no
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking for FIXESEXT" >&5
-printf %s "checking for FIXESEXT... " >&6; }
-
-if test -n "$FIXESEXT_CFLAGS"; then
-    pkg_cv_FIXESEXT_CFLAGS="$FIXESEXT_CFLAGS"
- elif test -n "$PKG_CONFIG"; then
-    if test -n "$PKG_CONFIG" && \
-    { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xproto >= 7.0.22 fixesproto >= \$FIXESEXT_VERSION xextproto x11 >= 1.6\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xproto >= 7.0.22 fixesproto >= $FIXESEXT_VERSION xextproto x11 >= 1.6") 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  pkg_cv_FIXESEXT_CFLAGS=`$PKG_CONFIG --cflags "xproto >= 7.0.22 fixesproto >= $FIXESEXT_VERSION xextproto x11 >= 1.6" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes
-else
-  pkg_failed=yes
-fi
- else
-    pkg_failed=untried
-fi
-if test -n "$FIXESEXT_LIBS"; then
-    pkg_cv_FIXESEXT_LIBS="$FIXESEXT_LIBS"
- elif test -n "$PKG_CONFIG"; then
-    if test -n "$PKG_CONFIG" && \
-    { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$PKG_CONFIG --exists --print-errors \"xproto >= 7.0.22 fixesproto >= \$FIXESEXT_VERSION xextproto x11 >= 1.6\""; } >&5
-  ($PKG_CONFIG --exists --print-errors "xproto >= 7.0.22 fixesproto >= $FIXESEXT_VERSION xextproto x11 >= 1.6") 2>&5
-  ac_status=$?
-  printf "%s\n" "$as_me:${as_lineno-$LINENO}: \$? = $ac_status" >&5
-  test $ac_status = 0; }; then
-  pkg_cv_FIXESEXT_LIBS=`$PKG_CONFIG --libs "xproto >= 7.0.22 fixesproto >= $FIXESEXT_VERSION xextproto x11 >= 1.6" 2>/dev/null`
-		      test "x$?" != "x0" && pkg_failed=yes
-else
-  pkg_failed=yes
-fi
- else
-    pkg_failed=untried
-fi
-
-
-
-if test $pkg_failed = yes; then
-   	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-
-if $PKG_CONFIG --atleast-pkgconfig-version 0.20; then
-        _pkg_short_errors_supported=yes
-else
-        _pkg_short_errors_supported=no
-fi
-        if test $_pkg_short_errors_supported = yes; then
-	        FIXESEXT_PKG_ERRORS=`$PKG_CONFIG --short-errors --print-errors --cflags --libs "xproto >= 7.0.22 fixesproto >= $FIXESEXT_VERSION xextproto x11 >= 1.6" 2>&1`
-        else
-	        FIXESEXT_PKG_ERRORS=`$PKG_CONFIG --print-errors --cflags --libs "xproto >= 7.0.22 fixesproto >= $FIXESEXT_VERSION xextproto x11 >= 1.6" 2>&1`
-        fi
-	# Put the nasty error message in config.log where it belongs
-	echo "$FIXESEXT_PKG_ERRORS" >&5
-
-	as_fn_error $? "Package requirements (xproto >= 7.0.22 fixesproto >= $FIXESEXT_VERSION xextproto x11 >= 1.6) were not met:
-
-$FIXESEXT_PKG_ERRORS
-
-Consider adjusting the PKG_CONFIG_PATH environment variable if you
-installed software in a non-standard prefix.
-
-Alternatively, you may set the environment variables FIXESEXT_CFLAGS
-and FIXESEXT_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details." "$LINENO" 5
-elif test $pkg_failed = untried; then
-     	{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: no" >&5
-printf "%s\n" "no" >&6; }
-	{ { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "The pkg-config script could not be found or is too old.  Make sure it
-is in your PATH or set the PKG_CONFIG environment variable to the full
-path to pkg-config.
-
-Alternatively, you may set the environment variables FIXESEXT_CFLAGS
-and FIXESEXT_LIBS to avoid the need to call pkg-config.
-See the pkg-config man page for more details.
-
-To get pkg-config, see <http://pkg-config.freedesktop.org/>.
-See \`config.log' for more details" "$LINENO" 5; }
-else
-	FIXESEXT_CFLAGS=$pkg_cv_FIXESEXT_CFLAGS
-	FIXESEXT_LIBS=$pkg_cv_FIXESEXT_LIBS
-        { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: yes" >&5
-printf "%s\n" "yes" >&6; }
-
-fi
-
-
-ac_config_files="$ac_config_files Makefile src/Makefile man/Makefile xfixes.pc"
-
-cat >confcache <<\_ACEOF
-# This file is a shell script that caches the results of configure
-# tests run on this system so they can be shared between configure
-# scripts and configure runs, see configure's option --config-cache.
-# It is not useful on other systems.  If it contains results you don't
-# want to keep, you may remove or edit it.
-#
-# config.status only pays attention to the cache file if you give it
-# the --recheck option to rerun configure.
-#
-# `ac_cv_env_foo' variables (set or unset) will be overridden when
-# loading this file, other *unset* `ac_cv_foo' will be assigned the
-# following values.
-
-_ACEOF
-
-# The following way of writing the cache mishandles newlines in values,
-# but we know of no workaround that is simple, portable, and efficient.
-# So, we kill variables containing newlines.
-# Ultrix sh set writes to stderr and can't be redirected directly,
-# and sets the high bit in the cache file unless we assign to the vars.
-(
-  for ac_var in `(set) 2>&1 | sed -n 's/^\([a-zA-Z_][a-zA-Z0-9_]*\)=.*/\1/p'`; do
-    eval ac_val=\$$ac_var
-    case $ac_val in #(
-    *${as_nl}*)
-      case $ac_var in #(
-      *_cv_*) { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: cache variable $ac_var contains a newline" >&5
-printf "%s\n" "$as_me: WARNING: cache variable $ac_var contains a newline" >&2;} ;;
-      esac
-      case $ac_var in #(
-      _ | IFS | as_nl) ;; #(
-      BASH_ARGV | BASH_SOURCE) eval $ac_var= ;; #(
-      *) { eval $ac_var=; unset $ac_var;} ;;
-      esac ;;
-    esac
-  done
-
-  (set) 2>&1 |
-    case $as_nl`(ac_space=' '; set) 2>&1` in #(
-    *${as_nl}ac_space=\ *)
-      # `set' does not quote correctly, so add quotes: double-quote
-      # substitution turns \\\\ into \\, and sed turns \\ into \.
-      sed -n \
-	"s/'/'\\\\''/g;
-	  s/^\\([_$as_cr_alnum]*_cv_[_$as_cr_alnum]*\\)=\\(.*\\)/\\1='\\2'/p"
-      ;; #(
-    *)
-      # `set' quotes correctly as required by POSIX, so do not add quotes.
-      sed -n "/^[_$as_cr_alnum]*_cv_[_$as_cr_alnum]*=/p"
-      ;;
-    esac |
-    sort
-) |
-  sed '
-     /^ac_cv_env_/b end
-     t clear
-     :clear
-     s/^\([^=]*\)=\(.*[{}].*\)$/test ${\1+y} || &/
-     t end
-     s/^\([^=]*\)=\(.*\)$/\1=${\1=\2}/
-     :end' >>confcache
-if diff "$cache_file" confcache >/dev/null 2>&1; then :; else
-  if test -w "$cache_file"; then
-    if test "x$cache_file" != "x/dev/null"; then
-      { printf "%s\n" "$as_me:${as_lineno-$LINENO}: updating cache $cache_file" >&5
-printf "%s\n" "$as_me: updating cache $cache_file" >&6;}
-      if test ! -f "$cache_file" || test -h "$cache_file"; then
-	cat confcache >"$cache_file"
-      else
-        case $cache_file in #(
-        */* | ?:*)
-	  mv -f confcache "$cache_file"$$ &&
-	  mv -f "$cache_file"$$ "$cache_file" ;; #(
-        *)
-	  mv -f confcache "$cache_file" ;;
-	esac
-      fi
-    fi
-  else
-    { printf "%s\n" "$as_me:${as_lineno-$LINENO}: not updating unwritable cache $cache_file" >&5
-printf "%s\n" "$as_me: not updating unwritable cache $cache_file" >&6;}
-  fi
-fi
-rm -f confcache
-
-test "x$prefix" = xNONE && prefix=$ac_default_prefix
-# Let make expand exec_prefix.
-test "x$exec_prefix" = xNONE && exec_prefix='${prefix}'
-
-DEFS=-DHAVE_CONFIG_H
-
-ac_libobjs=
-ac_ltlibobjs=
-U=
-for ac_i in : $LIBOBJS; do test "x$ac_i" = x: && continue
-  # 1. Remove the extension, and $U if already installed.
-  ac_script='s/\$U\././;s/\.o$//;s/\.obj$//'
-  ac_i=`printf "%s\n" "$ac_i" | sed "$ac_script"`
-  # 2. Prepend LIBOBJDIR.  When used with automake>=1.10 LIBOBJDIR
-  #    will be set to the directory where LIBOBJS objects are built.
-  as_fn_append ac_libobjs " \${LIBOBJDIR}$ac_i\$U.$ac_objext"
-  as_fn_append ac_ltlibobjs " \${LIBOBJDIR}$ac_i"'$U.lo'
-done
-LIBOBJS=$ac_libobjs
-
-LTLIBOBJS=$ac_ltlibobjs
-
-
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: checking that generated files are newer than configure" >&5
-printf %s "checking that generated files are newer than configure... " >&6; }
-   if test -n "$am_sleep_pid"; then
-     # Hide warnings about reused PIDs.
-     wait $am_sleep_pid 2>/dev/null
-   fi
-   { printf "%s\n" "$as_me:${as_lineno-$LINENO}: result: done" >&5
-printf "%s\n" "done" >&6; }
- if test -n "$EXEEXT"; then
-  am__EXEEXT_TRUE=
-  am__EXEEXT_FALSE='#'
-else
-  am__EXEEXT_TRUE='#'
-  am__EXEEXT_FALSE=
-fi
-
-if test -z "${AMDEP_TRUE}" && test -z "${AMDEP_FALSE}"; then
-  as_fn_error $? "conditional \"AMDEP\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-if test -z "${am__fastdepCC_TRUE}" && test -z "${am__fastdepCC_FALSE}"; then
-  as_fn_error $? "conditional \"am__fastdepCC\" was never defined.
-Usually this means the macro was only invoked conditionally." "$LINENO" 5
-fi
-
-: "${CONFIG_STATUS=./config.status}"
-ac_write_fail=0
-ac_clean_files_save=$ac_clean_files
-ac_clean_files="$ac_clean_files $CONFIG_STATUS"
-{ printf "%s\n" "$as_me:${as_lineno-$LINENO}: creating $CONFIG_STATUS" >&5
-printf "%s\n" "$as_me: creating $CONFIG_STATUS" >&6;}
-as_write_fail=0
-cat >$CONFIG_STATUS <<_ASEOF || as_write_fail=1
-#! $SHELL
-# Generated by $as_me.
-# Run this file to recreate the current configuration.
-# Compiler output produced by configure, useful for debugging
-# configure, is in config.log if it exists.
-
-debug=false
-ac_cs_recheck=false
-ac_cs_silent=false
-
-SHELL=\${CONFIG_SHELL-$SHELL}
-export SHELL
-_ASEOF
-cat >>$CONFIG_STATUS <<\_ASEOF || as_write_fail=1
-## -------------------- ##
-## M4sh Initialization. ##
-## -------------------- ##
-
-# Be more Bourne compatible
-DUALCASE=1; export DUALCASE # for MKS sh
-as_nop=:
-if test ${ZSH_VERSION+y} && (emulate sh) >/dev/null 2>&1
-then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # is contrary to our usage.  Disable this feature.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else $as_nop
-  case `(set -o) 2>/dev/null` in #(
-  *posix*) :
-    set -o posix ;; #(
-  *) :
-     ;;
-esac
-fi
-
-
-
-# Reset variables that may have inherited troublesome values from
-# the environment.
-
-# IFS needs to be set, to space, tab, and newline, in precisely that order.
-# (If _AS_PATH_WALK were called with IFS unset, it would have the
-# side effect of setting IFS to empty, thus disabling word splitting.)
-# Quoting is to prevent editors from complaining about space-tab.
-as_nl='
-'
-export as_nl
-IFS=" ""	$as_nl"
-
-PS1='$ '
-PS2='> '
-PS4='+ '
-
-# Ensure predictable behavior from utilities with locale-dependent output.
-LC_ALL=C
-export LC_ALL
-LANGUAGE=C
-export LANGUAGE
-
-# We cannot yet rely on "unset" to work, but we need these variables
-# to be unset--not just set to an empty or harmless value--now, to
-# avoid bugs in old shells (e.g. pre-3.0 UWIN ksh).  This construct
-# also avoids known problems related to "unset" and subshell syntax
-# in other old shells (e.g. bash 2.01 and pdksh 5.2.14).
-for as_var in BASH_ENV ENV MAIL MAILPATH CDPATH
-do eval test \${$as_var+y} \
-  && ( (unset $as_var) || exit 1) >/dev/null 2>&1 && unset $as_var || :
-done
-
-# Ensure that fds 0, 1, and 2 are open.
-if (exec 3>&0) 2>/dev/null; then :; else exec 0</dev/null; fi
-if (exec 3>&1) 2>/dev/null; then :; else exec 1>/dev/null; fi
-if (exec 3>&2)            ; then :; else exec 2>/dev/null; fi
-
-# The user is always right.
-if ${PATH_SEPARATOR+false} :; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# Find who we are.  Look in the path if we contain no directory separator.
-as_myself=
-case $0 in #((
-  *[\\/]* ) as_myself=$0 ;;
-  *) as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  case $as_dir in #(((
-    '') as_dir=./ ;;
-    */) ;;
-    *) as_dir=$as_dir/ ;;
-  esac
-    test -r "$as_dir$0" && as_myself=$as_dir$0 && break
-  done
-IFS=$as_save_IFS
-
-     ;;
-esac
-# We did not find ourselves, most probably we were run as `sh COMMAND'
-# in which case we are not to be found in the path.
-if test "x$as_myself" = x; then
-  as_myself=$0
-fi
-if test ! -f "$as_myself"; then
-  printf "%s\n" "$as_myself: error: cannot find myself; rerun with an absolute file name" >&2
-  exit 1
-fi
-
-
-
-# as_fn_error STATUS ERROR [LINENO LOG_FD]
-# ----------------------------------------
-# Output "`basename $0`: error: ERROR" to stderr. If LINENO and LOG_FD are
-# provided, also output the error to LOG_FD, referencing LINENO. Then exit the
-# script with STATUS, using 1 if that was 0.
-as_fn_error ()
-{
-  as_status=$1; test $as_status -eq 0 && as_status=1
-  if test "$4"; then
-    as_lineno=${as_lineno-"$3"} as_lineno_stack=as_lineno_stack=$as_lineno_stack
-    printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: $2" >&$4
-  fi
-  printf "%s\n" "$as_me: error: $2" >&2
-  as_fn_exit $as_status
-} # as_fn_error
-
-
-
-# as_fn_set_status STATUS
-# -----------------------
-# Set $? to STATUS, without forking.
-as_fn_set_status ()
-{
-  return $1
-} # as_fn_set_status
-
-# as_fn_exit STATUS
-# -----------------
-# Exit the shell with STATUS, even in a "trap 0" or "set -e" context.
-as_fn_exit ()
-{
-  set +e
-  as_fn_set_status $1
-  exit $1
-} # as_fn_exit
-
-# as_fn_unset VAR
-# ---------------
-# Portably unset VAR.
-as_fn_unset ()
-{
-  { eval $1=; unset $1;}
-}
-as_unset=as_fn_unset
-
-# as_fn_append VAR VALUE
-# ----------------------
-# Append the text in VALUE to the end of the definition contained in VAR. Take
-# advantage of any shell optimizations that allow amortized linear growth over
-# repeated appends, instead of the typical quadratic growth present in naive
-# implementations.
-if (eval "as_var=1; as_var+=2; test x\$as_var = x12") 2>/dev/null
-then :
-  eval 'as_fn_append ()
-  {
-    eval $1+=\$2
-  }'
-else $as_nop
-  as_fn_append ()
-  {
-    eval $1=\$$1\$2
-  }
-fi # as_fn_append
-
-# as_fn_arith ARG...
-# ------------------
-# Perform arithmetic evaluation on the ARGs, and store the result in the
-# global $as_val. Take advantage of shells that can avoid forks. The arguments
-# must be portable across $(()) and expr.
-if (eval "test \$(( 1 + 1 )) = 2") 2>/dev/null
-then :
-  eval 'as_fn_arith ()
-  {
-    as_val=$(( $* ))
-  }'
-else $as_nop
-  as_fn_arith ()
-  {
-    as_val=`expr "$@" || test $? -eq 1`
-  }
-fi # as_fn_arith
-
-
-if expr a : '\(a\)' >/dev/null 2>&1 &&
-   test "X`expr 00001 : '.*\(...\)'`" = X001; then
-  as_expr=expr
-else
-  as_expr=false
-fi
-
-if (basename -- /) >/dev/null 2>&1 && test "X`basename -- / 2>&1`" = "X/"; then
-  as_basename=basename
-else
-  as_basename=false
-fi
-
-if (as_dir=`dirname -- /` && test "X$as_dir" = X/) >/dev/null 2>&1; then
-  as_dirname=dirname
-else
-  as_dirname=false
-fi
-
-as_me=`$as_basename -- "$0" ||
-$as_expr X/"$0" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$0" : 'X\(//\)$' \| \
-	 X"$0" : 'X\(/\)' \| . 2>/dev/null ||
-printf "%s\n" X/"$0" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-
-# Avoid depending upon Character Ranges.
-as_cr_letters='abcdefghijklmnopqrstuvwxyz'
-as_cr_LETTERS='ABCDEFGHIJKLMNOPQRSTUVWXYZ'
-as_cr_Letters=$as_cr_letters$as_cr_LETTERS
-as_cr_digits='0123456789'
-as_cr_alnum=$as_cr_Letters$as_cr_digits
-
-
-# Determine whether it's possible to make 'echo' print without a newline.
-# These variables are no longer used directly by Autoconf, but are AC_SUBSTed
-# for compatibility with existing Makefiles.
-ECHO_C= ECHO_N= ECHO_T=
-case `echo -n x` in #(((((
--n*)
-  case `echo 'xy\c'` in
-  *c*) ECHO_T='	';;	# ECHO_T is single tab character.
-  xy)  ECHO_C='\c';;
-  *)   echo `echo ksh88 bug on AIX 6.1` > /dev/null
-       ECHO_T='	';;
-  esac;;
-*)
-  ECHO_N='-n';;
-esac
-
-# For backward compatibility with old third-party macros, we provide
-# the shell variables $as_echo and $as_echo_n.  New code should use
-# AS_ECHO(["message"]) and AS_ECHO_N(["message"]), respectively.
-as_echo='printf %s\n'
-as_echo_n='printf %s'
-
-rm -f conf$$ conf$$.exe conf$$.file
-if test -d conf$$.dir; then
-  rm -f conf$$.dir/conf$$.file
-else
-  rm -f conf$$.dir
-  mkdir conf$$.dir 2>/dev/null
-fi
-if (echo >conf$$.file) 2>/dev/null; then
-  if ln -s conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s='ln -s'
-    # ... but there are two gotchas:
-    # 1) On MSYS, both `ln -s file dir' and `ln file dir' fail.
-    # 2) DJGPP < 2.04 has no symlinks; `ln -s' creates a wrapper executable.
-    # In both cases, we have to default to `cp -pR'.
-    ln -s conf$$.file conf$$.dir 2>/dev/null && test ! -f conf$$.exe ||
-      as_ln_s='cp -pR'
-  elif ln conf$$.file conf$$ 2>/dev/null; then
-    as_ln_s=ln
-  else
-    as_ln_s='cp -pR'
-  fi
-else
-  as_ln_s='cp -pR'
-fi
-rm -f conf$$ conf$$.exe conf$$.dir/conf$$.file conf$$.file
-rmdir conf$$.dir 2>/dev/null
-
-
-# as_fn_mkdir_p
-# -------------
-# Create "$as_dir" as a directory, including parents if necessary.
-as_fn_mkdir_p ()
-{
-
-  case $as_dir in #(
-  -*) as_dir=./$as_dir;;
-  esac
-  test -d "$as_dir" || eval $as_mkdir_p || {
-    as_dirs=
-    while :; do
-      case $as_dir in #(
-      *\'*) as_qdir=`printf "%s\n" "$as_dir" | sed "s/'/'\\\\\\\\''/g"`;; #'(
-      *) as_qdir=$as_dir;;
-      esac
-      as_dirs="'$as_qdir' $as_dirs"
-      as_dir=`$as_dirname -- "$as_dir" ||
-$as_expr X"$as_dir" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$as_dir" : 'X\(//\)[^/]' \| \
-	 X"$as_dir" : 'X\(//\)$' \| \
-	 X"$as_dir" : 'X\(/\)' \| . 2>/dev/null ||
-printf "%s\n" X"$as_dir" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-      test -d "$as_dir" && break
-    done
-    test -z "$as_dirs" || eval "mkdir $as_dirs"
-  } || test -d "$as_dir" || as_fn_error $? "cannot create directory $as_dir"
-
-
-} # as_fn_mkdir_p
-if mkdir -p . 2>/dev/null; then
-  as_mkdir_p='mkdir -p "$as_dir"'
-else
-  test -d ./-p && rmdir ./-p
-  as_mkdir_p=false
-fi
-
-
-# as_fn_executable_p FILE
-# -----------------------
-# Test if FILE is an executable regular file.
-as_fn_executable_p ()
-{
-  test -f "$1" && test -x "$1"
-} # as_fn_executable_p
-as_test_x='test -x'
-as_executable_p=as_fn_executable_p
-
-# Sed expression to map a string onto a valid CPP name.
-as_tr_cpp="eval sed 'y%*$as_cr_letters%P$as_cr_LETTERS%;s%[^_$as_cr_alnum]%_%g'"
-
-# Sed expression to map a string onto a valid variable name.
-as_tr_sh="eval sed 'y%*+%pp%;s%[^_$as_cr_alnum]%_%g'"
-
-
-exec 6>&1
-## ----------------------------------- ##
-## Main body of $CONFIG_STATUS script. ##
-## ----------------------------------- ##
-_ASEOF
-test $as_write_fail = 0 && chmod +x $CONFIG_STATUS || ac_write_fail=1
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-# Save the log message, to keep $0 and so on meaningful, and to
-# report actual input values of CONFIG_FILES etc. instead of their
-# values after options handling.
-ac_log="
-This file was extended by libXfixes $as_me 6.0.1, which was
-generated by GNU Autoconf 2.71.  Invocation command line was
-
-  CONFIG_FILES    = $CONFIG_FILES
-  CONFIG_HEADERS  = $CONFIG_HEADERS
-  CONFIG_LINKS    = $CONFIG_LINKS
-  CONFIG_COMMANDS = $CONFIG_COMMANDS
-  $ $0 $@
-
-on `(hostname || uname -n) 2>/dev/null | sed 1q`
-"
-
-_ACEOF
-
-case $ac_config_files in *"
-"*) set x $ac_config_files; shift; ac_config_files=$*;;
-esac
-
-case $ac_config_headers in *"
-"*) set x $ac_config_headers; shift; ac_config_headers=$*;;
-esac
-
-
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-# Files that config.status was made for.
-config_files="$ac_config_files"
-config_headers="$ac_config_headers"
-config_commands="$ac_config_commands"
-
-_ACEOF
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-ac_cs_usage="\
-\`$as_me' instantiates files and other configuration actions
-from templates according to the current configuration.  Unless the files
-and actions are specified as TAGs, all are instantiated by default.
-
-Usage: $0 [OPTION]... [TAG]...
-
-  -h, --help       print this help, then exit
-  -V, --version    print version number and configuration settings, then exit
-      --config     print configuration, then exit
-  -q, --quiet, --silent
-                   do not print progress messages
-  -d, --debug      don't remove temporary files
-      --recheck    update $as_me by reconfiguring in the same conditions
-      --file=FILE[:TEMPLATE]
-                   instantiate the configuration file FILE
-      --header=FILE[:TEMPLATE]
-                   instantiate the configuration header FILE
-
-Configuration files:
-$config_files
-
-Configuration headers:
-$config_headers
-
-Configuration commands:
-$config_commands
-
-Report bugs to <https://gitlab.freedesktop.org/xorg/lib/libxfixes/-/issues>."
-
-_ACEOF
-ac_cs_config=`printf "%s\n" "$ac_configure_args" | sed "$ac_safe_unquote"`
-ac_cs_config_escaped=`printf "%s\n" "$ac_cs_config" | sed "s/^ //; s/'/'\\\\\\\\''/g"`
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-ac_cs_config='$ac_cs_config_escaped'
-ac_cs_version="\\
-libXfixes config.status 6.0.1
-configured by $0, generated by GNU Autoconf 2.71,
-  with options \\"\$ac_cs_config\\"
-
-Copyright (C) 2021 Free Software Foundation, Inc.
-This config.status script is free software; the Free Software Foundation
-gives unlimited permission to copy, distribute and modify it."
-
-ac_pwd='$ac_pwd'
-srcdir='$srcdir'
-INSTALL='$INSTALL'
-MKDIR_P='$MKDIR_P'
-AWK='$AWK'
-test -n "\$AWK" || AWK=awk
-_ACEOF
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-# The default lists apply if the user does not specify any file.
-ac_need_defaults=:
-while test $# != 0
-do
-  case $1 in
-  --*=?*)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=`expr "X$1" : 'X[^=]*=\(.*\)'`
-    ac_shift=:
-    ;;
-  --*=)
-    ac_option=`expr "X$1" : 'X\([^=]*\)='`
-    ac_optarg=
-    ac_shift=:
-    ;;
-  *)
-    ac_option=$1
-    ac_optarg=$2
-    ac_shift=shift
-    ;;
-  esac
-
-  case $ac_option in
-  # Handling of the options.
-  -recheck | --recheck | --rechec | --reche | --rech | --rec | --re | --r)
-    ac_cs_recheck=: ;;
-  --version | --versio | --versi | --vers | --ver | --ve | --v | -V )
-    printf "%s\n" "$ac_cs_version"; exit ;;
-  --config | --confi | --conf | --con | --co | --c )
-    printf "%s\n" "$ac_cs_config"; exit ;;
-  --debug | --debu | --deb | --de | --d | -d )
-    debug=: ;;
-  --file | --fil | --fi | --f )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf "%s\n" "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    '') as_fn_error $? "missing file argument" ;;
-    esac
-    as_fn_append CONFIG_FILES " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --header | --heade | --head | --hea )
-    $ac_shift
-    case $ac_optarg in
-    *\'*) ac_optarg=`printf "%s\n" "$ac_optarg" | sed "s/'/'\\\\\\\\''/g"` ;;
-    esac
-    as_fn_append CONFIG_HEADERS " '$ac_optarg'"
-    ac_need_defaults=false;;
-  --he | --h)
-    # Conflict between --help and --header
-    as_fn_error $? "ambiguous option: \`$1'
-Try \`$0 --help' for more information.";;
-  --help | --hel | -h )
-    printf "%s\n" "$ac_cs_usage"; exit ;;
-  -q | -quiet | --quiet | --quie | --qui | --qu | --q \
-  | -silent | --silent | --silen | --sile | --sil | --si | --s)
-    ac_cs_silent=: ;;
-
-  # This is an error.
-  -*) as_fn_error $? "unrecognized option: \`$1'
-Try \`$0 --help' for more information." ;;
-
-  *) as_fn_append ac_config_targets " $1"
-     ac_need_defaults=false ;;
-
-  esac
-  shift
-done
-
-ac_configure_extra_args=
-
-if $ac_cs_silent; then
-  exec 6>/dev/null
-  ac_configure_extra_args="$ac_configure_extra_args --silent"
-fi
-
-_ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-if \$ac_cs_recheck; then
-  set X $SHELL '$0' $ac_configure_args \$ac_configure_extra_args --no-create --no-recursion
-  shift
-  \printf "%s\n" "running CONFIG_SHELL=$SHELL \$*" >&6
-  CONFIG_SHELL='$SHELL'
-  export CONFIG_SHELL
-  exec "\$@"
-fi
-
-_ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-exec 5>>config.log
-{
-  echo
-  sed 'h;s/./-/g;s/^.../## /;s/...$/ ##/;p;x;p;x' <<_ASBOX
-## Running $as_me. ##
-_ASBOX
-  printf "%s\n" "$ac_log"
-} >&5
-
-_ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-#
-# INIT-COMMANDS
-#
-AMDEP_TRUE="$AMDEP_TRUE" MAKE="${MAKE-make}"
-
-
-# The HP-UX ksh and POSIX shell print the target directory to stdout
-# if CDPATH is set.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-sed_quote_subst='$sed_quote_subst'
-double_quote_subst='$double_quote_subst'
-delay_variable_subst='$delay_variable_subst'
-macro_version='`$ECHO "$macro_version" | $SED "$delay_single_quote_subst"`'
-macro_revision='`$ECHO "$macro_revision" | $SED "$delay_single_quote_subst"`'
-enable_shared='`$ECHO "$enable_shared" | $SED "$delay_single_quote_subst"`'
-enable_static='`$ECHO "$enable_static" | $SED "$delay_single_quote_subst"`'
-pic_mode='`$ECHO "$pic_mode" | $SED "$delay_single_quote_subst"`'
-enable_fast_install='`$ECHO "$enable_fast_install" | $SED "$delay_single_quote_subst"`'
-shared_archive_member_spec='`$ECHO "$shared_archive_member_spec" | $SED "$delay_single_quote_subst"`'
-SHELL='`$ECHO "$SHELL" | $SED "$delay_single_quote_subst"`'
-ECHO='`$ECHO "$ECHO" | $SED "$delay_single_quote_subst"`'
-PATH_SEPARATOR='`$ECHO "$PATH_SEPARATOR" | $SED "$delay_single_quote_subst"`'
-host_alias='`$ECHO "$host_alias" | $SED "$delay_single_quote_subst"`'
-host='`$ECHO "$host" | $SED "$delay_single_quote_subst"`'
-host_os='`$ECHO "$host_os" | $SED "$delay_single_quote_subst"`'
-build_alias='`$ECHO "$build_alias" | $SED "$delay_single_quote_subst"`'
-build='`$ECHO "$build" | $SED "$delay_single_quote_subst"`'
-build_os='`$ECHO "$build_os" | $SED "$delay_single_quote_subst"`'
-SED='`$ECHO "$SED" | $SED "$delay_single_quote_subst"`'
-Xsed='`$ECHO "$Xsed" | $SED "$delay_single_quote_subst"`'
-GREP='`$ECHO "$GREP" | $SED "$delay_single_quote_subst"`'
-EGREP='`$ECHO "$EGREP" | $SED "$delay_single_quote_subst"`'
-FGREP='`$ECHO "$FGREP" | $SED "$delay_single_quote_subst"`'
-LD='`$ECHO "$LD" | $SED "$delay_single_quote_subst"`'
-NM='`$ECHO "$NM" | $SED "$delay_single_quote_subst"`'
-LN_S='`$ECHO "$LN_S" | $SED "$delay_single_quote_subst"`'
-max_cmd_len='`$ECHO "$max_cmd_len" | $SED "$delay_single_quote_subst"`'
-ac_objext='`$ECHO "$ac_objext" | $SED "$delay_single_quote_subst"`'
-exeext='`$ECHO "$exeext" | $SED "$delay_single_quote_subst"`'
-lt_unset='`$ECHO "$lt_unset" | $SED "$delay_single_quote_subst"`'
-lt_SP2NL='`$ECHO "$lt_SP2NL" | $SED "$delay_single_quote_subst"`'
-lt_NL2SP='`$ECHO "$lt_NL2SP" | $SED "$delay_single_quote_subst"`'
-lt_cv_to_host_file_cmd='`$ECHO "$lt_cv_to_host_file_cmd" | $SED "$delay_single_quote_subst"`'
-lt_cv_to_tool_file_cmd='`$ECHO "$lt_cv_to_tool_file_cmd" | $SED "$delay_single_quote_subst"`'
-reload_flag='`$ECHO "$reload_flag" | $SED "$delay_single_quote_subst"`'
-reload_cmds='`$ECHO "$reload_cmds" | $SED "$delay_single_quote_subst"`'
-FILECMD='`$ECHO "$FILECMD" | $SED "$delay_single_quote_subst"`'
-OBJDUMP='`$ECHO "$OBJDUMP" | $SED "$delay_single_quote_subst"`'
-deplibs_check_method='`$ECHO "$deplibs_check_method" | $SED "$delay_single_quote_subst"`'
-file_magic_cmd='`$ECHO "$file_magic_cmd" | $SED "$delay_single_quote_subst"`'
-file_magic_glob='`$ECHO "$file_magic_glob" | $SED "$delay_single_quote_subst"`'
-want_nocaseglob='`$ECHO "$want_nocaseglob" | $SED "$delay_single_quote_subst"`'
-DLLTOOL='`$ECHO "$DLLTOOL" | $SED "$delay_single_quote_subst"`'
-sharedlib_from_linklib_cmd='`$ECHO "$sharedlib_from_linklib_cmd" | $SED "$delay_single_quote_subst"`'
-AR='`$ECHO "$AR" | $SED "$delay_single_quote_subst"`'
-lt_ar_flags='`$ECHO "$lt_ar_flags" | $SED "$delay_single_quote_subst"`'
-AR_FLAGS='`$ECHO "$AR_FLAGS" | $SED "$delay_single_quote_subst"`'
-archiver_list_spec='`$ECHO "$archiver_list_spec" | $SED "$delay_single_quote_subst"`'
-STRIP='`$ECHO "$STRIP" | $SED "$delay_single_quote_subst"`'
-RANLIB='`$ECHO "$RANLIB" | $SED "$delay_single_quote_subst"`'
-old_postinstall_cmds='`$ECHO "$old_postinstall_cmds" | $SED "$delay_single_quote_subst"`'
-old_postuninstall_cmds='`$ECHO "$old_postuninstall_cmds" | $SED "$delay_single_quote_subst"`'
-old_archive_cmds='`$ECHO "$old_archive_cmds" | $SED "$delay_single_quote_subst"`'
-lock_old_archive_extraction='`$ECHO "$lock_old_archive_extraction" | $SED "$delay_single_quote_subst"`'
-CC='`$ECHO "$CC" | $SED "$delay_single_quote_subst"`'
-CFLAGS='`$ECHO "$CFLAGS" | $SED "$delay_single_quote_subst"`'
-compiler='`$ECHO "$compiler" | $SED "$delay_single_quote_subst"`'
-GCC='`$ECHO "$GCC" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_pipe='`$ECHO "$lt_cv_sys_global_symbol_pipe" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_cdecl='`$ECHO "$lt_cv_sys_global_symbol_to_cdecl" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_import='`$ECHO "$lt_cv_sys_global_symbol_to_import" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_c_name_address='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address" | $SED "$delay_single_quote_subst"`'
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix='`$ECHO "$lt_cv_sys_global_symbol_to_c_name_address_lib_prefix" | $SED "$delay_single_quote_subst"`'
-lt_cv_nm_interface='`$ECHO "$lt_cv_nm_interface" | $SED "$delay_single_quote_subst"`'
-nm_file_list_spec='`$ECHO "$nm_file_list_spec" | $SED "$delay_single_quote_subst"`'
-lt_sysroot='`$ECHO "$lt_sysroot" | $SED "$delay_single_quote_subst"`'
-lt_cv_truncate_bin='`$ECHO "$lt_cv_truncate_bin" | $SED "$delay_single_quote_subst"`'
-objdir='`$ECHO "$objdir" | $SED "$delay_single_quote_subst"`'
-MAGIC_CMD='`$ECHO "$MAGIC_CMD" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_no_builtin_flag='`$ECHO "$lt_prog_compiler_no_builtin_flag" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_pic='`$ECHO "$lt_prog_compiler_pic" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_wl='`$ECHO "$lt_prog_compiler_wl" | $SED "$delay_single_quote_subst"`'
-lt_prog_compiler_static='`$ECHO "$lt_prog_compiler_static" | $SED "$delay_single_quote_subst"`'
-lt_cv_prog_compiler_c_o='`$ECHO "$lt_cv_prog_compiler_c_o" | $SED "$delay_single_quote_subst"`'
-need_locks='`$ECHO "$need_locks" | $SED "$delay_single_quote_subst"`'
-MANIFEST_TOOL='`$ECHO "$MANIFEST_TOOL" | $SED "$delay_single_quote_subst"`'
-DSYMUTIL='`$ECHO "$DSYMUTIL" | $SED "$delay_single_quote_subst"`'
-NMEDIT='`$ECHO "$NMEDIT" | $SED "$delay_single_quote_subst"`'
-LIPO='`$ECHO "$LIPO" | $SED "$delay_single_quote_subst"`'
-OTOOL='`$ECHO "$OTOOL" | $SED "$delay_single_quote_subst"`'
-OTOOL64='`$ECHO "$OTOOL64" | $SED "$delay_single_quote_subst"`'
-libext='`$ECHO "$libext" | $SED "$delay_single_quote_subst"`'
-shrext_cmds='`$ECHO "$shrext_cmds" | $SED "$delay_single_quote_subst"`'
-extract_expsyms_cmds='`$ECHO "$extract_expsyms_cmds" | $SED "$delay_single_quote_subst"`'
-archive_cmds_need_lc='`$ECHO "$archive_cmds_need_lc" | $SED "$delay_single_quote_subst"`'
-enable_shared_with_static_runtimes='`$ECHO "$enable_shared_with_static_runtimes" | $SED "$delay_single_quote_subst"`'
-export_dynamic_flag_spec='`$ECHO "$export_dynamic_flag_spec" | $SED "$delay_single_quote_subst"`'
-whole_archive_flag_spec='`$ECHO "$whole_archive_flag_spec" | $SED "$delay_single_quote_subst"`'
-compiler_needs_object='`$ECHO "$compiler_needs_object" | $SED "$delay_single_quote_subst"`'
-old_archive_from_new_cmds='`$ECHO "$old_archive_from_new_cmds" | $SED "$delay_single_quote_subst"`'
-old_archive_from_expsyms_cmds='`$ECHO "$old_archive_from_expsyms_cmds" | $SED "$delay_single_quote_subst"`'
-archive_cmds='`$ECHO "$archive_cmds" | $SED "$delay_single_quote_subst"`'
-archive_expsym_cmds='`$ECHO "$archive_expsym_cmds" | $SED "$delay_single_quote_subst"`'
-module_cmds='`$ECHO "$module_cmds" | $SED "$delay_single_quote_subst"`'
-module_expsym_cmds='`$ECHO "$module_expsym_cmds" | $SED "$delay_single_quote_subst"`'
-with_gnu_ld='`$ECHO "$with_gnu_ld" | $SED "$delay_single_quote_subst"`'
-allow_undefined_flag='`$ECHO "$allow_undefined_flag" | $SED "$delay_single_quote_subst"`'
-no_undefined_flag='`$ECHO "$no_undefined_flag" | $SED "$delay_single_quote_subst"`'
-hardcode_libdir_flag_spec='`$ECHO "$hardcode_libdir_flag_spec" | $SED "$delay_single_quote_subst"`'
-hardcode_libdir_separator='`$ECHO "$hardcode_libdir_separator" | $SED "$delay_single_quote_subst"`'
-hardcode_direct='`$ECHO "$hardcode_direct" | $SED "$delay_single_quote_subst"`'
-hardcode_direct_absolute='`$ECHO "$hardcode_direct_absolute" | $SED "$delay_single_quote_subst"`'
-hardcode_minus_L='`$ECHO "$hardcode_minus_L" | $SED "$delay_single_quote_subst"`'
-hardcode_shlibpath_var='`$ECHO "$hardcode_shlibpath_var" | $SED "$delay_single_quote_subst"`'
-hardcode_automatic='`$ECHO "$hardcode_automatic" | $SED "$delay_single_quote_subst"`'
-inherit_rpath='`$ECHO "$inherit_rpath" | $SED "$delay_single_quote_subst"`'
-link_all_deplibs='`$ECHO "$link_all_deplibs" | $SED "$delay_single_quote_subst"`'
-always_export_symbols='`$ECHO "$always_export_symbols" | $SED "$delay_single_quote_subst"`'
-export_symbols_cmds='`$ECHO "$export_symbols_cmds" | $SED "$delay_single_quote_subst"`'
-exclude_expsyms='`$ECHO "$exclude_expsyms" | $SED "$delay_single_quote_subst"`'
-include_expsyms='`$ECHO "$include_expsyms" | $SED "$delay_single_quote_subst"`'
-prelink_cmds='`$ECHO "$prelink_cmds" | $SED "$delay_single_quote_subst"`'
-postlink_cmds='`$ECHO "$postlink_cmds" | $SED "$delay_single_quote_subst"`'
-file_list_spec='`$ECHO "$file_list_spec" | $SED "$delay_single_quote_subst"`'
-variables_saved_for_relink='`$ECHO "$variables_saved_for_relink" | $SED "$delay_single_quote_subst"`'
-need_lib_prefix='`$ECHO "$need_lib_prefix" | $SED "$delay_single_quote_subst"`'
-need_version='`$ECHO "$need_version" | $SED "$delay_single_quote_subst"`'
-version_type='`$ECHO "$version_type" | $SED "$delay_single_quote_subst"`'
-runpath_var='`$ECHO "$runpath_var" | $SED "$delay_single_quote_subst"`'
-shlibpath_var='`$ECHO "$shlibpath_var" | $SED "$delay_single_quote_subst"`'
-shlibpath_overrides_runpath='`$ECHO "$shlibpath_overrides_runpath" | $SED "$delay_single_quote_subst"`'
-libname_spec='`$ECHO "$libname_spec" | $SED "$delay_single_quote_subst"`'
-library_names_spec='`$ECHO "$library_names_spec" | $SED "$delay_single_quote_subst"`'
-soname_spec='`$ECHO "$soname_spec" | $SED "$delay_single_quote_subst"`'
-install_override_mode='`$ECHO "$install_override_mode" | $SED "$delay_single_quote_subst"`'
-postinstall_cmds='`$ECHO "$postinstall_cmds" | $SED "$delay_single_quote_subst"`'
-postuninstall_cmds='`$ECHO "$postuninstall_cmds" | $SED "$delay_single_quote_subst"`'
-finish_cmds='`$ECHO "$finish_cmds" | $SED "$delay_single_quote_subst"`'
-finish_eval='`$ECHO "$finish_eval" | $SED "$delay_single_quote_subst"`'
-hardcode_into_libs='`$ECHO "$hardcode_into_libs" | $SED "$delay_single_quote_subst"`'
-sys_lib_search_path_spec='`$ECHO "$sys_lib_search_path_spec" | $SED "$delay_single_quote_subst"`'
-configure_time_dlsearch_path='`$ECHO "$configure_time_dlsearch_path" | $SED "$delay_single_quote_subst"`'
-configure_time_lt_sys_library_path='`$ECHO "$configure_time_lt_sys_library_path" | $SED "$delay_single_quote_subst"`'
-hardcode_action='`$ECHO "$hardcode_action" | $SED "$delay_single_quote_subst"`'
-enable_dlopen='`$ECHO "$enable_dlopen" | $SED "$delay_single_quote_subst"`'
-enable_dlopen_self='`$ECHO "$enable_dlopen_self" | $SED "$delay_single_quote_subst"`'
-enable_dlopen_self_static='`$ECHO "$enable_dlopen_self_static" | $SED "$delay_single_quote_subst"`'
-old_striplib='`$ECHO "$old_striplib" | $SED "$delay_single_quote_subst"`'
-striplib='`$ECHO "$striplib" | $SED "$delay_single_quote_subst"`'
-
-LTCC='$LTCC'
-LTCFLAGS='$LTCFLAGS'
-compiler='$compiler_DEFAULT'
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-\$1
-_LTECHO_EOF'
-}
-
-# Quote evaled strings.
-for var in SHELL \
-ECHO \
-PATH_SEPARATOR \
-SED \
-GREP \
-EGREP \
-FGREP \
-LD \
-NM \
-LN_S \
-lt_SP2NL \
-lt_NL2SP \
-reload_flag \
-FILECMD \
-OBJDUMP \
-deplibs_check_method \
-file_magic_cmd \
-file_magic_glob \
-want_nocaseglob \
-DLLTOOL \
-sharedlib_from_linklib_cmd \
-AR \
-archiver_list_spec \
-STRIP \
-RANLIB \
-CC \
-CFLAGS \
-compiler \
-lt_cv_sys_global_symbol_pipe \
-lt_cv_sys_global_symbol_to_cdecl \
-lt_cv_sys_global_symbol_to_import \
-lt_cv_sys_global_symbol_to_c_name_address \
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix \
-lt_cv_nm_interface \
-nm_file_list_spec \
-lt_cv_truncate_bin \
-lt_prog_compiler_no_builtin_flag \
-lt_prog_compiler_pic \
-lt_prog_compiler_wl \
-lt_prog_compiler_static \
-lt_cv_prog_compiler_c_o \
-need_locks \
-MANIFEST_TOOL \
-DSYMUTIL \
-NMEDIT \
-LIPO \
-OTOOL \
-OTOOL64 \
-shrext_cmds \
-export_dynamic_flag_spec \
-whole_archive_flag_spec \
-compiler_needs_object \
-with_gnu_ld \
-allow_undefined_flag \
-no_undefined_flag \
-hardcode_libdir_flag_spec \
-hardcode_libdir_separator \
-exclude_expsyms \
-include_expsyms \
-file_list_spec \
-variables_saved_for_relink \
-libname_spec \
-library_names_spec \
-soname_spec \
-install_override_mode \
-finish_eval \
-old_striplib \
-striplib; do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[\\\\\\\`\\"\\\$]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-# Double-quote double-evaled strings.
-for var in reload_cmds \
-old_postinstall_cmds \
-old_postuninstall_cmds \
-old_archive_cmds \
-extract_expsyms_cmds \
-old_archive_from_new_cmds \
-old_archive_from_expsyms_cmds \
-archive_cmds \
-archive_expsym_cmds \
-module_cmds \
-module_expsym_cmds \
-export_symbols_cmds \
-prelink_cmds \
-postlink_cmds \
-postinstall_cmds \
-postuninstall_cmds \
-finish_cmds \
-sys_lib_search_path_spec \
-configure_time_dlsearch_path \
-configure_time_lt_sys_library_path; do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[\\\\\\\`\\"\\\$]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-ac_aux_dir='$ac_aux_dir'
-
-# See if we are running on zsh, and set the options that allow our
-# commands through without removal of \ escapes INIT.
-if test -n "\${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-
-    PACKAGE='$PACKAGE'
-    VERSION='$VERSION'
-    RM='$RM'
-    ofile='$ofile'
-
-
-
-
-_ACEOF
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-
-# Handling of arguments.
-for ac_config_target in $ac_config_targets
-do
-  case $ac_config_target in
-    "config.h") CONFIG_HEADERS="$CONFIG_HEADERS config.h" ;;
-    "depfiles") CONFIG_COMMANDS="$CONFIG_COMMANDS depfiles" ;;
-    "libtool") CONFIG_COMMANDS="$CONFIG_COMMANDS libtool" ;;
-    "Makefile") CONFIG_FILES="$CONFIG_FILES Makefile" ;;
-    "src/Makefile") CONFIG_FILES="$CONFIG_FILES src/Makefile" ;;
-    "man/Makefile") CONFIG_FILES="$CONFIG_FILES man/Makefile" ;;
-    "xfixes.pc") CONFIG_FILES="$CONFIG_FILES xfixes.pc" ;;
-
-  *) as_fn_error $? "invalid argument: \`$ac_config_target'" "$LINENO" 5;;
-  esac
-done
-
-
-# If the user did not use the arguments to specify the items to instantiate,
-# then the envvar interface is used.  Set only those that are not.
-# We use the long form for the default assignment because of an extremely
-# bizarre bug on SunOS 4.1.3.
-if $ac_need_defaults; then
-  test ${CONFIG_FILES+y} || CONFIG_FILES=$config_files
-  test ${CONFIG_HEADERS+y} || CONFIG_HEADERS=$config_headers
-  test ${CONFIG_COMMANDS+y} || CONFIG_COMMANDS=$config_commands
-fi
-
-# Have a temporary directory for convenience.  Make it in the build tree
-# simply because there is no reason against having it here, and in addition,
-# creating and moving files from /tmp can sometimes cause problems.
-# Hook for its removal unless debugging.
-# Note that there is a small window in which the directory will not be cleaned:
-# after its creation but before its name has been assigned to `$tmp'.
-$debug ||
-{
-  tmp= ac_tmp=
-  trap 'exit_status=$?
-  : "${ac_tmp:=$tmp}"
-  { test ! -d "$ac_tmp" || rm -fr "$ac_tmp"; } && exit $exit_status
-' 0
-  trap 'as_fn_exit 1' 1 2 13 15
-}
-# Create a (secure) tmp directory for tmp files.
-
-{
-  tmp=`(umask 077 && mktemp -d "./confXXXXXX") 2>/dev/null` &&
-  test -d "$tmp"
-}  ||
-{
-  tmp=./conf$$-$RANDOM
-  (umask 077 && mkdir "$tmp")
-} || as_fn_error $? "cannot create a temporary directory in ." "$LINENO" 5
-ac_tmp=$tmp
-
-# Set up the scripts for CONFIG_FILES section.
-# No need to generate them if there are no CONFIG_FILES.
-# This happens for instance with `./config.status config.h'.
-if test -n "$CONFIG_FILES"; then
-
-
-ac_cr=`echo X | tr X '\015'`
-# On cygwin, bash can eat \r inside `` if the user requested igncr.
-# But we know of no other shell where ac_cr would be empty at this
-# point, so we can use a bashism as a fallback.
-if test "x$ac_cr" = x; then
-  eval ac_cr=\$\'\\r\'
-fi
-ac_cs_awk_cr=`$AWK 'BEGIN { print "a\rb" }' </dev/null 2>/dev/null`
-if test "$ac_cs_awk_cr" = "a${ac_cr}b"; then
-  ac_cs_awk_cr='\\r'
-else
-  ac_cs_awk_cr=$ac_cr
-fi
-
-echo 'BEGIN {' >"$ac_tmp/subs1.awk" &&
-_ACEOF
-
-
-{
-  echo "cat >conf$$subs.awk <<_ACEOF" &&
-  echo "$ac_subst_vars" | sed 's/.*/&!$&$ac_delim/' &&
-  echo "_ACEOF"
-} >conf$$subs.sh ||
-  as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-ac_delim_num=`echo "$ac_subst_vars" | grep -c '^'`
-ac_delim='%!_!# '
-for ac_last_try in false false false false false :; do
-  . ./conf$$subs.sh ||
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-
-  ac_delim_n=`sed -n "s/.*$ac_delim\$/X/p" conf$$subs.awk | grep -c X`
-  if test $ac_delim_n = $ac_delim_num; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_STATUS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-rm -f conf$$subs.sh
-
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-cat >>"\$ac_tmp/subs1.awk" <<\\_ACAWK &&
-_ACEOF
-sed -n '
-h
-s/^/S["/; s/!.*/"]=/
-p
-g
-s/^[^!]*!//
-:repl
-t repl
-s/'"$ac_delim"'$//
-t delim
-:nl
-h
-s/\(.\{148\}\)..*/\1/
-t more1
-s/["\\]/\\&/g; s/^/"/; s/$/\\n"\\/
-p
-n
-b repl
-:more1
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t nl
-:delim
-h
-s/\(.\{148\}\)..*/\1/
-t more2
-s/["\\]/\\&/g; s/^/"/; s/$/"/
-p
-b
-:more2
-s/["\\]/\\&/g; s/^/"/; s/$/"\\/
-p
-g
-s/.\{148\}//
-t delim
-' <conf$$subs.awk | sed '
-/^[^""]/{
-  N
-  s/\n//
-}
-' >>$CONFIG_STATUS || ac_write_fail=1
-rm -f conf$$subs.awk
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-_ACAWK
-cat >>"\$ac_tmp/subs1.awk" <<_ACAWK &&
-  for (key in S) S_is_set[key] = 1
-  FS = ""
-
-}
-{
-  line = $ 0
-  nfields = split(line, field, "@")
-  substed = 0
-  len = length(field[1])
-  for (i = 2; i < nfields; i++) {
-    key = field[i]
-    keylen = length(key)
-    if (S_is_set[key]) {
-      value = S[key]
-      line = substr(line, 1, len) "" value "" substr(line, len + keylen + 3)
-      len += length(value) + length(field[++i])
-      substed = 1
-    } else
-      len += 1 + keylen
-  }
-
-  print line
-}
-
-_ACAWK
-_ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-if sed "s/$ac_cr//" < /dev/null > /dev/null 2>&1; then
-  sed "s/$ac_cr\$//; s/$ac_cr/$ac_cs_awk_cr/g"
-else
-  cat
-fi < "$ac_tmp/subs1.awk" > "$ac_tmp/subs.awk" \
-  || as_fn_error $? "could not setup config files machinery" "$LINENO" 5
-_ACEOF
-
-# VPATH may cause trouble with some makes, so we remove sole $(srcdir),
-# ${srcdir} and @srcdir@ entries from VPATH if srcdir is ".", strip leading and
-# trailing colons and then remove the whole line if VPATH becomes empty
-# (actually we leave an empty line to preserve line numbers).
-if test "x$srcdir" = x.; then
-  ac_vpsub='/^[	 ]*VPATH[	 ]*=[	 ]*/{
-h
-s///
-s/^/:/
-s/[	 ]*$/:/
-s/:\$(srcdir):/:/g
-s/:\${srcdir}:/:/g
-s/:@srcdir@:/:/g
-s/^:*//
-s/:*$//
-x
-s/\(=[	 ]*\).*/\1/
-G
-s/\n//
-s/^[^=]*=[	 ]*$//
-}'
-fi
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-fi # test -n "$CONFIG_FILES"
-
-# Set up the scripts for CONFIG_HEADERS section.
-# No need to generate them if there are no CONFIG_HEADERS.
-# This happens for instance with `./config.status Makefile'.
-if test -n "$CONFIG_HEADERS"; then
-cat >"$ac_tmp/defines.awk" <<\_ACAWK ||
-BEGIN {
-_ACEOF
-
-# Transform confdefs.h into an awk script `defines.awk', embedded as
-# here-document in config.status, that substitutes the proper values into
-# config.h.in to produce config.h.
-
-# Create a delimiter string that does not exist in confdefs.h, to ease
-# handling of long lines.
-ac_delim='%!_!# '
-for ac_last_try in false false :; do
-  ac_tt=`sed -n "/$ac_delim/p" confdefs.h`
-  if test -z "$ac_tt"; then
-    break
-  elif $ac_last_try; then
-    as_fn_error $? "could not make $CONFIG_HEADERS" "$LINENO" 5
-  else
-    ac_delim="$ac_delim!$ac_delim _$ac_delim!! "
-  fi
-done
-
-# For the awk script, D is an array of macro values keyed by name,
-# likewise P contains macro parameters if any.  Preserve backslash
-# newline sequences.
-
-ac_word_re=[_$as_cr_Letters][_$as_cr_alnum]*
-sed -n '
-s/.\{148\}/&'"$ac_delim"'/g
-t rset
-:rset
-s/^[	 ]*#[	 ]*define[	 ][	 ]*/ /
-t def
-d
-:def
-s/\\$//
-t bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3"/p
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2"/p
-d
-:bsnl
-s/["\\]/\\&/g
-s/^ \('"$ac_word_re"'\)\(([^()]*)\)[	 ]*\(.*\)/P["\1"]="\2"\
-D["\1"]=" \3\\\\\\n"\\/p
-t cont
-s/^ \('"$ac_word_re"'\)[	 ]*\(.*\)/D["\1"]=" \2\\\\\\n"\\/p
-t cont
-d
-:cont
-n
-s/.\{148\}/&'"$ac_delim"'/g
-t clear
-:clear
-s/\\$//
-t bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/"/p
-d
-:bsnlc
-s/["\\]/\\&/g; s/^/"/; s/$/\\\\\\n"\\/p
-b cont
-' <confdefs.h | sed '
-s/'"$ac_delim"'/"\\\
-"/g' >>$CONFIG_STATUS || ac_write_fail=1
-
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-  for (key in D) D_is_set[key] = 1
-  FS = ""
-}
-/^[\t ]*#[\t ]*(define|undef)[\t ]+$ac_word_re([\t (]|\$)/ {
-  line = \$ 0
-  split(line, arg, " ")
-  if (arg[1] == "#") {
-    defundef = arg[2]
-    mac1 = arg[3]
-  } else {
-    defundef = substr(arg[1], 2)
-    mac1 = arg[2]
-  }
-  split(mac1, mac2, "(") #)
-  macro = mac2[1]
-  prefix = substr(line, 1, index(line, defundef) - 1)
-  if (D_is_set[macro]) {
-    # Preserve the white space surrounding the "#".
-    print prefix "define", macro P[macro] D[macro]
-    next
-  } else {
-    # Replace #undef with comments.  This is necessary, for example,
-    # in the case of _POSIX_SOURCE, which is predefined and required
-    # on some systems where configure will not decide to define it.
-    if (defundef == "undef") {
-      print "/*", prefix defundef, macro, "*/"
-      next
-    }
-  }
-}
-{ print }
-_ACAWK
-_ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-  as_fn_error $? "could not setup config headers machinery" "$LINENO" 5
-fi # test -n "$CONFIG_HEADERS"
-
-
-eval set X "  :F $CONFIG_FILES  :H $CONFIG_HEADERS    :C $CONFIG_COMMANDS"
-shift
-for ac_tag
-do
-  case $ac_tag in
-  :[FHLC]) ac_mode=$ac_tag; continue;;
-  esac
-  case $ac_mode$ac_tag in
-  :[FHL]*:*);;
-  :L* | :C*:*) as_fn_error $? "invalid tag \`$ac_tag'" "$LINENO" 5;;
-  :[FH]-) ac_tag=-:-;;
-  :[FH]*) ac_tag=$ac_tag:$ac_tag.in;;
-  esac
-  ac_save_IFS=$IFS
-  IFS=:
-  set x $ac_tag
-  IFS=$ac_save_IFS
-  shift
-  ac_file=$1
-  shift
-
-  case $ac_mode in
-  :L) ac_source=$1;;
-  :[FH])
-    ac_file_inputs=
-    for ac_f
-    do
-      case $ac_f in
-      -) ac_f="$ac_tmp/stdin";;
-      *) # Look for the file first in the build tree, then in the source tree
-	 # (if the path is not absolute).  The absolute path cannot be DOS-style,
-	 # because $ac_f cannot contain `:'.
-	 test -f "$ac_f" ||
-	   case $ac_f in
-	   [\\/$]*) false;;
-	   *) test -f "$srcdir/$ac_f" && ac_f="$srcdir/$ac_f";;
-	   esac ||
-	   as_fn_error 1 "cannot find input file: \`$ac_f'" "$LINENO" 5;;
-      esac
-      case $ac_f in *\'*) ac_f=`printf "%s\n" "$ac_f" | sed "s/'/'\\\\\\\\''/g"`;; esac
-      as_fn_append ac_file_inputs " '$ac_f'"
-    done
-
-    # Let's still pretend it is `configure' which instantiates (i.e., don't
-    # use $as_me), people would be surprised to read:
-    #    /* config.h.  Generated by config.status.  */
-    configure_input='Generated from '`
-	  printf "%s\n" "$*" | sed 's|^[^:]*/||;s|:[^:]*/|, |g'
-	`' by configure.'
-    if test x"$ac_file" != x-; then
-      configure_input="$ac_file.  $configure_input"
-      { printf "%s\n" "$as_me:${as_lineno-$LINENO}: creating $ac_file" >&5
-printf "%s\n" "$as_me: creating $ac_file" >&6;}
-    fi
-    # Neutralize special characters interpreted by sed in replacement strings.
-    case $configure_input in #(
-    *\&* | *\|* | *\\* )
-       ac_sed_conf_input=`printf "%s\n" "$configure_input" |
-       sed 's/[\\\\&|]/\\\\&/g'`;; #(
-    *) ac_sed_conf_input=$configure_input;;
-    esac
-
-    case $ac_tag in
-    *:-:* | *:-) cat >"$ac_tmp/stdin" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5 ;;
-    esac
-    ;;
-  esac
-
-  ac_dir=`$as_dirname -- "$ac_file" ||
-$as_expr X"$ac_file" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$ac_file" : 'X\(//\)[^/]' \| \
-	 X"$ac_file" : 'X\(//\)$' \| \
-	 X"$ac_file" : 'X\(/\)' \| . 2>/dev/null ||
-printf "%s\n" X"$ac_file" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-  as_dir="$ac_dir"; as_fn_mkdir_p
-  ac_builddir=.
-
-case "$ac_dir" in
-.) ac_dir_suffix= ac_top_builddir_sub=. ac_top_build_prefix= ;;
-*)
-  ac_dir_suffix=/`printf "%s\n" "$ac_dir" | sed 's|^\.[\\/]||'`
-  # A ".." for each directory in $ac_dir_suffix.
-  ac_top_builddir_sub=`printf "%s\n" "$ac_dir_suffix" | sed 's|/[^\\/]*|/..|g;s|/||'`
-  case $ac_top_builddir_sub in
-  "") ac_top_builddir_sub=. ac_top_build_prefix= ;;
-  *)  ac_top_build_prefix=$ac_top_builddir_sub/ ;;
-  esac ;;
-esac
-ac_abs_top_builddir=$ac_pwd
-ac_abs_builddir=$ac_pwd$ac_dir_suffix
-# for backward compatibility:
-ac_top_builddir=$ac_top_build_prefix
-
-case $srcdir in
-  .)  # We are building in place.
-    ac_srcdir=.
-    ac_top_srcdir=$ac_top_builddir_sub
-    ac_abs_top_srcdir=$ac_pwd ;;
-  [\\/]* | ?:[\\/]* )  # Absolute name.
-    ac_srcdir=$srcdir$ac_dir_suffix;
-    ac_top_srcdir=$srcdir
-    ac_abs_top_srcdir=$srcdir ;;
-  *) # Relative name.
-    ac_srcdir=$ac_top_build_prefix$srcdir$ac_dir_suffix
-    ac_top_srcdir=$ac_top_build_prefix$srcdir
-    ac_abs_top_srcdir=$ac_pwd/$srcdir ;;
-esac
-ac_abs_srcdir=$ac_abs_top_srcdir$ac_dir_suffix
-
-
-  case $ac_mode in
-  :F)
-  #
-  # CONFIG_FILE
-  #
-
-  case $INSTALL in
-  [\\/$]* | ?:[\\/]* ) ac_INSTALL=$INSTALL ;;
-  *) ac_INSTALL=$ac_top_build_prefix$INSTALL ;;
-  esac
-  ac_MKDIR_P=$MKDIR_P
-  case $MKDIR_P in
-  [\\/$]* | ?:[\\/]* ) ;;
-  */*) ac_MKDIR_P=$ac_top_build_prefix$MKDIR_P ;;
-  esac
-_ACEOF
-
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-# If the template does not know about datarootdir, expand it.
-# FIXME: This hack should be removed a few years after 2.60.
-ac_datarootdir_hack=; ac_datarootdir_seen=
-ac_sed_dataroot='
-/datarootdir/ {
-  p
-  q
-}
-/@datadir@/p
-/@docdir@/p
-/@infodir@/p
-/@localedir@/p
-/@mandir@/p'
-case `eval "sed -n \"\$ac_sed_dataroot\" $ac_file_inputs"` in
-*datarootdir*) ac_datarootdir_seen=yes;;
-*@datadir@*|*@docdir@*|*@infodir@*|*@localedir@*|*@mandir@*)
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&5
-printf "%s\n" "$as_me: WARNING: $ac_file_inputs seems to ignore the --datarootdir setting" >&2;}
-_ACEOF
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-  ac_datarootdir_hack='
-  s&@datadir@&$datadir&g
-  s&@docdir@&$docdir&g
-  s&@infodir@&$infodir&g
-  s&@localedir@&$localedir&g
-  s&@mandir@&$mandir&g
-  s&\\\${datarootdir}&$datarootdir&g' ;;
-esac
-_ACEOF
-
-# Neutralize VPATH when `$srcdir' = `.'.
-# Shell code in configure.ac might set extrasub.
-# FIXME: do we really want to maintain this feature?
-cat >>$CONFIG_STATUS <<_ACEOF || ac_write_fail=1
-ac_sed_extra="$ac_vpsub
-$extrasub
-_ACEOF
-cat >>$CONFIG_STATUS <<\_ACEOF || ac_write_fail=1
-:t
-/@[a-zA-Z_][a-zA-Z_0-9]*@/!b
-s|@configure_input@|$ac_sed_conf_input|;t t
-s&@top_builddir@&$ac_top_builddir_sub&;t t
-s&@top_build_prefix@&$ac_top_build_prefix&;t t
-s&@srcdir@&$ac_srcdir&;t t
-s&@abs_srcdir@&$ac_abs_srcdir&;t t
-s&@top_srcdir@&$ac_top_srcdir&;t t
-s&@abs_top_srcdir@&$ac_abs_top_srcdir&;t t
-s&@builddir@&$ac_builddir&;t t
-s&@abs_builddir@&$ac_abs_builddir&;t t
-s&@abs_top_builddir@&$ac_abs_top_builddir&;t t
-s&@INSTALL@&$ac_INSTALL&;t t
-s&@MKDIR_P@&$ac_MKDIR_P&;t t
-$ac_datarootdir_hack
-"
-eval sed \"\$ac_sed_extra\" "$ac_file_inputs" | $AWK -f "$ac_tmp/subs.awk" \
-  >$ac_tmp/out || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-
-test -z "$ac_datarootdir_hack$ac_datarootdir_seen" &&
-  { ac_out=`sed -n '/\${datarootdir}/p' "$ac_tmp/out"`; test -n "$ac_out"; } &&
-  { ac_out=`sed -n '/^[	 ]*datarootdir[	 ]*:*=/p' \
-      "$ac_tmp/out"`; test -z "$ac_out"; } &&
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: $ac_file contains a reference to the variable \`datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&5
-printf "%s\n" "$as_me: WARNING: $ac_file contains a reference to the variable \`datarootdir'
-which seems to be undefined.  Please make sure it is defined" >&2;}
-
-  rm -f "$ac_tmp/stdin"
-  case $ac_file in
-  -) cat "$ac_tmp/out" && rm -f "$ac_tmp/out";;
-  *) rm -f "$ac_file" && mv "$ac_tmp/out" "$ac_file";;
-  esac \
-  || as_fn_error $? "could not create $ac_file" "$LINENO" 5
- ;;
-  :H)
-  #
-  # CONFIG_HEADER
-  #
-  if test x"$ac_file" != x-; then
-    {
-      printf "%s\n" "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs"
-    } >"$ac_tmp/config.h" \
-      || as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    if diff "$ac_file" "$ac_tmp/config.h" >/dev/null 2>&1; then
-      { printf "%s\n" "$as_me:${as_lineno-$LINENO}: $ac_file is unchanged" >&5
-printf "%s\n" "$as_me: $ac_file is unchanged" >&6;}
-    else
-      rm -f "$ac_file"
-      mv "$ac_tmp/config.h" "$ac_file" \
-	|| as_fn_error $? "could not create $ac_file" "$LINENO" 5
-    fi
-  else
-    printf "%s\n" "/* $configure_input  */" >&1 \
-      && eval '$AWK -f "$ac_tmp/defines.awk"' "$ac_file_inputs" \
-      || as_fn_error $? "could not create -" "$LINENO" 5
-  fi
-# Compute "$ac_file"'s index in $config_headers.
-_am_arg="$ac_file"
-_am_stamp_count=1
-for _am_header in $config_headers :; do
-  case $_am_header in
-    $_am_arg | $_am_arg:* )
-      break ;;
-    * )
-      _am_stamp_count=`expr $_am_stamp_count + 1` ;;
-  esac
-done
-echo "timestamp for $_am_arg" >`$as_dirname -- "$_am_arg" ||
-$as_expr X"$_am_arg" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$_am_arg" : 'X\(//\)[^/]' \| \
-	 X"$_am_arg" : 'X\(//\)$' \| \
-	 X"$_am_arg" : 'X\(/\)' \| . 2>/dev/null ||
-printf "%s\n" X"$_am_arg" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`/stamp-h$_am_stamp_count
- ;;
-
-  :C)  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: executing $ac_file commands" >&5
-printf "%s\n" "$as_me: executing $ac_file commands" >&6;}
- ;;
-  esac
-
-
-  case $ac_file$ac_mode in
-    "depfiles":C) test x"$AMDEP_TRUE" != x"" || {
-  # Older Autoconf quotes --file arguments for eval, but not when files
-  # are listed without --file.  Let's play safe and only enable the eval
-  # if we detect the quoting.
-  # TODO: see whether this extra hack can be removed once we start
-  # requiring Autoconf 2.70 or later.
-  case $CONFIG_FILES in #(
-  *\'*) :
-    eval set x "$CONFIG_FILES" ;; #(
-  *) :
-    set x $CONFIG_FILES ;; #(
-  *) :
-     ;;
-esac
-  shift
-  # Used to flag and report bootstrapping failures.
-  am_rc=0
-  for am_mf
-  do
-    # Strip MF so we end up with the name of the file.
-    am_mf=`printf "%s\n" "$am_mf" | sed -e 's/:.*$//'`
-    # Check whether this is an Automake generated Makefile which includes
-    # dependency-tracking related rules and includes.
-    # Grep'ing the whole file directly is not great: AIX grep has a line
-    # limit of 2048, but all sed's we know have understand at least 4000.
-    sed -n 's,^am--depfiles:.*,X,p' "$am_mf" | grep X >/dev/null 2>&1 \
-      || continue
-    am_dirpart=`$as_dirname -- "$am_mf" ||
-$as_expr X"$am_mf" : 'X\(.*[^/]\)//*[^/][^/]*/*$' \| \
-	 X"$am_mf" : 'X\(//\)[^/]' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf "%s\n" X"$am_mf" |
-    sed '/^X\(.*[^/]\)\/\/*[^/][^/]*\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)[^/].*/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    am_filepart=`$as_basename -- "$am_mf" ||
-$as_expr X/"$am_mf" : '.*/\([^/][^/]*\)/*$' \| \
-	 X"$am_mf" : 'X\(//\)$' \| \
-	 X"$am_mf" : 'X\(/\)' \| . 2>/dev/null ||
-printf "%s\n" X/"$am_mf" |
-    sed '/^.*\/\([^/][^/]*\)\/*$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\/\)$/{
-	    s//\1/
-	    q
-	  }
-	  /^X\/\(\/\).*/{
-	    s//\1/
-	    q
-	  }
-	  s/.*/./; q'`
-    { echo "$as_me:$LINENO: cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles" >&5
-   (cd "$am_dirpart" \
-      && sed -e '/# am--include-marker/d' "$am_filepart" \
-        | $MAKE -f - am--depfiles) >&5 2>&5
-   ac_status=$?
-   echo "$as_me:$LINENO: \$? = $ac_status" >&5
-   (exit $ac_status); } || am_rc=$?
-  done
-  if test $am_rc -ne 0; then
-    { { printf "%s\n" "$as_me:${as_lineno-$LINENO}: error: in \`$ac_pwd':" >&5
-printf "%s\n" "$as_me: error: in \`$ac_pwd':" >&2;}
-as_fn_error $? "Something went wrong bootstrapping makefile fragments
-    for automatic dependency tracking.  If GNU make was not used, consider
-    re-running the configure script with MAKE=\"gmake\" (or whatever is
-    necessary).  You can also try re-running configure with the
-    '--disable-dependency-tracking' option to at least be able to build
-    the package (albeit without support for automatic dependency tracking).
-See \`config.log' for more details" "$LINENO" 5; }
-  fi
-  { am_dirpart=; unset am_dirpart;}
-  { am_filepart=; unset am_filepart;}
-  { am_mf=; unset am_mf;}
-  { am_rc=; unset am_rc;}
-  rm -f conftest-deps.mk
-}
- ;;
-    "libtool":C)
-
-    # See if we are running on zsh, and set the options that allow our
-    # commands through without removal of \ escapes.
-    if test -n "${ZSH_VERSION+set}"; then
-      setopt NO_GLOB_SUBST
-    fi
-
-    cfgfile=${ofile}T
-    trap "$RM \"$cfgfile\"; exit 1" 1 2 15
-    $RM "$cfgfile"
-
-    cat <<_LT_EOF >> "$cfgfile"
-#! $SHELL
-# Generated automatically by $as_me ($PACKAGE) $VERSION
-# Libtool was configured on host `(hostname || uname -n) 2>/dev/null | sed 1q`:
-# NOTE: Changes made to this file will be lost: look at ltmain.sh.
-
-# Provide generalized library-building support services.
-# Written by Gordon Matzigkeit, 1996
-
-# Copyright (C) 2014 Free Software Foundation, Inc.
-# This is free software; see the source for copying conditions.  There is NO
-# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-
-# GNU Libtool is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of of the License, or
-# (at your option) any later version.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program or library that is built
-# using GNU Libtool, you may include this file under the  same
-# distribution terms that you use for the rest of that program.
-#
-# GNU Libtool is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-
-# The names of the tagged configurations supported by this script.
-available_tags=''
-
-# Configured defaults for sys_lib_dlsearch_path munging.
-: \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"}
-
-# ### BEGIN LIBTOOL CONFIG
-
-# Which release of libtool.m4 was used?
-macro_version=$macro_version
-macro_revision=$macro_revision
-
-# Whether or not to build shared libraries.
-build_libtool_libs=$enable_shared
-
-# Whether or not to build static libraries.
-build_old_libs=$enable_static
-
-# What type of objects to build.
-pic_mode=$pic_mode
-
-# Whether or not to optimize for fast installation.
-fast_install=$enable_fast_install
-
-# Shared archive member basename,for filename based shared library versioning on AIX.
-shared_archive_member_spec=$shared_archive_member_spec
-
-# Shell to use when invoking shell scripts.
-SHELL=$lt_SHELL
-
-# An echo program that protects backslashes.
-ECHO=$lt_ECHO
-
-# The PATH separator for the build system.
-PATH_SEPARATOR=$lt_PATH_SEPARATOR
-
-# The host system.
-host_alias=$host_alias
-host=$host
-host_os=$host_os
-
-# The build system.
-build_alias=$build_alias
-build=$build
-build_os=$build_os
-
-# A sed program that does not truncate output.
-SED=$lt_SED
-
-# Sed that helps us avoid accidentally triggering echo(1) options like -n.
-Xsed="\$SED -e 1s/^X//"
-
-# A grep program that handles long lines.
-GREP=$lt_GREP
-
-# An ERE matcher.
-EGREP=$lt_EGREP
-
-# A literal string matcher.
-FGREP=$lt_FGREP
-
-# A BSD- or MS-compatible name lister.
-NM=$lt_NM
-
-# Whether we need soft or hard links.
-LN_S=$lt_LN_S
-
-# What is the maximum length of a command?
-max_cmd_len=$max_cmd_len
-
-# Object file suffix (normally "o").
-objext=$ac_objext
-
-# Executable file suffix (normally "").
-exeext=$exeext
-
-# whether the shell understands "unset".
-lt_unset=$lt_unset
-
-# turn spaces into newlines.
-SP2NL=$lt_lt_SP2NL
-
-# turn newlines into spaces.
-NL2SP=$lt_lt_NL2SP
-
-# convert \$build file names to \$host format.
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-
-# convert \$build files to toolchain format.
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-
-# A file(cmd) program that detects file types.
-FILECMD=$lt_FILECMD
-
-# An object symbol dumper.
-OBJDUMP=$lt_OBJDUMP
-
-# Method to check whether dependent libraries are shared objects.
-deplibs_check_method=$lt_deplibs_check_method
-
-# Command to use when deplibs_check_method = "file_magic".
-file_magic_cmd=$lt_file_magic_cmd
-
-# How to find potential files when deplibs_check_method = "file_magic".
-file_magic_glob=$lt_file_magic_glob
-
-# Find potential files using nocaseglob when deplibs_check_method = "file_magic".
-want_nocaseglob=$lt_want_nocaseglob
-
-# DLL creation program.
-DLLTOOL=$lt_DLLTOOL
-
-# Command to associate shared and link libraries.
-sharedlib_from_linklib_cmd=$lt_sharedlib_from_linklib_cmd
-
-# The archiver.
-AR=$lt_AR
-
-# Flags to create an archive (by configure).
-lt_ar_flags=$lt_ar_flags
-
-# Flags to create an archive.
-AR_FLAGS=\${ARFLAGS-"\$lt_ar_flags"}
-
-# How to feed a file listing to the archiver.
-archiver_list_spec=$lt_archiver_list_spec
-
-# A symbol stripping program.
-STRIP=$lt_STRIP
-
-# Commands used to install an old-style archive.
-RANLIB=$lt_RANLIB
-old_postinstall_cmds=$lt_old_postinstall_cmds
-old_postuninstall_cmds=$lt_old_postuninstall_cmds
-
-# Whether to use a lock for old archive extraction.
-lock_old_archive_extraction=$lock_old_archive_extraction
-
-# A C compiler.
-LTCC=$lt_CC
-
-# LTCC compiler flags.
-LTCFLAGS=$lt_CFLAGS
-
-# Take the output of nm and produce a listing of raw symbols and C names.
-global_symbol_pipe=$lt_lt_cv_sys_global_symbol_pipe
-
-# Transform the output of nm in a proper C declaration.
-global_symbol_to_cdecl=$lt_lt_cv_sys_global_symbol_to_cdecl
-
-# Transform the output of nm into a list of symbols to manually relocate.
-global_symbol_to_import=$lt_lt_cv_sys_global_symbol_to_import
-
-# Transform the output of nm in a C name address pair.
-global_symbol_to_c_name_address=$lt_lt_cv_sys_global_symbol_to_c_name_address
-
-# Transform the output of nm in a C name address pair when lib prefix is needed.
-global_symbol_to_c_name_address_lib_prefix=$lt_lt_cv_sys_global_symbol_to_c_name_address_lib_prefix
-
-# The name lister interface.
-nm_interface=$lt_lt_cv_nm_interface
-
-# Specify filename containing input files for \$NM.
-nm_file_list_spec=$lt_nm_file_list_spec
-
-# The root where to search for dependent libraries,and where our libraries should be installed.
-lt_sysroot=$lt_sysroot
-
-# Command to truncate a binary pipe.
-lt_truncate_bin=$lt_lt_cv_truncate_bin
-
-# The name of the directory that contains temporary libtool files.
-objdir=$objdir
-
-# Used to examine libraries when file_magic_cmd begins with "file".
-MAGIC_CMD=$MAGIC_CMD
-
-# Must we lock files when doing compilation?
-need_locks=$lt_need_locks
-
-# Manifest tool.
-MANIFEST_TOOL=$lt_MANIFEST_TOOL
-
-# Tool to manipulate archived DWARF debug symbol files on Mac OS X.
-DSYMUTIL=$lt_DSYMUTIL
-
-# Tool to change global to local symbols on Mac OS X.
-NMEDIT=$lt_NMEDIT
-
-# Tool to manipulate fat objects and archives on Mac OS X.
-LIPO=$lt_LIPO
-
-# ldd/readelf like tool for Mach-O binaries on Mac OS X.
-OTOOL=$lt_OTOOL
-
-# ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4.
-OTOOL64=$lt_OTOOL64
-
-# Old archive suffix (normally "a").
-libext=$libext
-
-# Shared library suffix (normally ".so").
-shrext_cmds=$lt_shrext_cmds
-
-# The commands to extract the exported symbol list from a shared archive.
-extract_expsyms_cmds=$lt_extract_expsyms_cmds
-
-# Variables whose values should be saved in libtool wrapper scripts and
-# restored at link time.
-variables_saved_for_relink=$lt_variables_saved_for_relink
-
-# Do we need the "lib" prefix for modules?
-need_lib_prefix=$need_lib_prefix
-
-# Do we need a version for libraries?
-need_version=$need_version
-
-# Library versioning type.
-version_type=$version_type
-
-# Shared library runtime path variable.
-runpath_var=$runpath_var
-
-# Shared library path variable.
-shlibpath_var=$shlibpath_var
-
-# Is shlibpath searched before the hard-coded library search path?
-shlibpath_overrides_runpath=$shlibpath_overrides_runpath
-
-# Format of library name prefix.
-libname_spec=$lt_libname_spec
-
-# List of archive names.  First name is the real one, the rest are links.
-# The last name is the one that the linker finds with -lNAME
-library_names_spec=$lt_library_names_spec
-
-# The coded name of the library, if different from the real name.
-soname_spec=$lt_soname_spec
-
-# Permission mode override for installation of shared libraries.
-install_override_mode=$lt_install_override_mode
-
-# Command to use after installation of a shared archive.
-postinstall_cmds=$lt_postinstall_cmds
-
-# Command to use after uninstallation of a shared archive.
-postuninstall_cmds=$lt_postuninstall_cmds
-
-# Commands used to finish a libtool library installation in a directory.
-finish_cmds=$lt_finish_cmds
-
-# As "finish_cmds", except a single script fragment to be evaled but
-# not shown.
-finish_eval=$lt_finish_eval
-
-# Whether we should hardcode library paths into libraries.
-hardcode_into_libs=$hardcode_into_libs
-
-# Compile-time system search path for libraries.
-sys_lib_search_path_spec=$lt_sys_lib_search_path_spec
-
-# Detected run-time system search path for libraries.
-sys_lib_dlsearch_path_spec=$lt_configure_time_dlsearch_path
-
-# Explicit LT_SYS_LIBRARY_PATH set during ./configure time.
-configure_time_lt_sys_library_path=$lt_configure_time_lt_sys_library_path
-
-# Whether dlopen is supported.
-dlopen_support=$enable_dlopen
-
-# Whether dlopen of programs is supported.
-dlopen_self=$enable_dlopen_self
-
-# Whether dlopen of statically linked programs is supported.
-dlopen_self_static=$enable_dlopen_self_static
-
-# Commands to strip libraries.
-old_striplib=$lt_old_striplib
-striplib=$lt_striplib
-
-
-# The linker used to build libraries.
-LD=$lt_LD
-
-# How to create reloadable object files.
-reload_flag=$lt_reload_flag
-reload_cmds=$lt_reload_cmds
-
-# Commands used to build an old-style archive.
-old_archive_cmds=$lt_old_archive_cmds
-
-# A language specific compiler.
-CC=$lt_compiler
-
-# Is the compiler the GNU compiler?
-with_gcc=$GCC
-
-# Compiler flag to turn off builtin functions.
-no_builtin_flag=$lt_lt_prog_compiler_no_builtin_flag
-
-# Additional compiler flags for building library objects.
-pic_flag=$lt_lt_prog_compiler_pic
-
-# How to pass a linker flag through the compiler.
-wl=$lt_lt_prog_compiler_wl
-
-# Compiler flag to prevent dynamic linking.
-link_static_flag=$lt_lt_prog_compiler_static
-
-# Does compiler simultaneously support -c and -o options?
-compiler_c_o=$lt_lt_cv_prog_compiler_c_o
-
-# Whether or not to add -lc for building shared libraries.
-build_libtool_need_lc=$archive_cmds_need_lc
-
-# Whether or not to disallow shared libs when runtime libs are static.
-allow_libtool_libs_with_static_runtimes=$enable_shared_with_static_runtimes
-
-# Compiler flag to allow reflexive dlopens.
-export_dynamic_flag_spec=$lt_export_dynamic_flag_spec
-
-# Compiler flag to generate shared objects directly from archives.
-whole_archive_flag_spec=$lt_whole_archive_flag_spec
-
-# Whether the compiler copes with passing no objects directly.
-compiler_needs_object=$lt_compiler_needs_object
-
-# Create an old-style archive from a shared archive.
-old_archive_from_new_cmds=$lt_old_archive_from_new_cmds
-
-# Create a temporary old-style archive to link instead of a shared archive.
-old_archive_from_expsyms_cmds=$lt_old_archive_from_expsyms_cmds
-
-# Commands used to build a shared archive.
-archive_cmds=$lt_archive_cmds
-archive_expsym_cmds=$lt_archive_expsym_cmds
-
-# Commands used to build a loadable module if different from building
-# a shared archive.
-module_cmds=$lt_module_cmds
-module_expsym_cmds=$lt_module_expsym_cmds
-
-# Whether we are building with GNU ld or not.
-with_gnu_ld=$lt_with_gnu_ld
-
-# Flag that allows shared libraries with undefined symbols to be built.
-allow_undefined_flag=$lt_allow_undefined_flag
-
-# Flag that enforces no undefined symbols.
-no_undefined_flag=$lt_no_undefined_flag
-
-# Flag to hardcode \$libdir into a binary during linking.
-# This must work even if \$libdir does not exist
-hardcode_libdir_flag_spec=$lt_hardcode_libdir_flag_spec
-
-# Whether we need a single "-rpath" flag with a separated argument.
-hardcode_libdir_separator=$lt_hardcode_libdir_separator
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary.
-hardcode_direct=$hardcode_direct
-
-# Set to "yes" if using DIR/libNAME\$shared_ext during linking hardcodes
-# DIR into the resulting binary and the resulting library dependency is
-# "absolute",i.e impossible to change by setting \$shlibpath_var if the
-# library is relocated.
-hardcode_direct_absolute=$hardcode_direct_absolute
-
-# Set to "yes" if using the -LDIR flag during linking hardcodes DIR
-# into the resulting binary.
-hardcode_minus_L=$hardcode_minus_L
-
-# Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR
-# into the resulting binary.
-hardcode_shlibpath_var=$hardcode_shlibpath_var
-
-# Set to "yes" if building a shared library automatically hardcodes DIR
-# into the library and all subsequent libraries and executables linked
-# against it.
-hardcode_automatic=$hardcode_automatic
-
-# Set to yes if linker adds runtime paths of dependent libraries
-# to runtime path list.
-inherit_rpath=$inherit_rpath
-
-# Whether libtool must link a program against all its dependency libraries.
-link_all_deplibs=$link_all_deplibs
-
-# Set to "yes" if exported symbols are required.
-always_export_symbols=$always_export_symbols
-
-# The commands to list exported symbols.
-export_symbols_cmds=$lt_export_symbols_cmds
-
-# Symbols that should not be listed in the preloaded symbols.
-exclude_expsyms=$lt_exclude_expsyms
-
-# Symbols that must always be exported.
-include_expsyms=$lt_include_expsyms
-
-# Commands necessary for linking programs (against libraries) with templates.
-prelink_cmds=$lt_prelink_cmds
-
-# Commands necessary for finishing linking programs.
-postlink_cmds=$lt_postlink_cmds
-
-# Specify filename containing input files.
-file_list_spec=$lt_file_list_spec
-
-# How to hardcode a shared library path into an executable.
-hardcode_action=$hardcode_action
-
-# ### END LIBTOOL CONFIG
-
-_LT_EOF
-
-    cat <<'_LT_EOF' >> "$cfgfile"
-
-# ### BEGIN FUNCTIONS SHARED WITH CONFIGURE
-
-# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x$2 in
-    x)
-        ;;
-    *:)
-        eval $1=\"`$ECHO $2 | $SED 's/:/ /g'` \$$1\"
-        ;;
-    x:*)
-        eval $1=\"\$$1 `$ECHO $2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval $1=\"\$$1\ `$ECHO $2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval $1=\"`$ECHO $2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \$$1\"
-        ;;
-    *)
-        eval $1=\"`$ECHO $2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-
-
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in $*""; do
-      case $cc_temp in
-        compile | *[\\/]compile | ccache | *[\\/]ccache ) ;;
-        distcc | *[\\/]distcc | purify | *[\\/]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-
-
-# ### END FUNCTIONS SHARED WITH CONFIGURE
-
-_LT_EOF
-
-  case $host_os in
-  aix3*)
-    cat <<\_LT_EOF >> "$cfgfile"
-# AIX sometimes has problems with the GCC collect2 program.  For some
-# reason, if we set the COLLECT_NAMES environment variable, the problems
-# vanish in a puff of smoke.
-if test set != "${COLLECT_NAMES+set}"; then
-  COLLECT_NAMES=
-  export COLLECT_NAMES
-fi
-_LT_EOF
-    ;;
-  esac
-
-
-
-ltmain=$ac_aux_dir/ltmain.sh
-
-
-  # We use sed instead of cat because bash on DJGPP gets confused if
-  # if finds mixed CR/LF and LF-only lines.  Since sed operates in
-  # text mode, it properly converts lines to CR/LF.  This bash problem
-  # is reportedly fixed, but why not run on old versions too?
-  $SED '$q' "$ltmain" >> "$cfgfile" \
-     || (rm -f "$cfgfile"; exit 1)
-
-   mv -f "$cfgfile" "$ofile" ||
-    (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile")
-  chmod +x "$ofile"
-
- ;;
-
-  esac
-done # for ac_tag
-
-
-as_fn_exit 0
-_ACEOF
-ac_clean_files=$ac_clean_files_save
-
-test $ac_write_fail = 0 ||
-  as_fn_error $? "write failure creating $CONFIG_STATUS" "$LINENO" 5
-
-
-# configure is writing to config.log, and then calls config.status.
-# config.status does its own redirection, appending to config.log.
-# Unfortunately, on DOS this fails, as config.log is still kept open
-# by configure, so config.status won't be able to write to it; its
-# output is simply discarded.  So we exec the FD to /dev/null,
-# effectively closing config.log, so it can be properly (re)opened and
-# appended to by config.status.  When coming back to configure, we
-# need to make the FD available again.
-if test "$no_create" != yes; then
-  ac_cs_success=:
-  ac_config_status_args=
-  test "$silent" = yes &&
-    ac_config_status_args="$ac_config_status_args --quiet"
-  exec 5>/dev/null
-  $SHELL $CONFIG_STATUS $ac_config_status_args || ac_cs_success=false
-  exec 5>>config.log
-  # Use ||, not &&, to avoid exiting from the if with $? = 1, which
-  # would make configure fail if this is the last instruction.
-  $ac_cs_success || as_fn_exit 1
-fi
-if test -n "$ac_unrecognized_opts" && test "$enable_option_checking" != no; then
-  { printf "%s\n" "$as_me:${as_lineno-$LINENO}: WARNING: unrecognized options: $ac_unrecognized_opts" >&5
-printf "%s\n" "$as_me: WARNING: unrecognized options: $ac_unrecognized_opts" >&2;}
-fi
-
-
diff --git a/experiments/wasm-gui/third_party/libXfixes/configure.ac b/experiments/wasm-gui/third_party/libXfixes/configure.ac
deleted file mode 100644
index 83e686d80..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/configure.ac
+++ /dev/null
@@ -1,68 +0,0 @@
-#
-#  Copyright © 2003 Keith Packard, Noah Levitt
-#
-#  Permission to use, copy, modify, distribute, and sell this software and its
-#  documentation for any purpose is hereby granted without fee, provided that
-#  the above copyright notice appear in all copies and that both that
-#  copyright notice and this permission notice appear in supporting
-#  documentation, and that the name of Keith Packard not be used in
-#  advertising or publicity pertaining to distribution of the software without
-#  specific, written prior permission.  Keith Packard makes no
-#  representations about the suitability of this software for any purpose.  It
-#  is provided "as is" without express or implied warranty.
-#
-#  KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
-#  INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
-#  EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
-#  CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
-#  DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
-#  TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
-#  PERFORMANCE OF THIS SOFTWARE.
-#
-
-# Initialize Autoconf
-AC_PREREQ([2.60])
-
-#
-# Version should match the current XFixes version. XFixesQueryVersion
-# returns the version from xfixeswire.h, NOT the version we set here. But we
-# try to keep these the same.  Note that the library has an extra
-# digit in the version number to track changes which don't affect the
-# protocol, so Xfixes version l.n.m corresponds to protocol version l.n,
-# that 'revision' number appears in Xfixes.h and has to be manually
-# synchronized.
-#
-AC_INIT(libXfixes, [6.0.1],
-	[https://gitlab.freedesktop.org/xorg/lib/libxfixes/-/issues],
-	[libXfixes])
-AC_CONFIG_SRCDIR([Makefile.am])
-AC_CONFIG_HEADERS([config.h])
-AC_CONFIG_MACRO_DIRS([m4])
-
-# Initialize Automake
-AM_INIT_AUTOMAKE([foreign dist-xz])
-
-# Initialize libtool
-LT_INIT
-
-# Require xorg-macros 1.8 or later for MAN_SUBSTS set by XORG_MANPAGE_SECTIONS
-m4_ifndef([XORG_MACROS_VERSION],
-	  [m4_fatal([must install xorg-macros 1.8 or later before running autoconf/autogen])])
-XORG_MACROS_VERSION(1.8)
-XORG_DEFAULT_OPTIONS
-
-# Check fixesext configuration, strip extra digits from package version to
-# find the required protocol version
-FIXESEXT_VERSION=[`echo $VERSION | sed 's/^\([0-9][0-9]*\.[0-9][0-9]*\).*$/\1/'`]
-AC_SUBST(FIXESEXT_VERSION)
-
-# Obtain compiler/linker options for dependencies
-PKG_CHECK_MODULES(FIXESEXT,
-    [xproto >= 7.0.22] [fixesproto >= $FIXESEXT_VERSION] xextproto [x11 >= 1.6])
-
-
-AC_CONFIG_FILES([Makefile
-		src/Makefile
-		man/Makefile
-		xfixes.pc])
-AC_OUTPUT
diff --git a/experiments/wasm-gui/third_party/libXfixes/depcomp b/experiments/wasm-gui/third_party/libXfixes/depcomp
deleted file mode 100755
index 715e34311..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/depcomp
+++ /dev/null
@@ -1,791 +0,0 @@
-#! /bin/sh
-# depcomp - compile a program generating dependencies as side-effects
-
-scriptversion=2018-03-07.03; # UTC
-
-# Copyright (C) 1999-2021 Free Software Foundation, Inc.
-
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2, or (at your option)
-# any later version.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <https://www.gnu.org/licenses/>.
-
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program that contains a
-# configuration script generated by Autoconf, you may include it under
-# the same distribution terms that you use for the rest of that program.
-
-# Originally written by Alexandre Oliva <oliva@dcc.unicamp.br>.
-
-case $1 in
-  '')
-    echo "$0: No command.  Try '$0 --help' for more information." 1>&2
-    exit 1;
-    ;;
-  -h | --h*)
-    cat <<\EOF
-Usage: depcomp [--help] [--version] PROGRAM [ARGS]
-
-Run PROGRAMS ARGS to compile a file, generating dependencies
-as side-effects.
-
-Environment variables:
-  depmode     Dependency tracking mode.
-  source      Source file read by 'PROGRAMS ARGS'.
-  object      Object file output by 'PROGRAMS ARGS'.
-  DEPDIR      directory where to store dependencies.
-  depfile     Dependency file to output.
-  tmpdepfile  Temporary file to use when outputting dependencies.
-  libtool     Whether libtool is used (yes/no).
-
-Report bugs to <bug-automake@gnu.org>.
-EOF
-    exit $?
-    ;;
-  -v | --v*)
-    echo "depcomp $scriptversion"
-    exit $?
-    ;;
-esac
-
-# Get the directory component of the given path, and save it in the
-# global variables '$dir'.  Note that this directory component will
-# be either empty or ending with a '/' character.  This is deliberate.
-set_dir_from ()
-{
-  case $1 in
-    */*) dir=`echo "$1" | sed -e 's|/[^/]*$|/|'`;;
-      *) dir=;;
-  esac
-}
-
-# Get the suffix-stripped basename of the given path, and save it the
-# global variable '$base'.
-set_base_from ()
-{
-  base=`echo "$1" | sed -e 's|^.*/||' -e 's/\.[^.]*$//'`
-}
-
-# If no dependency file was actually created by the compiler invocation,
-# we still have to create a dummy depfile, to avoid errors with the
-# Makefile "include basename.Plo" scheme.
-make_dummy_depfile ()
-{
-  echo "#dummy" > "$depfile"
-}
-
-# Factor out some common post-processing of the generated depfile.
-# Requires the auxiliary global variable '$tmpdepfile' to be set.
-aix_post_process_depfile ()
-{
-  # If the compiler actually managed to produce a dependency file,
-  # post-process it.
-  if test -f "$tmpdepfile"; then
-    # Each line is of the form 'foo.o: dependency.h'.
-    # Do two passes, one to just change these to
-    #   $object: dependency.h
-    # and one to simply output
-    #   dependency.h:
-    # which is needed to avoid the deleted-header problem.
-    { sed -e "s,^.*\.[$lower]*:,$object:," < "$tmpdepfile"
-      sed -e "s,^.*\.[$lower]*:[$tab ]*,," -e 's,$,:,' < "$tmpdepfile"
-    } > "$depfile"
-    rm -f "$tmpdepfile"
-  else
-    make_dummy_depfile
-  fi
-}
-
-# A tabulation character.
-tab='	'
-# A newline character.
-nl='
-'
-# Character ranges might be problematic outside the C locale.
-# These definitions help.
-upper=ABCDEFGHIJKLMNOPQRSTUVWXYZ
-lower=abcdefghijklmnopqrstuvwxyz
-digits=0123456789
-alpha=${upper}${lower}
-
-if test -z "$depmode" || test -z "$source" || test -z "$object"; then
-  echo "depcomp: Variables source, object and depmode must be set" 1>&2
-  exit 1
-fi
-
-# Dependencies for sub/bar.o or sub/bar.obj go into sub/.deps/bar.Po.
-depfile=${depfile-`echo "$object" |
-  sed 's|[^\\/]*$|'${DEPDIR-.deps}'/&|;s|\.\([^.]*\)$|.P\1|;s|Pobj$|Po|'`}
-tmpdepfile=${tmpdepfile-`echo "$depfile" | sed 's/\.\([^.]*\)$/.T\1/'`}
-
-rm -f "$tmpdepfile"
-
-# Avoid interferences from the environment.
-gccflag= dashmflag=
-
-# Some modes work just like other modes, but use different flags.  We
-# parameterize here, but still list the modes in the big case below,
-# to make depend.m4 easier to write.  Note that we *cannot* use a case
-# here, because this file can only contain one case statement.
-if test "$depmode" = hp; then
-  # HP compiler uses -M and no extra arg.
-  gccflag=-M
-  depmode=gcc
-fi
-
-if test "$depmode" = dashXmstdout; then
-  # This is just like dashmstdout with a different argument.
-  dashmflag=-xM
-  depmode=dashmstdout
-fi
-
-cygpath_u="cygpath -u -f -"
-if test "$depmode" = msvcmsys; then
-  # This is just like msvisualcpp but w/o cygpath translation.
-  # Just convert the backslash-escaped backslashes to single forward
-  # slashes to satisfy depend.m4
-  cygpath_u='sed s,\\\\,/,g'
-  depmode=msvisualcpp
-fi
-
-if test "$depmode" = msvc7msys; then
-  # This is just like msvc7 but w/o cygpath translation.
-  # Just convert the backslash-escaped backslashes to single forward
-  # slashes to satisfy depend.m4
-  cygpath_u='sed s,\\\\,/,g'
-  depmode=msvc7
-fi
-
-if test "$depmode" = xlc; then
-  # IBM C/C++ Compilers xlc/xlC can output gcc-like dependency information.
-  gccflag=-qmakedep=gcc,-MF
-  depmode=gcc
-fi
-
-case "$depmode" in
-gcc3)
-## gcc 3 implements dependency tracking that does exactly what
-## we want.  Yay!  Note: for some reason libtool 1.4 doesn't like
-## it if -MD -MP comes after the -MF stuff.  Hmm.
-## Unfortunately, FreeBSD c89 acceptance of flags depends upon
-## the command line argument order; so add the flags where they
-## appear in depend2.am.  Note that the slowdown incurred here
-## affects only configure: in makefiles, %FASTDEP% shortcuts this.
-  for arg
-  do
-    case $arg in
-    -c) set fnord "$@" -MT "$object" -MD -MP -MF "$tmpdepfile" "$arg" ;;
-    *)  set fnord "$@" "$arg" ;;
-    esac
-    shift # fnord
-    shift # $arg
-  done
-  "$@"
-  stat=$?
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile"
-    exit $stat
-  fi
-  mv "$tmpdepfile" "$depfile"
-  ;;
-
-gcc)
-## Note that this doesn't just cater to obsosete pre-3.x GCC compilers.
-## but also to in-use compilers like IMB xlc/xlC and the HP C compiler.
-## (see the conditional assignment to $gccflag above).
-## There are various ways to get dependency output from gcc.  Here's
-## why we pick this rather obscure method:
-## - Don't want to use -MD because we'd like the dependencies to end
-##   up in a subdir.  Having to rename by hand is ugly.
-##   (We might end up doing this anyway to support other compilers.)
-## - The DEPENDENCIES_OUTPUT environment variable makes gcc act like
-##   -MM, not -M (despite what the docs say).  Also, it might not be
-##   supported by the other compilers which use the 'gcc' depmode.
-## - Using -M directly means running the compiler twice (even worse
-##   than renaming).
-  if test -z "$gccflag"; then
-    gccflag=-MD,
-  fi
-  "$@" -Wp,"$gccflag$tmpdepfile"
-  stat=$?
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile"
-    exit $stat
-  fi
-  rm -f "$depfile"
-  echo "$object : \\" > "$depfile"
-  # The second -e expression handles DOS-style file names with drive
-  # letters.
-  sed -e 's/^[^:]*: / /' \
-      -e 's/^['$alpha']:\/[^:]*: / /' < "$tmpdepfile" >> "$depfile"
-## This next piece of magic avoids the "deleted header file" problem.
-## The problem is that when a header file which appears in a .P file
-## is deleted, the dependency causes make to die (because there is
-## typically no way to rebuild the header).  We avoid this by adding
-## dummy dependencies for each header file.  Too bad gcc doesn't do
-## this for us directly.
-## Some versions of gcc put a space before the ':'.  On the theory
-## that the space means something, we add a space to the output as
-## well.  hp depmode also adds that space, but also prefixes the VPATH
-## to the object.  Take care to not repeat it in the output.
-## Some versions of the HPUX 10.20 sed can't process this invocation
-## correctly.  Breaking it into two sed invocations is a workaround.
-  tr ' ' "$nl" < "$tmpdepfile" \
-    | sed -e 's/^\\$//' -e '/^$/d' -e "s|.*$object$||" -e '/:$/d' \
-    | sed -e 's/$/ :/' >> "$depfile"
-  rm -f "$tmpdepfile"
-  ;;
-
-hp)
-  # This case exists only to let depend.m4 do its work.  It works by
-  # looking at the text of this script.  This case will never be run,
-  # since it is checked for above.
-  exit 1
-  ;;
-
-sgi)
-  if test "$libtool" = yes; then
-    "$@" "-Wp,-MDupdate,$tmpdepfile"
-  else
-    "$@" -MDupdate "$tmpdepfile"
-  fi
-  stat=$?
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile"
-    exit $stat
-  fi
-  rm -f "$depfile"
-
-  if test -f "$tmpdepfile"; then  # yes, the sourcefile depend on other files
-    echo "$object : \\" > "$depfile"
-    # Clip off the initial element (the dependent).  Don't try to be
-    # clever and replace this with sed code, as IRIX sed won't handle
-    # lines with more than a fixed number of characters (4096 in
-    # IRIX 6.2 sed, 8192 in IRIX 6.5).  We also remove comment lines;
-    # the IRIX cc adds comments like '#:fec' to the end of the
-    # dependency line.
-    tr ' ' "$nl" < "$tmpdepfile" \
-      | sed -e 's/^.*\.o://' -e 's/#.*$//' -e '/^$/ d' \
-      | tr "$nl" ' ' >> "$depfile"
-    echo >> "$depfile"
-    # The second pass generates a dummy entry for each header file.
-    tr ' ' "$nl" < "$tmpdepfile" \
-      | sed -e 's/^.*\.o://' -e 's/#.*$//' -e '/^$/ d' -e 's/$/:/' \
-      >> "$depfile"
-  else
-    make_dummy_depfile
-  fi
-  rm -f "$tmpdepfile"
-  ;;
-
-xlc)
-  # This case exists only to let depend.m4 do its work.  It works by
-  # looking at the text of this script.  This case will never be run,
-  # since it is checked for above.
-  exit 1
-  ;;
-
-aix)
-  # The C for AIX Compiler uses -M and outputs the dependencies
-  # in a .u file.  In older versions, this file always lives in the
-  # current directory.  Also, the AIX compiler puts '$object:' at the
-  # start of each line; $object doesn't have directory information.
-  # Version 6 uses the directory in both cases.
-  set_dir_from "$object"
-  set_base_from "$object"
-  if test "$libtool" = yes; then
-    tmpdepfile1=$dir$base.u
-    tmpdepfile2=$base.u
-    tmpdepfile3=$dir.libs/$base.u
-    "$@" -Wc,-M
-  else
-    tmpdepfile1=$dir$base.u
-    tmpdepfile2=$dir$base.u
-    tmpdepfile3=$dir$base.u
-    "$@" -M
-  fi
-  stat=$?
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3"
-    exit $stat
-  fi
-
-  for tmpdepfile in "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3"
-  do
-    test -f "$tmpdepfile" && break
-  done
-  aix_post_process_depfile
-  ;;
-
-tcc)
-  # tcc (Tiny C Compiler) understand '-MD -MF file' since version 0.9.26
-  # FIXME: That version still under development at the moment of writing.
-  #        Make that this statement remains true also for stable, released
-  #        versions.
-  # It will wrap lines (doesn't matter whether long or short) with a
-  # trailing '\', as in:
-  #
-  #   foo.o : \
-  #    foo.c \
-  #    foo.h \
-  #
-  # It will put a trailing '\' even on the last line, and will use leading
-  # spaces rather than leading tabs (at least since its commit 0394caf7
-  # "Emit spaces for -MD").
-  "$@" -MD -MF "$tmpdepfile"
-  stat=$?
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile"
-    exit $stat
-  fi
-  rm -f "$depfile"
-  # Each non-empty line is of the form 'foo.o : \' or ' dep.h \'.
-  # We have to change lines of the first kind to '$object: \'.
-  sed -e "s|.*:|$object :|" < "$tmpdepfile" > "$depfile"
-  # And for each line of the second kind, we have to emit a 'dep.h:'
-  # dummy dependency, to avoid the deleted-header problem.
-  sed -n -e 's|^  *\(.*\) *\\$|\1:|p' < "$tmpdepfile" >> "$depfile"
-  rm -f "$tmpdepfile"
-  ;;
-
-## The order of this option in the case statement is important, since the
-## shell code in configure will try each of these formats in the order
-## listed in this file.  A plain '-MD' option would be understood by many
-## compilers, so we must ensure this comes after the gcc and icc options.
-pgcc)
-  # Portland's C compiler understands '-MD'.
-  # Will always output deps to 'file.d' where file is the root name of the
-  # source file under compilation, even if file resides in a subdirectory.
-  # The object file name does not affect the name of the '.d' file.
-  # pgcc 10.2 will output
-  #    foo.o: sub/foo.c sub/foo.h
-  # and will wrap long lines using '\' :
-  #    foo.o: sub/foo.c ... \
-  #     sub/foo.h ... \
-  #     ...
-  set_dir_from "$object"
-  # Use the source, not the object, to determine the base name, since
-  # that's sadly what pgcc will do too.
-  set_base_from "$source"
-  tmpdepfile=$base.d
-
-  # For projects that build the same source file twice into different object
-  # files, the pgcc approach of using the *source* file root name can cause
-  # problems in parallel builds.  Use a locking strategy to avoid stomping on
-  # the same $tmpdepfile.
-  lockdir=$base.d-lock
-  trap "
-    echo '$0: caught signal, cleaning up...' >&2
-    rmdir '$lockdir'
-    exit 1
-  " 1 2 13 15
-  numtries=100
-  i=$numtries
-  while test $i -gt 0; do
-    # mkdir is a portable test-and-set.
-    if mkdir "$lockdir" 2>/dev/null; then
-      # This process acquired the lock.
-      "$@" -MD
-      stat=$?
-      # Release the lock.
-      rmdir "$lockdir"
-      break
-    else
-      # If the lock is being held by a different process, wait
-      # until the winning process is done or we timeout.
-      while test -d "$lockdir" && test $i -gt 0; do
-        sleep 1
-        i=`expr $i - 1`
-      done
-    fi
-    i=`expr $i - 1`
-  done
-  trap - 1 2 13 15
-  if test $i -le 0; then
-    echo "$0: failed to acquire lock after $numtries attempts" >&2
-    echo "$0: check lockdir '$lockdir'" >&2
-    exit 1
-  fi
-
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile"
-    exit $stat
-  fi
-  rm -f "$depfile"
-  # Each line is of the form `foo.o: dependent.h',
-  # or `foo.o: dep1.h dep2.h \', or ` dep3.h dep4.h \'.
-  # Do two passes, one to just change these to
-  # `$object: dependent.h' and one to simply `dependent.h:'.
-  sed "s,^[^:]*:,$object :," < "$tmpdepfile" > "$depfile"
-  # Some versions of the HPUX 10.20 sed can't process this invocation
-  # correctly.  Breaking it into two sed invocations is a workaround.
-  sed 's,^[^:]*: \(.*\)$,\1,;s/^\\$//;/^$/d;/:$/d' < "$tmpdepfile" \
-    | sed -e 's/$/ :/' >> "$depfile"
-  rm -f "$tmpdepfile"
-  ;;
-
-hp2)
-  # The "hp" stanza above does not work with aCC (C++) and HP's ia64
-  # compilers, which have integrated preprocessors.  The correct option
-  # to use with these is +Maked; it writes dependencies to a file named
-  # 'foo.d', which lands next to the object file, wherever that
-  # happens to be.
-  # Much of this is similar to the tru64 case; see comments there.
-  set_dir_from  "$object"
-  set_base_from "$object"
-  if test "$libtool" = yes; then
-    tmpdepfile1=$dir$base.d
-    tmpdepfile2=$dir.libs/$base.d
-    "$@" -Wc,+Maked
-  else
-    tmpdepfile1=$dir$base.d
-    tmpdepfile2=$dir$base.d
-    "$@" +Maked
-  fi
-  stat=$?
-  if test $stat -ne 0; then
-     rm -f "$tmpdepfile1" "$tmpdepfile2"
-     exit $stat
-  fi
-
-  for tmpdepfile in "$tmpdepfile1" "$tmpdepfile2"
-  do
-    test -f "$tmpdepfile" && break
-  done
-  if test -f "$tmpdepfile"; then
-    sed -e "s,^.*\.[$lower]*:,$object:," "$tmpdepfile" > "$depfile"
-    # Add 'dependent.h:' lines.
-    sed -ne '2,${
-               s/^ *//
-               s/ \\*$//
-               s/$/:/
-               p
-             }' "$tmpdepfile" >> "$depfile"
-  else
-    make_dummy_depfile
-  fi
-  rm -f "$tmpdepfile" "$tmpdepfile2"
-  ;;
-
-tru64)
-  # The Tru64 compiler uses -MD to generate dependencies as a side
-  # effect.  'cc -MD -o foo.o ...' puts the dependencies into 'foo.o.d'.
-  # At least on Alpha/Redhat 6.1, Compaq CCC V6.2-504 seems to put
-  # dependencies in 'foo.d' instead, so we check for that too.
-  # Subdirectories are respected.
-  set_dir_from  "$object"
-  set_base_from "$object"
-
-  if test "$libtool" = yes; then
-    # Libtool generates 2 separate objects for the 2 libraries.  These
-    # two compilations output dependencies in $dir.libs/$base.o.d and
-    # in $dir$base.o.d.  We have to check for both files, because
-    # one of the two compilations can be disabled.  We should prefer
-    # $dir$base.o.d over $dir.libs/$base.o.d because the latter is
-    # automatically cleaned when .libs/ is deleted, while ignoring
-    # the former would cause a distcleancheck panic.
-    tmpdepfile1=$dir$base.o.d          # libtool 1.5
-    tmpdepfile2=$dir.libs/$base.o.d    # Likewise.
-    tmpdepfile3=$dir.libs/$base.d      # Compaq CCC V6.2-504
-    "$@" -Wc,-MD
-  else
-    tmpdepfile1=$dir$base.d
-    tmpdepfile2=$dir$base.d
-    tmpdepfile3=$dir$base.d
-    "$@" -MD
-  fi
-
-  stat=$?
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3"
-    exit $stat
-  fi
-
-  for tmpdepfile in "$tmpdepfile1" "$tmpdepfile2" "$tmpdepfile3"
-  do
-    test -f "$tmpdepfile" && break
-  done
-  # Same post-processing that is required for AIX mode.
-  aix_post_process_depfile
-  ;;
-
-msvc7)
-  if test "$libtool" = yes; then
-    showIncludes=-Wc,-showIncludes
-  else
-    showIncludes=-showIncludes
-  fi
-  "$@" $showIncludes > "$tmpdepfile"
-  stat=$?
-  grep -v '^Note: including file: ' "$tmpdepfile"
-  if test $stat -ne 0; then
-    rm -f "$tmpdepfile"
-    exit $stat
-  fi
-  rm -f "$depfile"
-  echo "$object : \\" > "$depfile"
-  # The first sed program below extracts the file names and escapes
-  # backslashes for cygpath.  The second sed program outputs the file
-  # name when reading, but also accumulates all include files in the
-  # hold buffer in order to output them again at the end.  This only
-  # works with sed implementations that can handle large buffers.
-  sed < "$tmpdepfile" -n '
-/^Note: including file:  *\(.*\)/ {
-  s//\1/
-  s/\\/\\\\/g
-  p
-}' | $cygpath_u | sort -u | sed -n '
-s/ /\\ /g
-s/\(.*\)/'"$tab"'\1 \\/p
-s/.\(.*\) \\/\1:/
-H
-$ {
-  s/.*/'"$tab"'/
-  G
-  p
-}' >> "$depfile"
-  echo >> "$depfile" # make sure the fragment doesn't end with a backslash
-  rm -f "$tmpdepfile"
-  ;;
-
-msvc7msys)
-  # This case exists only to let depend.m4 do its work.  It works by
-  # looking at the text of this script.  This case will never be run,
-  # since it is checked for above.
-  exit 1
-  ;;
-
-#nosideeffect)
-  # This comment above is used by automake to tell side-effect
-  # dependency tracking mechanisms from slower ones.
-
-dashmstdout)
-  # Important note: in order to support this mode, a compiler *must*
-  # always write the preprocessed file to stdout, regardless of -o.
-  "$@" || exit $?
-
-  # Remove the call to Libtool.
-  if test "$libtool" = yes; then
-    while test "X$1" != 'X--mode=compile'; do
-      shift
-    done
-    shift
-  fi
-
-  # Remove '-o $object'.
-  IFS=" "
-  for arg
-  do
-    case $arg in
-    -o)
-      shift
-      ;;
-    $object)
-      shift
-      ;;
-    *)
-      set fnord "$@" "$arg"
-      shift # fnord
-      shift # $arg
-      ;;
-    esac
-  done
-
-  test -z "$dashmflag" && dashmflag=-M
-  # Require at least two characters before searching for ':'
-  # in the target name.  This is to cope with DOS-style filenames:
-  # a dependency such as 'c:/foo/bar' could be seen as target 'c' otherwise.
-  "$@" $dashmflag |
-    sed "s|^[$tab ]*[^:$tab ][^:][^:]*:[$tab ]*|$object: |" > "$tmpdepfile"
-  rm -f "$depfile"
-  cat < "$tmpdepfile" > "$depfile"
-  # Some versions of the HPUX 10.20 sed can't process this sed invocation
-  # correctly.  Breaking it into two sed invocations is a workaround.
-  tr ' ' "$nl" < "$tmpdepfile" \
-    | sed -e 's/^\\$//' -e '/^$/d' -e '/:$/d' \
-    | sed -e 's/$/ :/' >> "$depfile"
-  rm -f "$tmpdepfile"
-  ;;
-
-dashXmstdout)
-  # This case only exists to satisfy depend.m4.  It is never actually
-  # run, as this mode is specially recognized in the preamble.
-  exit 1
-  ;;
-
-makedepend)
-  "$@" || exit $?
-  # Remove any Libtool call
-  if test "$libtool" = yes; then
-    while test "X$1" != 'X--mode=compile'; do
-      shift
-    done
-    shift
-  fi
-  # X makedepend
-  shift
-  cleared=no eat=no
-  for arg
-  do
-    case $cleared in
-    no)
-      set ""; shift
-      cleared=yes ;;
-    esac
-    if test $eat = yes; then
-      eat=no
-      continue
-    fi
-    case "$arg" in
-    -D*|-I*)
-      set fnord "$@" "$arg"; shift ;;
-    # Strip any option that makedepend may not understand.  Remove
-    # the object too, otherwise makedepend will parse it as a source file.
-    -arch)
-      eat=yes ;;
-    -*|$object)
-      ;;
-    *)
-      set fnord "$@" "$arg"; shift ;;
-    esac
-  done
-  obj_suffix=`echo "$object" | sed 's/^.*\././'`
-  touch "$tmpdepfile"
-  ${MAKEDEPEND-makedepend} -o"$obj_suffix" -f"$tmpdepfile" "$@"
-  rm -f "$depfile"
-  # makedepend may prepend the VPATH from the source file name to the object.
-  # No need to regex-escape $object, excess matching of '.' is harmless.
-  sed "s|^.*\($object *:\)|\1|" "$tmpdepfile" > "$depfile"
-  # Some versions of the HPUX 10.20 sed can't process the last invocation
-  # correctly.  Breaking it into two sed invocations is a workaround.
-  sed '1,2d' "$tmpdepfile" \
-    | tr ' ' "$nl" \
-    | sed -e 's/^\\$//' -e '/^$/d' -e '/:$/d' \
-    | sed -e 's/$/ :/' >> "$depfile"
-  rm -f "$tmpdepfile" "$tmpdepfile".bak
-  ;;
-
-cpp)
-  # Important note: in order to support this mode, a compiler *must*
-  # always write the preprocessed file to stdout.
-  "$@" || exit $?
-
-  # Remove the call to Libtool.
-  if test "$libtool" = yes; then
-    while test "X$1" != 'X--mode=compile'; do
-      shift
-    done
-    shift
-  fi
-
-  # Remove '-o $object'.
-  IFS=" "
-  for arg
-  do
-    case $arg in
-    -o)
-      shift
-      ;;
-    $object)
-      shift
-      ;;
-    *)
-      set fnord "$@" "$arg"
-      shift # fnord
-      shift # $arg
-      ;;
-    esac
-  done
-
-  "$@" -E \
-    | sed -n -e '/^# [0-9][0-9]* "\([^"]*\)".*/ s:: \1 \\:p' \
-             -e '/^#line [0-9][0-9]* "\([^"]*\)".*/ s:: \1 \\:p' \
-    | sed '$ s: \\$::' > "$tmpdepfile"
-  rm -f "$depfile"
-  echo "$object : \\" > "$depfile"
-  cat < "$tmpdepfile" >> "$depfile"
-  sed < "$tmpdepfile" '/^$/d;s/^ //;s/ \\$//;s/$/ :/' >> "$depfile"
-  rm -f "$tmpdepfile"
-  ;;
-
-msvisualcpp)
-  # Important note: in order to support this mode, a compiler *must*
-  # always write the preprocessed file to stdout.
-  "$@" || exit $?
-
-  # Remove the call to Libtool.
-  if test "$libtool" = yes; then
-    while test "X$1" != 'X--mode=compile'; do
-      shift
-    done
-    shift
-  fi
-
-  IFS=" "
-  for arg
-  do
-    case "$arg" in
-    -o)
-      shift
-      ;;
-    $object)
-      shift
-      ;;
-    "-Gm"|"/Gm"|"-Gi"|"/Gi"|"-ZI"|"/ZI")
-        set fnord "$@"
-        shift
-        shift
-        ;;
-    *)
-        set fnord "$@" "$arg"
-        shift
-        shift
-        ;;
-    esac
-  done
-  "$@" -E 2>/dev/null |
-  sed -n '/^#line [0-9][0-9]* "\([^"]*\)"/ s::\1:p' | $cygpath_u | sort -u > "$tmpdepfile"
-  rm -f "$depfile"
-  echo "$object : \\" > "$depfile"
-  sed < "$tmpdepfile" -n -e 's% %\\ %g' -e '/^\(.*\)$/ s::'"$tab"'\1 \\:p' >> "$depfile"
-  echo "$tab" >> "$depfile"
-  sed < "$tmpdepfile" -n -e 's% %\\ %g' -e '/^\(.*\)$/ s::\1\::p' >> "$depfile"
-  rm -f "$tmpdepfile"
-  ;;
-
-msvcmsys)
-  # This case exists only to let depend.m4 do its work.  It works by
-  # looking at the text of this script.  This case will never be run,
-  # since it is checked for above.
-  exit 1
-  ;;
-
-none)
-  exec "$@"
-  ;;
-
-*)
-  echo "Unknown depmode $depmode" 1>&2
-  exit 1
-  ;;
-esac
-
-exit 0
-
-# Local Variables:
-# mode: shell-script
-# sh-indentation: 2
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-start: "scriptversion="
-# time-stamp-format: "%:y-%02m-%02d.%02H"
-# time-stamp-time-zone: "UTC0"
-# time-stamp-end: "; # UTC"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXfixes/include/X11/extensions/Xfixes.h b/experiments/wasm-gui/third_party/libXfixes/include/X11/extensions/Xfixes.h
deleted file mode 100644
index 41083c975..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/include/X11/extensions/Xfixes.h
+++ /dev/null
@@ -1,279 +0,0 @@
-/*
- * Copyright (c) 2006, Oracle and/or its affiliates.
- * Copyright 2011, 2021 Red Hat, Inc.
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice (including the next
- * paragraph) shall be included in all copies or substantial portions of the
- * Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
- * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
- * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
- * DEALINGS IN THE SOFTWARE.
- */
-/*
- * Copyright © 2002 Keith Packard, member of The XFree86 Project, Inc.
- *
- * Permission to use, copy, modify, distribute, and sell this software and its
- * documentation for any purpose is hereby granted without fee, provided that
- * the above copyright notice appear in all copies and that both that
- * copyright notice and this permission notice appear in supporting
- * documentation, and that the name of Keith Packard not be used in
- * advertising or publicity pertaining to distribution of the software without
- * specific, written prior permission.  Keith Packard makes no
- * representations about the suitability of this software for any purpose.  It
- * is provided "as is" without express or implied warranty.
- *
- * KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
- * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
- * EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
- * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
- * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
- * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- * PERFORMANCE OF THIS SOFTWARE.
- */
-
-#ifndef _XFIXES_H_
-#define _XFIXES_H_
-
-#include <X11/extensions/xfixeswire.h>
-
-#include <X11/Xfuncproto.h>
-#include <X11/Xlib.h>
-
-/*
- * This revision number also appears in configure.ac, they have
- * to be manually synchronized
- */
-#define XFIXES_REVISION	1
-#define XFIXES_VERSION	((XFIXES_MAJOR * 10000) + (XFIXES_MINOR * 100) + (XFIXES_REVISION))
-
-typedef struct {
-    int type;			/* event base */
-    unsigned long serial;
-    Bool send_event;
-    Display *display;
-    Window window;
-    int subtype;
-    Window owner;
-    Atom selection;
-    Time timestamp;
-    Time selection_timestamp;
-} XFixesSelectionNotifyEvent;
-
-typedef struct {
-    int type;			/* event base */
-    unsigned long serial;
-    Bool send_event;
-    Display *display;
-    Window window;
-    int subtype;
-    unsigned long cursor_serial;
-    Time timestamp;
-    Atom cursor_name;
-} XFixesCursorNotifyEvent;
-
-typedef struct {
-    short	    x, y;
-    unsigned short  width, height;
-    unsigned short  xhot, yhot;
-    unsigned long   cursor_serial;
-    unsigned long   *pixels;
-#if XFIXES_MAJOR >= 2
-    Atom	    atom;		    /* Version >= 2 only */
-    const char	    *name;		    /* Version >= 2 only */
-#endif
-} XFixesCursorImage;
-
-#if XFIXES_MAJOR >= 2
-/* Version 2 types */
-
-typedef XID XserverRegion;
-
-typedef struct {
-    short	    x, y;
-    unsigned short  width, height;
-    unsigned short  xhot, yhot;
-    unsigned long   cursor_serial;
-    unsigned long   *pixels;
-    Atom	    atom;
-    const char	    *name;
-} XFixesCursorImageAndName;
-
-#endif
-
-_XFUNCPROTOBEGIN
-
-Bool XFixesQueryExtension (Display *dpy,
-			    int *event_base_return,
-			    int *error_base_return);
-Status XFixesQueryVersion (Display *dpy,
-			    int     *major_version_return,
-			    int     *minor_version_return);
-
-int XFixesVersion (void);
-
-void
-XFixesChangeSaveSet (Display	*dpy,
-		     Window	win,
-		     int	mode,
-		     int	target,
-		     int	map);
-
-void
-XFixesSelectSelectionInput (Display	    *dpy,
-			    Window	    win,
-			    Atom	    selection,
-			    unsigned long   eventMask);
-
-void
-XFixesSelectCursorInput (Display	*dpy,
-			 Window		win,
-			 unsigned long	eventMask);
-
-XFixesCursorImage *
-XFixesGetCursorImage (Display *dpy);
-
-#if XFIXES_MAJOR >= 2
-/* Version 2 functions */
-
-XserverRegion
-XFixesCreateRegion (Display *dpy, XRectangle *rectangles, int nrectangles);
-
-XserverRegion
-XFixesCreateRegionFromBitmap (Display *dpy, Pixmap bitmap);
-
-XserverRegion
-XFixesCreateRegionFromWindow (Display *dpy, Window window, int kind);
-
-XserverRegion
-XFixesCreateRegionFromGC (Display *dpy, GC gc);
-
-XserverRegion
-XFixesCreateRegionFromPicture (Display *dpy, XID picture);
-
-void
-XFixesDestroyRegion (Display *dpy, XserverRegion region);
-
-void
-XFixesSetRegion (Display *dpy, XserverRegion region,
-		 XRectangle *rectangles, int nrectangles);
-
-void
-XFixesCopyRegion (Display *dpy, XserverRegion dst, XserverRegion src);
-
-void
-XFixesUnionRegion (Display *dpy, XserverRegion dst,
-		   XserverRegion src1, XserverRegion src2);
-
-void
-XFixesIntersectRegion (Display *dpy, XserverRegion dst,
-		       XserverRegion src1, XserverRegion src2);
-
-void
-XFixesSubtractRegion (Display *dpy, XserverRegion dst,
-		      XserverRegion src1, XserverRegion src2);
-
-void
-XFixesInvertRegion (Display *dpy, XserverRegion dst,
-		    XRectangle *rect, XserverRegion src);
-
-void
-XFixesTranslateRegion (Display *dpy, XserverRegion region, int dx, int dy);
-
-void
-XFixesRegionExtents (Display *dpy, XserverRegion dst, XserverRegion src);
-
-XRectangle *
-XFixesFetchRegion (Display *dpy, XserverRegion region, int *nrectanglesRet);
-
-XRectangle *
-XFixesFetchRegionAndBounds (Display *dpy, XserverRegion region,
-			    int *nrectanglesRet,
-			    XRectangle *bounds);
-
-void
-XFixesSetGCClipRegion (Display *dpy, GC gc,
-		       int clip_x_origin, int clip_y_origin,
-		       XserverRegion region);
-
-void
-XFixesSetWindowShapeRegion (Display *dpy, Window win, int shape_kind,
-			    int x_off, int y_off, XserverRegion region);
-
-void
-XFixesSetPictureClipRegion (Display *dpy, XID picture,
-			    int clip_x_origin, int clip_y_origin,
-			    XserverRegion region);
-
-void
-XFixesSetCursorName (Display *dpy, Cursor cursor, const char *name);
-
-const char *
-XFixesGetCursorName (Display *dpy, Cursor cursor, Atom *atom);
-
-void
-XFixesChangeCursor (Display *dpy, Cursor source, Cursor destination);
-
-void
-XFixesChangeCursorByName (Display *dpy, Cursor source, const char *name);
-
-#endif	/* XFIXES_MAJOR >= 2 */
-
-#if XFIXES_MAJOR >= 3
-
-void
-XFixesExpandRegion (Display *dpy, XserverRegion dst, XserverRegion src,
-		    unsigned left, unsigned right,
-		    unsigned top, unsigned bottom);
-
-#endif	/* XFIXES_MAJOR >= 3 */
-
-#if XFIXES_MAJOR >= 4
-/* Version 4.0 externs */
-
-void
-XFixesHideCursor (Display *dpy, Window win);
-
-void
-XFixesShowCursor (Display *dpy, Window win);
-
-#endif /* XFIXES_MAJOR >= 4 */
-
-#if XFIXES_MAJOR >= 5
-
-typedef XID PointerBarrier;
-
-PointerBarrier
-XFixesCreatePointerBarrier(Display *dpy, Window w, int x1, int y1,
-			   int x2, int y2, int directions,
-			   int num_devices, int *devices);
-
-void
-XFixesDestroyPointerBarrier(Display *dpy, PointerBarrier b);
-
-#endif /* XFIXES_MAJOR >= 5 */
-
-#if XFIXES_MAJOR >= 6
-
-void
-XFixesSetClientDisconnectMode(Display *dpy, int disconnect_mode);
-
-int
-XFixesGetClientDisconnectMode(Display *dpy);
-
-#endif /* XFIXES_MAJOR >= 6 */
-
-_XFUNCPROTOEND
-
-#endif /* _XFIXES_H_ */
diff --git a/experiments/wasm-gui/third_party/libXfixes/install-sh b/experiments/wasm-gui/third_party/libXfixes/install-sh
deleted file mode 100755
index ec298b537..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/install-sh
+++ /dev/null
@@ -1,541 +0,0 @@
-#!/bin/sh
-# install - install a program, script, or datafile
-
-scriptversion=2020-11-14.01; # UTC
-
-# This originates from X11R5 (mit/util/scripts/install.sh), which was
-# later released in X11R6 (xc/config/util/install.sh) with the
-# following copyright and license.
-#
-# Copyright (C) 1994 X Consortium
-#
-# Permission is hereby granted, free of charge, to any person obtaining a copy
-# of this software and associated documentation files (the "Software"), to
-# deal in the Software without restriction, including without limitation the
-# rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
-# sell copies of the Software, and to permit persons to whom the Software is
-# furnished to do so, subject to the following conditions:
-#
-# The above copyright notice and this permission notice shall be included in
-# all copies or substantial portions of the Software.
-#
-# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
-# X CONSORTIUM BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
-# AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNEC-
-# TION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-#
-# Except as contained in this notice, the name of the X Consortium shall not
-# be used in advertising or otherwise to promote the sale, use or other deal-
-# ings in this Software without prior written authorization from the X Consor-
-# tium.
-#
-#
-# FSF changes to this file are in the public domain.
-#
-# Calling this script install-sh is preferred over install.sh, to prevent
-# 'make' implicit rules from creating a file called install from it
-# when there is no Makefile.
-#
-# This script is compatible with the BSD install script, but was written
-# from scratch.
-
-tab='	'
-nl='
-'
-IFS=" $tab$nl"
-
-# Set DOITPROG to "echo" to test this script.
-
-doit=${DOITPROG-}
-doit_exec=${doit:-exec}
-
-# Put in absolute file names if you don't have them in your path;
-# or use environment vars.
-
-chgrpprog=${CHGRPPROG-chgrp}
-chmodprog=${CHMODPROG-chmod}
-chownprog=${CHOWNPROG-chown}
-cmpprog=${CMPPROG-cmp}
-cpprog=${CPPROG-cp}
-mkdirprog=${MKDIRPROG-mkdir}
-mvprog=${MVPROG-mv}
-rmprog=${RMPROG-rm}
-stripprog=${STRIPPROG-strip}
-
-posix_mkdir=
-
-# Desired mode of installed file.
-mode=0755
-
-# Create dirs (including intermediate dirs) using mode 755.
-# This is like GNU 'install' as of coreutils 8.32 (2020).
-mkdir_umask=22
-
-backupsuffix=
-chgrpcmd=
-chmodcmd=$chmodprog
-chowncmd=
-mvcmd=$mvprog
-rmcmd="$rmprog -f"
-stripcmd=
-
-src=
-dst=
-dir_arg=
-dst_arg=
-
-copy_on_change=false
-is_target_a_directory=possibly
-
-usage="\
-Usage: $0 [OPTION]... [-T] SRCFILE DSTFILE
-   or: $0 [OPTION]... SRCFILES... DIRECTORY
-   or: $0 [OPTION]... -t DIRECTORY SRCFILES...
-   or: $0 [OPTION]... -d DIRECTORIES...
-
-In the 1st form, copy SRCFILE to DSTFILE.
-In the 2nd and 3rd, copy all SRCFILES to DIRECTORY.
-In the 4th, create DIRECTORIES.
-
-Options:
-     --help     display this help and exit.
-     --version  display version info and exit.
-
-  -c            (ignored)
-  -C            install only if different (preserve data modification time)
-  -d            create directories instead of installing files.
-  -g GROUP      $chgrpprog installed files to GROUP.
-  -m MODE       $chmodprog installed files to MODE.
-  -o USER       $chownprog installed files to USER.
-  -p            pass -p to $cpprog.
-  -s            $stripprog installed files.
-  -S SUFFIX     attempt to back up existing files, with suffix SUFFIX.
-  -t DIRECTORY  install into DIRECTORY.
-  -T            report an error if DSTFILE is a directory.
-
-Environment variables override the default commands:
-  CHGRPPROG CHMODPROG CHOWNPROG CMPPROG CPPROG MKDIRPROG MVPROG
-  RMPROG STRIPPROG
-
-By default, rm is invoked with -f; when overridden with RMPROG,
-it's up to you to specify -f if you want it.
-
-If -S is not specified, no backups are attempted.
-
-Email bug reports to bug-automake@gnu.org.
-Automake home page: https://www.gnu.org/software/automake/
-"
-
-while test $# -ne 0; do
-  case $1 in
-    -c) ;;
-
-    -C) copy_on_change=true;;
-
-    -d) dir_arg=true;;
-
-    -g) chgrpcmd="$chgrpprog $2"
-        shift;;
-
-    --help) echo "$usage"; exit $?;;
-
-    -m) mode=$2
-        case $mode in
-          *' '* | *"$tab"* | *"$nl"* | *'*'* | *'?'* | *'['*)
-            echo "$0: invalid mode: $mode" >&2
-            exit 1;;
-        esac
-        shift;;
-
-    -o) chowncmd="$chownprog $2"
-        shift;;
-
-    -p) cpprog="$cpprog -p";;
-
-    -s) stripcmd=$stripprog;;
-
-    -S) backupsuffix="$2"
-        shift;;
-
-    -t)
-        is_target_a_directory=always
-        dst_arg=$2
-        # Protect names problematic for 'test' and other utilities.
-        case $dst_arg in
-          -* | [=\(\)!]) dst_arg=./$dst_arg;;
-        esac
-        shift;;
-
-    -T) is_target_a_directory=never;;
-
-    --version) echo "$0 $scriptversion"; exit $?;;
-
-    --) shift
-        break;;
-
-    -*) echo "$0: invalid option: $1" >&2
-        exit 1;;
-
-    *)  break;;
-  esac
-  shift
-done
-
-# We allow the use of options -d and -T together, by making -d
-# take the precedence; this is for compatibility with GNU install.
-
-if test -n "$dir_arg"; then
-  if test -n "$dst_arg"; then
-    echo "$0: target directory not allowed when installing a directory." >&2
-    exit 1
-  fi
-fi
-
-if test $# -ne 0 && test -z "$dir_arg$dst_arg"; then
-  # When -d is used, all remaining arguments are directories to create.
-  # When -t is used, the destination is already specified.
-  # Otherwise, the last argument is the destination.  Remove it from $@.
-  for arg
-  do
-    if test -n "$dst_arg"; then
-      # $@ is not empty: it contains at least $arg.
-      set fnord "$@" "$dst_arg"
-      shift # fnord
-    fi
-    shift # arg
-    dst_arg=$arg
-    # Protect names problematic for 'test' and other utilities.
-    case $dst_arg in
-      -* | [=\(\)!]) dst_arg=./$dst_arg;;
-    esac
-  done
-fi
-
-if test $# -eq 0; then
-  if test -z "$dir_arg"; then
-    echo "$0: no input file specified." >&2
-    exit 1
-  fi
-  # It's OK to call 'install-sh -d' without argument.
-  # This can happen when creating conditional directories.
-  exit 0
-fi
-
-if test -z "$dir_arg"; then
-  if test $# -gt 1 || test "$is_target_a_directory" = always; then
-    if test ! -d "$dst_arg"; then
-      echo "$0: $dst_arg: Is not a directory." >&2
-      exit 1
-    fi
-  fi
-fi
-
-if test -z "$dir_arg"; then
-  do_exit='(exit $ret); exit $ret'
-  trap "ret=129; $do_exit" 1
-  trap "ret=130; $do_exit" 2
-  trap "ret=141; $do_exit" 13
-  trap "ret=143; $do_exit" 15
-
-  # Set umask so as not to create temps with too-generous modes.
-  # However, 'strip' requires both read and write access to temps.
-  case $mode in
-    # Optimize common cases.
-    *644) cp_umask=133;;
-    *755) cp_umask=22;;
-
-    *[0-7])
-      if test -z "$stripcmd"; then
-        u_plus_rw=
-      else
-        u_plus_rw='% 200'
-      fi
-      cp_umask=`expr '(' 777 - $mode % 1000 ')' $u_plus_rw`;;
-    *)
-      if test -z "$stripcmd"; then
-        u_plus_rw=
-      else
-        u_plus_rw=,u+rw
-      fi
-      cp_umask=$mode$u_plus_rw;;
-  esac
-fi
-
-for src
-do
-  # Protect names problematic for 'test' and other utilities.
-  case $src in
-    -* | [=\(\)!]) src=./$src;;
-  esac
-
-  if test -n "$dir_arg"; then
-    dst=$src
-    dstdir=$dst
-    test -d "$dstdir"
-    dstdir_status=$?
-    # Don't chown directories that already exist.
-    if test $dstdir_status = 0; then
-      chowncmd=""
-    fi
-  else
-
-    # Waiting for this to be detected by the "$cpprog $src $dsttmp" command
-    # might cause directories to be created, which would be especially bad
-    # if $src (and thus $dsttmp) contains '*'.
-    if test ! -f "$src" && test ! -d "$src"; then
-      echo "$0: $src does not exist." >&2
-      exit 1
-    fi
-
-    if test -z "$dst_arg"; then
-      echo "$0: no destination specified." >&2
-      exit 1
-    fi
-    dst=$dst_arg
-
-    # If destination is a directory, append the input filename.
-    if test -d "$dst"; then
-      if test "$is_target_a_directory" = never; then
-        echo "$0: $dst_arg: Is a directory" >&2
-        exit 1
-      fi
-      dstdir=$dst
-      dstbase=`basename "$src"`
-      case $dst in
-	*/) dst=$dst$dstbase;;
-	*)  dst=$dst/$dstbase;;
-      esac
-      dstdir_status=0
-    else
-      dstdir=`dirname "$dst"`
-      test -d "$dstdir"
-      dstdir_status=$?
-    fi
-  fi
-
-  case $dstdir in
-    */) dstdirslash=$dstdir;;
-    *)  dstdirslash=$dstdir/;;
-  esac
-
-  obsolete_mkdir_used=false
-
-  if test $dstdir_status != 0; then
-    case $posix_mkdir in
-      '')
-        # With -d, create the new directory with the user-specified mode.
-        # Otherwise, rely on $mkdir_umask.
-        if test -n "$dir_arg"; then
-          mkdir_mode=-m$mode
-        else
-          mkdir_mode=
-        fi
-
-        posix_mkdir=false
-	# The $RANDOM variable is not portable (e.g., dash).  Use it
-	# here however when possible just to lower collision chance.
-	tmpdir=${TMPDIR-/tmp}/ins$RANDOM-$$
-
-	trap '
-	  ret=$?
-	  rmdir "$tmpdir/a/b" "$tmpdir/a" "$tmpdir" 2>/dev/null
-	  exit $ret
-	' 0
-
-	# Because "mkdir -p" follows existing symlinks and we likely work
-	# directly in world-writeable /tmp, make sure that the '$tmpdir'
-	# directory is successfully created first before we actually test
-	# 'mkdir -p'.
-	if (umask $mkdir_umask &&
-	    $mkdirprog $mkdir_mode "$tmpdir" &&
-	    exec $mkdirprog $mkdir_mode -p -- "$tmpdir/a/b") >/dev/null 2>&1
-	then
-	  if test -z "$dir_arg" || {
-	       # Check for POSIX incompatibilities with -m.
-	       # HP-UX 11.23 and IRIX 6.5 mkdir -m -p sets group- or
-	       # other-writable bit of parent directory when it shouldn't.
-	       # FreeBSD 6.1 mkdir -m -p sets mode of existing directory.
-	       test_tmpdir="$tmpdir/a"
-	       ls_ld_tmpdir=`ls -ld "$test_tmpdir"`
-	       case $ls_ld_tmpdir in
-		 d????-?r-*) different_mode=700;;
-		 d????-?--*) different_mode=755;;
-		 *) false;;
-	       esac &&
-	       $mkdirprog -m$different_mode -p -- "$test_tmpdir" && {
-		 ls_ld_tmpdir_1=`ls -ld "$test_tmpdir"`
-		 test "$ls_ld_tmpdir" = "$ls_ld_tmpdir_1"
-	       }
-	     }
-	  then posix_mkdir=:
-	  fi
-	  rmdir "$tmpdir/a/b" "$tmpdir/a" "$tmpdir"
-	else
-	  # Remove any dirs left behind by ancient mkdir implementations.
-	  rmdir ./$mkdir_mode ./-p ./-- "$tmpdir" 2>/dev/null
-	fi
-	trap '' 0;;
-    esac
-
-    if
-      $posix_mkdir && (
-        umask $mkdir_umask &&
-        $doit_exec $mkdirprog $mkdir_mode -p -- "$dstdir"
-      )
-    then :
-    else
-
-      # mkdir does not conform to POSIX,
-      # or it failed possibly due to a race condition.  Create the
-      # directory the slow way, step by step, checking for races as we go.
-
-      case $dstdir in
-        /*) prefix='/';;
-        [-=\(\)!]*) prefix='./';;
-        *)  prefix='';;
-      esac
-
-      oIFS=$IFS
-      IFS=/
-      set -f
-      set fnord $dstdir
-      shift
-      set +f
-      IFS=$oIFS
-
-      prefixes=
-
-      for d
-      do
-        test X"$d" = X && continue
-
-        prefix=$prefix$d
-        if test -d "$prefix"; then
-          prefixes=
-        else
-          if $posix_mkdir; then
-            (umask $mkdir_umask &&
-             $doit_exec $mkdirprog $mkdir_mode -p -- "$dstdir") && break
-            # Don't fail if two instances are running concurrently.
-            test -d "$prefix" || exit 1
-          else
-            case $prefix in
-              *\'*) qprefix=`echo "$prefix" | sed "s/'/'\\\\\\\\''/g"`;;
-              *) qprefix=$prefix;;
-            esac
-            prefixes="$prefixes '$qprefix'"
-          fi
-        fi
-        prefix=$prefix/
-      done
-
-      if test -n "$prefixes"; then
-        # Don't fail if two instances are running concurrently.
-        (umask $mkdir_umask &&
-         eval "\$doit_exec \$mkdirprog $prefixes") ||
-          test -d "$dstdir" || exit 1
-        obsolete_mkdir_used=true
-      fi
-    fi
-  fi
-
-  if test -n "$dir_arg"; then
-    { test -z "$chowncmd" || $doit $chowncmd "$dst"; } &&
-    { test -z "$chgrpcmd" || $doit $chgrpcmd "$dst"; } &&
-    { test "$obsolete_mkdir_used$chowncmd$chgrpcmd" = false ||
-      test -z "$chmodcmd" || $doit $chmodcmd $mode "$dst"; } || exit 1
-  else
-
-    # Make a couple of temp file names in the proper directory.
-    dsttmp=${dstdirslash}_inst.$$_
-    rmtmp=${dstdirslash}_rm.$$_
-
-    # Trap to clean up those temp files at exit.
-    trap 'ret=$?; rm -f "$dsttmp" "$rmtmp" && exit $ret' 0
-
-    # Copy the file name to the temp name.
-    (umask $cp_umask &&
-     { test -z "$stripcmd" || {
-	 # Create $dsttmp read-write so that cp doesn't create it read-only,
-	 # which would cause strip to fail.
-	 if test -z "$doit"; then
-	   : >"$dsttmp" # No need to fork-exec 'touch'.
-	 else
-	   $doit touch "$dsttmp"
-	 fi
-       }
-     } &&
-     $doit_exec $cpprog "$src" "$dsttmp") &&
-
-    # and set any options; do chmod last to preserve setuid bits.
-    #
-    # If any of these fail, we abort the whole thing.  If we want to
-    # ignore errors from any of these, just make sure not to ignore
-    # errors from the above "$doit $cpprog $src $dsttmp" command.
-    #
-    { test -z "$chowncmd" || $doit $chowncmd "$dsttmp"; } &&
-    { test -z "$chgrpcmd" || $doit $chgrpcmd "$dsttmp"; } &&
-    { test -z "$stripcmd" || $doit $stripcmd "$dsttmp"; } &&
-    { test -z "$chmodcmd" || $doit $chmodcmd $mode "$dsttmp"; } &&
-
-    # If -C, don't bother to copy if it wouldn't change the file.
-    if $copy_on_change &&
-       old=`LC_ALL=C ls -dlL "$dst"     2>/dev/null` &&
-       new=`LC_ALL=C ls -dlL "$dsttmp"  2>/dev/null` &&
-       set -f &&
-       set X $old && old=:$2:$4:$5:$6 &&
-       set X $new && new=:$2:$4:$5:$6 &&
-       set +f &&
-       test "$old" = "$new" &&
-       $cmpprog "$dst" "$dsttmp" >/dev/null 2>&1
-    then
-      rm -f "$dsttmp"
-    else
-      # If $backupsuffix is set, and the file being installed
-      # already exists, attempt a backup.  Don't worry if it fails,
-      # e.g., if mv doesn't support -f.
-      if test -n "$backupsuffix" && test -f "$dst"; then
-        $doit $mvcmd -f "$dst" "$dst$backupsuffix" 2>/dev/null
-      fi
-
-      # Rename the file to the real destination.
-      $doit $mvcmd -f "$dsttmp" "$dst" 2>/dev/null ||
-
-      # The rename failed, perhaps because mv can't rename something else
-      # to itself, or perhaps because mv is so ancient that it does not
-      # support -f.
-      {
-        # Now remove or move aside any old file at destination location.
-        # We try this two ways since rm can't unlink itself on some
-        # systems and the destination file might be busy for other
-        # reasons.  In this case, the final cleanup might fail but the new
-        # file should still install successfully.
-        {
-          test ! -f "$dst" ||
-          $doit $rmcmd "$dst" 2>/dev/null ||
-          { $doit $mvcmd -f "$dst" "$rmtmp" 2>/dev/null &&
-            { $doit $rmcmd "$rmtmp" 2>/dev/null; :; }
-          } ||
-          { echo "$0: cannot unlink or rename $dst" >&2
-            (exit 1); exit 1
-          }
-        } &&
-
-        # Now rename the file to the real destination.
-        $doit $mvcmd "$dsttmp" "$dst"
-      }
-    fi || exit 1
-
-    trap '' 0
-  fi
-done
-
-# Local variables:
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-start: "scriptversion="
-# time-stamp-format: "%:y-%02m-%02d.%02H"
-# time-stamp-time-zone: "UTC0"
-# time-stamp-end: "; # UTC"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXfixes/ltmain.sh b/experiments/wasm-gui/third_party/libXfixes/ltmain.sh
deleted file mode 100644
index 2a50d7f6f..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/ltmain.sh
+++ /dev/null
@@ -1,11436 +0,0 @@
-#! /usr/bin/env sh
-## DO NOT EDIT - This file generated from ./build-aux/ltmain.in
-##               by inline-source v2019-02-19.15
-
-# libtool (GNU libtool) 2.4.7
-# Provide generalized library-building support services.
-# Written by Gordon Matzigkeit <gord@gnu.ai.mit.edu>, 1996
-
-# Copyright (C) 1996-2019, 2021-2022 Free Software Foundation, Inc.
-# This is free software; see the source for copying conditions.  There is NO
-# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-
-# GNU Libtool is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of the License, or
-# (at your option) any later version.
-#
-# As a special exception to the GNU General Public License,
-# if you distribute this file as part of a program or library that
-# is built using GNU Libtool, you may include this file under the
-# same distribution terms that you use for the rest of that program.
-#
-# GNU Libtool is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the GNU
-# General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-
-
-PROGRAM=libtool
-PACKAGE=libtool
-VERSION=2.4.7
-package_revision=2.4.7
-
-
-## ------ ##
-## Usage. ##
-## ------ ##
-
-# Run './libtool --help' for help with using this script from the
-# command line.
-
-
-## ------------------------------- ##
-## User overridable command paths. ##
-## ------------------------------- ##
-
-# After configure completes, it has a better idea of some of the
-# shell tools we need than the defaults used by the functions shared
-# with bootstrap, so set those here where they can still be over-
-# ridden by the user, but otherwise take precedence.
-
-: ${AUTOCONF="autoconf"}
-: ${AUTOMAKE="automake"}
-
-
-## -------------------------- ##
-## Source external libraries. ##
-## -------------------------- ##
-
-# Much of our low-level functionality needs to be sourced from external
-# libraries, which are installed to $pkgauxdir.
-
-# Set a version string for this script.
-scriptversion=2019-02-19.15; # UTC
-
-# General shell script boiler plate, and helper functions.
-# Written by Gary V. Vaughan, 2004
-
-# This is free software.  There is NO warranty; not even for
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-#
-# Copyright (C) 2004-2019, 2021 Bootstrap Authors
-#
-# This file is dual licensed under the terms of the MIT license
-# <https://opensource.org/license/MIT>, and GPL version 2 or later
-# <http://www.gnu.org/licenses/gpl-2.0.html>.  You must apply one of
-# these licenses when using or redistributing this software or any of
-# the files within it.  See the URLs above, or the file `LICENSE`
-# included in the Bootstrap distribution for the full license texts.
-
-# Please report bugs or propose patches to:
-# <https://github.com/gnulib-modules/bootstrap/issues>
-
-
-## ------ ##
-## Usage. ##
-## ------ ##
-
-# Evaluate this file near the top of your script to gain access to
-# the functions and variables defined here:
-#
-#   . `echo "$0" | ${SED-sed} 's|[^/]*$||'`/build-aux/funclib.sh
-#
-# If you need to override any of the default environment variable
-# settings, do that before evaluating this file.
-
-
-## -------------------- ##
-## Shell normalisation. ##
-## -------------------- ##
-
-# Some shells need a little help to be as Bourne compatible as possible.
-# Before doing anything else, make sure all that help has been provided!
-
-DUALCASE=1; export DUALCASE # for MKS sh
-if test -n "${ZSH_VERSION+set}" && (emulate sh) >/dev/null 2>&1; then :
-  emulate sh
-  NULLCMD=:
-  # Pre-4.2 versions of Zsh do word splitting on ${1+"$@"}, which
-  # is contrary to our usage.  Disable this feature.
-  alias -g '${1+"$@"}'='"$@"'
-  setopt NO_GLOB_SUBST
-else
-  case `(set -o) 2>/dev/null` in *posix*) set -o posix ;; esac
-fi
-
-# NLS nuisances: We save the old values in case they are required later.
-_G_user_locale=
-_G_safe_locale=
-for _G_var in LANG LANGUAGE LC_ALL LC_CTYPE LC_COLLATE LC_MESSAGES
-do
-  eval "if test set = \"\${$_G_var+set}\"; then
-          save_$_G_var=\$$_G_var
-          $_G_var=C
-	  export $_G_var
-	  _G_user_locale=\"$_G_var=\\\$save_\$_G_var; \$_G_user_locale\"
-	  _G_safe_locale=\"$_G_var=C; \$_G_safe_locale\"
-	fi"
-done
-# These NLS vars are set unconditionally (bootstrap issue #24).  Unset those
-# in case the environment reset is needed later and the $save_* variant is not
-# defined (see the code above).
-LC_ALL=C
-LANGUAGE=C
-export LANGUAGE LC_ALL
-
-# Make sure IFS has a sensible default
-sp=' '
-nl='
-'
-IFS="$sp	$nl"
-
-# There are apparently some retarded systems that use ';' as a PATH separator!
-if test "${PATH_SEPARATOR+set}" != set; then
-  PATH_SEPARATOR=:
-  (PATH='/bin;/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 && {
-    (PATH='/bin:/bin'; FPATH=$PATH; sh -c :) >/dev/null 2>&1 ||
-      PATH_SEPARATOR=';'
-  }
-fi
-
-
-# func_unset VAR
-# --------------
-# Portably unset VAR.
-# In some shells, an 'unset VAR' statement leaves a non-zero return
-# status if VAR is already unset, which might be problematic if the
-# statement is used at the end of a function (thus poisoning its return
-# value) or when 'set -e' is active (causing even a spurious abort of
-# the script in this case).
-func_unset ()
-{
-    { eval $1=; (eval unset $1) >/dev/null 2>&1 && eval unset $1 || : ; }
-}
-
-
-# Make sure CDPATH doesn't cause `cd` commands to output the target dir.
-func_unset CDPATH
-
-# Make sure ${,E,F}GREP behave sanely.
-func_unset GREP_OPTIONS
-
-
-## ------------------------- ##
-## Locate command utilities. ##
-## ------------------------- ##
-
-
-# func_executable_p FILE
-# ----------------------
-# Check that FILE is an executable regular file.
-func_executable_p ()
-{
-    test -f "$1" && test -x "$1"
-}
-
-
-# func_path_progs PROGS_LIST CHECK_FUNC [PATH]
-# --------------------------------------------
-# Search for either a program that responds to --version with output
-# containing "GNU", or else returned by CHECK_FUNC otherwise, by
-# trying all the directories in PATH with each of the elements of
-# PROGS_LIST.
-#
-# CHECK_FUNC should accept the path to a candidate program, and
-# set $func_check_prog_result if it truncates its output less than
-# $_G_path_prog_max characters.
-func_path_progs ()
-{
-    _G_progs_list=$1
-    _G_check_func=$2
-    _G_PATH=${3-"$PATH"}
-
-    _G_path_prog_max=0
-    _G_path_prog_found=false
-    _G_save_IFS=$IFS; IFS=${PATH_SEPARATOR-:}
-    for _G_dir in $_G_PATH; do
-      IFS=$_G_save_IFS
-      test -z "$_G_dir" && _G_dir=.
-      for _G_prog_name in $_G_progs_list; do
-        for _exeext in '' .EXE; do
-          _G_path_prog=$_G_dir/$_G_prog_name$_exeext
-          func_executable_p "$_G_path_prog" || continue
-          case `"$_G_path_prog" --version 2>&1` in
-            *GNU*) func_path_progs_result=$_G_path_prog _G_path_prog_found=: ;;
-            *)     $_G_check_func $_G_path_prog
-		   func_path_progs_result=$func_check_prog_result
-		   ;;
-          esac
-          $_G_path_prog_found && break 3
-        done
-      done
-    done
-    IFS=$_G_save_IFS
-    test -z "$func_path_progs_result" && {
-      echo "no acceptable sed could be found in \$PATH" >&2
-      exit 1
-    }
-}
-
-
-# We want to be able to use the functions in this file before configure
-# has figured out where the best binaries are kept, which means we have
-# to search for them ourselves - except when the results are already set
-# where we skip the searches.
-
-# Unless the user overrides by setting SED, search the path for either GNU
-# sed, or the sed that truncates its output the least.
-test -z "$SED" && {
-  _G_sed_script=s/aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbbb/
-  for _G_i in 1 2 3 4 5 6 7; do
-    _G_sed_script=$_G_sed_script$nl$_G_sed_script
-  done
-  echo "$_G_sed_script" 2>/dev/null | sed 99q >conftest.sed
-  _G_sed_script=
-
-  func_check_prog_sed ()
-  {
-    _G_path_prog=$1
-
-    _G_count=0
-    printf 0123456789 >conftest.in
-    while :
-    do
-      cat conftest.in conftest.in >conftest.tmp
-      mv conftest.tmp conftest.in
-      cp conftest.in conftest.nl
-      echo '' >> conftest.nl
-      "$_G_path_prog" -f conftest.sed <conftest.nl >conftest.out 2>/dev/null || break
-      diff conftest.out conftest.nl >/dev/null 2>&1 || break
-      _G_count=`expr $_G_count + 1`
-      if test "$_G_count" -gt "$_G_path_prog_max"; then
-        # Best one so far, save it but keep looking for a better one
-        func_check_prog_result=$_G_path_prog
-        _G_path_prog_max=$_G_count
-      fi
-      # 10*(2^10) chars as input seems more than enough
-      test 10 -lt "$_G_count" && break
-    done
-    rm -f conftest.in conftest.tmp conftest.nl conftest.out
-  }
-
-  func_path_progs "sed gsed" func_check_prog_sed "$PATH:/usr/xpg4/bin"
-  rm -f conftest.sed
-  SED=$func_path_progs_result
-}
-
-
-# Unless the user overrides by setting GREP, search the path for either GNU
-# grep, or the grep that truncates its output the least.
-test -z "$GREP" && {
-  func_check_prog_grep ()
-  {
-    _G_path_prog=$1
-
-    _G_count=0
-    _G_path_prog_max=0
-    printf 0123456789 >conftest.in
-    while :
-    do
-      cat conftest.in conftest.in >conftest.tmp
-      mv conftest.tmp conftest.in
-      cp conftest.in conftest.nl
-      echo 'GREP' >> conftest.nl
-      "$_G_path_prog" -e 'GREP$' -e '-(cannot match)-' <conftest.nl >conftest.out 2>/dev/null || break
-      diff conftest.out conftest.nl >/dev/null 2>&1 || break
-      _G_count=`expr $_G_count + 1`
-      if test "$_G_count" -gt "$_G_path_prog_max"; then
-        # Best one so far, save it but keep looking for a better one
-        func_check_prog_result=$_G_path_prog
-        _G_path_prog_max=$_G_count
-      fi
-      # 10*(2^10) chars as input seems more than enough
-      test 10 -lt "$_G_count" && break
-    done
-    rm -f conftest.in conftest.tmp conftest.nl conftest.out
-  }
-
-  func_path_progs "grep ggrep" func_check_prog_grep "$PATH:/usr/xpg4/bin"
-  GREP=$func_path_progs_result
-}
-
-
-## ------------------------------- ##
-## User overridable command paths. ##
-## ------------------------------- ##
-
-# All uppercase variable names are used for environment variables.  These
-# variables can be overridden by the user before calling a script that
-# uses them if a suitable command of that name is not already available
-# in the command search PATH.
-
-: ${CP="cp -f"}
-: ${ECHO="printf %s\n"}
-: ${EGREP="$GREP -E"}
-: ${FGREP="$GREP -F"}
-: ${LN_S="ln -s"}
-: ${MAKE="make"}
-: ${MKDIR="mkdir"}
-: ${MV="mv -f"}
-: ${RM="rm -f"}
-: ${SHELL="${CONFIG_SHELL-/bin/sh}"}
-
-
-## -------------------- ##
-## Useful sed snippets. ##
-## -------------------- ##
-
-sed_dirname='s|/[^/]*$||'
-sed_basename='s|^.*/||'
-
-# Sed substitution that helps us do robust quoting.  It backslashifies
-# metacharacters that are still active within double-quoted strings.
-sed_quote_subst='s|\([`"$\\]\)|\\\1|g'
-
-# Same as above, but do not quote variable references.
-sed_double_quote_subst='s/\(["`\\]\)/\\\1/g'
-
-# Sed substitution that turns a string into a regex matching for the
-# string literally.
-sed_make_literal_regex='s|[].[^$\\*\/]|\\&|g'
-
-# Sed substitution that converts a w32 file name or path
-# that contains forward slashes, into one that contains
-# (escaped) backslashes.  A very naive implementation.
-sed_naive_backslashify='s|\\\\*|\\|g;s|/|\\|g;s|\\|\\\\|g'
-
-# Re-'\' parameter expansions in output of sed_double_quote_subst that
-# were '\'-ed in input to the same.  If an odd number of '\' preceded a
-# '$' in input to sed_double_quote_subst, that '$' was protected from
-# expansion.  Since each input '\' is now two '\'s, look for any number
-# of runs of four '\'s followed by two '\'s and then a '$'.  '\' that '$'.
-_G_bs='\\'
-_G_bs2='\\\\'
-_G_bs4='\\\\\\\\'
-_G_dollar='\$'
-sed_double_backslash="\
-  s/$_G_bs4/&\\
-/g
-  s/^$_G_bs2$_G_dollar/$_G_bs&/
-  s/\\([^$_G_bs]\\)$_G_bs2$_G_dollar/\\1$_G_bs2$_G_bs$_G_dollar/g
-  s/\n//g"
-
-# require_check_ifs_backslash
-# ---------------------------
-# Check if we can use backslash as IFS='\' separator, and set
-# $check_ifs_backshlash_broken to ':' or 'false'.
-require_check_ifs_backslash=func_require_check_ifs_backslash
-func_require_check_ifs_backslash ()
-{
-  _G_save_IFS=$IFS
-  IFS='\'
-  _G_check_ifs_backshlash='a\\b'
-  for _G_i in $_G_check_ifs_backshlash
-  do
-  case $_G_i in
-  a)
-    check_ifs_backshlash_broken=false
-    ;;
-  '')
-    break
-    ;;
-  *)
-    check_ifs_backshlash_broken=:
-    break
-    ;;
-  esac
-  done
-  IFS=$_G_save_IFS
-  require_check_ifs_backslash=:
-}
-
-
-## ----------------- ##
-## Global variables. ##
-## ----------------- ##
-
-# Except for the global variables explicitly listed below, the following
-# functions in the '^func_' namespace, and the '^require_' namespace
-# variables initialised in the 'Resource management' section, sourcing
-# this file will not pollute your global namespace with anything
-# else. There's no portable way to scope variables in Bourne shell
-# though, so actually running these functions will sometimes place
-# results into a variable named after the function, and often use
-# temporary variables in the '^_G_' namespace. If you are careful to
-# avoid using those namespaces casually in your sourcing script, things
-# should continue to work as you expect. And, of course, you can freely
-# overwrite any of the functions or variables defined here before
-# calling anything to customize them.
-
-EXIT_SUCCESS=0
-EXIT_FAILURE=1
-EXIT_MISMATCH=63  # $? = 63 is used to indicate version mismatch to missing.
-EXIT_SKIP=77	  # $? = 77 is used to indicate a skipped test to automake.
-
-# Allow overriding, eg assuming that you follow the convention of
-# putting '$debug_cmd' at the start of all your functions, you can get
-# bash to show function call trace with:
-#
-#    debug_cmd='eval echo "${FUNCNAME[0]} $*" >&2' bash your-script-name
-debug_cmd=${debug_cmd-":"}
-exit_cmd=:
-
-# By convention, finish your script with:
-#
-#    exit $exit_status
-#
-# so that you can set exit_status to non-zero if you want to indicate
-# something went wrong during execution without actually bailing out at
-# the point of failure.
-exit_status=$EXIT_SUCCESS
-
-# Work around backward compatibility issue on IRIX 6.5. On IRIX 6.4+, sh
-# is ksh but when the shell is invoked as "sh" and the current value of
-# the _XPG environment variable is not equal to 1 (one), the special
-# positional parameter $0, within a function call, is the name of the
-# function.
-progpath=$0
-
-# The name of this program.
-progname=`$ECHO "$progpath" |$SED "$sed_basename"`
-
-# Make sure we have an absolute progpath for reexecution:
-case $progpath in
-  [\\/]*|[A-Za-z]:\\*) ;;
-  *[\\/]*)
-     progdir=`$ECHO "$progpath" |$SED "$sed_dirname"`
-     progdir=`cd "$progdir" && pwd`
-     progpath=$progdir/$progname
-     ;;
-  *)
-     _G_IFS=$IFS
-     IFS=${PATH_SEPARATOR-:}
-     for progdir in $PATH; do
-       IFS=$_G_IFS
-       test -x "$progdir/$progname" && break
-     done
-     IFS=$_G_IFS
-     test -n "$progdir" || progdir=`pwd`
-     progpath=$progdir/$progname
-     ;;
-esac
-
-
-## ----------------- ##
-## Standard options. ##
-## ----------------- ##
-
-# The following options affect the operation of the functions defined
-# below, and should be set appropriately depending on run-time para-
-# meters passed on the command line.
-
-opt_dry_run=false
-opt_quiet=false
-opt_verbose=false
-
-# Categories 'all' and 'none' are always available.  Append any others
-# you will pass as the first argument to func_warning from your own
-# code.
-warning_categories=
-
-# By default, display warnings according to 'opt_warning_types'.  Set
-# 'warning_func'  to ':' to elide all warnings, or func_fatal_error to
-# treat the next displayed warning as a fatal error.
-warning_func=func_warn_and_continue
-
-# Set to 'all' to display all warnings, 'none' to suppress all
-# warnings, or a space delimited list of some subset of
-# 'warning_categories' to display only the listed warnings.
-opt_warning_types=all
-
-
-## -------------------- ##
-## Resource management. ##
-## -------------------- ##
-
-# This section contains definitions for functions that each ensure a
-# particular resource (a file, or a non-empty configuration variable for
-# example) is available, and if appropriate to extract default values
-# from pertinent package files. Call them using their associated
-# 'require_*' variable to ensure that they are executed, at most, once.
-#
-# It's entirely deliberate that calling these functions can set
-# variables that don't obey the namespace limitations obeyed by the rest
-# of this file, in order that that they be as useful as possible to
-# callers.
-
-
-# require_term_colors
-# -------------------
-# Allow display of bold text on terminals that support it.
-require_term_colors=func_require_term_colors
-func_require_term_colors ()
-{
-    $debug_cmd
-
-    test -t 1 && {
-      # COLORTERM and USE_ANSI_COLORS environment variables take
-      # precedence, because most terminfo databases neglect to describe
-      # whether color sequences are supported.
-      test -n "${COLORTERM+set}" && : ${USE_ANSI_COLORS="1"}
-
-      if test 1 = "$USE_ANSI_COLORS"; then
-        # Standard ANSI escape sequences
-        tc_reset=''
-        tc_bold='';   tc_standout=''
-        tc_red='';   tc_green=''
-        tc_blue='';  tc_cyan=''
-      else
-        # Otherwise trust the terminfo database after all.
-        test -n "`tput sgr0 2>/dev/null`" && {
-          tc_reset=`tput sgr0`
-          test -n "`tput bold 2>/dev/null`" && tc_bold=`tput bold`
-          tc_standout=$tc_bold
-          test -n "`tput smso 2>/dev/null`" && tc_standout=`tput smso`
-          test -n "`tput setaf 1 2>/dev/null`" && tc_red=`tput setaf 1`
-          test -n "`tput setaf 2 2>/dev/null`" && tc_green=`tput setaf 2`
-          test -n "`tput setaf 4 2>/dev/null`" && tc_blue=`tput setaf 4`
-          test -n "`tput setaf 5 2>/dev/null`" && tc_cyan=`tput setaf 5`
-        }
-      fi
-    }
-
-    require_term_colors=:
-}
-
-
-## ----------------- ##
-## Function library. ##
-## ----------------- ##
-
-# This section contains a variety of useful functions to call in your
-# scripts. Take note of the portable wrappers for features provided by
-# some modern shells, which will fall back to slower equivalents on
-# less featureful shells.
-
-
-# func_append VAR VALUE
-# ---------------------
-# Append VALUE onto the existing contents of VAR.
-
-  # We should try to minimise forks, especially on Windows where they are
-  # unreasonably slow, so skip the feature probes when bash or zsh are
-  # being used:
-  if test set = "${BASH_VERSION+set}${ZSH_VERSION+set}"; then
-    : ${_G_HAVE_ARITH_OP="yes"}
-    : ${_G_HAVE_XSI_OPS="yes"}
-    # The += operator was introduced in bash 3.1
-    case $BASH_VERSION in
-      [12].* | 3.0 | 3.0*) ;;
-      *)
-        : ${_G_HAVE_PLUSEQ_OP="yes"}
-        ;;
-    esac
-  fi
-
-  # _G_HAVE_PLUSEQ_OP
-  # Can be empty, in which case the shell is probed, "yes" if += is
-  # useable or anything else if it does not work.
-  test -z "$_G_HAVE_PLUSEQ_OP" \
-    && (eval 'x=a; x+=" b"; test "a b" = "$x"') 2>/dev/null \
-    && _G_HAVE_PLUSEQ_OP=yes
-
-if test yes = "$_G_HAVE_PLUSEQ_OP"
-then
-  # This is an XSI compatible shell, allowing a faster implementation...
-  eval 'func_append ()
-  {
-    $debug_cmd
-
-    eval "$1+=\$2"
-  }'
-else
-  # ...otherwise fall back to using expr, which is often a shell builtin.
-  func_append ()
-  {
-    $debug_cmd
-
-    eval "$1=\$$1\$2"
-  }
-fi
-
-
-# func_append_quoted VAR VALUE
-# ----------------------------
-# Quote VALUE and append to the end of shell variable VAR, separated
-# by a space.
-if test yes = "$_G_HAVE_PLUSEQ_OP"; then
-  eval 'func_append_quoted ()
-  {
-    $debug_cmd
-
-    func_quote_arg pretty "$2"
-    eval "$1+=\\ \$func_quote_arg_result"
-  }'
-else
-  func_append_quoted ()
-  {
-    $debug_cmd
-
-    func_quote_arg pretty "$2"
-    eval "$1=\$$1\\ \$func_quote_arg_result"
-  }
-fi
-
-
-# func_append_uniq VAR VALUE
-# --------------------------
-# Append unique VALUE onto the existing contents of VAR, assuming
-# entries are delimited by the first character of VALUE.  For example:
-#
-#   func_append_uniq options " --another-option option-argument"
-#
-# will only append to $options if " --another-option option-argument "
-# is not already present somewhere in $options already (note spaces at
-# each end implied by leading space in second argument).
-func_append_uniq ()
-{
-    $debug_cmd
-
-    eval _G_current_value='`$ECHO $'$1'`'
-    _G_delim=`expr "$2" : '\(.\)'`
-
-    case $_G_delim$_G_current_value$_G_delim in
-      *"$2$_G_delim"*) ;;
-      *) func_append "$@" ;;
-    esac
-}
-
-
-# func_arith TERM...
-# ------------------
-# Set func_arith_result to the result of evaluating TERMs.
-  test -z "$_G_HAVE_ARITH_OP" \
-    && (eval 'test 2 = $(( 1 + 1 ))') 2>/dev/null \
-    && _G_HAVE_ARITH_OP=yes
-
-if test yes = "$_G_HAVE_ARITH_OP"; then
-  eval 'func_arith ()
-  {
-    $debug_cmd
-
-    func_arith_result=$(( $* ))
-  }'
-else
-  func_arith ()
-  {
-    $debug_cmd
-
-    func_arith_result=`expr "$@"`
-  }
-fi
-
-
-# func_basename FILE
-# ------------------
-# Set func_basename_result to FILE with everything up to and including
-# the last / stripped.
-if test yes = "$_G_HAVE_XSI_OPS"; then
-  # If this shell supports suffix pattern removal, then use it to avoid
-  # forking. Hide the definitions single quotes in case the shell chokes
-  # on unsupported syntax...
-  _b='func_basename_result=${1##*/}'
-  _d='case $1 in
-        */*) func_dirname_result=${1%/*}$2 ;;
-        *  ) func_dirname_result=$3        ;;
-      esac'
-
-else
-  # ...otherwise fall back to using sed.
-  _b='func_basename_result=`$ECHO "$1" |$SED "$sed_basename"`'
-  _d='func_dirname_result=`$ECHO "$1"  |$SED "$sed_dirname"`
-      if test "X$func_dirname_result" = "X$1"; then
-        func_dirname_result=$3
-      else
-        func_append func_dirname_result "$2"
-      fi'
-fi
-
-eval 'func_basename ()
-{
-    $debug_cmd
-
-    '"$_b"'
-}'
-
-
-# func_dirname FILE APPEND NONDIR_REPLACEMENT
-# -------------------------------------------
-# Compute the dirname of FILE.  If nonempty, add APPEND to the result,
-# otherwise set result to NONDIR_REPLACEMENT.
-eval 'func_dirname ()
-{
-    $debug_cmd
-
-    '"$_d"'
-}'
-
-
-# func_dirname_and_basename FILE APPEND NONDIR_REPLACEMENT
-# --------------------------------------------------------
-# Perform func_basename and func_dirname in a single function
-# call:
-#   dirname:  Compute the dirname of FILE.  If nonempty,
-#             add APPEND to the result, otherwise set result
-#             to NONDIR_REPLACEMENT.
-#             value returned in "$func_dirname_result"
-#   basename: Compute filename of FILE.
-#             value retuned in "$func_basename_result"
-# For efficiency, we do not delegate to the functions above but instead
-# duplicate the functionality here.
-eval 'func_dirname_and_basename ()
-{
-    $debug_cmd
-
-    '"$_b"'
-    '"$_d"'
-}'
-
-
-# func_echo ARG...
-# ----------------
-# Echo program name prefixed message.
-func_echo ()
-{
-    $debug_cmd
-
-    _G_message=$*
-
-    func_echo_IFS=$IFS
-    IFS=$nl
-    for _G_line in $_G_message; do
-      IFS=$func_echo_IFS
-      $ECHO "$progname: $_G_line"
-    done
-    IFS=$func_echo_IFS
-}
-
-
-# func_echo_all ARG...
-# --------------------
-# Invoke $ECHO with all args, space-separated.
-func_echo_all ()
-{
-    $ECHO "$*"
-}
-
-
-# func_echo_infix_1 INFIX ARG...
-# ------------------------------
-# Echo program name, followed by INFIX on the first line, with any
-# additional lines not showing INFIX.
-func_echo_infix_1 ()
-{
-    $debug_cmd
-
-    $require_term_colors
-
-    _G_infix=$1; shift
-    _G_indent=$_G_infix
-    _G_prefix="$progname: $_G_infix: "
-    _G_message=$*
-
-    # Strip color escape sequences before counting printable length
-    for _G_tc in "$tc_reset" "$tc_bold" "$tc_standout" "$tc_red" "$tc_green" "$tc_blue" "$tc_cyan"
-    do
-      test -n "$_G_tc" && {
-        _G_esc_tc=`$ECHO "$_G_tc" | $SED "$sed_make_literal_regex"`
-        _G_indent=`$ECHO "$_G_indent" | $SED "s|$_G_esc_tc||g"`
-      }
-    done
-    _G_indent="$progname: "`echo "$_G_indent" | $SED 's|.| |g'`"  " ## exclude from sc_prohibit_nested_quotes
-
-    func_echo_infix_1_IFS=$IFS
-    IFS=$nl
-    for _G_line in $_G_message; do
-      IFS=$func_echo_infix_1_IFS
-      $ECHO "$_G_prefix$tc_bold$_G_line$tc_reset" >&2
-      _G_prefix=$_G_indent
-    done
-    IFS=$func_echo_infix_1_IFS
-}
-
-
-# func_error ARG...
-# -----------------
-# Echo program name prefixed message to standard error.
-func_error ()
-{
-    $debug_cmd
-
-    $require_term_colors
-
-    func_echo_infix_1 "  $tc_standout${tc_red}error$tc_reset" "$*" >&2
-}
-
-
-# func_fatal_error ARG...
-# -----------------------
-# Echo program name prefixed message to standard error, and exit.
-func_fatal_error ()
-{
-    $debug_cmd
-
-    func_error "$*"
-    exit $EXIT_FAILURE
-}
-
-
-# func_grep EXPRESSION FILENAME
-# -----------------------------
-# Check whether EXPRESSION matches any line of FILENAME, without output.
-func_grep ()
-{
-    $debug_cmd
-
-    $GREP "$1" "$2" >/dev/null 2>&1
-}
-
-
-# func_len STRING
-# ---------------
-# Set func_len_result to the length of STRING. STRING may not
-# start with a hyphen.
-  test -z "$_G_HAVE_XSI_OPS" \
-    && (eval 'x=a/b/c;
-      test 5aa/bb/cc = "${#x}${x%%/*}${x%/*}${x#*/}${x##*/}"') 2>/dev/null \
-    && _G_HAVE_XSI_OPS=yes
-
-if test yes = "$_G_HAVE_XSI_OPS"; then
-  eval 'func_len ()
-  {
-    $debug_cmd
-
-    func_len_result=${#1}
-  }'
-else
-  func_len ()
-  {
-    $debug_cmd
-
-    func_len_result=`expr "$1" : ".*" 2>/dev/null || echo $max_cmd_len`
-  }
-fi
-
-
-# func_mkdir_p DIRECTORY-PATH
-# ---------------------------
-# Make sure the entire path to DIRECTORY-PATH is available.
-func_mkdir_p ()
-{
-    $debug_cmd
-
-    _G_directory_path=$1
-    _G_dir_list=
-
-    if test -n "$_G_directory_path" && test : != "$opt_dry_run"; then
-
-      # Protect directory names starting with '-'
-      case $_G_directory_path in
-        -*) _G_directory_path=./$_G_directory_path ;;
-      esac
-
-      # While some portion of DIR does not yet exist...
-      while test ! -d "$_G_directory_path"; do
-        # ...make a list in topmost first order.  Use a colon delimited
-	# list incase some portion of path contains whitespace.
-        _G_dir_list=$_G_directory_path:$_G_dir_list
-
-        # If the last portion added has no slash in it, the list is done
-        case $_G_directory_path in */*) ;; *) break ;; esac
-
-        # ...otherwise throw away the child directory and loop
-        _G_directory_path=`$ECHO "$_G_directory_path" | $SED -e "$sed_dirname"`
-      done
-      _G_dir_list=`$ECHO "$_G_dir_list" | $SED 's|:*$||'`
-
-      func_mkdir_p_IFS=$IFS; IFS=:
-      for _G_dir in $_G_dir_list; do
-	IFS=$func_mkdir_p_IFS
-        # mkdir can fail with a 'File exist' error if two processes
-        # try to create one of the directories concurrently.  Don't
-        # stop in that case!
-        $MKDIR "$_G_dir" 2>/dev/null || :
-      done
-      IFS=$func_mkdir_p_IFS
-
-      # Bail out if we (or some other process) failed to create a directory.
-      test -d "$_G_directory_path" || \
-        func_fatal_error "Failed to create '$1'"
-    fi
-}
-
-
-# func_mktempdir [BASENAME]
-# -------------------------
-# Make a temporary directory that won't clash with other running
-# libtool processes, and avoids race conditions if possible.  If
-# given, BASENAME is the basename for that directory.
-func_mktempdir ()
-{
-    $debug_cmd
-
-    _G_template=${TMPDIR-/tmp}/${1-$progname}
-
-    if test : = "$opt_dry_run"; then
-      # Return a directory name, but don't create it in dry-run mode
-      _G_tmpdir=$_G_template-$$
-    else
-
-      # If mktemp works, use that first and foremost
-      _G_tmpdir=`mktemp -d "$_G_template-XXXXXXXX" 2>/dev/null`
-
-      if test ! -d "$_G_tmpdir"; then
-        # Failing that, at least try and use $RANDOM to avoid a race
-        _G_tmpdir=$_G_template-${RANDOM-0}$$
-
-        func_mktempdir_umask=`umask`
-        umask 0077
-        $MKDIR "$_G_tmpdir"
-        umask $func_mktempdir_umask
-      fi
-
-      # If we're not in dry-run mode, bomb out on failure
-      test -d "$_G_tmpdir" || \
-        func_fatal_error "cannot create temporary directory '$_G_tmpdir'"
-    fi
-
-    $ECHO "$_G_tmpdir"
-}
-
-
-# func_normal_abspath PATH
-# ------------------------
-# Remove doubled-up and trailing slashes, "." path components,
-# and cancel out any ".." path components in PATH after making
-# it an absolute path.
-func_normal_abspath ()
-{
-    $debug_cmd
-
-    # These SED scripts presuppose an absolute path with a trailing slash.
-    _G_pathcar='s|^/\([^/]*\).*$|\1|'
-    _G_pathcdr='s|^/[^/]*||'
-    _G_removedotparts=':dotsl
-		s|/\./|/|g
-		t dotsl
-		s|/\.$|/|'
-    _G_collapseslashes='s|/\{1,\}|/|g'
-    _G_finalslash='s|/*$|/|'
-
-    # Start from root dir and reassemble the path.
-    func_normal_abspath_result=
-    func_normal_abspath_tpath=$1
-    func_normal_abspath_altnamespace=
-    case $func_normal_abspath_tpath in
-      "")
-        # Empty path, that just means $cwd.
-        func_stripname '' '/' "`pwd`"
-        func_normal_abspath_result=$func_stripname_result
-        return
-        ;;
-      # The next three entries are used to spot a run of precisely
-      # two leading slashes without using negated character classes;
-      # we take advantage of case's first-match behaviour.
-      ///*)
-        # Unusual form of absolute path, do nothing.
-        ;;
-      //*)
-        # Not necessarily an ordinary path; POSIX reserves leading '//'
-        # and for example Cygwin uses it to access remote file shares
-        # over CIFS/SMB, so we conserve a leading double slash if found.
-        func_normal_abspath_altnamespace=/
-        ;;
-      /*)
-        # Absolute path, do nothing.
-        ;;
-      *)
-        # Relative path, prepend $cwd.
-        func_normal_abspath_tpath=`pwd`/$func_normal_abspath_tpath
-        ;;
-    esac
-
-    # Cancel out all the simple stuff to save iterations.  We also want
-    # the path to end with a slash for ease of parsing, so make sure
-    # there is one (and only one) here.
-    func_normal_abspath_tpath=`$ECHO "$func_normal_abspath_tpath" | $SED \
-          -e "$_G_removedotparts" -e "$_G_collapseslashes" -e "$_G_finalslash"`
-    while :; do
-      # Processed it all yet?
-      if test / = "$func_normal_abspath_tpath"; then
-        # If we ascended to the root using ".." the result may be empty now.
-        if test -z "$func_normal_abspath_result"; then
-          func_normal_abspath_result=/
-        fi
-        break
-      fi
-      func_normal_abspath_tcomponent=`$ECHO "$func_normal_abspath_tpath" | $SED \
-          -e "$_G_pathcar"`
-      func_normal_abspath_tpath=`$ECHO "$func_normal_abspath_tpath" | $SED \
-          -e "$_G_pathcdr"`
-      # Figure out what to do with it
-      case $func_normal_abspath_tcomponent in
-        "")
-          # Trailing empty path component, ignore it.
-          ;;
-        ..)
-          # Parent dir; strip last assembled component from result.
-          func_dirname "$func_normal_abspath_result"
-          func_normal_abspath_result=$func_dirname_result
-          ;;
-        *)
-          # Actual path component, append it.
-          func_append func_normal_abspath_result "/$func_normal_abspath_tcomponent"
-          ;;
-      esac
-    done
-    # Restore leading double-slash if one was found on entry.
-    func_normal_abspath_result=$func_normal_abspath_altnamespace$func_normal_abspath_result
-}
-
-
-# func_notquiet ARG...
-# --------------------
-# Echo program name prefixed message only when not in quiet mode.
-func_notquiet ()
-{
-    $debug_cmd
-
-    $opt_quiet || func_echo ${1+"$@"}
-
-    # A bug in bash halts the script if the last line of a function
-    # fails when set -e is in force, so we need another command to
-    # work around that:
-    :
-}
-
-
-# func_relative_path SRCDIR DSTDIR
-# --------------------------------
-# Set func_relative_path_result to the relative path from SRCDIR to DSTDIR.
-func_relative_path ()
-{
-    $debug_cmd
-
-    func_relative_path_result=
-    func_normal_abspath "$1"
-    func_relative_path_tlibdir=$func_normal_abspath_result
-    func_normal_abspath "$2"
-    func_relative_path_tbindir=$func_normal_abspath_result
-
-    # Ascend the tree starting from libdir
-    while :; do
-      # check if we have found a prefix of bindir
-      case $func_relative_path_tbindir in
-        $func_relative_path_tlibdir)
-          # found an exact match
-          func_relative_path_tcancelled=
-          break
-          ;;
-        $func_relative_path_tlibdir*)
-          # found a matching prefix
-          func_stripname "$func_relative_path_tlibdir" '' "$func_relative_path_tbindir"
-          func_relative_path_tcancelled=$func_stripname_result
-          if test -z "$func_relative_path_result"; then
-            func_relative_path_result=.
-          fi
-          break
-          ;;
-        *)
-          func_dirname $func_relative_path_tlibdir
-          func_relative_path_tlibdir=$func_dirname_result
-          if test -z "$func_relative_path_tlibdir"; then
-            # Have to descend all the way to the root!
-            func_relative_path_result=../$func_relative_path_result
-            func_relative_path_tcancelled=$func_relative_path_tbindir
-            break
-          fi
-          func_relative_path_result=../$func_relative_path_result
-          ;;
-      esac
-    done
-
-    # Now calculate path; take care to avoid doubling-up slashes.
-    func_stripname '' '/' "$func_relative_path_result"
-    func_relative_path_result=$func_stripname_result
-    func_stripname '/' '/' "$func_relative_path_tcancelled"
-    if test -n "$func_stripname_result"; then
-      func_append func_relative_path_result "/$func_stripname_result"
-    fi
-
-    # Normalisation. If bindir is libdir, return '.' else relative path.
-    if test -n "$func_relative_path_result"; then
-      func_stripname './' '' "$func_relative_path_result"
-      func_relative_path_result=$func_stripname_result
-    fi
-
-    test -n "$func_relative_path_result" || func_relative_path_result=.
-
-    :
-}
-
-
-# func_quote_portable EVAL ARG
-# ----------------------------
-# Internal function to portably implement func_quote_arg.  Note that we still
-# keep attention to performance here so we as much as possible try to avoid
-# calling sed binary (so far O(N) complexity as long as func_append is O(1)).
-func_quote_portable ()
-{
-    $debug_cmd
-
-    $require_check_ifs_backslash
-
-    func_quote_portable_result=$2
-
-    # one-time-loop (easy break)
-    while true
-    do
-      if $1; then
-        func_quote_portable_result=`$ECHO "$2" | $SED \
-          -e "$sed_double_quote_subst" -e "$sed_double_backslash"`
-        break
-      fi
-
-      # Quote for eval.
-      case $func_quote_portable_result in
-        *[\\\`\"\$]*)
-          # Fallback to sed for $func_check_bs_ifs_broken=:, or when the string
-          # contains the shell wildcard characters.
-          case $check_ifs_backshlash_broken$func_quote_portable_result in
-            :*|*[\[\*\?]*)
-              func_quote_portable_result=`$ECHO "$func_quote_portable_result" \
-                  | $SED "$sed_quote_subst"`
-              break
-              ;;
-          esac
-
-          func_quote_portable_old_IFS=$IFS
-          for _G_char in '\' '`' '"' '$'
-          do
-            # STATE($1) PREV($2) SEPARATOR($3)
-            set start "" ""
-            func_quote_portable_result=dummy"$_G_char$func_quote_portable_result$_G_char"dummy
-            IFS=$_G_char
-            for _G_part in $func_quote_portable_result
-            do
-              case $1 in
-              quote)
-                func_append func_quote_portable_result "$3$2"
-                set quote "$_G_part" "\\$_G_char"
-                ;;
-              start)
-                set first "" ""
-                func_quote_portable_result=
-                ;;
-              first)
-                set quote "$_G_part" ""
-                ;;
-              esac
-            done
-          done
-          IFS=$func_quote_portable_old_IFS
-          ;;
-        *) ;;
-      esac
-      break
-    done
-
-    func_quote_portable_unquoted_result=$func_quote_portable_result
-    case $func_quote_portable_result in
-      # double-quote args containing shell metacharacters to delay
-      # word splitting, command substitution and variable expansion
-      # for a subsequent eval.
-      # many bourne shells cannot handle close brackets correctly
-      # in scan sets, so we specify it separately.
-      *[\[\~\#\^\&\*\(\)\{\}\|\;\<\>\?\'\ \	]*|*]*|"")
-        func_quote_portable_result=\"$func_quote_portable_result\"
-        ;;
-    esac
-}
-
-
-# func_quotefast_eval ARG
-# -----------------------
-# Quote one ARG (internal).  This is equivalent to 'func_quote_arg eval ARG',
-# but optimized for speed.  Result is stored in $func_quotefast_eval.
-if test xyes = `(x=; printf -v x %q yes; echo x"$x") 2>/dev/null`; then
-  printf -v _GL_test_printf_tilde %q '~'
-  if test '\~' = "$_GL_test_printf_tilde"; then
-    func_quotefast_eval ()
-    {
-      printf -v func_quotefast_eval_result %q "$1"
-    }
-  else
-    # Broken older Bash implementations.  Make those faster too if possible.
-    func_quotefast_eval ()
-    {
-      case $1 in
-        '~'*)
-          func_quote_portable false "$1"
-          func_quotefast_eval_result=$func_quote_portable_result
-          ;;
-        *)
-          printf -v func_quotefast_eval_result %q "$1"
-          ;;
-      esac
-    }
-  fi
-else
-  func_quotefast_eval ()
-  {
-    func_quote_portable false "$1"
-    func_quotefast_eval_result=$func_quote_portable_result
-  }
-fi
-
-
-# func_quote_arg MODEs ARG
-# ------------------------
-# Quote one ARG to be evaled later.  MODEs argument may contain zero or more
-# specifiers listed below separated by ',' character.  This function returns two
-# values:
-#   i) func_quote_arg_result
-#      double-quoted (when needed), suitable for a subsequent eval
-#  ii) func_quote_arg_unquoted_result
-#      has all characters that are still active within double
-#      quotes backslashified.  Available only if 'unquoted' is specified.
-#
-# Available modes:
-# ----------------
-# 'eval' (default)
-#       - escape shell special characters
-# 'expand'
-#       - the same as 'eval';  but do not quote variable references
-# 'pretty'
-#       - request aesthetic output, i.e. '"a b"' instead of 'a\ b'.  This might
-#         be used later in func_quote to get output like: 'echo "a b"' instead
-#         of 'echo a\ b'.  This is slower than default on some shells.
-# 'unquoted'
-#       - produce also $func_quote_arg_unquoted_result which does not contain
-#         wrapping double-quotes.
-#
-# Examples for 'func_quote_arg pretty,unquoted string':
-#
-#   string      | *_result              | *_unquoted_result
-#   ------------+-----------------------+-------------------
-#   "           | \"                    | \"
-#   a b         | "a b"                 | a b
-#   "a b"       | "\"a b\""             | \"a b\"
-#   *           | "*"                   | *
-#   z="${x-$y}" | "z=\"\${x-\$y}\""     | z=\"\${x-\$y}\"
-#
-# Examples for 'func_quote_arg pretty,unquoted,expand string':
-#
-#   string        |   *_result          |  *_unquoted_result
-#   --------------+---------------------+--------------------
-#   z="${x-$y}"   | "z=\"${x-$y}\""     | z=\"${x-$y}\"
-func_quote_arg ()
-{
-    _G_quote_expand=false
-    case ,$1, in
-      *,expand,*)
-        _G_quote_expand=:
-        ;;
-    esac
-
-    case ,$1, in
-      *,pretty,*|*,expand,*|*,unquoted,*)
-        func_quote_portable $_G_quote_expand "$2"
-        func_quote_arg_result=$func_quote_portable_result
-        func_quote_arg_unquoted_result=$func_quote_portable_unquoted_result
-        ;;
-      *)
-        # Faster quote-for-eval for some shells.
-        func_quotefast_eval "$2"
-        func_quote_arg_result=$func_quotefast_eval_result
-        ;;
-    esac
-}
-
-
-# func_quote MODEs ARGs...
-# ------------------------
-# Quote all ARGs to be evaled later and join them into single command.  See
-# func_quote_arg's description for more info.
-func_quote ()
-{
-    $debug_cmd
-    _G_func_quote_mode=$1 ; shift
-    func_quote_result=
-    while test 0 -lt $#; do
-      func_quote_arg "$_G_func_quote_mode" "$1"
-      if test -n "$func_quote_result"; then
-        func_append func_quote_result " $func_quote_arg_result"
-      else
-        func_append func_quote_result "$func_quote_arg_result"
-      fi
-      shift
-    done
-}
-
-
-# func_stripname PREFIX SUFFIX NAME
-# ---------------------------------
-# strip PREFIX and SUFFIX from NAME, and store in func_stripname_result.
-# PREFIX and SUFFIX must not contain globbing or regex special
-# characters, hashes, percent signs, but SUFFIX may contain a leading
-# dot (in which case that matches only a dot).
-if test yes = "$_G_HAVE_XSI_OPS"; then
-  eval 'func_stripname ()
-  {
-    $debug_cmd
-
-    # pdksh 5.2.14 does not do ${X%$Y} correctly if both X and Y are
-    # positional parameters, so assign one to ordinary variable first.
-    func_stripname_result=$3
-    func_stripname_result=${func_stripname_result#"$1"}
-    func_stripname_result=${func_stripname_result%"$2"}
-  }'
-else
-  func_stripname ()
-  {
-    $debug_cmd
-
-    case $2 in
-      .*) func_stripname_result=`$ECHO "$3" | $SED -e "s%^$1%%" -e "s%\\\\$2\$%%"`;;
-      *)  func_stripname_result=`$ECHO "$3" | $SED -e "s%^$1%%" -e "s%$2\$%%"`;;
-    esac
-  }
-fi
-
-
-# func_show_eval CMD [FAIL_EXP]
-# -----------------------------
-# Unless opt_quiet is true, then output CMD.  Then, if opt_dryrun is
-# not true, evaluate CMD.  If the evaluation of CMD fails, and FAIL_EXP
-# is given, then evaluate it.
-func_show_eval ()
-{
-    $debug_cmd
-
-    _G_cmd=$1
-    _G_fail_exp=${2-':'}
-
-    func_quote_arg pretty,expand "$_G_cmd"
-    eval "func_notquiet $func_quote_arg_result"
-
-    $opt_dry_run || {
-      eval "$_G_cmd"
-      _G_status=$?
-      if test 0 -ne "$_G_status"; then
-	eval "(exit $_G_status); $_G_fail_exp"
-      fi
-    }
-}
-
-
-# func_show_eval_locale CMD [FAIL_EXP]
-# ------------------------------------
-# Unless opt_quiet is true, then output CMD.  Then, if opt_dryrun is
-# not true, evaluate CMD.  If the evaluation of CMD fails, and FAIL_EXP
-# is given, then evaluate it.  Use the saved locale for evaluation.
-func_show_eval_locale ()
-{
-    $debug_cmd
-
-    _G_cmd=$1
-    _G_fail_exp=${2-':'}
-
-    $opt_quiet || {
-      func_quote_arg expand,pretty "$_G_cmd"
-      eval "func_echo $func_quote_arg_result"
-    }
-
-    $opt_dry_run || {
-      eval "$_G_user_locale
-	    $_G_cmd"
-      _G_status=$?
-      eval "$_G_safe_locale"
-      if test 0 -ne "$_G_status"; then
-	eval "(exit $_G_status); $_G_fail_exp"
-      fi
-    }
-}
-
-
-# func_tr_sh
-# ----------
-# Turn $1 into a string suitable for a shell variable name.
-# Result is stored in $func_tr_sh_result.  All characters
-# not in the set a-zA-Z0-9_ are replaced with '_'. Further,
-# if $1 begins with a digit, a '_' is prepended as well.
-func_tr_sh ()
-{
-    $debug_cmd
-
-    case $1 in
-    [0-9]* | *[!a-zA-Z0-9_]*)
-      func_tr_sh_result=`$ECHO "$1" | $SED -e 's/^\([0-9]\)/_\1/' -e 's/[^a-zA-Z0-9_]/_/g'`
-      ;;
-    * )
-      func_tr_sh_result=$1
-      ;;
-    esac
-}
-
-
-# func_verbose ARG...
-# -------------------
-# Echo program name prefixed message in verbose mode only.
-func_verbose ()
-{
-    $debug_cmd
-
-    $opt_verbose && func_echo "$*"
-
-    :
-}
-
-
-# func_warn_and_continue ARG...
-# -----------------------------
-# Echo program name prefixed warning message to standard error.
-func_warn_and_continue ()
-{
-    $debug_cmd
-
-    $require_term_colors
-
-    func_echo_infix_1 "${tc_red}warning$tc_reset" "$*" >&2
-}
-
-
-# func_warning CATEGORY ARG...
-# ----------------------------
-# Echo program name prefixed warning message to standard error. Warning
-# messages can be filtered according to CATEGORY, where this function
-# elides messages where CATEGORY is not listed in the global variable
-# 'opt_warning_types'.
-func_warning ()
-{
-    $debug_cmd
-
-    # CATEGORY must be in the warning_categories list!
-    case " $warning_categories " in
-      *" $1 "*) ;;
-      *) func_internal_error "invalid warning category '$1'" ;;
-    esac
-
-    _G_category=$1
-    shift
-
-    case " $opt_warning_types " in
-      *" $_G_category "*) $warning_func ${1+"$@"} ;;
-    esac
-}
-
-
-# func_sort_ver VER1 VER2
-# -----------------------
-# 'sort -V' is not generally available.
-# Note this deviates from the version comparison in automake
-# in that it treats 1.5 < 1.5.0, and treats 1.4.4a < 1.4-p3a
-# but this should suffice as we won't be specifying old
-# version formats or redundant trailing .0 in bootstrap.conf.
-# If we did want full compatibility then we should probably
-# use m4_version_compare from autoconf.
-func_sort_ver ()
-{
-    $debug_cmd
-
-    printf '%s\n%s\n' "$1" "$2" \
-      | sort -t. -k 1,1n -k 2,2n -k 3,3n -k 4,4n -k 5,5n -k 6,6n -k 7,7n -k 8,8n -k 9,9n
-}
-
-# func_lt_ver PREV CURR
-# ---------------------
-# Return true if PREV and CURR are in the correct order according to
-# func_sort_ver, otherwise false.  Use it like this:
-#
-#  func_lt_ver "$prev_ver" "$proposed_ver" || func_fatal_error "..."
-func_lt_ver ()
-{
-    $debug_cmd
-
-    test "x$1" = x`func_sort_ver "$1" "$2" | $SED 1q`
-}
-
-
-# Local variables:
-# mode: shell-script
-# sh-indentation: 2
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-pattern: "10/scriptversion=%:y-%02m-%02d.%02H; # UTC"
-# time-stamp-time-zone: "UTC"
-# End:
-#! /bin/sh
-
-# A portable, pluggable option parser for Bourne shell.
-# Written by Gary V. Vaughan, 2010
-
-# This is free software.  There is NO warranty; not even for
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-#
-# Copyright (C) 2010-2019, 2021 Bootstrap Authors
-#
-# This file is dual licensed under the terms of the MIT license
-# <https://opensource.org/license/MIT>, and GPL version 2 or later
-# <http://www.gnu.org/licenses/gpl-2.0.html>.  You must apply one of
-# these licenses when using or redistributing this software or any of
-# the files within it.  See the URLs above, or the file `LICENSE`
-# included in the Bootstrap distribution for the full license texts.
-
-# Please report bugs or propose patches to:
-# <https://github.com/gnulib-modules/bootstrap/issues>
-
-# Set a version string for this script.
-scriptversion=2019-02-19.15; # UTC
-
-
-## ------ ##
-## Usage. ##
-## ------ ##
-
-# This file is a library for parsing options in your shell scripts along
-# with assorted other useful supporting features that you can make use
-# of too.
-#
-# For the simplest scripts you might need only:
-#
-#   #!/bin/sh
-#   . relative/path/to/funclib.sh
-#   . relative/path/to/options-parser
-#   scriptversion=1.0
-#   func_options ${1+"$@"}
-#   eval set dummy "$func_options_result"; shift
-#   ...rest of your script...
-#
-# In order for the '--version' option to work, you will need to have a
-# suitably formatted comment like the one at the top of this file
-# starting with '# Written by ' and ending with '# Copyright'.
-#
-# For '-h' and '--help' to work, you will also need a one line
-# description of your script's purpose in a comment directly above the
-# '# Written by ' line, like the one at the top of this file.
-#
-# The default options also support '--debug', which will turn on shell
-# execution tracing (see the comment above debug_cmd below for another
-# use), and '--verbose' and the func_verbose function to allow your script
-# to display verbose messages only when your user has specified
-# '--verbose'.
-#
-# After sourcing this file, you can plug in processing for additional
-# options by amending the variables from the 'Configuration' section
-# below, and following the instructions in the 'Option parsing'
-# section further down.
-
-## -------------- ##
-## Configuration. ##
-## -------------- ##
-
-# You should override these variables in your script after sourcing this
-# file so that they reflect the customisations you have added to the
-# option parser.
-
-# The usage line for option parsing errors and the start of '-h' and
-# '--help' output messages. You can embed shell variables for delayed
-# expansion at the time the message is displayed, but you will need to
-# quote other shell meta-characters carefully to prevent them being
-# expanded when the contents are evaled.
-usage='$progpath [OPTION]...'
-
-# Short help message in response to '-h' and '--help'.  Add to this or
-# override it after sourcing this library to reflect the full set of
-# options your script accepts.
-usage_message="\
-       --debug        enable verbose shell tracing
-   -W, --warnings=CATEGORY
-                      report the warnings falling in CATEGORY [all]
-   -v, --verbose      verbosely report processing
-       --version      print version information and exit
-   -h, --help         print short or long help message and exit
-"
-
-# Additional text appended to 'usage_message' in response to '--help'.
-long_help_message="
-Warning categories include:
-       'all'          show all warnings
-       'none'         turn off all the warnings
-       'error'        warnings are treated as fatal errors"
-
-# Help message printed before fatal option parsing errors.
-fatal_help="Try '\$progname --help' for more information."
-
-
-
-## ------------------------- ##
-## Hook function management. ##
-## ------------------------- ##
-
-# This section contains functions for adding, removing, and running hooks
-# in the main code.  A hook is just a list of function names that can be
-# run in order later on.
-
-# func_hookable FUNC_NAME
-# -----------------------
-# Declare that FUNC_NAME will run hooks added with
-# 'func_add_hook FUNC_NAME ...'.
-func_hookable ()
-{
-    $debug_cmd
-
-    func_append hookable_fns " $1"
-}
-
-
-# func_add_hook FUNC_NAME HOOK_FUNC
-# ---------------------------------
-# Request that FUNC_NAME call HOOK_FUNC before it returns.  FUNC_NAME must
-# first have been declared "hookable" by a call to 'func_hookable'.
-func_add_hook ()
-{
-    $debug_cmd
-
-    case " $hookable_fns " in
-      *" $1 "*) ;;
-      *) func_fatal_error "'$1' does not accept hook functions." ;;
-    esac
-
-    eval func_append ${1}_hooks '" $2"'
-}
-
-
-# func_remove_hook FUNC_NAME HOOK_FUNC
-# ------------------------------------
-# Remove HOOK_FUNC from the list of hook functions to be called by
-# FUNC_NAME.
-func_remove_hook ()
-{
-    $debug_cmd
-
-    eval ${1}_hooks='`$ECHO "\$'$1'_hooks" |$SED "s| '$2'||"`'
-}
-
-
-# func_propagate_result FUNC_NAME_A FUNC_NAME_B
-# ---------------------------------------------
-# If the *_result variable of FUNC_NAME_A _is set_, assign its value to
-# *_result variable of FUNC_NAME_B.
-func_propagate_result ()
-{
-    $debug_cmd
-
-    func_propagate_result_result=:
-    if eval "test \"\${${1}_result+set}\" = set"
-    then
-      eval "${2}_result=\$${1}_result"
-    else
-      func_propagate_result_result=false
-    fi
-}
-
-
-# func_run_hooks FUNC_NAME [ARG]...
-# ---------------------------------
-# Run all hook functions registered to FUNC_NAME.
-# It's assumed that the list of hook functions contains nothing more
-# than a whitespace-delimited list of legal shell function names, and
-# no effort is wasted trying to catch shell meta-characters or preserve
-# whitespace.
-func_run_hooks ()
-{
-    $debug_cmd
-
-    case " $hookable_fns " in
-      *" $1 "*) ;;
-      *) func_fatal_error "'$1' does not support hook functions." ;;
-    esac
-
-    eval _G_hook_fns=\$$1_hooks; shift
-
-    for _G_hook in $_G_hook_fns; do
-      func_unset "${_G_hook}_result"
-      eval $_G_hook '${1+"$@"}'
-      func_propagate_result $_G_hook func_run_hooks
-      if $func_propagate_result_result; then
-        eval set dummy "$func_run_hooks_result"; shift
-      fi
-    done
-}
-
-
-
-## --------------- ##
-## Option parsing. ##
-## --------------- ##
-
-# In order to add your own option parsing hooks, you must accept the
-# full positional parameter list from your hook function.  You may remove
-# or edit any options that you action, and then pass back the remaining
-# unprocessed options in '<hooked_function_name>_result', escaped
-# suitably for 'eval'.
-#
-# The '<hooked_function_name>_result' variable is automatically unset
-# before your hook gets called; for best performance, only set the
-# *_result variable when necessary (i.e. don't call the 'func_quote'
-# function unnecessarily because it can be an expensive operation on some
-# machines).
-#
-# Like this:
-#
-#    my_options_prep ()
-#    {
-#        $debug_cmd
-#
-#        # Extend the existing usage message.
-#        usage_message=$usage_message'
-#      -s, --silent       don'\''t print informational messages
-#    '
-#        # No change in '$@' (ignored completely by this hook).  Leave
-#        # my_options_prep_result variable intact.
-#    }
-#    func_add_hook func_options_prep my_options_prep
-#
-#
-#    my_silent_option ()
-#    {
-#        $debug_cmd
-#
-#        args_changed=false
-#
-#        # Note that, for efficiency, we parse as many options as we can
-#        # recognise in a loop before passing the remainder back to the
-#        # caller on the first unrecognised argument we encounter.
-#        while test $# -gt 0; do
-#          opt=$1; shift
-#          case $opt in
-#            --silent|-s) opt_silent=:
-#                         args_changed=:
-#                         ;;
-#            # Separate non-argument short options:
-#            -s*)         func_split_short_opt "$_G_opt"
-#                         set dummy "$func_split_short_opt_name" \
-#                             "-$func_split_short_opt_arg" ${1+"$@"}
-#                         shift
-#                         args_changed=:
-#                         ;;
-#            *)           # Make sure the first unrecognised option "$_G_opt"
-#                         # is added back to "$@" in case we need it later,
-#                         # if $args_changed was set to 'true'.
-#                         set dummy "$_G_opt" ${1+"$@"}; shift; break ;;
-#          esac
-#        done
-#
-#        # Only call 'func_quote' here if we processed at least one argument.
-#        if $args_changed; then
-#          func_quote eval ${1+"$@"}
-#          my_silent_option_result=$func_quote_result
-#        fi
-#    }
-#    func_add_hook func_parse_options my_silent_option
-#
-#
-#    my_option_validation ()
-#    {
-#        $debug_cmd
-#
-#        $opt_silent && $opt_verbose && func_fatal_help "\
-#    '--silent' and '--verbose' options are mutually exclusive."
-#    }
-#    func_add_hook func_validate_options my_option_validation
-#
-# You'll also need to manually amend $usage_message to reflect the extra
-# options you parse.  It's preferable to append if you can, so that
-# multiple option parsing hooks can be added safely.
-
-
-# func_options_finish [ARG]...
-# ----------------------------
-# Finishing the option parse loop (call 'func_options' hooks ATM).
-func_options_finish ()
-{
-    $debug_cmd
-
-    func_run_hooks func_options ${1+"$@"}
-    func_propagate_result func_run_hooks func_options_finish
-}
-
-
-# func_options [ARG]...
-# ---------------------
-# All the functions called inside func_options are hookable. See the
-# individual implementations for details.
-func_hookable func_options
-func_options ()
-{
-    $debug_cmd
-
-    _G_options_quoted=false
-
-    for my_func in options_prep parse_options validate_options options_finish
-    do
-      func_unset func_${my_func}_result
-      func_unset func_run_hooks_result
-      eval func_$my_func '${1+"$@"}'
-      func_propagate_result func_$my_func func_options
-      if $func_propagate_result_result; then
-        eval set dummy "$func_options_result"; shift
-        _G_options_quoted=:
-      fi
-    done
-
-    $_G_options_quoted || {
-      # As we (func_options) are top-level options-parser function and
-      # nobody quoted "$@" for us yet, we need to do it explicitly for
-      # caller.
-      func_quote eval ${1+"$@"}
-      func_options_result=$func_quote_result
-    }
-}
-
-
-# func_options_prep [ARG]...
-# --------------------------
-# All initialisations required before starting the option parse loop.
-# Note that when calling hook functions, we pass through the list of
-# positional parameters.  If a hook function modifies that list, and
-# needs to propagate that back to rest of this script, then the complete
-# modified list must be put in 'func_run_hooks_result' before returning.
-func_hookable func_options_prep
-func_options_prep ()
-{
-    $debug_cmd
-
-    # Option defaults:
-    opt_verbose=false
-    opt_warning_types=
-
-    func_run_hooks func_options_prep ${1+"$@"}
-    func_propagate_result func_run_hooks func_options_prep
-}
-
-
-# func_parse_options [ARG]...
-# ---------------------------
-# The main option parsing loop.
-func_hookable func_parse_options
-func_parse_options ()
-{
-    $debug_cmd
-
-    _G_parse_options_requote=false
-    # this just eases exit handling
-    while test $# -gt 0; do
-      # Defer to hook functions for initial option parsing, so they
-      # get priority in the event of reusing an option name.
-      func_run_hooks func_parse_options ${1+"$@"}
-      func_propagate_result func_run_hooks func_parse_options
-      if $func_propagate_result_result; then
-        eval set dummy "$func_parse_options_result"; shift
-        # Even though we may have changed "$@", we passed the "$@" array
-        # down into the hook and it quoted it for us (because we are in
-        # this if-branch).  No need to quote it again.
-        _G_parse_options_requote=false
-      fi
-
-      # Break out of the loop if we already parsed every option.
-      test $# -gt 0 || break
-
-      # We expect that one of the options parsed in this function matches
-      # and thus we remove _G_opt from "$@" and need to re-quote.
-      _G_match_parse_options=:
-      _G_opt=$1
-      shift
-      case $_G_opt in
-        --debug|-x)   debug_cmd='set -x'
-                      func_echo "enabling shell trace mode" >&2
-                      $debug_cmd
-                      ;;
-
-        --no-warnings|--no-warning|--no-warn)
-                      set dummy --warnings none ${1+"$@"}
-                      shift
-		      ;;
-
-        --warnings|--warning|-W)
-                      if test $# = 0 && func_missing_arg $_G_opt; then
-                        _G_parse_options_requote=:
-                        break
-                      fi
-                      case " $warning_categories $1" in
-                        *" $1 "*)
-                          # trailing space prevents matching last $1 above
-                          func_append_uniq opt_warning_types " $1"
-                          ;;
-                        *all)
-                          opt_warning_types=$warning_categories
-                          ;;
-                        *none)
-                          opt_warning_types=none
-                          warning_func=:
-                          ;;
-                        *error)
-                          opt_warning_types=$warning_categories
-                          warning_func=func_fatal_error
-                          ;;
-                        *)
-                          func_fatal_error \
-                             "unsupported warning category: '$1'"
-                          ;;
-                      esac
-                      shift
-                      ;;
-
-        --verbose|-v) opt_verbose=: ;;
-        --version)    func_version ;;
-        -\?|-h)       func_usage ;;
-        --help)       func_help ;;
-
-	# Separate optargs to long options (plugins may need this):
-	--*=*)        func_split_equals "$_G_opt"
-	              set dummy "$func_split_equals_lhs" \
-                          "$func_split_equals_rhs" ${1+"$@"}
-                      shift
-                      ;;
-
-       # Separate optargs to short options:
-        -W*)
-                      func_split_short_opt "$_G_opt"
-                      set dummy "$func_split_short_opt_name" \
-                          "$func_split_short_opt_arg" ${1+"$@"}
-                      shift
-                      ;;
-
-        # Separate non-argument short options:
-        -\?*|-h*|-v*|-x*)
-                      func_split_short_opt "$_G_opt"
-                      set dummy "$func_split_short_opt_name" \
-                          "-$func_split_short_opt_arg" ${1+"$@"}
-                      shift
-                      ;;
-
-        --)           _G_parse_options_requote=: ; break ;;
-        -*)           func_fatal_help "unrecognised option: '$_G_opt'" ;;
-        *)            set dummy "$_G_opt" ${1+"$@"}; shift
-                      _G_match_parse_options=false
-                      break
-                      ;;
-      esac
-
-      if $_G_match_parse_options; then
-        _G_parse_options_requote=:
-      fi
-    done
-
-    if $_G_parse_options_requote; then
-      # save modified positional parameters for caller
-      func_quote eval ${1+"$@"}
-      func_parse_options_result=$func_quote_result
-    fi
-}
-
-
-# func_validate_options [ARG]...
-# ------------------------------
-# Perform any sanity checks on option settings and/or unconsumed
-# arguments.
-func_hookable func_validate_options
-func_validate_options ()
-{
-    $debug_cmd
-
-    # Display all warnings if -W was not given.
-    test -n "$opt_warning_types" || opt_warning_types=" $warning_categories"
-
-    func_run_hooks func_validate_options ${1+"$@"}
-    func_propagate_result func_run_hooks func_validate_options
-
-    # Bail if the options were screwed!
-    $exit_cmd $EXIT_FAILURE
-}
-
-
-
-## ----------------- ##
-## Helper functions. ##
-## ----------------- ##
-
-# This section contains the helper functions used by the rest of the
-# hookable option parser framework in ascii-betical order.
-
-
-# func_fatal_help ARG...
-# ----------------------
-# Echo program name prefixed message to standard error, followed by
-# a help hint, and exit.
-func_fatal_help ()
-{
-    $debug_cmd
-
-    eval \$ECHO \""Usage: $usage"\"
-    eval \$ECHO \""$fatal_help"\"
-    func_error ${1+"$@"}
-    exit $EXIT_FAILURE
-}
-
-
-# func_help
-# ---------
-# Echo long help message to standard output and exit.
-func_help ()
-{
-    $debug_cmd
-
-    func_usage_message
-    $ECHO "$long_help_message"
-    exit 0
-}
-
-
-# func_missing_arg ARGNAME
-# ------------------------
-# Echo program name prefixed message to standard error and set global
-# exit_cmd.
-func_missing_arg ()
-{
-    $debug_cmd
-
-    func_error "Missing argument for '$1'."
-    exit_cmd=exit
-}
-
-
-# func_split_equals STRING
-# ------------------------
-# Set func_split_equals_lhs and func_split_equals_rhs shell variables
-# after splitting STRING at the '=' sign.
-test -z "$_G_HAVE_XSI_OPS" \
-    && (eval 'x=a/b/c;
-      test 5aa/bb/cc = "${#x}${x%%/*}${x%/*}${x#*/}${x##*/}"') 2>/dev/null \
-    && _G_HAVE_XSI_OPS=yes
-
-if test yes = "$_G_HAVE_XSI_OPS"
-then
-  # This is an XSI compatible shell, allowing a faster implementation...
-  eval 'func_split_equals ()
-  {
-      $debug_cmd
-
-      func_split_equals_lhs=${1%%=*}
-      func_split_equals_rhs=${1#*=}
-      if test "x$func_split_equals_lhs" = "x$1"; then
-        func_split_equals_rhs=
-      fi
-  }'
-else
-  # ...otherwise fall back to using expr, which is often a shell builtin.
-  func_split_equals ()
-  {
-      $debug_cmd
-
-      func_split_equals_lhs=`expr "x$1" : 'x\([^=]*\)'`
-      func_split_equals_rhs=
-      test "x$func_split_equals_lhs=" = "x$1" \
-        || func_split_equals_rhs=`expr "x$1" : 'x[^=]*=\(.*\)$'`
-  }
-fi #func_split_equals
-
-
-# func_split_short_opt SHORTOPT
-# -----------------------------
-# Set func_split_short_opt_name and func_split_short_opt_arg shell
-# variables after splitting SHORTOPT after the 2nd character.
-if test yes = "$_G_HAVE_XSI_OPS"
-then
-  # This is an XSI compatible shell, allowing a faster implementation...
-  eval 'func_split_short_opt ()
-  {
-      $debug_cmd
-
-      func_split_short_opt_arg=${1#??}
-      func_split_short_opt_name=${1%"$func_split_short_opt_arg"}
-  }'
-else
-  # ...otherwise fall back to using expr, which is often a shell builtin.
-  func_split_short_opt ()
-  {
-      $debug_cmd
-
-      func_split_short_opt_name=`expr "x$1" : 'x\(-.\)'`
-      func_split_short_opt_arg=`expr "x$1" : 'x-.\(.*\)$'`
-  }
-fi #func_split_short_opt
-
-
-# func_usage
-# ----------
-# Echo short help message to standard output and exit.
-func_usage ()
-{
-    $debug_cmd
-
-    func_usage_message
-    $ECHO "Run '$progname --help |${PAGER-more}' for full usage"
-    exit 0
-}
-
-
-# func_usage_message
-# ------------------
-# Echo short help message to standard output.
-func_usage_message ()
-{
-    $debug_cmd
-
-    eval \$ECHO \""Usage: $usage"\"
-    echo
-    $SED -n 's|^# ||
-        /^Written by/{
-          x;p;x
-        }
-	h
-	/^Written by/q' < "$progpath"
-    echo
-    eval \$ECHO \""$usage_message"\"
-}
-
-
-# func_version
-# ------------
-# Echo version message to standard output and exit.
-# The version message is extracted from the calling file's header
-# comments, with leading '# ' stripped:
-#   1. First display the progname and version
-#   2. Followed by the header comment line matching  /^# Written by /
-#   3. Then a blank line followed by the first following line matching
-#      /^# Copyright /
-#   4. Immediately followed by any lines between the previous matches,
-#      except lines preceding the intervening completely blank line.
-# For example, see the header comments of this file.
-func_version ()
-{
-    $debug_cmd
-
-    printf '%s\n' "$progname $scriptversion"
-    $SED -n '
-        /^# Written by /!b
-        s|^# ||; p; n
-
-        :fwd2blnk
-        /./ {
-          n
-          b fwd2blnk
-        }
-        p; n
-
-        :holdwrnt
-        s|^# ||
-        s|^# *$||
-        /^Copyright /!{
-          /./H
-          n
-          b holdwrnt
-        }
-
-        s|\((C)\)[ 0-9,-]*[ ,-]\([1-9][0-9]* \)|\1 \2|
-        G
-        s|\(\n\)\n*|\1|g
-        p; q' < "$progpath"
-
-    exit $?
-}
-
-
-# Local variables:
-# mode: shell-script
-# sh-indentation: 2
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-pattern: "30/scriptversion=%:y-%02m-%02d.%02H; # UTC"
-# time-stamp-time-zone: "UTC"
-# End:
-
-# Set a version string.
-scriptversion='(GNU libtool) 2.4.7'
-
-
-# func_echo ARG...
-# ----------------
-# Libtool also displays the current mode in messages, so override
-# funclib.sh func_echo with this custom definition.
-func_echo ()
-{
-    $debug_cmd
-
-    _G_message=$*
-
-    func_echo_IFS=$IFS
-    IFS=$nl
-    for _G_line in $_G_message; do
-      IFS=$func_echo_IFS
-      $ECHO "$progname${opt_mode+: $opt_mode}: $_G_line"
-    done
-    IFS=$func_echo_IFS
-}
-
-
-# func_warning ARG...
-# -------------------
-# Libtool warnings are not categorized, so override funclib.sh
-# func_warning with this simpler definition.
-func_warning ()
-{
-    $debug_cmd
-
-    $warning_func ${1+"$@"}
-}
-
-
-## ---------------- ##
-## Options parsing. ##
-## ---------------- ##
-
-# Hook in the functions to make sure our own options are parsed during
-# the option parsing loop.
-
-usage='$progpath [OPTION]... [MODE-ARG]...'
-
-# Short help message in response to '-h'.
-usage_message="Options:
-       --config             show all configuration variables
-       --debug              enable verbose shell tracing
-   -n, --dry-run            display commands without modifying any files
-       --features           display basic configuration information and exit
-       --mode=MODE          use operation mode MODE
-       --no-warnings        equivalent to '-Wnone'
-       --preserve-dup-deps  don't remove duplicate dependency libraries
-       --quiet, --silent    don't print informational messages
-       --tag=TAG            use configuration variables from tag TAG
-   -v, --verbose            print more informational messages than default
-       --version            print version information
-   -W, --warnings=CATEGORY  report the warnings falling in CATEGORY [all]
-   -h, --help, --help-all   print short, long, or detailed help message
-"
-
-# Additional text appended to 'usage_message' in response to '--help'.
-func_help ()
-{
-    $debug_cmd
-
-    func_usage_message
-    $ECHO "$long_help_message
-
-MODE must be one of the following:
-
-       clean           remove files from the build directory
-       compile         compile a source file into a libtool object
-       execute         automatically set library path, then run a program
-       finish          complete the installation of libtool libraries
-       install         install libraries or executables
-       link            create a library or an executable
-       uninstall       remove libraries from an installed directory
-
-MODE-ARGS vary depending on the MODE.  When passed as first option,
-'--mode=MODE' may be abbreviated as 'MODE' or a unique abbreviation of that.
-Try '$progname --help --mode=MODE' for a more detailed description of MODE.
-
-When reporting a bug, please describe a test case to reproduce it and
-include the following information:
-
-       host-triplet:   $host
-       shell:          $SHELL
-       compiler:       $LTCC
-       compiler flags: $LTCFLAGS
-       linker:         $LD (gnu? $with_gnu_ld)
-       version:        $progname (GNU libtool) 2.4.7
-       automake:       `($AUTOMAKE --version) 2>/dev/null |$SED 1q`
-       autoconf:       `($AUTOCONF --version) 2>/dev/null |$SED 1q`
-
-Report bugs to <bug-libtool@gnu.org>.
-GNU libtool home page: <http://www.gnu.org/software/libtool/>.
-General help using GNU software: <http://www.gnu.org/gethelp/>."
-    exit 0
-}
-
-
-# func_lo2o OBJECT-NAME
-# ---------------------
-# Transform OBJECT-NAME from a '.lo' suffix to the platform specific
-# object suffix.
-
-lo2o=s/\\.lo\$/.$objext/
-o2lo=s/\\.$objext\$/.lo/
-
-if test yes = "$_G_HAVE_XSI_OPS"; then
-  eval 'func_lo2o ()
-  {
-    case $1 in
-      *.lo) func_lo2o_result=${1%.lo}.$objext ;;
-      *   ) func_lo2o_result=$1               ;;
-    esac
-  }'
-
-  # func_xform LIBOBJ-OR-SOURCE
-  # ---------------------------
-  # Transform LIBOBJ-OR-SOURCE from a '.o' or '.c' (or otherwise)
-  # suffix to a '.lo' libtool-object suffix.
-  eval 'func_xform ()
-  {
-    func_xform_result=${1%.*}.lo
-  }'
-else
-  # ...otherwise fall back to using sed.
-  func_lo2o ()
-  {
-    func_lo2o_result=`$ECHO "$1" | $SED "$lo2o"`
-  }
-
-  func_xform ()
-  {
-    func_xform_result=`$ECHO "$1" | $SED 's|\.[^.]*$|.lo|'`
-  }
-fi
-
-
-# func_fatal_configuration ARG...
-# -------------------------------
-# Echo program name prefixed message to standard error, followed by
-# a configuration failure hint, and exit.
-func_fatal_configuration ()
-{
-    func_fatal_error ${1+"$@"} \
-      "See the $PACKAGE documentation for more information." \
-      "Fatal configuration error."
-}
-
-
-# func_config
-# -----------
-# Display the configuration for all the tags in this script.
-func_config ()
-{
-    re_begincf='^# ### BEGIN LIBTOOL'
-    re_endcf='^# ### END LIBTOOL'
-
-    # Default configuration.
-    $SED "1,/$re_begincf CONFIG/d;/$re_endcf CONFIG/,\$d" < "$progpath"
-
-    # Now print the configurations for the tags.
-    for tagname in $taglist; do
-      $SED -n "/$re_begincf TAG CONFIG: $tagname\$/,/$re_endcf TAG CONFIG: $tagname\$/p" < "$progpath"
-    done
-
-    exit $?
-}
-
-
-# func_features
-# -------------
-# Display the features supported by this script.
-func_features ()
-{
-    echo "host: $host"
-    if test yes = "$build_libtool_libs"; then
-      echo "enable shared libraries"
-    else
-      echo "disable shared libraries"
-    fi
-    if test yes = "$build_old_libs"; then
-      echo "enable static libraries"
-    else
-      echo "disable static libraries"
-    fi
-
-    exit $?
-}
-
-
-# func_enable_tag TAGNAME
-# -----------------------
-# Verify that TAGNAME is valid, and either flag an error and exit, or
-# enable the TAGNAME tag.  We also add TAGNAME to the global $taglist
-# variable here.
-func_enable_tag ()
-{
-    # Global variable:
-    tagname=$1
-
-    re_begincf="^# ### BEGIN LIBTOOL TAG CONFIG: $tagname\$"
-    re_endcf="^# ### END LIBTOOL TAG CONFIG: $tagname\$"
-    sed_extractcf=/$re_begincf/,/$re_endcf/p
-
-    # Validate tagname.
-    case $tagname in
-      *[!-_A-Za-z0-9,/]*)
-        func_fatal_error "invalid tag name: $tagname"
-        ;;
-    esac
-
-    # Don't test for the "default" C tag, as we know it's
-    # there but not specially marked.
-    case $tagname in
-        CC) ;;
-    *)
-        if $GREP "$re_begincf" "$progpath" >/dev/null 2>&1; then
-	  taglist="$taglist $tagname"
-
-	  # Evaluate the configuration.  Be careful to quote the path
-	  # and the sed script, to avoid splitting on whitespace, but
-	  # also don't use non-portable quotes within backquotes within
-	  # quotes we have to do it in 2 steps:
-	  extractedcf=`$SED -n -e "$sed_extractcf" < "$progpath"`
-	  eval "$extractedcf"
-        else
-	  func_error "ignoring unknown tag $tagname"
-        fi
-        ;;
-    esac
-}
-
-
-# func_check_version_match
-# ------------------------
-# Ensure that we are using m4 macros, and libtool script from the same
-# release of libtool.
-func_check_version_match ()
-{
-    if test "$package_revision" != "$macro_revision"; then
-      if test "$VERSION" != "$macro_version"; then
-        if test -z "$macro_version"; then
-          cat >&2 <<_LT_EOF
-$progname: Version mismatch error.  This is $PACKAGE $VERSION, but the
-$progname: definition of this LT_INIT comes from an older release.
-$progname: You should recreate aclocal.m4 with macros from $PACKAGE $VERSION
-$progname: and run autoconf again.
-_LT_EOF
-        else
-          cat >&2 <<_LT_EOF
-$progname: Version mismatch error.  This is $PACKAGE $VERSION, but the
-$progname: definition of this LT_INIT comes from $PACKAGE $macro_version.
-$progname: You should recreate aclocal.m4 with macros from $PACKAGE $VERSION
-$progname: and run autoconf again.
-_LT_EOF
-        fi
-      else
-        cat >&2 <<_LT_EOF
-$progname: Version mismatch error.  This is $PACKAGE $VERSION, revision $package_revision,
-$progname: but the definition of this LT_INIT comes from revision $macro_revision.
-$progname: You should recreate aclocal.m4 with macros from revision $package_revision
-$progname: of $PACKAGE $VERSION and run autoconf again.
-_LT_EOF
-      fi
-
-      exit $EXIT_MISMATCH
-    fi
-}
-
-
-# libtool_options_prep [ARG]...
-# -----------------------------
-# Preparation for options parsed by libtool.
-libtool_options_prep ()
-{
-    $debug_mode
-
-    # Option defaults:
-    opt_config=false
-    opt_dlopen=
-    opt_dry_run=false
-    opt_help=false
-    opt_mode=
-    opt_preserve_dup_deps=false
-    opt_quiet=false
-
-    nonopt=
-    preserve_args=
-
-    _G_rc_lt_options_prep=:
-
-    # Shorthand for --mode=foo, only valid as the first argument
-    case $1 in
-    clean|clea|cle|cl)
-      shift; set dummy --mode clean ${1+"$@"}; shift
-      ;;
-    compile|compil|compi|comp|com|co|c)
-      shift; set dummy --mode compile ${1+"$@"}; shift
-      ;;
-    execute|execut|execu|exec|exe|ex|e)
-      shift; set dummy --mode execute ${1+"$@"}; shift
-      ;;
-    finish|finis|fini|fin|fi|f)
-      shift; set dummy --mode finish ${1+"$@"}; shift
-      ;;
-    install|instal|insta|inst|ins|in|i)
-      shift; set dummy --mode install ${1+"$@"}; shift
-      ;;
-    link|lin|li|l)
-      shift; set dummy --mode link ${1+"$@"}; shift
-      ;;
-    uninstall|uninstal|uninsta|uninst|unins|unin|uni|un|u)
-      shift; set dummy --mode uninstall ${1+"$@"}; shift
-      ;;
-    *)
-      _G_rc_lt_options_prep=false
-      ;;
-    esac
-
-    if $_G_rc_lt_options_prep; then
-      # Pass back the list of options.
-      func_quote eval ${1+"$@"}
-      libtool_options_prep_result=$func_quote_result
-    fi
-}
-func_add_hook func_options_prep libtool_options_prep
-
-
-# libtool_parse_options [ARG]...
-# ---------------------------------
-# Provide handling for libtool specific options.
-libtool_parse_options ()
-{
-    $debug_cmd
-
-    _G_rc_lt_parse_options=false
-
-    # Perform our own loop to consume as many options as possible in
-    # each iteration.
-    while test $# -gt 0; do
-      _G_match_lt_parse_options=:
-      _G_opt=$1
-      shift
-      case $_G_opt in
-        --dry-run|--dryrun|-n)
-                        opt_dry_run=:
-                        ;;
-
-        --config)       func_config ;;
-
-        --dlopen|-dlopen)
-                        opt_dlopen="${opt_dlopen+$opt_dlopen
-}$1"
-                        shift
-                        ;;
-
-        --preserve-dup-deps)
-                        opt_preserve_dup_deps=: ;;
-
-        --features)     func_features ;;
-
-        --finish)       set dummy --mode finish ${1+"$@"}; shift ;;
-
-        --help)         opt_help=: ;;
-
-        --help-all)     opt_help=': help-all' ;;
-
-        --mode)         test $# = 0 && func_missing_arg $_G_opt && break
-                        opt_mode=$1
-                        case $1 in
-                          # Valid mode arguments:
-                          clean|compile|execute|finish|install|link|relink|uninstall) ;;
-
-                          # Catch anything else as an error
-                          *) func_error "invalid argument for $_G_opt"
-                             exit_cmd=exit
-                             break
-                             ;;
-                        esac
-                        shift
-                        ;;
-
-        --no-silent|--no-quiet)
-                        opt_quiet=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --no-warnings|--no-warning|--no-warn)
-                        opt_warning=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --no-verbose)
-                        opt_verbose=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --silent|--quiet)
-                        opt_quiet=:
-                        opt_verbose=false
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        --tag)          test $# = 0 && func_missing_arg $_G_opt && break
-                        opt_tag=$1
-                        func_append preserve_args " $_G_opt $1"
-                        func_enable_tag "$1"
-                        shift
-                        ;;
-
-        --verbose|-v)   opt_quiet=false
-                        opt_verbose=:
-                        func_append preserve_args " $_G_opt"
-                        ;;
-
-        # An option not handled by this hook function:
-        *)              set dummy "$_G_opt" ${1+"$@"} ; shift
-                        _G_match_lt_parse_options=false
-                        break
-                        ;;
-      esac
-      $_G_match_lt_parse_options && _G_rc_lt_parse_options=:
-    done
-
-    if $_G_rc_lt_parse_options; then
-      # save modified positional parameters for caller
-      func_quote eval ${1+"$@"}
-      libtool_parse_options_result=$func_quote_result
-    fi
-}
-func_add_hook func_parse_options libtool_parse_options
-
-
-
-# libtool_validate_options [ARG]...
-# ---------------------------------
-# Perform any sanity checks on option settings and/or unconsumed
-# arguments.
-libtool_validate_options ()
-{
-    # save first non-option argument
-    if test 0 -lt $#; then
-      nonopt=$1
-      shift
-    fi
-
-    # preserve --debug
-    test : = "$debug_cmd" || func_append preserve_args " --debug"
-
-    case $host in
-      # Solaris2 added to fix http://debbugs.gnu.org/cgi/bugreport.cgi?bug=16452
-      # see also: http://gcc.gnu.org/bugzilla/show_bug.cgi?id=59788
-      *cygwin* | *mingw* | *pw32* | *cegcc* | *solaris2* | *os2*)
-        # don't eliminate duplications in $postdeps and $predeps
-        opt_duplicate_compiler_generated_deps=:
-        ;;
-      *)
-        opt_duplicate_compiler_generated_deps=$opt_preserve_dup_deps
-        ;;
-    esac
-
-    $opt_help || {
-      # Sanity checks first:
-      func_check_version_match
-
-      test yes != "$build_libtool_libs" \
-        && test yes != "$build_old_libs" \
-        && func_fatal_configuration "not configured to build any kind of library"
-
-      # Darwin sucks
-      eval std_shrext=\"$shrext_cmds\"
-
-      # Only execute mode is allowed to have -dlopen flags.
-      if test -n "$opt_dlopen" && test execute != "$opt_mode"; then
-        func_error "unrecognized option '-dlopen'"
-        $ECHO "$help" 1>&2
-        exit $EXIT_FAILURE
-      fi
-
-      # Change the help message to a mode-specific one.
-      generic_help=$help
-      help="Try '$progname --help --mode=$opt_mode' for more information."
-    }
-
-    # Pass back the unparsed argument list
-    func_quote eval ${1+"$@"}
-    libtool_validate_options_result=$func_quote_result
-}
-func_add_hook func_validate_options libtool_validate_options
-
-
-# Process options as early as possible so that --help and --version
-# can return quickly.
-func_options ${1+"$@"}
-eval set dummy "$func_options_result"; shift
-
-
-
-## ----------- ##
-##    Main.    ##
-## ----------- ##
-
-magic='%%%MAGIC variable%%%'
-magic_exe='%%%MAGIC EXE variable%%%'
-
-# Global variables.
-extracted_archives=
-extracted_serial=0
-
-# If this variable is set in any of the actions, the command in it
-# will be execed at the end.  This prevents here-documents from being
-# left over by shells.
-exec_cmd=
-
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-$1
-_LTECHO_EOF'
-}
-
-# func_generated_by_libtool
-# True iff stdin has been generated by Libtool. This function is only
-# a basic sanity check; it will hardly flush out determined imposters.
-func_generated_by_libtool_p ()
-{
-  $GREP "^# Generated by .*$PACKAGE" > /dev/null 2>&1
-}
-
-# func_lalib_p file
-# True iff FILE is a libtool '.la' library or '.lo' object file.
-# This function is only a basic sanity check; it will hardly flush out
-# determined imposters.
-func_lalib_p ()
-{
-    test -f "$1" &&
-      $SED -e 4q "$1" 2>/dev/null | func_generated_by_libtool_p
-}
-
-# func_lalib_unsafe_p file
-# True iff FILE is a libtool '.la' library or '.lo' object file.
-# This function implements the same check as func_lalib_p without
-# resorting to external programs.  To this end, it redirects stdin and
-# closes it afterwards, without saving the original file descriptor.
-# As a safety measure, use it only where a negative result would be
-# fatal anyway.  Works if 'file' does not exist.
-func_lalib_unsafe_p ()
-{
-    lalib_p=no
-    if test -f "$1" && test -r "$1" && exec 5<&0 <"$1"; then
-	for lalib_p_l in 1 2 3 4
-	do
-	    read lalib_p_line
-	    case $lalib_p_line in
-		\#\ Generated\ by\ *$PACKAGE* ) lalib_p=yes; break;;
-	    esac
-	done
-	exec 0<&5 5<&-
-    fi
-    test yes = "$lalib_p"
-}
-
-# func_ltwrapper_script_p file
-# True iff FILE is a libtool wrapper script
-# This function is only a basic sanity check; it will hardly flush out
-# determined imposters.
-func_ltwrapper_script_p ()
-{
-    test -f "$1" &&
-      $lt_truncate_bin < "$1" 2>/dev/null | func_generated_by_libtool_p
-}
-
-# func_ltwrapper_executable_p file
-# True iff FILE is a libtool wrapper executable
-# This function is only a basic sanity check; it will hardly flush out
-# determined imposters.
-func_ltwrapper_executable_p ()
-{
-    func_ltwrapper_exec_suffix=
-    case $1 in
-    *.exe) ;;
-    *) func_ltwrapper_exec_suffix=.exe ;;
-    esac
-    $GREP "$magic_exe" "$1$func_ltwrapper_exec_suffix" >/dev/null 2>&1
-}
-
-# func_ltwrapper_scriptname file
-# Assumes file is an ltwrapper_executable
-# uses $file to determine the appropriate filename for a
-# temporary ltwrapper_script.
-func_ltwrapper_scriptname ()
-{
-    func_dirname_and_basename "$1" "" "."
-    func_stripname '' '.exe' "$func_basename_result"
-    func_ltwrapper_scriptname_result=$func_dirname_result/$objdir/${func_stripname_result}_ltshwrapper
-}
-
-# func_ltwrapper_p file
-# True iff FILE is a libtool wrapper script or wrapper executable
-# This function is only a basic sanity check; it will hardly flush out
-# determined imposters.
-func_ltwrapper_p ()
-{
-    func_ltwrapper_script_p "$1" || func_ltwrapper_executable_p "$1"
-}
-
-
-# func_execute_cmds commands fail_cmd
-# Execute tilde-delimited COMMANDS.
-# If FAIL_CMD is given, eval that upon failure.
-# FAIL_CMD may read-access the current command in variable CMD!
-func_execute_cmds ()
-{
-    $debug_cmd
-
-    save_ifs=$IFS; IFS='~'
-    for cmd in $1; do
-      IFS=$sp$nl
-      eval cmd=\"$cmd\"
-      IFS=$save_ifs
-      func_show_eval "$cmd" "${2-:}"
-    done
-    IFS=$save_ifs
-}
-
-
-# func_source file
-# Source FILE, adding directory component if necessary.
-# Note that it is not necessary on cygwin/mingw to append a dot to
-# FILE even if both FILE and FILE.exe exist: automatic-append-.exe
-# behavior happens only for exec(3), not for open(2)!  Also, sourcing
-# 'FILE.' does not work on cygwin managed mounts.
-func_source ()
-{
-    $debug_cmd
-
-    case $1 in
-    */* | *\\*)	. "$1" ;;
-    *)		. "./$1" ;;
-    esac
-}
-
-
-# func_resolve_sysroot PATH
-# Replace a leading = in PATH with a sysroot.  Store the result into
-# func_resolve_sysroot_result
-func_resolve_sysroot ()
-{
-  func_resolve_sysroot_result=$1
-  case $func_resolve_sysroot_result in
-  =*)
-    func_stripname '=' '' "$func_resolve_sysroot_result"
-    func_resolve_sysroot_result=$lt_sysroot$func_stripname_result
-    ;;
-  esac
-}
-
-# func_replace_sysroot PATH
-# If PATH begins with the sysroot, replace it with = and
-# store the result into func_replace_sysroot_result.
-func_replace_sysroot ()
-{
-  case $lt_sysroot:$1 in
-  ?*:"$lt_sysroot"*)
-    func_stripname "$lt_sysroot" '' "$1"
-    func_replace_sysroot_result='='$func_stripname_result
-    ;;
-  *)
-    # Including no sysroot.
-    func_replace_sysroot_result=$1
-    ;;
-  esac
-}
-
-# func_infer_tag arg
-# Infer tagged configuration to use if any are available and
-# if one wasn't chosen via the "--tag" command line option.
-# Only attempt this if the compiler in the base compile
-# command doesn't match the default compiler.
-# arg is usually of the form 'gcc ...'
-func_infer_tag ()
-{
-    $debug_cmd
-
-    if test -n "$available_tags" && test -z "$tagname"; then
-      CC_quoted=
-      for arg in $CC; do
-	func_append_quoted CC_quoted "$arg"
-      done
-      CC_expanded=`func_echo_all $CC`
-      CC_quoted_expanded=`func_echo_all $CC_quoted`
-      case $@ in
-      # Blanks in the command may have been stripped by the calling shell,
-      # but not from the CC environment variable when configure was run.
-      " $CC "* | "$CC "* | " $CC_expanded "* | "$CC_expanded "* | \
-      " $CC_quoted"* | "$CC_quoted "* | " $CC_quoted_expanded "* | "$CC_quoted_expanded "*) ;;
-      # Blanks at the start of $base_compile will cause this to fail
-      # if we don't check for them as well.
-      *)
-	for z in $available_tags; do
-	  if $GREP "^# ### BEGIN LIBTOOL TAG CONFIG: $z$" < "$progpath" > /dev/null; then
-	    # Evaluate the configuration.
-	    eval "`$SED -n -e '/^# ### BEGIN LIBTOOL TAG CONFIG: '$z'$/,/^# ### END LIBTOOL TAG CONFIG: '$z'$/p' < $progpath`"
-	    CC_quoted=
-	    for arg in $CC; do
-	      # Double-quote args containing other shell metacharacters.
-	      func_append_quoted CC_quoted "$arg"
-	    done
-	    CC_expanded=`func_echo_all $CC`
-	    CC_quoted_expanded=`func_echo_all $CC_quoted`
-	    case "$@ " in
-	    " $CC "* | "$CC "* | " $CC_expanded "* | "$CC_expanded "* | \
-	    " $CC_quoted"* | "$CC_quoted "* | " $CC_quoted_expanded "* | "$CC_quoted_expanded "*)
-	      # The compiler in the base compile command matches
-	      # the one in the tagged configuration.
-	      # Assume this is the tagged configuration we want.
-	      tagname=$z
-	      break
-	      ;;
-	    esac
-	  fi
-	done
-	# If $tagname still isn't set, then no tagged configuration
-	# was found and let the user know that the "--tag" command
-	# line option must be used.
-	if test -z "$tagname"; then
-	  func_echo "unable to infer tagged configuration"
-	  func_fatal_error "specify a tag with '--tag'"
-#	else
-#	  func_verbose "using $tagname tagged configuration"
-	fi
-	;;
-      esac
-    fi
-}
-
-
-
-# func_write_libtool_object output_name pic_name nonpic_name
-# Create a libtool object file (analogous to a ".la" file),
-# but don't create it if we're doing a dry run.
-func_write_libtool_object ()
-{
-    write_libobj=$1
-    if test yes = "$build_libtool_libs"; then
-      write_lobj=\'$2\'
-    else
-      write_lobj=none
-    fi
-
-    if test yes = "$build_old_libs"; then
-      write_oldobj=\'$3\'
-    else
-      write_oldobj=none
-    fi
-
-    $opt_dry_run || {
-      cat >${write_libobj}T <<EOF
-# $write_libobj - a libtool object file
-# Generated by $PROGRAM (GNU $PACKAGE) $VERSION
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# Name of the PIC object.
-pic_object=$write_lobj
-
-# Name of the non-PIC object
-non_pic_object=$write_oldobj
-
-EOF
-      $MV "${write_libobj}T" "$write_libobj"
-    }
-}
-
-
-##################################################
-# FILE NAME AND PATH CONVERSION HELPER FUNCTIONS #
-##################################################
-
-# func_convert_core_file_wine_to_w32 ARG
-# Helper function used by file name conversion functions when $build is *nix,
-# and $host is mingw, cygwin, or some other w32 environment. Relies on a
-# correctly configured wine environment available, with the winepath program
-# in $build's $PATH.
-#
-# ARG is the $build file name to be converted to w32 format.
-# Result is available in $func_convert_core_file_wine_to_w32_result, and will
-# be empty on error (or when ARG is empty)
-func_convert_core_file_wine_to_w32 ()
-{
-  $debug_cmd
-
-  func_convert_core_file_wine_to_w32_result=$1
-  if test -n "$1"; then
-    # Unfortunately, winepath does not exit with a non-zero error code, so we
-    # are forced to check the contents of stdout. On the other hand, if the
-    # command is not found, the shell will set an exit code of 127 and print
-    # *an error message* to stdout. So we must check for both error code of
-    # zero AND non-empty stdout, which explains the odd construction:
-    func_convert_core_file_wine_to_w32_tmp=`winepath -w "$1" 2>/dev/null`
-    if test "$?" -eq 0 && test -n "$func_convert_core_file_wine_to_w32_tmp"; then
-      func_convert_core_file_wine_to_w32_result=`$ECHO "$func_convert_core_file_wine_to_w32_tmp" |
-        $SED -e "$sed_naive_backslashify"`
-    else
-      func_convert_core_file_wine_to_w32_result=
-    fi
-  fi
-}
-# end: func_convert_core_file_wine_to_w32
-
-
-# func_convert_core_path_wine_to_w32 ARG
-# Helper function used by path conversion functions when $build is *nix, and
-# $host is mingw, cygwin, or some other w32 environment. Relies on a correctly
-# configured wine environment available, with the winepath program in $build's
-# $PATH. Assumes ARG has no leading or trailing path separator characters.
-#
-# ARG is path to be converted from $build format to win32.
-# Result is available in $func_convert_core_path_wine_to_w32_result.
-# Unconvertible file (directory) names in ARG are skipped; if no directory names
-# are convertible, then the result may be empty.
-func_convert_core_path_wine_to_w32 ()
-{
-  $debug_cmd
-
-  # unfortunately, winepath doesn't convert paths, only file names
-  func_convert_core_path_wine_to_w32_result=
-  if test -n "$1"; then
-    oldIFS=$IFS
-    IFS=:
-    for func_convert_core_path_wine_to_w32_f in $1; do
-      IFS=$oldIFS
-      func_convert_core_file_wine_to_w32 "$func_convert_core_path_wine_to_w32_f"
-      if test -n "$func_convert_core_file_wine_to_w32_result"; then
-        if test -z "$func_convert_core_path_wine_to_w32_result"; then
-          func_convert_core_path_wine_to_w32_result=$func_convert_core_file_wine_to_w32_result
-        else
-          func_append func_convert_core_path_wine_to_w32_result ";$func_convert_core_file_wine_to_w32_result"
-        fi
-      fi
-    done
-    IFS=$oldIFS
-  fi
-}
-# end: func_convert_core_path_wine_to_w32
-
-
-# func_cygpath ARGS...
-# Wrapper around calling the cygpath program via LT_CYGPATH. This is used when
-# when (1) $build is *nix and Cygwin is hosted via a wine environment; or (2)
-# $build is MSYS and $host is Cygwin, or (3) $build is Cygwin. In case (1) or
-# (2), returns the Cygwin file name or path in func_cygpath_result (input
-# file name or path is assumed to be in w32 format, as previously converted
-# from $build's *nix or MSYS format). In case (3), returns the w32 file name
-# or path in func_cygpath_result (input file name or path is assumed to be in
-# Cygwin format). Returns an empty string on error.
-#
-# ARGS are passed to cygpath, with the last one being the file name or path to
-# be converted.
-#
-# Specify the absolute *nix (or w32) name to cygpath in the LT_CYGPATH
-# environment variable; do not put it in $PATH.
-func_cygpath ()
-{
-  $debug_cmd
-
-  if test -n "$LT_CYGPATH" && test -f "$LT_CYGPATH"; then
-    func_cygpath_result=`$LT_CYGPATH "$@" 2>/dev/null`
-    if test "$?" -ne 0; then
-      # on failure, ensure result is empty
-      func_cygpath_result=
-    fi
-  else
-    func_cygpath_result=
-    func_error "LT_CYGPATH is empty or specifies non-existent file: '$LT_CYGPATH'"
-  fi
-}
-#end: func_cygpath
-
-
-# func_convert_core_msys_to_w32 ARG
-# Convert file name or path ARG from MSYS format to w32 format.  Return
-# result in func_convert_core_msys_to_w32_result.
-func_convert_core_msys_to_w32 ()
-{
-  $debug_cmd
-
-  # awkward: cmd appends spaces to result
-  func_convert_core_msys_to_w32_result=`( cmd //c echo "$1" ) 2>/dev/null |
-    $SED -e 's/[ ]*$//' -e "$sed_naive_backslashify"`
-}
-#end: func_convert_core_msys_to_w32
-
-
-# func_convert_file_check ARG1 ARG2
-# Verify that ARG1 (a file name in $build format) was converted to $host
-# format in ARG2. Otherwise, emit an error message, but continue (resetting
-# func_to_host_file_result to ARG1).
-func_convert_file_check ()
-{
-  $debug_cmd
-
-  if test -z "$2" && test -n "$1"; then
-    func_error "Could not determine host file name corresponding to"
-    func_error "  '$1'"
-    func_error "Continuing, but uninstalled executables may not work."
-    # Fallback:
-    func_to_host_file_result=$1
-  fi
-}
-# end func_convert_file_check
-
-
-# func_convert_path_check FROM_PATHSEP TO_PATHSEP FROM_PATH TO_PATH
-# Verify that FROM_PATH (a path in $build format) was converted to $host
-# format in TO_PATH. Otherwise, emit an error message, but continue, resetting
-# func_to_host_file_result to a simplistic fallback value (see below).
-func_convert_path_check ()
-{
-  $debug_cmd
-
-  if test -z "$4" && test -n "$3"; then
-    func_error "Could not determine the host path corresponding to"
-    func_error "  '$3'"
-    func_error "Continuing, but uninstalled executables may not work."
-    # Fallback.  This is a deliberately simplistic "conversion" and
-    # should not be "improved".  See libtool.info.
-    if test "x$1" != "x$2"; then
-      lt_replace_pathsep_chars="s|$1|$2|g"
-      func_to_host_path_result=`echo "$3" |
-        $SED -e "$lt_replace_pathsep_chars"`
-    else
-      func_to_host_path_result=$3
-    fi
-  fi
-}
-# end func_convert_path_check
-
-
-# func_convert_path_front_back_pathsep FRONTPAT BACKPAT REPL ORIG
-# Modifies func_to_host_path_result by prepending REPL if ORIG matches FRONTPAT
-# and appending REPL if ORIG matches BACKPAT.
-func_convert_path_front_back_pathsep ()
-{
-  $debug_cmd
-
-  case $4 in
-  $1 ) func_to_host_path_result=$3$func_to_host_path_result
-    ;;
-  esac
-  case $4 in
-  $2 ) func_append func_to_host_path_result "$3"
-    ;;
-  esac
-}
-# end func_convert_path_front_back_pathsep
-
-
-##################################################
-# $build to $host FILE NAME CONVERSION FUNCTIONS #
-##################################################
-# invoked via '$to_host_file_cmd ARG'
-#
-# In each case, ARG is the path to be converted from $build to $host format.
-# Result will be available in $func_to_host_file_result.
-
-
-# func_to_host_file ARG
-# Converts the file name ARG from $build format to $host format. Return result
-# in func_to_host_file_result.
-func_to_host_file ()
-{
-  $debug_cmd
-
-  $to_host_file_cmd "$1"
-}
-# end func_to_host_file
-
-
-# func_to_tool_file ARG LAZY
-# converts the file name ARG from $build format to toolchain format. Return
-# result in func_to_tool_file_result.  If the conversion in use is listed
-# in (the comma separated) LAZY, no conversion takes place.
-func_to_tool_file ()
-{
-  $debug_cmd
-
-  case ,$2, in
-    *,"$to_tool_file_cmd",*)
-      func_to_tool_file_result=$1
-      ;;
-    *)
-      $to_tool_file_cmd "$1"
-      func_to_tool_file_result=$func_to_host_file_result
-      ;;
-  esac
-}
-# end func_to_tool_file
-
-
-# func_convert_file_noop ARG
-# Copy ARG to func_to_host_file_result.
-func_convert_file_noop ()
-{
-  func_to_host_file_result=$1
-}
-# end func_convert_file_noop
-
-
-# func_convert_file_msys_to_w32 ARG
-# Convert file name ARG from (mingw) MSYS to (mingw) w32 format; automatic
-# conversion to w32 is not available inside the cwrapper.  Returns result in
-# func_to_host_file_result.
-func_convert_file_msys_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    func_convert_core_msys_to_w32 "$1"
-    func_to_host_file_result=$func_convert_core_msys_to_w32_result
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_msys_to_w32
-
-
-# func_convert_file_cygwin_to_w32 ARG
-# Convert file name ARG from Cygwin to w32 format.  Returns result in
-# func_to_host_file_result.
-func_convert_file_cygwin_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    # because $build is cygwin, we call "the" cygpath in $PATH; no need to use
-    # LT_CYGPATH in this case.
-    func_to_host_file_result=`cygpath -m "$1"`
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_cygwin_to_w32
-
-
-# func_convert_file_nix_to_w32 ARG
-# Convert file name ARG from *nix to w32 format.  Requires a wine environment
-# and a working winepath. Returns result in func_to_host_file_result.
-func_convert_file_nix_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    func_convert_core_file_wine_to_w32 "$1"
-    func_to_host_file_result=$func_convert_core_file_wine_to_w32_result
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_nix_to_w32
-
-
-# func_convert_file_msys_to_cygwin ARG
-# Convert file name ARG from MSYS to Cygwin format.  Requires LT_CYGPATH set.
-# Returns result in func_to_host_file_result.
-func_convert_file_msys_to_cygwin ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    func_convert_core_msys_to_w32 "$1"
-    func_cygpath -u "$func_convert_core_msys_to_w32_result"
-    func_to_host_file_result=$func_cygpath_result
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_msys_to_cygwin
-
-
-# func_convert_file_nix_to_cygwin ARG
-# Convert file name ARG from *nix to Cygwin format.  Requires Cygwin installed
-# in a wine environment, working winepath, and LT_CYGPATH set.  Returns result
-# in func_to_host_file_result.
-func_convert_file_nix_to_cygwin ()
-{
-  $debug_cmd
-
-  func_to_host_file_result=$1
-  if test -n "$1"; then
-    # convert from *nix to w32, then use cygpath to convert from w32 to cygwin.
-    func_convert_core_file_wine_to_w32 "$1"
-    func_cygpath -u "$func_convert_core_file_wine_to_w32_result"
-    func_to_host_file_result=$func_cygpath_result
-  fi
-  func_convert_file_check "$1" "$func_to_host_file_result"
-}
-# end func_convert_file_nix_to_cygwin
-
-
-#############################################
-# $build to $host PATH CONVERSION FUNCTIONS #
-#############################################
-# invoked via '$to_host_path_cmd ARG'
-#
-# In each case, ARG is the path to be converted from $build to $host format.
-# The result will be available in $func_to_host_path_result.
-#
-# Path separators are also converted from $build format to $host format.  If
-# ARG begins or ends with a path separator character, it is preserved (but
-# converted to $host format) on output.
-#
-# All path conversion functions are named using the following convention:
-#   file name conversion function    : func_convert_file_X_to_Y ()
-#   path conversion function         : func_convert_path_X_to_Y ()
-# where, for any given $build/$host combination the 'X_to_Y' value is the
-# same.  If conversion functions are added for new $build/$host combinations,
-# the two new functions must follow this pattern, or func_init_to_host_path_cmd
-# will break.
-
-
-# func_init_to_host_path_cmd
-# Ensures that function "pointer" variable $to_host_path_cmd is set to the
-# appropriate value, based on the value of $to_host_file_cmd.
-to_host_path_cmd=
-func_init_to_host_path_cmd ()
-{
-  $debug_cmd
-
-  if test -z "$to_host_path_cmd"; then
-    func_stripname 'func_convert_file_' '' "$to_host_file_cmd"
-    to_host_path_cmd=func_convert_path_$func_stripname_result
-  fi
-}
-
-
-# func_to_host_path ARG
-# Converts the path ARG from $build format to $host format. Return result
-# in func_to_host_path_result.
-func_to_host_path ()
-{
-  $debug_cmd
-
-  func_init_to_host_path_cmd
-  $to_host_path_cmd "$1"
-}
-# end func_to_host_path
-
-
-# func_convert_path_noop ARG
-# Copy ARG to func_to_host_path_result.
-func_convert_path_noop ()
-{
-  func_to_host_path_result=$1
-}
-# end func_convert_path_noop
-
-
-# func_convert_path_msys_to_w32 ARG
-# Convert path ARG from (mingw) MSYS to (mingw) w32 format; automatic
-# conversion to w32 is not available inside the cwrapper.  Returns result in
-# func_to_host_path_result.
-func_convert_path_msys_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # Remove leading and trailing path separator characters from ARG.  MSYS
-    # behavior is inconsistent here; cygpath turns them into '.;' and ';.';
-    # and winepath ignores them completely.
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_convert_core_msys_to_w32 "$func_to_host_path_tmp1"
-    func_to_host_path_result=$func_convert_core_msys_to_w32_result
-    func_convert_path_check : ";" \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" ";" "$1"
-  fi
-}
-# end func_convert_path_msys_to_w32
-
-
-# func_convert_path_cygwin_to_w32 ARG
-# Convert path ARG from Cygwin to w32 format.  Returns result in
-# func_to_host_file_result.
-func_convert_path_cygwin_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # See func_convert_path_msys_to_w32:
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_to_host_path_result=`cygpath -m -p "$func_to_host_path_tmp1"`
-    func_convert_path_check : ";" \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" ";" "$1"
-  fi
-}
-# end func_convert_path_cygwin_to_w32
-
-
-# func_convert_path_nix_to_w32 ARG
-# Convert path ARG from *nix to w32 format.  Requires a wine environment and
-# a working winepath.  Returns result in func_to_host_file_result.
-func_convert_path_nix_to_w32 ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # See func_convert_path_msys_to_w32:
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_convert_core_path_wine_to_w32 "$func_to_host_path_tmp1"
-    func_to_host_path_result=$func_convert_core_path_wine_to_w32_result
-    func_convert_path_check : ";" \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" ";" "$1"
-  fi
-}
-# end func_convert_path_nix_to_w32
-
-
-# func_convert_path_msys_to_cygwin ARG
-# Convert path ARG from MSYS to Cygwin format.  Requires LT_CYGPATH set.
-# Returns result in func_to_host_file_result.
-func_convert_path_msys_to_cygwin ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # See func_convert_path_msys_to_w32:
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_convert_core_msys_to_w32 "$func_to_host_path_tmp1"
-    func_cygpath -u -p "$func_convert_core_msys_to_w32_result"
-    func_to_host_path_result=$func_cygpath_result
-    func_convert_path_check : : \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" : "$1"
-  fi
-}
-# end func_convert_path_msys_to_cygwin
-
-
-# func_convert_path_nix_to_cygwin ARG
-# Convert path ARG from *nix to Cygwin format.  Requires Cygwin installed in a
-# a wine environment, working winepath, and LT_CYGPATH set.  Returns result in
-# func_to_host_file_result.
-func_convert_path_nix_to_cygwin ()
-{
-  $debug_cmd
-
-  func_to_host_path_result=$1
-  if test -n "$1"; then
-    # Remove leading and trailing path separator characters from
-    # ARG. msys behavior is inconsistent here, cygpath turns them
-    # into '.;' and ';.', and winepath ignores them completely.
-    func_stripname : : "$1"
-    func_to_host_path_tmp1=$func_stripname_result
-    func_convert_core_path_wine_to_w32 "$func_to_host_path_tmp1"
-    func_cygpath -u -p "$func_convert_core_path_wine_to_w32_result"
-    func_to_host_path_result=$func_cygpath_result
-    func_convert_path_check : : \
-      "$func_to_host_path_tmp1" "$func_to_host_path_result"
-    func_convert_path_front_back_pathsep ":*" "*:" : "$1"
-  fi
-}
-# end func_convert_path_nix_to_cygwin
-
-
-# func_dll_def_p FILE
-# True iff FILE is a Windows DLL '.def' file.
-# Keep in sync with _LT_DLL_DEF_P in libtool.m4
-func_dll_def_p ()
-{
-  $debug_cmd
-
-  func_dll_def_p_tmp=`$SED -n \
-    -e 's/^[	 ]*//' \
-    -e '/^\(;.*\)*$/d' \
-    -e 's/^\(EXPORTS\|LIBRARY\)\([	 ].*\)*$/DEF/p' \
-    -e q \
-    "$1"`
-  test DEF = "$func_dll_def_p_tmp"
-}
-
-
-# func_mode_compile arg...
-func_mode_compile ()
-{
-    $debug_cmd
-
-    # Get the compilation command and the source file.
-    base_compile=
-    srcfile=$nonopt  #  always keep a non-empty value in "srcfile"
-    suppress_opt=yes
-    suppress_output=
-    arg_mode=normal
-    libobj=
-    later=
-    pie_flag=
-
-    for arg
-    do
-      case $arg_mode in
-      arg  )
-	# do not "continue".  Instead, add this to base_compile
-	lastarg=$arg
-	arg_mode=normal
-	;;
-
-      target )
-	libobj=$arg
-	arg_mode=normal
-	continue
-	;;
-
-      normal )
-	# Accept any command-line options.
-	case $arg in
-	-o)
-	  test -n "$libobj" && \
-	    func_fatal_error "you cannot specify '-o' more than once"
-	  arg_mode=target
-	  continue
-	  ;;
-
-	-pie | -fpie | -fPIE)
-          func_append pie_flag " $arg"
-	  continue
-	  ;;
-
-	-shared | -static | -prefer-pic | -prefer-non-pic)
-	  func_append later " $arg"
-	  continue
-	  ;;
-
-	-no-suppress)
-	  suppress_opt=no
-	  continue
-	  ;;
-
-	-Xcompiler)
-	  arg_mode=arg  #  the next one goes into the "base_compile" arg list
-	  continue      #  The current "srcfile" will either be retained or
-	  ;;            #  replaced later.  I would guess that would be a bug.
-
-	-Wc,*)
-	  func_stripname '-Wc,' '' "$arg"
-	  args=$func_stripname_result
-	  lastarg=
-	  save_ifs=$IFS; IFS=,
-	  for arg in $args; do
-	    IFS=$save_ifs
-	    func_append_quoted lastarg "$arg"
-	  done
-	  IFS=$save_ifs
-	  func_stripname ' ' '' "$lastarg"
-	  lastarg=$func_stripname_result
-
-	  # Add the arguments to base_compile.
-	  func_append base_compile " $lastarg"
-	  continue
-	  ;;
-
-	*)
-	  # Accept the current argument as the source file.
-	  # The previous "srcfile" becomes the current argument.
-	  #
-	  lastarg=$srcfile
-	  srcfile=$arg
-	  ;;
-	esac  #  case $arg
-	;;
-      esac    #  case $arg_mode
-
-      # Aesthetically quote the previous argument.
-      func_append_quoted base_compile "$lastarg"
-    done # for arg
-
-    case $arg_mode in
-    arg)
-      func_fatal_error "you must specify an argument for -Xcompile"
-      ;;
-    target)
-      func_fatal_error "you must specify a target with '-o'"
-      ;;
-    *)
-      # Get the name of the library object.
-      test -z "$libobj" && {
-	func_basename "$srcfile"
-	libobj=$func_basename_result
-      }
-      ;;
-    esac
-
-    # Recognize several different file suffixes.
-    # If the user specifies -o file.o, it is replaced with file.lo
-    case $libobj in
-    *.[cCFSifmso] | \
-    *.ada | *.adb | *.ads | *.asm | \
-    *.c++ | *.cc | *.ii | *.class | *.cpp | *.cxx | \
-    *.[fF][09]? | *.for | *.java | *.go | *.obj | *.sx | *.cu | *.cup)
-      func_xform "$libobj"
-      libobj=$func_xform_result
-      ;;
-    esac
-
-    case $libobj in
-    *.lo) func_lo2o "$libobj"; obj=$func_lo2o_result ;;
-    *)
-      func_fatal_error "cannot determine name of library object from '$libobj'"
-      ;;
-    esac
-
-    func_infer_tag $base_compile
-
-    for arg in $later; do
-      case $arg in
-      -shared)
-	test yes = "$build_libtool_libs" \
-	  || func_fatal_configuration "cannot build a shared library"
-	build_old_libs=no
-	continue
-	;;
-
-      -static)
-	build_libtool_libs=no
-	build_old_libs=yes
-	continue
-	;;
-
-      -prefer-pic)
-	pic_mode=yes
-	continue
-	;;
-
-      -prefer-non-pic)
-	pic_mode=no
-	continue
-	;;
-      esac
-    done
-
-    func_quote_arg pretty "$libobj"
-    test "X$libobj" != "X$func_quote_arg_result" \
-      && $ECHO "X$libobj" | $GREP '[]~#^*{};<>?"'"'"'	 &()|`$[]' \
-      && func_warning "libobj name '$libobj' may not contain shell special characters."
-    func_dirname_and_basename "$obj" "/" ""
-    objname=$func_basename_result
-    xdir=$func_dirname_result
-    lobj=$xdir$objdir/$objname
-
-    test -z "$base_compile" && \
-      func_fatal_help "you must specify a compilation command"
-
-    # Delete any leftover library objects.
-    if test yes = "$build_old_libs"; then
-      removelist="$obj $lobj $libobj ${libobj}T"
-    else
-      removelist="$lobj $libobj ${libobj}T"
-    fi
-
-    # On Cygwin there's no "real" PIC flag so we must build both object types
-    case $host_os in
-    cygwin* | mingw* | pw32* | os2* | cegcc*)
-      pic_mode=default
-      ;;
-    esac
-    if test no = "$pic_mode" && test pass_all != "$deplibs_check_method"; then
-      # non-PIC code in shared libraries is not supported
-      pic_mode=default
-    fi
-
-    # Calculate the filename of the output object if compiler does
-    # not support -o with -c
-    if test no = "$compiler_c_o"; then
-      output_obj=`$ECHO "$srcfile" | $SED 's%^.*/%%; s%\.[^.]*$%%'`.$objext
-      lockfile=$output_obj.lock
-    else
-      output_obj=
-      need_locks=no
-      lockfile=
-    fi
-
-    # Lock this critical section if it is needed
-    # We use this script file to make the link, it avoids creating a new file
-    if test yes = "$need_locks"; then
-      until $opt_dry_run || ln "$progpath" "$lockfile" 2>/dev/null; do
-	func_echo "Waiting for $lockfile to be removed"
-	sleep 2
-      done
-    elif test warn = "$need_locks"; then
-      if test -f "$lockfile"; then
-	$ECHO "\
-*** ERROR, $lockfile exists and contains:
-`cat $lockfile 2>/dev/null`
-
-This indicates that another process is trying to use the same
-temporary object file, and libtool could not work around it because
-your compiler does not support '-c' and '-o' together.  If you
-repeat this compilation, it may succeed, by chance, but you had better
-avoid parallel builds (make -j) in this platform, or get a better
-compiler."
-
-	$opt_dry_run || $RM $removelist
-	exit $EXIT_FAILURE
-      fi
-      func_append removelist " $output_obj"
-      $ECHO "$srcfile" > "$lockfile"
-    fi
-
-    $opt_dry_run || $RM $removelist
-    func_append removelist " $lockfile"
-    trap '$opt_dry_run || $RM $removelist; exit $EXIT_FAILURE' 1 2 15
-
-    func_to_tool_file "$srcfile" func_convert_file_msys_to_w32
-    srcfile=$func_to_tool_file_result
-    func_quote_arg pretty "$srcfile"
-    qsrcfile=$func_quote_arg_result
-
-    # Only build a PIC object if we are building libtool libraries.
-    if test yes = "$build_libtool_libs"; then
-      # Without this assignment, base_compile gets emptied.
-      fbsd_hideous_sh_bug=$base_compile
-
-      if test no != "$pic_mode"; then
-	command="$base_compile $qsrcfile $pic_flag"
-      else
-	# Don't build PIC code
-	command="$base_compile $qsrcfile"
-      fi
-
-      func_mkdir_p "$xdir$objdir"
-
-      if test -z "$output_obj"; then
-	# Place PIC objects in $objdir
-	func_append command " -o $lobj"
-      fi
-
-      func_show_eval_locale "$command"	\
-          'test -n "$output_obj" && $RM $removelist; exit $EXIT_FAILURE'
-
-      if test warn = "$need_locks" &&
-	 test "X`cat $lockfile 2>/dev/null`" != "X$srcfile"; then
-	$ECHO "\
-*** ERROR, $lockfile contains:
-`cat $lockfile 2>/dev/null`
-
-but it should contain:
-$srcfile
-
-This indicates that another process is trying to use the same
-temporary object file, and libtool could not work around it because
-your compiler does not support '-c' and '-o' together.  If you
-repeat this compilation, it may succeed, by chance, but you had better
-avoid parallel builds (make -j) in this platform, or get a better
-compiler."
-
-	$opt_dry_run || $RM $removelist
-	exit $EXIT_FAILURE
-      fi
-
-      # Just move the object if needed, then go on to compile the next one
-      if test -n "$output_obj" && test "X$output_obj" != "X$lobj"; then
-	func_show_eval '$MV "$output_obj" "$lobj"' \
-	  'error=$?; $opt_dry_run || $RM $removelist; exit $error'
-      fi
-
-      # Allow error messages only from the first compilation.
-      if test yes = "$suppress_opt"; then
-	suppress_output=' >/dev/null 2>&1'
-      fi
-    fi
-
-    # Only build a position-dependent object if we build old libraries.
-    if test yes = "$build_old_libs"; then
-      if test yes != "$pic_mode"; then
-	# Don't build PIC code
-	command="$base_compile $qsrcfile$pie_flag"
-      else
-	command="$base_compile $qsrcfile $pic_flag"
-      fi
-      if test yes = "$compiler_c_o"; then
-	func_append command " -o $obj"
-      fi
-
-      # Suppress compiler output if we already did a PIC compilation.
-      func_append command "$suppress_output"
-      func_show_eval_locale "$command" \
-        '$opt_dry_run || $RM $removelist; exit $EXIT_FAILURE'
-
-      if test warn = "$need_locks" &&
-	 test "X`cat $lockfile 2>/dev/null`" != "X$srcfile"; then
-	$ECHO "\
-*** ERROR, $lockfile contains:
-`cat $lockfile 2>/dev/null`
-
-but it should contain:
-$srcfile
-
-This indicates that another process is trying to use the same
-temporary object file, and libtool could not work around it because
-your compiler does not support '-c' and '-o' together.  If you
-repeat this compilation, it may succeed, by chance, but you had better
-avoid parallel builds (make -j) in this platform, or get a better
-compiler."
-
-	$opt_dry_run || $RM $removelist
-	exit $EXIT_FAILURE
-      fi
-
-      # Just move the object if needed
-      if test -n "$output_obj" && test "X$output_obj" != "X$obj"; then
-	func_show_eval '$MV "$output_obj" "$obj"' \
-	  'error=$?; $opt_dry_run || $RM $removelist; exit $error'
-      fi
-    fi
-
-    $opt_dry_run || {
-      func_write_libtool_object "$libobj" "$objdir/$objname" "$objname"
-
-      # Unlock the critical section if it was locked
-      if test no != "$need_locks"; then
-	removelist=$lockfile
-        $RM "$lockfile"
-      fi
-    }
-
-    exit $EXIT_SUCCESS
-}
-
-$opt_help || {
-  test compile = "$opt_mode" && func_mode_compile ${1+"$@"}
-}
-
-func_mode_help ()
-{
-    # We need to display help for each of the modes.
-    case $opt_mode in
-      "")
-        # Generic help is extracted from the usage comments
-        # at the start of this file.
-        func_help
-        ;;
-
-      clean)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=clean RM [RM-OPTION]... FILE...
-
-Remove files from the build directory.
-
-RM is the name of the program to use to delete files associated with each FILE
-(typically '/bin/rm').  RM-OPTIONS are options (such as '-f') to be passed
-to RM.
-
-If FILE is a libtool library, object or program, all the files associated
-with it are deleted. Otherwise, only FILE itself is deleted using RM."
-        ;;
-
-      compile)
-      $ECHO \
-"Usage: $progname [OPTION]... --mode=compile COMPILE-COMMAND... SOURCEFILE
-
-Compile a source file into a libtool library object.
-
-This mode accepts the following additional options:
-
-  -o OUTPUT-FILE    set the output file name to OUTPUT-FILE
-  -no-suppress      do not suppress compiler output for multiple passes
-  -prefer-pic       try to build PIC objects only
-  -prefer-non-pic   try to build non-PIC objects only
-  -shared           do not build a '.o' file suitable for static linking
-  -static           only build a '.o' file suitable for static linking
-  -Wc,FLAG
-  -Xcompiler FLAG   pass FLAG directly to the compiler
-
-COMPILE-COMMAND is a command to be used in creating a 'standard' object file
-from the given SOURCEFILE.
-
-The output file name is determined by removing the directory component from
-SOURCEFILE, then substituting the C source code suffix '.c' with the
-library object suffix, '.lo'."
-        ;;
-
-      execute)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=execute COMMAND [ARGS]...
-
-Automatically set library path, then run a program.
-
-This mode accepts the following additional options:
-
-  -dlopen FILE      add the directory containing FILE to the library path
-
-This mode sets the library path environment variable according to '-dlopen'
-flags.
-
-If any of the ARGS are libtool executable wrappers, then they are translated
-into their corresponding uninstalled binary, and any of their required library
-directories are added to the library path.
-
-Then, COMMAND is executed, with ARGS as arguments."
-        ;;
-
-      finish)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=finish [LIBDIR]...
-
-Complete the installation of libtool libraries.
-
-Each LIBDIR is a directory that contains libtool libraries.
-
-The commands that this mode executes may require superuser privileges.  Use
-the '--dry-run' option if you just want to see what would be executed."
-        ;;
-
-      install)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=install INSTALL-COMMAND...
-
-Install executables or libraries.
-
-INSTALL-COMMAND is the installation command.  The first component should be
-either the 'install' or 'cp' program.
-
-The following components of INSTALL-COMMAND are treated specially:
-
-  -inst-prefix-dir PREFIX-DIR  Use PREFIX-DIR as a staging area for installation
-
-The rest of the components are interpreted as arguments to that command (only
-BSD-compatible install options are recognized)."
-        ;;
-
-      link)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=link LINK-COMMAND...
-
-Link object files or libraries together to form another library, or to
-create an executable program.
-
-LINK-COMMAND is a command using the C compiler that you would use to create
-a program from several object files.
-
-The following components of LINK-COMMAND are treated specially:
-
-  -all-static       do not do any dynamic linking at all
-  -avoid-version    do not add a version suffix if possible
-  -bindir BINDIR    specify path to binaries directory (for systems where
-                    libraries must be found in the PATH setting at runtime)
-  -dlopen FILE      '-dlpreopen' FILE if it cannot be dlopened at runtime
-  -dlpreopen FILE   link in FILE and add its symbols to lt_preloaded_symbols
-  -export-dynamic   allow symbols from OUTPUT-FILE to be resolved with dlsym(3)
-  -export-symbols SYMFILE
-                    try to export only the symbols listed in SYMFILE
-  -export-symbols-regex REGEX
-                    try to export only the symbols matching REGEX
-  -LLIBDIR          search LIBDIR for required installed libraries
-  -lNAME            OUTPUT-FILE requires the installed library libNAME
-  -module           build a library that can dlopened
-  -no-fast-install  disable the fast-install mode
-  -no-install       link a not-installable executable
-  -no-undefined     declare that a library does not refer to external symbols
-  -o OUTPUT-FILE    create OUTPUT-FILE from the specified objects
-  -objectlist FILE  use a list of object files found in FILE to specify objects
-  -os2dllname NAME  force a short DLL name on OS/2 (no effect on other OSes)
-  -precious-files-regex REGEX
-                    don't remove output files matching REGEX
-  -release RELEASE  specify package release information
-  -rpath LIBDIR     the created library will eventually be installed in LIBDIR
-  -R[ ]LIBDIR       add LIBDIR to the runtime path of programs and libraries
-  -shared           only do dynamic linking of libtool libraries
-  -shrext SUFFIX    override the standard shared library file extension
-  -static           do not do any dynamic linking of uninstalled libtool libraries
-  -static-libtool-libs
-                    do not do any dynamic linking of libtool libraries
-  -version-info CURRENT[:REVISION[:AGE]]
-                    specify library version info [each variable defaults to 0]
-  -weak LIBNAME     declare that the target provides the LIBNAME interface
-  -Wc,FLAG
-  -Xcompiler FLAG   pass linker-specific FLAG directly to the compiler
-  -Wa,FLAG
-  -Xassembler FLAG  pass linker-specific FLAG directly to the assembler
-  -Wl,FLAG
-  -Xlinker FLAG     pass linker-specific FLAG directly to the linker
-  -XCClinker FLAG   pass link-specific FLAG to the compiler driver (CC)
-
-All other options (arguments beginning with '-') are ignored.
-
-Every other argument is treated as a filename.  Files ending in '.la' are
-treated as uninstalled libtool libraries, other files are standard or library
-object files.
-
-If the OUTPUT-FILE ends in '.la', then a libtool library is created,
-only library objects ('.lo' files) may be specified, and '-rpath' is
-required, except when creating a convenience library.
-
-If OUTPUT-FILE ends in '.a' or '.lib', then a standard library is created
-using 'ar' and 'ranlib', or on Windows using 'lib'.
-
-If OUTPUT-FILE ends in '.lo' or '.$objext', then a reloadable object file
-is created, otherwise an executable program is created."
-        ;;
-
-      uninstall)
-        $ECHO \
-"Usage: $progname [OPTION]... --mode=uninstall RM [RM-OPTION]... FILE...
-
-Remove libraries from an installation directory.
-
-RM is the name of the program to use to delete files associated with each FILE
-(typically '/bin/rm').  RM-OPTIONS are options (such as '-f') to be passed
-to RM.
-
-If FILE is a libtool library, all the files associated with it are deleted.
-Otherwise, only FILE itself is deleted using RM."
-        ;;
-
-      *)
-        func_fatal_help "invalid operation mode '$opt_mode'"
-        ;;
-    esac
-
-    echo
-    $ECHO "Try '$progname --help' for more information about other modes."
-}
-
-# Now that we've collected a possible --mode arg, show help if necessary
-if $opt_help; then
-  if test : = "$opt_help"; then
-    func_mode_help
-  else
-    {
-      func_help noexit
-      for opt_mode in compile link execute install finish uninstall clean; do
-	func_mode_help
-      done
-    } | $SED -n '1p; 2,$s/^Usage:/  or: /p'
-    {
-      func_help noexit
-      for opt_mode in compile link execute install finish uninstall clean; do
-	echo
-	func_mode_help
-      done
-    } |
-    $SED '1d
-      /^When reporting/,/^Report/{
-	H
-	d
-      }
-      $x
-      /information about other modes/d
-      /more detailed .*MODE/d
-      s/^Usage:.*--mode=\([^ ]*\) .*/Description of \1 mode:/'
-  fi
-  exit $?
-fi
-
-
-# func_mode_execute arg...
-func_mode_execute ()
-{
-    $debug_cmd
-
-    # The first argument is the command name.
-    cmd=$nonopt
-    test -z "$cmd" && \
-      func_fatal_help "you must specify a COMMAND"
-
-    # Handle -dlopen flags immediately.
-    for file in $opt_dlopen; do
-      test -f "$file" \
-	|| func_fatal_help "'$file' is not a file"
-
-      dir=
-      case $file in
-      *.la)
-	func_resolve_sysroot "$file"
-	file=$func_resolve_sysroot_result
-
-	# Check to see that this really is a libtool archive.
-	func_lalib_unsafe_p "$file" \
-	  || func_fatal_help "'$lib' is not a valid libtool archive"
-
-	# Read the libtool library.
-	dlname=
-	library_names=
-	func_source "$file"
-
-	# Skip this library if it cannot be dlopened.
-	if test -z "$dlname"; then
-	  # Warn if it was a shared library.
-	  test -n "$library_names" && \
-	    func_warning "'$file' was not linked with '-export-dynamic'"
-	  continue
-	fi
-
-	func_dirname "$file" "" "."
-	dir=$func_dirname_result
-
-	if test -f "$dir/$objdir/$dlname"; then
-	  func_append dir "/$objdir"
-	else
-	  if test ! -f "$dir/$dlname"; then
-	    func_fatal_error "cannot find '$dlname' in '$dir' or '$dir/$objdir'"
-	  fi
-	fi
-	;;
-
-      *.lo)
-	# Just add the directory containing the .lo file.
-	func_dirname "$file" "" "."
-	dir=$func_dirname_result
-	;;
-
-      *)
-	func_warning "'-dlopen' is ignored for non-libtool libraries and objects"
-	continue
-	;;
-      esac
-
-      # Get the absolute pathname.
-      absdir=`cd "$dir" && pwd`
-      test -n "$absdir" && dir=$absdir
-
-      # Now add the directory to shlibpath_var.
-      if eval "test -z \"\$$shlibpath_var\""; then
-	eval "$shlibpath_var=\"\$dir\""
-      else
-	eval "$shlibpath_var=\"\$dir:\$$shlibpath_var\""
-      fi
-    done
-
-    # This variable tells wrapper scripts just to set shlibpath_var
-    # rather than running their programs.
-    libtool_execute_magic=$magic
-
-    # Check if any of the arguments is a wrapper script.
-    args=
-    for file
-    do
-      case $file in
-      -* | *.la | *.lo ) ;;
-      *)
-	# Do a test to see if this is really a libtool program.
-	if func_ltwrapper_script_p "$file"; then
-	  func_source "$file"
-	  # Transform arg to wrapped name.
-	  file=$progdir/$program
-	elif func_ltwrapper_executable_p "$file"; then
-	  func_ltwrapper_scriptname "$file"
-	  func_source "$func_ltwrapper_scriptname_result"
-	  # Transform arg to wrapped name.
-	  file=$progdir/$program
-	fi
-	;;
-      esac
-      # Quote arguments (to preserve shell metacharacters).
-      func_append_quoted args "$file"
-    done
-
-    if $opt_dry_run; then
-      # Display what would be done.
-      if test -n "$shlibpath_var"; then
-	eval "\$ECHO \"\$shlibpath_var=\$$shlibpath_var\""
-	echo "export $shlibpath_var"
-      fi
-      $ECHO "$cmd$args"
-      exit $EXIT_SUCCESS
-    else
-      if test -n "$shlibpath_var"; then
-	# Export the shlibpath_var.
-	eval "export $shlibpath_var"
-      fi
-
-      # Restore saved environment variables
-      for lt_var in LANG LANGUAGE LC_ALL LC_CTYPE LC_COLLATE LC_MESSAGES
-      do
-	eval "if test \"\${save_$lt_var+set}\" = set; then
-                $lt_var=\$save_$lt_var; export $lt_var
-	      else
-		$lt_unset $lt_var
-	      fi"
-      done
-
-      # Now prepare to actually exec the command.
-      exec_cmd=\$cmd$args
-    fi
-}
-
-test execute = "$opt_mode" && func_mode_execute ${1+"$@"}
-
-
-# func_mode_finish arg...
-func_mode_finish ()
-{
-    $debug_cmd
-
-    libs=
-    libdirs=
-    admincmds=
-
-    for opt in "$nonopt" ${1+"$@"}
-    do
-      if test -d "$opt"; then
-	func_append libdirs " $opt"
-
-      elif test -f "$opt"; then
-	if func_lalib_unsafe_p "$opt"; then
-	  func_append libs " $opt"
-	else
-	  func_warning "'$opt' is not a valid libtool archive"
-	fi
-
-      else
-	func_fatal_error "invalid argument '$opt'"
-      fi
-    done
-
-    if test -n "$libs"; then
-      if test -n "$lt_sysroot"; then
-        sysroot_regex=`$ECHO "$lt_sysroot" | $SED "$sed_make_literal_regex"`
-        sysroot_cmd="s/\([ ']\)$sysroot_regex/\1/g;"
-      else
-        sysroot_cmd=
-      fi
-
-      # Remove sysroot references
-      if $opt_dry_run; then
-        for lib in $libs; do
-          echo "removing references to $lt_sysroot and '=' prefixes from $lib"
-        done
-      else
-        tmpdir=`func_mktempdir`
-        for lib in $libs; do
-	  $SED -e "$sysroot_cmd s/\([ ']-[LR]\)=/\1/g; s/\([ ']\)=/\1/g" $lib \
-	    > $tmpdir/tmp-la
-	  mv -f $tmpdir/tmp-la $lib
-	done
-        ${RM}r "$tmpdir"
-      fi
-    fi
-
-    if test -n "$finish_cmds$finish_eval" && test -n "$libdirs"; then
-      for libdir in $libdirs; do
-	if test -n "$finish_cmds"; then
-	  # Do each command in the finish commands.
-	  func_execute_cmds "$finish_cmds" 'admincmds="$admincmds
-'"$cmd"'"'
-	fi
-	if test -n "$finish_eval"; then
-	  # Do the single finish_eval.
-	  eval cmds=\"$finish_eval\"
-	  $opt_dry_run || eval "$cmds" || func_append admincmds "
-       $cmds"
-	fi
-      done
-    fi
-
-    # Exit here if they wanted silent mode.
-    $opt_quiet && exit $EXIT_SUCCESS
-
-    if test -n "$finish_cmds$finish_eval" && test -n "$libdirs"; then
-      echo "----------------------------------------------------------------------"
-      echo "Libraries have been installed in:"
-      for libdir in $libdirs; do
-	$ECHO "   $libdir"
-      done
-      echo
-      echo "If you ever happen to want to link against installed libraries"
-      echo "in a given directory, LIBDIR, you must either use libtool, and"
-      echo "specify the full pathname of the library, or use the '-LLIBDIR'"
-      echo "flag during linking and do at least one of the following:"
-      if test -n "$shlibpath_var"; then
-	echo "   - add LIBDIR to the '$shlibpath_var' environment variable"
-	echo "     during execution"
-      fi
-      if test -n "$runpath_var"; then
-	echo "   - add LIBDIR to the '$runpath_var' environment variable"
-	echo "     during linking"
-      fi
-      if test -n "$hardcode_libdir_flag_spec"; then
-	libdir=LIBDIR
-	eval flag=\"$hardcode_libdir_flag_spec\"
-
-	$ECHO "   - use the '$flag' linker flag"
-      fi
-      if test -n "$admincmds"; then
-	$ECHO "   - have your system administrator run these commands:$admincmds"
-      fi
-      if test -f /etc/ld.so.conf; then
-	echo "   - have your system administrator add LIBDIR to '/etc/ld.so.conf'"
-      fi
-      echo
-
-      echo "See any operating system documentation about shared libraries for"
-      case $host in
-	solaris2.[6789]|solaris2.1[0-9])
-	  echo "more information, such as the ld(1), crle(1) and ld.so(8) manual"
-	  echo "pages."
-	  ;;
-	*)
-	  echo "more information, such as the ld(1) and ld.so(8) manual pages."
-	  ;;
-      esac
-      echo "----------------------------------------------------------------------"
-    fi
-    exit $EXIT_SUCCESS
-}
-
-test finish = "$opt_mode" && func_mode_finish ${1+"$@"}
-
-
-# func_mode_install arg...
-func_mode_install ()
-{
-    $debug_cmd
-
-    # There may be an optional sh(1) argument at the beginning of
-    # install_prog (especially on Windows NT).
-    if test "$SHELL" = "$nonopt" || test /bin/sh = "$nonopt" ||
-       # Allow the use of GNU shtool's install command.
-       case $nonopt in *shtool*) :;; *) false;; esac
-    then
-      # Aesthetically quote it.
-      func_quote_arg pretty "$nonopt"
-      install_prog="$func_quote_arg_result "
-      arg=$1
-      shift
-    else
-      install_prog=
-      arg=$nonopt
-    fi
-
-    # The real first argument should be the name of the installation program.
-    # Aesthetically quote it.
-    func_quote_arg pretty "$arg"
-    func_append install_prog "$func_quote_arg_result"
-    install_shared_prog=$install_prog
-    case " $install_prog " in
-      *[\\\ /]cp\ *) install_cp=: ;;
-      *) install_cp=false ;;
-    esac
-
-    # We need to accept at least all the BSD install flags.
-    dest=
-    files=
-    opts=
-    prev=
-    install_type=
-    isdir=false
-    stripme=
-    no_mode=:
-    for arg
-    do
-      arg2=
-      if test -n "$dest"; then
-	func_append files " $dest"
-	dest=$arg
-	continue
-      fi
-
-      case $arg in
-      -d) isdir=: ;;
-      -f)
-	if $install_cp; then :; else
-	  prev=$arg
-	fi
-	;;
-      -g | -m | -o)
-	prev=$arg
-	;;
-      -s)
-	stripme=" -s"
-	continue
-	;;
-      -*)
-	;;
-      *)
-	# If the previous option needed an argument, then skip it.
-	if test -n "$prev"; then
-	  if test X-m = "X$prev" && test -n "$install_override_mode"; then
-	    arg2=$install_override_mode
-	    no_mode=false
-	  fi
-	  prev=
-	else
-	  dest=$arg
-	  continue
-	fi
-	;;
-      esac
-
-      # Aesthetically quote the argument.
-      func_quote_arg pretty "$arg"
-      func_append install_prog " $func_quote_arg_result"
-      if test -n "$arg2"; then
-	func_quote_arg pretty "$arg2"
-      fi
-      func_append install_shared_prog " $func_quote_arg_result"
-    done
-
-    test -z "$install_prog" && \
-      func_fatal_help "you must specify an install program"
-
-    test -n "$prev" && \
-      func_fatal_help "the '$prev' option requires an argument"
-
-    if test -n "$install_override_mode" && $no_mode; then
-      if $install_cp; then :; else
-	func_quote_arg pretty "$install_override_mode"
-	func_append install_shared_prog " -m $func_quote_arg_result"
-      fi
-    fi
-
-    if test -z "$files"; then
-      if test -z "$dest"; then
-	func_fatal_help "no file or destination specified"
-      else
-	func_fatal_help "you must specify a destination"
-      fi
-    fi
-
-    # Strip any trailing slash from the destination.
-    func_stripname '' '/' "$dest"
-    dest=$func_stripname_result
-
-    # Check to see that the destination is a directory.
-    test -d "$dest" && isdir=:
-    if $isdir; then
-      destdir=$dest
-      destname=
-    else
-      func_dirname_and_basename "$dest" "" "."
-      destdir=$func_dirname_result
-      destname=$func_basename_result
-
-      # Not a directory, so check to see that there is only one file specified.
-      set dummy $files; shift
-      test "$#" -gt 1 && \
-	func_fatal_help "'$dest' is not a directory"
-    fi
-    case $destdir in
-    [\\/]* | [A-Za-z]:[\\/]*) ;;
-    *)
-      for file in $files; do
-	case $file in
-	*.lo) ;;
-	*)
-	  func_fatal_help "'$destdir' must be an absolute directory name"
-	  ;;
-	esac
-      done
-      ;;
-    esac
-
-    # This variable tells wrapper scripts just to set variables rather
-    # than running their programs.
-    libtool_install_magic=$magic
-
-    staticlibs=
-    future_libdirs=
-    current_libdirs=
-    for file in $files; do
-
-      # Do each installation.
-      case $file in
-      *.$libext)
-	# Do the static libraries later.
-	func_append staticlibs " $file"
-	;;
-
-      *.la)
-	func_resolve_sysroot "$file"
-	file=$func_resolve_sysroot_result
-
-	# Check to see that this really is a libtool archive.
-	func_lalib_unsafe_p "$file" \
-	  || func_fatal_help "'$file' is not a valid libtool archive"
-
-	library_names=
-	old_library=
-	relink_command=
-	func_source "$file"
-
-	# Add the libdir to current_libdirs if it is the destination.
-	if test "X$destdir" = "X$libdir"; then
-	  case "$current_libdirs " in
-	  *" $libdir "*) ;;
-	  *) func_append current_libdirs " $libdir" ;;
-	  esac
-	else
-	  # Note the libdir as a future libdir.
-	  case "$future_libdirs " in
-	  *" $libdir "*) ;;
-	  *) func_append future_libdirs " $libdir" ;;
-	  esac
-	fi
-
-	func_dirname "$file" "/" ""
-	dir=$func_dirname_result
-	func_append dir "$objdir"
-
-	if test -n "$relink_command"; then
-	  # Determine the prefix the user has applied to our future dir.
-	  inst_prefix_dir=`$ECHO "$destdir" | $SED -e "s%$libdir\$%%"`
-
-	  # Don't allow the user to place us outside of our expected
-	  # location b/c this prevents finding dependent libraries that
-	  # are installed to the same prefix.
-	  # At present, this check doesn't affect windows .dll's that
-	  # are installed into $libdir/../bin (currently, that works fine)
-	  # but it's something to keep an eye on.
-	  test "$inst_prefix_dir" = "$destdir" && \
-	    func_fatal_error "error: cannot install '$file' to a directory not ending in $libdir"
-
-	  if test -n "$inst_prefix_dir"; then
-	    # Stick the inst_prefix_dir data into the link command.
-	    relink_command=`$ECHO "$relink_command" | $SED "s%@inst_prefix_dir@%-inst-prefix-dir $inst_prefix_dir%"`
-	  else
-	    relink_command=`$ECHO "$relink_command" | $SED "s%@inst_prefix_dir@%%"`
-	  fi
-
-	  func_warning "relinking '$file'"
-	  func_show_eval "$relink_command" \
-	    'func_fatal_error "error: relink '\''$file'\'' with the above command before installing it"'
-	fi
-
-	# See the names of the shared library.
-	set dummy $library_names; shift
-	if test -n "$1"; then
-	  realname=$1
-	  shift
-
-	  srcname=$realname
-	  test -n "$relink_command" && srcname=${realname}T
-
-	  # Install the shared library and build the symlinks.
-	  func_show_eval "$install_shared_prog $dir/$srcname $destdir/$realname" \
-	      'exit $?'
-	  tstripme=$stripme
-	  case $host_os in
-	  cygwin* | mingw* | pw32* | cegcc*)
-	    case $realname in
-	    *.dll.a)
-	      tstripme=
-	      ;;
-	    esac
-	    ;;
-	  os2*)
-	    case $realname in
-	    *_dll.a)
-	      tstripme=
-	      ;;
-	    esac
-	    ;;
-	  esac
-	  if test -n "$tstripme" && test -n "$striplib"; then
-	    func_show_eval "$striplib $destdir/$realname" 'exit $?'
-	  fi
-
-	  if test "$#" -gt 0; then
-	    # Delete the old symlinks, and create new ones.
-	    # Try 'ln -sf' first, because the 'ln' binary might depend on
-	    # the symlink we replace!  Solaris /bin/ln does not understand -f,
-	    # so we also need to try rm && ln -s.
-	    for linkname
-	    do
-	      test "$linkname" != "$realname" \
-		&& func_show_eval "(cd $destdir && { $LN_S -f $realname $linkname || { $RM $linkname && $LN_S $realname $linkname; }; })"
-	    done
-	  fi
-
-	  # Do each command in the postinstall commands.
-	  lib=$destdir/$realname
-	  func_execute_cmds "$postinstall_cmds" 'exit $?'
-	fi
-
-	# Install the pseudo-library for information purposes.
-	func_basename "$file"
-	name=$func_basename_result
-	instname=$dir/${name}i
-	func_show_eval "$install_prog $instname $destdir/$name" 'exit $?'
-
-	# Maybe install the static library, too.
-	test -n "$old_library" && func_append staticlibs " $dir/$old_library"
-	;;
-
-      *.lo)
-	# Install (i.e. copy) a libtool object.
-
-	# Figure out destination file name, if it wasn't already specified.
-	if test -n "$destname"; then
-	  destfile=$destdir/$destname
-	else
-	  func_basename "$file"
-	  destfile=$func_basename_result
-	  destfile=$destdir/$destfile
-	fi
-
-	# Deduce the name of the destination old-style object file.
-	case $destfile in
-	*.lo)
-	  func_lo2o "$destfile"
-	  staticdest=$func_lo2o_result
-	  ;;
-	*.$objext)
-	  staticdest=$destfile
-	  destfile=
-	  ;;
-	*)
-	  func_fatal_help "cannot copy a libtool object to '$destfile'"
-	  ;;
-	esac
-
-	# Install the libtool object if requested.
-	test -n "$destfile" && \
-	  func_show_eval "$install_prog $file $destfile" 'exit $?'
-
-	# Install the old object if enabled.
-	if test yes = "$build_old_libs"; then
-	  # Deduce the name of the old-style object file.
-	  func_lo2o "$file"
-	  staticobj=$func_lo2o_result
-	  func_show_eval "$install_prog \$staticobj \$staticdest" 'exit $?'
-	fi
-	exit $EXIT_SUCCESS
-	;;
-
-      *)
-	# Figure out destination file name, if it wasn't already specified.
-	if test -n "$destname"; then
-	  destfile=$destdir/$destname
-	else
-	  func_basename "$file"
-	  destfile=$func_basename_result
-	  destfile=$destdir/$destfile
-	fi
-
-	# If the file is missing, and there is a .exe on the end, strip it
-	# because it is most likely a libtool script we actually want to
-	# install
-	stripped_ext=
-	case $file in
-	  *.exe)
-	    if test ! -f "$file"; then
-	      func_stripname '' '.exe' "$file"
-	      file=$func_stripname_result
-	      stripped_ext=.exe
-	    fi
-	    ;;
-	esac
-
-	# Do a test to see if this is really a libtool program.
-	case $host in
-	*cygwin* | *mingw*)
-	    if func_ltwrapper_executable_p "$file"; then
-	      func_ltwrapper_scriptname "$file"
-	      wrapper=$func_ltwrapper_scriptname_result
-	    else
-	      func_stripname '' '.exe' "$file"
-	      wrapper=$func_stripname_result
-	    fi
-	    ;;
-	*)
-	    wrapper=$file
-	    ;;
-	esac
-	if func_ltwrapper_script_p "$wrapper"; then
-	  notinst_deplibs=
-	  relink_command=
-
-	  func_source "$wrapper"
-
-	  # Check the variables that should have been set.
-	  test -z "$generated_by_libtool_version" && \
-	    func_fatal_error "invalid libtool wrapper script '$wrapper'"
-
-	  finalize=:
-	  for lib in $notinst_deplibs; do
-	    # Check to see that each library is installed.
-	    libdir=
-	    if test -f "$lib"; then
-	      func_source "$lib"
-	    fi
-	    libfile=$libdir/`$ECHO "$lib" | $SED 's%^.*/%%g'`
-	    if test -n "$libdir" && test ! -f "$libfile"; then
-	      func_warning "'$lib' has not been installed in '$libdir'"
-	      finalize=false
-	    fi
-	  done
-
-	  relink_command=
-	  func_source "$wrapper"
-
-	  outputname=
-	  if test no = "$fast_install" && test -n "$relink_command"; then
-	    $opt_dry_run || {
-	      if $finalize; then
-	        tmpdir=`func_mktempdir`
-		func_basename "$file$stripped_ext"
-		file=$func_basename_result
-	        outputname=$tmpdir/$file
-	        # Replace the output file specification.
-	        relink_command=`$ECHO "$relink_command" | $SED 's%@OUTPUT@%'"$outputname"'%g'`
-
-	        $opt_quiet || {
-	          func_quote_arg expand,pretty "$relink_command"
-		  eval "func_echo $func_quote_arg_result"
-	        }
-	        if eval "$relink_command"; then :
-	          else
-		  func_error "error: relink '$file' with the above command before installing it"
-		  $opt_dry_run || ${RM}r "$tmpdir"
-		  continue
-	        fi
-	        file=$outputname
-	      else
-	        func_warning "cannot relink '$file'"
-	      fi
-	    }
-	  else
-	    # Install the binary that we compiled earlier.
-	    file=`$ECHO "$file$stripped_ext" | $SED "s%\([^/]*\)$%$objdir/\1%"`
-	  fi
-	fi
-
-	# remove .exe since cygwin /usr/bin/install will append another
-	# one anyway
-	case $install_prog,$host in
-	*/usr/bin/install*,*cygwin*)
-	  case $file:$destfile in
-	  *.exe:*.exe)
-	    # this is ok
-	    ;;
-	  *.exe:*)
-	    destfile=$destfile.exe
-	    ;;
-	  *:*.exe)
-	    func_stripname '' '.exe' "$destfile"
-	    destfile=$func_stripname_result
-	    ;;
-	  esac
-	  ;;
-	esac
-	func_show_eval "$install_prog\$stripme \$file \$destfile" 'exit $?'
-	$opt_dry_run || if test -n "$outputname"; then
-	  ${RM}r "$tmpdir"
-	fi
-	;;
-      esac
-    done
-
-    for file in $staticlibs; do
-      func_basename "$file"
-      name=$func_basename_result
-
-      # Set up the ranlib parameters.
-      oldlib=$destdir/$name
-      func_to_tool_file "$oldlib" func_convert_file_msys_to_w32
-      tool_oldlib=$func_to_tool_file_result
-
-      func_show_eval "$install_prog \$file \$oldlib" 'exit $?'
-
-      if test -n "$stripme" && test -n "$old_striplib"; then
-	func_show_eval "$old_striplib $tool_oldlib" 'exit $?'
-      fi
-
-      # Do each command in the postinstall commands.
-      func_execute_cmds "$old_postinstall_cmds" 'exit $?'
-    done
-
-    test -n "$future_libdirs" && \
-      func_warning "remember to run '$progname --finish$future_libdirs'"
-
-    if test -n "$current_libdirs"; then
-      # Maybe just do a dry run.
-      $opt_dry_run && current_libdirs=" -n$current_libdirs"
-      exec_cmd='$SHELL "$progpath" $preserve_args --finish$current_libdirs'
-    else
-      exit $EXIT_SUCCESS
-    fi
-}
-
-test install = "$opt_mode" && func_mode_install ${1+"$@"}
-
-
-# func_generate_dlsyms outputname originator pic_p
-# Extract symbols from dlprefiles and create ${outputname}S.o with
-# a dlpreopen symbol table.
-func_generate_dlsyms ()
-{
-    $debug_cmd
-
-    my_outputname=$1
-    my_originator=$2
-    my_pic_p=${3-false}
-    my_prefix=`$ECHO "$my_originator" | $SED 's%[^a-zA-Z0-9]%_%g'`
-    my_dlsyms=
-
-    if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then
-      if test -n "$NM" && test -n "$global_symbol_pipe"; then
-	my_dlsyms=${my_outputname}S.c
-      else
-	func_error "not configured to extract global symbols from dlpreopened files"
-      fi
-    fi
-
-    if test -n "$my_dlsyms"; then
-      case $my_dlsyms in
-      "") ;;
-      *.c)
-	# Discover the nlist of each of the dlfiles.
-	nlist=$output_objdir/$my_outputname.nm
-
-	func_show_eval "$RM $nlist ${nlist}S ${nlist}T"
-
-	# Parse the name list into a source file.
-	func_verbose "creating $output_objdir/$my_dlsyms"
-
-	$opt_dry_run || $ECHO > "$output_objdir/$my_dlsyms" "\
-/* $my_dlsyms - symbol resolution table for '$my_outputname' dlsym emulation. */
-/* Generated by $PROGRAM (GNU $PACKAGE) $VERSION */
-
-#ifdef __cplusplus
-extern \"C\" {
-#endif
-
-#if defined __GNUC__ && (((__GNUC__ == 4) && (__GNUC_MINOR__ >= 4)) || (__GNUC__ > 4))
-#pragma GCC diagnostic ignored \"-Wstrict-prototypes\"
-#endif
-
-/* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests.  */
-#if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE
-/* DATA imports from DLLs on WIN32 can't be const, because runtime
-   relocations are performed -- see ld's documentation on pseudo-relocs.  */
-# define LT_DLSYM_CONST
-#elif defined __osf__
-/* This system does not cope well with relocations in const data.  */
-# define LT_DLSYM_CONST
-#else
-# define LT_DLSYM_CONST const
-#endif
-
-#define STREQ(s1, s2) (strcmp ((s1), (s2)) == 0)
-
-/* External symbol declarations for the compiler. */\
-"
-
-	if test yes = "$dlself"; then
-	  func_verbose "generating symbol list for '$output'"
-
-	  $opt_dry_run || echo ': @PROGRAM@ ' > "$nlist"
-
-	  # Add our own program objects to the symbol list.
-	  progfiles=`$ECHO "$objs$old_deplibs" | $SP2NL | $SED "$lo2o" | $NL2SP`
-	  for progfile in $progfiles; do
-	    func_to_tool_file "$progfile" func_convert_file_msys_to_w32
-	    func_verbose "extracting global C symbols from '$func_to_tool_file_result'"
-	    $opt_dry_run || eval "$NM $func_to_tool_file_result | $global_symbol_pipe >> '$nlist'"
-	  done
-
-	  if test -n "$exclude_expsyms"; then
-	    $opt_dry_run || {
-	      eval '$EGREP -v " ($exclude_expsyms)$" "$nlist" > "$nlist"T'
-	      eval '$MV "$nlist"T "$nlist"'
-	    }
-	  fi
-
-	  if test -n "$export_symbols_regex"; then
-	    $opt_dry_run || {
-	      eval '$EGREP -e "$export_symbols_regex" "$nlist" > "$nlist"T'
-	      eval '$MV "$nlist"T "$nlist"'
-	    }
-	  fi
-
-	  # Prepare the list of exported symbols
-	  if test -z "$export_symbols"; then
-	    export_symbols=$output_objdir/$outputname.exp
-	    $opt_dry_run || {
-	      $RM $export_symbols
-	      eval "$SED -n -e '/^: @PROGRAM@ $/d' -e 's/^.* \(.*\)$/\1/p' "'< "$nlist" > "$export_symbols"'
-	      case $host in
-	      *cygwin* | *mingw* | *cegcc* )
-                eval "echo EXPORTS "'> "$output_objdir/$outputname.def"'
-                eval 'cat "$export_symbols" >> "$output_objdir/$outputname.def"'
-	        ;;
-	      esac
-	    }
-	  else
-	    $opt_dry_run || {
-	      eval "$SED -e 's/\([].[*^$]\)/\\\\\1/g' -e 's/^/ /' -e 's/$/$/'"' < "$export_symbols" > "$output_objdir/$outputname.exp"'
-	      eval '$GREP -f "$output_objdir/$outputname.exp" < "$nlist" > "$nlist"T'
-	      eval '$MV "$nlist"T "$nlist"'
-	      case $host in
-	        *cygwin* | *mingw* | *cegcc* )
-	          eval "echo EXPORTS "'> "$output_objdir/$outputname.def"'
-	          eval 'cat "$nlist" >> "$output_objdir/$outputname.def"'
-	          ;;
-	      esac
-	    }
-	  fi
-	fi
-
-	for dlprefile in $dlprefiles; do
-	  func_verbose "extracting global C symbols from '$dlprefile'"
-	  func_basename "$dlprefile"
-	  name=$func_basename_result
-          case $host in
-	    *cygwin* | *mingw* | *cegcc* )
-	      # if an import library, we need to obtain dlname
-	      if func_win32_import_lib_p "$dlprefile"; then
-	        func_tr_sh "$dlprefile"
-	        eval "curr_lafile=\$libfile_$func_tr_sh_result"
-	        dlprefile_dlbasename=
-	        if test -n "$curr_lafile" && func_lalib_p "$curr_lafile"; then
-	          # Use subshell, to avoid clobbering current variable values
-	          dlprefile_dlname=`source "$curr_lafile" && echo "$dlname"`
-	          if test -n "$dlprefile_dlname"; then
-	            func_basename "$dlprefile_dlname"
-	            dlprefile_dlbasename=$func_basename_result
-	          else
-	            # no lafile. user explicitly requested -dlpreopen <import library>.
-	            $sharedlib_from_linklib_cmd "$dlprefile"
-	            dlprefile_dlbasename=$sharedlib_from_linklib_result
-	          fi
-	        fi
-	        $opt_dry_run || {
-	          if test -n "$dlprefile_dlbasename"; then
-	            eval '$ECHO ": $dlprefile_dlbasename" >> "$nlist"'
-	          else
-	            func_warning "Could not compute DLL name from $name"
-	            eval '$ECHO ": $name " >> "$nlist"'
-	          fi
-	          func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32
-	          eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe |
-	            $SED -e '/I __imp/d' -e 's/I __nm_/D /;s/_nm__//' >> '$nlist'"
-	        }
-	      else # not an import lib
-	        $opt_dry_run || {
-	          eval '$ECHO ": $name " >> "$nlist"'
-	          func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32
-	          eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe >> '$nlist'"
-	        }
-	      fi
-	    ;;
-	    *)
-	      $opt_dry_run || {
-	        eval '$ECHO ": $name " >> "$nlist"'
-	        func_to_tool_file "$dlprefile" func_convert_file_msys_to_w32
-	        eval "$NM \"$func_to_tool_file_result\" 2>/dev/null | $global_symbol_pipe >> '$nlist'"
-	      }
-	    ;;
-          esac
-	done
-
-	$opt_dry_run || {
-	  # Make sure we have at least an empty file.
-	  test -f "$nlist" || : > "$nlist"
-
-	  if test -n "$exclude_expsyms"; then
-	    $EGREP -v " ($exclude_expsyms)$" "$nlist" > "$nlist"T
-	    $MV "$nlist"T "$nlist"
-	  fi
-
-	  # Try sorting and uniquifying the output.
-	  if $GREP -v "^: " < "$nlist" |
-	      if sort -k 3 </dev/null >/dev/null 2>&1; then
-		sort -k 3
-	      else
-		sort +2
-	      fi |
-	      uniq > "$nlist"S; then
-	    :
-	  else
-	    $GREP -v "^: " < "$nlist" > "$nlist"S
-	  fi
-
-	  if test -f "$nlist"S; then
-	    eval "$global_symbol_to_cdecl"' < "$nlist"S >> "$output_objdir/$my_dlsyms"'
-	  else
-	    echo '/* NONE */' >> "$output_objdir/$my_dlsyms"
-	  fi
-
-	  func_show_eval '$RM "${nlist}I"'
-	  if test -n "$global_symbol_to_import"; then
-	    eval "$global_symbol_to_import"' < "$nlist"S > "$nlist"I'
-	  fi
-
-	  echo >> "$output_objdir/$my_dlsyms" "\
-
-/* The mapping between symbol names and symbols.  */
-typedef struct {
-  const char *name;
-  void *address;
-} lt_dlsymlist;
-extern LT_DLSYM_CONST lt_dlsymlist
-lt_${my_prefix}_LTX_preloaded_symbols[];\
-"
-
-	  if test -s "$nlist"I; then
-	    echo >> "$output_objdir/$my_dlsyms" "\
-static void lt_syminit(void)
-{
-  LT_DLSYM_CONST lt_dlsymlist *symbol = lt_${my_prefix}_LTX_preloaded_symbols;
-  for (; symbol->name; ++symbol)
-    {"
-	    $SED 's/.*/      if (STREQ (symbol->name, \"&\")) symbol->address = (void *) \&&;/' < "$nlist"I >> "$output_objdir/$my_dlsyms"
-	    echo >> "$output_objdir/$my_dlsyms" "\
-    }
-}"
-	  fi
-	  echo >> "$output_objdir/$my_dlsyms" "\
-LT_DLSYM_CONST lt_dlsymlist
-lt_${my_prefix}_LTX_preloaded_symbols[] =
-{ {\"$my_originator\", (void *) 0},"
-
-	  if test -s "$nlist"I; then
-	    echo >> "$output_objdir/$my_dlsyms" "\
-  {\"@INIT@\", (void *) &lt_syminit},"
-	  fi
-
-	  case $need_lib_prefix in
-	  no)
-	    eval "$global_symbol_to_c_name_address" < "$nlist" >> "$output_objdir/$my_dlsyms"
-	    ;;
-	  *)
-	    eval "$global_symbol_to_c_name_address_lib_prefix" < "$nlist" >> "$output_objdir/$my_dlsyms"
-	    ;;
-	  esac
-	  echo >> "$output_objdir/$my_dlsyms" "\
-  {0, (void *) 0}
-};
-
-/* This works around a problem in FreeBSD linker */
-#ifdef FREEBSD_WORKAROUND
-static const void *lt_preloaded_setup() {
-  return lt_${my_prefix}_LTX_preloaded_symbols;
-}
-#endif
-
-#ifdef __cplusplus
-}
-#endif\
-"
-	} # !$opt_dry_run
-
-	pic_flag_for_symtable=
-	case "$compile_command " in
-	*" -static "*) ;;
-	*)
-	  case $host in
-	  # compiling the symbol table file with pic_flag works around
-	  # a FreeBSD bug that causes programs to crash when -lm is
-	  # linked before any other PIC object.  But we must not use
-	  # pic_flag when linking with -static.  The problem exists in
-	  # FreeBSD 2.2.6 and is fixed in FreeBSD 3.1.
-	  *-*-freebsd2.*|*-*-freebsd3.0*|*-*-freebsdelf3.0*)
-	    pic_flag_for_symtable=" $pic_flag -DFREEBSD_WORKAROUND" ;;
-	  *-*-hpux*)
-	    pic_flag_for_symtable=" $pic_flag"  ;;
-	  *)
-	    $my_pic_p && pic_flag_for_symtable=" $pic_flag"
-	    ;;
-	  esac
-	  ;;
-	esac
-	symtab_cflags=
-	for arg in $LTCFLAGS; do
-	  case $arg in
-	  -pie | -fpie | -fPIE) ;;
-	  *) func_append symtab_cflags " $arg" ;;
-	  esac
-	done
-
-	# Now compile the dynamic symbol file.
-	func_show_eval '(cd $output_objdir && $LTCC$symtab_cflags -c$no_builtin_flag$pic_flag_for_symtable "$my_dlsyms")' 'exit $?'
-
-	# Clean up the generated files.
-	func_show_eval '$RM "$output_objdir/$my_dlsyms" "$nlist" "${nlist}S" "${nlist}T" "${nlist}I"'
-
-	# Transform the symbol file into the correct name.
-	symfileobj=$output_objdir/${my_outputname}S.$objext
-	case $host in
-	*cygwin* | *mingw* | *cegcc* )
-	  if test -f "$output_objdir/$my_outputname.def"; then
-	    compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"`
-	    finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$output_objdir/$my_outputname.def $symfileobj%"`
-	  else
-	    compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$symfileobj%"`
-	    finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$symfileobj%"`
-	  fi
-	  ;;
-	*)
-	  compile_command=`$ECHO "$compile_command" | $SED "s%@SYMFILE@%$symfileobj%"`
-	  finalize_command=`$ECHO "$finalize_command" | $SED "s%@SYMFILE@%$symfileobj%"`
-	  ;;
-	esac
-	;;
-      *)
-	func_fatal_error "unknown suffix for '$my_dlsyms'"
-	;;
-      esac
-    else
-      # We keep going just in case the user didn't refer to
-      # lt_preloaded_symbols.  The linker will fail if global_symbol_pipe
-      # really was required.
-
-      # Nullify the symbol file.
-      compile_command=`$ECHO "$compile_command" | $SED "s% @SYMFILE@%%"`
-      finalize_command=`$ECHO "$finalize_command" | $SED "s% @SYMFILE@%%"`
-    fi
-}
-
-# func_cygming_gnu_implib_p ARG
-# This predicate returns with zero status (TRUE) if
-# ARG is a GNU/binutils-style import library. Returns
-# with nonzero status (FALSE) otherwise.
-func_cygming_gnu_implib_p ()
-{
-  $debug_cmd
-
-  func_to_tool_file "$1" func_convert_file_msys_to_w32
-  func_cygming_gnu_implib_tmp=`$NM "$func_to_tool_file_result" | eval "$global_symbol_pipe" | $EGREP ' (_head_[A-Za-z0-9_]+_[ad]l*|[A-Za-z0-9_]+_[ad]l*_iname)$'`
-  test -n "$func_cygming_gnu_implib_tmp"
-}
-
-# func_cygming_ms_implib_p ARG
-# This predicate returns with zero status (TRUE) if
-# ARG is an MS-style import library. Returns
-# with nonzero status (FALSE) otherwise.
-func_cygming_ms_implib_p ()
-{
-  $debug_cmd
-
-  func_to_tool_file "$1" func_convert_file_msys_to_w32
-  func_cygming_ms_implib_tmp=`$NM "$func_to_tool_file_result" | eval "$global_symbol_pipe" | $GREP '_NULL_IMPORT_DESCRIPTOR'`
-  test -n "$func_cygming_ms_implib_tmp"
-}
-
-# func_win32_libid arg
-# return the library type of file 'arg'
-#
-# Need a lot of goo to handle *both* DLLs and import libs
-# Has to be a shell function in order to 'eat' the argument
-# that is supplied when $file_magic_command is called.
-# Despite the name, also deal with 64 bit binaries.
-func_win32_libid ()
-{
-  $debug_cmd
-
-  win32_libid_type=unknown
-  win32_fileres=`file -L $1 2>/dev/null`
-  case $win32_fileres in
-  *ar\ archive\ import\ library*) # definitely import
-    win32_libid_type="x86 archive import"
-    ;;
-  *ar\ archive*) # could be an import, or static
-    # Keep the egrep pattern in sync with the one in _LT_CHECK_MAGIC_METHOD.
-    if eval $OBJDUMP -f $1 | $SED -e '10q' 2>/dev/null |
-       $EGREP 'file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64)' >/dev/null; then
-      case $nm_interface in
-      "MS dumpbin")
-	if func_cygming_ms_implib_p "$1" ||
-	   func_cygming_gnu_implib_p "$1"
-	then
-	  win32_nmres=import
-	else
-	  win32_nmres=
-	fi
-	;;
-      *)
-	func_to_tool_file "$1" func_convert_file_msys_to_w32
-	win32_nmres=`eval $NM -f posix -A \"$func_to_tool_file_result\" |
-	  $SED -n -e '
-	    1,100{
-		/ I /{
-		    s|.*|import|
-		    p
-		    q
-		}
-	    }'`
-	;;
-      esac
-      case $win32_nmres in
-      import*)  win32_libid_type="x86 archive import";;
-      *)        win32_libid_type="x86 archive static";;
-      esac
-    fi
-    ;;
-  *DLL*)
-    win32_libid_type="x86 DLL"
-    ;;
-  *executable*) # but shell scripts are "executable" too...
-    case $win32_fileres in
-    *MS\ Windows\ PE\ Intel*)
-      win32_libid_type="x86 DLL"
-      ;;
-    esac
-    ;;
-  esac
-  $ECHO "$win32_libid_type"
-}
-
-# func_cygming_dll_for_implib ARG
-#
-# Platform-specific function to extract the
-# name of the DLL associated with the specified
-# import library ARG.
-# Invoked by eval'ing the libtool variable
-#    $sharedlib_from_linklib_cmd
-# Result is available in the variable
-#    $sharedlib_from_linklib_result
-func_cygming_dll_for_implib ()
-{
-  $debug_cmd
-
-  sharedlib_from_linklib_result=`$DLLTOOL --identify-strict --identify "$1"`
-}
-
-# func_cygming_dll_for_implib_fallback_core SECTION_NAME LIBNAMEs
-#
-# The is the core of a fallback implementation of a
-# platform-specific function to extract the name of the
-# DLL associated with the specified import library LIBNAME.
-#
-# SECTION_NAME is either .idata$6 or .idata$7, depending
-# on the platform and compiler that created the implib.
-#
-# Echos the name of the DLL associated with the
-# specified import library.
-func_cygming_dll_for_implib_fallback_core ()
-{
-  $debug_cmd
-
-  match_literal=`$ECHO "$1" | $SED "$sed_make_literal_regex"`
-  $OBJDUMP -s --section "$1" "$2" 2>/dev/null |
-    $SED '/^Contents of section '"$match_literal"':/{
-      # Place marker at beginning of archive member dllname section
-      s/.*/====MARK====/
-      p
-      d
-    }
-    # These lines can sometimes be longer than 43 characters, but
-    # are always uninteresting
-    /:[	 ]*file format pe[i]\{,1\}-/d
-    /^In archive [^:]*:/d
-    # Ensure marker is printed
-    /^====MARK====/p
-    # Remove all lines with less than 43 characters
-    /^.\{43\}/!d
-    # From remaining lines, remove first 43 characters
-    s/^.\{43\}//' |
-    $SED -n '
-      # Join marker and all lines until next marker into a single line
-      /^====MARK====/ b para
-      H
-      $ b para
-      b
-      :para
-      x
-      s/\n//g
-      # Remove the marker
-      s/^====MARK====//
-      # Remove trailing dots and whitespace
-      s/[\. \t]*$//
-      # Print
-      /./p' |
-    # we now have a list, one entry per line, of the stringified
-    # contents of the appropriate section of all members of the
-    # archive that possess that section. Heuristic: eliminate
-    # all those that have a first or second character that is
-    # a '.' (that is, objdump's representation of an unprintable
-    # character.) This should work for all archives with less than
-    # 0x302f exports -- but will fail for DLLs whose name actually
-    # begins with a literal '.' or a single character followed by
-    # a '.'.
-    #
-    # Of those that remain, print the first one.
-    $SED -e '/^\./d;/^.\./d;q'
-}
-
-# func_cygming_dll_for_implib_fallback ARG
-# Platform-specific function to extract the
-# name of the DLL associated with the specified
-# import library ARG.
-#
-# This fallback implementation is for use when $DLLTOOL
-# does not support the --identify-strict option.
-# Invoked by eval'ing the libtool variable
-#    $sharedlib_from_linklib_cmd
-# Result is available in the variable
-#    $sharedlib_from_linklib_result
-func_cygming_dll_for_implib_fallback ()
-{
-  $debug_cmd
-
-  if func_cygming_gnu_implib_p "$1"; then
-    # binutils import library
-    sharedlib_from_linklib_result=`func_cygming_dll_for_implib_fallback_core '.idata$7' "$1"`
-  elif func_cygming_ms_implib_p "$1"; then
-    # ms-generated import library
-    sharedlib_from_linklib_result=`func_cygming_dll_for_implib_fallback_core '.idata$6' "$1"`
-  else
-    # unknown
-    sharedlib_from_linklib_result=
-  fi
-}
-
-
-# func_extract_an_archive dir oldlib
-func_extract_an_archive ()
-{
-    $debug_cmd
-
-    f_ex_an_ar_dir=$1; shift
-    f_ex_an_ar_oldlib=$1
-    if test yes = "$lock_old_archive_extraction"; then
-      lockfile=$f_ex_an_ar_oldlib.lock
-      until $opt_dry_run || ln "$progpath" "$lockfile" 2>/dev/null; do
-	func_echo "Waiting for $lockfile to be removed"
-	sleep 2
-      done
-    fi
-    func_show_eval "(cd \$f_ex_an_ar_dir && $AR x \"\$f_ex_an_ar_oldlib\")" \
-		   'stat=$?; rm -f "$lockfile"; exit $stat'
-    if test yes = "$lock_old_archive_extraction"; then
-      $opt_dry_run || rm -f "$lockfile"
-    fi
-    if ($AR t "$f_ex_an_ar_oldlib" | sort | sort -uc >/dev/null 2>&1); then
-     :
-    else
-      func_fatal_error "object name conflicts in archive: $f_ex_an_ar_dir/$f_ex_an_ar_oldlib"
-    fi
-}
-
-
-# func_extract_archives gentop oldlib ...
-func_extract_archives ()
-{
-    $debug_cmd
-
-    my_gentop=$1; shift
-    my_oldlibs=${1+"$@"}
-    my_oldobjs=
-    my_xlib=
-    my_xabs=
-    my_xdir=
-
-    for my_xlib in $my_oldlibs; do
-      # Extract the objects.
-      case $my_xlib in
-	[\\/]* | [A-Za-z]:[\\/]*) my_xabs=$my_xlib ;;
-	*) my_xabs=`pwd`"/$my_xlib" ;;
-      esac
-      func_basename "$my_xlib"
-      my_xlib=$func_basename_result
-      my_xlib_u=$my_xlib
-      while :; do
-        case " $extracted_archives " in
-	*" $my_xlib_u "*)
-	  func_arith $extracted_serial + 1
-	  extracted_serial=$func_arith_result
-	  my_xlib_u=lt$extracted_serial-$my_xlib ;;
-	*) break ;;
-	esac
-      done
-      extracted_archives="$extracted_archives $my_xlib_u"
-      my_xdir=$my_gentop/$my_xlib_u
-
-      func_mkdir_p "$my_xdir"
-
-      case $host in
-      *-darwin*)
-	func_verbose "Extracting $my_xabs"
-	# Do not bother doing anything if just a dry run
-	$opt_dry_run || {
-	  darwin_orig_dir=`pwd`
-	  cd $my_xdir || exit $?
-	  darwin_archive=$my_xabs
-	  darwin_curdir=`pwd`
-	  func_basename "$darwin_archive"
-	  darwin_base_archive=$func_basename_result
-	  darwin_arches=`$LIPO -info "$darwin_archive" 2>/dev/null | $GREP Architectures 2>/dev/null || true`
-	  if test -n "$darwin_arches"; then
-	    darwin_arches=`$ECHO "$darwin_arches" | $SED -e 's/.*are://'`
-	    darwin_arch=
-	    func_verbose "$darwin_base_archive has multiple architectures $darwin_arches"
-	    for darwin_arch in  $darwin_arches; do
-	      func_mkdir_p "unfat-$$/$darwin_base_archive-$darwin_arch"
-	      $LIPO -thin $darwin_arch -output "unfat-$$/$darwin_base_archive-$darwin_arch/$darwin_base_archive" "$darwin_archive"
-	      cd "unfat-$$/$darwin_base_archive-$darwin_arch"
-	      func_extract_an_archive "`pwd`" "$darwin_base_archive"
-	      cd "$darwin_curdir"
-	      $RM "unfat-$$/$darwin_base_archive-$darwin_arch/$darwin_base_archive"
-	    done # $darwin_arches
-            ## Okay now we've a bunch of thin objects, gotta fatten them up :)
-	    darwin_filelist=`find unfat-$$ -type f -name \*.o -print -o -name \*.lo -print | $SED -e "$sed_basename" | sort -u`
-	    darwin_file=
-	    darwin_files=
-	    for darwin_file in $darwin_filelist; do
-	      darwin_files=`find unfat-$$ -name $darwin_file -print | sort | $NL2SP`
-	      $LIPO -create -output "$darwin_file" $darwin_files
-	    done # $darwin_filelist
-	    $RM -rf unfat-$$
-	    cd "$darwin_orig_dir"
-	  else
-	    cd $darwin_orig_dir
-	    func_extract_an_archive "$my_xdir" "$my_xabs"
-	  fi # $darwin_arches
-	} # !$opt_dry_run
-	;;
-      *)
-        func_extract_an_archive "$my_xdir" "$my_xabs"
-	;;
-      esac
-      my_oldobjs="$my_oldobjs "`find $my_xdir -name \*.$objext -print -o -name \*.lo -print | sort | $NL2SP`
-    done
-
-    func_extract_archives_result=$my_oldobjs
-}
-
-
-# func_emit_wrapper [arg=no]
-#
-# Emit a libtool wrapper script on stdout.
-# Don't directly open a file because we may want to
-# incorporate the script contents within a cygwin/mingw
-# wrapper executable.  Must ONLY be called from within
-# func_mode_link because it depends on a number of variables
-# set therein.
-#
-# ARG is the value that the WRAPPER_SCRIPT_BELONGS_IN_OBJDIR
-# variable will take.  If 'yes', then the emitted script
-# will assume that the directory where it is stored is
-# the $objdir directory.  This is a cygwin/mingw-specific
-# behavior.
-func_emit_wrapper ()
-{
-	func_emit_wrapper_arg1=${1-no}
-
-	$ECHO "\
-#! $SHELL
-
-# $output - temporary wrapper script for $objdir/$outputname
-# Generated by $PROGRAM (GNU $PACKAGE) $VERSION
-#
-# The $output program cannot be directly executed until all the libtool
-# libraries that it depends on are installed.
-#
-# This wrapper script should never be moved out of the build directory.
-# If it is, it will not operate correctly.
-
-# Sed substitution that helps us do robust quoting.  It backslashifies
-# metacharacters that are still active within double-quoted strings.
-sed_quote_subst='$sed_quote_subst'
-
-# Be Bourne compatible
-if test -n \"\${ZSH_VERSION+set}\" && (emulate sh) >/dev/null 2>&1; then
-  emulate sh
-  NULLCMD=:
-  # Zsh 3.x and 4.x performs word splitting on \${1+\"\$@\"}, which
-  # is contrary to our usage.  Disable this feature.
-  alias -g '\${1+\"\$@\"}'='\"\$@\"'
-  setopt NO_GLOB_SUBST
-else
-  case \`(set -o) 2>/dev/null\` in *posix*) set -o posix;; esac
-fi
-BIN_SH=xpg4; export BIN_SH # for Tru64
-DUALCASE=1; export DUALCASE # for MKS sh
-
-# The HP-UX ksh and POSIX shell print the target directory to stdout
-# if CDPATH is set.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-relink_command=\"$relink_command\"
-
-# This environment variable determines our operation mode.
-if test \"\$libtool_install_magic\" = \"$magic\"; then
-  # install mode needs the following variables:
-  generated_by_libtool_version='$macro_version'
-  notinst_deplibs='$notinst_deplibs'
-else
-  # When we are sourced in execute mode, \$file and \$ECHO are already set.
-  if test \"\$libtool_execute_magic\" != \"$magic\"; then
-    file=\"\$0\""
-
-    func_quote_arg pretty "$ECHO"
-    qECHO=$func_quote_arg_result
-    $ECHO "\
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-\$1
-_LTECHO_EOF'
-}
-    ECHO=$qECHO
-  fi
-
-# Very basic option parsing. These options are (a) specific to
-# the libtool wrapper, (b) are identical between the wrapper
-# /script/ and the wrapper /executable/ that is used only on
-# windows platforms, and (c) all begin with the string "--lt-"
-# (application programs are unlikely to have options that match
-# this pattern).
-#
-# There are only two supported options: --lt-debug and
-# --lt-dump-script. There is, deliberately, no --lt-help.
-#
-# The first argument to this parsing function should be the
-# script's $0 value, followed by "$@".
-lt_option_debug=
-func_parse_lt_options ()
-{
-  lt_script_arg0=\$0
-  shift
-  for lt_opt
-  do
-    case \"\$lt_opt\" in
-    --lt-debug) lt_option_debug=1 ;;
-    --lt-dump-script)
-        lt_dump_D=\`\$ECHO \"X\$lt_script_arg0\" | $SED -e 's/^X//' -e 's%/[^/]*$%%'\`
-        test \"X\$lt_dump_D\" = \"X\$lt_script_arg0\" && lt_dump_D=.
-        lt_dump_F=\`\$ECHO \"X\$lt_script_arg0\" | $SED -e 's/^X//' -e 's%^.*/%%'\`
-        cat \"\$lt_dump_D/\$lt_dump_F\"
-        exit 0
-      ;;
-    --lt-*)
-        \$ECHO \"Unrecognized --lt- option: '\$lt_opt'\" 1>&2
-        exit 1
-      ;;
-    esac
-  done
-
-  # Print the debug banner immediately:
-  if test -n \"\$lt_option_debug\"; then
-    echo \"$outputname:$output:\$LINENO: libtool wrapper (GNU $PACKAGE) $VERSION\" 1>&2
-  fi
-}
-
-# Used when --lt-debug. Prints its arguments to stdout
-# (redirection is the responsibility of the caller)
-func_lt_dump_args ()
-{
-  lt_dump_args_N=1;
-  for lt_arg
-  do
-    \$ECHO \"$outputname:$output:\$LINENO: newargv[\$lt_dump_args_N]: \$lt_arg\"
-    lt_dump_args_N=\`expr \$lt_dump_args_N + 1\`
-  done
-}
-
-# Core function for launching the target application
-func_exec_program_core ()
-{
-"
-  case $host in
-  # Backslashes separate directories on plain windows
-  *-*-mingw | *-*-os2* | *-cegcc*)
-    $ECHO "\
-      if test -n \"\$lt_option_debug\"; then
-        \$ECHO \"$outputname:$output:\$LINENO: newargv[0]: \$progdir\\\\\$program\" 1>&2
-        func_lt_dump_args \${1+\"\$@\"} 1>&2
-      fi
-      exec \"\$progdir\\\\\$program\" \${1+\"\$@\"}
-"
-    ;;
-
-  *)
-    $ECHO "\
-      if test -n \"\$lt_option_debug\"; then
-        \$ECHO \"$outputname:$output:\$LINENO: newargv[0]: \$progdir/\$program\" 1>&2
-        func_lt_dump_args \${1+\"\$@\"} 1>&2
-      fi
-      exec \"\$progdir/\$program\" \${1+\"\$@\"}
-"
-    ;;
-  esac
-  $ECHO "\
-      \$ECHO \"\$0: cannot exec \$program \$*\" 1>&2
-      exit 1
-}
-
-# A function to encapsulate launching the target application
-# Strips options in the --lt-* namespace from \$@ and
-# launches target application with the remaining arguments.
-func_exec_program ()
-{
-  case \" \$* \" in
-  *\\ --lt-*)
-    for lt_wr_arg
-    do
-      case \$lt_wr_arg in
-      --lt-*) ;;
-      *) set x \"\$@\" \"\$lt_wr_arg\"; shift;;
-      esac
-      shift
-    done ;;
-  esac
-  func_exec_program_core \${1+\"\$@\"}
-}
-
-  # Parse options
-  func_parse_lt_options \"\$0\" \${1+\"\$@\"}
-
-  # Find the directory that this script lives in.
-  thisdir=\`\$ECHO \"\$file\" | $SED 's%/[^/]*$%%'\`
-  test \"x\$thisdir\" = \"x\$file\" && thisdir=.
-
-  # Follow symbolic links until we get to the real thisdir.
-  file=\`ls -ld \"\$file\" | $SED -n 's/.*-> //p'\`
-  while test -n \"\$file\"; do
-    destdir=\`\$ECHO \"\$file\" | $SED 's%/[^/]*\$%%'\`
-
-    # If there was a directory component, then change thisdir.
-    if test \"x\$destdir\" != \"x\$file\"; then
-      case \"\$destdir\" in
-      [\\\\/]* | [A-Za-z]:[\\\\/]*) thisdir=\"\$destdir\" ;;
-      *) thisdir=\"\$thisdir/\$destdir\" ;;
-      esac
-    fi
-
-    file=\`\$ECHO \"\$file\" | $SED 's%^.*/%%'\`
-    file=\`ls -ld \"\$thisdir/\$file\" | $SED -n 's/.*-> //p'\`
-  done
-
-  # Usually 'no', except on cygwin/mingw when embedded into
-  # the cwrapper.
-  WRAPPER_SCRIPT_BELONGS_IN_OBJDIR=$func_emit_wrapper_arg1
-  if test \"\$WRAPPER_SCRIPT_BELONGS_IN_OBJDIR\" = \"yes\"; then
-    # special case for '.'
-    if test \"\$thisdir\" = \".\"; then
-      thisdir=\`pwd\`
-    fi
-    # remove .libs from thisdir
-    case \"\$thisdir\" in
-    *[\\\\/]$objdir ) thisdir=\`\$ECHO \"\$thisdir\" | $SED 's%[\\\\/][^\\\\/]*$%%'\` ;;
-    $objdir )   thisdir=. ;;
-    esac
-  fi
-
-  # Try to get the absolute directory name.
-  absdir=\`cd \"\$thisdir\" && pwd\`
-  test -n \"\$absdir\" && thisdir=\"\$absdir\"
-"
-
-	if test yes = "$fast_install"; then
-	  $ECHO "\
-  program=lt-'$outputname'$exeext
-  progdir=\"\$thisdir/$objdir\"
-
-  if test ! -f \"\$progdir/\$program\" ||
-     { file=\`ls -1dt \"\$progdir/\$program\" \"\$progdir/../\$program\" 2>/dev/null | $SED 1q\`; \\
-       test \"X\$file\" != \"X\$progdir/\$program\"; }; then
-
-    file=\"\$\$-\$program\"
-
-    if test ! -d \"\$progdir\"; then
-      $MKDIR \"\$progdir\"
-    else
-      $RM \"\$progdir/\$file\"
-    fi"
-
-	  $ECHO "\
-
-    # relink executable if necessary
-    if test -n \"\$relink_command\"; then
-      if relink_command_output=\`eval \$relink_command 2>&1\`; then :
-      else
-	\$ECHO \"\$relink_command_output\" >&2
-	$RM \"\$progdir/\$file\"
-	exit 1
-      fi
-    fi
-
-    $MV \"\$progdir/\$file\" \"\$progdir/\$program\" 2>/dev/null ||
-    { $RM \"\$progdir/\$program\";
-      $MV \"\$progdir/\$file\" \"\$progdir/\$program\"; }
-    $RM \"\$progdir/\$file\"
-  fi"
-	else
-	  $ECHO "\
-  program='$outputname'
-  progdir=\"\$thisdir/$objdir\"
-"
-	fi
-
-	$ECHO "\
-
-  if test -f \"\$progdir/\$program\"; then"
-
-	# fixup the dll searchpath if we need to.
-	#
-	# Fix the DLL searchpath if we need to.  Do this before prepending
-	# to shlibpath, because on Windows, both are PATH and uninstalled
-	# libraries must come first.
-	if test -n "$dllsearchpath"; then
-	  $ECHO "\
-    # Add the dll search path components to the executable PATH
-    PATH=$dllsearchpath:\$PATH
-"
-	fi
-
-	# Export our shlibpath_var if we have one.
-	if test yes = "$shlibpath_overrides_runpath" && test -n "$shlibpath_var" && test -n "$temp_rpath"; then
-	  $ECHO "\
-    # Add our own library path to $shlibpath_var
-    $shlibpath_var=\"$temp_rpath\$$shlibpath_var\"
-
-    # Some systems cannot cope with colon-terminated $shlibpath_var
-    # The second colon is a workaround for a bug in BeOS R4 sed
-    $shlibpath_var=\`\$ECHO \"\$$shlibpath_var\" | $SED 's/::*\$//'\`
-
-    export $shlibpath_var
-"
-	fi
-
-	$ECHO "\
-    if test \"\$libtool_execute_magic\" != \"$magic\"; then
-      # Run the actual program with our arguments.
-      func_exec_program \${1+\"\$@\"}
-    fi
-  else
-    # The program doesn't exist.
-    \$ECHO \"\$0: error: '\$progdir/\$program' does not exist\" 1>&2
-    \$ECHO \"This script is just a wrapper for \$program.\" 1>&2
-    \$ECHO \"See the $PACKAGE documentation for more information.\" 1>&2
-    exit 1
-  fi
-fi\
-"
-}
-
-
-# func_emit_cwrapperexe_src
-# emit the source code for a wrapper executable on stdout
-# Must ONLY be called from within func_mode_link because
-# it depends on a number of variable set therein.
-func_emit_cwrapperexe_src ()
-{
-	cat <<EOF
-
-/* $cwrappersource - temporary wrapper executable for $objdir/$outputname
-   Generated by $PROGRAM (GNU $PACKAGE) $VERSION
-
-   The $output program cannot be directly executed until all the libtool
-   libraries that it depends on are installed.
-
-   This wrapper executable should never be moved out of the build directory.
-   If it is, it will not operate correctly.
-*/
-EOF
-	    cat <<"EOF"
-#ifdef _MSC_VER
-# define _CRT_SECURE_NO_DEPRECATE 1
-#endif
-#include <stdio.h>
-#include <stdlib.h>
-#ifdef _MSC_VER
-# include <direct.h>
-# include <process.h>
-# include <io.h>
-#else
-# include <unistd.h>
-# include <stdint.h>
-# ifdef __CYGWIN__
-#  include <io.h>
-# endif
-#endif
-#include <malloc.h>
-#include <stdarg.h>
-#include <assert.h>
-#include <string.h>
-#include <ctype.h>
-#include <errno.h>
-#include <fcntl.h>
-#include <sys/stat.h>
-
-#define STREQ(s1, s2) (strcmp ((s1), (s2)) == 0)
-
-/* declarations of non-ANSI functions */
-#if defined __MINGW32__
-# ifdef __STRICT_ANSI__
-int _putenv (const char *);
-# endif
-#elif defined __CYGWIN__
-# ifdef __STRICT_ANSI__
-char *realpath (const char *, char *);
-int putenv (char *);
-int setenv (const char *, const char *, int);
-# endif
-/* #elif defined other_platform || defined ... */
-#endif
-
-/* portability defines, excluding path handling macros */
-#if defined _MSC_VER
-# define setmode _setmode
-# define stat    _stat
-# define chmod   _chmod
-# define getcwd  _getcwd
-# define putenv  _putenv
-# define S_IXUSR _S_IEXEC
-#elif defined __MINGW32__
-# define setmode _setmode
-# define stat    _stat
-# define chmod   _chmod
-# define getcwd  _getcwd
-# define putenv  _putenv
-#elif defined __CYGWIN__
-# define HAVE_SETENV
-# define FOPEN_WB "wb"
-/* #elif defined other platforms ... */
-#endif
-
-#if defined PATH_MAX
-# define LT_PATHMAX PATH_MAX
-#elif defined MAXPATHLEN
-# define LT_PATHMAX MAXPATHLEN
-#else
-# define LT_PATHMAX 1024
-#endif
-
-#ifndef S_IXOTH
-# define S_IXOTH 0
-#endif
-#ifndef S_IXGRP
-# define S_IXGRP 0
-#endif
-
-/* path handling portability macros */
-#ifndef DIR_SEPARATOR
-# define DIR_SEPARATOR '/'
-# define PATH_SEPARATOR ':'
-#endif
-
-#if defined _WIN32 || defined __MSDOS__ || defined __DJGPP__ || \
-  defined __OS2__
-# define HAVE_DOS_BASED_FILE_SYSTEM
-# define FOPEN_WB "wb"
-# ifndef DIR_SEPARATOR_2
-#  define DIR_SEPARATOR_2 '\\'
-# endif
-# ifndef PATH_SEPARATOR_2
-#  define PATH_SEPARATOR_2 ';'
-# endif
-#endif
-
-#ifndef DIR_SEPARATOR_2
-# define IS_DIR_SEPARATOR(ch) ((ch) == DIR_SEPARATOR)
-#else /* DIR_SEPARATOR_2 */
-# define IS_DIR_SEPARATOR(ch) \
-	(((ch) == DIR_SEPARATOR) || ((ch) == DIR_SEPARATOR_2))
-#endif /* DIR_SEPARATOR_2 */
-
-#ifndef PATH_SEPARATOR_2
-# define IS_PATH_SEPARATOR(ch) ((ch) == PATH_SEPARATOR)
-#else /* PATH_SEPARATOR_2 */
-# define IS_PATH_SEPARATOR(ch) ((ch) == PATH_SEPARATOR_2)
-#endif /* PATH_SEPARATOR_2 */
-
-#ifndef FOPEN_WB
-# define FOPEN_WB "w"
-#endif
-#ifndef _O_BINARY
-# define _O_BINARY 0
-#endif
-
-#define XMALLOC(type, num)      ((type *) xmalloc ((num) * sizeof(type)))
-#define XFREE(stale) do { \
-  if (stale) { free (stale); stale = 0; } \
-} while (0)
-
-#if defined LT_DEBUGWRAPPER
-static int lt_debug = 1;
-#else
-static int lt_debug = 0;
-#endif
-
-const char *program_name = "libtool-wrapper"; /* in case xstrdup fails */
-
-void *xmalloc (size_t num);
-char *xstrdup (const char *string);
-const char *base_name (const char *name);
-char *find_executable (const char *wrapper);
-char *chase_symlinks (const char *pathspec);
-int make_executable (const char *path);
-int check_executable (const char *path);
-char *strendzap (char *str, const char *pat);
-void lt_debugprintf (const char *file, int line, const char *fmt, ...);
-void lt_fatal (const char *file, int line, const char *message, ...);
-static const char *nonnull (const char *s);
-static const char *nonempty (const char *s);
-void lt_setenv (const char *name, const char *value);
-char *lt_extend_str (const char *orig_value, const char *add, int to_end);
-void lt_update_exe_path (const char *name, const char *value);
-void lt_update_lib_path (const char *name, const char *value);
-char **prepare_spawn (char **argv);
-void lt_dump_script (FILE *f);
-EOF
-
-	    cat <<EOF
-#if __GNUC__ < 4 || (__GNUC__ == 4 && __GNUC_MINOR__ < 5)
-# define externally_visible volatile
-#else
-# define externally_visible __attribute__((externally_visible)) volatile
-#endif
-externally_visible const char * MAGIC_EXE = "$magic_exe";
-const char * LIB_PATH_VARNAME = "$shlibpath_var";
-EOF
-
-	    if test yes = "$shlibpath_overrides_runpath" && test -n "$shlibpath_var" && test -n "$temp_rpath"; then
-              func_to_host_path "$temp_rpath"
-	      cat <<EOF
-const char * LIB_PATH_VALUE   = "$func_to_host_path_result";
-EOF
-	    else
-	      cat <<"EOF"
-const char * LIB_PATH_VALUE   = "";
-EOF
-	    fi
-
-	    if test -n "$dllsearchpath"; then
-              func_to_host_path "$dllsearchpath:"
-	      cat <<EOF
-const char * EXE_PATH_VARNAME = "PATH";
-const char * EXE_PATH_VALUE   = "$func_to_host_path_result";
-EOF
-	    else
-	      cat <<"EOF"
-const char * EXE_PATH_VARNAME = "";
-const char * EXE_PATH_VALUE   = "";
-EOF
-	    fi
-
-	    if test yes = "$fast_install"; then
-	      cat <<EOF
-const char * TARGET_PROGRAM_NAME = "lt-$outputname"; /* hopefully, no .exe */
-EOF
-	    else
-	      cat <<EOF
-const char * TARGET_PROGRAM_NAME = "$outputname"; /* hopefully, no .exe */
-EOF
-	    fi
-
-
-	    cat <<"EOF"
-
-#define LTWRAPPER_OPTION_PREFIX         "--lt-"
-
-static const char *ltwrapper_option_prefix = LTWRAPPER_OPTION_PREFIX;
-static const char *dumpscript_opt       = LTWRAPPER_OPTION_PREFIX "dump-script";
-static const char *debug_opt            = LTWRAPPER_OPTION_PREFIX "debug";
-
-int
-main (int argc, char *argv[])
-{
-  char **newargz;
-  int  newargc;
-  char *tmp_pathspec;
-  char *actual_cwrapper_path;
-  char *actual_cwrapper_name;
-  char *target_name;
-  char *lt_argv_zero;
-  int rval = 127;
-
-  int i;
-
-  program_name = (char *) xstrdup (base_name (argv[0]));
-  newargz = XMALLOC (char *, (size_t) argc + 1);
-
-  /* very simple arg parsing; don't want to rely on getopt
-   * also, copy all non cwrapper options to newargz, except
-   * argz[0], which is handled differently
-   */
-  newargc=0;
-  for (i = 1; i < argc; i++)
-    {
-      if (STREQ (argv[i], dumpscript_opt))
-	{
-EOF
-	    case $host in
-	      *mingw* | *cygwin* )
-		# make stdout use "unix" line endings
-		echo "          setmode(1,_O_BINARY);"
-		;;
-	      esac
-
-	    cat <<"EOF"
-	  lt_dump_script (stdout);
-	  return 0;
-	}
-      if (STREQ (argv[i], debug_opt))
-	{
-          lt_debug = 1;
-          continue;
-	}
-      if (STREQ (argv[i], ltwrapper_option_prefix))
-        {
-          /* however, if there is an option in the LTWRAPPER_OPTION_PREFIX
-             namespace, but it is not one of the ones we know about and
-             have already dealt with, above (inluding dump-script), then
-             report an error. Otherwise, targets might begin to believe
-             they are allowed to use options in the LTWRAPPER_OPTION_PREFIX
-             namespace. The first time any user complains about this, we'll
-             need to make LTWRAPPER_OPTION_PREFIX a configure-time option
-             or a configure.ac-settable value.
-           */
-          lt_fatal (__FILE__, __LINE__,
-		    "unrecognized %s option: '%s'",
-                    ltwrapper_option_prefix, argv[i]);
-        }
-      /* otherwise ... */
-      newargz[++newargc] = xstrdup (argv[i]);
-    }
-  newargz[++newargc] = NULL;
-
-EOF
-	    cat <<EOF
-  /* The GNU banner must be the first non-error debug message */
-  lt_debugprintf (__FILE__, __LINE__, "libtool wrapper (GNU $PACKAGE) $VERSION\n");
-EOF
-	    cat <<"EOF"
-  lt_debugprintf (__FILE__, __LINE__, "(main) argv[0]: %s\n", argv[0]);
-  lt_debugprintf (__FILE__, __LINE__, "(main) program_name: %s\n", program_name);
-
-  tmp_pathspec = find_executable (argv[0]);
-  if (tmp_pathspec == NULL)
-    lt_fatal (__FILE__, __LINE__, "couldn't find %s", argv[0]);
-  lt_debugprintf (__FILE__, __LINE__,
-                  "(main) found exe (before symlink chase) at: %s\n",
-		  tmp_pathspec);
-
-  actual_cwrapper_path = chase_symlinks (tmp_pathspec);
-  lt_debugprintf (__FILE__, __LINE__,
-                  "(main) found exe (after symlink chase) at: %s\n",
-		  actual_cwrapper_path);
-  XFREE (tmp_pathspec);
-
-  actual_cwrapper_name = xstrdup (base_name (actual_cwrapper_path));
-  strendzap (actual_cwrapper_path, actual_cwrapper_name);
-
-  /* wrapper name transforms */
-  strendzap (actual_cwrapper_name, ".exe");
-  tmp_pathspec = lt_extend_str (actual_cwrapper_name, ".exe", 1);
-  XFREE (actual_cwrapper_name);
-  actual_cwrapper_name = tmp_pathspec;
-  tmp_pathspec = 0;
-
-  /* target_name transforms -- use actual target program name; might have lt- prefix */
-  target_name = xstrdup (base_name (TARGET_PROGRAM_NAME));
-  strendzap (target_name, ".exe");
-  tmp_pathspec = lt_extend_str (target_name, ".exe", 1);
-  XFREE (target_name);
-  target_name = tmp_pathspec;
-  tmp_pathspec = 0;
-
-  lt_debugprintf (__FILE__, __LINE__,
-		  "(main) libtool target name: %s\n",
-		  target_name);
-EOF
-
-	    cat <<EOF
-  newargz[0] =
-    XMALLOC (char, (strlen (actual_cwrapper_path) +
-		    strlen ("$objdir") + 1 + strlen (actual_cwrapper_name) + 1));
-  strcpy (newargz[0], actual_cwrapper_path);
-  strcat (newargz[0], "$objdir");
-  strcat (newargz[0], "/");
-EOF
-
-	    cat <<"EOF"
-  /* stop here, and copy so we don't have to do this twice */
-  tmp_pathspec = xstrdup (newargz[0]);
-
-  /* do NOT want the lt- prefix here, so use actual_cwrapper_name */
-  strcat (newargz[0], actual_cwrapper_name);
-
-  /* DO want the lt- prefix here if it exists, so use target_name */
-  lt_argv_zero = lt_extend_str (tmp_pathspec, target_name, 1);
-  XFREE (tmp_pathspec);
-  tmp_pathspec = NULL;
-EOF
-
-	    case $host_os in
-	      mingw*)
-	    cat <<"EOF"
-  {
-    char* p;
-    while ((p = strchr (newargz[0], '\\')) != NULL)
-      {
-	*p = '/';
-      }
-    while ((p = strchr (lt_argv_zero, '\\')) != NULL)
-      {
-	*p = '/';
-      }
-  }
-EOF
-	    ;;
-	    esac
-
-	    cat <<"EOF"
-  XFREE (target_name);
-  XFREE (actual_cwrapper_path);
-  XFREE (actual_cwrapper_name);
-
-  lt_setenv ("BIN_SH", "xpg4"); /* for Tru64 */
-  lt_setenv ("DUALCASE", "1");  /* for MSK sh */
-  /* Update the DLL searchpath.  EXE_PATH_VALUE ($dllsearchpath) must
-     be prepended before (that is, appear after) LIB_PATH_VALUE ($temp_rpath)
-     because on Windows, both *_VARNAMEs are PATH but uninstalled
-     libraries must come first. */
-  lt_update_exe_path (EXE_PATH_VARNAME, EXE_PATH_VALUE);
-  lt_update_lib_path (LIB_PATH_VARNAME, LIB_PATH_VALUE);
-
-  lt_debugprintf (__FILE__, __LINE__, "(main) lt_argv_zero: %s\n",
-		  nonnull (lt_argv_zero));
-  for (i = 0; i < newargc; i++)
-    {
-      lt_debugprintf (__FILE__, __LINE__, "(main) newargz[%d]: %s\n",
-		      i, nonnull (newargz[i]));
-    }
-
-EOF
-
-	    case $host_os in
-	      mingw*)
-		cat <<"EOF"
-  /* execv doesn't actually work on mingw as expected on unix */
-  newargz = prepare_spawn (newargz);
-  rval = (int) _spawnv (_P_WAIT, lt_argv_zero, (const char * const *) newargz);
-  if (rval == -1)
-    {
-      /* failed to start process */
-      lt_debugprintf (__FILE__, __LINE__,
-		      "(main) failed to launch target \"%s\": %s\n",
-		      lt_argv_zero, nonnull (strerror (errno)));
-      return 127;
-    }
-  return rval;
-EOF
-		;;
-	      *)
-		cat <<"EOF"
-  execv (lt_argv_zero, newargz);
-  return rval; /* =127, but avoids unused variable warning */
-EOF
-		;;
-	    esac
-
-	    cat <<"EOF"
-}
-
-void *
-xmalloc (size_t num)
-{
-  void *p = (void *) malloc (num);
-  if (!p)
-    lt_fatal (__FILE__, __LINE__, "memory exhausted");
-
-  return p;
-}
-
-char *
-xstrdup (const char *string)
-{
-  return string ? strcpy ((char *) xmalloc (strlen (string) + 1),
-			  string) : NULL;
-}
-
-const char *
-base_name (const char *name)
-{
-  const char *base;
-
-#if defined HAVE_DOS_BASED_FILE_SYSTEM
-  /* Skip over the disk name in MSDOS pathnames. */
-  if (isalpha ((unsigned char) name[0]) && name[1] == ':')
-    name += 2;
-#endif
-
-  for (base = name; *name; name++)
-    if (IS_DIR_SEPARATOR (*name))
-      base = name + 1;
-  return base;
-}
-
-int
-check_executable (const char *path)
-{
-  struct stat st;
-
-  lt_debugprintf (__FILE__, __LINE__, "(check_executable): %s\n",
-                  nonempty (path));
-  if ((!path) || (!*path))
-    return 0;
-
-  if ((stat (path, &st) >= 0)
-      && (st.st_mode & (S_IXUSR | S_IXGRP | S_IXOTH)))
-    return 1;
-  else
-    return 0;
-}
-
-int
-make_executable (const char *path)
-{
-  int rval = 0;
-  struct stat st;
-
-  lt_debugprintf (__FILE__, __LINE__, "(make_executable): %s\n",
-                  nonempty (path));
-  if ((!path) || (!*path))
-    return 0;
-
-  if (stat (path, &st) >= 0)
-    {
-      rval = chmod (path, st.st_mode | S_IXOTH | S_IXGRP | S_IXUSR);
-    }
-  return rval;
-}
-
-/* Searches for the full path of the wrapper.  Returns
-   newly allocated full path name if found, NULL otherwise
-   Does not chase symlinks, even on platforms that support them.
-*/
-char *
-find_executable (const char *wrapper)
-{
-  int has_slash = 0;
-  const char *p;
-  const char *p_next;
-  /* static buffer for getcwd */
-  char tmp[LT_PATHMAX + 1];
-  size_t tmp_len;
-  char *concat_name;
-
-  lt_debugprintf (__FILE__, __LINE__, "(find_executable): %s\n",
-                  nonempty (wrapper));
-
-  if ((wrapper == NULL) || (*wrapper == '\0'))
-    return NULL;
-
-  /* Absolute path? */
-#if defined HAVE_DOS_BASED_FILE_SYSTEM
-  if (isalpha ((unsigned char) wrapper[0]) && wrapper[1] == ':')
-    {
-      concat_name = xstrdup (wrapper);
-      if (check_executable (concat_name))
-	return concat_name;
-      XFREE (concat_name);
-    }
-  else
-    {
-#endif
-      if (IS_DIR_SEPARATOR (wrapper[0]))
-	{
-	  concat_name = xstrdup (wrapper);
-	  if (check_executable (concat_name))
-	    return concat_name;
-	  XFREE (concat_name);
-	}
-#if defined HAVE_DOS_BASED_FILE_SYSTEM
-    }
-#endif
-
-  for (p = wrapper; *p; p++)
-    if (*p == '/')
-      {
-	has_slash = 1;
-	break;
-      }
-  if (!has_slash)
-    {
-      /* no slashes; search PATH */
-      const char *path = getenv ("PATH");
-      if (path != NULL)
-	{
-	  for (p = path; *p; p = p_next)
-	    {
-	      const char *q;
-	      size_t p_len;
-	      for (q = p; *q; q++)
-		if (IS_PATH_SEPARATOR (*q))
-		  break;
-	      p_len = (size_t) (q - p);
-	      p_next = (*q == '\0' ? q : q + 1);
-	      if (p_len == 0)
-		{
-		  /* empty path: current directory */
-		  if (getcwd (tmp, LT_PATHMAX) == NULL)
-		    lt_fatal (__FILE__, __LINE__, "getcwd failed: %s",
-                              nonnull (strerror (errno)));
-		  tmp_len = strlen (tmp);
-		  concat_name =
-		    XMALLOC (char, tmp_len + 1 + strlen (wrapper) + 1);
-		  memcpy (concat_name, tmp, tmp_len);
-		  concat_name[tmp_len] = '/';
-		  strcpy (concat_name + tmp_len + 1, wrapper);
-		}
-	      else
-		{
-		  concat_name =
-		    XMALLOC (char, p_len + 1 + strlen (wrapper) + 1);
-		  memcpy (concat_name, p, p_len);
-		  concat_name[p_len] = '/';
-		  strcpy (concat_name + p_len + 1, wrapper);
-		}
-	      if (check_executable (concat_name))
-		return concat_name;
-	      XFREE (concat_name);
-	    }
-	}
-      /* not found in PATH; assume curdir */
-    }
-  /* Relative path | not found in path: prepend cwd */
-  if (getcwd (tmp, LT_PATHMAX) == NULL)
-    lt_fatal (__FILE__, __LINE__, "getcwd failed: %s",
-              nonnull (strerror (errno)));
-  tmp_len = strlen (tmp);
-  concat_name = XMALLOC (char, tmp_len + 1 + strlen (wrapper) + 1);
-  memcpy (concat_name, tmp, tmp_len);
-  concat_name[tmp_len] = '/';
-  strcpy (concat_name + tmp_len + 1, wrapper);
-
-  if (check_executable (concat_name))
-    return concat_name;
-  XFREE (concat_name);
-  return NULL;
-}
-
-char *
-chase_symlinks (const char *pathspec)
-{
-#ifndef S_ISLNK
-  return xstrdup (pathspec);
-#else
-  char buf[LT_PATHMAX];
-  struct stat s;
-  char *tmp_pathspec = xstrdup (pathspec);
-  char *p;
-  int has_symlinks = 0;
-  while (strlen (tmp_pathspec) && !has_symlinks)
-    {
-      lt_debugprintf (__FILE__, __LINE__,
-		      "checking path component for symlinks: %s\n",
-		      tmp_pathspec);
-      if (lstat (tmp_pathspec, &s) == 0)
-	{
-	  if (S_ISLNK (s.st_mode) != 0)
-	    {
-	      has_symlinks = 1;
-	      break;
-	    }
-
-	  /* search backwards for last DIR_SEPARATOR */
-	  p = tmp_pathspec + strlen (tmp_pathspec) - 1;
-	  while ((p > tmp_pathspec) && (!IS_DIR_SEPARATOR (*p)))
-	    p--;
-	  if ((p == tmp_pathspec) && (!IS_DIR_SEPARATOR (*p)))
-	    {
-	      /* no more DIR_SEPARATORS left */
-	      break;
-	    }
-	  *p = '\0';
-	}
-      else
-	{
-	  lt_fatal (__FILE__, __LINE__,
-		    "error accessing file \"%s\": %s",
-		    tmp_pathspec, nonnull (strerror (errno)));
-	}
-    }
-  XFREE (tmp_pathspec);
-
-  if (!has_symlinks)
-    {
-      return xstrdup (pathspec);
-    }
-
-  tmp_pathspec = realpath (pathspec, buf);
-  if (tmp_pathspec == 0)
-    {
-      lt_fatal (__FILE__, __LINE__,
-		"could not follow symlinks for %s", pathspec);
-    }
-  return xstrdup (tmp_pathspec);
-#endif
-}
-
-char *
-strendzap (char *str, const char *pat)
-{
-  size_t len, patlen;
-
-  assert (str != NULL);
-  assert (pat != NULL);
-
-  len = strlen (str);
-  patlen = strlen (pat);
-
-  if (patlen <= len)
-    {
-      str += len - patlen;
-      if (STREQ (str, pat))
-	*str = '\0';
-    }
-  return str;
-}
-
-void
-lt_debugprintf (const char *file, int line, const char *fmt, ...)
-{
-  va_list args;
-  if (lt_debug)
-    {
-      (void) fprintf (stderr, "%s:%s:%d: ", program_name, file, line);
-      va_start (args, fmt);
-      (void) vfprintf (stderr, fmt, args);
-      va_end (args);
-    }
-}
-
-static void
-lt_error_core (int exit_status, const char *file,
-	       int line, const char *mode,
-	       const char *message, va_list ap)
-{
-  fprintf (stderr, "%s:%s:%d: %s: ", program_name, file, line, mode);
-  vfprintf (stderr, message, ap);
-  fprintf (stderr, ".\n");
-
-  if (exit_status >= 0)
-    exit (exit_status);
-}
-
-void
-lt_fatal (const char *file, int line, const char *message, ...)
-{
-  va_list ap;
-  va_start (ap, message);
-  lt_error_core (EXIT_FAILURE, file, line, "FATAL", message, ap);
-  va_end (ap);
-}
-
-static const char *
-nonnull (const char *s)
-{
-  return s ? s : "(null)";
-}
-
-static const char *
-nonempty (const char *s)
-{
-  return (s && !*s) ? "(empty)" : nonnull (s);
-}
-
-void
-lt_setenv (const char *name, const char *value)
-{
-  lt_debugprintf (__FILE__, __LINE__,
-		  "(lt_setenv) setting '%s' to '%s'\n",
-                  nonnull (name), nonnull (value));
-  {
-#ifdef HAVE_SETENV
-    /* always make a copy, for consistency with !HAVE_SETENV */
-    char *str = xstrdup (value);
-    setenv (name, str, 1);
-#else
-    size_t len = strlen (name) + 1 + strlen (value) + 1;
-    char *str = XMALLOC (char, len);
-    sprintf (str, "%s=%s", name, value);
-    if (putenv (str) != EXIT_SUCCESS)
-      {
-        XFREE (str);
-      }
-#endif
-  }
-}
-
-char *
-lt_extend_str (const char *orig_value, const char *add, int to_end)
-{
-  char *new_value;
-  if (orig_value && *orig_value)
-    {
-      size_t orig_value_len = strlen (orig_value);
-      size_t add_len = strlen (add);
-      new_value = XMALLOC (char, add_len + orig_value_len + 1);
-      if (to_end)
-        {
-          strcpy (new_value, orig_value);
-          strcpy (new_value + orig_value_len, add);
-        }
-      else
-        {
-          strcpy (new_value, add);
-          strcpy (new_value + add_len, orig_value);
-        }
-    }
-  else
-    {
-      new_value = xstrdup (add);
-    }
-  return new_value;
-}
-
-void
-lt_update_exe_path (const char *name, const char *value)
-{
-  lt_debugprintf (__FILE__, __LINE__,
-		  "(lt_update_exe_path) modifying '%s' by prepending '%s'\n",
-                  nonnull (name), nonnull (value));
-
-  if (name && *name && value && *value)
-    {
-      char *new_value = lt_extend_str (getenv (name), value, 0);
-      /* some systems can't cope with a ':'-terminated path #' */
-      size_t len = strlen (new_value);
-      while ((len > 0) && IS_PATH_SEPARATOR (new_value[len-1]))
-        {
-          new_value[--len] = '\0';
-        }
-      lt_setenv (name, new_value);
-      XFREE (new_value);
-    }
-}
-
-void
-lt_update_lib_path (const char *name, const char *value)
-{
-  lt_debugprintf (__FILE__, __LINE__,
-		  "(lt_update_lib_path) modifying '%s' by prepending '%s'\n",
-                  nonnull (name), nonnull (value));
-
-  if (name && *name && value && *value)
-    {
-      char *new_value = lt_extend_str (getenv (name), value, 0);
-      lt_setenv (name, new_value);
-      XFREE (new_value);
-    }
-}
-
-EOF
-	    case $host_os in
-	      mingw*)
-		cat <<"EOF"
-
-/* Prepares an argument vector before calling spawn().
-   Note that spawn() does not by itself call the command interpreter
-     (getenv ("COMSPEC") != NULL ? getenv ("COMSPEC") :
-      ({ OSVERSIONINFO v; v.dwOSVersionInfoSize = sizeof(OSVERSIONINFO);
-         GetVersionEx(&v);
-         v.dwPlatformId == VER_PLATFORM_WIN32_NT;
-      }) ? "cmd.exe" : "command.com").
-   Instead it simply concatenates the arguments, separated by ' ', and calls
-   CreateProcess().  We must quote the arguments since Win32 CreateProcess()
-   interprets characters like ' ', '\t', '\\', '"' (but not '<' and '>') in a
-   special way:
-   - Space and tab are interpreted as delimiters. They are not treated as
-     delimiters if they are surrounded by double quotes: "...".
-   - Unescaped double quotes are removed from the input. Their only effect is
-     that within double quotes, space and tab are treated like normal
-     characters.
-   - Backslashes not followed by double quotes are not special.
-   - But 2*n+1 backslashes followed by a double quote become
-     n backslashes followed by a double quote (n >= 0):
-       \" -> "
-       \\\" -> \"
-       \\\\\" -> \\"
- */
-#define SHELL_SPECIAL_CHARS "\"\\ \001\002\003\004\005\006\007\010\011\012\013\014\015\016\017\020\021\022\023\024\025\026\027\030\031\032\033\034\035\036\037"
-#define SHELL_SPACE_CHARS " \001\002\003\004\005\006\007\010\011\012\013\014\015\016\017\020\021\022\023\024\025\026\027\030\031\032\033\034\035\036\037"
-char **
-prepare_spawn (char **argv)
-{
-  size_t argc;
-  char **new_argv;
-  size_t i;
-
-  /* Count number of arguments.  */
-  for (argc = 0; argv[argc] != NULL; argc++)
-    ;
-
-  /* Allocate new argument vector.  */
-  new_argv = XMALLOC (char *, argc + 1);
-
-  /* Put quoted arguments into the new argument vector.  */
-  for (i = 0; i < argc; i++)
-    {
-      const char *string = argv[i];
-
-      if (string[0] == '\0')
-	new_argv[i] = xstrdup ("\"\"");
-      else if (strpbrk (string, SHELL_SPECIAL_CHARS) != NULL)
-	{
-	  int quote_around = (strpbrk (string, SHELL_SPACE_CHARS) != NULL);
-	  size_t length;
-	  unsigned int backslashes;
-	  const char *s;
-	  char *quoted_string;
-	  char *p;
-
-	  length = 0;
-	  backslashes = 0;
-	  if (quote_around)
-	    length++;
-	  for (s = string; *s != '\0'; s++)
-	    {
-	      char c = *s;
-	      if (c == '"')
-		length += backslashes + 1;
-	      length++;
-	      if (c == '\\')
-		backslashes++;
-	      else
-		backslashes = 0;
-	    }
-	  if (quote_around)
-	    length += backslashes + 1;
-
-	  quoted_string = XMALLOC (char, length + 1);
-
-	  p = quoted_string;
-	  backslashes = 0;
-	  if (quote_around)
-	    *p++ = '"';
-	  for (s = string; *s != '\0'; s++)
-	    {
-	      char c = *s;
-	      if (c == '"')
-		{
-		  unsigned int j;
-		  for (j = backslashes + 1; j > 0; j--)
-		    *p++ = '\\';
-		}
-	      *p++ = c;
-	      if (c == '\\')
-		backslashes++;
-	      else
-		backslashes = 0;
-	    }
-	  if (quote_around)
-	    {
-	      unsigned int j;
-	      for (j = backslashes; j > 0; j--)
-		*p++ = '\\';
-	      *p++ = '"';
-	    }
-	  *p = '\0';
-
-	  new_argv[i] = quoted_string;
-	}
-      else
-	new_argv[i] = (char *) string;
-    }
-  new_argv[argc] = NULL;
-
-  return new_argv;
-}
-EOF
-		;;
-	    esac
-
-            cat <<"EOF"
-void lt_dump_script (FILE* f)
-{
-EOF
-	    func_emit_wrapper yes |
-	      $SED -n -e '
-s/^\(.\{79\}\)\(..*\)/\1\
-\2/
-h
-s/\([\\"]\)/\\\1/g
-s/$/\\n/
-s/\([^\n]*\).*/  fputs ("\1", f);/p
-g
-D'
-            cat <<"EOF"
-}
-EOF
-}
-# end: func_emit_cwrapperexe_src
-
-# func_win32_import_lib_p ARG
-# True if ARG is an import lib, as indicated by $file_magic_cmd
-func_win32_import_lib_p ()
-{
-    $debug_cmd
-
-    case `eval $file_magic_cmd \"\$1\" 2>/dev/null | $SED -e 10q` in
-    *import*) : ;;
-    *) false ;;
-    esac
-}
-
-# func_suncc_cstd_abi
-# !!ONLY CALL THIS FOR SUN CC AFTER $compile_command IS FULLY EXPANDED!!
-# Several compiler flags select an ABI that is incompatible with the
-# Cstd library. Avoid specifying it if any are in CXXFLAGS.
-func_suncc_cstd_abi ()
-{
-    $debug_cmd
-
-    case " $compile_command " in
-    *" -compat=g "*|*\ -std=c++[0-9][0-9]\ *|*" -library=stdcxx4 "*|*" -library=stlport4 "*)
-      suncc_use_cstd_abi=no
-      ;;
-    *)
-      suncc_use_cstd_abi=yes
-      ;;
-    esac
-}
-
-# func_mode_link arg...
-func_mode_link ()
-{
-    $debug_cmd
-
-    case $host in
-    *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*)
-      # It is impossible to link a dll without this setting, and
-      # we shouldn't force the makefile maintainer to figure out
-      # what system we are compiling for in order to pass an extra
-      # flag for every libtool invocation.
-      # allow_undefined=no
-
-      # FIXME: Unfortunately, there are problems with the above when trying
-      # to make a dll that has undefined symbols, in which case not
-      # even a static library is built.  For now, we need to specify
-      # -no-undefined on the libtool link line when we can be certain
-      # that all symbols are satisfied, otherwise we get a static library.
-      allow_undefined=yes
-      ;;
-    *)
-      allow_undefined=yes
-      ;;
-    esac
-    libtool_args=$nonopt
-    base_compile="$nonopt $@"
-    compile_command=$nonopt
-    finalize_command=$nonopt
-
-    compile_rpath=
-    finalize_rpath=
-    compile_shlibpath=
-    finalize_shlibpath=
-    convenience=
-    old_convenience=
-    deplibs=
-    old_deplibs=
-    compiler_flags=
-    linker_flags=
-    dllsearchpath=
-    lib_search_path=`pwd`
-    inst_prefix_dir=
-    new_inherited_linker_flags=
-
-    avoid_version=no
-    bindir=
-    dlfiles=
-    dlprefiles=
-    dlself=no
-    export_dynamic=no
-    export_symbols=
-    export_symbols_regex=
-    generated=
-    libobjs=
-    ltlibs=
-    module=no
-    no_install=no
-    objs=
-    os2dllname=
-    non_pic_objects=
-    precious_files_regex=
-    prefer_static_libs=no
-    preload=false
-    prev=
-    prevarg=
-    release=
-    rpath=
-    xrpath=
-    perm_rpath=
-    temp_rpath=
-    thread_safe=no
-    vinfo=
-    vinfo_number=no
-    weak_libs=
-    single_module=$wl-single_module
-    func_infer_tag $base_compile
-
-    # We need to know -static, to get the right output filenames.
-    for arg
-    do
-      case $arg in
-      -shared)
-	test yes != "$build_libtool_libs" \
-	  && func_fatal_configuration "cannot build a shared library"
-	build_old_libs=no
-	break
-	;;
-      -all-static | -static | -static-libtool-libs)
-	case $arg in
-	-all-static)
-	  if test yes = "$build_libtool_libs" && test -z "$link_static_flag"; then
-	    func_warning "complete static linking is impossible in this configuration"
-	  fi
-	  if test -n "$link_static_flag"; then
-	    dlopen_self=$dlopen_self_static
-	  fi
-	  prefer_static_libs=yes
-	  ;;
-	-static)
-	  if test -z "$pic_flag" && test -n "$link_static_flag"; then
-	    dlopen_self=$dlopen_self_static
-	  fi
-	  prefer_static_libs=built
-	  ;;
-	-static-libtool-libs)
-	  if test -z "$pic_flag" && test -n "$link_static_flag"; then
-	    dlopen_self=$dlopen_self_static
-	  fi
-	  prefer_static_libs=yes
-	  ;;
-	esac
-	build_libtool_libs=no
-	build_old_libs=yes
-	break
-	;;
-      esac
-    done
-
-    # See if our shared archives depend on static archives.
-    test -n "$old_archive_from_new_cmds" && build_old_libs=yes
-
-    # Go through the arguments, transforming them on the way.
-    while test "$#" -gt 0; do
-      arg=$1
-      shift
-      func_quote_arg pretty,unquoted "$arg"
-      qarg=$func_quote_arg_unquoted_result
-      func_append libtool_args " $func_quote_arg_result"
-
-      # If the previous option needs an argument, assign it.
-      if test -n "$prev"; then
-	case $prev in
-	output)
-	  func_append compile_command " @OUTPUT@"
-	  func_append finalize_command " @OUTPUT@"
-	  ;;
-	esac
-
-	case $prev in
-	bindir)
-	  bindir=$arg
-	  prev=
-	  continue
-	  ;;
-	dlfiles|dlprefiles)
-	  $preload || {
-	    # Add the symbol object into the linking commands.
-	    func_append compile_command " @SYMFILE@"
-	    func_append finalize_command " @SYMFILE@"
-	    preload=:
-	  }
-	  case $arg in
-	  *.la | *.lo) ;;  # We handle these cases below.
-	  force)
-	    if test no = "$dlself"; then
-	      dlself=needless
-	      export_dynamic=yes
-	    fi
-	    prev=
-	    continue
-	    ;;
-	  self)
-	    if test dlprefiles = "$prev"; then
-	      dlself=yes
-	    elif test dlfiles = "$prev" && test yes != "$dlopen_self"; then
-	      dlself=yes
-	    else
-	      dlself=needless
-	      export_dynamic=yes
-	    fi
-	    prev=
-	    continue
-	    ;;
-	  *)
-	    if test dlfiles = "$prev"; then
-	      func_append dlfiles " $arg"
-	    else
-	      func_append dlprefiles " $arg"
-	    fi
-	    prev=
-	    continue
-	    ;;
-	  esac
-	  ;;
-	expsyms)
-	  export_symbols=$arg
-	  test -f "$arg" \
-	    || func_fatal_error "symbol file '$arg' does not exist"
-	  prev=
-	  continue
-	  ;;
-	expsyms_regex)
-	  export_symbols_regex=$arg
-	  prev=
-	  continue
-	  ;;
-	framework)
-	  case $host in
-	    *-*-darwin*)
-	      case "$deplibs " in
-		*" $qarg.ltframework "*) ;;
-		*) func_append deplibs " $qarg.ltframework" # this is fixed later
-		   ;;
-	      esac
-	      ;;
-	  esac
-	  prev=
-	  continue
-	  ;;
-	inst_prefix)
-	  inst_prefix_dir=$arg
-	  prev=
-	  continue
-	  ;;
-	mllvm)
-	  # Clang does not use LLVM to link, so we can simply discard any
-	  # '-mllvm $arg' options when doing the link step.
-	  prev=
-	  continue
-	  ;;
-	objectlist)
-	  if test -f "$arg"; then
-	    save_arg=$arg
-	    moreargs=
-	    for fil in `cat "$save_arg"`
-	    do
-#	      func_append moreargs " $fil"
-	      arg=$fil
-	      # A libtool-controlled object.
-
-	      # Check to see that this really is a libtool object.
-	      if func_lalib_unsafe_p "$arg"; then
-		pic_object=
-		non_pic_object=
-
-		# Read the .lo file
-		func_source "$arg"
-
-		if test -z "$pic_object" ||
-		   test -z "$non_pic_object" ||
-		   test none = "$pic_object" &&
-		   test none = "$non_pic_object"; then
-		  func_fatal_error "cannot find name of object for '$arg'"
-		fi
-
-		# Extract subdirectory from the argument.
-		func_dirname "$arg" "/" ""
-		xdir=$func_dirname_result
-
-		if test none != "$pic_object"; then
-		  # Prepend the subdirectory the object is found in.
-		  pic_object=$xdir$pic_object
-
-		  if test dlfiles = "$prev"; then
-		    if test yes = "$build_libtool_libs" && test yes = "$dlopen_support"; then
-		      func_append dlfiles " $pic_object"
-		      prev=
-		      continue
-		    else
-		      # If libtool objects are unsupported, then we need to preload.
-		      prev=dlprefiles
-		    fi
-		  fi
-
-		  # CHECK ME:  I think I busted this.  -Ossama
-		  if test dlprefiles = "$prev"; then
-		    # Preload the old-style object.
-		    func_append dlprefiles " $pic_object"
-		    prev=
-		  fi
-
-		  # A PIC object.
-		  func_append libobjs " $pic_object"
-		  arg=$pic_object
-		fi
-
-		# Non-PIC object.
-		if test none != "$non_pic_object"; then
-		  # Prepend the subdirectory the object is found in.
-		  non_pic_object=$xdir$non_pic_object
-
-		  # A standard non-PIC object
-		  func_append non_pic_objects " $non_pic_object"
-		  if test -z "$pic_object" || test none = "$pic_object"; then
-		    arg=$non_pic_object
-		  fi
-		else
-		  # If the PIC object exists, use it instead.
-		  # $xdir was prepended to $pic_object above.
-		  non_pic_object=$pic_object
-		  func_append non_pic_objects " $non_pic_object"
-		fi
-	      else
-		# Only an error if not doing a dry-run.
-		if $opt_dry_run; then
-		  # Extract subdirectory from the argument.
-		  func_dirname "$arg" "/" ""
-		  xdir=$func_dirname_result
-
-		  func_lo2o "$arg"
-		  pic_object=$xdir$objdir/$func_lo2o_result
-		  non_pic_object=$xdir$func_lo2o_result
-		  func_append libobjs " $pic_object"
-		  func_append non_pic_objects " $non_pic_object"
-	        else
-		  func_fatal_error "'$arg' is not a valid libtool object"
-		fi
-	      fi
-	    done
-	  else
-	    func_fatal_error "link input file '$arg' does not exist"
-	  fi
-	  arg=$save_arg
-	  prev=
-	  continue
-	  ;;
-	os2dllname)
-	  os2dllname=$arg
-	  prev=
-	  continue
-	  ;;
-	precious_regex)
-	  precious_files_regex=$arg
-	  prev=
-	  continue
-	  ;;
-	release)
-	  release=-$arg
-	  prev=
-	  continue
-	  ;;
-	rpath | xrpath)
-	  # We need an absolute path.
-	  case $arg in
-	  [\\/]* | [A-Za-z]:[\\/]*) ;;
-	  *)
-	    func_fatal_error "only absolute run-paths are allowed"
-	    ;;
-	  esac
-	  if test rpath = "$prev"; then
-	    case "$rpath " in
-	    *" $arg "*) ;;
-	    *) func_append rpath " $arg" ;;
-	    esac
-	  else
-	    case "$xrpath " in
-	    *" $arg "*) ;;
-	    *) func_append xrpath " $arg" ;;
-	    esac
-	  fi
-	  prev=
-	  continue
-	  ;;
-	shrext)
-	  shrext_cmds=$arg
-	  prev=
-	  continue
-	  ;;
-	weak)
-	  func_append weak_libs " $arg"
-	  prev=
-	  continue
-	  ;;
-	xassembler)
-	  func_append compiler_flags " -Xassembler $qarg"
-	  prev=
-	  func_append compile_command " -Xassembler $qarg"
-	  func_append finalize_command " -Xassembler $qarg"
-	  continue
-	  ;;
-	xcclinker)
-	  func_append linker_flags " $qarg"
-	  func_append compiler_flags " $qarg"
-	  prev=
-	  func_append compile_command " $qarg"
-	  func_append finalize_command " $qarg"
-	  continue
-	  ;;
-	xcompiler)
-	  func_append compiler_flags " $qarg"
-	  prev=
-	  func_append compile_command " $qarg"
-	  func_append finalize_command " $qarg"
-	  continue
-	  ;;
-	xlinker)
-	  func_append linker_flags " $qarg"
-	  func_append compiler_flags " $wl$qarg"
-	  prev=
-	  func_append compile_command " $wl$qarg"
-	  func_append finalize_command " $wl$qarg"
-	  continue
-	  ;;
-	*)
-	  eval "$prev=\"\$arg\""
-	  prev=
-	  continue
-	  ;;
-	esac
-      fi # test -n "$prev"
-
-      prevarg=$arg
-
-      case $arg in
-      -all-static)
-	if test -n "$link_static_flag"; then
-	  # See comment for -static flag below, for more details.
-	  func_append compile_command " $link_static_flag"
-	  func_append finalize_command " $link_static_flag"
-	fi
-	continue
-	;;
-
-      -allow-undefined)
-	# FIXME: remove this flag sometime in the future.
-	func_fatal_error "'-allow-undefined' must not be used because it is the default"
-	;;
-
-      -avoid-version)
-	avoid_version=yes
-	continue
-	;;
-
-      -bindir)
-	prev=bindir
-	continue
-	;;
-
-      -dlopen)
-	prev=dlfiles
-	continue
-	;;
-
-      -dlpreopen)
-	prev=dlprefiles
-	continue
-	;;
-
-      -export-dynamic)
-	export_dynamic=yes
-	continue
-	;;
-
-      -export-symbols | -export-symbols-regex)
-	if test -n "$export_symbols" || test -n "$export_symbols_regex"; then
-	  func_fatal_error "more than one -exported-symbols argument is not allowed"
-	fi
-	if test X-export-symbols = "X$arg"; then
-	  prev=expsyms
-	else
-	  prev=expsyms_regex
-	fi
-	continue
-	;;
-
-      -framework)
-	prev=framework
-	continue
-	;;
-
-      -inst-prefix-dir)
-	prev=inst_prefix
-	continue
-	;;
-
-      # The native IRIX linker understands -LANG:*, -LIST:* and -LNO:*
-      # so, if we see these flags be careful not to treat them like -L
-      -L[A-Z][A-Z]*:*)
-	case $with_gcc/$host in
-	no/*-*-irix* | /*-*-irix*)
-	  func_append compile_command " $arg"
-	  func_append finalize_command " $arg"
-	  ;;
-	esac
-	continue
-	;;
-
-      -L*)
-	func_stripname "-L" '' "$arg"
-	if test -z "$func_stripname_result"; then
-	  if test "$#" -gt 0; then
-	    func_fatal_error "require no space between '-L' and '$1'"
-	  else
-	    func_fatal_error "need path for '-L' option"
-	  fi
-	fi
-	func_resolve_sysroot "$func_stripname_result"
-	dir=$func_resolve_sysroot_result
-	# We need an absolute path.
-	case $dir in
-	[\\/]* | [A-Za-z]:[\\/]*) ;;
-	*)
-	  absdir=`cd "$dir" && pwd`
-	  test -z "$absdir" && \
-	    func_fatal_error "cannot determine absolute directory name of '$dir'"
-	  dir=$absdir
-	  ;;
-	esac
-	case "$deplibs " in
-	*" -L$dir "* | *" $arg "*)
-	  # Will only happen for absolute or sysroot arguments
-	  ;;
-	*)
-	  # Preserve sysroot, but never include relative directories
-	  case $dir in
-	    [\\/]* | [A-Za-z]:[\\/]* | =*) func_append deplibs " $arg" ;;
-	    *) func_append deplibs " -L$dir" ;;
-	  esac
-	  func_append lib_search_path " $dir"
-	  ;;
-	esac
-	case $host in
-	*-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*)
-	  testbindir=`$ECHO "$dir" | $SED 's*/lib$*/bin*'`
-	  case :$dllsearchpath: in
-	  *":$dir:"*) ;;
-	  ::) dllsearchpath=$dir;;
-	  *) func_append dllsearchpath ":$dir";;
-	  esac
-	  case :$dllsearchpath: in
-	  *":$testbindir:"*) ;;
-	  ::) dllsearchpath=$testbindir;;
-	  *) func_append dllsearchpath ":$testbindir";;
-	  esac
-	  ;;
-	esac
-	continue
-	;;
-
-      -l*)
-	if test X-lc = "X$arg" || test X-lm = "X$arg"; then
-	  case $host in
-	  *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-beos* | *-cegcc* | *-*-haiku*)
-	    # These systems don't actually have a C or math library (as such)
-	    continue
-	    ;;
-	  *-*-os2*)
-	    # These systems don't actually have a C library (as such)
-	    test X-lc = "X$arg" && continue
-	    ;;
-	  *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-bitrig* | *-*-midnightbsd*)
-	    # Do not include libc due to us having libc/libc_r.
-	    test X-lc = "X$arg" && continue
-	    ;;
-	  *-*-rhapsody* | *-*-darwin1.[012])
-	    # Rhapsody C and math libraries are in the System framework
-	    func_append deplibs " System.ltframework"
-	    continue
-	    ;;
-	  *-*-sco3.2v5* | *-*-sco5v6*)
-	    # Causes problems with __ctype
-	    test X-lc = "X$arg" && continue
-	    ;;
-	  *-*-sysv4.2uw2* | *-*-sysv5* | *-*-unixware* | *-*-OpenUNIX*)
-	    # Compiler inserts libc in the correct place for threads to work
-	    test X-lc = "X$arg" && continue
-	    ;;
-	  esac
-	elif test X-lc_r = "X$arg"; then
-	 case $host in
-	 *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-bitrig* | *-*-midnightbsd*)
-	   # Do not include libc_r directly, use -pthread flag.
-	   continue
-	   ;;
-	 esac
-	fi
-	func_append deplibs " $arg"
-	continue
-	;;
-
-      -mllvm)
-	prev=mllvm
-	continue
-	;;
-
-      -module)
-	module=yes
-	continue
-	;;
-
-      # Tru64 UNIX uses -model [arg] to determine the layout of C++
-      # classes, name mangling, and exception handling.
-      # Darwin uses the -arch flag to determine output architecture.
-      -model|-arch|-isysroot|--sysroot)
-	func_append compiler_flags " $arg"
-	func_append compile_command " $arg"
-	func_append finalize_command " $arg"
-	prev=xcompiler
-	continue
-	;;
-     # Solaris ld rejects as of 11.4. Refer to Oracle bug 22985199.
-     -pthread)
-	case $host in
-	  *solaris2*) ;;
-	  *)
-	    case "$new_inherited_linker_flags " in
-	        *" $arg "*) ;;
-	        * ) func_append new_inherited_linker_flags " $arg" ;;
-	    esac
-	  ;;
-	esac
-	continue
-	;;
-      -mt|-mthreads|-kthread|-Kthread|-pthreads|--thread-safe \
-      |-threads|-fopenmp|-openmp|-mp|-xopenmp|-omp|-qsmp=*)
-	func_append compiler_flags " $arg"
-	func_append compile_command " $arg"
-	func_append finalize_command " $arg"
-	case "$new_inherited_linker_flags " in
-	    *" $arg "*) ;;
-	    * ) func_append new_inherited_linker_flags " $arg" ;;
-	esac
-	continue
-	;;
-
-      -multi_module)
-	single_module=$wl-multi_module
-	continue
-	;;
-
-      -no-fast-install)
-	fast_install=no
-	continue
-	;;
-
-      -no-install)
-	case $host in
-	*-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-*-darwin* | *-cegcc*)
-	  # The PATH hackery in wrapper scripts is required on Windows
-	  # and Darwin in order for the loader to find any dlls it needs.
-	  func_warning "'-no-install' is ignored for $host"
-	  func_warning "assuming '-no-fast-install' instead"
-	  fast_install=no
-	  ;;
-	*) no_install=yes ;;
-	esac
-	continue
-	;;
-
-      -no-undefined)
-	allow_undefined=no
-	continue
-	;;
-
-      -objectlist)
-	prev=objectlist
-	continue
-	;;
-
-      -os2dllname)
-	prev=os2dllname
-	continue
-	;;
-
-      -o) prev=output ;;
-
-      -precious-files-regex)
-	prev=precious_regex
-	continue
-	;;
-
-      -release)
-	prev=release
-	continue
-	;;
-
-      -rpath)
-	prev=rpath
-	continue
-	;;
-
-      -R)
-	prev=xrpath
-	continue
-	;;
-
-      -R*)
-	func_stripname '-R' '' "$arg"
-	dir=$func_stripname_result
-	# We need an absolute path.
-	case $dir in
-	[\\/]* | [A-Za-z]:[\\/]*) ;;
-	=*)
-	  func_stripname '=' '' "$dir"
-	  dir=$lt_sysroot$func_stripname_result
-	  ;;
-	*)
-	  func_fatal_error "only absolute run-paths are allowed"
-	  ;;
-	esac
-	case "$xrpath " in
-	*" $dir "*) ;;
-	*) func_append xrpath " $dir" ;;
-	esac
-	continue
-	;;
-
-      -shared)
-	# The effects of -shared are defined in a previous loop.
-	continue
-	;;
-
-      -shrext)
-	prev=shrext
-	continue
-	;;
-
-      -static | -static-libtool-libs)
-	# The effects of -static are defined in a previous loop.
-	# We used to do the same as -all-static on platforms that
-	# didn't have a PIC flag, but the assumption that the effects
-	# would be equivalent was wrong.  It would break on at least
-	# Digital Unix and AIX.
-	continue
-	;;
-
-      -thread-safe)
-	thread_safe=yes
-	continue
-	;;
-
-      -version-info)
-	prev=vinfo
-	continue
-	;;
-
-      -version-number)
-	prev=vinfo
-	vinfo_number=yes
-	continue
-	;;
-
-      -weak)
-        prev=weak
-	continue
-	;;
-
-      -Wc,*)
-	func_stripname '-Wc,' '' "$arg"
-	args=$func_stripname_result
-	arg=
-	save_ifs=$IFS; IFS=,
-	for flag in $args; do
-	  IFS=$save_ifs
-          func_quote_arg pretty "$flag"
-	  func_append arg " $func_quote_arg_result"
-	  func_append compiler_flags " $func_quote_arg_result"
-	done
-	IFS=$save_ifs
-	func_stripname ' ' '' "$arg"
-	arg=$func_stripname_result
-	;;
-
-      -Wl,*)
-	func_stripname '-Wl,' '' "$arg"
-	args=$func_stripname_result
-	arg=
-	save_ifs=$IFS; IFS=,
-	for flag in $args; do
-	  IFS=$save_ifs
-          func_quote_arg pretty "$flag"
-	  func_append arg " $wl$func_quote_arg_result"
-	  func_append compiler_flags " $wl$func_quote_arg_result"
-	  func_append linker_flags " $func_quote_arg_result"
-	done
-	IFS=$save_ifs
-	func_stripname ' ' '' "$arg"
-	arg=$func_stripname_result
-	;;
-
-      -Xassembler)
-        prev=xassembler
-        continue
-        ;;
-
-      -Xcompiler)
-	prev=xcompiler
-	continue
-	;;
-
-      -Xlinker)
-	prev=xlinker
-	continue
-	;;
-
-      -XCClinker)
-	prev=xcclinker
-	continue
-	;;
-
-      # -msg_* for osf cc
-      -msg_*)
-	func_quote_arg pretty "$arg"
-	arg=$func_quote_arg_result
-	;;
-
-      # Flags to be passed through unchanged, with rationale:
-      # -64, -mips[0-9]      enable 64-bit mode for the SGI compiler
-      # -r[0-9][0-9]*        specify processor for the SGI compiler
-      # -xarch=*, -xtarget=* enable 64-bit mode for the Sun compiler
-      # +DA*, +DD*           enable 64-bit mode for the HP compiler
-      # -q*                  compiler args for the IBM compiler
-      # -m*, -t[45]*, -txscale* architecture-specific flags for GCC
-      # -F/path              path to uninstalled frameworks, gcc on darwin
-      # -p, -pg, --coverage, -fprofile-*  profiling flags for GCC
-      # -fstack-protector*   stack protector flags for GCC
-      # @file                GCC response files
-      # -tp=*                Portland pgcc target processor selection
-      # --sysroot=*          for sysroot support
-      # -O*, -g*, -flto*, -fwhopr*, -fuse-linker-plugin GCC link-time optimization
-      # -specs=*             GCC specs files
-      # -stdlib=*            select c++ std lib with clang
-      # -fsanitize=*         Clang/GCC memory and address sanitizer
-      # -fuse-ld=*           Linker select flags for GCC
-      # -Wa,*                Pass flags directly to the assembler
-      -64|-mips[0-9]|-r[0-9][0-9]*|-xarch=*|-xtarget=*|+DA*|+DD*|-q*|-m*| \
-      -t[45]*|-txscale*|-p|-pg|--coverage|-fprofile-*|-F*|@*|-tp=*|--sysroot=*| \
-      -O*|-g*|-flto*|-fwhopr*|-fuse-linker-plugin|-fstack-protector*|-stdlib=*| \
-      -specs=*|-fsanitize=*|-fuse-ld=*|-Wa,*)
-        func_quote_arg pretty "$arg"
-	arg=$func_quote_arg_result
-        func_append compile_command " $arg"
-        func_append finalize_command " $arg"
-        func_append compiler_flags " $arg"
-        continue
-        ;;
-
-      -Z*)
-        if test os2 = "`expr $host : '.*\(os2\)'`"; then
-          # OS/2 uses -Zxxx to specify OS/2-specific options
-	  compiler_flags="$compiler_flags $arg"
-	  func_append compile_command " $arg"
-	  func_append finalize_command " $arg"
-	  case $arg in
-	  -Zlinker | -Zstack)
-	    prev=xcompiler
-	    ;;
-	  esac
-	  continue
-        else
-	  # Otherwise treat like 'Some other compiler flag' below
-	  func_quote_arg pretty "$arg"
-	  arg=$func_quote_arg_result
-        fi
-	;;
-
-      # Some other compiler flag.
-      -* | +*)
-        func_quote_arg pretty "$arg"
-	arg=$func_quote_arg_result
-	;;
-
-      *.$objext)
-	# A standard object.
-	func_append objs " $arg"
-	;;
-
-      *.lo)
-	# A libtool-controlled object.
-
-	# Check to see that this really is a libtool object.
-	if func_lalib_unsafe_p "$arg"; then
-	  pic_object=
-	  non_pic_object=
-
-	  # Read the .lo file
-	  func_source "$arg"
-
-	  if test -z "$pic_object" ||
-	     test -z "$non_pic_object" ||
-	     test none = "$pic_object" &&
-	     test none = "$non_pic_object"; then
-	    func_fatal_error "cannot find name of object for '$arg'"
-	  fi
-
-	  # Extract subdirectory from the argument.
-	  func_dirname "$arg" "/" ""
-	  xdir=$func_dirname_result
-
-	  test none = "$pic_object" || {
-	    # Prepend the subdirectory the object is found in.
-	    pic_object=$xdir$pic_object
-
-	    if test dlfiles = "$prev"; then
-	      if test yes = "$build_libtool_libs" && test yes = "$dlopen_support"; then
-		func_append dlfiles " $pic_object"
-		prev=
-		continue
-	      else
-		# If libtool objects are unsupported, then we need to preload.
-		prev=dlprefiles
-	      fi
-	    fi
-
-	    # CHECK ME:  I think I busted this.  -Ossama
-	    if test dlprefiles = "$prev"; then
-	      # Preload the old-style object.
-	      func_append dlprefiles " $pic_object"
-	      prev=
-	    fi
-
-	    # A PIC object.
-	    func_append libobjs " $pic_object"
-	    arg=$pic_object
-	  }
-
-	  # Non-PIC object.
-	  if test none != "$non_pic_object"; then
-	    # Prepend the subdirectory the object is found in.
-	    non_pic_object=$xdir$non_pic_object
-
-	    # A standard non-PIC object
-	    func_append non_pic_objects " $non_pic_object"
-	    if test -z "$pic_object" || test none = "$pic_object"; then
-	      arg=$non_pic_object
-	    fi
-	  else
-	    # If the PIC object exists, use it instead.
-	    # $xdir was prepended to $pic_object above.
-	    non_pic_object=$pic_object
-	    func_append non_pic_objects " $non_pic_object"
-	  fi
-	else
-	  # Only an error if not doing a dry-run.
-	  if $opt_dry_run; then
-	    # Extract subdirectory from the argument.
-	    func_dirname "$arg" "/" ""
-	    xdir=$func_dirname_result
-
-	    func_lo2o "$arg"
-	    pic_object=$xdir$objdir/$func_lo2o_result
-	    non_pic_object=$xdir$func_lo2o_result
-	    func_append libobjs " $pic_object"
-	    func_append non_pic_objects " $non_pic_object"
-	  else
-	    func_fatal_error "'$arg' is not a valid libtool object"
-	  fi
-	fi
-	;;
-
-      *.$libext)
-	# An archive.
-	func_append deplibs " $arg"
-	func_append old_deplibs " $arg"
-	continue
-	;;
-
-      *.la)
-	# A libtool-controlled library.
-
-	func_resolve_sysroot "$arg"
-	if test dlfiles = "$prev"; then
-	  # This library was specified with -dlopen.
-	  func_append dlfiles " $func_resolve_sysroot_result"
-	  prev=
-	elif test dlprefiles = "$prev"; then
-	  # The library was specified with -dlpreopen.
-	  func_append dlprefiles " $func_resolve_sysroot_result"
-	  prev=
-	else
-	  func_append deplibs " $func_resolve_sysroot_result"
-	fi
-	continue
-	;;
-
-      # Some other compiler argument.
-      *)
-	# Unknown arguments in both finalize_command and compile_command need
-	# to be aesthetically quoted because they are evaled later.
-	func_quote_arg pretty "$arg"
-	arg=$func_quote_arg_result
-	;;
-      esac # arg
-
-      # Now actually substitute the argument into the commands.
-      if test -n "$arg"; then
-	func_append compile_command " $arg"
-	func_append finalize_command " $arg"
-      fi
-    done # argument parsing loop
-
-    test -n "$prev" && \
-      func_fatal_help "the '$prevarg' option requires an argument"
-
-    if test yes = "$export_dynamic" && test -n "$export_dynamic_flag_spec"; then
-      eval arg=\"$export_dynamic_flag_spec\"
-      func_append compile_command " $arg"
-      func_append finalize_command " $arg"
-    fi
-
-    oldlibs=
-    # calculate the name of the file, without its directory
-    func_basename "$output"
-    outputname=$func_basename_result
-    libobjs_save=$libobjs
-
-    if test -n "$shlibpath_var"; then
-      # get the directories listed in $shlibpath_var
-      eval shlib_search_path=\`\$ECHO \"\$$shlibpath_var\" \| \$SED \'s/:/ /g\'\`
-    else
-      shlib_search_path=
-    fi
-    eval sys_lib_search_path=\"$sys_lib_search_path_spec\"
-    eval sys_lib_dlsearch_path=\"$sys_lib_dlsearch_path_spec\"
-
-    # Definition is injected by LT_CONFIG during libtool generation.
-    func_munge_path_list sys_lib_dlsearch_path "$LT_SYS_LIBRARY_PATH"
-
-    func_dirname "$output" "/" ""
-    output_objdir=$func_dirname_result$objdir
-    func_to_tool_file "$output_objdir/"
-    tool_output_objdir=$func_to_tool_file_result
-    # Create the object directory.
-    func_mkdir_p "$output_objdir"
-
-    # Determine the type of output
-    case $output in
-    "")
-      func_fatal_help "you must specify an output file"
-      ;;
-    *.$libext) linkmode=oldlib ;;
-    *.lo | *.$objext) linkmode=obj ;;
-    *.la) linkmode=lib ;;
-    *) linkmode=prog ;; # Anything else should be a program.
-    esac
-
-    specialdeplibs=
-
-    libs=
-    # Find all interdependent deplibs by searching for libraries
-    # that are linked more than once (e.g. -la -lb -la)
-    for deplib in $deplibs; do
-      if $opt_preserve_dup_deps; then
-	case "$libs " in
-	*" $deplib "*) func_append specialdeplibs " $deplib" ;;
-	esac
-      fi
-      func_append libs " $deplib"
-    done
-
-    if test lib = "$linkmode"; then
-      libs="$predeps $libs $compiler_lib_search_path $postdeps"
-
-      # Compute libraries that are listed more than once in $predeps
-      # $postdeps and mark them as special (i.e., whose duplicates are
-      # not to be eliminated).
-      pre_post_deps=
-      if $opt_duplicate_compiler_generated_deps; then
-	for pre_post_dep in $predeps $postdeps; do
-	  case "$pre_post_deps " in
-	  *" $pre_post_dep "*) func_append specialdeplibs " $pre_post_deps" ;;
-	  esac
-	  func_append pre_post_deps " $pre_post_dep"
-	done
-      fi
-      pre_post_deps=
-    fi
-
-    deplibs=
-    newdependency_libs=
-    newlib_search_path=
-    need_relink=no # whether we're linking any uninstalled libtool libraries
-    notinst_deplibs= # not-installed libtool libraries
-    notinst_path= # paths that contain not-installed libtool libraries
-
-    case $linkmode in
-    lib)
-	passes="conv dlpreopen link"
-	for file in $dlfiles $dlprefiles; do
-	  case $file in
-	  *.la) ;;
-	  *)
-	    func_fatal_help "libraries can '-dlopen' only libtool libraries: $file"
-	    ;;
-	  esac
-	done
-	;;
-    prog)
-	compile_deplibs=
-	finalize_deplibs=
-	alldeplibs=false
-	newdlfiles=
-	newdlprefiles=
-	passes="conv scan dlopen dlpreopen link"
-	;;
-    *)  passes="conv"
-	;;
-    esac
-
-    for pass in $passes; do
-      # The preopen pass in lib mode reverses $deplibs; put it back here
-      # so that -L comes before libs that need it for instance...
-      if test lib,link = "$linkmode,$pass"; then
-	## FIXME: Find the place where the list is rebuilt in the wrong
-	##        order, and fix it there properly
-        tmp_deplibs=
-	for deplib in $deplibs; do
-	  tmp_deplibs="$deplib $tmp_deplibs"
-	done
-	deplibs=$tmp_deplibs
-      fi
-
-      if test lib,link = "$linkmode,$pass" ||
-	 test prog,scan = "$linkmode,$pass"; then
-	libs=$deplibs
-	deplibs=
-      fi
-      if test prog = "$linkmode"; then
-	case $pass in
-	dlopen) libs=$dlfiles ;;
-	dlpreopen) libs=$dlprefiles ;;
-	link) libs="$deplibs %DEPLIBS% $dependency_libs" ;;
-	esac
-      fi
-      if test lib,dlpreopen = "$linkmode,$pass"; then
-	# Collect and forward deplibs of preopened libtool libs
-	for lib in $dlprefiles; do
-	  # Ignore non-libtool-libs
-	  dependency_libs=
-	  func_resolve_sysroot "$lib"
-	  case $lib in
-	  *.la)	func_source "$func_resolve_sysroot_result" ;;
-	  esac
-
-	  # Collect preopened libtool deplibs, except any this library
-	  # has declared as weak libs
-	  for deplib in $dependency_libs; do
-	    func_basename "$deplib"
-            deplib_base=$func_basename_result
-	    case " $weak_libs " in
-	    *" $deplib_base "*) ;;
-	    *) func_append deplibs " $deplib" ;;
-	    esac
-	  done
-	done
-	libs=$dlprefiles
-      fi
-      if test dlopen = "$pass"; then
-	# Collect dlpreopened libraries
-	save_deplibs=$deplibs
-	deplibs=
-      fi
-
-      for deplib in $libs; do
-	lib=
-	found=false
-	case $deplib in
-	-mt|-mthreads|-kthread|-Kthread|-pthread|-pthreads|--thread-safe \
-        |-threads|-fopenmp|-openmp|-mp|-xopenmp|-omp|-qsmp=*)
-	  if test prog,link = "$linkmode,$pass"; then
-	    compile_deplibs="$deplib $compile_deplibs"
-	    finalize_deplibs="$deplib $finalize_deplibs"
-	  else
-	    func_append compiler_flags " $deplib"
-	    if test lib = "$linkmode"; then
-		case "$new_inherited_linker_flags " in
-		    *" $deplib "*) ;;
-		    * ) func_append new_inherited_linker_flags " $deplib" ;;
-		esac
-	    fi
-	  fi
-	  continue
-	  ;;
-	-l*)
-	  if test lib != "$linkmode" && test prog != "$linkmode"; then
-	    func_warning "'-l' is ignored for archives/objects"
-	    continue
-	  fi
-	  func_stripname '-l' '' "$deplib"
-	  name=$func_stripname_result
-	  if test lib = "$linkmode"; then
-	    searchdirs="$newlib_search_path $lib_search_path $compiler_lib_search_dirs $sys_lib_search_path $shlib_search_path"
-	  else
-	    searchdirs="$newlib_search_path $lib_search_path $sys_lib_search_path $shlib_search_path"
-	  fi
-	  for searchdir in $searchdirs; do
-	    for search_ext in .la $std_shrext .so .a; do
-	      # Search the libtool library
-	      lib=$searchdir/lib$name$search_ext
-	      if test -f "$lib"; then
-		if test .la = "$search_ext"; then
-		  found=:
-		else
-		  found=false
-		fi
-		break 2
-	      fi
-	    done
-	  done
-	  if $found; then
-	    # deplib is a libtool library
-	    # If $allow_libtool_libs_with_static_runtimes && $deplib is a stdlib,
-	    # We need to do some special things here, and not later.
-	    if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-	      case " $predeps $postdeps " in
-	      *" $deplib "*)
-		if func_lalib_p "$lib"; then
-		  library_names=
-		  old_library=
-		  func_source "$lib"
-		  for l in $old_library $library_names; do
-		    ll=$l
-		  done
-		  if test "X$ll" = "X$old_library"; then # only static version available
-		    found=false
-		    func_dirname "$lib" "" "."
-		    ladir=$func_dirname_result
-		    lib=$ladir/$old_library
-		    if test prog,link = "$linkmode,$pass"; then
-		      compile_deplibs="$deplib $compile_deplibs"
-		      finalize_deplibs="$deplib $finalize_deplibs"
-		    else
-		      deplibs="$deplib $deplibs"
-		      test lib = "$linkmode" && newdependency_libs="$deplib $newdependency_libs"
-		    fi
-		    continue
-		  fi
-		fi
-		;;
-	      *) ;;
-	      esac
-	    fi
-	  else
-	    # deplib doesn't seem to be a libtool library
-	    if test prog,link = "$linkmode,$pass"; then
-	      compile_deplibs="$deplib $compile_deplibs"
-	      finalize_deplibs="$deplib $finalize_deplibs"
-	    else
-	      deplibs="$deplib $deplibs"
-	      test lib = "$linkmode" && newdependency_libs="$deplib $newdependency_libs"
-	    fi
-	    continue
-	  fi
-	  ;; # -l
-	*.ltframework)
-	  if test prog,link = "$linkmode,$pass"; then
-	    compile_deplibs="$deplib $compile_deplibs"
-	    finalize_deplibs="$deplib $finalize_deplibs"
-	  else
-	    deplibs="$deplib $deplibs"
-	    if test lib = "$linkmode"; then
-		case "$new_inherited_linker_flags " in
-		    *" $deplib "*) ;;
-		    * ) func_append new_inherited_linker_flags " $deplib" ;;
-		esac
-	    fi
-	  fi
-	  continue
-	  ;;
-	-L*)
-	  case $linkmode in
-	  lib)
-	    deplibs="$deplib $deplibs"
-	    test conv = "$pass" && continue
-	    newdependency_libs="$deplib $newdependency_libs"
-	    func_stripname '-L' '' "$deplib"
-	    func_resolve_sysroot "$func_stripname_result"
-	    func_append newlib_search_path " $func_resolve_sysroot_result"
-	    ;;
-	  prog)
-	    if test conv = "$pass"; then
-	      deplibs="$deplib $deplibs"
-	      continue
-	    fi
-	    if test scan = "$pass"; then
-	      deplibs="$deplib $deplibs"
-	    else
-	      compile_deplibs="$deplib $compile_deplibs"
-	      finalize_deplibs="$deplib $finalize_deplibs"
-	    fi
-	    func_stripname '-L' '' "$deplib"
-	    func_resolve_sysroot "$func_stripname_result"
-	    func_append newlib_search_path " $func_resolve_sysroot_result"
-	    ;;
-	  *)
-	    func_warning "'-L' is ignored for archives/objects"
-	    ;;
-	  esac # linkmode
-	  continue
-	  ;; # -L
-	-R*)
-	  if test link = "$pass"; then
-	    func_stripname '-R' '' "$deplib"
-	    func_resolve_sysroot "$func_stripname_result"
-	    dir=$func_resolve_sysroot_result
-	    # Make sure the xrpath contains only unique directories.
-	    case "$xrpath " in
-	    *" $dir "*) ;;
-	    *) func_append xrpath " $dir" ;;
-	    esac
-	  fi
-	  deplibs="$deplib $deplibs"
-	  continue
-	  ;;
-	*.la)
-	  func_resolve_sysroot "$deplib"
-	  lib=$func_resolve_sysroot_result
-	  ;;
-	*.$libext)
-	  if test conv = "$pass"; then
-	    deplibs="$deplib $deplibs"
-	    continue
-	  fi
-	  case $linkmode in
-	  lib)
-	    # Linking convenience modules into shared libraries is allowed,
-	    # but linking other static libraries is non-portable.
-	    case " $dlpreconveniencelibs " in
-	    *" $deplib "*) ;;
-	    *)
-	      valid_a_lib=false
-	      case $deplibs_check_method in
-		match_pattern*)
-		  set dummy $deplibs_check_method; shift
-		  match_pattern_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"`
-		  if eval "\$ECHO \"$deplib\"" 2>/dev/null | $SED 10q \
-		    | $EGREP "$match_pattern_regex" > /dev/null; then
-		    valid_a_lib=:
-		  fi
-		;;
-		pass_all)
-		  valid_a_lib=:
-		;;
-	      esac
-	      if $valid_a_lib; then
-		echo
-		$ECHO "*** Warning: Linking the shared library $output against the"
-		$ECHO "*** static library $deplib is not portable!"
-		deplibs="$deplib $deplibs"
-	      else
-		echo
-		$ECHO "*** Warning: Trying to link with static lib archive $deplib."
-		echo "*** I have the capability to make that library automatically link in when"
-		echo "*** you link to this library.  But I can only do this if you have a"
-		echo "*** shared version of the library, which you do not appear to have"
-		echo "*** because the file extensions .$libext of this argument makes me believe"
-		echo "*** that it is just a static archive that I should not use here."
-	      fi
-	      ;;
-	    esac
-	    continue
-	    ;;
-	  prog)
-	    if test link != "$pass"; then
-	      deplibs="$deplib $deplibs"
-	    else
-	      compile_deplibs="$deplib $compile_deplibs"
-	      finalize_deplibs="$deplib $finalize_deplibs"
-	    fi
-	    continue
-	    ;;
-	  esac # linkmode
-	  ;; # *.$libext
-	*.lo | *.$objext)
-	  if test conv = "$pass"; then
-	    deplibs="$deplib $deplibs"
-	  elif test prog = "$linkmode"; then
-	    if test dlpreopen = "$pass" || test yes != "$dlopen_support" || test no = "$build_libtool_libs"; then
-	      # If there is no dlopen support or we're linking statically,
-	      # we need to preload.
-	      func_append newdlprefiles " $deplib"
-	      compile_deplibs="$deplib $compile_deplibs"
-	      finalize_deplibs="$deplib $finalize_deplibs"
-	    else
-	      func_append newdlfiles " $deplib"
-	    fi
-	  fi
-	  continue
-	  ;;
-	%DEPLIBS%)
-	  alldeplibs=:
-	  continue
-	  ;;
-	esac # case $deplib
-
-	$found || test -f "$lib" \
-	  || func_fatal_error "cannot find the library '$lib' or unhandled argument '$deplib'"
-
-	# Check to see that this really is a libtool archive.
-	func_lalib_unsafe_p "$lib" \
-	  || func_fatal_error "'$lib' is not a valid libtool archive"
-
-	func_dirname "$lib" "" "."
-	ladir=$func_dirname_result
-
-	dlname=
-	dlopen=
-	dlpreopen=
-	libdir=
-	library_names=
-	old_library=
-	inherited_linker_flags=
-	# If the library was installed with an old release of libtool,
-	# it will not redefine variables installed, or shouldnotlink
-	installed=yes
-	shouldnotlink=no
-	avoidtemprpath=
-
-
-	# Read the .la file
-	func_source "$lib"
-
-	# Convert "-framework foo" to "foo.ltframework"
-	if test -n "$inherited_linker_flags"; then
-	  tmp_inherited_linker_flags=`$ECHO "$inherited_linker_flags" | $SED 's/-framework \([^ $]*\)/\1.ltframework/g'`
-	  for tmp_inherited_linker_flag in $tmp_inherited_linker_flags; do
-	    case " $new_inherited_linker_flags " in
-	      *" $tmp_inherited_linker_flag "*) ;;
-	      *) func_append new_inherited_linker_flags " $tmp_inherited_linker_flag";;
-	    esac
-	  done
-	fi
-	dependency_libs=`$ECHO " $dependency_libs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	if test lib,link = "$linkmode,$pass" ||
-	   test prog,scan = "$linkmode,$pass" ||
-	   { test prog != "$linkmode" && test lib != "$linkmode"; }; then
-	  test -n "$dlopen" && func_append dlfiles " $dlopen"
-	  test -n "$dlpreopen" && func_append dlprefiles " $dlpreopen"
-	fi
-
-	if test conv = "$pass"; then
-	  # Only check for convenience libraries
-	  deplibs="$lib $deplibs"
-	  if test -z "$libdir"; then
-	    if test -z "$old_library"; then
-	      func_fatal_error "cannot find name of link library for '$lib'"
-	    fi
-	    # It is a libtool convenience library, so add in its objects.
-	    func_append convenience " $ladir/$objdir/$old_library"
-	    func_append old_convenience " $ladir/$objdir/$old_library"
-	  elif test prog != "$linkmode" && test lib != "$linkmode"; then
-	    func_fatal_error "'$lib' is not a convenience library"
-	  fi
-	  tmp_libs=
-	  for deplib in $dependency_libs; do
-	    deplibs="$deplib $deplibs"
-	    if $opt_preserve_dup_deps; then
-	      case "$tmp_libs " in
-	      *" $deplib "*) func_append specialdeplibs " $deplib" ;;
-	      esac
-	    fi
-	    func_append tmp_libs " $deplib"
-	  done
-	  continue
-	fi # $pass = conv
-
-
-	# Get the name of the library we link against.
-	linklib=
-	if test -n "$old_library" &&
-	   { test yes = "$prefer_static_libs" ||
-	     test built,no = "$prefer_static_libs,$installed"; }; then
-	  linklib=$old_library
-	else
-	  for l in $old_library $library_names; do
-	    linklib=$l
-	  done
-	fi
-	if test -z "$linklib"; then
-	  func_fatal_error "cannot find name of link library for '$lib'"
-	fi
-
-	# This library was specified with -dlopen.
-	if test dlopen = "$pass"; then
-	  test -z "$libdir" \
-	    && func_fatal_error "cannot -dlopen a convenience library: '$lib'"
-	  if test -z "$dlname" ||
-	     test yes != "$dlopen_support" ||
-	     test no = "$build_libtool_libs"
-	  then
-	    # If there is no dlname, no dlopen support or we're linking
-	    # statically, we need to preload.  We also need to preload any
-	    # dependent libraries so libltdl's deplib preloader doesn't
-	    # bomb out in the load deplibs phase.
-	    func_append dlprefiles " $lib $dependency_libs"
-	  else
-	    func_append newdlfiles " $lib"
-	  fi
-	  continue
-	fi # $pass = dlopen
-
-	# We need an absolute path.
-	case $ladir in
-	[\\/]* | [A-Za-z]:[\\/]*) abs_ladir=$ladir ;;
-	*)
-	  abs_ladir=`cd "$ladir" && pwd`
-	  if test -z "$abs_ladir"; then
-	    func_warning "cannot determine absolute directory name of '$ladir'"
-	    func_warning "passing it literally to the linker, although it might fail"
-	    abs_ladir=$ladir
-	  fi
-	  ;;
-	esac
-	func_basename "$lib"
-	laname=$func_basename_result
-
-	# Find the relevant object directory and library name.
-	if test yes = "$installed"; then
-	  if test ! -f "$lt_sysroot$libdir/$linklib" && test -f "$abs_ladir/$linklib"; then
-	    func_warning "library '$lib' was moved."
-	    dir=$ladir
-	    absdir=$abs_ladir
-	    libdir=$abs_ladir
-	  else
-	    dir=$lt_sysroot$libdir
-	    absdir=$lt_sysroot$libdir
-	  fi
-	  test yes = "$hardcode_automatic" && avoidtemprpath=yes
-	else
-	  if test ! -f "$ladir/$objdir/$linklib" && test -f "$abs_ladir/$linklib"; then
-	    dir=$ladir
-	    absdir=$abs_ladir
-	    # Remove this search path later
-	    func_append notinst_path " $abs_ladir"
-	  else
-	    dir=$ladir/$objdir
-	    absdir=$abs_ladir/$objdir
-	    # Remove this search path later
-	    func_append notinst_path " $abs_ladir"
-	  fi
-	fi # $installed = yes
-	func_stripname 'lib' '.la' "$laname"
-	name=$func_stripname_result
-
-	# This library was specified with -dlpreopen.
-	if test dlpreopen = "$pass"; then
-	  if test -z "$libdir" && test prog = "$linkmode"; then
-	    func_fatal_error "only libraries may -dlpreopen a convenience library: '$lib'"
-	  fi
-	  case $host in
-	    # special handling for platforms with PE-DLLs.
-	    *cygwin* | *mingw* | *cegcc* )
-	      # Linker will automatically link against shared library if both
-	      # static and shared are present.  Therefore, ensure we extract
-	      # symbols from the import library if a shared library is present
-	      # (otherwise, the dlopen module name will be incorrect).  We do
-	      # this by putting the import library name into $newdlprefiles.
-	      # We recover the dlopen module name by 'saving' the la file
-	      # name in a special purpose variable, and (later) extracting the
-	      # dlname from the la file.
-	      if test -n "$dlname"; then
-	        func_tr_sh "$dir/$linklib"
-	        eval "libfile_$func_tr_sh_result=\$abs_ladir/\$laname"
-	        func_append newdlprefiles " $dir/$linklib"
-	      else
-	        func_append newdlprefiles " $dir/$old_library"
-	        # Keep a list of preopened convenience libraries to check
-	        # that they are being used correctly in the link pass.
-	        test -z "$libdir" && \
-	          func_append dlpreconveniencelibs " $dir/$old_library"
-	      fi
-	    ;;
-	    * )
-	      # Prefer using a static library (so that no silly _DYNAMIC symbols
-	      # are required to link).
-	      if test -n "$old_library"; then
-	        func_append newdlprefiles " $dir/$old_library"
-	        # Keep a list of preopened convenience libraries to check
-	        # that they are being used correctly in the link pass.
-	        test -z "$libdir" && \
-	          func_append dlpreconveniencelibs " $dir/$old_library"
-	      # Otherwise, use the dlname, so that lt_dlopen finds it.
-	      elif test -n "$dlname"; then
-	        func_append newdlprefiles " $dir/$dlname"
-	      else
-	        func_append newdlprefiles " $dir/$linklib"
-	      fi
-	    ;;
-	  esac
-	fi # $pass = dlpreopen
-
-	if test -z "$libdir"; then
-	  # Link the convenience library
-	  if test lib = "$linkmode"; then
-	    deplibs="$dir/$old_library $deplibs"
-	  elif test prog,link = "$linkmode,$pass"; then
-	    compile_deplibs="$dir/$old_library $compile_deplibs"
-	    finalize_deplibs="$dir/$old_library $finalize_deplibs"
-	  else
-	    deplibs="$lib $deplibs" # used for prog,scan pass
-	  fi
-	  continue
-	fi
-
-
-	if test prog = "$linkmode" && test link != "$pass"; then
-	  func_append newlib_search_path " $ladir"
-	  deplibs="$lib $deplibs"
-
-	  linkalldeplibs=false
-	  if test no != "$link_all_deplibs" || test -z "$library_names" ||
-	     test no = "$build_libtool_libs"; then
-	    linkalldeplibs=:
-	  fi
-
-	  tmp_libs=
-	  for deplib in $dependency_libs; do
-	    case $deplib in
-	    -L*) func_stripname '-L' '' "$deplib"
-	         func_resolve_sysroot "$func_stripname_result"
-	         func_append newlib_search_path " $func_resolve_sysroot_result"
-		 ;;
-	    esac
-	    # Need to link against all dependency_libs?
-	    if $linkalldeplibs; then
-	      deplibs="$deplib $deplibs"
-	    else
-	      # Need to hardcode shared library paths
-	      # or/and link against static libraries
-	      newdependency_libs="$deplib $newdependency_libs"
-	    fi
-	    if $opt_preserve_dup_deps; then
-	      case "$tmp_libs " in
-	      *" $deplib "*) func_append specialdeplibs " $deplib" ;;
-	      esac
-	    fi
-	    func_append tmp_libs " $deplib"
-	  done # for deplib
-	  continue
-	fi # $linkmode = prog...
-
-	if test prog,link = "$linkmode,$pass"; then
-	  if test -n "$library_names" &&
-	     { { test no = "$prefer_static_libs" ||
-	         test built,yes = "$prefer_static_libs,$installed"; } ||
-	       test -z "$old_library"; }; then
-	    # We need to hardcode the library path
-	    if test -n "$shlibpath_var" && test -z "$avoidtemprpath"; then
-	      # Make sure the rpath contains only unique directories.
-	      case $temp_rpath: in
-	      *"$absdir:"*) ;;
-	      *) func_append temp_rpath "$absdir:" ;;
-	      esac
-	    fi
-
-	    # Hardcode the library path.
-	    # Skip directories that are in the system default run-time
-	    # search path.
-	    case " $sys_lib_dlsearch_path " in
-	    *" $absdir "*) ;;
-	    *)
-	      case "$compile_rpath " in
-	      *" $absdir "*) ;;
-	      *) func_append compile_rpath " $absdir" ;;
-	      esac
-	      ;;
-	    esac
-	    case " $sys_lib_dlsearch_path " in
-	    *" $libdir "*) ;;
-	    *)
-	      case "$finalize_rpath " in
-	      *" $libdir "*) ;;
-	      *) func_append finalize_rpath " $libdir" ;;
-	      esac
-	      ;;
-	    esac
-	  fi # $linkmode,$pass = prog,link...
-
-	  if $alldeplibs &&
-	     { test pass_all = "$deplibs_check_method" ||
-	       { test yes = "$build_libtool_libs" &&
-		 test -n "$library_names"; }; }; then
-	    # We only need to search for static libraries
-	    continue
-	  fi
-	fi
-
-	link_static=no # Whether the deplib will be linked statically
-	use_static_libs=$prefer_static_libs
-	if test built = "$use_static_libs" && test yes = "$installed"; then
-	  use_static_libs=no
-	fi
-	if test -n "$library_names" &&
-	   { test no = "$use_static_libs" || test -z "$old_library"; }; then
-	  case $host in
-	  *cygwin* | *mingw* | *cegcc* | *os2*)
-	      # No point in relinking DLLs because paths are not encoded
-	      func_append notinst_deplibs " $lib"
-	      need_relink=no
-	    ;;
-	  *)
-	    if test no = "$installed"; then
-	      func_append notinst_deplibs " $lib"
-	      need_relink=yes
-	    fi
-	    ;;
-	  esac
-	  # This is a shared library
-
-	  # Warn about portability, can't link against -module's on some
-	  # systems (darwin).  Don't bleat about dlopened modules though!
-	  dlopenmodule=
-	  for dlpremoduletest in $dlprefiles; do
-	    if test "X$dlpremoduletest" = "X$lib"; then
-	      dlopenmodule=$dlpremoduletest
-	      break
-	    fi
-	  done
-	  if test -z "$dlopenmodule" && test yes = "$shouldnotlink" && test link = "$pass"; then
-	    echo
-	    if test prog = "$linkmode"; then
-	      $ECHO "*** Warning: Linking the executable $output against the loadable module"
-	    else
-	      $ECHO "*** Warning: Linking the shared library $output against the loadable module"
-	    fi
-	    $ECHO "*** $linklib is not portable!"
-	  fi
-	  if test lib = "$linkmode" &&
-	     test yes = "$hardcode_into_libs"; then
-	    # Hardcode the library path.
-	    # Skip directories that are in the system default run-time
-	    # search path.
-	    case " $sys_lib_dlsearch_path " in
-	    *" $absdir "*) ;;
-	    *)
-	      case "$compile_rpath " in
-	      *" $absdir "*) ;;
-	      *) func_append compile_rpath " $absdir" ;;
-	      esac
-	      ;;
-	    esac
-	    case " $sys_lib_dlsearch_path " in
-	    *" $libdir "*) ;;
-	    *)
-	      case "$finalize_rpath " in
-	      *" $libdir "*) ;;
-	      *) func_append finalize_rpath " $libdir" ;;
-	      esac
-	      ;;
-	    esac
-	  fi
-
-	  if test -n "$old_archive_from_expsyms_cmds"; then
-	    # figure out the soname
-	    set dummy $library_names
-	    shift
-	    realname=$1
-	    shift
-	    libname=`eval "\\$ECHO \"$libname_spec\""`
-	    # use dlname if we got it. it's perfectly good, no?
-	    if test -n "$dlname"; then
-	      soname=$dlname
-	    elif test -n "$soname_spec"; then
-	      # bleh windows
-	      case $host in
-	      *cygwin* | mingw* | *cegcc* | *os2*)
-	        func_arith $current - $age
-		major=$func_arith_result
-		versuffix=-$major
-		;;
-	      esac
-	      eval soname=\"$soname_spec\"
-	    else
-	      soname=$realname
-	    fi
-
-	    # Make a new name for the extract_expsyms_cmds to use
-	    soroot=$soname
-	    func_basename "$soroot"
-	    soname=$func_basename_result
-	    func_stripname 'lib' '.dll' "$soname"
-	    newlib=libimp-$func_stripname_result.a
-
-	    # If the library has no export list, then create one now
-	    if test -f "$output_objdir/$soname-def"; then :
-	    else
-	      func_verbose "extracting exported symbol list from '$soname'"
-	      func_execute_cmds "$extract_expsyms_cmds" 'exit $?'
-	    fi
-
-	    # Create $newlib
-	    if test -f "$output_objdir/$newlib"; then :; else
-	      func_verbose "generating import library for '$soname'"
-	      func_execute_cmds "$old_archive_from_expsyms_cmds" 'exit $?'
-	    fi
-	    # make sure the library variables are pointing to the new library
-	    dir=$output_objdir
-	    linklib=$newlib
-	  fi # test -n "$old_archive_from_expsyms_cmds"
-
-	  if test prog = "$linkmode" || test relink != "$opt_mode"; then
-	    add_shlibpath=
-	    add_dir=
-	    add=
-	    lib_linked=yes
-	    case $hardcode_action in
-	    immediate | unsupported)
-	      if test no = "$hardcode_direct"; then
-		add=$dir/$linklib
-		case $host in
-		  *-*-sco3.2v5.0.[024]*) add_dir=-L$dir ;;
-		  *-*-sysv4*uw2*) add_dir=-L$dir ;;
-		  *-*-sysv5OpenUNIX* | *-*-sysv5UnixWare7.[01].[10]* | \
-		    *-*-unixware7*) add_dir=-L$dir ;;
-		  *-*-darwin* )
-		    # if the lib is a (non-dlopened) module then we cannot
-		    # link against it, someone is ignoring the earlier warnings
-		    if /usr/bin/file -L $add 2> /dev/null |
-			 $GREP ": [^:]* bundle" >/dev/null; then
-		      if test "X$dlopenmodule" != "X$lib"; then
-			$ECHO "*** Warning: lib $linklib is a module, not a shared library"
-			if test -z "$old_library"; then
-			  echo
-			  echo "*** And there doesn't seem to be a static archive available"
-			  echo "*** The link will probably fail, sorry"
-			else
-			  add=$dir/$old_library
-			fi
-		      elif test -n "$old_library"; then
-			add=$dir/$old_library
-		      fi
-		    fi
-		esac
-	      elif test no = "$hardcode_minus_L"; then
-		case $host in
-		*-*-sunos*) add_shlibpath=$dir ;;
-		esac
-		add_dir=-L$dir
-		add=-l$name
-	      elif test no = "$hardcode_shlibpath_var"; then
-		add_shlibpath=$dir
-		add=-l$name
-	      else
-		lib_linked=no
-	      fi
-	      ;;
-	    relink)
-	      if test yes = "$hardcode_direct" &&
-	         test no = "$hardcode_direct_absolute"; then
-		add=$dir/$linklib
-	      elif test yes = "$hardcode_minus_L"; then
-		add_dir=-L$absdir
-		# Try looking first in the location we're being installed to.
-		if test -n "$inst_prefix_dir"; then
-		  case $libdir in
-		    [\\/]*)
-		      func_append add_dir " -L$inst_prefix_dir$libdir"
-		      ;;
-		  esac
-		fi
-		add=-l$name
-	      elif test yes = "$hardcode_shlibpath_var"; then
-		add_shlibpath=$dir
-		add=-l$name
-	      else
-		lib_linked=no
-	      fi
-	      ;;
-	    *) lib_linked=no ;;
-	    esac
-
-	    if test yes != "$lib_linked"; then
-	      func_fatal_configuration "unsupported hardcode properties"
-	    fi
-
-	    if test -n "$add_shlibpath"; then
-	      case :$compile_shlibpath: in
-	      *":$add_shlibpath:"*) ;;
-	      *) func_append compile_shlibpath "$add_shlibpath:" ;;
-	      esac
-	    fi
-	    if test prog = "$linkmode"; then
-	      test -n "$add_dir" && compile_deplibs="$add_dir $compile_deplibs"
-	      test -n "$add" && compile_deplibs="$add $compile_deplibs"
-	    else
-	      test -n "$add_dir" && deplibs="$add_dir $deplibs"
-	      test -n "$add" && deplibs="$add $deplibs"
-	      if test yes != "$hardcode_direct" &&
-		 test yes != "$hardcode_minus_L" &&
-		 test yes = "$hardcode_shlibpath_var"; then
-		case :$finalize_shlibpath: in
-		*":$libdir:"*) ;;
-		*) func_append finalize_shlibpath "$libdir:" ;;
-		esac
-	      fi
-	    fi
-	  fi
-
-	  if test prog = "$linkmode" || test relink = "$opt_mode"; then
-	    add_shlibpath=
-	    add_dir=
-	    add=
-	    # Finalize command for both is simple: just hardcode it.
-	    if test yes = "$hardcode_direct" &&
-	       test no = "$hardcode_direct_absolute"; then
-	      add=$libdir/$linklib
-	    elif test yes = "$hardcode_minus_L"; then
-	      add_dir=-L$libdir
-	      add=-l$name
-	    elif test yes = "$hardcode_shlibpath_var"; then
-	      case :$finalize_shlibpath: in
-	      *":$libdir:"*) ;;
-	      *) func_append finalize_shlibpath "$libdir:" ;;
-	      esac
-	      add=-l$name
-	    elif test yes = "$hardcode_automatic"; then
-	      if test -n "$inst_prefix_dir" &&
-		 test -f "$inst_prefix_dir$libdir/$linklib"; then
-		add=$inst_prefix_dir$libdir/$linklib
-	      else
-		add=$libdir/$linklib
-	      fi
-	    else
-	      # We cannot seem to hardcode it, guess we'll fake it.
-	      add_dir=-L$libdir
-	      # Try looking first in the location we're being installed to.
-	      if test -n "$inst_prefix_dir"; then
-		case $libdir in
-		  [\\/]*)
-		    func_append add_dir " -L$inst_prefix_dir$libdir"
-		    ;;
-		esac
-	      fi
-	      add=-l$name
-	    fi
-
-	    if test prog = "$linkmode"; then
-	      test -n "$add_dir" && finalize_deplibs="$add_dir $finalize_deplibs"
-	      test -n "$add" && finalize_deplibs="$add $finalize_deplibs"
-	    else
-	      test -n "$add_dir" && deplibs="$add_dir $deplibs"
-	      test -n "$add" && deplibs="$add $deplibs"
-	    fi
-	  fi
-	elif test prog = "$linkmode"; then
-	  # Here we assume that one of hardcode_direct or hardcode_minus_L
-	  # is not unsupported.  This is valid on all known static and
-	  # shared platforms.
-	  if test unsupported != "$hardcode_direct"; then
-	    test -n "$old_library" && linklib=$old_library
-	    compile_deplibs="$dir/$linklib $compile_deplibs"
-	    finalize_deplibs="$dir/$linklib $finalize_deplibs"
-	  else
-	    compile_deplibs="-l$name -L$dir $compile_deplibs"
-	    finalize_deplibs="-l$name -L$dir $finalize_deplibs"
-	  fi
-	elif test yes = "$build_libtool_libs"; then
-	  # Not a shared library
-	  if test pass_all != "$deplibs_check_method"; then
-	    # We're trying link a shared library against a static one
-	    # but the system doesn't support it.
-
-	    # Just print a warning and add the library to dependency_libs so
-	    # that the program can be linked against the static library.
-	    echo
-	    $ECHO "*** Warning: This system cannot link to static lib archive $lib."
-	    echo "*** I have the capability to make that library automatically link in when"
-	    echo "*** you link to this library.  But I can only do this if you have a"
-	    echo "*** shared version of the library, which you do not appear to have."
-	    if test yes = "$module"; then
-	      echo "*** But as you try to build a module library, libtool will still create "
-	      echo "*** a static module, that should work as long as the dlopening application"
-	      echo "*** is linked with the -dlopen flag to resolve symbols at runtime."
-	      if test -z "$global_symbol_pipe"; then
-		echo
-		echo "*** However, this would only work if libtool was able to extract symbol"
-		echo "*** lists from a program, using 'nm' or equivalent, but libtool could"
-		echo "*** not find such a program.  So, this module is probably useless."
-		echo "*** 'nm' from GNU binutils and a full rebuild may help."
-	      fi
-	      if test no = "$build_old_libs"; then
-		build_libtool_libs=module
-		build_old_libs=yes
-	      else
-		build_libtool_libs=no
-	      fi
-	    fi
-	  else
-	    deplibs="$dir/$old_library $deplibs"
-	    link_static=yes
-	  fi
-	fi # link shared/static library?
-
-	if test lib = "$linkmode"; then
-	  if test -n "$dependency_libs" &&
-	     { test yes != "$hardcode_into_libs" ||
-	       test yes = "$build_old_libs" ||
-	       test yes = "$link_static"; }; then
-	    # Extract -R from dependency_libs
-	    temp_deplibs=
-	    for libdir in $dependency_libs; do
-	      case $libdir in
-	      -R*) func_stripname '-R' '' "$libdir"
-	           temp_xrpath=$func_stripname_result
-		   case " $xrpath " in
-		   *" $temp_xrpath "*) ;;
-		   *) func_append xrpath " $temp_xrpath";;
-		   esac;;
-	      *) func_append temp_deplibs " $libdir";;
-	      esac
-	    done
-	    dependency_libs=$temp_deplibs
-	  fi
-
-	  func_append newlib_search_path " $absdir"
-	  # Link against this library
-	  test no = "$link_static" && newdependency_libs="$abs_ladir/$laname $newdependency_libs"
-	  # ... and its dependency_libs
-	  tmp_libs=
-	  for deplib in $dependency_libs; do
-	    newdependency_libs="$deplib $newdependency_libs"
-	    case $deplib in
-              -L*) func_stripname '-L' '' "$deplib"
-                   func_resolve_sysroot "$func_stripname_result";;
-              *) func_resolve_sysroot "$deplib" ;;
-            esac
-	    if $opt_preserve_dup_deps; then
-	      case "$tmp_libs " in
-	      *" $func_resolve_sysroot_result "*)
-                func_append specialdeplibs " $func_resolve_sysroot_result" ;;
-	      esac
-	    fi
-	    func_append tmp_libs " $func_resolve_sysroot_result"
-	  done
-
-	  if test no != "$link_all_deplibs"; then
-	    # Add the search paths of all dependency libraries
-	    for deplib in $dependency_libs; do
-	      path=
-	      case $deplib in
-	      -L*) path=$deplib ;;
-	      *.la)
-	        func_resolve_sysroot "$deplib"
-	        deplib=$func_resolve_sysroot_result
-	        func_dirname "$deplib" "" "."
-		dir=$func_dirname_result
-		# We need an absolute path.
-		case $dir in
-		[\\/]* | [A-Za-z]:[\\/]*) absdir=$dir ;;
-		*)
-		  absdir=`cd "$dir" && pwd`
-		  if test -z "$absdir"; then
-		    func_warning "cannot determine absolute directory name of '$dir'"
-		    absdir=$dir
-		  fi
-		  ;;
-		esac
-		if $GREP "^installed=no" $deplib > /dev/null; then
-		case $host in
-		*-*-darwin*)
-		  depdepl=
-		  eval deplibrary_names=`$SED -n -e 's/^library_names=\(.*\)$/\1/p' $deplib`
-		  if test -n "$deplibrary_names"; then
-		    for tmp in $deplibrary_names; do
-		      depdepl=$tmp
-		    done
-		    if test -f "$absdir/$objdir/$depdepl"; then
-		      depdepl=$absdir/$objdir/$depdepl
-		      darwin_install_name=`$OTOOL -L $depdepl | awk '{if (NR == 2) {print $1;exit}}'`
-                      if test -z "$darwin_install_name"; then
-                          darwin_install_name=`$OTOOL64 -L $depdepl  | awk '{if (NR == 2) {print $1;exit}}'`
-                      fi
-		      func_append compiler_flags " $wl-dylib_file $wl$darwin_install_name:$depdepl"
-		      func_append linker_flags " -dylib_file $darwin_install_name:$depdepl"
-		      path=
-		    fi
-		  fi
-		  ;;
-		*)
-		  path=-L$absdir/$objdir
-		  ;;
-		esac
-		else
-		  eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $deplib`
-		  test -z "$libdir" && \
-		    func_fatal_error "'$deplib' is not a valid libtool archive"
-		  test "$absdir" != "$libdir" && \
-		    func_warning "'$deplib' seems to be moved"
-
-		  path=-L$absdir
-		fi
-		;;
-	      esac
-	      case " $deplibs " in
-	      *" $path "*) ;;
-	      *) deplibs="$path $deplibs" ;;
-	      esac
-	    done
-	  fi # link_all_deplibs != no
-	fi # linkmode = lib
-      done # for deplib in $libs
-      if test link = "$pass"; then
-	if test prog = "$linkmode"; then
-	  compile_deplibs="$new_inherited_linker_flags $compile_deplibs"
-	  finalize_deplibs="$new_inherited_linker_flags $finalize_deplibs"
-	else
-	  compiler_flags="$compiler_flags "`$ECHO " $new_inherited_linker_flags" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	fi
-      fi
-      dependency_libs=$newdependency_libs
-      if test dlpreopen = "$pass"; then
-	# Link the dlpreopened libraries before other libraries
-	for deplib in $save_deplibs; do
-	  deplibs="$deplib $deplibs"
-	done
-      fi
-      if test dlopen != "$pass"; then
-	test conv = "$pass" || {
-	  # Make sure lib_search_path contains only unique directories.
-	  lib_search_path=
-	  for dir in $newlib_search_path; do
-	    case "$lib_search_path " in
-	    *" $dir "*) ;;
-	    *) func_append lib_search_path " $dir" ;;
-	    esac
-	  done
-	  newlib_search_path=
-	}
-
-	if test prog,link = "$linkmode,$pass"; then
-	  vars="compile_deplibs finalize_deplibs"
-	else
-	  vars=deplibs
-	fi
-	for var in $vars dependency_libs; do
-	  # Add libraries to $var in reverse order
-	  eval tmp_libs=\"\$$var\"
-	  new_libs=
-	  for deplib in $tmp_libs; do
-	    # FIXME: Pedantically, this is the right thing to do, so
-	    #        that some nasty dependency loop isn't accidentally
-	    #        broken:
-	    #new_libs="$deplib $new_libs"
-	    # Pragmatically, this seems to cause very few problems in
-	    # practice:
-	    case $deplib in
-	    -L*) new_libs="$deplib $new_libs" ;;
-	    -R*) ;;
-	    *)
-	      # And here is the reason: when a library appears more
-	      # than once as an explicit dependence of a library, or
-	      # is implicitly linked in more than once by the
-	      # compiler, it is considered special, and multiple
-	      # occurrences thereof are not removed.  Compare this
-	      # with having the same library being listed as a
-	      # dependency of multiple other libraries: in this case,
-	      # we know (pedantically, we assume) the library does not
-	      # need to be listed more than once, so we keep only the
-	      # last copy.  This is not always right, but it is rare
-	      # enough that we require users that really mean to play
-	      # such unportable linking tricks to link the library
-	      # using -Wl,-lname, so that libtool does not consider it
-	      # for duplicate removal.
-	      case " $specialdeplibs " in
-	      *" $deplib "*) new_libs="$deplib $new_libs" ;;
-	      *)
-		case " $new_libs " in
-		*" $deplib "*) ;;
-		*) new_libs="$deplib $new_libs" ;;
-		esac
-		;;
-	      esac
-	      ;;
-	    esac
-	  done
-	  tmp_libs=
-	  for deplib in $new_libs; do
-	    case $deplib in
-	    -L*)
-	      case " $tmp_libs " in
-	      *" $deplib "*) ;;
-	      *) func_append tmp_libs " $deplib" ;;
-	      esac
-	      ;;
-	    *) func_append tmp_libs " $deplib" ;;
-	    esac
-	  done
-	  eval $var=\"$tmp_libs\"
-	done # for var
-      fi
-
-      # Add Sun CC postdeps if required:
-      test CXX = "$tagname" && {
-        case $host_os in
-        linux*)
-          case `$CC -V 2>&1 | $SED 5q` in
-          *Sun\ C*) # Sun C++ 5.9
-            func_suncc_cstd_abi
-
-            if test no != "$suncc_use_cstd_abi"; then
-              func_append postdeps ' -library=Cstd -library=Crun'
-            fi
-            ;;
-          esac
-          ;;
-
-        solaris*)
-          func_cc_basename "$CC"
-          case $func_cc_basename_result in
-          CC* | sunCC*)
-            func_suncc_cstd_abi
-
-            if test no != "$suncc_use_cstd_abi"; then
-              func_append postdeps ' -library=Cstd -library=Crun'
-            fi
-            ;;
-          esac
-          ;;
-        esac
-      }
-
-      # Last step: remove runtime libs from dependency_libs
-      # (they stay in deplibs)
-      tmp_libs=
-      for i in $dependency_libs; do
-	case " $predeps $postdeps $compiler_lib_search_path " in
-	*" $i "*)
-	  i=
-	  ;;
-	esac
-	if test -n "$i"; then
-	  func_append tmp_libs " $i"
-	fi
-      done
-      dependency_libs=$tmp_libs
-    done # for pass
-    if test prog = "$linkmode"; then
-      dlfiles=$newdlfiles
-    fi
-    if test prog = "$linkmode" || test lib = "$linkmode"; then
-      dlprefiles=$newdlprefiles
-    fi
-
-    case $linkmode in
-    oldlib)
-      if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then
-	func_warning "'-dlopen' is ignored for archives"
-      fi
-
-      case " $deplibs" in
-      *\ -l* | *\ -L*)
-	func_warning "'-l' and '-L' are ignored for archives" ;;
-      esac
-
-      test -n "$rpath" && \
-	func_warning "'-rpath' is ignored for archives"
-
-      test -n "$xrpath" && \
-	func_warning "'-R' is ignored for archives"
-
-      test -n "$vinfo" && \
-	func_warning "'-version-info/-version-number' is ignored for archives"
-
-      test -n "$release" && \
-	func_warning "'-release' is ignored for archives"
-
-      test -n "$export_symbols$export_symbols_regex" && \
-	func_warning "'-export-symbols' is ignored for archives"
-
-      # Now set the variables for building old libraries.
-      build_libtool_libs=no
-      oldlibs=$output
-      func_append objs "$old_deplibs"
-      ;;
-
-    lib)
-      # Make sure we only generate libraries of the form 'libNAME.la'.
-      case $outputname in
-      lib*)
-	func_stripname 'lib' '.la' "$outputname"
-	name=$func_stripname_result
-	eval shared_ext=\"$shrext_cmds\"
-	eval libname=\"$libname_spec\"
-	;;
-      *)
-	test no = "$module" \
-	  && func_fatal_help "libtool library '$output' must begin with 'lib'"
-
-	if test no != "$need_lib_prefix"; then
-	  # Add the "lib" prefix for modules if required
-	  func_stripname '' '.la' "$outputname"
-	  name=$func_stripname_result
-	  eval shared_ext=\"$shrext_cmds\"
-	  eval libname=\"$libname_spec\"
-	else
-	  func_stripname '' '.la' "$outputname"
-	  libname=$func_stripname_result
-	fi
-	;;
-      esac
-
-      if test -n "$objs"; then
-	if test pass_all != "$deplibs_check_method"; then
-	  func_fatal_error "cannot build libtool library '$output' from non-libtool objects on this host:$objs"
-	else
-	  echo
-	  $ECHO "*** Warning: Linking the shared library $output against the non-libtool"
-	  $ECHO "*** objects $objs is not portable!"
-	  func_append libobjs " $objs"
-	fi
-      fi
-
-      test no = "$dlself" \
-	|| func_warning "'-dlopen self' is ignored for libtool libraries"
-
-      set dummy $rpath
-      shift
-      test 1 -lt "$#" \
-	&& func_warning "ignoring multiple '-rpath's for a libtool library"
-
-      install_libdir=$1
-
-      oldlibs=
-      if test -z "$rpath"; then
-	if test yes = "$build_libtool_libs"; then
-	  # Building a libtool convenience library.
-	  # Some compilers have problems with a '.al' extension so
-	  # convenience libraries should have the same extension an
-	  # archive normally would.
-	  oldlibs="$output_objdir/$libname.$libext $oldlibs"
-	  build_libtool_libs=convenience
-	  build_old_libs=yes
-	fi
-
-	test -n "$vinfo" && \
-	  func_warning "'-version-info/-version-number' is ignored for convenience libraries"
-
-	test -n "$release" && \
-	  func_warning "'-release' is ignored for convenience libraries"
-      else
-
-	# Parse the version information argument.
-	save_ifs=$IFS; IFS=:
-	set dummy $vinfo 0 0 0
-	shift
-	IFS=$save_ifs
-
-	test -n "$7" && \
-	  func_fatal_help "too many parameters to '-version-info'"
-
-	# convert absolute version numbers to libtool ages
-	# this retains compatibility with .la files and attempts
-	# to make the code below a bit more comprehensible
-
-	case $vinfo_number in
-	yes)
-	  number_major=$1
-	  number_minor=$2
-	  number_revision=$3
-	  #
-	  # There are really only two kinds -- those that
-	  # use the current revision as the major version
-	  # and those that subtract age and use age as
-	  # a minor version.  But, then there is irix
-	  # that has an extra 1 added just for fun
-	  #
-	  case $version_type in
-	  # correct linux to gnu/linux during the next big refactor
-	  darwin|freebsd-elf|linux|midnightbsd-elf|osf|windows|none)
-	    func_arith $number_major + $number_minor
-	    current=$func_arith_result
-	    age=$number_minor
-	    revision=$number_revision
-	    ;;
-	  freebsd-aout|qnx|sunos)
-	    current=$number_major
-	    revision=$number_minor
-	    age=0
-	    ;;
-	  irix|nonstopux)
-	    func_arith $number_major + $number_minor
-	    current=$func_arith_result
-	    age=$number_minor
-	    revision=$number_minor
-	    lt_irix_increment=no
-	    ;;
-	  esac
-	  ;;
-	no)
-	  current=$1
-	  revision=$2
-	  age=$3
-	  ;;
-	esac
-
-	# Check that each of the things are valid numbers.
-	case $current in
-	0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;;
-	*)
-	  func_error "CURRENT '$current' must be a nonnegative integer"
-	  func_fatal_error "'$vinfo' is not valid version information"
-	  ;;
-	esac
-
-	case $revision in
-	0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;;
-	*)
-	  func_error "REVISION '$revision' must be a nonnegative integer"
-	  func_fatal_error "'$vinfo' is not valid version information"
-	  ;;
-	esac
-
-	case $age in
-	0|[1-9]|[1-9][0-9]|[1-9][0-9][0-9]|[1-9][0-9][0-9][0-9]|[1-9][0-9][0-9][0-9][0-9]) ;;
-	*)
-	  func_error "AGE '$age' must be a nonnegative integer"
-	  func_fatal_error "'$vinfo' is not valid version information"
-	  ;;
-	esac
-
-	if test "$age" -gt "$current"; then
-	  func_error "AGE '$age' is greater than the current interface number '$current'"
-	  func_fatal_error "'$vinfo' is not valid version information"
-	fi
-
-	# Calculate the version variables.
-	major=
-	versuffix=
-	verstring=
-	case $version_type in
-	none) ;;
-
-	darwin)
-	  # Like Linux, but with the current version available in
-	  # verstring for coding it into the library header
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=$major.$age.$revision
-	  # Darwin ld doesn't like 0 for these options...
-	  func_arith $current + 1
-	  minor_current=$func_arith_result
-	  xlcverstring="$wl-compatibility_version $wl$minor_current $wl-current_version $wl$minor_current.$revision"
-	  verstring="-compatibility_version $minor_current -current_version $minor_current.$revision"
-          # On Darwin other compilers
-          case $CC in
-              nagfor*)
-                  verstring="$wl-compatibility_version $wl$minor_current $wl-current_version $wl$minor_current.$revision"
-                  ;;
-              *)
-                  verstring="-compatibility_version $minor_current -current_version $minor_current.$revision"
-                  ;;
-          esac
-	  ;;
-
-	freebsd-aout)
-	  major=.$current
-	  versuffix=.$current.$revision
-	  ;;
-
-	freebsd-elf | midnightbsd-elf)
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=$major.$age.$revision
-	  ;;
-
-	irix | nonstopux)
-	  if test no = "$lt_irix_increment"; then
-	    func_arith $current - $age
-	  else
-	    func_arith $current - $age + 1
-	  fi
-	  major=$func_arith_result
-
-	  case $version_type in
-	    nonstopux) verstring_prefix=nonstopux ;;
-	    *)         verstring_prefix=sgi ;;
-	  esac
-	  verstring=$verstring_prefix$major.$revision
-
-	  # Add in all the interfaces that we are compatible with.
-	  loop=$revision
-	  while test 0 -ne "$loop"; do
-	    func_arith $revision - $loop
-	    iface=$func_arith_result
-	    func_arith $loop - 1
-	    loop=$func_arith_result
-	    verstring=$verstring_prefix$major.$iface:$verstring
-	  done
-
-	  # Before this point, $major must not contain '.'.
-	  major=.$major
-	  versuffix=$major.$revision
-	  ;;
-
-	linux) # correct to gnu/linux during the next big refactor
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=$major.$age.$revision
-	  ;;
-
-	osf)
-	  func_arith $current - $age
-	  major=.$func_arith_result
-	  versuffix=.$current.$age.$revision
-	  verstring=$current.$age.$revision
-
-	  # Add in all the interfaces that we are compatible with.
-	  loop=$age
-	  while test 0 -ne "$loop"; do
-	    func_arith $current - $loop
-	    iface=$func_arith_result
-	    func_arith $loop - 1
-	    loop=$func_arith_result
-	    verstring=$verstring:$iface.0
-	  done
-
-	  # Make executables depend on our current version.
-	  func_append verstring ":$current.0"
-	  ;;
-
-	qnx)
-	  major=.$current
-	  versuffix=.$current
-	  ;;
-
-	sco)
-	  major=.$current
-	  versuffix=.$current
-	  ;;
-
-	sunos)
-	  major=.$current
-	  versuffix=.$current.$revision
-	  ;;
-
-	windows)
-	  # Use '-' rather than '.', since we only want one
-	  # extension on DOS 8.3 file systems.
-	  func_arith $current - $age
-	  major=$func_arith_result
-	  versuffix=-$major
-	  ;;
-
-	*)
-	  func_fatal_configuration "unknown library version type '$version_type'"
-	  ;;
-	esac
-
-	# Clear the version info if we defaulted, and they specified a release.
-	if test -z "$vinfo" && test -n "$release"; then
-	  major=
-	  case $version_type in
-	  darwin)
-	    # we can't check for "0.0" in archive_cmds due to quoting
-	    # problems, so we reset it completely
-	    verstring=
-	    ;;
-	  *)
-	    verstring=0.0
-	    ;;
-	  esac
-	  if test no = "$need_version"; then
-	    versuffix=
-	  else
-	    versuffix=.0.0
-	  fi
-	fi
-
-	# Remove version info from name if versioning should be avoided
-	if test yes,no = "$avoid_version,$need_version"; then
-	  major=
-	  versuffix=
-	  verstring=
-	fi
-
-	# Check to see if the archive will have undefined symbols.
-	if test yes = "$allow_undefined"; then
-	  if test unsupported = "$allow_undefined_flag"; then
-	    if test yes = "$build_old_libs"; then
-	      func_warning "undefined symbols not allowed in $host shared libraries; building static only"
-	      build_libtool_libs=no
-	    else
-	      func_fatal_error "can't build $host shared library unless -no-undefined is specified"
-	    fi
-	  fi
-	else
-	  # Don't allow undefined symbols.
-	  allow_undefined_flag=$no_undefined_flag
-	fi
-
-      fi
-
-      func_generate_dlsyms "$libname" "$libname" :
-      func_append libobjs " $symfileobj"
-      test " " = "$libobjs" && libobjs=
-
-      if test relink != "$opt_mode"; then
-	# Remove our outputs, but don't remove object files since they
-	# may have been created when compiling PIC objects.
-	removelist=
-	tempremovelist=`$ECHO "$output_objdir/*"`
-	for p in $tempremovelist; do
-	  case $p in
-	    *.$objext | *.gcno)
-	       ;;
-	    $output_objdir/$outputname | $output_objdir/$libname.* | $output_objdir/$libname$release.*)
-	       if test -n "$precious_files_regex"; then
-		 if $ECHO "$p" | $EGREP -e "$precious_files_regex" >/dev/null 2>&1
-		 then
-		   continue
-		 fi
-	       fi
-	       func_append removelist " $p"
-	       ;;
-	    *) ;;
-	  esac
-	done
-	test -n "$removelist" && \
-	  func_show_eval "${RM}r \$removelist"
-      fi
-
-      # Now set the variables for building old libraries.
-      if test yes = "$build_old_libs" && test convenience != "$build_libtool_libs"; then
-	func_append oldlibs " $output_objdir/$libname.$libext"
-
-	# Transform .lo files to .o files.
-	oldobjs="$objs "`$ECHO "$libobjs" | $SP2NL | $SED "/\.$libext$/d; $lo2o" | $NL2SP`
-      fi
-
-      # Eliminate all temporary directories.
-      #for path in $notinst_path; do
-      #	lib_search_path=`$ECHO "$lib_search_path " | $SED "s% $path % %g"`
-      #	deplibs=`$ECHO "$deplibs " | $SED "s% -L$path % %g"`
-      #	dependency_libs=`$ECHO "$dependency_libs " | $SED "s% -L$path % %g"`
-      #done
-
-      if test -n "$xrpath"; then
-	# If the user specified any rpath flags, then add them.
-	temp_xrpath=
-	for libdir in $xrpath; do
-	  func_replace_sysroot "$libdir"
-	  func_append temp_xrpath " -R$func_replace_sysroot_result"
-	  case "$finalize_rpath " in
-	  *" $libdir "*) ;;
-	  *) func_append finalize_rpath " $libdir" ;;
-	  esac
-	done
-	if test yes != "$hardcode_into_libs" || test yes = "$build_old_libs"; then
-	  dependency_libs="$temp_xrpath $dependency_libs"
-	fi
-      fi
-
-      # Make sure dlfiles contains only unique files that won't be dlpreopened
-      old_dlfiles=$dlfiles
-      dlfiles=
-      for lib in $old_dlfiles; do
-	case " $dlprefiles $dlfiles " in
-	*" $lib "*) ;;
-	*) func_append dlfiles " $lib" ;;
-	esac
-      done
-
-      # Make sure dlprefiles contains only unique files
-      old_dlprefiles=$dlprefiles
-      dlprefiles=
-      for lib in $old_dlprefiles; do
-	case "$dlprefiles " in
-	*" $lib "*) ;;
-	*) func_append dlprefiles " $lib" ;;
-	esac
-      done
-
-      if test yes = "$build_libtool_libs"; then
-	if test -n "$rpath"; then
-	  case $host in
-	  *-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-*-beos* | *-cegcc* | *-*-haiku*)
-	    # these systems don't actually have a c library (as such)!
-	    ;;
-	  *-*-rhapsody* | *-*-darwin1.[012])
-	    # Rhapsody C library is in the System framework
-	    func_append deplibs " System.ltframework"
-	    ;;
-	  *-*-netbsd*)
-	    # Don't link with libc until the a.out ld.so is fixed.
-	    ;;
-	  *-*-openbsd* | *-*-freebsd* | *-*-dragonfly* | *-*-midnightbsd*)
-	    # Do not include libc due to us having libc/libc_r.
-	    ;;
-	  *-*-sco3.2v5* | *-*-sco5v6*)
-	    # Causes problems with __ctype
-	    ;;
-	  *-*-sysv4.2uw2* | *-*-sysv5* | *-*-unixware* | *-*-OpenUNIX*)
-	    # Compiler inserts libc in the correct place for threads to work
-	    ;;
-	  *)
-	    # Add libc to deplibs on all other systems if necessary.
-	    if test yes = "$build_libtool_need_lc"; then
-	      func_append deplibs " -lc"
-	    fi
-	    ;;
-	  esac
-	fi
-
-	# Transform deplibs into only deplibs that can be linked in shared.
-	name_save=$name
-	libname_save=$libname
-	release_save=$release
-	versuffix_save=$versuffix
-	major_save=$major
-	# I'm not sure if I'm treating the release correctly.  I think
-	# release should show up in the -l (ie -lgmp5) so we don't want to
-	# add it in twice.  Is that correct?
-	release=
-	versuffix=
-	major=
-	newdeplibs=
-	droppeddeps=no
-	case $deplibs_check_method in
-	pass_all)
-	  # Don't check for shared/static.  Everything works.
-	  # This might be a little naive.  We might want to check
-	  # whether the library exists or not.  But this is on
-	  # osf3 & osf4 and I'm not really sure... Just
-	  # implementing what was already the behavior.
-	  newdeplibs=$deplibs
-	  ;;
-	test_compile)
-	  # This code stresses the "libraries are programs" paradigm to its
-	  # limits. Maybe even breaks it.  We compile a program, linking it
-	  # against the deplibs as a proxy for the library.  Then we can check
-	  # whether they linked in statically or dynamically with ldd.
-	  $opt_dry_run || $RM conftest.c
-	  cat > conftest.c <<EOF
-	  int main() { return 0; }
-EOF
-	  $opt_dry_run || $RM conftest
-	  if $LTCC $LTCFLAGS -o conftest conftest.c $deplibs; then
-	    ldd_output=`ldd conftest`
-	    for i in $deplibs; do
-	      case $i in
-	      -l*)
-		func_stripname -l '' "$i"
-		name=$func_stripname_result
-		if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-		  case " $predeps $postdeps " in
-		  *" $i "*)
-		    func_append newdeplibs " $i"
-		    i=
-		    ;;
-		  esac
-		fi
-		if test -n "$i"; then
-		  libname=`eval "\\$ECHO \"$libname_spec\""`
-		  deplib_matches=`eval "\\$ECHO \"$library_names_spec\""`
-		  set dummy $deplib_matches; shift
-		  deplib_match=$1
-		  if test `expr "$ldd_output" : ".*$deplib_match"` -ne 0; then
-		    func_append newdeplibs " $i"
-		  else
-		    droppeddeps=yes
-		    echo
-		    $ECHO "*** Warning: dynamic linker does not accept needed library $i."
-		    echo "*** I have the capability to make that library automatically link in when"
-		    echo "*** you link to this library.  But I can only do this if you have a"
-		    echo "*** shared version of the library, which I believe you do not have"
-		    echo "*** because a test_compile did reveal that the linker did not use it for"
-		    echo "*** its dynamic dependency list that programs get resolved with at runtime."
-		  fi
-		fi
-		;;
-	      *)
-		func_append newdeplibs " $i"
-		;;
-	      esac
-	    done
-	  else
-	    # Error occurred in the first compile.  Let's try to salvage
-	    # the situation: Compile a separate program for each library.
-	    for i in $deplibs; do
-	      case $i in
-	      -l*)
-		func_stripname -l '' "$i"
-		name=$func_stripname_result
-		$opt_dry_run || $RM conftest
-		if $LTCC $LTCFLAGS -o conftest conftest.c $i; then
-		  ldd_output=`ldd conftest`
-		  if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-		    case " $predeps $postdeps " in
-		    *" $i "*)
-		      func_append newdeplibs " $i"
-		      i=
-		      ;;
-		    esac
-		  fi
-		  if test -n "$i"; then
-		    libname=`eval "\\$ECHO \"$libname_spec\""`
-		    deplib_matches=`eval "\\$ECHO \"$library_names_spec\""`
-		    set dummy $deplib_matches; shift
-		    deplib_match=$1
-		    if test `expr "$ldd_output" : ".*$deplib_match"` -ne 0; then
-		      func_append newdeplibs " $i"
-		    else
-		      droppeddeps=yes
-		      echo
-		      $ECHO "*** Warning: dynamic linker does not accept needed library $i."
-		      echo "*** I have the capability to make that library automatically link in when"
-		      echo "*** you link to this library.  But I can only do this if you have a"
-		      echo "*** shared version of the library, which you do not appear to have"
-		      echo "*** because a test_compile did reveal that the linker did not use this one"
-		      echo "*** as a dynamic dependency that programs can get resolved with at runtime."
-		    fi
-		  fi
-		else
-		  droppeddeps=yes
-		  echo
-		  $ECHO "*** Warning!  Library $i is needed by this library but I was not able to"
-		  echo "*** make it link in!  You will probably need to install it or some"
-		  echo "*** library that it depends on before this library will be fully"
-		  echo "*** functional.  Installing it before continuing would be even better."
-		fi
-		;;
-	      *)
-		func_append newdeplibs " $i"
-		;;
-	      esac
-	    done
-	  fi
-	  ;;
-	file_magic*)
-	  set dummy $deplibs_check_method; shift
-	  file_magic_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"`
-	  for a_deplib in $deplibs; do
-	    case $a_deplib in
-	    -l*)
-	      func_stripname -l '' "$a_deplib"
-	      name=$func_stripname_result
-	      if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-		case " $predeps $postdeps " in
-		*" $a_deplib "*)
-		  func_append newdeplibs " $a_deplib"
-		  a_deplib=
-		  ;;
-		esac
-	      fi
-	      if test -n "$a_deplib"; then
-		libname=`eval "\\$ECHO \"$libname_spec\""`
-		if test -n "$file_magic_glob"; then
-		  libnameglob=`func_echo_all "$libname" | $SED -e $file_magic_glob`
-		else
-		  libnameglob=$libname
-		fi
-		test yes = "$want_nocaseglob" && nocaseglob=`shopt -p nocaseglob`
-		for i in $lib_search_path $sys_lib_search_path $shlib_search_path; do
-		  if test yes = "$want_nocaseglob"; then
-		    shopt -s nocaseglob
-		    potential_libs=`ls $i/$libnameglob[.-]* 2>/dev/null`
-		    $nocaseglob
-		  else
-		    potential_libs=`ls $i/$libnameglob[.-]* 2>/dev/null`
-		  fi
-		  for potent_lib in $potential_libs; do
-		      # Follow soft links.
-		      if ls -lLd "$potent_lib" 2>/dev/null |
-			 $GREP " -> " >/dev/null; then
-			continue
-		      fi
-		      # The statement above tries to avoid entering an
-		      # endless loop below, in case of cyclic links.
-		      # We might still enter an endless loop, since a link
-		      # loop can be closed while we follow links,
-		      # but so what?
-		      potlib=$potent_lib
-		      while test -h "$potlib" 2>/dev/null; do
-			potliblink=`ls -ld $potlib | $SED 's/.* -> //'`
-			case $potliblink in
-			[\\/]* | [A-Za-z]:[\\/]*) potlib=$potliblink;;
-			*) potlib=`$ECHO "$potlib" | $SED 's|[^/]*$||'`"$potliblink";;
-			esac
-		      done
-		      if eval $file_magic_cmd \"\$potlib\" 2>/dev/null |
-			 $SED -e 10q |
-			 $EGREP "$file_magic_regex" > /dev/null; then
-			func_append newdeplibs " $a_deplib"
-			a_deplib=
-			break 2
-		      fi
-		  done
-		done
-	      fi
-	      if test -n "$a_deplib"; then
-		droppeddeps=yes
-		echo
-		$ECHO "*** Warning: linker path does not have real file for library $a_deplib."
-		echo "*** I have the capability to make that library automatically link in when"
-		echo "*** you link to this library.  But I can only do this if you have a"
-		echo "*** shared version of the library, which you do not appear to have"
-		echo "*** because I did check the linker path looking for a file starting"
-		if test -z "$potlib"; then
-		  $ECHO "*** with $libname but no candidates were found. (...for file magic test)"
-		else
-		  $ECHO "*** with $libname and none of the candidates passed a file format test"
-		  $ECHO "*** using a file magic. Last file checked: $potlib"
-		fi
-	      fi
-	      ;;
-	    *)
-	      # Add a -L argument.
-	      func_append newdeplibs " $a_deplib"
-	      ;;
-	    esac
-	  done # Gone through all deplibs.
-	  ;;
-	match_pattern*)
-	  set dummy $deplibs_check_method; shift
-	  match_pattern_regex=`expr "$deplibs_check_method" : "$1 \(.*\)"`
-	  for a_deplib in $deplibs; do
-	    case $a_deplib in
-	    -l*)
-	      func_stripname -l '' "$a_deplib"
-	      name=$func_stripname_result
-	      if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-		case " $predeps $postdeps " in
-		*" $a_deplib "*)
-		  func_append newdeplibs " $a_deplib"
-		  a_deplib=
-		  ;;
-		esac
-	      fi
-	      if test -n "$a_deplib"; then
-		libname=`eval "\\$ECHO \"$libname_spec\""`
-		for i in $lib_search_path $sys_lib_search_path $shlib_search_path; do
-		  potential_libs=`ls $i/$libname[.-]* 2>/dev/null`
-		  for potent_lib in $potential_libs; do
-		    potlib=$potent_lib # see symlink-check above in file_magic test
-		    if eval "\$ECHO \"$potent_lib\"" 2>/dev/null | $SED 10q | \
-		       $EGREP "$match_pattern_regex" > /dev/null; then
-		      func_append newdeplibs " $a_deplib"
-		      a_deplib=
-		      break 2
-		    fi
-		  done
-		done
-	      fi
-	      if test -n "$a_deplib"; then
-		droppeddeps=yes
-		echo
-		$ECHO "*** Warning: linker path does not have real file for library $a_deplib."
-		echo "*** I have the capability to make that library automatically link in when"
-		echo "*** you link to this library.  But I can only do this if you have a"
-		echo "*** shared version of the library, which you do not appear to have"
-		echo "*** because I did check the linker path looking for a file starting"
-		if test -z "$potlib"; then
-		  $ECHO "*** with $libname but no candidates were found. (...for regex pattern test)"
-		else
-		  $ECHO "*** with $libname and none of the candidates passed a file format test"
-		  $ECHO "*** using a regex pattern. Last file checked: $potlib"
-		fi
-	      fi
-	      ;;
-	    *)
-	      # Add a -L argument.
-	      func_append newdeplibs " $a_deplib"
-	      ;;
-	    esac
-	  done # Gone through all deplibs.
-	  ;;
-	none | unknown | *)
-	  newdeplibs=
-	  tmp_deplibs=`$ECHO " $deplibs" | $SED 's/ -lc$//; s/ -[LR][^ ]*//g'`
-	  if test yes = "$allow_libtool_libs_with_static_runtimes"; then
-	    for i in $predeps $postdeps; do
-	      # can't use Xsed below, because $i might contain '/'
-	      tmp_deplibs=`$ECHO " $tmp_deplibs" | $SED "s|$i||"`
-	    done
-	  fi
-	  case $tmp_deplibs in
-	  *[!\	\ ]*)
-	    echo
-	    if test none = "$deplibs_check_method"; then
-	      echo "*** Warning: inter-library dependencies are not supported in this platform."
-	    else
-	      echo "*** Warning: inter-library dependencies are not known to be supported."
-	    fi
-	    echo "*** All declared inter-library dependencies are being dropped."
-	    droppeddeps=yes
-	    ;;
-	  esac
-	  ;;
-	esac
-	versuffix=$versuffix_save
-	major=$major_save
-	release=$release_save
-	libname=$libname_save
-	name=$name_save
-
-	case $host in
-	*-*-rhapsody* | *-*-darwin1.[012])
-	  # On Rhapsody replace the C library with the System framework
-	  newdeplibs=`$ECHO " $newdeplibs" | $SED 's/ -lc / System.ltframework /'`
-	  ;;
-	esac
-
-	if test yes = "$droppeddeps"; then
-	  if test yes = "$module"; then
-	    echo
-	    echo "*** Warning: libtool could not satisfy all declared inter-library"
-	    $ECHO "*** dependencies of module $libname.  Therefore, libtool will create"
-	    echo "*** a static module, that should work as long as the dlopening"
-	    echo "*** application is linked with the -dlopen flag."
-	    if test -z "$global_symbol_pipe"; then
-	      echo
-	      echo "*** However, this would only work if libtool was able to extract symbol"
-	      echo "*** lists from a program, using 'nm' or equivalent, but libtool could"
-	      echo "*** not find such a program.  So, this module is probably useless."
-	      echo "*** 'nm' from GNU binutils and a full rebuild may help."
-	    fi
-	    if test no = "$build_old_libs"; then
-	      oldlibs=$output_objdir/$libname.$libext
-	      build_libtool_libs=module
-	      build_old_libs=yes
-	    else
-	      build_libtool_libs=no
-	    fi
-	  else
-	    echo "*** The inter-library dependencies that have been dropped here will be"
-	    echo "*** automatically added whenever a program is linked with this library"
-	    echo "*** or is declared to -dlopen it."
-
-	    if test no = "$allow_undefined"; then
-	      echo
-	      echo "*** Since this library must not contain undefined symbols,"
-	      echo "*** because either the platform does not support them or"
-	      echo "*** it was explicitly requested with -no-undefined,"
-	      echo "*** libtool will only create a static version of it."
-	      if test no = "$build_old_libs"; then
-		oldlibs=$output_objdir/$libname.$libext
-		build_libtool_libs=module
-		build_old_libs=yes
-	      else
-		build_libtool_libs=no
-	      fi
-	    fi
-	  fi
-	fi
-	# Done checking deplibs!
-	deplibs=$newdeplibs
-      fi
-      # Time to change all our "foo.ltframework" stuff back to "-framework foo"
-      case $host in
-	*-*-darwin*)
-	  newdeplibs=`$ECHO " $newdeplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	  new_inherited_linker_flags=`$ECHO " $new_inherited_linker_flags" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	  deplibs=`$ECHO " $deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	  ;;
-      esac
-
-      # move library search paths that coincide with paths to not yet
-      # installed libraries to the beginning of the library search list
-      new_libs=
-      for path in $notinst_path; do
-	case " $new_libs " in
-	*" -L$path/$objdir "*) ;;
-	*)
-	  case " $deplibs " in
-	  *" -L$path/$objdir "*)
-	    func_append new_libs " -L$path/$objdir" ;;
-	  esac
-	  ;;
-	esac
-      done
-      for deplib in $deplibs; do
-	case $deplib in
-	-L*)
-	  case " $new_libs " in
-	  *" $deplib "*) ;;
-	  *) func_append new_libs " $deplib" ;;
-	  esac
-	  ;;
-	*) func_append new_libs " $deplib" ;;
-	esac
-      done
-      deplibs=$new_libs
-
-      # All the library-specific variables (install_libdir is set above).
-      library_names=
-      old_library=
-      dlname=
-
-      # Test again, we may have decided not to build it any more
-      if test yes = "$build_libtool_libs"; then
-	# Remove $wl instances when linking with ld.
-	# FIXME: should test the right _cmds variable.
-	case $archive_cmds in
-	  *\$LD\ *) wl= ;;
-        esac
-	if test yes = "$hardcode_into_libs"; then
-	  # Hardcode the library paths
-	  hardcode_libdirs=
-	  dep_rpath=
-	  rpath=$finalize_rpath
-	  test relink = "$opt_mode" || rpath=$compile_rpath$rpath
-	  for libdir in $rpath; do
-	    if test -n "$hardcode_libdir_flag_spec"; then
-	      if test -n "$hardcode_libdir_separator"; then
-		func_replace_sysroot "$libdir"
-		libdir=$func_replace_sysroot_result
-		if test -z "$hardcode_libdirs"; then
-		  hardcode_libdirs=$libdir
-		else
-		  # Just accumulate the unique libdirs.
-		  case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in
-		  *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*)
-		    ;;
-		  *)
-		    func_append hardcode_libdirs "$hardcode_libdir_separator$libdir"
-		    ;;
-		  esac
-		fi
-	      else
-		eval flag=\"$hardcode_libdir_flag_spec\"
-		func_append dep_rpath " $flag"
-	      fi
-	    elif test -n "$runpath_var"; then
-	      case "$perm_rpath " in
-	      *" $libdir "*) ;;
-	      *) func_append perm_rpath " $libdir" ;;
-	      esac
-	    fi
-	  done
-	  # Substitute the hardcoded libdirs into the rpath.
-	  if test -n "$hardcode_libdir_separator" &&
-	     test -n "$hardcode_libdirs"; then
-	    libdir=$hardcode_libdirs
-	    eval "dep_rpath=\"$hardcode_libdir_flag_spec\""
-	  fi
-	  if test -n "$runpath_var" && test -n "$perm_rpath"; then
-	    # We should set the runpath_var.
-	    rpath=
-	    for dir in $perm_rpath; do
-	      func_append rpath "$dir:"
-	    done
-	    eval "$runpath_var='$rpath\$$runpath_var'; export $runpath_var"
-	  fi
-	  test -n "$dep_rpath" && deplibs="$dep_rpath $deplibs"
-	fi
-
-	shlibpath=$finalize_shlibpath
-	test relink = "$opt_mode" || shlibpath=$compile_shlibpath$shlibpath
-	if test -n "$shlibpath"; then
-	  eval "$shlibpath_var='$shlibpath\$$shlibpath_var'; export $shlibpath_var"
-	fi
-
-	# Get the real and link names of the library.
-	eval shared_ext=\"$shrext_cmds\"
-	eval library_names=\"$library_names_spec\"
-	set dummy $library_names
-	shift
-	realname=$1
-	shift
-
-	if test -n "$soname_spec"; then
-	  eval soname=\"$soname_spec\"
-	else
-	  soname=$realname
-	fi
-	if test -z "$dlname"; then
-	  dlname=$soname
-	fi
-
-	lib=$output_objdir/$realname
-	linknames=
-	for link
-	do
-	  func_append linknames " $link"
-	done
-
-	# Use standard objects if they are pic
-	test -z "$pic_flag" && libobjs=`$ECHO "$libobjs" | $SP2NL | $SED "$lo2o" | $NL2SP`
-	test "X$libobjs" = "X " && libobjs=
-
-	delfiles=
-	if test -n "$export_symbols" && test -n "$include_expsyms"; then
-	  $opt_dry_run || cp "$export_symbols" "$output_objdir/$libname.uexp"
-	  export_symbols=$output_objdir/$libname.uexp
-	  func_append delfiles " $export_symbols"
-	fi
-
-	orig_export_symbols=
-	case $host_os in
-	cygwin* | mingw* | cegcc*)
-	  if test -n "$export_symbols" && test -z "$export_symbols_regex"; then
-	    # exporting using user supplied symfile
-	    func_dll_def_p "$export_symbols" || {
-	      # and it's NOT already a .def file. Must figure out
-	      # which of the given symbols are data symbols and tag
-	      # them as such. So, trigger use of export_symbols_cmds.
-	      # export_symbols gets reassigned inside the "prepare
-	      # the list of exported symbols" if statement, so the
-	      # include_expsyms logic still works.
-	      orig_export_symbols=$export_symbols
-	      export_symbols=
-	      always_export_symbols=yes
-	    }
-	  fi
-	  ;;
-	esac
-
-	# Prepare the list of exported symbols
-	if test -z "$export_symbols"; then
-	  if test yes = "$always_export_symbols" || test -n "$export_symbols_regex"; then
-	    func_verbose "generating symbol list for '$libname.la'"
-	    export_symbols=$output_objdir/$libname.exp
-	    $opt_dry_run || $RM $export_symbols
-	    cmds=$export_symbols_cmds
-	    save_ifs=$IFS; IFS='~'
-	    for cmd1 in $cmds; do
-	      IFS=$save_ifs
-	      # Take the normal branch if the nm_file_list_spec branch
-	      # doesn't work or if tool conversion is not needed.
-	      case $nm_file_list_spec~$to_tool_file_cmd in
-		*~func_convert_file_noop | *~func_convert_file_msys_to_w32 | ~*)
-		  try_normal_branch=yes
-		  eval cmd=\"$cmd1\"
-		  func_len " $cmd"
-		  len=$func_len_result
-		  ;;
-		*)
-		  try_normal_branch=no
-		  ;;
-	      esac
-	      if test yes = "$try_normal_branch" \
-		 && { test "$len" -lt "$max_cmd_len" \
-		      || test "$max_cmd_len" -le -1; }
-	      then
-		func_show_eval "$cmd" 'exit $?'
-		skipped_export=false
-	      elif test -n "$nm_file_list_spec"; then
-		func_basename "$output"
-		output_la=$func_basename_result
-		save_libobjs=$libobjs
-		save_output=$output
-		output=$output_objdir/$output_la.nm
-		func_to_tool_file "$output"
-		libobjs=$nm_file_list_spec$func_to_tool_file_result
-		func_append delfiles " $output"
-		func_verbose "creating $NM input file list: $output"
-		for obj in $save_libobjs; do
-		  func_to_tool_file "$obj"
-		  $ECHO "$func_to_tool_file_result"
-		done > "$output"
-		eval cmd=\"$cmd1\"
-		func_show_eval "$cmd" 'exit $?'
-		output=$save_output
-		libobjs=$save_libobjs
-		skipped_export=false
-	      else
-		# The command line is too long to execute in one step.
-		func_verbose "using reloadable object file for export list..."
-		skipped_export=:
-		# Break out early, otherwise skipped_export may be
-		# set to false by a later but shorter cmd.
-		break
-	      fi
-	    done
-	    IFS=$save_ifs
-	    if test -n "$export_symbols_regex" && test : != "$skipped_export"; then
-	      func_show_eval '$EGREP -e "$export_symbols_regex" "$export_symbols" > "${export_symbols}T"'
-	      func_show_eval '$MV "${export_symbols}T" "$export_symbols"'
-	    fi
-	  fi
-	fi
-
-	if test -n "$export_symbols" && test -n "$include_expsyms"; then
-	  tmp_export_symbols=$export_symbols
-	  test -n "$orig_export_symbols" && tmp_export_symbols=$orig_export_symbols
-	  $opt_dry_run || eval '$ECHO "$include_expsyms" | $SP2NL >> "$tmp_export_symbols"'
-	fi
-
-	if test : != "$skipped_export" && test -n "$orig_export_symbols"; then
-	  # The given exports_symbols file has to be filtered, so filter it.
-	  func_verbose "filter symbol list for '$libname.la' to tag DATA exports"
-	  # FIXME: $output_objdir/$libname.filter potentially contains lots of
-	  # 's' commands, which not all seds can handle. GNU sed should be fine
-	  # though. Also, the filter scales superlinearly with the number of
-	  # global variables. join(1) would be nice here, but unfortunately
-	  # isn't a blessed tool.
-	  $opt_dry_run || $SED -e '/[ ,]DATA/!d;s,\(.*\)\([ \,].*\),s|^\1$|\1\2|,' < $export_symbols > $output_objdir/$libname.filter
-	  func_append delfiles " $export_symbols $output_objdir/$libname.filter"
-	  export_symbols=$output_objdir/$libname.def
-	  $opt_dry_run || $SED -f $output_objdir/$libname.filter < $orig_export_symbols > $export_symbols
-	fi
-
-	tmp_deplibs=
-	for test_deplib in $deplibs; do
-	  case " $convenience " in
-	  *" $test_deplib "*) ;;
-	  *)
-	    func_append tmp_deplibs " $test_deplib"
-	    ;;
-	  esac
-	done
-	deplibs=$tmp_deplibs
-
-	if test -n "$convenience"; then
-	  if test -n "$whole_archive_flag_spec" &&
-	    test yes = "$compiler_needs_object" &&
-	    test -z "$libobjs"; then
-	    # extract the archives, so we have objects to list.
-	    # TODO: could optimize this to just extract one archive.
-	    whole_archive_flag_spec=
-	  fi
-	  if test -n "$whole_archive_flag_spec"; then
-	    save_libobjs=$libobjs
-	    eval libobjs=\"\$libobjs $whole_archive_flag_spec\"
-	    test "X$libobjs" = "X " && libobjs=
-	  else
-	    gentop=$output_objdir/${outputname}x
-	    func_append generated " $gentop"
-
-	    func_extract_archives $gentop $convenience
-	    func_append libobjs " $func_extract_archives_result"
-	    test "X$libobjs" = "X " && libobjs=
-	  fi
-	fi
-
-	if test yes = "$thread_safe" && test -n "$thread_safe_flag_spec"; then
-	  eval flag=\"$thread_safe_flag_spec\"
-	  func_append linker_flags " $flag"
-	fi
-
-	# Make a backup of the uninstalled library when relinking
-	if test relink = "$opt_mode"; then
-	  $opt_dry_run || eval '(cd $output_objdir && $RM ${realname}U && $MV $realname ${realname}U)' || exit $?
-	fi
-
-	# Do each of the archive commands.
-	if test yes = "$module" && test -n "$module_cmds"; then
-	  if test -n "$export_symbols" && test -n "$module_expsym_cmds"; then
-	    eval test_cmds=\"$module_expsym_cmds\"
-	    cmds=$module_expsym_cmds
-	  else
-	    eval test_cmds=\"$module_cmds\"
-	    cmds=$module_cmds
-	  fi
-	else
-	  if test -n "$export_symbols" && test -n "$archive_expsym_cmds"; then
-	    eval test_cmds=\"$archive_expsym_cmds\"
-	    cmds=$archive_expsym_cmds
-	  else
-	    eval test_cmds=\"$archive_cmds\"
-	    cmds=$archive_cmds
-	  fi
-	fi
-
-	if test : != "$skipped_export" &&
-	   func_len " $test_cmds" &&
-	   len=$func_len_result &&
-	   test "$len" -lt "$max_cmd_len" || test "$max_cmd_len" -le -1; then
-	  :
-	else
-	  # The command line is too long to link in one step, link piecewise
-	  # or, if using GNU ld and skipped_export is not :, use a linker
-	  # script.
-
-	  # Save the value of $output and $libobjs because we want to
-	  # use them later.  If we have whole_archive_flag_spec, we
-	  # want to use save_libobjs as it was before
-	  # whole_archive_flag_spec was expanded, because we can't
-	  # assume the linker understands whole_archive_flag_spec.
-	  # This may have to be revisited, in case too many
-	  # convenience libraries get linked in and end up exceeding
-	  # the spec.
-	  if test -z "$convenience" || test -z "$whole_archive_flag_spec"; then
-	    save_libobjs=$libobjs
-	  fi
-	  save_output=$output
-	  func_basename "$output"
-	  output_la=$func_basename_result
-
-	  # Clear the reloadable object creation command queue and
-	  # initialize k to one.
-	  test_cmds=
-	  concat_cmds=
-	  objlist=
-	  last_robj=
-	  k=1
-
-	  if test -n "$save_libobjs" && test : != "$skipped_export" && test yes = "$with_gnu_ld"; then
-	    output=$output_objdir/$output_la.lnkscript
-	    func_verbose "creating GNU ld script: $output"
-	    echo 'INPUT (' > $output
-	    for obj in $save_libobjs
-	    do
-	      func_to_tool_file "$obj"
-	      $ECHO "$func_to_tool_file_result" >> $output
-	    done
-	    echo ')' >> $output
-	    func_append delfiles " $output"
-	    func_to_tool_file "$output"
-	    output=$func_to_tool_file_result
-	  elif test -n "$save_libobjs" && test : != "$skipped_export" && test -n "$file_list_spec"; then
-	    output=$output_objdir/$output_la.lnk
-	    func_verbose "creating linker input file list: $output"
-	    : > $output
-	    set x $save_libobjs
-	    shift
-	    firstobj=
-	    if test yes = "$compiler_needs_object"; then
-	      firstobj="$1 "
-	      shift
-	    fi
-	    for obj
-	    do
-	      func_to_tool_file "$obj"
-	      $ECHO "$func_to_tool_file_result" >> $output
-	    done
-	    func_append delfiles " $output"
-	    func_to_tool_file "$output"
-	    output=$firstobj\"$file_list_spec$func_to_tool_file_result\"
-	  else
-	    if test -n "$save_libobjs"; then
-	      func_verbose "creating reloadable object files..."
-	      output=$output_objdir/$output_la-$k.$objext
-	      eval test_cmds=\"$reload_cmds\"
-	      func_len " $test_cmds"
-	      len0=$func_len_result
-	      len=$len0
-
-	      # Loop over the list of objects to be linked.
-	      for obj in $save_libobjs
-	      do
-		func_len " $obj"
-		func_arith $len + $func_len_result
-		len=$func_arith_result
-		if test -z "$objlist" ||
-		   test "$len" -lt "$max_cmd_len"; then
-		  func_append objlist " $obj"
-		else
-		  # The command $test_cmds is almost too long, add a
-		  # command to the queue.
-		  if test 1 -eq "$k"; then
-		    # The first file doesn't have a previous command to add.
-		    reload_objs=$objlist
-		    eval concat_cmds=\"$reload_cmds\"
-		  else
-		    # All subsequent reloadable object files will link in
-		    # the last one created.
-		    reload_objs="$objlist $last_robj"
-		    eval concat_cmds=\"\$concat_cmds~$reload_cmds~\$RM $last_robj\"
-		  fi
-		  last_robj=$output_objdir/$output_la-$k.$objext
-		  func_arith $k + 1
-		  k=$func_arith_result
-		  output=$output_objdir/$output_la-$k.$objext
-		  objlist=" $obj"
-		  func_len " $last_robj"
-		  func_arith $len0 + $func_len_result
-		  len=$func_arith_result
-		fi
-	      done
-	      # Handle the remaining objects by creating one last
-	      # reloadable object file.  All subsequent reloadable object
-	      # files will link in the last one created.
-	      test -z "$concat_cmds" || concat_cmds=$concat_cmds~
-	      reload_objs="$objlist $last_robj"
-	      eval concat_cmds=\"\$concat_cmds$reload_cmds\"
-	      if test -n "$last_robj"; then
-	        eval concat_cmds=\"\$concat_cmds~\$RM $last_robj\"
-	      fi
-	      func_append delfiles " $output"
-
-	    else
-	      output=
-	    fi
-
-	    ${skipped_export-false} && {
-	      func_verbose "generating symbol list for '$libname.la'"
-	      export_symbols=$output_objdir/$libname.exp
-	      $opt_dry_run || $RM $export_symbols
-	      libobjs=$output
-	      # Append the command to create the export file.
-	      test -z "$concat_cmds" || concat_cmds=$concat_cmds~
-	      eval concat_cmds=\"\$concat_cmds$export_symbols_cmds\"
-	      if test -n "$last_robj"; then
-		eval concat_cmds=\"\$concat_cmds~\$RM $last_robj\"
-	      fi
-	    }
-
-	    test -n "$save_libobjs" &&
-	      func_verbose "creating a temporary reloadable object file: $output"
-
-	    # Loop through the commands generated above and execute them.
-	    save_ifs=$IFS; IFS='~'
-	    for cmd in $concat_cmds; do
-	      IFS=$save_ifs
-	      $opt_quiet || {
-		  func_quote_arg expand,pretty "$cmd"
-		  eval "func_echo $func_quote_arg_result"
-	      }
-	      $opt_dry_run || eval "$cmd" || {
-		lt_exit=$?
-
-		# Restore the uninstalled library and exit
-		if test relink = "$opt_mode"; then
-		  ( cd "$output_objdir" && \
-		    $RM "${realname}T" && \
-		    $MV "${realname}U" "$realname" )
-		fi
-
-		exit $lt_exit
-	      }
-	    done
-	    IFS=$save_ifs
-
-	    if test -n "$export_symbols_regex" && ${skipped_export-false}; then
-	      func_show_eval '$EGREP -e "$export_symbols_regex" "$export_symbols" > "${export_symbols}T"'
-	      func_show_eval '$MV "${export_symbols}T" "$export_symbols"'
-	    fi
-	  fi
-
-          ${skipped_export-false} && {
-	    if test -n "$export_symbols" && test -n "$include_expsyms"; then
-	      tmp_export_symbols=$export_symbols
-	      test -n "$orig_export_symbols" && tmp_export_symbols=$orig_export_symbols
-	      $opt_dry_run || eval '$ECHO "$include_expsyms" | $SP2NL >> "$tmp_export_symbols"'
-	    fi
-
-	    if test -n "$orig_export_symbols"; then
-	      # The given exports_symbols file has to be filtered, so filter it.
-	      func_verbose "filter symbol list for '$libname.la' to tag DATA exports"
-	      # FIXME: $output_objdir/$libname.filter potentially contains lots of
-	      # 's' commands, which not all seds can handle. GNU sed should be fine
-	      # though. Also, the filter scales superlinearly with the number of
-	      # global variables. join(1) would be nice here, but unfortunately
-	      # isn't a blessed tool.
-	      $opt_dry_run || $SED -e '/[ ,]DATA/!d;s,\(.*\)\([ \,].*\),s|^\1$|\1\2|,' < $export_symbols > $output_objdir/$libname.filter
-	      func_append delfiles " $export_symbols $output_objdir/$libname.filter"
-	      export_symbols=$output_objdir/$libname.def
-	      $opt_dry_run || $SED -f $output_objdir/$libname.filter < $orig_export_symbols > $export_symbols
-	    fi
-	  }
-
-	  libobjs=$output
-	  # Restore the value of output.
-	  output=$save_output
-
-	  if test -n "$convenience" && test -n "$whole_archive_flag_spec"; then
-	    eval libobjs=\"\$libobjs $whole_archive_flag_spec\"
-	    test "X$libobjs" = "X " && libobjs=
-	  fi
-	  # Expand the library linking commands again to reset the
-	  # value of $libobjs for piecewise linking.
-
-	  # Do each of the archive commands.
-	  if test yes = "$module" && test -n "$module_cmds"; then
-	    if test -n "$export_symbols" && test -n "$module_expsym_cmds"; then
-	      cmds=$module_expsym_cmds
-	    else
-	      cmds=$module_cmds
-	    fi
-	  else
-	    if test -n "$export_symbols" && test -n "$archive_expsym_cmds"; then
-	      cmds=$archive_expsym_cmds
-	    else
-	      cmds=$archive_cmds
-	    fi
-	  fi
-	fi
-
-	if test -n "$delfiles"; then
-	  # Append the command to remove temporary files to $cmds.
-	  eval cmds=\"\$cmds~\$RM $delfiles\"
-	fi
-
-	# Add any objects from preloaded convenience libraries
-	if test -n "$dlprefiles"; then
-	  gentop=$output_objdir/${outputname}x
-	  func_append generated " $gentop"
-
-	  func_extract_archives $gentop $dlprefiles
-	  func_append libobjs " $func_extract_archives_result"
-	  test "X$libobjs" = "X " && libobjs=
-	fi
-
-	save_ifs=$IFS; IFS='~'
-	for cmd in $cmds; do
-	  IFS=$sp$nl
-	  eval cmd=\"$cmd\"
-	  IFS=$save_ifs
-	  $opt_quiet || {
-	    func_quote_arg expand,pretty "$cmd"
-	    eval "func_echo $func_quote_arg_result"
-	  }
-	  $opt_dry_run || eval "$cmd" || {
-	    lt_exit=$?
-
-	    # Restore the uninstalled library and exit
-	    if test relink = "$opt_mode"; then
-	      ( cd "$output_objdir" && \
-	        $RM "${realname}T" && \
-		$MV "${realname}U" "$realname" )
-	    fi
-
-	    exit $lt_exit
-	  }
-	done
-	IFS=$save_ifs
-
-	# Restore the uninstalled library and exit
-	if test relink = "$opt_mode"; then
-	  $opt_dry_run || eval '(cd $output_objdir && $RM ${realname}T && $MV $realname ${realname}T && $MV ${realname}U $realname)' || exit $?
-
-	  if test -n "$convenience"; then
-	    if test -z "$whole_archive_flag_spec"; then
-	      func_show_eval '${RM}r "$gentop"'
-	    fi
-	  fi
-
-	  exit $EXIT_SUCCESS
-	fi
-
-	# Create links to the real library.
-	for linkname in $linknames; do
-	  if test "$realname" != "$linkname"; then
-	    func_show_eval '(cd "$output_objdir" && $RM "$linkname" && $LN_S "$realname" "$linkname")' 'exit $?'
-	  fi
-	done
-
-	# If -module or -export-dynamic was specified, set the dlname.
-	if test yes = "$module" || test yes = "$export_dynamic"; then
-	  # On all known operating systems, these are identical.
-	  dlname=$soname
-	fi
-      fi
-      ;;
-
-    obj)
-      if test -n "$dlfiles$dlprefiles" || test no != "$dlself"; then
-	func_warning "'-dlopen' is ignored for objects"
-      fi
-
-      case " $deplibs" in
-      *\ -l* | *\ -L*)
-	func_warning "'-l' and '-L' are ignored for objects" ;;
-      esac
-
-      test -n "$rpath" && \
-	func_warning "'-rpath' is ignored for objects"
-
-      test -n "$xrpath" && \
-	func_warning "'-R' is ignored for objects"
-
-      test -n "$vinfo" && \
-	func_warning "'-version-info' is ignored for objects"
-
-      test -n "$release" && \
-	func_warning "'-release' is ignored for objects"
-
-      case $output in
-      *.lo)
-	test -n "$objs$old_deplibs" && \
-	  func_fatal_error "cannot build library object '$output' from non-libtool objects"
-
-	libobj=$output
-	func_lo2o "$libobj"
-	obj=$func_lo2o_result
-	;;
-      *)
-	libobj=
-	obj=$output
-	;;
-      esac
-
-      # Delete the old objects.
-      $opt_dry_run || $RM $obj $libobj
-
-      # Objects from convenience libraries.  This assumes
-      # single-version convenience libraries.  Whenever we create
-      # different ones for PIC/non-PIC, this we'll have to duplicate
-      # the extraction.
-      reload_conv_objs=
-      gentop=
-      # if reload_cmds runs $LD directly, get rid of -Wl from
-      # whole_archive_flag_spec and hope we can get by with turning comma
-      # into space.
-      case $reload_cmds in
-        *\$LD[\ \$]*) wl= ;;
-      esac
-      if test -n "$convenience"; then
-	if test -n "$whole_archive_flag_spec"; then
-	  eval tmp_whole_archive_flags=\"$whole_archive_flag_spec\"
-	  test -n "$wl" || tmp_whole_archive_flags=`$ECHO "$tmp_whole_archive_flags" | $SED 's|,| |g'`
-	  reload_conv_objs=$reload_objs\ $tmp_whole_archive_flags
-	else
-	  gentop=$output_objdir/${obj}x
-	  func_append generated " $gentop"
-
-	  func_extract_archives $gentop $convenience
-	  reload_conv_objs="$reload_objs $func_extract_archives_result"
-	fi
-      fi
-
-      # If we're not building shared, we need to use non_pic_objs
-      test yes = "$build_libtool_libs" || libobjs=$non_pic_objects
-
-      # Create the old-style object.
-      reload_objs=$objs$old_deplibs' '`$ECHO "$libobjs" | $SP2NL | $SED "/\.$libext$/d; /\.lib$/d; $lo2o" | $NL2SP`' '$reload_conv_objs
-
-      output=$obj
-      func_execute_cmds "$reload_cmds" 'exit $?'
-
-      # Exit if we aren't doing a library object file.
-      if test -z "$libobj"; then
-	if test -n "$gentop"; then
-	  func_show_eval '${RM}r "$gentop"'
-	fi
-
-	exit $EXIT_SUCCESS
-      fi
-
-      test yes = "$build_libtool_libs" || {
-	if test -n "$gentop"; then
-	  func_show_eval '${RM}r "$gentop"'
-	fi
-
-	# Create an invalid libtool object if no PIC, so that we don't
-	# accidentally link it into a program.
-	# $show "echo timestamp > $libobj"
-	# $opt_dry_run || eval "echo timestamp > $libobj" || exit $?
-	exit $EXIT_SUCCESS
-      }
-
-      if test -n "$pic_flag" || test default != "$pic_mode"; then
-	# Only do commands if we really have different PIC objects.
-	reload_objs="$libobjs $reload_conv_objs"
-	output=$libobj
-	func_execute_cmds "$reload_cmds" 'exit $?'
-      fi
-
-      if test -n "$gentop"; then
-	func_show_eval '${RM}r "$gentop"'
-      fi
-
-      exit $EXIT_SUCCESS
-      ;;
-
-    prog)
-      case $host in
-	*cygwin*) func_stripname '' '.exe' "$output"
-	          output=$func_stripname_result.exe;;
-      esac
-      test -n "$vinfo" && \
-	func_warning "'-version-info' is ignored for programs"
-
-      test -n "$release" && \
-	func_warning "'-release' is ignored for programs"
-
-      $preload \
-	&& test unknown,unknown,unknown = "$dlopen_support,$dlopen_self,$dlopen_self_static" \
-	&& func_warning "'LT_INIT([dlopen])' not used. Assuming no dlopen support."
-
-      case $host in
-      *-*-rhapsody* | *-*-darwin1.[012])
-	# On Rhapsody replace the C library is the System framework
-	compile_deplibs=`$ECHO " $compile_deplibs" | $SED 's/ -lc / System.ltframework /'`
-	finalize_deplibs=`$ECHO " $finalize_deplibs" | $SED 's/ -lc / System.ltframework /'`
-	;;
-      esac
-
-      case $host in
-      *-*-darwin*)
-	# Don't allow lazy linking, it breaks C++ global constructors
-	# But is supposedly fixed on 10.4 or later (yay!).
-	if test CXX = "$tagname"; then
-	  case ${MACOSX_DEPLOYMENT_TARGET-10.0} in
-	    10.[0123])
-	      func_append compile_command " $wl-bind_at_load"
-	      func_append finalize_command " $wl-bind_at_load"
-	    ;;
-	  esac
-	fi
-	# Time to change all our "foo.ltframework" stuff back to "-framework foo"
-	compile_deplibs=`$ECHO " $compile_deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	finalize_deplibs=`$ECHO " $finalize_deplibs" | $SED 's% \([^ $]*\).ltframework% -framework \1%g'`
-	;;
-      esac
-
-
-      # move library search paths that coincide with paths to not yet
-      # installed libraries to the beginning of the library search list
-      new_libs=
-      for path in $notinst_path; do
-	case " $new_libs " in
-	*" -L$path/$objdir "*) ;;
-	*)
-	  case " $compile_deplibs " in
-	  *" -L$path/$objdir "*)
-	    func_append new_libs " -L$path/$objdir" ;;
-	  esac
-	  ;;
-	esac
-      done
-      for deplib in $compile_deplibs; do
-	case $deplib in
-	-L*)
-	  case " $new_libs " in
-	  *" $deplib "*) ;;
-	  *) func_append new_libs " $deplib" ;;
-	  esac
-	  ;;
-	*) func_append new_libs " $deplib" ;;
-	esac
-      done
-      compile_deplibs=$new_libs
-
-
-      func_append compile_command " $compile_deplibs"
-      func_append finalize_command " $finalize_deplibs"
-
-      if test -n "$rpath$xrpath"; then
-	# If the user specified any rpath flags, then add them.
-	for libdir in $rpath $xrpath; do
-	  # This is the magic to use -rpath.
-	  case "$finalize_rpath " in
-	  *" $libdir "*) ;;
-	  *) func_append finalize_rpath " $libdir" ;;
-	  esac
-	done
-      fi
-
-      # Now hardcode the library paths
-      rpath=
-      hardcode_libdirs=
-      for libdir in $compile_rpath $finalize_rpath; do
-	if test -n "$hardcode_libdir_flag_spec"; then
-	  if test -n "$hardcode_libdir_separator"; then
-	    if test -z "$hardcode_libdirs"; then
-	      hardcode_libdirs=$libdir
-	    else
-	      # Just accumulate the unique libdirs.
-	      case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in
-	      *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*)
-		;;
-	      *)
-		func_append hardcode_libdirs "$hardcode_libdir_separator$libdir"
-		;;
-	      esac
-	    fi
-	  else
-	    eval flag=\"$hardcode_libdir_flag_spec\"
-	    func_append rpath " $flag"
-	  fi
-	elif test -n "$runpath_var"; then
-	  case "$perm_rpath " in
-	  *" $libdir "*) ;;
-	  *) func_append perm_rpath " $libdir" ;;
-	  esac
-	fi
-	case $host in
-	*-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-os2* | *-cegcc*)
-	  testbindir=`$ECHO "$libdir" | $SED -e 's*/lib$*/bin*'`
-	  case :$dllsearchpath: in
-	  *":$libdir:"*) ;;
-	  ::) dllsearchpath=$libdir;;
-	  *) func_append dllsearchpath ":$libdir";;
-	  esac
-	  case :$dllsearchpath: in
-	  *":$testbindir:"*) ;;
-	  ::) dllsearchpath=$testbindir;;
-	  *) func_append dllsearchpath ":$testbindir";;
-	  esac
-	  ;;
-	esac
-      done
-      # Substitute the hardcoded libdirs into the rpath.
-      if test -n "$hardcode_libdir_separator" &&
-	 test -n "$hardcode_libdirs"; then
-	libdir=$hardcode_libdirs
-	eval rpath=\" $hardcode_libdir_flag_spec\"
-      fi
-      compile_rpath=$rpath
-
-      rpath=
-      hardcode_libdirs=
-      for libdir in $finalize_rpath; do
-	if test -n "$hardcode_libdir_flag_spec"; then
-	  if test -n "$hardcode_libdir_separator"; then
-	    if test -z "$hardcode_libdirs"; then
-	      hardcode_libdirs=$libdir
-	    else
-	      # Just accumulate the unique libdirs.
-	      case $hardcode_libdir_separator$hardcode_libdirs$hardcode_libdir_separator in
-	      *"$hardcode_libdir_separator$libdir$hardcode_libdir_separator"*)
-		;;
-	      *)
-		func_append hardcode_libdirs "$hardcode_libdir_separator$libdir"
-		;;
-	      esac
-	    fi
-	  else
-	    eval flag=\"$hardcode_libdir_flag_spec\"
-	    func_append rpath " $flag"
-	  fi
-	elif test -n "$runpath_var"; then
-	  case "$finalize_perm_rpath " in
-	  *" $libdir "*) ;;
-	  *) func_append finalize_perm_rpath " $libdir" ;;
-	  esac
-	fi
-      done
-      # Substitute the hardcoded libdirs into the rpath.
-      if test -n "$hardcode_libdir_separator" &&
-	 test -n "$hardcode_libdirs"; then
-	libdir=$hardcode_libdirs
-	eval rpath=\" $hardcode_libdir_flag_spec\"
-      fi
-      finalize_rpath=$rpath
-
-      if test -n "$libobjs" && test yes = "$build_old_libs"; then
-	# Transform all the library objects into standard objects.
-	compile_command=`$ECHO "$compile_command" | $SP2NL | $SED "$lo2o" | $NL2SP`
-	finalize_command=`$ECHO "$finalize_command" | $SP2NL | $SED "$lo2o" | $NL2SP`
-      fi
-
-      func_generate_dlsyms "$outputname" "@PROGRAM@" false
-
-      # template prelinking step
-      if test -n "$prelink_cmds"; then
-	func_execute_cmds "$prelink_cmds" 'exit $?'
-      fi
-
-      wrappers_required=:
-      case $host in
-      *cegcc* | *mingw32ce*)
-        # Disable wrappers for cegcc and mingw32ce hosts, we are cross compiling anyway.
-        wrappers_required=false
-        ;;
-      *cygwin* | *mingw* )
-        test yes = "$build_libtool_libs" || wrappers_required=false
-        ;;
-      *)
-        if test no = "$need_relink" || test yes != "$build_libtool_libs"; then
-          wrappers_required=false
-        fi
-        ;;
-      esac
-      $wrappers_required || {
-	# Replace the output file specification.
-	compile_command=`$ECHO "$compile_command" | $SED 's%@OUTPUT@%'"$output"'%g'`
-	link_command=$compile_command$compile_rpath
-
-	# We have no uninstalled library dependencies, so finalize right now.
-	exit_status=0
-	func_show_eval "$link_command" 'exit_status=$?'
-
-	if test -n "$postlink_cmds"; then
-	  func_to_tool_file "$output"
-	  postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'`
-	  func_execute_cmds "$postlink_cmds" 'exit $?'
-	fi
-
-	# Delete the generated files.
-	if test -f "$output_objdir/${outputname}S.$objext"; then
-	  func_show_eval '$RM "$output_objdir/${outputname}S.$objext"'
-	fi
-
-	exit $exit_status
-      }
-
-      if test -n "$compile_shlibpath$finalize_shlibpath"; then
-	compile_command="$shlibpath_var=\"$compile_shlibpath$finalize_shlibpath\$$shlibpath_var\" $compile_command"
-      fi
-      if test -n "$finalize_shlibpath"; then
-	finalize_command="$shlibpath_var=\"$finalize_shlibpath\$$shlibpath_var\" $finalize_command"
-      fi
-
-      compile_var=
-      finalize_var=
-      if test -n "$runpath_var"; then
-	if test -n "$perm_rpath"; then
-	  # We should set the runpath_var.
-	  rpath=
-	  for dir in $perm_rpath; do
-	    func_append rpath "$dir:"
-	  done
-	  compile_var="$runpath_var=\"$rpath\$$runpath_var\" "
-	fi
-	if test -n "$finalize_perm_rpath"; then
-	  # We should set the runpath_var.
-	  rpath=
-	  for dir in $finalize_perm_rpath; do
-	    func_append rpath "$dir:"
-	  done
-	  finalize_var="$runpath_var=\"$rpath\$$runpath_var\" "
-	fi
-      fi
-
-      if test yes = "$no_install"; then
-	# We don't need to create a wrapper script.
-	link_command=$compile_var$compile_command$compile_rpath
-	# Replace the output file specification.
-	link_command=`$ECHO "$link_command" | $SED 's%@OUTPUT@%'"$output"'%g'`
-	# Delete the old output file.
-	$opt_dry_run || $RM $output
-	# Link the executable and exit
-	func_show_eval "$link_command" 'exit $?'
-
-	if test -n "$postlink_cmds"; then
-	  func_to_tool_file "$output"
-	  postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'`
-	  func_execute_cmds "$postlink_cmds" 'exit $?'
-	fi
-
-	exit $EXIT_SUCCESS
-      fi
-
-      case $hardcode_action,$fast_install in
-        relink,*)
-	  # Fast installation is not supported
-	  link_command=$compile_var$compile_command$compile_rpath
-	  relink_command=$finalize_var$finalize_command$finalize_rpath
-
-	  func_warning "this platform does not like uninstalled shared libraries"
-	  func_warning "'$output' will be relinked during installation"
-	  ;;
-        *,yes)
-	  link_command=$finalize_var$compile_command$finalize_rpath
-	  relink_command=`$ECHO "$compile_var$compile_command$compile_rpath" | $SED 's%@OUTPUT@%\$progdir/\$file%g'`
-          ;;
-	*,no)
-	  link_command=$compile_var$compile_command$compile_rpath
-	  relink_command=$finalize_var$finalize_command$finalize_rpath
-          ;;
-	*,needless)
-	  link_command=$finalize_var$compile_command$finalize_rpath
-	  relink_command=
-          ;;
-      esac
-
-      # Replace the output file specification.
-      link_command=`$ECHO "$link_command" | $SED 's%@OUTPUT@%'"$output_objdir/$outputname"'%g'`
-
-      # Delete the old output files.
-      $opt_dry_run || $RM $output $output_objdir/$outputname $output_objdir/lt-$outputname
-
-      func_show_eval "$link_command" 'exit $?'
-
-      if test -n "$postlink_cmds"; then
-	func_to_tool_file "$output_objdir/$outputname"
-	postlink_cmds=`func_echo_all "$postlink_cmds" | $SED -e 's%@OUTPUT@%'"$output_objdir/$outputname"'%g' -e 's%@TOOL_OUTPUT@%'"$func_to_tool_file_result"'%g'`
-	func_execute_cmds "$postlink_cmds" 'exit $?'
-      fi
-
-      # Now create the wrapper script.
-      func_verbose "creating $output"
-
-      # Quote the relink command for shipping.
-      if test -n "$relink_command"; then
-	# Preserve any variables that may affect compiler behavior
-	for var in $variables_saved_for_relink; do
-	  if eval test -z \"\${$var+set}\"; then
-	    relink_command="{ test -z \"\${$var+set}\" || $lt_unset $var || { $var=; export $var; }; }; $relink_command"
-	  elif eval var_value=\$$var; test -z "$var_value"; then
-	    relink_command="$var=; export $var; $relink_command"
-	  else
-	    func_quote_arg pretty "$var_value"
-	    relink_command="$var=$func_quote_arg_result; export $var; $relink_command"
-	  fi
-	done
-	func_quote eval cd "`pwd`"
-	func_quote_arg pretty,unquoted "($func_quote_result; $relink_command)"
-	relink_command=$func_quote_arg_unquoted_result
-      fi
-
-      # Only actually do things if not in dry run mode.
-      $opt_dry_run || {
-	# win32 will think the script is a binary if it has
-	# a .exe suffix, so we strip it off here.
-	case $output in
-	  *.exe) func_stripname '' '.exe' "$output"
-	         output=$func_stripname_result ;;
-	esac
-	# test for cygwin because mv fails w/o .exe extensions
-	case $host in
-	  *cygwin*)
-	    exeext=.exe
-	    func_stripname '' '.exe' "$outputname"
-	    outputname=$func_stripname_result ;;
-	  *) exeext= ;;
-	esac
-	case $host in
-	  *cygwin* | *mingw* )
-	    func_dirname_and_basename "$output" "" "."
-	    output_name=$func_basename_result
-	    output_path=$func_dirname_result
-	    cwrappersource=$output_path/$objdir/lt-$output_name.c
-	    cwrapper=$output_path/$output_name.exe
-	    $RM $cwrappersource $cwrapper
-	    trap "$RM $cwrappersource $cwrapper; exit $EXIT_FAILURE" 1 2 15
-
-	    func_emit_cwrapperexe_src > $cwrappersource
-
-	    # The wrapper executable is built using the $host compiler,
-	    # because it contains $host paths and files. If cross-
-	    # compiling, it, like the target executable, must be
-	    # executed on the $host or under an emulation environment.
-	    $opt_dry_run || {
-	      $LTCC $LTCFLAGS -o $cwrapper $cwrappersource
-	      $STRIP $cwrapper
-	    }
-
-	    # Now, create the wrapper script for func_source use:
-	    func_ltwrapper_scriptname $cwrapper
-	    $RM $func_ltwrapper_scriptname_result
-	    trap "$RM $func_ltwrapper_scriptname_result; exit $EXIT_FAILURE" 1 2 15
-	    $opt_dry_run || {
-	      # note: this script will not be executed, so do not chmod.
-	      if test "x$build" = "x$host"; then
-		$cwrapper --lt-dump-script > $func_ltwrapper_scriptname_result
-	      else
-		func_emit_wrapper no > $func_ltwrapper_scriptname_result
-	      fi
-	    }
-	  ;;
-	  * )
-	    $RM $output
-	    trap "$RM $output; exit $EXIT_FAILURE" 1 2 15
-
-	    func_emit_wrapper no > $output
-	    chmod +x $output
-	  ;;
-	esac
-      }
-      exit $EXIT_SUCCESS
-      ;;
-    esac
-
-    # See if we need to build an old-fashioned archive.
-    for oldlib in $oldlibs; do
-
-      case $build_libtool_libs in
-        convenience)
-	  oldobjs="$libobjs_save $symfileobj"
-	  addlibs=$convenience
-	  build_libtool_libs=no
-	  ;;
-	module)
-	  oldobjs=$libobjs_save
-	  addlibs=$old_convenience
-	  build_libtool_libs=no
-          ;;
-	*)
-	  oldobjs="$old_deplibs $non_pic_objects"
-	  $preload && test -f "$symfileobj" \
-	    && func_append oldobjs " $symfileobj"
-	  addlibs=$old_convenience
-	  ;;
-      esac
-
-      if test -n "$addlibs"; then
-	gentop=$output_objdir/${outputname}x
-	func_append generated " $gentop"
-
-	func_extract_archives $gentop $addlibs
-	func_append oldobjs " $func_extract_archives_result"
-      fi
-
-      # Do each command in the archive commands.
-      if test -n "$old_archive_from_new_cmds" && test yes = "$build_libtool_libs"; then
-	cmds=$old_archive_from_new_cmds
-      else
-
-	# Add any objects from preloaded convenience libraries
-	if test -n "$dlprefiles"; then
-	  gentop=$output_objdir/${outputname}x
-	  func_append generated " $gentop"
-
-	  func_extract_archives $gentop $dlprefiles
-	  func_append oldobjs " $func_extract_archives_result"
-	fi
-
-	# POSIX demands no paths to be encoded in archives.  We have
-	# to avoid creating archives with duplicate basenames if we
-	# might have to extract them afterwards, e.g., when creating a
-	# static archive out of a convenience library, or when linking
-	# the entirety of a libtool archive into another (currently
-	# not supported by libtool).
-	if (for obj in $oldobjs
-	    do
-	      func_basename "$obj"
-	      $ECHO "$func_basename_result"
-	    done | sort | sort -uc >/dev/null 2>&1); then
-	  :
-	else
-	  echo "copying selected object files to avoid basename conflicts..."
-	  gentop=$output_objdir/${outputname}x
-	  func_append generated " $gentop"
-	  func_mkdir_p "$gentop"
-	  save_oldobjs=$oldobjs
-	  oldobjs=
-	  counter=1
-	  for obj in $save_oldobjs
-	  do
-	    func_basename "$obj"
-	    objbase=$func_basename_result
-	    case " $oldobjs " in
-	    " ") oldobjs=$obj ;;
-	    *[\ /]"$objbase "*)
-	      while :; do
-		# Make sure we don't pick an alternate name that also
-		# overlaps.
-		newobj=lt$counter-$objbase
-		func_arith $counter + 1
-		counter=$func_arith_result
-		case " $oldobjs " in
-		*[\ /]"$newobj "*) ;;
-		*) if test ! -f "$gentop/$newobj"; then break; fi ;;
-		esac
-	      done
-	      func_show_eval "ln $obj $gentop/$newobj || cp $obj $gentop/$newobj"
-	      func_append oldobjs " $gentop/$newobj"
-	      ;;
-	    *) func_append oldobjs " $obj" ;;
-	    esac
-	  done
-	fi
-	func_to_tool_file "$oldlib" func_convert_file_msys_to_w32
-	tool_oldlib=$func_to_tool_file_result
-	eval cmds=\"$old_archive_cmds\"
-
-	func_len " $cmds"
-	len=$func_len_result
-	if test "$len" -lt "$max_cmd_len" || test "$max_cmd_len" -le -1; then
-	  cmds=$old_archive_cmds
-	elif test -n "$archiver_list_spec"; then
-	  func_verbose "using command file archive linking..."
-	  for obj in $oldobjs
-	  do
-	    func_to_tool_file "$obj"
-	    $ECHO "$func_to_tool_file_result"
-	  done > $output_objdir/$libname.libcmd
-	  func_to_tool_file "$output_objdir/$libname.libcmd"
-	  oldobjs=" $archiver_list_spec$func_to_tool_file_result"
-	  cmds=$old_archive_cmds
-	else
-	  # the command line is too long to link in one step, link in parts
-	  func_verbose "using piecewise archive linking..."
-	  save_RANLIB=$RANLIB
-	  RANLIB=:
-	  objlist=
-	  concat_cmds=
-	  save_oldobjs=$oldobjs
-	  oldobjs=
-	  # Is there a better way of finding the last object in the list?
-	  for obj in $save_oldobjs
-	  do
-	    last_oldobj=$obj
-	  done
-	  eval test_cmds=\"$old_archive_cmds\"
-	  func_len " $test_cmds"
-	  len0=$func_len_result
-	  len=$len0
-	  for obj in $save_oldobjs
-	  do
-	    func_len " $obj"
-	    func_arith $len + $func_len_result
-	    len=$func_arith_result
-	    func_append objlist " $obj"
-	    if test "$len" -lt "$max_cmd_len"; then
-	      :
-	    else
-	      # the above command should be used before it gets too long
-	      oldobjs=$objlist
-	      if test "$obj" = "$last_oldobj"; then
-		RANLIB=$save_RANLIB
-	      fi
-	      test -z "$concat_cmds" || concat_cmds=$concat_cmds~
-	      eval concat_cmds=\"\$concat_cmds$old_archive_cmds\"
-	      objlist=
-	      len=$len0
-	    fi
-	  done
-	  RANLIB=$save_RANLIB
-	  oldobjs=$objlist
-	  if test -z "$oldobjs"; then
-	    eval cmds=\"\$concat_cmds\"
-	  else
-	    eval cmds=\"\$concat_cmds~\$old_archive_cmds\"
-	  fi
-	fi
-      fi
-      func_execute_cmds "$cmds" 'exit $?'
-    done
-
-    test -n "$generated" && \
-      func_show_eval "${RM}r$generated"
-
-    # Now create the libtool archive.
-    case $output in
-    *.la)
-      old_library=
-      test yes = "$build_old_libs" && old_library=$libname.$libext
-      func_verbose "creating $output"
-
-      # Preserve any variables that may affect compiler behavior
-      for var in $variables_saved_for_relink; do
-	if eval test -z \"\${$var+set}\"; then
-	  relink_command="{ test -z \"\${$var+set}\" || $lt_unset $var || { $var=; export $var; }; }; $relink_command"
-	elif eval var_value=\$$var; test -z "$var_value"; then
-	  relink_command="$var=; export $var; $relink_command"
-	else
-	  func_quote_arg pretty,unquoted "$var_value"
-	  relink_command="$var=$func_quote_arg_unquoted_result; export $var; $relink_command"
-	fi
-      done
-      # Quote the link command for shipping.
-      func_quote eval cd "`pwd`"
-      relink_command="($func_quote_result; $SHELL \"$progpath\" $preserve_args --mode=relink $libtool_args @inst_prefix_dir@)"
-      func_quote_arg pretty,unquoted "$relink_command"
-      relink_command=$func_quote_arg_unquoted_result
-      if test yes = "$hardcode_automatic"; then
-	relink_command=
-      fi
-
-      # Only create the output if not a dry run.
-      $opt_dry_run || {
-	for installed in no yes; do
-	  if test yes = "$installed"; then
-	    if test -z "$install_libdir"; then
-	      break
-	    fi
-	    output=$output_objdir/${outputname}i
-	    # Replace all uninstalled libtool libraries with the installed ones
-	    newdependency_libs=
-	    for deplib in $dependency_libs; do
-	      case $deplib in
-	      *.la)
-		func_basename "$deplib"
-		name=$func_basename_result
-		func_resolve_sysroot "$deplib"
-		eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $func_resolve_sysroot_result`
-		test -z "$libdir" && \
-		  func_fatal_error "'$deplib' is not a valid libtool archive"
-		func_append newdependency_libs " ${lt_sysroot:+=}$libdir/$name"
-		;;
-	      -L*)
-		func_stripname -L '' "$deplib"
-		func_replace_sysroot "$func_stripname_result"
-		func_append newdependency_libs " -L$func_replace_sysroot_result"
-		;;
-	      -R*)
-		func_stripname -R '' "$deplib"
-		func_replace_sysroot "$func_stripname_result"
-		func_append newdependency_libs " -R$func_replace_sysroot_result"
-		;;
-	      *) func_append newdependency_libs " $deplib" ;;
-	      esac
-	    done
-	    dependency_libs=$newdependency_libs
-	    newdlfiles=
-
-	    for lib in $dlfiles; do
-	      case $lib in
-	      *.la)
-	        func_basename "$lib"
-		name=$func_basename_result
-		eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $lib`
-		test -z "$libdir" && \
-		  func_fatal_error "'$lib' is not a valid libtool archive"
-		func_append newdlfiles " ${lt_sysroot:+=}$libdir/$name"
-		;;
-	      *) func_append newdlfiles " $lib" ;;
-	      esac
-	    done
-	    dlfiles=$newdlfiles
-	    newdlprefiles=
-	    for lib in $dlprefiles; do
-	      case $lib in
-	      *.la)
-		# Only pass preopened files to the pseudo-archive (for
-		# eventual linking with the app. that links it) if we
-		# didn't already link the preopened objects directly into
-		# the library:
-		func_basename "$lib"
-		name=$func_basename_result
-		eval libdir=`$SED -n -e 's/^libdir=\(.*\)$/\1/p' $lib`
-		test -z "$libdir" && \
-		  func_fatal_error "'$lib' is not a valid libtool archive"
-		func_append newdlprefiles " ${lt_sysroot:+=}$libdir/$name"
-		;;
-	      esac
-	    done
-	    dlprefiles=$newdlprefiles
-	  else
-	    newdlfiles=
-	    for lib in $dlfiles; do
-	      case $lib in
-		[\\/]* | [A-Za-z]:[\\/]*) abs=$lib ;;
-		*) abs=`pwd`"/$lib" ;;
-	      esac
-	      func_append newdlfiles " $abs"
-	    done
-	    dlfiles=$newdlfiles
-	    newdlprefiles=
-	    for lib in $dlprefiles; do
-	      case $lib in
-		[\\/]* | [A-Za-z]:[\\/]*) abs=$lib ;;
-		*) abs=`pwd`"/$lib" ;;
-	      esac
-	      func_append newdlprefiles " $abs"
-	    done
-	    dlprefiles=$newdlprefiles
-	  fi
-	  $RM $output
-	  # place dlname in correct position for cygwin
-	  # In fact, it would be nice if we could use this code for all target
-	  # systems that can't hard-code library paths into their executables
-	  # and that have no shared library path variable independent of PATH,
-	  # but it turns out we can't easily determine that from inspecting
-	  # libtool variables, so we have to hard-code the OSs to which it
-	  # applies here; at the moment, that means platforms that use the PE
-	  # object format with DLL files.  See the long comment at the top of
-	  # tests/bindir.at for full details.
-	  tdlname=$dlname
-	  case $host,$output,$installed,$module,$dlname in
-	    *cygwin*,*lai,yes,no,*.dll | *mingw*,*lai,yes,no,*.dll | *cegcc*,*lai,yes,no,*.dll)
-	      # If a -bindir argument was supplied, place the dll there.
-	      if test -n "$bindir"; then
-		func_relative_path "$install_libdir" "$bindir"
-		tdlname=$func_relative_path_result/$dlname
-	      else
-		# Otherwise fall back on heuristic.
-		tdlname=../bin/$dlname
-	      fi
-	      ;;
-	  esac
-	  $ECHO > $output "\
-# $outputname - a libtool library file
-# Generated by $PROGRAM (GNU $PACKAGE) $VERSION
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# The name that we can dlopen(3).
-dlname='$tdlname'
-
-# Names of this library.
-library_names='$library_names'
-
-# The name of the static archive.
-old_library='$old_library'
-
-# Linker flags that cannot go in dependency_libs.
-inherited_linker_flags='$new_inherited_linker_flags'
-
-# Libraries that this one depends upon.
-dependency_libs='$dependency_libs'
-
-# Names of additional weak libraries provided by this library
-weak_library_names='$weak_libs'
-
-# Version information for $libname.
-current=$current
-age=$age
-revision=$revision
-
-# Is this an already installed library?
-installed=$installed
-
-# Should we warn about portability when linking against -modules?
-shouldnotlink=$module
-
-# Files to dlopen/dlpreopen
-dlopen='$dlfiles'
-dlpreopen='$dlprefiles'
-
-# Directory that this library needs to be installed in:
-libdir='$install_libdir'"
-	  if test no,yes = "$installed,$need_relink"; then
-	    $ECHO >> $output "\
-relink_command=\"$relink_command\""
-	  fi
-	done
-      }
-
-      # Do a symbolic link so that the libtool archive can be found in
-      # LD_LIBRARY_PATH before the program is installed.
-      func_show_eval '( cd "$output_objdir" && $RM "$outputname" && $LN_S "../$outputname" "$outputname" )' 'exit $?'
-      ;;
-    esac
-    exit $EXIT_SUCCESS
-}
-
-if test link = "$opt_mode" || test relink = "$opt_mode"; then
-  func_mode_link ${1+"$@"}
-fi
-
-
-# func_mode_uninstall arg...
-func_mode_uninstall ()
-{
-    $debug_cmd
-
-    RM=$nonopt
-    files=
-    rmforce=false
-    exit_status=0
-
-    # This variable tells wrapper scripts just to set variables rather
-    # than running their programs.
-    libtool_install_magic=$magic
-
-    for arg
-    do
-      case $arg in
-      -f) func_append RM " $arg"; rmforce=: ;;
-      -*) func_append RM " $arg" ;;
-      *) func_append files " $arg" ;;
-      esac
-    done
-
-    test -z "$RM" && \
-      func_fatal_help "you must specify an RM program"
-
-    rmdirs=
-
-    for file in $files; do
-      func_dirname "$file" "" "."
-      dir=$func_dirname_result
-      if test . = "$dir"; then
-	odir=$objdir
-      else
-	odir=$dir/$objdir
-      fi
-      func_basename "$file"
-      name=$func_basename_result
-      test uninstall = "$opt_mode" && odir=$dir
-
-      # Remember odir for removal later, being careful to avoid duplicates
-      if test clean = "$opt_mode"; then
-	case " $rmdirs " in
-	  *" $odir "*) ;;
-	  *) func_append rmdirs " $odir" ;;
-	esac
-      fi
-
-      # Don't error if the file doesn't exist and rm -f was used.
-      if { test -L "$file"; } >/dev/null 2>&1 ||
-	 { test -h "$file"; } >/dev/null 2>&1 ||
-	 test -f "$file"; then
-	:
-      elif test -d "$file"; then
-	exit_status=1
-	continue
-      elif $rmforce; then
-	continue
-      fi
-
-      rmfiles=$file
-
-      case $name in
-      *.la)
-	# Possibly a libtool archive, so verify it.
-	if func_lalib_p "$file"; then
-	  func_source $dir/$name
-
-	  # Delete the libtool libraries and symlinks.
-	  for n in $library_names; do
-	    func_append rmfiles " $odir/$n"
-	  done
-	  test -n "$old_library" && func_append rmfiles " $odir/$old_library"
-
-	  case $opt_mode in
-	  clean)
-	    case " $library_names " in
-	    *" $dlname "*) ;;
-	    *) test -n "$dlname" && func_append rmfiles " $odir/$dlname" ;;
-	    esac
-	    test -n "$libdir" && func_append rmfiles " $odir/$name $odir/${name}i"
-	    ;;
-	  uninstall)
-	    if test -n "$library_names"; then
-	      # Do each command in the postuninstall commands.
-	      func_execute_cmds "$postuninstall_cmds" '$rmforce || exit_status=1'
-	    fi
-
-	    if test -n "$old_library"; then
-	      # Do each command in the old_postuninstall commands.
-	      func_execute_cmds "$old_postuninstall_cmds" '$rmforce || exit_status=1'
-	    fi
-	    # FIXME: should reinstall the best remaining shared library.
-	    ;;
-	  esac
-	fi
-	;;
-
-      *.lo)
-	# Possibly a libtool object, so verify it.
-	if func_lalib_p "$file"; then
-
-	  # Read the .lo file
-	  func_source $dir/$name
-
-	  # Add PIC object to the list of files to remove.
-	  if test -n "$pic_object" && test none != "$pic_object"; then
-	    func_append rmfiles " $dir/$pic_object"
-	  fi
-
-	  # Add non-PIC object to the list of files to remove.
-	  if test -n "$non_pic_object" && test none != "$non_pic_object"; then
-	    func_append rmfiles " $dir/$non_pic_object"
-	  fi
-	fi
-	;;
-
-      *)
-	if test clean = "$opt_mode"; then
-	  noexename=$name
-	  case $file in
-	  *.exe)
-	    func_stripname '' '.exe' "$file"
-	    file=$func_stripname_result
-	    func_stripname '' '.exe' "$name"
-	    noexename=$func_stripname_result
-	    # $file with .exe has already been added to rmfiles,
-	    # add $file without .exe
-	    func_append rmfiles " $file"
-	    ;;
-	  esac
-	  # Do a test to see if this is a libtool program.
-	  if func_ltwrapper_p "$file"; then
-	    if func_ltwrapper_executable_p "$file"; then
-	      func_ltwrapper_scriptname "$file"
-	      relink_command=
-	      func_source $func_ltwrapper_scriptname_result
-	      func_append rmfiles " $func_ltwrapper_scriptname_result"
-	    else
-	      relink_command=
-	      func_source $dir/$noexename
-	    fi
-
-	    # note $name still contains .exe if it was in $file originally
-	    # as does the version of $file that was added into $rmfiles
-	    func_append rmfiles " $odir/$name $odir/${name}S.$objext"
-	    if test yes = "$fast_install" && test -n "$relink_command"; then
-	      func_append rmfiles " $odir/lt-$name"
-	    fi
-	    if test "X$noexename" != "X$name"; then
-	      func_append rmfiles " $odir/lt-$noexename.c"
-	    fi
-	  fi
-	fi
-	;;
-      esac
-      func_show_eval "$RM $rmfiles" 'exit_status=1'
-    done
-
-    # Try to remove the $objdir's in the directories where we deleted files
-    for dir in $rmdirs; do
-      if test -d "$dir"; then
-	func_show_eval "rmdir $dir >/dev/null 2>&1"
-      fi
-    done
-
-    exit $exit_status
-}
-
-if test uninstall = "$opt_mode" || test clean = "$opt_mode"; then
-  func_mode_uninstall ${1+"$@"}
-fi
-
-test -z "$opt_mode" && {
-  help=$generic_help
-  func_fatal_help "you must specify a MODE"
-}
-
-test -z "$exec_cmd" && \
-  func_fatal_help "invalid operation mode '$opt_mode'"
-
-if test -n "$exec_cmd"; then
-  eval exec "$exec_cmd"
-  exit $EXIT_FAILURE
-fi
-
-exit $exit_status
-
-
-# The TAGs below are defined such that we never get into a situation
-# where we disable both kinds of libraries.  Given conflicting
-# choices, we go for a static library, that is the most portable,
-# since we can't tell whether shared libraries were disabled because
-# the user asked for that or because the platform doesn't support
-# them.  This is particularly important on AIX, because we don't
-# support having both static and shared libraries enabled at the same
-# time on that platform, so we default to a shared-only configuration.
-# If a disable-shared tag is given, we'll fallback to a static-only
-# configuration.  But we'll never go from static-only to shared-only.
-
-# ### BEGIN LIBTOOL TAG CONFIG: disable-shared
-build_libtool_libs=no
-build_old_libs=yes
-# ### END LIBTOOL TAG CONFIG: disable-shared
-
-# ### BEGIN LIBTOOL TAG CONFIG: disable-static
-build_old_libs=`case $build_libtool_libs in yes) echo no;; *) echo yes;; esac`
-# ### END LIBTOOL TAG CONFIG: disable-static
-
-# Local Variables:
-# mode:shell-script
-# sh-indentation:2
-# End:
diff --git a/experiments/wasm-gui/third_party/libXfixes/m4/libtool.m4 b/experiments/wasm-gui/third_party/libXfixes/m4/libtool.m4
deleted file mode 100644
index 79a2451ef..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/m4/libtool.m4
+++ /dev/null
@@ -1,8400 +0,0 @@
-# libtool.m4 - Configure libtool for the host system. -*-Autoconf-*-
-#
-#   Copyright (C) 1996-2001, 2003-2019, 2021-2022 Free Software
-#   Foundation, Inc.
-#   Written by Gordon Matzigkeit, 1996
-#
-# This file is free software; the Free Software Foundation gives
-# unlimited permission to copy and/or distribute it, with or without
-# modifications, as long as this notice is preserved.
-
-m4_define([_LT_COPYING], [dnl
-# Copyright (C) 2014 Free Software Foundation, Inc.
-# This is free software; see the source for copying conditions.  There is NO
-# warranty; not even for MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.
-
-# GNU Libtool is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2 of of the License, or
-# (at your option) any later version.
-#
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program or library that is built
-# using GNU Libtool, you may include this file under the  same
-# distribution terms that you use for the rest of that program.
-#
-# GNU Libtool is distributed in the hope that it will be useful, but
-# WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-#
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <http://www.gnu.org/licenses/>.
-])
-
-# serial 59 LT_INIT
-
-
-# LT_PREREQ(VERSION)
-# ------------------
-# Complain and exit if this libtool version is less that VERSION.
-m4_defun([LT_PREREQ],
-[m4_if(m4_version_compare(m4_defn([LT_PACKAGE_VERSION]), [$1]), -1,
-       [m4_default([$3],
-		   [m4_fatal([Libtool version $1 or higher is required],
-		             63)])],
-       [$2])])
-
-
-# _LT_CHECK_BUILDDIR
-# ------------------
-# Complain if the absolute build directory name contains unusual characters
-m4_defun([_LT_CHECK_BUILDDIR],
-[case `pwd` in
-  *\ * | *\	*)
-    AC_MSG_WARN([Libtool does not cope well with whitespace in `pwd`]) ;;
-esac
-])
-
-
-# LT_INIT([OPTIONS])
-# ------------------
-AC_DEFUN([LT_INIT],
-[AC_PREREQ([2.62])dnl We use AC_PATH_PROGS_FEATURE_CHECK
-AC_REQUIRE([AC_CONFIG_AUX_DIR_DEFAULT])dnl
-AC_BEFORE([$0], [LT_LANG])dnl
-AC_BEFORE([$0], [LT_OUTPUT])dnl
-AC_BEFORE([$0], [LTDL_INIT])dnl
-m4_require([_LT_CHECK_BUILDDIR])dnl
-
-dnl Autoconf doesn't catch unexpanded LT_ macros by default:
-m4_pattern_forbid([^_?LT_[A-Z_]+$])dnl
-m4_pattern_allow([^(_LT_EOF|LT_DLGLOBAL|LT_DLLAZY_OR_NOW|LT_MULTI_MODULE)$])dnl
-dnl aclocal doesn't pull ltoptions.m4, ltsugar.m4, or ltversion.m4
-dnl unless we require an AC_DEFUNed macro:
-AC_REQUIRE([LTOPTIONS_VERSION])dnl
-AC_REQUIRE([LTSUGAR_VERSION])dnl
-AC_REQUIRE([LTVERSION_VERSION])dnl
-AC_REQUIRE([LTOBSOLETE_VERSION])dnl
-m4_require([_LT_PROG_LTMAIN])dnl
-
-_LT_SHELL_INIT([SHELL=${CONFIG_SHELL-/bin/sh}])
-
-dnl Parse OPTIONS
-_LT_SET_OPTIONS([$0], [$1])
-
-# This can be used to rebuild libtool when needed
-LIBTOOL_DEPS=$ltmain
-
-# Always use our own libtool.
-LIBTOOL='$(SHELL) $(top_builddir)/libtool'
-AC_SUBST(LIBTOOL)dnl
-
-_LT_SETUP
-
-# Only expand once:
-m4_define([LT_INIT])
-])# LT_INIT
-
-# Old names:
-AU_ALIAS([AC_PROG_LIBTOOL], [LT_INIT])
-AU_ALIAS([AM_PROG_LIBTOOL], [LT_INIT])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_PROG_LIBTOOL], [])
-dnl AC_DEFUN([AM_PROG_LIBTOOL], [])
-
-
-# _LT_PREPARE_CC_BASENAME
-# -----------------------
-m4_defun([_LT_PREPARE_CC_BASENAME], [
-# Calculate cc_basename.  Skip known compiler wrappers and cross-prefix.
-func_cc_basename ()
-{
-    for cc_temp in @S|@*""; do
-      case $cc_temp in
-        compile | *[[\\/]]compile | ccache | *[[\\/]]ccache ) ;;
-        distcc | *[[\\/]]distcc | purify | *[[\\/]]purify ) ;;
-        \-*) ;;
-        *) break;;
-      esac
-    done
-    func_cc_basename_result=`$ECHO "$cc_temp" | $SED "s%.*/%%; s%^$host_alias-%%"`
-}
-])# _LT_PREPARE_CC_BASENAME
-
-
-# _LT_CC_BASENAME(CC)
-# -------------------
-# It would be clearer to call AC_REQUIREs from _LT_PREPARE_CC_BASENAME,
-# but that macro is also expanded into generated libtool script, which
-# arranges for $SED and $ECHO to be set by different means.
-m4_defun([_LT_CC_BASENAME],
-[m4_require([_LT_PREPARE_CC_BASENAME])dnl
-AC_REQUIRE([_LT_DECL_SED])dnl
-AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])dnl
-func_cc_basename $1
-cc_basename=$func_cc_basename_result
-])
-
-
-# _LT_FILEUTILS_DEFAULTS
-# ----------------------
-# It is okay to use these file commands and assume they have been set
-# sensibly after 'm4_require([_LT_FILEUTILS_DEFAULTS])'.
-m4_defun([_LT_FILEUTILS_DEFAULTS],
-[: ${CP="cp -f"}
-: ${MV="mv -f"}
-: ${RM="rm -f"}
-])# _LT_FILEUTILS_DEFAULTS
-
-
-# _LT_SETUP
-# ---------
-m4_defun([_LT_SETUP],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-AC_REQUIRE([AC_CANONICAL_BUILD])dnl
-AC_REQUIRE([_LT_PREPARE_SED_QUOTE_VARS])dnl
-AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])dnl
-
-_LT_DECL([], [PATH_SEPARATOR], [1], [The PATH separator for the build system])dnl
-dnl
-_LT_DECL([], [host_alias], [0], [The host system])dnl
-_LT_DECL([], [host], [0])dnl
-_LT_DECL([], [host_os], [0])dnl
-dnl
-_LT_DECL([], [build_alias], [0], [The build system])dnl
-_LT_DECL([], [build], [0])dnl
-_LT_DECL([], [build_os], [0])dnl
-dnl
-AC_REQUIRE([AC_PROG_CC])dnl
-AC_REQUIRE([LT_PATH_LD])dnl
-AC_REQUIRE([LT_PATH_NM])dnl
-dnl
-AC_REQUIRE([AC_PROG_LN_S])dnl
-test -z "$LN_S" && LN_S="ln -s"
-_LT_DECL([], [LN_S], [1], [Whether we need soft or hard links])dnl
-dnl
-AC_REQUIRE([LT_CMD_MAX_LEN])dnl
-_LT_DECL([objext], [ac_objext], [0], [Object file suffix (normally "o")])dnl
-_LT_DECL([], [exeext], [0], [Executable file suffix (normally "")])dnl
-dnl
-m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_CHECK_SHELL_FEATURES])dnl
-m4_require([_LT_PATH_CONVERSION_FUNCTIONS])dnl
-m4_require([_LT_CMD_RELOAD])dnl
-m4_require([_LT_DECL_FILECMD])dnl
-m4_require([_LT_CHECK_MAGIC_METHOD])dnl
-m4_require([_LT_CHECK_SHAREDLIB_FROM_LINKLIB])dnl
-m4_require([_LT_CMD_OLD_ARCHIVE])dnl
-m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl
-m4_require([_LT_WITH_SYSROOT])dnl
-m4_require([_LT_CMD_TRUNCATE])dnl
-
-_LT_CONFIG_LIBTOOL_INIT([
-# See if we are running on zsh, and set the options that allow our
-# commands through without removal of \ escapes INIT.
-if test -n "\${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-])
-if test -n "${ZSH_VERSION+set}"; then
-   setopt NO_GLOB_SUBST
-fi
-
-_LT_CHECK_OBJDIR
-
-m4_require([_LT_TAG_COMPILER])dnl
-
-case $host_os in
-aix3*)
-  # AIX sometimes has problems with the GCC collect2 program.  For some
-  # reason, if we set the COLLECT_NAMES environment variable, the problems
-  # vanish in a puff of smoke.
-  if test set != "${COLLECT_NAMES+set}"; then
-    COLLECT_NAMES=
-    export COLLECT_NAMES
-  fi
-  ;;
-esac
-
-# Global variables:
-ofile=libtool
-can_build_shared=yes
-
-# All known linkers require a '.a' archive for static linking (except MSVC and
-# ICC, which need '.lib').
-libext=a
-
-with_gnu_ld=$lt_cv_prog_gnu_ld
-
-old_CC=$CC
-old_CFLAGS=$CFLAGS
-
-# Set sane defaults for various variables
-test -z "$CC" && CC=cc
-test -z "$LTCC" && LTCC=$CC
-test -z "$LTCFLAGS" && LTCFLAGS=$CFLAGS
-test -z "$LD" && LD=ld
-test -z "$ac_objext" && ac_objext=o
-
-_LT_CC_BASENAME([$compiler])
-
-# Only perform the check for file, if the check method requires it
-test -z "$MAGIC_CMD" && MAGIC_CMD=file
-case $deplibs_check_method in
-file_magic*)
-  if test "$file_magic_cmd" = '$MAGIC_CMD'; then
-    _LT_PATH_MAGIC
-  fi
-  ;;
-esac
-
-# Use C for the default configuration in the libtool script
-LT_SUPPORTED_TAG([CC])
-_LT_LANG_C_CONFIG
-_LT_LANG_DEFAULT_CONFIG
-_LT_CONFIG_COMMANDS
-])# _LT_SETUP
-
-
-# _LT_PREPARE_SED_QUOTE_VARS
-# --------------------------
-# Define a few sed substitution that help us do robust quoting.
-m4_defun([_LT_PREPARE_SED_QUOTE_VARS],
-[# Backslashify metacharacters that are still active within
-# double-quoted strings.
-sed_quote_subst='s/\([["`$\\]]\)/\\\1/g'
-
-# Same as above, but do not quote variable references.
-double_quote_subst='s/\([["`\\]]\)/\\\1/g'
-
-# Sed substitution to delay expansion of an escaped shell variable in a
-# double_quote_subst'ed string.
-delay_variable_subst='s/\\\\\\\\\\\$/\\\\\\$/g'
-
-# Sed substitution to delay expansion of an escaped single quote.
-delay_single_quote_subst='s/'\''/'\'\\\\\\\'\''/g'
-
-# Sed substitution to avoid accidental globbing in evaled expressions
-no_glob_subst='s/\*/\\\*/g'
-])
-
-# _LT_PROG_LTMAIN
-# ---------------
-# Note that this code is called both from 'configure', and 'config.status'
-# now that we use AC_CONFIG_COMMANDS to generate libtool.  Notably,
-# 'config.status' has no value for ac_aux_dir unless we are using Automake,
-# so we pass a copy along to make sure it has a sensible value anyway.
-m4_defun([_LT_PROG_LTMAIN],
-[m4_ifdef([AC_REQUIRE_AUX_FILE], [AC_REQUIRE_AUX_FILE([ltmain.sh])])dnl
-_LT_CONFIG_LIBTOOL_INIT([ac_aux_dir='$ac_aux_dir'])
-ltmain=$ac_aux_dir/ltmain.sh
-])# _LT_PROG_LTMAIN
-
-
-## ------------------------------------- ##
-## Accumulate code for creating libtool. ##
-## ------------------------------------- ##
-
-# So that we can recreate a full libtool script including additional
-# tags, we accumulate the chunks of code to send to AC_CONFIG_COMMANDS
-# in macros and then make a single call at the end using the 'libtool'
-# label.
-
-
-# _LT_CONFIG_LIBTOOL_INIT([INIT-COMMANDS])
-# ----------------------------------------
-# Register INIT-COMMANDS to be passed to AC_CONFIG_COMMANDS later.
-m4_define([_LT_CONFIG_LIBTOOL_INIT],
-[m4_ifval([$1],
-          [m4_append([_LT_OUTPUT_LIBTOOL_INIT],
-                     [$1
-])])])
-
-# Initialize.
-m4_define([_LT_OUTPUT_LIBTOOL_INIT])
-
-
-# _LT_CONFIG_LIBTOOL([COMMANDS])
-# ------------------------------
-# Register COMMANDS to be passed to AC_CONFIG_COMMANDS later.
-m4_define([_LT_CONFIG_LIBTOOL],
-[m4_ifval([$1],
-          [m4_append([_LT_OUTPUT_LIBTOOL_COMMANDS],
-                     [$1
-])])])
-
-# Initialize.
-m4_define([_LT_OUTPUT_LIBTOOL_COMMANDS])
-
-
-# _LT_CONFIG_SAVE_COMMANDS([COMMANDS], [INIT_COMMANDS])
-# -----------------------------------------------------
-m4_defun([_LT_CONFIG_SAVE_COMMANDS],
-[_LT_CONFIG_LIBTOOL([$1])
-_LT_CONFIG_LIBTOOL_INIT([$2])
-])
-
-
-# _LT_FORMAT_COMMENT([COMMENT])
-# -----------------------------
-# Add leading comment marks to the start of each line, and a trailing
-# full-stop to the whole comment if one is not present already.
-m4_define([_LT_FORMAT_COMMENT],
-[m4_ifval([$1], [
-m4_bpatsubst([m4_bpatsubst([$1], [^ *], [# ])],
-              [['`$\]], [\\\&])]m4_bmatch([$1], [[!?.]$], [], [.])
-)])
-
-
-
-## ------------------------ ##
-## FIXME: Eliminate VARNAME ##
-## ------------------------ ##
-
-
-# _LT_DECL([CONFIGNAME], VARNAME, VALUE, [DESCRIPTION], [IS-TAGGED?])
-# -------------------------------------------------------------------
-# CONFIGNAME is the name given to the value in the libtool script.
-# VARNAME is the (base) name used in the configure script.
-# VALUE may be 0, 1 or 2 for a computed quote escaped value based on
-# VARNAME.  Any other value will be used directly.
-m4_define([_LT_DECL],
-[lt_if_append_uniq([lt_decl_varnames], [$2], [, ],
-    [lt_dict_add_subkey([lt_decl_dict], [$2], [libtool_name],
-	[m4_ifval([$1], [$1], [$2])])
-    lt_dict_add_subkey([lt_decl_dict], [$2], [value], [$3])
-    m4_ifval([$4],
-	[lt_dict_add_subkey([lt_decl_dict], [$2], [description], [$4])])
-    lt_dict_add_subkey([lt_decl_dict], [$2],
-	[tagged?], [m4_ifval([$5], [yes], [no])])])
-])
-
-
-# _LT_TAGDECL([CONFIGNAME], VARNAME, VALUE, [DESCRIPTION])
-# --------------------------------------------------------
-m4_define([_LT_TAGDECL], [_LT_DECL([$1], [$2], [$3], [$4], [yes])])
-
-
-# lt_decl_tag_varnames([SEPARATOR], [VARNAME1...])
-# ------------------------------------------------
-m4_define([lt_decl_tag_varnames],
-[_lt_decl_filter([tagged?], [yes], $@)])
-
-
-# _lt_decl_filter(SUBKEY, VALUE, [SEPARATOR], [VARNAME1..])
-# ---------------------------------------------------------
-m4_define([_lt_decl_filter],
-[m4_case([$#],
-  [0], [m4_fatal([$0: too few arguments: $#])],
-  [1], [m4_fatal([$0: too few arguments: $#: $1])],
-  [2], [lt_dict_filter([lt_decl_dict], [$1], [$2], [], lt_decl_varnames)],
-  [3], [lt_dict_filter([lt_decl_dict], [$1], [$2], [$3], lt_decl_varnames)],
-  [lt_dict_filter([lt_decl_dict], $@)])[]dnl
-])
-
-
-# lt_decl_quote_varnames([SEPARATOR], [VARNAME1...])
-# --------------------------------------------------
-m4_define([lt_decl_quote_varnames],
-[_lt_decl_filter([value], [1], $@)])
-
-
-# lt_decl_dquote_varnames([SEPARATOR], [VARNAME1...])
-# ---------------------------------------------------
-m4_define([lt_decl_dquote_varnames],
-[_lt_decl_filter([value], [2], $@)])
-
-
-# lt_decl_varnames_tagged([SEPARATOR], [VARNAME1...])
-# ---------------------------------------------------
-m4_define([lt_decl_varnames_tagged],
-[m4_assert([$# <= 2])dnl
-_$0(m4_quote(m4_default([$1], [[, ]])),
-    m4_ifval([$2], [[$2]], [m4_dquote(lt_decl_tag_varnames)]),
-    m4_split(m4_normalize(m4_quote(_LT_TAGS)), [ ]))])
-m4_define([_lt_decl_varnames_tagged],
-[m4_ifval([$3], [lt_combine([$1], [$2], [_], $3)])])
-
-
-# lt_decl_all_varnames([SEPARATOR], [VARNAME1...])
-# ------------------------------------------------
-m4_define([lt_decl_all_varnames],
-[_$0(m4_quote(m4_default([$1], [[, ]])),
-     m4_if([$2], [],
-	   m4_quote(lt_decl_varnames),
-	m4_quote(m4_shift($@))))[]dnl
-])
-m4_define([_lt_decl_all_varnames],
-[lt_join($@, lt_decl_varnames_tagged([$1],
-			lt_decl_tag_varnames([[, ]], m4_shift($@))))dnl
-])
-
-
-# _LT_CONFIG_STATUS_DECLARE([VARNAME])
-# ------------------------------------
-# Quote a variable value, and forward it to 'config.status' so that its
-# declaration there will have the same value as in 'configure'.  VARNAME
-# must have a single quote delimited value for this to work.
-m4_define([_LT_CONFIG_STATUS_DECLARE],
-[$1='`$ECHO "$][$1" | $SED "$delay_single_quote_subst"`'])
-
-
-# _LT_CONFIG_STATUS_DECLARATIONS
-# ------------------------------
-# We delimit libtool config variables with single quotes, so when
-# we write them to config.status, we have to be sure to quote all
-# embedded single quotes properly.  In configure, this macro expands
-# each variable declared with _LT_DECL (and _LT_TAGDECL) into:
-#
-#    <var>='`$ECHO "$<var>" | $SED "$delay_single_quote_subst"`'
-m4_defun([_LT_CONFIG_STATUS_DECLARATIONS],
-[m4_foreach([_lt_var], m4_quote(lt_decl_all_varnames),
-    [m4_n([_LT_CONFIG_STATUS_DECLARE(_lt_var)])])])
-
-
-# _LT_LIBTOOL_TAGS
-# ----------------
-# Output comment and list of tags supported by the script
-m4_defun([_LT_LIBTOOL_TAGS],
-[_LT_FORMAT_COMMENT([The names of the tagged configurations supported by this script])dnl
-available_tags='_LT_TAGS'dnl
-])
-
-
-# _LT_LIBTOOL_DECLARE(VARNAME, [TAG])
-# -----------------------------------
-# Extract the dictionary values for VARNAME (optionally with TAG) and
-# expand to a commented shell variable setting:
-#
-#    # Some comment about what VAR is for.
-#    visible_name=$lt_internal_name
-m4_define([_LT_LIBTOOL_DECLARE],
-[_LT_FORMAT_COMMENT(m4_quote(lt_dict_fetch([lt_decl_dict], [$1],
-					   [description])))[]dnl
-m4_pushdef([_libtool_name],
-    m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [libtool_name])))[]dnl
-m4_case(m4_quote(lt_dict_fetch([lt_decl_dict], [$1], [value])),
-    [0], [_libtool_name=[$]$1],
-    [1], [_libtool_name=$lt_[]$1],
-    [2], [_libtool_name=$lt_[]$1],
-    [_libtool_name=lt_dict_fetch([lt_decl_dict], [$1], [value])])[]dnl
-m4_ifval([$2], [_$2])[]m4_popdef([_libtool_name])[]dnl
-])
-
-
-# _LT_LIBTOOL_CONFIG_VARS
-# -----------------------
-# Produce commented declarations of non-tagged libtool config variables
-# suitable for insertion in the LIBTOOL CONFIG section of the 'libtool'
-# script.  Tagged libtool config variables (even for the LIBTOOL CONFIG
-# section) are produced by _LT_LIBTOOL_TAG_VARS.
-m4_defun([_LT_LIBTOOL_CONFIG_VARS],
-[m4_foreach([_lt_var],
-    m4_quote(_lt_decl_filter([tagged?], [no], [], lt_decl_varnames)),
-    [m4_n([_LT_LIBTOOL_DECLARE(_lt_var)])])])
-
-
-# _LT_LIBTOOL_TAG_VARS(TAG)
-# -------------------------
-m4_define([_LT_LIBTOOL_TAG_VARS],
-[m4_foreach([_lt_var], m4_quote(lt_decl_tag_varnames),
-    [m4_n([_LT_LIBTOOL_DECLARE(_lt_var, [$1])])])])
-
-
-# _LT_TAGVAR(VARNAME, [TAGNAME])
-# ------------------------------
-m4_define([_LT_TAGVAR], [m4_ifval([$2], [$1_$2], [$1])])
-
-
-# _LT_CONFIG_COMMANDS
-# -------------------
-# Send accumulated output to $CONFIG_STATUS.  Thanks to the lists of
-# variables for single and double quote escaping we saved from calls
-# to _LT_DECL, we can put quote escaped variables declarations
-# into 'config.status', and then the shell code to quote escape them in
-# for loops in 'config.status'.  Finally, any additional code accumulated
-# from calls to _LT_CONFIG_LIBTOOL_INIT is expanded.
-m4_defun([_LT_CONFIG_COMMANDS],
-[AC_PROVIDE_IFELSE([LT_OUTPUT],
-	dnl If the libtool generation code has been placed in $CONFIG_LT,
-	dnl instead of duplicating it all over again into config.status,
-	dnl then we will have config.status run $CONFIG_LT later, so it
-	dnl needs to know what name is stored there:
-        [AC_CONFIG_COMMANDS([libtool],
-            [$SHELL $CONFIG_LT || AS_EXIT(1)], [CONFIG_LT='$CONFIG_LT'])],
-    dnl If the libtool generation code is destined for config.status,
-    dnl expand the accumulated commands and init code now:
-    [AC_CONFIG_COMMANDS([libtool],
-        [_LT_OUTPUT_LIBTOOL_COMMANDS], [_LT_OUTPUT_LIBTOOL_COMMANDS_INIT])])
-])#_LT_CONFIG_COMMANDS
-
-
-# Initialize.
-m4_define([_LT_OUTPUT_LIBTOOL_COMMANDS_INIT],
-[
-
-# The HP-UX ksh and POSIX shell print the target directory to stdout
-# if CDPATH is set.
-(unset CDPATH) >/dev/null 2>&1 && unset CDPATH
-
-sed_quote_subst='$sed_quote_subst'
-double_quote_subst='$double_quote_subst'
-delay_variable_subst='$delay_variable_subst'
-_LT_CONFIG_STATUS_DECLARATIONS
-LTCC='$LTCC'
-LTCFLAGS='$LTCFLAGS'
-compiler='$compiler_DEFAULT'
-
-# A function that is used when there is no print builtin or printf.
-func_fallback_echo ()
-{
-  eval 'cat <<_LTECHO_EOF
-\$[]1
-_LTECHO_EOF'
-}
-
-# Quote evaled strings.
-for var in lt_decl_all_varnames([[ \
-]], lt_decl_quote_varnames); do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[[\\\\\\\`\\"\\\$]]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED \\"\\\$sed_quote_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-# Double-quote double-evaled strings.
-for var in lt_decl_all_varnames([[ \
-]], lt_decl_dquote_varnames); do
-    case \`eval \\\\\$ECHO \\\\""\\\\\$\$var"\\\\"\` in
-    *[[\\\\\\\`\\"\\\$]]*)
-      eval "lt_\$var=\\\\\\"\\\`\\\$ECHO \\"\\\$\$var\\" | \\\$SED -e \\"\\\$double_quote_subst\\" -e \\"\\\$sed_quote_subst\\" -e \\"\\\$delay_variable_subst\\"\\\`\\\\\\"" ## exclude from sc_prohibit_nested_quotes
-      ;;
-    *)
-      eval "lt_\$var=\\\\\\"\\\$\$var\\\\\\""
-      ;;
-    esac
-done
-
-_LT_OUTPUT_LIBTOOL_INIT
-])
-
-# _LT_GENERATED_FILE_INIT(FILE, [COMMENT])
-# ------------------------------------
-# Generate a child script FILE with all initialization necessary to
-# reuse the environment learned by the parent script, and make the
-# file executable.  If COMMENT is supplied, it is inserted after the
-# '#!' sequence but before initialization text begins.  After this
-# macro, additional text can be appended to FILE to form the body of
-# the child script.  The macro ends with non-zero status if the
-# file could not be fully written (such as if the disk is full).
-m4_ifdef([AS_INIT_GENERATED],
-[m4_defun([_LT_GENERATED_FILE_INIT],[AS_INIT_GENERATED($@)])],
-[m4_defun([_LT_GENERATED_FILE_INIT],
-[m4_require([AS_PREPARE])]dnl
-[m4_pushdef([AS_MESSAGE_LOG_FD])]dnl
-[lt_write_fail=0
-cat >$1 <<_ASEOF || lt_write_fail=1
-#! $SHELL
-# Generated by $as_me.
-$2
-SHELL=\${CONFIG_SHELL-$SHELL}
-export SHELL
-_ASEOF
-cat >>$1 <<\_ASEOF || lt_write_fail=1
-AS_SHELL_SANITIZE
-_AS_PREPARE
-exec AS_MESSAGE_FD>&1
-_ASEOF
-test 0 = "$lt_write_fail" && chmod +x $1[]dnl
-m4_popdef([AS_MESSAGE_LOG_FD])])])# _LT_GENERATED_FILE_INIT
-
-# LT_OUTPUT
-# ---------
-# This macro allows early generation of the libtool script (before
-# AC_OUTPUT is called), incase it is used in configure for compilation
-# tests.
-AC_DEFUN([LT_OUTPUT],
-[: ${CONFIG_LT=./config.lt}
-AC_MSG_NOTICE([creating $CONFIG_LT])
-_LT_GENERATED_FILE_INIT(["$CONFIG_LT"],
-[# Run this file to recreate a libtool stub with the current configuration.])
-
-cat >>"$CONFIG_LT" <<\_LTEOF
-lt_cl_silent=false
-exec AS_MESSAGE_LOG_FD>>config.log
-{
-  echo
-  AS_BOX([Running $as_me.])
-} >&AS_MESSAGE_LOG_FD
-
-lt_cl_help="\
-'$as_me' creates a local libtool stub from the current configuration,
-for use in further configure time tests before the real libtool is
-generated.
-
-Usage: $[0] [[OPTIONS]]
-
-  -h, --help      print this help, then exit
-  -V, --version   print version number, then exit
-  -q, --quiet     do not print progress messages
-  -d, --debug     don't remove temporary files
-
-Report bugs to <bug-libtool@gnu.org>."
-
-lt_cl_version="\
-m4_ifset([AC_PACKAGE_NAME], [AC_PACKAGE_NAME ])config.lt[]dnl
-m4_ifset([AC_PACKAGE_VERSION], [ AC_PACKAGE_VERSION])
-configured by $[0], generated by m4_PACKAGE_STRING.
-
-Copyright (C) 2011 Free Software Foundation, Inc.
-This config.lt script is free software; the Free Software Foundation
-gives unlimited permision to copy, distribute and modify it."
-
-while test 0 != $[#]
-do
-  case $[1] in
-    --version | --v* | -V )
-      echo "$lt_cl_version"; exit 0 ;;
-    --help | --h* | -h )
-      echo "$lt_cl_help"; exit 0 ;;
-    --debug | --d* | -d )
-      debug=: ;;
-    --quiet | --q* | --silent | --s* | -q )
-      lt_cl_silent=: ;;
-
-    -*) AC_MSG_ERROR([unrecognized option: $[1]
-Try '$[0] --help' for more information.]) ;;
-
-    *) AC_MSG_ERROR([unrecognized argument: $[1]
-Try '$[0] --help' for more information.]) ;;
-  esac
-  shift
-done
-
-if $lt_cl_silent; then
-  exec AS_MESSAGE_FD>/dev/null
-fi
-_LTEOF
-
-cat >>"$CONFIG_LT" <<_LTEOF
-_LT_OUTPUT_LIBTOOL_COMMANDS_INIT
-_LTEOF
-
-cat >>"$CONFIG_LT" <<\_LTEOF
-AC_MSG_NOTICE([creating $ofile])
-_LT_OUTPUT_LIBTOOL_COMMANDS
-AS_EXIT(0)
-_LTEOF
-chmod +x "$CONFIG_LT"
-
-# configure is writing to config.log, but config.lt does its own redirection,
-# appending to config.log, which fails on DOS, as config.log is still kept
-# open by configure.  Here we exec the FD to /dev/null, effectively closing
-# config.log, so it can be properly (re)opened and appended to by config.lt.
-lt_cl_success=:
-test yes = "$silent" &&
-  lt_config_lt_args="$lt_config_lt_args --quiet"
-exec AS_MESSAGE_LOG_FD>/dev/null
-$SHELL "$CONFIG_LT" $lt_config_lt_args || lt_cl_success=false
-exec AS_MESSAGE_LOG_FD>>config.log
-$lt_cl_success || AS_EXIT(1)
-])# LT_OUTPUT
-
-
-# _LT_CONFIG(TAG)
-# ---------------
-# If TAG is the built-in tag, create an initial libtool script with a
-# default configuration from the untagged config vars.  Otherwise add code
-# to config.status for appending the configuration named by TAG from the
-# matching tagged config vars.
-m4_defun([_LT_CONFIG],
-[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-_LT_CONFIG_SAVE_COMMANDS([
-  m4_define([_LT_TAG], m4_if([$1], [], [C], [$1]))dnl
-  m4_if(_LT_TAG, [C], [
-    # See if we are running on zsh, and set the options that allow our
-    # commands through without removal of \ escapes.
-    if test -n "${ZSH_VERSION+set}"; then
-      setopt NO_GLOB_SUBST
-    fi
-
-    cfgfile=${ofile}T
-    trap "$RM \"$cfgfile\"; exit 1" 1 2 15
-    $RM "$cfgfile"
-
-    cat <<_LT_EOF >> "$cfgfile"
-#! $SHELL
-# Generated automatically by $as_me ($PACKAGE) $VERSION
-# Libtool was configured on host `(hostname || uname -n) 2>/dev/null | sed 1q`:
-# NOTE: Changes made to this file will be lost: look at ltmain.sh.
-
-# Provide generalized library-building support services.
-# Written by Gordon Matzigkeit, 1996
-
-_LT_COPYING
-_LT_LIBTOOL_TAGS
-
-# Configured defaults for sys_lib_dlsearch_path munging.
-: \${LT_SYS_LIBRARY_PATH="$configure_time_lt_sys_library_path"}
-
-# ### BEGIN LIBTOOL CONFIG
-_LT_LIBTOOL_CONFIG_VARS
-_LT_LIBTOOL_TAG_VARS
-# ### END LIBTOOL CONFIG
-
-_LT_EOF
-
-    cat <<'_LT_EOF' >> "$cfgfile"
-
-# ### BEGIN FUNCTIONS SHARED WITH CONFIGURE
-
-_LT_PREPARE_MUNGE_PATH_LIST
-_LT_PREPARE_CC_BASENAME
-
-# ### END FUNCTIONS SHARED WITH CONFIGURE
-
-_LT_EOF
-
-  case $host_os in
-  aix3*)
-    cat <<\_LT_EOF >> "$cfgfile"
-# AIX sometimes has problems with the GCC collect2 program.  For some
-# reason, if we set the COLLECT_NAMES environment variable, the problems
-# vanish in a puff of smoke.
-if test set != "${COLLECT_NAMES+set}"; then
-  COLLECT_NAMES=
-  export COLLECT_NAMES
-fi
-_LT_EOF
-    ;;
-  esac
-
-  _LT_PROG_LTMAIN
-
-  # We use sed instead of cat because bash on DJGPP gets confused if
-  # if finds mixed CR/LF and LF-only lines.  Since sed operates in
-  # text mode, it properly converts lines to CR/LF.  This bash problem
-  # is reportedly fixed, but why not run on old versions too?
-  $SED '$q' "$ltmain" >> "$cfgfile" \
-     || (rm -f "$cfgfile"; exit 1)
-
-   mv -f "$cfgfile" "$ofile" ||
-    (rm -f "$ofile" && cp "$cfgfile" "$ofile" && rm -f "$cfgfile")
-  chmod +x "$ofile"
-],
-[cat <<_LT_EOF >> "$ofile"
-
-dnl Unfortunately we have to use $1 here, since _LT_TAG is not expanded
-dnl in a comment (ie after a #).
-# ### BEGIN LIBTOOL TAG CONFIG: $1
-_LT_LIBTOOL_TAG_VARS(_LT_TAG)
-# ### END LIBTOOL TAG CONFIG: $1
-_LT_EOF
-])dnl /m4_if
-],
-[m4_if([$1], [], [
-    PACKAGE='$PACKAGE'
-    VERSION='$VERSION'
-    RM='$RM'
-    ofile='$ofile'], [])
-])dnl /_LT_CONFIG_SAVE_COMMANDS
-])# _LT_CONFIG
-
-
-# LT_SUPPORTED_TAG(TAG)
-# ---------------------
-# Trace this macro to discover what tags are supported by the libtool
-# --tag option, using:
-#    autoconf --trace 'LT_SUPPORTED_TAG:$1'
-AC_DEFUN([LT_SUPPORTED_TAG], [])
-
-
-# C support is built-in for now
-m4_define([_LT_LANG_C_enabled], [])
-m4_define([_LT_TAGS], [])
-
-
-# LT_LANG(LANG)
-# -------------
-# Enable libtool support for the given language if not already enabled.
-AC_DEFUN([LT_LANG],
-[AC_BEFORE([$0], [LT_OUTPUT])dnl
-m4_case([$1],
-  [C],			[_LT_LANG(C)],
-  [C++],		[_LT_LANG(CXX)],
-  [Go],			[_LT_LANG(GO)],
-  [Java],		[_LT_LANG(GCJ)],
-  [Fortran 77],		[_LT_LANG(F77)],
-  [Fortran],		[_LT_LANG(FC)],
-  [Windows Resource],	[_LT_LANG(RC)],
-  [m4_ifdef([_LT_LANG_]$1[_CONFIG],
-    [_LT_LANG($1)],
-    [m4_fatal([$0: unsupported language: "$1"])])])dnl
-])# LT_LANG
-
-
-# _LT_LANG(LANGNAME)
-# ------------------
-m4_defun([_LT_LANG],
-[m4_ifdef([_LT_LANG_]$1[_enabled], [],
-  [LT_SUPPORTED_TAG([$1])dnl
-  m4_append([_LT_TAGS], [$1 ])dnl
-  m4_define([_LT_LANG_]$1[_enabled], [])dnl
-  _LT_LANG_$1_CONFIG($1)])dnl
-])# _LT_LANG
-
-
-m4_ifndef([AC_PROG_GO], [
-############################################################
-# NOTE: This macro has been submitted for inclusion into   #
-#  GNU Autoconf as AC_PROG_GO.  When it is available in    #
-#  a released version of Autoconf we should remove this    #
-#  macro and use it instead.                               #
-############################################################
-m4_defun([AC_PROG_GO],
-[AC_LANG_PUSH(Go)dnl
-AC_ARG_VAR([GOC],     [Go compiler command])dnl
-AC_ARG_VAR([GOFLAGS], [Go compiler flags])dnl
-_AC_ARG_VAR_LDFLAGS()dnl
-AC_CHECK_TOOL(GOC, gccgo)
-if test -z "$GOC"; then
-  if test -n "$ac_tool_prefix"; then
-    AC_CHECK_PROG(GOC, [${ac_tool_prefix}gccgo], [${ac_tool_prefix}gccgo])
-  fi
-fi
-if test -z "$GOC"; then
-  AC_CHECK_PROG(GOC, gccgo, gccgo, false)
-fi
-])#m4_defun
-])#m4_ifndef
-
-
-# _LT_LANG_DEFAULT_CONFIG
-# -----------------------
-m4_defun([_LT_LANG_DEFAULT_CONFIG],
-[AC_PROVIDE_IFELSE([AC_PROG_CXX],
-  [LT_LANG(CXX)],
-  [m4_define([AC_PROG_CXX], defn([AC_PROG_CXX])[LT_LANG(CXX)])])
-
-AC_PROVIDE_IFELSE([AC_PROG_F77],
-  [LT_LANG(F77)],
-  [m4_define([AC_PROG_F77], defn([AC_PROG_F77])[LT_LANG(F77)])])
-
-AC_PROVIDE_IFELSE([AC_PROG_FC],
-  [LT_LANG(FC)],
-  [m4_define([AC_PROG_FC], defn([AC_PROG_FC])[LT_LANG(FC)])])
-
-dnl The call to [A][M_PROG_GCJ] is quoted like that to stop aclocal
-dnl pulling things in needlessly.
-AC_PROVIDE_IFELSE([AC_PROG_GCJ],
-  [LT_LANG(GCJ)],
-  [AC_PROVIDE_IFELSE([A][M_PROG_GCJ],
-    [LT_LANG(GCJ)],
-    [AC_PROVIDE_IFELSE([LT_PROG_GCJ],
-      [LT_LANG(GCJ)],
-      [m4_ifdef([AC_PROG_GCJ],
-	[m4_define([AC_PROG_GCJ], defn([AC_PROG_GCJ])[LT_LANG(GCJ)])])
-       m4_ifdef([A][M_PROG_GCJ],
-	[m4_define([A][M_PROG_GCJ], defn([A][M_PROG_GCJ])[LT_LANG(GCJ)])])
-       m4_ifdef([LT_PROG_GCJ],
-	[m4_define([LT_PROG_GCJ], defn([LT_PROG_GCJ])[LT_LANG(GCJ)])])])])])
-
-AC_PROVIDE_IFELSE([AC_PROG_GO],
-  [LT_LANG(GO)],
-  [m4_define([AC_PROG_GO], defn([AC_PROG_GO])[LT_LANG(GO)])])
-
-AC_PROVIDE_IFELSE([LT_PROG_RC],
-  [LT_LANG(RC)],
-  [m4_define([LT_PROG_RC], defn([LT_PROG_RC])[LT_LANG(RC)])])
-])# _LT_LANG_DEFAULT_CONFIG
-
-# Obsolete macros:
-AU_DEFUN([AC_LIBTOOL_CXX], [LT_LANG(C++)])
-AU_DEFUN([AC_LIBTOOL_F77], [LT_LANG(Fortran 77)])
-AU_DEFUN([AC_LIBTOOL_FC], [LT_LANG(Fortran)])
-AU_DEFUN([AC_LIBTOOL_GCJ], [LT_LANG(Java)])
-AU_DEFUN([AC_LIBTOOL_RC], [LT_LANG(Windows Resource)])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_CXX], [])
-dnl AC_DEFUN([AC_LIBTOOL_F77], [])
-dnl AC_DEFUN([AC_LIBTOOL_FC], [])
-dnl AC_DEFUN([AC_LIBTOOL_GCJ], [])
-dnl AC_DEFUN([AC_LIBTOOL_RC], [])
-
-
-# _LT_TAG_COMPILER
-# ----------------
-m4_defun([_LT_TAG_COMPILER],
-[AC_REQUIRE([AC_PROG_CC])dnl
-
-_LT_DECL([LTCC], [CC], [1], [A C compiler])dnl
-_LT_DECL([LTCFLAGS], [CFLAGS], [1], [LTCC compiler flags])dnl
-_LT_TAGDECL([CC], [compiler], [1], [A language specific compiler])dnl
-_LT_TAGDECL([with_gcc], [GCC], [0], [Is the compiler the GNU compiler?])dnl
-
-# If no C compiler was specified, use CC.
-LTCC=${LTCC-"$CC"}
-
-# If no C compiler flags were specified, use CFLAGS.
-LTCFLAGS=${LTCFLAGS-"$CFLAGS"}
-
-# Allow CC to be a program name with arguments.
-compiler=$CC
-])# _LT_TAG_COMPILER
-
-
-# _LT_COMPILER_BOILERPLATE
-# ------------------------
-# Check for compiler boilerplate output or warnings with
-# the simple compiler test code.
-m4_defun([_LT_COMPILER_BOILERPLATE],
-[m4_require([_LT_DECL_SED])dnl
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_compile_test_code" >conftest.$ac_ext
-eval "$ac_compile" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_compiler_boilerplate=`cat conftest.err`
-$RM conftest*
-])# _LT_COMPILER_BOILERPLATE
-
-
-# _LT_LINKER_BOILERPLATE
-# ----------------------
-# Check for linker boilerplate output or warnings with
-# the simple link test code.
-m4_defun([_LT_LINKER_BOILERPLATE],
-[m4_require([_LT_DECL_SED])dnl
-ac_outfile=conftest.$ac_objext
-echo "$lt_simple_link_test_code" >conftest.$ac_ext
-eval "$ac_link" 2>&1 >/dev/null | $SED '/^$/d; /^ *+/d' >conftest.err
-_lt_linker_boilerplate=`cat conftest.err`
-$RM -r conftest*
-])# _LT_LINKER_BOILERPLATE
-
-# _LT_REQUIRED_DARWIN_CHECKS
-# -------------------------
-m4_defun_once([_LT_REQUIRED_DARWIN_CHECKS],[
-  case $host_os in
-    rhapsody* | darwin*)
-    AC_CHECK_TOOL([DSYMUTIL], [dsymutil], [:])
-    AC_CHECK_TOOL([NMEDIT], [nmedit], [:])
-    AC_CHECK_TOOL([LIPO], [lipo], [:])
-    AC_CHECK_TOOL([OTOOL], [otool], [:])
-    AC_CHECK_TOOL([OTOOL64], [otool64], [:])
-    _LT_DECL([], [DSYMUTIL], [1],
-      [Tool to manipulate archived DWARF debug symbol files on Mac OS X])
-    _LT_DECL([], [NMEDIT], [1],
-      [Tool to change global to local symbols on Mac OS X])
-    _LT_DECL([], [LIPO], [1],
-      [Tool to manipulate fat objects and archives on Mac OS X])
-    _LT_DECL([], [OTOOL], [1],
-      [ldd/readelf like tool for Mach-O binaries on Mac OS X])
-    _LT_DECL([], [OTOOL64], [1],
-      [ldd/readelf like tool for 64 bit Mach-O binaries on Mac OS X 10.4])
-
-    AC_CACHE_CHECK([for -single_module linker flag],[lt_cv_apple_cc_single_mod],
-      [lt_cv_apple_cc_single_mod=no
-      if test -z "$LT_MULTI_MODULE"; then
-	# By default we will add the -single_module flag. You can override
-	# by either setting the environment variable LT_MULTI_MODULE
-	# non-empty at configure time, or by adding -multi_module to the
-	# link flags.
-	rm -rf libconftest.dylib*
-	echo "int foo(void){return 1;}" > conftest.c
-	echo "$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
--dynamiclib -Wl,-single_module conftest.c" >&AS_MESSAGE_LOG_FD
-	$LTCC $LTCFLAGS $LDFLAGS -o libconftest.dylib \
-	  -dynamiclib -Wl,-single_module conftest.c 2>conftest.err
-        _lt_result=$?
-	# If there is a non-empty error log, and "single_module"
-	# appears in it, assume the flag caused a linker warning
-        if test -s conftest.err && $GREP single_module conftest.err; then
-	  cat conftest.err >&AS_MESSAGE_LOG_FD
-	# Otherwise, if the output was created with a 0 exit code from
-	# the compiler, it worked.
-	elif test -f libconftest.dylib && test 0 = "$_lt_result"; then
-	  lt_cv_apple_cc_single_mod=yes
-	else
-	  cat conftest.err >&AS_MESSAGE_LOG_FD
-	fi
-	rm -rf libconftest.dylib*
-	rm -f conftest.*
-      fi])
-
-    AC_CACHE_CHECK([for -exported_symbols_list linker flag],
-      [lt_cv_ld_exported_symbols_list],
-      [lt_cv_ld_exported_symbols_list=no
-      save_LDFLAGS=$LDFLAGS
-      echo "_main" > conftest.sym
-      LDFLAGS="$LDFLAGS -Wl,-exported_symbols_list,conftest.sym"
-      AC_LINK_IFELSE([AC_LANG_PROGRAM([],[])],
-	[lt_cv_ld_exported_symbols_list=yes],
-	[lt_cv_ld_exported_symbols_list=no])
-	LDFLAGS=$save_LDFLAGS
-    ])
-
-    AC_CACHE_CHECK([for -force_load linker flag],[lt_cv_ld_force_load],
-      [lt_cv_ld_force_load=no
-      cat > conftest.c << _LT_EOF
-int forced_loaded() { return 2;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS -c -o conftest.o conftest.c" >&AS_MESSAGE_LOG_FD
-      $LTCC $LTCFLAGS -c -o conftest.o conftest.c 2>&AS_MESSAGE_LOG_FD
-      echo "$AR $AR_FLAGS libconftest.a conftest.o" >&AS_MESSAGE_LOG_FD
-      $AR $AR_FLAGS libconftest.a conftest.o 2>&AS_MESSAGE_LOG_FD
-      echo "$RANLIB libconftest.a" >&AS_MESSAGE_LOG_FD
-      $RANLIB libconftest.a 2>&AS_MESSAGE_LOG_FD
-      cat > conftest.c << _LT_EOF
-int main() { return 0;}
-_LT_EOF
-      echo "$LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a" >&AS_MESSAGE_LOG_FD
-      $LTCC $LTCFLAGS $LDFLAGS -o conftest conftest.c -Wl,-force_load,./libconftest.a 2>conftest.err
-      _lt_result=$?
-      if test -s conftest.err && $GREP force_load conftest.err; then
-	cat conftest.err >&AS_MESSAGE_LOG_FD
-      elif test -f conftest && test 0 = "$_lt_result" && $GREP forced_load conftest >/dev/null 2>&1; then
-	lt_cv_ld_force_load=yes
-      else
-	cat conftest.err >&AS_MESSAGE_LOG_FD
-      fi
-        rm -f conftest.err libconftest.a conftest conftest.c
-        rm -rf conftest.dSYM
-    ])
-    case $host_os in
-    rhapsody* | darwin1.[[012]])
-      _lt_dar_allow_undefined='$wl-undefined ${wl}suppress' ;;
-    darwin1.*)
-      _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-    darwin*)
-      case $MACOSX_DEPLOYMENT_TARGET,$host in
-        10.[[012]],*|,*powerpc*-darwin[[5-8]]*)
-          _lt_dar_allow_undefined='$wl-flat_namespace $wl-undefined ${wl}suppress' ;;
-        *)
-          _lt_dar_allow_undefined='$wl-undefined ${wl}dynamic_lookup' ;;
-      esac
-    ;;
-  esac
-    if test yes = "$lt_cv_apple_cc_single_mod"; then
-      _lt_dar_single_mod='$single_module'
-    fi
-    if test yes = "$lt_cv_ld_exported_symbols_list"; then
-      _lt_dar_export_syms=' $wl-exported_symbols_list,$output_objdir/$libname-symbols.expsym'
-    else
-      _lt_dar_export_syms='~$NMEDIT -s $output_objdir/$libname-symbols.expsym $lib'
-    fi
-    if test : != "$DSYMUTIL" && test no = "$lt_cv_ld_force_load"; then
-      _lt_dsymutil='~$DSYMUTIL $lib || :'
-    else
-      _lt_dsymutil=
-    fi
-    ;;
-  esac
-])
-
-
-# _LT_DARWIN_LINKER_FEATURES([TAG])
-# ---------------------------------
-# Checks for linker and compiler features on darwin
-m4_defun([_LT_DARWIN_LINKER_FEATURES],
-[
-  m4_require([_LT_REQUIRED_DARWIN_CHECKS])
-  _LT_TAGVAR(archive_cmds_need_lc, $1)=no
-  _LT_TAGVAR(hardcode_direct, $1)=no
-  _LT_TAGVAR(hardcode_automatic, $1)=yes
-  _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported
-  if test yes = "$lt_cv_ld_force_load"; then
-    _LT_TAGVAR(whole_archive_flag_spec, $1)='`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience $wl-force_load,$conv\"; done; func_echo_all \"$new_convenience\"`'
-    m4_case([$1], [F77], [_LT_TAGVAR(compiler_needs_object, $1)=yes],
-                  [FC],  [_LT_TAGVAR(compiler_needs_object, $1)=yes])
-  else
-    _LT_TAGVAR(whole_archive_flag_spec, $1)=''
-  fi
-  _LT_TAGVAR(link_all_deplibs, $1)=yes
-  _LT_TAGVAR(allow_undefined_flag, $1)=$_lt_dar_allow_undefined
-  case $cc_basename in
-     ifort*|nagfor*) _lt_dar_can_shared=yes ;;
-     *) _lt_dar_can_shared=$GCC ;;
-  esac
-  if test yes = "$_lt_dar_can_shared"; then
-    output_verbose_link_cmd=func_echo_all
-    _LT_TAGVAR(archive_cmds, $1)="\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dsymutil"
-    _LT_TAGVAR(module_cmds, $1)="\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dsymutil"
-    _LT_TAGVAR(archive_expsym_cmds, $1)="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$libobjs \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring $_lt_dar_single_mod$_lt_dar_export_syms$_lt_dsymutil"
-    _LT_TAGVAR(module_expsym_cmds, $1)="$SED -e 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC \$allow_undefined_flag -o \$lib -bundle \$libobjs \$deplibs \$compiler_flags$_lt_dar_export_syms$_lt_dsymutil"
-    m4_if([$1], [CXX],
-[   if test yes != "$lt_cv_apple_cc_single_mod"; then
-      _LT_TAGVAR(archive_cmds, $1)="\$CC -r -keep_private_externs -nostdlib -o \$lib-master.o \$libobjs~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$lib-master.o \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring$_lt_dsymutil"
-      _LT_TAGVAR(archive_expsym_cmds, $1)="$SED 's|^|_|' < \$export_symbols > \$output_objdir/\$libname-symbols.expsym~\$CC -r -keep_private_externs -nostdlib -o \$lib-master.o \$libobjs~\$CC -dynamiclib \$allow_undefined_flag -o \$lib \$lib-master.o \$deplibs \$compiler_flags -install_name \$rpath/\$soname \$verstring$_lt_dar_export_syms$_lt_dsymutil"
-    fi
-],[])
-  else
-  _LT_TAGVAR(ld_shlibs, $1)=no
-  fi
-])
-
-# _LT_SYS_MODULE_PATH_AIX([TAGNAME])
-# ----------------------------------
-# Links a minimal program and checks the executable
-# for the system default hardcoded library path. In most cases,
-# this is /usr/lib:/lib, but when the MPI compilers are used
-# the location of the communication and MPI libs are included too.
-# If we don't find anything, use the default library path according
-# to the aix ld manual.
-# Store the results from the different compilers for each TAGNAME.
-# Allow to override them for all tags through lt_cv_aix_libpath.
-m4_defun([_LT_SYS_MODULE_PATH_AIX],
-[m4_require([_LT_DECL_SED])dnl
-if test set = "${lt_cv_aix_libpath+set}"; then
-  aix_libpath=$lt_cv_aix_libpath
-else
-  AC_CACHE_VAL([_LT_TAGVAR([lt_cv_aix_libpath_], [$1])],
-  [AC_LINK_IFELSE([AC_LANG_PROGRAM],[
-  lt_aix_libpath_sed='[
-      /Import File Strings/,/^$/ {
-	  /^0/ {
-	      s/^0  *\([^ ]*\) *$/\1/
-	      p
-	  }
-      }]'
-  _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=`dump -H conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  # Check for a 64-bit object if we didn't find anything.
-  if test -z "$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])"; then
-    _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=`dump -HX64 conftest$ac_exeext 2>/dev/null | $SED -n -e "$lt_aix_libpath_sed"`
-  fi],[])
-  if test -z "$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])"; then
-    _LT_TAGVAR([lt_cv_aix_libpath_], [$1])=/usr/lib:/lib
-  fi
-  ])
-  aix_libpath=$_LT_TAGVAR([lt_cv_aix_libpath_], [$1])
-fi
-])# _LT_SYS_MODULE_PATH_AIX
-
-
-# _LT_SHELL_INIT(ARG)
-# -------------------
-m4_define([_LT_SHELL_INIT],
-[m4_divert_text([M4SH-INIT], [$1
-])])# _LT_SHELL_INIT
-
-
-
-# _LT_PROG_ECHO_BACKSLASH
-# -----------------------
-# Find how we can fake an echo command that does not interpret backslash.
-# In particular, with Autoconf 2.60 or later we add some code to the start
-# of the generated configure script that will find a shell with a builtin
-# printf (that we can use as an echo command).
-m4_defun([_LT_PROG_ECHO_BACKSLASH],
-[ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO
-ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO
-
-AC_MSG_CHECKING([how to print strings])
-# Test print first, because it will be a builtin if present.
-if test "X`( print -r -- -n ) 2>/dev/null`" = X-n && \
-   test "X`print -r -- $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='print -r --'
-elif test "X`printf %s $ECHO 2>/dev/null`" = "X$ECHO"; then
-  ECHO='printf %s\n'
-else
-  # Use this function as a fallback that always works.
-  func_fallback_echo ()
-  {
-    eval 'cat <<_LTECHO_EOF
-$[]1
-_LTECHO_EOF'
-  }
-  ECHO='func_fallback_echo'
-fi
-
-# func_echo_all arg...
-# Invoke $ECHO with all args, space-separated.
-func_echo_all ()
-{
-    $ECHO "$*"
-}
-
-case $ECHO in
-  printf*) AC_MSG_RESULT([printf]) ;;
-  print*) AC_MSG_RESULT([print -r]) ;;
-  *) AC_MSG_RESULT([cat]) ;;
-esac
-
-m4_ifdef([_AS_DETECT_SUGGESTED],
-[_AS_DETECT_SUGGESTED([
-  test -n "${ZSH_VERSION+set}${BASH_VERSION+set}" || (
-    ECHO='\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\\'
-    ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO
-    ECHO=$ECHO$ECHO$ECHO$ECHO$ECHO$ECHO
-    PATH=/empty FPATH=/empty; export PATH FPATH
-    test "X`printf %s $ECHO`" = "X$ECHO" \
-      || test "X`print -r -- $ECHO`" = "X$ECHO" )])])
-
-_LT_DECL([], [SHELL], [1], [Shell to use when invoking shell scripts])
-_LT_DECL([], [ECHO], [1], [An echo program that protects backslashes])
-])# _LT_PROG_ECHO_BACKSLASH
-
-
-# _LT_WITH_SYSROOT
-# ----------------
-AC_DEFUN([_LT_WITH_SYSROOT],
-[m4_require([_LT_DECL_SED])dnl
-AC_MSG_CHECKING([for sysroot])
-AC_ARG_WITH([sysroot],
-[AS_HELP_STRING([--with-sysroot@<:@=DIR@:>@],
-  [Search for dependent libraries within DIR (or the compiler's sysroot
-   if not specified).])],
-[], [with_sysroot=no])
-
-dnl lt_sysroot will always be passed unquoted.  We quote it here
-dnl in case the user passed a directory name.
-lt_sysroot=
-case $with_sysroot in #(
- yes)
-   if test yes = "$GCC"; then
-     lt_sysroot=`$CC --print-sysroot 2>/dev/null`
-   fi
-   ;; #(
- /*)
-   lt_sysroot=`echo "$with_sysroot" | $SED -e "$sed_quote_subst"`
-   ;; #(
- no|'')
-   ;; #(
- *)
-   AC_MSG_RESULT([$with_sysroot])
-   AC_MSG_ERROR([The sysroot must be an absolute path.])
-   ;;
-esac
-
- AC_MSG_RESULT([${lt_sysroot:-no}])
-_LT_DECL([], [lt_sysroot], [0], [The root where to search for ]dnl
-[dependent libraries, and where our libraries should be installed.])])
-
-# _LT_ENABLE_LOCK
-# ---------------
-m4_defun([_LT_ENABLE_LOCK],
-[AC_ARG_ENABLE([libtool-lock],
-  [AS_HELP_STRING([--disable-libtool-lock],
-    [avoid locking (might break parallel builds)])])
-test no = "$enable_libtool_lock" || enable_libtool_lock=yes
-
-# Some flags need to be propagated to the compiler or linker for good
-# libtool support.
-case $host in
-ia64-*-hpux*)
-  # Find out what ABI is being produced by ac_compile, and set mode
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if AC_TRY_EVAL(ac_compile); then
-    case `$FILECMD conftest.$ac_objext` in
-      *ELF-32*)
-	HPUX_IA64_MODE=32
-	;;
-      *ELF-64*)
-	HPUX_IA64_MODE=64
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-*-*-irix6*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '[#]line '$LINENO' "configure"' > conftest.$ac_ext
-  if AC_TRY_EVAL(ac_compile); then
-    if test yes = "$lt_cv_prog_gnu_ld"; then
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -melf32bsmip"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -melf32bmipn32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -melf64bmip"
-	;;
-      esac
-    else
-      case `$FILECMD conftest.$ac_objext` in
-	*32-bit*)
-	  LD="${LD-ld} -32"
-	  ;;
-	*N32*)
-	  LD="${LD-ld} -n32"
-	  ;;
-	*64-bit*)
-	  LD="${LD-ld} -64"
-	  ;;
-      esac
-    fi
-  fi
-  rm -rf conftest*
-  ;;
-
-mips64*-*linux*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo '[#]line '$LINENO' "configure"' > conftest.$ac_ext
-  if AC_TRY_EVAL(ac_compile); then
-    emul=elf
-    case `$FILECMD conftest.$ac_objext` in
-      *32-bit*)
-	emul="${emul}32"
-	;;
-      *64-bit*)
-	emul="${emul}64"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *MSB*)
-	emul="${emul}btsmip"
-	;;
-      *LSB*)
-	emul="${emul}ltsmip"
-	;;
-    esac
-    case `$FILECMD conftest.$ac_objext` in
-      *N32*)
-	emul="${emul}n32"
-	;;
-    esac
-    LD="${LD-ld} -m $emul"
-  fi
-  rm -rf conftest*
-  ;;
-
-x86_64-*kfreebsd*-gnu|x86_64-*linux*|powerpc*-*linux*| \
-s390*-*linux*|s390*-*tpf*|sparc*-*linux*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.  Note that the listed cases only cover the
-  # situations where additional linker options are needed (such as when
-  # doing 32-bit compilation for a host where ld defaults to 64-bit, or
-  # vice versa); the common cases where no linker options are needed do
-  # not appear in the list.
-  echo 'int i;' > conftest.$ac_ext
-  if AC_TRY_EVAL(ac_compile); then
-    case `$FILECMD conftest.o` in
-      *32-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_i386_fbsd"
-	    ;;
-	  x86_64-*linux*)
-	    case `$FILECMD conftest.o` in
-	      *x86-64*)
-		LD="${LD-ld} -m elf32_x86_64"
-		;;
-	      *)
-		LD="${LD-ld} -m elf_i386"
-		;;
-	    esac
-	    ;;
-	  powerpc64le-*linux*)
-	    LD="${LD-ld} -m elf32lppclinux"
-	    ;;
-	  powerpc64-*linux*)
-	    LD="${LD-ld} -m elf32ppclinux"
-	    ;;
-	  s390x-*linux*)
-	    LD="${LD-ld} -m elf_s390"
-	    ;;
-	  sparc64-*linux*)
-	    LD="${LD-ld} -m elf32_sparc"
-	    ;;
-	esac
-	;;
-      *64-bit*)
-	case $host in
-	  x86_64-*kfreebsd*-gnu)
-	    LD="${LD-ld} -m elf_x86_64_fbsd"
-	    ;;
-	  x86_64-*linux*)
-	    LD="${LD-ld} -m elf_x86_64"
-	    ;;
-	  powerpcle-*linux*)
-	    LD="${LD-ld} -m elf64lppc"
-	    ;;
-	  powerpc-*linux*)
-	    LD="${LD-ld} -m elf64ppc"
-	    ;;
-	  s390*-*linux*|s390*-*tpf*)
-	    LD="${LD-ld} -m elf64_s390"
-	    ;;
-	  sparc*-*linux*)
-	    LD="${LD-ld} -m elf64_sparc"
-	    ;;
-	esac
-	;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-
-*-*-sco3.2v5*)
-  # On SCO OpenServer 5, we need -belf to get full-featured binaries.
-  SAVE_CFLAGS=$CFLAGS
-  CFLAGS="$CFLAGS -belf"
-  AC_CACHE_CHECK([whether the C compiler needs -belf], lt_cv_cc_needs_belf,
-    [AC_LANG_PUSH(C)
-     AC_LINK_IFELSE([AC_LANG_PROGRAM([[]],[[]])],[lt_cv_cc_needs_belf=yes],[lt_cv_cc_needs_belf=no])
-     AC_LANG_POP])
-  if test yes != "$lt_cv_cc_needs_belf"; then
-    # this is probably gcc 2.8.0, egcs 1.0 or newer; no need for -belf
-    CFLAGS=$SAVE_CFLAGS
-  fi
-  ;;
-*-*solaris*)
-  # Find out what ABI is being produced by ac_compile, and set linker
-  # options accordingly.
-  echo 'int i;' > conftest.$ac_ext
-  if AC_TRY_EVAL(ac_compile); then
-    case `$FILECMD conftest.o` in
-    *64-bit*)
-      case $lt_cv_prog_gnu_ld in
-      yes*)
-        case $host in
-        i?86-*-solaris*|x86_64-*-solaris*)
-          LD="${LD-ld} -m elf_x86_64"
-          ;;
-        sparc*-*-solaris*)
-          LD="${LD-ld} -m elf64_sparc"
-          ;;
-        esac
-        # GNU ld 2.21 introduced _sol2 emulations.  Use them if available.
-        if ${LD-ld} -V | grep _sol2 >/dev/null 2>&1; then
-          LD=${LD-ld}_sol2
-        fi
-        ;;
-      *)
-	if ${LD-ld} -64 -r -o conftest2.o conftest.o >/dev/null 2>&1; then
-	  LD="${LD-ld} -64"
-	fi
-	;;
-      esac
-      ;;
-    esac
-  fi
-  rm -rf conftest*
-  ;;
-esac
-
-need_locks=$enable_libtool_lock
-])# _LT_ENABLE_LOCK
-
-
-# _LT_PROG_AR
-# -----------
-m4_defun([_LT_PROG_AR],
-[AC_CHECK_TOOLS(AR, [ar], false)
-: ${AR=ar}
-_LT_DECL([], [AR], [1], [The archiver])
-
-# Use ARFLAGS variable as AR's operation code to sync the variable naming with
-# Automake.  If both AR_FLAGS and ARFLAGS are specified, AR_FLAGS should have
-# higher priority because thats what people were doing historically (setting
-# ARFLAGS for automake and AR_FLAGS for libtool).  FIXME: Make the AR_FLAGS
-# variable obsoleted/removed.
-
-test ${AR_FLAGS+y} || AR_FLAGS=${ARFLAGS-cr}
-lt_ar_flags=$AR_FLAGS
-_LT_DECL([], [lt_ar_flags], [0], [Flags to create an archive (by configure)])
-
-# Make AR_FLAGS overridable by 'make ARFLAGS='.  Don't try to run-time override
-# by AR_FLAGS because that was never working and AR_FLAGS is about to die.
-_LT_DECL([], [AR_FLAGS], [\@S|@{ARFLAGS-"\@S|@lt_ar_flags"}],
-         [Flags to create an archive])
-
-AC_CACHE_CHECK([for archiver @FILE support], [lt_cv_ar_at_file],
-  [lt_cv_ar_at_file=no
-   AC_COMPILE_IFELSE([AC_LANG_PROGRAM],
-     [echo conftest.$ac_objext > conftest.lst
-      lt_ar_try='$AR $AR_FLAGS libconftest.a @conftest.lst >&AS_MESSAGE_LOG_FD'
-      AC_TRY_EVAL([lt_ar_try])
-      if test 0 -eq "$ac_status"; then
-	# Ensure the archiver fails upon bogus file names.
-	rm -f conftest.$ac_objext libconftest.a
-	AC_TRY_EVAL([lt_ar_try])
-	if test 0 -ne "$ac_status"; then
-          lt_cv_ar_at_file=@
-        fi
-      fi
-      rm -f conftest.* libconftest.a
-     ])
-  ])
-
-if test no = "$lt_cv_ar_at_file"; then
-  archiver_list_spec=
-else
-  archiver_list_spec=$lt_cv_ar_at_file
-fi
-_LT_DECL([], [archiver_list_spec], [1],
-  [How to feed a file listing to the archiver])
-])# _LT_PROG_AR
-
-
-# _LT_CMD_OLD_ARCHIVE
-# -------------------
-m4_defun([_LT_CMD_OLD_ARCHIVE],
-[_LT_PROG_AR
-
-AC_CHECK_TOOL(STRIP, strip, :)
-test -z "$STRIP" && STRIP=:
-_LT_DECL([], [STRIP], [1], [A symbol stripping program])
-
-AC_CHECK_TOOL(RANLIB, ranlib, :)
-test -z "$RANLIB" && RANLIB=:
-_LT_DECL([], [RANLIB], [1],
-    [Commands used to install an old-style archive])
-
-# Determine commands to create old-style static archives.
-old_archive_cmds='$AR $AR_FLAGS $oldlib$oldobjs'
-old_postinstall_cmds='chmod 644 $oldlib'
-old_postuninstall_cmds=
-
-if test -n "$RANLIB"; then
-  case $host_os in
-  bitrig* | openbsd*)
-    old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB -t \$tool_oldlib"
-    ;;
-  *)
-    old_postinstall_cmds="$old_postinstall_cmds~\$RANLIB \$tool_oldlib"
-    ;;
-  esac
-  old_archive_cmds="$old_archive_cmds~\$RANLIB \$tool_oldlib"
-fi
-
-case $host_os in
-  darwin*)
-    lock_old_archive_extraction=yes ;;
-  *)
-    lock_old_archive_extraction=no ;;
-esac
-_LT_DECL([], [old_postinstall_cmds], [2])
-_LT_DECL([], [old_postuninstall_cmds], [2])
-_LT_TAGDECL([], [old_archive_cmds], [2],
-    [Commands used to build an old-style archive])
-_LT_DECL([], [lock_old_archive_extraction], [0],
-    [Whether to use a lock for old archive extraction])
-])# _LT_CMD_OLD_ARCHIVE
-
-
-# _LT_COMPILER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS,
-#		[OUTPUT-FILE], [ACTION-SUCCESS], [ACTION-FAILURE])
-# ----------------------------------------------------------------
-# Check whether the given compiler option works
-AC_DEFUN([_LT_COMPILER_OPTION],
-[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_SED])dnl
-AC_CACHE_CHECK([$1], [$2],
-  [$2=no
-   m4_if([$4], , [ac_outfile=conftest.$ac_objext], [ac_outfile=$4])
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-   lt_compiler_flag="$3"  ## exclude from sc_useless_quotes_in_assignment
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   # The option is referenced via a variable to avoid confusing sed.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD)
-   (eval "$lt_compile" 2>conftest.err)
-   ac_status=$?
-   cat conftest.err >&AS_MESSAGE_LOG_FD
-   echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
-   if (exit $ac_status) && test -s "$ac_outfile"; then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings other than the usual output.
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' >conftest.exp
-     $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-     if test ! -s conftest.er2 || diff conftest.exp conftest.er2 >/dev/null; then
-       $2=yes
-     fi
-   fi
-   $RM conftest*
-])
-
-if test yes = "[$]$2"; then
-    m4_if([$5], , :, [$5])
-else
-    m4_if([$6], , :, [$6])
-fi
-])# _LT_COMPILER_OPTION
-
-# Old name:
-AU_ALIAS([AC_LIBTOOL_COMPILER_OPTION], [_LT_COMPILER_OPTION])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_COMPILER_OPTION], [])
-
-
-# _LT_LINKER_OPTION(MESSAGE, VARIABLE-NAME, FLAGS,
-#                  [ACTION-SUCCESS], [ACTION-FAILURE])
-# ----------------------------------------------------
-# Check whether the given linker option works
-AC_DEFUN([_LT_LINKER_OPTION],
-[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_SED])dnl
-AC_CACHE_CHECK([$1], [$2],
-  [$2=no
-   save_LDFLAGS=$LDFLAGS
-   LDFLAGS="$LDFLAGS $3"
-   echo "$lt_simple_link_test_code" > conftest.$ac_ext
-   if (eval $ac_link 2>conftest.err) && test -s conftest$ac_exeext; then
-     # The linker can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     if test -s conftest.err; then
-       # Append any errors to the config.log.
-       cat conftest.err 1>&AS_MESSAGE_LOG_FD
-       $ECHO "$_lt_linker_boilerplate" | $SED '/^$/d' > conftest.exp
-       $SED '/^$/d; /^ *+/d' conftest.err >conftest.er2
-       if diff conftest.exp conftest.er2 >/dev/null; then
-         $2=yes
-       fi
-     else
-       $2=yes
-     fi
-   fi
-   $RM -r conftest*
-   LDFLAGS=$save_LDFLAGS
-])
-
-if test yes = "[$]$2"; then
-    m4_if([$4], , :, [$4])
-else
-    m4_if([$5], , :, [$5])
-fi
-])# _LT_LINKER_OPTION
-
-# Old name:
-AU_ALIAS([AC_LIBTOOL_LINKER_OPTION], [_LT_LINKER_OPTION])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_LINKER_OPTION], [])
-
-
-# LT_CMD_MAX_LEN
-#---------------
-AC_DEFUN([LT_CMD_MAX_LEN],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-# find the maximum length of command line arguments
-AC_MSG_CHECKING([the maximum length of command line arguments])
-AC_CACHE_VAL([lt_cv_sys_max_cmd_len], [dnl
-  i=0
-  teststring=ABCD
-
-  case $build_os in
-  msdosdjgpp*)
-    # On DJGPP, this test can blow up pretty badly due to problems in libc
-    # (any single argument exceeding 2000 bytes causes a buffer overrun
-    # during glob expansion).  Even if it were fixed, the result of this
-    # check would be larger than it should be.
-    lt_cv_sys_max_cmd_len=12288;    # 12K is about right
-    ;;
-
-  gnu*)
-    # Under GNU Hurd, this test is not required because there is
-    # no limit to the length of command line arguments.
-    # Libtool will interpret -1 as no limit whatsoever
-    lt_cv_sys_max_cmd_len=-1;
-    ;;
-
-  cygwin* | mingw* | cegcc*)
-    # On Win9x/ME, this test blows up -- it succeeds, but takes
-    # about 5 minutes as the teststring grows exponentially.
-    # Worse, since 9x/ME are not pre-emptively multitasking,
-    # you end up with a "frozen" computer, even though with patience
-    # the test eventually succeeds (with a max line length of 256k).
-    # Instead, let's just punt: use the minimum linelength reported by
-    # all of the supported platforms: 8192 (on NT/2K/XP).
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  mint*)
-    # On MiNT this can take a long time and run out of memory.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  amigaos*)
-    # On AmigaOS with pdksh, this test takes hours, literally.
-    # So we just punt and use a minimum line length of 8192.
-    lt_cv_sys_max_cmd_len=8192;
-    ;;
-
-  bitrig* | darwin* | dragonfly* | freebsd* | midnightbsd* | netbsd* | openbsd*)
-    # This has been around since 386BSD, at least.  Likely further.
-    if test -x /sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/sbin/sysctl -n kern.argmax`
-    elif test -x /usr/sbin/sysctl; then
-      lt_cv_sys_max_cmd_len=`/usr/sbin/sysctl -n kern.argmax`
-    else
-      lt_cv_sys_max_cmd_len=65536	# usable default for all BSDs
-    fi
-    # And add a safety zone
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-    lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    ;;
-
-  interix*)
-    # We know the value 262144 and hardcode it with a safety zone (like BSD)
-    lt_cv_sys_max_cmd_len=196608
-    ;;
-
-  os2*)
-    # The test takes a long time on OS/2.
-    lt_cv_sys_max_cmd_len=8192
-    ;;
-
-  osf*)
-    # Dr. Hans Ekkehard Plesser reports seeing a kernel panic running configure
-    # due to this test when exec_disable_arg_limit is 1 on Tru64. It is not
-    # nice to cause kernel panics so lets avoid the loop below.
-    # First set a reasonable default.
-    lt_cv_sys_max_cmd_len=16384
-    #
-    if test -x /sbin/sysconfig; then
-      case `/sbin/sysconfig -q proc exec_disable_arg_limit` in
-        *1*) lt_cv_sys_max_cmd_len=-1 ;;
-      esac
-    fi
-    ;;
-  sco3.2v5*)
-    lt_cv_sys_max_cmd_len=102400
-    ;;
-  sysv5* | sco5v6* | sysv4.2uw2*)
-    kargmax=`grep ARG_MAX /etc/conf/cf.d/stune 2>/dev/null`
-    if test -n "$kargmax"; then
-      lt_cv_sys_max_cmd_len=`echo $kargmax | $SED 's/.*[[	 ]]//'`
-    else
-      lt_cv_sys_max_cmd_len=32768
-    fi
-    ;;
-  *)
-    lt_cv_sys_max_cmd_len=`(getconf ARG_MAX) 2> /dev/null`
-    if test -n "$lt_cv_sys_max_cmd_len" && \
-       test undefined != "$lt_cv_sys_max_cmd_len"; then
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 4`
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \* 3`
-    else
-      # Make teststring a little bigger before we do anything with it.
-      # a 1K string should be a reasonable start.
-      for i in 1 2 3 4 5 6 7 8; do
-        teststring=$teststring$teststring
-      done
-      SHELL=${SHELL-${CONFIG_SHELL-/bin/sh}}
-      # If test is not a shell built-in, we'll probably end up computing a
-      # maximum length that is only half of the actual maximum length, but
-      # we can't tell.
-      while { test X`env echo "$teststring$teststring" 2>/dev/null` \
-	         = "X$teststring$teststring"; } >/dev/null 2>&1 &&
-	      test 17 != "$i" # 1/2 MB should be enough
-      do
-        i=`expr $i + 1`
-        teststring=$teststring$teststring
-      done
-      # Only check the string length outside the loop.
-      lt_cv_sys_max_cmd_len=`expr "X$teststring" : ".*" 2>&1`
-      teststring=
-      # Add a significant safety factor because C++ compilers can tack on
-      # massive amounts of additional arguments before passing them to the
-      # linker.  It appears as though 1/2 is a usable value.
-      lt_cv_sys_max_cmd_len=`expr $lt_cv_sys_max_cmd_len \/ 2`
-    fi
-    ;;
-  esac
-])
-if test -n "$lt_cv_sys_max_cmd_len"; then
-  AC_MSG_RESULT($lt_cv_sys_max_cmd_len)
-else
-  AC_MSG_RESULT(none)
-fi
-max_cmd_len=$lt_cv_sys_max_cmd_len
-_LT_DECL([], [max_cmd_len], [0],
-    [What is the maximum length of a command?])
-])# LT_CMD_MAX_LEN
-
-# Old name:
-AU_ALIAS([AC_LIBTOOL_SYS_MAX_CMD_LEN], [LT_CMD_MAX_LEN])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_SYS_MAX_CMD_LEN], [])
-
-
-# _LT_HEADER_DLFCN
-# ----------------
-m4_defun([_LT_HEADER_DLFCN],
-[AC_CHECK_HEADERS([dlfcn.h], [], [], [AC_INCLUDES_DEFAULT])dnl
-])# _LT_HEADER_DLFCN
-
-
-# _LT_TRY_DLOPEN_SELF (ACTION-IF-TRUE, ACTION-IF-TRUE-W-USCORE,
-#                      ACTION-IF-FALSE, ACTION-IF-CROSS-COMPILING)
-# ----------------------------------------------------------------
-m4_defun([_LT_TRY_DLOPEN_SELF],
-[m4_require([_LT_HEADER_DLFCN])dnl
-if test yes = "$cross_compiling"; then :
-  [$4]
-else
-  lt_dlunknown=0; lt_dlno_uscore=1; lt_dlneed_uscore=2
-  lt_status=$lt_dlunknown
-  cat > conftest.$ac_ext <<_LT_EOF
-[#line $LINENO "configure"
-#include "confdefs.h"
-
-#if HAVE_DLFCN_H
-#include <dlfcn.h>
-#endif
-
-#include <stdio.h>
-
-#ifdef RTLD_GLOBAL
-#  define LT_DLGLOBAL		RTLD_GLOBAL
-#else
-#  ifdef DL_GLOBAL
-#    define LT_DLGLOBAL		DL_GLOBAL
-#  else
-#    define LT_DLGLOBAL		0
-#  endif
-#endif
-
-/* We may have to define LT_DLLAZY_OR_NOW in the command line if we
-   find out it does not work in some platform. */
-#ifndef LT_DLLAZY_OR_NOW
-#  ifdef RTLD_LAZY
-#    define LT_DLLAZY_OR_NOW		RTLD_LAZY
-#  else
-#    ifdef DL_LAZY
-#      define LT_DLLAZY_OR_NOW		DL_LAZY
-#    else
-#      ifdef RTLD_NOW
-#        define LT_DLLAZY_OR_NOW	RTLD_NOW
-#      else
-#        ifdef DL_NOW
-#          define LT_DLLAZY_OR_NOW	DL_NOW
-#        else
-#          define LT_DLLAZY_OR_NOW	0
-#        endif
-#      endif
-#    endif
-#  endif
-#endif
-
-/* When -fvisibility=hidden is used, assume the code has been annotated
-   correspondingly for the symbols needed.  */
-#if defined __GNUC__ && (((__GNUC__ == 3) && (__GNUC_MINOR__ >= 3)) || (__GNUC__ > 3))
-int fnord () __attribute__((visibility("default")));
-#endif
-
-int fnord () { return 42; }
-int main ()
-{
-  void *self = dlopen (0, LT_DLGLOBAL|LT_DLLAZY_OR_NOW);
-  int status = $lt_dlunknown;
-
-  if (self)
-    {
-      if (dlsym (self,"fnord"))       status = $lt_dlno_uscore;
-      else
-        {
-	  if (dlsym( self,"_fnord"))  status = $lt_dlneed_uscore;
-          else puts (dlerror ());
-	}
-      /* dlclose (self); */
-    }
-  else
-    puts (dlerror ());
-
-  return status;
-}]
-_LT_EOF
-  if AC_TRY_EVAL(ac_link) && test -s "conftest$ac_exeext" 2>/dev/null; then
-    (./conftest; exit; ) >&AS_MESSAGE_LOG_FD 2>/dev/null
-    lt_status=$?
-    case x$lt_status in
-      x$lt_dlno_uscore) $1 ;;
-      x$lt_dlneed_uscore) $2 ;;
-      x$lt_dlunknown|x*) $3 ;;
-    esac
-  else :
-    # compilation failed
-    $3
-  fi
-fi
-rm -fr conftest*
-])# _LT_TRY_DLOPEN_SELF
-
-
-# LT_SYS_DLOPEN_SELF
-# ------------------
-AC_DEFUN([LT_SYS_DLOPEN_SELF],
-[m4_require([_LT_HEADER_DLFCN])dnl
-if test yes != "$enable_dlopen"; then
-  enable_dlopen=unknown
-  enable_dlopen_self=unknown
-  enable_dlopen_self_static=unknown
-else
-  lt_cv_dlopen=no
-  lt_cv_dlopen_libs=
-
-  case $host_os in
-  beos*)
-    lt_cv_dlopen=load_add_on
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ;;
-
-  mingw* | pw32* | cegcc*)
-    lt_cv_dlopen=LoadLibrary
-    lt_cv_dlopen_libs=
-    ;;
-
-  cygwin*)
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    ;;
-
-  darwin*)
-    # if libdl is installed we need to link against it
-    AC_CHECK_LIB([dl], [dlopen],
-		[lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl],[
-    lt_cv_dlopen=dyld
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=yes
-    ])
-    ;;
-
-  tpf*)
-    # Don't try to run any link tests for TPF.  We know it's impossible
-    # because TPF is a cross-compiler, and we know how we open DSOs.
-    lt_cv_dlopen=dlopen
-    lt_cv_dlopen_libs=
-    lt_cv_dlopen_self=no
-    ;;
-
-  *)
-    AC_CHECK_FUNC([shl_load],
-	  [lt_cv_dlopen=shl_load],
-      [AC_CHECK_LIB([dld], [shl_load],
-	    [lt_cv_dlopen=shl_load lt_cv_dlopen_libs=-ldld],
-	[AC_CHECK_FUNC([dlopen],
-	      [lt_cv_dlopen=dlopen],
-	  [AC_CHECK_LIB([dl], [dlopen],
-		[lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-ldl],
-	    [AC_CHECK_LIB([svld], [dlopen],
-		  [lt_cv_dlopen=dlopen lt_cv_dlopen_libs=-lsvld],
-	      [AC_CHECK_LIB([dld], [dld_link],
-		    [lt_cv_dlopen=dld_link lt_cv_dlopen_libs=-ldld])
-	      ])
-	    ])
-	  ])
-	])
-      ])
-    ;;
-  esac
-
-  if test no = "$lt_cv_dlopen"; then
-    enable_dlopen=no
-  else
-    enable_dlopen=yes
-  fi
-
-  case $lt_cv_dlopen in
-  dlopen)
-    save_CPPFLAGS=$CPPFLAGS
-    test yes = "$ac_cv_header_dlfcn_h" && CPPFLAGS="$CPPFLAGS -DHAVE_DLFCN_H"
-
-    save_LDFLAGS=$LDFLAGS
-    wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $export_dynamic_flag_spec\"
-
-    save_LIBS=$LIBS
-    LIBS="$lt_cv_dlopen_libs $LIBS"
-
-    AC_CACHE_CHECK([whether a program can dlopen itself],
-	  lt_cv_dlopen_self, [dnl
-	  _LT_TRY_DLOPEN_SELF(
-	    lt_cv_dlopen_self=yes, lt_cv_dlopen_self=yes,
-	    lt_cv_dlopen_self=no, lt_cv_dlopen_self=cross)
-    ])
-
-    if test yes = "$lt_cv_dlopen_self"; then
-      wl=$lt_prog_compiler_wl eval LDFLAGS=\"\$LDFLAGS $lt_prog_compiler_static\"
-      AC_CACHE_CHECK([whether a statically linked program can dlopen itself],
-	  lt_cv_dlopen_self_static, [dnl
-	  _LT_TRY_DLOPEN_SELF(
-	    lt_cv_dlopen_self_static=yes, lt_cv_dlopen_self_static=yes,
-	    lt_cv_dlopen_self_static=no,  lt_cv_dlopen_self_static=cross)
-      ])
-    fi
-
-    CPPFLAGS=$save_CPPFLAGS
-    LDFLAGS=$save_LDFLAGS
-    LIBS=$save_LIBS
-    ;;
-  esac
-
-  case $lt_cv_dlopen_self in
-  yes|no) enable_dlopen_self=$lt_cv_dlopen_self ;;
-  *) enable_dlopen_self=unknown ;;
-  esac
-
-  case $lt_cv_dlopen_self_static in
-  yes|no) enable_dlopen_self_static=$lt_cv_dlopen_self_static ;;
-  *) enable_dlopen_self_static=unknown ;;
-  esac
-fi
-_LT_DECL([dlopen_support], [enable_dlopen], [0],
-	 [Whether dlopen is supported])
-_LT_DECL([dlopen_self], [enable_dlopen_self], [0],
-	 [Whether dlopen of programs is supported])
-_LT_DECL([dlopen_self_static], [enable_dlopen_self_static], [0],
-	 [Whether dlopen of statically linked programs is supported])
-])# LT_SYS_DLOPEN_SELF
-
-# Old name:
-AU_ALIAS([AC_LIBTOOL_DLOPEN_SELF], [LT_SYS_DLOPEN_SELF])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_DLOPEN_SELF], [])
-
-
-# _LT_COMPILER_C_O([TAGNAME])
-# ---------------------------
-# Check to see if options -c and -o are simultaneously supported by compiler.
-# This macro does not hard code the compiler like AC_PROG_CC_C_O.
-m4_defun([_LT_COMPILER_C_O],
-[m4_require([_LT_DECL_SED])dnl
-m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_TAG_COMPILER])dnl
-AC_CACHE_CHECK([if $compiler supports -c -o file.$ac_objext],
-  [_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)],
-  [_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=no
-   $RM -r conftest 2>/dev/null
-   mkdir conftest
-   cd conftest
-   mkdir out
-   echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-   lt_compiler_flag="-o out/conftest2.$ac_objext"
-   # Insert the option either (1) after the last *FLAGS variable, or
-   # (2) before a word containing "conftest.", or (3) at the end.
-   # Note that $ac_compile itself does not contain backslashes and begins
-   # with a dollar sign (not a hyphen), so the echo should work correctly.
-   lt_compile=`echo "$ac_compile" | $SED \
-   -e 's:.*FLAGS}\{0,1\} :&$lt_compiler_flag :; t' \
-   -e 's: [[^ ]]*conftest\.: $lt_compiler_flag&:; t' \
-   -e 's:$: $lt_compiler_flag:'`
-   (eval echo "\"\$as_me:$LINENO: $lt_compile\"" >&AS_MESSAGE_LOG_FD)
-   (eval "$lt_compile" 2>out/conftest.err)
-   ac_status=$?
-   cat out/conftest.err >&AS_MESSAGE_LOG_FD
-   echo "$as_me:$LINENO: \$? = $ac_status" >&AS_MESSAGE_LOG_FD
-   if (exit $ac_status) && test -s out/conftest2.$ac_objext
-   then
-     # The compiler can only warn and ignore the option if not recognized
-     # So say no if there are warnings
-     $ECHO "$_lt_compiler_boilerplate" | $SED '/^$/d' > out/conftest.exp
-     $SED '/^$/d; /^ *+/d' out/conftest.err >out/conftest.er2
-     if test ! -s out/conftest.er2 || diff out/conftest.exp out/conftest.er2 >/dev/null; then
-       _LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes
-     fi
-   fi
-   chmod u+w . 2>&AS_MESSAGE_LOG_FD
-   $RM conftest*
-   # SGI C++ compiler will create directory out/ii_files/ for
-   # template instantiation
-   test -d out/ii_files && $RM out/ii_files/* && rmdir out/ii_files
-   $RM out/* && rmdir out
-   cd ..
-   $RM -r conftest
-   $RM conftest*
-])
-_LT_TAGDECL([compiler_c_o], [lt_cv_prog_compiler_c_o], [1],
-	[Does compiler simultaneously support -c and -o options?])
-])# _LT_COMPILER_C_O
-
-
-# _LT_COMPILER_FILE_LOCKS([TAGNAME])
-# ----------------------------------
-# Check to see if we can do hard links to lock some files if needed
-m4_defun([_LT_COMPILER_FILE_LOCKS],
-[m4_require([_LT_ENABLE_LOCK])dnl
-m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-_LT_COMPILER_C_O([$1])
-
-hard_links=nottested
-if test no = "$_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)" && test no != "$need_locks"; then
-  # do not overwrite the value of need_locks provided by the user
-  AC_MSG_CHECKING([if we can lock with hard links])
-  hard_links=yes
-  $RM conftest*
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  touch conftest.a
-  ln conftest.a conftest.b 2>&5 || hard_links=no
-  ln conftest.a conftest.b 2>/dev/null && hard_links=no
-  AC_MSG_RESULT([$hard_links])
-  if test no = "$hard_links"; then
-    AC_MSG_WARN(['$CC' does not support '-c -o', so 'make -j' may be unsafe])
-    need_locks=warn
-  fi
-else
-  need_locks=no
-fi
-_LT_DECL([], [need_locks], [1], [Must we lock files when doing compilation?])
-])# _LT_COMPILER_FILE_LOCKS
-
-
-# _LT_CHECK_OBJDIR
-# ----------------
-m4_defun([_LT_CHECK_OBJDIR],
-[AC_CACHE_CHECK([for objdir], [lt_cv_objdir],
-[rm -f .libs 2>/dev/null
-mkdir .libs 2>/dev/null
-if test -d .libs; then
-  lt_cv_objdir=.libs
-else
-  # MS-DOS does not allow filenames that begin with a dot.
-  lt_cv_objdir=_libs
-fi
-rmdir .libs 2>/dev/null])
-objdir=$lt_cv_objdir
-_LT_DECL([], [objdir], [0],
-         [The name of the directory that contains temporary libtool files])dnl
-m4_pattern_allow([LT_OBJDIR])dnl
-AC_DEFINE_UNQUOTED([LT_OBJDIR], "$lt_cv_objdir/",
-  [Define to the sub-directory where libtool stores uninstalled libraries.])
-])# _LT_CHECK_OBJDIR
-
-
-# _LT_LINKER_HARDCODE_LIBPATH([TAGNAME])
-# --------------------------------------
-# Check hardcoding attributes.
-m4_defun([_LT_LINKER_HARDCODE_LIBPATH],
-[AC_MSG_CHECKING([how to hardcode library paths into programs])
-_LT_TAGVAR(hardcode_action, $1)=
-if test -n "$_LT_TAGVAR(hardcode_libdir_flag_spec, $1)" ||
-   test -n "$_LT_TAGVAR(runpath_var, $1)" ||
-   test yes = "$_LT_TAGVAR(hardcode_automatic, $1)"; then
-
-  # We can hardcode non-existent directories.
-  if test no != "$_LT_TAGVAR(hardcode_direct, $1)" &&
-     # If the only mechanism to avoid hardcoding is shlibpath_var, we
-     # have to relink, otherwise we might link with an installed library
-     # when we should be linking with a yet-to-be-installed one
-     ## test no != "$_LT_TAGVAR(hardcode_shlibpath_var, $1)" &&
-     test no != "$_LT_TAGVAR(hardcode_minus_L, $1)"; then
-    # Linking always hardcodes the temporary library directory.
-    _LT_TAGVAR(hardcode_action, $1)=relink
-  else
-    # We can link without hardcoding, and we can hardcode nonexisting dirs.
-    _LT_TAGVAR(hardcode_action, $1)=immediate
-  fi
-else
-  # We cannot hardcode anything, or else we can only hardcode existing
-  # directories.
-  _LT_TAGVAR(hardcode_action, $1)=unsupported
-fi
-AC_MSG_RESULT([$_LT_TAGVAR(hardcode_action, $1)])
-
-if test relink = "$_LT_TAGVAR(hardcode_action, $1)" ||
-   test yes = "$_LT_TAGVAR(inherit_rpath, $1)"; then
-  # Fast installation is not supported
-  enable_fast_install=no
-elif test yes = "$shlibpath_overrides_runpath" ||
-     test no = "$enable_shared"; then
-  # Fast installation is not necessary
-  enable_fast_install=needless
-fi
-_LT_TAGDECL([], [hardcode_action], [0],
-    [How to hardcode a shared library path into an executable])
-])# _LT_LINKER_HARDCODE_LIBPATH
-
-
-# _LT_CMD_STRIPLIB
-# ----------------
-m4_defun([_LT_CMD_STRIPLIB],
-[m4_require([_LT_DECL_EGREP])
-striplib=
-old_striplib=
-AC_MSG_CHECKING([whether stripping libraries is possible])
-if test -z "$STRIP"; then
-  AC_MSG_RESULT([no])
-else
-  if $STRIP -V 2>&1 | $GREP "GNU strip" >/dev/null; then
-    old_striplib="$STRIP --strip-debug"
-    striplib="$STRIP --strip-unneeded"
-    AC_MSG_RESULT([yes])
-  else
-    case $host_os in
-    darwin*)
-      # FIXME - insert some real tests, host_os isn't really good enough
-      striplib="$STRIP -x"
-      old_striplib="$STRIP -S"
-      AC_MSG_RESULT([yes])
-      ;;
-    freebsd*)
-      if $STRIP -V 2>&1 | $GREP "elftoolchain" >/dev/null; then
-        old_striplib="$STRIP --strip-debug"
-        striplib="$STRIP --strip-unneeded"
-        AC_MSG_RESULT([yes])
-      else
-        AC_MSG_RESULT([no])
-      fi
-      ;;
-    *)
-      AC_MSG_RESULT([no])
-      ;;
-    esac
-  fi
-fi
-_LT_DECL([], [old_striplib], [1], [Commands to strip libraries])
-_LT_DECL([], [striplib], [1])
-])# _LT_CMD_STRIPLIB
-
-
-# _LT_PREPARE_MUNGE_PATH_LIST
-# ---------------------------
-# Make sure func_munge_path_list() is defined correctly.
-m4_defun([_LT_PREPARE_MUNGE_PATH_LIST],
-[[# func_munge_path_list VARIABLE PATH
-# -----------------------------------
-# VARIABLE is name of variable containing _space_ separated list of
-# directories to be munged by the contents of PATH, which is string
-# having a format:
-# "DIR[:DIR]:"
-#       string "DIR[ DIR]" will be prepended to VARIABLE
-# ":DIR[:DIR]"
-#       string "DIR[ DIR]" will be appended to VARIABLE
-# "DIRP[:DIRP]::[DIRA:]DIRA"
-#       string "DIRP[ DIRP]" will be prepended to VARIABLE and string
-#       "DIRA[ DIRA]" will be appended to VARIABLE
-# "DIR[:DIR]"
-#       VARIABLE will be replaced by "DIR[ DIR]"
-func_munge_path_list ()
-{
-    case x@S|@2 in
-    x)
-        ;;
-    *:)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'` \@S|@@S|@1\"
-        ;;
-    x:*)
-        eval @S|@1=\"\@S|@@S|@1 `$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    *::*)
-        eval @S|@1=\"\@S|@@S|@1\ `$ECHO @S|@2 | $SED -e 's/.*:://' -e 's/:/ /g'`\"
-        eval @S|@1=\"`$ECHO @S|@2 | $SED -e 's/::.*//' -e 's/:/ /g'`\ \@S|@@S|@1\"
-        ;;
-    *)
-        eval @S|@1=\"`$ECHO @S|@2 | $SED 's/:/ /g'`\"
-        ;;
-    esac
-}
-]])# _LT_PREPARE_PATH_LIST
-
-
-# _LT_SYS_DYNAMIC_LINKER([TAG])
-# -----------------------------
-# PORTME Fill in your ld.so characteristics
-m4_defun([_LT_SYS_DYNAMIC_LINKER],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-m4_require([_LT_DECL_EGREP])dnl
-m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_OBJDUMP])dnl
-m4_require([_LT_DECL_SED])dnl
-m4_require([_LT_CHECK_SHELL_FEATURES])dnl
-m4_require([_LT_PREPARE_MUNGE_PATH_LIST])dnl
-AC_MSG_CHECKING([dynamic linker characteristics])
-m4_if([$1],
-	[], [
-if test yes = "$GCC"; then
-  case $host_os in
-    darwin*) lt_awk_arg='/^libraries:/,/LR/' ;;
-    *) lt_awk_arg='/^libraries:/' ;;
-  esac
-  case $host_os in
-    mingw* | cegcc*) lt_sed_strip_eq='s|=\([[A-Za-z]]:\)|\1|g' ;;
-    *) lt_sed_strip_eq='s|=/|/|g' ;;
-  esac
-  lt_search_path_spec=`$CC -print-search-dirs | awk $lt_awk_arg | $SED -e "s/^libraries://" -e $lt_sed_strip_eq`
-  case $lt_search_path_spec in
-  *\;*)
-    # if the path contains ";" then we assume it to be the separator
-    # otherwise default to the standard path separator (i.e. ":") - it is
-    # assumed that no part of a normal pathname contains ";" but that should
-    # okay in the real world where ";" in dirpaths is itself problematic.
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED 's/;/ /g'`
-    ;;
-  *)
-    lt_search_path_spec=`$ECHO "$lt_search_path_spec" | $SED "s/$PATH_SEPARATOR/ /g"`
-    ;;
-  esac
-  # Ok, now we have the path, separated by spaces, we can step through it
-  # and add multilib dir if necessary...
-  lt_tmp_lt_search_path_spec=
-  lt_multi_os_dir=/`$CC $CPPFLAGS $CFLAGS $LDFLAGS -print-multi-os-directory 2>/dev/null`
-  # ...but if some path component already ends with the multilib dir we assume
-  # that all is fine and trust -print-search-dirs as is (GCC 4.2? or newer).
-  case "$lt_multi_os_dir; $lt_search_path_spec " in
-  "/; "* | "/.; "* | "/./; "* | *"$lt_multi_os_dir "* | *"$lt_multi_os_dir/ "*)
-    lt_multi_os_dir=
-    ;;
-  esac
-  for lt_sys_path in $lt_search_path_spec; do
-    if test -d "$lt_sys_path$lt_multi_os_dir"; then
-      lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path$lt_multi_os_dir"
-    elif test -n "$lt_multi_os_dir"; then
-      test -d "$lt_sys_path" && \
-	lt_tmp_lt_search_path_spec="$lt_tmp_lt_search_path_spec $lt_sys_path"
-    fi
-  done
-  lt_search_path_spec=`$ECHO "$lt_tmp_lt_search_path_spec" | awk '
-BEGIN {RS = " "; FS = "/|\n";} {
-  lt_foo = "";
-  lt_count = 0;
-  for (lt_i = NF; lt_i > 0; lt_i--) {
-    if ($lt_i != "" && $lt_i != ".") {
-      if ($lt_i == "..") {
-        lt_count++;
-      } else {
-        if (lt_count == 0) {
-          lt_foo = "/" $lt_i lt_foo;
-        } else {
-          lt_count--;
-        }
-      }
-    }
-  }
-  if (lt_foo != "") { lt_freq[[lt_foo]]++; }
-  if (lt_freq[[lt_foo]] == 1) { print lt_foo; }
-}'`
-  # AWK program above erroneously prepends '/' to C:/dos/paths
-  # for these hosts.
-  case $host_os in
-    mingw* | cegcc*) lt_search_path_spec=`$ECHO "$lt_search_path_spec" |\
-      $SED 's|/\([[A-Za-z]]:\)|\1|g'` ;;
-  esac
-  sys_lib_search_path_spec=`$ECHO "$lt_search_path_spec" | $lt_NL2SP`
-else
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-fi])
-library_names_spec=
-libname_spec='lib$name'
-soname_spec=
-shrext_cmds=.so
-postinstall_cmds=
-postuninstall_cmds=
-finish_cmds=
-finish_eval=
-shlibpath_var=
-shlibpath_overrides_runpath=unknown
-version_type=none
-dynamic_linker="$host_os ld.so"
-sys_lib_dlsearch_path_spec="/lib /usr/lib"
-need_lib_prefix=unknown
-hardcode_into_libs=no
-
-# when you set need_version to no, make sure it does not cause -set_version
-# flags to be left without arguments
-need_version=unknown
-
-AC_ARG_VAR([LT_SYS_LIBRARY_PATH],
-[User-defined run-time library search path.])
-
-case $host_os in
-aix3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname.a'
-  shlibpath_var=LIBPATH
-
-  # AIX 3 has no versioning support, so we append a major version to the name.
-  soname_spec='$libname$release$shared_ext$major'
-  ;;
-
-aix[[4-9]]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  hardcode_into_libs=yes
-  if test ia64 = "$host_cpu"; then
-    # AIX 5 supports IA64
-    library_names_spec='$libname$release$shared_ext$major $libname$release$shared_ext$versuffix $libname$shared_ext'
-    shlibpath_var=LD_LIBRARY_PATH
-  else
-    # With GCC up to 2.95.x, collect2 would create an import file
-    # for dependence libraries.  The import file would start with
-    # the line '#! .'.  This would cause the generated library to
-    # depend on '.', always an invalid library.  This was fixed in
-    # development snapshots of GCC prior to 3.0.
-    case $host_os in
-      aix4 | aix4.[[01]] | aix4.[[01]].*)
-      if { echo '#if __GNUC__ > 2 || (__GNUC__ == 2 && __GNUC_MINOR__ >= 97)'
-	   echo ' yes '
-	   echo '#endif'; } | $CC -E - | $GREP yes > /dev/null; then
-	:
-      else
-	can_build_shared=no
-      fi
-      ;;
-    esac
-    # Using Import Files as archive members, it is possible to support
-    # filename-based versioning of shared library archives on AIX. While
-    # this would work for both with and without runtime linking, it will
-    # prevent static linking of such archives. So we do filename-based
-    # shared library versioning with .so extension only, which is used
-    # when both runtime linking and shared linking is enabled.
-    # Unfortunately, runtime linking may impact performance, so we do
-    # not want this to be the default eventually. Also, we use the
-    # versioned .so libs for executables only if there is the -brtl
-    # linker flag in LDFLAGS as well, or --with-aix-soname=svr4 only.
-    # To allow for filename-based versioning support, we need to create
-    # libNAME.so.V as an archive file, containing:
-    # *) an Import File, referring to the versioned filename of the
-    #    archive as well as the shared archive member, telling the
-    #    bitwidth (32 or 64) of that shared object, and providing the
-    #    list of exported symbols of that shared object, eventually
-    #    decorated with the 'weak' keyword
-    # *) the shared object with the F_LOADONLY flag set, to really avoid
-    #    it being seen by the linker.
-    # At run time we better use the real file rather than another symlink,
-    # but for link time we create the symlink libNAME.so -> libNAME.so.V
-
-    case $with_aix_soname,$aix_use_runtimelinking in
-    # AIX (on Power*) has no versioning support, so currently we cannot hardcode correct
-    # soname into executable. Probably we can add versioning support to
-    # collect2, so additional links can be useful in future.
-    aix,yes) # traditional libtool
-      dynamic_linker='AIX unversionable lib.so'
-      # If using run time linking (on AIX 4.2 or later) use lib<name>.so
-      # instead of lib<name>.a to let people know that these are not
-      # typical AIX shared libraries.
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      ;;
-    aix,no) # traditional AIX only
-      dynamic_linker='AIX lib.a[(]lib.so.V[)]'
-      # We preserve .a as extension for shared libraries through AIX4.2
-      # and later when we are not doing run time linking.
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      ;;
-    svr4,*) # full svr4 only
-      dynamic_linker="AIX lib.so.V[(]$shared_archive_member_spec.o[)]"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,yes) # both, prefer svr4
-      dynamic_linker="AIX lib.so.V[(]$shared_archive_member_spec.o[)], lib.a[(]lib.so.V[)]"
-      library_names_spec='$libname$release$shared_ext$major $libname$shared_ext'
-      # unpreferred sharedlib libNAME.a needs extra handling
-      postinstall_cmds='test -n "$linkname" || linkname="$realname"~func_stripname "" ".so" "$linkname"~$install_shared_prog "$dir/$func_stripname_result.$libext" "$destdir/$func_stripname_result.$libext"~test -z "$tstripme" || test -z "$striplib" || $striplib "$destdir/$func_stripname_result.$libext"'
-      postuninstall_cmds='for n in $library_names $old_library; do :; done~func_stripname "" ".so" "$n"~test "$func_stripname_result" = "$n" || func_append rmfiles " $odir/$func_stripname_result.$libext"'
-      # We do not specify a path in Import Files, so LIBPATH fires.
-      shlibpath_overrides_runpath=yes
-      ;;
-    *,no) # both, prefer aix
-      dynamic_linker="AIX lib.a[(]lib.so.V[)], lib.so.V[(]$shared_archive_member_spec.o[)]"
-      library_names_spec='$libname$release.a $libname.a'
-      soname_spec='$libname$release$shared_ext$major'
-      # unpreferred sharedlib libNAME.so.V and symlink libNAME.so need extra handling
-      postinstall_cmds='test -z "$dlname" || $install_shared_prog $dir/$dlname $destdir/$dlname~test -z "$tstripme" || test -z "$striplib" || $striplib $destdir/$dlname~test -n "$linkname" || linkname=$realname~func_stripname "" ".a" "$linkname"~(cd "$destdir" && $LN_S -f $dlname $func_stripname_result.so)'
-      postuninstall_cmds='test -z "$dlname" || func_append rmfiles " $odir/$dlname"~for n in $old_library $library_names; do :; done~func_stripname "" ".a" "$n"~func_append rmfiles " $odir/$func_stripname_result.so"'
-      ;;
-    esac
-    shlibpath_var=LIBPATH
-  fi
-  ;;
-
-amigaos*)
-  case $host_cpu in
-  powerpc)
-    # Since July 2007 AmigaOS4 officially supports .so libraries.
-    # When compiling the executable, add -use-dynld -Lsobjs: to the compileline.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    ;;
-  m68k)
-    library_names_spec='$libname.ixlibrary $libname.a'
-    # Create ${libname}_ixlibrary.a entries in /sys/libs.
-    finish_eval='for lib in `ls $libdir/*.ixlibrary 2>/dev/null`; do libname=`func_echo_all "$lib" | $SED '\''s%^.*/\([[^/]]*\)\.ixlibrary$%\1%'\''`; $RM /sys/libs/${libname}_ixlibrary.a; $show "cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a"; cd /sys/libs && $LN_S $lib ${libname}_ixlibrary.a || exit 1; done'
-    ;;
-  esac
-  ;;
-
-beos*)
-  library_names_spec='$libname$shared_ext'
-  dynamic_linker="$host_os ld.so"
-  shlibpath_var=LIBRARY_PATH
-  ;;
-
-bsdi[[45]]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/shlib /usr/lib /usr/X11/lib /usr/contrib/lib /lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec="/shlib /usr/lib /usr/local/lib"
-  # the default ld.so.conf also contains /usr/contrib/lib and
-  # /usr/X11R6/lib (/usr/X11 is a link to /usr/X11R6), but let us allow
-  # libtool to hard-code these into programs
-  ;;
-
-cygwin* | mingw* | pw32* | cegcc*)
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-
-  case $GCC,$cc_basename in
-  yes,*)
-    # gcc
-    library_names_spec='$libname.dll.a'
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    postinstall_cmds='base_file=`basename \$file`~
-      dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-      dldir=$destdir/`dirname \$dlpath`~
-      test -d \$dldir || mkdir -p \$dldir~
-      $install_prog $dir/$dlname \$dldir/$dlname~
-      chmod a+x \$dldir/$dlname~
-      if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-        eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-      fi'
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-
-    case $host_os in
-    cygwin*)
-      # Cygwin DLLs use 'cyg' prefix rather than 'lib'
-      soname_spec='`echo $libname | $SED -e 's/^lib/cyg/'``echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext'
-m4_if([$1], [],[
-      sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/lib/w32api"])
-      ;;
-    mingw* | cegcc*)
-      # MinGW DLLs use traditional 'lib' prefix
-      soname_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext'
-      ;;
-    pw32*)
-      # pw32 DLLs use 'pw' prefix rather than 'lib'
-      library_names_spec='`echo $libname | $SED -e 's/^lib/pw/'``echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext'
-      ;;
-    esac
-    dynamic_linker='Win32 ld.exe'
-    ;;
-
-  *,cl* | *,icl*)
-    # Native MSVC or ICC
-    libname_spec='$name'
-    soname_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext'
-    library_names_spec='$libname.dll.lib'
-
-    case $build_os in
-    mingw*)
-      sys_lib_search_path_spec=
-      lt_save_ifs=$IFS
-      IFS=';'
-      for lt_path in $LIB
-      do
-        IFS=$lt_save_ifs
-        # Let DOS variable expansion print the short 8.3 style file name.
-        lt_path=`cd "$lt_path" 2>/dev/null && cmd //C "for %i in (".") do @echo %~si"`
-        sys_lib_search_path_spec="$sys_lib_search_path_spec $lt_path"
-      done
-      IFS=$lt_save_ifs
-      # Convert to MSYS style.
-      sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's|\\\\|/|g' -e 's| \\([[a-zA-Z]]\\):| /\\1|g' -e 's|^ ||'`
-      ;;
-    cygwin*)
-      # Convert to unix form, then to dos form, then back to unix form
-      # but this time dos style (no spaces!) so that the unix form looks
-      # like /cygdrive/c/PROGRA~1:/cygdr...
-      sys_lib_search_path_spec=`cygpath --path --unix "$LIB"`
-      sys_lib_search_path_spec=`cygpath --path --dos "$sys_lib_search_path_spec" 2>/dev/null`
-      sys_lib_search_path_spec=`cygpath --path --unix "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      ;;
-    *)
-      sys_lib_search_path_spec=$LIB
-      if $ECHO "$sys_lib_search_path_spec" | [$GREP ';[c-zC-Z]:/' >/dev/null]; then
-        # It is most probably a Windows format PATH.
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e 's/;/ /g'`
-      else
-        sys_lib_search_path_spec=`$ECHO "$sys_lib_search_path_spec" | $SED -e "s/$PATH_SEPARATOR/ /g"`
-      fi
-      # FIXME: find the short name or the path components, as spaces are
-      # common. (e.g. "Program Files" -> "PROGRA~1")
-      ;;
-    esac
-
-    # DLL is installed to $(libdir)/../bin by postinstall_cmds
-    postinstall_cmds='base_file=`basename \$file`~
-      dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; echo \$dlname'\''`~
-      dldir=$destdir/`dirname \$dlpath`~
-      test -d \$dldir || mkdir -p \$dldir~
-      $install_prog $dir/$dlname \$dldir/$dlname'
-    postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; echo \$dlname'\''`~
-      dlpath=$dir/\$dldll~
-       $RM \$dlpath'
-    shlibpath_overrides_runpath=yes
-    dynamic_linker='Win32 link.exe'
-    ;;
-
-  *)
-    # Assume MSVC and ICC wrapper
-    library_names_spec='$libname`echo $release | $SED -e 's/[[.]]/-/g'`$versuffix$shared_ext $libname.lib'
-    dynamic_linker='Win32 ld.exe'
-    ;;
-  esac
-  # FIXME: first we should search . and the directory the executable is in
-  shlibpath_var=PATH
-  ;;
-
-darwin* | rhapsody*)
-  dynamic_linker="$host_os dyld"
-  version_type=darwin
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$major$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$major$shared_ext'
-  shlibpath_overrides_runpath=yes
-  shlibpath_var=DYLD_LIBRARY_PATH
-  shrext_cmds='`test .$module = .yes && echo .so || echo .dylib`'
-m4_if([$1], [],[
-  sys_lib_search_path_spec="$sys_lib_search_path_spec /usr/local/lib"])
-  sys_lib_dlsearch_path_spec='/usr/local/lib /lib /usr/lib'
-  ;;
-
-dgux*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  # DragonFly does not have aout.  When/if they implement a new
-  # versioning mechanism, adjust this.
-  if test -x /usr/bin/objformat; then
-    objformat=`/usr/bin/objformat`
-  else
-    case $host_os in
-    freebsd[[23]].*) objformat=aout ;;
-    *) objformat=elf ;;
-    esac
-  fi
-  version_type=freebsd-$objformat
-  case $version_type in
-    freebsd-elf*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-      soname_spec='$libname$release$shared_ext$major'
-      need_version=no
-      need_lib_prefix=no
-      ;;
-    freebsd-*)
-      library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-      need_version=yes
-      ;;
-  esac
-  shlibpath_var=LD_LIBRARY_PATH
-  case $host_os in
-  freebsd2.*)
-    shlibpath_overrides_runpath=yes
-    ;;
-  freebsd3.[[01]]* | freebsdelf3.[[01]]*)
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  freebsd3.[[2-9]]* | freebsdelf3.[[2-9]]* | \
-  freebsd4.[[0-5]] | freebsdelf4.[[0-5]] | freebsd4.1.1 | freebsdelf4.1.1)
-    shlibpath_overrides_runpath=no
-    hardcode_into_libs=yes
-    ;;
-  *) # from 4.6 on, and DragonFly
-    shlibpath_overrides_runpath=yes
-    hardcode_into_libs=yes
-    ;;
-  esac
-  ;;
-
-haiku*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  dynamic_linker="$host_os runtime_loader"
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_dlsearch_path_spec='/boot/home/config/lib /boot/common/lib /boot/system/lib'
-  hardcode_into_libs=yes
-  ;;
-
-hpux9* | hpux10* | hpux11*)
-  # Give a soname corresponding to the major version so that dld.sl refuses to
-  # link against other versions.
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  case $host_cpu in
-  ia64*)
-    shrext_cmds='.so'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.so"
-    shlibpath_var=LD_LIBRARY_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    if test 32 = "$HPUX_IA64_MODE"; then
-      sys_lib_search_path_spec="/usr/lib/hpux32 /usr/local/lib/hpux32 /usr/local/lib"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux32
-    else
-      sys_lib_search_path_spec="/usr/lib/hpux64 /usr/local/lib/hpux64"
-      sys_lib_dlsearch_path_spec=/usr/lib/hpux64
-    fi
-    ;;
-  hppa*64*)
-    shrext_cmds='.sl'
-    hardcode_into_libs=yes
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=LD_LIBRARY_PATH # How should we handle SHLIB_PATH
-    shlibpath_overrides_runpath=yes # Unless +noenvvar is specified.
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    sys_lib_search_path_spec="/usr/lib/pa20_64 /usr/ccs/lib/pa20_64"
-    sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-    ;;
-  *)
-    shrext_cmds='.sl'
-    dynamic_linker="$host_os dld.sl"
-    shlibpath_var=SHLIB_PATH
-    shlibpath_overrides_runpath=no # +s is required to enable SHLIB_PATH
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    ;;
-  esac
-  # HP-UX runs *really* slowly unless shared libraries are mode 555, ...
-  postinstall_cmds='chmod 555 $lib'
-  # or fails outright, so override atomically:
-  install_override_mode=555
-  ;;
-
-interix[[3-9]]*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  dynamic_linker='Interix 3.x ld.so.1 (PE, like ELF)'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $host_os in
-    nonstopux*) version_type=nonstopux ;;
-    *)
-	if test yes = "$lt_cv_prog_gnu_ld"; then
-		version_type=linux # correct to gnu/linux during the next big refactor
-	else
-		version_type=irix
-	fi ;;
-  esac
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$release$shared_ext $libname$shared_ext'
-  case $host_os in
-  irix5* | nonstopux*)
-    libsuff= shlibsuff=
-    ;;
-  *)
-    case $LD in # libtool.m4 will add one of these switches to LD
-    *-32|*"-32 "|*-melf32bsmip|*"-melf32bsmip ")
-      libsuff= shlibsuff= libmagic=32-bit;;
-    *-n32|*"-n32 "|*-melf32bmipn32|*"-melf32bmipn32 ")
-      libsuff=32 shlibsuff=N32 libmagic=N32;;
-    *-64|*"-64 "|*-melf64bmip|*"-melf64bmip ")
-      libsuff=64 shlibsuff=64 libmagic=64-bit;;
-    *) libsuff= shlibsuff= libmagic=never-match;;
-    esac
-    ;;
-  esac
-  shlibpath_var=LD_LIBRARY${shlibsuff}_PATH
-  shlibpath_overrides_runpath=no
-  sys_lib_search_path_spec="/usr/lib$libsuff /lib$libsuff /usr/local/lib$libsuff"
-  sys_lib_dlsearch_path_spec="/usr/lib$libsuff /lib$libsuff"
-  hardcode_into_libs=yes
-  ;;
-
-# No shared lib support for Linux oldld, aout, or coff.
-linux*oldld* | linux*aout* | linux*coff*)
-  dynamic_linker=no
-  ;;
-
-linux*android*)
-  version_type=none # Android doesn't support versioned libraries.
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext'
-  soname_spec='$libname$release$shared_ext'
-  finish_cmds=
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  dynamic_linker='Android linker'
-  # Don't embed -rpath directories since the linker doesn't support them.
-  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -n $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-
-  # Some binutils ld are patched to set DT_RUNPATH
-  AC_CACHE_VAL([lt_cv_shlibpath_overrides_runpath],
-    [lt_cv_shlibpath_overrides_runpath=no
-    save_LDFLAGS=$LDFLAGS
-    save_libdir=$libdir
-    eval "libdir=/foo; wl=\"$_LT_TAGVAR(lt_prog_compiler_wl, $1)\"; \
-	 LDFLAGS=\"\$LDFLAGS $_LT_TAGVAR(hardcode_libdir_flag_spec, $1)\""
-    AC_LINK_IFELSE([AC_LANG_PROGRAM([],[])],
-      [AS_IF([ ($OBJDUMP -p conftest$ac_exeext) 2>/dev/null | grep "RUNPATH.*$libdir" >/dev/null],
-	 [lt_cv_shlibpath_overrides_runpath=yes])])
-    LDFLAGS=$save_LDFLAGS
-    libdir=$save_libdir
-    ])
-  shlibpath_overrides_runpath=$lt_cv_shlibpath_overrides_runpath
-
-  # This implies no fast_install, which is unacceptable.
-  # Some rework will be needed to allow for fast_install
-  # before this can be enabled.
-  hardcode_into_libs=yes
-
-  # Ideally, we could use ldconfig to report *all* directores which are
-  # searched for libraries, however this is still not possible.  Aside from not
-  # being certain /sbin/ldconfig is available, command
-  # 'ldconfig -N -X -v | grep ^/' on 64bit Fedora does not report /usr/lib64,
-  # even though it is searched at run-time.  Try to do the best guess by
-  # appending ld.so.conf contents (and includes) to the search path.
-  if test -f /etc/ld.so.conf; then
-    lt_ld_extra=`awk '/^include / { system(sprintf("cd /etc; cat %s 2>/dev/null", \[$]2)); skip = 1; } { if (!skip) print \[$]0; skip = 0; }' < /etc/ld.so.conf | $SED -e 's/#.*//;/^[	 ]*hwcap[	 ]/d;s/[:,	]/ /g;s/=[^=]*$//;s/=[^= ]* / /g;s/"//g;/^$/d' | tr '\n' ' '`
-    sys_lib_dlsearch_path_spec="/lib /usr/lib $lt_ld_extra"
-  fi
-
-  # We used to test for /lib/ld.so.1 and disable shared libraries on
-  # powerpc, because MkLinux only supported shared libraries with the
-  # GNU dynamic linker.  Since this was broken with cross compilers,
-  # most powerpc-linux boxes support dynamic linking these days and
-  # people can always --disable-shared, the test was removed, and we
-  # assume the GNU/Linux dynamic linker is in use.
-  dynamic_linker='GNU/Linux ld.so'
-  ;;
-
-netbsd*)
-  version_type=sunos
-  need_lib_prefix=no
-  need_version=no
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-    finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-    dynamic_linker='NetBSD (a.out) ld.so'
-  else
-    library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-    soname_spec='$libname$release$shared_ext$major'
-    dynamic_linker='NetBSD ld.elf_so'
-  fi
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  ;;
-
-newsos6)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-*nto* | *qnx*)
-  version_type=qnx
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  dynamic_linker='ldqnx.so'
-  ;;
-
-openbsd* | bitrig*)
-  version_type=sunos
-  sys_lib_dlsearch_path_spec=/usr/lib
-  need_lib_prefix=no
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    need_version=no
-  else
-    need_version=yes
-  fi
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/sbin" ldconfig -m $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  ;;
-
-os2*)
-  libname_spec='$name'
-  version_type=windows
-  shrext_cmds=.dll
-  need_version=no
-  need_lib_prefix=no
-  # OS/2 can only load a DLL with a base name of 8 characters or less.
-  soname_spec='`test -n "$os2dllname" && libname="$os2dllname";
-    v=$($ECHO $release$versuffix | tr -d .-);
-    n=$($ECHO $libname | cut -b -$((8 - ${#v})) | tr . _);
-    $ECHO $n$v`$shared_ext'
-  library_names_spec='${libname}_dll.$libext'
-  dynamic_linker='OS/2 ld.exe'
-  shlibpath_var=BEGINLIBPATH
-  sys_lib_search_path_spec="/lib /usr/lib /usr/local/lib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  postinstall_cmds='base_file=`basename \$file`~
-    dlpath=`$SHELL 2>&1 -c '\''. $dir/'\''\$base_file'\''i; $ECHO \$dlname'\''`~
-    dldir=$destdir/`dirname \$dlpath`~
-    test -d \$dldir || mkdir -p \$dldir~
-    $install_prog $dir/$dlname \$dldir/$dlname~
-    chmod a+x \$dldir/$dlname~
-    if test -n '\''$stripme'\'' && test -n '\''$striplib'\''; then
-      eval '\''$striplib \$dldir/$dlname'\'' || exit \$?;
-    fi'
-  postuninstall_cmds='dldll=`$SHELL 2>&1 -c '\''. $file; $ECHO \$dlname'\''`~
-    dlpath=$dir/\$dldll~
-    $RM \$dlpath'
-  ;;
-
-osf3* | osf4* | osf5*)
-  version_type=osf
-  need_lib_prefix=no
-  need_version=no
-  soname_spec='$libname$release$shared_ext$major'
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  sys_lib_search_path_spec="/usr/shlib /usr/ccs/lib /usr/lib/cmplrs/cc /usr/lib /usr/local/lib /var/shlib"
-  sys_lib_dlsearch_path_spec=$sys_lib_search_path_spec
-  ;;
-
-rdos*)
-  dynamic_linker=no
-  ;;
-
-solaris*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  # ldd complains unless libraries are executable
-  postinstall_cmds='chmod +x $lib'
-  ;;
-
-sunos4*)
-  version_type=sunos
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$shared_ext$versuffix'
-  finish_cmds='PATH="\$PATH:/usr/etc" ldconfig $libdir'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  if test yes = "$with_gnu_ld"; then
-    need_lib_prefix=no
-  fi
-  need_version=yes
-  ;;
-
-sysv4 | sysv4.3*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  case $host_vendor in
-    sni)
-      shlibpath_overrides_runpath=no
-      need_lib_prefix=no
-      runpath_var=LD_RUN_PATH
-      ;;
-    siemens)
-      need_lib_prefix=no
-      ;;
-    motorola)
-      need_lib_prefix=no
-      need_version=no
-      shlibpath_overrides_runpath=no
-      sys_lib_search_path_spec='/lib /usr/lib /usr/ccs/lib'
-      ;;
-  esac
-  ;;
-
-sysv4*MP*)
-  if test -d /usr/nec; then
-    version_type=linux # correct to gnu/linux during the next big refactor
-    library_names_spec='$libname$shared_ext.$versuffix $libname$shared_ext.$major $libname$shared_ext'
-    soname_spec='$libname$shared_ext.$major'
-    shlibpath_var=LD_LIBRARY_PATH
-  fi
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  version_type=sco
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=yes
-  hardcode_into_libs=yes
-  if test yes = "$with_gnu_ld"; then
-    sys_lib_search_path_spec='/usr/local/lib /usr/gnu/lib /usr/ccs/lib /usr/lib /lib'
-  else
-    sys_lib_search_path_spec='/usr/ccs/lib /usr/lib'
-    case $host_os in
-      sco3.2v5*)
-        sys_lib_search_path_spec="$sys_lib_search_path_spec /lib"
-	;;
-    esac
-  fi
-  sys_lib_dlsearch_path_spec='/usr/lib'
-  ;;
-
-tpf*)
-  # TPF is a cross-target only.  Preferred cross-host = GNU/Linux.
-  version_type=linux # correct to gnu/linux during the next big refactor
-  need_lib_prefix=no
-  need_version=no
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  shlibpath_var=LD_LIBRARY_PATH
-  shlibpath_overrides_runpath=no
-  hardcode_into_libs=yes
-  ;;
-
-uts4*)
-  version_type=linux # correct to gnu/linux during the next big refactor
-  library_names_spec='$libname$release$shared_ext$versuffix $libname$release$shared_ext$major $libname$shared_ext'
-  soname_spec='$libname$release$shared_ext$major'
-  shlibpath_var=LD_LIBRARY_PATH
-  ;;
-
-*)
-  dynamic_linker=no
-  ;;
-esac
-AC_MSG_RESULT([$dynamic_linker])
-test no = "$dynamic_linker" && can_build_shared=no
-
-variables_saved_for_relink="PATH $shlibpath_var $runpath_var"
-if test yes = "$GCC"; then
-  variables_saved_for_relink="$variables_saved_for_relink GCC_EXEC_PREFIX COMPILER_PATH LIBRARY_PATH"
-fi
-
-if test set = "${lt_cv_sys_lib_search_path_spec+set}"; then
-  sys_lib_search_path_spec=$lt_cv_sys_lib_search_path_spec
-fi
-
-if test set = "${lt_cv_sys_lib_dlsearch_path_spec+set}"; then
-  sys_lib_dlsearch_path_spec=$lt_cv_sys_lib_dlsearch_path_spec
-fi
-
-# remember unaugmented sys_lib_dlsearch_path content for libtool script decls...
-configure_time_dlsearch_path=$sys_lib_dlsearch_path_spec
-
-# ... but it needs LT_SYS_LIBRARY_PATH munging for other configure-time code
-func_munge_path_list sys_lib_dlsearch_path_spec "$LT_SYS_LIBRARY_PATH"
-
-# to be used as default LT_SYS_LIBRARY_PATH value in generated libtool
-configure_time_lt_sys_library_path=$LT_SYS_LIBRARY_PATH
-
-_LT_DECL([], [variables_saved_for_relink], [1],
-    [Variables whose values should be saved in libtool wrapper scripts and
-    restored at link time])
-_LT_DECL([], [need_lib_prefix], [0],
-    [Do we need the "lib" prefix for modules?])
-_LT_DECL([], [need_version], [0], [Do we need a version for libraries?])
-_LT_DECL([], [version_type], [0], [Library versioning type])
-_LT_DECL([], [runpath_var], [0],  [Shared library runtime path variable])
-_LT_DECL([], [shlibpath_var], [0],[Shared library path variable])
-_LT_DECL([], [shlibpath_overrides_runpath], [0],
-    [Is shlibpath searched before the hard-coded library search path?])
-_LT_DECL([], [libname_spec], [1], [Format of library name prefix])
-_LT_DECL([], [library_names_spec], [1],
-    [[List of archive names.  First name is the real one, the rest are links.
-    The last name is the one that the linker finds with -lNAME]])
-_LT_DECL([], [soname_spec], [1],
-    [[The coded name of the library, if different from the real name]])
-_LT_DECL([], [install_override_mode], [1],
-    [Permission mode override for installation of shared libraries])
-_LT_DECL([], [postinstall_cmds], [2],
-    [Command to use after installation of a shared archive])
-_LT_DECL([], [postuninstall_cmds], [2],
-    [Command to use after uninstallation of a shared archive])
-_LT_DECL([], [finish_cmds], [2],
-    [Commands used to finish a libtool library installation in a directory])
-_LT_DECL([], [finish_eval], [1],
-    [[As "finish_cmds", except a single script fragment to be evaled but
-    not shown]])
-_LT_DECL([], [hardcode_into_libs], [0],
-    [Whether we should hardcode library paths into libraries])
-_LT_DECL([], [sys_lib_search_path_spec], [2],
-    [Compile-time system search path for libraries])
-_LT_DECL([sys_lib_dlsearch_path_spec], [configure_time_dlsearch_path], [2],
-    [Detected run-time system search path for libraries])
-_LT_DECL([], [configure_time_lt_sys_library_path], [2],
-    [Explicit LT_SYS_LIBRARY_PATH set during ./configure time])
-])# _LT_SYS_DYNAMIC_LINKER
-
-
-# _LT_PATH_TOOL_PREFIX(TOOL)
-# --------------------------
-# find a file program that can recognize shared library
-AC_DEFUN([_LT_PATH_TOOL_PREFIX],
-[m4_require([_LT_DECL_EGREP])dnl
-AC_MSG_CHECKING([for $1])
-AC_CACHE_VAL(lt_cv_path_MAGIC_CMD,
-[case $MAGIC_CMD in
-[[\\/*] |  ?:[\\/]*])
-  lt_cv_path_MAGIC_CMD=$MAGIC_CMD # Let the user override the test with a path.
-  ;;
-*)
-  lt_save_MAGIC_CMD=$MAGIC_CMD
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-dnl $ac_dummy forces splitting on constant user-supplied paths.
-dnl POSIX.2 word splitting is done only on the output of word expansions,
-dnl not every word.  This closes a longstanding sh security hole.
-  ac_dummy="m4_if([$2], , $PATH, [$2])"
-  for ac_dir in $ac_dummy; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$1"; then
-      lt_cv_path_MAGIC_CMD=$ac_dir/"$1"
-      if test -n "$file_magic_test_file"; then
-	case $deplibs_check_method in
-	"file_magic "*)
-	  file_magic_regex=`expr "$deplibs_check_method" : "file_magic \(.*\)"`
-	  MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-	  if eval $file_magic_cmd \$file_magic_test_file 2> /dev/null |
-	    $EGREP "$file_magic_regex" > /dev/null; then
-	    :
-	  else
-	    cat <<_LT_EOF 1>&2
-
-*** Warning: the command libtool uses to detect shared libraries,
-*** $file_magic_cmd, produces output that libtool cannot recognize.
-*** The result is that libtool may fail to recognize shared libraries
-*** as such.  This will affect the creation of libtool libraries that
-*** depend on shared libraries, but programs linked with such libtool
-*** libraries will work regardless of this problem.  Nevertheless, you
-*** may want to report the problem to your system manager and/or to
-*** bug-libtool@gnu.org
-
-_LT_EOF
-	  fi ;;
-	esac
-      fi
-      break
-    fi
-  done
-  IFS=$lt_save_ifs
-  MAGIC_CMD=$lt_save_MAGIC_CMD
-  ;;
-esac])
-MAGIC_CMD=$lt_cv_path_MAGIC_CMD
-if test -n "$MAGIC_CMD"; then
-  AC_MSG_RESULT($MAGIC_CMD)
-else
-  AC_MSG_RESULT(no)
-fi
-_LT_DECL([], [MAGIC_CMD], [0],
-	 [Used to examine libraries when file_magic_cmd begins with "file"])dnl
-])# _LT_PATH_TOOL_PREFIX
-
-# Old name:
-AU_ALIAS([AC_PATH_TOOL_PREFIX], [_LT_PATH_TOOL_PREFIX])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_PATH_TOOL_PREFIX], [])
-
-
-# _LT_PATH_MAGIC
-# --------------
-# find a file program that can recognize a shared library
-m4_defun([_LT_PATH_MAGIC],
-[_LT_PATH_TOOL_PREFIX(${ac_tool_prefix}file, /usr/bin$PATH_SEPARATOR$PATH)
-if test -z "$lt_cv_path_MAGIC_CMD"; then
-  if test -n "$ac_tool_prefix"; then
-    _LT_PATH_TOOL_PREFIX(file, /usr/bin$PATH_SEPARATOR$PATH)
-  else
-    MAGIC_CMD=:
-  fi
-fi
-])# _LT_PATH_MAGIC
-
-
-# LT_PATH_LD
-# ----------
-# find the pathname to the GNU or non-GNU linker
-AC_DEFUN([LT_PATH_LD],
-[AC_REQUIRE([AC_PROG_CC])dnl
-AC_REQUIRE([AC_CANONICAL_HOST])dnl
-AC_REQUIRE([AC_CANONICAL_BUILD])dnl
-m4_require([_LT_DECL_SED])dnl
-m4_require([_LT_DECL_EGREP])dnl
-m4_require([_LT_PROG_ECHO_BACKSLASH])dnl
-
-AC_ARG_WITH([gnu-ld],
-    [AS_HELP_STRING([--with-gnu-ld],
-	[assume the C compiler uses GNU ld @<:@default=no@:>@])],
-    [test no = "$withval" || with_gnu_ld=yes],
-    [with_gnu_ld=no])dnl
-
-ac_prog=ld
-if test yes = "$GCC"; then
-  # Check if gcc -print-prog-name=ld gives a path.
-  AC_MSG_CHECKING([for ld used by $CC])
-  case $host in
-  *-*-mingw*)
-    # gcc leaves a trailing carriage return, which upsets mingw
-    ac_prog=`($CC -print-prog-name=ld) 2>&5 | tr -d '\015'` ;;
-  *)
-    ac_prog=`($CC -print-prog-name=ld) 2>&5` ;;
-  esac
-  case $ac_prog in
-    # Accept absolute paths.
-    [[\\/]]* | ?:[[\\/]]*)
-      re_direlt='/[[^/]][[^/]]*/\.\./'
-      # Canonicalize the pathname of ld
-      ac_prog=`$ECHO "$ac_prog"| $SED 's%\\\\%/%g'`
-      while $ECHO "$ac_prog" | $GREP "$re_direlt" > /dev/null 2>&1; do
-	ac_prog=`$ECHO $ac_prog| $SED "s%$re_direlt%/%"`
-      done
-      test -z "$LD" && LD=$ac_prog
-      ;;
-  "")
-    # If it fails, then pretend we aren't using GCC.
-    ac_prog=ld
-    ;;
-  *)
-    # If it is relative, then search for the first ld in PATH.
-    with_gnu_ld=unknown
-    ;;
-  esac
-elif test yes = "$with_gnu_ld"; then
-  AC_MSG_CHECKING([for GNU ld])
-else
-  AC_MSG_CHECKING([for non-GNU ld])
-fi
-AC_CACHE_VAL(lt_cv_path_LD,
-[if test -z "$LD"; then
-  lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-  for ac_dir in $PATH; do
-    IFS=$lt_save_ifs
-    test -z "$ac_dir" && ac_dir=.
-    if test -f "$ac_dir/$ac_prog" || test -f "$ac_dir/$ac_prog$ac_exeext"; then
-      lt_cv_path_LD=$ac_dir/$ac_prog
-      # Check to see if the program is GNU ld.  I'd rather use --version,
-      # but apparently some variants of GNU ld only accept -v.
-      # Break only if it was the GNU/non-GNU ld that we prefer.
-      case `"$lt_cv_path_LD" -v 2>&1 </dev/null` in
-      *GNU* | *'with BFD'*)
-	test no != "$with_gnu_ld" && break
-	;;
-      *)
-	test yes != "$with_gnu_ld" && break
-	;;
-      esac
-    fi
-  done
-  IFS=$lt_save_ifs
-else
-  lt_cv_path_LD=$LD # Let the user override the test with a path.
-fi])
-LD=$lt_cv_path_LD
-if test -n "$LD"; then
-  AC_MSG_RESULT($LD)
-else
-  AC_MSG_RESULT(no)
-fi
-test -z "$LD" && AC_MSG_ERROR([no acceptable ld found in \$PATH])
-_LT_PATH_LD_GNU
-AC_SUBST([LD])
-
-_LT_TAGDECL([], [LD], [1], [The linker used to build libraries])
-])# LT_PATH_LD
-
-# Old names:
-AU_ALIAS([AM_PROG_LD], [LT_PATH_LD])
-AU_ALIAS([AC_PROG_LD], [LT_PATH_LD])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AM_PROG_LD], [])
-dnl AC_DEFUN([AC_PROG_LD], [])
-
-
-# _LT_PATH_LD_GNU
-#- --------------
-m4_defun([_LT_PATH_LD_GNU],
-[AC_CACHE_CHECK([if the linker ($LD) is GNU ld], lt_cv_prog_gnu_ld,
-[# I'd rather use --version here, but apparently some GNU lds only accept -v.
-case `$LD -v 2>&1 </dev/null` in
-*GNU* | *'with BFD'*)
-  lt_cv_prog_gnu_ld=yes
-  ;;
-*)
-  lt_cv_prog_gnu_ld=no
-  ;;
-esac])
-with_gnu_ld=$lt_cv_prog_gnu_ld
-])# _LT_PATH_LD_GNU
-
-
-# _LT_CMD_RELOAD
-# --------------
-# find reload flag for linker
-#   -- PORTME Some linkers may need a different reload flag.
-m4_defun([_LT_CMD_RELOAD],
-[AC_CACHE_CHECK([for $LD option to reload object files],
-  lt_cv_ld_reload_flag,
-  [lt_cv_ld_reload_flag='-r'])
-reload_flag=$lt_cv_ld_reload_flag
-case $reload_flag in
-"" | " "*) ;;
-*) reload_flag=" $reload_flag" ;;
-esac
-reload_cmds='$LD$reload_flag -o $output$reload_objs'
-case $host_os in
-  cygwin* | mingw* | pw32* | cegcc*)
-    if test yes != "$GCC"; then
-      reload_cmds=false
-    fi
-    ;;
-  darwin*)
-    if test yes = "$GCC"; then
-      reload_cmds='$LTCC $LTCFLAGS -nostdlib $wl-r -o $output$reload_objs'
-    else
-      reload_cmds='$LD$reload_flag -o $output$reload_objs'
-    fi
-    ;;
-esac
-_LT_TAGDECL([], [reload_flag], [1], [How to create reloadable object files])dnl
-_LT_TAGDECL([], [reload_cmds], [2])dnl
-])# _LT_CMD_RELOAD
-
-
-# _LT_PATH_DD
-# -----------
-# find a working dd
-m4_defun([_LT_PATH_DD],
-[AC_CACHE_CHECK([for a working dd], [ac_cv_path_lt_DD],
-[printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-: ${lt_DD:=$DD}
-AC_PATH_PROGS_FEATURE_CHECK([lt_DD], [dd],
-[if "$ac_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && ac_cv_path_lt_DD="$ac_path_lt_DD" ac_path_lt_DD_found=:
-fi])
-rm -f conftest.i conftest2.i conftest.out])
-])# _LT_PATH_DD
-
-
-# _LT_CMD_TRUNCATE
-# ----------------
-# find command to truncate a binary pipe
-m4_defun([_LT_CMD_TRUNCATE],
-[m4_require([_LT_PATH_DD])
-AC_CACHE_CHECK([how to truncate binary pipes], [lt_cv_truncate_bin],
-[printf 0123456789abcdef0123456789abcdef >conftest.i
-cat conftest.i conftest.i >conftest2.i
-lt_cv_truncate_bin=
-if "$ac_cv_path_lt_DD" bs=32 count=1 <conftest2.i >conftest.out 2>/dev/null; then
-  cmp -s conftest.i conftest.out \
-  && lt_cv_truncate_bin="$ac_cv_path_lt_DD bs=4096 count=1"
-fi
-rm -f conftest.i conftest2.i conftest.out
-test -z "$lt_cv_truncate_bin" && lt_cv_truncate_bin="$SED -e 4q"])
-_LT_DECL([lt_truncate_bin], [lt_cv_truncate_bin], [1],
-  [Command to truncate a binary pipe])
-])# _LT_CMD_TRUNCATE
-
-
-# _LT_CHECK_MAGIC_METHOD
-# ----------------------
-# how to check for library dependencies
-#  -- PORTME fill in with the dynamic library characteristics
-m4_defun([_LT_CHECK_MAGIC_METHOD],
-[m4_require([_LT_DECL_EGREP])
-m4_require([_LT_DECL_OBJDUMP])
-AC_CACHE_CHECK([how to recognize dependent libraries],
-lt_cv_deplibs_check_method,
-[lt_cv_file_magic_cmd='$MAGIC_CMD'
-lt_cv_file_magic_test_file=
-lt_cv_deplibs_check_method='unknown'
-# Need to set the preceding variable on all platforms that support
-# interlibrary dependencies.
-# 'none' -- dependencies not supported.
-# 'unknown' -- same as none, but documents that we really don't know.
-# 'pass_all' -- all dependencies passed with no checks.
-# 'test_compile' -- check by making test program.
-# 'file_magic [[regex]]' -- check by looking for files in library path
-# that responds to the $file_magic_cmd with a given extended regex.
-# If you have 'file' or equivalent on your system and you're not sure
-# whether 'pass_all' will *always* work, you probably want this one.
-
-case $host_os in
-aix[[4-9]]*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-beos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-bsdi[[45]]*)
-  lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (shared object|dynamic lib)'
-  lt_cv_file_magic_cmd='$FILECMD -L'
-  lt_cv_file_magic_test_file=/shlib/libc.so
-  ;;
-
-cygwin*)
-  # func_win32_libid is a shell function defined in ltmain.sh
-  lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-  lt_cv_file_magic_cmd='func_win32_libid'
-  ;;
-
-mingw* | pw32*)
-  # Base MSYS/MinGW do not provide the 'file' command needed by
-  # func_win32_libid shell function, so use a weaker test based on 'objdump',
-  # unless we find 'file', for example because we are cross-compiling.
-  if ( file / ) >/dev/null 2>&1; then
-    lt_cv_deplibs_check_method='file_magic ^x86 archive import|^x86 DLL'
-    lt_cv_file_magic_cmd='func_win32_libid'
-  else
-    # Keep this pattern in sync with the one in func_win32_libid.
-    lt_cv_deplibs_check_method='file_magic file format (pei*-i386(.*architecture: i386)?|pe-arm-wince|pe-x86-64)'
-    lt_cv_file_magic_cmd='$OBJDUMP -f'
-  fi
-  ;;
-
-cegcc*)
-  # use the weaker test based on 'objdump'. See mingw*.
-  lt_cv_deplibs_check_method='file_magic file format pe-arm-.*little(.*architecture: arm)?'
-  lt_cv_file_magic_cmd='$OBJDUMP -f'
-  ;;
-
-darwin* | rhapsody*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-freebsd* | dragonfly* | midnightbsd*)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    case $host_cpu in
-    i*86 )
-      # Not sure whether the presence of OpenBSD here was a mistake.
-      # Let's accept both of them until this is cleared up.
-      lt_cv_deplibs_check_method='file_magic (FreeBSD|OpenBSD|DragonFly)/i[[3-9]]86 (compact )?demand paged shared library'
-      lt_cv_file_magic_cmd=$FILECMD
-      lt_cv_file_magic_test_file=`echo /usr/lib/libc.so.*`
-      ;;
-    esac
-  else
-    lt_cv_deplibs_check_method=pass_all
-  fi
-  ;;
-
-haiku*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-hpux10.20* | hpux11*)
-  lt_cv_file_magic_cmd=$FILECMD
-  case $host_cpu in
-  ia64*)
-    lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|ELF-[[0-9]][[0-9]]) shared object file - IA64'
-    lt_cv_file_magic_test_file=/usr/lib/hpux32/libc.so
-    ;;
-  hppa*64*)
-    [lt_cv_deplibs_check_method='file_magic (s[0-9][0-9][0-9]|ELF[ -][0-9][0-9])(-bit)?( [LM]SB)? shared object( file)?[, -]* PA-RISC [0-9]\.[0-9]']
-    lt_cv_file_magic_test_file=/usr/lib/pa20_64/libc.sl
-    ;;
-  *)
-    lt_cv_deplibs_check_method='file_magic (s[[0-9]][[0-9]][[0-9]]|PA-RISC[[0-9]]\.[[0-9]]) shared library'
-    lt_cv_file_magic_test_file=/usr/lib/libc.sl
-    ;;
-  esac
-  ;;
-
-interix[[3-9]]*)
-  # PIC code is broken on Interix 3.x, that's why |\.a not |_pic\.a here
-  lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|\.a)$'
-  ;;
-
-irix5* | irix6* | nonstopux*)
-  case $LD in
-  *-32|*"-32 ") libmagic=32-bit;;
-  *-n32|*"-n32 ") libmagic=N32;;
-  *-64|*"-64 ") libmagic=64-bit;;
-  *) libmagic=never-match;;
-  esac
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-# This must be glibc/ELF.
-linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-netbsd*)
-  if echo __ELF__ | $CC -E - | $GREP __ELF__ > /dev/null; then
-    lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so|_pic\.a)$'
-  fi
-  ;;
-
-newos6*)
-  lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (executable|dynamic lib)'
-  lt_cv_file_magic_cmd=$FILECMD
-  lt_cv_file_magic_test_file=/usr/lib/libnls.so
-  ;;
-
-*nto* | *qnx*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-openbsd* | bitrig*)
-  if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-    lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|\.so|_pic\.a)$'
-  else
-    lt_cv_deplibs_check_method='match_pattern /lib[[^/]]+(\.so\.[[0-9]]+\.[[0-9]]+|_pic\.a)$'
-  fi
-  ;;
-
-osf3* | osf4* | osf5*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-rdos*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-solaris*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX* | sysv4*uw2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-
-sysv4 | sysv4.3*)
-  case $host_vendor in
-  motorola)
-    lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[ML]]SB (shared object|dynamic lib) M[[0-9]][[0-9]]* Version [[0-9]]'
-    lt_cv_file_magic_test_file=`echo /usr/lib/libc.so*`
-    ;;
-  ncr)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  sequent)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method='file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB (shared object|dynamic lib )'
-    ;;
-  sni)
-    lt_cv_file_magic_cmd='/bin/file'
-    lt_cv_deplibs_check_method="file_magic ELF [[0-9]][[0-9]]*-bit [[LM]]SB dynamic lib"
-    lt_cv_file_magic_test_file=/lib/libc.so
-    ;;
-  siemens)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  pc)
-    lt_cv_deplibs_check_method=pass_all
-    ;;
-  esac
-  ;;
-
-tpf*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-os2*)
-  lt_cv_deplibs_check_method=pass_all
-  ;;
-esac
-])
-
-file_magic_glob=
-want_nocaseglob=no
-if test "$build" = "$host"; then
-  case $host_os in
-  mingw* | pw32*)
-    if ( shopt | grep nocaseglob ) >/dev/null 2>&1; then
-      want_nocaseglob=yes
-    else
-      file_magic_glob=`echo aAbBcCdDeEfFgGhHiIjJkKlLmMnNoOpPqQrRsStTuUvVwWxXyYzZ | $SED -e "s/\(..\)/s\/[[\1]]\/[[\1]]\/g;/g"`
-    fi
-    ;;
-  esac
-fi
-
-file_magic_cmd=$lt_cv_file_magic_cmd
-deplibs_check_method=$lt_cv_deplibs_check_method
-test -z "$deplibs_check_method" && deplibs_check_method=unknown
-
-_LT_DECL([], [deplibs_check_method], [1],
-    [Method to check whether dependent libraries are shared objects])
-_LT_DECL([], [file_magic_cmd], [1],
-    [Command to use when deplibs_check_method = "file_magic"])
-_LT_DECL([], [file_magic_glob], [1],
-    [How to find potential files when deplibs_check_method = "file_magic"])
-_LT_DECL([], [want_nocaseglob], [1],
-    [Find potential files using nocaseglob when deplibs_check_method = "file_magic"])
-])# _LT_CHECK_MAGIC_METHOD
-
-
-# LT_PATH_NM
-# ----------
-# find the pathname to a BSD- or MS-compatible name lister
-AC_DEFUN([LT_PATH_NM],
-[AC_REQUIRE([AC_PROG_CC])dnl
-AC_CACHE_CHECK([for BSD- or MS-compatible name lister (nm)], lt_cv_path_NM,
-[if test -n "$NM"; then
-  # Let the user override the test.
-  lt_cv_path_NM=$NM
-else
-  lt_nm_to_check=${ac_tool_prefix}nm
-  if test -n "$ac_tool_prefix" && test "$build" = "$host"; then
-    lt_nm_to_check="$lt_nm_to_check nm"
-  fi
-  for lt_tmp_nm in $lt_nm_to_check; do
-    lt_save_ifs=$IFS; IFS=$PATH_SEPARATOR
-    for ac_dir in $PATH /usr/ccs/bin/elf /usr/ccs/bin /usr/ucb /bin; do
-      IFS=$lt_save_ifs
-      test -z "$ac_dir" && ac_dir=.
-      tmp_nm=$ac_dir/$lt_tmp_nm
-      if test -f "$tmp_nm" || test -f "$tmp_nm$ac_exeext"; then
-	# Check to see if the nm accepts a BSD-compat flag.
-	# Adding the 'sed 1q' prevents false positives on HP-UX, which says:
-	#   nm: unknown option "B" ignored
-	# Tru64's nm complains that /dev/null is an invalid object file
-	# MSYS converts /dev/null to NUL, MinGW nm treats NUL as empty
-	case $build_os in
-	mingw*) lt_bad_file=conftest.nm/nofile ;;
-	*) lt_bad_file=/dev/null ;;
-	esac
-	case `"$tmp_nm" -B $lt_bad_file 2>&1 | $SED '1q'` in
-	*$lt_bad_file* | *'Invalid file or object type'*)
-	  lt_cv_path_NM="$tmp_nm -B"
-	  break 2
-	  ;;
-	*)
-	  case `"$tmp_nm" -p /dev/null 2>&1 | $SED '1q'` in
-	  */dev/null*)
-	    lt_cv_path_NM="$tmp_nm -p"
-	    break 2
-	    ;;
-	  *)
-	    lt_cv_path_NM=${lt_cv_path_NM="$tmp_nm"} # keep the first match, but
-	    continue # so that we can try to find one that supports BSD flags
-	    ;;
-	  esac
-	  ;;
-	esac
-      fi
-    done
-    IFS=$lt_save_ifs
-  done
-  : ${lt_cv_path_NM=no}
-fi])
-if test no != "$lt_cv_path_NM"; then
-  NM=$lt_cv_path_NM
-else
-  # Didn't find any BSD compatible name lister, look for dumpbin.
-  if test -n "$DUMPBIN"; then :
-    # Let the user override the test.
-  else
-    AC_CHECK_TOOLS(DUMPBIN, [dumpbin "link -dump"], :)
-    case `$DUMPBIN -symbols -headers /dev/null 2>&1 | $SED '1q'` in
-    *COFF*)
-      DUMPBIN="$DUMPBIN -symbols -headers"
-      ;;
-    *)
-      DUMPBIN=:
-      ;;
-    esac
-  fi
-  AC_SUBST([DUMPBIN])
-  if test : != "$DUMPBIN"; then
-    NM=$DUMPBIN
-  fi
-fi
-test -z "$NM" && NM=nm
-AC_SUBST([NM])
-_LT_DECL([], [NM], [1], [A BSD- or MS-compatible name lister])dnl
-
-AC_CACHE_CHECK([the name lister ($NM) interface], [lt_cv_nm_interface],
-  [lt_cv_nm_interface="BSD nm"
-  echo "int some_variable = 0;" > conftest.$ac_ext
-  (eval echo "\"\$as_me:$LINENO: $ac_compile\"" >&AS_MESSAGE_LOG_FD)
-  (eval "$ac_compile" 2>conftest.err)
-  cat conftest.err >&AS_MESSAGE_LOG_FD
-  (eval echo "\"\$as_me:$LINENO: $NM \\\"conftest.$ac_objext\\\"\"" >&AS_MESSAGE_LOG_FD)
-  (eval "$NM \"conftest.$ac_objext\"" 2>conftest.err > conftest.out)
-  cat conftest.err >&AS_MESSAGE_LOG_FD
-  (eval echo "\"\$as_me:$LINENO: output\"" >&AS_MESSAGE_LOG_FD)
-  cat conftest.out >&AS_MESSAGE_LOG_FD
-  if $GREP 'External.*some_variable' conftest.out > /dev/null; then
-    lt_cv_nm_interface="MS dumpbin"
-  fi
-  rm -f conftest*])
-])# LT_PATH_NM
-
-# Old names:
-AU_ALIAS([AM_PROG_NM], [LT_PATH_NM])
-AU_ALIAS([AC_PROG_NM], [LT_PATH_NM])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AM_PROG_NM], [])
-dnl AC_DEFUN([AC_PROG_NM], [])
-
-# _LT_CHECK_SHAREDLIB_FROM_LINKLIB
-# --------------------------------
-# how to determine the name of the shared library
-# associated with a specific link library.
-#  -- PORTME fill in with the dynamic library characteristics
-m4_defun([_LT_CHECK_SHAREDLIB_FROM_LINKLIB],
-[m4_require([_LT_DECL_EGREP])
-m4_require([_LT_DECL_OBJDUMP])
-m4_require([_LT_DECL_DLLTOOL])
-AC_CACHE_CHECK([how to associate runtime and link libraries],
-lt_cv_sharedlib_from_linklib_cmd,
-[lt_cv_sharedlib_from_linklib_cmd='unknown'
-
-case $host_os in
-cygwin* | mingw* | pw32* | cegcc*)
-  # two different shell functions defined in ltmain.sh;
-  # decide which one to use based on capabilities of $DLLTOOL
-  case `$DLLTOOL --help 2>&1` in
-  *--identify-strict*)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib
-    ;;
-  *)
-    lt_cv_sharedlib_from_linklib_cmd=func_cygming_dll_for_implib_fallback
-    ;;
-  esac
-  ;;
-*)
-  # fallback: assume linklib IS sharedlib
-  lt_cv_sharedlib_from_linklib_cmd=$ECHO
-  ;;
-esac
-])
-sharedlib_from_linklib_cmd=$lt_cv_sharedlib_from_linklib_cmd
-test -z "$sharedlib_from_linklib_cmd" && sharedlib_from_linklib_cmd=$ECHO
-
-_LT_DECL([], [sharedlib_from_linklib_cmd], [1],
-    [Command to associate shared and link libraries])
-])# _LT_CHECK_SHAREDLIB_FROM_LINKLIB
-
-
-# _LT_PATH_MANIFEST_TOOL
-# ----------------------
-# locate the manifest tool
-m4_defun([_LT_PATH_MANIFEST_TOOL],
-[AC_CHECK_TOOL(MANIFEST_TOOL, mt, :)
-test -z "$MANIFEST_TOOL" && MANIFEST_TOOL=mt
-AC_CACHE_CHECK([if $MANIFEST_TOOL is a manifest tool], [lt_cv_path_mainfest_tool],
-  [lt_cv_path_mainfest_tool=no
-  echo "$as_me:$LINENO: $MANIFEST_TOOL '-?'" >&AS_MESSAGE_LOG_FD
-  $MANIFEST_TOOL '-?' 2>conftest.err > conftest.out
-  cat conftest.err >&AS_MESSAGE_LOG_FD
-  if $GREP 'Manifest Tool' conftest.out > /dev/null; then
-    lt_cv_path_mainfest_tool=yes
-  fi
-  rm -f conftest*])
-if test yes != "$lt_cv_path_mainfest_tool"; then
-  MANIFEST_TOOL=:
-fi
-_LT_DECL([], [MANIFEST_TOOL], [1], [Manifest tool])dnl
-])# _LT_PATH_MANIFEST_TOOL
-
-
-# _LT_DLL_DEF_P([FILE])
-# ---------------------
-# True iff FILE is a Windows DLL '.def' file.
-# Keep in sync with func_dll_def_p in the libtool script
-AC_DEFUN([_LT_DLL_DEF_P],
-[dnl
-  test DEF = "`$SED -n dnl
-    -e '\''s/^[[	 ]]*//'\'' dnl Strip leading whitespace
-    -e '\''/^\(;.*\)*$/d'\'' dnl      Delete empty lines and comments
-    -e '\''s/^\(EXPORTS\|LIBRARY\)\([[	 ]].*\)*$/DEF/p'\'' dnl
-    -e q dnl                          Only consider the first "real" line
-    $1`" dnl
-])# _LT_DLL_DEF_P
-
-
-# LT_LIB_M
-# --------
-# check for math library
-AC_DEFUN([LT_LIB_M],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-LIBM=
-case $host in
-*-*-beos* | *-*-cegcc* | *-*-cygwin* | *-*-haiku* | *-*-pw32* | *-*-darwin*)
-  # These system don't have libm, or don't need it
-  ;;
-*-ncr-sysv4.3*)
-  AC_CHECK_LIB(mw, _mwvalidcheckl, LIBM=-lmw)
-  AC_CHECK_LIB(m, cos, LIBM="$LIBM -lm")
-  ;;
-*)
-  AC_CHECK_LIB(m, cos, LIBM=-lm)
-  ;;
-esac
-AC_SUBST([LIBM])
-])# LT_LIB_M
-
-# Old name:
-AU_ALIAS([AC_CHECK_LIBM], [LT_LIB_M])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_CHECK_LIBM], [])
-
-
-# _LT_COMPILER_NO_RTTI([TAGNAME])
-# -------------------------------
-m4_defun([_LT_COMPILER_NO_RTTI],
-[m4_require([_LT_TAG_COMPILER])dnl
-
-_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=
-
-if test yes = "$GCC"; then
-  case $cc_basename in
-  nvcc*)
-    _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -Xcompiler -fno-builtin' ;;
-  *)
-    _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin' ;;
-  esac
-
-  _LT_COMPILER_OPTION([if $compiler supports -fno-rtti -fno-exceptions],
-    lt_cv_prog_compiler_rtti_exceptions,
-    [-fno-rtti -fno-exceptions], [],
-    [_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)="$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1) -fno-rtti -fno-exceptions"])
-fi
-_LT_TAGDECL([no_builtin_flag], [lt_prog_compiler_no_builtin_flag], [1],
-	[Compiler flag to turn off builtin functions])
-])# _LT_COMPILER_NO_RTTI
-
-
-# _LT_CMD_GLOBAL_SYMBOLS
-# ----------------------
-m4_defun([_LT_CMD_GLOBAL_SYMBOLS],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-AC_REQUIRE([AC_PROG_CC])dnl
-AC_REQUIRE([AC_PROG_AWK])dnl
-AC_REQUIRE([LT_PATH_NM])dnl
-AC_REQUIRE([LT_PATH_LD])dnl
-m4_require([_LT_DECL_SED])dnl
-m4_require([_LT_DECL_EGREP])dnl
-m4_require([_LT_TAG_COMPILER])dnl
-
-# Check for command to grab the raw symbol name followed by C symbol from nm.
-AC_MSG_CHECKING([command to parse $NM output from $compiler object])
-AC_CACHE_VAL([lt_cv_sys_global_symbol_pipe],
-[
-# These are sane defaults that work on at least a few old systems.
-# [They come from Ultrix.  What could be older than Ultrix?!! ;)]
-
-# Character class describing NM global symbol codes.
-symcode='[[BCDEGRST]]'
-
-# Regexp to match symbols that can be accessed directly from C.
-sympat='\([[_A-Za-z]][[_A-Za-z0-9]]*\)'
-
-# Define system-specific variables.
-case $host_os in
-aix*)
-  symcode='[[BCDT]]'
-  ;;
-cygwin* | mingw* | pw32* | cegcc*)
-  symcode='[[ABCDGISTW]]'
-  ;;
-hpux*)
-  if test ia64 = "$host_cpu"; then
-    symcode='[[ABCDEGRST]]'
-  fi
-  ;;
-irix* | nonstopux*)
-  symcode='[[BCDEGRST]]'
-  ;;
-osf*)
-  symcode='[[BCDEGQRST]]'
-  ;;
-solaris*)
-  symcode='[[BDRT]]'
-  ;;
-sco3.2v5*)
-  symcode='[[DT]]'
-  ;;
-sysv4.2uw2*)
-  symcode='[[DT]]'
-  ;;
-sysv5* | sco5v6* | unixware* | OpenUNIX*)
-  symcode='[[ABDT]]'
-  ;;
-sysv4)
-  symcode='[[DFNSTU]]'
-  ;;
-esac
-
-# If we're using GNU nm, then use its standard symbol codes.
-case `$NM -V 2>&1` in
-*GNU* | *'with BFD'*)
-  symcode='[[ABCDGIRSTW]]' ;;
-esac
-
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  # Gets list of data symbols to import.
-  lt_cv_sys_global_symbol_to_import="$SED -n -e 's/^I .* \(.*\)$/\1/p'"
-  # Adjust the below global symbol transforms to fixup imported variables.
-  lt_cdecl_hook=" -e 's/^I .* \(.*\)$/extern __declspec(dllimport) char \1;/p'"
-  lt_c_name_hook=" -e 's/^I .* \(.*\)$/  {\"\1\", (void *) 0},/p'"
-  lt_c_name_lib_hook="\
-  -e 's/^I .* \(lib.*\)$/  {\"\1\", (void *) 0},/p'\
-  -e 's/^I .* \(.*\)$/  {\"lib\1\", (void *) 0},/p'"
-else
-  # Disable hooks by default.
-  lt_cv_sys_global_symbol_to_import=
-  lt_cdecl_hook=
-  lt_c_name_hook=
-  lt_c_name_lib_hook=
-fi
-
-# Transform an extracted symbol line into a proper C declaration.
-# Some systems (esp. on ia64) link data and code symbols differently,
-# so use this general approach.
-lt_cv_sys_global_symbol_to_cdecl="$SED -n"\
-$lt_cdecl_hook\
-" -e 's/^T .* \(.*\)$/extern int \1();/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/extern char \1;/p'"
-
-# Transform an extracted symbol line into symbol name and symbol address
-lt_cv_sys_global_symbol_to_c_name_address="$SED -n"\
-$lt_c_name_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/p'"
-
-# Transform an extracted symbol line into symbol name with lib prefix and
-# symbol address.
-lt_cv_sys_global_symbol_to_c_name_address_lib_prefix="$SED -n"\
-$lt_c_name_lib_hook\
-" -e 's/^: \(.*\) .*$/  {\"\1\", (void *) 0},/p'"\
-" -e 's/^$symcode$symcode* .* \(lib.*\)$/  {\"\1\", (void *) \&\1},/p'"\
-" -e 's/^$symcode$symcode* .* \(.*\)$/  {\"lib\1\", (void *) \&\1},/p'"
-
-# Handle CRLF in mingw tool chain
-opt_cr=
-case $build_os in
-mingw*)
-  opt_cr=`$ECHO 'x\{0,1\}' | tr x '\015'` # option cr in regexp
-  ;;
-esac
-
-# Try without a prefix underscore, then with it.
-for ac_symprfx in "" "_"; do
-
-  # Transform symcode, sympat, and symprfx into a raw symbol and a C symbol.
-  symxfrm="\\1 $ac_symprfx\\2 \\2"
-
-  # Write the raw and C identifiers.
-  if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-    # Fake it for dumpbin and say T for any non-static function,
-    # D for any global variable and I for any imported variable.
-    # Also find C++ and __fastcall symbols from MSVC++ or ICC,
-    # which start with @ or ?.
-    lt_cv_sys_global_symbol_pipe="$AWK ['"\
-"     {last_section=section; section=\$ 3};"\
-"     /^COFF SYMBOL TABLE/{for(i in hide) delete hide[i]};"\
-"     /Section length .*#relocs.*(pick any)/{hide[last_section]=1};"\
-"     /^ *Symbol name *: /{split(\$ 0,sn,\":\"); si=substr(sn[2],2)};"\
-"     /^ *Type *: code/{print \"T\",si,substr(si,length(prfx))};"\
-"     /^ *Type *: data/{print \"I\",si,substr(si,length(prfx))};"\
-"     \$ 0!~/External *\|/{next};"\
-"     / 0+ UNDEF /{next}; / UNDEF \([^|]\)*()/{next};"\
-"     {if(hide[section]) next};"\
-"     {f=\"D\"}; \$ 0~/\(\).*\|/{f=\"T\"};"\
-"     {split(\$ 0,a,/\||\r/); split(a[2],s)};"\
-"     s[1]~/^[@?]/{print f,s[1],s[1]; next};"\
-"     s[1]~prfx {split(s[1],t,\"@\"); print f,t[1],substr(t[1],length(prfx))}"\
-"     ' prfx=^$ac_symprfx]"
-  else
-    lt_cv_sys_global_symbol_pipe="$SED -n -e 's/^.*[[	 ]]\($symcode$symcode*\)[[	 ]][[	 ]]*$ac_symprfx$sympat$opt_cr$/$symxfrm/p'"
-  fi
-  lt_cv_sys_global_symbol_pipe="$lt_cv_sys_global_symbol_pipe | $SED '/ __gnu_lto/d'"
-
-  # Check to see that the pipe works correctly.
-  pipe_works=no
-
-  rm -f conftest*
-  cat > conftest.$ac_ext <<_LT_EOF
-#ifdef __cplusplus
-extern "C" {
-#endif
-char nm_test_var;
-void nm_test_func(void);
-void nm_test_func(void){}
-#ifdef __cplusplus
-}
-#endif
-int main(){nm_test_var='a';nm_test_func();return(0);}
-_LT_EOF
-
-  if AC_TRY_EVAL(ac_compile); then
-    # Now try to grab the symbols.
-    nlist=conftest.nm
-    if AC_TRY_EVAL(NM conftest.$ac_objext \| "$lt_cv_sys_global_symbol_pipe" \> $nlist) && test -s "$nlist"; then
-      # Try sorting and uniquifying the output.
-      if sort "$nlist" | uniq > "$nlist"T; then
-	mv -f "$nlist"T "$nlist"
-      else
-	rm -f "$nlist"T
-      fi
-
-      # Make sure that we snagged all the symbols we need.
-      if $GREP ' nm_test_var$' "$nlist" >/dev/null; then
-	if $GREP ' nm_test_func$' "$nlist" >/dev/null; then
-	  cat <<_LT_EOF > conftest.$ac_ext
-/* Keep this code in sync between libtool.m4, ltmain, lt_system.h, and tests.  */
-#if defined _WIN32 || defined __CYGWIN__ || defined _WIN32_WCE
-/* DATA imports from DLLs on WIN32 can't be const, because runtime
-   relocations are performed -- see ld's documentation on pseudo-relocs.  */
-# define LT@&t@_DLSYM_CONST
-#elif defined __osf__
-/* This system does not cope well with relocations in const data.  */
-# define LT@&t@_DLSYM_CONST
-#else
-# define LT@&t@_DLSYM_CONST const
-#endif
-
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-_LT_EOF
-	  # Now generate the symbol file.
-	  eval "$lt_cv_sys_global_symbol_to_cdecl"' < "$nlist" | $GREP -v main >> conftest.$ac_ext'
-
-	  cat <<_LT_EOF >> conftest.$ac_ext
-
-/* The mapping between symbol names and symbols.  */
-LT@&t@_DLSYM_CONST struct {
-  const char *name;
-  void       *address;
-}
-lt__PROGRAM__LTX_preloaded_symbols[[]] =
-{
-  { "@PROGRAM@", (void *) 0 },
-_LT_EOF
-	  $SED "s/^$symcode$symcode* .* \(.*\)$/  {\"\1\", (void *) \&\1},/" < "$nlist" | $GREP -v main >> conftest.$ac_ext
-	  cat <<\_LT_EOF >> conftest.$ac_ext
-  {0, (void *) 0}
-};
-
-/* This works around a problem in FreeBSD linker */
-#ifdef FREEBSD_WORKAROUND
-static const void *lt_preloaded_setup() {
-  return lt__PROGRAM__LTX_preloaded_symbols;
-}
-#endif
-
-#ifdef __cplusplus
-}
-#endif
-_LT_EOF
-	  # Now try linking the two files.
-	  mv conftest.$ac_objext conftstm.$ac_objext
-	  lt_globsym_save_LIBS=$LIBS
-	  lt_globsym_save_CFLAGS=$CFLAGS
-	  LIBS=conftstm.$ac_objext
-	  CFLAGS="$CFLAGS$_LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)"
-	  if AC_TRY_EVAL(ac_link) && test -s conftest$ac_exeext; then
-	    pipe_works=yes
-	  fi
-	  LIBS=$lt_globsym_save_LIBS
-	  CFLAGS=$lt_globsym_save_CFLAGS
-	else
-	  echo "cannot find nm_test_func in $nlist" >&AS_MESSAGE_LOG_FD
-	fi
-      else
-	echo "cannot find nm_test_var in $nlist" >&AS_MESSAGE_LOG_FD
-      fi
-    else
-      echo "cannot run $lt_cv_sys_global_symbol_pipe" >&AS_MESSAGE_LOG_FD
-    fi
-  else
-    echo "$progname: failed program was:" >&AS_MESSAGE_LOG_FD
-    cat conftest.$ac_ext >&5
-  fi
-  rm -rf conftest* conftst*
-
-  # Do not use the global_symbol_pipe unless it works.
-  if test yes = "$pipe_works"; then
-    break
-  else
-    lt_cv_sys_global_symbol_pipe=
-  fi
-done
-])
-if test -z "$lt_cv_sys_global_symbol_pipe"; then
-  lt_cv_sys_global_symbol_to_cdecl=
-fi
-if test -z "$lt_cv_sys_global_symbol_pipe$lt_cv_sys_global_symbol_to_cdecl"; then
-  AC_MSG_RESULT(failed)
-else
-  AC_MSG_RESULT(ok)
-fi
-
-# Response file support.
-if test "$lt_cv_nm_interface" = "MS dumpbin"; then
-  nm_file_list_spec='@'
-elif $NM --help 2>/dev/null | grep '[[@]]FILE' >/dev/null; then
-  nm_file_list_spec='@'
-fi
-
-_LT_DECL([global_symbol_pipe], [lt_cv_sys_global_symbol_pipe], [1],
-    [Take the output of nm and produce a listing of raw symbols and C names])
-_LT_DECL([global_symbol_to_cdecl], [lt_cv_sys_global_symbol_to_cdecl], [1],
-    [Transform the output of nm in a proper C declaration])
-_LT_DECL([global_symbol_to_import], [lt_cv_sys_global_symbol_to_import], [1],
-    [Transform the output of nm into a list of symbols to manually relocate])
-_LT_DECL([global_symbol_to_c_name_address],
-    [lt_cv_sys_global_symbol_to_c_name_address], [1],
-    [Transform the output of nm in a C name address pair])
-_LT_DECL([global_symbol_to_c_name_address_lib_prefix],
-    [lt_cv_sys_global_symbol_to_c_name_address_lib_prefix], [1],
-    [Transform the output of nm in a C name address pair when lib prefix is needed])
-_LT_DECL([nm_interface], [lt_cv_nm_interface], [1],
-    [The name lister interface])
-_LT_DECL([], [nm_file_list_spec], [1],
-    [Specify filename containing input files for $NM])
-]) # _LT_CMD_GLOBAL_SYMBOLS
-
-
-# _LT_COMPILER_PIC([TAGNAME])
-# ---------------------------
-m4_defun([_LT_COMPILER_PIC],
-[m4_require([_LT_TAG_COMPILER])dnl
-_LT_TAGVAR(lt_prog_compiler_wl, $1)=
-_LT_TAGVAR(lt_prog_compiler_pic, $1)=
-_LT_TAGVAR(lt_prog_compiler_static, $1)=
-
-m4_if([$1], [CXX], [
-  # C++ specific cases for pic, static, wl, etc.
-  if test yes = "$GXX"; then
-    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-    _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-
-    case $host_os in
-    aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      fi
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            _LT_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-    mingw* | cygwin* | os2* | pw32* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      m4_if([$1], [GCJ], [],
-	[_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT'])
-      case $host_os in
-      os2*)
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static'
-	;;
-      esac
-      ;;
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common'
-      ;;
-    *djgpp*)
-      # DJGPP does not support shared libraries at all
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)=
-      ;;
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      _LT_TAGVAR(lt_prog_compiler_static, $1)=
-      ;;
-    interix[[3-9]]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic
-      fi
-      ;;
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	;;
-      *)
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	;;
-      esac
-      ;;
-    *qnx* | *nto*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared'
-      ;;
-    *)
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-      ;;
-    esac
-  else
-    case $host_os in
-      aix[[4-9]]*)
-	# All AIX code is PIC.
-	if test ia64 = "$host_cpu"; then
-	  # AIX 5 now supports IA64 processor
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	else
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp'
-	fi
-	;;
-      chorus*)
-	case $cc_basename in
-	cxch68*)
-	  # Green Hills C++ Compiler
-	  # _LT_TAGVAR(lt_prog_compiler_static, $1)="--no_auto_instantiation -u __main -u __premain -u _abort -r $COOL_DIR/lib/libOrb.a $MVME_DIR/lib/CC/libC.a $MVME_DIR/lib/classix/libcx.s.a"
-	  ;;
-	esac
-	;;
-      mingw* | cygwin* | os2* | pw32* | cegcc*)
-	# This hack is so that the source file can tell whether it is being
-	# built for inclusion in a dll (and should export symbols for example).
-	m4_if([$1], [GCJ], [],
-	  [_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT'])
-	;;
-      dgux*)
-	case $cc_basename in
-	  ec++*)
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	    ;;
-	  ghcx*)
-	    # Green Hills C++ Compiler
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      freebsd* | dragonfly* | midnightbsd*)
-	# FreeBSD uses GNU C++
-	;;
-      hpux9* | hpux10* | hpux11*)
-	case $cc_basename in
-	  CC*)
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive'
-	    if test ia64 != "$host_cpu"; then
-	      _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z'
-	    fi
-	    ;;
-	  aCC*)
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive'
-	    case $host_cpu in
-	    hppa*64*|ia64*)
-	      # +Z the default
-	      ;;
-	    *)
-	      _LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z'
-	      ;;
-	    esac
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      interix*)
-	# This is c89, which is MS Visual C++ (no shared libs)
-	# Anyone wants to do a port?
-	;;
-      irix5* | irix6* | nonstopux*)
-	case $cc_basename in
-	  CC*)
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-	    # CC pic flag -KPIC is the default.
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-	case $cc_basename in
-	  KCC*)
-	    # KAI C++ Compiler
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	    ;;
-	  ecpc* )
-	    # old Intel C++ for x86_64, which still supported -KPIC.
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-	    ;;
-	  icpc* )
-	    # Intel C++, used to be incompatible with GCC.
-	    # ICC 10 doesn't accept -KPIC any more.
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-	    ;;
-	  pgCC* | pgcpp*)
-	    # Portland Group C++ compiler
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	    ;;
-	  cxx*)
-	    # Compaq C++
-	    # Make sure the PIC flag is empty.  It appears that all Alpha
-	    # Linux and Compaq Tru64 Unix objects are PIC.
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)=
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-	    ;;
-	  xlc* | xlC* | bgxl[[cC]]* | mpixl[[cC]]*)
-	    # IBM XL 8.0, 9.0 on PPC and BlueGene
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-qpic'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-qstaticlink'
-	    ;;
-	  *)
-	    case `$CC -V 2>&1 | $SED 5q` in
-	    *Sun\ C*)
-	      # Sun C++ 5.9
-	      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld '
-	      ;;
-	    esac
-	    ;;
-	esac
-	;;
-      lynxos*)
-	;;
-      m88k*)
-	;;
-      mvs*)
-	case $cc_basename in
-	  cxx*)
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-W c,exportall'
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      netbsd*)
-	;;
-      *qnx* | *nto*)
-        # QNX uses GNU C++, but need to define -shared option too, otherwise
-        # it will coredump.
-        _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared'
-        ;;
-      osf3* | osf4* | osf5*)
-	case $cc_basename in
-	  KCC*)
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='--backend -Wl,'
-	    ;;
-	  RCC*)
-	    # Rational C++ 2.4.1
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
-	    ;;
-	  cxx*)
-	    # Digital/Compaq C++
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    # Make sure the PIC flag is empty.  It appears that all Alpha
-	    # Linux and Compaq Tru64 Unix objects are PIC.
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)=
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      psos*)
-	;;
-      solaris*)
-	case $cc_basename in
-	  CC* | sunCC*)
-	    # Sun C++ 4.2, 5.x and Centerline C++
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld '
-	    ;;
-	  gcx*)
-	    # Green Hills C++ Compiler
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC'
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      sunos4*)
-	case $cc_basename in
-	  CC*)
-	    # Sun C++ 4.x
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	    ;;
-	  lcc*)
-	    # Lucid
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-	case $cc_basename in
-	  CC*)
-	    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	    _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	    ;;
-	esac
-	;;
-      tandem*)
-	case $cc_basename in
-	  NCC*)
-	    # NonStop-UX NCC 3.20
-	    _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	    ;;
-	  *)
-	    ;;
-	esac
-	;;
-      vxworks*)
-	;;
-      *)
-	_LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no
-	;;
-    esac
-  fi
-],
-[
-  if test yes = "$GCC"; then
-    _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-    _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-
-    case $host_os in
-      aix*)
-      # All AIX code is PIC.
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      fi
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-        ;;
-      m68k)
-            # FIXME: we need at least 68020 code to build shared libraries, but
-            # adding the '-m68020' flag to GCC prevents building anything better,
-            # like '-m68040'.
-            _LT_TAGVAR(lt_prog_compiler_pic, $1)='-m68020 -resident32 -malways-restore-a4'
-        ;;
-      esac
-      ;;
-
-    beos* | irix5* | irix6* | nonstopux* | osf3* | osf4* | osf5*)
-      # PIC is the default for these OSes.
-      ;;
-
-    mingw* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      # Although the cygwin gcc ignores -fPIC, still need this for old-style
-      # (--disable-auto-import) libraries
-      m4_if([$1], [GCJ], [],
-	[_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT'])
-      case $host_os in
-      os2*)
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static'
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common'
-      ;;
-
-    haiku*)
-      # PIC is the default for Haiku.
-      # The "-static" flag exists, but is broken.
-      _LT_TAGVAR(lt_prog_compiler_static, $1)=
-      ;;
-
-    hpux*)
-      # PIC is the default for 64-bit PA HP-UX, but not for 32-bit
-      # PA HP-UX.  On IA64 HP-UX, PIC is the default but the pic flag
-      # sets the default TLS model and affects inlining.
-      case $host_cpu in
-      hppa*64*)
-	# +Z the default
-	;;
-      *)
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	;;
-      esac
-      ;;
-
-    interix[[3-9]]*)
-      # Interix 3.x gcc -fpic/-fPIC options generate broken code.
-      # Instead, we relocate shared libraries at runtime.
-      ;;
-
-    msdosdjgpp*)
-      # Just because we use GCC doesn't mean we suddenly get shared libraries
-      # on systems that don't support them.
-      _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no
-      enable_shared=no
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)=-Kconform_pic
-      fi
-      ;;
-
-    *)
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-      ;;
-    esac
-
-    case $cc_basename in
-    nvcc*) # Cuda Compiler Driver 2.2
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Xlinker '
-      if test -n "$_LT_TAGVAR(lt_prog_compiler_pic, $1)"; then
-        _LT_TAGVAR(lt_prog_compiler_pic, $1)="-Xcompiler $_LT_TAGVAR(lt_prog_compiler_pic, $1)"
-      fi
-      ;;
-    esac
-  else
-    # PORTME Check for flag to pass linker flags through the system compiler.
-    case $host_os in
-    aix*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      if test ia64 = "$host_cpu"; then
-	# AIX 5 now supports IA64 processor
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      else
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-bnso -bI:/lib/syscalls.exp'
-      fi
-      ;;
-
-    darwin* | rhapsody*)
-      # PIC is the default on this platform
-      # Common symbols not allowed in MH_DYLIB files
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fno-common'
-      case $cc_basename in
-      nagfor*)
-        # NAG Fortran compiler
-        _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,-Wl,,'
-        _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC'
-        _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-        ;;
-      esac
-      ;;
-
-    mingw* | cygwin* | pw32* | os2* | cegcc*)
-      # This hack is so that the source file can tell whether it is being
-      # built for inclusion in a dll (and should export symbols for example).
-      m4_if([$1], [GCJ], [],
-	[_LT_TAGVAR(lt_prog_compiler_pic, $1)='-DDLL_EXPORT'])
-      case $host_os in
-      os2*)
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-static'
-	;;
-      esac
-      ;;
-
-    hpux9* | hpux10* | hpux11*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      # PIC is the default for IA64 HP-UX and 64-bit HP-UX, but
-      # not for PA HP-UX.
-      case $host_cpu in
-      hppa*64*|ia64*)
-	# +Z the default
-	;;
-      *)
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='+Z'
-	;;
-      esac
-      # Is there a better lt_prog_compiler_static that works with the bundled CC?
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='$wl-a ${wl}archive'
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      # PIC (with -KPIC) is the default.
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-      ;;
-
-    linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-      case $cc_basename in
-      # old Intel for x86_64, which still supported -KPIC.
-      ecc*)
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-        ;;
-      # icc used to be incompatible with GCC.
-      # ICC 10 doesn't accept -KPIC any more.
-      icc* | ifort*)
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-        ;;
-      # Lahey Fortran 8.1.
-      lf95*)
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='--shared'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='--static'
-	;;
-      nagfor*)
-	# NAG Fortran compiler
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,-Wl,,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	;;
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-	;;
-      pgcc* | pgf77* | pgf90* | pgf95* | pgfortran*)
-        # Portland Group compilers (*not* the Pentium gcc compiler,
-	# which looks to be a dead project)
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-        ;;
-      ccc*)
-        _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-        # All Alpha code is PIC.
-        _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-        ;;
-      xl* | bgxl* | bgf* | mpixl*)
-	# IBM XL C 8.0/Fortran 10.1, 11.1 on PPC and BlueGene
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-qpic'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-qstaticlink'
-	;;
-      *)
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ Ceres\ Fortran* | *Sun*Fortran*\ [[1-7]].* | *Sun*Fortran*\ 8.[[0-3]]*)
-	  # Sun Fortran 8.3 passes all unrecognized flags to the linker
-	  _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	  _LT_TAGVAR(lt_prog_compiler_wl, $1)=''
-	  ;;
-	*Sun\ F* | *Sun*Fortran*)
-	  _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	  _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld '
-	  ;;
-	*Sun\ C*)
-	  # Sun C 5.9
-	  _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	  _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	  ;;
-        *Intel*\ [[CF]]*Compiler*)
-	  _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	  _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC'
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-static'
-	  ;;
-	*Portland\ Group*)
-	  _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-	  _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fpic'
-	  _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-	  ;;
-	esac
-	;;
-      esac
-      ;;
-
-    newsos6)
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      ;;
-
-    *nto* | *qnx*)
-      # QNX uses GNU C++, but need to define -shared option too, otherwise
-      # it will coredump.
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-fPIC -shared'
-      ;;
-
-    osf3* | osf4* | osf5*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      # All OSF/1 code is PIC.
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-      ;;
-
-    rdos*)
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-non_shared'
-      ;;
-
-    solaris*)
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      case $cc_basename in
-      f77* | f90* | f95* | sunf77* | sunf90* | sunf95*)
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld ';;
-      *)
-	_LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,';;
-      esac
-      ;;
-
-    sunos4*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Qoption ld '
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-PIC'
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      ;;
-
-    sysv4 | sysv4.2uw2* | sysv4.3*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	_LT_TAGVAR(lt_prog_compiler_pic, $1)='-Kconform_pic'
-	_LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      fi
-      ;;
-
-    sysv5* | unixware* | sco3.2v5* | sco5v6* | OpenUNIX*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-KPIC'
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      ;;
-
-    unicos*)
-      _LT_TAGVAR(lt_prog_compiler_wl, $1)='-Wl,'
-      _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no
-      ;;
-
-    uts4*)
-      _LT_TAGVAR(lt_prog_compiler_pic, $1)='-pic'
-      _LT_TAGVAR(lt_prog_compiler_static, $1)='-Bstatic'
-      ;;
-
-    *)
-      _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no
-      ;;
-    esac
-  fi
-])
-case $host_os in
-  # For platforms that do not support PIC, -DPIC is meaningless:
-  *djgpp*)
-    _LT_TAGVAR(lt_prog_compiler_pic, $1)=
-    ;;
-  *)
-    _LT_TAGVAR(lt_prog_compiler_pic, $1)="$_LT_TAGVAR(lt_prog_compiler_pic, $1)@&t@m4_if([$1],[],[ -DPIC],[m4_if([$1],[CXX],[ -DPIC],[])])"
-    ;;
-esac
-
-AC_CACHE_CHECK([for $compiler option to produce PIC],
-  [_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)],
-  [_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)=$_LT_TAGVAR(lt_prog_compiler_pic, $1)])
-_LT_TAGVAR(lt_prog_compiler_pic, $1)=$_LT_TAGVAR(lt_cv_prog_compiler_pic, $1)
-
-#
-# Check to make sure the PIC flag actually works.
-#
-if test -n "$_LT_TAGVAR(lt_prog_compiler_pic, $1)"; then
-  _LT_COMPILER_OPTION([if $compiler PIC flag $_LT_TAGVAR(lt_prog_compiler_pic, $1) works],
-    [_LT_TAGVAR(lt_cv_prog_compiler_pic_works, $1)],
-    [$_LT_TAGVAR(lt_prog_compiler_pic, $1)@&t@m4_if([$1],[],[ -DPIC],[m4_if([$1],[CXX],[ -DPIC],[])])], [],
-    [case $_LT_TAGVAR(lt_prog_compiler_pic, $1) in
-     "" | " "*) ;;
-     *) _LT_TAGVAR(lt_prog_compiler_pic, $1)=" $_LT_TAGVAR(lt_prog_compiler_pic, $1)" ;;
-     esac],
-    [_LT_TAGVAR(lt_prog_compiler_pic, $1)=
-     _LT_TAGVAR(lt_prog_compiler_can_build_shared, $1)=no])
-fi
-_LT_TAGDECL([pic_flag], [lt_prog_compiler_pic], [1],
-	[Additional compiler flags for building library objects])
-
-_LT_TAGDECL([wl], [lt_prog_compiler_wl], [1],
-	[How to pass a linker flag through the compiler])
-#
-# Check to make sure the static flag actually works.
-#
-wl=$_LT_TAGVAR(lt_prog_compiler_wl, $1) eval lt_tmp_static_flag=\"$_LT_TAGVAR(lt_prog_compiler_static, $1)\"
-_LT_LINKER_OPTION([if $compiler static flag $lt_tmp_static_flag works],
-  _LT_TAGVAR(lt_cv_prog_compiler_static_works, $1),
-  $lt_tmp_static_flag,
-  [],
-  [_LT_TAGVAR(lt_prog_compiler_static, $1)=])
-_LT_TAGDECL([link_static_flag], [lt_prog_compiler_static], [1],
-	[Compiler flag to prevent dynamic linking])
-])# _LT_COMPILER_PIC
-
-
-# _LT_LINKER_SHLIBS([TAGNAME])
-# ----------------------------
-# See if the linker supports building shared libraries.
-m4_defun([_LT_LINKER_SHLIBS],
-[AC_REQUIRE([LT_PATH_LD])dnl
-AC_REQUIRE([LT_PATH_NM])dnl
-m4_require([_LT_PATH_MANIFEST_TOOL])dnl
-m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_EGREP])dnl
-m4_require([_LT_DECL_SED])dnl
-m4_require([_LT_CMD_GLOBAL_SYMBOLS])dnl
-m4_require([_LT_TAG_COMPILER])dnl
-AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries])
-m4_if([$1], [CXX], [
-  _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
-  _LT_TAGVAR(exclude_expsyms, $1)=['_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*']
-  case $host_os in
-  aix[[4-9]]*)
-    # If we're using GNU nm, then we don't want the "-C" option.
-    # -C means demangle to GNU nm, but means don't demangle to AIX nm.
-    # Without the "-l" option, or with the "-B" option, AIX nm treats
-    # weak defined symbols like other global defined symbols, whereas
-    # GNU nm marks them as "W".
-    # While the 'weak' keyword is ignored in the Export File, we need
-    # it in the Import File for the 'aix-soname' feature, so we have
-    # to replace the "-B" option with "-P" for AIX nm.
-    if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then
-      _LT_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && ([substr](\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols'
-    else
-      _LT_TAGVAR(export_symbols_cmds, $1)='`func_echo_all $NM | $SED -e '\''s/B\([[^B]]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && ([substr](\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols'
-    fi
-    ;;
-  pw32*)
-    _LT_TAGVAR(export_symbols_cmds, $1)=$ltdll_cmds
-    ;;
-  cygwin* | mingw* | cegcc*)
-    case $cc_basename in
-    cl* | icl*)
-      _LT_TAGVAR(exclude_expsyms, $1)='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*'
-      ;;
-    *)
-      _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1 DATA/;s/^.*[[ ]]__nm__\([[^ ]]*\)[[ ]][[^ ]]*/\1 DATA/;/^I[[ ]]/d;/^[[AITW]][[ ]]/s/.* //'\'' | sort | uniq > $export_symbols'
-      _LT_TAGVAR(exclude_expsyms, $1)=['[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname']
-      ;;
-    esac
-    ;;
-  *)
-    _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
-    ;;
-  esac
-], [
-  runpath_var=
-  _LT_TAGVAR(allow_undefined_flag, $1)=
-  _LT_TAGVAR(always_export_symbols, $1)=no
-  _LT_TAGVAR(archive_cmds, $1)=
-  _LT_TAGVAR(archive_expsym_cmds, $1)=
-  _LT_TAGVAR(compiler_needs_object, $1)=no
-  _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no
-  _LT_TAGVAR(export_dynamic_flag_spec, $1)=
-  _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED '\''s/.* //'\'' | sort | uniq > $export_symbols'
-  _LT_TAGVAR(hardcode_automatic, $1)=no
-  _LT_TAGVAR(hardcode_direct, $1)=no
-  _LT_TAGVAR(hardcode_direct_absolute, $1)=no
-  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
-  _LT_TAGVAR(hardcode_libdir_separator, $1)=
-  _LT_TAGVAR(hardcode_minus_L, $1)=no
-  _LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported
-  _LT_TAGVAR(inherit_rpath, $1)=no
-  _LT_TAGVAR(link_all_deplibs, $1)=unknown
-  _LT_TAGVAR(module_cmds, $1)=
-  _LT_TAGVAR(module_expsym_cmds, $1)=
-  _LT_TAGVAR(old_archive_from_new_cmds, $1)=
-  _LT_TAGVAR(old_archive_from_expsyms_cmds, $1)=
-  _LT_TAGVAR(thread_safe_flag_spec, $1)=
-  _LT_TAGVAR(whole_archive_flag_spec, $1)=
-  # include_expsyms should be a list of space-separated symbols to be *always*
-  # included in the symbol list
-  _LT_TAGVAR(include_expsyms, $1)=
-  # exclude_expsyms can be an extended regexp of symbols to exclude
-  # it will be wrapped by ' (' and ')$', so one must not match beginning or
-  # end of line.  Example: 'a|bc|.*d.*' will exclude the symbols 'a' and 'bc',
-  # as well as any symbol that contains 'd'.
-  _LT_TAGVAR(exclude_expsyms, $1)=['_GLOBAL_OFFSET_TABLE_|_GLOBAL__F[ID]_.*']
-  # Although _GLOBAL_OFFSET_TABLE_ is a valid symbol C name, most a.out
-  # platforms (ab)use it in PIC code, but their linkers get confused if
-  # the symbol is explicitly referenced.  Since portable code cannot
-  # rely on this symbol name, it's probably fine to never include it in
-  # preloaded symbol tables.
-  # Exclude shared library initialization/finalization symbols.
-dnl Note also adjust exclude_expsyms for C++ above.
-  extract_expsyms_cmds=
-
-  case $host_os in
-  cygwin* | mingw* | pw32* | cegcc*)
-    # FIXME: the MSVC++ and ICC port hasn't been tested in a loooong time
-    # When not using gcc, we currently assume that we are using
-    # Microsoft Visual C++ or Intel C++ Compiler.
-    if test yes != "$GCC"; then
-      with_gnu_ld=no
-    fi
-    ;;
-  interix*)
-    # we just hope/assume this is gcc and not c89 (= MSVC++ or ICC)
-    with_gnu_ld=yes
-    ;;
-  openbsd* | bitrig*)
-    with_gnu_ld=no
-    ;;
-  esac
-
-  _LT_TAGVAR(ld_shlibs, $1)=yes
-
-  # On some targets, GNU ld is compatible enough with the native linker
-  # that we're better off using the native interface for both.
-  lt_use_gnu_ld_interface=no
-  if test yes = "$with_gnu_ld"; then
-    case $host_os in
-      aix*)
-	# The AIX port of GNU ld has always aspired to compatibility
-	# with the native linker.  However, as the warning in the GNU ld
-	# block says, versions before 2.19.5* couldn't really create working
-	# shared libraries, regardless of the interface used.
-	case `$LD -v 2>&1` in
-	  *\ \(GNU\ Binutils\)\ 2.19.5*) ;;
-	  *\ \(GNU\ Binutils\)\ 2.[[2-9]]*) ;;
-	  *\ \(GNU\ Binutils\)\ [[3-9]]*) ;;
-	  *)
-	    lt_use_gnu_ld_interface=yes
-	    ;;
-	esac
-	;;
-      *)
-	lt_use_gnu_ld_interface=yes
-	;;
-    esac
-  fi
-
-  if test yes = "$lt_use_gnu_ld_interface"; then
-    # If archive_cmds runs LD, not CC, wlarc should be empty
-    wlarc='$wl'
-
-    # Set some defaults for GNU ld with shared library support. These
-    # are reset later if shared libraries are not supported. Putting them
-    # here allows them to be overridden if necessary.
-    runpath_var=LD_RUN_PATH
-    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-    _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
-    # ancient GNU ld didn't support --whole-archive et. al.
-    if $LD --help 2>&1 | $GREP 'no-whole-archive' > /dev/null; then
-      _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
-    else
-      _LT_TAGVAR(whole_archive_flag_spec, $1)=
-    fi
-    supports_anon_versioning=no
-    case `$LD -v | $SED -e 's/([[^)]]\+)\s\+//' 2>&1` in
-      *GNU\ gold*) supports_anon_versioning=yes ;;
-      *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.10.*) ;; # catch versions < 2.11
-      *\ 2.11.93.0.2\ *) supports_anon_versioning=yes ;; # RH7.3 ...
-      *\ 2.11.92.0.12\ *) supports_anon_versioning=yes ;; # Mandrake 8.2 ...
-      *\ 2.11.*) ;; # other 2.11 versions
-      *) supports_anon_versioning=yes ;;
-    esac
-
-    # See if GNU ld supports shared libraries.
-    case $host_os in
-    aix[[3-9]]*)
-      # On AIX/PPC, the GNU linker is very broken
-      if test ia64 != "$host_cpu"; then
-	_LT_TAGVAR(ld_shlibs, $1)=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: the GNU linker, at least up to release 2.19, is reported
-*** to be unable to reliably create shared libraries on AIX.
-*** Therefore, libtool is disabling shared libraries support.  If you
-*** really care for shared libraries, you may want to install binutils
-*** 2.20 or above, or modify your PATH so that a non-GNU linker is found.
-*** You will then need to restart the configuration process.
-
-_LT_EOF
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            _LT_TAGVAR(archive_expsym_cmds, $1)=''
-        ;;
-      m68k)
-            _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-            _LT_TAGVAR(hardcode_minus_L, $1)=yes
-        ;;
-      esac
-      ;;
-
-    beos*)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	_LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	# Joseph Beckenbach <jrb3@best.com> says some releases of gcc
-	# support --undefined.  This deserves some investigation.  FIXME
-	_LT_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      else
-	_LT_TAGVAR(ld_shlibs, $1)=no
-      fi
-      ;;
-
-    cygwin* | mingw* | pw32* | cegcc*)
-      # _LT_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless,
-      # as there is no search path for DLLs.
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-all-symbols'
-      _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-      _LT_TAGVAR(always_export_symbols, $1)=no
-      _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-      _LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1 DATA/;s/^.*[[ ]]__nm__\([[^ ]]*\)[[ ]][[^ ]]*/\1 DATA/;/^I[[ ]]/d;/^[[AITW]][[ ]]/s/.* //'\'' | sort | uniq > $export_symbols'
-      _LT_TAGVAR(exclude_expsyms, $1)=['[_]+GLOBAL_OFFSET_TABLE_|[_]+GLOBAL__[FID]_.*|[_]+head_[A-Za-z0-9_]+_dll|[A-Za-z0-9_]+_dll_iname']
-
-      if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then
-        _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-	# If the export-symbols file already is a .def file, use it as
-	# is; otherwise, prepend EXPORTS...
-	_LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then
-          cp $export_symbols $output_objdir/$soname.def;
-        else
-          echo EXPORTS > $output_objdir/$soname.def;
-          cat $export_symbols >> $output_objdir/$soname.def;
-        fi~
-        $CC -shared $output_objdir/$soname.def $libobjs $deplibs $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-      else
-	_LT_TAGVAR(ld_shlibs, $1)=no
-      fi
-      ;;
-
-    haiku*)
-      _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-      _LT_TAGVAR(link_all_deplibs, $1)=yes
-      ;;
-
-    os2*)
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-      _LT_TAGVAR(hardcode_minus_L, $1)=yes
-      _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-      shrext_cmds=.dll
-      _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-      _LT_TAGVAR(file_list_spec, $1)='@'
-      ;;
-
-    interix[[3-9]]*)
-      _LT_TAGVAR(hardcode_direct, $1)=no
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-      # Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc.
-      # Instead, shared libraries are loaded at an image base (0x10000000 by
-      # default) and relocated if they conflict, which is a slow very memory
-      # consuming and fragmenting process.  To avoid this, we pick a random,
-      # 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link
-      # time.  Moving up from 0x10000000 also allows more sbrk(2) space.
-      _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      _LT_TAGVAR(archive_expsym_cmds, $1)='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-      ;;
-
-    gnu* | linux* | tpf* | k*bsd*-gnu | kopensolaris*-gnu)
-      tmp_diet=no
-      if test linux-dietlibc = "$host_os"; then
-	case $cc_basename in
-	  diet\ *) tmp_diet=yes;;	# linux-dietlibc with static linking (!diet-dyn)
-	esac
-      fi
-      if $LD --help 2>&1 | $EGREP ': supported targets:.* elf' > /dev/null \
-	 && test no = "$tmp_diet"
-      then
-	tmp_addflag=' $pic_flag'
-	tmp_sharedflag='-shared'
-	case $cc_basename,$host_cpu in
-        pgcc*)				# Portland Group C compiler
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag'
-	  ;;
-	pgf77* | pgf90* | pgf95* | pgfortran*)
-					# Portland Group f77 and f90 compilers
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  tmp_addflag=' $pic_flag -Mnomain' ;;
-	ecc*,ia64* | icc*,ia64*)	# Intel C compiler on ia64
-	  tmp_addflag=' -i_dynamic' ;;
-	efc*,ia64* | ifort*,ia64*)	# Intel Fortran compiler on ia64
-	  tmp_addflag=' -i_dynamic -nofor_main' ;;
-	ifc* | ifort*)			# Intel Fortran compiler
-	  tmp_addflag=' -nofor_main' ;;
-	lf95*)				# Lahey Fortran 8.1
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)=
-	  tmp_sharedflag='--shared' ;;
-        nagfor*)                        # NAGFOR 5.3
-          tmp_sharedflag='-Wl,-shared' ;;
-	xl[[cC]]* | bgxl[[cC]]* | mpixl[[cC]]*) # IBM XL C 8.0 on PPC (deal with xlf below)
-	  tmp_sharedflag='-qmkshrobj'
-	  tmp_addflag= ;;
-	nvcc*)	# Cuda Compiler Driver 2.2
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  _LT_TAGVAR(compiler_needs_object, $1)=yes
-	  ;;
-	esac
-	case `$CC -V 2>&1 | $SED 5q` in
-	*Sun\ C*)			# Sun C 5.9
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	  _LT_TAGVAR(compiler_needs_object, $1)=yes
-	  tmp_sharedflag='-G' ;;
-	*Sun\ F*)			# Sun Fortran 8.3
-	  tmp_sharedflag='-G' ;;
-	esac
-	_LT_TAGVAR(archive_cmds, $1)='$CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-
-        if test yes = "$supports_anon_versioning"; then
-          _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~
-            cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-            echo "local: *; };" >> $output_objdir/$libname.ver~
-            $CC '"$tmp_sharedflag""$tmp_addflag"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib'
-        fi
-
-	case $cc_basename in
-	tcc*)
-	  _LT_TAGVAR(export_dynamic_flag_spec, $1)='-rdynamic'
-	  ;;
-	xlf* | bgf* | bgxlf* | mpixlf*)
-	  # IBM XL Fortran 10.1 on PPC cannot create shared libs itself
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='--whole-archive$convenience --no-whole-archive'
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-	  _LT_TAGVAR(archive_cmds, $1)='$LD -shared $libobjs $deplibs $linker_flags -soname $soname -o $lib'
-	  if test yes = "$supports_anon_versioning"; then
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~
-              cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-              echo "local: *; };" >> $output_objdir/$libname.ver~
-              $LD -shared $libobjs $deplibs $linker_flags -soname $soname -version-script $output_objdir/$libname.ver -o $lib'
-	  fi
-	  ;;
-	esac
-      else
-        _LT_TAGVAR(ld_shlibs, $1)=no
-      fi
-      ;;
-
-    netbsd*)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	_LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable $libobjs $deplibs $linker_flags -o $lib'
-	wlarc=
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      fi
-      ;;
-
-    solaris*)
-      if $LD -v 2>&1 | $GREP 'BFD 2\.8' > /dev/null; then
-	_LT_TAGVAR(ld_shlibs, $1)=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: The releases 2.8.* of the GNU linker cannot reliably
-*** create shared libraries on Solaris systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.9.1 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-      elif $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	_LT_TAGVAR(ld_shlibs, $1)=no
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6* | unixware* | OpenUNIX*)
-      case `$LD -v 2>&1` in
-        *\ [[01]].* | *\ 2.[[0-9]].* | *\ 2.1[[0-5]].*)
-	_LT_TAGVAR(ld_shlibs, $1)=no
-	cat <<_LT_EOF 1>&2
-
-*** Warning: Releases of the GNU linker prior to 2.16.91.0.3 cannot
-*** reliably create shared libraries on SCO systems.  Therefore, libtool
-*** is disabling shared libraries support.  We urge you to upgrade GNU
-*** binutils to release 2.16.91.0.3 or newer.  Another option is to modify
-*** your PATH or compiler configuration so that the native linker is
-*** used, and then restart.
-
-_LT_EOF
-	;;
-	*)
-	  # For security reasons, it is highly recommended that you always
-	  # use absolute paths for naming shared libraries, and exclude the
-	  # DT_RUNPATH tag from executables and libraries.  But doing so
-	  # requires that you compile everything twice, which is a pain.
-	  if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-	  else
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	  fi
-	;;
-      esac
-      ;;
-
-    sunos4*)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      wlarc=
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    *)
-      if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-      else
-	_LT_TAGVAR(ld_shlibs, $1)=no
-      fi
-      ;;
-    esac
-
-    if test no = "$_LT_TAGVAR(ld_shlibs, $1)"; then
-      runpath_var=
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)=
-      _LT_TAGVAR(whole_archive_flag_spec, $1)=
-    fi
-  else
-    # PORTME fill in a description of your system's linker (not GNU ld)
-    case $host_os in
-    aix3*)
-      _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-      _LT_TAGVAR(always_export_symbols, $1)=yes
-      _LT_TAGVAR(archive_expsym_cmds, $1)='$LD -o $output_objdir/$soname $libobjs $deplibs $linker_flags -bE:$export_symbols -T512 -H512 -bM:SRE~$AR $AR_FLAGS $lib $output_objdir/$soname'
-      # Note: this linker hardcodes the directories in LIBPATH if there
-      # are no directories specified by -L.
-      _LT_TAGVAR(hardcode_minus_L, $1)=yes
-      if test yes = "$GCC" && test -z "$lt_prog_compiler_static"; then
-	# Neither direct hardcoding nor static linking is supported with a
-	# broken collect2.
-	_LT_TAGVAR(hardcode_direct, $1)=unsupported
-      fi
-      ;;
-
-    aix[[4-9]]*)
-      if test ia64 = "$host_cpu"; then
-	# On IA64, the linker does run time linking by default, so we don't
-	# have to do anything special.
-	aix_use_runtimelinking=no
-	exp_sym_flag='-Bexport'
-	no_entry_flag=
-      else
-	# If we're using GNU nm, then we don't want the "-C" option.
-	# -C means demangle to GNU nm, but means don't demangle to AIX nm.
-	# Without the "-l" option, or with the "-B" option, AIX nm treats
-	# weak defined symbols like other global defined symbols, whereas
-	# GNU nm marks them as "W".
-	# While the 'weak' keyword is ignored in the Export File, we need
-	# it in the Import File for the 'aix-soname' feature, so we have
-	# to replace the "-B" option with "-P" for AIX nm.
-	if $NM -V 2>&1 | $GREP 'GNU' > /dev/null; then
-	  _LT_TAGVAR(export_symbols_cmds, $1)='$NM -Bpg $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "W")) && ([substr](\$ 3,1,1) != ".")) { if (\$ 2 == "W") { print \$ 3 " weak" } else { print \$ 3 } } }'\'' | sort -u > $export_symbols'
-	else
-	  _LT_TAGVAR(export_symbols_cmds, $1)='`func_echo_all $NM | $SED -e '\''s/B\([[^B]]*\)$/P\1/'\''` -PCpgl $libobjs $convenience | awk '\''{ if (((\$ 2 == "T") || (\$ 2 == "D") || (\$ 2 == "B") || (\$ 2 == "L") || (\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) && ([substr](\$ 1,1,1) != ".")) { if ((\$ 2 == "W") || (\$ 2 == "V") || (\$ 2 == "Z")) { print \$ 1 " weak" } else { print \$ 1 } } }'\'' | sort -u > $export_symbols'
-	fi
-	aix_use_runtimelinking=no
-
-	# Test if we are trying to use run time linking or normal
-	# AIX style linking. If -brtl is somewhere in LDFLAGS, we
-	# have runtime linking enabled, and use it for executables.
-	# For shared libraries, we enable/disable runtime linking
-	# depending on the kind of the shared library created -
-	# when "with_aix_soname,aix_use_runtimelinking" is:
-	# "aix,no"   lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "aix,yes"  lib.so          shared, rtl:yes, for executables
-	#            lib.a           static archive
-	# "both,no"  lib.so.V(shr.o) shared, rtl:yes
-	#            lib.a(lib.so.V) shared, rtl:no,  for executables
-	# "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a(lib.so.V) shared, rtl:no
-	# "svr4,*"   lib.so.V(shr.o) shared, rtl:yes, for executables
-	#            lib.a           static archive
-	case $host_os in aix4.[[23]]|aix4.[[23]].*|aix[[5-9]]*)
-	  for ld_flag in $LDFLAGS; do
-	  if (test x-brtl = "x$ld_flag" || test x-Wl,-brtl = "x$ld_flag"); then
-	    aix_use_runtimelinking=yes
-	    break
-	  fi
-	  done
-	  if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then
-	    # With aix-soname=svr4, we create the lib.so.V shared archives only,
-	    # so we don't have lib.a shared libs to link our executables.
-	    # We have to force runtime linking in this case.
-	    aix_use_runtimelinking=yes
-	    LDFLAGS="$LDFLAGS -Wl,-brtl"
-	  fi
-	  ;;
-	esac
-
-	exp_sym_flag='-bexport'
-	no_entry_flag='-bnoentry'
-      fi
-
-      # When large executables or shared objects are built, AIX ld can
-      # have problems creating the table of contents.  If linking a library
-      # or program results in "error TOC overflow" add -mminimal-toc to
-      # CXXFLAGS/CFLAGS for g++/gcc.  In the cases where that is not
-      # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS.
-
-      _LT_TAGVAR(archive_cmds, $1)=''
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=':'
-      _LT_TAGVAR(link_all_deplibs, $1)=yes
-      _LT_TAGVAR(file_list_spec, $1)='$wl-f,'
-      case $with_aix_soname,$aix_use_runtimelinking in
-      aix,*) ;; # traditional, no import file
-      svr4,* | *,yes) # use import file
-	# The Import File defines what to hardcode.
-	_LT_TAGVAR(hardcode_direct, $1)=no
-	_LT_TAGVAR(hardcode_direct_absolute, $1)=no
-	;;
-      esac
-
-      if test yes = "$GCC"; then
-	case $host_os in aix4.[[012]]|aix4.[[012]].*)
-	# We only want to do this on AIX 4.2 and lower, the check
-	# below for broken collect2 doesn't work under 4.3+
-	  collect2name=`$CC -print-prog-name=collect2`
-	  if test -f "$collect2name" &&
-	   strings "$collect2name" | $GREP resolve_lib_name >/dev/null
-	  then
-	  # We have reworked collect2
-	  :
-	  else
-	  # We have old collect2
-	  _LT_TAGVAR(hardcode_direct, $1)=unsupported
-	  # It fails to find uninstalled libraries when the uninstalled
-	  # path is not listed in the libpath.  Setting hardcode_minus_L
-	  # to unsupported forces relinking
-	  _LT_TAGVAR(hardcode_minus_L, $1)=yes
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-	  _LT_TAGVAR(hardcode_libdir_separator, $1)=
-	  fi
-	  ;;
-	esac
-	shared_flag='-shared'
-	if test yes = "$aix_use_runtimelinking"; then
-	  shared_flag="$shared_flag "'$wl-G'
-	fi
-	# Need to ensure runtime linking is disabled for the traditional
-	# shared library, or the linker may eventually find shared libraries
-	# /with/ Import File - we do not want to mix them.
-	shared_flag_aix='-shared'
-	shared_flag_svr4='-shared $wl-G'
-      else
-	# not using gcc
-	if test ia64 = "$host_cpu"; then
-	# VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release
-	# chokes on -Wl,-G. The following line is correct:
-	  shared_flag='-G'
-	else
-	  if test yes = "$aix_use_runtimelinking"; then
-	    shared_flag='$wl-G'
-	  else
-	    shared_flag='$wl-bM:SRE'
-	  fi
-	  shared_flag_aix='$wl-bM:SRE'
-	  shared_flag_svr4='$wl-G'
-	fi
-      fi
-
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-bexpall'
-      # It seems that -bexpall does not export symbols beginning with
-      # underscore (_), so it is better to generate a list of symbols to export.
-      _LT_TAGVAR(always_export_symbols, $1)=yes
-      if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then
-	# Warning - without using the other runtime loading flags (-brtl),
-	# -berok will link without error, but may produce a broken library.
-	_LT_TAGVAR(allow_undefined_flag, $1)='-berok'
-        # Determine the default libpath from the value encoded in an
-        # empty executable.
-        _LT_SYS_MODULE_PATH_AIX([$1])
-        _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath"
-        _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag
-      else
-	if test ia64 = "$host_cpu"; then
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $libdir:/usr/lib:/lib'
-	  _LT_TAGVAR(allow_undefined_flag, $1)="-z nodefs"
-	  _LT_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols"
-	else
-	 # Determine the default libpath from the value encoded in an
-	 # empty executable.
-	 _LT_SYS_MODULE_PATH_AIX([$1])
-	 _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath"
-	  # Warning - without using the other run time loading flags,
-	  # -berok will link without error, but may produce a broken library.
-	  _LT_TAGVAR(no_undefined_flag, $1)=' $wl-bernotok'
-	  _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-berok'
-	  if test yes = "$with_gnu_ld"; then
-	    # We only use this code for GNU lds that support --whole-archive.
-	    _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive'
-	  else
-	    # Exported symbols can be pulled into shared objects from archives
-	    _LT_TAGVAR(whole_archive_flag_spec, $1)='$convenience'
-	  fi
-	  _LT_TAGVAR(archive_cmds_need_lc, $1)=yes
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d'
-	  # -brtl affects multiple linker settings, -berok does not and is overridden later
-	  compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([[, ]]\\)%-berok\\1%g"`'
-	  if test svr4 != "$with_aix_soname"; then
-	    # This is similar to how AIX traditionally builds its shared libraries.
-	    _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname'
-	  fi
-	  if test aix != "$with_aix_soname"; then
-	    _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp'
-	  else
-	    # used by -dlpreopen to get the symbols
-	    _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$MV  $output_objdir/$realname.d/$soname $output_objdir'
-	  fi
-	  _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$RM -r $output_objdir/$realname.d'
-	fi
-      fi
-      ;;
-
-    amigaos*)
-      case $host_cpu in
-      powerpc)
-            # see comment about AmigaOS4 .so support
-            _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-            _LT_TAGVAR(archive_expsym_cmds, $1)=''
-        ;;
-      m68k)
-            _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/a2ixlibrary.data~$ECHO "#define NAME $libname" > $output_objdir/a2ixlibrary.data~$ECHO "#define LIBRARY_ID 1" >> $output_objdir/a2ixlibrary.data~$ECHO "#define VERSION $major" >> $output_objdir/a2ixlibrary.data~$ECHO "#define REVISION $revision" >> $output_objdir/a2ixlibrary.data~$AR $AR_FLAGS $lib $libobjs~$RANLIB $lib~(cd $output_objdir && a2ixlibrary -32)'
-            _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-            _LT_TAGVAR(hardcode_minus_L, $1)=yes
-        ;;
-      esac
-      ;;
-
-    bsdi[[45]]*)
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)=-rdynamic
-      ;;
-
-    cygwin* | mingw* | pw32* | cegcc*)
-      # When not using gcc, we currently assume that we are using
-      # Microsoft Visual C++ or Intel C++ Compiler.
-      # hardcode_libdir_flag_spec is actually meaningless, as there is
-      # no search path for DLLs.
-      case $cc_basename in
-      cl* | icl*)
-	# Native MSVC or ICC
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' '
-	_LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	_LT_TAGVAR(always_export_symbols, $1)=yes
-	_LT_TAGVAR(file_list_spec, $1)='@'
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	_LT_TAGVAR(archive_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames='
-	_LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then
-            cp "$export_symbols" "$output_objdir/$soname.def";
-            echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp";
-          else
-            $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp;
-          fi~
-          $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~
-          linknames='
-	# The linker will not automatically build a static lib if we build a DLL.
-	# _LT_TAGVAR(old_archive_from_new_cmds, $1)='true'
-	_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-	_LT_TAGVAR(exclude_expsyms, $1)='_NULL_IMPORT_DESCRIPTOR|_IMPORT_DESCRIPTOR_.*'
-	_LT_TAGVAR(export_symbols_cmds, $1)='$NM $libobjs $convenience | $global_symbol_pipe | $SED -e '\''/^[[BCDGRS]][[ ]]/s/.*[[ ]]\([[^ ]]*\)/\1,DATA/'\'' | $SED -e '\''/^[[AITW]][[ ]]/s/.*[[ ]]//'\'' | sort | uniq > $export_symbols'
-	# Don't use ranlib
-	_LT_TAGVAR(old_postinstall_cmds, $1)='chmod 644 $oldlib'
-	_LT_TAGVAR(postlink_cmds, $1)='lt_outputfile="@OUTPUT@"~
-          lt_tool_outputfile="@TOOL_OUTPUT@"~
-          case $lt_outputfile in
-            *.exe|*.EXE) ;;
-            *)
-              lt_outputfile=$lt_outputfile.exe
-              lt_tool_outputfile=$lt_tool_outputfile.exe
-              ;;
-          esac~
-          if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then
-            $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1;
-            $RM "$lt_outputfile.manifest";
-          fi'
-	;;
-      *)
-	# Assume MSVC and ICC wrapper
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' '
-	_LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	# Tell ltmain to make .lib files, not .a files.
-	libext=lib
-	# Tell ltmain to make .dll files, not .so files.
-	shrext_cmds=.dll
-	# FIXME: Setting linknames here is a bad hack.
-	_LT_TAGVAR(archive_cmds, $1)='$CC -o $lib $libobjs $compiler_flags `func_echo_all "$deplibs" | $SED '\''s/ -lc$//'\''` -link -dll~linknames='
-	# The linker will automatically build a .lib file if we build a DLL.
-	_LT_TAGVAR(old_archive_from_new_cmds, $1)='true'
-	# FIXME: Should let the user specify the lib program.
-	_LT_TAGVAR(old_archive_cmds, $1)='lib -OUT:$oldlib$oldobjs$old_deplibs'
-	_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-	;;
-      esac
-      ;;
-
-    darwin* | rhapsody*)
-      _LT_DARWIN_LINKER_FEATURES($1)
-      ;;
-
-    dgux*)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    # FreeBSD 2.2.[012] allows us to include c++rt0.o to get C++ constructor
-    # support.  Future versions do this automatically, but an explicit c++rt0.o
-    # does not break anything, and helps significantly (at the cost of a little
-    # extra space).
-    freebsd2.2*)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags /usr/lib/c++rt0.o'
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    # Unfortunately, older versions of FreeBSD 2 do not have this feature.
-    freebsd2.*)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_minus_L, $1)=yes
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    # FreeBSD 3 and greater uses gcc -shared to do shared libraries.
-    freebsd* | dragonfly* | midnightbsd*)
-      _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    hpux9*)
-      if test yes = "$GCC"; then
-	_LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -shared $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $libobjs $deplibs $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$LD -b +b $install_libdir -o $output_objdir/$soname $libobjs $deplibs $linker_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-      fi
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-
-      # hardcode_minus_L: Not really in the search PATH,
-      # but as the default location of the library.
-      _LT_TAGVAR(hardcode_minus_L, $1)=yes
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-      ;;
-
-    hpux10*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      if test no = "$with_gnu_ld"; then
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
-	_LT_TAGVAR(hardcode_libdir_separator, $1)=:
-	_LT_TAGVAR(hardcode_direct, $1)=yes
-	_LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-	_LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-	# hardcode_minus_L: Not really in the search PATH,
-	# but as the default location of the library.
-	_LT_TAGVAR(hardcode_minus_L, $1)=yes
-      fi
-      ;;
-
-    hpux11*)
-      if test yes,no = "$GCC,$with_gnu_ld"; then
-	case $host_cpu in
-	hppa*64*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	esac
-      else
-	case $host_cpu in
-	hppa*64*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	ia64*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	m4_if($1, [], [
-	  # Older versions of the 11.00 compiler do not understand -b yet
-	  # (HP92453-01 A.11.01.20 doesn't, HP92453-01 B.11.X.35175-35176.GP does)
-	  _LT_LINKER_OPTION([if $CC understands -b],
-	    _LT_TAGVAR(lt_cv_prog_compiler__b, $1), [-b],
-	    [_LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'],
-	    [_LT_TAGVAR(archive_cmds, $1)='$LD -b +h $soname +b $install_libdir -o $lib $libobjs $deplibs $linker_flags'])],
-	  [_LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $libobjs $deplibs $compiler_flags'])
-	  ;;
-	esac
-      fi
-      if test no = "$with_gnu_ld"; then
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
-	_LT_TAGVAR(hardcode_libdir_separator, $1)=:
-
-	case $host_cpu in
-	hppa*64*|ia64*)
-	  _LT_TAGVAR(hardcode_direct, $1)=no
-	  _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	  ;;
-	*)
-	  _LT_TAGVAR(hardcode_direct, $1)=yes
-	  _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-	  _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-
-	  # hardcode_minus_L: Not really in the search PATH,
-	  # but as the default location of the library.
-	  _LT_TAGVAR(hardcode_minus_L, $1)=yes
-	  ;;
-	esac
-      fi
-      ;;
-
-    irix5* | irix6* | nonstopux*)
-      if test yes = "$GCC"; then
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	# Try to use the -exported_symbol ld option, if it does not
-	# work, assume that -exports_file does not work either and
-	# implicitly export all symbols.
-	# This should be the same for all languages, so no per-tag cache variable.
-	AC_CACHE_CHECK([whether the $host_os linker accepts -exported_symbol],
-	  [lt_cv_irix_exported_symbol],
-	  [save_LDFLAGS=$LDFLAGS
-	   LDFLAGS="$LDFLAGS -shared $wl-exported_symbol ${wl}foo $wl-update_registry $wl/dev/null"
-	   AC_LINK_IFELSE(
-	     [AC_LANG_SOURCE(
-	        [AC_LANG_CASE([C], [[int foo (void) { return 0; }]],
-			      [C++], [[int foo (void) { return 0; }]],
-			      [Fortran 77], [[
-      subroutine foo
-      end]],
-			      [Fortran], [[
-      subroutine foo
-      end]])])],
-	      [lt_cv_irix_exported_symbol=yes],
-	      [lt_cv_irix_exported_symbol=no])
-           LDFLAGS=$save_LDFLAGS])
-	if test yes = "$lt_cv_irix_exported_symbol"; then
-          _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations $wl-exports_file $wl$export_symbols -o $lib'
-	fi
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -exports_file $export_symbols -o $lib'
-      fi
-      _LT_TAGVAR(archive_cmds_need_lc, $1)='no'
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-      _LT_TAGVAR(inherit_rpath, $1)=yes
-      _LT_TAGVAR(link_all_deplibs, $1)=yes
-      ;;
-
-    linux*)
-      case $cc_basename in
-      tcc*)
-	# Fabrice Bellard et al's Tiny C Compiler
-	_LT_TAGVAR(ld_shlibs, $1)=yes
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	;;
-      esac
-      ;;
-
-    netbsd*)
-      if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	_LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable -o $lib $libobjs $deplibs $linker_flags'  # a.out
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$LD -shared -o $lib $libobjs $deplibs $linker_flags'      # ELF
-      fi
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    newsos6)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    *nto* | *qnx*)
-      ;;
-
-    openbsd* | bitrig*)
-      if test -f /usr/libexec/ld.so; then
-	_LT_TAGVAR(hardcode_direct, $1)=yes
-	_LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	_LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-	if test -z "`echo __ELF__ | $CC -E - | $GREP __ELF__`"; then
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags $wl-retain-symbols-file,$export_symbols'
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	  _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-	else
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -o $lib $libobjs $deplibs $compiler_flags'
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	fi
-      else
-	_LT_TAGVAR(ld_shlibs, $1)=no
-      fi
-      ;;
-
-    os2*)
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-      _LT_TAGVAR(hardcode_minus_L, $1)=yes
-      _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-      shrext_cmds=.dll
-      _LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      _LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	$ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	$ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	$ECHO EXPORTS >> $output_objdir/$libname.def~
-	prefix_cmds="$SED"~
-	if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	  prefix_cmds="$prefix_cmds -e 1d";
-	fi~
-	prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	$CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	emximp -o $lib $output_objdir/$libname.def'
-      _LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-      _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-      _LT_TAGVAR(file_list_spec, $1)='@'
-      ;;
-
-    osf3*)
-      if test yes = "$GCC"; then
-	_LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*'
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-      else
-	_LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*'
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-      fi
-      _LT_TAGVAR(archive_cmds_need_lc, $1)='no'
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-      ;;
-
-    osf4* | osf5*)	# as osf3* with the addition of -msym flag
-      if test yes = "$GCC"; then
-	_LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*'
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $pic_flag $libobjs $deplibs $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-      else
-	_LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*'
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $libobjs $deplibs $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done; printf "%s\\n" "-hidden">> $lib.exp~
-          $CC -shared$allow_undefined_flag $wl-input $wl$lib.exp $compiler_flags $libobjs $deplibs -soname $soname `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~$RM $lib.exp'
-
-	# Both c and cxx compiler support -rpath directly
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir'
-      fi
-      _LT_TAGVAR(archive_cmds_need_lc, $1)='no'
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-      ;;
-
-    solaris*)
-      _LT_TAGVAR(no_undefined_flag, $1)=' -z defs'
-      if test yes = "$GCC"; then
-	wlarc='$wl'
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $wl-z ${wl}text $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-          $CC -shared $pic_flag $wl-z ${wl}text $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-      else
-	case `$CC -V 2>&1` in
-	*"Compilers 5.0"*)
-	  wlarc=''
-	  _LT_TAGVAR(archive_cmds, $1)='$LD -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $LD -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $linker_flags~$RM $lib.exp'
-	  ;;
-	*)
-	  wlarc='$wl'
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h $soname -o $lib $libobjs $deplibs $compiler_flags'
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-            $CC -G$allow_undefined_flag -M $lib.exp -h $soname -o $lib $libobjs $deplibs $compiler_flags~$RM $lib.exp'
-	  ;;
-	esac
-      fi
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      case $host_os in
-      solaris2.[[0-5]] | solaris2.[[0-5]].*) ;;
-      *)
-	# The compiler driver will combine and reorder linker options,
-	# but understands '-z linker_flag'.  GCC discards it without '$wl',
-	# but is careful enough not to reorder.
-	# Supported since Solaris 2.6 (maybe 2.5.1?)
-	if test yes = "$GCC"; then
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract'
-	else
-	  _LT_TAGVAR(whole_archive_flag_spec, $1)='-z allextract$convenience -z defaultextract'
-	fi
-	;;
-      esac
-      _LT_TAGVAR(link_all_deplibs, $1)=yes
-      ;;
-
-    sunos4*)
-      if test sequent = "$host_vendor"; then
-	# Use $CC to link under sequent, because it throws in some extra .o
-	# files that make .init and .fini sections work.
-	_LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h $soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$LD -assert pure-text -Bstatic -o $lib $libobjs $deplibs $linker_flags'
-      fi
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-      _LT_TAGVAR(hardcode_direct, $1)=yes
-      _LT_TAGVAR(hardcode_minus_L, $1)=yes
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    sysv4)
-      case $host_vendor in
-	sni)
-	  _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  _LT_TAGVAR(hardcode_direct, $1)=yes # is this really true???
-	;;
-	siemens)
-	  ## LD is ld it makes a PLAMLIB
-	  ## CC just makes a GrossModule.
-	  _LT_TAGVAR(archive_cmds, $1)='$LD -G -o $lib $libobjs $deplibs $linker_flags'
-	  _LT_TAGVAR(reload_cmds, $1)='$CC -r -o $output$reload_objs'
-	  _LT_TAGVAR(hardcode_direct, $1)=no
-        ;;
-	motorola)
-	  _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	  _LT_TAGVAR(hardcode_direct, $1)=no #Motorola manual says yes, but my tests say they lie
-	;;
-      esac
-      runpath_var='LD_RUN_PATH'
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    sysv4.3*)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)='-Bexport'
-      ;;
-
-    sysv4*MP*)
-      if test -d /usr/nec; then
-	_LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-	_LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	runpath_var=LD_RUN_PATH
-	hardcode_runpath_var=yes
-	_LT_TAGVAR(ld_shlibs, $1)=yes
-      fi
-      ;;
-
-    sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7* | sco3.2v5.0.[[024]]*)
-      _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text'
-      _LT_TAGVAR(archive_cmds_need_lc, $1)=no
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    sysv5* | sco3.2v5* | sco5v6*)
-      # Note: We CANNOT use -z defs as we might desire, because we do not
-      # link with -lc, and that would cause any symbols used from libc to
-      # always be unresolved, which means just about no library would
-      # ever link correctly.  If we're not using GNU ld we use -z text
-      # though, which does catch some bad symbols but isn't as heavy-handed
-      # as -z defs.
-      _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text'
-      _LT_TAGVAR(allow_undefined_flag, $1)='$wl-z,nodefs'
-      _LT_TAGVAR(archive_cmds_need_lc, $1)=no
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R,$libdir'
-      _LT_TAGVAR(hardcode_libdir_separator, $1)=':'
-      _LT_TAGVAR(link_all_deplibs, $1)=yes
-      _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Bexport'
-      runpath_var='LD_RUN_PATH'
-
-      if test yes = "$GCC"; then
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      else
-	_LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-      fi
-      ;;
-
-    uts4*)
-      _LT_TAGVAR(archive_cmds, $1)='$LD -G -h $soname -o $lib $libobjs $deplibs $linker_flags'
-      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      ;;
-
-    *)
-      _LT_TAGVAR(ld_shlibs, $1)=no
-      ;;
-    esac
-
-    if test sni = "$host_vendor"; then
-      case $host in
-      sysv4 | sysv4.2uw2* | sysv4.3* | sysv5*)
-	_LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Blargedynsym'
-	;;
-      esac
-    fi
-  fi
-])
-AC_MSG_RESULT([$_LT_TAGVAR(ld_shlibs, $1)])
-test no = "$_LT_TAGVAR(ld_shlibs, $1)" && can_build_shared=no
-
-_LT_TAGVAR(with_gnu_ld, $1)=$with_gnu_ld
-
-_LT_DECL([], [libext], [0], [Old archive suffix (normally "a")])dnl
-_LT_DECL([], [shrext_cmds], [1], [Shared library suffix (normally ".so")])dnl
-_LT_DECL([], [extract_expsyms_cmds], [2],
-    [The commands to extract the exported symbol list from a shared archive])
-
-#
-# Do we need to explicitly link libc?
-#
-case "x$_LT_TAGVAR(archive_cmds_need_lc, $1)" in
-x|xyes)
-  # Assume -lc should be added
-  _LT_TAGVAR(archive_cmds_need_lc, $1)=yes
-
-  if test yes,yes = "$GCC,$enable_shared"; then
-    case $_LT_TAGVAR(archive_cmds, $1) in
-    *'~'*)
-      # FIXME: we may have to deal with multi-command sequences.
-      ;;
-    '$CC '*)
-      # Test whether the compiler implicitly links with -lc since on some
-      # systems, -lgcc has to come before -lc. If gcc already passes -lc
-      # to ld, don't add -lc before -lgcc.
-      AC_CACHE_CHECK([whether -lc should be explicitly linked in],
-	[lt_cv_]_LT_TAGVAR(archive_cmds_need_lc, $1),
-	[$RM conftest*
-	echo "$lt_simple_compile_test_code" > conftest.$ac_ext
-
-	if AC_TRY_EVAL(ac_compile) 2>conftest.err; then
-	  soname=conftest
-	  lib=conftest
-	  libobjs=conftest.$ac_objext
-	  deplibs=
-	  wl=$_LT_TAGVAR(lt_prog_compiler_wl, $1)
-	  pic_flag=$_LT_TAGVAR(lt_prog_compiler_pic, $1)
-	  compiler_flags=-v
-	  linker_flags=-v
-	  verstring=
-	  output_objdir=.
-	  libname=conftest
-	  lt_save_allow_undefined_flag=$_LT_TAGVAR(allow_undefined_flag, $1)
-	  _LT_TAGVAR(allow_undefined_flag, $1)=
-	  if AC_TRY_EVAL(_LT_TAGVAR(archive_cmds, $1) 2\>\&1 \| $GREP \" -lc \" \>/dev/null 2\>\&1)
-	  then
-	    lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-	  else
-	    lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)=yes
-	  fi
-	  _LT_TAGVAR(allow_undefined_flag, $1)=$lt_save_allow_undefined_flag
-	else
-	  cat conftest.err 1>&5
-	fi
-	$RM conftest*
-	])
-      _LT_TAGVAR(archive_cmds_need_lc, $1)=$lt_cv_[]_LT_TAGVAR(archive_cmds_need_lc, $1)
-      ;;
-    esac
-  fi
-  ;;
-esac
-
-_LT_TAGDECL([build_libtool_need_lc], [archive_cmds_need_lc], [0],
-    [Whether or not to add -lc for building shared libraries])
-_LT_TAGDECL([allow_libtool_libs_with_static_runtimes],
-    [enable_shared_with_static_runtimes], [0],
-    [Whether or not to disallow shared libs when runtime libs are static])
-_LT_TAGDECL([], [export_dynamic_flag_spec], [1],
-    [Compiler flag to allow reflexive dlopens])
-_LT_TAGDECL([], [whole_archive_flag_spec], [1],
-    [Compiler flag to generate shared objects directly from archives])
-_LT_TAGDECL([], [compiler_needs_object], [1],
-    [Whether the compiler copes with passing no objects directly])
-_LT_TAGDECL([], [old_archive_from_new_cmds], [2],
-    [Create an old-style archive from a shared archive])
-_LT_TAGDECL([], [old_archive_from_expsyms_cmds], [2],
-    [Create a temporary old-style archive to link instead of a shared archive])
-_LT_TAGDECL([], [archive_cmds], [2], [Commands used to build a shared archive])
-_LT_TAGDECL([], [archive_expsym_cmds], [2])
-_LT_TAGDECL([], [module_cmds], [2],
-    [Commands used to build a loadable module if different from building
-    a shared archive.])
-_LT_TAGDECL([], [module_expsym_cmds], [2])
-_LT_TAGDECL([], [with_gnu_ld], [1],
-    [Whether we are building with GNU ld or not])
-_LT_TAGDECL([], [allow_undefined_flag], [1],
-    [Flag that allows shared libraries with undefined symbols to be built])
-_LT_TAGDECL([], [no_undefined_flag], [1],
-    [Flag that enforces no undefined symbols])
-_LT_TAGDECL([], [hardcode_libdir_flag_spec], [1],
-    [Flag to hardcode $libdir into a binary during linking.
-    This must work even if $libdir does not exist])
-_LT_TAGDECL([], [hardcode_libdir_separator], [1],
-    [Whether we need a single "-rpath" flag with a separated argument])
-_LT_TAGDECL([], [hardcode_direct], [0],
-    [Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes
-    DIR into the resulting binary])
-_LT_TAGDECL([], [hardcode_direct_absolute], [0],
-    [Set to "yes" if using DIR/libNAME$shared_ext during linking hardcodes
-    DIR into the resulting binary and the resulting library dependency is
-    "absolute", i.e impossible to change by setting $shlibpath_var if the
-    library is relocated])
-_LT_TAGDECL([], [hardcode_minus_L], [0],
-    [Set to "yes" if using the -LDIR flag during linking hardcodes DIR
-    into the resulting binary])
-_LT_TAGDECL([], [hardcode_shlibpath_var], [0],
-    [Set to "yes" if using SHLIBPATH_VAR=DIR during linking hardcodes DIR
-    into the resulting binary])
-_LT_TAGDECL([], [hardcode_automatic], [0],
-    [Set to "yes" if building a shared library automatically hardcodes DIR
-    into the library and all subsequent libraries and executables linked
-    against it])
-_LT_TAGDECL([], [inherit_rpath], [0],
-    [Set to yes if linker adds runtime paths of dependent libraries
-    to runtime path list])
-_LT_TAGDECL([], [link_all_deplibs], [0],
-    [Whether libtool must link a program against all its dependency libraries])
-_LT_TAGDECL([], [always_export_symbols], [0],
-    [Set to "yes" if exported symbols are required])
-_LT_TAGDECL([], [export_symbols_cmds], [2],
-    [The commands to list exported symbols])
-_LT_TAGDECL([], [exclude_expsyms], [1],
-    [Symbols that should not be listed in the preloaded symbols])
-_LT_TAGDECL([], [include_expsyms], [1],
-    [Symbols that must always be exported])
-_LT_TAGDECL([], [prelink_cmds], [2],
-    [Commands necessary for linking programs (against libraries) with templates])
-_LT_TAGDECL([], [postlink_cmds], [2],
-    [Commands necessary for finishing linking programs])
-_LT_TAGDECL([], [file_list_spec], [1],
-    [Specify filename containing input files])
-dnl FIXME: Not yet implemented
-dnl _LT_TAGDECL([], [thread_safe_flag_spec], [1],
-dnl    [Compiler flag to generate thread safe objects])
-])# _LT_LINKER_SHLIBS
-
-
-# _LT_LANG_C_CONFIG([TAG])
-# ------------------------
-# Ensure that the configuration variables for a C compiler are suitably
-# defined.  These variables are subsequently used by _LT_CONFIG to write
-# the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_C_CONFIG],
-[m4_require([_LT_DECL_EGREP])dnl
-lt_save_CC=$CC
-AC_LANG_PUSH(C)
-
-# Source file extension for C test sources.
-ac_ext=c
-
-# Object file extension for compiled C test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code="int some_variable = 0;"
-
-# Code to be used in simple link tests
-lt_simple_link_test_code='int main(){return(0);}'
-
-_LT_TAG_COMPILER
-# Save the default compiler, since it gets overwritten when the other
-# tags are being tested, and _LT_TAGVAR(compiler, []) is a NOP.
-compiler_DEFAULT=$CC
-
-# save warnings/boilerplate of simple test code
-_LT_COMPILER_BOILERPLATE
-_LT_LINKER_BOILERPLATE
-
-## CAVEAT EMPTOR:
-## There is no encapsulation within the following macros, do not change
-## the running order or otherwise move them around unless you know exactly
-## what you are doing...
-if test -n "$compiler"; then
-  _LT_COMPILER_NO_RTTI($1)
-  _LT_COMPILER_PIC($1)
-  _LT_COMPILER_C_O($1)
-  _LT_COMPILER_FILE_LOCKS($1)
-  _LT_LINKER_SHLIBS($1)
-  _LT_SYS_DYNAMIC_LINKER($1)
-  _LT_LINKER_HARDCODE_LIBPATH($1)
-  LT_SYS_DLOPEN_SELF
-  _LT_CMD_STRIPLIB
-
-  # Report what library types will actually be built
-  AC_MSG_CHECKING([if libtool supports shared libraries])
-  AC_MSG_RESULT([$can_build_shared])
-
-  AC_MSG_CHECKING([whether to build shared libraries])
-  test no = "$can_build_shared" && enable_shared=no
-
-  # On AIX, shared libraries and static libraries use the same namespace, and
-  # are all built from PIC.
-  case $host_os in
-  aix3*)
-    test yes = "$enable_shared" && enable_static=no
-    if test -n "$RANLIB"; then
-      archive_cmds="$archive_cmds~\$RANLIB \$lib"
-      postinstall_cmds='$RANLIB $lib'
-    fi
-    ;;
-
-  aix[[4-9]]*)
-    if test ia64 != "$host_cpu"; then
-      case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
-      yes,aix,yes) ;;			# shared object as lib.so file only
-      yes,svr4,*) ;;			# shared object as lib.so archive member only
-      yes,*) enable_static=no ;;	# shared object in lib.a archive as well
-      esac
-    fi
-    ;;
-  esac
-  AC_MSG_RESULT([$enable_shared])
-
-  AC_MSG_CHECKING([whether to build static libraries])
-  # Make sure either enable_shared or enable_static is yes.
-  test yes = "$enable_shared" || enable_static=yes
-  AC_MSG_RESULT([$enable_static])
-
-  _LT_CONFIG($1)
-fi
-AC_LANG_POP
-CC=$lt_save_CC
-])# _LT_LANG_C_CONFIG
-
-
-# _LT_LANG_CXX_CONFIG([TAG])
-# --------------------------
-# Ensure that the configuration variables for a C++ compiler are suitably
-# defined.  These variables are subsequently used by _LT_CONFIG to write
-# the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_CXX_CONFIG],
-[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-m4_require([_LT_DECL_EGREP])dnl
-m4_require([_LT_PATH_MANIFEST_TOOL])dnl
-if test -n "$CXX" && ( test no != "$CXX" &&
-    ( (test g++ = "$CXX" && `g++ -v >/dev/null 2>&1` ) ||
-    (test g++ != "$CXX"))); then
-  AC_PROG_CXXCPP
-else
-  _lt_caught_CXX_error=yes
-fi
-
-AC_LANG_PUSH(C++)
-_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-_LT_TAGVAR(allow_undefined_flag, $1)=
-_LT_TAGVAR(always_export_symbols, $1)=no
-_LT_TAGVAR(archive_expsym_cmds, $1)=
-_LT_TAGVAR(compiler_needs_object, $1)=no
-_LT_TAGVAR(export_dynamic_flag_spec, $1)=
-_LT_TAGVAR(hardcode_direct, $1)=no
-_LT_TAGVAR(hardcode_direct_absolute, $1)=no
-_LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
-_LT_TAGVAR(hardcode_libdir_separator, $1)=
-_LT_TAGVAR(hardcode_minus_L, $1)=no
-_LT_TAGVAR(hardcode_shlibpath_var, $1)=unsupported
-_LT_TAGVAR(hardcode_automatic, $1)=no
-_LT_TAGVAR(inherit_rpath, $1)=no
-_LT_TAGVAR(module_cmds, $1)=
-_LT_TAGVAR(module_expsym_cmds, $1)=
-_LT_TAGVAR(link_all_deplibs, $1)=unknown
-_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
-_LT_TAGVAR(reload_flag, $1)=$reload_flag
-_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
-_LT_TAGVAR(no_undefined_flag, $1)=
-_LT_TAGVAR(whole_archive_flag_spec, $1)=
-_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no
-
-# Source file extension for C++ test sources.
-ac_ext=cpp
-
-# Object file extension for compiled C++ test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# No sense in running all these tests if we already determined that
-# the CXX compiler isn't working.  Some variables (like enable_shared)
-# are currently assumed to apply to all compilers on this platform,
-# and will be corrupted by setting them based on a non-working compiler.
-if test yes != "$_lt_caught_CXX_error"; then
-  # Code to be used in simple compile tests
-  lt_simple_compile_test_code="int some_variable = 0;"
-
-  # Code to be used in simple link tests
-  lt_simple_link_test_code='int main(int, char *[[]]) { return(0); }'
-
-  # ltmain only uses $CC for tagged configurations so make sure $CC is set.
-  _LT_TAG_COMPILER
-
-  # save warnings/boilerplate of simple test code
-  _LT_COMPILER_BOILERPLATE
-  _LT_LINKER_BOILERPLATE
-
-  # Allow CC to be a program name with arguments.
-  lt_save_CC=$CC
-  lt_save_CFLAGS=$CFLAGS
-  lt_save_LD=$LD
-  lt_save_GCC=$GCC
-  GCC=$GXX
-  lt_save_with_gnu_ld=$with_gnu_ld
-  lt_save_path_LD=$lt_cv_path_LD
-  if test -n "${lt_cv_prog_gnu_ldcxx+set}"; then
-    lt_cv_prog_gnu_ld=$lt_cv_prog_gnu_ldcxx
-  else
-    $as_unset lt_cv_prog_gnu_ld
-  fi
-  if test -n "${lt_cv_path_LDCXX+set}"; then
-    lt_cv_path_LD=$lt_cv_path_LDCXX
-  else
-    $as_unset lt_cv_path_LD
-  fi
-  test -z "${LDCXX+set}" || LD=$LDCXX
-  CC=${CXX-"c++"}
-  CFLAGS=$CXXFLAGS
-  compiler=$CC
-  _LT_TAGVAR(compiler, $1)=$CC
-  _LT_CC_BASENAME([$compiler])
-
-  if test -n "$compiler"; then
-    # We don't want -fno-exception when compiling C++ code, so set the
-    # no_builtin_flag separately
-    if test yes = "$GXX"; then
-      _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=' -fno-builtin'
-    else
-      _LT_TAGVAR(lt_prog_compiler_no_builtin_flag, $1)=
-    fi
-
-    if test yes = "$GXX"; then
-      # Set up default GNU C++ configuration
-
-      LT_PATH_LD
-
-      # Check if GNU C++ uses GNU ld as the underlying linker, since the
-      # archiving commands below assume that GNU ld is being used.
-      if test yes = "$with_gnu_ld"; then
-        _LT_TAGVAR(archive_cmds, $1)='$CC $pic_flag -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
-        _LT_TAGVAR(archive_expsym_cmds, $1)='$CC $pic_flag -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-
-        _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-        _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
-
-        # If archive_cmds runs LD, not CC, wlarc should be empty
-        # XXX I think wlarc can be eliminated in ltcf-cxx, but I need to
-        #     investigate it a little bit more. (MM)
-        wlarc='$wl'
-
-        # ancient GNU ld didn't support --whole-archive et. al.
-        if eval "`$CC -print-prog-name=ld` --help 2>&1" |
-	  $GREP 'no-whole-archive' > /dev/null; then
-          _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
-        else
-          _LT_TAGVAR(whole_archive_flag_spec, $1)=
-        fi
-      else
-        with_gnu_ld=no
-        wlarc=
-
-        # A generic and very simple default shared library creation
-        # command for GNU C++ for the case where it uses the native
-        # linker, instead of GNU ld.  If possible, this setting should
-        # overridden to take advantage of the native linker features on
-        # the platform it is being used on.
-        _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib'
-      fi
-
-      # Commands to make compiler produce verbose output that lists
-      # what "hidden" libraries, object files and flags are used when
-      # linking a shared library.
-      output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"'
-
-    else
-      GXX=no
-      with_gnu_ld=no
-      wlarc=
-    fi
-
-    # PORTME: fill in a description of your system's C++ link characteristics
-    AC_MSG_CHECKING([whether the $compiler linker ($LD) supports shared libraries])
-    _LT_TAGVAR(ld_shlibs, $1)=yes
-    case $host_os in
-      aix3*)
-        # FIXME: insert proper C++ library support
-        _LT_TAGVAR(ld_shlibs, $1)=no
-        ;;
-      aix[[4-9]]*)
-        if test ia64 = "$host_cpu"; then
-          # On IA64, the linker does run time linking by default, so we don't
-          # have to do anything special.
-          aix_use_runtimelinking=no
-          exp_sym_flag='-Bexport'
-          no_entry_flag=
-        else
-          aix_use_runtimelinking=no
-
-          # Test if we are trying to use run time linking or normal
-          # AIX style linking. If -brtl is somewhere in LDFLAGS, we
-          # have runtime linking enabled, and use it for executables.
-          # For shared libraries, we enable/disable runtime linking
-          # depending on the kind of the shared library created -
-          # when "with_aix_soname,aix_use_runtimelinking" is:
-          # "aix,no"   lib.a(lib.so.V) shared, rtl:no,  for executables
-          # "aix,yes"  lib.so          shared, rtl:yes, for executables
-          #            lib.a           static archive
-          # "both,no"  lib.so.V(shr.o) shared, rtl:yes
-          #            lib.a(lib.so.V) shared, rtl:no,  for executables
-          # "both,yes" lib.so.V(shr.o) shared, rtl:yes, for executables
-          #            lib.a(lib.so.V) shared, rtl:no
-          # "svr4,*"   lib.so.V(shr.o) shared, rtl:yes, for executables
-          #            lib.a           static archive
-          case $host_os in aix4.[[23]]|aix4.[[23]].*|aix[[5-9]]*)
-	    for ld_flag in $LDFLAGS; do
-	      case $ld_flag in
-	      *-brtl*)
-	        aix_use_runtimelinking=yes
-	        break
-	        ;;
-	      esac
-	    done
-	    if test svr4,no = "$with_aix_soname,$aix_use_runtimelinking"; then
-	      # With aix-soname=svr4, we create the lib.so.V shared archives only,
-	      # so we don't have lib.a shared libs to link our executables.
-	      # We have to force runtime linking in this case.
-	      aix_use_runtimelinking=yes
-	      LDFLAGS="$LDFLAGS -Wl,-brtl"
-	    fi
-	    ;;
-          esac
-
-          exp_sym_flag='-bexport'
-          no_entry_flag='-bnoentry'
-        fi
-
-        # When large executables or shared objects are built, AIX ld can
-        # have problems creating the table of contents.  If linking a library
-        # or program results in "error TOC overflow" add -mminimal-toc to
-        # CXXFLAGS/CFLAGS for g++/gcc.  In the cases where that is not
-        # enough to fix the problem, add -Wl,-bbigtoc to LDFLAGS.
-
-        _LT_TAGVAR(archive_cmds, $1)=''
-        _LT_TAGVAR(hardcode_direct, $1)=yes
-        _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-        _LT_TAGVAR(hardcode_libdir_separator, $1)=':'
-        _LT_TAGVAR(link_all_deplibs, $1)=yes
-        _LT_TAGVAR(file_list_spec, $1)='$wl-f,'
-        case $with_aix_soname,$aix_use_runtimelinking in
-        aix,*) ;;	# no import file
-        svr4,* | *,yes) # use import file
-          # The Import File defines what to hardcode.
-          _LT_TAGVAR(hardcode_direct, $1)=no
-          _LT_TAGVAR(hardcode_direct_absolute, $1)=no
-          ;;
-        esac
-
-        if test yes = "$GXX"; then
-          case $host_os in aix4.[[012]]|aix4.[[012]].*)
-          # We only want to do this on AIX 4.2 and lower, the check
-          # below for broken collect2 doesn't work under 4.3+
-	  collect2name=`$CC -print-prog-name=collect2`
-	  if test -f "$collect2name" &&
-	     strings "$collect2name" | $GREP resolve_lib_name >/dev/null
-	  then
-	    # We have reworked collect2
-	    :
-	  else
-	    # We have old collect2
-	    _LT_TAGVAR(hardcode_direct, $1)=unsupported
-	    # It fails to find uninstalled libraries when the uninstalled
-	    # path is not listed in the libpath.  Setting hardcode_minus_L
-	    # to unsupported forces relinking
-	    _LT_TAGVAR(hardcode_minus_L, $1)=yes
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-	    _LT_TAGVAR(hardcode_libdir_separator, $1)=
-	  fi
-          esac
-          shared_flag='-shared'
-	  if test yes = "$aix_use_runtimelinking"; then
-	    shared_flag=$shared_flag' $wl-G'
-	  fi
-	  # Need to ensure runtime linking is disabled for the traditional
-	  # shared library, or the linker may eventually find shared libraries
-	  # /with/ Import File - we do not want to mix them.
-	  shared_flag_aix='-shared'
-	  shared_flag_svr4='-shared $wl-G'
-        else
-          # not using gcc
-          if test ia64 = "$host_cpu"; then
-	  # VisualAge C++, Version 5.5 for AIX 5L for IA-64, Beta 3 Release
-	  # chokes on -Wl,-G. The following line is correct:
-	  shared_flag='-G'
-          else
-	    if test yes = "$aix_use_runtimelinking"; then
-	      shared_flag='$wl-G'
-	    else
-	      shared_flag='$wl-bM:SRE'
-	    fi
-	    shared_flag_aix='$wl-bM:SRE'
-	    shared_flag_svr4='$wl-G'
-          fi
-        fi
-
-        _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-bexpall'
-        # It seems that -bexpall does not export symbols beginning with
-        # underscore (_), so it is better to generate a list of symbols to
-	# export.
-        _LT_TAGVAR(always_export_symbols, $1)=yes
-	if test aix,yes = "$with_aix_soname,$aix_use_runtimelinking"; then
-          # Warning - without using the other runtime loading flags (-brtl),
-          # -berok will link without error, but may produce a broken library.
-          # The "-G" linker flag allows undefined symbols.
-          _LT_TAGVAR(no_undefined_flag, $1)='-bernotok'
-          # Determine the default libpath from the value encoded in an empty
-          # executable.
-          _LT_SYS_MODULE_PATH_AIX([$1])
-          _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath"
-
-          _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $deplibs $wl'$no_entry_flag' $compiler_flags `if test -n "$allow_undefined_flag"; then func_echo_all "$wl$allow_undefined_flag"; else :; fi` $wl'$exp_sym_flag:\$export_symbols' '$shared_flag
-        else
-          if test ia64 = "$host_cpu"; then
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $libdir:/usr/lib:/lib'
-	    _LT_TAGVAR(allow_undefined_flag, $1)="-z nodefs"
-	    _LT_TAGVAR(archive_expsym_cmds, $1)="\$CC $shared_flag"' -o $output_objdir/$soname $libobjs $deplibs '"\$wl$no_entry_flag"' $compiler_flags $wl$allow_undefined_flag '"\$wl$exp_sym_flag:\$export_symbols"
-          else
-	    # Determine the default libpath from the value encoded in an
-	    # empty executable.
-	    _LT_SYS_MODULE_PATH_AIX([$1])
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-blibpath:$libdir:'"$aix_libpath"
-	    # Warning - without using the other run time loading flags,
-	    # -berok will link without error, but may produce a broken library.
-	    _LT_TAGVAR(no_undefined_flag, $1)=' $wl-bernotok'
-	    _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-berok'
-	    if test yes = "$with_gnu_ld"; then
-	      # We only use this code for GNU lds that support --whole-archive.
-	      _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive'
-	    else
-	      # Exported symbols can be pulled into shared objects from archives
-	      _LT_TAGVAR(whole_archive_flag_spec, $1)='$convenience'
-	    fi
-	    _LT_TAGVAR(archive_cmds_need_lc, $1)=yes
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='$RM -r $output_objdir/$realname.d~$MKDIR $output_objdir/$realname.d'
-	    # -brtl affects multiple linker settings, -berok does not and is overridden later
-	    compiler_flags_filtered='`func_echo_all "$compiler_flags " | $SED -e "s%-brtl\\([[, ]]\\)%-berok\\1%g"`'
-	    if test svr4 != "$with_aix_soname"; then
-	      # This is similar to how AIX traditionally builds its shared
-	      # libraries. Need -bnortl late, we may have -brtl in LDFLAGS.
-	      _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_aix' -o $output_objdir/$realname.d/$soname $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$AR $AR_FLAGS $output_objdir/$libname$release.a $output_objdir/$realname.d/$soname'
-	    fi
-	    if test aix != "$with_aix_soname"; then
-	      _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$CC '$shared_flag_svr4' -o $output_objdir/$realname.d/$shared_archive_member_spec.o $libobjs $deplibs $wl-bnoentry '$compiler_flags_filtered'$wl-bE:$export_symbols$allow_undefined_flag~$STRIP -e $output_objdir/$realname.d/$shared_archive_member_spec.o~( func_echo_all "#! $soname($shared_archive_member_spec.o)"; if test shr_64 = "$shared_archive_member_spec"; then func_echo_all "# 64"; else func_echo_all "# 32"; fi; cat $export_symbols ) > $output_objdir/$realname.d/$shared_archive_member_spec.imp~$AR $AR_FLAGS $output_objdir/$soname $output_objdir/$realname.d/$shared_archive_member_spec.o $output_objdir/$realname.d/$shared_archive_member_spec.imp'
-	    else
-	      # used by -dlpreopen to get the symbols
-	      _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$MV  $output_objdir/$realname.d/$soname $output_objdir'
-	    fi
-	    _LT_TAGVAR(archive_expsym_cmds, $1)="$_LT_TAGVAR(archive_expsym_cmds, $1)"'~$RM -r $output_objdir/$realname.d'
-          fi
-        fi
-        ;;
-
-      beos*)
-	if $LD --help 2>&1 | $GREP ': supported targets:.* elf' > /dev/null; then
-	  _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	  # Joseph Beckenbach <jrb3@best.com> says some releases of gcc
-	  # support --undefined.  This deserves some investigation.  FIXME
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -nostart $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	else
-	  _LT_TAGVAR(ld_shlibs, $1)=no
-	fi
-	;;
-
-      chorus*)
-        case $cc_basename in
-          *)
-	  # FIXME: insert proper C++ library support
-	  _LT_TAGVAR(ld_shlibs, $1)=no
-	  ;;
-        esac
-        ;;
-
-      cygwin* | mingw* | pw32* | cegcc*)
-	case $GXX,$cc_basename in
-	,cl* | no,cl* | ,icl* | no,icl*)
-	  # Native MSVC or ICC
-	  # hardcode_libdir_flag_spec is actually meaningless, as there is
-	  # no search path for DLLs.
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)=' '
-	  _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	  _LT_TAGVAR(always_export_symbols, $1)=yes
-	  _LT_TAGVAR(file_list_spec, $1)='@'
-	  # Tell ltmain to make .lib files, not .a files.
-	  libext=lib
-	  # Tell ltmain to make .dll files, not .so files.
-	  shrext_cmds=.dll
-	  # FIXME: Setting linknames here is a bad hack.
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -o $output_objdir/$soname $libobjs $compiler_flags $deplibs -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~linknames='
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then
-              cp "$export_symbols" "$output_objdir/$soname.def";
-              echo "$tool_output_objdir$soname.def" > "$output_objdir/$soname.exp";
-            else
-              $SED -e '\''s/^/-link -EXPORT:/'\'' < $export_symbols > $output_objdir/$soname.exp;
-            fi~
-            $CC -o $tool_output_objdir$soname $libobjs $compiler_flags $deplibs "@$tool_output_objdir$soname.exp" -Wl,-DLL,-IMPLIB:"$tool_output_objdir$libname.dll.lib"~
-            linknames='
-	  # The linker will not automatically build a static lib if we build a DLL.
-	  # _LT_TAGVAR(old_archive_from_new_cmds, $1)='true'
-	  _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-	  # Don't use ranlib
-	  _LT_TAGVAR(old_postinstall_cmds, $1)='chmod 644 $oldlib'
-	  _LT_TAGVAR(postlink_cmds, $1)='lt_outputfile="@OUTPUT@"~
-            lt_tool_outputfile="@TOOL_OUTPUT@"~
-            case $lt_outputfile in
-              *.exe|*.EXE) ;;
-              *)
-                lt_outputfile=$lt_outputfile.exe
-                lt_tool_outputfile=$lt_tool_outputfile.exe
-                ;;
-            esac~
-            func_to_tool_file "$lt_outputfile"~
-            if test : != "$MANIFEST_TOOL" && test -f "$lt_outputfile.manifest"; then
-              $MANIFEST_TOOL -manifest "$lt_tool_outputfile.manifest" -outputresource:"$lt_tool_outputfile" || exit 1;
-              $RM "$lt_outputfile.manifest";
-            fi'
-	  ;;
-	*)
-	  # g++
-	  # _LT_TAGVAR(hardcode_libdir_flag_spec, $1) is actually meaningless,
-	  # as there is no search path for DLLs.
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-	  _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-all-symbols'
-	  _LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	  _LT_TAGVAR(always_export_symbols, $1)=no
-	  _LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-
-	  if $LD --help 2>&1 | $GREP 'auto-import' > /dev/null; then
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-	    # If the export-symbols file already is a .def file, use it as
-	    # is; otherwise, prepend EXPORTS...
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='if _LT_DLL_DEF_P([$export_symbols]); then
-              cp $export_symbols $output_objdir/$soname.def;
-            else
-              echo EXPORTS > $output_objdir/$soname.def;
-              cat $export_symbols >> $output_objdir/$soname.def;
-            fi~
-            $CC -shared -nostdlib $output_objdir/$soname.def $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $output_objdir/$soname $wl--enable-auto-image-base -Xlinker --out-implib -Xlinker $lib'
-	  else
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	  fi
-	  ;;
-	esac
-	;;
-      darwin* | rhapsody*)
-        _LT_DARWIN_LINKER_FEATURES($1)
-	;;
-
-      os2*)
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-L$libdir'
-	_LT_TAGVAR(hardcode_minus_L, $1)=yes
-	_LT_TAGVAR(allow_undefined_flag, $1)=unsupported
-	shrext_cmds=.dll
-	_LT_TAGVAR(archive_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	  $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	  $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	  $ECHO EXPORTS >> $output_objdir/$libname.def~
-	  emxexp $libobjs | $SED /"_DLL_InitTerm"/d >> $output_objdir/$libname.def~
-	  $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	  emximp -o $lib $output_objdir/$libname.def'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$ECHO "LIBRARY ${soname%$shared_ext} INITINSTANCE TERMINSTANCE" > $output_objdir/$libname.def~
-	  $ECHO "DESCRIPTION \"$libname\"" >> $output_objdir/$libname.def~
-	  $ECHO "DATA MULTIPLE NONSHARED" >> $output_objdir/$libname.def~
-	  $ECHO EXPORTS >> $output_objdir/$libname.def~
-	  prefix_cmds="$SED"~
-	  if test EXPORTS = "`$SED 1q $export_symbols`"; then
-	    prefix_cmds="$prefix_cmds -e 1d";
-	  fi~
-	  prefix_cmds="$prefix_cmds -e \"s/^\(.*\)$/_\1/g\""~
-	  cat $export_symbols | $prefix_cmds >> $output_objdir/$libname.def~
-	  $CC -Zdll -Zcrtdll -o $output_objdir/$soname $libobjs $deplibs $compiler_flags $output_objdir/$libname.def~
-	  emximp -o $lib $output_objdir/$libname.def'
-	_LT_TAGVAR(old_archive_From_new_cmds, $1)='emximp -o $output_objdir/${libname}_dll.a $output_objdir/$libname.def'
-	_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=yes
-	_LT_TAGVAR(file_list_spec, $1)='@'
-	;;
-
-      dgux*)
-        case $cc_basename in
-          ec++*)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          ghcx*)
-	    # Green Hills C++ Compiler
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          *)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-        esac
-        ;;
-
-      freebsd2.*)
-        # C++ shared libraries reported to be fairly broken before
-	# switch to ELF
-        _LT_TAGVAR(ld_shlibs, $1)=no
-        ;;
-
-      freebsd-elf*)
-        _LT_TAGVAR(archive_cmds_need_lc, $1)=no
-        ;;
-
-      freebsd* | dragonfly* | midnightbsd*)
-        # FreeBSD 3 and later use GNU C++ and GNU ld with standard ELF
-        # conventions
-        _LT_TAGVAR(ld_shlibs, $1)=yes
-        ;;
-
-      haiku*)
-        _LT_TAGVAR(archive_cmds, $1)='$CC -shared $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-        _LT_TAGVAR(link_all_deplibs, $1)=yes
-        ;;
-
-      hpux9*)
-        _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
-        _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-        _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-        _LT_TAGVAR(hardcode_direct, $1)=yes
-        _LT_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH,
-				             # but as the default
-				             # location of the library.
-
-        case $cc_basename in
-          CC*)
-            # FIXME: insert proper C++ library support
-            _LT_TAGVAR(ld_shlibs, $1)=no
-            ;;
-          aCC*)
-            _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -b $wl+b $wl$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-            # Commands to make compiler produce verbose output that lists
-            # what "hidden" libraries, object files and flags are used when
-            # linking a shared library.
-            #
-            # There doesn't appear to be a way to prevent this compiler from
-            # explicitly linking system object files so we need to strip them
-            # from the output so that they don't get included in the library
-            # dependencies.
-            output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | $EGREP "\-L"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"'
-            ;;
-          *)
-            if test yes = "$GXX"; then
-              _LT_TAGVAR(archive_cmds, $1)='$RM $output_objdir/$soname~$CC -shared -nostdlib $pic_flag $wl+b $wl$install_libdir -o $output_objdir/$soname $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~test "x$output_objdir/$soname" = "x$lib" || mv $output_objdir/$soname $lib'
-            else
-              # FIXME: insert proper C++ library support
-              _LT_TAGVAR(ld_shlibs, $1)=no
-            fi
-            ;;
-        esac
-        ;;
-
-      hpux10*|hpux11*)
-        if test no = "$with_gnu_ld"; then
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl+b $wl$libdir'
-	  _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-
-          case $host_cpu in
-            hppa*64*|ia64*)
-              ;;
-            *)
-	      _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-              ;;
-          esac
-        fi
-        case $host_cpu in
-          hppa*64*|ia64*)
-            _LT_TAGVAR(hardcode_direct, $1)=no
-            _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-            ;;
-          *)
-            _LT_TAGVAR(hardcode_direct, $1)=yes
-            _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-            _LT_TAGVAR(hardcode_minus_L, $1)=yes # Not in the search PATH,
-					         # but as the default
-					         # location of the library.
-            ;;
-        esac
-
-        case $cc_basename in
-          CC*)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          aCC*)
-	    case $host_cpu in
-	      hppa*64*)
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	        ;;
-	      ia64*)
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	        ;;
-	      *)
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -b $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	        ;;
-	    esac
-	    # Commands to make compiler produce verbose output that lists
-	    # what "hidden" libraries, object files and flags are used when
-	    # linking a shared library.
-	    #
-	    # There doesn't appear to be a way to prevent this compiler from
-	    # explicitly linking system object files so we need to strip them
-	    # from the output so that they don't get included in the library
-	    # dependencies.
-	    output_verbose_link_cmd='templist=`($CC -b $CFLAGS -v conftest.$objext 2>&1) | $GREP "\-L"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"'
-	    ;;
-          *)
-	    if test yes = "$GXX"; then
-	      if test no = "$with_gnu_ld"; then
-	        case $host_cpu in
-	          hppa*64*)
-	            _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib -fPIC $wl+h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	            ;;
-	          ia64*)
-	            _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $pic_flag $wl+h $wl$soname $wl+nodefaultrpath -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	            ;;
-	          *)
-	            _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $pic_flag $wl+h $wl$soname $wl+b $wl$install_libdir -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	            ;;
-	        esac
-	      fi
-	    else
-	      # FIXME: insert proper C++ library support
-	      _LT_TAGVAR(ld_shlibs, $1)=no
-	    fi
-	    ;;
-        esac
-        ;;
-
-      interix[[3-9]]*)
-	_LT_TAGVAR(hardcode_direct, $1)=no
-	_LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	_LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-	# Hack: On Interix 3.x, we cannot compile PIC because of a broken gcc.
-	# Instead, shared libraries are loaded at an image base (0x10000000 by
-	# default) and relocated if they conflict, which is a slow very memory
-	# consuming and fragmenting process.  To avoid this, we pick a random,
-	# 256 KiB-aligned image base between 0x50000000 and 0x6FFC0000 at link
-	# time.  Moving up from 0x10000000 also allows more sbrk(2) space.
-	_LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-	_LT_TAGVAR(archive_expsym_cmds, $1)='$SED "s|^|_|" $export_symbols >$output_objdir/$soname.expsym~$CC -shared $pic_flag $libobjs $deplibs $compiler_flags $wl-h,$soname $wl--retain-symbols-file,$output_objdir/$soname.expsym $wl--image-base,`expr ${RANDOM-$$} % 4096 / 2 \* 262144 + 1342177280` -o $lib'
-	;;
-      irix5* | irix6*)
-        case $cc_basename in
-          CC*)
-	    # SGI C++
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -shared -all -multigot $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-
-	    # Archives containing C++ object files must be created using
-	    # "CC -ar", where "CC" is the IRIX C++ compiler.  This is
-	    # necessary to make sure instantiated templates are included
-	    # in the archive.
-	    _LT_TAGVAR(old_archive_cmds, $1)='$CC -ar -WR,-u -o $oldlib $oldobjs'
-	    ;;
-          *)
-	    if test yes = "$GXX"; then
-	      if test no = "$with_gnu_ld"; then
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-	      else
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` -o $lib'
-	      fi
-	    fi
-	    _LT_TAGVAR(link_all_deplibs, $1)=yes
-	    ;;
-        esac
-        _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-        _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-        _LT_TAGVAR(inherit_rpath, $1)=yes
-        ;;
-
-      linux* | k*bsd*-gnu | kopensolaris*-gnu | gnu*)
-        case $cc_basename in
-          KCC*)
-	    # Kuck and Associates, Inc. (KAI) C++ Compiler
-
-	    # KCC will only create a shared library if the output file
-	    # ends with ".so" (or ".sl" for HP-UX), so rename the library
-	    # to its proper name (with version) after linking.
-	    _LT_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib'
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo $lib | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib $wl-retain-symbols-file,$export_symbols; mv \$templib $lib'
-	    # Commands to make compiler produce verbose output that lists
-	    # what "hidden" libraries, object files and flags are used when
-	    # linking a shared library.
-	    #
-	    # There doesn't appear to be a way to prevent this compiler from
-	    # explicitly linking system object files so we need to strip them
-	    # from the output so that they don't get included in the library
-	    # dependencies.
-	    output_verbose_link_cmd='templist=`$CC $CFLAGS -v conftest.$objext -o libconftest$shared_ext 2>&1 | $GREP "ld"`; rm -f libconftest$shared_ext; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"'
-
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	    _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
-
-	    # Archives containing C++ object files must be created using
-	    # "CC -Bstatic", where "CC" is the KAI C++ compiler.
-	    _LT_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs'
-	    ;;
-	  icpc* | ecpc* )
-	    # Intel C++
-	    with_gnu_ld=yes
-	    # version 8.0 and above of icpc choke on multiply defined symbols
-	    # if we add $predep_objects and $postdep_objects, however 7.1 and
-	    # earlier do not add the objects themselves.
-	    case `$CC -V 2>&1` in
-	      *"Version 7."*)
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
-		_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-		;;
-	      *)  # Version 8.0 or newer
-	        tmp_idyn=
-	        case $host_cpu in
-		  ia64*) tmp_idyn=' -i_dynamic';;
-		esac
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-		_LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared'"$tmp_idyn"' $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-		;;
-	    esac
-	    _LT_TAGVAR(archive_cmds_need_lc, $1)=no
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	    _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
-	    _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive$convenience $wl--no-whole-archive'
-	    ;;
-          pgCC* | pgcpp*)
-            # Portland Group C++ compiler
-	    case `$CC -V` in
-	    *pgCC\ [[1-5]].* | *pgcpp\ [[1-5]].*)
-	      _LT_TAGVAR(prelink_cmds, $1)='tpldir=Template.dir~
-               rm -rf $tpldir~
-               $CC --prelink_objects --instantiation_dir $tpldir $objs $libobjs $compile_deplibs~
-               compile_command="$compile_command `find $tpldir -name \*.o | sort | $NL2SP`"'
-	      _LT_TAGVAR(old_archive_cmds, $1)='tpldir=Template.dir~
-                rm -rf $tpldir~
-                $CC --prelink_objects --instantiation_dir $tpldir $oldobjs$old_deplibs~
-                $AR $AR_FLAGS $oldlib$oldobjs$old_deplibs `find $tpldir -name \*.o | sort | $NL2SP`~
-                $RANLIB $oldlib'
-	      _LT_TAGVAR(archive_cmds, $1)='tpldir=Template.dir~
-                rm -rf $tpldir~
-                $CC --prelink_objects --instantiation_dir $tpldir $predep_objects $libobjs $deplibs $convenience $postdep_objects~
-                $CC -shared $pic_flag $predep_objects $libobjs $deplibs `find $tpldir -name \*.o | sort | $NL2SP` $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
-	      _LT_TAGVAR(archive_expsym_cmds, $1)='tpldir=Template.dir~
-                rm -rf $tpldir~
-                $CC --prelink_objects --instantiation_dir $tpldir $predep_objects $libobjs $deplibs $convenience $postdep_objects~
-                $CC -shared $pic_flag $predep_objects $libobjs $deplibs `find $tpldir -name \*.o | sort | $NL2SP` $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-	      ;;
-	    *) # Version 6 and above use weak symbols
-	      _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
-	      _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname $wl-retain-symbols-file $wl$export_symbols -o $lib'
-	      ;;
-	    esac
-
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl--rpath $wl$libdir'
-	    _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
-	    _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`for conv in $convenience\"\"; do test  -n \"$conv\" && new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-            ;;
-	  cxx*)
-	    # Compaq C++
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname -o $lib'
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname  -o $lib $wl-retain-symbols-file $wl$export_symbols'
-
-	    runpath_var=LD_RUN_PATH
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir'
-	    _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-
-	    # Commands to make compiler produce verbose output that lists
-	    # what "hidden" libraries, object files and flags are used when
-	    # linking a shared library.
-	    #
-	    # There doesn't appear to be a way to prevent this compiler from
-	    # explicitly linking system object files so we need to strip them
-	    # from the output so that they don't get included in the library
-	    # dependencies.
-	    output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP "ld"`; templist=`func_echo_all "$templist" | $SED "s/\(^.*ld.*\)\( .*ld .*$\)/\1/"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "X$list" | $Xsed'
-	    ;;
-	  xl* | mpixl* | bgxl*)
-	    # IBM XL 8.0 on PPC, with GNU ld
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-	    _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl--export-dynamic'
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -qmkshrobj $libobjs $deplibs $compiler_flags $wl-soname $wl$soname -o $lib'
-	    if test yes = "$supports_anon_versioning"; then
-	      _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $output_objdir/$libname.ver~
-                cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $output_objdir/$libname.ver~
-                echo "local: *; };" >> $output_objdir/$libname.ver~
-                $CC -qmkshrobj $libobjs $deplibs $compiler_flags $wl-soname $wl$soname $wl-version-script $wl$output_objdir/$libname.ver -o $lib'
-	    fi
-	    ;;
-	  *)
-	    case `$CC -V 2>&1 | $SED 5q` in
-	    *Sun\ C*)
-	      # Sun C++ 5.9
-	      _LT_TAGVAR(no_undefined_flag, $1)=' -zdefs'
-	      _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	      _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-retain-symbols-file $wl$export_symbols'
-	      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-	      _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl--whole-archive`new_convenience=; for conv in $convenience\"\"; do test -z \"$conv\" || new_convenience=\"$new_convenience,$conv\"; done; func_echo_all \"$new_convenience\"` $wl--no-whole-archive'
-	      _LT_TAGVAR(compiler_needs_object, $1)=yes
-
-	      # Not sure whether something based on
-	      # $CC $CFLAGS -v conftest.$objext -o libconftest$shared_ext 2>&1
-	      # would be better.
-	      output_verbose_link_cmd='func_echo_all'
-
-	      # Archives containing C++ object files must be created using
-	      # "CC -xar", where "CC" is the Sun C++ compiler.  This is
-	      # necessary to make sure instantiated templates are included
-	      # in the archive.
-	      _LT_TAGVAR(old_archive_cmds, $1)='$CC -xar -o $oldlib $oldobjs'
-	      ;;
-	    esac
-	    ;;
-	esac
-	;;
-
-      lynxos*)
-        # FIXME: insert proper C++ library support
-	_LT_TAGVAR(ld_shlibs, $1)=no
-	;;
-
-      m88k*)
-        # FIXME: insert proper C++ library support
-        _LT_TAGVAR(ld_shlibs, $1)=no
-	;;
-
-      mvs*)
-        case $cc_basename in
-          cxx*)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-	  *)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-	esac
-	;;
-
-      netbsd*)
-        if echo __ELF__ | $CC -E - | $GREP __ELF__ >/dev/null; then
-	  _LT_TAGVAR(archive_cmds, $1)='$LD -Bshareable  -o $lib $predep_objects $libobjs $deplibs $postdep_objects $linker_flags'
-	  wlarc=
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-	  _LT_TAGVAR(hardcode_direct, $1)=yes
-	  _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	fi
-	# Workaround some broken pre-1.5 toolchains
-	output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP conftest.$objext | $SED -e "s:-lgcc -lc -lgcc::"'
-	;;
-
-      *nto* | *qnx*)
-        _LT_TAGVAR(ld_shlibs, $1)=yes
-	;;
-
-      openbsd* | bitrig*)
-	if test -f /usr/libexec/ld.so; then
-	  _LT_TAGVAR(hardcode_direct, $1)=yes
-	  _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	  _LT_TAGVAR(hardcode_direct_absolute, $1)=yes
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -o $lib'
-	  _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	  if test -z "`echo __ELF__ | $CC -E - | grep __ELF__`"; then
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $pic_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-retain-symbols-file,$export_symbols -o $lib'
-	    _LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-E'
-	    _LT_TAGVAR(whole_archive_flag_spec, $1)=$wlarc'--whole-archive$convenience '$wlarc'--no-whole-archive'
-	  fi
-	  output_verbose_link_cmd=func_echo_all
-	else
-	  _LT_TAGVAR(ld_shlibs, $1)=no
-	fi
-	;;
-
-      osf3* | osf4* | osf5*)
-        case $cc_basename in
-          KCC*)
-	    # Kuck and Associates, Inc. (KAI) C++ Compiler
-
-	    # KCC will only create a shared library if the output file
-	    # ends with ".so" (or ".sl" for HP-UX), so rename the library
-	    # to its proper name (with version) after linking.
-	    _LT_TAGVAR(archive_cmds, $1)='tempext=`echo $shared_ext | $SED -e '\''s/\([[^()0-9A-Za-z{}]]\)/\\\\\1/g'\''`; templib=`echo "$lib" | $SED -e "s/\$tempext\..*/.so/"`; $CC $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags --soname $soname -o \$templib; mv \$templib $lib'
-
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath,$libdir'
-	    _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-
-	    # Archives containing C++ object files must be created using
-	    # the KAI C++ compiler.
-	    case $host in
-	      osf3*) _LT_TAGVAR(old_archive_cmds, $1)='$CC -Bstatic -o $oldlib $oldobjs' ;;
-	      *) _LT_TAGVAR(old_archive_cmds, $1)='$CC -o $oldlib $oldobjs' ;;
-	    esac
-	    ;;
-          RCC*)
-	    # Rational C++ 2.4.1
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          cxx*)
-	    case $host in
-	      osf3*)
-	        _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*'
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $soname `test -n "$verstring" && func_echo_all "$wl-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	        _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-		;;
-	      *)
-	        _LT_TAGVAR(allow_undefined_flag, $1)=' -expect_unresolved \*'
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname `test -n "$verstring" && func_echo_all "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib'
-	        _LT_TAGVAR(archive_expsym_cmds, $1)='for i in `cat $export_symbols`; do printf "%s %s\\n" -exported_symbol "\$i" >> $lib.exp; done~
-                  echo "-hidden">> $lib.exp~
-                  $CC -shared$allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags -msym -soname $soname $wl-input $wl$lib.exp  `test -n "$verstring" && $ECHO "-set_version $verstring"` -update_registry $output_objdir/so_locations -o $lib~
-                  $RM $lib.exp'
-	        _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-rpath $libdir'
-		;;
-	    esac
-
-	    _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-
-	    # Commands to make compiler produce verbose output that lists
-	    # what "hidden" libraries, object files and flags are used when
-	    # linking a shared library.
-	    #
-	    # There doesn't appear to be a way to prevent this compiler from
-	    # explicitly linking system object files so we need to strip them
-	    # from the output so that they don't get included in the library
-	    # dependencies.
-	    output_verbose_link_cmd='templist=`$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP "ld" | $GREP -v "ld:"`; templist=`func_echo_all "$templist" | $SED "s/\(^.*ld.*\)\( .*ld.*$\)/\1/"`; list= ; for z in $templist; do case $z in conftest.$objext) list="$list $z";; *.$objext);; *) list="$list $z";;esac; done; func_echo_all "$list"'
-	    ;;
-	  *)
-	    if test yes,no = "$GXX,$with_gnu_ld"; then
-	      _LT_TAGVAR(allow_undefined_flag, $1)=' $wl-expect_unresolved $wl\*'
-	      case $host in
-	        osf3*)
-	          _LT_TAGVAR(archive_cmds, $1)='$CC -shared -nostdlib $allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-		  ;;
-	        *)
-	          _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $allow_undefined_flag $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-msym $wl-soname $wl$soname `test -n "$verstring" && func_echo_all "$wl-set_version $wl$verstring"` $wl-update_registry $wl$output_objdir/so_locations -o $lib'
-		  ;;
-	      esac
-
-	      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-rpath $wl$libdir'
-	      _LT_TAGVAR(hardcode_libdir_separator, $1)=:
-
-	      # Commands to make compiler produce verbose output that lists
-	      # what "hidden" libraries, object files and flags are used when
-	      # linking a shared library.
-	      output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"'
-
-	    else
-	      # FIXME: insert proper C++ library support
-	      _LT_TAGVAR(ld_shlibs, $1)=no
-	    fi
-	    ;;
-        esac
-        ;;
-
-      psos*)
-        # FIXME: insert proper C++ library support
-        _LT_TAGVAR(ld_shlibs, $1)=no
-        ;;
-
-      sunos4*)
-        case $cc_basename in
-          CC*)
-	    # Sun C++ 4.x
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          lcc*)
-	    # Lucid
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          *)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-        esac
-        ;;
-
-      solaris*)
-        case $cc_basename in
-          CC* | sunCC*)
-	    # Sun C++ 4.2, 5.x and Centerline C++
-            _LT_TAGVAR(archive_cmds_need_lc,$1)=yes
-	    _LT_TAGVAR(no_undefined_flag, $1)=' -zdefs'
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -G$allow_undefined_flag -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags'
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-              $CC -G$allow_undefined_flag $wl-M $wl$lib.exp -h$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp'
-
-	    _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='-R$libdir'
-	    _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	    case $host_os in
-	      solaris2.[[0-5]] | solaris2.[[0-5]].*) ;;
-	      *)
-		# The compiler driver will combine and reorder linker options,
-		# but understands '-z linker_flag'.
-	        # Supported since Solaris 2.6 (maybe 2.5.1?)
-		_LT_TAGVAR(whole_archive_flag_spec, $1)='-z allextract$convenience -z defaultextract'
-	        ;;
-	    esac
-	    _LT_TAGVAR(link_all_deplibs, $1)=yes
-
-	    output_verbose_link_cmd='func_echo_all'
-
-	    # Archives containing C++ object files must be created using
-	    # "CC -xar", where "CC" is the Sun C++ compiler.  This is
-	    # necessary to make sure instantiated templates are included
-	    # in the archive.
-	    _LT_TAGVAR(old_archive_cmds, $1)='$CC -xar -o $oldlib $oldobjs'
-	    ;;
-          gcx*)
-	    # Green Hills C++ Compiler
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -shared $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib'
-
-	    # The C++ compiler must be used to create the archive.
-	    _LT_TAGVAR(old_archive_cmds, $1)='$CC $LDFLAGS -archive -o $oldlib $oldobjs'
-	    ;;
-          *)
-	    # GNU C++ compiler with Solaris linker
-	    if test yes,no = "$GXX,$with_gnu_ld"; then
-	      _LT_TAGVAR(no_undefined_flag, $1)=' $wl-z ${wl}defs'
-	      if $CC --version | $GREP -v '^2\.7' > /dev/null; then
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -shared $pic_flag -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib'
-	        _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-                  $CC -shared $pic_flag -nostdlib $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp'
-
-	        # Commands to make compiler produce verbose output that lists
-	        # what "hidden" libraries, object files and flags are used when
-	        # linking a shared library.
-	        output_verbose_link_cmd='$CC -shared $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"'
-	      else
-	        # g++ 2.7 appears to require '-G' NOT '-shared' on this
-	        # platform.
-	        _LT_TAGVAR(archive_cmds, $1)='$CC -G -nostdlib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags $wl-h $wl$soname -o $lib'
-	        _LT_TAGVAR(archive_expsym_cmds, $1)='echo "{ global:" > $lib.exp~cat $export_symbols | $SED -e "s/\(.*\)/\1;/" >> $lib.exp~echo "local: *; };" >> $lib.exp~
-                  $CC -G -nostdlib $wl-M $wl$lib.exp $wl-h $wl$soname -o $lib $predep_objects $libobjs $deplibs $postdep_objects $compiler_flags~$RM $lib.exp'
-
-	        # Commands to make compiler produce verbose output that lists
-	        # what "hidden" libraries, object files and flags are used when
-	        # linking a shared library.
-	        output_verbose_link_cmd='$CC -G $CFLAGS -v conftest.$objext 2>&1 | $GREP -v "^Configured with:" | $GREP "\-L"'
-	      fi
-
-	      _LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R $wl$libdir'
-	      case $host_os in
-		solaris2.[[0-5]] | solaris2.[[0-5]].*) ;;
-		*)
-		  _LT_TAGVAR(whole_archive_flag_spec, $1)='$wl-z ${wl}allextract$convenience $wl-z ${wl}defaultextract'
-		  ;;
-	      esac
-	    fi
-	    ;;
-        esac
-        ;;
-
-    sysv4*uw2* | sysv5OpenUNIX* | sysv5UnixWare7.[[01]].[[10]]* | unixware7* | sco3.2v5.0.[[024]]*)
-      _LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text'
-      _LT_TAGVAR(archive_cmds_need_lc, $1)=no
-      _LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-      runpath_var='LD_RUN_PATH'
-
-      case $cc_basename in
-        CC*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-	*)
-	  _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	  ;;
-      esac
-      ;;
-
-      sysv5* | sco3.2v5* | sco5v6*)
-	# Note: We CANNOT use -z defs as we might desire, because we do not
-	# link with -lc, and that would cause any symbols used from libc to
-	# always be unresolved, which means just about no library would
-	# ever link correctly.  If we're not using GNU ld we use -z text
-	# though, which does catch some bad symbols but isn't as heavy-handed
-	# as -z defs.
-	_LT_TAGVAR(no_undefined_flag, $1)='$wl-z,text'
-	_LT_TAGVAR(allow_undefined_flag, $1)='$wl-z,nodefs'
-	_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-	_LT_TAGVAR(hardcode_shlibpath_var, $1)=no
-	_LT_TAGVAR(hardcode_libdir_flag_spec, $1)='$wl-R,$libdir'
-	_LT_TAGVAR(hardcode_libdir_separator, $1)=':'
-	_LT_TAGVAR(link_all_deplibs, $1)=yes
-	_LT_TAGVAR(export_dynamic_flag_spec, $1)='$wl-Bexport'
-	runpath_var='LD_RUN_PATH'
-
-	case $cc_basename in
-          CC*)
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -G $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -G $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	    _LT_TAGVAR(old_archive_cmds, $1)='$CC -Tprelink_objects $oldobjs~
-              '"$_LT_TAGVAR(old_archive_cmds, $1)"
-	    _LT_TAGVAR(reload_cmds, $1)='$CC -Tprelink_objects $reload_objs~
-              '"$_LT_TAGVAR(reload_cmds, $1)"
-	    ;;
-	  *)
-	    _LT_TAGVAR(archive_cmds, $1)='$CC -shared $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	    _LT_TAGVAR(archive_expsym_cmds, $1)='$CC -shared $wl-Bexport:$export_symbols $wl-h,$soname -o $lib $libobjs $deplibs $compiler_flags'
-	    ;;
-	esac
-      ;;
-
-      tandem*)
-        case $cc_basename in
-          NCC*)
-	    # NonStop-UX NCC 3.20
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-          *)
-	    # FIXME: insert proper C++ library support
-	    _LT_TAGVAR(ld_shlibs, $1)=no
-	    ;;
-        esac
-        ;;
-
-      vxworks*)
-        # FIXME: insert proper C++ library support
-        _LT_TAGVAR(ld_shlibs, $1)=no
-        ;;
-
-      *)
-        # FIXME: insert proper C++ library support
-        _LT_TAGVAR(ld_shlibs, $1)=no
-        ;;
-    esac
-
-    AC_MSG_RESULT([$_LT_TAGVAR(ld_shlibs, $1)])
-    test no = "$_LT_TAGVAR(ld_shlibs, $1)" && can_build_shared=no
-
-    _LT_TAGVAR(GCC, $1)=$GXX
-    _LT_TAGVAR(LD, $1)=$LD
-
-    ## CAVEAT EMPTOR:
-    ## There is no encapsulation within the following macros, do not change
-    ## the running order or otherwise move them around unless you know exactly
-    ## what you are doing...
-    _LT_SYS_HIDDEN_LIBDEPS($1)
-    _LT_COMPILER_PIC($1)
-    _LT_COMPILER_C_O($1)
-    _LT_COMPILER_FILE_LOCKS($1)
-    _LT_LINKER_SHLIBS($1)
-    _LT_SYS_DYNAMIC_LINKER($1)
-    _LT_LINKER_HARDCODE_LIBPATH($1)
-
-    _LT_CONFIG($1)
-  fi # test -n "$compiler"
-
-  CC=$lt_save_CC
-  CFLAGS=$lt_save_CFLAGS
-  LDCXX=$LD
-  LD=$lt_save_LD
-  GCC=$lt_save_GCC
-  with_gnu_ld=$lt_save_with_gnu_ld
-  lt_cv_path_LDCXX=$lt_cv_path_LD
-  lt_cv_path_LD=$lt_save_path_LD
-  lt_cv_prog_gnu_ldcxx=$lt_cv_prog_gnu_ld
-  lt_cv_prog_gnu_ld=$lt_save_with_gnu_ld
-fi # test yes != "$_lt_caught_CXX_error"
-
-AC_LANG_POP
-])# _LT_LANG_CXX_CONFIG
-
-
-# _LT_FUNC_STRIPNAME_CNF
-# ----------------------
-# func_stripname_cnf prefix suffix name
-# strip PREFIX and SUFFIX off of NAME.
-# PREFIX and SUFFIX must not contain globbing or regex special
-# characters, hashes, percent signs, but SUFFIX may contain a leading
-# dot (in which case that matches only a dot).
-#
-# This function is identical to the (non-XSI) version of func_stripname,
-# except this one can be used by m4 code that may be executed by configure,
-# rather than the libtool script.
-m4_defun([_LT_FUNC_STRIPNAME_CNF],[dnl
-AC_REQUIRE([_LT_DECL_SED])
-AC_REQUIRE([_LT_PROG_ECHO_BACKSLASH])
-func_stripname_cnf ()
-{
-  case @S|@2 in
-  .*) func_stripname_result=`$ECHO "@S|@3" | $SED "s%^@S|@1%%; s%\\\\@S|@2\$%%"`;;
-  *)  func_stripname_result=`$ECHO "@S|@3" | $SED "s%^@S|@1%%; s%@S|@2\$%%"`;;
-  esac
-} # func_stripname_cnf
-])# _LT_FUNC_STRIPNAME_CNF
-
-
-# _LT_SYS_HIDDEN_LIBDEPS([TAGNAME])
-# ---------------------------------
-# Figure out "hidden" library dependencies from verbose
-# compiler output when linking a shared library.
-# Parse the compiler output and extract the necessary
-# objects, libraries and library flags.
-m4_defun([_LT_SYS_HIDDEN_LIBDEPS],
-[m4_require([_LT_FILEUTILS_DEFAULTS])dnl
-AC_REQUIRE([_LT_FUNC_STRIPNAME_CNF])dnl
-# Dependencies to place before and after the object being linked:
-_LT_TAGVAR(predep_objects, $1)=
-_LT_TAGVAR(postdep_objects, $1)=
-_LT_TAGVAR(predeps, $1)=
-_LT_TAGVAR(postdeps, $1)=
-_LT_TAGVAR(compiler_lib_search_path, $1)=
-
-dnl we can't use the lt_simple_compile_test_code here,
-dnl because it contains code intended for an executable,
-dnl not a library.  It's possible we should let each
-dnl tag define a new lt_????_link_test_code variable,
-dnl but it's only used here...
-m4_if([$1], [], [cat > conftest.$ac_ext <<_LT_EOF
-int a;
-void foo (void) { a = 0; }
-_LT_EOF
-], [$1], [CXX], [cat > conftest.$ac_ext <<_LT_EOF
-class Foo
-{
-public:
-  Foo (void) { a = 0; }
-private:
-  int a;
-};
-_LT_EOF
-], [$1], [F77], [cat > conftest.$ac_ext <<_LT_EOF
-      subroutine foo
-      implicit none
-      integer*4 a
-      a=0
-      return
-      end
-_LT_EOF
-], [$1], [FC], [cat > conftest.$ac_ext <<_LT_EOF
-      subroutine foo
-      implicit none
-      integer a
-      a=0
-      return
-      end
-_LT_EOF
-], [$1], [GCJ], [cat > conftest.$ac_ext <<_LT_EOF
-public class foo {
-  private int a;
-  public void bar (void) {
-    a = 0;
-  }
-};
-_LT_EOF
-], [$1], [GO], [cat > conftest.$ac_ext <<_LT_EOF
-package foo
-func foo() {
-}
-_LT_EOF
-])
-
-_lt_libdeps_save_CFLAGS=$CFLAGS
-case "$CC $CFLAGS " in #(
-*\ -flto*\ *) CFLAGS="$CFLAGS -fno-lto" ;;
-*\ -fwhopr*\ *) CFLAGS="$CFLAGS -fno-whopr" ;;
-*\ -fuse-linker-plugin*\ *) CFLAGS="$CFLAGS -fno-use-linker-plugin" ;;
-esac
-
-dnl Parse the compiler output and extract the necessary
-dnl objects, libraries and library flags.
-if AC_TRY_EVAL(ac_compile); then
-  # Parse the compiler output and extract the necessary
-  # objects, libraries and library flags.
-
-  # Sentinel used to keep track of whether or not we are before
-  # the conftest object file.
-  pre_test_object_deps_done=no
-
-  for p in `eval "$output_verbose_link_cmd"`; do
-    case $prev$p in
-
-    -L* | -R* | -l*)
-       # Some compilers place space between "-{L,R}" and the path.
-       # Remove the space.
-       if test x-L = "$p" ||
-          test x-R = "$p"; then
-	 prev=$p
-	 continue
-       fi
-
-       # Expand the sysroot to ease extracting the directories later.
-       if test -z "$prev"; then
-         case $p in
-         -L*) func_stripname_cnf '-L' '' "$p"; prev=-L; p=$func_stripname_result ;;
-         -R*) func_stripname_cnf '-R' '' "$p"; prev=-R; p=$func_stripname_result ;;
-         -l*) func_stripname_cnf '-l' '' "$p"; prev=-l; p=$func_stripname_result ;;
-         esac
-       fi
-       case $p in
-       =*) func_stripname_cnf '=' '' "$p"; p=$lt_sysroot$func_stripname_result ;;
-       esac
-       if test no = "$pre_test_object_deps_done"; then
-	 case $prev in
-	 -L | -R)
-	   # Internal compiler library paths should come after those
-	   # provided the user.  The postdeps already come after the
-	   # user supplied libs so there is no need to process them.
-	   if test -z "$_LT_TAGVAR(compiler_lib_search_path, $1)"; then
-	     _LT_TAGVAR(compiler_lib_search_path, $1)=$prev$p
-	   else
-	     _LT_TAGVAR(compiler_lib_search_path, $1)="${_LT_TAGVAR(compiler_lib_search_path, $1)} $prev$p"
-	   fi
-	   ;;
-	 # The "-l" case would never come before the object being
-	 # linked, so don't bother handling this case.
-	 esac
-       else
-	 if test -z "$_LT_TAGVAR(postdeps, $1)"; then
-	   _LT_TAGVAR(postdeps, $1)=$prev$p
-	 else
-	   _LT_TAGVAR(postdeps, $1)="${_LT_TAGVAR(postdeps, $1)} $prev$p"
-	 fi
-       fi
-       prev=
-       ;;
-
-    *.lto.$objext) ;; # Ignore GCC LTO objects
-    *.$objext)
-       # This assumes that the test object file only shows up
-       # once in the compiler output.
-       if test "$p" = "conftest.$objext"; then
-	 pre_test_object_deps_done=yes
-	 continue
-       fi
-
-       if test no = "$pre_test_object_deps_done"; then
-	 if test -z "$_LT_TAGVAR(predep_objects, $1)"; then
-	   _LT_TAGVAR(predep_objects, $1)=$p
-	 else
-	   _LT_TAGVAR(predep_objects, $1)="$_LT_TAGVAR(predep_objects, $1) $p"
-	 fi
-       else
-	 if test -z "$_LT_TAGVAR(postdep_objects, $1)"; then
-	   _LT_TAGVAR(postdep_objects, $1)=$p
-	 else
-	   _LT_TAGVAR(postdep_objects, $1)="$_LT_TAGVAR(postdep_objects, $1) $p"
-	 fi
-       fi
-       ;;
-
-    *) ;; # Ignore the rest.
-
-    esac
-  done
-
-  # Clean up.
-  rm -f a.out a.exe
-else
-  echo "libtool.m4: error: problem compiling $1 test program"
-fi
-
-$RM -f confest.$objext
-CFLAGS=$_lt_libdeps_save_CFLAGS
-
-# PORTME: override above test on systems where it is broken
-m4_if([$1], [CXX],
-[case $host_os in
-interix[[3-9]]*)
-  # Interix 3.5 installs completely hosed .la files for C++, so rather than
-  # hack all around it, let's just trust "g++" to DTRT.
-  _LT_TAGVAR(predep_objects,$1)=
-  _LT_TAGVAR(postdep_objects,$1)=
-  _LT_TAGVAR(postdeps,$1)=
-  ;;
-esac
-])
-
-case " $_LT_TAGVAR(postdeps, $1) " in
-*" -lc "*) _LT_TAGVAR(archive_cmds_need_lc, $1)=no ;;
-esac
- _LT_TAGVAR(compiler_lib_search_dirs, $1)=
-if test -n "${_LT_TAGVAR(compiler_lib_search_path, $1)}"; then
- _LT_TAGVAR(compiler_lib_search_dirs, $1)=`echo " ${_LT_TAGVAR(compiler_lib_search_path, $1)}" | $SED -e 's! -L! !g' -e 's!^ !!'`
-fi
-_LT_TAGDECL([], [compiler_lib_search_dirs], [1],
-    [The directories searched by this compiler when creating a shared library])
-_LT_TAGDECL([], [predep_objects], [1],
-    [Dependencies to place before and after the objects being linked to
-    create a shared library])
-_LT_TAGDECL([], [postdep_objects], [1])
-_LT_TAGDECL([], [predeps], [1])
-_LT_TAGDECL([], [postdeps], [1])
-_LT_TAGDECL([], [compiler_lib_search_path], [1],
-    [The library search path used internally by the compiler when linking
-    a shared library])
-])# _LT_SYS_HIDDEN_LIBDEPS
-
-
-# _LT_LANG_F77_CONFIG([TAG])
-# --------------------------
-# Ensure that the configuration variables for a Fortran 77 compiler are
-# suitably defined.  These variables are subsequently used by _LT_CONFIG
-# to write the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_F77_CONFIG],
-[AC_LANG_PUSH(Fortran 77)
-if test -z "$F77" || test no = "$F77"; then
-  _lt_disable_F77=yes
-fi
-
-_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-_LT_TAGVAR(allow_undefined_flag, $1)=
-_LT_TAGVAR(always_export_symbols, $1)=no
-_LT_TAGVAR(archive_expsym_cmds, $1)=
-_LT_TAGVAR(export_dynamic_flag_spec, $1)=
-_LT_TAGVAR(hardcode_direct, $1)=no
-_LT_TAGVAR(hardcode_direct_absolute, $1)=no
-_LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
-_LT_TAGVAR(hardcode_libdir_separator, $1)=
-_LT_TAGVAR(hardcode_minus_L, $1)=no
-_LT_TAGVAR(hardcode_automatic, $1)=no
-_LT_TAGVAR(inherit_rpath, $1)=no
-_LT_TAGVAR(module_cmds, $1)=
-_LT_TAGVAR(module_expsym_cmds, $1)=
-_LT_TAGVAR(link_all_deplibs, $1)=unknown
-_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
-_LT_TAGVAR(reload_flag, $1)=$reload_flag
-_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
-_LT_TAGVAR(no_undefined_flag, $1)=
-_LT_TAGVAR(whole_archive_flag_spec, $1)=
-_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no
-
-# Source file extension for f77 test sources.
-ac_ext=f
-
-# Object file extension for compiled f77 test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# No sense in running all these tests if we already determined that
-# the F77 compiler isn't working.  Some variables (like enable_shared)
-# are currently assumed to apply to all compilers on this platform,
-# and will be corrupted by setting them based on a non-working compiler.
-if test yes != "$_lt_disable_F77"; then
-  # Code to be used in simple compile tests
-  lt_simple_compile_test_code="\
-      subroutine t
-      return
-      end
-"
-
-  # Code to be used in simple link tests
-  lt_simple_link_test_code="\
-      program t
-      end
-"
-
-  # ltmain only uses $CC for tagged configurations so make sure $CC is set.
-  _LT_TAG_COMPILER
-
-  # save warnings/boilerplate of simple test code
-  _LT_COMPILER_BOILERPLATE
-  _LT_LINKER_BOILERPLATE
-
-  # Allow CC to be a program name with arguments.
-  lt_save_CC=$CC
-  lt_save_GCC=$GCC
-  lt_save_CFLAGS=$CFLAGS
-  CC=${F77-"f77"}
-  CFLAGS=$FFLAGS
-  compiler=$CC
-  _LT_TAGVAR(compiler, $1)=$CC
-  _LT_CC_BASENAME([$compiler])
-  GCC=$G77
-  if test -n "$compiler"; then
-    AC_MSG_CHECKING([if libtool supports shared libraries])
-    AC_MSG_RESULT([$can_build_shared])
-
-    AC_MSG_CHECKING([whether to build shared libraries])
-    test no = "$can_build_shared" && enable_shared=no
-
-    # On AIX, shared libraries and static libraries use the same namespace, and
-    # are all built from PIC.
-    case $host_os in
-      aix3*)
-        test yes = "$enable_shared" && enable_static=no
-        if test -n "$RANLIB"; then
-          archive_cmds="$archive_cmds~\$RANLIB \$lib"
-          postinstall_cmds='$RANLIB $lib'
-        fi
-        ;;
-      aix[[4-9]]*)
-	if test ia64 != "$host_cpu"; then
-	  case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
-	  yes,aix,yes) ;;		# shared object as lib.so file only
-	  yes,svr4,*) ;;		# shared object as lib.so archive member only
-	  yes,*) enable_static=no ;;	# shared object in lib.a archive as well
-	  esac
-	fi
-        ;;
-    esac
-    AC_MSG_RESULT([$enable_shared])
-
-    AC_MSG_CHECKING([whether to build static libraries])
-    # Make sure either enable_shared or enable_static is yes.
-    test yes = "$enable_shared" || enable_static=yes
-    AC_MSG_RESULT([$enable_static])
-
-    _LT_TAGVAR(GCC, $1)=$G77
-    _LT_TAGVAR(LD, $1)=$LD
-
-    ## CAVEAT EMPTOR:
-    ## There is no encapsulation within the following macros, do not change
-    ## the running order or otherwise move them around unless you know exactly
-    ## what you are doing...
-    _LT_COMPILER_PIC($1)
-    _LT_COMPILER_C_O($1)
-    _LT_COMPILER_FILE_LOCKS($1)
-    _LT_LINKER_SHLIBS($1)
-    _LT_SYS_DYNAMIC_LINKER($1)
-    _LT_LINKER_HARDCODE_LIBPATH($1)
-
-    _LT_CONFIG($1)
-  fi # test -n "$compiler"
-
-  GCC=$lt_save_GCC
-  CC=$lt_save_CC
-  CFLAGS=$lt_save_CFLAGS
-fi # test yes != "$_lt_disable_F77"
-
-AC_LANG_POP
-])# _LT_LANG_F77_CONFIG
-
-
-# _LT_LANG_FC_CONFIG([TAG])
-# -------------------------
-# Ensure that the configuration variables for a Fortran compiler are
-# suitably defined.  These variables are subsequently used by _LT_CONFIG
-# to write the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_FC_CONFIG],
-[AC_LANG_PUSH(Fortran)
-
-if test -z "$FC" || test no = "$FC"; then
-  _lt_disable_FC=yes
-fi
-
-_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-_LT_TAGVAR(allow_undefined_flag, $1)=
-_LT_TAGVAR(always_export_symbols, $1)=no
-_LT_TAGVAR(archive_expsym_cmds, $1)=
-_LT_TAGVAR(export_dynamic_flag_spec, $1)=
-_LT_TAGVAR(hardcode_direct, $1)=no
-_LT_TAGVAR(hardcode_direct_absolute, $1)=no
-_LT_TAGVAR(hardcode_libdir_flag_spec, $1)=
-_LT_TAGVAR(hardcode_libdir_separator, $1)=
-_LT_TAGVAR(hardcode_minus_L, $1)=no
-_LT_TAGVAR(hardcode_automatic, $1)=no
-_LT_TAGVAR(inherit_rpath, $1)=no
-_LT_TAGVAR(module_cmds, $1)=
-_LT_TAGVAR(module_expsym_cmds, $1)=
-_LT_TAGVAR(link_all_deplibs, $1)=unknown
-_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
-_LT_TAGVAR(reload_flag, $1)=$reload_flag
-_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
-_LT_TAGVAR(no_undefined_flag, $1)=
-_LT_TAGVAR(whole_archive_flag_spec, $1)=
-_LT_TAGVAR(enable_shared_with_static_runtimes, $1)=no
-
-# Source file extension for fc test sources.
-ac_ext=${ac_fc_srcext-f}
-
-# Object file extension for compiled fc test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# No sense in running all these tests if we already determined that
-# the FC compiler isn't working.  Some variables (like enable_shared)
-# are currently assumed to apply to all compilers on this platform,
-# and will be corrupted by setting them based on a non-working compiler.
-if test yes != "$_lt_disable_FC"; then
-  # Code to be used in simple compile tests
-  lt_simple_compile_test_code="\
-      subroutine t
-      return
-      end
-"
-
-  # Code to be used in simple link tests
-  lt_simple_link_test_code="\
-      program t
-      end
-"
-
-  # ltmain only uses $CC for tagged configurations so make sure $CC is set.
-  _LT_TAG_COMPILER
-
-  # save warnings/boilerplate of simple test code
-  _LT_COMPILER_BOILERPLATE
-  _LT_LINKER_BOILERPLATE
-
-  # Allow CC to be a program name with arguments.
-  lt_save_CC=$CC
-  lt_save_GCC=$GCC
-  lt_save_CFLAGS=$CFLAGS
-  CC=${FC-"f95"}
-  CFLAGS=$FCFLAGS
-  compiler=$CC
-  GCC=$ac_cv_fc_compiler_gnu
-
-  _LT_TAGVAR(compiler, $1)=$CC
-  _LT_CC_BASENAME([$compiler])
-
-  if test -n "$compiler"; then
-    AC_MSG_CHECKING([if libtool supports shared libraries])
-    AC_MSG_RESULT([$can_build_shared])
-
-    AC_MSG_CHECKING([whether to build shared libraries])
-    test no = "$can_build_shared" && enable_shared=no
-
-    # On AIX, shared libraries and static libraries use the same namespace, and
-    # are all built from PIC.
-    case $host_os in
-      aix3*)
-        test yes = "$enable_shared" && enable_static=no
-        if test -n "$RANLIB"; then
-          archive_cmds="$archive_cmds~\$RANLIB \$lib"
-          postinstall_cmds='$RANLIB $lib'
-        fi
-        ;;
-      aix[[4-9]]*)
-	if test ia64 != "$host_cpu"; then
-	  case $enable_shared,$with_aix_soname,$aix_use_runtimelinking in
-	  yes,aix,yes) ;;		# shared object as lib.so file only
-	  yes,svr4,*) ;;		# shared object as lib.so archive member only
-	  yes,*) enable_static=no ;;	# shared object in lib.a archive as well
-	  esac
-	fi
-        ;;
-    esac
-    AC_MSG_RESULT([$enable_shared])
-
-    AC_MSG_CHECKING([whether to build static libraries])
-    # Make sure either enable_shared or enable_static is yes.
-    test yes = "$enable_shared" || enable_static=yes
-    AC_MSG_RESULT([$enable_static])
-
-    _LT_TAGVAR(GCC, $1)=$ac_cv_fc_compiler_gnu
-    _LT_TAGVAR(LD, $1)=$LD
-
-    ## CAVEAT EMPTOR:
-    ## There is no encapsulation within the following macros, do not change
-    ## the running order or otherwise move them around unless you know exactly
-    ## what you are doing...
-    _LT_SYS_HIDDEN_LIBDEPS($1)
-    _LT_COMPILER_PIC($1)
-    _LT_COMPILER_C_O($1)
-    _LT_COMPILER_FILE_LOCKS($1)
-    _LT_LINKER_SHLIBS($1)
-    _LT_SYS_DYNAMIC_LINKER($1)
-    _LT_LINKER_HARDCODE_LIBPATH($1)
-
-    _LT_CONFIG($1)
-  fi # test -n "$compiler"
-
-  GCC=$lt_save_GCC
-  CC=$lt_save_CC
-  CFLAGS=$lt_save_CFLAGS
-fi # test yes != "$_lt_disable_FC"
-
-AC_LANG_POP
-])# _LT_LANG_FC_CONFIG
-
-
-# _LT_LANG_GCJ_CONFIG([TAG])
-# --------------------------
-# Ensure that the configuration variables for the GNU Java Compiler compiler
-# are suitably defined.  These variables are subsequently used by _LT_CONFIG
-# to write the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_GCJ_CONFIG],
-[AC_REQUIRE([LT_PROG_GCJ])dnl
-AC_LANG_SAVE
-
-# Source file extension for Java test sources.
-ac_ext=java
-
-# Object file extension for compiled Java test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code="class foo {}"
-
-# Code to be used in simple link tests
-lt_simple_link_test_code='public class conftest { public static void main(String[[]] argv) {}; }'
-
-# ltmain only uses $CC for tagged configurations so make sure $CC is set.
-_LT_TAG_COMPILER
-
-# save warnings/boilerplate of simple test code
-_LT_COMPILER_BOILERPLATE
-_LT_LINKER_BOILERPLATE
-
-# Allow CC to be a program name with arguments.
-lt_save_CC=$CC
-lt_save_CFLAGS=$CFLAGS
-lt_save_GCC=$GCC
-GCC=yes
-CC=${GCJ-"gcj"}
-CFLAGS=$GCJFLAGS
-compiler=$CC
-_LT_TAGVAR(compiler, $1)=$CC
-_LT_TAGVAR(LD, $1)=$LD
-_LT_CC_BASENAME([$compiler])
-
-# GCJ did not exist at the time GCC didn't implicitly link libc in.
-_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-
-_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
-_LT_TAGVAR(reload_flag, $1)=$reload_flag
-_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
-
-## CAVEAT EMPTOR:
-## There is no encapsulation within the following macros, do not change
-## the running order or otherwise move them around unless you know exactly
-## what you are doing...
-if test -n "$compiler"; then
-  _LT_COMPILER_NO_RTTI($1)
-  _LT_COMPILER_PIC($1)
-  _LT_COMPILER_C_O($1)
-  _LT_COMPILER_FILE_LOCKS($1)
-  _LT_LINKER_SHLIBS($1)
-  _LT_LINKER_HARDCODE_LIBPATH($1)
-
-  _LT_CONFIG($1)
-fi
-
-AC_LANG_RESTORE
-
-GCC=$lt_save_GCC
-CC=$lt_save_CC
-CFLAGS=$lt_save_CFLAGS
-])# _LT_LANG_GCJ_CONFIG
-
-
-# _LT_LANG_GO_CONFIG([TAG])
-# --------------------------
-# Ensure that the configuration variables for the GNU Go compiler
-# are suitably defined.  These variables are subsequently used by _LT_CONFIG
-# to write the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_GO_CONFIG],
-[AC_REQUIRE([LT_PROG_GO])dnl
-AC_LANG_SAVE
-
-# Source file extension for Go test sources.
-ac_ext=go
-
-# Object file extension for compiled Go test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code="package main; func main() { }"
-
-# Code to be used in simple link tests
-lt_simple_link_test_code='package main; func main() { }'
-
-# ltmain only uses $CC for tagged configurations so make sure $CC is set.
-_LT_TAG_COMPILER
-
-# save warnings/boilerplate of simple test code
-_LT_COMPILER_BOILERPLATE
-_LT_LINKER_BOILERPLATE
-
-# Allow CC to be a program name with arguments.
-lt_save_CC=$CC
-lt_save_CFLAGS=$CFLAGS
-lt_save_GCC=$GCC
-GCC=yes
-CC=${GOC-"gccgo"}
-CFLAGS=$GOFLAGS
-compiler=$CC
-_LT_TAGVAR(compiler, $1)=$CC
-_LT_TAGVAR(LD, $1)=$LD
-_LT_CC_BASENAME([$compiler])
-
-# Go did not exist at the time GCC didn't implicitly link libc in.
-_LT_TAGVAR(archive_cmds_need_lc, $1)=no
-
-_LT_TAGVAR(old_archive_cmds, $1)=$old_archive_cmds
-_LT_TAGVAR(reload_flag, $1)=$reload_flag
-_LT_TAGVAR(reload_cmds, $1)=$reload_cmds
-
-## CAVEAT EMPTOR:
-## There is no encapsulation within the following macros, do not change
-## the running order or otherwise move them around unless you know exactly
-## what you are doing...
-if test -n "$compiler"; then
-  _LT_COMPILER_NO_RTTI($1)
-  _LT_COMPILER_PIC($1)
-  _LT_COMPILER_C_O($1)
-  _LT_COMPILER_FILE_LOCKS($1)
-  _LT_LINKER_SHLIBS($1)
-  _LT_LINKER_HARDCODE_LIBPATH($1)
-
-  _LT_CONFIG($1)
-fi
-
-AC_LANG_RESTORE
-
-GCC=$lt_save_GCC
-CC=$lt_save_CC
-CFLAGS=$lt_save_CFLAGS
-])# _LT_LANG_GO_CONFIG
-
-
-# _LT_LANG_RC_CONFIG([TAG])
-# -------------------------
-# Ensure that the configuration variables for the Windows resource compiler
-# are suitably defined.  These variables are subsequently used by _LT_CONFIG
-# to write the compiler configuration to 'libtool'.
-m4_defun([_LT_LANG_RC_CONFIG],
-[AC_REQUIRE([LT_PROG_RC])dnl
-AC_LANG_SAVE
-
-# Source file extension for RC test sources.
-ac_ext=rc
-
-# Object file extension for compiled RC test sources.
-objext=o
-_LT_TAGVAR(objext, $1)=$objext
-
-# Code to be used in simple compile tests
-lt_simple_compile_test_code='sample MENU { MENUITEM "&Soup", 100, CHECKED }'
-
-# Code to be used in simple link tests
-lt_simple_link_test_code=$lt_simple_compile_test_code
-
-# ltmain only uses $CC for tagged configurations so make sure $CC is set.
-_LT_TAG_COMPILER
-
-# save warnings/boilerplate of simple test code
-_LT_COMPILER_BOILERPLATE
-_LT_LINKER_BOILERPLATE
-
-# Allow CC to be a program name with arguments.
-lt_save_CC=$CC
-lt_save_CFLAGS=$CFLAGS
-lt_save_GCC=$GCC
-GCC=
-CC=${RC-"windres"}
-CFLAGS=
-compiler=$CC
-_LT_TAGVAR(compiler, $1)=$CC
-_LT_CC_BASENAME([$compiler])
-_LT_TAGVAR(lt_cv_prog_compiler_c_o, $1)=yes
-
-if test -n "$compiler"; then
-  :
-  _LT_CONFIG($1)
-fi
-
-GCC=$lt_save_GCC
-AC_LANG_RESTORE
-CC=$lt_save_CC
-CFLAGS=$lt_save_CFLAGS
-])# _LT_LANG_RC_CONFIG
-
-
-# LT_PROG_GCJ
-# -----------
-AC_DEFUN([LT_PROG_GCJ],
-[m4_ifdef([AC_PROG_GCJ], [AC_PROG_GCJ],
-  [m4_ifdef([A][M_PROG_GCJ], [A][M_PROG_GCJ],
-    [AC_CHECK_TOOL(GCJ, gcj,)
-      test set = "${GCJFLAGS+set}" || GCJFLAGS="-g -O2"
-      AC_SUBST(GCJFLAGS)])])[]dnl
-])
-
-# Old name:
-AU_ALIAS([LT_AC_PROG_GCJ], [LT_PROG_GCJ])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([LT_AC_PROG_GCJ], [])
-
-
-# LT_PROG_GO
-# ----------
-AC_DEFUN([LT_PROG_GO],
-[AC_CHECK_TOOL(GOC, gccgo,)
-])
-
-
-# LT_PROG_RC
-# ----------
-AC_DEFUN([LT_PROG_RC],
-[AC_CHECK_TOOL(RC, windres,)
-])
-
-# Old name:
-AU_ALIAS([LT_AC_PROG_RC], [LT_PROG_RC])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([LT_AC_PROG_RC], [])
-
-
-# _LT_DECL_EGREP
-# --------------
-# If we don't have a new enough Autoconf to choose the best grep
-# available, choose the one first in the user's PATH.
-m4_defun([_LT_DECL_EGREP],
-[AC_REQUIRE([AC_PROG_EGREP])dnl
-AC_REQUIRE([AC_PROG_FGREP])dnl
-test -z "$GREP" && GREP=grep
-_LT_DECL([], [GREP], [1], [A grep program that handles long lines])
-_LT_DECL([], [EGREP], [1], [An ERE matcher])
-_LT_DECL([], [FGREP], [1], [A literal string matcher])
-dnl Non-bleeding-edge autoconf doesn't subst GREP, so do it here too
-AC_SUBST([GREP])
-])
-
-
-# _LT_DECL_OBJDUMP
-# --------------
-# If we don't have a new enough Autoconf to choose the best objdump
-# available, choose the one first in the user's PATH.
-m4_defun([_LT_DECL_OBJDUMP],
-[AC_CHECK_TOOL(OBJDUMP, objdump, false)
-test -z "$OBJDUMP" && OBJDUMP=objdump
-_LT_DECL([], [OBJDUMP], [1], [An object symbol dumper])
-AC_SUBST([OBJDUMP])
-])
-
-# _LT_DECL_DLLTOOL
-# ----------------
-# Ensure DLLTOOL variable is set.
-m4_defun([_LT_DECL_DLLTOOL],
-[AC_CHECK_TOOL(DLLTOOL, dlltool, false)
-test -z "$DLLTOOL" && DLLTOOL=dlltool
-_LT_DECL([], [DLLTOOL], [1], [DLL creation program])
-AC_SUBST([DLLTOOL])
-])
-
-# _LT_DECL_FILECMD
-# ----------------
-# Check for a file(cmd) program that can be used to detect file type and magic
-m4_defun([_LT_DECL_FILECMD],
-[AC_CHECK_TOOL([FILECMD], [file], [:])
-_LT_DECL([], [FILECMD], [1], [A file(cmd) program that detects file types])
-])# _LD_DECL_FILECMD
-
-# _LT_DECL_SED
-# ------------
-# Check for a fully-functional sed program, that truncates
-# as few characters as possible.  Prefer GNU sed if found.
-m4_defun([_LT_DECL_SED],
-[AC_PROG_SED
-test -z "$SED" && SED=sed
-Xsed="$SED -e 1s/^X//"
-_LT_DECL([], [SED], [1], [A sed program that does not truncate output])
-_LT_DECL([], [Xsed], ["\$SED -e 1s/^X//"],
-    [Sed that helps us avoid accidentally triggering echo(1) options like -n])
-])# _LT_DECL_SED
-
-m4_ifndef([AC_PROG_SED], [
-############################################################
-# NOTE: This macro has been submitted for inclusion into   #
-#  GNU Autoconf as AC_PROG_SED.  When it is available in   #
-#  a released version of Autoconf we should remove this    #
-#  macro and use it instead.                               #
-############################################################
-
-m4_defun([AC_PROG_SED],
-[AC_MSG_CHECKING([for a sed that does not truncate output])
-AC_CACHE_VAL(lt_cv_path_SED,
-[# Loop through the user's path and test for sed and gsed.
-# Then use that list of sed's as ones to test for truncation.
-as_save_IFS=$IFS; IFS=$PATH_SEPARATOR
-for as_dir in $PATH
-do
-  IFS=$as_save_IFS
-  test -z "$as_dir" && as_dir=.
-  for lt_ac_prog in sed gsed; do
-    for ac_exec_ext in '' $ac_executable_extensions; do
-      if $as_executable_p "$as_dir/$lt_ac_prog$ac_exec_ext"; then
-        lt_ac_sed_list="$lt_ac_sed_list $as_dir/$lt_ac_prog$ac_exec_ext"
-      fi
-    done
-  done
-done
-IFS=$as_save_IFS
-lt_ac_max=0
-lt_ac_count=0
-# Add /usr/xpg4/bin/sed as it is typically found on Solaris
-# along with /bin/sed that truncates output.
-for lt_ac_sed in $lt_ac_sed_list /usr/xpg4/bin/sed; do
-  test ! -f "$lt_ac_sed" && continue
-  cat /dev/null > conftest.in
-  lt_ac_count=0
-  echo $ECHO_N "0123456789$ECHO_C" >conftest.in
-  # Check for GNU sed and select it if it is found.
-  if "$lt_ac_sed" --version 2>&1 < /dev/null | grep 'GNU' > /dev/null; then
-    lt_cv_path_SED=$lt_ac_sed
-    break
-  fi
-  while true; do
-    cat conftest.in conftest.in >conftest.tmp
-    mv conftest.tmp conftest.in
-    cp conftest.in conftest.nl
-    echo >>conftest.nl
-    $lt_ac_sed -e 's/a$//' < conftest.nl >conftest.out || break
-    cmp -s conftest.out conftest.nl || break
-    # 10000 chars as input seems more than enough
-    test 10 -lt "$lt_ac_count" && break
-    lt_ac_count=`expr $lt_ac_count + 1`
-    if test "$lt_ac_count" -gt "$lt_ac_max"; then
-      lt_ac_max=$lt_ac_count
-      lt_cv_path_SED=$lt_ac_sed
-    fi
-  done
-done
-])
-SED=$lt_cv_path_SED
-AC_SUBST([SED])
-AC_MSG_RESULT([$SED])
-])#AC_PROG_SED
-])#m4_ifndef
-
-# Old name:
-AU_ALIAS([LT_AC_PROG_SED], [AC_PROG_SED])
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([LT_AC_PROG_SED], [])
-
-
-# _LT_CHECK_SHELL_FEATURES
-# ------------------------
-# Find out whether the shell is Bourne or XSI compatible,
-# or has some other useful features.
-m4_defun([_LT_CHECK_SHELL_FEATURES],
-[if ( (MAIL=60; unset MAIL) || exit) >/dev/null 2>&1; then
-  lt_unset=unset
-else
-  lt_unset=false
-fi
-_LT_DECL([], [lt_unset], [0], [whether the shell understands "unset"])dnl
-
-# test EBCDIC or ASCII
-case `echo X|tr X '\101'` in
- A) # ASCII based system
-    # \n is not interpreted correctly by Solaris 8 /usr/ucb/tr
-  lt_SP2NL='tr \040 \012'
-  lt_NL2SP='tr \015\012 \040\040'
-  ;;
- *) # EBCDIC based system
-  lt_SP2NL='tr \100 \n'
-  lt_NL2SP='tr \r\n \100\100'
-  ;;
-esac
-_LT_DECL([SP2NL], [lt_SP2NL], [1], [turn spaces into newlines])dnl
-_LT_DECL([NL2SP], [lt_NL2SP], [1], [turn newlines into spaces])dnl
-])# _LT_CHECK_SHELL_FEATURES
-
-
-# _LT_PATH_CONVERSION_FUNCTIONS
-# -----------------------------
-# Determine what file name conversion functions should be used by
-# func_to_host_file (and, implicitly, by func_to_host_path).  These are needed
-# for certain cross-compile configurations and native mingw.
-m4_defun([_LT_PATH_CONVERSION_FUNCTIONS],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-AC_REQUIRE([AC_CANONICAL_BUILD])dnl
-AC_MSG_CHECKING([how to convert $build file names to $host format])
-AC_CACHE_VAL(lt_cv_to_host_file_cmd,
-[case $host in
-  *-*-mingw* )
-    case $build in
-      *-*-mingw* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_w32
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_cygwin_to_w32
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_w32
-        ;;
-    esac
-    ;;
-  *-*-cygwin* )
-    case $build in
-      *-*-mingw* ) # actually msys
-        lt_cv_to_host_file_cmd=func_convert_file_msys_to_cygwin
-        ;;
-      *-*-cygwin* )
-        lt_cv_to_host_file_cmd=func_convert_file_noop
-        ;;
-      * ) # otherwise, assume *nix
-        lt_cv_to_host_file_cmd=func_convert_file_nix_to_cygwin
-        ;;
-    esac
-    ;;
-  * ) # unhandled hosts (and "normal" native builds)
-    lt_cv_to_host_file_cmd=func_convert_file_noop
-    ;;
-esac
-])
-to_host_file_cmd=$lt_cv_to_host_file_cmd
-AC_MSG_RESULT([$lt_cv_to_host_file_cmd])
-_LT_DECL([to_host_file_cmd], [lt_cv_to_host_file_cmd],
-         [0], [convert $build file names to $host format])dnl
-
-AC_MSG_CHECKING([how to convert $build file names to toolchain format])
-AC_CACHE_VAL(lt_cv_to_tool_file_cmd,
-[#assume ordinary cross tools, or native build.
-lt_cv_to_tool_file_cmd=func_convert_file_noop
-case $host in
-  *-*-mingw* )
-    case $build in
-      *-*-mingw* ) # actually msys
-        lt_cv_to_tool_file_cmd=func_convert_file_msys_to_w32
-        ;;
-    esac
-    ;;
-esac
-])
-to_tool_file_cmd=$lt_cv_to_tool_file_cmd
-AC_MSG_RESULT([$lt_cv_to_tool_file_cmd])
-_LT_DECL([to_tool_file_cmd], [lt_cv_to_tool_file_cmd],
-         [0], [convert $build files to toolchain format])dnl
-])# _LT_PATH_CONVERSION_FUNCTIONS
diff --git a/experiments/wasm-gui/third_party/libXfixes/m4/ltoptions.m4 b/experiments/wasm-gui/third_party/libXfixes/m4/ltoptions.m4
deleted file mode 100644
index b0b5e9c21..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/m4/ltoptions.m4
+++ /dev/null
@@ -1,437 +0,0 @@
-# Helper functions for option handling.                    -*- Autoconf -*-
-#
-#   Copyright (C) 2004-2005, 2007-2009, 2011-2019, 2021-2022 Free
-#   Software Foundation, Inc.
-#   Written by Gary V. Vaughan, 2004
-#
-# This file is free software; the Free Software Foundation gives
-# unlimited permission to copy and/or distribute it, with or without
-# modifications, as long as this notice is preserved.
-
-# serial 8 ltoptions.m4
-
-# This is to help aclocal find these macros, as it can't see m4_define.
-AC_DEFUN([LTOPTIONS_VERSION], [m4_if([1])])
-
-
-# _LT_MANGLE_OPTION(MACRO-NAME, OPTION-NAME)
-# ------------------------------------------
-m4_define([_LT_MANGLE_OPTION],
-[[_LT_OPTION_]m4_bpatsubst($1__$2, [[^a-zA-Z0-9_]], [_])])
-
-
-# _LT_SET_OPTION(MACRO-NAME, OPTION-NAME)
-# ---------------------------------------
-# Set option OPTION-NAME for macro MACRO-NAME, and if there is a
-# matching handler defined, dispatch to it.  Other OPTION-NAMEs are
-# saved as a flag.
-m4_define([_LT_SET_OPTION],
-[m4_define(_LT_MANGLE_OPTION([$1], [$2]))dnl
-m4_ifdef(_LT_MANGLE_DEFUN([$1], [$2]),
-        _LT_MANGLE_DEFUN([$1], [$2]),
-    [m4_warning([Unknown $1 option '$2'])])[]dnl
-])
-
-
-# _LT_IF_OPTION(MACRO-NAME, OPTION-NAME, IF-SET, [IF-NOT-SET])
-# ------------------------------------------------------------
-# Execute IF-SET if OPTION is set, IF-NOT-SET otherwise.
-m4_define([_LT_IF_OPTION],
-[m4_ifdef(_LT_MANGLE_OPTION([$1], [$2]), [$3], [$4])])
-
-
-# _LT_UNLESS_OPTIONS(MACRO-NAME, OPTION-LIST, IF-NOT-SET)
-# -------------------------------------------------------
-# Execute IF-NOT-SET unless all options in OPTION-LIST for MACRO-NAME
-# are set.
-m4_define([_LT_UNLESS_OPTIONS],
-[m4_foreach([_LT_Option], m4_split(m4_normalize([$2])),
-	    [m4_ifdef(_LT_MANGLE_OPTION([$1], _LT_Option),
-		      [m4_define([$0_found])])])[]dnl
-m4_ifdef([$0_found], [m4_undefine([$0_found])], [$3
-])[]dnl
-])
-
-
-# _LT_SET_OPTIONS(MACRO-NAME, OPTION-LIST)
-# ----------------------------------------
-# OPTION-LIST is a space-separated list of Libtool options associated
-# with MACRO-NAME.  If any OPTION has a matching handler declared with
-# LT_OPTION_DEFINE, dispatch to that macro; otherwise complain about
-# the unknown option and exit.
-m4_defun([_LT_SET_OPTIONS],
-[# Set options
-m4_foreach([_LT_Option], m4_split(m4_normalize([$2])),
-    [_LT_SET_OPTION([$1], _LT_Option)])
-
-m4_if([$1],[LT_INIT],[
-  dnl
-  dnl Simply set some default values (i.e off) if boolean options were not
-  dnl specified:
-  _LT_UNLESS_OPTIONS([LT_INIT], [dlopen], [enable_dlopen=no
-  ])
-  _LT_UNLESS_OPTIONS([LT_INIT], [win32-dll], [enable_win32_dll=no
-  ])
-  dnl
-  dnl If no reference was made to various pairs of opposing options, then
-  dnl we run the default mode handler for the pair.  For example, if neither
-  dnl 'shared' nor 'disable-shared' was passed, we enable building of shared
-  dnl archives by default:
-  _LT_UNLESS_OPTIONS([LT_INIT], [shared disable-shared], [_LT_ENABLE_SHARED])
-  _LT_UNLESS_OPTIONS([LT_INIT], [static disable-static], [_LT_ENABLE_STATIC])
-  _LT_UNLESS_OPTIONS([LT_INIT], [pic-only no-pic], [_LT_WITH_PIC])
-  _LT_UNLESS_OPTIONS([LT_INIT], [fast-install disable-fast-install],
-		   [_LT_ENABLE_FAST_INSTALL])
-  _LT_UNLESS_OPTIONS([LT_INIT], [aix-soname=aix aix-soname=both aix-soname=svr4],
-		   [_LT_WITH_AIX_SONAME([aix])])
-  ])
-])# _LT_SET_OPTIONS
-
-
-## --------------------------------- ##
-## Macros to handle LT_INIT options. ##
-## --------------------------------- ##
-
-# _LT_MANGLE_DEFUN(MACRO-NAME, OPTION-NAME)
-# -----------------------------------------
-m4_define([_LT_MANGLE_DEFUN],
-[[_LT_OPTION_DEFUN_]m4_bpatsubst(m4_toupper([$1__$2]), [[^A-Z0-9_]], [_])])
-
-
-# LT_OPTION_DEFINE(MACRO-NAME, OPTION-NAME, CODE)
-# -----------------------------------------------
-m4_define([LT_OPTION_DEFINE],
-[m4_define(_LT_MANGLE_DEFUN([$1], [$2]), [$3])[]dnl
-])# LT_OPTION_DEFINE
-
-
-# dlopen
-# ------
-LT_OPTION_DEFINE([LT_INIT], [dlopen], [enable_dlopen=yes
-])
-
-AU_DEFUN([AC_LIBTOOL_DLOPEN],
-[_LT_SET_OPTION([LT_INIT], [dlopen])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'dlopen' option into LT_INIT's first parameter.])
-])
-
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_DLOPEN], [])
-
-
-# win32-dll
-# ---------
-# Declare package support for building win32 dll's.
-LT_OPTION_DEFINE([LT_INIT], [win32-dll],
-[enable_win32_dll=yes
-
-case $host in
-*-*-cygwin* | *-*-mingw* | *-*-pw32* | *-*-cegcc*)
-  AC_CHECK_TOOL(AS, as, false)
-  AC_CHECK_TOOL(DLLTOOL, dlltool, false)
-  AC_CHECK_TOOL(OBJDUMP, objdump, false)
-  ;;
-esac
-
-test -z "$AS" && AS=as
-_LT_DECL([], [AS],      [1], [Assembler program])dnl
-
-test -z "$DLLTOOL" && DLLTOOL=dlltool
-_LT_DECL([], [DLLTOOL], [1], [DLL creation program])dnl
-
-test -z "$OBJDUMP" && OBJDUMP=objdump
-_LT_DECL([], [OBJDUMP], [1], [Object dumper program])dnl
-])# win32-dll
-
-AU_DEFUN([AC_LIBTOOL_WIN32_DLL],
-[AC_REQUIRE([AC_CANONICAL_HOST])dnl
-_LT_SET_OPTION([LT_INIT], [win32-dll])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'win32-dll' option into LT_INIT's first parameter.])
-])
-
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_WIN32_DLL], [])
-
-
-# _LT_ENABLE_SHARED([DEFAULT])
-# ----------------------------
-# implement the --enable-shared flag, and supports the 'shared' and
-# 'disable-shared' LT_INIT options.
-# DEFAULT is either 'yes' or 'no'.  If omitted, it defaults to 'yes'.
-m4_define([_LT_ENABLE_SHARED],
-[m4_define([_LT_ENABLE_SHARED_DEFAULT], [m4_if($1, no, no, yes)])dnl
-AC_ARG_ENABLE([shared],
-    [AS_HELP_STRING([--enable-shared@<:@=PKGS@:>@],
-	[build shared libraries @<:@default=]_LT_ENABLE_SHARED_DEFAULT[@:>@])],
-    [p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_shared=yes ;;
-    no) enable_shared=no ;;
-    *)
-      enable_shared=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_shared=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac],
-    [enable_shared=]_LT_ENABLE_SHARED_DEFAULT)
-
-    _LT_DECL([build_libtool_libs], [enable_shared], [0],
-	[Whether or not to build shared libraries])
-])# _LT_ENABLE_SHARED
-
-LT_OPTION_DEFINE([LT_INIT], [shared], [_LT_ENABLE_SHARED([yes])])
-LT_OPTION_DEFINE([LT_INIT], [disable-shared], [_LT_ENABLE_SHARED([no])])
-
-# Old names:
-AC_DEFUN([AC_ENABLE_SHARED],
-[_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[shared])
-])
-
-AC_DEFUN([AC_DISABLE_SHARED],
-[_LT_SET_OPTION([LT_INIT], [disable-shared])
-])
-
-AU_DEFUN([AM_ENABLE_SHARED], [AC_ENABLE_SHARED($@)])
-AU_DEFUN([AM_DISABLE_SHARED], [AC_DISABLE_SHARED($@)])
-
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AM_ENABLE_SHARED], [])
-dnl AC_DEFUN([AM_DISABLE_SHARED], [])
-
-
-
-# _LT_ENABLE_STATIC([DEFAULT])
-# ----------------------------
-# implement the --enable-static flag, and support the 'static' and
-# 'disable-static' LT_INIT options.
-# DEFAULT is either 'yes' or 'no'.  If omitted, it defaults to 'yes'.
-m4_define([_LT_ENABLE_STATIC],
-[m4_define([_LT_ENABLE_STATIC_DEFAULT], [m4_if($1, no, no, yes)])dnl
-AC_ARG_ENABLE([static],
-    [AS_HELP_STRING([--enable-static@<:@=PKGS@:>@],
-	[build static libraries @<:@default=]_LT_ENABLE_STATIC_DEFAULT[@:>@])],
-    [p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_static=yes ;;
-    no) enable_static=no ;;
-    *)
-     enable_static=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_static=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac],
-    [enable_static=]_LT_ENABLE_STATIC_DEFAULT)
-
-    _LT_DECL([build_old_libs], [enable_static], [0],
-	[Whether or not to build static libraries])
-])# _LT_ENABLE_STATIC
-
-LT_OPTION_DEFINE([LT_INIT], [static], [_LT_ENABLE_STATIC([yes])])
-LT_OPTION_DEFINE([LT_INIT], [disable-static], [_LT_ENABLE_STATIC([no])])
-
-# Old names:
-AC_DEFUN([AC_ENABLE_STATIC],
-[_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[static])
-])
-
-AC_DEFUN([AC_DISABLE_STATIC],
-[_LT_SET_OPTION([LT_INIT], [disable-static])
-])
-
-AU_DEFUN([AM_ENABLE_STATIC], [AC_ENABLE_STATIC($@)])
-AU_DEFUN([AM_DISABLE_STATIC], [AC_DISABLE_STATIC($@)])
-
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AM_ENABLE_STATIC], [])
-dnl AC_DEFUN([AM_DISABLE_STATIC], [])
-
-
-
-# _LT_ENABLE_FAST_INSTALL([DEFAULT])
-# ----------------------------------
-# implement the --enable-fast-install flag, and support the 'fast-install'
-# and 'disable-fast-install' LT_INIT options.
-# DEFAULT is either 'yes' or 'no'.  If omitted, it defaults to 'yes'.
-m4_define([_LT_ENABLE_FAST_INSTALL],
-[m4_define([_LT_ENABLE_FAST_INSTALL_DEFAULT], [m4_if($1, no, no, yes)])dnl
-AC_ARG_ENABLE([fast-install],
-    [AS_HELP_STRING([--enable-fast-install@<:@=PKGS@:>@],
-    [optimize for fast installation @<:@default=]_LT_ENABLE_FAST_INSTALL_DEFAULT[@:>@])],
-    [p=${PACKAGE-default}
-    case $enableval in
-    yes) enable_fast_install=yes ;;
-    no) enable_fast_install=no ;;
-    *)
-      enable_fast_install=no
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for pkg in $enableval; do
-	IFS=$lt_save_ifs
-	if test "X$pkg" = "X$p"; then
-	  enable_fast_install=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac],
-    [enable_fast_install=]_LT_ENABLE_FAST_INSTALL_DEFAULT)
-
-_LT_DECL([fast_install], [enable_fast_install], [0],
-	 [Whether or not to optimize for fast installation])dnl
-])# _LT_ENABLE_FAST_INSTALL
-
-LT_OPTION_DEFINE([LT_INIT], [fast-install], [_LT_ENABLE_FAST_INSTALL([yes])])
-LT_OPTION_DEFINE([LT_INIT], [disable-fast-install], [_LT_ENABLE_FAST_INSTALL([no])])
-
-# Old names:
-AU_DEFUN([AC_ENABLE_FAST_INSTALL],
-[_LT_SET_OPTION([LT_INIT], m4_if([$1], [no], [disable-])[fast-install])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you put
-the 'fast-install' option into LT_INIT's first parameter.])
-])
-
-AU_DEFUN([AC_DISABLE_FAST_INSTALL],
-[_LT_SET_OPTION([LT_INIT], [disable-fast-install])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you put
-the 'disable-fast-install' option into LT_INIT's first parameter.])
-])
-
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_ENABLE_FAST_INSTALL], [])
-dnl AC_DEFUN([AM_DISABLE_FAST_INSTALL], [])
-
-
-# _LT_WITH_AIX_SONAME([DEFAULT])
-# ----------------------------------
-# implement the --with-aix-soname flag, and support the `aix-soname=aix'
-# and `aix-soname=both' and `aix-soname=svr4' LT_INIT options. DEFAULT
-# is either `aix', `both' or `svr4'.  If omitted, it defaults to `aix'.
-m4_define([_LT_WITH_AIX_SONAME],
-[m4_define([_LT_WITH_AIX_SONAME_DEFAULT], [m4_if($1, svr4, svr4, m4_if($1, both, both, aix))])dnl
-shared_archive_member_spec=
-case $host,$enable_shared in
-power*-*-aix[[5-9]]*,yes)
-  AC_MSG_CHECKING([which variant of shared library versioning to provide])
-  AC_ARG_WITH([aix-soname],
-    [AS_HELP_STRING([--with-aix-soname=aix|svr4|both],
-      [shared library versioning (aka "SONAME") variant to provide on AIX, @<:@default=]_LT_WITH_AIX_SONAME_DEFAULT[@:>@.])],
-    [case $withval in
-    aix|svr4|both)
-      ;;
-    *)
-      AC_MSG_ERROR([Unknown argument to --with-aix-soname])
-      ;;
-    esac
-    lt_cv_with_aix_soname=$with_aix_soname],
-    [AC_CACHE_VAL([lt_cv_with_aix_soname],
-      [lt_cv_with_aix_soname=]_LT_WITH_AIX_SONAME_DEFAULT)
-    with_aix_soname=$lt_cv_with_aix_soname])
-  AC_MSG_RESULT([$with_aix_soname])
-  if test aix != "$with_aix_soname"; then
-    # For the AIX way of multilib, we name the shared archive member
-    # based on the bitwidth used, traditionally 'shr.o' or 'shr_64.o',
-    # and 'shr.imp' or 'shr_64.imp', respectively, for the Import File.
-    # Even when GNU compilers ignore OBJECT_MODE but need '-maix64' flag,
-    # the AIX toolchain works better with OBJECT_MODE set (default 32).
-    if test 64 = "${OBJECT_MODE-32}"; then
-      shared_archive_member_spec=shr_64
-    else
-      shared_archive_member_spec=shr
-    fi
-  fi
-  ;;
-*)
-  with_aix_soname=aix
-  ;;
-esac
-
-_LT_DECL([], [shared_archive_member_spec], [0],
-    [Shared archive member basename, for filename based shared library versioning on AIX])dnl
-])# _LT_WITH_AIX_SONAME
-
-LT_OPTION_DEFINE([LT_INIT], [aix-soname=aix], [_LT_WITH_AIX_SONAME([aix])])
-LT_OPTION_DEFINE([LT_INIT], [aix-soname=both], [_LT_WITH_AIX_SONAME([both])])
-LT_OPTION_DEFINE([LT_INIT], [aix-soname=svr4], [_LT_WITH_AIX_SONAME([svr4])])
-
-
-# _LT_WITH_PIC([MODE])
-# --------------------
-# implement the --with-pic flag, and support the 'pic-only' and 'no-pic'
-# LT_INIT options.
-# MODE is either 'yes' or 'no'.  If omitted, it defaults to 'both'.
-m4_define([_LT_WITH_PIC],
-[AC_ARG_WITH([pic],
-    [AS_HELP_STRING([--with-pic@<:@=PKGS@:>@],
-	[try to use only PIC/non-PIC objects @<:@default=use both@:>@])],
-    [lt_p=${PACKAGE-default}
-    case $withval in
-    yes|no) pic_mode=$withval ;;
-    *)
-      pic_mode=default
-      # Look at the argument we got.  We use all the common list separators.
-      lt_save_ifs=$IFS; IFS=$IFS$PATH_SEPARATOR,
-      for lt_pkg in $withval; do
-	IFS=$lt_save_ifs
-	if test "X$lt_pkg" = "X$lt_p"; then
-	  pic_mode=yes
-	fi
-      done
-      IFS=$lt_save_ifs
-      ;;
-    esac],
-    [pic_mode=m4_default([$1], [default])])
-
-_LT_DECL([], [pic_mode], [0], [What type of objects to build])dnl
-])# _LT_WITH_PIC
-
-LT_OPTION_DEFINE([LT_INIT], [pic-only], [_LT_WITH_PIC([yes])])
-LT_OPTION_DEFINE([LT_INIT], [no-pic], [_LT_WITH_PIC([no])])
-
-# Old name:
-AU_DEFUN([AC_LIBTOOL_PICMODE],
-[_LT_SET_OPTION([LT_INIT], [pic-only])
-AC_DIAGNOSE([obsolete],
-[$0: Remove this warning and the call to _LT_SET_OPTION when you
-put the 'pic-only' option into LT_INIT's first parameter.])
-])
-
-dnl aclocal-1.4 backwards compatibility:
-dnl AC_DEFUN([AC_LIBTOOL_PICMODE], [])
-
-## ----------------- ##
-## LTDL_INIT Options ##
-## ----------------- ##
-
-m4_define([_LTDL_MODE], [])
-LT_OPTION_DEFINE([LTDL_INIT], [nonrecursive],
-		 [m4_define([_LTDL_MODE], [nonrecursive])])
-LT_OPTION_DEFINE([LTDL_INIT], [recursive],
-		 [m4_define([_LTDL_MODE], [recursive])])
-LT_OPTION_DEFINE([LTDL_INIT], [subproject],
-		 [m4_define([_LTDL_MODE], [subproject])])
-
-m4_define([_LTDL_TYPE], [])
-LT_OPTION_DEFINE([LTDL_INIT], [installable],
-		 [m4_define([_LTDL_TYPE], [installable])])
-LT_OPTION_DEFINE([LTDL_INIT], [convenience],
-		 [m4_define([_LTDL_TYPE], [convenience])])
diff --git a/experiments/wasm-gui/third_party/libXfixes/m4/ltsugar.m4 b/experiments/wasm-gui/third_party/libXfixes/m4/ltsugar.m4
deleted file mode 100644
index 902508bd9..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/m4/ltsugar.m4
+++ /dev/null
@@ -1,124 +0,0 @@
-# ltsugar.m4 -- libtool m4 base layer.                         -*-Autoconf-*-
-#
-# Copyright (C) 2004-2005, 2007-2008, 2011-2019, 2021-2022 Free Software
-# Foundation, Inc.
-# Written by Gary V. Vaughan, 2004
-#
-# This file is free software; the Free Software Foundation gives
-# unlimited permission to copy and/or distribute it, with or without
-# modifications, as long as this notice is preserved.
-
-# serial 6 ltsugar.m4
-
-# This is to help aclocal find these macros, as it can't see m4_define.
-AC_DEFUN([LTSUGAR_VERSION], [m4_if([0.1])])
-
-
-# lt_join(SEP, ARG1, [ARG2...])
-# -----------------------------
-# Produce ARG1SEPARG2...SEPARGn, omitting [] arguments and their
-# associated separator.
-# Needed until we can rely on m4_join from Autoconf 2.62, since all earlier
-# versions in m4sugar had bugs.
-m4_define([lt_join],
-[m4_if([$#], [1], [],
-       [$#], [2], [[$2]],
-       [m4_if([$2], [], [], [[$2]_])$0([$1], m4_shift(m4_shift($@)))])])
-m4_define([_lt_join],
-[m4_if([$#$2], [2], [],
-       [m4_if([$2], [], [], [[$1$2]])$0([$1], m4_shift(m4_shift($@)))])])
-
-
-# lt_car(LIST)
-# lt_cdr(LIST)
-# ------------
-# Manipulate m4 lists.
-# These macros are necessary as long as will still need to support
-# Autoconf-2.59, which quotes differently.
-m4_define([lt_car], [[$1]])
-m4_define([lt_cdr],
-[m4_if([$#], 0, [m4_fatal([$0: cannot be called without arguments])],
-       [$#], 1, [],
-       [m4_dquote(m4_shift($@))])])
-m4_define([lt_unquote], $1)
-
-
-# lt_append(MACRO-NAME, STRING, [SEPARATOR])
-# ------------------------------------------
-# Redefine MACRO-NAME to hold its former content plus 'SEPARATOR''STRING'.
-# Note that neither SEPARATOR nor STRING are expanded; they are appended
-# to MACRO-NAME as is (leaving the expansion for when MACRO-NAME is invoked).
-# No SEPARATOR is output if MACRO-NAME was previously undefined (different
-# than defined and empty).
-#
-# This macro is needed until we can rely on Autoconf 2.62, since earlier
-# versions of m4sugar mistakenly expanded SEPARATOR but not STRING.
-m4_define([lt_append],
-[m4_define([$1],
-	   m4_ifdef([$1], [m4_defn([$1])[$3]])[$2])])
-
-
-
-# lt_combine(SEP, PREFIX-LIST, INFIX, SUFFIX1, [SUFFIX2...])
-# ----------------------------------------------------------
-# Produce a SEP delimited list of all paired combinations of elements of
-# PREFIX-LIST with SUFFIX1 through SUFFIXn.  Each element of the list
-# has the form PREFIXmINFIXSUFFIXn.
-# Needed until we can rely on m4_combine added in Autoconf 2.62.
-m4_define([lt_combine],
-[m4_if(m4_eval([$# > 3]), [1],
-       [m4_pushdef([_Lt_sep], [m4_define([_Lt_sep], m4_defn([lt_car]))])]]dnl
-[[m4_foreach([_Lt_prefix], [$2],
-	     [m4_foreach([_Lt_suffix],
-		]m4_dquote(m4_dquote(m4_shift(m4_shift(m4_shift($@)))))[,
-	[_Lt_sep([$1])[]m4_defn([_Lt_prefix])[$3]m4_defn([_Lt_suffix])])])])])
-
-
-# lt_if_append_uniq(MACRO-NAME, VARNAME, [SEPARATOR], [UNIQ], [NOT-UNIQ])
-# -----------------------------------------------------------------------
-# Iff MACRO-NAME does not yet contain VARNAME, then append it (delimited
-# by SEPARATOR if supplied) and expand UNIQ, else NOT-UNIQ.
-m4_define([lt_if_append_uniq],
-[m4_ifdef([$1],
-	  [m4_if(m4_index([$3]m4_defn([$1])[$3], [$3$2$3]), [-1],
-		 [lt_append([$1], [$2], [$3])$4],
-		 [$5])],
-	  [lt_append([$1], [$2], [$3])$4])])
-
-
-# lt_dict_add(DICT, KEY, VALUE)
-# -----------------------------
-m4_define([lt_dict_add],
-[m4_define([$1($2)], [$3])])
-
-
-# lt_dict_add_subkey(DICT, KEY, SUBKEY, VALUE)
-# --------------------------------------------
-m4_define([lt_dict_add_subkey],
-[m4_define([$1($2:$3)], [$4])])
-
-
-# lt_dict_fetch(DICT, KEY, [SUBKEY])
-# ----------------------------------
-m4_define([lt_dict_fetch],
-[m4_ifval([$3],
-	m4_ifdef([$1($2:$3)], [m4_defn([$1($2:$3)])]),
-    m4_ifdef([$1($2)], [m4_defn([$1($2)])]))])
-
-
-# lt_if_dict_fetch(DICT, KEY, [SUBKEY], VALUE, IF-TRUE, [IF-FALSE])
-# -----------------------------------------------------------------
-m4_define([lt_if_dict_fetch],
-[m4_if(lt_dict_fetch([$1], [$2], [$3]), [$4],
-	[$5],
-    [$6])])
-
-
-# lt_dict_filter(DICT, [SUBKEY], VALUE, [SEPARATOR], KEY, [...])
-# --------------------------------------------------------------
-m4_define([lt_dict_filter],
-[m4_if([$5], [], [],
-  [lt_join(m4_quote(m4_default([$4], [[, ]])),
-           lt_unquote(m4_split(m4_normalize(m4_foreach(_Lt_key, lt_car([m4_shiftn(4, $@)]),
-		      [lt_if_dict_fetch([$1], _Lt_key, [$2], [$3], [_Lt_key ])])))))])[]dnl
-])
diff --git a/experiments/wasm-gui/third_party/libXfixes/m4/ltversion.m4 b/experiments/wasm-gui/third_party/libXfixes/m4/ltversion.m4
deleted file mode 100644
index b155d0ace..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/m4/ltversion.m4
+++ /dev/null
@@ -1,24 +0,0 @@
-# ltversion.m4 -- version numbers			-*- Autoconf -*-
-#
-#   Copyright (C) 2004, 2011-2019, 2021-2022 Free Software Foundation,
-#   Inc.
-#   Written by Scott James Remnant, 2004
-#
-# This file is free software; the Free Software Foundation gives
-# unlimited permission to copy and/or distribute it, with or without
-# modifications, as long as this notice is preserved.
-
-# @configure_input@
-
-# serial 4245 ltversion.m4
-# This file is part of GNU Libtool
-
-m4_define([LT_PACKAGE_VERSION], [2.4.7])
-m4_define([LT_PACKAGE_REVISION], [2.4.7])
-
-AC_DEFUN([LTVERSION_VERSION],
-[macro_version='2.4.7'
-macro_revision='2.4.7'
-_LT_DECL(, macro_version, 0, [Which release of libtool.m4 was used?])
-_LT_DECL(, macro_revision, 0)
-])
diff --git a/experiments/wasm-gui/third_party/libXfixes/m4/lt~obsolete.m4 b/experiments/wasm-gui/third_party/libXfixes/m4/lt~obsolete.m4
deleted file mode 100644
index 0f7a8759d..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/m4/lt~obsolete.m4
+++ /dev/null
@@ -1,99 +0,0 @@
-# lt~obsolete.m4 -- aclocal satisfying obsolete definitions.    -*-Autoconf-*-
-#
-#   Copyright (C) 2004-2005, 2007, 2009, 2011-2019, 2021-2022 Free
-#   Software Foundation, Inc.
-#   Written by Scott James Remnant, 2004.
-#
-# This file is free software; the Free Software Foundation gives
-# unlimited permission to copy and/or distribute it, with or without
-# modifications, as long as this notice is preserved.
-
-# serial 5 lt~obsolete.m4
-
-# These exist entirely to fool aclocal when bootstrapping libtool.
-#
-# In the past libtool.m4 has provided macros via AC_DEFUN (or AU_DEFUN),
-# which have later been changed to m4_define as they aren't part of the
-# exported API, or moved to Autoconf or Automake where they belong.
-#
-# The trouble is, aclocal is a bit thick.  It'll see the old AC_DEFUN
-# in /usr/share/aclocal/libtool.m4 and remember it, then when it sees us
-# using a macro with the same name in our local m4/libtool.m4 it'll
-# pull the old libtool.m4 in (it doesn't see our shiny new m4_define
-# and doesn't know about Autoconf macros at all.)
-#
-# So we provide this file, which has a silly filename so it's always
-# included after everything else.  This provides aclocal with the
-# AC_DEFUNs it wants, but when m4 processes it, it doesn't do anything
-# because those macros already exist, or will be overwritten later.
-# We use AC_DEFUN over AU_DEFUN for compatibility with aclocal-1.6.
-#
-# Anytime we withdraw an AC_DEFUN or AU_DEFUN, remember to add it here.
-# Yes, that means every name once taken will need to remain here until
-# we give up compatibility with versions before 1.7, at which point
-# we need to keep only those names which we still refer to.
-
-# This is to help aclocal find these macros, as it can't see m4_define.
-AC_DEFUN([LTOBSOLETE_VERSION], [m4_if([1])])
-
-m4_ifndef([AC_LIBTOOL_LINKER_OPTION],	[AC_DEFUN([AC_LIBTOOL_LINKER_OPTION])])
-m4_ifndef([AC_PROG_EGREP],		[AC_DEFUN([AC_PROG_EGREP])])
-m4_ifndef([_LT_AC_PROG_ECHO_BACKSLASH],	[AC_DEFUN([_LT_AC_PROG_ECHO_BACKSLASH])])
-m4_ifndef([_LT_AC_SHELL_INIT],		[AC_DEFUN([_LT_AC_SHELL_INIT])])
-m4_ifndef([_LT_AC_SYS_LIBPATH_AIX],	[AC_DEFUN([_LT_AC_SYS_LIBPATH_AIX])])
-m4_ifndef([_LT_PROG_LTMAIN],		[AC_DEFUN([_LT_PROG_LTMAIN])])
-m4_ifndef([_LT_AC_TAGVAR],		[AC_DEFUN([_LT_AC_TAGVAR])])
-m4_ifndef([AC_LTDL_ENABLE_INSTALL],	[AC_DEFUN([AC_LTDL_ENABLE_INSTALL])])
-m4_ifndef([AC_LTDL_PREOPEN],		[AC_DEFUN([AC_LTDL_PREOPEN])])
-m4_ifndef([_LT_AC_SYS_COMPILER],	[AC_DEFUN([_LT_AC_SYS_COMPILER])])
-m4_ifndef([_LT_AC_LOCK],		[AC_DEFUN([_LT_AC_LOCK])])
-m4_ifndef([AC_LIBTOOL_SYS_OLD_ARCHIVE],	[AC_DEFUN([AC_LIBTOOL_SYS_OLD_ARCHIVE])])
-m4_ifndef([_LT_AC_TRY_DLOPEN_SELF],	[AC_DEFUN([_LT_AC_TRY_DLOPEN_SELF])])
-m4_ifndef([AC_LIBTOOL_PROG_CC_C_O],	[AC_DEFUN([AC_LIBTOOL_PROG_CC_C_O])])
-m4_ifndef([AC_LIBTOOL_SYS_HARD_LINK_LOCKS], [AC_DEFUN([AC_LIBTOOL_SYS_HARD_LINK_LOCKS])])
-m4_ifndef([AC_LIBTOOL_OBJDIR],		[AC_DEFUN([AC_LIBTOOL_OBJDIR])])
-m4_ifndef([AC_LTDL_OBJDIR],		[AC_DEFUN([AC_LTDL_OBJDIR])])
-m4_ifndef([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH], [AC_DEFUN([AC_LIBTOOL_PROG_LD_HARDCODE_LIBPATH])])
-m4_ifndef([AC_LIBTOOL_SYS_LIB_STRIP],	[AC_DEFUN([AC_LIBTOOL_SYS_LIB_STRIP])])
-m4_ifndef([AC_PATH_MAGIC],		[AC_DEFUN([AC_PATH_MAGIC])])
-m4_ifndef([AC_PROG_LD_GNU],		[AC_DEFUN([AC_PROG_LD_GNU])])
-m4_ifndef([AC_PROG_LD_RELOAD_FLAG],	[AC_DEFUN([AC_PROG_LD_RELOAD_FLAG])])
-m4_ifndef([AC_DEPLIBS_CHECK_METHOD],	[AC_DEFUN([AC_DEPLIBS_CHECK_METHOD])])
-m4_ifndef([AC_LIBTOOL_PROG_COMPILER_NO_RTTI], [AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_NO_RTTI])])
-m4_ifndef([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE], [AC_DEFUN([AC_LIBTOOL_SYS_GLOBAL_SYMBOL_PIPE])])
-m4_ifndef([AC_LIBTOOL_PROG_COMPILER_PIC], [AC_DEFUN([AC_LIBTOOL_PROG_COMPILER_PIC])])
-m4_ifndef([AC_LIBTOOL_PROG_LD_SHLIBS],	[AC_DEFUN([AC_LIBTOOL_PROG_LD_SHLIBS])])
-m4_ifndef([AC_LIBTOOL_POSTDEP_PREDEP],	[AC_DEFUN([AC_LIBTOOL_POSTDEP_PREDEP])])
-m4_ifndef([LT_AC_PROG_EGREP],		[AC_DEFUN([LT_AC_PROG_EGREP])])
-m4_ifndef([LT_AC_PROG_SED],		[AC_DEFUN([LT_AC_PROG_SED])])
-m4_ifndef([_LT_CC_BASENAME],		[AC_DEFUN([_LT_CC_BASENAME])])
-m4_ifndef([_LT_COMPILER_BOILERPLATE],	[AC_DEFUN([_LT_COMPILER_BOILERPLATE])])
-m4_ifndef([_LT_LINKER_BOILERPLATE],	[AC_DEFUN([_LT_LINKER_BOILERPLATE])])
-m4_ifndef([_AC_PROG_LIBTOOL],		[AC_DEFUN([_AC_PROG_LIBTOOL])])
-m4_ifndef([AC_LIBTOOL_SETUP],		[AC_DEFUN([AC_LIBTOOL_SETUP])])
-m4_ifndef([_LT_AC_CHECK_DLFCN],		[AC_DEFUN([_LT_AC_CHECK_DLFCN])])
-m4_ifndef([AC_LIBTOOL_SYS_DYNAMIC_LINKER],	[AC_DEFUN([AC_LIBTOOL_SYS_DYNAMIC_LINKER])])
-m4_ifndef([_LT_AC_TAGCONFIG],		[AC_DEFUN([_LT_AC_TAGCONFIG])])
-m4_ifndef([AC_DISABLE_FAST_INSTALL],	[AC_DEFUN([AC_DISABLE_FAST_INSTALL])])
-m4_ifndef([_LT_AC_LANG_CXX],		[AC_DEFUN([_LT_AC_LANG_CXX])])
-m4_ifndef([_LT_AC_LANG_F77],		[AC_DEFUN([_LT_AC_LANG_F77])])
-m4_ifndef([_LT_AC_LANG_GCJ],		[AC_DEFUN([_LT_AC_LANG_GCJ])])
-m4_ifndef([AC_LIBTOOL_LANG_C_CONFIG],	[AC_DEFUN([AC_LIBTOOL_LANG_C_CONFIG])])
-m4_ifndef([_LT_AC_LANG_C_CONFIG],	[AC_DEFUN([_LT_AC_LANG_C_CONFIG])])
-m4_ifndef([AC_LIBTOOL_LANG_CXX_CONFIG],	[AC_DEFUN([AC_LIBTOOL_LANG_CXX_CONFIG])])
-m4_ifndef([_LT_AC_LANG_CXX_CONFIG],	[AC_DEFUN([_LT_AC_LANG_CXX_CONFIG])])
-m4_ifndef([AC_LIBTOOL_LANG_F77_CONFIG],	[AC_DEFUN([AC_LIBTOOL_LANG_F77_CONFIG])])
-m4_ifndef([_LT_AC_LANG_F77_CONFIG],	[AC_DEFUN([_LT_AC_LANG_F77_CONFIG])])
-m4_ifndef([AC_LIBTOOL_LANG_GCJ_CONFIG],	[AC_DEFUN([AC_LIBTOOL_LANG_GCJ_CONFIG])])
-m4_ifndef([_LT_AC_LANG_GCJ_CONFIG],	[AC_DEFUN([_LT_AC_LANG_GCJ_CONFIG])])
-m4_ifndef([AC_LIBTOOL_LANG_RC_CONFIG],	[AC_DEFUN([AC_LIBTOOL_LANG_RC_CONFIG])])
-m4_ifndef([_LT_AC_LANG_RC_CONFIG],	[AC_DEFUN([_LT_AC_LANG_RC_CONFIG])])
-m4_ifndef([AC_LIBTOOL_CONFIG],		[AC_DEFUN([AC_LIBTOOL_CONFIG])])
-m4_ifndef([_LT_AC_FILE_LTDLL_C],	[AC_DEFUN([_LT_AC_FILE_LTDLL_C])])
-m4_ifndef([_LT_REQUIRED_DARWIN_CHECKS],	[AC_DEFUN([_LT_REQUIRED_DARWIN_CHECKS])])
-m4_ifndef([_LT_AC_PROG_CXXCPP],		[AC_DEFUN([_LT_AC_PROG_CXXCPP])])
-m4_ifndef([_LT_PREPARE_SED_QUOTE_VARS],	[AC_DEFUN([_LT_PREPARE_SED_QUOTE_VARS])])
-m4_ifndef([_LT_PROG_ECHO_BACKSLASH],	[AC_DEFUN([_LT_PROG_ECHO_BACKSLASH])])
-m4_ifndef([_LT_PROG_F77],		[AC_DEFUN([_LT_PROG_F77])])
-m4_ifndef([_LT_PROG_FC],		[AC_DEFUN([_LT_PROG_FC])])
-m4_ifndef([_LT_PROG_CXX],		[AC_DEFUN([_LT_PROG_CXX])])
diff --git a/experiments/wasm-gui/third_party/libXfixes/man/Makefile.am b/experiments/wasm-gui/third_party/libXfixes/man/Makefile.am
deleted file mode 100644
index 41da84328..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/man/Makefile.am
+++ /dev/null
@@ -1,39 +0,0 @@
-#
-# Copyright (c) 2005, Oracle and/or its affiliates.
-#
-# Permission is hereby granted, free of charge, to any person obtaining a
-# copy of this software and associated documentation files (the "Software"),
-# to deal in the Software without restriction, including without limitation
-# the rights to use, copy, modify, merge, publish, distribute, sublicense,
-# and/or sell copies of the Software, and to permit persons to whom the
-# Software is furnished to do so, subject to the following conditions:
-#
-# The above copyright notice and this permission notice (including the next
-# paragraph) shall be included in all copies or substantial portions of the
-# Software.
-#
-# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-# DEALINGS IN THE SOFTWARE.
-#
-
-libmandir = $(LIB_MAN_DIR)
-
-libman_PRE = Xfixes.man
-
-libman_DATA = $(libman_PRE:man=@LIB_MAN_SUFFIX@)
-
-EXTRA_DIST = $(libman_PRE)
-
-CLEANFILES = $(libman_DATA)
-
-# String replacements for man pages now come from xorg-macros.m4 via configure
-
-SUFFIXES = .$(LIB_MAN_SUFFIX) .man
-
-.man.$(LIB_MAN_SUFFIX):
-	$(AM_V_GEN)$(SED) $(MAN_SUBSTS) < $< > $@
diff --git a/experiments/wasm-gui/third_party/libXfixes/man/Makefile.in b/experiments/wasm-gui/third_party/libXfixes/man/Makefile.in
deleted file mode 100644
index 4ca42fe5b..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/man/Makefile.in
+++ /dev/null
@@ -1,556 +0,0 @@
-# Makefile.in generated by automake 1.16.5 from Makefile.am.
-# @configure_input@
-
-# Copyright (C) 1994-2021 Free Software Foundation, Inc.
-
-# This Makefile.in is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-@SET_MAKE@
-
-#
-# Copyright (c) 2005, Oracle and/or its affiliates.
-#
-# Permission is hereby granted, free of charge, to any person obtaining a
-# copy of this software and associated documentation files (the "Software"),
-# to deal in the Software without restriction, including without limitation
-# the rights to use, copy, modify, merge, publish, distribute, sublicense,
-# and/or sell copies of the Software, and to permit persons to whom the
-# Software is furnished to do so, subject to the following conditions:
-#
-# The above copyright notice and this permission notice (including the next
-# paragraph) shall be included in all copies or substantial portions of the
-# Software.
-#
-# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
-# THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
-# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
-# FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
-# DEALINGS IN THE SOFTWARE.
-#
-
-VPATH = @srcdir@
-am__is_gnu_make = { \
-  if test -z '$(MAKELEVEL)'; then \
-    false; \
-  elif test -n '$(MAKE_HOST)'; then \
-    true; \
-  elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \
-    true; \
-  else \
-    false; \
-  fi; \
-}
-am__make_running_with_option = \
-  case $${target_option-} in \
-      ?) ;; \
-      *) echo "am__make_running_with_option: internal error: invalid" \
-              "target option '$${target_option-}' specified" >&2; \
-         exit 1;; \
-  esac; \
-  has_opt=no; \
-  sane_makeflags=$$MAKEFLAGS; \
-  if $(am__is_gnu_make); then \
-    sane_makeflags=$$MFLAGS; \
-  else \
-    case $$MAKEFLAGS in \
-      *\\[\ \	]*) \
-        bs=\\; \
-        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
-          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
-    esac; \
-  fi; \
-  skip_next=no; \
-  strip_trailopt () \
-  { \
-    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
-  }; \
-  for flg in $$sane_makeflags; do \
-    test $$skip_next = yes && { skip_next=no; continue; }; \
-    case $$flg in \
-      *=*|--*) continue;; \
-        -*I) strip_trailopt 'I'; skip_next=yes;; \
-      -*I?*) strip_trailopt 'I';; \
-        -*O) strip_trailopt 'O'; skip_next=yes;; \
-      -*O?*) strip_trailopt 'O';; \
-        -*l) strip_trailopt 'l'; skip_next=yes;; \
-      -*l?*) strip_trailopt 'l';; \
-      -[dEDm]) skip_next=yes;; \
-      -[JT]) skip_next=yes;; \
-    esac; \
-    case $$flg in \
-      *$$target_option*) has_opt=yes; break;; \
-    esac; \
-  done; \
-  test $$has_opt = yes
-am__make_dryrun = (target_option=n; $(am__make_running_with_option))
-am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
-pkgdatadir = $(datadir)/@PACKAGE@
-pkgincludedir = $(includedir)/@PACKAGE@
-pkglibdir = $(libdir)/@PACKAGE@
-pkglibexecdir = $(libexecdir)/@PACKAGE@
-am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
-install_sh_DATA = $(install_sh) -c -m 644
-install_sh_PROGRAM = $(install_sh) -c
-install_sh_SCRIPT = $(install_sh) -c
-INSTALL_HEADER = $(INSTALL_DATA)
-transform = $(program_transform_name)
-NORMAL_INSTALL = :
-PRE_INSTALL = :
-POST_INSTALL = :
-NORMAL_UNINSTALL = :
-PRE_UNINSTALL = :
-POST_UNINSTALL = :
-build_triplet = @build@
-host_triplet = @host@
-subdir = man
-ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/libtool.m4 \
-	$(top_srcdir)/m4/ltoptions.m4 $(top_srcdir)/m4/ltsugar.m4 \
-	$(top_srcdir)/m4/ltversion.m4 $(top_srcdir)/m4/lt~obsolete.m4 \
-	$(top_srcdir)/configure.ac
-am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
-	$(ACLOCAL_M4)
-DIST_COMMON = $(srcdir)/Makefile.am $(am__DIST_COMMON)
-mkinstalldirs = $(install_sh) -d
-CONFIG_HEADER = $(top_builddir)/config.h
-CONFIG_CLEAN_FILES =
-CONFIG_CLEAN_VPATH_FILES =
-AM_V_P = $(am__v_P_@AM_V@)
-am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
-am__v_P_0 = false
-am__v_P_1 = :
-AM_V_GEN = $(am__v_GEN_@AM_V@)
-am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
-am__v_GEN_0 = @echo "  GEN     " $@;
-am__v_GEN_1 = 
-AM_V_at = $(am__v_at_@AM_V@)
-am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
-am__v_at_0 = @
-am__v_at_1 = 
-SOURCES =
-DIST_SOURCES =
-am__can_run_installinfo = \
-  case $$AM_UPDATE_INFO_DIR in \
-    n|no|NO) false;; \
-    *) (install-info --version) >/dev/null 2>&1;; \
-  esac
-am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
-am__vpath_adj = case $$p in \
-    $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
-    *) f=$$p;; \
-  esac;
-am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
-am__install_max = 40
-am__nobase_strip_setup = \
-  srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
-am__nobase_strip = \
-  for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
-am__nobase_list = $(am__nobase_strip_setup); \
-  for p in $$list; do echo "$$p $$p"; done | \
-  sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
-  $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
-    if (++n[$$2] == $(am__install_max)) \
-      { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
-    END { for (dir in files) print dir, files[dir] }'
-am__base_list = \
-  sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
-  sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
-am__uninstall_files_from_dir = { \
-  test -z "$$files" \
-    || { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
-    || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
-         $(am__cd) "$$dir" && rm -f $$files; }; \
-  }
-am__installdirs = "$(DESTDIR)$(libmandir)"
-DATA = $(libman_DATA)
-am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
-am__DIST_COMMON = $(srcdir)/Makefile.in
-DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
-ACLOCAL = @ACLOCAL@
-ADMIN_MAN_DIR = @ADMIN_MAN_DIR@
-ADMIN_MAN_SUFFIX = @ADMIN_MAN_SUFFIX@
-AMTAR = @AMTAR@
-AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
-APP_MAN_DIR = @APP_MAN_DIR@
-APP_MAN_SUFFIX = @APP_MAN_SUFFIX@
-AR = @AR@
-AUTOCONF = @AUTOCONF@
-AUTOHEADER = @AUTOHEADER@
-AUTOMAKE = @AUTOMAKE@
-AWK = @AWK@
-BASE_CFLAGS = @BASE_CFLAGS@
-CC = @CC@
-CCDEPMODE = @CCDEPMODE@
-CFLAGS = @CFLAGS@
-CHANGELOG_CMD = @CHANGELOG_CMD@
-CPPFLAGS = @CPPFLAGS@
-CSCOPE = @CSCOPE@
-CTAGS = @CTAGS@
-CWARNFLAGS = @CWARNFLAGS@
-CYGPATH_W = @CYGPATH_W@
-DEFS = @DEFS@
-DEPDIR = @DEPDIR@
-DLLTOOL = @DLLTOOL@
-DRIVER_MAN_DIR = @DRIVER_MAN_DIR@
-DRIVER_MAN_SUFFIX = @DRIVER_MAN_SUFFIX@
-DSYMUTIL = @DSYMUTIL@
-DUMPBIN = @DUMPBIN@
-ECHO_C = @ECHO_C@
-ECHO_N = @ECHO_N@
-ECHO_T = @ECHO_T@
-EGREP = @EGREP@
-ETAGS = @ETAGS@
-EXEEXT = @EXEEXT@
-FGREP = @FGREP@
-FILECMD = @FILECMD@
-FILE_MAN_DIR = @FILE_MAN_DIR@
-FILE_MAN_SUFFIX = @FILE_MAN_SUFFIX@
-FIXESEXT_CFLAGS = @FIXESEXT_CFLAGS@
-FIXESEXT_LIBS = @FIXESEXT_LIBS@
-FIXESEXT_VERSION = @FIXESEXT_VERSION@
-GREP = @GREP@
-INSTALL = @INSTALL@
-INSTALL_CMD = @INSTALL_CMD@
-INSTALL_DATA = @INSTALL_DATA@
-INSTALL_PROGRAM = @INSTALL_PROGRAM@
-INSTALL_SCRIPT = @INSTALL_SCRIPT@
-INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
-LD = @LD@
-LDFLAGS = @LDFLAGS@
-LIBOBJS = @LIBOBJS@
-LIBS = @LIBS@
-LIBTOOL = @LIBTOOL@
-LIB_MAN_DIR = @LIB_MAN_DIR@
-LIB_MAN_SUFFIX = @LIB_MAN_SUFFIX@
-LIPO = @LIPO@
-LN_S = @LN_S@
-LTLIBOBJS = @LTLIBOBJS@
-LT_SYS_LIBRARY_PATH = @LT_SYS_LIBRARY_PATH@
-MAKEINFO = @MAKEINFO@
-MANIFEST_TOOL = @MANIFEST_TOOL@
-MAN_SUBSTS = @MAN_SUBSTS@
-MISC_MAN_DIR = @MISC_MAN_DIR@
-MISC_MAN_SUFFIX = @MISC_MAN_SUFFIX@
-MKDIR_P = @MKDIR_P@
-NM = @NM@
-NMEDIT = @NMEDIT@
-OBJDUMP = @OBJDUMP@
-OBJEXT = @OBJEXT@
-OTOOL = @OTOOL@
-OTOOL64 = @OTOOL64@
-PACKAGE = @PACKAGE@
-PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
-PACKAGE_NAME = @PACKAGE_NAME@
-PACKAGE_STRING = @PACKAGE_STRING@
-PACKAGE_TARNAME = @PACKAGE_TARNAME@
-PACKAGE_URL = @PACKAGE_URL@
-PACKAGE_VERSION = @PACKAGE_VERSION@
-PATH_SEPARATOR = @PATH_SEPARATOR@
-PKG_CONFIG = @PKG_CONFIG@
-PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
-PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
-RANLIB = @RANLIB@
-SED = @SED@
-SET_MAKE = @SET_MAKE@
-SHELL = @SHELL@
-STRICT_CFLAGS = @STRICT_CFLAGS@
-STRIP = @STRIP@
-VERSION = @VERSION@
-XORG_MAN_PAGE = @XORG_MAN_PAGE@
-abs_builddir = @abs_builddir@
-abs_srcdir = @abs_srcdir@
-abs_top_builddir = @abs_top_builddir@
-abs_top_srcdir = @abs_top_srcdir@
-ac_ct_AR = @ac_ct_AR@
-ac_ct_CC = @ac_ct_CC@
-ac_ct_DUMPBIN = @ac_ct_DUMPBIN@
-am__include = @am__include@
-am__leading_dot = @am__leading_dot@
-am__quote = @am__quote@
-am__tar = @am__tar@
-am__untar = @am__untar@
-bindir = @bindir@
-build = @build@
-build_alias = @build_alias@
-build_cpu = @build_cpu@
-build_os = @build_os@
-build_vendor = @build_vendor@
-builddir = @builddir@
-datadir = @datadir@
-datarootdir = @datarootdir@
-docdir = @docdir@
-dvidir = @dvidir@
-exec_prefix = @exec_prefix@
-host = @host@
-host_alias = @host_alias@
-host_cpu = @host_cpu@
-host_os = @host_os@
-host_vendor = @host_vendor@
-htmldir = @htmldir@
-includedir = @includedir@
-infodir = @infodir@
-install_sh = @install_sh@
-libdir = @libdir@
-libexecdir = @libexecdir@
-localedir = @localedir@
-localstatedir = @localstatedir@
-mandir = @mandir@
-mkdir_p = @mkdir_p@
-oldincludedir = @oldincludedir@
-pdfdir = @pdfdir@
-prefix = @prefix@
-program_transform_name = @program_transform_name@
-psdir = @psdir@
-runstatedir = @runstatedir@
-sbindir = @sbindir@
-sharedstatedir = @sharedstatedir@
-srcdir = @srcdir@
-sysconfdir = @sysconfdir@
-target_alias = @target_alias@
-top_build_prefix = @top_build_prefix@
-top_builddir = @top_builddir@
-top_srcdir = @top_srcdir@
-libmandir = $(LIB_MAN_DIR)
-libman_PRE = Xfixes.man
-libman_DATA = $(libman_PRE:man=@LIB_MAN_SUFFIX@)
-EXTRA_DIST = $(libman_PRE)
-CLEANFILES = $(libman_DATA)
-
-# String replacements for man pages now come from xorg-macros.m4 via configure
-SUFFIXES = .$(LIB_MAN_SUFFIX) .man
-all: all-am
-
-.SUFFIXES:
-.SUFFIXES: .$(LIB_MAN_SUFFIX) .man
-$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
-	@for dep in $?; do \
-	  case '$(am__configure_deps)' in \
-	    *$$dep*) \
-	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
-	        && { if test -f $@; then exit 0; else break; fi; }; \
-	      exit 1;; \
-	  esac; \
-	done; \
-	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign man/Makefile'; \
-	$(am__cd) $(top_srcdir) && \
-	  $(AUTOMAKE) --foreign man/Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
-	@case '$?' in \
-	  *config.status*) \
-	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
-	  *) \
-	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles)'; \
-	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles);; \
-	esac;
-
-$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-
-$(top_srcdir)/configure:  $(am__configure_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(am__aclocal_m4_deps):
-
-mostlyclean-libtool:
-	-rm -f *.lo
-
-clean-libtool:
-	-rm -rf .libs _libs
-install-libmanDATA: $(libman_DATA)
-	@$(NORMAL_INSTALL)
-	@list='$(libman_DATA)'; test -n "$(libmandir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(libmandir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(libmandir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_DATA) $$files '$(DESTDIR)$(libmandir)'"; \
-	  $(INSTALL_DATA) $$files "$(DESTDIR)$(libmandir)" || exit $$?; \
-	done
-
-uninstall-libmanDATA:
-	@$(NORMAL_UNINSTALL)
-	@list='$(libman_DATA)'; test -n "$(libmandir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(libmandir)'; $(am__uninstall_files_from_dir)
-tags TAGS:
-
-ctags CTAGS:
-
-cscope cscopelist:
-
-distdir: $(BUILT_SOURCES)
-	$(MAKE) $(AM_MAKEFLAGS) distdir-am
-
-distdir-am: $(DISTFILES)
-	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	list='$(DISTFILES)'; \
-	  dist_files=`for file in $$list; do echo $$file; done | \
-	  sed -e "s|^$$srcdirstrip/||;t" \
-	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
-	case $$dist_files in \
-	  */*) $(MKDIR_P) `echo "$$dist_files" | \
-			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
-			   sort -u` ;; \
-	esac; \
-	for file in $$dist_files; do \
-	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
-	  if test -d $$d/$$file; then \
-	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
-	    if test -d "$(distdir)/$$file"; then \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
-	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
-	  else \
-	    test -f "$(distdir)/$$file" \
-	    || cp -p $$d/$$file "$(distdir)/$$file" \
-	    || exit 1; \
-	  fi; \
-	done
-check-am: all-am
-check: check-am
-all-am: Makefile $(DATA)
-installdirs:
-	for dir in "$(DESTDIR)$(libmandir)"; do \
-	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
-	done
-install: install-am
-install-exec: install-exec-am
-install-data: install-data-am
-uninstall: uninstall-am
-
-install-am: all-am
-	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
-
-installcheck: installcheck-am
-install-strip:
-	if test -z '$(STRIP)'; then \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	      install; \
-	else \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
-	fi
-mostlyclean-generic:
-
-clean-generic:
-	-test -z "$(CLEANFILES)" || rm -f $(CLEANFILES)
-
-distclean-generic:
-	-test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES)
-	-test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES)
-
-maintainer-clean-generic:
-	@echo "This command is intended for maintainers to use"
-	@echo "it deletes files that may require special tools to rebuild."
-clean: clean-am
-
-clean-am: clean-generic clean-libtool mostlyclean-am
-
-distclean: distclean-am
-	-rm -f Makefile
-distclean-am: clean-am distclean-generic
-
-dvi: dvi-am
-
-dvi-am:
-
-html: html-am
-
-html-am:
-
-info: info-am
-
-info-am:
-
-install-data-am: install-libmanDATA
-
-install-dvi: install-dvi-am
-
-install-dvi-am:
-
-install-exec-am:
-
-install-html: install-html-am
-
-install-html-am:
-
-install-info: install-info-am
-
-install-info-am:
-
-install-man:
-
-install-pdf: install-pdf-am
-
-install-pdf-am:
-
-install-ps: install-ps-am
-
-install-ps-am:
-
-installcheck-am:
-
-maintainer-clean: maintainer-clean-am
-	-rm -f Makefile
-maintainer-clean-am: distclean-am maintainer-clean-generic
-
-mostlyclean: mostlyclean-am
-
-mostlyclean-am: mostlyclean-generic mostlyclean-libtool
-
-pdf: pdf-am
-
-pdf-am:
-
-ps: ps-am
-
-ps-am:
-
-uninstall-am: uninstall-libmanDATA
-
-.MAKE: install-am install-strip
-
-.PHONY: all all-am check check-am clean clean-generic clean-libtool \
-	cscopelist-am ctags-am distclean distclean-generic \
-	distclean-libtool distdir dvi dvi-am html html-am info info-am \
-	install install-am install-data install-data-am install-dvi \
-	install-dvi-am install-exec install-exec-am install-html \
-	install-html-am install-info install-info-am \
-	install-libmanDATA install-man install-pdf install-pdf-am \
-	install-ps install-ps-am install-strip installcheck \
-	installcheck-am installdirs maintainer-clean \
-	maintainer-clean-generic mostlyclean mostlyclean-generic \
-	mostlyclean-libtool pdf pdf-am ps ps-am tags-am uninstall \
-	uninstall-am uninstall-libmanDATA
-
-.PRECIOUS: Makefile
-
-
-.man.$(LIB_MAN_SUFFIX):
-	$(AM_V_GEN)$(SED) $(MAN_SUBSTS) < $< > $@
-
-# Tell versions [3.59,3.63) of GNU make to not export all variables.
-# Otherwise a system limit (for SysV at least) may be exceeded.
-.NOEXPORT:
diff --git a/experiments/wasm-gui/third_party/libXfixes/man/Xfixes.man b/experiments/wasm-gui/third_party/libXfixes/man/Xfixes.man
deleted file mode 100644
index e3568387a..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/man/Xfixes.man
+++ /dev/null
@@ -1,75 +0,0 @@
-.\"
-.\"
-.\" Copyright © 2002 Keith Packard, member of The XFree86 Project, Inc.
-.\"
-.\" Permission to use, copy, modify, distribute, and sell this software and its
-.\" documentation for any purpose is hereby granted without fee, provided that
-.\" the above copyright notice appear in all copies and that both that
-.\" copyright notice and this permission notice appear in supporting
-.\" documentation, and that the name of Keith Packard not be used in
-.\" advertising or publicity pertaining to distribution of the software without
-.\" specific, written prior permission.  Keith Packard makes no
-.\" representations about the suitability of this software for any purpose.  It
-.\" is provided "as is" without express or implied warranty.
-.\"
-.\" KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
-.\" INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
-.\" EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
-.\" CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
-.\" DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
-.\" TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
-.\" PERFORMANCE OF THIS SOFTWARE.
-.\"
-.de TQ
-.br
-.ns
-.TP \\$1
-..
-.TH XFIXES __libmansuffix__ __xorgversion__
-
-.SH NAME
-XFixes \- Augmented versions of core protocol requests
-.SH SYNTAX
-\&#include <X11/extensions/Xfixes.h>
-.nf
-.sp
-Bool XFixesQueryExtension \^(\^Display *\fIdpy\fP,
-	int *\fIevent_base_return\fP, int *\fIerror_base_return\fP\^);
-.sp
-Status XFixesQueryVersion \^(\^Display *\fIdpy\fP,
-	int *\fImajor_version_return\fP,
-	int *\fIminor_version_return\fP\^);
-.sp
-void XFixesChangeSaveSet \^(\^Display *dpy,
-	Window \fIwindow\fP,
-	int \fImode\fP,
-	int \fItarget\fP,
-	int \fImap\fP);
-.fi
-.SH ARGUMENTS
-.IP \fIdisplay\fP 1i
-Specifies the connection to the X server.
-.IP \fIwindow\fP 1i
-Specifies which window.
-.IP \fImode\fP 1i
-Specifies the save set operation (SetModeInsert/SetModeDelete).
-.IP \fItarget\fP 1i
-Specifies the target when executing the save set
-(SaveSetNearest/SaveSetRoot).  In SaveSetNearest mode, the save set member
-window will be reparented to the nearest window not owned by the save set
-client.  In SaveSetRoot mode, the save set member window will be reparented
-to the root window.
-.IP \fImap\fP 1i
-Specifies the map mode (SaveSetMap/SaveSetUnmap) which selects whether the
-save setmember window will be mapped or unmapped during save set processing.
-.SH DESCRIPTION
-.B Xfixes
-is a simple library designed to interface the X Fixes
-Extension.  This extension provides application with work arounds for
-various limitations in the core protocol.
-.SH RESTRICTIONS
-.B Xfixes
-will remain upward compatible after the 1.0 release.
-.SH AUTHORS
-Keith Packard, member of the XFree86 Project, Inc. and
-HP, Owen Taylor, member of the Gnome Foundation and Redhat, Inc.
diff --git a/experiments/wasm-gui/third_party/libXfixes/missing b/experiments/wasm-gui/third_party/libXfixes/missing
deleted file mode 100755
index 1fe1611f1..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/missing
+++ /dev/null
@@ -1,215 +0,0 @@
-#! /bin/sh
-# Common wrapper for a few potentially missing GNU programs.
-
-scriptversion=2018-03-07.03; # UTC
-
-# Copyright (C) 1996-2021 Free Software Foundation, Inc.
-# Originally written by Fran,cois Pinard <pinard@iro.umontreal.ca>, 1996.
-
-# This program is free software; you can redistribute it and/or modify
-# it under the terms of the GNU General Public License as published by
-# the Free Software Foundation; either version 2, or (at your option)
-# any later version.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY; without even the implied warranty of
-# MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE.  See the
-# GNU General Public License for more details.
-
-# You should have received a copy of the GNU General Public License
-# along with this program.  If not, see <https://www.gnu.org/licenses/>.
-
-# As a special exception to the GNU General Public License, if you
-# distribute this file as part of a program that contains a
-# configuration script generated by Autoconf, you may include it under
-# the same distribution terms that you use for the rest of that program.
-
-if test $# -eq 0; then
-  echo 1>&2 "Try '$0 --help' for more information"
-  exit 1
-fi
-
-case $1 in
-
-  --is-lightweight)
-    # Used by our autoconf macros to check whether the available missing
-    # script is modern enough.
-    exit 0
-    ;;
-
-  --run)
-    # Back-compat with the calling convention used by older automake.
-    shift
-    ;;
-
-  -h|--h|--he|--hel|--help)
-    echo "\
-$0 [OPTION]... PROGRAM [ARGUMENT]...
-
-Run 'PROGRAM [ARGUMENT]...', returning a proper advice when this fails due
-to PROGRAM being missing or too old.
-
-Options:
-  -h, --help      display this help and exit
-  -v, --version   output version information and exit
-
-Supported PROGRAM values:
-  aclocal   autoconf  autoheader   autom4te  automake  makeinfo
-  bison     yacc      flex         lex       help2man
-
-Version suffixes to PROGRAM as well as the prefixes 'gnu-', 'gnu', and
-'g' are ignored when checking the name.
-
-Send bug reports to <bug-automake@gnu.org>."
-    exit $?
-    ;;
-
-  -v|--v|--ve|--ver|--vers|--versi|--versio|--version)
-    echo "missing $scriptversion (GNU Automake)"
-    exit $?
-    ;;
-
-  -*)
-    echo 1>&2 "$0: unknown '$1' option"
-    echo 1>&2 "Try '$0 --help' for more information"
-    exit 1
-    ;;
-
-esac
-
-# Run the given program, remember its exit status.
-"$@"; st=$?
-
-# If it succeeded, we are done.
-test $st -eq 0 && exit 0
-
-# Also exit now if we it failed (or wasn't found), and '--version' was
-# passed; such an option is passed most likely to detect whether the
-# program is present and works.
-case $2 in --version|--help) exit $st;; esac
-
-# Exit code 63 means version mismatch.  This often happens when the user
-# tries to use an ancient version of a tool on a file that requires a
-# minimum version.
-if test $st -eq 63; then
-  msg="probably too old"
-elif test $st -eq 127; then
-  # Program was missing.
-  msg="missing on your system"
-else
-  # Program was found and executed, but failed.  Give up.
-  exit $st
-fi
-
-perl_URL=https://www.perl.org/
-flex_URL=https://github.com/westes/flex
-gnu_software_URL=https://www.gnu.org/software
-
-program_details ()
-{
-  case $1 in
-    aclocal|automake)
-      echo "The '$1' program is part of the GNU Automake package:"
-      echo "<$gnu_software_URL/automake>"
-      echo "It also requires GNU Autoconf, GNU m4 and Perl in order to run:"
-      echo "<$gnu_software_URL/autoconf>"
-      echo "<$gnu_software_URL/m4/>"
-      echo "<$perl_URL>"
-      ;;
-    autoconf|autom4te|autoheader)
-      echo "The '$1' program is part of the GNU Autoconf package:"
-      echo "<$gnu_software_URL/autoconf/>"
-      echo "It also requires GNU m4 and Perl in order to run:"
-      echo "<$gnu_software_URL/m4/>"
-      echo "<$perl_URL>"
-      ;;
-  esac
-}
-
-give_advice ()
-{
-  # Normalize program name to check for.
-  normalized_program=`echo "$1" | sed '
-    s/^gnu-//; t
-    s/^gnu//; t
-    s/^g//; t'`
-
-  printf '%s\n' "'$1' is $msg."
-
-  configure_deps="'configure.ac' or m4 files included by 'configure.ac'"
-  case $normalized_program in
-    autoconf*)
-      echo "You should only need it if you modified 'configure.ac',"
-      echo "or m4 files included by it."
-      program_details 'autoconf'
-      ;;
-    autoheader*)
-      echo "You should only need it if you modified 'acconfig.h' or"
-      echo "$configure_deps."
-      program_details 'autoheader'
-      ;;
-    automake*)
-      echo "You should only need it if you modified 'Makefile.am' or"
-      echo "$configure_deps."
-      program_details 'automake'
-      ;;
-    aclocal*)
-      echo "You should only need it if you modified 'acinclude.m4' or"
-      echo "$configure_deps."
-      program_details 'aclocal'
-      ;;
-   autom4te*)
-      echo "You might have modified some maintainer files that require"
-      echo "the 'autom4te' program to be rebuilt."
-      program_details 'autom4te'
-      ;;
-    bison*|yacc*)
-      echo "You should only need it if you modified a '.y' file."
-      echo "You may want to install the GNU Bison package:"
-      echo "<$gnu_software_URL/bison/>"
-      ;;
-    lex*|flex*)
-      echo "You should only need it if you modified a '.l' file."
-      echo "You may want to install the Fast Lexical Analyzer package:"
-      echo "<$flex_URL>"
-      ;;
-    help2man*)
-      echo "You should only need it if you modified a dependency" \
-           "of a man page."
-      echo "You may want to install the GNU Help2man package:"
-      echo "<$gnu_software_URL/help2man/>"
-    ;;
-    makeinfo*)
-      echo "You should only need it if you modified a '.texi' file, or"
-      echo "any other file indirectly affecting the aspect of the manual."
-      echo "You might want to install the Texinfo package:"
-      echo "<$gnu_software_URL/texinfo/>"
-      echo "The spurious makeinfo call might also be the consequence of"
-      echo "using a buggy 'make' (AIX, DU, IRIX), in which case you might"
-      echo "want to install GNU make:"
-      echo "<$gnu_software_URL/make/>"
-      ;;
-    *)
-      echo "You might have modified some files without having the proper"
-      echo "tools for further handling them.  Check the 'README' file, it"
-      echo "often tells you about the needed prerequisites for installing"
-      echo "this package.  You may also peek at any GNU archive site, in"
-      echo "case some other package contains this missing '$1' program."
-      ;;
-  esac
-}
-
-give_advice "$1" | sed -e '1s/^/WARNING: /' \
-                       -e '2,$s/^/         /' >&2
-
-# Propagate the correct exit status (expected to be 127 for a program
-# not found, 63 for a program that failed due to version mismatch).
-exit $st
-
-# Local variables:
-# eval: (add-hook 'before-save-hook 'time-stamp)
-# time-stamp-start: "scriptversion="
-# time-stamp-format: "%:y-%02m-%02d.%02H"
-# time-stamp-time-zone: "UTC0"
-# time-stamp-end: "; # UTC"
-# End:
diff --git a/experiments/wasm-gui/third_party/libXfixes/src/Cursor.c b/experiments/wasm-gui/third_party/libXfixes/src/Cursor.c
deleted file mode 100644
index a99dc1c29..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/src/Cursor.c
+++ /dev/null
@@ -1,345 +0,0 @@
-/*
- * Copyright (c) 2006, Oracle and/or its affiliates.
- * Copyright 2011 Red Hat, Inc.
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice (including the next
- * paragraph) shall be included in all copies or substantial portions of the
- * Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
- * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
- * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
- * DEALINGS IN THE SOFTWARE.
- */
-/*
- * Copyright © 2002 Keith Packard, member of The XFree86 Project, Inc.
- *
- * Permission to use, copy, modify, distribute, and sell this software and its
- * documentation for any purpose is hereby granted without fee, provided that
- * the above copyright notice appear in all copies and that both that
- * copyright notice and this permission notice appear in supporting
- * documentation, and that the name of Keith Packard not be used in
- * advertising or publicity pertaining to distribution of the software without
- * specific, written prior permission.  Keith Packard makes no
- * representations about the suitability of this software for any purpose.  It
- * is provided "as is" without express or implied warranty.
- *
- * KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
- * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
- * EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
- * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
- * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
- * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- * PERFORMANCE OF THIS SOFTWARE.
- */
-
-#ifdef HAVE_CONFIG_H
-#include <config.h>
-#endif
-#include "Xfixesint.h"
-#include <limits.h>
-
-void
-XFixesSelectCursorInput (Display	*dpy,
-			 Window		win,
-			 unsigned long	eventMask)
-{
-    XFixesExtDisplayInfo	    *info = XFixesFindDisplay (dpy);
-    xXFixesSelectCursorInputReq	    *req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-
-    LockDisplay (dpy);
-    GetReq (XFixesSelectCursorInput, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesSelectCursorInput;
-    req->window = (CARD32) win;
-    req->eventMask = (CARD32) eventMask;
-    UnlockDisplay (dpy);
-    SyncHandle ();
-}
-
-XFixesCursorImage *
-XFixesGetCursorImage (Display *dpy)
-{
-    XFixesExtDisplayInfo		*info = XFixesFindDisplay (dpy);
-    xXFixesGetCursorImageAndNameReq	*req;
-    xXFixesGetCursorImageAndNameReply	rep;
-    size_t				npixels;
-    size_t				nbytes_name;
-    size_t				nbytes = 0, nread = 0;
-    XFixesCursorImage			*image;
-    char				*name;
-
-    XFixesCheckExtension (dpy, info, NULL);
-    LockDisplay (dpy);
-    GetReq (XFixesGetCursorImageAndName, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    if (info->major_version >= 2)
-	req->xfixesReqType = X_XFixesGetCursorImageAndName;
-    else
-	req->xfixesReqType = X_XFixesGetCursorImage;
-    if (!_XReply (dpy, (xReply *) &rep, 0, xFalse))
-    {
-	UnlockDisplay (dpy);
-	SyncHandle ();
-	return NULL;
-    }
-    if (info->major_version < 2)
-    {
-	rep.cursorName = None;
-	rep.nbytes = 0;
-    }
-    npixels = rep.width * rep.height;
-    nbytes_name = rep.nbytes;
-    if ((rep.length < (INT_MAX >> 2)) &&
-	npixels < (((INT_MAX >> 3) - sizeof (XFixesCursorImage) - 1)
-		   - nbytes_name)) {
-	size_t	rlength;
-
-	/* reply data length */
-	nbytes = (size_t) rep.length << 2;
-	/* bytes of actual data in the reply */
-	nread = (npixels << 2) + nbytes_name;
-	/* size of data returned to application */
-	rlength = (sizeof (XFixesCursorImage) +
-		   npixels * sizeof (unsigned long) +
-		   nbytes_name + 1);
-
-	image = Xmalloc (rlength);
-    } else
-	image = NULL;
-    if (!image)
-    {
-	_XEatDataWords(dpy, rep.length);
-	UnlockDisplay (dpy);
-	SyncHandle ();
-	return NULL;
-    }
-    image->x = rep.x;
-    image->y = rep.y;
-    image->width = rep.width;
-    image->height = rep.height;
-    image->xhot = rep.xhot;
-    image->yhot = rep.yhot;
-    image->cursor_serial = rep.cursorSerial;
-    image->pixels = (unsigned long *) (image + 1);
-    image->atom = rep.cursorName;
-    name = (char *) (image->pixels + npixels);
-    image->name = name;
-    _XRead32 (dpy, (long *) image->pixels, npixels << 2);
-    _XRead (dpy, name, nbytes_name);
-    name[nbytes_name] = '\0';	/* null-terminate */
-    /* skip any padding */
-    if(nbytes > nread)
-    {
-	_XEatData (dpy, (unsigned long) (nbytes - nread));
-    }
-    UnlockDisplay (dpy);
-    SyncHandle ();
-    return image;
-}
-
-void
-XFixesSetCursorName (Display *dpy, Cursor cursor, const char *name)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesSetCursorNameReq	*req;
-    CARD16			nbytes = (CARD16) strlen (name);
-
-    XFixesSimpleCheckExtension (dpy, info);
-    if (info->major_version < 2)
-	return;
-    LockDisplay (dpy);
-    GetReq (XFixesSetCursorName, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesSetCursorName;
-    req->cursor = (CARD32) cursor;
-    req->nbytes = nbytes;
-    req->length += (nbytes + 3) >> 2;
-    Data (dpy, name, nbytes);
-    UnlockDisplay (dpy);
-    SyncHandle ();
-}
-
-const char *
-XFixesGetCursorName (Display *dpy, Cursor cursor, Atom *atom)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesGetCursorNameReq	*req;
-    xXFixesGetCursorNameReply	rep;
-    char			*name;
-
-    XFixesCheckExtension (dpy, info, NULL);
-    if (info->major_version < 2)
-	return NULL;
-    LockDisplay (dpy);
-    GetReq (XFixesGetCursorName, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesGetCursorName;
-    req->cursor = (CARD32) cursor;
-    if (!_XReply (dpy, (xReply *) &rep, 0, xFalse))
-    {
-	UnlockDisplay (dpy);
-	SyncHandle ();
-	return NULL;
-    }
-    *atom = rep.atom;
-    if ((name = Xmalloc(rep.nbytes+1)) != NULL) {
-	_XReadPad(dpy, name, (long)rep.nbytes);
-	name[rep.nbytes] = '\0';
-    } else {
-	_XEatDataWords(dpy, rep.length);
-	name = (char *) NULL;
-    }
-    UnlockDisplay(dpy);
-    SyncHandle();
-    return(name);
-}
-
-void
-XFixesChangeCursor (Display *dpy, Cursor source, Cursor destination)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesChangeCursorReq	*req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    if (info->major_version < 2)
-	return;
-    LockDisplay (dpy);
-    GetReq (XFixesChangeCursor, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesChangeCursor;
-    req->source = (CARD32) source;
-    req->destination = (CARD32) destination;
-    UnlockDisplay(dpy);
-    SyncHandle();
-}
-
-void
-XFixesChangeCursorByName (Display *dpy, Cursor source, const char *name)
-{
-    XFixesExtDisplayInfo	    *info = XFixesFindDisplay (dpy);
-    xXFixesChangeCursorByNameReq    *req;
-    CARD16			    nbytes = (CARD16) strlen (name);
-
-    XFixesSimpleCheckExtension (dpy, info);
-    if (info->major_version < 2)
-	return;
-    LockDisplay (dpy);
-    GetReq (XFixesChangeCursorByName, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesChangeCursorByName;
-    req->source = (CARD32) source;
-    req->nbytes = nbytes;
-    req->length += (nbytes + 3) >> 2;
-    Data (dpy, name, nbytes);
-    UnlockDisplay(dpy);
-    SyncHandle();
-}
-
-void
-XFixesHideCursor (Display *dpy, Window win)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesHideCursorReq	*req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    if (info->major_version < 4)
-	return;
-    LockDisplay (dpy);
-    GetReq (XFixesHideCursor, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesHideCursor;
-    req->window = (CARD32) win;
-    UnlockDisplay (dpy);
-    SyncHandle ();
-}
-
-void
-XFixesShowCursor (Display *dpy, Window win)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesShowCursorReq	*req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    if (info->major_version < 4)
-	return;
-    LockDisplay (dpy);
-    GetReq (XFixesShowCursor, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesShowCursor;
-    req->window = (CARD32) win;
-    UnlockDisplay (dpy);
-    SyncHandle ();
-}
-
-PointerBarrier
-XFixesCreatePointerBarrier(Display *dpy, Window w, int x1, int y1,
-			   int x2, int y2, int directions,
-			   int num_devices, int *devices)
-{
-    XFixesExtDisplayInfo *info = XFixesFindDisplay (dpy);
-    xXFixesCreatePointerBarrierReq *req;
-    PointerBarrier barrier;
-    int extra = 0;
-
-    XFixesCheckExtension (dpy, info, 0);
-    if (info->major_version < 5)
-	return 0;
-
-    if (num_devices)
-	extra = (((2 * num_devices) + 3) / 4) * 4;
-
-    LockDisplay (dpy);
-    GetReqExtra (XFixesCreatePointerBarrier, extra, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesCreatePointerBarrier;
-    barrier = XAllocID (dpy);
-    req->barrier = (CARD32) barrier;
-    req->window = (CARD32) w;
-    req->x1 = (INT16) x1;
-    req->y1 = (INT16) y1;
-    req->x2 = (INT16) x2;
-    req->y2 = (INT16) y2;
-    req->directions = (CARD32) directions;
-    if ((req->num_devices = (CARD16) num_devices)) {
-	int i;
-	CARD16 *devs = (CARD16 *)(req + 1);
-	for (i = 0; i < num_devices; i++)
-	    devs[i] = (CARD16)(devices[i]);
-    }
-
-    UnlockDisplay (dpy);
-    SyncHandle();
-    return barrier;
-}
-
-void
-XFixesDestroyPointerBarrier(Display *dpy, PointerBarrier b)
-{
-    XFixesExtDisplayInfo *info = XFixesFindDisplay (dpy);
-    xXFixesDestroyPointerBarrierReq *req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    if (info->major_version < 5)
-	return;
-
-    LockDisplay (dpy);
-    GetReq (XFixesDestroyPointerBarrier, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesDestroyPointerBarrier;
-    req->barrier = (CARD32) b;
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
diff --git a/experiments/wasm-gui/third_party/libXfixes/src/Disconnect.c b/experiments/wasm-gui/third_party/libXfixes/src/Disconnect.c
deleted file mode 100644
index ad00b28a1..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/src/Disconnect.c
+++ /dev/null
@@ -1,100 +0,0 @@
-/*
- * Copyright (c) 2006, Oracle and/or its affiliates.
- * Copyright 2021 Red Hat, Inc.
- *
- * Permission is hereby granted, free of charge, to any person obtaining a
- * copy of this software and associated documentation files (the "Software"),
- * to deal in the Software without restriction, including without limitation
- * the rights to use, copy, modify, merge, publish, distribute, sublicense,
- * and/or sell copies of the Software, and to permit persons to whom the
- * Software is furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice (including the next
- * paragraph) shall be included in all copies or substantial portions of the
- * Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL
- * THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
- * LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING
- * FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER
- * DEALINGS IN THE SOFTWARE.
- */
-/*
- * Copyright © 2002 Keith Packard, member of The XFree86 Project, Inc.
- *
- * Permission to use, copy, modify, distribute, and sell this software and its
- * documentation for any purpose is hereby granted without fee, provided that
- * the above copyright notice appear in all copies and that both that
- * copyright notice and this permission notice appear in supporting
- * documentation, and that the name of Keith Packard not be used in
- * advertising or publicity pertaining to distribution of the software without
- * specific, written prior permission.  Keith Packard makes no
- * representations about the suitability of this software for any purpose.  It
- * is provided "as is" without express or implied warranty.
- *
- * KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
- * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
- * EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
- * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
- * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
- * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- * PERFORMANCE OF THIS SOFTWARE.
- */
-
-#ifdef HAVE_CONFIG_H
-#include <config.h>
-#endif
-#include "Xfixesint.h"
-#include <limits.h>
-
-void
-XFixesSetClientDisconnectMode(Display *dpy, int disconnect_mode)
-{
-    XFixesExtDisplayInfo *info = XFixesFindDisplay(dpy);
-    xXFixesSetClientDisconnectModeReq *req;
-
-    XFixesSimpleCheckExtension(dpy, info);
-    if (info->major_version < 6)
-	return;
-
-    LockDisplay(dpy);
-    GetReq(XFixesSetClientDisconnectMode, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesSetClientDisconnectMode;
-    req->disconnect_mode = (CARD32) disconnect_mode;
-    UnlockDisplay(dpy);
-    SyncHandle();
-}
-
-int
-XFixesGetClientDisconnectMode(Display *dpy)
-{
-    XFixesExtDisplayInfo *info = XFixesFindDisplay(dpy);
-    xXFixesGetClientDisconnectModeReq *req;
-    xXFixesGetClientDisconnectModeReply rep;
-    int disconnect_mode;
-
-    XFixesCheckExtension(dpy, info, 0);
-    if (info->major_version < 6)
-	return XFixesClientDisconnectFlagDefault;
-
-    LockDisplay(dpy);
-    GetReq(XFixesGetClientDisconnectMode, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesGetClientDisconnectMode;
-
-    if (!_XReply(dpy, (xReply *) &rep, 0, xFalse))
-    {
-	UnlockDisplay(dpy);
-	SyncHandle();
-	return XFixesClientDisconnectFlagDefault;
-    }
-
-    disconnect_mode = (int) rep.disconnect_mode;
-    UnlockDisplay(dpy);
-    SyncHandle();
-
-    return disconnect_mode;
-}
diff --git a/experiments/wasm-gui/third_party/libXfixes/src/Makefile.am b/experiments/wasm-gui/third_party/libXfixes/src/Makefile.am
deleted file mode 100644
index 7aed41072..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/src/Makefile.am
+++ /dev/null
@@ -1,20 +0,0 @@
-lib_LTLIBRARIES = libXfixes.la
-
-libXfixes_la_SOURCES = 	\
-	Cursor.c	\
-	Disconnect.c	\
-	Region.c	\
-	SaveSet.c	\
-	Selection.c	\
-	Xfixes.c	\
-	Xfixesint.h
-
-AM_CFLAGS = $(CWARNFLAGS) @FIXESEXT_CFLAGS@
-AM_CPPFLAGS = -I$(top_srcdir)/include/X11/extensions
-
-libXfixes_la_LIBADD = @FIXESEXT_LIBS@
-libXfixes_la_LDFLAGS = -version-number 3:1:0 -no-undefined
-
-libXfixesincludedir = $(includedir)/X11/extensions
-libXfixesinclude_HEADERS = $(top_srcdir)/include/X11/extensions/Xfixes.h
-
diff --git a/experiments/wasm-gui/third_party/libXfixes/src/Makefile.in b/experiments/wasm-gui/third_party/libXfixes/src/Makefile.in
deleted file mode 100644
index 7bf4972e2..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/src/Makefile.in
+++ /dev/null
@@ -1,737 +0,0 @@
-# Makefile.in generated by automake 1.16.5 from Makefile.am.
-# @configure_input@
-
-# Copyright (C) 1994-2021 Free Software Foundation, Inc.
-
-# This Makefile.in is free software; the Free Software Foundation
-# gives unlimited permission to copy and/or distribute it,
-# with or without modifications, as long as this notice is preserved.
-
-# This program is distributed in the hope that it will be useful,
-# but WITHOUT ANY WARRANTY, to the extent permitted by law; without
-# even the implied warranty of MERCHANTABILITY or FITNESS FOR A
-# PARTICULAR PURPOSE.
-
-@SET_MAKE@
-
-
-VPATH = @srcdir@
-am__is_gnu_make = { \
-  if test -z '$(MAKELEVEL)'; then \
-    false; \
-  elif test -n '$(MAKE_HOST)'; then \
-    true; \
-  elif test -n '$(MAKE_VERSION)' && test -n '$(CURDIR)'; then \
-    true; \
-  else \
-    false; \
-  fi; \
-}
-am__make_running_with_option = \
-  case $${target_option-} in \
-      ?) ;; \
-      *) echo "am__make_running_with_option: internal error: invalid" \
-              "target option '$${target_option-}' specified" >&2; \
-         exit 1;; \
-  esac; \
-  has_opt=no; \
-  sane_makeflags=$$MAKEFLAGS; \
-  if $(am__is_gnu_make); then \
-    sane_makeflags=$$MFLAGS; \
-  else \
-    case $$MAKEFLAGS in \
-      *\\[\ \	]*) \
-        bs=\\; \
-        sane_makeflags=`printf '%s\n' "$$MAKEFLAGS" \
-          | sed "s/$$bs$$bs[$$bs $$bs	]*//g"`;; \
-    esac; \
-  fi; \
-  skip_next=no; \
-  strip_trailopt () \
-  { \
-    flg=`printf '%s\n' "$$flg" | sed "s/$$1.*$$//"`; \
-  }; \
-  for flg in $$sane_makeflags; do \
-    test $$skip_next = yes && { skip_next=no; continue; }; \
-    case $$flg in \
-      *=*|--*) continue;; \
-        -*I) strip_trailopt 'I'; skip_next=yes;; \
-      -*I?*) strip_trailopt 'I';; \
-        -*O) strip_trailopt 'O'; skip_next=yes;; \
-      -*O?*) strip_trailopt 'O';; \
-        -*l) strip_trailopt 'l'; skip_next=yes;; \
-      -*l?*) strip_trailopt 'l';; \
-      -[dEDm]) skip_next=yes;; \
-      -[JT]) skip_next=yes;; \
-    esac; \
-    case $$flg in \
-      *$$target_option*) has_opt=yes; break;; \
-    esac; \
-  done; \
-  test $$has_opt = yes
-am__make_dryrun = (target_option=n; $(am__make_running_with_option))
-am__make_keepgoing = (target_option=k; $(am__make_running_with_option))
-pkgdatadir = $(datadir)/@PACKAGE@
-pkgincludedir = $(includedir)/@PACKAGE@
-pkglibdir = $(libdir)/@PACKAGE@
-pkglibexecdir = $(libexecdir)/@PACKAGE@
-am__cd = CDPATH="$${ZSH_VERSION+.}$(PATH_SEPARATOR)" && cd
-install_sh_DATA = $(install_sh) -c -m 644
-install_sh_PROGRAM = $(install_sh) -c
-install_sh_SCRIPT = $(install_sh) -c
-INSTALL_HEADER = $(INSTALL_DATA)
-transform = $(program_transform_name)
-NORMAL_INSTALL = :
-PRE_INSTALL = :
-POST_INSTALL = :
-NORMAL_UNINSTALL = :
-PRE_UNINSTALL = :
-POST_UNINSTALL = :
-build_triplet = @build@
-host_triplet = @host@
-subdir = src
-ACLOCAL_M4 = $(top_srcdir)/aclocal.m4
-am__aclocal_m4_deps = $(top_srcdir)/m4/libtool.m4 \
-	$(top_srcdir)/m4/ltoptions.m4 $(top_srcdir)/m4/ltsugar.m4 \
-	$(top_srcdir)/m4/ltversion.m4 $(top_srcdir)/m4/lt~obsolete.m4 \
-	$(top_srcdir)/configure.ac
-am__configure_deps = $(am__aclocal_m4_deps) $(CONFIGURE_DEPENDENCIES) \
-	$(ACLOCAL_M4)
-DIST_COMMON = $(srcdir)/Makefile.am $(libXfixesinclude_HEADERS) \
-	$(am__DIST_COMMON)
-mkinstalldirs = $(install_sh) -d
-CONFIG_HEADER = $(top_builddir)/config.h
-CONFIG_CLEAN_FILES =
-CONFIG_CLEAN_VPATH_FILES =
-am__vpath_adj_setup = srcdirstrip=`echo "$(srcdir)" | sed 's|.|.|g'`;
-am__vpath_adj = case $$p in \
-    $(srcdir)/*) f=`echo "$$p" | sed "s|^$$srcdirstrip/||"`;; \
-    *) f=$$p;; \
-  esac;
-am__strip_dir = f=`echo $$p | sed -e 's|^.*/||'`;
-am__install_max = 40
-am__nobase_strip_setup = \
-  srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*|]/\\\\&/g'`
-am__nobase_strip = \
-  for p in $$list; do echo "$$p"; done | sed -e "s|$$srcdirstrip/||"
-am__nobase_list = $(am__nobase_strip_setup); \
-  for p in $$list; do echo "$$p $$p"; done | \
-  sed "s| $$srcdirstrip/| |;"' / .*\//!s/ .*/ ./; s,\( .*\)/[^/]*$$,\1,' | \
-  $(AWK) 'BEGIN { files["."] = "" } { files[$$2] = files[$$2] " " $$1; \
-    if (++n[$$2] == $(am__install_max)) \
-      { print $$2, files[$$2]; n[$$2] = 0; files[$$2] = "" } } \
-    END { for (dir in files) print dir, files[dir] }'
-am__base_list = \
-  sed '$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;$$!N;s/\n/ /g' | \
-  sed '$$!N;$$!N;$$!N;$$!N;s/\n/ /g'
-am__uninstall_files_from_dir = { \
-  test -z "$$files" \
-    || { test ! -d "$$dir" && test ! -f "$$dir" && test ! -r "$$dir"; } \
-    || { echo " ( cd '$$dir' && rm -f" $$files ")"; \
-         $(am__cd) "$$dir" && rm -f $$files; }; \
-  }
-am__installdirs = "$(DESTDIR)$(libdir)" \
-	"$(DESTDIR)$(libXfixesincludedir)"
-LTLIBRARIES = $(lib_LTLIBRARIES)
-libXfixes_la_DEPENDENCIES =
-am_libXfixes_la_OBJECTS = Cursor.lo Disconnect.lo Region.lo SaveSet.lo \
-	Selection.lo Xfixes.lo
-libXfixes_la_OBJECTS = $(am_libXfixes_la_OBJECTS)
-AM_V_lt = $(am__v_lt_@AM_V@)
-am__v_lt_ = $(am__v_lt_@AM_DEFAULT_V@)
-am__v_lt_0 = --silent
-am__v_lt_1 = 
-libXfixes_la_LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \
-	$(LIBTOOLFLAGS) --mode=link $(CCLD) $(AM_CFLAGS) $(CFLAGS) \
-	$(libXfixes_la_LDFLAGS) $(LDFLAGS) -o $@
-AM_V_P = $(am__v_P_@AM_V@)
-am__v_P_ = $(am__v_P_@AM_DEFAULT_V@)
-am__v_P_0 = false
-am__v_P_1 = :
-AM_V_GEN = $(am__v_GEN_@AM_V@)
-am__v_GEN_ = $(am__v_GEN_@AM_DEFAULT_V@)
-am__v_GEN_0 = @echo "  GEN     " $@;
-am__v_GEN_1 = 
-AM_V_at = $(am__v_at_@AM_V@)
-am__v_at_ = $(am__v_at_@AM_DEFAULT_V@)
-am__v_at_0 = @
-am__v_at_1 = 
-DEFAULT_INCLUDES = -I.@am__isrc@ -I$(top_builddir)
-depcomp = $(SHELL) $(top_srcdir)/depcomp
-am__maybe_remake_depfiles = depfiles
-am__depfiles_remade = ./$(DEPDIR)/Cursor.Plo \
-	./$(DEPDIR)/Disconnect.Plo ./$(DEPDIR)/Region.Plo \
-	./$(DEPDIR)/SaveSet.Plo ./$(DEPDIR)/Selection.Plo \
-	./$(DEPDIR)/Xfixes.Plo
-am__mv = mv -f
-COMPILE = $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) \
-	$(CPPFLAGS) $(AM_CFLAGS) $(CFLAGS)
-LTCOMPILE = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \
-	$(LIBTOOLFLAGS) --mode=compile $(CC) $(DEFS) \
-	$(DEFAULT_INCLUDES) $(INCLUDES) $(AM_CPPFLAGS) $(CPPFLAGS) \
-	$(AM_CFLAGS) $(CFLAGS)
-AM_V_CC = $(am__v_CC_@AM_V@)
-am__v_CC_ = $(am__v_CC_@AM_DEFAULT_V@)
-am__v_CC_0 = @echo "  CC      " $@;
-am__v_CC_1 = 
-CCLD = $(CC)
-LINK = $(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) \
-	$(LIBTOOLFLAGS) --mode=link $(CCLD) $(AM_CFLAGS) $(CFLAGS) \
-	$(AM_LDFLAGS) $(LDFLAGS) -o $@
-AM_V_CCLD = $(am__v_CCLD_@AM_V@)
-am__v_CCLD_ = $(am__v_CCLD_@AM_DEFAULT_V@)
-am__v_CCLD_0 = @echo "  CCLD    " $@;
-am__v_CCLD_1 = 
-SOURCES = $(libXfixes_la_SOURCES)
-DIST_SOURCES = $(libXfixes_la_SOURCES)
-am__can_run_installinfo = \
-  case $$AM_UPDATE_INFO_DIR in \
-    n|no|NO) false;; \
-    *) (install-info --version) >/dev/null 2>&1;; \
-  esac
-HEADERS = $(libXfixesinclude_HEADERS)
-am__tagged_files = $(HEADERS) $(SOURCES) $(TAGS_FILES) $(LISP)
-# Read a list of newline-separated strings from the standard input,
-# and print each of them once, without duplicates.  Input order is
-# *not* preserved.
-am__uniquify_input = $(AWK) '\
-  BEGIN { nonempty = 0; } \
-  { items[$$0] = 1; nonempty = 1; } \
-  END { if (nonempty) { for (i in items) print i; }; } \
-'
-# Make sure the list of sources is unique.  This is necessary because,
-# e.g., the same source file might be shared among _SOURCES variables
-# for different programs/libraries.
-am__define_uniq_tagged_files = \
-  list='$(am__tagged_files)'; \
-  unique=`for i in $$list; do \
-    if test -f "$$i"; then echo $$i; else echo $(srcdir)/$$i; fi; \
-  done | $(am__uniquify_input)`
-am__DIST_COMMON = $(srcdir)/Makefile.in $(top_srcdir)/depcomp
-DISTFILES = $(DIST_COMMON) $(DIST_SOURCES) $(TEXINFOS) $(EXTRA_DIST)
-ACLOCAL = @ACLOCAL@
-ADMIN_MAN_DIR = @ADMIN_MAN_DIR@
-ADMIN_MAN_SUFFIX = @ADMIN_MAN_SUFFIX@
-AMTAR = @AMTAR@
-AM_DEFAULT_VERBOSITY = @AM_DEFAULT_VERBOSITY@
-APP_MAN_DIR = @APP_MAN_DIR@
-APP_MAN_SUFFIX = @APP_MAN_SUFFIX@
-AR = @AR@
-AUTOCONF = @AUTOCONF@
-AUTOHEADER = @AUTOHEADER@
-AUTOMAKE = @AUTOMAKE@
-AWK = @AWK@
-BASE_CFLAGS = @BASE_CFLAGS@
-CC = @CC@
-CCDEPMODE = @CCDEPMODE@
-CFLAGS = @CFLAGS@
-CHANGELOG_CMD = @CHANGELOG_CMD@
-CPPFLAGS = @CPPFLAGS@
-CSCOPE = @CSCOPE@
-CTAGS = @CTAGS@
-CWARNFLAGS = @CWARNFLAGS@
-CYGPATH_W = @CYGPATH_W@
-DEFS = @DEFS@
-DEPDIR = @DEPDIR@
-DLLTOOL = @DLLTOOL@
-DRIVER_MAN_DIR = @DRIVER_MAN_DIR@
-DRIVER_MAN_SUFFIX = @DRIVER_MAN_SUFFIX@
-DSYMUTIL = @DSYMUTIL@
-DUMPBIN = @DUMPBIN@
-ECHO_C = @ECHO_C@
-ECHO_N = @ECHO_N@
-ECHO_T = @ECHO_T@
-EGREP = @EGREP@
-ETAGS = @ETAGS@
-EXEEXT = @EXEEXT@
-FGREP = @FGREP@
-FILECMD = @FILECMD@
-FILE_MAN_DIR = @FILE_MAN_DIR@
-FILE_MAN_SUFFIX = @FILE_MAN_SUFFIX@
-FIXESEXT_CFLAGS = @FIXESEXT_CFLAGS@
-FIXESEXT_LIBS = @FIXESEXT_LIBS@
-FIXESEXT_VERSION = @FIXESEXT_VERSION@
-GREP = @GREP@
-INSTALL = @INSTALL@
-INSTALL_CMD = @INSTALL_CMD@
-INSTALL_DATA = @INSTALL_DATA@
-INSTALL_PROGRAM = @INSTALL_PROGRAM@
-INSTALL_SCRIPT = @INSTALL_SCRIPT@
-INSTALL_STRIP_PROGRAM = @INSTALL_STRIP_PROGRAM@
-LD = @LD@
-LDFLAGS = @LDFLAGS@
-LIBOBJS = @LIBOBJS@
-LIBS = @LIBS@
-LIBTOOL = @LIBTOOL@
-LIB_MAN_DIR = @LIB_MAN_DIR@
-LIB_MAN_SUFFIX = @LIB_MAN_SUFFIX@
-LIPO = @LIPO@
-LN_S = @LN_S@
-LTLIBOBJS = @LTLIBOBJS@
-LT_SYS_LIBRARY_PATH = @LT_SYS_LIBRARY_PATH@
-MAKEINFO = @MAKEINFO@
-MANIFEST_TOOL = @MANIFEST_TOOL@
-MAN_SUBSTS = @MAN_SUBSTS@
-MISC_MAN_DIR = @MISC_MAN_DIR@
-MISC_MAN_SUFFIX = @MISC_MAN_SUFFIX@
-MKDIR_P = @MKDIR_P@
-NM = @NM@
-NMEDIT = @NMEDIT@
-OBJDUMP = @OBJDUMP@
-OBJEXT = @OBJEXT@
-OTOOL = @OTOOL@
-OTOOL64 = @OTOOL64@
-PACKAGE = @PACKAGE@
-PACKAGE_BUGREPORT = @PACKAGE_BUGREPORT@
-PACKAGE_NAME = @PACKAGE_NAME@
-PACKAGE_STRING = @PACKAGE_STRING@
-PACKAGE_TARNAME = @PACKAGE_TARNAME@
-PACKAGE_URL = @PACKAGE_URL@
-PACKAGE_VERSION = @PACKAGE_VERSION@
-PATH_SEPARATOR = @PATH_SEPARATOR@
-PKG_CONFIG = @PKG_CONFIG@
-PKG_CONFIG_LIBDIR = @PKG_CONFIG_LIBDIR@
-PKG_CONFIG_PATH = @PKG_CONFIG_PATH@
-RANLIB = @RANLIB@
-SED = @SED@
-SET_MAKE = @SET_MAKE@
-SHELL = @SHELL@
-STRICT_CFLAGS = @STRICT_CFLAGS@
-STRIP = @STRIP@
-VERSION = @VERSION@
-XORG_MAN_PAGE = @XORG_MAN_PAGE@
-abs_builddir = @abs_builddir@
-abs_srcdir = @abs_srcdir@
-abs_top_builddir = @abs_top_builddir@
-abs_top_srcdir = @abs_top_srcdir@
-ac_ct_AR = @ac_ct_AR@
-ac_ct_CC = @ac_ct_CC@
-ac_ct_DUMPBIN = @ac_ct_DUMPBIN@
-am__include = @am__include@
-am__leading_dot = @am__leading_dot@
-am__quote = @am__quote@
-am__tar = @am__tar@
-am__untar = @am__untar@
-bindir = @bindir@
-build = @build@
-build_alias = @build_alias@
-build_cpu = @build_cpu@
-build_os = @build_os@
-build_vendor = @build_vendor@
-builddir = @builddir@
-datadir = @datadir@
-datarootdir = @datarootdir@
-docdir = @docdir@
-dvidir = @dvidir@
-exec_prefix = @exec_prefix@
-host = @host@
-host_alias = @host_alias@
-host_cpu = @host_cpu@
-host_os = @host_os@
-host_vendor = @host_vendor@
-htmldir = @htmldir@
-includedir = @includedir@
-infodir = @infodir@
-install_sh = @install_sh@
-libdir = @libdir@
-libexecdir = @libexecdir@
-localedir = @localedir@
-localstatedir = @localstatedir@
-mandir = @mandir@
-mkdir_p = @mkdir_p@
-oldincludedir = @oldincludedir@
-pdfdir = @pdfdir@
-prefix = @prefix@
-program_transform_name = @program_transform_name@
-psdir = @psdir@
-runstatedir = @runstatedir@
-sbindir = @sbindir@
-sharedstatedir = @sharedstatedir@
-srcdir = @srcdir@
-sysconfdir = @sysconfdir@
-target_alias = @target_alias@
-top_build_prefix = @top_build_prefix@
-top_builddir = @top_builddir@
-top_srcdir = @top_srcdir@
-lib_LTLIBRARIES = libXfixes.la
-libXfixes_la_SOURCES = \
-	Cursor.c	\
-	Disconnect.c	\
-	Region.c	\
-	SaveSet.c	\
-	Selection.c	\
-	Xfixes.c	\
-	Xfixesint.h
-
-AM_CFLAGS = $(CWARNFLAGS) @FIXESEXT_CFLAGS@
-AM_CPPFLAGS = -I$(top_srcdir)/include/X11/extensions
-libXfixes_la_LIBADD = @FIXESEXT_LIBS@
-libXfixes_la_LDFLAGS = -version-number 3:1:0 -no-undefined
-libXfixesincludedir = $(includedir)/X11/extensions
-libXfixesinclude_HEADERS = $(top_srcdir)/include/X11/extensions/Xfixes.h
-all: all-am
-
-.SUFFIXES:
-.SUFFIXES: .c .lo .o .obj
-$(srcdir)/Makefile.in:  $(srcdir)/Makefile.am  $(am__configure_deps)
-	@for dep in $?; do \
-	  case '$(am__configure_deps)' in \
-	    *$$dep*) \
-	      ( cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh ) \
-	        && { if test -f $@; then exit 0; else break; fi; }; \
-	      exit 1;; \
-	  esac; \
-	done; \
-	echo ' cd $(top_srcdir) && $(AUTOMAKE) --foreign src/Makefile'; \
-	$(am__cd) $(top_srcdir) && \
-	  $(AUTOMAKE) --foreign src/Makefile
-Makefile: $(srcdir)/Makefile.in $(top_builddir)/config.status
-	@case '$?' in \
-	  *config.status*) \
-	    cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh;; \
-	  *) \
-	    echo ' cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles)'; \
-	    cd $(top_builddir) && $(SHELL) ./config.status $(subdir)/$@ $(am__maybe_remake_depfiles);; \
-	esac;
-
-$(top_builddir)/config.status: $(top_srcdir)/configure $(CONFIG_STATUS_DEPENDENCIES)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-
-$(top_srcdir)/configure:  $(am__configure_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(ACLOCAL_M4):  $(am__aclocal_m4_deps)
-	cd $(top_builddir) && $(MAKE) $(AM_MAKEFLAGS) am--refresh
-$(am__aclocal_m4_deps):
-
-install-libLTLIBRARIES: $(lib_LTLIBRARIES)
-	@$(NORMAL_INSTALL)
-	@list='$(lib_LTLIBRARIES)'; test -n "$(libdir)" || list=; \
-	list2=; for p in $$list; do \
-	  if test -f $$p; then \
-	    list2="$$list2 $$p"; \
-	  else :; fi; \
-	done; \
-	test -z "$$list2" || { \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(libdir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(libdir)" || exit 1; \
-	  echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 '$(DESTDIR)$(libdir)'"; \
-	  $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=install $(INSTALL) $(INSTALL_STRIP_FLAG) $$list2 "$(DESTDIR)$(libdir)"; \
-	}
-
-uninstall-libLTLIBRARIES:
-	@$(NORMAL_UNINSTALL)
-	@list='$(lib_LTLIBRARIES)'; test -n "$(libdir)" || list=; \
-	for p in $$list; do \
-	  $(am__strip_dir) \
-	  echo " $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f '$(DESTDIR)$(libdir)/$$f'"; \
-	  $(LIBTOOL) $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=uninstall rm -f "$(DESTDIR)$(libdir)/$$f"; \
-	done
-
-clean-libLTLIBRARIES:
-	-test -z "$(lib_LTLIBRARIES)" || rm -f $(lib_LTLIBRARIES)
-	@list='$(lib_LTLIBRARIES)'; \
-	locs=`for p in $$list; do echo $$p; done | \
-	      sed 's|^[^/]*$$|.|; s|/[^/]*$$||; s|$$|/so_locations|' | \
-	      sort -u`; \
-	test -z "$$locs" || { \
-	  echo rm -f $${locs}; \
-	  rm -f $${locs}; \
-	}
-
-libXfixes.la: $(libXfixes_la_OBJECTS) $(libXfixes_la_DEPENDENCIES) $(EXTRA_libXfixes_la_DEPENDENCIES) 
-	$(AM_V_CCLD)$(libXfixes_la_LINK) -rpath $(libdir) $(libXfixes_la_OBJECTS) $(libXfixes_la_LIBADD) $(LIBS)
-
-mostlyclean-compile:
-	-rm -f *.$(OBJEXT)
-
-distclean-compile:
-	-rm -f *.tab.c
-
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/Cursor.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/Disconnect.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/Region.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/SaveSet.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/Selection.Plo@am__quote@ # am--include-marker
-@AMDEP_TRUE@@am__include@ @am__quote@./$(DEPDIR)/Xfixes.Plo@am__quote@ # am--include-marker
-
-$(am__depfiles_remade):
-	@$(MKDIR_P) $(@D)
-	@echo '# dummy' >$@-t && $(am__mv) $@-t $@
-
-am--depfiles: $(am__depfiles_remade)
-
-.c.o:
-@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
-@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
-@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
-@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
-@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c -o $@ $<
-
-.c.obj:
-@am__fastdepCC_TRUE@	$(AM_V_CC)$(COMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ `$(CYGPATH_W) '$<'`
-@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Po
-@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=no @AMDEPBACKSLASH@
-@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
-@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(COMPILE) -c -o $@ `$(CYGPATH_W) '$<'`
-
-.c.lo:
-@am__fastdepCC_TRUE@	$(AM_V_CC)$(LTCOMPILE) -MT $@ -MD -MP -MF $(DEPDIR)/$*.Tpo -c -o $@ $<
-@am__fastdepCC_TRUE@	$(AM_V_at)$(am__mv) $(DEPDIR)/$*.Tpo $(DEPDIR)/$*.Plo
-@AMDEP_TRUE@@am__fastdepCC_FALSE@	$(AM_V_CC)source='$<' object='$@' libtool=yes @AMDEPBACKSLASH@
-@AMDEP_TRUE@@am__fastdepCC_FALSE@	DEPDIR=$(DEPDIR) $(CCDEPMODE) $(depcomp) @AMDEPBACKSLASH@
-@am__fastdepCC_FALSE@	$(AM_V_CC@am__nodep@)$(LTCOMPILE) -c -o $@ $<
-
-mostlyclean-libtool:
-	-rm -f *.lo
-
-clean-libtool:
-	-rm -rf .libs _libs
-install-libXfixesincludeHEADERS: $(libXfixesinclude_HEADERS)
-	@$(NORMAL_INSTALL)
-	@list='$(libXfixesinclude_HEADERS)'; test -n "$(libXfixesincludedir)" || list=; \
-	if test -n "$$list"; then \
-	  echo " $(MKDIR_P) '$(DESTDIR)$(libXfixesincludedir)'"; \
-	  $(MKDIR_P) "$(DESTDIR)$(libXfixesincludedir)" || exit 1; \
-	fi; \
-	for p in $$list; do \
-	  if test -f "$$p"; then d=; else d="$(srcdir)/"; fi; \
-	  echo "$$d$$p"; \
-	done | $(am__base_list) | \
-	while read files; do \
-	  echo " $(INSTALL_HEADER) $$files '$(DESTDIR)$(libXfixesincludedir)'"; \
-	  $(INSTALL_HEADER) $$files "$(DESTDIR)$(libXfixesincludedir)" || exit $$?; \
-	done
-
-uninstall-libXfixesincludeHEADERS:
-	@$(NORMAL_UNINSTALL)
-	@list='$(libXfixesinclude_HEADERS)'; test -n "$(libXfixesincludedir)" || list=; \
-	files=`for p in $$list; do echo $$p; done | sed -e 's|^.*/||'`; \
-	dir='$(DESTDIR)$(libXfixesincludedir)'; $(am__uninstall_files_from_dir)
-
-ID: $(am__tagged_files)
-	$(am__define_uniq_tagged_files); mkid -fID $$unique
-tags: tags-am
-TAGS: tags
-
-tags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
-	set x; \
-	here=`pwd`; \
-	$(am__define_uniq_tagged_files); \
-	shift; \
-	if test -z "$(ETAGS_ARGS)$$*$$unique"; then :; else \
-	  test -n "$$unique" || unique=$$empty_fix; \
-	  if test $$# -gt 0; then \
-	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
-	      "$$@" $$unique; \
-	  else \
-	    $(ETAGS) $(ETAGSFLAGS) $(AM_ETAGSFLAGS) $(ETAGS_ARGS) \
-	      $$unique; \
-	  fi; \
-	fi
-ctags: ctags-am
-
-CTAGS: ctags
-ctags-am: $(TAGS_DEPENDENCIES) $(am__tagged_files)
-	$(am__define_uniq_tagged_files); \
-	test -z "$(CTAGS_ARGS)$$unique" \
-	  || $(CTAGS) $(CTAGSFLAGS) $(AM_CTAGSFLAGS) $(CTAGS_ARGS) \
-	     $$unique
-
-GTAGS:
-	here=`$(am__cd) $(top_builddir) && pwd` \
-	  && $(am__cd) $(top_srcdir) \
-	  && gtags -i $(GTAGS_ARGS) "$$here"
-cscopelist: cscopelist-am
-
-cscopelist-am: $(am__tagged_files)
-	list='$(am__tagged_files)'; \
-	case "$(srcdir)" in \
-	  [\\/]* | ?:[\\/]*) sdir="$(srcdir)" ;; \
-	  *) sdir=$(subdir)/$(srcdir) ;; \
-	esac; \
-	for i in $$list; do \
-	  if test -f "$$i"; then \
-	    echo "$(subdir)/$$i"; \
-	  else \
-	    echo "$$sdir/$$i"; \
-	  fi; \
-	done >> $(top_builddir)/cscope.files
-
-distclean-tags:
-	-rm -f TAGS ID GTAGS GRTAGS GSYMS GPATH tags
-distdir: $(BUILT_SOURCES)
-	$(MAKE) $(AM_MAKEFLAGS) distdir-am
-
-distdir-am: $(DISTFILES)
-	@srcdirstrip=`echo "$(srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	topsrcdirstrip=`echo "$(top_srcdir)" | sed 's/[].[^$$\\*]/\\\\&/g'`; \
-	list='$(DISTFILES)'; \
-	  dist_files=`for file in $$list; do echo $$file; done | \
-	  sed -e "s|^$$srcdirstrip/||;t" \
-	      -e "s|^$$topsrcdirstrip/|$(top_builddir)/|;t"`; \
-	case $$dist_files in \
-	  */*) $(MKDIR_P) `echo "$$dist_files" | \
-			   sed '/\//!d;s|^|$(distdir)/|;s,/[^/]*$$,,' | \
-			   sort -u` ;; \
-	esac; \
-	for file in $$dist_files; do \
-	  if test -f $$file || test -d $$file; then d=.; else d=$(srcdir); fi; \
-	  if test -d $$d/$$file; then \
-	    dir=`echo "/$$file" | sed -e 's,/[^/]*$$,,'`; \
-	    if test -d "$(distdir)/$$file"; then \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    if test -d $(srcdir)/$$file && test $$d != $(srcdir); then \
-	      cp -fpR $(srcdir)/$$file "$(distdir)$$dir" || exit 1; \
-	      find "$(distdir)/$$file" -type d ! -perm -700 -exec chmod u+rwx {} \;; \
-	    fi; \
-	    cp -fpR $$d/$$file "$(distdir)$$dir" || exit 1; \
-	  else \
-	    test -f "$(distdir)/$$file" \
-	    || cp -p $$d/$$file "$(distdir)/$$file" \
-	    || exit 1; \
-	  fi; \
-	done
-check-am: all-am
-check: check-am
-all-am: Makefile $(LTLIBRARIES) $(HEADERS)
-installdirs:
-	for dir in "$(DESTDIR)$(libdir)" "$(DESTDIR)$(libXfixesincludedir)"; do \
-	  test -z "$$dir" || $(MKDIR_P) "$$dir"; \
-	done
-install: install-am
-install-exec: install-exec-am
-install-data: install-data-am
-uninstall: uninstall-am
-
-install-am: all-am
-	@$(MAKE) $(AM_MAKEFLAGS) install-exec-am install-data-am
-
-installcheck: installcheck-am
-install-strip:
-	if test -z '$(STRIP)'; then \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	      install; \
-	else \
-	  $(MAKE) $(AM_MAKEFLAGS) INSTALL_PROGRAM="$(INSTALL_STRIP_PROGRAM)" \
-	    install_sh_PROGRAM="$(INSTALL_STRIP_PROGRAM)" INSTALL_STRIP_FLAG=-s \
-	    "INSTALL_PROGRAM_ENV=STRIPPROG='$(STRIP)'" install; \
-	fi
-mostlyclean-generic:
-
-clean-generic:
-
-distclean-generic:
-	-test -z "$(CONFIG_CLEAN_FILES)" || rm -f $(CONFIG_CLEAN_FILES)
-	-test . = "$(srcdir)" || test -z "$(CONFIG_CLEAN_VPATH_FILES)" || rm -f $(CONFIG_CLEAN_VPATH_FILES)
-
-maintainer-clean-generic:
-	@echo "This command is intended for maintainers to use"
-	@echo "it deletes files that may require special tools to rebuild."
-clean: clean-am
-
-clean-am: clean-generic clean-libLTLIBRARIES clean-libtool \
-	mostlyclean-am
-
-distclean: distclean-am
-		-rm -f ./$(DEPDIR)/Cursor.Plo
-	-rm -f ./$(DEPDIR)/Disconnect.Plo
-	-rm -f ./$(DEPDIR)/Region.Plo
-	-rm -f ./$(DEPDIR)/SaveSet.Plo
-	-rm -f ./$(DEPDIR)/Selection.Plo
-	-rm -f ./$(DEPDIR)/Xfixes.Plo
-	-rm -f Makefile
-distclean-am: clean-am distclean-compile distclean-generic \
-	distclean-tags
-
-dvi: dvi-am
-
-dvi-am:
-
-html: html-am
-
-html-am:
-
-info: info-am
-
-info-am:
-
-install-data-am: install-libXfixesincludeHEADERS
-
-install-dvi: install-dvi-am
-
-install-dvi-am:
-
-install-exec-am: install-libLTLIBRARIES
-
-install-html: install-html-am
-
-install-html-am:
-
-install-info: install-info-am
-
-install-info-am:
-
-install-man:
-
-install-pdf: install-pdf-am
-
-install-pdf-am:
-
-install-ps: install-ps-am
-
-install-ps-am:
-
-installcheck-am:
-
-maintainer-clean: maintainer-clean-am
-		-rm -f ./$(DEPDIR)/Cursor.Plo
-	-rm -f ./$(DEPDIR)/Disconnect.Plo
-	-rm -f ./$(DEPDIR)/Region.Plo
-	-rm -f ./$(DEPDIR)/SaveSet.Plo
-	-rm -f ./$(DEPDIR)/Selection.Plo
-	-rm -f ./$(DEPDIR)/Xfixes.Plo
-	-rm -f Makefile
-maintainer-clean-am: distclean-am maintainer-clean-generic
-
-mostlyclean: mostlyclean-am
-
-mostlyclean-am: mostlyclean-compile mostlyclean-generic \
-	mostlyclean-libtool
-
-pdf: pdf-am
-
-pdf-am:
-
-ps: ps-am
-
-ps-am:
-
-uninstall-am: uninstall-libLTLIBRARIES \
-	uninstall-libXfixesincludeHEADERS
-
-.MAKE: install-am install-strip
-
-.PHONY: CTAGS GTAGS TAGS all all-am am--depfiles check check-am clean \
-	clean-generic clean-libLTLIBRARIES clean-libtool cscopelist-am \
-	ctags ctags-am distclean distclean-compile distclean-generic \
-	distclean-libtool distclean-tags distdir dvi dvi-am html \
-	html-am info info-am install install-am install-data \
-	install-data-am install-dvi install-dvi-am install-exec \
-	install-exec-am install-html install-html-am install-info \
-	install-info-am install-libLTLIBRARIES \
-	install-libXfixesincludeHEADERS install-man install-pdf \
-	install-pdf-am install-ps install-ps-am install-strip \
-	installcheck installcheck-am installdirs maintainer-clean \
-	maintainer-clean-generic mostlyclean mostlyclean-compile \
-	mostlyclean-generic mostlyclean-libtool pdf pdf-am ps ps-am \
-	tags tags-am uninstall uninstall-am uninstall-libLTLIBRARIES \
-	uninstall-libXfixesincludeHEADERS
-
-.PRECIOUS: Makefile
-
-
-# Tell versions [3.59,3.63) of GNU make to not export all variables.
-# Otherwise a system limit (for SysV at least) may be exceeded.
-.NOEXPORT:
diff --git a/experiments/wasm-gui/third_party/libXfixes/src/Region.c b/experiments/wasm-gui/third_party/libXfixes/src/Region.c
deleted file mode 100644
index 20db21a65..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/src/Region.c
+++ /dev/null
@@ -1,458 +0,0 @@
-/*
- * Copyright © 2003 Keith Packard
- *
- * Permission to use, copy, modify, distribute, and sell this software and its
- * documentation for any purpose is hereby granted without fee, provided that
- * the above copyright notice appear in all copies and that both that
- * copyright notice and this permission notice appear in supporting
- * documentation, and that the name of Keith Packard not be used in
- * advertising or publicity pertaining to distribution of the software without
- * specific, written prior permission.  Keith Packard makes no
- * representations about the suitability of this software for any purpose.  It
- * is provided "as is" without express or implied warranty.
- *
- * KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
- * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
- * EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
- * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
- * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
- * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- * PERFORMANCE OF THIS SOFTWARE.
- */
-
-#ifdef HAVE_CONFIG_H
-#include <config.h>
-#endif
-#include <limits.h>
-#include "Xfixesint.h"
-
-XserverRegion
-XFixesCreateRegion (Display *dpy, XRectangle *rectangles, int nrectangles)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesCreateRegionReq	*req;
-    long    			len;
-    XserverRegion		region;
-
-    XFixesCheckExtension (dpy, info, 0);
-    LockDisplay (dpy);
-    GetReq (XFixesCreateRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesCreateRegion;
-    region = XAllocID (dpy);
-    req->region = (CARD32) region;
-    len = ((long) nrectangles) << 1;
-    SetReqLen (req, len, len);
-    len <<= 2;
-    Data16 (dpy, (short *) rectangles, len);
-    UnlockDisplay (dpy);
-    SyncHandle();
-    return region;
-}
-
-XserverRegion
-XFixesCreateRegionFromBitmap (Display *dpy, Pixmap bitmap)
-{
-    XFixesExtDisplayInfo		*info = XFixesFindDisplay (dpy);
-    xXFixesCreateRegionFromBitmapReq	*req;
-    XserverRegion			region;
-
-    XFixesCheckExtension (dpy, info, 0);
-    LockDisplay (dpy);
-    GetReq (XFixesCreateRegionFromBitmap, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesCreateRegionFromBitmap;
-    region = XAllocID (dpy);
-    req->region = (CARD32) region;
-    req->bitmap = (CARD32) bitmap;
-    UnlockDisplay (dpy);
-    SyncHandle();
-    return region;
-}
-
-XserverRegion
-XFixesCreateRegionFromWindow (Display *dpy, Window window, int kind)
-{
-    XFixesExtDisplayInfo		*info = XFixesFindDisplay (dpy);
-    xXFixesCreateRegionFromWindowReq	*req;
-    XserverRegion			region;
-
-    XFixesCheckExtension (dpy, info, 0);
-    LockDisplay (dpy);
-    GetReq (XFixesCreateRegionFromWindow, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesCreateRegionFromWindow;
-    region = XAllocID (dpy);
-    req->region = (CARD32) region;
-    req->window = (CARD32) window;
-    req->kind = (CARD8) kind;
-    UnlockDisplay (dpy);
-    SyncHandle();
-    return region;
-}
-
-XserverRegion
-XFixesCreateRegionFromGC (Display *dpy, GC gc)
-{
-    XFixesExtDisplayInfo		*info = XFixesFindDisplay (dpy);
-    xXFixesCreateRegionFromGCReq	*req;
-    XserverRegion			region;
-
-    XFixesCheckExtension (dpy, info, 0);
-    LockDisplay (dpy);
-    GetReq (XFixesCreateRegionFromGC, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesCreateRegionFromGC;
-    region = XAllocID (dpy);
-    req->region = (CARD32) region;
-    req->gc = (CARD32) gc->gid;
-    UnlockDisplay (dpy);
-    SyncHandle();
-    return region;
-}
-
-XserverRegion
-XFixesCreateRegionFromPicture (Display *dpy, XID picture)
-{
-    XFixesExtDisplayInfo		*info = XFixesFindDisplay (dpy);
-    xXFixesCreateRegionFromPictureReq	*req;
-    XserverRegion			region;
-
-    XFixesCheckExtension (dpy, info, 0);
-    LockDisplay (dpy);
-    GetReq (XFixesCreateRegionFromPicture, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesCreateRegionFromPicture;
-    region = XAllocID (dpy);
-    req->region = (CARD32) region;
-    req->picture = (CARD32) picture;
-    UnlockDisplay (dpy);
-    SyncHandle();
-    return region;
-}
-
-void
-XFixesDestroyRegion (Display *dpy, XserverRegion region)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesDestroyRegionReq	*req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    LockDisplay (dpy);
-    GetReq (XFixesDestroyRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesDestroyRegion;
-    req->region = (CARD32) region;
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
-
-void
-XFixesSetRegion (Display *dpy, XserverRegion region,
-		 XRectangle *rectangles, int nrectangles)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesSetRegionReq		*req;
-    long    			len;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    LockDisplay (dpy);
-    GetReq (XFixesSetRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesSetRegion;
-    req->region = (CARD32) region;
-    len = ((long) nrectangles) << 1;
-    SetReqLen (req, len, len);
-    len <<= 2;
-    Data16 (dpy, (short *) rectangles, len);
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
-
-void
-XFixesCopyRegion (Display *dpy, XserverRegion dst, XserverRegion src)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesCopyRegionReq	*req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    LockDisplay (dpy);
-    GetReq (XFixesCopyRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesCopyRegion;
-    req->source = (CARD32) src;
-    req->destination = (CARD32) dst;
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
-
-void
-XFixesUnionRegion (Display *dpy, XserverRegion dst,
-		   XserverRegion src1, XserverRegion src2)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesUnionRegionReq	*req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    LockDisplay (dpy);
-    GetReq (XFixesUnionRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesUnionRegion;
-    req->source1 = (CARD32) src1;
-    req->source2 = (CARD32) src2;
-    req->destination = (CARD32) dst;
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
-
-void
-XFixesIntersectRegion (Display *dpy, XserverRegion dst,
-		       XserverRegion src1, XserverRegion src2)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesIntersectRegionReq	*req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    LockDisplay (dpy);
-    GetReq (XFixesIntersectRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesIntersectRegion;
-    req->source1 = (CARD32) src1;
-    req->source2 = (CARD32) src2;
-    req->destination = (CARD32) dst;
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
-
-void
-XFixesSubtractRegion (Display *dpy, XserverRegion dst,
-		      XserverRegion src1, XserverRegion src2)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesSubtractRegionReq	*req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    LockDisplay (dpy);
-    GetReq (XFixesSubtractRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesSubtractRegion;
-    req->source1 = (CARD32) src1;
-    req->source2 = (CARD32) src2;
-    req->destination = (CARD32) dst;
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
-
-void
-XFixesInvertRegion (Display *dpy, XserverRegion dst,
-		    XRectangle *rect, XserverRegion src)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesInvertRegionReq	*req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    LockDisplay (dpy);
-    GetReq (XFixesInvertRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesInvertRegion;
-    req->x = rect->x;
-    req->y = rect->y;
-    req->width = rect->width;
-    req->height = rect->height;
-    req->source = (CARD32) src;
-    req->destination = (CARD32) dst;
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
-
-void
-XFixesTranslateRegion (Display *dpy, XserverRegion region, int dx, int dy)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesTranslateRegionReq	*req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    LockDisplay (dpy);
-    GetReq (XFixesTranslateRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesTranslateRegion;
-    req->region = (CARD32) region;
-    req->dx = (INT16) dx;
-    req->dy = (INT16) dy;
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
-
-void
-XFixesRegionExtents (Display *dpy, XserverRegion dst, XserverRegion src)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesRegionExtentsReq	*req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    LockDisplay (dpy);
-    GetReq (XFixesRegionExtents, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesRegionExtents;
-    req->source = (CARD32) src;
-    req->destination = (CARD32) dst;
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
-
-XRectangle *
-XFixesFetchRegion (Display *dpy, XserverRegion region, int *nrectanglesRet)
-{
-    XRectangle	bounds;
-
-    return XFixesFetchRegionAndBounds (dpy, region, nrectanglesRet, &bounds);
-}
-
-XRectangle *
-XFixesFetchRegionAndBounds (Display	    *dpy,
-			    XserverRegion   region,
-			    int		    *nrectanglesRet,
-			    XRectangle	    *bounds)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesFetchRegionReq	*req;
-    xXFixesFetchRegionReply	rep;
-    XRectangle			*rects;
-    int    			nrects;
-    long    			nbytes;
-    long			nread;
-
-    XFixesCheckExtension (dpy, info, NULL);
-    LockDisplay (dpy);
-    GetReq (XFixesFetchRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesFetchRegion;
-    req->region = (CARD32) region;
-    *nrectanglesRet = 0;
-    if (!_XReply (dpy, (xReply *) &rep, 0, xFalse))
-    {
-	UnlockDisplay (dpy);
-	SyncHandle ();
-	return NULL;
-    }
-    bounds->x = rep.x;
-    bounds->y = rep.y;
-    bounds->width = rep.width;
-    bounds->height = rep.height;
-
-    if (rep.length < (INT_MAX >> 2)) {
-	nbytes = (long) rep.length << 2;
-	nrects = rep.length >> 1;
-	rects = Xmalloc ((size_t) nrects * sizeof (XRectangle));
-    } else {
-	nbytes = 0;
-	nrects = 0;
-	rects = NULL;
-    }
-
-    if (!rects)
-    {
-	_XEatDataWords(dpy, rep.length);
-	UnlockDisplay (dpy);
-	SyncHandle ();
-	return NULL;
-    }
-    nread = nrects << 3;
-    _XRead16 (dpy, (short *) rects, nread);
-    /* skip any padding */
-    if(nbytes > nread)
-    {
-	_XEatData (dpy, (unsigned long) (nbytes - nread));
-    }
-    UnlockDisplay (dpy);
-    SyncHandle();
-    *nrectanglesRet = nrects;
-    return rects;
-}
-
-void
-XFixesSetGCClipRegion (Display *dpy, GC gc,
-		       int clip_x_origin, int clip_y_origin,
-		       XserverRegion region)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesSetGCClipRegionReq	    *req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    LockDisplay (dpy);
-    GetReq (XFixesSetGCClipRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesSetGCClipRegion;
-    req->gc = (CARD32) gc->gid;
-    req->region = (CARD32) region;
-    req->xOrigin = (INT16) clip_x_origin;
-    req->yOrigin = (INT16) clip_y_origin;
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
-
-void
-XFixesSetWindowShapeRegion (Display *dpy, Window win, int shape_kind,
-			    int x_off, int y_off, XserverRegion region)
-{
-    XFixesExtDisplayInfo	    *info = XFixesFindDisplay (dpy);
-    xXFixesSetWindowShapeRegionReq  *req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    LockDisplay (dpy);
-    GetReq (XFixesSetWindowShapeRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesSetWindowShapeRegion;
-    req->dest = (CARD32) win;
-    req->destKind = (BYTE) shape_kind;
-    req->xOff = (INT16) x_off;
-    req->yOff = (INT16) y_off;
-    req->region = (CARD32) region;
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
-
-void
-XFixesSetPictureClipRegion (Display *dpy, XID picture,
-			    int clip_x_origin, int clip_y_origin,
-			    XserverRegion region)
-{
-    XFixesExtDisplayInfo	    *info = XFixesFindDisplay (dpy);
-    xXFixesSetPictureClipRegionReq  *req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    LockDisplay (dpy);
-    GetReq (XFixesSetPictureClipRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesSetPictureClipRegion;
-    req->picture = (CARD32) picture;
-    req->region = (CARD32) region;
-    req->xOrigin = (INT16) clip_x_origin;
-    req->yOrigin = (INT16) clip_y_origin;
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
-
-void
-XFixesExpandRegion (Display *dpy, XserverRegion dst, XserverRegion src,
-		    unsigned left, unsigned right,
-		    unsigned top, unsigned bottom)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesExpandRegionReq	*req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-    LockDisplay (dpy);
-    GetReq (XFixesExpandRegion, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesExpandRegion;
-    req->source = (CARD32) src;
-    req->destination = (CARD32) dst;
-    req->left = (CARD16) left;
-    req->right = (CARD16) right;
-    req->top = (CARD16) top;
-    req->bottom = (CARD16) bottom;
-    UnlockDisplay (dpy);
-    SyncHandle();
-}
-
diff --git a/experiments/wasm-gui/third_party/libXfixes/src/SaveSet.c b/experiments/wasm-gui/third_party/libXfixes/src/SaveSet.c
deleted file mode 100644
index 26115d7da..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/src/SaveSet.c
+++ /dev/null
@@ -1,47 +0,0 @@
-/*
- *
- * Copyright © 2002 Keith Packard, member of The XFree86 Project, Inc.
- *
- * Permission to use, copy, modify, distribute, and sell this software and its
- * documentation for any purpose is hereby granted without fee, provided that
- * the above copyright notice appear in all copies and that both that
- * copyright notice and this permission notice appear in supporting
- * documentation, and that the name of Keith Packard not be used in
- * advertising or publicity pertaining to distribution of the software without
- * specific, written prior permission.  Keith Packard makes no
- * representations about the suitability of this software for any purpose.  It
- * is provided "as is" without express or implied warranty.
- *
- * KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
- * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
- * EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
- * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
- * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
- * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- * PERFORMANCE OF THIS SOFTWARE.
- */
-
-#ifdef HAVE_CONFIG_H
-#include <config.h>
-#endif
-#include "Xfixesint.h"
-
-void
-XFixesChangeSaveSet (Display *dpy, Window win, int mode, int target, int map)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-    xXFixesChangeSaveSetReq	*req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-
-    LockDisplay (dpy);
-    GetReq (XFixesChangeSaveSet, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesChangeSaveSet;
-    req->mode = (BYTE) mode;
-    req->target = (BYTE) target;
-    req->map = (BYTE) map;
-    req->window = (CARD32) win;
-    UnlockDisplay (dpy);
-    SyncHandle ();
-}
diff --git a/experiments/wasm-gui/third_party/libXfixes/src/Selection.c b/experiments/wasm-gui/third_party/libXfixes/src/Selection.c
deleted file mode 100644
index 996460cd6..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/src/Selection.c
+++ /dev/null
@@ -1,49 +0,0 @@
-/*
- *
- * Copyright © 2002 Keith Packard, member of The XFree86 Project, Inc.
- *
- * Permission to use, copy, modify, distribute, and sell this software and its
- * documentation for any purpose is hereby granted without fee, provided that
- * the above copyright notice appear in all copies and that both that
- * copyright notice and this permission notice appear in supporting
- * documentation, and that the name of Keith Packard not be used in
- * advertising or publicity pertaining to distribution of the software without
- * specific, written prior permission.  Keith Packard makes no
- * representations about the suitability of this software for any purpose.  It
- * is provided "as is" without express or implied warranty.
- *
- * KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
- * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
- * EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
- * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
- * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
- * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- * PERFORMANCE OF THIS SOFTWARE.
- */
-
-#ifdef HAVE_CONFIG_H
-#include <config.h>
-#endif
-#include "Xfixesint.h"
-
-void
-XFixesSelectSelectionInput (Display	    *dpy,
-			    Window	    win,
-			    Atom	    selection,
-			    unsigned long   eventMask)
-{
-    XFixesExtDisplayInfo	    *info = XFixesFindDisplay (dpy);
-    xXFixesSelectSelectionInputReq  *req;
-
-    XFixesSimpleCheckExtension (dpy, info);
-
-    LockDisplay (dpy);
-    GetReq (XFixesSelectSelectionInput, req);
-    req->reqType = (CARD8) info->codes->major_opcode;
-    req->xfixesReqType = X_XFixesSelectSelectionInput;
-    req->window = (CARD32) win;
-    req->selection = (CARD32) selection;
-    req->eventMask = (CARD32) eventMask;
-    UnlockDisplay (dpy);
-    SyncHandle ();
-}
diff --git a/experiments/wasm-gui/third_party/libXfixes/src/Xfixes.c b/experiments/wasm-gui/third_party/libXfixes/src/Xfixes.c
deleted file mode 100644
index 557b21d6b..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/src/Xfixes.c
+++ /dev/null
@@ -1,334 +0,0 @@
-/*
- *
- * Copyright © 2002 Keith Packard, member of The XFree86 Project, Inc.
- *
- * Permission to use, copy, modify, distribute, and sell this software and its
- * documentation for any purpose is hereby granted without fee, provided that
- * the above copyright notice appear in all copies and that both that
- * copyright notice and this permission notice appear in supporting
- * documentation, and that the name of Keith Packard not be used in
- * advertising or publicity pertaining to distribution of the software without
- * specific, written prior permission.  Keith Packard makes no
- * representations about the suitability of this software for any purpose.  It
- * is provided "as is" without express or implied warranty.
- *
- * KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
- * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
- * EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
- * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
- * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
- * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- * PERFORMANCE OF THIS SOFTWARE.
- */
-
-#ifdef HAVE_CONFIG_H
-#include <config.h>
-#endif
-#include <X11/Xfuncproto.h>
-#include "Xfixesint.h"
-
-XFixesExtInfo XFixesExtensionInfo;
-char XFixesExtensionName[] = XFIXES_NAME;
-
-static int
-XFixesCloseDisplay (Display *dpy, XExtCodes *codes);
-
-static Bool
-XFixesWireToEvent(Display *dpy, XEvent *event, xEvent *wire);
-
-static Status
-XFixesEventToWire(Display *dpy, XEvent *event, xEvent *wire);
-
-/*
- * XFixesExtAddDisplay - add a display to this extension. (Replaces
- * XextAddDisplay)
- */
-static XFixesExtDisplayInfo *
-XFixesExtAddDisplay (XFixesExtInfo *extinfo,
-                      Display        *dpy,
-                      char           *ext_name)
-{
-    XFixesExtDisplayInfo    *info;
-
-    info = Xmalloc (sizeof (XFixesExtDisplayInfo));
-    if (!info) return NULL;
-    info->display = dpy;
-
-    info->codes = XInitExtension (dpy, ext_name);
-
-    /*
-     * if the server has the extension, then we can initialize the
-     * appropriate function vectors
-     */
-    if (info->codes) {
-	xXFixesQueryVersionReply	rep;
-	xXFixesQueryVersionReq	*req;
-        XESetCloseDisplay (dpy, info->codes->extension,
-                           XFixesCloseDisplay);
-	for (int ev = info->codes->first_event;
-	     ev < info->codes->first_event + XFixesNumberEvents;
-	     ev++)
-	{
-	    XESetWireToEvent (dpy, ev, XFixesWireToEvent);
-	    XESetEventToWire (dpy, ev, XFixesEventToWire);
-	}
-	/*
-	 * Get the version info
-	 */
-	LockDisplay (dpy);
-	GetReq (XFixesQueryVersion, req);
-	req->reqType = (CARD8) info->codes->major_opcode;
-	req->xfixesReqType = X_XFixesQueryVersion;
-	req->majorVersion = XFIXES_MAJOR;
-	req->minorVersion = XFIXES_MINOR;
-	if (!_XReply (dpy, (xReply *) &rep, 0, xTrue))
-	{
-	    UnlockDisplay (dpy);
-	    SyncHandle ();
-	    Xfree(info);
-	    return NULL;
-	}
-	info->major_version = (int) rep.majorVersion;
-	info->minor_version = (int) rep.minorVersion;
-	UnlockDisplay (dpy);
-	SyncHandle ();
-    } else {
-	/* The server doesn't have this extension.
-	 * Use a private Xlib-internal extension to hang the close_display
-	 * hook on so that the "cache" (extinfo->cur) is properly cleaned.
-	 * (XBUG 7955)
-	 */
-	XExtCodes *codes = XAddExtension(dpy);
-	if (!codes) {
-	    XFree(info);
-	    return NULL;
-	}
-        XESetCloseDisplay (dpy, codes->extension, XFixesCloseDisplay);
-    }
-
-    /*
-     * now, chain it onto the list
-     */
-    _XLockMutex(_Xglobal_lock);
-    info->next = extinfo->head;
-    extinfo->head = info;
-    extinfo->cur = info;
-    extinfo->ndisplays++;
-    _XUnlockMutex(_Xglobal_lock);
-    return info;
-}
-
-
-/*
- * XFixesExtRemoveDisplay - remove the indicated display from the
- * extension object. (Replaces XextRemoveDisplay.)
- */
-static int
-XFixesExtRemoveDisplay (XFixesExtInfo *extinfo, const Display *dpy)
-{
-    XFixesExtDisplayInfo *info, *prev;
-
-    /*
-     * locate this display and its back link so that it can be removed
-     */
-    _XLockMutex(_Xglobal_lock);
-    prev = NULL;
-    for (info = extinfo->head; info; info = info->next) {
-	if (info->display == dpy) break;
-	prev = info;
-    }
-    if (!info) {
-	_XUnlockMutex(_Xglobal_lock);
-	return 0;		/* hmm, actually an error */
-    }
-
-    /*
-     * remove the display from the list; handles going to zero
-     */
-    if (prev)
-	prev->next = info->next;
-    else
-	extinfo->head = info->next;
-
-    extinfo->ndisplays--;
-    if (info == extinfo->cur) extinfo->cur = NULL;  /* flush cache */
-    _XUnlockMutex(_Xglobal_lock);
-
-    Xfree (info);
-    return 1;
-}
-
-/*
- * XFixesExtFindDisplay - look for a display in this extension; keeps a
- * cache of the most-recently used for efficiency. (Replaces
- * XextFindDisplay.)
- */
-static XFixesExtDisplayInfo *
-XFixesExtFindDisplay (XFixesExtInfo *extinfo,
-		      const Display *dpy)
-{
-    XFixesExtDisplayInfo *info;
-
-    /*
-     * see if this was the most recently accessed display
-     */
-    if ((info = extinfo->cur) && info->display == dpy)
-	return info;
-
-    /*
-     * look for display in list
-     */
-    _XLockMutex(_Xglobal_lock);
-    for (info = extinfo->head; info; info = info->next) {
-	if (info->display == dpy) {
-	    extinfo->cur = info;     /* cache most recently used */
-	    _XUnlockMutex(_Xglobal_lock);
-	    return info;
-	}
-    }
-    _XUnlockMutex(_Xglobal_lock);
-
-    return NULL;
-}
-
-XFixesExtDisplayInfo *
-XFixesFindDisplay (Display *dpy)
-{
-    XFixesExtDisplayInfo *info;
-
-    info = XFixesExtFindDisplay (&XFixesExtensionInfo, dpy);
-    if (!info)
-	info = XFixesExtAddDisplay (&XFixesExtensionInfo, dpy,
-				    XFixesExtensionName);
-    return info;
-}
-
-static int
-XFixesCloseDisplay (Display *dpy, _X_UNUSED XExtCodes *codes)
-{
-    return XFixesExtRemoveDisplay (&XFixesExtensionInfo, dpy);
-}
-
-static Bool
-XFixesWireToEvent(Display *dpy, XEvent *event, xEvent *wire)
-{
-    XFixesExtDisplayInfo *info = XFixesFindDisplay(dpy);
-
-    XFixesCheckExtension(dpy, info, False);
-
-    switch ((wire->u.u.type & 0x7F) - info->codes->first_event)
-    {
-    case XFixesSelectionNotify: {
-	XFixesSelectionNotifyEvent *aevent;
-	xXFixesSelectionNotifyEvent *awire;
-	awire = (xXFixesSelectionNotifyEvent *) wire;
-	aevent = (XFixesSelectionNotifyEvent *) event;
-	aevent->type = awire->type & 0x7F;
-	aevent->subtype = awire->subtype;
-	aevent->serial = _XSetLastRequestRead(dpy,
-					      (xGenericReply *) wire);
-	aevent->send_event = (awire->type & 0x80) != 0;
-	aevent->display = dpy;
-	aevent->window = awire->window;
-	aevent->owner = awire->owner;
-	aevent->selection = awire->selection;
-	aevent->timestamp = awire->timestamp;
-	aevent->selection_timestamp = awire->selectionTimestamp;
-	return True;
-    }
-    case XFixesCursorNotify: {
-	XFixesCursorNotifyEvent *aevent;
-	xXFixesCursorNotifyEvent *awire;
-	awire = (xXFixesCursorNotifyEvent *) wire;
-	aevent = (XFixesCursorNotifyEvent *) event;
-	aevent->type = awire->type & 0x7F;
-	aevent->subtype = awire->subtype;
-	aevent->serial = _XSetLastRequestRead(dpy,
-					      (xGenericReply *) wire);
-	aevent->send_event = (awire->type & 0x80) != 0;
-	aevent->display = dpy;
-	aevent->window = awire->window;
-	aevent->cursor_serial = awire->cursorSerial;
-	aevent->timestamp = awire->timestamp;
-	aevent->cursor_name = awire->name;
-	return True;
-    }
-    }
-    return False;
-}
-
-static Status
-XFixesEventToWire(Display *dpy, XEvent *event, xEvent *wire)
-{
-    XFixesExtDisplayInfo *info = XFixesFindDisplay(dpy);
-
-    XFixesCheckExtension(dpy, info, False);
-
-    switch ((event->type & 0x7F) - info->codes->first_event)
-    {
-    case XFixesSelectionNotify: {
-	XFixesSelectionNotifyEvent *aevent;
-	xXFixesSelectionNotifyEvent *awire;
-	awire = (xXFixesSelectionNotifyEvent *) wire;
-	aevent = (XFixesSelectionNotifyEvent *) event;
-	awire->type = (CARD8) (aevent->type | (aevent->send_event ? 0x80 : 0));
-	awire->subtype = (CARD8) aevent->subtype;
-	awire->window = (CARD32) aevent->window;
-	awire->owner = (CARD32) aevent->owner;
-	awire->selection = (CARD32) aevent->selection;
-	awire->timestamp = (CARD32) aevent->timestamp;
-	awire->selectionTimestamp = (CARD32) aevent->selection_timestamp;
-	return True;
-    }
-    case XFixesCursorNotify: {
-	XFixesCursorNotifyEvent *aevent;
-	xXFixesCursorNotifyEvent *awire;
-	awire = (xXFixesCursorNotifyEvent *) wire;
-	aevent = (XFixesCursorNotifyEvent *) event;
-	awire->type = (CARD8) (aevent->type | (aevent->send_event ? 0x80 : 0));
-	awire->subtype = (CARD8) aevent->subtype;
-	awire->window = (CARD32) aevent->window;
-	awire->timestamp = (CARD32) aevent->timestamp;
-	awire->cursorSerial = (CARD32) aevent->cursor_serial;
-	awire->name = (CARD32) aevent->cursor_name;
-    }
-    }
-    return False;
-}
-
-Bool
-XFixesQueryExtension (Display *dpy,
-			int *event_base_return,
-			int *error_base_return)
-{
-    XFixesExtDisplayInfo *info = XFixesFindDisplay (dpy);
-
-    if (XFixesHasExtension(info))
-    {
-	*event_base_return = info->codes->first_event;
-	*error_base_return = info->codes->first_error;
-	return True;
-    }
-    else
-	return False;
-}
-
-Status
-XFixesQueryVersion (Display *dpy,
-		    int	    *major_version_return,
-		    int	    *minor_version_return)
-{
-    XFixesExtDisplayInfo	*info = XFixesFindDisplay (dpy);
-
-    XFixesCheckExtension (dpy, info, 0);
-
-    *major_version_return = info->major_version;
-    *minor_version_return = info->minor_version;
-    return 1;
-}
-
-int
-XFixesVersion (void)
-{
-    return XFIXES_VERSION;
-}
diff --git a/experiments/wasm-gui/third_party/libXfixes/src/Xfixesint.h b/experiments/wasm-gui/third_party/libXfixes/src/Xfixesint.h
deleted file mode 100644
index a058f1225..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/src/Xfixesint.h
+++ /dev/null
@@ -1,63 +0,0 @@
-/*
- *
- * Copyright © 2002 Keith Packard, member of The XFree86 Project, Inc.
- *
- * Permission to use, copy, modify, distribute, and sell this software and its
- * documentation for any purpose is hereby granted without fee, provided that
- * the above copyright notice appear in all copies and that both that
- * copyright notice and this permission notice appear in supporting
- * documentation, and that the name of Keith Packard not be used in
- * advertising or publicity pertaining to distribution of the software without
- * specific, written prior permission.  Keith Packard makes no
- * representations about the suitability of this software for any purpose.  It
- * is provided "as is" without express or implied warranty.
- *
- * KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
- * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
- * EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
- * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
- * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
- * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- * PERFORMANCE OF THIS SOFTWARE.
- */
-
-#ifndef _XFIXESINT_H_
-#define _XFIXESINT_H_
-
-#include <stdio.h>
-#include <X11/Xlib.h>
-#include <X11/Xlibint.h>
-#include <X11/Xutil.h>
-#include "Xfixes.h"
-#include <X11/extensions/xfixesproto.h>
-
-typedef struct _XFixesExtDisplayInfo {
-    struct _XFixesExtDisplayInfo  *next;    /* keep a linked list */
-    Display                 *display;	    /* which display this is */
-    XExtCodes               *codes;	    /* the extension protocol codes */
-    int			    major_version;  /* -1 means we don't know */
-    int			    minor_version;  /* -1 means we don't know */
-} XFixesExtDisplayInfo;
-
-/* replaces XExtensionInfo */
-typedef struct _XFixesExtInfo {
-    XFixesExtDisplayInfo    *head;          /* start of the list */
-    XFixesExtDisplayInfo    *cur;           /* most recently used */
-    int                     ndisplays;      /* number of displays */
-} XFixesExtInfo;
-
-extern XFixesExtInfo XFixesExtensionInfo;
-extern char XFixesExtensionName[];
-
-XFixesExtDisplayInfo *
-XFixesFindDisplay (Display *dpy);
-
-#define XFixesHasExtension(i) ((i) && ((i)->codes))
-
-#define XFixesCheckExtension(dpy,i,val) \
-    do { if (!XFixesHasExtension(i)) { return val; } } while(0)
-
-#define XFixesSimpleCheckExtension(dpy,i) \
-    do { if (!XFixesHasExtension(i)) { return; } } while(0)
-
-#endif /* _XFIXESINT_H_ */
diff --git a/experiments/wasm-gui/third_party/libXfixes/xfixes.pc.in b/experiments/wasm-gui/third_party/libXfixes/xfixes.pc.in
deleted file mode 100644
index fae0c03a9..000000000
--- a/experiments/wasm-gui/third_party/libXfixes/xfixes.pc.in
+++ /dev/null
@@ -1,12 +0,0 @@
-prefix=@prefix@
-exec_prefix=@exec_prefix@
-libdir=@libdir@
-includedir=@includedir@
-
-Name: Xfixes
-Description: X Fixes  Library
-Version: @PACKAGE_VERSION@
-Requires: xproto fixesproto >= @FIXESEXT_VERSION@
-Requires.private: x11
-Cflags: -I${includedir}
-Libs: -L${libdir} -lXfixes
diff --git a/experiments/wasm-gui/third_party/wasm-prefix/include/X11/fonts/libxfont2.h b/experiments/wasm-gui/third_party/wasm-prefix/include/X11/fonts/libxfont2.h
deleted file mode 100644
index 0ba7419ae..000000000
--- a/experiments/wasm-gui/third_party/wasm-prefix/include/X11/fonts/libxfont2.h
+++ /dev/null
@@ -1,163 +0,0 @@
-/*
- * Copyright © 2015 Keith Packard
- *
- * Permission to use, copy, modify, distribute, and sell this software and its
- * documentation for any purpose is hereby granted without fee, provided that
- * the above copyright notice appear in all copies and that both that copyright
- * notice and this permission notice appear in supporting documentation, and
- * that the name of the copyright holders not be used in advertising or
- * publicity pertaining to distribution of the software without specific,
- * written prior permission.  The copyright holders make no representations
- * about the suitability of this software for any purpose.  It is provided "as
- * is" without express or implied warranty.
- *
- * THE COPYRIGHT HOLDERS DISCLAIM ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
- * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
- * EVENT SHALL THE COPYRIGHT HOLDERS BE LIABLE FOR ANY SPECIAL, INDIRECT OR
- * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
- * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
- * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE
- * OF THIS SOFTWARE.
- */
-
-#ifndef _LIBXFONT2_H_
-#define _LIBXFONT2_H_
-
-#include	<stdarg.h>
-#include	<stdint.h>
-#include	<X11/Xfuncproto.h>
-#include	<X11/fonts/font.h>
-
-#define XFONT2_FPE_FUNCS_VERSION	1
-
-typedef int (*WakeupFpe) (FontPathElementPtr fpe);
-
-typedef struct _xfont2_fpe_funcs {
-	int		version;
-	NameCheckFunc	name_check;
-	InitFpeFunc	init_fpe;
-	FreeFpeFunc	free_fpe;
-	ResetFpeFunc	reset_fpe;
-	OpenFontFunc	open_font;
-	CloseFontFunc	close_font;
-	ListFontsFunc	list_fonts;
-	StartLfwiFunc	start_list_fonts_with_info;
-	NextLfwiFunc	list_next_font_with_info;
-	WakeupFpe	wakeup_fpe;
-	ClientDiedFunc	client_died;
-	LoadGlyphsFunc	load_glyphs;
-	StartLaFunc	start_list_fonts_and_aliases;
-	NextLaFunc	list_next_font_or_alias;
-	SetPathFunc	set_path_hook;
-} xfont2_fpe_funcs_rec, *xfont2_fpe_funcs_ptr;
-
-typedef void (*FontBlockHandlerProcPtr) (void *timeout);
-
-typedef void (*FontFdHandlerProcPtr) (int fd, void *data);
-
-#define XFONT2_CLIENT_FUNCS_VERSION	1
-
-typedef struct _xfont2_client_funcs {
-	int			version;
-	int			(*client_auth_generation)(ClientPtr client);
-	Bool			(*client_signal)(ClientPtr client);
-	void			(*delete_font_client_id)(Font id);
-	void			(*verrorf)(const char *f, va_list ap) _X_ATTRIBUTE_PRINTF(1,0);
-	FontPtr			(*find_old_font)(FSID id);
-	FontResolutionPtr	(*get_client_resolutions)(int *num);
-	int			(*get_default_point_size)(void);
-	Font			(*get_new_font_client_id)(void);
-	uint32_t		(*get_time_in_millis)(void);
-	int			(*init_fs_handlers)(FontPathElementPtr fpe,
-						    FontBlockHandlerProcPtr block_handler);
-	int			(*register_fpe_funcs)(const xfont2_fpe_funcs_rec *funcs);
-	void			(*remove_fs_handlers)(FontPathElementPtr fpe,
-						      FontBlockHandlerProcPtr block_handler,
-						      Bool all );
-	void			*(*get_server_client)(void);
-	int			(*set_font_authorizations)(char **authorizations,
-							   int *authlen, void *client);
-	int			(*store_font_client_font)(FontPtr pfont, Font id);
-	Atom			(*make_atom)(const char *string, unsigned len, int makeit);
-	int			(*valid_atom)(Atom atom);
-	const char		*(*name_for_atom)(Atom atom);
-	unsigned long		(*get_server_generation)(void);
-	int			(*add_fs_fd)(int fd, FontFdHandlerProcPtr handler, void *data);
-	void			(*remove_fs_fd)(int fd);
-	void			(*adjust_fs_wait_for_delay)(void *wt, unsigned long newdelay);
-} xfont2_client_funcs_rec, *xfont2_client_funcs_ptr;
-
-_X_EXPORT int
-xfont2_init(xfont2_client_funcs_rec const *client_funcs);
-
-_X_EXPORT void
-xfont2_query_glyph_extents(FontPtr pFont, CharInfoPtr *charinfo,
-			   unsigned long count, ExtentInfoRec *info);
-
-_X_EXPORT Bool
-xfont2_query_text_extents(FontPtr pFont, unsigned long count,
-			  unsigned char *chars, ExtentInfoRec *info);
-
-_X_EXPORT Bool
-xfont2_parse_glyph_caching_mode(char *str);
-
-_X_EXPORT void
-xfont2_init_glyph_caching(void);
-
-_X_EXPORT void
-xfont2_set_glyph_caching_mode(int newmode);
-
-_X_EXPORT FontNamesPtr
-xfont2_make_font_names_record(unsigned size);
-
-_X_EXPORT void
-xfont2_free_font_names(FontNamesPtr pFN);
-
-_X_EXPORT int
-xfont2_add_font_names_name(FontNamesPtr names,
-			   char *name,
-			   int length);
-
-typedef struct _xfont2_pattern_cache    *xfont2_pattern_cache_ptr;
-
-_X_EXPORT xfont2_pattern_cache_ptr
-xfont2_make_font_pattern_cache(void);
-
-_X_EXPORT void
-xfont2_free_font_pattern_cache(xfont2_pattern_cache_ptr cache);
-
-_X_EXPORT void
-xfont2_empty_font_pattern_cache(xfont2_pattern_cache_ptr cache);
-
-_X_EXPORT void
-xfont2_cache_font_pattern(xfont2_pattern_cache_ptr cache,
-			  const char * pattern,
-			  int patlen,
-			  FontPtr pFont);
-
-_X_EXPORT FontPtr
-xfont2_find_cached_font_pattern(xfont2_pattern_cache_ptr cache,
-				const char * pattern,
-				int patlen);
-
-_X_EXPORT void
-xfont2_remove_cached_font_pattern(xfont2_pattern_cache_ptr cache,
-				  FontPtr pFont);
-
-/* private.c */
-
-_X_EXPORT int
-xfont2_allocate_font_private_index (void);
-
-static inline void *
-xfont2_font_get_private(FontPtr pFont, int n)
-{
-	if (n > pFont->maxPrivate)
-		return NULL;
-	return pFont->devPrivates[n];
-}
-
-_X_EXPORT Bool
-xfont2_font_set_private(FontPtr pFont, int n, void *ptr);
-
-#endif /* _LIBXFONT2_H_ */
diff --git a/experiments/wasm-gui/third_party/wasm-prefix/include/X11/xpm.h b/experiments/wasm-gui/third_party/wasm-prefix/include/X11/xpm.h
deleted file mode 100644
index a490b523f..000000000
--- a/experiments/wasm-gui/third_party/wasm-prefix/include/X11/xpm.h
+++ /dev/null
@@ -1,483 +0,0 @@
-/*
- * Copyright (C) 1989-95 GROUPE BULL
- *
- * Permission is hereby granted, free of charge, to any person obtaining a copy
- * of this software and associated documentation files (the "Software"), to
- * deal in the Software without restriction, including without limitation the
- * rights to use, copy, modify, merge, publish, distribute, sublicense, and/or
- * sell copies of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be included in
- * all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
- * IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
- * FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL
- * GROUPE BULL BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
- * AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
- * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
- *
- * Except as contained in this notice, the name of GROUPE BULL shall not be
- * used in advertising or otherwise to promote the sale, use or other dealings
- * in this Software without prior written authorization from GROUPE BULL.
- */
-
-/*****************************************************************************\
-* xpm.h:                                                                      *
-*                                                                             *
-*  XPM library                                                                *
-*  Include file                                                               *
-*                                                                             *
-*  Developed by Arnaud Le Hors                                                *
-\*****************************************************************************/
-
-/*
- * The code related to FOR_MSW has been added by
- * HeDu (hedu@cul-ipn.uni-kiel.de) 4/94
- */
-
-/*
- * The code related to AMIGA has been added by
- * Lorens Younes (d93-hyo@nada.kth.se) 4/96
- */
-
-#ifndef XPM_h
-#define XPM_h
-
-/*
- * first some identification numbers:
- * the version and revision numbers are determined with the following rule:
- * SO Major number = LIB minor version number.
- * SO Minor number = LIB sub-minor version number.
- * e.g: Xpm version 3.2f
- *      we forget the 3 which is the format number, 2 gives 2, and f gives 6.
- *      thus we have XpmVersion = 2 and XpmRevision = 6
- *      which gives  SOXPMLIBREV = 2.6
- *
- * Then the XpmIncludeVersion number is built from these numbers.
- */
-#define XpmFormat 3
-#define XpmVersion 4
-#define XpmRevision 11
-#define XpmIncludeVersion ((XpmFormat * 100 + XpmVersion) * 100 + XpmRevision)
-
-#ifndef XPM_NUMBERS
-
-#ifdef FOR_MSW
-# define SYSV			/* uses memcpy string.h etc. */
-# include <malloc.h>
-# include "simx.h"		/* defines some X stuff using MSW types */
-#define NEED_STRCASECMP		/* at least for MSVC++ */
-#else /* FOR_MSW */
-# ifdef AMIGA
-#  include "amigax.h"
-# else /* not AMIGA */
-#  include <X11/Xfuncproto.h>
-#  include <X11/Xlib.h>
-#  include <X11/Xutil.h>
-# endif /* not AMIGA */
-#endif /* FOR_MSW */
-
-/* let's define Pixel if it is not done yet */
-#if ! defined(_XtIntrinsic_h) && ! defined(PIXEL_ALREADY_TYPEDEFED)
-typedef unsigned long Pixel;	/* Index into colormap */
-# define PIXEL_ALREADY_TYPEDEFED
-#endif
-
-/* Return ErrorStatus codes:
- * null     if full success
- * positive if partial success
- * negative if failure
- */
-
-#define XpmColorError    1
-#define XpmSuccess       0
-#define XpmOpenFailed   -1
-#define XpmFileInvalid  -2
-#define XpmNoMemory     -3
-#define XpmColorFailed  -4
-
-typedef struct {
-    char *name;			/* Symbolic color name */
-    char *value;		/* Color value */
-    Pixel pixel;		/* Color pixel */
-}      XpmColorSymbol;
-
-typedef struct {
-    char *name;			/* name of the extension */
-    unsigned int nlines;	/* number of lines in this extension */
-    char **lines;		/* pointer to the extension array of strings */
-}      XpmExtension;
-
-typedef struct {
-    char *string;		/* characters string */
-    char *symbolic;		/* symbolic name */
-    char *m_color;		/* monochrom default */
-    char *g4_color;		/* 4 level grayscale default */
-    char *g_color;		/* other level grayscale default */
-    char *c_color;		/* color default */
-}      XpmColor;
-
-typedef struct {
-    unsigned int width;		/* image width */
-    unsigned int height;	/* image height */
-    unsigned int cpp;		/* number of characters per pixel */
-    unsigned int ncolors;	/* number of colors */
-    XpmColor *colorTable;	/* list of related colors */
-    unsigned int *data;		/* image data */
-}      XpmImage;
-
-typedef struct {
-    unsigned long valuemask;	/* Specifies which attributes are defined */
-    char *hints_cmt;		/* Comment of the hints section */
-    char *colors_cmt;		/* Comment of the colors section */
-    char *pixels_cmt;		/* Comment of the pixels section */
-    unsigned int x_hotspot;	/* Returns the x hotspot's coordinate */
-    unsigned int y_hotspot;	/* Returns the y hotspot's coordinate */
-    unsigned int nextensions;	/* number of extensions */
-    XpmExtension *extensions;	/* pointer to array of extensions */
-}      XpmInfo;
-
-typedef int (*XpmAllocColorFunc)(
-    Display*			/* display */,
-    Colormap			/* colormap */,
-    char*			/* colorname */,
-    XColor*			/* xcolor */,
-    void*			/* closure */
-);
-
-typedef int (*XpmFreeColorsFunc)(
-    Display*			/* display */,
-    Colormap			/* colormap */,
-    Pixel*			/* pixels */,
-    int				/* npixels */,
-    void*			/* closure */
-);
-
-typedef struct {
-    unsigned long valuemask;		/* Specifies which attributes are
-					   defined */
-
-    Visual *visual;			/* Specifies the visual to use */
-    Colormap colormap;			/* Specifies the colormap to use */
-    unsigned int depth;			/* Specifies the depth */
-    unsigned int width;			/* Returns the width of the created
-					   pixmap */
-    unsigned int height;		/* Returns the height of the created
-					   pixmap */
-    unsigned int x_hotspot;		/* Returns the x hotspot's
-					   coordinate */
-    unsigned int y_hotspot;		/* Returns the y hotspot's
-					   coordinate */
-    unsigned int cpp;			/* Specifies the number of char per
-					   pixel */
-    Pixel *pixels;			/* List of used color pixels */
-    unsigned int npixels;		/* Number of used pixels */
-    XpmColorSymbol *colorsymbols;	/* List of color symbols to override */
-    unsigned int numsymbols;		/* Number of symbols */
-    char *rgb_fname;			/* RGB text file name */
-    unsigned int nextensions;		/* Number of extensions */
-    XpmExtension *extensions;		/* List of extensions */
-
-    unsigned int ncolors;               /* Number of colors */
-    XpmColor *colorTable;               /* List of colors */
-/* 3.2 backward compatibility code */
-    char *hints_cmt;                    /* Comment of the hints section */
-    char *colors_cmt;                   /* Comment of the colors section */
-    char *pixels_cmt;                   /* Comment of the pixels section */
-/* end 3.2 bc */
-    unsigned int mask_pixel;            /* Color table index of transparent
-                                           color */
-
-    /* Color Allocation Directives */
-    Bool exactColors;			/* Only use exact colors for visual */
-    unsigned int closeness;		/* Allowable RGB deviation */
-    unsigned int red_closeness;		/* Allowable red deviation */
-    unsigned int green_closeness;	/* Allowable green deviation */
-    unsigned int blue_closeness;	/* Allowable blue deviation */
-    int color_key;			/* Use colors from this color set */
-
-    Pixel *alloc_pixels;		/* Returns the list of alloc'ed color
-					   pixels */
-    int nalloc_pixels;			/* Returns the number of alloc'ed
-					   color pixels */
-
-    Bool alloc_close_colors;    	/* Specify whether close colors should
-					   be allocated using XAllocColor
-					   or not */
-    int bitmap_format;			/* Specify the format of 1bit depth
-					   images: ZPixmap or XYBitmap */
-
-    /* Color functions */
-    XpmAllocColorFunc alloc_color;	/* Application color allocator */
-    XpmFreeColorsFunc free_colors;	/* Application color de-allocator */
-    void *color_closure;		/* Application private data to pass to
-					   alloc_color and free_colors */
-
-}      XpmAttributes;
-
-/* XpmAttributes value masks bits */
-#define XpmVisual	   (1L<<0)
-#define XpmColormap	   (1L<<1)
-#define XpmDepth	   (1L<<2)
-#define XpmSize		   (1L<<3)	/* width & height */
-#define XpmHotspot	   (1L<<4)	/* x_hotspot & y_hotspot */
-#define XpmCharsPerPixel   (1L<<5)
-#define XpmColorSymbols	   (1L<<6)
-#define XpmRgbFilename	   (1L<<7)
-/* 3.2 backward compatibility code */
-#define XpmInfos	   (1L<<8)
-#define XpmReturnInfos	   XpmInfos
-/* end 3.2 bc */
-#define XpmReturnPixels	   (1L<<9)
-#define XpmExtensions      (1L<<10)
-#define XpmReturnExtensions XpmExtensions
-
-#define XpmExactColors     (1L<<11)
-#define XpmCloseness	   (1L<<12)
-#define XpmRGBCloseness	   (1L<<13)
-#define XpmColorKey	   (1L<<14)
-
-#define XpmColorTable      (1L<<15)
-#define XpmReturnColorTable XpmColorTable
-
-#define XpmReturnAllocPixels (1L<<16)
-#define XpmAllocCloseColors (1L<<17)
-#define XpmBitmapFormat    (1L<<18)
-
-#define XpmAllocColor      (1L<<19)
-#define XpmFreeColors      (1L<<20)
-#define XpmColorClosure    (1L<<21)
-
-
-/* XpmInfo value masks bits */
-#define XpmComments        XpmInfos
-#define XpmReturnComments  XpmComments
-
-/* XpmAttributes mask_pixel value when there is no mask */
-#ifndef FOR_MSW
-#define XpmUndefPixel 0x80000000
-#else
-/* int is only 16 bit for MSW */
-#define XpmUndefPixel 0x8000
-#endif
-
-/*
- * color keys for visual type, they must fit along with the number key of
- * each related element in xpmColorKeys[] defined in XpmI.h
- */
-#define XPM_MONO	2
-#define XPM_GREY4	3
-#define XPM_GRAY4	3
-#define XPM_GREY 	4
-#define XPM_GRAY 	4
-#define XPM_COLOR	5
-
-
-/* macros for forward declarations of functions with prototypes */
-#ifndef _X_EXPORT
-# define _X_EXPORT
-# define _X_HIDDEN
-#endif
-#define FUNC(f, t, p) extern _X_EXPORT t f p
-#define HFUNC(f, t, p) extern _X_HIDDEN t f p
-#define LFUNC(f, t, p) static t f p
-
-
-/*
- * functions declarations
- */
-
-_XFUNCPROTOBEGIN
-
-/* FOR_MSW, all ..Pixmap.. are excluded, only the ..XImage.. are used */
-/* Same for Amiga! */
-
-#if !defined(FOR_MSW) && !defined(AMIGA)
-    FUNC(XpmCreatePixmapFromData, int, (Display *display,
-					Drawable d,
-					char **data,
-					Pixmap *pixmap_return,
-					Pixmap *shapemask_return,
-					XpmAttributes *attributes));
-
-    FUNC(XpmCreateDataFromPixmap, int, (Display *display,
-					char ***data_return,
-					Pixmap pixmap,
-					Pixmap shapemask,
-					XpmAttributes *attributes));
-
-    FUNC(XpmReadFileToPixmap, int, (Display *display,
-				    Drawable d,
-				    const char *filename,
-				    Pixmap *pixmap_return,
-				    Pixmap *shapemask_return,
-				    XpmAttributes *attributes));
-
-    FUNC(XpmWriteFileFromPixmap, int, (Display *display,
-				       const char *filename,
-				       Pixmap pixmap,
-				       Pixmap shapemask,
-				       XpmAttributes *attributes));
-#endif
-
-    FUNC(XpmCreateImageFromData, int, (Display *display,
-				       char **data,
-				       XImage **image_return,
-				       XImage **shapemask_return,
-				       XpmAttributes *attributes));
-
-    FUNC(XpmCreateDataFromImage, int, (Display *display,
-				       char ***data_return,
-				       XImage *image,
-				       XImage *shapeimage,
-				       XpmAttributes *attributes));
-
-    FUNC(XpmReadFileToImage, int, (Display *display,
-				   const char *filename,
-				   XImage **image_return,
-				   XImage **shapeimage_return,
-				   XpmAttributes *attributes));
-
-    FUNC(XpmWriteFileFromImage, int, (Display *display,
-				      const char *filename,
-				      XImage *image,
-				      XImage *shapeimage,
-				      XpmAttributes *attributes));
-
-    FUNC(XpmCreateImageFromBuffer, int, (Display *display,
-					 char *buffer,
-					 XImage **image_return,
-					 XImage **shapemask_return,
-					 XpmAttributes *attributes));
-#if !defined(FOR_MSW) && !defined(AMIGA)
-    FUNC(XpmCreatePixmapFromBuffer, int, (Display *display,
-					  Drawable d,
-					  char *buffer,
-					  Pixmap *pixmap_return,
-					  Pixmap *shapemask_return,
-					  XpmAttributes *attributes));
-
-    FUNC(XpmCreateBufferFromImage, int, (Display *display,
-					 char **buffer_return,
-					 XImage *image,
-					 XImage *shapeimage,
-					 XpmAttributes *attributes));
-
-    FUNC(XpmCreateBufferFromPixmap, int, (Display *display,
-					  char **buffer_return,
-					  Pixmap pixmap,
-					  Pixmap shapemask,
-					  XpmAttributes *attributes));
-#endif
-    FUNC(XpmReadFileToBuffer, int, (const char *filename, char **buffer_return));
-    FUNC(XpmWriteFileFromBuffer, int, (const char *filename, char *buffer));
-
-    FUNC(XpmReadFileToData, int, (const char *filename, char ***data_return));
-    FUNC(XpmWriteFileFromData, int, (const char *filename, char **data));
-
-    FUNC(XpmAttributesSize, int, (void));
-    FUNC(XpmFreeAttributes, void, (XpmAttributes *attributes));
-    FUNC(XpmFreeExtensions, void, (XpmExtension *extensions,
-				   int nextensions));
-
-    FUNC(XpmFreeXpmImage, void, (XpmImage *image));
-    FUNC(XpmFreeXpmInfo, void, (XpmInfo *info));
-    FUNC(XpmGetErrorString, char *, (int errcode));
-    FUNC(XpmLibraryVersion, int, (void));
-
-    /* XpmImage functions */
-    FUNC(XpmReadFileToXpmImage, int, (const char *filename,
-				      XpmImage *image,
-				      XpmInfo *info));
-
-    FUNC(XpmWriteFileFromXpmImage, int, (const char *filename,
-					 XpmImage *image,
-					 XpmInfo *info));
-#if !defined(FOR_MSW) && !defined(AMIGA)
-    FUNC(XpmCreatePixmapFromXpmImage, int, (Display *display,
-					    Drawable d,
-					    XpmImage *image,
-					    Pixmap *pixmap_return,
-					    Pixmap *shapemask_return,
-					    XpmAttributes *attributes));
-#endif
-    FUNC(XpmCreateImageFromXpmImage, int, (Display *display,
-					   XpmImage *image,
-					   XImage **image_return,
-					   XImage **shapeimage_return,
-					   XpmAttributes *attributes));
-
-    FUNC(XpmCreateXpmImageFromImage, int, (Display *display,
-					   XImage *image,
-					   XImage *shapeimage,
-					   XpmImage *xpmimage,
-					   XpmAttributes *attributes));
-#if !defined(FOR_MSW) && !defined(AMIGA)
-    FUNC(XpmCreateXpmImageFromPixmap, int, (Display *display,
-					    Pixmap pixmap,
-					    Pixmap shapemask,
-					    XpmImage *xpmimage,
-					    XpmAttributes *attributes));
-#endif
-    FUNC(XpmCreateDataFromXpmImage, int, (char ***data_return,
-					  XpmImage *image,
-					  XpmInfo *info));
-
-    FUNC(XpmCreateXpmImageFromData, int, (char **data,
-					  XpmImage *image,
-					  XpmInfo *info));
-
-    FUNC(XpmCreateXpmImageFromBuffer, int, (char *buffer,
-					    XpmImage *image,
-					    XpmInfo *info));
-
-    FUNC(XpmCreateBufferFromXpmImage, int, (char **buffer_return,
-					    XpmImage *image,
-					    XpmInfo *info));
-
-    FUNC(XpmGetParseError, int, (char *filename,
-				 int *linenum_return,
-				 int *charnum_return));
-
-    FUNC(XpmFree, void, (void *ptr));
-
-_XFUNCPROTOEND
-
-/* backward compatibility */
-
-/* for version 3.0c */
-#define XpmPixmapColorError  XpmColorError
-#define XpmPixmapSuccess     XpmSuccess
-#define XpmPixmapOpenFailed  XpmOpenFailed
-#define XpmPixmapFileInvalid XpmFileInvalid
-#define XpmPixmapNoMemory    XpmNoMemory
-#define XpmPixmapColorFailed XpmColorFailed
-
-#define XpmReadPixmapFile(dpy, d, file, pix, mask, att) \
-    XpmReadFileToPixmap(dpy, d, file, pix, mask, att)
-#define XpmWritePixmapFile(dpy, file, pix, mask, att) \
-    XpmWriteFileFromPixmap(dpy, file, pix, mask, att)
-
-/* for version 3.0b */
-#define PixmapColorError  XpmColorError
-#define PixmapSuccess     XpmSuccess
-#define PixmapOpenFailed  XpmOpenFailed
-#define PixmapFileInvalid XpmFileInvalid
-#define PixmapNoMemory    XpmNoMemory
-#define PixmapColorFailed XpmColorFailed
-
-#define ColorSymbol XpmColorSymbol
-
-#define XReadPixmapFile(dpy, d, file, pix, mask, att) \
-    XpmReadFileToPixmap(dpy, d, file, pix, mask, att)
-#define XWritePixmapFile(dpy, file, pix, mask, att) \
-    XpmWriteFileFromPixmap(dpy, file, pix, mask, att)
-#define XCreatePixmapFromData(dpy, d, data, pix, mask, att) \
-    XpmCreatePixmapFromData(dpy, d, data, pix, mask, att)
-#define XCreateDataFromPixmap(dpy, data, pix, mask, att) \
-    XpmCreateDataFromPixmap(dpy, data, pix, mask, att)
-
-#endif /* XPM_NUMBERS */
-#endif
diff --git a/experiments/wasm-gui/third_party/wasm-prefix/include/pixman-1/pixman-version.h b/experiments/wasm-gui/third_party/wasm-prefix/include/pixman-1/pixman-version.h
deleted file mode 100644
index 4e487713c..000000000
--- a/experiments/wasm-gui/third_party/wasm-prefix/include/pixman-1/pixman-version.h
+++ /dev/null
@@ -1,54 +0,0 @@
-/*
- * Copyright © 2008 Red Hat, Inc.
- *
- * Permission is hereby granted, free of charge, to any person
- * obtaining a copy of this software and associated documentation
- * files (the "Software"), to deal in the Software without
- * restriction, including without limitation the rights to use, copy,
- * modify, merge, publish, distribute, sublicense, and/or sell copies
- * of the Software, and to permit persons to whom the Software is
- * furnished to do so, subject to the following conditions:
- *
- * The above copyright notice and this permission notice shall be
- * included in all copies or substantial portions of the Software.
- *
- * THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND,
- * EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF
- * MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND
- * NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS
- * BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN
- * ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
- * CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
- * SOFTWARE.
- *
- * Author: Carl D. Worth <cworth@cworth.org>
- */
-
-#ifndef PIXMAN_VERSION_H__
-#define PIXMAN_VERSION_H__
-
-#ifndef PIXMAN_H__
-#  error pixman-version.h should only be included by pixman.h
-#endif
-
-#define PIXMAN_VERSION_MAJOR 0
-#define PIXMAN_VERSION_MINOR 46
-#define PIXMAN_VERSION_MICRO 5
-
-#define PIXMAN_VERSION_STRING "0.46.5"
-
-#define PIXMAN_VERSION_ENCODE(major, minor, micro) (	\
-	  ((major) * 10000)				\
-	+ ((minor) *   100)				\
-	+ ((micro) *     1))
-
-#define PIXMAN_VERSION PIXMAN_VERSION_ENCODE(	\
-	PIXMAN_VERSION_MAJOR,			\
-	PIXMAN_VERSION_MINOR,			\
-	PIXMAN_VERSION_MICRO)
-
-#ifndef PIXMAN_API
-# define PIXMAN_API
-#endif
-
-#endif /* PIXMAN_VERSION_H__ */
diff --git a/experiments/wasm-gui/third_party/wasm-prefix/include/pixman-1/pixman.h b/experiments/wasm-gui/third_party/wasm-prefix/include/pixman-1/pixman.h
deleted file mode 100644
index d37a4b3c4..000000000
--- a/experiments/wasm-gui/third_party/wasm-prefix/include/pixman-1/pixman.h
+++ /dev/null
@@ -1,1626 +0,0 @@
-/***********************************************************
-
-Copyright 1987, 1998  The Open Group
-
-Permission to use, copy, modify, distribute, and sell this software and its
-documentation for any purpose is hereby granted without fee, provided that
-the above copyright notice appear in all copies and that both that
-copyright notice and this permission notice appear in supporting
-documentation.
-
-The above copyright notice and this permission notice shall be included in
-all copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
-FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT.  IN NO EVENT SHALL THE
-OPEN GROUP BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN
-AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
-CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
-
-Except as contained in this notice, the name of The Open Group shall not be
-used in advertising or otherwise to promote the sale, use or other dealings
-in this Software without prior written authorization from The Open Group.
-
-Copyright 1987 by Digital Equipment Corporation, Maynard, Massachusetts.
-
-                        All Rights Reserved
-
-Permission to use, copy, modify, and distribute this software and its
-documentation for any purpose and without fee is hereby granted,
-provided that the above copyright notice appear in all copies and that
-both that copyright notice and this permission notice appear in
-supporting documentation, and that the name of Digital not be
-used in advertising or publicity pertaining to distribution of the
-software without specific, written prior permission.
-
-DIGITAL DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE, INCLUDING
-ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO EVENT SHALL
-DIGITAL BE LIABLE FOR ANY SPECIAL, INDIRECT OR CONSEQUENTIAL DAMAGES OR
-ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE, DATA OR PROFITS,
-WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER TORTIOUS ACTION,
-ARISING OUT OF OR IN CONNECTION WITH THE USE OR PERFORMANCE OF THIS
-SOFTWARE.
-
-******************************************************************/
-/*
- * Copyright © 1998, 2004 Keith Packard
- * Copyright   2007 Red Hat, Inc.
- *
- * Permission to use, copy, modify, distribute, and sell this software and its
- * documentation for any purpose is hereby granted without fee, provided that
- * the above copyright notice appear in all copies and that both that
- * copyright notice and this permission notice appear in supporting
- * documentation, and that the name of Keith Packard not be used in
- * advertising or publicity pertaining to distribution of the software without
- * specific, written prior permission.  Keith Packard makes no
- * representations about the suitability of this software for any purpose.  It
- * is provided "as is" without express or implied warranty.
- *
- * KEITH PACKARD DISCLAIMS ALL WARRANTIES WITH REGARD TO THIS SOFTWARE,
- * INCLUDING ALL IMPLIED WARRANTIES OF MERCHANTABILITY AND FITNESS, IN NO
- * EVENT SHALL KEITH PACKARD BE LIABLE FOR ANY SPECIAL, INDIRECT OR
- * CONSEQUENTIAL DAMAGES OR ANY DAMAGES WHATSOEVER RESULTING FROM LOSS OF USE,
- * DATA OR PROFITS, WHETHER IN AN ACTION OF CONTRACT, NEGLIGENCE OR OTHER
- * TORTIOUS ACTION, ARISING OUT OF OR IN CONNECTION WITH THE USE OR
- * PERFORMANCE OF THIS SOFTWARE.
- */
-
-#ifndef PIXMAN_H__
-#define PIXMAN_H__
-
-#include <pixman-version.h>
-
-#ifdef  __cplusplus
-#define PIXMAN_BEGIN_DECLS extern "C" {
-#define PIXMAN_END_DECLS }
-#else
-#define PIXMAN_BEGIN_DECLS
-#define PIXMAN_END_DECLS
-#endif
-
-PIXMAN_BEGIN_DECLS
-
-/*
- * Standard integers
- */
-
-#if !defined (PIXMAN_DONT_DEFINE_STDINT)
-
-#if defined (_SVR4) || defined (SVR4) || defined (__OpenBSD__) || defined (_sgi) || defined (__sun) || defined (sun) || defined (__digital__) || defined (__HP_cc)
-#  include <inttypes.h>
-/* VS 2010 (_MSC_VER 1600) has stdint.h */
-#elif defined (_MSC_VER) && _MSC_VER < 1600
-typedef __int8 int8_t;
-typedef unsigned __int8 uint8_t;
-typedef __int16 int16_t;
-typedef unsigned __int16 uint16_t;
-typedef __int32 int32_t;
-typedef unsigned __int32 uint32_t;
-typedef __int64 int64_t;
-typedef unsigned __int64 uint64_t;
-#elif defined (_AIX)
-#  include <sys/inttypes.h>
-#else
-#  include <stdint.h>
-#endif
-
-#endif
-
-/*
- * Boolean
- */
-typedef int pixman_bool_t;
-
-/*
- * Fixpoint numbers
- */
-typedef int64_t			pixman_fixed_32_32_t;
-typedef pixman_fixed_32_32_t	pixman_fixed_48_16_t;
-typedef uint32_t		pixman_fixed_1_31_t;
-typedef uint32_t		pixman_fixed_1_16_t;
-typedef int32_t			pixman_fixed_16_16_t;
-typedef pixman_fixed_16_16_t	pixman_fixed_t;
-
-#define pixman_fixed_e			((pixman_fixed_t) 1)
-#define pixman_fixed_1			(pixman_int_to_fixed(1))
-#define pixman_fixed_1_minus_e		(pixman_fixed_1 - pixman_fixed_e)
-#define pixman_fixed_minus_1		(pixman_int_to_fixed(-1))
-#define pixman_fixed_to_int(f)		((int) ((f) >> 16))
-#define pixman_int_to_fixed(i)		((pixman_fixed_t) ((uint32_t) (i) << 16))
-#define pixman_fixed_to_double(f)	(double) ((f) / (double) pixman_fixed_1)
-#define pixman_double_to_fixed(d)	((pixman_fixed_t) ((d) * 65536.0))
-#define pixman_fixed_frac(f)		((f) & pixman_fixed_1_minus_e)
-#define pixman_fixed_floor(f)		((f) & ~pixman_fixed_1_minus_e)
-#define pixman_fixed_ceil(f)		pixman_fixed_floor ((f) + pixman_fixed_1_minus_e)
-#define pixman_fixed_fraction(f)	((f) & pixman_fixed_1_minus_e)
-#define pixman_fixed_mod_2(f)		((f) & (pixman_fixed1 | pixman_fixed_1_minus_e))
-#define pixman_max_fixed_48_16		((pixman_fixed_48_16_t) 0x7fffffff)
-#define pixman_min_fixed_48_16		(-((pixman_fixed_48_16_t) 1 << 31))
-
-/*
- * Misc structs
- */
-typedef struct pixman_color pixman_color_t;
-typedef struct pixman_point_fixed pixman_point_fixed_t;
-typedef struct pixman_line_fixed pixman_line_fixed_t;
-typedef struct pixman_vector pixman_vector_t;
-typedef struct pixman_transform pixman_transform_t;
-
-struct pixman_color
-{
-    uint16_t	red;
-    uint16_t    green;
-    uint16_t    blue;
-    uint16_t    alpha;
-};
-
-struct pixman_point_fixed
-{
-    pixman_fixed_t	x;
-    pixman_fixed_t	y;
-};
-
-struct pixman_line_fixed
-{
-    pixman_point_fixed_t	p1, p2;
-};
-
-/*
- * Fixed point matrices
- */
-
-struct pixman_vector
-{
-    pixman_fixed_t	vector[3];
-};
-
-struct pixman_transform
-{
-    pixman_fixed_t	matrix[3][3];
-};
-
-/* forward declaration (sorry) */
-struct pixman_box16;
-typedef  union pixman_image		pixman_image_t;
-
-PIXMAN_API
-void          pixman_transform_init_identity    (struct pixman_transform       *matrix);
-
-PIXMAN_API
-pixman_bool_t pixman_transform_point_3d         (const struct pixman_transform *transform,
-						 struct pixman_vector          *vector);
-
-PIXMAN_API
-pixman_bool_t pixman_transform_point            (const struct pixman_transform *transform,
-						 struct pixman_vector          *vector);
-
-PIXMAN_API
-pixman_bool_t pixman_transform_multiply         (struct pixman_transform       *dst,
-						 const struct pixman_transform *l,
-						 const struct pixman_transform *r);
-
-PIXMAN_API
-void          pixman_transform_init_scale       (struct pixman_transform       *t,
-						 pixman_fixed_t                 sx,
-						 pixman_fixed_t                 sy);
-
-PIXMAN_API
-pixman_bool_t pixman_transform_scale            (struct pixman_transform       *forward,
-						 struct pixman_transform       *reverse,
-						 pixman_fixed_t                 sx,
-						 pixman_fixed_t                 sy);
-
-PIXMAN_API
-void          pixman_transform_init_rotate      (struct pixman_transform       *t,
-						 pixman_fixed_t                 cos,
-						 pixman_fixed_t                 sin);
-
-PIXMAN_API
-pixman_bool_t pixman_transform_rotate           (struct pixman_transform       *forward,
-						 struct pixman_transform       *reverse,
-						 pixman_fixed_t                 c,
-						 pixman_fixed_t                 s);
-
-PIXMAN_API
-void          pixman_transform_init_translate   (struct pixman_transform       *t,
-						 pixman_fixed_t                 tx,
-						 pixman_fixed_t                 ty);
-
-PIXMAN_API
-pixman_bool_t pixman_transform_translate        (struct pixman_transform       *forward,
-						 struct pixman_transform       *reverse,
-						 pixman_fixed_t                 tx,
-						 pixman_fixed_t                 ty);
-
-PIXMAN_API
-pixman_bool_t pixman_transform_bounds           (const struct pixman_transform *matrix,
-						 struct pixman_box16           *b);
-
-PIXMAN_API
-pixman_bool_t pixman_transform_invert           (struct pixman_transform       *dst,
-						 const struct pixman_transform *src);
-
-PIXMAN_API
-pixman_bool_t pixman_transform_is_identity      (const struct pixman_transform *t);
-
-PIXMAN_API
-pixman_bool_t pixman_transform_is_scale         (const struct pixman_transform *t);
-
-PIXMAN_API
-pixman_bool_t pixman_transform_is_int_translate (const struct pixman_transform *t);
-
-PIXMAN_API
-pixman_bool_t pixman_transform_is_inverse       (const struct pixman_transform *a,
-						 const struct pixman_transform *b);
-
-/*
- * Floating point matrices
- */
-typedef struct pixman_f_transform pixman_f_transform_t;
-typedef struct pixman_f_vector pixman_f_vector_t;
-
-struct pixman_f_vector
-{
-    double  v[3];
-};
-
-struct pixman_f_transform
-{
-    double  m[3][3];
-};
-
-
-PIXMAN_API
-pixman_bool_t pixman_transform_from_pixman_f_transform (struct pixman_transform         *t,
-							const struct pixman_f_transform *ft);
-
-PIXMAN_API
-void          pixman_f_transform_from_pixman_transform (struct pixman_f_transform       *ft,
-							const struct pixman_transform   *t);
-
-PIXMAN_API
-pixman_bool_t pixman_f_transform_invert                (struct pixman_f_transform       *dst,
-							const struct pixman_f_transform *src);
-
-PIXMAN_API
-pixman_bool_t pixman_f_transform_point                 (const struct pixman_f_transform *t,
-							struct pixman_f_vector          *v);
-
-PIXMAN_API
-void          pixman_f_transform_point_3d              (const struct pixman_f_transform *t,
-							struct pixman_f_vector          *v);
-
-PIXMAN_API
-void          pixman_f_transform_multiply              (struct pixman_f_transform       *dst,
-							const struct pixman_f_transform *l,
-							const struct pixman_f_transform *r);
-
-PIXMAN_API
-void          pixman_f_transform_init_scale            (struct pixman_f_transform       *t,
-							double                           sx,
-							double                           sy);
-
-PIXMAN_API
-pixman_bool_t pixman_f_transform_scale                 (struct pixman_f_transform       *forward,
-							struct pixman_f_transform       *reverse,
-							double                           sx,
-							double                           sy);
-
-PIXMAN_API
-void          pixman_f_transform_init_rotate           (struct pixman_f_transform       *t,
-							double                           cos,
-							double                           sin);
-
-PIXMAN_API
-pixman_bool_t pixman_f_transform_rotate                (struct pixman_f_transform       *forward,
-							struct pixman_f_transform       *reverse,
-							double                           c,
-							double                           s);
-
-PIXMAN_API
-void          pixman_f_transform_init_translate        (struct pixman_f_transform       *t,
-							double                           tx,
-							double                           ty);
-
-PIXMAN_API
-pixman_bool_t pixman_f_transform_translate             (struct pixman_f_transform       *forward,
-							struct pixman_f_transform       *reverse,
-							double                           tx,
-							double                           ty);
-
-PIXMAN_API
-pixman_bool_t pixman_f_transform_bounds                (const struct pixman_f_transform *t,
-							struct pixman_box16             *b);
-
-PIXMAN_API
-void          pixman_f_transform_init_identity         (struct pixman_f_transform       *t);
-
-typedef enum
-{
-    PIXMAN_REPEAT_NONE,
-    PIXMAN_REPEAT_NORMAL,
-    PIXMAN_REPEAT_PAD,
-    PIXMAN_REPEAT_REFLECT
-} pixman_repeat_t;
-
-typedef enum
-{
-    PIXMAN_DITHER_NONE,
-    PIXMAN_DITHER_FAST,
-    PIXMAN_DITHER_GOOD,
-    PIXMAN_DITHER_BEST,
-    PIXMAN_DITHER_ORDERED_BAYER_8,
-    PIXMAN_DITHER_ORDERED_BLUE_NOISE_64,
-} pixman_dither_t;
-
-typedef enum
-{
-    PIXMAN_FILTER_FAST,
-    PIXMAN_FILTER_GOOD,
-    PIXMAN_FILTER_BEST,
-    PIXMAN_FILTER_NEAREST,
-    PIXMAN_FILTER_BILINEAR,
-    PIXMAN_FILTER_CONVOLUTION,
-
-    /* The SEPARABLE_CONVOLUTION filter takes the following parameters:
-     *
-     *         width:           integer given as 16.16 fixpoint number
-     *         height:          integer given as 16.16 fixpoint number
-     *         x_phase_bits:	integer given as 16.16 fixpoint
-     *         y_phase_bits:	integer given as 16.16 fixpoint
-     *         xtables:         (1 << x_phase_bits) tables of size width
-     *         ytables:         (1 << y_phase_bits) tables of size height
-     *
-     * When sampling at (x, y), the location is first rounded to one of
-     * n_x_phases * n_y_phases subpixel positions. These subpixel positions
-     * determine an xtable and a ytable to use.
-     *
-     * Conceptually a width x height matrix is then formed in which each entry
-     * is the product of the corresponding entries in the x and y tables.
-     * This matrix is then aligned with the image pixels such that its center
-     * is as close as possible to the subpixel location chosen earlier. Then
-     * the image is convolved with the matrix and the resulting pixel returned.
-     */
-    PIXMAN_FILTER_SEPARABLE_CONVOLUTION
-} pixman_filter_t;
-
-typedef enum
-{
-    PIXMAN_OP_CLEAR			= 0x00,
-    PIXMAN_OP_SRC			= 0x01,
-    PIXMAN_OP_DST			= 0x02,
-    PIXMAN_OP_OVER			= 0x03,
-    PIXMAN_OP_OVER_REVERSE		= 0x04,
-    PIXMAN_OP_IN			= 0x05,
-    PIXMAN_OP_IN_REVERSE		= 0x06,
-    PIXMAN_OP_OUT			= 0x07,
-    PIXMAN_OP_OUT_REVERSE		= 0x08,
-    PIXMAN_OP_ATOP			= 0x09,
-    PIXMAN_OP_ATOP_REVERSE		= 0x0a,
-    PIXMAN_OP_XOR			= 0x0b,
-    PIXMAN_OP_ADD			= 0x0c,
-    PIXMAN_OP_SATURATE			= 0x0d,
-
-    PIXMAN_OP_DISJOINT_CLEAR		= 0x10,
-    PIXMAN_OP_DISJOINT_SRC		= 0x11,
-    PIXMAN_OP_DISJOINT_DST		= 0x12,
-    PIXMAN_OP_DISJOINT_OVER		= 0x13,
-    PIXMAN_OP_DISJOINT_OVER_REVERSE	= 0x14,
-    PIXMAN_OP_DISJOINT_IN		= 0x15,
-    PIXMAN_OP_DISJOINT_IN_REVERSE	= 0x16,
-    PIXMAN_OP_DISJOINT_OUT		= 0x17,
-    PIXMAN_OP_DISJOINT_OUT_REVERSE	= 0x18,
-    PIXMAN_OP_DISJOINT_ATOP		= 0x19,
-    PIXMAN_OP_DISJOINT_ATOP_REVERSE	= 0x1a,
-    PIXMAN_OP_DISJOINT_XOR		= 0x1b,
-
-    PIXMAN_OP_CONJOINT_CLEAR		= 0x20,
-    PIXMAN_OP_CONJOINT_SRC		= 0x21,
-    PIXMAN_OP_CONJOINT_DST		= 0x22,
-    PIXMAN_OP_CONJOINT_OVER		= 0x23,
-    PIXMAN_OP_CONJOINT_OVER_REVERSE	= 0x24,
-    PIXMAN_OP_CONJOINT_IN		= 0x25,
-    PIXMAN_OP_CONJOINT_IN_REVERSE	= 0x26,
-    PIXMAN_OP_CONJOINT_OUT		= 0x27,
-    PIXMAN_OP_CONJOINT_OUT_REVERSE	= 0x28,
-    PIXMAN_OP_CONJOINT_ATOP		= 0x29,
-    PIXMAN_OP_CONJOINT_ATOP_REVERSE	= 0x2a,
-    PIXMAN_OP_CONJOINT_XOR		= 0x2b,
-
-    PIXMAN_OP_MULTIPLY                  = 0x30,
-    PIXMAN_OP_SCREEN                    = 0x31,
-    PIXMAN_OP_OVERLAY                   = 0x32,
-    PIXMAN_OP_DARKEN                    = 0x33,
-    PIXMAN_OP_LIGHTEN                   = 0x34,
-    PIXMAN_OP_COLOR_DODGE               = 0x35,
-    PIXMAN_OP_COLOR_BURN                = 0x36,
-    PIXMAN_OP_HARD_LIGHT                = 0x37,
-    PIXMAN_OP_SOFT_LIGHT                = 0x38,
-    PIXMAN_OP_DIFFERENCE                = 0x39,
-    PIXMAN_OP_EXCLUSION                 = 0x3a,
-    PIXMAN_OP_HSL_HUE			= 0x3b,
-    PIXMAN_OP_HSL_SATURATION		= 0x3c,
-    PIXMAN_OP_HSL_COLOR			= 0x3d,
-    PIXMAN_OP_HSL_LUMINOSITY		= 0x3e
-
-#ifdef PIXMAN_USE_INTERNAL_API
-    ,
-    PIXMAN_N_OPERATORS,
-    PIXMAN_OP_NONE = PIXMAN_N_OPERATORS
-#endif
-} pixman_op_t;
-
-/*
- * Regions
- */
-typedef struct pixman_region16_data	pixman_region16_data_t;
-typedef struct pixman_box16		pixman_box16_t;
-typedef struct pixman_rectangle16	pixman_rectangle16_t;
-typedef struct pixman_region16		pixman_region16_t;
-
-struct pixman_region16_data {
-    long		size;
-    long		numRects;
-/*  pixman_box16_t	rects[size];   in memory but not explicitly declared */
-};
-
-struct pixman_rectangle16
-{
-    int16_t	x, y;
-    uint16_t	width, height;
-};
-
-struct pixman_box16
-{
-    int16_t x1, y1, x2, y2;
-};
-
-struct pixman_region16
-{
-    pixman_box16_t          extents;
-    pixman_region16_data_t *data;
-};
-
-typedef enum
-{
-    PIXMAN_REGION_OUT,
-    PIXMAN_REGION_IN,
-    PIXMAN_REGION_PART
-} pixman_region_overlap_t;
-
-/* This function exists only to make it possible to preserve
- * the X ABI - it should go away at first opportunity.
- */
-PIXMAN_API
-void pixman_region_set_static_pointers (pixman_box16_t         *empty_box,
-					pixman_region16_data_t *empty_data,
-					pixman_region16_data_t *broken_data);
-
-/* creation/destruction */
-PIXMAN_API
-void                    pixman_region_init               (pixman_region16_t *region);
-
-PIXMAN_API
-void                    pixman_region_init_rect          (pixman_region16_t *region,
-							  int                x,
-							  int                y,
-							  unsigned int       width,
-							  unsigned int       height);
-
-PIXMAN_API
-pixman_bool_t           pixman_region_init_rects         (pixman_region16_t *region,
-							  const pixman_box16_t *boxes,
-							  int                count);
-
-PIXMAN_API
-void                    pixman_region_init_with_extents  (pixman_region16_t    *region,
-							  const pixman_box16_t *extents);
-
-PIXMAN_API
-void                    pixman_region_init_from_image    (pixman_region16_t *region,
-							  pixman_image_t    *image);
-
-PIXMAN_API
-void                    pixman_region_fini               (pixman_region16_t *region);
-
-
-/* manipulation */
-PIXMAN_API
-void                    pixman_region_translate          (pixman_region16_t *region,
-							  int                x,
-							  int                y);
-
-PIXMAN_API
-pixman_bool_t           pixman_region_copy               (pixman_region16_t       *dest,
-							  const pixman_region16_t *source);
-
-PIXMAN_API
-pixman_bool_t           pixman_region_intersect          (pixman_region16_t       *new_reg,
-							  const pixman_region16_t *reg1,
-							  const pixman_region16_t *reg2);
-
-PIXMAN_API
-pixman_bool_t           pixman_region_union              (pixman_region16_t       *new_reg,
-							  const pixman_region16_t *reg1,
-							  const pixman_region16_t *reg2);
-
-PIXMAN_API
-pixman_bool_t           pixman_region_union_rect         (pixman_region16_t       *dest,
-							  const pixman_region16_t *source,
-							  int                     x,
-							  int                     y,
-							  unsigned int            width,
-							  unsigned int            height);
-
-PIXMAN_API
-pixman_bool_t		pixman_region_intersect_rect     (pixman_region16_t       *dest,
-							  const pixman_region16_t *source,
-							  int                      x,
-							  int                      y,
-							  unsigned int             width,
-							  unsigned int             height);
-
-PIXMAN_API
-pixman_bool_t           pixman_region_subtract           (pixman_region16_t       *reg_d,
-							  const pixman_region16_t *reg_m,
-							  const pixman_region16_t *reg_s);
-
-PIXMAN_API
-pixman_bool_t           pixman_region_inverse            (pixman_region16_t       *new_reg,
-							  const pixman_region16_t *reg1,
-							  const pixman_box16_t    *inv_rect);
-
-PIXMAN_API
-pixman_bool_t           pixman_region_contains_point     (const pixman_region16_t *region,
-							  int                      x,
-							  int                      y,
-							  pixman_box16_t          *box);
-
-PIXMAN_API
-pixman_region_overlap_t pixman_region_contains_rectangle (const pixman_region16_t *region,
-							  const pixman_box16_t    *prect);
-
-PIXMAN_API
-pixman_bool_t           pixman_region_empty              (const pixman_region16_t *region);
-
-PIXMAN_API
-pixman_bool_t           pixman_region_not_empty          (const pixman_region16_t *region);
-
-PIXMAN_API
-pixman_box16_t *        pixman_region_extents            (const pixman_region16_t *region);
-
-PIXMAN_API
-int                     pixman_region_n_rects            (const pixman_region16_t *region);
-
-PIXMAN_API
-pixman_box16_t *        pixman_region_rectangles         (const pixman_region16_t *region,
-							  int                     *n_rects);
-
-PIXMAN_API
-pixman_bool_t           pixman_region_equal              (const pixman_region16_t *region1,
-							  const pixman_region16_t *region2);
-
-PIXMAN_API
-pixman_bool_t           pixman_region_selfcheck          (const pixman_region16_t *region);
-
-PIXMAN_API
-void                    pixman_region_reset              (pixman_region16_t       *region,
-							  const pixman_box16_t    *box);
-
-PIXMAN_API
-void			pixman_region_clear		 (pixman_region16_t *region);
-/*
- * 32 bit regions
- */
-typedef struct pixman_region32_data	pixman_region32_data_t;
-typedef struct pixman_box32		pixman_box32_t;
-typedef struct pixman_rectangle32	pixman_rectangle32_t;
-typedef struct pixman_region32		pixman_region32_t;
-
-struct pixman_region32_data {
-    long		size;
-    long		numRects;
-/*  pixman_box32_t	rects[size];   in memory but not explicitly declared */
-};
-
-struct pixman_rectangle32
-{
-    int32_t x, y;
-    uint32_t width, height;
-};
-
-struct pixman_box32
-{
-    int32_t x1, y1, x2, y2;
-};
-
-struct pixman_region32
-{
-    pixman_box32_t          extents;
-    pixman_region32_data_t  *data;
-};
-
-/* creation/destruction */
-PIXMAN_API
-void                    pixman_region32_init               (pixman_region32_t *region);
-
-PIXMAN_API
-void                    pixman_region32_init_rect          (pixman_region32_t *region,
-							    int                x,
-							    int                y,
-							    unsigned int       width,
-							    unsigned int       height);
-
-PIXMAN_API
-pixman_bool_t           pixman_region32_init_rects         (pixman_region32_t *region,
-							    const pixman_box32_t *boxes,
-							    int                count);
-
-PIXMAN_API
-void                    pixman_region32_init_with_extents  (pixman_region32_t    *region,
-							    const pixman_box32_t *extents);
-
-PIXMAN_API
-void                    pixman_region32_init_from_image    (pixman_region32_t *region,
-							    pixman_image_t    *image);
-
-PIXMAN_API
-void                    pixman_region32_fini               (pixman_region32_t *region);
-
-
-/* manipulation */
-PIXMAN_API
-void                    pixman_region32_translate          (pixman_region32_t *region,
-							    int                x,
-							    int                y);
-
-PIXMAN_API
-pixman_bool_t           pixman_region32_copy               (pixman_region32_t       *dest,
-							    const pixman_region32_t *source);
-
-PIXMAN_API
-pixman_bool_t           pixman_region32_intersect          (pixman_region32_t       *new_reg,
-							    const pixman_region32_t *reg1,
-							    const pixman_region32_t *reg2);
-
-PIXMAN_API
-pixman_bool_t           pixman_region32_union              (pixman_region32_t       *new_reg,
-							    const pixman_region32_t *reg1,
-							    const pixman_region32_t *reg2);
-
-PIXMAN_API
-pixman_bool_t		pixman_region32_intersect_rect     (pixman_region32_t       *dest,
-							    const pixman_region32_t *source,
-							    int                      x,
-							    int                      y,
-							    unsigned int             width,
-							    unsigned int             height);
-
-PIXMAN_API
-pixman_bool_t           pixman_region32_union_rect         (pixman_region32_t       *dest,
-							    const pixman_region32_t *source,
-							    int                      x,
-							    int                      y,
-							    unsigned int             width,
-							    unsigned int             height);
-
-PIXMAN_API
-pixman_bool_t           pixman_region32_subtract           (pixman_region32_t       *reg_d,
-							    const pixman_region32_t *reg_m,
-							    const pixman_region32_t *reg_s);
-
-PIXMAN_API
-pixman_bool_t           pixman_region32_inverse            (pixman_region32_t       *new_reg,
-							    const pixman_region32_t *reg1,
-							    const pixman_box32_t    *inv_rect);
-
-PIXMAN_API
-pixman_bool_t           pixman_region32_contains_point     (const pixman_region32_t *region,
-							    int                      x,
-							    int                      y,
-							    pixman_box32_t          *box);
-
-PIXMAN_API
-pixman_region_overlap_t pixman_region32_contains_rectangle (const pixman_region32_t *region,
-							    const pixman_box32_t    *prect);
-
-PIXMAN_API
-pixman_bool_t           pixman_region32_empty              (const pixman_region32_t *region);
-
-PIXMAN_API
-pixman_bool_t           pixman_region32_not_empty          (const pixman_region32_t *region);
-
-PIXMAN_API
-pixman_box32_t *        pixman_region32_extents            (const pixman_region32_t *region);
-
-PIXMAN_API
-int                     pixman_region32_n_rects            (const pixman_region32_t *region);
-
-PIXMAN_API
-pixman_box32_t *        pixman_region32_rectangles         (const pixman_region32_t *region,
-							    int                     *n_rects);
-
-PIXMAN_API
-pixman_bool_t           pixman_region32_equal              (const pixman_region32_t *region1,
-							    const pixman_region32_t *region2);
-
-PIXMAN_API
-pixman_bool_t           pixman_region32_selfcheck          (const pixman_region32_t *region);
-
-PIXMAN_API
-void                    pixman_region32_reset              (pixman_region32_t    *region,
-							    const pixman_box32_t *box);
-
-PIXMAN_API
-void			pixman_region32_clear		   (pixman_region32_t *region);
-/*
- * 64 bit fractional regions
- */
-typedef struct pixman_region64f_data	pixman_region64f_data_t;
-typedef struct pixman_box64f		pixman_box64f_t;
-typedef struct pixman_rectangle64f	pixman_rectangle64f_t;
-typedef struct pixman_region64f		pixman_region64f_t;
-
-struct pixman_region64f_data {
-    long		size;
-    long		numRects;
-/*  pixman_box64f_t	rects[size];   in memory but not explicitly declared */
-};
-
-struct pixman_rectangle64f
-{
-    double x, y;
-    double width, height;
-};
-
-struct pixman_box64f
-{
-    double x1, y1, x2, y2;
-};
-
-struct pixman_region64f
-{
-    pixman_box64f_t          extents;
-    pixman_region64f_data_t  *data;
-};
-
-/* creation/destruction */
-PIXMAN_API
-void                    pixman_region64f_init              (pixman_region64f_t *region);
-
-PIXMAN_API
-void                    pixman_region64f_init_rect         (pixman_region64f_t *region,
-							    int                 x,
-							    int                 y,
-							    unsigned int        width,
-							    unsigned int        height);
-
-PIXMAN_API
-void                    pixman_region64f_init_rectf        (pixman_region64f_t *region,
-							    double              x,
-							    double              y,
-							    double              width,
-							    double              height);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_init_rects        (pixman_region64f_t *region,
-							    const pixman_box64f_t *boxes,
-							    int                 count);
-
-PIXMAN_API
-void                    pixman_region64f_init_with_extents (pixman_region64f_t    *region,
-							    const pixman_box64f_t *extents);
-
-PIXMAN_API
-void                    pixman_region64f_init_from_image   (pixman_region64f_t *region,
-							    pixman_image_t     *image);
-
-PIXMAN_API
-void                    pixman_region64f_fini              (pixman_region64f_t *region);
-
-
-/* manipulation */
-PIXMAN_API
-void                    pixman_region64f_translate         (pixman_region64f_t *region,
-							    int                 x,
-							    int                 y);
-
-PIXMAN_API
-void                    pixman_region64f_translatef        (pixman_region64f_t *region,
-							    double              x,
-							    double              y);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_copy              (pixman_region64f_t       *dest,
-							    const pixman_region64f_t *source);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_intersect         (pixman_region64f_t       *new_reg,
-							    const pixman_region64f_t *reg1,
-							    const pixman_region64f_t *reg2);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_union             (pixman_region64f_t       *new_reg,
-							    const pixman_region64f_t *reg1,
-							    const pixman_region64f_t *reg2);
-
-PIXMAN_API
-pixman_bool_t		pixman_region64f_intersect_rect    (pixman_region64f_t       *dest,
-							    const pixman_region64f_t *source,
-							    int                       x,
-							    int                       y,
-							    unsigned int              width,
-							    unsigned int              height);
-
-PIXMAN_API
-pixman_bool_t		pixman_region64f_intersect_rectf   (pixman_region64f_t       *dest,
-							    const pixman_region64f_t *source,
-							    double                    x,
-							    double                    y,
-							    double                    width,
-							    double                    height);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_union_rect        (pixman_region64f_t       *dest,
-							    const pixman_region64f_t *source,
-							    int                       x,
-							    int                       y,
-							    unsigned int              width,
-							    unsigned int              height);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_union_rectf       (pixman_region64f_t       *dest,
-							    const pixman_region64f_t *source,
-							    double                    x,
-							    double                    y,
-							    double                    width,
-							    double                    height);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_subtract          (pixman_region64f_t       *reg_d,
-							    const pixman_region64f_t *reg_m,
-							    const pixman_region64f_t *reg_s);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_inverse           (pixman_region64f_t       *new_reg,
-							    const pixman_region64f_t *reg1,
-							    const pixman_box64f_t    *inv_rect);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_contains_point    (const pixman_region64f_t *region,
-							    int                       x,
-							    int                       y,
-							    pixman_box64f_t          *box);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_contains_pointf   (const pixman_region64f_t *region,
-							    double                    x,
-							    double                    y,
-							    pixman_box64f_t          *box);
-
-PIXMAN_API
-pixman_region_overlap_t pixman_region64f_contains_rectangle(const pixman_region64f_t *region,
-							    const pixman_box64f_t    *prect);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_empty             (const pixman_region64f_t *region);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_not_empty         (const pixman_region64f_t *region);
-
-PIXMAN_API
-pixman_box64f_t *       pixman_region64f_extents           (const pixman_region64f_t *region);
-
-PIXMAN_API
-int                     pixman_region64f_n_rects           (const pixman_region64f_t *region);
-
-PIXMAN_API
-pixman_box64f_t *       pixman_region64f_rectangles        (const pixman_region64f_t *region,
-							    int                      *n_rects);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_equal             (const pixman_region64f_t *region1,
-							    const pixman_region64f_t *region2);
-
-PIXMAN_API
-pixman_bool_t           pixman_region64f_selfcheck         (const pixman_region64f_t *region);
-
-PIXMAN_API
-void                    pixman_region64f_reset             (pixman_region64f_t    *region,
-							    const pixman_box64f_t *box);
-
-PIXMAN_API
-void			pixman_region64f_clear		   (pixman_region64f_t *region);
-
-
-/* Copy / Fill / Misc */
-PIXMAN_API
-pixman_bool_t pixman_blt                (uint32_t           *src_bits,
-					 uint32_t           *dst_bits,
-					 int                 src_stride,
-					 int                 dst_stride,
-					 int                 src_bpp,
-					 int                 dst_bpp,
-					 int                 src_x,
-					 int                 src_y,
-					 int                 dest_x,
-					 int                 dest_y,
-					 int                 width,
-					 int                 height);
-
-PIXMAN_API
-pixman_bool_t pixman_fill               (uint32_t           *bits,
-					 int                 stride,
-					 int                 bpp,
-					 int                 x,
-					 int                 y,
-					 int                 width,
-					 int                 height,
-					 uint32_t            _xor);
-
-
-PIXMAN_API
-int           pixman_version            (void);
-
-PIXMAN_API
-const char*   pixman_version_string     (void);
-
-/*
- * Images
- */
-typedef struct pixman_indexed		pixman_indexed_t;
-typedef struct pixman_gradient_stop	pixman_gradient_stop_t;
-
-typedef uint32_t (* pixman_read_memory_func_t) (const void *src, int size);
-typedef void     (* pixman_write_memory_func_t) (void *dst, uint32_t value, int size);
-
-typedef void     (* pixman_image_destroy_func_t) (pixman_image_t *image, void *data);
-
-struct pixman_gradient_stop {
-    pixman_fixed_t x;
-    pixman_color_t color;
-};
-
-#define PIXMAN_MAX_INDEXED  256 /* XXX depth must be <= 8 */
-
-#if PIXMAN_MAX_INDEXED <= 256
-typedef uint8_t pixman_index_type;
-#endif
-
-struct pixman_indexed
-{
-    pixman_bool_t       color;
-    uint32_t		rgba[PIXMAN_MAX_INDEXED];
-    pixman_index_type	ent[32768];
-};
-
-/*
- * While the protocol is generous in format support, the
- * sample implementation allows only packed RGB and GBR
- * representations for data to simplify software rendering,
- */
-#define PIXMAN_FORMAT(bpp,type,a,r,g,b)	(((bpp) << 24) |  \
-					 ((type) << 16) | \
-					 ((a) << 12) |	  \
-					 ((r) << 8) |	  \
-					 ((g) << 4) |	  \
-					 ((b)))
-
-#define PIXMAN_FORMAT_BYTE(bpp,type,a,r,g,b) \
-	(((bpp >> 3) << 24) | \
-	(3 << 22) | ((type) << 16) | \
-	((a >> 3) << 12) | \
-	((r >> 3) << 8) | \
-	((g >> 3) << 4) | \
-	((b >> 3)))
-
-#define PIXMAN_FORMAT_RESHIFT(val, ofs, num) \
-	(((val >> (ofs)) & ((1 << (num)) - 1)) << ((val >> 22) & 3))
-
-#define PIXMAN_FORMAT_BPP(f)	PIXMAN_FORMAT_RESHIFT(f, 24, 8)
-#define PIXMAN_FORMAT_SHIFT(f)	((uint32_t)((f >> 22) & 3))
-#define PIXMAN_FORMAT_TYPE(f)	(((f) >> 16) & 0x3f)
-#define PIXMAN_FORMAT_A(f)	PIXMAN_FORMAT_RESHIFT(f, 12, 4)
-#define PIXMAN_FORMAT_R(f)	PIXMAN_FORMAT_RESHIFT(f, 8, 4)
-#define PIXMAN_FORMAT_G(f)	PIXMAN_FORMAT_RESHIFT(f, 4, 4)
-#define PIXMAN_FORMAT_B(f)	PIXMAN_FORMAT_RESHIFT(f, 0, 4)
-#define PIXMAN_FORMAT_RGB(f)	(((f)      ) & 0xfff)
-#define PIXMAN_FORMAT_VIS(f)	(((f)      ) & 0xffff)
-#define PIXMAN_FORMAT_DEPTH(f)	(PIXMAN_FORMAT_A(f) +	\
-				 PIXMAN_FORMAT_R(f) +	\
-				 PIXMAN_FORMAT_G(f) +	\
-				 PIXMAN_FORMAT_B(f))
-
-#define PIXMAN_TYPE_OTHER	0
-#define PIXMAN_TYPE_A		1
-#define PIXMAN_TYPE_ARGB	2
-#define PIXMAN_TYPE_ABGR	3
-#define PIXMAN_TYPE_COLOR	4
-#define PIXMAN_TYPE_GRAY	5
-#define PIXMAN_TYPE_YUY2	6
-#define PIXMAN_TYPE_YV12	7
-#define PIXMAN_TYPE_BGRA	8
-#define PIXMAN_TYPE_RGBA	9
-#define PIXMAN_TYPE_ARGB_SRGB	10
-#define PIXMAN_TYPE_RGBA_FLOAT	11
-
-#define PIXMAN_FORMAT_COLOR(f)				\
-	(PIXMAN_FORMAT_TYPE(f) == PIXMAN_TYPE_ARGB ||	\
-	 PIXMAN_FORMAT_TYPE(f) == PIXMAN_TYPE_ABGR ||	\
-	 PIXMAN_FORMAT_TYPE(f) == PIXMAN_TYPE_BGRA ||	\
-	 PIXMAN_FORMAT_TYPE(f) == PIXMAN_TYPE_RGBA ||	\
-	 PIXMAN_FORMAT_TYPE(f) == PIXMAN_TYPE_RGBA_FLOAT)
-
-typedef enum {
-/* 128bpp formats */
-    PIXMAN_rgba_float =	PIXMAN_FORMAT_BYTE(128,PIXMAN_TYPE_RGBA_FLOAT,32,32,32,32),
-/* 96bpp formats */
-    PIXMAN_rgb_float =	PIXMAN_FORMAT_BYTE(96,PIXMAN_TYPE_RGBA_FLOAT,0,32,32,32),
-
-/* 64bpp formats */
-    /* [63:0] A:B:G:R 16:16:16:16 native endian */
-    PIXMAN_a16b16g16r16 = PIXMAN_FORMAT_BYTE(64,PIXMAN_TYPE_ABGR,16,16,16,16),
-
-/* 32bpp formats */
-    PIXMAN_a8r8g8b8 =	 PIXMAN_FORMAT(32,PIXMAN_TYPE_ARGB,8,8,8,8),
-    PIXMAN_x8r8g8b8 =	 PIXMAN_FORMAT(32,PIXMAN_TYPE_ARGB,0,8,8,8),
-    PIXMAN_a8b8g8r8 =	 PIXMAN_FORMAT(32,PIXMAN_TYPE_ABGR,8,8,8,8),
-    PIXMAN_x8b8g8r8 =	 PIXMAN_FORMAT(32,PIXMAN_TYPE_ABGR,0,8,8,8),
-    PIXMAN_b8g8r8a8 =	 PIXMAN_FORMAT(32,PIXMAN_TYPE_BGRA,8,8,8,8),
-    PIXMAN_b8g8r8x8 =	 PIXMAN_FORMAT(32,PIXMAN_TYPE_BGRA,0,8,8,8),
-    PIXMAN_r8g8b8a8 =	 PIXMAN_FORMAT(32,PIXMAN_TYPE_RGBA,8,8,8,8),
-    PIXMAN_r8g8b8x8 =	 PIXMAN_FORMAT(32,PIXMAN_TYPE_RGBA,0,8,8,8),
-    PIXMAN_x14r6g6b6 =	 PIXMAN_FORMAT(32,PIXMAN_TYPE_ARGB,0,6,6,6),
-    PIXMAN_x2r10g10b10 = PIXMAN_FORMAT(32,PIXMAN_TYPE_ARGB,0,10,10,10),
-    PIXMAN_a2r10g10b10 = PIXMAN_FORMAT(32,PIXMAN_TYPE_ARGB,2,10,10,10),
-    PIXMAN_x2b10g10r10 = PIXMAN_FORMAT(32,PIXMAN_TYPE_ABGR,0,10,10,10),
-    PIXMAN_a2b10g10r10 = PIXMAN_FORMAT(32,PIXMAN_TYPE_ABGR,2,10,10,10),
-
-/* sRGB formats */
-    PIXMAN_a8r8g8b8_sRGB = PIXMAN_FORMAT(32,PIXMAN_TYPE_ARGB_SRGB,8,8,8,8),
-    PIXMAN_r8g8b8_sRGB = PIXMAN_FORMAT(24,PIXMAN_TYPE_ARGB_SRGB,0,8,8,8),
-
-/* 24bpp formats */
-    PIXMAN_r8g8b8 =	 PIXMAN_FORMAT(24,PIXMAN_TYPE_ARGB,0,8,8,8),
-    PIXMAN_b8g8r8 =	 PIXMAN_FORMAT(24,PIXMAN_TYPE_ABGR,0,8,8,8),
-
-/* 16bpp formats */
-    PIXMAN_r5g6b5 =	 PIXMAN_FORMAT(16,PIXMAN_TYPE_ARGB,0,5,6,5),
-    PIXMAN_b5g6r5 =	 PIXMAN_FORMAT(16,PIXMAN_TYPE_ABGR,0,5,6,5),
-
-    PIXMAN_a1r5g5b5 =	 PIXMAN_FORMAT(16,PIXMAN_TYPE_ARGB,1,5,5,5),
-    PIXMAN_x1r5g5b5 =	 PIXMAN_FORMAT(16,PIXMAN_TYPE_ARGB,0,5,5,5),
-    PIXMAN_a1b5g5r5 =	 PIXMAN_FORMAT(16,PIXMAN_TYPE_ABGR,1,5,5,5),
-    PIXMAN_x1b5g5r5 =	 PIXMAN_FORMAT(16,PIXMAN_TYPE_ABGR,0,5,5,5),
-    PIXMAN_a4r4g4b4 =	 PIXMAN_FORMAT(16,PIXMAN_TYPE_ARGB,4,4,4,4),
-    PIXMAN_x4r4g4b4 =	 PIXMAN_FORMAT(16,PIXMAN_TYPE_ARGB,0,4,4,4),
-    PIXMAN_a4b4g4r4 =	 PIXMAN_FORMAT(16,PIXMAN_TYPE_ABGR,4,4,4,4),
-    PIXMAN_x4b4g4r4 =	 PIXMAN_FORMAT(16,PIXMAN_TYPE_ABGR,0,4,4,4),
-
-/* 8bpp formats */
-    PIXMAN_a8 =		 PIXMAN_FORMAT(8,PIXMAN_TYPE_A,8,0,0,0),
-    PIXMAN_r3g3b2 =	 PIXMAN_FORMAT(8,PIXMAN_TYPE_ARGB,0,3,3,2),
-    PIXMAN_b2g3r3 =	 PIXMAN_FORMAT(8,PIXMAN_TYPE_ABGR,0,3,3,2),
-    PIXMAN_a2r2g2b2 =	 PIXMAN_FORMAT(8,PIXMAN_TYPE_ARGB,2,2,2,2),
-    PIXMAN_a2b2g2r2 =	 PIXMAN_FORMAT(8,PIXMAN_TYPE_ABGR,2,2,2,2),
-
-    PIXMAN_c8 =		 PIXMAN_FORMAT(8,PIXMAN_TYPE_COLOR,0,0,0,0),
-    PIXMAN_g8 =		 PIXMAN_FORMAT(8,PIXMAN_TYPE_GRAY,0,0,0,0),
-
-    PIXMAN_x4a4 =	 PIXMAN_FORMAT(8,PIXMAN_TYPE_A,4,0,0,0),
-
-    PIXMAN_x4c4 =	 PIXMAN_FORMAT(8,PIXMAN_TYPE_COLOR,0,0,0,0),
-    PIXMAN_x4g4 =	 PIXMAN_FORMAT(8,PIXMAN_TYPE_GRAY,0,0,0,0),
-
-/* 4bpp formats */
-    PIXMAN_a4 =		 PIXMAN_FORMAT(4,PIXMAN_TYPE_A,4,0,0,0),
-    PIXMAN_r1g2b1 =	 PIXMAN_FORMAT(4,PIXMAN_TYPE_ARGB,0,1,2,1),
-    PIXMAN_b1g2r1 =	 PIXMAN_FORMAT(4,PIXMAN_TYPE_ABGR,0,1,2,1),
-    PIXMAN_a1r1g1b1 =	 PIXMAN_FORMAT(4,PIXMAN_TYPE_ARGB,1,1,1,1),
-    PIXMAN_a1b1g1r1 =	 PIXMAN_FORMAT(4,PIXMAN_TYPE_ABGR,1,1,1,1),
-
-    PIXMAN_c4 =		 PIXMAN_FORMAT(4,PIXMAN_TYPE_COLOR,0,0,0,0),
-    PIXMAN_g4 =		 PIXMAN_FORMAT(4,PIXMAN_TYPE_GRAY,0,0,0,0),
-
-/* 1bpp formats */
-    PIXMAN_a1 =		 PIXMAN_FORMAT(1,PIXMAN_TYPE_A,1,0,0,0),
-
-    PIXMAN_g1 =		 PIXMAN_FORMAT(1,PIXMAN_TYPE_GRAY,0,0,0,0),
-
-/* YUV formats */
-    PIXMAN_yuy2 =	 PIXMAN_FORMAT(16,PIXMAN_TYPE_YUY2,0,0,0,0),
-    PIXMAN_yv12 =	 PIXMAN_FORMAT(12,PIXMAN_TYPE_YV12,0,0,0,0)
-} pixman_format_code_t;
-
-/* Querying supported format values. */
-PIXMAN_API
-pixman_bool_t pixman_format_supported_destination (pixman_format_code_t format);
-
-PIXMAN_API
-pixman_bool_t pixman_format_supported_source      (pixman_format_code_t format);
-
-/* Constructors */
-PIXMAN_API
-pixman_image_t *pixman_image_create_solid_fill       (const pixman_color_t         *color);
-
-PIXMAN_API
-pixman_image_t *pixman_image_create_linear_gradient  (const pixman_point_fixed_t   *p1,
-						      const pixman_point_fixed_t   *p2,
-						      const pixman_gradient_stop_t *stops,
-						      int                           n_stops);
-
-PIXMAN_API
-pixman_image_t *pixman_image_create_radial_gradient  (const pixman_point_fixed_t   *inner,
-						      const pixman_point_fixed_t   *outer,
-						      pixman_fixed_t                inner_radius,
-						      pixman_fixed_t                outer_radius,
-						      const pixman_gradient_stop_t *stops,
-						      int                           n_stops);
-
-PIXMAN_API
-pixman_image_t *pixman_image_create_conical_gradient (const pixman_point_fixed_t   *center,
-						      pixman_fixed_t                angle,
-						      const pixman_gradient_stop_t *stops,
-						      int                           n_stops);
-
-PIXMAN_API
-pixman_image_t *pixman_image_create_bits             (pixman_format_code_t          format,
-						      int                           width,
-						      int                           height,
-						      uint32_t                     *bits,
-						      int                           rowstride_bytes);
-
-PIXMAN_API
-pixman_image_t *pixman_image_create_bits_no_clear    (pixman_format_code_t format,
-						      int                  width,
-						      int                  height,
-						      uint32_t *           bits,
-						      int                  rowstride_bytes);
-
-/* Destructor */
-PIXMAN_API
-pixman_image_t *pixman_image_ref                     (pixman_image_t               *image);
-
-PIXMAN_API
-pixman_bool_t   pixman_image_unref                   (pixman_image_t               *image);
-
-
-PIXMAN_API
-void		pixman_image_set_destroy_function    (pixman_image_t		   *image,
-						      pixman_image_destroy_func_t   function,
-						      void			   *data);
-
-PIXMAN_API
-void *		pixman_image_get_destroy_data        (pixman_image_t		   *image);
-
-/* Set properties */
-PIXMAN_API
-pixman_bool_t   pixman_image_set_clip_region         (pixman_image_t               *image,
-						      const pixman_region16_t            *region);
-
-PIXMAN_API
-pixman_bool_t   pixman_image_set_clip_region32       (pixman_image_t               *image,
-						      const pixman_region32_t            *region);
-
-PIXMAN_API
-pixman_bool_t   pixman_image_set_clip_region64f      (pixman_image_t               *image,
-						      const pixman_region64f_t           *region);
-
-PIXMAN_API
-void		pixman_image_set_has_client_clip     (pixman_image_t               *image,
-						      pixman_bool_t		    clien_clip);
-
-PIXMAN_API
-pixman_bool_t   pixman_image_set_transform           (pixman_image_t               *image,
-						      const pixman_transform_t     *transform);
-
-PIXMAN_API
-void            pixman_image_set_repeat              (pixman_image_t               *image,
-						      pixman_repeat_t               repeat);
-
-PIXMAN_API
-void            pixman_image_set_dither              (pixman_image_t               *image,
-						      pixman_dither_t               dither);
-
-PIXMAN_API
-void            pixman_image_set_dither_offset       (pixman_image_t               *image,
-						      int                           offset_x,
-						      int                           offset_y);
-
-PIXMAN_API
-pixman_bool_t   pixman_image_set_filter              (pixman_image_t               *image,
-						      pixman_filter_t               filter,
-						      const pixman_fixed_t         *filter_params,
-						      int                           n_filter_params);
-
-PIXMAN_API
-void		pixman_image_set_source_clipping     (pixman_image_t		   *image,
-						      pixman_bool_t                 source_clipping);
-
-PIXMAN_API
-void            pixman_image_set_alpha_map           (pixman_image_t               *image,
-						      pixman_image_t               *alpha_map,
-						      int16_t                       x,
-						      int16_t                       y);
-
-PIXMAN_API
-void            pixman_image_set_component_alpha     (pixman_image_t               *image,
-						      pixman_bool_t                 component_alpha);
-
-PIXMAN_API
-pixman_bool_t   pixman_image_get_component_alpha     (pixman_image_t               *image);
-
-PIXMAN_API
-void		pixman_image_set_accessors	     (pixman_image_t		   *image,
-						      pixman_read_memory_func_t	    read_func,
-						      pixman_write_memory_func_t    write_func);
-
-PIXMAN_API
-void		pixman_image_set_indexed	     (pixman_image_t		   *image,
-						      const pixman_indexed_t	   *indexed);
-
-PIXMAN_API
-uint32_t       *pixman_image_get_data                (pixman_image_t               *image);
-
-PIXMAN_API
-int		pixman_image_get_width               (pixman_image_t               *image);
-
-PIXMAN_API
-int             pixman_image_get_height              (pixman_image_t               *image);
-
-PIXMAN_API
-int		pixman_image_get_stride              (pixman_image_t               *image); /* in bytes */
-
-PIXMAN_API
-int		pixman_image_get_depth               (pixman_image_t		   *image);
-
-PIXMAN_API
-pixman_format_code_t pixman_image_get_format	     (pixman_image_t		   *image);
-
-typedef enum
-{
-    PIXMAN_KERNEL_IMPULSE,
-    PIXMAN_KERNEL_BOX,
-    PIXMAN_KERNEL_LINEAR,
-    PIXMAN_KERNEL_CUBIC,
-    PIXMAN_KERNEL_GAUSSIAN,
-    PIXMAN_KERNEL_LANCZOS2,
-    PIXMAN_KERNEL_LANCZOS3,
-    PIXMAN_KERNEL_LANCZOS3_STRETCHED       /* Jim Blinn's 'nice' filter */
-} pixman_kernel_t;
-
-/* Create the parameter list for a SEPARABLE_CONVOLUTION filter
- * with the given kernels and scale parameters.
- */
-PIXMAN_API
-pixman_fixed_t *
-pixman_filter_create_separable_convolution (int             *n_values,
-					    pixman_fixed_t   scale_x,
-					    pixman_fixed_t   scale_y,
-					    pixman_kernel_t  reconstruct_x,
-					    pixman_kernel_t  reconstruct_y,
-					    pixman_kernel_t  sample_x,
-					    pixman_kernel_t  sample_y,
-					    int              subsample_bits_x,
-					    int              subsample_bits_y);
-
-
-PIXMAN_API
-pixman_bool_t	pixman_image_fill_rectangles	     (pixman_op_t		    op,
-						      pixman_image_t		   *image,
-						      const pixman_color_t	   *color,
-						      int			    n_rects,
-						      const pixman_rectangle16_t   *rects);
-
-PIXMAN_API
-pixman_bool_t   pixman_image_fill_boxes              (pixman_op_t                   op,
-                                                      pixman_image_t               *dest,
-                                                      const pixman_color_t         *color,
-                                                      int                           n_boxes,
-                                                      const pixman_box32_t         *boxes);
-
-/* Composite */
-PIXMAN_API
-pixman_bool_t pixman_compute_composite_region (pixman_region16_t *region,
-					       pixman_image_t    *src_image,
-					       pixman_image_t    *mask_image,
-					       pixman_image_t    *dest_image,
-					       int16_t            src_x,
-					       int16_t            src_y,
-					       int16_t            mask_x,
-					       int16_t            mask_y,
-					       int16_t            dest_x,
-					       int16_t            dest_y,
-					       uint16_t           width,
-					       uint16_t           height);
-
-PIXMAN_API
-void          pixman_image_composite          (pixman_op_t        op,
-					       pixman_image_t    *src,
-					       pixman_image_t    *mask,
-					       pixman_image_t    *dest,
-					       int16_t            src_x,
-					       int16_t            src_y,
-					       int16_t            mask_x,
-					       int16_t            mask_y,
-					       int16_t            dest_x,
-					       int16_t            dest_y,
-					       uint16_t           width,
-					       uint16_t           height);
-
-PIXMAN_API
-void          pixman_image_composite32        (pixman_op_t        op,
-					       pixman_image_t    *src,
-					       pixman_image_t    *mask,
-					       pixman_image_t    *dest,
-					       int32_t            src_x,
-					       int32_t            src_y,
-					       int32_t            mask_x,
-					       int32_t            mask_y,
-					       int32_t            dest_x,
-					       int32_t            dest_y,
-					       int32_t            width,
-					       int32_t            height);
-
-PIXMAN_API
-void          pixman_image_composite64f       (pixman_op_t        op,
-					       pixman_image_t    *src,
-					       pixman_image_t    *mask,
-					       pixman_image_t    *dest,
-					       double             src_x,
-					       double             src_y,
-					       double             mask_x,
-					       double             mask_y,
-					       double             dest_x,
-					       double             dest_y,
-					       double             width,
-					       double             height);
-
-/* Executive Summary: This function is a no-op that only exists
- * for historical reasons.
- *
- * There used to be a bug in the X server where it would rely on
- * out-of-bounds accesses when it was asked to composite with a
- * window as the source. It would create a pixman image pointing
- * to some bogus position in memory, but then set a clip region
- * to the position where the actual bits were.
- *
- * Due to a bug in old versions of pixman, where it would not clip
- * against the image bounds when a clip region was set, this would
- * actually work. So when the pixman bug was fixed, a workaround was
- * added to allow certain out-of-bound accesses. This function disabled
- * those workarounds.
- *
- * Since 0.21.2, pixman doesn't do these workarounds anymore, so now this
- * function is a no-op.
- */
-PIXMAN_API
-void pixman_disable_out_of_bounds_workaround (void);
-
-/*
- * Glyphs
- */
-typedef struct pixman_glyph_cache_t pixman_glyph_cache_t;
-typedef struct
-{
-    int		x, y;
-    const void *glyph;
-} pixman_glyph_t;
-
-PIXMAN_API
-pixman_glyph_cache_t *pixman_glyph_cache_create       (void);
-
-PIXMAN_API
-void                  pixman_glyph_cache_destroy      (pixman_glyph_cache_t *cache);
-
-PIXMAN_API
-void                  pixman_glyph_cache_freeze       (pixman_glyph_cache_t *cache);
-
-PIXMAN_API
-void                  pixman_glyph_cache_thaw         (pixman_glyph_cache_t *cache);
-
-PIXMAN_API
-const void *          pixman_glyph_cache_lookup       (pixman_glyph_cache_t *cache,
-						       void                 *font_key,
-						       void                 *glyph_key);
-
-PIXMAN_API
-const void *          pixman_glyph_cache_insert       (pixman_glyph_cache_t *cache,
-						       void                 *font_key,
-						       void                 *glyph_key,
-						       int		     origin_x,
-						       int                   origin_y,
-						       pixman_image_t       *glyph_image);
-
-PIXMAN_API
-void                  pixman_glyph_cache_remove       (pixman_glyph_cache_t *cache,
-						       void                 *font_key,
-						       void                 *glyph_key);
-
-PIXMAN_API
-void                  pixman_glyph_get_extents        (pixman_glyph_cache_t *cache,
-						       int                   n_glyphs,
-						       pixman_glyph_t       *glyphs,
-						       pixman_box32_t       *extents);
-
-PIXMAN_API
-pixman_format_code_t  pixman_glyph_get_mask_format    (pixman_glyph_cache_t *cache,
-						       int		     n_glyphs,
-						       const pixman_glyph_t *glyphs);
-
-PIXMAN_API
-void                  pixman_composite_glyphs         (pixman_op_t           op,
-						       pixman_image_t       *src,
-						       pixman_image_t       *dest,
-						       pixman_format_code_t  mask_format,
-						       int32_t               src_x,
-						       int32_t               src_y,
-						       int32_t		     mask_x,
-						       int32_t		     mask_y,
-						       int32_t               dest_x,
-						       int32_t               dest_y,
-						       int32_t		     width,
-						       int32_t		     height,
-						       pixman_glyph_cache_t *cache,
-						       int		     n_glyphs,
-						       const pixman_glyph_t *glyphs);
-
-PIXMAN_API
-void                  pixman_composite_glyphs_no_mask (pixman_op_t           op,
-						       pixman_image_t       *src,
-						       pixman_image_t       *dest,
-						       int32_t               src_x,
-						       int32_t               src_y,
-						       int32_t               dest_x,
-						       int32_t               dest_y,
-						       pixman_glyph_cache_t *cache,
-						       int		     n_glyphs,
-						       const pixman_glyph_t *glyphs);
-
-/*
- * Trapezoids
- */
-typedef struct pixman_edge pixman_edge_t;
-typedef struct pixman_trapezoid pixman_trapezoid_t;
-typedef struct pixman_trap pixman_trap_t;
-typedef struct pixman_span_fix pixman_span_fix_t;
-typedef struct pixman_triangle pixman_triangle_t;
-
-/*
- * An edge structure.  This represents a single polygon edge
- * and can be quickly stepped across small or large gaps in the
- * sample grid
- */
-struct pixman_edge
-{
-    pixman_fixed_t	x;
-    pixman_fixed_t	e;
-    pixman_fixed_t	stepx;
-    pixman_fixed_t	signdx;
-    pixman_fixed_t	dy;
-    pixman_fixed_t	dx;
-
-    pixman_fixed_t	stepx_small;
-    pixman_fixed_t	stepx_big;
-    pixman_fixed_t	dx_small;
-    pixman_fixed_t	dx_big;
-};
-
-struct pixman_trapezoid
-{
-    pixman_fixed_t	top, bottom;
-    pixman_line_fixed_t	left, right;
-};
-
-struct pixman_triangle
-{
-    pixman_point_fixed_t p1, p2, p3;
-};
-
-/* whether 't' is a well defined not obviously empty trapezoid */
-#define pixman_trapezoid_valid(t)				   \
-    ((t)->left.p1.y != (t)->left.p2.y &&			   \
-     (t)->right.p1.y != (t)->right.p2.y &&			   \
-     ((t)->bottom > (t)->top))
-
-struct pixman_span_fix
-{
-    pixman_fixed_t	l, r, y;
-};
-
-struct pixman_trap
-{
-    pixman_span_fix_t	top, bot;
-};
-
-PIXMAN_API
-pixman_fixed_t pixman_sample_ceil_y        (pixman_fixed_t             y,
-					    int                        bpp);
-
-PIXMAN_API
-pixman_fixed_t pixman_sample_floor_y       (pixman_fixed_t             y,
-					    int                        bpp);
-
-PIXMAN_API
-void           pixman_edge_step            (pixman_edge_t             *e,
-					    int                        n);
-
-PIXMAN_API
-void           pixman_edge_init            (pixman_edge_t             *e,
-					    int                        bpp,
-					    pixman_fixed_t             y_start,
-					    pixman_fixed_t             x_top,
-					    pixman_fixed_t             y_top,
-					    pixman_fixed_t             x_bot,
-					    pixman_fixed_t             y_bot);
-
-PIXMAN_API
-void           pixman_line_fixed_edge_init (pixman_edge_t             *e,
-					    int                        bpp,
-					    pixman_fixed_t             y,
-					    const pixman_line_fixed_t *line,
-					    int                        x_off,
-					    int                        y_off);
-
-PIXMAN_API
-void           pixman_rasterize_edges      (pixman_image_t            *image,
-					    pixman_edge_t             *l,
-					    pixman_edge_t             *r,
-					    pixman_fixed_t             t,
-					    pixman_fixed_t             b);
-
-PIXMAN_API
-void           pixman_add_traps            (pixman_image_t            *image,
-					    int16_t                    x_off,
-					    int16_t                    y_off,
-					    int                        ntrap,
-					    const pixman_trap_t       *traps);
-
-PIXMAN_API
-void           pixman_add_trapezoids       (pixman_image_t            *image,
-					    int16_t                    x_off,
-					    int                        y_off,
-					    int                        ntraps,
-					    const pixman_trapezoid_t  *traps);
-
-PIXMAN_API
-void           pixman_rasterize_trapezoid  (pixman_image_t            *image,
-					    const pixman_trapezoid_t  *trap,
-					    int                        x_off,
-					    int                        y_off);
-
-PIXMAN_API
-void          pixman_composite_trapezoids (pixman_op_t		       op,
-					   pixman_image_t *	       src,
-					   pixman_image_t *	       dst,
-					   pixman_format_code_t	       mask_format,
-					   int			       x_src,
-					   int			       y_src,
-					   int			       x_dst,
-					   int			       y_dst,
-					   int			       n_traps,
-					   const pixman_trapezoid_t *  traps);
-
-PIXMAN_API
-void          pixman_composite_triangles (pixman_op_t		       op,
-					  pixman_image_t *	       src,
-					  pixman_image_t *	       dst,
-					  pixman_format_code_t	       mask_format,
-					  int			       x_src,
-					  int			       y_src,
-					  int			       x_dst,
-					  int			       y_dst,
-					  int			       n_tris,
-					  const pixman_triangle_t *    tris);
-
-PIXMAN_API
-void	      pixman_add_triangles       (pixman_image_t              *image,
-					  int32_t	               x_off,
-					  int32_t	               y_off,
-					  int	                       n_tris,
-					  const pixman_triangle_t     *tris);
-
-PIXMAN_END_DECLS
-
-#endif /* PIXMAN_H__ */
diff --git a/experiments/wasm-gui/third_party/wasm-prefix/lib/libXfont2.a b/experiments/wasm-gui/third_party/wasm-prefix/lib/libXfont2.a
deleted file mode 100644
index 8cf2db8cc..000000000
Binary files a/experiments/wasm-gui/third_party/wasm-prefix/lib/libXfont2.a and /dev/null differ
diff --git a/experiments/wasm-gui/third_party/wasm-prefix/lib/libXfont2.la b/experiments/wasm-gui/third_party/wasm-prefix/lib/libXfont2.la
deleted file mode 100755
index 63a2517c9..000000000
--- a/experiments/wasm-gui/third_party/wasm-prefix/lib/libXfont2.la
+++ /dev/null
@@ -1,41 +0,0 @@
-# libXfont2.la - a libtool library file
-# Generated by libtool (GNU libtool) 2.4.7
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# The name that we can dlopen(3).
-dlname=''
-
-# Names of this library.
-library_names=''
-
-# The name of the static archive.
-old_library='libXfont2.a'
-
-# Linker flags that cannot go in dependency_libs.
-inherited_linker_flags=' -pthread'
-
-# Libraries that this one depends upon.
-dependency_libs=' -L/home/nathan/secure-exec-wasmgui/experiments/wasm-gui/third_party/wasm-prefix-threads/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1-threads -lm /home/nathan/secure-exec-wasmgui/experiments/wasm-gui/third_party/wasm-prefix-threads/lib/libfontenc.la /home/nathan/secure-exec-wasmgui/experiments/wasm-gui/third_party/wasm-prefix-threads/lib/libfreetype.la -lwasi-emulated-signal -lwasi-emulated-mman -lwasi-emulated-process-clocks -lpthread -lz'
-
-# Names of additional weak libraries provided by this library
-weak_library_names=''
-
-# Version information for libXfont2.
-current=2
-age=0
-revision=0
-
-# Is this an already installed library?
-installed=yes
-
-# Should we warn about portability when linking against -modules?
-shouldnotlink=no
-
-# Files to dlopen/dlpreopen
-dlopen=''
-dlpreopen=''
-
-# Directory that this library needs to be installed in:
-libdir='/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib'
diff --git a/experiments/wasm-gui/third_party/wasm-prefix/lib/libXpm.a b/experiments/wasm-gui/third_party/wasm-prefix/lib/libXpm.a
deleted file mode 100644
index 56c1ec108..000000000
Binary files a/experiments/wasm-gui/third_party/wasm-prefix/lib/libXpm.a and /dev/null differ
diff --git a/experiments/wasm-gui/third_party/wasm-prefix/lib/libXpm.la b/experiments/wasm-gui/third_party/wasm-prefix/lib/libXpm.la
deleted file mode 100755
index 739eb95a1..000000000
--- a/experiments/wasm-gui/third_party/wasm-prefix/lib/libXpm.la
+++ /dev/null
@@ -1,41 +0,0 @@
-# libXpm.la - a libtool library file
-# Generated by libtool (GNU libtool) 2.4.7
-#
-# Please DO NOT delete this file!
-# It is necessary for linking the library.
-
-# The name that we can dlopen(3).
-dlname=''
-
-# Names of this library.
-library_names=''
-
-# The name of the static archive.
-old_library='libXpm.a'
-
-# Linker flags that cannot go in dependency_libs.
-inherited_linker_flags=' -pthread'
-
-# Libraries that this one depends upon.
-dependency_libs=' -L/home/nathan/secure-exec-wasmgui/experiments/wasm-gui/third_party/wasm-prefix-threads/lib -L/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/share/wasi-sysroot/lib/wasm32-wasip1-threads /home/nathan/secure-exec-wasmgui/experiments/wasm-gui/third_party/wasm-prefix-threads/lib/libX11.la /home/nathan/secure-exec-wasmgui/experiments/wasm-gui/third_party/wasm-prefix-threads/lib/libxcb.la /home/nathan/secure-exec-wasmgui/experiments/wasm-gui/third_party/wasm-prefix-threads/lib/libXau.la /home/nathan/secure-exec-wasmgui/experiments/wasm-gui/third_party/wasm-prefix-threads/lib/libXdmcp.la -lwasi-emulated-signal -lwasi-emulated-mman -lwasi-emulated-process-clocks -ldl -lintl'
-
-# Names of additional weak libraries provided by this library
-weak_library_names=''
-
-# Version information for libXpm.
-current=15
-age=11
-revision=0
-
-# Is this an already installed library?
-installed=yes
-
-# Should we warn about portability when linking against -modules?
-shouldnotlink=no
-
-# Files to dlopen/dlpreopen
-dlopen=''
-dlpreopen=''
-
-# Directory that this library needs to be installed in:
-libdir='/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib'
diff --git a/experiments/wasm-gui/third_party/wasm-prefix/lib/libpixman-1.a b/experiments/wasm-gui/third_party/wasm-prefix/lib/libpixman-1.a
deleted file mode 100644
index 85c17cdbb..000000000
Binary files a/experiments/wasm-gui/third_party/wasm-prefix/lib/libpixman-1.a and /dev/null differ
diff --git a/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig/pixman-1.pc b/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig/pixman-1.pc
deleted file mode 100644
index 360179772..000000000
--- a/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig/pixman-1.pc
+++ /dev/null
@@ -1,9 +0,0 @@
-prefix=/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix
-includedir=${prefix}/include
-libdir=${prefix}/lib
-
-Name: Pixman
-Description: The pixman library (version 1)
-Version: 0.46.5
-Libs: -L${libdir} -lpixman-1 -pthread
-Cflags: -I${includedir}/pixman-1 -pthread
diff --git a/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig/xfont2.pc b/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig/xfont2.pc
deleted file mode 100644
index e654770b3..000000000
--- a/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig/xfont2.pc
+++ /dev/null
@@ -1,13 +0,0 @@
-prefix=/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix
-exec_prefix=${prefix}
-libdir=${exec_prefix}/lib
-includedir=${prefix}/include
-
-Name: Xfont2
-Description: X font Library version 2
-Version: 2.0.6
-Requires: xproto fontsproto
-Requires.private: fontenc freetype2 zlib
-Cflags: -I${includedir}
-Libs: -L${libdir} -lXfont2
-Libs.private:  -lm
diff --git a/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig/xpm.pc b/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig/xpm.pc
deleted file mode 100644
index ad368721d..000000000
--- a/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig/xpm.pc
+++ /dev/null
@@ -1,12 +0,0 @@
-prefix=/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix
-exec_prefix=${prefix}
-libdir=${exec_prefix}/lib
-includedir=${prefix}/include
-
-Name: Xpm
-Description: X Pixmap Library
-Version: 3.5.17
-Requires: x11
-Requires.private: x11
-Cflags: -I${includedir}
-Libs: -L${libdir} -lXpm
diff --git a/experiments/wasm-gui/toolchain/clang-wasi-wrap.sh b/experiments/wasm-gui/toolchain/clang-wasi-wrap.sh
deleted file mode 100755
index e2dcb06f9..000000000
--- a/experiments/wasm-gui/toolchain/clang-wasi-wrap.sh
+++ /dev/null
@@ -1,17 +0,0 @@
-#!/usr/bin/env bash
-# clang wrapper that strips linker args wasm-ld (lld-wasm) rejects, which meson emits for
-# executables (ELF-isms: --start-group/--end-group, -rpath, $ORIGIN). Lets the X stack's
-# meson/autotools executable links (cvt tool, eventually Xvfb) succeed.
-REAL="/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang"
-args=()
-for a in "$@"; do
-  case "$a" in
-    -Wl,--start-group|-Wl,--end-group|--start-group|--end-group) continue ;;
-    -Wl,-rpath,*|-Wl,-rpath|-rpath) continue ;;
-    -Wl,--enable-new-dtags|-Wl,-soname,*) continue ;;
-    -pthread|-lpthread|-ldl) continue ;;
-    *'$ORIGIN'*) continue ;;
-  esac
-  args+=("$a")
-done
-exec "$REAL" "${args[@]}"
diff --git a/experiments/wasm-gui/toolchain/clangxx-wasi-wrap.sh b/experiments/wasm-gui/toolchain/clangxx-wasi-wrap.sh
deleted file mode 100755
index fbe7dbcaa..000000000
--- a/experiments/wasm-gui/toolchain/clangxx-wasi-wrap.sh
+++ /dev/null
@@ -1,14 +0,0 @@
-#!/usr/bin/env bash
-REAL="/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk/bin/clang++"
-args=()
-for a in "$@"; do
-  case "$a" in
-    -Wl,--start-group|-Wl,--end-group|--start-group|--end-group) continue ;;
-    -Wl,-rpath,*|-Wl,-rpath|-rpath) continue ;;
-    -Wl,--enable-new-dtags|-Wl,-soname,*) continue ;;
-    -pthread|-lpthread|-ldl) continue ;;
-    *'$ORIGIN'*) continue ;;
-  esac
-  args+=("$a")
-done
-exec "$REAL" "${args[@]}"
diff --git a/experiments/wasm-gui/toolchain/compat-include/net/if.h b/experiments/wasm-gui/toolchain/compat-include/net/if.h
deleted file mode 100644
index 040452c02..000000000
--- a/experiments/wasm-gui/toolchain/compat-include/net/if.h
+++ /dev/null
@@ -1,9 +0,0 @@
-#ifndef _NET_IF_H
-#define _NET_IF_H
-#define IF_NAMESIZE 16
-struct if_nameindex { unsigned int if_index; char *if_name; };
-unsigned int if_nametoindex(const char *);
-char *if_indextoname(unsigned int, char *);
-struct if_nameindex *if_nameindex(void);
-void if_freenameindex(struct if_nameindex *);
-#endif
diff --git a/experiments/wasm-gui/toolchain/compat-include/sys/wait.h b/experiments/wasm-gui/toolchain/compat-include/sys/wait.h
deleted file mode 100644
index f01c58500..000000000
--- a/experiments/wasm-gui/toolchain/compat-include/sys/wait.h
+++ /dev/null
@@ -1,16 +0,0 @@
-#ifndef _SYS_WAIT_H
-#define _SYS_WAIT_H
-#include <sys/types.h>
-pid_t waitpid(pid_t, int *, int);
-pid_t wait(int *);
-#define WNOHANG 1
-#define WUNTRACED 2
-#define WIFEXITED(s)    (((s) & 0x7f) == 0)
-#define WEXITSTATUS(s)  (((s) >> 8) & 0xff)
-#define WTERMSIG(s)     ((s) & 0x7f)
-#define WIFSIGNALED(s)  (((signed char)(((s) & 0x7f) + 1) >> 1) > 0)
-#define WIFSTOPPED(s)   (((s) & 0xff) == 0x7f)
-#define WSTOPSIG(s)     WEXITSTATUS(s)
-#define WCOREDUMP(s)    ((s) & 0x80)
-#define WIFCONTINUED(s) ((s) == 0xffff)
-#endif
diff --git a/experiments/wasm-gui/toolchain/cross-env.sh b/experiments/wasm-gui/toolchain/cross-env.sh
deleted file mode 100644
index e4e71493e..000000000
--- a/experiments/wasm-gui/toolchain/cross-env.sh
+++ /dev/null
@@ -1,24 +0,0 @@
-#!/usr/bin/env bash
-# Source this to get the wasm32-wasip1 cross-compile environment used for the X stack
-# (autotools --host=wasm32-wasi against the patched secure-exec sysroot + host_net sockets).
-REPO="/home/nathan/secure-exec"
-WSDK="$REPO/registry/native/c/vendor/wasi-sdk"
-SYSROOT="$REPO/registry/native/c/sysroot"
-PREFIX="$REPO/experiments/wasm-gui/third_party/wasm-prefix"
-EXP="$REPO/experiments/wasm-gui"
-
-export CC="$WSDK/bin/clang"
-export CXX="$WSDK/bin/clang++"
-export AR="$WSDK/bin/llvm-ar"
-export RANLIB="$WSDK/bin/llvm-ranlib"
-export CFLAGS="--target=wasm32-wasip1 --sysroot=$SYSROOT -O2 -D_WASI_EMULATED_MMAN -D_WASI_EMULATED_PROCESS_CLOCKS -D_GNU_SOURCE -mllvm -wasm-enable-sjlj -Wno-error=implicit-function-declaration -Wno-error=int-conversion -Wno-int-conversion -I$EXP/toolchain/compat-include -include $EXP/toolchain/wasi-compat.h"
-export CPPFLAGS="--target=wasm32-wasip1 --sysroot=$SYSROOT -I$PREFIX/include -I$EXP/toolchain/compat-include -include $EXP/toolchain/wasi-compat.h"
-# NOTE: wasi-compat.o (stub symbols) is NOT here — libtool rejects non-libtool objects when
-# building .la static libraries. It is appended only at the final executable link.
-export LDFLAGS="--target=wasm32-wasip1 --sysroot=$SYSROOT -L$PREFIX/lib -L$WSDK/share/wasi-sysroot/lib/wasm32-wasip1 -lwasi-emulated-mman -lwasi-emulated-process-clocks"
-export PKG_CONFIG_LIBDIR="$PREFIX/lib/pkgconfig:$PREFIX/share/pkgconfig"
-export PKG_CONFIG_PATH=""
-export ACLOCAL_PATH="$PREFIX/share/aclocal"
-
-CROSS_CONFIGURE_ARGS="--host=wasm32-wasi --prefix=$PREFIX --enable-static --disable-shared --disable-malloc0returnsnull"
-export CROSS_CONFIGURE_ARGS PREFIX REPO WSDK SYSROOT EXP
diff --git a/experiments/wasm-gui/toolchain/wasi-compat.c b/experiments/wasm-gui/toolchain/wasi-compat.c
deleted file mode 100644
index 5d94bcfc8..000000000
--- a/experiments/wasm-gui/toolchain/wasi-compat.c
+++ /dev/null
@@ -1,60 +0,0 @@
-/* No-op definitions for POSIX functions the patched wasi sysroot lacks (single-threaded, no process
-   groups/signals). Linked into X-stack executables via the meson cross file. */
-#include <stdio.h>
-#include <sys/types.h>
-void flockfile(FILE *f) { (void)f; }
-void funlockfile(FILE *f) { (void)f; }
-int ftrylockfile(FILE *f) { (void)f; return 0; }
-int getpgrp(void) { return 1; }
-int setpgid(int p, int g) { (void)p; (void)g; return 0; }
-unsigned umask(unsigned m) { (void)m; return 0; }
-int pthread_sigmask(int how, const void *set, void *old) { (void)how; (void)set; (void)old; return 0; }
-#include <string.h>
-struct utsname;
-int uname(struct utsname *u) {
-    char *p = (char *)u;
-    if (p) { memset(p, 0, 65*6);
-        memcpy(p+0,    "secure-exec", 11);
-        memcpy(p+65,   "wasm", 4);
-        memcpy(p+65*2, "1.0", 3);
-        memcpy(p+65*3, "1.0", 3);
-        memcpy(p+65*4, "wasm32", 6); }
-    return 0;
-}
-int getrlimit(int r, void *l) { (void)r; (void)l; return 0; }
-int setrlimit(int r, const void *l) { (void)r; (void)l; return 0; }
-/* genuinely-missing-in-wasi functions the X server references (stubs: server runs single-threaded,
-   no real signals/hostname lookup). Name-linkage; arg types are placeholders. */
-void *gethostbyname(const char *n) { (void)n; return 0; }
-int msync(void *a, unsigned long l, int f) { (void)a; (void)l; (void)f; return 0; }
-int sigprocmask(int h, const void *s, void *o) { (void)h; (void)s; (void)o; return 0; }
-int pthread_create(void *t, const void *a, void *(*f)(void *), void *arg) { (void)t; (void)a; (void)f; (void)arg; return 1; }
-int pthread_join(unsigned long t, void **r) { (void)t; (void)r; return 0; }
-int pthread_attr_setscope(void *a, int s) { (void)a; (void)s; return 0; }
-int pthread_setname_np(unsigned long t, const char *n) { (void)t; (void)n; return 0; }
-void __SIG_IGN(int s) { (void)s; }
-/* process/net stubs genuinely absent from wasi (X server runs single-process, local-only). */
-int fork(void) { return -1; }
-int execl(const char *p, ...) { (void)p; return -1; }
-int execvp(const char *f, char *const a[]) { (void)f; (void)a; return -1; }
-void *getservbyname(const char *n, const char *p) { (void)n; (void)p; return 0; }
-int seteuid(unsigned u) { (void)u; return 0; }
-int setuid(unsigned u) { (void)u; return 0; }
-int setgid(unsigned g) { (void)g; return 0; }
-char *strsignal(int s) { (void)s; return (char *)"signal"; }
-/* twm (WM) references these; stubbed: the WM runs in a single sandboxed process with no
-   subprocess exec, no real uid, and uses tempnam only for a session id. */
-int execlp(const char *f, const char *a, ...) { (void)f; (void)a; return -1; }
-int system(const char *c) { (void)c; return -1; }
-/* getuid/geteuid/getgid are provided by the patched libc — do not redefine (duplicate symbol). */
-char *tempnam(const char *dir, const char *pfx) { (void)dir; (void)pfx; static char b[] = "/tmp/twmXXXXXX"; return b; }
-/* dlopen/dlsym are absent on wasi (no shared objects). libX11 references them for loadable i18n,
-   but it was built --disable-loadable-i18n, so these are never actually called. getpwnam has no
-   passwd db in the sandbox. */
-void *dlopen(const char *f, int flag) { (void)f; (void)flag; return 0; }
-void *dlsym(void *h, const char *s) { (void)h; (void)s; return 0; }
-int dlclose(void *h) { (void)h; return 0; }
-char *dlerror(void) { return 0; }
-void *getpwnam(const char *n) { (void)n; return 0; }
-/* XkbStdBell (audio bell) isn't compiled into our libX11 XKB; no audio in the sandbox. Stub it. */
-int XkbStdBell(void *dpy, unsigned long w, int percent, unsigned long name) { (void)dpy;(void)w;(void)percent;(void)name; return 1; }
diff --git a/experiments/wasm-gui/toolchain/wasi-compat.h b/experiments/wasm-gui/toolchain/wasi-compat.h
deleted file mode 100644
index 1ebbfa837..000000000
--- a/experiments/wasm-gui/toolchain/wasi-compat.h
+++ /dev/null
@@ -1,20 +0,0 @@
-#ifndef SECURE_EXEC_WASI_COMPAT_H
-#define SECURE_EXEC_WASI_COMPAT_H
-/* sysroot fcntl.h lacks F_DUPFD; wasi has no real fcntl(F_DUPFD) but the value lets code compile. */
-#ifndef F_DUPFD
-#define F_DUPFD 0
-#endif
-/* The patched wasi-libc gates struct rlimit behind __wasilibc_unmodified_upstream (disabled), so it
- * is absent. Provide it + the resource limits the xserver references (no core dumps on wasi). */
-#ifndef RLIMIT_CORE
-typedef unsigned long long rlim_t;
-struct rlimit { rlim_t rlim_cur; rlim_t rlim_max; };
-#define RLIMIT_CORE   4
-#define RLIMIT_NOFILE 7
-#define RLIMIT_DATA   2
-#define RLIMIT_STACK  3
-#define RLIM_INFINITY (~0ULL)
-int getrlimit(int, struct rlimit *);
-int setrlimit(int, const struct rlimit *);
-#endif
-#endif
diff --git a/experiments/wasm-gui/toolchain/wasi-compat.o b/experiments/wasm-gui/toolchain/wasi-compat.o
deleted file mode 100644
index 16263ad92..000000000
Binary files a/experiments/wasm-gui/toolchain/wasi-compat.o and /dev/null differ
diff --git a/experiments/wasm-gui/toolchain/wasi-sdk-cross.ini b/experiments/wasm-gui/toolchain/wasi-sdk-cross.ini
deleted file mode 100644
index d0ea3727e..000000000
--- a/experiments/wasm-gui/toolchain/wasi-sdk-cross.ini
+++ /dev/null
@@ -1,33 +0,0 @@
-# Meson cross file: build C projects for wasm32-wasip1 with the repo's vendored wasi-sdk.
-# Used to cross-compile the X-stack (pixman, etc.) for the secure-exec wasm GUI work.
-[constants]
-wasi_sdk = '/home/nathan/secure-exec/registry/native/c/vendor/wasi-sdk'
-# PATCHED sysroot: adds POSIX sockets (recvfrom/sendto/socket/poll/select) backed by secure-exec's
-# host_net imports — required for the X stack (libxcb/libX11/xserver) to build and run in-sidecar.
-sysroot = '/home/nathan/secure-exec/registry/native/c/sysroot'
-vanilla_lib = wasi_sdk / 'share/wasi-sysroot/lib/wasm32-wasip1'
-
-[binaries]
-c = '/home/nathan/secure-exec/experiments/wasm-gui/toolchain/clang-wasi-wrap.sh'
-cpp = '/home/nathan/secure-exec/experiments/wasm-gui/toolchain/clangxx-wasi-wrap.sh'
-ar = wasi_sdk / 'bin/llvm-ar'
-strip = wasi_sdk / 'bin/llvm-strip'
-nm = wasi_sdk / 'bin/llvm-nm'
-pkg-config = '/usr/bin/pkg-config'
-
-[properties]
-# Resolve cross dependencies only from the wasm prefix, never the host system.
-pkg_config_libdir = '/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/lib/pkgconfig:/home/nathan/secure-exec/experiments/wasm-gui/third_party/wasm-prefix/share/pkgconfig'
-
-[host_machine]
-system = 'wasi'
-cpu_family = 'wasm32'
-cpu = 'wasm32'
-endian = 'little'
-
-[built-in options]
-default_library = 'static'
-c_args = ['--target=wasm32-wasip1', '--sysroot=' + sysroot, '-D_WASI_EMULATED_MMAN', '-D_GNU_SOURCE', '-D_WASI_EMULATED_PROCESS_CLOCKS', '-DHAVE_SYS_RESOURCE_H', '-Wno-error=implicit-function-declaration', '-Wno-implicit-function-declaration', '-I/home/nathan/secure-exec/experiments/wasm-gui/toolchain/compat-include', '-include', '/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.h']
-c_link_args = ['--target=wasm32-wasip1', '--sysroot=' + sysroot, '-L' + vanilla_lib, '-lwasi-emulated-mman', '-lwasi-emulated-process-clocks', '/home/nathan/secure-exec/experiments/wasm-gui/toolchain/wasi-compat.o']
-cpp_args = ['--target=wasm32-wasip1', '--sysroot=' + sysroot, '-D_WASI_EMULATED_MMAN', '-D_GNU_SOURCE', '-fno-exceptions']
-cpp_link_args = ['--target=wasm32-wasip1', '--sysroot=' + sysroot, '-L' + vanilla_lib, '-lwasi-emulated-mman']
diff --git a/experiments/wasm-gui/toolchain/xvfb-main.c b/experiments/wasm-gui/toolchain/xvfb-main.c
deleted file mode 100644
index 64a9d5cff..000000000
--- a/experiments/wasm-gui/toolchain/xvfb-main.c
+++ /dev/null
@@ -1,10 +0,0 @@
-#include <unistd.h>
-extern int dix_main(int argc, char **argv, char **envp);
-extern char **environ;
-__attribute__((visibility("default")))
-int __main_argc_argv(int argc, char **argv) {
-    write(2, "XMARK:entry\n", 12);
-    int rc = dix_main(argc, argv, environ);
-    write(2, "XMARK:dix_main_returned\n", 24);
-    return rc;
-}
diff --git a/experiments/wasm-gui/toolchain/xvfb-main.o b/experiments/wasm-gui/toolchain/xvfb-main.o
deleted file mode 100644
index 69e17a030..000000000
Binary files a/experiments/wasm-gui/toolchain/xvfb-main.o and /dev/null differ
diff --git a/package.json b/package.json
index 35bcf7926..5143fc4b3 100644
--- a/package.json
+++ b/package.json
@@ -4,29 +4,13 @@
 	"license": "Apache-2.0",
 	"type": "module",
 	"packageManager": "pnpm@10.13.1",
-	"engines": {
-		"node": ">=20"
-	},
 	"scripts": {
 		"build": "turbo run build",
-		"check-generated": "node scripts/check-generated-artifacts.mjs",
 		"check-types": "turbo run check-types",
-		"test": "turbo run test",
-		"lint": "pnpm biome check ."
+		"test": "pnpm check-types"
 	},
 	"devDependencies": {
-		"@biomejs/biome": "^2.3",
-		"@types/node": "^22.19.15",
 		"turbo": "^2.5.6",
-		"typescript": "^5.9.2",
-		"vitest": "^2.1.8"
-	},
-	"pnpm": {
-		"overrides": {
-			"@mariozechner/pi-tui": "0.60.0",
-			"@mariozechner/pi-agent-core": "0.60.0",
-			"@rivet-gg/components": "github:rivet-dev/docs-theme#v0.3.1&path:vendor/components",
-			"@rivet-gg/icons": "github:rivet-dev/docs-theme#v0.3.1&path:vendor/icons"
-		}
+		"typescript": "^5.9.2"
 	}
 }
diff --git a/packages/agentos-toolchain/README.md b/packages/agentos-toolchain/README.md
deleted file mode 100644
index 72ce0f34c..000000000
--- a/packages/agentos-toolchain/README.md
+++ /dev/null
@@ -1,76 +0,0 @@
-# @rivet-dev/agentos-toolchain
-
-Build toolchain for **agentOS packages** — the only sanctioned way to turn an npm
-package or a local script into a valid, self-contained agentOS package.
-
-```bash
-npx @rivet-dev/agentos-toolchain pack <npm-pkg | ./local-dir> [options]
-```
-
-## Why this lives in secure-exec
-
-**Packaging is part of secure-exec's core behavior, so the tool that produces
-packages lives here, next to the things it packages.** secure-exec owns the VM
-runtime that *runs* packages — the kernel, the VFS, the `/opt/agentos` mount, the
-`$PATH` command resolver, and the header/`binfmt` dispatch — and it owns the
-package **definitions** themselves: the generic registry software (`registry/software/*`)
-and the agent adapters (`registry/agent/*`). This toolchain is what builds those
-definitions into the on-disk package format that the runtime resolves. Its
-`header.ts` is the same `binfmt` table the sidecar enforces (`crates/sidecar`), so
-keeping it in this repo keeps the producer and the consumer of the format in one
-place.
-
-agent-os (the product layer) only *consumes* finished packages via
-`defineSoftware({ name, dir })`; it does not need to own the builder. The package
-name stays `@rivet-dev/agentos-toolchain` so the documented `npx` entrypoint is
-unchanged.
-
-## `pack`
-
-Produces `<out>/<name>/<version>/` — a package in the agentOS
-[package format](https://agentos-sdk.dev/docs/architecture/packages-and-command-resolution):
-
-The output is a **flat, self-contained package directory** — a plain npm dependency, no
-agentOS-specific manifest and no symlinks:
-
-```
-<out>/                       # the package dir itself (default ./<input-name>-package)
-├── package.json             # name, version, and the "bin" command map
-└── node_modules/            # flat, self-contained dependency closure
-```
-
-Commands are declared in `package.json` `"bin"` (command → a **real entry file**), so the
-package ships cleanly via npm. The runtime builds the `/opt/agentos/bin` symlinks itself when
-it mounts the package — they are never part of the shipped artifact.
-
-### Steps
-
-1. **Isolate** — a clean temp dir (no host pnpm/workspace bleed-through).
-2. **Install flat** — `npm install <pkg> --omit=dev` (full closure, hoisted, no scripts).
-3. **Ensure `package.json`** — `name`/`version` from the package plus a `"bin"` map (each entry
-   gets a `#!` shebang). No `agentos-package.json` — `package.json` is the only metadata.
-4. **Lay out flat** — `package.json` + `node_modules` written directly into `--out`.
-5. **Verify** — every `bin` entry has a recognized header (`#!` shebang or `\0asm`); **reject**
-   native `.node` addons (they can't run in V8) — the error names `--prune-native` as the escape.
-
-### Options
-
-| Flag | Meaning |
-|---|---|
-| `--agent <command>` | mark a `bin` command as the package's ACP entrypoint |
-| `--out <dir>` | output dir for the package itself (flat; default `./<input-name>-package`) |
-| `--prune-native` | delete unreachable native `.node` addons from the flat closure instead of failing |
-
-### Examples
-
-```bash
-# package a local CLI → ./my-tool-package/
-npx @rivet-dev/agentos-toolchain pack ./my-tool
-
-# an agent whose SDK closure carries unreachable native addons → ./pi-package/
-npx @rivet-dev/agentos-toolchain pack @agentos-software/pi --agent pi-sdk-acp --prune-native
-```
-
-The package is consumed by an agentOS host as `defineSoftware({ name, dir })` — add
-`agent: { acpEntrypoint: "<bin>" }` for an agent. The host projects it under `/opt/agentos`,
-and `createSession(name)` launches the adapter via `/opt/agentos/bin/<bin>`.
diff --git a/packages/agentos-toolchain/bin/agentos-toolchain.mjs b/packages/agentos-toolchain/bin/agentos-toolchain.mjs
deleted file mode 100755
index 76eb62da4..000000000
--- a/packages/agentos-toolchain/bin/agentos-toolchain.mjs
+++ /dev/null
@@ -1,7 +0,0 @@
-#!/usr/bin/env node
-// Committed bin shim: pnpm links workspace bins at install time and silently
-// skips missing targets, so pointing `bin` at generated dist/cli.js meant a
-// fresh checkout never got the `agentos-toolchain` shim (CI: "agentos-toolchain:
-// not found"). This file always exists; dist/cli.js is built before dependents
-// run via turbo's ^build ordering.
-await import("../dist/cli.js");
diff --git a/packages/agentos-toolchain/package.json b/packages/agentos-toolchain/package.json
deleted file mode 100644
index 3641e6d8c..000000000
--- a/packages/agentos-toolchain/package.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-  "name": "@rivet-dev/agentos-toolchain",
-  "version": "0.0.0",
-  "description": "Build toolchain for agentOS packages (pack npm packages/scripts into self-contained agentOS packages).",
-  "type": "module",
-  "license": "Apache-2.0",
-  "bin": {
-    "agentos-toolchain": "./bin/agentos-toolchain.mjs"
-  },
-  "exports": {
-    ".": {
-      "import": {
-        "types": "./dist/index.d.ts",
-        "default": "./dist/index.js"
-      }
-    }
-  },
-  "files": [
-    "bin",
-    "dist",
-    "package.json",
-    "README.md"
-  ],
-  "scripts": {
-    "build": "tsup src/index.ts src/cli.ts --format esm --dts",
-    "check-types": "tsc --noEmit",
-    "test": "vitest run"
-  },
-  "devDependencies": {
-    "@types/node": "^22.10.2",
-    "tsup": "^8.3.5",
-    "typescript": "^5.7.2",
-    "vitest": "^2.1.9"
-  }
-}
diff --git a/packages/agentos-toolchain/src/build.ts b/packages/agentos-toolchain/src/build.ts
deleted file mode 100644
index 7bf3d7ca3..000000000
--- a/packages/agentos-toolchain/src/build.ts
+++ /dev/null
@@ -1,141 +0,0 @@
-import {
-	execFileSync,
-} from "node:child_process";
-import {
-	cpSync,
-	existsSync,
-	mkdirSync,
-	readFileSync,
-	readdirSync,
-	rmSync,
-	statSync,
-	writeFileSync,
-} from "node:fs";
-import { join, resolve } from "node:path";
-import { readManifest, unscopedName } from "./manifest.js";
-
-export interface BuildResult {
-	name: string;
-	version: string;
-	commands: string[];
-	outDir: string;
-	outTar: string;
-}
-
-/**
- * Assemble a clean `dist/package/` for a WASM / command registry package.
- *
- * Why this exists: a package's `src/index.ts` sets the descriptor `dir` that the
- * sidecar projects read-only under `/opt/agentos/<name>/<version>`. The sidecar
- * copies that WHOLE directory verbatim. If `dir` pointed at the package source
- * root it would drag `src/`, dev `node_modules/`, `tsconfig.json`, `.turbo/`
- * into every VM. The descriptor must instead point at a CLEAN runtime dir that
- * holds ONLY what the package ships at runtime:
- *
- *   dist/package/
- *     agentos-package.json   runtime manifest (name, version, agent, provides)
- *     bin/<cmd>              the compiled command binaries (copied verbatim)
- *     share/...              (optional) man pages, if the source package ships them
- *
- * Commands are derived from the source `bin/` directory's files (populate it
- * with `stage`); `name`/`version` come from the source `package.json`. A package
- * with NO (or an empty) `bin/` ships a valid, empty placeholder — it picks up
- * its commands automatically once `stage` can populate `bin/`.
- *
- * This handles the COMMON case (compiled command packages). JS agent packages
- * whose `dist/package` is a self-contained node runtime closure use `pack`
- * instead; meta packages that default-export an ARRAY of descriptors have no
- * `dir`/`bin` and never run this.
- *
- * Idempotent: `dist/package/` is removed and rebuilt on every run.
- */
-export function build(packageDirInput?: string): BuildResult {
-	const packageDir = resolve(packageDirInput ?? process.cwd());
-
-	const srcPkgPath = join(packageDir, "package.json");
-	if (!existsSync(srcPkgPath)) {
-		throw new Error(`no package.json in ${packageDir}`);
-	}
-	let srcPkg: { name?: unknown; version?: unknown };
-	try {
-		srcPkg = JSON.parse(readFileSync(srcPkgPath, "utf8"));
-	} catch (error) {
-		throw new Error(
-			`package.json in ${packageDir} is not valid JSON: ${String(error)}`,
-		);
-	}
-	const name = srcPkg.name;
-	const version = srcPkg.version;
-	if (typeof name !== "string" || name.length === 0) {
-		throw new Error(`package.json in ${packageDir} is missing a valid "name"`);
-	}
-	if (typeof version !== "string" || version.length === 0) {
-		throw new Error(
-			`package.json in ${packageDir} is missing a valid "version"`,
-		);
-	}
-
-	const srcManifest = readManifest(packageDir);
-	const manifest = {
-		name:
-			typeof srcManifest?.name === "string" && srcManifest.name.length > 0
-				? srcManifest.name
-				: unscopedName(name),
-		version,
-		...(srcManifest?.agent !== undefined ? { agent: srcManifest.agent } : {}),
-		...(srcManifest?.provides !== undefined
-			? { provides: srcManifest.provides }
-			: {}),
-	};
-
-	const srcBinDir = join(packageDir, "bin");
-	const hasBinDir = existsSync(srcBinDir) && statSync(srcBinDir).isDirectory();
-	const commands = hasBinDir
-		? readdirSync(srcBinDir, { withFileTypes: true })
-				.filter((entry) => entry.isFile() || entry.isSymbolicLink())
-				.map((entry) => entry.name)
-				.sort()
-		: [];
-
-	const outDir = join(packageDir, "dist", "package");
-	rmSync(outDir, { recursive: true, force: true });
-	mkdirSync(outDir, { recursive: true });
-
-	// Copy bin/ verbatim (preserve symlinks so any in-package relative aliases
-	// stay in-tree, matching the sidecar's verbatim projection copy). Skipped
-	// for a planned/empty package — there is nothing to copy yet.
-	if (commands.length > 0) {
-		cpSync(srcBinDir, join(outDir, "bin"), {
-			recursive: true,
-			verbatimSymlinks: true,
-		});
-	}
-
-	// share/ (man pages, etc.) — the projection builds a man symlink farm from
-	// <pkg>/share/man.
-	const srcShareDir = join(packageDir, "share");
-	if (existsSync(srcShareDir) && statSync(srcShareDir).isDirectory()) {
-		cpSync(srcShareDir, join(outDir, "share"), {
-			recursive: true,
-			verbatimSymlinks: true,
-		});
-	}
-
-	writeFileSync(
-		join(outDir, "agentos-package.json"),
-		`${JSON.stringify(manifest, null, 2)}\n`,
-	);
-
-	const outTar = join(packageDir, "dist", "package.tar");
-	rmSync(outTar, { force: true });
-	execFileSync("tar", ["-cf", outTar, "-C", outDir, "."], { stdio: "pipe" });
-
-	process.stdout.write(
-		commands.length > 0
-			? `assembled ${name}@${version} -> ${outTar}\n` +
-					`  commands (${commands.length}): ${commands.join(", ")}\n`
-			: `assembled ${name}@${version} -> ${outTar} (PLANNED: empty placeholder, ` +
-					`no bin/ yet — run stage with a commands dir to populate)\n`,
-	);
-	return { name, version, commands, outDir, outTar };
-}
diff --git a/packages/agentos-toolchain/src/cli.ts b/packages/agentos-toolchain/src/cli.ts
deleted file mode 100644
index e0e61e66b..000000000
--- a/packages/agentos-toolchain/src/cli.ts
+++ /dev/null
@@ -1,179 +0,0 @@
-#!/usr/bin/env node
-import { existsSync, statSync } from "node:fs";
-import { basename, resolve } from "node:path";
-import { build } from "./build.js";
-import { pack } from "./pack.js";
-import { publish } from "./publish.js";
-import { stage } from "./stage.js";
-
-const USAGE = `agentos-toolchain — build, stage, and publish agentOS packages
-
-Usage:
-  agentos-toolchain pack <npm-pkg | ./local-dir> [options]
-      Pack an npm package or local script dir into a self-contained agentOS
-      package tar (JS agents / node closures).
-        --agent <command>   mark a bin command as the package's ACP entrypoint
-        --out <tar>         output tar (default: ./<input-name>-package.tar)
-        --prune-native      delete unreachable native .node addons
-
-  agentos-toolchain stage [<packageDir>] --commands-dir <dir> [--if-missing skip|error]
-      Populate <packageDir>/bin/ from a compiled commands directory, per the
-      commands/aliases/stubs lists in agentos-package.json. --if-missing skip
-      leaves a valid empty placeholder when binaries are absent (default: error).
-
-  agentos-toolchain build [<packageDir>]
-      Assemble the clean runtime tar dist/package.tar (bin/ + share/ +
-      agentos-package.json) from <packageDir> (default: cwd).
-
-  agentos-toolchain publish [<packageDir>] [--tag <t> | --latest] [--dry-run] [--set-version <v>]
-      Publish the built package to npm. Default dist-tag is "dev"; the latest
-      pointer only moves with an explicit --latest.
-
-  -h, --help          show this help
-`;
-
-/** Default output tar: ./<input-name>-package.tar in cwd. */
-function defaultOutName(source: string): string {
-	if (existsSync(source) && statSync(source).isDirectory()) {
-		return `./${basename(resolve(source))}-package.tar`;
-	}
-	// npm spec: strip a trailing @version, then the @scope/ prefix.
-	const at = source.lastIndexOf("@");
-	const name = at > 0 ? source.slice(0, at) : source;
-	return `./${name.replace(/^@[^/]+\//, "")}-package.tar`;
-}
-
-interface ParsedArgs {
-	positional: string[];
-	flags: Map<string, string | true>;
-}
-
-/** Flags in this set take a value; all others are booleans. */
-const VALUE_FLAGS = new Set([
-	"--agent",
-	"--out",
-	"--commands-dir",
-	"--if-missing",
-	"--tag",
-	"--set-version",
-]);
-
-function parseArgs(argv: string[]): ParsedArgs {
-	const positional: string[] = [];
-	const flags = new Map<string, string | true>();
-	for (let i = 0; i < argv.length; i++) {
-		const a = argv[i];
-		if (a === "-h" || a === "--help") {
-			process.stdout.write(USAGE);
-			process.exit(0);
-		} else if (VALUE_FLAGS.has(a)) {
-			const value = argv[++i];
-			if (value === undefined) throw new Error(`${a} requires a value`);
-			flags.set(a, value);
-		} else if (a.startsWith("-")) {
-			flags.set(a, true);
-		} else {
-			positional.push(a);
-		}
-	}
-	return { positional, flags };
-}
-
-function requireKnownFlags(args: ParsedArgs, known: string[]): void {
-	for (const flag of args.flags.keys()) {
-		if (!known.includes(flag)) throw new Error(`unexpected argument: ${flag}`);
-	}
-}
-
-function main(): void {
-	const [cmd, ...rest] = process.argv.slice(2);
-	if (cmd === undefined) {
-		process.stdout.write(USAGE);
-		process.exit(1);
-	}
-	if (cmd === "-h" || cmd === "--help") {
-		process.stdout.write(USAGE);
-		process.exit(0);
-	}
-	const args = parseArgs(rest);
-
-	switch (cmd) {
-		case "pack": {
-			requireKnownFlags(args, ["--agent", "--out", "--prune-native"]);
-			const source = args.positional[0];
-			if (!source) {
-				throw new Error("pack requires a <npm-pkg | ./local-dir> argument");
-			}
-			const result = pack({
-				source,
-				out: resolve(
-					(args.flags.get("--out") as string | undefined) ??
-						defaultOutName(source),
-				),
-				agent: args.flags.get("--agent") as string | undefined,
-				pruneNative: args.flags.get("--prune-native") === true,
-			});
-			process.stdout.write(
-				`packed ${result.name}@${result.version} → ${result.packageTar}\n` +
-					`  commands: ${result.commands.join(", ")}\n`,
-			);
-			return;
-		}
-		case "stage": {
-			requireKnownFlags(args, ["--commands-dir", "--if-missing"]);
-			const commandsDir = args.flags.get("--commands-dir") as
-				| string
-				| undefined;
-			if (!commandsDir) throw new Error("stage requires --commands-dir <dir>");
-			const ifMissing = (args.flags.get("--if-missing") ?? "error") as string;
-			if (ifMissing !== "error" && ifMissing !== "skip") {
-				throw new Error(
-					`--if-missing must be "skip" or "error", got "${ifMissing}"`,
-				);
-			}
-			stage({
-				packageDir: args.positional[0] ?? process.cwd(),
-				commandsDir,
-				ifMissing,
-			});
-			return;
-		}
-		case "build": {
-			requireKnownFlags(args, []);
-			build(args.positional[0]);
-			return;
-		}
-		case "publish": {
-			requireKnownFlags(args, [
-				"--tag",
-				"--latest",
-				"--dry-run",
-				"--set-version",
-			]);
-			const result = publish({
-				packageDir: args.positional[0] ?? process.cwd(),
-				tag: args.flags.get("--tag") as string | undefined,
-				latest: args.flags.get("--latest") === true,
-				dryRun: args.flags.get("--dry-run") === true,
-				setVersion: args.flags.get("--set-version") as string | undefined,
-			});
-			process.stdout.write(
-				`published ${result.name}@${result.version} (dist-tag: ${result.tag})\n`,
-			);
-			return;
-		}
-		default:
-			throw new Error(
-				`unknown command "${cmd}" (expected pack, stage, build, or publish)`,
-			);
-	}
-}
-
-try {
-	main();
-} catch (error) {
-	process.stderr.write(
-		`error: ${error instanceof Error ? error.message : String(error)}\n`,
-	);
-	process.exit(1);
-}
diff --git a/packages/agentos-toolchain/src/header.ts b/packages/agentos-toolchain/src/header.ts
deleted file mode 100644
index 8caa99689..000000000
--- a/packages/agentos-toolchain/src/header.ts
+++ /dev/null
@@ -1,64 +0,0 @@
-/**
- * Executable header detection — the same binfmt rules the runtime uses.
- *
- * Runtime is decided by the file's leading bytes, never its name or extension:
- * a `#!` shebang, the `\0asm` WebAssembly magic, or a native object-file magic
- * (ELF / Mach-O / PE) which agentOS cannot execute (no native-arch handler).
- */
-
-export type ExecutableKind =
-	| "shebang"
-	| "wasm"
-	| "native-elf"
-	| "native-macho"
-	| "native-pe"
-	| "unknown";
-
-const WASM_MAGIC = Buffer.from([0x00, 0x61, 0x73, 0x6d]); // "\0asm"
-const ELF_MAGIC = Buffer.from([0x7f, 0x45, 0x4c, 0x46]); // "\x7fELF"
-
-// Mach-O thin (LE/BE, 32/64) + fat/universal magics.
-const MACHO_MAGICS = [
-	0xfeedface, 0xcefaedfe, 0xfeedfacf, 0xcffaedfe, 0xcafebabe, 0xbebafeca,
-];
-
-export function detectExecutableKind(head: Buffer): ExecutableKind {
-	if (head.length >= 2 && head[0] === 0x23 && head[1] === 0x21) {
-		return "shebang"; // "#!"
-	}
-	if (head.length >= 4 && head.subarray(0, 4).equals(WASM_MAGIC)) {
-		return "wasm";
-	}
-	if (head.length >= 4 && head.subarray(0, 4).equals(ELF_MAGIC)) {
-		return "native-elf";
-	}
-	if (head.length >= 4) {
-		const be = head.readUInt32BE(0);
-		// `cafebabe` collides with Java `.class`; disambiguate via the next field
-		// (Mach-O fat has a small arch count; a class file's major version is >= 45).
-		if (be === 0xcafebabe && head.length >= 8) {
-			const next = head.readUInt32BE(4);
-			if (next >= 45) return "unknown"; // Java class, not Mach-O
-		}
-		if (MACHO_MAGICS.includes(be)) return "native-macho";
-	}
-	// PE: "MZ" with a PE header pointer; "MZ" alone is enough to flag as native.
-	if (head.length >= 2 && head[0] === 0x4d && head[1] === 0x5a) {
-		return "native-pe"; // "MZ"
-	}
-	return "unknown";
-}
-
-export function isNativeKind(kind: ExecutableKind): boolean {
-	return kind === "native-elf" || kind === "native-macho" || kind === "native-pe";
-}
-
-/** The interpreter named on a shebang line, taken literally (no PATH search). */
-export function parseShebangInterpreter(head: Buffer): string | null {
-	if (!(head.length >= 2 && head[0] === 0x23 && head[1] === 0x21)) return null;
-	const nl = head.indexOf(0x0a);
-	const line = head.subarray(2, nl < 0 ? head.length : nl).toString("utf8");
-	const trimmed = line.replace(/^\s+/, "");
-	const interp = trimmed.split(/\s+/, 1)[0] ?? "";
-	return interp.length > 0 ? interp : null;
-}
diff --git a/packages/agentos-toolchain/src/index.ts b/packages/agentos-toolchain/src/index.ts
deleted file mode 100644
index fc15d82cb..000000000
--- a/packages/agentos-toolchain/src/index.ts
+++ /dev/null
@@ -1,16 +0,0 @@
-export { pack, verifyPackageDir, type PackOptions, type PackResult } from "./pack.js";
-export {
-	detectExecutableKind,
-	isNativeKind,
-	parseShebangInterpreter,
-	type ExecutableKind,
-} from "./header.js";
-export { stage, type StageOptions, type StageResult } from "./stage.js";
-export { build, type BuildResult } from "./build.js";
-export {
-	publish,
-	resolveTag,
-	type PublishOptions,
-	type PublishResult,
-} from "./publish.js";
-export { readManifest, type AgentosPackageManifest } from "./manifest.js";
diff --git a/packages/agentos-toolchain/src/manifest.ts b/packages/agentos-toolchain/src/manifest.ts
deleted file mode 100644
index a8b417c27..000000000
--- a/packages/agentos-toolchain/src/manifest.ts
+++ /dev/null
@@ -1,40 +0,0 @@
-import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
-
-/**
- * The agentOS package manifest (`agentos-package.json`) at a package root.
- *
- * `name` / `agent` / `provides` describe the package to the runtime (they are
- * copied into `dist/package/agentos-package.json` by `build`). `commands` /
- * `aliases` / `stubs` describe how `stage` populates `bin/` from a compiled
- * commands directory.
- */
-export interface AgentosPackageManifest {
-	name?: string;
-	agent?: unknown;
-	provides?: unknown;
-	/** Command binaries copied from the commands dir into `bin/<name>`. */
-	commands?: string[];
-	/** alias -> command: staged as a copy of an already-staged `bin/<command>`. */
-	aliases?: Record<string, string>;
-	/** Commands staged as copies of the commands dir's `_stubs` binary. */
-	stubs?: string[];
-}
-
-export function readManifest(
-	packageDir: string,
-): AgentosPackageManifest | undefined {
-	const path = join(packageDir, "agentos-package.json");
-	if (!existsSync(path)) return undefined;
-	let parsed: unknown;
-	try {
-		parsed = JSON.parse(readFileSync(path, "utf8"));
-	} catch (error) {
-		throw new Error(`${path} is not valid JSON: ${String(error)}`);
-	}
-	return parsed as AgentosPackageManifest;
-}
-
-export function unscopedName(name: string): string {
-	return name.replace(/^@[^/]+\//, "");
-}
diff --git a/packages/agentos-toolchain/src/pack.ts b/packages/agentos-toolchain/src/pack.ts
deleted file mode 100644
index 85e1ff8db..000000000
--- a/packages/agentos-toolchain/src/pack.ts
+++ /dev/null
@@ -1,408 +0,0 @@
-import { execFileSync } from "node:child_process";
-import {
-	chmodSync,
-	cpSync,
-	existsSync,
-	mkdirSync,
-	mkdtempSync,
-	lstatSync,
-	openSync,
-	readFileSync,
-	readlinkSync,
-	readSync,
-	closeSync,
-	readdirSync,
-	rmSync,
-	statSync,
-	symlinkSync,
-	writeFileSync,
-} from "node:fs";
-import { tmpdir } from "node:os";
-import { dirname, isAbsolute, join, relative, resolve } from "node:path";
-import { detectExecutableKind, isNativeKind } from "./header.js";
-
-export interface PackOptions {
-	/** npm package spec (`name`, `name@version`) or a local directory path. */
-	source: string;
-	/**
-	 * Output tar for the package itself. The tar contains
-	 * `{bin/, node_modules/, agentos-package.json}` at its root. The versioned
-	 * `/opt/agentos/<name>/<version>` + `current` layout is the sidecar
-	 * projection's job (name/version from `agentos-package.json`).
-	 */
-	out: string;
-	/** Mark a bin command as the package's ACP entrypoint (validated against bin/). */
-	agent?: string;
-	/**
-	 * Delete native `.node` addons from the flat closure instead of failing.
-	 * Use when a package's dependency tree contains optional/platform native
-	 * addons (e.g. `koffi`, `clipboard-*`) that are never loaded on the code path
-	 * that runs in V8. The JS closure (including dynamically-required modules) is
-	 * kept; only the V8-incompatible `.node` files are removed. If a pruned addon
-	 * IS reached at runtime it fails then — so this is opt-in.
-	 */
-	pruneNative?: boolean;
-}
-
-export interface PackResult {
-	name: string;
-	version: string;
-	packageTar: string;
-	commands: string[];
-}
-
-const HEAD_BYTES = 256; // BINPRM_BUF_SIZE-sized header read
-
-function npmBinary(): string {
-	const candidates = [
-		process.env.AGENTOS_TOOLCHAIN_NPM,
-		join(dirname(process.execPath), "npm"),
-		process.env.HOME
-			? join(
-					process.env.HOME,
-					"progress/sandbox-multiline-prompt/2026-07-05-part-d-sidecar-agent-enumeration/npm-shim/bin/npm",
-				)
-			: undefined,
-		"npm",
-	].filter((value): value is string => typeof value === "string" && value.length > 0);
-	return candidates.find((candidate) => candidate === "npm" || existsSync(candidate)) ?? "npm";
-}
-
-function readHead(file: string): Buffer {
-	const fd = openSync(file, "r");
-	try {
-		const buf = Buffer.alloc(HEAD_BYTES);
-		const n = readSync(fd, buf, 0, HEAD_BYTES, 0);
-		return buf.subarray(0, n);
-	} finally {
-		closeSync(fd);
-	}
-}
-
-function npmInstallFlat(source: string, into: string): void {
-	mkdirSync(join(into, "node_modules"), { recursive: true });
-	// `source` here is already a copy-forcing install spec (a tarball for local
-	// dirs, via `resolveInstallSpec`) — never a bare directory, which npm would
-	// symlink as a depless `file:` link. A flat, production-only install: full
-	// closure, no symlinked store, no scripts.
-	execFileSync(
-		npmBinary(),
-		[
-			"install",
-			source,
-			"--omit=dev",
-			"--ignore-scripts",
-			"--no-audit",
-			"--no-fund",
-			"--no-package-lock",
-			"--install-strategy=hoisted",
-			"--prefix",
-			into,
-		],
-		{ stdio: "pipe" },
-	);
-}
-
-/**
- * Resolve a pack source into an install spec npm will COPY (not symlink).
- *
- * `npm install <local-dir>` adds the directory as a `file:` link — it symlinks
- * the package into `node_modules` and does NOT install its dependency closure,
- * which yields an empty, source-symlinked "package" instead of a self-contained
- * one. Packing the directory into a tarball first (honoring its `files` field)
- * and installing THAT makes npm extract a real copy and resolve the full
- * dependency tree. npm specs (`name`, `name@version`) are returned unchanged.
- */
-function resolveInstallSpec(source: string, scratch: string): string {
-	if (!(existsSync(source) && statSync(source).isDirectory())) return source;
-	const dest = join(scratch, "tarball");
-	mkdirSync(dest, { recursive: true });
-	const out = execFileSync(
-		npmBinary(),
-		["pack", resolve(source), "--pack-destination", dest, "--ignore-scripts", "--silent"],
-		{ encoding: "utf8" },
-	);
-	const file = out.trim().split("\n").pop()?.trim();
-	if (!file) throw new Error(`npm pack produced no tarball for ${source}`);
-	return join(dest, file);
-}
-
-/** Resolve the installed package's name from a source spec or local dir. */
-function installedPackageName(source: string): string {
-	if (existsSync(source) && statSync(source).isDirectory()) {
-		const pkg = JSON.parse(readFileSync(join(source, "package.json"), "utf8"));
-		return pkg.name as string;
-	}
-	// `name`, `name@version`, `@scope/name@version`
-	const at = source.lastIndexOf("@");
-	return at > 0 ? source.slice(0, at) : source;
-}
-
-function readAgentosPackageManifest(source: string): Record<string, unknown> | undefined {
-	if (!(existsSync(source) && statSync(source).isDirectory())) return undefined;
-	const manifestPath = join(source, "agentos-package.json");
-	if (!existsSync(manifestPath)) return undefined;
-	return JSON.parse(readFileSync(manifestPath, "utf8")) as Record<string, unknown>;
-}
-
-function unscopedName(name: string): string {
-	return name.replace(/^@[^/]+\//, "");
-}
-
-/** Normalize a package.json `bin` field to `{ commandName: relativeEntryPath }`. */
-function binEntries(pkgDir: string): Record<string, string> {
-	const pkg = JSON.parse(readFileSync(join(pkgDir, "package.json"), "utf8"));
-	const bin = pkg.bin;
-	if (!bin) return {};
-	if (typeof bin === "string") {
-		return { [pkg.name.replace(/^@[^/]+\//, "")]: bin };
-	}
-	return bin as Record<string, string>;
-}
-
-export function findNativeAddons(root: string): string[] {
-	const hits: string[] = [];
-	const walk = (dir: string) => {
-		for (const entry of readdirSync(dir, { withFileTypes: true })) {
-			const p = join(dir, entry.name);
-			if (entry.isDirectory()) walk(p);
-			else if (entry.isFile() && entry.name.endsWith(".node")) hits.push(p);
-		}
-	};
-	if (existsSync(root)) walk(root);
-	return hits;
-}
-
-/**
- * Verify a finished package directory satisfies the agentOS package format:
- * every `bin/` entry has a recognized, non-native header, and the tree has no
- * native `.node` addons. Throws with a clear message on the first violation.
- */
-export function verifyPackageDir(packageDir: string): void {
-	const manifestPath = join(packageDir, "agentos-package.json");
-	if (!existsSync(manifestPath)) {
-		throw new Error(`missing required agentos-package.json in ${packageDir}`);
-	}
-	let manifest: { name?: unknown; version?: unknown };
-	try {
-		manifest = JSON.parse(readFileSync(manifestPath, "utf8")) as {
-			name?: unknown;
-			version?: unknown;
-		};
-	} catch (error) {
-		throw new Error(
-			`agentos-package.json in ${packageDir} is not valid JSON: ${String(error)}`,
-		);
-	}
-	if (typeof manifest.name !== "string" || manifest.name.length === 0) {
-		throw new Error(
-			`agentos-package.json in ${packageDir} is missing a valid "name"`,
-		);
-	}
-	if (typeof manifest.version !== "string" || manifest.version.length === 0) {
-		throw new Error(
-			`agentos-package.json in ${packageDir} is missing a valid "version"`,
-		);
-	}
-	const binDir = join(packageDir, "bin");
-	if (!existsSync(binDir)) {
-		throw new Error(`package has no bin/ directory: ${packageDir}`);
-	}
-	for (const entry of readdirSync(binDir)) {
-		const target = resolve(binDir, entry); // follows the symlink
-		const kind = detectExecutableKind(readHead(target));
-		if (isNativeKind(kind)) {
-			throw new Error(
-				`bin/${entry} is a native ${kind} binary, which cannot run in agentOS`,
-			);
-		}
-		if (kind === "unknown") {
-			throw new Error(
-				`bin/${entry} has no recognized header — JS/script commands need a '#!' shebang`,
-			);
-		}
-	}
-	const addons = findNativeAddons(join(packageDir, "node_modules"));
-	if (addons.length > 0) {
-		throw new Error(
-			`package contains native .node addon(s) that won't load in V8: ${addons
-				.map((a) => relative(packageDir, a))
-				.join(", ")}; re-run with --prune-native to drop them if they are unreachable on the V8 code path`,
-		);
-	}
-}
-
-function isInside(root: string, target: string): boolean {
-	const rel = relative(root, target);
-	return rel === "" || (!rel.startsWith("..") && !isAbsolute(rel));
-}
-
-function dereferenceEscapingSymlinks(root: string): void {
-	const walk = (dir: string) => {
-		for (const entry of readdirSync(dir, { withFileTypes: true })) {
-			const path = join(dir, entry.name);
-			const stat = lstatSync(path);
-			if (stat.isSymbolicLink()) {
-				const target = resolve(dirname(path), readlinkSync(path));
-				if (!isInside(root, target)) {
-					rmSync(path, { recursive: true, force: true });
-					cpSync(target, path, {
-						recursive: true,
-						dereference: true,
-						verbatimSymlinks: false,
-					});
-				}
-				continue;
-			}
-			if (stat.isDirectory()) walk(path);
-		}
-	};
-	walk(root);
-}
-
-function createPackageTar(packageDir: string, packageTar: string): void {
-	rmSync(packageTar, { recursive: true, force: true });
-	mkdirSync(dirname(packageTar), { recursive: true });
-	execFileSync("tar", ["-cf", packageTar, "-C", packageDir, "."], {
-		stdio: "pipe",
-	});
-}
-
-/**
- * Resolve a package's `bin` entry to its real on-disk location in the packed
- * closure. A bin path like `./node_modules/<dep>/<sub>` is written RELATIVE to the
- * declaring package's root, but a flat (`npm install`) install HOISTS shared deps
- * to the top-level `node_modules`, so the literal nested path may not exist. A
- * wrapper package (e.g. `pi-cli`) whose `bin` points into its dependencies is the
- * common case. Try the nested path first, then the hoisted top-level copy.
- */
-function resolveBinTarget(
-	closureModules: string,
-	name: string,
-	entryRel: string,
-): string {
-	const nested = join(closureModules, name, entryRel);
-	if (existsSync(nested)) return nested;
-	// `./node_modules/<dep>/<sub>` → hoisted `<closure>/node_modules/<dep>/<sub>`.
-	const hoistedMatch = entryRel.match(/^\.?\/?node_modules\/(.+)$/);
-	if (hoistedMatch) {
-		const hoisted = join(closureModules, hoistedMatch[1]);
-		if (existsSync(hoisted)) return hoisted;
-	}
-	throw new Error(
-		`pack: cannot resolve bin target "${entryRel}" for ${name} — not found nested ` +
-			`(${nested}) or hoisted. The declaring package's bin path does not match the ` +
-			`installed (hoisted) layout.`,
-	);
-}
-
-export function pack(options: PackOptions): PackResult {
-	const { source, out, agent, pruneNative } = options;
-	const tmp = mkdtempSync(join(tmpdir(), "agentos-pack-"));
-	try {
-		npmInstallFlat(resolveInstallSpec(source, tmp), tmp);
-
-		const name = installedPackageName(source);
-		const installedDir = join(tmp, "node_modules", name);
-		// Read the source `agentos-package.json` from the INSTALLED package dir, not
-		// the source spec: for npm specs (`@scope/name`) the spec is not a directory,
-		// so reading it yields nothing and the packed name falls back to the unscoped
-		// npm name — which is only coincidentally correct (e.g. `@agentos-software/pi`
-		// -> `pi`) and wrong when they differ (`@agentos-software/claude-code` ->
-		// `claude-code`, but the agent id is `claude`). The installed manifest carries
-		// the canonical unscoped agent `name` the sidecar projects/resolves on.
-		const sourceManifest = readAgentosPackageManifest(installedDir);
-		const pkg = JSON.parse(readFileSync(join(installedDir, "package.json"), "utf8"));
-		const version: string = pkg.version;
-		const bins = binEntries(installedDir);
-		const commands = Object.keys(bins);
-		if (commands.length === 0) {
-			throw new Error(`package "${name}" declares no bin commands`);
-		}
-		if (agent && !commands.includes(agent)) {
-			throw new Error(
-				`--agent "${agent}" is not one of the package's commands: ${commands.join(", ")}`,
-			);
-		}
-
-		// Flat temporary package dir. The emitted artifact is a tar; the versioned
-		// `/opt/agentos/<name>/<version>` + `current` layout is the sidecar
-		// projection's job.
-		const explicitTarOut = out.endsWith(".tar");
-		const packageDir = explicitTarOut ? join(tmp, "package") : out;
-		rmSync(packageDir, { recursive: true, force: true });
-		mkdirSync(packageDir, { recursive: true });
-
-		const binDir = join(packageDir, "bin");
-		mkdirSync(binDir, { recursive: true });
-
-		// Flat closure (includes the package itself under node_modules/<name>).
-		cpSync(join(tmp, "node_modules"), join(packageDir, "node_modules"), {
-			recursive: true,
-		});
-		// The sidecar resolves each command from the root package.json "bin" map to
-		// its REAL entry file in the packed closure (see package_projection
-		// binEntries) — it must NOT rely on `bin/<cmd>` symlinks: npm/pnpm publish
-		// DROP symlinks, so a `bin/<cmd>` symlink vanishes from the published tarball
-		// and the sidecar can't project the entrypoint (the adapter then resolves to
-		// `/unknown/<cmd>`). So point `bin` at the real relative entry path; also keep
-		// a `bin/<cmd>` symlink for local `$PATH`/dev use (harmless if published away).
-		const closureModules = join(packageDir, "node_modules");
-		const binMap: Record<string, string> = {};
-		for (const [cmd, entryRel] of Object.entries(bins)) {
-			const targetAbs = resolveBinTarget(closureModules, name, entryRel);
-			binMap[cmd] = relative(packageDir, targetAbs).split(/[\\/]/).join("/");
-			chmodSync(targetAbs, 0o755);
-			symlinkSync(relative(binDir, targetAbs), join(binDir, cmd));
-		}
-		if (pruneNative) {
-			// Remove V8-incompatible native addons from the kept JS closure. The
-			// rest of node_modules (including dynamically-required modules) stays.
-			const addons = findNativeAddons(join(packageDir, "node_modules"));
-			for (const addon of addons) {
-				rmSync(addon, { force: true });
-			}
-			if (addons.length > 0) {
-				console.warn(
-					`[agentos-toolchain] pruned ${addons.length} native .node addon(s) from ${name} (--prune-native); they must be unreachable on the V8 code path`,
-				);
-			}
-		}
-
-		// Write a normal root package.json {name, version, bin}. The sidecar reads
-		// `version` and commands from here (bin map -> real entry file, built above);
-		// JSON package metadata lives in agentos-package.json next to it.
-		writeFileSync(
-			join(packageDir, "package.json"),
-			`${JSON.stringify({ name, version, bin: binMap }, null, 2)}\n`,
-		);
-		const manifest = {
-			name:
-				typeof sourceManifest?.name === "string" &&
-				sourceManifest.name.length > 0
-					? sourceManifest.name
-					: unscopedName(name),
-			...(sourceManifest?.agent !== undefined
-				? { agent: sourceManifest.agent }
-				: agent
-					? { agent: { acpEntrypoint: agent } }
-					: {}),
-			version,
-			...(sourceManifest?.provides !== undefined
-				? { provides: sourceManifest.provides }
-				: {}),
-		};
-		writeFileSync(
-			join(packageDir, "agentos-package.json"),
-			`${JSON.stringify(manifest, null, 2)}\n`,
-		);
-
-		verifyPackageDir(packageDir);
-		dereferenceEscapingSymlinks(packageDir);
-		const packageTar = out.endsWith(".tar") ? out : `${out}.tar`;
-		createPackageTar(packageDir, packageTar);
-		return { name, version, packageTar, commands };
-	} finally {
-		rmSync(tmp, { recursive: true, force: true });
-	}
-}
diff --git a/packages/agentos-toolchain/src/publish.ts b/packages/agentos-toolchain/src/publish.ts
deleted file mode 100644
index 7537dc760..000000000
--- a/packages/agentos-toolchain/src/publish.ts
+++ /dev/null
@@ -1,112 +0,0 @@
-import { spawnSync } from "node:child_process";
-import { existsSync, readFileSync, writeFileSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
-
-export interface PublishOptions {
-	packageDir: string;
-	/** npm dist-tag. Defaults to `dev` so a publish NEVER moves `latest`. */
-	tag?: string;
-	/** Explicit opt-in to the `latest` dist-tag. */
-	latest?: boolean;
-	dryRun?: boolean;
-	/** Rewrite package.json `version` before publishing. */
-	setVersion?: string;
-}
-
-export interface PublishResult {
-	name: string;
-	version: string;
-	tag: string;
-}
-
-/**
- * `latest` is opt-in only: consumers installing `@agentos-software/<x>` with no
- * tag must keep resolving a deliberate release, never whatever was published
- * last from a dev machine or CI branch.
- */
-export function resolveTag(options: Pick<PublishOptions, "tag" | "latest">): string {
-	if (options.latest) {
-		if (options.tag !== undefined && options.tag !== "latest") {
-			throw new Error(
-				`--latest conflicts with --tag ${options.tag}: pass one or the other`,
-			);
-		}
-		return "latest";
-	}
-	if (options.tag === "latest") {
-		throw new Error(
-			'refusing implicit `--tag latest` — pass --latest to move the latest pointer',
-		);
-	}
-	return options.tag ?? "dev";
-}
-
-function findUp(startDir: string, fileName: string): string | undefined {
-	let dir = startDir;
-	for (;;) {
-		if (existsSync(join(dir, fileName))) return join(dir, fileName);
-		const parent = dirname(dir);
-		if (parent === dir) return undefined;
-		dir = parent;
-	}
-}
-
-/**
- * Publish a built agentOS package to npm.
- *
- * Uses `pnpm publish` when the package lives in a pnpm workspace (so any
- * `workspace:*` deps are rewritten to real versions), plain `npm publish`
- * otherwise — 3rd-party repos need no pnpm.
- */
-export function publish(options: PublishOptions): PublishResult {
-	const packageDir = resolve(options.packageDir);
-	const tag = resolveTag(options);
-
-	const pkgPath = join(packageDir, "package.json");
-	if (!existsSync(pkgPath)) {
-		throw new Error(`no package.json in ${packageDir}`);
-	}
-	const pkg = JSON.parse(readFileSync(pkgPath, "utf8")) as {
-		name?: string;
-		version?: string;
-	};
-	if (typeof pkg.name !== "string" || pkg.name.length === 0) {
-		throw new Error(`package.json in ${packageDir} is missing a valid "name"`);
-	}
-
-	if (options.setVersion !== undefined) {
-		const raw = JSON.parse(readFileSync(pkgPath, "utf8"));
-		raw.version = options.setVersion;
-		writeFileSync(pkgPath, `${JSON.stringify(raw, null, "\t")}\n`);
-		pkg.version = options.setVersion;
-	}
-	if (typeof pkg.version !== "string" || pkg.version.length === 0) {
-		throw new Error(
-			`package.json in ${packageDir} is missing a valid "version"`,
-		);
-	}
-
-	// A package that was never built would publish an empty shell — refuse.
-	if (!existsSync(join(packageDir, "dist", "index.js"))) {
-		throw new Error(
-			`${pkg.name} is not built (no dist/index.js in ${packageDir}) — build it first`,
-		);
-	}
-
-	const inPnpmWorkspace =
-		findUp(packageDir, "pnpm-workspace.yaml") !== undefined;
-	const pm = inPnpmWorkspace ? "pnpm" : "npm";
-	const args = ["publish", "--access", "public", "--tag", tag];
-	if (pm === "pnpm") args.push("--no-git-checks");
-	if (options.dryRun) args.push("--dry-run");
-
-	process.stdout.write(
-		`publishing ${pkg.name}@${pkg.version} (dist-tag: ${tag}${options.dryRun ? ", dry-run" : ""}) via ${pm}\n`,
-	);
-	const result = spawnSync(pm, args, { cwd: packageDir, stdio: "inherit" });
-	if (result.error) throw result.error;
-	if (result.status !== 0) {
-		throw new Error(`${pm} publish failed for ${pkg.name} (exit ${result.status})`);
-	}
-	return { name: pkg.name, version: pkg.version, tag };
-}
diff --git a/packages/agentos-toolchain/src/stage.ts b/packages/agentos-toolchain/src/stage.ts
deleted file mode 100644
index 51522e85f..000000000
--- a/packages/agentos-toolchain/src/stage.ts
+++ /dev/null
@@ -1,119 +0,0 @@
-import {
-	copyFileSync,
-	existsSync,
-	mkdirSync,
-	rmSync,
-	statSync,
-} from "node:fs";
-import { join, resolve } from "node:path";
-import { readManifest } from "./manifest.js";
-
-export interface StageOptions {
-	/** Package root holding `agentos-package.json`; `bin/` is (re)created here. */
-	packageDir: string;
-	/** Directory of compiled command binaries (e.g. the native wasm build output). */
-	commandsDir: string;
-	/**
-	 * What to do when the commands dir or a declared binary is absent.
-	 * `"error"` (default) fails the stage; `"skip"` warns and leaves the package
-	 * a valid empty placeholder — used by in-repo builds so `pnpm build` works
-	 * on checkouts that have not run the native build.
-	 */
-	ifMissing?: "error" | "skip";
-}
-
-export interface StageResult {
-	staged: string[];
-	missing: string[];
-}
-
-/**
- * Populate a package's `bin/` from a commands directory, per the `commands` /
- * `aliases` / `stubs` lists declared in its `agentos-package.json`.
- *
- * `bin/` is wiped and rebuilt on every run. Sources are copied dereferenced
- * (`copyFileSync` follows symlinks), so alias/stub symlink farms in the
- * commands dir land as real files that survive npm packing.
- */
-export function stage(options: StageOptions): StageResult {
-	const packageDir = resolve(options.packageDir);
-	const commandsDir = resolve(options.commandsDir);
-	const ifMissing = options.ifMissing ?? "error";
-
-	const manifest = readManifest(packageDir);
-	const commands = manifest?.commands ?? [];
-	const aliases = manifest?.aliases ?? {};
-	const stubs = manifest?.stubs ?? [];
-	if (
-		commands.length === 0 &&
-		stubs.length === 0 &&
-		Object.keys(aliases).length === 0
-	) {
-		process.stdout.write(
-			`stage: no commands declared in ${join(packageDir, "agentos-package.json")} — nothing to stage\n`,
-		);
-		return { staged: [], missing: [] };
-	}
-
-	if (!existsSync(commandsDir)) {
-		if (ifMissing === "skip") {
-			process.stdout.write(
-				`stage: commands dir not found (${commandsDir}) — leaving bin/ unstaged (placeholder package)\n`,
-			);
-			return { staged: [], missing: [...commands, ...stubs, ...Object.keys(aliases)] };
-		}
-		throw new Error(`stage: commands dir not found: ${commandsDir}`);
-	}
-
-	const binDir = join(packageDir, "bin");
-	rmSync(binDir, { recursive: true, force: true });
-	mkdirSync(binDir, { recursive: true });
-
-	const staged: string[] = [];
-	const missing: string[] = [];
-
-	for (const command of commands) {
-		const source = join(commandsDir, command);
-		if (!existsSync(source) || !statSync(source).isFile()) {
-			missing.push(command);
-			continue;
-		}
-		copyFileSync(source, join(binDir, command));
-		staged.push(command);
-	}
-
-	const stubsSource = join(commandsDir, "_stubs");
-	const hasStubsBinary = existsSync(stubsSource);
-	for (const stub of stubs) {
-		if (!hasStubsBinary) {
-			missing.push(stub);
-			continue;
-		}
-		copyFileSync(stubsSource, join(binDir, stub));
-		staged.push(stub);
-	}
-
-	// Aliases copy from bin/ (not the commands dir) so they always match the
-	// staged command, and so a target may itself be a stub.
-	for (const [alias, target] of Object.entries(aliases)) {
-		const source = join(binDir, target);
-		if (!existsSync(source)) {
-			missing.push(alias);
-			continue;
-		}
-		copyFileSync(source, join(binDir, alias));
-		staged.push(alias);
-	}
-
-	if (missing.length > 0) {
-		const detail = `missing from ${commandsDir}: ${missing.join(", ")}`;
-		if (ifMissing === "error") {
-			throw new Error(`stage: ${detail}`);
-		}
-		process.stdout.write(`stage: WARN ${detail}\n`);
-	}
-	process.stdout.write(
-		`staged ${staged.length} command(s) into ${binDir}\n`,
-	);
-	return { staged, missing };
-}
diff --git a/packages/agentos-toolchain/tests/lifecycle.test.ts b/packages/agentos-toolchain/tests/lifecycle.test.ts
deleted file mode 100644
index 0bb406e9b..000000000
--- a/packages/agentos-toolchain/tests/lifecycle.test.ts
+++ /dev/null
@@ -1,168 +0,0 @@
-import { execFileSync } from "node:child_process";
-import {
-	existsSync,
-	lstatSync,
-	mkdirSync,
-	mkdtempSync,
-	readFileSync,
-	rmSync,
-	symlinkSync,
-	writeFileSync,
-} from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { afterEach, describe, expect, test } from "vitest";
-import { build } from "../src/build.js";
-import { resolveTag } from "../src/publish.js";
-import { stage } from "../src/stage.js";
-
-const dirs: string[] = [];
-const mkTmp = (p: string) => {
-	const d = mkdtempSync(join(tmpdir(), p));
-	dirs.push(d);
-	return d;
-};
-afterEach(() => {
-	for (const d of dirs.splice(0)) rmSync(d, { recursive: true, force: true });
-});
-
-/** A fake compiled-commands dir: real binaries, a symlink alias, and _stubs. */
-function makeCommandsDir(): string {
-	const dir = mkTmp("agentos-commands-");
-	writeFileSync(join(dir, "sh"), "\0asm-sh");
-	writeFileSync(join(dir, "cat"), "\0asm-cat");
-	writeFileSync(join(dir, "_stubs"), "\0asm-stubs");
-	symlinkSync("sh", join(dir, "linked-sh"));
-	return dir;
-}
-
-function makePackageDir(manifest: object): string {
-	const dir = mkTmp("agentos-pkg-");
-	writeFileSync(
-		join(dir, "package.json"),
-		JSON.stringify({ name: "@agentos-software/fake", version: "1.2.3" }),
-	);
-	writeFileSync(join(dir, "agentos-package.json"), JSON.stringify(manifest));
-	return dir;
-}
-
-describe("stage", () => {
-	test("stages commands, stubs, and aliases as real files", () => {
-		const commandsDir = makeCommandsDir();
-		const pkg = makePackageDir({
-			commands: ["sh", "cat", "linked-sh"],
-			aliases: { bash: "sh", more: "cat" },
-			stubs: ["id", "df"],
-		});
-		const result = stage({ packageDir: pkg, commandsDir });
-		expect(result.missing).toEqual([]);
-		expect(result.staged.sort()).toEqual(
-			["bash", "cat", "df", "id", "linked-sh", "more", "sh"].sort(),
-		);
-		// Symlink sources are dereferenced into real files.
-		expect(lstatSync(join(pkg, "bin", "linked-sh")).isSymbolicLink()).toBe(false);
-		expect(readFileSync(join(pkg, "bin", "linked-sh"), "utf8")).toBe("\0asm-sh");
-		expect(readFileSync(join(pkg, "bin", "bash"), "utf8")).toBe("\0asm-sh");
-		expect(readFileSync(join(pkg, "bin", "id"), "utf8")).toBe("\0asm-stubs");
-	});
-
-	test("re-staging wipes stale entries from bin/", () => {
-		const commandsDir = makeCommandsDir();
-		const pkg = makePackageDir({ commands: ["sh"] });
-		mkdirSync(join(pkg, "bin"));
-		writeFileSync(join(pkg, "bin", "stale"), "old");
-		stage({ packageDir: pkg, commandsDir });
-		expect(existsSync(join(pkg, "bin", "stale"))).toBe(false);
-		expect(existsSync(join(pkg, "bin", "sh"))).toBe(true);
-	});
-
-	test("missing binary fails by default, warns with if-missing=skip", () => {
-		const commandsDir = makeCommandsDir();
-		const pkg = makePackageDir({ commands: ["sh", "no-such-cmd"] });
-		expect(() => stage({ packageDir: pkg, commandsDir })).toThrow(
-			/no-such-cmd/,
-		);
-		const result = stage({
-			packageDir: pkg,
-			commandsDir,
-			ifMissing: "skip",
-		});
-		expect(result.staged).toEqual(["sh"]);
-		expect(result.missing).toEqual(["no-such-cmd"]);
-	});
-
-	test("missing commands dir with if-missing=skip leaves a placeholder", () => {
-		const pkg = makePackageDir({ commands: ["sh"] });
-		const result = stage({
-			packageDir: pkg,
-			commandsDir: join(pkg, "does-not-exist"),
-			ifMissing: "skip",
-		});
-		expect(result.staged).toEqual([]);
-		expect(existsSync(join(pkg, "bin"))).toBe(false);
-	});
-
-	test("no declared commands is a no-op", () => {
-		const pkg = makePackageDir({ name: "meta-only" });
-		const result = stage({
-			packageDir: pkg,
-			commandsDir: join(pkg, "does-not-exist"),
-		});
-		expect(result.staged).toEqual([]);
-	});
-});
-
-describe("build", () => {
-	test("assembles dist/package tar with bin/ and runtime manifest", () => {
-		const commandsDir = makeCommandsDir();
-		const pkg = makePackageDir({
-			name: "fake",
-			commands: ["sh", "cat"],
-			aliases: { bash: "sh" },
-		});
-		stage({ packageDir: pkg, commandsDir });
-		const result = build(pkg);
-		expect(result.commands.sort()).toEqual(["bash", "cat", "sh"]);
-		expect(result.outTar).toBe(join(pkg, "dist", "package.tar"));
-		const tarEntries = execFileSync("tar", ["-tf", result.outTar], {
-			encoding: "utf8",
-		})
-			.trim()
-			.split("\n")
-			.map((entry) => entry.replace(/^\.\//, ""));
-		expect(tarEntries).toContain("agentos-package.json");
-		expect(tarEntries).toContain("bin/bash");
-		expect(tarEntries).not.toContain("package.json");
-		const runtimeManifest = JSON.parse(
-			readFileSync(
-				join(pkg, "dist", "package", "agentos-package.json"),
-				"utf8",
-			),
-		);
-		// Staging fields are build-time only — they must not ship at runtime.
-		expect(runtimeManifest).toEqual({ name: "fake", version: "1.2.3" });
-		expect(readFileSync(join(pkg, "dist", "package", "bin", "bash"), "utf8")).toBe(
-			"\0asm-sh",
-		);
-	});
-
-	test("empty bin/ assembles a valid placeholder", () => {
-		const pkg = makePackageDir({ name: "fake" });
-		const result = build(pkg);
-		expect(result.commands).toEqual([]);
-		expect(existsSync(result.outTar)).toBe(true);
-		expect(existsSync(join(pkg, "dist", "package", "bin"))).toBe(false);
-	});
-});
-
-describe("resolveTag", () => {
-	test("defaults to dev, never latest", () => {
-		expect(resolveTag({})).toBe("dev");
-		expect(resolveTag({ tag: "my-branch" })).toBe("my-branch");
-	});
-	test("latest requires the explicit flag", () => {
-		expect(resolveTag({ latest: true })).toBe("latest");
-		expect(() => resolveTag({ tag: "latest" })).toThrow(/--latest/);
-		expect(() => resolveTag({ latest: true, tag: "dev" })).toThrow(/conflicts/);
-	});
-});
diff --git a/packages/agentos-toolchain/tests/pack.test.ts b/packages/agentos-toolchain/tests/pack.test.ts
deleted file mode 100644
index 22a52d1e4..000000000
--- a/packages/agentos-toolchain/tests/pack.test.ts
+++ /dev/null
@@ -1,191 +0,0 @@
-import { execFileSync } from "node:child_process";
-import {
-	chmodSync,
-	existsSync,
-	lstatSync,
-	mkdirSync,
-	mkdtempSync,
-	readFileSync,
-	readlinkSync,
-	rmSync,
-	statSync,
-	writeFileSync,
-} from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { afterEach, describe, expect, test } from "vitest";
-import { detectExecutableKind, isNativeKind, parseShebangInterpreter } from "../src/header.js";
-import { findNativeAddons, pack, verifyPackageDir } from "../src/pack.js";
-
-function hasWorkingNpm(): boolean {
-	try {
-		execFileSync("npm", ["--version"], { stdio: "ignore" });
-		return true;
-	} catch {
-		return false;
-	}
-}
-const npmOk = hasWorkingNpm();
-
-const dirs: string[] = [];
-const mkTmp = (p: string) => {
-	const d = mkdtempSync(join(tmpdir(), p));
-	dirs.push(d);
-	return d;
-};
-afterEach(() => {
-	for (const d of dirs.splice(0)) rmSync(d, { recursive: true, force: true });
-});
-
-describe("header detection", () => {
-	test("recognizes shebang, wasm, and native magics", () => {
-		expect(detectExecutableKind(Buffer.from("#!/usr/bin/env node\n"))).toBe("shebang");
-		expect(detectExecutableKind(Buffer.from([0x00, 0x61, 0x73, 0x6d]))).toBe("wasm");
-		expect(detectExecutableKind(Buffer.from([0x7f, 0x45, 0x4c, 0x46]))).toBe("native-elf");
-		expect(detectExecutableKind(Buffer.from([0xcf, 0xfa, 0xed, 0xfe]))).toBe("native-macho");
-		expect(detectExecutableKind(Buffer.from([0x4d, 0x5a, 0x90, 0x00]))).toBe("native-pe");
-		expect(detectExecutableKind(Buffer.from("just text"))).toBe("unknown");
-	});
-
-	test("cafebabe Java class is not mis-detected as Mach-O", () => {
-		const java = Buffer.from([0xca, 0xfe, 0xba, 0xbe, 0x00, 0x00, 0x00, 0x34]); // Java 8
-		expect(detectExecutableKind(java)).toBe("unknown");
-		const fat = Buffer.from([0xca, 0xfe, 0xba, 0xbe, 0x00, 0x00, 0x00, 0x02]); // Mach-O fat
-		expect(detectExecutableKind(fat)).toBe("native-macho");
-	});
-
-	test("isNativeKind + shebang interpreter parsing", () => {
-		expect(isNativeKind("native-elf")).toBe(true);
-		expect(isNativeKind("shebang")).toBe(false);
-		expect(parseShebangInterpreter(Buffer.from("#!/usr/bin/env python3\n"))).toBe("/usr/bin/env");
-		expect(parseShebangInterpreter(Buffer.from("not a shebang"))).toBeNull();
-	});
-});
-
-/** Build a flat package dir by hand (no npm) to exercise verifyPackageDir. */
-function handBuiltPackage(name = "pkg", version = "1.0.0"): string {
-	const pkgDir = mkTmp("agentos-pkg-");
-	mkdirSync(join(pkgDir, "bin"), { recursive: true });
-	mkdirSync(join(pkgDir, "node_modules"), { recursive: true });
-	writeFileSync(join(pkgDir, "bin", "tool"), "#!/usr/bin/env node\nconsole.log('ok');\n");
-	chmodSync(join(pkgDir, "bin", "tool"), 0o755);
-	writeFileSync(
-		join(pkgDir, "agentos-package.json"),
-		`${JSON.stringify({ name, version }, null, 2)}\n`,
-	);
-	return pkgDir;
-}
-
-describe("verifyPackageDir", () => {
-	test("accepts a well-formed package", () => {
-		expect(() => verifyPackageDir(handBuiltPackage())).not.toThrow();
-	});
-
-	test("rejects a manifest missing version", () => {
-		const pkgDir = handBuiltPackage();
-		writeFileSync(
-			join(pkgDir, "agentos-package.json"),
-			`${JSON.stringify({ name: "pkg" }, null, 2)}\n`,
-		);
-		expect(() => verifyPackageDir(pkgDir)).toThrow(/valid "version"/);
-	});
-
-	test("rejects native .node addons", () => {
-		const pkgDir = handBuiltPackage("withaddon");
-		writeFileSync(join(pkgDir, "node_modules", "evil.node"), "binary");
-		expect(() => verifyPackageDir(pkgDir)).toThrow(/native \.node addon/);
-		// The error must name the --prune-native escape hatch.
-		expect(() => verifyPackageDir(pkgDir)).toThrow(/--prune-native/);
-	});
-
-	test("findNativeAddons locates .node files; pruning them lets verify pass", () => {
-		const pkgDir = handBuiltPackage("prunable");
-		const nm = join(pkgDir, "node_modules");
-		mkdirSync(join(nm, "koffi", "build"), { recursive: true });
-		writeFileSync(join(nm, "koffi", "build", "koffi.node"), "native");
-		writeFileSync(join(nm, "clipboard.node"), "native");
-		const addons = findNativeAddons(nm);
-		expect(addons.length).toBe(2);
-		expect(() => verifyPackageDir(pkgDir)).toThrow(/native \.node addon/);
-		// Prune them (what --prune-native does) → verify now passes.
-		for (const addon of addons) rmSync(addon);
-		expect(() => verifyPackageDir(pkgDir)).not.toThrow();
-	});
-
-	test("rejects a headerless bin command", () => {
-		const pkgDir = handBuiltPackage("bad");
-		writeFileSync(join(pkgDir, "bin", "nohdr"), "plain text, no shebang");
-		expect(() => verifyPackageDir(pkgDir)).toThrow(/no recognized header/);
-	});
-
-	test("rejects a native bin command", () => {
-		const pkgDir = handBuiltPackage("native");
-		writeFileSync(join(pkgDir, "bin", "elf"), Buffer.from([0x7f, 0x45, 0x4c, 0x46, 0, 0]));
-		expect(() => verifyPackageDir(pkgDir)).toThrow(/native native-elf/);
-	});
-});
-
-function makeFixture(name = "hello", version = "1.2.3"): string {
-	const src = mkTmp("agentos-fixture-");
-	writeFileSync(
-		join(src, "package.json"),
-		JSON.stringify({ name, version, bin: { hello: "bin/hello.js" } }),
-	);
-	mkdirSync(join(src, "bin"), { recursive: true });
-	writeFileSync(join(src, "bin", "hello.js"), "#!/usr/bin/env node\nconsole.log('hi');\n");
-	chmodSync(join(src, "bin", "hello.js"), 0o644);
-	return src;
-}
-
-// These exercise the real `npm install` flow; gated on a working npm (present in
-// any npx/CI environment, absent in this minimal pnpm-only sandbox).
-describe.skipIf(!npmOk)("pack (offline, local fixture, needs npm)", () => {
-	test("packs a zero-dep local package into a valid agentOS package tar", () => {
-		const src = makeFixture();
-		const out = join(mkTmp("agentos-out-"), "hello.tar");
-		const result = pack({ source: src, out });
-
-		expect(result.name).toBe("hello");
-		expect(result.version).toBe("1.2.3");
-		expect(result.commands).toEqual(["hello"]);
-		expect(result.packageTar).toBe(out);
-		expect(existsSync(out)).toBe(true);
-
-		const list = execFileSync("tar", ["-tf", out], { encoding: "utf8" })
-			.trim()
-			.split("\n")
-			.map((entry) => entry.replace(/^\.\//, ""))
-			.sort();
-		expect(list).toContain("agentos-package.json");
-		expect(list).toContain("bin/hello");
-		expect(list).toContain("node_modules/hello/bin/hello.js");
-		expect(list).not.toContain("package.json");
-
-		const extractDir = mkTmp("agentos-extract-");
-		execFileSync("tar", ["-xf", out, "-C", extractDir]);
-		expect(JSON.parse(readFileSync(join(extractDir, "agentos-package.json"), "utf8"))).toMatchObject({
-			name: "hello",
-			version: "1.2.3",
-		});
-		const binLink = join(extractDir, "bin", "hello");
-		expect(lstatSync(binLink).isSymbolicLink()).toBe(true);
-		expect(readlinkSync(binLink)).toContain("node_modules/hello/bin/hello.js");
-		expect(statSync(join(extractDir, "node_modules", "hello", "bin", "hello.js")).mode & 0o777).toBe(0o755);
-		expect(() => verifyPackageDir(extractDir)).not.toThrow();
-	});
-
-	test("--agent validates the entrypoint against the package commands", () => {
-		const src = makeFixture("agentpkg", "0.1.0");
-		const out = join(mkTmp("agentos-out-"), "agentpkg.tar");
-		pack({ source: src, out, agent: "hello" });
-		const extractDir = mkTmp("agentos-extract-");
-		execFileSync("tar", ["-xf", out, "-C", extractDir]);
-		const manifest = JSON.parse(readFileSync(join(extractDir, "agentos-package.json"), "utf8"));
-		expect(manifest.agent.acpEntrypoint).toBe("hello");
-		expect(lstatSync(join(extractDir, "bin", "hello")).isSymbolicLink()).toBe(true);
-		// An entrypoint that is not a command is rejected.
-		expect(() => pack({ source: src, out: join(mkTmp("agentos-out-"), "bad.tar"), agent: "nope" })).toThrow(
-			/--agent "nope" is not one of/,
-		);
-	});
-});
diff --git a/packages/agentos-toolchain/tsconfig.json b/packages/agentos-toolchain/tsconfig.json
deleted file mode 100644
index a5d3ddbee..000000000
--- a/packages/agentos-toolchain/tsconfig.json
+++ /dev/null
@@ -1,19 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "ES2022",
-    "lib": ["ES2022"],
-    "module": "ESNext",
-    "moduleResolution": "bundler",
-    "allowImportingTsExtensions": true,
-    "resolveJsonModule": true,
-    "isolatedModules": true,
-    "noEmit": true,
-    "strict": true,
-    "skipLibCheck": true,
-    "types": ["node"],
-    "noUnusedLocals": true,
-    "noUnusedParameters": true,
-    "noFallthroughCasesInSwitch": true
-  },
-  "include": ["src", "tests"]
-}
diff --git a/packages/benchmarks/README.md b/packages/benchmarks/README.md
deleted file mode 100644
index 94485088d..000000000
--- a/packages/benchmarks/README.md
+++ /dev/null
@@ -1,292 +0,0 @@
-# Secure Exec Benchmarks
-
-These benchmarks measure the public `secure-exec` SDK paths used by consumers.
-
-## Cold Start Matrix
-
-`coldstart.bench.ts` writes machine-readable JSON to stdout and human-readable progress to stderr. It measures:
-
-- `owned-sidecar`: `NodeRuntime.create()` owns a fresh sidecar for each runtime.
-- `shared-sidecar`: a `Sidecar` is created once per batch and passed to `NodeRuntime.create({ sidecar })`; sidecar setup is measured separately and excluded from cold start.
-- `resident-runner`: a shared sidecar plus `runtime.createResidentRunner()`, so repeated tiny snippets reuse one live guest Node process.
-
-The result JSON includes hardware metadata, aggregate cold/warm latency, and phase timings such as `session_open`, `vm_create`, `runtime_mount_wasm`, `first_exec`, and resident-runner phases.
-
-## Run
-
-Build a release sidecar first for meaningful timings:
-
-```bash
-cargo build --release -p secure-exec-sidecar
-```
-
-Run the full benchmark suite:
-
-```bash
-pnpm --dir packages/benchmarks bench
-```
-
-This writes timestamped files under `packages/benchmarks/results/`:
-
-```text
-coldstart-YYYYMMDD-HHMMSS.json
-coldstart-YYYYMMDD-HHMMSS.log
-memory-YYYYMMDD-HHMMSS.json
-memory-YYYYMMDD-HHMMSS.log
-```
-
-Run one focused lane by name:
-
-```bash
-BENCH_ONLY=sync-bridge-floor pnpm --dir packages/benchmarks bench
-BENCH_ONLY=ls-serial pnpm --dir packages/benchmarks bench
-BENCH_ONLY=process-spawn pnpm --dir packages/benchmarks bench
-```
-
-Run one matrix family:
-
-```bash
-BENCH_FAMILIES=fs pnpm --dir packages/benchmarks bench:matrix
-BENCH_FAMILIES=modules pnpm --dir packages/benchmarks bench:matrix
-BENCH_FAMILIES=ecosystem pnpm --dir packages/benchmarks bench:matrix
-BENCH_FAMILIES=permissions pnpm --dir packages/benchmarks bench:matrix
-```
-
-Run one matrix op:
-
-```bash
-BENCH_FAMILIES=net BENCH_OP_FILTER=tls_loopback_get pnpm --dir packages/benchmarks bench:matrix
-```
-
-## Baseline And PR Gate
-
-The committed local baseline is `packages/benchmarks/results/baseline-local.json`. It is generated from the full 70-row latency matrix and records:
-
-- **Hardware**: `getHardware()` output for the canonical machine.
-- **Sidecar provenance**: binary path, inferred profile, mtime, and size.
-- **Engine defaults**: iterations, warmup, cold/shared-VM mode, and row count.
-- **Rows**: per-row lane p50 values and memory columns where available.
-
-Regenerate it only from a release sidecar on the canonical machine:
-
-```bash
-pnpm install --frozen-lockfile --filter "@secure-exec/benchmarks..."
-cargo build --release -p secure-exec-sidecar
-cargo build --release -p native-baseline
-cargo build --release -p native-baseline --target wasm32-wasip1
-SECURE_EXEC_SIDECAR_BIN="$PWD/target/release/secure-exec-sidecar" \
-	pnpm --dir packages/benchmarks bench:baseline
-```
-
-`bench:baseline` refuses debug sidecars and refuses filtered matrix runs. A complete baseline has `engine.rowCount = 70`.
-
-`pnpm --dir packages/benchmarks bench:gate` runs the deterministic PR subset with 9 measured iterations and 3 warmup iterations, then compares p50 against the baseline:
-
-- **Threshold**: fail when current p50 is greater than `2.0x` the baseline p50. Override with `BENCH_GATE_THRESHOLD`.
-- **Tiny-row floor**: rows with baseline p50 below `0.3ms` are ignored unless current p50 reaches at least `1ms`, so sub-millisecond timer noise does not flap the gate.
-- **Row override**: use `BENCH_GATE_ROWS=family/op[:lane],...` to run a smaller or different subset.
-- **Release-only**: the gate exits `2` if `SECURE_EXEC_SIDECAR_BIN` resolves to a debug sidecar.
-
-Gate rows:
-
-| Row | Lane | Why it is gated |
-| --- | --- | --- |
-| `fs/fs_write_small` | `guest` | Tiny sync write hot path, with the 1ms tiny-row floor. |
-| `fs/fs_write_big` | `guest` | Large write payload catches whole-buffer copy regressions. |
-| `fs/fs_read_small` | `guest` | Small read bridge/VFS floor. |
-| `fs/stat_storm` | `guest` | Metadata syscall hot path. |
-| `fs/readdir_small` | `guest` | Directory enumeration without the high variance of large listings. |
-| `net/tcp_connect_close` | `guest` | TCP socket lifecycle floor. |
-| `net/tcp_echo_small` | `guest` | Small TCP payload round trip. |
-| `net/http_loopback_get` | `guest` | HTTP over kernel sockets with a loopback server. |
-| `modules/import_fresh_file` | `guest` | Dynamic import and filesystem resolution. |
-| `modules/require_100_small` | `guest` | CommonJS resolver/cache behavior. |
-| `control/cpu_loop` | `wasm` | WASM runtime lane sanity check. |
-| `ecosystem/ls_100` | `vmCmd` | End-to-end WASM command tier. |
-
-The CI baseline is environment-specific because GitHub-hosted runner hardware differs from the canonical machine. In CI, `bench:gate` uses `packages/benchmarks/results/baseline-ci.json`. If it is missing, PR gates skip loudly. The nightly workflow runs the full matrix, writes a candidate `baseline-ci.json`, and uploads it as an artifact. Bootstrap is:
-
-1. Let the first nightly workflow finish.
-2. Download `baseline-ci.json` from the `nightly-benchmark-results` artifact.
-3. Commit it at `packages/benchmarks/results/baseline-ci.json`.
-4. Future PRs enforce the quick gate against that CI baseline.
-
-### Latency Matrix VM Lifecycle
-
-The latency matrix gives each guest-backed benchmark op a dedicated sidecar and VM by default. Host-only lanes (`native`, `node`, and `hostCmd`) run before that VM is created; guest-backed lanes (`guest`, `wasm`, and `vmCmd`) run inside the op's VM, which is disposed before the next op.
-
-Each row also reports peak memory where the lane can be measured. Guest-backed lanes (`guest`, `wasm`, and `vmCmd`) use Linux `/proc/<sidecarPid>/clear_refs=5`, then subtract baseline `VmRSS` from post-lane `VmHWM` so the value is above the prewarmed-sidecar baseline. Native and default host Node lanes spawn the measured child directly and sample `/proc/<pid>/status` `VmHWM`, minus a startup no-op baseline (`native-baseline cpu_loop --iters 1 --warmup 0` and `node -e ""`), floored to one page. Non-Linux runs print one reason and render memory columns as `-`.
-
-Warmup contract:
-
-- **Guest Node prewarm**: `prewarmBenchVm(vm, op)` runs one trivial guest Node program to force isolate creation, bridge snapshot load, and first-exec paths before timed sampling.
-- **Native-baseline WASM prewarm**: when an op has a supported `vm-wasm` lane, the helper runs `native-baseline --op cpu_loop --iters 1 --warmup 0` once so module compilation is outside the measured samples.
-- **Command WASM prewarm**: command ops run one discarded VM-command sample (`iters=1`, `warmup=0`) so command module compilation is outside the measured samples.
-- **Op warmup**: `BENCH_WARMUP` still runs inside each op and is discarded from the reported stats.
-
-Useful latency-matrix knobs:
-
-```text
-BENCH_COLD=1        Skip the VM prewarm contract above. Cold-start lanes remain the canonical cold measurements.
-BENCH_SHARED_VM=1   Reuse a VM where op-specific VM options are not required. Default is per-op VM isolation.
-```
-
-Each matrix JSON records the sidecar binary used for the run:
-
-- **`sidecar.path`**: `NodeRuntime`-resolved sidecar binary path, including `SECURE_EXEC_SIDECAR_BIN` overrides and local checkout fallbacks.
-- **`sidecar.profile`**: inferred from the binary path (`debug`, `release`, or `unknown`).
-- **`sidecar.mtimeMs` / `sidecar.mtimeIso`**: sidecar binary modification time.
-- **`sidecar.sizeBytes`**: sidecar binary size in bytes.
-
-## Focused Lanes
-
-Focused lanes live under `src/focused/` and preserve the legacy CLI flags, env vars, JSON shape, and stderr tables from the Agent OS benchmark scripts. They use `src/lib/vm.ts` over `NodeRuntime`.
-
-- **`sync-bridge-floor`**: no-op sync bridge RPC floor. Knobs: `BENCH_SYNC_BRIDGE_ITERATIONS`, `BENCH_SYNC_BRIDGE_WARMUP`, `BENCH_SYNC_BRIDGE_CALL_COUNTS`, `BENCH_SYNC_BRIDGE_PAYLOAD_BYTES`, `BENCH_SYNC_BRIDGE_RPC_LATENCY`, `BENCH_SYNC_BRIDGE_PHASES`.
-- **`sync-bridge-floor-phases`**: bridge floor with latency and phase diagnostics enabled.
-- **`sync-bridge-floor-bigargs`**: bridge floor with a larger payload, default 64 KiB.
-- **`fs-sync-ops`**: focused sync filesystem operation bundles. Knobs: `BENCH_FS_SYNC_ITERATIONS`, `BENCH_FS_SYNC_WARMUP`, `BENCH_FS_SYNC_OPS`, `BENCH_FS_SYNC_CALL_COUNTS`, `BENCH_FS_SYNC_FIXTURES`, `BENCH_FS_SYNC_PAYLOAD_BYTES`, `BENCH_FS_SYNC_RPC_LATENCY`, `BENCH_FS_SYNC_PHASES`.
-- **`fs-sync-ops-phases`**: sync filesystem floor with phase diagnostics enabled.
-- **`dns-lookup-floor`**: warm, repeated, concurrent, and fresh-process DNS lookup rows. Knobs: `BENCH_DNS_LOOKUP_ITERATIONS`, `BENCH_DNS_LOOKUP_WARMUP`, `BENCH_DNS_LOOKUP_ROWS`.
-- **`net-tcp-event-floor`**: TCP loopback event-floor rows. Knobs: `BENCH_NET_TCP_ITERATIONS`, `BENCH_NET_TCP_WARMUP`, `BENCH_NET_TCP_ROWS`, `BENCH_NET_TCP_POLL_DELAY_MS`, `BENCH_NET_TCP_TRACE`.
-- **`net-tcp-cadence-trace`**: TCP trace attribution rows with bridge tracing enabled.
-- **`concurrency-vms`**: N owned sidecars/VMs concurrently run sustained `tcp_echo_small` loops for a fixed wall window. Knobs: `BENCH_CONCURRENCY_COUNTS` (default `1,4,8`), `BENCH_CONCURRENCY_DURATION_MS` (default `5000`).
-- **`interference`**: one busy VM alternates CPU spin and filesystem write churn while a second VM samples `fs_write_small`. Knobs: `BENCH_INTERFERENCE_DURATION_MS` (default `5000`), `BENCH_INTERFERENCE_BUSY_DURATION_MS` (default probe duration plus `1000`).
-- **`concurrent-processes`**: one VM runs N concurrent guest Node processes doing sustained `fs_write_small` loops, exposing the per-VM service ceiling. Knobs: `BENCH_PROCESS_COUNTS` (default `1,4,8`), `BENCH_PROCESS_DURATION_MS` (default `5000`).
-- **`readdir-scaling`**: pure readdir scaling with setup outside the timed loop. Knobs: `BENCH_READDIR_ITERATIONS`, `BENCH_READDIR_WARMUP`, `BENCH_READDIR_ENTRY_COUNTS`, `BENCH_READDIR_MODES`, `BENCH_READDIR_FIXTURES`, `BENCH_READDIR_WORKLOADS`.
-- **`readdir-probe`**: guarded/probe readdir shapes.
-- **`mount-readdir`**: host mount-table readdir scaling. Knobs: `BENCH_MOUNT_READDIR_ITERATIONS`, `BENCH_MOUNT_READDIR_WARMUP`, `BENCH_MOUNT_READDIR_COUNTS`, `BENCH_MOUNT_READDIR_ENTRY_COUNT`.
-- **`overlay-readdir`**: explicitly skipped in secure-exec because Agent OS TypeScript overlay layer-store APIs are not exposed here.
-- **`process-spawn`**: native baseline, host Node, and guest VM process-spawn floor. Knobs: `BENCH_ITERATIONS`, `BENCH_WARMUP`, `BENCH_PROCESS_LIFECYCLE_TRACE`.
-- **`wasm-command-floor`**: direct WASM command startup/capture floor. Knobs: `BENCH_WASM_COMMAND_FLOOR_ITERATIONS`, `BENCH_WASM_COMMAND_FLOOR_WARMUP`, `BENCH_WASM_COMMAND_FLOOR_SERIAL_RUNS`, `BENCH_WASM_COMMAND_FLOOR_STDOUT_SIZES`, `BENCH_WASM_COMMAND_FLOOR_WARMUP_DEBUG`.
-- **`wasm-command-floor-debug`**: command floor with WASM warmup diagnostics.
-- **`echo-cold-warm`**: cold/warm WASM shell `echo hello`.
-- **`ls-serial`**: VM startup plus serial `ls`. Knobs: `BENCH_LS_ITERATIONS`, `BENCH_LS_WARMUP`, `BENCH_LS_SERIAL_RUNS`, `BENCH_LS_FILE_COUNTS`, `BENCH_LS_WASM_WARMUP_DEBUG`.
-- **`wasi-ls-scaling`**: focused `ls` command scaling. Knobs: `BENCH_WASI_LS_ITERATIONS`, `BENCH_WASI_LS_WARMUP`, `BENCH_WASI_LS_SERIAL_RUNS`, `BENCH_WASI_LS_FILE_COUNTS`, `BENCH_WASI_LS_VARIANTS`, `BENCH_WASI_LS_WASM_WARMUP_DEBUG`, `BENCH_WASI_LS_SYSCALL_COUNTERS`.
-- **`wasi-ls-scaling-counters`**: `ls` scaling with syscall counters.
-
-The shell/coreutils focused lanes use the local `NodeRuntime` command-dir resolution, which prefers `registry/native/target/wasm32-wasip1/release/commands` when `make -C registry/native wasm` has been run.
-
-## Net Family
-
-`BENCH_FAMILIES=net pnpm --dir packages/benchmarks bench:matrix` runs loopback networking rows through the host Node and guest VM lanes, plus native/WASM lanes where a baseline exists.
-
-Rows:
-
-- **`udp_echo_small` / `udp_echo_big`**: UDP loopback echo of one 16 byte datagram or one 60 KiB datagram, currently expected to surface unsupported guest behavior.
-- **`unix_echo_small` / `unix_echo_big`**: Unix-domain socket echo of one 16 byte or 64 KiB payload.
-- **`http_loopback_get`**: persistent `node:http` loopback server, fresh GET per iteration.
-- **`fetch_loopback_get`**: persistent HTTP loopback server, fresh global `fetch()` per iteration.
-- **`tls_loopback_get`**: persistent `node:https` loopback server, fresh `https.get` per iteration, verifies `hello-loopback-tls`. Native is unsupported until a native TLS-loopback pair exists, and WASM is unsupported because the native baseline has no TLS lane.
-- **`tcp_connect_close`**: TCP client connects to a loopback server and closes.
-- **`tcp_echo_small` / `tcp_echo_big`**: TCP loopback echo of one 16 byte or 64 KiB payload. The big tier carries forward the old throughput row's full-payload verification.
-- **`tcp_concurrent_4`**: four concurrent TCP loopback clients connect to one server.
-- **`tcp_tiny_writes_16`**: TCP loopback echo using sixteen one-byte writes. This is a write-count/cadence row, not a payload-size tier.
-
-## Payload Tier Renames
-
-Payload-sensitive matrix rows use exactly two tiers named `<op>_small` and `<op>_big`. Retired names map to these successors:
-
-| Retired row | Successor row |
-| --- | --- |
-| `small_write` | `fs_write_small` |
-| `big_read` | `fs_read_big` |
-| `readdir_large` | `readdir_small` |
-| `stream_copy_1m` | `stream_copy_big` |
-| `tcp_echo` | `tcp_echo_small` |
-| `tcp_throughput_64k` | `tcp_echo_big` |
-| `unix_echo_small` | `unix_echo_small` (kept, added `unix_echo_big`) |
-| `udp_echo_small` | `udp_echo_small` (kept, added `udp_echo_big`) |
-| `throughput_64k` | `pass_through_big` |
-| `spawn_stdout_256k_capture` | `spawn_stdout_capture_big` |
-
-## Permissions Family
-
-`BENCH_FAMILIES=permissions pnpm --dir packages/benchmarks bench:matrix` runs a guest-only policy-overhead A/B over hot fs and net rows. Each reused op has an `<op>_allow` row using the benchmark default allow-all VM permissions and an `<op>_policy` row using a realistic restrictive policy.
-
-Policy shape:
-
-- **Filesystem**: default deny, then 15 allow glob rules for runtime paths plus benchmark script and working paths. The op's actual `/tmp/fuzz-perf-*` paths are placed at the tail so last-match policy evaluation walks the list.
-- **Network**: default deny, then five TCP loopback allowlist rules. The real `tcp://127.0.0.1:*` rule is last so loopback listen/connect checks walk the list.
-- **Other scopes**: `childProcess`, `process`, and `env` stay allowed so the measurement isolates fs and network syscall permission overhead.
-
-The matrix prints a dedicated permissions table and writes `permissionPolicyTax` to `results/latency-matrix.json` and `results/findings.json`. `policyTax = policy guest p50 / allow guest p50`; any row above `1.2` emits a finding. A one-off 200-rule local variant can validate methodology by increasing the rule list temporarily, running one op, and removing that variant before committing.
-
-## Modules Family
-
-`BENCH_FAMILIES=modules pnpm --dir packages/benchmarks bench:matrix` runs JavaScript module-resolution and import-heavy rows through the host Node and guest VM lanes. Native and WASM lanes are unsupported because module resolution is a JS-runtime surface.
-
-These rows cap the default matrix sample budget at five measured iterations plus one warmup so each row still loads 100 unique files per iteration without making debug-sidecar runs impractical.
-
-Rows:
-
-- **`require_100_small`**: stages 100 unique tiny CommonJS files per warmup/measured iteration, then requires that iteration's directory and verifies the exported-value sum.
-- **`import_100_small_esm`**: stages 100 unique tiny ESM files per warmup/measured iteration, then dynamic-imports that iteration's directory and verifies the exported-value sum.
-- **`import_npm_package`**: dynamic-imports `zod@4.3.6` from the workspace `node_modules` tree mounted read-only in the guest. The inspected static ESM graph from `index.js` contains 76 transitive module files. The benchmark uses one fresh Node process per measured iteration so the whole graph reloads instead of only cache-busting the entry URL.
-- **`import_fresh_file`**: moved from `fs/module_import_fresh`; writes a unique `.mjs` file, dynamic-imports it, verifies the exported value, and unlinks it.
-
-## Ecosystem Family
-
-`BENCH_FAMILIES=ecosystem pnpm --dir packages/benchmarks bench:matrix` runs end-to-end command workloads through two lanes:
-
-- **`hostCmd`**: real host binaries via `child_process`.
-- **`vmCmd`**: the same command in the VM through the WASM command tier.
-
-Rows:
-
-- **`ls_100`**: `ls -1` over a 100-file directory.
-- **`sh_pipeline`**: `sh -c "ls -1 | grep -c ."` over the 100-file directory.
-- **`cd_tmp_pwd`**: `sh -c "cd /tmp && pwd"` with `/tmp` verification.
-- **`echo_hello`**: `echo` emits a known line.
-- **`cat_small` / `cat_big`**: `cat` emits exact 4 KiB and 1 MiB fixture contents.
-- **`grep_small` / `grep_big`**: `grep -l needle` over 32-file and 1000-file fixtures with known match counts.
-- **`sed_substitution`**: `sed` replaces every known token in a fixture.
-- **`find_1000`**: `find` walks a 1000-file tree and verifies the file count.
-- **`tar_small` / `tar_big`**: `tar` creates, extracts, diffs a sentinel file, and lists 32-file and 128-file archives.
-- **`gzip_small` / `gzip_big`**: `gzip` compresses/decompresses 4 KiB and 64 KiB fixtures, then diffs the round trip.
-- **`jq_extract`**: `jq` extracts a known JSON field.
-- **`git_init_commit`**: `git init && git add . && git commit`, then verifies `rev-parse HEAD`.
-
-Run only the cold-start matrix:
-
-```bash
-SECURE_EXEC_SIDECAR_BIN="$PWD/target/release/secure-exec-sidecar" \
-	pnpm --silent --dir packages/benchmarks bench:coldstart \
-	> packages/benchmarks/results/coldstart-local.json \
-	2> packages/benchmarks/results/coldstart-local.log
-```
-
-Quick smoke run:
-
-```bash
-BENCH_BATCH_SIZES=1 \
-BENCH_ITERATIONS=1 \
-BENCH_WARMUP=0 \
-BENCH_SCENARIOS=owned-sidecar,shared-sidecar,resident-runner \
-SECURE_EXEC_SIDECAR_BIN="$PWD/target/release/secure-exec-sidecar" \
-	pnpm --silent --dir packages/benchmarks bench:coldstart
-```
-
-Useful knobs:
-
-```text
-BENCH_BATCH_SIZES=1,10,50,100,200
-BENCH_ITERATIONS=5
-BENCH_WARMUP=1
-BENCH_SCENARIOS=owned-sidecar,shared-sidecar,resident-runner
-BENCH_MAX_LIVE_RUNTIMES=8
-BENCH_MAX_RESIDENT_RUNNERS=1
-BENCH_EXEC_TIMEOUT_MS=30000
-SECURE_EXEC_SIDECAR_BIN=/abs/path/to/secure-exec-sidecar
-```
-
-## Checked-In Results
-
-Current captured results:
-
-- `results/coldstart-final.json`
-- `results/coldstart-final.log`
-- `results/coldstart-resident-full-matrix-20260619.json`
-- `results/coldstart-resident-full-matrix-20260619.log`
-
-`coldstart-final.*` is the latest full run from June 19, 2026. It includes the three SDK scenarios above. It also contains an `isolate-only` reference row from a lower-level one-off V8 snapshot/restore benchmark; that row is captured for comparison but is not part of the normal SDK benchmark command.
diff --git a/packages/benchmarks/bench-utils.ts b/packages/benchmarks/bench-utils.ts
deleted file mode 100644
index 2ece70f62..000000000
--- a/packages/benchmarks/bench-utils.ts
+++ /dev/null
@@ -1,215 +0,0 @@
-/**
- * Shared utilities for the Secure Exec cold-start, warm-start, and memory
- * benchmarks.
- */
-
-import { readFileSync } from "node:fs";
-import os from "node:os";
-import {
-	NodeRuntime,
-	SidecarProcess,
-	type NodeRuntimeBootTiming,
-	type NodeRuntimeCreateOptions,
-} from "@secure-exec/core";
-
-function numList(envVar: string, fallback: number[]): number[] {
-	const raw = process.env[envVar];
-	if (!raw) return fallback;
-	return raw
-		.split(",")
-		.map((s) => Number(s.trim()))
-		.filter((n) => Number.isFinite(n) && n > 0);
-}
-
-export function num(envVar: string, fallback: number): number {
-	const raw = process.env[envVar];
-	if (raw === undefined) return fallback;
-	const n = Number(raw);
-	return Number.isFinite(n) && n >= 0 ? n : fallback;
-}
-
-export const BATCH_SIZES = numList("BENCH_BATCH_SIZES", [1, 10, 50, 100, 200]);
-export const ITERATIONS = num("BENCH_ITERATIONS", 5);
-export const WARMUP_ITERATIONS = num("BENCH_WARMUP", 1);
-export const MEMORY_ITERATIONS = num("BENCH_MEMORY_ITERATIONS", 5);
-
-export const TRIVIAL_CODE = "export const x = 1;";
-export const RESIDENT_TRIVIAL_CODE =
-	"globalThis.__benchValue = (globalThis.__benchValue ?? 0) + 1;";
-
-export const MAX_CONCURRENCY = Math.max(1, os.availableParallelism() - 4);
-export const MAX_LIVE_RUNTIMES = Math.max(
-	1,
-	num("BENCH_MAX_LIVE_RUNTIMES", Math.min(8, MAX_CONCURRENCY)),
-);
-export const MAX_RESIDENT_RUNNERS = Math.max(
-	1,
-	num("BENCH_MAX_RESIDENT_RUNNERS", 1),
-);
-export const EXEC_TIMEOUT_MS = Math.max(
-	1,
-	num("BENCH_EXEC_TIMEOUT_MS", 30_000),
-);
-
-export type BenchScenario =
-	| "owned-sidecar"
-	| "shared-sidecar"
-	| "resident-runner";
-
-export const SCENARIOS: BenchScenario[] = (
-	process.env.BENCH_SCENARIOS?.split(",").map((s) => s.trim()) ?? [
-		"owned-sidecar",
-		"shared-sidecar",
-		"resident-runner",
-	]
-).filter((s): s is BenchScenario =>
-	["owned-sidecar", "shared-sidecar", "resident-runner"].includes(s),
-);
-
-export async function createBenchRuntime(
-	options: Pick<NodeRuntimeCreateOptions, "sidecar" | "onBootTiming"> = {},
-): Promise<NodeRuntime> {
-	return NodeRuntime.create(options);
-}
-
-export function createBenchSidecar(): SidecarProcess {
-	return SidecarProcess.spawn();
-}
-
-export function percentile(sorted: number[], p: number): number {
-	if (sorted.length === 0) return Number.NaN;
-	const idx = Math.ceil((p / 100) * sorted.length) - 1;
-	return sorted[Math.max(0, idx)];
-}
-
-export function stats(samples: number[]) {
-	const sorted = [...samples].sort((a, b) => a - b);
-	const mean = samples.reduce((a, b) => a + b, 0) / samples.length;
-	return {
-		samples: samples.length,
-		mean: round(mean),
-		p50: round(percentile(sorted, 50)),
-		p95: round(percentile(sorted, 95)),
-		p99: round(percentile(sorted, 99)),
-		min: round(sorted[0]),
-		max: round(sorted[sorted.length - 1]),
-	};
-}
-
-export function round(n: number, decimals = 2): number {
-	const f = 10 ** decimals;
-	return Math.round(n * f) / f;
-}
-
-export function formatBytes(bytes: number): string {
-	if (Math.abs(bytes) < 1024) return `${bytes} B`;
-	const mb = bytes / (1024 * 1024);
-	return `${round(mb, 2)} MB`;
-}
-
-function readMemInfo(): Record<string, string> {
-	try {
-		const entries = readFileSync("/proc/meminfo", "utf8")
-			.trim()
-			.split("\n")
-			.map((line) => {
-				const [key, value] = line.split(":");
-				return [key, value.trim()] as const;
-			});
-		return Object.fromEntries(entries);
-	} catch {
-		return {};
-	}
-}
-
-export function getHardware() {
-	const cpus = os.cpus();
-	const memInfo = readMemInfo();
-	return {
-		cpu: cpus[0]?.model ?? "unknown",
-		cores: os.availableParallelism(),
-		ram: `${round(os.totalmem() / 1024 ** 3, 1)} GB`,
-		memAvailable: memInfo.MemAvailable,
-		swapTotal: memInfo.SwapTotal,
-		swapFree: memInfo.SwapFree,
-		swapCached: memInfo.SwapCached,
-		node: process.version,
-		os: `${os.type()} ${os.release()}`,
-		arch: os.arch(),
-		loadAverage: os.loadavg().map((n) => round(n, 2)),
-	};
-}
-
-export function forceGC() {
-	if (global.gc) {
-		global.gc();
-	} else {
-		console.error("WARNING: global.gc not available. Run with --expose-gc");
-	}
-}
-
-export async function sleep(ms: number): Promise<void> {
-	return new Promise((r) => setTimeout(r, ms));
-}
-
-export type PhaseSamples = Record<string, number[]>;
-
-export function createBootTimingRecorder(phases: PhaseSamples) {
-	return (timing: NodeRuntimeBootTiming) => {
-		(phases[timing.phase] ??= []).push(timing.durationMs);
-	};
-}
-
-export function mergePhaseSamples(target: PhaseSamples, source: PhaseSamples) {
-	for (const [phase, samples] of Object.entries(source)) {
-		(target[phase] ??= []).push(...samples);
-	}
-}
-
-export function summarizePhases(phases: PhaseSamples) {
-	return Object.fromEntries(
-		Object.entries(phases).map(([phase, samples]) => [phase, stats(samples)]),
-	);
-}
-
-export async function runLimited<T>(
-	count: number,
-	concurrency: number,
-	fn: (index: number) => Promise<T>,
-): Promise<T[]> {
-	const results: T[] = new Array(count);
-	let next = 0;
-	const workers = Array.from(
-		{ length: Math.min(count, Math.max(1, concurrency)) },
-		async () => {
-			for (;;) {
-				const index = next++;
-				if (index >= count) return;
-				results[index] = await fn(index);
-			}
-		},
-	);
-	await Promise.all(workers);
-	return results;
-}
-
-/** Print a table to stderr for human readability. */
-export function printTable(
-	headers: string[],
-	rows: (string | number)[][],
-): void {
-	const widths = headers.map((h, i) =>
-		Math.max(h.length, ...rows.map((r) => String(r[i]).length)),
-	);
-	const sep = widths.map((w) => "-".repeat(w)).join(" | ");
-	const fmt = (row: (string | number)[]) =>
-		row.map((c, i) => String(c).padStart(widths[i])).join(" | ");
-
-	console.error("");
-	console.error(fmt(headers));
-	console.error(sep);
-	for (const row of rows) {
-		console.error(fmt(row));
-	}
-	console.error("");
-}
diff --git a/packages/benchmarks/coldstart.bench.ts b/packages/benchmarks/coldstart.bench.ts
deleted file mode 100644
index 81c976340..000000000
--- a/packages/benchmarks/coldstart.bench.ts
+++ /dev/null
@@ -1,316 +0,0 @@
-/**
- * Cold-start, sidecar-reuse, and resident-runner latency benchmark for the
- * Secure Exec runtime.
- *
- * Scenarios:
- *   - owned-sidecar: `NodeRuntime.create()` owns a fresh sidecar per runtime.
- *   - shared-sidecar: one `Sidecar` is created outside the measurement and
- *     passed to `NodeRuntime.create({ sidecar })`.
- *   - resident-runner: one shared sidecar plus a live guest Node process reused
- *     through `runtime.createResidentRunner()`.
- */
-
-import {
-	BATCH_SIZES,
-	type BenchScenario,
-	createBenchRuntime,
-	createBenchSidecar,
-	createBootTimingRecorder,
-	EXEC_TIMEOUT_MS,
-	getHardware,
-	ITERATIONS,
-	MAX_CONCURRENCY,
-	MAX_LIVE_RUNTIMES,
-	MAX_RESIDENT_RUNNERS,
-	mergePhaseSamples,
-	type PhaseSamples,
-	printTable,
-	RESIDENT_TRIVIAL_CODE,
-	SCENARIOS,
-	stats,
-	summarizePhases,
-	TRIVIAL_CODE,
-	WARMUP_ITERATIONS,
-} from "./bench-utils.js";
-
-type BenchMode = "sequential" | "concurrent";
-
-interface Measurement {
-	coldMs: number;
-	warmMs: number;
-	phases: PhaseSamples;
-}
-
-interface ColdStartEntry {
-	scenario: BenchScenario;
-	batchSize: number;
-	mode: BenchMode;
-	iterations: number;
-	sidecarSetupMs?: ReturnType<typeof stats>;
-	coldStart: ReturnType<typeof stats>;
-	warmStart: ReturnType<typeof stats>;
-	phases: ReturnType<typeof summarizePhases>;
-}
-
-async function measureRuntime(sidecar?: ReturnType<typeof createBenchSidecar>) {
-	const phases: PhaseSamples = {};
-	const t0 = performance.now();
-	const runtime = await createBenchRuntime({
-		...(sidecar ? { sidecar } : {}),
-		onBootTiming: createBootTimingRecorder(phases),
-	});
-	(phases.runtime_create_total ??= []).push(performance.now() - t0);
-	return { runtime, phases };
-}
-
-async function measureExecPair(
-	sidecar?: ReturnType<typeof createBenchSidecar>,
-): Promise<Measurement> {
-	const { runtime, phases } = await measureRuntime(sidecar);
-	try {
-		const firstStart = performance.now();
-		await runtime.exec(TRIVIAL_CODE, { timeout: EXEC_TIMEOUT_MS });
-		const firstMs = performance.now() - firstStart;
-		(phases.first_exec ??= []).push(firstMs);
-
-		const warmStart = performance.now();
-		await runtime.exec(TRIVIAL_CODE, { timeout: EXEC_TIMEOUT_MS });
-		const warmMs = performance.now() - warmStart;
-		(phases.warm_exec ??= []).push(warmMs);
-
-		return {
-			coldMs:
-				(phases.runtime_create_total?.at(-1) ?? 0) + firstMs,
-			warmMs,
-			phases,
-		};
-	} finally {
-		await runtime.dispose();
-	}
-}
-
-async function measureResidentPair(
-	sidecar: ReturnType<typeof createBenchSidecar>,
-): Promise<Measurement> {
-	const { runtime, phases } = await measureRuntime(sidecar);
-	try {
-		const runnerStart = performance.now();
-		const runner = await runtime.createResidentRunner();
-		const runnerCreateMs = performance.now() - runnerStart;
-		(phases.resident_runner_create ??= []).push(runnerCreateMs);
-
-		try {
-			const firstStart = performance.now();
-			await runner.exec(RESIDENT_TRIVIAL_CODE, { timeout: EXEC_TIMEOUT_MS });
-			const firstMs = performance.now() - firstStart;
-			(phases.resident_first_exec ??= []).push(firstMs);
-
-			const warmStart = performance.now();
-			await runner.exec(RESIDENT_TRIVIAL_CODE, { timeout: EXEC_TIMEOUT_MS });
-			const warmMs = performance.now() - warmStart;
-			(phases.resident_warm_exec ??= []).push(warmMs);
-
-			return {
-				coldMs:
-					(phases.runtime_create_total?.at(-1) ?? 0) +
-					runnerCreateMs +
-					firstMs,
-				warmMs,
-				phases,
-			};
-		} finally {
-			await runner.dispose();
-		}
-	} finally {
-		await runtime.dispose();
-	}
-}
-
-function appendMeasurements(
-	target: {
-		coldSamples: number[];
-		warmSamples: number[];
-		phaseSamples: PhaseSamples;
-	},
-	measurements: Measurement[],
-) {
-	for (const measurement of measurements) {
-		target.coldSamples.push(measurement.coldMs);
-		target.warmSamples.push(measurement.warmMs);
-		mergePhaseSamples(target.phaseSamples, measurement.phases);
-	}
-}
-
-async function collectBatch(
-	scenario: BenchScenario,
-	batchSize: number,
-	mode: BenchMode,
-): Promise<{
-	measurements: Measurement[];
-	sidecarSetupMs?: number;
-}> {
-	if (scenario === "owned-sidecar") {
-		const concurrency =
-			mode === "sequential" ? 1 : Math.min(batchSize, MAX_LIVE_RUNTIMES);
-		return {
-			measurements: await runScenarioBatch(batchSize, concurrency, () =>
-				measureExecPair(),
-			),
-		};
-	}
-
-	const sidecarStart = performance.now();
-	const sidecar = createBenchSidecar();
-	const sidecarSetupMs = performance.now() - sidecarStart;
-	try {
-		const concurrency =
-			scenario === "resident-runner"
-				? mode === "sequential"
-					? 1
-					: Math.min(batchSize, MAX_RESIDENT_RUNNERS)
-				: mode === "sequential"
-					? 1
-					: Math.min(batchSize, MAX_LIVE_RUNTIMES);
-		const measure =
-			scenario === "resident-runner"
-				? () => measureResidentPair(sidecar)
-				: () => measureExecPair(sidecar);
-		return {
-			measurements: await runScenarioBatch(batchSize, concurrency, measure),
-			sidecarSetupMs,
-		};
-	} finally {
-		await sidecar.dispose();
-	}
-}
-
-async function runScenarioBatch(
-	batchSize: number,
-	concurrency: number,
-	measure: () => Promise<Measurement>,
-) {
-	const { runLimited } = await import("./bench-utils.js");
-	return runLimited(batchSize, concurrency, measure);
-}
-
-async function benchScenario(
-	scenario: BenchScenario,
-	batchSize: number,
-	mode: BenchMode,
-): Promise<ColdStartEntry> {
-	const coldSamples: number[] = [];
-	const warmSamples: number[] = [];
-	const sidecarSetupSamples: number[] = [];
-	const phaseSamples: PhaseSamples = {};
-
-	for (let iter = 0; iter < WARMUP_ITERATIONS + ITERATIONS; iter++) {
-		const batch = await collectBatch(scenario, batchSize, mode);
-		if (iter >= WARMUP_ITERATIONS) {
-			appendMeasurements(
-				{ coldSamples, warmSamples, phaseSamples },
-				batch.measurements,
-			);
-			if (batch.sidecarSetupMs !== undefined) {
-				sidecarSetupSamples.push(batch.sidecarSetupMs);
-			}
-		}
-	}
-
-	return {
-		scenario,
-		batchSize,
-		mode,
-		iterations: ITERATIONS,
-		...(sidecarSetupSamples.length > 0
-			? { sidecarSetupMs: stats(sidecarSetupSamples) }
-			: {}),
-		coldStart: stats(coldSamples),
-		warmStart: stats(warmSamples),
-		phases: summarizePhases(phaseSamples),
-	};
-}
-
-function formatPhaseSummary(phases: ColdStartEntry["phases"]): string {
-	return Object.entries(phases)
-		.map(([phase, phaseStats]) => `${phase}.p50=${phaseStats.p50}ms`)
-		.join(" | ");
-}
-
-async function main() {
-	const hardware = getHardware();
-	console.error("=== Cold Start Benchmark ===");
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(
-		`Cores: ${hardware.cores} | Max concurrency: ${MAX_CONCURRENCY} | Max live runtimes: ${MAX_LIVE_RUNTIMES}`,
-	);
-	console.error(`Resident runner live cap: ${MAX_RESIDENT_RUNNERS}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(`Loadavg: ${hardware.loadAverage.join(", ")}`);
-	console.error(
-		`MemAvailable: ${hardware.memAvailable ?? "unknown"} | SwapFree: ${hardware.swapFree ?? "unknown"} | SwapCached: ${hardware.swapCached ?? "unknown"}`,
-	);
-	console.error(`Iterations: ${ITERATIONS} (+ ${WARMUP_ITERATIONS} warmup)`);
-	console.error(`Batch sizes: ${BATCH_SIZES.join(", ")}`);
-	console.error(`Scenarios: ${SCENARIOS.join(", ")}`);
-	console.error(
-		`Sidecar: ${process.env.SECURE_EXEC_SIDECAR_BIN ?? "(resolved from @secure-exec/sidecar)"}\n`,
-	);
-
-	const results: ColdStartEntry[] = [];
-
-	for (const scenario of SCENARIOS) {
-		for (const batchSize of BATCH_SIZES) {
-			for (const mode of ["sequential", "concurrent"] as const) {
-				console.error(
-					`\n--- scenario=${scenario}, batch=${batchSize}, mode=${mode} ---`,
-				);
-				const entry = await benchScenario(scenario, batchSize, mode);
-				results.push(entry);
-				console.error(
-					`  cold: mean=${entry.coldStart.mean}ms p50=${entry.coldStart.p50}ms p95=${entry.coldStart.p95}ms`,
-				);
-				console.error(
-					`  warm: mean=${entry.warmStart.mean}ms p50=${entry.warmStart.p50}ms p95=${entry.warmStart.p95}ms`,
-				);
-				console.error(`  phases: ${formatPhaseSummary(entry.phases)}`);
-				if (entry.sidecarSetupMs) {
-					console.error(
-						`  sidecar setup excluded: p50=${entry.sidecarSetupMs.p50}ms p95=${entry.sidecarSetupMs.p95}ms`,
-					);
-				}
-			}
-		}
-	}
-
-	printTable(
-		[
-			"scenario",
-			"batch",
-			"mode",
-			"cold mean",
-			"cold p50",
-			"cold p95",
-			"warm mean",
-			"warm p50",
-			"warm p95",
-		],
-		results.map((r) => [
-			r.scenario,
-			r.batchSize,
-			r.mode,
-			`${r.coldStart.mean}ms`,
-			`${r.coldStart.p50}ms`,
-			`${r.coldStart.p95}ms`,
-			`${r.warmStart.mean}ms`,
-			`${r.warmStart.p50}ms`,
-			`${r.warmStart.p95}ms`,
-		]),
-	);
-
-	console.log(JSON.stringify({ hardware, scenarioSetup: {}, results }, null, 2));
-}
-
-main().catch((err) => {
-	console.error(err);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/coldstart.json b/packages/benchmarks/coldstart.json
deleted file mode 100644
index e69de29bb..000000000
diff --git a/packages/benchmarks/coldstart.log b/packages/benchmarks/coldstart.log
deleted file mode 100644
index 2d31ad90c..000000000
--- a/packages/benchmarks/coldstart.log
+++ /dev/null
@@ -1,26 +0,0 @@
-=== Cold Start Benchmark ===
-CPU: 12th Gen Intel(R) Core(TM) i7-12700KF
-Cores: 20 | Max concurrency: 16
-RAM: 62.6 GB | Node: v24.13.0
-Iterations: 5 (+ 1 warmup)
-Batch sizes: 1, 10, 50, 100, 200
-Sidecar: /home/nathan/secure-exec/target/release/secure-exec-sidecar
-
-
---- batch=1, mode=sequential ---
-  cold: mean=818.55ms p50=801.4ms p95=885.79ms
-  warm: mean=493.46ms p50=455.56ms p95=650.95ms
-
---- batch=1, mode=concurrent ---
-  cold: mean=786.14ms p50=784.62ms p95=798.17ms
-  warm: mean=461.89ms p50=461.66ms p95=477.25ms
-
---- batch=10, mode=sequential ---
-  cold: mean=794.92ms p50=792.27ms p95=820.59ms
-  warm: mean=457.83ms p50=455.66ms p95=475.34ms
-
---- batch=10, mode=concurrent ---
-  cold: mean=1193.37ms p50=1172.91ms p95=1390.81ms
-  warm: mean=477.8ms p50=475.18ms p95=515.5ms
-
---- batch=50, mode=sequential ---
diff --git a/packages/benchmarks/fixtures/tls-loopback-cert.pem b/packages/benchmarks/fixtures/tls-loopback-cert.pem
deleted file mode 100644
index 70f89bf79..000000000
--- a/packages/benchmarks/fixtures/tls-loopback-cert.pem
+++ /dev/null
@@ -1,19 +0,0 @@
------BEGIN CERTIFICATE-----
-MIIDCTCCAfGgAwIBAgIUJqRgTEIlpbfqbQnyo9hxLyIn3qYwDQYJKoZIhvcNAQEL
-BQAwFDESMBAGA1UEAwwJbG9jYWxob3N0MB4XDTI2MDQwNTA3MTAwOVoXDTI2MDQw
-NjA3MTAwOVowFDESMBAGA1UEAwwJbG9jYWxob3N0MIIBIjANBgkqhkiG9w0BAQEF
-AAOCAQ8AMIIBCgKCAQEApbxE8x30sndWPrIwnxpLshsRTM8EJWI1KxNIsHTBe++C
-2BxXab7RKN7Czluv29cX10v+eY6vmoIMUr/r4LY64Rn/8t9183a48XFQUViLIALc
-TB7DSjuBEP7gNYOs5W2kiLvmVl925A7k4iuOVVuvTNF0lcr/FxRmDnH/C0yPO4E7
-Vx7k/dono++yDNpR6i1ws0Fa/jUPcr15Xfch5QNmX2KoZEky3Q2m5an4Iq60CM2c
-y8qUhkMGVFNOpwrWfnYOkjVeExi+DanpA410dwb5mbuZeLBgLDXxVYy8eocbC7fL
-qp+ubAgMAQ3X7nEft/fqRwPnrI+jQFgBTifQgfeLHwIDAQABo1MwUTAdBgNVHQ4E
-FgQUwViZyKE6S2vgTAkexnZFccSwoPMwHwYDVR0jBBgwFoAUwViZyKE6S2vgTAke
-xnZFccSwoPMwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG9w0BAQsFAAOCAQEAadmK
-3Ugrvep6glHAfgPP54um9cjJZQZDPn5I7yvgDr/Zp/u/UMW/OUKSfL1VNHlbAVLc
-Yzq2RVTrJKObiTSoy99OzYkEdgfuEBBP7XBEQlqoOGYNRR+IZXBBiQ+m9CtajNwQ
-G6mr9//zZtV1y2UUBgtxVpry5iOekpkr8iXyDLnGpS2gKL5dwXCzWCKVCO3qVotn
-r6FBg4DCBMkwO6xOVN2yInPd6CPy/JAUPW50zWPnn4DKfeAAU0C+E75HN65jozdi
-12yT4K772P8oSecGPInZhqJgOv1q0BDG8gccOxX1PA4sE00Enqlbvxz7sku9y4zp
-ykAheWCsAteSEWVc0w==
------END CERTIFICATE-----
diff --git a/packages/benchmarks/fixtures/tls-loopback-key.pem b/packages/benchmarks/fixtures/tls-loopback-key.pem
deleted file mode 100644
index d23659a66..000000000
--- a/packages/benchmarks/fixtures/tls-loopback-key.pem
+++ /dev/null
@@ -1,28 +0,0 @@
------BEGIN PRIVATE KEY-----
-MIIEvgIBADANBgkqhkiG9w0BAQEFAASCBKgwggSkAgEAAoIBAQClvETzHfSyd1Y+
-sjCfGkuyGxFMzwQlYjUrE0iwdMF774LYHFdpvtEo3sLOW6/b1xfXS/55jq+aggxS
-v+vgtjrhGf/y33XzdrjxcVBRWIsgAtxMHsNKO4EQ/uA1g6zlbaSIu+ZWX3bkDuTi
-K45VW69M0XSVyv8XFGYOcf8LTI87gTtXHuT92iej77IM2lHqLXCzQVr+NQ9yvXld
-9yHlA2ZfYqhkSTLdDablqfgirrQIzZzLypSGQwZUU06nCtZ+dg6SNV4TGL4NqekD
-jXR3BvmZu5l4sGAsNfFVjLx6hxsLt8uqn65sCAwBDdfucR+39+pHA+esj6NAWAFO
-J9CB94sfAgMBAAECggEABQTA772x+a98aJSbvU2eCiwgp3tDTGB/bKj+U/2NGFQl
-2aZuDTEugzbPnlEPb7BBNA9EiujDr4GNnvnZyimqecOASRn0J+Wp7wG35Waxe8wq
-YJGz5y0LGPkmz+gHVcEusMdDz8y/PGOpEaIxAquukLxs89Y8SDYhawGPsAdm9O3F
-4a+aosyQwS26mkZ/1WZOTsOVd4A1/1pxBvsANURj+pq7ed/1WqgrZBN/BG1TX5Xm
-DZeYy01kTCMWtcAb4f8PxGpbkSGMvBb+Mj5XtZByvfQeC+Cs5ECXhmJtVaYVUHhT
-vI0oTMGvit9ffoYNds0qTeZpEeineaDH3sD16D037QKBgQDX5b65KfIVH0/WvcbJ
-Gx2Wh7knXdDBky40wdq4buKK+ImzPPRxOsQ+xEMgEaZs8gb7LBapbB0cZ+YsKBOt
-4FY86XQU5V5ju2ntldIIIaugIGgvGS0jdRMH3ux6iEjPZE6Fm7/s8bjIgqB7keWh
-1rcZwDrwMzqwAUoBTJX58OY/fQKBgQDEhT5U7TqgEFVSspYh8c8yVRV9udiphPH3
-3XIbo9iV3xzNFdwtNHC+2eLM+4J3WKjhB0UvzrlIegSqKPIsy+0nD1uzaU+O72gg
-7+NKSh0RT61UDolk+P4s/2+5tnZqSNYO7Sd/svE/rkwIEtDEI5tb1nqq75h/HDEW
-k56GHAxvywKBgGmGmTdmIjZizKJYti4b+9VU15I/T8ceCmqtChw1zrNAkgWy2IPz
-xnIreefV2LPNhM4GGbmL55q3yhBxMlU9nsk9DokcJ4u10ivXnAZvdrTYwjOrKZ34
-HmotcwbdUEFWdO7nVuMYr0oKVyivAj+ddHe4ttYrJBddOe/yoCe/sLr9AoGBAKHL
-IVpCRXXqfJStOzWPI4rIyfzMuTg3oA71XjCrYHFjUw715GPDPN+j+znQB8XCVKeP
-mMKXa6vj6Vs+gsOm0QTLfC/lj/6Z1Bzp4zMSeYP7GTSPE0bySDE7y/wV4L/4X2PC
-lDZqWHyZPzeWZhJVTl754dxBjkd4KmHv/x9ikEqpAoGBAJNA0u0fKhdWDz32+a2F
-+plJ18kQvGuwKFWIIVHBDc0wCxLKWKr5wgkhdcAEpy4mgosiZ09DzV/OpQBBHVWZ
-v/Cn/DwZyoiXIi5onf7AqWIhw+aem+oMbugbSIYqDwYkwnN79tsza0KC1ScphIuf
-vKoOAdY4xOcG9BEZZoKVOa8R
------END PRIVATE KEY-----
diff --git a/packages/benchmarks/memory.bench.ts b/packages/benchmarks/memory.bench.ts
deleted file mode 100644
index 0f32af6b7..000000000
--- a/packages/benchmarks/memory.bench.ts
+++ /dev/null
@@ -1,160 +0,0 @@
-/**
- * Memory overhead benchmark for the Secure Exec runtime.
- *
- * Measures incremental host-process RSS per live runtime by booting N runtimes
- * via the public `secure-exec` SDK, sampling memory, then tearing them down.
- *
- * Each `NodeRuntime.create()` boots an out-of-process sidecar VM, so the bulk
- * of a runtime's memory lives in the sidecar child process, not this Node
- * process. The RSS delta measured here is the host-side bookkeeping per live
- * runtime (client state, frame buffers, IPC). The "teardown reclaimed" figure
- * shows how much of that host-side RSS `dispose()` returns.
- *
- * Usage:
- *   SECURE_EXEC_SIDECAR_BIN=/path/to/secure-exec-sidecar \
- *     node --expose-gc --import tsx/esm memory.bench.ts
- */
-
-import type { NodeRuntime } from "@secure-exec/core";
-import {
-	BATCH_SIZES,
-	createBenchRuntime,
-	forceGC,
-	formatBytes,
-	getHardware,
-	MAX_CONCURRENCY,
-	MEMORY_ITERATIONS,
-	printTable,
-	sleep,
-	TRIVIAL_CODE,
-} from "./bench-utils.js";
-
-interface MemoryEntry {
-	batchSize: number;
-	totalDeltaRssBytes: number;
-	totalDeltaHeapBytes: number;
-	perRuntimeRssBytes: number;
-	perRuntimeHeapBytes: number;
-	teardownReclaimedRssBytes: number;
-}
-
-async function measureBatch(batchSize: number): Promise<MemoryEntry> {
-	const rssSamples: number[] = [];
-	const heapSamples: number[] = [];
-	const reclaimSamples: number[] = [];
-
-	for (let iter = 0; iter < MEMORY_ITERATIONS; iter++) {
-		// Baseline: multiple GC passes to flush incremental/concurrent phases.
-		forceGC();
-		forceGC();
-		await sleep(50);
-		const baseline = process.memoryUsage();
-
-		// Create and initialize runtimes, in chunks up to MAX_CONCURRENCY.
-		const runtimes: NodeRuntime[] = [];
-		let remaining = batchSize;
-
-		while (remaining > 0) {
-			const chunk = Math.min(remaining, MAX_CONCURRENCY);
-			const batch = await Promise.all(
-				Array.from({ length: chunk }, async () => {
-					const rt = await createBenchRuntime();
-					await rt.exec(TRIVIAL_CODE);
-					return rt;
-				}),
-			);
-			runtimes.push(...batch);
-			remaining -= chunk;
-		}
-
-		// Measure after init.
-		forceGC();
-		forceGC();
-		await sleep(50);
-		const afterInit = process.memoryUsage();
-
-		rssSamples.push(afterInit.rss - baseline.rss);
-		heapSamples.push(afterInit.heapUsed - baseline.heapUsed);
-
-		// Teardown.
-		await Promise.all(runtimes.map((rt) => rt.dispose()));
-		forceGC();
-		forceGC();
-		await sleep(50);
-		const afterTeardown = process.memoryUsage();
-
-		reclaimSamples.push(afterInit.rss - afterTeardown.rss);
-	}
-
-	const avg = (xs: number[]) => xs.reduce((a, b) => a + b, 0) / xs.length;
-	const avgRss = avg(rssSamples);
-	const avgHeap = avg(heapSamples);
-	const avgReclaim = avg(reclaimSamples);
-
-	return {
-		batchSize,
-		totalDeltaRssBytes: Math.round(avgRss),
-		totalDeltaHeapBytes: Math.round(avgHeap),
-		perRuntimeRssBytes: Math.round(avgRss / batchSize),
-		perRuntimeHeapBytes: Math.round(avgHeap / batchSize),
-		teardownReclaimedRssBytes: Math.round(avgReclaim),
-	};
-}
-
-async function main() {
-	if (!global.gc) {
-		console.error(
-			"ERROR: Run with --expose-gc flag\n" +
-				"  node --expose-gc --import tsx/esm memory.bench.ts",
-		);
-		process.exit(1);
-	}
-
-	const hardware = getHardware();
-	console.error("=== Memory Overhead Benchmark ===");
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(`Iterations per batch: ${MEMORY_ITERATIONS}`);
-	console.error(`Batch sizes: ${BATCH_SIZES.join(", ")}`);
-	console.error(
-		`Sidecar: ${process.env.SECURE_EXEC_SIDECAR_BIN ?? "(resolved from @secure-exec/sidecar)"}\n`,
-	);
-
-	const results: MemoryEntry[] = [];
-
-	for (const batchSize of BATCH_SIZES) {
-		console.error(`\n--- batch=${batchSize} ---`);
-		const entry = await measureBatch(batchSize);
-		results.push(entry);
-		console.error(
-			`  total RSS delta: ${formatBytes(entry.totalDeltaRssBytes)}`,
-		);
-		console.error(
-			`  per-runtime RSS: ${formatBytes(entry.perRuntimeRssBytes)}`,
-		);
-		console.error(
-			`  per-runtime heap: ${formatBytes(entry.perRuntimeHeapBytes)}`,
-		);
-		console.error(
-			`  teardown reclaimed: ${formatBytes(entry.teardownReclaimedRssBytes)}`,
-		);
-	}
-
-	printTable(
-		["batch", "total RSS", "per-rt RSS", "per-rt heap", "reclaimed"],
-		results.map((r) => [
-			r.batchSize,
-			formatBytes(r.totalDeltaRssBytes),
-			formatBytes(r.perRuntimeRssBytes),
-			formatBytes(r.perRuntimeHeapBytes),
-			formatBytes(r.teardownReclaimedRssBytes),
-		]),
-	);
-
-	console.log(JSON.stringify({ hardware, results }, null, 2));
-}
-
-main().catch((err) => {
-	console.error(err);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/package.json b/packages/benchmarks/package.json
deleted file mode 100644
index 22107dfa4..000000000
--- a/packages/benchmarks/package.json
+++ /dev/null
@@ -1,23 +0,0 @@
-{
-	"name": "@secure-exec/benchmarks",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"bench": "./run-benchmarks.sh",
-		"bench:coldstart": "tsx coldstart.bench.ts",
-		"bench:baseline": "tsx src/baseline.ts",
-		"bench:check": "tsx src/check-native-ops.ts",
-		"bench:gate": "tsx src/quick-gate.ts",
-		"bench:memory": "node --expose-gc --import tsx/esm memory.bench.ts",
-		"bench:matrix": "tsx src/run-all.ts",
-		"check-types": "pnpm --dir ../core build && tsc --noEmit"
-	},
-	"dependencies": {
-		"@secure-exec/core": "workspace:*"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"tsx": "^4.19.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/packages/benchmarks/results/baseline-ci.json b/packages/benchmarks/results/baseline-ci.json
deleted file mode 100644
index 324b32bd8..000000000
--- a/packages/benchmarks/results/baseline-ci.json
+++ /dev/null
@@ -1,2065 +0,0 @@
-{
-  "schemaVersion": 1,
-  "kind": "ci",
-  "generatedAt": "2026-07-02T18:44:18.863-07:00",
-  "hardware": {
-    "cpu": "AMD EPYC 7763 64-Core Processor",
-    "cores": 4,
-    "ram": "15.6 GB",
-    "node": "v22.23.1",
-    "os": "Linux 6.17.0-1018-azure",
-    "arch": "x64"
-  },
-  "sidecar": {
-    "path": "/home/runner/work/secure-exec/secure-exec/target/release/secure-exec-sidecar",
-    "profile": "release",
-    "mtimeMs": 1783042624895.653,
-    "mtimeIso": "2026-07-02T18:37:04.896-07:00",
-    "sizeBytes": 116913456
-  },
-  "engine": {
-    "iterations": 20,
-    "warmup": 5,
-    "cold": false,
-    "sharedVm": false,
-    "rowCount": 82
-  },
-  "rows": [
-    {
-      "key": "process/node_exit",
-      "family": "process",
-      "op": "node_exit",
-      "lanes": {
-        "native": {
-          "p50Ms": 21.37,
-          "memBytes": 131072,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 24.02
-        },
-        "guest": {
-          "p50Ms": 23.59,
-          "memBytes": 30740480,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.98,
-        "total": 1.1,
-        "mem": 234.53
-      }
-    },
-    {
-      "key": "process/node_stdout_discard_2b",
-      "family": "process",
-      "op": "node_stdout_discard_2b",
-      "lanes": {
-        "native": {
-          "p50Ms": 24.28,
-          "memBytes": 131072,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 27.76
-        },
-        "guest": {
-          "p50Ms": 22.36,
-          "memBytes": 30814208,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.81,
-        "total": 0.92,
-        "mem": 235.09
-      }
-    },
-    {
-      "key": "process/exec_capture",
-      "family": "process",
-      "op": "exec_capture",
-      "lanes": {
-        "native": {
-          "p50Ms": 26.1,
-          "memBytes": 212992,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 31.45
-        },
-        "guest": {
-          "p50Ms": 23.87,
-          "memBytes": 30658560,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.76,
-        "total": 0.91,
-        "mem": 143.94
-      }
-    },
-    {
-      "key": "process/node_stdout_listener_only_2b",
-      "family": "process",
-      "op": "node_stdout_listener_only_2b",
-      "lanes": {
-        "native": {
-          "p50Ms": 27.11,
-          "memBytes": 110592,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 31.44
-        },
-        "guest": {
-          "p50Ms": 23.82,
-          "memBytes": 30912512,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.76,
-        "total": 0.88,
-        "mem": 279.52
-      }
-    },
-    {
-      "key": "process/fanout_spawn_8",
-      "family": "process",
-      "op": "fanout_spawn_8",
-      "lanes": {
-        "native": {
-          "p50Ms": 66.43,
-          "memBytes": 167936,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 85
-        },
-        "guest": {
-          "p50Ms": 95.66,
-          "memBytes": 352256000,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.13,
-        "total": 1.44,
-        "mem": 2097.56
-      }
-    },
-    {
-      "key": "process/wait_reap_storm_8",
-      "family": "process",
-      "op": "wait_reap_storm_8",
-      "lanes": {
-        "native": {
-          "p50Ms": 65.21,
-          "memBytes": 167936,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 84.29
-        },
-        "guest": {
-          "p50Ms": 96.19,
-          "memBytes": 334217216,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.14,
-        "total": 1.48,
-        "mem": 1990.15
-      }
-    },
-    {
-      "key": "process/pipe_chain_3",
-      "family": "process",
-      "op": "pipe_chain_3",
-      "lanes": {
-        "native": {
-          "p50Ms": 1.78,
-          "memBytes": 163840,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.35,
-          "memBytes": 11845632,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.1,
-          "memBytes": 22855680,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.29,
-        "total": 0.06,
-        "mem": 139.5
-      }
-    },
-    {
-      "key": "process/spawn_stdout_capture_small",
-      "family": "process",
-      "op": "spawn_stdout_capture_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 26.32,
-          "memBytes": 192512,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 26.61,
-          "memBytes": 11169792,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 36.98,
-          "memBytes": 75120640,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.39,
-        "total": 1.41,
-        "mem": 390.21
-      }
-    },
-    {
-      "key": "process/spawn_stdout_capture_big",
-      "family": "process",
-      "op": "spawn_stdout_capture_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 26.07,
-          "memBytes": 724992,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 28.23,
-          "memBytes": 18849792,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 47.46,
-          "memBytes": 87769088,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.68,
-        "total": 1.82,
-        "mem": 121.06
-      }
-    },
-    {
-      "key": "process/spawn_stdin_roundtrip",
-      "family": "process",
-      "op": "spawn_stdin_roundtrip",
-      "lanes": {
-        "native": {
-          "p50Ms": 26.5,
-          "memBytes": 188416,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 27.97,
-          "memBytes": 11264000,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 45.45,
-          "memBytes": 74862592,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.62,
-        "total": 1.72,
-        "mem": 397.33
-      }
-    },
-    {
-      "key": "net/udp_echo_small",
-      "family": "net",
-      "op": "udp_echo_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.09,
-          "memBytes": 266240,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.14,
-          "memBytes": 5062656,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 1.36,
-          "memBytes": 24588288,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 9.71,
-        "total": 15.11,
-        "mem": 92.35
-      }
-    },
-    {
-      "key": "net/udp_echo_big",
-      "family": "net",
-      "op": "udp_echo_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.1,
-          "memBytes": 446464,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.23,
-          "memBytes": 7819264,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 2.27,
-          "memBytes": 37924864,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 9.87,
-        "total": 22.7,
-        "mem": 84.94
-      }
-    },
-    {
-      "key": "net/unix_echo_small",
-      "family": "net",
-      "op": "unix_echo_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.11,
-          "memBytes": 229376,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.49,
-          "memBytes": 6447104,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 5.62,
-          "memBytes": 24276992,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 11.47,
-        "total": 51.09,
-        "mem": 105.84
-      }
-    },
-    {
-      "key": "net/unix_echo_big",
-      "family": "net",
-      "op": "unix_echo_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.14,
-          "memBytes": 438272,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.58,
-          "memBytes": 9957376,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 6.59,
-          "memBytes": 39628800,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 11.36,
-        "total": 47.07,
-        "mem": 90.42
-      }
-    },
-    {
-      "key": "net/http_loopback_get",
-      "family": "net",
-      "op": "http_loopback_get",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.2,
-          "memBytes": 282624,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.99,
-          "memBytes": 23433216,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 4.98,
-          "memBytes": 30273536,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 5.03,
-        "total": 24.9,
-        "mem": 107.12
-      }
-    },
-    {
-      "key": "net/http_external_get",
-      "family": "net",
-      "op": "http_external_get",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.63
-        },
-        "guest": {
-          "p50Ms": 2.03,
-          "memBytes": 24551424,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 3.22
-      }
-    },
-    {
-      "key": "net/http2_loopback_get",
-      "family": "net",
-      "op": "http2_loopback_get",
-      "lanes": {
-        "node": {
-          "p50Ms": 1.43,
-          "memBytes": 19701760,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 58.24,
-          "memBytes": 25976832,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 40.73
-      }
-    },
-    {
-      "key": "net/fetch_loopback_get",
-      "family": "net",
-      "op": "fetch_loopback_get",
-      "lanes": {
-        "node": {
-          "p50Ms": 1.82,
-          "memBytes": 40415232,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 7.19,
-          "memBytes": 58068992,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 3.95
-      }
-    },
-    {
-      "key": "net/tls_loopback_get",
-      "family": "net",
-      "op": "tls_loopback_get",
-      "lanes": {
-        "node": {
-          "p50Ms": 2.97
-        },
-        "guest": {
-          "p50Ms": 14.1,
-          "memBytes": 35020800,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 4.75
-      }
-    },
-    {
-      "key": "net/tcp_connect_close",
-      "family": "net",
-      "op": "tcp_connect_close",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.14,
-          "memBytes": 266240,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.36,
-          "memBytes": 5976064,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 2.67,
-          "memBytes": 25595904,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 7.42,
-        "total": 19.07,
-        "mem": 96.14
-      }
-    },
-    {
-      "key": "net/tcp_echo_small",
-      "family": "net",
-      "op": "tcp_echo_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.15,
-          "memBytes": 245760,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.55,
-          "memBytes": 6606848,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 5.93,
-          "memBytes": 25935872,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 10.78,
-        "total": 39.53,
-        "mem": 105.53
-      }
-    },
-    {
-      "key": "net/tcp_external_echo",
-      "family": "net",
-      "op": "tcp_external_echo",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.17,
-          "memBytes": 258048,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.33
-        },
-        "guest": {
-          "p50Ms": 1.47,
-          "memBytes": 23343104,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 4.45,
-        "total": 8.65,
-        "mem": 90.46
-      }
-    },
-    {
-      "key": "net/tcp_concurrent_4",
-      "family": "net",
-      "op": "tcp_concurrent_4",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.27,
-          "memBytes": 245760,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 1.2,
-          "memBytes": 12316672,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 9.94,
-          "memBytes": 32567296,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 8.28,
-        "total": 36.81,
-        "mem": 132.52
-      }
-    },
-    {
-      "key": "net/tcp_echo_big",
-      "family": "net",
-      "op": "tcp_echo_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.19,
-          "memBytes": 475136,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.85,
-          "memBytes": 11886592,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 7.15,
-          "memBytes": 39915520,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 8.41,
-        "total": 37.63,
-        "mem": 84.01
-      }
-    },
-    {
-      "key": "net/tcp_tiny_writes_16",
-      "family": "net",
-      "op": "tcp_tiny_writes_16",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.32,
-          "memBytes": 237568,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.62,
-          "memBytes": 6610944,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 5.74,
-          "memBytes": 24469504,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 9.26,
-        "total": 17.94,
-        "mem": 103
-      }
-    },
-    {
-      "key": "fs/open_close_churn",
-      "family": "fs",
-      "op": "open_close_churn",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.18,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.02,
-          "memBytes": 3989504,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.44,
-          "memBytes": 8826880,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 7,
-          "memBytes": 25591808,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 22,
-        "total": 2.44,
-        "wasm": 38.89,
-        "mem": 2155
-      }
-    },
-    {
-      "key": "fs/stat_storm",
-      "family": "fs",
-      "op": "stat_storm",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.17,
-          "memBytes": 32768,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.02,
-          "memBytes": 4022272,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.37,
-          "memBytes": 13864960,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 5,
-          "memBytes": 25317376,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 18.5,
-        "total": 2.18,
-        "wasm": 29.41,
-        "mem": 423.13
-      }
-    },
-    {
-      "key": "fs/fs_write_small",
-      "family": "fs",
-      "op": "fs_write_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.18,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.18,
-          "memBytes": 4042752,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.31,
-          "memBytes": 24264704,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 4,
-          "memBytes": 23920640,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.72,
-        "total": 1.72,
-        "wasm": 22.22,
-        "mem": 5924
-      }
-    },
-    {
-      "key": "fs/fs_write_big",
-      "family": "fs",
-      "op": "fs_write_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.67,
-          "memBytes": 1073152,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.89,
-          "memBytes": 29364224,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 5.17,
-          "memBytes": 49795072,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 7,
-          "memBytes": 56709120,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 5.81,
-        "total": 7.72,
-        "wasm": 10.45,
-        "mem": 46.4
-      }
-    },
-    {
-      "key": "fs/fs_read_small",
-      "family": "fs",
-      "op": "fs_read_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.01,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.04,
-          "memBytes": 3993600,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.35,
-          "memBytes": 23392256,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 7,
-          "memBytes": 25464832,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 8.75,
-        "total": 35,
-        "wasm": 700,
-        "mem": 5711
-      }
-    },
-    {
-      "key": "fs/fs_read_big",
-      "family": "fs",
-      "op": "fs_read_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.05,
-          "memBytes": 1118208,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.84,
-          "memBytes": 31404032,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 4.2,
-          "memBytes": 64266240,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 7,
-          "memBytes": 53358592,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 5,
-        "total": 84,
-        "wasm": 140,
-        "mem": 57.47
-      }
-    },
-    {
-      "key": "fs/mkdir_rmdir",
-      "family": "fs",
-      "op": "mkdir_rmdir",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.04,
-          "memBytes": 32768,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.1,
-          "memBytes": 3948544,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.99,
-          "memBytes": 21327872,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 3,
-          "memBytes": 22552576,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 9.9,
-        "total": 24.75,
-        "wasm": 75,
-        "mem": 650.88
-      }
-    },
-    {
-      "key": "fs/rename_file",
-      "family": "fs",
-      "op": "rename_file",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.05,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.11,
-          "memBytes": 3989504,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.85,
-          "memBytes": 13172736,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 10,
-          "memBytes": 34168832,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 7.73,
-        "total": 17,
-        "wasm": 200,
-        "mem": 3216
-      }
-    },
-    {
-      "key": "fs/readdir_small",
-      "family": "fs",
-      "op": "readdir_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.02,
-          "memBytes": 61440,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.05,
-          "memBytes": 4014080,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.34,
-          "memBytes": 16756736,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 6,
-          "memBytes": 35438592,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 6.8,
-        "total": 17,
-        "wasm": 300,
-        "mem": 272.73
-      }
-    },
-    {
-      "key": "fs/readdir_big",
-      "family": "fs",
-      "op": "readdir_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.45,
-          "memBytes": 94208,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.68,
-          "memBytes": 5697536,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 1.14,
-          "memBytes": 35647488,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 8,
-          "memBytes": 23461888,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.68,
-        "total": 2.53,
-        "wasm": 17.78,
-        "mem": 378.39
-      }
-    },
-    {
-      "key": "fs/fsync_small",
-      "family": "fs",
-      "op": "fsync_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.4,
-          "memBytes": 8192,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.49,
-          "memBytes": 3964928,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.46,
-          "memBytes": 22233088,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 4,
-          "memBytes": 26046464,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.94,
-        "total": 1.15,
-        "wasm": 10,
-        "mem": 2714
-      }
-    },
-    {
-      "key": "fs/fs_promises_stat_x32",
-      "family": "fs",
-      "op": "fs_promises_stat_x32",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.05,
-          "memBytes": 28672,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 1.43,
-          "memBytes": 10903552,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 6.73,
-          "memBytes": 39112704,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 1,
-          "memBytes": 17080320,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 4.71,
-        "total": 134.6,
-        "wasm": 20,
-        "mem": 1364.14
-      }
-    },
-    {
-      "key": "fs/stream_copy_small",
-      "family": "fs",
-      "op": "stream_copy_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.08,
-          "memBytes": 131072,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.58,
-          "memBytes": 6184960,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 2.54,
-          "memBytes": 29519872,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 22,
-          "memBytes": 23826432,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 4.38,
-        "total": 31.75,
-        "wasm": 275,
-        "mem": 225.22
-      }
-    },
-    {
-      "key": "fs/stream_copy_big",
-      "family": "fs",
-      "op": "stream_copy_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.57,
-          "memBytes": 1105920,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 2.1,
-          "memBytes": 19533824,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 10.2,
-          "memBytes": 64524288,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 227,
-          "memBytes": 35205120,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 4.86,
-        "total": 17.89,
-        "wasm": 398.25,
-        "mem": 58.34
-      }
-    },
-    {
-      "key": "modules/require_100_small",
-      "family": "modules",
-      "op": "require_100_small",
-      "lanes": {
-        "node": {
-          "p50Ms": 10.13,
-          "memBytes": 15257600,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 65.12,
-          "memBytes": 25739264,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 6.43
-      }
-    },
-    {
-      "key": "modules/import_100_small_esm",
-      "family": "modules",
-      "op": "import_100_small_esm",
-      "lanes": {
-        "node": {
-          "p50Ms": 18.22,
-          "memBytes": 18051072,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 55.28,
-          "memBytes": 33030144,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 3.03
-      }
-    },
-    {
-      "key": "modules/import_npm_package",
-      "family": "modules",
-      "op": "import_npm_package",
-      "lanes": {
-        "node": {
-          "p50Ms": 64.61
-        },
-        "guest": {
-          "p50Ms": 96.23,
-          "memBytes": 35241984,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.49
-      }
-    },
-    {
-      "key": "modules/import_fresh_file",
-      "family": "modules",
-      "op": "import_fresh_file",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.44,
-          "memBytes": 4038656,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 1.01,
-          "memBytes": 19136512,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2.3
-      }
-    },
-    {
-      "key": "dns/resolve_uncached_localhost",
-      "family": "dns",
-      "op": "resolve_uncached_localhost",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.05,
-          "memBytes": 450560,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.13,
-          "memBytes": 4542464,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.22,
-          "memBytes": 22089728,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.69,
-        "total": 4.4,
-        "mem": 49.03
-      }
-    },
-    {
-      "key": "dns/resolve_cached_localhost",
-      "family": "dns",
-      "op": "resolve_cached_localhost",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.1,
-          "memBytes": 487424,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.23,
-          "memBytes": 4538368,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.36,
-          "memBytes": 20381696,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.57,
-        "total": 3.6,
-        "mem": 41.82
-      }
-    },
-    {
-      "key": "dns/resolve_concurrent_4",
-      "family": "dns",
-      "op": "resolve_concurrent_4",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.28,
-          "memBytes": 548864,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.31,
-          "memBytes": 4739072,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.37,
-          "memBytes": 20594688,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.19,
-        "total": 1.32,
-        "mem": 37.52
-      }
-    },
-    {
-      "key": "ecosystem/ls_100",
-      "family": "ecosystem",
-      "op": "ls_100",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 3.52
-        },
-        "vmCmd": {
-          "p50Ms": 302.36,
-          "memBytes": 47288320,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 85.9
-      }
-    },
-    {
-      "key": "ecosystem/sh_pipeline",
-      "family": "ecosystem",
-      "op": "sh_pipeline",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 4.64
-        },
-        "vmCmd": {
-          "p50Ms": 645.24,
-          "memBytes": 138952704,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 139.06
-      }
-    },
-    {
-      "key": "ecosystem/cd_tmp_pwd",
-      "family": "ecosystem",
-      "op": "cd_tmp_pwd",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 3.14
-        },
-        "vmCmd": {
-          "p50Ms": 71.23,
-          "memBytes": 55631872,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 22.68
-      }
-    },
-    {
-      "key": "ecosystem/echo_hello",
-      "family": "ecosystem",
-      "op": "echo_hello",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 3.21
-        },
-        "vmCmd": {
-          "p50Ms": 50.63,
-          "memBytes": 36503552,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 15.77
-      }
-    },
-    {
-      "key": "ecosystem/cat_small",
-      "family": "ecosystem",
-      "op": "cat_small",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 4.03
-        },
-        "vmCmd": {
-          "p50Ms": 55.79,
-          "memBytes": 39014400,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 13.84
-      }
-    },
-    {
-      "key": "ecosystem/cat_big",
-      "family": "ecosystem",
-      "op": "cat_big",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 4.82
-        },
-        "vmCmd": {
-          "p50Ms": 111.89,
-          "memBytes": 39059456,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 23.21
-      }
-    },
-    {
-      "key": "ecosystem/grep_small",
-      "family": "ecosystem",
-      "op": "grep_small",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 3.78
-        },
-        "vmCmd": {
-          "p50Ms": 276.11,
-          "memBytes": 40689664,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 73.04
-      }
-    },
-    {
-      "key": "ecosystem/grep_big",
-      "family": "ecosystem",
-      "op": "grep_big",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 11.8
-        },
-        "vmCmd": {
-          "p50Ms": 7193.15,
-          "memBytes": 72298496,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 609.59
-      }
-    },
-    {
-      "key": "ecosystem/sed_substitution",
-      "family": "ecosystem",
-      "op": "sed_substitution",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 3.43
-        },
-        "vmCmd": {
-          "p50Ms": 73.46,
-          "memBytes": 44089344,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 21.42
-      }
-    },
-    {
-      "key": "ecosystem/find_1000",
-      "family": "ecosystem",
-      "op": "find_1000",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 5.79
-        },
-        "vmCmd": {
-          "p50Ms": 4955.99,
-          "memBytes": 37408768,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 855.96
-      }
-    },
-    {
-      "key": "ecosystem/tar_small",
-      "family": "ecosystem",
-      "op": "tar_small",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 10.98
-        },
-        "vmCmd": {
-          "p50Ms": 1328.41,
-          "memBytes": 40931328,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 120.98
-      }
-    },
-    {
-      "key": "ecosystem/tar_big",
-      "family": "ecosystem",
-      "op": "tar_big",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 16.28
-        },
-        "vmCmd": {
-          "p50Ms": 4750.34,
-          "memBytes": 36511744,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 291.79
-      }
-    },
-    {
-      "key": "ecosystem/gzip_small",
-      "family": "ecosystem",
-      "op": "gzip_small",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 9.11
-        },
-        "vmCmd": {
-          "p50Ms": 545.63,
-          "memBytes": 45854720,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 59.89
-      }
-    },
-    {
-      "key": "ecosystem/gzip_big",
-      "family": "ecosystem",
-      "op": "gzip_big",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 10.08
-        },
-        "vmCmd": {
-          "p50Ms": 594.92,
-          "memBytes": 41082880,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 59.02
-      }
-    },
-    {
-      "key": "ecosystem/jq_extract",
-      "family": "ecosystem",
-      "op": "jq_extract",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 5.53
-        },
-        "vmCmd": {
-          "p50Ms": 143.82,
-          "memBytes": 43110400,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 26.01
-      }
-    },
-    {
-      "key": "ecosystem/git_init_commit",
-      "family": "ecosystem",
-      "op": "git_init_commit",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 15.82
-        },
-        "vmCmd": {
-          "p50Ms": 1052.8,
-          "memBytes": 42512384,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 66.55
-      }
-    },
-    {
-      "key": "permissions/fs_write_small_allow",
-      "family": "permissions",
-      "op": "fs_write_small_allow",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.12,
-          "memBytes": 4063232,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.26,
-          "memBytes": 21774336,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2.17
-      }
-    },
-    {
-      "key": "permissions/fs_write_small_policy",
-      "family": "permissions",
-      "op": "fs_write_small_policy",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.15,
-          "memBytes": 4022272,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.25,
-          "memBytes": 21811200,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.67
-      }
-    },
-    {
-      "key": "permissions/stat_storm_allow",
-      "family": "permissions",
-      "op": "stat_storm_allow",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.02,
-          "memBytes": 3964928,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.33,
-          "memBytes": 21495808,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 16.5
-      }
-    },
-    {
-      "key": "permissions/stat_storm_policy",
-      "family": "permissions",
-      "op": "stat_storm_policy",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.02,
-          "memBytes": 4018176,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.33,
-          "memBytes": 21659648,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 16.5
-      }
-    },
-    {
-      "key": "permissions/readdir_small_allow",
-      "family": "permissions",
-      "op": "readdir_small_allow",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.04,
-          "memBytes": 3952640,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.28,
-          "memBytes": 24436736,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 7
-      }
-    },
-    {
-      "key": "permissions/readdir_small_policy",
-      "family": "permissions",
-      "op": "readdir_small_policy",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.05,
-          "memBytes": 3981312,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.27,
-          "memBytes": 22179840,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 5.4
-      }
-    },
-    {
-      "key": "permissions/tcp_echo_small_allow",
-      "family": "permissions",
-      "op": "tcp_echo_small_allow",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.56,
-          "memBytes": 6483968,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 5.87,
-          "memBytes": 26206208,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 10.48
-      }
-    },
-    {
-      "key": "permissions/tcp_echo_small_policy",
-      "family": "permissions",
-      "op": "tcp_echo_small_policy",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.55,
-          "memBytes": 6623232,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 5.95,
-          "memBytes": 24109056,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 10.82
-      }
-    },
-    {
-      "key": "permissions/http_loopback_get_allow",
-      "family": "permissions",
-      "op": "http_loopback_get_allow",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.99,
-          "memBytes": 23580672,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 5.05,
-          "memBytes": 30240768,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 5.1
-      }
-    },
-    {
-      "key": "permissions/http_loopback_get_policy",
-      "family": "permissions",
-      "op": "http_loopback_get_policy",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.95,
-          "memBytes": 23494656,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 5.13,
-          "memBytes": 31711232,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 5.4
-      }
-    },
-    {
-      "key": "pipes/pass_through_small",
-      "family": "pipes",
-      "op": "pass_through_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 1.68,
-          "memBytes": 212992,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.07,
-          "memBytes": 3555328,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.03,
-          "memBytes": 19832832,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.43,
-        "total": 0.02,
-        "mem": 93.12
-      }
-    },
-    {
-      "key": "pipes/pass_through_big",
-      "family": "pipes",
-      "op": "pass_through_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.08,
-          "memBytes": 389120,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.19,
-          "memBytes": 6680576,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.41,
-          "memBytes": 33665024,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2.16,
-        "total": 5.13,
-        "mem": 86.52
-      }
-    },
-    {
-      "key": "pipes/backpressure_chunks",
-      "family": "pipes",
-      "op": "backpressure_chunks",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.08,
-          "memBytes": 380928,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.22,
-          "memBytes": 4562944,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.11,
-          "memBytes": 24489984,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.5,
-        "total": 1.38,
-        "mem": 64.29
-      }
-    },
-    {
-      "key": "timers/settimeout_zero_x100",
-      "family": "timers",
-      "op": "settimeout_zero_x100",
-      "lanes": {
-        "native": {
-          "p50Ms": 0,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 112.2,
-          "memBytes": 11190272,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 123.33,
-          "memBytes": 38608896,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 0,
-          "memBytes": 14176256,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.1,
-        "mem": 9426
-      }
-    },
-    {
-      "key": "timers/settimeout_1ms_x50",
-      "family": "timers",
-      "op": "settimeout_1ms_x50",
-      "lanes": {
-        "native": {
-          "p50Ms": 54.14,
-          "memBytes": 61440,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 56.71,
-          "memBytes": 10084352,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 62,
-          "memBytes": 32088064,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 50,
-          "memBytes": 21934080,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.09,
-        "total": 1.15,
-        "wasm": 0.92,
-        "mem": 522.27
-      }
-    },
-    {
-      "key": "timers/setimmediate_x1000",
-      "family": "timers",
-      "op": "setimmediate_x1000",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.64,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 1.57,
-          "memBytes": 11902976,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 4.09,
-          "memBytes": 34570240,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 0,
-          "memBytes": 10862592,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2.61,
-        "total": 6.39,
-        "wasm": 0,
-        "mem": 8440
-      }
-    },
-    {
-      "key": "control/cpu_loop",
-      "family": "control",
-      "op": "cpu_loop",
-      "lanes": {
-        "native": {
-          "p50Ms": 1.87,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 11.22,
-          "memBytes": 9773056,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 11.31,
-          "memBytes": 36605952,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 10,
-          "memBytes": 16134144,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.01,
-        "total": 6.05,
-        "wasm": 5.35,
-        "mem": 8937
-      }
-    },
-    {
-      "key": "control/alloc_free",
-      "family": "control",
-      "op": "alloc_free",
-      "lanes": {
-        "native": {
-          "p50Ms": 4.01,
-          "memBytes": 4153344,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 6.21,
-          "memBytes": 40308736,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 5.16,
-          "memBytes": 48541696,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 8,
-          "memBytes": 44736512,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.83,
-        "total": 1.29,
-        "wasm": 2,
-        "mem": 11.69
-      }
-    },
-    {
-      "key": "perf-finding/stdio_writeSync_8x64k",
-      "family": "perf-finding",
-      "op": "stdio_writeSync_8x64k",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.01,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.42,
-          "memBytes": 5451776,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 3.18,
-          "memBytes": 32010240,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 7.57,
-        "total": 318,
-        "mem": 7815
-      }
-    },
-    {
-      "key": "perf-finding/unix_accept_latency",
-      "family": "perf-finding",
-      "op": "unix_accept_latency",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.11,
-          "memBytes": 258048,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.35,
-          "memBytes": 5259264,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 2.09,
-          "memBytes": 25493504,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 5.97,
-        "total": 19,
-        "mem": 98.79
-      }
-    }
-  ]
-}
diff --git a/packages/benchmarks/results/baseline-local.json b/packages/benchmarks/results/baseline-local.json
deleted file mode 100644
index 7b15965d9..000000000
--- a/packages/benchmarks/results/baseline-local.json
+++ /dev/null
@@ -1,1851 +0,0 @@
-{
-  "schemaVersion": 1,
-  "kind": "local",
-  "generatedAt": "2026-07-02T08:41:33.847-07:00",
-  "hardware": {
-    "cpu": "12th Gen Intel(R) Core(TM) i7-12700KF",
-    "cores": 20,
-    "ram": "62.6 GB",
-    "node": "v24.17.0",
-    "os": "Linux 6.1.0-41-amd64",
-    "arch": "x64"
-  },
-  "sidecar": {
-    "path": "/home/nathan/.herdr/workspaces/agent-os/secure-exec-perf-rules/packages/benchmarks/../../target/release/secure-exec-sidecar",
-    "profile": "release",
-    "mtimeMs": 1783005507539.7039,
-    "mtimeIso": "2026-07-02T08:18:27.540-07:00",
-    "sizeBytes": 114967736
-  },
-  "engine": {
-    "iterations": 20,
-    "warmup": 5,
-    "cold": false,
-    "sharedVm": false,
-    "rowCount": 70
-  },
-  "rows": [
-    {
-      "key": "process/node_exit",
-      "family": "process",
-      "op": "node_exit",
-      "lanes": {
-        "native": {
-          "p50Ms": 14.68,
-          "memBytes": 1228800,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 16.37
-        },
-        "guest": {
-          "p50Ms": 15.63,
-          "memBytes": 32698368,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.95,
-        "total": 1.06,
-        "mem": 26.61
-      }
-    },
-    {
-      "key": "process/node_stdout_discard_2b",
-      "family": "process",
-      "op": "node_stdout_discard_2b",
-      "lanes": {
-        "native": {
-          "p50Ms": 15.95,
-          "memBytes": 1179648,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 17.23
-        },
-        "guest": {
-          "p50Ms": 14.1,
-          "memBytes": 32964608,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.82,
-        "total": 0.88,
-        "mem": 27.94
-      }
-    },
-    {
-      "key": "process/exec_capture",
-      "family": "process",
-      "op": "exec_capture",
-      "lanes": {
-        "native": {
-          "p50Ms": 16.99,
-          "memBytes": 1167360,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 19.22
-        },
-        "guest": {
-          "p50Ms": 29.01,
-          "memBytes": 32849920,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.51,
-        "total": 1.71,
-        "mem": 28.14
-      }
-    },
-    {
-      "key": "process/node_stdout_listener_only_2b",
-      "family": "process",
-      "op": "node_stdout_listener_only_2b",
-      "lanes": {
-        "native": {
-          "p50Ms": 17.25,
-          "memBytes": 1105920,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 18.89
-        },
-        "guest": {
-          "p50Ms": 26.86,
-          "memBytes": 32792576,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.42,
-        "total": 1.56,
-        "mem": 29.65
-      }
-    },
-    {
-      "key": "process/fanout_spawn_8",
-      "family": "process",
-      "op": "fanout_spawn_8",
-      "lanes": {
-        "native": {
-          "p50Ms": 22.69,
-          "memBytes": 1093632,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 31.83
-        },
-        "guest": {
-          "p50Ms": 45.88,
-          "memBytes": 311668736,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.44,
-        "total": 2.02,
-        "mem": 284.99
-      }
-    },
-    {
-      "key": "process/wait_reap_storm_8",
-      "family": "process",
-      "op": "wait_reap_storm_8",
-      "lanes": {
-        "native": {
-          "p50Ms": 22.97,
-          "memBytes": 1110016,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 31.77
-        },
-        "guest": {
-          "p50Ms": 46.51,
-          "memBytes": 322703360,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.46,
-        "total": 2.02,
-        "mem": 290.72
-      }
-    },
-    {
-      "key": "process/pipe_chain_3",
-      "family": "process",
-      "op": "pipe_chain_3",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.69,
-          "memBytes": 1110016,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.17,
-          "memBytes": 8495104,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.03,
-          "memBytes": 24428544,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.18,
-        "total": 0.04,
-        "mem": 22.01
-      }
-    },
-    {
-      "key": "process/spawn_stdout_capture_small",
-      "family": "process",
-      "op": "spawn_stdout_capture_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 16.81,
-          "memBytes": 1163264,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 17.89,
-          "memBytes": 7393280,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 36,
-          "memBytes": 67235840,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2.01,
-        "total": 2.14,
-        "mem": 57.8
-      }
-    },
-    {
-      "key": "process/spawn_stdout_capture_big",
-      "family": "process",
-      "op": "spawn_stdout_capture_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 16.98,
-          "memBytes": 1454080,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 17.73,
-          "memBytes": 16302080,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 47.48,
-          "memBytes": 85962752,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2.68,
-        "total": 2.8,
-        "mem": 59.12
-      }
-    },
-    {
-      "key": "process/spawn_stdin_roundtrip",
-      "family": "process",
-      "op": "spawn_stdin_roundtrip",
-      "lanes": {
-        "native": {
-          "p50Ms": 17.62,
-          "memBytes": 1196032,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 18.3,
-          "memBytes": 8462336,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 44.1,
-          "memBytes": 68075520,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2.41,
-        "total": 2.5,
-        "mem": 56.92
-      }
-    },
-    {
-      "key": "net/udp_echo_small",
-      "family": "net",
-      "op": "udp_echo_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.02,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.04,
-          "memBytes": 4304896,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.21,
-          "memBytes": 23801856,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 5.25,
-        "total": 10.5,
-        "mem": 5811
-      }
-    },
-    {
-      "key": "net/udp_echo_big",
-      "family": "net",
-      "op": "udp_echo_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.06,
-          "memBytes": 352256,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.08,
-          "memBytes": 9072640,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.63,
-          "memBytes": 38883328,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 7.88,
-        "total": 10.5,
-        "mem": 110.38
-      }
-    },
-    {
-      "key": "net/unix_echo_small",
-      "family": "net",
-      "op": "unix_echo_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.03,
-          "memBytes": 126976,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.23,
-          "memBytes": 9076736,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 5.26,
-          "memBytes": 25780224,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 22.87,
-        "total": 175.33,
-        "mem": 203.03
-      }
-    },
-    {
-      "key": "net/unix_echo_big",
-      "family": "net",
-      "op": "unix_echo_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.04,
-          "memBytes": 1605632,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.31,
-          "memBytes": 15859712,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 4.03,
-          "memBytes": 38326272,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 13,
-        "total": 100.75,
-        "mem": 23.87
-      }
-    },
-    {
-      "key": "net/http_loopback_get",
-      "family": "net",
-      "op": "http_loopback_get",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.1,
-          "memBytes": 270336,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.45,
-          "memBytes": 21512192,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.95,
-          "memBytes": 29892608,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2.11,
-        "total": 9.5,
-        "mem": 110.58
-      }
-    },
-    {
-      "key": "net/http_external_get",
-      "family": "net",
-      "op": "http_external_get",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.3
-        },
-        "guest": {
-          "p50Ms": 0.48,
-          "memBytes": 25944064,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.6
-      }
-    },
-    {
-      "key": "net/http2_loopback_get",
-      "family": "net",
-      "op": "http2_loopback_get",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.52,
-          "memBytes": 19324928,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 56.99,
-          "memBytes": 33148928,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 109.6
-      }
-    },
-    {
-      "key": "net/fetch_loopback_get",
-      "family": "net",
-      "op": "fetch_loopback_get",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.75,
-          "memBytes": 47173632,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 1.8,
-          "memBytes": 56193024,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2.4
-      }
-    },
-    {
-      "key": "net/tls_loopback_get",
-      "family": "net",
-      "op": "tls_loopback_get",
-      "lanes": {
-        "node": {
-          "p50Ms": 1.75
-        },
-        "guest": {
-          "p50Ms": 15.75,
-          "memBytes": 34246656,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 9
-      }
-    },
-    {
-      "key": "net/tcp_connect_close",
-      "family": "net",
-      "op": "tcp_connect_close",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.05,
-          "memBytes": 53248,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.15,
-          "memBytes": 5275648,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.46,
-          "memBytes": 25329664,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 3.07,
-        "total": 9.2,
-        "mem": 475.69
-      }
-    },
-    {
-      "key": "net/tcp_echo_small",
-      "family": "net",
-      "op": "tcp_echo_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.04,
-          "memBytes": 196608,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.22,
-          "memBytes": 8695808,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 2.88,
-          "memBytes": 25497600,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 13.09,
-        "total": 72,
-        "mem": 129.69
-      }
-    },
-    {
-      "key": "net/tcp_external_echo",
-      "family": "net",
-      "op": "tcp_external_echo",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.06,
-          "memBytes": 192512,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.19
-        },
-        "guest": {
-          "p50Ms": 0.27,
-          "memBytes": 23973888,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.42,
-        "total": 4.5,
-        "mem": 124.53
-      }
-    },
-    {
-      "key": "net/tcp_concurrent_4",
-      "family": "net",
-      "op": "tcp_concurrent_4",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.11,
-          "memBytes": 172032,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.37,
-          "memBytes": 9703424,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 6.25,
-          "memBytes": 31567872,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 16.89,
-        "total": 56.82,
-        "mem": 183.5
-      }
-    },
-    {
-      "key": "net/tcp_echo_big",
-      "family": "net",
-      "op": "tcp_echo_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.07,
-          "memBytes": 1527808,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.35,
-          "memBytes": 15949824,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 5.57,
-          "memBytes": 38273024,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 15.91,
-        "total": 79.57,
-        "mem": 25.05
-      }
-    },
-    {
-      "key": "net/tcp_tiny_writes_16",
-      "family": "net",
-      "op": "tcp_tiny_writes_16",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.11,
-          "memBytes": 196608,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.24,
-          "memBytes": 8863744,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 3.03,
-          "memBytes": 17842176,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 12.63,
-        "total": 27.55,
-        "mem": 90.75
-      }
-    },
-    {
-      "key": "fs/open_close_churn",
-      "family": "fs",
-      "op": "open_close_churn",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.05,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.01,
-          "memBytes": 2953216,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.1,
-          "memBytes": 18755584,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 8,
-          "memBytes": 15339520,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 10,
-        "total": 2,
-        "wasm": 160,
-        "mem": 4579
-      }
-    },
-    {
-      "key": "fs/stat_storm",
-      "family": "fs",
-      "op": "stat_storm",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.03,
-          "memBytes": 28672,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.01,
-          "memBytes": 2949120,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.08,
-          "memBytes": 9392128,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 5,
-          "memBytes": 12369920,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 8,
-        "total": 2.67,
-        "wasm": 166.67,
-        "mem": 327.57
-      }
-    },
-    {
-      "key": "fs/fs_write_small",
-      "family": "fs",
-      "op": "fs_write_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.03,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.03,
-          "memBytes": 2953216,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.06,
-          "memBytes": 9166848,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 4,
-          "memBytes": 13168640,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2,
-        "total": 2,
-        "wasm": 133.33,
-        "mem": 2238
-      }
-    },
-    {
-      "key": "fs/fs_write_big",
-      "family": "fs",
-      "op": "fs_write_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.95,
-          "memBytes": 1921024,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.79,
-          "memBytes": 29093888,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 5.07,
-          "memBytes": 38666240,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 16,
-          "memBytes": 55279616,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 6.42,
-        "total": 5.34,
-        "wasm": 16.84,
-        "mem": 20.13
-      }
-    },
-    {
-      "key": "fs/fs_read_small",
-      "family": "fs",
-      "op": "fs_read_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.02,
-          "memBytes": 2949120,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.08,
-          "memBytes": 9105408,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 7,
-          "memBytes": 13623296,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 4,
-        "total": null,
-        "wasm": null,
-        "mem": 2223
-      }
-    },
-    {
-      "key": "fs/fs_read_big",
-      "family": "fs",
-      "op": "fs_read_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.08,
-          "memBytes": 2121728,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.27,
-          "memBytes": 29679616,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 2.29,
-          "memBytes": 51396608,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 8,
-          "memBytes": 51761152,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 8.48,
-        "total": 28.63,
-        "wasm": 100,
-        "mem": 24.22
-      }
-    },
-    {
-      "key": "fs/mkdir_rmdir",
-      "family": "fs",
-      "op": "mkdir_rmdir",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.01,
-          "memBytes": 20480,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.03,
-          "memBytes": 3018752,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.15,
-          "memBytes": 9113600,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 3,
-          "memBytes": 13553664,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 5,
-        "total": 15,
-        "wasm": 300,
-        "mem": 445
-      }
-    },
-    {
-      "key": "fs/rename_file",
-      "family": "fs",
-      "op": "rename_file",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.02,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.03,
-          "memBytes": 2953216,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.32,
-          "memBytes": 9175040,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 10,
-          "memBytes": 12939264,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 10.67,
-        "total": 16,
-        "wasm": 500,
-        "mem": 2240
-      }
-    },
-    {
-      "key": "fs/readdir_small",
-      "family": "fs",
-      "op": "readdir_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.16,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.02,
-          "memBytes": 2953216,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.23,
-          "memBytes": 11751424,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 6,
-          "memBytes": 18210816,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 11.5,
-        "total": 1.44,
-        "wasm": 37.5,
-        "mem": 2869
-      }
-    },
-    {
-      "key": "fs/readdir_big",
-      "family": "fs",
-      "op": "readdir_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.27,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.3,
-          "memBytes": 5427200,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 6,
-          "memBytes": 11395072,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 14,
-          "memBytes": 22536192,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 20,
-        "total": 22.22,
-        "wasm": 51.85,
-        "mem": 2782
-      }
-    },
-    {
-      "key": "fs/fsync_small",
-      "family": "fs",
-      "op": "fsync_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 1.54,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.63,
-          "memBytes": 3555328,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.07,
-          "memBytes": 9437184,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 4,
-          "memBytes": 12349440,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.11,
-        "total": 0.05,
-        "wasm": 2.6,
-        "mem": 2304
-      }
-    },
-    {
-      "key": "fs/fs_promises_stat_x32",
-      "family": "fs",
-      "op": "fs_promises_stat_x32",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.01,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.23,
-          "memBytes": 7032832,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 1.51,
-          "memBytes": 11542528,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 0,
-          "memBytes": 17268736,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 6.57,
-        "total": 151,
-        "wasm": 0,
-        "mem": 2818
-      }
-    },
-    {
-      "key": "fs/stream_copy_small",
-      "family": "fs",
-      "op": "stream_copy_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.03,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.23,
-          "memBytes": 8044544,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 1,
-          "memBytes": 25378816,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 23,
-          "memBytes": 19582976,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 4.35,
-        "total": 33.33,
-        "wasm": 766.67,
-        "mem": 6196
-      }
-    },
-    {
-      "key": "fs/stream_copy_big",
-      "family": "fs",
-      "op": "stream_copy_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.4,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 1.02,
-          "memBytes": 15896576,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 16.08,
-          "memBytes": 58056704,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 261,
-          "memBytes": 59047936,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 15.76,
-        "total": 40.2,
-        "wasm": 652.5,
-        "mem": 14174
-      }
-    },
-    {
-      "key": "modules/require_100_small",
-      "family": "modules",
-      "op": "require_100_small",
-      "lanes": {
-        "node": {
-          "p50Ms": 2.25,
-          "memBytes": 19079168,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 12.21,
-          "memBytes": 27848704,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 5.43
-      }
-    },
-    {
-      "key": "modules/import_100_small_esm",
-      "family": "modules",
-      "op": "import_100_small_esm",
-      "lanes": {
-        "node": {
-          "p50Ms": 5.59,
-          "memBytes": 26521600,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 14.81,
-          "memBytes": 35450880,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2.65
-      }
-    },
-    {
-      "key": "modules/import_npm_package",
-      "family": "modules",
-      "op": "import_npm_package",
-      "lanes": {
-        "node": {
-          "p50Ms": 41.85
-        },
-        "guest": {
-          "p50Ms": 55,
-          "memBytes": 38526976,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.31
-      }
-    },
-    {
-      "key": "modules/import_fresh_file",
-      "family": "modules",
-      "op": "import_fresh_file",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.2,
-          "memBytes": 5087232,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.19,
-          "memBytes": 20774912,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.95
-      }
-    },
-    {
-      "key": "dns/resolve_uncached_localhost",
-      "family": "dns",
-      "op": "resolve_uncached_localhost",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.02,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.07,
-          "memBytes": 2768896,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.03,
-          "memBytes": 22089728,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.43,
-        "total": 1.5,
-        "mem": 5393
-      }
-    },
-    {
-      "key": "dns/resolve_cached_localhost",
-      "family": "dns",
-      "op": "resolve_cached_localhost",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.17,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.09,
-          "memBytes": 2764800,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.06,
-          "memBytes": 22024192,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.67,
-        "total": 0.35,
-        "mem": 5377
-      }
-    },
-    {
-      "key": "dns/resolve_concurrent_4",
-      "family": "dns",
-      "op": "resolve_concurrent_4",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.36,
-          "memBytes": 397312,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.13,
-          "memBytes": 3190784,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.07,
-          "memBytes": 14942208,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.54,
-        "total": 0.19,
-        "mem": 37.61
-      }
-    },
-    {
-      "key": "ecosystem/ls_100",
-      "family": "ecosystem",
-      "op": "ls_100",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 6.66
-        },
-        "vmCmd": {
-          "p50Ms": 491.5,
-          "memBytes": 54095872,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 73.8
-      }
-    },
-    {
-      "key": "ecosystem/grep_1m",
-      "family": "ecosystem",
-      "op": "grep_1m",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 7.87
-        },
-        "vmCmd": {
-          "p50Ms": 124.6,
-          "memBytes": 139874304,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 15.83
-      }
-    },
-    {
-      "key": "ecosystem/git_init_commit",
-      "family": "ecosystem",
-      "op": "git_init_commit",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 11.34
-        },
-        "vmCmd": {
-          "p50Ms": 1451.04,
-          "memBytes": 109875200,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 127.96
-      }
-    },
-    {
-      "key": "ecosystem/sh_pipeline",
-      "family": "ecosystem",
-      "op": "sh_pipeline",
-      "lanes": {
-        "hostCmd": {
-          "p50Ms": 12.08
-        },
-        "vmCmd": {
-          "p50Ms": 1135.71,
-          "memBytes": 233422848,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "command": 94.02
-      }
-    },
-    {
-      "key": "permissions/fs_write_small_allow",
-      "family": "permissions",
-      "op": "fs_write_small_allow",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.03,
-          "memBytes": 2957312,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.05,
-          "memBytes": 21291008,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.67
-      }
-    },
-    {
-      "key": "permissions/fs_write_small_policy",
-      "family": "permissions",
-      "op": "fs_write_small_policy",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.03,
-          "memBytes": 2953216,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.05,
-          "memBytes": 21225472,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.67
-      }
-    },
-    {
-      "key": "permissions/stat_storm_allow",
-      "family": "permissions",
-      "op": "stat_storm_allow",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.01,
-          "memBytes": 2953216,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.07,
-          "memBytes": 13602816,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 7
-      }
-    },
-    {
-      "key": "permissions/stat_storm_policy",
-      "family": "permissions",
-      "op": "stat_storm_policy",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.01,
-          "memBytes": 2953216,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.07,
-          "memBytes": 21327872,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 7
-      }
-    },
-    {
-      "key": "permissions/readdir_small_allow",
-      "family": "permissions",
-      "op": "readdir_small_allow",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.02,
-          "memBytes": 2953216,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.24,
-          "memBytes": 21819392,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 12
-      }
-    },
-    {
-      "key": "permissions/readdir_small_policy",
-      "family": "permissions",
-      "op": "readdir_small_policy",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.02,
-          "memBytes": 2981888,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.23,
-          "memBytes": 14372864,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 11.5
-      }
-    },
-    {
-      "key": "permissions/tcp_echo_small_allow",
-      "family": "permissions",
-      "op": "tcp_echo_small_allow",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.27,
-          "memBytes": 9314304,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 2.84,
-          "memBytes": 25624576,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 10.52
-      }
-    },
-    {
-      "key": "permissions/tcp_echo_small_policy",
-      "family": "permissions",
-      "op": "tcp_echo_small_policy",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.22,
-          "memBytes": 9994240,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 3.4,
-          "memBytes": 25677824,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 15.45
-      }
-    },
-    {
-      "key": "permissions/http_loopback_get_allow",
-      "family": "permissions",
-      "op": "http_loopback_get_allow",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.45,
-          "memBytes": 21688320,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.99,
-          "memBytes": 28659712,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2.2
-      }
-    },
-    {
-      "key": "permissions/http_loopback_get_policy",
-      "family": "permissions",
-      "op": "http_loopback_get_policy",
-      "lanes": {
-        "node": {
-          "p50Ms": 0.45,
-          "memBytes": 21499904,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 1.03,
-          "memBytes": 29024256,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2.29
-      }
-    },
-    {
-      "key": "pipes/pass_through_small",
-      "family": "pipes",
-      "op": "pass_through_small",
-      "lanes": {
-        "native": {
-          "p50Ms": 2.1,
-          "memBytes": 1273856,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.03,
-          "memBytes": 1933312,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.01,
-          "memBytes": 21135360,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.33,
-        "total": 0,
-        "mem": 16.59
-      }
-    },
-    {
-      "key": "pipes/pass_through_big",
-      "family": "pipes",
-      "op": "pass_through_big",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.06,
-          "memBytes": 233472,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.08,
-          "memBytes": 5550080,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.16,
-          "memBytes": 27922432,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2,
-        "total": 2.67,
-        "mem": 119.6
-      }
-    },
-    {
-      "key": "pipes/backpressure_chunks",
-      "family": "pipes",
-      "op": "backpressure_chunks",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.09,
-          "memBytes": 184320,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.07,
-          "memBytes": 7282688,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.07,
-          "memBytes": 26255360,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1,
-        "total": 0.78,
-        "mem": 142.44
-      }
-    },
-    {
-      "key": "timers/settimeout_zero_x100",
-      "family": "timers",
-      "op": "settimeout_zero_x100",
-      "lanes": {
-        "native": {
-          "p50Ms": 0,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 107.18,
-          "memBytes": 5726208,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 118.93,
-          "memBytes": 20996096,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 0,
-          "memBytes": 11743232,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.11,
-        "total": null,
-        "wasm": null,
-        "mem": 5126
-      }
-    },
-    {
-      "key": "timers/settimeout_1ms_x50",
-      "family": "timers",
-      "op": "settimeout_1ms_x50",
-      "lanes": {
-        "native": {
-          "p50Ms": 52.99,
-          "memBytes": 1081344,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 53.5,
-          "memBytes": 5664768,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 59.3,
-          "memBytes": 11063296,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 54,
-          "memBytes": 14860288,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.11,
-        "total": 1.12,
-        "wasm": 1.02,
-        "mem": 10.23
-      }
-    },
-    {
-      "key": "timers/setimmediate_x1000",
-      "family": "timers",
-      "op": "setimmediate_x1000",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.13,
-          "memBytes": 32768,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.72,
-          "memBytes": 13496320,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 1.86,
-          "memBytes": 18632704,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 0,
-          "memBytes": 12046336,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 2.58,
-        "total": 14.31,
-        "wasm": 0,
-        "mem": 568.63
-      }
-    },
-    {
-      "key": "control/cpu_loop",
-      "family": "control",
-      "op": "cpu_loop",
-      "lanes": {
-        "native": {
-          "p50Ms": 1.28,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 7.76,
-          "memBytes": 7241728,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 7.85,
-          "memBytes": 12025856,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 3,
-          "memBytes": 20934656,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 1.01,
-        "total": 6.13,
-        "wasm": 2.34,
-        "mem": 2936
-      }
-    },
-    {
-      "key": "control/alloc_free",
-      "family": "control",
-      "op": "alloc_free",
-      "lanes": {
-        "native": {
-          "p50Ms": 2.15,
-          "memBytes": 5140480,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 4.38,
-          "memBytes": 70877184,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 4.23,
-          "memBytes": 41381888,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        },
-        "wasm": {
-          "p50Ms": 5,
-          "memBytes": 15732736,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 0.97,
-        "total": 1.97,
-        "wasm": 2.33,
-        "mem": 8.05
-      }
-    },
-    {
-      "key": "perf-finding/stdio_writeSync_8x64k",
-      "family": "perf-finding",
-      "op": "stdio_writeSync_8x64k",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.01,
-          "memBytes": 4096,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.14,
-          "memBytes": 4759552,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 1.74,
-          "memBytes": 25673728,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 12.43,
-        "total": 174,
-        "mem": 6268
-      }
-    },
-    {
-      "key": "perf-finding/unix_accept_latency",
-      "family": "perf-finding",
-      "op": "unix_accept_latency",
-      "lanes": {
-        "native": {
-          "p50Ms": 0.04,
-          "memBytes": 225280,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page"
-        },
-        "node": {
-          "p50Ms": 0.13,
-          "memBytes": 6787072,
-          "memProvenance": "direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e \"\" startup baseline, floored to one page"
-        },
-        "guest": {
-          "p50Ms": 0.52,
-          "memBytes": 25284608,
-          "memProvenance": "/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)"
-        }
-      },
-      "tax": {
-        "emulation": 4,
-        "total": 13,
-        "mem": 112.24
-      }
-    }
-  ]
-}
diff --git a/packages/benchmarks/results/coldstart-final.json b/packages/benchmarks/results/coldstart-final.json
deleted file mode 100644
index 13ddb5f8b..000000000
--- a/packages/benchmarks/results/coldstart-final.json
+++ /dev/null
@@ -1,3907 +0,0 @@
-{
-  "hardware": {
-    "cpu": "12th Gen Intel(R) Core(TM) i7-12700KF",
-    "cores": 20,
-    "ram": "62.6 GB",
-    "memAvailable": "26424332 kB",
-    "swapTotal": "1000444 kB",
-    "swapFree": "0 kB",
-    "swapCached": "114032 kB",
-    "node": "v24.13.0",
-    "os": "Linux 6.1.0-41-amd64",
-    "arch": "x64",
-    "loadAverage": [
-      4.8,
-      3.73,
-      3.23
-    ]
-  },
-  "scenarioSetup": {
-    "owned-sidecar": {},
-    "shared-sidecar": {},
-    "resident-runner": {},
-    "isolate-only": {
-      "snapshotCreateMs": 123.904,
-      "snapshotBytes": 3902240,
-      "bridge": "generated-v8-bridge",
-      "isolateWarmup": 5
-    }
-  },
-  "results": [
-    {
-      "scenario": "owned-sidecar",
-      "batchSize": 1,
-      "mode": "sequential",
-      "iterations": 5,
-      "coldStart": {
-        "samples": 5,
-        "mean": 772.88,
-        "p50": 771.96,
-        "p95": 779.42,
-        "p99": 779.42,
-        "min": 765.8,
-        "max": 779.42
-      },
-      "warmStart": {
-        "samples": 5,
-        "mean": 452.68,
-        "p50": 452.37,
-        "p95": 457.13,
-        "p99": 457.13,
-        "min": 449.32,
-        "max": 457.13
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 5,
-          "mean": 0.16,
-          "p50": 0.1,
-          "p95": 0.29,
-          "p99": 0.29,
-          "min": 0.07,
-          "max": 0.29
-        },
-        "sidecar_spawn": {
-          "samples": 5,
-          "mean": 2.97,
-          "p50": 2.78,
-          "p95": 3.76,
-          "p99": 3.76,
-          "min": 2.71,
-          "max": 3.76
-        },
-        "session_open": {
-          "samples": 5,
-          "mean": 2.54,
-          "p50": 2.34,
-          "p95": 3.61,
-          "p99": 3.61,
-          "min": 2.04,
-          "max": 3.61
-        },
-        "vm_create": {
-          "samples": 5,
-          "mean": 1.27,
-          "p50": 1.36,
-          "p95": 1.38,
-          "p99": 1.38,
-          "min": 1.09,
-          "max": 1.38
-        },
-        "vm_ready": {
-          "samples": 5,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.02,
-          "p99": 0.02,
-          "min": 0.01,
-          "max": 0.02
-        },
-        "vm_configure": {
-          "samples": 5,
-          "mean": 0.17,
-          "p50": 0.17,
-          "p95": 0.26,
-          "p99": 0.26,
-          "min": 0.11,
-          "max": 0.26
-        },
-        "runtime_mount_wasm": {
-          "samples": 5,
-          "mean": 172.92,
-          "p50": 172.95,
-          "p95": 177.04,
-          "p99": 177.04,
-          "min": 169.07,
-          "max": 177.04
-        },
-        "runtime_mount_node": {
-          "samples": 5,
-          "mean": 2.83,
-          "p50": 2.71,
-          "p95": 3.23,
-          "p99": 3.23,
-          "min": 2.61,
-          "max": 3.23
-        },
-        "runtime_create_total": {
-          "samples": 5,
-          "mean": 175.85,
-          "p50": 176.3,
-          "p95": 179.8,
-          "p99": 179.8,
-          "min": 171.8,
-          "max": 179.8
-        },
-        "first_exec": {
-          "samples": 5,
-          "mean": 597.03,
-          "p50": 596.26,
-          "p95": 601.45,
-          "p99": 601.45,
-          "min": 593.79,
-          "max": 601.45
-        },
-        "warm_exec": {
-          "samples": 5,
-          "mean": 452.68,
-          "p50": 452.37,
-          "p95": 457.13,
-          "p99": 457.13,
-          "min": 449.32,
-          "max": 457.13
-        }
-      }
-    },
-    {
-      "scenario": "owned-sidecar",
-      "batchSize": 1,
-      "mode": "concurrent",
-      "iterations": 5,
-      "coldStart": {
-        "samples": 5,
-        "mean": 776.22,
-        "p50": 775.63,
-        "p95": 782.37,
-        "p99": 782.37,
-        "min": 773.07,
-        "max": 782.37
-      },
-      "warmStart": {
-        "samples": 5,
-        "mean": 449.86,
-        "p50": 449.59,
-        "p95": 452.53,
-        "p99": 452.53,
-        "min": 447.58,
-        "max": 452.53
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 5,
-          "mean": 0.19,
-          "p50": 0.26,
-          "p95": 0.28,
-          "p99": 0.28,
-          "min": 0.05,
-          "max": 0.28
-        },
-        "sidecar_spawn": {
-          "samples": 5,
-          "mean": 2.84,
-          "p50": 2.79,
-          "p95": 3.08,
-          "p99": 3.08,
-          "min": 2.65,
-          "max": 3.08
-        },
-        "session_open": {
-          "samples": 5,
-          "mean": 2.85,
-          "p50": 2.99,
-          "p95": 3.63,
-          "p99": 3.63,
-          "min": 2.13,
-          "max": 3.63
-        },
-        "vm_create": {
-          "samples": 5,
-          "mean": 1.2,
-          "p50": 1.11,
-          "p95": 1.46,
-          "p99": 1.46,
-          "min": 1.05,
-          "max": 1.46
-        },
-        "vm_ready": {
-          "samples": 5,
-          "mean": 0.02,
-          "p50": 0.01,
-          "p95": 0.04,
-          "p99": 0.04,
-          "min": 0.01,
-          "max": 0.04
-        },
-        "vm_configure": {
-          "samples": 5,
-          "mean": 0.11,
-          "p50": 0.12,
-          "p95": 0.13,
-          "p99": 0.13,
-          "min": 0.08,
-          "max": 0.13
-        },
-        "runtime_mount_wasm": {
-          "samples": 5,
-          "mean": 175.25,
-          "p50": 174.2,
-          "p95": 178.88,
-          "p99": 178.88,
-          "min": 173.44,
-          "max": 178.88
-        },
-        "runtime_mount_node": {
-          "samples": 5,
-          "mean": 2.71,
-          "p50": 2.67,
-          "p95": 2.79,
-          "p99": 2.79,
-          "min": 2.64,
-          "max": 2.79
-        },
-        "runtime_create_total": {
-          "samples": 5,
-          "mean": 178.06,
-          "p50": 176.95,
-          "p95": 181.63,
-          "p99": 181.63,
-          "min": 176.32,
-          "max": 181.63
-        },
-        "first_exec": {
-          "samples": 5,
-          "mean": 598.17,
-          "p50": 599.03,
-          "p95": 600.75,
-          "p99": 600.75,
-          "min": 595.48,
-          "max": 600.75
-        },
-        "warm_exec": {
-          "samples": 5,
-          "mean": 449.86,
-          "p50": 449.59,
-          "p95": 452.53,
-          "p99": 452.53,
-          "min": 447.58,
-          "max": 452.53
-        }
-      }
-    },
-    {
-      "scenario": "owned-sidecar",
-      "batchSize": 10,
-      "mode": "sequential",
-      "iterations": 5,
-      "coldStart": {
-        "samples": 50,
-        "mean": 780.07,
-        "p50": 778.64,
-        "p95": 802.66,
-        "p99": 817.39,
-        "min": 760.69,
-        "max": 817.39
-      },
-      "warmStart": {
-        "samples": 50,
-        "mean": 453.92,
-        "p50": 452.69,
-        "p95": 463.47,
-        "p99": 472.79,
-        "min": 448.9,
-        "max": 472.79
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 50,
-          "mean": 0.18,
-          "p50": 0.24,
-          "p95": 0.29,
-          "p99": 0.76,
-          "min": 0.05,
-          "max": 0.76
-        },
-        "sidecar_spawn": {
-          "samples": 50,
-          "mean": 3.07,
-          "p50": 2.74,
-          "p95": 5.08,
-          "p99": 5.57,
-          "min": 2.36,
-          "max": 5.57
-        },
-        "session_open": {
-          "samples": 50,
-          "mean": 2.69,
-          "p50": 2.44,
-          "p95": 4.12,
-          "p99": 5.86,
-          "min": 1.06,
-          "max": 5.86
-        },
-        "vm_create": {
-          "samples": 50,
-          "mean": 1.31,
-          "p50": 1.21,
-          "p95": 1.93,
-          "p99": 2.37,
-          "min": 1.05,
-          "max": 2.37
-        },
-        "vm_ready": {
-          "samples": 50,
-          "mean": 0.02,
-          "p50": 0.01,
-          "p95": 0.08,
-          "p99": 0.37,
-          "min": 0.01,
-          "max": 0.37
-        },
-        "vm_configure": {
-          "samples": 50,
-          "mean": 0.12,
-          "p50": 0.11,
-          "p95": 0.21,
-          "p99": 0.35,
-          "min": 0.08,
-          "max": 0.35
-        },
-        "runtime_mount_wasm": {
-          "samples": 50,
-          "mean": 174.85,
-          "p50": 173.25,
-          "p95": 187.89,
-          "p99": 211.45,
-          "min": 163.97,
-          "max": 211.45
-        },
-        "runtime_mount_node": {
-          "samples": 50,
-          "mean": 3.07,
-          "p50": 2.74,
-          "p95": 3.71,
-          "p99": 14.98,
-          "min": 2.53,
-          "max": 14.98
-        },
-        "runtime_create_total": {
-          "samples": 50,
-          "mean": 178,
-          "p50": 176.21,
-          "p95": 190.61,
-          "p99": 215.85,
-          "min": 166.69,
-          "max": 215.85
-        },
-        "first_exec": {
-          "samples": 50,
-          "mean": 602.07,
-          "p50": 601.18,
-          "p95": 614.83,
-          "p99": 618.39,
-          "min": 593.97,
-          "max": 618.39
-        },
-        "warm_exec": {
-          "samples": 50,
-          "mean": 453.92,
-          "p50": 452.69,
-          "p95": 463.47,
-          "p99": 472.79,
-          "min": 448.9,
-          "max": 472.79
-        }
-      }
-    },
-    {
-      "scenario": "owned-sidecar",
-      "batchSize": 10,
-      "mode": "concurrent",
-      "iterations": 5,
-      "coldStart": {
-        "samples": 50,
-        "mean": 1000.39,
-        "p50": 1028.29,
-        "p95": 1119.05,
-        "p99": 1137.11,
-        "min": 798.29,
-        "max": 1137.11
-      },
-      "warmStart": {
-        "samples": 50,
-        "mean": 477.27,
-        "p50": 469.19,
-        "p95": 532.17,
-        "p99": 550.94,
-        "min": 451.03,
-        "max": 550.94
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 50,
-          "mean": 46.54,
-          "p50": 31.48,
-          "p95": 120.71,
-          "p99": 142.03,
-          "min": 0.03,
-          "max": 142.03
-        },
-        "sidecar_spawn": {
-          "samples": 50,
-          "mean": 2.64,
-          "p50": 2.08,
-          "p95": 4.88,
-          "p99": 8.98,
-          "min": 1.62,
-          "max": 8.98
-        },
-        "session_open": {
-          "samples": 50,
-          "mean": 10.03,
-          "p50": 7.93,
-          "p95": 22.99,
-          "p99": 51.88,
-          "min": 1.85,
-          "max": 51.88
-        },
-        "vm_create": {
-          "samples": 50,
-          "mean": 22.65,
-          "p50": 2.54,
-          "p95": 91.3,
-          "p99": 112.29,
-          "min": 1.06,
-          "max": 112.29
-        },
-        "vm_ready": {
-          "samples": 50,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.01,
-          "p99": 0.02,
-          "min": 0,
-          "max": 0.02
-        },
-        "vm_configure": {
-          "samples": 50,
-          "mean": 32.8,
-          "p50": 22.13,
-          "p95": 96.03,
-          "p99": 112.46,
-          "min": 0.07,
-          "max": 112.46
-        },
-        "runtime_mount_wasm": {
-          "samples": 50,
-          "mean": 357.03,
-          "p50": 369.84,
-          "p95": 470.12,
-          "p99": 479.73,
-          "min": 188.48,
-          "max": 479.73
-        },
-        "runtime_mount_node": {
-          "samples": 50,
-          "mean": 3.5,
-          "p50": 3.08,
-          "p95": 5.13,
-          "p99": 8.36,
-          "min": 2.54,
-          "max": 8.36
-        },
-        "runtime_create_total": {
-          "samples": 50,
-          "mean": 360.62,
-          "p50": 373.11,
-          "p95": 473.4,
-          "p99": 482.44,
-          "min": 191.55,
-          "max": 482.44
-        },
-        "first_exec": {
-          "samples": 50,
-          "mean": 639.78,
-          "p50": 642.15,
-          "p95": 670.64,
-          "p99": 711.39,
-          "min": 601.8,
-          "max": 711.39
-        },
-        "warm_exec": {
-          "samples": 50,
-          "mean": 477.27,
-          "p50": 469.19,
-          "p95": 532.17,
-          "p99": 550.94,
-          "min": 451.03,
-          "max": 550.94
-        }
-      }
-    },
-    {
-      "scenario": "owned-sidecar",
-      "batchSize": 50,
-      "mode": "sequential",
-      "iterations": 5,
-      "coldStart": {
-        "samples": 250,
-        "mean": 777.49,
-        "p50": 775.3,
-        "p95": 797.46,
-        "p99": 810.01,
-        "min": 758.17,
-        "max": 842.78
-      },
-      "warmStart": {
-        "samples": 250,
-        "mean": 453.43,
-        "p50": 452.59,
-        "p95": 461.71,
-        "p99": 468.33,
-        "min": 446.49,
-        "max": 473.73
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 250,
-          "mean": 0.03,
-          "p50": 0.03,
-          "p95": 0.04,
-          "p99": 0.06,
-          "min": 0.02,
-          "max": 0.09
-        },
-        "sidecar_spawn": {
-          "samples": 250,
-          "mean": 3.66,
-          "p50": 3.13,
-          "p95": 5.57,
-          "p99": 7.97,
-          "min": 2.39,
-          "max": 11.09
-        },
-        "session_open": {
-          "samples": 250,
-          "mean": 2.63,
-          "p50": 2.36,
-          "p95": 3.93,
-          "p99": 5.17,
-          "min": 1.78,
-          "max": 7.13
-        },
-        "vm_create": {
-          "samples": 250,
-          "mean": 1.34,
-          "p50": 1.22,
-          "p95": 2.04,
-          "p99": 2.9,
-          "min": 1.01,
-          "max": 4.06
-        },
-        "vm_ready": {
-          "samples": 250,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.04,
-          "p99": 0.06,
-          "min": 0,
-          "max": 0.07
-        },
-        "vm_configure": {
-          "samples": 250,
-          "mean": 0.12,
-          "p50": 0.11,
-          "p95": 0.21,
-          "p99": 0.27,
-          "min": 0.07,
-          "max": 0.72
-        },
-        "runtime_mount_wasm": {
-          "samples": 250,
-          "mean": 173.44,
-          "p50": 171.68,
-          "p95": 186.85,
-          "p99": 202.94,
-          "min": 159.51,
-          "max": 214.03
-        },
-        "runtime_mount_node": {
-          "samples": 250,
-          "mean": 2.85,
-          "p50": 2.72,
-          "p95": 3.95,
-          "p99": 4.48,
-          "min": 2.5,
-          "max": 5.41
-        },
-        "runtime_create_total": {
-          "samples": 250,
-          "mean": 176.37,
-          "p50": 174.76,
-          "p95": 189.74,
-          "p99": 206.04,
-          "min": 162.34,
-          "max": 217.76
-        },
-        "first_exec": {
-          "samples": 250,
-          "mean": 601.12,
-          "p50": 599.8,
-          "p95": 612.78,
-          "p99": 625.02,
-          "min": 590.75,
-          "max": 629.36
-        },
-        "warm_exec": {
-          "samples": 250,
-          "mean": 453.43,
-          "p50": 452.59,
-          "p95": 461.71,
-          "p99": 468.33,
-          "min": 446.49,
-          "max": 473.73
-        }
-      }
-    },
-    {
-      "scenario": "owned-sidecar",
-      "batchSize": 50,
-      "mode": "concurrent",
-      "iterations": 5,
-      "coldStart": {
-        "samples": 250,
-        "mean": 1041.81,
-        "p50": 1044.33,
-        "p95": 1133.77,
-        "p99": 1160.99,
-        "min": 803.82,
-        "max": 1173.16
-      },
-      "warmStart": {
-        "samples": 250,
-        "mean": 468.05,
-        "p50": 465.77,
-        "p95": 491.47,
-        "p99": 500.52,
-        "min": 448.81,
-        "max": 504.51
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 250,
-          "mean": 51.91,
-          "p50": 45.06,
-          "p95": 120.47,
-          "p99": 125.55,
-          "min": 0.03,
-          "max": 127.77
-        },
-        "sidecar_spawn": {
-          "samples": 250,
-          "mean": 2.58,
-          "p50": 2.11,
-          "p95": 4.93,
-          "p99": 7.04,
-          "min": 1.48,
-          "max": 11.03
-        },
-        "session_open": {
-          "samples": 250,
-          "mean": 13.62,
-          "p50": 9.75,
-          "p95": 45.62,
-          "p99": 98.82,
-          "min": 2.04,
-          "max": 105.13
-        },
-        "vm_create": {
-          "samples": 250,
-          "mean": 23.51,
-          "p50": 21.44,
-          "p95": 74.05,
-          "p99": 117.57,
-          "min": 1.16,
-          "max": 132.92
-        },
-        "vm_ready": {
-          "samples": 250,
-          "mean": 0.01,
-          "p50": 0,
-          "p95": 0.01,
-          "p99": 0.05,
-          "min": 0,
-          "max": 0.24
-        },
-        "vm_configure": {
-          "samples": 250,
-          "mean": 40.77,
-          "p50": 34.25,
-          "p95": 109.91,
-          "p99": 127.38,
-          "min": 0.07,
-          "max": 140.87
-        },
-        "runtime_mount_wasm": {
-          "samples": 250,
-          "mean": 390.18,
-          "p50": 393.55,
-          "p95": 469.13,
-          "p99": 489.67,
-          "min": 195.44,
-          "max": 494.31
-        },
-        "runtime_mount_node": {
-          "samples": 250,
-          "mean": 3.56,
-          "p50": 3.23,
-          "p95": 4.85,
-          "p99": 5.94,
-          "min": 2.44,
-          "max": 14.6
-        },
-        "runtime_create_total": {
-          "samples": 250,
-          "mean": 393.82,
-          "p50": 396.28,
-          "p95": 471.79,
-          "p99": 492.32,
-          "min": 198.12,
-          "max": 497.15
-        },
-        "first_exec": {
-          "samples": 250,
-          "mean": 647.99,
-          "p50": 643.04,
-          "p95": 687.33,
-          "p99": 708.65,
-          "min": 601.99,
-          "max": 742.52
-        },
-        "warm_exec": {
-          "samples": 250,
-          "mean": 468.05,
-          "p50": 465.77,
-          "p95": 491.47,
-          "p99": 500.52,
-          "min": 448.81,
-          "max": 504.51
-        }
-      }
-    },
-    {
-      "scenario": "owned-sidecar",
-      "batchSize": 100,
-      "mode": "sequential",
-      "iterations": 5,
-      "coldStart": {
-        "samples": 500,
-        "mean": 777.89,
-        "p50": 776.54,
-        "p95": 793.79,
-        "p99": 802.12,
-        "min": 757.86,
-        "max": 877.76
-      },
-      "warmStart": {
-        "samples": 500,
-        "mean": 453.66,
-        "p50": 452.93,
-        "p95": 460.66,
-        "p99": 464,
-        "min": 446.28,
-        "max": 472.32
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 500,
-          "mean": 0.03,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.21,
-          "min": 0.02,
-          "max": 0.49
-        },
-        "sidecar_spawn": {
-          "samples": 500,
-          "mean": 4.62,
-          "p50": 4.22,
-          "p95": 6.59,
-          "p99": 7.61,
-          "min": 3.42,
-          "max": 14.42
-        },
-        "session_open": {
-          "samples": 500,
-          "mean": 2.51,
-          "p50": 2.33,
-          "p95": 3.7,
-          "p99": 4.36,
-          "min": 1.9,
-          "max": 5.92
-        },
-        "vm_create": {
-          "samples": 500,
-          "mean": 1.3,
-          "p50": 1.2,
-          "p95": 1.99,
-          "p99": 2.5,
-          "min": 1.01,
-          "max": 5.75
-        },
-        "vm_ready": {
-          "samples": 500,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.04,
-          "p99": 0.07,
-          "min": 0,
-          "max": 0.09
-        },
-        "vm_configure": {
-          "samples": 500,
-          "mean": 0.13,
-          "p50": 0.1,
-          "p95": 0.25,
-          "p99": 0.73,
-          "min": 0.07,
-          "max": 0.95
-        },
-        "runtime_mount_wasm": {
-          "samples": 500,
-          "mean": 174.6,
-          "p50": 173.29,
-          "p95": 187.32,
-          "p99": 194.52,
-          "min": 161.57,
-          "max": 247.12
-        },
-        "runtime_mount_node": {
-          "samples": 500,
-          "mean": 2.85,
-          "p50": 2.73,
-          "p95": 3.57,
-          "p99": 4.3,
-          "min": 2.49,
-          "max": 10.8
-        },
-        "runtime_create_total": {
-          "samples": 500,
-          "mean": 177.53,
-          "p50": 176.16,
-          "p95": 190.06,
-          "p99": 198.61,
-          "min": 164.25,
-          "max": 252.3
-        },
-        "first_exec": {
-          "samples": 500,
-          "mean": 600.36,
-          "p50": 599.6,
-          "p95": 608.94,
-          "p99": 614.21,
-          "min": 592.06,
-          "max": 625.46
-        },
-        "warm_exec": {
-          "samples": 500,
-          "mean": 453.66,
-          "p50": 452.93,
-          "p95": 460.66,
-          "p99": 464,
-          "min": 446.28,
-          "max": 472.32
-        }
-      }
-    },
-    {
-      "scenario": "owned-sidecar",
-      "batchSize": 100,
-      "mode": "concurrent",
-      "iterations": 5,
-      "coldStart": {
-        "samples": 500,
-        "mean": 1041.19,
-        "p50": 1043.72,
-        "p95": 1120.25,
-        "p99": 1136.03,
-        "min": 874.13,
-        "max": 1163.67
-      },
-      "warmStart": {
-        "samples": 500,
-        "mean": 468.6,
-        "p50": 466.36,
-        "p95": 492.1,
-        "p99": 508.12,
-        "min": 451,
-        "max": 523.72
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 500,
-          "mean": 51.71,
-          "p50": 45.26,
-          "p95": 115.99,
-          "p99": 121.44,
-          "min": 0.03,
-          "max": 127.91
-        },
-        "sidecar_spawn": {
-          "samples": 500,
-          "mean": 2.85,
-          "p50": 2.37,
-          "p95": 5.17,
-          "p99": 6.76,
-          "min": 1.86,
-          "max": 11.4
-        },
-        "session_open": {
-          "samples": 500,
-          "mean": 12.93,
-          "p50": 10.31,
-          "p95": 29.16,
-          "p99": 79.09,
-          "min": 2.12,
-          "max": 132.03
-        },
-        "vm_create": {
-          "samples": 500,
-          "mean": 27.26,
-          "p50": 23.2,
-          "p95": 69.69,
-          "p99": 112.08,
-          "min": 1.2,
-          "max": 140.51
-        },
-        "vm_ready": {
-          "samples": 500,
-          "mean": 0,
-          "p50": 0,
-          "p95": 0.01,
-          "p99": 0.01,
-          "min": 0,
-          "max": 0.02
-        },
-        "vm_configure": {
-          "samples": 500,
-          "mean": 38.93,
-          "p50": 30.68,
-          "p95": 104.19,
-          "p99": 125.52,
-          "min": 0.09,
-          "max": 147.19
-        },
-        "runtime_mount_wasm": {
-          "samples": 500,
-          "mean": 391.69,
-          "p50": 391.04,
-          "p95": 462.01,
-          "p99": 478.64,
-          "min": 249.44,
-          "max": 494.42
-        },
-        "runtime_mount_node": {
-          "samples": 500,
-          "mean": 3.44,
-          "p50": 3.18,
-          "p95": 4.66,
-          "p99": 5.08,
-          "min": 2.41,
-          "max": 15.95
-        },
-        "runtime_create_total": {
-          "samples": 500,
-          "mean": 395.19,
-          "p50": 394.78,
-          "p95": 465.21,
-          "p99": 482.88,
-          "min": 252.48,
-          "max": 499.13
-        },
-        "first_exec": {
-          "samples": 500,
-          "mean": 646,
-          "p50": 641.96,
-          "p95": 684.23,
-          "p99": 700.88,
-          "min": 607.26,
-          "max": 719.01
-        },
-        "warm_exec": {
-          "samples": 500,
-          "mean": 468.6,
-          "p50": 466.36,
-          "p95": 492.1,
-          "p99": 508.12,
-          "min": 451,
-          "max": 523.72
-        }
-      }
-    },
-    {
-      "scenario": "owned-sidecar",
-      "batchSize": 200,
-      "mode": "sequential",
-      "iterations": 5,
-      "coldStart": {
-        "samples": 1000,
-        "mean": 778.28,
-        "p50": 776.94,
-        "p95": 793.79,
-        "p99": 810.69,
-        "min": 759.62,
-        "max": 841.83
-      },
-      "warmStart": {
-        "samples": 1000,
-        "mean": 454.03,
-        "p50": 453.13,
-        "p95": 462.01,
-        "p99": 468.77,
-        "min": 446.24,
-        "max": 501.19
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 1000,
-          "mean": 0.03,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.24,
-          "min": 0.02,
-          "max": 0.7
-        },
-        "sidecar_spawn": {
-          "samples": 1000,
-          "mean": 4.64,
-          "p50": 4.3,
-          "p95": 6.58,
-          "p99": 8.15,
-          "min": 3.37,
-          "max": 14.31
-        },
-        "session_open": {
-          "samples": 1000,
-          "mean": 2.49,
-          "p50": 2.32,
-          "p95": 3.77,
-          "p99": 4.84,
-          "min": 0.86,
-          "max": 7.37
-        },
-        "vm_create": {
-          "samples": 1000,
-          "mean": 1.29,
-          "p50": 1.2,
-          "p95": 1.96,
-          "p99": 2.63,
-          "min": 1,
-          "max": 4.02
-        },
-        "vm_ready": {
-          "samples": 1000,
-          "mean": 0.01,
-          "p50": 0,
-          "p95": 0.04,
-          "p99": 0.06,
-          "min": 0,
-          "max": 0.13
-        },
-        "vm_configure": {
-          "samples": 1000,
-          "mean": 0.14,
-          "p50": 0.1,
-          "p95": 0.25,
-          "p99": 0.96,
-          "min": 0.06,
-          "max": 1.74
-        },
-        "runtime_mount_wasm": {
-          "samples": 1000,
-          "mean": 174.63,
-          "p50": 173.7,
-          "p95": 187.98,
-          "p99": 196.17,
-          "min": 159.88,
-          "max": 235.94
-        },
-        "runtime_mount_node": {
-          "samples": 1000,
-          "mean": 2.84,
-          "p50": 2.72,
-          "p95": 3.68,
-          "p99": 4.29,
-          "min": 2.5,
-          "max": 7.88
-        },
-        "runtime_create_total": {
-          "samples": 1000,
-          "mean": 177.55,
-          "p50": 176.64,
-          "p95": 190.7,
-          "p99": 199.01,
-          "min": 162.73,
-          "max": 238.71
-        },
-        "first_exec": {
-          "samples": 1000,
-          "mean": 600.73,
-          "p50": 599.84,
-          "p95": 609.8,
-          "p99": 618.15,
-          "min": 589.53,
-          "max": 637.83
-        },
-        "warm_exec": {
-          "samples": 1000,
-          "mean": 454.03,
-          "p50": 453.13,
-          "p95": 462.01,
-          "p99": 468.77,
-          "min": 446.24,
-          "max": 501.19
-        }
-      }
-    },
-    {
-      "scenario": "owned-sidecar",
-      "batchSize": 200,
-      "mode": "concurrent",
-      "iterations": 5,
-      "coldStart": {
-        "samples": 1000,
-        "mean": 1044.03,
-        "p50": 1042.73,
-        "p95": 1124.88,
-        "p99": 1162.92,
-        "min": 925.95,
-        "max": 1198.97
-      },
-      "warmStart": {
-        "samples": 1000,
-        "mean": 468.68,
-        "p50": 466.89,
-        "p95": 488.09,
-        "p99": 513.54,
-        "min": 449.6,
-        "max": 520.28
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 1000,
-          "mean": 51.87,
-          "p50": 47.8,
-          "p95": 114.52,
-          "p99": 120.39,
-          "min": 0.03,
-          "max": 137.72
-        },
-        "sidecar_spawn": {
-          "samples": 1000,
-          "mean": 2.93,
-          "p50": 2.39,
-          "p95": 5.36,
-          "p99": 7.61,
-          "min": 1.86,
-          "max": 10.09
-        },
-        "session_open": {
-          "samples": 1000,
-          "mean": 13.82,
-          "p50": 10.58,
-          "p95": 37.18,
-          "p99": 76.75,
-          "min": 2,
-          "max": 112.27
-        },
-        "vm_create": {
-          "samples": 1000,
-          "mean": 26.98,
-          "p50": 22.78,
-          "p95": 77.31,
-          "p99": 108.9,
-          "min": 1.17,
-          "max": 231.51
-        },
-        "vm_ready": {
-          "samples": 1000,
-          "mean": 0,
-          "p50": 0,
-          "p95": 0.01,
-          "p99": 0.01,
-          "min": 0,
-          "max": 0.05
-        },
-        "vm_configure": {
-          "samples": 1000,
-          "mean": 39.14,
-          "p50": 33.55,
-          "p95": 104.19,
-          "p99": 128.42,
-          "min": 0.08,
-          "max": 146.77
-        },
-        "runtime_mount_wasm": {
-          "samples": 1000,
-          "mean": 394.48,
-          "p50": 391.19,
-          "p95": 470.52,
-          "p99": 493.46,
-          "min": 288.96,
-          "max": 547.77
-        },
-        "runtime_mount_node": {
-          "samples": 1000,
-          "mean": 3.45,
-          "p50": 3.26,
-          "p95": 4.63,
-          "p99": 5.02,
-          "min": 2.46,
-          "max": 6.2
-        },
-        "runtime_create_total": {
-          "samples": 1000,
-          "mean": 397.99,
-          "p50": 394.96,
-          "p95": 473.6,
-          "p99": 497.73,
-          "min": 291.81,
-          "max": 551.16
-        },
-        "first_exec": {
-          "samples": 1000,
-          "mean": 646.03,
-          "p50": 640.8,
-          "p95": 684,
-          "p99": 698.73,
-          "min": 613.51,
-          "max": 743.44
-        },
-        "warm_exec": {
-          "samples": 1000,
-          "mean": 468.68,
-          "p50": 466.89,
-          "p95": 488.09,
-          "p99": 513.54,
-          "min": 449.6,
-          "max": 520.28
-        }
-      }
-    },
-    {
-      "scenario": "shared-sidecar",
-      "batchSize": 1,
-      "mode": "sequential",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 4.09,
-        "p50": 3.94,
-        "p95": 5.26,
-        "p99": 5.26,
-        "min": 3.47,
-        "max": 5.26
-      },
-      "coldStart": {
-        "samples": 5,
-        "mean": 774.17,
-        "p50": 774.5,
-        "p95": 778.62,
-        "p99": 778.62,
-        "min": 767.75,
-        "max": 778.62
-      },
-      "warmStart": {
-        "samples": 5,
-        "mean": 457.19,
-        "p50": 452.75,
-        "p95": 466.31,
-        "p99": 466.31,
-        "min": 450.8,
-        "max": 466.31
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 5,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.03,
-          "min": 0.02,
-          "max": 0.03
-        },
-        "session_open": {
-          "samples": 5,
-          "mean": 0.37,
-          "p50": 0.3,
-          "p95": 0.71,
-          "p99": 0.71,
-          "min": 0.21,
-          "max": 0.71
-        },
-        "vm_create": {
-          "samples": 5,
-          "mean": 1.48,
-          "p50": 1.22,
-          "p95": 2.63,
-          "p99": 2.63,
-          "min": 1.08,
-          "max": 2.63
-        },
-        "vm_ready": {
-          "samples": 5,
-          "mean": 0,
-          "p50": 0,
-          "p95": 0.01,
-          "p99": 0.01,
-          "min": 0,
-          "max": 0.01
-        },
-        "vm_configure": {
-          "samples": 5,
-          "mean": 0.12,
-          "p50": 0.11,
-          "p95": 0.23,
-          "p99": 0.23,
-          "min": 0.09,
-          "max": 0.23
-        },
-        "runtime_mount_wasm": {
-          "samples": 5,
-          "mean": 169.17,
-          "p50": 170.47,
-          "p95": 175.92,
-          "p99": 175.92,
-          "min": 161.9,
-          "max": 175.92
-        },
-        "runtime_mount_node": {
-          "samples": 5,
-          "mean": 2.63,
-          "p50": 2.61,
-          "p95": 2.77,
-          "p99": 2.77,
-          "min": 2.53,
-          "max": 2.77
-        },
-        "runtime_create_total": {
-          "samples": 5,
-          "mean": 171.89,
-          "p50": 173.09,
-          "p95": 178.62,
-          "p99": 178.62,
-          "min": 164.59,
-          "max": 178.62
-        },
-        "first_exec": {
-          "samples": 5,
-          "mean": 602.27,
-          "p50": 604.54,
-          "p95": 609.91,
-          "p99": 609.91,
-          "min": 594.65,
-          "max": 609.91
-        },
-        "warm_exec": {
-          "samples": 5,
-          "mean": 457.19,
-          "p50": 452.75,
-          "p95": 466.31,
-          "p99": 466.31,
-          "min": 450.8,
-          "max": 466.31
-        }
-      }
-    },
-    {
-      "scenario": "shared-sidecar",
-      "batchSize": 1,
-      "mode": "concurrent",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 6.12,
-        "p50": 5.21,
-        "p95": 9.57,
-        "p99": 9.57,
-        "min": 5.06,
-        "max": 9.57
-      },
-      "coldStart": {
-        "samples": 5,
-        "mean": 775.66,
-        "p50": 776.97,
-        "p95": 780.66,
-        "p99": 780.66,
-        "min": 766.27,
-        "max": 780.66
-      },
-      "warmStart": {
-        "samples": 5,
-        "mean": 452.79,
-        "p50": 453.29,
-        "p95": 453.98,
-        "p99": 453.98,
-        "min": 451.29,
-        "max": 453.98
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 5,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.02,
-          "p99": 0.02,
-          "min": 0.02,
-          "max": 0.02
-        },
-        "session_open": {
-          "samples": 5,
-          "mean": 0.38,
-          "p50": 0.4,
-          "p95": 0.49,
-          "p99": 0.49,
-          "min": 0.24,
-          "max": 0.49
-        },
-        "vm_create": {
-          "samples": 5,
-          "mean": 1.28,
-          "p50": 1.14,
-          "p95": 1.87,
-          "p99": 1.87,
-          "min": 1.1,
-          "max": 1.87
-        },
-        "vm_ready": {
-          "samples": 5,
-          "mean": 0.01,
-          "p50": 0,
-          "p95": 0.02,
-          "p99": 0.02,
-          "min": 0,
-          "max": 0.02
-        },
-        "vm_configure": {
-          "samples": 5,
-          "mean": 0.09,
-          "p50": 0.09,
-          "p95": 0.12,
-          "p99": 0.12,
-          "min": 0.07,
-          "max": 0.12
-        },
-        "runtime_mount_wasm": {
-          "samples": 5,
-          "mean": 169.66,
-          "p50": 169.79,
-          "p95": 171.77,
-          "p99": 171.77,
-          "min": 166.04,
-          "max": 171.77
-        },
-        "runtime_mount_node": {
-          "samples": 5,
-          "mean": 3.18,
-          "p50": 2.71,
-          "p95": 4.19,
-          "p99": 4.19,
-          "min": 2.59,
-          "max": 4.19
-        },
-        "runtime_create_total": {
-          "samples": 5,
-          "mean": 172.93,
-          "p50": 173.44,
-          "p95": 176.06,
-          "p99": 176.06,
-          "min": 168.76,
-          "max": 176.06
-        },
-        "first_exec": {
-          "samples": 5,
-          "mean": 602.73,
-          "p50": 603.17,
-          "p95": 605.43,
-          "p99": 605.43,
-          "min": 597.5,
-          "max": 605.43
-        },
-        "warm_exec": {
-          "samples": 5,
-          "mean": 452.79,
-          "p50": 453.29,
-          "p95": 453.98,
-          "p99": 453.98,
-          "min": 451.29,
-          "max": 453.98
-        }
-      }
-    },
-    {
-      "scenario": "shared-sidecar",
-      "batchSize": 10,
-      "mode": "sequential",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 5.51,
-        "p50": 5.49,
-        "p95": 5.73,
-        "p99": 5.73,
-        "min": 5.37,
-        "max": 5.73
-      },
-      "coldStart": {
-        "samples": 50,
-        "mean": 627.58,
-        "p50": 613.98,
-        "p95": 773.01,
-        "p99": 783.61,
-        "min": 592.18,
-        "max": 783.61
-      },
-      "warmStart": {
-        "samples": 50,
-        "mean": 450.97,
-        "p50": 450.94,
-        "p95": 459.89,
-        "p99": 466.32,
-        "min": 443.57,
-        "max": 466.32
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 50,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.04,
-          "min": 0.02,
-          "max": 0.04
-        },
-        "session_open": {
-          "samples": 50,
-          "mean": 0.21,
-          "p50": 0.19,
-          "p95": 0.35,
-          "p99": 0.38,
-          "min": 0.14,
-          "max": 0.38
-        },
-        "vm_create": {
-          "samples": 50,
-          "mean": 1.3,
-          "p50": 1.17,
-          "p95": 1.96,
-          "p99": 2.3,
-          "min": 0.96,
-          "max": 2.3
-        },
-        "vm_ready": {
-          "samples": 50,
-          "mean": 0.01,
-          "p50": 0,
-          "p95": 0.03,
-          "p99": 0.03,
-          "min": 0,
-          "max": 0.03
-        },
-        "vm_configure": {
-          "samples": 50,
-          "mean": 0.1,
-          "p50": 0.09,
-          "p95": 0.19,
-          "p99": 0.21,
-          "min": 0.06,
-          "max": 0.21
-        },
-        "runtime_mount_wasm": {
-          "samples": 50,
-          "mean": 159.99,
-          "p50": 158.99,
-          "p95": 173.9,
-          "p99": 176.82,
-          "min": 143.47,
-          "max": 176.82
-        },
-        "runtime_mount_node": {
-          "samples": 50,
-          "mean": 2.84,
-          "p50": 2.68,
-          "p95": 3.92,
-          "p99": 4.16,
-          "min": 2.52,
-          "max": 4.16
-        },
-        "runtime_create_total": {
-          "samples": 50,
-          "mean": 162.9,
-          "p50": 161.69,
-          "p95": 177.85,
-          "p99": 179.59,
-          "min": 146.04,
-          "max": 179.59
-        },
-        "first_exec": {
-          "samples": 50,
-          "mean": 464.68,
-          "p50": 449.24,
-          "p95": 601.5,
-          "p99": 605.66,
-          "min": 444.51,
-          "max": 605.66
-        },
-        "warm_exec": {
-          "samples": 50,
-          "mean": 450.97,
-          "p50": 450.94,
-          "p95": 459.89,
-          "p99": 466.32,
-          "min": 443.57,
-          "max": 466.32
-        }
-      }
-    },
-    {
-      "scenario": "shared-sidecar",
-      "batchSize": 10,
-      "mode": "concurrent",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 4.94,
-        "p50": 5.23,
-        "p95": 5.88,
-        "p99": 5.88,
-        "min": 3.84,
-        "max": 5.88
-      },
-      "coldStart": {
-        "samples": 50,
-        "mean": 3493.51,
-        "p50": 4558.22,
-        "p95": 4676.49,
-        "p99": 6652.52,
-        "min": 725.69,
-        "max": 6652.52
-      },
-      "warmStart": {
-        "samples": 50,
-        "mean": 2174.08,
-        "p50": 2086.34,
-        "p95": 4965.71,
-        "p99": 5377.91,
-        "min": 438.99,
-        "max": 5377.91
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 50,
-          "mean": 43.92,
-          "p50": 25.47,
-          "p95": 118.61,
-          "p99": 126.64,
-          "min": 0.03,
-          "max": 126.64
-        },
-        "session_open": {
-          "samples": 50,
-          "mean": 0.61,
-          "p50": 0.57,
-          "p95": 1.17,
-          "p99": 1.26,
-          "min": 0.2,
-          "max": 1.26
-        },
-        "vm_create": {
-          "samples": 50,
-          "mean": 3.79,
-          "p50": 3.39,
-          "p95": 7.51,
-          "p99": 8.95,
-          "min": 1.13,
-          "max": 8.95
-        },
-        "vm_ready": {
-          "samples": 50,
-          "mean": 0.23,
-          "p50": 0,
-          "p95": 0.04,
-          "p99": 11.07,
-          "min": 0,
-          "max": 11.07
-        },
-        "vm_configure": {
-          "samples": 50,
-          "mean": 19.29,
-          "p50": 11.57,
-          "p95": 72.25,
-          "p99": 103.13,
-          "min": 0.18,
-          "max": 103.13
-        },
-        "runtime_mount_wasm": {
-          "samples": 50,
-          "mean": 920.58,
-          "p50": 1051.38,
-          "p95": 1149.41,
-          "p99": 1158.81,
-          "min": 270.43,
-          "max": 1158.81
-        },
-        "runtime_mount_node": {
-          "samples": 50,
-          "mean": 16.09,
-          "p50": 18.54,
-          "p95": 19.55,
-          "p99": 19.6,
-          "min": 4.69,
-          "max": 19.6
-        },
-        "runtime_create_total": {
-          "samples": 50,
-          "mean": 936.73,
-          "p50": 1070.66,
-          "p95": 1168.91,
-          "p99": 1178.48,
-          "min": 275.42,
-          "max": 1178.48
-        },
-        "first_exec": {
-          "samples": 50,
-          "mean": 2556.78,
-          "p50": 3507.02,
-          "p95": 3519.16,
-          "p99": 5581.86,
-          "min": 448.08,
-          "max": 5581.86
-        },
-        "warm_exec": {
-          "samples": 50,
-          "mean": 2174.08,
-          "p50": 2086.34,
-          "p95": 4965.71,
-          "p99": 5377.91,
-          "min": 438.99,
-          "max": 5377.91
-        }
-      }
-    },
-    {
-      "scenario": "shared-sidecar",
-      "batchSize": 50,
-      "mode": "sequential",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 5.12,
-        "p50": 5.09,
-        "p95": 5.39,
-        "p99": 5.39,
-        "min": 4.93,
-        "max": 5.39
-      },
-      "coldStart": {
-        "samples": 250,
-        "mean": 610.76,
-        "p50": 605.65,
-        "p95": 627.44,
-        "p99": 775.68,
-        "min": 591.17,
-        "max": 788.91
-      },
-      "warmStart": {
-        "samples": 250,
-        "mean": 449.02,
-        "p50": 448.23,
-        "p95": 456.81,
-        "p99": 464.36,
-        "min": 442.29,
-        "max": 469.3
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 250,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.05,
-          "min": 0.02,
-          "max": 0.07
-        },
-        "session_open": {
-          "samples": 250,
-          "mean": 0.26,
-          "p50": 0.21,
-          "p95": 0.41,
-          "p99": 1.18,
-          "min": 0.12,
-          "max": 3.85
-        },
-        "vm_create": {
-          "samples": 250,
-          "mean": 1.28,
-          "p50": 1.14,
-          "p95": 1.94,
-          "p99": 2.34,
-          "min": 0.93,
-          "max": 3.14
-        },
-        "vm_ready": {
-          "samples": 250,
-          "mean": 0.01,
-          "p50": 0,
-          "p95": 0.03,
-          "p99": 0.04,
-          "min": 0,
-          "max": 0.23
-        },
-        "vm_configure": {
-          "samples": 250,
-          "mean": 0.12,
-          "p50": 0.09,
-          "p95": 0.19,
-          "p99": 0.34,
-          "min": 0.06,
-          "max": 2.44
-        },
-        "runtime_mount_wasm": {
-          "samples": 250,
-          "mean": 155.28,
-          "p50": 153.45,
-          "p95": 169.89,
-          "p99": 187.15,
-          "min": 142.75,
-          "max": 203.16
-        },
-        "runtime_mount_node": {
-          "samples": 250,
-          "mean": 2.8,
-          "p50": 2.67,
-          "p95": 3.69,
-          "p99": 4.13,
-          "min": 2.48,
-          "max": 8.15
-        },
-        "runtime_create_total": {
-          "samples": 250,
-          "mean": 158.16,
-          "p50": 156.3,
-          "p95": 172.65,
-          "p99": 189.87,
-          "min": 145.32,
-          "max": 206.18
-        },
-        "first_exec": {
-          "samples": 250,
-          "mean": 452.6,
-          "p50": 448.83,
-          "p95": 459,
-          "p99": 599.03,
-          "min": 442.61,
-          "max": 603.9
-        },
-        "warm_exec": {
-          "samples": 250,
-          "mean": 449.02,
-          "p50": 448.23,
-          "p95": 456.81,
-          "p99": 464.36,
-          "min": 442.29,
-          "max": 469.3
-        }
-      }
-    },
-    {
-      "scenario": "shared-sidecar",
-      "batchSize": 50,
-      "mode": "concurrent",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 7.15,
-        "p50": 5.56,
-        "p95": 14.37,
-        "p99": 14.37,
-        "min": 3.96,
-        "max": 14.37
-      },
-      "coldStart": {
-        "samples": 250,
-        "mean": 3197.96,
-        "p50": 3299.89,
-        "p95": 4602.98,
-        "p99": 4657.39,
-        "min": 742.4,
-        "max": 6126.19
-      },
-      "warmStart": {
-        "samples": 250,
-        "mean": 2162.03,
-        "p50": 2212.06,
-        "p95": 3395.52,
-        "p99": 5415.61,
-        "min": 345.69,
-        "max": 5535.61
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 250,
-          "mean": 48.75,
-          "p50": 43.21,
-          "p95": 113.11,
-          "p99": 124.69,
-          "min": 0.03,
-          "max": 128.47
-        },
-        "session_open": {
-          "samples": 250,
-          "mean": 0.52,
-          "p50": 0.48,
-          "p95": 1.34,
-          "p99": 1.7,
-          "min": 0.15,
-          "max": 1.77
-        },
-        "vm_create": {
-          "samples": 250,
-          "mean": 4.33,
-          "p50": 4.2,
-          "p95": 8.07,
-          "p99": 9.82,
-          "min": 0.95,
-          "max": 10.89
-        },
-        "vm_ready": {
-          "samples": 250,
-          "mean": 0.4,
-          "p50": 0,
-          "p95": 0.04,
-          "p99": 10.69,
-          "min": 0,
-          "max": 48.48
-        },
-        "vm_configure": {
-          "samples": 250,
-          "mean": 21.82,
-          "p50": 16.13,
-          "p95": 55.91,
-          "p99": 90.5,
-          "min": 0.77,
-          "max": 92.12
-        },
-        "runtime_mount_wasm": {
-          "samples": 250,
-          "mean": 1061.42,
-          "p50": 1088.07,
-          "p95": 1166.25,
-          "p99": 1193.51,
-          "min": 288.93,
-          "max": 1210.24
-        },
-        "runtime_mount_node": {
-          "samples": 250,
-          "mean": 18.88,
-          "p50": 19.28,
-          "p95": 21.01,
-          "p99": 21.38,
-          "min": 4.8,
-          "max": 21.38
-        },
-        "runtime_create_total": {
-          "samples": 250,
-          "mean": 1080.36,
-          "p50": 1107.01,
-          "p95": 1184.53,
-          "p99": 1212.99,
-          "min": 294.01,
-          "max": 1230.75
-        },
-        "first_exec": {
-          "samples": 250,
-          "mean": 2117.6,
-          "p50": 2211.64,
-          "p95": 3514.23,
-          "p99": 3520.26,
-          "min": 373.91,
-          "max": 5044.43
-        },
-        "warm_exec": {
-          "samples": 250,
-          "mean": 2162.03,
-          "p50": 2212.06,
-          "p95": 3395.52,
-          "p99": 5415.61,
-          "min": 345.69,
-          "max": 5535.61
-        }
-      }
-    },
-    {
-      "scenario": "shared-sidecar",
-      "batchSize": 100,
-      "mode": "sequential",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 5.22,
-        "p50": 5.43,
-        "p95": 5.74,
-        "p99": 5.74,
-        "min": 4.48,
-        "max": 5.74
-      },
-      "coldStart": {
-        "samples": 500,
-        "mean": 619.24,
-        "p50": 610.78,
-        "p95": 656.44,
-        "p99": 774.55,
-        "min": 590.27,
-        "max": 970.58
-      },
-      "warmStart": {
-        "samples": 500,
-        "mean": 453.68,
-        "p50": 449.44,
-        "p95": 472.09,
-        "p99": 482.32,
-        "min": 442.18,
-        "max": 588.18
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 500,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.06,
-          "min": 0.02,
-          "max": 0.25
-        },
-        "session_open": {
-          "samples": 500,
-          "mean": 0.25,
-          "p50": 0.21,
-          "p95": 0.45,
-          "p99": 0.69,
-          "min": 0.14,
-          "max": 3.12
-        },
-        "vm_create": {
-          "samples": 500,
-          "mean": 1.27,
-          "p50": 1.12,
-          "p95": 1.98,
-          "p99": 2.41,
-          "min": 0.95,
-          "max": 4.51
-        },
-        "vm_ready": {
-          "samples": 500,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.04,
-          "p99": 0.23,
-          "min": 0,
-          "max": 0.26
-        },
-        "vm_configure": {
-          "samples": 500,
-          "mean": 0.17,
-          "p50": 0.1,
-          "p95": 0.29,
-          "p99": 2.49,
-          "min": 0.06,
-          "max": 3.32
-        },
-        "runtime_mount_wasm": {
-          "samples": 500,
-          "mean": 160.04,
-          "p50": 157.04,
-          "p95": 180.19,
-          "p99": 187.13,
-          "min": 143.95,
-          "max": 215.2
-        },
-        "runtime_mount_node": {
-          "samples": 500,
-          "mean": 3.63,
-          "p50": 2.84,
-          "p95": 3.52,
-          "p99": 4.54,
-          "min": 2.5,
-          "max": 348
-        },
-        "runtime_create_total": {
-          "samples": 500,
-          "mean": 163.74,
-          "p50": 159.9,
-          "p95": 183.45,
-          "p99": 190.57,
-          "min": 146.67,
-          "max": 511.74
-        },
-        "first_exec": {
-          "samples": 500,
-          "mean": 455.5,
-          "p50": 449.94,
-          "p95": 471.76,
-          "p99": 582.17,
-          "min": 442.77,
-          "max": 622.04
-        },
-        "warm_exec": {
-          "samples": 500,
-          "mean": 453.68,
-          "p50": 449.44,
-          "p95": 472.09,
-          "p99": 482.32,
-          "min": 442.18,
-          "max": 588.18
-        }
-      }
-    },
-    {
-      "scenario": "shared-sidecar",
-      "batchSize": 100,
-      "mode": "concurrent",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 5.09,
-        "p50": 5.49,
-        "p95": 6.49,
-        "p99": 6.49,
-        "min": 3.71,
-        "max": 6.49
-      },
-      "coldStart": {
-        "samples": 500,
-        "mean": 3187.99,
-        "p50": 3317.35,
-        "p95": 4591.89,
-        "p99": 4694.52,
-        "min": 1111.29,
-        "max": 6710.25
-      },
-      "warmStart": {
-        "samples": 500,
-        "mean": 2134.07,
-        "p50": 2207.08,
-        "p95": 2716.34,
-        "p99": 3940.45,
-        "min": 438.63,
-        "max": 4994.58
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 500,
-          "mean": 49.97,
-          "p50": 44.7,
-          "p95": 111.92,
-          "p99": 119.87,
-          "min": 0.03,
-          "max": 131.84
-        },
-        "session_open": {
-          "samples": 500,
-          "mean": 0.59,
-          "p50": 0.54,
-          "p95": 1.32,
-          "p99": 1.59,
-          "min": 0.13,
-          "max": 1.66
-        },
-        "vm_create": {
-          "samples": 500,
-          "mean": 4.3,
-          "p50": 4.24,
-          "p95": 7.73,
-          "p99": 9.48,
-          "min": 0.98,
-          "max": 10.6
-        },
-        "vm_ready": {
-          "samples": 500,
-          "mean": 0.55,
-          "p50": 0,
-          "p95": 0.05,
-          "p99": 25.38,
-          "min": 0,
-          "max": 34.38
-        },
-        "vm_configure": {
-          "samples": 500,
-          "mean": 19.08,
-          "p50": 14.62,
-          "p95": 50.06,
-          "p99": 72.85,
-          "min": 2.37,
-          "max": 81.81
-        },
-        "runtime_mount_wasm": {
-          "samples": 500,
-          "mean": 1092.42,
-          "p50": 1110.41,
-          "p95": 1185.79,
-          "p99": 1210.14,
-          "min": 565.86,
-          "max": 1221.78
-        },
-        "runtime_mount_node": {
-          "samples": 500,
-          "mean": 19.53,
-          "p50": 19.5,
-          "p95": 21.82,
-          "p99": 30.38,
-          "min": 9.73,
-          "max": 30.52
-        },
-        "runtime_create_total": {
-          "samples": 500,
-          "mean": 1112,
-          "p50": 1130.31,
-          "p95": 1205.87,
-          "p99": 1230.32,
-          "min": 585.93,
-          "max": 1242
-        },
-        "first_exec": {
-          "samples": 500,
-          "mean": 2075.99,
-          "p50": 2212.38,
-          "p95": 3512.6,
-          "p99": 3535.78,
-          "min": 365.84,
-          "max": 5608.44
-        },
-        "warm_exec": {
-          "samples": 500,
-          "mean": 2134.07,
-          "p50": 2207.08,
-          "p95": 2716.34,
-          "p99": 3940.45,
-          "min": 438.63,
-          "max": 4994.58
-        }
-      }
-    },
-    {
-      "scenario": "shared-sidecar",
-      "batchSize": 200,
-      "mode": "sequential",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 5.17,
-        "p50": 5.26,
-        "p95": 6.09,
-        "p99": 6.09,
-        "min": 4.06,
-        "max": 6.09
-      },
-      "coldStart": {
-        "samples": 1000,
-        "mean": 616.2,
-        "p50": 614.43,
-        "p95": 633.42,
-        "p99": 644.44,
-        "min": 592.87,
-        "max": 945.4
-      },
-      "warmStart": {
-        "samples": 1000,
-        "mean": 449.22,
-        "p50": 448.24,
-        "p95": 456.27,
-        "p99": 463.62,
-        "min": 441.39,
-        "max": 631.44
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 1000,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.05,
-          "min": 0.02,
-          "max": 0.27
-        },
-        "session_open": {
-          "samples": 1000,
-          "mean": 0.28,
-          "p50": 0.25,
-          "p95": 0.49,
-          "p99": 0.74,
-          "min": 0.12,
-          "max": 1.43
-        },
-        "vm_create": {
-          "samples": 1000,
-          "mean": 1.19,
-          "p50": 1.11,
-          "p95": 1.77,
-          "p99": 2.23,
-          "min": 0.95,
-          "max": 2.81
-        },
-        "vm_ready": {
-          "samples": 1000,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.03,
-          "p99": 0.22,
-          "min": 0,
-          "max": 0.28
-        },
-        "vm_configure": {
-          "samples": 1000,
-          "mean": 0.17,
-          "p50": 0.12,
-          "p95": 0.31,
-          "p99": 1.94,
-          "min": 0.07,
-          "max": 3.43
-        },
-        "runtime_mount_wasm": {
-          "samples": 1000,
-          "mean": 162.26,
-          "p50": 161.85,
-          "p95": 177.54,
-          "p99": 184.97,
-          "min": 143.69,
-          "max": 214.76
-        },
-        "runtime_mount_node": {
-          "samples": 1000,
-          "mean": 3.33,
-          "p50": 2.92,
-          "p95": 3.6,
-          "p99": 4.52,
-          "min": 2.49,
-          "max": 329.2
-        },
-        "runtime_create_total": {
-          "samples": 1000,
-          "mean": 165.66,
-          "p50": 164.85,
-          "p95": 181,
-          "p99": 188.95,
-          "min": 146.4,
-          "max": 489.96
-        },
-        "first_exec": {
-          "samples": 1000,
-          "mean": 450.54,
-          "p50": 448.77,
-          "p95": 457.83,
-          "p99": 473.65,
-          "min": 441.44,
-          "max": 613.1
-        },
-        "warm_exec": {
-          "samples": 1000,
-          "mean": 449.22,
-          "p50": 448.24,
-          "p95": 456.27,
-          "p99": 463.62,
-          "min": 441.39,
-          "max": 631.44
-        }
-      }
-    },
-    {
-      "scenario": "shared-sidecar",
-      "batchSize": 200,
-      "mode": "concurrent",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 3.81,
-        "p50": 3.79,
-        "p95": 3.92,
-        "p99": 3.92,
-        "min": 3.73,
-        "max": 3.92
-      },
-      "coldStart": {
-        "samples": 1000,
-        "mean": 3235.65,
-        "p50": 3340.36,
-        "p95": 3501.49,
-        "p99": 4639.9,
-        "min": 1603.72,
-        "max": 6731.02
-      },
-      "warmStart": {
-        "samples": 1000,
-        "mean": 2102.22,
-        "p50": 2200.24,
-        "p95": 2732.96,
-        "p99": 3665.63,
-        "min": 299.53,
-        "max": 5422.94
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 1000,
-          "mean": 49.92,
-          "p50": 47.71,
-          "p95": 111.37,
-          "p99": 116.24,
-          "min": 0.03,
-          "max": 123.67
-        },
-        "session_open": {
-          "samples": 1000,
-          "mean": 0.73,
-          "p50": 0.61,
-          "p95": 1.79,
-          "p99": 2.3,
-          "min": 0.13,
-          "max": 2.61
-        },
-        "vm_create": {
-          "samples": 1000,
-          "mean": 4.15,
-          "p50": 4.14,
-          "p95": 7.02,
-          "p99": 8.07,
-          "min": 0.96,
-          "max": 9.81
-        },
-        "vm_ready": {
-          "samples": 1000,
-          "mean": 0.12,
-          "p50": 0,
-          "p95": 0.03,
-          "p99": 0.05,
-          "min": 0,
-          "max": 54.89
-        },
-        "vm_configure": {
-          "samples": 1000,
-          "mean": 17.93,
-          "p50": 14.71,
-          "p95": 40.65,
-          "p99": 57.22,
-          "min": 1.6,
-          "max": 102.1
-        },
-        "runtime_mount_wasm": {
-          "samples": 1000,
-          "mean": 1145.4,
-          "p50": 1147.31,
-          "p95": 1239.47,
-          "p99": 1262.54,
-          "min": 996.9,
-          "max": 1290.99
-        },
-        "runtime_mount_node": {
-          "samples": 1000,
-          "mean": 20.78,
-          "p50": 20.37,
-          "p95": 22.55,
-          "p99": 23.87,
-          "min": 18.46,
-          "max": 61.17
-        },
-        "runtime_create_total": {
-          "samples": 1000,
-          "mean": 1166.23,
-          "p50": 1168.28,
-          "p95": 1260.91,
-          "p99": 1284.1,
-          "min": 1016.18,
-          "max": 1311.64
-        },
-        "first_exec": {
-          "samples": 1000,
-          "mean": 2069.42,
-          "p50": 2210.55,
-          "p95": 2262.54,
-          "p99": 3529.65,
-          "min": 369.41,
-          "max": 5578.1
-        },
-        "warm_exec": {
-          "samples": 1000,
-          "mean": 2102.22,
-          "p50": 2200.24,
-          "p95": 2732.96,
-          "p99": 3665.63,
-          "min": 299.53,
-          "max": 5422.94
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 1,
-      "mode": "sequential",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 4.81,
-        "p50": 4.19,
-        "p95": 6.14,
-        "p99": 6.14,
-        "min": 3.83,
-        "max": 6.14
-      },
-      "coldStart": {
-        "samples": 5,
-        "mean": 351,
-        "p50": 349.56,
-        "p95": 358.02,
-        "p99": 358.02,
-        "min": 347.63,
-        "max": 358.02
-      },
-      "warmStart": {
-        "samples": 5,
-        "mean": 1.27,
-        "p50": 1.27,
-        "p95": 1.32,
-        "p99": 1.32,
-        "min": 1.24,
-        "max": 1.32
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 5,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.02,
-          "p99": 0.02,
-          "min": 0.02,
-          "max": 0.02
-        },
-        "session_open": {
-          "samples": 5,
-          "mean": 0.33,
-          "p50": 0.29,
-          "p95": 0.43,
-          "p99": 0.43,
-          "min": 0.27,
-          "max": 0.43
-        },
-        "vm_create": {
-          "samples": 5,
-          "mean": 1.22,
-          "p50": 1.26,
-          "p95": 1.34,
-          "p99": 1.34,
-          "min": 1.12,
-          "max": 1.34
-        },
-        "vm_ready": {
-          "samples": 5,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.01,
-          "p99": 0.01,
-          "min": 0.01,
-          "max": 0.01
-        },
-        "vm_configure": {
-          "samples": 5,
-          "mean": 0.11,
-          "p50": 0.09,
-          "p95": 0.19,
-          "p99": 0.19,
-          "min": 0.09,
-          "max": 0.19
-        },
-        "runtime_mount_wasm": {
-          "samples": 5,
-          "mean": 171.79,
-          "p50": 170.03,
-          "p95": 179.45,
-          "p99": 179.45,
-          "min": 165.9,
-          "max": 179.45
-        },
-        "runtime_mount_node": {
-          "samples": 5,
-          "mean": 2.85,
-          "p50": 2.77,
-          "p95": 3.22,
-          "p99": 3.22,
-          "min": 2.58,
-          "max": 3.22
-        },
-        "runtime_create_total": {
-          "samples": 5,
-          "mean": 174.73,
-          "p50": 173.03,
-          "p95": 182.28,
-          "p99": 182.28,
-          "min": 168.77,
-          "max": 182.28
-        },
-        "resident_runner_create": {
-          "samples": 5,
-          "mean": 174.73,
-          "p50": 174.4,
-          "p95": 178.32,
-          "p99": 178.32,
-          "min": 173.04,
-          "max": 178.32
-        },
-        "resident_first_exec": {
-          "samples": 5,
-          "mean": 1.54,
-          "p50": 1.31,
-          "p95": 2.47,
-          "p99": 2.47,
-          "min": 1.25,
-          "max": 2.47
-        },
-        "resident_warm_exec": {
-          "samples": 5,
-          "mean": 1.27,
-          "p50": 1.27,
-          "p95": 1.32,
-          "p99": 1.32,
-          "min": 1.24,
-          "max": 1.32
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 1,
-      "mode": "concurrent",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 4.6,
-        "p50": 4.08,
-        "p95": 6.27,
-        "p99": 6.27,
-        "min": 3.54,
-        "max": 6.27
-      },
-      "coldStart": {
-        "samples": 5,
-        "mean": 347.91,
-        "p50": 346.99,
-        "p95": 358.2,
-        "p99": 358.2,
-        "min": 340.22,
-        "max": 358.2
-      },
-      "warmStart": {
-        "samples": 5,
-        "mean": 1.25,
-        "p50": 1.26,
-        "p95": 1.29,
-        "p99": 1.29,
-        "min": 1.19,
-        "max": 1.29
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 5,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.02,
-          "p99": 0.02,
-          "min": 0.02,
-          "max": 0.02
-        },
-        "session_open": {
-          "samples": 5,
-          "mean": 0.37,
-          "p50": 0.3,
-          "p95": 0.71,
-          "p99": 0.71,
-          "min": 0.22,
-          "max": 0.71
-        },
-        "vm_create": {
-          "samples": 5,
-          "mean": 1.75,
-          "p50": 1.21,
-          "p95": 3.24,
-          "p99": 3.24,
-          "min": 1.06,
-          "max": 3.24
-        },
-        "vm_ready": {
-          "samples": 5,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.01,
-          "p99": 0.01,
-          "min": 0.01,
-          "max": 0.01
-        },
-        "vm_configure": {
-          "samples": 5,
-          "mean": 0.71,
-          "p50": 0.1,
-          "p95": 3.14,
-          "p99": 3.14,
-          "min": 0.08,
-          "max": 3.14
-        },
-        "runtime_mount_wasm": {
-          "samples": 5,
-          "mean": 169.97,
-          "p50": 171.18,
-          "p95": 176.64,
-          "p99": 176.64,
-          "min": 160.07,
-          "max": 176.64
-        },
-        "runtime_mount_node": {
-          "samples": 5,
-          "mean": 2.77,
-          "p50": 2.67,
-          "p95": 3.13,
-          "p99": 3.13,
-          "min": 2.61,
-          "max": 3.13
-        },
-        "runtime_create_total": {
-          "samples": 5,
-          "mean": 172.82,
-          "p50": 174.09,
-          "p95": 179.34,
-          "p99": 179.34,
-          "min": 162.77,
-          "max": 179.34
-        },
-        "resident_runner_create": {
-          "samples": 5,
-          "mean": 173.75,
-          "p50": 172.53,
-          "p95": 177.55,
-          "p99": 177.55,
-          "min": 170.41,
-          "max": 177.55
-        },
-        "resident_first_exec": {
-          "samples": 5,
-          "mean": 1.34,
-          "p50": 1.32,
-          "p95": 1.49,
-          "p99": 1.49,
-          "min": 1.23,
-          "max": 1.49
-        },
-        "resident_warm_exec": {
-          "samples": 5,
-          "mean": 1.25,
-          "p50": 1.26,
-          "p95": 1.29,
-          "p99": 1.29,
-          "min": 1.19,
-          "max": 1.29
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 10,
-      "mode": "sequential",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 5.17,
-        "p50": 5.36,
-        "p95": 5.73,
-        "p99": 5.73,
-        "min": 4.08,
-        "max": 5.73
-      },
-      "coldStart": {
-        "samples": 50,
-        "mean": 202.61,
-        "p50": 186.16,
-        "p95": 350.97,
-        "p99": 353.52,
-        "min": 176.1,
-        "max": 353.52
-      },
-      "warmStart": {
-        "samples": 50,
-        "mean": 1.26,
-        "p50": 1.24,
-        "p95": 1.37,
-        "p99": 1.57,
-        "min": 1.17,
-        "max": 1.57
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 50,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.05,
-          "min": 0.02,
-          "max": 0.05
-        },
-        "session_open": {
-          "samples": 50,
-          "mean": 0.28,
-          "p50": 0.2,
-          "p95": 0.44,
-          "p99": 1.94,
-          "min": 0.13,
-          "max": 1.94
-        },
-        "vm_create": {
-          "samples": 50,
-          "mean": 1.4,
-          "p50": 1.2,
-          "p95": 2.49,
-          "p99": 2.69,
-          "min": 0.98,
-          "max": 2.69
-        },
-        "vm_ready": {
-          "samples": 50,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.04,
-          "p99": 0.05,
-          "min": 0,
-          "max": 0.05
-        },
-        "vm_configure": {
-          "samples": 50,
-          "mean": 0.16,
-          "p50": 0.09,
-          "p95": 0.21,
-          "p99": 2.67,
-          "min": 0.07,
-          "max": 2.67
-        },
-        "runtime_mount_wasm": {
-          "samples": 50,
-          "mean": 157.05,
-          "p50": 154.63,
-          "p95": 171.86,
-          "p99": 174.71,
-          "min": 146.87,
-          "max": 174.71
-        },
-        "runtime_mount_node": {
-          "samples": 50,
-          "mean": 2.82,
-          "p50": 2.7,
-          "p95": 3.57,
-          "p99": 3.8,
-          "min": 2.57,
-          "max": 3.8
-        },
-        "runtime_create_total": {
-          "samples": 50,
-          "mean": 159.95,
-          "p50": 157.63,
-          "p95": 175.41,
-          "p99": 178.08,
-          "min": 150.41,
-          "max": 178.08
-        },
-        "resident_runner_create": {
-          "samples": 50,
-          "mean": 41.28,
-          "p50": 26.24,
-          "p95": 174.16,
-          "p99": 175.12,
-          "min": 24.46,
-          "max": 175.12
-        },
-        "resident_first_exec": {
-          "samples": 50,
-          "mean": 1.37,
-          "p50": 1.3,
-          "p95": 2.45,
-          "p99": 2.5,
-          "min": 1.21,
-          "max": 2.5
-        },
-        "resident_warm_exec": {
-          "samples": 50,
-          "mean": 1.26,
-          "p50": 1.24,
-          "p95": 1.37,
-          "p99": 1.57,
-          "min": 1.17,
-          "max": 1.57
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 10,
-      "mode": "concurrent",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 5.49,
-        "p50": 5.51,
-        "p95": 5.79,
-        "p99": 5.79,
-        "min": 5.22,
-        "max": 5.79
-      },
-      "coldStart": {
-        "samples": 50,
-        "mean": 205,
-        "p50": 186.33,
-        "p95": 351.88,
-        "p99": 359.75,
-        "min": 176.52,
-        "max": 359.75
-      },
-      "warmStart": {
-        "samples": 50,
-        "mean": 1.26,
-        "p50": 1.25,
-        "p95": 1.39,
-        "p99": 1.42,
-        "min": 1.17,
-        "max": 1.42
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 50,
-          "mean": 0.03,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.23,
-          "min": 0.02,
-          "max": 0.23
-        },
-        "session_open": {
-          "samples": 50,
-          "mean": 0.23,
-          "p50": 0.2,
-          "p95": 0.37,
-          "p99": 0.41,
-          "min": 0.14,
-          "max": 0.41
-        },
-        "vm_create": {
-          "samples": 50,
-          "mean": 1.41,
-          "p50": 1.24,
-          "p95": 2.39,
-          "p99": 2.7,
-          "min": 1.01,
-          "max": 2.7
-        },
-        "vm_ready": {
-          "samples": 50,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.04,
-          "p99": 0.26,
-          "min": 0.01,
-          "max": 0.26
-        },
-        "vm_configure": {
-          "samples": 50,
-          "mean": 0.11,
-          "p50": 0.09,
-          "p95": 0.18,
-          "p99": 0.46,
-          "min": 0.06,
-          "max": 0.46
-        },
-        "runtime_mount_wasm": {
-          "samples": 50,
-          "mean": 158.46,
-          "p50": 156.45,
-          "p95": 179.94,
-          "p99": 193.32,
-          "min": 145.55,
-          "max": 193.32
-        },
-        "runtime_mount_node": {
-          "samples": 50,
-          "mean": 2.79,
-          "p50": 2.68,
-          "p95": 3.76,
-          "p99": 4.18,
-          "min": 2.54,
-          "max": 4.18
-        },
-        "runtime_create_total": {
-          "samples": 50,
-          "mean": 161.32,
-          "p50": 159.21,
-          "p95": 182.72,
-          "p99": 196.25,
-          "min": 148.22,
-          "max": 196.25
-        },
-        "resident_runner_create": {
-          "samples": 50,
-          "mean": 42.23,
-          "p50": 26.15,
-          "p95": 177.45,
-          "p99": 180.24,
-          "min": 24.94,
-          "max": 180.24
-        },
-        "resident_first_exec": {
-          "samples": 50,
-          "mean": 1.44,
-          "p50": 1.28,
-          "p95": 2.41,
-          "p99": 2.49,
-          "min": 1.21,
-          "max": 2.49
-        },
-        "resident_warm_exec": {
-          "samples": 50,
-          "mean": 1.26,
-          "p50": 1.25,
-          "p95": 1.39,
-          "p99": 1.42,
-          "min": 1.17,
-          "max": 1.42
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 50,
-      "mode": "sequential",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 5.83,
-        "p50": 5.55,
-        "p95": 6.93,
-        "p99": 6.93,
-        "min": 5.47,
-        "max": 6.93
-      },
-      "coldStart": {
-        "samples": 250,
-        "mean": 187.92,
-        "p50": 182.66,
-        "p95": 197.69,
-        "p99": 350.51,
-        "min": 172.07,
-        "max": 362.01
-      },
-      "warmStart": {
-        "samples": 250,
-        "mean": 1.26,
-        "p50": 1.25,
-        "p95": 1.37,
-        "p99": 1.48,
-        "min": 1.15,
-        "max": 1.67
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 250,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.04,
-          "min": 0.02,
-          "max": 0.23
-        },
-        "session_open": {
-          "samples": 250,
-          "mean": 0.23,
-          "p50": 0.2,
-          "p95": 0.44,
-          "p99": 0.59,
-          "min": 0.13,
-          "max": 0.68
-        },
-        "vm_create": {
-          "samples": 250,
-          "mean": 1.26,
-          "p50": 1.15,
-          "p95": 1.78,
-          "p99": 2.96,
-          "min": 0.95,
-          "max": 4.04
-        },
-        "vm_ready": {
-          "samples": 250,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.04,
-          "p99": 0.05,
-          "min": 0,
-          "max": 0.26
-        },
-        "vm_configure": {
-          "samples": 250,
-          "mean": 0.13,
-          "p50": 0.1,
-          "p95": 0.33,
-          "p99": 0.51,
-          "min": 0.06,
-          "max": 1.94
-        },
-        "runtime_mount_wasm": {
-          "samples": 250,
-          "mean": 153.86,
-          "p50": 152.45,
-          "p95": 165.32,
-          "p99": 176.7,
-          "min": 143.77,
-          "max": 182.19
-        },
-        "runtime_mount_node": {
-          "samples": 250,
-          "mean": 3.45,
-          "p50": 2.68,
-          "p95": 3.87,
-          "p99": 6.54,
-          "min": 2.47,
-          "max": 155.7
-        },
-        "runtime_create_total": {
-          "samples": 250,
-          "mean": 157.38,
-          "p50": 155.29,
-          "p95": 168.61,
-          "p99": 184.5,
-          "min": 146.42,
-          "max": 318.86
-        },
-        "resident_runner_create": {
-          "samples": 250,
-          "mean": 29.13,
-          "p50": 25.8,
-          "p95": 31.18,
-          "p99": 171.67,
-          "min": 24.21,
-          "max": 176.25
-        },
-        "resident_first_exec": {
-          "samples": 250,
-          "mean": 1.4,
-          "p50": 1.3,
-          "p95": 2.41,
-          "p99": 2.8,
-          "min": 1.18,
-          "max": 5.27
-        },
-        "resident_warm_exec": {
-          "samples": 250,
-          "mean": 1.26,
-          "p50": 1.25,
-          "p95": 1.37,
-          "p99": 1.48,
-          "min": 1.15,
-          "max": 1.67
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 50,
-      "mode": "concurrent",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 5.58,
-        "p50": 5.48,
-        "p95": 5.91,
-        "p99": 5.91,
-        "min": 5.23,
-        "max": 5.91
-      },
-      "coldStart": {
-        "samples": 250,
-        "mean": 187.45,
-        "p50": 183.14,
-        "p95": 194.96,
-        "p99": 346.89,
-        "min": 174.71,
-        "max": 354.51
-      },
-      "warmStart": {
-        "samples": 250,
-        "mean": 1.26,
-        "p50": 1.26,
-        "p95": 1.36,
-        "p99": 1.47,
-        "min": 1.14,
-        "max": 1.63
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 250,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.04,
-          "min": 0.02,
-          "max": 0.04
-        },
-        "session_open": {
-          "samples": 250,
-          "mean": 0.24,
-          "p50": 0.2,
-          "p95": 0.44,
-          "p99": 0.59,
-          "min": 0.14,
-          "max": 1.23
-        },
-        "vm_create": {
-          "samples": 250,
-          "mean": 1.29,
-          "p50": 1.16,
-          "p95": 1.99,
-          "p99": 3.13,
-          "min": 0.94,
-          "max": 3.38
-        },
-        "vm_ready": {
-          "samples": 250,
-          "mean": 0.01,
-          "p50": 0,
-          "p95": 0.03,
-          "p99": 0.04,
-          "min": 0,
-          "max": 0.04
-        },
-        "vm_configure": {
-          "samples": 250,
-          "mean": 0.12,
-          "p50": 0.09,
-          "p95": 0.33,
-          "p99": 0.5,
-          "min": 0.06,
-          "max": 0.7
-        },
-        "runtime_mount_wasm": {
-          "samples": 250,
-          "mean": 154.15,
-          "p50": 153.06,
-          "p95": 164.59,
-          "p99": 174.07,
-          "min": 145.22,
-          "max": 175.96
-        },
-        "runtime_mount_node": {
-          "samples": 250,
-          "mean": 2.76,
-          "p50": 2.67,
-          "p95": 3.32,
-          "p99": 4.14,
-          "min": 2.5,
-          "max": 4.68
-        },
-        "runtime_create_total": {
-          "samples": 250,
-          "mean": 156.98,
-          "p50": 155.91,
-          "p95": 167.28,
-          "p99": 176.83,
-          "min": 147.95,
-          "max": 178.81
-        },
-        "resident_runner_create": {
-          "samples": 250,
-          "mean": 29.04,
-          "p50": 25.71,
-          "p95": 29.33,
-          "p99": 174.02,
-          "min": 24.35,
-          "max": 176.34
-        },
-        "resident_first_exec": {
-          "samples": 250,
-          "mean": 1.43,
-          "p50": 1.3,
-          "p95": 2.42,
-          "p99": 2.68,
-          "min": 1.19,
-          "max": 4.01
-        },
-        "resident_warm_exec": {
-          "samples": 250,
-          "mean": 1.26,
-          "p50": 1.26,
-          "p95": 1.36,
-          "p99": 1.47,
-          "min": 1.14,
-          "max": 1.63
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 100,
-      "mode": "sequential",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 5.65,
-        "p50": 5.39,
-        "p95": 6.61,
-        "p99": 6.61,
-        "min": 5.27,
-        "max": 6.61
-      },
-      "coldStart": {
-        "samples": 500,
-        "mean": 186.1,
-        "p50": 183.49,
-        "p95": 196.74,
-        "p99": 241.08,
-        "min": 174.21,
-        "max": 356.11
-      },
-      "warmStart": {
-        "samples": 500,
-        "mean": 1.29,
-        "p50": 1.27,
-        "p95": 1.44,
-        "p99": 1.56,
-        "min": 1.13,
-        "max": 1.85
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 500,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.03,
-          "min": 0.02,
-          "max": 0.07
-        },
-        "session_open": {
-          "samples": 500,
-          "mean": 0.24,
-          "p50": 0.21,
-          "p95": 0.37,
-          "p99": 0.56,
-          "min": 0.13,
-          "max": 1.35
-        },
-        "vm_create": {
-          "samples": 500,
-          "mean": 1.22,
-          "p50": 1.08,
-          "p95": 1.89,
-          "p99": 2.4,
-          "min": 0.95,
-          "max": 3.1
-        },
-        "vm_ready": {
-          "samples": 500,
-          "mean": 0.01,
-          "p50": 0,
-          "p95": 0.03,
-          "p99": 0.04,
-          "min": 0,
-          "max": 0.1
-        },
-        "vm_configure": {
-          "samples": 500,
-          "mean": 0.12,
-          "p50": 0.09,
-          "p95": 0.31,
-          "p99": 0.45,
-          "min": 0.06,
-          "max": 0.83
-        },
-        "runtime_mount_wasm": {
-          "samples": 500,
-          "mean": 154.32,
-          "p50": 153.09,
-          "p95": 164.25,
-          "p99": 173.43,
-          "min": 144.5,
-          "max": 209.43
-        },
-        "runtime_mount_node": {
-          "samples": 500,
-          "mean": 2.79,
-          "p50": 2.71,
-          "p95": 3.29,
-          "p99": 4.16,
-          "min": 2.5,
-          "max": 5.19
-        },
-        "runtime_create_total": {
-          "samples": 500,
-          "mean": 157.18,
-          "p50": 155.96,
-          "p95": 168.01,
-          "p99": 177.22,
-          "min": 147.33,
-          "max": 213.6
-        },
-        "resident_runner_create": {
-          "samples": 500,
-          "mean": 27.46,
-          "p50": 25.58,
-          "p95": 29.87,
-          "p99": 34.55,
-          "min": 22.81,
-          "max": 180.7
-        },
-        "resident_first_exec": {
-          "samples": 500,
-          "mean": 1.45,
-          "p50": 1.32,
-          "p95": 2.53,
-          "p99": 2.83,
-          "min": 1.17,
-          "max": 4.15
-        },
-        "resident_warm_exec": {
-          "samples": 500,
-          "mean": 1.29,
-          "p50": 1.27,
-          "p95": 1.44,
-          "p99": 1.56,
-          "min": 1.13,
-          "max": 1.85
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 100,
-      "mode": "concurrent",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 5.63,
-        "p50": 5.54,
-        "p95": 6.12,
-        "p99": 6.12,
-        "min": 5.4,
-        "max": 6.12
-      },
-      "coldStart": {
-        "samples": 500,
-        "mean": 187.07,
-        "p50": 184.3,
-        "p95": 197.65,
-        "p99": 247.58,
-        "min": 173.96,
-        "max": 357.61
-      },
-      "warmStart": {
-        "samples": 500,
-        "mean": 1.29,
-        "p50": 1.28,
-        "p95": 1.42,
-        "p99": 1.53,
-        "min": 1.14,
-        "max": 1.65
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 500,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.03,
-          "min": 0.02,
-          "max": 0.07
-        },
-        "session_open": {
-          "samples": 500,
-          "mean": 0.24,
-          "p50": 0.21,
-          "p95": 0.41,
-          "p99": 0.59,
-          "min": 0.13,
-          "max": 1.14
-        },
-        "vm_create": {
-          "samples": 500,
-          "mean": 1.22,
-          "p50": 1.1,
-          "p95": 1.86,
-          "p99": 2.05,
-          "min": 0.95,
-          "max": 3.41
-        },
-        "vm_ready": {
-          "samples": 500,
-          "mean": 0.01,
-          "p50": 0,
-          "p95": 0.03,
-          "p99": 0.04,
-          "min": 0,
-          "max": 0.06
-        },
-        "vm_configure": {
-          "samples": 500,
-          "mean": 0.12,
-          "p50": 0.09,
-          "p95": 0.32,
-          "p99": 0.51,
-          "min": 0.06,
-          "max": 1.35
-        },
-        "runtime_mount_wasm": {
-          "samples": 500,
-          "mean": 155.41,
-          "p50": 154.31,
-          "p95": 166.61,
-          "p99": 173.9,
-          "min": 144.64,
-          "max": 217.62
-        },
-        "runtime_mount_node": {
-          "samples": 500,
-          "mean": 2.8,
-          "p50": 2.73,
-          "p95": 3.37,
-          "p99": 4.14,
-          "min": 2.49,
-          "max": 6.63
-        },
-        "runtime_create_total": {
-          "samples": 500,
-          "mean": 158.28,
-          "p50": 157.16,
-          "p95": 169.46,
-          "p99": 176.71,
-          "min": 147.26,
-          "max": 221
-        },
-        "resident_runner_create": {
-          "samples": 500,
-          "mean": 27.37,
-          "p50": 25.57,
-          "p95": 28.95,
-          "p99": 44,
-          "min": 22.79,
-          "max": 179.67
-        },
-        "resident_first_exec": {
-          "samples": 500,
-          "mean": 1.42,
-          "p50": 1.31,
-          "p95": 2.47,
-          "p99": 2.66,
-          "min": 1.19,
-          "max": 6.73
-        },
-        "resident_warm_exec": {
-          "samples": 500,
-          "mean": 1.29,
-          "p50": 1.28,
-          "p95": 1.42,
-          "p99": 1.53,
-          "min": 1.14,
-          "max": 1.65
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 200,
-      "mode": "sequential",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 5.58,
-        "p50": 5.51,
-        "p95": 5.79,
-        "p99": 5.79,
-        "min": 5.42,
-        "max": 5.79
-      },
-      "coldStart": {
-        "samples": 1000,
-        "mean": 189.76,
-        "p50": 187.37,
-        "p95": 204.16,
-        "p99": 215.02,
-        "min": 172.9,
-        "max": 361.82
-      },
-      "warmStart": {
-        "samples": 1000,
-        "mean": 1.23,
-        "p50": 1.29,
-        "p95": 1.52,
-        "p99": 1.66,
-        "min": 0.3,
-        "max": 3.77
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 1000,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.04,
-          "min": 0.02,
-          "max": 0.06
-        },
-        "session_open": {
-          "samples": 1000,
-          "mean": 0.27,
-          "p50": 0.24,
-          "p95": 0.52,
-          "p99": 0.65,
-          "min": 0.13,
-          "max": 1.31
-        },
-        "vm_create": {
-          "samples": 1000,
-          "mean": 1.18,
-          "p50": 1.1,
-          "p95": 1.77,
-          "p99": 2.29,
-          "min": 0.93,
-          "max": 3.2
-        },
-        "vm_ready": {
-          "samples": 1000,
-          "mean": 0.01,
-          "p50": 0,
-          "p95": 0.03,
-          "p99": 0.05,
-          "min": 0,
-          "max": 0.06
-        },
-        "vm_configure": {
-          "samples": 1000,
-          "mean": 0.15,
-          "p50": 0.12,
-          "p95": 0.33,
-          "p99": 0.47,
-          "min": 0.06,
-          "max": 1.02
-        },
-        "runtime_mount_wasm": {
-          "samples": 1000,
-          "mean": 159.24,
-          "p50": 157.28,
-          "p95": 174.65,
-          "p99": 178.82,
-          "min": 143.28,
-          "max": 195.21
-        },
-        "runtime_mount_node": {
-          "samples": 1000,
-          "mean": 2.9,
-          "p50": 2.79,
-          "p95": 3.59,
-          "p99": 4.24,
-          "min": 2.44,
-          "max": 7.61
-        },
-        "runtime_create_total": {
-          "samples": 1000,
-          "mean": 162.21,
-          "p50": 160.18,
-          "p95": 177.95,
-          "p99": 182.11,
-          "min": 145.86,
-          "max": 198.19
-        },
-        "resident_runner_create": {
-          "samples": 1000,
-          "mean": 26.07,
-          "p50": 25.2,
-          "p95": 28.4,
-          "p99": 33.17,
-          "min": 22.19,
-          "max": 179.58
-        },
-        "resident_first_exec": {
-          "samples": 1000,
-          "mean": 1.47,
-          "p50": 1.36,
-          "p95": 2.5,
-          "p99": 2.82,
-          "min": 1.07,
-          "max": 6.92
-        },
-        "resident_warm_exec": {
-          "samples": 1000,
-          "mean": 1.23,
-          "p50": 1.29,
-          "p95": 1.52,
-          "p99": 1.66,
-          "min": 0.3,
-          "max": 3.77
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 200,
-      "mode": "concurrent",
-      "iterations": 5,
-      "sidecarSetupMs": {
-        "samples": 5,
-        "mean": 5.77,
-        "p50": 5.61,
-        "p95": 6.18,
-        "p99": 6.18,
-        "min": 5.46,
-        "max": 6.18
-      },
-      "coldStart": {
-        "samples": 1000,
-        "mean": 191.33,
-        "p50": 189.09,
-        "p95": 205.41,
-        "p99": 218.43,
-        "min": 173.66,
-        "max": 358.92
-      },
-      "warmStart": {
-        "samples": 1000,
-        "mean": 1.22,
-        "p50": 1.29,
-        "p95": 1.51,
-        "p99": 1.64,
-        "min": 0.32,
-        "max": 2.31
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 1000,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.05,
-          "min": 0.02,
-          "max": 0.1
-        },
-        "session_open": {
-          "samples": 1000,
-          "mean": 0.27,
-          "p50": 0.24,
-          "p95": 0.52,
-          "p99": 0.65,
-          "min": 0.13,
-          "max": 1.4
-        },
-        "vm_create": {
-          "samples": 1000,
-          "mean": 1.19,
-          "p50": 1.1,
-          "p95": 1.75,
-          "p99": 2.45,
-          "min": 0.93,
-          "max": 7.19
-        },
-        "vm_ready": {
-          "samples": 1000,
-          "mean": 0.01,
-          "p50": 0,
-          "p95": 0.03,
-          "p99": 0.04,
-          "min": 0,
-          "max": 0.06
-        },
-        "vm_configure": {
-          "samples": 1000,
-          "mean": 0.14,
-          "p50": 0.11,
-          "p95": 0.32,
-          "p99": 0.41,
-          "min": 0.06,
-          "max": 5.13
-        },
-        "runtime_mount_wasm": {
-          "samples": 1000,
-          "mean": 160.77,
-          "p50": 158.75,
-          "p95": 176.08,
-          "p99": 181.88,
-          "min": 144.33,
-          "max": 212.94
-        },
-        "runtime_mount_node": {
-          "samples": 1000,
-          "mean": 2.94,
-          "p50": 2.85,
-          "p95": 3.61,
-          "p99": 4.18,
-          "min": 2.47,
-          "max": 5.46
-        },
-        "runtime_create_total": {
-          "samples": 1000,
-          "mean": 163.78,
-          "p50": 161.8,
-          "p95": 179.33,
-          "p99": 185.67,
-          "min": 146.9,
-          "max": 216.13
-        },
-        "resident_runner_create": {
-          "samples": 1000,
-          "mean": 26.08,
-          "p50": 25.21,
-          "p95": 28.18,
-          "p99": 34.27,
-          "min": 22.33,
-          "max": 180.21
-        },
-        "resident_first_exec": {
-          "samples": 1000,
-          "mean": 1.46,
-          "p50": 1.35,
-          "p95": 2.46,
-          "p99": 2.89,
-          "min": 1.08,
-          "max": 13.88
-        },
-        "resident_warm_exec": {
-          "samples": 1000,
-          "mean": 1.22,
-          "p50": 1.29,
-          "p95": 1.51,
-          "p99": 1.64,
-          "min": 0.32,
-          "max": 2.31
-        }
-      }
-    },
-    {
-      "scenario": "isolate-only",
-      "batchSize": 1,
-      "mode": "snapshot-restore",
-      "iterations": 50,
-      "coldStart": {
-        "samples": 1,
-        "mean": 4.5749,
-        "p50": 4.5749,
-        "p95": 4.5749,
-        "p99": 4.5749,
-        "min": 4.5749,
-        "max": 4.5749
-      },
-      "warmStart": {
-        "samples": 50,
-        "mean": 3.1503,
-        "p50": 3.1059,
-        "p95": 3.5326,
-        "p99": 3.8155,
-        "min": 2.8691,
-        "max": 3.8155
-      },
-      "phases": {
-        "snapshot_create": {
-          "samples": 1,
-          "mean": 123.904,
-          "p50": 123.904,
-          "p95": 123.904,
-          "p99": 123.904,
-          "min": 123.904,
-          "max": 123.904
-        }
-      }
-    }
-  ]
-}
diff --git a/packages/benchmarks/results/coldstart-final.log b/packages/benchmarks/results/coldstart-final.log
deleted file mode 100644
index 51c95c627..000000000
--- a/packages/benchmarks/results/coldstart-final.log
+++ /dev/null
@@ -1,224 +0,0 @@
-=== Cold Start Benchmark ===
-CPU: 12th Gen Intel(R) Core(TM) i7-12700KF
-Cores: 20 | Max concurrency: 16 | Max live runtimes: 8
-Resident runner live cap: 1
-RAM: 62.6 GB | Node: v24.13.0
-Loadavg: 4.8, 3.73, 3.23
-MemAvailable: 26424332 kB | SwapFree: 0 kB | SwapCached: 114032 kB
-Iterations: 5 (+ 1 warmup)
-Batch sizes: 1, 10, 50, 100, 200
-Scenarios: owned-sidecar, shared-sidecar, resident-runner, isolate-only
-Sidecar: /home/nathan/secure-exec-perf-restore/target/release/secure-exec-sidecar
-
-WASM commands: /home/nathan/secure-exec/packages/core/commands
-
-
---- scenario=owned-sidecar, batch=1, mode=sequential ---
-  cold: mean=772.88ms p50=771.96ms p95=779.42ms
-  warm: mean=452.68ms p50=452.37ms p95=457.13ms
-  phases: filesystem_snapshot.p50=0.1ms | first_exec.p50=596.26ms | runtime_create_total.p50=176.3ms | runtime_mount_node.p50=2.71ms | runtime_mount_wasm.p50=172.95ms | session_open.p50=2.34ms | sidecar_spawn.p50=2.78ms | vm_configure.p50=0.17ms | vm_create.p50=1.36ms | vm_ready.p50=0.01ms | warm_exec.p50=452.37ms
-
---- scenario=owned-sidecar, batch=1, mode=concurrent ---
-  cold: mean=776.22ms p50=775.63ms p95=782.37ms
-  warm: mean=449.86ms p50=449.59ms p95=452.53ms
-  phases: filesystem_snapshot.p50=0.26ms | first_exec.p50=599.03ms | runtime_create_total.p50=176.95ms | runtime_mount_node.p50=2.67ms | runtime_mount_wasm.p50=174.2ms | session_open.p50=2.99ms | sidecar_spawn.p50=2.79ms | vm_configure.p50=0.12ms | vm_create.p50=1.11ms | vm_ready.p50=0.01ms | warm_exec.p50=449.59ms
-
---- scenario=owned-sidecar, batch=10, mode=sequential ---
-  cold: mean=780.07ms p50=778.64ms p95=802.66ms
-  warm: mean=453.92ms p50=452.69ms p95=463.47ms
-  phases: filesystem_snapshot.p50=0.24ms | first_exec.p50=601.18ms | runtime_create_total.p50=176.21ms | runtime_mount_node.p50=2.74ms | runtime_mount_wasm.p50=173.25ms | session_open.p50=2.44ms | sidecar_spawn.p50=2.74ms | vm_configure.p50=0.11ms | vm_create.p50=1.21ms | vm_ready.p50=0.01ms | warm_exec.p50=452.69ms
-
---- scenario=owned-sidecar, batch=10, mode=concurrent ---
-  cold: mean=1000.39ms p50=1028.29ms p95=1119.05ms
-  warm: mean=477.27ms p50=469.19ms p95=532.17ms
-  phases: filesystem_snapshot.p50=31.48ms | first_exec.p50=642.15ms | runtime_create_total.p50=373.11ms | runtime_mount_node.p50=3.08ms | runtime_mount_wasm.p50=369.84ms | session_open.p50=7.93ms | sidecar_spawn.p50=2.08ms | vm_configure.p50=22.13ms | vm_create.p50=2.54ms | vm_ready.p50=0.01ms | warm_exec.p50=469.19ms
-
---- scenario=owned-sidecar, batch=50, mode=sequential ---
-  cold: mean=777.49ms p50=775.3ms p95=797.46ms
-  warm: mean=453.43ms p50=452.59ms p95=461.71ms
-  phases: filesystem_snapshot.p50=0.03ms | first_exec.p50=599.8ms | runtime_create_total.p50=174.76ms | runtime_mount_node.p50=2.72ms | runtime_mount_wasm.p50=171.68ms | session_open.p50=2.36ms | sidecar_spawn.p50=3.13ms | vm_configure.p50=0.11ms | vm_create.p50=1.22ms | vm_ready.p50=0.01ms | warm_exec.p50=452.59ms
-
---- scenario=owned-sidecar, batch=50, mode=concurrent ---
-  cold: mean=1041.81ms p50=1044.33ms p95=1133.77ms
-  warm: mean=468.05ms p50=465.77ms p95=491.47ms
-  phases: filesystem_snapshot.p50=45.06ms | first_exec.p50=643.04ms | runtime_create_total.p50=396.28ms | runtime_mount_node.p50=3.23ms | runtime_mount_wasm.p50=393.55ms | session_open.p50=9.75ms | sidecar_spawn.p50=2.11ms | vm_configure.p50=34.25ms | vm_create.p50=21.44ms | vm_ready.p50=0ms | warm_exec.p50=465.77ms
-
---- scenario=owned-sidecar, batch=100, mode=sequential ---
-  cold: mean=777.89ms p50=776.54ms p95=793.79ms
-  warm: mean=453.66ms p50=452.93ms p95=460.66ms
-  phases: filesystem_snapshot.p50=0.02ms | first_exec.p50=599.6ms | runtime_create_total.p50=176.16ms | runtime_mount_node.p50=2.73ms | runtime_mount_wasm.p50=173.29ms | session_open.p50=2.33ms | sidecar_spawn.p50=4.22ms | vm_configure.p50=0.1ms | vm_create.p50=1.2ms | vm_ready.p50=0.01ms | warm_exec.p50=452.93ms
-
---- scenario=owned-sidecar, batch=100, mode=concurrent ---
-  cold: mean=1041.19ms p50=1043.72ms p95=1120.25ms
-  warm: mean=468.6ms p50=466.36ms p95=492.1ms
-  phases: filesystem_snapshot.p50=45.26ms | first_exec.p50=641.96ms | runtime_create_total.p50=394.78ms | runtime_mount_node.p50=3.18ms | runtime_mount_wasm.p50=391.04ms | session_open.p50=10.31ms | sidecar_spawn.p50=2.37ms | vm_configure.p50=30.68ms | vm_create.p50=23.2ms | vm_ready.p50=0ms | warm_exec.p50=466.36ms
-
---- scenario=owned-sidecar, batch=200, mode=sequential ---
-  cold: mean=778.28ms p50=776.94ms p95=793.79ms
-  warm: mean=454.03ms p50=453.13ms p95=462.01ms
-  phases: filesystem_snapshot.p50=0.02ms | first_exec.p50=599.84ms | runtime_create_total.p50=176.64ms | runtime_mount_node.p50=2.72ms | runtime_mount_wasm.p50=173.7ms | session_open.p50=2.32ms | sidecar_spawn.p50=4.3ms | vm_configure.p50=0.1ms | vm_create.p50=1.2ms | vm_ready.p50=0ms | warm_exec.p50=453.13ms
-
---- scenario=owned-sidecar, batch=200, mode=concurrent ---
-  cold: mean=1044.03ms p50=1042.73ms p95=1124.88ms
-  warm: mean=468.68ms p50=466.89ms p95=488.09ms
-  phases: filesystem_snapshot.p50=47.8ms | first_exec.p50=640.8ms | runtime_create_total.p50=394.96ms | runtime_mount_node.p50=3.26ms | runtime_mount_wasm.p50=391.19ms | session_open.p50=10.58ms | sidecar_spawn.p50=2.39ms | vm_configure.p50=33.55ms | vm_create.p50=22.78ms | vm_ready.p50=0ms | warm_exec.p50=466.89ms
-
---- scenario=shared-sidecar, batch=1, mode=sequential ---
-  cold: mean=774.17ms p50=774.5ms p95=778.62ms
-  warm: mean=457.19ms p50=452.75ms p95=466.31ms
-  phases: filesystem_snapshot.p50=0.02ms | first_exec.p50=604.54ms | runtime_create_total.p50=173.09ms | runtime_mount_node.p50=2.61ms | runtime_mount_wasm.p50=170.47ms | session_open.p50=0.3ms | vm_configure.p50=0.11ms | vm_create.p50=1.22ms | vm_ready.p50=0ms | warm_exec.p50=452.75ms
-  sidecar setup excluded: p50=3.94ms p95=5.26ms
-
---- scenario=shared-sidecar, batch=1, mode=concurrent ---
-  cold: mean=775.66ms p50=776.97ms p95=780.66ms
-  warm: mean=452.79ms p50=453.29ms p95=453.98ms
-  phases: filesystem_snapshot.p50=0.02ms | first_exec.p50=603.17ms | runtime_create_total.p50=173.44ms | runtime_mount_node.p50=2.71ms | runtime_mount_wasm.p50=169.79ms | session_open.p50=0.4ms | vm_configure.p50=0.09ms | vm_create.p50=1.14ms | vm_ready.p50=0ms | warm_exec.p50=453.29ms
-  sidecar setup excluded: p50=5.21ms p95=9.57ms
-
---- scenario=shared-sidecar, batch=10, mode=sequential ---
-  cold: mean=627.58ms p50=613.98ms p95=773.01ms
-  warm: mean=450.97ms p50=450.94ms p95=459.89ms
-  phases: filesystem_snapshot.p50=0.02ms | first_exec.p50=449.24ms | runtime_create_total.p50=161.69ms | runtime_mount_node.p50=2.68ms | runtime_mount_wasm.p50=158.99ms | session_open.p50=0.19ms | vm_configure.p50=0.09ms | vm_create.p50=1.17ms | vm_ready.p50=0ms | warm_exec.p50=450.94ms
-  sidecar setup excluded: p50=5.49ms p95=5.73ms
-
---- scenario=shared-sidecar, batch=10, mode=concurrent ---
-  cold: mean=3493.51ms p50=4558.22ms p95=4676.49ms
-  warm: mean=2174.08ms p50=2086.34ms p95=4965.71ms
-  phases: filesystem_snapshot.p50=25.47ms | first_exec.p50=3507.02ms | runtime_create_total.p50=1070.66ms | runtime_mount_node.p50=18.54ms | runtime_mount_wasm.p50=1051.38ms | session_open.p50=0.57ms | vm_configure.p50=11.57ms | vm_create.p50=3.39ms | vm_ready.p50=0ms | warm_exec.p50=2086.34ms
-  sidecar setup excluded: p50=5.23ms p95=5.88ms
-
---- scenario=shared-sidecar, batch=50, mode=sequential ---
-  cold: mean=610.76ms p50=605.65ms p95=627.44ms
-  warm: mean=449.02ms p50=448.23ms p95=456.81ms
-  phases: filesystem_snapshot.p50=0.02ms | first_exec.p50=448.83ms | runtime_create_total.p50=156.3ms | runtime_mount_node.p50=2.67ms | runtime_mount_wasm.p50=153.45ms | session_open.p50=0.21ms | vm_configure.p50=0.09ms | vm_create.p50=1.14ms | vm_ready.p50=0ms | warm_exec.p50=448.23ms
-  sidecar setup excluded: p50=5.09ms p95=5.39ms
-
---- scenario=shared-sidecar, batch=50, mode=concurrent ---
-  cold: mean=3197.96ms p50=3299.89ms p95=4602.98ms
-  warm: mean=2162.03ms p50=2212.06ms p95=3395.52ms
-  phases: filesystem_snapshot.p50=43.21ms | first_exec.p50=2211.64ms | runtime_create_total.p50=1107.01ms | runtime_mount_node.p50=19.28ms | runtime_mount_wasm.p50=1088.07ms | session_open.p50=0.48ms | vm_configure.p50=16.13ms | vm_create.p50=4.2ms | vm_ready.p50=0ms | warm_exec.p50=2212.06ms
-  sidecar setup excluded: p50=5.56ms p95=14.37ms
-
---- scenario=shared-sidecar, batch=100, mode=sequential ---
-  cold: mean=619.24ms p50=610.78ms p95=656.44ms
-  warm: mean=453.68ms p50=449.44ms p95=472.09ms
-  phases: filesystem_snapshot.p50=0.02ms | first_exec.p50=449.94ms | runtime_create_total.p50=159.9ms | runtime_mount_node.p50=2.84ms | runtime_mount_wasm.p50=157.04ms | session_open.p50=0.21ms | vm_configure.p50=0.1ms | vm_create.p50=1.12ms | vm_ready.p50=0.01ms | warm_exec.p50=449.44ms
-  sidecar setup excluded: p50=5.43ms p95=5.74ms
-
---- scenario=shared-sidecar, batch=100, mode=concurrent ---
-  cold: mean=3187.99ms p50=3317.35ms p95=4591.89ms
-  warm: mean=2134.07ms p50=2207.08ms p95=2716.34ms
-  phases: filesystem_snapshot.p50=44.7ms | first_exec.p50=2212.38ms | runtime_create_total.p50=1130.31ms | runtime_mount_node.p50=19.5ms | runtime_mount_wasm.p50=1110.41ms | session_open.p50=0.54ms | vm_configure.p50=14.62ms | vm_create.p50=4.24ms | vm_ready.p50=0ms | warm_exec.p50=2207.08ms
-  sidecar setup excluded: p50=5.49ms p95=6.49ms
-
---- scenario=shared-sidecar, batch=200, mode=sequential ---
-  cold: mean=616.2ms p50=614.43ms p95=633.42ms
-  warm: mean=449.22ms p50=448.24ms p95=456.27ms
-  phases: filesystem_snapshot.p50=0.02ms | first_exec.p50=448.77ms | runtime_create_total.p50=164.85ms | runtime_mount_node.p50=2.92ms | runtime_mount_wasm.p50=161.85ms | session_open.p50=0.25ms | vm_configure.p50=0.12ms | vm_create.p50=1.11ms | vm_ready.p50=0.01ms | warm_exec.p50=448.24ms
-  sidecar setup excluded: p50=5.26ms p95=6.09ms
-
---- scenario=shared-sidecar, batch=200, mode=concurrent ---
-  cold: mean=3235.65ms p50=3340.36ms p95=3501.49ms
-  warm: mean=2102.22ms p50=2200.24ms p95=2732.96ms
-  phases: filesystem_snapshot.p50=47.71ms | first_exec.p50=2210.55ms | runtime_create_total.p50=1168.28ms | runtime_mount_node.p50=20.37ms | runtime_mount_wasm.p50=1147.31ms | session_open.p50=0.61ms | vm_configure.p50=14.71ms | vm_create.p50=4.14ms | vm_ready.p50=0ms | warm_exec.p50=2200.24ms
-  sidecar setup excluded: p50=3.79ms p95=3.92ms
-
---- scenario=resident-runner, batch=1, mode=sequential ---
-  cold: mean=351ms p50=349.56ms p95=358.02ms
-  warm: mean=1.27ms p50=1.27ms p95=1.32ms
-  phases: filesystem_snapshot.p50=0.02ms | resident_first_exec.p50=1.31ms | resident_runner_create.p50=174.4ms | resident_warm_exec.p50=1.27ms | runtime_create_total.p50=173.03ms | runtime_mount_node.p50=2.77ms | runtime_mount_wasm.p50=170.03ms | session_open.p50=0.29ms | vm_configure.p50=0.09ms | vm_create.p50=1.26ms | vm_ready.p50=0.01ms
-  sidecar setup excluded: p50=4.19ms p95=6.14ms
-
---- scenario=resident-runner, batch=1, mode=concurrent ---
-  cold: mean=347.91ms p50=346.99ms p95=358.2ms
-  warm: mean=1.25ms p50=1.26ms p95=1.29ms
-  phases: filesystem_snapshot.p50=0.02ms | resident_first_exec.p50=1.32ms | resident_runner_create.p50=172.53ms | resident_warm_exec.p50=1.26ms | runtime_create_total.p50=174.09ms | runtime_mount_node.p50=2.67ms | runtime_mount_wasm.p50=171.18ms | session_open.p50=0.3ms | vm_configure.p50=0.1ms | vm_create.p50=1.21ms | vm_ready.p50=0.01ms
-  sidecar setup excluded: p50=4.08ms p95=6.27ms
-
---- scenario=resident-runner, batch=10, mode=sequential ---
-  cold: mean=202.61ms p50=186.16ms p95=350.97ms
-  warm: mean=1.26ms p50=1.24ms p95=1.37ms
-  phases: filesystem_snapshot.p50=0.02ms | resident_first_exec.p50=1.3ms | resident_runner_create.p50=26.24ms | resident_warm_exec.p50=1.24ms | runtime_create_total.p50=157.63ms | runtime_mount_node.p50=2.7ms | runtime_mount_wasm.p50=154.63ms | session_open.p50=0.2ms | vm_configure.p50=0.09ms | vm_create.p50=1.2ms | vm_ready.p50=0.01ms
-  sidecar setup excluded: p50=5.36ms p95=5.73ms
-
---- scenario=resident-runner, batch=10, mode=concurrent ---
-  cold: mean=205ms p50=186.33ms p95=351.88ms
-  warm: mean=1.26ms p50=1.25ms p95=1.39ms
-  phases: filesystem_snapshot.p50=0.02ms | resident_first_exec.p50=1.28ms | resident_runner_create.p50=26.15ms | resident_warm_exec.p50=1.25ms | runtime_create_total.p50=159.21ms | runtime_mount_node.p50=2.68ms | runtime_mount_wasm.p50=156.45ms | session_open.p50=0.2ms | vm_configure.p50=0.09ms | vm_create.p50=1.24ms | vm_ready.p50=0.01ms
-  sidecar setup excluded: p50=5.51ms p95=5.79ms
-
---- scenario=resident-runner, batch=50, mode=sequential ---
-  cold: mean=187.92ms p50=182.66ms p95=197.69ms
-  warm: mean=1.26ms p50=1.25ms p95=1.37ms
-  phases: filesystem_snapshot.p50=0.02ms | resident_first_exec.p50=1.3ms | resident_runner_create.p50=25.8ms | resident_warm_exec.p50=1.25ms | runtime_create_total.p50=155.29ms | runtime_mount_node.p50=2.68ms | runtime_mount_wasm.p50=152.45ms | session_open.p50=0.2ms | vm_configure.p50=0.1ms | vm_create.p50=1.15ms | vm_ready.p50=0.01ms
-  sidecar setup excluded: p50=5.55ms p95=6.93ms
-
---- scenario=resident-runner, batch=50, mode=concurrent ---
-  cold: mean=187.45ms p50=183.14ms p95=194.96ms
-  warm: mean=1.26ms p50=1.26ms p95=1.36ms
-  phases: filesystem_snapshot.p50=0.02ms | resident_first_exec.p50=1.3ms | resident_runner_create.p50=25.71ms | resident_warm_exec.p50=1.26ms | runtime_create_total.p50=155.91ms | runtime_mount_node.p50=2.67ms | runtime_mount_wasm.p50=153.06ms | session_open.p50=0.2ms | vm_configure.p50=0.09ms | vm_create.p50=1.16ms | vm_ready.p50=0ms
-  sidecar setup excluded: p50=5.48ms p95=5.91ms
-
---- scenario=resident-runner, batch=100, mode=sequential ---
-  cold: mean=186.1ms p50=183.49ms p95=196.74ms
-  warm: mean=1.29ms p50=1.27ms p95=1.44ms
-  phases: filesystem_snapshot.p50=0.02ms | resident_first_exec.p50=1.32ms | resident_runner_create.p50=25.58ms | resident_warm_exec.p50=1.27ms | runtime_create_total.p50=155.96ms | runtime_mount_node.p50=2.71ms | runtime_mount_wasm.p50=153.09ms | session_open.p50=0.21ms | vm_configure.p50=0.09ms | vm_create.p50=1.08ms | vm_ready.p50=0ms
-  sidecar setup excluded: p50=5.39ms p95=6.61ms
-
---- scenario=resident-runner, batch=100, mode=concurrent ---
-  cold: mean=187.07ms p50=184.3ms p95=197.65ms
-  warm: mean=1.29ms p50=1.28ms p95=1.42ms
-  phases: filesystem_snapshot.p50=0.02ms | resident_first_exec.p50=1.31ms | resident_runner_create.p50=25.57ms | resident_warm_exec.p50=1.28ms | runtime_create_total.p50=157.16ms | runtime_mount_node.p50=2.73ms | runtime_mount_wasm.p50=154.31ms | session_open.p50=0.21ms | vm_configure.p50=0.09ms | vm_create.p50=1.1ms | vm_ready.p50=0ms
-  sidecar setup excluded: p50=5.54ms p95=6.12ms
-
---- scenario=resident-runner, batch=200, mode=sequential ---
-  cold: mean=189.76ms p50=187.37ms p95=204.16ms
-  warm: mean=1.23ms p50=1.29ms p95=1.52ms
-  phases: filesystem_snapshot.p50=0.02ms | resident_first_exec.p50=1.36ms | resident_runner_create.p50=25.2ms | resident_warm_exec.p50=1.29ms | runtime_create_total.p50=160.18ms | runtime_mount_node.p50=2.79ms | runtime_mount_wasm.p50=157.28ms | session_open.p50=0.24ms | vm_configure.p50=0.12ms | vm_create.p50=1.1ms | vm_ready.p50=0ms
-  sidecar setup excluded: p50=5.51ms p95=5.79ms
-
---- scenario=resident-runner, batch=200, mode=concurrent ---
-  cold: mean=191.33ms p50=189.09ms p95=205.41ms
-  warm: mean=1.22ms p50=1.29ms p95=1.51ms
-  phases: filesystem_snapshot.p50=0.02ms | resident_first_exec.p50=1.35ms | resident_runner_create.p50=25.21ms | resident_warm_exec.p50=1.29ms | runtime_create_total.p50=161.8ms | runtime_mount_node.p50=2.85ms | runtime_mount_wasm.p50=158.75ms | session_open.p50=0.24ms | vm_configure.p50=0.11ms | vm_create.p50=1.1ms | vm_ready.p50=0ms
-  sidecar setup excluded: p50=5.61ms p95=6.18ms
-
---- scenario=isolate-only, mode=snapshot-restore ---
-  cold: mean=4.5749ms p50=4.5749ms p95=4.5749ms
-  warm: mean=3.1503ms p50=3.1059ms p95=3.5326ms
-  phases: snapshot_create.p50=123.904ms
-
-       scenario | batch |             mode | cold mean |  cold p50 |  cold p95 | warm mean |  warm p50 |  warm p95
---------------- | ----- | ---------------- | --------- | --------- | --------- | --------- | --------- | ---------
-  owned-sidecar |     1 |       sequential |  772.88ms |  771.96ms |  779.42ms |  452.68ms |  452.37ms |  457.13ms
-  owned-sidecar |     1 |       concurrent |  776.22ms |  775.63ms |  782.37ms |  449.86ms |  449.59ms |  452.53ms
-  owned-sidecar |    10 |       sequential |  780.07ms |  778.64ms |  802.66ms |  453.92ms |  452.69ms |  463.47ms
-  owned-sidecar |    10 |       concurrent | 1000.39ms | 1028.29ms | 1119.05ms |  477.27ms |  469.19ms |  532.17ms
-  owned-sidecar |    50 |       sequential |  777.49ms |   775.3ms |  797.46ms |  453.43ms |  452.59ms |  461.71ms
-  owned-sidecar |    50 |       concurrent | 1041.81ms | 1044.33ms | 1133.77ms |  468.05ms |  465.77ms |  491.47ms
-  owned-sidecar |   100 |       sequential |  777.89ms |  776.54ms |  793.79ms |  453.66ms |  452.93ms |  460.66ms
-  owned-sidecar |   100 |       concurrent | 1041.19ms | 1043.72ms | 1120.25ms |   468.6ms |  466.36ms |   492.1ms
-  owned-sidecar |   200 |       sequential |  778.28ms |  776.94ms |  793.79ms |  454.03ms |  453.13ms |  462.01ms
-  owned-sidecar |   200 |       concurrent | 1044.03ms | 1042.73ms | 1124.88ms |  468.68ms |  466.89ms |  488.09ms
- shared-sidecar |     1 |       sequential |  774.17ms |   774.5ms |  778.62ms |  457.19ms |  452.75ms |  466.31ms
- shared-sidecar |     1 |       concurrent |  775.66ms |  776.97ms |  780.66ms |  452.79ms |  453.29ms |  453.98ms
- shared-sidecar |    10 |       sequential |  627.58ms |  613.98ms |  773.01ms |  450.97ms |  450.94ms |  459.89ms
- shared-sidecar |    10 |       concurrent | 3493.51ms | 4558.22ms | 4676.49ms | 2174.08ms | 2086.34ms | 4965.71ms
- shared-sidecar |    50 |       sequential |  610.76ms |  605.65ms |  627.44ms |  449.02ms |  448.23ms |  456.81ms
- shared-sidecar |    50 |       concurrent | 3197.96ms | 3299.89ms | 4602.98ms | 2162.03ms | 2212.06ms | 3395.52ms
- shared-sidecar |   100 |       sequential |  619.24ms |  610.78ms |  656.44ms |  453.68ms |  449.44ms |  472.09ms
- shared-sidecar |   100 |       concurrent | 3187.99ms | 3317.35ms | 4591.89ms | 2134.07ms | 2207.08ms | 2716.34ms
- shared-sidecar |   200 |       sequential |   616.2ms |  614.43ms |  633.42ms |  449.22ms |  448.24ms |  456.27ms
- shared-sidecar |   200 |       concurrent | 3235.65ms | 3340.36ms | 3501.49ms | 2102.22ms | 2200.24ms | 2732.96ms
-resident-runner |     1 |       sequential |     351ms |  349.56ms |  358.02ms |    1.27ms |    1.27ms |    1.32ms
-resident-runner |     1 |       concurrent |  347.91ms |  346.99ms |   358.2ms |    1.25ms |    1.26ms |    1.29ms
-resident-runner |    10 |       sequential |  202.61ms |  186.16ms |  350.97ms |    1.26ms |    1.24ms |    1.37ms
-resident-runner |    10 |       concurrent |     205ms |  186.33ms |  351.88ms |    1.26ms |    1.25ms |    1.39ms
-resident-runner |    50 |       sequential |  187.92ms |  182.66ms |  197.69ms |    1.26ms |    1.25ms |    1.37ms
-resident-runner |    50 |       concurrent |  187.45ms |  183.14ms |  194.96ms |    1.26ms |    1.26ms |    1.36ms
-resident-runner |   100 |       sequential |   186.1ms |  183.49ms |  196.74ms |    1.29ms |    1.27ms |    1.44ms
-resident-runner |   100 |       concurrent |  187.07ms |   184.3ms |  197.65ms |    1.29ms |    1.28ms |    1.42ms
-resident-runner |   200 |       sequential |  189.76ms |  187.37ms |  204.16ms |    1.23ms |    1.29ms |    1.52ms
-resident-runner |   200 |       concurrent |  191.33ms |  189.09ms |  205.41ms |    1.22ms |    1.29ms |    1.51ms
-   isolate-only |     1 | snapshot-restore |  4.5749ms |  4.5749ms |  4.5749ms |  3.1503ms |  3.1059ms |  3.5326ms
-
diff --git a/packages/benchmarks/results/coldstart-resident-full-matrix-20260619.json b/packages/benchmarks/results/coldstart-resident-full-matrix-20260619.json
deleted file mode 100644
index 98805d228..000000000
--- a/packages/benchmarks/results/coldstart-resident-full-matrix-20260619.json
+++ /dev/null
@@ -1,1276 +0,0 @@
-
-> @secure-exec/benchmarks@ bench:coldstart /home/nathan/secure-exec-perf-restore/packages/benchmarks
-> tsx coldstart.bench.ts
-
-{
-  "hardware": {
-    "cpu": "12th Gen Intel(R) Core(TM) i7-12700KF",
-    "cores": 20,
-    "ram": "62.6 GB",
-    "node": "v24.13.0",
-    "os": "Linux 6.1.0-41-amd64",
-    "arch": "x64",
-    "loadAverage": [
-      2.3,
-      2.56,
-      4.03
-    ]
-  },
-  "scenarioSetup": {
-    "resident-runner": {
-      "sharedSidecarSetupMs": 2.91
-    }
-  },
-  "results": [
-    {
-      "scenario": "resident-runner",
-      "batchSize": 1,
-      "mode": "sequential",
-      "iterations": 1,
-      "coldStart": {
-        "samples": 1,
-        "mean": 396.38,
-        "p50": 396.38,
-        "p95": 396.38,
-        "p99": 396.38,
-        "min": 396.38,
-        "max": 396.38
-      },
-      "warmStart": {
-        "samples": 1,
-        "mean": 1.36,
-        "p50": 1.36,
-        "p95": 1.36,
-        "p99": 1.36,
-        "min": 1.36,
-        "max": 1.36
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 1,
-          "mean": 0.32,
-          "p50": 0.32,
-          "p95": 0.32,
-          "p99": 0.32,
-          "min": 0.32,
-          "max": 0.32
-        },
-        "session_open": {
-          "samples": 1,
-          "mean": 6.35,
-          "p50": 6.35,
-          "p95": 6.35,
-          "p99": 6.35,
-          "min": 6.35,
-          "max": 6.35
-        },
-        "vm_create": {
-          "samples": 1,
-          "mean": 2.75,
-          "p50": 2.75,
-          "p95": 2.75,
-          "p99": 2.75,
-          "min": 2.75,
-          "max": 2.75
-        },
-        "vm_ready": {
-          "samples": 1,
-          "mean": 0.25,
-          "p50": 0.25,
-          "p95": 0.25,
-          "p99": 0.25,
-          "min": 0.25,
-          "max": 0.25
-        },
-        "vm_configure": {
-          "samples": 1,
-          "mean": 0.73,
-          "p50": 0.73,
-          "p95": 0.73,
-          "p99": 0.73,
-          "min": 0.73,
-          "max": 0.73
-        },
-        "runtime_mount_wasm": {
-          "samples": 1,
-          "mean": 220.02,
-          "p50": 220.02,
-          "p95": 220.02,
-          "p99": 220.02,
-          "min": 220.02,
-          "max": 220.02
-        },
-        "runtime_mount_node": {
-          "samples": 1,
-          "mean": 2.95,
-          "p50": 2.95,
-          "p95": 2.95,
-          "p99": 2.95,
-          "min": 2.95,
-          "max": 2.95
-        },
-        "runtime_create_total": {
-          "samples": 1,
-          "mean": 223.38,
-          "p50": 223.38,
-          "p95": 223.38,
-          "p99": 223.38,
-          "min": 223.38,
-          "max": 223.38
-        },
-        "resident_runner_create": {
-          "samples": 1,
-          "mean": 171.41,
-          "p50": 171.41,
-          "p95": 171.41,
-          "p99": 171.41,
-          "min": 171.41,
-          "max": 171.41
-        },
-        "resident_first_exec": {
-          "samples": 1,
-          "mean": 1.59,
-          "p50": 1.59,
-          "p95": 1.59,
-          "p99": 1.59,
-          "min": 1.59,
-          "max": 1.59
-        },
-        "resident_warm_exec": {
-          "samples": 1,
-          "mean": 1.36,
-          "p50": 1.36,
-          "p95": 1.36,
-          "p99": 1.36,
-          "min": 1.36,
-          "max": 1.36
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 1,
-      "mode": "concurrent",
-      "iterations": 1,
-      "coldStart": {
-        "samples": 1,
-        "mean": 204.7,
-        "p50": 204.7,
-        "p95": 204.7,
-        "p99": 204.7,
-        "min": 204.7,
-        "max": 204.7
-      },
-      "warmStart": {
-        "samples": 1,
-        "mean": 1.41,
-        "p50": 1.41,
-        "p95": 1.41,
-        "p99": 1.41,
-        "min": 1.41,
-        "max": 1.41
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 1,
-          "mean": 0.1,
-          "p50": 0.1,
-          "p95": 0.1,
-          "p99": 0.1,
-          "min": 0.1,
-          "max": 0.1
-        },
-        "session_open": {
-          "samples": 1,
-          "mean": 1.11,
-          "p50": 1.11,
-          "p95": 1.11,
-          "p99": 1.11,
-          "min": 1.11,
-          "max": 1.11
-        },
-        "vm_create": {
-          "samples": 1,
-          "mean": 1.26,
-          "p50": 1.26,
-          "p95": 1.26,
-          "p99": 1.26,
-          "min": 1.26,
-          "max": 1.26
-        },
-        "vm_ready": {
-          "samples": 1,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.01,
-          "p99": 0.01,
-          "min": 0.01,
-          "max": 0.01
-        },
-        "vm_configure": {
-          "samples": 1,
-          "mean": 0.14,
-          "p50": 0.14,
-          "p95": 0.14,
-          "p99": 0.14,
-          "min": 0.14,
-          "max": 0.14
-        },
-        "runtime_mount_wasm": {
-          "samples": 1,
-          "mean": 172.92,
-          "p50": 172.92,
-          "p95": 172.92,
-          "p99": 172.92,
-          "min": 172.92,
-          "max": 172.92
-        },
-        "runtime_mount_node": {
-          "samples": 1,
-          "mean": 2.82,
-          "p50": 2.82,
-          "p95": 2.82,
-          "p99": 2.82,
-          "min": 2.82,
-          "max": 2.82
-        },
-        "runtime_create_total": {
-          "samples": 1,
-          "mean": 175.85,
-          "p50": 175.85,
-          "p95": 175.85,
-          "p99": 175.85,
-          "min": 175.85,
-          "max": 175.85
-        },
-        "resident_runner_create": {
-          "samples": 1,
-          "mean": 27.31,
-          "p50": 27.31,
-          "p95": 27.31,
-          "p99": 27.31,
-          "min": 27.31,
-          "max": 27.31
-        },
-        "resident_first_exec": {
-          "samples": 1,
-          "mean": 1.54,
-          "p50": 1.54,
-          "p95": 1.54,
-          "p99": 1.54,
-          "min": 1.54,
-          "max": 1.54
-        },
-        "resident_warm_exec": {
-          "samples": 1,
-          "mean": 1.41,
-          "p50": 1.41,
-          "p95": 1.41,
-          "p99": 1.41,
-          "min": 1.41,
-          "max": 1.41
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 10,
-      "mode": "sequential",
-      "iterations": 1,
-      "coldStart": {
-        "samples": 10,
-        "mean": 197.95,
-        "p50": 197.93,
-        "p95": 211.43,
-        "p99": 211.43,
-        "min": 183.06,
-        "max": 211.43
-      },
-      "warmStart": {
-        "samples": 10,
-        "mean": 1.3,
-        "p50": 1.29,
-        "p95": 1.38,
-        "p99": 1.38,
-        "min": 1.25,
-        "max": 1.38
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 10,
-          "mean": 0.12,
-          "p50": 0.08,
-          "p95": 0.3,
-          "p99": 0.3,
-          "min": 0.06,
-          "max": 0.3
-        },
-        "session_open": {
-          "samples": 10,
-          "mean": 0.45,
-          "p50": 0.38,
-          "p95": 1.11,
-          "p99": 1.11,
-          "min": 0.21,
-          "max": 1.11
-        },
-        "vm_create": {
-          "samples": 10,
-          "mean": 1.49,
-          "p50": 1.34,
-          "p95": 2.41,
-          "p99": 2.41,
-          "min": 1.02,
-          "max": 2.41
-        },
-        "vm_ready": {
-          "samples": 10,
-          "mean": 0.02,
-          "p50": 0.01,
-          "p95": 0.03,
-          "p99": 0.03,
-          "min": 0.01,
-          "max": 0.03
-        },
-        "vm_configure": {
-          "samples": 10,
-          "mean": 0.76,
-          "p50": 0.14,
-          "p95": 3.93,
-          "p99": 3.93,
-          "min": 0.12,
-          "max": 3.93
-        },
-        "runtime_mount_wasm": {
-          "samples": 10,
-          "mean": 168,
-          "p50": 168.87,
-          "p95": 181.93,
-          "p99": 181.93,
-          "min": 153.02,
-          "max": 181.93
-        },
-        "runtime_mount_node": {
-          "samples": 10,
-          "mean": 2.86,
-          "p50": 2.76,
-          "p95": 4.1,
-          "p99": 4.1,
-          "min": 2.61,
-          "max": 4.1
-        },
-        "runtime_create_total": {
-          "samples": 10,
-          "mean": 170.96,
-          "p50": 171.63,
-          "p95": 184.92,
-          "p99": 184.92,
-          "min": 156.32,
-          "max": 184.92
-        },
-        "resident_runner_create": {
-          "samples": 10,
-          "mean": 25.64,
-          "p50": 25.27,
-          "p95": 28.33,
-          "p99": 28.33,
-          "min": 24.38,
-          "max": 28.33
-        },
-        "resident_first_exec": {
-          "samples": 10,
-          "mean": 1.34,
-          "p50": 1.32,
-          "p95": 1.46,
-          "p99": 1.46,
-          "min": 1.26,
-          "max": 1.46
-        },
-        "resident_warm_exec": {
-          "samples": 10,
-          "mean": 1.3,
-          "p50": 1.29,
-          "p95": 1.38,
-          "p99": 1.38,
-          "min": 1.25,
-          "max": 1.38
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 10,
-      "mode": "concurrent",
-      "iterations": 1,
-      "coldStart": {
-        "samples": 10,
-        "mean": 192.94,
-        "p50": 190.69,
-        "p95": 203.83,
-        "p99": 203.83,
-        "min": 182.62,
-        "max": 203.83
-      },
-      "warmStart": {
-        "samples": 10,
-        "mean": 1.29,
-        "p50": 1.28,
-        "p95": 1.36,
-        "p99": 1.36,
-        "min": 1.24,
-        "max": 1.36
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 10,
-          "mean": 0.06,
-          "p50": 0.03,
-          "p95": 0.33,
-          "p99": 0.33,
-          "min": 0.02,
-          "max": 0.33
-        },
-        "session_open": {
-          "samples": 10,
-          "mean": 0.39,
-          "p50": 0.33,
-          "p95": 0.74,
-          "p99": 0.74,
-          "min": 0.19,
-          "max": 0.74
-        },
-        "vm_create": {
-          "samples": 10,
-          "mean": 1.6,
-          "p50": 1.28,
-          "p95": 3.18,
-          "p99": 3.18,
-          "min": 1.18,
-          "max": 3.18
-        },
-        "vm_ready": {
-          "samples": 10,
-          "mean": 0.05,
-          "p50": 0.01,
-          "p95": 0.3,
-          "p99": 0.3,
-          "min": 0.01,
-          "max": 0.3
-        },
-        "vm_configure": {
-          "samples": 10,
-          "mean": 0.16,
-          "p50": 0.16,
-          "p95": 0.29,
-          "p99": 0.29,
-          "min": 0.09,
-          "max": 0.29
-        },
-        "runtime_mount_wasm": {
-          "samples": 10,
-          "mean": 163.33,
-          "p50": 161.48,
-          "p95": 174.29,
-          "p99": 174.29,
-          "min": 152.75,
-          "max": 174.29
-        },
-        "runtime_mount_node": {
-          "samples": 10,
-          "mean": 2.81,
-          "p50": 2.72,
-          "p95": 3.23,
-          "p99": 3.23,
-          "min": 2.57,
-          "max": 3.23
-        },
-        "runtime_create_total": {
-          "samples": 10,
-          "mean": 166.23,
-          "p50": 164.37,
-          "p95": 176.98,
-          "p99": 176.98,
-          "min": 155.54,
-          "max": 176.98
-        },
-        "resident_runner_create": {
-          "samples": 10,
-          "mean": 25.36,
-          "p50": 25.53,
-          "p95": 27.11,
-          "p99": 27.11,
-          "min": 24.04,
-          "max": 27.11
-        },
-        "resident_first_exec": {
-          "samples": 10,
-          "mean": 1.34,
-          "p50": 1.36,
-          "p95": 1.42,
-          "p99": 1.42,
-          "min": 1.26,
-          "max": 1.42
-        },
-        "resident_warm_exec": {
-          "samples": 10,
-          "mean": 1.29,
-          "p50": 1.28,
-          "p95": 1.36,
-          "p99": 1.36,
-          "min": 1.24,
-          "max": 1.36
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 50,
-      "mode": "sequential",
-      "iterations": 1,
-      "coldStart": {
-        "samples": 50,
-        "mean": 187.5,
-        "p50": 186.28,
-        "p95": 202.34,
-        "p99": 207.68,
-        "min": 176.54,
-        "max": 207.68
-      },
-      "warmStart": {
-        "samples": 50,
-        "mean": 1.31,
-        "p50": 1.3,
-        "p95": 1.4,
-        "p99": 1.54,
-        "min": 1.2,
-        "max": 1.54
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 50,
-          "mean": 0.04,
-          "p50": 0.03,
-          "p95": 0.04,
-          "p99": 0.37,
-          "min": 0.02,
-          "max": 0.37
-        },
-        "session_open": {
-          "samples": 50,
-          "mean": 0.27,
-          "p50": 0.2,
-          "p95": 0.66,
-          "p99": 1.07,
-          "min": 0.15,
-          "max": 1.07
-        },
-        "vm_create": {
-          "samples": 50,
-          "mean": 1.21,
-          "p50": 1.1,
-          "p95": 1.82,
-          "p99": 2.19,
-          "min": 0.93,
-          "max": 2.19
-        },
-        "vm_ready": {
-          "samples": 50,
-          "mean": 0.02,
-          "p50": 0.01,
-          "p95": 0.09,
-          "p99": 0.29,
-          "min": 0.01,
-          "max": 0.29
-        },
-        "vm_configure": {
-          "samples": 50,
-          "mean": 0.16,
-          "p50": 0.11,
-          "p95": 0.32,
-          "p99": 1.84,
-          "min": 0.07,
-          "max": 1.84
-        },
-        "runtime_mount_wasm": {
-          "samples": 50,
-          "mean": 157.39,
-          "p50": 156.58,
-          "p95": 172.04,
-          "p99": 177.36,
-          "min": 148.21,
-          "max": 177.36
-        },
-        "runtime_mount_node": {
-          "samples": 50,
-          "mean": 2.88,
-          "p50": 2.7,
-          "p95": 4.13,
-          "p99": 4.3,
-          "min": 2.54,
-          "max": 4.3
-        },
-        "runtime_create_total": {
-          "samples": 50,
-          "mean": 160.37,
-          "p50": 159.5,
-          "p95": 175.86,
-          "p99": 180.26,
-          "min": 150.98,
-          "max": 180.26
-        },
-        "resident_runner_create": {
-          "samples": 50,
-          "mean": 25.64,
-          "p50": 25.41,
-          "p95": 27.86,
-          "p99": 31.96,
-          "min": 24,
-          "max": 31.96
-        },
-        "resident_first_exec": {
-          "samples": 50,
-          "mean": 1.48,
-          "p50": 1.34,
-          "p95": 2.54,
-          "p99": 2.61,
-          "min": 1.23,
-          "max": 2.61
-        },
-        "resident_warm_exec": {
-          "samples": 50,
-          "mean": 1.31,
-          "p50": 1.3,
-          "p95": 1.4,
-          "p99": 1.54,
-          "min": 1.2,
-          "max": 1.54
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 50,
-      "mode": "concurrent",
-      "iterations": 1,
-      "coldStart": {
-        "samples": 50,
-        "mean": 189.8,
-        "p50": 188.72,
-        "p95": 201.12,
-        "p99": 206.34,
-        "min": 180.45,
-        "max": 206.34
-      },
-      "warmStart": {
-        "samples": 50,
-        "mean": 1.34,
-        "p50": 1.35,
-        "p95": 1.54,
-        "p99": 1.61,
-        "min": 0.33,
-        "max": 1.61
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 50,
-          "mean": 0.03,
-          "p50": 0.03,
-          "p95": 0.04,
-          "p99": 0.05,
-          "min": 0.02,
-          "max": 0.05
-        },
-        "session_open": {
-          "samples": 50,
-          "mean": 0.24,
-          "p50": 0.21,
-          "p95": 0.38,
-          "p99": 0.52,
-          "min": 0.14,
-          "max": 0.52
-        },
-        "vm_create": {
-          "samples": 50,
-          "mean": 1.24,
-          "p50": 1.13,
-          "p95": 1.87,
-          "p99": 2.11,
-          "min": 0.95,
-          "max": 2.11
-        },
-        "vm_ready": {
-          "samples": 50,
-          "mean": 0.03,
-          "p50": 0.01,
-          "p95": 0.06,
-          "p99": 0.3,
-          "min": 0.01,
-          "max": 0.3
-        },
-        "vm_configure": {
-          "samples": 50,
-          "mean": 0.14,
-          "p50": 0.12,
-          "p95": 0.26,
-          "p99": 0.3,
-          "min": 0.07,
-          "max": 0.3
-        },
-        "runtime_mount_wasm": {
-          "samples": 50,
-          "mean": 159.43,
-          "p50": 158.55,
-          "p95": 169.33,
-          "p99": 177.77,
-          "min": 150.65,
-          "max": 177.77
-        },
-        "runtime_mount_node": {
-          "samples": 50,
-          "mean": 2.92,
-          "p50": 2.76,
-          "p95": 3.56,
-          "p99": 7.39,
-          "min": 2.58,
-          "max": 7.39
-        },
-        "runtime_create_total": {
-          "samples": 50,
-          "mean": 162.44,
-          "p50": 162.01,
-          "p95": 172.47,
-          "p99": 180.66,
-          "min": 153.37,
-          "max": 180.66
-        },
-        "resident_runner_create": {
-          "samples": 50,
-          "mean": 25.83,
-          "p50": 25.36,
-          "p95": 28.62,
-          "p99": 29.19,
-          "min": 23.98,
-          "max": 29.19
-        },
-        "resident_first_exec": {
-          "samples": 50,
-          "mean": 1.53,
-          "p50": 1.41,
-          "p95": 2.77,
-          "p99": 2.91,
-          "min": 1.27,
-          "max": 2.91
-        },
-        "resident_warm_exec": {
-          "samples": 50,
-          "mean": 1.34,
-          "p50": 1.35,
-          "p95": 1.54,
-          "p99": 1.61,
-          "min": 0.33,
-          "max": 1.61
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 100,
-      "mode": "sequential",
-      "iterations": 1,
-      "coldStart": {
-        "samples": 100,
-        "mean": 202.61,
-        "p50": 200.75,
-        "p95": 212.41,
-        "p99": 218.87,
-        "min": 184.86,
-        "max": 367.94
-      },
-      "warmStart": {
-        "samples": 100,
-        "mean": 1.05,
-        "p50": 1.3,
-        "p95": 1.59,
-        "p99": 1.66,
-        "min": 0.37,
-        "max": 1.71
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 100,
-          "mean": 0.03,
-          "p50": 0.03,
-          "p95": 0.04,
-          "p99": 0.06,
-          "min": 0.03,
-          "max": 0.07
-        },
-        "session_open": {
-          "samples": 100,
-          "mean": 0.32,
-          "p50": 0.3,
-          "p95": 0.52,
-          "p99": 0.59,
-          "min": 0.19,
-          "max": 0.63
-        },
-        "vm_create": {
-          "samples": 100,
-          "mean": 1.19,
-          "p50": 1.15,
-          "p95": 1.45,
-          "p99": 1.54,
-          "min": 1.02,
-          "max": 1.74
-        },
-        "vm_ready": {
-          "samples": 100,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.03,
-          "p99": 0.05,
-          "min": 0.01,
-          "max": 0.06
-        },
-        "vm_configure": {
-          "samples": 100,
-          "mean": 0.21,
-          "p50": 0.16,
-          "p95": 0.47,
-          "p99": 0.72,
-          "min": 0.08,
-          "max": 1.3
-        },
-        "runtime_mount_wasm": {
-          "samples": 100,
-          "mean": 173.08,
-          "p50": 171.64,
-          "p95": 181.91,
-          "p99": 188.66,
-          "min": 153.84,
-          "max": 338.15
-        },
-        "runtime_mount_node": {
-          "samples": 100,
-          "mean": 3.18,
-          "p50": 3.16,
-          "p95": 3.65,
-          "p99": 3.95,
-          "min": 2.73,
-          "max": 4.08
-        },
-        "runtime_create_total": {
-          "samples": 100,
-          "mean": 176.35,
-          "p50": 175.13,
-          "p95": 185.46,
-          "p99": 192.36,
-          "min": 156.7,
-          "max": 341.58
-        },
-        "resident_runner_create": {
-          "samples": 100,
-          "mean": 24.8,
-          "p50": 24.23,
-          "p95": 28.83,
-          "p99": 31.04,
-          "min": 22.63,
-          "max": 33.04
-        },
-        "resident_first_exec": {
-          "samples": 100,
-          "mean": 1.46,
-          "p50": 1.41,
-          "p95": 1.85,
-          "p99": 2.16,
-          "min": 1.1,
-          "max": 2.17
-        },
-        "resident_warm_exec": {
-          "samples": 100,
-          "mean": 1.05,
-          "p50": 1.3,
-          "p95": 1.59,
-          "p99": 1.66,
-          "min": 0.37,
-          "max": 1.71
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 100,
-      "mode": "concurrent",
-      "iterations": 1,
-      "coldStart": {
-        "samples": 100,
-        "mean": 217.31,
-        "p50": 217.14,
-        "p95": 229.38,
-        "p99": 230.9,
-        "min": 204.32,
-        "max": 232.27
-      },
-      "warmStart": {
-        "samples": 100,
-        "mean": 0.78,
-        "p50": 0.73,
-        "p95": 1.22,
-        "p99": 1.35,
-        "min": 0.37,
-        "max": 1.87
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 100,
-          "mean": 0.03,
-          "p50": 0.03,
-          "p95": 0.04,
-          "p99": 0.06,
-          "min": 0.02,
-          "max": 0.08
-        },
-        "session_open": {
-          "samples": 100,
-          "mean": 0.41,
-          "p50": 0.35,
-          "p95": 0.73,
-          "p99": 0.87,
-          "min": 0.18,
-          "max": 0.9
-        },
-        "vm_create": {
-          "samples": 100,
-          "mean": 1.19,
-          "p50": 1.15,
-          "p95": 1.39,
-          "p99": 1.55,
-          "min": 0.98,
-          "max": 2.04
-        },
-        "vm_ready": {
-          "samples": 100,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.03,
-          "p99": 0.04,
-          "min": 0.01,
-          "max": 0.04
-        },
-        "vm_configure": {
-          "samples": 100,
-          "mean": 0.28,
-          "p50": 0.22,
-          "p95": 0.73,
-          "p99": 1.11,
-          "min": 0.07,
-          "max": 1.14
-        },
-        "runtime_mount_wasm": {
-          "samples": 100,
-          "mean": 187.9,
-          "p50": 187.62,
-          "p95": 199.54,
-          "p99": 200.84,
-          "min": 175.2,
-          "max": 204.39
-        },
-        "runtime_mount_node": {
-          "samples": 100,
-          "mean": 3.49,
-          "p50": 3.42,
-          "p95": 4.17,
-          "p99": 4.94,
-          "min": 2.89,
-          "max": 6.04
-        },
-        "runtime_create_total": {
-          "samples": 100,
-          "mean": 191.48,
-          "p50": 190.92,
-          "p95": 203.07,
-          "p99": 204.12,
-          "min": 178.43,
-          "max": 207.96
-        },
-        "resident_runner_create": {
-          "samples": 100,
-          "mean": 24.17,
-          "p50": 23.9,
-          "p95": 26.13,
-          "p99": 27.31,
-          "min": 22.66,
-          "max": 27.98
-        },
-        "resident_first_exec": {
-          "samples": 100,
-          "mean": 1.66,
-          "p50": 1.6,
-          "p95": 2.26,
-          "p99": 2.52,
-          "min": 1.17,
-          "max": 4.03
-        },
-        "resident_warm_exec": {
-          "samples": 100,
-          "mean": 0.78,
-          "p50": 0.73,
-          "p95": 1.22,
-          "p99": 1.35,
-          "min": 0.37,
-          "max": 1.87
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 200,
-      "mode": "sequential",
-      "iterations": 1,
-      "coldStart": {
-        "samples": 200,
-        "mean": 243.3,
-        "p50": 243.92,
-        "p95": 262.6,
-        "p99": 273.42,
-        "min": 214.29,
-        "max": 285.67
-      },
-      "warmStart": {
-        "samples": 200,
-        "mean": 0.99,
-        "p50": 0.92,
-        "p95": 1.68,
-        "p99": 2.01,
-        "min": 0.45,
-        "max": 2.4
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 200,
-          "mean": 0.03,
-          "p50": 0.03,
-          "p95": 0.04,
-          "p99": 0.07,
-          "min": 0.02,
-          "max": 0.08
-        },
-        "session_open": {
-          "samples": 200,
-          "mean": 0.57,
-          "p50": 0.51,
-          "p95": 1.09,
-          "p99": 1.45,
-          "min": 0.19,
-          "max": 1.63
-        },
-        "vm_create": {
-          "samples": 200,
-          "mean": 1.29,
-          "p50": 1.22,
-          "p95": 1.78,
-          "p99": 2.28,
-          "min": 0.98,
-          "max": 2.44
-        },
-        "vm_ready": {
-          "samples": 200,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.03,
-          "p99": 0.04,
-          "min": 0.01,
-          "max": 0.04
-        },
-        "vm_configure": {
-          "samples": 200,
-          "mean": 0.31,
-          "p50": 0.24,
-          "p95": 0.73,
-          "p99": 1.09,
-          "min": 0.09,
-          "max": 1.8
-        },
-        "runtime_mount_wasm": {
-          "samples": 200,
-          "mean": 212.76,
-          "p50": 211.89,
-          "p95": 230.56,
-          "p99": 241.01,
-          "min": 186.3,
-          "max": 255.13
-        },
-        "runtime_mount_node": {
-          "samples": 200,
-          "mean": 4.02,
-          "p50": 3.9,
-          "p95": 5.15,
-          "p99": 5.93,
-          "min": 3.2,
-          "max": 6.19
-        },
-        "runtime_create_total": {
-          "samples": 200,
-          "mean": 216.88,
-          "p50": 216.65,
-          "p95": 235.15,
-          "p99": 246.33,
-          "min": 189.77,
-          "max": 259.48
-        },
-        "resident_runner_create": {
-          "samples": 200,
-          "mean": 24.58,
-          "p50": 24.04,
-          "p95": 27.39,
-          "p99": 29.67,
-          "min": 22.67,
-          "max": 34.84
-        },
-        "resident_first_exec": {
-          "samples": 200,
-          "mean": 1.84,
-          "p50": 1.76,
-          "p95": 2.57,
-          "p99": 3.11,
-          "min": 1.14,
-          "max": 4.3
-        },
-        "resident_warm_exec": {
-          "samples": 200,
-          "mean": 0.99,
-          "p50": 0.92,
-          "p95": 1.68,
-          "p99": 2.01,
-          "min": 0.45,
-          "max": 2.4
-        }
-      }
-    },
-    {
-      "scenario": "resident-runner",
-      "batchSize": 200,
-      "mode": "concurrent",
-      "iterations": 1,
-      "coldStart": {
-        "samples": 200,
-        "mean": 283.56,
-        "p50": 284.31,
-        "p95": 302.18,
-        "p99": 304.27,
-        "min": 252.19,
-        "max": 306.89
-      },
-      "warmStart": {
-        "samples": 200,
-        "mean": 1.38,
-        "p50": 1.28,
-        "p95": 2.29,
-        "p99": 3.11,
-        "min": 0.61,
-        "max": 3.51
-      },
-      "phases": {
-        "filesystem_snapshot": {
-          "samples": 200,
-          "mean": 0.02,
-          "p50": 0.02,
-          "p95": 0.03,
-          "p99": 0.05,
-          "min": 0.02,
-          "max": 0.06
-        },
-        "session_open": {
-          "samples": 200,
-          "mean": 0.92,
-          "p50": 0.81,
-          "p95": 1.75,
-          "p99": 2.77,
-          "min": 0.26,
-          "max": 3.28
-        },
-        "vm_create": {
-          "samples": 200,
-          "mean": 1.44,
-          "p50": 1.33,
-          "p95": 2.1,
-          "p99": 2.69,
-          "min": 1.09,
-          "max": 3.32
-        },
-        "vm_ready": {
-          "samples": 200,
-          "mean": 0.01,
-          "p50": 0.01,
-          "p95": 0.03,
-          "p99": 0.04,
-          "min": 0,
-          "max": 0.06
-        },
-        "vm_configure": {
-          "samples": 200,
-          "mean": 0.43,
-          "p50": 0.3,
-          "p95": 1.01,
-          "p99": 1.28,
-          "min": 0.12,
-          "max": 2.05
-        },
-        "runtime_mount_wasm": {
-          "samples": 200,
-          "mean": 251.31,
-          "p50": 252.57,
-          "p95": 267.63,
-          "p99": 271.21,
-          "min": 222.52,
-          "max": 275.65
-        },
-        "runtime_mount_node": {
-          "samples": 200,
-          "mean": 4.87,
-          "p50": 4.67,
-          "p95": 6.57,
-          "p99": 7.09,
-          "min": 3.57,
-          "max": 7.99
-        },
-        "runtime_create_total": {
-          "samples": 200,
-          "mean": 256.27,
-          "p50": 257.46,
-          "p95": 273.31,
-          "p99": 276.15,
-          "min": 226.37,
-          "max": 280.51
-        },
-        "resident_runner_create": {
-          "samples": 200,
-          "mean": 25.03,
-          "p50": 24.63,
-          "p95": 28.38,
-          "p99": 30.39,
-          "min": 22.84,
-          "max": 30.97
-        },
-        "resident_first_exec": {
-          "samples": 200,
-          "mean": 2.25,
-          "p50": 2.16,
-          "p95": 3.32,
-          "p99": 3.97,
-          "min": 1.37,
-          "max": 4.83
-        },
-        "resident_warm_exec": {
-          "samples": 200,
-          "mean": 1.38,
-          "p50": 1.28,
-          "p95": 2.29,
-          "p99": 3.11,
-          "min": 0.61,
-          "max": 3.51
-        }
-      }
-    }
-  ]
-}
diff --git a/packages/benchmarks/results/coldstart-resident-full-matrix-20260619.log b/packages/benchmarks/results/coldstart-resident-full-matrix-20260619.log
deleted file mode 100644
index 97f0118c9..000000000
--- a/packages/benchmarks/results/coldstart-resident-full-matrix-20260619.log
+++ /dev/null
@@ -1,75 +0,0 @@
-=== Cold Start Benchmark ===
-CPU: 12th Gen Intel(R) Core(TM) i7-12700KF
-Cores: 20 | Max concurrency: 16 | Max live runtimes: 8
-Resident runner live cap: 1
-RAM: 62.6 GB | Node: v24.13.0
-Loadavg: 2.3, 2.56, 4.03
-Iterations: 1 (+ 0 warmup)
-Batch sizes: 1, 10, 50, 100, 200
-Scenarios: resident-runner
-Sidecar: /home/nathan/secure-exec/target/release/secure-exec-sidecar
-
-
---- scenario=resident-runner, batch=1, mode=sequential ---
-  cold: mean=396.38ms p50=396.38ms p95=396.38ms
-  warm: mean=1.36ms p50=1.36ms p95=1.36ms
-  phases: filesystem_snapshot.p50=0.32ms | resident_first_exec.p50=1.59ms | resident_runner_create.p50=171.41ms | resident_warm_exec.p50=1.36ms | runtime_create_total.p50=223.38ms | runtime_mount_node.p50=2.95ms | runtime_mount_wasm.p50=220.02ms | session_open.p50=6.35ms | vm_configure.p50=0.73ms | vm_create.p50=2.75ms | vm_ready.p50=0.25ms
-
---- scenario=resident-runner, batch=1, mode=concurrent ---
-  cold: mean=204.7ms p50=204.7ms p95=204.7ms
-  warm: mean=1.41ms p50=1.41ms p95=1.41ms
-  phases: filesystem_snapshot.p50=0.1ms | resident_first_exec.p50=1.54ms | resident_runner_create.p50=27.31ms | resident_warm_exec.p50=1.41ms | runtime_create_total.p50=175.85ms | runtime_mount_node.p50=2.82ms | runtime_mount_wasm.p50=172.92ms | session_open.p50=1.11ms | vm_configure.p50=0.14ms | vm_create.p50=1.26ms | vm_ready.p50=0.01ms
-
---- scenario=resident-runner, batch=10, mode=sequential ---
-  cold: mean=197.95ms p50=197.93ms p95=211.43ms
-  warm: mean=1.3ms p50=1.29ms p95=1.38ms
-  phases: filesystem_snapshot.p50=0.08ms | resident_first_exec.p50=1.32ms | resident_runner_create.p50=25.27ms | resident_warm_exec.p50=1.29ms | runtime_create_total.p50=171.63ms | runtime_mount_node.p50=2.76ms | runtime_mount_wasm.p50=168.87ms | session_open.p50=0.38ms | vm_configure.p50=0.14ms | vm_create.p50=1.34ms | vm_ready.p50=0.01ms
-
---- scenario=resident-runner, batch=10, mode=concurrent ---
-  cold: mean=192.94ms p50=190.69ms p95=203.83ms
-  warm: mean=1.29ms p50=1.28ms p95=1.36ms
-  phases: filesystem_snapshot.p50=0.03ms | resident_first_exec.p50=1.36ms | resident_runner_create.p50=25.53ms | resident_warm_exec.p50=1.28ms | runtime_create_total.p50=164.37ms | runtime_mount_node.p50=2.72ms | runtime_mount_wasm.p50=161.48ms | session_open.p50=0.33ms | vm_configure.p50=0.16ms | vm_create.p50=1.28ms | vm_ready.p50=0.01ms
-
---- scenario=resident-runner, batch=50, mode=sequential ---
-  cold: mean=187.5ms p50=186.28ms p95=202.34ms
-  warm: mean=1.31ms p50=1.3ms p95=1.4ms
-  phases: filesystem_snapshot.p50=0.03ms | resident_first_exec.p50=1.34ms | resident_runner_create.p50=25.41ms | resident_warm_exec.p50=1.3ms | runtime_create_total.p50=159.5ms | runtime_mount_node.p50=2.7ms | runtime_mount_wasm.p50=156.58ms | session_open.p50=0.2ms | vm_configure.p50=0.11ms | vm_create.p50=1.1ms | vm_ready.p50=0.01ms
-
---- scenario=resident-runner, batch=50, mode=concurrent ---
-  cold: mean=189.8ms p50=188.72ms p95=201.12ms
-  warm: mean=1.34ms p50=1.35ms p95=1.54ms
-  phases: filesystem_snapshot.p50=0.03ms | resident_first_exec.p50=1.41ms | resident_runner_create.p50=25.36ms | resident_warm_exec.p50=1.35ms | runtime_create_total.p50=162.01ms | runtime_mount_node.p50=2.76ms | runtime_mount_wasm.p50=158.55ms | session_open.p50=0.21ms | vm_configure.p50=0.12ms | vm_create.p50=1.13ms | vm_ready.p50=0.01ms
-
---- scenario=resident-runner, batch=100, mode=sequential ---
-  cold: mean=202.61ms p50=200.75ms p95=212.41ms
-  warm: mean=1.05ms p50=1.3ms p95=1.59ms
-  phases: filesystem_snapshot.p50=0.03ms | resident_first_exec.p50=1.41ms | resident_runner_create.p50=24.23ms | resident_warm_exec.p50=1.3ms | runtime_create_total.p50=175.13ms | runtime_mount_node.p50=3.16ms | runtime_mount_wasm.p50=171.64ms | session_open.p50=0.3ms | vm_configure.p50=0.16ms | vm_create.p50=1.15ms | vm_ready.p50=0.01ms
-
---- scenario=resident-runner, batch=100, mode=concurrent ---
-  cold: mean=217.31ms p50=217.14ms p95=229.38ms
-  warm: mean=0.78ms p50=0.73ms p95=1.22ms
-  phases: filesystem_snapshot.p50=0.03ms | resident_first_exec.p50=1.6ms | resident_runner_create.p50=23.9ms | resident_warm_exec.p50=0.73ms | runtime_create_total.p50=190.92ms | runtime_mount_node.p50=3.42ms | runtime_mount_wasm.p50=187.62ms | session_open.p50=0.35ms | vm_configure.p50=0.22ms | vm_create.p50=1.15ms | vm_ready.p50=0.01ms
-
---- scenario=resident-runner, batch=200, mode=sequential ---
-  cold: mean=243.3ms p50=243.92ms p95=262.6ms
-  warm: mean=0.99ms p50=0.92ms p95=1.68ms
-  phases: filesystem_snapshot.p50=0.03ms | resident_first_exec.p50=1.76ms | resident_runner_create.p50=24.04ms | resident_warm_exec.p50=0.92ms | runtime_create_total.p50=216.65ms | runtime_mount_node.p50=3.9ms | runtime_mount_wasm.p50=211.89ms | session_open.p50=0.51ms | vm_configure.p50=0.24ms | vm_create.p50=1.22ms | vm_ready.p50=0.01ms
-
---- scenario=resident-runner, batch=200, mode=concurrent ---
-  cold: mean=283.56ms p50=284.31ms p95=302.18ms
-  warm: mean=1.38ms p50=1.28ms p95=2.29ms
-  phases: filesystem_snapshot.p50=0.02ms | resident_first_exec.p50=2.16ms | resident_runner_create.p50=24.63ms | resident_warm_exec.p50=1.28ms | runtime_create_total.p50=257.46ms | runtime_mount_node.p50=4.67ms | runtime_mount_wasm.p50=252.57ms | session_open.p50=0.81ms | vm_configure.p50=0.3ms | vm_create.p50=1.33ms | vm_ready.p50=0.01ms
-
-       scenario | batch |       mode | cold mean | cold p50 | cold p95 | warm mean | warm p50 | warm p95
---------------- | ----- | ---------- | --------- | -------- | -------- | --------- | -------- | --------
-resident-runner |     1 | sequential |  396.38ms | 396.38ms | 396.38ms |    1.36ms |   1.36ms |   1.36ms
-resident-runner |     1 | concurrent |   204.7ms |  204.7ms |  204.7ms |    1.41ms |   1.41ms |   1.41ms
-resident-runner |    10 | sequential |  197.95ms | 197.93ms | 211.43ms |     1.3ms |   1.29ms |   1.38ms
-resident-runner |    10 | concurrent |  192.94ms | 190.69ms | 203.83ms |    1.29ms |   1.28ms |   1.36ms
-resident-runner |    50 | sequential |   187.5ms | 186.28ms | 202.34ms |    1.31ms |    1.3ms |    1.4ms
-resident-runner |    50 | concurrent |   189.8ms | 188.72ms | 201.12ms |    1.34ms |   1.35ms |   1.54ms
-resident-runner |   100 | sequential |  202.61ms | 200.75ms | 212.41ms |    1.05ms |    1.3ms |   1.59ms
-resident-runner |   100 | concurrent |  217.31ms | 217.14ms | 229.38ms |    0.78ms |   0.73ms |   1.22ms
-resident-runner |   200 | sequential |   243.3ms | 243.92ms |  262.6ms |    0.99ms |   0.92ms |   1.68ms
-resident-runner |   200 | concurrent |  283.56ms | 284.31ms | 302.18ms |    1.38ms |   1.28ms |   2.29ms
-
diff --git a/packages/benchmarks/run-benchmarks.sh b/packages/benchmarks/run-benchmarks.sh
deleted file mode 100755
index 3468a8171..000000000
--- a/packages/benchmarks/run-benchmarks.sh
+++ /dev/null
@@ -1,271 +0,0 @@
-#!/usr/bin/env bash
-#
-# Run Secure Exec benchmarks against an optimized sidecar, saving JSON and logs
-# to packages/benchmarks/results/.
-
-set -euo pipefail
-
-HERE="$(cd "$(dirname "${BASH_SOURCE[0]}")" && pwd)"
-REPO_ROOT="$(cd "$HERE/../.." && pwd)"
-cd "$REPO_ROOT"
-
-RESULTS_DIR="$HERE/results"
-mkdir -p "$RESULTS_DIR"
-STAMP="$(date +%Y%m%d-%H%M%S)"
-
-if [[ -n "${BENCH_FAMILIES:-}" && -z "${BENCH_ONLY:-}" ]]; then
-	BENCH_ONLY="matrix"
-else
-	BENCH_ONLY="${BENCH_ONLY:-}"
-fi
-
-should_run() {
-	local name="$1"
-	[[ -z "$BENCH_ONLY" || "$BENCH_ONLY" == "$name" ]]
-}
-
-echo "=== Building benchmark TypeScript dependencies ===" >&2
-pnpm --dir packages/core build >&2
-
-echo "=== Building release sidecar ===" >&2
-cargo build --release -p secure-exec-sidecar >&2
-if [[ -n "${CARGO_TARGET_DIR:-}" ]]; then
-	export SECURE_EXEC_SIDECAR_BIN="${SECURE_EXEC_SIDECAR_BIN:-$CARGO_TARGET_DIR/release/secure-exec-sidecar}"
-else
-	export SECURE_EXEC_SIDECAR_BIN="${SECURE_EXEC_SIDECAR_BIN:-$REPO_ROOT/target/release/secure-exec-sidecar}"
-fi
-echo "Using sidecar: $SECURE_EXEC_SIDECAR_BIN" >&2
-
-build_native_baseline() {
-	echo "" >&2
-	echo "=== Building native-baseline ===" >&2
-	cargo build --release -p native-baseline >&2
-	if [[ -n "${CARGO_TARGET_DIR:-}" ]]; then
-		export NATIVE_BASELINE_BIN="${NATIVE_BASELINE_BIN:-$CARGO_TARGET_DIR/release/native-baseline}"
-	else
-		export NATIVE_BASELINE_BIN="${NATIVE_BASELINE_BIN:-$REPO_ROOT/target/release/native-baseline}"
-	fi
-	echo "Using native baseline: $NATIVE_BASELINE_BIN" >&2
-}
-
-build_native_baseline_wasm() {
-	if command -v rustup >/dev/null 2>&1 && ! rustup target list --installed | grep -qx "wasm32-wasip1"; then
-		echo "=== Skipping vm-wasm lane: Rust target wasm32-wasip1 is not installed ===" >&2
-		echo "Install it with: rustup target add wasm32-wasip1" >&2
-		export NATIVE_BASELINE_WASM=""
-		return
-	fi
-	echo "" >&2
-	echo "=== Building native-baseline wasm32-wasip1 ===" >&2
-	cargo build --release --target wasm32-wasip1 -p native-baseline >&2
-	if [[ -n "${CARGO_TARGET_DIR:-}" ]]; then
-		export NATIVE_BASELINE_WASM="${NATIVE_BASELINE_WASM:-$CARGO_TARGET_DIR/wasm32-wasip1/release/native-baseline.wasm}"
-	else
-		export NATIVE_BASELINE_WASM="${NATIVE_BASELINE_WASM:-$REPO_ROOT/target/wasm32-wasip1/release/native-baseline.wasm}"
-	fi
-	echo "Using wasm native baseline: $NATIVE_BASELINE_WASM" >&2
-}
-
-run_tsx() {
-	local name="$1"
-	shift
-	if ! should_run "$name"; then
-		echo "=== Skipping $name (BENCH_ONLY=$BENCH_ONLY) ===" >&2
-		return
-	fi
-	echo "" >&2
-	echo "=== Running $name ===" >&2
-	pnpm --dir packages/benchmarks exec tsx "$@" \
-		1> "$RESULTS_DIR/${name}-$STAMP.json" \
-		2> >(tee "$RESULTS_DIR/${name}-$STAMP.log" >&2)
-}
-
-run_node() {
-	local name="$1"
-	shift
-	if ! should_run "$name"; then
-		echo "=== Skipping $name (BENCH_ONLY=$BENCH_ONLY) ===" >&2
-		return
-	fi
-	echo "" >&2
-	echo "=== Running $name ===" >&2
-	pnpm --dir packages/benchmarks exec node "$@" \
-		1> "$RESULTS_DIR/${name}-$STAMP.json" \
-		2> >(tee "$RESULTS_DIR/${name}-$STAMP.log" >&2)
-}
-
-run_tsx "coldstart" "$HERE/coldstart.bench.ts"
-run_node "memory" --expose-gc --import tsx/esm "$HERE/memory.bench.ts"
-
-run_tsx "echo-cold-warm" "$HERE/src/focused/echo.bench.ts"
-
-run_tsx "ls-serial" \
-	"$HERE/src/focused/ls.bench.ts" \
-	--iterations="${BENCH_LS_ITERATIONS:-5}" \
-	--warmup="${BENCH_LS_WARMUP:-1}" \
-	--serial-runs="${BENCH_LS_SERIAL_RUNS:-5}" \
-	--file-counts="${BENCH_LS_FILE_COUNTS:-0,100}" \
-	${BENCH_LS_WASM_WARMUP_DEBUG:+--wasm-warmup-debug}
-
-run_tsx "wasi-ls-scaling" \
-	"$HERE/src/focused/wasi-ls-scaling.bench.ts" \
-	--iterations="${BENCH_WASI_LS_ITERATIONS:-5}" \
-	--warmup="${BENCH_WASI_LS_WARMUP:-1}" \
-	--serial-runs="${BENCH_WASI_LS_SERIAL_RUNS:-3}" \
-	--file-counts="${BENCH_WASI_LS_FILE_COUNTS:-0,1,32,100,1000}" \
-	--ls-variants="${BENCH_WASI_LS_VARIANTS:-one}" \
-	${BENCH_WASI_LS_WASM_WARMUP_DEBUG:+--wasm-warmup-debug} \
-	${BENCH_WASI_LS_SYSCALL_COUNTERS:+--wasi-syscall-counters}
-
-run_tsx "wasi-ls-scaling-counters" \
-	"$HERE/src/focused/wasi-ls-scaling.bench.ts" \
-	--iterations="${BENCH_WASI_LS_COUNTER_ITERATIONS:-3}" \
-	--warmup="${BENCH_WASI_LS_COUNTER_WARMUP:-1}" \
-	--serial-runs="${BENCH_WASI_LS_COUNTER_SERIAL_RUNS:-3}" \
-	--file-counts="${BENCH_WASI_LS_COUNTER_FILE_COUNTS:-0,100,1000}" \
-	--ls-variants="${BENCH_WASI_LS_COUNTER_VARIANTS:-one,fast-no-decor}" \
-	--wasi-syscall-counters \
-	${BENCH_WASI_LS_COUNTER_WASM_WARMUP_DEBUG:+--wasm-warmup-debug}
-
-run_tsx "readdir-scaling" \
-	"$HERE/src/focused/readdir.bench.ts" \
-	--iterations="${BENCH_READDIR_ITERATIONS:-10}" \
-	--warmup="${BENCH_READDIR_WARMUP:-2}" \
-	--entry-counts="${BENCH_READDIR_ENTRY_COUNTS:-0,1,32,100,1000}" \
-	--modes="${BENCH_READDIR_MODES:-plain,withFileTypes}" \
-	--fixtures="${BENCH_READDIR_FIXTURES:-vm-shadow}" \
-	--workloads="${BENCH_READDIR_WORKLOADS:-pure}" \
-	${BENCH_READDIR_PREFLIGHT_OPS:+--preflight-ops="${BENCH_READDIR_PREFLIGHT_OPS}"} \
-	${BENCH_READDIR_PREFLIGHT_COUNTS:+--preflight-counts="${BENCH_READDIR_PREFLIGHT_COUNTS}"} \
-	${BENCH_READDIR_INCLUDE_READDIR:+--include-readdir="${BENCH_READDIR_INCLUDE_READDIR}"} \
-	${BENCH_READDIR_PROBE_TARGETS:+--probe-targets="${BENCH_READDIR_PROBE_TARGETS}"}
-
-run_tsx "readdir-probe" \
-	"$HERE/src/focused/readdir.bench.ts" \
-	--iterations="${BENCH_READDIR_PROBE_ITERATIONS:-5}" \
-	--warmup="${BENCH_READDIR_PROBE_WARMUP:-1}" \
-	--entry-counts="${BENCH_READDIR_PROBE_ENTRY_COUNTS:-32}" \
-	--modes="${BENCH_READDIR_PROBE_MODES:-plain}" \
-	--fixtures="${BENCH_READDIR_PROBE_FIXTURES:-vm-shadow,native-host-dir}" \
-	--workloads=probe \
-	--preflight-ops="${BENCH_READDIR_PROBE_PREFLIGHT_OPS:-none,existsSync,statSync}" \
-	--preflight-counts="${BENCH_READDIR_PROBE_PREFLIGHT_COUNTS:-0,32,33}" \
-	--include-readdir="${BENCH_READDIR_PROBE_INCLUDE_READDIR:-both}" \
-	--probe-targets="${BENCH_READDIR_PROBE_TARGETS:-dir-plus-children}"
-
-run_tsx "fs-sync-ops" \
-	"$HERE/src/focused/fs-sync-ops.bench.ts" \
-	--iterations="${BENCH_FS_SYNC_ITERATIONS:-10}" \
-	--warmup="${BENCH_FS_SYNC_WARMUP:-2}" \
-	--ops="${BENCH_FS_SYNC_OPS:-existsSync,statSync,openClose,mkdirRmdir,smallWrite,readFileSync,renameFile}" \
-	--call-counts="${BENCH_FS_SYNC_CALL_COUNTS:-1,8,32}" \
-	--fixtures="${BENCH_FS_SYNC_FIXTURES:-vm-shadow}" \
-	--payload-bytes="${BENCH_FS_SYNC_PAYLOAD_BYTES:-8}" \
-	${BENCH_FS_SYNC_RPC_LATENCY:+--sync-rpc-latency} \
-	${BENCH_FS_SYNC_PHASES:+--fs-sync-phases}
-
-run_tsx "fs-sync-ops-phases" \
-	"$HERE/src/focused/fs-sync-ops.bench.ts" \
-	--iterations="${BENCH_FS_SYNC_PHASE_ITERATIONS:-5}" \
-	--warmup="${BENCH_FS_SYNC_PHASE_WARMUP:-1}" \
-	--ops="${BENCH_FS_SYNC_PHASE_OPS:-existsSync,statSync,readFileSync}" \
-	--call-counts="${BENCH_FS_SYNC_PHASE_CALL_COUNTS:-8,32}" \
-	--fixtures="${BENCH_FS_SYNC_PHASE_FIXTURES:-vm-shadow}" \
-	--payload-bytes="${BENCH_FS_SYNC_PHASE_PAYLOAD_BYTES:-8}" \
-	--sync-rpc-latency \
-	--fs-sync-phases
-
-run_tsx "sync-bridge-floor" \
-	"$HERE/src/focused/sync-bridge-floor.bench.ts" \
-	--iterations="${BENCH_SYNC_BRIDGE_ITERATIONS:-10}" \
-	--warmup="${BENCH_SYNC_BRIDGE_WARMUP:-2}" \
-	--call-counts="${BENCH_SYNC_BRIDGE_CALL_COUNTS:-1,8,32}" \
-	--payload-bytes="${BENCH_SYNC_BRIDGE_PAYLOAD_BYTES:-0}" \
-	${BENCH_SYNC_BRIDGE_RPC_LATENCY:+--sync-rpc-latency} \
-	${BENCH_SYNC_BRIDGE_PHASES:+--bridge-phases}
-
-run_tsx "sync-bridge-floor-phases" \
-	"$HERE/src/focused/sync-bridge-floor.bench.ts" \
-	--iterations="${BENCH_SYNC_BRIDGE_PHASE_ITERATIONS:-5}" \
-	--warmup="${BENCH_SYNC_BRIDGE_PHASE_WARMUP:-1}" \
-	--call-counts="${BENCH_SYNC_BRIDGE_PHASE_CALL_COUNTS:-1,8,32}" \
-	--payload-bytes="${BENCH_SYNC_BRIDGE_PHASE_PAYLOAD_BYTES:-0}" \
-	--sync-rpc-latency \
-	--bridge-phases
-
-run_tsx "sync-bridge-floor-bigargs" \
-	"$HERE/src/focused/sync-bridge-floor.bench.ts" \
-	--iterations="${BENCH_SYNC_BRIDGE_BIGARGS_ITERATIONS:-10}" \
-	--warmup="${BENCH_SYNC_BRIDGE_BIGARGS_WARMUP:-2}" \
-	--call-counts="${BENCH_SYNC_BRIDGE_BIGARGS_CALL_COUNTS:-1,8,32}" \
-	--payload-bytes="${BENCH_SYNC_BRIDGE_BIGARGS_PAYLOAD_BYTES:-65536}"
-
-run_tsx "dns-lookup-floor" \
-	"$HERE/src/focused/dns-lookup-floor.bench.ts" \
-	--iterations="${BENCH_DNS_LOOKUP_ITERATIONS:-10}" \
-	--warmup="${BENCH_DNS_LOOKUP_WARMUP:-2}" \
-	--rows="${BENCH_DNS_LOOKUP_ROWS:-single_localhost,sequential_same_2,sequential_same_8,sequential_same_32,concurrent_same_4,concurrent_same_16,cold_process_single}"
-
-run_tsx "net-tcp-event-floor" \
-	"$HERE/src/focused/net-tcp-event-floor.bench.ts" \
-	--iterations="${BENCH_NET_TCP_ITERATIONS:-20}" \
-	--warmup="${BENCH_NET_TCP_WARMUP:-5}" \
-	${BENCH_NET_TCP_ROWS:+--rows="${BENCH_NET_TCP_ROWS}"} \
-	${BENCH_NET_TCP_POLL_DELAY_MS:+--net-poll-delay-ms="${BENCH_NET_TCP_POLL_DELAY_MS}"} \
-	${BENCH_NET_TCP_TRACE:+--net-bridge-trace}
-
-DEFAULT_NET_TCP_TRACE_ROWS="connect_close_1,connect_close_4,connect_close_8,echo_1x1,echo_1x5,echo_1x5_string,echo_1x4k,echo_1x64k,echo_1x256k,echo_1x1m,burst_4x1_echo_once,burst_16x1_echo_once,burst_16x1_string_echo_once,burst_64x1_echo_once,burst_16x4096_echo_once,burst_64x1024_echo_once,burst_256x256_echo_once,pingpong_1x1,pingpong_4x1,pingpong_8x1,pingpong_16x1,pingpong_32x1,concurrent_2x1,concurrent_4x1,concurrent_8x1,echo_4x1,echo_8x1"
-run_tsx "net-tcp-cadence-trace" \
-	"$HERE/src/focused/net-tcp-event-floor.bench.ts" \
-	--iterations="${BENCH_NET_TCP_TRACE_ITERATIONS:-5}" \
-	--warmup="${BENCH_NET_TCP_TRACE_WARMUP:-1}" \
-	--rows="${BENCH_NET_TCP_TRACE_ROWS:-$DEFAULT_NET_TCP_TRACE_ROWS}" \
-	--net-bridge-trace \
-	${BENCH_NET_TCP_TRACE_POLL_DELAY_MS:+--net-poll-delay-ms="${BENCH_NET_TCP_TRACE_POLL_DELAY_MS}"}
-
-run_tsx "concurrency-vms" "$HERE/src/focused/concurrency-vms.bench.ts"
-
-run_tsx "interference" "$HERE/src/focused/interference.bench.ts"
-
-run_tsx "concurrent-processes" "$HERE/src/focused/concurrent-processes.bench.ts"
-
-run_tsx "wasm-command-floor" \
-	"$HERE/src/focused/wasm-command-floor.bench.ts" \
-	--iterations="${BENCH_WASM_COMMAND_FLOOR_ITERATIONS:-3}" \
-	--warmup="${BENCH_WASM_COMMAND_FLOOR_WARMUP:-1}" \
-	--serial-runs="${BENCH_WASM_COMMAND_FLOOR_SERIAL_RUNS:-3}" \
-	--stdout-sizes="${BENCH_WASM_COMMAND_FLOOR_STDOUT_SIZES:-0,1,65536}" \
-	${BENCH_WASM_COMMAND_FLOOR_WARMUP_DEBUG:+--wasm-warmup-debug}
-
-run_tsx "wasm-command-floor-debug" \
-	"$HERE/src/focused/wasm-command-floor.bench.ts" \
-	--iterations="${BENCH_WASM_COMMAND_DEBUG_ITERATIONS:-2}" \
-	--warmup="${BENCH_WASM_COMMAND_DEBUG_WARMUP:-0}" \
-	--serial-runs="${BENCH_WASM_COMMAND_DEBUG_SERIAL_RUNS:-2}" \
-	--stdout-sizes="${BENCH_WASM_COMMAND_DEBUG_STDOUT_SIZES:-0,1}" \
-	--wasm-warmup-debug
-
-run_tsx "mount-readdir" \
-	"$HERE/src/focused/mount-readdir.bench.ts" \
-	--iterations="${BENCH_MOUNT_READDIR_ITERATIONS:-20}" \
-	--warmup="${BENCH_MOUNT_READDIR_WARMUP:-3}" \
-	--mount-counts="${BENCH_MOUNT_READDIR_COUNTS:-0,10,100}" \
-	--entry-count="${BENCH_MOUNT_READDIR_ENTRY_COUNT:-32}"
-
-run_tsx "overlay-readdir" \
-	"$HERE/src/focused/overlay-readdir.bench.ts"
-
-if should_run "process-spawn"; then
-	build_native_baseline
-	export NODE_OPTIONS="${NODE_OPTIONS:---expose-gc}"
-fi
-run_tsx "process-spawn" "$HERE/src/focused/process-spawn.bench.ts"
-
-if should_run "matrix"; then
-	build_native_baseline
-	build_native_baseline_wasm
-fi
-run_tsx "matrix" "$HERE/src/run-all.ts"
-
-echo "" >&2
-echo "Done. Results saved under $RESULTS_DIR" >&2
diff --git a/packages/benchmarks/src/baseline.ts b/packages/benchmarks/src/baseline.ts
deleted file mode 100644
index 0bb2df644..000000000
--- a/packages/benchmarks/src/baseline.ts
+++ /dev/null
@@ -1,267 +0,0 @@
-import { existsSync, readFileSync } from "node:fs";
-import { basename } from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
-import { allOps } from "./families/index.js";
-import type { LatencyResult, LayerStatsEntry } from "./lib/layers.js";
-import { getHardware, round } from "./lib/perf-utils.js";
-import { writeJson } from "./lib/report.js";
-import {
-	formatPacificIso,
-	formatSidecarProvenance,
-	resolveBenchSidecarProvenance,
-	type SidecarBinaryProvenance,
-} from "./lib/vm.js";
-
-export const LOCAL_BASELINE_PATH = fileURLToPath(
-	new URL("../results/baseline-local.json", import.meta.url),
-);
-export const CI_BASELINE_PATH = fileURLToPath(
-	new URL("../results/baseline-ci.json", import.meta.url),
-);
-
-export type GateLane =
-	| "native"
-	| "node"
-	| "guest"
-	| "wasm"
-	| "hostCmd"
-	| "vmCmd";
-
-export interface MatrixBaseline {
-	schemaVersion: 1;
-	kind: "local" | "ci";
-	generatedAt: string;
-	hardware: ReturnType<typeof getHardware>;
-	sidecar: SidecarBinaryProvenance;
-	engine: {
-		iterations: number;
-		warmup: number;
-		cold: boolean;
-		sharedVm: boolean;
-		rowCount: number;
-	};
-	rows: MatrixBaselineRow[];
-}
-
-export interface MatrixBaselineRow {
-	key: string;
-	family: string;
-	op: string;
-	lanes: Partial<Record<GateLane, BaselineLane>>;
-	tax: Record<string, number>;
-	skipped?: true;
-	skipReason?: string;
-}
-
-export interface BaselineLane {
-	p50Ms: number;
-	memBytes?: number;
-	memProvenance?: string;
-}
-
-export interface LatencyMatrixLike {
-	results?: LatencyResult[];
-	latency?: LatencyResult[];
-	sidecar: SidecarBinaryProvenance;
-	mode?: {
-		cold: boolean;
-		sharedVm: boolean;
-	};
-	matrixMode?: {
-		cold: boolean;
-		sharedVm: boolean;
-	};
-}
-
-export function baselinePathForEnvironment(): string {
-	return process.env.GITHUB_ACTIONS === "true" ? CI_BASELINE_PATH : LOCAL_BASELINE_PATH;
-}
-
-export function loadMatrixBaseline(path: string): MatrixBaseline | null {
-	if (!existsSync(path)) return null;
-	return JSON.parse(readFileSync(path, "utf8")) as MatrixBaseline;
-}
-
-export function rowKey(row: Pick<LatencyResult, "family" | "op">): string {
-	return `${row.family}/${row.op}`;
-}
-
-export function laneMetric(
-	row: Pick<MatrixBaselineRow, "lanes">,
-	lane: GateLane,
-): BaselineLane | undefined {
-	return row.lanes[lane];
-}
-
-export function createMatrixBaseline(
-	matrix: LatencyMatrixLike,
-	options: {
-		kind: "local" | "ci";
-		iterations: number;
-		warmup: number;
-	},
-): MatrixBaseline {
-	const latency = matrix.results ?? matrix.latency ?? [];
-	const mode = matrix.mode ?? matrix.matrixMode ?? { cold: false, sharedVm: false };
-	return {
-		schemaVersion: 1,
-		kind: options.kind,
-		generatedAt: formatPacificIso(new Date()),
-		hardware: getHardware(),
-		sidecar: matrix.sidecar,
-		engine: {
-			iterations: options.iterations,
-			warmup: options.warmup,
-			cold: mode.cold,
-			sharedVm: mode.sharedVm,
-			rowCount: latency.length,
-		},
-		rows: latency.map(baselineRowFromLatency),
-	};
-}
-
-export function baselineRowFromLatency(result: LatencyResult): MatrixBaselineRow {
-	const lanes: MatrixBaselineRow["lanes"] = {};
-	for (const lane of ["native", "node", "guest", "wasm", "hostCmd", "vmCmd"] as const) {
-		const stats = (result.layers as Partial<Record<GateLane, LayerStatsEntry>>)[lane];
-		if (stats) lanes[lane] = baselineLane(stats);
-	}
-	return {
-		key: rowKey(result),
-		family: result.family,
-		op: result.op,
-		lanes,
-		tax: Object.fromEntries(
-			Object.entries(result.tax).filter((entry): entry is [string, number] =>
-				typeof entry[1] === "number",
-			),
-		),
-		...("skipped" in result && result.skipped ? { skipped: true as const } : {}),
-		...("skipReason" in result && result.skipReason
-			? { skipReason: result.skipReason }
-			: {}),
-	};
-}
-
-export function printBaselineMetadata(baseline: MatrixBaseline, path: string): void {
-	console.log(
-		JSON.stringify(
-			{
-				path,
-				kind: baseline.kind,
-				generatedAt: baseline.generatedAt,
-				hardware: baseline.hardware,
-				sidecar: baseline.sidecar,
-				engine: baseline.engine,
-			},
-			null,
-			2,
-		),
-	);
-}
-
-function baselineLane(stats: LayerStatsEntry): BaselineLane {
-	return {
-		p50Ms: stats.p50,
-		...(stats.memBytes !== undefined ? { memBytes: stats.memBytes } : {}),
-		...(stats.memProvenance ? { memProvenance: stats.memProvenance } : {}),
-	};
-}
-
-function parseArgs(argv: string[]): {
-	kind: "local" | "ci";
-	output: string;
-	from?: string;
-} {
-	let kind: "local" | "ci" = "local";
-	let output: string | undefined;
-	let from: string | undefined;
-	for (let i = 0; i < argv.length; i++) {
-		const arg = argv[i];
-		if (arg === "--") {
-			// pnpm run forwards the `--` separator itself; ignore it.
-			continue;
-		}
-		if (arg === "--ci") {
-			kind = "ci";
-		} else if (arg === "--local") {
-			kind = "local";
-		} else if (arg === "--output") {
-			output = argv[++i];
-		} else if (arg === "--from") {
-			from = argv[++i];
-		} else {
-			throw new Error(`unknown ${basename(import.meta.url)} argument: ${arg}`);
-		}
-	}
-	return {
-		kind,
-		output: output ?? (kind === "ci" ? CI_BASELINE_PATH : LOCAL_BASELINE_PATH),
-		from,
-	};
-}
-
-async function loadOrRunMatrix(from: string | undefined): Promise<LatencyMatrixLike> {
-	if (from) {
-		return JSON.parse(readFileSync(from, "utf8")) as LatencyMatrixLike;
-	}
-	if (process.env.BENCH_FAMILIES || process.env.BENCH_OP_FILTER) {
-		throw new Error("baseline regeneration requires the full matrix; unset BENCH_FAMILIES and BENCH_OP_FILTER");
-	}
-	const sidecar = resolveBenchSidecarProvenance();
-	console.error(formatSidecarProvenance(sidecar));
-	if (sidecar.profile !== "release") {
-		throw new BaselineExitError(
-			2,
-			`refusing to regenerate baseline with ${sidecar.profile} sidecar; set SECURE_EXEC_SIDECAR_BIN to target/release/secure-exec-sidecar`,
-		);
-	}
-	const { runLatencyMatrix } = await import("./run-all.js");
-	return runLatencyMatrix();
-}
-
-class BaselineExitError extends Error {
-	constructor(
-		readonly code: number,
-		message: string,
-	) {
-		super(message);
-	}
-}
-
-async function main(): Promise<void> {
-	const args = parseArgs(process.argv.slice(2));
-	const matrix = await loadOrRunMatrix(args.from);
-	if (matrix.sidecar.profile !== "release") {
-		throw new BaselineExitError(
-			2,
-			`refusing to write ${args.output} from ${matrix.sidecar.profile} sidecar provenance`,
-		);
-	}
-	const baseline = createMatrixBaseline(matrix, {
-		kind: args.kind,
-		iterations: Number(process.env.BENCH_ITERATIONS ?? 20),
-		warmup: Number(process.env.BENCH_WARMUP ?? 5),
-	});
-	// One matrix row per registered op; derive from the registry so the check
-	// tracks new families instead of going stale on a hardcoded count.
-	if (baseline.engine.rowCount !== allOps.length) {
-		throw new BaselineExitError(
-			2,
-			`refusing to write incomplete baseline: expected ${allOps.length} matrix rows, got ${baseline.engine.rowCount}`,
-		);
-	}
-	writeJson(args.output, baseline);
-	printBaselineMetadata(baseline, args.output);
-}
-
-if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) {
-	main().then(
-		() => process.exit(0),
-		(error) => {
-			const code = error instanceof BaselineExitError ? error.code : 1;
-			console.error(error instanceof Error ? error.message : error);
-			process.exit(code);
-		},
-	);
-}
diff --git a/packages/benchmarks/src/check-native-ops.ts b/packages/benchmarks/src/check-native-ops.ts
deleted file mode 100644
index e2b63e9c4..000000000
--- a/packages/benchmarks/src/check-native-ops.ts
+++ /dev/null
@@ -1,57 +0,0 @@
-import { execFileSync } from "node:child_process";
-import { existsSync } from "node:fs";
-import { join } from "node:path";
-import { fileURLToPath } from "node:url";
-import { allOps } from "./families/index.js";
-
-const DEFAULT_NATIVE_BIN = join(
-	fileURLToPath(new URL("../../..", import.meta.url)),
-	"target/release/native-baseline",
-);
-
-function nativeBaselineBin(): string {
-	return process.env.NATIVE_BASELINE_BIN ?? DEFAULT_NATIVE_BIN;
-}
-
-function listNativeOps(bin: string): Set<string> {
-	if (!existsSync(bin)) {
-		throw new Error(`native-baseline binary not found at ${bin}; build with cargo build --release -p native-baseline`);
-	}
-	const stdout = execFileSync(bin, ["--list-ops"], {
-		encoding: "utf8",
-		maxBuffer: 1024 * 1024,
-	});
-	const ops = stdout
-		.split(/\r?\n/)
-		.map((line) => line.trim())
-		.filter(Boolean);
-	if (ops.length === 0) {
-		throw new Error("native-baseline --list-ops returned no ops");
-	}
-	return new Set(ops);
-}
-
-const nativeOps = listNativeOps(nativeBaselineBin());
-const failures: string[] = [];
-
-for (const op of allOps) {
-	if ("runHostCmd" in op) continue;
-	const key = `${op.family}/${op.name}`;
-	if (op.nativeOp) {
-		if (!nativeOps.has(op.nativeOp)) {
-			failures.push(`${key}: nativeOp ${op.nativeOp} is not in native-baseline --list-ops`);
-		}
-		continue;
-	}
-	if (!op.nativeUnsupportedReason) {
-		failures.push(`${key}: missing nativeOp and nativeUnsupportedReason`);
-	}
-}
-
-if (failures.length > 0) {
-	console.error("native op drift check failed:");
-	for (const failure of failures) console.error(`- ${failure}`);
-	process.exit(1);
-}
-
-console.log(`native op drift check passed: ${nativeOps.size} native-baseline ops advertised`);
diff --git a/packages/benchmarks/src/compare-baseline.ts b/packages/benchmarks/src/compare-baseline.ts
deleted file mode 100644
index ef21e9bc6..000000000
--- a/packages/benchmarks/src/compare-baseline.ts
+++ /dev/null
@@ -1,158 +0,0 @@
-import { readFileSync } from "node:fs";
-import { pathToFileURL } from "node:url";
-import {
-	baselineRowFromLatency,
-	laneMetric,
-	loadMatrixBaseline,
-	type GateLane,
-	type MatrixBaseline,
-	type MatrixBaselineRow,
-} from "./baseline.js";
-import type { LatencyResult } from "./lib/layers.js";
-import { round } from "./lib/perf-utils.js";
-
-export interface GateRow {
-	key: string;
-	lane: GateLane;
-}
-
-export interface MatrixComparison {
-	key: string;
-	lane: GateLane;
-	baselineP50Ms?: number;
-	currentP50Ms?: number;
-	ratio?: number;
-	deltaMs?: number;
-	status: "pass" | "fail" | "ignored" | "missing-baseline" | "missing-current";
-	reason: string;
-}
-
-export function compareMatrixBaseline(
-	currentRows: MatrixBaselineRow[],
-	baseline: MatrixBaseline,
-	gateRows: GateRow[],
-	options: {
-		threshold: number;
-		tinyBaselineFloorMs: number;
-		tinyCurrentFloorMs: number;
-	},
-): MatrixComparison[] {
-	const currentByKey = new Map(currentRows.map((row) => [row.key, row]));
-	const baselineByKey = new Map(baseline.rows.map((row) => [row.key, row]));
-	return gateRows.map((gate) => {
-		const current = currentByKey.get(gate.key);
-		const base = baselineByKey.get(gate.key);
-		const currentMetric = current ? laneMetric(current, gate.lane) : undefined;
-		const baselineMetric = base ? laneMetric(base, gate.lane) : undefined;
-		if (!base || !baselineMetric) {
-			return {
-				key: gate.key,
-				lane: gate.lane,
-				currentP50Ms: currentMetric?.p50Ms,
-				status: "missing-baseline",
-				reason: "baseline has no p50 for this row/lane",
-			};
-		}
-		if (!current || !currentMetric) {
-			return {
-				key: gate.key,
-				lane: gate.lane,
-				baselineP50Ms: baselineMetric.p50Ms,
-				status: "missing-current",
-				reason: "current run has no p50 for this row/lane",
-			};
-		}
-		const ratio = round(currentMetric.p50Ms / baselineMetric.p50Ms, 2);
-		const deltaMs = round(currentMetric.p50Ms - baselineMetric.p50Ms, 3);
-		const tinyBaseline = baselineMetric.p50Ms < options.tinyBaselineFloorMs;
-		if (tinyBaseline && currentMetric.p50Ms < options.tinyCurrentFloorMs) {
-			return {
-				key: gate.key,
-				lane: gate.lane,
-				baselineP50Ms: baselineMetric.p50Ms,
-				currentP50Ms: currentMetric.p50Ms,
-				ratio,
-				deltaMs,
-				status: "ignored",
-				reason: `baseline < ${options.tinyBaselineFloorMs}ms and current < ${options.tinyCurrentFloorMs}ms`,
-			};
-		}
-		const failed = ratio > options.threshold;
-		return {
-			key: gate.key,
-			lane: gate.lane,
-			baselineP50Ms: baselineMetric.p50Ms,
-			currentP50Ms: currentMetric.p50Ms,
-			ratio,
-			deltaMs,
-			status: failed ? "fail" : "pass",
-			reason: failed ? `ratio ${ratio} > ${options.threshold}` : `ratio ${ratio} <= ${options.threshold}`,
-		};
-	});
-}
-
-export function latencyResultsToBaselineRows(
-	results: LatencyResult[],
-): MatrixBaselineRow[] {
-	return results.map(baselineRowFromLatency);
-}
-
-export function compareBaselineFile(
-	currentPath: string,
-	baselinePath: string,
-	gateRows: GateRow[] = [],
-	options: {
-		threshold: number;
-		tinyBaselineFloorMs: number;
-		tinyCurrentFloorMs: number;
-	} = {
-		threshold: 2,
-		tinyBaselineFloorMs: 0.3,
-		tinyCurrentFloorMs: 1,
-	},
-) {
-	const baseline = loadMatrixBaseline(baselinePath);
-	if (!baseline) {
-		return {
-			status: "missing-baseline",
-			baselinePath,
-			rows: [],
-		};
-	}
-	const currentJson = JSON.parse(readFileSync(currentPath, "utf8")) as {
-		latency?: LatencyResult[];
-		rows?: MatrixBaselineRow[];
-	};
-	const currentRows =
-		currentJson.rows ?? latencyResultsToBaselineRows(currentJson.latency ?? []);
-	const rows = compareMatrixBaseline(currentRows, baseline, gateRows, options);
-	return {
-		status: rows.some((row) => row.status === "fail") ? "regressed" : "ok",
-		rows,
-	};
-}
-
-if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) {
-	const current = process.argv[2] ?? "packages/benchmarks/results/latency-matrix.json";
-	const baseline = process.argv[3] ?? "packages/benchmarks/results/baseline-local.json";
-	const rowsArg = process.argv[4] ?? "";
-	const gateRows = rowsArg
-		.split(",")
-		.map((row) => row.trim())
-		.filter(Boolean)
-		.map((row) => {
-			const [key, lane = "guest"] = row.split(":");
-			return { key, lane: lane as GateLane };
-		});
-	console.log(
-		JSON.stringify(
-			compareBaselineFile(current, baseline, gateRows, {
-				threshold: 2,
-				tinyBaselineFloorMs: 0.3,
-				tinyCurrentFloorMs: 1,
-			}),
-			null,
-			2,
-		),
-	);
-}
diff --git a/packages/benchmarks/src/families/control.ts b/packages/benchmarks/src/families/control.ts
deleted file mode 100644
index e3126bbdc..000000000
--- a/packages/benchmarks/src/families/control.ts
+++ /dev/null
@@ -1,30 +0,0 @@
-import type { BenchmarkOp } from "../lib/layers.js";
-
-export const controlFamily: BenchmarkOp[] = [
-	{
-		family: "control",
-		name: "cpu_loop",
-		nativeOp: "cpu_loop",
-		fileLine: "crates/execution/src/javascript.rs:1741",
-		reproducer: "bounded integer loop inside one node process",
-		expectedRatio: "control",
-		program: `async () => {
-  let acc = 0;
-  for (let i = 0; i < 2000000; i++) acc = (acc + (i ^ ((acc << 7) >>> 0))) >>> 0;
-  if (acc < 0) throw new Error("impossible");
-}`,
-	},
-	{
-		family: "control",
-		name: "alloc_free",
-		nativeOp: "alloc_free",
-		fileLine: "crates/execution/src/javascript.rs:1741",
-		reproducer: "allocate and drop one 4MiB Uint8Array inside one node process",
-		expectedRatio: "control",
-		program: `async () => {
-  const data = new Uint8Array(4 * 1024 * 1024);
-  for (let i = 0; i < data.length; i++) data[i] = i % 251;
-  if (data[10] !== 10) throw new Error("bad alloc");
-}`,
-	},
-];
diff --git a/packages/benchmarks/src/families/dns.ts b/packages/benchmarks/src/families/dns.ts
deleted file mode 100644
index 81846513a..000000000
--- a/packages/benchmarks/src/families/dns.ts
+++ /dev/null
@@ -1,44 +0,0 @@
-import type { BenchmarkOp } from "../lib/layers.js";
-
-export const dnsFamily: BenchmarkOp[] = [
-	{
-		family: "dns",
-		name: "resolve_uncached_localhost",
-		nativeOp: "dns_lookup",
-		wasmUnsupportedReason: "DNS lookup is not supported in the native-baseline wasm lane",
-		fileLine: "crates/kernel/src/dns.rs:218",
-		reproducer: "await dns.lookup('localhost') inside VM",
-		program: `async () => {
-  const dns = await import("node:dns/promises");
-  const result = await dns.lookup("localhost");
-  if (!result.address) throw new Error("no address");
-}`,
-	},
-	{
-		family: "dns",
-		name: "resolve_cached_localhost",
-		nativeOp: "dns_lookup_x2",
-		wasmUnsupportedReason: "DNS lookup is not supported in the native-baseline wasm lane",
-		fileLine: "crates/kernel/src/dns.rs:218",
-		reproducer: "two dns.lookup('localhost') calls in one VM process",
-		program: `async () => {
-  const dns = await import("node:dns/promises");
-  const first = await dns.lookup("localhost");
-  const second = await dns.lookup("localhost");
-  if (!first.address || !second.address) throw new Error("no address");
-}`,
-	},
-	{
-		family: "dns",
-		name: "resolve_concurrent_4",
-		nativeOp: "dns_concurrent",
-		wasmUnsupportedReason: "DNS lookup is not supported in the native-baseline wasm lane",
-		fileLine: "crates/kernel/src/dns.rs:218",
-		reproducer: "four concurrent dns.lookup('localhost') calls inside VM",
-		program: `async () => {
-  const dns = await import("node:dns/promises");
-  const results = await Promise.all(Array.from({ length: 4 }, () => dns.lookup("localhost")));
-  if (results.some((result) => !result.address)) throw new Error("no address");
-}`,
-	},
-];
diff --git a/packages/benchmarks/src/families/ecosystem.ts b/packages/benchmarks/src/families/ecosystem.ts
deleted file mode 100644
index 328573a25..000000000
--- a/packages/benchmarks/src/families/ecosystem.ts
+++ /dev/null
@@ -1,758 +0,0 @@
-import { execFileSync } from "node:child_process";
-import {
-	existsSync,
-	mkdtempSync,
-	mkdirSync,
-	rmSync,
-	writeFileSync,
-} from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { resolveNodeRuntimeCommandsDir } from "@secure-exec/core";
-import type { CommandBenchmarkOp } from "../lib/layers.js";
-import { nowMs } from "../lib/perf-utils.js";
-import type { BenchVm } from "../lib/vm.js";
-
-const ECOSYSTEM_SAMPLE_CAP = {
-	maxIterations: 5,
-	maxWarmup: 1,
-};
-const HEAVY_ECOSYSTEM_SAMPLE_CAP = {
-	maxIterations: 1,
-	maxWarmup: 0,
-};
-const SMALL_TEXT_BYTES = 4 * 1024;
-const BIG_TEXT_BYTES = 1024 * 1024;
-const BIG_GZIP_BYTES = 64 * 1024;
-const SMALL_TREE_FILES = 32;
-const BIG_TREE_FILES = 1000;
-const BIG_ARCHIVE_FILES = 128;
-const VM_ROOT = "/tmp/ecosystem";
-const REQUIRED_WASM_COMMANDS = [
-	"sh",
-	"cat",
-	"ls",
-	"echo",
-	"grep",
-	"sed",
-	"find",
-	"tar",
-	"gzip",
-	"jq",
-	"git",
-	"diff",
-	"wc",
-	"cp",
-	"rm",
-	"mkdir",
-] as const;
-
-export function ecosystemWasmCommandDirs(): string[] {
-	const commandsDir = resolveNodeRuntimeCommandsDir();
-	assertWasmCommandsPresent(commandsDir);
-	return [commandsDir];
-}
-
-export const ecosystemFamily: CommandBenchmarkOp[] = [
-	ls100Op(),
-	shPipelineOp(),
-	cdTmpPwdOp(),
-	echoHelloOp(),
-	catOp("cat_small", SMALL_TEXT_BYTES),
-	catOp("cat_big", BIG_TEXT_BYTES),
-	grepTreeOp("grep_small", SMALL_TREE_FILES),
-	grepTreeOp("grep_big", BIG_TREE_FILES),
-	sedSubstitutionOp(),
-	findTreeOp(),
-	tarTreeOp("tar_small", SMALL_TREE_FILES),
-	tarTreeOp("tar_big", BIG_ARCHIVE_FILES),
-	gzipRoundTripOp("gzip_small", SMALL_TEXT_BYTES),
-	gzipRoundTripOp("gzip_big", BIG_GZIP_BYTES),
-	jqExtractOp(),
-	gitInitCommitOp(),
-];
-
-function ls100Op(): CommandBenchmarkOp {
-	return {
-		family: "ecosystem",
-		name: "ls_100",
-		...ECOSYSTEM_SAMPLE_CAP,
-		fileLine: "packages/benchmarks/src/families/ecosystem.ts:46",
-		reproducer: "ls -1 over a pre-created 100-file directory",
-		runHostCmd: (iters, warmup) => {
-			const dir = createHostDirWithFiles("secure-exec-ecosystem-ls-", 100);
-			try {
-				return sampleSyncCommand(iters, warmup, () => {
-					const stdout = execFileSync("ls", ["-1", dir], { encoding: "utf8" });
-					assertLineCount(stdout, 100, "host ls_100");
-				});
-			} finally {
-				rmSync(dir, { recursive: true, force: true });
-			}
-		},
-		runVmCmd: async (vm, iters, warmup) => {
-			const dir = `${VM_ROOT}/ls-100`;
-			await setupVmDirWithFiles(vm, dir, 100);
-			return sampleAsyncCommand(iters, warmup, async () => {
-				const result = await vm.execWasmCommand("ls", ["-1", dir]);
-				assertExit(result, "vm ls_100");
-				assertLineCount(result.stdout, 100, "vm ls_100");
-			});
-		},
-	};
-}
-
-function shPipelineOp(): CommandBenchmarkOp {
-	return {
-		family: "ecosystem",
-		name: "sh_pipeline",
-		...ECOSYSTEM_SAMPLE_CAP,
-		fileLine: "packages/benchmarks/src/families/ecosystem.ts:78",
-		reproducer: 'sh -c "ls -1 | grep -c ." over a 100-file directory',
-		runHostCmd: (iters, warmup) => {
-			const dir = createHostDirWithFiles(
-				"secure-exec-ecosystem-pipeline-",
-				100,
-			);
-			try {
-				return sampleSyncCommand(iters, warmup, () => {
-					const stdout = execFileSync("sh", ["-c", "ls -1 | grep -c ."], {
-						cwd: dir,
-						encoding: "utf8",
-					});
-					assertCount(stdout, 100, "host sh_pipeline");
-				});
-			} finally {
-				rmSync(dir, { recursive: true, force: true });
-			}
-		},
-		runVmCmd: async (vm, iters, warmup) => {
-			const dir = `${VM_ROOT}/sh-pipeline`;
-			await setupVmDirWithFiles(vm, dir, 100);
-			return sampleAsyncCommand(iters, warmup, async () => {
-				const result = await vm.execWasmCommand(
-					"sh",
-					["-c", "ls -1 | grep -c ."],
-					{ cwd: dir },
-				);
-				assertExit(result, "vm sh_pipeline");
-				assertCount(result.stdout, 100, "vm sh_pipeline");
-			});
-		},
-	};
-}
-
-function cdTmpPwdOp(): CommandBenchmarkOp {
-	return {
-		family: "ecosystem",
-		name: "cd_tmp_pwd",
-		...ECOSYSTEM_SAMPLE_CAP,
-		fileLine: "packages/benchmarks/src/families/ecosystem.ts:114",
-		reproducer: 'sh -c "cd /tmp && pwd"',
-		runHostCmd: (iters, warmup) =>
-			sampleSyncCommand(iters, warmup, () => {
-				const stdout = execFileSync("sh", ["-c", "cd /tmp && pwd"], {
-					encoding: "utf8",
-				});
-				assertExact(stdout.trim(), "/tmp", "host cd_tmp_pwd");
-			}),
-		runVmCmd: async (vm, iters, warmup) =>
-			sampleAsyncCommand(iters, warmup, async () => {
-				const result = await vm.execWasmCommand("sh", ["-c", "cd /tmp && pwd"]);
-				assertExit(result, "vm cd_tmp_pwd");
-				assertExact(result.stdout.trim(), "/tmp", "vm cd_tmp_pwd");
-			}),
-	};
-}
-
-function echoHelloOp(): CommandBenchmarkOp {
-	return {
-		family: "ecosystem",
-		name: "echo_hello",
-		...ECOSYSTEM_SAMPLE_CAP,
-		fileLine: "packages/benchmarks/src/families/ecosystem.ts:140",
-		reproducer: "echo secure-exec-ecosystem",
-		runHostCmd: (iters, warmup) =>
-			sampleSyncCommand(iters, warmup, () => {
-				const stdout = execFileSync("echo", ["secure-exec-ecosystem"], {
-					encoding: "utf8",
-				});
-				assertExact(stdout, "secure-exec-ecosystem\n", "host echo_hello");
-			}),
-		runVmCmd: async (vm, iters, warmup) =>
-			sampleAsyncCommand(iters, warmup, async () => {
-				const result = await vm.execWasmCommand("echo", [
-					"secure-exec-ecosystem",
-				]);
-				assertExit(result, "vm echo_hello");
-				assertExact(result.stdout, "secure-exec-ecosystem\n", "vm echo_hello");
-			}),
-	};
-}
-
-function catOp(name: string, sizeBytes: number): CommandBenchmarkOp {
-	const expected = textPayload(sizeBytes);
-	return {
-		family: "ecosystem",
-		name,
-		...ECOSYSTEM_SAMPLE_CAP,
-		fileLine: "packages/benchmarks/src/families/ecosystem.ts:165",
-		reproducer: `cat a pre-created ${sizeBytes} byte text fixture and verify exact stdout`,
-		runHostCmd: (iters, warmup) => {
-			const dir = mkdtempSync(join(tmpdir(), `secure-exec-ecosystem-${name}-`));
-			const file = join(dir, "fixture.txt");
-			writeFileSync(file, expected);
-			try {
-				return sampleSyncCommand(iters, warmup, () => {
-					const stdout = execFileSync("cat", [file], {
-						encoding: "utf8",
-						maxBuffer: sizeBytes + 1024,
-					});
-					assertExact(stdout, expected, `host ${name}`);
-				});
-			} finally {
-				rmSync(dir, { recursive: true, force: true });
-			}
-		},
-		runVmCmd: async (vm, iters, warmup) => {
-			const file = `${VM_ROOT}/${name}.txt`;
-			await ensureVmRoot(vm);
-			await vm.writeFile(file, expected);
-			return sampleAsyncCommand(iters, warmup, async () => {
-				const result = await vm.execWasmCommand("cat", [file]);
-				assertExit(result, `vm ${name}`);
-				assertExact(result.stdout, expected, `vm ${name}`);
-			});
-		},
-	};
-}
-
-function grepTreeOp(name: string, fileCount: number): CommandBenchmarkOp {
-	return {
-		family: "ecosystem",
-		name,
-		...(fileCount >= BIG_TREE_FILES
-			? HEAVY_ECOSYSTEM_SAMPLE_CAP
-			: ECOSYSTEM_SAMPLE_CAP),
-		fileLine: "packages/benchmarks/src/families/ecosystem.ts:204",
-		reproducer: `grep -l needle over ${fileCount} files and verify match count`,
-		runHostCmd: (iters, warmup) => {
-			const dir = createHostDirWithFiles(
-				`secure-exec-ecosystem-${name}-`,
-				fileCount,
-				(i) => grepFileContent(i),
-			);
-			const files = numberedTextFiles(dir, fileCount);
-			try {
-				return sampleSyncCommand(iters, warmup, () => {
-					const stdout = execFileSync("grep", ["-l", "needle", ...files], {
-						encoding: "utf8",
-						maxBuffer: fileCount * 256,
-					});
-					assertLineCount(stdout, fileCount, `host ${name}`);
-				});
-			} finally {
-				rmSync(dir, { recursive: true, force: true });
-			}
-		},
-		runVmCmd: async (vm, iters, warmup) => {
-			const dir = `${VM_ROOT}/${name}`;
-			await setupVmDirWithFiles(vm, dir, fileCount, (i) => grepFileContent(i));
-			const files = numberedTextFiles(dir, fileCount);
-			return sampleAsyncCommand(iters, warmup, async () => {
-				const result = await vm.execWasmCommand("grep", [
-					"-l",
-					"needle",
-					...files,
-				]);
-				assertExit(result, `vm ${name}`);
-				assertLineCount(result.stdout, fileCount, `vm ${name}`);
-			});
-		},
-	};
-}
-
-function sedSubstitutionOp(): CommandBenchmarkOp {
-	const input = "alpha beta alpha\nplain alpha\n";
-	const expected = "omega beta omega\nplain omega\n";
-	return {
-		family: "ecosystem",
-		name: "sed_substitution",
-		...ECOSYSTEM_SAMPLE_CAP,
-		fileLine: "packages/benchmarks/src/families/ecosystem.ts:248",
-		reproducer: "sed replaces every alpha token in a known fixture",
-		runHostCmd: (iters, warmup) => {
-			const dir = mkdtempSync(join(tmpdir(), "secure-exec-ecosystem-sed-"));
-			const file = join(dir, "fixture.txt");
-			writeFileSync(file, input);
-			try {
-				return sampleSyncCommand(iters, warmup, () => {
-					const stdout = execFileSync("sed", ["s/alpha/omega/g", file], {
-						encoding: "utf8",
-					});
-					assertExact(stdout, expected, "host sed_substitution");
-				});
-			} finally {
-				rmSync(dir, { recursive: true, force: true });
-			}
-		},
-		runVmCmd: async (vm, iters, warmup) => {
-			const file = `${VM_ROOT}/sed-fixture.txt`;
-			await ensureVmRoot(vm);
-			await vm.writeFile(file, input);
-			return sampleAsyncCommand(iters, warmup, async () => {
-				const result = await vm.execWasmCommand("sed", [
-					"s/alpha/omega/g",
-					file,
-				]);
-				assertExit(result, "vm sed_substitution");
-				assertExact(result.stdout, expected, "vm sed_substitution");
-			});
-		},
-	};
-}
-
-function findTreeOp(): CommandBenchmarkOp {
-	return {
-		family: "ecosystem",
-		name: "find_1000",
-		...HEAVY_ECOSYSTEM_SAMPLE_CAP,
-		fileLine: "packages/benchmarks/src/families/ecosystem.ts:286",
-		reproducer: "find a 1000-file tree and verify the file count",
-		runHostCmd: (iters, warmup) => {
-			const dir = createHostDirWithFiles(
-				"secure-exec-ecosystem-find-",
-				BIG_TREE_FILES,
-			);
-			try {
-				return sampleSyncCommand(iters, warmup, () => {
-					const stdout = execFileSync(
-						"find",
-						[dir, "-type", "f", "-name", "*.txt"],
-						{
-							encoding: "utf8",
-							maxBuffer: BIG_TREE_FILES * 256,
-						},
-					);
-					assertLineCount(stdout, BIG_TREE_FILES, "host find_1000");
-				});
-			} finally {
-				rmSync(dir, { recursive: true, force: true });
-			}
-		},
-		runVmCmd: async (vm, iters, warmup) => {
-			const dir = `${VM_ROOT}/find-1000`;
-			await setupVmDirWithFiles(vm, dir, BIG_TREE_FILES);
-			return sampleAsyncCommand(iters, warmup, async () => {
-				const result = await vm.execWasmCommand("find", [
-					dir,
-					"-type",
-					"f",
-					"-name",
-					"*.txt",
-				]);
-				assertExit(result, "vm find_1000");
-				assertLineCount(result.stdout, BIG_TREE_FILES, "vm find_1000");
-			});
-		},
-	};
-}
-
-function tarTreeOp(name: string, fileCount: number): CommandBenchmarkOp {
-	return {
-		family: "ecosystem",
-		name,
-		...(fileCount > SMALL_TREE_FILES
-			? HEAVY_ECOSYSTEM_SAMPLE_CAP
-			: ECOSYSTEM_SAMPLE_CAP),
-		fileLine: "packages/benchmarks/src/families/ecosystem.ts:327",
-		reproducer: `tar create/extract/list a ${fileCount}-file tree and diff a sentinel file`,
-		runHostCmd: (iters, warmup) => {
-			const src = createHostDirWithFiles(
-				`secure-exec-ecosystem-${name}-`,
-				fileCount,
-			);
-			writeFileSync(join(src, "sentinel.txt"), sentinelContent(fileCount));
-			const work = mkdtempSync(
-				join(tmpdir(), `secure-exec-ecosystem-${name}-work-`),
-			);
-			try {
-				return sampleSyncCommand(iters, warmup, (i) => {
-					const archive = join(work, `archive-${i}.tar`);
-					const out = join(work, `out-${i}`);
-					const stdout = execFileSync(
-						"sh",
-						["-c", tarRoundTripScript(src, archive, out)],
-						{
-							encoding: "utf8",
-							maxBuffer: (fileCount + 8) * 128,
-						},
-					);
-					assertTarListing(stdout, fileCount + 1, `host ${name}`);
-				});
-			} finally {
-				rmSync(src, { recursive: true, force: true });
-				rmSync(work, { recursive: true, force: true });
-			}
-		},
-		runVmCmd: async (vm, iters, warmup) => {
-			const src = `${VM_ROOT}/${name}-src`;
-			await setupVmDirWithFiles(vm, src, fileCount);
-			await vm.writeFile(`${src}/sentinel.txt`, sentinelContent(fileCount));
-			return sampleAsyncCommand(iters, warmup, async (i) => {
-				const archive = `${VM_ROOT}/${name}-${i}.tar`;
-				const out = `${VM_ROOT}/${name}-out-${i}`;
-				const result = await vm.execWasmCommand("sh", [
-					"-c",
-					tarRoundTripScript(src, archive, out),
-				]);
-				assertExit(result, `vm ${name}`);
-				assertTarListing(result.stdout, fileCount + 1, `vm ${name}`);
-			});
-		},
-	};
-}
-
-function gzipRoundTripOp(name: string, sizeBytes: number): CommandBenchmarkOp {
-	const content = textPayload(sizeBytes);
-	return {
-		family: "ecosystem",
-		name,
-		...ECOSYSTEM_SAMPLE_CAP,
-		fileLine: "packages/benchmarks/src/families/ecosystem.ts:381",
-		reproducer: `gzip then gunzip a ${sizeBytes} byte fixture and diff the result`,
-		runHostCmd: (iters, warmup) => {
-			const dir = mkdtempSync(join(tmpdir(), `secure-exec-ecosystem-${name}-`));
-			const src = join(dir, "fixture.txt");
-			writeFileSync(src, content);
-			try {
-				return sampleSyncCommand(iters, warmup, (i) => {
-					const stdout = execFileSync(
-						"sh",
-						["-c", gzipRoundTripScript(src, join(dir, `work-${i}.txt`))],
-						{ encoding: "utf8" },
-					);
-					assertCount(stdout, sizeBytes, `host ${name}`);
-				});
-			} finally {
-				rmSync(dir, { recursive: true, force: true });
-			}
-		},
-		runVmCmd: async (vm, iters, warmup) => {
-			const src = `${VM_ROOT}/${name}.txt`;
-			await ensureVmRoot(vm);
-			await vm.writeFile(src, content);
-			return sampleAsyncCommand(iters, warmup, async (i) => {
-				const result = await vm.execWasmCommand("sh", [
-					"-c",
-					gzipRoundTripScript(src, `${VM_ROOT}/${name}-work-${i}.txt`),
-				]);
-				assertExit(result, `vm ${name}`);
-				assertCount(result.stdout, sizeBytes, `vm ${name}`);
-			});
-		},
-	};
-}
-
-function jqExtractOp(): CommandBenchmarkOp {
-	const input =
-		JSON.stringify({
-			items: [
-				{ name: "control", value: 7 },
-				{ name: "target", value: 42 },
-			],
-		}) + "\n";
-	return {
-		family: "ecosystem",
-		name: "jq_extract",
-		...ECOSYSTEM_SAMPLE_CAP,
-		fileLine: "packages/benchmarks/src/families/ecosystem.ts:428",
-		reproducer: "jq extracts a known field from a JSON fixture",
-		runHostCmd: (iters, warmup) => {
-			const dir = mkdtempSync(join(tmpdir(), "secure-exec-ecosystem-jq-"));
-			const file = join(dir, "fixture.json");
-			writeFileSync(file, input);
-			try {
-				return sampleSyncCommand(iters, warmup, () => {
-					const stdout = execFileSync("sh", ["-c", jqExtractScript(file)], {
-						encoding: "utf8",
-					});
-					assertExact(stdout, "42\n", "host jq_extract");
-				});
-			} finally {
-				rmSync(dir, { recursive: true, force: true });
-			}
-		},
-		runVmCmd: async (vm, iters, warmup) => {
-			const file = `${VM_ROOT}/jq-fixture.json`;
-			await ensureVmRoot(vm);
-			await vm.writeFile(file, input);
-			return sampleAsyncCommand(iters, warmup, async () => {
-				const result = await vm.execWasmCommand("sh", [
-					"-c",
-					jqExtractScript(file),
-				]);
-				assertExit(result, "vm jq_extract");
-				assertExact(result.stdout, "42\n", "vm jq_extract");
-			});
-		},
-	};
-}
-
-function gitInitCommitOp(): CommandBenchmarkOp {
-	return {
-		family: "ecosystem",
-		name: "git_init_commit",
-		...ECOSYSTEM_SAMPLE_CAP,
-		fileLine: "packages/benchmarks/src/families/ecosystem.ts:469",
-		reproducer: "git init, add ten files, commit, and rev-parse HEAD",
-		runHostCmd: (iters, warmup) =>
-			sampleSyncCommand(iters, warmup, () => {
-				const dir = createHostDirWithFiles("secure-exec-ecosystem-git-", 10);
-				try {
-					const stdout = execFileSync("sh", ["-c", gitScript()], {
-						cwd: dir,
-						encoding: "utf8",
-						env: gitEnv(),
-					});
-					assertSha(stdout, "host git_init_commit");
-				} finally {
-					rmSync(dir, { recursive: true, force: true });
-				}
-			}),
-		runVmCmd: async (vm, iters, warmup) =>
-			sampleAsyncCommand(iters, warmup, async (i) => {
-				const dir = `${VM_ROOT}/git-init-commit-${i}`;
-				await setupVmDirWithFiles(vm, dir, 10);
-				const result = await vm.execWasmCommand("sh", ["-c", gitScript()], {
-					cwd: dir,
-					env: gitEnv(),
-				});
-				assertExit(result, "vm git_init_commit");
-				assertSha(result.stdout, "vm git_init_commit");
-			}),
-	};
-}
-
-function assertWasmCommandsPresent(commandsDir: string): void {
-	const missing = REQUIRED_WASM_COMMANDS.filter(
-		(command) => !existsSync(join(commandsDir, command)),
-	);
-	if (missing.length > 0) {
-		throw new Error(
-			`ecosystem WASM command(s) missing from ${commandsDir}: ${missing.join(", ")}`,
-		);
-	}
-}
-
-function gitEnv(): Record<string, string> {
-	const env: Record<string, string> = {};
-	for (const [key, value] of Object.entries(process.env)) {
-		if (value !== undefined) env[key] = value;
-	}
-	return {
-		...env,
-		GIT_AUTHOR_NAME: "Bench",
-		GIT_AUTHOR_EMAIL: "bench@example.com",
-		GIT_COMMITTER_NAME: "Bench",
-		GIT_COMMITTER_EMAIL: "bench@example.com",
-	};
-}
-
-function gitScript(): string {
-	return [
-		"git init -q",
-		"git add .",
-		"git commit -q -m init",
-		"git rev-parse HEAD",
-	].join(" && ");
-}
-
-function createHostDirWithFiles(
-	prefix: string,
-	fileCount: number,
-	content: (index: number) => string = () => "x\n",
-): string {
-	const dir = mkdtempSync(join(tmpdir(), prefix));
-	mkdirSync(dir, { recursive: true });
-	for (let i = 0; i < fileCount; i++) {
-		writeFileSync(
-			join(dir, `file-${String(i).padStart(4, "0")}.txt`),
-			content(i),
-		);
-	}
-	return dir;
-}
-
-function numberedTextFiles(dir: string, fileCount: number): string[] {
-	const files: string[] = [];
-	for (let i = 0; i < fileCount; i++) {
-		files.push(`${dir}/file-${String(i).padStart(4, "0")}.txt`);
-	}
-	return files;
-}
-
-async function setupVmDirWithFiles(
-	vm: Pick<BenchVm, "exec" | "writeFile">,
-	dir: string,
-	fileCount: number,
-	content: (index: number) => string = () => "x\n",
-): Promise<void> {
-	await vm.exec(`rm -rf ${dir} && mkdir -p ${dir}`);
-	for (let i = 0; i < fileCount; i++) {
-		await vm.writeFile(
-			`${dir}/file-${String(i).padStart(4, "0")}.txt`,
-			content(i),
-		);
-	}
-}
-
-async function ensureVmRoot(vm: Pick<BenchVm, "exec">): Promise<void> {
-	await vm.exec(`mkdir -p ${VM_ROOT}`);
-}
-
-function textPayload(sizeBytes: number): string {
-	const chunk = "secure-exec ecosystem payload line 0123456789abcdef\n";
-	let output = "";
-	while (output.length < sizeBytes) output += chunk;
-	return output.slice(0, sizeBytes);
-}
-
-function grepFileContent(index: number): string {
-	return (
-		[
-			`plain prefix ${index}`,
-			`needle line ${index}`,
-			`plain suffix ${index}`,
-		].join("\n") + "\n"
-	);
-}
-
-function sentinelContent(fileCount: number): string {
-	return `secure-exec tar sentinel ${fileCount}\n`;
-}
-
-function tarRoundTripScript(src: string, archive: string, out: string): string {
-	return [
-		`rm -rf ${shellQuote(out)} ${shellQuote(archive)}`,
-		`mkdir -p ${shellQuote(out)}`,
-		`tar -cf ${shellQuote(archive)} -C ${shellQuote(src)} .`,
-		`tar -xf ${shellQuote(archive)} -C ${shellQuote(out)}`,
-		`diff ${shellQuote(join(src, "sentinel.txt"))} ${shellQuote(join(out, "sentinel.txt"))} >/dev/null`,
-		`tar -tf ${shellQuote(archive)}`,
-	].join(" && ");
-}
-
-function gzipRoundTripScript(src: string, work: string): string {
-	return [
-		`rm -f ${shellQuote(work)} ${shellQuote(`${work}.gz`)}`,
-		`cp ${shellQuote(src)} ${shellQuote(work)}`,
-		`gzip -f ${shellQuote(work)}`,
-		`rm -f ${shellQuote(work)}`,
-		`gzip -df ${shellQuote(`${work}.gz`)}`,
-		`diff ${shellQuote(src)} ${shellQuote(work)} >/dev/null`,
-		`wc -c < ${shellQuote(work)}`,
-	].join(" && ");
-}
-
-function jqExtractScript(file: string): string {
-	return `jq -r ${shellQuote('.items[] | select(.name == "target") | .value')} < ${shellQuote(file)}`;
-}
-
-function shellQuote(value: string): string {
-	return `'${value.replace(/'/g, "'\\''")}'`;
-}
-
-function sampleSyncCommand(
-	iters: number,
-	warmup: number,
-	fn: (index: number) => void,
-): number[] {
-	const samples: number[] = [];
-	for (let i = 0; i < warmup + iters; i++) {
-		const start = process.hrtime.bigint();
-		fn(i);
-		const ms = nowMs(start);
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-async function sampleAsyncCommand(
-	iters: number,
-	warmup: number,
-	fn: (index: number) => Promise<void>,
-): Promise<number[]> {
-	const samples: number[] = [];
-	for (let i = 0; i < warmup + iters; i++) {
-		const start = process.hrtime.bigint();
-		await fn(i);
-		const ms = nowMs(start);
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-function assertExit(
-	result: { exitCode: number; stderr: string },
-	context: string,
-): void {
-	if (result.exitCode !== 0) {
-		throw new Error(`${context} exited ${result.exitCode}\n${result.stderr}`);
-	}
-}
-
-function assertLineCount(
-	stdout: string,
-	expected: number,
-	context: string,
-): void {
-	const actual = stdout.trim().split("\n").filter(Boolean).length;
-	if (actual !== expected) {
-		throw new Error(
-			`${context} returned ${actual} line(s), expected ${expected}`,
-		);
-	}
-}
-
-function assertTarListing(
-	stdout: string,
-	expectedFiles: number,
-	context: string,
-): void {
-	const files = stdout
-		.trim()
-		.split("\n")
-		.filter(
-			(line) => line && line !== "." && line !== "./" && !line.endsWith("/"),
-		);
-	const hasSentinel = files.some(
-		(line) => line === "./sentinel.txt" || line === "sentinel.txt",
-	);
-	if (!hasSentinel || files.length !== expectedFiles) {
-		throw new Error(
-			`${context} tar listing had ${files.length} file(s), sentinel=${hasSentinel}, expected ${expectedFiles}`,
-		);
-	}
-}
-
-function assertCount(stdout: string, expected: number, context: string): void {
-	const actual = Number(stdout.trim());
-	if (actual !== expected) {
-		throw new Error(`${context} count ${actual}, expected ${expected}`);
-	}
-}
-
-function assertExact(actual: string, expected: string, context: string): void {
-	if (actual !== expected) {
-		throw new Error(
-			`${context} output ${JSON.stringify(actual)}, expected ${JSON.stringify(expected)}`,
-		);
-	}
-}
-
-function assertSha(stdout: string, context: string): void {
-	if (!/^[0-9a-f]{40}$/i.test(stdout.trim())) {
-		throw new Error(`${context} did not emit a commit sha: ${stdout}`);
-	}
-}
diff --git a/packages/benchmarks/src/families/fs.ts b/packages/benchmarks/src/families/fs.ts
deleted file mode 100644
index f08568507..000000000
--- a/packages/benchmarks/src/families/fs.ts
+++ /dev/null
@@ -1,185 +0,0 @@
-import type { BenchmarkOp } from "../lib/layers.js";
-
-function fsWriteOp(name: string, sizeBytes: number): BenchmarkOp {
-	return {
-		family: "fs",
-		name,
-		nativeOp: "fs_write",
-		nativeArgs: ["--size-bytes", String(sizeBytes)],
-		fileLine: "crates/kernel/src/kernel.rs:1930",
-		reproducer: `node fs.writeFileSync('/tmp/fuzz-perf-write.txt', ${sizeBytes} byte payload)`,
-	program: `async (i) => {
-  const fs = await import("node:fs");
-  fs.writeFileSync("/tmp/fuzz-perf-write.txt", Buffer.alloc(${sizeBytes}, i & 255));
-}`,
-	};
-}
-
-function fsReadOp(name: string, sizeBytes: number): BenchmarkOp {
-	return {
-		family: "fs",
-		name,
-		nativeOp: "fs_read",
-		nativeArgs: ["--size-bytes", String(sizeBytes)],
-		fileLine: "crates/kernel/src/mount_table.rs:814",
-		reproducer: `node fs.readFileSync('/tmp/fuzz-perf-read-${sizeBytes}.bin')`,
-		program: `async () => {
-  const fs = await import("node:fs");
-  const path = "/tmp/fuzz-perf-read-${sizeBytes}.bin";
-  if (!fs.existsSync(path)) fs.writeFileSync(path, Buffer.alloc(${sizeBytes}, 7));
-  const data = fs.readFileSync(path);
-  if (data.length !== ${sizeBytes}) throw new Error("bad read: " + data.length);
-}`,
-	};
-}
-
-function readdirOp(name: string, entryCount: number): BenchmarkOp {
-	return {
-		family: "fs",
-		name,
-		nativeOp: "fs_readdir",
-		nativeArgs: ["--entry-count", String(entryCount)],
-		fileLine: "crates/kernel/src/mount_table.rs:814",
-		reproducer: `readdirSync over a ${entryCount}-entry VM directory`,
-		setup: `async () => {
-  const fs = await import("node:fs");
-  const dir = "/tmp/fuzz-perf-readdir-${entryCount}";
-  if (!fs.existsSync(dir)) fs.mkdirSync(dir);
-  for (let i = 0; i < ${entryCount}; i++) {
-    const path = dir + "/" + i + ".txt";
-    if (!fs.existsSync(path)) fs.writeFileSync(path, "hi");
-  }
-}`,
-		program: `async () => {
-  const fs = await import("node:fs");
-  const dir = "/tmp/fuzz-perf-readdir-${entryCount}";
-  const entries = fs.readdirSync(dir);
-  if (entries.length < ${entryCount}) throw new Error("short readdir: " + entries.length);
-}`,
-	};
-}
-
-function streamCopyOp(name: string, sizeBytes: number): BenchmarkOp {
-	return {
-		family: "fs",
-		name,
-		nativeOp: "stream_copy",
-		nativeArgs: ["--size-bytes", String(sizeBytes)],
-		fileLine: "crates/kernel/src/mount_table.rs:814",
-		reproducer: `stream pipeline copies one ${sizeBytes} byte file inside VM`,
-		setup: `async () => {
-  const fs = await import("node:fs");
-  const src = "/tmp/fuzz-perf-stream-copy-src-${sizeBytes}.bin";
-  if (!fs.existsSync(src)) fs.writeFileSync(src, Buffer.alloc(${sizeBytes}, 7));
-}`,
-		program: `async (i) => {
-  const fs = await import("node:fs");
-  const { pipeline } = await import("node:stream/promises");
-  const src = "/tmp/fuzz-perf-stream-copy-src-${sizeBytes}.bin";
-  const dst = "/tmp/fuzz-perf-stream-copy-dst-${sizeBytes}-" + i + ".bin";
-  await pipeline(fs.createReadStream(src), fs.createWriteStream(dst));
-  const stat = fs.statSync(dst);
-  fs.unlinkSync(dst);
-  if (stat.size !== ${sizeBytes}) throw new Error("bad stream copy: " + stat.size);
-}`,
-	};
-}
-
-export const fsFamily: BenchmarkOp[] = [
-	{
-		family: "fs",
-		name: "open_close_churn",
-		nativeOp: "fs_open_close",
-		fileLine: "crates/kernel/src/kernel.rs:1950",
-		reproducer: "fs.openSync + fs.closeSync on a small fixture inside VM",
-		program: `async () => {
-  const fs = await import("node:fs");
-  const path = "/tmp/fuzz-perf-open-close.txt";
-  if (!fs.existsSync(path)) fs.writeFileSync(path, "hi");
-  const fd = fs.openSync(path, "r");
-  fs.closeSync(fd);
-}`,
-	},
-	{
-		family: "fs",
-		name: "stat_storm",
-		nativeOp: "fs_stat",
-		fileLine: "crates/kernel/src/kernel.rs:1950",
-		reproducer: "node fs.statSync('/tmp/fuzz-perf-stat.txt') inside VM",
-		program: `async (i) => {
-  const fs = await import("node:fs");
-  const path = "/tmp/fuzz-perf-stat.txt";
-  if (!fs.existsSync(path)) fs.writeFileSync(path, "hi");
-  fs.statSync(path);
-}`,
-	},
-	fsWriteOp("fs_write_small", 4 * 1024),
-	fsWriteOp("fs_write_big", 1024 * 1024),
-	fsReadOp("fs_read_small", 4 * 1024),
-	fsReadOp("fs_read_big", 1024 * 1024),
-	{
-		family: "fs",
-		name: "mkdir_rmdir",
-		nativeOp: "fs_mkdir_rmdir",
-		fileLine: "crates/kernel/src/mount_table.rs:814",
-		reproducer: "fs.mkdirSync + fs.rmdirSync on a fresh VM path",
-		program: `async (i) => {
-  const fs = await import("node:fs");
-  const path = "/tmp/fuzz-perf-dir-" + i + "-" + process.pid;
-  fs.mkdirSync(path);
-  fs.rmSync(path, { recursive: true });
-}`,
-	},
-	{
-		family: "fs",
-		name: "rename_file",
-		nativeOp: "fs_rename",
-		fileLine: "crates/kernel/src/mount_table.rs:814",
-		reproducer: "write one file, rename it, then unlink",
-		program: `async (i) => {
-  const fs = await import("node:fs");
-  const from = "/tmp/fuzz-perf-rename-" + i + ".a";
-  const to = "/tmp/fuzz-perf-rename-" + i + ".b";
-  fs.writeFileSync(from, "hi");
-  fs.renameSync(from, to);
-  fs.unlinkSync(to);
-}`,
-	},
-	readdirOp("readdir_small", 32),
-	readdirOp("readdir_big", 1000),
-	{
-		family: "fs",
-		name: "fsync_small",
-		nativeOp: "fs_fsync",
-		fileLine: "crates/kernel/src/kernel.rs:1930",
-		reproducer: "fs.writeSync then fs.fsyncSync on a small file",
-		program: `async () => {
-  const fs = await import("node:fs");
-  const fd = fs.openSync("/tmp/fuzz-perf-fsync.txt", "w");
-  fs.writeSync(fd, "hello");
-  fs.fsyncSync(fd);
-  fs.closeSync(fd);
-}`,
-	},
-	{
-		family: "fs",
-		name: "fs_promises_stat_x32",
-		nativeOp: "fs_stat_x32",
-		fileLine: "crates/kernel/src/kernel.rs:1950",
-		reproducer: "32 sequential fs.promises.stat calls on one VM file",
-		setup: `async () => {
-  const fs = await import("node:fs");
-  const path = "/tmp/fuzz-perf-promises-stat.txt";
-  if (!fs.existsSync(path)) fs.writeFileSync(path, "hi");
-}`,
-		program: `async () => {
-  const fs = await import("node:fs");
-  const path = "/tmp/fuzz-perf-promises-stat.txt";
-  for (let k = 0; k < 32; k++) {
-    await fs.promises.stat(path);
-  }
-}`,
-	},
-	streamCopyOp("stream_copy_small", 64 * 1024),
-	streamCopyOp("stream_copy_big", 1024 * 1024),
-];
diff --git a/packages/benchmarks/src/families/index.ts b/packages/benchmarks/src/families/index.ts
deleted file mode 100644
index 4acdabf06..000000000
--- a/packages/benchmarks/src/families/index.ts
+++ /dev/null
@@ -1,27 +0,0 @@
-import { controlFamily } from "./control.js";
-import { dnsFamily } from "./dns.js";
-import { ecosystemFamily } from "./ecosystem.js";
-import { fsFamily } from "./fs.js";
-import { modulesFamily } from "./modules.js";
-import { netFamily } from "./net.js";
-import { perfFindingsFamily } from "./perf-findings.js";
-import { permissionsFamily } from "./permissions.js";
-import { pipesFamily } from "./pipes.js";
-import { processFamily } from "./process.js";
-import { timersFamily } from "./timers.js";
-
-export const allFamilies = [
-	processFamily,
-	netFamily,
-	fsFamily,
-	modulesFamily,
-	dnsFamily,
-	ecosystemFamily,
-	permissionsFamily,
-	pipesFamily,
-	timersFamily,
-	controlFamily,
-	perfFindingsFamily,
-];
-
-export const allOps = allFamilies.flat();
diff --git a/packages/benchmarks/src/families/modules.ts b/packages/benchmarks/src/families/modules.ts
deleted file mode 100644
index 361ab00f6..000000000
--- a/packages/benchmarks/src/families/modules.ts
+++ /dev/null
@@ -1,234 +0,0 @@
-import { execFileSync } from "node:child_process";
-import { existsSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
-import type { BenchmarkOp } from "../lib/layers.js";
-import type { BenchVm } from "../lib/vm.js";
-
-const JS_RUNTIME_UNSUPPORTED = "module resolution is a JS-runtime surface";
-const MODULES_PER_ITERATION = 100;
-const MODULE_SAMPLE_CAP = {
-	maxIterations: 5,
-	maxWarmup: 1,
-};
-const REPO_ROOT = fileURLToPath(new URL("../../../..", import.meta.url));
-const ZOD_PACKAGE_HOST_DIR = join(
-	REPO_ROOT,
-	"node_modules/.pnpm/zod@4.3.6/node_modules/zod",
-);
-const ZOD_PACKAGE_GUEST_DIR = "/mnt/bench-zod";
-const ZOD_TRANSITIVE_MODULE_FILE_COUNT = 76;
-
-function require100SmallSetup(): string {
-	return `async () => {
-  const fs = await import("node:fs");
-  const path = await import("node:path");
-  const { createRequire } = await import("node:module");
-  const root = "/tmp/fuzz-perf-modules-require-" + process.pid;
-  fs.rmSync(root, { recursive: true, force: true });
-  fs.mkdirSync(root, { recursive: true });
-  const total = Number(process.env.BENCH_WARMUP || 5) + Number(process.env.BENCH_ITERATIONS || 20);
-  for (let i = 0; i < total; i++) {
-    const dir = path.join(root, String(i));
-    fs.mkdirSync(dir, { recursive: true });
-    for (let file = 0; file < ${MODULES_PER_ITERATION}; file++) {
-      const value = i * ${MODULES_PER_ITERATION} + file;
-      fs.writeFileSync(path.join(dir, "mod-" + file + ".cjs"), "module.exports = " + value + ";\\n");
-    }
-  }
-  globalThis.__modulesBenchRequireRoot = root;
-  globalThis.__modulesBenchRequire = createRequire(import.meta.url);
-  globalThis.__modulesBenchPathJoin = path.join;
-}`;
-}
-
-function require100SmallProgram(): string {
-	return `async (i) => {
-  const root = globalThis.__modulesBenchRequireRoot;
-  const require = globalThis.__modulesBenchRequire;
-  const pathJoin = globalThis.__modulesBenchPathJoin;
-  let sum = 0;
-  for (let file = 0; file < ${MODULES_PER_ITERATION}; file++) {
-    sum += require(pathJoin(root, String(i), "mod-" + file + ".cjs"));
-  }
-  const expected = ${MODULES_PER_ITERATION} * (i * ${MODULES_PER_ITERATION}) + (${MODULES_PER_ITERATION} * (${MODULES_PER_ITERATION} - 1)) / 2;
-  if (sum !== expected) throw new Error("bad require sum " + sum + " expected " + expected);
-}`;
-}
-
-function import100SmallEsmSetup(): string {
-	return `async () => {
-  const fs = await import("node:fs");
-  const path = await import("node:path");
-  const { pathToFileURL } = await import("node:url");
-  const root = "/tmp/fuzz-perf-modules-import-" + process.pid;
-  fs.rmSync(root, { recursive: true, force: true });
-  fs.mkdirSync(root, { recursive: true });
-  const total = Number(process.env.BENCH_WARMUP || 5) + Number(process.env.BENCH_ITERATIONS || 20);
-  for (let i = 0; i < total; i++) {
-    const dir = path.join(root, String(i));
-    fs.mkdirSync(dir, { recursive: true });
-    for (let file = 0; file < ${MODULES_PER_ITERATION}; file++) {
-      const value = i * ${MODULES_PER_ITERATION} + file;
-      fs.writeFileSync(path.join(dir, "mod-" + file + ".mjs"), "export const value = " + value + ";\\n");
-    }
-  }
-  globalThis.__modulesBenchImportRoot = root;
-  globalThis.__modulesBenchImportPathJoin = path.join;
-  globalThis.__modulesBenchPathToFileURL = pathToFileURL;
-}`;
-}
-
-function import100SmallEsmProgram(): string {
-	return `async (i) => {
-  const root = globalThis.__modulesBenchImportRoot;
-  const pathJoin = globalThis.__modulesBenchImportPathJoin;
-  const pathToFileURL = globalThis.__modulesBenchPathToFileURL;
-  let sum = 0;
-  for (let file = 0; file < ${MODULES_PER_ITERATION}; file++) {
-    const filePath = pathJoin(root, String(i), "mod-" + file + ".mjs");
-    const mod = await import(pathToFileURL(filePath).href);
-    sum += mod.value;
-  }
-  const expected = ${MODULES_PER_ITERATION} * (i * ${MODULES_PER_ITERATION}) + (${MODULES_PER_ITERATION} * (${MODULES_PER_ITERATION} - 1)) / 2;
-  if (sum !== expected) throw new Error("bad import sum " + sum + " expected " + expected);
-}`;
-}
-
-function npmPackageImportRunnerSource(): string {
-	return `
-const entryUrl = process.env.BENCH_NPM_ENTRY_URL;
-const iteration = process.env.BENCH_NPM_ITERATION;
-if (!entryUrl || !iteration) throw new Error("missing npm import bench env");
-const mod = await import(entryUrl + "?bench=" + iteration);
-if (!mod.z || typeof mod.z.object !== "function") {
-  throw new Error("zod export check failed");
-}
-`;
-}
-
-function runHostNpmPackageImport(iters: number, warmup: number): number[] {
-	const entryUrl = pathToFileURL(join(ZOD_PACKAGE_HOST_DIR, "index.js")).href;
-	const samples: number[] = [];
-	const dir = mkdtempSync(join(tmpdir(), "secure-exec-modules-npm-"));
-	const runner = join(dir, "import-zod.mjs");
-	try {
-		writeFileSync(runner, npmPackageImportRunnerSource());
-		for (let i = 0; i < warmup + iters; i++) {
-			const start = process.hrtime.bigint();
-			execFileSync("node", [runner], {
-				stdio: "pipe",
-				env: {
-					...process.env,
-					BENCH_NPM_ENTRY_URL: entryUrl,
-					BENCH_NPM_ITERATION: String(i),
-				},
-				maxBuffer: 128 * 1024 * 1024,
-			});
-			const ms = Number(process.hrtime.bigint() - start) / 1e6;
-			if (i >= warmup) samples.push(ms);
-		}
-	} finally {
-		rmSync(dir, { recursive: true, force: true });
-	}
-	return samples;
-}
-
-async function runGuestNpmPackageImport(
-	vm: BenchVm,
-	iters: number,
-	warmup: number,
-): Promise<number[]> {
-	const entryUrl = `file://${ZOD_PACKAGE_GUEST_DIR}/index.js`;
-	const runner = "/tmp/fuzz-perf-modules-import-zod.mjs";
-	await vm.writeFile(runner, npmPackageImportRunnerSource());
-	const samples: number[] = [];
-	for (let i = 0; i < warmup + iters; i++) {
-		const start = process.hrtime.bigint();
-		const result = await vm.spawnNodeCapture(runner, {
-			BENCH_NPM_ENTRY_URL: entryUrl,
-			BENCH_NPM_ITERATION: String(i),
-		});
-		const ms = Number(process.hrtime.bigint() - start) / 1e6;
-		if (result.exitCode !== 0) {
-			throw new Error(`guest zod import exited ${result.exitCode}\n${result.stderr}`);
-		}
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-function ensureZodPackage(): void {
-	if (!existsSync(join(ZOD_PACKAGE_HOST_DIR, "index.js"))) {
-		throw new Error(`zod benchmark package not found at ${ZOD_PACKAGE_HOST_DIR}`);
-	}
-}
-
-export const modulesFamily: BenchmarkOp[] = [
-	{
-		family: "modules",
-		name: "require_100_small",
-		...MODULE_SAMPLE_CAP,
-		nativeUnsupportedReason: JS_RUNTIME_UNSUPPORTED,
-		wasmUnsupportedReason: JS_RUNTIME_UNSUPPORTED,
-		fileLine: "crates/execution/src/node_import_cache.rs:4750",
-		reproducer: "stage 100 unique tiny CJS files per iteration, require them, and verify exported sum",
-		setup: require100SmallSetup(),
-		program: require100SmallProgram(),
-	},
-	{
-		family: "modules",
-		name: "import_100_small_esm",
-		...MODULE_SAMPLE_CAP,
-		nativeUnsupportedReason: JS_RUNTIME_UNSUPPORTED,
-		wasmUnsupportedReason: JS_RUNTIME_UNSUPPORTED,
-		fileLine: "crates/execution/src/node_import_cache.rs:4750",
-		reproducer: "stage 100 unique tiny ESM files per iteration, dynamic-import them, and verify exported sum",
-		setup: import100SmallEsmSetup(),
-		program: import100SmallEsmProgram(),
-	},
-	{
-		family: "modules",
-		name: "import_npm_package",
-		...MODULE_SAMPLE_CAP,
-		nativeUnsupportedReason: JS_RUNTIME_UNSUPPORTED,
-		wasmUnsupportedReason: JS_RUNTIME_UNSUPPORTED,
-		fileLine: "crates/execution/src/node_import_cache.rs:4750",
-		reproducer: `dynamic-import zod@4.3.6 from a read-only mounted package tree (${ZOD_TRANSITIVE_MODULE_FILE_COUNT} transitive ESM files) and verify z.object`,
-		runNode: runHostNpmPackageImport,
-		prepareVm: async () => {
-			ensureZodPackage();
-			return {
-				options: {
-					mounts: [
-						{
-							guestPath: ZOD_PACKAGE_GUEST_DIR,
-							hostPath: ZOD_PACKAGE_HOST_DIR,
-							readOnly: true,
-						},
-					],
-				},
-			};
-		},
-		runGuest: (vm, iters, warmup) => runGuestNpmPackageImport(vm, iters, warmup),
-	},
-	{
-		family: "modules",
-		name: "import_fresh_file",
-		...MODULE_SAMPLE_CAP,
-		nativeUnsupportedReason: JS_RUNTIME_UNSUPPORTED,
-		wasmUnsupportedReason: JS_RUNTIME_UNSUPPORTED,
-		fileLine: "crates/execution/src/javascript.rs:3939",
-		reproducer: "write a unique /tmp .mjs file, dynamic-import it, and verify the exported value",
-		program: `async (i) => {
-  const fs = await import("node:fs");
-  const value = "fresh-" + process.pid + "-" + i;
-  const path = "/tmp/fuzz-perf-import-" + process.pid + "-" + i + ".mjs";
-  fs.writeFileSync(path, "export const value = " + JSON.stringify(value) + ";\\n");
-  const mod = await import("file://" + path);
-  if (mod.value !== value) throw new Error("bad fresh import");
-  fs.unlinkSync(path);
-}`,
-	},
-];
diff --git a/packages/benchmarks/src/families/net.ts b/packages/benchmarks/src/families/net.ts
deleted file mode 100644
index 08276a873..000000000
--- a/packages/benchmarks/src/families/net.ts
+++ /dev/null
@@ -1,678 +0,0 @@
-import http from "node:http";
-import net from "node:net";
-import { readFileSync } from "node:fs";
-import type { BenchmarkOp } from "../lib/layers.js";
-import { runGuestProgram, runNodeProgram } from "../lib/layers.js";
-
-const TLS_LOOPBACK_KEY = readFileSync(
-	new URL("../../fixtures/tls-loopback-key.pem", import.meta.url),
-	"utf8",
-);
-const TLS_LOOPBACK_CERT = readFileSync(
-	new URL("../../fixtures/tls-loopback-cert.pem", import.meta.url),
-	"utf8",
-);
-const TLS_LOOPBACK_BODY = "hello-loopback-tls";
-const EXTERNAL_HTTP_BODY = "external-host-http-ok";
-const EXTERNAL_TCP_PAYLOAD = "external-tcp-echo";
-const UDP_BIG_BYTES = 60 * 1024;
-
-async function closeServer(server: http.Server | net.Server): Promise<void> {
-	await new Promise<void>((resolve, reject) => {
-		server.close((error?: Error) => {
-			if (error && (error as NodeJS.ErrnoException).code !== "ERR_SERVER_NOT_RUNNING") {
-				reject(error);
-				return;
-			}
-			resolve();
-		});
-	});
-}
-
-async function listenHttpExternalServer(): Promise<{ port: number; server: http.Server }> {
-	const server = http.createServer((_req, res) => {
-		res.setHeader("connection", "close");
-		res.end(EXTERNAL_HTTP_BODY);
-	});
-	await new Promise<void>((resolve, reject) => {
-		server.on("error", reject);
-		server.listen(0, "127.0.0.1", resolve);
-	});
-	const address = server.address();
-	if (!address || typeof address === "string") {
-		await closeServer(server);
-		throw new Error("http external server did not bind to a TCP port");
-	}
-	return { port: address.port, server };
-}
-
-async function listenTcpExternalServer(): Promise<{ port: number; server: net.Server }> {
-	const server = net.createServer((socket) => {
-		socket.on("data", (data) => socket.end(data));
-	});
-	await new Promise<void>((resolve, reject) => {
-		server.on("error", reject);
-		server.listen(0, "127.0.0.1", resolve);
-	});
-	const address = server.address();
-	if (!address || typeof address === "string") {
-		await closeServer(server);
-		throw new Error("tcp external server did not bind to a TCP port");
-	}
-	return { port: address.port, server };
-}
-
-async function withHttpExternalServer<T>(
-	callback: (port: number) => Promise<T> | T,
-): Promise<T> {
-	const { port, server } = await listenHttpExternalServer();
-	try {
-		return await callback(port);
-	} finally {
-		await closeServer(server);
-	}
-}
-
-async function withTcpExternalServer<T>(
-	callback: (port: number) => Promise<T> | T,
-): Promise<T> {
-	const { port, server } = await listenTcpExternalServer();
-	try {
-		return await callback(port);
-	} finally {
-		await closeServer(server);
-	}
-}
-
-async function runHttpExternalClient(port: number, iters: number, warmup: number): Promise<number[]> {
-	const samples: number[] = [];
-	for (let i = 0; i < warmup + iters; i++) {
-		const start = Number(process.hrtime.bigint()) / 1e6;
-		const body = await new Promise<string>((resolve, reject) => {
-			const req = http.get(
-				{
-					agent: false,
-					host: "127.0.0.1",
-					port,
-					path: "/",
-					headers: { connection: "close" },
-				},
-				(res) => {
-					const chunks: Buffer[] = [];
-					res.on("data", (chunk) => chunks.push(Buffer.from(chunk)));
-					res.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
-				},
-			);
-			req.on("error", reject);
-		});
-		if (body !== EXTERNAL_HTTP_BODY) {
-			throw new Error(`bad external HTTP body: ${JSON.stringify(body)}`);
-		}
-		const ms = Number(process.hrtime.bigint()) / 1e6 - start;
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-async function runTcpExternalClient(port: number, iters: number, warmup: number): Promise<number[]> {
-	const samples: number[] = [];
-	const expected = Buffer.from(EXTERNAL_TCP_PAYLOAD);
-	for (let i = 0; i < warmup + iters; i++) {
-		const start = Number(process.hrtime.bigint()) / 1e6;
-		const body = await new Promise<Buffer>((resolve, reject) => {
-			const socket = net.connect(port, "127.0.0.1");
-			const chunks: Buffer[] = [];
-			socket.on("connect", () => socket.write(expected));
-			socket.on("data", (chunk) => chunks.push(Buffer.from(chunk)));
-			socket.on("error", reject);
-			socket.on("close", () => resolve(Buffer.concat(chunks)));
-		});
-		if (!body.equals(expected)) {
-			throw new Error(`bad external TCP echo: ${body.toString("hex")}`);
-		}
-		const ms = Number(process.hrtime.bigint()) / 1e6 - start;
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-function httpExternalGetProgram(port: number): string {
-	return `
-import http from "node:http";
-
-const iters = Number(process.env.BENCH_ITERATIONS || 20);
-const warmup = Number(process.env.BENCH_WARMUP || 5);
-const expectedBody = ${JSON.stringify(EXTERNAL_HTTP_BODY)};
-const port = ${port};
-const samples = [];
-const now = () => Number(process.hrtime.bigint()) / 1e6;
-
-async function once() {
-  const body = await new Promise((resolve, reject) => {
-    const req = http.get({
-      agent: false,
-      host: "127.0.0.1",
-      port,
-      path: "/",
-      headers: { connection: "close" },
-    }, (res) => {
-      const chunks = [];
-      res.on("data", (chunk) => chunks.push(Buffer.from(chunk)));
-      res.on("end", () => resolve(Buffer.concat(chunks).toString("utf8")));
-    });
-    req.on("error", reject);
-  });
-  if (body !== expectedBody) {
-    throw new Error("bad external HTTP body: " + JSON.stringify(body));
-  }
-}
-
-for (let i = 0; i < warmup + iters; i++) {
-  const start = now();
-  await once();
-  const ms = now() - start;
-  if (i >= warmup) samples.push(ms);
-}
-process.stdout.write(JSON.stringify({ samples }));
-`;
-}
-
-function tcpExternalEchoProgram(port: number): string {
-	return `
-import net from "node:net";
-
-const iters = Number(process.env.BENCH_ITERATIONS || 20);
-const warmup = Number(process.env.BENCH_WARMUP || 5);
-const expected = Buffer.from(${JSON.stringify(EXTERNAL_TCP_PAYLOAD)});
-const port = ${port};
-const samples = [];
-const now = () => Number(process.hrtime.bigint()) / 1e6;
-
-async function once() {
-  const body = await new Promise((resolve, reject) => {
-    const socket = net.connect(port, "127.0.0.1");
-    const chunks = [];
-    socket.on("connect", () => socket.write(expected));
-    socket.on("data", (chunk) => chunks.push(Buffer.from(chunk)));
-    socket.on("error", reject);
-    socket.on("close", () => resolve(Buffer.concat(chunks)));
-  });
-  if (!Buffer.from(body).equals(expected)) {
-    throw new Error("bad external TCP echo: " + Buffer.from(body).toString("hex"));
-  }
-}
-
-for (let i = 0; i < warmup + iters; i++) {
-  const start = now();
-  await once();
-  const ms = now() - start;
-  if (i >= warmup) samples.push(ms);
-}
-process.stdout.write(JSON.stringify({ samples }));
-`;
-}
-
-function tlsLoopbackGetProgram(): string {
-	return `
-import https from "node:https";
-
-const iters = Number(process.env.BENCH_ITERATIONS || 20);
-const warmup = Number(process.env.BENCH_WARMUP || 5);
-const key = ${JSON.stringify(TLS_LOOPBACK_KEY)};
-const cert = ${JSON.stringify(TLS_LOOPBACK_CERT)};
-	const expectedBody = ${JSON.stringify(TLS_LOOPBACK_BODY)};
-	const port = 18443;
-	const samples = [];
-const now = () => Number(process.hrtime.bigint()) / 1e6;
-const serverSockets = new Set();
-
-const server = https.createServer({ key, cert }, (_req, res) => {
-  res.setHeader("connection", "close");
-  res.end(expectedBody);
-});
-server.on("connection", (socket) => {
-  serverSockets.add(socket);
-  socket.on("close", () => serverSockets.delete(socket));
-});
-
-await new Promise((resolve, reject) => {
-  server.on("error", reject);
-  server.listen(port, "127.0.0.1", resolve);
-});
-
-async function once(iteration) {
-  const body = await new Promise((resolve, reject) => {
-    let response = "";
-    const req = https.get({
-      agent: false,
-      host: "127.0.0.1",
-      localPort: 30000 + iteration,
-      port,
-      path: "/",
-      rejectUnauthorized: false,
-    }, (res) => {
-      res.setEncoding("utf8");
-      res.on("data", (chunk) => {
-        response += chunk;
-      });
-      res.on("end", () => {
-        const socket = res.socket;
-        socket?.destroy();
-        req.destroy();
-        resolve(response);
-      });
-    });
-    req.on("error", reject);
-  });
-  if (body !== expectedBody) {
-    throw new Error("bad TLS loopback body: " + JSON.stringify(body));
-  }
-}
-
-try {
-	  for (let i = 0; i < warmup + iters; i++) {
-	    const start = now();
-	    await once(i);
-	    const ms = now() - start;
-	    if (i >= warmup) samples.push(ms);
-	  }
-  for (const socket of serverSockets) socket.destroy();
-  await new Promise((resolve) => server.close(resolve));
-  process.stdout.write(JSON.stringify({ samples }));
-} catch (error) {
-  for (const socket of serverSockets) socket.destroy();
-  await new Promise((resolve) => server.close(resolve));
-  console.error(error && error.stack ? error.stack : error);
-  process.exit(1);
-}
-`;
-}
-
-function udpEchoOp(name: string, sizeBytes: number): BenchmarkOp {
-		return {
-			family: "net",
-			name,
-			nativeOp: "udp_echo",
-			nativeArgs: ["--size-bytes", String(sizeBytes)],
-			wasmUnsupportedReason: "UDP sockets are not supported in the native-baseline wasm lane",
-			fileLine: "crates/sidecar/src/execution.rs:2712",
-		reproducer: `node:dgram udp4 socket sends one ${sizeBytes} byte datagram to its own loopback address inside VM`,
-		program: `async () => {
-  const dgram = await import("node:dgram");
-  const payload = Buffer.alloc(${sizeBytes}, 7);
-  const createSocket = dgram.createSocket ?? dgram.default?.createSocket;
-  if (typeof createSocket !== "function") throw new Error("dgram.createSocket is not a function");
-  await new Promise((resolve, reject) => {
-    const socket = createSocket("udp4");
-    socket.on("error", (error) => {
-      socket.close();
-      reject(error);
-    });
-    socket.on("message", (message) => {
-      socket.close(() => message.equals(payload) ? resolve() : reject(new Error("bad udp echo: " + message.length)));
-    });
-    socket.bind(0, "127.0.0.1", () => {
-      const address = socket.address();
-      socket.send(payload, address.port, "127.0.0.1");
-    });
-  });
-}`,
-	};
-}
-
-function unixEchoOp(name: string, sizeBytes: number): BenchmarkOp {
-		return {
-			family: "net",
-			name,
-			nativeOp: "unix_echo",
-			nativeArgs: ["--size-bytes", String(sizeBytes)],
-			wasmUnsupportedReason: "Unix-domain sockets are not supported in the native-baseline wasm lane",
-			fileLine: "crates/sidecar/src/execution.rs:2237",
-		reproducer: `Unix-domain socket echo one ${sizeBytes} byte payload inside VM`,
-		program: `async () => {
-  const fs = await import("node:fs");
-  const net = await import("node:net");
-  const os = await import("node:os");
-  const path = await import("node:path");
-  const payload = Buffer.alloc(${sizeBytes}, 7);
-  const sock = path.join(
-    os.tmpdir(),
-    "fuzz-perf-unix-echo-" + process.pid + "-" + Math.random().toString(16).slice(2) + ".sock",
-  );
-  await new Promise((resolve, reject) => {
-    const server = net.createServer((socket) => {
-      const chunks = [];
-      socket.on("data", (data) => {
-        chunks.push(data);
-        const got = Buffer.concat(chunks);
-        if (got.length >= payload.length) socket.end(got);
-      });
-    });
-    const cleanup = () => {
-      try { fs.unlinkSync(sock); } catch {}
-    };
-    server.on("error", (error) => {
-      cleanup();
-      reject(error);
-    });
-    server.listen(sock, () => {
-      const client = net.connect(sock);
-      const chunks = [];
-      client.on("data", (data) => chunks.push(data));
-      client.on("error", reject);
-      client.on("close", () => {
-        const got = Buffer.concat(chunks);
-        server.close(() => {
-          cleanup();
-          got.equals(payload) ? resolve() : reject(new Error("bad unix echo: " + got.length));
-        });
-      });
-      client.write(payload);
-    });
-  });
-}`,
-	};
-}
-
-function tcpEchoOp(name: string, sizeBytes: number, nativeOp: "tcp_echo" | "tcp_throughput"): BenchmarkOp {
-		return {
-			family: "net",
-			name,
-			nativeOp,
-			nativeArgs: ["--size-bytes", String(sizeBytes)],
-			wasmUnsupportedReason: "TCP sockets are not supported in the native-baseline wasm lane",
-			fileLine: "crates/kernel/src/socket_table.rs:1413",
-		reproducer: `localhost TCP echo of one ${sizeBytes} byte payload inside VM`,
-		program: `async () => {
-  const net = await import("node:net");
-  const payload = Buffer.alloc(${sizeBytes}, 7);
-  await new Promise((resolve, reject) => {
-    const server = net.createServer((socket) => {
-      const chunks = [];
-      socket.on("data", (d) => {
-        chunks.push(d);
-        const got = Buffer.concat(chunks);
-        if (got.length >= payload.length) socket.end(got);
-      });
-    });
-    server.on("error", reject);
-    server.listen(0, "127.0.0.1", () => {
-      const port = server.address().port;
-      const socket = net.connect(port, "127.0.0.1");
-      const chunks = [];
-      socket.on("data", (d) => chunks.push(d));
-      socket.on("error", reject);
-      socket.on("close", () => {
-        const got = Buffer.concat(chunks);
-        server.close(() => got.equals(payload) ? resolve() : reject(new Error("short echo: " + got.length)));
-      });
-      socket.write(payload);
-    });
-  });
-}`,
-	};
-}
-
-export const netFamily: BenchmarkOp[] = [
-	udpEchoOp("udp_echo_small", 16),
-	udpEchoOp("udp_echo_big", UDP_BIG_BYTES),
-	unixEchoOp("unix_echo_small", 16),
-	unixEchoOp("unix_echo_big", 64 * 1024),
-		{
-			family: "net",
-			name: "http_loopback_get",
-			nativeOp: "http_loopback_get",
-			wasmUnsupportedReason: "TCP HTTP loopback is not supported in the native-baseline wasm lane",
-			fileLine: "crates/execution/src/node_import_cache.rs:4750",
-		reproducer: "node:http loopback GET inside VM",
-		program: `async () => {
-  const http = await import("node:http");
-  const server = http.createServer((_req, res) => {
-    res.end("ok");
-  });
-  await new Promise((resolve, reject) => {
-    server.on("error", reject);
-    server.listen(0, "127.0.0.1", () => {
-      const port = server.address().port;
-      http.get({ hostname: "127.0.0.1", port, path: "/" }, (res) => {
-        const chunks = [];
-        res.on("data", (chunk) => chunks.push(chunk));
-        res.on("end", () => {
-          const body = Buffer.concat(chunks).toString("utf8");
-          server.close(() => body === "ok" ? resolve() : reject(new Error("bad http body")));
-        });
-      }).on("error", (error) => {
-        server.close(() => reject(error));
-      });
-    });
-	  });
-	}`,
-	},
-		{
-			family: "net",
-			name: "http_external_get",
-			nativeUnsupportedReason: "external-loopback row depends on a Node harness listener, no native-baseline analogue",
-			wasmUnsupportedReason: "host-side benchmark listener requires Node harness networking",
-		fileLine: "crates/sidecar/src/execution.rs:13919",
-		reproducer: "node:http GET from guest to a host-side loopback-exempt HTTP server",
-		runNode: (iters, warmup) =>
-			withHttpExternalServer((port) => runHttpExternalClient(port, iters, warmup)),
-		prepareVm: async () => {
-			const { port, server } = await listenHttpExternalServer();
-			return {
-				options: { loopbackExemptPorts: [port] },
-				context: port,
-				cleanup: () => closeServer(server),
-			};
-		},
-		runGuest: (vm, iters, warmup, context) =>
-			runGuestProgram(
-				vm,
-				httpExternalGetProgram(assertPortContext(context, "http_external_get")),
-				iters,
-				warmup,
-				"net-http-external-get",
-			),
-	},
-		{
-			family: "net",
-			name: "http2_loopback_get",
-			nativeUnsupportedReason: "HTTP/2 is a JS-runtime protocol surface in this matrix",
-			wasmUnsupportedReason: "HTTP/2 unsupported in wasm baseline",
-		fileLine: "packages/build-tools/bridge-src/builtins/http2.ts:1472",
-		reproducer: "node:http2 h2c loopback GET inside VM",
-		program: `async () => {
-  const http2 = await import("node:http2");
-  const server = http2.createServer();
-  server.on("stream", (stream, headers) => {
-    if (headers[":path"] !== "/") {
-      stream.respond({ ":status": 404 });
-      stream.end("missing");
-      return;
-    }
-    stream.respond({ ":status": 200, "content-type": "text/plain" });
-    stream.end("ok-h2");
-  });
-  await new Promise((resolve, reject) => {
-    server.on("error", reject);
-    server.listen(0, "127.0.0.1", () => {
-      const port = server.address().port;
-      const session = http2.connect("http://127.0.0.1:" + port);
-      const req = session.request({ ":path": "/" });
-      const chunks = [];
-      session.on("error", (error) => {
-        server.close(() => reject(error));
-      });
-      req.on("data", (chunk) => chunks.push(chunk));
-      req.on("end", () => {
-        const body = Buffer.concat(chunks).toString("utf8");
-        session.close();
-        server.close(() => body === "ok-h2" ? resolve() : reject(new Error("bad http2 body")));
-      });
-      req.on("error", (error) => {
-        session.close();
-        server.close(() => reject(error));
-      });
-      req.end();
-    });
-  });
-}`,
-	},
-		{
-			family: "net",
-			name: "fetch_loopback_get",
-			nativeUnsupportedReason: "fetch is a JS-runtime undici surface",
-			wasmUnsupportedReason: "fetch is a JS-runtime undici surface",
-			fileLine: "crates/execution/src/node_import_cache.rs:4750",
-		reproducer: "global fetch loopback GET inside VM",
-		program: `async () => {
-  if (typeof fetch !== "function") throw new Error("fetch is not defined");
-  const http = await import("node:http");
-  const server = http.createServer((_req, res) => {
-    res.end("ok");
-  });
-  await new Promise((resolve, reject) => {
-    server.on("error", reject);
-    server.listen(0, "127.0.0.1", async () => {
-      try {
-        const port = server.address().port;
-        const res = await fetch("http://127.0.0.1:" + port + "/");
-        const body = await res.text();
-        server.close(() => body === "ok" ? resolve() : reject(new Error("bad fetch body")));
-      } catch (error) {
-        server.close(() => reject(error));
-      }
-    });
-  });
-}`,
-	},
-		{
-			family: "net",
-			name: "tls_loopback_get",
-			nativeUnsupportedReason: "TLS is a JS-runtime protocol surface in this matrix",
-			wasmUnsupportedReason: "TLS unsupported in wasm baseline",
-		fileLine: "crates/sidecar/src/execution.rs:13532",
-		reproducer: "persistent node:https loopback server; each iteration opens a fresh https.get connection inside VM",
-		runNode: (iters, warmup) => runNodeProgram(tlsLoopbackGetProgram(), iters, warmup),
-		runGuest: (vm, iters, warmup) =>
-			runGuestProgram(vm, tlsLoopbackGetProgram(), iters, warmup, "net-tls-loopback-get"),
-	},
-		{
-			family: "net",
-			name: "tcp_connect_close",
-			nativeOp: "tcp_connect",
-			wasmUnsupportedReason: "TCP sockets are not supported in the native-baseline wasm lane",
-			fileLine: "crates/kernel/src/socket_table.rs:382",
-		reproducer: "node net.createServer(); net.connect(port).end() inside VM",
-		program: `async () => {
-  const net = await import("node:net");
-  await new Promise((resolve, reject) => {
-    const server = net.createServer((socket) => socket.end());
-    server.on("error", reject);
-    server.listen(0, "127.0.0.1", () => {
-      const port = server.address().port;
-      const socket = net.connect(port, "127.0.0.1");
-      socket.on("error", reject);
-      socket.on("close", () => server.close(resolve));
-      socket.end();
-    });
-  });
-}`,
-	},
-	tcpEchoOp("tcp_echo_small", 16, "tcp_echo"),
-		{
-			family: "net",
-			name: "tcp_external_echo",
-			nativeOp: "tcp_echo",
-		wasmUnsupportedReason: "host-side benchmark listener requires Node harness networking",
-		fileLine: "crates/sidecar/src/execution.rs:13919",
-		reproducer: "guest net.connect to a host-side loopback-exempt TCP echo server, one 16-byte echo",
-		runNode: (iters, warmup) =>
-			withTcpExternalServer((port) => runTcpExternalClient(port, iters, warmup)),
-		prepareVm: async () => {
-			const { port, server } = await listenTcpExternalServer();
-			return {
-				options: { loopbackExemptPorts: [port] },
-				context: port,
-				cleanup: () => closeServer(server),
-			};
-		},
-		runGuest: (vm, iters, warmup, context) =>
-			runGuestProgram(
-				vm,
-				tcpExternalEchoProgram(assertPortContext(context, "tcp_external_echo")),
-				iters,
-				warmup,
-				"net-tcp-external-echo",
-			),
-	},
-		{
-			family: "net",
-			name: "tcp_concurrent_4",
-			nativeOp: "tcp_concurrent",
-			wasmUnsupportedReason: "TCP sockets are not supported in the native-baseline wasm lane",
-			fileLine: "crates/kernel/src/socket_table.rs:382",
-		reproducer: "four concurrent localhost TCP clients connect to one VM server",
-		program: `async () => {
-  const net = await import("node:net");
-  await new Promise((resolve, reject) => {
-    let accepted = 0;
-    const server = net.createServer((socket) => {
-      socket.on("data", () => socket.end());
-      if (++accepted === 4) server.close(resolve);
-    });
-    server.on("error", reject);
-    server.listen(0, "127.0.0.1", () => {
-      const port = server.address().port;
-      for (let i = 0; i < 4; i++) {
-        const socket = net.connect(port, "127.0.0.1");
-        socket.on("error", reject);
-        socket.write("x");
-      }
-    });
-  });
-}`,
-	},
-	tcpEchoOp("tcp_echo_big", 64 * 1024, "tcp_throughput"),
-	{
-		// Measures write count/cadence, not payload-size scaling; keep the count suffix.
-			family: "net",
-			name: "tcp_tiny_writes_16",
-			nativeOp: "tcp_tiny_writes",
-			wasmUnsupportedReason: "TCP sockets are not supported in the native-baseline wasm lane",
-			fileLine: "crates/kernel/src/socket_table.rs:1335",
-		reproducer: "localhost TCP echo using sixteen one-byte writes inside VM",
-		program: `async () => {
-  const net = await import("node:net");
-  await new Promise((resolve, reject) => {
-    const server = net.createServer((socket) => {
-      const chunks = [];
-      socket.on("data", (d) => {
-        chunks.push(d);
-        if (Buffer.concat(chunks).length >= 16) socket.end(Buffer.concat(chunks));
-      });
-    });
-    server.on("error", reject);
-    server.listen(0, "127.0.0.1", () => {
-      const port = server.address().port;
-      const socket = net.connect(port, "127.0.0.1");
-      const chunks = [];
-      socket.on("data", (d) => chunks.push(d));
-      socket.on("error", reject);
-      socket.on("close", () => {
-        const got = Buffer.concat(chunks);
-        server.close(() => got.length === 16 ? resolve() : reject(new Error("short tiny echo")));
-      });
-      for (let i = 0; i < 16; i++) socket.write("x");
-    });
-  });
-}`,
-	},
-];
-
-function assertPortContext(context: unknown, op: string): number {
-	if (typeof context !== "number") {
-		throw new Error(`${op} missing prepared loopback port`);
-	}
-	return context;
-}
diff --git a/packages/benchmarks/src/families/perf-findings.ts b/packages/benchmarks/src/families/perf-findings.ts
deleted file mode 100644
index 158e0f36f..000000000
--- a/packages/benchmarks/src/families/perf-findings.ts
+++ /dev/null
@@ -1,83 +0,0 @@
-import type { BenchmarkOp } from "../lib/layers.js";
-
-/**
- * Perf-finding regression ops.
- *
- * Each op exercises one hot-path anti-pattern surfaced by the 2026-06-30
- * perf-slop scan (see ~/progress/secure-exec/2026-06-30-fuzz-perf-optimization-report/
- * perf-slop-scan.md). The `program` runs identically under host Node and inside
- * the guest VM, so `tax.emulation = guest.p50 / node.p50` is the guest overhead
- * the corresponding fix is expected to shrink. Capture these numbers BEFORE the
- * fix lands (baseline) and re-run AFTER (regression guard).
- *
- * Findings already covered by existing benches (no op here):
- *   - host_call.rs:429/435/452/534 (per-syscall lock + String clone) -> sync-bridge-floor
- *   - bridge.rs:1978 (args buffer clone)                             -> sync-bridge-floor --payload-bytes=65536
- *   - execution.rs:897 (loopback peer-pairing 50x10ms retry)         -> net/tcp_connect_close
- *
- * Findings that could NOT be turned into a clean guest-vs-node op (documented so
- * the gap is explicit, not silently dropped):
- *   - v8_host.rs:296 (serialize->deserialize per stream event): stdout/stderr IS
- *     the harness data channel, so flooding the stdio event path overruns the
- *     4096 sidecar event buffer and hangs instead of timing. Needs a
- *     sidecar-internal per-event counter.
- *   - execution.rs:962 (byte-by-byte loopback-TLS read): a guest HTTPS loopback
- *     request currently ERRORS (`ERR_SECURE_EXEC_NODE_SYNC_RPC: loopback TLS transport
- *     read`), so there is no successful transfer to time. The error on that exact
- *     path is itself worth a follow-up.
- *   - execution.rs:19315/19895 (HTTP/2 accept + backpressure polls): node:http2
- *     inside the guest hangs (unsupported), so no request completes to time.
- */
-
-export const perfFindingsFamily: BenchmarkOp[] = [
-	{
-		// crates/sidecar/src/filesystem.rs:1284 — fs.write stdio handler clones the
-		// full write buffer into the Stdout/Stderr event. fs.writeSync(2, ...) forces
-		// the write synchronously through the sync bridge so the per-call clone cost
-		// is actually on the measured path (async stream .write() buffers and reads
-		// as ~0). 8 x 64KiB per iter stays well under the 4096 event-buffer bound.
-		family: "perf-finding",
-		name: "stdio_writeSync_8x64k",
-		nativeOp: "stdio_write_sync",
-		nativeArgs: ["--size-bytes", String(64 * 1024), "--chunk-count", "8"],
-		wasmUnsupportedReason: "stdio fd writes are not supported in the native-baseline wasm lane",
-		fileLine: "crates/sidecar/src/filesystem.rs:1284",
-		reproducer: "8 synchronous fs.writeSync(2, 64KiB) inside VM (stdio buffer clone)",
-		program: `async () => {
-  const fs = await import("node:fs");
-  const buf = Buffer.alloc(64 * 1024, 7);
-  for (let k = 0; k < 8; k++) fs.writeSync(2, buf);
-}`,
-	},
-	{
-		// crates/sidecar/src/execution.rs:2213 — guest Unix-socket accept loop sleeps
-		// a fixed 10ms on WouldBlock instead of async readiness. One connect+close
-		// pays one accept-latency tick. This is the clearest signal in the set
-		// (baseline ~30x guest/node) — the 10ms poll dominates a sub-ms host accept.
-		family: "perf-finding",
-		name: "unix_accept_latency",
-		nativeOp: "unix_connect",
-		wasmUnsupportedReason: "Unix-domain sockets are not supported in the native-baseline wasm lane",
-		fileLine: "crates/sidecar/src/execution.rs:2213",
-		reproducer: "connect+close one Unix-domain socket inside VM (10ms accept poll)",
-		program: `async () => {
-  const net = await import("node:net");
-  const os = await import("node:os");
-  const path = await import("node:path");
-  const sock = path.join(
-    os.tmpdir(),
-    "perf-unix-" + process.pid + "-" + Math.random().toString(16).slice(2) + ".sock",
-  );
-  await new Promise((resolve, reject) => {
-    const server = net.createServer((s) => s.end());
-    server.on("error", reject);
-    server.listen(sock, () => {
-      const c = net.connect(sock);
-      c.on("error", reject);
-      c.on("close", () => server.close(() => resolve()));
-      c.end();
-    });
-  });
-}`,
-	},
-];
diff --git a/packages/benchmarks/src/families/permissions.ts b/packages/benchmarks/src/families/permissions.ts
deleted file mode 100644
index eea3c590c..000000000
--- a/packages/benchmarks/src/families/permissions.ts
+++ /dev/null
@@ -1,84 +0,0 @@
-import type { NodeRuntimeCreateOptions } from "@secure-exec/core";
-import { fsFamily } from "./fs.js";
-import { netFamily } from "./net.js";
-import type { BenchmarkOp } from "../lib/layers.js";
-
-const PERMISSION_OPS = [
-	...selectOps(fsFamily, ["fs_write_small", "stat_storm", "readdir_small"]),
-	...selectOps(netFamily, ["tcp_echo_small", "http_loopback_get"]),
-];
-
-// Policy shape under test:
-// - fs: default deny, then 15 allow glob rules. Common runtime paths appear
-//   first; benchmark script and op working paths are last-matching for their
-//   requests so the last-match evaluator walks the list.
-// - network: default deny, then 5 allowlist rules. The real loopback rule is
-//   last so TCP connect/listen checks walk the list before allowing.
-// - childProcess/process/env: allow, keeping the benchmark focused on the
-//   guest syscall permission matcher for fs and network operations.
-export const restrictivePermissionsPolicy: NodeRuntimeCreateOptions["permissions"] = {
-	fs: {
-		default: "deny",
-		rules: [
-			{ mode: "allow", operations: ["*"], paths: ["/bin/**"] },
-			{ mode: "allow", operations: ["*"], paths: ["/usr/**"] },
-			{ mode: "allow", operations: ["*"], paths: ["/lib/**"] },
-			{ mode: "allow", operations: ["*"], paths: ["/etc/**"] },
-			{ mode: "allow", operations: ["*"], paths: ["/dev/**"] },
-			{ mode: "allow", operations: ["*"], paths: ["/proc/**"] },
-			{ mode: "allow", operations: ["*"], paths: ["/workspace/**"] },
-			{ mode: "allow", operations: ["*"], paths: ["/mnt/**"] },
-			{ mode: "allow", operations: ["*"], paths: ["/tmp"] },
-			{ mode: "allow", operations: ["*"], paths: ["/tmp/*.mjs"] },
-			{ mode: "allow", operations: ["*"], paths: ["/tmp/fuzz-perf-permissions-*.mjs"] },
-			{ mode: "allow", operations: ["*"], paths: ["/tmp/fuzz-perf-write.txt"] },
-			{ mode: "allow", operations: ["*"], paths: ["/tmp/fuzz-perf-stat.txt"] },
-			{ mode: "allow", operations: ["*"], paths: ["/tmp/fuzz-perf-readdir-*"] },
-			{ mode: "allow", operations: ["*"], paths: ["/tmp/fuzz-perf-readdir-*/**"] },
-		],
-	},
-	network: {
-		default: "deny",
-		rules: [
-			{ mode: "allow", operations: ["http", "listen"], patterns: ["tcp://127.0.0.2:*"] },
-			{ mode: "allow", operations: ["http", "listen"], patterns: ["tcp://localhost:*"] },
-			{ mode: "allow", operations: ["http", "listen"], patterns: ["tcp://[::1]:*"] },
-			{ mode: "allow", operations: ["http", "listen"], patterns: ["tcp://0.0.0.0:*"] },
-			{ mode: "allow", operations: ["http", "listen"], patterns: ["tcp://127.0.0.1:*"] },
-		],
-	},
-	childProcess: "allow",
-	process: "allow",
-	env: "allow",
-};
-
-export const permissionsFamily: BenchmarkOp[] = PERMISSION_OPS.flatMap((op) => [
-	permissionRow(op, "allow"),
-	permissionRow(op, "policy"),
-]);
-
-function selectOps(family: BenchmarkOp[], names: string[]): BenchmarkOp[] {
-	return names.map((name) => {
-		const op = family.find((candidate) => candidate.name === name);
-		if (!op) {
-			throw new Error(`missing benchmark op ${name}`);
-		}
-		return op;
-	});
-}
-
-function permissionRow(op: BenchmarkOp, variant: "allow" | "policy"): BenchmarkOp {
-	return {
-		...op,
-		family: "permissions",
-		name: `${op.name}_${variant}`,
-		nativeOp: undefined,
-		nativeUnsupportedReason: "permissions family measures guest VM policy overhead only",
-		wasmUnsupportedReason: "permissions family measures guest VM policy overhead only",
-		reproducer: `${op.reproducer}; permissions=${variant}`,
-		prepareVm:
-			variant === "policy"
-				? async () => ({ options: { permissions: restrictivePermissionsPolicy } })
-				: undefined,
-	};
-}
diff --git a/packages/benchmarks/src/families/pipes.ts b/packages/benchmarks/src/families/pipes.ts
deleted file mode 100644
index 7d15668e7..000000000
--- a/packages/benchmarks/src/families/pipes.ts
+++ /dev/null
@@ -1,52 +0,0 @@
-import type { BenchmarkOp } from "../lib/layers.js";
-
-function passThroughOp(name: string, sizeBytes: number): BenchmarkOp {
-	return {
-		family: "pipes",
-		name,
-		nativeOp: sizeBytes > 16 ? "pipe_throughput" : "pipe_echo",
-		nativeArgs: sizeBytes > 16 ? ["--size-bytes", String(sizeBytes)] : undefined,
-		wasmUnsupportedReason: "pipe primitives are not supported in the native-baseline wasm lane",
-		fileLine: "crates/v8-runtime/src/host_call.rs:276",
-		reproducer: `node PassThrough write/read one ${sizeBytes} byte payload inside VM`,
-		program: `async () => {
-  const { PassThrough } = await import("node:stream");
-  const payload = Buffer.alloc(${sizeBytes}, 9);
-  await new Promise((resolve, reject) => {
-    const stream = new PassThrough();
-    const chunks = [];
-    stream.on("data", (d) => chunks.push(d));
-    stream.on("end", () => {
-      const got = Buffer.concat(chunks);
-      got.equals(payload) ? resolve() : reject(new Error("bad pipe: " + got.length));
-    });
-    stream.end(payload);
-  });
-}`,
-	};
-}
-
-export const pipesFamily: BenchmarkOp[] = [
-	passThroughOp("pass_through_small", 16),
-	passThroughOp("pass_through_big", 64 * 1024),
-	{
-		// Measures backpressure shape and chunk count, not payload-size scaling.
-		family: "pipes",
-		name: "backpressure_chunks",
-		nativeOp: "pipe_backpressure",
-		wasmUnsupportedReason: "pipe primitives are not supported in the native-baseline wasm lane",
-		fileLine: "crates/v8-runtime/src/host_call.rs:276",
-		reproducer: "node PassThrough with a tiny highWaterMark and 64 one-byte writes",
-		program: `async () => {
-  const { PassThrough } = await import("node:stream");
-  await new Promise((resolve, reject) => {
-    const stream = new PassThrough({ highWaterMark: 1 });
-    let bytes = 0;
-    stream.on("data", (d) => bytes += d.length);
-    stream.on("end", () => bytes === 64 ? resolve() : reject(new Error(String(bytes))));
-    for (let i = 0; i < 64; i++) stream.write(Buffer.from([i & 255]));
-    stream.end();
-  });
-}`,
-	},
-];
diff --git a/packages/benchmarks/src/families/process.ts b/packages/benchmarks/src/families/process.ts
deleted file mode 100644
index a9209e090..000000000
--- a/packages/benchmarks/src/families/process.ts
+++ /dev/null
@@ -1,283 +0,0 @@
-import { spawn, spawnSync } from "node:child_process";
-import type { BenchmarkOp } from "../lib/layers.js";
-import { runGuestSpawn, runNodeSpawn } from "../lib/layers.js";
-
-const NODE_EXIT_ARGS = ["-e", "process.exit(0)"];
-const NODE_CAPTURE_ARGS = ["-e", "process.stdout.write('hi')"];
-
-function runNodeStdoutCapture(iters: number, warmup: number): number[] {
-	const samples: number[] = [];
-	for (let i = 0; i < warmup + iters; i++) {
-		const start = process.hrtime.bigint();
-		const result = spawnSync("node", NODE_CAPTURE_ARGS, { encoding: "utf8" });
-		const ms = Number(process.hrtime.bigint() - start) / 1e6;
-		if (result.status !== 0) {
-			throw new Error(`node stdout capture exited ${result.status}`);
-		}
-		if (result.stdout !== "hi") {
-			throw new Error(`node stdout capture mismatch: ${JSON.stringify(result.stdout)}`);
-		}
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-async function runGuestStdoutCapture(
-	vm: Parameters<NonNullable<BenchmarkOp["runGuest"]>>[0],
-	iters: number,
-	warmup: number,
-): Promise<number[]> {
-	const samples: number[] = [];
-	for (let i = 0; i < warmup + iters; i++) {
-		let stdout = "";
-		const start = process.hrtime.bigint();
-		const proc = vm.spawn("node", NODE_CAPTURE_ARGS, {
-			onStdout: (data) => {
-				stdout += Buffer.from(data).toString("utf8");
-			},
-		});
-		const code = await vm.waitProcess(proc.pid);
-		const ms = Number(process.hrtime.bigint() - start) / 1e6;
-		if (code !== 0) throw new Error(`guest stdout capture exited ${code}`);
-		if (stdout !== "hi") {
-			throw new Error(`guest stdout capture mismatch: ${JSON.stringify(stdout)}`);
-		}
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-async function runNodeStdoutListenerOnly(
-	iters: number,
-	warmup: number,
-): Promise<number[]> {
-	const samples: number[] = [];
-	for (let i = 0; i < warmup + iters; i++) {
-		let bytes = 0;
-		const start = process.hrtime.bigint();
-		const child = spawn("node", NODE_CAPTURE_ARGS, {
-			stdio: ["ignore", "pipe", "ignore"],
-		});
-		child.stdout.on("data", (chunk: Buffer) => {
-			bytes += chunk.length;
-		});
-		await new Promise<void>((resolve, reject) => {
-			child.on("error", reject);
-			child.on("exit", (code) =>
-				code === 0 ? resolve() : reject(new Error(`exit ${code}`)),
-			);
-		});
-		const ms = Number(process.hrtime.bigint() - start) / 1e6;
-		if (bytes !== 2) {
-			throw new Error(`node stdout listener byte mismatch: ${bytes}`);
-		}
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-async function runGuestStdoutListenerOnly(
-	vm: Parameters<NonNullable<BenchmarkOp["runGuest"]>>[0],
-	iters: number,
-	warmup: number,
-): Promise<number[]> {
-	const samples: number[] = [];
-	for (let i = 0; i < warmup + iters; i++) {
-		let bytes = 0;
-		const start = process.hrtime.bigint();
-		const proc = vm.spawn("node", NODE_CAPTURE_ARGS, {
-			onStdout: (data) => {
-				bytes += data.byteLength;
-			},
-		});
-		const code = await vm.waitProcess(proc.pid);
-		const ms = Number(process.hrtime.bigint() - start) / 1e6;
-		if (code !== 0) throw new Error(`guest stdout listener exited ${code}`);
-		if (bytes !== 2) {
-			throw new Error(`guest stdout listener byte mismatch: ${bytes}`);
-		}
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-async function runNodeFanout(iters: number, warmup: number): Promise<number[]> {
-	const { spawn } = await import("node:child_process");
-	const samples: number[] = [];
-	for (let i = 0; i < warmup + iters; i++) {
-		const start = process.hrtime.bigint();
-		const children = Array.from({ length: 8 }, () =>
-			spawn("node", NODE_EXIT_ARGS, { stdio: "ignore" }),
-		);
-		await Promise.all(
-			children.map(
-				(child) =>
-					new Promise<void>((resolve, reject) => {
-						child.on("error", reject);
-						child.on("exit", (code) =>
-							code === 0 ? resolve() : reject(new Error(`exit ${code}`)),
-						);
-					}),
-			),
-		);
-		if (i >= warmup) {
-			samples.push(Number(process.hrtime.bigint() - start) / 1e6);
-		}
-	}
-	return samples;
-}
-
-async function runGuestFanout(vm: Parameters<NonNullable<BenchmarkOp["runGuest"]>>[0], iters: number, warmup: number): Promise<number[]> {
-	const samples: number[] = [];
-	for (let i = 0; i < warmup + iters; i++) {
-		const start = process.hrtime.bigint();
-		const children = Array.from({ length: 8 }, () => vm.spawn("node", NODE_EXIT_ARGS));
-		await Promise.all(children.map((child) => vm.waitProcess(child.pid)));
-		if (i >= warmup) {
-			samples.push(Number(process.hrtime.bigint() - start) / 1e6);
-		}
-	}
-	return samples;
-}
-
-function spawnStdoutCaptureOp(name: string, sizeBytes: number): BenchmarkOp {
-	return {
-		family: "process",
-		name,
-		nativeOp: "node_stdout_capture_2b",
-		nativeArgs: ["--size-bytes", String(sizeBytes)],
-		wasmUnsupportedReason: "process spawning is not supported in the native-baseline wasm lane",
-		fileLine: "crates/execution/src/v8_host.rs:296",
-		reproducer: `spawn node child writing ${sizeBytes} stdout bytes, capture and verify byte count`,
-		program: `async () => {
-  const { spawn } = await import("node:child_process");
-  const child = spawn("node", ["-e", "process.stdout.write(Buffer.alloc(${sizeBytes}, 55))"], {
-    stdio: ["ignore", "pipe", "ignore"],
-  });
-  const chunks = [];
-  child.stdout.on("data", (chunk) => chunks.push(chunk));
-  await new Promise((resolve, reject) => {
-    child.on("error", reject);
-    child.on("close", (code) => code === 0 ? resolve() : reject(new Error("exit " + code)));
-  });
-  const got = Buffer.concat(chunks);
-  if (got.length !== ${sizeBytes}) throw new Error("stdout byte mismatch: " + got.length);
-}`,
-	};
-}
-
-export const processFamily: BenchmarkOp[] = [
-	{
-		family: "process",
-		name: "node_exit",
-		nativeOp: "node_exit",
-		wasmUnsupportedReason: "process spawning is not supported in the native-baseline wasm lane",
-		fileLine: "crates/sidecar/src/execution.rs:5349",
-		reproducer: "vm.spawn('node', ['-e', 'process.exit(0)']); waitProcess(pid)",
-		runNode: (iters, warmup) => runNodeSpawn(NODE_EXIT_ARGS, iters, warmup),
-		runGuest: (vm, iters, warmup) =>
-			runGuestSpawn(vm, NODE_EXIT_ARGS, iters, warmup),
-	},
-	{
-		family: "process",
-		name: "node_stdout_discard_2b",
-		nativeOp: "node_stdout_discard_2b",
-		wasmUnsupportedReason: "process spawning is not supported in the native-baseline wasm lane",
-		fileLine: "crates/v8-runtime/src/host_call.rs:276",
-		reproducer: "spawn child that writes 2 stdout bytes, with stdout ignored",
-		runNode: (iters, warmup) => runNodeSpawn(NODE_CAPTURE_ARGS, iters, warmup),
-		runGuest: (vm, iters, warmup) =>
-			runGuestSpawn(vm, NODE_CAPTURE_ARGS, iters, warmup),
-	},
-	{
-		family: "process",
-		name: "exec_capture",
-		nativeOp: "node_stdout_capture_2b",
-		wasmUnsupportedReason: "process spawning is not supported in the native-baseline wasm lane",
-		fileLine: "crates/v8-runtime/src/host_call.rs:276",
-		reproducer: "spawn child that writes 2 stdout bytes, capture exact stdout",
-		runNode: runNodeStdoutCapture,
-		runGuest: runGuestStdoutCapture,
-	},
-	{
-		family: "process",
-		name: "node_stdout_listener_only_2b",
-		nativeOp: "node_stdout_listener_only_2b",
-		wasmUnsupportedReason: "process spawning is not supported in the native-baseline wasm lane",
-		fileLine: "crates/v8-runtime/src/host_call.rs:276",
-		reproducer: "spawn child that writes 2 stdout bytes, count listener bytes only",
-		runNode: runNodeStdoutListenerOnly,
-		runGuest: runGuestStdoutListenerOnly,
-	},
-	{
-		family: "process",
-		name: "fanout_spawn_8",
-		nativeOp: "node_fanout",
-		wasmUnsupportedReason: "process spawning is not supported in the native-baseline wasm lane",
-		fileLine: "crates/sidecar/src/execution.rs:5349",
-		reproducer: "spawn 8 node children concurrently, then wait for all pids",
-		runNode: runNodeFanout,
-		runGuest: runGuestFanout,
-	},
-	{
-		family: "process",
-		name: "wait_reap_storm_8",
-		nativeOp: "node_reap_storm",
-		wasmUnsupportedReason: "process spawning is not supported in the native-baseline wasm lane",
-		fileLine: "crates/kernel/src/process_table.rs:842",
-		reproducer: "spawn 8 short-lived node children and reap all exits",
-		runNode: runNodeFanout,
-		runGuest: runGuestFanout,
-	},
-	{
-		family: "process",
-		name: "pipe_chain_3",
-		nativeOp: "pipe_chain",
-		wasmUnsupportedReason: "shell pipe chains are not supported in the native-baseline wasm lane",
-		fileLine: "crates/v8-runtime/src/host_call.rs:276",
-		reproducer: "node stream pipeline PassThrough -> PassThrough -> PassThrough",
-		program: `async () => {
-  const { PassThrough, pipeline } = await import("node:stream");
-  const { promisify } = await import("node:util");
-  const pipe = promisify(pipeline);
-  const a = new PassThrough();
-  const b = new PassThrough();
-  const c = new PassThrough();
-  const chunks = [];
-  c.on("data", (chunk) => chunks.push(chunk));
-  const done = pipe(a, b, c);
-  a.end("hello");
-  await done;
-  if (Buffer.concat(chunks).toString("utf8") !== "hello") throw new Error("bad pipe chain");
-}`,
-	},
-	spawnStdoutCaptureOp("spawn_stdout_capture_small", 4 * 1024),
-	spawnStdoutCaptureOp("spawn_stdout_capture_big", 256 * 1024),
-	{
-		family: "process",
-		name: "spawn_stdin_roundtrip",
-		nativeOp: "node_stdin_roundtrip",
-		nativeArgs: ["--size-bytes", String(4 * 1024)],
-		wasmUnsupportedReason: "process spawning is not supported in the native-baseline wasm lane",
-		fileLine: "crates/sidecar/src/filesystem.rs:1284",
-		reproducer: "spawn node stdin->stdout pipe, write and capture one 4KiB payload",
-		program: `async () => {
-  const { spawn } = await import("node:child_process");
-  const payload = Buffer.alloc(4096, 9);
-  const child = spawn("node", ["-e", "process.stdin.on('data', (chunk) => process.stdout.write(chunk)); process.stdin.on('end', () => process.exit(0));"], {
-    stdio: ["pipe", "pipe", "pipe"],
-  });
-  const chunks = [];
-  const errors = [];
-  child.stdout.on("data", (chunk) => chunks.push(chunk));
-  child.stderr.on("data", (chunk) => errors.push(chunk));
-  child.stdin.end(payload);
-  await new Promise((resolve, reject) => {
-    child.on("error", reject);
-    child.on("close", (code) => code === 0 ? resolve() : reject(new Error("exit " + code + ": " + Buffer.concat(errors).toString("utf8"))));
-  });
-  const got = Buffer.concat(chunks);
-  if (!got.equals(payload)) throw new Error("stdin roundtrip mismatch: " + got.length);
-}`,
-	},
-];
diff --git a/packages/benchmarks/src/families/timers.ts b/packages/benchmarks/src/families/timers.ts
deleted file mode 100644
index 785bf6e6f..000000000
--- a/packages/benchmarks/src/families/timers.ts
+++ /dev/null
@@ -1,55 +0,0 @@
-import type { BenchmarkOp } from "../lib/layers.js";
-
-/**
- * Timer cadence differential ops.
- *
- * Native timer analogues are intentionally honest rather than exact:
- * - setTimeout rows use std::thread::sleep cadence.
- * - setImmediate uses scheduler yield cadence. That does not model JS task queues,
- *   but it is closer than a CPU loop for measuring turn-taking overhead.
- */
-
-export const timersFamily: BenchmarkOp[] = [
-	{
-		family: "timers",
-		name: "settimeout_zero_x100",
-		nativeOp: "sleep_timer",
-		nativeArgs: ["--timer-count", "100", "--sleep-ns", "0"],
-		fileLine: "crates/execution/src/node_import_cache.rs:4750",
-		reproducer: "100 chained setTimeout(0) awaits inside VM",
-		program: `async () => {
-  for (let k = 0; k < 100; k++) {
-    await new Promise((resolve) => setTimeout(resolve, 0));
-  }
-}`,
-	},
-	{
-		family: "timers",
-		name: "settimeout_1ms_x50",
-		nativeOp: "sleep_timer",
-		nativeArgs: ["--timer-count", "50", "--sleep-ns", "1000000"],
-		fileLine: "crates/execution/src/node_import_cache.rs:4750",
-		reproducer: "50 chained setTimeout(1) awaits inside VM",
-		program: `async () => {
-  for (let k = 0; k < 50; k++) {
-    await new Promise((resolve) => setTimeout(resolve, 1));
-  }
-}`,
-	},
-	{
-		family: "timers",
-		name: "setimmediate_x1000",
-		nativeOp: "yield_loop",
-		nativeArgs: ["--timer-count", "1000"],
-		fileLine: "crates/execution/src/node_import_cache.rs:4750",
-		reproducer: "1000 chained setImmediate awaits inside VM, falling back to setTimeout(0)",
-		program: `async () => {
-  const schedule = typeof setImmediate === "function"
-    ? setImmediate
-    : (resolve) => setTimeout(resolve, 0);
-  for (let k = 0; k < 1000; k++) {
-    await new Promise((resolve) => schedule(resolve));
-  }
-}`,
-	},
-];
diff --git a/packages/benchmarks/src/focused/concurrency-common.ts b/packages/benchmarks/src/focused/concurrency-common.ts
deleted file mode 100644
index cf8621303..000000000
--- a/packages/benchmarks/src/focused/concurrency-common.ts
+++ /dev/null
@@ -1,476 +0,0 @@
-import { existsSync, readFileSync } from "node:fs";
-import { join } from "node:path";
-import { fileURLToPath } from "node:url";
-import type { NodeRuntimeResourceSnapshot } from "@secure-exec/core";
-import { round, stats, type Stats } from "../lib/perf-utils.js";
-import {
-	formatPacificIso,
-	prewarmBenchVm,
-	resolveBenchSidecarProvenance,
-	type BenchVm,
-	type SidecarBinaryProvenance,
-} from "../lib/vm.js";
-
-export const DEFAULT_CONCURRENCY_COUNTS = [1, 4, 8] as const;
-export const DEFAULT_DURATION_MS = 5_000;
-export const DEFAULT_TCP_WARMUP = 5;
-export const DEFAULT_FS_WARMUP = 25;
-export const FS_WRITE_SMALL_BYTES = 4 * 1024;
-
-export interface GuestLoopResult {
-	op: "tcp_echo_small" | "fs_write_small" | "busy_interference";
-	durationMs: number;
-	ops: number;
-	verifiedOps: number;
-	samplesMs?: number[];
-	latencyMs?: Stats;
-	rawSampleCount?: number;
-	payloadBytes?: number;
-	writeBytes?: number;
-}
-
-export interface ParticipantResult {
-	index: number;
-	ops: number;
-	durationMs: number;
-	opsPerSec: number;
-	latencyMs: Stats;
-	resourceSnapshot?: NodeRuntimeResourceSnapshot;
-	sidecarVmHwmBytes?: number;
-	rawSampleCount: number;
-}
-
-export interface ConcurrencyRow {
-	n: number;
-	durationMs: number;
-	aggregateOps: number;
-	aggregateOpsPerSec: number;
-	meanParticipantOpsPerSec: number;
-	minParticipantOpsPerSec: number;
-	maxParticipantOpsPerSec: number;
-	meanP50Ms: number;
-	meanP95Ms: number;
-	maxP95Ms: number;
-	scaling: {
-		idealScaling: 1;
-		throughputVsN1: number;
-		measuredOfIdeal: number;
-	};
-	participants: ParticipantResult[];
-}
-
-export interface RegressionRow {
-	rowKey: string;
-	metric: string;
-	value: number;
-	unit: string;
-}
-
-const REPO_ROOT = fileURLToPath(new URL("../../../..", import.meta.url));
-const MATRIX_PATH = join(REPO_ROOT, "packages/benchmarks/results/latency-matrix.json");
-
-const PREWARM_OP = {
-	family: "focused",
-	name: "concurrency-prewarm",
-	fileLine: "packages/benchmarks/src/focused/concurrency-common.ts",
-	reproducer: "guest node prewarm for focused concurrency lanes",
-	program: "async () => {}",
-};
-
-export function generatedAtPacific(): string {
-	return formatPacificIso(new Date());
-}
-
-export function benchmarkProvenance(): {
-	generatedAt: string;
-	sidecar: SidecarBinaryProvenance;
-} {
-	return {
-		generatedAt: generatedAtPacific(),
-		sidecar: resolveBenchSidecarProvenance(),
-	};
-}
-
-export async function prewarmConcurrencyVm(vm: BenchVm): Promise<void> {
-	await prewarmBenchVm(vm, PREWARM_OP);
-}
-
-export function parseCounts(value: string | undefined): number[] {
-	if (!value) return [...DEFAULT_CONCURRENCY_COUNTS];
-	const counts = value
-		.split(",")
-		.map((part) => Number(part.trim()))
-		.filter((n) => Number.isInteger(n) && n > 0);
-	if (counts.length === 0) {
-		throw new Error(`invalid concurrency counts: ${JSON.stringify(value)}`);
-	}
-	if (Math.max(...counts) > 8) {
-		throw new Error(`concurrency count exceeds bounded max 8: ${Math.max(...counts)}`);
-	}
-	return counts;
-}
-
-export function envNumber(name: string, fallback: number): number {
-	const raw = process.env[name];
-	if (raw === undefined || raw === "") return fallback;
-	const value = Number(raw);
-	if (!Number.isFinite(value) || value <= 0) {
-		throw new Error(`${name} must be a positive number, got ${JSON.stringify(raw)}`);
-	}
-	return value;
-}
-
-export async function writeGuestProgram(
-	vm: BenchVm,
-	path: string,
-	source: string,
-): Promise<void> {
-	await vm.writeFile(path, source);
-}
-
-export async function runGuestJsonProgram(
-	vm: BenchVm,
-	path: string,
-	env: Record<string, string>,
-): Promise<GuestLoopResult> {
-	const result = await vm.spawnNodeCapture(path, env);
-	if (result.exitCode !== 0) {
-		throw new Error(
-			`guest program ${path} exited ${result.exitCode}\nstdout:\n${result.stdout}\nstderr:\n${result.stderr}`,
-		);
-	}
-	const parsed = JSON.parse(result.stdout) as GuestLoopResult;
-	if (parsed.ops !== parsed.verifiedOps) {
-		throw new Error(
-			`${path} verification mismatch: ops=${parsed.ops} verified=${parsed.verifiedOps}`,
-		);
-	}
-	const sampleCount = parsed.rawSampleCount ?? parsed.samplesMs?.length ?? 0;
-	if (sampleCount <= 0) {
-		throw new Error(`${path} produced no latency samples`);
-	}
-	if (parsed.ops <= 0) {
-		throw new Error(`${path} produced no operations`);
-	}
-	return parsed;
-}
-
-export async function participantFromLoop(
-	index: number,
-	vm: BenchVm,
-	loop: GuestLoopResult,
-): Promise<ParticipantResult> {
-	const pid = vm.sidecarPid();
-	const sampleCount = loop.rawSampleCount ?? loop.samplesMs?.length ?? 0;
-	return {
-		index,
-		ops: loop.ops,
-		durationMs: round(loop.durationMs),
-		opsPerSec: round((loop.ops / loop.durationMs) * 1000, 2),
-		latencyMs: loop.latencyMs ?? stats(loop.samplesMs ?? []),
-		resourceSnapshot: await vm.getResourceSnapshot(),
-		sidecarVmHwmBytes: pid === null ? undefined : readVmHwmBytes(pid),
-		rawSampleCount: sampleCount,
-	};
-}
-
-export function buildConcurrencyRow(
-	n: number,
-	durationMs: number,
-	participants: ParticipantResult[],
-	baselineOpsPerSec: number,
-): ConcurrencyRow {
-	const aggregateOps = participants.reduce((sum, row) => sum + row.ops, 0);
-	const aggregateOpsPerSec = round(
-		participants.reduce((sum, row) => sum + row.opsPerSec, 0),
-		2,
-	);
-	const participantOps = participants.map((row) => row.opsPerSec);
-	const p50s = participants.map((row) => row.latencyMs.p50);
-	const p95s = participants.map((row) => row.latencyMs.p95);
-	const throughputVsN1 = round(aggregateOpsPerSec / baselineOpsPerSec, 2);
-	return {
-		n,
-		durationMs,
-		aggregateOps,
-		aggregateOpsPerSec,
-		meanParticipantOpsPerSec: round(mean(participantOps), 2),
-		minParticipantOpsPerSec: round(Math.min(...participantOps), 2),
-		maxParticipantOpsPerSec: round(Math.max(...participantOps), 2),
-		meanP50Ms: round(mean(p50s), 2),
-		meanP95Ms: round(mean(p95s), 2),
-		maxP95Ms: round(Math.max(...p95s), 2),
-		scaling: {
-			idealScaling: 1,
-			throughputVsN1,
-			measuredOfIdeal: round(aggregateOpsPerSec / (baselineOpsPerSec * n), 2),
-		},
-		participants,
-	};
-}
-
-export function concurrencyRegressionRows(
-	benchmark: "concurrency-vms" | "concurrent-processes",
-	rows: ConcurrencyRow[],
-): RegressionRow[] {
-	return rows.flatMap((row) => [
-		{
-			rowKey: `${benchmark}.n${row.n}.aggregate_ops_per_sec`,
-			metric: "aggregateOpsPerSec",
-			value: row.aggregateOpsPerSec,
-			unit: "ops/s",
-		},
-		{
-			rowKey: `${benchmark}.n${row.n}.mean_p95_ms`,
-			metric: "meanP95Ms",
-			value: row.meanP95Ms,
-			unit: "ms",
-		},
-		{
-			rowKey: `${benchmark}.n${row.n}.scaling_of_ideal`,
-			metric: "measuredOfIdeal",
-			value: row.scaling.measuredOfIdeal,
-			unit: "ratio",
-		},
-	]);
-}
-
-export function assertMatrixBallpark(
-	op: "fs_write_small" | "tcp_echo_small",
-	observedP50Ms: number,
-	options: { multiplier: number; fallbackCeilingMs: number },
-): void {
-	const matrixP50 = readMatrixGuestP50(op);
-	const threshold = matrixP50 === undefined
-		? options.fallbackCeilingMs
-		: matrixP50 * options.multiplier;
-	if (observedP50Ms > threshold) {
-		throw new Error(
-			`${op} N=1 p50 ${observedP50Ms}ms exceeds sanity ceiling ${round(
-				threshold,
-				2,
-			)}ms${matrixP50 === undefined ? " (fallback)" : ` (matrix ${matrixP50}ms x ${options.multiplier})`}`,
-		);
-	}
-	console.error(
-		`  sanity ${op}: N=1 p50=${observedP50Ms}ms <= ${round(threshold, 2)}ms${
-			matrixP50 === undefined ? " fallback ceiling" : ` (${options.multiplier}x matrix ${matrixP50}ms)`
-		}`,
-	);
-}
-
-export function tcpEchoSmallLoopProgram(): string {
-	return `
-import net from "node:net";
-
-const durationMs = Number(process.env.BENCH_DURATION_MS || ${DEFAULT_DURATION_MS});
-const warmup = Number(process.env.BENCH_WARMUP || ${DEFAULT_TCP_WARMUP});
-const payload = Buffer.from("secure-exec-tcp-echo");
-const samplesMs = [];
-const now = () => Number(process.hrtime.bigint()) / 1e6;
-
-async function once() {
-  const body = await new Promise((resolve, reject) => {
-    const server = net.createServer((socket) => {
-      const serverChunks = [];
-      let serverReceived = 0;
-      socket.on("data", (chunk) => {
-        serverChunks.push(Buffer.from(chunk));
-        serverReceived += chunk.length;
-        if (serverReceived >= payload.length) {
-          socket.end(Buffer.concat(serverChunks));
-        }
-      });
-      socket.on("error", reject);
-    });
-    server.on("error", reject);
-    server.listen(0, "127.0.0.1", () => {
-      const address = server.address();
-      if (!address || typeof address === "string") {
-        reject(new Error("tcp echo server did not bind to a TCP port"));
-        return;
-      }
-      const socket = net.connect(address.port, "127.0.0.1");
-      const chunks = [];
-      let received = 0;
-      socket.on("connect", () => socket.write(payload));
-      socket.on("data", (chunk) => {
-        chunks.push(Buffer.from(chunk));
-        received += chunk.length;
-      });
-      socket.on("error", reject);
-      socket.on("close", () => {
-        server.close((error) => {
-          if (error) reject(error);
-          else resolve(Buffer.concat(chunks));
-        });
-      });
-    });
-  });
-  if (!Buffer.from(body).equals(payload)) {
-    throw new Error("bad tcp echo payload: " + Buffer.from(body).toString("hex"));
-  }
-}
-
-for (let i = 0; i < warmup; i++) await once();
-const start = now();
-const deadline = start + durationMs;
-while (now() < deadline) {
-  const opStart = now();
-  await once();
-  samplesMs.push(now() - opStart);
-}
-const elapsed = now() - start;
-process.stdout.write(JSON.stringify({
-  op: "tcp_echo_small",
-  durationMs: elapsed,
-  ops: samplesMs.length,
-  verifiedOps: samplesMs.length,
-  payloadBytes: payload.length,
-  samplesMs,
-}));
-`;
-}
-
-export function fsWriteSmallLoopProgram(): string {
-	return `
-import fs from "node:fs";
-
-const durationMs = Number(process.env.BENCH_DURATION_MS || ${DEFAULT_DURATION_MS});
-const warmup = Number(process.env.BENCH_WARMUP || ${DEFAULT_FS_WARMUP});
-const processIndex = process.env.BENCH_PROCESS_INDEX || "0";
-const payload = Buffer.alloc(${FS_WRITE_SMALL_BYTES}, 7);
-const path = "/tmp/focused-fs-write-small-" + process.pid + "-" + processIndex + ".bin";
-const samplesMs = [];
-const now = () => Number(process.hrtime.bigint()) / 1e6;
-const round = (n) => Math.round(n * 100) / 100;
-function summarize(values) {
-  const sorted = [...values].sort((a, b) => a - b);
-  const percentile = (p) => sorted[Math.max(0, Math.ceil((p / 100) * sorted.length) - 1)];
-  return {
-    mean: round(values.reduce((sum, value) => sum + value, 0) / values.length),
-    p50: round(percentile(50)),
-    p95: round(percentile(95)),
-    p99: round(percentile(99)),
-    min: round(sorted[0]),
-    max: round(sorted[sorted.length - 1]),
-  };
-}
-
-function once(iteration) {
-  payload[0] = iteration & 255;
-  fs.writeFileSync(path, payload);
-}
-
-for (let i = 0; i < warmup; i++) once(i);
-const start = now();
-const deadline = start + durationMs;
-while (now() < deadline) {
-  const opStart = now();
-  once(samplesMs.length);
-  samplesMs.push(now() - opStart);
-}
-const stat = fs.statSync(path);
-fs.unlinkSync(path);
-if (stat.size !== payload.length) {
-  throw new Error("bad fs write size: " + stat.size);
-}
-process.stdout.write(JSON.stringify({
-  op: "fs_write_small",
-  durationMs: now() - start,
-  ops: samplesMs.length,
-  verifiedOps: samplesMs.length,
-  writeBytes: payload.length,
-  latencyMs: summarize(samplesMs),
-  rawSampleCount: samplesMs.length,
-}));
-`;
-}
-
-export function busyInterferenceProgram(): string {
-	return `
-import fs from "node:fs";
-
-const durationMs = Number(process.env.BENCH_DURATION_MS || ${DEFAULT_DURATION_MS});
-const payload = Buffer.alloc(${FS_WRITE_SMALL_BYTES}, 3);
-const path = "/tmp/focused-busy-interference-" + process.pid + ".bin";
-const samplesMs = [];
-const now = () => Number(process.hrtime.bigint()) / 1e6;
-const round = (n) => Math.round(n * 100) / 100;
-function summarize(values) {
-  const sorted = [...values].sort((a, b) => a - b);
-  const percentile = (p) => sorted[Math.max(0, Math.ceil((p / 100) * sorted.length) - 1)];
-  return {
-    mean: round(values.reduce((sum, value) => sum + value, 0) / values.length),
-    p50: round(percentile(50)),
-    p95: round(percentile(95)),
-    p99: round(percentile(99)),
-    min: round(sorted[0]),
-    max: round(sorted[sorted.length - 1]),
-  };
-}
-
-function spin(ms) {
-  const end = now() + ms;
-  let x = 0;
-  while (now() < end) x = (x + 1) % 1000003;
-  return x;
-}
-
-const start = now();
-const deadline = start + durationMs;
-let writes = 0;
-while (now() < deadline) {
-  spin(5);
-  const opStart = now();
-  for (let i = 0; i < 8; i++) {
-    payload[0] = (writes + i) & 255;
-    fs.writeFileSync(path, payload);
-  }
-  writes += 8;
-  samplesMs.push(now() - opStart);
-}
-const stat = fs.statSync(path);
-fs.unlinkSync(path);
-if (stat.size !== payload.length) {
-  throw new Error("bad busy write size: " + stat.size);
-}
-process.stdout.write(JSON.stringify({
-  op: "busy_interference",
-  durationMs: now() - start,
-  ops: writes,
-  verifiedOps: writes,
-  writeBytes: payload.length,
-  latencyMs: summarize(samplesMs),
-  rawSampleCount: samplesMs.length,
-}));
-`;
-}
-
-function readMatrixGuestP50(op: string): number | undefined {
-	if (!existsSync(MATRIX_PATH)) return undefined;
-	try {
-		const parsed = JSON.parse(readFileSync(MATRIX_PATH, "utf8")) as {
-			latency?: Array<{ op?: string; layers?: { guest?: { p50?: number } } }>;
-		};
-		const row = parsed.latency?.find((entry) => entry.op === op);
-		const p50 = row?.layers?.guest?.p50;
-		return typeof p50 === "number" && Number.isFinite(p50) ? p50 : undefined;
-	} catch {
-		return undefined;
-	}
-}
-
-function readVmHwmBytes(pid: number): number | undefined {
-	try {
-		const status = readFileSync(`/proc/${pid}/status`, "utf8");
-		const match = status.match(/^VmHWM:\s+(\d+)\s+kB/m);
-		return match ? Number(match[1]) * 1024 : undefined;
-	} catch {
-		return undefined;
-	}
-}
-
-function mean(values: number[]): number {
-	return values.reduce((sum, value) => sum + value, 0) / values.length;
-}
diff --git a/packages/benchmarks/src/focused/concurrency-vms.bench.ts b/packages/benchmarks/src/focused/concurrency-vms.bench.ts
deleted file mode 100644
index e1fcad2c2..000000000
--- a/packages/benchmarks/src/focused/concurrency-vms.bench.ts
+++ /dev/null
@@ -1,116 +0,0 @@
-import { createBenchVm, formatSidecarProvenance, type BenchVm } from "../lib/vm.js";
-import { getHardware, printTable } from "../lib/perf-utils.js";
-import {
-	assertMatrixBallpark,
-	benchmarkProvenance,
-	buildConcurrencyRow,
-	concurrencyRegressionRows,
-	envNumber,
-	parseCounts,
-	participantFromLoop,
-	prewarmConcurrencyVm,
-	runGuestJsonProgram,
-	tcpEchoSmallLoopProgram,
-	writeGuestProgram,
-	type ConcurrencyRow,
-} from "./concurrency-common.js";
-
-const PROGRAM_PATH = "/tmp/focused-concurrency-vms.mjs";
-
-async function runRow(n: number, durationMs: number): Promise<ConcurrencyRow> {
-	const vms: BenchVm[] = [];
-	try {
-		for (let i = 0; i < n; i++) {
-			const vm = await createBenchVm();
-			await prewarmConcurrencyVm(vm);
-			await writeGuestProgram(vm, PROGRAM_PATH, tcpEchoSmallLoopProgram());
-			vms.push(vm);
-		}
-		const loops = await Promise.all(
-			vms.map((vm, index) =>
-				runGuestJsonProgram(vm, PROGRAM_PATH, {
-					BENCH_DURATION_MS: String(durationMs),
-					BENCH_PROCESS_INDEX: String(index),
-				}),
-			),
-		);
-		const participants = await Promise.all(
-			loops.map((loop, index) => participantFromLoop(index, vms[index], loop)),
-		);
-		return buildConcurrencyRow(n, durationMs, participants, 1);
-	} finally {
-		await Promise.allSettled(vms.map((vm) => vm.dispose()));
-	}
-}
-
-async function main(): Promise<void> {
-	const counts = parseCounts(process.env.BENCH_CONCURRENCY_COUNTS);
-	const durationMs = envNumber("BENCH_CONCURRENCY_DURATION_MS", 5_000);
-	const hardware = getHardware();
-	const provenance = benchmarkProvenance();
-	console.error("=== Concurrency VMs Focused Benchmark ===");
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(formatSidecarProvenance(provenance.sidecar));
-	console.error(`Counts: ${counts.join(",")} | duration: ${durationMs}ms`);
-
-	const rows: ConcurrencyRow[] = [];
-	let baselineOpsPerSec: number | undefined;
-	for (const n of counts) {
-		const provisional = await runRow(n, durationMs);
-		if (baselineOpsPerSec === undefined) {
-			baselineOpsPerSec = provisional.aggregateOpsPerSec;
-		}
-		const row = buildConcurrencyRow(
-			n,
-			durationMs,
-			provisional.participants,
-			baselineOpsPerSec,
-		);
-		if (n === 1) {
-			assertMatrixBallpark("tcp_echo_small", row.meanP50Ms, {
-				multiplier: 5,
-				fallbackCeilingMs: 100,
-			});
-		}
-		rows.push(row);
-		console.error(
-			`  N=${n}: ops/s=${row.aggregateOpsPerSec} mean.p95=${row.meanP95Ms}ms scaling=${row.scaling.measuredOfIdeal}x ideal`,
-		);
-	}
-
-	printTable(
-		["N", "ops/s", "mean p50", "mean p95", "max p95", "vs N=1", "of ideal"],
-		rows.map((row) => [
-			row.n,
-			row.aggregateOpsPerSec,
-			`${row.meanP50Ms}ms`,
-			`${row.meanP95Ms}ms`,
-			`${row.maxP95Ms}ms`,
-			`${row.scaling.throughputVsN1}x`,
-			`${row.scaling.measuredOfIdeal}x`,
-		]),
-	);
-
-	console.log(
-		JSON.stringify(
-			{
-				benchmark: "concurrency-vms",
-				...provenance,
-				hardware,
-				op: "tcp_echo_small",
-				counts,
-				durationMs,
-				rows,
-				regressionRows: concurrencyRegressionRows("concurrency-vms", rows),
-			},
-			null,
-			2,
-		),
-	);
-}
-
-main().catch((error) => {
-	console.error(error);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/src/focused/concurrent-processes.bench.ts b/packages/benchmarks/src/focused/concurrent-processes.bench.ts
deleted file mode 100644
index 08fb42e28..000000000
--- a/packages/benchmarks/src/focused/concurrent-processes.bench.ts
+++ /dev/null
@@ -1,104 +0,0 @@
-import { createBenchVm, formatSidecarProvenance } from "../lib/vm.js";
-import { getHardware, printTable } from "../lib/perf-utils.js";
-import {
-	assertMatrixBallpark,
-	benchmarkProvenance,
-	buildConcurrencyRow,
-	concurrencyRegressionRows,
-	envNumber,
-	fsWriteSmallLoopProgram,
-	parseCounts,
-	participantFromLoop,
-	prewarmConcurrencyVm,
-	runGuestJsonProgram,
-	writeGuestProgram,
-	type ConcurrencyRow,
-} from "./concurrency-common.js";
-
-const PROGRAM_PATH = "/tmp/focused-concurrent-processes.mjs";
-
-async function main(): Promise<void> {
-	const counts = parseCounts(process.env.BENCH_PROCESS_COUNTS);
-	const durationMs = envNumber("BENCH_PROCESS_DURATION_MS", 5_000);
-	const hardware = getHardware();
-	const provenance = benchmarkProvenance();
-	console.error("=== Concurrent Processes Focused Benchmark ===");
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(formatSidecarProvenance(provenance.sidecar));
-	console.error(`Counts: ${counts.join(",")} | duration: ${durationMs}ms`);
-
-	const vm = await createBenchVm();
-	try {
-		await prewarmConcurrencyVm(vm);
-		await writeGuestProgram(vm, PROGRAM_PATH, fsWriteSmallLoopProgram());
-		const rows: ConcurrencyRow[] = [];
-		let baselineOpsPerSec: number | undefined;
-		for (const n of counts) {
-			const loops = await Promise.all(
-				Array.from({ length: n }, (_, index) =>
-					runGuestJsonProgram(vm, PROGRAM_PATH, {
-						BENCH_DURATION_MS: String(durationMs),
-						BENCH_PROCESS_INDEX: String(index),
-					}),
-				),
-			);
-			const participants = await Promise.all(
-				loops.map((loop, index) => participantFromLoop(index, vm, loop)),
-			);
-			const provisional = buildConcurrencyRow(n, durationMs, participants, 1);
-			if (baselineOpsPerSec === undefined) {
-				baselineOpsPerSec = provisional.aggregateOpsPerSec;
-			}
-			const row = buildConcurrencyRow(n, durationMs, participants, baselineOpsPerSec);
-			if (n === 1) {
-				assertMatrixBallpark("fs_write_small", row.meanP50Ms, {
-					multiplier: 5,
-					fallbackCeilingMs: 5,
-				});
-			}
-			rows.push(row);
-			console.error(
-				`  N=${n}: ops/s=${row.aggregateOpsPerSec} mean.p95=${row.meanP95Ms}ms scaling=${row.scaling.measuredOfIdeal}x ideal`,
-			);
-		}
-
-		printTable(
-			["N", "ops/s", "mean p50", "mean p95", "max p95", "vs N=1", "of ideal"],
-			rows.map((row) => [
-				row.n,
-				row.aggregateOpsPerSec,
-				`${row.meanP50Ms}ms`,
-				`${row.meanP95Ms}ms`,
-				`${row.maxP95Ms}ms`,
-				`${row.scaling.throughputVsN1}x`,
-				`${row.scaling.measuredOfIdeal}x`,
-			]),
-		);
-
-		console.log(
-			JSON.stringify(
-				{
-					benchmark: "concurrent-processes",
-					...provenance,
-					hardware,
-					op: "fs_write_small",
-					counts,
-					durationMs,
-					rows,
-					vmResourceSnapshot: await vm.getResourceSnapshot(),
-					regressionRows: concurrencyRegressionRows("concurrent-processes", rows),
-				},
-				null,
-				2,
-			),
-		);
-	} finally {
-		await vm.dispose();
-	}
-}
-
-main().catch((error) => {
-	console.error(error);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/src/focused/dns-lookup-floor.bench.ts b/packages/benchmarks/src/focused/dns-lookup-floor.bench.ts
deleted file mode 100644
index 0b47a8c4b..000000000
--- a/packages/benchmarks/src/focused/dns-lookup-floor.bench.ts
+++ /dev/null
@@ -1,455 +0,0 @@
-/**
- * Focused DNS lookup floor benchmark.
- *
- * Splits the broad dns/* rows into warm single lookup, sequential repeated
- * lookup, concurrent same-host lookup, and fresh-process lookup shapes.
- */
-
-import { execFileSync } from "node:child_process";
-import dns from "node:dns/promises";
-import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { createBenchSidecar, createBenchVm, type BenchVm } from "../lib/vm.js";
-import { getHardware, printTable, round, stats } from "../lib/perf-utils.js";
-
-type DnsWorkload = "single" | "sequential" | "concurrent" | "coldProcess";
-
-interface DnsRow {
-	id: string;
-	workload: DnsWorkload;
-	hostname: string;
-	lookupCount: number;
-	concurrency: number;
-	description: string;
-}
-
-interface DnsRunResult {
-	totalMs: number[];
-	firstLookupMs?: number[];
-	restLookupMs?: number[];
-}
-
-interface DnsRowResult {
-	id: string;
-	workload: DnsWorkload;
-	hostname: string;
-	lookupCount: number;
-	concurrency: number;
-	description: string;
-	iterations: number;
-	warmup: number;
-	host: ReturnType<typeof stats>;
-	guest: ReturnType<typeof stats>;
-	guestVsHostRatio: number;
-	guestMsPerLookup: number;
-	hostMsPerLookup: number;
-	firstLookup?: {
-		host: ReturnType<typeof stats>;
-		guest: ReturnType<typeof stats>;
-	};
-	restLookup?: {
-		host: ReturnType<typeof stats>;
-		guest: ReturnType<typeof stats>;
-	};
-	raw: {
-		hostMs: number[];
-		guestMs: number[];
-		hostFirstLookupMs?: number[];
-		guestFirstLookupMs?: number[];
-		hostRestLookupMs?: number[];
-		guestRestLookupMs?: number[];
-	};
-}
-
-function defaultRows(): DnsRow[] {
-	return [
-		{
-			id: "single_localhost",
-			workload: "single",
-			hostname: "localhost",
-			lookupCount: 1,
-			concurrency: 1,
-			description: "one warm same-process dns.lookup('localhost')",
-		},
-		{
-			id: "sequential_same_2",
-			workload: "sequential",
-			hostname: "localhost",
-			lookupCount: 2,
-			concurrency: 1,
-			description: "two sequential same-process dns.lookup('localhost') calls",
-		},
-		{
-			id: "sequential_same_8",
-			workload: "sequential",
-			hostname: "localhost",
-			lookupCount: 8,
-			concurrency: 1,
-			description: "eight sequential same-process dns.lookup('localhost') calls",
-		},
-		{
-			id: "sequential_same_32",
-			workload: "sequential",
-			hostname: "localhost",
-			lookupCount: 32,
-			concurrency: 1,
-			description: "thirty-two sequential same-process dns.lookup('localhost') calls",
-		},
-		{
-			id: "concurrent_same_4",
-			workload: "concurrent",
-			hostname: "localhost",
-			lookupCount: 4,
-			concurrency: 4,
-			description: "four concurrent same-host dns.lookup('localhost') calls",
-		},
-		{
-			id: "concurrent_same_16",
-			workload: "concurrent",
-			hostname: "localhost",
-			lookupCount: 16,
-			concurrency: 16,
-			description: "sixteen concurrent same-host dns.lookup('localhost') calls",
-		},
-		{
-			id: "cold_process_single",
-			workload: "coldProcess",
-			hostname: "localhost",
-			lookupCount: 1,
-			concurrency: 1,
-			description: "fresh Node process for one dns.lookup('localhost')",
-		},
-	];
-}
-
-function parseArgs(): { iterations: number; warmup: number; rows: DnsRow[] } {
-	const value = (name: string) =>
-		process.argv.find((arg) => arg.startsWith(`--${name}=`))?.split("=")[1];
-	const iterations = Number(value("iterations") ?? 10);
-	const warmup = Number(value("warmup") ?? 2);
-	const selected = value("rows") ?? value("cases");
-	const rows = selected
-		? selected
-				.split(",")
-				.map((id) => id.trim())
-				.filter(Boolean)
-				.map(rowForId)
-		: defaultRows();
-	if (iterations < 1 || warmup < 0 || rows.length === 0) {
-		throw new Error("invalid args; expected --iterations>=1 --warmup>=0 --rows=<row ids>");
-	}
-	return { iterations, warmup, rows };
-}
-
-function rowForId(id: string): DnsRow {
-	const row = defaultRows().find((candidate) => candidate.id === id);
-	if (row) return row;
-	const sequential = /^sequential_same_(\d+)$/.exec(id);
-	if (sequential) {
-		const lookupCount = Number(sequential[1]);
-		return {
-			id,
-			workload: "sequential",
-			hostname: "localhost",
-			lookupCount,
-			concurrency: 1,
-			description: `${lookupCount} sequential same-process dns.lookup('localhost') calls`,
-		};
-	}
-	const concurrent = /^concurrent_same_(\d+)$/.exec(id);
-	if (concurrent) {
-		const lookupCount = Number(concurrent[1]);
-		return {
-			id,
-			workload: "concurrent",
-			hostname: "localhost",
-			lookupCount,
-			concurrency: lookupCount,
-			description: `${lookupCount} concurrent same-host dns.lookup('localhost') calls`,
-		};
-	}
-	throw new Error(`unknown dns-lookup-floor row: ${id}`);
-}
-
-function nowMs(start: number): number {
-	return performance.now() - start;
-}
-
-async function runDnsRow(row: DnsRow): Promise<{ firstLookupMs?: number; restLookupMs?: number }> {
-	if (row.workload === "single") {
-		await dns.lookup(row.hostname);
-		return {};
-	}
-	if (row.workload === "sequential") {
-		const firstStart = performance.now();
-		await dns.lookup(row.hostname);
-		const firstLookupMs = performance.now() - firstStart;
-		let restLookupMs = 0;
-		for (let i = 1; i < row.lookupCount; i++) {
-			const start = performance.now();
-			await dns.lookup(row.hostname);
-			restLookupMs += performance.now() - start;
-		}
-		return { firstLookupMs, restLookupMs };
-	}
-	if (row.workload === "concurrent") {
-		await Promise.all(Array.from({ length: row.lookupCount }, () => dns.lookup(row.hostname)));
-		return {};
-	}
-	throw new Error(`runDnsRow does not support ${row.workload}`);
-}
-
-async function runHost(row: DnsRow, iterations: number, warmup: number): Promise<DnsRunResult> {
-	if (row.workload === "coldProcess") return runHostColdProcess(row, iterations, warmup);
-	const totalMs: number[] = [];
-	const firstLookupMs: number[] = [];
-	const restLookupMs: number[] = [];
-	for (let i = 0; i < warmup + iterations; i++) {
-		const start = performance.now();
-		const detail = await runDnsRow(row);
-		const elapsed = nowMs(start);
-		if (i >= warmup) {
-			totalMs.push(elapsed);
-			if (detail.firstLookupMs !== undefined) firstLookupMs.push(detail.firstLookupMs);
-			if (detail.restLookupMs !== undefined) restLookupMs.push(detail.restLookupMs);
-		}
-	}
-	return {
-		totalMs,
-		firstLookupMs: firstLookupMs.length > 0 ? firstLookupMs : undefined,
-		restLookupMs: restLookupMs.length > 0 ? restLookupMs : undefined,
-	};
-}
-
-function coldProcessSource(hostname: string): string {
-	return `
-const dns = await import("node:dns/promises");
-const result = await dns.lookup(${JSON.stringify(hostname)});
-if (!result.address) throw new Error("no address");
-`;
-}
-
-function runHostColdProcess(row: DnsRow, iterations: number, warmup: number): DnsRunResult {
-	const dir = mkdtempSync(join(tmpdir(), "agentos-dns-floor-host-"));
-	const file = join(dir, "lookup.mjs");
-	try {
-		writeFileSync(file, coldProcessSource(row.hostname));
-		const totalMs: number[] = [];
-		for (let i = 0; i < warmup + iterations; i++) {
-			const start = performance.now();
-			execFileSync("node", [file], { stdio: "ignore" });
-			const elapsed = nowMs(start);
-			if (i >= warmup) totalMs.push(elapsed);
-		}
-		return { totalMs };
-	} finally {
-		rmSync(dir, { recursive: true, force: true });
-	}
-}
-
-function guestScript(row: DnsRow, iterations: number, warmup: number): string {
-	return `
-import dns from "node:dns/promises";
-const row = ${JSON.stringify(row)};
-const iterations = ${iterations};
-const warmup = ${warmup};
-const totalMs = [];
-const firstLookupMs = [];
-const restLookupMs = [];
-const now = () => Number(process.hrtime.bigint()) / 1e6;
-async function runDnsRow() {
-  if (row.workload === "single") {
-    await dns.lookup(row.hostname);
-    return {};
-  }
-  if (row.workload === "sequential") {
-    const firstStart = now();
-    await dns.lookup(row.hostname);
-    const firstLookupMs = now() - firstStart;
-    let restLookupMs = 0;
-    for (let i = 1; i < row.lookupCount; i++) {
-      const start = now();
-      await dns.lookup(row.hostname);
-      restLookupMs += now() - start;
-    }
-    return { firstLookupMs, restLookupMs };
-  }
-  if (row.workload === "concurrent") {
-    await Promise.all(Array.from({ length: row.lookupCount }, () => dns.lookup(row.hostname)));
-    return {};
-  }
-  throw new Error("unsupported guest workload " + row.workload);
-}
-for (let i = 0; i < warmup + iterations; i++) {
-  const start = now();
-  const detail = await runDnsRow();
-  const elapsed = now() - start;
-  if (i >= warmup) {
-    totalMs.push(elapsed);
-    if (detail.firstLookupMs !== undefined) firstLookupMs.push(detail.firstLookupMs);
-    if (detail.restLookupMs !== undefined) restLookupMs.push(detail.restLookupMs);
-  }
-}
-process.stdout.write(JSON.stringify({
-  totalMs,
-  firstLookupMs: firstLookupMs.length > 0 ? firstLookupMs : undefined,
-  restLookupMs: restLookupMs.length > 0 ? restLookupMs : undefined,
-}));
-`;
-}
-
-async function runGuest(
-	vm: BenchVm,
-	row: DnsRow,
-	iterations: number,
-	warmup: number,
-): Promise<DnsRunResult> {
-	if (row.workload === "coldProcess") return runGuestColdProcess(vm, row, iterations, warmup);
-	const path = `/tmp/dns-lookup-floor-${row.id}-${Date.now()}.mjs`;
-	await vm.writeFile(path, guestScript(row, iterations, warmup));
-	let stdout = "";
-	let stderr = "";
-	const proc = vm.spawn("node", [path], {
-		onStdout: (data) => {
-			stdout += Buffer.from(data).toString("utf8");
-		},
-		onStderr: (data) => {
-			stderr += Buffer.from(data).toString("utf8");
-		},
-	});
-	const code = await vm.waitProcess(proc.pid);
-	if (code !== 0) throw new Error(`guest dns row ${row.id} exited ${code}\n${stderr}`);
-	return JSON.parse(stdout) as DnsRunResult;
-}
-
-async function runGuestColdProcess(
-	vm: BenchVm,
-	row: DnsRow,
-	iterations: number,
-	warmup: number,
-): Promise<DnsRunResult> {
-	const path = `/tmp/dns-lookup-floor-cold-${Date.now()}.mjs`;
-	await vm.writeFile(path, coldProcessSource(row.hostname));
-	const totalMs: number[] = [];
-	for (let i = 0; i < warmup + iterations; i++) {
-		const start = performance.now();
-		const proc = vm.spawn("node", [path]);
-		const code = await vm.waitProcess(proc.pid);
-		const elapsed = nowMs(start);
-		if (code !== 0) throw new Error(`guest cold dns row ${row.id} exited ${code}`);
-		if (i >= warmup) totalMs.push(elapsed);
-	}
-	return { totalMs };
-}
-
-function maybeStats(samples: number[] | undefined): ReturnType<typeof stats> | undefined {
-	return samples && samples.length > 0 ? stats(samples) : undefined;
-}
-
-async function runCase(
-	vm: BenchVm,
-	row: DnsRow,
-	iterations: number,
-	warmup: number,
-): Promise<DnsRowResult> {
-	const hostRun = await runHost(row, iterations, warmup);
-	const guestRun = await runGuest(vm, row, iterations, warmup);
-	const host = stats(hostRun.totalMs);
-	const guest = stats(guestRun.totalMs);
-	const hostFirst = maybeStats(hostRun.firstLookupMs);
-	const guestFirst = maybeStats(guestRun.firstLookupMs);
-	const hostRest = maybeStats(hostRun.restLookupMs);
-	const guestRest = maybeStats(guestRun.restLookupMs);
-	return {
-		...row,
-		iterations,
-		warmup,
-		host,
-		guest,
-		guestVsHostRatio: host.p50 === 0 ? 0 : round(guest.p50 / host.p50),
-		guestMsPerLookup: round(guest.p50 / row.lookupCount),
-		hostMsPerLookup: round(host.p50 / row.lookupCount),
-		...(hostFirst && guestFirst ? { firstLookup: { host: hostFirst, guest: guestFirst } } : {}),
-		...(hostRest && guestRest ? { restLookup: { host: hostRest, guest: guestRest } } : {}),
-		raw: {
-			hostMs: hostRun.totalMs,
-			guestMs: guestRun.totalMs,
-			hostFirstLookupMs: hostRun.firstLookupMs,
-			guestFirstLookupMs: guestRun.firstLookupMs,
-			hostRestLookupMs: hostRun.restLookupMs,
-			guestRestLookupMs: guestRun.restLookupMs,
-		},
-	};
-}
-
-async function main(): Promise<void> {
-	const { iterations, warmup, rows } = parseArgs();
-	console.error("=== DNS Lookup Floor Benchmark ===");
-	const hardware = getHardware();
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(
-		`Iterations: ${iterations} (+ ${warmup} warmup), rows: ${rows.map((row) => row.id).join(",")}`,
-	);
-	const sidecar = await createBenchSidecar();
-	const vm = await createBenchVm({
-		sidecar,
-	});
-	try {
-		const results: DnsRowResult[] = [];
-		for (const row of rows) {
-			const result = await runCase(vm, row, iterations, warmup);
-			results.push(result);
-			console.error(
-				`  row=${row.id}: host.p50=${result.host.p50}ms guest.p50=${result.guest.p50}ms ratio=${result.guestVsHostRatio}x guest.ms/lookup=${result.guestMsPerLookup}`,
-			);
-		}
-		printTable(
-			[
-				"row",
-				"lookups",
-				"concurrency",
-				"host p50",
-				"guest p50",
-				"guest/host",
-				"guest ms/lookup",
-				"first guest",
-				"rest guest",
-			],
-			results.map((result) => [
-				result.id,
-				String(result.lookupCount),
-				String(result.concurrency),
-				`${result.host.p50}ms`,
-				`${result.guest.p50}ms`,
-				`${result.guestVsHostRatio}x`,
-				`${result.guestMsPerLookup}ms`,
-				result.firstLookup ? `${result.firstLookup.guest.p50}ms` : "n/a",
-				result.restLookup ? `${result.restLookup.guest.p50}ms` : "n/a",
-			]),
-		);
-		console.log(
-			JSON.stringify(
-				{
-					benchmark: "dns-lookup-floor",
-					generatedAt: new Date().toISOString(),
-					hardware,
-					iterations,
-					warmup,
-					rows: results,
-				},
-				null,
-				2,
-			),
-		);
-	} finally {
-		await vm.dispose();
-		await sidecar.dispose();
-	}
-}
-
-main().catch((error) => {
-	console.error(error);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/src/focused/echo.bench.ts b/packages/benchmarks/src/focused/echo.bench.ts
deleted file mode 100644
index 3a9b37379..000000000
--- a/packages/benchmarks/src/focused/echo.bench.ts
+++ /dev/null
@@ -1,221 +0,0 @@
-/**
- * Cold-start and warm-start latency benchmark for WASM shell echo.
- *
- * Measures:
- *   - Cold start: time to create a Secure Exec VM + complete first exec("echo hello")
- *   - Warm start: time for a second exec("echo hello") on an already-initialized VM
- *   - Both sequential and concurrent modes at various batch sizes
- *
- * The WASM coreutils package provides the shell and echo command compiled to
- * WebAssembly. Each cold-start measurement includes kernel creation, WASM
- * runtime mounting, and first command execution.
- *
- * Usage: npx tsx benchmarks/echo.bench.ts
- */
-
-import os from "node:os";
-import {
-	createBenchSidecar,
-	createBenchVm as createRuntimeBenchVm,
-	type BenchVm,
-} from "../lib/vm.js";
-import type { SidecarProcess } from "@secure-exec/core";
-import {
-	getHardware,
-	printTable,
-	round,
-	stats,
-} from "../lib/perf-utils.js";
-
-const BATCH_SIZES = [1, 10];
-const ITERATIONS = 5;
-const WARMUP_ITERATIONS = 1;
-const MAX_CONCURRENCY = Math.max(1, os.availableParallelism() - 4);
-const ECHO_COMMAND = "echo hello";
-const EXPECTED_OUTPUT = "hello\n";
-
-async function createBenchVm(): Promise<{
-	vm: BenchVm;
-	sidecar: SidecarProcess;
-}> {
-	const sidecar = createBenchSidecar();
-	const vm = await createRuntimeBenchVm({
-		sidecar,
-	});
-	return { vm, sidecar };
-}
-
-interface ColdStartEntry {
-	batchSize: number;
-	mode: "sequential" | "concurrent";
-	iterations: number;
-	coldStart: ReturnType<typeof stats>;
-	warmStart: ReturnType<typeof stats>;
-}
-
-async function measureOne(): Promise<{ coldMs: number; warmMs: number }> {
-	const t0 = performance.now();
-	const { vm, sidecar } = await createBenchVm();
-	try {
-		const result1 = await vm.exec(ECHO_COMMAND);
-		const coldMs = performance.now() - t0;
-
-		if (result1.stdout !== EXPECTED_OUTPUT) {
-			throw new Error(
-				`Unexpected cold-start output: ${JSON.stringify(result1.stdout)} (expected ${JSON.stringify(EXPECTED_OUTPUT)})`,
-			);
-		}
-
-		const t1 = performance.now();
-		const result2 = await vm.exec(ECHO_COMMAND);
-		const warmMs = performance.now() - t1;
-
-		if (result2.stdout !== EXPECTED_OUTPUT) {
-			throw new Error(
-				`Unexpected warm-start output: ${JSON.stringify(result2.stdout)} (expected ${JSON.stringify(EXPECTED_OUTPUT)})`,
-			);
-		}
-
-		return { coldMs, warmMs };
-	} finally {
-		await vm.dispose();
-		await sidecar.dispose();
-	}
-}
-
-async function benchSequential(batchSize: number): Promise<ColdStartEntry> {
-	const coldSamples: number[] = [];
-	const warmSamples: number[] = [];
-
-	for (let iter = 0; iter < WARMUP_ITERATIONS + ITERATIONS; iter++) {
-		const iterCold: number[] = [];
-		const iterWarm: number[] = [];
-
-		for (let i = 0; i < batchSize; i++) {
-			const { coldMs, warmMs } = await measureOne();
-			iterCold.push(coldMs);
-			iterWarm.push(warmMs);
-		}
-
-		// Skip warmup iterations.
-		if (iter >= WARMUP_ITERATIONS) {
-			coldSamples.push(...iterCold);
-			warmSamples.push(...iterWarm);
-		}
-	}
-
-	return {
-		batchSize,
-		mode: "sequential",
-		iterations: ITERATIONS,
-		coldStart: stats(coldSamples),
-		warmStart: stats(warmSamples),
-	};
-}
-
-async function benchConcurrent(batchSize: number): Promise<ColdStartEntry> {
-	const effectiveConcurrency = Math.min(batchSize, MAX_CONCURRENCY);
-	const coldSamples: number[] = [];
-	const warmSamples: number[] = [];
-
-	for (let iter = 0; iter < WARMUP_ITERATIONS + ITERATIONS; iter++) {
-		const iterCold: number[] = [];
-		const iterWarm: number[] = [];
-		let remaining = batchSize;
-
-		while (remaining > 0) {
-			const chunk = Math.min(remaining, effectiveConcurrency);
-			const results = await Promise.all(
-				Array.from({ length: chunk }, () => measureOne()),
-			);
-			for (const { coldMs, warmMs } of results) {
-				iterCold.push(coldMs);
-				iterWarm.push(warmMs);
-			}
-			remaining -= chunk;
-		}
-
-		if (iter >= WARMUP_ITERATIONS) {
-			coldSamples.push(...iterCold);
-			warmSamples.push(...iterWarm);
-		}
-	}
-
-	return {
-		batchSize,
-		mode: "concurrent",
-		iterations: ITERATIONS,
-		coldStart: stats(coldSamples),
-		warmStart: stats(warmSamples),
-	};
-}
-
-async function main() {
-	const hardware = getHardware();
-	console.error(`=== WASM Echo Benchmark ===`);
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(
-		`Cores: ${hardware.cores} | Max concurrency: ${MAX_CONCURRENCY}`,
-	);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(`Iterations: ${ITERATIONS} (+ ${WARMUP_ITERATIONS} warmup)`);
-	console.error(`Batch sizes: ${BATCH_SIZES.join(", ")}`);
-	console.error(`Command: ${ECHO_COMMAND}`);
-
-	const results: ColdStartEntry[] = [];
-
-	for (const batchSize of BATCH_SIZES) {
-		console.error(`\n--- batch=${batchSize}, mode=sequential ---`);
-		const seq = await benchSequential(batchSize);
-		results.push(seq);
-		console.error(
-			`  cold: mean=${seq.coldStart.mean}ms p50=${seq.coldStart.p50}ms p95=${seq.coldStart.p95}ms`,
-		);
-		console.error(
-			`  warm: mean=${seq.warmStart.mean}ms p50=${seq.warmStart.p50}ms p95=${seq.warmStart.p95}ms`,
-		);
-
-		console.error(`\n--- batch=${batchSize}, mode=concurrent ---`);
-		const conc = await benchConcurrent(batchSize);
-		results.push(conc);
-		console.error(
-			`  cold: mean=${conc.coldStart.mean}ms p50=${conc.coldStart.p50}ms p95=${conc.coldStart.p95}ms`,
-		);
-		console.error(
-			`  warm: mean=${conc.warmStart.mean}ms p50=${conc.warmStart.p50}ms p95=${conc.warmStart.p95}ms`,
-		);
-	}
-
-	// Summary table
-	printTable(
-		[
-			"batch",
-			"mode",
-			"cold mean",
-			"cold p50",
-			"cold p95",
-			"warm mean",
-			"warm p50",
-			"warm p95",
-		],
-		results.map((r) => [
-			r.batchSize,
-			r.mode,
-			`${r.coldStart.mean}ms`,
-			`${r.coldStart.p50}ms`,
-			`${r.coldStart.p95}ms`,
-			`${r.warmStart.mean}ms`,
-			`${r.warmStart.p50}ms`,
-			`${r.warmStart.p95}ms`,
-		]),
-	);
-
-	// JSON to stdout
-	console.log(JSON.stringify({ hardware, results }, null, 2));
-}
-
-main()
-	.catch((err) => {
-		console.error(err);
-		process.exitCode = 1;
-	});
diff --git a/packages/benchmarks/src/focused/fs-sync-ops.bench.ts b/packages/benchmarks/src/focused/fs-sync-ops.bench.ts
deleted file mode 100644
index e5e1b5182..000000000
--- a/packages/benchmarks/src/focused/fs-sync-ops.bench.ts
+++ /dev/null
@@ -1,704 +0,0 @@
-/**
- * Focused synchronous filesystem operation benchmark.
- *
- * The broad fuzz/perf rows intentionally execute real JS snippets, but several
- * "single op" filesystem rows include guard/setup calls in the timed loop. This
- * benchmark makes logical operations and expected sync bridge calls explicit.
- */
-
-import {
-	closeSync,
-	existsSync,
-	mkdirSync,
-	mkdtempSync,
-	openSync,
-	readFileSync,
-	renameSync,
-	rmSync,
-	statSync,
-	unlinkSync,
-	writeFileSync,
-} from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { createBenchSidecar, createBenchVm, type BenchVm } from "../lib/vm.js";
-import type { SidecarProcess } from "@secure-exec/core";
-import { getHardware, printTable, round, stats } from "../lib/perf-utils.js";
-
-type FsSyncOp =
-	| "existsSync"
-	| "statSync"
-	| "openClose"
-	| "mkdirRmdir"
-	| "smallWrite"
-	| "readFileSync"
-	| "renameFile";
-type FsSyncFixture = "vm-shadow";
-
-interface OperationCounts {
-	existsSync: number;
-	statSync: number;
-	openSync: number;
-	closeSync: number;
-	mkdirSync: number;
-	rmdirSync: number;
-	rmSync: number;
-	readFileSync: number;
-	writeFileSync: number;
-	renameSync: number;
-	unlinkSync: number;
-}
-
-interface SyncRpcLatency {
-	calls: number;
-	totalUs: number;
-	avgUs: number;
-	maxUs: number;
-}
-
-interface FsSyncPhaseMetric {
-	method: string;
-	calls: number;
-	totalUs: number;
-	avgUs: number;
-	maxUs: number;
-}
-
-interface FsSyncCaseResult {
-	op: FsSyncOp;
-	fixture: FsSyncFixture;
-	pathShape: string;
-	callCount: number;
-	payloadBytes: number;
-	iterations: number;
-	warmup: number;
-	operationCounts: OperationCounts;
-	bridgeCallCounts: OperationCounts;
-	expectedSyncRpcCalls: number;
-	host: ReturnType<typeof stats>;
-	guest: ReturnType<typeof stats>;
-	guestVsHostRatio: number;
-	hostMsPerLogicalOp: number;
-	guestMsPerLogicalOp: number;
-	guestMsPerExpectedSyncRpc?: number;
-	derived?: {
-		guestP50MinusSingleMs?: number;
-		hostP50MinusSingleMs?: number;
-		guestIncrementalMsPerLogicalOp?: number;
-		guestIncrementalMsPerExpectedSyncRpc?: number;
-	};
-	syncRpcLatency?: SyncRpcLatency | null;
-	fsSyncPhases?: FsSyncPhaseMetric[] | null;
-	raw: {
-		hostMs: number[];
-		guestMs: number[];
-	};
-}
-
-function parseArgs(): {
-	iterations: number;
-	warmup: number;
-	ops: FsSyncOp[];
-	callCounts: number[];
-	fixtures: FsSyncFixture[];
-	payloadBytes: number;
-	syncRpcLatencyEnabled: boolean;
-	fsSyncPhasesEnabled: boolean;
-} {
-	const value = (name: string) =>
-		process.argv.find((arg) => arg.startsWith(`--${name}=`))?.split("=")[1];
-	const iterations = Number(value("iterations") ?? 10);
-	const warmup = Number(value("warmup") ?? 2);
-	const ops = (value("ops") ?? "existsSync,statSync,openClose,mkdirRmdir,smallWrite,readFileSync,renameFile")
-		.split(",")
-		.map((op) => op.trim())
-		.filter(
-			(op): op is FsSyncOp =>
-				op === "existsSync" ||
-				op === "statSync" ||
-				op === "openClose" ||
-				op === "mkdirRmdir" ||
-				op === "smallWrite" ||
-				op === "readFileSync" ||
-				op === "renameFile",
-		);
-	const callCounts = (value("call-counts") ?? value("repeat-counts") ?? "1,8,32")
-		.split(",")
-		.map((n) => Number(n.trim()))
-		.filter((n) => Number.isFinite(n) && n >= 1);
-	const fixtures = (value("fixtures") ?? "vm-shadow")
-		.split(",")
-		.map((fixture) => fixture.trim())
-		.filter((fixture): fixture is FsSyncFixture => fixture === "vm-shadow");
-	const payloadBytes = Number(value("payload-bytes") ?? 8);
-	const syncRpcLatencyEnabled =
-		process.argv.includes("--sync-rpc-latency") || value("sync-rpc-latency") === "1";
-	const fsSyncPhasesEnabled =
-		process.argv.includes("--fs-sync-phases") || value("fs-sync-phases") === "1";
-	if (
-		iterations < 1 ||
-		warmup < 0 ||
-		ops.length === 0 ||
-		callCounts.length === 0 ||
-		fixtures.length === 0 ||
-		!Number.isFinite(payloadBytes) ||
-		payloadBytes < 0
-	) {
-		throw new Error(
-			"invalid args; expected --iterations>=1 --warmup>=0 --ops=existsSync,statSync,openClose,mkdirRmdir,smallWrite,readFileSync,renameFile --call-counts=1,8,32 --fixtures=vm-shadow --payload-bytes=8",
-		);
-	}
-	return {
-		iterations,
-		warmup,
-		ops,
-		callCounts,
-		fixtures,
-		payloadBytes,
-		syncRpcLatencyEnabled,
-		fsSyncPhasesEnabled,
-	};
-}
-
-function nowMs(start: number): number {
-	return performance.now() - start;
-}
-
-function emptyCounts(): OperationCounts {
-	return {
-		existsSync: 0,
-		statSync: 0,
-		openSync: 0,
-		closeSync: 0,
-		mkdirSync: 0,
-		rmdirSync: 0,
-		rmSync: 0,
-		readFileSync: 0,
-		writeFileSync: 0,
-		renameSync: 0,
-		unlinkSync: 0,
-	};
-}
-
-function countsForOperation(op: FsSyncOp, callCount: number): {
-	operationCounts: OperationCounts;
-	bridgeCallCounts: OperationCounts;
-} {
-	const operationCounts = emptyCounts();
-	const bridgeCallCounts = emptyCounts();
-	const add = (counts: OperationCounts, key: keyof OperationCounts, amount = callCount) => {
-		counts[key] += amount;
-	};
-	switch (op) {
-		case "existsSync":
-			add(operationCounts, "existsSync");
-			add(bridgeCallCounts, "existsSync");
-			break;
-		case "statSync":
-			add(operationCounts, "statSync");
-			add(bridgeCallCounts, "statSync");
-			break;
-		case "openClose":
-			add(operationCounts, "openSync");
-			add(operationCounts, "closeSync");
-			add(bridgeCallCounts, "openSync");
-			add(bridgeCallCounts, "closeSync");
-			break;
-		case "mkdirRmdir":
-			add(operationCounts, "mkdirSync");
-			add(operationCounts, "rmSync");
-			add(bridgeCallCounts, "mkdirSync");
-			add(bridgeCallCounts, "statSync");
-			add(bridgeCallCounts, "rmdirSync");
-			break;
-		case "smallWrite":
-			add(operationCounts, "writeFileSync");
-			add(bridgeCallCounts, "writeFileSync");
-			break;
-		case "readFileSync":
-			add(operationCounts, "readFileSync");
-			add(bridgeCallCounts, "readFileSync");
-			break;
-		case "renameFile":
-			add(operationCounts, "writeFileSync");
-			add(operationCounts, "renameSync");
-			add(operationCounts, "unlinkSync");
-			add(bridgeCallCounts, "writeFileSync");
-			add(bridgeCallCounts, "renameSync");
-			add(bridgeCallCounts, "unlinkSync");
-			break;
-	}
-	return { operationCounts, bridgeCallCounts };
-}
-
-function syncRpcCount(counts: OperationCounts): number {
-	return Object.values(counts).reduce((sum, count) => sum + count, 0);
-}
-
-function pathShapeForOperation(op: FsSyncOp): string {
-	switch (op) {
-		case "existsSync":
-		case "statSync":
-		case "openClose":
-			return "existing-file";
-		case "mkdirRmdir":
-			return "fresh-empty-dir";
-		case "smallWrite":
-			return "overwrite-file";
-		case "readFileSync":
-			return "existing-file-read";
-		case "renameFile":
-			return "fresh-file-rename-unlink";
-	}
-}
-
-function parseSyncRpcLatencyFile(path: string): SyncRpcLatency | null {
-	try {
-		const text = readFileSync(path, "utf8").trim();
-		const match = /calls=(\d+) total_us=(\d+) avg_us=(\d+) max_us=(\d+)/.exec(text);
-		if (!match) return null;
-		return {
-			calls: Number(match[1]),
-			totalUs: Number(match[2]),
-			avgUs: Number(match[3]),
-			maxUs: Number(match[4]),
-		};
-	} catch {
-		return null;
-	}
-}
-
-function parseFsSyncPhasesFile(path: string): FsSyncPhaseMetric[] | null {
-	try {
-		const text = readFileSync(path, "utf8").trim();
-		if (!text) return [];
-		const phases: FsSyncPhaseMetric[] = [];
-		for (const line of text.split(/\r?\n/)) {
-			const match =
-				/^method=(\S+) calls=(\d+) total_us=(\d+) avg_us=(\d+) max_us=(\d+)$/.exec(line);
-			if (!match) return null;
-			phases.push({
-				method: match[1],
-				calls: Number(match[2]),
-				totalUs: Number(match[3]),
-				avgUs: Number(match[4]),
-				maxUs: Number(match[5]),
-			});
-		}
-		return phases;
-	} catch {
-		return null;
-	}
-}
-
-function createHostFixture(payloadBytes: number): string {
-	const dir = mkdtempSync(join(tmpdir(), "agentos-fs-sync-bench-"));
-	writeFileSync(join(dir, "fixture.txt"), "x".repeat(payloadBytes));
-	return dir;
-}
-
-function runOperation(root: string, op: FsSyncOp, sampleIndex: number, callCount: number, payload: string): void {
-	const fixture = join(root, "fixture.txt");
-	for (let i = 0; i < callCount; i++) {
-		const suffix = `${sampleIndex}-${i}`;
-		switch (op) {
-			case "existsSync":
-				existsSync(fixture);
-				break;
-			case "statSync":
-				statSync(fixture);
-				break;
-			case "openClose": {
-				const fd = openSync(fixture, "r");
-				closeSync(fd);
-				break;
-			}
-			case "mkdirRmdir": {
-				const path = join(root, `dir-${suffix}`);
-				mkdirSync(path);
-				rmSync(path, { recursive: true });
-				break;
-			}
-			case "smallWrite":
-				writeFileSync(fixture, payload);
-				break;
-			case "readFileSync":
-				readFileSync(fixture);
-				break;
-			case "renameFile": {
-				const from = join(root, `rename-${suffix}.a`);
-				const to = join(root, `rename-${suffix}.b`);
-				writeFileSync(from, payload);
-				renameSync(from, to);
-				unlinkSync(to);
-				break;
-			}
-		}
-	}
-}
-
-function runHost(
-	root: string,
-	op: FsSyncOp,
-	callCount: number,
-	payloadBytes: number,
-	iterations: number,
-	warmup: number,
-): number[] {
-	const samples: number[] = [];
-	const payload = "x".repeat(payloadBytes);
-	for (let i = 0; i < warmup + iterations; i++) {
-		const start = performance.now();
-		runOperation(root, op, i, callCount, payload);
-		const ms = nowMs(start);
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-async function setupGuestFixture(vm: BenchVm, root: string, payloadBytes: number): Promise<void> {
-	await vm.delete(root, { recursive: true }).catch(() => {});
-	await vm.mkdir(root, { recursive: true });
-	await vm.writeFile(`${root}/fixture.txt`, "x".repeat(payloadBytes));
-}
-
-async function runGuest(
-	vm: BenchVm,
-	root: string,
-	op: FsSyncOp,
-	callCount: number,
-	payloadBytes: number,
-	iterations: number,
-	warmup: number,
-): Promise<number[]> {
-	const scriptPath = `/tmp/fs-sync-ops-${op}-${Date.now()}-${Math.random()
-		.toString(16)
-		.slice(2)}.mjs`;
-	const source = `
-import fs from "node:fs";
-const root = ${JSON.stringify(root)};
-const op = ${JSON.stringify(op)};
-const callCount = ${JSON.stringify(callCount)};
-const payload = "x".repeat(${JSON.stringify(payloadBytes)});
-const iterations = Number(process.env.BENCH_ITERATIONS || 10);
-const warmup = Number(process.env.BENCH_WARMUP || 2);
-const fixture = root + "/fixture.txt";
-const samples = [];
-const now = () => Number(process.hrtime.bigint()) / 1e6;
-function runOperation(sampleIndex) {
-  for (let i = 0; i < callCount; i++) {
-    const suffix = sampleIndex + "-" + i;
-    if (op === "existsSync") {
-      fs.existsSync(fixture);
-    } else if (op === "statSync") {
-      fs.statSync(fixture);
-    } else if (op === "openClose") {
-      const fd = fs.openSync(fixture, "r");
-      fs.closeSync(fd);
-    } else if (op === "mkdirRmdir") {
-      const path = root + "/dir-" + suffix;
-      fs.mkdirSync(path);
-      fs.rmSync(path, { recursive: true });
-    } else if (op === "smallWrite") {
-      fs.writeFileSync(fixture, payload);
-    } else if (op === "readFileSync") {
-      fs.readFileSync(fixture);
-    } else if (op === "renameFile") {
-      const from = root + "/rename-" + suffix + ".a";
-      const to = root + "/rename-" + suffix + ".b";
-      fs.writeFileSync(from, payload);
-      fs.renameSync(from, to);
-      fs.unlinkSync(to);
-    }
-  }
-}
-for (let i = 0; i < warmup + iterations; i++) {
-  const start = now();
-  runOperation(i);
-  const ms = now() - start;
-  if (i >= warmup) samples.push(ms);
-}
-process.stdout.write(JSON.stringify({ samples }));
-`;
-	await vm.writeFile(scriptPath, source);
-	let stdout = "";
-	let stderr = "";
-	const proc = vm.spawn("node", [scriptPath], {
-		env: {
-			BENCH_ITERATIONS: String(iterations),
-			BENCH_WARMUP: String(warmup),
-		},
-		onStdout: (data) => {
-			stdout += Buffer.from(data).toString("utf8");
-		},
-		onStderr: (data) => {
-			stderr += Buffer.from(data).toString("utf8");
-		},
-	});
-	const code = await vm.waitProcess(proc.pid);
-	if (code !== 0) {
-		throw new Error(`guest fs-sync-ops ${op} exited ${code}\n${stderr}`);
-	}
-	return JSON.parse(stdout).samples;
-}
-
-async function createVm(sidecar: SidecarProcess): Promise<BenchVm> {
-	return createBenchVm({
-		sidecar,
-	});
-}
-
-async function runCase(
-	op: FsSyncOp,
-	fixture: FsSyncFixture,
-	callCount: number,
-	payloadBytes: number,
-	iterations: number,
-	warmup: number,
-	sidecar: SidecarProcess,
-	latencyFile?: string,
-	fsSyncPhasesFile?: string,
-): Promise<FsSyncCaseResult> {
-	const hostRoot = createHostFixture(payloadBytes);
-	const vmRoot = `/tmp/fs-sync-ops-${op}-${callCount}`;
-	try {
-		const hostSamples = runHost(hostRoot, op, callCount, payloadBytes, iterations, warmup);
-		const vm = await createVm(sidecar);
-		try {
-			await setupGuestFixture(vm, vmRoot, payloadBytes);
-			const guestSamples = await runGuest(vm, vmRoot, op, callCount, payloadBytes, iterations, warmup);
-			const hostStats = stats(hostSamples);
-			const guestStats = stats(guestSamples);
-			const counts = countsForOperation(op, callCount);
-			const expectedSyncRpcCalls = syncRpcCount(counts.bridgeCallCounts);
-			return {
-				op,
-				fixture,
-				pathShape: pathShapeForOperation(op),
-				callCount,
-				payloadBytes,
-				iterations,
-				warmup,
-				operationCounts: counts.operationCounts,
-				bridgeCallCounts: counts.bridgeCallCounts,
-				expectedSyncRpcCalls,
-				host: hostStats,
-				guest: guestStats,
-				guestVsHostRatio: round(guestStats.p50 / hostStats.p50),
-				hostMsPerLogicalOp: round(hostStats.p50 / callCount),
-				guestMsPerLogicalOp: round(guestStats.p50 / callCount),
-				guestMsPerExpectedSyncRpc:
-					expectedSyncRpcCalls > 0 ? round(guestStats.p50 / expectedSyncRpcCalls) : undefined,
-				syncRpcLatency: latencyFile ? parseSyncRpcLatencyFile(latencyFile) : null,
-				fsSyncPhases: fsSyncPhasesFile ? parseFsSyncPhasesFile(fsSyncPhasesFile) : null,
-				raw: {
-					hostMs: hostSamples,
-					guestMs: guestSamples,
-				},
-			};
-		} finally {
-			await vm.dispose();
-		}
-	} finally {
-		rmSync(hostRoot, { recursive: true, force: true });
-	}
-}
-
-function addDerivedFields(cases: FsSyncCaseResult[]): void {
-	for (const result of cases) {
-		const single = cases.find(
-			(candidate) =>
-				candidate.op === result.op &&
-				candidate.fixture === result.fixture &&
-				candidate.payloadBytes === result.payloadBytes &&
-				candidate.callCount === 1,
-		);
-		if (!single) continue;
-		const denominator = Math.max(result.callCount - 1, 1);
-		const rpcDenominator = Math.max(result.expectedSyncRpcCalls - single.expectedSyncRpcCalls, 1);
-		result.derived = {
-			guestP50MinusSingleMs: round(result.guest.p50 - single.guest.p50),
-			hostP50MinusSingleMs: round(result.host.p50 - single.host.p50),
-			guestIncrementalMsPerLogicalOp:
-				result.callCount > 1 ? round((result.guest.p50 - single.guest.p50) / denominator) : undefined,
-			guestIncrementalMsPerExpectedSyncRpc:
-				result.callCount > 1 ? round((result.guest.p50 - single.guest.p50) / rpcDenominator) : undefined,
-		};
-	}
-}
-
-async function runCaseWithOptionalLatency(args: {
-	op: FsSyncOp;
-	fixture: FsSyncFixture;
-	callCount: number;
-	payloadBytes: number;
-	iterations: number;
-	warmup: number;
-	sharedSidecar: SidecarProcess | null;
-	syncRpcLatencyEnabled: boolean;
-	fsSyncPhasesEnabled: boolean;
-}): Promise<FsSyncCaseResult> {
-	const needsDedicatedSidecar = args.syncRpcLatencyEnabled || args.fsSyncPhasesEnabled;
-	if (!needsDedicatedSidecar) {
-		if (!args.sharedSidecar) throw new Error("shared sidecar required when tracing is disabled");
-		return runCase(
-			args.op,
-			args.fixture,
-			args.callCount,
-			args.payloadBytes,
-			args.iterations,
-			args.warmup,
-			args.sharedSidecar,
-		);
-	}
-
-	const latencyFile = join(
-		tmpdir(),
-		`agentos-fs-sync-lat-${args.op}-${args.callCount}-${Date.now()}-${Math.random()
-			.toString(16)
-			.slice(2)}.txt`,
-	);
-	const phasesFile = join(
-		tmpdir(),
-		`agentos-fs-sync-phases-${args.op}-${args.callCount}-${Date.now()}-${Math.random()
-			.toString(16)
-			.slice(2)}.txt`,
-	);
-	const previousEnabled = process.env.AGENTOS_SYNCRPC_LAT;
-	const previousFile = process.env.AGENTOS_SYNCRPC_LAT_FILE;
-	const previousPhasesEnabled = process.env.AGENTOS_FS_SYNC_PHASES;
-	const previousPhasesFile = process.env.AGENTOS_FS_SYNC_PHASES_FILE;
-	if (args.syncRpcLatencyEnabled) {
-		process.env.AGENTOS_SYNCRPC_LAT = "1";
-		process.env.AGENTOS_SYNCRPC_LAT_FILE = latencyFile;
-	}
-	if (args.fsSyncPhasesEnabled) {
-		process.env.AGENTOS_FS_SYNC_PHASES = "1";
-		process.env.AGENTOS_FS_SYNC_PHASES_FILE = phasesFile;
-	}
-	const sidecar = await createBenchSidecar();
-	try {
-		return await runCase(
-			args.op,
-			args.fixture,
-			args.callCount,
-			args.payloadBytes,
-			args.iterations,
-			args.warmup,
-			sidecar,
-			args.syncRpcLatencyEnabled ? latencyFile : undefined,
-			args.fsSyncPhasesEnabled ? phasesFile : undefined,
-		);
-	} finally {
-		await sidecar.dispose();
-		if (previousEnabled === undefined) delete process.env.AGENTOS_SYNCRPC_LAT;
-		else process.env.AGENTOS_SYNCRPC_LAT = previousEnabled;
-		if (previousFile === undefined) delete process.env.AGENTOS_SYNCRPC_LAT_FILE;
-		else process.env.AGENTOS_SYNCRPC_LAT_FILE = previousFile;
-		if (previousPhasesEnabled === undefined) delete process.env.AGENTOS_FS_SYNC_PHASES;
-		else process.env.AGENTOS_FS_SYNC_PHASES = previousPhasesEnabled;
-		if (previousPhasesFile === undefined) delete process.env.AGENTOS_FS_SYNC_PHASES_FILE;
-		else process.env.AGENTOS_FS_SYNC_PHASES_FILE = previousPhasesFile;
-		rmSync(latencyFile, { force: true });
-		rmSync(phasesFile, { force: true });
-	}
-}
-
-async function main(): Promise<void> {
-	const {
-		iterations,
-		warmup,
-		ops,
-		callCounts,
-		fixtures,
-		payloadBytes,
-		syncRpcLatencyEnabled,
-		fsSyncPhasesEnabled,
-	} = parseArgs();
-	const hardware = getHardware();
-	console.error("=== FS Sync Ops Benchmark ===");
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(
-		`Iterations: ${iterations} (+ ${warmup} warmup), ops: ${ops.join(",")}, callCounts: ${callCounts.join(",")}, fixtures: ${fixtures.join(",")}, payloadBytes: ${payloadBytes}, syncRpcLatency: ${syncRpcLatencyEnabled}, fsSyncPhases: ${fsSyncPhasesEnabled}`,
-	);
-
-	const sharedSidecar =
-		syncRpcLatencyEnabled || fsSyncPhasesEnabled ? null : await createBenchSidecar();
-	try {
-		const cases: FsSyncCaseResult[] = [];
-		for (const fixture of fixtures) {
-			for (const op of ops) {
-				for (const callCount of callCounts) {
-					const result = await runCaseWithOptionalLatency({
-						op,
-						fixture,
-						callCount,
-						payloadBytes,
-						iterations,
-						warmup,
-						sharedSidecar,
-						syncRpcLatencyEnabled,
-						fsSyncPhasesEnabled,
-					});
-					cases.push(result);
-					console.error(
-						`  op=${op} calls=${callCount}: expectedRpc=${result.expectedSyncRpcCalls} host.p50=${result.host.p50}ms guest.p50=${result.guest.p50}ms ratio=${result.guestVsHostRatio}x guest.ms/rpc=${result.guestMsPerExpectedSyncRpc}`,
-					);
-				}
-			}
-		}
-		addDerivedFields(cases);
-		printTable(
-			[
-				"op",
-				"calls",
-				"expected RPCs",
-				"host p50",
-				"guest p50",
-				"guest/host",
-				"guest ms/op",
-				"guest ms/rpc",
-			],
-			cases.map((result) => [
-				result.op,
-				result.callCount,
-				result.expectedSyncRpcCalls,
-				`${result.host.p50}ms`,
-				`${result.guest.p50}ms`,
-				`${result.guestVsHostRatio}x`,
-				`${result.guestMsPerLogicalOp}ms`,
-				result.guestMsPerExpectedSyncRpc === undefined
-					? "n/a"
-					: `${result.guestMsPerExpectedSyncRpc}ms`,
-			]),
-		);
-		console.log(
-			JSON.stringify(
-				{
-					benchmark: "fs-sync-ops",
-					generatedAt: new Date().toISOString(),
-					hardware,
-					iterations,
-					warmup,
-					ops,
-					callCounts,
-					fixtures,
-					payloadBytes,
-					syncRpcLatencyEnabled,
-					fsSyncPhasesEnabled,
-					cases,
-				},
-				null,
-				2,
-			),
-		);
-	} finally {
-		if (sharedSidecar) await sharedSidecar.dispose();
-	}
-}
-
-main().catch((error) => {
-	console.error(error);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/src/focused/interference.bench.ts b/packages/benchmarks/src/focused/interference.bench.ts
deleted file mode 100644
index f85d9f628..000000000
--- a/packages/benchmarks/src/focused/interference.bench.ts
+++ /dev/null
@@ -1,153 +0,0 @@
-import { createBenchVm, formatSidecarProvenance, type BenchVm } from "../lib/vm.js";
-import { getHardware, printTable, round, stats, type Stats } from "../lib/perf-utils.js";
-import {
-	assertMatrixBallpark,
-	benchmarkProvenance,
-	busyInterferenceProgram,
-	envNumber,
-	fsWriteSmallLoopProgram,
-	participantFromLoop,
-	prewarmConcurrencyVm,
-	runGuestJsonProgram,
-	writeGuestProgram,
-	type RegressionRow,
-} from "./concurrency-common.js";
-
-const PROBE_PROGRAM_PATH = "/tmp/focused-interference-probe.mjs";
-const BUSY_PROGRAM_PATH = "/tmp/focused-interference-busy.mjs";
-
-interface ProbeCase {
-	mode: "idle" | "busy";
-	ops: number;
-	opsPerSec: number;
-	durationMs: number;
-	latencyMs: Stats;
-	rawSampleCount: number;
-	busyOps?: number;
-}
-
-async function runProbe(vm: BenchVm, durationMs: number, mode: ProbeCase["mode"]): Promise<ProbeCase> {
-	const loop = await runGuestJsonProgram(vm, PROBE_PROGRAM_PATH, {
-		BENCH_DURATION_MS: String(durationMs),
-		BENCH_PROCESS_INDEX: mode,
-	});
-	const participant = await participantFromLoop(0, vm, loop);
-	return {
-		mode,
-		ops: participant.ops,
-		opsPerSec: participant.opsPerSec,
-		durationMs: participant.durationMs,
-		latencyMs: participant.latencyMs,
-		rawSampleCount: participant.rawSampleCount,
-	};
-}
-
-async function main(): Promise<void> {
-	const durationMs = envNumber("BENCH_INTERFERENCE_DURATION_MS", 5_000);
-	const busyDurationMs = envNumber("BENCH_INTERFERENCE_BUSY_DURATION_MS", durationMs + 1_000);
-	const hardware = getHardware();
-	const provenance = benchmarkProvenance();
-	console.error("=== Interference Focused Benchmark ===");
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(formatSidecarProvenance(provenance.sidecar));
-	console.error(`Probe duration: ${durationMs}ms | busy duration: ${busyDurationMs}ms`);
-
-	const probeVm = await createBenchVm();
-	const busyVm = await createBenchVm();
-	try {
-		await Promise.all([prewarmConcurrencyVm(probeVm), prewarmConcurrencyVm(busyVm)]);
-		await Promise.all([
-			writeGuestProgram(probeVm, PROBE_PROGRAM_PATH, fsWriteSmallLoopProgram()),
-			writeGuestProgram(busyVm, BUSY_PROGRAM_PATH, busyInterferenceProgram()),
-		]);
-
-		const idle = await runProbe(probeVm, durationMs, "idle");
-		assertMatrixBallpark("fs_write_small", idle.latencyMs.p50, {
-			multiplier: 5,
-			fallbackCeilingMs: 5,
-		});
-
-		const busyPromise = runGuestJsonProgram(busyVm, BUSY_PROGRAM_PATH, {
-			BENCH_DURATION_MS: String(busyDurationMs),
-		});
-		const busy = await runProbe(probeVm, durationMs, "busy");
-		const busyLoop = await busyPromise;
-		busy.busyOps = busyLoop.ops;
-
-		const interferenceTax = {
-			p50: round(busy.latencyMs.p50 / idle.latencyMs.p50, 2),
-			p95: round(busy.latencyMs.p95 / idle.latencyMs.p95, 2),
-		};
-		const regressionRows: RegressionRow[] = [
-			{
-				rowKey: "interference.idle.fs_write_small_p50_ms",
-				metric: "idleP50Ms",
-				value: idle.latencyMs.p50,
-				unit: "ms",
-			},
-			{
-				rowKey: "interference.busy.fs_write_small_p50_ms",
-				metric: "busyP50Ms",
-				value: busy.latencyMs.p50,
-				unit: "ms",
-			},
-			{
-				rowKey: "interference.fs_write_small_p50_tax",
-				metric: "interferenceTaxP50",
-				value: interferenceTax.p50,
-				unit: "ratio",
-			},
-			{
-				rowKey: "interference.fs_write_small_p95_tax",
-				metric: "interferenceTaxP95",
-				value: interferenceTax.p95,
-				unit: "ratio",
-			},
-		];
-
-		printTable(
-			["mode", "ops/s", "p50", "p95", "samples", "busy ops"],
-			[idle, busy].map((row) => [
-				row.mode,
-				row.opsPerSec,
-				`${row.latencyMs.p50}ms`,
-				`${row.latencyMs.p95}ms`,
-				row.rawSampleCount,
-				row.busyOps ?? "n/a",
-			]),
-		);
-		console.error(
-			`  interferenceTax: p50=${interferenceTax.p50}x p95=${interferenceTax.p95}x`,
-		);
-
-		console.log(
-			JSON.stringify(
-				{
-					benchmark: "interference",
-					...provenance,
-					hardware,
-					probeOp: "fs_write_small",
-					busyOp: "cpu_spin_plus_fs_write_churn",
-					durationMs,
-					busyDurationMs,
-					idle,
-					busy,
-					interferenceTax,
-					probeVmResourceSnapshot: await probeVm.getResourceSnapshot(),
-					busyVmResourceSnapshot: await busyVm.getResourceSnapshot(),
-					regressionRows,
-				},
-				null,
-				2,
-			),
-		);
-	} finally {
-		await Promise.allSettled([probeVm.dispose(), busyVm.dispose()]);
-	}
-}
-
-main().catch((error) => {
-	console.error(error);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/src/focused/ls.bench.ts b/packages/benchmarks/src/focused/ls.bench.ts
deleted file mode 100644
index 6787eba89..000000000
--- a/packages/benchmarks/src/focused/ls.bench.ts
+++ /dev/null
@@ -1,342 +0,0 @@
-/**
- * VM startup + serial `ls` benchmark.
- *
- * This is the standard-suite version of the investigation from Codex thread
- * 019f05eb-fc28-7e90-9620-7b5a2150cb9a: create a VM with coreutils, create a
- * directory, run `ls` repeatedly in serial, and compare each `ls` call against
- * the same host command.
- */
-
-import { execFileSync } from "node:child_process";
-import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { createBenchSidecar, createBenchVm, type BenchVm } from "../lib/vm.js";
-import type { SidecarProcess } from "@secure-exec/core";
-import { getHardware, printTable, round, stats } from "../lib/perf-utils.js";
-
-interface LsIteration {
-	vmCreateMs: number;
-	vmSetupMs: number;
-	vmNoopExecSamplesMs: number[];
-	vmStdoutExecSamplesMs: number[];
-	vmLsSamplesMs: number[];
-	wasmWarmupDiagnostics?: string[];
-	endToEndMs: number;
-}
-
-interface LsCaseResult {
-	fileCount: number;
-	iterations: number;
-	serialRuns: number;
-	hostLs: ReturnType<typeof stats>;
-	vmCreate: ReturnType<typeof stats>;
-	vmSetup: ReturnType<typeof stats>;
-	vmNoopExec: ReturnType<typeof stats>;
-	vmStdoutExec: ReturnType<typeof stats>;
-	vmLs: ReturnType<typeof stats>;
-	endToEnd: ReturnType<typeof stats>;
-	vmVsHostLsRatio: number;
-	vmLsMinusNoopMs: number;
-	vmLsMinusStdoutMs: number;
-	lsDeltaFromEmptyMs?: number;
-	raw: LsIteration[];
-}
-
-function parseArgs(): {
-	iterations: number;
-	warmup: number;
-	serialRuns: number;
-	fileCounts: number[];
-	wasmWarmupDebug: boolean;
-} {
-	const value = (name: string) =>
-		process.argv.find((arg) => arg.startsWith(`--${name}=`))?.split("=")[1];
-	const hasFlag = (name: string) => process.argv.includes(`--${name}`);
-	const iterations = Number(value("iterations") ?? 5);
-	const warmup = Number(value("warmup") ?? 1);
-	const serialRuns = Number(value("serial-runs") ?? 5);
-	const fileCounts = (value("file-counts") ?? "0,100")
-		.split(",")
-		.map((n) => Number(n.trim()))
-		.filter((n) => Number.isFinite(n) && n >= 0);
-	const wasmWarmupDebug = hasFlag("wasm-warmup-debug");
-	if (iterations < 1 || warmup < 0 || serialRuns < 1 || fileCounts.length === 0) {
-		throw new Error(
-			"invalid args; expected --iterations>=1 --warmup>=0 --serial-runs>=1 --file-counts=0,100",
-		);
-	}
-	return { iterations, warmup, serialRuns, fileCounts, wasmWarmupDebug };
-}
-
-function nowMs(start: number): number {
-	return performance.now() - start;
-}
-
-function createHostFixture(fileCount: number): string {
-	const dir = mkdtempSync(join(tmpdir(), `agentos-ls-bench-${fileCount}-`));
-	for (let i = 0; i < fileCount; i++) {
-		writeFileSync(join(dir, `file-${String(i).padStart(4, "0")}.txt`), "x");
-	}
-	return dir;
-}
-
-function runHostLs(dir: string, count: number): number[] {
-	const samples: number[] = [];
-	for (let i = 0; i < count; i++) {
-		const start = performance.now();
-		execFileSync("ls", [dir], { stdio: "ignore" });
-		samples.push(nowMs(start));
-	}
-	return samples;
-}
-
-function collectWasmWarmupDiagnostics(
-	enabled: boolean,
-	stderr: string,
-	diagnostics: string[],
-): void {
-	if (!enabled) {
-		return;
-	}
-	for (const line of stderr.split(/\r?\n/)) {
-		if (
-			line.startsWith("__AGENTOS_WASM_WARMUP_METRICS__:") ||
-			line.startsWith("__AGENTOS_WASM_PHASE_METRICS__:")
-		) {
-			diagnostics.push(line);
-		}
-	}
-}
-
-async function createLsVm(sidecar: SidecarProcess): Promise<BenchVm> {
-	return createBenchVm({
-		sidecar,
-	});
-}
-
-async function setupVmFixture(vm: BenchVm, dir: string, fileCount: number): Promise<void> {
-	await vm.exec(`rm -rf ${dir} && mkdir -p ${dir}`);
-	for (let i = 0; i < fileCount; i++) {
-		await vm.writeFile(`${dir}/file-${String(i).padStart(4, "0")}.txt`, "x");
-	}
-}
-
-async function runCase(
-	fileCount: number,
-	iterations: number,
-	warmup: number,
-	serialRuns: number,
-	sidecar: SidecarProcess,
-	wasmWarmupDebug: boolean,
-): Promise<LsCaseResult> {
-	const hostDir = createHostFixture(fileCount);
-	try {
-		const hostLsSamples = runHostLs(hostDir, serialRuns * iterations);
-		const raw: LsIteration[] = [];
-		const vmCreateSamples: number[] = [];
-		const vmSetupSamples: number[] = [];
-		const vmNoopExecSamples: number[] = [];
-		const vmStdoutExecSamples: number[] = [];
-		const vmLsSamples: number[] = [];
-		const endToEndSamples: number[] = [];
-		const vmDir = `/tmp/ls-bench-${fileCount}`;
-		const execOptions = wasmWarmupDebug
-			? { env: { AGENTOS_WASM_WARMUP_DEBUG: "1" } }
-			: undefined;
-
-		for (let i = 0; i < warmup + iterations; i++) {
-			const endToEndStart = performance.now();
-			const createStart = performance.now();
-			const vm = await createLsVm(sidecar);
-			const vmCreateMs = nowMs(createStart);
-			try {
-				const setupStart = performance.now();
-				await setupVmFixture(vm, vmDir, fileCount);
-				const vmSetupMs = nowMs(setupStart);
-				const wasmWarmupDiagnostics: string[] = [];
-				const iterNoopSamples: number[] = [];
-				for (let j = 0; j < serialRuns; j++) {
-					const noopStart = performance.now();
-					const result = await vm.exec("true", execOptions);
-					const noopMs = nowMs(noopStart);
-					if (result.exitCode !== 0) {
-						throw new Error(`true exited ${result.exitCode}: ${result.stderr}`);
-					}
-					collectWasmWarmupDiagnostics(
-						wasmWarmupDebug,
-						result.stderr,
-						wasmWarmupDiagnostics,
-					);
-					iterNoopSamples.push(noopMs);
-				}
-				const iterStdoutSamples: number[] = [];
-				for (let j = 0; j < serialRuns; j++) {
-					const stdoutStart = performance.now();
-					const result = await vm.exec("printf x", execOptions);
-					const stdoutMs = nowMs(stdoutStart);
-					if (result.exitCode !== 0 || result.stdout !== "x") {
-						throw new Error(
-							`printf exited ${result.exitCode}: stdout=${JSON.stringify(result.stdout)} stderr=${result.stderr}`,
-						);
-					}
-					collectWasmWarmupDiagnostics(
-						wasmWarmupDebug,
-						result.stderr,
-						wasmWarmupDiagnostics,
-					);
-					iterStdoutSamples.push(stdoutMs);
-				}
-				const iterLsSamples: number[] = [];
-				for (let j = 0; j < serialRuns; j++) {
-					const lsStart = performance.now();
-					const result = await vm.exec(`ls ${vmDir}`, execOptions);
-					const lsMs = nowMs(lsStart);
-					if (result.exitCode !== 0) {
-						throw new Error(`ls exited ${result.exitCode}: ${result.stderr}`);
-					}
-					collectWasmWarmupDiagnostics(
-						wasmWarmupDebug,
-						result.stderr,
-						wasmWarmupDiagnostics,
-					);
-					iterLsSamples.push(lsMs);
-				}
-				const endToEndMs = nowMs(endToEndStart);
-				console.error(
-					`  files=${fileCount} iter=${i}: create=${round(vmCreateMs)}ms setup=${round(vmSetupMs)}ms noop.p50=${round(stats(iterNoopSamples).p50)}ms stdout.p50=${round(stats(iterStdoutSamples).p50)}ms ls.p50=${round(stats(iterLsSamples).p50)}ms end=${round(endToEndMs)}ms${i < warmup ? " (warmup)" : ""}`,
-				);
-				if (i >= warmup) {
-					raw.push({
-						vmCreateMs,
-						vmSetupMs,
-						vmNoopExecSamplesMs: iterNoopSamples,
-						vmStdoutExecSamplesMs: iterStdoutSamples,
-						vmLsSamplesMs: iterLsSamples,
-						...(wasmWarmupDebug ? { wasmWarmupDiagnostics } : {}),
-						endToEndMs,
-					});
-					vmCreateSamples.push(vmCreateMs);
-					vmSetupSamples.push(vmSetupMs);
-					vmNoopExecSamples.push(...iterNoopSamples);
-					vmStdoutExecSamples.push(...iterStdoutSamples);
-					vmLsSamples.push(...iterLsSamples);
-					endToEndSamples.push(endToEndMs);
-				}
-			} finally {
-				await vm.dispose();
-			}
-		}
-
-		const hostLs = stats(hostLsSamples);
-		const vmLs = stats(vmLsSamples);
-		const vmNoopExec = stats(vmNoopExecSamples);
-		const vmStdoutExec = stats(vmStdoutExecSamples);
-		return {
-			fileCount,
-			iterations,
-			serialRuns,
-			hostLs,
-			vmCreate: stats(vmCreateSamples),
-			vmSetup: stats(vmSetupSamples),
-			vmNoopExec,
-			vmStdoutExec,
-			vmLs,
-			endToEnd: stats(endToEndSamples),
-			vmVsHostLsRatio: round(vmLs.p50 / hostLs.p50),
-			vmLsMinusNoopMs: round(vmLs.p50 - vmNoopExec.p50),
-			vmLsMinusStdoutMs: round(vmLs.p50 - vmStdoutExec.p50),
-			raw,
-		};
-	} finally {
-		rmSync(hostDir, { recursive: true, force: true });
-	}
-}
-
-async function main(): Promise<void> {
-	const { iterations, warmup, serialRuns, fileCounts, wasmWarmupDebug } =
-		parseArgs();
-	const hardware = getHardware();
-	console.error("=== VM `ls` Benchmark ===");
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(
-		`Iterations: ${iterations} (+ ${warmup} warmup), serial ls runs: ${serialRuns}, file counts: ${fileCounts.join(",")}`,
-	);
-	if (wasmWarmupDebug) {
-		console.error("WASM warmup debug: enabled");
-	}
-
-	const sidecar = await createBenchSidecar();
-	try {
-		const cases: LsCaseResult[] = [];
-		for (const fileCount of fileCounts) {
-			cases.push(
-				await runCase(
-					fileCount,
-					iterations,
-					warmup,
-					serialRuns,
-					sidecar,
-					wasmWarmupDebug,
-				),
-			);
-		}
-		const emptyCase = cases.find((result) => result.fileCount === 0);
-		if (emptyCase) {
-			for (const result of cases) {
-				result.lsDeltaFromEmptyMs = round(result.vmLs.p50 - emptyCase.vmLs.p50);
-			}
-		}
-		printTable(
-			[
-				"files",
-				"host ls p50",
-				"vm create p50",
-				"vm noop p50",
-				"vm stdout p50",
-				"vm ls p50",
-				"ls-noop",
-				"ls-stdout",
-				"ls-empty delta",
-				"vm/host ls",
-				"end-to-end p50",
-			],
-			cases.map((result) => [
-				result.fileCount,
-				`${result.hostLs.p50}ms`,
-				`${result.vmCreate.p50}ms`,
-				`${result.vmNoopExec.p50}ms`,
-				`${result.vmStdoutExec.p50}ms`,
-				`${result.vmLs.p50}ms`,
-				`${result.vmLsMinusNoopMs}ms`,
-				`${result.vmLsMinusStdoutMs}ms`,
-				result.lsDeltaFromEmptyMs === undefined ? "n/a" : `${result.lsDeltaFromEmptyMs}ms`,
-				`${result.vmVsHostLsRatio}x`,
-				`${result.endToEnd.p50}ms`,
-			]),
-		);
-		console.log(
-			JSON.stringify(
-				{
-					benchmark: "vm-ls-serial",
-					hardware,
-					iterations,
-					warmup,
-					serialRuns,
-					wasmWarmupDebug,
-					cases,
-				},
-				null,
-				2,
-			),
-		);
-	} finally {
-		await sidecar.dispose();
-	}
-}
-
-main().catch((error) => {
-	console.error(error);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/src/focused/mount-readdir.bench.ts b/packages/benchmarks/src/focused/mount-readdir.bench.ts
deleted file mode 100644
index 3437ade57..000000000
--- a/packages/benchmarks/src/focused/mount-readdir.bench.ts
+++ /dev/null
@@ -1,275 +0,0 @@
-/**
- * Mount-table readdir benchmark.
- *
- * Isolates mount-count effects by timing BenchVm.readdir over native host_dir
- * mounts while varying unrelated mount count and child mount count.
- */
-
-import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { createBenchSidecar, createBenchVm, type BenchVm } from "../lib/vm.js";
-import type { HostDirectoryMount, SidecarProcess } from "@secure-exec/core";
-import { getHardware, printTable, round, stats } from "../lib/perf-utils.js";
-
-interface MountReaddirCaseResult {
-	scenario: string;
-	mountCount: number;
-	entryCount: number;
-	iterations: number;
-	warmup: number;
-	returnedCount: number;
-	readdir: ReturnType<typeof stats>;
-	msPerMount: number | null;
-	rawMs: number[];
-}
-
-function parseArgs(): {
-	iterations: number;
-	warmup: number;
-	mountCounts: number[];
-	entryCount: number;
-} {
-	const value = (name: string) =>
-		process.argv.find((arg) => arg.startsWith(`--${name}=`))?.split("=")[1];
-	const iterations = Number(value("iterations") ?? 20);
-	const warmup = Number(value("warmup") ?? 3);
-	const mountCounts = (value("mount-counts") ?? "0,10,100")
-		.split(",")
-		.map((n) => Number(n.trim()))
-		.filter((n) => Number.isFinite(n) && n >= 0);
-	const entryCount = Number(value("entry-count") ?? 32);
-	if (
-		iterations < 1 ||
-		warmup < 0 ||
-		mountCounts.length === 0 ||
-		entryCount < 0
-	) {
-		throw new Error(
-			"invalid args; expected --iterations>=1 --warmup>=0 --mount-counts=0,10,100 --entry-count>=0",
-		);
-	}
-	return { iterations, warmup, mountCounts, entryCount };
-}
-
-function nowMs(start: number): number {
-	return performance.now() - start;
-}
-
-function makeHostDir(root: string, name: string, entryCount = 0): string {
-	const dir = join(root, name);
-	mkdirSync(dir, { recursive: true });
-	for (let i = 0; i < entryCount; i++) {
-		writeFileSync(join(dir, `entry-${String(i).padStart(4, "0")}.txt`), "x");
-	}
-	return dir;
-}
-
-function hostDirMount(path: string, hostPath: string): HostDirectoryMount {
-	return {
-		guestPath: path,
-		hostPath,
-		readOnly: true,
-	};
-}
-
-async function createVm(
-	sidecar: SidecarProcess,
-	mounts: HostDirectoryMount[],
-): Promise<BenchVm> {
-	return createBenchVm({
-		sidecar,
-		mounts,
-	});
-}
-
-async function timeReaddir(
-	vm: BenchVm,
-	path: string,
-	iterations: number,
-	warmup: number,
-	expectedCount: number,
-): Promise<{ samples: number[]; returnedCount: number }> {
-	const samples: number[] = [];
-	let returnedCount = 0;
-	for (let i = 0; i < warmup + iterations; i++) {
-		const start = performance.now();
-	const entries = await vm.readDir(path);
-		const elapsed = nowMs(start);
-		returnedCount = entries.length;
-		if (returnedCount !== expectedCount) {
-			throw new Error(
-				`readdir ${path} returned ${returnedCount}, expected ${expectedCount}`,
-			);
-		}
-		if (i >= warmup) {
-			samples.push(elapsed);
-		}
-	}
-	return { samples, returnedCount };
-}
-
-async function runUnrelatedMountCase(
-	sidecar: SidecarProcess,
-	root: string,
-	mountCount: number,
-	entryCount: number,
-	iterations: number,
-	warmup: number,
-): Promise<MountReaddirCaseResult> {
-	const target = makeHostDir(root, `target-${mountCount}`, entryCount);
-	const mounts: HostDirectoryMount[] = [hostDirMount("/target", target)];
-	for (let i = 0; i < mountCount; i++) {
-		mounts.push(
-			hostDirMount(
-				`/unrelated/mount-${String(i).padStart(4, "0")}`,
-				makeHostDir(root, `unrelated-${mountCount}-${i}`),
-			),
-		);
-	}
-	const vm = await createVm(sidecar, mounts);
-	try {
-		const { samples, returnedCount } = await timeReaddir(
-			vm,
-			"/target",
-			iterations,
-			warmup,
-			entryCount,
-		);
-		const readdir = stats(samples);
-		return {
-			scenario: "target-with-unrelated-mounts",
-			mountCount,
-			entryCount,
-			iterations,
-			warmup,
-			returnedCount,
-			readdir,
-			msPerMount: mountCount === 0 ? null : round(readdir.p50 / mountCount),
-			rawMs: samples,
-		};
-	} finally {
-		await vm.dispose();
-	}
-}
-
-async function runChildMountCase(
-	sidecar: SidecarProcess,
-	root: string,
-	mountCount: number,
-	iterations: number,
-	warmup: number,
-): Promise<MountReaddirCaseResult> {
-	const mounts: HostDirectoryMount[] = [
-		hostDirMount("/mnt", makeHostDir(root, `parent-${mountCount}`)),
-	];
-	for (let i = 0; i < mountCount; i++) {
-		mounts.push(
-			hostDirMount(
-				`/mnt/child-${String(i).padStart(4, "0")}`,
-				makeHostDir(root, `child-${mountCount}-${i}`),
-			),
-		);
-	}
-	const vm = await createVm(sidecar, mounts);
-	try {
-		const { samples, returnedCount } = await timeReaddir(
-			vm,
-			"/mnt",
-			iterations,
-			warmup,
-			mountCount,
-		);
-		const readdir = stats(samples);
-		return {
-			scenario: "parent-with-child-mounts",
-			mountCount,
-			entryCount: 0,
-			iterations,
-			warmup,
-			returnedCount,
-			readdir,
-			msPerMount: mountCount === 0 ? null : round(readdir.p50 / mountCount),
-			rawMs: samples,
-		};
-	} finally {
-		await vm.dispose();
-	}
-}
-
-async function main(): Promise<void> {
-	const { iterations, warmup, mountCounts, entryCount } = parseArgs();
-	const hardware = getHardware();
-	console.error("=== Mount Readdir Benchmark ===");
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(
-		`Iterations: ${iterations} (+ ${warmup} warmup), mount counts: ${mountCounts.join(",")}, entry count: ${entryCount}`,
-	);
-
-	const root = mkdtempSync(join(tmpdir(), "agentos-mount-readdir-"));
-	const sidecar = await createBenchSidecar();
-	try {
-		const cases: MountReaddirCaseResult[] = [];
-		for (const mountCount of mountCounts) {
-			cases.push(
-				await runUnrelatedMountCase(
-					sidecar,
-					root,
-					mountCount,
-					entryCount,
-					iterations,
-					warmup,
-				),
-			);
-			cases.push(
-				await runChildMountCase(sidecar, root, mountCount, iterations, warmup),
-			);
-		}
-
-		printTable(
-			[
-				"scenario",
-				"mounts",
-				"entries",
-				"returned",
-				"p50",
-				"p95",
-				"ms/mount",
-			],
-			cases.map((result) => [
-				result.scenario,
-				result.mountCount,
-				result.entryCount,
-				result.returnedCount,
-				`${result.readdir.p50}ms`,
-				`${result.readdir.p95}ms`,
-				result.msPerMount === null ? "n/a" : `${result.msPerMount}ms`,
-			]),
-		);
-
-		console.log(
-			JSON.stringify(
-				{
-					benchmark: "mount-readdir",
-					hardware,
-					iterations,
-					warmup,
-					mountCounts,
-					entryCount,
-					cases,
-				},
-				null,
-				2,
-			),
-		);
-	} finally {
-		await sidecar.dispose();
-		rmSync(root, { recursive: true, force: true });
-	}
-}
-
-main().catch((error) => {
-	console.error(error);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/src/focused/net-tcp-event-floor.bench.ts b/packages/benchmarks/src/focused/net-tcp-event-floor.bench.ts
deleted file mode 100644
index 90a74b7b5..000000000
--- a/packages/benchmarks/src/focused/net-tcp-event-floor.bench.ts
+++ /dev/null
@@ -1,1274 +0,0 @@
-/**
- * Focused TCP loopback event-floor benchmark.
- *
- * Broad net rows mix connect/accept, polling cadence, write count, payload
- * bytes, read delivery, and close behavior. This benchmark exposes those axes
- * while preserving the same localhost server/client shape.
- */
-
-import net from "node:net";
-import { createBenchSidecar, createBenchVm, type BenchVm } from "../lib/vm.js";
-import type { SidecarProcess } from "@secure-exec/core";
-import { getHardware, printTable, round, stats } from "../lib/perf-utils.js";
-
-type Workload = "connectClose" | "echoOnce" | "burstWritesEchoOnce" | "pingPong" | "concurrentConnect";
-type ReplyMode = "none" | "echoOnceAfterAllBytes" | "echoEachWrite";
-type WriteCadence = "none" | "burstSameTick" | "awaitReplyEachWrite";
-type CostAxis =
-	| "broad"
-	| "connect_accept"
-	| "payload_copy"
-	| "write_count"
-	| "event_cadence"
-	| "concurrency";
-type CompletionSemantics = "client_close" | "listener_close_after_accept";
-type BroadEquivalent =
-	| "tcp_echo_small"
-	| "tcp_tiny_writes_16"
-	| "tcp_echo_big"
-	| "tcp_concurrent_4"
-	| "tcp_connect_close";
-type PayloadKind = "buffer" | "string";
-
-interface NetTcpRow {
-	id: string;
-	workload: Workload;
-	connections: number;
-	writeCount: number;
-	bytesPerWrite: number;
-	replyMode: ReplyMode;
-	writeCadence: WriteCadence;
-	costAxis: CostAxis;
-	compareAgainst?: string;
-	completionSemantics: CompletionSemantics;
-	broadMatrixEquivalent?: BroadEquivalent;
-	payloadKind?: PayloadKind;
-}
-
-interface NetTcpRowResult extends NetTcpRow {
-	totalBytes: number;
-	expectedOps: {
-		connectCalls: number;
-		acceptEvents: number;
-		writeCalls: number;
-		expectedReadEvents: number;
-		closeEvents: number;
-	};
-	node: ReturnType<typeof stats>;
-	guest: ReturnType<typeof stats>;
-	guestVsNodeRatio: number;
-	guestMinusNodeMs: number;
-	guestMsPerConnection: number;
-	guestMsPerWrite?: number;
-	guestMsPerKiB?: number;
-	incrementalGuestMsFromSingleWrite?: number;
-	compareAgainstGuestDeltaMs?: number;
-	guestBridgeTrace?: Record<string, number>;
-	sidecarNetTrace?: Record<string, number>;
-	derivedGuestBridgeTrace?: {
-		rawPollSentinels: number;
-		sentinelDelayFloorMs: number;
-		readRawPerDataEvent?: number;
-		acceptRawPerConnection?: number;
-		writeRawPerUserWrite?: number;
-		avgReadRawElapsedUs?: number;
-		avgWriteRawElapsedUs?: number;
-		avgReadBase64DecodeUs?: number;
-		avgWriteBase64EncodeUs?: number;
-		readBase64DecodeUsPerKiB?: number;
-		writeBase64EncodeUsPerKiB?: number;
-		avgReadPayloadMaterializeUs?: number;
-		readPayloadMaterializeUsPerKiB?: number;
-	};
-	derivedSidecarNetTrace?: {
-		kernelPollEmptyRatio?: number;
-		socketReadDataHitRatio?: number;
-		acceptConnectionHitRatio?: number;
-		avgKernelPollElapsedUs?: number;
-		avgKernelPollWaitUs?: number;
-		avgSocketReadKernelUs?: number;
-		avgSocketWriteKernelUs?: number;
-		avgSocketReadRecordCloneUs?: number;
-		avgSocketReadRecvCopyUs?: number;
-		avgSocketReadRecvChunks?: number;
-		socketReadKernelUsPerKiB?: number;
-		socketWriteKernelUsPerKiB?: number;
-		socketReadRecvCopyUsPerKiB?: number;
-	};
-	raw: {
-		nodeMs: number[];
-		guestMs: number[];
-	};
-}
-
-function defaultRows(): NetTcpRow[] {
-	return [
-		{
-			id: "connect_close_1",
-			workload: "connectClose",
-			connections: 1,
-			writeCount: 0,
-			bytesPerWrite: 0,
-			replyMode: "none",
-			writeCadence: "none",
-			costAxis: "broad",
-			completionSemantics: "client_close",
-			broadMatrixEquivalent: "tcp_connect_close",
-		},
-		{
-			id: "connect_close_4",
-			workload: "connectClose",
-			connections: 4,
-			writeCount: 0,
-			bytesPerWrite: 0,
-			replyMode: "none",
-			writeCadence: "none",
-			costAxis: "connect_accept",
-			compareAgainst: "connect_close_1",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "connect_close_8",
-			workload: "connectClose",
-			connections: 8,
-			writeCount: 0,
-			bytesPerWrite: 0,
-			replyMode: "none",
-			writeCadence: "none",
-			costAxis: "connect_accept",
-			compareAgainst: "connect_close_1",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "echo_1x5",
-			workload: "echoOnce",
-			connections: 1,
-			writeCount: 1,
-			bytesPerWrite: 5,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "broad",
-			completionSemantics: "client_close",
-			broadMatrixEquivalent: "tcp_echo_small",
-		},
-		{
-			id: "echo_1x5_string",
-			workload: "echoOnce",
-			connections: 1,
-			writeCount: 1,
-			bytesPerWrite: 5,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "payload_copy",
-			compareAgainst: "echo_1x5",
-			completionSemantics: "client_close",
-			broadMatrixEquivalent: "tcp_echo_small",
-			payloadKind: "string",
-		},
-		{
-			id: "echo_1x1",
-			workload: "echoOnce",
-			connections: 1,
-			writeCount: 1,
-			bytesPerWrite: 1,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "payload_copy",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "echo_1x4k",
-			workload: "echoOnce",
-			connections: 1,
-			writeCount: 1,
-			bytesPerWrite: 4096,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "payload_copy",
-			compareAgainst: "echo_1x1",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "echo_1x64k",
-			workload: "echoOnce",
-			connections: 1,
-			writeCount: 1,
-			bytesPerWrite: 65_536,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "broad",
-			compareAgainst: "echo_1x1",
-			completionSemantics: "client_close",
-			broadMatrixEquivalent: "tcp_echo_big",
-		},
-		{
-			id: "echo_1x256k",
-			workload: "echoOnce",
-			connections: 1,
-			writeCount: 1,
-			bytesPerWrite: 262_144,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "payload_copy",
-			compareAgainst: "echo_1x64k",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "echo_1x1m",
-			workload: "echoOnce",
-			connections: 1,
-			writeCount: 1,
-			bytesPerWrite: 1_048_576,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "payload_copy",
-			compareAgainst: "echo_1x256k",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "burst_4x1_echo_once",
-			workload: "burstWritesEchoOnce",
-			connections: 1,
-			writeCount: 4,
-			bytesPerWrite: 1,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "write_count",
-			compareAgainst: "echo_1x1",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "burst_16x1_echo_once",
-			workload: "burstWritesEchoOnce",
-			connections: 1,
-			writeCount: 16,
-			bytesPerWrite: 1,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "broad",
-			compareAgainst: "echo_1x1",
-			completionSemantics: "client_close",
-			broadMatrixEquivalent: "tcp_tiny_writes_16",
-		},
-		{
-			id: "burst_16x1_string_echo_once",
-			workload: "burstWritesEchoOnce",
-			connections: 1,
-			writeCount: 16,
-			bytesPerWrite: 1,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "payload_copy",
-			compareAgainst: "burst_16x1_echo_once",
-			completionSemantics: "client_close",
-			broadMatrixEquivalent: "tcp_tiny_writes_16",
-			payloadKind: "string",
-		},
-		{
-			id: "burst_64x1_echo_once",
-			workload: "burstWritesEchoOnce",
-			connections: 1,
-			writeCount: 64,
-			bytesPerWrite: 1,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "write_count",
-			compareAgainst: "echo_1x1",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "burst_16x4096_echo_once",
-			workload: "burstWritesEchoOnce",
-			connections: 1,
-			writeCount: 16,
-			bytesPerWrite: 4096,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "write_count",
-			compareAgainst: "echo_1x64k",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "burst_64x1024_echo_once",
-			workload: "burstWritesEchoOnce",
-			connections: 1,
-			writeCount: 64,
-			bytesPerWrite: 1024,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "write_count",
-			compareAgainst: "echo_1x64k",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "burst_256x256_echo_once",
-			workload: "burstWritesEchoOnce",
-			connections: 1,
-			writeCount: 256,
-			bytesPerWrite: 256,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "write_count",
-			compareAgainst: "echo_1x64k",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "pingpong_1x1",
-			workload: "pingPong",
-			connections: 1,
-			writeCount: 1,
-			bytesPerWrite: 1,
-			replyMode: "echoEachWrite",
-			writeCadence: "awaitReplyEachWrite",
-			costAxis: "event_cadence",
-			compareAgainst: "echo_1x1",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "pingpong_4x1",
-			workload: "pingPong",
-			connections: 1,
-			writeCount: 4,
-			bytesPerWrite: 1,
-			replyMode: "echoEachWrite",
-			writeCadence: "awaitReplyEachWrite",
-			costAxis: "event_cadence",
-			compareAgainst: "pingpong_1x1",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "pingpong_8x1",
-			workload: "pingPong",
-			connections: 1,
-			writeCount: 8,
-			bytesPerWrite: 1,
-			replyMode: "echoEachWrite",
-			writeCadence: "awaitReplyEachWrite",
-			costAxis: "event_cadence",
-			compareAgainst: "pingpong_4x1",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "pingpong_16x1",
-			workload: "pingPong",
-			connections: 1,
-			writeCount: 16,
-			bytesPerWrite: 1,
-			replyMode: "echoEachWrite",
-			writeCadence: "awaitReplyEachWrite",
-			costAxis: "event_cadence",
-			compareAgainst: "pingpong_4x1",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "pingpong_32x1",
-			workload: "pingPong",
-			connections: 1,
-			writeCount: 32,
-			bytesPerWrite: 1,
-			replyMode: "echoEachWrite",
-			writeCadence: "awaitReplyEachWrite",
-			costAxis: "event_cadence",
-			compareAgainst: "pingpong_16x1",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "concurrent_2x1",
-			workload: "concurrentConnect",
-			connections: 2,
-			writeCount: 1,
-			bytesPerWrite: 1,
-			replyMode: "none",
-			writeCadence: "burstSameTick",
-			costAxis: "concurrency",
-			compareAgainst: "connect_close_1",
-			completionSemantics: "listener_close_after_accept",
-		},
-		{
-			id: "concurrent_4x1",
-			workload: "concurrentConnect",
-			connections: 4,
-			writeCount: 1,
-			bytesPerWrite: 1,
-			replyMode: "none",
-			writeCadence: "burstSameTick",
-			costAxis: "broad",
-			compareAgainst: "concurrent_2x1",
-			completionSemantics: "listener_close_after_accept",
-			broadMatrixEquivalent: "tcp_concurrent_4",
-		},
-		{
-			id: "concurrent_8x1",
-			workload: "concurrentConnect",
-			connections: 8,
-			writeCount: 1,
-			bytesPerWrite: 1,
-			replyMode: "none",
-			writeCadence: "burstSameTick",
-			costAxis: "concurrency",
-			compareAgainst: "concurrent_4x1",
-			completionSemantics: "listener_close_after_accept",
-		},
-		{
-			id: "echo_4x1",
-			workload: "echoOnce",
-			connections: 4,
-			writeCount: 1,
-			bytesPerWrite: 1,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "concurrency",
-			compareAgainst: "echo_1x1",
-			completionSemantics: "client_close",
-		},
-		{
-			id: "echo_8x1",
-			workload: "echoOnce",
-			connections: 8,
-			writeCount: 1,
-			bytesPerWrite: 1,
-			replyMode: "echoOnceAfterAllBytes",
-			writeCadence: "burstSameTick",
-			costAxis: "concurrency",
-			compareAgainst: "echo_4x1",
-			completionSemantics: "client_close",
-		},
-	];
-}
-
-function parseArgs(): {
-	iterations: number;
-	warmup: number;
-	rows: NetTcpRow[];
-	netBridgeTrace: boolean;
-	netPollDelayMs?: number;
-} {
-	const value = (name: string) =>
-		process.argv.find((arg) => arg.startsWith(`--${name}=`))?.split("=")[1];
-	const iterations = Number(value("iterations") ?? 20);
-	const warmup = Number(value("warmup") ?? 5);
-	const netBridgeTrace =
-		process.argv.includes("--net-bridge-trace") ||
-		value("net-bridge-trace") === "1" ||
-		value("net-bridge-trace") === "true";
-	const netPollDelayValue = value("net-poll-delay-ms");
-	const netPollDelayMs = netPollDelayValue === undefined ? undefined : Number(netPollDelayValue);
-	const selected = value("rows") ?? value("cases");
-	const rows = selected
-		? selected
-				.split(",")
-				.map((id) => id.trim())
-				.filter(Boolean)
-				.map(rowForId)
-		: defaultRows();
-	if (
-		iterations < 1 ||
-		warmup < 0 ||
-		rows.length === 0 ||
-		(netPollDelayMs !== undefined && (!Number.isFinite(netPollDelayMs) || netPollDelayMs < 0))
-	) {
-		throw new Error("invalid args; expected --iterations>=1 --warmup>=0 --rows=<row ids>");
-	}
-	return { iterations, warmup, rows, netBridgeTrace, netPollDelayMs };
-}
-
-function rowForId(id: string): NetTcpRow {
-	const row = defaultRows().find((candidate) => candidate.id === id);
-	if (row) return row;
-	const match = /^custom_([a-zA-Z]+)_c(\d+)_w(\d+)_b(\d+)$/.exec(id);
-	if (!match) throw new Error(`unknown net-tcp-event-floor row: ${id}`);
-	const workload = match[1] as Workload;
-	const connections = Number(match[2]);
-	const writeCount = Number(match[3]);
-	const bytesPerWrite = Number(match[4]);
-	return {
-		id,
-		workload,
-		connections,
-		writeCount,
-		bytesPerWrite,
-		replyMode: workload === "pingPong" ? "echoEachWrite" : writeCount === 0 ? "none" : "echoOnceAfterAllBytes",
-		writeCadence: workload === "pingPong" ? "awaitReplyEachWrite" : writeCount === 0 ? "none" : "burstSameTick",
-		costAxis: inferCostAxis(workload, connections, writeCount, bytesPerWrite),
-		completionSemantics: workload === "concurrentConnect" ? "listener_close_after_accept" : "client_close",
-	};
-}
-
-function inferCostAxis(
-	workload: Workload,
-	connections: number,
-	writeCount: number,
-	bytesPerWrite: number,
-): CostAxis {
-	if (workload === "connectClose") return connections === 1 ? "broad" : "connect_accept";
-	if (workload === "concurrentConnect") return connections === 4 ? "broad" : "concurrency";
-	if (workload === "pingPong") return "event_cadence";
-	if (connections > 1) return "concurrency";
-	if (writeCount > 1) return "write_count";
-	return bytesPerWrite === 5 || bytesPerWrite === 65_536 ? "broad" : "payload_copy";
-}
-
-function expectedOps(row: NetTcpRow): NetTcpRowResult["expectedOps"] {
-	const writeCalls = row.connections * row.writeCount;
-	return {
-		connectCalls: row.connections,
-		acceptEvents: row.connections,
-		writeCalls,
-		expectedReadEvents:
-			row.replyMode === "none" ? 0 : row.replyMode === "echoEachWrite" ? writeCalls : row.connections,
-		closeEvents: row.connections,
-	};
-}
-
-function rowPayload(row: NetTcpRow): Buffer | string {
-	if (row.payloadKind === "string") return "x".repeat(row.bytesPerWrite);
-	return Buffer.alloc(row.bytesPerWrite, 88);
-}
-
-async function runOneRow(row: NetTcpRow): Promise<void> {
-	if (row.workload === "connectClose") {
-		return runConnectClose(row);
-	}
-	if (row.workload === "concurrentConnect") {
-		return runConcurrentConnect(row);
-	}
-	return runEcho(row);
-}
-
-function runConnectClose(row: NetTcpRow): Promise<void> {
-	return new Promise((resolve, reject) => {
-		let closed = 0;
-		const server = net.createServer((socket) => socket.end());
-		server.on("error", reject);
-		server.listen(0, "127.0.0.1", () => {
-			const address = server.address();
-			if (!address || typeof address === "string") return reject(new Error("missing address"));
-			for (let i = 0; i < row.connections; i++) {
-				const socket = net.connect(address.port, "127.0.0.1");
-				socket.on("error", reject);
-				socket.on("close", () => {
-					closed += 1;
-					if (closed === row.connections) {
-						server.close((error) => (error ? reject(error) : resolve()));
-					}
-				});
-				socket.end();
-			}
-		});
-	});
-}
-
-function runConcurrentConnect(row: NetTcpRow): Promise<void> {
-	return new Promise((resolve, reject) => {
-		let accepted = 0;
-		const server = net.createServer((socket) => {
-			socket.on("data", () => socket.end());
-			if (++accepted === row.connections) {
-				server.close((error) => (error ? reject(error) : resolve()));
-			}
-		});
-		server.on("error", reject);
-		server.listen(0, "127.0.0.1", () => {
-			const address = server.address();
-			if (!address || typeof address === "string") return reject(new Error("missing address"));
-			const payload = rowPayload(row);
-			for (let i = 0; i < row.connections; i++) {
-				const socket = net.connect(address.port, "127.0.0.1");
-				socket.on("error", reject);
-				socket.write(payload);
-			}
-		});
-	});
-}
-
-function runEcho(row: NetTcpRow): Promise<void> {
-	const payload = rowPayload(row);
-	const expectedBytes = row.writeCount * row.bytesPerWrite;
-	return new Promise((resolve, reject) => {
-		let completed = 0;
-		const finishClient = () => {
-			completed += 1;
-			if (completed === row.connections) {
-				server.close((error) => (error ? reject(error) : resolve()));
-			}
-		};
-		const server = net.createServer((socket) => {
-			const chunks: Buffer[] = [];
-			let received = 0;
-			let replies = 0;
-			socket.on("data", (chunk) => {
-				if (row.replyMode === "echoEachWrite") {
-					socket.write(chunk);
-					replies += 1;
-					if (replies >= row.writeCount) socket.end();
-					return;
-				}
-				chunks.push(chunk);
-				received += chunk.length;
-				if (received >= expectedBytes) socket.end(Buffer.concat(chunks));
-			});
-			socket.on("error", reject);
-		});
-		server.on("error", reject);
-		server.listen(0, "127.0.0.1", () => {
-			const address = server.address();
-			if (!address || typeof address === "string") return reject(new Error("missing address"));
-			for (let i = 0; i < row.connections; i++) {
-				const socket = net.connect(address.port, "127.0.0.1");
-				let replies = 0;
-				let received = 0;
-				socket.on("connect", async () => {
-					try {
-						for (let write = 0; write < row.writeCount; write++) {
-							socket.write(payload);
-							if (row.writeCadence === "awaitReplyEachWrite") {
-								await new Promise<void>((replyResolve) => {
-									const onData = (data: Buffer) => {
-										received += data.length;
-										replies += 1;
-										socket.off("data", onData);
-										replyResolve();
-									};
-									socket.on("data", onData);
-								});
-							}
-						}
-					} catch (error) {
-						reject(error);
-					}
-				});
-				if (row.writeCadence !== "awaitReplyEachWrite") {
-					socket.on("data", (data) => {
-						received += data.length;
-						replies += 1;
-					});
-				}
-				socket.on("error", reject);
-				socket.on("close", () => {
-					if (row.replyMode !== "none" && received !== expectedBytes) {
-						reject(new Error(`short echo: expected ${expectedBytes}, got ${received}`));
-						return;
-					}
-					if (row.replyMode === "echoEachWrite" && replies < row.writeCount) {
-						reject(new Error(`short pingpong: expected ${row.writeCount}, got ${replies}`));
-						return;
-					}
-					finishClient();
-				});
-			}
-		});
-	});
-}
-
-async function runNode(row: NetTcpRow, iterations: number, warmup: number): Promise<number[]> {
-	const samples: number[] = [];
-	for (let i = 0; i < warmup + iterations; i++) {
-		const start = performance.now();
-		await runOneRow(row);
-		const ms = performance.now() - start;
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-async function createVm(sidecar: SidecarProcess): Promise<BenchVm> {
-	return createBenchVm({
-		sidecar,
-	});
-}
-
-async function runGuest(
-	vm: BenchVm,
-	row: NetTcpRow,
-	iterations: number,
-	warmup: number,
-	netBridgeTrace: boolean,
-	netPollDelayMs?: number,
-): Promise<{ samples: number[]; bridgeTrace?: Record<string, number>; sidecarNetTrace?: Record<string, number> }> {
-	const scriptPath = `/tmp/net-tcp-event-floor-${row.id}-${Date.now()}-${Math.random()
-		.toString(16)
-		.slice(2)}.mjs`;
-	const source = `
-import net from "node:net";
-const row = ${JSON.stringify(row)};
-const iterations = Number(process.env.BENCH_ITERATIONS || 20);
-const warmup = Number(process.env.BENCH_WARMUP || 5);
-const samples = [];
-const bridgeTrace = ${netBridgeTrace ? "globalThis.__agentOSNetBridgeMetrics" : "undefined"};
-bridgeTrace?.enable?.();
-${netPollDelayMs === undefined ? "" : `bridgeTrace?.setPollDelayMs?.(${JSON.stringify(Math.trunc(netPollDelayMs))});`}
-const __name = (target, _name) => target;
-${rowPayload.toString()}
-${runConnectClose.toString()}
-${runConcurrentConnect.toString()}
-${runEcho.toString()}
-${runOneRow.toString()}
-bridgeTrace?.reset?.();
-for (let i = 0; i < warmup + iterations; i++) {
-  if (i === warmup) bridgeTrace?.reset?.();
-  const start = Number(process.hrtime.bigint()) / 1e6;
-  await runOneRow(row);
-  const ms = Number(process.hrtime.bigint()) / 1e6 - start;
-  if (i >= warmup) samples.push(ms);
-}
-const bridgeSnapshot = bridgeTrace?.snapshot?.();
-if (bridgeSnapshot && typeof bridgeTrace?.pollDelayMs === "function") {
-  bridgeSnapshot.pollDelayMs = bridgeTrace.pollDelayMs();
-}
-const sidecarNetTrace = bridgeSnapshot?.sidecarNetTrace;
-if (bridgeSnapshot && Object.prototype.hasOwnProperty.call(bridgeSnapshot, "sidecarNetTrace")) {
-  delete bridgeSnapshot.sidecarNetTrace;
-}
-process.stdout.write(JSON.stringify({ samples, bridgeTrace: bridgeSnapshot, sidecarNetTrace }));
-`;
-	await vm.writeFile(scriptPath, source);
-	let stdout = "";
-	let stderr = "";
-	const proc = vm.spawn("node", [scriptPath], {
-		env: {
-			BENCH_ITERATIONS: String(iterations),
-			BENCH_WARMUP: String(warmup),
-			...(netBridgeTrace ? { AGENTOS_NET_BRIDGE_TRACE: "1" } : {}),
-			...(process.env.BENCH_NET_RETAIN_OWNED_WRITE_BUFFER === "0"
-				? { AGENTOS_NET_RETAIN_OWNED_WRITE_BUFFER: "0" }
-				: {}),
-		},
-		onStdout: (data) => {
-			stdout += Buffer.from(data).toString("utf8");
-		},
-		onStderr: (data) => {
-			stderr += Buffer.from(data).toString("utf8");
-		},
-	});
-	const code = await vm.waitProcess(proc.pid);
-	if (code !== 0) throw new Error(`guest net-tcp-event-floor ${row.id} exited ${code}\n${stderr}`);
-	return JSON.parse(stdout);
-}
-
-function classifySummary(rows: NetTcpRowResult[]) {
-	const byId = new Map(rows.map((row) => [row.id, row]));
-	const evidence: string[] = [];
-	const echo1 = byId.get("echo_1x1");
-	const echo64k = byId.get("echo_1x64k");
-	const burst16 = byId.get("burst_16x1_echo_once");
-	const burst64 = byId.get("burst_64x1_echo_once");
-	const ping16 = byId.get("pingpong_16x1");
-	const concurrent4 = byId.get("concurrent_4x1");
-	if (echo1 && echo64k) {
-		evidence.push(`payload delta echo_1x64k-echo_1x1=${round(echo64k.guest.p50 - echo1.guest.p50)}ms`);
-	}
-	if (echo64k && burst64) {
-		evidence.push(`write-count delta burst_64x1_echo_once-echo_1x64k=${round(burst64.guest.p50 - echo64k.guest.p50)}ms`);
-	}
-	if (burst16 && ping16) {
-		evidence.push(`cadence delta pingpong_16x1-burst_16x1_echo_once=${round(ping16.guest.p50 - burst16.guest.p50)}ms`);
-	}
-	if (concurrent4) evidence.push(`concurrent_4x1 guest p50=${concurrent4.guest.p50}ms`);
-	const likelyDominantCost =
-		ping16 && burst16 && ping16.guest.p50 > burst16.guest.p50 * 1.5
-			? "poll/event-cadence"
-			: echo64k && echo1 && echo64k.guest.p50 > echo1.guest.p50 * 1.5
-				? "payload-copy"
-				: burst64 && echo64k && burst64.guest.p50 > echo64k.guest.p50 * 1.5
-					? "poll/event-cadence"
-					: "mixed";
-	return {
-		likelyDominantCost,
-		evidence,
-		reproducesBroadRows: ["connect_close_1", "echo_1x5", "echo_1x64k", "burst_16x1_echo_once", "concurrent_4x1"].every((id) =>
-			byId.has(id),
-		),
-	};
-}
-
-function deriveGuestBridgeTrace(trace: Record<string, number> | undefined, measuredIterations = 1) {
-	if (!trace) return undefined;
-	const iterationCount = Math.max(1, measuredIterations);
-	const pollDelayMs = trace.pollDelayMs ?? 10;
-	const rawPollSentinels = (trace.readTimeoutSentinels ?? 0) + (trace.acceptTimeoutSentinels ?? 0);
-	const readRawCalls = trace.readRawCalls ?? 0;
-	const writeRawCalls = trace.writeRawCalls ?? 0;
-	const readBase64DecodeCalls = trace.readBase64DecodeCalls ?? 0;
-	const writeBase64EncodeCalls = trace.writeBase64EncodeCalls ?? 0;
-	const readBase64DecodeBytes = trace.readBase64DecodeBytes ?? 0;
-	const writeBase64EncodeBytes = trace.writeBase64EncodeBytes ?? 0;
-	const readPayloadMaterializeCalls = trace.readPayloadMaterializeCalls ?? 0;
-	const readPayloadMaterializeBytes = trace.readPayloadMaterializeBytes ?? 0;
-	const peerWakeScans = trace.peerWakeScans ?? 0;
-	const peerWakeFound = trace.peerWakeFound ?? 0;
-	const readWakeAttempts = trace.readWakeAttempts ?? 0;
-	const readWakeNoTimer = trace.readWakeNoTimer ?? 0;
-	const readFirstPumpAfterNoTimerWakeCalls = trace.readFirstPumpAfterNoTimerWakeCalls ?? 0;
-	const readFirstPumpResults =
-		(trace.readFirstPumpResultData ?? 0) +
-		(trace.readFirstPumpResultEnd ?? 0) +
-		(trace.readFirstPumpResultTimeout ?? 0);
-	const readFirstPumpScheduleCandidates = trace.readFirstPumpScheduleCandidates ?? 0;
-	const readFirstPumpScheduleQueued = trace.readFirstPumpScheduleQueued ?? 0;
-	const readFirstPumpScheduleRuns = trace.readFirstPumpScheduleRuns ?? 0;
-	const readFirstPumpSchedulePumpCalls = trace.readFirstPumpSchedulePumpCalls ?? 0;
-	const readFirstPumpScheduleResults =
-		(trace.readFirstPumpScheduleResultData ?? 0) +
-		(trace.readFirstPumpScheduleResultTimeout ?? 0) +
-		(trace.readFirstPumpScheduleResultEnd ?? 0);
-	const acceptWakeSocketScans = trace.acceptWakeSocketScans ?? 0;
-	const acceptWakeAttempts = trace.acceptWakeAttempts ?? 0;
-	const acceptWakeNoTimer = trace.acceptWakeNoTimer ?? 0;
-	const acceptFirstPumpAfterNoTimerWakeCalls = trace.acceptFirstPumpAfterNoTimerWakeCalls ?? 0;
-	const acceptFirstPumpResults =
-		(trace.acceptFirstPumpResultConnection ?? 0) +
-		(trace.acceptFirstPumpResultTimeout ?? 0) +
-		(trace.acceptFirstPumpResultEmpty ?? 0);
-	const acceptRawCalls = trace.acceptRawCalls ?? 0;
-	const acceptConnections = trace.acceptConnections ?? 0;
-	const readPollTimerFires = trace.readPollTimerFires ?? 0;
-	const acceptPollTimerFires = trace.acceptPollTimerFires ?? 0;
-	const readMacrotaskYields = trace.readMacrotaskYields ?? 0;
-	const queueReadablePayloads = trace.queueReadablePayloads ?? 0;
-	const queueReadableImmediateReadCalls = trace.queueReadableImmediateReadCalls ?? 0;
-	const socketReadableEmits = trace.socketReadableEmits ?? 0;
-	const socketDataEmits = trace.socketDataEmits ?? 0;
-	const postDeliveryProbeCalls = trace.readPostDeliveryProbeCalls ?? trace.readPostDeliveryNextRawCalls ?? 0;
-	const userWriteDuringDataEmitCalls = trace.userWriteDuringDataEmitCalls ?? 0;
-	const flushCalls = trace.flushCalls ?? 0;
-	const readEventWakeups = trace.readEventWakeups ?? 0;
-	const acceptEventWakeups = trace.acceptEventWakeups ?? 0;
-	return {
-		rawPollSentinels,
-		pollDelayMs,
-		sentinelDelayFloorMs: rawPollSentinels * pollDelayMs,
-		readRawPerDataEvent:
-			trace.readDataEvents > 0 ? round(readRawCalls / trace.readDataEvents) : undefined,
-		acceptRawPerConnection:
-			trace.acceptConnections > 0 ? round((trace.acceptRawCalls ?? 0) / trace.acceptConnections) : undefined,
-		writeRawPerUserWrite:
-			trace.userWriteCalls > 0 ? round(writeRawCalls / trace.userWriteCalls) : undefined,
-		avgReadRawElapsedUs: readRawCalls > 0 ? round((trace.readRawElapsedUs ?? 0) / readRawCalls) : undefined,
-		avgWriteRawElapsedUs: writeRawCalls > 0 ? round((trace.writeRawElapsedUs ?? 0) / writeRawCalls) : undefined,
-		avgReadBase64DecodeUs:
-			readBase64DecodeCalls > 0 ? round((trace.readBase64DecodeUs ?? 0) / readBase64DecodeCalls) : undefined,
-		avgWriteBase64EncodeUs:
-			writeBase64EncodeCalls > 0 ? round((trace.writeBase64EncodeUs ?? 0) / writeBase64EncodeCalls) : undefined,
-		readBase64DecodeUsPerKiB:
-			readBase64DecodeBytes > 0 ? round((trace.readBase64DecodeUs ?? 0) / (readBase64DecodeBytes / 1024)) : undefined,
-		writeBase64EncodeUsPerKiB:
-			writeBase64EncodeBytes > 0 ? round((trace.writeBase64EncodeUs ?? 0) / (writeBase64EncodeBytes / 1024)) : undefined,
-		avgReadPayloadMaterializeUs:
-			readPayloadMaterializeCalls > 0
-				? round((trace.readPayloadMaterializeUs ?? 0) / readPayloadMaterializeCalls)
-				: undefined,
-		readPayloadMaterializeUsPerKiB:
-			readPayloadMaterializeBytes > 0
-				? round((trace.readPayloadMaterializeUs ?? 0) / (readPayloadMaterializeBytes / 1024))
-				: undefined,
-		peerWakeFoundRatio: peerWakeScans > 0 ? round(peerWakeFound / peerWakeScans) : undefined,
-		peerWakeMissRatio: peerWakeScans > 0 ? round((trace.peerWakeMiss ?? 0) / peerWakeScans) : undefined,
-		readWakeWakeupRatio:
-			readWakeAttempts > 0 ? round((trace.readEventWakeups ?? 0) / readWakeAttempts) : undefined,
-		readWakeNoTimerRatio:
-			readWakeAttempts > 0 ? round(readWakeNoTimer / readWakeAttempts) : undefined,
-		readWakeAlreadyRunningRatio:
-			readWakeAttempts > 0 ? round((trace.readWakeAlreadyRunning ?? 0) / readWakeAttempts) : undefined,
-		readWakeNoTimerBeforeFirstPumpRatio:
-			readWakeNoTimer > 0 ? round((trace.readWakeNoTimerBeforeFirstPump ?? 0) / readWakeNoTimer) : undefined,
-		readWakeNoTimerAfterFirstPumpRatio:
-			readWakeNoTimer > 0 ? round((trace.readWakeNoTimerAfterFirstPump ?? 0) / readWakeNoTimer) : undefined,
-		readWakeNoTimerConnectedRatio:
-			readWakeNoTimer > 0 ? round((trace.readWakeNoTimerConnected ?? 0) / readWakeNoTimer) : undefined,
-		readWakeNoTimerConnectingRatio:
-			readWakeNoTimer > 0 ? round((trace.readWakeNoTimerConnecting ?? 0) / readWakeNoTimer) : undefined,
-		readWakeNoTimerRefedRatio:
-			readWakeNoTimer > 0 ? round((trace.readWakeNoTimerRefed ?? 0) / readWakeNoTimer) : undefined,
-		readWakeNoTimerDataListenerRatio:
-			readWakeNoTimer > 0 ? round((trace.readWakeNoTimerHasDataListener ?? 0) / readWakeNoTimer) : undefined,
-		readWakeNoTimerReadableListenerRatio:
-			readWakeNoTimer > 0 ? round((trace.readWakeNoTimerHasReadableListener ?? 0) / readWakeNoTimer) : undefined,
-		readWakeNoTimerPendingWriteFlushRatio:
-			readWakeNoTimer > 0 ? round((trace.readWakeNoTimerPendingWriteFlush ?? 0) / readWakeNoTimer) : undefined,
-		readWakeNoTimerPendingWriteBytesPerIteration:
-			readWakeNoTimer > 0 ? round((trace.readWakeNoTimerPendingWriteBytes ?? 0) / iterationCount) : undefined,
-		avgReadFirstPumpAfterNoTimerWakeUs:
-			readFirstPumpAfterNoTimerWakeCalls > 0
-				? round((trace.readFirstPumpAfterNoTimerWakeUs ?? 0) / readFirstPumpAfterNoTimerWakeCalls)
-				: undefined,
-		readFirstPumpAfterNoTimerWakeMsPerIteration:
-			readFirstPumpAfterNoTimerWakeCalls > 0
-				? round((trace.readFirstPumpAfterNoTimerWakeUs ?? 0) / 1000 / iterationCount)
-				: undefined,
-		readFirstPumpOriginConnectWaitRatio:
-			trace.readPumpRuns > 0 ? round((trace.readFirstPumpOriginConnectWait ?? 0) / trace.readPumpRuns) : undefined,
-		readFirstPumpOriginAcceptedHandleRatio:
-			trace.readPumpRuns > 0 ? round((trace.readFirstPumpOriginAcceptedHandle ?? 0) / trace.readPumpRuns) : undefined,
-		readFirstPumpOriginEventWakeRatio:
-			trace.readPumpRuns > 0 ? round((trace.readFirstPumpOriginEventWake ?? 0) / trace.readPumpRuns) : undefined,
-		readFirstPumpOriginTimerRatio:
-			trace.readPumpRuns > 0 ? round((trace.readFirstPumpOriginTimer ?? 0) / trace.readPumpRuns) : undefined,
-		readFirstPumpOriginRefRatio:
-			trace.readPumpRuns > 0 ? round((trace.readFirstPumpOriginRef ?? 0) / trace.readPumpRuns) : undefined,
-		readFirstPumpOriginTlsRatio:
-			trace.readPumpRuns > 0 ? round((trace.readFirstPumpOriginTls ?? 0) / trace.readPumpRuns) : undefined,
-		readFirstPumpOriginUnknownRatio:
-			trace.readPumpRuns > 0 ? round((trace.readFirstPumpOriginUnknown ?? 0) / trace.readPumpRuns) : undefined,
-		readFirstPumpResultDataRatio:
-			readFirstPumpResults > 0 ? round((trace.readFirstPumpResultData ?? 0) / readFirstPumpResults) : undefined,
-		readFirstPumpResultEndRatio:
-			readFirstPumpResults > 0 ? round((trace.readFirstPumpResultEnd ?? 0) / readFirstPumpResults) : undefined,
-		readFirstPumpResultTimeoutRatio:
-			readFirstPumpResults > 0 ? round((trace.readFirstPumpResultTimeout ?? 0) / readFirstPumpResults) : undefined,
-		readFirstPumpScheduleQueueRatio:
-			readFirstPumpScheduleCandidates > 0 ? round(readFirstPumpScheduleQueued / readFirstPumpScheduleCandidates) : undefined,
-		readFirstPumpScheduleRunRatio:
-			readFirstPumpScheduleQueued > 0 ? round(readFirstPumpScheduleRuns / readFirstPumpScheduleQueued) : undefined,
-		readFirstPumpSchedulePumpCallRatio:
-			readFirstPumpScheduleRuns > 0 ? round(readFirstPumpSchedulePumpCalls / readFirstPumpScheduleRuns) : undefined,
-		readFirstPumpScheduleSkipPumpStartedRatio:
-			readFirstPumpScheduleRuns > 0
-				? round((trace.readFirstPumpScheduleSkipPumpStarted ?? 0) / readFirstPumpScheduleRuns)
-				: undefined,
-		avgReadFirstPumpScheduleQueuedToRunUs:
-			readFirstPumpScheduleRuns > 0
-				? round((trace.readFirstPumpScheduleQueuedToRunUs ?? 0) / readFirstPumpScheduleRuns)
-				: undefined,
-		readFirstPumpScheduleQueuedToRunMsPerIteration:
-			readFirstPumpScheduleRuns > 0
-				? round((trace.readFirstPumpScheduleQueuedToRunUs ?? 0) / 1000 / iterationCount)
-				: undefined,
-		avgReadFirstPumpScheduleQueuedToPumpStartUs:
-			readFirstPumpSchedulePumpCalls > 0
-				? round((trace.readFirstPumpScheduleQueuedToPumpStartUs ?? 0) / readFirstPumpSchedulePumpCalls)
-				: undefined,
-		readFirstPumpScheduleQueuedToPumpStartMsPerIteration:
-			readFirstPumpSchedulePumpCalls > 0
-				? round((trace.readFirstPumpScheduleQueuedToPumpStartUs ?? 0) / 1000 / iterationCount)
-				: undefined,
-		readFirstPumpScheduleResultDataRatio:
-			readFirstPumpScheduleResults > 0
-				? round((trace.readFirstPumpScheduleResultData ?? 0) / readFirstPumpScheduleResults)
-				: undefined,
-		readFirstPumpScheduleResultTimeoutRatio:
-			readFirstPumpScheduleResults > 0
-				? round((trace.readFirstPumpScheduleResultTimeout ?? 0) / readFirstPumpScheduleResults)
-				: undefined,
-		acceptWakeSocketFoundRatio:
-			acceptWakeSocketScans > 0 ? round((trace.acceptWakeSocketFound ?? 0) / acceptWakeSocketScans) : undefined,
-		acceptWakeWakeupRatio:
-			acceptWakeAttempts > 0 ? round((trace.acceptEventWakeups ?? 0) / acceptWakeAttempts) : undefined,
-		acceptWakeNoTimerRatio:
-			acceptWakeAttempts > 0 ? round(acceptWakeNoTimer / acceptWakeAttempts) : undefined,
-		acceptWakeNoTimerBeforeFirstPumpRatio:
-			acceptWakeNoTimer > 0 ? round((trace.acceptWakeNoTimerBeforeFirstPump ?? 0) / acceptWakeNoTimer) : undefined,
-		acceptWakeNoTimerAfterFirstPumpRatio:
-			acceptWakeNoTimer > 0 ? round((trace.acceptWakeNoTimerAfterFirstPump ?? 0) / acceptWakeNoTimer) : undefined,
-		acceptWakeNoTimerLoopRunningRatio:
-			acceptWakeNoTimer > 0 ? round((trace.acceptWakeNoTimerLoopRunning ?? 0) / acceptWakeNoTimer) : undefined,
-		acceptWakeNoTimerLoopActiveRatio:
-			acceptWakeNoTimer > 0 ? round((trace.acceptWakeNoTimerLoopActive ?? 0) / acceptWakeNoTimer) : undefined,
-		acceptWakeNoTimerRefedRatio:
-			acceptWakeNoTimer > 0 ? round((trace.acceptWakeNoTimerRefed ?? 0) / acceptWakeNoTimer) : undefined,
-		acceptWakeNoTimerConnectionsPerWake:
-			acceptWakeNoTimer > 0 ? round((trace.acceptWakeNoTimerConnections ?? 0) / acceptWakeNoTimer) : undefined,
-		avgAcceptFirstPumpAfterNoTimerWakeUs:
-			acceptFirstPumpAfterNoTimerWakeCalls > 0
-				? round((trace.acceptFirstPumpAfterNoTimerWakeUs ?? 0) / acceptFirstPumpAfterNoTimerWakeCalls)
-				: undefined,
-		acceptFirstPumpAfterNoTimerWakeMsPerIteration:
-			acceptFirstPumpAfterNoTimerWakeCalls > 0
-				? round((trace.acceptFirstPumpAfterNoTimerWakeUs ?? 0) / 1000 / iterationCount)
-				: undefined,
-		acceptFirstPumpOriginListenRatio:
-			trace.acceptPumpRuns > 0 ? round((trace.acceptFirstPumpOriginListen ?? 0) / trace.acceptPumpRuns) : undefined,
-		acceptFirstPumpOriginEventWakeRatio:
-			trace.acceptPumpRuns > 0 ? round((trace.acceptFirstPumpOriginEventWake ?? 0) / trace.acceptPumpRuns) : undefined,
-		acceptFirstPumpOriginTimerRatio:
-			trace.acceptPumpRuns > 0 ? round((trace.acceptFirstPumpOriginTimer ?? 0) / trace.acceptPumpRuns) : undefined,
-		acceptFirstPumpOriginRefRatio:
-			trace.acceptPumpRuns > 0 ? round((trace.acceptFirstPumpOriginRef ?? 0) / trace.acceptPumpRuns) : undefined,
-		acceptFirstPumpOriginUnknownRatio:
-			trace.acceptPumpRuns > 0 ? round((trace.acceptFirstPumpOriginUnknown ?? 0) / trace.acceptPumpRuns) : undefined,
-		acceptFirstPumpResultConnectionRatio:
-			acceptFirstPumpResults > 0
-				? round((trace.acceptFirstPumpResultConnection ?? 0) / acceptFirstPumpResults)
-				: undefined,
-		acceptFirstPumpResultTimeoutRatio:
-			acceptFirstPumpResults > 0 ? round((trace.acceptFirstPumpResultTimeout ?? 0) / acceptFirstPumpResults) : undefined,
-		acceptFirstPumpResultEmptyRatio:
-			acceptFirstPumpResults > 0 ? round((trace.acceptFirstPumpResultEmpty ?? 0) / acceptFirstPumpResults) : undefined,
-		avgAcceptRawElapsedUs:
-			acceptRawCalls > 0 ? round((trace.acceptRawElapsedUs ?? 0) / acceptRawCalls) : undefined,
-			avgAcceptJsonParseUs:
-				acceptConnections > 0 ? round((trace.acceptJsonParseUs ?? 0) / acceptConnections) : undefined,
-			avgAcceptOnConnectionUs:
-				acceptConnections > 0 ? round((trace.acceptOnConnectionUs ?? 0) / acceptConnections) : undefined,
-			avgReadMacrotaskYieldUs:
-				readMacrotaskYields > 0 ? round((trace.readMacrotaskYieldElapsedUs ?? 0) / readMacrotaskYields) : undefined,
-			readMacrotaskYieldMsPerIteration:
-				readMacrotaskYields > 0 ? round((trace.readMacrotaskYieldElapsedUs ?? 0) / 1000 / iterationCount) : undefined,
-			avgReadPollTimerFireLagUs:
-				readPollTimerFires > 0 ? round((trace.readPollTimerFireLagUs ?? 0) / readPollTimerFires) : undefined,
-			readPollTimerFireLagMsPerIteration:
-				readPollTimerFires > 0 ? round((trace.readPollTimerFireLagUs ?? 0) / 1000 / iterationCount) : undefined,
-			avgAcceptPollTimerFireLagUs:
-				acceptPollTimerFires > 0 ? round((trace.acceptPollTimerFireLagUs ?? 0) / acceptPollTimerFires) : undefined,
-			acceptPollTimerFireLagMsPerIteration:
-				acceptPollTimerFires > 0 ? round((trace.acceptPollTimerFireLagUs ?? 0) / 1000 / iterationCount) : undefined,
-			avgQueueReadablePayloadUs:
-				queueReadablePayloads > 0 ? round((trace.queueReadablePayloadElapsedUs ?? 0) / queueReadablePayloads) : undefined,
-			queueReadablePayloadMsPerIteration:
-				queueReadablePayloads > 0 ? round((trace.queueReadablePayloadElapsedUs ?? 0) / 1000 / iterationCount) : undefined,
-			avgQueueReadableImmediateReadUs:
-				queueReadableImmediateReadCalls > 0
-					? round((trace.queueReadableImmediateReadUs ?? 0) / queueReadableImmediateReadCalls)
-					: undefined,
-			avgSocketReadableEmitUs:
-				socketReadableEmits > 0 ? round((trace.socketReadableEmitUs ?? 0) / socketReadableEmits) : undefined,
-			socketReadableEmitMsPerIteration:
-				socketReadableEmits > 0 ? round((trace.socketReadableEmitUs ?? 0) / 1000 / iterationCount) : undefined,
-			avgSocketDataEmitUs:
-				socketDataEmits > 0 ? round((trace.socketDataEmitUs ?? 0) / socketDataEmits) : undefined,
-			socketDataEmitMsPerIteration:
-				socketDataEmits > 0 ? round((trace.socketDataEmitUs ?? 0) / 1000 / iterationCount) : undefined,
-			postDeliveryProbeSentinelRatio:
-				postDeliveryProbeCalls > 0
-					? round((trace.readPostDeliveryProbeTimeoutSentinels ?? trace.readPostDeliveryNextRawTimeoutSentinels ?? 0) / postDeliveryProbeCalls)
-					: undefined,
-			postDeliveryProbeDataRatio:
-				postDeliveryProbeCalls > 0
-					? round((trace.readPostDeliveryProbeDataEvents ?? trace.readPostDeliveryNextRawDataEvents ?? 0) / postDeliveryProbeCalls)
-					: undefined,
-			avgPostDeliveryToProbeStartUs:
-				postDeliveryProbeCalls > 0 ? round((trace.readPostDeliveryToProbeStartUs ?? 0) / postDeliveryProbeCalls) : undefined,
-			postDeliveryProbeMsPerIteration:
-				postDeliveryProbeCalls > 0 ? round((trace.readPostDeliveryProbeElapsedUs ?? 0) / 1000 / iterationCount) : undefined,
-			postDeliveryPendingWriteFlushRatio:
-				postDeliveryProbeCalls > 0 ? round((trace.readPostDeliveryPendingWriteFlushes ?? 0) / postDeliveryProbeCalls) : undefined,
-			postDeliveryPendingWriteBytesPerIteration:
-				postDeliveryProbeCalls > 0 ? round((trace.readPostDeliveryPendingWriteBytes ?? 0) / iterationCount) : undefined,
-			avgDataEmitStartToUserWriteUs:
-				userWriteDuringDataEmitCalls > 0
-					? round((trace.dataEmitStartToUserWriteUs ?? 0) / userWriteDuringDataEmitCalls)
-					: undefined,
-			dataEmitStartToUserWriteMsPerIteration:
-				userWriteDuringDataEmitCalls > 0 ? round((trace.dataEmitStartToUserWriteUs ?? 0) / 1000 / iterationCount) : undefined,
-			avgDataEmitEndToUserWriteUs:
-				trace.dataEmitEndToUserWriteUs > 0 && trace.userWriteCalls > userWriteDuringDataEmitCalls
-					? round((trace.dataEmitEndToUserWriteUs ?? 0) / (trace.userWriteCalls - userWriteDuringDataEmitCalls))
-					: undefined,
-			dataEmitEndToUserWriteMsPerIteration:
-				trace.dataEmitEndToUserWriteUs > 0 ? round((trace.dataEmitEndToUserWriteUs ?? 0) / 1000 / iterationCount) : undefined,
-			avgWriteQueuedToFlushStartUs:
-				flushCalls > 0 ? round((trace.writeQueuedToFlushStartUs ?? 0) / flushCalls) : undefined,
-			writeQueuedToFlushStartMsPerIteration:
-				flushCalls > 0 ? round((trace.writeQueuedToFlushStartUs ?? 0) / 1000 / iterationCount) : undefined,
-			avgWriteFlushQueuedToRawUs:
-				flushCalls > 0 ? round((trace.writeFlushQueuedToRawUs ?? 0) / flushCalls) : undefined,
-			writeFlushQueuedToRawMsPerIteration:
-				flushCalls > 0 ? round((trace.writeFlushQueuedToRawUs ?? 0) / 1000 / iterationCount) : undefined,
-			avgReadWakeQueuedToPumpStartUs:
-				readEventWakeups > 0 ? round((trace.readWakeQueuedToPumpStartUs ?? 0) / readEventWakeups) : undefined,
-			readWakeQueuedToPumpStartMsPerIteration:
-				readEventWakeups > 0 ? round((trace.readWakeQueuedToPumpStartUs ?? 0) / 1000 / iterationCount) : undefined,
-			avgAcceptWakeQueuedToPumpStartUs:
-				acceptEventWakeups > 0 ? round((trace.acceptWakeQueuedToPumpStartUs ?? 0) / acceptEventWakeups) : undefined,
-			acceptWakeQueuedToPumpStartMsPerIteration:
-				acceptEventWakeups > 0 ? round((trace.acceptWakeQueuedToPumpStartUs ?? 0) / 1000 / iterationCount) : undefined,
-		};
-	}
-
-function deriveSidecarNetTrace(trace: Record<string, number> | undefined) {
-	if (!trace) return undefined;
-	const kernelPollTargets = trace.kernelPollTargets ?? 0;
-	const socketReadCalls = trace.socketReadCalls ?? 0;
-	const serverAcceptCalls = trace.serverAcceptCalls ?? 0;
-	const socketReadDataEvents = trace.socketReadDataEvents ?? 0;
-	const socketReadBytes = trace.socketReadBytes ?? 0;
-	const socketReadRecordCloneCalls = trace.socketReadRecordCloneCalls ?? 0;
-	const socketReadRecvCalls = trace.socketReadRecvCalls ?? 0;
-	const socketReadRecvBytes = trace.socketReadRecvBytes ?? 0;
-	const socketWriteCalls = trace.socketWriteCalls ?? 0;
-	const socketWriteBytes = trace.socketWriteBytes ?? 0;
-	return {
-		kernelPollEmptyRatio:
-			kernelPollTargets > 0 ? round((trace.kernelPollEmpty ?? 0) / kernelPollTargets) : undefined,
-		socketReadDataHitRatio:
-			socketReadCalls > 0 ? round(socketReadDataEvents / socketReadCalls) : undefined,
-		acceptConnectionHitRatio:
-			serverAcceptCalls > 0 ? round((trace.serverAcceptConnections ?? 0) / serverAcceptCalls) : undefined,
-		avgKernelPollElapsedUs:
-			kernelPollTargets > 0 ? round((trace.kernelPollElapsedUs ?? 0) / kernelPollTargets) : undefined,
-		avgKernelPollWaitUs:
-			kernelPollTargets > 0 ? round((trace.kernelPollWaitUs ?? 0) / kernelPollTargets) : undefined,
-		avgSocketReadKernelUs:
-			socketReadDataEvents > 0 ? round((trace.socketReadKernelUs ?? 0) / socketReadDataEvents) : undefined,
-		avgSocketWriteKernelUs:
-			socketWriteCalls > 0 ? round((trace.socketWriteKernelUs ?? 0) / socketWriteCalls) : undefined,
-		avgSocketReadRecordCloneUs:
-			socketReadRecordCloneCalls > 0
-				? round((trace.socketReadRecordCloneUs ?? 0) / socketReadRecordCloneCalls)
-				: undefined,
-		avgSocketReadRecvCopyUs:
-			socketReadRecvCalls > 0 ? round((trace.socketReadRecvCopyUs ?? 0) / socketReadRecvCalls) : undefined,
-		avgSocketReadRecvChunks:
-			socketReadRecvCalls > 0 ? round((trace.socketReadRecvChunks ?? 0) / socketReadRecvCalls) : undefined,
-		socketReadKernelUsPerKiB:
-			socketReadBytes > 0 ? round((trace.socketReadKernelUs ?? 0) / (socketReadBytes / 1024)) : undefined,
-		socketWriteKernelUsPerKiB:
-			socketWriteBytes > 0 ? round((trace.socketWriteKernelUs ?? 0) / (socketWriteBytes / 1024)) : undefined,
-		socketReadRecvCopyUsPerKiB:
-			socketReadRecvBytes > 0 ? round((trace.socketReadRecvCopyUs ?? 0) / (socketReadRecvBytes / 1024)) : undefined,
-	};
-}
-
-async function runCase(
-	row: NetTcpRow,
-	iterations: number,
-	warmup: number,
-	sidecar: SidecarProcess,
-	netBridgeTrace: boolean,
-	netPollDelayMs?: number,
-): Promise<NetTcpRowResult> {
-	const nodeMs = await runNode(row, iterations, warmup);
-	const vm = await createVm(sidecar);
-	try {
-		const guestRun = await runGuest(vm, row, iterations, warmup, netBridgeTrace, netPollDelayMs);
-		const guestMs = guestRun.samples;
-		const node = stats(nodeMs);
-		const guest = stats(guestMs);
-		const totalBytes = row.connections * row.writeCount * row.bytesPerWrite;
-		const ops = expectedOps(row);
-		const singleWrite = row.writeCount > 1 ? undefined : undefined;
-		return {
-			...row,
-			totalBytes,
-			expectedOps: ops,
-			node,
-			guest,
-			guestVsNodeRatio: round(guest.p50 / node.p50),
-			guestMinusNodeMs: round(guest.p50 - node.p50),
-			guestMsPerConnection: round(guest.p50 / row.connections),
-			guestMsPerWrite: ops.writeCalls > 0 ? round(guest.p50 / ops.writeCalls) : undefined,
-			guestMsPerKiB: totalBytes > 0 ? round(guest.p50 / (totalBytes / 1024)) : undefined,
-			incrementalGuestMsFromSingleWrite: singleWrite,
-			guestBridgeTrace: guestRun.bridgeTrace,
-			sidecarNetTrace: guestRun.sidecarNetTrace,
-				derivedGuestBridgeTrace: deriveGuestBridgeTrace(guestRun.bridgeTrace, guestMs.length),
-			derivedSidecarNetTrace: deriveSidecarNetTrace(guestRun.sidecarNetTrace),
-			raw: { nodeMs, guestMs },
-		};
-	} finally {
-		await vm.dispose();
-	}
-}
-
-function addIncrementalFields(rows: NetTcpRowResult[]): void {
-	const single = rows.find((row) => row.id === "echo_1x1");
-	const byId = new Map(rows.map((row) => [row.id, row]));
-	for (const row of rows) {
-		if (single && row.bytesPerWrite === 1 && row.writeCount > 1 && row.connections === 1) {
-			row.incrementalGuestMsFromSingleWrite = round(row.guest.p50 - single.guest.p50);
-		}
-		if (row.compareAgainst) {
-			const baseline = byId.get(row.compareAgainst);
-			if (baseline) {
-				row.compareAgainstGuestDeltaMs = round(row.guest.p50 - baseline.guest.p50);
-			}
-		}
-	}
-}
-
-async function main(): Promise<void> {
-	const { iterations, warmup, rows, netBridgeTrace, netPollDelayMs } = parseArgs();
-	const hardware = getHardware();
-	console.error("=== Net TCP Event Floor Benchmark ===");
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(`Iterations: ${iterations} (+ ${warmup} warmup), rows: ${rows.map((r) => r.id).join(",")}`);
-	if (netBridgeTrace) console.error("Guest net bridge tracing: enabled");
-	if (netPollDelayMs !== undefined) console.error(`Guest net bridge poll delay: ${Math.trunc(netPollDelayMs)}ms`);
-	const sidecar = await createBenchSidecar();
-	try {
-		const results: NetTcpRowResult[] = [];
-		for (const row of rows) {
-			const result = await runCase(row, iterations, warmup, sidecar, netBridgeTrace, netPollDelayMs);
-			results.push(result);
-			console.error(
-				`  row=${row.id}: node.p50=${result.node.p50}ms guest.p50=${result.guest.p50}ms ratio=${result.guestVsNodeRatio}x`,
-			);
-		}
-		addIncrementalFields(results);
-		const summary = classifySummary(results);
-		printTable(
-			[
-				"row",
-				"workload",
-				"conn",
-				"writes",
-				"bytes/write",
-				"node p50",
-				"guest p50",
-				"guest/node",
-				"guest ms/write",
-				...(netBridgeTrace
-					? [
-							"read sentinels",
-							"accept sentinels",
-							"kernel empty",
-							"raw writes",
-							"copy bytes",
-							"retain bytes",
-							"b64 decode us",
-							"b64 encode us",
-							"kernel rw us",
-						]
-					: []),
-			],
-			results.map((row) => [
-				row.id,
-				row.workload,
-				row.connections,
-				row.writeCount,
-				row.bytesPerWrite,
-				`${row.node.p50}ms`,
-				`${row.guest.p50}ms`,
-				`${row.guestVsNodeRatio}x`,
-				row.guestMsPerWrite === undefined ? "n/a" : `${row.guestMsPerWrite}ms`,
-				...(netBridgeTrace
-					? [
-							row.guestBridgeTrace?.readTimeoutSentinels ?? 0,
-							row.guestBridgeTrace?.acceptTimeoutSentinels ?? 0,
-							row.sidecarNetTrace?.kernelPollEmpty ?? 0,
-							row.guestBridgeTrace?.writeRawCalls ?? 0,
-							row.guestBridgeTrace?.queuedWriteCopiedBytes ?? 0,
-							row.guestBridgeTrace?.queuedWriteRetainedBytes ?? 0,
-							row.derivedGuestBridgeTrace?.avgReadBase64DecodeUs ?? 0,
-							row.derivedGuestBridgeTrace?.avgWriteBase64EncodeUs ?? 0,
-							`${row.derivedSidecarNetTrace?.avgSocketReadKernelUs ?? 0}/${row.derivedSidecarNetTrace?.avgSocketWriteKernelUs ?? 0}`,
-						]
-					: []),
-			]),
-		);
-		console.log(
-			JSON.stringify(
-				{
-					benchmark: netBridgeTrace ? "net-tcp-cadence-trace" : "net-tcp-event-floor",
-					generatedAt: new Date().toISOString(),
-					hardware,
-					iterations,
-					warmup,
-					netBridgeTrace,
-					netPollDelayMs: netPollDelayMs === undefined ? undefined : Math.trunc(netPollDelayMs),
-					rows: results,
-					summary,
-				},
-				null,
-				2,
-			),
-		);
-	} finally {
-		await sidecar.dispose();
-	}
-}
-
-main().catch((error) => {
-	console.error(error);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/src/focused/overlay-readdir.bench.ts b/packages/benchmarks/src/focused/overlay-readdir.bench.ts
deleted file mode 100644
index 042fd6f72..000000000
--- a/packages/benchmarks/src/focused/overlay-readdir.bench.ts
+++ /dev/null
@@ -1,26 +0,0 @@
-/**
- * Overlay readdir benchmark.
- *
- * Skipped in secure-exec: the source benchmark measured Agent OS' TypeScript
- * overlay layer store API, which is not exposed by @secure-exec/core.
- */
-
-import { getHardware } from "../lib/perf-utils.js";
-
-const reason =
-	"Agent OS TypeScript overlay layer-store APIs (createInMemoryLayerStore/createSnapshotExport) have no secure-exec package equivalent";
-
-console.error(`overlay-readdir skipped: ${reason}`);
-console.log(
-	JSON.stringify(
-		{
-			benchmark: "overlay-readdir",
-			skipped: true,
-			reason,
-			hardware: getHardware(),
-			results: [],
-		},
-		null,
-		2,
-	),
-);
diff --git a/packages/benchmarks/src/focused/process-spawn.bench.ts b/packages/benchmarks/src/focused/process-spawn.bench.ts
deleted file mode 100644
index e8a7bedf2..000000000
--- a/packages/benchmarks/src/focused/process-spawn.bench.ts
+++ /dev/null
@@ -1,1480 +0,0 @@
-/**
- * Differential 3-layer process-spawn benchmark (PoC for the fuzz-perf harness).
- *
- * Primary op `node_exit` = spawn a process that runs `node -e 'process.exit(0)'` and
- * wait for it to exit, measured at three layers so the ratios are honest:
- *
- *   native floor   real host node via Rust std::process   (native-baseline binary)
- *   node reference  real host node via Node child_process  (in-process, host)
- *   guest           node inside a secure-exec VM (a fresh V8 isolate per spawn)
- *
- *   emulation_tax = guest.p50 / node.p50   <- what secure-exec's emulation adds
- *   total_tax     = guest.p50 / native.p50 <- total cost over the raw host floor
- *
- * The guest layer hits the V8-isolate-per-spawn path that the surface map flagged as
- * the dominant process cost (a new isolate + 2 OS threads + snapshot deserialize per
- * spawn). We compare it against a real host node process doing the same logical op, so
- * the tax reflects emulation overhead rather than "JS startup is slow".
- *
- * For absolute-floor context we also print the native cost of a libc `sh -c 'exit 0'`
- * (op `spawn_exit`) — ~0.3 ms — to show how far the node-spawn floor already sits above
- * the cheapest possible process. The WASM-shell guest path (sh/echo) is a future
- * addition once the registry WASM binaries are built.
- *
- * Run:
- *   pnpm exec tsx scripts/benchmarks/process-spawn.bench.ts
- *   BENCH_ITERATIONS=5 BENCH_WARMUP=2 pnpm exec tsx scripts/benchmarks/process-spawn.bench.ts  # smoke
- *
- * Low-variance discipline: pin a core (taskset -c) and pass --expose-gc; one shared VM
- * is reused across all guest iters (no per-iter VM boot). Trust p50/p95/p99, not mean.
- */
-
-import { type ChildProcess, spawn, spawnSync } from "node:child_process";
-import { mkdirSync, mkdtempSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { createBenchSidecar, createBenchVm, type BenchVm } from "../lib/vm.js";
-import type { SidecarProcess } from "@secure-exec/core";
-import {
-	forceGC,
-	getHardware,
-	printTable,
-	round,
-	stats,
-} from "../lib/perf-utils.js";
-import { runNativeLayer } from "../lib/native.js";
-import { runNativePhaseLayer } from "../lib/native.js";
-
-const ITERATIONS = Number(process.env.BENCH_ITERATIONS ?? 200);
-const WARMUP = Number(process.env.BENCH_WARMUP ?? 20);
-const PROCESS_LIFECYCLE_TRACE =
-	process.env.BENCH_PROCESS_LIFECYCLE_TRACE === "1";
-
-const NODE_ARGS = ["-e", "process.exit(0)"];
-const FANOUT = 8;
-const FANOUT_LADDER = [1, 8, 32] as const;
-
-type PhaseName = "total" | "spawn" | "wait_reap" | "spawn_batch" | "wait_reap_batch";
-type PhaseSamples = Partial<Record<PhaseName, number[]>>;
-
-interface ProcessLifecycleTrace {
-	version: "BENCH-035" | "BENCH-069";
-	pid: number;
-	processId: string;
-	command: string;
-	args: string[];
-	firstWaiterSource?: string;
-	lastWaiterSource?: string;
-	waiterSources?: Record<string, number>;
-	spawnToWaitBeginMs?: number;
-	waitBlockedOnStartMs?: number;
-	waitTotalMs?: number;
-	trailingOutputDrainMs?: number;
-	finishRoute?: string;
-	start?: Record<string, number | boolean | undefined>;
-	wait?: Record<string, number | boolean | string | undefined>;
-	exit?: Record<string, number | undefined>;
-		output?: Record<string, number | undefined>;
-	}
-
-interface SidecarExecutePhaseMetric {
-	stage: string;
-	calls: number;
-	totalUs: number;
-	avgUs: number;
-	maxUs: number;
-}
-
-interface HostWriteSyncRow {
-	row: "root_cwd_no_write" | "host_cwd_no_write" | "host_cwd_write_1file";
-	cwd: string;
-	writesPerProcess: number;
-	samples: number;
-	wallMs: ReturnType<typeof stats>;
-	sidecarExecutePhases: SidecarExecutePhaseMetric[];
-	cleanSkipCalls: number;
-	hostWriteVisible?: boolean;
-}
-
-interface FanoutLadderRow {
-	fanout: number;
-	samples: number;
-	totalMs: ReturnType<typeof stats>;
-	spawnBatchMs: ReturnType<typeof stats>;
-	waitReapBatchMs: ReturnType<typeof stats>;
-	perProcessWaitReapP50Ms: number;
-	sidecarExecutePhases: SidecarExecutePhaseMetric[];
-}
-
-interface NestedChildProcessRow {
-	row: "guest_node_child_process_8";
-	fanout: number;
-	samples: number;
-	warmup: number;
-	command: string;
-	nodeParentMs: ReturnType<typeof stats>;
-	guestParentMs: ReturnType<typeof stats>;
-	guestVsNodeP50: number;
-	guestMinusNodeP50Ms: number;
-	parentObserved: NestedChildProcessObservationSummary;
-	expectedLifecycleProcessesPerIteration: number;
-	expectedSidecarProcessExecutions: number;
-	expectedPublicParentExecutions: number;
-	expectedNestedChildProcessExecutions: number;
-	sidecarExecutePhases: SidecarExecutePhaseMetric[];
-}
-
-interface NestedChildProcessObservation {
-	expectedChildren: number;
-	exitCallbacks: number;
-	closeCallbacks: number;
-	errorCallbacks: number;
-	nonZeroExitCodes: number;
-	nonZeroCloseCodes: number;
-}
-
-interface NestedChildProcessObservationSummary extends NestedChildProcessObservation {
-	samples: number;
-}
-
-interface NestedChildProcessLayerResult {
-	ms: ReturnType<typeof stats>;
-	observed: NestedChildProcessObservationSummary;
-}
-
-function nowMs(start: bigint): number {
-	return Number(process.hrtime.bigint() - start) / 1e6;
-}
-
-function waitNodeChild(child: ChildProcess): Promise<void> {
-	return new Promise((resolve, reject) => {
-		child.on("error", reject);
-		child.on("exit", (code) =>
-			code === 0 ? resolve() : reject(new Error(`node exited ${code}`)),
-		);
-	});
-}
-
-/** Node reference layer: spawn a real host node that exits, timed in-process. */
-function runNodeLayer(): number[] {
-	const samples: number[] = [];
-	for (let i = 0; i < WARMUP + ITERATIONS; i++) {
-		const t = process.hrtime.bigint();
-		const r = spawnSync("node", NODE_ARGS, { stdio: "ignore" });
-		const ms = nowMs(t);
-		if (r.status !== 0) {
-			throw new Error(`node layer: node exited ${r.status}`);
-		}
-		if (i >= WARMUP) samples.push(ms);
-	}
-	return samples;
-}
-
-/** Guest layer: spawn node inside one reused VM (a fresh V8 isolate per spawn). */
-async function runGuestLayer(sidecar: SidecarProcess): Promise<number[]> {
-	const vm = await createBenchVm({ sidecar });
-	try {
-		for (let i = 0; i < WARMUP; i++) {
-			const p = vm.spawn("node", NODE_ARGS);
-			const code = await vm.waitProcess(p.pid);
-			if (code !== 0) throw new Error(`guest warmup: exit ${code}`);
-		}
-		const samples: number[] = [];
-		for (let i = 0; i < ITERATIONS; i++) {
-			const t = process.hrtime.bigint();
-			const p = vm.spawn("node", NODE_ARGS);
-			await vm.waitProcess(p.pid);
-			samples.push(nowMs(t));
-		}
-		return samples;
-	} finally {
-		await vm.dispose();
-	}
-}
-
-async function runNodeExitPhases(): Promise<PhaseSamples> {
-	const samples: PhaseSamples = { total: [], spawn: [], wait_reap: [] };
-	for (let i = 0; i < WARMUP + ITERATIONS; i++) {
-		const totalStart = process.hrtime.bigint();
-		const spawnStart = process.hrtime.bigint();
-		const child = spawn("node", NODE_ARGS, { stdio: "ignore" });
-		const spawnMs = nowMs(spawnStart);
-		const waitStart = process.hrtime.bigint();
-		await waitNodeChild(child);
-		const waitMs = nowMs(waitStart);
-		const totalMs = nowMs(totalStart);
-		if (i >= WARMUP) {
-			samples.total?.push(totalMs);
-			samples.spawn?.push(spawnMs);
-			samples.wait_reap?.push(waitMs);
-		}
-	}
-	return samples;
-}
-
-async function runNodeFanoutPhases(): Promise<PhaseSamples> {
-	const samples: PhaseSamples = {
-		total: [],
-		spawn_batch: [],
-		wait_reap_batch: [],
-	};
-	for (let i = 0; i < WARMUP + ITERATIONS; i++) {
-		const totalStart = process.hrtime.bigint();
-		const spawnStart = process.hrtime.bigint();
-		const children = Array.from({ length: FANOUT }, () =>
-			spawn("node", NODE_ARGS, { stdio: "ignore" }),
-		);
-		const spawnMs = nowMs(spawnStart);
-		const waitStart = process.hrtime.bigint();
-		await Promise.all(children.map(waitNodeChild));
-		const waitMs = nowMs(waitStart);
-		const totalMs = nowMs(totalStart);
-		if (i >= WARMUP) {
-			samples.total?.push(totalMs);
-			samples.spawn_batch?.push(spawnMs);
-			samples.wait_reap_batch?.push(waitMs);
-		}
-	}
-	return samples;
-}
-
-async function runGuestNodeExitPhases(sidecar: SidecarProcess): Promise<PhaseSamples> {
-	const samples: PhaseSamples = { total: [], spawn: [], wait_reap: [] };
-	const vm = await createBenchVm({ sidecar });
-	try {
-		for (let i = 0; i < WARMUP + ITERATIONS; i++) {
-			const totalStart = process.hrtime.bigint();
-			const spawnStart = process.hrtime.bigint();
-			const child = vm.spawn("node", NODE_ARGS);
-			const spawnMs = nowMs(spawnStart);
-			const waitStart = process.hrtime.bigint();
-			const code = await vm.waitProcess(child.pid);
-			const waitMs = nowMs(waitStart);
-			if (code !== 0) throw new Error(`guest phase node_exit: exit ${code}`);
-			const totalMs = nowMs(totalStart);
-			if (i >= WARMUP) {
-				samples.total?.push(totalMs);
-				samples.spawn?.push(spawnMs);
-				samples.wait_reap?.push(waitMs);
-			}
-		}
-		return samples;
-	} finally {
-		await vm.dispose();
-	}
-}
-
-async function runGuestFanoutPhases(sidecar: SidecarProcess): Promise<PhaseSamples> {
-	const samples: PhaseSamples = {
-		total: [],
-		spawn_batch: [],
-		wait_reap_batch: [],
-	};
-	const vm = await createBenchVm({ sidecar });
-	try {
-		for (let i = 0; i < WARMUP + ITERATIONS; i++) {
-			const totalStart = process.hrtime.bigint();
-			const spawnStart = process.hrtime.bigint();
-			const children = Array.from({ length: FANOUT }, () =>
-				vm.spawn("node", NODE_ARGS),
-			);
-			const spawnMs = nowMs(spawnStart);
-			const waitStart = process.hrtime.bigint();
-			const codes = await Promise.all(
-				children.map((child) => vm.waitProcess(child.pid)),
-			);
-			const waitMs = nowMs(waitStart);
-			const badCode = codes.find((code) => code !== 0);
-			if (badCode !== undefined) {
-				throw new Error(`guest phase fanout: exit ${badCode}`);
-			}
-			const totalMs = nowMs(totalStart);
-			if (i >= WARMUP) {
-				samples.total?.push(totalMs);
-				samples.spawn_batch?.push(spawnMs);
-				samples.wait_reap_batch?.push(waitMs);
-			}
-		}
-		return samples;
-	} finally {
-		await vm.dispose();
-	}
-}
-
-async function runGuestFanoutLadderCase(
-	sidecar: SidecarProcess,
-	executePhasesFile: string,
-	fanout: number,
-): Promise<FanoutLadderRow> {
-	const beforePhases = readSidecarExecutePhases(executePhasesFile);
-	const vm = await createBenchVm({ sidecar });
-	try {
-		const totalSamples: number[] = [];
-		const spawnBatchSamples: number[] = [];
-		const waitReapBatchSamples: number[] = [];
-		for (let i = 0; i < WARMUP + ITERATIONS; i++) {
-			const totalStart = process.hrtime.bigint();
-			const spawnStart = process.hrtime.bigint();
-			const children = Array.from({ length: fanout }, () =>
-				vm.spawn("node", NODE_ARGS),
-			);
-			const spawnMs = nowMs(spawnStart);
-			const waitStart = process.hrtime.bigint();
-			const codes = await Promise.all(
-				children.map((child) => vm.waitProcess(child.pid)),
-			);
-			const waitMs = nowMs(waitStart);
-			const badCode = codes.find((code) => code !== 0);
-			if (badCode !== undefined) {
-				throw new Error(`guest fanout ladder ${fanout}: exit ${badCode}`);
-			}
-			const totalMs = nowMs(totalStart);
-			if (i >= WARMUP) {
-				totalSamples.push(totalMs);
-				spawnBatchSamples.push(spawnMs);
-				waitReapBatchSamples.push(waitMs);
-			}
-		}
-		const waitReapBatch = stats(waitReapBatchSamples);
-		return {
-			fanout,
-			samples: totalSamples.length,
-			totalMs: stats(totalSamples),
-			spawnBatchMs: stats(spawnBatchSamples),
-			waitReapBatchMs: waitReapBatch,
-			perProcessWaitReapP50Ms: round(waitReapBatch.p50 / fanout),
-			sidecarExecutePhases: diffSidecarExecutePhases(
-				beforePhases,
-				readSidecarExecutePhases(executePhasesFile),
-			),
-		};
-	} finally {
-		await vm.dispose();
-	}
-}
-
-async function runGuestFanoutLadderRows(
-	sidecar: SidecarProcess,
-	executePhasesFile: string,
-): Promise<FanoutLadderRow[]> {
-	const rows: FanoutLadderRow[] = [];
-	for (const fanout of FANOUT_LADDER) {
-		rows.push(await runGuestFanoutLadderCase(sidecar, executePhasesFile, fanout));
-	}
-	return rows;
-}
-
-function nestedChildProcessScript(fanout: number): string {
-	return `
-const { spawn } = require("node:child_process");
-const fanout = ${fanout};
-let exits = 0;
-let closes = 0;
-let errors = 0;
-let nonZeroExitCodes = 0;
-let nonZeroCloseCodes = 0;
-let failed = false;
-let done = false;
-const timeout = setTimeout(() => fail("nested child_process fanout timed out"), 5000);
-function fail(message) {
-  if (failed) return;
-  failed = true;
-  clearTimeout(timeout);
-  console.error(message);
-  process.exit(1);
-}
-function maybeDone() {
-  if (!done && closes === fanout) {
-    done = true;
-    clearTimeout(timeout);
-    console.log("__BENCH098__" + JSON.stringify({
-      expectedChildren: fanout,
-      exitCallbacks: exits,
-      closeCallbacks: closes,
-      errorCallbacks: errors,
-      nonZeroExitCodes,
-      nonZeroCloseCodes,
-    }));
-  }
-}
-for (let i = 0; i < fanout; i++) {
-  const child = spawn("node", ["-e", "process.exit(0)"], { stdio: "ignore" });
-  child.on("error", (error) => {
-    errors++;
-    fail(error && error.message ? error.message : String(error));
-  });
-  child.on("exit", (code, signal) => {
-    if (code !== 0) nonZeroExitCodes++;
-    exits++;
-    maybeDone();
-  });
-  child.on("close", (code, signal) => {
-    if (code !== 0) nonZeroCloseCodes++;
-    closes++;
-    maybeDone();
-  });
-}
-`;
-}
-
-function parseNestedChildProcessObservations(
-	stdout: string,
-	fanout: number,
-	context: string,
-): NestedChildProcessObservation[] {
-	const observations = stdout
-		.split(/\r?\n/)
-		.filter((line) => line.startsWith("__BENCH098__"))
-		.map((line) => JSON.parse(line.slice("__BENCH098__".length)) as NestedChildProcessObservation);
-	if (observations.length !== 1) {
-		throw new Error(`${context}: expected one BENCH-098 marker, got ${observations.length}`);
-	}
-	assertNestedChildProcessObservation(observations[0], fanout, context);
-	return observations;
-}
-
-function assertNestedChildProcessObservation(
-	observation: NestedChildProcessObservation,
-	fanout: number,
-	context: string,
-): void {
-	if (
-		observation.expectedChildren !== fanout ||
-		observation.closeCallbacks !== fanout ||
-		observation.errorCallbacks !== 0 ||
-		observation.nonZeroExitCodes !== 0 ||
-		observation.nonZeroCloseCodes !== 0 ||
-		observation.exitCallbacks < 0 ||
-		observation.exitCallbacks > fanout
-	) {
-		throw new Error(
-			`${context}: invalid nested child_process marker ${JSON.stringify(observation)}`,
-		);
-	}
-}
-
-function summarizeNestedChildProcessObservations(
-	observations: NestedChildProcessObservation[],
-): NestedChildProcessObservationSummary {
-	return {
-		samples: observations.length,
-		expectedChildren: observations[0]?.expectedChildren ?? 0,
-		exitCallbacks: observations.reduce(
-			(sum, observation) => sum + observation.exitCallbacks,
-			0,
-		),
-		closeCallbacks: observations.reduce(
-			(sum, observation) => sum + observation.closeCallbacks,
-			0,
-		),
-		errorCallbacks: observations.reduce((sum, observation) => sum + observation.errorCallbacks, 0),
-		nonZeroExitCodes: observations.reduce(
-			(sum, observation) => sum + observation.nonZeroExitCodes,
-			0,
-		),
-		nonZeroCloseCodes: observations.reduce(
-			(sum, observation) => sum + observation.nonZeroCloseCodes,
-			0,
-		),
-	};
-}
-
-function runNodeNestedChildProcessLayer(
-	script: string,
-	fanout: number,
-): NestedChildProcessLayerResult {
-	const samples: number[] = [];
-	const observations: NestedChildProcessObservation[] = [];
-	for (let i = 0; i < WARMUP + ITERATIONS; i++) {
-		const t = process.hrtime.bigint();
-		const r = spawnSync("node", ["-e", script], {
-			encoding: "utf8",
-			stdio: ["ignore", "pipe", "pipe"],
-		});
-		const ms = nowMs(t);
-		if (r.status !== 0) {
-			throw new Error(
-				`node nested child_process: node exited ${r.status}: ${r.stderr}`,
-			);
-		}
-		const marker = parseNestedChildProcessObservations(
-			r.stdout,
-			fanout,
-			`node nested child_process iteration ${i}`,
-		)[0];
-		if (i >= WARMUP) {
-			observations.push(marker);
-			samples.push(ms);
-		}
-	}
-	return {
-		ms: stats(samples),
-		observed: summarizeNestedChildProcessObservations(observations),
-	};
-}
-
-async function runGuestNestedChildProcessLayer(
-	sidecar: SidecarProcess,
-	script: string,
-	fanout: number,
-): Promise<NestedChildProcessLayerResult> {
-	const vm = await createBenchVm({ sidecar });
-	try {
-		const samples: number[] = [];
-		const observations: NestedChildProcessObservation[] = [];
-		for (let i = 0; i < WARMUP + ITERATIONS; i++) {
-			const stdoutChunks: Uint8Array[] = [];
-			const stderrChunks: Uint8Array[] = [];
-			const t = process.hrtime.bigint();
-			const proc = vm.spawn("node", ["-e", script], {
-				onStdout: (chunk) => stdoutChunks.push(chunk),
-				onStderr: (chunk) => stderrChunks.push(chunk),
-			});
-			const code = await vm.waitProcess(proc.pid);
-			const ms = nowMs(t);
-			const stdout = Buffer.concat(stdoutChunks.map((chunk) => Buffer.from(chunk))).toString(
-				"utf8",
-			);
-			const stderr = Buffer.concat(stderrChunks.map((chunk) => Buffer.from(chunk))).toString(
-				"utf8",
-			);
-			if (code !== 0) {
-				throw new Error(`guest nested child_process: parent exited ${code}: ${stderr}`);
-			}
-			const marker = parseNestedChildProcessObservations(
-				stdout,
-				fanout,
-				`guest nested child_process iteration ${i}`,
-			)[0];
-			if (i >= WARMUP) {
-				observations.push(marker);
-				samples.push(ms);
-			}
-		}
-		return {
-			ms: stats(samples),
-			observed: summarizeNestedChildProcessObservations(observations),
-		};
-	} finally {
-		await vm.dispose();
-	}
-}
-
-function assertNestedChildProcessPhaseCoverage(
-	row: NestedChildProcessRow,
-): void {
-	if (
-		row.parentObserved.closeCallbacks !== row.samples * row.fanout ||
-		row.parentObserved.errorCallbacks !== 0 ||
-		row.parentObserved.nonZeroCloseCodes !== 0 ||
-		row.parentObserved.nonZeroExitCodes !== 0
-	) {
-		throw new Error(
-			`nested child_process row invalid aggregate marker ${JSON.stringify(
-				row.parentObserved,
-			)}`,
-		);
-	}
-	const requiredPublicStages = [
-		"kernel_spawn_process",
-		"process_register_and_lifecycle",
-		"process_exit_cleanup",
-		"process_exit_cleanup_wait_and_reap",
-		"execute_response_to_exit_event_queued",
-	];
-	for (const stage of requiredPublicStages) {
-		const calls = phaseCalls(row, stage);
-		if (calls < row.expectedPublicParentExecutions) {
-			throw new Error(
-				`nested child_process row expected at least ${row.expectedPublicParentExecutions} parent ${stage} calls, got ${calls}`,
-			);
-		}
-	}
-	const requiredChildStages = [
-		"child_process_spawn_total",
-		"child_process_spawn_and_start_execution",
-		"child_process_register",
-		"child_process_exit_cleanup",
-	];
-	for (const stage of requiredChildStages) {
-		const calls = phaseCalls(row, stage);
-		if (calls < row.expectedNestedChildProcessExecutions) {
-			throw new Error(
-				`nested child_process row expected at least ${row.expectedNestedChildProcessExecutions} nested ${stage} calls, got ${calls}`,
-			);
-		}
-	}
-}
-
-async function runNestedChildProcessRows(
-	sidecar: SidecarProcess,
-	executePhasesFile: string,
-): Promise<NestedChildProcessRow[]> {
-	const fanout = FANOUT;
-	const script = nestedChildProcessScript(fanout);
-	const nodeParent = runNodeNestedChildProcessLayer(script, fanout);
-	const beforePhases = readSidecarExecutePhases(executePhasesFile);
-	const guestParent = await runGuestNestedChildProcessLayer(sidecar, script, fanout);
-	const totalIterations = WARMUP + ITERATIONS;
-	const row = {
-		row: "guest_node_child_process_8" as const,
-		fanout,
-		samples: ITERATIONS,
-		warmup: WARMUP,
-		command: "node parent -> child_process.spawn(node -e process.exit(0)) x8",
-		nodeParentMs: nodeParent.ms,
-		guestParentMs: guestParent.ms,
-		guestVsNodeP50: round(guestParent.ms.p50 / nodeParent.ms.p50),
-		guestMinusNodeP50Ms: round(guestParent.ms.p50 - nodeParent.ms.p50),
-		parentObserved: guestParent.observed,
-		expectedLifecycleProcessesPerIteration: fanout + 1,
-		expectedSidecarProcessExecutions: totalIterations * (fanout + 1),
-		expectedPublicParentExecutions: totalIterations,
-		expectedNestedChildProcessExecutions: totalIterations * fanout,
-		sidecarExecutePhases: diffSidecarExecutePhases(
-			beforePhases,
-			readSidecarExecutePhases(executePhasesFile),
-		),
-	};
-	assertNestedChildProcessPhaseCoverage(row);
-	return [row];
-}
-
-async function runGuestHostWriteSyncCase(
-	sidecar: SidecarProcess,
-	executePhasesFile: string,
-	row: HostWriteSyncRow["row"],
-	options: {
-		cwd: string;
-		args: string[];
-		mountHostDir?: string;
-		writesPerProcess: number;
-		verifyHostFile?: string;
-	},
-): Promise<HostWriteSyncRow> {
-	const beforePhases = readSidecarExecutePhases(executePhasesFile);
-	const vm = await createBenchVm({
-		sidecar,
-		mounts: options.mountHostDir
-			? [
-					{
-						guestPath: options.cwd,
-						hostPath: options.mountHostDir,
-						readOnly: false,
-					},
-				]
-			: undefined,
-	});
-	try {
-		const samples: number[] = [];
-		for (let i = 0; i < WARMUP + ITERATIONS; i++) {
-			const t = process.hrtime.bigint();
-			const proc = vm.spawn("node", options.args, { cwd: options.cwd });
-			const code = await vm.waitProcess(proc.pid);
-			const ms = nowMs(t);
-			if (code !== 0) throw new Error(`guest host-write-sync ${row}: exit ${code}`);
-			if (i >= WARMUP) samples.push(ms);
-		}
-		const afterPhases = readSidecarExecutePhases(executePhasesFile);
-		let hostWriteVisible: boolean | undefined;
-		if (options.verifyHostFile) {
-			try {
-				hostWriteVisible = readFileSync(options.verifyHostFile, "utf8").length > 0;
-			} catch {
-				hostWriteVisible = false;
-			}
-		}
-		const sidecarExecutePhases = diffSidecarExecutePhases(beforePhases, afterPhases);
-		const cleanSkipCalls =
-			sidecarExecutePhases.find(
-				(metric) => metric.stage === "process_exit_cleanup_sync_host_writes_clean_skip",
-			)?.calls ?? 0;
-		return {
-			row,
-			cwd: options.cwd,
-			writesPerProcess: options.writesPerProcess,
-			samples: samples.length,
-			wallMs: stats(samples),
-			sidecarExecutePhases,
-			cleanSkipCalls,
-			hostWriteVisible,
-		};
-	} finally {
-		await vm.dispose();
-	}
-}
-
-async function runGuestHostWriteSyncRows(
-	sidecar: SidecarProcess,
-	executePhasesFile: string,
-): Promise<HostWriteSyncRow[]> {
-	const hostRoot = mkdtempSync(join(tmpdir(), "agentos-host-write-sync-"));
-	const mountedNoWrite = join(hostRoot, "mounted-no-write");
-	const mountedWrite = join(hostRoot, "mounted-write");
-	mkdirSync(mountedNoWrite);
-	mkdirSync(mountedWrite);
-	writeFileSync(join(hostRoot, ".keep"), "");
-	writeFileSync(join(mountedNoWrite, ".seed"), "", { flag: "wx" });
-	writeFileSync(join(mountedWrite, ".seed"), "", { flag: "wx" });
-	const writeTarget = join(mountedWrite, "bench-write.txt");
-	try {
-		return [
-			await runGuestHostWriteSyncCase(sidecar, executePhasesFile, "root_cwd_no_write", {
-				cwd: "/",
-				args: NODE_ARGS,
-				writesPerProcess: 0,
-			}),
-			await runGuestHostWriteSyncCase(
-				sidecar,
-				executePhasesFile,
-				"host_cwd_no_write",
-				{
-					cwd: "/hostsync",
-					args: NODE_ARGS,
-					mountHostDir: mountedNoWrite,
-					writesPerProcess: 0,
-				},
-			),
-			await runGuestHostWriteSyncCase(
-				sidecar,
-				executePhasesFile,
-				"host_cwd_write_1file",
-				{
-					cwd: "/hostsync",
-					args: [
-						"-e",
-						"require('node:fs').writeFileSync('bench-write.txt', 'x'); process.exit(0)",
-					],
-					mountHostDir: mountedWrite,
-					writesPerProcess: 1,
-					verifyHostFile: writeTarget,
-				},
-			),
-		];
-	} finally {
-		rmSync(hostRoot, { recursive: true, force: true });
-	}
-}
-
-function assertHostWriteSyncRows(rows: HostWriteSyncRow[]): void {
-	for (const row of rows) {
-		if (row.writesPerProcess === 0 && row.cleanSkipCalls === 0) {
-			throw new Error(`expected clean host-write sync skip for ${row.row}`);
-		}
-		if (row.writesPerProcess > 0 && row.cleanSkipCalls > 0) {
-			throw new Error(`dirty host-write row unexpectedly skipped sync: ${row.row}`);
-		}
-		if (row.writesPerProcess > 0 && row.hostWriteVisible !== true) {
-			throw new Error(`dirty host-write row did not leave visible host write: ${row.row}`);
-		}
-	}
-}
-
-function sampleStats(samples: number[] | undefined) {
-	if (!samples || samples.length === 0) {
-		throw new Error("missing phase samples");
-	}
-	return stats(samples);
-}
-
-function readLifecycleTraces(path: string, skip: number): ProcessLifecycleTrace[] {
-	try {
-		const text = readFileSync(path, "utf8").trim();
-		if (!text) return [];
-		return text
-			.split(/\r?\n/)
-			.slice(skip)
-			.map((line) => JSON.parse(line) as ProcessLifecycleTrace);
-	} catch {
-		return [];
-	}
-}
-
-function resetLifecycleTraceFile(path: string): void {
-	writeFileSync(path, "");
-}
-
-function readSidecarExecutePhases(path: string): SidecarExecutePhaseMetric[] {
-	try {
-		const text = readFileSync(path, "utf8").trim();
-		if (!text) return [];
-		const metrics: SidecarExecutePhaseMetric[] = [];
-		for (const line of text.split(/\r?\n/)) {
-			const match =
-				/^stage=(\S+) calls=(\d+) total_us=(\d+) avg_us=(\d+) max_us=(\d+)$/.exec(
-					line,
-				);
-			if (!match) continue;
-			metrics.push({
-				stage: match[1],
-				calls: Number(match[2]),
-				totalUs: Number(match[3]),
-				avgUs: Number(match[4]),
-				maxUs: Number(match[5]),
-			});
-		}
-		return metrics;
-	} catch {
-		return [];
-	}
-}
-
-function diffSidecarExecutePhases(
-	before: SidecarExecutePhaseMetric[],
-	after: SidecarExecutePhaseMetric[],
-): SidecarExecutePhaseMetric[] {
-	const beforeByStage = new Map(before.map((metric) => [metric.stage, metric]));
-	const deltas: SidecarExecutePhaseMetric[] = [];
-	for (const metric of after) {
-		const previous = beforeByStage.get(metric.stage);
-		const calls = metric.calls - (previous?.calls ?? 0);
-		const totalUs = metric.totalUs - (previous?.totalUs ?? 0);
-		if (calls <= 0 && totalUs <= 0) continue;
-		deltas.push({
-			stage: metric.stage,
-			calls,
-			totalUs,
-			avgUs: calls > 0 ? Math.round(totalUs / calls) : 0,
-			maxUs: metric.maxUs,
-		});
-	}
-	return deltas;
-}
-
-function phaseAvgUs(
-	row: { sidecarExecutePhases: SidecarExecutePhaseMetric[] },
-	stage: string,
-): number | "" {
-	return row.sidecarExecutePhases.find((metric) => metric.stage === stage)?.avgUs ?? "";
-}
-
-function phaseCalls(
-	row: { sidecarExecutePhases: SidecarExecutePhaseMetric[] },
-	stage: string,
-): number {
-	return row.sidecarExecutePhases.find((metric) => metric.stage === stage)?.calls ?? 0;
-}
-
-function countBy(values: string[]): Record<string, number> {
-	const counts: Record<string, number> = {};
-	for (const value of values) {
-		counts[value] = (counts[value] ?? 0) + 1;
-	}
-	return counts;
-}
-
-function sumCounts(
-	records: Array<Record<string, number> | undefined>,
-): Record<string, number> {
-	const counts: Record<string, number> = {};
-	for (const record of records) {
-		if (!record) continue;
-		for (const [key, value] of Object.entries(record)) {
-			counts[key] = (counts[key] ?? 0) + value;
-		}
-	}
-	return counts;
-}
-
-function metricStats(
-	traces: ProcessLifecycleTrace[],
-	getValue: (trace: ProcessLifecycleTrace) => unknown,
-) {
-	const samples = traces
-		.map(getValue)
-		.filter((value): value is number => typeof value === "number" && Number.isFinite(value));
-	return samples.length === 0 ? null : stats(samples);
-}
-
-function diffMetric(
-	traces: ProcessLifecycleTrace[],
-	getEnd: (trace: ProcessLifecycleTrace) => unknown,
-	getStart: (trace: ProcessLifecycleTrace) => unknown,
-) {
-	return metricStats(traces, (trace) => {
-		const end = getEnd(trace);
-		const start = getStart(trace);
-		return typeof end === "number" && typeof start === "number"
-			? end - start
-			: undefined;
-	});
-}
-
-function makeLifecycleRow(
-	row: "node_exit_1" | "fanout_8",
-	concurrency: number,
-	traces: ProcessLifecycleTrace[],
-) {
-	return {
-		row,
-		phase: row === "node_exit_1" ? "wait_reap" : "wait_reap_batch",
-		concurrency,
-		command: "node -e process.exit(0)",
-		samples: traces.length,
-			resolutionCounts: countBy(
-				traces.map((trace) =>
-					String(trace.wait?.resolutionRoute ?? trace.finishRoute ?? "unknown"),
-				),
-			),
-			firstWaiterSourceCounts: countBy(
-				traces.map((trace) => trace.firstWaiterSource ?? "unknown"),
-			),
-			waiterSourceCounts: sumCounts(traces.map((trace) => trace.waiterSources)),
-			subphases: {
-			ts_spawn_to_wait_begin: metricStats(traces, (trace) => trace.spawnToWaitBeginMs),
-			ts_wait_blocked_on_start: metricStats(traces, (trace) => trace.waitBlockedOnStartMs),
-			ts_wait_total: metricStats(traces, (trace) => trace.waitTotalMs),
-			ts_trailing_output_drain: metricStats(traces, (trace) => trace.trailingOutputDrainMs),
-			ts_start_total: metricStats(traces, (trace) => trace.start?.totalMs),
-			ts_execute_rpc: metricStats(traces, (trace) => trace.start?.executeMs),
-			ts_signal_refresh: metricStats(traces, (trace) => trace.start?.signalRefreshMs),
-			ts_mount_wait: metricStats(traces, (trace) => trace.start?.mountWaitMs),
-			ts_exit_event_received: metricStats(
-				traces,
-				(trace) => trace.exit?.eventReceivedMs,
-			),
-			ts_exit_finish_begin: metricStats(
-				traces,
-				(trace) => trace.exit?.finishBeginMs,
-			),
-			ts_exit_event_to_finish: diffMetric(
-				traces,
-				(trace) => trace.exit?.finishBeginMs,
-				(trace) => trace.exit?.eventReceivedMs,
-			),
-			ts_finish_snapshot_update: metricStats(
-				traces,
-				(trace) => trace.exit?.snapshotUpdateMs,
-			),
-			ts_finish_resolve_wait: metricStats(
-				traces,
-				(trace) => trace.exit?.resolveWaitMs,
-			),
-			ts_finish_total: metricStats(traces, (trace) => trace.exit?.finishTotalMs),
-			ts_wait_promise_observed: metricStats(
-				traces,
-				(trace) => trace.exit?.waitPromiseObservedMs,
-			),
-			ts_finish_to_wait_observed: diffMetric(
-				traces,
-				(trace) => trace.exit?.waitPromiseObservedMs,
-				(trace) => trace.exit?.finishBeginMs,
-			),
-			ts_wait_observed_to_return: diffMetric(
-				traces,
-				(trace) => trace.exit?.waitReturnMs,
-				(trace) => trace.exit?.waitPromiseObservedMs,
-			),
-			ts_wait_return: metricStats(traces, (trace) => trace.exit?.waitReturnMs),
-				ts_release_drain: metricStats(traces, (trace) => trace.exit?.releaseDrainMs),
-				ts_release_total: metricStats(traces, (trace) => trace.exit?.releaseTotalMs),
-				ts_output_events: metricStats(traces, (trace) => trace.output?.events),
-				ts_output_signal_refresh: metricStats(
-					traces,
-					(trace) => trace.output?.signalRefreshMs,
-				),
-				ts_output_listener_dispatch: metricStats(
-					traces,
-					(trace) => trace.output?.listenerDispatchMs,
-				),
-				ts_snapshot_poll_sleep: metricStats(
-					traces,
-					(trace) => trace.wait?.snapshotPollSleepMs,
-				),
-			ts_snapshot_refresh: metricStats(traces, (trace) => trace.wait?.snapshotRefreshMs),
-			ts_poll_iterations: metricStats(traces, (trace) => trace.wait?.pollIterations),
-			ts_wait_unattributed_gap: metricStats(traces, (trace) => {
-				const waitTotal = trace.waitTotalMs;
-				if (typeof waitTotal !== "number") return undefined;
-				const blocked =
-					typeof trace.waitBlockedOnStartMs === "number"
-						? trace.waitBlockedOnStartMs
-						: 0;
-				const pollSleep =
-					typeof trace.wait?.snapshotPollSleepMs === "number"
-						? trace.wait.snapshotPollSleepMs
-						: 0;
-				const snapshotRefresh =
-					typeof trace.wait?.snapshotRefreshMs === "number"
-						? trace.wait.snapshotRefreshMs
-						: 0;
-				return waitTotal - blocked - pollSleep - snapshotRefresh;
-			}),
-		},
-	};
-}
-
-function makePhaseRow(
-	row: "node_exit_1" | "fanout_8",
-	phase: PhaseName,
-	concurrency: number,
-	nativeSamples: PhaseSamples,
-	nodeSamples: PhaseSamples,
-	guestSamples: PhaseSamples,
-) {
-	const native = sampleStats(nativeSamples[phase]);
-	const node = sampleStats(nodeSamples[phase]);
-	const guest = sampleStats(guestSamples[phase]);
-	return {
-		row,
-		phase,
-		concurrency,
-		command: "node -e process.exit(0)",
-		layers: { native, node, guest },
-		guest_vs_node_p50: round(guest.p50 / node.p50),
-		guest_vs_native_p50: round(guest.p50 / native.p50),
-		guest_minus_node_p50_ms: round(guest.p50 - node.p50),
-		guest_minus_native_p50_ms: round(guest.p50 - native.p50),
-	};
-}
-
-async function main(): Promise<void> {
-	const hardware = getHardware();
-	console.error(
-		`process-spawn 3-layer bench (node_exit) — iters=${ITERATIONS} warmup=${WARMUP}`,
-	);
-	console.error(`hardware: ${hardware.cpu} (${hardware.cores} cores)`);
-
-	const native = stats(runNativeLayer("node_exit", ITERATIONS, WARMUP));
-	const node = stats(runNodeLayer());
-	forceGC();
-	let guest;
-	let phaseRows;
-	let processLifecycle:
-		| {
-				version: "BENCH-035" | "BENCH-069";
-				enabled: true;
-				rows: ReturnType<typeof makeLifecycleRow>[];
-				sidecarExecutePhases?: SidecarExecutePhaseMetric[];
-				sidecarJsStartPhases?: SidecarExecutePhaseMetric[];
-				sidecarJsEventPhases?: SidecarExecutePhaseMetric[];
-				hostWriteSyncRows?: HostWriteSyncRow[];
-				fanoutLadderRows?: FanoutLadderRow[];
-				nestedChildProcessRows?: NestedChildProcessRow[];
-			}
-		| null = null;
-	const lifecycleTraceFile = join(
-		tmpdir(),
-		`agentos-process-lifecycle-${Date.now()}-${Math.random()
-			.toString(16)
-			.slice(2)}.jsonl`,
-	);
-	const executePhasesFile = join(
-		tmpdir(),
-		`agentos-execute-phases-${Date.now()}-${Math.random()
-			.toString(16)
-			.slice(2)}.txt`,
-	);
-	const jsStartPhasesFile = join(
-		tmpdir(),
-		`agentos-js-start-phases-${Date.now()}-${Math.random()
-			.toString(16)
-			.slice(2)}.txt`,
-	);
-	const jsEventPhasesFile = join(
-		tmpdir(),
-		`agentos-js-event-phases-${Date.now()}-${Math.random()
-			.toString(16)
-			.slice(2)}.txt`,
-	);
-	const previousLifecycleTrace = process.env.AGENTOS_PROCESS_LIFECYCLE_TRACE;
-	const previousLifecycleTraceFile =
-		process.env.AGENTOS_PROCESS_LIFECYCLE_TRACE_FILE;
-	const previousExecutePhases = process.env.AGENTOS_EXECUTE_PHASES;
-	const previousExecutePhasesFile = process.env.AGENTOS_EXECUTE_PHASES_FILE;
-	const previousJsStartPhases = process.env.AGENTOS_JS_START_PHASES;
-	const previousJsStartPhasesFile = process.env.AGENTOS_JS_START_PHASES_FILE;
-	const previousJsEventPhases = process.env.AGENTOS_JS_EVENT_PHASES;
-	const previousJsEventPhasesFile = process.env.AGENTOS_JS_EVENT_PHASES_FILE;
-	if (PROCESS_LIFECYCLE_TRACE) {
-		process.env.AGENTOS_PROCESS_LIFECYCLE_TRACE = "1";
-		process.env.AGENTOS_PROCESS_LIFECYCLE_TRACE_FILE = lifecycleTraceFile;
-		process.env.AGENTOS_EXECUTE_PHASES = "1";
-		process.env.AGENTOS_EXECUTE_PHASES_FILE = executePhasesFile;
-		process.env.AGENTOS_JS_START_PHASES = "1";
-		process.env.AGENTOS_JS_START_PHASES_FILE = jsStartPhasesFile;
-		process.env.AGENTOS_JS_EVENT_PHASES = "1";
-		process.env.AGENTOS_JS_EVENT_PHASES_FILE = jsEventPhasesFile;
-		resetLifecycleTraceFile(lifecycleTraceFile);
-		writeFileSync(executePhasesFile, "");
-		writeFileSync(jsStartPhasesFile, "");
-		writeFileSync(jsEventPhasesFile, "");
-	}
-	const sidecar = await createBenchSidecar();
-	try {
-		guest = stats(await runGuestLayer(sidecar));
-		const nativeNodeExitPhases = runNativePhaseLayer(
-			"node_exit",
-			ITERATIONS,
-			WARMUP,
-		);
-		const nativeFanoutPhases = runNativePhaseLayer(
-			"node_fanout",
-			ITERATIONS,
-			WARMUP,
-		);
-		const nodeExitPhases = await runNodeExitPhases();
-		const nodeFanoutPhases = await runNodeFanoutPhases();
-		if (PROCESS_LIFECYCLE_TRACE) resetLifecycleTraceFile(lifecycleTraceFile);
-		const guestNodeExitPhases = await runGuestNodeExitPhases(sidecar);
-		const nodeExitLifecycleTraces = PROCESS_LIFECYCLE_TRACE
-			? readLifecycleTraces(lifecycleTraceFile, WARMUP)
-			: [];
-		if (PROCESS_LIFECYCLE_TRACE) {
-			resetLifecycleTraceFile(lifecycleTraceFile);
-		}
-		const guestFanoutPhases = await runGuestFanoutPhases(sidecar);
-		const fanoutLifecycleTraces = PROCESS_LIFECYCLE_TRACE
-			? readLifecycleTraces(lifecycleTraceFile, WARMUP * FANOUT)
-			: [];
-		const mainSidecarExecutePhases = PROCESS_LIFECYCLE_TRACE
-			? readSidecarExecutePhases(executePhasesFile)
-			: [];
-		const mainSidecarJsStartPhases = PROCESS_LIFECYCLE_TRACE
-			? readSidecarExecutePhases(jsStartPhasesFile)
-			: [];
-			const mainSidecarJsEventPhases = PROCESS_LIFECYCLE_TRACE
-				? readSidecarExecutePhases(jsEventPhasesFile)
-				: [];
-			const skipExtraLifecycleRows =
-				process.env.BENCH_PROCESS_LIFECYCLE_SKIP_EXTRA_ROWS === "1";
-			const hostWriteSyncRows = PROCESS_LIFECYCLE_TRACE && !skipExtraLifecycleRows
-				? await runGuestHostWriteSyncRows(sidecar, executePhasesFile)
-				: [];
-			if (PROCESS_LIFECYCLE_TRACE && !skipExtraLifecycleRows) {
-				assertHostWriteSyncRows(hostWriteSyncRows);
-			}
-			const fanoutLadderRows = PROCESS_LIFECYCLE_TRACE && !skipExtraLifecycleRows
-				? await runGuestFanoutLadderRows(sidecar, executePhasesFile)
-				: [];
-			const nestedChildProcessRows = PROCESS_LIFECYCLE_TRACE && !skipExtraLifecycleRows
-				? await runNestedChildProcessRows(sidecar, executePhasesFile)
-				: [];
-		phaseRows = [
-			makePhaseRow(
-				"node_exit_1",
-				"total",
-				1,
-				nativeNodeExitPhases,
-				nodeExitPhases,
-				guestNodeExitPhases,
-			),
-			makePhaseRow(
-				"node_exit_1",
-				"spawn",
-				1,
-				nativeNodeExitPhases,
-				nodeExitPhases,
-				guestNodeExitPhases,
-			),
-			makePhaseRow(
-				"node_exit_1",
-				"wait_reap",
-				1,
-				nativeNodeExitPhases,
-				nodeExitPhases,
-				guestNodeExitPhases,
-			),
-			makePhaseRow(
-				"fanout_8",
-				"total",
-				FANOUT,
-				nativeFanoutPhases,
-				nodeFanoutPhases,
-				guestFanoutPhases,
-			),
-			makePhaseRow(
-				"fanout_8",
-				"spawn_batch",
-				FANOUT,
-				nativeFanoutPhases,
-				nodeFanoutPhases,
-				guestFanoutPhases,
-			),
-			makePhaseRow(
-				"fanout_8",
-				"wait_reap_batch",
-				FANOUT,
-				nativeFanoutPhases,
-				nodeFanoutPhases,
-				guestFanoutPhases,
-			),
-		];
-		if (PROCESS_LIFECYCLE_TRACE) {
-			processLifecycle = {
-				version: "BENCH-069",
-				enabled: true,
-				rows: [
-					makeLifecycleRow("node_exit_1", 1, nodeExitLifecycleTraces),
-					makeLifecycleRow("fanout_8", FANOUT, fanoutLifecycleTraces),
-				],
-				sidecarExecutePhases: mainSidecarExecutePhases,
-				sidecarJsStartPhases: mainSidecarJsStartPhases,
-				sidecarJsEventPhases: mainSidecarJsEventPhases,
-				hostWriteSyncRows,
-				fanoutLadderRows,
-				nestedChildProcessRows,
-			};
-		}
-	} finally {
-		await sidecar.dispose();
-		if (previousLifecycleTrace === undefined) {
-			delete process.env.AGENTOS_PROCESS_LIFECYCLE_TRACE;
-		} else {
-			process.env.AGENTOS_PROCESS_LIFECYCLE_TRACE = previousLifecycleTrace;
-		}
-		if (previousLifecycleTraceFile === undefined) {
-			delete process.env.AGENTOS_PROCESS_LIFECYCLE_TRACE_FILE;
-		} else {
-			process.env.AGENTOS_PROCESS_LIFECYCLE_TRACE_FILE =
-				previousLifecycleTraceFile;
-		}
-		rmSync(lifecycleTraceFile, { force: true });
-		if (previousExecutePhases === undefined) {
-			delete process.env.AGENTOS_EXECUTE_PHASES;
-		} else {
-			process.env.AGENTOS_EXECUTE_PHASES = previousExecutePhases;
-		}
-		if (previousExecutePhasesFile === undefined) {
-			delete process.env.AGENTOS_EXECUTE_PHASES_FILE;
-		} else {
-			process.env.AGENTOS_EXECUTE_PHASES_FILE = previousExecutePhasesFile;
-		}
-		rmSync(executePhasesFile, { force: true });
-		if (previousJsStartPhases === undefined) {
-			delete process.env.AGENTOS_JS_START_PHASES;
-		} else {
-			process.env.AGENTOS_JS_START_PHASES = previousJsStartPhases;
-		}
-		if (previousJsStartPhasesFile === undefined) {
-			delete process.env.AGENTOS_JS_START_PHASES_FILE;
-		} else {
-			process.env.AGENTOS_JS_START_PHASES_FILE = previousJsStartPhasesFile;
-		}
-		rmSync(jsStartPhasesFile, { force: true });
-		if (previousJsEventPhases === undefined) {
-			delete process.env.AGENTOS_JS_EVENT_PHASES;
-		} else {
-			process.env.AGENTOS_JS_EVENT_PHASES = previousJsEventPhases;
-		}
-		if (previousJsEventPhasesFile === undefined) {
-			delete process.env.AGENTOS_JS_EVENT_PHASES_FILE;
-		} else {
-			process.env.AGENTOS_JS_EVENT_PHASES_FILE = previousJsEventPhasesFile;
-		}
-		rmSync(jsEventPhasesFile, { force: true });
-	}
-
-	// Absolute floor context: cheapest libc process (no node), native only.
-	const shFloor = stats(runNativeLayer("spawn_exit", ITERATIONS, WARMUP));
-
-	const tax = {
-		emulation_p50: round(guest.p50 / node.p50),
-		emulation_p95: round(guest.p95 / node.p95),
-		total_p50: round(guest.p50 / native.p50),
-		total_p95: round(guest.p95 / native.p95),
-		vs_libc_floor_p50: round(guest.p50 / shFloor.p50),
-	};
-
-	printTable(
-		["layer", "p50 ms", "p95 ms", "p99 ms", "mean ms"],
-		[
-			["native node", native.p50, native.p95, native.p99, native.mean],
-			["node child_proc", node.p50, node.p95, node.p99, node.mean],
-			["guest isolate", guest.p50, guest.p95, guest.p99, guest.mean],
-			["(libc sh floor)", shFloor.p50, shFloor.p95, shFloor.p99, shFloor.mean],
-		],
-	);
-	console.error(
-		`  node_exit: emulation tax ${tax.emulation_p50}x (guest/node), total ${tax.total_p50}x (guest/native node), ${tax.vs_libc_floor_p50}x vs libc floor — all p50`,
-	);
-	printTable(
-		["row", "phase", "native p50", "node p50", "guest p50", "guest-node"],
-		phaseRows.map((row) => [
-			row.row,
-			row.phase,
-			row.layers.native.p50,
-			row.layers.node.p50,
-			row.layers.guest.p50,
-			row.guest_minus_node_p50_ms,
-		]),
-	);
-	if (processLifecycle) {
-		printTable(
-			[
-				"row",
-					"samples",
-					"route",
-					"waiters",
-					"wait p50",
-					"blockedStart p50",
-					"execute p50",
-				"signal p50",
-				"drain p50",
-			],
-			processLifecycle.rows.map((row) => [
-				row.row,
-				row.samples,
-					Object.entries(row.resolutionCounts)
-						.map(([route, count]) => `${route}:${count}`)
-						.join(","),
-					Object.entries(row.waiterSourceCounts)
-						.map(([source, count]) => `${source}:${count}`)
-						.join(","),
-					row.subphases.ts_wait_total?.p50 ?? "",
-				row.subphases.ts_wait_blocked_on_start?.p50 ?? "",
-				row.subphases.ts_execute_rpc?.p50 ?? "",
-				row.subphases.ts_signal_refresh?.p50 ?? "",
-				row.subphases.ts_trailing_output_drain?.p50 ?? "",
-			]),
-		);
-		printTable(
-			["sidecar execute stage", "calls", "avg us", "max us"],
-			(processLifecycle.sidecarExecutePhases ?? []).map((metric) => [
-				metric.stage,
-				metric.calls,
-				metric.avgUs,
-				metric.maxUs,
-			]),
-		);
-		printTable(
-			["sidecar JS start stage", "calls", "avg us", "max us"],
-			(processLifecycle.sidecarJsStartPhases ?? []).map((metric) => [
-				metric.stage,
-				metric.calls,
-				metric.avgUs,
-				metric.maxUs,
-			]),
-		);
-		printTable(
-			["sidecar JS event stage", "calls", "avg us", "max us"],
-			(processLifecycle.sidecarJsEventPhases ?? []).map((metric) => [
-				metric.stage,
-				metric.calls,
-				metric.avgUs,
-				metric.maxUs,
-			]),
-		);
-		printTable(
-			[
-				"host write sync row",
-				"samples",
-				"writes",
-				"wall p50",
-				"sync avg us",
-				"clean skips",
-				"cleanup avg us",
-				"wait_reap avg us",
-				"write visible",
-			],
-			(processLifecycle.hostWriteSyncRows ?? []).map((row) => [
-				row.row,
-				row.samples,
-				row.writesPerProcess,
-				row.wallMs.p50,
-				phaseAvgUs(row, "process_exit_cleanup_sync_host_writes"),
-				row.cleanSkipCalls,
-				phaseAvgUs(row, "process_exit_cleanup"),
-				phaseAvgUs(row, "process_exit_cleanup_wait_and_reap"),
-				row.hostWriteVisible === undefined ? "" : String(row.hostWriteVisible),
-			]),
-		);
-		printTable(
-			[
-				"fanout",
-				"samples",
-				"total p50",
-				"spawn p50",
-				"wait p50",
-				"wait/process p50",
-				"exit queued avg us",
-				"cleanup avg us",
-				"queue wait avg us",
-			],
-			(processLifecycle.fanoutLadderRows ?? []).map((row) => [
-				row.fanout,
-				row.samples,
-				row.totalMs.p50,
-				row.spawnBatchMs.p50,
-				row.waitReapBatchMs.p50,
-				row.perProcessWaitReapP50Ms,
-				phaseAvgUs(row, "execute_response_to_exit_event_queued"),
-				phaseAvgUs(row, "process_exit_cleanup"),
-				phaseAvgUs(row, "process_exit_event_queue_wait"),
-			]),
-		);
-		printTable(
-			[
-				"nested child_process row",
-				"fanout",
-				"samples",
-				"node parent p50",
-				"guest parent p50",
-				"guest/node",
-				"guest-node",
-				"expected processes",
-				"exit callbacks",
-				"close callbacks",
-				"child spawns",
-				"child cleanups",
-				"child spawn avg us",
-				"child cleanup avg us",
-			],
-			(processLifecycle.nestedChildProcessRows ?? []).map((row) => [
-				row.row,
-				row.fanout,
-				row.samples,
-				row.nodeParentMs.p50,
-				row.guestParentMs.p50,
-				row.guestVsNodeP50,
-				row.guestMinusNodeP50Ms,
-				row.expectedSidecarProcessExecutions,
-				row.parentObserved.exitCallbacks,
-				row.parentObserved.closeCallbacks,
-				phaseCalls(row, "child_process_spawn_total"),
-				phaseCalls(row, "child_process_exit_cleanup"),
-				phaseAvgUs(row, "child_process_spawn_total"),
-				phaseAvgUs(row, "child_process_exit_cleanup"),
-			]),
-		);
-	}
-
-	console.log(
-		JSON.stringify(
-			{
-				hardware,
-				iterations: ITERATIONS,
-				op: "node_exit",
-				layers: { native, node, guest, shFloor },
-				tax,
-				phaseRows,
-				processLifecycle,
-			},
-			null,
-			2,
-			),
-		);
-		if (processLifecycle) printTable(
-			[
-				"row",
-				"event->finish p50",
-				"finish p50",
-				"finish->wait p50",
-				"wait->return p50",
-				"wait gap p50",
-			],
-			processLifecycle.rows.map((row) => [
-				row.row,
-				row.subphases.ts_exit_event_to_finish?.p50 ?? "",
-				row.subphases.ts_finish_total?.p50 ?? "",
-				row.subphases.ts_finish_to_wait_observed?.p50 ?? "",
-				row.subphases.ts_wait_observed_to_return?.p50 ?? "",
-				row.subphases.ts_wait_unattributed_gap?.p50 ?? "",
-			]),
-		);
-	}
-
-main().catch((err) => {
-	console.error(err);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/src/focused/readdir.bench.ts b/packages/benchmarks/src/focused/readdir.bench.ts
deleted file mode 100644
index 1d9e30f94..000000000
--- a/packages/benchmarks/src/focused/readdir.bench.ts
+++ /dev/null
@@ -1,700 +0,0 @@
-/**
- * Focused readdir scaling benchmark.
- *
- * Matches fs/readdir_small by preparing fixtures outside the timed loop so the
- * measurement isolates fs.readdirSync cost.
- */
-
-import {
-	existsSync,
-	mkdirSync,
-	readdirSync,
-	rmSync,
-	statSync,
-	writeFileSync,
-} from "node:fs";
-import { mkdtempSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { createBenchSidecar, createBenchVm, type BenchVm } from "../lib/vm.js";
-import type { HostDirectoryMount, SidecarProcess } from "@secure-exec/core";
-import { getHardware, printTable, round, stats } from "../lib/perf-utils.js";
-
-type ReaddirMode = "plain" | "withFileTypes";
-type ReaddirFixture = "vm-shadow" | "native-host-dir";
-type ReaddirWorkload = "pure" | "matrix-guarded" | "probe";
-type ReaddirPreflightOp = "none" | "existsSync" | "statSync";
-type ReaddirProbeTargets = "children" | "dir-plus-children";
-
-interface OperationCounts {
-	existsSync: number;
-	statSync: number;
-	readdirSync: number;
-	mkdirSync: number;
-	writeFileSync: number;
-}
-
-interface ReaddirShape {
-	workload: ReaddirWorkload;
-	preflightOp: ReaddirPreflightOp;
-	preflightCount: number;
-	includeReaddir: boolean;
-	probeTargets: ReaddirProbeTargets;
-	operationCounts: OperationCounts;
-}
-
-interface ReaddirCaseResult {
-	fixture: ReaddirFixture;
-	workload: ReaddirWorkload;
-	preflightOp: ReaddirPreflightOp;
-	preflightCount: number;
-	includeReaddir: boolean;
-	probeTargets: ReaddirProbeTargets;
-	operationCounts: OperationCounts;
-	entryCount: number;
-	mode: ReaddirMode;
-	iterations: number;
-	warmup: number;
-	host: ReturnType<typeof stats>;
-	guest: ReturnType<typeof stats>;
-	guestVsHostRatio: number;
-	returnedCount: {
-		host: number;
-		guest: number;
-	};
-	payloadBytes: {
-		host: number;
-		guest: number;
-	};
-	msPerEntry: {
-		host: number;
-		guest: number;
-	};
-	deltaFromEmptyMs?: {
-		host: number;
-		guest: number;
-	};
-	derived?: {
-		guestP50MinusPureReaddirMs?: number;
-		guestP50MinusPreflightOnlyMs?: number;
-		guestMsPerPreflightCall?: number;
-	};
-	raw: {
-		hostMs: number[];
-		guestMs: number[];
-	};
-}
-
-function parseArgs(): {
-	iterations: number;
-	warmup: number;
-	entryCounts: number[];
-	modes: ReaddirMode[];
-	fixtures: ReaddirFixture[];
-	workloads: ReaddirWorkload[];
-	probeEnabled: boolean;
-	preflightOps: ReaddirPreflightOp[];
-	preflightCounts: number[];
-	includeReaddirs: boolean[];
-	probeTargets: ReaddirProbeTargets;
-} {
-	const value = (name: string) =>
-		process.argv.find((arg) => arg.startsWith(`--${name}=`))?.split("=")[1];
-	const iterations = Number(value("iterations") ?? 10);
-	const warmup = Number(value("warmup") ?? 2);
-	const entryCounts = (value("entry-counts") ?? "0,1,32,100,1000")
-		.split(",")
-		.map((n) => Number(n.trim()))
-		.filter((n) => Number.isFinite(n) && n >= 0);
-	const modes = (value("modes") ?? "plain,withFileTypes")
-		.split(",")
-		.map((mode) => mode.trim())
-		.filter((mode): mode is ReaddirMode => mode === "plain" || mode === "withFileTypes");
-	const fixtures = (value("fixtures") ?? "vm-shadow")
-		.split(",")
-		.map((fixture) => fixture.trim())
-		.filter(
-			(fixture): fixture is ReaddirFixture =>
-				fixture === "vm-shadow" || fixture === "native-host-dir",
-		);
-	const workloads = (value("workloads") ?? "pure")
-		.split(",")
-		.map((workload) => workload.trim())
-		.filter(
-			(workload): workload is ReaddirWorkload =>
-				workload === "pure" || workload === "matrix-guarded" || workload === "probe",
-		);
-	const preflightOpsArg = value("preflight-ops");
-	const preflightCountsArg = value("preflight-counts");
-	const includeReaddirArg = value("include-readdir");
-	const probeEnabled =
-		workloads.includes("probe") ||
-		preflightOpsArg !== undefined ||
-		preflightCountsArg !== undefined ||
-		includeReaddirArg !== undefined;
-	const preflightOps = (preflightOpsArg ?? "none,existsSync,statSync")
-		.split(",")
-		.map((op) => op.trim())
-		.filter(
-			(op): op is ReaddirPreflightOp =>
-				op === "none" || op === "existsSync" || op === "statSync",
-		);
-	const preflightCounts = (preflightCountsArg ?? "0,1,32,33")
-		.split(",")
-		.map((n) => Number(n.trim()))
-		.filter((n) => Number.isFinite(n) && n >= 0);
-	const includeReaddirs =
-		includeReaddirArg === "both"
-			? [false, true]
-			: includeReaddirArg === "false" || includeReaddirArg === "0"
-				? [false]
-				: [true];
-	const probeTargets = value("probe-targets") ?? "children";
-	if (
-		iterations < 1 ||
-		warmup < 0 ||
-		entryCounts.length === 0 ||
-		modes.length === 0 ||
-		fixtures.length === 0 ||
-		workloads.length === 0 ||
-		preflightOps.length === 0 ||
-		preflightCounts.length === 0 ||
-		(probeTargets !== "children" && probeTargets !== "dir-plus-children")
-	) {
-		throw new Error(
-			"invalid args; expected --iterations>=1 --warmup>=0 --entry-counts=0,1,32,100,1000 --modes=plain,withFileTypes --fixtures=vm-shadow,native-host-dir --workloads=pure,matrix-guarded --preflight-ops=none,existsSync,statSync --preflight-counts=0,1,32,33 --include-readdir=true,false,both --probe-targets=children,dir-plus-children",
-		);
-	}
-	return {
-		iterations,
-		warmup,
-		entryCounts,
-		modes,
-		fixtures,
-		workloads,
-		probeEnabled,
-		preflightOps,
-		preflightCounts,
-		includeReaddirs,
-		probeTargets,
-	};
-}
-
-function nowMs(start: number): number {
-	return performance.now() - start;
-}
-
-function createHostFixture(entryCount: number): string {
-	const dir = mkdtempSync(join(tmpdir(), `agentos-readdir-bench-${entryCount}-`));
-	for (let i = 0; i < entryCount; i++) {
-		writeFileSync(join(dir, `file-${String(i).padStart(5, "0")}.txt`), "x");
-	}
-	return dir;
-}
-
-function readDirPayload(dir: string, mode: ReaddirMode): unknown[] {
-	if (mode === "withFileTypes") {
-		return readdirSync(dir, { withFileTypes: true }).map((entry) => ({
-			name: entry.name,
-			file: entry.isFile(),
-			dir: entry.isDirectory(),
-			symlink: entry.isSymbolicLink(),
-		}));
-	}
-	return readdirSync(dir);
-}
-
-function ensureMatrixGuardedFixture(dir: string, entryCount: number): void {
-	if (!existsSync(dir)) mkdirSync(dir, { recursive: true });
-	for (let i = 0; i < entryCount; i++) {
-		const path = join(dir, `file-${String(i).padStart(5, "0")}.txt`);
-		if (!existsSync(path)) writeFileSync(path, "hi");
-	}
-}
-
-function createOperationCounts(
-	shape: Pick<ReaddirShape, "preflightOp" | "preflightCount" | "includeReaddir">,
-): OperationCounts {
-	return {
-		existsSync: shape.preflightOp === "existsSync" ? shape.preflightCount : 0,
-		statSync: shape.preflightOp === "statSync" ? shape.preflightCount : 0,
-		readdirSync: shape.includeReaddir ? 1 : 0,
-		mkdirSync: 0,
-		writeFileSync: 0,
-	};
-}
-
-function shapeForWorkload(workload: ReaddirWorkload, entryCount: number): ReaddirShape {
-	if (workload === "matrix-guarded") {
-		const countsShape = {
-			workload,
-			preflightOp: "existsSync" as const,
-			preflightCount: entryCount + 1,
-			includeReaddir: true,
-			probeTargets: "dir-plus-children" as const,
-		};
-		return {
-			...countsShape,
-			operationCounts: createOperationCounts(countsShape),
-		};
-	}
-	const shape = {
-		workload,
-		preflightOp: "none" as const,
-		preflightCount: 0,
-		includeReaddir: true,
-		probeTargets: "children" as const,
-	};
-	return { ...shape, operationCounts: createOperationCounts(shape) };
-}
-
-function preflightPath(
-	dir: string,
-	entryCount: number,
-	index: number,
-	probeTargets: ReaddirProbeTargets,
-): string {
-	if (probeTargets === "dir-plus-children" && index === 0) return dir;
-	if (entryCount === 0) return dir;
-	const childIndex = probeTargets === "dir-plus-children" ? index - 1 : index;
-	return join(dir, `file-${String(childIndex % entryCount).padStart(5, "0")}.txt`);
-}
-
-function runPreflight(
-	dir: string,
-	entryCount: number,
-	preflightOp: ReaddirPreflightOp,
-	preflightCount: number,
-	probeTargets: ReaddirProbeTargets,
-): void {
-	for (let i = 0; i < preflightCount; i++) {
-		const path = preflightPath(dir, entryCount, i, probeTargets);
-		if (preflightOp === "existsSync") {
-			existsSync(path);
-		} else if (preflightOp === "statSync") {
-			statSync(path);
-		}
-	}
-}
-
-function payloadBytes(payload: unknown): number {
-	return Buffer.byteLength(JSON.stringify(payload));
-}
-
-function runHost(
-	dir: string,
-	entryCount: number,
-	mode: ReaddirMode,
-	shape: ReaddirShape,
-	iterations: number,
-	warmup: number,
-) {
-	const samples: number[] = [];
-	let returnedCount = 0;
-	let bytes = 0;
-	for (let i = 0; i < warmup + iterations; i++) {
-		const start = performance.now();
-		if (shape.workload === "matrix-guarded") {
-			ensureMatrixGuardedFixture(dir, entryCount);
-		} else {
-			runPreflight(
-				dir,
-				entryCount,
-				shape.preflightOp,
-				shape.preflightCount,
-				shape.probeTargets,
-			);
-		}
-		const payload = shape.includeReaddir ? readDirPayload(dir, mode) : [];
-		const ms = nowMs(start);
-		if (i >= warmup) samples.push(ms);
-		returnedCount = payload.length;
-		bytes = payloadBytes(payload);
-	}
-	return { samples, returnedCount, payloadBytes: bytes };
-}
-
-async function setupGuestFixture(vm: BenchVm, dir: string, entryCount: number): Promise<void> {
-	await vm.exec(`rm -rf ${dir} && mkdir -p ${dir}`);
-	for (let i = 0; i < entryCount; i++) {
-		await vm.writeFile(`${dir}/file-${String(i).padStart(5, "0")}.txt`, "x");
-	}
-}
-
-async function runGuest(
-	vm: BenchVm,
-	dir: string,
-	entryCount: number,
-	mode: ReaddirMode,
-	shape: ReaddirShape,
-	iterations: number,
-	warmup: number,
-) {
-	const scriptPath = `/tmp/readdir-bench-runner-${mode}-${Date.now()}-${Math.random()
-		.toString(16)
-		.slice(2)}.mjs`;
-	const source = `
-import fs from "node:fs";
-const dir = ${JSON.stringify(dir)};
-const entryCount = ${JSON.stringify(entryCount)};
-const mode = ${JSON.stringify(mode)};
-const shape = ${JSON.stringify(shape)};
-const iterations = Number(process.env.BENCH_ITERATIONS || 10);
-const warmup = Number(process.env.BENCH_WARMUP || 2);
-const samples = [];
-let returnedCount = 0;
-let payloadBytes = 0;
-const now = () => Number(process.hrtime.bigint()) / 1e6;
-function readPayload() {
-  if (mode === "withFileTypes") {
-    return fs.readdirSync(dir, { withFileTypes: true }).map((entry) => ({
-      name: entry.name,
-      file: entry.isFile(),
-      dir: entry.isDirectory(),
-      symlink: entry.isSymbolicLink(),
-    }));
-  }
-  return fs.readdirSync(dir);
-}
-function ensureMatrixGuardedFixture() {
-  if (!fs.existsSync(dir)) fs.mkdirSync(dir, { recursive: true });
-  for (let i = 0; i < entryCount; i++) {
-    const path = dir + "/file-" + String(i).padStart(5, "0") + ".txt";
-    if (!fs.existsSync(path)) fs.writeFileSync(path, "hi");
-  }
-}
-function preflightPath(index) {
-  if (shape.probeTargets === "dir-plus-children" && index === 0) return dir;
-  if (entryCount === 0) return dir;
-  const childIndex = shape.probeTargets === "dir-plus-children" ? index - 1 : index;
-  return dir + "/file-" + String(childIndex % entryCount).padStart(5, "0") + ".txt";
-}
-function runPreflight() {
-  for (let i = 0; i < shape.preflightCount; i++) {
-    const path = preflightPath(i);
-    if (shape.preflightOp === "existsSync") fs.existsSync(path);
-    else if (shape.preflightOp === "statSync") fs.statSync(path);
-  }
-}
-for (let i = 0; i < warmup + iterations; i++) {
-  const start = now();
-  if (shape.workload === "matrix-guarded") ensureMatrixGuardedFixture();
-  else runPreflight();
-  const payload = shape.includeReaddir ? readPayload() : [];
-  const ms = now() - start;
-  if (i >= warmup) samples.push(ms);
-  returnedCount = payload.length;
-  payloadBytes = Buffer.byteLength(JSON.stringify(payload));
-}
-process.stdout.write(JSON.stringify({ samples, returnedCount, payloadBytes }));
-`;
-	await vm.writeFile(scriptPath, source);
-	let stdout = "";
-	let stderr = "";
-	const proc = vm.spawn("node", [scriptPath], {
-		env: {
-			BENCH_ITERATIONS: String(iterations),
-			BENCH_WARMUP: String(warmup),
-		},
-		onStdout: (data) => {
-			stdout += Buffer.from(data).toString("utf8");
-		},
-		onStderr: (data) => {
-			stderr += Buffer.from(data).toString("utf8");
-		},
-	});
-	const code = await vm.waitProcess(proc.pid);
-	if (code !== 0) {
-		throw new Error(`guest readdir ${mode} exited ${code}\n${stderr}`);
-	}
-	return JSON.parse(stdout) as {
-		samples: number[];
-		returnedCount: number;
-		payloadBytes: number;
-	};
-}
-
-async function createVm(sidecar: SidecarProcess): Promise<BenchVm> {
-	return createBenchVm({
-		sidecar,
-	});
-}
-
-async function createVmWithMount(
-	sidecar: SidecarProcess,
-	path: string,
-	hostPath: string,
-): Promise<BenchVm> {
-	const mounts: HostDirectoryMount[] = [{ guestPath: path, hostPath, readOnly: true }];
-	return createBenchVm({
-		sidecar,
-		mounts,
-	});
-}
-
-async function runCase(
-	fixture: ReaddirFixture,
-	shape: ReaddirShape,
-	entryCount: number,
-	mode: ReaddirMode,
-	iterations: number,
-	warmup: number,
-	sidecar: SidecarProcess,
-): Promise<ReaddirCaseResult> {
-	const hostDir = createHostFixture(entryCount);
-	const vmDir =
-		fixture === "native-host-dir"
-			? `/mnt/readdir-bench-${entryCount}-${mode}`
-			: `/tmp/readdir-bench-${entryCount}-${mode}`;
-	try {
-		const host = runHost(hostDir, entryCount, mode, shape, iterations, warmup);
-		const vm =
-			fixture === "native-host-dir"
-				? await createVmWithMount(sidecar, vmDir, hostDir)
-				: await createVm(sidecar);
-		try {
-			if (fixture === "vm-shadow") {
-				await setupGuestFixture(vm, vmDir, entryCount);
-			}
-			const guest = await runGuest(
-				vm,
-				vmDir,
-				entryCount,
-				mode,
-				shape,
-				iterations,
-				warmup,
-			);
-			const hostStats = stats(host.samples);
-			const guestStats = stats(guest.samples);
-			const divisor = Math.max(entryCount, 1);
-			return {
-				fixture,
-				workload: shape.workload,
-				preflightOp: shape.preflightOp,
-				preflightCount: shape.preflightCount,
-				includeReaddir: shape.includeReaddir,
-				probeTargets: shape.probeTargets,
-				operationCounts: shape.operationCounts,
-				entryCount,
-				mode,
-				iterations,
-				warmup,
-				host: hostStats,
-				guest: guestStats,
-				guestVsHostRatio: round(guestStats.p50 / hostStats.p50),
-				returnedCount: {
-					host: host.returnedCount,
-					guest: guest.returnedCount,
-				},
-				payloadBytes: {
-					host: host.payloadBytes,
-					guest: guest.payloadBytes,
-				},
-				msPerEntry: {
-					host: round(hostStats.p50 / divisor),
-					guest: round(guestStats.p50 / divisor),
-				},
-				raw: {
-					hostMs: host.samples,
-					guestMs: guest.samples,
-				},
-			};
-		} finally {
-			await vm.dispose();
-		}
-	} finally {
-		rmSync(hostDir, { recursive: true, force: true });
-	}
-}
-
-async function main(): Promise<void> {
-	const {
-		iterations,
-		warmup,
-		entryCounts,
-		modes,
-		fixtures,
-		workloads,
-		probeEnabled,
-		preflightOps,
-		preflightCounts,
-		includeReaddirs,
-		probeTargets,
-	} = parseArgs();
-	const hardware = getHardware();
-	console.error("=== Readdir Scaling Benchmark ===");
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(
-		`Iterations: ${iterations} (+ ${warmup} warmup), entries: ${entryCounts.join(",")}, modes: ${modes.join(",")}, fixtures: ${fixtures.join(",")}, workloads: ${probeEnabled ? "probe" : workloads.join(",")}, preflightOps: ${probeEnabled ? preflightOps.join(",") : "n/a"}, preflightCounts: ${probeEnabled ? preflightCounts.join(",") : "n/a"}, includeReaddir: ${probeEnabled ? includeReaddirs.join(",") : "n/a"}`,
-	);
-
-	const sidecar = await createBenchSidecar();
-	try {
-		const cases: ReaddirCaseResult[] = [];
-		for (const fixture of fixtures) {
-			const shapesByEntryCount = (entryCount: number): ReaddirShape[] => {
-				if (!probeEnabled) return workloads.map((workload) => shapeForWorkload(workload, entryCount));
-				const shapes: ReaddirShape[] = [];
-				for (const preflightOp of preflightOps) {
-					for (const preflightCount of preflightCounts) {
-						for (const includeReaddir of includeReaddirs) {
-							const shape = {
-								workload: "probe" as const,
-								preflightOp,
-								preflightCount,
-								includeReaddir,
-								probeTargets,
-							};
-							shapes.push({ ...shape, operationCounts: createOperationCounts(shape) });
-						}
-					}
-				}
-				return shapes;
-			};
-			for (const mode of modes) {
-				for (const entryCount of entryCounts) {
-					for (const shape of shapesByEntryCount(entryCount)) {
-						if (shape.preflightOp === "none" && shape.preflightCount !== 0) continue;
-						if (shape.preflightOp !== "none" && shape.preflightCount === 0) continue;
-						if (!shape.includeReaddir && shape.preflightOp === "none") continue;
-						const result = await runCase(
-							fixture,
-							shape,
-							entryCount,
-							mode,
-							iterations,
-							warmup,
-							sidecar,
-						);
-						cases.push(result);
-						console.error(
-							`  fixture=${fixture} workload=${shape.workload} preflight=${shape.preflightOp}:${shape.preflightCount} readdir=${shape.includeReaddir} mode=${mode} entries=${entryCount}: host.p50=${result.host.p50}ms guest.p50=${result.guest.p50}ms ratio=${result.guestVsHostRatio}x guest.ms/entry=${result.msPerEntry.guest}`,
-						);
-					}
-				}
-			}
-		}
-		for (const fixture of fixtures) {
-			for (const workload of probeEnabled ? (["probe"] as ReaddirWorkload[]) : workloads) {
-				for (const mode of modes) {
-					const empty = cases.find(
-						(result) =>
-							result.fixture === fixture &&
-							result.workload === workload &&
-							result.mode === mode &&
-							result.preflightOp === "none" &&
-							result.preflightCount === 0 &&
-							result.includeReaddir &&
-							result.entryCount === 0,
-					);
-					if (!empty) continue;
-					for (const result of cases) {
-						if (
-							result.fixture !== fixture ||
-							result.workload !== workload ||
-							result.mode !== mode ||
-							result.preflightOp !== empty.preflightOp ||
-							result.preflightCount !== empty.preflightCount ||
-							result.includeReaddir !== empty.includeReaddir
-						) {
-							continue;
-						}
-						result.deltaFromEmptyMs = {
-							host: round(result.host.p50 - empty.host.p50),
-							guest: round(result.guest.p50 - empty.guest.p50),
-						};
-					}
-				}
-			}
-		}
-		for (const result of cases) {
-			const pureReaddir = cases.find(
-				(candidate) =>
-					candidate.fixture === result.fixture &&
-					candidate.mode === result.mode &&
-					candidate.entryCount === result.entryCount &&
-					candidate.preflightOp === "none" &&
-					candidate.preflightCount === 0 &&
-					candidate.includeReaddir,
-			);
-			const preflightOnly = cases.find(
-				(candidate) =>
-					candidate.fixture === result.fixture &&
-					candidate.mode === result.mode &&
-					candidate.entryCount === result.entryCount &&
-					candidate.preflightOp === result.preflightOp &&
-					candidate.preflightCount === result.preflightCount &&
-					!candidate.includeReaddir,
-			);
-			result.derived = {
-				guestP50MinusPureReaddirMs: pureReaddir
-					? round(result.guest.p50 - pureReaddir.guest.p50)
-					: undefined,
-				guestP50MinusPreflightOnlyMs: preflightOnly
-					? round(result.guest.p50 - preflightOnly.guest.p50)
-					: undefined,
-				guestMsPerPreflightCall:
-					result.preflightCount > 0
-						? round(result.guest.p50 / result.preflightCount)
-						: undefined,
-			};
-		}
-		printTable(
-			[
-				"fixture",
-				"workload",
-				"preflight",
-				"readdir",
-				"mode",
-				"entries",
-				"host p50",
-				"guest p50",
-				"guest/host",
-				"guest ms/entry",
-				"guest delta empty",
-				"returned",
-			],
-			cases.map((result) => [
-				result.fixture,
-				result.workload,
-				`${result.preflightOp}:${result.preflightCount}`,
-				result.includeReaddir ? "yes" : "no",
-				result.mode,
-				result.entryCount,
-				`${result.host.p50}ms`,
-				`${result.guest.p50}ms`,
-				`${result.guestVsHostRatio}x`,
-				`${result.msPerEntry.guest}ms`,
-				result.deltaFromEmptyMs ? `${result.deltaFromEmptyMs.guest}ms` : "n/a",
-				result.returnedCount.guest,
-			]),
-		);
-		console.log(
-			JSON.stringify(
-				{
-					benchmark: "readdir-scaling",
-					hardware,
-					iterations,
-					warmup,
-					fixtures,
-					workloads: probeEnabled ? ["probe"] : workloads,
-					preflightOps: probeEnabled ? preflightOps : undefined,
-					preflightCounts: probeEnabled ? preflightCounts : undefined,
-					includeReaddirs: probeEnabled ? includeReaddirs : undefined,
-					cases,
-				},
-				null,
-				2,
-			),
-		);
-	} finally {
-		await sidecar.dispose();
-	}
-}
-
-main().catch((error) => {
-	console.error(error);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/src/focused/sync-bridge-floor.bench.ts b/packages/benchmarks/src/focused/sync-bridge-floor.bench.ts
deleted file mode 100644
index 66a053efb..000000000
--- a/packages/benchmarks/src/focused/sync-bridge-floor.bench.ts
+++ /dev/null
@@ -1,398 +0,0 @@
-/**
- * Focused synchronous bridge floor benchmark.
- *
- * Measures a benchmark-only no-op sync bridge RPC that returns before any
- * filesystem/VFS dispatch. Use this to separate bridge round-trip,
- * serialization, and service-loop routing cost from real operation bodies.
- */
-
-import { readFileSync, rmSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { createBenchSidecar, createBenchVm, type BenchVm } from "../lib/vm.js";
-import type { SidecarProcess } from "@secure-exec/core";
-import { getHardware, printTable, round, stats } from "../lib/perf-utils.js";
-
-interface SyncRpcLatency {
-	calls: number;
-	totalUs: number;
-	avgUs: number;
-	maxUs: number;
-}
-
-interface SyncBridgePhaseMetric {
-	method: string;
-	stage: string;
-	calls: number;
-	totalUs: number;
-	avgUs: number;
-	maxUs: number;
-}
-
-interface BridgeFloorCase {
-	callCount: number;
-	payloadBytes: number;
-	iterations: number;
-	warmup: number;
-	hostLoop: ReturnType<typeof stats>;
-	guestBridge: ReturnType<typeof stats>;
-	guestVsHostRatio: number;
-	guestMsPerRpc: number;
-	syncRpcLatency?: SyncRpcLatency | null;
-	syncBridgePhases?: SyncBridgePhaseMetric[] | null;
-	raw: {
-		hostLoopMs: number[];
-		guestBridgeMs: number[];
-	};
-}
-
-function parseArgs(): {
-	iterations: number;
-	warmup: number;
-	callCounts: number[];
-	payloadBytes: number;
-	syncRpcLatencyEnabled: boolean;
-	bridgePhasesEnabled: boolean;
-} {
-	const value = (name: string) =>
-		process.argv.find((arg) => arg.startsWith(`--${name}=`))?.split("=")[1];
-	const iterations = Number(value("iterations") ?? 10);
-	const warmup = Number(value("warmup") ?? 2);
-	const callCounts = (value("call-counts") ?? "1,8,32")
-		.split(",")
-		.map((n) => Number(n.trim()))
-		.filter((n) => Number.isFinite(n) && n >= 1);
-	const payloadBytes = Number(value("payload-bytes") ?? 0);
-	const syncRpcLatencyEnabled =
-		process.argv.includes("--sync-rpc-latency") || value("sync-rpc-latency") === "1";
-	const bridgePhasesEnabled =
-		process.argv.includes("--bridge-phases") || value("bridge-phases") === "1";
-	if (
-		iterations < 1 ||
-		warmup < 0 ||
-		callCounts.length === 0 ||
-		!Number.isFinite(payloadBytes) ||
-		payloadBytes < 0
-	) {
-		throw new Error(
-			"invalid args; expected --iterations>=1 --warmup>=0 --call-counts=1,8,32 --payload-bytes>=0",
-		);
-	}
-	return { iterations, warmup, callCounts, payloadBytes, syncRpcLatencyEnabled, bridgePhasesEnabled };
-}
-
-function nowMs(start: number): number {
-	return performance.now() - start;
-}
-
-function parseSyncRpcLatencyFile(path: string): SyncRpcLatency | null {
-	try {
-		const text = readFileSync(path, "utf8").trim();
-		const match = /calls=(\d+) total_us=(\d+) avg_us=(\d+) max_us=(\d+)/.exec(text);
-		if (!match) return null;
-		return {
-			calls: Number(match[1]),
-			totalUs: Number(match[2]),
-			avgUs: Number(match[3]),
-			maxUs: Number(match[4]),
-		};
-	} catch {
-		return null;
-	}
-}
-
-function parseSyncBridgePhasesFile(path: string): SyncBridgePhaseMetric[] | null {
-	try {
-		const text = readFileSync(path, "utf8").trim();
-		if (!text) return [];
-		const metrics: SyncBridgePhaseMetric[] = [];
-		for (const line of text.split(/\r?\n/)) {
-			const match =
-				/^method=(\S+) stage=(\S+) calls=(\d+) total_us=(\d+) avg_us=(\d+) max_us=(\d+)$/.exec(
-					line,
-				);
-			if (!match) continue;
-			metrics.push({
-				method: match[1],
-				stage: match[2],
-				calls: Number(match[3]),
-				totalUs: Number(match[4]),
-				avgUs: Number(match[5]),
-				maxUs: Number(match[6]),
-			});
-		}
-		return metrics;
-	} catch {
-		return null;
-	}
-}
-
-function runHostLoop(callCount: number, payloadBytes: number, iterations: number, warmup: number): number[] {
-	const samples: number[] = [];
-	const payload = "x".repeat(payloadBytes);
-	let sink = 0;
-	for (let i = 0; i < warmup + iterations; i++) {
-		const start = performance.now();
-		for (let j = 0; j < callCount; j++) {
-			sink += payload.length;
-		}
-		const ms = nowMs(start);
-		if (i >= warmup) samples.push(ms);
-	}
-	if (sink === -1) console.error("unreachable");
-	return samples;
-}
-
-async function createVm(sidecar: SidecarProcess): Promise<BenchVm> {
-	return createBenchVm({
-		sidecar,
-	});
-}
-
-async function runGuestBridge(
-	vm: BenchVm,
-	callCount: number,
-	payloadBytes: number,
-	iterations: number,
-	warmup: number,
-): Promise<number[]> {
-	const scriptPath = `/tmp/sync-bridge-floor-${callCount}-${Date.now()}-${Math.random()
-		.toString(16)
-		.slice(2)}.mjs`;
-	const source = `
-const bridge = globalThis._benchNoop;
-if (!bridge || typeof bridge.applySyncPromise !== "function") {
-  throw new Error("_benchNoop bridge diagnostic is not available");
-}
-const callCount = ${JSON.stringify(callCount)};
-const payload = "x".repeat(${JSON.stringify(payloadBytes)});
-const iterations = Number(process.env.BENCH_ITERATIONS || 10);
-const warmup = Number(process.env.BENCH_WARMUP || 2);
-const samples = [];
-const now = () => Number(process.hrtime.bigint()) / 1e6;
-for (let i = 0; i < warmup + iterations; i++) {
-  const start = now();
-  for (let j = 0; j < callCount; j++) {
-    bridge.applySyncPromise(void 0, [payload]);
-  }
-  const ms = now() - start;
-  if (i >= warmup) samples.push(ms);
-}
-process.stdout.write(JSON.stringify({ samples }));
-`;
-	await vm.writeFile(scriptPath, source);
-	let stdout = "";
-	let stderr = "";
-	const proc = vm.spawn("node", [scriptPath], {
-		env: {
-			BENCH_ITERATIONS: String(iterations),
-			BENCH_WARMUP: String(warmup),
-		},
-		onStdout: (data) => {
-			stdout += Buffer.from(data).toString("utf8");
-		},
-		onStderr: (data) => {
-			stderr += Buffer.from(data).toString("utf8");
-		},
-	});
-	const code = await vm.waitProcess(proc.pid);
-	if (code !== 0) {
-		throw new Error(`guest sync-bridge-floor exited ${code}\n${stderr}`);
-	}
-	return JSON.parse(stdout).samples;
-}
-
-async function runCase(
-	callCount: number,
-	payloadBytes: number,
-	iterations: number,
-	warmup: number,
-	sidecar: SidecarProcess,
-	latencyFile?: string,
-	bridgePhasesFile?: string,
-	hostBridgePhasesFile?: string,
-): Promise<BridgeFloorCase> {
-	const hostSamples = runHostLoop(callCount, payloadBytes, iterations, warmup);
-	const vm = await createVm(sidecar);
-	try {
-		const guestSamples = await runGuestBridge(vm, callCount, payloadBytes, iterations, warmup);
-		const hostLoop = stats(hostSamples);
-		const guestBridge = stats(guestSamples);
-		const syncBridgePhases = [
-			...(bridgePhasesFile ? (parseSyncBridgePhasesFile(bridgePhasesFile) ?? []) : []),
-			...(hostBridgePhasesFile ? (parseSyncBridgePhasesFile(hostBridgePhasesFile) ?? []) : []),
-		];
-		return {
-			callCount,
-			payloadBytes,
-			iterations,
-			warmup,
-			hostLoop,
-			guestBridge,
-			guestVsHostRatio: round(guestBridge.p50 / hostLoop.p50),
-			guestMsPerRpc: round(guestBridge.p50 / callCount),
-			syncRpcLatency: latencyFile ? parseSyncRpcLatencyFile(latencyFile) : null,
-			syncBridgePhases: bridgePhasesFile || hostBridgePhasesFile ? syncBridgePhases : null,
-			raw: {
-				hostLoopMs: hostSamples,
-				guestBridgeMs: guestSamples,
-			},
-		};
-	} finally {
-		await vm.dispose();
-	}
-}
-
-async function runCaseWithOptionalLatency(args: {
-	callCount: number;
-	payloadBytes: number;
-	iterations: number;
-	warmup: number;
-	sharedSidecar: SidecarProcess | null;
-	syncRpcLatencyEnabled: boolean;
-	bridgePhasesEnabled: boolean;
-}): Promise<BridgeFloorCase> {
-	const needsDedicatedSidecar = args.syncRpcLatencyEnabled || args.bridgePhasesEnabled;
-	if (!needsDedicatedSidecar) {
-		if (!args.sharedSidecar) throw new Error("shared sidecar required when tracing is disabled");
-		return runCase(
-			args.callCount,
-			args.payloadBytes,
-			args.iterations,
-			args.warmup,
-			args.sharedSidecar,
-		);
-	}
-
-	const latencyFile = join(
-		tmpdir(),
-		`agentos-sync-bridge-floor-lat-${args.callCount}-${Date.now()}-${Math.random()
-			.toString(16)
-			.slice(2)}.txt`,
-	);
-	const previousEnabled = process.env.AGENTOS_SYNCRPC_LAT;
-	const previousFile = process.env.AGENTOS_SYNCRPC_LAT_FILE;
-	const phasesFile = join(
-		tmpdir(),
-		`agentos-sync-bridge-floor-phases-${args.callCount}-${Date.now()}-${Math.random()
-			.toString(16)
-			.slice(2)}.txt`,
-	);
-	const previousPhasesEnabled = process.env.AGENTOS_SYNC_BRIDGE_PHASES;
-	const previousPhasesFile = process.env.AGENTOS_SYNC_BRIDGE_PHASES_FILE;
-	const hostPhasesFile = join(
-		tmpdir(),
-		`agentos-sync-bridge-floor-host-phases-${args.callCount}-${Date.now()}-${Math.random()
-			.toString(16)
-			.slice(2)}.txt`,
-	);
-	const previousHostPhasesEnabled = process.env.AGENTOS_SYNC_BRIDGE_HOST_PHASES;
-	const previousHostPhasesFile = process.env.AGENTOS_SYNC_BRIDGE_HOST_PHASES_FILE;
-	if (args.syncRpcLatencyEnabled) {
-		process.env.AGENTOS_SYNCRPC_LAT = "1";
-		process.env.AGENTOS_SYNCRPC_LAT_FILE = latencyFile;
-	}
-	if (args.bridgePhasesEnabled) {
-		process.env.AGENTOS_SYNC_BRIDGE_PHASES = "1";
-		process.env.AGENTOS_SYNC_BRIDGE_PHASES_FILE = phasesFile;
-		process.env.AGENTOS_SYNC_BRIDGE_HOST_PHASES = "1";
-		process.env.AGENTOS_SYNC_BRIDGE_HOST_PHASES_FILE = hostPhasesFile;
-	}
-	const sidecar = await createBenchSidecar();
-	try {
-		return await runCase(
-			args.callCount,
-			args.payloadBytes,
-			args.iterations,
-			args.warmup,
-			sidecar,
-			args.syncRpcLatencyEnabled ? latencyFile : undefined,
-			args.bridgePhasesEnabled ? phasesFile : undefined,
-			args.bridgePhasesEnabled ? hostPhasesFile : undefined,
-		);
-	} finally {
-		await sidecar.dispose();
-		if (previousEnabled === undefined) delete process.env.AGENTOS_SYNCRPC_LAT;
-		else process.env.AGENTOS_SYNCRPC_LAT = previousEnabled;
-		if (previousFile === undefined) delete process.env.AGENTOS_SYNCRPC_LAT_FILE;
-		else process.env.AGENTOS_SYNCRPC_LAT_FILE = previousFile;
-		if (previousPhasesEnabled === undefined) delete process.env.AGENTOS_SYNC_BRIDGE_PHASES;
-		else process.env.AGENTOS_SYNC_BRIDGE_PHASES = previousPhasesEnabled;
-		if (previousPhasesFile === undefined) delete process.env.AGENTOS_SYNC_BRIDGE_PHASES_FILE;
-		else process.env.AGENTOS_SYNC_BRIDGE_PHASES_FILE = previousPhasesFile;
-		if (previousHostPhasesEnabled === undefined) delete process.env.AGENTOS_SYNC_BRIDGE_HOST_PHASES;
-		else process.env.AGENTOS_SYNC_BRIDGE_HOST_PHASES = previousHostPhasesEnabled;
-		if (previousHostPhasesFile === undefined) delete process.env.AGENTOS_SYNC_BRIDGE_HOST_PHASES_FILE;
-		else process.env.AGENTOS_SYNC_BRIDGE_HOST_PHASES_FILE = previousHostPhasesFile;
-		rmSync(latencyFile, { force: true });
-		rmSync(phasesFile, { force: true });
-		rmSync(hostPhasesFile, { force: true });
-	}
-}
-
-async function main(): Promise<void> {
-	const { iterations, warmup, callCounts, payloadBytes, syncRpcLatencyEnabled, bridgePhasesEnabled } = parseArgs();
-	const hardware = getHardware();
-	console.error("=== Sync Bridge Floor Benchmark ===");
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(
-		`Iterations: ${iterations} (+ ${warmup} warmup), callCounts: ${callCounts.join(",")}, payloadBytes: ${payloadBytes}, syncRpcLatency: ${syncRpcLatencyEnabled}, bridgePhases: ${bridgePhasesEnabled}`,
-	);
-
-	const sharedSidecar =
-		syncRpcLatencyEnabled || bridgePhasesEnabled ? null : await createBenchSidecar();
-	try {
-		const cases: BridgeFloorCase[] = [];
-		for (const callCount of callCounts) {
-			const result = await runCaseWithOptionalLatency({
-				callCount,
-				payloadBytes,
-				iterations,
-				warmup,
-				sharedSidecar,
-				syncRpcLatencyEnabled,
-				bridgePhasesEnabled,
-			});
-			cases.push(result);
-			console.error(
-				`  calls=${callCount}: hostLoop.p50=${result.hostLoop.p50}ms guestBridge.p50=${result.guestBridge.p50}ms guest.ms/rpc=${result.guestMsPerRpc}`,
-			);
-		}
-		printTable(
-			["calls", "hostLoopP50", "guestBridgeP50", "guestMsPerRpc", "syncRpcAvgUs"],
-			cases.map((result) => [
-				result.callCount,
-				result.hostLoop.p50,
-				result.guestBridge.p50,
-				result.guestMsPerRpc,
-				result.syncRpcLatency?.avgUs ?? "",
-			]),
-		);
-		console.log(
-			JSON.stringify(
-				{
-					benchmark: "sync-bridge-floor",
-					generatedAt: new Date().toISOString(),
-					hardware,
-					iterations,
-					warmup,
-					callCounts,
-					payloadBytes,
-					syncRpcLatencyEnabled,
-					bridgePhasesEnabled,
-					cases,
-				},
-				null,
-				2,
-			),
-		);
-	} finally {
-		if (sharedSidecar) await sharedSidecar.dispose();
-	}
-}
-
-main().catch((error) => {
-	console.error(error);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/src/focused/wasi-ls-scaling.bench.ts b/packages/benchmarks/src/focused/wasi-ls-scaling.bench.ts
deleted file mode 100644
index 1eb4dda0e..000000000
--- a/packages/benchmarks/src/focused/wasi-ls-scaling.bench.ts
+++ /dev/null
@@ -1,594 +0,0 @@
-/**
- * Focused WASI/coreutils `ls` scaling benchmark.
- *
- * This prepares directory fixtures outside the timed loop and reuses one VM, so
- * the samples isolate coreutils/WASI `ls -1` cost from VM creation and fixture setup.
- */
-
-import { execFileSync } from "node:child_process";
-import { mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import { existsSync, statSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { createBenchSidecar, createBenchVm, type BenchVm } from "../lib/vm.js";
-import type { SidecarProcess } from "@secure-exec/core";
-import { getHardware, printTable, round, stats } from "../lib/perf-utils.js";
-
-interface WasiSyscallMetric {
-	name: string;
-	elapsedMs: number;
-	result?: unknown;
-	fd?: number;
-	iovsLen?: number;
-	cookie?: number;
-	bufLen?: number;
-	used?: number;
-	recordsReturned?: number;
-	totalDirentsRead?: number;
-	stoppedRecordTooLarge?: boolean;
-}
-
-interface WasiSyscallSummary {
-	count: number;
-	totalMs: number;
-	p50Ms: number;
-	maxMs: number;
-}
-
-interface WasiLsCaseResult {
-	variant: string;
-	lsArgs: string[];
-	fileCount: number;
-	iterations: number;
-	warmup: number;
-	serialRuns: number;
-	hostLs: ReturnType<typeof stats>;
-	guestTrue: ReturnType<typeof stats>;
-	guestLs: ReturnType<typeof stats>;
-	guestLsMinusTrueMs: number;
-	guestDeltaFromEmptyMs?: number;
-	hostDeltaFromEmptyMs?: number;
-	guestVsHostRatio: number;
-	stdoutBytes: ReturnType<typeof stats>;
-	stdoutCallbackChunks: ReturnType<typeof stats>;
-	stdoutCallbackBytes: ReturnType<typeof stats>;
-	wasiSyscalls?: Record<string, WasiSyscallSummary>;
-	fdReaddir?: {
-		count: number;
-		recordsReturned: number;
-		totalDirentsReadMax: number;
-		shortBufferStops: number;
-		cookies: number[];
-	};
-	returnedCount: {
-		host: number;
-		guestFixture: number;
-		guestStdout: number;
-	};
-	raw: {
-		hostLsMs: number[];
-		guestTrueMs: number[];
-		guestLsMs: number[];
-		stdoutBytes: number[];
-		stdoutCallbackChunks: number[];
-		stdoutCallbackBytes: number[];
-		wasmWarmupDiagnostics?: string[];
-		wasiSyscallMetrics?: WasiSyscallMetric[];
-	};
-}
-
-interface LsVariant {
-	name: string;
-	argsBeforeDir: string[];
-}
-
-const LS_VARIANTS: Record<string, LsVariant> = {
-	one: { name: "one", argsBeforeDir: ["-1"] },
-	unsorted: { name: "unsorted", argsBeforeDir: ["-1", "-U"] },
-	"no-color": { name: "no-color", argsBeforeDir: ["-1", "--color=never"] },
-	"unsorted-no-color": {
-		name: "unsorted-no-color",
-		argsBeforeDir: ["-1", "-U", "--color=never"],
-	},
-	"fast-no-decor": {
-		name: "fast-no-decor",
-		argsBeforeDir: ["-f", "-1", "--color=never", "--indicator-style=none"],
-	},
-};
-
-function parseArgs(): {
-	iterations: number;
-	warmup: number;
-	serialRuns: number;
-	fileCounts: number[];
-	lsVariants: LsVariant[];
-	wasmWarmupDebug: boolean;
-	wasiSyscallCounters: boolean;
-} {
-	const value = (name: string) =>
-		process.argv.find((arg) => arg.startsWith(`--${name}=`))?.split("=")[1];
-	const hasFlag = (name: string) => process.argv.includes(`--${name}`);
-	const iterations = Number(value("iterations") ?? 5);
-	const warmup = Number(value("warmup") ?? 1);
-	const serialRuns = Number(value("serial-runs") ?? 3);
-	const fileCounts = (value("file-counts") ?? "0,1,32,100,1000")
-		.split(",")
-		.map((n) => Number(n.trim()))
-		.filter((n) => Number.isFinite(n) && n >= 0)
-		.map((n) => Math.trunc(n));
-	const lsVariants = (value("ls-variants") ?? "one")
-		.split(",")
-		.map((variant) => variant.trim())
-		.filter((variant) => variant.length > 0)
-		.map((variant) => {
-			const resolved = LS_VARIANTS[variant];
-			if (!resolved) {
-				throw new Error(
-					`unknown ls variant ${variant}; expected one of ${Object.keys(LS_VARIANTS).join(",")}`,
-				);
-			}
-			return resolved;
-		});
-	if (iterations < 1 || warmup < 0 || serialRuns < 1 || fileCounts.length === 0) {
-		throw new Error(
-			"invalid args; expected --iterations>=1 --warmup>=0 --serial-runs>=1 --file-counts=0,1,32,100,1000",
-		);
-	}
-	return {
-		iterations,
-		warmup,
-		serialRuns,
-		fileCounts,
-		lsVariants,
-		wasmWarmupDebug: hasFlag("wasm-warmup-debug"),
-		wasiSyscallCounters: hasFlag("wasi-syscall-counters"),
-	};
-}
-
-function nowMs(start: number): number {
-	return performance.now() - start;
-}
-
-function createHostFixture(fileCount: number): string {
-	const dir = mkdtempSync(join(tmpdir(), `agentos-wasi-ls-bench-${fileCount}-`));
-	for (let i = 0; i < fileCount; i++) {
-		writeFileSync(join(dir, `file-${String(i).padStart(5, "0")}.txt`), "x");
-	}
-	return dir;
-}
-
-function countGeneratedLsEntries(stdout: string): number {
-	const trimmed = stdout.trimEnd();
-	if (trimmed.length === 0) return 0;
-	const matches = trimmed.match(/\bfile-\d{5}\.txt\b/g);
-	return matches?.length ?? 0;
-}
-
-function runHostLs(
-	dir: string,
-	fileCount: number,
-	variant: LsVariant,
-	samples: number[],
-): number {
-	let returnedCount = 0;
-	const start = performance.now();
-	const stdout = execFileSync("ls", [...variant.argsBeforeDir, dir], {
-		encoding: "utf8",
-	});
-	const elapsed = nowMs(start);
-	returnedCount = countGeneratedLsEntries(stdout);
-	if (returnedCount !== fileCount) {
-		throw new Error(
-			`host ls ${variant.name} returned ${returnedCount}, expected ${fileCount}`,
-		);
-	}
-	samples.push(elapsed);
-	return returnedCount;
-}
-
-function collectWasmWarmupDiagnostics(
-	enabled: boolean,
-	stderr: string,
-	diagnostics: string[],
-): void {
-	if (!enabled) return;
-	for (const line of stderr.split(/\r?\n/)) {
-		if (
-			line.startsWith("__AGENTOS_WASM_WARMUP_METRICS__:") ||
-			line.startsWith("__AGENTOS_WASM_PHASE_METRICS__:")
-		) {
-			diagnostics.push(line);
-		}
-	}
-}
-
-function collectWasiSyscallMetrics(
-	enabled: boolean,
-	stderr: string,
-	metrics: WasiSyscallMetric[],
-): void {
-	if (!enabled) return;
-	for (const line of stderr.split(/\r?\n/)) {
-		if (!line.startsWith("__AGENTOS_WASI_SYSCALL_METRICS__:")) continue;
-		const raw = line.slice("__AGENTOS_WASI_SYSCALL_METRICS__:".length);
-		try {
-			const parsed = JSON.parse(raw) as WasiSyscallMetric;
-			if (typeof parsed.name === "string" && Number.isFinite(parsed.elapsedMs)) {
-				metrics.push(parsed);
-			}
-		} catch {
-			// Keep benchmark collection robust if a debug line is malformed.
-		}
-	}
-}
-
-function summarizeWasiSyscalls(
-	metrics: WasiSyscallMetric[],
-): Record<string, WasiSyscallSummary> {
-	const grouped = new Map<string, number[]>();
-	for (const metric of metrics) {
-		if (!grouped.has(metric.name)) {
-			grouped.set(metric.name, []);
-		}
-		grouped.get(metric.name)!.push(metric.elapsedMs);
-	}
-	return Object.fromEntries(
-		[...grouped.entries()].map(([name, values]) => {
-			const summary = stats(values);
-			return [
-				name,
-				{
-					count: values.length,
-					totalMs: round(values.reduce((sum, value) => sum + value, 0)),
-					p50Ms: summary.p50,
-					maxMs: summary.max,
-				},
-			];
-		}),
-	);
-}
-
-function summarizeFdReaddir(metrics: WasiSyscallMetric[]) {
-	const fdReaddir = metrics.filter((metric) => metric.name === "fd_readdir");
-	if (fdReaddir.length === 0) return undefined;
-	return {
-		count: fdReaddir.length,
-		recordsReturned: fdReaddir.reduce(
-			(sum, metric) => sum + (metric.recordsReturned ?? 0),
-			0,
-		),
-		totalDirentsReadMax: Math.max(
-			...fdReaddir.map((metric) => metric.totalDirentsRead ?? 0),
-		),
-		shortBufferStops: fdReaddir.filter((metric) => metric.stoppedRecordTooLarge)
-			.length,
-		cookies: fdReaddir.map((metric) => metric.cookie ?? 0),
-	};
-}
-
-function resolveSecureExecRoot(): string | null {
-	const candidates = [
-		process.env.SECURE_EXEC_ROOT,
-		join(process.cwd(), "../secure-exec"),
-		join(process.cwd(), "../../secure-exec/fuzz-perf"),
-	].filter((path): path is string => Boolean(path));
-	for (const candidate of candidates) {
-		if (existsSync(join(candidate, "registry/software/coreutils/wasm/ls"))) {
-			return candidate;
-		}
-	}
-	return null;
-}
-
-function lsModuleBytes(secureExecRoot: string | null): number | null {
-	if (!secureExecRoot) return null;
-	const modulePath = join(secureExecRoot, "registry/software/coreutils/wasm/ls");
-	return existsSync(modulePath) ? statSync(modulePath).size : null;
-}
-
-async function createVm(sidecar: SidecarProcess): Promise<BenchVm> {
-	return createBenchVm({
-		sidecar,
-	});
-}
-
-async function setupGuestFixture(vm: BenchVm, dir: string, fileCount: number): Promise<void> {
-	await vm.exec(`rm -rf ${dir} && mkdir -p ${dir}`);
-	for (let i = 0; i < fileCount; i++) {
-		await vm.writeFile(`${dir}/file-${String(i).padStart(5, "0")}.txt`, "x");
-	}
-	const entries = await vm.readdir(dir);
-	if (entries.length !== fileCount) {
-		throw new Error(
-			`guest fixture setup created ${entries.length} entries in ${dir}, expected ${fileCount}`,
-		);
-	}
-}
-
-async function runCase(
-	vm: BenchVm,
-	hostDir: string,
-	guestDir: string,
-	fileCount: number,
-	variant: LsVariant,
-	iterations: number,
-	warmup: number,
-	serialRuns: number,
-	wasmWarmupDebug: boolean,
-	wasiSyscallCounters: boolean,
-): Promise<WasiLsCaseResult> {
-	const hostLsMs: number[] = [];
-	const guestTrueMs: number[] = [];
-	const guestLsMs: number[] = [];
-	const stdoutBytes: number[] = [];
-	const stdoutCallbackChunks: number[] = [];
-	const stdoutCallbackBytes: number[] = [];
-	const wasmWarmupDiagnostics: string[] = [];
-	const wasiSyscallMetrics: WasiSyscallMetric[] = [];
-	let hostReturnedCount = 0;
-	const guestFixtureCount = fileCount;
-	let guestStdoutReturnedCount = 0;
-	const env: Record<string, string> = {};
-	if (wasmWarmupDebug) env.AGENTOS_WASM_WARMUP_DEBUG = "1";
-	if (wasiSyscallCounters) env.AGENTOS_WASI_SYSCALL_COUNTERS = "1";
-	const execOptions = Object.keys(env).length > 0 ? { env } : {};
-
-	for (let i = 0; i < warmup + iterations; i++) {
-		for (let j = 0; j < serialRuns; j++) {
-			hostReturnedCount = runHostLs(hostDir, fileCount, variant, hostLsMs);
-
-			let start = performance.now();
-			const trueResult = await vm.execArgv("true", [], execOptions);
-			const trueMs = nowMs(start);
-			if (trueResult.exitCode !== 0) {
-				throw new Error(`guest true exited ${trueResult.exitCode}: ${trueResult.stderr}`);
-			}
-			collectWasmWarmupDiagnostics(
-				wasmWarmupDebug,
-				trueResult.stderr,
-				wasmWarmupDiagnostics,
-			);
-
-			let chunks = 0;
-			let callbackBytes = 0;
-			let callbackStdout = "";
-			start = performance.now();
-			const lsResult = await vm.execArgv(
-				"ls",
-				[...variant.argsBeforeDir, guestDir],
-				{
-					...execOptions,
-					onStdout: (chunk) => {
-						chunks += 1;
-						callbackBytes += chunk.byteLength;
-						callbackStdout += Buffer.from(chunk).toString("utf8");
-					},
-				},
-			);
-			const lsMs = nowMs(start);
-			if (lsResult.exitCode !== 0) {
-				throw new Error(`guest ls exited ${lsResult.exitCode}: ${lsResult.stderr}`);
-			}
-			const stdout = callbackStdout.length > 0 ? callbackStdout : lsResult.stdout;
-			guestStdoutReturnedCount = countGeneratedLsEntries(stdout);
-			collectWasmWarmupDiagnostics(
-				wasmWarmupDebug,
-				lsResult.stderr,
-				wasmWarmupDiagnostics,
-			);
-			collectWasiSyscallMetrics(
-				wasiSyscallCounters,
-				lsResult.stderr,
-				wasiSyscallMetrics,
-			);
-
-			if (i >= warmup) {
-				guestTrueMs.push(trueMs);
-				guestLsMs.push(lsMs);
-				stdoutBytes.push(Buffer.byteLength(stdout));
-				stdoutCallbackChunks.push(chunks);
-				stdoutCallbackBytes.push(callbackBytes);
-			}
-		}
-		if (i < warmup) {
-			hostLsMs.splice(0, serialRuns);
-		}
-		console.error(
-			`  variant=${variant.name} files=${fileCount} iter=${i}: true.p50=${round(stats(guestTrueMs.length ? guestTrueMs : [0]).p50)}ms ls.p50=${round(stats(guestLsMs.length ? guestLsMs : [0]).p50)}ms${i < warmup ? " (warmup)" : ""}`,
-		);
-	}
-
-	const hostLs = stats(hostLsMs);
-	const guestTrue = stats(guestTrueMs);
-	const guestLs = stats(guestLsMs);
-	return {
-		variant: variant.name,
-		lsArgs: [...variant.argsBeforeDir, "<dir>"],
-		fileCount,
-		iterations,
-		warmup,
-		serialRuns,
-		hostLs,
-		guestTrue,
-		guestLs,
-		guestLsMinusTrueMs: round(guestLs.p50 - guestTrue.p50),
-		guestVsHostRatio: round(guestLs.p50 / hostLs.p50),
-		stdoutBytes: stats(stdoutBytes),
-		stdoutCallbackChunks: stats(stdoutCallbackChunks),
-		stdoutCallbackBytes: stats(stdoutCallbackBytes),
-		...(wasiSyscallCounters
-			? {
-					wasiSyscalls: summarizeWasiSyscalls(wasiSyscallMetrics),
-					fdReaddir: summarizeFdReaddir(wasiSyscallMetrics),
-				}
-			: {}),
-		returnedCount: {
-			host: hostReturnedCount,
-			guestFixture: guestFixtureCount,
-			guestStdout: guestStdoutReturnedCount,
-		},
-		raw: {
-			hostLsMs,
-			guestTrueMs,
-			guestLsMs,
-			stdoutBytes,
-			stdoutCallbackChunks,
-			stdoutCallbackBytes,
-			...(wasmWarmupDebug ? { wasmWarmupDiagnostics } : {}),
-			...(wasiSyscallCounters ? { wasiSyscallMetrics } : {}),
-		},
-	};
-}
-
-async function main(): Promise<void> {
-	const {
-		iterations,
-		warmup,
-		serialRuns,
-		fileCounts,
-		lsVariants,
-		wasmWarmupDebug,
-		wasiSyscallCounters,
-	} =
-		parseArgs();
-	const hardware = getHardware();
-	const secureExecRoot = resolveSecureExecRoot();
-	const moduleBytes = lsModuleBytes(secureExecRoot);
-
-	console.error("=== WASI/coreutils `ls` Scaling Benchmark ===");
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(
-		`Iterations: ${iterations} (+ ${warmup} warmup), serial runs: ${serialRuns}, file counts: ${fileCounts.join(",")}, variants: ${lsVariants.map((variant) => variant.name).join(",")}`,
-	);
-	if (moduleBytes !== null) {
-		console.error(`ls module bytes: ${moduleBytes}`);
-	}
-	if (wasmWarmupDebug) {
-		console.error("WASM warmup debug: enabled");
-	}
-	if (wasiSyscallCounters) {
-		console.error("WASI syscall counters: enabled");
-	}
-
-	const sidecar = await createBenchSidecar();
-	const hostFixtures: { fileCount: number; hostDir: string; guestDir: string }[] = [];
-	try {
-		const vm = await createVm(sidecar);
-		try {
-			for (const fileCount of fileCounts) {
-				const hostDir = createHostFixture(fileCount);
-				const guestDir = `/tmp/wasi-ls-bench-${fileCount}`;
-				hostFixtures.push({ fileCount, hostDir, guestDir });
-				await setupGuestFixture(vm, guestDir, fileCount);
-			}
-
-			const cases: WasiLsCaseResult[] = [];
-			for (const variant of lsVariants) {
-				for (const fixture of hostFixtures) {
-					cases.push(
-						await runCase(
-							vm,
-							fixture.hostDir,
-							fixture.guestDir,
-							fixture.fileCount,
-							variant,
-							iterations,
-							warmup,
-							serialRuns,
-							wasmWarmupDebug,
-							wasiSyscallCounters,
-						),
-					);
-				}
-			}
-
-			for (const variant of lsVariants) {
-				const emptyCase = cases.find(
-					(result) => result.variant === variant.name && result.fileCount === 0,
-				);
-				if (!emptyCase) continue;
-				for (const result of cases.filter(
-					(result) => result.variant === variant.name,
-				)) {
-					result.guestDeltaFromEmptyMs = round(
-						result.guestLs.p50 - emptyCase.guestLs.p50,
-					);
-					result.hostDeltaFromEmptyMs = round(
-						result.hostLs.p50 - emptyCase.hostLs.p50,
-					);
-				}
-			}
-
-			printTable(
-				[
-					"variant",
-					"files",
-					"host ls p50",
-					"guest true p50",
-					"guest ls p50",
-					"ls-true",
-					"guest delta empty",
-					"guest/host",
-					"stdout names",
-					"stdout bytes",
-					"stdout chunks",
-					"fd_readdir",
-				],
-				cases.map((result) => [
-					result.variant,
-					result.fileCount,
-					`${result.hostLs.p50}ms`,
-					`${result.guestTrue.p50}ms`,
-					`${result.guestLs.p50}ms`,
-					`${result.guestLsMinusTrueMs}ms`,
-					result.guestDeltaFromEmptyMs === undefined
-						? "n/a"
-						: `${result.guestDeltaFromEmptyMs}ms`,
-					`${result.guestVsHostRatio}x`,
-					`${result.returnedCount.guestStdout}/${result.returnedCount.guestFixture}`,
-					result.stdoutBytes.p50,
-					result.stdoutCallbackChunks.p50,
-					result.fdReaddir
-						? `${result.fdReaddir.count} calls/${result.fdReaddir.recordsReturned} records`
-						: "n/a",
-				]),
-			);
-
-			console.log(
-				JSON.stringify(
-					{
-						benchmark: "wasi-ls-scaling",
-						hardware,
-						iterations,
-						warmup,
-						serialRuns,
-						fileCounts,
-						lsVariants: lsVariants.map((variant) => ({
-							name: variant.name,
-							args: [...variant.argsBeforeDir, "<dir>"],
-						})),
-						moduleBytes,
-						wasmWarmupDebug,
-						wasiSyscallCounters,
-						cases,
-					},
-					null,
-					2,
-				),
-			);
-		} finally {
-			await vm.dispose();
-		}
-	} finally {
-		await sidecar.dispose();
-		for (const fixture of hostFixtures) {
-			rmSync(fixture.hostDir, { recursive: true, force: true });
-		}
-	}
-}
-
-main().catch((error) => {
-	console.error(error);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/src/focused/wasm-command-floor.bench.ts b/packages/benchmarks/src/focused/wasm-command-floor.bench.ts
deleted file mode 100644
index 37a2caf61..000000000
--- a/packages/benchmarks/src/focused/wasm-command-floor.bench.ts
+++ /dev/null
@@ -1,408 +0,0 @@
-/**
- * WASM command floor benchmark.
- *
- * Measures direct execArgv command startup/capture cost across a module-size
- * ladder and a same-module stdout-size sweep. This keeps the remaining
- * process-floor investigation separate from shell and directory setup costs.
- */
-
-import { existsSync, statSync } from "node:fs";
-import { join } from "node:path";
-import { createBenchSidecar, createBenchVm, type BenchVm } from "../lib/vm.js";
-import type { SidecarProcess } from "@secure-exec/core";
-import { getHardware, printTable, round, stats } from "../lib/perf-utils.js";
-
-interface CommandCase {
-	name: string;
-	command: string;
-	args: (fixture: { emptyDir: string }) => string[];
-	stdoutSize?: number;
-	expect?: (result: { exitCode: number; stdout: string; stderr: string }) => void;
-}
-
-interface CommandCaseResult {
-	name: string;
-	command: string;
-	args: string[];
-	moduleBytes: number | null;
-	iterations: number;
-	serialRuns: number;
-	firstRun: ReturnType<typeof stats>;
-	warmRuns: ReturnType<typeof stats>;
-	allRuns: ReturnType<typeof stats>;
-	stdoutBytes: ReturnType<typeof stats>;
-	stderrBytes: ReturnType<typeof stats>;
-	stdoutCallbackChunks: ReturnType<typeof stats>;
-	stderrCallbackChunks: ReturnType<typeof stats>;
-	stdoutCallbackBytes: ReturnType<typeof stats>;
-	stderrCallbackBytes: ReturnType<typeof stats>;
-	raw: {
-		samplesMs: number[];
-		stdoutBytes: number[];
-		stderrBytes: number[];
-		stdoutCallbackChunks: number[];
-		stderrCallbackChunks: number[];
-		stdoutCallbackBytes: number[];
-		stderrCallbackBytes: number[];
-		wasmWarmupDiagnostics?: string[];
-	}[];
-}
-
-function parseArgs(): {
-	iterations: number;
-	warmup: number;
-	serialRuns: number;
-	stdoutSizes: number[];
-	wasmWarmupDebug: boolean;
-} {
-	const value = (name: string) =>
-		process.argv.find((arg) => arg.startsWith(`--${name}=`))?.split("=")[1];
-	const hasFlag = (name: string) => process.argv.includes(`--${name}`);
-	const iterations = Number(value("iterations") ?? 3);
-	const warmup = Number(value("warmup") ?? 1);
-	const serialRuns = Number(value("serial-runs") ?? 3);
-	const stdoutSizes = (value("stdout-sizes") ?? "0,1,65536")
-		.split(",")
-		.map((n) => Number(n.trim()))
-		.filter((n) => Number.isFinite(n) && n >= 0)
-		.map((n) => Math.trunc(n));
-	if (iterations < 1 || warmup < 0 || serialRuns < 1 || stdoutSizes.length === 0) {
-		throw new Error(
-			"invalid args; expected --iterations>=1 --warmup>=0 --serial-runs>=1 --stdout-sizes=0,1,65536",
-		);
-	}
-	return {
-		iterations,
-		warmup,
-		serialRuns,
-		stdoutSizes,
-		wasmWarmupDebug: hasFlag("wasm-warmup-debug"),
-	};
-}
-
-function nowMs(start: number): number {
-	return performance.now() - start;
-}
-
-function resolveSecureExecRoot(): string | null {
-	const candidates = [
-		process.env.SECURE_EXEC_ROOT,
-		join(process.cwd(), "../secure-exec"),
-		join(process.cwd(), "../../secure-exec/fuzz-perf"),
-	].filter((path): path is string => Boolean(path));
-
-	for (const candidate of candidates) {
-		if (existsSync(join(candidate, "registry/software/coreutils/wasm"))) {
-			return candidate;
-		}
-	}
-	return null;
-}
-
-function commandModuleBytes(command: string, secureExecRoot: string | null): number | null {
-	if (!secureExecRoot) {
-		return null;
-	}
-	const modulePath = join(secureExecRoot, "registry/software/coreutils/wasm", command);
-	return existsSync(modulePath) ? statSync(modulePath).size : null;
-}
-
-function collectWasmWarmupDiagnostics(
-	enabled: boolean,
-	stderr: string,
-	diagnostics: string[],
-): void {
-	if (!enabled) {
-		return;
-	}
-	for (const line of stderr.split(/\r?\n/)) {
-		if (
-			line.startsWith("__AGENTOS_WASM_WARMUP_METRICS__:") ||
-			line.startsWith("__AGENTOS_WASM_PHASE_METRICS__:")
-		) {
-			diagnostics.push(line);
-		}
-	}
-}
-
-async function createVm(sidecar: SidecarProcess): Promise<BenchVm> {
-	return createBenchVm({
-		sidecar,
-	});
-}
-
-function stdoutLabel(bytes: number): string {
-	if (bytes === 0) {
-		return "0b";
-	}
-	if (bytes % (1024 * 1024) === 0) {
-		return `${bytes / (1024 * 1024)}m`;
-	}
-	if (bytes % 1024 === 0) {
-		return `${bytes / 1024}k`;
-	}
-	return `${bytes}b`;
-}
-
-function makeStdoutCases(stdoutSizes: number[]): CommandCase[] {
-	return stdoutSizes.map((stdoutSize) => {
-		const payload = "x".repeat(stdoutSize);
-		return {
-			name: `printf-${stdoutLabel(stdoutSize)}`,
-			command: "printf",
-			args: () => [payload],
-			stdoutSize,
-			expect: (result) => {
-				if (result.exitCode !== 0 || result.stdout.length !== stdoutSize) {
-					throw new Error(
-						`printf-${stdoutLabel(stdoutSize)} mismatch: stdout=${result.stdout.length}`,
-					);
-				}
-			},
-		};
-	});
-}
-
-function commandCases(stdoutSizes: number[]): CommandCase[] {
-	return [
-	{
-		name: "true",
-		command: "true",
-		args: () => [],
-		expect: (result) => {
-			if (result.exitCode !== 0 || result.stdout !== "") {
-				throw new Error(`true mismatch: ${JSON.stringify(result)}`);
-			}
-		},
-	},
-	...makeStdoutCases(stdoutSizes),
-	{
-		name: "pwd",
-		command: "pwd",
-		args: () => [],
-		expect: (result) => {
-			if (result.exitCode !== 0 || result.stdout.trim().length === 0) {
-				throw new Error(`pwd mismatch: ${JSON.stringify(result)}`);
-			}
-		},
-	},
-	{
-		name: "ls-empty",
-		command: "ls",
-		args: ({ emptyDir }) => [emptyDir],
-		expect: (result) => {
-			if (result.exitCode !== 0 || result.stdout !== "") {
-				throw new Error(`ls-empty mismatch: ${JSON.stringify(result)}`);
-			}
-		},
-	},
-	{
-		name: "date-version",
-		command: "date",
-		args: () => ["--version"],
-		expect: (result) => {
-			if (result.exitCode !== 0 || !result.stdout.includes("date")) {
-				throw new Error(`date-version mismatch: ${JSON.stringify(result)}`);
-			}
-		},
-	},
-	];
-}
-
-async function runCase(
-	vm: BenchVm,
-	testCase: CommandCase,
-	iterations: number,
-	warmup: number,
-	serialRuns: number,
-	wasmWarmupDebug: boolean,
-	secureExecRoot: string | null,
-): Promise<CommandCaseResult> {
-	const emptyDir = "/tmp/wasm-command-floor-empty";
-	const resolvedArgs = testCase.args({ emptyDir });
-	const raw: CommandCaseResult["raw"] = [];
-	const firstRunSamples: number[] = [];
-	const warmRunSamples: number[] = [];
-	const allRunSamples: number[] = [];
-	const stdoutBytesSamples: number[] = [];
-	const stderrBytesSamples: number[] = [];
-	const stdoutCallbackChunksSamples: number[] = [];
-	const stderrCallbackChunksSamples: number[] = [];
-	const stdoutCallbackBytesSamples: number[] = [];
-	const stderrCallbackBytesSamples: number[] = [];
-	const execOptions = wasmWarmupDebug
-		? { env: { AGENTOS_WASM_WARMUP_DEBUG: "1" } }
-		: undefined;
-
-	for (let i = 0; i < warmup + iterations; i++) {
-		const samplesMs: number[] = [];
-		const stdoutBytes: number[] = [];
-		const stderrBytes: number[] = [];
-		const stdoutCallbackChunks: number[] = [];
-		const stderrCallbackChunks: number[] = [];
-		const stdoutCallbackBytes: number[] = [];
-		const stderrCallbackBytes: number[] = [];
-		const wasmWarmupDiagnostics: string[] = [];
-		for (let j = 0; j < serialRuns; j++) {
-			let runStdoutCallbackChunks = 0;
-			let runStderrCallbackChunks = 0;
-			let runStdoutCallbackBytes = 0;
-			let runStderrCallbackBytes = 0;
-			const start = performance.now();
-			const result = await vm.execArgv(testCase.command, resolvedArgs, {
-				...(execOptions ?? {}),
-				onStdout: (chunk) => {
-					runStdoutCallbackChunks += 1;
-					runStdoutCallbackBytes += chunk.byteLength;
-				},
-				onStderr: (chunk) => {
-					runStderrCallbackChunks += 1;
-					runStderrCallbackBytes += chunk.byteLength;
-				},
-			});
-			const elapsed = nowMs(start);
-			testCase.expect?.(result);
-			collectWasmWarmupDiagnostics(
-				wasmWarmupDebug,
-				result.stderr,
-				wasmWarmupDiagnostics,
-			);
-			samplesMs.push(elapsed);
-			stdoutBytes.push(Buffer.byteLength(result.stdout));
-			stderrBytes.push(Buffer.byteLength(result.stderr));
-			stdoutCallbackChunks.push(runStdoutCallbackChunks);
-			stderrCallbackChunks.push(runStderrCallbackChunks);
-			stdoutCallbackBytes.push(runStdoutCallbackBytes);
-			stderrCallbackBytes.push(runStderrCallbackBytes);
-		}
-		console.error(
-			`  ${testCase.name} iter=${i}: first=${round(samplesMs[0] ?? 0)}ms warm.p50=${round(stats(samplesMs.slice(1)).p50)}ms all.p50=${round(stats(samplesMs).p50)}ms${i < warmup ? " (warmup)" : ""}`,
-		);
-		if (i >= warmup) {
-			raw.push({
-				samplesMs,
-				stdoutBytes,
-				stderrBytes,
-				stdoutCallbackChunks,
-				stderrCallbackChunks,
-				stdoutCallbackBytes,
-				stderrCallbackBytes,
-				...(wasmWarmupDebug ? { wasmWarmupDiagnostics } : {}),
-			});
-			firstRunSamples.push(samplesMs[0]);
-			warmRunSamples.push(...samplesMs.slice(1));
-			allRunSamples.push(...samplesMs);
-			stdoutBytesSamples.push(...stdoutBytes);
-			stderrBytesSamples.push(...stderrBytes);
-			stdoutCallbackChunksSamples.push(...stdoutCallbackChunks);
-			stderrCallbackChunksSamples.push(...stderrCallbackChunks);
-			stdoutCallbackBytesSamples.push(...stdoutCallbackBytes);
-			stderrCallbackBytesSamples.push(...stderrCallbackBytes);
-		}
-	}
-
-	return {
-		name: testCase.name,
-		command: testCase.command,
-		args: resolvedArgs,
-		moduleBytes: commandModuleBytes(testCase.command, secureExecRoot),
-		iterations,
-		serialRuns,
-		firstRun: stats(firstRunSamples),
-		warmRuns: stats(warmRunSamples),
-		allRuns: stats(allRunSamples),
-		stdoutBytes: stats(stdoutBytesSamples),
-		stderrBytes: stats(stderrBytesSamples),
-		stdoutCallbackChunks: stats(stdoutCallbackChunksSamples),
-		stderrCallbackChunks: stats(stderrCallbackChunksSamples),
-		stdoutCallbackBytes: stats(stdoutCallbackBytesSamples),
-		stderrCallbackBytes: stats(stderrCallbackBytesSamples),
-		raw,
-	};
-}
-
-async function main(): Promise<void> {
-	const { iterations, warmup, serialRuns, stdoutSizes, wasmWarmupDebug } = parseArgs();
-	const hardware = getHardware();
-	const secureExecRoot = resolveSecureExecRoot();
-	console.error("=== WASM Command Floor Benchmark ===");
-	console.error(`CPU: ${hardware.cpu}`);
-	console.error(`RAM: ${hardware.ram} | Node: ${hardware.node}`);
-	console.error(
-		`Iterations: ${iterations} (+ ${warmup} warmup), serial runs per command: ${serialRuns}`,
-	);
-	console.error(`stdout sizes: ${stdoutSizes.join(",")} bytes`);
-	if (wasmWarmupDebug) {
-		console.error("WASM warmup debug: enabled");
-	}
-
-	const sidecar = await createBenchSidecar();
-	try {
-		const vm = await createVm(sidecar);
-		try {
-			await vm.exec("rm -rf /tmp/wasm-command-floor-empty && mkdir -p /tmp/wasm-command-floor-empty");
-			const cases: CommandCaseResult[] = [];
-			for (const testCase of commandCases(stdoutSizes)) {
-				cases.push(
-					await runCase(
-						vm,
-						testCase,
-						iterations,
-						warmup,
-						serialRuns,
-						wasmWarmupDebug,
-						secureExecRoot,
-					),
-				);
-			}
-			printTable(
-				[
-					"case",
-					"module bytes",
-					"first p50",
-					"warm p50",
-					"all p50",
-					"stdout p50",
-					"stdout chunks",
-					"stderr p50",
-				],
-				cases.map((result) => [
-					result.name,
-					result.moduleBytes ?? "n/a",
-					`${result.firstRun.p50}ms`,
-					`${result.warmRuns.p50}ms`,
-					`${result.allRuns.p50}ms`,
-					`${result.stdoutBytes.p50}B`,
-					result.stdoutCallbackChunks.p50,
-					`${result.stderrBytes.p50}B`,
-				]),
-			);
-			console.log(
-				JSON.stringify(
-					{
-						benchmark: "wasm-command-floor",
-						hardware,
-						iterations,
-						warmup,
-						serialRuns,
-						stdoutSizes,
-						wasmWarmupDebug,
-						secureExecRoot,
-						cases,
-					},
-					null,
-					2,
-				),
-			);
-		} finally {
-			await vm.dispose();
-		}
-	} finally {
-		await sidecar.dispose();
-	}
-}
-
-main().catch((error) => {
-	console.error(error);
-	process.exit(1);
-});
diff --git a/packages/benchmarks/src/footprint.ts b/packages/benchmarks/src/footprint.ts
deleted file mode 100644
index c3f49c58e..000000000
--- a/packages/benchmarks/src/footprint.ts
+++ /dev/null
@@ -1,76 +0,0 @@
-import type { Finding } from "./lib/report.js";
-import { writeJson } from "./lib/report.js";
-import { findSidecarPids, readRssBytes } from "./lib/memory.js";
-import { createBenchSidecar, createBenchVm, type BenchVm } from "./lib/vm.js";
-
-const RESULTS_DIR = new URL("../results/", import.meta.url).pathname;
-
-export async function runFootprint() {
-	const beforePids = findSidecarPids();
-	const beforeSet = new Set(beforePids);
-	const sidecar = createBenchSidecar();
-	let vm: BenchVm | null = null;
-	try {
-		vm = await createBenchVm({ sidecar });
-		await new Promise((resolve) => setTimeout(resolve, 250));
-		const afterPids = findSidecarPids();
-		const newPids = afterPids.filter((pid) => !beforeSet.has(pid));
-		const internalPid = vm.sidecarPid();
-		const measuredPid =
-			internalPid && afterPids.includes(internalPid)
-				? internalPid
-				: newPids.length === 1
-					? newPids[0]
-					: null;
-		const after = readRssBytes(measuredPid);
-		const resource = await vm.getResourceSnapshot();
-		const total = measuredPid === null ? 0 : after;
-		const components = sortComponents([
-			{ name: "empty_v8_isolate_baseline", bytes: Math.round(total * 0.5) },
-			{ name: "wasm_modules_loaded", bytes: 0 },
-			{ name: "sidecar_kernel_structs", bytes: Math.round(total * 0.3) },
-			{ name: "mounts_vfs", bytes: total - Math.round(total * 0.5) - Math.round(total * 0.3) },
-		]);
-		const findings: Finding[] = [
-			{
-				family: "footprint",
-				op: "idle_vm_rss_floor",
-				emulation_ratio: total,
-				total_ratio: total,
-				confirmed: true,
-				suspected_cause: "idle VM floor dominated by V8 isolate baseline and sidecar structs",
-				file_line: "crates/v8-runtime/src/session.rs:294",
-				reproducer: "createBenchVm(); sample /proc/<secure-exec-sidecar>/status VmRSS",
-				evidence: `rss_floor_bytes=${total} measured_pid=${measuredPid} internal_pid=${internalPid} before_pids=${JSON.stringify(beforePids)} after_pids=${JSON.stringify(afterPids)} new_pids=${JSON.stringify(newPids)} resource=${JSON.stringify(resource)}`,
-			},
-		];
-		const out = {
-			idleRssFloorBytes: total,
-			measuredPid,
-			internalPid,
-			beforePids,
-			afterPids,
-			newPids,
-			components,
-			topReducibleContributors: components.slice(0, 3),
-			resource,
-			findings,
-		};
-		writeJson(`${RESULTS_DIR}/footprint.json`, out);
-		return out;
-	} finally {
-		await vm?.dispose();
-		await sidecar.dispose();
-	}
-}
-
-function sortComponents<T extends { bytes: number }>(components: T[]): T[] {
-	return [...components].sort((a, b) => b.bytes - a.bytes);
-}
-
-if (import.meta.url === `file://${process.argv[1]}`) {
-	runFootprint().then((out) => {
-		console.log(JSON.stringify(out, null, 2));
-		process.exit(0);
-	});
-}
diff --git a/packages/benchmarks/src/fuzz/generator.ts b/packages/benchmarks/src/fuzz/generator.ts
deleted file mode 100644
index f9f7e64b3..000000000
--- a/packages/benchmarks/src/fuzz/generator.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-export interface FuzzProgram {
-	id: string;
-	family: "process" | "fs" | "net" | "dns" | "pipes";
-	count: number;
-	payloadBytes: number;
-	concurrency: number;
-	chunkBytes: number;
-	interleaving: "serial" | "fanout";
-}
-
-export function generateSeedCorpus(): FuzzProgram[] {
-	return [
-		{
-			id: "known-spawn-tax",
-			family: "process",
-			count: 6,
-			payloadBytes: 0,
-			concurrency: 1,
-			chunkBytes: 0,
-			interleaving: "serial",
-		},
-		{
-			id: "fanout-spawn-storm",
-			family: "process",
-			count: 12,
-			payloadBytes: 0,
-			concurrency: 3,
-			chunkBytes: 0,
-			interleaving: "fanout",
-		},
-		{
-			id: "fanout-stdout-storm",
-			family: "process",
-			count: 6,
-			payloadBytes: 1024,
-			concurrency: 3,
-			chunkBytes: 1024,
-			interleaving: "fanout",
-		},
-		{
-			id: "small-fs-write-churn",
-			family: "fs",
-			count: 16,
-			payloadBytes: 64,
-			concurrency: 1,
-			chunkBytes: 64,
-			interleaving: "serial",
-		},
-	];
-}
diff --git a/packages/benchmarks/src/fuzz/run.ts b/packages/benchmarks/src/fuzz/run.ts
deleted file mode 100644
index ce20a7409..000000000
--- a/packages/benchmarks/src/fuzz/run.ts
+++ /dev/null
@@ -1,134 +0,0 @@
-import { generateSeedCorpus, type FuzzProgram } from "./generator.js";
-import { shrinkProgram } from "./shrink.js";
-import { round, stats } from "../lib/perf-utils.js";
-import type { Finding, RefutedCandidate } from "../lib/report.js";
-import { writeJson } from "../lib/report.js";
-import { runGuestSpawn, runNodeSpawn } from "../lib/layers.js";
-import { createBenchVm, type BenchVm } from "../lib/vm.js";
-
-const RESULTS_DIR = new URL("../../results/", import.meta.url).pathname;
-
-export async function runFuzz(options: { iterations: number; warmup: number }) {
-	const findings: Finding[] = [];
-	const refuted: RefutedCandidate[] = [];
-	const programs = generateSeedCorpus();
-	const vm = await createBenchVm();
-	try {
-		for (const program of programs) {
-			const result = await runProgram(program, vm, options.iterations, options.warmup);
-			if (result.emulation_ratio > 2) {
-				const minimal = shrinkProgram(program);
-				findings.push({
-					family: `fuzz/${program.family}`,
-					op: program.id,
-					emulation_ratio: result.emulation_ratio,
-					total_ratio: result.emulation_ratio,
-					confirmed: true,
-					suspected_cause:
-						program.family === "process"
-							? "spawn fanout and stdout capture amplify isolate/thread creation, process-table polling, and bridge I/O"
-							: "combinatorial fuzz slow path requires follow-up source trace",
-					file_line:
-						program.family === "process"
-							? (program.payloadBytes > 0 ? "crates/v8-runtime/src/host_call.rs:276" : "crates/sidecar/src/execution.rs:5349")
-							: "crates/kernel/src/kernel.rs:1950",
-					reproducer: JSON.stringify(minimal),
-					evidence: `node.p50=${result.node.p50} guest.p50=${result.guest.p50}`,
-				});
-			} else {
-				refuted.push({
-					family: `fuzz/${program.family}`,
-					op: program.id,
-					reason: "fuzz candidate stayed below the confirmed-offender threshold",
-					evidence: `node.p50=${result.node.p50} guest.p50=${result.guest.p50} guest/node=${result.emulation_ratio}`,
-				});
-			}
-		}
-	} finally {
-		await vm.dispose();
-	}
-	const out = { programs, findings, refuted };
-	writeJson(`${RESULTS_DIR}/fuzz-findings.json`, out);
-	return out;
-}
-
-async function runProgram(
-	program: FuzzProgram,
-	vm: BenchVm,
-	iters: number,
-	warmup: number,
-) {
-	if (program.family === "process") {
-		const node = stats(await runProcessProgramNode(program, iters, warmup));
-		const guest = stats(await runProcessProgramGuest(program, vm, iters, warmup));
-		return { node, guest, emulation_ratio: round(guest.p50 / node.p50) };
-	}
-	const node = stats([1]);
-	const guest = stats([1]);
-	return { node, guest, emulation_ratio: 1 };
-}
-
-async function runProcessProgramNode(
-	program: FuzzProgram,
-	iters: number,
-	warmup: number,
-): Promise<number[]> {
-	const samples = [];
-	const args = argsForProcessProgram(program);
-	for (let i = 0; i < warmup + iters; i++) {
-		const start = process.hrtime.bigint();
-		for (let j = 0; j < program.count; j++) {
-			runNodeSpawn(args, 1, 0);
-		}
-		const ms = Number(process.hrtime.bigint() - start) / 1e6;
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-async function runProcessProgramGuest(
-	program: FuzzProgram,
-	vm: BenchVm,
-	iters: number,
-	warmup: number,
-): Promise<number[]> {
-	const samples = [];
-	const args = argsForProcessProgram(program);
-	for (let i = 0; i < warmup + iters; i++) {
-		const start = process.hrtime.bigint();
-		if (program.interleaving === "fanout") {
-			for (let offset = 0; offset < program.count; offset += program.concurrency) {
-				const batch = Array.from(
-					{ length: Math.min(program.concurrency, program.count - offset) },
-					() => vm.spawn("node", args),
-				);
-				await Promise.all(batch.map((proc) => vm.waitProcess(proc.pid)));
-			}
-		} else {
-			await runGuestSpawn(vm, args, program.count, 0);
-		}
-		const ms = Number(process.hrtime.bigint() - start) / 1e6;
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-function argsForProcessProgram(program: FuzzProgram): string[] {
-	if (program.payloadBytes > 0) {
-		return [
-			"-e",
-			`process.stdout.write("x".repeat(${program.payloadBytes})); process.exit(0)`,
-		];
-	}
-	return ["-e", "process.exit(0)"];
-}
-
-if (import.meta.url === `file://${process.argv[1]}`) {
-	runFuzz({
-		iterations: Number(process.env.BENCH_ITERATIONS ?? 5),
-		warmup: Number(process.env.BENCH_WARMUP ?? 2),
-	}).then((out) => {
-		console.log(JSON.stringify(out, null, 2));
-		process.exit(0);
-	});
-}
diff --git a/packages/benchmarks/src/fuzz/shrink.ts b/packages/benchmarks/src/fuzz/shrink.ts
deleted file mode 100644
index 1d3e7f684..000000000
--- a/packages/benchmarks/src/fuzz/shrink.ts
+++ /dev/null
@@ -1,11 +0,0 @@
-import type { FuzzProgram } from "./generator.js";
-
-export function shrinkProgram(program: FuzzProgram): FuzzProgram {
-	return {
-		...program,
-		count: Math.max(1, Math.ceil(program.count / 2)),
-		concurrency: Math.max(1, Math.ceil(program.concurrency / 2)),
-		payloadBytes: program.payloadBytes > 0 ? Math.max(1, program.payloadBytes) : 0,
-		chunkBytes: program.chunkBytes > 0 ? Math.max(1, program.chunkBytes) : 0,
-	};
-}
diff --git a/packages/benchmarks/src/leak.ts b/packages/benchmarks/src/leak.ts
deleted file mode 100644
index e3d36bb6d..000000000
--- a/packages/benchmarks/src/leak.ts
+++ /dev/null
@@ -1,129 +0,0 @@
-import { sampleMemory, slope } from "./lib/memory.js";
-import type { Finding } from "./lib/report.js";
-import { writeJson } from "./lib/report.js";
-import { createBenchVm, type BenchVm } from "./lib/vm.js";
-
-const RESULTS_DIR = new URL("../results/", import.meta.url).pathname;
-
-export async function runLeakSuite() {
-	const streams = ["process", "socket", "fd"] as const;
-	const all = [];
-	const findings: Finding[] = [];
-	for (const stream of streams) {
-		const result = await runLeakStream(stream);
-		all.push(result);
-		for (const [signal, value] of Object.entries(result.slopes)) {
-			if (value > 0) {
-				findings.push({
-					family: "leak",
-					op: `${stream}/${signal}`,
-					emulation_ratio: value,
-					total_ratio: value,
-					confirmed: true,
-					suspected_cause: attribution(signal),
-					file_line: fileLine(signal),
-					reproducer: `BENCH_LEAK_CYCLES=${result.cycles} tsx packages/benchmarks/src/leak.ts`,
-					evidence: `${signal} slope=${value}`,
-				});
-			}
-		}
-	}
-	const out = { streams: all, findings };
-	writeJson(`${RESULTS_DIR}/leak-process.json`, out);
-	return out;
-}
-
-async function runLeakStream(stream: "process" | "socket" | "fd") {
-	const cycles = Number(process.env.BENCH_LEAK_CYCLES ?? 4);
-	const idleMs = Number(process.env.BENCH_LEAK_IDLE_MS ?? 61_000);
-	const vm = await createBenchVm();
-	try {
-		const samples = [];
-		for (let cycle = 0; cycle < cycles; cycle++) {
-			if (stream === "process") {
-				const proc = vm.spawn("node", ["-e", "process.exit(0)"]);
-				await vm.waitProcess(proc.pid);
-			} else if (stream === "fd") {
-				await runGuestOne(
-					vm,
-					`const fs = await import("node:fs");
-const path = "/tmp/leak-fd-${cycle}.txt";
-const fd = fs.openSync(path, "w");
-fs.writeSync(fd, "hi");
-fs.closeSync(fd);`,
-					`fd-${cycle}`,
-				);
-			} else {
-				await runGuestOne(
-					vm,
-					`const net = await import("node:net");
-await new Promise((resolve, reject) => {
-  const server = net.createServer((socket) => socket.end("ok"));
-  server.on("error", reject);
-  server.listen(0, "127.0.0.1", () => {
-    const port = server.address().port;
-    const socket = net.connect(port, "127.0.0.1");
-    socket.on("error", reject);
-    socket.on("data", () => {});
-    socket.on("close", () => server.close(resolve));
-  });
-});`,
-					`socket-${cycle}`,
-				);
-			}
-			samples.push(await sampleMemory(vm, cycle));
-			await new Promise((resolve) => setTimeout(resolve, 250));
-		}
-		if (idleMs > 0) {
-			await new Promise((resolve) => setTimeout(resolve, idleMs));
-			samples.push(await sampleMemory(vm, cycles));
-		}
-		const slopes = {
-			guestHeapRss: slope(samples, "guestHeapRss"),
-			sidecarRss: slope(samples, "sidecarRss"),
-			runningProcesses: slope(samples, "runningProcesses"),
-			exitedProcesses: slope(samples, "exitedProcesses"),
-			openFds: slope(samples, "openFds"),
-			sockets: slope(samples, "sockets"),
-			pipes: slope(samples, "pipes"),
-		};
-		return { stream, cycles, idleMs, samples, slopes };
-	} finally {
-		await vm.dispose();
-	}
-}
-
-async function runGuestOne(vm: BenchVm, source: string, name: string): Promise<void> {
-	const path = `/tmp/fuzz-perf-leak-${name.replace(/[^a-z0-9_-]/gi, "_")}.mjs`;
-	await vm.writeFile(path, source);
-	let stderr = "";
-	const proc = vm.spawn("node", [path], {
-		onStderr: (data) => {
-			stderr += Buffer.from(data).toString("utf8");
-		},
-	});
-	const code = await vm.waitProcess(proc.pid);
-	if (code !== 0) {
-		throw new Error(`leak stream ${name} exited ${code}\n${stderr}`);
-	}
-}
-
-function attribution(signal: string): string {
-	if (signal.includes("Process")) return "ProcessTable/zombie retention or reap delay";
-	if (signal === "sidecarRss") return "native Rust-side resource retention";
-	if (signal === "guestHeapRss") return "guest isolate/bridge heap retention";
-	return "kernel resource table retention";
-}
-
-function fileLine(signal: string): string {
-	if (signal.includes("Process")) return "crates/kernel/src/process_table.rs:842";
-	if (signal === "sidecarRss") return "crates/kernel/src/resource_accounting.rs:36";
-	return "crates/kernel/src/kernel.rs:581";
-}
-
-if (import.meta.url === `file://${process.argv[1]}`) {
-	runLeakSuite().then((out) => {
-		console.log(JSON.stringify(out, null, 2));
-		process.exit(0);
-	});
-}
diff --git a/packages/benchmarks/src/lib/layers.ts b/packages/benchmarks/src/lib/layers.ts
deleted file mode 100644
index a4bbaf288..000000000
--- a/packages/benchmarks/src/lib/layers.ts
+++ /dev/null
@@ -1,609 +0,0 @@
-import { execFileSync, spawnSync } from "node:child_process";
-import {
-	copyFileSync,
-	existsSync,
-	mkdtempSync,
-	mkdirSync,
-	rmSync,
-	writeFileSync,
-} from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { fileURLToPath } from "node:url";
-import type { NativeOp } from "./native.js";
-import { runNativeLayerMeasured } from "./native.js";
-import {
-	NODE_MEMORY_PROVENANCE,
-	SidecarPeakMemorySampler,
-	hostPeakMemorySupportReason,
-	pageSizeBytes,
-	runCommandWithMaxRss,
-	type LaneMemory,
-} from "./memory.js";
-import { nowMs, round, stats, type Stats } from "./perf-utils.js";
-import type { BenchVm, BenchVmOptions } from "./vm.js";
-
-const DEFAULT_NATIVE_BASELINE_WASM =
-	join(
-		fileURLToPath(new URL("../../../..", import.meta.url)),
-		"target/wasm32-wasip1/release/native-baseline.wasm",
-	);
-const WASM_COMMAND_NAME = "native-baseline";
-const WASM_BASE_DIR = "/mnt/native-baseline-wasm";
-const WASM_SUPPORTED_OPS = new Set<NativeOp>([
-	"fs_stat",
-	"fs_stat_x32",
-	"fs_write",
-	"fs_read",
-	"stream_copy",
-	"fs_open_close",
-	"fs_mkdir_rmdir",
-	"fs_rename",
-	"fs_readdir",
-	"fs_fsync",
-	"cpu_loop",
-	"sleep_timer",
-	"yield_loop",
-	"alloc_free",
-]);
-let wasmCommandDir: string | undefined;
-let wasmWritableDir: string | undefined;
-
-export interface LayerSamples {
-	native: number[];
-	node: number[];
-	guest: number[];
-	wasm?: number[];
-}
-
-export interface LayerSampleSet {
-	samples: number[];
-	memory?: LaneMemory;
-}
-
-export type LayerStatsEntry = Stats & Partial<LaneMemory>;
-
-export interface LayerStats {
-	native?: LayerStatsEntry;
-	node: LayerStatsEntry;
-	guest: LayerStatsEntry;
-	wasm?: LayerStatsEntry;
-}
-
-export interface BenchmarkOp {
-	family: string;
-	name: string;
-	nativeOp?: NativeOp;
-	nativeArgs?: string[];
-	nativeUnsupportedReason?: string;
-	wasmUnsupportedReason?: string;
-	fileLine: string;
-	reproducer: string;
-	expectedRatio?: "control";
-	setup?: string;
-	runNode?: (iters: number, warmup: number) => Promise<number[]> | number[];
-	runGuest?: (
-		vm: BenchVm,
-		iters: number,
-		warmup: number,
-		context?: unknown,
-	) => Promise<number[]>;
-	maxIterations?: number;
-	maxWarmup?: number;
-	prepareVm?: () => Promise<{
-		options?: BenchVmOptions;
-		context?: unknown;
-		cleanup?: () => Promise<void> | void;
-	}>;
-	program?: string;
-}
-
-export interface CommandBenchmarkOp {
-	family: string;
-	name: string;
-	fileLine: string;
-	reproducer: string;
-	skipReason?: string;
-	maxIterations?: number;
-	maxWarmup?: number;
-	runHostCmd: (iters: number, warmup: number) => Promise<number[]> | number[];
-	runVmCmd: (
-		vm: BenchVm,
-		iters: number,
-		warmup: number,
-	) => Promise<number[]> | number[];
-}
-
-export interface OpResult {
-	family: string;
-	op: string;
-	fileLine: string;
-	reproducer: string;
-	expectedRatio?: "control";
-	layers: LayerStats;
-	unsupported?: {
-		native?: string;
-		wasm?: string;
-	};
-	tax: {
-		emulation: number;
-		total?: number;
-		wasm?: number;
-		mem?: number;
-	};
-}
-
-export interface CommandOpResult {
-	family: string;
-	op: string;
-	fileLine: string;
-	reproducer: string;
-	skipped?: true;
-	skipReason?: string;
-	layers: {
-		hostCmd?: LayerStatsEntry;
-		vmCmd?: LayerStatsEntry;
-	};
-	tax: {
-		command?: number;
-		mem?: number;
-	};
-}
-
-export type LatencyResult = OpResult | CommandOpResult;
-
-export function isCommandOpResult(result: LatencyResult): result is CommandOpResult {
-	return "hostCmd" in result.layers || "skipped" in result;
-}
-
-export function isLayerOpResult(result: LatencyResult): result is OpResult {
-	return !isCommandOpResult(result);
-}
-
-export function supportsWasmLayer(op: NativeOp): boolean {
-	return WASM_SUPPORTED_OPS.has(op);
-}
-
-export function hasNativeBaselineWasm(): boolean {
-	return Boolean(resolveNativeBaselineWasm());
-}
-
-export function opSupportsWasmLayer(op: BenchmarkOp): boolean {
-	return Boolean(
-		op.nativeOp &&
-			!op.wasmUnsupportedReason &&
-			supportsWasmLayer(op.nativeOp) &&
-			hasNativeBaselineWasm(),
-	);
-}
-
-export function wasmLayerOptions(): BenchVmOptions | undefined {
-	const wasm = resolveNativeBaselineWasm();
-	if (!wasm) return undefined;
-	return {
-		wasmCommandDirs: [ensureWasmCommandDir(wasm)],
-		mounts: [
-			{
-				guestPath: WASM_BASE_DIR,
-				hostPath: ensureWasmWritableDir(),
-				readOnly: false,
-			},
-		],
-	};
-}
-
-export function timedProgram(operationSource: string, setupSource?: string): string {
-	return `
-const iters = Number(process.env.BENCH_ITERATIONS || 20);
-const warmup = Number(process.env.BENCH_WARMUP || 5);
-const samples = [];
-const now = () => Number(process.hrtime.bigint()) / 1e6;
-const setup = ${setupSource ?? "null"};
-const op = ${operationSource};
-(async () => {
-  if (typeof setup === "function") await setup();
-  for (let i = 0; i < warmup + iters; i++) {
-    const start = now();
-    await op(i);
-    const ms = now() - start;
-    if (i >= warmup) samples.push(ms);
-  }
-  process.stdout.write(JSON.stringify({ samples }));
-})().catch((error) => {
-  console.error(error && error.stack ? error.stack : error);
-  process.exit(1);
-});
-`;
-}
-
-export function runNodeProgram(
-	source: string,
-	iters: number,
-	warmup: number,
-): number[] {
-	const dir = mkdtempSync(join(tmpdir(), "secure-exec-fuzz-perf-node-"));
-	const file = join(dir, "bench.mjs");
-	try {
-		writeFileSync(file, source);
-		const stdout = execFileSync("node", [file], {
-			encoding: "utf8",
-			env: {
-				...process.env,
-				BENCH_ITERATIONS: String(iters),
-				BENCH_WARMUP: String(warmup),
-			},
-			maxBuffer: 128 * 1024 * 1024,
-		});
-		return JSON.parse(stdout).samples;
-	} finally {
-		rmSync(dir, { recursive: true, force: true });
-	}
-}
-
-export async function runNodeProgramMeasured(
-	source: string,
-	iters: number,
-	warmup: number,
-): Promise<LayerSampleSet> {
-	const dir = mkdtempSync(join(tmpdir(), "secure-exec-fuzz-perf-node-"));
-	const file = join(dir, "bench.mjs");
-	try {
-		writeFileSync(file, source);
-		const env = {
-			...process.env,
-			BENCH_ITERATIONS: String(iters),
-			BENCH_WARMUP: String(warmup),
-		};
-		const timed =
-			hostPeakMemorySupportReason() === undefined
-				? await runCommandWithMaxRss("node", [file], {
-						env,
-						maxBuffer: 128 * 1024 * 1024,
-					})
-				: undefined;
-		const stdout =
-			timed?.stdout ??
-			execFileSync("node", [file], {
-				encoding: "utf8",
-				env,
-				maxBuffer: 128 * 1024 * 1024,
-			});
-		return {
-			samples: JSON.parse(stdout).samples,
-			...(timed
-				? {
-						memory: {
-							memBytes: await subtractNodeStartupBaseline(timed.maxRssBytes),
-							memProvenance: NODE_MEMORY_PROVENANCE,
-						},
-					}
-				: {}),
-		};
-	} finally {
-		rmSync(dir, { recursive: true, force: true });
-	}
-}
-
-export async function runGuestProgram(
-	vm: BenchVm,
-	source: string,
-	iters: number,
-	warmup: number,
-	name: string,
-): Promise<number[]> {
-	const path = `/tmp/fuzz-perf-${name.replace(/[^a-z0-9_-]/gi, "_")}.mjs`;
-	await vm.writeFile(path, source);
-	const result = await vm.spawnNodeCapture(path, {
-		BENCH_ITERATIONS: String(iters),
-		BENCH_WARMUP: String(warmup),
-	});
-	if (result.exitCode !== 0) {
-		throw new Error(`guest program ${name} exited ${result.exitCode}\n${result.stderr}`);
-	}
-	return JSON.parse(result.stdout).samples;
-}
-
-export function runNodeSpawn(
-	args: string[],
-	iters: number,
-	warmup: number,
-): number[] {
-	const samples: number[] = [];
-	for (let i = 0; i < warmup + iters; i++) {
-		const start = process.hrtime.bigint();
-		const result = spawnSync("node", args, { stdio: "ignore" });
-		const ms = nowMs(start);
-		if (result.status !== 0) {
-			throw new Error(`node spawn exited ${result.status}`);
-		}
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-export async function runGuestSpawn(
-	vm: BenchVm,
-	args: string[],
-	iters: number,
-	warmup: number,
-): Promise<number[]> {
-	const samples: number[] = [];
-	for (let i = 0; i < warmup + iters; i++) {
-		const start = process.hrtime.bigint();
-		const proc = vm.spawn("node", args);
-		const code = await vm.waitProcess(proc.pid);
-		const ms = nowMs(start);
-		if (code !== 0) throw new Error(`guest spawn exited ${code}`);
-		if (i >= warmup) samples.push(ms);
-	}
-	return samples;
-}
-
-function resolveNativeBaselineWasm(): string | undefined {
-	const wasm = process.env.NATIVE_BASELINE_WASM ?? DEFAULT_NATIVE_BASELINE_WASM;
-	if (!wasm || !existsSync(wasm)) return undefined;
-	return wasm;
-}
-
-function ensureWasmCommandDir(wasmPath: string): string {
-	if (wasmCommandDir) return wasmCommandDir;
-	const dir = mkdtempSync(join(tmpdir(), "secure-exec-native-baseline-wasm-cmd-"));
-	mkdirSync(dir, { recursive: true });
-	copyFileSync(wasmPath, join(dir, WASM_COMMAND_NAME));
-	wasmCommandDir = dir;
-	return wasmCommandDir;
-}
-
-function ensureWasmWritableDir(): string {
-	if (wasmWritableDir) return wasmWritableDir;
-	wasmWritableDir = mkdtempSync(join(tmpdir(), "secure-exec-native-baseline-wasm-data-"));
-	return wasmWritableDir;
-}
-
-export async function runWasmLayer(
-	vm: BenchVm,
-	nativeOp: NativeOp,
-	iters: number,
-	warmup: number,
-	extraArgs: string[] = [],
-): Promise<number[] | undefined> {
-	if (!supportsWasmLayer(nativeOp)) return undefined;
-	if (!resolveNativeBaselineWasm()) return undefined;
-	const hostBaseDir = join(ensureWasmWritableDir(), nativeOp);
-	rmSync(hostBaseDir, { recursive: true, force: true });
-	mkdirSync(hostBaseDir, { recursive: true });
-	const guestBaseDir = `${WASM_BASE_DIR}/${nativeOp}`;
-	const result = await vm.execWasmCommand(WASM_COMMAND_NAME, [
-		"--op",
-		nativeOp,
-		"--iters",
-		String(iters),
-		"--warmup",
-		String(warmup),
-		"--base-dir",
-		guestBaseDir,
-		...extraArgs,
-	]);
-	if (result.exitCode !== 0) {
-		throw new Error(`wasm native-baseline ${nativeOp} exited ${result.exitCode}\n${result.stderr}`);
-	}
-	const parsed = JSON.parse(result.stdout) as {
-		unit?: string;
-		samples?: number[];
-		unsupported?: boolean;
-		op?: string;
-	};
-	if (parsed.unsupported) {
-		throw new Error(`wasm native-baseline unexpectedly returned unsupported for ${nativeOp}`);
-	}
-	if (parsed.unit !== "ns" || !Array.isArray(parsed.samples)) {
-		throw new Error(`wasm native-baseline emitted unexpected output: ${result.stdout}`);
-	}
-	return parsed.samples.map((ns) => ns / 1e6);
-}
-
-export interface OpHostSamples {
-	native?: LayerSampleSet;
-	node: LayerSampleSet;
-}
-
-export interface OpVmSamples {
-	guest: LayerSampleSet;
-	wasm?: LayerSampleSet;
-}
-
-export async function runOpHostLayers(
-	op: BenchmarkOp,
-	iters: number,
-	warmup: number,
-): Promise<OpHostSamples> {
-	const native = op.nativeOp
-		? await runNativeLayerMeasured(op.nativeOp, iters, warmup, op.nativeArgs)
-		: undefined;
-	const node = op.runNode
-		? { samples: await op.runNode(iters, warmup) }
-		: await runNodeProgramMeasured(
-				timedProgram(op.program ?? "() => {}", op.setup),
-				iters,
-				warmup,
-			);
-	return {
-		...(native ? { native } : {}),
-		node,
-	};
-}
-
-export async function runOpVmLayers(
-	op: BenchmarkOp,
-	vm: BenchVm,
-	iters: number,
-	warmup: number,
-	context?: unknown,
-): Promise<OpVmSamples> {
-	const sampler = SidecarPeakMemorySampler.forVm(vm);
-	const guest = await measureWithSidecarPeak(sampler, () =>
-		op.runGuest
-			? op.runGuest(vm, iters, warmup, context)
-			: runGuestProgram(
-					vm,
-					timedProgram(op.program ?? "() => {}", op.setup),
-					iters,
-					warmup,
-					`${op.family}-${op.name}`,
-				),
-	);
-	const wasm =
-		op.nativeOp && !op.wasmUnsupportedReason
-			? await measureOptionalWithSidecarPeak(sampler, () =>
-					runWasmLayer(vm, op.nativeOp!, iters, warmup, op.nativeArgs),
-				)
-			: undefined;
-	return {
-		guest,
-		...(wasm ? { wasm } : {}),
-	};
-}
-
-export function buildOpResult(
-	op: BenchmarkOp,
-	hostSamples: OpHostSamples,
-	vmSamples: OpVmSamples,
-): OpResult {
-	const layers = {
-		...(hostSamples.native ? { native: statsWithMemory(hostSamples.native) } : {}),
-		node: statsWithMemory(hostSamples.node),
-		guest: statsWithMemory(vmSamples.guest),
-		...(vmSamples.wasm ? { wasm: statsWithMemory(vmSamples.wasm) } : {}),
-	};
-	return {
-		family: op.family,
-		op: op.name,
-		fileLine: op.fileLine,
-		reproducer: op.reproducer,
-		expectedRatio: op.expectedRatio,
-		layers,
-		unsupported: {
-			...(op.nativeUnsupportedReason ? { native: op.nativeUnsupportedReason } : {}),
-			...(op.wasmUnsupportedReason ? { wasm: op.wasmUnsupportedReason } : {}),
-		},
-		tax: {
-			emulation: round(layers.guest.p50 / layers.node.p50),
-			...(layers.native ? { total: round(layers.guest.p50 / layers.native.p50) } : {}),
-			...(layers.wasm && layers.native
-				? { wasm: round(layers.wasm.p50 / layers.native.p50) }
-				: {}),
-			...(layers.guest.memBytes !== undefined && layers.native?.memBytes !== undefined
-				? { mem: round(layers.guest.memBytes / layers.native.memBytes) }
-				: {}),
-		},
-	};
-}
-
-export function skippedCommandOpResult(op: CommandBenchmarkOp): CommandOpResult {
-	return {
-		family: op.family,
-		op: op.name,
-		fileLine: op.fileLine,
-		reproducer: op.reproducer,
-		skipped: true,
-		skipReason: op.skipReason,
-		layers: {},
-		tax: {},
-	};
-}
-
-export async function runCommandHostLayer(
-	op: CommandBenchmarkOp,
-	iters: number,
-	warmup: number,
-): Promise<LayerStatsEntry> {
-	return statsWithMemory({ samples: await op.runHostCmd(iters, warmup) });
-}
-
-export async function runCommandVmLayer(
-	op: CommandBenchmarkOp,
-	vm: BenchVm,
-	iters: number,
-	warmup: number,
-): Promise<LayerStatsEntry> {
-	const sampler = SidecarPeakMemorySampler.forVm(vm);
-	const measured = await measureWithSidecarPeak(sampler, () =>
-		op.runVmCmd(vm, iters, warmup),
-	);
-	return statsWithMemory(measured);
-}
-
-export function buildCommandOpResult(
-	op: CommandBenchmarkOp,
-	hostCmd: LayerStatsEntry,
-	vmCmd: LayerStatsEntry,
-): CommandOpResult {
-	return {
-		family: op.family,
-		op: op.name,
-		fileLine: op.fileLine,
-		reproducer: op.reproducer,
-		layers: { hostCmd, vmCmd },
-		tax: {
-			command: round(vmCmd.p50 / hostCmd.p50),
-			...(vmCmd.memBytes !== undefined && hostCmd.memBytes !== undefined
-				? { mem: round(vmCmd.memBytes / hostCmd.memBytes) }
-				: {}),
-		},
-	};
-}
-
-let nodeStartupMaxRssBytes: number | undefined;
-
-export async function primeNodeMemoryBaseline(): Promise<number | undefined> {
-	if (hostPeakMemorySupportReason()) return undefined;
-	if (nodeStartupMaxRssBytes !== undefined) return nodeStartupMaxRssBytes;
-	nodeStartupMaxRssBytes = (
-		await runCommandWithMaxRss("node", ["-e", ""], {
-			maxBuffer: 128 * 1024 * 1024,
-		})
-	).maxRssBytes;
-	return nodeStartupMaxRssBytes;
-}
-
-async function subtractNodeStartupBaseline(opMaxRssBytes: number): Promise<number> {
-	const baseline = (await primeNodeMemoryBaseline()) ?? 0;
-	return Math.max(opMaxRssBytes - baseline, pageSizeBytes());
-}
-
-async function measureWithSidecarPeak<T extends number[] | undefined>(
-	sampler: SidecarPeakMemorySampler | undefined,
-	fn: () => Promise<T> | T,
-): Promise<LayerSampleSet> {
-	if (!sampler) {
-		return { samples: (await fn()) ?? [] };
-	}
-	const measured = await sampler.measure(fn);
-	return {
-		samples: measured.value ?? [],
-		...(measured.memory ? { memory: measured.memory } : {}),
-	};
-}
-
-async function measureOptionalWithSidecarPeak(
-	sampler: SidecarPeakMemorySampler | undefined,
-	fn: () => Promise<number[] | undefined>,
-): Promise<LayerSampleSet | undefined> {
-	if (!sampler) {
-		const samples = await fn();
-		return samples ? { samples } : undefined;
-	}
-	const measured = await sampler.measure(fn);
-	if (!measured.value) return undefined;
-	return {
-		samples: measured.value,
-		...(measured.memory ? { memory: measured.memory } : {}),
-	};
-}
-
-function statsWithMemory(sampleSet: LayerSampleSet): LayerStatsEntry {
-	return {
-		...stats(sampleSet.samples),
-		...(sampleSet.memory ? sampleSet.memory : {}),
-	};
-}
diff --git a/packages/benchmarks/src/lib/memory.ts b/packages/benchmarks/src/lib/memory.ts
deleted file mode 100644
index 4d293346d..000000000
--- a/packages/benchmarks/src/lib/memory.ts
+++ /dev/null
@@ -1,294 +0,0 @@
-import { execFileSync, spawn } from "node:child_process";
-import { existsSync, readdirSync, readFileSync, writeFileSync } from "node:fs";
-import { forceGC } from "./perf-utils.js";
-import type { BenchVm } from "./vm.js";
-
-export interface MemorySample {
-	cycle: number;
-	guestHeapRss: number;
-	sidecarRss: number;
-	runningProcesses: number;
-	exitedProcesses: number;
-	openFds: number;
-	sockets: number;
-	pipes: number;
-}
-
-export function findSidecarPid(): number | null {
-	return findSidecarPids()[0] ?? null;
-}
-
-export function findSidecarPids(): number[] {
-	const pids: number[] = [];
-	for (const pid of readdirSync("/proc")) {
-		if (!/^\d+$/.test(pid)) continue;
-		try {
-			const comm = readFileSync(`/proc/${pid}/comm`, "utf8").trim();
-			if (comm === "secure-exec-sidecar") {
-				pids.push(Number(pid));
-			}
-		} catch {
-			// Process exited while scanning.
-		}
-	}
-	return pids.sort((a, b) => a - b);
-}
-
-export function readRssBytes(pid: number | null): number {
-	if (pid === null) return 0;
-	try {
-		const status = readFileSync(`/proc/${pid}/status`, "utf8");
-		const match = status.match(/^VmRSS:\s+(\d+)\s+kB/m);
-		return match ? Number(match[1]) * 1024 : 0;
-	} catch {
-		return 0;
-	}
-}
-
-export interface LaneMemory {
-	memBytes: number;
-	memProvenance: string;
-}
-
-export interface MeasuredValue<T> {
-	value: T;
-	memory?: LaneMemory;
-}
-
-export const SIDECAR_MEMORY_PROVENANCE =
-	"/proc/<sidecarPid>/clear_refs=5, baseline VmRSS, post-op VmHWM, max(VmHWM - baseline, 0)";
-
-export const NATIVE_MEMORY_PROVENANCE =
-	"direct child spawn with /proc/<pid>/status VmHWM sampling minus native-baseline cpu_loop --iters 1 startup baseline, floored to one page";
-
-export const NODE_MEMORY_PROVENANCE =
-	'direct child spawn with /proc/<pid>/status VmHWM sampling minus node -e "" startup baseline, floored to one page';
-
-export function procPeakMemorySupportReason(): string | undefined {
-	if (process.platform !== "linux") {
-		return "Linux /proc clear_refs/VmHWM memory measurement is unavailable on this platform";
-	}
-	if (!existsSync("/proc/self/status") || !existsSync("/proc/self/clear_refs")) {
-		return "Linux /proc status/clear_refs memory measurement is unavailable";
-	}
-	return undefined;
-}
-
-export function hostPeakMemorySupportReason(): string | undefined {
-	if (process.platform !== "linux") {
-		return "host child /proc VmHWM memory measurement is only enabled on Linux";
-	}
-	if (!existsSync("/proc/self/status")) {
-		return "Linux /proc status memory measurement is unavailable";
-	}
-	return undefined;
-}
-
-export function formatBytes(bytes: number | undefined): string {
-	if (bytes === undefined) return "-";
-	const units = ["B", "KiB", "MiB", "GiB"];
-	let value = bytes;
-	let unit = 0;
-	while (value >= 1024 && unit < units.length - 1) {
-		value /= 1024;
-		unit++;
-	}
-	const decimals = unit === 0 || value >= 10 ? 0 : 1;
-	return `${value.toFixed(decimals)}${units[unit]}`;
-}
-
-export function pageSizeBytes(): number {
-	try {
-		const stdout = execFileSync("getconf", ["PAGESIZE"], {
-			encoding: "utf8",
-			stdio: ["ignore", "pipe", "ignore"],
-		});
-		const parsed = Number(stdout.trim());
-		if (Number.isFinite(parsed) && parsed > 0) return parsed;
-	} catch {
-		// Fall through to the common Linux page size.
-	}
-	return 4096;
-}
-
-export interface TimedCommandResult {
-	stdout: string;
-	stderr: string;
-	maxRssBytes: number;
-}
-
-export function runCommandWithMaxRss(
-	command: string,
-	args: string[],
-	options: {
-		cwd?: string;
-		env?: NodeJS.ProcessEnv;
-		maxBuffer?: number;
-	} = {},
-): Promise<TimedCommandResult> {
-	const reason = hostPeakMemorySupportReason();
-	if (reason) throw new Error(reason);
-	return new Promise((resolve, reject) => {
-		const child = spawn(command, args, {
-			cwd: options.cwd,
-			env: options.env,
-			stdio: ["ignore", "pipe", "pipe"],
-		});
-		const maxBuffer = options.maxBuffer ?? 128 * 1024 * 1024;
-		const stdout: Buffer[] = [];
-		const stderr: Buffer[] = [];
-		let stdoutBytes = 0;
-		let stderrBytes = 0;
-		let maxRssBytes = 0;
-		let poll: NodeJS.Timeout | undefined;
-
-		const sample = () => {
-			if (child.pid === undefined) return;
-			try {
-				maxRssBytes = Math.max(maxRssBytes, readStatusBytes(child.pid, "VmHWM"));
-			} catch {
-				try {
-					maxRssBytes = Math.max(maxRssBytes, readStatusBytes(child.pid, "VmRSS"));
-				} catch {
-					// The child may have exited between polls.
-				}
-			}
-		};
-		const collect = (chunks: Buffer[], kind: "stdout" | "stderr") => (chunk: Buffer) => {
-			if (kind === "stdout") stdoutBytes += chunk.length;
-			else stderrBytes += chunk.length;
-			if (stdoutBytes + stderrBytes > maxBuffer) {
-				child.kill("SIGKILL");
-				reject(new Error(`${command} output exceeded maxBuffer ${maxBuffer}`));
-				return;
-			}
-			chunks.push(chunk);
-		};
-
-		child.stdout.on("data", collect(stdout, "stdout"));
-		child.stderr.on("data", collect(stderr, "stderr"));
-		child.on("spawn", () => {
-			sample();
-			poll = setInterval(sample, 1);
-		});
-		child.on("error", (error) => {
-			if (poll) clearInterval(poll);
-			reject(error);
-		});
-		child.on("close", (code, signal) => {
-			if (poll) clearInterval(poll);
-			sample();
-			const stdoutText = Buffer.concat(stdout).toString("utf8");
-			const stderrText = Buffer.concat(stderr).toString("utf8");
-			if (code !== 0) {
-				reject(
-					new Error(
-						`${command} ${args.join(" ")} exited ${code ?? signal}\n${stdoutText}\n${stderrText}`,
-					),
-				);
-				return;
-			}
-			resolve({
-				stdout: stdoutText,
-				stderr: stderrText,
-				maxRssBytes,
-			});
-		});
-	});
-}
-
-export class SidecarPeakMemorySampler {
-	private constructor(private readonly pid: number) {}
-
-	static forVm(vm: BenchVm): SidecarPeakMemorySampler | undefined {
-		if (procPeakMemorySupportReason()) return undefined;
-		const pid = vm.sidecarPid();
-		return typeof pid === "number" ? new SidecarPeakMemorySampler(pid) : undefined;
-	}
-
-	async measure<T>(fn: () => Promise<T> | T): Promise<MeasuredValue<T>> {
-		this.resetHighWaterMark();
-		const baselineRss = this.readStatusBytes("VmRSS");
-		const value = await fn();
-		const highWater = this.readStatusBytes("VmHWM");
-		return {
-			value,
-			memory: {
-				memBytes: Math.max(0, highWater - baselineRss),
-				memProvenance: SIDECAR_MEMORY_PROVENANCE,
-			},
-		};
-	}
-
-	async measureIdle(waitMs: number): Promise<LaneMemory> {
-		this.resetHighWaterMark();
-		const baselineRss = this.readStatusBytes("VmRSS");
-		await new Promise((resolve) => setTimeout(resolve, waitMs));
-		const highWater = this.readStatusBytes("VmHWM");
-		return {
-			memBytes: Math.max(0, highWater - baselineRss),
-			memProvenance: SIDECAR_MEMORY_PROVENANCE,
-		};
-	}
-
-	private resetHighWaterMark(): void {
-		writeFileSync(`/proc/${this.pid}/clear_refs`, "5");
-	}
-
-	private readStatusBytes(field: "VmRSS" | "VmHWM"): number {
-		return readStatusBytes(this.pid, field);
-	}
-}
-
-function readStatusBytes(pid: number, field: "VmRSS" | "VmHWM"): number {
-	const status = readFileSync(`/proc/${pid}/status`, "utf8");
-	const match = status.match(new RegExp(`^${field}:\\s+(\\d+)\\s+kB`, "m"));
-	if (!match) throw new Error(`could not read ${field} for pid ${pid}`);
-	return Number(match[1]) * 1024;
-}
-
-export async function sampleMemory(vm: BenchVm, cycle: number): Promise<MemorySample> {
-	forceGC();
-	const resource = await vm.getResourceSnapshot();
-	const guestHeapRss = await sampleGuestHeap(vm);
-	return {
-		cycle,
-		guestHeapRss,
-		sidecarRss: readRssBytes(findSidecarPid()),
-		runningProcesses: resource.runningProcesses,
-		exitedProcesses: resource.exitedProcesses,
-		openFds: resource.openFds,
-		sockets: resource.sockets,
-		pipes: resource.pipes,
-	};
-}
-
-export function slope(samples: Array<{ cycle: number }>, key: string): number {
-	const n = samples.length;
-	const sx = samples.reduce((sum, sample) => sum + sample.cycle, 0);
-	const sy = samples.reduce((sum, sample) => sum + Number((sample as any)[key]), 0);
-	const sxy = samples.reduce(
-		(sum, sample) => sum + sample.cycle * Number((sample as any)[key]),
-		0,
-	);
-	const sx2 = samples.reduce((sum, sample) => sum + sample.cycle ** 2, 0);
-	const denom = n * sx2 - sx ** 2;
-	return denom === 0 ? 0 : (n * sxy - sx * sy) / denom;
-}
-
-async function sampleGuestHeap(vm: BenchVm): Promise<number> {
-	const script = "/tmp/guest-memory-usage.mjs";
-	await vm.writeFile(
-		script,
-		"process.stdout.write(String(process.memoryUsage().rss));",
-	);
-	let stdout = "";
-	const proc = vm.spawn("node", [script], {
-		onStdout: (data) => {
-			stdout += Buffer.from(data).toString("utf8");
-		},
-	});
-	const code = await vm.waitProcess(proc.pid);
-	if (code !== 0) return 0;
-	return Number(stdout.trim() || 0);
-}
diff --git a/packages/benchmarks/src/lib/native.ts b/packages/benchmarks/src/lib/native.ts
deleted file mode 100644
index 84a1123ae..000000000
--- a/packages/benchmarks/src/lib/native.ts
+++ /dev/null
@@ -1,183 +0,0 @@
-import { execFileSync } from "node:child_process";
-import { join } from "node:path";
-import { fileURLToPath } from "node:url";
-import {
-	NATIVE_MEMORY_PROVENANCE,
-	hostPeakMemorySupportReason,
-	pageSizeBytes,
-	runCommandWithMaxRss,
-	type LaneMemory,
-} from "./memory.js";
-
-const DEFAULT_NATIVE_BIN =
-	join(
-		fileURLToPath(new URL("../../../..", import.meta.url)),
-		"target/release/native-baseline",
-	);
-let nativeStartupMaxRssBytes: number | undefined;
-
-export type NativeOp =
-	| "spawn_exit"
-	| "exec_capture"
-	| "node_stdout_discard_2b"
-	| "node_stdout_capture_2b"
-	| "node_stdout_listener_only_2b"
-	| "node_exit"
-	| "node_fanout"
-	| "node_reap_storm"
-	| "node_stdin_roundtrip"
-	| "pipe_chain"
-	| "fs_stat"
-	| "fs_stat_x32"
-	| "fs_write"
-	| "fs_read"
-	| "stream_copy"
-	| "fs_open_close"
-	| "fs_mkdir_rmdir"
-	| "fs_rename"
-	| "fs_readdir"
-	| "fs_fsync"
-	| "dns_lookup"
-	| "dns_lookup_x2"
-	| "dns_concurrent"
-	| "tcp_connect"
-	| "tcp_echo"
-	| "unix_connect"
-	| "unix_echo"
-	| "http_loopback_get"
-	| "tcp_concurrent"
-	| "tcp_throughput"
-	| "tcp_tiny_writes"
-	| "udp_echo"
-	| "pipe_echo"
-	| "pipe_throughput"
-	| "pipe_backpressure"
-	| "stdio_write_sync"
-	| "cpu_loop"
-	| "sleep_timer"
-	| "yield_loop"
-	| "alloc_free";
-
-export function runNativeLayer(
-	op: NativeOp,
-	iters: number,
-	warmup: number,
-	extraArgs: string[] = [],
-): number[] {
-	const bin = resolveNativeBaselineBin();
-	const stdout = execFileSync(
-		bin,
-		["--op", op, "--iters", String(iters), "--warmup", String(warmup), ...extraArgs],
-		{ encoding: "utf8", maxBuffer: 128 * 1024 * 1024 },
-	);
-	return parseNativeSamples(stdout);
-}
-
-export interface NativeLayerMeasurement {
-	samples: number[];
-	memory?: LaneMemory;
-}
-
-export async function runNativeLayerMeasured(
-	op: NativeOp,
-	iters: number,
-	warmup: number,
-	extraArgs: string[] = [],
-): Promise<NativeLayerMeasurement> {
-	const bin = resolveNativeBaselineBin();
-	const args = ["--op", op, "--iters", String(iters), "--warmup", String(warmup), ...extraArgs];
-	const timed =
-		hostPeakMemorySupportReason() === undefined
-			? await runCommandWithMaxRss(bin, args)
-			: undefined;
-	const stdout =
-		timed?.stdout ??
-		execFileSync(bin, args, {
-			encoding: "utf8",
-			maxBuffer: 128 * 1024 * 1024,
-		});
-	const samples = parseNativeSamples(stdout);
-	return {
-		samples,
-		...(timed
-			? {
-					memory: {
-						memBytes: await subtractStartupBaseline(timed.maxRssBytes),
-						memProvenance: NATIVE_MEMORY_PROVENANCE,
-					},
-				}
-			: {}),
-	};
-}
-
-export async function primeNativeMemoryBaseline(): Promise<number | undefined> {
-	if (hostPeakMemorySupportReason()) return undefined;
-	if (nativeStartupMaxRssBytes !== undefined) return nativeStartupMaxRssBytes;
-	nativeStartupMaxRssBytes = (
-		await runCommandWithMaxRss(resolveNativeBaselineBin(), [
-			"--op",
-			"cpu_loop",
-			"--iters",
-			"1",
-			"--warmup",
-			"0",
-		])
-	).maxRssBytes;
-	return nativeStartupMaxRssBytes;
-}
-
-function resolveNativeBaselineBin(): string {
-	return process.env.NATIVE_BASELINE_BIN ?? DEFAULT_NATIVE_BIN;
-}
-
-async function subtractStartupBaseline(opMaxRssBytes: number): Promise<number> {
-	const baseline = (await primeNativeMemoryBaseline()) ?? 0;
-	return Math.max(opMaxRssBytes - baseline, pageSizeBytes());
-}
-
-function parseNativeSamples(stdout: string): number[] {
-	const parsed = JSON.parse(stdout) as {
-		unit: string;
-		samples: number[];
-	};
-	if (parsed.unit !== "ns") {
-		throw new Error(`native-baseline emitted unexpected unit: ${parsed.unit}`);
-	}
-	return parsed.samples.map((ns) => ns / 1e6);
-}
-
-export type NativePhaseSamples = Record<string, number[]>;
-
-export function runNativePhaseLayer(
-	op: Extract<NativeOp, "node_exit" | "node_fanout">,
-	iters: number,
-	warmup: number,
-): NativePhaseSamples {
-	const bin = process.env.NATIVE_BASELINE_BIN ?? DEFAULT_NATIVE_BIN;
-	const stdout = execFileSync(
-		bin,
-		[
-			"--op",
-			op,
-			"--iters",
-			String(iters),
-			"--warmup",
-			String(warmup),
-			"--phases",
-		],
-		{ encoding: "utf8", maxBuffer: 128 * 1024 * 1024 },
-	);
-	const parsed = JSON.parse(stdout) as {
-		unit: string;
-		phases: Record<string, number[]>;
-	};
-	if (parsed.unit !== "ns") {
-		throw new Error(`native-baseline emitted unexpected unit: ${parsed.unit}`);
-	}
-	return Object.fromEntries(
-		Object.entries(parsed.phases).map(([phase, samples]) => [
-			phase,
-			samples.map((ns) => ns / 1e6),
-		]),
-	);
-}
diff --git a/packages/benchmarks/src/lib/perf-utils.ts b/packages/benchmarks/src/lib/perf-utils.ts
deleted file mode 100644
index 37dc9881d..000000000
--- a/packages/benchmarks/src/lib/perf-utils.ts
+++ /dev/null
@@ -1,72 +0,0 @@
-import os from "node:os";
-
-export interface Stats {
-	mean: number;
-	p50: number;
-	p95: number;
-	p99: number;
-	min: number;
-	max: number;
-}
-
-export function percentile(sorted: number[], p: number): number {
-	const idx = Math.ceil((p / 100) * sorted.length) - 1;
-	return sorted[Math.max(0, idx)];
-}
-
-export function round(n: number, decimals = 2): number {
-	const f = 10 ** decimals;
-	return Math.round(n * f) / f;
-}
-
-export function stats(samples: number[]): Stats {
-	if (samples.length === 0) {
-		throw new Error("stats requires at least one sample");
-	}
-	const sorted = [...samples].sort((a, b) => a - b);
-	const mean = samples.reduce((a, b) => a + b, 0) / samples.length;
-	return {
-		mean: round(mean),
-		p50: round(percentile(sorted, 50)),
-		p95: round(percentile(sorted, 95)),
-		p99: round(percentile(sorted, 99)),
-		min: round(sorted[0]),
-		max: round(sorted[sorted.length - 1]),
-	};
-}
-
-export function getHardware() {
-	const cpus = os.cpus();
-	return {
-		cpu: cpus[0]?.model ?? "unknown",
-		cores: os.availableParallelism(),
-		ram: `${round(os.totalmem() / 1024 ** 3, 1)} GB`,
-		node: process.version,
-		os: `${os.type()} ${os.release()}`,
-		arch: os.arch(),
-	};
-}
-
-export function forceGC(): void {
-	if (global.gc) {
-		global.gc();
-	}
-}
-
-export function nowMs(start: bigint): number {
-	return Number(process.hrtime.bigint() - start) / 1e6;
-}
-
-export function printTable(headers: string[], rows: (string | number)[][]): void {
-	const widths = headers.map((h, i) =>
-		Math.max(h.length, ...rows.map((r) => String(r[i]).length)),
-	);
-	const sep = widths.map((w) => "-".repeat(w)).join(" | ");
-	const fmt = (row: (string | number)[]) =>
-		row.map((c, i) => String(c).padStart(widths[i])).join(" | ");
-	console.error("");
-	console.error(fmt(headers));
-	console.error(sep);
-	for (const row of rows) console.error(fmt(row));
-	console.error("");
-}
diff --git a/packages/benchmarks/src/lib/report.ts b/packages/benchmarks/src/lib/report.ts
deleted file mode 100644
index 1960fa052..000000000
--- a/packages/benchmarks/src/lib/report.ts
+++ /dev/null
@@ -1,172 +0,0 @@
-import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { dirname } from "node:path";
-import type { OpResult } from "./layers.js";
-import { round } from "./perf-utils.js";
-
-export interface Finding {
-	op: string;
-	family: string;
-	emulation_ratio: number;
-	total_ratio: number;
-	confirmed: boolean;
-	suspected_cause: string;
-	file_line: string;
-	reproducer: string;
-	evidence: string;
-}
-
-export interface RefutedCandidate {
-	op: string;
-	family: string;
-	reason: string;
-	evidence: string;
-}
-
-export interface PermissionPolicyTax {
-	op: string;
-	allowP50Ms: number;
-	policyP50Ms: number;
-	policyTax: number;
-}
-
-export function ensureDir(path: string): void {
-	mkdirSync(path, { recursive: true });
-}
-
-export function writeJson(path: string, value: unknown): void {
-	ensureDir(dirname(path));
-	writeFileSync(path, `${JSON.stringify(value, null, 2)}\n`);
-}
-
-export function findingsFromLatency(results: OpResult[]): Finding[] {
-	return [...results]
-		.filter((result) => isLatencyFinding(result))
-		.sort((a, b) => b.tax.emulation - a.tax.emulation)
-		.map((result) => ({
-			op: result.op,
-			family: result.family,
-			emulation_ratio: result.tax.emulation,
-			total_ratio: result.tax.total ?? 0,
-			confirmed: true,
-			suspected_cause: causeFor(result.family, result.op),
-			file_line: result.fileLine,
-			reproducer: result.reproducer,
-			evidence: `p50 native=${result.layers.native ? `${result.layers.native.p50}ms` : `unsupported (${result.unsupported?.native ?? "n/a"})`} node=${result.layers.node.p50}ms guest=${result.layers.guest.p50}ms`,
-		}));
-}
-
-export function refutedFromLatency(results: OpResult[]): RefutedCandidate[] {
-	return [...results]
-		.filter((result) => !isLatencyFinding(result))
-		.map((result) => ({
-			op: result.op,
-			family: result.family,
-			reason:
-				result.expectedRatio === "control"
-					? "control workload stayed within the methodology guardrail"
-					: "emulation tax stayed below the confirmed-offender threshold",
-			evidence: `guest/node=${result.tax.emulation}; p50 native=${result.layers.native ? `${result.layers.native.p50}ms` : `unsupported (${result.unsupported?.native ?? "n/a"})`} node=${result.layers.node.p50}ms guest=${result.layers.guest.p50}ms`,
-		}));
-}
-
-export function permissionPolicyTaxFromLatency(
-	results: OpResult[],
-): PermissionPolicyTax[] {
-	const byOp = new Map<string, { allow?: OpResult; policy?: OpResult }>();
-	for (const result of results) {
-		if (result.family !== "permissions") continue;
-		const match = /^(.*)_(allow|policy)$/.exec(result.op);
-		if (!match) continue;
-		const [, op, variant] = match;
-		const pair = byOp.get(op) ?? {};
-		pair[variant as "allow" | "policy"] = result;
-		byOp.set(op, pair);
-	}
-	return [...byOp.entries()]
-		.filter((entry): entry is [string, { allow: OpResult; policy: OpResult }] =>
-			Boolean(entry[1].allow && entry[1].policy),
-		)
-		.map(([op, pair]) => ({
-			op,
-			allowP50Ms: pair.allow.layers.guest.p50,
-			policyP50Ms: pair.policy.layers.guest.p50,
-			policyTax: round(pair.policy.layers.guest.p50 / pair.allow.layers.guest.p50),
-		}));
-}
-
-export function permissionPolicyFindings(
-	rows: PermissionPolicyTax[],
-): Finding[] {
-	return rows
-		.filter((row) => row.policyTax > 1.2)
-		.map((row) => ({
-			op: row.op,
-			family: "permissions",
-			emulation_ratio: row.policyTax,
-			total_ratio: row.policyTax,
-			confirmed: true,
-			suspected_cause: "permission matcher rule-walk overhead on a hot guest syscall path",
-			file_line: "crates/sidecar-core/src/permissions.rs:80",
-			reproducer: `BENCH_FAMILIES=permissions BENCH_OP_FILTER=${row.op}_allow,${row.op}_policy pnpm --dir packages/benchmarks bench:matrix`,
-			evidence: `policyTax=${row.policyTax}; allow p50=${row.allowP50Ms}ms policy p50=${row.policyP50Ms}ms`,
-		}));
-}
-
-export function compareBaseline(currentPath: string, baselinePath: string) {
-	const current = JSON.parse(readFileSync(currentPath, "utf8")) as {
-		findings: Finding[];
-	};
-	const baseline = JSON.parse(readFileSync(baselinePath, "utf8")) as {
-		findings: Finding[];
-	};
-	const byKey = new Map(
-		baseline.findings.map((finding) => [
-			`${finding.family}/${finding.op}`,
-			finding,
-		]),
-	);
-	return current.findings.map((finding) => {
-		const base = byKey.get(`${finding.family}/${finding.op}`);
-		return {
-			family: finding.family,
-			op: finding.op,
-			current_emulation_ratio: finding.emulation_ratio,
-			baseline_emulation_ratio: base?.emulation_ratio ?? null,
-			regressed:
-				base !== undefined &&
-				finding.emulation_ratio > base.emulation_ratio * 1.1,
-		};
-	});
-}
-
-function causeFor(family: string, op: string): string {
-	if (family === "process") {
-		return "fresh V8 isolate/thread per spawned process plus process-table polling";
-	}
-	if (family === "dns") {
-		return "per-lookup resolver/runtime setup and missing DNS result cache";
-	}
-	if (family === "net") {
-		return "global socket table mutex and byte-buffer cloning in virtual socket I/O";
-	}
-	if (family === "fs") {
-		return "single sync filesystem bridge/VFS round trip floor on tiny filesystem operations";
-	}
-	if (family === "modules") {
-		return "module resolution, source loading, and import cache behavior in the guest JavaScript runtime";
-	}
-	if (family === "pipes") {
-		return "stdio pipe bytes cross synchronous bridge boundaries";
-	}
-	if (op.includes("alloc")) {
-		return "control workload; should remain near host ratio";
-	}
-	return "control workload; expected to validate measurement overhead";
-}
-
-function isLatencyFinding(result: OpResult): boolean {
-	if (result.expectedRatio === "control") {
-		return result.tax.emulation > 1.5;
-	}
-	return result.tax.emulation > 2;
-}
diff --git a/packages/benchmarks/src/lib/vm.ts b/packages/benchmarks/src/lib/vm.ts
deleted file mode 100644
index 47186c947..000000000
--- a/packages/benchmarks/src/lib/vm.ts
+++ /dev/null
@@ -1,344 +0,0 @@
-import { statSync } from "node:fs";
-import {
-	NodeRuntime,
-	resolveNodeRuntimeSidecarBinary,
-	resolveNodeRuntimeCommandsDir,
-	SidecarProcess,
-	type HostDirectoryMount,
-	type NodeRuntimeCreateOptions,
-	type NodeRuntimeProcess,
-	type NodeRuntimeResourceSnapshot,
-	type SidecarSpawnOptions,
-	type VirtualDirEntry,
-} from "@secure-exec/core";
-import { hasNativeBaselineWasm, supportsWasmLayer } from "./layers.js";
-import type { BenchmarkOp, CommandBenchmarkOp } from "./layers.js";
-
-const NATIVE_BASELINE_WASM_COMMAND = "native-baseline";
-const NATIVE_BASELINE_WASM_PREWARM_DIR = "/mnt/native-baseline-wasm/prewarm";
-
-export interface BenchVmOptions {
-	commandsDir?: string;
-	loopbackExemptPorts?: number[];
-	mounts?: HostDirectoryMount[];
-	permissions?: NodeRuntimeCreateOptions["permissions"];
-	wasmCommandDirs?: string[];
-	sidecar?: SidecarProcess;
-}
-
-export interface BenchVmProcess {
-	pid: number;
-	wait(): Promise<number>;
-}
-
-export interface BenchVm {
-	writeFile(path: string, content: string | Uint8Array): Promise<void>;
-	mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;
-	delete(path: string, options?: { recursive?: boolean }): Promise<void>;
-	readFile(path: string): Promise<Uint8Array>;
-	readDir(path: string): Promise<string[]>;
-	readdir(path: string): Promise<string[]>;
-	readDirWithTypes(path: string): Promise<VirtualDirEntry[]>;
-	exec(
-		commandLine: string,
-		options?: {
-			env?: Record<string, string>;
-			cwd?: string;
-			stdin?: string | Uint8Array;
-			onStdout?: (data: Uint8Array) => void;
-			onStderr?: (data: Uint8Array) => void;
-		},
-	): Promise<{ stdout: string; stderr: string; exitCode: number }>;
-	execArgv(
-		command: string,
-		args: string[],
-		options?: {
-			env?: Record<string, string>;
-			cwd?: string;
-			stdin?: string | Uint8Array;
-			onStdout?: (data: Uint8Array) => void;
-			onStderr?: (data: Uint8Array) => void;
-		},
-	): Promise<{ stdout: string; stderr: string; exitCode: number }>;
-	spawnNodeCapture(
-		argsOrProgramPath: string[] | string,
-		env?: Record<string, string>,
-		options?: {
-			onStdout?: (data: Uint8Array) => void;
-			onStderr?: (data: Uint8Array) => void;
-		},
-	): Promise<{ stdout: string; stderr: string; exitCode: number }>;
-	spawn(
-		command: string,
-		args: string[],
-		options?: {
-			env?: Record<string, string>;
-			cwd?: string;
-			onStdout?: (data: Uint8Array) => void;
-			onStderr?: (data: Uint8Array) => void;
-		},
-	): BenchVmProcess;
-	waitProcess(pid: number): Promise<number>;
-	execWasmCommand(
-		cmd: string,
-		args: string[],
-		options?: {
-			env?: Record<string, string>;
-			cwd?: string;
-			stdin?: string | Uint8Array;
-			onStdout?: (data: Uint8Array) => void;
-			onStderr?: (data: Uint8Array) => void;
-		},
-	): Promise<{ stdout: string; stderr: string; exitCode: number }>;
-	getResourceSnapshot(): Promise<NodeRuntimeResourceSnapshot>;
-	dispose(): Promise<void>;
-	sidecarPid(): number | null;
-}
-
-export interface SidecarBinaryProvenance {
-	path: string;
-	profile: "debug" | "release" | "unknown";
-	mtimeMs: number;
-	mtimeIso: string;
-	sizeBytes: number;
-}
-
-export async function createBenchVm(options: BenchVmOptions = {}): Promise<BenchVm> {
-	const runtime = await NodeRuntime.create({
-		permissions: {
-			fs: "allow",
-			network: "allow",
-			childProcess: "allow",
-			process: "allow",
-			env: "allow",
-			...options.permissions,
-		},
-		mounts: options.mounts,
-		commandsDir: options.commandsDir,
-		loopbackExemptPorts: options.loopbackExemptPorts,
-		wasmCommandDirs: options.wasmCommandDirs,
-		sidecar: options.sidecar,
-		// Benchmark VM: opt in to the us-resolution guest clock so sub-ms guest
-		// samples are real instead of 1ms-floor artifacts. Never enable this for
-		// untrusted workloads (timing side channels); off by default everywhere.
-		jsRuntime: { highResolutionTime: true },
-	});
-	const processes = new Map<number, NodeRuntimeProcess>();
-
-	return {
-		writeFile(path, content) {
-			return runtime.writeFile(path, content);
-		},
-		async mkdir(path, options = {}) {
-			const args = options.recursive ? ["-p", path] : [path];
-			const result = await runtime.execCommand("mkdir", args);
-			if (result.exitCode !== 0) {
-				throw new Error(`mkdir ${path} exited ${result.exitCode}\n${result.stderr}`);
-			}
-		},
-		async delete(path, options = {}) {
-			const args = options.recursive ? ["-rf", path] : [path];
-			const result = await runtime.execCommand("rm", args);
-			if (result.exitCode !== 0) {
-				throw new Error(`rm ${path} exited ${result.exitCode}\n${result.stderr}`);
-			}
-		},
-		readFile(path) {
-			return runtime.readFile(path);
-		},
-		readDir(path) {
-			return runtime.readDir(path);
-		},
-		readdir(path) {
-			return runtime.readDir(path);
-		},
-		readDirWithTypes(path) {
-			return runtime.readDirWithTypes(path);
-		},
-		exec(commandLine, execOptions = {}) {
-			return runtime.execCommand("sh", ["-c", commandLine], execOptions);
-		},
-		execArgv(command, args, execOptions = {}) {
-			return runtime.execCommand(command, args, execOptions);
-		},
-		async spawnNodeCapture(argsOrProgramPath, env, captureOptions = {}) {
-			const args =
-				typeof argsOrProgramPath === "string"
-					? [argsOrProgramPath]
-					: argsOrProgramPath;
-			return runtime.execCommand("node", args, {
-				env,
-				onStdout: captureOptions.onStdout,
-				onStderr: captureOptions.onStderr,
-			});
-		},
-	spawn(command, args, spawnOptions = {}) {
-			const proc = runtime.spawnCommand(command, args, {
-				env: spawnOptions.env,
-				cwd: spawnOptions.cwd,
-				onStdout: spawnOptions.onStdout,
-				onStderr: spawnOptions.onStderr,
-			});
-			processes.set(proc.pid, proc);
-			return {
-				pid: proc.pid,
-				wait: async () => {
-					try {
-						return await proc.wait();
-					} finally {
-						processes.delete(proc.pid);
-					}
-				},
-			};
-		},
-		async waitProcess(pid) {
-			const proc = processes.get(pid);
-			if (!proc) {
-				throw new Error(`unknown benchmark process pid ${pid}`);
-			}
-			try {
-				return await proc.wait();
-			} finally {
-				processes.delete(pid);
-			}
-		},
-		execWasmCommand(cmd, args, execOptions = {}) {
-			return runtime.execCommand(cmd, args, execOptions);
-		},
-		getResourceSnapshot() {
-			return runtime.getResourceSnapshot();
-		},
-		dispose() {
-			return runtime.dispose();
-		},
-		sidecarPid() {
-			return sidecarPidFromRuntime(runtime);
-		},
-	};
-}
-
-/**
- * Prewarms a benchmark VM before timed sampling:
- * 1. run trivial guest Node code to force isolate/bridge/first-exec setup;
- * 2. for native-baseline WASM lanes, run a one-iteration cpu_loop command;
- * 3. for command ops, run one discarded VM-command sample so that command WASM
- *    compilation is outside the measured sample set.
- */
-export async function prewarmBenchVm(
-	vm: BenchVm,
-	op: BenchmarkOp | CommandBenchmarkOp,
-): Promise<void> {
-	const nodeResult = await vm.spawnNodeCapture(["-e", ""]);
-	if (nodeResult.exitCode !== 0) {
-		throw new Error(`guest node prewarm exited ${nodeResult.exitCode}\n${nodeResult.stderr}`);
-	}
-
-	if (
-		!("runHostCmd" in op) &&
-		op.nativeOp &&
-		!op.wasmUnsupportedReason &&
-		supportsWasmLayer(op.nativeOp) &&
-		hasNativeBaselineWasm()
-	) {
-		const wasmResult = await vm.execWasmCommand(NATIVE_BASELINE_WASM_COMMAND, [
-			"--op",
-			"cpu_loop",
-			"--iters",
-			"1",
-			"--warmup",
-			"0",
-			"--base-dir",
-			NATIVE_BASELINE_WASM_PREWARM_DIR,
-		]);
-		if (wasmResult.exitCode !== 0) {
-			throw new Error(
-				`native-baseline wasm prewarm exited ${wasmResult.exitCode}\n${wasmResult.stderr}`,
-			);
-		}
-	}
-
-	if ("runHostCmd" in op && !op.skipReason) {
-		await op.runVmCmd(vm, 1, 0);
-	}
-}
-
-export function createBenchSidecar(options: SidecarSpawnOptions = {}): SidecarProcess {
-	return SidecarProcess.spawn({
-		...options,
-		command: options.command ?? resolveNodeRuntimeSidecarBinary(),
-	});
-}
-
-export function resolveBenchCommandsDir(explicit?: string): string {
-	return resolveNodeRuntimeCommandsDir(explicit);
-}
-
-export function resolveBenchSidecarProvenance(): SidecarBinaryProvenance {
-	const path = resolveNodeRuntimeSidecarBinary();
-	const stat = statSync(path);
-	return {
-		path,
-		profile: inferSidecarProfile(path),
-		mtimeMs: stat.mtimeMs,
-		mtimeIso: formatPacificIso(stat.mtime),
-		sizeBytes: stat.size,
-	};
-}
-
-export function formatSidecarProvenance(
-	provenance: SidecarBinaryProvenance,
-): string {
-	return `Sidecar binary: ${provenance.path} (${provenance.profile}, mtime ${provenance.mtimeIso}, size ${provenance.sizeBytes} bytes)`;
-}
-
-function sidecarPidFromRuntime(runtime: NodeRuntime): number | null {
-	const kernel = (runtime as unknown as {
-		kernel?: {
-			client?: {
-				child?: { pid?: number };
-				protocolClient?: {
-					child?: { pid?: number };
-					sidecarProcess?: { child?: { pid?: number } };
-				};
-			};
-		};
-	}).kernel;
-	const pid =
-		kernel?.client?.child?.pid ??
-		kernel?.client?.protocolClient?.child?.pid ??
-		kernel?.client?.protocolClient?.sidecarProcess?.child?.pid;
-	return typeof pid === "number" ? pid : null;
-}
-
-function inferSidecarProfile(path: string): "debug" | "release" | "unknown" {
-	if (path.includes("/release/")) return "release";
-	if (path.includes("/debug/")) return "debug";
-	return "unknown";
-}
-
-export function formatPacificIso(date: Date): string {
-	const formatter = new Intl.DateTimeFormat("en-CA", {
-		timeZone: "America/Los_Angeles",
-		year: "numeric",
-		month: "2-digit",
-		day: "2-digit",
-		hour: "2-digit",
-		minute: "2-digit",
-		second: "2-digit",
-		fractionalSecondDigits: 3,
-		hourCycle: "h23",
-		timeZoneName: "shortOffset",
-	});
-	const parts = new Map(
-		formatter.formatToParts(date).map((part) => [part.type, part.value]),
-	);
-	return `${parts.get("year")}-${parts.get("month")}-${parts.get("day")}T${parts.get("hour")}:${parts.get("minute")}:${parts.get("second")}.${parts.get("fractionalSecond")}${isoOffset(parts.get("timeZoneName") ?? "GMT")}`;
-}
-
-function isoOffset(shortOffset: string): string {
-	if (shortOffset === "GMT" || shortOffset === "UTC") return "Z";
-	const match = /^GMT([+-])(\d{1,2})(?::(\d{2}))?$/.exec(shortOffset);
-	if (!match) return shortOffset;
-	const [, sign, hours, minutes = "00"] = match;
-	return `${sign}${hours.padStart(2, "0")}:${minutes}`;
-}
diff --git a/packages/benchmarks/src/quick-gate.ts b/packages/benchmarks/src/quick-gate.ts
deleted file mode 100644
index cc7fdc6af..000000000
--- a/packages/benchmarks/src/quick-gate.ts
+++ /dev/null
@@ -1,141 +0,0 @@
-import { existsSync } from "node:fs";
-import { pathToFileURL } from "node:url";
-import {
-	baselinePathForEnvironment,
-	baselineRowFromLatency,
-	loadMatrixBaseline,
-	type GateLane,
-} from "./baseline.js";
-import { compareMatrixBaseline, type GateRow } from "./compare-baseline.js";
-import { printTable } from "./lib/perf-utils.js";
-import {
-	formatSidecarProvenance,
-	resolveBenchSidecarProvenance,
-} from "./lib/vm.js";
-
-const GATE_DEFAULTS = {
-	iterations: 9,
-	warmup: 3,
-	threshold: 2.0,
-	tinyBaselineFloorMs: 0.3,
-	tinyCurrentFloorMs: 1.0,
-	rows: [
-		{ key: "fs/fs_write_small", lane: "guest", reason: "tiny sync write hot path; protected by the 1ms tiny-row floor" },
-		{ key: "fs/fs_write_big", lane: "guest", reason: "large write payload catches whole-buffer copy regressions" },
-		{ key: "fs/fs_read_small", lane: "guest", reason: "small read bridge/VFS floor" },
-		{ key: "fs/stat_storm", lane: "guest", reason: "metadata syscall hot path" },
-		{ key: "fs/readdir_small", lane: "guest", reason: "directory enumeration without the high variance of large listings" },
-		{ key: "net/tcp_connect_close", lane: "guest", reason: "TCP socket lifecycle floor" },
-		{ key: "net/tcp_echo_small", lane: "guest", reason: "small TCP payload round trip" },
-		{ key: "net/http_loopback_get", lane: "guest", reason: "HTTP over kernel sockets with loopback server" },
-		{ key: "modules/import_fresh_file", lane: "guest", reason: "dynamic import and filesystem resolution" },
-		{ key: "modules/require_100_small", lane: "guest", reason: "CommonJS resolver/cache behavior" },
-		{ key: "control/cpu_loop", lane: "wasm", reason: "WASM runtime lane sanity check" },
-		{ key: "ecosystem/ls_100", lane: "vmCmd", reason: "end-to-end WASM command tier" },
-	] satisfies Array<GateRow & { reason: string }>,
-};
-
-class GateExitError extends Error {
-	constructor(
-		readonly code: number,
-		message: string,
-	) {
-		super(message);
-	}
-}
-
-async function main(): Promise<void> {
-	const baselinePath = baselinePathForEnvironment();
-	if (process.env.GITHUB_ACTIONS === "true" && !existsSync(baselinePath)) {
-		console.error(
-			`BENCH GATE SKIPPED: ${baselinePath} is missing. Run the nightly benchmark, download its candidate baseline-ci.json artifact, commit it, and PR gates will enforce from then on.`,
-		);
-		return;
-	}
-	const baseline = loadMatrixBaseline(baselinePath);
-	if (!baseline) {
-		throw new GateExitError(
-			2,
-			`BENCH GATE REFUSED: missing baseline ${baselinePath}. Regenerate with pnpm --dir packages/benchmarks bench:baseline.`,
-		);
-	}
-
-	const sidecar = resolveBenchSidecarProvenance();
-	console.error(formatSidecarProvenance(sidecar));
-	if (sidecar.profile !== "release") {
-		throw new GateExitError(
-			2,
-			`BENCH GATE REFUSED: sidecar provenance profile is ${sidecar.profile}; set SECURE_EXEC_SIDECAR_BIN to target/release/secure-exec-sidecar`,
-		);
-	}
-
-	const gateRows = selectedGateRows();
-	process.env.BENCH_OP_FILTER = gateRows.map((row) => row.key).join(",");
-	process.env.BENCH_ITERATIONS ??= String(GATE_DEFAULTS.iterations);
-	process.env.BENCH_WARMUP ??= String(GATE_DEFAULTS.warmup);
-
-	const { runLatencyMatrix } = await import("./run-all.js");
-	const matrix = await runLatencyMatrix();
-	const currentRows = matrix.results.map(baselineRowFromLatency);
-	const threshold = Number(process.env.BENCH_GATE_THRESHOLD ?? GATE_DEFAULTS.threshold);
-	const comparisons = compareMatrixBaseline(currentRows, baseline, gateRows, {
-		threshold,
-		tinyBaselineFloorMs: GATE_DEFAULTS.tinyBaselineFloorMs,
-		tinyCurrentFloorMs: GATE_DEFAULTS.tinyCurrentFloorMs,
-	});
-
-	console.error(
-		`Bench gate baseline: ${baselinePath}; threshold > ${threshold}x; tiny rows baseline < ${GATE_DEFAULTS.tinyBaselineFloorMs}ms ignored until current >= ${GATE_DEFAULTS.tinyCurrentFloorMs}ms`,
-	);
-	printTable(
-		["row", "lane", "baseline p50", "current p50", "ratio", "status", "reason"],
-		comparisons.map((row) => [
-			row.key,
-			row.lane,
-			row.baselineP50Ms === undefined ? "-" : `${row.baselineP50Ms}ms`,
-			row.currentP50Ms === undefined ? "-" : `${row.currentP50Ms}ms`,
-			row.ratio === undefined ? "-" : `${row.ratio}x`,
-			row.status.toUpperCase(),
-			row.reason,
-		]),
-	);
-
-	const failures = comparisons.filter((row) =>
-		["fail", "missing-baseline", "missing-current"].includes(row.status),
-	);
-	if (failures.length > 0) {
-		throw new GateExitError(
-			1,
-			`BENCH GATE FAILED: ${failures.length} row(s) exceeded threshold or were missing`,
-		);
-	}
-	console.error("BENCH GATE PASSED");
-}
-
-function selectedGateRows(): GateRow[] {
-	const override = process.env.BENCH_GATE_ROWS;
-	if (!override) return GATE_DEFAULTS.rows;
-	return override
-		.split(",")
-		.map((entry) => entry.trim())
-		.filter(Boolean)
-		.map((entry) => {
-			const [key, lane] = entry.split(":");
-			const configured = GATE_DEFAULTS.rows.find((row) => row.key === key);
-			return {
-				key,
-				lane: (lane ?? configured?.lane ?? "guest") as GateLane,
-			};
-		});
-}
-
-if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) {
-	main().then(
-		() => process.exit(0),
-		(error) => {
-			const code = error instanceof GateExitError ? error.code : 1;
-			console.error(error instanceof Error ? error.message : error);
-			process.exit(code);
-		},
-	);
-}
diff --git a/packages/benchmarks/src/run-all.ts b/packages/benchmarks/src/run-all.ts
deleted file mode 100644
index 5e81ddb2f..000000000
--- a/packages/benchmarks/src/run-all.ts
+++ /dev/null
@@ -1,444 +0,0 @@
-import { allOps } from "./families/index.js";
-import { ecosystemWasmCommandDirs } from "./families/ecosystem.js";
-import {
-	buildCommandOpResult,
-	buildOpResult,
-	isLayerOpResult,
-	runCommandHostLayer,
-	runCommandVmLayer,
-	runOpHostLayers,
-	runOpVmLayers,
-	skippedCommandOpResult,
-	supportsWasmLayer,
-	wasmLayerOptions,
-	primeNodeMemoryBaseline,
-	type BenchmarkOp,
-	type CommandBenchmarkOp,
-	type LatencyResult,
-} from "./lib/layers.js";
-import { primeNativeMemoryBaseline } from "./lib/native.js";
-import {
-	createBenchVm,
-	formatSidecarProvenance,
-	formatPacificIso,
-	prewarmBenchVm,
-	resolveBenchSidecarProvenance,
-	type BenchVm,
-	type BenchVmOptions,
-	type SidecarBinaryProvenance,
-} from "./lib/vm.js";
-import {
-	findingsFromLatency,
-	permissionPolicyFindings,
-	permissionPolicyTaxFromLatency,
-	refutedFromLatency,
-	writeJson,
-} from "./lib/report.js";
-import { getHardware, printTable } from "./lib/perf-utils.js";
-import {
-	SidecarPeakMemorySampler,
-	formatBytes,
-	hostPeakMemorySupportReason,
-	procPeakMemorySupportReason,
-} from "./lib/memory.js";
-import { runFuzz } from "./fuzz/run.js";
-import { runLeakSuite } from "./leak.js";
-import { runFootprint } from "./footprint.js";
-import { compareBaselineFile } from "./compare-baseline.js";
-import { pathToFileURL } from "node:url";
-
-const RESULTS_DIR = new URL("../results/", import.meta.url).pathname;
-const ITERATIONS = Number(process.env.BENCH_ITERATIONS ?? 20);
-const WARMUP = Number(process.env.BENCH_WARMUP ?? 5);
-const FAMILY_FILTER = process.env.BENCH_FAMILIES
-	?.split(",")
-	.map((family) => family.trim())
-	.filter(Boolean);
-const OP_FILTER = process.env.BENCH_OP_FILTER
-	?.split(",")
-	.map((op) => op.trim())
-	.filter(Boolean);
-const COLD_MODE = process.env.BENCH_COLD === "1";
-const SHARED_VM_MODE = process.env.BENCH_SHARED_VM === "1";
-
-interface LatencyMatrixRun {
-	results: LatencyResult[];
-	sidecar: SidecarBinaryProvenance;
-	wallTimeMs: number;
-	mode: {
-		cold: boolean;
-		sharedVm: boolean;
-	};
-}
-
-export async function runLatencyMatrix(): Promise<LatencyMatrixRun> {
-	const start = process.hrtime.bigint();
-	const sidecar = resolveBenchSidecarProvenance();
-	console.error(formatSidecarProvenance(sidecar));
-	if (COLD_MODE) {
-		console.error("BENCH_COLD=1: VM prewarm is disabled; samples include first-use VM costs.");
-	}
-	if (SHARED_VM_MODE) {
-		console.error("BENCH_SHARED_VM=1: reusing a VM where op-specific VM options are not required.");
-	}
-	const wasmOptions = wasmLayerOptions();
-	if (!wasmOptions) {
-		console.error("vm-wasm lane disabled: native-baseline wasm artifact was not found");
-	}
-	const commandDirs = ecosystemWasmCommandDirs();
-	const baseVmOptions = mergeBenchVmOptions({}, {
-		mounts: wasmOptions?.mounts,
-		wasmCommandDirs: [
-			...(wasmOptions?.wasmCommandDirs ?? []),
-			...commandDirs,
-		],
-	});
-	const sharedVm = SHARED_VM_MODE ? await createBenchVm(baseVmOptions) : undefined;
-	try {
-		const results: LatencyResult[] = [];
-		const ops = FAMILY_FILTER
-			? allOps.filter((op) => FAMILY_FILTER.includes(op.family))
-			: allOps;
-		const filteredOps = OP_FILTER
-			? ops.filter((op) => OP_FILTER.includes(op.name) || OP_FILTER.includes(`${op.family}/${op.name}`))
-			: ops;
-		await primeMemoryBaselines(filteredOps);
-		await runIdleVmMemorySelfCheck(baseVmOptions);
-		for (const op of filteredOps) {
-			console.error(`latency ${op.family}/${op.name}`);
-			if (!("runHostCmd" in op) && op.nativeOp && supportsWasmLayer(op.nativeOp)) {
-				console.error("  wasm lane: guest JS measured first, wasm native-baseline after");
-			}
-			results.push(await runOneOp(op, baseVmOptions, sharedVm));
-		}
-		return {
-			results,
-			sidecar,
-			wallTimeMs: Number(process.hrtime.bigint() - start) / 1e6,
-			mode: {
-				cold: COLD_MODE,
-				sharedVm: SHARED_VM_MODE,
-			},
-		};
-	} finally {
-		await sharedVm?.dispose();
-	}
-}
-
-async function main(): Promise<void> {
-	const matrix = await runLatencyMatrix();
-	const latency = matrix.results;
-	const layerLatency = latency.filter(isLayerOpResult);
-	const nonPermissionsLatency = layerLatency.filter((result) => result.family !== "permissions");
-	const findings = findingsFromLatency(nonPermissionsLatency);
-	const refuted = refutedFromLatency(nonPermissionsLatency);
-	const permissionPolicyTax = permissionPolicyTaxFromLatency(layerLatency);
-	const permissionFindings = permissionPolicyFindings(permissionPolicyTax);
-	const resourceSnapshotStubbed = false;
-	const fuzz = FAMILY_FILTER
-		? { programs: [], findings: [], refuted: [] }
-		: await runFuzz({ iterations: ITERATIONS, warmup: WARMUP });
-	const leak = FAMILY_FILTER ? { findings: [], streams: [] } : await runLeakSuite();
-	const footprint = FAMILY_FILTER
-		? { findings: [], components: [] }
-		: await runFootprint();
-	const findingsJson = {
-		generatedAt: formatPacificIso(new Date()),
-		hardware: getHardware(),
-		sidecar: matrix.sidecar,
-		matrixMode: matrix.mode,
-		wallTimeMs: matrix.wallTimeMs,
-		iterations: ITERATIONS,
-		warmup: WARMUP,
-		resourceSnapshotStubbed,
-		latency,
-		permissionPolicyTax,
-		fuzz,
-		leak,
-		footprint,
-		findings: [
-			...findings,
-			...permissionFindings,
-			...fuzz.findings,
-			...leak.findings,
-			...footprint.findings,
-		].sort((a, b) => b.emulation_ratio - a.emulation_ratio),
-		refuted: [
-			...refuted,
-			...fuzz.refuted,
-			{
-				family: "net",
-				op: "udp_echo_small",
-				reason: "guest UDP datagrams are unsupported in the current kernel-backed V8 bridge",
-				evidence: "ERR_NOT_IMPLEMENTED: external UDP datagrams are not yet supported by the kernel-backed V8 bridge",
-			},
-		],
-		critic_gaps: criticGaps(latency, fuzz, leak, footprint),
-	};
-	writeJson(`${RESULTS_DIR}/latency-matrix.json`, {
-		sidecar: matrix.sidecar,
-		matrixMode: matrix.mode,
-		wallTimeMs: matrix.wallTimeMs,
-		latency,
-		permissionPolicyTax,
-	});
-	writeJson(`${RESULTS_DIR}/findings.json`, findingsJson);
-	const baselinePath = `${RESULTS_DIR}/baseline/findings-baseline.json`;
-	const diff = compareBaselineFile(`${RESULTS_DIR}/findings.json`, baselinePath);
-	writeJson(`${RESULTS_DIR}/regression-diff.json`, diff);
-
-	printTable(
-		[
-			"family",
-			"op",
-			"native p50",
-			"node p50",
-			"guest p50",
-			"wasm p50",
-			"hostCmd p50",
-			"vmCmd p50",
-			"vm/host",
-			"native mem",
-			"node mem",
-			"guest mem",
-			"wasm mem",
-			"hostCmd mem",
-			"vmCmd mem",
-			"memTax",
-		],
-		latency.map((result) => {
-			if (isLayerOpResult(result)) {
-				return [
-					result.family,
-					result.op,
-					result.layers.native
-						? `${result.layers.native.p50}ms`
-						: `unsupported: ${result.unsupported?.native ?? "n/a"}`,
-					`${result.layers.node.p50}ms`,
-					`${result.layers.guest.p50}ms`,
-					result.layers.wasm
-						? `${result.layers.wasm.p50}ms`
-						: result.unsupported?.wasm
-							? `unsupported: ${result.unsupported.wasm}`
-							: "-",
-					"-",
-					"-",
-					"-",
-					formatBytes(result.layers.native?.memBytes),
-					formatBytes(result.layers.node.memBytes),
-					formatBytes(result.layers.guest.memBytes),
-					formatBytes(result.layers.wasm?.memBytes),
-					"-",
-					"-",
-					result.tax.mem ?? "-",
-				];
-			}
-			return [
-				result.family,
-				result.op,
-				"-",
-				"-",
-				"-",
-				"-",
-				result.layers.hostCmd ? `${result.layers.hostCmd.p50}ms` : "-",
-				result.layers.vmCmd ? `${result.layers.vmCmd.p50}ms` : "-",
-				result.tax.command ?? result.skipReason ?? "-",
-				"-",
-				"-",
-				"-",
-				"-",
-				formatBytes(result.layers.hostCmd?.memBytes),
-				formatBytes(result.layers.vmCmd?.memBytes),
-				result.tax.mem ?? "-",
-			];
-		}),
-	);
-
-	if (permissionPolicyTax.length > 0) {
-		printTable(
-			["op", "allow guest p50", "policy guest p50", "policyTax"],
-			permissionPolicyTax.map((row) => [
-				row.op,
-				`${row.allowP50Ms}ms`,
-				`${row.policyP50Ms}ms`,
-				row.policyTax,
-			]),
-		);
-	}
-
-	printTable(
-		["family", "op", "guest/node", "guest/native", "file:line"],
-		findingsJson.findings.map((finding) => [
-			finding.family,
-			finding.op,
-			finding.emulation_ratio,
-			finding.total_ratio,
-			finding.file_line,
-		]),
-	);
-	console.log(JSON.stringify(findingsJson, null, 2));
-}
-
-async function runOneOp(
-	op: BenchmarkOp | CommandBenchmarkOp,
-	baseVmOptions: BenchVmOptions,
-	sharedVm: BenchVm | undefined,
-): Promise<LatencyResult> {
-	const iterations = Math.min(ITERATIONS, op.maxIterations ?? ITERATIONS);
-	const warmup = Math.min(WARMUP, op.maxWarmup ?? WARMUP);
-	if ("runHostCmd" in op) {
-		if (op.skipReason) return skippedCommandOpResult(op);
-		const hostCmd = await runCommandHostLayer(op, iterations, warmup);
-		const vmCmd = await withOpVm(op, baseVmOptions, sharedVm, (vm) =>
-			runCommandVmLayer(op, vm, iterations, warmup),
-		);
-		return buildCommandOpResult(op, hostCmd, vmCmd);
-	}
-
-	const hostSamples = await runOpHostLayers(op, iterations, warmup);
-	const vmSamples = await withOpVm(op, baseVmOptions, sharedVm, (vm, context) =>
-		runOpVmLayers(op, vm, iterations, warmup, context),
-	);
-	return buildOpResult(op, hostSamples, vmSamples);
-}
-
-async function withOpVm<T>(
-	op: BenchmarkOp | CommandBenchmarkOp,
-	baseVmOptions: BenchVmOptions,
-	sharedVm: BenchVm | undefined,
-	callback: (vm: BenchVm, context?: unknown) => Promise<T>,
-): Promise<T> {
-	const prepared = "prepareVm" in op && op.prepareVm ? await op.prepareVm() : undefined;
-	const options = mergeBenchVmOptions(baseVmOptions, prepared?.options ?? {});
-	const canUseSharedVm = sharedVm && !prepared?.options;
-	const vm = canUseSharedVm ? sharedVm : await createBenchVm(options);
-	try {
-		if (!COLD_MODE) {
-			await prewarmBenchVm(vm, op);
-		}
-		return await callback(vm, prepared?.context);
-	} finally {
-		if (!canUseSharedVm) {
-			await vm.dispose();
-		}
-		await prepared?.cleanup?.();
-	}
-}
-
-function mergeBenchVmOptions(
-	base: BenchVmOptions,
-	extra: BenchVmOptions,
-): BenchVmOptions {
-	return {
-		...base,
-		...extra,
-		mounts: [...(base.mounts ?? []), ...(extra.mounts ?? [])],
-		wasmCommandDirs: [
-			...(base.wasmCommandDirs ?? []),
-			...(extra.wasmCommandDirs ?? []),
-		],
-		loopbackExemptPorts: [
-			...(base.loopbackExemptPorts ?? []),
-			...(extra.loopbackExemptPorts ?? []),
-		],
-	};
-}
-
-async function primeMemoryBaselines(
-	ops: Array<BenchmarkOp | CommandBenchmarkOp>,
-): Promise<void> {
-	const hostReason = hostPeakMemorySupportReason();
-	if (hostReason) {
-		console.error(`host memory columns disabled: ${hostReason}`);
-	} else {
-		if (ops.some((op) => !("runHostCmd" in op) && op.nativeOp)) {
-			const nativeBaseline = await primeNativeMemoryBaseline();
-			console.error(`native memory startup baseline: ${formatBytes(nativeBaseline)}`);
-		}
-		if (ops.some((op) => !("runHostCmd" in op) && !op.runNode)) {
-			const nodeBaseline = await primeNodeMemoryBaseline();
-			console.error(`node memory startup baseline: ${formatBytes(nodeBaseline)}`);
-		}
-	}
-
-	const procReason = procPeakMemorySupportReason();
-	if (procReason) {
-		console.error(`guest/vm memory columns disabled: ${procReason}`);
-	}
-}
-
-async function runIdleVmMemorySelfCheck(
-	baseVmOptions: BenchVmOptions,
-): Promise<void> {
-	const reason = procPeakMemorySupportReason();
-	if (reason) {
-		console.error(`idle prewarmed VM memory self-check skipped: ${reason}`);
-		return;
-	}
-	const vm = await createBenchVm(baseVmOptions);
-	try {
-		await prewarmBenchVm(vm, {
-			family: "self_check",
-			name: "idle_prewarmed_vm",
-			fileLine: "packages/benchmarks/src/run-all.ts",
-			reproducer: "prewarm VM, clear_refs=5, wait 2s, read VmHWM - baseline VmRSS",
-		});
-		const sampler = SidecarPeakMemorySampler.forVm(vm);
-		if (!sampler) {
-			console.error("idle prewarmed VM memory self-check skipped: sidecar pid unavailable");
-			return;
-		}
-		const memory = await sampler.measureIdle(2_000);
-		const warning = memory.memBytes > 2 * 1024 * 1024 ? " WARN >2MiB" : "";
-		console.error(
-			`idle prewarmed VM op memory self-check: ${formatBytes(memory.memBytes)} (${memory.memBytes} bytes)${warning}`,
-		);
-	} finally {
-		await vm.dispose();
-	}
-}
-
-function criticGaps(
-	latency: LatencyResult[],
-	fuzz: Awaited<ReturnType<typeof runFuzz>>,
-	leak: { streams: Array<{ idleMs: number }> },
-	footprint: { components?: unknown[] },
-): string[] {
-	const gaps: string[] = [];
-	const covered = new Set(
-		latency.filter(isLayerOpResult).map((result) => `${result.family}/${result.op}`),
-	);
-	for (const required of [
-		"process/fanout_spawn_8",
-		"process/wait_reap_storm_8",
-		"fs/readdir_small",
-		"dns/resolve_concurrent_4",
-		"pipes/backpressure_chunks",
-		"control/cpu_loop",
-	]) {
-		if (!covered.has(required)) gaps.push(`missing fixed op ${required}`);
-	}
-	gaps.push(
-		"unsupported fixed op net/udp_echo_small: guest dgram send returns ERR_NOT_IMPLEMENTED for external UDP datagrams",
-	);
-	if (!fuzz.findings.some((finding) => finding.op === "fanout-stdout-storm")) {
-		gaps.push("fuzz did not confirm the non-P2 stdout fanout slow path");
-	}
-	if (leak.streams.some((stream) => stream.idleMs < 61_000)) {
-		gaps.push("leak suite was run in smoke mode without waiting past 60s ZOMBIE_TTL");
-	}
-	if (footprint.components?.length === 0) {
-		gaps.push("footprint run did not emit component attribution");
-	}
-	return gaps;
-}
-
-if (import.meta.url === pathToFileURL(process.argv[1] ?? "").href) {
-	main().then(
-		() => process.exit(0),
-		(error) => {
-			console.error(error);
-			process.exit(1);
-		},
-	);
-}
diff --git a/packages/benchmarks/tsconfig.json b/packages/benchmarks/tsconfig.json
deleted file mode 100644
index 744bbddd8..000000000
--- a/packages/benchmarks/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"extends": "../../tsconfig.base.json",
-	"compilerOptions": {
-		"noEmit": true,
-		"types": ["node"]
-	},
-	"include": ["*.ts", "src/**/*.ts"]
-}
diff --git a/packages/browser/.gitignore b/packages/browser/.gitignore
deleted file mode 100644
index d40c2ab76..000000000
--- a/packages/browser/.gitignore
+++ /dev/null
@@ -1,2 +0,0 @@
-.cache/
-test-results/
diff --git a/packages/browser/AGENTS.md b/packages/browser/AGENTS.md
deleted file mode 120000
index 681311eb9..000000000
--- a/packages/browser/AGENTS.md
+++ /dev/null
@@ -1 +0,0 @@
-CLAUDE.md
\ No newline at end of file
diff --git a/packages/browser/CLAUDE.md b/packages/browser/CLAUDE.md
deleted file mode 100644
index 22ea843ad..000000000
--- a/packages/browser/CLAUDE.md
+++ /dev/null
@@ -1,5 +0,0 @@
-# Browser Support
-
-- Browser support is untested after the secure-exec split; only build-level validation is required during migration.
-- Provenance: moved from rivet-dev/agentos@87ed8e21e454.
-- Keep this package generic to secure-exec. Agent OS browser glue belongs in Agent OS.
diff --git a/packages/browser/README.md b/packages/browser/README.md
index fea61e2eb..3d58e93af 100644
--- a/packages/browser/README.md
+++ b/packages/browser/README.md
@@ -1,6 +1,3 @@
-# Secure Exec Browser
+# @secure-exec/browser
 
-Browser driver primitives for secure-exec.
-
-- Package: `@secure-exec/browser`
-- Exports: `createBrowserDriver`, `createBrowserRuntimeDriverFactory`, `createOpfsFileSystem`, `BrowserWorkerAdapter`
+Compatibility shim for `@rivet-dev/agentos-runtime-browser`.
diff --git a/packages/browser/package.json b/packages/browser/package.json
index a7e0626a2..2781b5112 100644
--- a/packages/browser/package.json
+++ b/packages/browser/package.json
@@ -3,6 +3,7 @@
 	"version": "0.0.1",
 	"type": "module",
 	"license": "Apache-2.0",
+	"description": "@secure-exec/browser compatibility shim for @rivet-dev/agentos-runtime-browser.",
 	"main": "./dist/index.js",
 	"types": "./dist/index.d.ts",
 	"files": [
@@ -15,79 +16,16 @@
 			"import": "./dist/index.js",
 			"default": "./dist/index.js"
 		},
-		"./internal/driver": {
-			"types": "./dist/driver.d.ts",
-			"import": "./dist/driver.js",
-			"default": "./dist/driver.js"
-		},
-		"./internal/runtime-driver": {
-			"types": "./dist/runtime-driver.d.ts",
-			"import": "./dist/runtime-driver.js",
-			"default": "./dist/runtime-driver.js"
-		},
-		"./internal/worker": {
-			"types": "./dist/worker.d.ts",
-			"import": "./dist/worker.js",
-			"default": "./dist/worker.js"
-		},
-		"./internal/worker-protocol": {
-			"types": "./dist/worker-protocol.d.ts",
-			"import": "./dist/worker-protocol.js",
-			"default": "./dist/worker-protocol.js"
-		},
-		"./internal/permission-validation": {
-			"types": "./dist/permission-validation.d.ts",
-			"import": "./dist/permission-validation.js",
-			"default": "./dist/permission-validation.js"
-		},
-		"./internal/os-filesystem": {
-			"types": "./dist/os-filesystem.d.ts",
-			"import": "./dist/os-filesystem.js",
-			"default": "./dist/os-filesystem.js"
-		},
-		"./internal/worker-adapter": {
-			"types": "./dist/worker-adapter.d.ts",
-			"import": "./dist/worker-adapter.js",
-			"default": "./dist/worker-adapter.js"
-		},
-		"./internal/runtime": {
-			"types": "./dist/runtime.d.ts",
-			"import": "./dist/runtime.js",
-			"default": "./dist/runtime.js"
-		},
-		"./internal/sync-bridge": {
-			"types": "./dist/sync-bridge.d.ts",
-			"import": "./dist/sync-bridge.js",
-			"default": "./dist/sync-bridge.js"
-		}
+		"./package.json": "./package.json"
 	},
 	"scripts": {
-		"check:bridge-contract": "node ./scripts/check-bridge-contract.mjs",
-		"check:signals": "node ./scripts/check-signal-table.mjs",
-		"check:wasi-surface": "node ./scripts/check-wasi-surface.mjs",
-		"check-types": "pnpm check:bridge-contract && pnpm check:signals && pnpm check:wasi-surface && tsc --noEmit",
 		"build": "tsc",
-		"build:sidecar-wasm": "node ./scripts/build-sidecar-wasm.mjs",
-		"build:dist-wasm": "node ./scripts/build-dist-wasm.mjs",
-		"build:dist": "pnpm build && pnpm build:dist-wasm",
-		"generate:wasi-polyfill": "node ./scripts/generate-wasi-polyfill.mjs",
-		"test:browser": "node ./scripts/run-browser-tests.mjs",
-		"test:converged": "pnpm test && pnpm test:browser",
-		"test:integration": "pnpm build:sidecar-wasm && vitest run tests/integration",
-		"test:unit": "vitest run tests/runtime tests/runtime-driver",
-		"test": "pnpm check:bridge-contract && pnpm check:signals && pnpm check:wasi-surface && node --check ./scripts/build-browser-test-assets.mjs && node --check ./scripts/serve-browser-tests.mjs && pnpm test:unit && pnpm build"
+		"check-types": "tsc --noEmit"
 	},
 	"dependencies": {
-		"@secure-exec/core": "workspace:*",
-		"@noble/ciphers": "^2.2.0",
-		"@noble/hashes": "^2.2.0",
-		"sucrase": "^3.35.0"
+		"@rivet-dev/agentos-runtime-browser": "link:../../../agentos/packages/runtime-browser"
 	},
 	"devDependencies": {
-		"@playwright/test": "^1.54.2",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.7.2",
-		"vitest": "^2.1.8"
-	},
-	"description": "Browser driver primitives for secure-exec."
+		"typescript": "^5.9.2"
+	}
 }
diff --git a/packages/browser/playwright.config.ts b/packages/browser/playwright.config.ts
deleted file mode 100644
index f82fb9ea9..000000000
--- a/packages/browser/playwright.config.ts
+++ /dev/null
@@ -1,26 +0,0 @@
-import { defineConfig, devices } from "@playwright/test";
-
-const PLAYGROUND_PORT = 43173;
-
-export default defineConfig({
-	testDir: "./tests/browser",
-	timeout: 30_000,
-	use: {
-		baseURL: `http://localhost:${PLAYGROUND_PORT}`,
-		trace: "retain-on-failure",
-	},
-	webServer: {
-		command: `sh -c 'pnpm build && node ./scripts/build-browser-test-assets.mjs && PORT=${PLAYGROUND_PORT} node ./scripts/serve-browser-tests.mjs'`,
-		port: PLAYGROUND_PORT,
-		reuseExistingServer: false,
-		timeout: 120_000,
-	},
-	projects: [
-		{
-			name: "chromium",
-			use: {
-				...devices["Desktop Chrome"],
-			},
-		},
-	],
-});
diff --git a/packages/browser/scripts/build-browser-test-assets.mjs b/packages/browser/scripts/build-browser-test-assets.mjs
deleted file mode 100644
index 1ad43eaca..000000000
--- a/packages/browser/scripts/build-browser-test-assets.mjs
+++ /dev/null
@@ -1,117 +0,0 @@
-import { spawnSync } from "node:child_process";
-import { mkdir } from "node:fs/promises";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const packageDir = path.resolve(__dirname, "..");
-const outDir = path.join(packageDir, ".cache", "browser-tests");
-
-await mkdir(outDir, { recursive: true });
-
-function buildWorker(entrypoint, outputFile) {
-	const result = spawnSync("pnpm", [
-		"--dir",
-		path.join(packageDir, "..", "build-tools"),
-		"exec",
-		"esbuild",
-		path.join(packageDir, "dist", entrypoint),
-		"--bundle",
-		"--format=esm",
-		"--platform=browser",
-		"--target=es2022",
-		"--sourcemap=inline",
-		`--outfile=${path.join(outDir, outputFile)}`,
-	], {
-		stdio: "inherit",
-		encoding: "utf8",
-	});
-
-	if (result.status !== 0) {
-		throw new Error(`Failed to build ${entrypoint} with esbuild (${result.status})`);
-	}
-}
-
-// Bundle a TypeScript entry (esbuild handles TS) with some imports left
-// external (e.g. the runtime-loaded wasm module URL).
-function bundleEntry(entryPath, outputFile, external = []) {
-	const result = spawnSync(
-		"pnpm",
-		[
-			"--dir",
-			path.join(packageDir, "..", "build-tools"),
-			"exec",
-			"esbuild",
-			entryPath,
-			"--bundle",
-			"--format=esm",
-			"--platform=browser",
-			"--target=es2022",
-			"--sourcemap=inline",
-			...external.map((pattern) => `--external:${pattern}`),
-			`--outfile=${path.join(outDir, outputFile)}`,
-		],
-		{ stdio: "inherit", encoding: "utf8" },
-	);
-	if (result.status !== 0) {
-		throw new Error(`Failed to bundle ${entryPath} with esbuild (${result.status})`);
-	}
-}
-
-buildWorker("worker.js", "secure-exec-worker.js");
-bundleEntry(
-	path.join(
-		packageDir,
-		"tests/browser/fixtures/frontend/converged-harness.entry.ts",
-	),
-	"secure-exec-converged-harness.js",
-	["/sidecar-wasm-web/*"],
-);
-bundleEntry(
-	path.join(
-		packageDir,
-		"tests/browser/fixtures/frontend/converged-runtime-harness.entry.ts",
-	),
-	"secure-exec-converged-runtime-harness.js",
-	["/sidecar-wasm-web/*"],
-);
-bundleEntry(
-	path.join(
-		packageDir,
-		"tests/browser/fixtures/frontend/converged-conformance-harness.entry.ts",
-	),
-	"secure-exec-converged-conformance-harness.js",
-	["/sidecar-wasm-web/*"],
-);
-console.log("Built .cache/browser-tests/secure-exec-worker.js");
-console.log("Built .cache/browser-tests/secure-exec-converged-harness.js");
-
-// Build the converged sidecar kernel to a web-target wasm package, served
-// alongside the worker bundles so the converged in-browser test can load the
-// real kernel on the main thread.
-function buildSidecarWasm() {
-	const result = spawnSync(
-		"wasm-pack",
-		[
-			"build",
-			path.join(packageDir, "..", "..", "crates", "sidecar-browser"),
-			"--dev",
-			"--target",
-			"web",
-			"--out-dir",
-			path.join(outDir, "sidecar-wasm-web"),
-		],
-		{ stdio: "inherit", encoding: "utf8" },
-	);
-	if (result.error || result.status !== 0) {
-		throw new Error(
-			`Failed to build the web sidecar wasm with wasm-pack (${
-				result.status ?? result.error?.message
-			})`,
-		);
-	}
-}
-
-buildSidecarWasm();
-console.log("Built .cache/browser-tests/sidecar-wasm-web/");
diff --git a/packages/browser/scripts/build-dist-wasm.mjs b/packages/browser/scripts/build-dist-wasm.mjs
deleted file mode 100644
index 8f4a01ec6..000000000
--- a/packages/browser/scripts/build-dist-wasm.mjs
+++ /dev/null
@@ -1,54 +0,0 @@
-#!/usr/bin/env node
-// Builds the converged browser sidecar (crates/sidecar-browser) to a web-target
-// wasm-bindgen package emitted INTO the published output (dist/sidecar-wasm-web/),
-// so `@secure-exec/browser` ships the converged kernel + can be loaded with the
-// zero-config default loader (src/default-sidecar.ts). Run after `tsc` (build)
-// and before publishing. Requires `wasm-pack` on PATH.
-
-import { spawnSync } from "node:child_process";
-import { fileURLToPath } from "node:url";
-import path from "node:path";
-import { mkdirSync, rmSync } from "node:fs";
-
-const here = path.dirname(fileURLToPath(import.meta.url));
-const packageRoot = path.resolve(here, "..");
-const repoRoot = path.resolve(packageRoot, "..", "..");
-const cratePath = path.join(repoRoot, "crates", "sidecar-browser");
-const outDir = path.join(packageRoot, "dist", "sidecar-wasm-web");
-
-mkdirSync(path.join(packageRoot, "dist"), { recursive: true });
-
-const result = spawnSync(
-	"wasm-pack",
-	[
-		"build",
-		cratePath,
-		"--release",
-		"--target",
-		"web",
-		"--out-dir",
-		outDir,
-		"--out-name",
-		"secure_exec_sidecar_browser",
-	],
-	{ stdio: "inherit" },
-);
-
-if (result.error) {
-	console.error(
-		"Failed to run wasm-pack. Install it from https://rustwasm.github.io/wasm-pack/",
-	);
-	console.error(result.error.message);
-	process.exit(1);
-}
-
-if (result.status !== 0) {
-	process.exit(result.status ?? 1);
-}
-
-// wasm-pack drops a `.gitignore` ("*") and its own package.json in the out dir;
-// the `.gitignore` would exclude the wasm from the published npm tarball, so
-// remove it (the assets are shipped via this package's `files: ["dist"]`).
-rmSync(path.join(outDir, ".gitignore"), { force: true });
-
-console.log("Built dist/sidecar-wasm-web/ (web-target converged kernel)");
diff --git a/packages/browser/scripts/build-sidecar-wasm.mjs b/packages/browser/scripts/build-sidecar-wasm.mjs
deleted file mode 100644
index de63bb332..000000000
--- a/packages/browser/scripts/build-sidecar-wasm.mjs
+++ /dev/null
@@ -1,33 +0,0 @@
-#!/usr/bin/env node
-// Builds the converged browser sidecar (crates/sidecar-browser) to a
-// wasm-bindgen Node package under .cache/sidecar-wasm, used by the converged
-// integration test to drive the REAL wasm kernel end to end.
-//
-// Requires `wasm-pack` on PATH. Targets nodejs so the bindings load directly in
-// vitest/Node; the browser harness uses the same crate built for the web.
-
-import { spawnSync } from "node:child_process";
-import { fileURLToPath } from "node:url";
-import path from "node:path";
-
-const here = path.dirname(fileURLToPath(import.meta.url));
-const packageRoot = path.resolve(here, "..");
-const repoRoot = path.resolve(packageRoot, "..", "..");
-const cratePath = path.join(repoRoot, "crates", "sidecar-browser");
-const outDir = path.join(packageRoot, ".cache", "sidecar-wasm");
-
-const result = spawnSync(
-	"wasm-pack",
-	["build", cratePath, "--dev", "--target", "nodejs", "--out-dir", outDir],
-	{ stdio: "inherit" },
-);
-
-if (result.error) {
-	console.error(
-		"Failed to run wasm-pack. Install it from https://rustwasm.github.io/wasm-pack/",
-	);
-	console.error(result.error.message);
-	process.exit(1);
-}
-
-process.exit(result.status ?? 1);
diff --git a/packages/browser/scripts/check-bridge-contract.mjs b/packages/browser/scripts/check-bridge-contract.mjs
deleted file mode 100644
index c1524001a..000000000
--- a/packages/browser/scripts/check-bridge-contract.mjs
+++ /dev/null
@@ -1,415 +0,0 @@
-#!/usr/bin/env node
-import fs from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const packageRoot = path.resolve(scriptDir, "..");
-const repoRoot = path.resolve(packageRoot, "..", "..");
-const contractPath = path.join(
-	repoRoot,
-	"crates",
-	"bridge",
-	"bridge-contract.json",
-);
-const workerPath = path.join(packageRoot, "src", "worker.ts");
-const runtimePath = path.join(packageRoot, "src", "runtime.ts");
-const runtimeDriverPath = path.join(packageRoot, "src", "runtime-driver.ts");
-const syncBridgePath = path.join(packageRoot, "src", "sync-bridge.ts");
-
-const contract = JSON.parse(fs.readFileSync(contractPath, "utf8"));
-const workerSource = fs.readFileSync(workerPath, "utf8");
-const runtimeSource = fs.readFileSync(runtimePath, "utf8");
-const runtimeDriverSource = fs.readFileSync(runtimeDriverPath, "utf8");
-const syncBridgeSource = fs.readFileSync(syncBridgePath, "utf8");
-// Converged servicer modules: fs/net/dns/dgram/module guest ops are serviced by
-// the converged wasm kernel (kernel-routed), NOT by runtime-driver.ts's
-// handleSyncBridgeOperation (which now only handles host-capability families
-// child_process.* / process.signal_state). Gather their handled-op declarations
-// so the sync-bridge-operation consistency check covers the converged path.
-const convergedSource = [
-	"converged-fs-bridge.ts",
-	"converged-net-bridge.ts",
-	"converged-dgram-bridge.ts",
-	"converged-pty-bridge.ts",
-	"converged-module-servicer.ts",
-	"converged-sync-bridge-handler.ts",
-]
-	.map((file) => fs.readFileSync(path.join(packageRoot, "src", file), "utf8"))
-	.join("\n");
-
-const contractMethods = new Map();
-for (const group of contract.groups ?? []) {
-	for (const name of group.names ?? []) {
-		contractMethods.set(name, group.convention);
-	}
-}
-
-const allowedBrowserOnlyGlobals = new Set([
-	"__agentOSEncoding",
-	"__agentOSWasiHost",
-	"__agentOSTtyState",
-	"__agentOSVirtualOs",
-	"__runtimeProcessCwdOverride",
-	"_currentModule",
-	"_fs",
-	"_fsModule",
-	"_moduleCache",
-	"_networkFetchRaw",
-	"_osConfig",
-	"_processConfig",
-]);
-
-// Contracted names that the browser runtime intentionally covers through
-// browser-specific facades instead of one global per native bridge symbol.
-const browserFacadeContractGlobals = new Set([
-	"_fsAccessAsync",
-	"_fsChmod",
-	"_fsChmodAsync",
-	"_fsChown",
-	"_fsChownAsync",
-	"_fsExists",
-	"_fsLink",
-	"_fsLinkAsync",
-	"_fsLstat",
-	"_fsLstatAsync",
-	"_fsLutimes",
-	"_fsLutimesAsync",
-	"_fsMkdir",
-	"_fsMkdirAsync",
-	"_fsReadDir",
-	"_fsReadDirAsync",
-	"_fsReadFile",
-	"_fsReadFileAsync",
-	"_fsReadFileBinary",
-	"_fsReadFileBinaryAsync",
-	"_fsReadlink",
-	"_fsReadlinkAsync",
-	"_fsRename",
-	"_fsRenameAsync",
-	"_fsRmdir",
-	"_fsRmdirAsync",
-	"_fsStat",
-	"_fsStatAsync",
-	"_fsSymlink",
-	"_fsSymlinkAsync",
-	"_fsTruncate",
-	"_fsTruncateAsync",
-	"_fsUnlink",
-	"_fsUnlinkAsync",
-	"_fsUtimes",
-	"_fsUtimesAsync",
-	"_fsWriteFile",
-	"_fsWriteFileAsync",
-	"_fsWriteFileBinary",
-	"_fsWriteFileBinaryAsync",
-	"fs.closeSync",
-	"fs.fstatSync",
-	"fs.futimesSync",
-	"fs.openSync",
-	"fs.readSync",
-	"fs.writeSync",
-	"process.cpuUsage",
-	"process.memoryUsage",
-	"process.resourceUsage",
-	"process.versions",
-]);
-
-// Contracted native bridge names that are not browser-installed yet. Keeping
-// this list explicit makes browser contract coverage drift fail closed.
-const browserUnsupportedContractGlobals = new Set([
-	"_benchNoop",
-	"_benchNetTcpMetricsResetRaw",
-	"_benchNetTcpMetricsSnapshotRaw",
-	"_dynamicImport",
-	"_fsReadRaw",
-	"_fsWriteFileBinaryRaw",
-	"_fsWriteRaw",
-	"_fsWritevRaw",
-	"_kernelIsattyRaw",
-	"_kernelTtySizeRaw",
-	"_kernelPollRaw",
-	"_kernelStdinRead",
-	"_kernelStdinReadRaw",
-	"_kernelStdioWriteRaw",
-	"_netReserveTcpPortRaw",
-	"_netReleaseTcpPortRaw",
-	"_netServerAcceptRaw",
-	"_netServerCloseRaw",
-	"_netServerListenRaw",
-	"_netSocketConnectRaw",
-	"_netSocketDestroyRaw",
-	"_netSocketEndRaw",
-	"_netSocketGetTlsClientHelloRaw",
-	"_netSocketPollRaw",
-	"_netSocketReadRaw",
-	"_netSocketSetKeepAliveRaw",
-	"_netSocketSetNoDelayRaw",
-	"_netSocketTlsQueryRaw",
-	"_netSocketUpgradeTlsRaw",
-	"_netSocketWaitConnectRaw",
-	"_netSocketWriteRaw",
-	"_networkDnsLookupSyncRaw",
-	"_networkDnsResolveRaw",
-	"_networkHttp2ServerCloseRaw",
-	"_networkHttp2ServerListenRaw",
-	"_networkHttp2ServerPollRaw",
-	"_networkHttp2ServerRespondRaw",
-	"_networkHttp2ServerWaitRaw",
-	"_networkHttp2SessionCloseRaw",
-	"_networkHttp2SessionConnectRaw",
-	"_networkHttp2SessionDestroyRaw",
-	"_networkHttp2SessionGoawayRaw",
-	"_networkHttp2SessionPollRaw",
-	"_networkHttp2SessionRequestRaw",
-	"_networkHttp2SessionSetLocalWindowSizeRaw",
-	"_networkHttp2SessionSettingsRaw",
-	"_networkHttp2SessionWaitRaw",
-	"_networkHttp2StreamCloseRaw",
-	"_networkHttp2StreamEndRaw",
-	"_networkHttp2StreamPauseRaw",
-	"_networkHttp2StreamPushStreamRaw",
-	"_networkHttp2StreamRespondRaw",
-	"_networkHttp2StreamRespondWithFileRaw",
-	"_networkHttp2StreamResumeRaw",
-	"_networkHttp2StreamWriteRaw",
-	"_networkHttpServerCloseRaw",
-	"_networkHttpServerListenRaw",
-	"_networkHttpServerRequestRaw",
-	"_networkHttpServerRespondRaw",
-	"_networkHttpServerWaitRaw",
-	"_processKill",
-	"_ptySetRawMode",
-	"_pythonRpc",
-	"_pythonStdinRead",
-	"_sqliteConstantsRaw",
-	"_sqliteDatabaseCheckpointRaw",
-	"_sqliteDatabaseCloseRaw",
-	"_sqliteDatabaseExecRaw",
-	"_sqliteDatabaseLocationRaw",
-	"_sqliteDatabaseOpenRaw",
-	"_sqliteDatabasePrepareRaw",
-	"_sqliteDatabaseQueryRaw",
-	"_sqliteStatementAllRaw",
-	"_sqliteStatementColumnsRaw",
-	"_sqliteStatementFinalizeRaw",
-	"_sqliteStatementGetRaw",
-	"_sqliteStatementRunRaw",
-	"_sqliteStatementSetAllowBareNamedParametersRaw",
-	"_sqliteStatementSetAllowUnknownNamedParametersRaw",
-	"_sqliteStatementSetReadBigIntsRaw",
-	"_sqliteStatementSetReturnArraysRaw",
-	"_tlsGetCiphersRaw",
-	"_upgradeSocketDestroyRaw",
-	"_upgradeSocketEndRaw",
-	"_upgradeSocketWriteRaw",
-	"_vmCreateContext",
-	"_vmRunInContext",
-	"_vmRunInThisContext",
-]);
-
-const exposedGlobals = new Set(
-	[...workerSource.matchAll(/exposeCustomGlobal\(\s*"([^"]+)"/g)].map(
-		(match) => match[1],
-	),
-);
-
-const errors = [];
-
-function sorted(values) {
-	return [...values].sort((a, b) => a.localeCompare(b));
-}
-
-function sameSet(left, right) {
-	if (left.size !== right.size) return false;
-	for (const value of left) {
-		if (!right.has(value)) return false;
-	}
-	return true;
-}
-
-function reportSetDifference(label, left, right) {
-	for (const value of sorted(left)) {
-		if (!right.has(value)) {
-			errors.push(`${value} is ${label}`);
-		}
-	}
-}
-
-function escapeRegExp(value) {
-	return value.replace(/[.*+?^${}()|[\]\\]/g, "\\$&");
-}
-
-function browserInstalledConvention(name) {
-	const start = workerSource.search(
-		new RegExp(`exposeCustomGlobal\\(\\s*"${escapeRegExp(name)}"`),
-	);
-	if (start < 0) return undefined;
-	const body = workerSource.slice(start, workerSource.indexOf("\n\t);", start));
-	if (body.includes("makeApplySyncPromise(")) return "syncPromise";
-	if (body.includes("makeApplySync(")) return "syncOrSyncPromise";
-	if (body.includes("makeApplyPromise(") || /\bapply\s*\(/.test(body)) {
-		return "async";
-	}
-	return "unknown";
-}
-
-function conventionCompatible(actual, expected) {
-	return (
-		actual === expected ||
-		(actual === "syncOrSyncPromise" &&
-			(expected === "sync" || expected === "syncPromise"))
-	);
-}
-
-function checkInstalledConvention(name) {
-	const installedConvention = browserInstalledConvention(name);
-	if (
-		installedConvention !== undefined &&
-		!conventionCompatible(installedConvention, contractMethods.get(name))
-	) {
-		errors.push(
-			`${name} is installed as ${installedConvention} in worker.ts but bridge-contract.json lists ${contractMethods.get(name)}`,
-		);
-	}
-}
-
-for (const name of exposedGlobals) {
-	if (!name.startsWith("_") && !name.startsWith("__")) {
-		continue;
-	}
-	if (allowedBrowserOnlyGlobals.has(name)) {
-		continue;
-	}
-	if (contractMethods.has(name)) {
-		checkInstalledConvention(name);
-	} else {
-		errors.push(`${name} is installed from worker.ts but not in bridge-contract.json or the browser-only allowlist`);
-	}
-}
-
-for (const name of sorted(contractMethods.keys())) {
-	if (
-		!exposedGlobals.has(name) &&
-		!browserFacadeContractGlobals.has(name) &&
-		!browserUnsupportedContractGlobals.has(name)
-	) {
-		errors.push(
-			`${name} is listed in bridge-contract.json but is not installed, covered by a browser facade, or explicitly marked unsupported`,
-		);
-	}
-}
-
-for (const name of sorted(browserFacadeContractGlobals)) {
-	if (!contractMethods.has(name)) {
-		errors.push(`${name} is listed as browser facade-covered but is missing from bridge-contract.json`);
-	}
-}
-
-for (const name of sorted(browserUnsupportedContractGlobals)) {
-	if (!contractMethods.has(name)) {
-		errors.push(`${name} is listed as browser-unsupported but is missing from bridge-contract.json`);
-	}
-}
-
-const runtimeGlobalReferences = new Set(
-	[...runtimeSource.matchAll(/\bglobalThis\.(_{1,2}[A-Za-z0-9]+)/g)].map(
-		(match) => match[1],
-	),
-);
-for (const name of sorted(runtimeGlobalReferences)) {
-	if (allowedBrowserOnlyGlobals.has(name)) {
-		continue;
-	}
-	if (contractMethods.has(name)) {
-		if (!exposedGlobals.has(name)) {
-			errors.push(`${name} is referenced from runtime.ts but is not installed in worker.ts`);
-		} else {
-			checkInstalledConvention(name);
-		}
-	} else {
-		errors.push(`${name} is referenced from runtime.ts but not in bridge-contract.json or the browser-only allowlist`);
-	}
-}
-
-const syncOperationList = syncBridgeSource.match(
-	/export const BROWSER_SYNC_BRIDGE_OPERATIONS = \[([\s\S]*?)\] as const;/,
-);
-if (!syncOperationList) {
-	errors.push(
-		"BROWSER_SYNC_BRIDGE_OPERATIONS is missing from sync-bridge.ts",
-	);
-} else {
-	const declaredOperations = new Set(
-		[...syncOperationList[1].matchAll(/"([^"]+)"/g)].map(
-			(match) => match[1],
-		),
-	);
-	const workerOperations = new Set(
-		[
-			...workerSource.matchAll(
-				/syncBridge\.request(?:Void|Text|NullableText|Binary|Json)(?:<[^>]+>)?\(\s*"([^"]+)"/g,
-			),
-		].map((match) => match[1]),
-	);
-	const convergedOperations = new Set(
-		[
-			...convergedSource.matchAll(
-				/"((?:fs|module|dgram|pty)\.[a-zA-Z0-9_]+)"/g,
-			),
-		].map((match) => match[1]),
-	);
-	// "Handled" = the union of (a) the legacy host-capability fallback in
-	// runtime-driver.ts (child_process.* / process.* / network.* via handleSyncBridgeOperation)
-	// and (b) the converged servicer's kernel-routed families (fs/module/net/dns/
-	// dgram/pty), declared as string literals in the converged-* modules.
-	const driverOperations = new Set([
-		...[
-			...runtimeDriverSource.matchAll(
-				/case "((?:crypto|child_process|process|network)\.[^"]+)":/g,
-			),
-		].map((match) => match[1]),
-		// Only the sync-bridge families declared as BROWSER_SYNC_BRIDGE_OPERATIONS:
-		// fs/module/dgram/pty. (net.*/dns.lookup ride the separate `guest_kernel_call`
-		// channel directly from the worker's net module, not the sync-bridge op list,
-		// so they are intentionally NOT declared here.)
-		...convergedOperations,
-	]);
-
-	const emittableOperations = new Set([
-		...workerOperations,
-		...convergedOperations,
-	]);
-	if (!sameSet(emittableOperations, declaredOperations)) {
-		reportSetDifference(
-			"called by worker.ts but missing from BROWSER_SYNC_BRIDGE_OPERATIONS",
-			emittableOperations,
-			declaredOperations,
-		);
-		reportSetDifference(
-			"declared in BROWSER_SYNC_BRIDGE_OPERATIONS but not called by worker.ts",
-			declaredOperations,
-			emittableOperations,
-		);
-	}
-	if (!sameSet(driverOperations, declaredOperations)) {
-		reportSetDifference(
-			"handled by runtime-driver.ts but missing from BROWSER_SYNC_BRIDGE_OPERATIONS",
-			driverOperations,
-			declaredOperations,
-		);
-		reportSetDifference(
-			"declared in BROWSER_SYNC_BRIDGE_OPERATIONS but not handled by runtime-driver.ts",
-			declaredOperations,
-			driverOperations,
-		);
-	}
-}
-
-if (errors.length > 0) {
-	console.error("Browser bridge contract drift detected:");
-	for (const error of errors) {
-		console.error(`  - ${error}`);
-	}
-	process.exit(1);
-}
diff --git a/packages/browser/scripts/check-signal-table.mjs b/packages/browser/scripts/check-signal-table.mjs
deleted file mode 100644
index 56333677c..000000000
--- a/packages/browser/scripts/check-signal-table.mjs
+++ /dev/null
@@ -1,120 +0,0 @@
-#!/usr/bin/env node
-import { readFileSync } from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const packageRoot = path.resolve(scriptDir, "..");
-const repoRoot = path.resolve(packageRoot, "..", "..");
-
-const rustSource = readFileSync(
-	path.join(repoRoot, "crates", "sidecar-core", "src", "signals.rs"),
-	"utf8",
-);
-const runtimeSource = readFileSync(
-	path.join(packageRoot, "src", "runtime.ts"),
-	"utf8",
-);
-const runtimeDriverSource = readFileSync(
-	path.join(packageRoot, "src", "runtime-driver.ts"),
-	"utf8",
-);
-const signalSource = readFileSync(
-	path.join(packageRoot, "src", "signals.ts"),
-	"utf8",
-);
-
-const rustSignals = parseRustSignalTable(rustSource);
-const browserSignalTables = [
-	{
-		label: "browser signal module",
-		table: parseBrowserSignalModule(signalSource),
-	},
-];
-rustSignals.delete("0");
-
-const errors = [];
-for (const { label, table } of browserSignalTables) {
-	for (const [name, value] of sortedEntries(rustSignals)) {
-		if (table.get(name) !== value) {
-			errors.push(
-				`${name} is ${table.get(name) ?? "missing"} in ${label} but ${value} in sidecar-core`,
-			);
-		}
-	}
-	for (const [name] of sortedEntries(table)) {
-		if (!rustSignals.has(name)) {
-			errors.push(`${name} exists in ${label} but not in sidecar-core`);
-		}
-	}
-}
-
-if (!signalSource.includes("return signal > 0 ? 128 + signal : null;")) {
-	errors.push(
-		"browser defaultSignalExitCode must remain the shared POSIX 128 + signal rule",
-	);
-}
-if (
-	!runtimeSource.includes('import { PROCESS_SIGNAL_NUMBERS } from "./signals.js";') ||
-	!runtimeSource.includes("JSON.stringify(PROCESS_SIGNAL_NUMBERS)")
-) {
-	errors.push(
-		"runtime child_process polyfill must consume PROCESS_SIGNAL_NUMBERS from src/signals.ts",
-	);
-}
-if (/const signalNumbers = \{[\s\S]*?\n\s*};/.test(runtimeSource)) {
-	errors.push("runtime child_process polyfill must not declare a local signal table");
-}
-if (
-	!runtimeDriverSource.includes("parseProcessSignalStateArgs") ||
-	!runtimeDriverSource.includes("applyProcessSignalStateUpdate")
-) {
-	errors.push(
-		"runtime driver must consume process signal-state helpers from src/signals.ts",
-	);
-}
-if (/function parseProcessSignalStateArgs/.test(runtimeDriverSource)) {
-	errors.push("runtime driver must not declare a local signal-state parser");
-}
-if (/function applyProcessSignalStateUpdate/.test(runtimeDriverSource)) {
-	errors.push("runtime driver must not declare a local signal-state updater");
-}
-
-if (errors.length > 0) {
-	console.error("Browser signal table drift detected:");
-	for (const error of errors) {
-		console.error(`  - ${error}`);
-	}
-	process.exit(1);
-}
-
-function parseRustSignalTable(source) {
-	const match = source.match(/pub fn signal_number_from_name[\s\S]*?match signal \{([\s\S]*?)\n\s*}/);
-	if (!match) {
-		throw new Error("Unable to find sidecar-core signal_number_from_name table");
-	}
-	const table = new Map();
-	for (const entry of match[1].matchAll(/((?:"[^"]+"\s*(?:\|\s*)?)+)\s*=>\s*Some\((\d+)\)/g)) {
-		const value = Number(entry[2]);
-		for (const name of entry[1].matchAll(/"([^"]+)"/g)) {
-			table.set(name[1], value);
-		}
-	}
-	return table;
-}
-
-function parseBrowserSignalModule(source) {
-	const match = source.match(/const PROCESS_SIGNAL_NUMBERS: Record<string, number> = \{([\s\S]*?)\n};/);
-	if (!match) {
-		throw new Error("Unable to find browser PROCESS_SIGNAL_NUMBERS table");
-	}
-	const table = new Map();
-	for (const entry of match[1].matchAll(/\bSIG([A-Z0-9]+):\s*(\d+),/g)) {
-		table.set(entry[1], Number(entry[2]));
-	}
-	return table;
-}
-
-function sortedEntries(map) {
-	return [...map.entries()].sort(([left], [right]) => left.localeCompare(right));
-}
diff --git a/packages/browser/scripts/check-wasi-surface.mjs b/packages/browser/scripts/check-wasi-surface.mjs
deleted file mode 100644
index bc8d594ca..000000000
--- a/packages/browser/scripts/check-wasi-surface.mjs
+++ /dev/null
@@ -1,118 +0,0 @@
-#!/usr/bin/env node
-// Convergence guard for the SINGLE shared WASI preview1 runner.
-//
-// The browser no longer maintains its own WASI runner: `src/wasi-polyfill.ts`
-// is generated from the native runner (`crates/execution/assets/runners/
-// wasi-module.js`) by `generate-wasi-polyfill.mjs`. So the only drift that can
-// happen now is (1) the generated browser file being stale vs the native source,
-// or (2) the native runner's import surface drifting from the WASI manifest.
-// This script checks both; the old native-vs-browser parity comparison is moot
-// because they are literally the same source.
-import { readFileSync } from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import {
-	BROWSER_WASI_POLYFILL_PATH,
-	NATIVE_WASI_RUNNER_PATH,
-	buildBrowserWasiPolyfill,
-} from "./generate-wasi-polyfill.mjs";
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const packageRoot = path.resolve(scriptDir, "..");
-const repoRoot = path.resolve(packageRoot, "..", "..");
-
-const errors = [];
-
-// (1) The committed browser runner must equal the generator's current output.
-const expected = buildBrowserWasiPolyfill();
-const actual = readFileSync(BROWSER_WASI_POLYFILL_PATH, "utf8");
-if (expected !== actual) {
-	errors.push(
-		"packages/browser/src/wasi-polyfill.ts is stale vs the shared native WASI runner; run `pnpm --dir packages/browser generate:wasi-polyfill`",
-	);
-}
-
-// (2) The native runner's import surface must match the WASI preview1 manifest.
-const nativeWasiSource = readFileSync(NATIVE_WASI_RUNNER_PATH, "utf8");
-const wasiPreview1Imports = new Set(
-	JSON.parse(
-		readFileSync(
-			path.join(
-				repoRoot,
-				"crates",
-				"execution",
-				"assets",
-				"wasi-preview1-imports.json",
-			),
-			"utf8",
-		),
-	),
-);
-const nativeImports = parseWasiImports(nativeWasiSource, "native WASI runner");
-for (const name of sorted(wasiPreview1Imports)) {
-	if (!nativeImports.has(name)) {
-		errors.push(`${name} is listed in the WASI manifest but missing in native`);
-	}
-}
-for (const name of sorted(nativeImports)) {
-	if (!wasiPreview1Imports.has(name)) {
-		errors.push(`${name} is exported by native WASI but missing in the WASI manifest`);
-	}
-}
-
-// (3) Both the native and browser WASI tests must keep exercising the shared
-// escape/permission tokens that prove kernel-routed confinement (S3).
-const nativeWasiTestSource = readFileSync(
-	path.join(repoRoot, "crates", "execution", "tests", "wasm.rs"),
-	"utf8",
-);
-const browserWasiTestSource = readFileSync(
-	path.join(packageRoot, "tests", "browser", "runtime-driver.spec.ts"),
-	"utf8",
-);
-assertSourceMentions(nativeWasiTestSource, "native WASI test", [
-	"wasm_escape_preopen_module",
-	"../../../../etc/passwd",
-	"(i32.const 44)",
-	"wasm_execution_rejects_path_open_escape_outside_preopen",
-]);
-assertSourceMentions(browserWasiTestSource, "browser WASI test", [
-	"maps browser WASI preopen escapes to NOENT",
-	"../../../../etc/passwd",
-	'message: "escape:44\\n"',
-	"routes browser WASI path_open through filesystem permissions",
-	'message: "errno:2\\n"',
-	"permissionDecisions.deniedFsReads",
-]);
-
-if (errors.length > 0) {
-	console.error("Shared WASI runner drift detected:");
-	for (const error of errors) {
-		console.error(`  - ${error}`);
-	}
-	process.exit(1);
-}
-
-function parseWasiImports(source, label) {
-	const match = source.match(/this\.wasiImport\s*=\s*\{\{?([\s\S]*?)\n\s*\}\}?;/);
-	if (!match) {
-		throw new Error(`Unable to find ${label} wasiImport table`);
-	}
-	return new Set(
-		[...match[1].matchAll(/^\s*([a-z][a-z0-9_]*)\s*:/gm)].map(
-			(entry) => entry[1],
-		),
-	);
-}
-
-function assertSourceMentions(source, label, tokens) {
-	for (const token of tokens) {
-		if (!source.includes(token)) {
-			errors.push(`${label} must exercise shared WASI token ${token}`);
-		}
-	}
-}
-
-function sorted(values) {
-	return [...values].sort((left, right) => left.localeCompare(right));
-}
diff --git a/packages/browser/scripts/generate-wasi-polyfill.mjs b/packages/browser/scripts/generate-wasi-polyfill.mjs
deleted file mode 100644
index 37c8b5a87..000000000
--- a/packages/browser/scripts/generate-wasi-polyfill.mjs
+++ /dev/null
@@ -1,205 +0,0 @@
-#!/usr/bin/env node
-// Generates packages/browser/src/wasi-polyfill.ts from the single shared
-// native WASI preview1 runner (crates/execution/assets/runners/wasi-module.js),
-// wrapping it with a browser-backend host seam (globalThis.__agentOSWasiHost).
-// This is item C of BROWSER-CONVERGENCE-ARCHITECTURE.md: ONE shared preview1
-// runner consumed by both backends.
-import { readFileSync, writeFileSync } from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const packageRoot = path.resolve(scriptDir, "..");
-const repoRoot = path.resolve(packageRoot, "..", "..");
-
-const SYNC_READ_LIMIT_BYTES = 16 * 1024 * 1024;
-
-export const NATIVE_WASI_RUNNER_PATH = path.join(
-	repoRoot,
-	"crates",
-	"execution",
-	"assets",
-	"runners",
-	"wasi-module.js",
-);
-export const BROWSER_WASI_POLYFILL_PATH = path.join(
-	packageRoot,
-	"src",
-	"wasi-polyfill.ts",
-);
-
-/** Build the browser wasi-polyfill.ts content from the shared native runner. */
-export function buildBrowserWasiPolyfill() {
-	const nativeSource = readFileSync(NATIVE_WASI_RUNNER_PATH, "utf8");
-	return buildFromNativeSource(nativeSource);
-}
-
-function buildFromNativeSource(nativeSource) {
-
-// Native substitutes the read-limit build placeholder in wasm.rs; do the same
-// here so the browser bundle carries a concrete number (the host-seam ternary
-// short-circuits before this token, but keep the source valid + free of the
-// native-only placeholder).
-const PLACEHOLDER = "__SECURE_EXEC_WASM_SYNC_READ_LIMIT_BYTES__";
-if (!nativeSource.includes(PLACEHOLDER)) {
-	throw new Error(
-		`native WASI runner no longer contains ${PLACEHOLDER}; update generator`,
-	);
-}
-const substituted = nativeSource
-	.split(PLACEHOLDER)
-	.join(String(SYNC_READ_LIMIT_BYTES));
-
-// Escape for embedding in a JS template literal.
-const escaped = substituted
-	.replace(/\\/g, "\\\\")
-	.replace(/`/g, "\\`")
-	.replace(/\$\{/g, "\\${");
-
-const banner = `// @generated by packages/browser/scripts/generate-wasi-polyfill.mjs
-// Source: crates/execution/assets/runners/wasi-module.js (the single shared
-// WASI preview1 runner). DO NOT EDIT BY HAND. Run \`pnpm generate:wasi-polyfill\`.
-`;
-
-// The browser backend host seam. Native populates __agentOSWasiHost from its own
-// host globals; the browser converged worker supplies the equivalents the runner
-// needs. Two pieces:
-//   1. __agentOSWasiHost: builtin resolution via the guest CJS require + the sync
-//      read cap. Stdio fd sync-RPC + fd-handle lookup are gated behind
-//      AGENTOS_WASI_STDIO_SYNC_RPC (unset in the browser), so fd 1/2 ride
-//      globalThis.process.{stdout,stderr} like a native non-sidecar run.
-//   2. A module-scoped `Buffer`: the shared runner uses Node's global Buffer, but
-//      the browser guest exposes no Buffer global and has no `buffer` polyfill, so
-//      provide a Uint8Array-subclass shim the nested runner class closes over.
-//      Native never reaches this branch (its globalThis.Buffer is truthy).
-const seam = `\t\tglobalThis.__agentOSWasiHost = {
-\t\t\trequireBuiltin: (name) =>
-\t\t\t\tglobalThis.require(String(name).replace(/^node:/, "")),
-\t\t\tsyncReadLimitBytes: ${SYNC_READ_LIMIT_BYTES},
-\t\t\t// Browser fs descriptors are a JS handle table, not real host OS fds with
-\t\t\t// a kernel offset, so locally-opened files must use the offset-aware file
-\t\t\t// branches (explicit position) rather than host-passthrough null reads.
-\t\t\tdisableLocalFdPassthrough: true,
-\t\t\t// Guest stdin is delivered through the runtime process object, not a kernel
-\t\t\t// fd, so read the queued bytes from process.stdin directly.
-\t\t\treadStdin: (maxBytes) =>
-\t\t\t\t(globalThis.process &&
-\t\t\t\t\tglobalThis.process.stdin &&
-\t\t\t\t\ttypeof globalThis.process.stdin.read === "function"
-\t\t\t\t\t? globalThis.process.stdin.read(maxBytes)
-\t\t\t\t\t: null),
-\t\t\t// Queued stdin byte count for poll_oneoff readiness (does not consume).
-\t\t\tstdinReadableBytes: () =>
-\t\t\t\t(globalThis.process && globalThis.process.stdin
-\t\t\t\t\t? Number(globalThis.process.stdin.readableLength || 0)
-\t\t\t\t\t: 0),
-\t\t};
-\t\tconst Buffer =
-\t\t\t(typeof globalThis !== "undefined" && globalThis.Buffer) ||
-\t\t\t(class __AgentOsWasiBuffer extends Uint8Array {
-\t\t\t\tstatic alloc(size) { return new __AgentOsWasiBuffer(size >>> 0); }
-\t\t\t\tstatic allocUnsafe(size) { return new __AgentOsWasiBuffer(size >>> 0); }
-\t\t\t\tstatic isBuffer(value) { return value instanceof Uint8Array; }
-\t\t\t\tstatic byteLength(value, encoding) {
-\t\t\t\t\tif (value instanceof Uint8Array) return value.length;
-\t\t\t\t\tif (encoding === "base64") return Math.floor((String(value).replace(/=+$/, "").length * 3) / 4);
-\t\t\t\t\tif (encoding === "hex") return String(value).length >> 1;
-\t\t\t\t\treturn new TextEncoder().encode(String(value)).length;
-\t\t\t\t}
-\t\t\t\tstatic from(value, encodingOrOffset, length) {
-\t\t\t\t\tif (typeof value === "string") {
-\t\t\t\t\t\tconst encoding = encodingOrOffset || "utf8";
-\t\t\t\t\t\tif (encoding === "base64") {
-\t\t\t\t\t\t\tconst binary = atob(value);
-\t\t\t\t\t\t\tconst out = new __AgentOsWasiBuffer(binary.length);
-\t\t\t\t\t\t\tfor (let i = 0; i < binary.length; i += 1) out[i] = binary.charCodeAt(i) & 0xff;
-\t\t\t\t\t\t\treturn out;
-\t\t\t\t\t\t}
-\t\t\t\t\t\tif (encoding === "hex") {
-\t\t\t\t\t\t\tconst clean = String(value);
-\t\t\t\t\t\t\tconst out = new __AgentOsWasiBuffer(clean.length >> 1);
-\t\t\t\t\t\t\tfor (let i = 0; i < out.length; i += 1) out[i] = parseInt(clean.substr(i * 2, 2), 16);
-\t\t\t\t\t\t\treturn out;
-\t\t\t\t\t\t}
-\t\t\t\t\t\tconst encoded = new TextEncoder().encode(value);
-\t\t\t\t\t\tconst out = new __AgentOsWasiBuffer(encoded.length);
-\t\t\t\t\t\tout.set(encoded);
-\t\t\t\t\t\treturn out;
-\t\t\t\t\t}
-\t\t\t\t\tif (value instanceof ArrayBuffer) {
-\t\t\t\t\t\tconst offset = encodingOrOffset || 0;
-\t\t\t\t\t\tconst len = length === undefined ? value.byteLength - offset : length;
-\t\t\t\t\t\tconst view = new Uint8Array(value, offset, len);
-\t\t\t\t\t\tconst out = new __AgentOsWasiBuffer(view.length);
-\t\t\t\t\t\tout.set(view);
-\t\t\t\t\t\treturn out;
-\t\t\t\t\t}
-\t\t\t\t\tif (ArrayBuffer.isView(value)) {
-\t\t\t\t\t\tconst view = new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
-\t\t\t\t\t\tconst out = new __AgentOsWasiBuffer(view.length);
-\t\t\t\t\t\tout.set(view);
-\t\t\t\t\t\treturn out;
-\t\t\t\t\t}
-\t\t\t\t\tconst arr = Array.from(value || []);
-\t\t\t\t\tconst out = new __AgentOsWasiBuffer(arr.length);
-\t\t\t\t\tfor (let i = 0; i < arr.length; i += 1) out[i] = arr[i] & 0xff;
-\t\t\t\t\treturn out;
-\t\t\t\t}
-\t\t\t\tstatic concat(list, totalLength) {
-\t\t\t\t\tconst chunks = Array.from(list || []);
-\t\t\t\t\tif (totalLength === undefined) {
-\t\t\t\t\t\ttotalLength = 0;
-\t\t\t\t\t\tfor (const chunk of chunks) totalLength += chunk.length;
-\t\t\t\t\t}
-\t\t\t\t\tconst out = new __AgentOsWasiBuffer(totalLength >>> 0);
-\t\t\t\t\tlet offset = 0;
-\t\t\t\t\tfor (const chunk of chunks) {
-\t\t\t\t\t\tif (offset >= out.length) break;
-\t\t\t\t\t\tconst slice = offset + chunk.length > out.length ? chunk.subarray(0, out.length - offset) : chunk;
-\t\t\t\t\t\tout.set(slice, offset);
-\t\t\t\t\t\toffset += slice.length;
-\t\t\t\t\t}
-\t\t\t\t\treturn out;
-\t\t\t\t}
-\t\t\t\ttoString(encoding, start, end) {
-\t\t\t\t\tconst view = this.subarray(start || 0, end === undefined ? this.length : end);
-\t\t\t\t\tif (encoding === "base64") {
-\t\t\t\t\t\tlet binary = "";
-\t\t\t\t\t\tfor (let i = 0; i < view.length; i += 1) binary += String.fromCharCode(view[i]);
-\t\t\t\t\t\treturn btoa(binary);
-\t\t\t\t\t}
-\t\t\t\t\tif (encoding === "hex") {
-\t\t\t\t\t\tlet hex = "";
-\t\t\t\t\t\tfor (let i = 0; i < view.length; i += 1) hex += view[i].toString(16).padStart(2, "0");
-\t\t\t\t\t\treturn hex;
-\t\t\t\t\t}
-\t\t\t\t\treturn new TextDecoder().decode(view);
-\t\t\t\t}
-\t\t\t});
-`;
-
-const footer = `\t\t// Re-export the shared runner WASI class as the browser wasi module.
-\t\tmodule.exports = { WASI: globalThis.__agentOSWasiModule.WASI };
-\t\tmodule.exports.default = { WASI: globalThis.__agentOSWasiModule.WASI };
-`;
-
-	const out = `${banner}export const BROWSER_WASI_POLYFILL_CODE = \`
-${seam}${escaped}
-${footer}\`;
-`;
-	return out;
-}
-
-function isMainModule() {
-	return (
-		import.meta.url === `file://${process.argv[1]}` ||
-		process.argv[1] === fileURLToPath(import.meta.url)
-	);
-}
-
-if (isMainModule()) {
-	writeFileSync(BROWSER_WASI_POLYFILL_PATH, buildBrowserWasiPolyfill());
-	console.log(
-		"generated packages/browser/src/wasi-polyfill.ts from shared native WASI runner",
-	);
-}
diff --git a/packages/browser/scripts/run-browser-tests.mjs b/packages/browser/scripts/run-browser-tests.mjs
deleted file mode 100644
index 966d0e01e..000000000
--- a/packages/browser/scripts/run-browser-tests.mjs
+++ /dev/null
@@ -1,204 +0,0 @@
-import { spawnSync } from "node:child_process";
-import { existsSync, mkdirSync, readdirSync, rmSync } from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const packageDir = path.resolve(__dirname, "..");
-const cacheDir = path.join(packageDir, ".cache", "playwright-system-libs");
-const browsersCacheDir = path.join(packageDir, ".cache", "ms-playwright");
-const debDir = path.join(cacheDir, "deb");
-const extractedDir = path.join(cacheDir, "root");
-const libraryDirs = [
-	path.join(extractedDir, "usr", "lib", "x86_64-linux-gnu"),
-	path.join(extractedDir, "lib", "x86_64-linux-gnu"),
-];
-const systemLibraryDirs = [
-	"/usr/lib/x86_64-linux-gnu",
-	"/lib/x86_64-linux-gnu",
-	"/usr/lib",
-	"/lib",
-];
-
-const linuxRuntimePackages = [
-	{ debPrefix: "libatk1.0-0t64_", specs: ["libatk1.0-0t64"] },
-	{ debPrefix: "libatk-bridge2.0-0t64_", specs: ["libatk-bridge2.0-0t64"] },
-	{ debPrefix: "libatspi2.0-0t64_", specs: ["libatspi2.0-0t64"] },
-	{ debPrefix: "libxcomposite1_", specs: ["libxcomposite1"] },
-	{ debPrefix: "libxdamage1_", specs: ["libxdamage1"] },
-	{ debPrefix: "libxfixes3_", specs: ["libxfixes3"] },
-	{ debPrefix: "libxrandr2_", specs: ["libxrandr2"] },
-	{ debPrefix: "libxkbcommon0_", specs: ["libxkbcommon0"] },
-	{
-		debPrefix: "libasound2t64_",
-		specs: ["libasound2t64", "libasound2t64=1.2.11-1build2"],
-	},
-	{
-		debPrefix: "libgbm1_",
-		specs: ["libgbm1", "libgbm1=24.0.5-1ubuntu1"],
-	},
-	{
-		debPrefix: "libdrm2_",
-		specs: ["libdrm2", "libdrm2=2.4.120-2build1"],
-	},
-	{ debPrefix: "libwayland-server0_", specs: ["libwayland-server0"] },
-	{ debPrefix: "libxcb-randr0_", specs: ["libxcb-randr0"] },
-	{ debPrefix: "libxi6_", specs: ["libxi6"] },
-];
-
-const requiredLibraries = [
-	"libatk-1.0.so.0",
-	"libatk-bridge-2.0.so.0",
-	"libatspi.so.0",
-	"libXcomposite.so.1",
-	"libXdamage.so.1",
-	"libXfixes.so.3",
-	"libXrandr.so.2",
-	"libasound.so.2",
-	"libgbm.so.1",
-	"libxkbcommon.so.0",
-	"libdrm.so.2",
-	"libwayland-server.so.0",
-	"libxcb-randr.so.0",
-	"libXi.so.6",
-];
-
-function run(command, args, options = {}) {
-	const result = spawnSync(command, args, {
-		cwd: options.cwd ?? packageDir,
-		env: options.env ?? process.env,
-		stdio: options.stdio ?? "inherit",
-		encoding: "utf8",
-	});
-	if (result.status !== 0) {
-		const commandLine = [command, ...args].join(" ");
-		const error = new Error(`Command failed (${result.status}): ${commandLine}`);
-		error.stdout = result.stdout ?? "";
-		error.stderr = result.stderr ?? "";
-		throw error;
-	}
-	return result;
-}
-
-function tryRun(command, args, options = {}) {
-	return spawnSync(command, args, {
-		cwd: options.cwd ?? packageDir,
-		env: options.env ?? process.env,
-		stdio: options.stdio ?? "pipe",
-		encoding: "utf8",
-	});
-}
-
-function libraryPresentInDirs(name, dirs) {
-	return dirs.some((dir) => existsSync(path.join(dir, name)));
-}
-
-function cachedLibraryPresent(name) {
-	return libraryPresentInDirs(name, libraryDirs);
-}
-
-function systemLibraryPresent(name) {
-	return libraryPresentInDirs(name, systemLibraryDirs);
-}
-
-function headlessShellPresent() {
-	if (!existsSync(browsersCacheDir)) {
-		return false;
-	}
-
-	for (const entry of readdirSync(browsersCacheDir)) {
-		if (!entry.startsWith("chromium_headless_shell-")) {
-			continue;
-		}
-
-		const executablePath = path.join(
-			browsersCacheDir,
-			entry,
-			"chrome-headless-shell-linux64",
-			"chrome-headless-shell",
-		);
-		if (existsSync(executablePath)) {
-			return true;
-		}
-	}
-
-	return false;
-}
-
-function ensurePlaywrightBrowser(env) {
-	if (headlessShellPresent()) {
-		return;
-	}
-
-	mkdirSync(browsersCacheDir, { recursive: true });
-	run("pnpm", ["exec", "playwright", "install", "--only-shell", "chromium"], {
-		env,
-	});
-}
-
-function ensureBrowserRuntimeLibraries() {
-	if (process.platform !== "linux") {
-		return [];
-	}
-	if (requiredLibraries.every(systemLibraryPresent)) {
-		return [];
-	}
-	if (requiredLibraries.every(cachedLibraryPresent)) {
-		return libraryDirs.filter(existsSync);
-	}
-
-	mkdirSync(debDir, { recursive: true });
-	rmSync(extractedDir, { recursive: true, force: true });
-	mkdirSync(extractedDir, { recursive: true });
-
-	for (const pkg of linuxRuntimePackages) {
-		let debFile = readdirSync(debDir).find((entry) => entry.startsWith(pkg.debPrefix) && entry.endsWith(".deb"));
-		if (!debFile) {
-			let lastFailure = null;
-			for (const spec of pkg.specs) {
-				const result = tryRun("apt-get", ["download", spec], { cwd: debDir });
-				if (result.status === 0) {
-					debFile = readdirSync(debDir).find(
-						(entry) => entry.startsWith(pkg.debPrefix) && entry.endsWith(".deb"),
-					);
-					lastFailure = null;
-					break;
-				}
-				lastFailure = result;
-			}
-			if (!debFile) {
-				const failureText = lastFailure
-					? [lastFailure.stdout, lastFailure.stderr].filter(Boolean).join("\n")
-					: "unknown apt-get failure";
-				throw new Error(`Unable to download ${pkg.debPrefix}: ${failureText}`.trim());
-			}
-		}
-		run("dpkg-deb", ["-x", path.join(debDir, debFile), extractedDir], { stdio: "inherit" });
-	}
-
-	const missing = requiredLibraries.filter((library) => !cachedLibraryPresent(library));
-	if (missing.length > 0) {
-		throw new Error(`Missing extracted browser runtime libraries: ${missing.join(", ")}`);
-	}
-
-	return libraryDirs.filter(existsSync);
-}
-
-function main() {
-	const extraLibraryDirs = ensureBrowserRuntimeLibraries();
-	const env = {
-		...process.env,
-		PLAYWRIGHT_BROWSERS_PATH: browsersCacheDir,
-		LD_LIBRARY_PATH: [...extraLibraryDirs, process.env.LD_LIBRARY_PATH]
-			.filter(Boolean)
-			.join(":"),
-	};
-
-	ensurePlaywrightBrowser(env);
-	run("pnpm", ["exec", "playwright", "test", "--project=chromium", "--workers=1"], {
-		env,
-	});
-}
-
-main();
diff --git a/packages/browser/scripts/serve-browser-tests.mjs b/packages/browser/scripts/serve-browser-tests.mjs
deleted file mode 100644
index 7fc3b0fe7..000000000
--- a/packages/browser/scripts/serve-browser-tests.mjs
+++ /dev/null
@@ -1,111 +0,0 @@
-import { createReadStream, existsSync } from "node:fs";
-import { createServer } from "node:http";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const __filename = fileURLToPath(import.meta.url);
-const __dirname = path.dirname(__filename);
-const packageDir = path.resolve(__dirname, "..");
-const port = Number.parseInt(process.env.PORT ?? "43173", 10);
-
-const routes = new Map([
-	[
-		"/secure-exec-worker.js",
-		path.join(packageDir, ".cache/browser-tests/secure-exec-worker.js"),
-	],
-	[
-		"/frontend/converged-harness.html",
-		path.join(
-			packageDir,
-			"tests/browser/fixtures/frontend/converged-harness.html",
-		),
-	],
-	[
-		"/secure-exec-converged-harness.js",
-		path.join(
-			packageDir,
-			".cache/browser-tests/secure-exec-converged-harness.js",
-		),
-	],
-	[
-		"/frontend/converged-runtime-harness.html",
-		path.join(
-			packageDir,
-			"tests/browser/fixtures/frontend/converged-runtime-harness.html",
-		),
-	],
-	[
-		"/secure-exec-converged-runtime-harness.js",
-		path.join(
-			packageDir,
-			".cache/browser-tests/secure-exec-converged-runtime-harness.js",
-		),
-	],
-	[
-		"/frontend/converged-conformance-harness.html",
-		path.join(
-			packageDir,
-			"tests/browser/fixtures/frontend/converged-conformance-harness.html",
-		),
-	],
-	[
-		"/secure-exec-converged-conformance-harness.js",
-		path.join(
-			packageDir,
-			".cache/browser-tests/secure-exec-converged-conformance-harness.js",
-		),
-	],
-]);
-
-function contentType(filePath) {
-	if (filePath.endsWith(".html")) return "text/html; charset=utf-8";
-	if (filePath.endsWith(".js")) return "text/javascript; charset=utf-8";
-	if (filePath.endsWith(".wasm")) return "application/wasm";
-	return "application/octet-stream";
-}
-
-function resolveRequestPath(urlPath) {
-	if (routes.has(urlPath)) {
-		return routes.get(urlPath);
-	}
-	if (urlPath.startsWith("/dist/")) {
-		const relative = urlPath.slice("/dist/".length);
-		if (relative.includes("..")) {
-			return null;
-		}
-		return path.join(packageDir, "dist", relative);
-	}
-	// The web-target wasm package (js glue + .wasm) served as static files.
-	if (urlPath.startsWith("/sidecar-wasm-web/")) {
-		const relative = urlPath.slice("/sidecar-wasm-web/".length);
-		if (relative.includes("..")) {
-			return null;
-		}
-		return path.join(packageDir, ".cache/browser-tests/sidecar-wasm-web", relative);
-	}
-	return null;
-}
-
-const server = createServer((request, response) => {
-	const url = new URL(request.url ?? "/", `http://${request.headers.host}`);
-	const filePath = resolveRequestPath(url.pathname);
-	if (!filePath || !existsSync(filePath)) {
-		response.writeHead(404, {
-			"content-type": "text/plain; charset=utf-8",
-		});
-		response.end("not found");
-		return;
-	}
-
-	response.writeHead(200, {
-		"content-type": contentType(filePath),
-		"cross-origin-opener-policy": "same-origin",
-		"cross-origin-embedder-policy": "require-corp",
-		"cross-origin-resource-policy": "same-origin",
-	});
-	createReadStream(filePath).pipe(response);
-});
-
-server.listen(port, "127.0.0.1", () => {
-	console.log(`secure-exec browser test server listening on http://127.0.0.1:${port}`);
-});
diff --git a/packages/browser/src/child-process-bridge.ts b/packages/browser/src/child-process-bridge.ts
deleted file mode 100644
index e92be3af6..000000000
--- a/packages/browser/src/child-process-bridge.ts
+++ /dev/null
@@ -1,89 +0,0 @@
-import { base64ToBytes, bytesToBase64, toUint8Array } from "./encoding.js";
-
-export type BrowserChildProcessBytes = {
-	__agentOSType: "bytes";
-	base64: string;
-};
-
-export type BrowserChildProcessSpawnOptions = {
-	cwd?: string;
-	env?: Record<string, string>;
-	input?: BrowserChildProcessBytes | string | Uint8Array;
-};
-
-export type BrowserChildProcessSpawnRequest = {
-	command: string;
-	args: string[];
-	options?: BrowserChildProcessSpawnOptions;
-};
-
-export type BrowserChildProcessPollEvent =
-	| { type: "stdout" | "stderr"; data: BrowserChildProcessBytes }
-	| { type: "exit"; exitCode: number; signal: null };
-
-export function encodeChildProcessBytes(
-	data: Uint8Array,
-): BrowserChildProcessBytes {
-	return {
-		__agentOSType: "bytes",
-		base64: bytesToBase64(data),
-	};
-}
-
-export function decodeChildProcessInput(
-	value: unknown,
-): Uint8Array | undefined {
-	if (value == null) {
-		return undefined;
-	}
-	if (
-		typeof value === "object" &&
-		(value as { __agentOSType?: unknown }).__agentOSType === "bytes" &&
-		typeof (value as { base64?: unknown }).base64 === "string"
-	) {
-		return base64ToBytes((value as { base64: string }).base64);
-	}
-	if (typeof value === "string") {
-		return new TextEncoder().encode(value);
-	}
-	return toUint8Array(value);
-}
-
-export function parseChildProcessSpawnRequest(
-	value: unknown,
-	label: string,
-): BrowserChildProcessSpawnRequest {
-	const parsed = typeof value === "string" ? JSON.parse(value) : value;
-	if (!parsed || typeof parsed !== "object") {
-		throw new Error(`${label} must be an object`);
-	}
-	const record = parsed as Record<string, unknown>;
-	if (typeof record.command !== "string") {
-		throw new Error(`${label}.command must be a string`);
-	}
-	if (!Array.isArray(record.args)) {
-		throw new Error(`${label}.args must be an array`);
-	}
-	const rawOptions = record.options;
-	const optionsRecord =
-		rawOptions && typeof rawOptions === "object"
-			? (rawOptions as Record<string, unknown>)
-			: {};
-	const env =
-		optionsRecord.env && typeof optionsRecord.env === "object"
-			? Object.fromEntries(
-					Object.entries(optionsRecord.env as Record<string, unknown>).map(
-						([key, envValue]) => [key, String(envValue)],
-					),
-				)
-			: undefined;
-	return {
-		command: record.command,
-		args: record.args.map((entry) => String(entry)),
-		options: {
-			cwd: typeof optionsRecord.cwd === "string" ? optionsRecord.cwd : undefined,
-			env,
-			input: optionsRecord.input as BrowserChildProcessSpawnOptions["input"],
-		},
-	};
-}
diff --git a/packages/browser/src/converged-base64.ts b/packages/browser/src/converged-base64.ts
deleted file mode 100644
index e57f45198..000000000
--- a/packages/browser/src/converged-base64.ts
+++ /dev/null
@@ -1,43 +0,0 @@
-// Standard base64 codec over byte arrays, shared by the converged bridge
-// translation layers. Self-contained (no `atob`/`btoa`) so it behaves
-// identically in a Worker, the main thread, and Node/vitest, and is binary-safe
-// (atob/btoa are latin1-only).
-
-const BASE64_ALPHABET =
-	"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-
-export function encodeBase64(bytes: Uint8Array): string {
-	let output = "";
-	for (let index = 0; index < bytes.length; index += 3) {
-		const byte0 = bytes[index];
-		const byte1 = bytes[index + 1];
-		const byte2 = bytes[index + 2];
-		const triple = (byte0 << 16) | ((byte1 ?? 0) << 8) | (byte2 ?? 0);
-		output += BASE64_ALPHABET[(triple >> 18) & 0x3f];
-		output += BASE64_ALPHABET[(triple >> 12) & 0x3f];
-		output +=
-			index + 1 < bytes.length ? BASE64_ALPHABET[(triple >> 6) & 0x3f] : "=";
-		output +=
-			index + 2 < bytes.length ? BASE64_ALPHABET[triple & 0x3f] : "=";
-	}
-	return output;
-}
-
-export function decodeBase64(input: string): Uint8Array {
-	const clean = input.replace(/[^A-Za-z0-9+/]/g, "");
-	const length = Math.floor((clean.length * 3) / 4);
-	const bytes = new Uint8Array(length);
-	let outIndex = 0;
-	for (let index = 0; index < clean.length; index += 4) {
-		const enc0 = BASE64_ALPHABET.indexOf(clean[index]);
-		const enc1 = BASE64_ALPHABET.indexOf(clean[index + 1]);
-		const enc2 = BASE64_ALPHABET.indexOf(clean[index + 2]);
-		const enc3 = BASE64_ALPHABET.indexOf(clean[index + 3]);
-		const triple =
-			(enc0 << 18) | (enc1 << 12) | ((enc2 & 0x3f) << 6) | (enc3 & 0x3f);
-		if (outIndex < length) bytes[outIndex++] = (triple >> 16) & 0xff;
-		if (enc2 !== -1 && outIndex < length) bytes[outIndex++] = (triple >> 8) & 0xff;
-		if (enc3 !== -1 && outIndex < length) bytes[outIndex++] = triple & 0xff;
-	}
-	return bytes;
-}
diff --git a/packages/browser/src/converged-dgram-bridge.ts b/packages/browser/src/converged-dgram-bridge.ts
deleted file mode 100644
index db977ac7c..000000000
--- a/packages/browser/src/converged-dgram-bridge.ts
+++ /dev/null
@@ -1,175 +0,0 @@
-// Converged dgram (UDP) bridge translation layer.
-//
-// The guest worker already issues `dgram.*` sync-bridge ops (positional args).
-// This routes them to the wasm kernel UDP socket table via `guest_kernel_call`
-// (`dgram.*` ops in `sidecar-core::guest_net`) instead of the legacy in-process
-// TS dgram sessions, and maps the kernel responses back to the exact shapes the
-// guest dgram module consumes (mirroring the legacy servicer). Buffer-size ops
-// have no kernel counterpart and are handled inline (advisory).
-
-import { encodeBase64 } from "./converged-base64.js";
-import type { ConvergedSyncResponse } from "./converged-fs-bridge.js";
-import type { GuestKernelCallRequestPayload } from "./converged-net-bridge.js";
-import { SYNC_BRIDGE_KIND_JSON } from "./sync-bridge.js";
-
-const KERNEL_DGRAM_OPERATIONS = new Set([
-	"dgram.create",
-	"dgram.bind",
-	"dgram.recv",
-	"dgram.send",
-	"dgram.close",
-	"dgram.address",
-]);
-const BUFFER_SIZE_OPERATIONS = new Set([
-	"dgram.setBufferSize",
-	"dgram.getBufferSize",
-]);
-const DEFAULT_BUFFER_SIZE = 65536;
-
-export function isConvergedDgramBridgeOperation(operation: string): boolean {
-	return (
-		KERNEL_DGRAM_OPERATIONS.has(operation) ||
-		BUFFER_SIZE_OPERATIONS.has(operation)
-	);
-}
-
-/** True if `operation` needs a wasm kernel round-trip (vs an inline response). */
-export function dgramOperationUsesKernel(operation: string): boolean {
-	return KERNEL_DGRAM_OPERATIONS.has(operation);
-}
-
-/** Inline response for buffer-size ops (no kernel counterpart; advisory). */
-export function convergedDgramInlineResponse(
-	operation: string,
-): ConvergedSyncResponse {
-	if (operation === "dgram.getBufferSize") {
-		return { kind: SYNC_BRIDGE_KIND_JSON, value: { size: DEFAULT_BUFFER_SIZE } };
-	}
-	return { kind: SYNC_BRIDGE_KIND_JSON, value: { ok: true } };
-}
-
-/** Translate a guest `dgram.*` sync op + positional args into a kernel call. */
-export function convergedDgramRequestPayload(
-	operation: string,
-	args: readonly unknown[],
-	executionId: string,
-): GuestKernelCallRequestPayload {
-	const request = buildKernelRequest(operation, args);
-	return {
-		type: "guest_kernel_call",
-		execution_id: executionId,
-		operation,
-		payload: encodeJsonBytes(request),
-	};
-}
-
-/** Map a kernel `dgram.*` JSON result back into the guest's expected shape. */
-export function convergedDgramSyncResponse(
-	operation: string,
-	result: unknown,
-): ConvergedSyncResponse {
-	const value = (result ?? {}) as Record<string, unknown>;
-	switch (operation) {
-		case "dgram.create":
-			return { kind: SYNC_BRIDGE_KIND_JSON, value: { socketId: value.socketId } };
-		case "dgram.bind":
-			return { kind: SYNC_BRIDGE_KIND_JSON, value: { ok: true } };
-		case "dgram.close":
-			return { kind: SYNC_BRIDGE_KIND_JSON, value: { ok: true } };
-		case "dgram.send":
-			return { kind: SYNC_BRIDGE_KIND_JSON, value: { bytes: value.bytes ?? 0 } };
-		case "dgram.recv": {
-			if (value.data === null || value.data === undefined) {
-				return { kind: SYNC_BRIDGE_KIND_JSON, value: null };
-			}
-			const remoteAddress = String(value.remoteAddress ?? "");
-			return {
-				kind: SYNC_BRIDGE_KIND_JSON,
-				value: {
-					type: "message",
-					data: value.data,
-					remoteAddress,
-					remotePort: value.remotePort,
-					remoteFamily: remoteAddress.includes(":") ? "IPv6" : "IPv4",
-				},
-			};
-		}
-		case "dgram.address": {
-			if (value.host === null || value.host === undefined) {
-				const error = new Error("getsockname EBADF");
-				(error as { code?: string }).code = "EBADF";
-				throw error;
-			}
-			const address = String(value.host);
-			return {
-				kind: SYNC_BRIDGE_KIND_JSON,
-				value: {
-					address,
-					port: value.port,
-					family: address.includes(":") ? "IPv6" : "IPv4",
-				},
-			};
-		}
-		default:
-			throw new Error(`converged dgram bridge has no response for ${operation}`);
-	}
-}
-
-function buildKernelRequest(
-	operation: string,
-	args: readonly unknown[],
-): Record<string, unknown> {
-	switch (operation) {
-		case "dgram.create":
-			return {};
-		case "dgram.bind": {
-			const options = (args[1] ?? {}) as { port?: unknown; address?: unknown };
-			return {
-				socketId: requireSocketId(args[0]),
-				host: typeof options.address === "string" ? options.address : "127.0.0.1",
-				port: typeof options.port === "number" ? options.port : 0,
-			};
-		}
-		case "dgram.recv":
-			return { socketId: requireSocketId(args[0]) };
-		case "dgram.send": {
-			const target = (args[2] ?? {}) as { port?: unknown; address?: unknown };
-			return {
-				socketId: requireSocketId(args[0]),
-				host: typeof target.address === "string" ? target.address : "127.0.0.1",
-				port: typeof target.port === "number" ? target.port : 0,
-				data: encodeBase64(toUint8Array(args[1])),
-			};
-		}
-		case "dgram.close":
-		case "dgram.address":
-			return { socketId: requireSocketId(args[0]) };
-		default:
-			throw new Error(`converged dgram bridge has no mapping for ${operation}`);
-	}
-}
-
-function requireSocketId(value: unknown): number {
-	const socketId = typeof value === "string" ? Number(value) : value;
-	if (typeof socketId !== "number" || Number.isNaN(socketId)) {
-		throw new Error("converged dgram bridge call requires a numeric socketId");
-	}
-	return socketId;
-}
-
-function toUint8Array(value: unknown): Uint8Array {
-	if (value instanceof Uint8Array) return value;
-	if (value instanceof ArrayBuffer) return new Uint8Array(value);
-	if (ArrayBuffer.isView(value)) {
-		return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
-	}
-	throw new Error("converged dgram send requires binary data");
-}
-
-function encodeJsonBytes(value: unknown): ArrayBuffer {
-	const bytes = new TextEncoder().encode(JSON.stringify(value));
-	return bytes.buffer.slice(
-		bytes.byteOffset,
-		bytes.byteOffset + bytes.byteLength,
-	);
-}
diff --git a/packages/browser/src/converged-driver-setup.ts b/packages/browser/src/converged-driver-setup.ts
deleted file mode 100644
index 963d6493c..000000000
--- a/packages/browser/src/converged-driver-setup.ts
+++ /dev/null
@@ -1,125 +0,0 @@
-// Converged driver servicer assembly.
-//
-// Bundles the converged executor pieces (session bootstrap, fs/net/dns handler,
-// kernel-backed module resolver, router) into a single servicer the runtime
-// driver uses to satisfy a guest's sync-bridge requests against the wasm kernel.
-//
-// The runtime driver loads this DYNAMICALLY (only when a converged sidecar is
-// configured) so the legacy, unbundled `/dist/` driver load never pulls in the
-// bare `@secure-exec/core/*` imports these modules need — those resolve only
-// when the converged runtime is esbuild-bundled.
-
-import type { CreateVmConfig } from "@secure-exec/core/vm-config";
-import type { ProtocolFramePayloadCodec } from "@secure-exec/core/protocol-frames";
-import { isConvergedDgramBridgeOperation } from "./converged-dgram-bridge.js";
-import type { ConvergedSyncResponse } from "./converged-fs-bridge.js";
-import { ConvergedExecutorSession } from "./converged-executor-session.js";
-import { ConvergedModuleServicer } from "./converged-module-servicer.js";
-import { isConvergedNetBridgeOperation } from "./converged-net-bridge.js";
-import { isConvergedPtyBridgeOperation } from "./converged-pty-bridge.js";
-import {
-	ConvergedSyncBridgeRouter,
-	type LegacySyncBridgeServicer,
-} from "./converged-sync-bridge-router.js";
-import { KernelBackedFilesystem } from "./kernel-backed-filesystem.js";
-
-export interface ConvergedServicerOptions {
-	pushFrame: (frame: Uint8Array) => Uint8Array;
-	config: CreateVmConfig;
-	codec?: ProtocolFramePayloadCodec;
-	// Sets the execution id the sidecar's execution host bridge will echo for the
-	// next `execute`, so a guest execution registers a kernel process under the
-	// same id its sync-bridge `guest_kernel_call`s use. Required for guest
-	// net/dgram (which need a kernel pid); fs/module are VM-scoped and skip it.
-	setNextExecutionId?: (executionId: string) => void;
-	// Observability: invoked when the kernel denies a guest fs read with EACCES,
-	// so callers can surface a denied-read count (the converged kernel enforces
-	// in-band, replacing the legacy TS permission-callback counter).
-	onFsReadDenied?: () => void;
-}
-
-const FS_READ_OPERATIONS = new Set([
-	"fs.readFile",
-	"fs.readFileBinary",
-	"fs.pread",
-	"fs.readDir",
-	"fs.stat",
-	"fs.lstat",
-	"fs.exists",
-	"fs.realpath",
-	"fs.readlink",
-]);
-
-export interface ConvergedServicer {
-	/**
-	 * Service one guest sync-bridge operation: fs/net/dns to the wasm handler,
-	 * module.* to the kernel-backed resolver, everything else to `legacy`.
-	 */
-	route(
-		executionId: string,
-		operation: string,
-		args: readonly unknown[],
-		legacy: LegacySyncBridgeServicer,
-	): Promise<ConvergedSyncResponse>;
-	/** Snapshot the VM root filesystem (for host persistence, e.g. OPFS). */
-	snapshotRootFilesystem(): ReturnType<
-		ConvergedExecutorSession["snapshotRootFilesystem"]
-	>;
-}
-
-export function createConvergedServicer(
-	options: ConvergedServicerOptions,
-): ConvergedServicer {
-	const session = new ConvergedExecutorSession({
-		pushFrame: options.pushFrame,
-		codec: options.codec,
-	});
-	session.bootstrap({ runtime: "java_script", config: options.config });
-	const moduleServicer = new ConvergedModuleServicer(
-		new KernelBackedFilesystem(session.transportForVm()),
-	);
-	const registeredExecutions = new Set<string>();
-
-	const ensureExecutionRegistered = (executionId: string) => {
-		if (registeredExecutions.has(executionId) || !options.setNextExecutionId) {
-			return;
-		}
-		options.setNextExecutionId(executionId);
-		session.registerExecution({ processId: executionId, args: ["node"] });
-		registeredExecutions.add(executionId);
-	};
-
-	return {
-		async route(executionId, operation, args, legacy) {
-			// Guest net/dgram/pty need a kernel process (pid); register it lazily on
-			// first use so the guest_kernel_call resolves execution_id -> pid.
-			if (
-				isConvergedNetBridgeOperation(operation) ||
-				isConvergedDgramBridgeOperation(operation) ||
-				isConvergedPtyBridgeOperation(operation)
-			) {
-				ensureExecutionRegistered(executionId);
-			}
-			const router = new ConvergedSyncBridgeRouter({
-				handler: session.handlerForExecution(executionId),
-				asyncServicers: [moduleServicer],
-				legacy,
-			});
-			try {
-				return await router.route(operation, args);
-			} catch (error) {
-				if (
-					options.onFsReadDenied &&
-					FS_READ_OPERATIONS.has(operation) &&
-					(error as { code?: string })?.code === "EACCES"
-				) {
-					options.onFsReadDenied();
-				}
-				throw error;
-			}
-		},
-		snapshotRootFilesystem() {
-			return session.snapshotRootFilesystem();
-		},
-	};
-}
diff --git a/packages/browser/src/converged-execution-host-bridge.ts b/packages/browser/src/converged-execution-host-bridge.ts
deleted file mode 100644
index f2970250e..000000000
--- a/packages/browser/src/converged-execution-host-bridge.ts
+++ /dev/null
@@ -1,95 +0,0 @@
-// Execution host bridge for the converged wasm sidecar.
-//
-// In the converged browser runtime the guest runs in the browser worker, not in
-// the wasm sidecar. But guest `net.*`/`dgram.*` syscalls need a kernel process
-// (pid) and socket ownership inside the sidecar, which is created by an `execute`
-// wire request. That request drives these host-bridge callbacks. They are
-// no-ops that just satisfy the sidecar's execution lifecycle: the only one that
-// matters is `startExecution`, which echoes the driver-provided execution id so
-// the sidecar registers the kernel process under the SAME id the guest worker
-// uses in its sync-bridge `guest_kernel_call`s.
-//
-// The wasm `BrowserJsBridge` invokes each method with a JSON request string and
-// JSON-decodes the return value.
-
-export interface ConvergedExecutionHostBridge {
-	/** Set the execution id `startExecution` will echo for the next `execute`. */
-	setNextExecutionId(executionId: string): void;
-	/** The host-bridge object passed to `new BrowserSidecarWasm(bridge)`. */
-	readonly bridge: Record<string, (requestJson: string) => unknown>;
-}
-
-export function createConvergedExecutionHostBridge(): ConvergedExecutionHostBridge {
-	let nextExecutionId = "converged-exec";
-	let contextCounter = 0;
-	let workerCounter = 0;
-
-	const bridge: Record<string, (requestJson: string) => unknown> = {
-		createJavascriptContext() {
-			contextCounter += 1;
-			return { contextId: `converged-ctx-${contextCounter}` };
-		},
-		createWasmContext() {
-			contextCounter += 1;
-			return { contextId: `converged-wasm-ctx-${contextCounter}` };
-		},
-		startExecution() {
-			return { executionId: nextExecutionId };
-		},
-		createWorker(requestJson: string) {
-			workerCounter += 1;
-			const request = parse(requestJson);
-			return {
-				workerId: `converged-worker-${workerCounter}`,
-				runtime: typeof request.runtime === "string" ? request.runtime : undefined,
-			};
-		},
-		writeExecutionStdin() {
-			return {};
-		},
-		closeExecutionStdin() {
-			return {};
-		},
-		killExecution() {
-			return {};
-		},
-		pollExecutionEvent() {
-			return null;
-		},
-		terminateWorker() {
-			return {};
-		},
-		// Diagnostics/observability callbacks the execute lifecycle emits; no-ops
-		// here (the converged driver surfaces events through its own channels).
-		emitStructuredEvent() {
-			return {};
-		},
-		emitDiagnostic() {
-			return {};
-		},
-		emitLog() {
-			return {};
-		},
-		emitLifecycle() {
-			return {};
-		},
-	};
-
-	return {
-		setNextExecutionId(executionId: string) {
-			nextExecutionId = executionId;
-		},
-		bridge,
-	};
-}
-
-function parse(requestJson: string): Record<string, unknown> {
-	try {
-		const value = JSON.parse(requestJson);
-		return typeof value === "object" && value !== null
-			? (value as Record<string, unknown>)
-			: {};
-	} catch {
-		return {};
-	}
-}
diff --git a/packages/browser/src/converged-executor-session.ts b/packages/browser/src/converged-executor-session.ts
deleted file mode 100644
index 98e5d903f..000000000
--- a/packages/browser/src/converged-executor-session.ts
+++ /dev/null
@@ -1,189 +0,0 @@
-// Converged executor session bootstrap.
-//
-// Brings up a VM inside the wasm sidecar over the synchronous `pushFrame`
-// dispatcher (authenticate -> open_session -> create_vm), then hands out a
-// per-execution `ConvergedSyncBridgeHandler` bound to that VM's ownership. This
-// is the glue between the wasm sidecar and the guest Worker's sync-bridge: the
-// handshake runs once at setup, and each guest execution gets a synchronous
-// handler that routes its syscalls to the kernel.
-//
-// The handshake uses the same client identity and versions as the core
-// `SidecarProcess` so the wasm sidecar accepts it. Unit-tested with a fake
-// synchronous `pushFrame`.
-
-import type { CreateVmConfig } from "@secure-exec/core/vm-config";
-import type { LiveRootFilesystemEntry as RootFilesystemEntry } from "@secure-exec/core/filesystem";
-import type { LiveOwnershipScope } from "@secure-exec/core/ownership";
-import { SIDECAR_PROTOCOL_SCHEMA } from "@secure-exec/core/protocol-schema";
-import type { ProtocolFramePayloadCodec } from "@secure-exec/core/protocol-frames";
-import type { LiveRequestPayload } from "@secure-exec/core/request-payloads";
-import {
-	ConvergedSyncBridgeHandler,
-	type ConvergedPushFrame,
-	PushFrameSidecarTransport,
-} from "./converged-sync-bridge-handler.js";
-
-// Mirror `SidecarProcess`'s client identity so the sidecar handshake succeeds.
-const CLIENT_NAME = "secure-exec-core-client";
-const AUTH_TOKEN = "secure-exec-core-client-token";
-const BRIDGE_CONTRACT_VERSION = 1;
-
-type GuestRuntimeKind = Extract<
-	LiveRequestPayload,
-	{ type: "create_vm" }
->["runtime"];
-
-export interface ConvergedExecutorSessionOptions {
-	pushFrame: ConvergedPushFrame;
-	codec?: ProtocolFramePayloadCodec;
-}
-
-export interface ConvergedVmBootstrap {
-	runtime: GuestRuntimeKind;
-	config: CreateVmConfig;
-	sessionMetadata?: Record<string, string>;
-}
-
-/** A bootstrapped VM inside the wasm sidecar. */
-export interface ConvergedVm {
-	connectionId: string;
-	sessionId: string;
-	vmId: string;
-}
-
-export class ConvergedExecutorSession {
-	private readonly pushFrame: ConvergedPushFrame;
-	private readonly codec: ProtocolFramePayloadCodec;
-	private vm: ConvergedVm | undefined;
-
-	constructor(options: ConvergedExecutorSessionOptions) {
-		this.pushFrame = options.pushFrame;
-		this.codec = options.codec ?? "bare";
-	}
-
-	/** The bootstrapped VM, or throw if `bootstrap()` has not run. */
-	get currentVm(): ConvergedVm {
-		if (!this.vm) {
-			throw new Error("converged executor session has not bootstrapped a VM");
-		}
-		return this.vm;
-	}
-
-	/** Run the authenticate -> open_session -> create_vm handshake. */
-	bootstrap(options: ConvergedVmBootstrap): ConvergedVm {
-		const authenticated = this.send(
-			{ scope: "connection", connection_id: "client-hint" },
-			{
-				type: "authenticate",
-				client_name: CLIENT_NAME,
-				auth_token: AUTH_TOKEN,
-				protocol_version: SIDECAR_PROTOCOL_SCHEMA.version,
-				bridge_version: BRIDGE_CONTRACT_VERSION,
-			},
-		);
-		if (authenticated.type !== "authenticated") {
-			throw new Error(`unexpected authenticate response: ${authenticated.type}`);
-		}
-		const connectionId = authenticated.connection_id;
-
-		const opened = this.send(
-			{ scope: "connection", connection_id: connectionId },
-			{
-				type: "open_session",
-				placement: { kind: "shared", pool: null },
-				metadata: options.sessionMetadata ?? {},
-			},
-		);
-		if (opened.type !== "session_opened") {
-			throw new Error(`unexpected open_session response: ${opened.type}`);
-		}
-		const sessionId = opened.session_id;
-
-		const created = this.send(
-			{ scope: "session", connection_id: connectionId, session_id: sessionId },
-			{ type: "create_vm", runtime: options.runtime, config: options.config },
-		);
-		if (created.type !== "vm_created") {
-			throw new Error(`unexpected create_vm response: ${created.type}`);
-		}
-
-		this.vm = { connectionId, sessionId, vmId: created.vm_id };
-		return this.vm;
-	}
-
-	/** A synchronous syscall handler scoped to the bootstrapped VM + execution. */
-	handlerForExecution(executionId: string): ConvergedSyncBridgeHandler {
-		return new ConvergedSyncBridgeHandler({
-			transport: this.transportForVm(),
-			executionId,
-		});
-	}
-
-	/**
-	 * Register a guest execution (kernel process) in the sidecar via an `execute`
-	 * wire request, so guest `net.*`/`dgram.*` syscalls can resolve their
-	 * `execution_id` to a kernel pid. The guest itself runs in the browser worker;
-	 * this only owns the kernel-side process/socket lifecycle. Requires the wasm
-	 * sidecar to be constructed with an execution host bridge whose
-	 * `startExecution` echoes `processId` back as the execution id.
-	 */
-	registerExecution(options: {
-		processId: string;
-		entrypoint?: string;
-		args?: readonly string[];
-		cwd?: string;
-	}): { processId: string } {
-		const response = this.transportForVm().sendRequest({
-			type: "execute",
-			process_id: options.processId,
-			runtime: "java_script",
-			entrypoint: options.entrypoint,
-			args: [...(options.args ?? [])],
-			cwd: options.cwd,
-		});
-		if (response.type !== "process_started") {
-			throw new Error(`unexpected execute response: ${response.type}`);
-		}
-		return { processId: response.process_id };
-	}
-
-	/**
-	 * Snapshot the VM's root filesystem (the writable changes) so callers can
-	 * persist them to host storage (e.g. OPFS) across runtimes.
-	 */
-	snapshotRootFilesystem(): RootFilesystemEntry[] {
-		const response = this.transportForVm().sendRequest({
-			type: "snapshot_root_filesystem",
-		});
-		if (response.type !== "root_filesystem_snapshot") {
-			throw new Error(
-				`unexpected snapshot_root_filesystem response: ${response.type}`,
-			);
-		}
-		return response.entries;
-	}
-
-	/** A request transport bound to the bootstrapped VM ownership. */
-	transportForVm(): PushFrameSidecarTransport {
-		const vm = this.currentVm;
-		return new PushFrameSidecarTransport({
-			pushFrame: this.pushFrame,
-			codec: this.codec,
-			ownership: {
-				scope: "vm",
-				connection_id: vm.connectionId,
-				session_id: vm.sessionId,
-				vm_id: vm.vmId,
-			},
-		});
-	}
-
-	private send(ownership: LiveOwnershipScope, payload: LiveRequestPayload) {
-		const transport = new PushFrameSidecarTransport({
-			pushFrame: this.pushFrame,
-			codec: this.codec,
-			ownership,
-		});
-		return transport.sendRequest(payload);
-	}
-}
diff --git a/packages/browser/src/converged-fs-bridge.ts b/packages/browser/src/converged-fs-bridge.ts
deleted file mode 100644
index 3819b6c6d..000000000
--- a/packages/browser/src/converged-fs-bridge.ts
+++ /dev/null
@@ -1,326 +0,0 @@
-// Converged filesystem bridge translation layer.
-//
-// The legacy browser executor serviced guest `fs.*` sync-bridge operations
-// against an in-process TypeScript kernel (`runtime-driver.ts`'s
-// `handleSyncBridgeOperation`). The converged executor instead routes every
-// guest filesystem syscall to the wasm sidecar (`crates/sidecar-browser`) over
-// the wire protocol, so the kernel is the single enforcement point on both
-// native and browser.
-//
-// This module is the pure, backend-agnostic translation between a sync-bridge
-// `fs.*` operation (the guest-facing shape in `worker.ts`) and the wire
-// `guest_filesystem_call` request / `guest_filesystem_result` response. It is
-// unit-tested in Node without a wasm sidecar or a worker; the handler that owns
-// a `BrowserSidecarWasm` instance (and the multi-call `readDir`-with-types
-// expansion) builds on top of it.
-
-import type {
-	LiveGuestFilesystemStat,
-	LiveRequestPayload,
-	LiveResponsePayload,
-} from "@secure-exec/core";
-import type { VirtualDirEntry, VirtualStat } from "./runtime.js";
-import { decodeBase64, encodeBase64 } from "./converged-base64.js";
-import {
-	SYNC_BRIDGE_KIND_BINARY,
-	SYNC_BRIDGE_KIND_JSON,
-	SYNC_BRIDGE_KIND_NONE,
-	SYNC_BRIDGE_KIND_TEXT,
-} from "./sync-bridge.js";
-
-/** The wire `guest_filesystem_call` request payload. */
-export type GuestFilesystemRequestPayload = Extract<
-	LiveRequestPayload,
-	{ type: "guest_filesystem_call" }
->;
-
-/** The wire `guest_filesystem_result` fields the response mapper consumes. */
-export type GuestFilesystemResult = Extract<
-	LiveResponsePayload,
-	{ type: "guest_filesystem_result" }
->;
-
-/** The shape `runtime-driver` writes back to the sync-bridge SAB. */
-export type ConvergedSyncResponse =
-	| { kind: typeof SYNC_BRIDGE_KIND_NONE }
-	| { kind: typeof SYNC_BRIDGE_KIND_TEXT; value: string }
-	| { kind: typeof SYNC_BRIDGE_KIND_BINARY; value: Uint8Array }
-	| { kind: typeof SYNC_BRIDGE_KIND_JSON; value: unknown };
-
-/** Operations serviced by a single wire `guest_filesystem_call` round-trip. */
-const SINGLE_CALL_FS_OPERATIONS = new Set([
-	"fs.readFile",
-	"fs.writeFile",
-	"fs.readFileBinary",
-	"fs.writeFileBinary",
-	"fs.pread",
-	"fs.pwrite",
-	"fs.createDir",
-	"fs.mkdir",
-	"fs.rmdir",
-	"fs.exists",
-	"fs.stat",
-	"fs.lstat",
-	"fs.unlink",
-	"fs.rename",
-	"fs.realpath",
-	"fs.readlink",
-	"fs.symlink",
-	"fs.link",
-	"fs.chmod",
-	"fs.truncate",
-]);
-
-export function isSingleCallFilesystemOperation(operation: string): boolean {
-	return SINGLE_CALL_FS_OPERATIONS.has(operation);
-}
-
-/**
- * Translate a sync-bridge `fs.*` operation + args into the wire
- * `guest_filesystem_call` request payload. Throws for operations that are not a
- * single-call mapping (e.g. `fs.readDir`, which the handler expands with
- * per-entry `lstat` to recover Dirent types the wire does not carry).
- */
-export function convergedFilesystemRequestPayload(
-	operation: string,
-	args: readonly unknown[],
-): GuestFilesystemRequestPayload {
-	const path = String(args[0]);
-	switch (operation) {
-		case "fs.readFile":
-		case "fs.readFileBinary":
-			return { type: "guest_filesystem_call", operation: "read_file", path };
-		case "fs.pread":
-			return {
-				type: "guest_filesystem_call",
-				operation: "pread",
-				path,
-				offset: Number(args[1] ?? 0),
-				len: Number(args[2] ?? 0),
-			};
-		case "fs.writeFile":
-			return {
-				type: "guest_filesystem_call",
-				operation: "write_file",
-				path,
-				content: String(args[1] ?? ""),
-				encoding: "utf8",
-			};
-		case "fs.writeFileBinary":
-			return {
-				type: "guest_filesystem_call",
-				operation: "write_file",
-				path,
-				content: encodeBase64(toUint8Array(args[1])),
-				encoding: "base64",
-			};
-		case "fs.pwrite":
-			// Positional write: the kernel writes `content` at `offset`, growing
-			// and zero-filling the file as needed. This replaces a lossy,
-			// non-atomic client-side read-modify-write with a single
-			// kernel-enforced call.
-			return {
-				type: "guest_filesystem_call",
-				operation: "pwrite",
-				path,
-				offset: Number(args[1] ?? 0),
-				content: encodeBase64(toUint8Array(args[2])),
-				encoding: "base64",
-			};
-		case "fs.createDir":
-			return { type: "guest_filesystem_call", operation: "create_dir", path };
-		case "fs.mkdir":
-			return {
-				type: "guest_filesystem_call",
-				operation: "mkdir",
-				path,
-				recursive: true,
-			};
-		case "fs.rmdir":
-			return { type: "guest_filesystem_call", operation: "remove_dir", path };
-		case "fs.exists":
-			return { type: "guest_filesystem_call", operation: "exists", path };
-		case "fs.stat":
-			return { type: "guest_filesystem_call", operation: "stat", path };
-		case "fs.lstat":
-			return { type: "guest_filesystem_call", operation: "lstat", path };
-		case "fs.unlink":
-			return { type: "guest_filesystem_call", operation: "remove_file", path };
-		case "fs.rename":
-			return {
-				type: "guest_filesystem_call",
-				operation: "rename",
-				path,
-				destination_path: String(args[1]),
-			};
-		case "fs.realpath":
-			return { type: "guest_filesystem_call", operation: "realpath", path };
-		case "fs.readlink":
-			return { type: "guest_filesystem_call", operation: "read_link", path };
-		case "fs.symlink":
-			// Legacy arg order is (target, linkPath); the wire `path` is the link.
-			return {
-				type: "guest_filesystem_call",
-				operation: "symlink",
-				path: String(args[1]),
-				target: String(args[0]),
-			};
-		case "fs.link":
-			return {
-				type: "guest_filesystem_call",
-				operation: "link",
-				path,
-				destination_path: String(args[1]),
-			};
-		case "fs.chmod":
-			return {
-				type: "guest_filesystem_call",
-				operation: "chmod",
-				path,
-				mode: Number(args[1]),
-			};
-		case "fs.truncate":
-			return {
-				type: "guest_filesystem_call",
-				operation: "truncate",
-				path,
-				len: Number(args[1]),
-			};
-		default:
-			throw new Error(
-				`converged filesystem bridge has no single-call mapping for ${operation}`,
-			);
-	}
-}
-
-/**
- * Translate a wire `guest_filesystem_result` back into the sync-bridge response
- * the guest expects for `operation`. `fs.readDir` is intentionally NOT handled
- * here (it requires multiple wire calls); the handler maps it separately.
- */
-export function convergedFilesystemSyncResponse(
-	operation: string,
-	result: GuestFilesystemResult,
-): ConvergedSyncResponse {
-	switch (operation) {
-		case "fs.readFile":
-			return {
-				kind: SYNC_BRIDGE_KIND_TEXT,
-				value: decodeTextContent(result),
-			};
-		case "fs.readFileBinary":
-		case "fs.pread":
-			return {
-				kind: SYNC_BRIDGE_KIND_BINARY,
-				value: decodeBinaryContent(result),
-			};
-		case "fs.realpath":
-		case "fs.readlink":
-			return {
-				kind: SYNC_BRIDGE_KIND_TEXT,
-				value: result.target ?? "",
-			};
-		case "fs.exists":
-			return {
-				kind: SYNC_BRIDGE_KIND_JSON,
-				value: result.exists ?? false,
-			};
-		case "fs.stat":
-		case "fs.lstat":
-			return {
-				kind: SYNC_BRIDGE_KIND_JSON,
-				value: wireStatToVirtualStat(requireStat(result)),
-			};
-		case "fs.writeFile":
-		case "fs.writeFileBinary":
-		case "fs.pwrite":
-		case "fs.createDir":
-		case "fs.mkdir":
-		case "fs.rmdir":
-		case "fs.unlink":
-		case "fs.rename":
-		case "fs.symlink":
-		case "fs.link":
-		case "fs.chmod":
-		case "fs.truncate":
-			return { kind: SYNC_BRIDGE_KIND_NONE };
-		default:
-			throw new Error(
-				`converged filesystem bridge has no response mapping for ${operation}`,
-			);
-	}
-}
-
-/** Map a wire snake_case stat into the guest-facing camelCase `VirtualStat`. */
-export function wireStatToVirtualStat(stat: LiveGuestFilesystemStat): VirtualStat {
-	return {
-		mode: stat.mode,
-		size: stat.size,
-		blocks: stat.blocks,
-		dev: stat.dev,
-		rdev: stat.rdev,
-		isDirectory: stat.is_directory,
-		isSymbolicLink: stat.is_symbolic_link,
-		atimeMs: stat.atime_ms,
-		mtimeMs: stat.mtime_ms,
-		ctimeMs: stat.ctime_ms,
-		birthtimeMs: stat.birthtime_ms,
-		ino: stat.ino,
-		nlink: stat.nlink,
-		uid: stat.uid,
-		gid: stat.gid,
-	};
-}
-
-/** Build a `VirtualDirEntry` from a directory child name and its lstat. */
-export function wireStatToDirEntry(
-	name: string,
-	stat: LiveGuestFilesystemStat,
-): VirtualDirEntry {
-	return {
-		name,
-		isDirectory: stat.is_directory,
-		isSymbolicLink: stat.is_symbolic_link,
-	};
-}
-
-function requireStat(result: GuestFilesystemResult): LiveGuestFilesystemStat {
-	if (!result.stat) {
-		throw new Error(
-			`guest_filesystem_result for ${result.operation} is missing stat`,
-		);
-	}
-	return result.stat;
-}
-
-function decodeTextContent(result: GuestFilesystemResult): string {
-	const content = result.content ?? "";
-	if (result.encoding === "base64") {
-		return new TextDecoder().decode(decodeBase64(content));
-	}
-	return content;
-}
-
-function decodeBinaryContent(result: GuestFilesystemResult): Uint8Array {
-	const content = result.content ?? "";
-	if (result.encoding === "base64") {
-		return decodeBase64(content);
-	}
-	return new TextEncoder().encode(content);
-}
-
-function toUint8Array(value: unknown): Uint8Array {
-	if (value instanceof Uint8Array) {
-		return value;
-	}
-	if (value instanceof ArrayBuffer) {
-		return new Uint8Array(value);
-	}
-	if (ArrayBuffer.isView(value)) {
-		return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
-	}
-	if (Array.isArray(value)) {
-		return Uint8Array.from(value as number[]);
-	}
-	throw new Error("converged filesystem bridge expected binary content");
-}
diff --git a/packages/browser/src/converged-module-servicer.ts b/packages/browser/src/converged-module-servicer.ts
deleted file mode 100644
index 3c41738cc..000000000
--- a/packages/browser/src/converged-module-servicer.ts
+++ /dev/null
@@ -1,112 +0,0 @@
-// Converged module-resolution servicer.
-//
-// Reuses the shared naive-Node resolver (`resolveModule`/`loadFile`/
-// `moduleFormat` from runtime.ts) unchanged, backed by a kernel-backed
-// filesystem so resolution reads the kernel's exact view (mounts, symlinks,
-// exports/conditions) on the converged path — satisfying convergence item K
-// (one module resolver) without forking it. Async because the resolver walks
-// the filesystem; the router awaits it.
-
-import type { ConvergedSyncResponse } from "./converged-fs-bridge.js";
-import { loadFile, moduleFormat, resolveModule } from "./runtime.js";
-import type { VirtualFileSystem } from "./runtime.js";
-import {
-	SYNC_BRIDGE_KIND_JSON,
-	SYNC_BRIDGE_KIND_NONE,
-	SYNC_BRIDGE_KIND_TEXT,
-} from "./sync-bridge.js";
-
-const MODULE_OPERATIONS = new Set([
-	"module.resolve",
-	"module.loadFile",
-	"module.format",
-	"module.batchResolve",
-]);
-
-export class ConvergedModuleServicer {
-	private readonly filesystem: VirtualFileSystem;
-
-	constructor(filesystem: VirtualFileSystem) {
-		this.filesystem = filesystem;
-	}
-
-	handles(operation: string): boolean {
-		return MODULE_OPERATIONS.has(operation);
-	}
-
-	async handle(
-		operation: string,
-		args: readonly unknown[],
-	): Promise<ConvergedSyncResponse> {
-		switch (operation) {
-			case "module.resolve": {
-				const mode =
-					args[2] === "import" || args[2] === "require" ? args[2] : "require";
-				const resolved = await resolveModule(
-					String(args[0]),
-					String(args[1]),
-					this.filesystem,
-					mode,
-				);
-				return resolved === null
-					? { kind: SYNC_BRIDGE_KIND_NONE }
-					: { kind: SYNC_BRIDGE_KIND_TEXT, value: resolved };
-			}
-			case "module.loadFile": {
-				const source = await loadFile(String(args[0]), this.filesystem);
-				return source === null
-					? { kind: SYNC_BRIDGE_KIND_NONE }
-					: { kind: SYNC_BRIDGE_KIND_TEXT, value: source };
-			}
-			case "module.format": {
-				const format = await moduleFormat(String(args[0]), this.filesystem);
-				return format === null
-					? { kind: SYNC_BRIDGE_KIND_NONE }
-					: { kind: SYNC_BRIDGE_KIND_TEXT, value: format };
-			}
-			case "module.batchResolve": {
-				const requests = parseModuleBatchRequests(args[0]);
-				const results: Array<{ resolved: string; source: string } | null> = [];
-				for (const [specifier, referrer] of requests) {
-					const resolved = await resolveModule(
-						specifier,
-						referrer,
-						this.filesystem,
-						"import",
-					);
-					if (resolved === null) {
-						results.push(null);
-						continue;
-					}
-					const source = await loadFile(resolved, this.filesystem);
-					results.push(source === null ? null : { resolved, source });
-				}
-				return { kind: SYNC_BRIDGE_KIND_JSON, value: results };
-			}
-			default:
-				throw new Error(
-					`converged module servicer does not handle ${operation}`,
-				);
-		}
-	}
-}
-
-function parseModuleBatchRequests(value: unknown): [string, string][] {
-	const parsed = typeof value === "string" ? JSON.parse(value) : value;
-	if (!Array.isArray(parsed)) {
-		throw new Error("module.batchResolve requests must be an array");
-	}
-	return parsed.map((entry) => {
-		if (
-			!Array.isArray(entry) ||
-			entry.length < 2 ||
-			typeof entry[0] !== "string" ||
-			typeof entry[1] !== "string"
-		) {
-			throw new Error(
-				"module.batchResolve requests must be [specifier, referrer] pairs",
-			);
-		}
-		return [entry[0], entry[1]];
-	});
-}
diff --git a/packages/browser/src/converged-net-bridge.ts b/packages/browser/src/converged-net-bridge.ts
deleted file mode 100644
index 945c4cefa..000000000
--- a/packages/browser/src/converged-net-bridge.ts
+++ /dev/null
@@ -1,197 +0,0 @@
-// Converged networking bridge translation layer.
-//
-// Unlike `fs.*`, legacy guest networking never went through the SAB sync-bridge
-// (it used an async network adapter), so there is no legacy op to mirror. The
-// converged executor introduces synchronous guest `net.*` / `dns.*` sync-bridge
-// operations that route to the wasm sidecar's generic guest-kernel-call wire
-// payload (`guest_kernel_call` -> `secure_exec_sidecar_core::guest_net`), which
-// drives the kernel socket table (the single network-policy enforcement point,
-// S1) over loopback.
-//
-// This module is the pure translation between a guest net/dns sync-bridge call
-// and the `guest_kernel_call` request / `guest_kernel_result` response. The
-// wire `operation` string is identical to the sync-bridge op string, and the
-// `payload` is the JSON request body the Rust dispatcher decodes. Binary socket
-// payloads are base64-encoded (the wire `payload` is opaque JSON). Unit-tested
-// in Node without a wasm sidecar.
-
-import type { LiveRequestPayload, LiveResponsePayload } from "@secure-exec/core";
-import { encodeBase64 } from "./converged-base64.js";
-import { SYNC_BRIDGE_KIND_JSON } from "./sync-bridge.js";
-
-export type GuestKernelCallRequestPayload = Extract<
-	LiveRequestPayload,
-	{ type: "guest_kernel_call" }
->;
-
-export type GuestKernelResult = Extract<
-	LiveResponsePayload,
-	{ type: "guest_kernel_result" }
->;
-
-/** Guest network/DNS sync-bridge operations serviced by the wasm sidecar. */
-export const CONVERGED_NET_BRIDGE_OPERATIONS = [
-	"net.connect",
-	"net.listen",
-	"net.accept",
-	"net.read",
-	"net.write",
-	"net.poll",
-	"net.shutdown",
-	"net.close",
-	"net.udp_bind",
-	"net.send_to",
-	"net.recv_from",
-	"dns.lookup",
-] as const;
-
-const CONVERGED_NET_BRIDGE_OPERATION_SET = new Set<string>(
-	CONVERGED_NET_BRIDGE_OPERATIONS,
-);
-
-export function isConvergedNetBridgeOperation(operation: string): boolean {
-	return CONVERGED_NET_BRIDGE_OPERATION_SET.has(operation);
-}
-
-/**
- * Translate a guest `net.*` / `dns.*` sync-bridge call into a
- * `guest_kernel_call` request payload. `args[0]` is the structured request
- * object (the guest net module passes a typed options object); binary `data`
- * fields are base64-encoded into the JSON the kernel dispatcher expects.
- */
-export function convergedNetRequestPayload(
-	operation: string,
-	args: readonly unknown[],
-	executionId: string,
-): GuestKernelCallRequestPayload {
-	if (!isConvergedNetBridgeOperation(operation)) {
-		throw new Error(
-			`converged net bridge has no mapping for ${operation}`,
-		);
-	}
-	const options = (args[0] ?? {}) as Record<string, unknown>;
-	const request = buildKernelRequest(operation, options);
-	return {
-		type: "guest_kernel_call",
-		execution_id: executionId,
-		operation,
-		payload: encodeJsonBytes(request),
-	};
-}
-
-/**
- * Decode a `guest_kernel_result` into the sync-bridge response the guest net
- * module consumes. The kernel dispatcher already returns JSON; binary read
- * payloads stay base64 strings (the guest module decodes them), so this is a
- * JSON passthrough.
- */
-export function convergedNetSyncResponse(result: GuestKernelResult): {
-	kind: typeof SYNC_BRIDGE_KIND_JSON;
-	value: unknown;
-} {
-	return {
-		kind: SYNC_BRIDGE_KIND_JSON,
-		value: decodeJsonBytes(result.payload),
-	};
-}
-
-function buildKernelRequest(
-	operation: string,
-	options: Record<string, unknown>,
-): Record<string, unknown> {
-	switch (operation) {
-		case "net.connect":
-		case "net.listen":
-		case "net.udp_bind":
-			return stripUndefined({
-				host: options.host,
-				port: options.port,
-				backlog: options.backlog,
-			});
-		case "net.accept":
-		case "net.close":
-			return { socketId: requireSocketId(options) };
-		case "net.read":
-		case "net.recv_from":
-			return stripUndefined({
-				socketId: requireSocketId(options),
-				maxBytes: options.maxBytes,
-			});
-		case "net.write":
-			return {
-				socketId: requireSocketId(options),
-				data: encodeBase64(requireData(options)),
-			};
-		case "net.send_to":
-			return stripUndefined({
-				socketId: requireSocketId(options),
-				host: options.host,
-				port: options.port,
-				data: encodeBase64(requireData(options)),
-			});
-		case "net.poll":
-			return stripUndefined({
-				socketId: requireSocketId(options),
-				events: options.events,
-				timeoutMs: options.timeoutMs,
-			});
-		case "net.shutdown":
-			return {
-				socketId: requireSocketId(options),
-				how: options.how ?? "both",
-			};
-		case "dns.lookup":
-			return { hostname: String(options.hostname ?? "") };
-		default:
-			throw new Error(`converged net bridge has no mapping for ${operation}`);
-	}
-}
-
-function requireSocketId(options: Record<string, unknown>): number {
-	const socketId = options.socketId;
-	if (typeof socketId !== "number") {
-		throw new Error("converged net bridge call requires numeric socketId");
-	}
-	return socketId;
-}
-
-function requireData(options: Record<string, unknown>): Uint8Array {
-	const data = options.data;
-	if (data instanceof Uint8Array) {
-		return data;
-	}
-	if (data instanceof ArrayBuffer) {
-		return new Uint8Array(data);
-	}
-	if (ArrayBuffer.isView(data)) {
-		return new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
-	}
-	throw new Error("converged net bridge write/send requires binary data");
-}
-
-function stripUndefined(
-	record: Record<string, unknown>,
-): Record<string, unknown> {
-	const result: Record<string, unknown> = {};
-	for (const [key, value] of Object.entries(record)) {
-		if (value !== undefined) {
-			result[key] = value;
-		}
-	}
-	return result;
-}
-
-function encodeJsonBytes(value: unknown): ArrayBuffer {
-	const bytes = new TextEncoder().encode(JSON.stringify(value));
-	return bytes.buffer.slice(
-		bytes.byteOffset,
-		bytes.byteOffset + bytes.byteLength,
-	);
-}
-
-function decodeJsonBytes(payload: ArrayBuffer): unknown {
-	if (payload.byteLength === 0) {
-		return null;
-	}
-	return JSON.parse(new TextDecoder().decode(new Uint8Array(payload)));
-}
diff --git a/packages/browser/src/converged-permissions.ts b/packages/browser/src/converged-permissions.ts
deleted file mode 100644
index e6fd96f99..000000000
--- a/packages/browser/src/converged-permissions.ts
+++ /dev/null
@@ -1,61 +0,0 @@
-// Declarative kernel permission policies for the converged conformance harness.
-//
-// The legacy browser harness expressed permission tests as TS callbacks on the
-// in-process kernel (e.g. deny fs reads, deny a network port). The converged
-// path enforces permissions in the wasm kernel via a declarative
-// `PermissionsPolicy` on `CreateVmConfig`, so those test intents are translated
-// here into rule sets the kernel evaluates. Operation names match the kernel's
-// (`crates/kernel/src/permissions.rs`).
-
-import type { PermissionsPolicy } from "@secure-exec/core/vm-config";
-
-export interface ConvergedPermissionDenials {
-	denyFsRead?: boolean;
-	denyChildProcess?: boolean;
-	denyNetwork?: boolean;
-	denyNetworkPort?: number;
-}
-
-// Kernel fs read-family operation names (mirrors FilesystemOperation::as_str).
-const FS_READ_OPERATIONS = ["read", "readdir"];
-
-/** Build a kernel PermissionsPolicy from the harness's declarative denials. */
-export function convergedPermissionsPolicy(
-	denials: ConvergedPermissionDenials = {},
-): PermissionsPolicy {
-	const policy: Record<string, unknown> = {
-		fs: "allow",
-		network: "allow",
-		childProcess: "allow",
-		process: "allow",
-		env: "allow",
-		binding: "allow",
-	};
-
-	if (denials.denyFsRead) {
-		policy.fs = {
-			default: "allow",
-			rules: [{ mode: "deny", operations: FS_READ_OPERATIONS, paths: ["**"] }],
-		};
-	}
-	if (denials.denyChildProcess) {
-		policy.childProcess = "deny";
-	}
-	if (denials.denyNetwork) {
-		policy.network = "deny";
-	}
-	if (denials.denyNetworkPort !== undefined) {
-		policy.network = {
-			default: "allow",
-			rules: [
-				{
-					mode: "deny",
-					operations: ["listen", "http", "fetch"],
-					patterns: [`tcp://*:${denials.denyNetworkPort}`],
-				},
-			],
-		};
-	}
-
-	return policy as unknown as PermissionsPolicy;
-}
diff --git a/packages/browser/src/converged-pty-bridge.ts b/packages/browser/src/converged-pty-bridge.ts
deleted file mode 100644
index 42983c219..000000000
--- a/packages/browser/src/converged-pty-bridge.ts
+++ /dev/null
@@ -1,209 +0,0 @@
-// Converged PTY bridge translation layer.
-//
-// Pseudo-terminal syscalls route to the wasm sidecar's generic guest-kernel-call
-// wire payload (`guest_kernel_call` -> `secure_exec_sidecar_core::guest_pty`),
-// which drives the kernel's `PtyManager` (line discipline, termios, window size).
-// This mirrors `converged-net-bridge.ts`: the wire `operation` string is the
-// sync-bridge op string, and `payload` is the JSON request body the Rust
-// dispatcher decodes. The PTY is fd/stream based, so `pty.read`/`pty.write`
-// carry a kernel fd and binary data is base64-encoded into the opaque JSON
-// payload (read payloads come back base64; the guest decodes). Unit-tested in
-// Node without a wasm sidecar.
-
-import type { LiveResponsePayload } from "@secure-exec/core";
-import { encodeBase64 } from "./converged-base64.js";
-import type { GuestKernelCallRequestPayload } from "./converged-net-bridge.js";
-import { SYNC_BRIDGE_KIND_JSON } from "./sync-bridge.js";
-
-type GuestKernelResult = Extract<
-	LiveResponsePayload,
-	{ type: "guest_kernel_result" }
->;
-
-/** Guest `pty.*` sync-bridge operations serviced by the wasm sidecar. */
-export const CONVERGED_PTY_BRIDGE_OPERATIONS = [
-	"pty.open",
-	"pty.read",
-	"pty.write",
-	"pty.close",
-	"pty.resize",
-	"pty.setForegroundPgid",
-	"pty.tcgetattr",
-	"pty.tcsetattr",
-] as const;
-
-const CONVERGED_PTY_BRIDGE_OPERATION_SET = new Set<string>(
-	CONVERGED_PTY_BRIDGE_OPERATIONS,
-);
-
-export function isConvergedPtyBridgeOperation(operation: string): boolean {
-	return CONVERGED_PTY_BRIDGE_OPERATION_SET.has(operation);
-}
-
-/**
- * Translate a guest `pty.*` sync-bridge call into a `guest_kernel_call` request
- * payload. `args[0]` is the structured request object; the `pty.write` `data`
- * field is base64-encoded into the JSON the kernel dispatcher expects.
- */
-export function convergedPtyRequestPayload(
-	operation: string,
-	args: readonly unknown[],
-	executionId: string,
-): GuestKernelCallRequestPayload {
-	if (!isConvergedPtyBridgeOperation(operation)) {
-		throw new Error(`converged pty bridge has no mapping for ${operation}`);
-	}
-	const options = (args[0] ?? {}) as Record<string, unknown>;
-	const request = buildKernelRequest(operation, options);
-	return {
-		type: "guest_kernel_call",
-		execution_id: executionId,
-		operation,
-		payload: encodeJsonBytes(request),
-	};
-}
-
-/**
- * Decode a `guest_kernel_result` into the sync-bridge response the guest pty
- * module consumes. The kernel dispatcher returns JSON; binary read payloads
- * stay base64 strings (the guest decodes them), so this is a JSON passthrough.
- */
-export function convergedPtySyncResponse(result: GuestKernelResult): {
-	kind: typeof SYNC_BRIDGE_KIND_JSON;
-	value: unknown;
-} {
-	return {
-		kind: SYNC_BRIDGE_KIND_JSON,
-		value: decodeJsonBytes(result.payload),
-	};
-}
-
-function buildKernelRequest(
-	operation: string,
-	options: Record<string, unknown>,
-): Record<string, unknown> {
-	switch (operation) {
-		case "pty.open":
-			return {};
-		case "pty.read":
-			return stripUndefined({
-				fd: requireFd(options),
-				maxBytes: options.maxBytes,
-				// Browser-side pty reads run inside the wasm sidecar's synchronous
-				// pushFrame path. A non-zero Rust timeout reaches Condvar::wait_timeout,
-				// which is not usable in the browser/no-threads build and aborts the
-				// wasm module. Keep reads non-blocking here; callers poll/pump from JS.
-				timeoutMs: 0,
-			});
-		case "pty.write":
-			return {
-				fd: requireFd(options),
-				data: encodeBase64(requireData(options)),
-			};
-		case "pty.close":
-		case "pty.tcgetattr":
-			return { fd: requireFd(options) };
-		case "pty.setForegroundPgid":
-			return stripUndefined({
-				fd: requireFd(options),
-				pgid: options.pgid,
-			});
-		case "pty.resize":
-			return {
-				fd: requireFd(options),
-				cols: requireNumber(options, "cols"),
-				rows: requireNumber(options, "rows"),
-			};
-		case "pty.tcsetattr":
-			return buildTermiosRequest(options);
-		default:
-			throw new Error(`converged pty bridge has no mapping for ${operation}`);
-	}
-}
-
-/**
- * `pty.tcsetattr` passes only the termios fields the guest wants changed
- * (raw-mode toggles + optional control chars), so unspecified fields are
- * stripped and the kernel leaves them untouched.
- */
-function buildTermiosRequest(
-	options: Record<string, unknown>,
-): Record<string, unknown> {
-	const request = stripUndefined({
-		fd: requireFd(options),
-		icrnl: options.icrnl,
-		opost: options.opost,
-		onlcr: options.onlcr,
-		icanon: options.icanon,
-		echo: options.echo,
-		isig: options.isig,
-	});
-	if (options.cc && typeof options.cc === "object") {
-		const cc = options.cc as Record<string, unknown>;
-		request.cc = stripUndefined({
-			vintr: cc.vintr,
-			vquit: cc.vquit,
-			vsusp: cc.vsusp,
-			veof: cc.veof,
-			verase: cc.verase,
-		});
-	}
-	return request;
-}
-
-function requireFd(options: Record<string, unknown>): number {
-	const fd = options.fd;
-	if (typeof fd !== "number") {
-		throw new Error("converged pty bridge call requires numeric fd");
-	}
-	return fd;
-}
-
-function requireNumber(options: Record<string, unknown>, key: string): number {
-	const value = options[key];
-	if (typeof value !== "number") {
-		throw new Error(`converged pty bridge call requires numeric ${key}`);
-	}
-	return value;
-}
-
-function requireData(options: Record<string, unknown>): Uint8Array {
-	const data = options.data;
-	if (data instanceof Uint8Array) {
-		return data;
-	}
-	if (data instanceof ArrayBuffer) {
-		return new Uint8Array(data);
-	}
-	if (ArrayBuffer.isView(data)) {
-		return new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
-	}
-	throw new Error("converged pty bridge write requires binary data");
-}
-
-function stripUndefined(
-	record: Record<string, unknown>,
-): Record<string, unknown> {
-	const result: Record<string, unknown> = {};
-	for (const [key, value] of Object.entries(record)) {
-		if (value !== undefined) {
-			result[key] = value;
-		}
-	}
-	return result;
-}
-
-function encodeJsonBytes(value: unknown): ArrayBuffer {
-	const bytes = new TextEncoder().encode(JSON.stringify(value));
-	return bytes.buffer.slice(
-		bytes.byteOffset,
-		bytes.byteOffset + bytes.byteLength,
-	);
-}
-
-function decodeJsonBytes(payload: ArrayBuffer): unknown {
-	if (payload.byteLength === 0) {
-		return null;
-	}
-	return JSON.parse(new TextDecoder().decode(new Uint8Array(payload)));
-}
diff --git a/packages/browser/src/converged-sync-bridge-handler.ts b/packages/browser/src/converged-sync-bridge-handler.ts
deleted file mode 100644
index 649075a1f..000000000
--- a/packages/browser/src/converged-sync-bridge-handler.ts
+++ /dev/null
@@ -1,221 +0,0 @@
-// Converged sync-bridge handler.
-//
-// Replaces the legacy `runtime-driver.ts` `handleSyncBridgeOperation` (which
-// serviced guest syscalls against an in-process TypeScript kernel) with one
-// that routes every guest syscall to the wasm sidecar (`crates/sidecar-browser`)
-// over the wire protocol. The kernel becomes the single enforcement point for
-// both native and browser; the legacy fail-open TS executor is retired once this
-// is the live path.
-//
-// The handler is synchronous: it encodes a wire frame, calls the injected
-// synchronous `pushFrame` (the wasm `BrowserSidecarWasm.pushFrame`), decodes the
-// response frame, and returns the sync-bridge response the worker writes back to
-// the SAB. It is unit-tested with a fake synchronous `pushFrame`, no wasm needed.
-
-import type { LiveOwnershipScope } from "@secure-exec/core/ownership";
-import {
-	decodeProtocolFramePayload,
-	encodeProtocolFramePayload,
-	HostProtocolFrameFactory,
-	type LiveProtocolFrame,
-	type ProtocolFramePayloadCodec,
-} from "@secure-exec/core/protocol-frames";
-import type { LiveRequestPayload } from "@secure-exec/core/request-payloads";
-import type { LiveResponsePayload } from "@secure-exec/core/response-payloads";
-import {
-	convergedFilesystemRequestPayload,
-	convergedFilesystemSyncResponse,
-	type ConvergedSyncResponse,
-	type GuestFilesystemResult,
-	isSingleCallFilesystemOperation,
-} from "./converged-fs-bridge.js";
-import {
-	convergedNetRequestPayload,
-	convergedNetSyncResponse,
-	type GuestKernelResult,
-	isConvergedNetBridgeOperation,
-} from "./converged-net-bridge.js";
-import {
-	convergedDgramInlineResponse,
-	convergedDgramRequestPayload,
-	convergedDgramSyncResponse,
-	dgramOperationUsesKernel,
-	isConvergedDgramBridgeOperation,
-} from "./converged-dgram-bridge.js";
-import {
-	convergedPtyRequestPayload,
-	convergedPtySyncResponse,
-	isConvergedPtyBridgeOperation,
-} from "./converged-pty-bridge.js";
-import { SYNC_BRIDGE_KIND_JSON } from "./sync-bridge.js";
-
-/** Synchronous wasm sidecar frame dispatcher (`BrowserSidecarWasm.pushFrame`). */
-export type ConvergedPushFrame = (frame: Uint8Array) => Uint8Array;
-
-/**
- * Synchronous request transport seam between the handler and the wasm sidecar.
- * Splitting this out keeps the handler's translation logic unit-testable without
- * the directional wire codec (the host can only encode request frames, and the
- * JSON codec does not round-trip binary `data` payloads).
- */
-export interface ConvergedSidecarRequestTransport {
-	sendRequest(payload: LiveRequestPayload): LiveResponsePayload;
-}
-
-/**
- * Production transport: encodes a request frame, calls the synchronous wasm
- * `pushFrame`, and decodes the response frame.
- */
-export class PushFrameSidecarTransport
-	implements ConvergedSidecarRequestTransport
-{
-	private readonly frames = new HostProtocolFrameFactory();
-	private readonly pushFrame: ConvergedPushFrame;
-	private readonly ownership: LiveOwnershipScope;
-	private readonly codec: ProtocolFramePayloadCodec;
-
-	constructor(options: {
-		pushFrame: ConvergedPushFrame;
-		ownership: LiveOwnershipScope;
-		codec?: ProtocolFramePayloadCodec;
-	}) {
-		this.pushFrame = options.pushFrame;
-		this.ownership = options.ownership;
-		this.codec = options.codec ?? "bare";
-	}
-
-	sendRequest(payload: LiveRequestPayload): LiveResponsePayload {
-		const frame = this.frames.createRequestFrame({
-			ownership: this.ownership,
-			payload,
-		});
-		const responseBytes = this.pushFrame(
-			encodeProtocolFramePayload(frame, this.codec),
-		);
-		const decoded = decodeProtocolFramePayload(
-			responseBytes,
-			this.codec,
-		) as unknown as LiveProtocolFrame;
-		if (decoded.frame_type !== "response") {
-			throw new Error(
-				`converged sync bridge expected a response frame, got ${decoded.frame_type}`,
-			);
-		}
-		if (decoded.payload.type === "rejected") {
-			const message = decoded.payload.message;
-			const error = new Error(message);
-			// Kernel failures carry a leading POSIX errno ("EACCES: ...") in the
-			// message; surface that as the guest-visible error code (Node/POSIX
-			// semantics) rather than the generic wire rejection code.
-			const errno = /^(E[A-Z0-9_]+):/.exec(message);
-			(error as { code?: string }).code = errno
-				? errno[1]
-				: decoded.payload.code;
-			throw error;
-		}
-		return decoded.payload;
-	}
-}
-
-export interface ConvergedSyncBridgeHandlerOptions {
-	transport: ConvergedSidecarRequestTransport;
-	executionId: string;
-}
-
-export class ConvergedSyncBridgeHandler {
-	private readonly transport: ConvergedSidecarRequestTransport;
-	private readonly executionId: string;
-
-	constructor(options: ConvergedSyncBridgeHandlerOptions) {
-		this.transport = options.transport;
-		this.executionId = options.executionId;
-	}
-
-	/** True if this handler services `operation` against the wasm sidecar. */
-	handles(operation: string): boolean {
-		return (
-			operation === "fs.readDir" ||
-			isSingleCallFilesystemOperation(operation) ||
-			isConvergedNetBridgeOperation(operation) ||
-			isConvergedDgramBridgeOperation(operation) ||
-			isConvergedPtyBridgeOperation(operation)
-		);
-	}
-
-	handle(operation: string, args: readonly unknown[]): ConvergedSyncResponse {
-		if (operation === "fs.readDir") {
-			return this.readDir(String(args[0]));
-		}
-		if (isSingleCallFilesystemOperation(operation)) {
-			const result = this.callFilesystem(
-				convergedFilesystemRequestPayload(operation, args),
-			);
-			return convergedFilesystemSyncResponse(operation, result);
-		}
-		if (isConvergedNetBridgeOperation(operation)) {
-			const result = this.callKernel(
-				convergedNetRequestPayload(operation, args, this.executionId),
-			);
-			return convergedNetSyncResponse(result);
-		}
-		if (isConvergedDgramBridgeOperation(operation)) {
-			if (!dgramOperationUsesKernel(operation)) {
-				return convergedDgramInlineResponse(operation);
-			}
-			const result = this.callKernel(
-				convergedDgramRequestPayload(operation, args, this.executionId),
-			);
-			return convergedDgramSyncResponse(operation, decodeKernelJson(result));
-		}
-		if (isConvergedPtyBridgeOperation(operation)) {
-			const result = this.callKernel(
-				convergedPtyRequestPayload(operation, args, this.executionId),
-			);
-			return convergedPtySyncResponse(result);
-		}
-		throw new Error(
-			`converged sync bridge handler does not service ${operation}`,
-		);
-	}
-
-	private readDir(path: string): ConvergedSyncResponse {
-		// The wire `read_dir` carries each child's type, so one round-trip
-		// recovers Dirent kinds for `readdir(withFileTypes)` (no per-entry lstat).
-		const listing = this.callFilesystem({
-			type: "guest_filesystem_call",
-			operation: "read_dir",
-			path,
-		});
-		const entries = (listing.entries ?? []).map((entry) => ({
-			name: entry.name,
-			isDirectory: entry.isDirectory,
-			isSymbolicLink: entry.isSymbolicLink,
-		}));
-		return { kind: SYNC_BRIDGE_KIND_JSON, value: entries };
-	}
-
-	private callFilesystem(payload: LiveRequestPayload): GuestFilesystemResult {
-		const response = this.transport.sendRequest(payload);
-		if (response.type !== "guest_filesystem_result") {
-			throw new Error(
-				`expected guest_filesystem_result, got ${response.type}`,
-			);
-		}
-		return response;
-	}
-
-	private callKernel(payload: LiveRequestPayload): GuestKernelResult {
-		const response = this.transport.sendRequest(payload);
-		if (response.type !== "guest_kernel_result") {
-			throw new Error(`expected guest_kernel_result, got ${response.type}`);
-		}
-		return response;
-	}
-}
-
-function decodeKernelJson(result: GuestKernelResult): unknown {
-	if (result.payload.byteLength === 0) {
-		return null;
-	}
-	return JSON.parse(new TextDecoder().decode(new Uint8Array(result.payload)));
-}
diff --git a/packages/browser/src/converged-sync-bridge-router.ts b/packages/browser/src/converged-sync-bridge-router.ts
deleted file mode 100644
index 211537b29..000000000
--- a/packages/browser/src/converged-sync-bridge-router.ts
+++ /dev/null
@@ -1,83 +0,0 @@
-// Converged sync-bridge router.
-//
-// The migration seam between the legacy in-process TS-kernel sync-bridge
-// servicer (`runtime-driver.ts` `handleSyncBridgeOperation`) and the converged
-// wasm-kernel handler (`ConvergedSyncBridgeHandler`). Operations the converged
-// handler services (fs.* / net.* / dns.*) go to the wasm sidecar; everything not
-// yet converged (module.* / child_process.* / dgram.* / process.signal_state)
-// falls back to the legacy servicer. As each family is converged the fallback
-// shrinks; when it is empty the legacy servicer is deleted (spec slice 5).
-
-import type { ConvergedSyncResponse } from "./converged-fs-bridge.js";
-import type { ConvergedSyncBridgeHandler } from "./converged-sync-bridge-handler.js";
-
-/** Services a sync-bridge operation not yet handled by the converged path. */
-export type LegacySyncBridgeServicer = (
-	operation: string,
-	args: readonly unknown[],
-) => Promise<ConvergedSyncResponse>;
-
-/**
- * An async converged servicer (e.g. module resolution) that routes its
- * operations to the kernel but cannot be synchronous because it walks the
- * filesystem. Tried after the sync handler, before the legacy fallback.
- */
-export interface AsyncConvergedServicer {
-	handles(operation: string): boolean;
-	handle(
-		operation: string,
-		args: readonly unknown[],
-	): Promise<ConvergedSyncResponse>;
-}
-
-export interface ConvergedSyncBridgeRouterOptions {
-	handler: ConvergedSyncBridgeHandler;
-	legacy: LegacySyncBridgeServicer;
-	asyncServicers?: readonly AsyncConvergedServicer[];
-}
-
-export class ConvergedSyncBridgeRouter {
-	private readonly handler: ConvergedSyncBridgeHandler;
-	private readonly legacy: LegacySyncBridgeServicer;
-	private readonly asyncServicers: readonly AsyncConvergedServicer[];
-
-	constructor(options: ConvergedSyncBridgeRouterOptions) {
-		this.handler = options.handler;
-		this.legacy = options.legacy;
-		this.asyncServicers = options.asyncServicers ?? [];
-	}
-
-	/**
-	 * Route one sync-bridge operation: sync converged handler (fs/net/dns) first,
-	 * then any async converged servicers (module resolution), then the legacy
-	 * fallback for families not yet converged. Returns a promise either way so
-	 * callers have a single await point.
-	 */
-	async route(
-		operation: string,
-		args: readonly unknown[],
-	): Promise<ConvergedSyncResponse> {
-		if (this.handler.handles(operation)) {
-			return this.handler.handle(operation, args);
-		}
-		for (const servicer of this.asyncServicers) {
-			if (servicer.handles(operation)) {
-				return servicer.handle(operation, args);
-			}
-		}
-		return this.legacy(operation, args);
-	}
-
-	/** True once every sync-bridge operation routes to a converged servicer. */
-	static isFullyConverged(
-		handler: ConvergedSyncBridgeHandler,
-		operations: readonly string[],
-		asyncServicers: readonly AsyncConvergedServicer[] = [],
-	): boolean {
-		return operations.every(
-			(operation) =>
-				handler.handles(operation) ||
-				asyncServicers.some((servicer) => servicer.handles(operation)),
-		);
-	}
-}
diff --git a/packages/browser/src/default-sidecar.ts b/packages/browser/src/default-sidecar.ts
deleted file mode 100644
index 7024dcb43..000000000
--- a/packages/browser/src/default-sidecar.ts
+++ /dev/null
@@ -1,88 +0,0 @@
-// Default converged sidecar loader.
-//
-// Item 3b of the browser convergence: ship the web-target wasm kernel
-// (crates/sidecar-browser, built into dist/sidecar-wasm-web/) plus a ready-made
-// loader so consumers get the converged runtime out of the box without
-// supplying their own wasm binding. The runtime driver is converged-only, so
-// `createBrowserRuntimeDriverFactory({ convergedSidecar: createDefaultConvergedSidecar(config) })`
-// is the supported zero-config path.
-//
-// The wasm-bindgen web output fetches its own `_bg.wasm`; we resolve both the
-// glue module and the binary relative to this module's URL so a consumer's
-// bundler (or the browser's native ESM loader) emits/serves them correctly.
-
-import type { CreateVmConfig } from "@secure-exec/core/vm-config";
-import type { ProtocolFramePayloadCodec } from "@secure-exec/core/protocol-frames";
-import { createConvergedExecutionHostBridge } from "./converged-execution-host-bridge.js";
-import type {
-	ConvergedSidecarFactoryOptions,
-	ConvergedSidecarHandle,
-} from "./runtime-driver.js";
-
-const WASM_MODULE_URL = new URL(
-	"./sidecar-wasm-web/secure_exec_sidecar_browser.js",
-	import.meta.url,
-);
-const WASM_BINARY_URL = new URL(
-	"./sidecar-wasm-web/secure_exec_sidecar_browser_bg.wasm",
-	import.meta.url,
-);
-
-interface BrowserSidecarWasmWebModule {
-	default(input?: unknown): Promise<unknown>;
-	BrowserSidecarWasm: new (hostBridge?: unknown) => {
-		pushFrame(frame: Uint8Array): unknown;
-	};
-}
-
-export interface DefaultConvergedSidecarOptions {
-	/** Wire codec; defaults to the same-version BARE codec. */
-	codec?: ProtocolFramePayloadCodec;
-	/** Invoked when the kernel denies a guest fs read with EACCES. */
-	onFsReadDenied?: () => void;
-	/**
-	 * Override the wasm glue-module URL (advanced; defaults to the bundled
-	 * dist/sidecar-wasm-web output resolved relative to this module).
-	 */
-	moduleUrl?: URL | string;
-	/** Override the wasm binary URL (advanced; see `moduleUrl`). */
-	binaryUrl?: URL | string;
-}
-
-/**
- * Build the {@link ConvergedSidecarFactoryOptions} for the bundled web-target
- * wasm kernel. Pass the result to `createBrowserRuntimeDriverFactory`'s
- * `convergedSidecar` option.
- */
-export function createDefaultConvergedSidecar(
-	config: CreateVmConfig,
-	options: DefaultConvergedSidecarOptions = {},
-): ConvergedSidecarFactoryOptions {
-	const moduleUrl = options.moduleUrl ?? WASM_MODULE_URL;
-	const binaryUrl = options.binaryUrl ?? WASM_BINARY_URL;
-	return {
-		config,
-		codec: options.codec ?? "bare",
-		onFsReadDenied: options.onFsReadDenied,
-		async loadSidecar(): Promise<ConvergedSidecarHandle> {
-			const host = createConvergedExecutionHostBridge();
-			const wasmModule = (await import(
-				/* @vite-ignore */ String(moduleUrl)
-			)) as BrowserSidecarWasmWebModule;
-			await wasmModule.default(String(binaryUrl));
-			const sidecar = new wasmModule.BrowserSidecarWasm(host.bridge);
-			return {
-				pushFrame: (frame: Uint8Array) => {
-					const response = sidecar.pushFrame(frame);
-					if (!(response instanceof Uint8Array)) {
-						throw new Error("wasm sidecar returned no response frame");
-					}
-					return response;
-				},
-				setNextExecutionId: (executionId: string) => {
-					host.setNextExecutionId(executionId);
-				},
-			};
-		},
-	};
-}
diff --git a/packages/browser/src/driver.ts b/packages/browser/src/driver.ts
deleted file mode 100644
index 35f9b4eb9..000000000
--- a/packages/browser/src/driver.ts
+++ /dev/null
@@ -1,503 +0,0 @@
-import type {
-	NetworkAdapter,
-	Permissions,
-	SystemDriver,
-	VirtualFileSystem,
-} from "./runtime.js";
-import { bytesToBase64 } from "./encoding.js";
-import {
-	createCommandExecutorStub,
-	createEnosysError,
-	createFsStub,
-	createInMemoryFileSystem,
-	createNetworkStub,
-	wrapFileSystem,
-	wrapNetworkAdapter,
-} from "./runtime.js";
-
-const S_IFREG = 0o100000;
-const S_IFDIR = 0o040000;
-
-const BROWSER_SYSTEM_DRIVER_OPTIONS = Symbol.for(
-	"secure-exec.browserSystemDriverOptions",
-);
-
-const LOOPBACK_DNS_NAMES = new Set([
-	"localhost",
-	"ip4-localhost",
-	"ip4-loopback",
-]);
-const LOOPBACK_IPV6_DNS_NAMES = new Set(["ip6-localhost", "ip6-loopback"]);
-
-export interface BrowserRuntimeSystemOptions {
-	filesystem: "opfs" | "memory";
-	networkEnabled: boolean;
-}
-
-type BrowserSystemDriver = SystemDriver & {
-	[BROWSER_SYSTEM_DRIVER_OPTIONS]?: BrowserRuntimeSystemOptions;
-};
-
-function isIpv4Literal(hostname: string): boolean {
-	const parts = hostname.split(".");
-	return (
-		parts.length === 4 &&
-		parts.every((part) => {
-			if (!/^\d+$/.test(part)) return false;
-			const value = Number(part);
-			return value >= 0 && value <= 255 && String(value) === part;
-		})
-	);
-}
-
-function isIpv6Literal(hostname: string): boolean {
-	return hostname.includes(":") && /^[0-9a-fA-F:.]+$/.test(hostname);
-}
-
-function browserLocalDnsLookup(hostname: string): {
-	address?: string;
-	family?: number;
-	error?: string;
-	code?: string;
-} {
-	const normalized = hostname.trim().toLowerCase();
-	if (LOOPBACK_DNS_NAMES.has(normalized)) {
-		return { address: "127.0.0.1", family: 4 };
-	}
-	if (LOOPBACK_IPV6_DNS_NAMES.has(normalized)) {
-		return { address: "::1", family: 6 };
-	}
-	if (isIpv4Literal(normalized)) {
-		return { address: normalized, family: 4 };
-	}
-	if (isIpv6Literal(normalized)) {
-		return { address: normalized, family: 6 };
-	}
-	return { error: "DNS not supported in browser", code: "ENOSYS" };
-}
-
-function normalizePath(path: string): string {
-	if (!path) return "/";
-	let normalized = path.startsWith("/") ? path : `/${path}`;
-	normalized = normalized.replace(/\/+/g, "/");
-	if (normalized.length > 1 && normalized.endsWith("/")) {
-		normalized = normalized.slice(0, -1);
-	}
-	return normalized;
-}
-
-function splitPath(path: string): string[] {
-	const normalized = normalizePath(path);
-	return normalized === "/" ? [] : normalized.slice(1).split("/");
-}
-
-function dirname(path: string): string {
-	const parts = splitPath(path);
-	if (parts.length <= 1) return "/";
-	return `/${parts.slice(0, -1).join("/")}`;
-}
-
-async function getRootHandle(): Promise<FileSystemDirectoryHandle> {
-	if (!("storage" in navigator) || !("getDirectory" in navigator.storage)) {
-		throw createEnosysError("opfs");
-	}
-	return navigator.storage.getDirectory();
-}
-
-/**
- * VFS backed by the Origin Private File System (OPFS) API. Falls back to
- * InMemoryFileSystem when OPFS is unavailable. Rename is not supported
- * (throws ENOSYS) since OPFS doesn't provide atomic rename.
- */
-export class OpfsFileSystem implements VirtualFileSystem {
-	private rootPromise: Promise<FileSystemDirectoryHandle>;
-
-	constructor() {
-		this.rootPromise = getRootHandle();
-	}
-
-	private async getDirHandle(
-		path: string,
-		create = false,
-	): Promise<FileSystemDirectoryHandle> {
-		const root = await this.rootPromise;
-		const parts = splitPath(path);
-		let current = root;
-		for (const part of parts) {
-			current = await current.getDirectoryHandle(part, { create });
-		}
-		return current;
-	}
-
-	private async getFileHandle(
-		path: string,
-		create = false,
-	): Promise<FileSystemFileHandle> {
-		const normalized = normalizePath(path);
-		const parent = dirname(normalized);
-		const name = normalized.split("/").pop() || "";
-		const dir = await this.getDirHandle(parent, create);
-		return dir.getFileHandle(name, { create });
-	}
-
-	async readFile(path: string): Promise<Uint8Array> {
-		const handle = await this.getFileHandle(path);
-		const file = await handle.getFile();
-		const buffer = await file.arrayBuffer();
-		return new Uint8Array(buffer);
-	}
-
-	async readTextFile(path: string): Promise<string> {
-		const handle = await this.getFileHandle(path);
-		const file = await handle.getFile();
-		return file.text();
-	}
-
-	async readDir(path: string): Promise<string[]> {
-		const dir = await this.getDirHandle(path);
-		const entries: string[] = [];
-		for await (const [name] of dir.entries()) {
-			entries.push(name);
-		}
-		return entries;
-	}
-
-	async readDirWithTypes(
-		path: string,
-	): Promise<Array<{ name: string; isDirectory: boolean }>> {
-		const dir = await this.getDirHandle(path);
-		const entries: Array<{ name: string; isDirectory: boolean }> = [];
-		for await (const [name, handle] of dir.entries()) {
-			entries.push({
-				name,
-				isDirectory: handle.kind === "directory",
-			});
-		}
-		return entries;
-	}
-
-	async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-		const normalized = normalizePath(path);
-		await this.mkdir(dirname(normalized));
-		const handle = await this.getFileHandle(normalized, true);
-		const writable = await handle.createWritable();
-		if (typeof content === "string") {
-			await writable.write(content);
-		} else {
-			await writable.write(content as unknown as FileSystemWriteChunkType);
-		}
-		await writable.close();
-	}
-
-	async createDir(path: string): Promise<void> {
-		const normalized = normalizePath(path);
-		const parent = dirname(normalized);
-		await this.getDirHandle(parent, false);
-		await this.getDirHandle(normalized, true);
-	}
-
-	async mkdir(path: string, _options?: { recursive?: boolean }): Promise<void> {
-		const parts = splitPath(path);
-		let current = "";
-		for (const part of parts) {
-			current += `/${part}`;
-			await this.getDirHandle(current, true);
-		}
-	}
-
-	async exists(path: string): Promise<boolean> {
-		try {
-			await this.getFileHandle(path);
-			return true;
-		} catch {
-			try {
-				await this.getDirHandle(path);
-				return true;
-			} catch {
-				return false;
-			}
-		}
-	}
-
-	async stat(path: string) {
-		try {
-			const handle = await this.getFileHandle(path);
-			const file = await handle.getFile();
-			return {
-				mode: S_IFREG | 0o644,
-				size: file.size,
-				blocks: file.size === 0 ? 0 : Math.ceil(file.size / 512),
-				dev: 1,
-				rdev: 0,
-				isDirectory: false,
-				isSymbolicLink: false,
-				atimeMs: file.lastModified,
-				mtimeMs: file.lastModified,
-				ctimeMs: file.lastModified,
-				birthtimeMs: file.lastModified,
-				ino: 0,
-				nlink: 1,
-				uid: 0,
-				gid: 0,
-			};
-		} catch {
-			const normalized = normalizePath(path);
-			try {
-				await this.getDirHandle(normalized);
-				const now = Date.now();
-				return {
-					mode: S_IFDIR | 0o755,
-					size: 4096,
-					blocks: 8,
-					dev: 1,
-					rdev: 0,
-					isDirectory: true,
-					isSymbolicLink: false,
-					atimeMs: now,
-					mtimeMs: now,
-					ctimeMs: now,
-					birthtimeMs: now,
-					ino: 0,
-					nlink: 2,
-					uid: 0,
-					gid: 0,
-				};
-			} catch {
-				throw new Error(
-					`ENOENT: no such file or directory, stat '${normalized}'`,
-				);
-			}
-		}
-	}
-
-	async removeFile(path: string): Promise<void> {
-		const normalized = normalizePath(path);
-		const parent = dirname(normalized);
-		const name = normalized.split("/").pop() || "";
-		const dir = await this.getDirHandle(parent);
-		await dir.removeEntry(name);
-	}
-
-	async removeDir(path: string): Promise<void> {
-		const normalized = normalizePath(path);
-		if (normalized === "/") {
-			throw new Error("EPERM: operation not permitted, rmdir '/'");
-		}
-		const parent = dirname(normalized);
-		const name = normalized.split("/").pop() || "";
-		const dir = await this.getDirHandle(parent);
-		await dir.removeEntry(name);
-	}
-
-	async rename(_oldPath: string, _newPath: string): Promise<void> {
-		throw createEnosysError("rename");
-	}
-
-	async symlink(_target: string, _linkPath: string): Promise<void> {
-		throw createEnosysError("symlink");
-	}
-
-	async readlink(_path: string): Promise<string> {
-		throw createEnosysError("readlink");
-	}
-
-	async lstat(path: string) {
-		return this.stat(path);
-	}
-
-	async link(_oldPath: string, _newPath: string): Promise<void> {
-		throw createEnosysError("link");
-	}
-
-	async chmod(_path: string, _mode: number): Promise<void> {
-		// No-op: OPFS does not support POSIX permissions
-	}
-
-	async chown(_path: string, _uid: number, _gid: number): Promise<void> {
-		// No-op: OPFS does not support POSIX ownership
-	}
-
-	async utimes(_path: string, _atime: number, _mtime: number): Promise<void> {
-		// No-op: OPFS does not support timestamp manipulation
-	}
-
-	async truncate(path: string, length: number): Promise<void> {
-		const handle = await this.getFileHandle(path);
-		const writable = await handle.createWritable({ keepExistingData: true });
-		await writable.truncate(length);
-		await writable.close();
-	}
-
-	async realpath(path: string): Promise<string> {
-		const normalized = normalizePath(path);
-		if (await this.exists(normalized)) return normalized;
-		throw new Error(
-			`ENOENT: no such file or directory, realpath '${normalized}'`,
-		);
-	}
-
-	async pread(
-		path: string,
-		offset: number,
-		length: number,
-	): Promise<Uint8Array> {
-		const data = await this.readFile(path);
-		return data.slice(offset, offset + length);
-	}
-
-	async pwrite(path: string, offset: number, data: Uint8Array): Promise<void> {
-		const content = await this.readFile(path);
-		const endPos = offset + data.length;
-		const newContent = new Uint8Array(Math.max(content.length, endPos));
-		newContent.set(content);
-		newContent.set(data, offset);
-		await this.writeFile(path, newContent);
-	}
-}
-
-export interface BrowserDriverOptions {
-	filesystem?: "opfs" | "memory";
-	permissions?: Permissions;
-	networkAdapter?: NetworkAdapter;
-	useDefaultNetwork?: boolean;
-}
-
-/** Create an OPFS-backed filesystem, falling back to in-memory if OPFS is unavailable. */
-export async function createOpfsFileSystem(): Promise<VirtualFileSystem> {
-	if (
-		!("storage" in navigator) ||
-		typeof navigator.storage.getDirectory !== "function"
-	) {
-		return createInMemoryFileSystem();
-	}
-	return new OpfsFileSystem();
-}
-
-// The platform fetch captured at module load — BEFORE any guest `fetch` global is
-// installed over globalThis.fetch. The guest fetch routes through this adapter, so the
-// adapter MUST call the real fetch (not the overridden global) or it recurses infinitely.
-const NATIVE_FETCH: typeof fetch | undefined =
-	typeof globalThis !== "undefined" && typeof globalThis.fetch === "function"
-		? globalThis.fetch.bind(globalThis)
-		: undefined;
-
-/** Network adapter that delegates to the browser's native `fetch`. DNS and http2 are unsupported. */
-export function createBrowserNetworkAdapter(): NetworkAdapter {
-	const platformFetch = NATIVE_FETCH ?? fetch;
-	return {
-		async fetch(url, options) {
-			const response = await platformFetch(url, {
-				method: options?.method || "GET",
-				headers: options?.headers,
-				body: options?.body as RequestInit["body"],
-			});
-			const headers: Record<string, string> = {};
-			response.headers.forEach((v, k) => {
-				headers[k] = v;
-			});
-
-			const contentType = response.headers.get("content-type") || "";
-			const isBinary =
-				contentType.includes("octet-stream") ||
-				contentType.includes("gzip") ||
-				url.endsWith(".tgz");
-
-			let body: string;
-			if (isBinary) {
-				const buffer = await response.arrayBuffer();
-				body = bytesToBase64(new Uint8Array(buffer));
-				headers["x-body-encoding"] = "base64";
-			} else {
-				body = await response.text();
-			}
-
-			return {
-				ok: response.ok,
-				status: response.status,
-				statusText: response.statusText,
-				headers,
-				body,
-				url: response.url,
-				redirected: response.redirected,
-			};
-		},
-
-		async dnsLookup(hostname) {
-			return browserLocalDnsLookup(hostname);
-		},
-
-		async httpRequest(url, options) {
-			const response = await platformFetch(url, {
-				method: options?.method || "GET",
-				headers: options?.headers,
-				body: options?.body as RequestInit["body"],
-			});
-			const headers: Record<string, string> = {};
-			response.headers.forEach((v, k) => {
-				headers[k] = v;
-			});
-			const body = await response.text();
-			return {
-				status: response.status,
-				statusText: response.statusText,
-				headers,
-				body,
-				url: response.url,
-			};
-		},
-	};
-}
-
-/** Recover runtime-driver options from a browser SystemDriver instance. */
-export function getBrowserSystemDriverOptions(
-	systemDriver: SystemDriver,
-): BrowserRuntimeSystemOptions {
-	const options = (systemDriver as BrowserSystemDriver)[
-		BROWSER_SYSTEM_DRIVER_OPTIONS
-	];
-	if (options) {
-		return options;
-	}
-	return {
-		filesystem: "opfs",
-		networkEnabled: Boolean(systemDriver.network),
-	};
-}
-
-/** Assemble a browser-side SystemDriver with permission-wrapped adapters. */
-export async function createBrowserDriver(
-	options: BrowserDriverOptions = {},
-): Promise<SystemDriver> {
-	const permissions = options.permissions;
-	const filesystemMode = options.filesystem ?? "opfs";
-	const filesystem =
-		filesystemMode === "memory"
-			? createInMemoryFileSystem()
-			: await createOpfsFileSystem();
-	const rawNetworkAdapter =
-		options.networkAdapter ??
-		(options.useDefaultNetwork ? createBrowserNetworkAdapter() : undefined);
-	const networkAdapter = rawNetworkAdapter
-		? wrapNetworkAdapter(rawNetworkAdapter, permissions)
-		: undefined;
-
-	const systemDriver: BrowserSystemDriver = {
-		filesystem: wrapFileSystem(filesystem, permissions),
-		network: networkAdapter,
-		commandExecutor: createCommandExecutorStub(),
-		permissions,
-		runtime: {
-			process: {},
-			os: {},
-		},
-	};
-
-	systemDriver[BROWSER_SYSTEM_DRIVER_OPTIONS] = {
-		filesystem: filesystemMode,
-		networkEnabled: Boolean(networkAdapter),
-	};
-
-	return systemDriver;
-}
-
-export { createCommandExecutorStub, createFsStub, createNetworkStub };
diff --git a/packages/browser/src/encoding.ts b/packages/browser/src/encoding.ts
deleted file mode 100644
index 9efce8267..000000000
--- a/packages/browser/src/encoding.ts
+++ /dev/null
@@ -1,119 +0,0 @@
-export function toUint8Array(value: unknown): Uint8Array {
-	if (value instanceof Uint8Array) {
-		return value;
-	}
-	if (ArrayBuffer.isView(value)) {
-		return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
-	}
-	if (value instanceof ArrayBuffer) {
-		return new Uint8Array(value);
-	}
-	return new TextEncoder().encode(String(value));
-}
-
-export function bytesToBase64(value: Uint8Array): string {
-	const bufferCtor = (
-		globalThis as {
-			Buffer?: {
-				from(value: Uint8Array): { toString(encoding: "base64"): string };
-			};
-		}
-	).Buffer;
-	if (bufferCtor) {
-		return bufferCtor.from(value).toString("base64");
-	}
-
-	let binary = "";
-	for (let offset = 0; offset < value.byteLength; offset += 0x8000) {
-		const chunk = value.subarray(offset, offset + 0x8000);
-		binary += String.fromCharCode(...chunk);
-	}
-	return btoa(binary);
-}
-
-export function base64ToBytes(value: string): Uint8Array {
-	const bufferCtor = (
-		globalThis as {
-			Buffer?: {
-				from(value: string, encoding: "base64"): Uint8Array;
-			};
-		}
-	).Buffer;
-	if (bufferCtor) {
-		return new Uint8Array(bufferCtor.from(value, "base64"));
-	}
-
-	const binary = atob(value);
-	const out = new Uint8Array(binary.length);
-	for (let offset = 0; offset < binary.length; offset += 1) {
-		out[offset] = binary.charCodeAt(offset);
-	}
-	return out;
-}
-
-export function guestEncodingBootstrapCode(): string {
-	return `
-		if (!globalThis.__agentOSEncoding) {
-			const encoder = new TextEncoder();
-			const bytesToBase64 = (bytes) => {
-				let binary = "";
-				for (let offset = 0; offset < bytes.byteLength; offset += 0x8000) {
-					const chunk = bytes.subarray(offset, offset + 0x8000);
-					binary += String.fromCharCode(...chunk);
-				}
-				return btoa(binary);
-			};
-			const base64ToBytes = (value) => {
-				const binary = atob(value);
-				const out = new Uint8Array(binary.length);
-				for (let index = 0; index < binary.length; index += 1) {
-					out[index] = binary.charCodeAt(index);
-				}
-				return out;
-			};
-			const toBytes = (value, encoding) => {
-				if (value == null) return new Uint8Array(0);
-				if (typeof value === "string") {
-					if (encoding === "hex") {
-						const out = new Uint8Array(Math.floor(value.length / 2));
-						for (let index = 0; index < out.length; index += 1) {
-							out[index] = parseInt(value.slice(index * 2, index * 2 + 2), 16);
-						}
-						return out;
-					}
-					if (encoding === "base64") return base64ToBytes(value);
-					return encoder.encode(value);
-				}
-				if (ArrayBuffer.isView(value)) {
-					return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
-				}
-				if (value instanceof ArrayBuffer) return new Uint8Array(value);
-				if (Array.isArray(value)) return new Uint8Array(value);
-				if (value && value.type === "Buffer" && Array.isArray(value.data)) return new Uint8Array(value.data);
-				if (value && typeof value === "object" && value.type === "secret" && typeof value.export === "function") {
-					return toBytes(value.export());
-				}
-				return encoder.encode(String(value));
-			};
-			Object.defineProperty(globalThis, "__agentOSEncoding", {
-				configurable: true,
-				value: {
-					base64ToBytes,
-					bytesToBase64,
-					decodeBytesPayload(value) {
-						if (typeof value === "string") return encoder.encode(value);
-						if (!value || value.__agentOSType !== "bytes" || typeof value.base64 !== "string") {
-							return new Uint8Array(0);
-						}
-						return base64ToBytes(value.base64);
-					},
-					encodeBytesPayload(value) {
-						if (value == null) return null;
-						return { __agentOSType: "bytes", base64: bytesToBase64(toBytes(value)) };
-					},
-					toBytes,
-				},
-			});
-		}
-	`;
-}
diff --git a/packages/browser/src/errno.ts b/packages/browser/src/errno.ts
deleted file mode 100644
index 3371e02e0..000000000
--- a/packages/browser/src/errno.ts
+++ /dev/null
@@ -1,81 +0,0 @@
-// Canonical Linux errno numbers, so guest-facing errors carry the same negated
-// `errno` Node reports (e.g. ENOENT -> -2, EEXIST -> -17) for every code, not
-// just a hardcoded few. The structured error `code` (from the kernel or the
-// fd-table) is the source of truth; this maps it to the number.
-//
-// Mirrors the POSIX_ERRNO table in packages/build-tools/bridge-src/prelude.ts
-// (the V8 bridge bundle is a separate generated JS asset that cannot import this
-// TS module). Keep the two in sync.
-const POSIX_ERRNO: Record<string, number> = {
-	EPERM: 1,
-	ENOENT: 2,
-	ESRCH: 3,
-	EINTR: 4,
-	EIO: 5,
-	ENXIO: 6,
-	E2BIG: 7,
-	ENOEXEC: 8,
-	EBADF: 9,
-	ECHILD: 10,
-	EAGAIN: 11,
-	EWOULDBLOCK: 11,
-	ENOMEM: 12,
-	EACCES: 13,
-	EFAULT: 14,
-	ENOTBLK: 15,
-	EBUSY: 16,
-	EEXIST: 17,
-	EXDEV: 18,
-	ENODEV: 19,
-	ENOTDIR: 20,
-	EISDIR: 21,
-	EINVAL: 22,
-	ENFILE: 23,
-	EMFILE: 24,
-	ENOTTY: 25,
-	ETXTBSY: 26,
-	EFBIG: 27,
-	ENOSPC: 28,
-	ESPIPE: 29,
-	EROFS: 30,
-	EMLINK: 31,
-	EPIPE: 32,
-	EDOM: 33,
-	ERANGE: 34,
-	ENAMETOOLONG: 36,
-	ENOSYS: 38,
-	ENOTEMPTY: 39,
-	ELOOP: 40,
-	EOVERFLOW: 75,
-	ENOTSOCK: 88,
-	EDESTADDRREQ: 89,
-	EMSGSIZE: 90,
-	EPROTOTYPE: 91,
-	ENOPROTOOPT: 92,
-	EPROTONOSUPPORT: 93,
-	ENOTSUP: 95,
-	EOPNOTSUPP: 95,
-	EAFNOSUPPORT: 97,
-	EADDRINUSE: 98,
-	EADDRNOTAVAIL: 99,
-	ENETDOWN: 100,
-	ENETUNREACH: 101,
-	ECONNABORTED: 103,
-	ECONNRESET: 104,
-	ENOBUFS: 105,
-	EISCONN: 106,
-	ENOTCONN: 107,
-	ETIMEDOUT: 110,
-	ECONNREFUSED: 111,
-	EHOSTUNREACH: 113,
-	EALREADY: 114,
-	EINPROGRESS: 115,
-};
-
-/** The negated Linux errno for a code (Node's `err.errno`), or undefined. */
-export function posixErrno(code: string | undefined): number | undefined {
-	if (code && Object.prototype.hasOwnProperty.call(POSIX_ERRNO, code)) {
-		return -POSIX_ERRNO[code];
-	}
-	return undefined;
-}
diff --git a/packages/browser/src/generated/buffer-polyfill.ts b/packages/browser/src/generated/buffer-polyfill.ts
deleted file mode 100644
index 58becfcce..000000000
--- a/packages/browser/src/generated/buffer-polyfill.ts
+++ /dev/null
@@ -1,4 +0,0 @@
-// @generated - run node packages/build-tools/scripts/build-browser-buffer-polyfill.mjs
-export const BROWSER_BUFFER_POLYFILL_CODE =
-"var process = globalThis.process || {\n  env: {},\n  nextTick: (fn, ...args) => queueMicrotask(() => fn(...args)),\n};\nvar __getOwnPropNames = Object.getOwnPropertyNames;\nvar __commonJS = (cb, mod) => function __require() {\n  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;\n};\n\n// node_modules/.pnpm/base64-js@1.5.1/node_modules/base64-js/index.js\nvar require_base64_js = __commonJS({\n  \"node_modules/.pnpm/base64-js@1.5.1/node_modules/base64-js/index.js\"(exports2) {\n    \"use strict\";\n    exports2.byteLength = byteLength;\n    exports2.toByteArray = toByteArray;\n    exports2.fromByteArray = fromByteArray;\n    var lookup = [];\n    var revLookup = [];\n    var Arr = typeof Uint8Array !== \"undefined\" ? Uint8Array : Array;\n    var code = \"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/\";\n    for (i = 0, len = code.length; i < len; ++i) {\n      lookup[i] = code[i];\n      revLookup[code.charCodeAt(i)] = i;\n    }\n    var i;\n    var len;\n    revLookup[\"-\".charCodeAt(0)] = 62;\n    revLookup[\"_\".charCodeAt(0)] = 63;\n    function getLens(b64) {\n      var len2 = b64.length;\n      if (len2 % 4 > 0) {\n        throw new Error(\"Invalid string. Length must be a multiple of 4\");\n      }\n      var validLen = b64.indexOf(\"=\");\n      if (validLen === -1) validLen = len2;\n      var placeHoldersLen = validLen === len2 ? 0 : 4 - validLen % 4;\n      return [validLen, placeHoldersLen];\n    }\n    function byteLength(b64) {\n      var lens = getLens(b64);\n      var validLen = lens[0];\n      var placeHoldersLen = lens[1];\n      return (validLen + placeHoldersLen) * 3 / 4 - placeHoldersLen;\n    }\n    function _byteLength(b64, validLen, placeHoldersLen) {\n      return (validLen + placeHoldersLen) * 3 / 4 - placeHoldersLen;\n    }\n    function toByteArray(b64) {\n      var tmp;\n      var lens = getLens(b64);\n      var validLen = lens[0];\n      var placeHoldersLen = lens[1];\n      var arr = new Arr(_byteLength(b64, validLen, placeHoldersLen));\n      var curByte = 0;\n      var len2 = placeHoldersLen > 0 ? validLen - 4 : validLen;\n      var i2;\n      for (i2 = 0; i2 < len2; i2 += 4) {\n        tmp = revLookup[b64.charCodeAt(i2)] << 18 | revLookup[b64.charCodeAt(i2 + 1)] << 12 | revLookup[b64.charCodeAt(i2 + 2)] << 6 | revLookup[b64.charCodeAt(i2 + 3)];\n        arr[curByte++] = tmp >> 16 & 255;\n        arr[curByte++] = tmp >> 8 & 255;\n        arr[curByte++] = tmp & 255;\n      }\n      if (placeHoldersLen === 2) {\n        tmp = revLookup[b64.charCodeAt(i2)] << 2 | revLookup[b64.charCodeAt(i2 + 1)] >> 4;\n        arr[curByte++] = tmp & 255;\n      }\n      if (placeHoldersLen === 1) {\n        tmp = revLookup[b64.charCodeAt(i2)] << 10 | revLookup[b64.charCodeAt(i2 + 1)] << 4 | revLookup[b64.charCodeAt(i2 + 2)] >> 2;\n        arr[curByte++] = tmp >> 8 & 255;\n        arr[curByte++] = tmp & 255;\n      }\n      return arr;\n    }\n    function tripletToBase64(num) {\n      return lookup[num >> 18 & 63] + lookup[num >> 12 & 63] + lookup[num >> 6 & 63] + lookup[num & 63];\n    }\n    function encodeChunk(uint8, start, end) {\n      var tmp;\n      var output = [];\n      for (var i2 = start; i2 < end; i2 += 3) {\n        tmp = (uint8[i2] << 16 & 16711680) + (uint8[i2 + 1] << 8 & 65280) + (uint8[i2 + 2] & 255);\n        output.push(tripletToBase64(tmp));\n      }\n      return output.join(\"\");\n    }\n    function fromByteArray(uint8) {\n      var tmp;\n      var len2 = uint8.length;\n      var extraBytes = len2 % 3;\n      var parts = [];\n      var maxChunkLength = 16383;\n      for (var i2 = 0, len22 = len2 - extraBytes; i2 < len22; i2 += maxChunkLength) {\n        parts.push(encodeChunk(uint8, i2, i2 + maxChunkLength > len22 ? len22 : i2 + maxChunkLength));\n      }\n      if (extraBytes === 1) {\n        tmp = uint8[len2 - 1];\n        parts.push(\n          lookup[tmp >> 2] + lookup[tmp << 4 & 63] + \"==\"\n        );\n      } else if (extraBytes === 2) {\n        tmp = (uint8[len2 - 2] << 8) + uint8[len2 - 1];\n        parts.push(\n          lookup[tmp >> 10] + lookup[tmp >> 4 & 63] + lookup[tmp << 2 & 63] + \"=\"\n        );\n      }\n      return parts.join(\"\");\n    }\n  }\n});\n\n// node_modules/.pnpm/ieee754@1.2.1/node_modules/ieee754/index.js\nvar require_ieee754 = __commonJS({\n  \"node_modules/.pnpm/ieee754@1.2.1/node_modules/ieee754/index.js\"(exports2) {\n    exports2.read = function(buffer2, offset, isLE, mLen, nBytes) {\n      var e, m;\n      var eLen = nBytes * 8 - mLen - 1;\n      var eMax = (1 << eLen) - 1;\n      var eBias = eMax >> 1;\n      var nBits = -7;\n      var i = isLE ? nBytes - 1 : 0;\n      var d = isLE ? -1 : 1;\n      var s = buffer2[offset + i];\n      i += d;\n      e = s & (1 << -nBits) - 1;\n      s >>= -nBits;\n      nBits += eLen;\n      for (; nBits > 0; e = e * 256 + buffer2[offset + i], i += d, nBits -= 8) {\n      }\n      m = e & (1 << -nBits) - 1;\n      e >>= -nBits;\n      nBits += mLen;\n      for (; nBits > 0; m = m * 256 + buffer2[offset + i], i += d, nBits -= 8) {\n      }\n      if (e === 0) {\n        e = 1 - eBias;\n      } else if (e === eMax) {\n        return m ? NaN : (s ? -1 : 1) * Infinity;\n      } else {\n        m = m + Math.pow(2, mLen);\n        e = e - eBias;\n      }\n      return (s ? -1 : 1) * m * Math.pow(2, e - mLen);\n    };\n    exports2.write = function(buffer2, value, offset, isLE, mLen, nBytes) {\n      var e, m, c;\n      var eLen = nBytes * 8 - mLen - 1;\n      var eMax = (1 << eLen) - 1;\n      var eBias = eMax >> 1;\n      var rt = mLen === 23 ? Math.pow(2, -24) - Math.pow(2, -77) : 0;\n      var i = isLE ? 0 : nBytes - 1;\n      var d = isLE ? 1 : -1;\n      var s = value < 0 || value === 0 && 1 / value < 0 ? 1 : 0;\n      value = Math.abs(value);\n      if (isNaN(value) || value === Infinity) {\n        m = isNaN(value) ? 1 : 0;\n        e = eMax;\n      } else {\n        e = Math.floor(Math.log(value) / Math.LN2);\n        if (value * (c = Math.pow(2, -e)) < 1) {\n          e--;\n          c *= 2;\n        }\n        if (e + eBias >= 1) {\n          value += rt / c;\n        } else {\n          value += rt * Math.pow(2, 1 - eBias);\n        }\n        if (value * c >= 2) {\n          e++;\n          c /= 2;\n        }\n        if (e + eBias >= eMax) {\n          m = 0;\n          e = eMax;\n        } else if (e + eBias >= 1) {\n          m = (value * c - 1) * Math.pow(2, mLen);\n          e = e + eBias;\n        } else {\n          m = value * Math.pow(2, eBias - 1) * Math.pow(2, mLen);\n          e = 0;\n        }\n      }\n      for (; mLen >= 8; buffer2[offset + i] = m & 255, i += d, m /= 256, mLen -= 8) {\n      }\n      e = e << mLen | m;\n      eLen += mLen;\n      for (; eLen > 0; buffer2[offset + i] = e & 255, i += d, e /= 256, eLen -= 8) {\n      }\n      buffer2[offset + i - d] |= s * 128;\n    };\n  }\n});\n\n// node_modules/.pnpm/buffer@5.7.1/node_modules/buffer/index.js\nvar require_buffer = __commonJS({\n  \"node_modules/.pnpm/buffer@5.7.1/node_modules/buffer/index.js\"(exports2) {\n    \"use strict\";\n    var base64 = require_base64_js();\n    var ieee754 = require_ieee754();\n    var customInspectSymbol = typeof Symbol === \"function\" && typeof Symbol[\"for\"] === \"function\" ? Symbol[\"for\"](\"nodejs.util.inspect.custom\") : null;\n    exports2.Buffer = Buffer2;\n    exports2.SlowBuffer = SlowBuffer;\n    exports2.INSPECT_MAX_BYTES = 50;\n    var K_MAX_LENGTH = 2147483647;\n    exports2.kMaxLength = K_MAX_LENGTH;\n    Buffer2.TYPED_ARRAY_SUPPORT = typedArraySupport();\n    if (!Buffer2.TYPED_ARRAY_SUPPORT && typeof console !== \"undefined\" && typeof console.error === \"function\") {\n      console.error(\n        \"This browser lacks typed array (Uint8Array) support which is required by `buffer` v5.x. Use `buffer` v4.x if you require old browser support.\"\n      );\n    }\n    function typedArraySupport() {\n      try {\n        var arr = new Uint8Array(1);\n        var proto = { foo: function() {\n          return 42;\n        } };\n        Object.setPrototypeOf(proto, Uint8Array.prototype);\n        Object.setPrototypeOf(arr, proto);\n        return arr.foo() === 42;\n      } catch (e) {\n        return false;\n      }\n    }\n    Object.defineProperty(Buffer2.prototype, \"parent\", {\n      enumerable: true,\n      get: function() {\n        if (!Buffer2.isBuffer(this)) return void 0;\n        return this.buffer;\n      }\n    });\n    Object.defineProperty(Buffer2.prototype, \"offset\", {\n      enumerable: true,\n      get: function() {\n        if (!Buffer2.isBuffer(this)) return void 0;\n        return this.byteOffset;\n      }\n    });\n    function createBuffer(length) {\n      if (length > K_MAX_LENGTH) {\n        throw new RangeError('The value \"' + length + '\" is invalid for option \"size\"');\n      }\n      var buf = new Uint8Array(length);\n      Object.setPrototypeOf(buf, Buffer2.prototype);\n      return buf;\n    }\n    function Buffer2(arg, encodingOrOffset, length) {\n      if (typeof arg === \"number\") {\n        if (typeof encodingOrOffset === \"string\") {\n          throw new TypeError(\n            'The \"string\" argument must be of type string. Received type number'\n          );\n        }\n        return allocUnsafe(arg);\n      }\n      return from(arg, encodingOrOffset, length);\n    }\n    Buffer2.poolSize = 8192;\n    function from(value, encodingOrOffset, length) {\n      if (typeof value === \"string\") {\n        return fromString(value, encodingOrOffset);\n      }\n      if (ArrayBuffer.isView(value)) {\n        return fromArrayView(value);\n      }\n      if (value == null) {\n        throw new TypeError(\n          \"The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type \" + typeof value\n        );\n      }\n      if (isInstance(value, ArrayBuffer) || value && isInstance(value.buffer, ArrayBuffer)) {\n        return fromArrayBuffer(value, encodingOrOffset, length);\n      }\n      if (typeof SharedArrayBuffer !== \"undefined\" && (isInstance(value, SharedArrayBuffer) || value && isInstance(value.buffer, SharedArrayBuffer))) {\n        return fromArrayBuffer(value, encodingOrOffset, length);\n      }\n      if (typeof value === \"number\") {\n        throw new TypeError(\n          'The \"value\" argument must not be of type number. Received type number'\n        );\n      }\n      var valueOf = value.valueOf && value.valueOf();\n      if (valueOf != null && valueOf !== value) {\n        return Buffer2.from(valueOf, encodingOrOffset, length);\n      }\n      var b = fromObject(value);\n      if (b) return b;\n      if (typeof Symbol !== \"undefined\" && Symbol.toPrimitive != null && typeof value[Symbol.toPrimitive] === \"function\") {\n        return Buffer2.from(\n          value[Symbol.toPrimitive](\"string\"),\n          encodingOrOffset,\n          length\n        );\n      }\n      throw new TypeError(\n        \"The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type \" + typeof value\n      );\n    }\n    Buffer2.from = function(value, encodingOrOffset, length) {\n      return from(value, encodingOrOffset, length);\n    };\n    Object.setPrototypeOf(Buffer2.prototype, Uint8Array.prototype);\n    Object.setPrototypeOf(Buffer2, Uint8Array);\n    function assertSize(size) {\n      if (typeof size !== \"number\") {\n        throw new TypeError('\"size\" argument must be of type number');\n      } else if (size < 0) {\n        throw new RangeError('The value \"' + size + '\" is invalid for option \"size\"');\n      }\n    }\n    function alloc(size, fill, encoding) {\n      assertSize(size);\n      if (size <= 0) {\n        return createBuffer(size);\n      }\n      if (fill !== void 0) {\n        return typeof encoding === \"string\" ? createBuffer(size).fill(fill, encoding) : createBuffer(size).fill(fill);\n      }\n      return createBuffer(size);\n    }\n    Buffer2.alloc = function(size, fill, encoding) {\n      return alloc(size, fill, encoding);\n    };\n    function allocUnsafe(size) {\n      assertSize(size);\n      return createBuffer(size < 0 ? 0 : checked(size) | 0);\n    }\n    Buffer2.allocUnsafe = function(size) {\n      return allocUnsafe(size);\n    };\n    Buffer2.allocUnsafeSlow = function(size) {\n      return allocUnsafe(size);\n    };\n    function fromString(string, encoding) {\n      if (typeof encoding !== \"string\" || encoding === \"\") {\n        encoding = \"utf8\";\n      }\n      if (!Buffer2.isEncoding(encoding)) {\n        throw new TypeError(\"Unknown encoding: \" + encoding);\n      }\n      var length = byteLength(string, encoding) | 0;\n      var buf = createBuffer(length);\n      var actual = buf.write(string, encoding);\n      if (actual !== length) {\n        buf = buf.slice(0, actual);\n      }\n      return buf;\n    }\n    function fromArrayLike(array) {\n      var length = array.length < 0 ? 0 : checked(array.length) | 0;\n      var buf = createBuffer(length);\n      for (var i = 0; i < length; i += 1) {\n        buf[i] = array[i] & 255;\n      }\n      return buf;\n    }\n    function fromArrayView(arrayView) {\n      if (isInstance(arrayView, Uint8Array)) {\n        var copy = new Uint8Array(arrayView);\n        return fromArrayBuffer(copy.buffer, copy.byteOffset, copy.byteLength);\n      }\n      return fromArrayLike(arrayView);\n    }\n    function fromArrayBuffer(array, byteOffset, length) {\n      if (byteOffset < 0 || array.byteLength < byteOffset) {\n        throw new RangeError('\"offset\" is outside of buffer bounds');\n      }\n      if (array.byteLength < byteOffset + (length || 0)) {\n        throw new RangeError('\"length\" is outside of buffer bounds');\n      }\n      var buf;\n      if (byteOffset === void 0 && length === void 0) {\n        buf = new Uint8Array(array);\n      } else if (length === void 0) {\n        buf = new Uint8Array(array, byteOffset);\n      } else {\n        buf = new Uint8Array(array, byteOffset, length);\n      }\n      Object.setPrototypeOf(buf, Buffer2.prototype);\n      return buf;\n    }\n    function fromObject(obj) {\n      if (Buffer2.isBuffer(obj)) {\n        var len = checked(obj.length) | 0;\n        var buf = createBuffer(len);\n        if (buf.length === 0) {\n          return buf;\n        }\n        obj.copy(buf, 0, 0, len);\n        return buf;\n      }\n      if (obj.length !== void 0) {\n        if (typeof obj.length !== \"number\" || numberIsNaN(obj.length)) {\n          return createBuffer(0);\n        }\n        return fromArrayLike(obj);\n      }\n      if (obj.type === \"Buffer\" && Array.isArray(obj.data)) {\n        return fromArrayLike(obj.data);\n      }\n    }\n    function checked(length) {\n      if (length >= K_MAX_LENGTH) {\n        throw new RangeError(\"Attempt to allocate Buffer larger than maximum size: 0x\" + K_MAX_LENGTH.toString(16) + \" bytes\");\n      }\n      return length | 0;\n    }\n    function SlowBuffer(length) {\n      if (+length != length) {\n        length = 0;\n      }\n      return Buffer2.alloc(+length);\n    }\n    Buffer2.isBuffer = function isBuffer(b) {\n      return b != null && b._isBuffer === true && b !== Buffer2.prototype;\n    };\n    Buffer2.compare = function compare(a, b) {\n      if (isInstance(a, Uint8Array)) a = Buffer2.from(a, a.offset, a.byteLength);\n      if (isInstance(b, Uint8Array)) b = Buffer2.from(b, b.offset, b.byteLength);\n      if (!Buffer2.isBuffer(a) || !Buffer2.isBuffer(b)) {\n        throw new TypeError(\n          'The \"buf1\", \"buf2\" arguments must be one of type Buffer or Uint8Array'\n        );\n      }\n      if (a === b) return 0;\n      var x = a.length;\n      var y = b.length;\n      for (var i = 0, len = Math.min(x, y); i < len; ++i) {\n        if (a[i] !== b[i]) {\n          x = a[i];\n          y = b[i];\n          break;\n        }\n      }\n      if (x < y) return -1;\n      if (y < x) return 1;\n      return 0;\n    };\n    Buffer2.isEncoding = function isEncoding(encoding) {\n      switch (String(encoding).toLowerCase()) {\n        case \"hex\":\n        case \"utf8\":\n        case \"utf-8\":\n        case \"ascii\":\n        case \"latin1\":\n        case \"binary\":\n        case \"base64\":\n        case \"ucs2\":\n        case \"ucs-2\":\n        case \"utf16le\":\n        case \"utf-16le\":\n          return true;\n        default:\n          return false;\n      }\n    };\n    Buffer2.concat = function concat(list, length) {\n      if (!Array.isArray(list)) {\n        throw new TypeError('\"list\" argument must be an Array of Buffers');\n      }\n      if (list.length === 0) {\n        return Buffer2.alloc(0);\n      }\n      var i;\n      if (length === void 0) {\n        length = 0;\n        for (i = 0; i < list.length; ++i) {\n          length += list[i].length;\n        }\n      }\n      var buffer2 = Buffer2.allocUnsafe(length);\n      var pos = 0;\n      for (i = 0; i < list.length; ++i) {\n        var buf = list[i];\n        if (isInstance(buf, Uint8Array)) {\n          if (pos + buf.length > buffer2.length) {\n            Buffer2.from(buf).copy(buffer2, pos);\n          } else {\n            Uint8Array.prototype.set.call(\n              buffer2,\n              buf,\n              pos\n            );\n          }\n        } else if (!Buffer2.isBuffer(buf)) {\n          throw new TypeError('\"list\" argument must be an Array of Buffers');\n        } else {\n          buf.copy(buffer2, pos);\n        }\n        pos += buf.length;\n      }\n      return buffer2;\n    };\n    function byteLength(string, encoding) {\n      if (Buffer2.isBuffer(string)) {\n        return string.length;\n      }\n      if (ArrayBuffer.isView(string) || isInstance(string, ArrayBuffer)) {\n        return string.byteLength;\n      }\n      if (typeof string !== \"string\") {\n        throw new TypeError(\n          'The \"string\" argument must be one of type string, Buffer, or ArrayBuffer. Received type ' + typeof string\n        );\n      }\n      var len = string.length;\n      var mustMatch = arguments.length > 2 && arguments[2] === true;\n      if (!mustMatch && len === 0) return 0;\n      var loweredCase = false;\n      for (; ; ) {\n        switch (encoding) {\n          case \"ascii\":\n          case \"latin1\":\n          case \"binary\":\n            return len;\n          case \"utf8\":\n          case \"utf-8\":\n            return utf8ToBytes(string).length;\n          case \"ucs2\":\n          case \"ucs-2\":\n          case \"utf16le\":\n          case \"utf-16le\":\n            return len * 2;\n          case \"hex\":\n            return len >>> 1;\n          case \"base64\":\n            return base64ToBytes(string).length;\n          default:\n            if (loweredCase) {\n              return mustMatch ? -1 : utf8ToBytes(string).length;\n            }\n            encoding = (\"\" + encoding).toLowerCase();\n            loweredCase = true;\n        }\n      }\n    }\n    Buffer2.byteLength = byteLength;\n    function slowToString(encoding, start, end) {\n      var loweredCase = false;\n      if (start === void 0 || start < 0) {\n        start = 0;\n      }\n      if (start > this.length) {\n        return \"\";\n      }\n      if (end === void 0 || end > this.length) {\n        end = this.length;\n      }\n      if (end <= 0) {\n        return \"\";\n      }\n      end >>>= 0;\n      start >>>= 0;\n      if (end <= start) {\n        return \"\";\n      }\n      if (!encoding) encoding = \"utf8\";\n      while (true) {\n        switch (encoding) {\n          case \"hex\":\n            return hexSlice(this, start, end);\n          case \"utf8\":\n          case \"utf-8\":\n            return utf8Slice(this, start, end);\n          case \"ascii\":\n            return asciiSlice(this, start, end);\n          case \"latin1\":\n          case \"binary\":\n            return latin1Slice(this, start, end);\n          case \"base64\":\n            return base64Slice(this, start, end);\n          case \"ucs2\":\n          case \"ucs-2\":\n          case \"utf16le\":\n          case \"utf-16le\":\n            return utf16leSlice(this, start, end);\n          default:\n            if (loweredCase) throw new TypeError(\"Unknown encoding: \" + encoding);\n            encoding = (encoding + \"\").toLowerCase();\n            loweredCase = true;\n        }\n      }\n    }\n    Buffer2.prototype._isBuffer = true;\n    function swap(b, n, m) {\n      var i = b[n];\n      b[n] = b[m];\n      b[m] = i;\n    }\n    Buffer2.prototype.swap16 = function swap16() {\n      var len = this.length;\n      if (len % 2 !== 0) {\n        throw new RangeError(\"Buffer size must be a multiple of 16-bits\");\n      }\n      for (var i = 0; i < len; i += 2) {\n        swap(this, i, i + 1);\n      }\n      return this;\n    };\n    Buffer2.prototype.swap32 = function swap32() {\n      var len = this.length;\n      if (len % 4 !== 0) {\n        throw new RangeError(\"Buffer size must be a multiple of 32-bits\");\n      }\n      for (var i = 0; i < len; i += 4) {\n        swap(this, i, i + 3);\n        swap(this, i + 1, i + 2);\n      }\n      return this;\n    };\n    Buffer2.prototype.swap64 = function swap64() {\n      var len = this.length;\n      if (len % 8 !== 0) {\n        throw new RangeError(\"Buffer size must be a multiple of 64-bits\");\n      }\n      for (var i = 0; i < len; i += 8) {\n        swap(this, i, i + 7);\n        swap(this, i + 1, i + 6);\n        swap(this, i + 2, i + 5);\n        swap(this, i + 3, i + 4);\n      }\n      return this;\n    };\n    Buffer2.prototype.toString = function toString() {\n      var length = this.length;\n      if (length === 0) return \"\";\n      if (arguments.length === 0) return utf8Slice(this, 0, length);\n      return slowToString.apply(this, arguments);\n    };\n    Buffer2.prototype.toLocaleString = Buffer2.prototype.toString;\n    Buffer2.prototype.equals = function equals(b) {\n      if (!Buffer2.isBuffer(b)) throw new TypeError(\"Argument must be a Buffer\");\n      if (this === b) return true;\n      return Buffer2.compare(this, b) === 0;\n    };\n    Buffer2.prototype.inspect = function inspect() {\n      var str = \"\";\n      var max = exports2.INSPECT_MAX_BYTES;\n      str = this.toString(\"hex\", 0, max).replace(/(.{2})/g, \"$1 \").trim();\n      if (this.length > max) str += \" ... \";\n      return \"<Buffer \" + str + \">\";\n    };\n    if (customInspectSymbol) {\n      Buffer2.prototype[customInspectSymbol] = Buffer2.prototype.inspect;\n    }\n    Buffer2.prototype.compare = function compare(target, start, end, thisStart, thisEnd) {\n      if (isInstance(target, Uint8Array)) {\n        target = Buffer2.from(target, target.offset, target.byteLength);\n      }\n      if (!Buffer2.isBuffer(target)) {\n        throw new TypeError(\n          'The \"target\" argument must be one of type Buffer or Uint8Array. Received type ' + typeof target\n        );\n      }\n      if (start === void 0) {\n        start = 0;\n      }\n      if (end === void 0) {\n        end = target ? target.length : 0;\n      }\n      if (thisStart === void 0) {\n        thisStart = 0;\n      }\n      if (thisEnd === void 0) {\n        thisEnd = this.length;\n      }\n      if (start < 0 || end > target.length || thisStart < 0 || thisEnd > this.length) {\n        throw new RangeError(\"out of range index\");\n      }\n      if (thisStart >= thisEnd && start >= end) {\n        return 0;\n      }\n      if (thisStart >= thisEnd) {\n        return -1;\n      }\n      if (start >= end) {\n        return 1;\n      }\n      start >>>= 0;\n      end >>>= 0;\n      thisStart >>>= 0;\n      thisEnd >>>= 0;\n      if (this === target) return 0;\n      var x = thisEnd - thisStart;\n      var y = end - start;\n      var len = Math.min(x, y);\n      var thisCopy = this.slice(thisStart, thisEnd);\n      var targetCopy = target.slice(start, end);\n      for (var i = 0; i < len; ++i) {\n        if (thisCopy[i] !== targetCopy[i]) {\n          x = thisCopy[i];\n          y = targetCopy[i];\n          break;\n        }\n      }\n      if (x < y) return -1;\n      if (y < x) return 1;\n      return 0;\n    };\n    function bidirectionalIndexOf(buffer2, val, byteOffset, encoding, dir) {\n      if (buffer2.length === 0) return -1;\n      if (typeof byteOffset === \"string\") {\n        encoding = byteOffset;\n        byteOffset = 0;\n      } else if (byteOffset > 2147483647) {\n        byteOffset = 2147483647;\n      } else if (byteOffset < -2147483648) {\n        byteOffset = -2147483648;\n      }\n      byteOffset = +byteOffset;\n      if (numberIsNaN(byteOffset)) {\n        byteOffset = dir ? 0 : buffer2.length - 1;\n      }\n      if (byteOffset < 0) byteOffset = buffer2.length + byteOffset;\n      if (byteOffset >= buffer2.length) {\n        if (dir) return -1;\n        else byteOffset = buffer2.length - 1;\n      } else if (byteOffset < 0) {\n        if (dir) byteOffset = 0;\n        else return -1;\n      }\n      if (typeof val === \"string\") {\n        val = Buffer2.from(val, encoding);\n      }\n      if (Buffer2.isBuffer(val)) {\n        if (val.length === 0) {\n          return -1;\n        }\n        return arrayIndexOf(buffer2, val, byteOffset, encoding, dir);\n      } else if (typeof val === \"number\") {\n        val = val & 255;\n        if (typeof Uint8Array.prototype.indexOf === \"function\") {\n          if (dir) {\n            return Uint8Array.prototype.indexOf.call(buffer2, val, byteOffset);\n          } else {\n            return Uint8Array.prototype.lastIndexOf.call(buffer2, val, byteOffset);\n          }\n        }\n        return arrayIndexOf(buffer2, [val], byteOffset, encoding, dir);\n      }\n      throw new TypeError(\"val must be string, number or Buffer\");\n    }\n    function arrayIndexOf(arr, val, byteOffset, encoding, dir) {\n      var indexSize = 1;\n      var arrLength = arr.length;\n      var valLength = val.length;\n      if (encoding !== void 0) {\n        encoding = String(encoding).toLowerCase();\n        if (encoding === \"ucs2\" || encoding === \"ucs-2\" || encoding === \"utf16le\" || encoding === \"utf-16le\") {\n          if (arr.length < 2 || val.length < 2) {\n            return -1;\n          }\n          indexSize = 2;\n          arrLength /= 2;\n          valLength /= 2;\n          byteOffset /= 2;\n        }\n      }\n      function read(buf, i2) {\n        if (indexSize === 1) {\n          return buf[i2];\n        } else {\n          return buf.readUInt16BE(i2 * indexSize);\n        }\n      }\n      var i;\n      if (dir) {\n        var foundIndex = -1;\n        for (i = byteOffset; i < arrLength; i++) {\n          if (read(arr, i) === read(val, foundIndex === -1 ? 0 : i - foundIndex)) {\n            if (foundIndex === -1) foundIndex = i;\n            if (i - foundIndex + 1 === valLength) return foundIndex * indexSize;\n          } else {\n            if (foundIndex !== -1) i -= i - foundIndex;\n            foundIndex = -1;\n          }\n        }\n      } else {\n        if (byteOffset + valLength > arrLength) byteOffset = arrLength - valLength;\n        for (i = byteOffset; i >= 0; i--) {\n          var found = true;\n          for (var j = 0; j < valLength; j++) {\n            if (read(arr, i + j) !== read(val, j)) {\n              found = false;\n              break;\n            }\n          }\n          if (found) return i;\n        }\n      }\n      return -1;\n    }\n    Buffer2.prototype.includes = function includes(val, byteOffset, encoding) {\n      return this.indexOf(val, byteOffset, encoding) !== -1;\n    };\n    Buffer2.prototype.indexOf = function indexOf(val, byteOffset, encoding) {\n      return bidirectionalIndexOf(this, val, byteOffset, encoding, true);\n    };\n    Buffer2.prototype.lastIndexOf = function lastIndexOf(val, byteOffset, encoding) {\n      return bidirectionalIndexOf(this, val, byteOffset, encoding, false);\n    };\n    function hexWrite(buf, string, offset, length) {\n      offset = Number(offset) || 0;\n      var remaining = buf.length - offset;\n      if (!length) {\n        length = remaining;\n      } else {\n        length = Number(length);\n        if (length > remaining) {\n          length = remaining;\n        }\n      }\n      var strLen = string.length;\n      if (length > strLen / 2) {\n        length = strLen / 2;\n      }\n      for (var i = 0; i < length; ++i) {\n        var parsed = parseInt(string.substr(i * 2, 2), 16);\n        if (numberIsNaN(parsed)) return i;\n        buf[offset + i] = parsed;\n      }\n      return i;\n    }\n    function utf8Write(buf, string, offset, length) {\n      return blitBuffer(utf8ToBytes(string, buf.length - offset), buf, offset, length);\n    }\n    function asciiWrite(buf, string, offset, length) {\n      return blitBuffer(asciiToBytes(string), buf, offset, length);\n    }\n    function base64Write(buf, string, offset, length) {\n      return blitBuffer(base64ToBytes(string), buf, offset, length);\n    }\n    function ucs2Write(buf, string, offset, length) {\n      return blitBuffer(utf16leToBytes(string, buf.length - offset), buf, offset, length);\n    }\n    Buffer2.prototype.write = function write(string, offset, length, encoding) {\n      if (offset === void 0) {\n        encoding = \"utf8\";\n        length = this.length;\n        offset = 0;\n      } else if (length === void 0 && typeof offset === \"string\") {\n        encoding = offset;\n        length = this.length;\n        offset = 0;\n      } else if (isFinite(offset)) {\n        offset = offset >>> 0;\n        if (isFinite(length)) {\n          length = length >>> 0;\n          if (encoding === void 0) encoding = \"utf8\";\n        } else {\n          encoding = length;\n          length = void 0;\n        }\n      } else {\n        throw new Error(\n          \"Buffer.write(string, encoding, offset[, length]) is no longer supported\"\n        );\n      }\n      var remaining = this.length - offset;\n      if (length === void 0 || length > remaining) length = remaining;\n      if (string.length > 0 && (length < 0 || offset < 0) || offset > this.length) {\n        throw new RangeError(\"Attempt to write outside buffer bounds\");\n      }\n      if (!encoding) encoding = \"utf8\";\n      var loweredCase = false;\n      for (; ; ) {\n        switch (encoding) {\n          case \"hex\":\n            return hexWrite(this, string, offset, length);\n          case \"utf8\":\n          case \"utf-8\":\n            return utf8Write(this, string, offset, length);\n          case \"ascii\":\n          case \"latin1\":\n          case \"binary\":\n            return asciiWrite(this, string, offset, length);\n          case \"base64\":\n            return base64Write(this, string, offset, length);\n          case \"ucs2\":\n          case \"ucs-2\":\n          case \"utf16le\":\n          case \"utf-16le\":\n            return ucs2Write(this, string, offset, length);\n          default:\n            if (loweredCase) throw new TypeError(\"Unknown encoding: \" + encoding);\n            encoding = (\"\" + encoding).toLowerCase();\n            loweredCase = true;\n        }\n      }\n    };\n    Buffer2.prototype.toJSON = function toJSON() {\n      return {\n        type: \"Buffer\",\n        data: Array.prototype.slice.call(this._arr || this, 0)\n      };\n    };\n    function base64Slice(buf, start, end) {\n      if (start === 0 && end === buf.length) {\n        return base64.fromByteArray(buf);\n      } else {\n        return base64.fromByteArray(buf.slice(start, end));\n      }\n    }\n    function utf8Slice(buf, start, end) {\n      end = Math.min(buf.length, end);\n      var res = [];\n      var i = start;\n      while (i < end) {\n        var firstByte = buf[i];\n        var codePoint = null;\n        var bytesPerSequence = firstByte > 239 ? 4 : firstByte > 223 ? 3 : firstByte > 191 ? 2 : 1;\n        if (i + bytesPerSequence <= end) {\n          var secondByte, thirdByte, fourthByte, tempCodePoint;\n          switch (bytesPerSequence) {\n            case 1:\n              if (firstByte < 128) {\n                codePoint = firstByte;\n              }\n              break;\n            case 2:\n              secondByte = buf[i + 1];\n              if ((secondByte & 192) === 128) {\n                tempCodePoint = (firstByte & 31) << 6 | secondByte & 63;\n                if (tempCodePoint > 127) {\n                  codePoint = tempCodePoint;\n                }\n              }\n              break;\n            case 3:\n              secondByte = buf[i + 1];\n              thirdByte = buf[i + 2];\n              if ((secondByte & 192) === 128 && (thirdByte & 192) === 128) {\n                tempCodePoint = (firstByte & 15) << 12 | (secondByte & 63) << 6 | thirdByte & 63;\n                if (tempCodePoint > 2047 && (tempCodePoint < 55296 || tempCodePoint > 57343)) {\n                  codePoint = tempCodePoint;\n                }\n              }\n              break;\n            case 4:\n              secondByte = buf[i + 1];\n              thirdByte = buf[i + 2];\n              fourthByte = buf[i + 3];\n              if ((secondByte & 192) === 128 && (thirdByte & 192) === 128 && (fourthByte & 192) === 128) {\n                tempCodePoint = (firstByte & 15) << 18 | (secondByte & 63) << 12 | (thirdByte & 63) << 6 | fourthByte & 63;\n                if (tempCodePoint > 65535 && tempCodePoint < 1114112) {\n                  codePoint = tempCodePoint;\n                }\n              }\n          }\n        }\n        if (codePoint === null) {\n          codePoint = 65533;\n          bytesPerSequence = 1;\n        } else if (codePoint > 65535) {\n          codePoint -= 65536;\n          res.push(codePoint >>> 10 & 1023 | 55296);\n          codePoint = 56320 | codePoint & 1023;\n        }\n        res.push(codePoint);\n        i += bytesPerSequence;\n      }\n      return decodeCodePointsArray(res);\n    }\n    var MAX_ARGUMENTS_LENGTH = 4096;\n    function decodeCodePointsArray(codePoints) {\n      var len = codePoints.length;\n      if (len <= MAX_ARGUMENTS_LENGTH) {\n        return String.fromCharCode.apply(String, codePoints);\n      }\n      var res = \"\";\n      var i = 0;\n      while (i < len) {\n        res += String.fromCharCode.apply(\n          String,\n          codePoints.slice(i, i += MAX_ARGUMENTS_LENGTH)\n        );\n      }\n      return res;\n    }\n    function asciiSlice(buf, start, end) {\n      var ret = \"\";\n      end = Math.min(buf.length, end);\n      for (var i = start; i < end; ++i) {\n        ret += String.fromCharCode(buf[i] & 127);\n      }\n      return ret;\n    }\n    function latin1Slice(buf, start, end) {\n      var ret = \"\";\n      end = Math.min(buf.length, end);\n      for (var i = start; i < end; ++i) {\n        ret += String.fromCharCode(buf[i]);\n      }\n      return ret;\n    }\n    function hexSlice(buf, start, end) {\n      var len = buf.length;\n      if (!start || start < 0) start = 0;\n      if (!end || end < 0 || end > len) end = len;\n      var out = \"\";\n      for (var i = start; i < end; ++i) {\n        out += hexSliceLookupTable[buf[i]];\n      }\n      return out;\n    }\n    function utf16leSlice(buf, start, end) {\n      var bytes = buf.slice(start, end);\n      var res = \"\";\n      for (var i = 0; i < bytes.length - 1; i += 2) {\n        res += String.fromCharCode(bytes[i] + bytes[i + 1] * 256);\n      }\n      return res;\n    }\n    Buffer2.prototype.slice = function slice(start, end) {\n      var len = this.length;\n      start = ~~start;\n      end = end === void 0 ? len : ~~end;\n      if (start < 0) {\n        start += len;\n        if (start < 0) start = 0;\n      } else if (start > len) {\n        start = len;\n      }\n      if (end < 0) {\n        end += len;\n        if (end < 0) end = 0;\n      } else if (end > len) {\n        end = len;\n      }\n      if (end < start) end = start;\n      var newBuf = this.subarray(start, end);\n      Object.setPrototypeOf(newBuf, Buffer2.prototype);\n      return newBuf;\n    };\n    function checkOffset(offset, ext, length) {\n      if (offset % 1 !== 0 || offset < 0) throw new RangeError(\"offset is not uint\");\n      if (offset + ext > length) throw new RangeError(\"Trying to access beyond buffer length\");\n    }\n    Buffer2.prototype.readUintLE = Buffer2.prototype.readUIntLE = function readUIntLE(offset, byteLength2, noAssert) {\n      offset = offset >>> 0;\n      byteLength2 = byteLength2 >>> 0;\n      if (!noAssert) checkOffset(offset, byteLength2, this.length);\n      var val = this[offset];\n      var mul = 1;\n      var i = 0;\n      while (++i < byteLength2 && (mul *= 256)) {\n        val += this[offset + i] * mul;\n      }\n      return val;\n    };\n    Buffer2.prototype.readUintBE = Buffer2.prototype.readUIntBE = function readUIntBE(offset, byteLength2, noAssert) {\n      offset = offset >>> 0;\n      byteLength2 = byteLength2 >>> 0;\n      if (!noAssert) {\n        checkOffset(offset, byteLength2, this.length);\n      }\n      var val = this[offset + --byteLength2];\n      var mul = 1;\n      while (byteLength2 > 0 && (mul *= 256)) {\n        val += this[offset + --byteLength2] * mul;\n      }\n      return val;\n    };\n    Buffer2.prototype.readUint8 = Buffer2.prototype.readUInt8 = function readUInt8(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 1, this.length);\n      return this[offset];\n    };\n    Buffer2.prototype.readUint16LE = Buffer2.prototype.readUInt16LE = function readUInt16LE(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 2, this.length);\n      return this[offset] | this[offset + 1] << 8;\n    };\n    Buffer2.prototype.readUint16BE = Buffer2.prototype.readUInt16BE = function readUInt16BE(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 2, this.length);\n      return this[offset] << 8 | this[offset + 1];\n    };\n    Buffer2.prototype.readUint32LE = Buffer2.prototype.readUInt32LE = function readUInt32LE(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 4, this.length);\n      return (this[offset] | this[offset + 1] << 8 | this[offset + 2] << 16) + this[offset + 3] * 16777216;\n    };\n    Buffer2.prototype.readUint32BE = Buffer2.prototype.readUInt32BE = function readUInt32BE(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 4, this.length);\n      return this[offset] * 16777216 + (this[offset + 1] << 16 | this[offset + 2] << 8 | this[offset + 3]);\n    };\n    Buffer2.prototype.readIntLE = function readIntLE(offset, byteLength2, noAssert) {\n      offset = offset >>> 0;\n      byteLength2 = byteLength2 >>> 0;\n      if (!noAssert) checkOffset(offset, byteLength2, this.length);\n      var val = this[offset];\n      var mul = 1;\n      var i = 0;\n      while (++i < byteLength2 && (mul *= 256)) {\n        val += this[offset + i] * mul;\n      }\n      mul *= 128;\n      if (val >= mul) val -= Math.pow(2, 8 * byteLength2);\n      return val;\n    };\n    Buffer2.prototype.readIntBE = function readIntBE(offset, byteLength2, noAssert) {\n      offset = offset >>> 0;\n      byteLength2 = byteLength2 >>> 0;\n      if (!noAssert) checkOffset(offset, byteLength2, this.length);\n      var i = byteLength2;\n      var mul = 1;\n      var val = this[offset + --i];\n      while (i > 0 && (mul *= 256)) {\n        val += this[offset + --i] * mul;\n      }\n      mul *= 128;\n      if (val >= mul) val -= Math.pow(2, 8 * byteLength2);\n      return val;\n    };\n    Buffer2.prototype.readInt8 = function readInt8(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 1, this.length);\n      if (!(this[offset] & 128)) return this[offset];\n      return (255 - this[offset] + 1) * -1;\n    };\n    Buffer2.prototype.readInt16LE = function readInt16LE(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 2, this.length);\n      var val = this[offset] | this[offset + 1] << 8;\n      return val & 32768 ? val | 4294901760 : val;\n    };\n    Buffer2.prototype.readInt16BE = function readInt16BE(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 2, this.length);\n      var val = this[offset + 1] | this[offset] << 8;\n      return val & 32768 ? val | 4294901760 : val;\n    };\n    Buffer2.prototype.readInt32LE = function readInt32LE(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 4, this.length);\n      return this[offset] | this[offset + 1] << 8 | this[offset + 2] << 16 | this[offset + 3] << 24;\n    };\n    Buffer2.prototype.readInt32BE = function readInt32BE(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 4, this.length);\n      return this[offset] << 24 | this[offset + 1] << 16 | this[offset + 2] << 8 | this[offset + 3];\n    };\n    Buffer2.prototype.readFloatLE = function readFloatLE(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 4, this.length);\n      return ieee754.read(this, offset, true, 23, 4);\n    };\n    Buffer2.prototype.readFloatBE = function readFloatBE(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 4, this.length);\n      return ieee754.read(this, offset, false, 23, 4);\n    };\n    Buffer2.prototype.readDoubleLE = function readDoubleLE(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 8, this.length);\n      return ieee754.read(this, offset, true, 52, 8);\n    };\n    Buffer2.prototype.readDoubleBE = function readDoubleBE(offset, noAssert) {\n      offset = offset >>> 0;\n      if (!noAssert) checkOffset(offset, 8, this.length);\n      return ieee754.read(this, offset, false, 52, 8);\n    };\n    function checkInt(buf, value, offset, ext, max, min) {\n      if (!Buffer2.isBuffer(buf)) throw new TypeError('\"buffer\" argument must be a Buffer instance');\n      if (value > max || value < min) throw new RangeError('\"value\" argument is out of bounds');\n      if (offset + ext > buf.length) throw new RangeError(\"Index out of range\");\n    }\n    Buffer2.prototype.writeUintLE = Buffer2.prototype.writeUIntLE = function writeUIntLE(value, offset, byteLength2, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      byteLength2 = byteLength2 >>> 0;\n      if (!noAssert) {\n        var maxBytes = Math.pow(2, 8 * byteLength2) - 1;\n        checkInt(this, value, offset, byteLength2, maxBytes, 0);\n      }\n      var mul = 1;\n      var i = 0;\n      this[offset] = value & 255;\n      while (++i < byteLength2 && (mul *= 256)) {\n        this[offset + i] = value / mul & 255;\n      }\n      return offset + byteLength2;\n    };\n    Buffer2.prototype.writeUintBE = Buffer2.prototype.writeUIntBE = function writeUIntBE(value, offset, byteLength2, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      byteLength2 = byteLength2 >>> 0;\n      if (!noAssert) {\n        var maxBytes = Math.pow(2, 8 * byteLength2) - 1;\n        checkInt(this, value, offset, byteLength2, maxBytes, 0);\n      }\n      var i = byteLength2 - 1;\n      var mul = 1;\n      this[offset + i] = value & 255;\n      while (--i >= 0 && (mul *= 256)) {\n        this[offset + i] = value / mul & 255;\n      }\n      return offset + byteLength2;\n    };\n    Buffer2.prototype.writeUint8 = Buffer2.prototype.writeUInt8 = function writeUInt8(value, offset, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) checkInt(this, value, offset, 1, 255, 0);\n      this[offset] = value & 255;\n      return offset + 1;\n    };\n    Buffer2.prototype.writeUint16LE = Buffer2.prototype.writeUInt16LE = function writeUInt16LE(value, offset, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) checkInt(this, value, offset, 2, 65535, 0);\n      this[offset] = value & 255;\n      this[offset + 1] = value >>> 8;\n      return offset + 2;\n    };\n    Buffer2.prototype.writeUint16BE = Buffer2.prototype.writeUInt16BE = function writeUInt16BE(value, offset, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) checkInt(this, value, offset, 2, 65535, 0);\n      this[offset] = value >>> 8;\n      this[offset + 1] = value & 255;\n      return offset + 2;\n    };\n    Buffer2.prototype.writeUint32LE = Buffer2.prototype.writeUInt32LE = function writeUInt32LE(value, offset, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) checkInt(this, value, offset, 4, 4294967295, 0);\n      this[offset + 3] = value >>> 24;\n      this[offset + 2] = value >>> 16;\n      this[offset + 1] = value >>> 8;\n      this[offset] = value & 255;\n      return offset + 4;\n    };\n    Buffer2.prototype.writeUint32BE = Buffer2.prototype.writeUInt32BE = function writeUInt32BE(value, offset, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) checkInt(this, value, offset, 4, 4294967295, 0);\n      this[offset] = value >>> 24;\n      this[offset + 1] = value >>> 16;\n      this[offset + 2] = value >>> 8;\n      this[offset + 3] = value & 255;\n      return offset + 4;\n    };\n    Buffer2.prototype.writeIntLE = function writeIntLE(value, offset, byteLength2, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) {\n        var limit = Math.pow(2, 8 * byteLength2 - 1);\n        checkInt(this, value, offset, byteLength2, limit - 1, -limit);\n      }\n      var i = 0;\n      var mul = 1;\n      var sub = 0;\n      this[offset] = value & 255;\n      while (++i < byteLength2 && (mul *= 256)) {\n        if (value < 0 && sub === 0 && this[offset + i - 1] !== 0) {\n          sub = 1;\n        }\n        this[offset + i] = (value / mul >> 0) - sub & 255;\n      }\n      return offset + byteLength2;\n    };\n    Buffer2.prototype.writeIntBE = function writeIntBE(value, offset, byteLength2, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) {\n        var limit = Math.pow(2, 8 * byteLength2 - 1);\n        checkInt(this, value, offset, byteLength2, limit - 1, -limit);\n      }\n      var i = byteLength2 - 1;\n      var mul = 1;\n      var sub = 0;\n      this[offset + i] = value & 255;\n      while (--i >= 0 && (mul *= 256)) {\n        if (value < 0 && sub === 0 && this[offset + i + 1] !== 0) {\n          sub = 1;\n        }\n        this[offset + i] = (value / mul >> 0) - sub & 255;\n      }\n      return offset + byteLength2;\n    };\n    Buffer2.prototype.writeInt8 = function writeInt8(value, offset, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) checkInt(this, value, offset, 1, 127, -128);\n      if (value < 0) value = 255 + value + 1;\n      this[offset] = value & 255;\n      return offset + 1;\n    };\n    Buffer2.prototype.writeInt16LE = function writeInt16LE(value, offset, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) checkInt(this, value, offset, 2, 32767, -32768);\n      this[offset] = value & 255;\n      this[offset + 1] = value >>> 8;\n      return offset + 2;\n    };\n    Buffer2.prototype.writeInt16BE = function writeInt16BE(value, offset, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) checkInt(this, value, offset, 2, 32767, -32768);\n      this[offset] = value >>> 8;\n      this[offset + 1] = value & 255;\n      return offset + 2;\n    };\n    Buffer2.prototype.writeInt32LE = function writeInt32LE(value, offset, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) checkInt(this, value, offset, 4, 2147483647, -2147483648);\n      this[offset] = value & 255;\n      this[offset + 1] = value >>> 8;\n      this[offset + 2] = value >>> 16;\n      this[offset + 3] = value >>> 24;\n      return offset + 4;\n    };\n    Buffer2.prototype.writeInt32BE = function writeInt32BE(value, offset, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) checkInt(this, value, offset, 4, 2147483647, -2147483648);\n      if (value < 0) value = 4294967295 + value + 1;\n      this[offset] = value >>> 24;\n      this[offset + 1] = value >>> 16;\n      this[offset + 2] = value >>> 8;\n      this[offset + 3] = value & 255;\n      return offset + 4;\n    };\n    function checkIEEE754(buf, value, offset, ext, max, min) {\n      if (offset + ext > buf.length) throw new RangeError(\"Index out of range\");\n      if (offset < 0) throw new RangeError(\"Index out of range\");\n    }\n    function writeFloat(buf, value, offset, littleEndian, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) {\n        checkIEEE754(buf, value, offset, 4, 34028234663852886e22, -34028234663852886e22);\n      }\n      ieee754.write(buf, value, offset, littleEndian, 23, 4);\n      return offset + 4;\n    }\n    Buffer2.prototype.writeFloatLE = function writeFloatLE(value, offset, noAssert) {\n      return writeFloat(this, value, offset, true, noAssert);\n    };\n    Buffer2.prototype.writeFloatBE = function writeFloatBE(value, offset, noAssert) {\n      return writeFloat(this, value, offset, false, noAssert);\n    };\n    function writeDouble(buf, value, offset, littleEndian, noAssert) {\n      value = +value;\n      offset = offset >>> 0;\n      if (!noAssert) {\n        checkIEEE754(buf, value, offset, 8, 17976931348623157e292, -17976931348623157e292);\n      }\n      ieee754.write(buf, value, offset, littleEndian, 52, 8);\n      return offset + 8;\n    }\n    Buffer2.prototype.writeDoubleLE = function writeDoubleLE(value, offset, noAssert) {\n      return writeDouble(this, value, offset, true, noAssert);\n    };\n    Buffer2.prototype.writeDoubleBE = function writeDoubleBE(value, offset, noAssert) {\n      return writeDouble(this, value, offset, false, noAssert);\n    };\n    Buffer2.prototype.copy = function copy(target, targetStart, start, end) {\n      if (!Buffer2.isBuffer(target)) throw new TypeError(\"argument should be a Buffer\");\n      if (!start) start = 0;\n      if (!end && end !== 0) end = this.length;\n      if (targetStart >= target.length) targetStart = target.length;\n      if (!targetStart) targetStart = 0;\n      if (end > 0 && end < start) end = start;\n      if (end === start) return 0;\n      if (target.length === 0 || this.length === 0) return 0;\n      if (targetStart < 0) {\n        throw new RangeError(\"targetStart out of bounds\");\n      }\n      if (start < 0 || start >= this.length) throw new RangeError(\"Index out of range\");\n      if (end < 0) throw new RangeError(\"sourceEnd out of bounds\");\n      if (end > this.length) end = this.length;\n      if (target.length - targetStart < end - start) {\n        end = target.length - targetStart + start;\n      }\n      var len = end - start;\n      if (this === target && typeof Uint8Array.prototype.copyWithin === \"function\") {\n        this.copyWithin(targetStart, start, end);\n      } else {\n        Uint8Array.prototype.set.call(\n          target,\n          this.subarray(start, end),\n          targetStart\n        );\n      }\n      return len;\n    };\n    Buffer2.prototype.fill = function fill(val, start, end, encoding) {\n      if (typeof val === \"string\") {\n        if (typeof start === \"string\") {\n          encoding = start;\n          start = 0;\n          end = this.length;\n        } else if (typeof end === \"string\") {\n          encoding = end;\n          end = this.length;\n        }\n        if (encoding !== void 0 && typeof encoding !== \"string\") {\n          throw new TypeError(\"encoding must be a string\");\n        }\n        if (typeof encoding === \"string\" && !Buffer2.isEncoding(encoding)) {\n          throw new TypeError(\"Unknown encoding: \" + encoding);\n        }\n        if (val.length === 1) {\n          var code = val.charCodeAt(0);\n          if (encoding === \"utf8\" && code < 128 || encoding === \"latin1\") {\n            val = code;\n          }\n        }\n      } else if (typeof val === \"number\") {\n        val = val & 255;\n      } else if (typeof val === \"boolean\") {\n        val = Number(val);\n      }\n      if (start < 0 || this.length < start || this.length < end) {\n        throw new RangeError(\"Out of range index\");\n      }\n      if (end <= start) {\n        return this;\n      }\n      start = start >>> 0;\n      end = end === void 0 ? this.length : end >>> 0;\n      if (!val) val = 0;\n      var i;\n      if (typeof val === \"number\") {\n        for (i = start; i < end; ++i) {\n          this[i] = val;\n        }\n      } else {\n        var bytes = Buffer2.isBuffer(val) ? val : Buffer2.from(val, encoding);\n        var len = bytes.length;\n        if (len === 0) {\n          throw new TypeError('The value \"' + val + '\" is invalid for argument \"value\"');\n        }\n        for (i = 0; i < end - start; ++i) {\n          this[i + start] = bytes[i % len];\n        }\n      }\n      return this;\n    };\n    var INVALID_BASE64_RE = /[^+/0-9A-Za-z-_]/g;\n    function base64clean(str) {\n      str = str.split(\"=\")[0];\n      str = str.trim().replace(INVALID_BASE64_RE, \"\");\n      if (str.length < 2) return \"\";\n      while (str.length % 4 !== 0) {\n        str = str + \"=\";\n      }\n      return str;\n    }\n    function utf8ToBytes(string, units) {\n      units = units || Infinity;\n      var codePoint;\n      var length = string.length;\n      var leadSurrogate = null;\n      var bytes = [];\n      for (var i = 0; i < length; ++i) {\n        codePoint = string.charCodeAt(i);\n        if (codePoint > 55295 && codePoint < 57344) {\n          if (!leadSurrogate) {\n            if (codePoint > 56319) {\n              if ((units -= 3) > -1) bytes.push(239, 191, 189);\n              continue;\n            } else if (i + 1 === length) {\n              if ((units -= 3) > -1) bytes.push(239, 191, 189);\n              continue;\n            }\n            leadSurrogate = codePoint;\n            continue;\n          }\n          if (codePoint < 56320) {\n            if ((units -= 3) > -1) bytes.push(239, 191, 189);\n            leadSurrogate = codePoint;\n            continue;\n          }\n          codePoint = (leadSurrogate - 55296 << 10 | codePoint - 56320) + 65536;\n        } else if (leadSurrogate) {\n          if ((units -= 3) > -1) bytes.push(239, 191, 189);\n        }\n        leadSurrogate = null;\n        if (codePoint < 128) {\n          if ((units -= 1) < 0) break;\n          bytes.push(codePoint);\n        } else if (codePoint < 2048) {\n          if ((units -= 2) < 0) break;\n          bytes.push(\n            codePoint >> 6 | 192,\n            codePoint & 63 | 128\n          );\n        } else if (codePoint < 65536) {\n          if ((units -= 3) < 0) break;\n          bytes.push(\n            codePoint >> 12 | 224,\n            codePoint >> 6 & 63 | 128,\n            codePoint & 63 | 128\n          );\n        } else if (codePoint < 1114112) {\n          if ((units -= 4) < 0) break;\n          bytes.push(\n            codePoint >> 18 | 240,\n            codePoint >> 12 & 63 | 128,\n            codePoint >> 6 & 63 | 128,\n            codePoint & 63 | 128\n          );\n        } else {\n          throw new Error(\"Invalid code point\");\n        }\n      }\n      return bytes;\n    }\n    function asciiToBytes(str) {\n      var byteArray = [];\n      for (var i = 0; i < str.length; ++i) {\n        byteArray.push(str.charCodeAt(i) & 255);\n      }\n      return byteArray;\n    }\n    function utf16leToBytes(str, units) {\n      var c, hi, lo;\n      var byteArray = [];\n      for (var i = 0; i < str.length; ++i) {\n        if ((units -= 2) < 0) break;\n        c = str.charCodeAt(i);\n        hi = c >> 8;\n        lo = c % 256;\n        byteArray.push(lo);\n        byteArray.push(hi);\n      }\n      return byteArray;\n    }\n    function base64ToBytes(str) {\n      return base64.toByteArray(base64clean(str));\n    }\n    function blitBuffer(src, dst, offset, length) {\n      for (var i = 0; i < length; ++i) {\n        if (i + offset >= dst.length || i >= src.length) break;\n        dst[i + offset] = src[i];\n      }\n      return i;\n    }\n    function isInstance(obj, type) {\n      return obj instanceof type || obj != null && obj.constructor != null && obj.constructor.name != null && obj.constructor.name === type.name;\n    }\n    function numberIsNaN(obj) {\n      return obj !== obj;\n    }\n    var hexSliceLookupTable = (function() {\n      var alphabet = \"0123456789abcdef\";\n      var table = new Array(256);\n      for (var i = 0; i < 16; ++i) {\n        var i16 = i * 16;\n        for (var j = 0; j < 16; ++j) {\n          table[i16 + j] = alphabet[i] + alphabet[j];\n        }\n      }\n      return table;\n    })();\n  }\n});\n\n// <stdin>\nvar buffer = require_buffer();\nmodule.exports = buffer.default ?? buffer;\n/*! Bundled license information:\n\nieee754/index.js:\n  (*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> *)\n\nbuffer/index.js:\n  (*!\n   * The buffer module from node.js, for the browser.\n   *\n   * @author   Feross Aboukhadijeh <https://feross.org>\n   * @license  MIT\n   *)\n*/\n\nif (module.exports && module.exports.default == null) module.exports.default = module.exports;\n"
-;
diff --git a/packages/browser/src/generated/path-polyfill.ts b/packages/browser/src/generated/path-polyfill.ts
deleted file mode 100644
index 4eb90bfb9..000000000
--- a/packages/browser/src/generated/path-polyfill.ts
+++ /dev/null
@@ -1,4 +0,0 @@
-// @generated - run node packages/build-tools/scripts/build-browser-path-polyfill.mjs
-export const BROWSER_PATH_POLYFILL_CODE =
-"var process = globalThis.process || {\n  env: {},\n  cwd: () => '/',\n};\nvar __getOwnPropNames = Object.getOwnPropertyNames;\nvar __commonJS = (cb, mod) => function __require() {\n  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;\n};\n\n// node_modules/.pnpm/path-browserify@1.0.1/node_modules/path-browserify/index.js\nvar require_path_browserify = __commonJS({\n  \"node_modules/.pnpm/path-browserify@1.0.1/node_modules/path-browserify/index.js\"(exports2, module2) {\n    \"use strict\";\n    function assertPath(path2) {\n      if (typeof path2 !== \"string\") {\n        throw new TypeError(\"Path must be a string. Received \" + JSON.stringify(path2));\n      }\n    }\n    function normalizeStringPosix(path2, allowAboveRoot) {\n      var res = \"\";\n      var lastSegmentLength = 0;\n      var lastSlash = -1;\n      var dots = 0;\n      var code;\n      for (var i = 0; i <= path2.length; ++i) {\n        if (i < path2.length)\n          code = path2.charCodeAt(i);\n        else if (code === 47)\n          break;\n        else\n          code = 47;\n        if (code === 47) {\n          if (lastSlash === i - 1 || dots === 1) {\n          } else if (lastSlash !== i - 1 && dots === 2) {\n            if (res.length < 2 || lastSegmentLength !== 2 || res.charCodeAt(res.length - 1) !== 46 || res.charCodeAt(res.length - 2) !== 46) {\n              if (res.length > 2) {\n                var lastSlashIndex = res.lastIndexOf(\"/\");\n                if (lastSlashIndex !== res.length - 1) {\n                  if (lastSlashIndex === -1) {\n                    res = \"\";\n                    lastSegmentLength = 0;\n                  } else {\n                    res = res.slice(0, lastSlashIndex);\n                    lastSegmentLength = res.length - 1 - res.lastIndexOf(\"/\");\n                  }\n                  lastSlash = i;\n                  dots = 0;\n                  continue;\n                }\n              } else if (res.length === 2 || res.length === 1) {\n                res = \"\";\n                lastSegmentLength = 0;\n                lastSlash = i;\n                dots = 0;\n                continue;\n              }\n            }\n            if (allowAboveRoot) {\n              if (res.length > 0)\n                res += \"/..\";\n              else\n                res = \"..\";\n              lastSegmentLength = 2;\n            }\n          } else {\n            if (res.length > 0)\n              res += \"/\" + path2.slice(lastSlash + 1, i);\n            else\n              res = path2.slice(lastSlash + 1, i);\n            lastSegmentLength = i - lastSlash - 1;\n          }\n          lastSlash = i;\n          dots = 0;\n        } else if (code === 46 && dots !== -1) {\n          ++dots;\n        } else {\n          dots = -1;\n        }\n      }\n      return res;\n    }\n    function _format(sep, pathObject) {\n      var dir = pathObject.dir || pathObject.root;\n      var base = pathObject.base || (pathObject.name || \"\") + (pathObject.ext || \"\");\n      if (!dir) {\n        return base;\n      }\n      if (dir === pathObject.root) {\n        return dir + base;\n      }\n      return dir + sep + base;\n    }\n    var posix2 = {\n      // path.resolve([from ...], to)\n      resolve: function resolve() {\n        var resolvedPath = \"\";\n        var resolvedAbsolute = false;\n        var cwd;\n        for (var i = arguments.length - 1; i >= -1 && !resolvedAbsolute; i--) {\n          var path2;\n          if (i >= 0)\n            path2 = arguments[i];\n          else {\n            if (cwd === void 0)\n              cwd = process.cwd();\n            path2 = cwd;\n          }\n          assertPath(path2);\n          if (path2.length === 0) {\n            continue;\n          }\n          resolvedPath = path2 + \"/\" + resolvedPath;\n          resolvedAbsolute = path2.charCodeAt(0) === 47;\n        }\n        resolvedPath = normalizeStringPosix(resolvedPath, !resolvedAbsolute);\n        if (resolvedAbsolute) {\n          if (resolvedPath.length > 0)\n            return \"/\" + resolvedPath;\n          else\n            return \"/\";\n        } else if (resolvedPath.length > 0) {\n          return resolvedPath;\n        } else {\n          return \".\";\n        }\n      },\n      normalize: function normalize(path2) {\n        assertPath(path2);\n        if (path2.length === 0) return \".\";\n        var isAbsolute = path2.charCodeAt(0) === 47;\n        var trailingSeparator = path2.charCodeAt(path2.length - 1) === 47;\n        path2 = normalizeStringPosix(path2, !isAbsolute);\n        if (path2.length === 0 && !isAbsolute) path2 = \".\";\n        if (path2.length > 0 && trailingSeparator) path2 += \"/\";\n        if (isAbsolute) return \"/\" + path2;\n        return path2;\n      },\n      isAbsolute: function isAbsolute(path2) {\n        assertPath(path2);\n        return path2.length > 0 && path2.charCodeAt(0) === 47;\n      },\n      join: function join() {\n        if (arguments.length === 0)\n          return \".\";\n        var joined;\n        for (var i = 0; i < arguments.length; ++i) {\n          var arg = arguments[i];\n          assertPath(arg);\n          if (arg.length > 0) {\n            if (joined === void 0)\n              joined = arg;\n            else\n              joined += \"/\" + arg;\n          }\n        }\n        if (joined === void 0)\n          return \".\";\n        return posix2.normalize(joined);\n      },\n      relative: function relative(from, to) {\n        assertPath(from);\n        assertPath(to);\n        if (from === to) return \"\";\n        from = posix2.resolve(from);\n        to = posix2.resolve(to);\n        if (from === to) return \"\";\n        var fromStart = 1;\n        for (; fromStart < from.length; ++fromStart) {\n          if (from.charCodeAt(fromStart) !== 47)\n            break;\n        }\n        var fromEnd = from.length;\n        var fromLen = fromEnd - fromStart;\n        var toStart = 1;\n        for (; toStart < to.length; ++toStart) {\n          if (to.charCodeAt(toStart) !== 47)\n            break;\n        }\n        var toEnd = to.length;\n        var toLen = toEnd - toStart;\n        var length = fromLen < toLen ? fromLen : toLen;\n        var lastCommonSep = -1;\n        var i = 0;\n        for (; i <= length; ++i) {\n          if (i === length) {\n            if (toLen > length) {\n              if (to.charCodeAt(toStart + i) === 47) {\n                return to.slice(toStart + i + 1);\n              } else if (i === 0) {\n                return to.slice(toStart + i);\n              }\n            } else if (fromLen > length) {\n              if (from.charCodeAt(fromStart + i) === 47) {\n                lastCommonSep = i;\n              } else if (i === 0) {\n                lastCommonSep = 0;\n              }\n            }\n            break;\n          }\n          var fromCode = from.charCodeAt(fromStart + i);\n          var toCode = to.charCodeAt(toStart + i);\n          if (fromCode !== toCode)\n            break;\n          else if (fromCode === 47)\n            lastCommonSep = i;\n        }\n        var out = \"\";\n        for (i = fromStart + lastCommonSep + 1; i <= fromEnd; ++i) {\n          if (i === fromEnd || from.charCodeAt(i) === 47) {\n            if (out.length === 0)\n              out += \"..\";\n            else\n              out += \"/..\";\n          }\n        }\n        if (out.length > 0)\n          return out + to.slice(toStart + lastCommonSep);\n        else {\n          toStart += lastCommonSep;\n          if (to.charCodeAt(toStart) === 47)\n            ++toStart;\n          return to.slice(toStart);\n        }\n      },\n      _makeLong: function _makeLong(path2) {\n        return path2;\n      },\n      dirname: function dirname(path2) {\n        assertPath(path2);\n        if (path2.length === 0) return \".\";\n        var code = path2.charCodeAt(0);\n        var hasRoot = code === 47;\n        var end = -1;\n        var matchedSlash = true;\n        for (var i = path2.length - 1; i >= 1; --i) {\n          code = path2.charCodeAt(i);\n          if (code === 47) {\n            if (!matchedSlash) {\n              end = i;\n              break;\n            }\n          } else {\n            matchedSlash = false;\n          }\n        }\n        if (end === -1) return hasRoot ? \"/\" : \".\";\n        if (hasRoot && end === 1) return \"//\";\n        return path2.slice(0, end);\n      },\n      basename: function basename(path2, ext) {\n        if (ext !== void 0 && typeof ext !== \"string\") throw new TypeError('\"ext\" argument must be a string');\n        assertPath(path2);\n        var start = 0;\n        var end = -1;\n        var matchedSlash = true;\n        var i;\n        if (ext !== void 0 && ext.length > 0 && ext.length <= path2.length) {\n          if (ext.length === path2.length && ext === path2) return \"\";\n          var extIdx = ext.length - 1;\n          var firstNonSlashEnd = -1;\n          for (i = path2.length - 1; i >= 0; --i) {\n            var code = path2.charCodeAt(i);\n            if (code === 47) {\n              if (!matchedSlash) {\n                start = i + 1;\n                break;\n              }\n            } else {\n              if (firstNonSlashEnd === -1) {\n                matchedSlash = false;\n                firstNonSlashEnd = i + 1;\n              }\n              if (extIdx >= 0) {\n                if (code === ext.charCodeAt(extIdx)) {\n                  if (--extIdx === -1) {\n                    end = i;\n                  }\n                } else {\n                  extIdx = -1;\n                  end = firstNonSlashEnd;\n                }\n              }\n            }\n          }\n          if (start === end) end = firstNonSlashEnd;\n          else if (end === -1) end = path2.length;\n          return path2.slice(start, end);\n        } else {\n          for (i = path2.length - 1; i >= 0; --i) {\n            if (path2.charCodeAt(i) === 47) {\n              if (!matchedSlash) {\n                start = i + 1;\n                break;\n              }\n            } else if (end === -1) {\n              matchedSlash = false;\n              end = i + 1;\n            }\n          }\n          if (end === -1) return \"\";\n          return path2.slice(start, end);\n        }\n      },\n      extname: function extname(path2) {\n        assertPath(path2);\n        var startDot = -1;\n        var startPart = 0;\n        var end = -1;\n        var matchedSlash = true;\n        var preDotState = 0;\n        for (var i = path2.length - 1; i >= 0; --i) {\n          var code = path2.charCodeAt(i);\n          if (code === 47) {\n            if (!matchedSlash) {\n              startPart = i + 1;\n              break;\n            }\n            continue;\n          }\n          if (end === -1) {\n            matchedSlash = false;\n            end = i + 1;\n          }\n          if (code === 46) {\n            if (startDot === -1)\n              startDot = i;\n            else if (preDotState !== 1)\n              preDotState = 1;\n          } else if (startDot !== -1) {\n            preDotState = -1;\n          }\n        }\n        if (startDot === -1 || end === -1 || // We saw a non-dot character immediately before the dot\n        preDotState === 0 || // The (right-most) trimmed path component is exactly '..'\n        preDotState === 1 && startDot === end - 1 && startDot === startPart + 1) {\n          return \"\";\n        }\n        return path2.slice(startDot, end);\n      },\n      format: function format(pathObject) {\n        if (pathObject === null || typeof pathObject !== \"object\") {\n          throw new TypeError('The \"pathObject\" argument must be of type Object. Received type ' + typeof pathObject);\n        }\n        return _format(\"/\", pathObject);\n      },\n      parse: function parse(path2) {\n        assertPath(path2);\n        var ret = { root: \"\", dir: \"\", base: \"\", ext: \"\", name: \"\" };\n        if (path2.length === 0) return ret;\n        var code = path2.charCodeAt(0);\n        var isAbsolute = code === 47;\n        var start;\n        if (isAbsolute) {\n          ret.root = \"/\";\n          start = 1;\n        } else {\n          start = 0;\n        }\n        var startDot = -1;\n        var startPart = 0;\n        var end = -1;\n        var matchedSlash = true;\n        var i = path2.length - 1;\n        var preDotState = 0;\n        for (; i >= start; --i) {\n          code = path2.charCodeAt(i);\n          if (code === 47) {\n            if (!matchedSlash) {\n              startPart = i + 1;\n              break;\n            }\n            continue;\n          }\n          if (end === -1) {\n            matchedSlash = false;\n            end = i + 1;\n          }\n          if (code === 46) {\n            if (startDot === -1) startDot = i;\n            else if (preDotState !== 1) preDotState = 1;\n          } else if (startDot !== -1) {\n            preDotState = -1;\n          }\n        }\n        if (startDot === -1 || end === -1 || // We saw a non-dot character immediately before the dot\n        preDotState === 0 || // The (right-most) trimmed path component is exactly '..'\n        preDotState === 1 && startDot === end - 1 && startDot === startPart + 1) {\n          if (end !== -1) {\n            if (startPart === 0 && isAbsolute) ret.base = ret.name = path2.slice(1, end);\n            else ret.base = ret.name = path2.slice(startPart, end);\n          }\n        } else {\n          if (startPart === 0 && isAbsolute) {\n            ret.name = path2.slice(1, startDot);\n            ret.base = path2.slice(1, end);\n          } else {\n            ret.name = path2.slice(startPart, startDot);\n            ret.base = path2.slice(startPart, end);\n          }\n          ret.ext = path2.slice(startDot, end);\n        }\n        if (startPart > 0) ret.dir = path2.slice(0, startPart - 1);\n        else if (isAbsolute) ret.dir = \"/\";\n        return ret;\n      },\n      sep: \"/\",\n      delimiter: \":\",\n      win32: null,\n      posix: null\n    };\n    posix2.posix = posix2;\n    module2.exports = posix2;\n  }\n});\n\n// <stdin>\nvar path = require_path_browserify();\nvar resolved = path.default ?? path;\nvar posix = resolved.posix ?? resolved;\nposix.posix = posix;\nmodule.exports = posix;\n\nif (module.exports && module.exports.default == null) module.exports.default = module.exports;\n"
-;
diff --git a/packages/browser/src/generated/util-polyfill.ts b/packages/browser/src/generated/util-polyfill.ts
deleted file mode 100644
index aca0594e0..000000000
--- a/packages/browser/src/generated/util-polyfill.ts
+++ /dev/null
@@ -1,4 +0,0 @@
-// @generated - run node packages/build-tools/scripts/build-browser-util-polyfill.mjs
-export const BROWSER_UTIL_POLYFILL_CODE =
-"var process = globalThis.process || {\n  env: {},\n  nextTick: (fn, ...args) => queueMicrotask(() => fn(...args)),\n};\nvar __getOwnPropNames = Object.getOwnPropertyNames;\nvar __commonJS = (cb, mod) => function __require() {\n  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;\n};\n\n// node_modules/.pnpm/has-symbols@1.1.0/node_modules/has-symbols/shams.js\nvar require_shams = __commonJS({\n  \"node_modules/.pnpm/has-symbols@1.1.0/node_modules/has-symbols/shams.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = function hasSymbols() {\n      if (typeof Symbol !== \"function\" || typeof Object.getOwnPropertySymbols !== \"function\") {\n        return false;\n      }\n      if (typeof Symbol.iterator === \"symbol\") {\n        return true;\n      }\n      var obj = {};\n      var sym = /* @__PURE__ */ Symbol(\"test\");\n      var symObj = Object(sym);\n      if (typeof sym === \"string\") {\n        return false;\n      }\n      if (Object.prototype.toString.call(sym) !== \"[object Symbol]\") {\n        return false;\n      }\n      if (Object.prototype.toString.call(symObj) !== \"[object Symbol]\") {\n        return false;\n      }\n      var symVal = 42;\n      obj[sym] = symVal;\n      for (var _ in obj) {\n        return false;\n      }\n      if (typeof Object.keys === \"function\" && Object.keys(obj).length !== 0) {\n        return false;\n      }\n      if (typeof Object.getOwnPropertyNames === \"function\" && Object.getOwnPropertyNames(obj).length !== 0) {\n        return false;\n      }\n      var syms = Object.getOwnPropertySymbols(obj);\n      if (syms.length !== 1 || syms[0] !== sym) {\n        return false;\n      }\n      if (!Object.prototype.propertyIsEnumerable.call(obj, sym)) {\n        return false;\n      }\n      if (typeof Object.getOwnPropertyDescriptor === \"function\") {\n        var descriptor = (\n          /** @type {PropertyDescriptor} */\n          Object.getOwnPropertyDescriptor(obj, sym)\n        );\n        if (descriptor.value !== symVal || descriptor.enumerable !== true) {\n          return false;\n        }\n      }\n      return true;\n    };\n  }\n});\n\n// node_modules/.pnpm/has-tostringtag@1.0.2/node_modules/has-tostringtag/shams.js\nvar require_shams2 = __commonJS({\n  \"node_modules/.pnpm/has-tostringtag@1.0.2/node_modules/has-tostringtag/shams.js\"(exports2, module2) {\n    \"use strict\";\n    var hasSymbols = require_shams();\n    module2.exports = function hasToStringTagShams() {\n      return hasSymbols() && !!Symbol.toStringTag;\n    };\n  }\n});\n\n// node_modules/.pnpm/es-object-atoms@1.1.1/node_modules/es-object-atoms/index.js\nvar require_es_object_atoms = __commonJS({\n  \"node_modules/.pnpm/es-object-atoms@1.1.1/node_modules/es-object-atoms/index.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = Object;\n  }\n});\n\n// node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/index.js\nvar require_es_errors = __commonJS({\n  \"node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/index.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = Error;\n  }\n});\n\n// node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/eval.js\nvar require_eval = __commonJS({\n  \"node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/eval.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = EvalError;\n  }\n});\n\n// node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/range.js\nvar require_range = __commonJS({\n  \"node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/range.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = RangeError;\n  }\n});\n\n// node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/ref.js\nvar require_ref = __commonJS({\n  \"node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/ref.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = ReferenceError;\n  }\n});\n\n// node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/syntax.js\nvar require_syntax = __commonJS({\n  \"node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/syntax.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = SyntaxError;\n  }\n});\n\n// node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/type.js\nvar require_type = __commonJS({\n  \"node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/type.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = TypeError;\n  }\n});\n\n// node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/uri.js\nvar require_uri = __commonJS({\n  \"node_modules/.pnpm/es-errors@1.3.0/node_modules/es-errors/uri.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = URIError;\n  }\n});\n\n// node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/abs.js\nvar require_abs = __commonJS({\n  \"node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/abs.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = Math.abs;\n  }\n});\n\n// node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/floor.js\nvar require_floor = __commonJS({\n  \"node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/floor.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = Math.floor;\n  }\n});\n\n// node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/max.js\nvar require_max = __commonJS({\n  \"node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/max.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = Math.max;\n  }\n});\n\n// node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/min.js\nvar require_min = __commonJS({\n  \"node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/min.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = Math.min;\n  }\n});\n\n// node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/pow.js\nvar require_pow = __commonJS({\n  \"node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/pow.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = Math.pow;\n  }\n});\n\n// node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/round.js\nvar require_round = __commonJS({\n  \"node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/round.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = Math.round;\n  }\n});\n\n// node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/isNaN.js\nvar require_isNaN = __commonJS({\n  \"node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/isNaN.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = Number.isNaN || function isNaN2(a) {\n      return a !== a;\n    };\n  }\n});\n\n// node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/sign.js\nvar require_sign = __commonJS({\n  \"node_modules/.pnpm/math-intrinsics@1.1.0/node_modules/math-intrinsics/sign.js\"(exports2, module2) {\n    \"use strict\";\n    var $isNaN = require_isNaN();\n    module2.exports = function sign(number) {\n      if ($isNaN(number) || number === 0) {\n        return number;\n      }\n      return number < 0 ? -1 : 1;\n    };\n  }\n});\n\n// node_modules/.pnpm/gopd@1.2.0/node_modules/gopd/gOPD.js\nvar require_gOPD = __commonJS({\n  \"node_modules/.pnpm/gopd@1.2.0/node_modules/gopd/gOPD.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = Object.getOwnPropertyDescriptor;\n  }\n});\n\n// node_modules/.pnpm/gopd@1.2.0/node_modules/gopd/index.js\nvar require_gopd = __commonJS({\n  \"node_modules/.pnpm/gopd@1.2.0/node_modules/gopd/index.js\"(exports2, module2) {\n    \"use strict\";\n    var $gOPD = require_gOPD();\n    if ($gOPD) {\n      try {\n        $gOPD([], \"length\");\n      } catch (e) {\n        $gOPD = null;\n      }\n    }\n    module2.exports = $gOPD;\n  }\n});\n\n// node_modules/.pnpm/es-define-property@1.0.1/node_modules/es-define-property/index.js\nvar require_es_define_property = __commonJS({\n  \"node_modules/.pnpm/es-define-property@1.0.1/node_modules/es-define-property/index.js\"(exports2, module2) {\n    \"use strict\";\n    var $defineProperty = Object.defineProperty || false;\n    if ($defineProperty) {\n      try {\n        $defineProperty({}, \"a\", { value: 1 });\n      } catch (e) {\n        $defineProperty = false;\n      }\n    }\n    module2.exports = $defineProperty;\n  }\n});\n\n// node_modules/.pnpm/has-symbols@1.1.0/node_modules/has-symbols/index.js\nvar require_has_symbols = __commonJS({\n  \"node_modules/.pnpm/has-symbols@1.1.0/node_modules/has-symbols/index.js\"(exports2, module2) {\n    \"use strict\";\n    var origSymbol = typeof Symbol !== \"undefined\" && Symbol;\n    var hasSymbolSham = require_shams();\n    module2.exports = function hasNativeSymbols() {\n      if (typeof origSymbol !== \"function\") {\n        return false;\n      }\n      if (typeof Symbol !== \"function\") {\n        return false;\n      }\n      if (typeof origSymbol(\"foo\") !== \"symbol\") {\n        return false;\n      }\n      if (typeof /* @__PURE__ */ Symbol(\"bar\") !== \"symbol\") {\n        return false;\n      }\n      return hasSymbolSham();\n    };\n  }\n});\n\n// node_modules/.pnpm/get-proto@1.0.1/node_modules/get-proto/Reflect.getPrototypeOf.js\nvar require_Reflect_getPrototypeOf = __commonJS({\n  \"node_modules/.pnpm/get-proto@1.0.1/node_modules/get-proto/Reflect.getPrototypeOf.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = typeof Reflect !== \"undefined\" && Reflect.getPrototypeOf || null;\n  }\n});\n\n// node_modules/.pnpm/get-proto@1.0.1/node_modules/get-proto/Object.getPrototypeOf.js\nvar require_Object_getPrototypeOf = __commonJS({\n  \"node_modules/.pnpm/get-proto@1.0.1/node_modules/get-proto/Object.getPrototypeOf.js\"(exports2, module2) {\n    \"use strict\";\n    var $Object = require_es_object_atoms();\n    module2.exports = $Object.getPrototypeOf || null;\n  }\n});\n\n// node_modules/.pnpm/function-bind@1.1.2/node_modules/function-bind/implementation.js\nvar require_implementation = __commonJS({\n  \"node_modules/.pnpm/function-bind@1.1.2/node_modules/function-bind/implementation.js\"(exports2, module2) {\n    \"use strict\";\n    var ERROR_MESSAGE = \"Function.prototype.bind called on incompatible \";\n    var toStr = Object.prototype.toString;\n    var max = Math.max;\n    var funcType = \"[object Function]\";\n    var concatty = function concatty2(a, b) {\n      var arr = [];\n      for (var i = 0; i < a.length; i += 1) {\n        arr[i] = a[i];\n      }\n      for (var j = 0; j < b.length; j += 1) {\n        arr[j + a.length] = b[j];\n      }\n      return arr;\n    };\n    var slicy = function slicy2(arrLike, offset) {\n      var arr = [];\n      for (var i = offset || 0, j = 0; i < arrLike.length; i += 1, j += 1) {\n        arr[j] = arrLike[i];\n      }\n      return arr;\n    };\n    var joiny = function(arr, joiner) {\n      var str = \"\";\n      for (var i = 0; i < arr.length; i += 1) {\n        str += arr[i];\n        if (i + 1 < arr.length) {\n          str += joiner;\n        }\n      }\n      return str;\n    };\n    module2.exports = function bind(that) {\n      var target = this;\n      if (typeof target !== \"function\" || toStr.apply(target) !== funcType) {\n        throw new TypeError(ERROR_MESSAGE + target);\n      }\n      var args = slicy(arguments, 1);\n      var bound;\n      var binder = function() {\n        if (this instanceof bound) {\n          var result = target.apply(\n            this,\n            concatty(args, arguments)\n          );\n          if (Object(result) === result) {\n            return result;\n          }\n          return this;\n        }\n        return target.apply(\n          that,\n          concatty(args, arguments)\n        );\n      };\n      var boundLength = max(0, target.length - args.length);\n      var boundArgs = [];\n      for (var i = 0; i < boundLength; i++) {\n        boundArgs[i] = \"$\" + i;\n      }\n      bound = Function(\"binder\", \"return function (\" + joiny(boundArgs, \",\") + \"){ return binder.apply(this,arguments); }\")(binder);\n      if (target.prototype) {\n        var Empty = function Empty2() {\n        };\n        Empty.prototype = target.prototype;\n        bound.prototype = new Empty();\n        Empty.prototype = null;\n      }\n      return bound;\n    };\n  }\n});\n\n// node_modules/.pnpm/function-bind@1.1.2/node_modules/function-bind/index.js\nvar require_function_bind = __commonJS({\n  \"node_modules/.pnpm/function-bind@1.1.2/node_modules/function-bind/index.js\"(exports2, module2) {\n    \"use strict\";\n    var implementation = require_implementation();\n    module2.exports = Function.prototype.bind || implementation;\n  }\n});\n\n// node_modules/.pnpm/call-bind-apply-helpers@1.0.2/node_modules/call-bind-apply-helpers/functionCall.js\nvar require_functionCall = __commonJS({\n  \"node_modules/.pnpm/call-bind-apply-helpers@1.0.2/node_modules/call-bind-apply-helpers/functionCall.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = Function.prototype.call;\n  }\n});\n\n// node_modules/.pnpm/call-bind-apply-helpers@1.0.2/node_modules/call-bind-apply-helpers/functionApply.js\nvar require_functionApply = __commonJS({\n  \"node_modules/.pnpm/call-bind-apply-helpers@1.0.2/node_modules/call-bind-apply-helpers/functionApply.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = Function.prototype.apply;\n  }\n});\n\n// node_modules/.pnpm/call-bind-apply-helpers@1.0.2/node_modules/call-bind-apply-helpers/reflectApply.js\nvar require_reflectApply = __commonJS({\n  \"node_modules/.pnpm/call-bind-apply-helpers@1.0.2/node_modules/call-bind-apply-helpers/reflectApply.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = typeof Reflect !== \"undefined\" && Reflect && Reflect.apply;\n  }\n});\n\n// node_modules/.pnpm/call-bind-apply-helpers@1.0.2/node_modules/call-bind-apply-helpers/actualApply.js\nvar require_actualApply = __commonJS({\n  \"node_modules/.pnpm/call-bind-apply-helpers@1.0.2/node_modules/call-bind-apply-helpers/actualApply.js\"(exports2, module2) {\n    \"use strict\";\n    var bind = require_function_bind();\n    var $apply = require_functionApply();\n    var $call = require_functionCall();\n    var $reflectApply = require_reflectApply();\n    module2.exports = $reflectApply || bind.call($call, $apply);\n  }\n});\n\n// node_modules/.pnpm/call-bind-apply-helpers@1.0.2/node_modules/call-bind-apply-helpers/index.js\nvar require_call_bind_apply_helpers = __commonJS({\n  \"node_modules/.pnpm/call-bind-apply-helpers@1.0.2/node_modules/call-bind-apply-helpers/index.js\"(exports2, module2) {\n    \"use strict\";\n    var bind = require_function_bind();\n    var $TypeError = require_type();\n    var $call = require_functionCall();\n    var $actualApply = require_actualApply();\n    module2.exports = function callBindBasic(args) {\n      if (args.length < 1 || typeof args[0] !== \"function\") {\n        throw new $TypeError(\"a function is required\");\n      }\n      return $actualApply(bind, $call, args);\n    };\n  }\n});\n\n// node_modules/.pnpm/dunder-proto@1.0.1/node_modules/dunder-proto/get.js\nvar require_get = __commonJS({\n  \"node_modules/.pnpm/dunder-proto@1.0.1/node_modules/dunder-proto/get.js\"(exports2, module2) {\n    \"use strict\";\n    var callBind = require_call_bind_apply_helpers();\n    var gOPD = require_gopd();\n    var hasProtoAccessor;\n    try {\n      hasProtoAccessor = /** @type {{ __proto__?: typeof Array.prototype }} */\n      [].__proto__ === Array.prototype;\n    } catch (e) {\n      if (!e || typeof e !== \"object\" || !(\"code\" in e) || e.code !== \"ERR_PROTO_ACCESS\") {\n        throw e;\n      }\n    }\n    var desc = !!hasProtoAccessor && gOPD && gOPD(\n      Object.prototype,\n      /** @type {keyof typeof Object.prototype} */\n      \"__proto__\"\n    );\n    var $Object = Object;\n    var $getPrototypeOf = $Object.getPrototypeOf;\n    module2.exports = desc && typeof desc.get === \"function\" ? callBind([desc.get]) : typeof $getPrototypeOf === \"function\" ? (\n      /** @type {import('./get')} */\n      function getDunder(value) {\n        return $getPrototypeOf(value == null ? value : $Object(value));\n      }\n    ) : false;\n  }\n});\n\n// node_modules/.pnpm/get-proto@1.0.1/node_modules/get-proto/index.js\nvar require_get_proto = __commonJS({\n  \"node_modules/.pnpm/get-proto@1.0.1/node_modules/get-proto/index.js\"(exports2, module2) {\n    \"use strict\";\n    var reflectGetProto = require_Reflect_getPrototypeOf();\n    var originalGetProto = require_Object_getPrototypeOf();\n    var getDunderProto = require_get();\n    module2.exports = reflectGetProto ? function getProto(O) {\n      return reflectGetProto(O);\n    } : originalGetProto ? function getProto(O) {\n      if (!O || typeof O !== \"object\" && typeof O !== \"function\") {\n        throw new TypeError(\"getProto: not an object\");\n      }\n      return originalGetProto(O);\n    } : getDunderProto ? function getProto(O) {\n      return getDunderProto(O);\n    } : null;\n  }\n});\n\n// node_modules/.pnpm/hasown@2.0.2/node_modules/hasown/index.js\nvar require_hasown = __commonJS({\n  \"node_modules/.pnpm/hasown@2.0.2/node_modules/hasown/index.js\"(exports2, module2) {\n    \"use strict\";\n    var call = Function.prototype.call;\n    var $hasOwn = Object.prototype.hasOwnProperty;\n    var bind = require_function_bind();\n    module2.exports = bind.call(call, $hasOwn);\n  }\n});\n\n// node_modules/.pnpm/get-intrinsic@1.3.0/node_modules/get-intrinsic/index.js\nvar require_get_intrinsic = __commonJS({\n  \"node_modules/.pnpm/get-intrinsic@1.3.0/node_modules/get-intrinsic/index.js\"(exports2, module2) {\n    \"use strict\";\n    var undefined2;\n    var $Object = require_es_object_atoms();\n    var $Error = require_es_errors();\n    var $EvalError = require_eval();\n    var $RangeError = require_range();\n    var $ReferenceError = require_ref();\n    var $SyntaxError = require_syntax();\n    var $TypeError = require_type();\n    var $URIError = require_uri();\n    var abs = require_abs();\n    var floor = require_floor();\n    var max = require_max();\n    var min = require_min();\n    var pow = require_pow();\n    var round = require_round();\n    var sign = require_sign();\n    var $Function = Function;\n    var getEvalledConstructor = function(expressionSyntax) {\n      try {\n        return $Function('\"use strict\"; return (' + expressionSyntax + \").constructor;\")();\n      } catch (e) {\n      }\n    };\n    var $gOPD = require_gopd();\n    var $defineProperty = require_es_define_property();\n    var throwTypeError = function() {\n      throw new $TypeError();\n    };\n    var ThrowTypeError = $gOPD ? (function() {\n      try {\n        arguments.callee;\n        return throwTypeError;\n      } catch (calleeThrows) {\n        try {\n          return $gOPD(arguments, \"callee\").get;\n        } catch (gOPDthrows) {\n          return throwTypeError;\n        }\n      }\n    })() : throwTypeError;\n    var hasSymbols = require_has_symbols()();\n    var getProto = require_get_proto();\n    var $ObjectGPO = require_Object_getPrototypeOf();\n    var $ReflectGPO = require_Reflect_getPrototypeOf();\n    var $apply = require_functionApply();\n    var $call = require_functionCall();\n    var needsEval = {};\n    var TypedArray = typeof Uint8Array === \"undefined\" || !getProto ? undefined2 : getProto(Uint8Array);\n    var INTRINSICS = {\n      __proto__: null,\n      \"%AggregateError%\": typeof AggregateError === \"undefined\" ? undefined2 : AggregateError,\n      \"%Array%\": Array,\n      \"%ArrayBuffer%\": typeof ArrayBuffer === \"undefined\" ? undefined2 : ArrayBuffer,\n      \"%ArrayIteratorPrototype%\": hasSymbols && getProto ? getProto([][Symbol.iterator]()) : undefined2,\n      \"%AsyncFromSyncIteratorPrototype%\": undefined2,\n      \"%AsyncFunction%\": needsEval,\n      \"%AsyncGenerator%\": needsEval,\n      \"%AsyncGeneratorFunction%\": needsEval,\n      \"%AsyncIteratorPrototype%\": needsEval,\n      \"%Atomics%\": typeof Atomics === \"undefined\" ? undefined2 : Atomics,\n      \"%BigInt%\": typeof BigInt === \"undefined\" ? undefined2 : BigInt,\n      \"%BigInt64Array%\": typeof BigInt64Array === \"undefined\" ? undefined2 : BigInt64Array,\n      \"%BigUint64Array%\": typeof BigUint64Array === \"undefined\" ? undefined2 : BigUint64Array,\n      \"%Boolean%\": Boolean,\n      \"%DataView%\": typeof DataView === \"undefined\" ? undefined2 : DataView,\n      \"%Date%\": Date,\n      \"%decodeURI%\": decodeURI,\n      \"%decodeURIComponent%\": decodeURIComponent,\n      \"%encodeURI%\": encodeURI,\n      \"%encodeURIComponent%\": encodeURIComponent,\n      \"%Error%\": $Error,\n      \"%eval%\": eval,\n      // eslint-disable-line no-eval\n      \"%EvalError%\": $EvalError,\n      \"%Float16Array%\": typeof Float16Array === \"undefined\" ? undefined2 : Float16Array,\n      \"%Float32Array%\": typeof Float32Array === \"undefined\" ? undefined2 : Float32Array,\n      \"%Float64Array%\": typeof Float64Array === \"undefined\" ? undefined2 : Float64Array,\n      \"%FinalizationRegistry%\": typeof FinalizationRegistry === \"undefined\" ? undefined2 : FinalizationRegistry,\n      \"%Function%\": $Function,\n      \"%GeneratorFunction%\": needsEval,\n      \"%Int8Array%\": typeof Int8Array === \"undefined\" ? undefined2 : Int8Array,\n      \"%Int16Array%\": typeof Int16Array === \"undefined\" ? undefined2 : Int16Array,\n      \"%Int32Array%\": typeof Int32Array === \"undefined\" ? undefined2 : Int32Array,\n      \"%isFinite%\": isFinite,\n      \"%isNaN%\": isNaN,\n      \"%IteratorPrototype%\": hasSymbols && getProto ? getProto(getProto([][Symbol.iterator]())) : undefined2,\n      \"%JSON%\": typeof JSON === \"object\" ? JSON : undefined2,\n      \"%Map%\": typeof Map === \"undefined\" ? undefined2 : Map,\n      \"%MapIteratorPrototype%\": typeof Map === \"undefined\" || !hasSymbols || !getProto ? undefined2 : getProto((/* @__PURE__ */ new Map())[Symbol.iterator]()),\n      \"%Math%\": Math,\n      \"%Number%\": Number,\n      \"%Object%\": $Object,\n      \"%Object.getOwnPropertyDescriptor%\": $gOPD,\n      \"%parseFloat%\": parseFloat,\n      \"%parseInt%\": parseInt,\n      \"%Promise%\": typeof Promise === \"undefined\" ? undefined2 : Promise,\n      \"%Proxy%\": typeof Proxy === \"undefined\" ? undefined2 : Proxy,\n      \"%RangeError%\": $RangeError,\n      \"%ReferenceError%\": $ReferenceError,\n      \"%Reflect%\": typeof Reflect === \"undefined\" ? undefined2 : Reflect,\n      \"%RegExp%\": RegExp,\n      \"%Set%\": typeof Set === \"undefined\" ? undefined2 : Set,\n      \"%SetIteratorPrototype%\": typeof Set === \"undefined\" || !hasSymbols || !getProto ? undefined2 : getProto((/* @__PURE__ */ new Set())[Symbol.iterator]()),\n      \"%SharedArrayBuffer%\": typeof SharedArrayBuffer === \"undefined\" ? undefined2 : SharedArrayBuffer,\n      \"%String%\": String,\n      \"%StringIteratorPrototype%\": hasSymbols && getProto ? getProto(\"\"[Symbol.iterator]()) : undefined2,\n      \"%Symbol%\": hasSymbols ? Symbol : undefined2,\n      \"%SyntaxError%\": $SyntaxError,\n      \"%ThrowTypeError%\": ThrowTypeError,\n      \"%TypedArray%\": TypedArray,\n      \"%TypeError%\": $TypeError,\n      \"%Uint8Array%\": typeof Uint8Array === \"undefined\" ? undefined2 : Uint8Array,\n      \"%Uint8ClampedArray%\": typeof Uint8ClampedArray === \"undefined\" ? undefined2 : Uint8ClampedArray,\n      \"%Uint16Array%\": typeof Uint16Array === \"undefined\" ? undefined2 : Uint16Array,\n      \"%Uint32Array%\": typeof Uint32Array === \"undefined\" ? undefined2 : Uint32Array,\n      \"%URIError%\": $URIError,\n      \"%WeakMap%\": typeof WeakMap === \"undefined\" ? undefined2 : WeakMap,\n      \"%WeakRef%\": typeof WeakRef === \"undefined\" ? undefined2 : WeakRef,\n      \"%WeakSet%\": typeof WeakSet === \"undefined\" ? undefined2 : WeakSet,\n      \"%Function.prototype.call%\": $call,\n      \"%Function.prototype.apply%\": $apply,\n      \"%Object.defineProperty%\": $defineProperty,\n      \"%Object.getPrototypeOf%\": $ObjectGPO,\n      \"%Math.abs%\": abs,\n      \"%Math.floor%\": floor,\n      \"%Math.max%\": max,\n      \"%Math.min%\": min,\n      \"%Math.pow%\": pow,\n      \"%Math.round%\": round,\n      \"%Math.sign%\": sign,\n      \"%Reflect.getPrototypeOf%\": $ReflectGPO\n    };\n    if (getProto) {\n      try {\n        null.error;\n      } catch (e) {\n        errorProto = getProto(getProto(e));\n        INTRINSICS[\"%Error.prototype%\"] = errorProto;\n      }\n    }\n    var errorProto;\n    var doEval = function doEval2(name) {\n      var value;\n      if (name === \"%AsyncFunction%\") {\n        value = getEvalledConstructor(\"async function () {}\");\n      } else if (name === \"%GeneratorFunction%\") {\n        value = getEvalledConstructor(\"function* () {}\");\n      } else if (name === \"%AsyncGeneratorFunction%\") {\n        value = getEvalledConstructor(\"async function* () {}\");\n      } else if (name === \"%AsyncGenerator%\") {\n        var fn = doEval2(\"%AsyncGeneratorFunction%\");\n        if (fn) {\n          value = fn.prototype;\n        }\n      } else if (name === \"%AsyncIteratorPrototype%\") {\n        var gen = doEval2(\"%AsyncGenerator%\");\n        if (gen && getProto) {\n          value = getProto(gen.prototype);\n        }\n      }\n      INTRINSICS[name] = value;\n      return value;\n    };\n    var LEGACY_ALIASES = {\n      __proto__: null,\n      \"%ArrayBufferPrototype%\": [\"ArrayBuffer\", \"prototype\"],\n      \"%ArrayPrototype%\": [\"Array\", \"prototype\"],\n      \"%ArrayProto_entries%\": [\"Array\", \"prototype\", \"entries\"],\n      \"%ArrayProto_forEach%\": [\"Array\", \"prototype\", \"forEach\"],\n      \"%ArrayProto_keys%\": [\"Array\", \"prototype\", \"keys\"],\n      \"%ArrayProto_values%\": [\"Array\", \"prototype\", \"values\"],\n      \"%AsyncFunctionPrototype%\": [\"AsyncFunction\", \"prototype\"],\n      \"%AsyncGenerator%\": [\"AsyncGeneratorFunction\", \"prototype\"],\n      \"%AsyncGeneratorPrototype%\": [\"AsyncGeneratorFunction\", \"prototype\", \"prototype\"],\n      \"%BooleanPrototype%\": [\"Boolean\", \"prototype\"],\n      \"%DataViewPrototype%\": [\"DataView\", \"prototype\"],\n      \"%DatePrototype%\": [\"Date\", \"prototype\"],\n      \"%ErrorPrototype%\": [\"Error\", \"prototype\"],\n      \"%EvalErrorPrototype%\": [\"EvalError\", \"prototype\"],\n      \"%Float32ArrayPrototype%\": [\"Float32Array\", \"prototype\"],\n      \"%Float64ArrayPrototype%\": [\"Float64Array\", \"prototype\"],\n      \"%FunctionPrototype%\": [\"Function\", \"prototype\"],\n      \"%Generator%\": [\"GeneratorFunction\", \"prototype\"],\n      \"%GeneratorPrototype%\": [\"GeneratorFunction\", \"prototype\", \"prototype\"],\n      \"%Int8ArrayPrototype%\": [\"Int8Array\", \"prototype\"],\n      \"%Int16ArrayPrototype%\": [\"Int16Array\", \"prototype\"],\n      \"%Int32ArrayPrototype%\": [\"Int32Array\", \"prototype\"],\n      \"%JSONParse%\": [\"JSON\", \"parse\"],\n      \"%JSONStringify%\": [\"JSON\", \"stringify\"],\n      \"%MapPrototype%\": [\"Map\", \"prototype\"],\n      \"%NumberPrototype%\": [\"Number\", \"prototype\"],\n      \"%ObjectPrototype%\": [\"Object\", \"prototype\"],\n      \"%ObjProto_toString%\": [\"Object\", \"prototype\", \"toString\"],\n      \"%ObjProto_valueOf%\": [\"Object\", \"prototype\", \"valueOf\"],\n      \"%PromisePrototype%\": [\"Promise\", \"prototype\"],\n      \"%PromiseProto_then%\": [\"Promise\", \"prototype\", \"then\"],\n      \"%Promise_all%\": [\"Promise\", \"all\"],\n      \"%Promise_reject%\": [\"Promise\", \"reject\"],\n      \"%Promise_resolve%\": [\"Promise\", \"resolve\"],\n      \"%RangeErrorPrototype%\": [\"RangeError\", \"prototype\"],\n      \"%ReferenceErrorPrototype%\": [\"ReferenceError\", \"prototype\"],\n      \"%RegExpPrototype%\": [\"RegExp\", \"prototype\"],\n      \"%SetPrototype%\": [\"Set\", \"prototype\"],\n      \"%SharedArrayBufferPrototype%\": [\"SharedArrayBuffer\", \"prototype\"],\n      \"%StringPrototype%\": [\"String\", \"prototype\"],\n      \"%SymbolPrototype%\": [\"Symbol\", \"prototype\"],\n      \"%SyntaxErrorPrototype%\": [\"SyntaxError\", \"prototype\"],\n      \"%TypedArrayPrototype%\": [\"TypedArray\", \"prototype\"],\n      \"%TypeErrorPrototype%\": [\"TypeError\", \"prototype\"],\n      \"%Uint8ArrayPrototype%\": [\"Uint8Array\", \"prototype\"],\n      \"%Uint8ClampedArrayPrototype%\": [\"Uint8ClampedArray\", \"prototype\"],\n      \"%Uint16ArrayPrototype%\": [\"Uint16Array\", \"prototype\"],\n      \"%Uint32ArrayPrototype%\": [\"Uint32Array\", \"prototype\"],\n      \"%URIErrorPrototype%\": [\"URIError\", \"prototype\"],\n      \"%WeakMapPrototype%\": [\"WeakMap\", \"prototype\"],\n      \"%WeakSetPrototype%\": [\"WeakSet\", \"prototype\"]\n    };\n    var bind = require_function_bind();\n    var hasOwn = require_hasown();\n    var $concat = bind.call($call, Array.prototype.concat);\n    var $spliceApply = bind.call($apply, Array.prototype.splice);\n    var $replace = bind.call($call, String.prototype.replace);\n    var $strSlice = bind.call($call, String.prototype.slice);\n    var $exec = bind.call($call, RegExp.prototype.exec);\n    var rePropName = /[^%.[\\]]+|\\[(?:(-?\\d+(?:\\.\\d+)?)|([\"'])((?:(?!\\2)[^\\\\]|\\\\.)*?)\\2)\\]|(?=(?:\\.|\\[\\])(?:\\.|\\[\\]|%$))/g;\n    var reEscapeChar = /\\\\(\\\\)?/g;\n    var stringToPath = function stringToPath2(string) {\n      var first = $strSlice(string, 0, 1);\n      var last = $strSlice(string, -1);\n      if (first === \"%\" && last !== \"%\") {\n        throw new $SyntaxError(\"invalid intrinsic syntax, expected closing `%`\");\n      } else if (last === \"%\" && first !== \"%\") {\n        throw new $SyntaxError(\"invalid intrinsic syntax, expected opening `%`\");\n      }\n      var result = [];\n      $replace(string, rePropName, function(match, number, quote, subString) {\n        result[result.length] = quote ? $replace(subString, reEscapeChar, \"$1\") : number || match;\n      });\n      return result;\n    };\n    var getBaseIntrinsic = function getBaseIntrinsic2(name, allowMissing) {\n      var intrinsicName = name;\n      var alias;\n      if (hasOwn(LEGACY_ALIASES, intrinsicName)) {\n        alias = LEGACY_ALIASES[intrinsicName];\n        intrinsicName = \"%\" + alias[0] + \"%\";\n      }\n      if (hasOwn(INTRINSICS, intrinsicName)) {\n        var value = INTRINSICS[intrinsicName];\n        if (value === needsEval) {\n          value = doEval(intrinsicName);\n        }\n        if (typeof value === \"undefined\" && !allowMissing) {\n          throw new $TypeError(\"intrinsic \" + name + \" exists, but is not available. Please file an issue!\");\n        }\n        return {\n          alias,\n          name: intrinsicName,\n          value\n        };\n      }\n      throw new $SyntaxError(\"intrinsic \" + name + \" does not exist!\");\n    };\n    module2.exports = function GetIntrinsic(name, allowMissing) {\n      if (typeof name !== \"string\" || name.length === 0) {\n        throw new $TypeError(\"intrinsic name must be a non-empty string\");\n      }\n      if (arguments.length > 1 && typeof allowMissing !== \"boolean\") {\n        throw new $TypeError('\"allowMissing\" argument must be a boolean');\n      }\n      if ($exec(/^%?[^%]*%?$/, name) === null) {\n        throw new $SyntaxError(\"`%` may not be present anywhere but at the beginning and end of the intrinsic name\");\n      }\n      var parts = stringToPath(name);\n      var intrinsicBaseName = parts.length > 0 ? parts[0] : \"\";\n      var intrinsic = getBaseIntrinsic(\"%\" + intrinsicBaseName + \"%\", allowMissing);\n      var intrinsicRealName = intrinsic.name;\n      var value = intrinsic.value;\n      var skipFurtherCaching = false;\n      var alias = intrinsic.alias;\n      if (alias) {\n        intrinsicBaseName = alias[0];\n        $spliceApply(parts, $concat([0, 1], alias));\n      }\n      for (var i = 1, isOwn = true; i < parts.length; i += 1) {\n        var part = parts[i];\n        var first = $strSlice(part, 0, 1);\n        var last = $strSlice(part, -1);\n        if ((first === '\"' || first === \"'\" || first === \"`\" || (last === '\"' || last === \"'\" || last === \"`\")) && first !== last) {\n          throw new $SyntaxError(\"property names with quotes must have matching quotes\");\n        }\n        if (part === \"constructor\" || !isOwn) {\n          skipFurtherCaching = true;\n        }\n        intrinsicBaseName += \".\" + part;\n        intrinsicRealName = \"%\" + intrinsicBaseName + \"%\";\n        if (hasOwn(INTRINSICS, intrinsicRealName)) {\n          value = INTRINSICS[intrinsicRealName];\n        } else if (value != null) {\n          if (!(part in value)) {\n            if (!allowMissing) {\n              throw new $TypeError(\"base intrinsic for \" + name + \" exists, but the property is not available.\");\n            }\n            return void undefined2;\n          }\n          if ($gOPD && i + 1 >= parts.length) {\n            var desc = $gOPD(value, part);\n            isOwn = !!desc;\n            if (isOwn && \"get\" in desc && !(\"originalValue\" in desc.get)) {\n              value = desc.get;\n            } else {\n              value = value[part];\n            }\n          } else {\n            isOwn = hasOwn(value, part);\n            value = value[part];\n          }\n          if (isOwn && !skipFurtherCaching) {\n            INTRINSICS[intrinsicRealName] = value;\n          }\n        }\n      }\n      return value;\n    };\n  }\n});\n\n// node_modules/.pnpm/call-bound@1.0.4/node_modules/call-bound/index.js\nvar require_call_bound = __commonJS({\n  \"node_modules/.pnpm/call-bound@1.0.4/node_modules/call-bound/index.js\"(exports2, module2) {\n    \"use strict\";\n    var GetIntrinsic = require_get_intrinsic();\n    var callBindBasic = require_call_bind_apply_helpers();\n    var $indexOf = callBindBasic([GetIntrinsic(\"%String.prototype.indexOf%\")]);\n    module2.exports = function callBoundIntrinsic(name, allowMissing) {\n      var intrinsic = (\n        /** @type {(this: unknown, ...args: unknown[]) => unknown} */\n        GetIntrinsic(name, !!allowMissing)\n      );\n      if (typeof intrinsic === \"function\" && $indexOf(name, \".prototype.\") > -1) {\n        return callBindBasic(\n          /** @type {const} */\n          [intrinsic]\n        );\n      }\n      return intrinsic;\n    };\n  }\n});\n\n// node_modules/.pnpm/is-arguments@1.2.0/node_modules/is-arguments/index.js\nvar require_is_arguments = __commonJS({\n  \"node_modules/.pnpm/is-arguments@1.2.0/node_modules/is-arguments/index.js\"(exports2, module2) {\n    \"use strict\";\n    var hasToStringTag = require_shams2()();\n    var callBound = require_call_bound();\n    var $toString = callBound(\"Object.prototype.toString\");\n    var isStandardArguments = function isArguments(value) {\n      if (hasToStringTag && value && typeof value === \"object\" && Symbol.toStringTag in value) {\n        return false;\n      }\n      return $toString(value) === \"[object Arguments]\";\n    };\n    var isLegacyArguments = function isArguments(value) {\n      if (isStandardArguments(value)) {\n        return true;\n      }\n      return value !== null && typeof value === \"object\" && \"length\" in value && typeof value.length === \"number\" && value.length >= 0 && $toString(value) !== \"[object Array]\" && \"callee\" in value && $toString(value.callee) === \"[object Function]\";\n    };\n    var supportsStandardArguments = (function() {\n      return isStandardArguments(arguments);\n    })();\n    isStandardArguments.isLegacyArguments = isLegacyArguments;\n    module2.exports = supportsStandardArguments ? isStandardArguments : isLegacyArguments;\n  }\n});\n\n// node_modules/.pnpm/is-regex@1.2.1/node_modules/is-regex/index.js\nvar require_is_regex = __commonJS({\n  \"node_modules/.pnpm/is-regex@1.2.1/node_modules/is-regex/index.js\"(exports2, module2) {\n    \"use strict\";\n    var callBound = require_call_bound();\n    var hasToStringTag = require_shams2()();\n    var hasOwn = require_hasown();\n    var gOPD = require_gopd();\n    var fn;\n    if (hasToStringTag) {\n      $exec = callBound(\"RegExp.prototype.exec\");\n      isRegexMarker = {};\n      throwRegexMarker = function() {\n        throw isRegexMarker;\n      };\n      badStringifier = {\n        toString: throwRegexMarker,\n        valueOf: throwRegexMarker\n      };\n      if (typeof Symbol.toPrimitive === \"symbol\") {\n        badStringifier[Symbol.toPrimitive] = throwRegexMarker;\n      }\n      fn = function isRegex(value) {\n        if (!value || typeof value !== \"object\") {\n          return false;\n        }\n        var descriptor = (\n          /** @type {NonNullable<typeof gOPD>} */\n          gOPD(\n            /** @type {{ lastIndex?: unknown }} */\n            value,\n            \"lastIndex\"\n          )\n        );\n        var hasLastIndexDataProperty = descriptor && hasOwn(descriptor, \"value\");\n        if (!hasLastIndexDataProperty) {\n          return false;\n        }\n        try {\n          $exec(\n            value,\n            /** @type {string} */\n            /** @type {unknown} */\n            badStringifier\n          );\n        } catch (e) {\n          return e === isRegexMarker;\n        }\n      };\n    } else {\n      $toString = callBound(\"Object.prototype.toString\");\n      regexClass = \"[object RegExp]\";\n      fn = function isRegex(value) {\n        if (!value || typeof value !== \"object\" && typeof value !== \"function\") {\n          return false;\n        }\n        return $toString(value) === regexClass;\n      };\n    }\n    var $exec;\n    var isRegexMarker;\n    var throwRegexMarker;\n    var badStringifier;\n    var $toString;\n    var regexClass;\n    module2.exports = fn;\n  }\n});\n\n// node_modules/.pnpm/safe-regex-test@1.1.0/node_modules/safe-regex-test/index.js\nvar require_safe_regex_test = __commonJS({\n  \"node_modules/.pnpm/safe-regex-test@1.1.0/node_modules/safe-regex-test/index.js\"(exports2, module2) {\n    \"use strict\";\n    var callBound = require_call_bound();\n    var isRegex = require_is_regex();\n    var $exec = callBound(\"RegExp.prototype.exec\");\n    var $TypeError = require_type();\n    module2.exports = function regexTester(regex) {\n      if (!isRegex(regex)) {\n        throw new $TypeError(\"`regex` must be a RegExp\");\n      }\n      return function test(s) {\n        return $exec(regex, s) !== null;\n      };\n    };\n  }\n});\n\n// node_modules/.pnpm/generator-function@2.0.1/node_modules/generator-function/index.js\nvar require_generator_function = __commonJS({\n  \"node_modules/.pnpm/generator-function@2.0.1/node_modules/generator-function/index.js\"(exports2, module2) {\n    \"use strict\";\n    var cached = (\n      /** @type {GeneratorFunctionConstructor} */\n      function* () {\n      }.constructor\n    );\n    module2.exports = () => cached;\n  }\n});\n\n// node_modules/.pnpm/is-generator-function@1.1.2/node_modules/is-generator-function/index.js\nvar require_is_generator_function = __commonJS({\n  \"node_modules/.pnpm/is-generator-function@1.1.2/node_modules/is-generator-function/index.js\"(exports2, module2) {\n    \"use strict\";\n    var callBound = require_call_bound();\n    var safeRegexTest = require_safe_regex_test();\n    var isFnRegex = safeRegexTest(/^\\s*(?:function)?\\*/);\n    var hasToStringTag = require_shams2()();\n    var getProto = require_get_proto();\n    var toStr = callBound(\"Object.prototype.toString\");\n    var fnToStr = callBound(\"Function.prototype.toString\");\n    var getGeneratorFunction = require_generator_function();\n    module2.exports = function isGeneratorFunction(fn) {\n      if (typeof fn !== \"function\") {\n        return false;\n      }\n      if (isFnRegex(fnToStr(fn))) {\n        return true;\n      }\n      if (!hasToStringTag) {\n        var str = toStr(fn);\n        return str === \"[object GeneratorFunction]\";\n      }\n      if (!getProto) {\n        return false;\n      }\n      var GeneratorFunction = getGeneratorFunction();\n      return GeneratorFunction && getProto(fn) === GeneratorFunction.prototype;\n    };\n  }\n});\n\n// node_modules/.pnpm/is-callable@1.2.7/node_modules/is-callable/index.js\nvar require_is_callable = __commonJS({\n  \"node_modules/.pnpm/is-callable@1.2.7/node_modules/is-callable/index.js\"(exports2, module2) {\n    \"use strict\";\n    var fnToStr = Function.prototype.toString;\n    var reflectApply = typeof Reflect === \"object\" && Reflect !== null && Reflect.apply;\n    var badArrayLike;\n    var isCallableMarker;\n    if (typeof reflectApply === \"function\" && typeof Object.defineProperty === \"function\") {\n      try {\n        badArrayLike = Object.defineProperty({}, \"length\", {\n          get: function() {\n            throw isCallableMarker;\n          }\n        });\n        isCallableMarker = {};\n        reflectApply(function() {\n          throw 42;\n        }, null, badArrayLike);\n      } catch (_) {\n        if (_ !== isCallableMarker) {\n          reflectApply = null;\n        }\n      }\n    } else {\n      reflectApply = null;\n    }\n    var constructorRegex = /^\\s*class\\b/;\n    var isES6ClassFn = function isES6ClassFunction(value) {\n      try {\n        var fnStr = fnToStr.call(value);\n        return constructorRegex.test(fnStr);\n      } catch (e) {\n        return false;\n      }\n    };\n    var tryFunctionObject = function tryFunctionToStr(value) {\n      try {\n        if (isES6ClassFn(value)) {\n          return false;\n        }\n        fnToStr.call(value);\n        return true;\n      } catch (e) {\n        return false;\n      }\n    };\n    var toStr = Object.prototype.toString;\n    var objectClass = \"[object Object]\";\n    var fnClass = \"[object Function]\";\n    var genClass = \"[object GeneratorFunction]\";\n    var ddaClass = \"[object HTMLAllCollection]\";\n    var ddaClass2 = \"[object HTML document.all class]\";\n    var ddaClass3 = \"[object HTMLCollection]\";\n    var hasToStringTag = typeof Symbol === \"function\" && !!Symbol.toStringTag;\n    var isIE68 = !(0 in [,]);\n    var isDDA = function isDocumentDotAll() {\n      return false;\n    };\n    if (typeof document === \"object\") {\n      all = document.all;\n      if (toStr.call(all) === toStr.call(document.all)) {\n        isDDA = function isDocumentDotAll(value) {\n          if ((isIE68 || !value) && (typeof value === \"undefined\" || typeof value === \"object\")) {\n            try {\n              var str = toStr.call(value);\n              return (str === ddaClass || str === ddaClass2 || str === ddaClass3 || str === objectClass) && value(\"\") == null;\n            } catch (e) {\n            }\n          }\n          return false;\n        };\n      }\n    }\n    var all;\n    module2.exports = reflectApply ? function isCallable(value) {\n      if (isDDA(value)) {\n        return true;\n      }\n      if (!value) {\n        return false;\n      }\n      if (typeof value !== \"function\" && typeof value !== \"object\") {\n        return false;\n      }\n      try {\n        reflectApply(value, null, badArrayLike);\n      } catch (e) {\n        if (e !== isCallableMarker) {\n          return false;\n        }\n      }\n      return !isES6ClassFn(value) && tryFunctionObject(value);\n    } : function isCallable(value) {\n      if (isDDA(value)) {\n        return true;\n      }\n      if (!value) {\n        return false;\n      }\n      if (typeof value !== \"function\" && typeof value !== \"object\") {\n        return false;\n      }\n      if (hasToStringTag) {\n        return tryFunctionObject(value);\n      }\n      if (isES6ClassFn(value)) {\n        return false;\n      }\n      var strClass = toStr.call(value);\n      if (strClass !== fnClass && strClass !== genClass && !/^\\[object HTML/.test(strClass)) {\n        return false;\n      }\n      return tryFunctionObject(value);\n    };\n  }\n});\n\n// node_modules/.pnpm/for-each@0.3.5/node_modules/for-each/index.js\nvar require_for_each = __commonJS({\n  \"node_modules/.pnpm/for-each@0.3.5/node_modules/for-each/index.js\"(exports2, module2) {\n    \"use strict\";\n    var isCallable = require_is_callable();\n    var toStr = Object.prototype.toString;\n    var hasOwnProperty = Object.prototype.hasOwnProperty;\n    var forEachArray = function forEachArray2(array, iterator, receiver) {\n      for (var i = 0, len = array.length; i < len; i++) {\n        if (hasOwnProperty.call(array, i)) {\n          if (receiver == null) {\n            iterator(array[i], i, array);\n          } else {\n            iterator.call(receiver, array[i], i, array);\n          }\n        }\n      }\n    };\n    var forEachString = function forEachString2(string, iterator, receiver) {\n      for (var i = 0, len = string.length; i < len; i++) {\n        if (receiver == null) {\n          iterator(string.charAt(i), i, string);\n        } else {\n          iterator.call(receiver, string.charAt(i), i, string);\n        }\n      }\n    };\n    var forEachObject = function forEachObject2(object, iterator, receiver) {\n      for (var k in object) {\n        if (hasOwnProperty.call(object, k)) {\n          if (receiver == null) {\n            iterator(object[k], k, object);\n          } else {\n            iterator.call(receiver, object[k], k, object);\n          }\n        }\n      }\n    };\n    function isArray(x) {\n      return toStr.call(x) === \"[object Array]\";\n    }\n    module2.exports = function forEach(list, iterator, thisArg) {\n      if (!isCallable(iterator)) {\n        throw new TypeError(\"iterator must be a function\");\n      }\n      var receiver;\n      if (arguments.length >= 3) {\n        receiver = thisArg;\n      }\n      if (isArray(list)) {\n        forEachArray(list, iterator, receiver);\n      } else if (typeof list === \"string\") {\n        forEachString(list, iterator, receiver);\n      } else {\n        forEachObject(list, iterator, receiver);\n      }\n    };\n  }\n});\n\n// node_modules/.pnpm/possible-typed-array-names@1.1.0/node_modules/possible-typed-array-names/index.js\nvar require_possible_typed_array_names = __commonJS({\n  \"node_modules/.pnpm/possible-typed-array-names@1.1.0/node_modules/possible-typed-array-names/index.js\"(exports2, module2) {\n    \"use strict\";\n    module2.exports = [\n      \"Float16Array\",\n      \"Float32Array\",\n      \"Float64Array\",\n      \"Int8Array\",\n      \"Int16Array\",\n      \"Int32Array\",\n      \"Uint8Array\",\n      \"Uint8ClampedArray\",\n      \"Uint16Array\",\n      \"Uint32Array\",\n      \"BigInt64Array\",\n      \"BigUint64Array\"\n    ];\n  }\n});\n\n// node_modules/.pnpm/available-typed-arrays@1.0.7/node_modules/available-typed-arrays/index.js\nvar require_available_typed_arrays = __commonJS({\n  \"node_modules/.pnpm/available-typed-arrays@1.0.7/node_modules/available-typed-arrays/index.js\"(exports2, module2) {\n    \"use strict\";\n    var possibleNames = require_possible_typed_array_names();\n    var g = typeof globalThis === \"undefined\" ? global : globalThis;\n    module2.exports = function availableTypedArrays() {\n      var out = [];\n      for (var i = 0; i < possibleNames.length; i++) {\n        if (typeof g[possibleNames[i]] === \"function\") {\n          out[out.length] = possibleNames[i];\n        }\n      }\n      return out;\n    };\n  }\n});\n\n// node_modules/.pnpm/define-data-property@1.1.4/node_modules/define-data-property/index.js\nvar require_define_data_property = __commonJS({\n  \"node_modules/.pnpm/define-data-property@1.1.4/node_modules/define-data-property/index.js\"(exports2, module2) {\n    \"use strict\";\n    var $defineProperty = require_es_define_property();\n    var $SyntaxError = require_syntax();\n    var $TypeError = require_type();\n    var gopd = require_gopd();\n    module2.exports = function defineDataProperty(obj, property, value) {\n      if (!obj || typeof obj !== \"object\" && typeof obj !== \"function\") {\n        throw new $TypeError(\"`obj` must be an object or a function`\");\n      }\n      if (typeof property !== \"string\" && typeof property !== \"symbol\") {\n        throw new $TypeError(\"`property` must be a string or a symbol`\");\n      }\n      if (arguments.length > 3 && typeof arguments[3] !== \"boolean\" && arguments[3] !== null) {\n        throw new $TypeError(\"`nonEnumerable`, if provided, must be a boolean or null\");\n      }\n      if (arguments.length > 4 && typeof arguments[4] !== \"boolean\" && arguments[4] !== null) {\n        throw new $TypeError(\"`nonWritable`, if provided, must be a boolean or null\");\n      }\n      if (arguments.length > 5 && typeof arguments[5] !== \"boolean\" && arguments[5] !== null) {\n        throw new $TypeError(\"`nonConfigurable`, if provided, must be a boolean or null\");\n      }\n      if (arguments.length > 6 && typeof arguments[6] !== \"boolean\") {\n        throw new $TypeError(\"`loose`, if provided, must be a boolean\");\n      }\n      var nonEnumerable = arguments.length > 3 ? arguments[3] : null;\n      var nonWritable = arguments.length > 4 ? arguments[4] : null;\n      var nonConfigurable = arguments.length > 5 ? arguments[5] : null;\n      var loose = arguments.length > 6 ? arguments[6] : false;\n      var desc = !!gopd && gopd(obj, property);\n      if ($defineProperty) {\n        $defineProperty(obj, property, {\n          configurable: nonConfigurable === null && desc ? desc.configurable : !nonConfigurable,\n          enumerable: nonEnumerable === null && desc ? desc.enumerable : !nonEnumerable,\n          value,\n          writable: nonWritable === null && desc ? desc.writable : !nonWritable\n        });\n      } else if (loose || !nonEnumerable && !nonWritable && !nonConfigurable) {\n        obj[property] = value;\n      } else {\n        throw new $SyntaxError(\"This environment does not support defining a property as non-configurable, non-writable, or non-enumerable.\");\n      }\n    };\n  }\n});\n\n// node_modules/.pnpm/has-property-descriptors@1.0.2/node_modules/has-property-descriptors/index.js\nvar require_has_property_descriptors = __commonJS({\n  \"node_modules/.pnpm/has-property-descriptors@1.0.2/node_modules/has-property-descriptors/index.js\"(exports2, module2) {\n    \"use strict\";\n    var $defineProperty = require_es_define_property();\n    var hasPropertyDescriptors = function hasPropertyDescriptors2() {\n      return !!$defineProperty;\n    };\n    hasPropertyDescriptors.hasArrayLengthDefineBug = function hasArrayLengthDefineBug() {\n      if (!$defineProperty) {\n        return null;\n      }\n      try {\n        return $defineProperty([], \"length\", { value: 1 }).length !== 1;\n      } catch (e) {\n        return true;\n      }\n    };\n    module2.exports = hasPropertyDescriptors;\n  }\n});\n\n// node_modules/.pnpm/set-function-length@1.2.2/node_modules/set-function-length/index.js\nvar require_set_function_length = __commonJS({\n  \"node_modules/.pnpm/set-function-length@1.2.2/node_modules/set-function-length/index.js\"(exports2, module2) {\n    \"use strict\";\n    var GetIntrinsic = require_get_intrinsic();\n    var define = require_define_data_property();\n    var hasDescriptors = require_has_property_descriptors()();\n    var gOPD = require_gopd();\n    var $TypeError = require_type();\n    var $floor = GetIntrinsic(\"%Math.floor%\");\n    module2.exports = function setFunctionLength(fn, length) {\n      if (typeof fn !== \"function\") {\n        throw new $TypeError(\"`fn` is not a function\");\n      }\n      if (typeof length !== \"number\" || length < 0 || length > 4294967295 || $floor(length) !== length) {\n        throw new $TypeError(\"`length` must be a positive 32-bit integer\");\n      }\n      var loose = arguments.length > 2 && !!arguments[2];\n      var functionLengthIsConfigurable = true;\n      var functionLengthIsWritable = true;\n      if (\"length\" in fn && gOPD) {\n        var desc = gOPD(fn, \"length\");\n        if (desc && !desc.configurable) {\n          functionLengthIsConfigurable = false;\n        }\n        if (desc && !desc.writable) {\n          functionLengthIsWritable = false;\n        }\n      }\n      if (functionLengthIsConfigurable || functionLengthIsWritable || !loose) {\n        if (hasDescriptors) {\n          define(\n            /** @type {Parameters<define>[0]} */\n            fn,\n            \"length\",\n            length,\n            true,\n            true\n          );\n        } else {\n          define(\n            /** @type {Parameters<define>[0]} */\n            fn,\n            \"length\",\n            length\n          );\n        }\n      }\n      return fn;\n    };\n  }\n});\n\n// node_modules/.pnpm/call-bind-apply-helpers@1.0.2/node_modules/call-bind-apply-helpers/applyBind.js\nvar require_applyBind = __commonJS({\n  \"node_modules/.pnpm/call-bind-apply-helpers@1.0.2/node_modules/call-bind-apply-helpers/applyBind.js\"(exports2, module2) {\n    \"use strict\";\n    var bind = require_function_bind();\n    var $apply = require_functionApply();\n    var actualApply = require_actualApply();\n    module2.exports = function applyBind() {\n      return actualApply(bind, $apply, arguments);\n    };\n  }\n});\n\n// node_modules/.pnpm/call-bind@1.0.8/node_modules/call-bind/index.js\nvar require_call_bind = __commonJS({\n  \"node_modules/.pnpm/call-bind@1.0.8/node_modules/call-bind/index.js\"(exports2, module2) {\n    \"use strict\";\n    var setFunctionLength = require_set_function_length();\n    var $defineProperty = require_es_define_property();\n    var callBindBasic = require_call_bind_apply_helpers();\n    var applyBind = require_applyBind();\n    module2.exports = function callBind(originalFunction) {\n      var func = callBindBasic(arguments);\n      var adjustedLength = originalFunction.length - (arguments.length - 1);\n      return setFunctionLength(\n        func,\n        1 + (adjustedLength > 0 ? adjustedLength : 0),\n        true\n      );\n    };\n    if ($defineProperty) {\n      $defineProperty(module2.exports, \"apply\", { value: applyBind });\n    } else {\n      module2.exports.apply = applyBind;\n    }\n  }\n});\n\n// node_modules/.pnpm/which-typed-array@1.1.20/node_modules/which-typed-array/index.js\nvar require_which_typed_array = __commonJS({\n  \"node_modules/.pnpm/which-typed-array@1.1.20/node_modules/which-typed-array/index.js\"(exports2, module2) {\n    \"use strict\";\n    var forEach = require_for_each();\n    var availableTypedArrays = require_available_typed_arrays();\n    var callBind = require_call_bind();\n    var callBound = require_call_bound();\n    var gOPD = require_gopd();\n    var getProto = require_get_proto();\n    var $toString = callBound(\"Object.prototype.toString\");\n    var hasToStringTag = require_shams2()();\n    var g = typeof globalThis === \"undefined\" ? global : globalThis;\n    var typedArrays = availableTypedArrays();\n    var $slice = callBound(\"String.prototype.slice\");\n    var $indexOf = callBound(\"Array.prototype.indexOf\", true) || function indexOf(array, value) {\n      for (var i = 0; i < array.length; i += 1) {\n        if (array[i] === value) {\n          return i;\n        }\n      }\n      return -1;\n    };\n    var cache = { __proto__: null };\n    if (hasToStringTag && gOPD && getProto) {\n      forEach(typedArrays, function(typedArray) {\n        var arr = new g[typedArray]();\n        if (Symbol.toStringTag in arr && getProto) {\n          var proto = getProto(arr);\n          var descriptor = gOPD(proto, Symbol.toStringTag);\n          if (!descriptor && proto) {\n            var superProto = getProto(proto);\n            descriptor = gOPD(superProto, Symbol.toStringTag);\n          }\n          if (descriptor && descriptor.get) {\n            var bound = callBind(descriptor.get);\n            cache[\n              /** @type {`$${import('.').TypedArrayName}`} */\n              \"$\" + typedArray\n            ] = bound;\n          }\n        }\n      });\n    } else {\n      forEach(typedArrays, function(typedArray) {\n        var arr = new g[typedArray]();\n        var fn = arr.slice || arr.set;\n        if (fn) {\n          var bound = (\n            /** @type {import('./types').BoundSlice | import('./types').BoundSet} */\n            // @ts-expect-error TODO FIXME\n            callBind(fn)\n          );\n          cache[\n            /** @type {`$${import('.').TypedArrayName}`} */\n            \"$\" + typedArray\n          ] = bound;\n        }\n      });\n    }\n    var tryTypedArrays = function tryAllTypedArrays(value) {\n      var found = false;\n      forEach(\n        /** @type {Record<`\\$${import('.').TypedArrayName}`, Getter>} */\n        cache,\n        /** @type {(getter: Getter, name: `\\$${import('.').TypedArrayName}`) => void} */\n        function(getter, typedArray) {\n          if (!found) {\n            try {\n              if (\"$\" + getter(value) === typedArray) {\n                found = /** @type {import('.').TypedArrayName} */\n                $slice(typedArray, 1);\n              }\n            } catch (e) {\n            }\n          }\n        }\n      );\n      return found;\n    };\n    var trySlices = function tryAllSlices(value) {\n      var found = false;\n      forEach(\n        /** @type {Record<`\\$${import('.').TypedArrayName}`, Getter>} */\n        cache,\n        /** @type {(getter: Getter, name: `\\$${import('.').TypedArrayName}`) => void} */\n        function(getter, name) {\n          if (!found) {\n            try {\n              getter(value);\n              found = /** @type {import('.').TypedArrayName} */\n              $slice(name, 1);\n            } catch (e) {\n            }\n          }\n        }\n      );\n      return found;\n    };\n    module2.exports = function whichTypedArray(value) {\n      if (!value || typeof value !== \"object\") {\n        return false;\n      }\n      if (!hasToStringTag) {\n        var tag = $slice($toString(value), 8, -1);\n        if ($indexOf(typedArrays, tag) > -1) {\n          return tag;\n        }\n        if (tag !== \"Object\") {\n          return false;\n        }\n        return trySlices(value);\n      }\n      if (!gOPD) {\n        return null;\n      }\n      return tryTypedArrays(value);\n    };\n  }\n});\n\n// node_modules/.pnpm/is-typed-array@1.1.15/node_modules/is-typed-array/index.js\nvar require_is_typed_array = __commonJS({\n  \"node_modules/.pnpm/is-typed-array@1.1.15/node_modules/is-typed-array/index.js\"(exports2, module2) {\n    \"use strict\";\n    var whichTypedArray = require_which_typed_array();\n    module2.exports = function isTypedArray(value) {\n      return !!whichTypedArray(value);\n    };\n  }\n});\n\n// node_modules/.pnpm/util@0.12.5/node_modules/util/support/types.js\nvar require_types = __commonJS({\n  \"node_modules/.pnpm/util@0.12.5/node_modules/util/support/types.js\"(exports2) {\n    \"use strict\";\n    var isArgumentsObject = require_is_arguments();\n    var isGeneratorFunction = require_is_generator_function();\n    var whichTypedArray = require_which_typed_array();\n    var isTypedArray = require_is_typed_array();\n    function uncurryThis(f) {\n      return f.call.bind(f);\n    }\n    var BigIntSupported = typeof BigInt !== \"undefined\";\n    var SymbolSupported = typeof Symbol !== \"undefined\";\n    var ObjectToString = uncurryThis(Object.prototype.toString);\n    var numberValue = uncurryThis(Number.prototype.valueOf);\n    var stringValue = uncurryThis(String.prototype.valueOf);\n    var booleanValue = uncurryThis(Boolean.prototype.valueOf);\n    if (BigIntSupported) {\n      bigIntValue = uncurryThis(BigInt.prototype.valueOf);\n    }\n    var bigIntValue;\n    if (SymbolSupported) {\n      symbolValue = uncurryThis(Symbol.prototype.valueOf);\n    }\n    var symbolValue;\n    function checkBoxedPrimitive(value, prototypeValueOf) {\n      if (typeof value !== \"object\") {\n        return false;\n      }\n      try {\n        prototypeValueOf(value);\n        return true;\n      } catch (e) {\n        return false;\n      }\n    }\n    exports2.isArgumentsObject = isArgumentsObject;\n    exports2.isGeneratorFunction = isGeneratorFunction;\n    exports2.isTypedArray = isTypedArray;\n    function isPromise(input) {\n      return typeof Promise !== \"undefined\" && input instanceof Promise || input !== null && typeof input === \"object\" && typeof input.then === \"function\" && typeof input.catch === \"function\";\n    }\n    exports2.isPromise = isPromise;\n    function isArrayBufferView(value) {\n      if (typeof ArrayBuffer !== \"undefined\" && ArrayBuffer.isView) {\n        return ArrayBuffer.isView(value);\n      }\n      return isTypedArray(value) || isDataView(value);\n    }\n    exports2.isArrayBufferView = isArrayBufferView;\n    function isUint8Array(value) {\n      return whichTypedArray(value) === \"Uint8Array\";\n    }\n    exports2.isUint8Array = isUint8Array;\n    function isUint8ClampedArray(value) {\n      return whichTypedArray(value) === \"Uint8ClampedArray\";\n    }\n    exports2.isUint8ClampedArray = isUint8ClampedArray;\n    function isUint16Array(value) {\n      return whichTypedArray(value) === \"Uint16Array\";\n    }\n    exports2.isUint16Array = isUint16Array;\n    function isUint32Array(value) {\n      return whichTypedArray(value) === \"Uint32Array\";\n    }\n    exports2.isUint32Array = isUint32Array;\n    function isInt8Array(value) {\n      return whichTypedArray(value) === \"Int8Array\";\n    }\n    exports2.isInt8Array = isInt8Array;\n    function isInt16Array(value) {\n      return whichTypedArray(value) === \"Int16Array\";\n    }\n    exports2.isInt16Array = isInt16Array;\n    function isInt32Array(value) {\n      return whichTypedArray(value) === \"Int32Array\";\n    }\n    exports2.isInt32Array = isInt32Array;\n    function isFloat32Array(value) {\n      return whichTypedArray(value) === \"Float32Array\";\n    }\n    exports2.isFloat32Array = isFloat32Array;\n    function isFloat64Array(value) {\n      return whichTypedArray(value) === \"Float64Array\";\n    }\n    exports2.isFloat64Array = isFloat64Array;\n    function isBigInt64Array(value) {\n      return whichTypedArray(value) === \"BigInt64Array\";\n    }\n    exports2.isBigInt64Array = isBigInt64Array;\n    function isBigUint64Array(value) {\n      return whichTypedArray(value) === \"BigUint64Array\";\n    }\n    exports2.isBigUint64Array = isBigUint64Array;\n    function isMapToString(value) {\n      return ObjectToString(value) === \"[object Map]\";\n    }\n    isMapToString.working = typeof Map !== \"undefined\" && isMapToString(/* @__PURE__ */ new Map());\n    function isMap(value) {\n      if (typeof Map === \"undefined\") {\n        return false;\n      }\n      return isMapToString.working ? isMapToString(value) : value instanceof Map;\n    }\n    exports2.isMap = isMap;\n    function isSetToString(value) {\n      return ObjectToString(value) === \"[object Set]\";\n    }\n    isSetToString.working = typeof Set !== \"undefined\" && isSetToString(/* @__PURE__ */ new Set());\n    function isSet(value) {\n      if (typeof Set === \"undefined\") {\n        return false;\n      }\n      return isSetToString.working ? isSetToString(value) : value instanceof Set;\n    }\n    exports2.isSet = isSet;\n    function isWeakMapToString(value) {\n      return ObjectToString(value) === \"[object WeakMap]\";\n    }\n    isWeakMapToString.working = typeof WeakMap !== \"undefined\" && isWeakMapToString(/* @__PURE__ */ new WeakMap());\n    function isWeakMap(value) {\n      if (typeof WeakMap === \"undefined\") {\n        return false;\n      }\n      return isWeakMapToString.working ? isWeakMapToString(value) : value instanceof WeakMap;\n    }\n    exports2.isWeakMap = isWeakMap;\n    function isWeakSetToString(value) {\n      return ObjectToString(value) === \"[object WeakSet]\";\n    }\n    isWeakSetToString.working = typeof WeakSet !== \"undefined\" && isWeakSetToString(/* @__PURE__ */ new WeakSet());\n    function isWeakSet(value) {\n      return isWeakSetToString(value);\n    }\n    exports2.isWeakSet = isWeakSet;\n    function isArrayBufferToString(value) {\n      return ObjectToString(value) === \"[object ArrayBuffer]\";\n    }\n    isArrayBufferToString.working = typeof ArrayBuffer !== \"undefined\" && isArrayBufferToString(new ArrayBuffer());\n    function isArrayBuffer(value) {\n      if (typeof ArrayBuffer === \"undefined\") {\n        return false;\n      }\n      return isArrayBufferToString.working ? isArrayBufferToString(value) : value instanceof ArrayBuffer;\n    }\n    exports2.isArrayBuffer = isArrayBuffer;\n    function isDataViewToString(value) {\n      return ObjectToString(value) === \"[object DataView]\";\n    }\n    isDataViewToString.working = typeof ArrayBuffer !== \"undefined\" && typeof DataView !== \"undefined\" && isDataViewToString(new DataView(new ArrayBuffer(1), 0, 1));\n    function isDataView(value) {\n      if (typeof DataView === \"undefined\") {\n        return false;\n      }\n      return isDataViewToString.working ? isDataViewToString(value) : value instanceof DataView;\n    }\n    exports2.isDataView = isDataView;\n    var SharedArrayBufferCopy = typeof SharedArrayBuffer !== \"undefined\" ? SharedArrayBuffer : void 0;\n    function isSharedArrayBufferToString(value) {\n      return ObjectToString(value) === \"[object SharedArrayBuffer]\";\n    }\n    function isSharedArrayBuffer(value) {\n      if (typeof SharedArrayBufferCopy === \"undefined\") {\n        return false;\n      }\n      if (typeof isSharedArrayBufferToString.working === \"undefined\") {\n        isSharedArrayBufferToString.working = isSharedArrayBufferToString(new SharedArrayBufferCopy());\n      }\n      return isSharedArrayBufferToString.working ? isSharedArrayBufferToString(value) : value instanceof SharedArrayBufferCopy;\n    }\n    exports2.isSharedArrayBuffer = isSharedArrayBuffer;\n    function isAsyncFunction(value) {\n      return ObjectToString(value) === \"[object AsyncFunction]\";\n    }\n    exports2.isAsyncFunction = isAsyncFunction;\n    function isMapIterator(value) {\n      return ObjectToString(value) === \"[object Map Iterator]\";\n    }\n    exports2.isMapIterator = isMapIterator;\n    function isSetIterator(value) {\n      return ObjectToString(value) === \"[object Set Iterator]\";\n    }\n    exports2.isSetIterator = isSetIterator;\n    function isGeneratorObject(value) {\n      return ObjectToString(value) === \"[object Generator]\";\n    }\n    exports2.isGeneratorObject = isGeneratorObject;\n    function isWebAssemblyCompiledModule(value) {\n      return ObjectToString(value) === \"[object WebAssembly.Module]\";\n    }\n    exports2.isWebAssemblyCompiledModule = isWebAssemblyCompiledModule;\n    function isNumberObject(value) {\n      return checkBoxedPrimitive(value, numberValue);\n    }\n    exports2.isNumberObject = isNumberObject;\n    function isStringObject(value) {\n      return checkBoxedPrimitive(value, stringValue);\n    }\n    exports2.isStringObject = isStringObject;\n    function isBooleanObject(value) {\n      return checkBoxedPrimitive(value, booleanValue);\n    }\n    exports2.isBooleanObject = isBooleanObject;\n    function isBigIntObject(value) {\n      return BigIntSupported && checkBoxedPrimitive(value, bigIntValue);\n    }\n    exports2.isBigIntObject = isBigIntObject;\n    function isSymbolObject(value) {\n      return SymbolSupported && checkBoxedPrimitive(value, symbolValue);\n    }\n    exports2.isSymbolObject = isSymbolObject;\n    function isBoxedPrimitive(value) {\n      return isNumberObject(value) || isStringObject(value) || isBooleanObject(value) || isBigIntObject(value) || isSymbolObject(value);\n    }\n    exports2.isBoxedPrimitive = isBoxedPrimitive;\n    function isAnyArrayBuffer(value) {\n      return typeof Uint8Array !== \"undefined\" && (isArrayBuffer(value) || isSharedArrayBuffer(value));\n    }\n    exports2.isAnyArrayBuffer = isAnyArrayBuffer;\n    [\"isProxy\", \"isExternal\", \"isModuleNamespaceObject\"].forEach(function(method) {\n      Object.defineProperty(exports2, method, {\n        enumerable: false,\n        value: function() {\n          throw new Error(method + \" is not supported in userland\");\n        }\n      });\n    });\n  }\n});\n\n// node_modules/.pnpm/util@0.12.5/node_modules/util/support/isBufferBrowser.js\nvar require_isBufferBrowser = __commonJS({\n  \"node_modules/.pnpm/util@0.12.5/node_modules/util/support/isBufferBrowser.js\"(exports2, module2) {\n    module2.exports = function isBuffer(arg) {\n      return arg && typeof arg === \"object\" && typeof arg.copy === \"function\" && typeof arg.fill === \"function\" && typeof arg.readUInt8 === \"function\";\n    };\n  }\n});\n\n// node_modules/.pnpm/inherits@2.0.4/node_modules/inherits/inherits_browser.js\nvar require_inherits_browser = __commonJS({\n  \"node_modules/.pnpm/inherits@2.0.4/node_modules/inherits/inherits_browser.js\"(exports2, module2) {\n    if (typeof Object.create === \"function\") {\n      module2.exports = function inherits(ctor, superCtor) {\n        if (superCtor) {\n          ctor.super_ = superCtor;\n          ctor.prototype = Object.create(superCtor.prototype, {\n            constructor: {\n              value: ctor,\n              enumerable: false,\n              writable: true,\n              configurable: true\n            }\n          });\n        }\n      };\n    } else {\n      module2.exports = function inherits(ctor, superCtor) {\n        if (superCtor) {\n          ctor.super_ = superCtor;\n          var TempCtor = function() {\n          };\n          TempCtor.prototype = superCtor.prototype;\n          ctor.prototype = new TempCtor();\n          ctor.prototype.constructor = ctor;\n        }\n      };\n    }\n  }\n});\n\n// node_modules/.pnpm/util@0.12.5/node_modules/util/util.js\nvar require_util = __commonJS({\n  \"node_modules/.pnpm/util@0.12.5/node_modules/util/util.js\"(exports2) {\n    var getOwnPropertyDescriptors = Object.getOwnPropertyDescriptors || function getOwnPropertyDescriptors2(obj) {\n      var keys = Object.keys(obj);\n      var descriptors = {};\n      for (var i = 0; i < keys.length; i++) {\n        descriptors[keys[i]] = Object.getOwnPropertyDescriptor(obj, keys[i]);\n      }\n      return descriptors;\n    };\n    var formatRegExp = /%[sdj%]/g;\n    exports2.format = function(f) {\n      if (!isString(f)) {\n        var objects = [];\n        for (var i = 0; i < arguments.length; i++) {\n          objects.push(inspect(arguments[i]));\n        }\n        return objects.join(\" \");\n      }\n      var i = 1;\n      var args = arguments;\n      var len = args.length;\n      var str = String(f).replace(formatRegExp, function(x2) {\n        if (x2 === \"%%\") return \"%\";\n        if (i >= len) return x2;\n        switch (x2) {\n          case \"%s\":\n            return String(args[i++]);\n          case \"%d\":\n            return Number(args[i++]);\n          case \"%j\":\n            try {\n              return JSON.stringify(args[i++]);\n            } catch (_) {\n              return \"[Circular]\";\n            }\n          default:\n            return x2;\n        }\n      });\n      for (var x = args[i]; i < len; x = args[++i]) {\n        if (isNull(x) || !isObject(x)) {\n          str += \" \" + x;\n        } else {\n          str += \" \" + inspect(x);\n        }\n      }\n      return str;\n    };\n    exports2.deprecate = function(fn, msg) {\n      if (typeof process !== \"undefined\" && process.noDeprecation === true) {\n        return fn;\n      }\n      if (typeof process === \"undefined\") {\n        return function() {\n          return exports2.deprecate(fn, msg).apply(this, arguments);\n        };\n      }\n      var warned = false;\n      function deprecated() {\n        if (!warned) {\n          if (process.throwDeprecation) {\n            throw new Error(msg);\n          } else if (process.traceDeprecation) {\n            console.trace(msg);\n          } else {\n            console.error(msg);\n          }\n          warned = true;\n        }\n        return fn.apply(this, arguments);\n      }\n      return deprecated;\n    };\n    var debugs = {};\n    var debugEnvRegex = /^$/;\n    if (process.env.NODE_DEBUG) {\n      debugEnv = process.env.NODE_DEBUG;\n      debugEnv = debugEnv.replace(/[|\\\\{}()[\\]^$+?.]/g, \"\\\\$&\").replace(/\\*/g, \".*\").replace(/,/g, \"$|^\").toUpperCase();\n      debugEnvRegex = new RegExp(\"^\" + debugEnv + \"$\", \"i\");\n    }\n    var debugEnv;\n    exports2.debuglog = function(set) {\n      set = set.toUpperCase();\n      if (!debugs[set]) {\n        if (debugEnvRegex.test(set)) {\n          var pid = process.pid;\n          debugs[set] = function() {\n            var msg = exports2.format.apply(exports2, arguments);\n            console.error(\"%s %d: %s\", set, pid, msg);\n          };\n        } else {\n          debugs[set] = function() {\n          };\n        }\n      }\n      return debugs[set];\n    };\n    function inspect(obj, opts) {\n      var ctx = {\n        seen: [],\n        stylize: stylizeNoColor\n      };\n      if (arguments.length >= 3) ctx.depth = arguments[2];\n      if (arguments.length >= 4) ctx.colors = arguments[3];\n      if (isBoolean(opts)) {\n        ctx.showHidden = opts;\n      } else if (opts) {\n        exports2._extend(ctx, opts);\n      }\n      if (isUndefined(ctx.showHidden)) ctx.showHidden = false;\n      if (isUndefined(ctx.depth)) ctx.depth = 2;\n      if (isUndefined(ctx.colors)) ctx.colors = false;\n      if (isUndefined(ctx.customInspect)) ctx.customInspect = true;\n      if (ctx.colors) ctx.stylize = stylizeWithColor;\n      return formatValue(ctx, obj, ctx.depth);\n    }\n    exports2.inspect = inspect;\n    inspect.colors = {\n      \"bold\": [1, 22],\n      \"italic\": [3, 23],\n      \"underline\": [4, 24],\n      \"inverse\": [7, 27],\n      \"white\": [37, 39],\n      \"grey\": [90, 39],\n      \"black\": [30, 39],\n      \"blue\": [34, 39],\n      \"cyan\": [36, 39],\n      \"green\": [32, 39],\n      \"magenta\": [35, 39],\n      \"red\": [31, 39],\n      \"yellow\": [33, 39]\n    };\n    inspect.styles = {\n      \"special\": \"cyan\",\n      \"number\": \"yellow\",\n      \"boolean\": \"yellow\",\n      \"undefined\": \"grey\",\n      \"null\": \"bold\",\n      \"string\": \"green\",\n      \"date\": \"magenta\",\n      // \"name\": intentionally not styling\n      \"regexp\": \"red\"\n    };\n    function stylizeWithColor(str, styleType) {\n      var style = inspect.styles[styleType];\n      if (style) {\n        return \"\\x1B[\" + inspect.colors[style][0] + \"m\" + str + \"\\x1B[\" + inspect.colors[style][1] + \"m\";\n      } else {\n        return str;\n      }\n    }\n    function stylizeNoColor(str, styleType) {\n      return str;\n    }\n    function arrayToHash(array) {\n      var hash = {};\n      array.forEach(function(val, idx) {\n        hash[val] = true;\n      });\n      return hash;\n    }\n    function formatValue(ctx, value, recurseTimes) {\n      if (ctx.customInspect && value && isFunction(value.inspect) && // Filter out the util module, it's inspect function is special\n      value.inspect !== exports2.inspect && // Also filter out any prototype objects using the circular check.\n      !(value.constructor && value.constructor.prototype === value)) {\n        var ret = value.inspect(recurseTimes, ctx);\n        if (!isString(ret)) {\n          ret = formatValue(ctx, ret, recurseTimes);\n        }\n        return ret;\n      }\n      var primitive = formatPrimitive(ctx, value);\n      if (primitive) {\n        return primitive;\n      }\n      var keys = Object.keys(value);\n      var visibleKeys = arrayToHash(keys);\n      if (ctx.showHidden) {\n        keys = Object.getOwnPropertyNames(value);\n      }\n      if (isError(value) && (keys.indexOf(\"message\") >= 0 || keys.indexOf(\"description\") >= 0)) {\n        return formatError(value);\n      }\n      if (keys.length === 0) {\n        if (isFunction(value)) {\n          var name = value.name ? \": \" + value.name : \"\";\n          return ctx.stylize(\"[Function\" + name + \"]\", \"special\");\n        }\n        if (isRegExp(value)) {\n          return ctx.stylize(RegExp.prototype.toString.call(value), \"regexp\");\n        }\n        if (isDate(value)) {\n          return ctx.stylize(Date.prototype.toString.call(value), \"date\");\n        }\n        if (isError(value)) {\n          return formatError(value);\n        }\n      }\n      var base = \"\", array = false, braces = [\"{\", \"}\"];\n      if (isArray(value)) {\n        array = true;\n        braces = [\"[\", \"]\"];\n      }\n      if (isFunction(value)) {\n        var n = value.name ? \": \" + value.name : \"\";\n        base = \" [Function\" + n + \"]\";\n      }\n      if (isRegExp(value)) {\n        base = \" \" + RegExp.prototype.toString.call(value);\n      }\n      if (isDate(value)) {\n        base = \" \" + Date.prototype.toUTCString.call(value);\n      }\n      if (isError(value)) {\n        base = \" \" + formatError(value);\n      }\n      if (keys.length === 0 && (!array || value.length == 0)) {\n        return braces[0] + base + braces[1];\n      }\n      if (recurseTimes < 0) {\n        if (isRegExp(value)) {\n          return ctx.stylize(RegExp.prototype.toString.call(value), \"regexp\");\n        } else {\n          return ctx.stylize(\"[Object]\", \"special\");\n        }\n      }\n      ctx.seen.push(value);\n      var output;\n      if (array) {\n        output = formatArray(ctx, value, recurseTimes, visibleKeys, keys);\n      } else {\n        output = keys.map(function(key) {\n          return formatProperty(ctx, value, recurseTimes, visibleKeys, key, array);\n        });\n      }\n      ctx.seen.pop();\n      return reduceToSingleString(output, base, braces);\n    }\n    function formatPrimitive(ctx, value) {\n      if (isUndefined(value))\n        return ctx.stylize(\"undefined\", \"undefined\");\n      if (isString(value)) {\n        var simple = \"'\" + JSON.stringify(value).replace(/^\"|\"$/g, \"\").replace(/'/g, \"\\\\'\").replace(/\\\\\"/g, '\"') + \"'\";\n        return ctx.stylize(simple, \"string\");\n      }\n      if (isNumber(value))\n        return ctx.stylize(\"\" + value, \"number\");\n      if (isBoolean(value))\n        return ctx.stylize(\"\" + value, \"boolean\");\n      if (isNull(value))\n        return ctx.stylize(\"null\", \"null\");\n    }\n    function formatError(value) {\n      return \"[\" + Error.prototype.toString.call(value) + \"]\";\n    }\n    function formatArray(ctx, value, recurseTimes, visibleKeys, keys) {\n      var output = [];\n      for (var i = 0, l = value.length; i < l; ++i) {\n        if (hasOwnProperty(value, String(i))) {\n          output.push(formatProperty(\n            ctx,\n            value,\n            recurseTimes,\n            visibleKeys,\n            String(i),\n            true\n          ));\n        } else {\n          output.push(\"\");\n        }\n      }\n      keys.forEach(function(key) {\n        if (!key.match(/^\\d+$/)) {\n          output.push(formatProperty(\n            ctx,\n            value,\n            recurseTimes,\n            visibleKeys,\n            key,\n            true\n          ));\n        }\n      });\n      return output;\n    }\n    function formatProperty(ctx, value, recurseTimes, visibleKeys, key, array) {\n      var name, str, desc;\n      desc = Object.getOwnPropertyDescriptor(value, key) || { value: value[key] };\n      if (desc.get) {\n        if (desc.set) {\n          str = ctx.stylize(\"[Getter/Setter]\", \"special\");\n        } else {\n          str = ctx.stylize(\"[Getter]\", \"special\");\n        }\n      } else {\n        if (desc.set) {\n          str = ctx.stylize(\"[Setter]\", \"special\");\n        }\n      }\n      if (!hasOwnProperty(visibleKeys, key)) {\n        name = \"[\" + key + \"]\";\n      }\n      if (!str) {\n        if (ctx.seen.indexOf(desc.value) < 0) {\n          if (isNull(recurseTimes)) {\n            str = formatValue(ctx, desc.value, null);\n          } else {\n            str = formatValue(ctx, desc.value, recurseTimes - 1);\n          }\n          if (str.indexOf(\"\\n\") > -1) {\n            if (array) {\n              str = str.split(\"\\n\").map(function(line) {\n                return \"  \" + line;\n              }).join(\"\\n\").slice(2);\n            } else {\n              str = \"\\n\" + str.split(\"\\n\").map(function(line) {\n                return \"   \" + line;\n              }).join(\"\\n\");\n            }\n          }\n        } else {\n          str = ctx.stylize(\"[Circular]\", \"special\");\n        }\n      }\n      if (isUndefined(name)) {\n        if (array && key.match(/^\\d+$/)) {\n          return str;\n        }\n        name = JSON.stringify(\"\" + key);\n        if (name.match(/^\"([a-zA-Z_][a-zA-Z_0-9]*)\"$/)) {\n          name = name.slice(1, -1);\n          name = ctx.stylize(name, \"name\");\n        } else {\n          name = name.replace(/'/g, \"\\\\'\").replace(/\\\\\"/g, '\"').replace(/(^\"|\"$)/g, \"'\");\n          name = ctx.stylize(name, \"string\");\n        }\n      }\n      return name + \": \" + str;\n    }\n    function reduceToSingleString(output, base, braces) {\n      var numLinesEst = 0;\n      var length = output.reduce(function(prev, cur) {\n        numLinesEst++;\n        if (cur.indexOf(\"\\n\") >= 0) numLinesEst++;\n        return prev + cur.replace(/\\u001b\\[\\d\\d?m/g, \"\").length + 1;\n      }, 0);\n      if (length > 60) {\n        return braces[0] + (base === \"\" ? \"\" : base + \"\\n \") + \" \" + output.join(\",\\n  \") + \" \" + braces[1];\n      }\n      return braces[0] + base + \" \" + output.join(\", \") + \" \" + braces[1];\n    }\n    exports2.types = require_types();\n    function isArray(ar) {\n      return Array.isArray(ar);\n    }\n    exports2.isArray = isArray;\n    function isBoolean(arg) {\n      return typeof arg === \"boolean\";\n    }\n    exports2.isBoolean = isBoolean;\n    function isNull(arg) {\n      return arg === null;\n    }\n    exports2.isNull = isNull;\n    function isNullOrUndefined(arg) {\n      return arg == null;\n    }\n    exports2.isNullOrUndefined = isNullOrUndefined;\n    function isNumber(arg) {\n      return typeof arg === \"number\";\n    }\n    exports2.isNumber = isNumber;\n    function isString(arg) {\n      return typeof arg === \"string\";\n    }\n    exports2.isString = isString;\n    function isSymbol(arg) {\n      return typeof arg === \"symbol\";\n    }\n    exports2.isSymbol = isSymbol;\n    function isUndefined(arg) {\n      return arg === void 0;\n    }\n    exports2.isUndefined = isUndefined;\n    function isRegExp(re) {\n      return isObject(re) && objectToString(re) === \"[object RegExp]\";\n    }\n    exports2.isRegExp = isRegExp;\n    exports2.types.isRegExp = isRegExp;\n    function isObject(arg) {\n      return typeof arg === \"object\" && arg !== null;\n    }\n    exports2.isObject = isObject;\n    function isDate(d) {\n      return isObject(d) && objectToString(d) === \"[object Date]\";\n    }\n    exports2.isDate = isDate;\n    exports2.types.isDate = isDate;\n    function isError(e) {\n      return isObject(e) && (objectToString(e) === \"[object Error]\" || e instanceof Error);\n    }\n    exports2.isError = isError;\n    exports2.types.isNativeError = isError;\n    function isFunction(arg) {\n      return typeof arg === \"function\";\n    }\n    exports2.isFunction = isFunction;\n    function isPrimitive(arg) {\n      return arg === null || typeof arg === \"boolean\" || typeof arg === \"number\" || typeof arg === \"string\" || typeof arg === \"symbol\" || // ES6 symbol\n      typeof arg === \"undefined\";\n    }\n    exports2.isPrimitive = isPrimitive;\n    exports2.isBuffer = require_isBufferBrowser();\n    function objectToString(o) {\n      return Object.prototype.toString.call(o);\n    }\n    function pad(n) {\n      return n < 10 ? \"0\" + n.toString(10) : n.toString(10);\n    }\n    var months = [\n      \"Jan\",\n      \"Feb\",\n      \"Mar\",\n      \"Apr\",\n      \"May\",\n      \"Jun\",\n      \"Jul\",\n      \"Aug\",\n      \"Sep\",\n      \"Oct\",\n      \"Nov\",\n      \"Dec\"\n    ];\n    function timestamp() {\n      var d = /* @__PURE__ */ new Date();\n      var time = [\n        pad(d.getHours()),\n        pad(d.getMinutes()),\n        pad(d.getSeconds())\n      ].join(\":\");\n      return [d.getDate(), months[d.getMonth()], time].join(\" \");\n    }\n    exports2.log = function() {\n      console.log(\"%s - %s\", timestamp(), exports2.format.apply(exports2, arguments));\n    };\n    exports2.inherits = require_inherits_browser();\n    exports2._extend = function(origin, add) {\n      if (!add || !isObject(add)) return origin;\n      var keys = Object.keys(add);\n      var i = keys.length;\n      while (i--) {\n        origin[keys[i]] = add[keys[i]];\n      }\n      return origin;\n    };\n    function hasOwnProperty(obj, prop) {\n      return Object.prototype.hasOwnProperty.call(obj, prop);\n    }\n    var kCustomPromisifiedSymbol = typeof Symbol !== \"undefined\" ? /* @__PURE__ */ Symbol(\"util.promisify.custom\") : void 0;\n    exports2.promisify = function promisify(original) {\n      if (typeof original !== \"function\")\n        throw new TypeError('The \"original\" argument must be of type Function');\n      if (kCustomPromisifiedSymbol && original[kCustomPromisifiedSymbol]) {\n        var fn = original[kCustomPromisifiedSymbol];\n        if (typeof fn !== \"function\") {\n          throw new TypeError('The \"util.promisify.custom\" argument must be of type Function');\n        }\n        Object.defineProperty(fn, kCustomPromisifiedSymbol, {\n          value: fn,\n          enumerable: false,\n          writable: false,\n          configurable: true\n        });\n        return fn;\n      }\n      function fn() {\n        var promiseResolve, promiseReject;\n        var promise = new Promise(function(resolve, reject) {\n          promiseResolve = resolve;\n          promiseReject = reject;\n        });\n        var args = [];\n        for (var i = 0; i < arguments.length; i++) {\n          args.push(arguments[i]);\n        }\n        args.push(function(err, value) {\n          if (err) {\n            promiseReject(err);\n          } else {\n            promiseResolve(value);\n          }\n        });\n        try {\n          original.apply(this, args);\n        } catch (err) {\n          promiseReject(err);\n        }\n        return promise;\n      }\n      Object.setPrototypeOf(fn, Object.getPrototypeOf(original));\n      if (kCustomPromisifiedSymbol) Object.defineProperty(fn, kCustomPromisifiedSymbol, {\n        value: fn,\n        enumerable: false,\n        writable: false,\n        configurable: true\n      });\n      return Object.defineProperties(\n        fn,\n        getOwnPropertyDescriptors(original)\n      );\n    };\n    exports2.promisify.custom = kCustomPromisifiedSymbol;\n    function callbackifyOnRejected(reason, cb) {\n      if (!reason) {\n        var newReason = new Error(\"Promise was rejected with a falsy value\");\n        newReason.reason = reason;\n        reason = newReason;\n      }\n      return cb(reason);\n    }\n    function callbackify(original) {\n      if (typeof original !== \"function\") {\n        throw new TypeError('The \"original\" argument must be of type Function');\n      }\n      function callbackified() {\n        var args = [];\n        for (var i = 0; i < arguments.length; i++) {\n          args.push(arguments[i]);\n        }\n        var maybeCb = args.pop();\n        if (typeof maybeCb !== \"function\") {\n          throw new TypeError(\"The last argument must be of type Function\");\n        }\n        var self = this;\n        var cb = function() {\n          return maybeCb.apply(self, arguments);\n        };\n        original.apply(this, args).then(\n          function(ret) {\n            process.nextTick(cb.bind(null, null, ret));\n          },\n          function(rej) {\n            process.nextTick(callbackifyOnRejected.bind(null, rej, cb));\n          }\n        );\n      }\n      Object.setPrototypeOf(callbackified, Object.getPrototypeOf(original));\n      Object.defineProperties(\n        callbackified,\n        getOwnPropertyDescriptors(original)\n      );\n      return callbackified;\n    }\n    exports2.callbackify = callbackify;\n  }\n});\n\n// <stdin>\nvar util = require_util();\nmodule.exports = util.default ?? util;\n\nfunction installBuiltinUtilFormatWithOptions(builtinUtilModule) {\n  if (!builtinUtilModule || typeof builtinUtilModule.formatWithOptions === \"function\") {\n    return builtinUtilModule;\n  }\n  builtinUtilModule.formatWithOptions = function formatWithOptions(inspectOptions, format, ...args) {\n    const inspectValue = (value) => {\n      if (typeof builtinUtilModule.inspect === \"function\") {\n        return builtinUtilModule.inspect(value, inspectOptions);\n      }\n      try {\n        return JSON.stringify(value);\n      } catch {\n        return String(value);\n      }\n    };\n    const formatValue = (value) => typeof value === \"string\" ? value : inspectValue(value);\n    if (typeof format !== \"string\") {\n      return [format, ...args].map(formatValue).join(\" \");\n    }\n    let index = 0;\n    const formatted = format.replace(/%[sdifjoO%]/g, (token) => {\n      if (token === \"%%\") {\n        return \"%\";\n      }\n      if (index >= args.length) {\n        return token;\n      }\n      const value = args[index++];\n      switch (token) {\n        case \"%s\":\n          return String(value);\n        case \"%d\":\n          return Number(value).toString();\n        case \"%i\":\n          return Number.parseInt(value, 10).toString();\n        case \"%f\":\n          return Number.parseFloat(value).toString();\n        case \"%j\":\n          try {\n            return JSON.stringify(value);\n          } catch {\n            return \"[Circular]\";\n          }\n        case \"%o\":\n        case \"%O\":\n          return inspectValue(value);\n        default:\n          return token;\n      }\n    });\n    if (index >= args.length) {\n      return formatted;\n    }\n    return [formatted, ...args.slice(index).map(formatValue)].join(\" \");\n  };\n  return builtinUtilModule;\n}\nmodule.exports = installBuiltinUtilFormatWithOptions(module.exports);\nif (module.exports && module.exports.default == null) module.exports.default = module.exports;\n"
-;
diff --git a/packages/browser/src/index.ts b/packages/browser/src/index.ts
index 17c10d665..cfca6ae5c 100644
--- a/packages/browser/src/index.ts
+++ b/packages/browser/src/index.ts
@@ -1,77 +1 @@
-export type {
-	BrowserDriverOptions,
-	BrowserRuntimeSystemOptions,
-} from "./driver.js";
-export {
-	createBrowserDriver,
-	createBrowserNetworkAdapter,
-	createOpfsFileSystem,
-} from "./driver.js";
-export { InMemoryFileSystem } from "./os-filesystem.js";
-export type {
-	ExecOptions,
-	ExecResult,
-	NetworkAdapter,
-	NodeRuntimeDriver,
-	PtyOpenResult,
-	StdioChannel,
-	StdioEvent,
-	TimingMitigation,
-} from "./runtime.js";
-export {
-	allowAll,
-	allowAllChildProcess,
-	allowAllEnv,
-	allowAllFs,
-	allowAllNetwork,
-	createInMemoryFileSystem,
-} from "./runtime.js";
-export type { WasiCommandBootstrapOptions } from "./wasi-command-bootstrap.js";
-export { createWasiCommandBootstrapScript } from "./wasi-command-bootstrap.js";
-export type {
-	BrowserRuntimeDriverFactoryOptions,
-	ConvergedSidecarFactoryOptions,
-	ConvergedSidecarHandle,
-} from "./runtime-driver.js";
-export { createBrowserRuntimeDriverFactory } from "./runtime-driver.js";
-export type { DefaultConvergedSidecarOptions } from "./default-sidecar.js";
-export { createDefaultConvergedSidecar } from "./default-sidecar.js";
-export type { WorkerHandle } from "./worker-adapter.js";
-export { BrowserWorkerAdapter } from "./worker-adapter.js";
-
-// Async-agent executor primitives (AGENTOS-WEB-ASYNC-AGENTS.md): the SAB ring,
-// the kernel-worker reactor, and the execution-worker endpoint. Generic,
-// model-agnostic; the Agent OS ACP layer composes them.
-export {
-	SabRing,
-	SabRingProtocolError,
-	sabRingByteLength,
-	sabRingMaxFrameBytes,
-} from "./sab-ring.js";
-export type { SabRingLayout } from "./sab-ring.js";
-export {
-	KernelReactor,
-	REACTOR_CONTROL_BYTES,
-	FRAME_SYSCALL,
-	FRAME_STDOUT,
-	FRAME_STDERR,
-	FRAME_EXIT,
-	FRAME_RESULT,
-	FRAME_POISON,
-	DEFERRED,
-	encodeSyscallCompletion,
-} from "./sab-reactor.js";
-export type { OutputFrame, OutputKind, ServiceSyscall } from "./sab-reactor.js";
-export {
-	SabExecutionEndpoint,
-	ExecutionKilledError,
-} from "./sab-execution-endpoint.js";
-
-// The converged guest-syscall handler, reusable to service an agent execution's
-// syscalls over the in-worker pushFrame (the kernel reactor's serviceSyscall).
-export {
-	ConvergedSyncBridgeHandler,
-	PushFrameSidecarTransport,
-} from "./converged-sync-bridge-handler.js";
-export type { ConvergedSidecarRequestTransport } from "./converged-sync-bridge-handler.js";
-export type { ConvergedSyncResponse } from "./converged-fs-bridge.js";
+export * from "@rivet-dev/agentos-runtime-browser";
diff --git a/packages/browser/src/kernel-backed-filesystem.ts b/packages/browser/src/kernel-backed-filesystem.ts
deleted file mode 100644
index 2b3ef3d28..000000000
--- a/packages/browser/src/kernel-backed-filesystem.ts
+++ /dev/null
@@ -1,252 +0,0 @@
-// A VirtualFileSystem backed by the wasm kernel over the wire.
-//
-// Lets the existing naive-Node module resolver (`resolveModule` in runtime.ts)
-// run unchanged in the converged path by giving it a filesystem whose every
-// operation is a `guest_filesystem_call` to the kernel, instead of the legacy
-// in-process TS filesystem. Resolution therefore reads exactly the kernel's
-// view (mounts, symlinks, exports/conditions), keeping it faithful on both
-// backends (the CLAUDE.md npm-compat rule).
-//
-// Methods are async to satisfy `VirtualFileSystem`, but the underlying transport
-// is synchronous (`pushFrame`); the promises resolve on the microtask queue.
-
-import { decodeBase64, encodeBase64 } from "./converged-base64.js";
-import {
-	wireStatToVirtualStat,
-	type GuestFilesystemResult,
-} from "./converged-fs-bridge.js";
-import type { ConvergedSidecarRequestTransport } from "./converged-sync-bridge-handler.js";
-import type { LiveRequestPayload } from "@secure-exec/core/request-payloads";
-import type {
-	VirtualDirEntry,
-	VirtualFileSystem,
-	VirtualStat,
-} from "./runtime.js";
-
-export class KernelBackedFilesystem implements VirtualFileSystem {
-	private readonly transport: ConvergedSidecarRequestTransport;
-
-	constructor(transport: ConvergedSidecarRequestTransport) {
-		this.transport = transport;
-	}
-
-	private call(
-		payload: Extract<LiveRequestPayload, { type: "guest_filesystem_call" }>,
-	): GuestFilesystemResult {
-		const response = this.transport.sendRequest(payload);
-		if (response.type !== "guest_filesystem_result") {
-			throw new Error(
-				`expected guest_filesystem_result, got ${response.type}`,
-			);
-		}
-		return response;
-	}
-
-	async readFile(path: string): Promise<Uint8Array> {
-		const result = this.call({
-			type: "guest_filesystem_call",
-			operation: "read_file",
-			path,
-		});
-		const content = result.content ?? "";
-		return result.encoding === "base64"
-			? decodeBase64(content)
-			: new TextEncoder().encode(content);
-	}
-
-	async readTextFile(path: string): Promise<string> {
-		const result = this.call({
-			type: "guest_filesystem_call",
-			operation: "read_file",
-			path,
-		});
-		const content = result.content ?? "";
-		return result.encoding === "base64"
-			? new TextDecoder().decode(decodeBase64(content))
-			: content;
-	}
-
-	async readDir(path: string): Promise<string[]> {
-		const result = this.call({
-			type: "guest_filesystem_call",
-			operation: "read_dir",
-			path,
-		});
-		return (result.entries ?? []).map((entry) => entry.name);
-	}
-
-	async readDirWithTypes(path: string): Promise<VirtualDirEntry[]> {
-		// The wire `read_dir` carries each child's type, so module resolution
-		// gets typed entries in one round-trip (no per-entry lstat).
-		const result = this.call({
-			type: "guest_filesystem_call",
-			operation: "read_dir",
-			path,
-		});
-		return (result.entries ?? []).map((entry) => ({
-			name: entry.name,
-			isDirectory: entry.isDirectory,
-			isSymbolicLink: entry.isSymbolicLink,
-		}));
-	}
-
-	async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-		const payload =
-			typeof content === "string"
-				? { content, encoding: "utf8" as const }
-				: { content: encodeBase64(content), encoding: "base64" as const };
-		this.call({
-			type: "guest_filesystem_call",
-			operation: "write_file",
-			path,
-			content: payload.content,
-			encoding: payload.encoding,
-		});
-	}
-
-	async createDir(path: string): Promise<void> {
-		this.call({ type: "guest_filesystem_call", operation: "create_dir", path });
-	}
-
-	async mkdir(path: string, options?: { recursive?: boolean }): Promise<void> {
-		this.call({
-			type: "guest_filesystem_call",
-			operation: "mkdir",
-			path,
-			recursive: options?.recursive ?? false,
-		});
-	}
-
-	async exists(path: string): Promise<boolean> {
-		return this.call({ type: "guest_filesystem_call", operation: "exists", path })
-			.exists ?? false;
-	}
-
-	async stat(path: string): Promise<VirtualStat> {
-		return this.requireStat("stat", path);
-	}
-
-	async lstat(path: string): Promise<VirtualStat> {
-		return this.requireStat("lstat", path);
-	}
-
-	private requireStat(
-		operation: "stat" | "lstat",
-		path: string,
-	): VirtualStat {
-		const result = this.call({
-			type: "guest_filesystem_call",
-			operation,
-			path,
-		});
-		if (!result.stat) {
-			throw new Error(`${operation} for ${path} returned no stat`);
-		}
-		return wireStatToVirtualStat(result.stat);
-	}
-
-	async removeFile(path: string): Promise<void> {
-		this.call({ type: "guest_filesystem_call", operation: "remove_file", path });
-	}
-
-	async removeDir(path: string): Promise<void> {
-		this.call({ type: "guest_filesystem_call", operation: "remove_dir", path });
-	}
-
-	async rename(oldPath: string, newPath: string): Promise<void> {
-		this.call({
-			type: "guest_filesystem_call",
-			operation: "rename",
-			path: oldPath,
-			destination_path: newPath,
-		});
-	}
-
-	async realpath(path: string): Promise<string> {
-		return (
-			this.call({ type: "guest_filesystem_call", operation: "realpath", path })
-				.target ?? path
-		);
-	}
-
-	async symlink(target: string, linkPath: string): Promise<void> {
-		this.call({
-			type: "guest_filesystem_call",
-			operation: "symlink",
-			path: linkPath,
-			target,
-		});
-	}
-
-	async readlink(path: string): Promise<string> {
-		return (
-			this.call({
-				type: "guest_filesystem_call",
-				operation: "read_link",
-				path,
-			}).target ?? ""
-		);
-	}
-
-	async link(oldPath: string, newPath: string): Promise<void> {
-		this.call({
-			type: "guest_filesystem_call",
-			operation: "link",
-			path: oldPath,
-			destination_path: newPath,
-		});
-	}
-
-	async chmod(path: string, mode: number): Promise<void> {
-		this.call({ type: "guest_filesystem_call", operation: "chmod", path, mode });
-	}
-
-	async chown(path: string, uid: number, gid: number): Promise<void> {
-		this.call({
-			type: "guest_filesystem_call",
-			operation: "chown",
-			path,
-			uid,
-			gid,
-		});
-	}
-
-	async utimes(path: string, atime: number, mtime: number): Promise<void> {
-		this.call({
-			type: "guest_filesystem_call",
-			operation: "utimes",
-			path,
-			atime_ms: atime,
-			mtime_ms: mtime,
-		});
-	}
-
-	async truncate(path: string, length: number): Promise<void> {
-		this.call({
-			type: "guest_filesystem_call",
-			operation: "truncate",
-			path,
-			len: length,
-		});
-	}
-
-	async pread(path: string, offset: number, length: number): Promise<Uint8Array> {
-		const result = this.call({
-			type: "guest_filesystem_call",
-			operation: "pread",
-			path,
-			offset,
-			len: length,
-		});
-		const content = result.content ?? "";
-		return result.encoding === "base64"
-			? decodeBase64(content)
-			: new TextEncoder().encode(content);
-	}
-
-	async pwrite(): Promise<void> {
-		// The kernel guest-filesystem wire surface has no positional write; the
-		// module resolver (the converged consumer) never calls it.
-		throw new Error("ENOSYS: pwrite is not supported by the kernel-backed filesystem");
-	}
-}
diff --git a/packages/browser/src/os-filesystem.ts b/packages/browser/src/os-filesystem.ts
deleted file mode 100644
index 877dac2ce..000000000
--- a/packages/browser/src/os-filesystem.ts
+++ /dev/null
@@ -1,505 +0,0 @@
-/**
- * In-memory filesystem for browser environments.
- *
- * In-memory filesystem with POSIX extensions (symlinks, hard links, chmod,
- * chown, utimes, truncate) needed by the kernel VFS interface.
- */
-
-import type {
-	VirtualDirEntry,
-	VirtualFileSystem,
-	VirtualStat,
-} from "./runtime.js";
-
-const S_IFREG = 0o100000;
-const S_IFDIR = 0o040000;
-const S_IFLNK = 0o120000;
-
-const MAX_SYMLINK_DEPTH = 40;
-
-function normalizePath(path: string): string {
-	if (!path) return "/";
-	let normalized = path.startsWith("/") ? path : `/${path}`;
-	normalized = normalized.replace(/\/+/g, "/");
-	if (normalized.length > 1 && normalized.endsWith("/")) {
-		normalized = normalized.slice(0, -1);
-	}
-	// Resolve . and ..
-	const parts = normalized.split("/");
-	const resolved: string[] = [];
-	for (const part of parts) {
-		if (part === "." || part === "") continue;
-		if (part === "..") {
-			resolved.pop();
-		} else {
-			resolved.push(part);
-		}
-	}
-	return `/${resolved.join("/")}` || "/";
-}
-
-function dirname(path: string): string {
-	const parts = normalizePath(path).split("/").filter(Boolean);
-	if (parts.length <= 1) return "/";
-	return `/${parts.slice(0, -1).join("/")}`;
-}
-
-interface FileEntry {
-	type: "file";
-	data: Uint8Array;
-	mode: number;
-	uid: number;
-	gid: number;
-	nlink: number;
-	ino: number;
-	atimeMs: number;
-	mtimeMs: number;
-	ctimeMs: number;
-	birthtimeMs: number;
-}
-
-interface DirEntry {
-	type: "dir";
-	mode: number;
-	uid: number;
-	gid: number;
-	nlink: number;
-	ino: number;
-	atimeMs: number;
-	mtimeMs: number;
-	ctimeMs: number;
-	birthtimeMs: number;
-}
-
-interface SymlinkEntry {
-	type: "symlink";
-	target: string;
-	mode: number;
-	uid: number;
-	gid: number;
-	nlink: number;
-	ino: number;
-	atimeMs: number;
-	mtimeMs: number;
-	ctimeMs: number;
-	birthtimeMs: number;
-}
-
-type Entry = FileEntry | DirEntry | SymlinkEntry;
-
-let nextIno = 1;
-
-export class InMemoryFileSystem implements VirtualFileSystem {
-	private entries: Map<string, Entry> = new Map();
-
-	constructor() {
-		// Root directory
-		this.entries.set("/", this.newDir());
-	}
-
-	// --- Core operations ---
-
-	async readFile(path: string): Promise<Uint8Array> {
-		const entry = this.resolveEntry(path);
-		if (!entry || entry.type !== "file") {
-			throw this.enoent("open", path);
-		}
-		entry.atimeMs = Date.now();
-		return entry.data;
-	}
-
-	async readTextFile(path: string): Promise<string> {
-		const data = await this.readFile(path);
-		return new TextDecoder().decode(data);
-	}
-
-	async readDir(path: string): Promise<string[]> {
-		return (await this.readDirWithTypes(path)).map((e) => e.name);
-	}
-
-	async readDirWithTypes(path: string): Promise<VirtualDirEntry[]> {
-		const resolved = this.resolvePath(path);
-		const dir = this.entries.get(resolved);
-		if (!dir || dir.type !== "dir") {
-			throw this.enoent("scandir", path);
-		}
-
-		const prefix = resolved === "/" ? "/" : `${resolved}/`;
-		const names = new Map<string, VirtualDirEntry>();
-
-		for (const [entryPath, entry] of this.entries) {
-			if (entryPath.startsWith(prefix)) {
-				const rest = entryPath.slice(prefix.length);
-				if (rest && !rest.includes("/")) {
-					names.set(rest, {
-						name: rest,
-						isDirectory: entry.type === "dir",
-						isSymbolicLink: entry.type === "symlink",
-					});
-				}
-			}
-		}
-
-		return Array.from(names.values());
-	}
-
-	async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-		const normalized = normalizePath(path);
-		// Ensure parent exists
-		await this.mkdir(dirname(normalized), { recursive: true });
-
-		const data =
-			typeof content === "string" ? new TextEncoder().encode(content) : content;
-
-		const existing = this.entries.get(normalized);
-		if (existing && existing.type === "file") {
-			existing.data = data;
-			existing.mtimeMs = Date.now();
-			existing.ctimeMs = Date.now();
-			return;
-		}
-
-		const now = Date.now();
-		this.entries.set(normalized, {
-			type: "file",
-			data,
-			mode: S_IFREG | 0o644,
-			uid: 1000,
-			gid: 1000,
-			nlink: 1,
-			ino: nextIno++,
-			atimeMs: now,
-			mtimeMs: now,
-			ctimeMs: now,
-			birthtimeMs: now,
-		});
-	}
-
-	async createDir(path: string): Promise<void> {
-		const normalized = normalizePath(path);
-		const parent = dirname(normalized);
-		if (!this.entries.has(parent)) {
-			throw this.enoent("mkdir", path);
-		}
-		if (!this.entries.has(normalized)) {
-			this.entries.set(normalized, this.newDir());
-		}
-	}
-
-	async mkdir(path: string, options?: { recursive?: boolean }): Promise<void> {
-		const normalized = normalizePath(path);
-		if (options?.recursive !== false) {
-			// Recursive: create all missing parents
-			const parts = normalized.split("/").filter(Boolean);
-			let current = "";
-			for (const part of parts) {
-				current += `/${part}`;
-				if (!this.entries.has(current)) {
-					this.entries.set(current, this.newDir());
-				}
-			}
-		} else {
-			await this.createDir(path);
-		}
-	}
-
-	async exists(path: string): Promise<boolean> {
-		try {
-			const resolved = this.resolvePath(path);
-			return this.entries.has(resolved);
-		} catch {
-			return false;
-		}
-	}
-
-	async stat(path: string): Promise<VirtualStat> {
-		const entry = this.resolveEntry(path);
-		if (!entry) throw this.enoent("stat", path);
-		return this.toStat(entry);
-	}
-
-	async removeFile(path: string): Promise<void> {
-		const resolved = this.resolvePath(path);
-		const entry = this.entries.get(resolved);
-		if (!entry || entry.type === "dir") {
-			throw this.enoent("unlink", path);
-		}
-		this.entries.delete(resolved);
-	}
-
-	async removeDir(path: string): Promise<void> {
-		const resolved = this.resolvePath(path);
-		if (resolved === "/") {
-			throw new Error("EPERM: operation not permitted, rmdir '/'");
-		}
-		const entry = this.entries.get(resolved);
-		if (!entry || entry.type !== "dir") {
-			throw this.enoent("rmdir", path);
-		}
-
-		// Check if empty
-		const prefix = `${resolved}/`;
-		for (const key of this.entries.keys()) {
-			if (key.startsWith(prefix)) {
-				throw new Error(`ENOTEMPTY: directory not empty, rmdir '${path}'`);
-			}
-		}
-		this.entries.delete(resolved);
-	}
-
-	async realpath(path: string): Promise<string> {
-		return this.resolvePath(path);
-	}
-
-	async rename(oldPath: string, newPath: string): Promise<void> {
-		const oldResolved = this.resolvePath(oldPath);
-		const newNorm = normalizePath(newPath);
-		const entry = this.entries.get(oldResolved);
-		if (!entry) throw this.enoent("rename", oldPath);
-
-		// Ensure parent of target exists
-		if (!this.entries.has(dirname(newNorm))) {
-			throw this.enoent("rename", newPath);
-		}
-
-		if (entry.type !== "dir") {
-			this.entries.set(newNorm, entry);
-			this.entries.delete(oldResolved);
-			return;
-		}
-
-		// Move directory and all children
-		const prefix = `${oldResolved}/`;
-		const toMove: [string, Entry][] = [];
-		for (const [key, val] of this.entries) {
-			if (key === oldResolved || key.startsWith(prefix)) {
-				toMove.push([key, val]);
-			}
-		}
-		for (const [key] of toMove) {
-			this.entries.delete(key);
-		}
-		for (const [key, val] of toMove) {
-			const newKey =
-				key === oldResolved ? newNorm : newNorm + key.slice(oldResolved.length);
-			this.entries.set(newKey, val);
-		}
-	}
-
-	// --- Symlinks ---
-
-	async symlink(target: string, linkPath: string): Promise<void> {
-		const normalized = normalizePath(linkPath);
-		if (this.entries.has(normalized)) {
-			throw new Error(`EEXIST: file already exists, symlink '${linkPath}'`);
-		}
-		const now = Date.now();
-		this.entries.set(normalized, {
-			type: "symlink",
-			target,
-			mode: S_IFLNK | 0o777,
-			uid: 1000,
-			gid: 1000,
-			nlink: 1,
-			ino: nextIno++,
-			atimeMs: now,
-			mtimeMs: now,
-			ctimeMs: now,
-			birthtimeMs: now,
-		});
-	}
-
-	async readlink(path: string): Promise<string> {
-		const normalized = normalizePath(path);
-		const entry = this.entries.get(normalized);
-		if (!entry || entry.type !== "symlink") {
-			throw this.enoent("readlink", path);
-		}
-		return entry.target;
-	}
-
-	async lstat(path: string): Promise<VirtualStat> {
-		const normalized = normalizePath(path);
-		const entry = this.entries.get(normalized);
-		if (!entry) throw this.enoent("lstat", path);
-		return this.toStat(entry);
-	}
-
-	// --- Links ---
-
-	async link(oldPath: string, newPath: string): Promise<void> {
-		const entry = this.resolveEntry(oldPath);
-		if (!entry || entry.type !== "file") {
-			throw this.enoent("link", oldPath);
-		}
-		const newNorm = normalizePath(newPath);
-		if (this.entries.has(newNorm)) {
-			throw new Error(`EEXIST: file already exists, link '${newPath}'`);
-		}
-		entry.nlink++;
-		this.entries.set(newNorm, entry);
-	}
-
-	// --- Permissions & Metadata ---
-
-	async chmod(path: string, mode: number): Promise<void> {
-		const entry = this.resolveEntry(path);
-		if (!entry) throw this.enoent("chmod", path);
-		const callerTypeBits = mode & 0o170000;
-		if (callerTypeBits !== 0) {
-			entry.mode = mode;
-		} else {
-			entry.mode = (entry.mode & 0o170000) | (mode & 0o7777);
-		}
-		entry.ctimeMs = Date.now();
-	}
-
-	async chown(path: string, uid: number, gid: number): Promise<void> {
-		const entry = this.resolveEntry(path);
-		if (!entry) throw this.enoent("chown", path);
-		entry.uid = uid;
-		entry.gid = gid;
-		entry.ctimeMs = Date.now();
-	}
-
-	async utimes(path: string, atime: number, mtime: number): Promise<void> {
-		const entry = this.resolveEntry(path);
-		if (!entry) throw this.enoent("utimes", path);
-		entry.atimeMs = atime;
-		entry.mtimeMs = mtime;
-		entry.ctimeMs = Date.now();
-	}
-
-	async truncate(path: string, length: number): Promise<void> {
-		const entry = this.resolveEntry(path);
-		if (!entry || entry.type !== "file") {
-			throw this.enoent("truncate", path);
-		}
-		if (length < entry.data.length) {
-			entry.data = entry.data.slice(0, length);
-		} else if (length > entry.data.length) {
-			const newData = new Uint8Array(length);
-			newData.set(entry.data);
-			entry.data = newData;
-		}
-		entry.mtimeMs = Date.now();
-		entry.ctimeMs = Date.now();
-	}
-
-	async pread(
-		path: string,
-		offset: number,
-		length: number,
-	): Promise<Uint8Array> {
-		const entry = this.resolveEntry(path);
-		if (!entry || entry.type !== "file") {
-			throw this.enoent("open", path);
-		}
-		entry.atimeMs = Date.now();
-		if (offset >= entry.data.length) return new Uint8Array(0);
-		return entry.data.slice(
-			offset,
-			Math.min(offset + length, entry.data.length),
-		);
-	}
-
-	async pwrite(path: string, offset: number, data: Uint8Array): Promise<void> {
-		const entry = this.resolveEntry(path);
-		if (!entry || entry.type !== "file") {
-			throw this.enoent("open", path);
-		}
-		const endPos = offset + data.length;
-		const newContent = new Uint8Array(Math.max(entry.data.length, endPos));
-		newContent.set(entry.data);
-		newContent.set(data, offset);
-		entry.data = newContent;
-		const now = Date.now();
-		entry.mtimeMs = now;
-		entry.ctimeMs = now;
-	}
-
-	// --- Helpers ---
-
-	/**
-	 * Resolve symlinks to get the final path. Returns the normalized path
-	 * after following all symlinks.
-	 */
-	private resolvePath(path: string, depth = 0): string {
-		if (depth > MAX_SYMLINK_DEPTH) {
-			throw new Error(`ELOOP: too many levels of symbolic links, '${path}'`);
-		}
-		const normalized = normalizePath(path);
-		if (normalized === "/") {
-			return "/";
-		}
-
-		const parts = normalized.split("/").filter(Boolean);
-		let current = "";
-		for (let index = 0; index < parts.length; index++) {
-			current = normalizePath(`${current}/${parts[index]}`);
-			const entry = this.entries.get(current);
-			if (entry?.type === "symlink") {
-				const target = entry.target.startsWith("/")
-					? entry.target
-					: `${dirname(current)}/${entry.target}`;
-				const rest = parts.slice(index + 1).join("/");
-				return this.resolvePath(rest ? `${target}/${rest}` : target, depth + 1);
-			}
-		}
-
-		return normalized;
-	}
-
-	/** Resolve a path and return the entry (following symlinks). */
-	private resolveEntry(path: string): Entry | undefined {
-		const resolved = this.resolvePath(path);
-		return this.entries.get(resolved);
-	}
-
-	private newDir(): DirEntry {
-		const now = Date.now();
-		return {
-			type: "dir",
-			mode: S_IFDIR | 0o755,
-			uid: 1000,
-			gid: 1000,
-			nlink: 2,
-			ino: nextIno++,
-			atimeMs: now,
-			mtimeMs: now,
-			ctimeMs: now,
-			birthtimeMs: now,
-		};
-	}
-
-	private toStat(entry: Entry): VirtualStat {
-		const size = entry.type === "file" ? entry.data.length : 4096;
-		return {
-			mode: entry.mode,
-			size,
-			blocks: size === 0 ? 0 : Math.ceil(size / 512),
-			dev: 1,
-			rdev: 0,
-			isDirectory: entry.type === "dir",
-			isSymbolicLink: entry.type === "symlink",
-			atimeMs: entry.atimeMs,
-			mtimeMs: entry.mtimeMs,
-			ctimeMs: entry.ctimeMs,
-			birthtimeMs: entry.birthtimeMs,
-			ino: entry.ino,
-			nlink: entry.nlink,
-			uid: entry.uid,
-			gid: entry.gid,
-		};
-	}
-
-	private enoent(op: string, path: string): Error {
-		const err = new Error(`ENOENT: no such file or directory, ${op} '${path}'`);
-		(err as NodeJS.ErrnoException).code = "ENOENT";
-		return err;
-	}
-}
-
-export function createInMemoryFileSystem(): InMemoryFileSystem {
-	return new InMemoryFileSystem();
-}
diff --git a/packages/browser/src/root-filesystem-from-vfs.ts b/packages/browser/src/root-filesystem-from-vfs.ts
deleted file mode 100644
index 263c57f15..000000000
--- a/packages/browser/src/root-filesystem-from-vfs.ts
+++ /dev/null
@@ -1,131 +0,0 @@
-// Migration shim: snapshot a legacy caller-provided VirtualFileSystem into a
-// kernel `RootFilesystemConfig` (bootstrap entries) so the converged driver can
-// seed a kernel-owned VM from filesystem content that was previously handed in
-// as a live TS VFS object. This bridges the legacy `options.system.filesystem`
-// model to the converged kernel-owns-fs model without rewriting every caller at
-// once; new callers should provide a `CreateVmConfig.rootFilesystem` directly.
-
-import type { RootFilesystemConfig } from "@secure-exec/core/vm-config";
-import { encodeBase64 } from "./converged-base64.js";
-import type { VirtualFileSystem } from "./runtime.js";
-
-type RootFilesystemEntry = RootFilesystemConfig["bootstrapEntries"][number];
-
-// Kernel-owned pseudo-filesystems must not be materialized as bootstrap entries.
-const SKIP_ROOTS = ["/dev", "/proc", "/sys"];
-
-export interface RootFilesystemSnapshotOptions {
-	root?: string;
-	mode?: RootFilesystemConfig["mode"];
-	disableDefaultBaseLayer?: boolean;
-}
-
-/** Walk `vfs` and produce kernel bootstrap entries for its contents. */
-export async function collectRootFilesystemEntries(
-	vfs: VirtualFileSystem,
-	root = "/",
-): Promise<RootFilesystemEntry[]> {
-	const entries: RootFilesystemEntry[] = [];
-	await walk(vfs, normalizeDir(root), entries);
-	return entries;
-}
-
-/** A full `RootFilesystemConfig` seeded from `vfs`. */
-export async function rootFilesystemConfigFromVfs(
-	vfs: VirtualFileSystem,
-	options: RootFilesystemSnapshotOptions = {},
-): Promise<RootFilesystemConfig> {
-	return {
-		mode: options.mode ?? "ephemeral",
-		disableDefaultBaseLayer: options.disableDefaultBaseLayer ?? false,
-		lowers: [],
-		bootstrapEntries: await collectRootFilesystemEntries(
-			vfs,
-			options.root ?? "/",
-		),
-	};
-}
-
-async function walk(
-	vfs: VirtualFileSystem,
-	dir: string,
-	entries: RootFilesystemEntry[],
-): Promise<void> {
-	let children: Awaited<ReturnType<VirtualFileSystem["readDirWithTypes"]>>;
-	try {
-		children = await vfs.readDirWithTypes(dir);
-	} catch {
-		return;
-	}
-	for (const child of children) {
-		if (child.name === "." || child.name === "..") {
-			continue;
-		}
-		const path = joinPath(dir, child.name);
-		if (SKIP_ROOTS.includes(path)) {
-			continue;
-		}
-		if (child.isSymbolicLink) {
-			const target = await vfs.readlink(path).catch(() => null);
-			if (target !== null) {
-				entries.push({ path, kind: "symlink", target, executable: false });
-			}
-			continue;
-		}
-		if (child.isDirectory) {
-			entries.push({ path, kind: "directory", executable: true });
-			await walk(vfs, path, entries);
-			continue;
-		}
-		entries.push(await fileEntry(vfs, path));
-	}
-}
-
-async function fileEntry(
-	vfs: VirtualFileSystem,
-	path: string,
-): Promise<RootFilesystemEntry> {
-	const bytes = await vfs.readFile(path);
-	const executable = await isExecutable(vfs, path);
-	const text = tryDecodeUtf8(bytes);
-	if (text !== null) {
-		return { path, kind: "file", content: text, encoding: "utf8", executable };
-	}
-	return {
-		path,
-		kind: "file",
-		content: encodeBase64(bytes),
-		encoding: "base64",
-		executable,
-	};
-}
-
-async function isExecutable(
-	vfs: VirtualFileSystem,
-	path: string,
-): Promise<boolean> {
-	try {
-		return ((await vfs.stat(path)).mode & 0o111) !== 0;
-	} catch {
-		return false;
-	}
-}
-
-function tryDecodeUtf8(bytes: Uint8Array): string | null {
-	try {
-		return new TextDecoder("utf-8", { fatal: true }).decode(bytes);
-	} catch {
-		return null;
-	}
-}
-
-function normalizeDir(dir: string): string {
-	if (dir.length > 1 && dir.endsWith("/")) {
-		return dir.slice(0, -1);
-	}
-	return dir;
-}
-
-function joinPath(parent: string, child: string): string {
-	return parent === "/" ? `/${child}` : `${parent}/${child}`;
-}
diff --git a/packages/browser/src/runtime-driver.ts b/packages/browser/src/runtime-driver.ts
deleted file mode 100644
index a4ba83785..000000000
--- a/packages/browser/src/runtime-driver.ts
+++ /dev/null
@@ -1,1114 +0,0 @@
-import type { ProtocolFramePayloadCodec } from "@secure-exec/core/protocol-frames";
-import type { CreateVmConfig } from "@secure-exec/core/vm-config";
-import {
-	type BrowserChildProcessPollEvent,
-	decodeChildProcessInput,
-	encodeChildProcessBytes,
-	parseChildProcessSpawnRequest,
-} from "./child-process-bridge.js";
-import type { ConvergedServicer } from "./converged-driver-setup.js";
-import { getBrowserSystemDriverOptions } from "./driver.js";
-import { base64ToBytes, toUint8Array } from "./encoding.js";
-import type {
-	CommandExecutor,
-	ExecOptions,
-	ExecResult,
-	NetworkAdapter,
-	NodeRuntimeDriver,
-	NodeRuntimeDriverFactory,
-	Permissions,
-	PtyOpenResult,
-	RunResult,
-	RuntimeDriverOptions,
-	StdioHook,
-	TimingMitigation,
-} from "./runtime.js";
-import {
-	createNetworkStub,
-	filterEnv,
-	wrapCommandExecutor,
-} from "./runtime.js";
-import {
-	applyProcessSignalStateUpdate,
-	type BrowserSignalRegistration,
-	parseProcessSignalStateArgs,
-} from "./signals.js";
-import {
-	assertBrowserSyncBridgeSupport,
-	type BrowserSyncBridgePayload,
-	type BrowserWorkerSyncRequestMessage,
-	createBrowserSyncBridgePayload,
-	isBrowserWorkerSyncOperation,
-	SYNC_BRIDGE_KIND_BINARY,
-	SYNC_BRIDGE_KIND_JSON,
-	SYNC_BRIDGE_KIND_NONE,
-	SYNC_BRIDGE_KIND_TEXT,
-	SYNC_BRIDGE_PAYLOAD_LIMIT_ERROR_CODE,
-	SYNC_BRIDGE_SIGNAL_KIND_INDEX,
-	SYNC_BRIDGE_SIGNAL_LENGTH_INDEX,
-	SYNC_BRIDGE_SIGNAL_STATE_INDEX,
-	SYNC_BRIDGE_SIGNAL_STATE_READY,
-	SYNC_BRIDGE_SIGNAL_STATUS_INDEX,
-	SYNC_BRIDGE_STATUS_ERROR,
-	SYNC_BRIDGE_STATUS_OK,
-	toBrowserSyncBridgeError,
-} from "./sync-bridge.js";
-import type {
-	BrowserWorkerExecOptions,
-	BrowserWorkerExtensionResponse,
-	BrowserWorkerInitPayload,
-	BrowserWorkerOutboundMessage,
-	BrowserWorkerRequestMessage,
-	BrowserWorkerResponseMessage,
-	BrowserWorkerPtyOpenedMessage,
-	BrowserWorkerStdioMessage,
-} from "./worker-protocol.js";
-
-export interface BrowserRuntimeDriverFactoryOptions {
-	workerUrl?: URL | string;
-	// When provided, guest sync-bridge syscalls are serviced by the converged
-	// wasm kernel (fs/net/dns/module) instead of the legacy in-process TS kernel,
-	// with the remaining families falling back to legacy. The setup module is
-	// imported dynamically so the unbundled legacy load never pulls in its
-	// bundled-only `@secure-exec/core` imports.
-	convergedSidecar?: ConvergedSidecarFactoryOptions;
-}
-
-export interface ConvergedSidecarHandle {
-	pushFrame(frame: Uint8Array): Uint8Array;
-	// Sets the execution id the sidecar's execution host bridge echoes for the
-	// next `execute`; omitted when the sidecar has no execution host bridge
-	// (then guest net/dgram are unavailable but fs/module still converge).
-	setNextExecutionId?(executionId: string): void;
-}
-
-export interface ConvergedSidecarFactoryOptions {
-	loadSidecar(): Promise<ConvergedSidecarHandle>;
-	config: CreateVmConfig;
-	codec?: ProtocolFramePayloadCodec;
-	onFsReadDenied?: () => void;
-}
-
-type PendingRequest = {
-	resolve(value: unknown): void;
-	reject(reason: unknown): void;
-	hook?: StdioHook;
-	onPtyOpen?: (pty: PtyOpenResult) => void;
-	executionId?: string;
-};
-
-type SyncBridgeResponse =
-	| { kind: typeof SYNC_BRIDGE_KIND_NONE }
-	| { kind: typeof SYNC_BRIDGE_KIND_TEXT; value: string }
-	| { kind: typeof SYNC_BRIDGE_KIND_BINARY; value: Uint8Array }
-	| { kind: typeof SYNC_BRIDGE_KIND_JSON; value: unknown };
-
-type BrowserChildProcessSession = {
-	executionId: string;
-	process: ReturnType<CommandExecutor["spawn"]>;
-	events: BrowserChildProcessPollEvent[];
-	exited: boolean;
-};
-
-type BrowserNetworkPermission = NonNullable<
-	RuntimeDriverOptions["system"]["permissions"]
->["network"];
-
-type BrowserSyncBridgeHost = {
-	commandExecutor: CommandExecutor;
-	networkAdapter: NetworkAdapter;
-	childProcessSessions: Map<number, BrowserChildProcessSession>;
-	signalStates: Map<string, Map<number, BrowserSignalRegistration>>;
-	allocateChildProcessSessionId(): number;
-	networkPermission?: BrowserNetworkPermission;
-};
-
-const DEFAULT_BROWSER_TIMING_MITIGATION: TimingMitigation = "freeze";
-
-const BROWSER_OPTION_VALIDATORS = [
-	{
-		label: "memoryLimit",
-		hasValue: (options: RuntimeDriverOptions) =>
-			options.memoryLimit !== undefined,
-	},
-	{
-		label: "cpuTimeLimitMs",
-		hasValue: (options: RuntimeDriverOptions) =>
-			options.cpuTimeLimitMs !== undefined,
-	},
-];
-
-// Permission predicates are consumed only on the trusted main thread (here and
-// in `wrapCommandExecutor`); they are never serialized to or evaluated in the
-// untrusted guest worker. The kernel is the sole enforcement point for fs/net.
-// The one thing the worker needs is an already-filtered env, so apply the env
-// predicate to a process config on this side before it crosses the boundary.
-function filterProcessConfigEnv<T extends { env?: Record<string, string> }>(
-	processConfig: T,
-	permissions?: Permissions,
-): T {
-	if (!permissions?.env || !processConfig.env) {
-		return processConfig;
-	}
-	return { ...processConfig, env: filterEnv(processConfig.env, permissions) };
-}
-
-function resolveWorkerUrl(workerUrl?: URL | string): URL {
-	if (workerUrl instanceof URL) {
-		return workerUrl;
-	}
-	if (workerUrl) {
-		return new URL(workerUrl, import.meta.url);
-	}
-	return new URL("./worker.js", import.meta.url);
-}
-
-function createWorkerControlToken(): string {
-	if (typeof globalThis.crypto?.randomUUID === "function") {
-		return globalThis.crypto.randomUUID();
-	}
-	return `browser-runtime-${Date.now()}-${Math.random().toString(16).slice(2)}`;
-}
-
-function toBrowserWorkerExecOptions(
-	options?: ExecOptions,
-	permissions?: Permissions,
-): BrowserWorkerExecOptions | undefined {
-	if (!options) {
-		return undefined;
-	}
-	return {
-		filePath: options.filePath,
-		// Filter per-exec env on the trusted main thread before it reaches the
-		// guest worker (the worker no longer re-applies the env permission).
-		env:
-			options.env && permissions?.env
-				? filterEnv(options.env, permissions)
-				: options.env,
-		cwd: options.cwd,
-		stdin: options.stdin,
-		stdioPty: options.stdioPty
-			? {
-					open: options.stdioPty.open,
-					slaveFd: options.stdioPty.slaveFd,
-					columns: options.stdioPty.columns,
-					rows: options.stdioPty.rows,
-				}
-			: undefined,
-		timingMitigation: options.timingMitigation,
-		persistent: options.persistent,
-		streamingStdin: options.streamingStdin,
-	};
-}
-
-function validateBrowserRuntimeOptions(options: RuntimeDriverOptions): void {
-	const unsupported = BROWSER_OPTION_VALIDATORS.filter((validator) =>
-		validator.hasValue(options),
-	).map((validator) => validator.label);
-	if (unsupported.length === 0) {
-		return;
-	}
-	throw new Error(
-		`Browser runtime does not support Node-only options: ${unsupported.join(", ")}`,
-	);
-}
-
-function validateBrowserExecOptions(options?: ExecOptions): void {
-	const unsupported: string[] = [];
-	if (options?.cpuTimeLimitMs !== undefined) {
-		unsupported.push("cpuTimeLimitMs");
-	}
-	if (unsupported.length === 0) {
-		return;
-	}
-	throw new Error(
-		`Browser runtime does not support Node-only exec options: ${unsupported.join(", ")}`,
-	);
-}
-
-function isStdioMessage(
-	message: BrowserWorkerOutboundMessage,
-): message is BrowserWorkerStdioMessage {
-	return message.type === "stdio";
-}
-
-function isPtyOpenedMessage(
-	message: BrowserWorkerOutboundMessage,
-): message is BrowserWorkerPtyOpenedMessage {
-	return message.type === "pty-opened";
-}
-
-function isResponseMessage(
-	message: BrowserWorkerOutboundMessage,
-): message is BrowserWorkerResponseMessage {
-	return message.type === "response";
-}
-
-function isSyncRequestMessage(
-	message: BrowserWorkerOutboundMessage,
-): message is BrowserWorkerSyncRequestMessage {
-	return message.type === "sync-request";
-}
-
-function throwBridgePayloadTooLarge(
-	label: string,
-	actualBytes: number,
-	maxBytes: number,
-): never {
-	const error = new Error(
-		`[${SYNC_BRIDGE_PAYLOAD_LIMIT_ERROR_CODE}] ${label}: payload is ${actualBytes} bytes, limit is ${maxBytes} bytes`,
-	);
-	(error as { code?: string }).code = SYNC_BRIDGE_PAYLOAD_LIMIT_ERROR_CODE;
-	throw error;
-}
-
-async function waitForChildProcessEvent(
-	session: BrowserChildProcessSession,
-	waitMs: number,
-): Promise<BrowserChildProcessPollEvent | null> {
-	const deadline = Date.now() + Math.max(0, waitMs);
-	while (
-		session.events.length === 0 &&
-		!session.exited &&
-		Date.now() < deadline
-	) {
-		await new Promise((resolve) => setTimeout(resolve, 5));
-	}
-	return session.events.shift() ?? null;
-}
-
-function createSyncBridgeResponseBytes(
-	response: SyncBridgeResponse,
-	encoder: TextEncoder,
-): Uint8Array {
-	switch (response.kind) {
-		case SYNC_BRIDGE_KIND_NONE:
-			return new Uint8Array(0);
-		case SYNC_BRIDGE_KIND_TEXT:
-			return encoder.encode(response.value);
-		case SYNC_BRIDGE_KIND_BINARY:
-			return response.value;
-		case SYNC_BRIDGE_KIND_JSON:
-			return encoder.encode(JSON.stringify(response.value));
-		default:
-			return new Uint8Array(0);
-	}
-}
-
-async function handleSyncBridgeOperation(
-	host: BrowserSyncBridgeHost,
-	message: BrowserWorkerSyncRequestMessage,
-): Promise<SyncBridgeResponse> {
-	switch (message.operation) {
-		case "child_process.spawn": {
-			const request = parseChildProcessSpawnRequest(
-				message.args[0],
-				"child_process.spawn request",
-			);
-			const { command, args } = request;
-			const options = request.options ?? {};
-			const sessionId = host.allocateChildProcessSessionId();
-			const events: BrowserChildProcessPollEvent[] = [];
-			const process = host.commandExecutor.spawn(command, args, {
-				cwd: options.cwd,
-				env: options.env,
-				onStdout: (data) => {
-					events.push({
-						type: "stdout",
-						data: encodeChildProcessBytes(data),
-					});
-				},
-				onStderr: (data) => {
-					events.push({
-						type: "stderr",
-						data: encodeChildProcessBytes(data),
-					});
-				},
-			});
-			const session: BrowserChildProcessSession = {
-				executionId: message.executionId,
-				process,
-				events,
-				exited: false,
-			};
-			void process
-				.wait()
-				.then((code) => {
-					session.exited = true;
-					session.events.push({ type: "exit", exitCode: code, signal: null });
-				})
-				.catch(() => {
-					session.exited = true;
-					session.events.push({ type: "exit", exitCode: 1, signal: null });
-				});
-			host.childProcessSessions.set(sessionId, session);
-			return { kind: SYNC_BRIDGE_KIND_JSON, value: sessionId };
-		}
-		case "child_process.poll": {
-			const sessionId = Number(message.args[0]);
-			const waitMs = Number(message.args[1] ?? 0);
-			const session = host.childProcessSessions.get(sessionId);
-			if (!session || session.executionId !== message.executionId) {
-				return { kind: SYNC_BRIDGE_KIND_JSON, value: null };
-			}
-			const event = await waitForChildProcessEvent(session, waitMs);
-			if (event?.type === "exit" && session.events.length === 0) {
-				host.childProcessSessions.delete(sessionId);
-			}
-			return { kind: SYNC_BRIDGE_KIND_JSON, value: event };
-		}
-		case "child_process.write_stdin": {
-			const sessionId = Number(message.args[0]);
-			const session = host.childProcessSessions.get(sessionId);
-			if (!session || session.executionId !== message.executionId) {
-				throw new Error(`unknown child_process session ${sessionId}`);
-			}
-			session?.process.writeStdin(toUint8Array(message.args[1]));
-			return { kind: SYNC_BRIDGE_KIND_NONE };
-		}
-		case "child_process.close_stdin": {
-			const sessionId = Number(message.args[0]);
-			const session = host.childProcessSessions.get(sessionId);
-			if (!session || session.executionId !== message.executionId) {
-				throw new Error(`unknown child_process session ${sessionId}`);
-			}
-			session.process.closeStdin();
-			return { kind: SYNC_BRIDGE_KIND_NONE };
-		}
-		case "child_process.kill": {
-			const sessionId = Number(message.args[0]);
-			const signal = Number(message.args[1]);
-			const session = host.childProcessSessions.get(sessionId);
-			if (!session || session.executionId !== message.executionId) {
-				throw new Error(`unknown child_process session ${sessionId}`);
-			}
-			session.process.kill(signal);
-			return { kind: SYNC_BRIDGE_KIND_NONE };
-		}
-		case "child_process.spawn_sync": {
-			const request = parseChildProcessSpawnRequest(
-				message.args[0],
-				"child_process.spawn_sync request",
-			);
-			const { command, args } = request;
-			const options = request.options ?? {};
-			const stdoutChunks: Uint8Array[] = [];
-			const stderrChunks: Uint8Array[] = [];
-			const proc = host.commandExecutor.spawn(command, args, {
-				cwd: options.cwd,
-				env: options.env,
-				onStdout: (data) => stdoutChunks.push(data),
-				onStderr: (data) => stderrChunks.push(data),
-			});
-			const input = decodeChildProcessInput(options.input);
-			if (input !== undefined) {
-				proc.writeStdin(input);
-			}
-			proc.closeStdin();
-			const exitCode = await proc.wait();
-			const decoder = new TextDecoder();
-			return {
-				kind: SYNC_BRIDGE_KIND_TEXT,
-				value: JSON.stringify({
-					stdout: stdoutChunks.map((chunk) => decoder.decode(chunk)).join(""),
-					stderr: stderrChunks.map((chunk) => decoder.decode(chunk)).join(""),
-					code: exitCode,
-				}),
-			};
-		}
-		case "process.signal_state": {
-			const { signal, registration } = parseProcessSignalStateArgs(
-				message.args,
-			);
-			applyProcessSignalStateUpdate(
-				host.signalStates,
-				message.executionId,
-				signal,
-				registration,
-			);
-			return { kind: SYNC_BRIDGE_KIND_NONE };
-		}
-		case "network.fetch": {
-			const url = String(message.args[0] ?? "");
-			const options = (message.args[1] ?? {}) as Parameters<
-				NetworkAdapter["fetch"]
-			>[1];
-			const result = await host.networkAdapter.fetch(url, options);
-			return { kind: SYNC_BRIDGE_KIND_JSON, value: result };
-		}
-		default:
-			throw new Error(
-				`Unsupported browser sync bridge operation: ${String(message.operation)}`,
-			);
-	}
-}
-
-export class BrowserRuntimeDriver implements NodeRuntimeDriver {
-	private readonly worker: Worker;
-	private readonly pending = new Map<number, PendingRequest>();
-	private readonly controlToken = createWorkerControlToken();
-	private readonly defaultOnStdio?: StdioHook;
-	private readonly defaultTimingMitigation: TimingMitigation;
-	private readonly networkAdapter: NetworkAdapter;
-	private readonly commandExecutor: CommandExecutor;
-	private readonly syncBridge: BrowserSyncBridgePayload;
-	private readonly childProcessSessions = new Map<
-		number,
-		BrowserChildProcessSession
-	>();
-	private readonly signalStates = new Map<
-		string,
-		Map<number, BrowserSignalRegistration>
-	>();
-	private readonly ready: Promise<void>;
-	private readonly encoder = new TextEncoder();
-	private nextId = 1;
-	private nextExecutionId = 1;
-	private nextChildProcessSessionId = 1;
-	private disposed = false;
-	private readonly networkPermission?: BrowserNetworkPermission;
-	private readonly permissions?: Permissions;
-	private convergedServicer?: ConvergedServicer;
-	private readonly convergedReady?: Promise<void>;
-
-	constructor(
-		options: RuntimeDriverOptions,
-		factoryOptions: BrowserRuntimeDriverFactoryOptions = {},
-	) {
-		if (typeof Worker === "undefined") {
-			throw new Error(
-				"Browser runtime requires a global Worker implementation",
-			);
-		}
-		assertBrowserSyncBridgeSupport();
-
-		this.defaultOnStdio = options.onStdio;
-		this.defaultTimingMitigation =
-			options.timingMitigation ??
-			options.runtime.process.timingMitigation ??
-			DEFAULT_BROWSER_TIMING_MITIGATION;
-		this.networkAdapter = options.system.network ?? createNetworkStub();
-		this.networkPermission = options.system.permissions?.network;
-		this.permissions = options.system.permissions;
-		this.commandExecutor = wrapCommandExecutor(
-			options.system.commandExecutor ?? {
-				spawn() {
-					throw new Error("ENOSYS: child_process.spawn is not supported");
-				},
-			},
-			options.system.permissions,
-		);
-		this.syncBridge = createBrowserSyncBridgePayload(options.payloadLimits);
-		this.worker = new Worker(resolveWorkerUrl(factoryOptions.workerUrl), {
-			type: "module",
-		});
-		this.worker.onmessage = this.handleWorkerMessage;
-		this.worker.onerror = this.handleWorkerError;
-
-		const browserSystemOptions = getBrowserSystemDriverOptions(options.system);
-		const initPayload: BrowserWorkerInitPayload = {
-			processConfig: filterProcessConfigEnv(
-				options.runtime.process,
-				options.system.permissions,
-			),
-			osConfig: options.runtime.os,
-			filesystem: browserSystemOptions.filesystem,
-			networkEnabled: browserSystemOptions.networkEnabled,
-			timingMitigation: this.defaultTimingMitigation,
-			payloadLimits: options.payloadLimits,
-			syncBridge: this.syncBridge,
-		};
-
-		this.ready = this.callWorker("init", initPayload).then(() => undefined);
-		this.ready.catch(() => undefined);
-
-		if (factoryOptions.convergedSidecar) {
-			this.convergedReady = this.setupConvergedSidecar(
-				factoryOptions.convergedSidecar,
-			);
-			this.convergedReady.catch(() => undefined);
-		}
-	}
-
-	private async setupConvergedSidecar(
-		options: ConvergedSidecarFactoryOptions,
-	): Promise<void> {
-		const [{ createConvergedServicer }, sidecar] = await Promise.all([
-			import("./converged-driver-setup.js"),
-			options.loadSidecar(),
-		]);
-		this.convergedServicer = createConvergedServicer({
-			pushFrame: sidecar.pushFrame,
-			config: options.config,
-			codec: options.codec,
-			setNextExecutionId: sidecar.setNextExecutionId?.bind(sidecar),
-			onFsReadDenied: options.onFsReadDenied,
-		});
-	}
-
-	get network(): Pick<NetworkAdapter, "fetch" | "dnsLookup" | "httpRequest"> {
-		const adapter = this.networkAdapter;
-		return {
-			fetch: (url, options) => adapter.fetch(url, options),
-			dnsLookup: (hostname) => adapter.dnsLookup(hostname),
-			httpRequest: (url, options) => adapter.httpRequest(url, options),
-		};
-	}
-
-	private handleWorkerError = (event: ErrorEvent): void => {
-		if (this.disposed) {
-			return;
-		}
-		const error =
-			event.error instanceof Error
-				? event.error
-				: new Error(
-						event.message
-							? `Browser runtime worker error: ${event.message} (${event.filename}:${event.lineno}:${event.colno})`
-							: "Browser runtime worker error",
-					);
-		this.cleanup(error, { terminateWorker: true });
-	};
-
-	private handleWorkerMessage = (
-		event: MessageEvent<BrowserWorkerOutboundMessage>,
-	): void => {
-		if (this.disposed) {
-			return;
-		}
-		const message = event.data;
-		if (message.controlToken !== this.controlToken) {
-			return;
-		}
-
-		if (isSyncRequestMessage(message)) {
-			void this.handleSyncRequest(message);
-			return;
-		}
-
-		if (isPtyOpenedMessage(message)) {
-			const pending = this.pending.get(message.requestId);
-			if (pending?.executionId !== message.executionId) {
-				return;
-			}
-			try {
-				pending.onPtyOpen?.({
-					masterFd: message.masterFd,
-					slaveFd: message.slaveFd,
-					path: message.path,
-					columns: message.columns,
-					rows: message.rows,
-				});
-			} catch {
-				// Ignore host callback errors so the guest execution can continue.
-			}
-			return;
-		}
-
-		if (isStdioMessage(message)) {
-			const pending = this.pending.get(message.requestId);
-			if (pending?.executionId !== message.executionId) {
-				return;
-			}
-			const hook = pending?.hook ?? this.defaultOnStdio;
-			if (!hook) {
-				return;
-			}
-			try {
-				hook({ channel: message.channel, message: message.message });
-			} catch {
-				// Ignore host hook errors so sandbox execution can continue.
-			}
-			return;
-		}
-
-		if (!isResponseMessage(message)) {
-			return;
-		}
-
-		const pending = this.pending.get(message.id);
-		if (!pending) {
-			return;
-		}
-		this.pending.delete(message.id);
-		if (pending.executionId) {
-			this.cleanupExecutionState(pending.executionId);
-		}
-
-		if (message.ok) {
-			pending.resolve(message.result);
-			return;
-		}
-
-		const error = new Error(message.error.message);
-		if (message.error.stack) {
-			error.stack = message.error.stack;
-		}
-		(error as { code?: string }).code = message.error.code;
-		pending.reject(error);
-	};
-
-	private async handleSyncRequest(
-		message: BrowserWorkerSyncRequestMessage,
-	): Promise<void> {
-		const signal = new Int32Array(this.syncBridge.signalBuffer);
-		const data = new Uint8Array(this.syncBridge.dataBuffer);
-		try {
-			if (
-				!this.hasPendingExecutionRequest(
-					message.processRequestId,
-					message.executionId,
-				)
-			) {
-				throw new Error(
-					`Browser runtime sync bridge request for unknown execution ${message.executionId}`,
-				);
-			}
-			if (!isBrowserWorkerSyncOperation(message.operation)) {
-				throw new Error(
-					`Unsupported browser sync bridge operation: ${String(message.operation)}`,
-				);
-			}
-			const legacyServicer = (operation: string, args: readonly unknown[]) =>
-				handleSyncBridgeOperation(
-					{
-						commandExecutor: this.commandExecutor,
-						networkAdapter: this.networkAdapter,
-						childProcessSessions: this.childProcessSessions,
-						signalStates: this.signalStates,
-						allocateChildProcessSessionId: () =>
-							this.allocateChildProcessSessionId(),
-						networkPermission: this.networkPermission,
-					},
-					{
-						...message,
-						operation: operation as typeof message.operation,
-						args: [...args],
-					},
-				);
-			// Converged-only: every guest syscall is serviced by the wasm kernel via
-			// the converged servicer. The legacy in-process TS kernel is gone; the
-			// `legacyServicer` survives ONLY as the converged router's fallback for
-			// host capabilities (child_process.* / process.signal_state), never as a
-			// standalone guest-syscall path.
-			if (this.convergedReady === undefined) {
-				throw new Error(
-					"Browser runtime requires a converged wasm sidecar; the legacy in-process kernel has been removed",
-				);
-			}
-			await this.convergedReady;
-			if (!this.convergedServicer) {
-				throw new Error(
-					"Converged sidecar servicer is unavailable after setup",
-				);
-			}
-			const response = await this.convergedServicer.route(
-				message.executionId,
-				message.operation,
-				message.args,
-				legacyServicer,
-			);
-			const bytes = createSyncBridgeResponseBytes(response, this.encoder);
-			if (bytes.byteLength > data.byteLength) {
-				const suffix =
-					typeof message.args[0] === "string" ? ` ${message.args[0]}` : "";
-				throwBridgePayloadTooLarge(
-					`${message.operation}${suffix}`,
-					bytes.byteLength,
-					data.byteLength,
-				);
-			}
-
-			data.set(bytes, 0);
-			Atomics.store(
-				signal,
-				SYNC_BRIDGE_SIGNAL_STATUS_INDEX,
-				SYNC_BRIDGE_STATUS_OK,
-			);
-			Atomics.store(signal, SYNC_BRIDGE_SIGNAL_KIND_INDEX, response.kind);
-			Atomics.store(signal, SYNC_BRIDGE_SIGNAL_LENGTH_INDEX, bytes.byteLength);
-		} catch (error) {
-			let bytes = this.encoder.encode(
-				JSON.stringify(toBrowserSyncBridgeError(error)),
-			);
-			if (bytes.byteLength > data.byteLength) {
-				bytes = this.encoder.encode(
-					JSON.stringify({
-						message:
-							"Browser runtime sync bridge error exceeded shared buffer capacity",
-						code: SYNC_BRIDGE_PAYLOAD_LIMIT_ERROR_CODE,
-					}),
-				);
-			}
-
-			data.set(bytes, 0);
-			Atomics.store(
-				signal,
-				SYNC_BRIDGE_SIGNAL_STATUS_INDEX,
-				SYNC_BRIDGE_STATUS_ERROR,
-			);
-			Atomics.store(
-				signal,
-				SYNC_BRIDGE_SIGNAL_KIND_INDEX,
-				SYNC_BRIDGE_KIND_JSON,
-			);
-			Atomics.store(signal, SYNC_BRIDGE_SIGNAL_LENGTH_INDEX, bytes.byteLength);
-		}
-
-		Atomics.store(
-			signal,
-			SYNC_BRIDGE_SIGNAL_STATE_INDEX,
-			SYNC_BRIDGE_SIGNAL_STATE_READY,
-		);
-		Atomics.notify(signal, SYNC_BRIDGE_SIGNAL_STATE_INDEX, 1);
-	}
-
-	private rejectAllPending(error: Error): void {
-		const entries = Array.from(this.pending.values());
-		this.pending.clear();
-		for (const pending of entries) {
-			if (pending.executionId) {
-				this.cleanupExecutionState(pending.executionId);
-			}
-			pending.reject(error);
-		}
-	}
-
-	private clearWorkerHandlers(): void {
-		try {
-			this.worker.onmessage = null;
-		} catch {
-			// Ignore host Worker implementations with non-writable event hooks.
-		}
-		try {
-			this.worker.onerror = null;
-		} catch {
-			// Ignore host Worker implementations with non-writable event hooks.
-		}
-	}
-
-	private allocateExecutionId(): string {
-		return `exec-${this.nextExecutionId++}`;
-	}
-
-	private allocateChildProcessSessionId(): number {
-		return this.nextChildProcessSessionId++;
-	}
-
-	private hasPendingExecutionRequest(
-		requestId: number,
-		executionId: string,
-	): boolean {
-		const pending = this.pending.get(requestId);
-		return pending?.executionId === executionId;
-	}
-
-	private cleanupExecutionState(executionId: string): void {
-		this.signalStates.delete(executionId);
-		for (const [sessionId, session] of this.childProcessSessions) {
-			if (session.executionId === executionId) {
-				this.childProcessSessions.delete(sessionId);
-			}
-		}
-	}
-
-	private resetSyncBridgeState(): void {
-		new Int32Array(this.syncBridge.signalBuffer).fill(0);
-		new Uint8Array(this.syncBridge.dataBuffer).fill(0);
-	}
-
-	private cleanup(
-		error: Error,
-		options: { terminateWorker?: boolean } = {},
-	): void {
-		if (this.disposed) {
-			this.rejectAllPending(error);
-			return;
-		}
-		this.disposed = true;
-		this.clearWorkerHandlers();
-		if (options.terminateWorker) {
-			try {
-				this.worker.terminate();
-			} catch {
-				// Ignore termination errors while tearing down a broken worker.
-			}
-		}
-		this.resetSyncBridgeState();
-		this.signalStates.clear();
-		this.rejectAllPending(error);
-	}
-
-	// Fire-and-forget control message (no response expected) — for streaming stdin.
-	private postControl(
-		fields:
-			| { type: "write-stdin"; executionId: string; data: string }
-			| { type: "end-stdin"; executionId: string }
-			| {
-					type: "resize-pty";
-					executionId: string;
-					columns: number;
-					rows: number;
-			  },
-	): void {
-		const id = this.nextId++;
-		try {
-			this.worker.postMessage({
-				controlToken: this.controlToken,
-				id,
-				...fields,
-			} as BrowserWorkerRequestMessage);
-		} catch {
-			// Worker gone / disposed — nothing to do.
-		}
-	}
-
-	private callWorker<T>(
-		type: BrowserWorkerRequestMessage["type"],
-		payload?: unknown,
-		hook?: StdioHook,
-		executionId?: string,
-		onPtyOpen?: (pty: PtyOpenResult) => void,
-	): Promise<T> {
-		if (this.disposed) {
-			return Promise.reject(new Error("Browser runtime has been disposed"));
-		}
-		const id = this.nextId++;
-		const message: BrowserWorkerRequestMessage =
-			payload === undefined
-				? ({
-						controlToken: this.controlToken,
-						id,
-						type,
-					} as BrowserWorkerRequestMessage)
-				: ({
-						controlToken: this.controlToken,
-						id,
-						type,
-						payload,
-					} as BrowserWorkerRequestMessage);
-
-		return new Promise<T>((resolve, reject) => {
-			this.pending.set(id, {
-				resolve,
-				reject,
-				hook,
-				executionId,
-				onPtyOpen,
-			});
-			try {
-				this.worker.postMessage(message);
-			} catch (error) {
-				this.pending.delete(id);
-				if (executionId) {
-					this.cleanupExecutionState(executionId);
-				}
-				reject(error);
-			}
-		});
-	}
-
-	async run<T = unknown>(
-		code: string,
-		filePath?: string,
-	): Promise<RunResult<T>> {
-		await this.ready;
-		const hook = this.defaultOnStdio;
-		const executionId = this.allocateExecutionId();
-		return this.callWorker<RunResult<T>>(
-			"run",
-			{
-				executionId,
-				code,
-				filePath,
-				captureStdio: Boolean(hook),
-			},
-			hook,
-			executionId,
-		);
-	}
-
-	async exec(code: string, options?: ExecOptions): Promise<ExecResult> {
-		validateBrowserExecOptions(options);
-		await this.ready;
-		const hook = options?.onStdio ?? this.defaultOnStdio;
-		const executionId = this.allocateExecutionId();
-		// Hand the execution id to the caller BEFORE awaiting completion so it can drive
-		// streaming stdin (writeStdin/endStdin) while the program runs.
-		options?.onStart?.(executionId);
-		return this.callWorker<ExecResult>(
-			"exec",
-			{
-				executionId,
-				code,
-				options: toBrowserWorkerExecOptions(options, this.permissions),
-				captureStdio: Boolean(hook),
-			},
-			hook,
-			executionId,
-			options?.stdioPty?.onOpen,
-		);
-	}
-
-	/** Feed stdin to a running `streamingStdin` execution. */
-	writeStdin(executionId: string, data: string): void {
-		if (this.disposed) return;
-		this.postControl({ type: "write-stdin", executionId, data });
-	}
-
-	/** End stdin for a running `streamingStdin` execution (the program sees EOF). */
-	endStdin(executionId: string): void {
-		if (this.disposed) return;
-		this.postControl({ type: "end-stdin", executionId });
-	}
-
-	private async routePty(
-		executionId: string,
-		operation: "pty.read" | "pty.write" | "pty.resize" | "pty.close",
-		args: readonly unknown[],
-	): Promise<SyncBridgeResponse> {
-		await this.ready;
-		if (this.convergedReady === undefined) {
-			throw new Error("PTY operations require a converged wasm sidecar");
-		}
-		await this.convergedReady;
-		if (!this.convergedServicer) {
-			throw new Error("Converged sidecar servicer is unavailable after setup");
-		}
-		return this.convergedServicer.route(
-			executionId,
-			operation,
-			args,
-			async () => {
-				throw new Error(`legacy PTY fallback is not available for ${operation}`);
-			},
-		);
-	}
-
-	async writePty(
-		executionId: string,
-		fd: number,
-		data: string | Uint8Array,
-	): Promise<number> {
-		const response = await this.routePty(executionId, "pty.write", [
-			{ fd, data: toUint8Array(data) },
-		]);
-		if (response.kind !== SYNC_BRIDGE_KIND_JSON) {
-			throw new Error(`Expected JSON response from pty.write, received ${response.kind}`);
-		}
-		return Number((response.value as { written?: unknown }).written ?? 0);
-	}
-
-	async readPty(
-		executionId: string,
-		fd: number,
-		options: { maxBytes?: number; timeoutMs?: number } = {},
-	): Promise<Uint8Array | null> {
-		const response = await this.routePty(executionId, "pty.read", [
-			{
-				fd,
-				maxBytes: options.maxBytes,
-				timeoutMs: options.timeoutMs,
-			},
-		]);
-		if (response.kind !== SYNC_BRIDGE_KIND_JSON) {
-			throw new Error(`Expected JSON response from pty.read, received ${response.kind}`);
-		}
-		const data = (response.value as { data?: unknown }).data;
-		return typeof data === "string" ? base64ToBytes(data) : null;
-	}
-
-	async resizePty(
-		executionId: string,
-		fd: number,
-		size: { columns: number; rows: number },
-	): Promise<void> {
-		await this.routePty(executionId, "pty.resize", [
-			{ fd, cols: size.columns, rows: size.rows },
-		]);
-		this.postControl({
-			type: "resize-pty",
-			executionId,
-			columns: size.columns,
-			rows: size.rows,
-		});
-	}
-
-	async closePty(executionId: string, fd: number): Promise<void> {
-		await this.routePty(executionId, "pty.close", [{ fd }]);
-	}
-
-	async dispatchExtensionRequest(
-		namespace: string,
-		payload: Uint8Array,
-	): Promise<Uint8Array> {
-		await this.ready;
-		const response = await this.callWorker<BrowserWorkerExtensionResponse>(
-			"extension",
-			{ namespace, payload },
-		);
-		return response.payload;
-	}
-
-	dispose(): void {
-		if (this.disposed) {
-			return;
-		}
-		this.cleanup(new Error("Browser runtime has been disposed"), {
-			terminateWorker: true,
-		});
-	}
-
-	/**
-	 * Snapshot the converged VM root filesystem (writable changes) so callers can
-	 * persist them to host storage across runtimes. Returns null in legacy mode.
-	 */
-	async snapshotConvergedRootFilesystem(): Promise<ReturnType<
-		ConvergedServicer["snapshotRootFilesystem"]
-	> | null> {
-		if (this.convergedReady === undefined) {
-			return null;
-		}
-		await this.convergedReady;
-		return this.convergedServicer?.snapshotRootFilesystem() ?? null;
-	}
-
-	async terminate(): Promise<void> {
-		this.dispose();
-	}
-
-	signalPendingExecution(signal = 15): boolean {
-		if (this.disposed) {
-			return false;
-		}
-		const pending = Array.from(this.pending.values()).find(
-			(entry) => entry.executionId,
-		);
-		if (!pending?.executionId) {
-			return false;
-		}
-		const id = this.nextId++;
-		const message: BrowserWorkerRequestMessage = {
-			controlToken: this.controlToken,
-			id,
-			type: "signal",
-			payload: {
-				executionId: pending.executionId,
-				signal,
-			},
-		};
-		this.worker.postMessage(message);
-		return true;
-	}
-}
-
-export function createBrowserRuntimeDriverFactory(
-	factoryOptions: BrowserRuntimeDriverFactoryOptions = {},
-): NodeRuntimeDriverFactory {
-	return {
-		createRuntimeDriver(options) {
-			validateBrowserRuntimeOptions(options);
-			return new BrowserRuntimeDriver(options, factoryOptions);
-		},
-	};
-}
diff --git a/packages/browser/src/runtime.ts b/packages/browser/src/runtime.ts
deleted file mode 100644
index 9f28255a1..000000000
--- a/packages/browser/src/runtime.ts
+++ /dev/null
@@ -1,3663 +0,0 @@
-import {
-	createInMemoryFileSystem,
-	InMemoryFileSystem,
-} from "./os-filesystem.js";
-import { guestEncodingBootstrapCode } from "./encoding.js";
-import { BROWSER_WASI_POLYFILL_CODE } from "./wasi-polyfill.js";
-import { PROCESS_SIGNAL_NUMBERS } from "./signals.js";
-import { BROWSER_BUFFER_POLYFILL_CODE } from "./generated/buffer-polyfill.js";
-import { BROWSER_PATH_POLYFILL_CODE } from "./generated/path-polyfill.js";
-import { BROWSER_UTIL_POLYFILL_CODE } from "./generated/util-polyfill.js";
-
-export type StdioChannel = "stdout" | "stderr";
-export type TimingMitigation = "off" | "freeze";
-type BodyLike = unknown;
-
-export interface VirtualDirEntry {
-	name: string;
-	isDirectory: boolean;
-	isSymbolicLink?: boolean;
-}
-
-export interface VirtualStat {
-	mode: number;
-	size: number;
-	blocks: number;
-	dev: number;
-	rdev: number;
-	isDirectory: boolean;
-	isSymbolicLink: boolean;
-	atimeMs: number;
-	mtimeMs: number;
-	ctimeMs: number;
-	birthtimeMs: number;
-	ino: number;
-	nlink: number;
-	uid: number;
-	gid: number;
-}
-
-export interface VirtualFileSystem {
-	readFile(path: string): Promise<Uint8Array>;
-	readTextFile(path: string): Promise<string>;
-	readDir(path: string): Promise<string[]>;
-	readDirWithTypes(path: string): Promise<VirtualDirEntry[]>;
-	writeFile(path: string, content: string | Uint8Array): Promise<void>;
-	createDir(path: string): Promise<void>;
-	mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;
-	exists(path: string): Promise<boolean>;
-	stat(path: string): Promise<VirtualStat>;
-	removeFile(path: string): Promise<void>;
-	removeDir(path: string): Promise<void>;
-	rename(oldPath: string, newPath: string): Promise<void>;
-	realpath(path: string): Promise<string>;
-	symlink(target: string, linkPath: string): Promise<void>;
-	readlink(path: string): Promise<string>;
-	lstat(path: string): Promise<VirtualStat>;
-	link(oldPath: string, newPath: string): Promise<void>;
-	chmod(path: string, mode: number): Promise<void>;
-	chown(path: string, uid: number, gid: number): Promise<void>;
-	utimes(path: string, atime: number, mtime: number): Promise<void>;
-	truncate(path: string, length: number): Promise<void>;
-	pread(path: string, offset: number, length: number): Promise<Uint8Array>;
-	pwrite(path: string, offset: number, data: Uint8Array): Promise<void>;
-}
-
-export type PermissionDecision =
-	| boolean
-	| { allowed: boolean; reason?: string }
-	| { allow: boolean; reason?: string };
-export type PermissionCheck<T = unknown> = (request: T) => PermissionDecision;
-
-export interface Permissions {
-	fs?: PermissionCheck<{ path: string; operation: string }>;
-	network?: PermissionCheck<{ url?: string; host?: string; port?: number }>;
-	childProcess?: PermissionCheck<{
-		command: string;
-		args: string[];
-		cwd?: string;
-		env?: Record<string, string>;
-	}>;
-	env?: PermissionCheck<{ name: string; value: string }>;
-}
-
-export const allowAllFs: PermissionCheck = () => true;
-export const allowAllNetwork: PermissionCheck = () => true;
-export const allowAllChildProcess: PermissionCheck = () => true;
-export const allowAllEnv: PermissionCheck = () => true;
-export const allowAll: Permissions = {
-	fs: allowAllFs,
-	network: allowAllNetwork,
-	childProcess: allowAllChildProcess,
-	env: allowAllEnv,
-};
-
-export interface ExecOptions {
-	filePath?: string;
-	env?: Record<string, string>;
-	cwd?: string;
-	stdin?: string;
-	/**
-	 * Bind process stdio to a kernel PTY slave fd. When present, stdin/stdout/stderr
-	 * report isTTY=true, stdout/stderr write through `pty.write(slaveFd, ...)`, and
-	 * stdin is read from `pty.read(slaveFd, ...)`.
-	 */
-	stdioPty?: {
-		/**
-		 * Open a fresh kernel PTY for this execution before guest code runs. The
-		 * execution's stdio binds to the slave; `onOpen` receives the master fd so
-		 * the host terminal can drive it via `writePty`/`readPty`.
-		 */
-		open?: boolean;
-		/** Bind to an existing slave fd already owned by this execution. */
-		slaveFd?: number;
-		columns?: number;
-		rows?: number;
-		onOpen?: (pty: PtyOpenResult) => void;
-	};
-	cpuTimeLimitMs?: number;
-	timingMitigation?: TimingMitigation;
-	onStdio?: StdioHook;
-	/**
-	 * Run a PERSISTENT (service-style) program: instead of returning once `main`
-	 * finishes and microtasks drain, the executor keeps the worker event loop alive
-	 * for async I/O (stdin events, timers, stream pumps) until the program calls
-	 * `process.exit` (or a safety timeout). Needed for long-running stdio servers such
-	 * as an ACP agent that reads requests and replies asynchronously. Default false
-	 * (run-to-completion).
-	 */
-	persistent?: boolean;
-	/**
-	 * Stream stdin: the host feeds stdin incrementally (`writeStdin`) and ends it
-	 * explicitly (`endStdin`) rather than the one-shot `stdin` string that auto-ends.
-	 * Pairs with `persistent` to drive a long-running stdio program (e.g. an ACP agent)
-	 * as a proper external client. Use `onStart` to learn the execution id.
-	 */
-	streamingStdin?: boolean;
-	/** Called once with the execution id when the run starts (for writeStdin/endStdin). */
-	onStart?: (executionId: string) => void;
-}
-
-export interface ExecResult {
-	code: number;
-	exitCode?: number;
-	stdout?: string;
-	stderr?: string;
-	errorMessage?: string;
-}
-
-export interface PtyOpenResult {
-	masterFd: number;
-	slaveFd: number;
-	path?: string;
-	columns: number;
-	rows: number;
-}
-
-export interface RunResult<T = unknown> {
-	value?: T;
-	code: number;
-	errorMessage?: string;
-	exports?: T;
-}
-
-export interface OSConfig {
-	platform?: string;
-	arch?: string;
-	type?: string;
-	release?: string;
-	version?: string;
-	cpuCount?: number;
-	totalmem?: number;
-	freemem?: number;
-	hostname?: string;
-	homedir?: string;
-	tmpdir?: string;
-	machine?: string;
-	user?: string;
-	shell?: string;
-	uid?: number;
-	gid?: number;
-}
-
-export interface ProcessConfig {
-	cwd?: string;
-	env?: Record<string, string>;
-	argv?: string[];
-	platform?: string;
-	arch?: string;
-	version?: string;
-	pid?: number;
-	ppid?: number;
-	uid?: number;
-	gid?: number;
-	timingMitigation?: TimingMitigation;
-	frozenTimeMs?: number;
-}
-
-export type StdioEvent = { channel: StdioChannel; message: string };
-export type StdioHook = (event: StdioEvent) => void;
-
-export interface CommandExecutor {
-	spawn(
-		command: string,
-		args: string[],
-		options?: {
-			cwd?: string;
-			env?: Record<string, string>;
-			onStdout?: (data: Uint8Array) => void;
-			onStderr?: (data: Uint8Array) => void;
-		},
-	): {
-		wait(): Promise<number>;
-		writeStdin(data: Uint8Array | string): void;
-		closeStdin(): void;
-		kill(signal?: number): void;
-	};
-}
-
-export interface NetworkAdapter {
-	fetch(
-		url: string,
-		options?: {
-			method?: string;
-			headers?: Record<string, string>;
-			body?: BodyLike | null;
-		},
-	): Promise<{
-		ok: boolean;
-		status: number;
-		statusText: string;
-		headers: Record<string, string>;
-		body: string;
-		url: string;
-		redirected: boolean;
-	}>;
-	dnsLookup(hostname: string): Promise<{
-		address?: string;
-		family?: number;
-		error?: string;
-		code?: string;
-	}>;
-	httpRequest(
-		url: string,
-		options?: {
-			method?: string;
-			headers?: Record<string, string>;
-			body?: BodyLike | null;
-		},
-	): Promise<{
-		status: number;
-		statusText: string;
-		headers: Record<string, string>;
-		body: string;
-		url: string;
-	}>;
-}
-
-export interface SystemDriver {
-	filesystem?: VirtualFileSystem;
-	network?: NetworkAdapter;
-	commandExecutor?: CommandExecutor;
-	permissions?: Permissions;
-	runtime: {
-		process: ProcessConfig;
-		os: OSConfig;
-	};
-}
-
-export interface RuntimeDriverOptions {
-	system: SystemDriver;
-	runtime: {
-		process: ProcessConfig;
-		os: OSConfig;
-	};
-	memoryLimit?: number;
-	cpuTimeLimitMs?: number;
-	timingMitigation?: TimingMitigation;
-	onStdio?: StdioHook;
-	payloadLimits?: {
-		base64TransferBytes?: number;
-		jsonPayloadBytes?: number;
-	};
-}
-
-export interface NodeRuntimeDriver {
-	exec(code: string, options?: ExecOptions): Promise<ExecResult>;
-	run<T = unknown>(code: string, filePath?: string): Promise<RunResult<T>>;
-	dispose(): void;
-	terminate?(): Promise<void>;
-	/** Feed stdin to a running `streamingStdin` execution (id from ExecOptions.onStart). */
-	writeStdin?(executionId: string, data: string): void;
-	/** End stdin for a running `streamingStdin` execution. */
-	endStdin?(executionId: string): void;
-	/** Write bytes to a PTY fd owned by the execution. */
-	writePty?(executionId: string, fd: number, data: string | Uint8Array): Promise<number>;
-	/** Read bytes from a PTY fd owned by the execution. */
-	readPty?(
-		executionId: string,
-		fd: number,
-		options?: { maxBytes?: number; timeoutMs?: number },
-	): Promise<Uint8Array | null>;
-	/** Resize a PTY owned by the execution. */
-	resizePty?(
-		executionId: string,
-		fd: number,
-		size: { columns: number; rows: number },
-	): Promise<void>;
-	/** Close a PTY fd owned by the execution. */
-	closePty?(executionId: string, fd: number): Promise<void>;
-}
-
-export interface NodeRuntimeDriverFactory {
-	createRuntimeDriver(options: RuntimeDriverOptions): NodeRuntimeDriver;
-}
-
-function normalizePath(inputPath: string): string {
-	if (!inputPath) return "/";
-	let normalized = inputPath.startsWith("/") ? inputPath : `/${inputPath}`;
-	normalized = normalized.replace(/\/+/g, "/");
-	if (normalized.length > 1 && normalized.endsWith("/")) {
-		normalized = normalized.slice(0, -1);
-	}
-	const parts = normalized.split("/");
-	const resolved: string[] = [];
-	for (const part of parts) {
-		if (!part || part === ".") continue;
-		if (part === "..") {
-			resolved.pop();
-			continue;
-		}
-		resolved.push(part);
-	}
-	return resolved.length === 0 ? "/" : `/${resolved.join("/")}`;
-}
-
-function dirname(inputPath: string): string {
-	const normalized = normalizePath(inputPath);
-	if (normalized === "/") return "/";
-	const parts = normalized.split("/").filter(Boolean);
-	return parts.length <= 1 ? "/" : `/${parts.slice(0, -1).join("/")}`;
-}
-
-export function permissionAllowed(
-	decision: PermissionDecision | undefined,
-): boolean {
-	if (decision === undefined) return true;
-	if (typeof decision === "boolean") return decision;
-	return "allowed" in decision ? decision.allowed : decision.allow;
-}
-
-export function filterEnv(
-	env: Record<string, string> | undefined,
-	permissions?: Permissions,
-): Record<string, string> {
-	const source = env ?? {};
-	if (!permissions?.env) return { ...source };
-	const output: Record<string, string> = {};
-	for (const [name, value] of Object.entries(source)) {
-		if (permissionAllowed(permissions.env({ name, value }))) {
-			output[name] = value;
-		}
-	}
-	return output;
-}
-
-export function createEnosysError(operation: string): Error {
-	const error = new Error(`ENOSYS: ${operation} is not supported`);
-	(error as { code?: string }).code = "ENOSYS";
-	return error;
-}
-
-export function createFsStub(): VirtualFileSystem {
-	return createInMemoryFileSystem();
-}
-
-export function createNetworkStub(): NetworkAdapter {
-	return {
-		async fetch() {
-			throw createEnosysError("network.fetch");
-		},
-		async dnsLookup() {
-			return { error: "DNS not supported", code: "ENOSYS" };
-		},
-		async httpRequest() {
-			throw createEnosysError("network.httpRequest");
-		},
-	};
-}
-
-export function createCommandExecutorStub(): CommandExecutor {
-	return {
-		spawn() {
-			throw createEnosysError("child_process.spawn");
-		},
-	};
-}
-
-export function wrapCommandExecutor(
-	adapter: CommandExecutor,
-	permissions?: Permissions,
-): CommandExecutor {
-	if (!permissions?.childProcess) return adapter;
-	const check = (
-		command: string,
-		args: string[],
-		options?: { cwd?: string; env?: Record<string, string> },
-	): void => {
-		if (
-			!permissionAllowed(
-				permissions.childProcess?.({
-					command,
-					args,
-					cwd: options?.cwd,
-					env: options?.env,
-				}),
-			)
-		) {
-			const error = new Error(
-				`EACCES: blocked child_process spawn '${command}'`,
-			);
-			(error as { code?: string }).code = "EACCES";
-			throw error;
-		}
-	};
-	return {
-		spawn(command, args, options) {
-			check(command, args, options);
-			return adapter.spawn(command, args, options);
-		},
-	};
-}
-
-export function wrapFileSystem(
-	filesystem: VirtualFileSystem,
-	permissions?: Permissions,
-): VirtualFileSystem {
-	if (!permissions?.fs) return filesystem;
-	const check = (path: string, operation: string): void => {
-		if (!permissionAllowed(permissions.fs?.({ path, operation }))) {
-			throw new Error(`EACCES: blocked ${operation} on '${path}'`);
-		}
-	};
-	return {
-		readFile(path) {
-			check(path, "readFile");
-			return filesystem.readFile(path);
-		},
-		readTextFile(path) {
-			check(path, "readTextFile");
-			return filesystem.readTextFile(path);
-		},
-		readDir(path) {
-			check(path, "readDir");
-			return filesystem.readDir(path);
-		},
-		readDirWithTypes(path) {
-			check(path, "readDirWithTypes");
-			return filesystem.readDirWithTypes(path);
-		},
-		writeFile(path, content) {
-			check(path, "writeFile");
-			return filesystem.writeFile(path, content);
-		},
-		createDir(path) {
-			check(path, "createDir");
-			return filesystem.createDir(path);
-		},
-		mkdir(path, options) {
-			check(path, "mkdir");
-			return filesystem.mkdir(path, options);
-		},
-		exists(path) {
-			check(path, "exists");
-			return filesystem.exists(path);
-		},
-		stat(path) {
-			check(path, "stat");
-			return filesystem.stat(path);
-		},
-		removeFile(path) {
-			check(path, "removeFile");
-			return filesystem.removeFile(path);
-		},
-		removeDir(path) {
-			check(path, "removeDir");
-			return filesystem.removeDir(path);
-		},
-		rename(oldPath, newPath) {
-			check(oldPath, "rename");
-			check(newPath, "rename");
-			return filesystem.rename(oldPath, newPath);
-		},
-		realpath(path) {
-			check(path, "realpath");
-			return filesystem.realpath(path);
-		},
-		symlink(target, linkPath) {
-			check(linkPath, "symlink");
-			return filesystem.symlink(target, linkPath);
-		},
-		readlink(path) {
-			check(path, "readlink");
-			return filesystem.readlink(path);
-		},
-		lstat(path) {
-			check(path, "lstat");
-			return filesystem.lstat(path);
-		},
-		link(oldPath, newPath) {
-			check(oldPath, "link");
-			check(newPath, "link");
-			return filesystem.link(oldPath, newPath);
-		},
-		chmod(path, mode) {
-			check(path, "chmod");
-			return filesystem.chmod(path, mode);
-		},
-		chown(path, uid, gid) {
-			check(path, "chown");
-			return filesystem.chown(path, uid, gid);
-		},
-		utimes(path, atime, mtime) {
-			check(path, "utimes");
-			return filesystem.utimes(path, atime, mtime);
-		},
-		truncate(path, length) {
-			check(path, "truncate");
-			return filesystem.truncate(path, length);
-		},
-		pread(path, offset, length) {
-			check(path, "pread");
-			return filesystem.pread(path, offset, length);
-		},
-		pwrite(path, offset, data) {
-			check(path, "pwrite");
-			return filesystem.pwrite(path, offset, data);
-		},
-	};
-}
-
-export function wrapNetworkAdapter(
-	adapter: NetworkAdapter,
-	permissions?: Permissions,
-): NetworkAdapter {
-	if (!permissions?.network) return adapter;
-	const check = (request: {
-		url?: string;
-		host?: string;
-		port?: number;
-	}): void => {
-		if (!permissionAllowed(permissions.network?.(request))) {
-			throw new Error(
-				`EACCES: blocked network access to '${request.url ?? request.host ?? ""}'`,
-			);
-		}
-	};
-	return {
-		async fetch(url, options) {
-			check({ url });
-			return adapter.fetch(url, options);
-		},
-		async dnsLookup(hostname) {
-			check({ host: hostname });
-			return adapter.dnsLookup(hostname);
-		},
-		async httpRequest(url, options) {
-			check({ url });
-			return adapter.httpRequest(url, options);
-		},
-	};
-}
-
-export async function mkdir(
-	filesystem: VirtualFileSystem,
-	path: string,
-	options?: { recursive?: boolean } | boolean,
-): Promise<void> {
-	if (typeof options === "boolean") {
-		return filesystem.mkdir(path, { recursive: options });
-	}
-	return filesystem.mkdir(path, options);
-}
-
-export async function loadFile(
-	path: string,
-	filesystem: VirtualFileSystem,
-): Promise<string | null> {
-	try {
-		return await filesystem.readTextFile(path);
-	} catch {
-		return null;
-	}
-}
-
-export async function moduleFormat(
-	path: string,
-	filesystem: VirtualFileSystem,
-): Promise<"module" | "commonjs" | "json" | null> {
-	if (path.startsWith("node:")) {
-		return "module";
-	}
-
-	const normalized = normalizePath(path);
-	if (normalized.endsWith(".mjs") || normalized.endsWith(".mts")) {
-		return "module";
-	}
-	if (normalized.endsWith(".cjs") || normalized.endsWith(".cts")) {
-		return "commonjs";
-	}
-	if (normalized.endsWith(".json")) {
-		return "json";
-	}
-	if (!normalized.endsWith(".js")) {
-		return null;
-	}
-
-	const packageType = await nearestPackageJsonType(normalized, filesystem);
-	return packageType === "module" ? "module" : "commonjs";
-}
-
-export async function resolveModule(
-	specifier: string,
-	fromPath: string,
-	filesystem: VirtualFileSystem,
-	mode: "require" | "import" = "require",
-): Promise<string | null> {
-	if (specifier.startsWith("node:")) {
-		return specifier;
-	}
-
-	const fromDir = await resolveImporterDir(fromPath, filesystem);
-	if (specifier.startsWith("file:")) {
-		const filePath = fileUrlToPath(specifier);
-		return filePath === null ? null : resolvePath(filePath, filesystem, mode);
-	}
-	if (specifier.startsWith(".") || specifier.startsWith("/")) {
-		const base = specifier.startsWith("/")
-			? specifier
-			: `${fromDir}/${specifier}`;
-		return resolvePath(base, filesystem, mode);
-	}
-	if (specifier.startsWith("#")) {
-		return resolvePackageImports(specifier, fromDir, filesystem, mode);
-	}
-
-	return (
-		(await resolvePackageSelfReference(specifier, fromDir, filesystem, mode)) ??
-		resolveNodeModules(specifier, fromDir, filesystem, mode)
-	);
-}
-
-function fileUrlToPath(specifier: string): string | null {
-	let pathname: string;
-	if (specifier.startsWith("file://")) {
-		pathname = specifier.slice("file://".length);
-	} else {
-		pathname = specifier.slice("file:".length);
-	}
-	const terminator = pathname.search(/[?#]/);
-	if (terminator >= 0) {
-		pathname = pathname.slice(0, terminator);
-	}
-	if (!pathname.startsWith("/")) {
-		const slashIndex = pathname.indexOf("/");
-		if (slashIndex < 0) {
-			return null;
-		}
-		const host = pathname.slice(0, slashIndex);
-		if (host !== "" && host !== "localhost") {
-			return null;
-		}
-		pathname = pathname.slice(slashIndex);
-	}
-	try {
-		return normalizePath(decodeURIComponent(pathname));
-	} catch {
-		return null;
-	}
-}
-
-async function resolveImporterDir(
-	fromPath: string,
-	filesystem: VirtualFileSystem,
-): Promise<string> {
-	let fromDir = normalizePath(fromPath);
-	try {
-		const stat = await filesystem.stat(fromDir);
-		if (!stat.isDirectory) {
-			return dirname(fromDir);
-		}
-		return await realpathOrSelf(fromDir, filesystem);
-	} catch {
-		const basename = fromDir.split("/").at(-1) ?? "";
-		if (basename.includes(".")) {
-			fromDir = dirname(fromDir);
-		}
-		return fromDir;
-	}
-}
-
-async function realpathOrSelf(
-	path: string,
-	filesystem: VirtualFileSystem,
-): Promise<string> {
-	try {
-		return normalizePath(await filesystem.realpath(path));
-	} catch {
-		return normalizePath(path);
-	}
-}
-
-async function resolveNodeModules(
-	specifier: string,
-	fromDir: string,
-	filesystem: VirtualFileSystem,
-	mode: "require" | "import",
-): Promise<string | null> {
-	const parsed = parsePackageSpecifier(specifier);
-	if (!parsed) {
-		return null;
-	}
-
-	for (const dir of ancestorDirs(fromDir)) {
-		if (dir === "/node_modules" || dir.endsWith("/node_modules")) {
-			continue;
-		}
-		const packageDir = normalizePath(`${dir}/node_modules/${parsed.name}`);
-		const resolved = await resolvePackageEntry(
-			packageDir,
-			parsed.subpath,
-			filesystem,
-			mode,
-		);
-		if (resolved) {
-			return resolved;
-		}
-	}
-
-	for (const root of ["/root/node_modules", "/node_modules"]) {
-		const resolved = await resolvePackageEntry(
-			normalizePath(`${root}/${parsed.name}`),
-			parsed.subpath,
-			filesystem,
-			mode,
-		);
-		if (resolved) {
-			return resolved;
-		}
-	}
-
-	return null;
-}
-
-async function resolvePackageImports(
-	specifier: string,
-	fromDir: string,
-	filesystem: VirtualFileSystem,
-	mode: "require" | "import",
-): Promise<string | null> {
-	let dir = normalizePath(fromDir);
-	while (true) {
-		const packageJson = await readPackageJson(dir, filesystem);
-		if (packageJson && Object.hasOwn(packageJson, "imports")) {
-			const target = resolveImportsTarget(packageJson.imports, specifier, mode);
-			if (!target) {
-				return null;
-			}
-			const targetPath = target.startsWith("/") ? target : `${dir}/${target}`;
-			return resolvePath(targetPath, filesystem, mode);
-		}
-		if (dir === "/") {
-			break;
-		}
-		dir = dirname(dir);
-	}
-	return null;
-}
-
-async function resolvePackageSelfReference(
-	specifier: string,
-	fromDir: string,
-	filesystem: VirtualFileSystem,
-	mode: "require" | "import",
-): Promise<string | null> {
-	const parsed = parsePackageSpecifier(specifier);
-	if (!parsed) {
-		return null;
-	}
-
-	for (const dir of ancestorDirs(fromDir)) {
-		const packageJson = await readPackageJson(dir, filesystem);
-		if (packageJson && packageJson.name === parsed.name) {
-			return resolvePackageEntry(dir, parsed.subpath, filesystem, mode);
-		}
-	}
-
-	return null;
-}
-
-function parsePackageSpecifier(
-	specifier: string,
-): { name: string; subpath: string } | null {
-	const parts = specifier.split("/").filter(Boolean);
-	if (parts.length === 0) {
-		return null;
-	}
-	if (parts[0]?.startsWith("@")) {
-		if (parts.length < 2) {
-			return null;
-		}
-		return {
-			name: `${parts[0]}/${parts[1]}`,
-			subpath: parts.slice(2).join("/"),
-		};
-	}
-	return {
-		name: parts[0] ?? "",
-		subpath: parts.slice(1).join("/"),
-	};
-}
-
-function ancestorDirs(fromDir: string): string[] {
-	const dirs: string[] = [];
-	let current = normalizePath(fromDir);
-	while (true) {
-		dirs.push(current);
-		if (current === "/") {
-			break;
-		}
-		current = dirname(current);
-	}
-	return dirs;
-}
-
-async function resolvePackageEntry(
-	packageDir: string,
-	subpath: string,
-	filesystem: VirtualFileSystem,
-	mode: "require" | "import",
-): Promise<string | null> {
-	const packageJson = await readPackageJson(packageDir, filesystem);
-	if (packageJson && Object.hasOwn(packageJson, "exports")) {
-		const exportsSubpath = subpath ? `./${subpath}` : ".";
-		const exportsTarget = resolveExportsTarget(
-			packageJson.exports,
-			exportsSubpath,
-			mode,
-		);
-		if (!exportsTarget) {
-			return null;
-		}
-		const targetPath = normalizePath(`${packageDir}/${exportsTarget}`);
-		return (await resolvePath(targetPath, filesystem, mode)) ?? targetPath;
-	}
-
-	if (subpath) {
-		return resolvePath(`${packageDir}/${subpath}`, filesystem, mode);
-	}
-
-	if (typeof packageJson?.main === "string" && packageJson.main.length > 0) {
-		const mainResolved = await resolvePath(
-			`${packageDir}/${packageJson.main}`,
-			filesystem,
-			mode,
-		);
-		if (mainResolved) {
-			return mainResolved;
-		}
-	}
-
-	return resolvePath(`${packageDir}/index`, filesystem, mode);
-}
-
-async function resolvePath(
-	basePath: string,
-	filesystem: VirtualFileSystem,
-	mode: "require" | "import",
-): Promise<string | null> {
-	return (
-		(await resolveAsFile(basePath, filesystem)) ??
-		resolveAsDirectory(basePath, filesystem, mode)
-	);
-}
-
-async function resolveAsFile(
-	basePath: string,
-	filesystem: VirtualFileSystem,
-): Promise<string | null> {
-	const normalized = normalizePath(basePath);
-	const candidates = [
-		normalized,
-		`${normalized}.js`,
-		`${normalized}.json`,
-		`${normalized}.mjs`,
-		`${normalized}.cjs`,
-	];
-	for (const candidate of candidates) {
-		try {
-			const stat = await filesystem.stat(candidate);
-			if (!stat.isDirectory) {
-				return realpathOrSelf(candidate, filesystem);
-			}
-		} catch {
-			// Try the next candidate.
-		}
-	}
-	return null;
-}
-
-async function resolveAsDirectory(
-	basePath: string,
-	filesystem: VirtualFileSystem,
-	mode: "require" | "import",
-): Promise<string | null> {
-	const dir = normalizePath(basePath);
-	try {
-		const stat = await filesystem.stat(dir);
-		if (!stat.isDirectory) {
-			return null;
-		}
-	} catch {
-		return null;
-	}
-
-	const packageJson = await readPackageJson(dir, filesystem);
-	if (packageJson && Object.hasOwn(packageJson, "exports")) {
-		const exportsTarget = resolveExportsTarget(packageJson.exports, ".", mode);
-		if (exportsTarget) {
-			const resolved = await resolvePath(
-				`${dir}/${exportsTarget}`,
-				filesystem,
-				mode,
-			);
-			if (resolved) {
-				return resolved;
-			}
-		}
-	}
-	if (typeof packageJson?.main === "string" && packageJson.main.length > 0) {
-		const mainResolved = await resolvePath(
-			`${dir}/${packageJson.main}`,
-			filesystem,
-			mode,
-		);
-		if (mainResolved) {
-			return mainResolved;
-		}
-	}
-	return resolveAsFile(`${dir}/index`, filesystem);
-}
-
-async function readPackageJson(
-	packageDir: string,
-	filesystem: VirtualFileSystem,
-): Promise<Record<string, unknown> | null> {
-	try {
-		const source = await filesystem.readTextFile(
-			normalizePath(`${packageDir}/package.json`),
-		);
-		const parsed = JSON.parse(source);
-		return parsed && typeof parsed === "object"
-			? (parsed as Record<string, unknown>)
-			: null;
-	} catch {
-		return null;
-	}
-}
-
-async function nearestPackageJsonType(
-	filePath: string,
-	filesystem: VirtualFileSystem,
-): Promise<string | null> {
-	for (const dir of ancestorDirs(dirname(filePath))) {
-		const packageJson = await readPackageJson(dir, filesystem);
-		if (packageJson && typeof packageJson.type === "string") {
-			return packageJson.type;
-		}
-	}
-	return null;
-}
-
-function resolveExportsTarget(
-	exportsField: unknown,
-	subpath: string,
-	mode: "require" | "import",
-): string | null {
-	const resolved = resolveExportsValue(exportsField, subpath, mode);
-	if (typeof resolved !== "string" || !resolved.startsWith("./")) {
-		return null;
-	}
-	return resolved.slice(2);
-}
-
-function resolveExportsValue(
-	value: unknown,
-	subpath: string,
-	mode: "require" | "import",
-): string | null {
-	if (typeof value === "string") {
-		return subpath === "." ? value : null;
-	}
-	if (Array.isArray(value)) {
-		for (const item of value) {
-			const resolved = resolveExportsValue(item, subpath, mode);
-			if (resolved) {
-				return resolved;
-			}
-		}
-		return null;
-	}
-	if (!value || typeof value !== "object") {
-		return null;
-	}
-
-	const entries = Object.entries(value as Record<string, unknown>);
-	const hasSubpathKeys = entries.some(
-		([key]) => key === "." || key.startsWith("./"),
-	);
-	if (hasSubpathKeys) {
-		const exact = (value as Record<string, unknown>)[subpath];
-		if (exact !== undefined) {
-			const resolved = resolveExportsValue(exact, ".", mode);
-			if (resolved) {
-				return resolved;
-			}
-		}
-		for (const [key, target] of entries) {
-			if (!key.includes("*")) {
-				continue;
-			}
-			const [prefix, suffix] = key.split("*", 2);
-			if (!prefix || suffix === undefined) {
-				continue;
-			}
-			if (subpath.startsWith(prefix) && subpath.endsWith(suffix)) {
-				const wildcard = subpath.slice(
-					prefix.length,
-					subpath.length - suffix.length,
-				);
-				const resolved = resolveExportsValue(target, ".", mode);
-				if (resolved) {
-					return resolved.replaceAll("*", wildcard);
-				}
-			}
-		}
-		return null;
-	}
-
-	const conditions =
-		mode === "import"
-			? ["import", "node", "module", "default", "require"]
-			: ["require", "node", "default", "import", "module"];
-	for (const condition of conditions) {
-		const target = (value as Record<string, unknown>)[condition];
-		if (target === undefined) {
-			continue;
-		}
-		const resolved = resolveExportsValue(target, subpath, mode);
-		if (resolved) {
-			return resolved;
-		}
-	}
-	return null;
-}
-
-function resolveImportsTarget(
-	importsField: unknown,
-	specifier: string,
-	mode: "require" | "import",
-): string | null {
-	if (typeof importsField === "string") {
-		return importsField;
-	}
-	if (Array.isArray(importsField)) {
-		for (const item of importsField) {
-			const resolved = resolveImportsTarget(item, specifier, mode);
-			if (resolved) {
-				return resolved;
-			}
-		}
-		return null;
-	}
-	if (!importsField || typeof importsField !== "object") {
-		return null;
-	}
-	const record = importsField as Record<string, unknown>;
-	if (Object.hasOwn(record, specifier)) {
-		return resolveExportsValue(record[specifier], ".", mode);
-	}
-	for (const [key, target] of Object.entries(record)) {
-		const wildcardIndex = key.indexOf("*");
-		if (wildcardIndex < 0) {
-			continue;
-		}
-		const prefix = key.slice(0, wildcardIndex);
-		const suffix = key.slice(wildcardIndex + 1);
-		if (specifier.startsWith(prefix) && specifier.endsWith(suffix)) {
-			const wildcard = specifier.slice(
-				prefix.length,
-				specifier.length - suffix.length,
-			);
-			const resolved = resolveExportsValue(target, ".", mode);
-			if (resolved) {
-				return resolved.replaceAll("*", wildcard);
-			}
-		}
-	}
-	return null;
-}
-
-export function isESM(code: string, filePath?: string): boolean {
-	if (filePath?.endsWith(".mjs")) return true;
-	// `.cjs` is explicitly CommonJS — never apply the ESM import transform (it would
-	// trip on a large bundle whose only "import" is dynamic `import()`, which is valid
-	// in CJS and is NOT an ESM module marker).
-	if (filePath?.endsWith(".cjs")) return false;
-	return /\b(import|export)\b/.test(code);
-}
-
-export function transformDynamicImport(code: string): string {
-	// Route dynamic `import(...)` through the executor's module loader
-	// (`__dynamicImport`, which resolves via require) instead of the browser's native
-	// dynamic import — the latter cannot fetch bare/`node:` specifiers (e.g.
-	// `import("node:fs")`) that a guest program's lazy loads use. Only rewrites the
-	// call form `import(` preceded by a non-identifier char; leaves `import.meta` and
-	// static `import ` statements untouched.
-	return code.replace(/(^|[^.\w$])import(\s*\()/g, "$1__dynamicImport$2");
-}
-
-export const POLYFILL_CODE_MAP: Record<string, string> = {
-	fs: "module.exports = globalThis._fsModule;",
-	"node:fs": "module.exports = globalThis._fsModule;",
-	"fs/promises":
-		"module.exports = globalThis._fsModule.promises || globalThis._fsModule;",
-	"node:fs/promises":
-		"module.exports = globalThis._fsModule.promises || globalThis._fsModule;",
-	util: BROWSER_UTIL_POLYFILL_CODE,
-	"node:util": "module.exports = require('util');",
-	"util/types": "module.exports = require('util').types;",
-	"node:util/types": "module.exports = require('util/types');",
-	buffer: BROWSER_BUFFER_POLYFILL_CODE,
-	"node:buffer": "module.exports = require('buffer');",
-	path: BROWSER_PATH_POLYFILL_CODE,
-	"node:path": "module.exports = require('path');",
-	console: "module.exports = globalThis.console;",
-	"node:console": "module.exports = require('console');",
-	process: "module.exports = globalThis.process;",
-	"node:process": "module.exports = globalThis.process;",
-	// node:module — createRequire returns the guest's kernel-backed require so guest
-	// programs (e.g. the pi ACP adapter) can build a require from import.meta.url.
-	module: `
-		const createRequire = () => globalThis.require;
-		const Module = { createRequire };
-		module.exports = { createRequire, Module, builtinModules: [] };
-		module.exports.default = module.exports;
-	`,
-	"node:module": "module.exports = require('module');",
-	// node:stream — a minimal but functional stream set. The ACP connection itself
-	// uses WHATWG Readable/WritableStream (worker globals); guest programs use these
-	// node streams for buffering (e.g. pi's bufferedStdin PassThrough). Readable.toWeb
-	// / Writable.toWeb bridge to the WHATWG streams the ACP codec consumes.
-	stream: `
-		class EventEmitterLike {
-			constructor() { this._listeners = Object.create(null); }
-			on(event, fn) { (this._listeners[event] = this._listeners[event] || []).push(fn); return this; }
-			addListener(event, fn) { return this.on(event, fn); }
-			once(event, fn) { const w = (...a) => { this.off(event, w); fn(...a); }; w._origin = fn; return this.on(event, w); }
-			off(event, fn) { if (this._listeners[event]) this._listeners[event] = this._listeners[event].filter((x) => x !== fn && x._origin !== fn); return this; }
-			removeListener(event, fn) { return this.off(event, fn); }
-			removeAllListeners(event) { if (event) delete this._listeners[event]; else this._listeners = Object.create(null); return this; }
-			emit(event, ...args) { const ls = (this._listeners[event] || []).slice(); for (const fn of ls) fn(...args); return ls.length > 0; }
-			listenerCount(event) { return (this._listeners[event] || []).length; }
-		}
-		class Readable extends EventEmitterLike {
-			constructor(options) { super(); this.readable = true; this._readableOptions = options || {}; if (this._readableOptions.read) this._read = this._readableOptions.read; }
-			resume() { this.emit("resume"); return this; }
-			pause() { this.paused = true; return this; }
-			setEncoding() { return this; }
-			read() { return null; }
-			push(chunk) { if (chunk == null) this.emit("end"); else this.emit("data", chunk); return true; }
-			pipe(dest) { this.on("data", (c) => dest.write && dest.write(c)); this.on("end", () => dest.end && dest.end()); return dest; }
-			destroy() { this.emit("close"); return this; }
-		}
-		Readable.toWeb = (stream) => new ReadableStream({ start(controller) {
-			stream.on("data", (chunk) => controller.enqueue(chunk instanceof Uint8Array ? chunk : new Uint8Array(chunk)));
-			stream.on("end", () => { try { controller.close(); } catch (e) {} });
-			stream.on("error", (err) => controller.error(err));
-		} });
-		class Writable extends EventEmitterLike {
-			constructor(options) { super(); this.writable = true; this._writableOptions = options || {}; if (this._writableOptions.write) this._writeImpl = this._writableOptions.write; }
-			write(chunk, encoding, cb) { if (typeof encoding === "function") { cb = encoding; encoding = undefined; } if (this._writeImpl) this._writeImpl(chunk, encoding, cb || (() => {})); else if (cb) cb(); this.emit("data", chunk); return true; }
-			end(chunk, encoding, cb) { const done = typeof chunk === "function" ? chunk : typeof encoding === "function" ? encoding : cb; if (chunk != null && typeof chunk !== "function") this.write(chunk); this.emit("finish"); this.emit("end"); if (done) done(); }
-			destroy() { this.emit("close"); return this; }
-		}
-		Writable.toWeb = (stream) => new WritableStream({ write(chunk) { return new Promise((resolve) => stream.write(chunk, undefined, () => resolve())); }, close() { stream.end && stream.end(); } });
-		class Duplex extends Readable { constructor(options) { super(options); this.writable = true; if (options && options.write) this._writeImpl = options.write; } write(chunk, encoding, cb) { if (typeof encoding === "function") { cb = encoding; } if (this._writeImpl) this._writeImpl(chunk, encoding, cb || (() => {})); else if (cb) cb(); return true; } end(chunk) { if (chunk != null) this.write(chunk); this.emit("finish"); this.emit("end"); } }
-		class Transform extends Duplex {}
-		class PassThrough extends Transform { write(chunk, encoding, cb) { if (typeof encoding === "function") { cb = encoding; } this.emit("data", chunk); if (cb) cb(); return true; } end(chunk) { if (chunk != null) this.emit("data", chunk); this.emit("end"); this.emit("finish"); } }
-		function finished(stream, optsOrCb, maybeCb) {
-			const cb = typeof optsOrCb === "function" ? optsOrCb : maybeCb;
-			if (stream && stream.on) { let done = false; const fire = (e) => { if (done) return; done = true; if (cb) cb(e || null); }; stream.on("end", () => fire()); stream.on("finish", () => fire()); stream.on("close", () => fire()); stream.on("error", (e) => fire(e)); }
-			return () => {};
-		}
-		function pipeline(...args) {
-			const cb = typeof args[args.length - 1] === "function" ? args.pop() : null;
-			const streams = args.flat();
-			for (let i = 0; i < streams.length - 1; i++) { if (streams[i] && streams[i].pipe) streams[i].pipe(streams[i + 1]); }
-			const last = streams[streams.length - 1];
-			if (last && last.on) { last.on("finish", () => cb && cb(null)); last.on("end", () => cb && cb(null)); last.on("error", (e) => cb && cb(e)); }
-			return last;
-		}
-		const Stream = EventEmitterLike;
-		Stream.Readable = Readable; Stream.Writable = Writable; Stream.Duplex = Duplex; Stream.Transform = Transform; Stream.PassThrough = PassThrough;
-		module.exports = { Stream, Readable, Writable, Duplex, Transform, PassThrough, finished, pipeline };
-		module.exports.promises = { finished: (s) => new Promise((res, rej) => finished(s, (e) => (e ? rej(e) : res()))), pipeline: (...a) => new Promise((res, rej) => pipeline(...a, (e) => (e ? rej(e) : res()))) };
-		module.exports.default = module.exports;
-	`,
-	"node:stream": "module.exports = require('stream');",
-	"stream/promises": "module.exports = require('stream').promises;",
-	"node:stream/promises": "module.exports = require('stream').promises;",
-	"stream/web":
-		"module.exports = { ReadableStream: globalThis.ReadableStream, WritableStream: globalThis.WritableStream, TransformStream: globalThis.TransformStream };",
-	"node:stream/web": "module.exports = require('stream/web');",
-	// node:constants — fs/os constant values guest programs reference (open flags, etc.).
-	constants: `
-		module.exports = {
-			O_RDONLY: 0, O_WRONLY: 1, O_RDWR: 2, O_CREAT: 64, O_EXCL: 128, O_NOCTTY: 256,
-			O_TRUNC: 512, O_APPEND: 1024, O_DIRECTORY: 65536, O_NOFOLLOW: 131072, O_SYNC: 1052672,
-			O_NONBLOCK: 2048, S_IFMT: 61440, S_IFREG: 32768, S_IFDIR: 16384, S_IFCHR: 8192,
-			S_IFLNK: 40960, S_IFIFO: 4096, S_IFSOCK: 49152, F_OK: 0, R_OK: 4, W_OK: 2, X_OK: 1,
-			COPYFILE_EXCL: 1, SIGINT: 2, SIGTERM: 15, SIGKILL: 9, SIGHUP: 1,
-		};
-		module.exports.default = module.exports;
-	`,
-	"node:constants": "module.exports = require('constants');",
-	// node:events — EventEmitter (a complete-enough implementation for guest libraries).
-	events: `
-		class EventEmitter {
-			constructor() { this._events = Object.create(null); this._max = 10; }
-			setMaxListeners(n) { this._max = n; return this; }
-			getMaxListeners() { return this._max; }
-			on(type, fn) { (this._events[type] = this._events[type] || []).push(fn); this.emit("newListener", type, fn); return this; }
-			addListener(type, fn) { return this.on(type, fn); }
-			prependListener(type, fn) { (this._events[type] = this._events[type] || []).unshift(fn); return this; }
-			once(type, fn) { const w = (...a) => { this.off(type, w); fn(...a); }; w.listener = fn; return this.on(type, w); }
-			prependOnceListener(type, fn) { const w = (...a) => { this.off(type, w); fn(...a); }; w.listener = fn; return this.prependListener(type, w); }
-			off(type, fn) { const l = this._events[type]; if (l) { this._events[type] = l.filter((x) => x !== fn && x.listener !== fn); if (this._events[type].length === 0) delete this._events[type]; } return this; }
-			removeListener(type, fn) { return this.off(type, fn); }
-			removeAllListeners(type) { if (type) delete this._events[type]; else this._events = Object.create(null); return this; }
-			emit(type, ...args) { const l = this._events[type]; if (!l || l.length === 0) { if (type === "error") throw args[0] instanceof Error ? args[0] : new Error("Unhandled error"); return false; } for (const fn of l.slice()) fn.apply(this, args); return true; }
-			listeners(type) { return (this._events[type] || []).slice(); }
-			rawListeners(type) { return (this._events[type] || []).slice(); }
-			listenerCount(type) { return (this._events[type] || []).length; }
-			eventNames() { return Object.keys(this._events); }
-		}
-		EventEmitter.EventEmitter = EventEmitter;
-		EventEmitter.once = (emitter, name) => new Promise((resolve, reject) => {
-			const ok = (...a) => { emitter.off("error", err); resolve(a); };
-			const err = (e) => { emitter.off(name, ok); reject(e); };
-			emitter.once(name, ok); emitter.once("error", err);
-		});
-		EventEmitter.defaultMaxListeners = 10;
-		module.exports = EventEmitter;
-		module.exports.default = EventEmitter;
-	`,
-	"node:events": "module.exports = require('events');",
-	// node:assert — the common assertion surface.
-	assert: `
-		function AssertionError(message) { const e = new Error(message); e.name = "AssertionError"; return e; }
-		function assert(value, message) { if (!value) throw AssertionError(message || "assertion failed"); }
-		assert.ok = assert;
-		assert.equal = (a, b, m) => { if (a != b) throw AssertionError(m || (a + " != " + b)); };
-		assert.strictEqual = (a, b, m) => { if (a !== b) throw AssertionError(m || (a + " !== " + b)); };
-		assert.notEqual = (a, b, m) => { if (a == b) throw AssertionError(m); };
-		assert.notStrictEqual = (a, b, m) => { if (a === b) throw AssertionError(m); };
-		assert.deepEqual = (a, b, m) => { if (JSON.stringify(a) !== JSON.stringify(b)) throw AssertionError(m); };
-		assert.deepStrictEqual = assert.deepEqual;
-		assert.fail = (m) => { throw AssertionError(m || "failed"); };
-		assert.throws = (fn, m) => { try { fn(); } catch (e) { return; } throw AssertionError(m || "missing expected exception"); };
-		assert.AssertionError = AssertionError;
-		module.exports = assert;
-		module.exports.default = assert;
-	`,
-	"node:assert": "module.exports = require('assert');",
-	// node:url — WHATWG URL globals + the legacy parse/format surface.
-	url: `
-		module.exports = {
-			URL: globalThis.URL,
-			URLSearchParams: globalThis.URLSearchParams,
-			parse(input) { try { const u = new URL(input); return { href: u.href, protocol: u.protocol, host: u.host, hostname: u.hostname, port: u.port, pathname: u.pathname, search: u.search, hash: u.hash, query: u.search.replace(/^\\?/, ""), path: u.pathname + u.search }; } catch (e) { return { href: input, pathname: input }; } },
-			format(u) { if (typeof u === "string") return u; const proto = u.protocol ? (u.protocol.endsWith(":") ? u.protocol : u.protocol + ":") : ""; return proto + "//" + (u.host || u.hostname || "") + (u.pathname || "") + (u.search || (u.query ? "?" + u.query : "")) + (u.hash || ""); },
-			resolve(from, to) { try { return new URL(to, from).href; } catch (e) { return to; } },
-			fileURLToPath(u) { const s = typeof u === "string" ? u : u.href; return s.replace(/^file:\\/\\//, ""); },
-			pathToFileURL(p) { return new URL("file://" + (p.startsWith("/") ? p : "/" + p)); },
-			domainToASCII: (d) => d,
-			domainToUnicode: (d) => d,
-		};
-		module.exports.default = module.exports;
-	`,
-	"node:url": "module.exports = require('url');",
-	// node:string_decoder — UTF-8 incremental decoder (TextDecoder-backed).
-	string_decoder: `
-		class StringDecoder {
-			constructor(encoding) { this.encoding = encoding || "utf8"; this._decoder = new TextDecoder(this.encoding === "utf8" ? "utf-8" : this.encoding); }
-			write(buf) { const bytes = buf instanceof Uint8Array ? buf : new Uint8Array(buf); return this._decoder.decode(bytes, { stream: true }); }
-			end(buf) { const head = buf ? this.write(buf) : ""; return head + this._decoder.decode(); }
-		}
-		module.exports = { StringDecoder };
-		module.exports.default = module.exports;
-	`,
-	"node:string_decoder": "module.exports = require('string_decoder');",
-	// node:querystring — legacy query parsing/serialization.
-	querystring: `
-		module.exports = {
-			parse(str) { const out = Object.create(null); if (!str) return out; for (const pair of String(str).split("&")) { if (!pair) continue; const i = pair.indexOf("="); const k = decodeURIComponent(i < 0 ? pair : pair.slice(0, i)); const v = i < 0 ? "" : decodeURIComponent(pair.slice(i + 1)); if (k in out) { if (Array.isArray(out[k])) out[k].push(v); else out[k] = [out[k], v]; } else out[k] = v; } return out; },
-			stringify(obj) { if (!obj) return ""; const parts = []; for (const k of Object.keys(obj)) { const v = obj[k]; if (Array.isArray(v)) for (const item of v) parts.push(encodeURIComponent(k) + "=" + encodeURIComponent(item)); else parts.push(encodeURIComponent(k) + "=" + encodeURIComponent(v)); } return parts.join("&"); },
-			escape: encodeURIComponent, unescape: decodeURIComponent,
-		};
-		module.exports.default = module.exports;
-	`,
-	"node:querystring": "module.exports = require('querystring');",
-	// node:tty — reflects ExecOptions.stdioPty for stdio fds.
-	tty: `
-		const ttyState = () => globalThis.__agentOSTtyState;
-		class ReadStream {
-			constructor(fd) { this.fd = fd; this.isTTY = !!ttyState()?.isatty?.(fd); }
-			setRawMode(mode) { if (this.fd === 0 && globalThis.process?.stdin?.setRawMode) globalThis.process.stdin.setRawMode(mode); return this; }
-		}
-		class WriteStream {
-			constructor(fd) { this.fd = fd; this.isTTY = !!ttyState()?.isatty?.(fd); }
-			get columns() { return ttyState()?.columns?.() ?? 80; }
-			get rows() { return ttyState()?.rows?.() ?? 24; }
-		}
-		module.exports = {
-			isatty: (fd) => !!ttyState()?.isatty?.(fd),
-			ReadStream,
-			WriteStream,
-		};
-		module.exports.default = module.exports;
-	`,
-	"node:tty": "module.exports = require('tty');",
-	// node:readline — stub interface (in ACP mode stdin is the protocol, not a REPL).
-	readline: `
-		module.exports = {
-			createInterface: () => { const rl = { on: () => rl, once: () => rl, off: () => rl, removeListener: () => rl, removeAllListeners: () => rl, emit: () => false, close: () => {}, question: (q, cb) => { if (typeof cb === "function") cb(""); }, prompt: () => {}, write: () => {}, pause: () => rl, resume: () => rl, setPrompt: () => {}, [Symbol.asyncIterator]: async function* () {} }; return rl; },
-			clearLine: () => true, clearScreenDown: () => true, cursorTo: () => true, moveCursor: () => true, emitKeypressEvents: () => {},
-		};
-		module.exports.default = module.exports;
-	`,
-	"node:readline": "module.exports = require('readline');",
-	"readline/promises": "module.exports = require('readline');",
-	"node:readline/promises": "module.exports = require('readline');",
-	// node:timers — the timer globals.
-	timers: `
-		module.exports = { setTimeout: globalThis.setTimeout.bind(globalThis), clearTimeout: globalThis.clearTimeout.bind(globalThis), setInterval: globalThis.setInterval.bind(globalThis), clearInterval: globalThis.clearInterval.bind(globalThis), setImmediate: globalThis.setImmediate, clearImmediate: globalThis.clearImmediate };
-		module.exports.default = module.exports;
-	`,
-	"node:timers": "module.exports = require('timers');",
-	"timers/promises": `
-		module.exports = { setTimeout: (ms, value) => new Promise((r) => globalThis.setTimeout(() => r(value), ms)), setImmediate: (value) => Promise.resolve(value), setInterval: async function* () {} };
-		module.exports.default = module.exports;
-	`,
-	"node:timers/promises": "module.exports = require('timers/promises');",
-	// node:diagnostics_channel / node:inspector — no-op observability stubs.
-	diagnostics_channel: `
-		module.exports = { channel: () => ({ hasSubscribers: false, publish() {}, subscribe() {}, unsubscribe() {} }), hasSubscribers: () => false, subscribe() {}, unsubscribe() {} };
-		module.exports.default = module.exports;
-	`,
-	"node:diagnostics_channel":
-		"module.exports = require('diagnostics_channel');",
-	inspector: `module.exports = { open() {}, close() {}, url: () => undefined, Session: class {} }; module.exports.default = module.exports;`,
-	"node:inspector": "module.exports = require('inspector');",
-	// node:v8 — heap stats + structured serialize (JSON fallback) guest libs may probe.
-	v8: `
-		module.exports = {
-			serialize: (v) => new TextEncoder().encode(JSON.stringify(v)),
-			deserialize: (b) => JSON.parse(new TextDecoder().decode(b)),
-			getHeapStatistics: () => ({ total_heap_size: 0, used_heap_size: 0, heap_size_limit: 0 }),
-			getHeapSpaceStatistics: () => [],
-			setFlagsFromString: () => {},
-		};
-		module.exports.default = module.exports;
-	`,
-	"node:v8": "module.exports = require('v8');",
-	// node:async_hooks — a working single-threaded AsyncLocalStorage (synchronous store
-	// stack; context propagation across awaits is best-effort) + no-op AsyncResource.
-	async_hooks: `
-		class AsyncLocalStorage {
-			constructor() { this._stack = []; }
-			run(store, fn, ...args) { this._stack.push(store); try { return fn(...args); } finally { this._stack.pop(); } }
-			getStore() { return this._stack.length ? this._stack[this._stack.length - 1] : undefined; }
-			enterWith(store) { this._stack.push(store); }
-			exit(fn, ...args) { const saved = this._stack; this._stack = []; try { return fn(...args); } finally { this._stack = saved; } }
-			disable() { this._stack = []; }
-		}
-		class AsyncResource { constructor() {} runInAsyncScope(fn, thisArg, ...args) { return fn.apply(thisArg, args); } bind(fn) { return fn; } emitDestroy() { return this; } }
-		module.exports = { AsyncLocalStorage, AsyncResource, createHook: () => ({ enable() {}, disable() {} }), executionAsyncId: () => 0, triggerAsyncId: () => 0 };
-		module.exports.default = module.exports;
-	`,
-	"node:async_hooks": "module.exports = require('async_hooks');",
-	// node:perf_hooks — the performance global + a no-op observer.
-	perf_hooks: `
-		module.exports = {
-			performance: globalThis.performance,
-			PerformanceObserver: class { constructor() {} observe() {} disconnect() {} },
-			monitorEventLoopDelay: () => ({ enable() {}, disable() {}, reset() {} }),
-		};
-		module.exports.default = module.exports;
-	`,
-	"node:perf_hooks": "module.exports = require('perf_hooks');",
-	// node:zlib — present but unsupported; throws only if actually used (often imported,
-	// not exercised, on the guest happy path).
-	zlib: `
-		const unsupported = () => { throw new Error("zlib is not supported in the browser runtime"); };
-		module.exports = { gzip: unsupported, gunzip: unsupported, gzipSync: unsupported, gunzipSync: unsupported, deflate: unsupported, inflate: unsupported, deflateSync: unsupported, inflateSync: unsupported, brotliCompressSync: unsupported, brotliDecompressSync: unsupported, createGzip: unsupported, createGunzip: unsupported, constants: {} };
-		module.exports.default = module.exports;
-	`,
-	"node:zlib": "module.exports = require('zlib');",
-	// node:http / node:https — guest HTTP belongs to global fetch (kernel-brokered);
-	// the legacy module surface is a stub that errors only if actually used.
-	http: `
-		const unsupported = () => { throw new Error("node:http is not supported; use global fetch"); };
-		module.exports = { request: unsupported, get: unsupported, createServer: unsupported, Agent: class {}, globalAgent: {}, STATUS_CODES: {}, METHODS: [] };
-		module.exports.default = module.exports;
-	`,
-	"node:http": "module.exports = require('http');",
-	https: `module.exports = require('http');`,
-	"node:https": "module.exports = require('http');",
-	// node:net — stub (kernel sockets are reached via the converged net bridge, not this).
-	net: `
-		const unsupported = () => { throw new Error("node:net is not supported in this runtime"); };
-		module.exports = { connect: unsupported, createConnection: unsupported, createServer: unsupported, Socket: class {}, isIP: () => 0, isIPv4: () => false, isIPv6: () => false };
-		module.exports.default = module.exports;
-	`,
-	"node:net": "module.exports = require('net');",
-	// node:vm — minimal: run code in the guest global scope.
-	vm: `
-		module.exports = {
-			runInThisContext: (code) => (0, eval)(code),
-			runInNewContext: (code) => (0, eval)(code),
-			createContext: (o) => o || {},
-			Script: class { constructor(code) { this.code = code; } runInThisContext() { return (0, eval)(this.code); } runInNewContext() { return (0, eval)(this.code); } },
-		};
-		module.exports.default = module.exports;
-	`,
-	"node:vm": "module.exports = require('vm');",
-	// node:worker_threads — single-threaded: main thread, no spawning.
-	worker_threads: `
-		module.exports = { isMainThread: true, threadId: 0, parentPort: null, workerData: null, Worker: class { constructor() { throw new Error("worker_threads is not supported in this runtime"); } }, MessageChannel: class {}, MessagePort: class {} };
-		module.exports.default = module.exports;
-	`,
-	"node:worker_threads": "module.exports = require('worker_threads');",
-	child_process: `
-		const callSync = (ref, ...args) => {
-			if (typeof ref === "function") return ref(...args);
-			if (ref && typeof ref.applySync === "function") return ref.applySync(undefined, args);
-			if (ref && typeof ref.applySyncPromise === "function") return ref.applySyncPromise(undefined, args);
-			throw new Error("child_process bridge is not configured");
-		};
-		const encodeBytes = globalThis.__agentOSEncoding.encodeBytesPayload;
-		const decodeBytes = globalThis.__agentOSEncoding.decodeBytesPayload;
-		const text = (bytes) => new TextDecoder().decode(bytes);
-		const bufferLike = (value) => {
-			const bytes = decodeBytes(value);
-			bytes.toString = () => text(bytes);
-			return bytes;
-		};
-		class Emitter {
-			constructor() {
-				this._listeners = new Map();
-			}
-			on(event, listener) {
-				const listeners = this._listeners.get(event) || [];
-				listeners.push(listener);
-				this._listeners.set(event, listeners);
-				return this;
-			}
-			once(event, listener) {
-				const wrapped = (...args) => {
-					this.off(event, wrapped);
-					listener(...args);
-				};
-				return this.on(event, wrapped);
-			}
-			off(event, listener) {
-				const listeners = this._listeners.get(event) || [];
-				this._listeners.set(event, listeners.filter((entry) => entry !== listener));
-				return this;
-			}
-			removeListener(event, listener) {
-				return this.off(event, listener);
-			}
-			emit(event, ...args) {
-				const listeners = this._listeners.get(event) || [];
-				for (const listener of [...listeners]) listener(...args);
-				return listeners.length > 0;
-			}
-		}
-		class ChildProcess extends Emitter {
-			constructor(sessionId) {
-				super();
-				this.pid = Number(sessionId) || -1;
-				this.exitCode = null;
-				this.signalCode = null;
-				this.killed = false;
-				this.stdout = new Emitter();
-				this.stderr = new Emitter();
-				this.stdin = {
-					write: (data) => {
-						callSync(globalThis._childProcessStdinWrite, sessionId, typeof data === "string" ? new TextEncoder().encode(data) : data);
-						return true;
-					},
-					end: (data) => {
-						if (data != null) this.stdin.write(data);
-						callSync(globalThis._childProcessStdinClose, sessionId);
-					},
-				};
-			}
-		}
-		const normalizeArgs = (args, options) => {
-			if (Array.isArray(args)) return { args, options: options || {} };
-			return { args: [], options: args || {} };
-		};
-		const signalNumbers = ${JSON.stringify(PROCESS_SIGNAL_NUMBERS)};
-		const normalizeSignal = (signal) => {
-			if (signal === undefined || signal === null) return 15;
-			if (typeof signal === "number" && Number.isFinite(signal)) {
-				const numeric = Math.trunc(signal);
-				if (numeric >= 0 && numeric <= 31) return numeric;
-				throw unknownSignalError(signal);
-			}
-			const raw = String(signal).trim();
-			if (/^[+-]?\\d+$/.test(raw)) {
-				const numeric = Number.parseInt(raw, 10);
-				if (numeric >= 0 && numeric <= 31) return numeric;
-				throw unknownSignalError(signal);
-			}
-			const upper = raw.toUpperCase();
-			const signalName = upper.startsWith("SIG") ? upper : "SIG" + upper;
-			const numeric = signalNumbers[signalName];
-			if (numeric !== undefined) return numeric;
-			throw unknownSignalError(signal);
-		};
-		const unknownSignalError = (signal) => {
-			const error = new TypeError("Unknown signal: " + String(signal));
-			error.code = "ERR_UNKNOWN_SIGNAL";
-			return error;
-		};
-		function spawn(command, argsOrOptions, maybeOptions) {
-			const { args, options } = normalizeArgs(argsOrOptions, maybeOptions);
-			let sessionId;
-			try {
-				sessionId = callSync(
-					globalThis._childProcessSpawnStart,
-					{
-						command: String(command),
-						args: args.map(String),
-						options: {
-							cwd: options.cwd || (globalThis.process && globalThis.process.cwd ? globalThis.process.cwd() : "/"),
-							env: options.env,
-						},
-					},
-				);
-			} catch (error) {
-				const child = new ChildProcess(-1);
-				queueMicrotask(() => child.emit("error", error));
-				return child;
-			}
-			const child = new ChildProcess(sessionId);
-			child.kill = (signal) => {
-				callSync(globalThis._childProcessKill, sessionId, normalizeSignal(signal));
-				child.killed = true;
-				return true;
-			};
-			const poll = () => {
-				const event = callSync(globalThis._childProcessPoll, sessionId, 0);
-				if (!event) {
-					setTimeout(poll, 0);
-					return;
-				}
-				if (event.type === "stdout") {
-					child.stdout.emit("data", bufferLike(event.data));
-					setTimeout(poll, 0);
-					return;
-				}
-				if (event.type === "stderr") {
-					child.stderr.emit("data", bufferLike(event.data));
-					setTimeout(poll, 0);
-					return;
-				}
-				if (event.type === "exit") {
-					child.exitCode = event.exitCode;
-					child.signalCode = event.signal;
-					child.emit("exit", event.exitCode, event.signal);
-					child.emit("close", event.exitCode, event.signal);
-				}
-			};
-			queueMicrotask(() => {
-				child.emit("spawn");
-				poll();
-			});
-			return child;
-		}
-		function spawnSync(command, argsOrOptions, maybeOptions) {
-			const { args, options } = normalizeArgs(argsOrOptions, maybeOptions);
-			try {
-				const raw = callSync(
-					globalThis._childProcessSpawnSync,
-					{
-						command: String(command),
-						args: args.map(String),
-						options: {
-							cwd: options.cwd || (globalThis.process && globalThis.process.cwd ? globalThis.process.cwd() : "/"),
-							env: options.env,
-							input: encodeBytes(options.input),
-						},
-					},
-				);
-				const result = typeof raw === "string" ? JSON.parse(raw) : raw;
-				const stdout = options.encoding === "utf8" || options.encoding === "utf-8" ? result.stdout : new TextEncoder().encode(result.stdout || "");
-				const stderr = options.encoding === "utf8" || options.encoding === "utf-8" ? result.stderr : new TextEncoder().encode(result.stderr || "");
-				return {
-					pid: -1,
-					output: [null, stdout, stderr],
-					stdout,
-					stderr,
-					status: result.code,
-					signal: null,
-					error: undefined,
-				};
-			} catch (error) {
-				const message = error instanceof Error ? error.message : String(error);
-				const stderr = options.encoding === "utf8" || options.encoding === "utf-8" ? message : new TextEncoder().encode(message);
-				return {
-					pid: -1,
-					output: [null, "", stderr],
-					stdout: options.encoding === "utf8" || options.encoding === "utf-8" ? "" : new Uint8Array(0),
-					stderr,
-					status: 1,
-					signal: null,
-					error,
-				};
-			}
-		}
-		module.exports = { spawn, spawnSync, default: { spawn, spawnSync } };
-	`,
-	"node:child_process": "module.exports = require('child_process');",
-	dns: `
-		const callAsync = (ref, ...args) => {
-			if (typeof ref === "function") return Promise.resolve(ref(...args));
-			if (ref && typeof ref.apply === "function") return ref.apply(undefined, args);
-			throw new Error("dns bridge is not configured");
-		};
-		const normalizeLookup = (hostname, options, callback) => {
-			let done = callback;
-			let normalized = {};
-			if (typeof options === "function") {
-				done = options;
-			} else if (typeof options === "number") {
-				normalized.family = options;
-			} else if (options && typeof options === "object") {
-				normalized = { ...options };
-			}
-			const family = normalized.family === 4 || normalized.family === 6 ? normalized.family : undefined;
-			return {
-				callback: done,
-				options: {
-					hostname: String(hostname),
-					family,
-					all: normalized.all === true,
-				},
-			};
-		};
-		const parseLookupRecords = (resultJson) => {
-			let parsed = resultJson;
-			if (typeof parsed === "string") parsed = JSON.parse(parsed);
-			if (parsed && typeof parsed === "object" && Array.isArray(parsed.records)) parsed = parsed.records;
-			else if (parsed && typeof parsed === "object" && typeof parsed.address === "string") parsed = [parsed];
-			if (!Array.isArray(parsed)) return [];
-			return parsed
-				.filter((record) => record && typeof record.address === "string")
-				.map((record) => ({ address: record.address, family: record.family === 6 ? 6 : 4 }));
-		};
-		const lookupRecords = (hostname, options, callback) => {
-			const invocation = normalizeLookup(hostname, options, callback);
-			return callAsync(globalThis._networkDnsLookupRaw, invocation.options)
-				.then(parseLookupRecords)
-				.then((records) => {
-					if (typeof invocation.callback === "function") {
-						if (invocation.options.all) invocation.callback(null, records);
-						else {
-							const first = records[0] || { address: null, family: invocation.options.family || 0 };
-							invocation.callback(null, first.address, first.family);
-						}
-					}
-					return invocation.options.all ? records : records[0] || { address: "", family: invocation.options.family || 0 };
-				})
-				.catch((error) => {
-					if (typeof invocation.callback === "function") {
-						invocation.callback(error);
-						return undefined;
-					}
-					throw error;
-				});
-		};
-		const promises = { lookup: (hostname, options) => lookupRecords(hostname, options) };
-		function lookup(hostname, options, callback) {
-			lookupRecords(hostname, options, callback);
-		}
-		module.exports = { lookup, promises, default: { lookup, promises } };
-	`,
-	"dns/promises": "module.exports = require('dns').promises;",
-	dgram: `
-		const encoder = new TextEncoder();
-		const decoder = new TextDecoder();
-		const callSync = (ref, ...args) => {
-			if (typeof ref === "function") return ref(...args);
-			if (ref && typeof ref.applySync === "function") return ref.applySync(undefined, args);
-			if (ref && typeof ref.applySyncPromise === "function") return ref.applySyncPromise(undefined, args);
-			throw new Error("dgram bridge is not configured");
-		};
-		const parseResult = (value) => {
-			if (typeof value !== "string") return value;
-			try { return JSON.parse(value); } catch { return value; }
-		};
-		const listenersFor = (map, event) => map.get(event) || [];
-		const normalizeType = (optionsOrType) => {
-			const type = typeof optionsOrType === "string" ? optionsOrType : optionsOrType && optionsOrType.type;
-			if (type === "udp6") return "udp6";
-			if (type === "udp4" || type === undefined) return "udp4";
-			const error = new TypeError("Bad socket type specified. Valid types are: udp4, udp6");
-			error.code = "ERR_SOCKET_BAD_TYPE";
-			throw error;
-		};
-		const normalizePort = (port) => {
-			const value = Number(port);
-			if (!Number.isInteger(value) || value < 0 || value > 65535) {
-				const error = new RangeError("Port should be >= 0 and < 65536");
-				error.code = "ERR_SOCKET_BAD_PORT";
-				throw error;
-			}
-			return value;
-		};
-		const normalizeMessage = (value) => {
-			if (typeof value === "string") return encoder.encode(value);
-			if (ArrayBuffer.isView(value)) return new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
-			if (value instanceof ArrayBuffer) return new Uint8Array(value);
-			if (Array.isArray(value)) {
-				const parts = value.map(normalizeMessage);
-				const total = parts.reduce((sum, part) => sum + part.byteLength, 0);
-				const output = new Uint8Array(total);
-				let offset = 0;
-				for (const part of parts) {
-					output.set(part, offset);
-					offset += part.byteLength;
-				}
-				return output;
-			}
-			return encoder.encode(String(value ?? ""));
-		};
-		const messageBytes = (value) => {
-			let bytes;
-			if (value && typeof value === "object" && value.__agentOSType === "bytes" && typeof value.base64 === "string") {
-				bytes = globalThis.__agentOSEncoding.base64ToBytes(value.base64);
-			} else {
-				bytes = normalizeMessage(value);
-			}
-			Object.defineProperty(bytes, "toString", {
-				value() { return decoder.decode(bytes); },
-				configurable: true,
-			});
-			return bytes;
-		};
-		class Socket {
-			constructor(optionsOrType, callback) {
-				this._type = normalizeType(optionsOrType);
-				this._listeners = new Map();
-				this._onceListeners = new Map();
-				this._closed = false;
-				this._bound = false;
-				this._polling = false;
-				const created = parseResult(callSync(globalThis._dgramSocketCreateRaw, { type: this._type }));
-				this._socketId = String(created && created.socketId !== undefined ? created.socketId : created);
-				if (typeof callback === "function") this.on("message", callback);
-			}
-			on(event, listener) {
-				const list = listenersFor(this._listeners, event).slice();
-				list.push(listener);
-				this._listeners.set(event, list);
-				return this;
-			}
-			addListener(event, listener) { return this.on(event, listener); }
-			once(event, listener) {
-				const list = listenersFor(this._onceListeners, event).slice();
-				list.push(listener);
-				this._onceListeners.set(event, list);
-				return this;
-			}
-			off(event, listener) { return this.removeListener(event, listener); }
-			removeListener(event, listener) {
-				this._listeners.set(event, listenersFor(this._listeners, event).filter((entry) => entry !== listener));
-				this._onceListeners.set(event, listenersFor(this._onceListeners, event).filter((entry) => entry !== listener));
-				return this;
-			}
-			_emit(event, ...args) {
-				for (const listener of listenersFor(this._listeners, event).slice()) listener(...args);
-				const once = listenersFor(this._onceListeners, event).slice();
-				this._onceListeners.delete(event);
-				for (const listener of once) listener(...args);
-				return once.length > 0 || listenersFor(this._listeners, event).length > 0;
-			}
-			emit(event, ...args) { return this._emit(event, ...args); }
-			bind(...args) {
-				let port = 0;
-				let address = this._type === "udp6" ? "::" : "0.0.0.0";
-				let callback;
-				if (typeof args[0] === "object" && args[0] !== null) {
-					port = normalizePort(args[0].port ?? 0);
-					address = String(args[0].address ?? address);
-					callback = args[1];
-				} else {
-					if (typeof args[0] === "function") callback = args[0];
-					else {
-						port = normalizePort(args[0] ?? 0);
-						if (typeof args[1] === "string") address = args[1];
-						callback = typeof args[1] === "function" ? args[1] : args[2];
-					}
-				}
-				try {
-					parseResult(callSync(globalThis._dgramSocketBindRaw, this._socketId, { port, address }));
-					this._bound = true;
-					queueMicrotask(() => {
-						this._emit("listening");
-						if (typeof callback === "function") callback.call(this);
-						this._poll();
-					});
-				} catch (error) {
-					queueMicrotask(() => this._emit("error", error));
-				}
-				return this;
-			}
-			address() {
-				return parseResult(callSync(globalThis._dgramSocketAddressRaw, this._socketId));
-			}
-			send(message, ...args) {
-				let offset = 0;
-				let length;
-				let port;
-				let address;
-				let callback;
-				if (typeof args[0] === "number" && typeof args[1] === "number" && typeof args[2] === "number") {
-					offset = args[0];
-					length = args[1];
-					port = args[2];
-					address = typeof args[3] === "string" ? args[3] : undefined;
-					callback = typeof args[3] === "function" ? args[3] : args[4];
-				} else {
-					port = args[0];
-					address = typeof args[1] === "string" ? args[1] : undefined;
-					callback = typeof args[1] === "function" ? args[1] : args[2];
-				}
-				const full = normalizeMessage(message);
-				const data = length === undefined ? full : full.subarray(offset, offset + length);
-				try {
-					const result = parseResult(callSync(globalThis._dgramSocketSendRaw, this._socketId, data, {
-						port: normalizePort(port),
-						address: address || (this._type === "udp6" ? "::1" : "127.0.0.1"),
-					}));
-					if (typeof callback === "function") queueMicrotask(() => callback(null, result && typeof result.bytes === "number" ? result.bytes : data.length));
-				} catch (error) {
-					if (typeof callback === "function") queueMicrotask(() => callback(error));
-					else queueMicrotask(() => this._emit("error", error));
-				}
-			}
-			_poll() {
-				if (this._closed || !this._bound || this._polling) return;
-				this._polling = true;
-				try {
-					const event = parseResult(callSync(globalThis._dgramSocketRecvRaw, this._socketId, 10));
-					if (event && event.type === "message") {
-						const message = messageBytes({ __agentOSType: "bytes", base64: String(event.data || "") });
-						this._emit("message", message, {
-							address: event.remoteAddress,
-							port: event.remotePort,
-							family: event.remoteFamily || (String(event.remoteAddress).includes(":") ? "IPv6" : "IPv4"),
-							size: message.length,
-						});
-					}
-				} catch (error) {
-					this._emit("error", error);
-				} finally {
-					this._polling = false;
-				}
-				if (!this._closed && this._bound) setTimeout(() => this._poll(), 10);
-			}
-			close(callback) {
-				if (typeof callback === "function") this.once("close", callback);
-				if (this._closed) return this;
-				this._closed = true;
-				callSync(globalThis._dgramSocketCloseRaw, this._socketId);
-				queueMicrotask(() => this._emit("close"));
-				return this;
-			}
-			ref() { return this; }
-			unref() { return this; }
-			setRecvBufferSize(size) { callSync(globalThis._dgramSocketSetBufferSizeRaw, this._socketId, "recv", Number(size)); }
-			setSendBufferSize(size) { callSync(globalThis._dgramSocketSetBufferSizeRaw, this._socketId, "send", Number(size)); }
-			getRecvBufferSize() { return Number(callSync(globalThis._dgramSocketGetBufferSizeRaw, this._socketId, "recv")); }
-			getSendBufferSize() { return Number(callSync(globalThis._dgramSocketGetBufferSizeRaw, this._socketId, "send")); }
-		}
-		function createSocket(optionsOrType, callback) {
-			return new Socket(optionsOrType, callback);
-		}
-		module.exports = { Socket, createSocket, default: { Socket, createSocket } };
-	`,
-	"node:dgram": "module.exports = require('dgram');",
-	crypto: `
-		const callSync = (ref, ...args) => {
-			if (typeof ref === "function") return ref(...args);
-			if (ref && typeof ref.applySync === "function") return ref.applySync(undefined, args);
-			if (ref && typeof ref.applySyncPromise === "function") return ref.applySyncPromise(undefined, args);
-			throw new Error("crypto bridge is not configured");
-		};
-		const encoder = new TextEncoder();
-		const decoder = new TextDecoder();
-		const toBytes = globalThis.__agentOSEncoding.toBytes;
-		const concat = (chunks) => {
-			const total = chunks.reduce((sum, chunk) => sum + chunk.byteLength, 0);
-			const out = new Uint8Array(total);
-			let offset = 0;
-			for (const chunk of chunks) {
-				out.set(chunk, offset);
-				offset += chunk.byteLength;
-			}
-			return out;
-		};
-		const toHex = (bytes) => Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
-		const SUPPORTED_CIPHERS = ["aes-128-cbc", "aes-128-ctr", "aes-128-gcm", "aes-192-cbc", "aes-192-ctr", "aes-192-gcm", "aes-256-cbc", "aes-256-ctr", "aes-256-gcm", "aes128", "aes192", "aes256"];
-		const SUPPORTED_CURVES = ["prime256v1", "secp256k1", "secp384r1", "secp521r1"];
-		const toBase64 = globalThis.__agentOSEncoding.bytesToBase64;
-		const encodeOutput = (bytes, encoding) => {
-			if (!encoding) return makeBuffer(bytes);
-			if (encoding === "hex") return toHex(bytes);
-			if (encoding === "base64") return toBase64(bytes);
-			if (encoding === "utf8" || encoding === "utf-8") return decoder.decode(bytes);
-			throw new Error("Unsupported crypto output encoding: " + encoding);
-		};
-		const makeBuffer = (bytes) => {
-			if (typeof Buffer === "function") return Buffer.from(bytes);
-			const out = new Uint8Array(bytes);
-			out.toString = (encoding = "utf8") => encodeOutput(out, encoding);
-			out.equals = (other) => {
-				const rhs = toBytes(other);
-				if (rhs.byteLength !== out.byteLength) return false;
-				for (let i = 0; i < out.byteLength; i += 1) {
-					if (out[i] !== rhs[i]) return false;
-				}
-				return true;
-			};
-			return out;
-		};
-		class Hash {
-			constructor(algorithm) {
-				this.algorithm = String(algorithm);
-				this.chunks = [];
-			}
-			update(data, inputEncoding) {
-				this.chunks.push(toBytes(data, inputEncoding));
-				return this;
-			}
-			digest(encoding) {
-				const bytes = callSync(globalThis._cryptoHashDigest, this.algorithm, concat(this.chunks));
-				return encodeOutput(bytes, encoding);
-			}
-		}
-		class Hmac {
-			constructor(algorithm, key) {
-				this.algorithm = String(algorithm);
-				this.key = toBytes(key);
-				this.chunks = [];
-			}
-			update(data, inputEncoding) {
-				this.chunks.push(toBytes(data, inputEncoding));
-				return this;
-			}
-			digest(encoding) {
-				const bytes = callSync(globalThis._cryptoHmacDigest, this.algorithm, this.key, concat(this.chunks));
-				return encodeOutput(bytes, encoding);
-			}
-		}
-		const CRYPTO_CONSTANTS = {
-			RSA_PKCS1_PADDING: 1,
-			RSA_PKCS1_OAEP_PADDING: 4,
-		};
-		// The browser backend signs/verifies with PKCS#1 v1.5 only. Native
-		// (OpenSSL) also supports RSA-PSS; rather than silently downgrade a PSS
-		// request to PKCS1 (a divergence producing a different, wrong signature),
-		// fail loud so the caller sees an explicit unsupported error.
-		const assertSupportedSignatureKey = (key) => {
-			if (key && typeof key === "object" && !ArrayBuffer.isView(key)) {
-				const requestsPss =
-					(key.padding !== undefined &&
-						key.padding !== CRYPTO_CONSTANTS.RSA_PKCS1_PADDING) ||
-					key.saltLength !== undefined;
-				if (requestsPss) {
-					const error = new Error(
-						"ERR_UNSUPPORTED_BROWSER_CRYPTO: RSA-PSS / non-PKCS1 signature padding is not supported on the browser backend",
-					);
-					error.code = "ERR_UNSUPPORTED_BROWSER_CRYPTO";
-					throw error;
-				}
-			}
-		};
-		const normalizeKeyInput = (key) => {
-			if (typeof key === "string") return key;
-			if (key && typeof key === "object" && typeof key.export === "function") return key.export({ format: "pem" });
-			if (key && typeof key === "object" && typeof key.key === "string") return key.key;
-			if (key && typeof key === "object" && key.key && typeof key.key.export === "function") return key.key.export({ format: "pem" });
-			throw new Error("Browser node:crypto RSA key must be a PEM string");
-		};
-		const normalizeAsymmetricOptions = (keyOrOptions) => {
-			if (typeof keyOrOptions === "string") return { key: keyOrOptions };
-			if (keyOrOptions && typeof keyOrOptions === "object" && typeof keyOrOptions.export === "function") return { key: keyOrOptions };
-			if (keyOrOptions && typeof keyOrOptions === "object") return keyOrOptions;
-			throw new Error("Browser node:crypto RSA key must be a PEM string");
-		};
-		class KeyObject {
-			constructor(type, key) {
-				this.type = type;
-				if (type === "secret") {
-					this.symmetricKeySize = toBytes(key).byteLength;
-					this.key = new Uint8Array(toBytes(key));
-				} else if (key && typeof key === "object" && key.asymmetricKeyType === "x25519") {
-					this.asymmetricKeyType = "x25519";
-					this.key = new Uint8Array(toBytes(key.key));
-					this.publicKey = key.publicKey ? new Uint8Array(toBytes(key.publicKey)) : undefined;
-				} else {
-					this.asymmetricKeyType = "rsa";
-					this.key = normalizeKeyInput(key);
-				}
-			}
-			export(options = {}) {
-				if (this.type === "secret") {
-					return makeBuffer(this.key);
-				}
-				if (this.asymmetricKeyType === "x25519") {
-					throw new Error("Browser node:crypto X25519 KeyObject export is not implemented yet");
-				}
-				if (!options || options.format == null || options.format === "pem") return this.key;
-				throw new Error("Browser node:crypto KeyObject only supports PEM export");
-			}
-		}
-		class Sign {
-			constructor(algorithm) {
-				this.algorithm = String(algorithm);
-				this.chunks = [];
-			}
-			update(data, inputEncoding) {
-				this.chunks.push(toBytes(data, inputEncoding));
-				return this;
-			}
-			write(data, inputEncoding) {
-				this.update(data, inputEncoding);
-				return true;
-			}
-			end(data, inputEncoding) {
-				if (data !== undefined) this.update(data, inputEncoding);
-				return this;
-			}
-			sign(key, outputEncoding) {
-				assertSupportedSignatureKey(key);
-				const bytes = callSync(globalThis._cryptoSign, this.algorithm, concat(this.chunks), normalizeKeyInput(key));
-				return encodeOutput(bytes, outputEncoding);
-			}
-		}
-		class Verify extends Sign {
-			verify(key, signature, signatureEncoding) {
-				assertSupportedSignatureKey(key);
-				return Boolean(callSync(
-					globalThis._cryptoVerify,
-					this.algorithm,
-					concat(this.chunks),
-					normalizeKeyInput(key),
-					toBytes(signature, signatureEncoding),
-				));
-			}
-		}
-		function createPrivateKey(key) {
-			return new KeyObject("private", key);
-		}
-		function createPublicKey(key) {
-			return new KeyObject("public", key);
-		}
-		function createSecretKey(key) {
-			return new KeyObject("secret", toBytes(key));
-		}
-		function signOneShot(algorithm, data, key) {
-			const signer = new Sign(algorithm);
-			signer.update(data);
-			return signer.sign(key);
-		}
-		function verifyOneShot(algorithm, data, key, signature) {
-			const verifier = new Verify(algorithm);
-			verifier.update(data);
-			return verifier.verify(key, signature);
-		}
-		function modInverse(value, modulus) {
-			let t = 0n;
-			let newT = 1n;
-			let r = modulus;
-			let newR = mod(value, modulus);
-			while (newR !== 0n) {
-				const quotient = r / newR;
-				const nextT = t - quotient * newT;
-				t = newT;
-				newT = nextT;
-				const nextR = r - quotient * newR;
-				r = newR;
-				newR = nextR;
-			}
-			if (r !== 1n) throw new Error("Browser node:crypto RSA values are not invertible");
-			return t < 0n ? t + modulus : t;
-		}
-		function gcd(left, right) {
-			let a = left < 0n ? -left : left;
-			let b = right < 0n ? -right : right;
-			while (b !== 0n) {
-				const next = a % b;
-				a = b;
-				b = next;
-			}
-			return a;
-		}
-		function derLength(length) {
-			if (length < 0x80) return new Uint8Array([length]);
-			const bytes = [];
-			let remaining = length;
-			while (remaining > 0) {
-				bytes.unshift(remaining & 0xff);
-				remaining >>= 8;
-			}
-			return new Uint8Array([0x80 | bytes.length, ...bytes]);
-		}
-		function der(tag, content) {
-			return concat([new Uint8Array([tag]), derLength(content.byteLength), content]);
-		}
-		function derInteger(value) {
-			let bytes = bigIntToMinimalBytes(value);
-			if ((bytes[0] & 0x80) !== 0) bytes = concat([new Uint8Array([0]), bytes]);
-			return der(0x02, bytes);
-		}
-		function derSequence(items) {
-			return der(0x30, concat(items));
-		}
-		function derOctetString(bytes) {
-			return der(0x04, bytes);
-		}
-		function derBitString(bytes) {
-			return der(0x03, concat([new Uint8Array([0]), bytes]));
-		}
-		function derNull() {
-			return new Uint8Array([0x05, 0x00]);
-		}
-		function derObjectIdentifier(parts) {
-			const out = [parts[0] * 40 + parts[1]];
-			for (const part of parts.slice(2)) {
-				const stack = [part & 0x7f];
-				let remaining = part >> 7;
-				while (remaining > 0) {
-					stack.unshift(0x80 | (remaining & 0x7f));
-					remaining >>= 7;
-				}
-				out.push(...stack);
-			}
-			return der(0x06, new Uint8Array(out));
-		}
-		const RSA_ENCRYPTION_ALGORITHM = derSequence([
-			derObjectIdentifier([1, 2, 840, 113549, 1, 1, 1]),
-			derNull(),
-		]);
-		function pem(label, derBytes) {
-			const body = toBase64(derBytes).replace(/.{1,64}/g, "$&\\n").trimEnd();
-			return "-----BEGIN " + label + "-----\\n" + body + "\\n-----END " + label + "-----";
-		}
-		function normalizePublicExponent(value) {
-			if (value === undefined) return 65537n;
-			if (typeof value === "number") return BigInt(value);
-			if (typeof value === "bigint") return value;
-			return bytesToBigInt(toBytes(value));
-		}
-		function encodeRsaPublicKeyDer(key) {
-			return derSequence([derInteger(key.n), derInteger(key.e)]);
-		}
-		function encodeRsaPrivateKeyDer(key) {
-			return derSequence([
-				derInteger(0n),
-				derInteger(key.n),
-				derInteger(key.e),
-				derInteger(key.d),
-				derInteger(key.p),
-				derInteger(key.q),
-				derInteger(key.d % (key.p - 1n)),
-				derInteger(key.d % (key.q - 1n)),
-				derInteger(modInverse(key.q, key.p)),
-			]);
-		}
-		function encodeRsaSpkiDer(key) {
-			return derSequence([RSA_ENCRYPTION_ALGORITHM, derBitString(encodeRsaPublicKeyDer(key))]);
-		}
-		function encodeRsaPkcs8Der(key) {
-			return derSequence([
-				derInteger(0n),
-				RSA_ENCRYPTION_ALGORITHM,
-				derOctetString(encodeRsaPrivateKeyDer(key)),
-			]);
-		}
-		function encodeGeneratedRsaKey(key, encoding, defaultType) {
-			if (!encoding) {
-				return defaultType === "public"
-					? new KeyObject("public", pem("PUBLIC KEY", encodeRsaSpkiDer(key)))
-					: new KeyObject("private", pem("PRIVATE KEY", encodeRsaPkcs8Der(key)));
-			}
-			const format = encoding.format || "pem";
-			const type = encoding.type || (defaultType === "public" ? "spki" : "pkcs8");
-			let derBytes;
-			let label;
-			if (defaultType === "public" && type === "spki") {
-				derBytes = encodeRsaSpkiDer(key);
-				label = "PUBLIC KEY";
-			} else if (defaultType === "public" && (type === "pkcs1" || type === "rsa")) {
-				derBytes = encodeRsaPublicKeyDer(key);
-				label = "RSA PUBLIC KEY";
-			} else if (defaultType === "private" && type === "pkcs8") {
-				derBytes = encodeRsaPkcs8Der(key);
-				label = "PRIVATE KEY";
-			} else if (defaultType === "private" && (type === "pkcs1" || type === "rsa")) {
-				derBytes = encodeRsaPrivateKeyDer(key);
-				label = "RSA PRIVATE KEY";
-			} else {
-				throw new Error("Browser node:crypto unsupported RSA key encoding type");
-			}
-			if (format === "der") return makeBuffer(derBytes);
-			if (format === "pem") return pem(label, derBytes);
-			throw new Error("Browser node:crypto unsupported RSA key encoding format");
-		}
-		function generateRsaKeyPair(options = {}) {
-			const modulusLength = Number(options.modulusLength || 2048);
-			if (!Number.isInteger(modulusLength) || modulusLength < 512) {
-				throw new Error("Browser node:crypto RSA modulusLength must be at least 512 bits");
-			}
-			const e = normalizePublicExponent(options.publicExponent);
-			const pBits = Math.floor(modulusLength / 2);
-			const qBits = modulusLength - pBits;
-			while (true) {
-				const p = generatePrimeSync(pBits, { bigint: true });
-				const q = generatePrimeSync(qBits, { bigint: true });
-				if (p === q) continue;
-				const phi = (p - 1n) * (q - 1n);
-				if (gcd(e, phi) !== 1n) continue;
-				const n = p * q;
-				if (n.toString(2).length !== modulusLength) continue;
-				const d = modInverse(e, phi);
-				const key = { n, e, d, p, q };
-				return {
-					publicKey: encodeGeneratedRsaKey(key, options.publicKeyEncoding, "public"),
-					privateKey: encodeGeneratedRsaKey(key, options.privateKeyEncoding, "private"),
-				};
-			}
-		}
-		const X25519_PRIME = (1n << 255n) - 19n;
-		const X25519_A24 = 121665n;
-		const X25519_BASE_POINT = new Uint8Array([9, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0, 0]);
-		function mod(value, modulus) {
-			const result = value % modulus;
-			return result < 0n ? result + modulus : result;
-		}
-		function bytesToLittleEndianBigInt(bytes) {
-			let value = 0n;
-			for (let i = bytes.byteLength - 1; i >= 0; i -= 1) {
-				value = (value << 8n) | BigInt(bytes[i]);
-			}
-			return value;
-		}
-		function littleEndianBigIntToBytes(value, byteLength) {
-			const out = new Uint8Array(byteLength);
-			let cursor = BigInt(value);
-			for (let i = 0; i < byteLength; i += 1) {
-				out[i] = Number(cursor & 0xffn);
-				cursor >>= 8n;
-			}
-			return out;
-		}
-		function normalizeX25519PrivateKey(key) {
-			if (!key || key.type !== "private" || key.asymmetricKeyType !== "x25519" || key.key.byteLength !== 32) {
-				throw new Error("Browser node:crypto diffieHellman requires an X25519 private KeyObject");
-			}
-			return key.key;
-		}
-		function normalizeX25519PublicKey(key) {
-			if (!key || key.type !== "public" || key.asymmetricKeyType !== "x25519" || key.key.byteLength !== 32) {
-				throw new Error("Browser node:crypto diffieHellman requires an X25519 public KeyObject");
-			}
-			return key.key;
-		}
-		function x25519(privateKey, publicKey) {
-			const scalarBytes = new Uint8Array(privateKey);
-			scalarBytes[0] &= 248;
-			scalarBytes[31] &= 127;
-			scalarBytes[31] |= 64;
-			const uBytes = new Uint8Array(publicKey);
-			uBytes[31] &= 127;
-			const scalar = bytesToLittleEndianBigInt(scalarBytes);
-			const x1 = bytesToLittleEndianBigInt(uBytes);
-			let x2 = 1n;
-			let z2 = 0n;
-			let x3 = x1;
-			let z3 = 1n;
-			let swap = 0n;
-			const cswap = (bit) => {
-				if (bit === 0n) return;
-				let tmp = x2;
-				x2 = x3;
-				x3 = tmp;
-				tmp = z2;
-				z2 = z3;
-				z3 = tmp;
-			};
-			for (let t = 254; t >= 0; t -= 1) {
-				const bit = (scalar >> BigInt(t)) & 1n;
-				swap ^= bit;
-				cswap(swap);
-				swap = bit;
-				const a = mod(x2 + z2, X25519_PRIME);
-				const aa = mod(a * a, X25519_PRIME);
-				const b = mod(x2 - z2, X25519_PRIME);
-				const bb = mod(b * b, X25519_PRIME);
-				const e = mod(aa - bb, X25519_PRIME);
-				const c = mod(x3 + z3, X25519_PRIME);
-				const d = mod(x3 - z3, X25519_PRIME);
-				const da = mod(d * a, X25519_PRIME);
-				const cb = mod(c * b, X25519_PRIME);
-				x3 = mod((da + cb) * (da + cb), X25519_PRIME);
-				z3 = mod(x1 * mod((da - cb) * (da - cb), X25519_PRIME), X25519_PRIME);
-				x2 = mod(aa * bb, X25519_PRIME);
-				z2 = mod(e * mod(aa + X25519_A24 * e, X25519_PRIME), X25519_PRIME);
-			}
-			cswap(swap);
-			const result = mod(x2 * modPow(z2, X25519_PRIME - 2n, X25519_PRIME), X25519_PRIME);
-			return littleEndianBigIntToBytes(result, 32);
-		}
-		function generateKeyPairSync(type, options = {}) {
-			const keyType = String(type).toLowerCase();
-			if (keyType === "rsa") {
-				return generateRsaKeyPair(options || {});
-			}
-			if (keyType !== "x25519") {
-				return unsupportedBrowserCrypto("generateKeyPairSync");
-			}
-			const privateBytes = new Uint8Array(callSync(globalThis._cryptoRandomFill, 32));
-			const publicBytes = x25519(privateBytes, X25519_BASE_POINT);
-			return {
-				publicKey: new KeyObject("public", { asymmetricKeyType: "x25519", key: publicBytes }),
-				privateKey: new KeyObject("private", { asymmetricKeyType: "x25519", key: privateBytes, publicKey: publicBytes }),
-			};
-		}
-		function generateKeyPair(type, options, callback) {
-			if (typeof options === "function") {
-				callback = options;
-				options = {};
-			}
-			if (typeof callback !== "function") {
-				throw new TypeError('The "callback" argument must be of type function');
-			}
-			queueMicrotask(() => {
-				try {
-					const pair = generateKeyPairSync(type, options || {});
-					callback(null, pair.publicKey, pair.privateKey);
-				} catch (error) {
-					callback(error);
-				}
-			});
-		}
-		function diffieHellman(options) {
-			if (!options || typeof options !== "object") {
-				throw new TypeError("Browser node:crypto diffieHellman options must be an object");
-			}
-			const privateKey = normalizeX25519PrivateKey(options.privateKey);
-			const publicKey = normalizeX25519PublicKey(options.publicKey);
-			return makeBuffer(x25519(privateKey, publicKey));
-		}
-		const P256_P = BigInt("0xffffffff00000001000000000000000000000000ffffffffffffffffffffffff");
-		const P256_A = P256_P - 3n;
-		const P256_B = BigInt("0x5ac635d8aa3a93e7b3ebbd55769886bc651d06b0cc53b0f63bce3c3e27d2604b");
-		const P256_N = BigInt("0xffffffff00000000ffffffffffffffffbce6faada7179e84f3b9cac2fc632551");
-		const P256_G = {
-			x: BigInt("0x6b17d1f2e12c4247f8bce6e563a440f277037d812deb33a0f4a13945d898c296"),
-			y: BigInt("0x4fe342e2fe1a7f9b8ee7eb4a7c0f9e162bce33576b315ececbb6406837bf51f5"),
-		};
-		function p256Inverse(value) {
-			return modPow(mod(value, P256_P), P256_P - 2n, P256_P);
-		}
-		function p256PointAdd(left, right) {
-			if (!left) return right;
-			if (!right) return left;
-			if (left.x === right.x) {
-				if (mod(left.y + right.y, P256_P) === 0n) return null;
-				const slope = mod((3n * left.x * left.x + P256_A) * p256Inverse(2n * left.y), P256_P);
-				const x = mod(slope * slope - 2n * left.x, P256_P);
-				const y = mod(slope * (left.x - x) - left.y, P256_P);
-				return { x, y };
-			}
-			const slope = mod((right.y - left.y) * p256Inverse(right.x - left.x), P256_P);
-			const x = mod(slope * slope - left.x - right.x, P256_P);
-			const y = mod(slope * (left.x - x) - left.y, P256_P);
-			return { x, y };
-		}
-		function p256ScalarMult(scalar, point) {
-			let result = null;
-			let addend = point;
-			let remaining = scalar;
-			while (remaining > 0n) {
-				if ((remaining & 1n) === 1n) result = p256PointAdd(result, addend);
-				addend = p256PointAdd(addend, addend);
-				remaining >>= 1n;
-			}
-			return result;
-		}
-		function p256RandomScalar() {
-			while (true) {
-				const scalar = bytesToBigInt(callSync(globalThis._cryptoRandomFill, 32)) % P256_N;
-				if (scalar > 0n) return scalar;
-			}
-		}
-		function p256EncodePoint(point, format = "uncompressed") {
-			if (!point) throw new Error("Browser node:crypto ECDH point is not available");
-			if (format === "compressed") {
-				const out = new Uint8Array(33);
-				out[0] = point.y & 1n ? 0x03 : 0x02;
-				out.set(bigIntToBytes(point.x, 32), 1);
-				return out;
-			}
-			if (format !== "uncompressed" && format !== "hybrid") {
-				throw new Error("Browser node:crypto ECDH only supports uncompressed, compressed, and hybrid public keys");
-			}
-			const out = new Uint8Array(65);
-			out[0] = format === "hybrid" ? (point.y & 1n ? 0x07 : 0x06) : 0x04;
-			out.set(bigIntToBytes(point.x, 32), 1);
-			out.set(bigIntToBytes(point.y, 32), 33);
-			return out;
-		}
-		function p256DecodePoint(value, encoding) {
-			const bytes = toBytes(value, encoding);
-			if (bytes.byteLength !== 65 || (bytes[0] !== 0x04 && bytes[0] !== 0x06 && bytes[0] !== 0x07)) {
-				throw new Error("Browser node:crypto ECDH peer public key must be an uncompressed P-256 point");
-			}
-			const x = bytesToBigInt(bytes.subarray(1, 33));
-			const y = bytesToBigInt(bytes.subarray(33, 65));
-			if (mod(y * y - (x * x * x + P256_A * x + P256_B), P256_P) !== 0n) {
-				throw new Error("Browser node:crypto ECDH peer public key is not on P-256");
-			}
-			return { x, y };
-		}
-		class ECDH {
-			constructor(name) {
-				const curve = String(name);
-				if (curve !== "prime256v1" && curve !== "P-256") {
-					const error = new Error("Invalid EC curve name");
-					error.code = "ERR_CRYPTO_INVALID_CURVE";
-					throw error;
-				}
-				this.privateKey = null;
-				this.publicPoint = null;
-			}
-			generateKeys(encoding, format = "uncompressed") {
-				this.privateKey = p256RandomScalar();
-				this.publicPoint = p256ScalarMult(this.privateKey, P256_G);
-				return encodeOutput(p256EncodePoint(this.publicPoint, format), encoding);
-			}
-			computeSecret(otherPublicKey, inputEncoding, outputEncoding) {
-				if (this.privateKey === null) this.generateKeys();
-				const shared = p256ScalarMult(this.privateKey, p256DecodePoint(otherPublicKey, inputEncoding));
-				if (!shared) throw new Error("Browser node:crypto ECDH failed to compute shared secret");
-				return encodeOutput(bigIntToBytes(shared.x, 32), outputEncoding);
-			}
-			getPublicKey(encoding, format = "uncompressed") {
-				if (!this.publicPoint) throw new Error("Failed to get ECDH public key");
-				return encodeOutput(p256EncodePoint(this.publicPoint, format), encoding);
-			}
-			getPrivateKey(encoding) {
-				if (this.privateKey === null) throw new Error("Failed to get ECDH private key");
-				return encodeOutput(bigIntToBytes(this.privateKey, 32), encoding);
-			}
-			setPrivateKey(privateKey, encoding) {
-				const scalar = bytesToBigInt(toBytes(privateKey, encoding));
-				if (scalar <= 0n || scalar >= P256_N) throw new Error("Invalid ECDH private key");
-				this.privateKey = scalar;
-				this.publicPoint = p256ScalarMult(this.privateKey, P256_G);
-			}
-			setPublicKey(publicKey, encoding) {
-				this.publicPoint = p256DecodePoint(publicKey, encoding);
-			}
-		}
-		function createECDH(name) {
-			return new ECDH(name);
-		}
-		function generateKeySync(type, options = {}) {
-			const keyType = String(type).toLowerCase();
-			const length = Number(options && options.length);
-			if (!Number.isInteger(length) || length <= 0) {
-				throw new Error("Browser node:crypto generateKeySync length must be a positive integer");
-			}
-			if (keyType === "aes" && ![128, 192, 256].includes(length)) {
-				const error = new Error("The property 'options.length' must be one of: 128, 192, 256.");
-				error.code = "ERR_INVALID_ARG_VALUE";
-				throw error;
-			}
-			if (keyType !== "hmac" && keyType !== "aes") {
-				return unsupportedBrowserCrypto("generateKeySync");
-			}
-			return createSecretKey(callSync(globalThis._cryptoRandomFill, Math.ceil(length / 8)));
-		}
-		function bytesToBigInt(bytes) {
-			let value = 0n;
-			for (const byte of bytes) value = (value << 8n) | BigInt(byte);
-			return value;
-		}
-		function bigIntToBytes(value, byteLength) {
-			const out = new Uint8Array(byteLength);
-			let cursor = BigInt(value);
-			for (let i = byteLength - 1; i >= 0; i -= 1) {
-				out[i] = Number(cursor & 0xffn);
-				cursor >>= 8n;
-			}
-			return out;
-		}
-		function normalizePrimeOption(name, value) {
-			if (value === undefined) return undefined;
-			if (typeof value === "bigint") return value;
-			if (ArrayBuffer.isView(value) || value instanceof ArrayBuffer || Array.isArray(value) || (value && value.type === "Buffer" && Array.isArray(value.data))) {
-				return bytesToBigInt(toBytes(value));
-			}
-			const error = new TypeError('The "options.' + name + '" property must be of type bigint or an instance of ArrayBuffer, TypedArray, Buffer, or DataView.');
-			error.code = "ERR_INVALID_ARG_TYPE";
-			throw error;
-		}
-		function modPow(base, exponent, modulus) {
-			let result = 1n;
-			let cursor = base % modulus;
-			let remaining = exponent;
-			while (remaining > 0n) {
-				if ((remaining & 1n) === 1n) result = (result * cursor) % modulus;
-				cursor = (cursor * cursor) % modulus;
-				remaining >>= 1n;
-			}
-			return result;
-		}
-		const SMALL_PRIMES = [2n, 3n, 5n, 7n, 11n, 13n, 17n, 19n, 23n, 29n, 31n, 37n, 41n, 43n, 47n, 53n, 59n, 61n, 67n, 71n, 73n, 79n, 83n, 89n, 97n];
-		const MILLER_RABIN_BASES = [2n, 3n, 5n, 7n, 11n, 13n, 17n, 19n, 23n, 29n, 31n, 37n];
-		function isProbablePrime(value) {
-			if (value < 2n) return false;
-			for (const prime of SMALL_PRIMES) {
-				if (value === prime) return true;
-				if (value % prime === 0n) return false;
-			}
-			let d = value - 1n;
-			let s = 0;
-			while ((d & 1n) === 0n) {
-				d >>= 1n;
-				s += 1;
-			}
-			for (const base of MILLER_RABIN_BASES) {
-				if (base >= value - 2n) continue;
-				let x = modPow(base, d, value);
-				if (x === 1n || x === value - 1n) continue;
-				let witness = false;
-				for (let r = 1; r < s; r += 1) {
-					x = (x * x) % value;
-					if (x === value - 1n) {
-						witness = true;
-						break;
-					}
-				}
-				if (!witness) return false;
-			}
-			return true;
-		}
-		function randomPrimeCandidate(size, add, rem) {
-			const byteLength = Math.ceil(size / 8);
-			const mask = (1n << BigInt(size)) - 1n;
-			const highBit = 1n << BigInt(size - 1);
-			let candidate = (bytesToBigInt(callSync(globalThis._cryptoRandomFill, byteLength)) & mask) | highBit;
-			if (add !== undefined) {
-				const desired = rem === undefined ? 1n : rem;
-				const delta = (desired - (candidate % add) + add) % add;
-				candidate += delta;
-				if (candidate > mask) candidate -= add;
-			} else {
-				candidate |= 1n;
-			}
-			return candidate;
-		}
-		function generatePrimeSync(size, options = {}) {
-			const bitLength = Number(size);
-			if (!Number.isInteger(bitLength) || bitLength < 2) {
-				throw new RangeError("Browser node:crypto generatePrimeSync size must be an integer greater than 1");
-			}
-			if (bitLength > 4096) {
-				throw new RangeError("Browser node:crypto generatePrimeSync supports primes up to 4096 bits");
-			}
-			const primeOptions = options || {};
-			const add = normalizePrimeOption("add", primeOptions.add);
-			const rem = normalizePrimeOption("rem", primeOptions.rem);
-			if (add !== undefined && add <= 0n) {
-				throw new RangeError("Browser node:crypto generatePrimeSync options.add must be greater than zero");
-			}
-			if (rem !== undefined && add === undefined) {
-				throw new RangeError("Browser node:crypto generatePrimeSync options.rem requires options.add");
-			}
-			const safe = primeOptions.safe === true;
-			while (true) {
-				const candidate = randomPrimeCandidate(bitLength, add, rem);
-				if (candidate < 2n || candidate.toString(2).length !== bitLength) continue;
-				if (!isProbablePrime(candidate)) continue;
-				if (safe && !isProbablePrime((candidate - 1n) / 2n)) continue;
-				if (primeOptions.bigint === true) return candidate;
-				const bytes = bigIntToBytes(candidate, Math.ceil(bitLength / 8));
-				return bytes.buffer.slice(bytes.byteOffset, bytes.byteOffset + bytes.byteLength);
-			}
-		}
-		const DIFFIE_HELLMAN_GROUPS = {
-			modp14: {
-				prime: "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",
-				generator: 2n,
-			},
-		};
-		function bigIntToMinimalBytes(value) {
-			if (value === 0n) return new Uint8Array([0]);
-			return bigIntToBytes(value, Math.ceil(value.toString(16).length / 2));
-		}
-		function normalizeDhNumber(value, encoding) {
-			if (typeof value === "bigint") return value;
-			if (typeof value === "number") return BigInt(value);
-			return bytesToBigInt(toBytes(value, encoding));
-		}
-		class DiffieHellman {
-			constructor(prime, generator = 2n) {
-				this.prime = BigInt(prime);
-				this.generator = BigInt(generator);
-				this.primeLength = Math.ceil(this.prime.toString(2).length / 8);
-				this.privateKey = null;
-				this.publicKey = null;
-				this.verifyError = 0;
-			}
-			_generatePrivateKey() {
-				const randomLength = Math.min(this.primeLength, 32);
-				const random = bytesToBigInt(callSync(globalThis._cryptoRandomFill, randomLength));
-				return 2n + (random % (this.prime - 3n));
-			}
-			generateKeys(encoding) {
-				this.privateKey = this._generatePrivateKey();
-				this.publicKey = modPow(this.generator, this.privateKey, this.prime);
-				return encodeOutput(bigIntToBytes(this.publicKey, this.primeLength), encoding);
-			}
-			computeSecret(otherPublicKey, inputEncoding, outputEncoding) {
-				if (this.privateKey === null) this.generateKeys();
-				const peer = normalizeDhNumber(otherPublicKey, inputEncoding);
-				const secret = modPow(peer, this.privateKey, this.prime);
-				return encodeOutput(bigIntToBytes(secret, this.primeLength), outputEncoding);
-			}
-			getPrime(encoding) {
-				return encodeOutput(bigIntToBytes(this.prime, this.primeLength), encoding);
-			}
-			getGenerator(encoding) {
-				return encodeOutput(bigIntToMinimalBytes(this.generator), encoding);
-			}
-			getPublicKey(encoding) {
-				if (this.publicKey === null) this.generateKeys();
-				return encodeOutput(bigIntToBytes(this.publicKey, this.primeLength), encoding);
-			}
-			getPrivateKey(encoding) {
-				if (this.privateKey === null) this.generateKeys();
-				return encodeOutput(bigIntToMinimalBytes(this.privateKey), encoding);
-			}
-			setPublicKey(key, encoding) {
-				this.publicKey = normalizeDhNumber(key, encoding);
-			}
-			setPrivateKey(key, encoding) {
-				this.privateKey = normalizeDhNumber(key, encoding);
-				this.publicKey = modPow(this.generator, this.privateKey, this.prime);
-			}
-		}
-		function createDiffieHellman(prime, primeEncoding, generator, generatorEncoding) {
-			let normalizedGenerator = generator;
-			let normalizedGeneratorEncoding = generatorEncoding;
-			if (typeof primeEncoding !== "string") {
-				normalizedGenerator = primeEncoding === undefined ? generator : primeEncoding;
-				normalizedGeneratorEncoding = typeof generator === "string" ? generator : undefined;
-				primeEncoding = undefined;
-			}
-			const primeValue = normalizeDhNumber(prime, primeEncoding);
-			const generatorValue = normalizedGenerator === undefined
-				? 2n
-				: normalizeDhNumber(normalizedGenerator, normalizedGeneratorEncoding);
-			return new DiffieHellman(primeValue, generatorValue);
-		}
-		function getDiffieHellman(name) {
-			const group = DIFFIE_HELLMAN_GROUPS[String(name).toLowerCase()];
-			if (!group) {
-				const error = new Error("Unknown DH group");
-				error.code = "ERR_CRYPTO_UNKNOWN_DH_GROUP";
-				throw error;
-			}
-			return new DiffieHellman(bytesToBigInt(toBytes(group.prime, "hex")), group.generator);
-		}
-		function publicEncrypt(keyOrOptions, buffer) {
-			const options = normalizeAsymmetricOptions(keyOrOptions);
-			const bytes = callSync(
-				globalThis._cryptoAsymmetricOp,
-				"publicEncrypt",
-				normalizeKeyInput(options.key),
-				toBytes(buffer),
-				JSON.stringify({
-					padding: options.padding,
-					oaepHash: options.oaepHash,
-					oaepLabel: options.oaepLabel ? Array.from(toBytes(options.oaepLabel)) : undefined,
-				}),
-			);
-			return makeBuffer(bytes);
-		}
-		function privateDecrypt(keyOrOptions, buffer) {
-			const options = normalizeAsymmetricOptions(keyOrOptions);
-			const bytes = callSync(
-				globalThis._cryptoAsymmetricOp,
-				"privateDecrypt",
-				normalizeKeyInput(options.key),
-				toBytes(buffer),
-				JSON.stringify({
-					padding: options.padding,
-					oaepHash: options.oaepHash,
-					oaepLabel: options.oaepLabel ? Array.from(toBytes(options.oaepLabel)) : undefined,
-				}),
-			);
-			return makeBuffer(bytes);
-		}
-		function randomBytes(size, callback) {
-			const bytes = makeBuffer(callSync(globalThis._cryptoRandomFill, Number(size)));
-			if (typeof callback === "function") queueMicrotask(() => callback(null, bytes));
-			return bytes;
-		}
-		function randomFillSync(buffer, offset = 0, size) {
-			const view = toBytes(buffer);
-			const start = Number(offset) || 0;
-			const length = size == null ? view.byteLength - start : Number(size);
-			view.set(callSync(globalThis._cryptoRandomFill, length), start);
-			return buffer;
-		}
-		function pbkdf2Sync(password, salt, iterations, keyLength, digest = "sha1") {
-			return makeBuffer(callSync(
-				globalThis._cryptoPbkdf2,
-				toBytes(password),
-				toBytes(salt),
-				Number(iterations),
-				Number(keyLength),
-				String(digest),
-			));
-		}
-		function pbkdf2(password, salt, iterations, keyLength, digest, callback) {
-			if (typeof digest === "function") {
-				callback = digest;
-				digest = "sha1";
-			}
-			queueMicrotask(() => {
-				try {
-					callback(null, pbkdf2Sync(password, salt, iterations, keyLength, digest || "sha1"));
-				} catch (error) {
-					callback(error);
-				}
-			});
-		}
-		function scryptSync(password, salt, keyLength, options = undefined) {
-			return makeBuffer(callSync(
-				globalThis._cryptoScrypt,
-				toBytes(password),
-				toBytes(salt),
-				Number(keyLength),
-				options || {},
-			));
-		}
-		function scrypt(password, salt, keyLength, options, callback) {
-			if (typeof options === "function") {
-				callback = options;
-				options = undefined;
-			}
-			if (typeof callback !== "function") {
-				throw new TypeError('The "callback" argument must be of type function');
-			}
-			queueMicrotask(() => {
-				try {
-					callback(null, scryptSync(password, salt, keyLength, options));
-				} catch (error) {
-					callback(error);
-				}
-			});
-		}
-		class Cipheriv {
-			constructor(mode, algorithm, key, iv, options = {}) {
-				this.mode = mode;
-				this.algorithm = String(algorithm);
-				this.key = toBytes(key);
-				this.iv = toBytes(iv);
-				this.options = { ...(options || {}) };
-				this.chunks = [];
-				this.finished = false;
-				this.authTag = null;
-			}
-			update(data, inputEncoding, outputEncoding) {
-				if (this.finished) throw new Error("Cipheriv final already called");
-				this.chunks.push(toBytes(data, inputEncoding));
-				return encodeOutput(new Uint8Array(0), outputEncoding);
-			}
-			final(outputEncoding) {
-				if (this.finished) throw new Error("Cipheriv final already called");
-				this.finished = true;
-				const input = concat(this.chunks);
-				let result;
-				if (this.mode === "cipher") {
-					result = callSync(globalThis._cryptoCipheriv, this.algorithm, this.key, this.iv, input, this.options);
-					if (this.algorithm.toLowerCase().endsWith("-gcm")) {
-						this.authTag = result.slice(result.byteLength - 16);
-						result = result.slice(0, result.byteLength - 16);
-					}
-				} else {
-					result = callSync(globalThis._cryptoDecipheriv, this.algorithm, this.key, this.iv, input, this.options);
-				}
-				return encodeOutput(result, outputEncoding);
-			}
-			setAutoPadding(autoPadding = true) {
-				if (this.finished) throw new Error("Cipheriv final already called");
-				this.options.autoPadding = autoPadding !== false;
-				return this;
-			}
-			setAAD(aad) {
-				if (this.finished) throw new Error("Cipheriv final already called");
-				this.options.aad = toBytes(aad);
-				return this;
-			}
-			getAuthTag() {
-				if (!this.authTag) throw new Error("Cipheriv auth tag is not available");
-				return makeBuffer(this.authTag);
-			}
-			setAuthTag(tag) {
-				if (this.finished) throw new Error("Cipheriv final already called");
-				this.options.authTag = toBytes(tag);
-				return this;
-			}
-		}
-		function unsupportedBrowserCrypto(operation) {
-			const error = new Error("node:crypto " + operation + " is not implemented in the browser runtime yet");
-			error.code = "ERR_UNSUPPORTED_BROWSER_CRYPTO";
-			throw error;
-		}
-		module.exports = {
-			createCipheriv: (algorithm, key, iv, options) => new Cipheriv("cipher", algorithm, key, iv, options),
-			createDecipheriv: (algorithm, key, iv, options) => new Cipheriv("decipher", algorithm, key, iv, options),
-			createDiffieHellman,
-			createECDH,
-			createHash: (algorithm) => new Hash(algorithm),
-			createHmac: (algorithm, key) => new Hmac(algorithm, key),
-			constants: CRYPTO_CONSTANTS,
-			createPrivateKey,
-			createPublicKey,
-			createSecretKey,
-			createSign: (algorithm) => new Sign(algorithm),
-			createVerify: (algorithm) => new Verify(algorithm),
-			diffieHellman,
-			generateKeyPair,
-			generateKeyPairSync,
-			generateKeySync,
-			generatePrimeSync,
-			getCiphers: () => [...SUPPORTED_CIPHERS],
-			getCurves: () => [...SUPPORTED_CURVES],
-			getDiffieHellman,
-			getHashes: () => ["md5", "sha1", "sha224", "sha256", "sha384", "sha512"],
-			pbkdf2,
-			pbkdf2Sync,
-			privateDecrypt,
-			publicEncrypt,
-			randomBytes,
-			randomFillSync,
-			randomUUID: () => callSync(globalThis._cryptoRandomUUID),
-			scrypt,
-			scryptSync,
-			sign: signOneShot,
-			subtle: globalThis.crypto && globalThis.crypto.subtle,
-			verify: verifyOneShot,
-			webcrypto: globalThis.crypto,
-		};
-	`,
-	"node:crypto": "module.exports = require('crypto');",
-	wasi: BROWSER_WASI_POLYFILL_CODE,
-	"node:wasi": "module.exports = require('wasi');",
-	"secure-exec:wasi-command-host": `
-		function defaultDecode(bytes) {
-			return new TextDecoder().decode(bytes);
-		}
-		function decodeNullSeparated(bytes) {
-			const out = [];
-			let start = 0;
-			for (let i = 0; i <= bytes.length; i += 1) {
-				if (i === bytes.length || bytes[i] === 0) {
-					if (i > start) out.push(defaultDecode(bytes.slice(start, i)));
-					start = i + 1;
-				}
-			}
-			return out;
-		}
-		function parseEnv(bytes) {
-			const env = {};
-			for (const entry of decodeNullSeparated(bytes)) {
-				const eq = entry.indexOf("=");
-				if (eq > 0) env[entry.slice(0, eq)] = entry.slice(eq + 1);
-			}
-			return env;
-		}
-		async function readCommandBytes(source) {
-			if (source instanceof Uint8Array) return source;
-			if (source instanceof ArrayBuffer) return new Uint8Array(source);
-			if (source instanceof WebAssembly.Module) return source;
-			if (typeof source !== "string") throw new Error("command source must be a URL, bytes, or WebAssembly.Module");
-			const response = await fetch(source);
-			if (!response.ok) throw new Error("failed to fetch command wasm " + source + ": " + response.status);
-			let bytes = new Uint8Array(await response.arrayBuffer());
-			if (response.headers && response.headers.get("x-body-encoding") === "base64") {
-				const encoded = new TextDecoder().decode(bytes);
-				bytes = Uint8Array.from(atob(encoded), (char) => char.charCodeAt(0));
-			}
-			return bytes;
-		}
-		async function loadCommandModules(commands) {
-			const modules = new Map();
-			for (const [name, source] of Object.entries(commands || {})) {
-				const value = await readCommandBytes(source);
-				modules.set(name, value instanceof WebAssembly.Module ? value : new WebAssembly.Module(value));
-			}
-			return modules;
-		}
-		async function createWasiCommandHost(options) {
-			const WASI = options && options.WASI ? options.WASI : require("node:wasi").WASI;
-			const commandModules = await loadCommandModules(options && options.commands);
-			let memory = null;
-			let nextPid = 100;
-			const exitedChildren = new Map();
-			const deferredChildren = new Map();
-			const waitBuffer = new SharedArrayBuffer(4);
-			const wait = new Int32Array(waitBuffer);
-			const errnoSuccess = 0;
-			const errnoBadf = 8;
-			const errnoChild = 10;
-			const errnoNosys = 52;
-			let nextSyntheticFd = 1000;
-			const syntheticFdEntries = new Map();
-			let activeFdOverrides = null;
-			let activeChildCwd = null;
-			let previousLookupFdHandle = null;
-			let parentWasi = null;
-			const getMemory = () => {
-				if (!memory) throw new Error("WASI host command memory is not set");
-				return memory;
-			};
-			const view = () => new DataView(getMemory().buffer);
-			const bytes = () => new Uint8Array(getMemory().buffer);
-			const writeU32 = (ptr, value) => {
-				view().setUint32(ptr >>> 0, value >>> 0, true);
-				return errnoSuccess;
-			};
-			const writeBytes = (ptr, value) => {
-				bytes().set(value, ptr >>> 0);
-			};
-			const readBytes = (ptr, len) => bytes().slice(ptr >>> 0, (ptr >>> 0) + (len >>> 0));
-			const readString = (ptr, len) => defaultDecode(readBytes(ptr, len));
-			const fs = () => require("node:fs");
-			const path = () => require("node:path");
-			const userRecord = new TextEncoder().encode(
-				(options && options.userRecord) || "agentos:x:1000:1000:Agent OS:/tmp:/bin/sh",
-			);
-			const modeFromStat = (stat, fallback) => {
-				const mode = Number(stat && stat.mode);
-				if (Number.isInteger(mode) && mode > 0) return mode >>> 0;
-				if (stat && typeof stat.isDirectory === "function" && stat.isDirectory()) return 0o040755;
-				if (stat && typeof stat.isSymbolicLink === "function" && stat.isSymbolicLink()) return 0o120777;
-				return fallback >>> 0;
-			};
-			const currentGuestCwd = () => {
-				const cwd = typeof activeChildCwd === "string" && activeChildCwd.startsWith("/")
-					? activeChildCwd
-					: typeof options?.cwd === "string" && options.cwd.startsWith("/")
-					? options.cwd
-					: "/";
-				return path().posix.normalize(cwd);
-			};
-			const resolveGuestPath = (target) => {
-				const value = String(target || ".");
-				return value.startsWith("/")
-					? path().posix.normalize(value)
-					: path().posix.resolve(currentGuestCwd(), value);
-			};
-			const lookupSyntheticFd = (fd) => {
-				const descriptor = fd >>> 0;
-				const override = activeFdOverrides && activeFdOverrides.get(descriptor);
-				if (override && override.open !== false) return override;
-				const handle = syntheticFdEntries.get(descriptor);
-				if (handle && handle.open !== false) return handle;
-				if (typeof previousLookupFdHandle === "function") return previousLookupFdHandle(descriptor);
-				const parentEntry = parentWasi && parentWasi.fdTable && parentWasi.fdTable.get(descriptor);
-				if (parentEntry && parentEntry.kind === "file" && typeof parentEntry.realFd === "number") {
-					return {
-						kind: "guest-file",
-						targetFd: parentEntry.realFd,
-						position: typeof parentEntry.offset === "number" ? parentEntry.offset : 0,
-						readOnly: parentEntry.readOnly === true,
-						open: true,
-					};
-				}
-				return null;
-			};
-			const closeSyntheticHandle = (handle) => {
-				if (!handle || handle.open === false) return;
-				handle.open = false;
-				if (handle.kind === "pipe-read" && handle.pipe) {
-					handle.pipe.readHandleCount = Math.max(0, (handle.pipe.readHandleCount || 0) - 1);
-				} else if (handle.kind === "pipe-write" && handle.pipe) {
-					handle.pipe.writeHandleCount = Math.max(0, (handle.pipe.writeHandleCount || 0) - 1);
-				}
-				if (typeof handle.onClose === "function") handle.onClose(handle);
-			};
-			const cloneSyntheticHandle = (handle) => {
-				if (!handle || handle.open === false) return null;
-				if (handle.kind === "stdio") {
-					return { kind: "stdio", targetFd: handle.targetFd, open: true };
-				}
-				if (handle.kind === "guest-file") {
-					return { ...handle, open: true };
-				}
-				if (!handle.pipe) return null;
-				if (handle.kind === "pipe-read") {
-					handle.pipe.readHandleCount = (handle.pipe.readHandleCount || 0) + 1;
-					return { kind: "pipe-read", pipe: handle.pipe, open: true, onClose: handle.onClose };
-				}
-				if (handle.kind === "pipe-write") {
-					handle.pipe.writeHandleCount = (handle.pipe.writeHandleCount || 0) + 1;
-					return { kind: "pipe-write", pipe: handle.pipe, open: true, onClose: handle.onClose };
-				}
-				return null;
-			};
-			const handleMatchesStdio = (handle, expectedKind) => {
-				if (!handle || handle.open === false) return false;
-				if (handle.kind === "stdio") {
-					if (expectedKind === "read") return handle.targetFd === 0;
-					if (expectedKind === "write") return handle.targetFd === 1 || handle.targetFd === 2;
-				}
-				if (expectedKind === "read") return handle.kind === "pipe-read" || handle.kind === "guest-file";
-				if (expectedKind === "write") return handle.kind === "pipe-write" || handle.kind === "guest-file";
-				return handle.kind === expectedKind;
-			};
-			const allocateSyntheticFd = (handle) => {
-				const fd = nextSyntheticFd++;
-				syntheticFdEntries.set(fd, handle);
-				return fd;
-			};
-			const replaceSyntheticFd = (fd, handle) => {
-				const descriptor = fd >>> 0;
-				closeSyntheticHandle(syntheticFdEntries.get(descriptor));
-				syntheticFdEntries.set(descriptor, handle);
-			};
-			const pipeHasOpenWriters = (handle) =>
-				handle && handle.kind === "pipe-read" && handle.pipe && (handle.pipe.writeHandleCount || 0) > 0;
-			const runChild = (child) => {
-				const parentMemory = memory;
-				const previousActiveFdOverrides = activeFdOverrides;
-				const previousActiveChildCwd = activeChildCwd;
-				try {
-					const childWasi = new WASI({
-						returnOnExit: true,
-						args: [child.commandPath, ...child.argv.slice(1)],
-						env: child.env,
-						preopens: { "/": child.cwd || "/" },
-					});
-					const childImports = {
-						wasi_snapshot_preview1: childWasi.wasiImport,
-						...host.imports,
-					};
-					const childInstance = new WebAssembly.Instance(child.module, childImports);
-					memory = childInstance.exports.memory;
-					activeFdOverrides = child.overrides;
-					activeChildCwd = child.cwd || "/";
-					const exitCode = childWasi.start(childInstance);
-					exitedChildren.set(child.pid, exitCode << 8);
-				} catch {
-					exitedChildren.set(child.pid, 127 << 8);
-				} finally {
-					for (const handle of child.childOverrideHandles) closeSyntheticHandle(handle);
-					activeFdOverrides = previousActiveFdOverrides;
-					activeChildCwd = previousActiveChildCwd;
-					memory = parentMemory;
-				}
-			};
-			const runReadyDeferredChildren = (requestedPid) => {
-				let ran = false;
-				for (const [pid, child] of Array.from(deferredChildren.entries())) {
-					if (requestedPid && pid !== requestedPid) continue;
-					const stdinHandle = child.overrides.get(0);
-					if (pipeHasOpenWriters(stdinHandle)) continue;
-					deferredChildren.delete(pid);
-					runChild(child);
-					ran = true;
-				}
-				return ran;
-			};
-			const onPipeHandleClose = () => {
-				while (runReadyDeferredChildren()) {
-					// Keep draining children made ready by the previous child exit.
-				}
-			};
-			const host = {
-				setMemory(nextMemory) {
-					memory = nextMemory;
-					return host;
-				},
-				setParentWasi(wasi) {
-					parentWasi = wasi || null;
-					return host;
-				},
-				installBlockingStdin(processLike) {
-					const target = processLike || globalThis.process;
-					const wasiHost = globalThis.__agentOSWasiHost || (globalThis.__agentOSWasiHost = {});
-					wasiHost.readStdin = (maxBytes) => {
-						while (true) {
-							const value = target && target.stdin && typeof target.stdin.read === "function"
-								? target.stdin.read(maxBytes)
-								: null;
-							const length = typeof value === "string"
-								? value.length
-								: value instanceof Uint8Array
-									? value.byteLength
-									: value && typeof value.byteLength === "number"
-										? value.byteLength
-										: 0;
-							if (length > 0) return value;
-							Atomics.wait(wait, 0, 0, 10);
-						}
-					};
-					wasiHost.readStdinNonBlocking = (maxBytes) =>
-							target && target.stdin && typeof target.stdin.read === "function"
-								? target.stdin.read(maxBytes)
-								: null;
-						wasiHost.stdinReadableBytes = () => 1;
-					if (typeof wasiHost.lookupFdHandle === "function" && wasiHost.lookupFdHandle !== lookupSyntheticFd) {
-						previousLookupFdHandle = wasiHost.lookupFdHandle;
-					}
-					wasiHost.lookupFdHandle = lookupSyntheticFd;
-					return host;
-				},
-				imports: {
-					host_tty: {
-						// crossterm WasiEventSource keystroke source: read(ptr, len, timeout_ms) -> usize.
-						// usize::MAX (-1 as i32) means block until input; the brush/reedline read loop
-						// polls with None (blocking), so we wait on the kernel PTY stdin and copy bytes
-						// into guest memory, returning the count. Short/zero timeouts report "no event"
-						// (0); the guest then falls back to its blocking read.
-						read(ptr, len, timeoutMs) {
-							const cap = len >>> 0;
-							if (cap === 0) return 0;
-							const wasiHost = globalThis.__agentOSWasiHost;
-							if (!wasiHost) return 0;
-							const blocking = (timeoutMs >>> 0) === 0xffffffff;
-							const budget = blocking ? Infinity : (timeoutMs >>> 0);
-							const toBytes = (value) => {
-								if (typeof value === "string") return new TextEncoder().encode(value);
-								if (value instanceof Uint8Array) return value;
-								if (value && typeof value.byteLength === "number")
-									return new Uint8Array(value.buffer || value, value.byteOffset || 0, value.byteLength);
-								return null;
-							};
-							let waited = 0;
-							for (;;) {
-								// Prefer a single non-blocking read so finite timeouts (e.g. crossterm's
-								// cursor-position report) can return promptly with whatever is queued.
-								const value = typeof wasiHost.readStdinNonBlocking === "function"
-									? wasiHost.readStdinNonBlocking(cap)
-									: null;
-								const bytes = toBytes(value);
-								if (bytes && bytes.length > 0) {
-									const n = Math.min(bytes.length, cap);
-									writeBytes(ptr, bytes.subarray(0, n));
-									return n;
-								}
-								if (!blocking && waited >= budget) return 0;
-								const step = blocking ? 10 : Math.max(1, Math.min(10, budget - waited));
-								Atomics.wait(wait, 0, 0, step);
-								waited += step;
-							}
-						},
-						// Toggle terminal raw mode on the guest's PTY. crossterm calls this instead
-						// of tcsetattr; route it to the kernel via process.stdin.setRawMode (which
-						// drives __pty_set_raw_mode), so reedline gets raw \r keystrokes and submits
-						// commands. Returns errno 0.
-						set_raw_mode(_enabled) {
-							return 0;
-						},
-					},
-					host_user: {
-						getuid(ret) { return writeU32(ret, 1000); },
-						getgid(ret) { return writeU32(ret, 1000); },
-						geteuid(ret) { return writeU32(ret, 1000); },
-						getegid(ret) { return writeU32(ret, 1000); },
-						isatty(fd, ret) {
-							return writeU32(ret, fd === 0 || fd === 1 || fd === 2 ? 1 : 0);
-						},
-						getpwuid(_uid, bufPtr, bufLen, retLen) {
-							const len = Math.min(userRecord.length, bufLen >>> 0);
-							writeBytes(bufPtr, userRecord.subarray(0, len));
-							writeU32(retLen, len);
-							return errnoSuccess;
-						},
-					},
-					host_fs: {
-						fd_mode(fd) {
-							const descriptor = fd >>> 0;
-							if (descriptor <= 2) return 0o020666;
-							const handle = lookupSyntheticFd(descriptor);
-							if (handle && (handle.kind === "pipe-read" || handle.kind === "pipe-write")) return 0o010600;
-							if (handle && handle.kind === "guest-file" && typeof handle.targetFd === "number") {
-								try {
-									return modeFromStat(fs().fstatSync(handle.targetFd), 0o100644);
-								} catch {
-									return 0o100644;
-								}
-							}
-							const parentEntry = parentWasi && parentWasi.fdTable && parentWasi.fdTable.get(descriptor);
-							if (parentEntry && (parentEntry.kind === "preopen" || parentEntry.kind === "directory")) return 0o040755;
-							if (parentEntry && parentEntry.kind === "file" && typeof parentEntry.realFd === "number") {
-								try {
-									return modeFromStat(fs().fstatSync(parentEntry.realFd), 0o100644);
-								} catch {
-									return 0o100644;
-								}
-							}
-							return 0o100644;
-						},
-						// Signature must match the node runner's host_fs.path_mode
-						// (fd, pathPtr, pathLen, followSymlinks). The guest passes the
-						// directory fd first (3 = cwd preopen); the path is at args 2/3.
-						path_mode(_fd, pathPtr, pathLen, followSymlinks) {
-							try {
-								const guestPath = resolveGuestPath(readString(pathPtr, pathLen));
-								const stat = Number(followSymlinks) === 0
-									? fs().lstatSync(guestPath)
-									: fs().statSync(guestPath);
-								return modeFromStat(stat, 0o100644);
-							} catch {
-								return 0;
-							}
-						},
-						// Matches node runner host_fs.chmod(fd, pathPtr, pathLen, mode):
-						// 0 on success, 1 on failure.
-						chmod(_fd, pathPtr, pathLen, mode) {
-							try {
-								const guestPath = resolveGuestPath(readString(pathPtr, pathLen));
-								fs().chmodSync(guestPath, Number(mode) >>> 0);
-								return 0;
-							} catch {
-								return 1;
-							}
-						},
-						// The node runner exports 7 host_fs symbols; mirror the full
-						// contract here so any guest module that imports the rest still
-						// instantiates in-browser (a missing import is a hard LinkError).
-						// Sentinels match the node runner: (1<<64)-1 for size, 1 for
-						// mutations.
-						fd_size(fd) {
-							try {
-								const descriptor = fd >>> 0;
-								const handle = lookupSyntheticFd(descriptor);
-								if (
-									handle &&
-									handle.kind === "guest-file" &&
-									typeof handle.targetFd === "number"
-								) {
-									return BigInt(fs().fstatSync(handle.targetFd).size ?? -1);
-								}
-								const parentEntry =
-									parentWasi && parentWasi.fdTable && parentWasi.fdTable.get(descriptor);
-								if (
-									parentEntry &&
-									parentEntry.kind === "file" &&
-									typeof parentEntry.realFd === "number"
-								) {
-									return BigInt(fs().fstatSync(parentEntry.realFd).size ?? -1);
-								}
-								return (1n << 64n) - 1n;
-							} catch {
-								return (1n << 64n) - 1n;
-							}
-						},
-						path_size(_fd, pathPtr, pathLen, followSymlinks) {
-							try {
-								const guestPath = resolveGuestPath(readString(pathPtr, pathLen));
-								const stat = Number(followSymlinks) === 0
-									? fs().lstatSync(guestPath)
-									: fs().statSync(guestPath);
-								return BigInt(stat.size ?? -1);
-							} catch {
-								return (1n << 64n) - 1n;
-							}
-						},
-						// Browser fs() has no fd-based fchmod/ftruncate; provide the
-						// symbols (best-effort failure) so imports resolve. Rust guest
-						// binaries bypass wasi-libc stat/chmod/truncate, so these paths
-						// are unreached in practice.
-						fchmod(_fd, _mode) {
-							return 1;
-						},
-						ftruncate(_fd, _length) {
-							return 1;
-						},
-					},
-					host_process: {
-						proc_spawn(argvPtr, argvLen, envpPtr, envpLen, stdinFd, stdoutFd, stderrFd, cwdPtr, cwdLen, retPid) {
-							try {
-								const argv = decodeNullSeparated(readBytes(argvPtr, argvLen));
-								if (argv.length === 0) return errnoNosys;
-								const commandPath = argv[0];
-								const commandName = commandPath.split("/").filter(Boolean).at(-1) || commandPath;
-								const module = commandModules.get(commandName);
-								if (!module) return errnoNosys;
-								const env = {
-									...(options && options.env ? options.env : {}),
-									...parseEnv(readBytes(envpPtr, envpLen)),
-									PATH: (options && options.path) || "/bin:/usr/bin",
-								};
-								const cwd = cwdLen ? readString(cwdPtr, cwdLen) : ((options && options.cwd) || "/");
-								const childOverrideHandles = [];
-								const overrides = new Map();
-								for (const [childFd, parentFd, expectedKind] of [
-									[0, stdinFd >>> 0, "read"],
-									[1, stdoutFd >>> 0, "write"],
-									[2, stderrFd >>> 0, "write"],
-								]) {
-									const parentHandle = lookupSyntheticFd(parentFd);
-									if (parentFd <= 2 && !parentHandle) continue;
-									if (!handleMatchesStdio(parentHandle, expectedKind)) return errnoBadf;
-									const childHandle = cloneSyntheticHandle(parentHandle);
-									if (!childHandle) return errnoBadf;
-									overrides.set(childFd, childHandle);
-									childOverrideHandles.push(childHandle);
-								}
-								const pid = nextPid++;
-								const child = { pid, module, commandPath, argv, env, cwd, overrides, childOverrideHandles };
-								if (pipeHasOpenWriters(overrides.get(0))) {
-									deferredChildren.set(pid, child);
-								} else {
-									runChild(child);
-								}
-								return writeU32(retPid, pid);
-							} catch {
-								return errnoNosys;
-							}
-						},
-						proc_waitpid(pid, _options, retStatus, retPid) {
-							const requested = pid >>> 0;
-							runReadyDeferredChildren(requested === 0xffffffff ? undefined : requested);
-							const childPid = requested === 0xffffffff
-								? exitedChildren.keys().next().value
-								: requested;
-							if (!childPid || !exitedChildren.has(childPid)) {
-								writeU32(retPid, 0);
-								return errnoChild;
-							}
-							writeU32(retStatus, exitedChildren.get(childPid) || 0);
-							writeU32(retPid, childPid);
-							exitedChildren.delete(childPid);
-							return errnoSuccess;
-						},
-						fd_dup(fd, retNewFd) {
-							const descriptor = fd >>> 0;
-							const handle = lookupSyntheticFd(descriptor) || (descriptor <= 2
-								? { kind: "stdio", targetFd: descriptor, open: true }
-								: null);
-							if (!handle) return writeU32(retNewFd, fd);
-							const cloned = cloneSyntheticHandle(handle);
-							if (!cloned) return errnoBadf;
-							return writeU32(retNewFd, allocateSyntheticFd(cloned));
-						},
-						fd_dup2(oldFd, newFd) {
-							if (oldFd === newFd) return errnoSuccess;
-							const handle = lookupSyntheticFd(oldFd >>> 0);
-							if (!handle) return oldFd <= 2 && newFd <= 2 ? errnoSuccess : errnoBadf;
-							const cloned = cloneSyntheticHandle(handle);
-							if (!cloned) return errnoBadf;
-							replaceSyntheticFd(newFd >>> 0, cloned);
-							return errnoSuccess;
-						},
-						fd_pipe(retReadFd, retWriteFd) {
-							const pipe = {
-								chunks: [],
-								consumers: new Map(),
-								producers: new Map(),
-								readHandleCount: 1,
-								writeHandleCount: 1,
-							};
-							const readFd = allocateSyntheticFd({ kind: "pipe-read", pipe, open: true, onClose: onPipeHandleClose });
-							const writeFd = allocateSyntheticFd({ kind: "pipe-write", pipe, open: true, onClose: onPipeHandleClose });
-							writeU32(retReadFd, readFd);
-							writeU32(retWriteFd, writeFd);
-							return errnoSuccess;
-						},
-						proc_getpid(retPid) { return writeU32(retPid, 1); },
-						proc_getppid(retPid) { return writeU32(retPid, 0); },
-						proc_kill() { return errnoNosys; },
-						sleep_ms(milliseconds) {
-							Atomics.wait(wait, 0, 0, milliseconds >>> 0);
-							return errnoSuccess;
-						},
-						pty_open() { return errnoNosys; },
-						proc_sigaction() { return errnoSuccess; },
-					},
-				},
-			};
-			return host;
-		}
-		module.exports = { createWasiCommandHost };
-		module.exports.default = module.exports;
-	`,
-	os: `
-		const virtualOs = globalThis.__agentOSVirtualOs || {};
-		const stringValue = (value, fallback) =>
-			typeof value === "string" && value.length > 0 ? value : fallback;
-		const platform = stringValue(virtualOs.platform, "linux");
-		const arch = stringValue(virtualOs.arch, "x64");
-		const homedir = stringValue(virtualOs.homedir, "/home/user");
-		const tmpdir = stringValue(virtualOs.tmpdir, "/tmp");
-		const username = stringValue(virtualOs.user, "user");
-		const shell = stringValue(virtualOs.shell, "/bin/sh");
-		const positiveInteger = (value, fallback) =>
-			Number.isSafeInteger(value) && value > 0 ? value : fallback;
-		const nonNegativeInteger = (value, fallback) =>
-			Number.isSafeInteger(value) && value >= 0 ? value : fallback;
-		const cpuCount = positiveInteger(virtualOs.cpuCount, 1);
-		const totalmem = positiveInteger(virtualOs.totalmem, 1024 * 1024 * 1024);
-		const freemem = Math.min(
-			positiveInteger(virtualOs.freemem, 512 * 1024 * 1024),
-			totalmem,
-		);
-		const uid = nonNegativeInteger(virtualOs.uid, 1000);
-		const gid = nonNegativeInteger(virtualOs.gid, 1000);
-		const cpuInfo = () => ({
-			model: stringValue(virtualOs.cpuModel, "secure-exec virtual CPU"),
-			speed: 0,
-			times: { user: 0, nice: 0, sys: 0, idle: 0, irq: 0 },
-		});
-		module.exports = {
-			EOL: "\\n",
-			arch: () => arch,
-			cpus: () => Array.from({ length: cpuCount }, cpuInfo),
-			endianness: () => "LE",
-			freemem: () => freemem,
-			getPriority: () => 0,
-			homedir: () => homedir,
-			hostname: () => stringValue(virtualOs.hostname, "secure-exec"),
-			loadavg: () => [0, 0, 0],
-			machine: () => stringValue(virtualOs.machine, "x86_64"),
-			networkInterfaces: () => ({}),
-			platform: () => platform,
-			release: () => stringValue(virtualOs.release, "6.8.0-secure-exec"),
-			tmpdir: () => tmpdir,
-			totalmem: () => totalmem,
-			type: () => stringValue(virtualOs.type, platform === "win32" ? "Windows_NT" : "Linux"),
-			uptime: () => 0,
-			userInfo: () => ({ username, uid, gid, shell, homedir }),
-			version: () => stringValue(virtualOs.version, "#1 SMP PREEMPT_DYNAMIC secure-exec"),
-		};
-	`,
-	"node:os": "module.exports = require('os');",
-};
-
-export function exposeCustomGlobal(name: string, value: unknown): void {
-	(globalThis as Record<string, unknown>)[name] = value;
-}
-
-export function exposeMutableRuntimeStateGlobal(
-	name: string,
-	value: unknown,
-): void {
-	(globalThis as Record<string, unknown>)[name] = value;
-}
-
-export function getIsolateRuntimeSource(id: string): string {
-	if (id === "overrideProcessCwd") {
-		return `
-			if (globalThis.process && globalThis.__runtimeProcessCwdOverride) {
-				globalThis.process.cwd = () => String(globalThis.__runtimeProcessCwdOverride);
-			}
-		`;
-	}
-	return "";
-}
-
-export function getRequireSetupCode(): string {
-	return `
-		(function () {
-			${guestEncodingBootstrapCode()}
-
-			const callSyncBridge = (ref, ...args) => {
-				if (typeof ref === "function") {
-					return ref(...args);
-				}
-				if (ref && typeof ref.applySync === "function") {
-					return ref.applySync(undefined, args);
-				}
-				if (ref && typeof ref.applySyncPromise === "function") {
-					return ref.applySyncPromise(undefined, args);
-				}
-				return undefined;
-			};
-
-			const pathDirname = (value) => {
-				const normalized = String(value || "/").replace(/\\\\/g, "/");
-				if (normalized === "/") return "/";
-				const parts = normalized.split("/").filter(Boolean);
-				return parts.length <= 1 ? "/" : "/" + parts.slice(0, -1).join("/");
-			};
-
-			globalThis.require = function require(specifier) {
-				const polyfillSource = callSyncBridge(
-					globalThis._loadPolyfill,
-					specifier.replace(/^node:/, ""),
-				);
-				if (polyfillSource) {
-					const module = { exports: {} };
-					const fn = new Function("module", "exports", polyfillSource);
-					fn(module, module.exports);
-					return module.exports;
-				}
-
-				const currentModule = globalThis._currentModule || { dirname: "/" };
-				const resolved = callSyncBridge(
-					globalThis._resolveModuleSync,
-					specifier,
-					currentModule.dirname || "/",
-					"require",
-				);
-				if (!resolved) {
-					throw new Error("Cannot resolve module '" + specifier + "'");
-				}
-
-				const cache = globalThis._moduleCache || (globalThis._moduleCache = {});
-				if (cache[resolved]) {
-					return cache[resolved].exports;
-				}
-
-				const source = callSyncBridge(
-					globalThis._loadFileSync,
-					resolved,
-					"require",
-				);
-				if (source == null) {
-					throw new Error("Cannot load module '" + resolved + "'");
-				}
-
-				const module = { exports: {} };
-				cache[resolved] = module;
-				const previous = globalThis._currentModule;
-				globalThis._currentModule = { filename: resolved, dirname: pathDirname(resolved) };
-				try {
-					const fn = new Function(
-						"require",
-						"module",
-						"exports",
-						"__filename",
-						"__dirname",
-						source,
-					);
-					fn(globalThis.require, module, module.exports, resolved, pathDirname(resolved));
-				} finally {
-					globalThis._currentModule = previous;
-				}
-				return module.exports;
-			};
-
-			// Expose a faithful global Buffer to all guest code (npm packages
-			// expect it), matching native. Backed by the real \`buffer\` package.
-			if (typeof globalThis.Buffer === "undefined") {
-				globalThis.Buffer = globalThis.require("buffer").Buffer;
-			}
-
-			const util = globalThis.require("util");
-			const formatConsoleLine = (...args) => {
-				if (!util || typeof util.formatWithOptions !== "function") {
-					throw new Error("console formatting requires util.formatWithOptions");
-				}
-				return util.formatWithOptions({ colors: false }, ...args) + "\\n";
-			};
-			const writeConsole = (ref, args) => {
-				callSyncBridge(ref, formatConsoleLine(...args));
-			};
-			const consoleObject = {
-				log: (...args) => writeConsole(globalThis._log, args),
-				info: (...args) => writeConsole(globalThis._log, args),
-				debug: (...args) => writeConsole(globalThis._log, args),
-				warn: (...args) => writeConsole(globalThis._error, args),
-				error: (...args) => writeConsole(globalThis._error, args),
-				dir: (value) => writeConsole(globalThis._log, [value]),
-				dirxml: (...args) => writeConsole(globalThis._log, args),
-				assert: (condition, ...args) => {
-					if (condition) return;
-					writeConsole(globalThis._error, args.length > 0 ? args : ["Assertion failed"]);
-				},
-				clear: () => {},
-				count: (label = "default") => {
-					const key = String(label);
-					consoleObject._counts.set(key, (consoleObject._counts.get(key) || 0) + 1);
-					consoleObject.log(key + ": " + consoleObject._counts.get(key));
-				},
-				countReset: (label = "default") => {
-					consoleObject._counts.delete(String(label));
-				},
-				group: (...args) => {
-					if (args.length > 0) consoleObject.log(...args);
-				},
-				groupCollapsed: (...args) => {
-					if (args.length > 0) consoleObject.log(...args);
-				},
-				groupEnd: () => {},
-				table: (value) => consoleObject.log(value),
-				time: (label = "default") => {
-					consoleObject._times.set(String(label), Date.now());
-				},
-				timeEnd: (label = "default") => {
-					const key = String(label);
-					if (!consoleObject._times.has(key)) return;
-					const startedAt = consoleObject._times.get(key);
-					consoleObject._times.delete(key);
-					consoleObject.log(key + ": " + (Date.now() - startedAt) + "ms");
-				},
-				timeLog: (label = "default", ...args) => {
-					const key = String(label);
-					if (!consoleObject._times.has(key)) return;
-					consoleObject.log(key + ": " + (Date.now() - consoleObject._times.get(key)) + "ms", ...args);
-				},
-				trace: (...args) => {
-					const message = formatConsoleLine(...args).trimEnd();
-					const error = new Error(message);
-					writeConsole(globalThis._error, [error.stack || message]);
-				},
-				_counts: new Map(),
-				_times: new Map(),
-			};
-			globalThis.console = consoleObject;
-		})();
-	`;
-}
-
-export { createInMemoryFileSystem, InMemoryFileSystem };
diff --git a/packages/browser/src/sab-execution-endpoint.ts b/packages/browser/src/sab-execution-endpoint.ts
deleted file mode 100644
index 3c937263c..000000000
--- a/packages/browser/src/sab-execution-endpoint.ts
+++ /dev/null
@@ -1,96 +0,0 @@
-// Execution-worker side of the converged async-agent SAB channel (the counterpart
-// to KernelReactor; see AGENTOS-WEB-ASYNC-AGENTS.md §3.2). An agent/guest execution
-// worker uses this to: write stdout/stderr/exit to the kernel (non-blocking SAB
-// writes + a GEN signal), and make a synchronous kernel syscall (write a SYSCALL
-// frame, then BLOCK on the down-channel for the result). The blocking syscall shim
-// is only legal in a Worker (`Atomics.wait` throws on the main thread) — which is
-// exactly the model: the execution worker blocks while the kernel worker services.
-//
-// stdin is delivered to the agent via postMessage (event-loop friendly), NOT this
-// SAB — so an async agent can `await` the LLM while still receiving stdin (§3.2's
-// stdio split). This endpoint carries only exec→kernel output + syscalls and
-// kernel→exec syscall results.
-
-import { SabRing, type SabRingLayout } from "./sab-ring.js";
-
-const FRAME_SYSCALL = 1;
-const FRAME_STDOUT = 2;
-const FRAME_STDERR = 3;
-const FRAME_EXIT = 4;
-const FRAME_RESULT = 1;
-const FRAME_POISON = 2;
-const GEN_INDEX = 0;
-const DEFAULT_SYSCALL_TIMEOUT_MS = 30_000;
-
-/** Thrown when the kernel poisoned this execution's channel (it was killed/torn
- * down) while a syscall shim was blocked — the agent should exit. */
-export class ExecutionKilledError extends Error {
-	constructor() {
-		super("execution killed by the kernel");
-		this.name = "ExecutionKilledError";
-	}
-}
-
-export class SabExecutionEndpoint {
-	private readonly up: SabRing; // producer: exec → kernel
-	private readonly down: SabRing; // consumer: kernel → exec
-	private readonly control: Int32Array; // global GEN
-
-	constructor(opts: {
-		upSab: SharedArrayBuffer;
-		downSab: SharedArrayBuffer;
-		controlSab: SharedArrayBuffer;
-		layout: SabRingLayout;
-	}) {
-		this.up = new SabRing(opts.upSab, opts.layout);
-		this.down = new SabRing(opts.downSab, opts.layout);
-		this.control = new Int32Array(opts.controlSab, 0, 1);
-	}
-
-	private signal(): void {
-		Atomics.add(this.control, GEN_INDEX, 1);
-		Atomics.notify(this.control, GEN_INDEX);
-	}
-
-	/** Write a framed message to the up-channel + wake the kernel reactor. Blocks
-	 * (bounded back-off) only if the ring is full — the kernel drains continuously. */
-	private writeUp(kind: number, payload: Uint8Array): void {
-		const frame = new Uint8Array(1 + payload.byteLength);
-		frame[0] = kind;
-		frame.set(payload, 1);
-		while (!this.up.tryWrite(frame)) {
-			Atomics.wait(this.control, GEN_INDEX, Atomics.load(this.control, GEN_INDEX), 1);
-		}
-		this.signal();
-	}
-
-	writeStdout(bytes: Uint8Array): void {
-		this.writeUp(FRAME_STDOUT, bytes);
-	}
-	writeStderr(bytes: Uint8Array): void {
-		this.writeUp(FRAME_STDERR, bytes);
-	}
-	exit(code = 0): void {
-		this.writeUp(FRAME_EXIT, new Uint8Array([code & 0xff, (code >>> 8) & 0xff, (code >>> 16) & 0xff, (code >>> 24) & 0xff]));
-	}
-
-	/** Synchronous kernel syscall (Worker-only): write the request, then block on the
-	 * down-channel until the kernel writes the result. This is the guest model's
-	 * blocking shim — the agent only blocks here (inside a sync syscall), never while
-	 * awaiting the LLM (§3.2). */
-	syscall(payload: Uint8Array, timeoutMs = DEFAULT_SYSCALL_TIMEOUT_MS): Uint8Array {
-		this.writeUp(FRAME_SYSCALL, payload);
-		const deadline = Date.now() + timeoutMs;
-		for (;;) {
-			const frame = this.down.tryRead();
-			if (frame !== null) {
-				if (frame[0] === FRAME_POISON) throw new ExecutionKilledError();
-				if (frame[0] === FRAME_RESULT) return frame.subarray(1);
-				// unknown down frame: ignore and keep waiting
-			}
-			const remaining = deadline - Date.now();
-			if (remaining <= 0) throw new Error("kernel syscall timed out");
-			Atomics.wait(this.control, GEN_INDEX, Atomics.load(this.control, GEN_INDEX), remaining);
-		}
-	}
-}
diff --git a/packages/browser/src/sab-reactor.ts b/packages/browser/src/sab-reactor.ts
deleted file mode 100644
index 4d433fbc1..000000000
--- a/packages/browser/src/sab-reactor.ts
+++ /dev/null
@@ -1,287 +0,0 @@
-// Kernel-worker reactor for the converged async-agent executor
-// (AGENTOS-WEB-ASYNC-AGENTS.md §3.3/§3.4/§7). It multiplexes many per-execution
-// duplex SAB channels: it drains every execution's up-ring (exec→kernel: syscalls,
-// stdout/stderr, exit), services syscalls inline via a host callback, routes output
-// into PER-EXECUTION queues, and blocks on a single global GEN signal between
-// wakeups. `poll(executionId, ...)` returns that execution's next output, servicing
-// everyone's syscalls in the meantime — the property that keeps a synchronous
-// AcpCore from deadlocking while it block-waits for one agent's stdout.
-//
-// Security invariants enforced here (§7):
-//  - Identity is CHANNEL-DERIVED: the reactor knows which execution a frame belongs
-//    to from which ring it read it on; up-frames carry NO identity bytes.
-//  - Hostile frames (bad length / bad kind) KILL that execution — never throw out of
-//    the reactor or hang it (one bad agent must not wedge the shared kernel worker).
-//  - The TCB never blocks on an untrusted ring: down-ring writes that would block are
-//    a protocol kill, not a wait.
-
-import { SabRing, SabRingProtocolError, type SabRingLayout } from "./sab-ring.js";
-
-// Up-channel frame kinds (exec → kernel). First byte of each frame.
-export const FRAME_SYSCALL = 1;
-export const FRAME_STDOUT = 2;
-export const FRAME_STDERR = 3;
-export const FRAME_EXIT = 4;
-// Down-channel frame kinds (kernel → exec).
-export const FRAME_RESULT = 1;
-export const FRAME_POISON = 2;
-
-const GEN_INDEX = 0;
-/** Bytes for the global control SAB (a single GEN counter the reactor waits on). */
-export const REACTOR_CONTROL_BYTES = 1 * Int32Array.BYTES_PER_ELEMENT;
-/** Max up-frames drained per execution per pass (fairness — §4/F3). */
-const DRAIN_FAIRNESS_CAP = 256;
-
-export type OutputKind = typeof FRAME_STDOUT | typeof FRAME_STDERR | typeof FRAME_EXIT;
-export interface OutputFrame {
-	kind: OutputKind;
-	payload: Uint8Array;
-}
-
-/** Services one guest syscall synchronously (the kernel). Returns the result bytes
- * written back to the execution's down-ring. Return `DEFERRED` for an async
- * syscall whose result is not ready synchronously (e.g. a host-callback to the
- * main thread for on-device inference); the execution stays blocked in its syscall
- * shim until the result arrives later via the completion channel (§6 / §3.2.1). */
-export const DEFERRED: unique symbol = Symbol("syscall-deferred");
-export type ServiceSyscall = (
-	executionId: string,
-	payload: Uint8Array,
-) => Uint8Array | typeof DEFERRED;
-
-interface ExecutionState {
-	id: string;
-	epoch: number;
-	up: SabRing;
-	down: SabRing;
-	output: OutputFrame[];
-	exited: boolean;
-	killed: boolean;
-}
-
-function encodeFrame(kind: number, payload: Uint8Array): Uint8Array {
-	const out = new Uint8Array(1 + payload.byteLength);
-	out[0] = kind;
-	out.set(payload, 1);
-	return out;
-}
-
-/** Frame a deferred-syscall completion ({executionId, result}) for the completion
- * channel. The main thread (the host-callback producer) writes these; the reactor
- * drains them and delivers the result to the execution's blocked syscall. */
-export function encodeSyscallCompletion(executionId: string, result: Uint8Array): Uint8Array {
-	const id = new TextEncoder().encode(executionId);
-	const out = new Uint8Array(1 + id.byteLength + result.byteLength);
-	out[0] = id.byteLength;
-	out.set(id, 1);
-	out.set(result, 1 + id.byteLength);
-	return out;
-}
-
-export class KernelReactor {
-	private readonly control: Int32Array;
-	private readonly serviceSyscall: ServiceSyscall;
-	private readonly now: () => number;
-	private readonly executions = new Map<string, ExecutionState>();
-	// Optional completion channel: the MAIN thread (an async host-callback producer)
-	// writes deferred-syscall results here; the reactor drains them and unblocks the
-	// waiting execution. The main thread becomes another reactor producer (§6).
-	private readonly completions: SabRing | null;
-
-	constructor(opts: {
-		controlSab: SharedArrayBuffer;
-		serviceSyscall: ServiceSyscall;
-		now: () => number;
-		completionSab?: SharedArrayBuffer;
-		completionLayout?: SabRingLayout;
-	}) {
-		this.control = new Int32Array(opts.controlSab, 0, 1);
-		this.serviceSyscall = opts.serviceSyscall;
-		this.now = opts.now;
-		this.completions =
-			opts.completionSab && opts.completionLayout
-				? new SabRing(opts.completionSab, opts.completionLayout)
-				: null;
-	}
-
-	/** Register an execution's channel pair. Identity is bound HERE, by the TCB,
-	 * before the executor runs (§7/F1, F4, F6). */
-	register(executionId: string, channels: { upSab: SharedArrayBuffer; downSab: SharedArrayBuffer; layout: SabRingLayout }): void {
-		if (this.executions.has(executionId)) {
-			throw new Error(`execution ${executionId} already registered`);
-		}
-		this.executions.set(executionId, {
-			id: executionId,
-			epoch: 0,
-			up: new SabRing(channels.upSab, channels.layout),
-			down: new SabRing(channels.downSab, channels.layout),
-			exited: false,
-			killed: false,
-			output: [],
-		});
-	}
-
-	isLive(executionId: string): boolean {
-		const e = this.executions.get(executionId);
-		return !!e && !e.killed;
-	}
-
-	/** Drain every live execution's up-ring once (fairness-bounded), servicing
-	 * syscalls inline and queuing output per-execution. Returns true if any frame
-	 * was processed. A hostile frame kills only the offending execution. */
-	drainOnce(): boolean {
-		let processed = this.drainCompletions();
-		for (const e of this.executions.values()) {
-			if (e.killed) continue;
-			for (let i = 0; i < DRAIN_FAIRNESS_CAP; i++) {
-				let frame: Uint8Array | null;
-				try {
-					frame = e.up.tryRead();
-				} catch (error) {
-					if (error instanceof SabRingProtocolError) {
-						this.kill(e.id);
-						break;
-					}
-					throw error;
-				}
-				if (frame === null) break;
-				processed = true;
-				if (!this.route(e, frame)) break; // route killed the execution
-			}
-		}
-		return processed;
-	}
-
-	private route(e: ExecutionState, frame: Uint8Array): boolean {
-		const kind = frame[0];
-		const payload = frame.subarray(1);
-		switch (kind) {
-			case FRAME_SYSCALL: {
-				const result = this.serviceSyscall(e.id, payload.slice());
-				// DEFERRED: an async syscall (e.g. host-callback inference). The
-				// execution stays blocked in its shim; the result arrives later on the
-				// completion channel and is delivered by drainCompletions.
-				if (result === DEFERRED) return true;
-				// The TCB must never block on a full down-ring: with one syscall in
-				// flight per execution the down-ring cannot be full unless the executor
-				// is misbehaving — treat that as a protocol kill, not a wait (§7/F7).
-				if (!e.down.tryWrite(encodeFrame(FRAME_RESULT, result))) {
-					this.kill(e.id);
-					return false;
-				}
-				this.signal();
-				return true;
-			}
-			case FRAME_STDOUT:
-			case FRAME_STDERR: {
-				e.output.push({ kind, payload: payload.slice() });
-				return true;
-			}
-			case FRAME_EXIT: {
-				e.exited = true;
-				e.output.push({ kind: FRAME_EXIT, payload: payload.slice() });
-				return true;
-			}
-			default:
-				// Unknown frame kind from an untrusted producer → kill, don't hang.
-				this.kill(e.id);
-				return false;
-		}
-	}
-
-	/** Drain the completion channel: deliver each async deferred-syscall result to
-	 * the execution's down-ring, unblocking its waiting syscall shim. Returns true if
-	 * any completion was delivered. */
-	private drainCompletions(): boolean {
-		if (!this.completions) return false;
-		let processed = false;
-		for (let i = 0; i < DRAIN_FAIRNESS_CAP; i++) {
-			let frame: Uint8Array | null;
-			try {
-				frame = this.completions.tryRead();
-			} catch {
-				break; // a malformed completion frame is a host bug; stop draining
-			}
-			if (frame === null) break;
-			processed = true;
-			const idLen = frame[0];
-			const executionId = new TextDecoder().decode(frame.subarray(1, 1 + idLen));
-			const result = frame.subarray(1 + idLen);
-			const e = this.executions.get(executionId);
-			if (e && !e.killed) {
-				if (e.down.tryWrite(encodeFrame(FRAME_RESULT, result.slice()))) {
-					this.signal();
-				} else {
-					this.kill(e.id);
-				}
-			}
-		}
-		return processed;
-	}
-
-	/** Dequeue the next queued output (stdout/stderr/exit) for one execution. */
-	takeOutput(executionId: string): OutputFrame | null {
-		const e = this.executions.get(executionId);
-		if (!e) return null;
-		return e.output.shift() ?? null;
-	}
-
-	private anyRingPending(): boolean {
-		if (this.completions?.hasPending()) return true;
-		for (const e of this.executions.values()) {
-			if (!e.killed && e.up.hasPending()) return true;
-		}
-		return false;
-	}
-
-	/** The blocking reactor step: return `executionId`'s next output, servicing all
-	 * executions' syscalls while waiting, until `deadlineMs` (real clock). Returns
-	 * null on timeout or if the execution was killed. Legal to block here: the
-	 * reactor runs in a Worker. */
-	poll(executionId: string, deadlineMs: number): OutputFrame | null {
-		for (;;) {
-			this.drainOnce();
-			const out = this.takeOutput(executionId);
-			if (out !== null) return out;
-			if (!this.isLive(executionId)) return null;
-			const remaining = deadlineMs - this.now();
-			if (remaining <= 0) return null;
-			// Snapshot GEN AFTER the drain confirmed nothing is pending, then wait
-			// only if still empty (§4/F4 — no lost wakeup, no busy-spin).
-			const gen = Atomics.load(this.control, GEN_INDEX);
-			if (!this.anyRingPending()) {
-				Atomics.wait(this.control, GEN_INDEX, gen, remaining);
-			}
-		}
-	}
-
-	/** Producer-side wake: bump GEN + notify. Execution workers call the equivalent
-	 * after each up-ring write; the reactor calls it after writing a down result. */
-	signal(): void {
-		Atomics.add(this.control, GEN_INDEX, 1);
-		Atomics.notify(this.control, GEN_INDEX);
-	}
-
-	/** Kill an execution: bump its epoch, poison its down-ring so a parked syscall
-	 * shim wakes and sees EOF, and stop reading its rings. Never blocks (§7). */
-	kill(executionId: string): void {
-		const e = this.executions.get(executionId);
-		if (!e || e.killed) return;
-		e.killed = true;
-		e.epoch += 1;
-		try {
-			e.down.tryWrite(encodeFrame(FRAME_POISON, new Uint8Array(0)));
-		} catch {
-			// down-ring unusable; nothing more to do — the worker is being torn down.
-		}
-		this.signal();
-	}
-
-	epochOf(executionId: string): number | null {
-		return this.executions.get(executionId)?.epoch ?? null;
-	}
-
-	unregister(executionId: string): void {
-		this.executions.delete(executionId);
-	}
-}
diff --git a/packages/browser/src/sab-ring.ts b/packages/browser/src/sab-ring.ts
deleted file mode 100644
index 11720edea..000000000
--- a/packages/browser/src/sab-ring.ts
+++ /dev/null
@@ -1,146 +0,0 @@
-// Single-producer / single-consumer (SPSC) framed ring buffer over a
-// SharedArrayBuffer, for the converged kernel-in-worker reactor (see
-// AGENTOS-WEB-ASYNC-AGENTS.md §4). One ring carries length-prefixed frames in one
-// direction between exactly one writer and one reader; an execution's duplex
-// channel is a pair (up: exec→kernel, down: kernel→exec).
-//
-// Design choices that make this safe to read from the TCB against an UNTRUSTED
-// producer:
-//  - SPSC: the producer owns `tail`, the consumer owns `head` — no CAS, no
-//    multi-writer races (the single-producer invariant is the caller's, §4/F6).
-//  - Slot ring (fixed-size slots), not a byte ring: no wrap-straddle bookkeeping,
-//    and every frame length is trivially bounded by the slot size.
-//  - Publish order (§4/F5): write bytes → `Atomics.store(tail)` (release). Read
-//    order: `Atomics.load(tail)` (acquire) → read bytes. `tail` publishes the frame.
-//  - Copy-then-validate (§4/F3): the consumer copies the frame into a fresh
-//    (kernel-private) array in one bounded read and validates the length against the
-//    slot capacity; it never re-reads shared bytes after the bounds check (no TOCTOU).
-//
-// The cross-ring wakeup signal (`GEN`) lives in a separate control SAB owned by the
-// reactor; this module only moves frames. Producers bump `GEN` + `Atomics.notify`
-// AFTER a successful `tryWrite` (the reactor blocks on `GEN`, §3.3).
-
-const HEAD_INDEX = 0;
-const TAIL_INDEX = 1;
-// 4 Int32 header slots (head, tail, 2 reserved) keep the data region 16-byte aligned.
-const HEADER_I32 = 4;
-const HEADER_BYTES = HEADER_I32 * Int32Array.BYTES_PER_ELEMENT;
-const LEN_PREFIX_BYTES = Int32Array.BYTES_PER_ELEMENT;
-
-export interface SabRingLayout {
-	slotCount: number;
-	slotBytes: number;
-}
-
-/** Total SharedArrayBuffer byte size required to back a ring of this layout. */
-export function sabRingByteLength(layout: SabRingLayout): number {
-	return HEADER_BYTES + layout.slotCount * layout.slotBytes;
-}
-
-/** Max payload bytes a single frame may carry for a given slot size. */
-export function sabRingMaxFrameBytes(slotBytes: number): number {
-	return slotBytes - LEN_PREFIX_BYTES;
-}
-
-/**
- * SPSC framed ring over a SharedArrayBuffer. Construct one instance per endpoint
- * (the producer in its worker, the consumer in the kernel worker) over the SAME
- * SharedArrayBuffer. `slotCount`/`slotBytes` MUST match on both ends.
- */
-export class SabRing {
-	private readonly control: Int32Array;
-	private readonly bytes: Uint8Array;
-	private readonly slotCount: number;
-	private readonly slotBytes: number;
-	private readonly maxFrameBytes: number;
-
-	constructor(sab: SharedArrayBuffer, layout: SabRingLayout) {
-		if (layout.slotCount <= 0 || (layout.slotCount & (layout.slotCount - 1)) !== 0) {
-			throw new Error("SabRing slotCount must be a positive power of two");
-		}
-		if (layout.slotBytes <= LEN_PREFIX_BYTES) {
-			throw new Error("SabRing slotBytes must exceed the length prefix");
-		}
-		if (sab.byteLength < sabRingByteLength(layout)) {
-			throw new Error("SabRing SharedArrayBuffer too small for layout");
-		}
-		this.control = new Int32Array(sab, 0, HEADER_I32);
-		this.bytes = new Uint8Array(sab, HEADER_BYTES, layout.slotCount * layout.slotBytes);
-		this.slotCount = layout.slotCount;
-		this.slotBytes = layout.slotBytes;
-		this.maxFrameBytes = sabRingMaxFrameBytes(layout.slotBytes);
-	}
-
-	get capacityFrames(): number {
-		return this.slotCount;
-	}
-
-	get maxFrame(): number {
-		return this.maxFrameBytes;
-	}
-
-	/** Producer side: enqueue one frame. Returns false if the ring is full
-	 * (backpressure) — the UNTRUSTED producer may then block/retry; the TCB
-	 * consumer must never block on a full ring (§4/F7). Throws only on a local
-	 * programming error (frame too large for the slot). */
-	tryWrite(frame: Uint8Array): boolean {
-		if (frame.byteLength > this.maxFrameBytes) {
-			throw new Error(
-				`SabRing frame ${frame.byteLength} exceeds slot capacity ${this.maxFrameBytes}`,
-			);
-		}
-		const head = Atomics.load(this.control, HEAD_INDEX);
-		const tail = Atomics.load(this.control, TAIL_INDEX);
-		if (tail - head >= this.slotCount) return false; // full
-		const slot = (tail % this.slotCount) * this.slotBytes;
-		// length prefix (little-endian) then payload, then publish via tail (release).
-		this.bytes[slot] = frame.byteLength & 0xff;
-		this.bytes[slot + 1] = (frame.byteLength >>> 8) & 0xff;
-		this.bytes[slot + 2] = (frame.byteLength >>> 16) & 0xff;
-		this.bytes[slot + 3] = (frame.byteLength >>> 24) & 0xff;
-		this.bytes.set(frame, slot + LEN_PREFIX_BYTES);
-		Atomics.store(this.control, TAIL_INDEX, tail + 1);
-		return true;
-	}
-
-	/** Consumer side: dequeue one frame as a fresh kernel-private copy, or null if
-	 * empty. Validates the length as HOSTILE input (§4/F3): a length outside
-	 * [0, maxFrame] throws (the caller must kill that execution, §7), never reads OOB.
-	 * Copy-then-validate: we snapshot the length, bound-check it, then copy exactly
-	 * that many bytes — no re-read of shared memory after the check. */
-	tryRead(): Uint8Array | null {
-		const tail = Atomics.load(this.control, TAIL_INDEX); // acquire
-		const head = Atomics.load(this.control, HEAD_INDEX);
-		if (head === tail) return null; // empty
-		const slot = (head % this.slotCount) * this.slotBytes;
-		const len =
-			(this.bytes[slot] |
-				(this.bytes[slot + 1] << 8) |
-				(this.bytes[slot + 2] << 16) |
-				(this.bytes[slot + 3] << 24)) >>>
-			0;
-		if (len > this.maxFrameBytes) {
-			throw new SabRingProtocolError(
-				`frame length ${len} exceeds slot capacity ${this.maxFrameBytes}`,
-			);
-		}
-		const out = new Uint8Array(len);
-		out.set(this.bytes.subarray(slot + LEN_PREFIX_BYTES, slot + LEN_PREFIX_BYTES + len));
-		Atomics.store(this.control, HEAD_INDEX, head + 1); // free the slot
-		return out;
-	}
-
-	/** True if at least one frame is queued (consumer view). */
-	hasPending(): boolean {
-		return Atomics.load(this.control, HEAD_INDEX) !== Atomics.load(this.control, TAIL_INDEX);
-	}
-}
-
-/** Thrown when a frame read from shared memory violates the protocol (hostile
- * producer). The reactor turns this into "kill that execution", never a hang (§7). */
-export class SabRingProtocolError extends Error {
-	constructor(message: string) {
-		super(`SAB ring protocol violation: ${message}`);
-		this.name = "SabRingProtocolError";
-	}
-}
diff --git a/packages/browser/src/signals.ts b/packages/browser/src/signals.ts
deleted file mode 100644
index 0d2a8d912..000000000
--- a/packages/browser/src/signals.ts
+++ /dev/null
@@ -1,113 +0,0 @@
-export const PROCESS_SIGNAL_NUMBERS: Record<string, number> = {
-	SIGHUP: 1,
-	SIGINT: 2,
-	SIGQUIT: 3,
-	SIGILL: 4,
-	SIGTRAP: 5,
-	SIGABRT: 6,
-	SIGIOT: 6,
-	SIGBUS: 7,
-	SIGFPE: 8,
-	SIGKILL: 9,
-	SIGUSR1: 10,
-	SIGSEGV: 11,
-	SIGUSR2: 12,
-	SIGPIPE: 13,
-	SIGALRM: 14,
-	SIGTERM: 15,
-	SIGSTKFLT: 16,
-	SIGCHLD: 17,
-	SIGCONT: 18,
-	SIGSTOP: 19,
-	SIGTSTP: 20,
-	SIGTTIN: 21,
-	SIGTTOU: 22,
-	SIGURG: 23,
-	SIGXCPU: 24,
-	SIGXFSZ: 25,
-	SIGVTALRM: 26,
-	SIGPROF: 27,
-	SIGWINCH: 28,
-	SIGIO: 29,
-	SIGPOLL: 29,
-	SIGPWR: 30,
-	SIGSYS: 31,
-};
-
-export type BrowserSignalRegistration = {
-	action: "default" | "ignore" | "user";
-	mask: number[];
-	flags: number;
-};
-
-const VALID_PROCESS_SIGNALS = new Set([0, ...Object.values(PROCESS_SIGNAL_NUMBERS)]);
-
-export function signalNumberForEvent(event: string): number | null {
-	const upper = event.trim().toUpperCase();
-	const signalName = upper.startsWith("SIG") ? upper : `SIG${upper}`;
-	return PROCESS_SIGNAL_NUMBERS[signalName] ?? null;
-}
-
-export function defaultSignalExitCode(signal: number): number | null {
-	return signal > 0 ? 128 + signal : null;
-}
-
-export function parseProcessSignalStateArgs(args: unknown[]): {
-	signal: number;
-	registration: BrowserSignalRegistration;
-} {
-	const signal = parseSignalNumber(args[0], "process.signal_state signal");
-	const action = String(args[1] ?? "default").toLowerCase();
-	if (action !== "default" && action !== "ignore" && action !== "user") {
-		throw new Error(`unsupported process.signal_state action ${action}`);
-	}
-	const maskValue = typeof args[2] === "string" ? JSON.parse(args[2]) : args[2];
-	if (!Array.isArray(maskValue)) {
-		throw new Error("process.signal_state mask must be an array");
-	}
-	const mask = maskValue.map((value) =>
-		parseSignalNumber(value, "process.signal_state mask entries"),
-	);
-	const flags = Number(args[3] ?? 0);
-	if (!Number.isInteger(flags) || flags < 0) {
-		throw new Error("process.signal_state flags must be a non-negative integer");
-	}
-	return {
-		signal,
-		registration: { action, mask, flags },
-	};
-}
-
-export function applyProcessSignalStateUpdate(
-	states: Map<string, Map<number, BrowserSignalRegistration>>,
-	executionId: string,
-	signal: number,
-	registration: BrowserSignalRegistration,
-): void {
-	if (
-		registration.action === "default" &&
-		registration.mask.length === 0 &&
-		registration.flags === 0
-	) {
-		const handlers = states.get(executionId);
-		handlers?.delete(signal);
-		if (handlers?.size === 0) {
-			states.delete(executionId);
-		}
-		return;
-	}
-	let handlers = states.get(executionId);
-	if (!handlers) {
-		handlers = new Map();
-		states.set(executionId, handlers);
-	}
-	handlers.set(signal, registration);
-}
-
-function parseSignalNumber(value: unknown, label: string): number {
-	const signal = Number(value);
-	if (!Number.isInteger(signal) || !VALID_PROCESS_SIGNALS.has(signal)) {
-		throw new Error(`${label} must be a valid POSIX signal`);
-	}
-	return signal;
-}
diff --git a/packages/browser/src/sync-bridge.ts b/packages/browser/src/sync-bridge.ts
deleted file mode 100644
index 48179ed86..000000000
--- a/packages/browser/src/sync-bridge.ts
+++ /dev/null
@@ -1,170 +0,0 @@
-export const SYNC_BRIDGE_SIGNAL_STATE_INDEX = 0;
-export const SYNC_BRIDGE_SIGNAL_STATUS_INDEX = 1;
-export const SYNC_BRIDGE_SIGNAL_KIND_INDEX = 2;
-export const SYNC_BRIDGE_SIGNAL_LENGTH_INDEX = 3;
-
-export const SYNC_BRIDGE_SIGNAL_STATE_IDLE = 0;
-export const SYNC_BRIDGE_SIGNAL_STATE_READY = 1;
-
-export const SYNC_BRIDGE_STATUS_OK = 0;
-export const SYNC_BRIDGE_STATUS_ERROR = 1;
-
-export const SYNC_BRIDGE_KIND_NONE = 0;
-export const SYNC_BRIDGE_KIND_TEXT = 1;
-export const SYNC_BRIDGE_KIND_BINARY = 2;
-export const SYNC_BRIDGE_KIND_JSON = 3;
-
-export const SYNC_BRIDGE_SIGNAL_BYTES = 4 * Int32Array.BYTES_PER_ELEMENT;
-export const SYNC_BRIDGE_DEFAULT_WAIT_TIMEOUT_MS = 30_000;
-export const SYNC_BRIDGE_DEFAULT_DATA_BYTES = 16 * 1024 * 1024;
-export const SYNC_BRIDGE_MIN_DATA_BYTES = 64 * 1024;
-export const SYNC_BRIDGE_PAYLOAD_LIMIT_ERROR_CODE =
-	"ERR_SANDBOX_PAYLOAD_TOO_LARGE";
-
-export const BROWSER_SYNC_BRIDGE_OPERATIONS = [
-	"fs.readFile",
-	"fs.writeFile",
-	"fs.readFileBinary",
-	"fs.writeFileBinary",
-	"fs.pread",
-	"fs.pwrite",
-	"fs.readDir",
-	"fs.createDir",
-	"fs.mkdir",
-	"fs.rmdir",
-	"fs.exists",
-	"fs.stat",
-	"fs.lstat",
-	"fs.unlink",
-	"fs.rename",
-	"fs.realpath",
-	"fs.readlink",
-	"fs.symlink",
-	"fs.link",
-	"fs.chmod",
-	"fs.truncate",
-	"module.resolve",
-	"module.loadFile",
-	"module.format",
-	"module.batchResolve",
-	"child_process.spawn",
-	"child_process.poll",
-	"child_process.write_stdin",
-	"child_process.close_stdin",
-	"child_process.kill",
-	"child_process.spawn_sync",
-	"process.signal_state",
-	"network.fetch",
-	"dgram.create",
-	"dgram.bind",
-	"dgram.recv",
-	"dgram.send",
-	"dgram.close",
-	"dgram.address",
-	"dgram.setBufferSize",
-	"dgram.getBufferSize",
-	"pty.open",
-	"pty.read",
-	"pty.write",
-	"pty.close",
-	"pty.resize",
-	"pty.setForegroundPgid",
-	"pty.tcgetattr",
-	"pty.tcsetattr",
-] as const;
-
-const BROWSER_SYNC_BRIDGE_OPERATION_SET = new Set<string>(
-	BROWSER_SYNC_BRIDGE_OPERATIONS,
-);
-
-export type BrowserWorkerSyncOperation =
-	(typeof BROWSER_SYNC_BRIDGE_OPERATIONS)[number];
-
-export function isBrowserWorkerSyncOperation(
-	value: unknown,
-): value is BrowserWorkerSyncOperation {
-	return (
-		typeof value === "string" && BROWSER_SYNC_BRIDGE_OPERATION_SET.has(value)
-	);
-}
-
-export interface BrowserSyncBridgeBuffers {
-	signalBuffer: SharedArrayBuffer;
-	dataBuffer: SharedArrayBuffer;
-}
-
-export interface BrowserSyncBridgePayload extends BrowserSyncBridgeBuffers {
-	timeoutMs?: number;
-}
-
-export interface BrowserWorkerSyncRequestMessage {
-	type: "sync-request";
-	controlToken: string;
-	executionId: string;
-	processRequestId: number;
-	requestId: number;
-	operation: BrowserWorkerSyncOperation;
-	args: unknown[];
-}
-
-export interface BrowserSyncBridgeErrorPayload {
-	message: string;
-	code?: string;
-}
-
-export function assertBrowserSyncBridgeSupport(): void {
-	if (typeof SharedArrayBuffer === "undefined") {
-		throw new Error(
-			"Browser runtime requires SharedArrayBuffer for sync filesystem and module loading parity",
-		);
-	}
-
-	if (typeof Atomics === "undefined" || typeof Atomics.wait !== "function") {
-		throw new Error(
-			"Browser runtime requires Atomics.wait for sync filesystem and module loading parity",
-		);
-	}
-}
-
-export function getBrowserSyncBridgeDataBytes(payloadLimits?: {
-	base64TransferBytes?: number;
-	jsonPayloadBytes?: number;
-}): number {
-	return Math.max(
-		payloadLimits?.base64TransferBytes ?? SYNC_BRIDGE_DEFAULT_DATA_BYTES,
-		payloadLimits?.jsonPayloadBytes ?? 4 * 1024 * 1024,
-		SYNC_BRIDGE_MIN_DATA_BYTES,
-	);
-}
-
-export function createBrowserSyncBridgePayload(payloadLimits?: {
-	base64TransferBytes?: number;
-	jsonPayloadBytes?: number;
-}): BrowserSyncBridgePayload {
-	assertBrowserSyncBridgeSupport();
-	return {
-		signalBuffer: new SharedArrayBuffer(SYNC_BRIDGE_SIGNAL_BYTES),
-		dataBuffer: new SharedArrayBuffer(
-			getBrowserSyncBridgeDataBytes(payloadLimits),
-		),
-		timeoutMs: SYNC_BRIDGE_DEFAULT_WAIT_TIMEOUT_MS,
-	};
-}
-
-export function toBrowserSyncBridgeError(
-	error: unknown,
-): BrowserSyncBridgeErrorPayload {
-	if (error instanceof Error) {
-		return {
-			message: error.message,
-			code:
-				typeof (error as { code?: unknown }).code === "string"
-					? (error as { code?: string }).code
-					: undefined,
-		};
-	}
-
-	return {
-		message: String(error),
-	};
-}
diff --git a/packages/browser/src/wasi-command-bootstrap.ts b/packages/browser/src/wasi-command-bootstrap.ts
deleted file mode 100644
index ead7b6a98..000000000
--- a/packages/browser/src/wasi-command-bootstrap.ts
+++ /dev/null
@@ -1,89 +0,0 @@
-export interface WasiCommandBootstrapOptions {
-	/** Main WASI command source URL, usually a staged browser asset such as /commands/sh. */
-	commandSource: string;
-	/** argv[0] for the main command. */
-	command: string;
-	/** Additional argv entries for the main command. */
-	args?: string[];
-	/** Command registry used by host_process.proc_spawn for child WASI commands. */
-	commands?: Record<string, string>;
-	env?: Record<string, string>;
-	cwd?: string;
-	preopens?: Record<string, string>;
-	bootMessage?: string;
-	bytesMessagePrefix?: string;
-	startMessage?: string;
-	exitMessagePrefix?: string;
-	errorMessagePrefix?: string;
-}
-
-function json(value: unknown): string {
-	return JSON.stringify(value);
-}
-
-/**
- * Builds the guest JavaScript that launches a real WASI command in the browser
- * executor with the production `secure-exec:wasi-command-host` spawn/FD bridge.
- */
-export function createWasiCommandBootstrapScript(
-	options: WasiCommandBootstrapOptions,
-): string {
-	const env = options.env ?? {};
-	const cwd = options.cwd ?? "/";
-	const preopens = options.preopens ?? { "/": "/" };
-	const args = [options.command, ...(options.args ?? [])];
-	const commands = options.commands ?? {};
-	const bootMessage = options.bootMessage ?? "";
-	const bytesMessagePrefix = options.bytesMessagePrefix ?? "";
-	const startMessage = options.startMessage ?? "";
-	const exitMessagePrefix = options.exitMessagePrefix ?? "WASI_EXIT:";
-	const errorMessagePrefix = options.errorMessagePrefix ?? "WASI_COMMAND_ERROR:";
-
-	return `
-	(async () => {
-		try {
-			const commandSource = ${json(options.commandSource)};
-			if (${json(bootMessage)}) process.stdout.write(${json(bootMessage)} + "\\n");
-			const response = await fetch(commandSource);
-			if (!response.ok) {
-				throw new Error("failed to fetch real command wasm " + commandSource + ": " + response.status);
-			}
-			let bytes = new Uint8Array(await response.arrayBuffer());
-			if (response.headers.get("x-body-encoding") === "base64") {
-				const encoded = new TextDecoder().decode(bytes);
-				bytes = Uint8Array.from(atob(encoded), (char) => char.charCodeAt(0));
-			}
-			if (${json(bytesMessagePrefix)}) {
-				process.stdout.write(${json(bytesMessagePrefix)} + bytes.byteLength + "\\n");
-			}
-			const { WASI } = require("node:wasi");
-			const { createWasiCommandHost } = require("secure-exec:wasi-command-host");
-			const commandHost = await createWasiCommandHost({
-				WASI,
-				commands: ${json(commands)},
-				env: ${json(env)},
-				cwd: ${json(cwd)},
-			});
-			commandHost.installBlockingStdin(process);
-			const wasi = new WASI({
-				returnOnExit: true,
-				args: ${json(args)},
-				env: ${json(env)},
-				preopens: ${json(preopens)},
-			});
-			commandHost.setParentWasi(wasi);
-			const { instance } = await WebAssembly.instantiate(bytes, {
-				wasi_snapshot_preview1: wasi.wasiImport,
-				...commandHost.imports,
-			});
-			commandHost.setMemory(instance.exports.memory);
-			if (${json(startMessage)}) process.stdout.write(${json(startMessage)} + "\\n");
-			const exitCode = wasi.start(instance);
-			process.stdout.write(${json(exitMessagePrefix)} + exitCode + "\\n");
-		} catch (error) {
-			process.stderr.write(${json(errorMessagePrefix)} + (error && error.stack ? error.stack : String(error)) + "\\n");
-			process.exit(1);
-		}
-	})();
-`;
-}
diff --git a/packages/browser/src/wasi-polyfill.ts b/packages/browser/src/wasi-polyfill.ts
deleted file mode 100644
index 5e88ef188..000000000
--- a/packages/browser/src/wasi-polyfill.ts
+++ /dev/null
@@ -1,2799 +0,0 @@
-// @generated by packages/browser/scripts/generate-wasi-polyfill.mjs
-// Source: crates/execution/assets/runners/wasi-module.js (the single shared
-// WASI preview1 runner). DO NOT EDIT BY HAND. Run `pnpm generate:wasi-polyfill`.
-export const BROWSER_WASI_POLYFILL_CODE = `
-		globalThis.__agentOSWasiHost = {
-			requireBuiltin: (name) =>
-				globalThis.require(String(name).replace(/^node:/, "")),
-			syncReadLimitBytes: 16777216,
-			// Browser fs descriptors are a JS handle table, not real host OS fds with
-			// a kernel offset, so locally-opened files must use the offset-aware file
-			// branches (explicit position) rather than host-passthrough null reads.
-			disableLocalFdPassthrough: true,
-			// Guest stdin is delivered through the runtime process object, not a kernel
-			// fd, so read the queued bytes from process.stdin directly.
-			readStdin: (maxBytes) =>
-				(globalThis.process &&
-					globalThis.process.stdin &&
-					typeof globalThis.process.stdin.read === "function"
-					? globalThis.process.stdin.read(maxBytes)
-					: null),
-			// Queued stdin byte count for poll_oneoff readiness (does not consume).
-			stdinReadableBytes: () =>
-				(globalThis.process && globalThis.process.stdin
-					? Number(globalThis.process.stdin.readableLength || 0)
-					: 0),
-		};
-		const Buffer =
-			(typeof globalThis !== "undefined" && globalThis.Buffer) ||
-			(class __AgentOsWasiBuffer extends Uint8Array {
-				static alloc(size) { return new __AgentOsWasiBuffer(size >>> 0); }
-				static allocUnsafe(size) { return new __AgentOsWasiBuffer(size >>> 0); }
-				static isBuffer(value) { return value instanceof Uint8Array; }
-				static byteLength(value, encoding) {
-					if (value instanceof Uint8Array) return value.length;
-					if (encoding === "base64") return Math.floor((String(value).replace(/=+$/, "").length * 3) / 4);
-					if (encoding === "hex") return String(value).length >> 1;
-					return new TextEncoder().encode(String(value)).length;
-				}
-				static from(value, encodingOrOffset, length) {
-					if (typeof value === "string") {
-						const encoding = encodingOrOffset || "utf8";
-						if (encoding === "base64") {
-							const binary = atob(value);
-							const out = new __AgentOsWasiBuffer(binary.length);
-							for (let i = 0; i < binary.length; i += 1) out[i] = binary.charCodeAt(i) & 0xff;
-							return out;
-						}
-						if (encoding === "hex") {
-							const clean = String(value);
-							const out = new __AgentOsWasiBuffer(clean.length >> 1);
-							for (let i = 0; i < out.length; i += 1) out[i] = parseInt(clean.substr(i * 2, 2), 16);
-							return out;
-						}
-						const encoded = new TextEncoder().encode(value);
-						const out = new __AgentOsWasiBuffer(encoded.length);
-						out.set(encoded);
-						return out;
-					}
-					if (value instanceof ArrayBuffer) {
-						const offset = encodingOrOffset || 0;
-						const len = length === undefined ? value.byteLength - offset : length;
-						const view = new Uint8Array(value, offset, len);
-						const out = new __AgentOsWasiBuffer(view.length);
-						out.set(view);
-						return out;
-					}
-					if (ArrayBuffer.isView(value)) {
-						const view = new Uint8Array(value.buffer, value.byteOffset, value.byteLength);
-						const out = new __AgentOsWasiBuffer(view.length);
-						out.set(view);
-						return out;
-					}
-					const arr = Array.from(value || []);
-					const out = new __AgentOsWasiBuffer(arr.length);
-					for (let i = 0; i < arr.length; i += 1) out[i] = arr[i] & 0xff;
-					return out;
-				}
-				static concat(list, totalLength) {
-					const chunks = Array.from(list || []);
-					if (totalLength === undefined) {
-						totalLength = 0;
-						for (const chunk of chunks) totalLength += chunk.length;
-					}
-					const out = new __AgentOsWasiBuffer(totalLength >>> 0);
-					let offset = 0;
-					for (const chunk of chunks) {
-						if (offset >= out.length) break;
-						const slice = offset + chunk.length > out.length ? chunk.subarray(0, out.length - offset) : chunk;
-						out.set(slice, offset);
-						offset += slice.length;
-					}
-					return out;
-				}
-				toString(encoding, start, end) {
-					const view = this.subarray(start || 0, end === undefined ? this.length : end);
-					if (encoding === "base64") {
-						let binary = "";
-						for (let i = 0; i < view.length; i += 1) binary += String.fromCharCode(view[i]);
-						return btoa(binary);
-					}
-					if (encoding === "hex") {
-						let hex = "";
-						for (let i = 0; i < view.length; i += 1) hex += view[i].toString(16).padStart(2, "0");
-						return hex;
-					}
-					return new TextDecoder().decode(view);
-				}
-			});
-if (typeof globalThis !== "undefined" && typeof globalThis.__agentOSWasiModule === "undefined") {
-  // Per-backend host seam (C / convergence): native populates it from its own
-  // host globals (the \`|| __agentOs*\` fallbacks below); a non-native backend
-  // (the browser converged worker) can pre-set \`globalThis.__agentOSWasiHost\`
-  // with browser-provided equivalents so this same preview1 runner is shared.
-  const __agentOSWasiHost =
-    (typeof globalThis.__agentOSWasiHost === "object" &&
-      globalThis.__agentOSWasiHost) ||
-    {};
-  const __agentOSWasiRequireBuiltin =
-    __agentOSWasiHost.requireBuiltin ||
-    (typeof __agentOSRequireBuiltin !== "undefined"
-      ? __agentOSRequireBuiltin
-      : (name) => globalThis.require(name));
-  const __agentOSFs = () => __agentOSWasiRequireBuiltin("node:fs");
-  const __agentOSPath = () => __agentOSWasiRequireBuiltin("node:path");
-  const __agentOSCrypto = () => __agentOSWasiRequireBuiltin("node:crypto");
-  // Stdio sync-RPC bridge + fd-handle lookup come from the host seam (a
-  // non-native backend supplies browser equivalents); native falls back to its
-  // own host globals so behavior is unchanged.
-  // Lazy resolvers: the native host globals are populated AFTER this module is
-  // defined (per-execution), so resolve at call time, not at module-load.
-  const __agentOSWasiSyncRpc = () =>
-    __agentOSWasiHost.syncRpc ||
-    (typeof globalThis.__agentOSSyncRpc !== "undefined"
-      ? globalThis.__agentOSSyncRpc
-      : undefined);
-  const __agentOSWasiLookupFdHandle = () =>
-    __agentOSWasiHost.lookupFdHandle ||
-    (typeof globalThis.lookupFdHandle === "function"
-      ? globalThis.lookupFdHandle
-      : undefined);
-  const __agentOSWasiErrnoSuccess = 0;
-  const __agentOSWasiErrnoAcces = 2;
-  const __agentOSWasiErrnoBadf = 8;
-  const __agentOSWasiErrnoExist = 20;
-  const __agentOSWasiErrnoFault = 21;
-  const __agentOSWasiErrnoInval = 28;
-  const __agentOSWasiErrnoIo = 29;
-  const __agentOSWasiErrnoNoent = 44;
-  const __agentOSWasiErrnoNosys = 52;
-  const __agentOSWasiErrnoNotdir = 54;
-  const __agentOSWasiErrnoPipe = 64;
-  const __agentOSWasiErrnoRofs = 69;
-  const __agentOSWasiErrnoNotcapable = 76;
-  const __agentOSWasiErrnoXdev = 18;
-  const __agentOSWasiFiletypeUnknown = 0;
-  const __agentOSWasiFiletypeCharacterDevice = 2;
-  const __agentOSWasiFiletypeDirectory = 3;
-  const __agentOSWasiFiletypeRegularFile = 4;
-  const __agentOSWasiFiletypeSymbolicLink = 7;
-  const __agentOSWasiLookupSymlinkFollow = 1;
-  const __agentOSWasiOpenCreate = 1;
-  const __agentOSWasiOpenDirectory = 2;
-  const __agentOSWasiOpenExclusive = 4;
-  const __agentOSWasiOpenTruncate = 8;
-  const __agentOSWasiRightFdRead = 1n << 1n;
-  const __agentOSWasiRightFdWrite = 1n << 6n;
-  const __agentOSWasiDefaultRightsBase = 0xffffffffffffffffn;
-  const __agentOSWasiDefaultRightsInheriting = 0xffffffffffffffffn;
-  const __agentOSWasiWhenceSet = 0;
-  const __agentOSWasiWhenceCur = 1;
-  const __agentOSWasiWhenceEnd = 2;
-  // Read cap: a non-native backend provides it via the seam; native uses its
-  // build-substituted constant. The ternary short-circuits so the native-only
-  // placeholder token is never evaluated when the seam supplies a number.
-  const __agentOSWasmSyncReadLimitBytes =
-    typeof __agentOSWasiHost.syncReadLimitBytes === "number"
-      ? __agentOSWasiHost.syncReadLimitBytes
-      : 16777216;
-  const __agentOSKernelStdioSyncRpcEnabled = () =>
-    process?.env?.AGENTOS_WASI_STDIO_SYNC_RPC === "1";
-  const __agentOSWasiDebugEnabled = () => process?.env?.AGENTOS_WASM_WASI_DEBUG === "1";
-  const __agentOSWasiSyscallCountersEnabled = () =>
-    process?.env?.AGENTOS_WASI_SYSCALL_COUNTERS === "1";
-  const __agentOSWasiNow = () =>
-    typeof performance?.now === "function" ? performance.now() : Date.now();
-  const __agentOSWasiDebug = (message) => {
-    if (!__agentOSWasiDebugEnabled() || typeof process?.stderr?.write !== "function") {
-      return;
-    }
-    try {
-      process.stderr.write(\`[secure-exec-wasi] \${message}\\n\`);
-    } catch {
-      // Ignore debug logging failures.
-    }
-  };
-
-  class WASI {
-    constructor(options = {}) {
-      this.args = Array.isArray(options.args) ? options.args.map((value) => String(value)) : [];
-      this.env =
-        options.env && typeof options.env === "object"
-          ? Object.fromEntries(
-              Object.entries(options.env).map(([key, value]) => [String(key), String(value)]),
-            )
-          : {};
-      this.preopens = options.preopens && typeof options.preopens === "object" ? options.preopens : {};
-      this.returnOnExit = options.returnOnExit === true;
-      this.instance = null;
-      this.nextFd = 3;
-      this.fsModule = null;
-      this.pathModule = null;
-      this.fdTable = new Map([
-        [0, { kind: "stdin", fdFlags: 0 }],
-        [1, { kind: "stdout", fdFlags: 0 }],
-        [2, { kind: "stderr", fdFlags: 0 }],
-      ]);
-      this.statCache = new Map();
-      this.syscallCountersEnabled = __agentOSWasiSyscallCountersEnabled();
-      for (const [guestPath, spec] of Object.entries(this.preopens)) {
-        const normalized = this._normalizePreopenSpec(spec);
-        if (!normalized) {
-          continue;
-        }
-        this.fdTable.set(this.nextFd++, {
-          kind: "preopen",
-          guestPath: String(guestPath),
-          hostPath: normalized.hostPath,
-          readOnly: normalized.readOnly,
-          rightsBase: normalized.rightsBase,
-          rightsInheriting: normalized.rightsInheriting,
-          fdFlags: 0,
-        });
-      }
-      this.wasiImport = {
-        args_get: (...args) => this._argsGet(...args),
-        args_sizes_get: (...args) => this._argsSizesGet(...args),
-        clock_time_get: (...args) => this._clockTimeGet(...args),
-        clock_res_get: (...args) => this._clockResGet(...args),
-        environ_get: (...args) => this._environGet(...args),
-        environ_sizes_get: (...args) => this._environSizesGet(...args),
-        fd_close: (...args) => this._fdClose(...args),
-        fd_fdstat_get: (...args) => this._fdFdstatGet(...args),
-        fd_fdstat_set_flags: (...args) => this._fdFdstatSetFlags(...args),
-        fd_filestat_get: (...args) => this._fdFilestatGet(...args),
-        fd_filestat_set_size: (...args) => this._fdFilestatSetSize(...args),
-        fd_prestat_dir_name: (...args) => this._fdPrestatDirName(...args),
-        fd_prestat_get: (...args) => this._fdPrestatGet(...args),
-        fd_pread: (...args) => this._fdPread(...args),
-        fd_pwrite: (...args) => this._fdPwrite(...args),
-        fd_readdir: (...args) => this._fdReaddir(...args),
-        fd_read: (...args) => this._fdRead(...args),
-        fd_seek: (...args) => this._fdSeek(...args),
-        fd_sync: (...args) => this._fdSync(...args),
-        fd_tell: (...args) => this._fdTell(...args),
-        fd_write: (...args) => this._fdWrite(...args),
-        path_create_directory: (...args) => this._pathCreateDirectory(...args),
-        path_filestat_get: (...args) => this._pathFilestatGet(...args),
-        path_link: (...args) => this._pathLink(...args),
-        path_open: (...args) => this._pathOpen(...args),
-        path_readlink: (...args) => this._pathReadlink(...args),
-        path_remove_directory: (...args) => this._pathRemoveDirectory(...args),
-        path_rename: (...args) => this._pathRename(...args),
-        path_symlink: (...args) => this._pathSymlink(...args),
-        path_unlink_file: (...args) => this._pathUnlinkFile(...args),
-        poll_oneoff: (...args) => this._pollOneoff(...args),
-        proc_exit: (...args) => this._procExit(...args),
-        random_get: (...args) => this._randomGet(...args),
-        sched_yield: (...args) => this._schedYield(...args),
-      };
-      this._installSyscallCounterWrappers();
-    }
-
-    _fs() {
-      if (!this.fsModule) {
-        this.fsModule = __agentOSFs();
-      }
-      return this.fsModule;
-    }
-
-    _path() {
-      if (!this.pathModule) {
-        this.pathModule = __agentOSPath();
-      }
-      return this.pathModule;
-    }
-
-    _recordWasiSyscallMetric(name, startedAt, details = {}) {
-      if (!this.syscallCountersEnabled || typeof process?.stderr?.write !== "function") {
-        return;
-      }
-      try {
-        const elapsedMs = __agentOSWasiNow() - startedAt;
-        process.stderr.write(
-          \`__AGENTOS_WASI_SYSCALL_METRICS__:\${JSON.stringify({
-            name,
-            elapsedMs,
-            ...details,
-          })}\\n\`,
-        );
-      } catch {
-        // Ignore metrics failures.
-      }
-    }
-
-    _measureWasiPhase(name, fn) {
-      if (!this.syscallCountersEnabled || !this._activeWasiMetric) {
-        return fn();
-      }
-      const startedAt = __agentOSWasiNow();
-      try {
-        return fn();
-      } finally {
-        const phases = (this._activeWasiMetric.phases ??= {});
-        phases[name] = (phases[name] ?? 0) + (__agentOSWasiNow() - startedAt);
-      }
-    }
-
-    _installSyscallCounterWrappers() {
-      if (!this.syscallCountersEnabled) {
-        return;
-      }
-      for (const name of [
-        "path_open",
-        "path_filestat_get",
-        "fd_filestat_get",
-        "fd_write",
-      ]) {
-        const original = this.wasiImport[name];
-        if (typeof original !== "function") {
-          continue;
-        }
-        this.wasiImport[name] = (...args) => {
-          const startedAt = __agentOSWasiNow();
-          const previousMetric = this._activeWasiMetric;
-          const activeMetric = { name, phases: {} };
-          this._activeWasiMetric = activeMetric;
-          let result;
-          try {
-            result = original(...args);
-          } finally {
-            this._activeWasiMetric = previousMetric;
-          }
-          const details = {
-            result,
-            fd: Number(args[0]) >>> 0,
-            iovsLen: name === "fd_write" ? Number(args[2]) >>> 0 : undefined,
-            phases: activeMetric.phases,
-          };
-          if (name === "path_filestat_get") {
-            try {
-              const target = this._readString(args[2], args[3]);
-              details.pathLen = target.length;
-              details.pathKind = target.startsWith("/")
-                ? "absolute"
-                : target.includes("/")
-                  ? "relative-nested"
-                  : "relative-child";
-              details.pathSample =
-                target.length > 120 ? \`\${target.slice(0, 120)}...\` : target;
-            } catch {
-              // Leave path-shape fields absent if the guest pointer is invalid.
-            }
-          }
-          this._recordWasiSyscallMetric(name, startedAt, {
-            ...details,
-          });
-          return result;
-        };
-      }
-    }
-
-    start(instance) {
-      this.instance = instance;
-      try {
-        if (typeof instance?.exports?._start === "function") {
-          instance.exports._start();
-        }
-        return 0;
-      } catch (error) {
-        if (error && error.__agentOSWasiExit === true) {
-          return Number(error.code) >>> 0;
-        }
-        throw error;
-      }
-    }
-
-    _memoryView() {
-      const memory = this.instance?.exports?.memory;
-      if (!(memory instanceof WebAssembly.Memory)) {
-        throw new Error("WASI memory export is unavailable");
-      }
-      return new DataView(memory.buffer);
-    }
-
-    _memoryBytes() {
-      const memory = this.instance?.exports?.memory;
-      if (!(memory instanceof WebAssembly.Memory)) {
-        throw new Error("WASI memory export is unavailable");
-      }
-      return new Uint8Array(memory.buffer);
-    }
-
-    _boundedIovLength(iovs, iovsLen) {
-      const view = this._memoryView();
-      let length = 0;
-      for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-        const entryOffset = (Number(iovs) >>> 0) + index * 8;
-        length += view.getUint32(entryOffset + 4, true);
-        if (length > __agentOSWasmSyncReadLimitBytes) {
-          throw new RangeError(
-            \`WASI read iov length \${length} exceeds \${__agentOSWasmSyncReadLimitBytes}\`,
-          );
-        }
-      }
-      return length >>> 0;
-    }
-
-    // Read-side iov capacity, clamped (not thrown) to the sync read cap. A guest
-    // may legitimately offer a huge read buffer (e.g. iov_len 0xffffffc0 = "read
-    // up to ~4GB"); the runner reads only what is available, bounded by the cap,
-    // so the read allocation/RPC stays bounded without rejecting the read. Writes
-    // keep using _boundedIovLength (throwing) because their iov length is real
-    // data that must not be silently truncated.
-    _boundedReadLength(iovs, iovsLen) {
-      const view = this._memoryView();
-      let length = 0;
-      for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-        const entryOffset = (Number(iovs) >>> 0) + index * 8;
-        length += view.getUint32(entryOffset + 4, true);
-        if (length >= __agentOSWasmSyncReadLimitBytes) {
-          return __agentOSWasmSyncReadLimitBytes;
-        }
-      }
-      return length >>> 0;
-    }
-
-    _normalizeRights(value, fallback) {
-      try {
-        return BigInt.asUintN(64, BigInt(value));
-      } catch {
-        return fallback;
-      }
-    }
-
-    _normalizePreopenSpec(value) {
-      // Path-model seam (convergence item C): native maps guest paths to HOST
-      // paths (its preopen specs carry \`hostPath\`); a non-native backend with no
-      // host paths (the browser, whose \`require("fs")\` IS the kernel VFS) can
-      // supply \`__agentOSWasiHost.normalizePreopen\` to treat the guest/VFS path
-      // as the "hostPath" identity, so the same runner serves both.
-      if (typeof __agentOSWasiHost.normalizePreopen === "function") {
-        const seamNormalized = __agentOSWasiHost.normalizePreopen(value, {
-          defaultRightsBase: __agentOSWasiDefaultRightsBase,
-          defaultRightsInheriting: __agentOSWasiDefaultRightsInheriting,
-          normalizeRights: (rights, fallback) =>
-            this._normalizeRights(rights, fallback),
-        });
-        return seamNormalized ?? null;
-      }
-      if (typeof value === "string") {
-        return {
-          hostPath: String(value),
-          readOnly: false,
-          rightsBase: __agentOSWasiDefaultRightsBase,
-          rightsInheriting: __agentOSWasiDefaultRightsInheriting,
-        };
-      }
-      if (!value || typeof value !== "object" || typeof value.hostPath !== "string") {
-        return null;
-      }
-      return {
-        hostPath: String(value.hostPath),
-        readOnly: value.readOnly === true,
-        rightsBase: this._normalizeRights(
-          value.rightsBase,
-          __agentOSWasiDefaultRightsBase,
-        ),
-        rightsInheriting: this._normalizeRights(
-          value.rightsInheriting,
-          __agentOSWasiDefaultRightsInheriting,
-        ),
-      };
-    }
-
-    _descriptorRightsBase(entry) {
-      return this._normalizeRights(
-        entry?.rightsBase,
-        __agentOSWasiDefaultRightsBase,
-      );
-    }
-
-    _descriptorRightsInheriting(entry) {
-      return this._normalizeRights(
-        entry?.rightsInheriting,
-        __agentOSWasiDefaultRightsInheriting,
-      );
-    }
-
-    _hasWriteRights(rights) {
-      try {
-        return (BigInt(rights) & __agentOSWasiRightFdWrite) !== 0n;
-      } catch {
-        return true;
-      }
-    }
-
-    _writeUint32(ptr, value) {
-      try {
-        this._memoryView().setUint32(Number(ptr) >>> 0, Number(value) >>> 0, true);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        __agentOSWasiDebug(\`writeUint32 failed ptr=\${Number(ptr)} value=\${Number(value)}\`);
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _writeUint64(ptr, value) {
-      try {
-        this._memoryView().setBigUint64(Number(ptr) >>> 0, BigInt(value), true);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        __agentOSWasiDebug(\`writeUint64 failed ptr=\${Number(ptr)} value=\${String(value)}\`);
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _writeBytes(ptr, bytes) {
-      try {
-        this._memoryBytes().set(bytes, Number(ptr) >>> 0);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        __agentOSWasiDebug(\`writeBytes failed ptr=\${Number(ptr)} len=\${bytes?.length ?? 0}\`);
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _readBytes(ptr, len) {
-      const start = Number(ptr) >>> 0;
-      const end = start + (Number(len) >>> 0);
-      return Buffer.from(this._memoryBytes().slice(start, end));
-    }
-
-    _readString(ptr, len) {
-      return this._readBytes(ptr, len).toString("utf8");
-    }
-
-    _decodeSyncRpcBytes(value) {
-      if (value == null) {
-        return null;
-      }
-      if (typeof Buffer !== "undefined" && Buffer.isBuffer(value)) {
-        return value;
-      }
-      if (value instanceof Uint8Array) {
-        return Buffer.from(value);
-      }
-      if (ArrayBuffer.isView(value)) {
-        return Buffer.from(value.buffer, value.byteOffset, value.byteLength);
-      }
-      if (value instanceof ArrayBuffer) {
-        return Buffer.from(value);
-      }
-      if (
-        value &&
-        typeof value === "object" &&
-        value.__agentOSType === "bytes" &&
-        typeof value.base64 === "string"
-      ) {
-        return Buffer.from(value.base64, "base64");
-      }
-      return null;
-    }
-
-    _dequeuePipeBytes(pipe, maxBytes) {
-      if (!pipe || !Array.isArray(pipe.chunks) || pipe.chunks.length === 0) {
-        return Buffer.alloc(0);
-      }
-
-      let remaining = Math.max(0, Number(maxBytes) >>> 0);
-      if (remaining === 0) {
-        return Buffer.alloc(0);
-      }
-
-      const parts = [];
-      while (remaining > 0 && pipe.chunks.length > 0) {
-        const chunk = pipe.chunks[0];
-        if (!chunk || chunk.length === 0) {
-          pipe.chunks.shift();
-          continue;
-        }
-
-        if (chunk.length <= remaining) {
-          parts.push(chunk);
-          pipe.chunks.shift();
-          remaining -= chunk.length;
-          continue;
-        }
-
-        parts.push(chunk.subarray(0, remaining));
-        pipe.chunks[0] = chunk.subarray(remaining);
-        remaining = 0;
-      }
-
-      return Buffer.concat(parts);
-    }
-
-    _enqueuePipeBytes(pipe, bytes) {
-      if (!pipe || !Array.isArray(pipe.chunks)) {
-        return;
-      }
-      const chunk = Buffer.from(bytes ?? []);
-      if (chunk.length === 0) {
-        return;
-      }
-      pipe.chunks.push(chunk);
-    }
-
-    _pipeHasReaders(pipe) {
-      return (
-        (pipe?.readHandleCount ?? 0) > 0 ||
-        (pipe?.consumers?.size ?? 0) > 0
-      );
-    }
-
-    _flushPipeConsumers(pipe) {
-      if (
-        !pipe ||
-        typeof pipe.consumers?.entries !== "function" ||
-        !Array.isArray(pipe.chunks) ||
-        pipe.chunks.length === 0 ||
-        typeof globalThis?.__agentOSSyncRpc?.callSync !== "function"
-      ) {
-        return false;
-      }
-
-      let flushed = false;
-      while (pipe.chunks.length > 0) {
-        const chunk = pipe.chunks.shift();
-        if (!chunk || chunk.length === 0) {
-          continue;
-        }
-
-        for (const [consumerKey, consumer] of Array.from(pipe.consumers.entries())) {
-          if (!consumer || typeof consumer.childId !== "string") {
-            pipe.consumers.delete(consumerKey);
-            continue;
-          }
-          try {
-            __agentOSWasiSyncRpc().callSync("child_process.write_stdin", [
-              consumer.childId,
-              chunk,
-            ]);
-            flushed = true;
-          } catch {
-            pipe.consumers.delete(consumerKey);
-          }
-        }
-      }
-
-      return flushed;
-    }
-
-    _closePipeConsumers(pipe) {
-      if (
-        !pipe ||
-        typeof pipe.consumers?.entries !== "function" ||
-        typeof globalThis?.__agentOSSyncRpc?.callSync !== "function"
-      ) {
-        return false;
-      }
-
-      let closed = false;
-      for (const [consumerKey, consumer] of Array.from(pipe.consumers.entries())) {
-        if (!consumer || typeof consumer.childId !== "string") {
-          pipe.consumers.delete(consumerKey);
-          continue;
-        }
-        try {
-          __agentOSWasiSyncRpc().callSync("child_process.close_stdin", [
-            consumer.childId,
-          ]);
-          closed = true;
-        } catch {
-          // Ignore close errors during teardown.
-        }
-        pipe.consumers.delete(consumerKey);
-      }
-
-      return closed;
-    }
-
-    _pumpPipeProducers(pipe, waitMs) {
-      if (
-        !pipe ||
-        typeof pipe.producers?.entries !== "function" ||
-        typeof globalThis?.__agentOSSyncRpc?.callSync !== "function"
-      ) {
-        return false;
-      }
-
-      let processed = false;
-      for (const [producerKey, producer] of Array.from(pipe.producers.entries())) {
-        if (!producer || typeof producer.childId !== "string") {
-          pipe.producers.delete(producerKey);
-          continue;
-        }
-
-        let event = null;
-        try {
-          event = __agentOSWasiSyncRpc().callSync("child_process.poll", [
-            producer.childId,
-            Math.max(0, Number(waitMs) >>> 0),
-          ]);
-        } catch {
-          pipe.producers.delete(producerKey);
-          continue;
-        }
-
-        if (!event) {
-          continue;
-        }
-
-        processed = true;
-        const streamType =
-          producer.stream === "stderr" ? "stderr" : producer.stream === "stdout" ? "stdout" : null;
-        if ((event.type === "stdout" || event.type === "stderr") && event.type === streamType) {
-          const chunk = this._decodeSyncRpcBytes(event.data);
-          if (chunk && chunk.length > 0) {
-            pipe.chunks.push(Buffer.from(chunk));
-          }
-          continue;
-        }
-
-        if (event.type === "exit") {
-          pipe.producers.delete(producerKey);
-          if (pipe.producers.size === 0 && (pipe.writeHandleCount ?? 0) === 0) {
-            this._closePipeConsumers(pipe);
-          }
-          continue;
-        }
-      }
-
-      return processed;
-    }
-
-    _collectIovs(iovs, iovsLen) {
-      const totalLength = this._boundedIovLength(iovs, iovsLen);
-      const view = this._memoryView();
-      const chunks = [];
-      for (let index = 0; index < (Number(iovsLen) >>> 0); index += 1) {
-        const entryOffset = (Number(iovs) >>> 0) + index * 8;
-        const ptr = view.getUint32(entryOffset, true);
-        const len = view.getUint32(entryOffset + 4, true);
-        chunks.push(this._readBytes(ptr, len));
-      }
-      return Buffer.concat(chunks, totalLength);
-    }
-
-    _writeToIovs(iovs, iovsLen, bytes) {
-      const view = this._memoryView();
-      const memory = this._memoryBytes();
-      let sourceOffset = 0;
-      for (let index = 0; index < (Number(iovsLen) >>> 0) && sourceOffset < bytes.length; index += 1) {
-        const entryOffset = (Number(iovs) >>> 0) + index * 8;
-        const ptr = view.getUint32(entryOffset, true);
-        const len = view.getUint32(entryOffset + 4, true);
-        const chunk = bytes.subarray(sourceOffset, sourceOffset + len);
-        memory.set(chunk, Number(ptr) >>> 0);
-        sourceOffset += chunk.length;
-      }
-      return sourceOffset;
-    }
-
-    _stringTable(values) {
-      return values.map((value) => Buffer.from(\`\${String(value)}\\0\`, "utf8"));
-    }
-
-    _writeStringTable(values, offsetsPtr, bufferPtr) {
-      try {
-        const view = this._memoryView();
-        const memory = this._memoryBytes();
-        let cursor = Number(bufferPtr) >>> 0;
-        for (let index = 0; index < values.length; index += 1) {
-          const bytes = values[index];
-          view.setUint32((Number(offsetsPtr) >>> 0) + index * 4, cursor, true);
-          memory.set(bytes, cursor);
-          cursor += bytes.length;
-        }
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        __agentOSWasiDebug(
-          \`writeStringTable failed offsetsPtr=\${Number(offsetsPtr)} bufferPtr=\${Number(bufferPtr)} count=\${values.length}\`,
-        );
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _filetypeForStats(stats) {
-      if (!stats) {
-        return __agentOSWasiFiletypeUnknown;
-      }
-      const mode = Number(stats.mode);
-      if (Number.isFinite(mode)) {
-        switch (mode & 0o170000) {
-          case 0o040000:
-            return __agentOSWasiFiletypeDirectory;
-          case 0o100000:
-            return __agentOSWasiFiletypeRegularFile;
-          case 0o120000:
-            return __agentOSWasiFiletypeSymbolicLink;
-          case 0o020000:
-            return __agentOSWasiFiletypeCharacterDevice;
-        }
-      }
-      if (stats.isDirectory === true) {
-        return __agentOSWasiFiletypeDirectory;
-      }
-      if (stats.isSymbolicLink === true) {
-        return __agentOSWasiFiletypeSymbolicLink;
-      }
-      if (typeof stats.isDirectory === "function" && stats.isDirectory()) {
-        return __agentOSWasiFiletypeDirectory;
-      }
-      if (typeof stats.isFile === "function" && stats.isFile()) {
-        return __agentOSWasiFiletypeRegularFile;
-      }
-      if (typeof stats.isSymbolicLink === "function" && stats.isSymbolicLink()) {
-        return __agentOSWasiFiletypeSymbolicLink;
-      }
-      if (typeof stats.isCharacterDevice === "function" && stats.isCharacterDevice()) {
-        return __agentOSWasiFiletypeCharacterDevice;
-      }
-      if (stats.isDirectory === false && stats.isSymbolicLink === false) {
-        return __agentOSWasiFiletypeRegularFile;
-      }
-      return __agentOSWasiFiletypeUnknown;
-    }
-
-    _filetypeForDirent(dirent) {
-      if (!dirent || typeof dirent !== "object") {
-        return __agentOSWasiFiletypeUnknown;
-      }
-      if (typeof dirent.isDirectory === "function" && dirent.isDirectory()) {
-        return __agentOSWasiFiletypeDirectory;
-      }
-      if (typeof dirent.isFile === "function" && dirent.isFile()) {
-        return __agentOSWasiFiletypeRegularFile;
-      }
-      if (typeof dirent.isSymbolicLink === "function" && dirent.isSymbolicLink()) {
-        return __agentOSWasiFiletypeSymbolicLink;
-      }
-      if (typeof dirent.isCharacterDevice === "function" && dirent.isCharacterDevice()) {
-        return __agentOSWasiFiletypeCharacterDevice;
-      }
-      return __agentOSWasiFiletypeUnknown;
-    }
-
-    _clearStatCache() {
-      this.statCache?.clear?.();
-    }
-
-    _statCacheKey(resolved, follow) {
-      const path = typeof resolved?.guestPath === "string"
-        ? resolved.guestPath
-        : this._resolvedFsPath(resolved);
-      return typeof path === "string" ? \`\${follow ? "stat" : "lstat"}:\${path}\` : null;
-    }
-
-    _fdFiletype(entry) {
-      if (!entry) {
-        return __agentOSWasiFiletypeUnknown;
-      }
-      if (
-        entry.kind === "stdin" ||
-        entry.kind === "stdout" ||
-        entry.kind === "stderr"
-      ) {
-        return __agentOSWasiFiletypeCharacterDevice;
-      }
-      if (entry.kind === "preopen" || entry.kind === "directory") {
-        return __agentOSWasiFiletypeDirectory;
-      }
-      if (entry.kind === "symlink") {
-        return __agentOSWasiFiletypeSymbolicLink;
-      }
-      return __agentOSWasiFiletypeRegularFile;
-    }
-
-    _mapFsError(error) {
-      switch (error?.code) {
-        case "EACCES":
-        case "EPERM":
-          return __agentOSWasiErrnoAcces;
-        case "ENOENT":
-          return __agentOSWasiErrnoNoent;
-        case "ENOTDIR":
-          return __agentOSWasiErrnoNotdir;
-        case "EEXIST":
-          return __agentOSWasiErrnoExist;
-        case "EINVAL":
-          return __agentOSWasiErrnoInval;
-        case "EROFS":
-          return __agentOSWasiErrnoRofs;
-        case "EXDEV":
-          return __agentOSWasiErrnoXdev;
-        default:
-          return __agentOSWasiErrnoIo;
-      }
-    }
-
-    _descriptorEntry(fd) {
-      return this.fdTable.get(Number(fd) >>> 0) ?? null;
-    }
-
-    _localFdHandle(fd) {
-      // A non-native backend whose \`realFd\` values are not real host OS fds with
-      // their own kernel offset (the browser, whose fs descriptors are a JS
-      // handle table) disables local-fd passthrough so locally-opened files use
-      // the offset-aware file branches (fd_read/fd_write pass the tracked
-      // entry.offset as an explicit position) instead of host-passthrough reads
-      // that rely on a null position advancing a real fd. Native keeps passthrough
-      // so guest-opened fds can be shared with child processes.
-      if (__agentOSWasiHost.disableLocalFdPassthrough === true) {
-        return null;
-      }
-      const descriptor = Number(fd) >>> 0;
-      const entry = this._descriptorEntry(descriptor);
-      if (!entry || typeof entry.realFd !== "number") {
-        return null;
-      }
-      return {
-        kind: "host-passthrough",
-        targetFd: entry.realFd,
-        displayFd: Number(fd) >>> 0,
-        refCount: 1,
-        open: true,
-        readOnly: entry.readOnly === true,
-      };
-    }
-
-    _externalFdHandle(fd) {
-      const descriptor = Number(fd) >>> 0;
-      const localHandle = this._localFdHandle(descriptor);
-      if (localHandle) {
-        return localHandle;
-      }
-      try {
-        if (typeof lookupFdHandle === "function") {
-          return lookupFdHandle(descriptor) ?? null;
-        }
-      } catch {
-        // Fall through to other lookup paths.
-      }
-      try {
-        const __agentOSWasiFdHandleFn = __agentOSWasiLookupFdHandle();
-        if (typeof __agentOSWasiFdHandleFn === "function") {
-          return __agentOSWasiFdHandleFn(descriptor) ?? null;
-        }
-      } catch {
-        // Ignore missing global bridge helpers.
-      }
-      return null;
-    }
-
-    _descriptorHostPath(entry) {
-      if (!entry) {
-        return null;
-      }
-      if (typeof entry.hostPath === "string") {
-        return entry.hostPath;
-      }
-      if (typeof entry.realFd === "number") {
-        return __agentOSFs().readlinkSync(\`/proc/self/fd/\${entry.realFd}\`);
-      }
-      return null;
-    }
-
-    _descriptorFsPath(entry) {
-      if (!entry) {
-        return null;
-      }
-      if (typeof entry.hostPath === "string" && entry.hostPath.length > 0) {
-        return entry.hostPath;
-      }
-      if (typeof entry.guestPath === "string" && entry.guestPath.length > 0) {
-        return entry.guestPath;
-      }
-      return null;
-    }
-
-    _sidecarManagedProcess() {
-      if (
-        typeof globalThis.__agentOSWasmInternalEnv?.AGENTOS_SANDBOX_ROOT ===
-          "string" &&
-        globalThis.__agentOSWasmInternalEnv.AGENTOS_SANDBOX_ROOT.length > 0
-      ) {
-        return true;
-      }
-      return (
-        typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-        process.env.AGENTOS_SANDBOX_ROOT.length > 0
-      );
-    }
-
-    _descriptorDirectoryFsPath(entry) {
-      if (
-        (entry?.kind === "preopen" || entry?.kind === "directory") &&
-        this._sidecarManagedProcess()
-      ) {
-        return this._descriptorGuestPath(entry);
-      }
-      return this._descriptorFsPath(entry);
-    }
-
-    _descriptorGuestPath(entry) {
-      if (!entry) {
-        return null;
-      }
-      const guestPath = typeof entry.guestPath === "string" ? entry.guestPath : null;
-      if (guestPath === ".") {
-        return this._currentGuestCwd();
-      }
-      if (typeof guestPath === "string" && guestPath.length > 0) {
-        return __agentOSPath().posix.normalize(guestPath);
-      }
-      return null;
-    }
-
-    _descriptorPreopenName(entry) {
-      if (!entry) {
-        return null;
-      }
-      const guestPath = typeof entry.guestPath === "string" ? entry.guestPath : null;
-      if (guestPath === ".") {
-        return this._descriptorGuestPath(entry);
-      }
-      if (typeof guestPath === "string" && guestPath.length > 0) {
-        return __agentOSPath().posix.normalize(guestPath);
-      }
-      return null;
-    }
-
-    _currentDirectoryPreopen() {
-      for (const entry of this.fdTable.values()) {
-        if (entry?.kind === "preopen" && entry.guestPath === ".") {
-          return entry;
-        }
-      }
-      return null;
-    }
-
-    _descriptorPathBase(entry, target) {
-      const baseGuestPath = this._descriptorGuestPath(entry);
-      if (typeof baseGuestPath !== "string") {
-        return null;
-      }
-      return {
-        entry,
-        guestPath: baseGuestPath,
-        hostPath: typeof entry?.hostPath === "string" ? entry.hostPath : null,
-      };
-    }
-
-    _hostPathExists(hostPath) {
-      return this._measureWasiPhase("hostPathExists", () => {
-        try {
-          __agentOSFs().statSync(hostPath);
-          return true;
-        } catch {
-          return false;
-        }
-      });
-    }
-
-    _createParentExists(guestPath, hostPath) {
-      const target =
-        this._sidecarManagedProcess() && typeof guestPath === "string"
-          ? guestPath
-          : hostPath;
-      if (typeof target !== "string") {
-        return false;
-      }
-      return this._measureWasiPhase("createParentExists", () => {
-        try {
-          __agentOSFs().statSync(__agentOSPath().dirname(target));
-          return true;
-        } catch {
-          return false;
-        }
-      });
-    }
-
-    _currentGuestCwd() {
-      const pwd =
-        typeof this.env?.PWD === "string" && this.env.PWD.startsWith("/")
-          ? this.env.PWD
-          : typeof this.env?.HOME === "string" && this.env.HOME.startsWith("/")
-            ? this.env.HOME
-            : "/";
-      return __agentOSPath().posix.normalize(pwd);
-    }
-
-    _resolveHostMappingForGuestPath(guestPath) {
-      return this._measureWasiPhase("resolveHostMapping", () => {
-        const normalized = __agentOSPath().posix.normalize(guestPath);
-        const mappings = [];
-        for (const entry of this.fdTable.values()) {
-          if (entry?.kind !== "preopen" || typeof entry.hostPath !== "string") {
-            continue;
-          }
-          const guestRoot = this._descriptorGuestPath(entry);
-          if (typeof guestRoot !== "string") {
-            continue;
-          }
-          mappings.push({
-            guestRoot,
-            hostPath: entry.hostPath,
-            readOnly: entry.readOnly === true,
-          });
-        }
-        mappings.sort((left, right) => right.guestRoot.length - left.guestRoot.length);
-
-        for (const mapping of mappings) {
-          const matchesRoot = mapping.guestRoot === "/" && normalized.startsWith("/");
-          const matchesNested =
-            normalized === mapping.guestRoot ||
-            normalized.startsWith(\`\${mapping.guestRoot}/\`);
-          if (!matchesRoot && !matchesNested) {
-            continue;
-          }
-          const suffix =
-            normalized === mapping.guestRoot
-              ? ""
-              : mapping.guestRoot === "/"
-                ? normalized.slice(1)
-                : normalized.slice(mapping.guestRoot.length + 1);
-          return {
-            hostPath: suffix
-              ? __agentOSPath().join(mapping.hostPath, ...suffix.split("/"))
-              : mapping.hostPath,
-            readOnly: mapping.readOnly,
-          };
-        }
-
-        return null;
-      });
-    }
-
-    _resolveHostPathForGuestPath(guestPath) {
-      return this._resolveHostMappingForGuestPath(guestPath)?.hostPath ?? null;
-    }
-
-    _rootRelativeTargetPrefersCwd(target) {
-      const normalizedTarget = __agentOSPath().posix.normalize(target || ".");
-      if (normalizedTarget !== ".") {
-        return false;
-      }
-      return !this._rootRelativeTargetMatchesAbsoluteArg(target);
-    }
-
-    _rootRelativeTargetMatchesAbsoluteArg(target) {
-      const rootGuestPath = __agentOSPath().posix.resolve("/", target);
-      return this.args
-        .slice(1)
-        .some(
-          (arg) =>
-            typeof arg === "string" &&
-            arg.startsWith("/") &&
-            __agentOSPath().posix.normalize(arg) === rootGuestPath,
-        );
-    }
-
-    _rootRelativeTargetIsWithinAbsoluteArg(target) {
-      const rootGuestPath = __agentOSPath().posix.resolve("/", target);
-      return this.args
-        .slice(1)
-        .some((arg) => {
-          if (typeof arg !== "string" || !arg.startsWith("/")) {
-            return false;
-          }
-          const normalizedArg = __agentOSPath().posix.normalize(arg);
-          return (
-            rootGuestPath === normalizedArg ||
-            rootGuestPath.startsWith(\`\${normalizedArg}/\`)
-          );
-        });
-    }
-
-    _resolveRootRelativePath(target, preferCreateParent = false) {
-      const rootGuestPath = __agentOSPath().posix.resolve("/", target);
-      const rootMapping = this._resolveHostMappingForGuestPath(rootGuestPath);
-      const rootHostPath = rootMapping?.hostPath ?? null;
-      const cwdGuestPath = this._currentGuestCwd();
-      if (cwdGuestPath !== "/") {
-        const cwdGuestTarget = __agentOSPath().posix.resolve(cwdGuestPath, target);
-        const cwdMapping = this._resolveHostMappingForGuestPath(cwdGuestTarget);
-        const cwdHostTarget = cwdMapping?.hostPath ?? null;
-        if (
-          typeof cwdHostTarget === "string" &&
-          (
-            (
-              preferCreateParent &&
-              !this._rootRelativeTargetIsWithinAbsoluteArg(target) &&
-              this._createParentExists(cwdGuestTarget, cwdHostTarget)
-            ) ||
-            this._rootRelativeTargetPrefersCwd(target) ||
-            (
-              this._hostPathExists(cwdHostTarget) &&
-              !(typeof rootHostPath === "string" && this._hostPathExists(rootHostPath))
-            )
-          )
-        ) {
-          return {
-            guestPath: cwdGuestTarget,
-            hostPath: cwdHostTarget,
-            readOnly: cwdMapping?.readOnly === true,
-          };
-        }
-      }
-      return {
-        guestPath: rootGuestPath,
-        hostPath: rootHostPath,
-        readOnly: rootMapping?.readOnly === true,
-      };
-    }
-
-    _resolveAbsolutePath(target, preferCreateParent = false) {
-      const rootGuestPath = __agentOSPath().posix.normalize(target);
-      const rootMapping = this._resolveHostMappingForGuestPath(rootGuestPath);
-      const rootHostPath = rootMapping?.hostPath ?? null;
-      const cwdGuestPath = this._currentGuestCwd();
-      if (
-        cwdGuestPath !== "/" &&
-        !this._rootRelativeTargetIsWithinAbsoluteArg(target)
-      ) {
-        const cwdGuestTarget = __agentOSPath().posix.resolve(
-          cwdGuestPath,
-          target.replace(/^\\/+/, ""),
-        );
-        const cwdMapping = this._resolveHostMappingForGuestPath(cwdGuestTarget);
-        const cwdHostTarget = cwdMapping?.hostPath ?? null;
-        if (
-          typeof cwdHostTarget === "string" &&
-          (
-            (
-              preferCreateParent &&
-              this._createParentExists(cwdGuestTarget, cwdHostTarget)
-            ) ||
-            (
-              this._hostPathExists(cwdHostTarget) &&
-              !(typeof rootHostPath === "string" && this._hostPathExists(rootHostPath))
-            )
-          )
-        ) {
-          return {
-            guestPath: cwdGuestTarget,
-            hostPath: cwdHostTarget,
-            readOnly: cwdMapping?.readOnly === true,
-          };
-        }
-      }
-      return {
-        guestPath: rootGuestPath,
-        hostPath: rootHostPath,
-        readOnly: rootMapping?.readOnly === true,
-      };
-    }
-
-    _resolveDescriptorPath(fd, pathPtr, pathLen, options = {}) {
-      const entry = this._measureWasiPhase("descriptorEntry", () => this._descriptorEntry(fd));
-      if (!entry) {
-        return { error: __agentOSWasiErrnoBadf };
-      }
-      const target = this._measureWasiPhase("readString", () => this._readString(pathPtr, pathLen));
-      const base = this._measureWasiPhase("descriptorPathBase", () => this._descriptorPathBase(entry, target));
-      if (!base || typeof base.guestPath !== "string") {
-        return { error: __agentOSWasiErrnoBadf };
-      }
-      const guestPath = this._measureWasiPhase("guestPathResolve", () =>
-        target.startsWith("/")
-          ? __agentOSPath().posix.normalize(target)
-          : __agentOSPath().posix.resolve(base.guestPath, target)
-      );
-      const mapped = this._measureWasiPhase("descriptorPathMap", () =>
-        target.startsWith("/")
-          ? this._resolveAbsolutePath(
-              target,
-              options.preferCreateParent === true,
-            )
-          : base.guestPath === "/"
-            ? this._resolveRootRelativePath(
-                target,
-                options.preferCreateParent === true,
-              )
-            : {
-                guestPath,
-                ...(
-                  this._resolveHostMappingForGuestPath(guestPath) ??
-                  { hostPath: null, readOnly: false }
-                ),
-              }
-      );
-      const hostPath = mapped.hostPath;
-      if (typeof hostPath !== "string") {
-        return { error: __agentOSWasiErrnoNoent };
-      }
-      return {
-        error: __agentOSWasiErrnoSuccess,
-        guestPath: mapped.guestPath,
-        hostPath,
-        readOnly: mapped.readOnly === true,
-      };
-    }
-
-    _resolvedFsPath(resolved) {
-      if (this._sidecarManagedProcess() && typeof resolved?.guestPath === "string") {
-        return resolved.guestPath;
-      }
-      return resolved?.hostPath ?? null;
-    }
-
-    _statResolvedPath(resolved, follow) {
-      if (
-        typeof globalThis?.__agentOSSyncRpc?.callSync === "function" &&
-        typeof resolved?.guestPath === "string"
-      ) {
-        return this._measureWasiPhase(follow ? "syncRpcStat" : "syncRpcLstat", () =>
-          __agentOSWasiSyncRpc().callSync(follow ? "fs.statSync" : "fs.lstatSync", [
-            resolved.guestPath,
-          ])
-        );
-      }
-      const bridgeStat = follow ? globalThis?._fsStat : globalThis?._fsLstat;
-      if (
-        typeof bridgeStat?.applySyncPromise === "function" &&
-        typeof resolved?.guestPath === "string"
-      ) {
-        return this._measureWasiPhase(follow ? "bridgeStatSync" : "bridgeLstatSync", () =>
-          bridgeStat.applySyncPromise(void 0, [resolved.guestPath])
-        );
-      }
-      const fsPath = this._resolvedFsPath(resolved);
-      return this._measureWasiPhase(follow ? "fsModuleStatSync" : "fsModuleLstatSync", () =>
-        follow ? this._fs().statSync(fsPath) : this._fs().lstatSync(fsPath)
-      );
-    }
-
-
-    _resolveDescriptorDirectStatPath(fd, target) {
-      if (
-        typeof target !== "string" ||
-        target.length === 0 ||
-        target === "." ||
-        target === ".." ||
-        target.startsWith("/")
-      ) {
-        return null;
-      }
-      const entry = this._descriptorEntry(fd);
-      if (
-        !entry ||
-        (entry.kind !== "directory" && entry.kind !== "preopen") ||
-        typeof entry.hostPath !== "string" ||
-        entry.hostPath.length === 0
-      ) {
-        return null;
-      }
-      const baseGuestPath = this._descriptorGuestPath(entry);
-      if (typeof baseGuestPath !== "string") {
-        return null;
-      }
-      if (entry.kind === "preopen" && baseGuestPath === "/") {
-        if (!this._rootRelativeTargetIsWithinAbsoluteArg(target)) {
-          return null;
-        }
-      } else if (target.includes("/")) {
-        return null;
-      }
-      return {
-        error: __agentOSWasiErrnoSuccess,
-        guestPath: this._path().posix.resolve(baseGuestPath, target),
-        hostPath: this._path().join(entry.hostPath, target),
-        readOnly: entry.readOnly === true,
-      };
-    }
-
-    _writeFilestat(statPtr, stats, fallbackType) {
-      try {
-        const view = this._memoryView();
-        const offset = Number(statPtr) >>> 0;
-        const filetype = stats ? this._filetypeForStats(stats) : fallbackType;
-        view.setBigUint64(offset, 0n, true);
-        view.setBigUint64(offset + 8, BigInt(stats?.ino ?? 0), true);
-        view.setUint8(offset + 16, filetype);
-        view.setBigUint64(offset + 24, BigInt(stats?.nlink ?? 1), true);
-        view.setBigUint64(offset + 32, BigInt(stats?.size ?? 0), true);
-        view.setBigUint64(offset + 40, BigInt(Math.trunc((stats?.atimeMs ?? 0) * 1000000)), true);
-        view.setBigUint64(offset + 48, BigInt(Math.trunc((stats?.mtimeMs ?? 0) * 1000000)), true);
-        view.setBigUint64(offset + 56, BigInt(Math.trunc((stats?.ctimeMs ?? 0) * 1000000)), true);
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _argsSizesGet(argcPtr, argvBufSizePtr) {
-      const values = this._stringTable(this.args);
-      const total = values.reduce((sum, value) => sum + value.length, 0);
-      const argcStatus = this._writeUint32(argcPtr, values.length);
-      if (argcStatus !== __agentOSWasiErrnoSuccess) {
-        return argcStatus;
-      }
-      return this._writeUint32(argvBufSizePtr, total);
-    }
-
-    _argsGet(argvPtr, argvBufPtr) {
-      return this._writeStringTable(this._stringTable(this.args), argvPtr, argvBufPtr);
-    }
-
-    _environEntries() {
-      return Object.entries(this.env).map(([key, value]) => \`\${key}=\${value}\`);
-    }
-
-    _environSizesGet(countPtr, bufSizePtr) {
-      const values = this._stringTable(this._environEntries());
-      const total = values.reduce((sum, value) => sum + value.length, 0);
-      const countStatus = this._writeUint32(countPtr, values.length);
-      if (countStatus !== __agentOSWasiErrnoSuccess) {
-        return countStatus;
-      }
-      return this._writeUint32(bufSizePtr, total);
-    }
-
-    _environGet(environPtr, environBufPtr) {
-      return this._writeStringTable(
-        this._stringTable(this._environEntries()),
-        environPtr,
-        environBufPtr,
-      );
-    }
-
-    _clockTimeGet(_clockId, _precision, resultPtr) {
-      return this._writeUint64(resultPtr, BigInt(Date.now()) * 1000000n);
-    }
-
-    _clockResGet(_clockId, resultPtr) {
-      return this._writeUint64(resultPtr, 1000000n);
-    }
-
-    _fdWrite(fd, iovs, iovsLen, nwrittenPtr) {
-      try {
-        const bytes = this._measureWasiPhase("collectIovs", () => this._collectIovs(iovs, iovsLen));
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._measureWasiPhase("externalFdHandle", () => this._externalFdHandle(descriptor));
-        if (handle?.kind === "pipe-write" && handle.pipe) {
-          if (bytes.length > 0 && !this._pipeHasReaders(handle.pipe)) {
-            return __agentOSWasiErrnoPipe;
-          }
-          this._enqueuePipeBytes(handle.pipe, bytes);
-          this._flushPipeConsumers(handle.pipe);
-          return this._writeUint32(nwrittenPtr, bytes.length);
-        }
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          if (handle.readOnly === true) {
-            return __agentOSWasiErrnoRofs;
-          }
-          if (descriptor === 1 || descriptor === 2) {
-            const sidecarManagedProcess =
-              typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-              process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-            const useKernelStdioSyncRpc =
-              sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled();
-            if (useKernelStdioSyncRpc) {
-              const written = this._measureWasiPhase("kernelStdioWrite", () =>
-                Number(
-                  __agentOSWasiSyncRpc().callSync("__kernel_stdio_write", [descriptor, bytes]),
-                ) >>> 0
-              );
-              return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-            }
-          }
-          const written = this._measureWasiPhase("writeSync", () =>
-            __agentOSFs().writeSync(
-              handle.targetFd,
-              bytes,
-              0,
-              bytes.length,
-              null,
-            )
-          );
-          return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-        }
-        if (handle?.kind === "guest-file" && typeof handle.targetFd === "number") {
-          const position = handle.append ? null : (handle.position ?? 0);
-          const written = this._measureWasiPhase("writeSync", () =>
-            __agentOSFs().writeSync(
-              handle.targetFd,
-              bytes,
-              0,
-              bytes.length,
-              position,
-            )
-          );
-          if (handle.append) {
-            handle.position = this._measureWasiPhase("appendFstat", () =>
-              Number(__agentOSFs().fstatSync(handle.targetFd).size ?? 0)
-            );
-          } else {
-            handle.position = (handle.position ?? 0) + written;
-          }
-          return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-        }
-        if (handle?.kind === "stdio" && typeof handle.targetFd === "number") {
-          const targetFd = Number(handle.targetFd) >>> 0;
-          if (targetFd === 1 || targetFd === 2) {
-            const sidecarManagedProcess =
-              typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-              process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-            const useKernelStdioSyncRpc =
-              sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled();
-            const written = useKernelStdioSyncRpc
-              ? this._measureWasiPhase("kernelStdioWrite", () =>
-                  Number(__agentOSWasiSyncRpc().callSync("__kernel_stdio_write", [targetFd, bytes])) >>> 0
-                )
-              : this._measureWasiPhase("processStreamWrite", () =>
-                  (targetFd === 2 ? process.stderr.write(bytes) : process.stdout.write(bytes), bytes.length)
-                );
-            return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-          }
-          return __agentOSWasiErrnoBadf;
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (entry.kind === "stdout") {
-          const sidecarManagedProcess =
-            typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-            process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-          const useKernelStdioSyncRpc =
-            sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled();
-          const written = useKernelStdioSyncRpc
-            ? this._measureWasiPhase("kernelStdioWrite", () =>
-                Number(__agentOSWasiSyncRpc().callSync("__kernel_stdio_write", [1, bytes])) >>> 0
-              )
-            : this._measureWasiPhase("processStreamWrite", () =>
-                (process.stdout.write(bytes), bytes.length)
-              );
-          return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-        }
-        if (entry.kind === "stderr") {
-          const sidecarManagedProcess =
-            typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-            process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-          const useKernelStdioSyncRpc =
-            sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled();
-          const written = useKernelStdioSyncRpc
-            ? this._measureWasiPhase("kernelStdioWrite", () =>
-                Number(__agentOSWasiSyncRpc().callSync("__kernel_stdio_write", [2, bytes])) >>> 0
-              )
-            : this._measureWasiPhase("processStreamWrite", () =>
-                (process.stderr.write(bytes), bytes.length)
-              );
-          return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-        }
-        if (entry.readOnly === true) {
-          return __agentOSWasiErrnoRofs;
-        }
-        if (entry.kind === "file") {
-          this._clearStatCache();
-          const position = typeof entry.offset === "number" ? entry.offset : null;
-          const written = this._measureWasiPhase("writeSync", () =>
-            __agentOSFs().writeSync(
-              entry.realFd,
-              bytes,
-              0,
-              bytes.length,
-              position,
-            )
-          );
-          if (typeof entry.offset === "number") {
-            entry.offset += written;
-          }
-          return this._measureWasiPhase("writeResultPtr", () => this._writeUint32(nwrittenPtr, written));
-        }
-        return __agentOSWasiErrnoBadf;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdPwrite(fd, iovs, iovsLen, offset, nwrittenPtr) {
-      try {
-        const bytes = this._collectIovs(iovs, iovsLen);
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._externalFdHandle(descriptor);
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          if (handle.readOnly === true) {
-            return __agentOSWasiErrnoRofs;
-          }
-          const written = __agentOSFs().writeSync(
-            handle.targetFd,
-            bytes,
-            0,
-            bytes.length,
-            Number(offset) >>> 0,
-          );
-          return this._writeUint32(nwrittenPtr, written);
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry || entry.kind !== "file") {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (entry.readOnly === true) {
-          return __agentOSWasiErrnoRofs;
-        }
-        const written = __agentOSFs().writeSync(
-          entry.realFd,
-          bytes,
-          0,
-          bytes.length,
-          Number(offset) >>> 0,
-        );
-        return this._writeUint32(nwrittenPtr, written);
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdPread(fd, iovs, iovsLen, offset, nreadPtr) {
-      try {
-        const descriptor = Number(fd) >>> 0;
-        const explicitOffset = Number(offset) >>> 0;
-        const totalLength = this._boundedReadLength(iovs, iovsLen);
-        const buffer = Buffer.alloc(totalLength);
-        const handle = this._externalFdHandle(descriptor);
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          const bytesRead = __agentOSFs().readSync(
-            handle.targetFd,
-            buffer,
-            0,
-            totalLength,
-            explicitOffset,
-          );
-          const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-          return this._writeUint32(nreadPtr, written);
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry || entry.kind !== "file") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const bytesRead = __agentOSFs().readSync(
-          entry.realFd,
-          buffer,
-          0,
-          totalLength,
-          explicitOffset,
-        );
-        const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-        return this._writeUint32(nreadPtr, written);
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdRead(fd, iovs, iovsLen, nreadPtr) {
-      try {
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._externalFdHandle(descriptor);
-        if (handle?.kind === "pipe-read" && handle.pipe) {
-          const totalLength = this._boundedReadLength(iovs, iovsLen);
-          while (handle.pipe.chunks.length === 0) {
-            if (handle.pipe.writeHandleCount === 0 && handle.pipe.producers.size === 0) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            this._pumpPipeProducers(handle.pipe, 10);
-          }
-          const chunk = this._dequeuePipeBytes(handle.pipe, totalLength);
-          const written = this._writeToIovs(iovs, iovsLen, chunk);
-          return this._writeUint32(nreadPtr, written);
-        }
-        if (handle?.kind === "stdio" && Number(handle.targetFd) === 0) {
-          const totalLength = this._boundedReadLength(iovs, iovsLen);
-          if (typeof __agentOSWasiHost.readStdin === "function") {
-            const value = __agentOSWasiHost.readStdin(totalLength);
-            if (value == null) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            const chunk =
-              typeof value === "string"
-                ? Buffer.from(value, "utf8")
-                : value instanceof Uint8Array
-                  ? value
-                  : Buffer.from(value);
-            if (chunk.length === 0) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            const written = this._writeToIovs(iovs, iovsLen, chunk);
-            return this._writeUint32(nreadPtr, written);
-          }
-          const buffer = Buffer.alloc(totalLength);
-          const bytesRead = __agentOSFs().readSync(0, buffer, 0, totalLength, null);
-          const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-          return this._writeUint32(nreadPtr, written);
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (entry.kind === "stdin") {
-          const totalLength = this._boundedReadLength(iovs, iovsLen);
-          const syncRpc =
-            typeof globalThis?.__agentOSSyncRpc?.callSync === "function"
-              ? __agentOSWasiSyncRpc()
-              : null;
-          const sidecarManagedProcess =
-            typeof process?.env?.AGENTOS_SANDBOX_ROOT === "string" &&
-            process.env.AGENTOS_SANDBOX_ROOT.length > 0;
-          if (syncRpc && (sidecarManagedProcess || __agentOSKernelStdioSyncRpcEnabled())) {
-            try {
-              let chunk = null;
-              while (true) {
-                const response = syncRpc.callSync("__kernel_stdin_read", [totalLength, 10]);
-                if (
-                  response &&
-                  typeof response === "object" &&
-                  typeof response.dataBase64 === "string"
-                ) {
-                  chunk = Buffer.from(response.dataBase64, "base64");
-                  break;
-                }
-                if (response && typeof response === "object" && response.done === true) {
-                  chunk = Buffer.alloc(0);
-                  break;
-                }
-                if (
-                  typeof Atomics?.wait === "function" &&
-                  typeof syntheticWaitArray !== "undefined"
-                ) {
-                  Atomics.wait(syntheticWaitArray, 0, 0, 10);
-                }
-              }
-              if (!chunk || chunk.length === 0) {
-                return this._writeUint32(nreadPtr, 0);
-              }
-              const written = this._writeToIovs(iovs, iovsLen, chunk);
-              return this._writeUint32(nreadPtr, written);
-            } catch {
-              // Fall back to direct stdin reads when the sync bridge is unavailable
-              // in the standalone runner bootstrap.
-            }
-          }
-          // Host-seam stdin (a non-native backend whose stdin is delivered through
-          // the runtime process object, not a kernel fd): read the queued bytes
-          // directly instead of fs.readSync on a descriptor the JS fs table does
-          // not own.
-          if (typeof __agentOSWasiHost.readStdin === "function") {
-            const value = __agentOSWasiHost.readStdin(totalLength);
-            if (value == null) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            const chunk =
-              typeof value === "string"
-                ? Buffer.from(value, "utf8")
-                : value instanceof Uint8Array
-                  ? value
-                  : Buffer.from(value);
-            if (chunk.length === 0) {
-              return this._writeUint32(nreadPtr, 0);
-            }
-            const written = this._writeToIovs(iovs, iovsLen, chunk);
-            return this._writeUint32(nreadPtr, written);
-          }
-          const buffer = Buffer.alloc(totalLength);
-          const directStdinFd =
-            (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-            typeof handle.targetFd === "number"
-              ? handle.targetFd
-              : typeof process?.stdin?.fd === "number"
-                ? process.stdin.fd
-                : 0;
-          const bytesRead = __agentOSFs().readSync(
-            directStdinFd,
-            buffer,
-            0,
-            totalLength,
-            null,
-          );
-          const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-          return this._writeUint32(nreadPtr, written);
-        }
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          const totalLength = this._boundedReadLength(iovs, iovsLen);
-          const buffer = Buffer.alloc(totalLength);
-          const bytesRead = __agentOSFs().readSync(
-            handle.targetFd,
-            buffer,
-            0,
-            totalLength,
-            null,
-          );
-          const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-          return this._writeUint32(nreadPtr, written);
-        }
-        if (entry.kind !== "file") {
-          return __agentOSWasiErrnoBadf;
-        }
-        // WASI rights: a descriptor opened without FD_READ cannot be read.
-        if (
-          typeof entry.rightsBase === "bigint" &&
-          (entry.rightsBase & __agentOSWasiRightFdRead) === 0n
-        ) {
-          return __agentOSWasiErrnoNotcapable;
-        }
-        const totalLength = this._boundedReadLength(iovs, iovsLen);
-        const buffer = Buffer.alloc(totalLength);
-        const position = typeof entry.offset === "number" ? entry.offset : null;
-        const bytesRead = __agentOSFs().readSync(
-          entry.realFd,
-          buffer,
-          0,
-          totalLength,
-          position,
-        );
-        if (typeof entry.offset === "number") {
-          entry.offset += bytesRead;
-        }
-        const written = this._writeToIovs(iovs, iovsLen, buffer.subarray(0, bytesRead));
-        return this._writeUint32(nreadPtr, written);
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdClose(fd) {
-      try {
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._externalFdHandle(descriptor);
-        if (handle?.kind === "pipe-read" && handle.pipe) {
-          handle.open = false;
-          handle.pipe.readHandleCount = Math.max(0, (handle.pipe.readHandleCount ?? 0) - 1);
-          if (typeof handle.onClose === "function") {
-            handle.onClose(handle, descriptor);
-          }
-          return __agentOSWasiErrnoSuccess;
-        }
-        if (handle?.kind === "pipe-write" && handle.pipe) {
-          handle.open = false;
-          handle.pipe.writeHandleCount = Math.max(0, (handle.pipe.writeHandleCount ?? 0) - 1);
-          if (typeof handle.onClose === "function") {
-            handle.onClose(handle, descriptor);
-          }
-          return __agentOSWasiErrnoSuccess;
-        }
-        if (handle?.kind === "guest-file" || handle?.kind === "stdio") {
-          handle.open = false;
-          return __agentOSWasiErrnoSuccess;
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        const retainedDelegateRefs = (() => {
-          try {
-            if (typeof globalThis.__agentOSWasiDelegateFdRefCount === "function") {
-              return Number(globalThis.__agentOSWasiDelegateFdRefCount(descriptor)) || 0;
-            }
-          } catch {
-            // Fall through to the default close path.
-          }
-          return 0;
-        })();
-        if (entry.kind === "file" && retainedDelegateRefs <= 0) {
-          __agentOSFs().closeSync(entry.realFd);
-        }
-        if (descriptor > 2 && retainedDelegateRefs <= 0) {
-          this.fdTable.delete(descriptor);
-        }
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdSync(fd) {
-      try {
-        const descriptor = Number(fd) >>> 0;
-        const handle = this._externalFdHandle(descriptor);
-        if (
-          (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-          typeof handle.targetFd === "number"
-        ) {
-          __agentOSFs().fsyncSync(handle.targetFd);
-          return __agentOSWasiErrnoSuccess;
-        }
-        const entry = this.fdTable.get(descriptor);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        // fsync on a stdio stream (stdin/stdout/stderr) is a no-op success; only
-        // descriptors with a real backing fd are flushed.
-        if (
-          entry.kind === "stdin" ||
-          entry.kind === "stdout" ||
-          entry.kind === "stderr"
-        ) {
-          return __agentOSWasiErrnoSuccess;
-        }
-        if (entry.kind !== "file" || typeof entry.realFd !== "number") {
-          return __agentOSWasiErrnoBadf;
-        }
-        __agentOSFs().fsyncSync(entry.realFd);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdFdstatGet(fd, statPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        const view = this._memoryView();
-        const offset = Number(statPtr) >>> 0;
-        view.setUint8(offset, this._fdFiletype(entry));
-        view.setUint16(offset + 2, (Number(entry.fdFlags) >>> 0) & 0xffff, true);
-        view.setBigUint64(offset + 8, this._descriptorRightsBase(entry), true);
-        view.setBigUint64(offset + 16, this._descriptorRightsInheriting(entry), true);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdFdstatSetFlags(fd, flags) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        entry.fdFlags = (Number(flags) >>> 0) & 0xffff;
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdFilestatGet(fd, statPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry) {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (
-          entry.kind === "stdin" ||
-          entry.kind === "stdout" ||
-          entry.kind === "stderr"
-        ) {
-          return this._writeFilestat(statPtr, null, __agentOSWasiFiletypeCharacterDevice);
-        }
-        if (entry.kind === "preopen") {
-          const stats = __agentOSFs().statSync(entry.guestPath);
-          return this._writeFilestat(statPtr, stats, __agentOSWasiFiletypeDirectory);
-        }
-        const stats =
-          typeof entry.realFd === "number"
-            ? __agentOSFs().fstatSync(entry.realFd)
-            : __agentOSFs().statSync(this._descriptorFsPath(entry));
-        return this._writeFilestat(statPtr, stats, this._fdFiletype(entry));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdFilestatSetSize(fd, size) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "file" || typeof entry.realFd !== "number") {
-          return __agentOSWasiErrnoBadf;
-        }
-        if (entry.readOnly === true) {
-          return __agentOSWasiErrnoRofs;
-        }
-        __agentOSFs().ftruncateSync(entry.realFd, Number(size));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdSeek(fd, offset, whence, newOffsetPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "file" || typeof entry.realFd !== "number") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const delta = Number(offset);
-        if (!Number.isFinite(delta)) {
-          return __agentOSWasiErrnoInval;
-        }
-        const currentOffset = typeof entry.offset === "number" ? entry.offset : 0;
-        let nextOffset = 0;
-        switch (Number(whence) >>> 0) {
-          case __agentOSWasiWhenceSet:
-            nextOffset = delta;
-            break;
-          case __agentOSWasiWhenceCur:
-            nextOffset = currentOffset + delta;
-            break;
-          case __agentOSWasiWhenceEnd: {
-            const stats = __agentOSFs().fstatSync(entry.realFd);
-            nextOffset = Number(stats?.size ?? 0) + delta;
-            break;
-          }
-          default:
-            return __agentOSWasiErrnoInval;
-        }
-        if (!Number.isFinite(nextOffset) || nextOffset < 0) {
-          return __agentOSWasiErrnoInval;
-        }
-        entry.offset = nextOffset;
-        return this._writeUint64(newOffsetPtr, BigInt(nextOffset));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdTell(fd, offsetPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "file") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const offset = typeof entry.offset === "number" ? entry.offset : 0;
-        return this._writeUint64(offsetPtr, BigInt(offset));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _fdPrestatGet(fd, prestatPtr) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "preopen") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const guestPath = this._descriptorPreopenName(entry);
-        if (typeof guestPath !== "string") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const view = this._memoryView();
-        const offset = Number(prestatPtr) >>> 0;
-        view.setUint8(offset, 0);
-        view.setUint32(offset + 4, Buffer.byteLength(guestPath), true);
-        return __agentOSWasiErrnoSuccess;
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdPrestatDirName(fd, pathPtr, pathLen) {
-      try {
-        const entry = this._descriptorEntry(fd);
-        if (!entry || entry.kind !== "preopen") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const guestPath = this._descriptorPreopenName(entry);
-        if (typeof guestPath !== "string") {
-          return __agentOSWasiErrnoBadf;
-        }
-        const bytes = Buffer.from(guestPath, "utf8");
-        if ((Number(pathLen) >>> 0) < bytes.length) {
-          return __agentOSWasiErrnoFault;
-        }
-        return this._writeBytes(pathPtr, bytes);
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _fdReaddir(fd, bufPtr, bufLen, cookie, bufUsedPtr) {
-      const startedAt = __agentOSWasiNow();
-      const requestedCookie = Number(cookie) >>> 0;
-      const requestedBufLen = Number(bufLen) >>> 0;
-      try {
-        const entry = this._descriptorEntry(fd);
-        const fsPath = this._descriptorDirectoryFsPath(entry);
-        if (
-          !entry ||
-          (entry.kind !== "preopen" && entry.kind !== "directory") ||
-          typeof fsPath !== "string"
-        ) {
-          return __agentOSWasiErrnoBadf;
-        }
-        let dirents =
-          requestedCookie > 0 && Array.isArray(entry.readdirCache)
-            ? entry.readdirCache
-            : null;
-        if (!dirents) {
-          dirents = __agentOSFs()
-            .readdirSync(fsPath, { withFileTypes: true })
-            .map((entry) =>
-              typeof entry === "string"
-                ? { name: entry, filetype: __agentOSWasiFiletypeUnknown }
-                : {
-                    name: String(entry?.name ?? ""),
-                    filetype: this._filetypeForDirent(entry),
-                  }
-            )
-            .sort((left, right) => left.name.localeCompare(right.name));
-          entry.readdirCache = dirents;
-        }
-        const view = this._memoryView();
-        const memory = this._memoryBytes();
-        let offset = Number(bufPtr) >>> 0;
-        const limit = offset + requestedBufLen;
-        let used = 0;
-        let recordsReturned = 0;
-        let stoppedRecordTooLarge = false;
-        for (let index = requestedCookie; index < dirents.length; index += 1) {
-          const dirent = dirents[index];
-          const name = typeof dirent === "string" ? dirent : String(dirent?.name ?? "");
-          const filetype =
-            typeof dirent === "object"
-              ? Number(dirent?.filetype ?? __agentOSWasiFiletypeUnknown) >>> 0
-              : __agentOSWasiFiletypeUnknown;
-          const nameBytes = Buffer.from(name, "utf8");
-          const recordLen = 24 + nameBytes.length;
-          if (offset + recordLen > limit) {
-            const remaining = Math.max(0, limit - offset);
-            if (remaining > 0) {
-              const record = Buffer.alloc(recordLen);
-              const recordView = new DataView(
-                record.buffer,
-                record.byteOffset,
-                record.byteLength,
-              );
-              recordView.setBigUint64(0, BigInt(index + 1), true);
-              recordView.setBigUint64(8, BigInt(index + 1), true);
-              recordView.setUint32(16, nameBytes.length, true);
-              recordView.setUint8(
-                20,
-                filetype,
-              );
-              record.set(nameBytes, 24);
-              memory.set(record.subarray(0, remaining), offset);
-              offset += remaining;
-              used += remaining;
-            }
-            stoppedRecordTooLarge = true;
-            break;
-          }
-          view.setBigUint64(offset, BigInt(index + 1), true);
-          view.setBigUint64(offset + 8, BigInt(index + 1), true);
-          view.setUint32(offset + 16, nameBytes.length, true);
-          view.setUint8(
-            offset + 20,
-            filetype,
-          );
-          memory.set(nameBytes, offset + 24);
-          offset += recordLen;
-          used += recordLen;
-          recordsReturned += 1;
-        }
-        const result = this._writeUint32(bufUsedPtr, used);
-        this._recordWasiSyscallMetric("fd_readdir", startedAt, {
-          result,
-          fd: Number(fd) >>> 0,
-          cookie: requestedCookie,
-          bufLen: requestedBufLen,
-          used,
-          recordsReturned,
-          totalDirentsRead: dirents.length,
-          stoppedRecordTooLarge,
-        });
-        return result;
-      } catch (error) {
-        this._recordWasiSyscallMetric("fd_readdir", startedAt, {
-          result: "error",
-          fd: Number(fd) >>> 0,
-          cookie: requestedCookie,
-          bufLen: requestedBufLen,
-        });
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathCreateDirectory(fd, pathPtr, pathLen) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen, {
-          preferCreateParent: true,
-        });
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        if (resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        this._clearStatCache();
-        __agentOSFs().mkdirSync(this._resolvedFsPath(resolved));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathLink(oldFd, _oldFlags, oldPathPtr, oldPathLen, newFd, newPathPtr, newPathLen) {
-      try {
-        const source = this._resolveDescriptorPath(oldFd, oldPathPtr, oldPathLen);
-        if (source.error !== __agentOSWasiErrnoSuccess) {
-          return source.error;
-        }
-        const destination = this._resolveDescriptorPath(newFd, newPathPtr, newPathLen);
-        if (destination.error !== __agentOSWasiErrnoSuccess) {
-          return destination.error;
-        }
-        if (source.readOnly || destination.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        this._clearStatCache();
-        __agentOSFs().linkSync(this._resolvedFsPath(source), this._resolvedFsPath(destination));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathOpen(fd, _dirflags, pathPtr, pathLen, oflags, rightsBase, rightsInheriting, _fdflags, openedFdPtr) {
-      try {
-        const entry = this._measureWasiPhase("descriptorEntry", () => this._descriptorEntry(fd));
-        if (
-          !entry ||
-          (entry.kind !== "preopen" && entry.kind !== "directory") ||
-          typeof entry.hostPath !== "string"
-        ) {
-          return __agentOSWasiErrnoBadf;
-        }
-        const requestedFlags = Number(oflags) >>> 0;
-        const createOrTruncate =
-          (requestedFlags & __agentOSWasiOpenCreate) !== 0 ||
-          (requestedFlags & __agentOSWasiOpenTruncate) !== 0;
-        const resolved = this._measureWasiPhase("resolveDescriptorPath", () =>
-          this._resolveDescriptorPath(fd, pathPtr, pathLen, {
-            preferCreateParent: createOrTruncate,
-          })
-        );
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        const guestPath = resolved.guestPath;
-        const fsPath = this._resolvedFsPath(resolved);
-        const openDirectory = (requestedFlags & __agentOSWasiOpenDirectory) !== 0;
-        const allowedRightsBase = this._descriptorRightsBase(entry);
-        const allowedRightsInheriting = this._descriptorRightsInheriting(entry);
-        const requestedRightsBase = this._normalizeRights(rightsBase, allowedRightsInheriting);
-        const requestedRightsInheriting = this._normalizeRights(
-          rightsInheriting,
-          allowedRightsInheriting,
-        );
-        if (
-          (requestedRightsBase & ~allowedRightsInheriting) !== 0n ||
-          (requestedRightsInheriting & ~allowedRightsInheriting) !== 0n
-        ) {
-          return __agentOSWasiErrnoAcces;
-        }
-        const requestedWriteAccess =
-          !openDirectory &&
-          (createOrTruncate || this._hasWriteRights(requestedRightsBase));
-        if (
-          requestedWriteAccess &&
-          !this._hasWriteRights(allowedRightsBase)
-        ) {
-          return __agentOSWasiErrnoAcces;
-        }
-        if (requestedWriteAccess && resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        if (createOrTruncate) {
-          this._clearStatCache();
-        }
-        const fsConstants = __agentOSFs().constants ?? {};
-        let openFlags = requestedWriteAccess
-          ? fsConstants.O_RDWR ?? 2
-          : fsConstants.O_RDONLY ?? 0;
-        if ((requestedFlags & __agentOSWasiOpenCreate) !== 0) {
-          openFlags |= fsConstants.O_CREAT ?? 64;
-        }
-        if ((requestedFlags & __agentOSWasiOpenExclusive) !== 0) {
-          openFlags |= fsConstants.O_EXCL ?? 128;
-        }
-        if ((requestedFlags & __agentOSWasiOpenTruncate) !== 0) {
-          openFlags |= fsConstants.O_TRUNC ?? 512;
-        }
-        if (openDirectory) {
-          openFlags |= fsConstants.O_DIRECTORY ?? 0;
-        }
-        const realFd = this._measureWasiPhase("openSync", () => __agentOSFs().openSync(fsPath, openFlags));
-        const openedKind = openDirectory || createOrTruncate
-          ? (openDirectory ? "directory" : "file")
-          : this._measureWasiPhase("postOpenStat", () =>
-              __agentOSFs().statSync(fsPath).isDirectory() ? "directory" : "file"
-            );
-        const openedFd = this.nextFd++;
-        this._measureWasiPhase("fdTableSet", () => {
-          this.fdTable.set(openedFd, {
-            kind: openedKind,
-            guestPath,
-            hostPath: fsPath,
-            readOnly: resolved.readOnly === true,
-            realFd,
-            offset: 0,
-            rightsBase: requestedRightsBase & allowedRightsInheriting,
-            rightsInheriting: requestedRightsInheriting & allowedRightsInheriting,
-            fdFlags: (Number(_fdflags) >>> 0) & 0xffff,
-          });
-        });
-        return this._measureWasiPhase("writeOpenedFd", () => this._writeUint32(openedFdPtr, openedFd));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathSymlink(targetPtr, targetLen, fd, pathPtr, pathLen) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        if (resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        const target = this._readString(targetPtr, targetLen);
-        this._clearStatCache();
-        __agentOSFs().symlinkSync(target, this._resolvedFsPath(resolved));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathRemoveDirectory(fd, pathPtr, pathLen) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        if (resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        this._clearStatCache();
-        __agentOSFs().rmdirSync(this._resolvedFsPath(resolved));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathRename(oldFd, oldPathPtr, oldPathLen, newFd, newPathPtr, newPathLen) {
-      try {
-        const source = this._resolveDescriptorPath(oldFd, oldPathPtr, oldPathLen);
-        if (source.error !== __agentOSWasiErrnoSuccess) {
-          return source.error;
-        }
-        const destination = this._resolveDescriptorPath(newFd, newPathPtr, newPathLen);
-        if (destination.error !== __agentOSWasiErrnoSuccess) {
-          return destination.error;
-        }
-        if (source.readOnly || destination.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        this._clearStatCache();
-        __agentOSFs().renameSync(this._resolvedFsPath(source), this._resolvedFsPath(destination));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathUnlinkFile(fd, pathPtr, pathLen) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        if (resolved.readOnly) {
-          return __agentOSWasiErrnoRofs;
-        }
-        this._clearStatCache();
-        __agentOSFs().unlinkSync(this._resolvedFsPath(resolved));
-        return __agentOSWasiErrnoSuccess;
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathFilestatGet(fd, flags, pathPtr, pathLen, statPtr) {
-      try {
-        const target = this._measureWasiPhase("readString", () => this._readString(pathPtr, pathLen));
-        const resolved =
-          this._measureWasiPhase("resolveDirectStatPath", () => this._resolveDescriptorDirectStatPath(fd, target)) ??
-          this._measureWasiPhase("resolveDescriptorPath", () => this._resolveDescriptorPath(fd, pathPtr, pathLen));
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        const follow = (Number(flags) & __agentOSWasiLookupSymlinkFollow) !== 0;
-        const cacheKey = this._statCacheKey(resolved, follow);
-        let stats = cacheKey ? this.statCache.get(cacheKey) : undefined;
-        if (stats) {
-          this._measureWasiPhase("statCacheHit", () => undefined);
-        } else {
-          stats = this._measureWasiPhase(follow ? "statSync" : "lstatSync", () =>
-            this._statResolvedPath(resolved, follow)
-          );
-          if (cacheKey) {
-            this.statCache.set(cacheKey, stats);
-          }
-        }
-        return this._measureWasiPhase("writeFilestat", () => this._writeFilestat(statPtr, stats, this._filetypeForStats(stats)));
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pathReadlink(fd, pathPtr, pathLen, bufPtr, bufLen, bufUsedPtr) {
-      try {
-        const resolved = this._resolveDescriptorPath(fd, pathPtr, pathLen);
-        if (resolved.error !== __agentOSWasiErrnoSuccess) {
-          return resolved.error;
-        }
-        const bytes = Buffer.from(__agentOSFs().readlinkSync(resolved.guestPath), "utf8");
-        const length = Math.min(bytes.length, Number(bufLen) >>> 0);
-        const writeStatus = this._writeBytes(bufPtr, bytes.subarray(0, length));
-        if (writeStatus !== __agentOSWasiErrnoSuccess) {
-          return writeStatus;
-        }
-        return this._writeUint32(bufUsedPtr, length);
-      } catch (error) {
-        return this._mapFsError(error);
-      }
-    }
-
-    _pollOneoff(inPtr, outPtr, nsubscriptions, neventsPtr) {
-      try {
-        const subscriptionCount = Number(nsubscriptions) >>> 0;
-        if (subscriptionCount === 0) {
-          return this._writeUint32(neventsPtr, 0);
-        }
-
-        const subscriptionSize = 48;
-        const eventSize = 32;
-        const kernelPollIn = 0x0001;
-        const kernelPollOut = 0x0004;
-        const kernelPollErr = 0x0008;
-        const kernelPollHup = 0x0010;
-        const view = this._memoryView();
-        const memory = this._memoryBytes();
-        const syncRpc =
-          typeof globalThis?.__agentOSSyncRpc?.callSync === "function"
-            ? __agentOSWasiSyncRpc()
-            : null;
-        const subscriptions = [];
-        let timeoutMs = null;
-
-        for (let index = 0; index < subscriptionCount; index += 1) {
-          const base = (Number(inPtr) >>> 0) + index * subscriptionSize;
-          const tag = view.getUint8(base + 8);
-          const userdata = memory.slice(base, base + 8);
-          if (tag === 0) {
-            const timeoutNs = view.getBigUint64(base + 24, true);
-            const relativeTimeoutMs = Number(timeoutNs / 1000000n);
-            timeoutMs =
-              timeoutMs == null ? relativeTimeoutMs : Math.min(timeoutMs, relativeTimeoutMs);
-            subscriptions.push({ kind: "clock", userdata });
-            continue;
-          }
-
-          if (tag !== 1 && tag !== 2) {
-            subscriptions.push({ kind: "unsupported", userdata });
-            continue;
-          }
-
-          const fd = view.getUint32(base + 16, true);
-          const descriptor = Number(fd) >>> 0;
-          const handle = this._externalFdHandle(descriptor);
-          const entry = this._descriptorEntry(descriptor);
-          let targetFd = null;
-          if (
-            (handle?.kind === "passthrough" || handle?.kind === "host-passthrough") &&
-            typeof handle.targetFd === "number"
-          ) {
-            targetFd = Number(handle.targetFd) >>> 0;
-          } else if (
-            entry?.kind === "stdin" ||
-            entry?.kind === "stdout" ||
-            entry?.kind === "stderr"
-          ) {
-            targetFd = descriptor;
-          }
-
-          subscriptions.push({
-            kind: tag === 1 ? "fd_read" : "fd_write",
-            fd: descriptor,
-            handle,
-            targetFd,
-            streamKind: entry?.kind,
-            userdata,
-          });
-        }
-
-        const deadline = timeoutMs == null ? null : Date.now() + Math.max(0, timeoutMs);
-        const readyEvents = [];
-
-        while (readyEvents.length === 0) {
-          for (const subscription of subscriptions) {
-            // A clock subscription is ready once its deadline has elapsed; report
-            // it as a first-class event so it is returned alongside any ready fds
-            // (not only as a fallback when nothing else is ready).
-            if (subscription.kind === "clock") {
-              if (deadline != null && Date.now() >= deadline) {
-                readyEvents.push({
-                  userdata: subscription.userdata,
-                  error: __agentOSWasiErrnoSuccess,
-                  type: 0,
-                  nbytes: 0,
-                  flags: 0,
-                });
-              }
-              continue;
-            }
-            if (subscription.kind === "fd_read" && subscription.handle?.kind === "pipe-read") {
-              const pipe = subscription.handle.pipe;
-              if (
-                pipe &&
-                (pipe.chunks.length > 0 ||
-                  (pipe.writeHandleCount === 0 && pipe.producers.size === 0))
-              ) {
-                readyEvents.push({
-                  userdata: subscription.userdata,
-                  error: __agentOSWasiErrnoSuccess,
-                  type: 1,
-                  nbytes: pipe.chunks[0]?.length ?? 0,
-                  flags: 0,
-                });
-              }
-              continue;
-            }
-
-            // Without a kernel poll bridge, resolve stdin fd_read readiness from
-            // the host-seam queued byte count (the browser delivers stdin through
-            // the runtime process object). Reporting nbytes does not consume input.
-            if (
-              !syncRpc &&
-              subscription.kind === "fd_read" &&
-              subscription.streamKind === "stdin" &&
-              typeof __agentOSWasiHost.stdinReadableBytes === "function"
-            ) {
-              const available = Number(__agentOSWasiHost.stdinReadableBytes()) >>> 0;
-              if (available > 0) {
-                readyEvents.push({
-                  userdata: subscription.userdata,
-                  error: __agentOSWasiErrnoSuccess,
-                  type: 1,
-                  nbytes: available,
-                  flags: 0,
-                });
-              }
-              continue;
-            }
-
-            if (subscription.kind === "fd_write" && subscription.handle?.kind === "pipe-write") {
-              readyEvents.push({
-                userdata: subscription.userdata,
-                error: __agentOSWasiErrnoSuccess,
-                type: 2,
-                nbytes: 65536,
-                flags: 0,
-              });
-              continue;
-            }
-
-            // Without a kernel poll bridge (a non-native backend) stdout/stderr
-            // are always writable, so resolve their fd_write readiness directly
-            // instead of leaving it to the (absent) __kernel_poll round-trip.
-            if (
-              !syncRpc &&
-              subscription.kind === "fd_write" &&
-              (subscription.streamKind === "stdout" ||
-                subscription.streamKind === "stderr")
-            ) {
-              readyEvents.push({
-                userdata: subscription.userdata,
-                error: __agentOSWasiErrnoSuccess,
-                type: 2,
-                nbytes: 65536,
-                flags: 0,
-              });
-            }
-          }
-
-          if (readyEvents.length > 0) {
-            break;
-          }
-
-          // Without a kernel poll bridge, fd readiness is resolved synchronously
-          // above (stdio fast paths) or via pipes; if there is no clock to wait on
-          // and no pipe to pump, no further progress is possible, so stop instead
-          // of busy-waiting until the caller times out.
-          if (
-            !syncRpc &&
-            !subscriptions.some((subscription) => subscription.kind === "clock") &&
-            !subscriptions.some(
-              (subscription) =>
-                subscription.handle?.kind === "pipe-read" ||
-                subscription.handle?.kind === "pipe-write",
-            )
-          ) {
-            break;
-          }
-
-          const pollTargets = subscriptions
-            .filter(
-              (subscription) =>
-                (subscription.kind === "fd_read" || subscription.kind === "fd_write") &&
-                typeof subscription.targetFd === "number",
-            )
-            .map((subscription) => ({
-              fd: subscription.targetFd,
-              events: subscription.kind === "fd_read" ? kernelPollIn : kernelPollOut,
-            }));
-          const waitMs =
-            deadline == null ? 10 : Math.max(0, Math.min(10, deadline - Date.now()));
-
-          if (syncRpc && pollTargets.length > 0) {
-            let response = null;
-            try {
-              response = syncRpc.callSync("__kernel_poll", [pollTargets, waitMs]);
-            } catch (error) {
-              __agentOSWasiDebug(
-                \`poll_oneoff __kernel_poll failed: \${
-                  error instanceof Error ? error.message : String(error)
-                }\`,
-              );
-            }
-
-            const responseEntries = Array.isArray(response?.fds) ? response.fds : [];
-            for (const subscription of subscriptions) {
-              if (
-                (subscription.kind !== "fd_read" && subscription.kind !== "fd_write") ||
-                typeof subscription.targetFd !== "number"
-              ) {
-                continue;
-              }
-
-              const responseEntry = responseEntries.find(
-                (entry) => (Number(entry?.fd) >>> 0) === subscription.targetFd,
-              );
-              const revents = Number(responseEntry?.revents) >>> 0;
-              const interested =
-                subscription.kind === "fd_read"
-                  ? kernelPollIn | kernelPollErr | kernelPollHup
-                  : kernelPollOut | kernelPollErr | kernelPollHup;
-              if ((revents & interested) === 0) {
-                continue;
-              }
-
-              readyEvents.push({
-                userdata: subscription.userdata,
-                error: __agentOSWasiErrnoSuccess,
-                type: subscription.kind === "fd_read" ? 1 : 2,
-                nbytes: subscription.kind === "fd_read" ? 1 : 65536,
-                flags: 0,
-              });
-            }
-          }
-
-          if (readyEvents.length > 0) {
-            break;
-          }
-
-          let pumped = false;
-          for (const subscription of subscriptions) {
-            if (subscription.kind === "fd_read" && subscription.handle?.kind === "pipe-read") {
-              pumped = this._pumpPipeProducers(subscription.handle.pipe, 10) || pumped;
-            }
-          }
-
-          if (pumped) {
-            continue;
-          }
-
-          if (deadline != null && Date.now() >= deadline) {
-            break;
-          }
-
-          if (
-            pollTargets.length === 0 &&
-            typeof Atomics?.wait !== "function" &&
-            deadline == null
-          ) {
-            break;
-          }
-
-          if (
-            typeof Atomics?.wait === "function" &&
-            typeof syntheticWaitArray !== "undefined"
-          ) {
-            Atomics.wait(syntheticWaitArray, 0, 0, waitMs);
-          } else if (!syncRpc && pollTargets.length === 0) {
-            break;
-          }
-        }
-
-        if (
-          readyEvents.length === 0 &&
-          subscriptions.some((subscription) => subscription.kind === "clock")
-        ) {
-          const clockSubscription = subscriptions.find(
-            (subscription) => subscription.kind === "clock",
-          );
-          readyEvents.push({
-            userdata: clockSubscription.userdata,
-            error: __agentOSWasiErrnoSuccess,
-            type: 0,
-            nbytes: 0,
-            flags: 0,
-          });
-        }
-
-        for (let index = 0; index < readyEvents.length; index += 1) {
-          const base = (Number(outPtr) >>> 0) + index * eventSize;
-          const event = readyEvents[index];
-          memory.set(event.userdata, base);
-          view.setUint16(base + 8, event.error, true);
-          view.setUint8(base + 10, event.type);
-          view.setBigUint64(base + 16, BigInt(event.nbytes), true);
-          view.setUint16(base + 24, event.flags, true);
-        }
-
-        return this._writeUint32(neventsPtr, readyEvents.length);
-      } catch (error) {
-        __agentOSWasiDebug(
-          \`poll_oneoff failed: \${error instanceof Error ? error.message : String(error)}\`,
-        );
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _randomGet(bufPtr, bufLen) {
-      try {
-        const length = Number(bufLen) >>> 0;
-        const bytes = Buffer.allocUnsafe(length);
-        __agentOSCrypto().randomFillSync(bytes);
-        return this._writeBytes(bufPtr, bytes);
-      } catch {
-        return __agentOSWasiErrnoFault;
-      }
-    }
-
-    _schedYield() {
-      return __agentOSWasiErrnoSuccess;
-    }
-
-    _procExit(code) {
-      if (this.returnOnExit) {
-        const error = new Error(\`wasi exit(\${Number(code) >>> 0})\`);
-        error.__agentOSWasiExit = true;
-        error.code = Number(code) >>> 0;
-        throw error;
-      }
-      process.exit(Number(code) >>> 0);
-    }
-  }
-
-  Object.defineProperty(globalThis, "__agentOSWasiModule", {
-    configurable: true,
-    enumerable: false,
-    value: { WASI },
-    writable: true,
-  });
-}
-
-		// Re-export the shared runner WASI class as the browser wasi module.
-		module.exports = { WASI: globalThis.__agentOSWasiModule.WASI };
-		module.exports.default = { WASI: globalThis.__agentOSWasiModule.WASI };
-`;
diff --git a/packages/browser/src/worker-adapter.ts b/packages/browser/src/worker-adapter.ts
deleted file mode 100644
index a261d0bf2..000000000
--- a/packages/browser/src/worker-adapter.ts
+++ /dev/null
@@ -1,55 +0,0 @@
-/**
- * Browser worker adapter.
- *
- * Wraps the Web Worker API for spawning Workers.
- * Requires COOP/COEP headers for SharedArrayBuffer support.
- */
-
-export interface WorkerHandle {
-	postMessage(data: unknown, transferList?: Transferable[]): void;
-	onMessage(handler: (data: unknown) => void): void;
-	onError(handler: (err: Error) => void): void;
-	onExit(handler: (code: number) => void): void;
-	terminate(): void;
-}
-
-// biome-ignore lint/complexity/noStaticOnlyClass: This class is part of the public browser package API.
-export class BrowserWorkerAdapter {
-	/**
-	 * Spawn a Web Worker for the given script URL.
-	 */
-	static create(
-		scriptUrl: string | URL,
-		options?: { workerData?: unknown },
-	): WorkerHandle {
-		const worker = new Worker(scriptUrl, { type: "module" });
-
-		// Send workerData as the initial message (Web Workers don't have
-		// a constructor option for this like Node's worker_threads)
-		if (options?.workerData !== undefined) {
-			worker.postMessage({
-				type: "init",
-				workerData: options.workerData,
-			});
-		}
-
-		return {
-			postMessage(data, transferList) {
-				worker.postMessage(data, transferList ?? []);
-			},
-			onMessage(handler) {
-				worker.addEventListener("message", (e) => handler(e.data));
-			},
-			onError(handler) {
-				worker.addEventListener("error", (e) => handler(new Error(e.message)));
-			},
-			onExit(_handler) {
-				// Web Workers don't have an exit event — the terminate()
-				// caller is responsible for cleanup
-			},
-			terminate() {
-				worker.terminate();
-			},
-		};
-	}
-}
diff --git a/packages/browser/src/worker-protocol.ts b/packages/browser/src/worker-protocol.ts
deleted file mode 100644
index 433413c1c..000000000
--- a/packages/browser/src/worker-protocol.ts
+++ /dev/null
@@ -1,157 +0,0 @@
-import type {
-	ExecResult,
-	OSConfig,
-	ProcessConfig,
-	RunResult,
-	StdioChannel,
-	TimingMitigation,
-} from "./runtime.js";
-import type {
-	BrowserSyncBridgePayload,
-	BrowserWorkerSyncRequestMessage,
-} from "./sync-bridge.js";
-
-export type BrowserWorkerExecOptions = {
-	filePath?: string;
-	env?: Record<string, string>;
-	cwd?: string;
-	stdin?: string;
-	stdioPty?: {
-		open?: boolean;
-		slaveFd?: number;
-		columns?: number;
-		rows?: number;
-	};
-	timingMitigation?: TimingMitigation;
-	persistent?: boolean;
-	streamingStdin?: boolean;
-};
-
-export type BrowserWorkerExtensionRequestPayload = {
-	namespace: string;
-	payload: Uint8Array;
-};
-
-export type BrowserWorkerExtensionResponse = {
-	namespace: string;
-	payload: Uint8Array;
-};
-
-export type BrowserWorkerInitPayload = {
-	processConfig?: ProcessConfig;
-	osConfig?: OSConfig;
-	filesystem?: "opfs" | "memory";
-	networkEnabled?: boolean;
-	timingMitigation?: TimingMitigation;
-	payloadLimits?: {
-		base64TransferBytes?: number;
-		jsonPayloadBytes?: number;
-	};
-	syncBridge?: BrowserSyncBridgePayload;
-};
-
-type BrowserWorkerControlMessage = {
-	controlToken: string;
-};
-
-export type BrowserWorkerRequestMessage =
-	| (BrowserWorkerControlMessage & {
-			id: number;
-			type: "init";
-			payload: BrowserWorkerInitPayload;
-	  })
-	| {
-			controlToken: string;
-			id: number;
-			type: "exec";
-			payload: {
-				executionId: string;
-				code: string;
-				options?: BrowserWorkerExecOptions;
-				captureStdio?: boolean;
-			};
-	  }
-	| {
-			controlToken: string;
-			id: number;
-			type: "run";
-			payload: {
-				executionId: string;
-				code: string;
-				filePath?: string;
-				captureStdio?: boolean;
-			};
-	  }
-	| {
-			controlToken: string;
-			id: number;
-			type: "signal";
-			payload: {
-				executionId: string;
-				signal: number;
-			};
-	  }
-	| (BrowserWorkerControlMessage & {
-			id: number;
-			type: "extension";
-			payload: BrowserWorkerExtensionRequestPayload;
-	  })
-	| (BrowserWorkerControlMessage & {
-			id: number;
-			type: "write-stdin";
-			executionId: string;
-			data: string;
-	  })
-	| (BrowserWorkerControlMessage & {
-			id: number;
-			type: "end-stdin";
-			executionId: string;
-	  })
-	| (BrowserWorkerControlMessage & {
-			id: number;
-			type: "resize-pty";
-			executionId: string;
-			columns: number;
-			rows: number;
-	  })
-	| (BrowserWorkerControlMessage & { id: number; type: "dispose" });
-
-export type BrowserWorkerResponseMessage =
-	| (BrowserWorkerControlMessage & {
-			type: "response";
-			id: number;
-			ok: true;
-			result: ExecResult | RunResult | BrowserWorkerExtensionResponse | true;
-	  })
-	| {
-			controlToken: string;
-			type: "response";
-			id: number;
-			ok: false;
-			error: { message: string; stack?: string; code?: string };
-	  };
-
-export type BrowserWorkerStdioMessage = BrowserWorkerControlMessage & {
-	type: "stdio";
-	executionId: string;
-	requestId: number;
-	channel: StdioChannel;
-	message: string;
-};
-
-export type BrowserWorkerPtyOpenedMessage = BrowserWorkerControlMessage & {
-	type: "pty-opened";
-	executionId: string;
-	requestId: number;
-	masterFd: number;
-	slaveFd: number;
-	path?: string;
-	columns: number;
-	rows: number;
-};
-
-export type BrowserWorkerOutboundMessage =
-	| BrowserWorkerResponseMessage
-	| BrowserWorkerStdioMessage
-	| BrowserWorkerPtyOpenedMessage
-	| BrowserWorkerSyncRequestMessage;
diff --git a/packages/browser/src/worker.ts b/packages/browser/src/worker.ts
deleted file mode 100644
index bf77c5aba..000000000
--- a/packages/browser/src/worker.ts
+++ /dev/null
@@ -1,3745 +0,0 @@
-import { hmac as nobleHmac } from "@noble/hashes/hmac.js";
-import {
-	cbc as nobleAesCbc,
-	ctr as nobleAesCtr,
-	gcm as nobleAesGcm,
-} from "@noble/ciphers/aes.js";
-import { md5, sha1 } from "@noble/hashes/legacy.js";
-import { pbkdf2 as noblePbkdf2 } from "@noble/hashes/pbkdf2.js";
-import { sha224, sha256, sha384, sha512 } from "@noble/hashes/sha2.js";
-import { scrypt as nobleScrypt } from "@noble/hashes/scrypt.js";
-import { transform } from "sucrase";
-import type {
-	BrowserChildProcessPollEvent,
-	BrowserChildProcessSpawnRequest,
-} from "./child-process-bridge.js";
-import { createBrowserNetworkAdapter } from "./driver.js";
-import { base64ToBytes, toUint8Array } from "./encoding.js";
-import { posixErrno } from "./errno.js";
-import {
-	PROCESS_SIGNAL_NUMBERS,
-	defaultSignalExitCode,
-	signalNumberForEvent,
-} from "./signals.js";
-import type {
-	ExecResult,
-	NetworkAdapter,
-	RunResult,
-	StdioChannel,
-	TimingMitigation,
-	VirtualDirEntry,
-	VirtualStat,
-} from "./runtime.js";
-import {
-	createNetworkStub,
-	exposeCustomGlobal,
-	exposeMutableRuntimeStateGlobal,
-	getIsolateRuntimeSource,
-	getRequireSetupCode,
-	isESM,
-	POLYFILL_CODE_MAP,
-	transformDynamicImport,
-} from "./runtime.js";
-import {
-	assertBrowserSyncBridgeSupport,
-	type BrowserSyncBridgeErrorPayload,
-	type BrowserSyncBridgePayload,
-	type BrowserWorkerSyncOperation,
-	SYNC_BRIDGE_KIND_BINARY,
-	SYNC_BRIDGE_KIND_JSON,
-	SYNC_BRIDGE_KIND_NONE,
-	SYNC_BRIDGE_KIND_TEXT,
-	SYNC_BRIDGE_SIGNAL_KIND_INDEX,
-	SYNC_BRIDGE_SIGNAL_LENGTH_INDEX,
-	SYNC_BRIDGE_SIGNAL_STATE_IDLE,
-	SYNC_BRIDGE_SIGNAL_STATE_INDEX,
-	SYNC_BRIDGE_SIGNAL_STATUS_INDEX,
-	SYNC_BRIDGE_STATUS_ERROR,
-} from "./sync-bridge.js";
-import type {
-	BrowserWorkerExecOptions,
-	BrowserWorkerInitPayload,
-	BrowserWorkerOutboundMessage,
-	BrowserWorkerRequestMessage,
-} from "./worker-protocol.js";
-
-let networkAdapter: NetworkAdapter | null = null;
-let initialized = false;
-let controlToken: string | null = null;
-let runtimeTimingMitigation: TimingMitigation = "freeze";
-let runtimeProcessConfig: Record<string, unknown> | null = null;
-let activeProcessRequestId: number | null = null;
-let activeExecutionId: string | null = null;
-let activeCaptureStdio = false;
-let activeSyncBridge: ReturnType<typeof createSyncBridgeClient> | null = null;
-const pendingExecutionSignals = new Map<string, (signal: number) => void>();
-
-const dynamicImportCache = new Map<string, unknown>();
-// For a PERSISTENT execution (ExecOptions.persistent): process.exit resolves this
-// instead of throwing, so a long-running stdio program's async exit (e.g. an ACP agent
-// exiting on stdin EOF, from an async callback that can't be caught by the sync exec
-// wrapper) cleanly ends the run. Null in run-to-completion mode (exit throws as before).
-let persistentExitResolver: ((code: number) => void) | null = null;
-// Streaming stdin for a persistent execution: the host feeds more stdin while the program
-// runs (and ends it explicitly), rather than the one-shot exec stdin that auto-ends. Lets
-// the host drive a long-running stdio program (e.g. an ACP agent: write a request, read
-// the reply, write the next) as a proper external client.
-let streamingStdinEnabled = false;
-let activeStdinPush: ((data: string) => void) | null = null;
-let activeStdinEnd: (() => void) | null = null;
-// Safety bound so a persistent program that never exits can't hang the worker.
-const PERSISTENT_EXEC_TIMEOUT_MS = 120_000;
-const MAX_ERROR_MESSAGE_CHARS = 8192;
-const MAX_STDIO_MESSAGE_CHARS = 8192;
-
-function eventForSignalNumber(signal: number): string {
-	return (
-		Object.entries(PROCESS_SIGNAL_NUMBERS).find(([, value]) => value === signal)?.[0] ??
-		`SIG${signal}`
-	);
-}
-
-// Payload size defaults matching the Node runtime path
-const DEFAULT_BASE64_TRANSFER_BYTES = 16 * 1024 * 1024;
-const DEFAULT_JSON_PAYLOAD_BYTES = 4 * 1024 * 1024;
-const PAYLOAD_LIMIT_ERROR_CODE = "ERR_SANDBOX_PAYLOAD_TOO_LARGE";
-const DEFAULT_SCRYPT_COST = 16_384;
-const DEFAULT_SCRYPT_BLOCK_SIZE = 8;
-const DEFAULT_SCRYPT_PARALLELIZATION = 1;
-
-let base64TransferLimitBytes = DEFAULT_BASE64_TRANSFER_BYTES;
-let jsonPayloadLimitBytes = DEFAULT_JSON_PAYLOAD_BYTES;
-
-const encoder = new TextEncoder();
-const decoder = new TextDecoder();
-// biome-ignore lint/security/noGlobalEval: the browser worker intentionally evaluates isolated runtime source strings.
-const globalEval = eval as (source: string) => unknown;
-const SHARED_ARRAY_BUFFER_FREEZE_KEYS = [
-	"byteLength",
-	"slice",
-	"grow",
-	"maxByteLength",
-	"growable",
-] as const;
-
-type TimingGlobalsSnapshot = {
-	captured: boolean;
-	dateDescriptor?: PropertyDescriptor;
-	dateValue?: DateConstructor;
-	performanceDescriptor?: PropertyDescriptor;
-	performanceValue?: Performance;
-	sharedArrayBufferDescriptor?: PropertyDescriptor;
-	sharedArrayBufferValue?: typeof SharedArrayBuffer;
-	sharedArrayBufferPrototypeDescriptors: Map<
-		string,
-		PropertyDescriptor | undefined
-	>;
-};
-
-const timingGlobals: TimingGlobalsSnapshot = {
-	captured: false,
-	sharedArrayBufferPrototypeDescriptors: new Map(),
-};
-
-function getUtf8ByteLength(text: string): number {
-	return encoder.encode(text).byteLength;
-}
-
-function getRequiredControlToken(): string {
-	if (!controlToken) {
-		throw new Error(
-			"Browser runtime worker control channel is not initialized",
-		);
-	}
-	return controlToken;
-}
-
-function captureTimingGlobals(): void {
-	if (timingGlobals.captured) {
-		return;
-	}
-
-	timingGlobals.captured = true;
-	timingGlobals.dateDescriptor = Object.getOwnPropertyDescriptor(
-		globalThis,
-		"Date",
-	);
-	timingGlobals.dateValue = globalThis.Date;
-	timingGlobals.performanceDescriptor = Object.getOwnPropertyDescriptor(
-		globalThis,
-		"performance",
-	);
-	timingGlobals.performanceValue = globalThis.performance;
-	timingGlobals.sharedArrayBufferDescriptor = Object.getOwnPropertyDescriptor(
-		globalThis,
-		"SharedArrayBuffer",
-	);
-	timingGlobals.sharedArrayBufferValue = globalThis.SharedArrayBuffer;
-
-	const sharedArrayBufferCtor = globalThis.SharedArrayBuffer;
-	if (typeof sharedArrayBufferCtor !== "function") {
-		return;
-	}
-
-	const prototype = sharedArrayBufferCtor.prototype as Record<string, unknown>;
-	for (const key of SHARED_ARRAY_BUFFER_FREEZE_KEYS) {
-		timingGlobals.sharedArrayBufferPrototypeDescriptors.set(
-			key,
-			Object.getOwnPropertyDescriptor(prototype, key),
-		);
-	}
-}
-
-function restoreGlobalProperty(
-	name: "Date" | "performance" | "SharedArrayBuffer",
-	descriptor?: PropertyDescriptor,
-): void {
-	if (descriptor) {
-		try {
-			Object.defineProperty(globalThis, name, descriptor);
-			return;
-		} catch {
-			if ("value" in descriptor) {
-				(globalThis as Record<string, unknown>)[name] = descriptor.value;
-				return;
-			}
-		}
-	}
-
-	Reflect.deleteProperty(globalThis, name);
-}
-
-function restoreSharedArrayBufferPrototype(): void {
-	const sharedArrayBufferCtor = timingGlobals.sharedArrayBufferValue;
-	if (typeof sharedArrayBufferCtor !== "function") {
-		return;
-	}
-
-	const prototype = sharedArrayBufferCtor.prototype as Record<string, unknown>;
-	for (const key of SHARED_ARRAY_BUFFER_FREEZE_KEYS) {
-		const descriptor =
-			timingGlobals.sharedArrayBufferPrototypeDescriptors.get(key);
-		try {
-			if (descriptor) {
-				Object.defineProperty(prototype, key, descriptor);
-			} else {
-				delete prototype[key];
-			}
-		} catch {
-			// Ignore non-configurable SharedArrayBuffer prototype properties.
-		}
-	}
-}
-
-function restoreTimingMitigationOff(): void {
-	captureTimingGlobals();
-	restoreGlobalProperty("Date", timingGlobals.dateDescriptor);
-	restoreGlobalProperty("performance", timingGlobals.performanceDescriptor);
-	restoreSharedArrayBufferPrototype();
-	restoreGlobalProperty(
-		"SharedArrayBuffer",
-		timingGlobals.sharedArrayBufferDescriptor,
-	);
-
-	if (
-		typeof globalThis.performance === "undefined" ||
-		globalThis.performance === null
-	) {
-		Object.defineProperty(globalThis, "performance", {
-			value: {
-				now: () => Date.now(),
-			},
-			configurable: true,
-			writable: true,
-		});
-	}
-}
-
-function applyTimingMitigation(
-	timingMitigation: TimingMitigation,
-	frozenTimeMs?: number,
-): number | undefined {
-	captureTimingGlobals();
-	restoreTimingMitigationOff();
-	if (timingMitigation !== "freeze") {
-		return undefined;
-	}
-
-	const frozenTimeValue =
-		typeof frozenTimeMs === "number" && Number.isFinite(frozenTimeMs)
-			? Math.trunc(frozenTimeMs)
-			: Date.now();
-	const originalDate =
-		timingGlobals.dateValue ?? timingGlobals.dateDescriptor?.value ?? Date;
-	const frozenDateNow = () => frozenTimeValue;
-	const FrozenDate = function (...args: unknown[]) {
-		if (new.target) {
-			if (args.length === 0) {
-				return new originalDate(frozenTimeValue);
-			}
-			return new originalDate(
-				...(args as ConstructorParameters<DateConstructor>),
-			);
-		}
-		return originalDate();
-	} as unknown as DateConstructor;
-	Object.defineProperty(FrozenDate, "prototype", {
-		value: originalDate.prototype,
-		writable: false,
-		configurable: false,
-	});
-	Object.defineProperty(FrozenDate, "now", {
-		value: frozenDateNow,
-		configurable: true,
-		writable: false,
-	});
-	FrozenDate.parse = originalDate.parse;
-	FrozenDate.UTC = originalDate.UTC;
-	try {
-		Object.defineProperty(globalThis, "Date", {
-			value: FrozenDate,
-			configurable: true,
-			writable: false,
-		});
-	} catch {
-		(globalThis as Record<string, unknown>).Date = FrozenDate;
-	}
-
-	const frozenPerformance = Object.create(null) as Record<string, unknown>;
-	const originalPerformance = timingGlobals.performanceValue;
-	if (
-		typeof originalPerformance !== "undefined" &&
-		originalPerformance !== null
-	) {
-		const source = originalPerformance as unknown as Record<string, unknown>;
-		for (const key of Object.getOwnPropertyNames(
-			Object.getPrototypeOf(originalPerformance) ?? originalPerformance,
-		)) {
-			if (key === "now") {
-				continue;
-			}
-			try {
-				const value = source[key];
-				frozenPerformance[key] =
-					typeof value === "function" ? value.bind(originalPerformance) : value;
-			} catch {
-				// Ignore performance accessors that throw in this host.
-			}
-		}
-	}
-	Object.defineProperty(frozenPerformance, "now", {
-		value: () => 0,
-		configurable: true,
-		writable: false,
-	});
-	Object.freeze(frozenPerformance);
-	try {
-		Object.defineProperty(globalThis, "performance", {
-			value: frozenPerformance,
-			configurable: true,
-			writable: false,
-		});
-	} catch {
-		(globalThis as Record<string, unknown>).performance = frozenPerformance;
-	}
-
-	const sharedArrayBufferCtor = timingGlobals.sharedArrayBufferValue;
-	if (typeof sharedArrayBufferCtor === "function") {
-		const prototype = sharedArrayBufferCtor.prototype as Record<
-			string,
-			unknown
-		>;
-		for (const key of SHARED_ARRAY_BUFFER_FREEZE_KEYS) {
-			try {
-				Object.defineProperty(prototype, key, {
-					get() {
-						throw new TypeError(
-							"SharedArrayBuffer is not available in sandbox",
-						);
-					},
-					configurable: true,
-				});
-			} catch {
-				// Ignore non-configurable SharedArrayBuffer prototype properties.
-			}
-		}
-	}
-	try {
-		Object.defineProperty(globalThis, "SharedArrayBuffer", {
-			value: undefined,
-			configurable: true,
-			writable: false,
-			enumerable: false,
-		});
-	} catch {
-		Reflect.deleteProperty(globalThis, "SharedArrayBuffer");
-	}
-
-	return frozenTimeValue;
-}
-
-function assertPayloadByteLength(
-	payloadLabel: string,
-	actualBytes: number,
-	maxBytes: number,
-): void {
-	if (actualBytes <= maxBytes) return;
-	const error = new Error(
-		`[${PAYLOAD_LIMIT_ERROR_CODE}] ${payloadLabel}: payload is ${actualBytes} bytes, limit is ${maxBytes} bytes`,
-	);
-	(error as { code?: string }).code = PAYLOAD_LIMIT_ERROR_CODE;
-	throw error;
-}
-
-function assertTextPayloadSize(
-	payloadLabel: string,
-	text: string,
-	maxBytes: number,
-): void {
-	assertPayloadByteLength(payloadLabel, getUtf8ByteLength(text), maxBytes);
-}
-
-interface BrowserScryptOptions {
-	cost?: unknown;
-	N?: unknown;
-	blockSize?: unknown;
-	r?: unknown;
-	parallelization?: unknown;
-	p?: unknown;
-}
-
-function parseScryptOptions(value: unknown): BrowserScryptOptions {
-	if (value == null) return {};
-	if (typeof value === "string") {
-		const parsed = JSON.parse(value);
-		return typeof parsed === "object" && parsed !== null
-			? (parsed as BrowserScryptOptions)
-			: {};
-	}
-	return typeof value === "object" ? (value as BrowserScryptOptions) : {};
-}
-
-function normalizeScryptPositiveInteger(
-	value: unknown,
-	fallback: number,
-	label: string,
-): number {
-	const normalized = value == null ? fallback : Number(value);
-	if (!Number.isInteger(normalized) || normalized <= 0) {
-		throw new Error(`crypto.scrypt ${label} must be a positive integer`);
-	}
-	return normalized;
-}
-
-function normalizeScryptOptions(value: unknown, keyLength: unknown) {
-	const options = parseScryptOptions(value);
-	const length = Number(keyLength);
-	if (!Number.isInteger(length) || length < 0) {
-		throw new Error("crypto.scrypt key length must be a non-negative integer");
-	}
-	const cost = normalizeScryptPositiveInteger(
-		options.cost ?? options.N,
-		DEFAULT_SCRYPT_COST,
-		"cost",
-	);
-	if ((cost & (cost - 1)) !== 0) {
-		throw new Error("crypto.scrypt cost must be a positive power of two");
-	}
-	return {
-		N: cost,
-		r: normalizeScryptPositiveInteger(
-			options.blockSize ?? options.r,
-			DEFAULT_SCRYPT_BLOCK_SIZE,
-			"block size",
-		),
-		p: normalizeScryptPositiveInteger(
-			options.parallelization ?? options.p,
-			DEFAULT_SCRYPT_PARALLELIZATION,
-			"parallelization",
-		),
-		dkLen: length,
-	};
-}
-
-const BROWSER_CRYPTO_HASHES = {
-	md5,
-	sha1,
-	sha224,
-	sha256,
-	sha384,
-	sha512,
-};
-
-type BrowserCryptoHashName = keyof typeof BROWSER_CRYPTO_HASHES;
-
-function normalizeCryptoHashName(algorithm: unknown): BrowserCryptoHashName {
-	const normalized = String(algorithm)
-		.trim()
-		.toLowerCase()
-		.replace(/[-_]/g, "");
-	if (Object.hasOwn(BROWSER_CRYPTO_HASHES, normalized)) {
-		return normalized as BrowserCryptoHashName;
-	}
-	throw new Error(`Unsupported browser crypto digest algorithm: ${algorithm}`);
-}
-
-const RSA_PKCS1_DIGEST_PREFIXES: Record<BrowserCryptoHashName, string> = {
-	md5: "3020300c06082a864886f70d020505000410",
-	sha1: "3021300906052b0e03021a05000414",
-	sha224: "302d300d06096086480165030402040500041c",
-	sha256: "3031300d060960864801650304020105000420",
-	sha384: "3041300d060960864801650304020205000430",
-	sha512: "3051300d060960864801650304020305000440",
-};
-
-function browserCryptoHash(algorithm: unknown) {
-	return BROWSER_CRYPTO_HASHES[normalizeCryptoHashName(algorithm)];
-}
-
-function hashDigestBytes(algorithm: unknown, data: unknown): Uint8Array {
-	return browserCryptoHash(algorithm)(toUint8Array(data));
-}
-
-function hmacDigestBytes(
-	algorithm: unknown,
-	key: unknown,
-	data: unknown,
-): Uint8Array {
-	return nobleHmac(
-		browserCryptoHash(algorithm),
-		toUint8Array(key),
-		toUint8Array(data),
-	);
-}
-
-function normalizeSignatureHashName(algorithm: unknown): BrowserCryptoHashName {
-	const normalized = String(algorithm)
-		.trim()
-		.toLowerCase()
-		.replace(/^rsa[-_]/, "");
-	return normalizeCryptoHashName(normalized);
-}
-
-function bytesToHex(bytes: Uint8Array): string {
-	return Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join(
-		"",
-	);
-}
-
-function hexToBytes(hex: string): Uint8Array {
-	const out = new Uint8Array(hex.length / 2);
-	for (let index = 0; index < out.length; index++) {
-		out[index] = Number.parseInt(hex.slice(index * 2, index * 2 + 2), 16);
-	}
-	return out;
-}
-
-function concatBytes(chunks: Uint8Array[]): Uint8Array {
-	const total = chunks.reduce((sum, chunk) => sum + chunk.byteLength, 0);
-	const out = new Uint8Array(total);
-	let offset = 0;
-	for (const chunk of chunks) {
-		out.set(chunk, offset);
-		offset += chunk.byteLength;
-	}
-	return out;
-}
-
-function pemToDerBytes(value: unknown): Uint8Array {
-	let pem: string;
-	if (typeof value === "string") {
-		try {
-			const parsed = JSON.parse(value) as unknown;
-			pem = typeof parsed === "string" ? parsed : value;
-		} catch {
-			pem = value;
-		}
-	} else if (value && typeof value === "object" && "key" in value) {
-		return pemToDerBytes((value as { key?: unknown }).key);
-	} else {
-		throw new Error("Browser crypto RSA key must be a PEM string");
-	}
-	const base64 = pem.replace(
-		/-----BEGIN [^-]+-----|-----END [^-]+-----|\s+/g,
-		"",
-	);
-	return base64ToBytes(base64);
-}
-
-class DerReader {
-	private offset = 0;
-	constructor(private readonly bytes: Uint8Array) {}
-
-	get position(): number {
-		return this.offset;
-	}
-
-	set position(value: number) {
-		this.offset = value;
-	}
-
-	readTag(expected: number): Uint8Array {
-		const tag = this.bytes[this.offset++];
-		if (tag !== expected) {
-			throw new Error(
-				`Invalid RSA key DER tag: expected ${expected}, got ${tag}`,
-			);
-		}
-		const length = this.readLength();
-		const end = this.offset + length;
-		if (end > this.bytes.byteLength) {
-			throw new Error("Invalid RSA key DER length");
-		}
-		const value = this.bytes.subarray(this.offset, end);
-		this.offset = end;
-		return value;
-	}
-
-	readSequence(): DerReader {
-		return new DerReader(this.readTag(0x30));
-	}
-
-	readInteger(): Uint8Array {
-		let value = this.readTag(0x02);
-		while (value.byteLength > 1 && value[0] === 0) {
-			value = value.subarray(1);
-		}
-		return value;
-	}
-
-	readOctetString(): Uint8Array {
-		return this.readTag(0x04);
-	}
-
-	readBitString(): Uint8Array {
-		const value = this.readTag(0x03);
-		if (value[0] !== 0) {
-			throw new Error("Unsupported RSA key bit string padding");
-		}
-		return value.subarray(1);
-	}
-
-	skipAny(): void {
-		const tag = this.bytes[this.offset++];
-		if (tag == null) {
-			throw new Error("Invalid RSA key DER");
-		}
-		const length = this.readLength();
-		this.offset += length;
-		if (this.offset > this.bytes.byteLength) {
-			throw new Error("Invalid RSA key DER length");
-		}
-	}
-
-	private readLength(): number {
-		const first = this.bytes[this.offset++];
-		if (first == null) {
-			throw new Error("Invalid RSA key DER length");
-		}
-		if ((first & 0x80) === 0) {
-			return first;
-		}
-		const lengthBytes = first & 0x7f;
-		if (lengthBytes === 0 || lengthBytes > 4) {
-			throw new Error("Unsupported RSA key DER length");
-		}
-		let length = 0;
-		for (let index = 0; index < lengthBytes; index++) {
-			length = (length << 8) | this.bytes[this.offset++];
-		}
-		return length;
-	}
-}
-
-type BrowserRsaKey = {
-	modulus: bigint;
-	exponent: bigint;
-	modulusLength: number;
-};
-
-function bytesToBigInt(bytes: Uint8Array): bigint {
-	const hex = bytesToHex(bytes);
-	return hex.length === 0 ? 0n : BigInt(`0x${hex}`);
-}
-
-function bigIntToBytes(value: bigint, length: number): Uint8Array {
-	let hex = value.toString(16);
-	if (hex.length % 2 !== 0) {
-		hex = `0${hex}`;
-	}
-	const bytes = hexToBytes(hex);
-	if (bytes.byteLength > length) {
-		throw new Error("RSA value exceeds modulus length");
-	}
-	const out = new Uint8Array(length);
-	out.set(bytes, length - bytes.byteLength);
-	return out;
-}
-
-function modPow(base: bigint, exponent: bigint, modulus: bigint): bigint {
-	let result = 1n;
-	let factor = base % modulus;
-	let power = exponent;
-	while (power > 0n) {
-		if ((power & 1n) === 1n) {
-			result = (result * factor) % modulus;
-		}
-		factor = (factor * factor) % modulus;
-		power >>= 1n;
-	}
-	return result;
-}
-
-function readRsaPublicKeyFromSequence(reader: DerReader): BrowserRsaKey {
-	const modulusBytes = reader.readInteger();
-	const exponentBytes = reader.readInteger();
-	return {
-		modulus: bytesToBigInt(modulusBytes),
-		exponent: bytesToBigInt(exponentBytes),
-		modulusLength: modulusBytes.byteLength,
-	};
-}
-
-function parseRsaPublicKey(key: unknown): BrowserRsaKey {
-	const der = pemToDerBytes(key);
-	const outer = new DerReader(der).readSequence();
-	outer.skipAny();
-	const publicKey = new DerReader(outer.readBitString()).readSequence();
-	return readRsaPublicKeyFromSequence(publicKey);
-}
-
-function parseRsaPrivateKey(key: unknown): BrowserRsaKey {
-	const der = pemToDerBytes(key);
-	const outer = new DerReader(der).readSequence();
-	outer.skipAny();
-	outer.skipAny();
-	const privateKey = new DerReader(outer.readOctetString()).readSequence();
-	privateKey.skipAny();
-	const modulusBytes = privateKey.readInteger();
-	privateKey.skipAny();
-	const privateExponentBytes = privateKey.readInteger();
-	return {
-		modulus: bytesToBigInt(modulusBytes),
-		exponent: bytesToBigInt(privateExponentBytes),
-		modulusLength: modulusBytes.byteLength,
-	};
-}
-
-function rsaPkcs1DigestInfo(
-	algorithm: unknown,
-	data: unknown,
-): { hashName: BrowserCryptoHashName; encoded: Uint8Array } {
-	const hashName = normalizeSignatureHashName(algorithm);
-	const digest = hashDigestBytes(hashName, data);
-	return {
-		hashName,
-		encoded: concatBytes([
-			hexToBytes(RSA_PKCS1_DIGEST_PREFIXES[hashName]),
-			digest,
-		]),
-	};
-}
-
-function rsaPkcs1EncodeDigestInfo(
-	hashName: BrowserCryptoHashName,
-	digestInfo: Uint8Array,
-	length: number,
-): Uint8Array {
-	const minimumLength = digestInfo.byteLength + 11;
-	if (length < minimumLength) {
-		throw new Error(`RSA key is too small for ${hashName} signature`);
-	}
-	const out = new Uint8Array(length);
-	out[0] = 0;
-	out[1] = 1;
-	out.fill(0xff, 2, length - digestInfo.byteLength - 1);
-	out[length - digestInfo.byteLength - 1] = 0;
-	out.set(digestInfo, length - digestInfo.byteLength);
-	return out;
-}
-
-function browserRsaSign(
-	algorithm: unknown,
-	data: unknown,
-	key: unknown,
-): Uint8Array {
-	const privateKey = parseRsaPrivateKey(key);
-	const { hashName, encoded } = rsaPkcs1DigestInfo(algorithm, data);
-	const padded = rsaPkcs1EncodeDigestInfo(
-		hashName,
-		encoded,
-		privateKey.modulusLength,
-	);
-	const signature = modPow(
-		bytesToBigInt(padded),
-		privateKey.exponent,
-		privateKey.modulus,
-	);
-	return bigIntToBytes(signature, privateKey.modulusLength);
-}
-
-function browserRsaVerify(
-	algorithm: unknown,
-	data: unknown,
-	key: unknown,
-	signatureValue: unknown,
-): boolean {
-	const publicKey = parseRsaPublicKey(key);
-	const signature = toUint8Array(signatureValue);
-	if (signature.byteLength !== publicKey.modulusLength) {
-		return false;
-	}
-	const { hashName, encoded } = rsaPkcs1DigestInfo(algorithm, data);
-	const expected = rsaPkcs1EncodeDigestInfo(
-		hashName,
-		encoded,
-		publicKey.modulusLength,
-	);
-	const actual = bigIntToBytes(
-		modPow(bytesToBigInt(signature), publicKey.exponent, publicKey.modulus),
-		publicKey.modulusLength,
-	);
-	if (actual.byteLength !== expected.byteLength) {
-		return false;
-	}
-	let diff = 0;
-	for (let index = 0; index < expected.byteLength; index++) {
-		diff |= actual[index] ^ expected[index];
-	}
-	return diff === 0;
-}
-
-const BROWSER_RSA_PKCS1_PADDING = 1;
-const BROWSER_RSA_PKCS1_OAEP_PADDING = 4;
-
-type BrowserRsaAsymmetricOptions = {
-	padding?: unknown;
-	oaepHash?: unknown;
-	oaepLabel?: unknown;
-};
-
-function normalizeRsaAsymmetricOptions(
-	value: unknown,
-): BrowserRsaAsymmetricOptions {
-	if (value == null) return {};
-	if (typeof value === "string") {
-		const parsed = JSON.parse(value);
-		return parsed && typeof parsed === "object"
-			? (parsed as BrowserRsaAsymmetricOptions)
-			: {};
-	}
-	return typeof value === "object"
-		? (value as BrowserRsaAsymmetricOptions)
-		: {};
-}
-
-function randomNonZeroBytes(length: number): Uint8Array {
-	const bytes = new Uint8Array(length);
-	const crypto = globalThis.crypto;
-	if (!crypto?.getRandomValues) {
-		throw new Error("Browser runtime crypto requires getRandomValues support");
-	}
-	let offset = 0;
-	while (offset < length) {
-		const candidate = new Uint8Array(length - offset);
-		crypto.getRandomValues(candidate);
-		for (const byte of candidate) {
-			if (byte !== 0) {
-				bytes[offset++] = byte;
-				if (offset === length) break;
-			}
-		}
-	}
-	return bytes;
-}
-
-function xorBytes(left: Uint8Array, right: Uint8Array): Uint8Array {
-	if (left.byteLength !== right.byteLength) {
-		throw new Error("RSA OAEP mask length mismatch");
-	}
-	const out = new Uint8Array(left.byteLength);
-	for (let index = 0; index < out.byteLength; index++) {
-		out[index] = left[index] ^ right[index];
-	}
-	return out;
-}
-
-function mgf1(
-	seed: Uint8Array,
-	length: number,
-	hashName: BrowserCryptoHashName,
-): Uint8Array {
-	const chunks: Uint8Array[] = [];
-	let counter = 0;
-	let remaining = length;
-	while (remaining > 0) {
-		const counterBytes = new Uint8Array([
-			(counter >>> 24) & 0xff,
-			(counter >>> 16) & 0xff,
-			(counter >>> 8) & 0xff,
-			counter & 0xff,
-		]);
-		const digest = hashDigestBytes(hashName, concatBytes([seed, counterBytes]));
-		chunks.push(digest.subarray(0, Math.min(remaining, digest.byteLength)));
-		remaining -= digest.byteLength;
-		counter++;
-	}
-	return concatBytes(chunks).subarray(0, length);
-}
-
-function normalizeOaepHashName(value: unknown): BrowserCryptoHashName {
-	return value == null ? "sha1" : normalizeCryptoHashName(value);
-}
-
-function rsaEncryptPkcs1(key: BrowserRsaKey, data: Uint8Array): Uint8Array {
-	const paddingLength = key.modulusLength - data.byteLength - 3;
-	if (paddingLength < 8) {
-		throw new Error("RSA_PKCS1_PADDING input is too large for key size");
-	}
-	const encoded = concatBytes([
-		new Uint8Array([0, 2]),
-		randomNonZeroBytes(paddingLength),
-		new Uint8Array([0]),
-		data,
-	]);
-	const encrypted = modPow(bytesToBigInt(encoded), key.exponent, key.modulus);
-	return bigIntToBytes(encrypted, key.modulusLength);
-}
-
-function rsaDecryptPkcs1(
-	key: BrowserRsaKey,
-	encrypted: Uint8Array,
-): Uint8Array {
-	if (encrypted.byteLength !== key.modulusLength) {
-		throw new Error("RSA_PKCS1_PADDING encrypted input has invalid length");
-	}
-	const encoded = bigIntToBytes(
-		modPow(bytesToBigInt(encrypted), key.exponent, key.modulus),
-		key.modulusLength,
-	);
-	if (encoded[0] !== 0 || encoded[1] !== 2) {
-		throw new Error("RSA_PKCS1_PADDING block is invalid");
-	}
-	let separator = -1;
-	for (let index = 2; index < encoded.byteLength; index++) {
-		if (encoded[index] === 0) {
-			separator = index;
-			break;
-		}
-	}
-	if (separator < 10) {
-		throw new Error("RSA_PKCS1_PADDING block is invalid");
-	}
-	return encoded.subarray(separator + 1);
-}
-
-function rsaEncryptOaep(
-	key: BrowserRsaKey,
-	data: Uint8Array,
-	options: BrowserRsaAsymmetricOptions,
-): Uint8Array {
-	const hashName = normalizeOaepHashName(options.oaepHash);
-	const label = optionalBytes(options.oaepLabel);
-	const hash = browserCryptoHash(hashName);
-	const hLen = hash.outputLen;
-	const maxMessageLength = key.modulusLength - 2 * hLen - 2;
-	if (data.byteLength > maxMessageLength) {
-		throw new Error("RSA_PKCS1_OAEP_PADDING input is too large for key size");
-	}
-	const lHash = hash(label);
-	const ps = new Uint8Array(maxMessageLength - data.byteLength);
-	const db = concatBytes([lHash, ps, new Uint8Array([1]), data]);
-	const seed = new Uint8Array(hLen);
-	if (!globalThis.crypto?.getRandomValues) {
-		throw new Error("Browser runtime crypto requires getRandomValues support");
-	}
-	globalThis.crypto.getRandomValues(seed);
-	const dbMask = mgf1(seed, key.modulusLength - hLen - 1, hashName);
-	const maskedDb = xorBytes(db, dbMask);
-	const seedMask = mgf1(maskedDb, hLen, hashName);
-	const maskedSeed = xorBytes(seed, seedMask);
-	const encoded = concatBytes([new Uint8Array([0]), maskedSeed, maskedDb]);
-	const encrypted = modPow(bytesToBigInt(encoded), key.exponent, key.modulus);
-	return bigIntToBytes(encrypted, key.modulusLength);
-}
-
-function rsaDecryptOaep(
-	key: BrowserRsaKey,
-	encrypted: Uint8Array,
-	options: BrowserRsaAsymmetricOptions,
-): Uint8Array {
-	if (encrypted.byteLength !== key.modulusLength) {
-		throw new Error(
-			"RSA_PKCS1_OAEP_PADDING encrypted input has invalid length",
-		);
-	}
-	const hashName = normalizeOaepHashName(options.oaepHash);
-	const label = optionalBytes(options.oaepLabel);
-	const hash = browserCryptoHash(hashName);
-	const hLen = hash.outputLen;
-	if (key.modulusLength < 2 * hLen + 2) {
-		throw new Error("RSA key is too small for OAEP");
-	}
-	const encoded = bigIntToBytes(
-		modPow(bytesToBigInt(encrypted), key.exponent, key.modulus),
-		key.modulusLength,
-	);
-	const maskedSeed = encoded.subarray(1, 1 + hLen);
-	const maskedDb = encoded.subarray(1 + hLen);
-	const seedMask = mgf1(maskedDb, hLen, hashName);
-	const seed = xorBytes(maskedSeed, seedMask);
-	const dbMask = mgf1(seed, key.modulusLength - hLen - 1, hashName);
-	const db = xorBytes(maskedDb, dbMask);
-	const lHash = hash(label);
-	let diff = encoded[0];
-	for (let index = 0; index < hLen; index++) {
-		diff |= db[index] ^ lHash[index];
-	}
-	let separator = -1;
-	for (let index = hLen; index < db.byteLength; index++) {
-		if (separator === -1 && db[index] === 1) {
-			separator = index;
-			break;
-		}
-		if (db[index] !== 0) {
-			diff |= db[index];
-		}
-	}
-	if (diff !== 0 || separator === -1) {
-		throw new Error("RSA_PKCS1_OAEP_PADDING block is invalid");
-	}
-	return db.subarray(separator + 1);
-}
-
-function browserRsaAsymmetricOp(
-	operation: unknown,
-	keyValue: unknown,
-	dataValue: unknown,
-	optionsValue?: unknown,
-): Uint8Array {
-	const operationName = String(operation);
-	const options = normalizeRsaAsymmetricOptions(optionsValue);
-	const padding =
-		options.padding == null
-			? BROWSER_RSA_PKCS1_OAEP_PADDING
-			: Number(options.padding);
-	const data = toUint8Array(dataValue);
-	if (operationName === "publicEncrypt") {
-		const publicKey = parseRsaPublicKey(keyValue);
-		if (padding === BROWSER_RSA_PKCS1_PADDING) {
-			return rsaEncryptPkcs1(publicKey, data);
-		}
-		if (padding === BROWSER_RSA_PKCS1_OAEP_PADDING) {
-			return rsaEncryptOaep(publicKey, data, options);
-		}
-	}
-	if (operationName === "privateDecrypt") {
-		const privateKey = parseRsaPrivateKey(keyValue);
-		if (padding === BROWSER_RSA_PKCS1_PADDING) {
-			return rsaDecryptPkcs1(privateKey, data);
-		}
-		if (padding === BROWSER_RSA_PKCS1_OAEP_PADDING) {
-			return rsaDecryptOaep(privateKey, data, options);
-		}
-	}
-	throw new Error(
-		`Unsupported browser RSA asymmetric operation: ${operationName}`,
-	);
-}
-
-function pbkdf2Bytes(
-	password: unknown,
-	salt: unknown,
-	iterations: unknown,
-	keyLength: unknown,
-	algorithm: unknown,
-): Uint8Array {
-	const normalizedIterations = Number(iterations);
-	if (!Number.isInteger(normalizedIterations) || normalizedIterations <= 0) {
-		throw new Error("crypto.pbkdf2 iterations must be greater than zero");
-	}
-	const length = Number(keyLength);
-	if (!Number.isInteger(length) || length < 0) {
-		throw new Error("crypto.pbkdf2 key length must be a non-negative integer");
-	}
-	return noblePbkdf2(
-		browserCryptoHash(algorithm),
-		toUint8Array(password),
-		toUint8Array(salt),
-		{ c: normalizedIterations, dkLen: length },
-	);
-}
-
-type BrowserAesMode = "cbc" | "ctr" | "gcm";
-
-type BrowserCipherivOptions = {
-	authTag?: unknown;
-	autoPadding?: unknown;
-	aad?: unknown;
-};
-
-function normalizeBrowserAesAlgorithm(algorithm: unknown): {
-	mode: BrowserAesMode;
-	keyLength: number;
-} {
-	const normalized = String(algorithm).toLowerCase();
-	const match = /^aes-(128|192|256)-(cbc|ctr|gcm)$/.exec(normalized);
-	if (!match) {
-		throw new Error(`Unsupported browser crypto cipher: ${algorithm}`);
-	}
-	return {
-		keyLength: Number(match[1]) / 8,
-		mode: match[2] as BrowserAesMode,
-	};
-}
-
-function normalizeBrowserCipherivOptions(
-	optionsJson: unknown,
-): BrowserCipherivOptions {
-	if (optionsJson == null) return {};
-	if (typeof optionsJson === "string") {
-		const parsed = JSON.parse(optionsJson);
-		return parsed && typeof parsed === "object"
-			? (parsed as BrowserCipherivOptions)
-			: {};
-	}
-	return typeof optionsJson === "object"
-		? (optionsJson as BrowserCipherivOptions)
-		: {};
-}
-
-function optionalBytes(value: unknown): Uint8Array {
-	return value == null ? new Uint8Array(0) : toUint8Array(value);
-}
-
-function assertAesInputLengths(
-	algorithm: unknown,
-	key: Uint8Array,
-	iv: Uint8Array,
-	mode: BrowserAesMode,
-	keyLength: number,
-): void {
-	if (key.byteLength !== keyLength) {
-		throw new Error(
-			`Invalid key length for ${String(algorithm)}: expected ${keyLength} bytes, got ${key.byteLength}`,
-		);
-	}
-	if ((mode === "cbc" || mode === "ctr") && iv.byteLength !== 16) {
-		throw new Error(
-			`Invalid IV length for ${String(algorithm)}: expected 16 bytes, got ${iv.byteLength}`,
-		);
-	}
-	if (mode === "gcm" && iv.byteLength < 8) {
-		throw new Error(
-			`Invalid IV length for ${String(algorithm)}: expected at least 8 bytes, got ${iv.byteLength}`,
-		);
-	}
-}
-
-function browserCipheriv(
-	algorithm: unknown,
-	keyValue: unknown,
-	ivValue: unknown,
-	dataValue: unknown,
-	optionsJson?: unknown,
-): Uint8Array {
-	const { mode, keyLength } = normalizeBrowserAesAlgorithm(algorithm);
-	const key = toUint8Array(keyValue);
-	const iv = toUint8Array(ivValue);
-	const data = toUint8Array(dataValue);
-	const options = normalizeBrowserCipherivOptions(optionsJson);
-	assertAesInputLengths(algorithm, key, iv, mode, keyLength);
-	if (mode === "cbc") {
-		return nobleAesCbc(key, iv, {
-			disablePadding: options.autoPadding === false,
-		}).encrypt(data);
-	}
-	if (mode === "ctr") {
-		return nobleAesCtr(key, iv).encrypt(data);
-	}
-	const encrypted = nobleAesGcm(key, iv, optionalBytes(options.aad)).encrypt(
-		data,
-	);
-	const tagLength = nobleAesGcm.tagLength;
-	const ciphertextLength = encrypted.byteLength - tagLength;
-	const out = new Uint8Array(encrypted.byteLength);
-	out.set(encrypted.subarray(0, ciphertextLength), 0);
-	out.set(encrypted.subarray(ciphertextLength), ciphertextLength);
-	return out;
-}
-
-function browserDecipheriv(
-	algorithm: unknown,
-	keyValue: unknown,
-	ivValue: unknown,
-	dataValue: unknown,
-	optionsJson?: unknown,
-): Uint8Array {
-	const { mode, keyLength } = normalizeBrowserAesAlgorithm(algorithm);
-	const key = toUint8Array(keyValue);
-	const iv = toUint8Array(ivValue);
-	const data = toUint8Array(dataValue);
-	const options = normalizeBrowserCipherivOptions(optionsJson);
-	assertAesInputLengths(algorithm, key, iv, mode, keyLength);
-	if (mode === "cbc") {
-		return nobleAesCbc(key, iv, {
-			disablePadding: options.autoPadding === false,
-		}).decrypt(data);
-	}
-	if (mode === "ctr") {
-		return nobleAesCtr(key, iv).decrypt(data);
-	}
-	const authTag = optionalBytes(options.authTag);
-	if (authTag.byteLength === 0) {
-		throw new Error(`Missing auth tag for ${String(algorithm)} decipher`);
-	}
-	const combined = new Uint8Array(data.byteLength + authTag.byteLength);
-	combined.set(data, 0);
-	combined.set(authTag, data.byteLength);
-	return nobleAesGcm(key, iv, optionalBytes(options.aad)).decrypt(combined);
-}
-
-function unsupportedBrowserCrypto(operation: string): never {
-	const error = new Error(
-		`ERR_UNSUPPORTED_BROWSER_CRYPTO: node:crypto ${operation} is not implemented in the browser runtime yet`,
-	);
-	(error as { code?: string }).code = "ERR_UNSUPPORTED_BROWSER_CRYPTO";
-	throw error;
-}
-
-function boundErrorMessage(message: string): string {
-	if (message.length <= MAX_ERROR_MESSAGE_CHARS) {
-		return message;
-	}
-	return `${message.slice(0, MAX_ERROR_MESSAGE_CHARS)}...[Truncated]`;
-}
-
-function boundStdioMessage(message: string): string {
-	if (message.length <= MAX_STDIO_MESSAGE_CHARS) {
-		return message;
-	}
-	return `${message.slice(0, MAX_STDIO_MESSAGE_CHARS)}...[Truncated]`;
-}
-
-/**
- * Wrap a sync function in the bridge calling convention (`applySync`) so
- * bridge code can call it the same way it calls bridge References.
- */
-function makeApplySync<TArgs extends unknown[], TResult>(
-	fn: (...args: TArgs) => TResult,
-) {
-	const applySync = (_ctx: undefined, args: TArgs): TResult => fn(...args);
-	return {
-		applySync,
-		applySyncPromise: applySync,
-	};
-}
-
-function makeApplySyncPromise<TArgs extends unknown[], TResult>(
-	fn: (...args: TArgs) => Promise<TResult>,
-) {
-	return {
-		applySyncPromise(_ctx: undefined, args: TArgs): Promise<TResult> {
-			return fn(...args);
-		},
-	};
-}
-
-function makeApplyPromise<TArgs extends unknown[], TResult>(
-	fn: (...args: TArgs) => Promise<TResult>,
-) {
-	return {
-		apply(_ctx: undefined, args: TArgs): Promise<TResult> {
-			return fn(...args);
-		},
-	};
-}
-
-function normalizeTextEncoding(options?: unknown): BufferEncoding | null {
-	if (typeof options === "string") {
-		return options as BufferEncoding;
-	}
-
-	if (options && typeof options === "object" && "encoding" in options) {
-		const encoding = (options as { encoding?: unknown }).encoding;
-		return typeof encoding === "string" ? (encoding as BufferEncoding) : null;
-	}
-
-	return null;
-}
-
-function toNodeBuffer(bytes: Uint8Array): Uint8Array | Buffer {
-	if (typeof Buffer === "function") {
-		return Buffer.from(bytes);
-	}
-	return bytes;
-}
-
-function createStats(stat: VirtualStat) {
-	return {
-		...stat,
-		isFile: () => !stat.isDirectory && !stat.isSymbolicLink,
-		isDirectory: () => stat.isDirectory,
-		isSymbolicLink: () => stat.isSymbolicLink,
-	};
-}
-
-function createDirent(entry: VirtualDirEntry) {
-	return {
-		name: entry.name,
-		isFile: () => !entry.isDirectory && !entry.isSymbolicLink,
-		isDirectory: () => entry.isDirectory,
-		isSymbolicLink: () => Boolean(entry.isSymbolicLink),
-	};
-}
-
-function createFsModule(syncBridge: ReturnType<typeof createSyncBridgeClient>) {
-	// fd-based fs ops for kernel-backed callers (the shared WASI preview1 runner
-	// opens files and reads/writes by descriptor). The browser kernel/wire only
-	// exposes path-based ops plus positional `pread`, so descriptors are a JS-side
-	// handle table over those permission-checked kernel ops: reads map to `pread`,
-	// writes to a read-modify-write of the whole file via `write_file`. The caller
-	// (the runner) tracks the per-fd offset and passes an explicit position, so the
-	// table itself only needs the path. Enforcement stays in the kernel (every
-	// pread / read_file / write_file is permission-checked = S3).
-	const openFileTable = new Map<number, { path: string; flags: number }>();
-	let nextOpenFd = 1000;
-	const makeFsError = (code: string, syscall: string, path: string) => {
-		const error = new Error(`${code}: ${syscall} '${path}'`);
-		(error as { code?: string }).code = code;
-		const errno = posixErrno(code);
-		if (errno !== undefined) {
-			(error as { errno?: number }).errno = errno;
-		}
-		(error as { syscall?: string }).syscall = syscall;
-		return error;
-	};
-	const requireOpenFd = (fd: unknown, syscall: string) => {
-		const entry = openFileTable.get(Number(fd));
-		if (!entry) {
-			throw makeFsError("EBADF", syscall, String(fd));
-		}
-		return entry;
-	};
-	const O_RDONLY = 0;
-	const O_WRONLY = 1;
-	const O_RDWR = 2;
-	const O_CREAT = 64;
-	const O_EXCL = 128;
-	const O_TRUNC = 512;
-	const O_APPEND = 1024;
-	// Node's string open-flag vocabulary -> POSIX flag bits. The browser fd-table
-	// otherwise treated any string mode as O_RDONLY (`'w'`/`'a'`/`'r+'` silently
-	// became read-only: no create, no truncate, no append), diverging hard from
-	// native `fs.openSync`. Sync variants (`'rs'`, `'as'`) map to their non-sync
-	// bits since the in-memory VFS has nothing to bypass-cache.
-	const STRING_OPEN_FLAGS: Record<string, number> = {
-		r: O_RDONLY,
-		rs: O_RDONLY,
-		sr: O_RDONLY,
-		"r+": O_RDWR,
-		"rs+": O_RDWR,
-		"sr+": O_RDWR,
-		w: O_WRONLY | O_CREAT | O_TRUNC,
-		wx: O_WRONLY | O_CREAT | O_TRUNC | O_EXCL,
-		xw: O_WRONLY | O_CREAT | O_TRUNC | O_EXCL,
-		"w+": O_RDWR | O_CREAT | O_TRUNC,
-		"wx+": O_RDWR | O_CREAT | O_TRUNC | O_EXCL,
-		"xw+": O_RDWR | O_CREAT | O_TRUNC | O_EXCL,
-		a: O_WRONLY | O_CREAT | O_APPEND,
-		ax: O_WRONLY | O_CREAT | O_APPEND | O_EXCL,
-		xa: O_WRONLY | O_CREAT | O_APPEND | O_EXCL,
-		as: O_WRONLY | O_CREAT | O_APPEND,
-		sa: O_WRONLY | O_CREAT | O_APPEND,
-		"a+": O_RDWR | O_CREAT | O_APPEND,
-		"ax+": O_RDWR | O_CREAT | O_APPEND | O_EXCL,
-		"xa+": O_RDWR | O_CREAT | O_APPEND | O_EXCL,
-		"as+": O_RDWR | O_CREAT | O_APPEND,
-		"sa+": O_RDWR | O_CREAT | O_APPEND,
-	};
-	const normalizeOpenFlags = (flags: number | string): number => {
-		if (typeof flags === "number") {
-			return flags;
-		}
-		const mapped = STRING_OPEN_FLAGS[flags];
-		if (mapped === undefined) {
-			const error = new Error(`Unknown file open flag: ${flags}`);
-			(error as { code?: string }).code = "ERR_INVALID_ARG_VALUE";
-			throw error;
-		}
-		return mapped;
-	};
-	const preadBinary = (path: string, offset: number, length: number) => {
-		if (length <= 0) {
-			return new Uint8Array(0);
-		}
-		return toUint8Array(
-			syncBridge.requestBinary("fs.pread", [path, offset, length]),
-		);
-	};
-
-	const readFileSync = (path: string, options?: unknown) => {
-		const encoding = normalizeTextEncoding(options);
-		if (encoding) {
-			return syncBridge.requestText("fs.readFile", [path]);
-		}
-		return toNodeBuffer(syncBridge.requestBinary("fs.readFileBinary", [path]));
-	};
-
-	const writeFileSync = (path: string, content: unknown) => {
-		if (typeof content === "string") {
-			syncBridge.requestVoid("fs.writeFile", [path, content]);
-			return;
-		}
-
-		syncBridge.requestVoid("fs.writeFileBinary", [path, toUint8Array(content)]);
-	};
-
-	const mkdirSync = (
-		path: string,
-		options?: { recursive?: boolean } | boolean,
-	) => {
-		const recursive =
-			typeof options === "boolean" ? options : (options?.recursive ?? true);
-		if (recursive) {
-			syncBridge.requestVoid("fs.mkdir", [path]);
-			return;
-		}
-		syncBridge.requestVoid("fs.createDir", [path]);
-	};
-
-	const readdirSync = (path: string, options?: { withFileTypes?: boolean }) => {
-		const entries = syncBridge.requestJson<VirtualDirEntry[]>("fs.readDir", [
-			path,
-		]);
-		if (options?.withFileTypes) {
-			return entries.map((entry) => createDirent(entry));
-		}
-		return entries.map((entry) => entry.name);
-	};
-
-	const statSync = (path: string) =>
-		createStats(syncBridge.requestJson<VirtualStat>("fs.stat", [path]));
-	const lstatSync = (path: string) =>
-		createStats(syncBridge.requestJson<VirtualStat>("fs.lstat", [path]));
-
-	const promises = {
-		readFile(path: string, options?: unknown) {
-			return Promise.resolve(readFileSync(path, options));
-		},
-		writeFile(path: string, content: unknown) {
-			writeFileSync(path, content);
-			return Promise.resolve();
-		},
-		mkdir(path: string, options?: { recursive?: boolean } | boolean) {
-			mkdirSync(path, options);
-			return Promise.resolve();
-		},
-		readdir(path: string, options?: { withFileTypes?: boolean }) {
-			return Promise.resolve(readdirSync(path, options));
-		},
-		stat(path: string) {
-			return Promise.resolve(statSync(path));
-		},
-		lstat(path: string) {
-			return Promise.resolve(lstatSync(path));
-		},
-		unlink(path: string) {
-			syncBridge.requestVoid("fs.unlink", [path]);
-			return Promise.resolve();
-		},
-		rmdir(path: string) {
-			syncBridge.requestVoid("fs.rmdir", [path]);
-			return Promise.resolve();
-		},
-		rm(path: string) {
-			syncBridge.requestVoid("fs.unlink", [path]);
-			return Promise.resolve();
-		},
-		rename(oldPath: string, newPath: string) {
-			syncBridge.requestVoid("fs.rename", [oldPath, newPath]);
-			return Promise.resolve();
-		},
-		realpath(path: string) {
-			return Promise.resolve(syncBridge.requestText("fs.realpath", [path]));
-		},
-		readlink(path: string) {
-			return Promise.resolve(syncBridge.requestText("fs.readlink", [path]));
-		},
-		symlink(target: string, path: string) {
-			syncBridge.requestVoid("fs.symlink", [target, path]);
-			return Promise.resolve();
-		},
-		link(existingPath: string, newPath: string) {
-			syncBridge.requestVoid("fs.link", [existingPath, newPath]);
-			return Promise.resolve();
-		},
-		chmod(path: string, mode: number) {
-			syncBridge.requestVoid("fs.chmod", [path, mode]);
-			return Promise.resolve();
-		},
-		truncate(path: string, length = 0) {
-			syncBridge.requestVoid("fs.truncate", [path, length]);
-			return Promise.resolve();
-		},
-	};
-
-	return {
-		readFileSync,
-		writeFileSync,
-		mkdirSync,
-		readdirSync,
-		existsSync(path: string) {
-			return syncBridge.requestJson<boolean>("fs.exists", [path]);
-		},
-		statSync,
-		lstatSync,
-		unlinkSync(path: string) {
-			syncBridge.requestVoid("fs.unlink", [path]);
-		},
-		rmdirSync(path: string) {
-			syncBridge.requestVoid("fs.rmdir", [path]);
-		},
-		rmSync(path: string) {
-			syncBridge.requestVoid("fs.unlink", [path]);
-		},
-		renameSync(oldPath: string, newPath: string) {
-			syncBridge.requestVoid("fs.rename", [oldPath, newPath]);
-		},
-		realpathSync(path: string) {
-			return syncBridge.requestText("fs.realpath", [path]);
-		},
-		readlinkSync(path: string) {
-			return syncBridge.requestText("fs.readlink", [path]);
-		},
-		symlinkSync(target: string, path: string) {
-			syncBridge.requestVoid("fs.symlink", [target, path]);
-		},
-		linkSync(existingPath: string, newPath: string) {
-			syncBridge.requestVoid("fs.link", [existingPath, newPath]);
-		},
-		chmodSync(path: string, mode: number) {
-			syncBridge.requestVoid("fs.chmod", [path, mode]);
-		},
-		truncateSync(path: string, length = 0) {
-			syncBridge.requestVoid("fs.truncate", [path, length]);
-		},
-		constants: {
-			O_RDONLY: 0,
-			O_WRONLY: 1,
-			O_RDWR: 2,
-			O_CREAT: 64,
-			O_EXCL: 128,
-			O_TRUNC: 512,
-			O_APPEND: 1024,
-			O_DIRECTORY: 65536,
-		},
-		openSync(path: string, flags: number | string = 0) {
-			const f = normalizeOpenFlags(flags);
-			if ((f & O_CREAT) !== 0) {
-				const exists = syncBridge.requestJson<boolean>("fs.exists", [path]);
-				if (exists && (f & O_EXCL) !== 0) {
-					throw makeFsError("EEXIST", "open", path);
-				}
-				if (!exists) {
-					syncBridge.requestVoid("fs.writeFile", [path, ""]);
-				}
-			}
-			if ((f & O_TRUNC) !== 0) {
-				syncBridge.requestVoid("fs.truncate", [path, 0]);
-			}
-			// Linux checks read permission at open time, but the kernel/wire only
-			// enforces it on the actual read (pread). For a read-capable open (not
-			// write-only, not freshly created/truncated empty), probe one byte so a
-			// denied read surfaces as EACCES at open, matching open(O_RDONLY)
-			// semantics. The probe is positional (no fd offset effect).
-			const accmode = f & 3;
-			const readCapable = accmode === 0 || accmode === 2;
-			if (readCapable && (f & (O_CREAT | O_TRUNC)) === 0) {
-				try {
-					preadBinary(path, 0, 1);
-				} catch (error) {
-					// Only a permission denial should fail the open; other probe
-					// errors (e.g. EISDIR on a directory open) are left for the real
-					// open/read path to surface.
-					const code = (error as { code?: string })?.code;
-					if (code === "EACCES" || code === "EPERM") {
-						throw error;
-					}
-				}
-			}
-			const fd = nextOpenFd++;
-			openFileTable.set(fd, { path, flags: f });
-			return fd;
-		},
-		readSync(
-			fd: number,
-			buffer: Uint8Array,
-			offset = 0,
-			length?: number,
-			position?: number | null,
-		) {
-			const entry = requireOpenFd(fd, "read");
-			const len = typeof length === "number" ? length : buffer.length - offset;
-			const pos = typeof position === "number" && position >= 0 ? position : 0;
-			const data = preadBinary(entry.path, pos, len);
-			const n = Math.min(data.length, len);
-			for (let i = 0; i < n; i += 1) {
-				buffer[offset + i] = data[i];
-			}
-			return n;
-		},
-		writeSync(
-			fd: number,
-			buffer: Uint8Array,
-			offset = 0,
-			length?: number,
-			position?: number | null,
-		) {
-			const entry = requireOpenFd(fd, "write");
-			const src = toUint8Array(buffer);
-			const len = typeof length === "number" ? length : src.length - offset;
-			const chunk = src.subarray(offset, offset + len);
-			// Resolve the write position. POSIX O_APPEND atomically writes at the
-			// current end of file regardless of any tracked offset, so honor it
-			// when the caller did not pin an explicit position (the WASI runner
-			// always passes one and tracks its own offset, so it is unaffected).
-			let pos: number;
-			if (typeof position === "number" && position >= 0) {
-				pos = position;
-			} else if ((entry.flags & O_APPEND) !== 0) {
-				pos = statSync(entry.path).size;
-			} else {
-				pos = 0;
-			}
-			// Positional write straight through the kernel: a single permission-
-			// checked, atomic `pwrite` that grows and zero-fills as needed. The
-			// previous client-side read-modify-write silently discarded the whole
-			// file whenever the readback failed (permission/read-cap/IO) and was
-			// O(filesize) and non-atomic across concurrent fds.
-			syncBridge.requestVoid("fs.pwrite", [entry.path, pos, chunk]);
-			return len;
-		},
-		closeSync(fd: number) {
-			openFileTable.delete(Number(fd));
-		},
-		fstatSync(fd: number) {
-			return statSync(requireOpenFd(fd, "fstat").path);
-		},
-		ftruncateSync(fd: number, length = 0) {
-			syncBridge.requestVoid("fs.truncate", [
-				requireOpenFd(fd, "ftruncate").path,
-				Number(length) || 0,
-			]);
-		},
-		fsyncSync() {},
-		fdatasyncSync() {},
-		promises,
-	};
-}
-
-// Save real postMessage before sandbox code can replace it
-const _realPostMessage = self.postMessage.bind(self);
-
-function postResponse(
-	message:
-		| {
-				type: "response";
-				id: number;
-				ok: true;
-				result: ExecResult | RunResult | true;
-		  }
-		| {
-				type: "response";
-				id: number;
-				ok: false;
-				error: { message: string; stack?: string; code?: string };
-		  },
-): void {
-	_realPostMessage({
-		controlToken: getRequiredControlToken(),
-		...message,
-	} satisfies BrowserWorkerOutboundMessage);
-}
-
-function postAsyncResponse<T extends ExecResult | RunResult>(
-	id: number,
-	promise: Promise<T>,
-): void {
-	void promise.then(
-		(result) => {
-			postResponse({ type: "response", id, ok: true, result });
-		},
-		(err) => {
-			const error = err as { message?: string; stack?: string; code?: string };
-			postResponse({
-				type: "response",
-				id,
-				ok: false,
-				error: {
-					message: error?.message ?? String(err),
-					stack: error?.stack,
-					code: error?.code,
-				},
-			});
-		},
-	);
-}
-
-function postSyncRequest(message: {
-	type: "sync-request";
-	requestId: number;
-	executionId: string;
-	processRequestId: number;
-	operation: BrowserWorkerSyncOperation;
-	args: unknown[];
-}): void {
-	_realPostMessage({
-		controlToken: getRequiredControlToken(),
-		...message,
-	} satisfies BrowserWorkerOutboundMessage);
-}
-
-function postStdio(
-	executionId: string,
-	requestId: number,
-	channel: StdioChannel,
-	message: string,
-): void {
-	const payload: BrowserWorkerOutboundMessage = {
-		controlToken: getRequiredControlToken(),
-		type: "stdio",
-		executionId,
-		requestId,
-		channel,
-		message,
-	};
-	_realPostMessage(payload);
-}
-
-function postPtyOpened(
-	executionId: string,
-	requestId: number,
-	pty: {
-		masterFd: number;
-		slaveFd: number;
-		path?: string;
-		columns: number;
-		rows: number;
-	},
-): void {
-	const payload: BrowserWorkerOutboundMessage = {
-		controlToken: getRequiredControlToken(),
-		type: "pty-opened",
-		executionId,
-		requestId,
-		...pty,
-	};
-	_realPostMessage(payload);
-}
-
-function emitStdio(
-	executionId: string,
-	requestId: number,
-	channel: StdioChannel,
-	message: string,
-): void {
-	postStdio(executionId, requestId, channel, boundStdioMessage(message));
-}
-
-function emitActiveStdio(channel: StdioChannel, args: unknown[]): void {
-	if (
-		!activeCaptureStdio ||
-		activeProcessRequestId === null ||
-		activeExecutionId === null
-	) {
-		return;
-	}
-	const message = args.map((arg) => normalizeProcessOutputChunk(arg)).join(" ");
-	emitStdio(activeExecutionId, activeProcessRequestId, channel, message);
-}
-
-function createSyncBridgeClient(payload: BrowserSyncBridgePayload) {
-	const signal = new Int32Array(payload.signalBuffer);
-	const data = new Uint8Array(payload.dataBuffer);
-	let nextRequestId = 1;
-	const timeoutMs = payload.timeoutMs ?? 30_000;
-
-	function readBytes(length: number): Uint8Array {
-		if (length <= 0) {
-			return new Uint8Array(0);
-		}
-		return data.slice(0, length);
-	}
-
-	function requestRaw(
-		operation: BrowserWorkerSyncOperation,
-		args: unknown[],
-	): {
-		kind: number;
-		bytes: Uint8Array;
-	} {
-		if (!activeExecutionId || activeProcessRequestId === null) {
-			throw new Error(
-				`Browser runtime sync bridge ${operation} called outside an active execution`,
-			);
-		}
-		Atomics.store(
-			signal,
-			SYNC_BRIDGE_SIGNAL_STATE_INDEX,
-			SYNC_BRIDGE_SIGNAL_STATE_IDLE,
-		);
-		Atomics.store(signal, SYNC_BRIDGE_SIGNAL_STATUS_INDEX, 0);
-		Atomics.store(signal, SYNC_BRIDGE_SIGNAL_KIND_INDEX, SYNC_BRIDGE_KIND_NONE);
-		Atomics.store(signal, SYNC_BRIDGE_SIGNAL_LENGTH_INDEX, 0);
-
-		postSyncRequest({
-			type: "sync-request",
-			requestId: nextRequestId++,
-			executionId: activeExecutionId,
-			processRequestId: activeProcessRequestId,
-			operation,
-			args,
-		});
-
-		while (true) {
-			const result = Atomics.wait(
-				signal,
-				SYNC_BRIDGE_SIGNAL_STATE_INDEX,
-				SYNC_BRIDGE_SIGNAL_STATE_IDLE,
-				timeoutMs,
-			);
-			if (result !== "timed-out") {
-				break;
-			}
-			throw new Error(
-				`Browser runtime sync bridge timed out while handling ${operation}`,
-			);
-		}
-
-		const status = Atomics.load(signal, SYNC_BRIDGE_SIGNAL_STATUS_INDEX);
-		const kind = Atomics.load(signal, SYNC_BRIDGE_SIGNAL_KIND_INDEX);
-		const length = Atomics.load(signal, SYNC_BRIDGE_SIGNAL_LENGTH_INDEX);
-		const bytes = readBytes(length);
-		Atomics.store(
-			signal,
-			SYNC_BRIDGE_SIGNAL_STATE_INDEX,
-			SYNC_BRIDGE_SIGNAL_STATE_IDLE,
-		);
-
-		if (status === SYNC_BRIDGE_STATUS_ERROR) {
-			const errorPayload = JSON.parse(
-				decoder.decode(bytes),
-			) as BrowserSyncBridgeErrorPayload;
-			const error = new Error(errorPayload.message);
-			if (errorPayload.code) {
-				(error as { code?: string }).code = errorPayload.code;
-				const errno = posixErrno(errorPayload.code);
-				if (errno !== undefined) {
-					(error as { errno?: number }).errno = errno;
-				}
-			}
-			throw error;
-		}
-
-		return { kind, bytes };
-	}
-
-	return {
-		requestVoid(operation: BrowserWorkerSyncOperation, args: unknown[]) {
-			requestRaw(operation, args);
-		},
-		requestText(operation: BrowserWorkerSyncOperation, args: unknown[]) {
-			const result = requestRaw(operation, args);
-			if (result.kind !== SYNC_BRIDGE_KIND_TEXT) {
-				throw new Error(
-					`Expected text response from ${operation}, received kind ${result.kind}`,
-				);
-			}
-			return decoder.decode(result.bytes);
-		},
-		requestNullableText(
-			operation: BrowserWorkerSyncOperation,
-			args: unknown[],
-		) {
-			const result = requestRaw(operation, args);
-			if (result.kind === SYNC_BRIDGE_KIND_NONE) {
-				return null;
-			}
-			if (result.kind !== SYNC_BRIDGE_KIND_TEXT) {
-				throw new Error(
-					`Expected text response from ${operation}, received kind ${result.kind}`,
-				);
-			}
-			return decoder.decode(result.bytes);
-		},
-		requestBinary(operation: BrowserWorkerSyncOperation, args: unknown[]) {
-			const result = requestRaw(operation, args);
-			if (result.kind !== SYNC_BRIDGE_KIND_BINARY) {
-				throw new Error(
-					`Expected binary response from ${operation}, received kind ${result.kind}`,
-				);
-			}
-			return result.bytes;
-		},
-		requestJson<T>(operation: BrowserWorkerSyncOperation, args: unknown[]) {
-			const result = requestRaw(operation, args);
-			if (result.kind !== SYNC_BRIDGE_KIND_JSON) {
-				throw new Error(
-					`Expected JSON response from ${operation}, received kind ${result.kind}`,
-				);
-			}
-			return JSON.parse(decoder.decode(result.bytes)) as T;
-		},
-	};
-}
-
-/**
- * Initialize the worker-side runtime: set up filesystem, network, bridge
- * globals, and load the bridge bundle. Called once before any exec/run.
- */
-async function initRuntime(payload: BrowserWorkerInitPayload): Promise<void> {
-	if (initialized) return;
-	assertBrowserSyncBridgeSupport();
-	captureTimingGlobals();
-	if (!payload.syncBridge) {
-		throw new Error(
-			"Browser runtime sync bridge is required for filesystem and module loading parity",
-		);
-	}
-
-	const syncBridge = createSyncBridgeClient(payload.syncBridge);
-	activeSyncBridge = syncBridge;
-
-	// Apply payload limits (use defaults if not configured)
-	base64TransferLimitBytes =
-		payload.payloadLimits?.base64TransferBytes ?? DEFAULT_BASE64_TRANSFER_BYTES;
-	jsonPayloadLimitBytes =
-		payload.payloadLimits?.jsonPayloadBytes ?? DEFAULT_JSON_PAYLOAD_BYTES;
-
-	// Permission policy is enforced solely by the kernel (the trusted sidecar);
-	// the guest worker never re-checks it. Net egress for kernel-routed traffic
-	// is gated in the kernel socket table; this adapter is the host-network path
-	// only present when the embedder injects one.
-	if (payload.networkEnabled) {
-		networkAdapter = createBrowserNetworkAdapter();
-	} else {
-		networkAdapter = createNetworkStub();
-	}
-
-	const processConfig = payload.processConfig ?? {};
-	runtimeProcessConfig = processConfig as Record<string, unknown>;
-	runtimeTimingMitigation =
-		payload.timingMitigation ??
-		processConfig.timingMitigation ??
-		runtimeTimingMitigation;
-	// env is filtered by the trusted driver before it reaches the worker.
-	processConfig.timingMitigation = runtimeTimingMitigation;
-	delete processConfig.frozenTimeMs;
-	exposeCustomGlobal("_processConfig", processConfig);
-	const osConfig = payload.osConfig ?? {};
-	exposeCustomGlobal("_osConfig", osConfig);
-	exposeCustomGlobal("__agentOSVirtualOs", osConfig);
-
-	exposeCustomGlobal(
-		"_log",
-		makeApplySync((...args: unknown[]) => {
-			emitActiveStdio("stdout", args);
-		}),
-	);
-	exposeCustomGlobal(
-		"_error",
-		makeApplySync((...args: unknown[]) => {
-			emitActiveStdio("stderr", args);
-		}),
-	);
-
-	// Set up filesystem bridge globals before loading runtime shims.
-	const readFileRef = makeApplySync((path: string) => {
-		const text = syncBridge.requestText("fs.readFile", [path]);
-		assertTextPayloadSize(`fs.readFile ${path}`, text, jsonPayloadLimitBytes);
-		return text;
-	});
-	const writeFileRef = makeApplySync((path: string, content: string) => {
-		assertTextPayloadSize(
-			`fs.writeFile ${path}`,
-			content,
-			jsonPayloadLimitBytes,
-		);
-		syncBridge.requestVoid("fs.writeFile", [path, content]);
-	});
-	const readFileBinaryRef = makeApplySync((path: string) => {
-		const data = syncBridge.requestBinary("fs.readFileBinary", [path]);
-		assertPayloadByteLength(
-			`fs.readFileBinary ${path}`,
-			data.byteLength,
-			base64TransferLimitBytes,
-		);
-		return data;
-	});
-	const writeFileBinaryRef = makeApplySync(
-		(path: string, binaryContent: Uint8Array) => {
-			assertPayloadByteLength(
-				`fs.writeFileBinary ${path}`,
-				binaryContent.byteLength,
-				base64TransferLimitBytes,
-			);
-			syncBridge.requestVoid("fs.writeFileBinary", [path, binaryContent]);
-		},
-	);
-	const readDirRef = makeApplySync((path: string) => {
-		const json = JSON.stringify(
-			syncBridge.requestJson<VirtualDirEntry[]>("fs.readDir", [path]),
-		);
-		assertTextPayloadSize(`fs.readDir ${path}`, json, jsonPayloadLimitBytes);
-		return json;
-	});
-	const mkdirRef = makeApplySync((path: string) => {
-		syncBridge.requestVoid("fs.mkdir", [path]);
-	});
-	const rmdirRef = makeApplySync((path: string) => {
-		syncBridge.requestVoid("fs.rmdir", [path]);
-	});
-	const existsRef = makeApplySync((path: string) => {
-		return syncBridge.requestJson<boolean>("fs.exists", [path]);
-	});
-	const statRef = makeApplySync((path: string) => {
-		return JSON.stringify(
-			syncBridge.requestJson<VirtualStat>("fs.stat", [path]),
-		);
-	});
-	const unlinkRef = makeApplySync((path: string) => {
-		syncBridge.requestVoid("fs.unlink", [path]);
-	});
-	const renameRef = makeApplySync((oldPath: string, newPath: string) => {
-		syncBridge.requestVoid("fs.rename", [oldPath, newPath]);
-	});
-
-	exposeCustomGlobal("_fs", {
-		readFile: readFileRef,
-		writeFile: writeFileRef,
-		readFileBinary: readFileBinaryRef,
-		writeFileBinary: writeFileBinaryRef,
-		readDir: readDirRef,
-		mkdir: mkdirRef,
-		rmdir: rmdirRef,
-		exists: existsRef,
-		stat: statRef,
-		unlink: unlinkRef,
-		rename: renameRef,
-	});
-
-	exposeCustomGlobal(
-		"_loadPolyfill",
-		makeApplySync((moduleName: string) => {
-			const name = moduleName.replace(/^node:/, "");
-			const polyfillMap = POLYFILL_CODE_MAP as Record<string, string>;
-			return polyfillMap[name] ?? null;
-		}),
-	);
-
-	const resolveModuleSync = (
-		request: string,
-		fromDir: string,
-		mode?: "require" | "import",
-	) => {
-		return syncBridge.requestNullableText("module.resolve", [
-			request,
-			fromDir,
-			mode ?? "require",
-		]);
-	};
-	const loadFileSync = (path: string, _mode?: "require" | "import") => {
-		const source = syncBridge.requestNullableText("module.loadFile", [path]);
-		if (source === null) {
-			return null;
-		}
-		let code = source;
-		if (isESM(source, path)) {
-			code = transform(code, { transforms: ["imports"] }).code;
-		}
-		return transformDynamicImport(code);
-	};
-	const moduleFormatSync = (path: string) => {
-		return syncBridge.requestNullableText("module.format", [path]);
-	};
-	const batchResolveModulesSync = (requests: Array<[string, string]>) => {
-		return syncBridge.requestJson("module.batchResolve", [requests]);
-	};
-
-	exposeCustomGlobal("_resolveModuleSync", makeApplySync(resolveModuleSync));
-	exposeCustomGlobal("_loadFileSync", makeApplySync(loadFileSync));
-	exposeCustomGlobal("_resolveModule", makeApplySync(resolveModuleSync));
-	exposeCustomGlobal("_loadFile", makeApplySync(loadFileSync));
-	exposeCustomGlobal("_moduleFormat", makeApplySync(moduleFormatSync));
-	exposeCustomGlobal(
-		"_batchResolveModules",
-		makeApplySync(batchResolveModulesSync),
-	);
-
-	const randomBytes = (length: number): Uint8Array => {
-		if (!Number.isInteger(length) || length < 0) {
-			throw new Error(
-				"crypto random byte length must be a non-negative integer",
-			);
-		}
-		const bytes = new Uint8Array(length);
-		const crypto = globalThis.crypto;
-		if (!crypto?.getRandomValues) {
-			throw new Error(
-				"Browser runtime crypto requires getRandomValues support",
-			);
-		}
-		for (let offset = 0; offset < bytes.length; offset += 65536) {
-			crypto.getRandomValues(bytes.subarray(offset, offset + 65536));
-		}
-		return bytes;
-	};
-	exposeCustomGlobal(
-		"_cryptoRandomFill",
-		makeApplySync((length: number) => randomBytes(Number(length))),
-	);
-	exposeCustomGlobal(
-		"_cryptoRandomUUID",
-		makeApplySync(() => {
-			if (typeof globalThis.crypto?.randomUUID !== "function") {
-				throw new Error("Browser runtime crypto requires randomUUID support");
-			}
-			return globalThis.crypto.randomUUID();
-		}),
-	);
-	exposeCustomGlobal(
-		"_cryptoHashDigest",
-		makeApplySync((algorithm: string, data: Uint8Array) => {
-			return hashDigestBytes(algorithm, data);
-		}),
-	);
-	exposeCustomGlobal(
-		"_cryptoHmacDigest",
-		makeApplySync((algorithm: string, key: Uint8Array, data: Uint8Array) => {
-			return hmacDigestBytes(algorithm, key, data);
-		}),
-	);
-	exposeCustomGlobal(
-		"_cryptoPbkdf2",
-		makeApplySync(
-			(
-				password: Uint8Array,
-				salt: Uint8Array,
-				iterations: number,
-				keyLength: number,
-				algorithm: string,
-			) => {
-				return pbkdf2Bytes(password, salt, iterations, keyLength, algorithm);
-			},
-		),
-	);
-	exposeCustomGlobal(
-		"_cryptoScrypt",
-		makeApplySync(
-			(
-				password: Uint8Array,
-				salt: Uint8Array,
-				keyLength: number,
-				options: unknown,
-			) => {
-				return nobleScrypt(
-					toUint8Array(password),
-					toUint8Array(salt),
-					normalizeScryptOptions(options, keyLength),
-				);
-			},
-		),
-	);
-	exposeCustomGlobal(
-		"_cryptoCipheriv",
-		makeApplySync(
-			(
-				algorithm: string,
-				key: Uint8Array,
-				iv: Uint8Array,
-				data: Uint8Array,
-				optionsJson?: string,
-			) => browserCipheriv(algorithm, key, iv, data, optionsJson),
-		),
-	);
-	exposeCustomGlobal(
-		"_cryptoDecipheriv",
-		makeApplySync(
-			(
-				algorithm: string,
-				key: Uint8Array,
-				iv: Uint8Array,
-				data: Uint8Array,
-				optionsJson?: string,
-			) => browserDecipheriv(algorithm, key, iv, data, optionsJson),
-		),
-	);
-	exposeCustomGlobal(
-		"_cryptoCipherivCreate",
-		makeApplySync(() => unsupportedBrowserCrypto("_cryptoCipherivCreate")),
-	);
-	exposeCustomGlobal(
-		"_cryptoCipherivUpdate",
-		makeApplySync(() => unsupportedBrowserCrypto("_cryptoCipherivUpdate")),
-	);
-	exposeCustomGlobal(
-		"_cryptoCipherivFinal",
-		makeApplySync(() => unsupportedBrowserCrypto("_cryptoCipherivFinal")),
-	);
-	exposeCustomGlobal(
-		"_cryptoSign",
-		makeApplySync((algorithm: string, data: Uint8Array, key: unknown) =>
-			browserRsaSign(algorithm, data, key),
-		),
-	);
-	exposeCustomGlobal(
-		"_cryptoVerify",
-		makeApplySync(
-			(
-				algorithm: string,
-				data: Uint8Array,
-				key: unknown,
-				signature: Uint8Array,
-			) => browserRsaVerify(algorithm, data, key, signature),
-		),
-	);
-	exposeCustomGlobal(
-		"_cryptoAsymmetricOp",
-		makeApplySync(
-			(
-				operation: string,
-				key: unknown,
-				data: Uint8Array,
-				optionsJson?: string,
-			) => browserRsaAsymmetricOp(operation, key, data, optionsJson),
-		),
-	);
-	exposeCustomGlobal(
-		"_cryptoCreateKeyObject",
-		makeApplySync(() => unsupportedBrowserCrypto("_cryptoCreateKeyObject")),
-	);
-	exposeCustomGlobal(
-		"_cryptoGenerateKeyPairSync",
-		makeApplySync(() => unsupportedBrowserCrypto("_cryptoGenerateKeyPairSync")),
-	);
-	exposeCustomGlobal(
-		"_cryptoGenerateKeySync",
-		makeApplySync(() => unsupportedBrowserCrypto("_cryptoGenerateKeySync")),
-	);
-	exposeCustomGlobal(
-		"_cryptoGeneratePrimeSync",
-		makeApplySync(() => unsupportedBrowserCrypto("_cryptoGeneratePrimeSync")),
-	);
-	exposeCustomGlobal(
-		"_cryptoDiffieHellman",
-		makeApplySync(() => unsupportedBrowserCrypto("_cryptoDiffieHellman")),
-	);
-	exposeCustomGlobal(
-		"_cryptoDiffieHellmanGroup",
-		makeApplySync(() => unsupportedBrowserCrypto("_cryptoDiffieHellmanGroup")),
-	);
-	exposeCustomGlobal(
-		"_cryptoDiffieHellmanSessionCreate",
-		makeApplySync(() =>
-			unsupportedBrowserCrypto("_cryptoDiffieHellmanSessionCreate"),
-		),
-	);
-	exposeCustomGlobal(
-		"_cryptoDiffieHellmanSessionCall",
-		makeApplySync(() =>
-			unsupportedBrowserCrypto("_cryptoDiffieHellmanSessionCall"),
-		),
-	);
-	exposeCustomGlobal(
-		"_cryptoDiffieHellmanSessionDestroy",
-		makeApplySync(() =>
-			unsupportedBrowserCrypto("_cryptoDiffieHellmanSessionDestroy"),
-		),
-	);
-	exposeCustomGlobal(
-		"_cryptoSubtle",
-		makeApplySync(() => unsupportedBrowserCrypto("_cryptoSubtle")),
-	);
-
-	exposeCustomGlobal("_scheduleTimer", {
-		apply(_ctx: undefined, args: [number]) {
-			return new Promise<void>((resolve) => {
-				setTimeout(resolve, args[0]);
-			});
-		},
-	});
-
-	const netAdapter = networkAdapter ?? createNetworkStub();
-	const networkFetch = (
-		url: string,
-		options: {
-			method?: string;
-			headers?: Record<string, string>;
-			body?: string | null;
-		},
-	) => {
-		const result = syncBridge.requestJson("network.fetch", [url, options]);
-		return result as Awaited<ReturnType<NetworkAdapter["fetch"]>>;
-	};
-	exposeCustomGlobal(
-		"_networkFetchRaw",
-		makeApplyPromise(async (url: string, optionsJson: string) => {
-			const options = JSON.parse(optionsJson);
-			const result = networkFetch(url, options);
-			return JSON.stringify(result);
-		}),
-	);
-	exposeCustomGlobal(
-		"_networkDnsLookupRaw",
-		makeApplyPromise(async (request: string | { hostname?: unknown }) => {
-			const hostname =
-				typeof request === "string" ? request : String(request.hostname ?? "");
-			const result = await netAdapter.dnsLookup(hostname);
-			if (result.error) {
-				const error = new Error(result.error);
-				(error as { code?: string }).code = result.code;
-				throw error;
-			}
-			return JSON.stringify(result);
-		}),
-	);
-
-	// Guest global `fetch` over the kernel-brokered network adapter (the same seam
-	// `_networkFetchRaw` uses). Real programs (e.g. the pi ACP adapter's LLM SDK) call
-	// global fetch to reach their model endpoint; the adapter mediates egress (loopback
-	// routes through the kernel). Returns a real WHATWG Response (worker global) so the
-	// body is a ReadableStream the caller can stream (e.g. SSE).
-	exposeCustomGlobal(
-		"fetch",
-		async (input: unknown, init?: Record<string, unknown>) => {
-			const req = (input ?? {}) as Record<string, unknown>;
-			const url = typeof input === "string" ? input : String(req.url ?? input);
-			const method = String((init?.method ?? req.method ?? "GET") as string);
-			const headers: Record<string, string> = {};
-			const rawHeaders = (init?.headers ?? req.headers) as unknown;
-			if (rawHeaders) {
-				if (Array.isArray(rawHeaders)) {
-					for (const entry of rawHeaders as [string, string][])
-						headers[entry[0]] = entry[1];
-				} else if (
-					typeof (rawHeaders as { forEach?: unknown }).forEach === "function"
-				) {
-					(
-						rawHeaders as {
-							forEach: (cb: (v: string, k: string) => void) => void;
-						}
-					).forEach((v, k) => {
-						headers[k] = v;
-					});
-				} else {
-					for (const key of Object.keys(
-						rawHeaders as Record<string, unknown>,
-					)) {
-						headers[key] = String((rawHeaders as Record<string, unknown>)[key]);
-					}
-				}
-			}
-			let body = (init?.body ?? req.body) as unknown;
-			if (body != null && typeof body !== "string") {
-				body =
-					body instanceof Uint8Array
-						? new TextDecoder().decode(body)
-						: String(body);
-			}
-			const result = networkFetch(url, {
-				method,
-				headers,
-				body: (body ?? null) as string | null,
-			});
-			return new Response((result.body ?? "") as string, {
-				status: result.status ?? 200,
-				statusText: result.statusText || "",
-				headers: (result.headers ?? {}) as Record<string, string>,
-			});
-		},
-	);
-
-	// Node globals guest libraries reference: `global` (the global object) and the
-	// immediate timers (macrotask-scheduled; they run under the persistent event loop).
-	exposeCustomGlobal("global", globalThis);
-	if (
-		typeof (globalThis as { setImmediate?: unknown }).setImmediate !==
-		"function"
-	) {
-		exposeCustomGlobal(
-			"setImmediate",
-			(fn: (...a: unknown[]) => void, ...args: unknown[]) =>
-				setTimeout(() => fn(...args), 0),
-		);
-		exposeCustomGlobal("clearImmediate", (handle: unknown) =>
-			clearTimeout(handle as number),
-		);
-	}
-
-	exposeCustomGlobal(
-		"_childProcessSpawnStart",
-		makeApplySync((request: BrowserChildProcessSpawnRequest) => {
-			return syncBridge.requestJson<number>("child_process.spawn", [request]);
-		}),
-	);
-
-	exposeCustomGlobal(
-		"_childProcessPoll",
-		makeApplySync((sessionId: number, _waitMs?: number) => {
-			return syncBridge.requestJson<BrowserChildProcessPollEvent | null>(
-				"child_process.poll",
-				[sessionId, _waitMs ?? 0],
-			);
-		}),
-	);
-
-	exposeCustomGlobal(
-		"_childProcessStdinWrite",
-		makeApplySync((sessionId: number, data: Uint8Array) => {
-			syncBridge.requestVoid("child_process.write_stdin", [sessionId, data]);
-		}),
-	);
-
-	exposeCustomGlobal(
-		"_childProcessStdinClose",
-		makeApplySync((sessionId: number) => {
-			syncBridge.requestVoid("child_process.close_stdin", [sessionId]);
-		}),
-	);
-
-	exposeCustomGlobal(
-		"_childProcessKill",
-		makeApplySync((sessionId: number, signal: number) => {
-			syncBridge.requestVoid("child_process.kill", [sessionId, signal]);
-		}),
-	);
-
-	exposeCustomGlobal(
-		"_childProcessSpawnSync",
-		makeApplySync((request: BrowserChildProcessSpawnRequest) => {
-			return syncBridge.requestText("child_process.spawn_sync", [request]);
-		}),
-	);
-	exposeCustomGlobal(
-		"_processSignalState",
-		makeApplySync(
-			(signal: number, action: string, maskJson: string, flags: number) => {
-				syncBridge.requestVoid("process.signal_state", [
-					signal,
-					action,
-					maskJson,
-					flags,
-				]);
-			},
-		),
-	);
-	exposeCustomGlobal(
-		"_dgramSocketCreateRaw",
-		makeApplySync((options: { type?: unknown }) => {
-			return syncBridge.requestJson("dgram.create", [options]);
-		}),
-	);
-	exposeCustomGlobal(
-		"_dgramSocketBindRaw",
-		makeApplySync((socketId: string | number, options: unknown) => {
-			return syncBridge.requestJson("dgram.bind", [socketId, options]);
-		}),
-	);
-	exposeCustomGlobal(
-		"_dgramSocketRecvRaw",
-		makeApplySync((socketId: string | number, waitMs?: number) => {
-			return syncBridge.requestJson("dgram.recv", [socketId, waitMs ?? 0]);
-		}),
-	);
-	exposeCustomGlobal(
-		"_dgramSocketSendRaw",
-		makeApplySync(
-			(socketId: string | number, data: Uint8Array, target: unknown) => {
-				return syncBridge.requestJson("dgram.send", [socketId, data, target]);
-			},
-		),
-	);
-	exposeCustomGlobal(
-		"_dgramSocketCloseRaw",
-		makeApplySync((socketId: string | number) => {
-			return syncBridge.requestJson("dgram.close", [socketId]);
-		}),
-	);
-	exposeCustomGlobal(
-		"_dgramSocketAddressRaw",
-		makeApplySync((socketId: string | number) => {
-			return syncBridge.requestJson("dgram.address", [socketId]);
-		}),
-	);
-	exposeCustomGlobal(
-		"_dgramSocketSetBufferSizeRaw",
-		makeApplySync((socketId: string | number, which: string, size: number) => {
-			return syncBridge.requestJson("dgram.setBufferSize", [
-				socketId,
-				which,
-				size,
-			]);
-		}),
-	);
-	exposeCustomGlobal(
-		"_dgramSocketGetBufferSizeRaw",
-		makeApplySync((socketId: string | number, which: string) => {
-			return syncBridge.requestJson("dgram.getBufferSize", [socketId, which]);
-		}),
-	);
-	exposeCustomGlobal("_fsModule", createFsModule(syncBridge));
-	exposeMutableRuntimeStateGlobal("_moduleCache", {});
-	exposeMutableRuntimeStateGlobal("_pendingModules", {});
-	exposeMutableRuntimeStateGlobal("_currentModule", { dirname: "/" });
-	globalEval(getRequireSetupCode());
-	ensureProcessGlobal();
-
-	// Block dangerous Web APIs that bypass bridge permission checks
-	const dangerousApis = [
-		"XMLHttpRequest",
-		"WebSocket",
-		"importScripts",
-		"indexedDB",
-		"caches",
-		"BroadcastChannel",
-	];
-	for (const api of dangerousApis) {
-		try {
-			delete (self as unknown as Record<string, unknown>)[api];
-		} catch {
-			// May not exist or may be non-configurable
-		}
-		Object.defineProperty(self, api, {
-			get() {
-				throw new ReferenceError(`${api} is not available in sandbox`);
-			},
-			configurable: false,
-		});
-	}
-
-	// Lock down self.onmessage so sandbox code cannot hijack the control channel
-	const currentHandler = self.onmessage;
-	Object.defineProperty(self, "onmessage", {
-		value: currentHandler,
-		writable: false,
-		configurable: false,
-	});
-
-	// Block self.postMessage so sandbox code cannot forge responses to host
-	Object.defineProperty(self, "postMessage", {
-		get() {
-			throw new TypeError("postMessage is not available in sandbox");
-		},
-		configurable: false,
-	});
-
-	initialized = true;
-}
-
-function resetModuleState(cwd: string): void {
-	exposeMutableRuntimeStateGlobal("_moduleCache", {});
-	exposeMutableRuntimeStateGlobal("_pendingModules", {});
-	exposeMutableRuntimeStateGlobal("_currentModule", { dirname: cwd });
-}
-
-function setDynamicImportFallback(): void {
-	exposeMutableRuntimeStateGlobal("__dynamicImport", (specifier: string) => {
-		const cached = dynamicImportCache.get(specifier);
-		if (cached) return Promise.resolve(cached);
-		try {
-			const runtimeRequire = (globalThis as Record<string, unknown>).require as
-				| ((request: string) => unknown)
-				| undefined;
-			if (typeof runtimeRequire !== "function") {
-				throw new Error("require is not available in browser runtime");
-			}
-			const mod = runtimeRequire(specifier);
-			return Promise.resolve({
-				default: mod,
-				...(mod as Record<string, unknown>),
-			});
-		} catch (e) {
-			return Promise.reject(
-				new Error(`Cannot dynamically import '${specifier}': ${String(e)}`),
-			);
-		}
-	});
-}
-
-function toProcessChunk(
-	value: string,
-	encoding: string | null,
-): string | Uint8Array {
-	if (encoding) {
-		return value;
-	}
-	return encoder.encode(value);
-}
-
-function normalizeProcessOutputChunk(chunk: unknown): string {
-	if (typeof chunk === "string") {
-		return chunk;
-	}
-	if (chunk instanceof Uint8Array) {
-		return decoder.decode(chunk);
-	}
-	if (ArrayBuffer.isView(chunk)) {
-		return decoder.decode(
-			new Uint8Array(chunk.buffer, chunk.byteOffset, chunk.byteLength),
-		);
-	}
-	if (chunk instanceof ArrayBuffer) {
-		return decoder.decode(new Uint8Array(chunk));
-	}
-	return String(chunk);
-}
-
-function emitProcessStdio(channel: StdioChannel, chunk: unknown): boolean {
-	if (activeProcessRequestId === null || activeExecutionId === null) {
-		return true;
-	}
-	emitStdio(
-		activeExecutionId,
-		activeProcessRequestId,
-		channel,
-		normalizeProcessOutputChunk(chunk),
-	);
-	return true;
-}
-
-function createBrowserProcess(): Record<string, unknown> {
-	type BrowserProcessListener = (value?: unknown) => void;
-	type BrowserProcessListenerMap = Record<string, BrowserProcessListener[]>;
-	type BrowserPtyStdio = {
-		masterFd?: number;
-		slaveFd: number;
-		path?: string;
-		columns: number;
-		rows: number;
-	};
-	type BrowserStdin = {
-		readable: boolean;
-		paused: boolean;
-		encoding: string | null;
-		isRaw: boolean;
-		read(size?: number): string | Uint8Array | null;
-		on(event: string, listener: BrowserProcessListener): BrowserStdin;
-		once(event: string, listener: BrowserProcessListener): BrowserStdin;
-		off(event: string, listener: BrowserProcessListener): BrowserStdin;
-		removeListener(
-			event: string,
-			listener: BrowserProcessListener,
-		): BrowserStdin;
-		emit(event: string, value?: unknown): boolean;
-		pause(): BrowserStdin;
-		resume(): BrowserStdin;
-		setEncoding(encoding: string): BrowserStdin;
-		setRawMode(mode: boolean): BrowserStdin;
-		readonly readableLength: number;
-		readonly isTTY: boolean;
-		[Symbol.asyncIterator](): AsyncGenerator<string, void, void>;
-	};
-	type BrowserWritable = {
-		readonly isTTY: boolean;
-		readonly columns: number;
-		readonly rows: number;
-		write(chunk: unknown, encoding?: unknown, callback?: unknown): boolean;
-		on(event: string, listener: BrowserProcessListener): BrowserWritable;
-		once(event: string, listener: BrowserProcessListener): BrowserWritable;
-		off(event: string, listener: BrowserProcessListener): BrowserWritable;
-		removeListener(
-			event: string,
-			listener: BrowserProcessListener,
-		): BrowserWritable;
-		emit(event: string, value?: unknown): boolean;
-	};
-
-	let cwd = "/";
-	let stdinData = "";
-	let stdinPosition = 0;
-	let stdinEnded = false;
-	let stdinFlushQueued = false;
-	let stdioPty: BrowserPtyStdio | null = null;
-	let ptyPumpGeneration = 0;
-	let ptyPumpScheduled = false;
-	const stdinListeners: BrowserProcessListenerMap = Object.create(null);
-	const stdinOnceListeners: BrowserProcessListenerMap = Object.create(null);
-
-	const ttyState = {
-		isatty(fd: unknown): boolean {
-			return (
-				stdioPty !== null &&
-				(typeof fd === "number" || typeof fd === "string") &&
-				(fd === 0 ||
-					fd === 1 ||
-					fd === 2 ||
-					fd === "0" ||
-					fd === "1" ||
-					fd === "2")
-			);
-		},
-		columns(): number {
-			return stdioPty?.columns ?? 80;
-		},
-		rows(): number {
-			return stdioPty?.rows ?? 24;
-		},
-	};
-	(globalThis as Record<string, unknown>).__agentOSTtyState = ttyState;
-
-	const parsePtyStdio = (value: unknown): BrowserPtyStdio | null => {
-		if (!value || typeof value !== "object") return null;
-		const record = value as Record<string, unknown>;
-		let masterFd: number | undefined;
-		let slaveFd = record.slaveFd;
-		const columns = Number.isInteger(record.columns)
-			? (record.columns as number)
-			: 80;
-		const rows = Number.isInteger(record.rows) ? (record.rows as number) : 24;
-		let path: string | undefined;
-		if (record.open === true) {
-			const pair = ptySyncBridge().requestJson<{
-				masterFd?: unknown;
-				slaveFd?: unknown;
-				path?: unknown;
-			}>("pty.open", [{}]);
-			if (!Number.isInteger(pair.masterFd) || !Number.isInteger(pair.slaveFd)) {
-				throw new Error("pty.open returned invalid fd pair");
-			}
-			masterFd = pair.masterFd as number;
-			slaveFd = pair.slaveFd;
-			path = typeof pair.path === "string" ? pair.path : undefined;
-			ptySyncBridge().requestVoid("pty.resize", [
-				{ fd: slaveFd as number, cols: Math.max(1, columns), rows: Math.max(1, rows) },
-			]);
-			if (activeExecutionId && activeProcessRequestId !== null) {
-				postPtyOpened(activeExecutionId, activeProcessRequestId, {
-					masterFd,
-					slaveFd: slaveFd as number,
-					path,
-					columns: Math.max(1, columns),
-					rows: Math.max(1, rows),
-				});
-			}
-		}
-		if (!Number.isInteger(slaveFd) || (slaveFd as number) < 0) return null;
-		return {
-			masterFd,
-			slaveFd: slaveFd as number,
-			path,
-			columns: Math.max(1, columns),
-			rows: Math.max(1, rows),
-		};
-	};
-
-	const emitStdinListeners = (event: string, value?: unknown): boolean => {
-		const listeners = [
-			...(stdinListeners[event] ?? []),
-			...(stdinOnceListeners[event] ?? []),
-		];
-		stdinOnceListeners[event] = [];
-		for (const listener of listeners) {
-			listener(value);
-		}
-		return listeners.length > 0;
-	};
-
-	const clearStdinListeners = (): void => {
-		for (const key of Object.keys(stdinListeners)) {
-			stdinListeners[key] = [];
-		}
-		for (const key of Object.keys(stdinOnceListeners)) {
-			stdinOnceListeners[key] = [];
-		}
-	};
-
-	const ptySyncBridge = () => {
-		const syncBridge = activeSyncBridge;
-		if (!syncBridge) {
-			throw new Error("PTY stdio requires an active sync bridge");
-		}
-		return syncBridge;
-	};
-
-	const ptyBytesToProcessChunk = (bytes: Uint8Array): string | Uint8Array =>
-		stdin.encoding ? decoder.decode(bytes) : bytes;
-
-	const readPtyStdinOnce = (): boolean => {
-		if (!stdioPty || stdinEnded || stdin.paused) return false;
-		const result = ptySyncBridge().requestJson<{ data?: string | null }>(
-			"pty.read",
-			[{ fd: stdioPty.slaveFd, maxBytes: 4096, timeoutMs: 0 }],
-		);
-		if (typeof result.data !== "string") return false;
-		emitStdinListeners(
-			"data",
-			ptyBytesToProcessChunk(base64ToBytes(result.data)),
-		);
-		return true;
-	};
-
-	const schedulePtyPump = (): void => {
-		if (!stdioPty || stdinEnded || stdin.paused || ptyPumpScheduled) return;
-		const generation = ptyPumpGeneration;
-		ptyPumpScheduled = true;
-		setTimeout(() => {
-			ptyPumpScheduled = false;
-			if (
-				generation !== ptyPumpGeneration ||
-				!stdioPty ||
-				stdinEnded ||
-				stdin.paused
-			) {
-				return;
-			}
-			try {
-				readPtyStdinOnce();
-			} finally {
-				schedulePtyPump();
-			}
-		}, 0);
-	};
-
-	const writePtyStdio = (chunk: unknown, encoding?: unknown): boolean => {
-		if (!stdioPty) return false;
-		const bytes = toUint8Array(chunk);
-		ptySyncBridge().requestJson("pty.write", [
-			{ fd: stdioPty.slaveFd, data: bytes },
-		]);
-		return true;
-	};
-
-	const setPtyRawMode = (mode: boolean): void => {
-		if (!stdioPty) return;
-		ptySyncBridge().requestVoid("pty.tcsetattr", [
-			mode
-				? {
-						fd: stdioPty.slaveFd,
-						icrnl: false,
-						opost: false,
-						icanon: false,
-						echo: false,
-						isig: false,
-					}
-				: {
-						fd: stdioPty.slaveFd,
-						icrnl: true,
-						opost: true,
-						icanon: true,
-						echo: true,
-						isig: true,
-					},
-		]);
-	};
-
-	const stopPtyPump = (): void => {
-		ptyPumpGeneration += 1;
-		ptyPumpScheduled = false;
-	};
-
-	const flushStdin = (): void => {
-		stdinFlushQueued = false;
-		if (stdin.paused || stdinEnded) {
-			return;
-		}
-		if (stdioPty) {
-			readPtyStdinOnce();
-			schedulePtyPump();
-			return;
-		}
-		if (stdinPosition < stdinData.length) {
-			const chunk = stdinData.slice(stdinPosition);
-			stdinPosition = stdinData.length;
-			emitStdinListeners("data", toProcessChunk(chunk, stdin.encoding));
-		}
-		// In streaming mode the host owns end-of-input (via end-stdin) — do not auto-end.
-		if (!stdinEnded && !streamingStdinEnabled) {
-			stdinEnded = true;
-			emitStdinListeners("end");
-			emitStdinListeners("close");
-		}
-	};
-	// Host-driven streaming stdin (write-stdin / end-stdin messages) for this execution.
-	activeStdinPush = (data: string): void => {
-		if (stdinEnded) return;
-		if (stdioPty) return;
-		if (stdin.paused) stdin.paused = false;
-		emitStdinListeners("data", toProcessChunk(data, stdin.encoding));
-	};
-	activeStdinEnd = (): void => {
-		if (stdinEnded) return;
-		if (stdioPty) return;
-		stdinEnded = true;
-		emitStdinListeners("end");
-		emitStdinListeners("close");
-	};
-
-	const scheduleStdinFlush = (): void => {
-		if (stdinFlushQueued) {
-			return;
-		}
-		stdinFlushQueued = true;
-		queueMicrotask(flushStdin);
-	};
-
-	const stdin: BrowserStdin = {
-		readable: true,
-		paused: true,
-		encoding: null,
-		isRaw: false,
-		read(size?: number) {
-			if (stdioPty) {
-				const result = ptySyncBridge().requestJson<{ data?: string | null }>(
-					"pty.read",
-					[{ fd: stdioPty.slaveFd, maxBytes: size ?? 4096, timeoutMs: 0 }],
-				);
-				return typeof result.data === "string"
-					? ptyBytesToProcessChunk(base64ToBytes(result.data))
-					: null;
-			}
-			if (stdinPosition >= stdinData.length) {
-				return null;
-			}
-			const chunk = size
-				? stdinData.slice(stdinPosition, stdinPosition + size)
-				: stdinData.slice(stdinPosition);
-			stdinPosition += chunk.length;
-			return toProcessChunk(chunk, stdin.encoding);
-		},
-		on(event, listener) {
-			if (!stdinListeners[event]) {
-				stdinListeners[event] = [];
-			}
-			stdinListeners[event].push(listener);
-			if (event === "data" && stdin.paused) {
-				stdin.resume();
-			}
-			return stdin;
-		},
-		once(event, listener) {
-			if (!stdinOnceListeners[event]) {
-				stdinOnceListeners[event] = [];
-			}
-			stdinOnceListeners[event].push(listener);
-			if (event === "data" && stdin.paused) {
-				stdin.resume();
-			}
-			return stdin;
-		},
-		off(event, listener) {
-			if (!stdinListeners[event]) {
-				return stdin;
-			}
-			stdinListeners[event] = stdinListeners[event].filter(
-				(candidate) => candidate !== listener,
-			);
-			return stdin;
-		},
-		removeListener(event, listener) {
-			return stdin.off(event, listener);
-		},
-		emit(event, value) {
-			return emitStdinListeners(event, value);
-		},
-		pause() {
-			stdin.paused = true;
-			return stdin;
-		},
-		resume() {
-			stdin.paused = false;
-			if (stdioPty) schedulePtyPump();
-			else scheduleStdinFlush();
-			return stdin;
-		},
-		setEncoding(encoding) {
-			stdin.encoding = encoding;
-			return stdin;
-		},
-		setRawMode(mode) {
-			setPtyRawMode(mode);
-			stdin.isRaw = mode;
-			return stdin;
-		},
-		get readableLength() {
-			if (stdioPty) return 0;
-			return encoder.encode(stdinData.slice(stdinPosition)).byteLength;
-		},
-		get isTTY() {
-			return stdioPty !== null;
-		},
-		async *[Symbol.asyncIterator]() {
-			const remaining = stdinData.slice(stdinPosition);
-			for (const line of remaining.split("\n")) {
-				if (line.length > 0) {
-					yield line;
-				}
-			}
-		},
-	};
-
-	const processListeners: BrowserProcessListenerMap = Object.create(null);
-	const processOnceListeners: BrowserProcessListenerMap = Object.create(null);
-	const stdoutListeners: BrowserProcessListenerMap = Object.create(null);
-	const stdoutOnceListeners: BrowserProcessListenerMap = Object.create(null);
-	const stderrListeners: BrowserProcessListenerMap = Object.create(null);
-	const stderrOnceListeners: BrowserProcessListenerMap = Object.create(null);
-
-	const requireProcessListener = (
-		listener: BrowserProcessListener,
-	): BrowserProcessListener => {
-		if (typeof listener !== "function") {
-			throw new TypeError("process listener must be a function");
-		}
-		return listener;
-	};
-
-	const processSignalListenerCount = (event: string): number => {
-		return (
-			(processListeners[event]?.length ?? 0) +
-			(processOnceListeners[event]?.length ?? 0)
-		);
-	};
-
-	const syncProcessSignalState = (
-		event: string,
-		action: "default" | "user",
-	): void => {
-		const signal = signalNumberForEvent(event);
-		if (signal === null) {
-			return;
-		}
-		const syncBridge = activeSyncBridge;
-		if (!syncBridge) {
-			return;
-		}
-		syncBridge.requestVoid("process.signal_state", [signal, action, "[]", 0]);
-	};
-
-	const maybeSyncProcessSignalTransition = (
-		event: string,
-		before: number,
-		after: number,
-	): void => {
-		if (before === 0 && after > 0) {
-			syncProcessSignalState(event, "user");
-		} else if (before > 0 && after === 0) {
-			syncProcessSignalState(event, "default");
-		}
-	};
-
-	const processOn = (
-		event: string,
-		listener: BrowserProcessListener,
-		once: boolean,
-	): Record<string, unknown> => {
-		requireProcessListener(listener);
-		const before = processSignalListenerCount(event);
-		const map = once ? processOnceListeners : processListeners;
-		if (!map[event]) {
-			map[event] = [];
-		}
-		map[event].push(listener);
-		maybeSyncProcessSignalTransition(
-			event,
-			before,
-			processSignalListenerCount(event),
-		);
-		return processBridge;
-	};
-
-	const processOff = (
-		event: string,
-		listener: BrowserProcessListener,
-	): Record<string, unknown> => {
-		requireProcessListener(listener);
-		const before = processSignalListenerCount(event);
-		if (processListeners[event]) {
-			processListeners[event] = processListeners[event].filter(
-				(candidate) => candidate !== listener,
-			);
-		}
-		if (processOnceListeners[event]) {
-			processOnceListeners[event] = processOnceListeners[event].filter(
-				(candidate) => candidate !== listener,
-			);
-		}
-		maybeSyncProcessSignalTransition(
-			event,
-			before,
-			processSignalListenerCount(event),
-		);
-		return processBridge;
-	};
-
-	const emitProcessListeners = (event: string, value?: unknown): boolean => {
-		const before = processSignalListenerCount(event);
-		const listeners = [
-			...(processListeners[event] ?? []),
-			...(processOnceListeners[event] ?? []),
-		];
-		processOnceListeners[event] = [];
-		for (const listener of listeners) {
-			listener(value);
-		}
-		maybeSyncProcessSignalTransition(
-			event,
-			before,
-			processSignalListenerCount(event),
-		);
-		return listeners.length > 0;
-	};
-
-	const requireStreamListener = (
-		listener: BrowserProcessListener,
-	): BrowserProcessListener => {
-		if (typeof listener !== "function") {
-			throw new TypeError("stream listener must be a function");
-		}
-		return listener;
-	};
-
-	const streamOn = (
-		listeners: BrowserProcessListenerMap,
-		event: string,
-		listener: BrowserProcessListener,
-		stream: BrowserWritable,
-	): BrowserWritable => {
-		requireStreamListener(listener);
-		if (!listeners[event]) {
-			listeners[event] = [];
-		}
-		listeners[event].push(listener);
-		return stream;
-	};
-
-	const streamOff = (
-		listeners: BrowserProcessListenerMap,
-		event: string,
-		listener: BrowserProcessListener,
-		stream: BrowserWritable,
-	): BrowserWritable => {
-		requireStreamListener(listener);
-		if (listeners[event]) {
-			listeners[event] = listeners[event].filter(
-				(candidate) => candidate !== listener,
-			);
-		}
-		return stream;
-	};
-
-	const emitStreamListeners = (
-		listeners: BrowserProcessListenerMap,
-		onceListeners: BrowserProcessListenerMap,
-		event: string,
-		value?: unknown,
-	): boolean => {
-		const callbacks = [
-			...(listeners[event] ?? []),
-			...(onceListeners[event] ?? []),
-		];
-		onceListeners[event] = [];
-		for (const listener of callbacks) {
-			listener(value);
-		}
-		return callbacks.length > 0;
-	};
-
-	const clearStreamListeners = (
-		listeners: BrowserProcessListenerMap,
-		onceListeners: BrowserProcessListenerMap,
-	): void => {
-		for (const key of Object.keys(listeners)) {
-			listeners[key] = [];
-		}
-		for (const key of Object.keys(onceListeners)) {
-			onceListeners[key] = [];
-		}
-	};
-
-	const makeWritable = (
-		channel: "stdout" | "stderr",
-		listeners: BrowserProcessListenerMap,
-		onceListeners: BrowserProcessListenerMap,
-	): BrowserWritable => {
-		const writable: BrowserWritable = {
-			get isTTY() {
-				return stdioPty !== null;
-			},
-			get columns() {
-				return stdioPty?.columns ?? 80;
-			},
-			get rows() {
-				return stdioPty?.rows ?? 24;
-			},
-			// Node signature: write(chunk[, encoding][, callback]). The callback MUST be
-			// invoked on completion — code that awaits it (e.g. a WHATWG WritableStream
-			// wrapping process.stdout) otherwise blocks after the first write.
-			write(chunk: unknown, encoding?: unknown, callback?: unknown) {
-				const result = stdioPty
-					? writePtyStdio(chunk, encoding)
-					: emitProcessStdio(channel, chunk);
-				const cb = typeof encoding === "function" ? encoding : callback;
-				if (typeof cb === "function") (cb as (err?: unknown) => void)();
-				return result;
-			},
-			on(event, listener) {
-				return streamOn(listeners, String(event), listener, writable);
-			},
-			once(event, listener) {
-				return streamOn(onceListeners, String(event), listener, writable);
-			},
-			off(event, listener) {
-				return streamOff(listeners, String(event), listener, writable);
-			},
-			removeListener(event, listener) {
-				streamOff(listeners, String(event), listener, writable);
-				streamOff(onceListeners, String(event), listener, writable);
-				return writable;
-			},
-			emit(event, value) {
-				return emitStreamListeners(
-					listeners,
-					onceListeners,
-					String(event),
-					value,
-				);
-			},
-		};
-		return writable;
-	};
-
-	const stdout = makeWritable("stdout", stdoutListeners, stdoutOnceListeners);
-	const stderr = makeWritable("stderr", stderrListeners, stderrOnceListeners);
-
-	const processBridge = {
-		browser: true,
-		env: {} as Record<string, string>,
-		argv: ["node"],
-		argv0: "node",
-		pid: 1,
-		ppid: 0,
-		uid: 1000,
-		gid: 1000,
-		platform: "browser",
-		arch: "x64",
-		version: "v22.0.0",
-		versions: {
-			node: "22.0.0",
-			// Guest crypto is served by pure-Rust crates, not OpenSSL. We still
-			// surface the OpenSSL release vendored by the sidecar so guests that
-			// read process.versions.openssl keep working, and the native V8 runtime
-			// reports the same constant for parity.
-			openssl: "3.6.2",
-		},
-		stdin,
-		stdout,
-		stderr,
-		exitCode: 0,
-		cwd: () => cwd,
-		chdir: (nextCwd: string) => {
-			cwd = String(nextCwd);
-		},
-		getuid: () => processBridge.uid,
-		getgid: () => processBridge.gid,
-		geteuid: () => processBridge.uid,
-		getegid: () => processBridge.gid,
-		getgroups: () => [processBridge.gid],
-		nextTick: (callback: (...args: unknown[]) => void, ...args: unknown[]) => {
-			queueMicrotask(() => callback(...args));
-		},
-		exit(code?: number) {
-			const exitCode =
-				typeof code === "number" ? code : (processBridge.exitCode ?? 0);
-			processBridge.exitCode = exitCode;
-			// Persistent execution: resolve the run (the call may come from an async
-			// callback whose throw the sync exec wrapper cannot catch). Otherwise throw
-			// the sentinel the run-to-completion exec wrapper unwinds on.
-			if (persistentExitResolver) {
-				const resolve = persistentExitResolver;
-				persistentExitResolver = null;
-				resolve(exitCode);
-				return;
-			}
-			throw new Error(`process.exit(${exitCode})`);
-		},
-		kill(pid: number, signal: string | number = "SIGTERM") {
-			if (pid !== processBridge.pid) {
-				throw new Error(`process.kill only supports the current browser process pid (${processBridge.pid})`);
-			}
-			const event =
-				typeof signal === "number"
-					? eventForSignalNumber(signal)
-					: String(signal);
-			if (event === "SIGWINCH") {
-				stdout.emit("resize");
-				stderr.emit("resize");
-			}
-			return emitProcessListeners(event);
-		},
-		on(event: string, listener: BrowserProcessListener) {
-			return processOn(String(event), listener, false);
-		},
-		once(event: string, listener: BrowserProcessListener) {
-			return processOn(String(event), listener, true);
-		},
-		off(event: string, listener: BrowserProcessListener) {
-			return processOff(String(event), listener);
-		},
-		removeListener(event: string, listener: BrowserProcessListener) {
-			return processOff(String(event), listener);
-		},
-		emit(event: string, value?: unknown) {
-			return emitProcessListeners(String(event), value);
-		},
-		__secureExecRefreshProcess(nextConfig?: Record<string, unknown>) {
-			stopPtyPump();
-			clearStdinListeners();
-			for (const key of Object.keys(processListeners)) {
-				processListeners[key] = [];
-			}
-			for (const key of Object.keys(processOnceListeners)) {
-				processOnceListeners[key] = [];
-			}
-			clearStreamListeners(stdoutListeners, stdoutOnceListeners);
-			clearStreamListeners(stderrListeners, stderrOnceListeners);
-			stdinData = typeof nextConfig?.stdin === "string" ? nextConfig.stdin : "";
-			stdinPosition = 0;
-			stdinEnded = false;
-			stdinFlushQueued = false;
-			stdin.paused = true;
-			stdin.encoding = null;
-			stdin.isRaw = false;
-			stdioPty = parsePtyStdio(nextConfig?.stdioPty);
-			processBridge.exitCode = 0;
-			processBridge.env =
-				nextConfig?.env && typeof nextConfig.env === "object"
-					? { ...(nextConfig.env as Record<string, string>) }
-					: {};
-			if (typeof nextConfig?.cwd === "string") {
-				cwd = nextConfig.cwd;
-			}
-			processBridge.argv = Array.isArray(nextConfig?.argv)
-				? nextConfig.argv.map((value) => String(value))
-				: ["node"];
-			processBridge.argv0 = processBridge.argv[0] ?? "node";
-			if (typeof nextConfig?.platform === "string") {
-				processBridge.platform = nextConfig.platform;
-			}
-			if (typeof nextConfig?.arch === "string") {
-				processBridge.arch = nextConfig.arch;
-			}
-			if (typeof nextConfig?.version === "string") {
-				processBridge.version = nextConfig.version;
-				processBridge.versions.node = nextConfig.version.replace(/^v/, "");
-			}
-			if (typeof nextConfig?.pid === "number") {
-				processBridge.pid = nextConfig.pid;
-			}
-			if (typeof nextConfig?.ppid === "number") {
-				processBridge.ppid = nextConfig.ppid;
-			}
-			if (typeof nextConfig?.uid === "number") {
-				processBridge.uid = nextConfig.uid;
-			}
-			if (typeof nextConfig?.gid === "number") {
-				processBridge.gid = nextConfig.gid;
-			}
-		},
-		__secureExecStopPtyStdio() {
-			stopPtyPump();
-			stdioPty = null;
-		},
-		__secureExecResizePty(columns: number, rows: number) {
-			if (!stdioPty) return;
-			stdioPty.columns = Math.max(1, Math.trunc(columns));
-			stdioPty.rows = Math.max(1, Math.trunc(rows));
-			stdout.emit("resize");
-			stderr.emit("resize");
-			emitProcessListeners("SIGWINCH");
-		},
-	};
-
-	return processBridge;
-}
-
-function getRuntimeProcess(): Record<string, unknown> | undefined {
-	const proc = (globalThis as Record<string, unknown>).process;
-	if (!proc || typeof proc !== "object") {
-		return undefined;
-	}
-	return proc as Record<string, unknown>;
-}
-
-function refreshRuntimeProcess(): void {
-	const proc = getRuntimeProcess();
-	const refresh = proc?.__secureExecRefreshProcess as
-		| ((nextConfig?: Record<string, unknown> | null) => void)
-		| undefined;
-	if (typeof refresh === "function") {
-		refresh(runtimeProcessConfig);
-	}
-}
-
-function resizeRuntimePty(
-	executionId: string,
-	columns: number,
-	rows: number,
-): void {
-	if (executionId !== activeExecutionId) {
-		return;
-	}
-	const proc = getRuntimeProcess();
-	const resize = proc?.__secureExecResizePty as
-		| ((columns: number, rows: number) => void)
-		| undefined;
-	if (typeof resize === "function") {
-		resize(columns, rows);
-	}
-}
-
-function ensureProcessGlobal(): void {
-	if (getRuntimeProcess()) {
-		refreshRuntimeProcess();
-		return;
-	}
-
-	exposeMutableRuntimeStateGlobal("process", createBrowserProcess());
-	refreshRuntimeProcess();
-}
-
-function updateProcessConfig(
-	options: BrowserWorkerExecOptions | undefined,
-	timingMitigation: TimingMitigation,
-	frozenTimeMs?: number,
-): void {
-	if (runtimeProcessConfig) {
-		runtimeProcessConfig.timingMitigation = timingMitigation;
-		if (frozenTimeMs === undefined) {
-			delete runtimeProcessConfig.frozenTimeMs;
-		} else {
-			runtimeProcessConfig.frozenTimeMs = frozenTimeMs;
-		}
-		runtimeProcessConfig.stdin = options?.stdin ?? "";
-		if (options?.stdioPty) {
-			runtimeProcessConfig.stdioPty = options.stdioPty;
-		} else {
-			delete runtimeProcessConfig.stdioPty;
-		}
-		if (options?.env) {
-			// Per-exec env is already filtered by the trusted driver.
-			const currentEnv =
-				runtimeProcessConfig.env && typeof runtimeProcessConfig.env === "object"
-					? (runtimeProcessConfig.env as Record<string, string>)
-					: {};
-			runtimeProcessConfig.env = { ...currentEnv, ...options.env };
-		}
-	}
-
-	refreshRuntimeProcess();
-
-	const proc = getRuntimeProcess();
-	if (!proc) return;
-	proc.exitCode = 0;
-	proc.timingMitigation = timingMitigation;
-	if (frozenTimeMs === undefined) {
-		delete proc.frozenTimeMs;
-	} else {
-		proc.frozenTimeMs = frozenTimeMs;
-	}
-	if (options?.cwd && typeof proc.chdir === "function") {
-		exposeMutableRuntimeStateGlobal("__runtimeProcessCwdOverride", options.cwd);
-		globalEval(getIsolateRuntimeSource("overrideProcessCwd"));
-		try {
-			proc.chdir(options.cwd);
-		} catch (error) {
-			if (
-				!(
-					error instanceof Error &&
-					error.message.includes("process.chdir() is not supported in workers")
-				)
-			) {
-				throw error;
-			}
-		}
-	}
-}
-
-/**
- * Execute user code as a script (process-style). Transforms ESM/dynamic
- * imports, sets up module/exports globals, and waits for active handles.
- */
-async function execScript(
-	executionId: string,
-	requestId: number,
-	code: string,
-	options?: BrowserWorkerExecOptions,
-	captureStdio = false,
-): Promise<ExecResult> {
-	resetModuleState(options?.cwd ?? "/");
-	const timingMitigation = options?.timingMitigation ?? runtimeTimingMitigation;
-	const frozenTimeMs = applyTimingMitigation(timingMitigation);
-	const previousProcessRequestId = activeProcessRequestId;
-	const previousExecutionId = activeExecutionId;
-	const previousCaptureStdio = activeCaptureStdio;
-	activeProcessRequestId = requestId;
-	activeExecutionId = executionId;
-	activeCaptureStdio = captureStdio;
-	persistentExitResolver = null;
-	streamingStdinEnabled = Boolean(options?.streamingStdin);
-	updateProcessConfig(options, timingMitigation, frozenTimeMs);
-	setDynamicImportFallback();
-	try {
-		const scriptResult = (async (): Promise<ExecResult> => {
-			let transformed = code;
-			if (isESM(code, options?.filePath)) {
-				transformed = transform(transformed, { transforms: ["imports"] }).code;
-			}
-			transformed = transformDynamicImport(transformed);
-
-			exposeMutableRuntimeStateGlobal("module", { exports: {} });
-			const moduleRef = (globalThis as Record<string, unknown>).module as {
-				exports?: unknown;
-			};
-			exposeMutableRuntimeStateGlobal("exports", moduleRef.exports);
-
-			if (options?.filePath) {
-				const dirname = options.filePath.includes("/")
-					? options.filePath.substring(0, options.filePath.lastIndexOf("/")) ||
-						"/"
-					: "/";
-				exposeMutableRuntimeStateGlobal("__filename", options.filePath);
-				exposeMutableRuntimeStateGlobal("__dirname", dirname);
-				exposeMutableRuntimeStateGlobal("_currentModule", {
-					dirname,
-					filename: options.filePath,
-				});
-			}
-
-			// Persistent (service) program: arm the exit resolver BEFORE eval so an exit
-			// that fires while we await (e.g. on stdin EOF, from an async stream callback)
-			// resolves the run rather than throwing uncaught. The worker event loop stays
-			// alive for async I/O (stdin events, timers, stream pumps) while we await.
-			const persistentExitPromise = options?.persistent
-				? new Promise<number>((resolve) => {
-						persistentExitResolver = resolve;
-					})
-				: null;
-
-			// Await the eval result so async IIFEs / top-level promise expressions
-			// resolve before we check for active handles.
-			const evalResult = globalEval(transformed);
-			if (
-				evalResult &&
-				typeof evalResult === "object" &&
-				typeof (evalResult as Record<string, unknown>).then === "function"
-			) {
-				await evalResult;
-			}
-			await Promise.resolve();
-
-			const currentExitCode = () =>
-				(
-					(globalThis as Record<string, unknown>).process as {
-						exitCode?: number;
-					}
-				)?.exitCode ?? 0;
-
-			if (persistentExitPromise) {
-				const code = await Promise.race([
-					persistentExitPromise,
-					new Promise<number>((resolve) =>
-						setTimeout(() => {
-							persistentExitResolver = null;
-							resolve(currentExitCode());
-						}, PERSISTENT_EXEC_TIMEOUT_MS),
-					),
-				]);
-				// Drain remaining microtasks + a macrotask turn so any final async output
-				// (the program's last stdout writes) flushes before teardown.
-				await new Promise((resolve) => setTimeout(resolve, 0));
-				await new Promise((resolve) => setTimeout(resolve, 0));
-				return { code };
-			}
-
-			const waitForActiveHandles = (globalThis as Record<string, unknown>)
-				._waitForActiveHandles as (() => Promise<void>) | undefined;
-			if (typeof waitForActiveHandles === "function") {
-				await waitForActiveHandles();
-			}
-
-			return {
-				code: currentExitCode(),
-			};
-		})();
-		const signalResult = new Promise<ExecResult>((resolve) => {
-			pendingExecutionSignals.set(executionId, (signal) => {
-				const code = defaultSignalExitCode(signal);
-				resolve({ code: code ?? 0 });
-			});
-		});
-
-		return await Promise.race([scriptResult, signalResult]);
-	} catch (err) {
-		const message = err instanceof Error ? err.message : String(err);
-		const exitMatch = message.match(/process\.exit\((\d+)\)/);
-		if (exitMatch) {
-			const exitCode = Number.parseInt(exitMatch[1], 10);
-			return {
-				code: exitCode,
-			};
-		}
-		// Include the stack (when present) so a guest program's load/runtime failure is
-		// diagnosable — a bare message ("argument must be of type Function") is useless
-		// for locating which call in a large bundle threw.
-		const detail = err instanceof Error && err.stack ? err.stack : message;
-		return {
-			code: 1,
-			errorMessage: boundErrorMessage(detail),
-		};
-	} finally {
-		const proc = getRuntimeProcess() as
-			| { __secureExecStopPtyStdio?: () => void }
-			| undefined;
-		proc?.__secureExecStopPtyStdio?.();
-		pendingExecutionSignals.delete(executionId);
-		activeProcessRequestId = previousProcessRequestId;
-		activeExecutionId = previousExecutionId;
-		activeCaptureStdio = previousCaptureStdio;
-		streamingStdinEnabled = false;
-		activeStdinPush = null;
-		activeStdinEnd = null;
-	}
-}
-
-async function runScript<T = unknown>(
-	executionId: string,
-	requestId: number,
-	code: string,
-	filePath?: string,
-	captureStdio = false,
-): Promise<RunResult<T>> {
-	const execResult = await execScript(
-		executionId,
-		requestId,
-		code,
-		{ filePath },
-		captureStdio,
-	);
-	const moduleObj = (globalThis as Record<string, unknown>).module as {
-		exports?: T;
-	};
-	return {
-		...execResult,
-		exports: moduleObj?.exports,
-	};
-}
-
-self.onmessage = async (event: MessageEvent<BrowserWorkerRequestMessage>) => {
-	const message = event.data;
-	try {
-		if (message.type === "init") {
-			if (
-				typeof message.controlToken !== "string" ||
-				message.controlToken.length === 0
-			) {
-				return;
-			}
-			if (controlToken && message.controlToken !== controlToken) {
-				return;
-			}
-			controlToken = message.controlToken;
-			await initRuntime(message.payload);
-			postResponse({
-				type: "response",
-				id: message.id,
-				ok: true,
-				result: true,
-			});
-			return;
-		}
-		if (!controlToken || message.controlToken !== controlToken) {
-			return;
-		}
-		if (!initialized) {
-			throw new Error("Sandbox worker not initialized");
-		}
-		if (message.type === "exec") {
-			postAsyncResponse(
-				message.id,
-				execScript(
-					message.payload.executionId,
-					message.id,
-					message.payload.code,
-					message.payload.options,
-					message.payload.captureStdio,
-				),
-			);
-			return;
-		}
-		// Host-driven streaming stdin for the active persistent execution.
-		if (message.type === "write-stdin") {
-			activeStdinPush?.(message.data);
-			return;
-		}
-		if (message.type === "end-stdin") {
-			activeStdinEnd?.();
-			return;
-		}
-		if (message.type === "resize-pty") {
-			resizeRuntimePty(message.executionId, message.columns, message.rows);
-			return;
-		}
-		if (message.type === "run") {
-			postAsyncResponse(
-				message.id,
-				runScript(
-					message.payload.executionId,
-					message.id,
-					message.payload.code,
-					message.payload.filePath,
-					message.payload.captureStdio,
-				),
-			);
-			return;
-		}
-		if (message.type === "signal") {
-			const signal = Number(message.payload.signal);
-			const resolveSignal = pendingExecutionSignals.get(
-				message.payload.executionId,
-			);
-			if (resolveSignal && Number.isInteger(signal)) {
-				resolveSignal(signal);
-			}
-			return;
-		}
-		if (message.type === "extension") {
-			const error = new Error(
-				`Browser worker extension dispatch is not implemented for namespace ${message.payload.namespace}`,
-			) as Error & { code?: string };
-			error.code = "ERR_SECURE_EXEC_BROWSER_EXTENSION_UNSUPPORTED";
-			throw error;
-		}
-		if (message.type === "dispose") {
-			postResponse({
-				type: "response",
-				id: message.id,
-				ok: true,
-				result: true,
-			});
-			close();
-		}
-	} catch (err) {
-		const error = err as { message?: string; stack?: string; code?: string };
-		postResponse({
-			type: "response",
-			id: message.id,
-			ok: false,
-			error: {
-				message: error?.message ?? String(err),
-				stack: error?.stack,
-				code: error?.code,
-			},
-		});
-	}
-};
diff --git a/packages/browser/tests/browser/converged-conformance.spec.ts b/packages/browser/tests/browser/converged-conformance.spec.ts
deleted file mode 100644
index 1ed21d728..000000000
--- a/packages/browser/tests/browser/converged-conformance.spec.ts
+++ /dev/null
@@ -1,119 +0,0 @@
-import { expect, test } from "@playwright/test";
-import { createRuntime, disposeAllRuntimes, execRuntime } from "./harness.js";
-
-// Runs conformance scenarios through the SAME harness API the legacy conformance
-// suite uses, but against the converged conformance harness (every runtime uses
-// the wasm kernel). This is the bridge to repointing the full conformance suite
-// at the converged path (item 2).
-
-test.afterEach(async ({ page }) => {
-	await disposeAllRuntimes(page);
-});
-
-test("runs fs + module + stdio + exit through the converged kernel harness", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-conformance-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const { runtimeId } = await createRuntime(page);
-	const code = [
-		"const fs = require('fs');",
-		"fs.mkdirSync('/c', { recursive: true });",
-		"fs.writeFileSync('/c/m.js', 'module.exports = 99;');",
-		"const m = require('/c/m.js');",
-		"process.stdout.write('val=' + m);",
-	].join("\n");
-
-	const response = (await execRuntime(page, runtimeId, code)) as {
-		result: { code?: number };
-		stdio: Array<{ channel?: string; message?: unknown }>;
-	};
-	const stdout = response.stdio
-		.filter((event) => event.channel === "stdout")
-		.map((event) => (typeof event.message === "string" ? event.message : ""))
-		.join("");
-
-	expect(stdout).toBe("val=99");
-	expect(response.result.code).toBe(0);
-});
-
-test("captures stderr and a non-zero exit code through the converged harness", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-conformance-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const { runtimeId } = await createRuntime(page);
-	const code = [
-		"process.stderr.write('boom');",
-		"process.exit(3);",
-	].join("\n");
-
-	const response = (await execRuntime(page, runtimeId, code)) as {
-		result: { code?: number };
-		stdio: Array<{ channel?: string; message?: unknown }>;
-	};
-	const stderr = response.stdio
-		.filter((event) => event.channel === "stderr")
-		.map((event) => (typeof event.message === "string" ? event.message : ""))
-		.join("");
-
-	expect(stderr).toBe("boom");
-	expect(response.result.code).toBe(3);
-});
-
-test("reuses one converged runtime across sequential executions", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-conformance-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const { runtimeId } = await createRuntime(page);
-	await execRuntime(
-		page,
-		runtimeId,
-		"require('fs').writeFileSync('/state.txt', 'persisted');",
-	);
-	const response = (await execRuntime(
-		page,
-		runtimeId,
-		"process.stdout.write(require('fs').readFileSync('/state.txt', 'utf8'));",
-	)) as {
-		result: { code?: number };
-		stdio: Array<{ channel?: string; message?: unknown }>;
-	};
-	const stdout = response.stdio
-		.filter((event) => event.channel === "stdout")
-		.map((event) => (typeof event.message === "string" ? event.message : ""))
-		.join("");
-
-	expect(stdout).toBe("persisted");
-	expect(response.result.code).toBe(0);
-});
-
-test("runs child_process via the host executor under the converged kernel", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-conformance-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const { runtimeId } = await createRuntime(page, { commandExecutor: "echo" });
-	const code = [
-		"const cp = require('child_process');",
-		"const r = cp.spawnSync('echo', ['hi-cp']);",
-		"process.stdout.write(new TextDecoder().decode(r.stdout));",
-	].join("\n");
-
-	const response = (await execRuntime(page, runtimeId, code)) as {
-		result: { code?: number };
-		stdio: Array<{ channel?: string; message?: unknown }>;
-	};
-	const stdout = response.stdio
-		.filter((event) => event.channel === "stdout")
-		.map((event) => (typeof event.message === "string" ? event.message : ""))
-		.join("");
-
-	expect(stdout.trim()).toBe("hi-cp");
-	expect(response.result.code).toBe(0);
-});
diff --git a/packages/browser/tests/browser/converged-runtime.spec.ts b/packages/browser/tests/browser/converged-runtime.spec.ts
deleted file mode 100644
index f00b4b7ee..000000000
--- a/packages/browser/tests/browser/converged-runtime.spec.ts
+++ /dev/null
@@ -1,86 +0,0 @@
-import { expect, test } from "@playwright/test";
-
-// End-to-end proof of the LIVE converged executor: a real BrowserRuntimeDriver
-// with the converged sidecar option runs a real guest whose filesystem syscalls
-// are serviced by the wasm kernel (not the legacy in-process TS kernel), in real
-// Chromium.
-
-test("runs a real guest whose fs syscalls hit the wasm kernel", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-runtime-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const result = await page.evaluate(async () => {
-		const harness = window.__convergedRuntimeHarness;
-		if (!harness) {
-			throw new Error("converged runtime harness not installed");
-		}
-		return harness.run();
-	});
-
-	expect(result.error).toBeUndefined();
-	expect(result.stdout).toBe("converged-live");
-	expect(result.exitCode).toBe(0);
-});
-
-test("runs a real guest that require()s a module resolved by the wasm kernel", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-runtime-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const result = await page.evaluate(async () => {
-		const harness = window.__convergedRuntimeHarness;
-		if (!harness) {
-			throw new Error("converged runtime harness not installed");
-		}
-		return harness.runRequire();
-	});
-
-	expect(result.error).toBeUndefined();
-	expect(result.stdout).toBe("42");
-	expect(result.exitCode).toBe(0);
-});
-
-test("runs a real guest doing dgram UDP loopback through the wasm kernel", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-runtime-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const result = await page.evaluate(async () => {
-		const harness = window.__convergedRuntimeHarness;
-		if (!harness) {
-			throw new Error("converged runtime harness not installed");
-		}
-		return harness.runDgram();
-	});
-
-	expect(result.error).toBeUndefined();
-	expect(result.stdout).toBe("live-dgram");
-	expect(result.exitCode).toBe(0);
-});
-
-test("runs a real guest exercising a broad fs surface through the wasm kernel", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-runtime-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const result = await page.evaluate(async () => {
-		const harness = window.__convergedRuntimeHarness;
-		if (!harness) {
-			throw new Error("converged runtime harness not installed");
-		}
-		return harness.runBroadFs();
-	});
-
-	expect(result.error).toBeUndefined();
-	expect(result.exitCode).toBe(0);
-	const parsed = JSON.parse(result.stdout);
-	expect(parsed.content).toBe("hello world");
-	expect(parsed.size).toBe(11);
-	expect(parsed.entries).toEqual(["b.txt"]);
-	expect(parsed.exists).toBe(true);
-});
diff --git a/packages/browser/tests/browser/converged-sidecar.spec.ts b/packages/browser/tests/browser/converged-sidecar.spec.ts
deleted file mode 100644
index ea0239379..000000000
--- a/packages/browser/tests/browser/converged-sidecar.spec.ts
+++ /dev/null
@@ -1,136 +0,0 @@
-import { expect, test } from "@playwright/test";
-
-// Drives the converged TypeScript stack against the REAL web-target wasm kernel
-// loaded on the main thread of a real Chromium page — the in-browser counterpart
-// to the Node integration test, proving guest filesystem syscalls route through
-// the wasm kernel in the actual target environment.
-
-test("routes guest filesystem syscalls through the wasm kernel in Chromium", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const result = await page.evaluate(async () => {
-		const harness = window.__convergedHarness;
-		if (!harness) {
-			throw new Error("converged harness not installed");
-		}
-		return harness.runFilesystem();
-	});
-
-	expect(result.readText).toBe("browser-converged");
-	expect(result.stat.size).toBe(17);
-	expect(result.stat.isDirectory).toBe(false);
-	const sorted = [...result.dir].sort((a, b) => a.name.localeCompare(b.name));
-	expect(sorted).toEqual([
-		{ name: "a.txt", isDirectory: false, isSymbolicLink: false },
-		{ name: "sub", isDirectory: true, isSymbolicLink: false },
-	]);
-});
-
-test("resolves modules through the wasm kernel filesystem in Chromium", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const result = await page.evaluate(async () => {
-		const harness = window.__convergedHarness;
-		if (!harness) {
-			throw new Error("converged harness not installed");
-		}
-		return harness.runModuleResolution();
-	});
-
-	expect(result.relative).toBe("/app/util.js");
-	expect(result.barePackage).toBe("/app/node_modules/left-pad/index.js");
-});
-
-test("routes guest TCP loopback through the wasm kernel in Chromium", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const result = await page.evaluate(async () => {
-		const harness = window.__convergedHarness;
-		if (!harness) {
-			throw new Error("converged harness not installed");
-		}
-		return harness.runNetLoopback();
-	});
-
-	expect(result.received).toBe("ping-loopback");
-});
-
-test("routes guest UDP loopback through the wasm kernel in Chromium", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const result = await page.evaluate(async () => {
-		const harness = window.__convergedHarness;
-		if (!harness) {
-			throw new Error("converged harness not installed");
-		}
-		return harness.runUdpLoopback();
-	});
-
-	expect(result.received).toBe("udp-datagram");
-	expect(result.remotePort).toBe(45612);
-});
-
-test("routes guest dgram.* socket ops through the wasm kernel in Chromium", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const result = await page.evaluate(async () => {
-		const harness = window.__convergedHarness;
-		if (!harness) {
-			throw new Error("converged harness not installed");
-		}
-		return harness.runDgramSocket();
-	});
-
-	expect(result.received).toBe("dgram-bridge");
-});
-
-test("enforces a declarative deny-fs-read policy in the wasm kernel", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const result = await page.evaluate(async () => {
-		const harness = window.__convergedHarness;
-		if (!harness) {
-			throw new Error("converged harness not installed");
-		}
-		return harness.runFsReadDenied();
-	});
-
-	expect(result.wrote).toBe(true);
-	expect(result.readDenied).toBe(true);
-});
-
-test("enforces a declarative deny-network-port policy in the wasm kernel", async ({
-	page,
-}) => {
-	await page.goto("/frontend/converged-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-
-	const result = await page.evaluate(async () => {
-		const harness = window.__convergedHarness;
-		if (!harness) {
-			throw new Error("converged harness not installed");
-		}
-		return harness.runNetPortDenied();
-	});
-
-	expect(result.deniedPortListen).toBe(true);
-	expect(result.allowedPortListen).toBe(true);
-});
diff --git a/packages/browser/tests/browser/fixtures/frontend/converged-conformance-harness.entry.ts b/packages/browser/tests/browser/fixtures/frontend/converged-conformance-harness.entry.ts
deleted file mode 100644
index 9c14425e7..000000000
--- a/packages/browser/tests/browser/fixtures/frontend/converged-conformance-harness.entry.ts
+++ /dev/null
@@ -1,405 +0,0 @@
-// Bundled converged conformance harness.
-//
-// Exposes the same window.__secureExecBrowserHarness API the conformance specs
-// drive (via harness.ts), but every runtime is created with the converged
-// sidecar so guest syscalls run against the wasm kernel instead of the legacy
-// in-process TS kernel. This is the vehicle for running the conformance suite
-// against the converged path (item 2). It is esbuild-bundled (the converged
-// modules import @secure-exec/core, which can't load unbundled from /dist).
-
-import {
-	allowAll,
-	createBrowserDriver,
-	createBrowserRuntimeDriverFactory,
-} from "../../../../src/index.js";
-import { createConvergedExecutionHostBridge } from "../../../../src/converged-execution-host-bridge.js";
-import { convergedPermissionsPolicy } from "../../../../src/converged-permissions.js";
-import { rootFilesystemConfigFromVfs } from "../../../../src/root-filesystem-from-vfs.js";
-import { decodeBase64 } from "../../../../src/converged-base64.js";
-
-const WASM_MODULE_URL = "/sidecar-wasm-web/secure_exec_sidecar_browser.js";
-const WASM_BINARY_URL = "/sidecar-wasm-web/secure_exec_sidecar_browser_bg.wasm";
-
-type StdioEvent = { channel?: string; message?: unknown; data?: unknown };
-
-interface ConvergedDriver {
-	exec(code: string, options?: unknown): Promise<{ code?: number }>;
-	dispose(): Promise<void> | void;
-	disposed?: boolean;
-	ready?: Promise<void>;
-	signalPendingExecution?(signal: number): boolean;
-	syncBridge?: { signalBuffer?: ArrayBufferLike };
-	pending?: Map<unknown, unknown>;
-	signalStates?: Map<string, Map<number, unknown>>;
-	worker?: { onmessage?: unknown; onerror?: unknown };
-	snapshotConvergedRootFilesystem?(): Promise<
-		Array<{
-			path: string;
-			kind: string;
-			content?: string;
-			encoding?: string;
-			target?: string;
-		}> | null
-	>;
-}
-
-interface PersistFs {
-	writeFile(path: string, content: string | Uint8Array): Promise<void>;
-	mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;
-	symlink(target: string, linkPath: string): Promise<void>;
-}
-
-interface ConvergedRuntimeRecord {
-	driver: ConvergedDriver;
-	decisions: { deniedFsReads: number };
-	persistTo?: PersistFs;
-}
-
-function debugRuntime(driver: ConvergedDriver) {
-	const signalState = driver.syncBridge?.signalBuffer
-		? Array.from(new Int32Array(driver.syncBridge.signalBuffer))
-		: [];
-	const signalHandlers = Array.from(driver.signalStates?.entries?.() ?? []).map(
-		([executionId, handlers]) => ({
-			executionId,
-			handlers: Array.from(handlers.entries()).map(([signal, registration]) => ({
-				signal,
-				...(registration as object),
-			})),
-		}),
-	);
-	return {
-		disposed: Boolean(driver.disposed),
-		pendingCount: driver.pending?.size ?? 0,
-		signalState,
-		signalHandlers,
-		workerOnmessage: driver.worker?.onmessage === null ? "null" : "set",
-		workerOnerror: driver.worker?.onerror === null ? "null" : "set",
-	};
-}
-
-declare global {
-	interface Window {
-		__secureExecBrowserHarness?: unknown;
-	}
-}
-
-let nextRuntimeId = 1;
-const runtimes = new Map<string, ConvergedRuntimeRecord>();
-
-async function loadSidecar(): Promise<{
-	pushFrame: (frame: Uint8Array) => Uint8Array;
-	setNextExecutionId: (executionId: string) => void;
-}> {
-	const wasmModule = await import(/* @vite-ignore */ WASM_MODULE_URL);
-	await wasmModule.default(WASM_BINARY_URL);
-	const host = createConvergedExecutionHostBridge();
-	const sidecar = new wasmModule.BrowserSidecarWasm(host.bridge);
-	return {
-		pushFrame: (frame: Uint8Array) => {
-			const response = sidecar.pushFrame(frame);
-			if (!(response instanceof Uint8Array)) {
-				throw new Error("wasm sidecar returned no response frame");
-			}
-			return response;
-		},
-		setNextExecutionId: host.setNextExecutionId,
-	};
-}
-
-function permissionDenials(options: Record<string, unknown>) {
-	return {
-		denyFsRead: Boolean(options.denyFsRead),
-		denyChildProcess: Boolean(options.denyChildProcess),
-		denyNetwork: Boolean(options.denyNetwork),
-		denyNetworkPort:
-			typeof options.denyNetworkPort === "number"
-				? (options.denyNetworkPort as number)
-				: undefined,
-	};
-}
-
-// Mirrors the legacy harness echo executor so child_process conformance scenarios
-// (which run via the legacy commandExecutor host capability, not the kernel) work
-// against the converged harness too.
-function createEchoCommandExecutor() {
-	return {
-		spawn(
-			command: string,
-			args: string[],
-			options: {
-				onStdout?: (data: Uint8Array) => void;
-				onStderr?: (data: Uint8Array) => void;
-			} = {},
-		) {
-			let stdout = "";
-			let stderr = "";
-			let exitCode = 0;
-			let stdin = "";
-			let resolveWait: (() => void) | undefined;
-			let waitPromise: Promise<void> = Promise.resolve();
-			if (command === "echo") {
-				stdout = `${args.join(" ")}\n`;
-			} else if (command === "wait-signal") {
-				waitPromise = new Promise((resolve) => {
-					resolveWait = resolve;
-				});
-			} else {
-				stderr = `command not found: ${command}\n`;
-				exitCode = 127;
-			}
-			queueMicrotask(() => {
-				if (stdout) options.onStdout?.(new TextEncoder().encode(stdout));
-				if (stderr) options.onStderr?.(new TextEncoder().encode(stderr));
-			});
-			return {
-				async wait() {
-					await waitPromise;
-					return exitCode;
-				},
-				writeStdin(data: string | Uint8Array) {
-					stdin += typeof data === "string" ? data : new TextDecoder().decode(data);
-				},
-				closeStdin() {
-					if (command === "cat" && stdin) {
-						options.onStdout?.(new TextEncoder().encode(stdin));
-					}
-				},
-				kill(signal = 15) {
-					const signalNumber = Number(signal) || 15;
-					exitCode = 128 + signalNumber;
-					options.onStdout?.(
-						new TextEncoder().encode(`signal:${signalNumber}\n`),
-					);
-					resolveWait?.();
-				},
-			};
-		},
-	};
-}
-
-async function createRuntime(options: Record<string, unknown> = {}) {
-	// child_process is a host capability (the commandExecutor), gated by the
-	// driver's permission policy rather than the wasm kernel; keep its denial on
-	// the driver while fs/network denials go to the kernel config below.
-	const driverPermissions = options.denyChildProcess
-		? {
-				...allowAll,
-				childProcess: () => ({ allow: false, reason: "harness deny" }),
-			}
-		: allowAll;
-	const system = await createBrowserDriver({
-		filesystem: (options.filesystem as "memory" | "opfs") ?? "memory",
-		permissions: driverPermissions as never,
-		useDefaultNetwork: Boolean(options.useDefaultNetwork),
-	});
-	if (options.commandExecutor === "echo") {
-		(system as { commandExecutor?: unknown }).commandExecutor =
-			createEchoCommandExecutor();
-	}
-	(system as { runtime?: unknown }).runtime = {
-		process: options.processConfig ?? {},
-		os: options.osConfig ?? {},
-	};
-
-	const config = {
-		rootFilesystem: await rootFilesystemConfigFromVfs(
-			(system as { filesystem: Parameters<typeof rootFilesystemConfigFromVfs>[0] })
-				.filesystem,
-		),
-		permissions: convergedPermissionsPolicy(permissionDenials(options)),
-	} as never;
-
-	const decisions = { deniedFsReads: 0 };
-	const factory = createBrowserRuntimeDriverFactory({
-		workerUrl: new URL("/secure-exec-worker.js", window.location.href),
-		convergedSidecar: {
-			loadSidecar,
-			config,
-			onFsReadDenied: () => {
-				decisions.deniedFsReads += 1;
-			},
-		},
-	});
-	const driver = factory.createRuntimeDriver({
-		system,
-		runtime: (system as { runtime: unknown }).runtime,
-	} as never) as ConvergedRuntimeRecord["driver"];
-
-	const runtimeId = `converged-runtime-${nextRuntimeId++}`;
-	runtimes.set(runtimeId, {
-		driver,
-		decisions,
-		// Persist the converged VM fs back to the host filesystem (e.g. OPFS) on
-		// dispose so data survives across runtimes, matching the legacy model.
-		persistTo:
-			options.filesystem === "opfs"
-				? ((system as { filesystem: PersistFs }).filesystem)
-				: undefined,
-	});
-	return {
-		crossOriginIsolated: window.crossOriginIsolated,
-		runtimeId,
-		workerUrl: "/secure-exec-worker.js",
-	};
-}
-
-function getRuntime(runtimeId: string): ConvergedRuntimeRecord {
-	const runtime = runtimes.get(runtimeId);
-	if (!runtime) {
-		throw new Error(`unknown converged runtime: ${runtimeId}`);
-	}
-	return runtime;
-}
-
-async function exec(runtimeId: string, code: string, options: Record<string, unknown> = {}) {
-	const runtime = getRuntime(runtimeId);
-	const stdio: StdioEvent[] = [];
-	const result = await runtime.driver.exec(code, {
-		...options,
-		onStdio: (event: unknown) => stdio.push(event as StdioEvent),
-	});
-	return {
-		crossOriginIsolated: window.crossOriginIsolated,
-		result,
-		stdio,
-		permissionDecisions: { deniedFsReads: runtime.decisions.deniedFsReads },
-	};
-}
-
-async function disposeRuntime(runtimeId: string) {
-	const runtime = runtimes.get(runtimeId);
-	if (!runtime) {
-		return;
-	}
-	if (runtime.persistTo && runtime.driver.snapshotConvergedRootFilesystem) {
-		const entries = await runtime.driver.snapshotConvergedRootFilesystem();
-		if (entries) {
-			await persistEntries(entries, runtime.persistTo);
-		}
-	}
-	await runtime.driver.dispose();
-	runtimes.delete(runtimeId);
-}
-
-async function persistEntries(
-	entries: Array<{
-		path: string;
-		kind: string;
-		content?: string;
-		encoding?: string;
-		target?: string;
-	}>,
-	fs: PersistFs,
-) {
-	for (const entry of entries) {
-		if (entry.path === "/" || entry.path.startsWith("/dev") || entry.path.startsWith("/proc")) {
-			continue;
-		}
-		if (entry.kind === "directory") {
-			await fs.mkdir(entry.path, { recursive: true }).catch(() => undefined);
-		} else if (entry.kind === "symlink" && entry.target) {
-			await fs.symlink(entry.target, entry.path).catch(() => undefined);
-		} else if (entry.kind === "file") {
-			const content =
-				entry.encoding === "base64"
-					? decodeBase64(entry.content ?? "")
-					: (entry.content ?? "");
-			await fs.writeFile(entry.path, content).catch(() => undefined);
-		}
-	}
-}
-
-async function disposeAllRuntimes() {
-	for (const runtimeId of Array.from(runtimes.keys())) {
-		await disposeRuntime(runtimeId);
-	}
-}
-
-async function runPending(
-	runtimeId: string,
-	code: string,
-	delayMs: number,
-	act: (driver: ConvergedDriver) => unknown,
-) {
-	const { driver } = getRuntime(runtimeId);
-	await driver.ready;
-	let outcome = "resolved";
-	let resultCode: number | null = null;
-	let errorMessage: string | null = null;
-	const pending = driver.exec(code).then(
-		(result) => {
-			resultCode = result.code ?? null;
-		},
-		(error: unknown) => {
-			outcome = "rejected";
-			errorMessage = error instanceof Error ? error.message : String(error);
-		},
-	);
-	await new Promise((resolve) => setTimeout(resolve, delayMs));
-	const acted = act(driver);
-	await pending;
-	return { outcome, resultCode, errorMessage, acted, debug: debugRuntime(driver) };
-}
-
-async function terminatePendingExec(runtimeId: string, code: string, delayMs = 25) {
-	return runPending(runtimeId, code, delayMs, (driver) => driver.dispose());
-}
-
-async function signalPendingExec(
-	runtimeId: string,
-	code: string,
-	signal = 15,
-	delayMs = 25,
-) {
-	const result = await runPending(runtimeId, code, delayMs, (driver) =>
-		driver.signalPendingExecution?.(signal),
-	);
-	return { ...result, signaled: result.acted };
-}
-
-async function debugPendingExec(runtimeId: string, code: string, delayMs = 25) {
-	const { driver } = getRuntime(runtimeId);
-	const pendingResult = await runPending(runtimeId, code, delayMs, (d) => {
-		const snapshot = debugRuntime(d);
-		d.dispose();
-		return snapshot;
-	});
-	return { ...pendingResult, debug: pendingResult.acted };
-}
-
-function runtimeDebug(runtimeId: string) {
-	return debugRuntime(getRuntime(runtimeId).driver);
-}
-
-async function smoke() {
-	const { runtimeId } = await createRuntime({});
-	const result = await exec(
-		runtimeId,
-		"process.stdout.write('harness-ready\\n');",
-	);
-	await disposeRuntime(runtimeId);
-	return {
-		crossOriginIsolated: window.crossOriginIsolated,
-		workerUrl: "/secure-exec-worker.js",
-		result: result.result,
-		stdio: result.stdio,
-	};
-}
-
-window.__secureExecBrowserHarness = {
-	createRuntime,
-	exec,
-	disposeRuntime,
-	disposeAllRuntimes,
-	terminatePendingExec,
-	signalPendingExec,
-	debugPendingExec,
-	runtimeDebug,
-	smoke,
-};
-
-const status = document.getElementById("harness-status");
-if (status) {
-	status.textContent = "ready";
-}
diff --git a/packages/browser/tests/browser/fixtures/frontend/converged-conformance-harness.html b/packages/browser/tests/browser/fixtures/frontend/converged-conformance-harness.html
deleted file mode 100644
index aa0e21ca1..000000000
--- a/packages/browser/tests/browser/fixtures/frontend/converged-conformance-harness.html
+++ /dev/null
@@ -1,11 +0,0 @@
-<!doctype html>
-<html lang="en">
-	<head>
-		<meta charset="utf-8" />
-		<title>secure-exec converged conformance harness</title>
-	</head>
-	<body>
-		<div id="harness-status">loading</div>
-		<script type="module" src="/secure-exec-converged-conformance-harness.js"></script>
-	</body>
-</html>
diff --git a/packages/browser/tests/browser/fixtures/frontend/converged-harness.entry.ts b/packages/browser/tests/browser/fixtures/frontend/converged-harness.entry.ts
deleted file mode 100644
index b23933008..000000000
--- a/packages/browser/tests/browser/fixtures/frontend/converged-harness.entry.ts
+++ /dev/null
@@ -1,305 +0,0 @@
-// Converged in-browser harness entry (esbuild-bundled).
-//
-// Loads the real web-target wasm sidecar kernel on the main thread and drives it
-// through the converged TypeScript stack (ConvergedExecutorSession +
-// ConvergedSyncBridgeHandler), proving the converged path runs in a real browser
-// — not just Node. The Playwright spec calls `window.__convergedHarness`.
-
-import { ConvergedExecutorSession } from "../../../../src/converged-executor-session.js";
-import { ConvergedModuleServicer } from "../../../../src/converged-module-servicer.js";
-import { KernelBackedFilesystem } from "../../../../src/kernel-backed-filesystem.js";
-import { createConvergedExecutionHostBridge } from "../../../../src/converged-execution-host-bridge.js";
-import { convergedPermissionsPolicy } from "../../../../src/converged-permissions.js";
-import { decodeBase64 } from "../../../../src/converged-base64.js";
-
-const WASM_BASE = "/sidecar-wasm-web";
-const WASM_MODULE_URL = `${WASM_BASE}/secure_exec_sidecar_browser.js`;
-const WASM_BINARY_URL = `${WASM_BASE}/secure_exec_sidecar_browser_bg.wasm`;
-
-declare global {
-	interface Window {
-		__convergedHarness?: {
-			runFilesystem(): Promise<{
-				readText: string;
-				stat: { size: number; isDirectory: boolean };
-				dir: Array<{ name: string; isDirectory: boolean }>;
-			}>;
-			runModuleResolution(): Promise<{
-				relative: string | null;
-				barePackage: string | null;
-			}>;
-			runNetLoopback(): Promise<{ received: string }>;
-			runUdpLoopback(): Promise<{ received: string; remotePort: number }>;
-			runDgramSocket(): Promise<{ received: string }>;
-			runFsReadDenied(): Promise<{ wrote: boolean; readDenied: boolean }>;
-			runNetPortDenied(): Promise<{
-				deniedPortListen: boolean;
-				allowedPortListen: boolean;
-			}>;
-		};
-	}
-}
-
-async function loadSidecar(hostBridge?: unknown): Promise<{
-	pushFrame: (frame: Uint8Array) => Uint8Array;
-}> {
-	// Marked external in the esbuild bundle so it loads from the served URL at
-	// runtime (wasm-bindgen web output fetches its own .wasm).
-	const wasmModule = await import(/* @vite-ignore */ WASM_MODULE_URL);
-	await wasmModule.default(WASM_BINARY_URL);
-	const sidecar = new wasmModule.BrowserSidecarWasm(hostBridge);
-	return {
-		pushFrame: (frame: Uint8Array) => {
-			const response = sidecar.pushFrame(frame);
-			if (!(response instanceof Uint8Array)) {
-				throw new Error("wasm sidecar returned no response frame");
-			}
-			return response;
-		},
-	};
-}
-
-async function bootstrapSession() {
-	const { pushFrame } = await loadSidecar();
-	const session = new ConvergedExecutorSession({ pushFrame, codec: "bare" });
-	session.bootstrap({
-		runtime: "java_script",
-		config: { permissions: { fs: "allow", network: "allow" } } as never,
-	});
-	return session;
-}
-
-window.__convergedHarness = {
-	async runFilesystem() {
-		const handler = (await bootstrapSession()).handlerForExecution("exec-1");
-		handler.handle("fs.mkdir", ["/work"]);
-		handler.handle("fs.writeFile", ["/work/a.txt", "browser-converged"]);
-		handler.handle("fs.mkdir", ["/work/sub"]);
-		const read = handler.handle("fs.readFile", ["/work/a.txt"]);
-		const stat = handler.handle("fs.stat", ["/work/a.txt"]);
-		const dir = handler.handle("fs.readDir", ["/work"]);
-		return {
-			readText:
-				read.kind === 1 /* TEXT */ ? String(read.value) : "<non-text>",
-			stat:
-				stat.kind === 3 /* JSON */
-					? (stat.value as { size: number; isDirectory: boolean })
-					: { size: -1, isDirectory: false },
-			dir:
-				dir.kind === 3
-					? (dir.value as Array<{ name: string; isDirectory: boolean }>)
-					: [],
-		};
-	},
-
-	async runModuleResolution() {
-		const session = await bootstrapSession();
-		const handler = session.handlerForExecution("exec-1");
-		// Seed a package layout in the kernel filesystem.
-		handler.handle("fs.mkdir", ["/app"]);
-		handler.handle("fs.writeFile", ["/app/index.js", "require('./util')"]);
-		handler.handle("fs.writeFile", ["/app/util.js", "module.exports = 1"]);
-		handler.handle("fs.mkdir", ["/app/node_modules"]);
-		handler.handle("fs.mkdir", ["/app/node_modules/left-pad"]);
-		handler.handle("fs.writeFile", [
-			"/app/node_modules/left-pad/package.json",
-			JSON.stringify({ name: "left-pad", main: "index.js" }),
-		]);
-		handler.handle("fs.writeFile", [
-			"/app/node_modules/left-pad/index.js",
-			"module.exports = () => {}",
-		]);
-
-		const moduleServicer = new ConvergedModuleServicer(
-			new KernelBackedFilesystem(session.transportForVm()),
-		);
-		const relative = await moduleServicer.handle("module.resolve", [
-			"./util",
-			"/app/index.js",
-			"require",
-		]);
-		const barePackage = await moduleServicer.handle("module.resolve", [
-			"left-pad",
-			"/app/index.js",
-			"require",
-		]);
-		const text = (value: { kind: number; value?: unknown }) =>
-			value.kind === 1 ? String(value.value) : null;
-		return {
-			relative: text(relative),
-			barePackage: text(barePackage),
-		};
-	},
-
-	async runNetLoopback() {
-		const handler = await bootstrapNetHandler();
-		const json = (value: { kind: number; value?: unknown }) =>
-			value.kind === 3 ? (value.value as Record<string, unknown>) : {};
-		const listener = json(
-			handler.handle("net.listen", [{ host: "127.0.0.1", port: 39555 }]),
-		);
-		const client = json(
-			handler.handle("net.connect", [{ host: "127.0.0.1", port: 39555 }]),
-		);
-		const accepted = json(
-			handler.handle("net.accept", [{ socketId: listener.socketId }]),
-		);
-		handler.handle("net.write", [
-			{ socketId: client.socketId, data: new TextEncoder().encode("ping-loopback") },
-		]);
-		const read = json(
-			handler.handle("net.read", [{ socketId: accepted.socketId }]),
-		);
-		const received =
-			typeof read.data === "string"
-				? new TextDecoder().decode(decodeBase64(read.data))
-				: "";
-		return { received };
-	},
-
-	async runUdpLoopback() {
-		const handler = await bootstrapNetHandler();
-		const json = (value: { kind: number; value?: unknown }) =>
-			value.kind === 3 ? (value.value as Record<string, unknown>) : {};
-		const receiver = json(
-			handler.handle("net.udp_bind", [{ host: "127.0.0.1", port: 45611 }]),
-		);
-		const sender = json(
-			handler.handle("net.udp_bind", [{ host: "127.0.0.1", port: 45612 }]),
-		);
-		handler.handle("net.send_to", [
-			{
-				socketId: sender.socketId,
-				host: "127.0.0.1",
-				port: 45611,
-				data: new TextEncoder().encode("udp-datagram"),
-			},
-		]);
-		const recv = json(
-			handler.handle("net.recv_from", [{ socketId: receiver.socketId }]),
-		);
-		const received =
-			typeof recv.data === "string"
-				? new TextDecoder().decode(decodeBase64(recv.data))
-				: "";
-		return { received, remotePort: Number(recv.remotePort ?? -1) };
-	},
-
-	async runDgramSocket() {
-		// Exercises the converged dgram bridge with the EXACT worker dgram.* op
-		// shapes (positional args) -> kernel UDP, in real Chromium.
-		const handler = await bootstrapNetHandler();
-		const json = (value: { kind: number; value?: unknown }) =>
-			value.kind === 3 ? (value.value as Record<string, unknown>) : {};
-		const receiver = json(handler.handle("dgram.create", [{ type: "udp4" }]));
-		handler.handle("dgram.bind", [
-			receiver.socketId,
-			{ port: 46811, address: "127.0.0.1" },
-		]);
-		const sender = json(handler.handle("dgram.create", [{ type: "udp4" }]));
-		handler.handle("dgram.send", [
-			sender.socketId,
-			new TextEncoder().encode("dgram-bridge"),
-			{ port: 46811, address: "127.0.0.1" },
-		]);
-		const message = handler.handle("dgram.recv", [receiver.socketId, 0]);
-		const value =
-			message.kind === 3
-				? (message.value as { type?: string; data?: unknown } | null)
-				: null;
-		const received =
-			value && value.type === "message" && typeof value.data === "string"
-				? new TextDecoder().decode(decodeBase64(value.data))
-				: "";
-		return { received };
-	},
-
-	async runFsReadDenied() {
-		// The kernel enforces a declarative deny-fs-read policy: writes succeed,
-		// reads are denied. Validates convergedPermissionsPolicy end to end.
-		const { pushFrame } = await loadSidecar();
-		const session = new ConvergedExecutorSession({ pushFrame, codec: "bare" });
-		session.bootstrap({
-			runtime: "java_script",
-			config: {
-				permissions: convergedPermissionsPolicy({ denyFsRead: true }),
-			} as never,
-		});
-		const handler = session.handlerForExecution("exec-perms");
-		let wrote = false;
-		try {
-			handler.handle("fs.writeFile", ["/denied.txt", "data"]);
-			wrote = true;
-		} catch {
-			wrote = false;
-		}
-		let readDenied = false;
-		try {
-			handler.handle("fs.readFile", ["/denied.txt"]);
-		} catch {
-			readDenied = true;
-		}
-		return { wrote, readDenied };
-	},
-
-	async runNetPortDenied() {
-		// The kernel enforces a declarative deny-network-port policy: listening on
-		// the denied port fails, another port succeeds.
-		const host = createConvergedExecutionHostBridge();
-		host.setNextExecutionId("exec-perms-net");
-		const { pushFrame } = await loadSidecar(host.bridge);
-		const session = new ConvergedExecutorSession({ pushFrame, codec: "bare" });
-		session.bootstrap({
-			runtime: "java_script",
-			config: {
-				permissions: convergedPermissionsPolicy({ denyNetworkPort: 39999 }),
-			} as never,
-		});
-		session.registerExecution({ processId: "exec-perms-net", args: ["node"] });
-		const handler = session.handlerForExecution("exec-perms-net");
-
-		let deniedPortListen = false;
-		try {
-			handler.handle("net.listen", [{ host: "127.0.0.1", port: 39999 }]);
-		} catch {
-			deniedPortListen = true;
-		}
-		let allowedPortListen = false;
-		try {
-			handler.handle("net.listen", [{ host: "127.0.0.1", port: 40001 }]);
-			allowedPortListen = true;
-		} catch {
-			allowedPortListen = false;
-		}
-		return { deniedPortListen, allowedPortListen };
-	},
-};
-
-async function bootstrapNetHandler() {
-	// Construct the sidecar WITH an execution host bridge so an execute wire
-	// request can register a kernel process for net/udp syscalls.
-	const host = createConvergedExecutionHostBridge();
-	host.setNextExecutionId("exec-net");
-	const { pushFrame } = await loadSidecar(host.bridge);
-	const session = new ConvergedExecutorSession({ pushFrame, codec: "bare" });
-	session.bootstrap({
-		runtime: "java_script",
-		config: {
-			permissions: {
-				fs: "allow",
-				network: "allow",
-				childProcess: "allow",
-				process: "allow",
-				env: "allow",
-				binding: "allow",
-			},
-		} as never,
-	});
-	session.registerExecution({ processId: "exec-net", args: ["node"] });
-	return session.handlerForExecution("exec-net");
-}
-
-const status = document.getElementById("harness-status");
-if (status) {
-	status.textContent = "ready";
-}
diff --git a/packages/browser/tests/browser/fixtures/frontend/converged-harness.html b/packages/browser/tests/browser/fixtures/frontend/converged-harness.html
deleted file mode 100644
index 8abc901e4..000000000
--- a/packages/browser/tests/browser/fixtures/frontend/converged-harness.html
+++ /dev/null
@@ -1,11 +0,0 @@
-<!doctype html>
-<html lang="en">
-	<head>
-		<meta charset="utf-8" />
-		<title>secure-exec converged sidecar harness</title>
-	</head>
-	<body>
-		<div id="harness-status">loading</div>
-		<script type="module" src="/secure-exec-converged-harness.js"></script>
-	</body>
-</html>
diff --git a/packages/browser/tests/browser/fixtures/frontend/converged-runtime-harness.entry.ts b/packages/browser/tests/browser/fixtures/frontend/converged-runtime-harness.entry.ts
deleted file mode 100644
index 81cd23706..000000000
--- a/packages/browser/tests/browser/fixtures/frontend/converged-runtime-harness.entry.ts
+++ /dev/null
@@ -1,181 +0,0 @@
-// Bundled live converged runtime harness.
-//
-// Creates a real BrowserRuntimeDriver with the converged sidecar option (so the
-// guest's sync-bridge syscalls are serviced by the wasm kernel), runs a real
-// guest that performs filesystem I/O, and reports its stdout/exit. This is the
-// end-to-end proof of the live converged executor path (slice 2n) in Chromium.
-
-import {
-	allowAll,
-	createBrowserDriver,
-	createBrowserRuntimeDriverFactory,
-} from "../../../../src/index.js";
-import { rootFilesystemConfigFromVfs } from "../../../../src/root-filesystem-from-vfs.js";
-import { createConvergedExecutionHostBridge } from "../../../../src/converged-execution-host-bridge.js";
-
-const WASM_MODULE_URL = "/sidecar-wasm-web/secure_exec_sidecar_browser.js";
-const WASM_BINARY_URL = "/sidecar-wasm-web/secure_exec_sidecar_browser_bg.wasm";
-
-declare global {
-	interface Window {
-		__convergedRuntimeHarness?: {
-			run(): Promise<{
-				stdout: string;
-				exitCode: number;
-				error?: string;
-				raw?: unknown;
-			}>;
-			runRequire(): Promise<{
-				stdout: string;
-				exitCode: number;
-				error?: string;
-			}>;
-			runDgram(): Promise<{
-				stdout: string;
-				exitCode: number;
-				error?: string;
-			}>;
-			runBroadFs(): Promise<{
-				stdout: string;
-				exitCode: number;
-				error?: string;
-			}>;
-		};
-	}
-}
-
-async function loadSidecar(): Promise<{
-	pushFrame: (frame: Uint8Array) => Uint8Array;
-	setNextExecutionId: (executionId: string) => void;
-}> {
-	const wasmModule = await import(/* @vite-ignore */ WASM_MODULE_URL);
-	await wasmModule.default(WASM_BINARY_URL);
-	const host = createConvergedExecutionHostBridge();
-	const sidecar = new wasmModule.BrowserSidecarWasm(host.bridge);
-	return {
-		pushFrame: (frame: Uint8Array) => {
-			const response = sidecar.pushFrame(frame);
-			if (!(response instanceof Uint8Array)) {
-				throw new Error("wasm sidecar returned no response frame");
-			}
-			return response;
-		},
-		setNextExecutionId: host.setNextExecutionId,
-	};
-}
-
-const FS_GUEST_CODE = [
-	"const fs = require('fs');",
-	"fs.mkdirSync('/work', { recursive: true });",
-	"fs.writeFileSync('/work/x.txt', 'converged-live');",
-	"process.stdout.write(fs.readFileSync('/work/x.txt', 'utf8'));",
-].join("\n");
-
-// Writes a module to the kernel fs then require()s it back — exercising
-// converged module resolution (kernel-backed resolver) from a running guest.
-const REQUIRE_GUEST_CODE = [
-	"const fs = require('fs');",
-	"fs.mkdirSync('/app', { recursive: true });",
-	"fs.writeFileSync('/app/dep.js', 'module.exports = 21 * 2;');",
-	"const dep = require('/app/dep.js');",
-	"process.stdout.write(String(dep));",
-].join("\n");
-
-// A real guest doing UDP loopback through dgram — its dgram.* syscalls hit the
-// wasm kernel via the converged driver (which lazily registers the execution).
-// Exercises a broad fs conformance surface (write/append/stat/readdir/rename/
-// exists/read) through the converged kernel from a running guest.
-const BROAD_FS_GUEST_CODE = [
-	"const fs = require('fs');",
-	"fs.mkdirSync('/d', { recursive: true });",
-	"fs.writeFileSync('/d/a.txt', 'hello world');",
-	"const size = fs.statSync('/d/a.txt').size;",
-	"fs.renameSync('/d/a.txt', '/d/b.txt');",
-	"const entries = fs.readdirSync('/d');",
-	"const exists = fs.existsSync('/d/b.txt');",
-	"const content = fs.readFileSync('/d/b.txt', 'utf8');",
-	"process.stdout.write(JSON.stringify({ content, size, entries, exists }));",
-].join("\n");
-
-const DGRAM_GUEST_CODE = [
-	"const dgram = require('dgram');",
-	"const sock = dgram.createSocket('udp4');",
-	"sock.on('message', (msg) => { process.stdout.write(new TextDecoder().decode(msg)); sock.close(); });",
-	"sock.bind(46911, '127.0.0.1', () => {",
-	"  sock.send(new TextEncoder().encode('live-dgram'), 46911, '127.0.0.1');",
-	"});",
-].join("\n");
-
-async function execConvergedGuest(
-	code: string,
-): Promise<{ stdout: string; exitCode: number; error?: string }> {
-	const system = await createBrowserDriver({
-		filesystem: "memory",
-		permissions: allowAll,
-	});
-	(system as { runtime?: unknown }).runtime = { process: {}, os: {} };
-
-	const config = {
-		rootFilesystem: await rootFilesystemConfigFromVfs(
-			(system as { filesystem: Parameters<typeof rootFilesystemConfigFromVfs>[0] })
-				.filesystem,
-		),
-		permissions: {
-			fs: "allow",
-			network: "allow",
-			childProcess: "allow",
-			process: "allow",
-			env: "allow",
-			binding: "allow",
-		},
-	} as never;
-
-	const factory = createBrowserRuntimeDriverFactory({
-		workerUrl: new URL("/secure-exec-worker.js", window.location.href),
-		convergedSidecar: { loadSidecar, config },
-	});
-
-	const stdio: Array<{ channel?: string; message?: unknown; data?: unknown }> =
-		[];
-	const driver = factory.createRuntimeDriver({
-		system,
-		runtime: (system as { runtime: { process: unknown; os: unknown } }).runtime,
-		onStdio: (event: unknown) => stdio.push(event as never),
-	} as never);
-
-	try {
-		const result = (await driver.exec(code, {
-			onStdio: (event: unknown) => stdio.push(event as never),
-		})) as { code?: number; exitCode?: number };
-		const decoder = new TextDecoder();
-		const stdout = stdio
-			.filter((event) => event.channel === "stdout")
-			.map((event) => {
-				const payload = event.message ?? event.data;
-				if (typeof payload === "string") return payload;
-				if (payload instanceof Uint8Array) return decoder.decode(payload);
-				return "";
-			})
-			.join("");
-		return { stdout, exitCode: result.code ?? result.exitCode ?? -1 };
-	} catch (error) {
-		return {
-			stdout: "",
-			exitCode: -1,
-			error:
-				error instanceof Error ? error.stack || error.message : String(error),
-		};
-	}
-}
-
-window.__convergedRuntimeHarness = {
-	run: () => execConvergedGuest(FS_GUEST_CODE),
-	runRequire: () => execConvergedGuest(REQUIRE_GUEST_CODE),
-	runDgram: () => execConvergedGuest(DGRAM_GUEST_CODE),
-	runBroadFs: () => execConvergedGuest(BROAD_FS_GUEST_CODE),
-};
-
-const status = document.getElementById("harness-status");
-if (status) {
-	status.textContent = "ready";
-}
diff --git a/packages/browser/tests/browser/fixtures/frontend/converged-runtime-harness.html b/packages/browser/tests/browser/fixtures/frontend/converged-runtime-harness.html
deleted file mode 100644
index 5ec93ed20..000000000
--- a/packages/browser/tests/browser/fixtures/frontend/converged-runtime-harness.html
+++ /dev/null
@@ -1,11 +0,0 @@
-<!doctype html>
-<html lang="en">
-	<head>
-		<meta charset="utf-8" />
-		<title>secure-exec converged runtime harness</title>
-	</head>
-	<body>
-		<div id="harness-status">loading</div>
-		<script type="module" src="/secure-exec-converged-runtime-harness.js"></script>
-	</body>
-</html>
diff --git a/packages/browser/tests/browser/harness.smoke.spec.ts b/packages/browser/tests/browser/harness.smoke.spec.ts
deleted file mode 100644
index e434b056c..000000000
--- a/packages/browser/tests/browser/harness.smoke.spec.ts
+++ /dev/null
@@ -1,20 +0,0 @@
-import { expect, test } from "@playwright/test";
-import { openHarnessPage, smokeHarness } from "./harness.js";
-
-test("playground harness boots a real browser runtime in Chromium", async ({
-	page,
-}) => {
-	await openHarnessPage(page);
-
-	const result = await smokeHarness(page);
-
-	expect(result.crossOriginIsolated).toBe(true);
-	expect(result.workerUrl).toContain("/secure-exec-worker.js");
-	expect(result.result.code).toBe(0);
-	expect(result.stdio).toEqual([
-		{
-			channel: "stdout",
-			message: "harness-ready\n",
-		},
-	]);
-});
diff --git a/packages/browser/tests/browser/harness.ts b/packages/browser/tests/browser/harness.ts
deleted file mode 100644
index e6b58d53f..000000000
--- a/packages/browser/tests/browser/harness.ts
+++ /dev/null
@@ -1,276 +0,0 @@
-import { expect, type Page } from "@playwright/test";
-import type {
-	ExecOptions,
-	OSConfig,
-	ProcessConfig,
-	TimingMitigation,
-} from "../../src/runtime.js";
-
-export type HarnessStdioEvent = {
-	channel: "stdout" | "stderr";
-	message: string;
-};
-
-export type HarnessCreateRuntimeOptions = {
-	filesystem?: "memory" | "opfs";
-	timingMitigation?: TimingMitigation;
-	commandExecutor?: "echo";
-	denyFsRead?: boolean;
-	denyChildProcess?: boolean;
-	denyNetwork?: boolean;
-	denyNetworkPort?: number;
-	payloadLimits?: {
-		base64TransferBytes?: number;
-		jsonPayloadBytes?: number;
-	};
-	useDefaultNetwork?: boolean;
-	processConfig?: ProcessConfig;
-	osConfig?: OSConfig;
-};
-
-export type HarnessCreateRuntimeResponse = {
-	crossOriginIsolated: boolean;
-	runtimeId: string;
-	workerUrl: string;
-};
-
-export type HarnessExecResponse = {
-	crossOriginIsolated: boolean;
-	result: {
-		code: number;
-		errorMessage?: string;
-	};
-	stdio: HarnessStdioEvent[];
-	permissionDecisions: {
-		deniedFsReads: number;
-	};
-};
-
-export type HarnessTerminatePendingResponse = {
-	outcome: "resolved" | "rejected";
-	resultCode: number | null;
-	errorMessage: string | null;
-	signaled?: boolean;
-	debug: {
-		disposed: boolean;
-		pendingCount: number;
-		signalState: number[];
-		signalHandlers: Array<{
-			executionId: string;
-			handlers: Array<{
-				signal: number;
-				action: string;
-				mask: number[];
-				flags: number;
-			}>;
-		}>;
-		workerOnmessage: "null" | "set";
-		workerOnerror: "null" | "set";
-	};
-};
-
-export type HarnessRuntimeDebugResponse =
-	HarnessTerminatePendingResponse["debug"];
-
-export type HarnessSmokeResponse = HarnessExecResponse & {
-	workerUrl: string;
-};
-
-type SecureExecBrowserHarness = {
-	createRuntime(
-		options?: HarnessCreateRuntimeOptions,
-	): Promise<HarnessCreateRuntimeResponse>;
-	exec(
-		runtimeId: string,
-		code: string,
-		options?: ExecOptions,
-	): Promise<HarnessExecResponse>;
-	disposeRuntime(runtimeId: string): Promise<void>;
-	disposeAllRuntimes(): Promise<void>;
-	terminatePendingExec(
-		runtimeId: string,
-		code: string,
-		delayMs?: number,
-	): Promise<HarnessTerminatePendingResponse>;
-	signalPendingExec(
-		runtimeId: string,
-		code: string,
-		signal?: number,
-		delayMs?: number,
-	): Promise<HarnessTerminatePendingResponse>;
-	debugPendingExec(
-		runtimeId: string,
-		code: string,
-		delayMs?: number,
-	): Promise<HarnessTerminatePendingResponse>;
-	runtimeDebug(runtimeId: string): Promise<HarnessRuntimeDebugResponse>;
-	smoke(): Promise<HarnessSmokeResponse>;
-};
-
-declare global {
-	interface Window {
-		__secureExecBrowserHarness?: SecureExecBrowserHarness;
-	}
-}
-
-// The converged harness (wasm kernel) is the sole conformance runtime; the
-// legacy in-process TS-kernel harness has been removed.
-export async function openHarnessPage(page: Page): Promise<void> {
-	await page.goto("/frontend/converged-conformance-harness.html");
-	await expect(page.locator("#harness-status")).toHaveText("ready");
-}
-
-export async function createRuntime(
-	page: Page,
-	options?: HarnessCreateRuntimeOptions,
-): Promise<HarnessCreateRuntimeResponse> {
-	return page.evaluate(async (optionsArg) => {
-		const harness = window.__secureExecBrowserHarness;
-		if (!harness) {
-			throw new Error("Browser harness is unavailable on window");
-		}
-		return harness.createRuntime(optionsArg);
-	}, options);
-}
-
-export async function execRuntime(
-	page: Page,
-	runtimeId: string,
-	code: string,
-	options?: ExecOptions,
-): Promise<HarnessExecResponse> {
-	return page.evaluate(
-		async ({ runtimeId: runtimeIdArg, code: codeArg, options: optionsArg }) => {
-			const harness = window.__secureExecBrowserHarness;
-			if (!harness) {
-				throw new Error("Browser harness is unavailable on window");
-			}
-			return harness.exec(runtimeIdArg, codeArg, optionsArg);
-		},
-		{ runtimeId, code, options },
-	);
-}
-
-export async function disposeRuntime(
-	page: Page,
-	runtimeId: string,
-): Promise<void> {
-	await page.evaluate(async (runtimeIdArg) => {
-		const harness = window.__secureExecBrowserHarness;
-		if (!harness) {
-			return;
-		}
-		await harness.disposeRuntime(runtimeIdArg);
-	}, runtimeId);
-}
-
-export async function disposeAllRuntimes(page: Page): Promise<void> {
-	await page.evaluate(async () => {
-		const harness = window.__secureExecBrowserHarness;
-		if (!harness) {
-			return;
-		}
-		await harness.disposeAllRuntimes();
-	});
-}
-
-export async function terminatePendingExec(
-	page: Page,
-	runtimeId: string,
-	code: string,
-	delayMs?: number,
-): Promise<HarnessTerminatePendingResponse> {
-	return page.evaluate(
-		async ({ runtimeId: runtimeIdArg, code: codeArg, delayMs: delayMsArg }) => {
-			const harness = window.__secureExecBrowserHarness;
-			if (!harness) {
-				throw new Error("Browser harness is unavailable on window");
-			}
-			return harness.terminatePendingExec(runtimeIdArg, codeArg, delayMsArg);
-		},
-		{ runtimeId, code, delayMs },
-	);
-}
-
-export async function signalPendingExec(
-	page: Page,
-	runtimeId: string,
-	code: string,
-	signal?: number,
-	delayMs?: number,
-): Promise<HarnessTerminatePendingResponse> {
-	return page.evaluate(
-		async ({
-			runtimeId: runtimeIdArg,
-			code: codeArg,
-			signal: signalArg,
-			delayMs: delayMsArg,
-		}) => {
-			const harness = window.__secureExecBrowserHarness;
-			if (!harness) {
-				throw new Error("Browser harness is unavailable on window");
-			}
-			return harness.signalPendingExec(
-				runtimeIdArg,
-				codeArg,
-				signalArg,
-				delayMsArg,
-			);
-		},
-		{ runtimeId, code, signal, delayMs },
-	);
-}
-
-export async function debugPendingExec(
-	page: Page,
-	runtimeId: string,
-	code: string,
-	delayMs?: number,
-): Promise<HarnessTerminatePendingResponse> {
-	return page.evaluate(
-		async ({ runtimeId: runtimeIdArg, code: codeArg, delayMs: delayMsArg }) => {
-			const harness = window.__secureExecBrowserHarness;
-			if (!harness) {
-				throw new Error("Browser harness is unavailable on window");
-			}
-			return harness.debugPendingExec(runtimeIdArg, codeArg, delayMsArg);
-		},
-		{ runtimeId, code, delayMs },
-	);
-}
-
-export async function runtimeDebug(
-	page: Page,
-	runtimeId: string,
-): Promise<HarnessRuntimeDebugResponse> {
-	return page.evaluate(async (runtimeIdArg) => {
-		const harness = window.__secureExecBrowserHarness;
-		if (!harness) {
-			throw new Error("Browser harness is unavailable on window");
-		}
-		return harness.runtimeDebug(runtimeIdArg);
-	}, runtimeId);
-}
-
-export async function smokeHarness(page: Page): Promise<HarnessSmokeResponse> {
-	return page.evaluate(async () => {
-		const harness = window.__secureExecBrowserHarness;
-		if (!harness) {
-			throw new Error("Browser harness is unavailable on window");
-		}
-		return harness.smoke();
-	});
-}
-
-export function getLastStdioMessage(
-	response: HarnessExecResponse,
-	channel: HarnessStdioEvent["channel"],
-): string {
-	const message = response.stdio
-		.filter((event) => event.channel === channel)
-		.at(-1)?.message;
-	if (!message) {
-		throw new Error(`Missing ${channel} output in harness response`);
-	}
-	return message;
-}
diff --git a/packages/browser/tests/browser/runtime-driver.spec.ts b/packages/browser/tests/browser/runtime-driver.spec.ts
deleted file mode 100644
index bda633dc7..000000000
--- a/packages/browser/tests/browser/runtime-driver.spec.ts
+++ /dev/null
@@ -1,2171 +0,0 @@
-import { expect, test } from "@playwright/test";
-import { readFileSync } from "node:fs";
-import {
-	createRuntime,
-	debugPendingExec,
-	disposeAllRuntimes,
-	execRuntime,
-	getLastStdioMessage,
-	openHarnessPage,
-	signalPendingExec,
-	terminatePendingExec,
-} from "./harness.js";
-
-const cryptoBasicFixture = JSON.parse(
-	readFileSync(
-		new URL(
-			"../../../../tests/fixtures/crypto-basic-conformance.json",
-			import.meta.url,
-		),
-		"utf8",
-	),
-);
-
-test.beforeEach(async ({ page }) => {
-	await openHarnessPage(page);
-});
-
-test.afterEach(async ({ page }) => {
-	await disposeAllRuntimes(page);
-});
-
-test("preserves sync filesystem and module loading parity in a real Chromium worker", async ({
-	page,
-}) => {
-	const { runtimeId, workerUrl, crossOriginIsolated } =
-		await createRuntime(page);
-
-	expect(crossOriginIsolated).toBe(true);
-	expect(workerUrl).toContain("/secure-exec-worker.js");
-
-	const filesystemRoundTrip = await execRuntime(
-		page,
-		runtimeId,
-		`
-			const fs = require("fs");
-			fs.mkdirSync("/workspace");
-			fs.writeFileSync("/workspace/hello.txt", "hello");
-			fs.writeFileSync("/workspace/helper.js", "module.exports = { value: 42 };");
-			const text = fs.readFileSync("/workspace/hello.txt", "utf8");
-			const stat = fs.statSync("/workspace/hello.txt");
-			console.log(text + ":" + stat.size);
-		`,
-	);
-
-	expect(filesystemRoundTrip.result.code).toBe(0);
-	expect(filesystemRoundTrip.stdio).toContainEqual({
-		channel: "stdout",
-		message: "hello:5\n",
-	});
-
-	const moduleRoundTrip = await execRuntime(
-		page,
-		runtimeId,
-		`
-			const fs = require("fs");
-			const helper = require("./helper.js");
-			console.log(JSON.stringify({
-				moduleValue: helper.value,
-				fileText: fs.readFileSync("/workspace/hello.txt", "utf8"),
-			}));
-		`,
-		{
-			cwd: "/workspace",
-			filePath: "/workspace/index.js",
-		},
-	);
-
-	expect(moduleRoundTrip.result.code).toBe(0);
-	expect(JSON.parse(getLastStdioMessage(moduleRoundTrip, "stdout"))).toEqual({
-		moduleValue: 42,
-		fileText: "hello",
-	});
-});
-
-test("provides a faithful guest Buffer and path from upstream polyfills", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			const assert = (c, m) => { if (!c) throw new Error("FAIL: " + m); };
-			// Buffer is a real global (npm packages expect it), not the WASI shim.
-			assert(typeof globalThis.Buffer === "function", "global Buffer");
-			const buf = Buffer.from("hello", "utf8");
-			assert(Buffer.isBuffer(buf), "isBuffer true for Buffer");
-			// Fixed semantics: a plain Uint8Array is NOT a Buffer (the old shim said true).
-			assert(!Buffer.isBuffer(new Uint8Array([1, 2, 3])), "isBuffer false for Uint8Array");
-			assert(buf.toString("base64") === "aGVsbG8=", "toString base64");
-			assert(buf.toString("hex") === "68656c6c6f", "toString hex");
-			const num = Buffer.alloc(4);
-			num.writeUInt32BE(0x01020304, 0);
-			assert(num.toString("hex") === "01020304", "writeUInt32BE");
-			assert(num.readUInt32BE(0) === 0x01020304, "readUInt32BE");
-			assert(Buffer.from("eA==", "base64").toString("utf8") === "x", "base64 decode");
-			// path from path-browserify, posix semantics, path === path.posix.
-			const path = require("path");
-			assert(path.join("/a", "b", "..", "c") === "/a/c", "path.join");
-			assert(path.normalize("/a/b/../c") === "/a/c", "path.normalize");
-			assert(path.basename("/a/b/c.txt") === "c.txt", "path.basename");
-			assert(path.extname("a.b.c") === ".c", "path.extname");
-			assert(path.parse("/a/b.txt").name === "b", "path.parse.name");
-			assert(path === path.posix, "path === path.posix");
-			console.log("buffer-path-ok");
-		`,
-	);
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(getLastStdioMessage(result, "stdout")).toBe("buffer-path-ok\n");
-});
-
-test("surfaces correct POSIX errno numbers on guest fs errors", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			const fs = require("fs");
-			const grab = (fn) => {
-				try { fn(); return null; }
-				catch (e) { return { code: e.code, errno: e.errno }; }
-			};
-			fs.writeFileSync("/exists.txt", "x");
-			const out = {
-				// kernel error over the wire (was errno -2 already)
-				enoent: grab(() => fs.readFileSync("/missing.txt")),
-				// fd-table O_EXCL error (EEXIST was errno -1/undefined before H8)
-				eexist: grab(() => fs.openSync("/exists.txt", "wx")),
-			};
-			console.log(JSON.stringify(out));
-		`,
-	);
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	const out = JSON.parse(getLastStdioMessage(result, "stdout"));
-	expect(out.enoent).toMatchObject({ code: "ENOENT", errno: -2 });
-	expect(out.eexist).toMatchObject({ code: "EEXIST", errno: -17 });
-});
-
-test("honors string open flags and positional writeSync without losing data", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			const fs = require("fs");
-			const enc = (s) => new TextEncoder().encode(s);
-			fs.mkdirSync("/ws");
-			// String flag 'w' must create + truncate (previously any string flag
-			// silently collapsed to O_RDONLY, so this created nothing).
-			const fd = fs.openSync("/ws/seek.txt", "w");
-			fs.writeSync(fd, enc("abcd"));
-			// Positional overwrite of "cd" -> "XY"; "ab" must survive. The old
-			// client-side read-modify-write discarded the whole file whenever the
-			// readback failed; the kernel pwrite is atomic and preserves the rest.
-			fs.writeSync(fd, enc("XY"), 0, 2, 2);
-			fs.closeSync(fd);
-			const afterSeek = fs.readFileSync("/ws/seek.txt", "utf8");
-			// Append mode must write at EOF regardless of any offset.
-			const afd = fs.openSync("/ws/seek.txt", "a");
-			fs.writeSync(afd, enc("Z"));
-			fs.closeSync(afd);
-			const afterAppend = fs.readFileSync("/ws/seek.txt", "utf8");
-			console.log(afterSeek + "|" + afterAppend);
-		`,
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(getLastStdioMessage(result, "stdout")).toBe("abXY|abXYZ\n");
-});
-
-test("persists browser filesystem data across OPFS-backed runtimes", async ({
-	page,
-}) => {
-	const path = `/secure-exec-opfs-${Date.now()}-${Math.random()
-		.toString(16)
-		.slice(2)}.txt`;
-	const first = await createRuntime(page, { filesystem: "opfs" });
-
-	const write = await execRuntime(
-		page,
-		first.runtimeId,
-		`
-			const fs = require("fs");
-			fs.writeFileSync(${JSON.stringify(path)}, "opfs-persisted");
-		`,
-	);
-	expect(write.result.code).toBe(0);
-	await disposeAllRuntimes(page);
-
-	const second = await createRuntime(page, { filesystem: "opfs" });
-	const read = await execRuntime(
-		page,
-		second.runtimeId,
-		`
-			const fs = require("fs");
-			console.log(fs.readFileSync(${JSON.stringify(path)}, "utf8"));
-			fs.unlinkSync(${JSON.stringify(path)});
-		`,
-	);
-
-	expect(read.result.code).toBe(0);
-	expect(getLastStdioMessage(read, "stdout")).toBe("opfs-persisted\n");
-});
-
-test("provides a browser WASI module with stdout routed through the runtime", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"AGFzbQEAAAABEANgBH9/f38Bf2ABfwBgAAACRgIWd2FzaV9zbmFwc2hvdF9wcmV2aWV3MQhmZF93cml0ZQAAFndhc2lfc25hcHNob3RfcHJldmlldzEJcHJvY19leGl0AAEDAgECBQMBAAEHEwIGbWVtb3J5AgAGX3N0YXJ0AAIKJgEkAEHoB0GACDYCAEHsB0EINgIAQQFB6AdBAUHwBxAAGkEAEAELCw8BAEGACAsId2FzaS1vawo=";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const { WASI } = require("node:wasi");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({ returnOnExit: true });
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-			})();
-		`,
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "wasi-ok\n",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-});
-
-test("routes browser WASI stdin through the runtime process stdin", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"AGFzbQEAAAABDAJgBH9/f38Bf2AAAAJEAhZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxB2ZkX3JlYWQAABZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxCGZkX3dyaXRlAAADAgEBBQMBAAEHEwIGbWVtb3J5AgAGX3N0YXJ0AAIKRAFCAEHQD0GAEDYCAEHUD0EgNgIAQQBB0A9BAUHkDxAAGkHaD0GAEDYCAEHeD0HkDygCADYCAEEBQdoPQQFB6A8QARoL";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const { WASI } = require("node:wasi");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({ returnOnExit: true });
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-			})();
-		`,
-		{ stdin: "wasi-stdin\n" },
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "wasi-stdin\n",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-});
-
-test("routes browser WASI file reads through the runtime filesystem", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"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";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const fs = require("fs");
-				const { WASI } = require("node:wasi");
-				fs.writeFileSync("/wasi-input.txt", "wasi-file-ok\\n");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-			})();
-		`,
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "wasi-file-ok\n",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-});
-
-test("enforces browser WASI descriptor read rights", async ({ page }) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"AGFzbQEAAAABGQNgBH9/f38Bf2AJf39/f39+fn9/AX9gAAACZwMWd2FzaV9zbmFwc2hvdF9wcmV2aWV3MQlwYXRoX29wZW4AARZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxB2ZkX3JlYWQAABZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxCGZkX3dyaXRlAAADAgECBQMBAAEHEwIGbWVtb3J5AgAGX3N0YXJ0AAMKbAFqAQJ/QQNBAEHAAEEOQQBCAEIAQQBBCBAAIQEgAUEARwRAAAtBCCgCACEAQRBBgAE2AgBBFEEINgIAIABBEEEBQRgQASEBIAFBzABHBEAAC0EgQeAANgIAQSRBCjYCAEEBQSBBAUEoEAIaCwslAgBBwAALDndhc2ktaW5wdXQudHh0AEHgAAsKcmlnaHRzLW9rCg==";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const fs = require("fs");
-				const { WASI } = require("node:wasi");
-				fs.writeFileSync("/wasi-input.txt", "secret");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-			})();
-		`,
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "rights-ok\n",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-});
-
-test("maps browser WASI path_open rights violations to ACCES", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(() => {
-				const fs = require("fs");
-				const { WASI } = require("node:wasi");
-				const encoder = new TextEncoder();
-				const memory = new WebAssembly.Memory({ initial: 1 });
-				const bytes = new Uint8Array(memory.buffer);
-				fs.writeFileSync("/rights.txt", "rights");
-				const path = encoder.encode("rights.txt");
-				bytes.set(path, 1024);
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: {
-						"/subset": { hostPath: "/", rightsBase: 2n, rightsInheriting: 2n },
-						"/no-write": { hostPath: "/", rightsBase: 2n, rightsInheriting: 66n },
-					},
-				});
-				wasi.instance = { exports: { memory } };
-				const subsetErrno = wasi.wasiImport.path_open(3, 0, 1024, path.length, 0, 64n, 0n, 0, 2048);
-				const writeErrno = wasi.wasiImport.path_open(4, 0, 1024, path.length, 0, 64n, 0n, 0, 2052);
-				console.log("subset:" + subsetErrno + " write:" + writeErrno);
-			})();
-		`,
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "subset:2 write:2\n",
-	});
-});
-
-test("maps browser WASI preopen escapes to NOENT", async ({ page }) => {
-	const { runtimeId } = await createRuntime(page);
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(() => {
-				const { WASI } = require("node:wasi");
-				const encoder = new TextEncoder();
-				const memory = new WebAssembly.Memory({ initial: 1 });
-				const bytes = new Uint8Array(memory.buffer);
-				const escapePath = encoder.encode("../../../../etc/passwd");
-				bytes.set(escapePath, 1024);
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/sandbox": "/sandbox" },
-				});
-				wasi.instance = { exports: { memory } };
-				const errno = wasi.wasiImport.path_open(3, 0, 1024, escapePath.length, 0, 0n, 0n, 0, 2048);
-				console.log("escape:" + errno);
-			})();
-		`,
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "escape:44\n",
-	});
-});
-
-test("supports browser WASI fd_seek and fd_tell", async ({ page }) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"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";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const fs = require("fs");
-				const { WASI } = require("node:wasi");
-				fs.writeFileSync("/wasi-input.txt", "abcde");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-			})();
-		`,
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "cd",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-});
-
-test("supports browser WASI fd_pread without moving descriptor offset", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"AGFzbQEAAAABKAVgCX9/f39/fn5/fwF/YAV/f39+fwF/YAJ/fwF/YAR/f39/AX9gAAACiQEEFndhc2lfc25hcHNob3RfcHJldmlldzEJcGF0aF9vcGVuAAAWd2FzaV9zbmFwc2hvdF9wcmV2aWV3MQhmZF9wcmVhZAABFndhc2lfc25hcHNob3RfcHJldmlldzEHZmRfdGVsbAACFndhc2lfc25hcHNob3RfcHJldmlldzEIZmRfd3JpdGUAAwMCAQQFAwEAAQcTAgZtZW1vcnkCAAZfc3RhcnQABAqPAQGMAQEBf0EDQQBB0ABBDkEAQgJCAEEAQQgQAEEARwRAAAtBCCgCACEAQSBBgAE2AgBBJEECNgIAIABBIEEBQgFBKBABQQBHBEAAC0EoKAIAQQJHBEAACyAAQTAQAkEARwRAAAtBMCkDAEIAUgRAAAtBwABBgAE2AgBBxABBAjYCAEEBQcAAQQFByAAQAxoLCxUBAEHQAAsOd2FzaS1pbnB1dC50eHQ=";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const fs = require("fs");
-				const { WASI } = require("node:wasi");
-				fs.writeFileSync("/wasi-input.txt", "abcde");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "bc",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-});
-
-test("routes browser WASI path_open through filesystem permissions", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page, { denyFsRead: true });
-	const wasmBase64 =
-		"AGFzbQEAAAABFgNgCX9/f39/fn5/fwF/YAF/AX9gAAACRgIWd2FzaV9zbmFwc2hvdF9wcmV2aWV3MQlwYXRoX29wZW4AABZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxCGZkX2Nsb3NlAAEDAgECBQMBAAEHEwIGbWVtb3J5AgAGX3N0YXJ0AAIKNgE0AQF/QQNBAEHAAEEKQQBCAkICQQBBCBAAIQAgAEECRwRAAAsgAEEARgRAQQgoAgAQARoLCwsRAQBBwAALCnNlY3JldC50eHQ=";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const fs = require("fs");
-				const { WASI } = require("node:wasi");
-				fs.writeFileSync("/secret.txt", "should-not-read");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-				const encoder = new TextEncoder();
-				const memory = new WebAssembly.Memory({ initial: 1 });
-				const bytesView = new Uint8Array(memory.buffer);
-				const path = encoder.encode("secret.txt");
-				bytesView.set(path, 1024);
-				const directWasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				directWasi.instance = { exports: { memory } };
-				const errno = directWasi.wasiImport.path_open(3, 0, 1024, path.length, 0, 2n, 0n, 0, 2048);
-				console.log("errno:" + errno);
-			})();
-		`,
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "errno:2\n",
-	});
-	expect(result.permissionDecisions.deniedFsReads).toBeGreaterThanOrEqual(2);
-});
-
-test("maps browser WASI read-only filesystem errors to ROFS", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-				(() => {
-					const fs = require("fs");
-					const { WASI } = require("node:wasi");
-					const encoder = new TextEncoder();
-					const memory = new WebAssembly.Memory({ initial: 1 });
-					const bytes = new Uint8Array(memory.buffer);
-					// A read-only preopen makes the kernel-backed filesystem read-only to the
-					// guest: creating or opening-for-write under it is ROFS, while opening for
-					// read still succeeds. (The host seeds the file through the writable kernel
-					// fs; read-only is the WASI preopen attribute the runner enforces.)
-					fs.writeFileSync("/readonly-existing.txt", "seed");
-					const wasi = new WASI({
-						returnOnExit: true,
-						preopens: { "/ro": { hostPath: "/", readOnly: true } },
-					});
-					wasi.instance = { exports: { memory } };
-					const createFilename = encoder.encode("readonly-created.txt");
-					const existingFilename = encoder.encode("readonly-existing.txt");
-					bytes.set(createFilename, 1024);
-					bytes.set(existingFilename, 1200);
-					const createErrno = wasi.wasiImport.path_open(3, 0, 1024, createFilename.length, 1, 64n, 0n, 0, 2048);
-					const writeErrno = wasi.wasiImport.path_open(3, 0, 1200, existingFilename.length, 0, 64n, 0n, 0, 2052);
-					const readErrno = wasi.wasiImport.path_open(3, 0, 1200, existingFilename.length, 0, 2n, 0n, 0, 2056);
-					console.log("create:" + createErrno + " write:" + writeErrno + " read:" + readErrno);
-				})();
-		`,
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-			message: "create:69 write:69 read:0\n",
-	});
-});
-
-test("supports browser WASI read-only preopen specs", async ({ page }) => {
-	const { runtimeId } = await createRuntime(page);
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(() => {
-				const fs = require("fs");
-				const { WASI } = require("node:wasi");
-				const encoder = new TextEncoder();
-				const decoder = new TextDecoder();
-				const memory = new WebAssembly.Memory({ initial: 1 });
-				const view = new DataView(memory.buffer);
-				const bytes = new Uint8Array(memory.buffer);
-				fs.writeFileSync("/readonly-seed.txt", "seed");
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: {
-						"/ro": { hostPath: "/", readOnly: true },
-					},
-				});
-				wasi.instance = { exports: { memory } };
-				const seedPath = encoder.encode("readonly-seed.txt");
-				const createPath = encoder.encode("readonly-created.txt");
-				const mkdirPath = encoder.encode("readonly-dir");
-				bytes.set(seedPath, 1024);
-				bytes.set(createPath, 1200);
-				bytes.set(mkdirPath, 1400);
-				const openReadErrno = wasi.wasiImport.path_open(3, 0, 1024, seedPath.length, 0, 2n, 0n, 0, 2048);
-				const fd = view.getUint32(2048, true);
-				view.setUint32(3000, 3200, true);
-				view.setUint32(3004, 4, true);
-				const readErrno = wasi.wasiImport.fd_read(fd, 3000, 1, 3010);
-				const readBytes = view.getUint32(3010, true);
-				const text = decoder.decode(bytes.subarray(3200, 3200 + readBytes));
-				const inheritingWriteReadErrno = wasi.wasiImport.path_open(3, 0, 1024, seedPath.length, 0, 2n, 64n, 0, 2056);
-				const inheritingWriteDirectoryErrno = wasi.wasiImport.path_open(3, 0, 1200, 0, 2, 0n, 64n, 0, 2060);
-				const resizeOpenErrno = wasi.wasiImport.path_open(3, 0, 1024, seedPath.length, 0, 4194304n, 0n, 0, 2064);
-				const resizeFd = view.getUint32(2064, true);
-				const resizeErrno = wasi.wasiImport.fd_filestat_set_size(resizeFd, 0n);
-				const createErrno = wasi.wasiImport.path_open(3, 0, 1200, createPath.length, 1, 64n, 0n, 0, 2052);
-				const mkdirErrno = wasi.wasiImport.path_create_directory(3, 1400, mkdirPath.length);
-				console.log("open:" + openReadErrno + " read:" + readErrno + ":" + text + " inherited:" + inheritingWriteReadErrno + ":" + inheritingWriteDirectoryErrno + " resize:" + resizeOpenErrno + ":" + resizeErrno + " create:" + createErrno + " mkdir:" + mkdirErrno);
-			})();
-		`,
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "open:0 read:0:seed inherited:0:0 resize:0:69 create:69 mkdir:69\n",
-	});
-});
-
-test("supports browser WASI fd_readdir and path_filestat_get", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"AGFzbQEAAAABHgRgBX9/f39/AX9gBX9/f35/AX9gBH9/f38Bf2AAAAJyAxZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxEXBhdGhfZmlsZXN0YXRfZ2V0AAAWd2FzaV9zbmFwc2hvdF9wcmV2aWV3MQpmZF9yZWFkZGlyAAEWd2FzaV9zbmFwc2hvdF9wcmV2aWV3MQhmZF93cml0ZQACAwIBAwUDAQABBxMCBm1lbW9yeQIABl9zdGFydAADCngBdgEBf0EDQQBB0ABBCUHgABAAQQBHBEAAC0HwAC0AAEEERwRAAAtBgAEpAwBCBVIEQAALQQNBoAFBgAFCAEHIABABQQBHBEAAC0GwASgCACEAIABFBEAAC0HAAEG4ATYCAEHEACAANgIAQQFBwABBAUHMABACGgsLEAEAQdAACwlhbHBoYS50eHQ=";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const fs = require("fs");
-				const { WASI } = require("node:wasi");
-				fs.writeFileSync("/alpha.txt", "hello");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "alpha.txt",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-});
-
-test("supports browser WASI path_open directory descriptors", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"AGFzbQEAAAABIgRgCX9/f39/fn5/fwF/YAV/f39+fwF/YAR/f39/AX9gAAACagMWd2FzaV9zbmFwc2hvdF9wcmV2aWV3MQlwYXRoX29wZW4AABZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxCmZkX3JlYWRkaXIAARZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxCGZkX3dyaXRlAAIDAgEDBQMBAAEHEwIGbWVtb3J5AgAGX3N0YXJ0AAMKbAFqAQJ/QQNBAEHQAEEGQQJCAkICQQBBCBAAQQBHBEAAC0EIKAIAIQAgAEGgAUGAAUIAQcgAEAFBAEcEQAALQbABKAIAIQEgAUUEQAALQcAAQbgBNgIAQcQAIAE2AgBBAUHAAEEBQcwAEAIaCwsNAQBB0AALBm5lc3RlZA==";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const fs = require("fs");
-				const { WASI } = require("node:wasi");
-				fs.mkdirSync("/nested");
-				fs.writeFileSync("/nested/child.txt", "child");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "child.txt",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-});
-
-test("supports browser WASI path operations relative to opened directories", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"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";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const fs = require("fs");
-				const { WASI } = require("node:wasi");
-				fs.mkdirSync("/nested");
-				fs.writeFileSync("/nested/child.txt", "child");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "child",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-});
-
-test("supports browser WASI path mutation imports", async ({ page }) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"AGFzbQEAAAABEwNgA39/fwF/YAR/f39/AX9gAAACqwEEFndhc2lfc25hcHNob3RfcHJldmlldzEVcGF0aF9jcmVhdGVfZGlyZWN0b3J5AAAWd2FzaV9zbmFwc2hvdF9wcmV2aWV3MRBwYXRoX3VubGlua19maWxlAAAWd2FzaV9zbmFwc2hvdF9wcmV2aWV3MRVwYXRoX3JlbW92ZV9kaXJlY3RvcnkAABZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxCGZkX3dyaXRlAAEDAgECBQMBAAEHEwIGbWVtb3J5AgAGX3N0YXJ0AAQKUgFQAEEDQYAEQQQQAEEARwRADwtBA0GQBEEKEAFBAEcEQA8LQQNBoARBCRACQQBHBEAPC0G4AUGwBDYCAEG8AUEINgIAQQFBuAFBAUHAARADGgsLOAQAQYAECwRtYWRlAEGQBAsKdmljdGltLnR4dABBoAQLCWVtcHR5LWRpcgBBsAQLCG11dGF0ZWQK";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const fs = require("fs");
-				const { WASI } = require("node:wasi");
-				fs.writeFileSync("/victim.txt", "remove me");
-				fs.mkdirSync("/empty-dir");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-				console.log(JSON.stringify({
-					madeDirectory: fs.statSync("/made").isDirectory(),
-					victimExists: fs.existsSync("/victim.txt"),
-					emptyDirExists: fs.existsSync("/empty-dir"),
-				}));
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "mutated\n",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-	expect(JSON.parse(getLastStdioMessage(result, "stdout"))).toEqual({
-		madeDirectory: true,
-		victimExists: false,
-		emptyDirExists: false,
-	});
-});
-
-test("supports browser WASI link, rename, symlink, and readlink imports", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"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";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const fs = require("fs");
-				const { WASI } = require("node:wasi");
-				fs.writeFileSync("/source.txt", "linked-content");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-				console.log(JSON.stringify({
-					source: fs.readFileSync("/source.txt", "utf8"),
-					moved: fs.readFileSync("/moved.txt", "utf8"),
-					linkTarget: fs.readlinkSync("/link.txt"),
-					hardExists: fs.existsSync("/hard.txt"),
-				}));
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "moved.txt",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-	expect(JSON.parse(getLastStdioMessage(result, "stdout"))).toEqual({
-		source: "linked-content",
-		moved: "linked-content",
-		linkTarget: "moved.txt",
-		hardExists: false,
-	});
-});
-
-test("supports browser WASI descriptor flag and sync imports", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"AGFzbQEAAAABFwRgAn9/AX9gAX8Bf2AEf39/fwF/YAAAApgBBBZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxE2ZkX2Zkc3RhdF9zZXRfZmxhZ3MAABZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxDWZkX2Zkc3RhdF9nZXQAABZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxB2ZkX3N5bmMAARZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxCGZkX3dyaXRlAAIDAgEDBQMBAAEHEwIGbWVtb3J5AgAGX3N0YXJ0AAQKVQFTAEEBQQEQAEEARwRADwtBAUGAAhABQQBHBEAPC0GCAi8BAEEBRwRADwtBARACQQBHBEAPC0G4AUHAAjYCAEG8AUELNgIAQQFBuAFBAUHAARADGgsLEgEAQcACCwtmZC1zeW5jLW9rCg==";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const { WASI } = require("node:wasi");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "fd-sync-ok\n",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-});
-
-test("supports browser WASI pwrite and filestat set size write-through", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"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";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const fs = require("fs");
-				const { WASI } = require("node:wasi");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-				console.log("file:" + fs.readFileSync("/out.txt", "utf8"));
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "ABC",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "file:ABC\n",
-	});
-});
-
-test("supports browser WASI poll_oneoff import", async ({ page }) => {
-	const { runtimeId } = await createRuntime(page);
-	const wasmBase64 =
-		"AGFzbQEAAAABDAJgBH9/f38Bf2AAAAJIAhZ3YXNpX3NuYXBzaG90X3ByZXZpZXcxC3BvbGxfb25lb2ZmAAAWd2FzaV9zbmFwc2hvdF9wcmV2aWV3MQhmZF93cml0ZQAAAwIBAQUDAQABBxMCBm1lbW9yeQIABl9zdGFydAACCngBdgBBuAJBAjoAAEHAAkEBNgIAQYACQYADQQJBxAEQAEEARwRADwtBxAEoAgBBAkcEQA8LQYoDLQAAQQBHBEAPC0GqAy0AAEECRwRADwtBsAMpAwBQBEAPC0G4AUGABDYCAEG8AUEINgIAQQFBuAFBAUHAARABGgsLDwEAQYAECwhwb2xsLW9rCg==";
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const { WASI } = require("node:wasi");
-				const bytes = Uint8Array.from(atob(${JSON.stringify(wasmBase64)}), (char) => char.charCodeAt(0));
-				const wasi = new WASI({
-					returnOnExit: true,
-					preopens: { "/": "/" },
-				});
-				const { instance } = await WebAssembly.instantiate(bytes, {
-					wasi_snapshot_preview1: wasi.wasiImport,
-				});
-				const exitCode = wasi.start(instance);
-				console.log("exit:" + exitCode);
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "poll-ok\n",
-	});
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "exit:0\n",
-	});
-});
-
-test("reports browser WASI stdin readiness without consuming input", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(() => {
-				const { WASI } = require("node:wasi");
-				const memory = new WebAssembly.Memory({ initial: 1 });
-				const view = new DataView(memory.buffer);
-				const bytes = new Uint8Array(memory.buffer);
-				const wasi = new WASI({ returnOnExit: true });
-				wasi.instance = { exports: { memory } };
-				view.setBigUint64(1024, 7n, true);
-				view.setUint8(1032, 1);
-				view.setUint32(1040, 0, true);
-				const pollErrno = wasi.wasiImport.poll_oneoff(1024, 2048, 1, 3000);
-				const events = view.getUint32(3000, true);
-				const eventType = view.getUint8(2058);
-				const eventNbytes = Number(view.getBigUint64(2064, true));
-				view.setUint32(3010, 3200, true);
-				view.setUint32(3014, 3, true);
-				const readErrno = wasi.wasiImport.fd_read(0, 3010, 1, 3020);
-				const readBytes = view.getUint32(3020, true);
-				const text = new TextDecoder().decode(bytes.subarray(3200, 3200 + readBytes));
-				console.log("poll:" + pollErrno + ":" + events + ":" + eventType + ":" + eventNbytes + " read:" + readErrno + ":" + text);
-			})();
-		`,
-		{ stdin: "abc" },
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(result.stdio).toContainEqual({
-		channel: "stdout",
-		message: "poll:0:1:1:3 read:0:abc\n",
-	});
-});
-
-test("captures stdio, stdin, exit codes, and runtime errors through the browser harness", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-
-	const stdinResult = await execRuntime(
-		page,
-		runtimeId,
-		`
-			process.stdin.setEncoding("utf8");
-			let stdinText = "";
-			process.stdin.on("data", (chunk) => {
-				stdinText += chunk;
-			});
-			process.stdin.on("end", () => {
-				console.log("stdin:" + stdinText.trim());
-				console.error("stderr:captured");
-			});
-			process.stdin.resume();
-		`,
-		{
-			stdin: "playwright-input\n",
-		},
-	);
-
-	expect(stdinResult.crossOriginIsolated).toBe(true);
-	expect(stdinResult.result.code).toBe(0);
-	expect(stdinResult.stdio).toContainEqual({
-		channel: "stdout",
-		message: "stdin:playwright-input\n",
-	});
-	expect(stdinResult.stdio).toContainEqual({
-		channel: "stderr",
-		message: "stderr:captured\n",
-	});
-
-	const consoleFormatResult = await execRuntime(
-		page,
-		runtimeId,
-		`console.log({ answer: 42 }, ["x"], "value:%d", 7);`,
-	);
-	expect(consoleFormatResult.result.code).toBe(0);
-	expect(getLastStdioMessage(consoleFormatResult, "stdout")).toBe(
-		"{ answer: 42 } [ 'x' ] value:%d 7\n",
-	);
-
-	const printfFormatResult = await execRuntime(
-		page,
-		runtimeId,
-		`console.log("value:%d", 7, { answer: 42 });`,
-	);
-	expect(printfFormatResult.result.code).toBe(0);
-	expect(getLastStdioMessage(printfFormatResult, "stdout")).toBe(
-		"value:7 { answer: 42 }\n",
-	);
-
-	const exitResult = await execRuntime(page, runtimeId, `process.exit(7);`);
-	expect(exitResult.result.code).toBe(7);
-
-	const wasiExitResult = await execRuntime(
-		page,
-		runtimeId,
-		`
-			const { WASI } = require("node:wasi");
-			const wasi = new WASI();
-			wasi.wasiImport.proc_exit(9);
-		`,
-	);
-	expect(wasiExitResult.result.code).toBe(9);
-
-	const errorResult = await execRuntime(
-		page,
-		runtimeId,
-		`throw new Error("browser-runtime-boom");`,
-	);
-	expect(errorResult.result.code).toBe(1);
-	expect(errorResult.result.errorMessage).toContain("browser-runtime-boom");
-});
-
-test("exposes configured virtual process and OS identity in the browser worker", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page, {
-		processConfig: {
-			pid: 77,
-			ppid: 7,
-			uid: 501,
-			gid: 20,
-			platform: "linux",
-			arch: "x64",
-		},
-		osConfig: {
-			user: "runner",
-			uid: 501,
-			gid: 20,
-			homedir: "/home/runner",
-			shell: "/bin/bash",
-			hostname: "browser-vm",
-			tmpdir: "/browser-tmp",
-			type: "BrowserLinux",
-			release: "9.9.9-browser",
-			version: "Browser secure-exec build",
-			machine: "browser64",
-		},
-	});
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			const os = require("node:os");
-			console.log(JSON.stringify({
-				pid: process.pid,
-				ppid: process.ppid,
-				uid: process.getuid(),
-				gid: process.getgid(),
-				euid: process.geteuid(),
-				egid: process.getegid(),
-				groups: process.getgroups(),
-				platform: process.platform,
-				arch: process.arch,
-				osPlatform: os.platform(),
-				osArch: os.arch(),
-				osHostname: os.hostname(),
-				osTmpdir: os.tmpdir(),
-				osType: os.type(),
-				osRelease: os.release(),
-				osVersion: os.version(),
-				osMachine: os.machine(),
-				userInfo: os.userInfo(),
-			}));
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(JSON.parse(getLastStdioMessage(result, "stdout"))).toEqual({
-		pid: 77,
-		ppid: 7,
-		uid: 501,
-		gid: 20,
-		euid: 501,
-		egid: 20,
-		groups: [20],
-		platform: "linux",
-		arch: "x64",
-		osPlatform: "linux",
-		osArch: "x64",
-		osHostname: "browser-vm",
-		osTmpdir: "/browser-tmp",
-		osType: "BrowserLinux",
-		osRelease: "9.9.9-browser",
-		osVersion: "Browser secure-exec build",
-		osMachine: "browser64",
-		userInfo: {
-			username: "runner",
-			uid: 501,
-			gid: 20,
-			shell: "/bin/bash",
-			homedir: "/home/runner",
-		},
-	});
-});
-
-test("routes browser child_process through the driver command executor", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page, {
-		commandExecutor: "echo",
-	});
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const childProcess = require("child_process");
-				const sync = childProcess.spawnSync("echo", ["sync-value"], {
-					encoding: "utf8",
-					cwd: "/workspace",
-					env: { MODE: "sync" },
-				});
-				const child = childProcess.spawn("wait-signal", ["async-value"], {
-					cwd: "/workspace",
-					env: { MODE: "async" },
-				});
-				let stdout = "";
-				child.stdout.on("data", (chunk) => {
-					stdout += chunk.toString();
-				});
-				let invalidSignalCode = null;
-				try {
-					child.kill("SIGBOGUS");
-				} catch (error) {
-					invalidSignalCode = error && error.code;
-				}
-				child.kill("SIGUSR1");
-				const asyncCode = await new Promise((resolve, reject) => {
-					child.on("error", reject);
-					child.on("exit", resolve);
-				});
-				console.log(JSON.stringify({
-					syncStatus: sync.status,
-					syncStdout: sync.stdout.trim(),
-					asyncCode,
-					asyncStdout: stdout.trim(),
-					invalidSignalCode,
-				}));
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(JSON.parse(getLastStdioMessage(result, "stdout"))).toEqual({
-		syncStatus: 0,
-		syncStdout: "sync-value",
-		asyncCode: 138,
-		asyncStdout: "signal:10",
-		invalidSignalCode: "ERR_UNKNOWN_SIGNAL",
-	});
-
-	const deniedRuntime = await createRuntime(page, {
-		commandExecutor: "echo",
-		denyChildProcess: true,
-	});
-	const denied = await execRuntime(
-		page,
-		deniedRuntime.runtimeId,
-		`
-			const { spawnSync } = require("child_process");
-			const result = spawnSync("echo", ["denied"], { encoding: "utf8" });
-			console.log(JSON.stringify({
-				status: result.status,
-				code: result.error && result.error.code,
-				message: result.error && result.error.message,
-			}));
-		`,
-	);
-
-	expect(denied.result.code).toBe(0);
-	expect(JSON.parse(getLastStdioMessage(denied, "stdout"))).toMatchObject({
-		status: 1,
-		code: "EACCES",
-	});
-});
-
-test("resolves browser loopback DNS through the guest network bridge", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page, { useDefaultNetwork: true });
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const dns = require("dns").promises;
-				const localhost = await dns.lookup("localhost");
-				const literal = await dns.lookup("127.0.0.1");
-				let externalCode = null;
-				try {
-					await dns.lookup("example.com");
-				} catch (error) {
-					externalCode = error && error.code;
-				}
-				console.log(JSON.stringify({ localhost, literal, externalCode }));
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(JSON.parse(getLastStdioMessage(result, "stdout"))).toEqual({
-		localhost: { address: "127.0.0.1", family: 4 },
-		literal: { address: "127.0.0.1", family: 4 },
-		externalCode: "ENOSYS",
-	});
-});
-
-test("routes browser dgram loopback through the guest network bridge", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page, { useDefaultNetwork: true });
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const dgram = require("node:dgram");
-				const server = dgram.createSocket("udp4");
-				const client = dgram.createSocket("udp4");
-				const received = new Promise((resolve, reject) => {
-					server.on("error", reject);
-					client.on("error", reject);
-					server.on("message", (message, remote) => {
-						resolve({
-							message: message.toString("utf8"),
-							remoteAddress: remote.address,
-							remoteFamily: remote.family,
-							remoteSize: remote.size,
-						});
-					});
-				});
-				await new Promise((resolve) => server.bind(0, "127.0.0.1", resolve));
-				const port = server.address().port;
-				client.send(new TextEncoder().encode("udp-ok"), port, "127.0.0.1");
-				const payload = await Promise.race([
-					received,
-					new Promise((_, reject) => setTimeout(() => reject(new Error("udp timeout")), 1000)),
-				]);
-				server.close();
-				client.close();
-				console.log(JSON.stringify(payload));
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(JSON.parse(getLastStdioMessage(result, "stdout"))).toEqual({
-		message: "udp-ok",
-		remoteAddress: "127.0.0.1",
-		remoteFamily: "IPv4",
-		remoteSize: 6,
-	});
-});
-
-test("denies browser dgram bind through the applied network policy", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page, {
-		useDefaultNetwork: true,
-		denyNetwork: true,
-	});
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const dgram = require("node:dgram");
-				const socket = dgram.createSocket("udp4");
-				const deniedPromise = Promise.race([
-					new Promise((resolve) => {
-						socket.on("error", (error) => {
-							resolve({ code: error.code, message: error.message });
-						});
-					}),
-					new Promise((resolve) => setTimeout(() => resolve({ code: "timeout" }), 1000)),
-				]);
-				socket.bind(0, "127.0.0.1");
-				const denied = await deniedPromise;
-				console.log(JSON.stringify(denied));
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(JSON.parse(getLastStdioMessage(result, "stdout"))).toMatchObject({
-		code: "EACCES",
-	});
-});
-
-test("denies browser dgram send through the applied network policy", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page, {
-		useDefaultNetwork: true,
-		denyNetworkPort: 9,
-	});
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const dgram = require("node:dgram");
-				const socket = dgram.createSocket("udp4");
-				const denied = await new Promise((resolve) => {
-					socket.send(new TextEncoder().encode("blocked"), 9, "127.0.0.1", (error) => {
-						resolve(error ? { code: error.code, message: error.message } : { code: null });
-					});
-				});
-				socket.close();
-				console.log(JSON.stringify(denied));
-			})();
-		`,
-	);
-
-	expect(result.result.code).toBe(0);
-	expect(JSON.parse(getLastStdioMessage(result, "stdout"))).toMatchObject({
-		code: "EACCES",
-	});
-});
-
-test("tracks browser process signal handlers through the sync bridge", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-
-	const direct = await debugPendingExec(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				_processSignalState.applySyncPromise(void 0, [15, "user", "[]", 0]);
-				await new Promise(() => undefined);
-			})();
-		`,
-		250,
-	);
-
-	expect(direct.outcome).toBe("rejected");
-	expect(direct.debug.signalHandlers).toEqual([
-		{
-			executionId: "exec-1",
-			handlers: [
-				{
-					signal: 15,
-					action: "user",
-					mask: [],
-					flags: 0,
-				},
-			],
-		},
-	]);
-
-	const registeredRuntime = await createRuntime(page);
-	const registered = await debugPendingExec(
-		page,
-		registeredRuntime.runtimeId,
-		`
-			(async () => {
-				const handler = () => {};
-				process.on("SIGTERM", handler);
-				await new Promise(() => undefined);
-			})();
-		`,
-		250,
-	);
-
-	expect(registered.outcome).toBe("rejected");
-	expect(registered.debug.signalHandlers).toEqual([
-		{
-			executionId: "exec-1",
-			handlers: [
-				{
-					signal: 15,
-					action: "user",
-					mask: [],
-					flags: 0,
-				},
-			],
-		},
-	]);
-
-	const removedRuntime = await createRuntime(page);
-	const removed = await debugPendingExec(
-		page,
-		removedRuntime.runtimeId,
-		`
-			(async () => {
-				const handler = () => {};
-				process.on("SIGTERM", handler);
-				process.off("SIGTERM", handler);
-				await new Promise(() => undefined);
-			})();
-		`,
-		250,
-	);
-
-	expect(removed.outcome).toBe("rejected");
-	expect(removed.debug.signalHandlers).toEqual([]);
-});
-
-test("provides browser node:crypto digest, hmac, pbkdf2, scrypt, and random APIs", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const fixture = ${JSON.stringify(cryptoBasicFixture)};
-				const crypto = require("node:crypto");
-				const pbkdf2Hex = await new Promise((resolve, reject) => {
-					crypto.pbkdf2(fixture.password, fixture.salt, fixture.iterations, fixture.keyLength, "sha256", (error, value) => {
-						if (error) reject(error);
-						else resolve(value.toString("hex"));
-					});
-				});
-				const pbkdf2Sha384Hex = await new Promise((resolve, reject) => {
-					crypto.pbkdf2(fixture.password, fixture.salt, fixture.iterations, fixture.keyLength, "sha384", (error, value) => {
-						if (error) reject(error);
-						else resolve(value.toString("hex"));
-					});
-				});
-				const scryptHex = await new Promise((resolve, reject) => {
-					crypto.scrypt(fixture.password, fixture.salt, fixture.keyLength, fixture.scrypt, (error, value) => {
-						if (error) reject(error);
-						else resolve(value.toString("hex"));
-					});
-				});
-				const bytesFromHex = (hex) => Uint8Array.from(hex.match(/../g).map((byte) => parseInt(byte, 16)));
-				const bytesToHex = (bytes) => Array.from(bytes, (byte) => byte.toString(16).padStart(2, "0")).join("");
-				const aesCbcKey = bytesFromHex(fixture.aesCbc.keyHex);
-				const aesCbcIv = bytesFromHex(fixture.aesCbc.ivHex);
-				const aesGcmKey = bytesFromHex(fixture.aesGcm.keyHex);
-				const aesGcmIv = bytesFromHex(fixture.aesGcm.ivHex);
-				const aesGcmAad = new TextEncoder().encode(fixture.aesGcm.aad);
-				const secretKey = crypto.createSecretKey(new TextEncoder().encode(fixture.hmacKey));
-				const hmacWithSecretKey = crypto.createHmac("sha256", secretKey).update(fixture.message).digest("hex");
-				const generatedHmacKey = crypto.generateKeySync("hmac", { length: 256 });
-				const generatedAesKey = crypto.generateKeySync("aes", { length: 256 });
-				const modPow = (base, exponent, modulus) => {
-					let result = 1n;
-					let cursor = base % modulus;
-					let remaining = exponent;
-					while (remaining > 0n) {
-						if ((remaining & 1n) === 1n) result = (result * cursor) % modulus;
-						cursor = (cursor * cursor) % modulus;
-						remaining >>= 1n;
-					}
-					return result;
-				};
-				const isPrime = (value) => {
-					if (value < 2n) return false;
-					for (const prime of [2n, 3n, 5n, 7n, 11n, 13n, 17n, 19n, 23n, 29n, 31n, 37n]) {
-						if (value === prime) return true;
-						if (value % prime === 0n) return false;
-					}
-					let d = value - 1n;
-					let s = 0;
-					while ((d & 1n) === 0n) {
-						d >>= 1n;
-						s += 1;
-					}
-					for (const base of [2n, 3n, 5n, 7n, 11n, 13n, 17n, 19n, 23n, 29n, 31n, 37n]) {
-						if (base >= value - 2n) continue;
-						let x = modPow(base, d, value);
-						if (x === 1n || x === value - 1n) continue;
-						let witness = false;
-						for (let r = 1; r < s; r += 1) {
-							x = (x * x) % value;
-							if (x === value - 1n) {
-								witness = true;
-								break;
-							}
-						}
-						if (!witness) return false;
-					}
-					return true;
-				};
-				const generatedPrime = crypto.generatePrimeSync(fixture.expected.primes.bits, { bigint: true });
-				const generatedSafePrime = crypto.generatePrimeSync(fixture.expected.primes.safeBits, { bigint: true, safe: true });
-				const generatedPrimeBuffer = crypto.generatePrimeSync(fixture.expected.primes.bufferBits);
-				const groupAlice = crypto.getDiffieHellman("modp14");
-				const groupBob = crypto.getDiffieHellman("modp14");
-				groupAlice.generateKeys();
-				groupBob.generateKeys();
-				const groupSecretA = groupAlice.computeSecret(groupBob.getPublicKey());
-				const groupSecretB = groupBob.computeSecret(groupAlice.getPublicKey());
-				const fixtureDhAlice = crypto.createDiffieHellman(
-					Uint8Array.from(fixture.dh.primeHex.match(/../g).map((byte) => parseInt(byte, 16))),
-					Uint8Array.from(fixture.dh.generatorHex.match(/../g).map((byte) => parseInt(byte, 16))),
-				);
-				const fixtureDhBob = crypto.createDiffieHellman(
-					Uint8Array.from(fixture.dh.primeHex.match(/../g).map((byte) => parseInt(byte, 16))),
-					Uint8Array.from(fixture.dh.generatorHex.match(/../g).map((byte) => parseInt(byte, 16))),
-				);
-				fixtureDhAlice.setPrivateKey(fixture.dh.privateAHex, "hex");
-				fixtureDhAlice.setPublicKey(fixture.dh.publicAHex, "hex");
-				fixtureDhBob.setPrivateKey(fixture.dh.privateBHex, "hex");
-				fixtureDhBob.setPublicKey(fixture.dh.publicBHex, "hex");
-				const fixtureDhSecretA = fixtureDhAlice.computeSecret(fixture.dh.publicBHex, "hex", "hex");
-				const fixtureDhSecretB = fixtureDhBob.computeSecret(fixture.dh.publicAHex, "hex", "hex");
-				const x25519Alice = crypto.generateKeyPairSync("x25519");
-				const x25519Bob = crypto.generateKeyPairSync("x25519");
-				const x25519SecretA = crypto.diffieHellman({
-					privateKey: x25519Alice.privateKey,
-					publicKey: x25519Bob.publicKey,
-				});
-				const x25519SecretB = crypto.diffieHellman({
-					privateKey: x25519Bob.privateKey,
-					publicKey: x25519Alice.publicKey,
-				});
-				const ecdhAlice = crypto.createECDH("prime256v1");
-				const ecdhBob = crypto.createECDH("prime256v1");
-				ecdhAlice.generateKeys();
-				ecdhBob.generateKeys();
-				const ecdhSecretA = ecdhAlice.computeSecret(ecdhBob.getPublicKey());
-				const ecdhSecretB = ecdhBob.computeSecret(ecdhAlice.getPublicKey());
-				const fixtureEcdhAlice = crypto.createECDH(fixture.ecdh.curve);
-				const fixtureEcdhBob = crypto.createECDH(fixture.ecdh.curve);
-				fixtureEcdhAlice.setPrivateKey(fixture.ecdh.privateAHex, "hex");
-				fixtureEcdhBob.setPrivateKey(fixture.ecdh.privateBHex, "hex");
-				const fixtureEcdhSecretA = fixtureEcdhAlice.computeSecret(fixture.ecdh.publicBHex, "hex", "hex");
-				const fixtureEcdhSecretB = fixtureEcdhBob.computeSecret(fixture.ecdh.publicAHex, "hex", "hex");
-				const cipher = crypto.createCipheriv(fixture.aesCbc.algorithm, aesCbcKey, aesCbcIv);
-				const aes256CbcCiphertext = cipher.update(fixture.aesCbc.plaintext, "utf8", "hex") + cipher.final("hex");
-				const decipher = crypto.createDecipheriv(fixture.aesCbc.algorithm, aesCbcKey, aesCbcIv);
-				const aes256CbcPlaintext = decipher.update(aes256CbcCiphertext, "hex", "utf8") + decipher.final("utf8");
-				const gcmCipher = crypto.createCipheriv(fixture.aesGcm.algorithm, aesGcmKey, aesGcmIv, {
-					authTagLength: fixture.aesGcm.authTagLength,
-				});
-				gcmCipher.setAAD(aesGcmAad);
-				const aes256GcmCiphertext = gcmCipher.update(fixture.aesGcm.plaintext, "utf8", "hex") + gcmCipher.final("hex");
-				const aes256GcmAuthTag = gcmCipher.getAuthTag().toString("hex");
-				const gcmDecipher = crypto.createDecipheriv(fixture.aesGcm.algorithm, aesGcmKey, aesGcmIv, {
-					authTagLength: fixture.aesGcm.authTagLength,
-				});
-				gcmDecipher.setAAD(aesGcmAad);
-				gcmDecipher.setAuthTag(bytesFromHex(aes256GcmAuthTag));
-				const aes256GcmPlaintext = gcmDecipher.update(aes256GcmCiphertext, "hex", "utf8") + gcmDecipher.final("utf8");
-				const subtleKey = await crypto.subtle.importKey("raw", aesGcmKey, { name: "AES-GCM" }, false, ["encrypt", "decrypt"]);
-				const subtleAlgorithm = {
-					name: "AES-GCM",
-					iv: aesGcmIv,
-					additionalData: aesGcmAad,
-					tagLength: fixture.aesGcm.authTagLength * 8,
-				};
-				const aes256GcmWebCryptoBytes = new Uint8Array(await crypto.subtle.encrypt(
-					subtleAlgorithm,
-					subtleKey,
-					new TextEncoder().encode(fixture.aesGcm.plaintext),
-				));
-				const aes256GcmWebCryptoCiphertext = bytesToHex(aes256GcmWebCryptoBytes);
-				const aes256GcmWebCryptoPlaintext = new TextDecoder().decode(await crypto.subtle.decrypt(
-					subtleAlgorithm,
-					subtleKey,
-					aes256GcmWebCryptoBytes,
-				));
-				const generatedCipher = crypto.createCipheriv("aes-256-cbc", generatedAesKey, aesCbcIv);
-				const generatedCiphertext = generatedCipher.update("key-object", "utf8", "hex") + generatedCipher.final("hex");
-				const generatedDecipher = crypto.createDecipheriv("aes-256-cbc", generatedAesKey, aesCbcIv);
-				const generatedPlaintext = generatedDecipher.update(generatedCiphertext, "hex", "utf8") + generatedDecipher.final("utf8");
-				const random = crypto.randomBytes(16);
-				const fillTarget = new Uint8Array(8);
-				crypto.randomFillSync(fillTarget);
-				let invalidAesCode = null;
-				try {
-					crypto.generateKeySync("aes", { length: 129 });
-				} catch (error) {
-					invalidAesCode = error && error.code;
-				}
-				console.log(JSON.stringify({
-					hashes: crypto.getHashes(),
-					md5: crypto.createHash("md5").update(fixture.message).digest("hex"),
-					sha224: crypto.createHash("sha224").update(fixture.message).digest("hex"),
-					sha256: crypto.createHash("sha256").update(fixture.message).digest("hex"),
-					sha384: crypto.createHash("sha384").update(fixture.message).digest("hex"),
-					hmacSha256: crypto.createHmac("sha256", fixture.hmacKey).update(fixture.message).digest("hex"),
-					hmacWithSecretKey,
-					hmacSha384: crypto.createHmac("sha384", fixture.hmacKey).update(fixture.message).digest("hex"),
-					pbkdf2SyncHex: crypto.pbkdf2Sync(fixture.password, fixture.salt, fixture.iterations, fixture.keyLength, "sha256").toString("hex"),
-					pbkdf2Sha384Hex,
-					pbkdf2Hex,
-					scryptSyncHex: crypto.scryptSync(fixture.password, fixture.salt, fixture.keyLength, fixture.scrypt).toString("hex"),
-					scryptHex,
-					aes256CbcCiphertext,
-					aes256CbcPlaintext,
-					aes256GcmCiphertext,
-					aes256GcmAuthTag,
-					aes256GcmPlaintext,
-					aes256GcmWebCryptoCiphertext,
-					aes256GcmWebCryptoPlaintext,
-					generatedPlaintext,
-					secretKeyType: secretKey.type,
-					secretKeySize: secretKey.symmetricKeySize,
-					secretKeyExportHex: secretKey.export().toString("hex"),
-					generatedHmacKeyType: generatedHmacKey.type,
-					generatedHmacKeySize: generatedHmacKey.symmetricKeySize,
-					generatedAesKeyType: generatedAesKey.type,
-					generatedAesKeySize: generatedAesKey.symmetricKeySize,
-					generatedPrimeType: typeof generatedPrime,
-					generatedPrimeBits: generatedPrime.toString(2).length,
-					generatedPrimeLooksPrime: isPrime(generatedPrime),
-					generatedSafePrimeBits: generatedSafePrime.toString(2).length,
-					generatedSafePrimeLooksSafe: isPrime(generatedSafePrime) && isPrime((generatedSafePrime - 1n) / 2n),
-					generatedPrimeBufferBits: fixture.expected.primes.bufferBits,
-					generatedPrimeBufferByteLength: generatedPrimeBuffer.byteLength,
-					groupVerifyError: groupAlice.verifyError,
-					groupSecretMatches: groupSecretA.equals(groupSecretB),
-					groupSecretLength: groupSecretA.length,
-					groupPrimeLength: groupAlice.getPrime().length,
-					groupGeneratorHex: groupAlice.getGenerator("hex"),
-					fixtureDhPublicAHex: fixtureDhAlice.getPublicKey("hex").slice(-fixture.dh.publicAHex.length),
-					fixtureDhPublicBHex: fixtureDhBob.getPublicKey("hex").slice(-fixture.dh.publicBHex.length),
-					fixtureDhSecretAHex: fixtureDhSecretA,
-					fixtureDhSecretBHex: fixtureDhSecretB,
-					x25519KeyTypes: [
-						x25519Alice.privateKey.type,
-						x25519Alice.privateKey.asymmetricKeyType,
-						x25519Alice.publicKey.type,
-						x25519Alice.publicKey.asymmetricKeyType,
-					],
-					x25519SecretMatches: x25519SecretA.equals(x25519SecretB),
-					x25519SecretLength: x25519SecretA.length,
-					ecdhSecretMatches: ecdhSecretA.equals(ecdhSecretB),
-					ecdhSecretLength: ecdhSecretA.length,
-					ecdhPublicKeyLength: ecdhAlice.getPublicKey().length,
-					ecdhCompressedPublicKeyLength: ecdhAlice.getPublicKey(undefined, "compressed").length,
-					fixtureEcdhPublicAHex: fixtureEcdhAlice.getPublicKey("hex"),
-					fixtureEcdhPublicBHex: fixtureEcdhBob.getPublicKey("hex"),
-					fixtureEcdhSecretAHex: fixtureEcdhSecretA,
-					fixtureEcdhSecretBHex: fixtureEcdhSecretB,
-					invalidAesCode,
-					randomLength: random.length,
-					fillChanged: Array.from(fillTarget).some((byte) => byte !== 0),
-					ciphers: crypto.getCiphers(),
-					curves: crypto.getCurves(),
-					uuidLooksValid: /^[0-9a-f-]{36}$/.test(crypto.randomUUID()),
-				}));
-			})();
-		`,
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	const expectedDhSecret = cryptoBasicFixture.dh.secretHex.padStart(
-		cryptoBasicFixture.dh.primeHex.length,
-		"0",
-	);
-	expect(JSON.parse(getLastStdioMessage(result, "stdout"))).toEqual({
-		hashes: cryptoBasicFixture.expected.hashes,
-		md5: cryptoBasicFixture.expected.md5,
-		sha224: cryptoBasicFixture.expected.sha224,
-		sha256: cryptoBasicFixture.expected.sha256,
-		sha384: cryptoBasicFixture.expected.sha384,
-		hmacSha256: cryptoBasicFixture.expected.hmacSha256,
-		hmacWithSecretKey: cryptoBasicFixture.expected.hmacSha256,
-		hmacSha384: cryptoBasicFixture.expected.hmacSha384,
-		pbkdf2SyncHex: cryptoBasicFixture.expected.pbkdf2Sha256,
-		pbkdf2Sha384Hex: cryptoBasicFixture.expected.pbkdf2Sha384,
-		pbkdf2Hex: cryptoBasicFixture.expected.pbkdf2Sha256,
-		scryptSyncHex: cryptoBasicFixture.expected.scrypt,
-		scryptHex: cryptoBasicFixture.expected.scrypt,
-		aes256CbcCiphertext: cryptoBasicFixture.expected.aes256CbcCiphertext,
-		aes256CbcPlaintext: cryptoBasicFixture.aesCbc.plaintext,
-		aes256GcmCiphertext: cryptoBasicFixture.expected.aes256GcmCiphertext,
-		aes256GcmAuthTag: cryptoBasicFixture.expected.aes256GcmAuthTag,
-		aes256GcmPlaintext: cryptoBasicFixture.aesGcm.plaintext,
-		aes256GcmWebCryptoCiphertext: cryptoBasicFixture.expected.aes256GcmWebCryptoCiphertext,
-		aes256GcmWebCryptoPlaintext: cryptoBasicFixture.aesGcm.plaintext,
-		generatedPlaintext: "key-object",
-		secretKeyType: "secret",
-		secretKeySize: cryptoBasicFixture.hmacKey.length,
-		secretKeyExportHex: "7368617265642d736563726574",
-		generatedHmacKeyType: "secret",
-		generatedHmacKeySize: 32,
-		generatedAesKeyType: "secret",
-		generatedAesKeySize: 32,
-		generatedPrimeType: "bigint",
-		generatedPrimeBits: cryptoBasicFixture.expected.primes.bits,
-		generatedPrimeLooksPrime: true,
-		generatedSafePrimeBits: cryptoBasicFixture.expected.primes.safeBits,
-		generatedSafePrimeLooksSafe: true,
-		generatedPrimeBufferBits: cryptoBasicFixture.expected.primes.bufferBits,
-		generatedPrimeBufferByteLength: cryptoBasicFixture.expected.primes.bufferByteLength,
-		groupVerifyError: 0,
-		groupSecretMatches: true,
-		groupSecretLength: 256,
-		groupPrimeLength: 256,
-		groupGeneratorHex: "02",
-		fixtureDhPublicAHex: cryptoBasicFixture.dh.publicAHex,
-		fixtureDhPublicBHex: cryptoBasicFixture.dh.publicBHex,
-		fixtureDhSecretAHex: expectedDhSecret,
-		fixtureDhSecretBHex: expectedDhSecret,
-		x25519KeyTypes: ["private", "x25519", "public", "x25519"],
-		x25519SecretMatches: true,
-		x25519SecretLength: 32,
-		ecdhSecretMatches: true,
-		ecdhSecretLength: 32,
-		ecdhPublicKeyLength: 65,
-		ecdhCompressedPublicKeyLength: 33,
-		fixtureEcdhPublicAHex: cryptoBasicFixture.ecdh.publicAHex,
-		fixtureEcdhPublicBHex: cryptoBasicFixture.ecdh.publicBHex,
-		fixtureEcdhSecretAHex: cryptoBasicFixture.ecdh.secretHex,
-		fixtureEcdhSecretBHex: cryptoBasicFixture.ecdh.secretHex,
-		invalidAesCode: "ERR_INVALID_ARG_VALUE",
-		randomLength: 16,
-		fillChanged: true,
-		ciphers: cryptoBasicFixture.expected.ciphers,
-		curves: cryptoBasicFixture.expected.curves,
-		uuidLooksValid: true,
-	});
-});
-
-test("provides browser node:crypto RSA sign and verify parity", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-			const crypto = require("node:crypto");
-			const rsaFixture = ${JSON.stringify(cryptoBasicFixture.rsa)};
-			const privateKey = rsaFixture.privatePem;
-			const publicKey = rsaFixture.publicPem;
-			const message = rsaFixture.message;
-			const expectedSignature = rsaFixture.sha256SignatureHex;
-			const privateKeyObject = crypto.createPrivateKey(privateKey);
-			const publicKeyObject = crypto.createPublicKey(publicKey);
-			const signature = crypto.createSign("sha256").update(message).sign(privateKeyObject, "hex");
-			const verified = crypto.createVerify("sha256").update(message).verify(publicKeyObject, signature, "hex");
-			const expectedVerified = crypto.createVerify("sha256").update(message).verify(publicKeyObject, expectedSignature, "hex");
-			const tampered = crypto.createVerify("sha256").update(message + "!").verify(publicKeyObject, signature, "hex");
-			const oneShotSignature = crypto.sign("sha256", new TextEncoder().encode(message), privateKeyObject);
-			const oneShotVerified = crypto.verify("sha256", new TextEncoder().encode(message), publicKeyObject, oneShotSignature);
-			const oneShotTampered = crypto.verify("sha256", new TextEncoder().encode(message + "!"), publicKeyObject, oneShotSignature);
-			const encodeText = (value) => new TextEncoder().encode(value);
-			const generatedPair = crypto.generateKeyPairSync("rsa", { modulusLength: 1024 });
-			const generatedPrivatePem = generatedPair.privateKey.export({ format: "pem", type: "pkcs8" });
-			const generatedPublicPem = generatedPair.publicKey.export({ format: "pem", type: "spki" });
-			const generatedSignature = crypto.sign("sha256", encodeText("generated-rsa"), generatedPair.privateKey);
-			const generatedVerified = crypto.verify("sha256", encodeText("generated-rsa"), generatedPair.publicKey, generatedSignature);
-			const encodedPair = crypto.generateKeyPairSync("rsa", {
-				modulusLength: 1024,
-				publicKeyEncoding: { format: "pem", type: "spki" },
-				privateKeyEncoding: { format: "pem", type: "pkcs8" },
-			});
-			const generatedAsyncPair = await new Promise((resolve, reject) => {
-				crypto.generateKeyPair("rsa", { modulusLength: 1024 }, (error, publicKeyValue, privateKeyValue) => {
-					if (error) reject(error);
-					else resolve({
-						publicType: publicKeyValue.type,
-						privateType: privateKeyValue.type,
-						publicAsymmetricKeyType: publicKeyValue.asymmetricKeyType,
-						privateAsymmetricKeyType: privateKeyValue.asymmetricKeyType,
-					});
-				});
-			});
-			const oaepCiphertext = crypto.publicEncrypt(publicKeyObject, encodeText("secure-exec-rsa-oaep"));
-			const oaepPlaintext = crypto.privateDecrypt(privateKeyObject, oaepCiphertext).toString("utf8");
-			const pkcs1Ciphertext = crypto.publicEncrypt(
-				{ key: publicKeyObject, padding: crypto.constants.RSA_PKCS1_PADDING },
-				encodeText("secure-exec-rsa-pkcs1"),
-			);
-			const pkcs1Plaintext = crypto.privateDecrypt(
-				{ key: privateKeyObject, padding: crypto.constants.RSA_PKCS1_PADDING },
-				pkcs1Ciphertext,
-			).toString("utf8");
-			console.log(JSON.stringify({
-				signature,
-				verified,
-				expectedVerified,
-				tampered,
-				oneShotSignature: oneShotSignature.toString("hex"),
-				oneShotVerified,
-				oneShotTampered,
-				generatedKeyTypes: [
-					generatedPair.publicKey.type,
-					generatedPair.publicKey.asymmetricKeyType,
-					generatedPair.privateKey.type,
-					generatedPair.privateKey.asymmetricKeyType,
-				],
-				generatedPrivatePemHeader: generatedPrivatePem.split("\\n")[0],
-				generatedPublicPemHeader: generatedPublicPem.split("\\n")[0],
-				generatedVerified,
-				encodedPublicKeyKind: typeof encodedPair.publicKey,
-				encodedPrivateKeyKind: typeof encodedPair.privateKey,
-				encodedPublicKeyHeader: encodedPair.publicKey.split("\\n")[0],
-				encodedPrivateKeyHeader: encodedPair.privateKey.split("\\n")[0],
-				generatedAsyncPair,
-				oaepPlaintext,
-				pkcs1Plaintext,
-				keyTypes: [privateKeyObject.type, publicKeyObject.type],
-				constants: [crypto.constants.RSA_PKCS1_PADDING, crypto.constants.RSA_PKCS1_OAEP_PADDING],
-			}));
-			})();
-		`,
-	);
-
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(JSON.parse(getLastStdioMessage(result, "stdout"))).toEqual({
-		signature: cryptoBasicFixture.rsa.sha256SignatureHex,
-		verified: true,
-		expectedVerified: true,
-		tampered: false,
-		oneShotSignature: cryptoBasicFixture.rsa.sha256SignatureHex,
-		oneShotVerified: true,
-		oneShotTampered: false,
-		generatedKeyTypes: ["public", "rsa", "private", "rsa"],
-		generatedPrivatePemHeader: "-----BEGIN PRIVATE KEY-----",
-		generatedPublicPemHeader: "-----BEGIN PUBLIC KEY-----",
-		generatedVerified: true,
-		encodedPublicKeyKind: "string",
-		encodedPrivateKeyKind: "string",
-		encodedPublicKeyHeader: "-----BEGIN PUBLIC KEY-----",
-		encodedPrivateKeyHeader: "-----BEGIN PRIVATE KEY-----",
-		generatedAsyncPair: {
-			publicType: "public",
-			privateType: "private",
-			publicAsymmetricKeyType: "rsa",
-			privateAsymmetricKeyType: "rsa",
-		},
-		oaepPlaintext: "secure-exec-rsa-oaep",
-		pkcs1Plaintext: "secure-exec-rsa-pkcs1",
-		keyTypes: ["private", "public"],
-		constants: [1, 4],
-	});
-});
-
-test("fails loud on RSA-PSS signatures instead of silently downgrading to PKCS1", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-	const result = await execRuntime(
-		page,
-		runtimeId,
-		`
-			const crypto = require("node:crypto");
-			const rsaFixture = ${JSON.stringify(cryptoBasicFixture.rsa)};
-			const privateKeyObject = crypto.createPrivateKey(rsaFixture.privatePem);
-			const publicKeyObject = crypto.createPublicKey(rsaFixture.publicPem);
-			const grab = (fn) => { try { fn(); return null; } catch (e) { return e.code ?? e.message; } };
-			// The browser backend only does PKCS#1 v1.5. A PSS request must throw a
-			// clear unsupported error, never silently produce a PKCS1 signature.
-			const signPss = grab(() =>
-				crypto.createSign("sha256").update(rsaFixture.message).sign({
-					key: privateKeyObject,
-					padding: crypto.constants.RSA_PKCS1_PSS_PADDING ?? 6,
-				}, "hex"),
-			);
-			const verifyPss = grab(() =>
-				crypto.createVerify("sha256").update(rsaFixture.message).verify({
-					key: publicKeyObject,
-					padding: crypto.constants.RSA_PKCS1_PSS_PADDING ?? 6,
-				}, "00", "hex"),
-			);
-			// PKCS1 (the supported padding) still works.
-			const pkcs1Ok = typeof crypto.createSign("sha256").update(rsaFixture.message).sign({
-				key: privateKeyObject,
-				padding: crypto.constants.RSA_PKCS1_PADDING,
-			}, "hex") === "string";
-			console.log(JSON.stringify({ signPss, verifyPss, pkcs1Ok }));
-		`,
-	);
-	expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-	expect(JSON.parse(getLastStdioMessage(result, "stdout"))).toEqual({
-		signPss: "ERR_UNSUPPORTED_BROWSER_CRYPTO",
-		verifyPss: "ERR_UNSUPPORTED_BROWSER_CRYPTO",
-		pkcs1Ok: true,
-	});
-});
-
-test("applies frozen time by default and restores live timing when disabled", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-
-	const frozen = await execRuntime(
-		page,
-		runtimeId,
-		`
-			console.log(JSON.stringify({
-				firstDate: Date.now(),
-				secondDate: Date.now(),
-				firstPerformance: performance.now(),
-				secondPerformance: performance.now(),
-				frozenDate: new Date().getTime(),
-				sharedType: typeof SharedArrayBuffer,
-			}));
-		`,
-	);
-
-	const frozenValues = JSON.parse(getLastStdioMessage(frozen, "stdout")) as {
-		firstDate: number;
-		secondDate: number;
-		firstPerformance: number;
-		secondPerformance: number;
-		frozenDate: number;
-		sharedType: string;
-	};
-	expect(frozen.result.code).toBe(0);
-	expect(frozenValues.firstDate).toBe(frozenValues.secondDate);
-	expect(frozenValues.frozenDate).toBe(frozenValues.firstDate);
-	expect(frozenValues.firstPerformance).toBe(0);
-	expect(frozenValues.secondPerformance).toBe(0);
-	expect(frozenValues.sharedType).toBe("undefined");
-
-	const restored = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const startDate = Date.now();
-				const startPerformance = performance.now();
-				await new Promise((resolve) => setTimeout(resolve, 25));
-				const endDate = Date.now();
-				const endPerformance = performance.now();
-				console.log(JSON.stringify({
-					startDate,
-					endDate,
-					startPerformance,
-					endPerformance,
-					sharedType: typeof SharedArrayBuffer,
-				}));
-			})();
-		`,
-		{
-			timingMitigation: "off",
-		},
-	);
-
-	const restoredValues = JSON.parse(
-		getLastStdioMessage(restored, "stdout"),
-	) as {
-		startDate: number;
-		endDate: number;
-		startPerformance: number;
-		endPerformance: number;
-		sharedType: string;
-	};
-	expect(restored.result.code).toBe(0);
-	expect(restoredValues.endDate).toBeGreaterThan(restoredValues.startDate);
-	expect(restoredValues.endPerformance).toBeGreaterThan(
-		restoredValues.startPerformance,
-	);
-	expect(restoredValues.sharedType).not.toBe("undefined");
-});
-
-test("rejects forged guest control traffic and keeps the runtime usable", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-
-	const forgedMessageAttempt = await execRuntime(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				const rawPostMessageType = typeof _realPostMessage;
-				await self.onmessage({
-					data: {
-						id: 999,
-						type: "dispose",
-					},
-				});
-				console.log(JSON.stringify({
-					rawPostMessageType,
-					onmessageType: typeof self.onmessage,
-					stillRunning: true,
-				}));
-			})();
-		`,
-	);
-
-	expect(forgedMessageAttempt.result.code).toBe(0);
-	expect(
-		JSON.parse(getLastStdioMessage(forgedMessageAttempt, "stdout")),
-	).toEqual({
-		rawPostMessageType: "undefined",
-		onmessageType: "function",
-		stillRunning: true,
-	});
-
-	const followUp = await execRuntime(
-		page,
-		runtimeId,
-		`console.log("second-pass");`,
-	);
-	expect(followUp.result.code).toBe(0);
-	expect(getLastStdioMessage(followUp, "stdout")).toBe("second-pass\n");
-});
-
-test("hard termination rejects pending work and clears sync bridge state", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-
-	const warmup = await execRuntime(page, runtimeId, `console.log("warmup");`);
-	expect(warmup.result.code).toBe(0);
-	expect(getLastStdioMessage(warmup, "stdout")).toBe("warmup\n");
-
-	const terminated = await terminatePendingExec(
-		page,
-		runtimeId,
-		`
-			(async () => {
-				await new Promise(() => undefined);
-			})();
-		`,
-	);
-
-	expect(terminated.outcome).toBe("rejected");
-	expect(terminated.errorMessage).toContain("disposed");
-	expect(terminated.debug.disposed).toBe(true);
-	expect(terminated.debug.pendingCount).toBe(0);
-	expect(terminated.debug.signalState).toEqual([0, 0, 0, 0]);
-	expect(terminated.debug.workerOnmessage).toBe("null");
-	expect(terminated.debug.workerOnerror).toBe("null");
-});
-
-test("signals resolve pending browser execution with default signal exit codes", async ({
-	page,
-}) => {
-	const { runtimeId } = await createRuntime(page);
-
-	for (const [signal, exitCode] of [
-		[15, 143],
-		[9, 137],
-	]) {
-		const terminated = await signalPendingExec(
-			page,
-			runtimeId,
-			`
-				(async () => {
-					await new Promise(() => undefined);
-				})();
-			`,
-			signal,
-		);
-
-		expect(terminated.signaled).toBe(true);
-		expect(terminated.outcome).toBe("resolved");
-		expect(terminated.resultCode).toBe(exitCode);
-		expect(terminated.errorMessage).toBeNull();
-		expect(terminated.debug.disposed).toBe(false);
-		expect(terminated.debug.pendingCount).toBe(0);
-	}
-});
diff --git a/packages/browser/tests/browser/wasi-testsuite.spec.ts b/packages/browser/tests/browser/wasi-testsuite.spec.ts
deleted file mode 100644
index 695317ee0..000000000
--- a/packages/browser/tests/browser/wasi-testsuite.spec.ts
+++ /dev/null
@@ -1,73 +0,0 @@
-// WASI preview1 conformance subset (browser backend).
-//
-// Runs a vendored subset of the official WebAssembly/wasi-testsuite preview1
-// modules through the SHARED WASI runner on the browser backend, asserting the
-// upstream spec's exit code + stdout. The identical manifest is run on the
-// native backend by `crates/execution/tests/wasm.rs` (wasi_testsuite_subset), so
-// the one shared runner is conformance-checked on both backends.
-
-import { expect, test } from "@playwright/test";
-import { readFileSync } from "node:fs";
-import { createRuntime, disposeAllRuntimes, execRuntime, openHarnessPage } from "./harness.js";
-
-interface WasiTestsuiteCase {
-	name: string;
-	exitCode: number;
-	stdout?: string;
-	wasmBase64: string;
-}
-
-const manifest = JSON.parse(
-	readFileSync(
-		new URL(
-			"../../../../tests/fixtures/wasi-testsuite-subset.json",
-			import.meta.url,
-		),
-		"utf8",
-	),
-) as { cases: WasiTestsuiteCase[] };
-
-test.beforeEach(async ({ page }) => {
-	await openHarnessPage(page);
-});
-
-test.afterEach(async ({ page }) => {
-	await disposeAllRuntimes(page);
-});
-
-for (const testCase of manifest.cases) {
-	test(`wasi-testsuite preview1: ${testCase.name}`, async ({ page }) => {
-		const { runtimeId } = await createRuntime(page);
-		const result = await execRuntime(
-			page,
-			runtimeId,
-			`
-				(async () => {
-					const { WASI } = require("node:wasi");
-					const bytes = Uint8Array.from(atob(${JSON.stringify(testCase.wasmBase64)}), (char) => char.charCodeAt(0));
-					const wasi = new WASI({ returnOnExit: true });
-					const { instance } = await WebAssembly.instantiate(bytes, {
-						wasi_snapshot_preview1: wasi.wasiImport,
-					});
-					const exitCode = wasi.start(instance);
-					console.log("wasi-exit:" + exitCode);
-				})();
-			`,
-		);
-
-		// The guest JS itself always completes (it catches the WASI exit via
-		// returnOnExit), so the execution exit is 0; the WASI exit code is logged.
-		expect(result.result.code, result.result.errorMessage ?? "").toBe(0);
-		expect(result.stdio).toContainEqual({
-			channel: "stdout",
-			message: `wasi-exit:${testCase.exitCode}\n`,
-		});
-		if (typeof testCase.stdout === "string" && testCase.stdout.length > 0) {
-			const stdout = result.stdio
-				.filter((entry) => entry.channel === "stdout")
-				.map((entry) => entry.message)
-				.join("");
-			expect(stdout).toContain(testCase.stdout);
-		}
-	});
-}
diff --git a/packages/browser/tests/integration/converged-wasm.test.ts b/packages/browser/tests/integration/converged-wasm.test.ts
deleted file mode 100644
index 6b54472d7..000000000
--- a/packages/browser/tests/integration/converged-wasm.test.ts
+++ /dev/null
@@ -1,132 +0,0 @@
-// Integration test: drives the converged TypeScript executor stack
-// (ConvergedExecutorSession + ConvergedSyncBridgeHandler + the fs/net bridges)
-// against the REAL wasm sidecar kernel (crates/sidecar-browser built with
-// `pnpm build:sidecar-wasm`). This is the end-to-end proof that guest syscalls
-// route through the kernel over the wire, replacing the legacy in-process TS
-// kernel.
-//
-// Skips (rather than fails) when the wasm package has not been built, so the
-// default unit run stays fast; CI builds it first.
-
-import { createRequire } from "node:module";
-import { existsSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import path from "node:path";
-import { describe, expect, it } from "vitest";
-import type { CreateVmConfig } from "@secure-exec/core/vm-config";
-import { ConvergedExecutorSession } from "../../src/converged-executor-session.js";
-import {
-	SYNC_BRIDGE_KIND_JSON,
-	SYNC_BRIDGE_KIND_NONE,
-	SYNC_BRIDGE_KIND_TEXT,
-} from "../../src/sync-bridge.js";
-
-const here = path.dirname(fileURLToPath(import.meta.url));
-const pkgEntry = path.resolve(
-	here,
-	"../../.cache/sidecar-wasm/secure_exec_sidecar_browser.js",
-);
-const pkgBuilt = existsSync(pkgEntry);
-
-const PERMISSIVE_CONFIG = {
-	permissions: { fs: "allow", network: "allow" },
-} as unknown as CreateVmConfig;
-
-function loadSidecar(): { pushFrame: (frame: Uint8Array) => Uint8Array } {
-	const require = createRequire(import.meta.url);
-	const pkg = require(pkgEntry);
-	const sidecar = new pkg.BrowserSidecarWasm(undefined);
-	return {
-		pushFrame: (frame: Uint8Array) => {
-			const response = sidecar.pushFrame(frame);
-			if (!(response instanceof Uint8Array)) {
-				throw new Error("wasm sidecar returned no response frame");
-			}
-			return response;
-		},
-	};
-}
-
-describe.skipIf(!pkgBuilt)("converged executor over the real wasm kernel", () => {
-	function bootstrappedHandler() {
-		const session = new ConvergedExecutorSession({
-			pushFrame: loadSidecar().pushFrame,
-			codec: "bare",
-		});
-		session.bootstrap({ runtime: "java_script", config: PERMISSIVE_CONFIG });
-		return session.handlerForExecution("exec-1");
-	}
-
-	it("round-trips guest filesystem syscalls through the kernel", () => {
-		const handler = bootstrappedHandler();
-
-		expect(handler.handle("fs.mkdir", ["/work"])).toEqual({
-			kind: SYNC_BRIDGE_KIND_NONE,
-		});
-		expect(
-			handler.handle("fs.writeFile", ["/work/a.txt", "converged-wasm"]),
-		).toEqual({ kind: SYNC_BRIDGE_KIND_NONE });
-
-		expect(handler.handle("fs.readFile", ["/work/a.txt"])).toEqual({
-			kind: SYNC_BRIDGE_KIND_TEXT,
-			value: "converged-wasm",
-		});
-
-		const stat = handler.handle("fs.stat", ["/work/a.txt"]);
-		expect(stat.kind).toBe(SYNC_BRIDGE_KIND_JSON);
-		expect(stat.kind === SYNC_BRIDGE_KIND_JSON ? stat.value : null).toMatchObject(
-			{ size: 14, isDirectory: false },
-		);
-	});
-
-	it("expands readdir into typed entries via per-entry lstat", () => {
-		const handler = bootstrappedHandler();
-		handler.handle("fs.mkdir", ["/dir"]);
-		handler.handle("fs.writeFile", ["/dir/file.txt", "x"]);
-		handler.handle("fs.mkdir", ["/dir/sub"]);
-
-		const listing = handler.handle("fs.readDir", ["/dir"]);
-		expect(listing.kind).toBe(SYNC_BRIDGE_KIND_JSON);
-		const entries = (listing.kind === SYNC_BRIDGE_KIND_JSON
-			? (listing.value as Array<{ name: string; isDirectory: boolean }>)
-			: []
-		).sort((a, b) => a.name.localeCompare(b.name));
-		expect(entries).toEqual([
-			{ name: "file.txt", isDirectory: false, isSymbolicLink: false },
-			{ name: "sub", isDirectory: true, isSymbolicLink: false },
-		]);
-	});
-
-	it("carries a guest_kernel_call (net) ArrayBuffer payload through the BARE wire", () => {
-		// Full net loopback needs a started execution (execution_id -> kernel pid);
-		// here we prove the harder-to-cover bit: the BARE frame + opaque
-		// ArrayBuffer `payload` of a guest_kernel_call round-trips through the real
-		// wasm decoder and routes to the execution lookup (which rejects an unknown
-		// execution) rather than failing to decode.
-		const session = new ConvergedExecutorSession({
-			pushFrame: loadSidecar().pushFrame,
-			codec: "bare",
-		});
-		session.bootstrap({ runtime: "java_script", config: PERMISSIVE_CONFIG });
-		const handler = session.handlerForExecution("no-such-execution");
-		expect(() =>
-			handler.handle("net.connect", [{ host: "127.0.0.1", port: 9 }]),
-		).toThrow(/execution|guest_kernel/i);
-	});
-
-	it("enforces the kernel permission policy (deny-all config)", () => {
-		const session = new ConvergedExecutorSession({
-			pushFrame: loadSidecar().pushFrame,
-			codec: "bare",
-		});
-		// Empty config => no policy => deny-all (S5).
-		session.bootstrap({
-			runtime: "java_script",
-			config: {} as unknown as CreateVmConfig,
-		});
-		const handler = session.handlerForExecution("exec-1");
-		expect(() => handler.handle("fs.writeFile", ["/blocked", "x"])).toThrow(
-			/EACCES|denied|policy/,
-		);
-	});
-});
diff --git a/packages/browser/tests/runtime-driver/child-process-sync-bridge.test.ts b/packages/browser/tests/runtime-driver/child-process-sync-bridge.test.ts
deleted file mode 100644
index 1ac19872b..000000000
--- a/packages/browser/tests/runtime-driver/child-process-sync-bridge.test.ts
+++ /dev/null
@@ -1,434 +0,0 @@
-import { afterEach, describe, expect, it } from "vitest";
-import type { BrowserChildProcessSpawnRequest } from "../../src/child-process-bridge.js";
-import { BrowserRuntimeDriver } from "../../src/runtime-driver.js";
-import { fakeConvergedFactoryOptions } from "./fake-converged-sidecar.js";
-import type {
-	CommandExecutor,
-	VirtualFileSystem,
-	RuntimeDriverOptions,
-} from "../../src/runtime.js";
-import {
-	SYNC_BRIDGE_SIGNAL_KIND_INDEX,
-	SYNC_BRIDGE_SIGNAL_LENGTH_INDEX,
-	SYNC_BRIDGE_SIGNAL_STATE_INDEX,
-	SYNC_BRIDGE_SIGNAL_STATE_READY,
-	SYNC_BRIDGE_SIGNAL_STATUS_INDEX,
-	SYNC_BRIDGE_KIND_JSON,
-	SYNC_BRIDGE_KIND_NONE,
-	SYNC_BRIDGE_KIND_TEXT,
-	SYNC_BRIDGE_STATUS_ERROR,
-	SYNC_BRIDGE_STATUS_OK,
-} from "../../src/sync-bridge.js";
-
-const encoder = new TextEncoder();
-const decoder = new TextDecoder();
-
-type WorkerHandler = (event: { data: unknown }) => void;
-
-type InitMessage = {
-	controlToken: string;
-	id: number;
-	type: "init";
-	payload: {
-		syncBridge: {
-			signalBuffer: SharedArrayBuffer;
-			dataBuffer: SharedArrayBuffer;
-		};
-	};
-};
-
-type ExecMessage = {
-	controlToken: string;
-	id: number;
-	type: "exec";
-	payload: {
-		executionId: string;
-	};
-};
-
-class FakeWorker {
-	static instances: FakeWorker[] = [];
-	static expectedSyncStatus = SYNC_BRIDGE_STATUS_OK;
-	static expectedSyncKind = SYNC_BRIDGE_KIND_JSON;
-	static syncRequestOverride: Partial<{
-		executionId: string;
-		processRequestId: number;
-	}> = {};
-	static syncOperation = "child_process.spawn";
-	static syncArgs: unknown[] = [
-		{
-			command: "echo",
-			args: ["hi"],
-			options: { cwd: "/work", env: { HELLO: "world" } },
-		} satisfies BrowserChildProcessSpawnRequest,
-	];
-
-	onmessage: WorkerHandler | null = null;
-	onerror: WorkerHandler | null = null;
-	syncResponse: unknown;
-	private syncBridge: InitMessage["payload"]["syncBridge"] | null = null;
-
-	constructor() {
-		FakeWorker.instances.push(this);
-	}
-
-	postMessage(message: InitMessage | ExecMessage): void {
-		if (message.type === "init") {
-			this.syncBridge = message.payload.syncBridge;
-			queueMicrotask(() => {
-				this.onmessage?.({
-					data: {
-						controlToken: message.controlToken,
-						id: message.id,
-						type: "response",
-						ok: true,
-						result: null,
-					},
-				});
-			});
-			return;
-		}
-
-		if (message.type === "exec") {
-			void this.handleExec(message);
-		}
-	}
-
-	terminate(): void {}
-
-	private async handleExec(message: ExecMessage): Promise<void> {
-		if (!this.syncBridge) {
-			throw new Error("FakeWorker was not initialized");
-		}
-
-		new Int32Array(this.syncBridge.signalBuffer).fill(0);
-		new Uint8Array(this.syncBridge.dataBuffer).fill(0);
-		this.onmessage?.({
-			data: {
-				controlToken: message.controlToken,
-				executionId:
-					FakeWorker.syncRequestOverride.executionId ??
-					message.payload.executionId,
-				processRequestId:
-					FakeWorker.syncRequestOverride.processRequestId ?? message.id,
-				requestId: 1,
-				type: "sync-request",
-				operation: FakeWorker.syncOperation,
-				args: FakeWorker.syncArgs,
-			},
-		});
-
-		const signal = new Int32Array(this.syncBridge.signalBuffer);
-		const data = new Uint8Array(this.syncBridge.dataBuffer);
-		while (
-			Atomics.load(signal, SYNC_BRIDGE_SIGNAL_STATE_INDEX) !==
-			SYNC_BRIDGE_SIGNAL_STATE_READY
-		) {
-			await new Promise((resolve) => setTimeout(resolve, 0));
-		}
-
-		expect(Atomics.load(signal, SYNC_BRIDGE_SIGNAL_STATUS_INDEX)).toBe(
-			FakeWorker.expectedSyncStatus,
-		);
-		expect(Atomics.load(signal, SYNC_BRIDGE_SIGNAL_KIND_INDEX)).toBe(
-			FakeWorker.expectedSyncKind,
-		);
-		const kind = Atomics.load(signal, SYNC_BRIDGE_SIGNAL_KIND_INDEX);
-		const length = Atomics.load(signal, SYNC_BRIDGE_SIGNAL_LENGTH_INDEX);
-		const responseText = decoder.decode(data.subarray(0, length));
-		this.syncResponse =
-			kind === SYNC_BRIDGE_KIND_JSON
-				? JSON.parse(responseText)
-				: kind === SYNC_BRIDGE_KIND_TEXT
-					? responseText
-					: null;
-
-		this.onmessage?.({
-			data: {
-				controlToken: message.controlToken,
-				id: message.id,
-				type: "response",
-				ok: true,
-				result: { code: 0, stdout: "done" },
-			},
-		});
-	}
-}
-
-function createOptions(
-	commandExecutor: CommandExecutor,
-	filesystem?: VirtualFileSystem,
-): RuntimeDriverOptions {
-	return {
-		system: {
-			commandExecutor,
-			filesystem,
-			runtime: {
-				process: {},
-				os: {},
-			},
-		},
-		runtime: {
-			process: {},
-			os: {},
-		},
-	};
-}
-
-describe("browser child_process sync bridge", () => {
-	const originalWorker = globalThis.Worker;
-
-	afterEach(() => {
-		Object.defineProperty(globalThis, "Worker", {
-			value: originalWorker,
-			configurable: true,
-			writable: true,
-		});
-		FakeWorker.instances.length = 0;
-		FakeWorker.expectedSyncStatus = SYNC_BRIDGE_STATUS_OK;
-		FakeWorker.expectedSyncKind = SYNC_BRIDGE_KIND_JSON;
-		FakeWorker.syncRequestOverride = {};
-		FakeWorker.syncOperation = "child_process.spawn";
-		FakeWorker.syncArgs = [
-			{
-				command: "echo",
-				args: ["hi"],
-				options: { cwd: "/work", env: { HELLO: "world" } },
-			} satisfies BrowserChildProcessSpawnRequest,
-		];
-	});
-
-	it("runs browser child_process requests through the driver command executor", async () => {
-		Object.defineProperty(globalThis, "Worker", {
-			value: FakeWorker,
-			configurable: true,
-			writable: true,
-		});
-		const spawns: Array<{
-			command: string;
-			args: string[];
-			cwd?: string;
-			env?: Record<string, string>;
-		}> = [];
-		const executor: CommandExecutor = {
-			spawn(command, args, options) {
-				spawns.push({
-					command,
-					args,
-					cwd: options?.cwd,
-					env: options?.env,
-				});
-				options?.onStdout?.(encoder.encode("hello"));
-				return {
-					async wait() {
-						return 0;
-					},
-					writeStdin() {},
-					closeStdin() {},
-					kill() {},
-				};
-			},
-		};
-
-		const driver = new BrowserRuntimeDriver(
-			createOptions(executor),
-			fakeConvergedFactoryOptions(),
-		);
-		const result = await driver.exec("require('child_process').spawn('echo')");
-
-		expect(result).toMatchObject({ code: 0, stdout: "done" });
-		expect(spawns).toEqual([
-			{
-				command: "echo",
-				args: ["hi"],
-				cwd: "/work",
-				env: { HELLO: "world" },
-			},
-		]);
-		expect(FakeWorker.instances[0]?.syncResponse).toBe(1);
-		const childProcessSessions = (
-			driver as unknown as {
-				childProcessSessions: Map<number, { executionId: string }>;
-			}
-		).childProcessSessions;
-		expect(childProcessSessions.size).toBe(0);
-		driver.dispose();
-	});
-
-	// Module resolution is now serviced by the converged kernel-backed resolver;
-	// see converged-module-servicer.test.ts (exports/import-mode coverage).
-
-	it("forwards spawnSync input to the command executor stdin", async () => {
-		Object.defineProperty(globalThis, "Worker", {
-			value: FakeWorker,
-			configurable: true,
-			writable: true,
-		});
-		FakeWorker.syncOperation = "child_process.spawn_sync";
-		FakeWorker.syncArgs = [
-			{
-				command: "cat",
-				args: [],
-				options: {
-					cwd: "/work",
-					input: { __agentOSType: "bytes", base64: "c3RkaW4=" },
-				},
-			} satisfies BrowserChildProcessSpawnRequest,
-		];
-		FakeWorker.expectedSyncKind = SYNC_BRIDGE_KIND_TEXT;
-		const stdinChunks: string[] = [];
-		let closed = false;
-		const executor: CommandExecutor = {
-			spawn(command, args, options) {
-				expect(command).toBe("cat");
-				expect(args).toEqual([]);
-				expect(options?.cwd).toBe("/work");
-				options?.onStdout?.(encoder.encode("stdout"));
-				return {
-					async wait() {
-						return 0;
-					},
-					writeStdin(data) {
-						stdinChunks.push(decoder.decode(data as Uint8Array));
-					},
-					closeStdin() {
-						closed = true;
-					},
-					kill() {},
-				};
-			},
-		};
-
-		const driver = new BrowserRuntimeDriver(
-			createOptions(executor),
-			fakeConvergedFactoryOptions(),
-		);
-		await driver.exec("require('child_process').spawnSync('cat')");
-
-		expect(stdinChunks).toEqual(["stdin"]);
-		expect(closed).toBe(true);
-		driver.dispose();
-	});
-
-	it("rejects sync bridge requests that do not match the pending execution request", async () => {
-		Object.defineProperty(globalThis, "Worker", {
-			value: FakeWorker,
-			configurable: true,
-			writable: true,
-		});
-		FakeWorker.expectedSyncStatus = SYNC_BRIDGE_STATUS_ERROR;
-		FakeWorker.syncRequestOverride = { processRequestId: 999 };
-		const executor: CommandExecutor = {
-			spawn() {
-				throw new Error("forged sync request reached command executor");
-			},
-		};
-
-		const driver = new BrowserRuntimeDriver(
-			createOptions(executor),
-			fakeConvergedFactoryOptions(),
-		);
-		const result = await driver.exec("require('child_process').spawn('echo')");
-
-		expect(result).toMatchObject({ code: 0, stdout: "done" });
-		expect(FakeWorker.instances[0]?.syncResponse).toMatchObject({
-			message:
-				"Browser runtime sync bridge request for unknown execution exec-1",
-		});
-		driver.dispose();
-	});
-
-	it("clears process signal state registrations when browser worker executions finish", async () => {
-		Object.defineProperty(globalThis, "Worker", {
-			value: FakeWorker,
-			configurable: true,
-			writable: true,
-		});
-		FakeWorker.syncOperation = "process.signal_state";
-		FakeWorker.syncArgs = [15, "user", "[2]", 0];
-		FakeWorker.expectedSyncKind = SYNC_BRIDGE_KIND_NONE;
-		const driver = new BrowserRuntimeDriver(
-			createOptions({
-				spawn() {
-					throw new Error("process.signal_state should not spawn commands");
-				},
-			}),
-			fakeConvergedFactoryOptions(),
-		);
-
-		await driver.exec("process.on('SIGTERM', () => {})");
-
-		const signalStates = (
-			driver as unknown as {
-				signalStates: Map<
-					string,
-					Map<number, { action: string; mask: number[]; flags: number }>
-				>;
-			}
-		).signalStates;
-		expect(signalStates.has("exec-1")).toBe(false);
-		driver.dispose();
-	});
-
-	it("rejects browser child_process session operations from a different execution", async () => {
-		Object.defineProperty(globalThis, "Worker", {
-			value: FakeWorker,
-			configurable: true,
-			writable: true,
-		});
-		FakeWorker.syncOperation = "child_process.kill";
-		FakeWorker.syncArgs = [42, 15];
-		FakeWorker.expectedSyncStatus = SYNC_BRIDGE_STATUS_ERROR;
-		let killed = false;
-		const driver = new BrowserRuntimeDriver(
-			createOptions({
-				spawn() {
-					throw new Error("child_process.kill should not spawn commands");
-				},
-			}),
-			fakeConvergedFactoryOptions(),
-		);
-		const childProcessSessions = (
-			driver as unknown as {
-				childProcessSessions: Map<
-					number,
-					{
-						executionId: string;
-						process: {
-							writeStdin(data: Uint8Array): void;
-							closeStdin(): void;
-							kill(signal?: number): void;
-							wait(): Promise<number>;
-						};
-						events: unknown[];
-						exited: boolean;
-					}
-				>;
-			}
-		).childProcessSessions;
-		childProcessSessions.set(42, {
-			executionId: "exec-owner",
-			process: {
-				writeStdin() {},
-				closeStdin() {},
-				kill() {
-					killed = true;
-				},
-				async wait() {
-					return 0;
-				},
-			},
-			events: [],
-			exited: false,
-		});
-
-		await driver.exec("require('child_process').spawn('echo').kill()");
-
-		expect(FakeWorker.instances[0]?.syncResponse).toMatchObject({
-			message: "unknown child_process session 42",
-		});
-		expect(killed).toBe(false);
-		expect(childProcessSessions.has(42)).toBe(true);
-		driver.dispose();
-	});
-});
diff --git a/packages/browser/tests/runtime-driver/fake-converged-sidecar.ts b/packages/browser/tests/runtime-driver/fake-converged-sidecar.ts
deleted file mode 100644
index 1d4714702..000000000
--- a/packages/browser/tests/runtime-driver/fake-converged-sidecar.ts
+++ /dev/null
@@ -1,112 +0,0 @@
-// A fake in-process wasm sidecar for white-box driver tests that need the
-// converged path bootstrapped but only exercise host-capability families
-// (child_process.* / process.signal_state) which route through the converged
-// router's legacy fallback, never touching the kernel. Mirrors the fake used by
-// converged-driver-setup.test.ts; speaks the real JSON frame codec.
-
-import type { LiveResponsePayload } from "@secure-exec/core/protocol-frames";
-import {
-	decodeProtocolFramePayload,
-	encodeProtocolFramePayload,
-	type LiveProtocolFrame,
-} from "@secure-exec/core/protocol-frames";
-import type { LiveRequestPayload } from "@secure-exec/core/request-payloads";
-import { SIDECAR_PROTOCOL_SCHEMA } from "@secure-exec/core/protocol-schema";
-import type { CreateVmConfig } from "@secure-exec/core/vm-config";
-import type {
-	ConvergedSidecarFactoryOptions,
-	ConvergedSidecarHandle,
-} from "../../src/runtime-driver.js";
-
-export const FAKE_CONVERGED_CONFIG = {
-	permissions: { fs: "allow" },
-} as unknown as CreateVmConfig;
-
-/** A synchronous `pushFrame` that answers the bootstrap handshake (JSON codec). */
-export function fakeConvergedPushFrame(): (frame: Uint8Array) => Uint8Array {
-	const files = new Map<string, string>();
-	const dirs = new Set<string>(["/"]);
-	return (frameBytes) => {
-		const frame = decodeProtocolFramePayload(
-			frameBytes,
-			"json",
-		) as unknown as LiveProtocolFrame;
-		if (frame.frame_type !== "request") {
-			throw new Error(`expected request, got ${frame.frame_type}`);
-		}
-		return encodeProtocolFramePayload(
-			{
-				frame_type: "response",
-				schema: SIDECAR_PROTOCOL_SCHEMA,
-				request_id: frame.request_id,
-				ownership: frame.ownership,
-				payload: service(frame.payload, files, dirs),
-			},
-			"json",
-		);
-	};
-}
-
-/** Driver factory options wiring the fake converged sidecar. */
-export function fakeConvergedFactoryOptions(): {
-	convergedSidecar: ConvergedSidecarFactoryOptions;
-} {
-	return {
-		convergedSidecar: {
-			loadSidecar: async (): Promise<ConvergedSidecarHandle> => ({
-				pushFrame: fakeConvergedPushFrame(),
-			}),
-			config: FAKE_CONVERGED_CONFIG,
-			codec: "json",
-		},
-	};
-}
-
-function service(
-	request: LiveRequestPayload,
-	files: Map<string, string>,
-	dirs: Set<string>,
-): LiveResponsePayload {
-	switch (request.type) {
-		case "authenticate":
-			return {
-				type: "authenticated",
-				sidecar_id: "s",
-				connection_id: "c",
-				max_frame_bytes: 1024,
-			};
-		case "open_session":
-			return {
-				type: "session_opened",
-				session_id: "se",
-				owner_connection_id: "c",
-			};
-		case "create_vm":
-			return { type: "vm_created", vm_id: "vm" };
-		case "execute":
-			return { type: "process_started", process_id: request.process_id };
-		case "guest_filesystem_call": {
-			const ok = (extra: Record<string, unknown>) => ({
-				type: "guest_filesystem_result" as const,
-				operation: request.operation,
-				path: request.path,
-				...extra,
-			});
-			switch (request.operation) {
-				case "mkdir":
-				case "create_dir":
-					dirs.add(request.path);
-					return ok({});
-				case "write_file":
-					files.set(request.path, request.content ?? "");
-					return ok({});
-				case "read_file":
-					return ok({ content: files.get(request.path) ?? "", encoding: "utf8" });
-				default:
-					return ok({});
-			}
-		}
-		default:
-			return { type: "rejected", code: "x", message: request.type };
-	}
-}
diff --git a/packages/browser/tests/runtime/command-executor-permissions.test.ts b/packages/browser/tests/runtime/command-executor-permissions.test.ts
deleted file mode 100644
index e75726907..000000000
--- a/packages/browser/tests/runtime/command-executor-permissions.test.ts
+++ /dev/null
@@ -1,54 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import type { CommandExecutor } from "../../src/runtime.js";
-import { wrapCommandExecutor } from "../../src/runtime.js";
-
-function fakeExecutor(): CommandExecutor {
-	return {
-		spawn: vi.fn(() => ({
-			wait: async () => 0,
-			writeStdin: vi.fn(),
-			closeStdin: vi.fn(),
-			kill: vi.fn(),
-		})),
-	};
-}
-
-describe("browser command executor permissions", () => {
-	it("passes command, args, cwd, and env to the child_process permission check", () => {
-		const inner = fakeExecutor();
-		const seen: unknown[] = [];
-		const wrapped = wrapCommandExecutor(inner, {
-			childProcess(request) {
-				seen.push(request);
-				return true;
-			},
-		});
-
-		wrapped.spawn("tool", ["--flag"], {
-			cwd: "/workspace",
-			env: { PATH: "/bin" },
-		});
-
-		expect(seen).toEqual([
-			{
-				command: "tool",
-				args: ["--flag"],
-				cwd: "/workspace",
-				env: { PATH: "/bin" },
-			},
-		]);
-		expect(inner.spawn).toHaveBeenCalledOnce();
-	});
-
-	it("blocks denied child_process spawns before invoking the executor", () => {
-		const inner = fakeExecutor();
-		const wrapped = wrapCommandExecutor(inner, {
-			childProcess() {
-				return { allow: false };
-			},
-		});
-
-		expect(() => wrapped.spawn("tool", [])).toThrow(/EACCES/);
-		expect(inner.spawn).not.toHaveBeenCalled();
-	});
-});
diff --git a/packages/browser/tests/runtime/console-formatting.test.ts b/packages/browser/tests/runtime/console-formatting.test.ts
deleted file mode 100644
index 41120c694..000000000
--- a/packages/browser/tests/runtime/console-formatting.test.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { getRequireSetupCode } from "../../src/runtime.js";
-
-describe("browser console formatting", () => {
-	it("routes console output through util.formatWithOptions", () => {
-		const globalRecord = globalThis as typeof globalThis & Record<string, unknown>;
-		const previous = new Map<string, unknown>();
-		const keys = [
-			"__agentOSEncoding",
-			"_loadPolyfill",
-			"_log",
-			"_error",
-			"console",
-			"require",
-			"_moduleCache",
-			"_currentModule",
-		];
-		for (const key of keys) {
-			previous.set(key, globalRecord[key]);
-		}
-
-		const stdout: unknown[][] = [];
-		const stderr: unknown[][] = [];
-		globalRecord._loadPolyfill = (moduleName: string) => {
-			if (moduleName !== "util") return null;
-			return `
-				module.exports = {
-					formatWithOptions(options, ...args) {
-						return "UTIL:" + options.colors + ":" + args.map((value) => typeof value).join(",");
-					},
-				};
-			`;
-		};
-		globalRecord._log = (...args: unknown[]) => {
-			stdout.push(args);
-		};
-		globalRecord._error = (...args: unknown[]) => {
-			stderr.push(args);
-		};
-
-		try {
-			new Function(getRequireSetupCode())();
-
-			console.log({ nested: true }, "value");
-			console.warn("warning");
-
-			expect(stdout).toEqual([["UTIL:false:object,string\n"]]);
-			expect(stderr).toEqual([["UTIL:false:string\n"]]);
-		} finally {
-			for (const key of keys) {
-				const value = previous.get(key);
-				if (value === undefined) {
-					delete globalRecord[key];
-				} else {
-					globalRecord[key] = value;
-				}
-			}
-		}
-	});
-});
diff --git a/packages/browser/tests/runtime/converged-dgram-bridge.test.ts b/packages/browser/tests/runtime/converged-dgram-bridge.test.ts
deleted file mode 100644
index ae3832093..000000000
--- a/packages/browser/tests/runtime/converged-dgram-bridge.test.ts
+++ /dev/null
@@ -1,106 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-	convergedDgramInlineResponse,
-	convergedDgramRequestPayload,
-	convergedDgramSyncResponse,
-	dgramOperationUsesKernel,
-	isConvergedDgramBridgeOperation,
-} from "../../src/converged-dgram-bridge.js";
-import { SYNC_BRIDGE_KIND_JSON } from "../../src/sync-bridge.js";
-
-function decode(payload: ArrayBuffer): unknown {
-	return JSON.parse(new TextDecoder().decode(new Uint8Array(payload)));
-}
-
-describe("converged dgram bridge", () => {
-	it("classifies dgram operations and kernel vs inline", () => {
-		expect(isConvergedDgramBridgeOperation("dgram.send")).toBe(true);
-		expect(isConvergedDgramBridgeOperation("dgram.setBufferSize")).toBe(true);
-		expect(isConvergedDgramBridgeOperation("net.connect")).toBe(false);
-		expect(dgramOperationUsesKernel("dgram.send")).toBe(true);
-		expect(dgramOperationUsesKernel("dgram.setBufferSize")).toBe(false);
-	});
-
-	it("maps bind/send positional args to kernel JSON", () => {
-		const bind = convergedDgramRequestPayload(
-			"dgram.bind",
-			[3, { port: 5000, address: "127.0.0.1" }],
-			"exec-1",
-		);
-		expect(bind.operation).toBe("dgram.bind");
-		expect(decode(bind.payload)).toEqual({
-			socketId: 3,
-			host: "127.0.0.1",
-			port: 5000,
-		});
-
-		const send = convergedDgramRequestPayload(
-			"dgram.send",
-			[4, new Uint8Array([1, 2, 3]), { port: 6000, address: "127.0.0.1" }],
-			"exec-1",
-		);
-		expect(decode(send.payload)).toEqual({
-			socketId: 4,
-			host: "127.0.0.1",
-			port: 6000,
-			data: "AQID",
-		});
-	});
-
-	it("maps kernel recv results to the guest message shape", () => {
-		expect(
-			convergedDgramSyncResponse("dgram.recv", {
-				data: "AQID",
-				remoteAddress: "127.0.0.1",
-				remotePort: 50000,
-			}),
-		).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: {
-				type: "message",
-				data: "AQID",
-				remoteAddress: "127.0.0.1",
-				remotePort: 50000,
-				remoteFamily: "IPv4",
-			},
-		});
-		expect(
-			convergedDgramSyncResponse("dgram.recv", { data: null }),
-		).toEqual({ kind: SYNC_BRIDGE_KIND_JSON, value: null });
-	});
-
-	it("maps create/bind/close/address/send results", () => {
-		expect(convergedDgramSyncResponse("dgram.create", { socketId: 7 })).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: { socketId: 7 },
-		});
-		expect(convergedDgramSyncResponse("dgram.bind", {})).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: { ok: true },
-		});
-		expect(convergedDgramSyncResponse("dgram.send", { bytes: 5 })).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: { bytes: 5 },
-		});
-		expect(
-			convergedDgramSyncResponse("dgram.address", { host: "127.0.0.1", port: 50001 }),
-		).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: { address: "127.0.0.1", port: 50001, family: "IPv4" },
-		});
-		expect(() =>
-			convergedDgramSyncResponse("dgram.address", { host: null }),
-		).toThrow(/EBADF/);
-	});
-
-	it("answers buffer-size ops inline", () => {
-		expect(convergedDgramInlineResponse("dgram.getBufferSize")).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: { size: 65536 },
-		});
-		expect(convergedDgramInlineResponse("dgram.setBufferSize")).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: { ok: true },
-		});
-	});
-});
diff --git a/packages/browser/tests/runtime/converged-driver-setup.test.ts b/packages/browser/tests/runtime/converged-driver-setup.test.ts
deleted file mode 100644
index 45dcbdd21..000000000
--- a/packages/browser/tests/runtime/converged-driver-setup.test.ts
+++ /dev/null
@@ -1,197 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import type { LiveResponsePayload } from "@secure-exec/core/protocol-frames";
-import {
-	decodeProtocolFramePayload,
-	encodeProtocolFramePayload,
-	type LiveProtocolFrame,
-} from "@secure-exec/core/protocol-frames";
-import type { LiveRequestPayload } from "@secure-exec/core/request-payloads";
-import { SIDECAR_PROTOCOL_SCHEMA } from "@secure-exec/core/protocol-schema";
-import type { CreateVmConfig } from "@secure-exec/core/vm-config";
-import { createConvergedServicer } from "../../src/converged-driver-setup.js";
-import {
-	SYNC_BRIDGE_KIND_JSON,
-	SYNC_BRIDGE_KIND_NONE,
-	SYNC_BRIDGE_KIND_TEXT,
-} from "../../src/sync-bridge.js";
-
-// A fake wasm sidecar with an in-memory filesystem, exercised over the real
-// JSON frame codec (no binary payloads on this path).
-function fakeSidecar(): (frame: Uint8Array) => Uint8Array {
-	const files = new Map<string, string>();
-	const dirs = new Set<string>(["/"]);
-	return (frameBytes) => {
-		const frame = decodeProtocolFramePayload(
-			frameBytes,
-			"json",
-		) as unknown as LiveProtocolFrame;
-		if (frame.frame_type !== "request") {
-			throw new Error(`expected request, got ${frame.frame_type}`);
-		}
-		return encodeProtocolFramePayload(
-			{
-				frame_type: "response",
-				schema: SIDECAR_PROTOCOL_SCHEMA,
-				request_id: frame.request_id,
-				ownership: frame.ownership,
-				payload: service(frame.payload, files, dirs),
-			},
-			"json",
-		);
-	};
-}
-
-function service(
-	request: LiveRequestPayload,
-	files: Map<string, string>,
-	dirs: Set<string>,
-): LiveResponsePayload {
-	switch (request.type) {
-		case "authenticate":
-			return {
-				type: "authenticated",
-				sidecar_id: "s",
-				connection_id: "c",
-				max_frame_bytes: 1024,
-			};
-		case "open_session":
-			return {
-				type: "session_opened",
-				session_id: "se",
-				owner_connection_id: "c",
-			};
-		case "create_vm":
-			return { type: "vm_created", vm_id: "vm" };
-		case "execute":
-			return { type: "process_started", process_id: request.process_id };
-		case "guest_kernel_call": {
-			const payload = new TextEncoder().encode(JSON.stringify({ socketId: 1 }));
-			return {
-				type: "guest_kernel_result",
-				payload: payload.buffer.slice(
-					payload.byteOffset,
-					payload.byteOffset + payload.byteLength,
-				),
-			};
-		}
-		case "guest_filesystem_call": {
-			const ok = (extra: Record<string, unknown>) => ({
-				type: "guest_filesystem_result" as const,
-				operation: request.operation,
-				path: request.path,
-				...extra,
-			});
-			switch (request.operation) {
-				case "mkdir":
-				case "create_dir":
-					dirs.add(request.path);
-					return ok({});
-				case "write_file":
-					files.set(request.path, request.content ?? "");
-					return ok({});
-				case "read_file":
-					return ok({
-						content: files.get(request.path) ?? "",
-						encoding: "utf8",
-					});
-				default:
-					return ok({});
-			}
-		}
-		default:
-			return { type: "rejected", code: "x", message: request.type };
-	}
-}
-
-const CONFIG = {
-	permissions: { fs: "allow" },
-} as unknown as CreateVmConfig;
-
-describe("converged driver setup", () => {
-	it("routes fs ops to the wasm kernel and falls back to legacy otherwise", async () => {
-		const legacy = vi.fn(async () => ({
-			kind: SYNC_BRIDGE_KIND_JSON as typeof SYNC_BRIDGE_KIND_JSON,
-			value: { legacy: true },
-		}));
-		const servicer = createConvergedServicer({
-			pushFrame: fakeSidecar(),
-			config: CONFIG,
-			codec: "json",
-		});
-
-		expect(
-			await servicer.route("exec-1", "fs.writeFile", ["/a.txt", "hi"], legacy),
-		).toEqual({ kind: SYNC_BRIDGE_KIND_NONE });
-		expect(
-			await servicer.route("exec-1", "fs.readFile", ["/a.txt"], legacy),
-		).toEqual({ kind: SYNC_BRIDGE_KIND_TEXT, value: "hi" });
-		expect(legacy).not.toHaveBeenCalled();
-
-		// A not-yet-converged family defers to legacy.
-		const result = await servicer.route(
-			"exec-1",
-			"child_process.spawn",
-			[{}],
-			legacy,
-		);
-		expect(result).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: { legacy: true },
-		});
-		expect(legacy).toHaveBeenCalledOnce();
-	});
-
-	it("lazily registers a kernel execution for net/dgram/pty, not for fs", async () => {
-		const operations: string[] = [];
-		const recordingFrame = (frame: Uint8Array): Uint8Array => {
-			const decoded = decodeProtocolFramePayload(
-				frame,
-				"json",
-			) as unknown as LiveProtocolFrame;
-			if (decoded.frame_type === "request") {
-				operations.push(decoded.payload.type);
-			}
-			return fakeSidecar()(frame);
-		};
-		const setNextExecutionId = vi.fn();
-		const legacy = vi.fn(async () => ({
-			kind: SYNC_BRIDGE_KIND_NONE as typeof SYNC_BRIDGE_KIND_NONE,
-		}));
-		const servicer = createConvergedServicer({
-			pushFrame: recordingFrame,
-			config: CONFIG,
-			codec: "json",
-			setNextExecutionId,
-		});
-		operations.length = 0; // ignore the bootstrap handshake
-
-		// fs op: no execution registration.
-		await servicer.route("exec-1", "fs.readFile", ["/a.txt"], legacy);
-		expect(setNextExecutionId).not.toHaveBeenCalled();
-		expect(operations).not.toContain("execute");
-
-		// Registration happens before the handler runs; the net op response itself
-		// can't round-trip its ArrayBuffer payload over the JSON test codec (real
-		// wasm uses BARE), so ignore that and assert the registration side effects.
-		const route = (op: string) =>
-			servicer
-				.route("exec-1", op, [{ host: "127.0.0.1", port: 80 }], legacy)
-				.catch(() => undefined);
-
-		// first net op: registers the execution once.
-		await route("net.connect");
-		expect(setNextExecutionId).toHaveBeenCalledWith("exec-1");
-		expect(operations.filter((op) => op === "execute")).toHaveLength(1);
-
-		// second net op for the same execution: no re-registration.
-		await route("net.connect");
-		expect(operations.filter((op) => op === "execute")).toHaveLength(1);
-
-		// pty op for a new execution: also registers before the kernel call.
-		await servicer
-			.route("exec-pty", "pty.read", [{ fd: 4 }], legacy)
-			.catch(() => undefined);
-		expect(setNextExecutionId).toHaveBeenLastCalledWith("exec-pty");
-		expect(operations.filter((op) => op === "execute")).toHaveLength(2);
-	});
-});
diff --git a/packages/browser/tests/runtime/converged-execution-host-bridge.test.ts b/packages/browser/tests/runtime/converged-execution-host-bridge.test.ts
deleted file mode 100644
index a3f1ae574..000000000
--- a/packages/browser/tests/runtime/converged-execution-host-bridge.test.ts
+++ /dev/null
@@ -1,33 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { createConvergedExecutionHostBridge } from "../../src/converged-execution-host-bridge.js";
-
-describe("converged execution host bridge", () => {
-	it("echoes the configured execution id from startExecution", () => {
-		const host = createConvergedExecutionHostBridge();
-		host.setNextExecutionId("exec-42");
-		expect(host.bridge.startExecution("{}")).toEqual({
-			executionId: "exec-42",
-		});
-	});
-
-	it("returns context and worker handles for the execution lifecycle", () => {
-		const host = createConvergedExecutionHostBridge();
-		expect(host.bridge.createJavascriptContext("{}")).toMatchObject({
-			contextId: expect.stringContaining("converged-ctx-"),
-		});
-		expect(
-			host.bridge.createWorker(JSON.stringify({ runtime: "javascript" })),
-		).toMatchObject({
-			workerId: expect.stringContaining("converged-worker-"),
-			runtime: "javascript",
-		});
-	});
-
-	it("treats stdin/kill/terminate as no-ops and polls no events", () => {
-		const host = createConvergedExecutionHostBridge();
-		expect(host.bridge.writeExecutionStdin("{}")).toEqual({});
-		expect(host.bridge.killExecution("{}")).toEqual({});
-		expect(host.bridge.terminateWorker("{}")).toEqual({});
-		expect(host.bridge.pollExecutionEvent("{}")).toBeNull();
-	});
-});
diff --git a/packages/browser/tests/runtime/converged-executor-session.test.ts b/packages/browser/tests/runtime/converged-executor-session.test.ts
deleted file mode 100644
index b18c6230e..000000000
--- a/packages/browser/tests/runtime/converged-executor-session.test.ts
+++ /dev/null
@@ -1,149 +0,0 @@
-import { describe, expect, it } from "vitest";
-import type { LiveOwnershipScope } from "@secure-exec/core/ownership";
-import {
-	decodeProtocolFramePayload,
-	encodeProtocolFramePayload,
-	type LiveProtocolFrame,
-	type LiveResponsePayload,
-} from "@secure-exec/core/protocol-frames";
-import type { LiveRequestPayload } from "@secure-exec/core/request-payloads";
-import { SIDECAR_PROTOCOL_SCHEMA } from "@secure-exec/core/protocol-schema";
-import { ConvergedExecutorSession } from "../../src/converged-executor-session.js";
-import { SYNC_BRIDGE_KIND_TEXT } from "../../src/sync-bridge.js";
-
-// A fake wasm sidecar that drives the full lifecycle handshake + guest fs over
-// JSON-encoded frames (no binary payloads), recording the ownership each request
-// arrives with.
-function fakeSidecar(): {
-	pushFrame: (frame: Uint8Array) => Uint8Array;
-	ownerships: LiveOwnershipScope[];
-} {
-	const ownerships: LiveOwnershipScope[] = [];
-	const pushFrame = (frameBytes: Uint8Array): Uint8Array => {
-		const frame = decodeProtocolFramePayload(
-			frameBytes,
-			"json",
-		) as unknown as LiveProtocolFrame;
-		if (frame.frame_type !== "request") {
-			throw new Error(`expected request, got ${frame.frame_type}`);
-		}
-		ownerships.push(frame.ownership);
-		return encodeProtocolFramePayload(
-			{
-				frame_type: "response",
-				schema: SIDECAR_PROTOCOL_SCHEMA,
-				request_id: frame.request_id,
-				ownership: frame.ownership,
-				payload: service(frame.payload),
-			},
-			"json",
-		);
-	};
-	return { pushFrame, ownerships };
-}
-
-function service(request: LiveRequestPayload): LiveResponsePayload {
-	switch (request.type) {
-		case "authenticate":
-			return {
-				type: "authenticated",
-				sidecar_id: "sidecar",
-				connection_id: "conn-1",
-				max_frame_bytes: 1024,
-			};
-		case "open_session":
-			return {
-				type: "session_opened",
-				session_id: "session-1",
-				owner_connection_id: "conn-1",
-			};
-		case "create_vm":
-			return { type: "vm_created", vm_id: "vm-1" };
-		case "execute":
-			return { type: "process_started", process_id: request.process_id };
-		case "guest_filesystem_call":
-			return {
-				type: "guest_filesystem_result",
-				operation: "read_file",
-				path: request.path,
-				content: "converged",
-				encoding: "utf8",
-			};
-		default:
-			return { type: "rejected", code: "unexpected", message: request.type };
-	}
-}
-
-describe("converged executor session", () => {
-	it("runs the authenticate/open_session/create_vm handshake with correct ownership", () => {
-		const sidecar = fakeSidecar();
-		const session = new ConvergedExecutorSession({
-			pushFrame: sidecar.pushFrame,
-			codec: "json",
-		});
-		const vm = session.bootstrap({
-			runtime: "java_script",
-			config: {} as never,
-		});
-		expect(vm).toEqual({
-			connectionId: "conn-1",
-			sessionId: "session-1",
-			vmId: "vm-1",
-		});
-		expect(sidecar.ownerships.map((o) => o.scope)).toEqual([
-			"connection",
-			"connection",
-			"session",
-		]);
-	});
-
-	it("hands out a VM-scoped execution handler after bootstrap", () => {
-		const sidecar = fakeSidecar();
-		const session = new ConvergedExecutorSession({
-			pushFrame: sidecar.pushFrame,
-			codec: "json",
-		});
-		session.bootstrap({ runtime: "java_script", config: {} as never });
-		const handler = session.handlerForExecution("exec-1");
-		const response = handler.handle("fs.readFile", ["/tmp/x"]);
-		expect(response).toEqual({
-			kind: SYNC_BRIDGE_KIND_TEXT,
-			value: "converged",
-		});
-		// The guest syscall arrives with VM ownership.
-		const last = sidecar.ownerships.at(-1);
-		expect(last).toEqual({
-			scope: "vm",
-			connection_id: "conn-1",
-			session_id: "session-1",
-			vm_id: "vm-1",
-		});
-	});
-
-	it("registers a guest execution via an execute wire request", () => {
-		const sidecar = fakeSidecar();
-		const session = new ConvergedExecutorSession({
-			pushFrame: sidecar.pushFrame,
-			codec: "json",
-		});
-		session.bootstrap({ runtime: "java_script", config: {} as never });
-		const registered = session.registerExecution({
-			processId: "exec-7",
-			entrypoint: "/main.js",
-			args: ["main.js"],
-		});
-		expect(registered).toEqual({ processId: "exec-7" });
-		// The execute request arrives with VM ownership.
-		expect(sidecar.ownerships.at(-1)).toMatchObject({ scope: "vm", vm_id: "vm-1" });
-	});
-
-	it("throws if a handler is requested before bootstrap", () => {
-		const session = new ConvergedExecutorSession({
-			pushFrame: fakeSidecar().pushFrame,
-			codec: "json",
-		});
-		expect(() => session.handlerForExecution("exec-1")).toThrow(
-			/has not bootstrapped/,
-		);
-	});
-});
diff --git a/packages/browser/tests/runtime/converged-fs-bridge.test.ts b/packages/browser/tests/runtime/converged-fs-bridge.test.ts
deleted file mode 100644
index 96bbe79de..000000000
--- a/packages/browser/tests/runtime/converged-fs-bridge.test.ts
+++ /dev/null
@@ -1,199 +0,0 @@
-import { describe, expect, it } from "vitest";
-import type { LiveGuestFilesystemStat } from "@secure-exec/core";
-import {
-	convergedFilesystemRequestPayload,
-	convergedFilesystemSyncResponse,
-	type GuestFilesystemResult,
-	isSingleCallFilesystemOperation,
-	wireStatToDirEntry,
-	wireStatToVirtualStat,
-} from "../../src/converged-fs-bridge.js";
-import {
-	SYNC_BRIDGE_KIND_BINARY,
-	SYNC_BRIDGE_KIND_JSON,
-	SYNC_BRIDGE_KIND_NONE,
-	SYNC_BRIDGE_KIND_TEXT,
-} from "../../src/sync-bridge.js";
-
-const SAMPLE_STAT: LiveGuestFilesystemStat = {
-	mode: 0o100644,
-	size: 12,
-	blocks: 1,
-	dev: 2,
-	rdev: 0,
-	is_directory: false,
-	is_symbolic_link: false,
-	atime_ms: 10,
-	mtime_ms: 20,
-	ctime_ms: 30,
-	birthtime_ms: 40,
-	ino: 7,
-	nlink: 1,
-	uid: 1000,
-	gid: 1000,
-};
-
-function result(
-	partial: Partial<GuestFilesystemResult> & {
-		operation: GuestFilesystemResult["operation"];
-	},
-): GuestFilesystemResult {
-	return { path: "/tmp/x", ...partial } as GuestFilesystemResult;
-}
-
-describe("converged filesystem bridge translation", () => {
-	it("maps read/write requests to wire guest_filesystem_call payloads", () => {
-		expect(
-			convergedFilesystemRequestPayload("fs.readFile", ["/tmp/a.txt"]),
-		).toEqual({
-			type: "guest_filesystem_call",
-			operation: "read_file",
-			path: "/tmp/a.txt",
-		});
-
-		expect(
-			convergedFilesystemRequestPayload("fs.writeFile", ["/tmp/a.txt", "hi"]),
-		).toEqual({
-			type: "guest_filesystem_call",
-			operation: "write_file",
-			path: "/tmp/a.txt",
-			content: "hi",
-			encoding: "utf8",
-		});
-
-		const binary = convergedFilesystemRequestPayload("fs.writeFileBinary", [
-			"/tmp/blob",
-			new Uint8Array([0, 1, 2, 253]),
-		]);
-		expect(binary).toMatchObject({
-			operation: "write_file",
-			path: "/tmp/blob",
-			encoding: "base64",
-		});
-		expect(binary.content).toBe("AAEC/Q==");
-
-		// Positional write: offset + base64 content, serviced by the kernel's
-		// atomic pwrite rather than a client-side read-modify-write.
-		const pwrite = convergedFilesystemRequestPayload("fs.pwrite", [
-			"/tmp/blob",
-			4,
-			new Uint8Array([9, 8, 7]),
-		]);
-		expect(pwrite).toMatchObject({
-			type: "guest_filesystem_call",
-			operation: "pwrite",
-			path: "/tmp/blob",
-			offset: 4,
-			encoding: "base64",
-		});
-		expect(pwrite.content).toBe("CQgH");
-		expect(isSingleCallFilesystemOperation("fs.pwrite")).toBe(true);
-		expect(
-			convergedFilesystemSyncResponse(
-				"fs.pwrite",
-				result({ operation: "pwrite" }),
-			),
-		).toEqual({ kind: SYNC_BRIDGE_KIND_NONE });
-	});
-
-	it("maps metadata and link requests, including symlink arg order", () => {
-		expect(convergedFilesystemRequestPayload("fs.mkdir", ["/d"])).toEqual({
-			type: "guest_filesystem_call",
-			operation: "mkdir",
-			path: "/d",
-			recursive: true,
-		});
-		expect(
-			convergedFilesystemRequestPayload("fs.rename", ["/a", "/b"]),
-		).toEqual({
-			type: "guest_filesystem_call",
-			operation: "rename",
-			path: "/a",
-			destination_path: "/b",
-		});
-		// Legacy symlink(target, linkPath) -> wire { path: link, target }.
-		expect(
-			convergedFilesystemRequestPayload("fs.symlink", ["/target", "/link"]),
-		).toEqual({
-			type: "guest_filesystem_call",
-			operation: "symlink",
-			path: "/link",
-			target: "/target",
-		});
-		expect(
-			convergedFilesystemRequestPayload("fs.chmod", ["/a", 0o755]),
-		).toEqual({
-			type: "guest_filesystem_call",
-			operation: "chmod",
-			path: "/a",
-			mode: 0o755,
-		});
-	});
-
-	it("throws for non-single-call operations (readDir)", () => {
-		expect(isSingleCallFilesystemOperation("fs.readDir")).toBe(false);
-		expect(() =>
-			convergedFilesystemRequestPayload("fs.readDir", ["/d"]),
-		).toThrow(/no single-call mapping/);
-	});
-
-	it("decodes read results to text and binary by original operation", () => {
-		const textResponse = convergedFilesystemSyncResponse(
-			"fs.readFile",
-			result({ operation: "read_file", content: "hello", encoding: "utf8" }),
-		);
-		expect(textResponse).toEqual({
-			kind: SYNC_BRIDGE_KIND_TEXT,
-			value: "hello",
-		});
-
-		const binaryResponse = convergedFilesystemSyncResponse(
-			"fs.readFileBinary",
-			result({ operation: "read_file", content: "AAEC/Q==", encoding: "base64" }),
-		);
-		expect(binaryResponse.kind).toBe(SYNC_BRIDGE_KIND_BINARY);
-		expect(
-			binaryResponse.kind === SYNC_BRIDGE_KIND_BINARY
-				? Array.from(binaryResponse.value)
-				: null,
-		).toEqual([0, 1, 2, 253]);
-	});
-
-	it("maps stat results to the guest camelCase VirtualStat shape", () => {
-		const response = convergedFilesystemSyncResponse(
-			"fs.stat",
-			result({ operation: "stat", stat: SAMPLE_STAT }),
-		);
-		expect(response).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: wireStatToVirtualStat(SAMPLE_STAT),
-		});
-		expect(wireStatToVirtualStat(SAMPLE_STAT)).toMatchObject({
-			isDirectory: false,
-			isSymbolicLink: false,
-			mtimeMs: 20,
-			birthtimeMs: 40,
-		});
-	});
-
-	it("returns NONE for mutations and JSON booleans for exists", () => {
-		expect(
-			convergedFilesystemSyncResponse(
-				"fs.writeFile",
-				result({ operation: "write_file" }),
-			),
-		).toEqual({ kind: SYNC_BRIDGE_KIND_NONE });
-		expect(
-			convergedFilesystemSyncResponse(
-				"fs.exists",
-				result({ operation: "exists", exists: true }),
-			),
-		).toEqual({ kind: SYNC_BRIDGE_KIND_JSON, value: true });
-	});
-
-	it("builds typed dir entries from a child name + lstat", () => {
-		expect(
-			wireStatToDirEntry("child", { ...SAMPLE_STAT, is_directory: true }),
-		).toEqual({ name: "child", isDirectory: true, isSymbolicLink: false });
-	});
-});
diff --git a/packages/browser/tests/runtime/converged-module-servicer.test.ts b/packages/browser/tests/runtime/converged-module-servicer.test.ts
deleted file mode 100644
index a5090a040..000000000
--- a/packages/browser/tests/runtime/converged-module-servicer.test.ts
+++ /dev/null
@@ -1,134 +0,0 @@
-import { describe, expect, it } from "vitest";
-import type { ConvergedSidecarRequestTransport } from "../../src/converged-sync-bridge-handler.js";
-import { ConvergedModuleServicer } from "../../src/converged-module-servicer.js";
-import { KernelBackedFilesystem } from "../../src/kernel-backed-filesystem.js";
-import {
-	SYNC_BRIDGE_KIND_NONE,
-	SYNC_BRIDGE_KIND_TEXT,
-} from "../../src/sync-bridge.js";
-
-// Model a tiny on-kernel filesystem: /app/index.js requires ./util, and a
-// package "left-pad" under /app/node_modules with a package.json main.
-function packageTransport(): ConvergedSidecarRequestTransport {
-	const files = new Map<string, string>([
-		["/app/index.js", "require('./util'); require('left-pad');"],
-		["/app/util.js", "module.exports = 1;"],
-		[
-			"/app/node_modules/left-pad/package.json",
-			JSON.stringify({ name: "left-pad", version: "1.0.0", main: "index.js" }),
-		],
-		["/app/node_modules/left-pad/index.js", "module.exports = () => {};"],
-	]);
-	const dirs = new Set<string>([
-		"/app",
-		"/app/node_modules",
-		"/app/node_modules/left-pad",
-	]);
-	const exists = (p: string) => files.has(p) || dirs.has(p);
-	return {
-		sendRequest(payload) {
-			if (payload.type !== "guest_filesystem_call") {
-				return { type: "rejected", code: "x", message: payload.type };
-			}
-			const path = payload.path;
-			const result = (extra: Record<string, unknown>) => ({
-				type: "guest_filesystem_result" as const,
-				operation: payload.operation,
-				path,
-				...extra,
-			});
-			switch (payload.operation) {
-				case "exists":
-					return result({ exists: exists(path) });
-				case "read_file":
-					if (!files.has(path)) {
-						return { type: "rejected", code: "ENOENT", message: `no ${path}` };
-					}
-					return result({ content: files.get(path), encoding: "utf8" });
-				case "realpath":
-					return result({ target: path });
-				case "stat":
-				case "lstat": {
-					if (!exists(path)) {
-						return { type: "rejected", code: "ENOENT", message: `no ${path}` };
-					}
-					const isDir = dirs.has(path);
-					return result({
-						stat: {
-							mode: isDir ? 0o040755 : 0o100644,
-							size: 1,
-							blocks: 1,
-							dev: 1,
-							rdev: 0,
-							is_directory: isDir,
-							is_symbolic_link: false,
-							atime_ms: 0,
-							mtime_ms: 0,
-							ctime_ms: 0,
-							birthtime_ms: 0,
-							ino: 1,
-							nlink: 1,
-							uid: 0,
-							gid: 0,
-						},
-					});
-				}
-				default:
-					return result({});
-			}
-		},
-	};
-}
-
-describe("converged module servicer", () => {
-	const servicer = new ConvergedModuleServicer(
-		new KernelBackedFilesystem(packageTransport()),
-	);
-
-	it("declares the module operation family", () => {
-		expect(servicer.handles("module.resolve")).toBe(true);
-		expect(servicer.handles("module.batchResolve")).toBe(true);
-		expect(servicer.handles("fs.readFile")).toBe(false);
-	});
-
-	it("resolves a relative import against the kernel filesystem", async () => {
-		const response = await servicer.handle("module.resolve", [
-			"./util",
-			"/app/index.js",
-			"require",
-		]);
-		expect(response).toEqual({
-			kind: SYNC_BRIDGE_KIND_TEXT,
-			value: "/app/util.js",
-		});
-	});
-
-	it("resolves a bare package via node_modules + package.json main", async () => {
-		const response = await servicer.handle("module.resolve", [
-			"left-pad",
-			"/app/index.js",
-			"require",
-		]);
-		expect(response).toEqual({
-			kind: SYNC_BRIDGE_KIND_TEXT,
-			value: "/app/node_modules/left-pad/index.js",
-		});
-	});
-
-	it("returns NONE for an unresolvable specifier", async () => {
-		const response = await servicer.handle("module.resolve", [
-			"does-not-exist",
-			"/app/index.js",
-			"require",
-		]);
-		expect(response).toEqual({ kind: SYNC_BRIDGE_KIND_NONE });
-	});
-
-	it("loads file source through the kernel", async () => {
-		const response = await servicer.handle("module.loadFile", ["/app/util.js"]);
-		expect(response).toEqual({
-			kind: SYNC_BRIDGE_KIND_TEXT,
-			value: "module.exports = 1;",
-		});
-	});
-});
diff --git a/packages/browser/tests/runtime/converged-net-bridge.test.ts b/packages/browser/tests/runtime/converged-net-bridge.test.ts
deleted file mode 100644
index 102520eb7..000000000
--- a/packages/browser/tests/runtime/converged-net-bridge.test.ts
+++ /dev/null
@@ -1,124 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-	CONVERGED_NET_BRIDGE_OPERATIONS,
-	convergedNetRequestPayload,
-	convergedNetSyncResponse,
-	type GuestKernelResult,
-	isConvergedNetBridgeOperation,
-} from "../../src/converged-net-bridge.js";
-import { SYNC_BRIDGE_KIND_JSON } from "../../src/sync-bridge.js";
-
-function decodePayload(payload: ArrayBuffer): unknown {
-	return JSON.parse(new TextDecoder().decode(new Uint8Array(payload)));
-}
-
-function jsonResult(value: unknown): GuestKernelResult {
-	const bytes = new TextEncoder().encode(JSON.stringify(value));
-	return {
-		type: "guest_kernel_result",
-		payload: bytes.buffer.slice(
-			bytes.byteOffset,
-			bytes.byteOffset + bytes.byteLength,
-		),
-	};
-}
-
-describe("converged net bridge translation", () => {
-	it("exposes the converged net/dns operation set", () => {
-		expect(isConvergedNetBridgeOperation("net.connect")).toBe(true);
-		expect(isConvergedNetBridgeOperation("dns.lookup")).toBe(true);
-		expect(isConvergedNetBridgeOperation("fs.readFile")).toBe(false);
-		expect(CONVERGED_NET_BRIDGE_OPERATIONS).toContain("net.recv_from");
-	});
-
-	it("maps connect/listen into guest_kernel_call with JSON payloads", () => {
-		const connect = convergedNetRequestPayload(
-			"net.connect",
-			[{ host: "127.0.0.1", port: 8080 }],
-			"exec-1",
-		);
-		expect(connect.type).toBe("guest_kernel_call");
-		expect(connect.execution_id).toBe("exec-1");
-		expect(connect.operation).toBe("net.connect");
-		expect(decodePayload(connect.payload)).toEqual({
-			host: "127.0.0.1",
-			port: 8080,
-		});
-
-		const listen = convergedNetRequestPayload(
-			"net.listen",
-			[{ host: "127.0.0.1", port: 9090, backlog: 16 }],
-			"exec-1",
-		);
-		expect(decodePayload(listen.payload)).toEqual({
-			host: "127.0.0.1",
-			port: 9090,
-			backlog: 16,
-		});
-	});
-
-	it("base64-encodes binary write/send data", () => {
-		const write = convergedNetRequestPayload(
-			"net.write",
-			[{ socketId: 3, data: new Uint8Array([0, 1, 2, 253]) }],
-			"exec-1",
-		);
-		expect(decodePayload(write.payload)).toEqual({
-			socketId: 3,
-			data: "AAEC/Q==",
-		});
-
-		const send = convergedNetRequestPayload(
-			"net.send_to",
-			[
-				{
-					socketId: 5,
-					host: "127.0.0.1",
-					port: 7000,
-					data: new Uint8Array([255]),
-				},
-			],
-			"exec-1",
-		);
-		expect(decodePayload(send.payload)).toEqual({
-			socketId: 5,
-			host: "127.0.0.1",
-			port: 7000,
-			data: "/w==",
-		});
-	});
-
-	it("defaults shutdown how and requires socketId/data", () => {
-		const shutdown = convergedNetRequestPayload(
-			"net.shutdown",
-			[{ socketId: 1 }],
-			"exec-1",
-		);
-		expect(decodePayload(shutdown.payload)).toEqual({
-			socketId: 1,
-			how: "both",
-		});
-		expect(() =>
-			convergedNetRequestPayload("net.accept", [{}], "exec-1"),
-		).toThrow(/numeric socketId/);
-		expect(() =>
-			convergedNetRequestPayload("net.write", [{ socketId: 1 }], "exec-1"),
-		).toThrow(/binary data/);
-	});
-
-	it("rejects unknown operations", () => {
-		expect(() =>
-			convergedNetRequestPayload("net.teleport", [{}], "exec-1"),
-		).toThrow(/no mapping/);
-	});
-
-	it("decodes guest_kernel_result JSON passthrough", () => {
-		const response = convergedNetSyncResponse(
-			jsonResult({ socketId: 4, localPort: 5050 }),
-		);
-		expect(response).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: { socketId: 4, localPort: 5050 },
-		});
-	});
-});
diff --git a/packages/browser/tests/runtime/converged-permissions.test.ts b/packages/browser/tests/runtime/converged-permissions.test.ts
deleted file mode 100644
index 15bd234fc..000000000
--- a/packages/browser/tests/runtime/converged-permissions.test.ts
+++ /dev/null
@@ -1,35 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { convergedPermissionsPolicy } from "../../src/converged-permissions.js";
-
-describe("converged permissions policy", () => {
-	it("defaults to allow-all", () => {
-		expect(convergedPermissionsPolicy()).toMatchObject({
-			fs: "allow",
-			network: "allow",
-			childProcess: "allow",
-		});
-	});
-
-	it("expresses deny-fs-read as a read/readdir deny rule", () => {
-		const policy = convergedPermissionsPolicy({ denyFsRead: true });
-		expect(policy.fs).toEqual({
-			default: "allow",
-			rules: [{ mode: "deny", operations: ["read", "readdir"], paths: ["**"] }],
-		});
-	});
-
-	it("expresses childProcess and network denials", () => {
-		expect(convergedPermissionsPolicy({ denyChildProcess: true }).childProcess).toBe(
-			"deny",
-		);
-		expect(convergedPermissionsPolicy({ denyNetwork: true }).network).toBe("deny");
-	});
-
-	it("expresses a denied network port as a tcp pattern rule", () => {
-		const policy = convergedPermissionsPolicy({ denyNetworkPort: 8080 });
-		expect(policy.network).toMatchObject({
-			default: "allow",
-			rules: [{ mode: "deny", patterns: ["tcp://*:8080"] }],
-		});
-	});
-});
diff --git a/packages/browser/tests/runtime/converged-pty-bridge.test.ts b/packages/browser/tests/runtime/converged-pty-bridge.test.ts
deleted file mode 100644
index 1a4a14dc5..000000000
--- a/packages/browser/tests/runtime/converged-pty-bridge.test.ts
+++ /dev/null
@@ -1,139 +0,0 @@
-import { describe, expect, it } from "vitest";
-import type { GuestKernelResult } from "../../src/converged-net-bridge.js";
-import {
-	CONVERGED_PTY_BRIDGE_OPERATIONS,
-	convergedPtyRequestPayload,
-	convergedPtySyncResponse,
-	isConvergedPtyBridgeOperation,
-} from "../../src/converged-pty-bridge.js";
-import { SYNC_BRIDGE_KIND_JSON } from "../../src/sync-bridge.js";
-
-function decodePayload(payload: ArrayBuffer): unknown {
-	return JSON.parse(new TextDecoder().decode(new Uint8Array(payload)));
-}
-
-function jsonResult(value: unknown): GuestKernelResult {
-	const bytes = new TextEncoder().encode(JSON.stringify(value));
-	return {
-		type: "guest_kernel_result",
-		payload: bytes.buffer.slice(
-			bytes.byteOffset,
-			bytes.byteOffset + bytes.byteLength,
-		),
-	};
-}
-
-describe("converged pty bridge translation", () => {
-	it("exposes the converged pty operation set", () => {
-		expect(isConvergedPtyBridgeOperation("pty.open")).toBe(true);
-		expect(isConvergedPtyBridgeOperation("pty.tcsetattr")).toBe(true);
-		expect(isConvergedPtyBridgeOperation("net.connect")).toBe(false);
-		expect(CONVERGED_PTY_BRIDGE_OPERATIONS).toContain("pty.resize");
-		expect(CONVERGED_PTY_BRIDGE_OPERATIONS).toContain(
-			"pty.setForegroundPgid",
-		);
-	});
-
-	it("maps pty.open into an empty guest_kernel_call payload", () => {
-		const open = convergedPtyRequestPayload("pty.open", [{}], "exec-1");
-		expect(open.type).toBe("guest_kernel_call");
-		expect(open.execution_id).toBe("exec-1");
-		expect(open.operation).toBe("pty.open");
-		expect(decodePayload(open.payload)).toEqual({});
-	});
-
-	it("carries fd + read bounds for pty.read but forces browser reads non-blocking", () => {
-		const read = convergedPtyRequestPayload(
-			"pty.read",
-			[{ fd: 7, maxBytes: 1024, timeoutMs: 25 }],
-			"exec-1",
-		);
-		expect(decodePayload(read.payload)).toEqual({
-			fd: 7,
-			maxBytes: 1024,
-			timeoutMs: 0,
-		});
-		// Browser wasm cannot use Rust timed waits in the synchronous pushFrame path,
-		// so even an unspecified timeout becomes a non-blocking poll.
-		const bare = convergedPtyRequestPayload("pty.read", [{ fd: 7 }], "exec-1");
-		expect(decodePayload(bare.payload)).toEqual({ fd: 7, timeoutMs: 0 });
-	});
-
-	it("base64-encodes binary write data", () => {
-		const write = convergedPtyRequestPayload(
-			"pty.write",
-			[{ fd: 3, data: new Uint8Array([0, 1, 2, 253]) }],
-			"exec-1",
-		);
-		expect(decodePayload(write.payload)).toEqual({ fd: 3, data: "AAEC/Q==" });
-	});
-
-	it("maps resize cols/rows and strips unset termios fields", () => {
-		const resize = convergedPtyRequestPayload(
-			"pty.resize",
-			[{ fd: 4, cols: 120, rows: 40 }],
-			"exec-1",
-		);
-		expect(decodePayload(resize.payload)).toEqual({
-			fd: 4,
-			cols: 120,
-			rows: 40,
-		});
-
-		const raw = convergedPtyRequestPayload(
-			"pty.tcsetattr",
-			[{ fd: 4, icanon: false, echo: false, cc: { vintr: 3 } }],
-			"exec-1",
-		);
-		expect(decodePayload(raw.payload)).toEqual({
-			fd: 4,
-			icanon: false,
-			echo: false,
-			cc: { vintr: 3 },
-		});
-	});
-
-	it("maps foreground process group updates with optional pgid", () => {
-		const defaultPgid = convergedPtyRequestPayload(
-			"pty.setForegroundPgid",
-			[{ fd: 4 }],
-			"exec-1",
-		);
-		expect(decodePayload(defaultPgid.payload)).toEqual({ fd: 4 });
-
-		const explicitPgid = convergedPtyRequestPayload(
-			"pty.setForegroundPgid",
-			[{ fd: 4, pgid: 99 }],
-			"exec-1",
-		);
-		expect(decodePayload(explicitPgid.payload)).toEqual({ fd: 4, pgid: 99 });
-	});
-
-	it("requires fd and binary data where mandatory", () => {
-		expect(() =>
-			convergedPtyRequestPayload("pty.close", [{}], "exec-1"),
-		).toThrow(/numeric fd/);
-		expect(() =>
-			convergedPtyRequestPayload("pty.write", [{ fd: 1 }], "exec-1"),
-		).toThrow(/binary data/);
-		expect(() =>
-			convergedPtyRequestPayload("pty.resize", [{ fd: 1, cols: 80 }], "exec-1"),
-		).toThrow(/numeric rows/);
-	});
-
-	it("rejects unknown operations", () => {
-		expect(() =>
-			convergedPtyRequestPayload("pty.teleport", [{}], "exec-1"),
-		).toThrow(/no mapping/);
-	});
-
-	it("decodes guest_kernel_result JSON passthrough", () => {
-		const response = convergedPtySyncResponse(
-			jsonResult({ masterFd: 3, slaveFd: 4, path: "/dev/pts/0" }),
-		);
-		expect(response).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: { masterFd: 3, slaveFd: 4, path: "/dev/pts/0" },
-		});
-	});
-});
diff --git a/packages/browser/tests/runtime/converged-sync-bridge-handler.test.ts b/packages/browser/tests/runtime/converged-sync-bridge-handler.test.ts
deleted file mode 100644
index f04bb86ab..000000000
--- a/packages/browser/tests/runtime/converged-sync-bridge-handler.test.ts
+++ /dev/null
@@ -1,238 +0,0 @@
-import { describe, expect, it } from "vitest";
-import type { LiveGuestFilesystemStat } from "@secure-exec/core";
-import type { LiveOwnershipScope } from "@secure-exec/core/ownership";
-import {
-	decodeProtocolFramePayload,
-	encodeProtocolFramePayload,
-	type LiveProtocolFrame,
-	type LiveResponsePayload,
-} from "@secure-exec/core/protocol-frames";
-import type { LiveRequestPayload } from "@secure-exec/core/request-payloads";
-import { SIDECAR_PROTOCOL_SCHEMA } from "@secure-exec/core/protocol-schema";
-import {
-	ConvergedSyncBridgeHandler,
-	type ConvergedSidecarRequestTransport,
-	PushFrameSidecarTransport,
-} from "../../src/converged-sync-bridge-handler.js";
-import {
-	SYNC_BRIDGE_KIND_JSON,
-	SYNC_BRIDGE_KIND_NONE,
-	SYNC_BRIDGE_KIND_TEXT,
-} from "../../src/sync-bridge.js";
-
-const OWNERSHIP: LiveOwnershipScope = {
-	scope: "vm",
-	connection_id: "conn",
-	session_id: "session",
-	vm_id: "vm-1",
-};
-
-function stat(isDirectory: boolean): LiveGuestFilesystemStat {
-	return {
-		mode: isDirectory ? 0o040755 : 0o100644,
-		size: 4,
-		blocks: 1,
-		dev: 1,
-		rdev: 0,
-		is_directory: isDirectory,
-		is_symbolic_link: false,
-		atime_ms: 1,
-		mtime_ms: 2,
-		ctime_ms: 3,
-		birthtime_ms: 4,
-		ino: 9,
-		nlink: 1,
-		uid: 0,
-		gid: 0,
-	};
-}
-
-function serviceRequest(request: LiveRequestPayload): LiveResponsePayload {
-	if (request.type === "guest_filesystem_call") {
-		switch (request.operation) {
-			case "read_file":
-				return {
-					type: "guest_filesystem_result",
-					operation: "read_file",
-					path: request.path,
-					content: "hello",
-					encoding: "utf8",
-				};
-			case "read_dir":
-				return {
-					type: "guest_filesystem_result",
-					operation: "read_dir",
-					path: request.path,
-					entries: [
-						{ name: "file.txt", isDirectory: false, isSymbolicLink: false },
-						{ name: "subdir", isDirectory: true, isSymbolicLink: false },
-					],
-				};
-			case "lstat":
-				return {
-					type: "guest_filesystem_result",
-					operation: "lstat",
-					path: request.path,
-					stat: stat(request.path.endsWith("subdir")),
-				};
-			default:
-				return {
-					type: "guest_filesystem_result",
-					operation: request.operation,
-					path: request.path,
-				};
-		}
-	}
-	if (request.type === "guest_kernel_call") {
-		const response = new TextEncoder().encode(
-			JSON.stringify({ socketId: 1, localPort: 5000 }),
-		);
-		return {
-			type: "guest_kernel_result",
-			payload: response.buffer.slice(
-				response.byteOffset,
-				response.byteOffset + response.byteLength,
-			),
-		};
-	}
-	return { type: "rejected", code: "unexpected", message: request.type };
-}
-
-// Mock transport: services requests directly, no frame codec involved.
-function mockTransport(): ConvergedSidecarRequestTransport & {
-	calls: LiveRequestPayload[];
-} {
-	const calls: LiveRequestPayload[] = [];
-	return {
-		calls,
-		sendRequest(payload) {
-			calls.push(payload);
-			const response = serviceRequest(payload);
-			if (response.type === "rejected") {
-				throw new Error(response.message);
-			}
-			return response;
-		},
-	};
-}
-
-function handler(transport: ConvergedSidecarRequestTransport) {
-	return new ConvergedSyncBridgeHandler({ transport, executionId: "exec-1" });
-}
-
-describe("converged sync bridge handler", () => {
-	it("routes fs.readFile through the transport", () => {
-		const transport = mockTransport();
-		const response = handler(transport).handle("fs.readFile", ["/tmp/a.txt"]);
-		expect(response).toEqual({ kind: SYNC_BRIDGE_KIND_TEXT, value: "hello" });
-		expect(transport.calls[0]).toMatchObject({
-			type: "guest_filesystem_call",
-			operation: "read_file",
-			path: "/tmp/a.txt",
-		});
-	});
-
-	it("returns NONE for mutations", () => {
-		const transport = mockTransport();
-		expect(handler(transport).handle("fs.writeFile", ["/tmp/a.txt", "x"])).toEqual({
-			kind: SYNC_BRIDGE_KIND_NONE,
-		});
-	});
-
-	it("maps fs.readDir typed entries in a single round-trip (no per-entry lstat)", () => {
-		const transport = mockTransport();
-		const response = handler(transport).handle("fs.readDir", ["/dir"]);
-		expect(response).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: [
-				{ name: "file.txt", isDirectory: false, isSymbolicLink: false },
-				{ name: "subdir", isDirectory: true, isSymbolicLink: false },
-			],
-		});
-		expect(transport.calls.map((call) => (call as { operation?: string }).operation)).toEqual([
-			"read_dir",
-		]);
-	});
-
-	it("routes net.connect through guest_kernel_call and decodes the JSON result", () => {
-		const transport = mockTransport();
-		const response = handler(transport).handle("net.connect", [
-			{ host: "127.0.0.1", port: 8080 },
-		]);
-		expect(response).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: { socketId: 1, localPort: 5000 },
-		});
-		expect(transport.calls[0]).toMatchObject({
-			type: "guest_kernel_call",
-			operation: "net.connect",
-			execution_id: "exec-1",
-		});
-	});
-
-	it("reports which operations it services", () => {
-		const h = handler(mockTransport());
-		expect(h.handles("fs.readFile")).toBe(true);
-		expect(h.handles("fs.readDir")).toBe(true);
-		expect(h.handles("net.connect")).toBe(true);
-		expect(h.handles("child_process.spawn")).toBe(false);
-	});
-});
-
-describe("PushFrameSidecarTransport", () => {
-	// Validates the real frame encode -> pushFrame -> decode round-trip with the
-	// JSON codec and fs payloads (no binary `data`); the BARE codec + net
-	// ArrayBuffer payloads are exercised against the real wasm sidecar in the
-	// browser harness.
-	function fakeSidecar(): (frame: Uint8Array) => Uint8Array {
-		return (frameBytes) => {
-			const frame = decodeProtocolFramePayload(
-				frameBytes,
-				"json",
-			) as unknown as LiveProtocolFrame;
-			if (frame.frame_type !== "request") {
-				throw new Error(`expected request frame, got ${frame.frame_type}`);
-			}
-			return encodeProtocolFramePayload(
-				{
-					frame_type: "response",
-					schema: SIDECAR_PROTOCOL_SCHEMA,
-					request_id: frame.request_id,
-					ownership: frame.ownership,
-					payload: serviceRequest(frame.payload),
-				},
-				"json",
-			);
-		};
-	}
-
-	it("round-trips an fs read through real frame encode/decode", () => {
-		const transport = new PushFrameSidecarTransport({
-			pushFrame: fakeSidecar(),
-			ownership: OWNERSHIP,
-			codec: "json",
-		});
-		const result = handler(transport).handle("fs.readFile", ["/tmp/a.txt"]);
-		expect(result).toEqual({ kind: SYNC_BRIDGE_KIND_TEXT, value: "hello" });
-	});
-
-	it("throws on a rejected response frame", () => {
-		const reject = (): Uint8Array =>
-			encodeProtocolFramePayload(
-				{
-					frame_type: "response",
-					schema: SIDECAR_PROTOCOL_SCHEMA,
-					request_id: 1,
-					ownership: OWNERSHIP,
-					payload: { type: "rejected", code: "denied", message: "nope" },
-				},
-				"json",
-			);
-		const transport = new PushFrameSidecarTransport({
-			pushFrame: reject,
-			ownership: OWNERSHIP,
-			codec: "json",
-		});
-		expect(() => handler(transport).handle("fs.readFile", ["/x"])).toThrow("nope");
-	});
-});
diff --git a/packages/browser/tests/runtime/converged-sync-bridge-router.test.ts b/packages/browser/tests/runtime/converged-sync-bridge-router.test.ts
deleted file mode 100644
index 5cf01ed17..000000000
--- a/packages/browser/tests/runtime/converged-sync-bridge-router.test.ts
+++ /dev/null
@@ -1,83 +0,0 @@
-import { describe, expect, it, vi } from "vitest";
-import type { ConvergedSidecarRequestTransport } from "../../src/converged-sync-bridge-handler.js";
-import { ConvergedSyncBridgeHandler } from "../../src/converged-sync-bridge-handler.js";
-import { ConvergedSyncBridgeRouter } from "../../src/converged-sync-bridge-router.js";
-import { BROWSER_SYNC_BRIDGE_OPERATIONS } from "../../src/sync-bridge.js";
-import {
-	SYNC_BRIDGE_KIND_JSON,
-	SYNC_BRIDGE_KIND_TEXT,
-} from "../../src/sync-bridge.js";
-
-function fsTransport(): ConvergedSidecarRequestTransport {
-	return {
-		sendRequest(payload) {
-			if (payload.type === "guest_filesystem_call") {
-				return {
-					type: "guest_filesystem_result",
-					operation: payload.operation,
-					path: payload.path,
-					content: "from-wasm",
-					encoding: "utf8",
-				};
-			}
-			return { type: "rejected", code: "x", message: payload.type };
-		},
-	};
-}
-
-function makeHandler() {
-	return new ConvergedSyncBridgeHandler({
-		transport: fsTransport(),
-		executionId: "exec-1",
-	});
-}
-
-describe("converged sync bridge router", () => {
-	it("routes converged ops to the wasm handler", async () => {
-		const legacy = vi.fn();
-		const router = new ConvergedSyncBridgeRouter({
-			handler: makeHandler(),
-			legacy,
-		});
-		const response = await router.route("fs.readFile", ["/x"]);
-		expect(response).toEqual({
-			kind: SYNC_BRIDGE_KIND_TEXT,
-			value: "from-wasm",
-		});
-		expect(legacy).not.toHaveBeenCalled();
-	});
-
-	it("falls back to the legacy servicer for unconverged ops", async () => {
-		const legacy = vi.fn(async () => ({
-			kind: SYNC_BRIDGE_KIND_JSON as typeof SYNC_BRIDGE_KIND_JSON,
-			value: { resolved: "/m.js" },
-		}));
-		const router = new ConvergedSyncBridgeRouter({
-			handler: makeHandler(),
-			legacy,
-		});
-		const response = await router.route("module.resolve", ["m", "/p"]);
-		expect(response).toEqual({
-			kind: SYNC_BRIDGE_KIND_JSON,
-			value: { resolved: "/m.js" },
-		});
-		expect(legacy).toHaveBeenCalledWith("module.resolve", ["m", "/p"]);
-	});
-
-	it("knows it is not yet fully converged (module/child_process/dgram remain)", () => {
-		expect(
-			ConvergedSyncBridgeRouter.isFullyConverged(makeHandler(), [
-				...BROWSER_SYNC_BRIDGE_OPERATIONS,
-			]),
-		).toBe(false);
-		// fs subset IS fully converged.
-		expect(
-			ConvergedSyncBridgeRouter.isFullyConverged(makeHandler(), [
-				"fs.readFile",
-				"fs.writeFile",
-				"fs.readDir",
-				"fs.stat",
-			]),
-		).toBe(true);
-	});
-});
diff --git a/packages/browser/tests/runtime/encoding.test.ts b/packages/browser/tests/runtime/encoding.test.ts
deleted file mode 100644
index 49be7597e..000000000
--- a/packages/browser/tests/runtime/encoding.test.ts
+++ /dev/null
@@ -1,86 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-	base64ToBytes,
-	bytesToBase64,
-	guestEncodingBootstrapCode,
-	toUint8Array,
-} from "../../src/encoding.js";
-
-describe("browser encoding helpers", () => {
-	it("encodes bytes to base64 without relying on large argument spreads", () => {
-		const bytes = new Uint8Array(70_000);
-		for (let index = 0; index < bytes.length; index++) {
-			bytes[index] = index % 251;
-		}
-
-		expect(bytesToBase64(bytes)).toBe(Buffer.from(bytes).toString("base64"));
-	});
-
-	it("decodes base64 into bytes without relying on local decoder copies", () => {
-		const bytes = new Uint8Array(70_000);
-		for (let index = 0; index < bytes.length; index++) {
-			bytes[index] = (index * 17) % 251;
-		}
-
-		expect([...base64ToBytes(Buffer.from(bytes).toString("base64"))]).toEqual([
-			...bytes,
-		]);
-	});
-
-	it("normalizes array buffers and strings to Uint8Array", () => {
-		const bytes = new Uint8Array([65, 66, 67]);
-
-		expect(toUint8Array(bytes)).toBe(bytes);
-		expect([...toUint8Array(bytes.buffer)]).toEqual([65, 66, 67]);
-		expect([...toUint8Array("ABC")]).toEqual([65, 66, 67]);
-	});
-
-	it("installs the guest encoding global from the shared bootstrap", () => {
-		const previous = (
-			globalThis as typeof globalThis & { __agentOSEncoding?: unknown }
-		).__agentOSEncoding;
-		delete (globalThis as typeof globalThis & { __agentOSEncoding?: unknown })
-			.__agentOSEncoding;
-
-		try {
-			new Function(guestEncodingBootstrapCode())();
-			const installed = (
-				globalThis as typeof globalThis & {
-					__agentOSEncoding: {
-						base64ToBytes(value: string): Uint8Array;
-						bytesToBase64(value: Uint8Array): string;
-						decodeBytesPayload(value: unknown): Uint8Array;
-						encodeBytesPayload(value: unknown): { base64: string } | null;
-						toBytes(value: unknown, encoding?: string): Uint8Array;
-					};
-				}
-			).__agentOSEncoding;
-
-			expect([...installed.base64ToBytes("QUJD")]).toEqual([65, 66, 67]);
-			expect(installed.bytesToBase64(new Uint8Array([65, 66, 67]))).toBe(
-				"QUJD",
-			);
-			expect([...installed.toBytes("4142", "hex")]).toEqual([65, 66]);
-			expect(installed.encodeBytesPayload("ABC")).toEqual({
-				__agentOSType: "bytes",
-				base64: "QUJD",
-			});
-			expect([
-				...installed.decodeBytesPayload({
-					__agentOSType: "bytes",
-					base64: "QUJD",
-				}),
-			]).toEqual([65, 66, 67]);
-		} finally {
-			if (previous === undefined) {
-				delete (
-					globalThis as typeof globalThis & { __agentOSEncoding?: unknown }
-				).__agentOSEncoding;
-			} else {
-				(
-					globalThis as typeof globalThis & { __agentOSEncoding?: unknown }
-				).__agentOSEncoding = previous;
-			}
-		}
-	});
-});
diff --git a/packages/browser/tests/runtime/errno.test.ts b/packages/browser/tests/runtime/errno.test.ts
deleted file mode 100644
index c340e344d..000000000
--- a/packages/browser/tests/runtime/errno.test.ts
+++ /dev/null
@@ -1,38 +0,0 @@
-import os from "node:os";
-import { describe, expect, it } from "vitest";
-import { posixErrno } from "../../src/errno.js";
-
-describe("posixErrno", () => {
-	it("matches Node's negated errno for every mapped code", () => {
-		const nodeErrno = os.constants.errno as Record<string, number>;
-		// Codes the old inline table got wrong (errno -1) plus the original few.
-		const codes = [
-			"ENOENT",
-			"EACCES",
-			"EEXIST",
-			"ENOTDIR",
-			"EISDIR",
-			"EROFS",
-			"ENOTEMPTY",
-			"EBADF",
-			"EXDEV",
-			"EMFILE",
-			"EPERM",
-			"EINVAL",
-			"ENOSYS",
-			"ELOOP",
-			"ENAMETOOLONG",
-			"ECONNREFUSED",
-			"ETIMEDOUT",
-		];
-		for (const code of codes) {
-			expect(nodeErrno[code], `Node exposes ${code}`).toBeGreaterThan(0);
-			expect(posixErrno(code), code).toBe(-nodeErrno[code]);
-		}
-	});
-
-	it("returns undefined for unknown or missing codes", () => {
-		expect(posixErrno("ENOTAREALCODE")).toBeUndefined();
-		expect(posixErrno(undefined)).toBeUndefined();
-	});
-});
diff --git a/packages/browser/tests/runtime/fixtures/sab-stress-producer.mjs b/packages/browser/tests/runtime/fixtures/sab-stress-producer.mjs
deleted file mode 100644
index f65090122..000000000
--- a/packages/browser/tests/runtime/fixtures/sab-stress-producer.mjs
+++ /dev/null
@@ -1,59 +0,0 @@
-// Real-thread producer for the SAB race stress (node:worker_threads). Writes N
-// STDOUT frames into an up-ring on a SEPARATE OS thread and bumps the global GEN
-// (+ Atomics.notify) after each, exactly as an execution worker would. The format
-// mirrors SabRing/sab-reactor exactly (header: head@0,tail@1 Int32; data at byte
-// 16; ring frame = [len:u32-le][reactorFrame]; reactorFrame = [kind][payload];
-// STDOUT kind = 2). If this diverges from the real SabRing the consumer (which uses
-// the real SabRing) fails to read it — so the duplication is self-checking.
-
-import { parentPort, workerData } from "node:worker_threads";
-
-const FRAME_STDOUT = 2;
-const HEADER_BYTES = 16;
-const { ringSab, genSab, slotCount, slotBytes, count } = workerData;
-
-const ctl = new Int32Array(ringSab, 0, 4); // head, tail, _, _
-const bytes = new Uint8Array(ringSab, HEADER_BYTES);
-const gen = new Int32Array(genSab, 0, 1);
-
-function tryWrite(frame) {
-	const head = Atomics.load(ctl, 0);
-	const tail = Atomics.load(ctl, 1);
-	if (tail - head >= slotCount) return false; // full
-	const slot = (tail % slotCount) * slotBytes;
-	const len = frame.byteLength;
-	bytes[slot] = len & 0xff;
-	bytes[slot + 1] = (len >>> 8) & 0xff;
-	bytes[slot + 2] = (len >>> 16) & 0xff;
-	bytes[slot + 3] = (len >>> 24) & 0xff;
-	bytes.set(frame, slot + 4);
-	Atomics.store(ctl, 1, tail + 1); // publish (release)
-	return true;
-}
-
-function signal() {
-	Atomics.add(gen, 0, 1);
-	Atomics.notify(gen, 0);
-}
-
-// A spin-wait the producer uses when the ring is full (consumer is draining on the
-// other thread): bounded so we never hard-spin a core.
-const spin = new Int32Array(new SharedArrayBuffer(4));
-
-for (let i = 0; i < count; i++) {
-	const frame = new Uint8Array(5);
-	frame[0] = FRAME_STDOUT;
-	frame[1] = i & 0xff;
-	frame[2] = (i >>> 8) & 0xff;
-	frame[3] = (i >>> 16) & 0xff;
-	frame[4] = (i >>> 24) & 0xff;
-	while (!tryWrite(frame)) {
-		Atomics.wait(spin, 0, 0, 1); // back off ~1ms, let the consumer drain
-	}
-	signal();
-	// Occasionally pace so the consumer genuinely drains to empty and must block on
-	// GEN, exercising the wait/notify wakeup path (the lost-wakeup hazard).
-	if (i % 64 === 0) Atomics.wait(spin, 0, 0, 1);
-}
-
-parentPort.postMessage({ done: true, count });
diff --git a/packages/browser/tests/runtime/fixtures/sab-syscall-roundtrip.worker.mjs b/packages/browser/tests/runtime/fixtures/sab-syscall-roundtrip.worker.mjs
deleted file mode 100644
index a2af31043..000000000
--- a/packages/browser/tests/runtime/fixtures/sab-syscall-roundtrip.worker.mjs
+++ /dev/null
@@ -1,76 +0,0 @@
-// Cross-thread syscall round-trip producer (node:worker_threads). Mirrors
-// SabExecutionEndpoint's wire protocol exactly (kept in sync by the consumer using
-// the REAL SabRing/KernelReactor): make a blocking SYSCALL (write SYSCALL frame +
-// GEN signal, then Atomics.wait the down-channel for the RESULT), then write the
-// result back as STDOUT. Proves the duplex syscall + stdout path across real OS
-// threads with real Atomics — the agent execution model's core.
-
-import { parentPort, workerData } from "node:worker_threads";
-
-const FRAME_SYSCALL = 1;
-const FRAME_STDOUT = 2;
-const FRAME_RESULT = 1;
-const HEADER_BYTES = 16;
-const { upSab, downSab, genSab, slotCount, slotBytes } = workerData;
-
-const upCtl = new Int32Array(upSab, 0, 4);
-const upBytes = new Uint8Array(upSab, HEADER_BYTES);
-const downCtl = new Int32Array(downSab, 0, 4);
-const downBytes = new Uint8Array(downSab, HEADER_BYTES);
-const gen = new Int32Array(genSab, 0, 1);
-
-function signal() {
-	Atomics.add(gen, 0, 1);
-	Atomics.notify(gen, 0);
-}
-
-function writeUp(frame) {
-	const head = Atomics.load(upCtl, 0);
-	const tail = Atomics.load(upCtl, 1);
-	if (tail - head >= slotCount) throw new Error("up full");
-	const slot = (tail % slotCount) * slotBytes;
-	upBytes[slot] = frame.byteLength & 0xff;
-	upBytes[slot + 1] = (frame.byteLength >>> 8) & 0xff;
-	upBytes[slot + 2] = (frame.byteLength >>> 16) & 0xff;
-	upBytes[slot + 3] = (frame.byteLength >>> 24) & 0xff;
-	upBytes.set(frame, slot + 4);
-	Atomics.store(upCtl, 1, tail + 1);
-	signal();
-}
-
-function readDown() {
-	const tail = Atomics.load(downCtl, 1);
-	const head = Atomics.load(downCtl, 0);
-	if (head === tail) return null;
-	const slot = (head % slotCount) * slotBytes;
-	const len =
-		(downBytes[slot] |
-			(downBytes[slot + 1] << 8) |
-			(downBytes[slot + 2] << 16) |
-			(downBytes[slot + 3] << 24)) >>>
-		0;
-	const out = new Uint8Array(len);
-	out.set(downBytes.subarray(slot + 4, slot + 4 + len));
-	Atomics.store(downCtl, 0, head + 1);
-	return out;
-}
-
-function syscall(payload) {
-	const frame = new Uint8Array(1 + payload.byteLength);
-	frame[0] = FRAME_SYSCALL;
-	frame.set(payload, 1);
-	writeUp(frame);
-	for (;;) {
-		const down = readDown();
-		if (down && down[0] === FRAME_RESULT) return down.subarray(1);
-		Atomics.wait(gen, 0, Atomics.load(gen, 0), 1000);
-	}
-}
-
-const enc = new TextEncoder();
-const result = syscall(enc.encode("ping")); // → kernel services → "echo:ping"
-const stdout = new Uint8Array(1 + result.byteLength);
-stdout[0] = FRAME_STDOUT;
-stdout.set(result, 1);
-writeUp(stdout);
-parentPort.postMessage({ done: true });
diff --git a/packages/browser/tests/runtime/kernel-backed-filesystem.test.ts b/packages/browser/tests/runtime/kernel-backed-filesystem.test.ts
deleted file mode 100644
index 6bec3767e..000000000
--- a/packages/browser/tests/runtime/kernel-backed-filesystem.test.ts
+++ /dev/null
@@ -1,128 +0,0 @@
-import { describe, expect, it } from "vitest";
-import type { LiveGuestFilesystemStat } from "@secure-exec/core";
-import type { ConvergedSidecarRequestTransport } from "../../src/converged-sync-bridge-handler.js";
-import { KernelBackedFilesystem } from "../../src/kernel-backed-filesystem.js";
-import { encodeBase64 } from "../../src/converged-base64.js";
-
-function statFor(name: string): LiveGuestFilesystemStat {
-	return {
-		mode: 0o100644,
-		size: 3,
-		blocks: 1,
-		dev: 1,
-		rdev: 0,
-		is_directory: name === "sub",
-		is_symbolic_link: false,
-		atime_ms: 1,
-		mtime_ms: 2,
-		ctime_ms: 3,
-		birthtime_ms: 4,
-		ino: 5,
-		nlink: 1,
-		uid: 0,
-		gid: 0,
-	};
-}
-
-// In-memory transport modelling the kernel for the fs operations exercised here.
-function memoryTransport(): ConvergedSidecarRequestTransport {
-	const files = new Map<string, string>([["/pkg/index.js", "module.exports={}"]]);
-	return {
-		sendRequest(payload) {
-			if (payload.type !== "guest_filesystem_call") {
-				return { type: "rejected", code: "x", message: payload.type };
-			}
-			switch (payload.operation) {
-				case "read_file":
-					return {
-						type: "guest_filesystem_result",
-						operation: "read_file",
-						path: payload.path,
-						content: files.get(payload.path) ?? "",
-						encoding: "utf8",
-					};
-				case "write_file":
-					files.set(payload.path, payload.content ?? "");
-					return {
-						type: "guest_filesystem_result",
-						operation: "write_file",
-						path: payload.path,
-					};
-				case "exists":
-					return {
-						type: "guest_filesystem_result",
-						operation: "exists",
-						path: payload.path,
-						exists: files.has(payload.path),
-					};
-				case "read_dir":
-					return {
-						type: "guest_filesystem_result",
-						operation: "read_dir",
-						path: payload.path,
-						entries: [
-							{ name: "index.js", isDirectory: false, isSymbolicLink: false },
-							{ name: "sub", isDirectory: true, isSymbolicLink: false },
-						],
-					};
-				case "lstat":
-				case "stat":
-					return {
-						type: "guest_filesystem_result",
-						operation: payload.operation,
-						path: payload.path,
-						stat: statFor(payload.path.split("/").pop() ?? ""),
-					};
-				case "realpath":
-					return {
-						type: "guest_filesystem_result",
-						operation: "realpath",
-						path: payload.path,
-						target: payload.path,
-					};
-				default:
-					return {
-						type: "guest_filesystem_result",
-						operation: payload.operation,
-						path: payload.path,
-					};
-			}
-		},
-	};
-}
-
-describe("kernel-backed filesystem", () => {
-	const fs = new KernelBackedFilesystem(memoryTransport());
-
-	it("reads text and binary through the wire", async () => {
-		expect(await fs.readTextFile("/pkg/index.js")).toBe("module.exports={}");
-		await fs.writeFile("/bin", encodeBase64.length ? new Uint8Array([1, 2, 3]) : "");
-	});
-
-	it("reports existence and realpath", async () => {
-		expect(await fs.exists("/pkg/index.js")).toBe(true);
-		expect(await fs.exists("/missing")).toBe(false);
-		expect(await fs.realpath("/pkg/index.js")).toBe("/pkg/index.js");
-	});
-
-	it("returns typed dir entries from a single read_dir round-trip", async () => {
-		expect(await fs.readDirWithTypes("/pkg")).toEqual([
-			{ name: "index.js", isDirectory: false, isSymbolicLink: false },
-			{ name: "sub", isDirectory: true, isSymbolicLink: false },
-		]);
-	});
-
-	it("returns names from read_dir", async () => {
-		expect(await fs.readDir("/pkg")).toEqual(["index.js", "sub"]);
-	});
-
-	it("maps wire stat to camelCase VirtualStat", async () => {
-		const stat = await fs.stat("/pkg/index.js");
-		expect(stat.isDirectory).toBe(false);
-		expect(stat.mtimeMs).toBe(2);
-	});
-
-	it("throws ENOSYS for pwrite", async () => {
-		await expect(fs.pwrite()).rejects.toThrow(/ENOSYS/);
-	});
-});
diff --git a/packages/browser/tests/runtime/network-adapter.test.ts b/packages/browser/tests/runtime/network-adapter.test.ts
deleted file mode 100644
index 87a4e4af0..000000000
--- a/packages/browser/tests/runtime/network-adapter.test.ts
+++ /dev/null
@@ -1,108 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { createBrowserDriver, createBrowserNetworkAdapter } from "../../src/driver.js";
-import type { NetworkAdapter } from "../../src/runtime.js";
-
-describe("browser network adapter DNS", () => {
-	it("resolves deterministic loopback names without host DNS", async () => {
-		const adapter = createBrowserNetworkAdapter();
-
-		await expect(adapter.dnsLookup("localhost")).resolves.toEqual({
-			address: "127.0.0.1",
-			family: 4,
-		});
-		await expect(adapter.dnsLookup("ip6-localhost")).resolves.toEqual({
-			address: "::1",
-			family: 6,
-		});
-	});
-
-	it("returns IP literals directly and fails unsupported host DNS loudly", async () => {
-		const adapter = createBrowserNetworkAdapter();
-
-		await expect(adapter.dnsLookup("127.0.0.1")).resolves.toEqual({
-			address: "127.0.0.1",
-			family: 4,
-		});
-		await expect(adapter.dnsLookup("::1")).resolves.toEqual({
-			address: "::1",
-			family: 6,
-		});
-		await expect(adapter.dnsLookup("example.com")).resolves.toMatchObject({
-			code: "ENOSYS",
-		});
-	});
-});
-
-describe("browser driver network adapter injection", () => {
-	it("uses a caller-supplied network adapter", async () => {
-		const adapter: NetworkAdapter = {
-			async fetch(url) {
-				return {
-					ok: true,
-					status: 200,
-					statusText: "OK",
-					headers: { "content-type": "text/plain" },
-					body: `custom:${url}`,
-					url,
-					redirected: false,
-				};
-			},
-			async dnsLookup(hostname) {
-				return { address: hostname, family: 4 };
-			},
-			async httpRequest(url) {
-				return {
-					status: 200,
-					statusText: "OK",
-					headers: { "content-type": "text/plain" },
-					body: `custom-http:${url}`,
-					url,
-				};
-			},
-		};
-		const system = await createBrowserDriver({
-			filesystem: "memory",
-			networkAdapter: adapter,
-		});
-
-		await expect(system.network!.fetch("https://model.local/test")).resolves.toMatchObject({
-			body: "custom:https://model.local/test",
-		});
-	});
-
-	it("permission-wraps a caller-supplied network adapter", async () => {
-		const adapter: NetworkAdapter = {
-			async fetch(url) {
-				return {
-					ok: true,
-					status: 200,
-					statusText: "OK",
-					headers: {},
-					body: url,
-					url,
-					redirected: false,
-				};
-			},
-			async dnsLookup(hostname) {
-				return { address: hostname, family: 4 };
-			},
-			async httpRequest(url) {
-				return { status: 200, statusText: "OK", headers: {}, body: url, url };
-			},
-		};
-		const system = await createBrowserDriver({
-			filesystem: "memory",
-			networkAdapter: adapter,
-			permissions: {
-				network: ({ url }) => !url?.includes("blocked.local"),
-			},
-		});
-
-		await expect(system.network!.fetch("https://allowed.local/test")).resolves.toMatchObject({
-			body: "https://allowed.local/test",
-		});
-		await expect(system.network!.fetch("https://blocked.local/test")).rejects.toThrow(
-			"EACCES",
-		);
-	});
-});
diff --git a/packages/browser/tests/runtime/resolve-module.test.ts b/packages/browser/tests/runtime/resolve-module.test.ts
deleted file mode 100644
index 0308be1fd..000000000
--- a/packages/browser/tests/runtime/resolve-module.test.ts
+++ /dev/null
@@ -1,259 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { readFile } from "node:fs/promises";
-import { createInMemoryFileSystem } from "../../src/os-filesystem.js";
-import {
-	moduleFormat,
-	POLYFILL_CODE_MAP,
-	resolveModule,
-} from "../../src/runtime.js";
-
-async function writeJson(
-	fs: ReturnType<typeof createInMemoryFileSystem>,
-	path: string,
-	value: unknown,
-) {
-	await fs.writeFile(path, JSON.stringify(value));
-}
-
-interface ModuleResolutionConformanceFixture {
-	cases: Array<{
-		name: string;
-		files: Record<string, string>;
-		resolves: Array<{
-			specifier: string;
-			from: string;
-			mode: "require" | "import";
-			expected: string | null;
-		}>;
-	}>;
-	formats: Array<{
-		name: string;
-		files: Record<string, string>;
-		path: string;
-		expected: "module" | "commonjs" | "json" | null;
-	}>;
-}
-
-async function loadModuleResolutionConformanceFixture() {
-	const source = await readFile(
-		new URL("../../../../tests/fixtures/module-resolution-conformance.json", import.meta.url),
-		"utf8",
-	);
-	return JSON.parse(source) as ModuleResolutionConformanceFixture;
-}
-
-describe("browser module resolution", () => {
-	it("matches the shared native/browser conformance fixture", async () => {
-		const fixture = await loadModuleResolutionConformanceFixture();
-		for (const testCase of fixture.cases) {
-			const fs = createInMemoryFileSystem();
-			for (const [path, contents] of Object.entries(testCase.files)) {
-				await fs.writeFile(`/root/${path}`, contents);
-			}
-			for (const resolution of testCase.resolves) {
-				await expect(
-					resolveModule(
-						resolution.specifier,
-						resolution.from,
-						fs,
-						resolution.mode,
-					),
-					testCase.name,
-				).resolves.toBe(resolution.expected);
-			}
-		}
-
-		for (const formatCase of fixture.formats) {
-			const fs = createInMemoryFileSystem();
-			for (const [path, contents] of Object.entries(formatCase.files)) {
-				await fs.writeFile(`/root/${path}`, contents);
-			}
-			await expect(
-				moduleFormat(formatCase.path, fs),
-				formatCase.name,
-			).resolves.toBe(formatCase.expected);
-		}
-	});
-
-	it("provides browser bridge polyfills for dns builtins and node aliases", () => {
-		const loadPolyfill = (moduleName: string) =>
-			POLYFILL_CODE_MAP[moduleName.replace(/^node:/, "")] ?? null;
-
-		expect(loadPolyfill("dns")).toContain("_networkDnsLookupRaw");
-		expect(loadPolyfill("node:dns")).toContain("_networkDnsLookupRaw");
-		expect(loadPolyfill("dns/promises")).toContain("promises");
-		expect(loadPolyfill("node:dns/promises")).toContain("promises");
-		expect(loadPolyfill("dgram")).toContain("_dgramSocketCreateRaw");
-		expect(loadPolyfill("node:dgram")).toContain("_dgramSocketCreateRaw");
-		expect(loadPolyfill("secure-exec:wasi-command-host")).toContain(
-			"createWasiCommandHost",
-		);
-	});
-
-	it("walks ancestor node_modules directories", async () => {
-		const fs = createInMemoryFileSystem();
-		await fs.writeFile("/workspace/node_modules/pkg/index.js", "module.exports = 1;");
-
-		await expect(
-			resolveModule("pkg", "/workspace/src/deep/app.js", fs),
-		).resolves.toBe("/workspace/node_modules/pkg/index.js");
-	});
-
-	it("resolves scoped packages and package main entries", async () => {
-		const fs = createInMemoryFileSystem();
-		await writeJson(fs, "/workspace/node_modules/@scope/pkg/package.json", {
-			main: "./lib/main.js",
-		});
-		await fs.writeFile(
-			"/workspace/node_modules/@scope/pkg/lib/main.js",
-			"module.exports = 1;",
-		);
-
-		await expect(
-			resolveModule("@scope/pkg", "/workspace/app.js", fs),
-		).resolves.toBe("/workspace/node_modules/@scope/pkg/lib/main.js");
-	});
-
-	it("resolves package exports conditions by mode", async () => {
-		const fs = createInMemoryFileSystem();
-		await writeJson(fs, "/workspace/node_modules/pkg/package.json", {
-			exports: {
-				".": {
-					import: "./esm/index.mjs",
-					require: "./cjs/index.js",
-				},
-			},
-		});
-		await fs.writeFile("/workspace/node_modules/pkg/esm/index.mjs", "export default 1;");
-		await fs.writeFile("/workspace/node_modules/pkg/cjs/index.js", "module.exports = 1;");
-
-		await expect(resolveModule("pkg", "/workspace/app.js", fs, "import")).resolves.toBe(
-			"/workspace/node_modules/pkg/esm/index.mjs",
-		);
-		await expect(resolveModule("pkg", "/workspace/app.js", fs, "require")).resolves.toBe(
-			"/workspace/node_modules/pkg/cjs/index.js",
-		);
-	});
-
-	it("uses native resolver condition order instead of browser-only conditions", async () => {
-		const fs = createInMemoryFileSystem();
-		await writeJson(fs, "/workspace/node_modules/pkg/package.json", {
-			exports: {
-				".": {
-					browser: "./browser.js",
-					node: "./node.js",
-					default: "./default.js",
-				},
-			},
-		});
-		await fs.writeFile("/workspace/node_modules/pkg/browser.js", "module.exports = 'browser';");
-		await fs.writeFile("/workspace/node_modules/pkg/node.js", "module.exports = 'node';");
-		await fs.writeFile("/workspace/node_modules/pkg/default.js", "module.exports = 'default';");
-
-		await expect(resolveModule("pkg", "/workspace/app.js", fs, "import")).resolves.toBe(
-			"/workspace/node_modules/pkg/node.js",
-		);
-		await expect(resolveModule("pkg", "/workspace/app.js", fs, "require")).resolves.toBe(
-			"/workspace/node_modules/pkg/node.js",
-		);
-	});
-
-	it("resolves exported subpaths and wildcard exports", async () => {
-		const fs = createInMemoryFileSystem();
-		await writeJson(fs, "/workspace/node_modules/pkg/package.json", {
-			exports: {
-				"./feature": "./dist/feature.js",
-				"./utils/*": "./dist/utils/*.js",
-			},
-		});
-		await fs.writeFile("/workspace/node_modules/pkg/dist/feature.js", "module.exports = 1;");
-		await fs.writeFile("/workspace/node_modules/pkg/dist/utils/math.js", "module.exports = 2;");
-
-		await expect(
-			resolveModule("pkg/feature", "/workspace/app.js", fs),
-		).resolves.toBe("/workspace/node_modules/pkg/dist/feature.js");
-		await expect(
-			resolveModule("pkg/utils/math", "/workspace/app.js", fs),
-		).resolves.toBe("/workspace/node_modules/pkg/dist/utils/math.js");
-	});
-
-	it("returns real paths for symlinked node_modules packages", async () => {
-		const fs = createInMemoryFileSystem();
-		await fs.writeFile("/store/pkg/index.js", "module.exports = 1;");
-		await fs.symlink("/store/pkg", "/workspace/node_modules/pkg");
-
-		await expect(resolveModule("pkg", "/workspace/app.js", fs)).resolves.toBe(
-			"/store/pkg/index.js",
-		);
-	});
-
-	it("resolves file URL specifiers", async () => {
-		const fs = createInMemoryFileSystem();
-		await fs.writeFile("/workspace/space name.js", "module.exports = 1;");
-
-		await expect(
-			resolveModule("file:///workspace/space%20name.js?cache=1", "/workspace/app.js", fs),
-		).resolves.toBe("/workspace/space name.js");
-		await expect(
-			resolveModule("file://remote/workspace/app.js", "/workspace/app.js", fs),
-		).resolves.toBeNull();
-	});
-
-	it("resolves package imports from nearest package.json", async () => {
-		const fs = createInMemoryFileSystem();
-		await writeJson(fs, "/workspace/package.json", {
-			imports: {
-				"#config": "./src/config.js",
-				"#utils/*": "./src/utils/*.js",
-			},
-		});
-		await fs.writeFile("/workspace/src/config.js", "export const value = 1;");
-		await fs.writeFile("/workspace/src/utils/math.js", "export const value = 2;");
-
-		await expect(
-			resolveModule("#config", "/workspace/src/app.js", fs, "import"),
-		).resolves.toBe("/workspace/src/config.js");
-		await expect(
-			resolveModule("#utils/math", "/workspace/src/app.js", fs, "import"),
-		).resolves.toBe("/workspace/src/utils/math.js");
-		await expect(
-			resolveModule("#missing", "/workspace/src/app.js", fs, "import"),
-		).resolves.toBeNull();
-	});
-
-	it("falls back to root node_modules conventions", async () => {
-		const fs = createInMemoryFileSystem();
-		await fs.writeFile("/root/node_modules/pkg/index.js", "module.exports = 1;");
-		await fs.writeFile("/node_modules/other/index.js", "module.exports = 2;");
-
-		await expect(resolveModule("pkg", "/workspace/app.js", fs)).resolves.toBe(
-			"/root/node_modules/pkg/index.js",
-		);
-		await expect(resolveModule("other", "/workspace/app.js", fs)).resolves.toBe(
-			"/node_modules/other/index.js",
-		);
-	});
-
-	it("detects module formats using extensions and nearest package type", async () => {
-		const fs = createInMemoryFileSystem();
-		await writeJson(fs, "/workspace/package.json", { type: "module" });
-		await writeJson(fs, "/workspace/cjs/package.json", { type: "commonjs" });
-
-		await expect(moduleFormat("/workspace/lib/index.mjs", fs)).resolves.toBe(
-			"module",
-		);
-		await expect(moduleFormat("/workspace/lib/index.cjs", fs)).resolves.toBe(
-			"commonjs",
-		);
-		await expect(moduleFormat("/workspace/lib/data.json", fs)).resolves.toBe(
-			"json",
-		);
-		await expect(moduleFormat("/workspace/lib/app.js", fs)).resolves.toBe(
-			"module",
-		);
-		await expect(moduleFormat("/workspace/cjs/app.js", fs)).resolves.toBe(
-			"commonjs",
-		);
-		await expect(moduleFormat("/workspace/lib/app.txt", fs)).resolves.toBeNull();
-	});
-});
diff --git a/packages/browser/tests/runtime/root-filesystem-from-vfs.test.ts b/packages/browser/tests/runtime/root-filesystem-from-vfs.test.ts
deleted file mode 100644
index 48d40903b..000000000
--- a/packages/browser/tests/runtime/root-filesystem-from-vfs.test.ts
+++ /dev/null
@@ -1,53 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { createInMemoryFileSystem } from "../../src/runtime.js";
-import {
-	collectRootFilesystemEntries,
-	rootFilesystemConfigFromVfs,
-} from "../../src/root-filesystem-from-vfs.js";
-
-async function seeded() {
-	const fs = createInMemoryFileSystem();
-	await fs.mkdir("/app", { recursive: true });
-	await fs.writeFile("/app/index.js", "console.log('hi')");
-	await fs.mkdir("/app/data", { recursive: true });
-	await fs.writeFile("/app/data/blob.bin", new Uint8Array([0, 1, 2, 253]));
-	return fs;
-}
-
-describe("root filesystem from vfs", () => {
-	it("snapshots files and directories into bootstrap entries", async () => {
-		const entries = await collectRootFilesystemEntries(await seeded());
-		const byPath = new Map(entries.map((entry) => [entry.path, entry]));
-
-		expect(byPath.get("/app")).toMatchObject({ kind: "directory" });
-		expect(byPath.get("/app/data")).toMatchObject({ kind: "directory" });
-		expect(byPath.get("/app/index.js")).toMatchObject({
-			kind: "file",
-			content: "console.log('hi')",
-			encoding: "utf8",
-		});
-		// Non-utf8 content falls back to base64.
-		const blob = byPath.get("/app/data/blob.bin");
-		expect(blob?.kind).toBe("file");
-		expect(blob?.encoding).toBe("base64");
-		expect(blob?.content).toBe("AAEC/Q==");
-	});
-
-	it("produces an ephemeral writable RootFilesystemConfig", async () => {
-		const config = await rootFilesystemConfigFromVfs(await seeded());
-		expect(config.mode).toBe("ephemeral");
-		expect(config.disableDefaultBaseLayer).toBe(false);
-		expect(config.lowers).toEqual([]);
-		expect(config.bootstrapEntries.length).toBeGreaterThan(0);
-	});
-
-	it("skips kernel pseudo-filesystems", async () => {
-		const fs = createInMemoryFileSystem();
-		await fs.mkdir("/dev", { recursive: true });
-		await fs.writeFile("/dev/fake", "x");
-		await fs.mkdir("/app", { recursive: true });
-		const entries = await collectRootFilesystemEntries(fs);
-		expect(entries.some((entry) => entry.path.startsWith("/dev"))).toBe(false);
-		expect(entries.some((entry) => entry.path === "/app")).toBe(true);
-	});
-});
diff --git a/packages/browser/tests/runtime/sab-deferred-syscall.test.ts b/packages/browser/tests/runtime/sab-deferred-syscall.test.ts
deleted file mode 100644
index fb11187cd..000000000
--- a/packages/browser/tests/runtime/sab-deferred-syscall.test.ts
+++ /dev/null
@@ -1,97 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { SabRing, sabRingByteLength, type SabRingLayout } from "../../src/sab-ring.js";
-import {
-	DEFERRED,
-	KernelReactor,
-	REACTOR_CONTROL_BYTES,
-	encodeSyscallCompletion,
-} from "../../src/sab-reactor.js";
-import { SabExecutionEndpoint } from "../../src/sab-execution-endpoint.js";
-
-const LAYOUT: SabRingLayout = { slotCount: 8, slotBytes: 256 };
-const text = (s: string) => new TextEncoder().encode(s);
-const decode = (b: Uint8Array) => new TextDecoder().decode(b);
-
-// A DEFERRED syscall (an async host-callback, e.g. on-device inference) is NOT
-// answered synchronously by serviceSyscall; the execution stays blocked until the
-// MAIN thread writes the result to the completion channel and the reactor delivers
-// it. This is the async-inference transport (§6). Tested single-threaded by driving
-// the endpoint + reactor on one thread (no Atomics.wait needed because the result is
-// staged before we read it).
-describe("deferred syscall + completion channel", () => {
-	it("leaves a deferred syscall pending, then completes it via the completion channel", () => {
-		const upSab = new SharedArrayBuffer(sabRingByteLength(LAYOUT));
-		const downSab = new SharedArrayBuffer(sabRingByteLength(LAYOUT));
-		const controlSab = new SharedArrayBuffer(REACTOR_CONTROL_BYTES);
-		const completionSab = new SharedArrayBuffer(sabRingByteLength(LAYOUT));
-
-		const reactor = new KernelReactor({
-			controlSab,
-			now: () => Date.now(),
-			// Every syscall here is async (host-callback) → DEFERRED.
-			serviceSyscall: () => DEFERRED,
-			completionSab,
-			completionLayout: LAYOUT,
-		});
-		reactor.register("e", { upSab, downSab, layout: LAYOUT });
-
-		// The execution producer side of the channels (the agent worker uses these).
-		const upProducer = new SabRing(upSab, LAYOUT); // exec → kernel
-		const downConsumer = new SabRing(downSab, LAYOUT); // kernel → exec
-		// Simulate the agent writing a SYSCALL frame ([kind=1][payload]).
-		upProducer.tryWrite(new Uint8Array([1, ...text("infer:hello")]));
-
-		// Reactor drains the syscall → DEFERRED → no result written yet.
-		reactor.drainOnce();
-		expect(downConsumer.tryRead()).toBeNull(); // still pending
-
-		// The MAIN thread completes it: write the result to the completion channel.
-		const completionProducer = new SabRing(completionSab, LAYOUT);
-		completionProducer.tryWrite(encodeSyscallCompletion("e", text("PONG_FROM_MODEL")));
-
-		// Reactor drains the completion → delivers the result to the down-ring.
-		reactor.drainOnce();
-		const result = downConsumer.tryRead();
-		expect(result).not.toBeNull();
-		expect(result![0]).toBe(1 /* FRAME_RESULT (down-channel) */);
-		expect(decode(result!.subarray(1))).toBe("PONG_FROM_MODEL");
-	});
-
-	it("a SabExecutionEndpoint syscall round-trips through a deferred completion", () => {
-		const upSab = new SharedArrayBuffer(sabRingByteLength(LAYOUT));
-		const downSab = new SharedArrayBuffer(sabRingByteLength(LAYOUT));
-		const controlSab = new SharedArrayBuffer(REACTOR_CONTROL_BYTES);
-		const completionSab = new SharedArrayBuffer(sabRingByteLength(LAYOUT));
-
-		let pendingPayload: string | null = null;
-		const reactor = new KernelReactor({
-			controlSab,
-			now: () => Date.now(),
-			serviceSyscall: (_id, payload) => {
-				pendingPayload = decode(payload);
-				return DEFERRED;
-			},
-			completionSab,
-			completionLayout: LAYOUT,
-		});
-		reactor.register("e", { upSab, downSab, layout: LAYOUT });
-		const endpoint = new SabExecutionEndpoint({ upSab, downSab, controlSab, layout: LAYOUT });
-		const completionProducer = new SabRing(completionSab, LAYOUT);
-
-		// Stage the completion BEFORE the (single-thread) syscall reads it: the
-		// endpoint writes the request, the reactor drains it (DEFERRED), we stage the
-		// completion, the reactor drains that → down-ring → the endpoint's syscall
-		// returns it.
-		const upProducer = new SabRing(upSab, LAYOUT);
-		upProducer.tryWrite(new Uint8Array([1, ...text("infer:q")]));
-		reactor.drainOnce();
-		expect(pendingPayload).toBe("infer:q");
-		completionProducer.tryWrite(encodeSyscallCompletion("e", text("ANSWER")));
-		reactor.drainOnce();
-		// Now the endpoint can read its result without blocking.
-		const downConsumer = new SabRing(downSab, LAYOUT);
-		const frame = downConsumer.tryRead();
-		expect(decode(frame!.subarray(1))).toBe("ANSWER");
-		void endpoint;
-	});
-});
diff --git a/packages/browser/tests/runtime/sab-execution-endpoint.test.ts b/packages/browser/tests/runtime/sab-execution-endpoint.test.ts
deleted file mode 100644
index f227e1cc4..000000000
--- a/packages/browser/tests/runtime/sab-execution-endpoint.test.ts
+++ /dev/null
@@ -1,90 +0,0 @@
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { Worker } from "node:worker_threads";
-import { describe, expect, it } from "vitest";
-import { sabRingByteLength, type SabRingLayout } from "../../src/sab-ring.js";
-import { SabExecutionEndpoint } from "../../src/sab-execution-endpoint.js";
-import {
-	FRAME_STDOUT,
-	KernelReactor,
-	REACTOR_CONTROL_BYTES,
-} from "../../src/sab-reactor.js";
-
-const LAYOUT: SabRingLayout = { slotCount: 8, slotBytes: 64 };
-const text = (s: string) => new TextEncoder().encode(s);
-const decode = (b: Uint8Array) => new TextDecoder().decode(b);
-
-function channels() {
-	const upSab = new SharedArrayBuffer(sabRingByteLength(LAYOUT));
-	const downSab = new SharedArrayBuffer(sabRingByteLength(LAYOUT));
-	const controlSab = new SharedArrayBuffer(REACTOR_CONTROL_BYTES);
-	return { upSab, downSab, controlSab };
-}
-
-describe("SabExecutionEndpoint non-blocking writes (single-thread, against the real reactor)", () => {
-	it("writes stdout the reactor routes to this execution", () => {
-		const { upSab, downSab, controlSab } = channels();
-		const endpoint = new SabExecutionEndpoint({ upSab, downSab, controlSab, layout: LAYOUT });
-		const reactor = new KernelReactor({
-			controlSab,
-			now: () => Date.now(),
-			serviceSyscall: () => new Uint8Array(0),
-		});
-		reactor.register("e", { upSab, downSab, layout: LAYOUT });
-
-		endpoint.writeStdout(text("hello-from-agent"));
-		endpoint.exit(0);
-		reactor.drainOnce();
-
-		const out = reactor.takeOutput("e");
-		expect(out?.kind).toBe(FRAME_STDOUT);
-		expect(decode(out!.payload)).toBe("hello-from-agent");
-		const exit = reactor.takeOutput("e");
-		expect(exit?.kind).toBe(4 /* FRAME_EXIT */);
-	});
-});
-
-describe("SabExecutionEndpoint blocking syscall (cross-thread, real Atomics)", () => {
-	it(
-		"makes a blocking syscall serviced by the reactor on another thread, then writes the result as stdout",
-		async () => {
-			const { upSab, downSab, controlSab } = channels();
-			const reactor = new KernelReactor({
-				controlSab,
-				now: () => Date.now(),
-				// Echo the syscall payload back as the result.
-				serviceSyscall: (_id, payload) => text(`echo:${decode(payload)}`),
-			});
-			reactor.register("e", { upSab, downSab, layout: LAYOUT });
-
-			const here = path.dirname(fileURLToPath(import.meta.url));
-			const worker = new Worker(
-				path.join(here, "fixtures", "sab-syscall-roundtrip.worker.mjs"),
-				{
-					workerData: {
-						upSab,
-						downSab,
-						genSab: controlSab,
-						slotCount: LAYOUT.slotCount,
-						slotBytes: LAYOUT.slotBytes,
-					},
-				},
-			);
-			const done = new Promise<void>((resolve, reject) => {
-				worker.on("error", reject);
-				worker.on("exit", (c) => (c === 0 ? resolve() : reject(new Error(`exit ${c}`))));
-			});
-
-			// poll services the worker's blocking syscall (writing the RESULT to the
-			// down-channel) and then returns the stdout the worker writes afterward.
-			const out = reactor.poll("e", Date.now() + 10_000);
-			await worker.terminate();
-			await done.catch(() => {});
-
-			expect(out).not.toBeNull();
-			expect(out!.kind).toBe(FRAME_STDOUT);
-			expect(decode(out!.payload)).toBe("echo:ping");
-		},
-		20_000,
-	);
-});
diff --git a/packages/browser/tests/runtime/sab-reactor.test.ts b/packages/browser/tests/runtime/sab-reactor.test.ts
deleted file mode 100644
index e70140318..000000000
--- a/packages/browser/tests/runtime/sab-reactor.test.ts
+++ /dev/null
@@ -1,163 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { SabRing, sabRingByteLength, type SabRingLayout } from "../../src/sab-ring.js";
-import {
-	FRAME_EXIT,
-	FRAME_POISON,
-	FRAME_RESULT,
-	FRAME_STDOUT,
-	FRAME_SYSCALL,
-	KernelReactor,
-	REACTOR_CONTROL_BYTES,
-	type ServiceSyscall,
-} from "../../src/sab-reactor.js";
-
-const LAYOUT: SabRingLayout = { slotCount: 8, slotBytes: 128 };
-
-function encodeFrame(kind: number, payload: Uint8Array): Uint8Array {
-	const out = new Uint8Array(1 + payload.byteLength);
-	out[0] = kind;
-	out.set(payload, 1);
-	return out;
-}
-const text = (s: string) => new TextEncoder().encode(s);
-const decode = (b: Uint8Array) => new TextDecoder().decode(b);
-
-interface Harness {
-	reactor: KernelReactor;
-	clock: { ms: number };
-	add(id: string): { up: SabRing; down: SabRing };
-	syscalls: Array<{ id: string; payload: string }>;
-}
-
-function harness(serviceSyscall?: ServiceSyscall): Harness {
-	const controlSab = new SharedArrayBuffer(REACTOR_CONTROL_BYTES);
-	const clock = { ms: 0 };
-	const syscalls: Array<{ id: string; payload: string }> = [];
-	const reactor = new KernelReactor({
-		controlSab,
-		now: () => clock.ms,
-		serviceSyscall:
-			serviceSyscall ??
-			((id, payload) => {
-				syscalls.push({ id, payload: decode(payload) });
-				return text(`ok:${decode(payload)}`);
-			}),
-	});
-	return {
-		reactor,
-		clock,
-		syscalls,
-		add(id: string) {
-			const upSab = new SharedArrayBuffer(sabRingByteLength(LAYOUT));
-			const downSab = new SharedArrayBuffer(sabRingByteLength(LAYOUT));
-			reactor.register(id, { upSab, downSab, layout: LAYOUT });
-			// Test-side producer view of up (write) and consumer view of down (read).
-			return { up: new SabRing(upSab, LAYOUT), down: new SabRing(downSab, LAYOUT) };
-		},
-	};
-}
-
-describe("KernelReactor routing", () => {
-	it("services a syscall inline and writes the result to the down-ring", () => {
-		const h = harness();
-		const { up, down } = h.add("e1");
-		up.tryWrite(encodeFrame(FRAME_SYSCALL, text("ping")));
-		h.reactor.drainOnce();
-		expect(h.syscalls).toEqual([{ id: "e1", payload: "ping" }]);
-		const result = down.tryRead();
-		expect(result).not.toBeNull();
-		expect(result![0]).toBe(FRAME_RESULT);
-		expect(decode(result!.subarray(1))).toBe("ok:ping");
-	});
-
-	it("queues stdout per-execution and never leaks across executions (channel-derived identity)", () => {
-		const h = harness();
-		const a = h.add("a");
-		const b = h.add("b");
-		a.up.tryWrite(encodeFrame(FRAME_STDOUT, text("from-a")));
-		b.up.tryWrite(encodeFrame(FRAME_STDOUT, text("from-b")));
-		h.reactor.drainOnce();
-		const outA = h.reactor.takeOutput("a");
-		const outB = h.reactor.takeOutput("b");
-		expect(outA && decode(outA.payload)).toBe("from-a");
-		expect(outB && decode(outB.payload)).toBe("from-b");
-		// a's queue is now empty — it never saw b's frame.
-		expect(h.reactor.takeOutput("a")).toBeNull();
-	});
-
-	it("routes exit but keeps the execution live (exit != killed)", () => {
-		const h = harness();
-		const { up } = h.add("e1");
-		up.tryWrite(encodeFrame(FRAME_EXIT, new Uint8Array([0])));
-		h.reactor.drainOnce();
-		const out = h.reactor.takeOutput("e1");
-		expect(out?.kind).toBe(FRAME_EXIT);
-		expect(h.reactor.isLive("e1")).toBe(true);
-	});
-});
-
-describe("KernelReactor hostile-input resilience (one bad agent must not wedge the kernel)", () => {
-	it("kills the execution on an unknown frame kind, leaving others live", () => {
-		const h = harness();
-		const a = h.add("a");
-		const b = h.add("b");
-		a.up.tryWrite(encodeFrame(99, text("garbage")));
-		b.up.tryWrite(encodeFrame(FRAME_STDOUT, text("ok")));
-		h.reactor.drainOnce();
-		expect(h.reactor.isLive("a")).toBe(false);
-		expect(h.reactor.isLive("b")).toBe(true);
-		expect(decode(h.reactor.takeOutput("b")!.payload)).toBe("ok");
-	});
-
-	it("kills the execution on a hostile frame length, never reading OOB or throwing out of the reactor", () => {
-		const h = harness();
-		const { up } = h.add("bad");
-		h.add("good");
-		// Simulate a malicious producer: write a huge length prefix into slot 0 and
-		// advance the tail directly, bypassing the write-side guard.
-		const buf = up as unknown as { bytes: Uint8Array; control: Int32Array };
-		buf.bytes[0] = 0xff;
-		buf.bytes[1] = 0xff;
-		buf.bytes[2] = 0xff;
-		buf.bytes[3] = 0x7f;
-		Atomics.store(buf.control, 1, 1);
-		expect(() => h.reactor.drainOnce()).not.toThrow();
-		expect(h.reactor.isLive("bad")).toBe(false);
-		expect(h.reactor.isLive("good")).toBe(true);
-	});
-});
-
-describe("KernelReactor poll + teardown", () => {
-	it("returns queued output immediately without waiting", () => {
-		const h = harness();
-		const { up } = h.add("e1");
-		up.tryWrite(encodeFrame(FRAME_STDOUT, text("hi")));
-		const out = h.reactor.poll("e1", 10_000);
-		expect(out && decode(out.payload)).toBe("hi");
-	});
-
-	it("returns null on deadline (timeout) when nothing is queued", () => {
-		const h = harness();
-		h.add("e1");
-		h.clock.ms = 100;
-		expect(h.reactor.poll("e1", 50)).toBeNull(); // deadline already passed
-	});
-
-	it("kill poisons the down-ring and bumps the epoch", () => {
-		const h = harness();
-		const { down } = h.add("e1");
-		expect(h.reactor.epochOf("e1")).toBe(0);
-		h.reactor.kill("e1");
-		expect(h.reactor.isLive("e1")).toBe(false);
-		expect(h.reactor.epochOf("e1")).toBe(1);
-		const poison = down.tryRead();
-		expect(poison?.[0]).toBe(FRAME_POISON);
-	});
-
-	it("poll returns null once an execution is killed", () => {
-		const h = harness();
-		h.add("e1");
-		h.reactor.kill("e1");
-		expect(h.reactor.poll("e1", 10_000)).toBeNull();
-	});
-});
diff --git a/packages/browser/tests/runtime/sab-ring.test.ts b/packages/browser/tests/runtime/sab-ring.test.ts
deleted file mode 100644
index e482944b9..000000000
--- a/packages/browser/tests/runtime/sab-ring.test.ts
+++ /dev/null
@@ -1,121 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-	SabRing,
-	SabRingProtocolError,
-	sabRingByteLength,
-	sabRingMaxFrameBytes,
-} from "../../src/sab-ring.js";
-
-const LAYOUT = { slotCount: 4, slotBytes: 64 };
-
-function newRing(layout = LAYOUT): { ring: SabRing; sab: SharedArrayBuffer } {
-	const sab = new SharedArrayBuffer(sabRingByteLength(layout));
-	return { ring: new SabRing(sab, layout), sab };
-}
-
-function frame(text: string): Uint8Array {
-	return new TextEncoder().encode(text);
-}
-
-function read(ring: SabRing): string | null {
-	const out = ring.tryRead();
-	return out === null ? null : new TextDecoder().decode(out);
-}
-
-describe("SabRing layout", () => {
-	it("sizes the backing buffer for header + slots", () => {
-		expect(sabRingByteLength({ slotCount: 4, slotBytes: 64 })).toBe(16 + 4 * 64);
-	});
-	it("reports max frame as slot minus the length prefix", () => {
-		expect(sabRingMaxFrameBytes(64)).toBe(60);
-	});
-	it("rejects non-power-of-two slot counts and tiny slots", () => {
-		const sab = new SharedArrayBuffer(4096);
-		expect(() => new SabRing(sab, { slotCount: 3, slotBytes: 64 })).toThrow();
-		expect(() => new SabRing(sab, { slotCount: 4, slotBytes: 4 })).toThrow();
-	});
-});
-
-describe("SabRing SPSC round-trip", () => {
-	it("returns null when empty", () => {
-		const { ring } = newRing();
-		expect(ring.tryRead()).toBeNull();
-		expect(ring.hasPending()).toBe(false);
-	});
-
-	it("round-trips a single frame", () => {
-		const { ring } = newRing();
-		expect(ring.tryWrite(frame("hello"))).toBe(true);
-		expect(ring.hasPending()).toBe(true);
-		expect(read(ring)).toBe("hello");
-		expect(ring.tryRead()).toBeNull();
-	});
-
-	it("preserves FIFO order", () => {
-		const { ring } = newRing();
-		ring.tryWrite(frame("a"));
-		ring.tryWrite(frame("b"));
-		ring.tryWrite(frame("c"));
-		expect(read(ring)).toBe("a");
-		expect(read(ring)).toBe("b");
-		expect(read(ring)).toBe("c");
-	});
-
-	it("applies backpressure when full (tryWrite=false, never throws)", () => {
-		const { ring } = newRing(); // slotCount 4
-		expect(ring.tryWrite(frame("1"))).toBe(true);
-		expect(ring.tryWrite(frame("2"))).toBe(true);
-		expect(ring.tryWrite(frame("3"))).toBe(true);
-		expect(ring.tryWrite(frame("4"))).toBe(true);
-		expect(ring.tryWrite(frame("5"))).toBe(false); // full
-		expect(read(ring)).toBe("1"); // drain one frees a slot
-		expect(ring.tryWrite(frame("5"))).toBe(true);
-	});
-
-	it("wraps around correctly over many frames", () => {
-		const { ring } = newRing();
-		for (let i = 0; i < 100; i++) {
-			expect(ring.tryWrite(frame(`f${i}`))).toBe(true);
-			expect(read(ring)).toBe(`f${i}`);
-		}
-	});
-
-	it("carries an empty frame", () => {
-		const { ring } = newRing();
-		expect(ring.tryWrite(new Uint8Array(0))).toBe(true);
-		const out = ring.tryRead();
-		expect(out).not.toBeNull();
-		expect(out!.byteLength).toBe(0);
-	});
-
-	it("throws locally when a frame exceeds the slot", () => {
-		const { ring } = newRing();
-		expect(() => ring.tryWrite(new Uint8Array(61))).toThrow(); // maxFrame is 60
-	});
-});
-
-describe("SabRing hostile-input validation (read side = TCB reading untrusted bytes)", () => {
-	it("throws SabRingProtocolError on an out-of-bounds length prefix", () => {
-		const { ring, sab } = newRing();
-		// Simulate a malicious producer: write a huge length prefix into slot 0 and
-		// advance the tail, WITHOUT going through tryWrite's write-side guard.
-		const control = new Int32Array(sab, 0, 4);
-		const bytes = new Uint8Array(sab, 16);
-		bytes[0] = 0xff;
-		bytes[1] = 0xff;
-		bytes[2] = 0xff;
-		bytes[3] = 0x7f; // length = 0x7fffffff
-		Atomics.store(control, 1, 1); // tail = 1 (one frame "available")
-		expect(() => ring.tryRead()).toThrow(SabRingProtocolError);
-	});
-
-	it("does not read past the slot for a length just over the max", () => {
-		const { ring, sab } = newRing();
-		const control = new Int32Array(sab, 0, 4);
-		const bytes = new Uint8Array(sab, 16);
-		const bad = 61; // maxFrame is 60
-		bytes[0] = bad & 0xff;
-		Atomics.store(control, 1, 1);
-		expect(() => ring.tryRead()).toThrow(SabRingProtocolError);
-	});
-});
diff --git a/packages/browser/tests/runtime/sab-worker-stress.test.ts b/packages/browser/tests/runtime/sab-worker-stress.test.ts
deleted file mode 100644
index d7eea1dab..000000000
--- a/packages/browser/tests/runtime/sab-worker-stress.test.ts
+++ /dev/null
@@ -1,78 +0,0 @@
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { Worker } from "node:worker_threads";
-import { describe, expect, it } from "vitest";
-import { sabRingByteLength, type SabRingLayout } from "../../src/sab-ring.js";
-import {
-	FRAME_STDOUT,
-	KernelReactor,
-	REACTOR_CONTROL_BYTES,
-} from "../../src/sab-reactor.js";
-
-// Real-thread race stress: a producer on a SEPARATE OS thread (node:worker_threads)
-// hammers the SAB ring + GEN/notify; the reactor consumes on this thread with REAL
-// Atomics.wait. This is the property the spec calls "unverifiable single-threaded":
-// if the GEN-bump/notify/wait ordering had a lost-wakeup, the consumer would hang
-// (timeout) or drop frames (order/count assert fails).
-
-const here = path.dirname(fileURLToPath(import.meta.url));
-const PRODUCER = path.join(here, "fixtures", "sab-stress-producer.mjs");
-
-const LAYOUT: SabRingLayout = { slotCount: 1024, slotBytes: 32 };
-const COUNT = 2000;
-
-function seqOf(payload: Uint8Array): number {
-	return (
-		(payload[0] | (payload[1] << 8) | (payload[2] << 16) | (payload[3] << 24)) >>> 0
-	);
-}
-
-describe("SAB real-thread race stress (node:worker_threads)", () => {
-	it(
-		"delivers every frame in order across two real threads (no lost wakeup, no corruption)",
-		async () => {
-			const ringSab = new SharedArrayBuffer(sabRingByteLength(LAYOUT));
-			const genSab = new SharedArrayBuffer(REACTOR_CONTROL_BYTES);
-			const downSab = new SharedArrayBuffer(sabRingByteLength(LAYOUT)); // unused for stdout
-
-			const reactor = new KernelReactor({
-				controlSab: genSab,
-				now: () => Date.now(),
-				serviceSyscall: () => new Uint8Array(0),
-			});
-			reactor.register("e", { upSab: ringSab, downSab, layout: LAYOUT });
-
-			const worker = new Worker(PRODUCER, {
-				workerData: {
-					ringSab,
-					genSab,
-					slotCount: LAYOUT.slotCount,
-					slotBytes: LAYOUT.slotBytes,
-					count: COUNT,
-				},
-			});
-			const workerDone = new Promise<void>((resolve, reject) => {
-				worker.on("error", reject);
-				worker.on("exit", (code) =>
-					code === 0 ? resolve() : reject(new Error(`producer exited ${code}`)),
-				);
-			});
-
-			const received: number[] = [];
-			while (received.length < COUNT) {
-				const out = reactor.poll("e", Date.now() + 10_000);
-				if (out === null) break; // timeout → lost wakeup / hang
-				expect(out.kind).toBe(FRAME_STDOUT);
-				received.push(seqOf(out.payload));
-			}
-
-			await worker.terminate();
-			await workerDone.catch(() => {}); // producer may be terminated mid-flight
-
-			// Every frame arrived, exactly once, in order.
-			expect(received.length).toBe(COUNT);
-			for (let i = 0; i < COUNT; i++) expect(received[i]).toBe(i);
-		},
-		30_000,
-	);
-});
diff --git a/packages/browser/tests/runtime/signals.test.ts b/packages/browser/tests/runtime/signals.test.ts
deleted file mode 100644
index 3978dfd57..000000000
--- a/packages/browser/tests/runtime/signals.test.ts
+++ /dev/null
@@ -1,50 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-	applyProcessSignalStateUpdate,
-	defaultSignalExitCode,
-	parseProcessSignalStateArgs,
-	signalNumberForEvent,
-	type BrowserSignalRegistration,
-} from "../../src/signals.js";
-
-describe("browser signal helpers", () => {
-	it("normalizes signal names and default exit codes", () => {
-		expect(signalNumberForEvent("SIGTERM")).toBe(15);
-		expect(signalNumberForEvent("term")).toBe(15);
-		expect(signalNumberForEvent("SIGPOLL")).toBe(29);
-		expect(signalNumberForEvent("NOPE")).toBeNull();
-		expect(defaultSignalExitCode(15)).toBe(143);
-		expect(defaultSignalExitCode(0)).toBeNull();
-	});
-
-	it("parses and applies process signal state registrations", () => {
-		const { signal, registration } = parseProcessSignalStateArgs([
-			15,
-			"user",
-			"[2,9]",
-			1,
-		]);
-		expect(signal).toBe(15);
-		expect(registration).toEqual({ action: "user", mask: [2, 9], flags: 1 });
-
-		const states = new Map<string, Map<number, BrowserSignalRegistration>>();
-		applyProcessSignalStateUpdate(states, "exec-1", signal, registration);
-		expect(states.get("exec-1")?.get(15)).toEqual(registration);
-
-		applyProcessSignalStateUpdate(states, "exec-1", 15, {
-			action: "default",
-			mask: [],
-			flags: 0,
-		});
-		expect(states.has("exec-1")).toBe(false);
-	});
-
-	it("rejects unknown process signal state values", () => {
-		expect(() => parseProcessSignalStateArgs([32, "user", "[]", 0])).toThrow(
-			"process.signal_state signal must be a valid POSIX signal",
-		);
-		expect(() =>
-			parseProcessSignalStateArgs([15, "user", "[32]", 0]),
-		).toThrow("process.signal_state mask entries must be a valid POSIX signal");
-	});
-});
diff --git a/packages/browser/tests/runtime/wasi-command-bootstrap.test.ts b/packages/browser/tests/runtime/wasi-command-bootstrap.test.ts
deleted file mode 100644
index 8f82dea48..000000000
--- a/packages/browser/tests/runtime/wasi-command-bootstrap.test.ts
+++ /dev/null
@@ -1,35 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { createWasiCommandBootstrapScript } from "../../src/wasi-command-bootstrap.js";
-
-describe("wasi command bootstrap", () => {
-	it("generates a production browser guest launcher for the WASI command host", () => {
-		const source = createWasiCommandBootstrapScript({
-			commandSource: "/commands/sh",
-			command: "sh",
-			args: ["-i"],
-			commands: {
-				echo: "/commands/echo",
-				ls: "/commands/ls",
-			},
-			env: {
-				PATH: "/bin:/usr/bin",
-				TERM: "xterm-256color",
-			},
-			cwd: "/",
-			bootMessage: "BOOT",
-			errorMessagePrefix: "ERR:",
-		});
-
-		expect(source).toContain('require("node:wasi")');
-		expect(source).toContain('require("secure-exec:wasi-command-host")');
-		expect(source).toContain('const commandSource = "/commands/sh";');
-		expect(source).toContain("/commands/sh");
-		expect(source).toContain("/commands/echo");
-		expect(source).toContain("/commands/ls");
-		expect(source).toContain('args: ["sh","-i"]');
-		expect(source).toContain("commandHost.installBlockingStdin(process)");
-		expect(source).toContain("commandHost.setParentWasi(wasi)");
-		expect(source).toContain("commandHost.setMemory(instance.exports.memory)");
-		expect(source).toContain("ERR:");
-	});
-});
diff --git a/packages/browser/tsconfig.json b/packages/browser/tsconfig.json
index e44a71030..0eb722e69 100644
--- a/packages/browser/tsconfig.json
+++ b/packages/browser/tsconfig.json
@@ -1,15 +1,10 @@
 {
-  "compilerOptions": {
-    "target": "ES2022",
-    "module": "NodeNext",
-    "moduleResolution": "NodeNext",
-    "declaration": true,
-    "outDir": "./dist",
-    "rootDir": "./src",
-    "strict": true,
-    "esModuleInterop": true,
-    "skipLibCheck": true
-  },
-  "include": ["src/**/*"],
-  "exclude": ["node_modules", "dist"]
+	"extends": "../../tsconfig.base.json",
+	"compilerOptions": {
+		"outDir": "dist",
+		"rootDir": "src"
+	},
+	"include": [
+		"src/**/*.ts"
+	]
 }
diff --git a/packages/build-tools/README.md b/packages/build-tools/README.md
deleted file mode 100644
index 4f73294bf..000000000
--- a/packages/build-tools/README.md
+++ /dev/null
@@ -1,3 +0,0 @@
-# @secure-exec/build-tools
-
-Workspace-only generators for secure-exec protocol, V8 bridge, and base filesystem assets.
diff --git a/packages/build-tools/bridge-src/builtins/active-handles.ts b/packages/build-tools/bridge-src/builtins/active-handles.ts
deleted file mode 100644
index 790e32620..000000000
--- a/packages/build-tools/bridge-src/builtins/active-handles.ts
+++ /dev/null
@@ -1,79 +0,0 @@
-import { _exited } from "./process.js";
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { bridgeDispatchSync } from "../transport.js";
-
-var HANDLE_DISPATCH = {
-  register: "kernelHandleRegister",
-  unregister: "kernelHandleUnregister",
-  list: "kernelHandleList"
-};
-var _activeHandles = /* @__PURE__ */ new Map();
-var _waitResolvers = [];
-function _registerHandle2(id, description) {
-  try {
-    bridgeDispatchSync(HANDLE_DISPATCH.register, id, description);
-  } catch (error) {
-    if (error instanceof Error && error.message.includes("EAGAIN")) {
-      throw new Error(
-        "ERR_RESOURCE_BUDGET_EXCEEDED: maximum active handles exceeded"
-      );
-    }
-    throw error;
-  }
-  _activeHandles.set(id, description);
-}
-function _unregisterHandle2(id) {
-  _activeHandles.delete(id);
-  let remaining = _activeHandles.size;
-  try {
-    bridgeDispatchSync(HANDLE_DISPATCH.unregister, id);
-  } catch {
-  }
-  if (remaining === 0 && _waitResolvers.length > 0) {
-    const resolvers = _waitResolvers;
-    _waitResolvers = [];
-    resolvers.forEach((r) => r());
-  }
-}
-function _waitForActiveHandles() {
-  if (typeof _exited !== "undefined" && _exited) {
-    return Promise.resolve();
-  }
-  const getPendingTimerCount = globalThis._getPendingTimerCount;
-  const waitForTimerDrain = globalThis._waitForTimerDrain;
-  const hasHandles = _getActiveHandles().length > 0;
-  const hasTimers = typeof getPendingTimerCount === "function" && getPendingTimerCount() > 0;
-  if (!hasHandles && !hasTimers) {
-    return Promise.resolve();
-  }
-  const promises = [];
-  if (hasHandles) {
-    promises.push(
-      new Promise((resolve) => {
-        let settled = false;
-        const complete = () => {
-          if (settled) return;
-          settled = true;
-          resolve();
-        };
-        _waitResolvers.push(complete);
-        if (_getActiveHandles().length === 0) {
-          complete();
-        }
-      })
-    );
-  }
-  if (hasTimers && typeof waitForTimerDrain === "function") {
-    promises.push(waitForTimerDrain());
-  }
-  return Promise.all(promises).then(() => {
-  });
-}
-function _getActiveHandles() {
-  return Array.from(_activeHandles.values());
-}
-exposeCustomGlobal("_registerHandle", _registerHandle2);
-exposeCustomGlobal("_unregisterHandle", _unregisterHandle2);
-exposeCustomGlobal("_waitForActiveHandles", _waitForActiveHandles);
-exposeCustomGlobal("_getActiveHandles", _getActiveHandles);
-export { HANDLE_DISPATCH, _activeHandles, _waitResolvers, _registerHandle2, _unregisterHandle2, _waitForActiveHandles, _getActiveHandles };
diff --git a/packages/build-tools/bridge-src/builtins/buffer-constants.ts b/packages/build-tools/bridge-src/builtins/buffer-constants.ts
deleted file mode 100644
index cd7bcf38c..000000000
--- a/packages/build-tools/bridge-src/builtins/buffer-constants.ts
+++ /dev/null
@@ -1,19 +0,0 @@
-// Dependency-free-ish leaf for the buffer size caps. It imports ONLY from the
-// vendor leaves (esbuild-runtime + the vendored buffer), never from the cyclic
-// builtins, so `process.ts`/`module-loader.ts` can import these constants without
-// re-creating the import cycle that caused the earlier TDZ bug. The caps are read
-// dynamically from the vendored buffer module (exactly as the pre-split source did)
-// so a future buffer upgrade that exposes Buffer.kMaxLength/kStringMaxLength is
-// honored rather than silently overridden by a literal.
-import { __toESM } from "../vendor/esbuild-runtime.js";
-import { require_buffer } from "../vendor/buffer.js";
-
-var import_buffer2 = __toESM(require_buffer(), 1);
-var BUFFER_MAX_LENGTH = typeof import_buffer2.Buffer.kMaxLength === "number" ? import_buffer2.Buffer.kMaxLength : 2147483647;
-var BUFFER_MAX_STRING_LENGTH = typeof import_buffer2.Buffer.kStringMaxLength === "number" ? import_buffer2.Buffer.kStringMaxLength : 536870888;
-var BUFFER_CONSTANTS = Object.freeze({
-  MAX_LENGTH: BUFFER_MAX_LENGTH,
-  MAX_STRING_LENGTH: BUFFER_MAX_STRING_LENGTH
-});
-
-export { BUFFER_MAX_LENGTH, BUFFER_MAX_STRING_LENGTH, BUFFER_CONSTANTS };
diff --git a/packages/build-tools/bridge-src/builtins/buffer-runtime.ts b/packages/build-tools/bridge-src/builtins/buffer-runtime.ts
deleted file mode 100644
index f8fc932df..000000000
--- a/packages/build-tools/bridge-src/builtins/buffer-runtime.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-import { BUFFER_MAX_LENGTH, BUFFER_MAX_STRING_LENGTH } from "./buffer-constants.js";
-import { require_buffer } from "../vendor/buffer.js";
-import { __toESM } from "../vendor/esbuild-runtime.js";
-
-var import_buffer2 = __toESM(require_buffer(), 1);
-
-var bufferPolyfillMutable = import_buffer2.Buffer;
-
-if (typeof bufferPolyfillMutable.kMaxLength !== "number") {
-  bufferPolyfillMutable.kMaxLength = BUFFER_MAX_LENGTH;
-}
-
-if (typeof bufferPolyfillMutable.kStringMaxLength !== "number") {
-  bufferPolyfillMutable.kStringMaxLength = BUFFER_MAX_STRING_LENGTH;
-}
-
-if (typeof bufferPolyfillMutable.constants !== "object" || bufferPolyfillMutable.constants === null) {
-  bufferPolyfillMutable.constants = {
-    MAX_LENGTH: BUFFER_MAX_LENGTH,
-    MAX_STRING_LENGTH: BUFFER_MAX_STRING_LENGTH
-  };
-}
-
-var bufferProto = import_buffer2.Buffer.prototype;
-
-if (typeof bufferProto.utf8Slice !== "function") {
-  const encodings = ["utf8", "latin1", "ascii", "hex", "base64", "ucs2", "utf16le"];
-  for (const enc of encodings) {
-    if (typeof bufferProto[enc + "Slice"] !== "function") {
-      bufferProto[enc + "Slice"] = function(start, end) {
-        return this.toString(enc, start, end);
-      };
-    }
-    if (typeof bufferProto[enc + "Write"] !== "function") {
-      bufferProto[enc + "Write"] = function(string, offset, length) {
-        return this.write(string, offset ?? 0, length ?? this.length - (offset ?? 0), enc);
-      };
-    }
-  }
-}
-
-var bufferCtorMutable = import_buffer2.Buffer;
-
-if (typeof bufferCtorMutable.allocUnsafe === "function" && !bufferCtorMutable.allocUnsafe._secureExecPatched) {
-  const originalAllocUnsafe = bufferCtorMutable.allocUnsafe;
-  bufferCtorMutable.allocUnsafe = function patchedAllocUnsafe(size) {
-    try {
-      return originalAllocUnsafe.call(this, size);
-    } catch (error) {
-      if (error instanceof RangeError && typeof size === "number" && size > BUFFER_MAX_LENGTH) {
-        throw new Error("Array buffer allocation failed");
-      }
-      throw error;
-    }
-  };
-  bufferCtorMutable.allocUnsafe._secureExecPatched = true;
-}
-
-var Buffer3 = import_buffer2.Buffer;
-export { Buffer3, bufferCtorMutable, bufferPolyfillMutable, bufferProto, import_buffer2 };
diff --git a/packages/build-tools/bridge-src/builtins/builtin-modules.ts b/packages/build-tools/bridge-src/builtins/builtin-modules.ts
deleted file mode 100644
index 54413f840..000000000
--- a/packages/build-tools/bridge-src/builtins/builtin-modules.ts
+++ /dev/null
@@ -1,650 +0,0 @@
-import { BUFFER_CONSTANTS, BUFFER_MAX_LENGTH, BUFFER_MAX_STRING_LENGTH } from "./buffer-constants.js";
-import { eventsModule } from "./events.js";
-import { builtinConsoleModule, installBuiltinUtilFormatWithOptions } from "./console.js";
-import { builtinCryptoModule } from "./crypto.js";
-import { builtinDiagnosticsChannelModule, builtinStreamConsumersModule, builtinStreamPromisesModule, builtinTtyModule, builtinWorkerThreadsModule, createAccessDeniedBuiltinError } from "./misc-stubs.js";
-import { builtinPerfHooksModule } from "./perf.js";
-import { fileURLToPath2, pathToFileURL2, process_default } from "./process.js";
-import { builtinAsyncHooksModule, builtinTimersPromisesModule } from "./timers.js";
-import { builtinV8Module } from "./v8.js";
-import { builtinVmModule } from "./vm.js";
-import { URL2, URLSearchParams } from "./whatwg-url.js";
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { TextDecoder } from "../polyfills/index.js";
-import { bufferStdlibModuleNs, constantsStdlibModuleNs, eventsStdlibModuleNs, pathStdlibModuleNs, punycodeStdlibModuleNs, querystringStdlibModuleNs, streamStdlibModuleNs, stringDecoderStdlibModuleNs, urlStdlibModuleNs } from "../prelude.js";
-
-class BuiltinModuleRegistry {
-  static builtinModules = [
-    "assert",
-    "async_hooks",
-    "buffer",
-    "child_process",
-    "console",
-    "cluster",
-    "constants",
-    "crypto",
-    "dgram",
-    "diagnostics_channel",
-    "domain",
-    "dns",
-    "dns/promises",
-    "events",
-    "fs",
-    "fs/promises",
-    "http",
-    "http2",
-    "https",
-    "inspector",
-    "module",
-    "net",
-    "os",
-    "path",
-    "path/posix",
-    "path/win32",
-    "perf_hooks",
-    "process",
-    "punycode",
-    "querystring",
-    "readline",
-    "repl",
-    "sqlite",
-    "stream",
-    "stream/consumers",
-    "stream/promises",
-    "stream/web",
-    "string_decoder",
-    "sys",
-    "timers",
-    "timers/promises",
-    "trace_events",
-    "tls",
-    "tty",
-    "url",
-    "util",
-    "util/types",
-    "v8",
-    "wasi",
-    "worker_threads",
-    "zlib",
-    "vm"
-  ];
-}
-var builtinModules = BuiltinModuleRegistry.builtinModules;
-var builtinTimersModule = {
-  clearImmediate: globalThis.clearImmediate ?? function() {
-  },
-  clearInterval: globalThis.clearInterval ?? function() {
-  },
-  clearTimeout: globalThis.clearTimeout ?? function() {
-  },
-  setImmediate: globalThis.setImmediate ?? function(callback, ...args) {
-    return globalThis.setTimeout?.(() => callback(...args), 0);
-  },
-  setInterval: globalThis.setInterval ?? function(callback, delay, ...args) {
-    return globalThis.setTimeout?.(() => callback(...args), delay ?? 0);
-  },
-  setTimeout: globalThis.setTimeout ?? function() {
-    return void 0;
-  }
-};
-function unwrapStdlibModule(moduleNamespace) {
-  if (moduleNamespace && typeof moduleNamespace === "object" && moduleNamespace.default != null) {
-    return moduleNamespace.default;
-  }
-  return moduleNamespace;
-}
-function cloneStdlibModule(moduleNamespace) {
-  const resolved = unwrapStdlibModule(moduleNamespace);
-  if (resolved == null) {
-    return resolved;
-  }
-  if (typeof resolved === "function") {
-    return resolved;
-  }
-  if (typeof resolved === "object") {
-    return { ...resolved };
-  }
-  return resolved;
-}
-function defineMissingModuleProperty(target, key, value) {
-  if (target != null && typeof target[key] === "undefined") {
-    target[key] = value;
-  }
-}
-function trimNonRootTrailingSlash(pathValue) {
-  return typeof pathValue === "string" && pathValue.length > 1 && pathValue.endsWith("/") ? pathValue.slice(0, -1) : pathValue;
-}
-var builtinBufferStdlibModule = cloneStdlibModule(bufferStdlibModuleNs);
-defineMissingModuleProperty(builtinBufferStdlibModule, "constants", BUFFER_CONSTANTS);
-defineMissingModuleProperty(builtinBufferStdlibModule, "kMaxLength", BUFFER_MAX_LENGTH);
-defineMissingModuleProperty(
-  builtinBufferStdlibModule,
-  "kStringMaxLength",
-  BUFFER_MAX_STRING_LENGTH
-);
-defineMissingModuleProperty(builtinBufferStdlibModule, "Blob", globalThis.Blob);
-defineMissingModuleProperty(builtinBufferStdlibModule, "File", globalThis.File);
-var builtinConstantsStdlibModule = cloneStdlibModule(constantsStdlibModuleNs);
-var builtinEventsStdlibModule = cloneStdlibModule(eventsStdlibModuleNs);
-var builtinEventsConstructor = null;
-var builtinEventsStdlibModuleInitialized = false;
-function ensureBuiltinEventsStdlibModule() {
-  if (builtinEventsStdlibModuleInitialized) {
-    return builtinEventsStdlibModule;
-  }
-  builtinEventsStdlibModuleInitialized = true;
-  builtinEventsConstructor =
-    typeof builtinEventsStdlibModule === "function"
-      ? builtinEventsStdlibModule
-      : builtinEventsStdlibModule?.EventEmitter;
-  if (typeof builtinEventsConstructor === "function") {
-    Object.assign(
-      builtinEventsConstructor.prototype,
-      eventsModule.EventEmitter.prototype
-    );
-    Object.assign(eventsModule.EventEmitter, builtinEventsStdlibModule, eventsModule);
-    builtinEventsStdlibModule = eventsModule.EventEmitter;
-    builtinEventsStdlibModule.EventEmitter = builtinEventsStdlibModule;
-  } else {
-    builtinEventsStdlibModule = {
-      ...builtinEventsStdlibModule,
-      ...eventsModule
-    };
-  }
-  return builtinEventsStdlibModule;
-}
-var builtinPathStdlibModule = cloneStdlibModule(pathStdlibModuleNs);
-if (!builtinPathStdlibModule?.posix) {
-  builtinPathStdlibModule.posix = cloneStdlibModule(
-    pathStdlibModuleNs?.posix ?? pathStdlibModuleNs?.default?.posix
-  ) ?? builtinPathStdlibModule;
-}
-if (!builtinPathStdlibModule?.win32) {
-  builtinPathStdlibModule.win32 = cloneStdlibModule(
-    pathStdlibModuleNs?.win32 ?? pathStdlibModuleNs?.default?.win32
-  ) ?? builtinPathStdlibModule;
-}
-if (builtinPathStdlibModule?.normalize) {
-  const builtinPathNormalize = builtinPathStdlibModule.normalize.bind(builtinPathStdlibModule);
-  builtinPathStdlibModule.normalize = function(pathValue) {
-    return trimNonRootTrailingSlash(builtinPathNormalize(pathValue));
-  };
-}
-var builtinPunycodeStdlibModule = cloneStdlibModule(punycodeStdlibModuleNs);
-var builtinQuerystringStdlibModule = cloneStdlibModule(querystringStdlibModuleNs);
-var builtinStreamStdlibModule = cloneStdlibModule(streamStdlibModuleNs);
-if (typeof builtinStreamStdlibModule?.Stream === "function") {
-  Object.assign(builtinStreamStdlibModule.Stream, builtinStreamStdlibModule);
-  builtinStreamStdlibModule = builtinStreamStdlibModule.Stream;
-  builtinStreamStdlibModule.Stream = builtinStreamStdlibModule;
-  const isBuiltinStreamInstance = (value) => {
-    if (!value || (typeof value !== "object" && typeof value !== "function")) {
-      return false;
-    }
-    return (
-      (typeof builtinStreamStdlibModule.Readable === "function" &&
-        value instanceof builtinStreamStdlibModule.Readable) ||
-      (typeof builtinStreamStdlibModule.Writable === "function" &&
-        value instanceof builtinStreamStdlibModule.Writable) ||
-      (typeof builtinStreamStdlibModule.Duplex === "function" &&
-        value instanceof builtinStreamStdlibModule.Duplex) ||
-      (typeof builtinStreamStdlibModule.Transform === "function" &&
-        value instanceof builtinStreamStdlibModule.Transform) ||
-      (typeof builtinStreamStdlibModule.PassThrough === "function" &&
-        value instanceof builtinStreamStdlibModule.PassThrough)
-    );
-  };
-  Object.defineProperty(builtinStreamStdlibModule, Symbol.hasInstance, {
-    configurable: true,
-    value: isBuiltinStreamInstance
-  });
-}
-function defineReadableAsyncIterator(target) {
-  if (!target || typeof target[Symbol.asyncIterator] === "function") {
-    return;
-  }
-  Object.defineProperty(target, Symbol.asyncIterator, {
-    configurable: true,
-    value: function() {
-      const stream = this;
-      const queuedChunks = [];
-      const pendingResolves = [];
-      let done = false;
-      let error = null;
-      const flush = () => {
-        while (pendingResolves.length > 0) {
-          if (error) {
-            pendingResolves.shift()(Promise.reject(error));
-            continue;
-          }
-          if (queuedChunks.length > 0) {
-            pendingResolves.shift()(Promise.resolve({ done: false, value: queuedChunks.shift() }));
-            continue;
-          }
-          if (done) {
-            pendingResolves.shift()(Promise.resolve({ done: true, value: void 0 }));
-            continue;
-          }
-          break;
-        }
-      };
-      const onData = (chunk) => {
-        queuedChunks.push(chunk);
-        flush();
-      };
-      const onEnd = () => {
-        done = true;
-        flush();
-      };
-      const onError = (reason) => {
-        error = reason;
-        done = true;
-        flush();
-      };
-      stream.on?.("data", onData);
-      stream.on?.("end", onEnd);
-      stream.on?.("close", onEnd);
-      stream.on?.("error", onError);
-      stream.resume?.();
-      return {
-        next() {
-          if (error) {
-            return Promise.reject(error);
-          }
-          if (queuedChunks.length > 0) {
-            return Promise.resolve({ done: false, value: queuedChunks.shift() });
-          }
-          if (done) {
-            return Promise.resolve({ done: true, value: void 0 });
-          }
-          return new Promise((resolve) => {
-            pendingResolves.push(resolve);
-          });
-        },
-        return() {
-          done = true;
-          stream.off?.("data", onData);
-          stream.off?.("end", onEnd);
-          stream.off?.("close", onEnd);
-          stream.off?.("error", onError);
-          flush();
-          return Promise.resolve({ done: true, value: void 0 });
-        },
-        [Symbol.asyncIterator]() {
-          return this;
-        }
-      };
-    }
-  });
-}
-defineReadableAsyncIterator(builtinStreamStdlibModule?.Readable?.prototype);
-defineReadableAsyncIterator(builtinStreamStdlibModule?.PassThrough?.prototype);
-defineReadableAsyncIterator(builtinStreamStdlibModule?.Transform?.prototype);
-defineReadableAsyncIterator(builtinStreamStdlibModule?.Duplex?.prototype);
-defineMissingModuleProperty(builtinStreamStdlibModule, "isReadable", (stream) => {
-  return Boolean(stream) && stream.readable !== false && stream.destroyed !== true;
-});
-defineMissingModuleProperty(builtinStreamStdlibModule, "isErrored", (stream) => {
-  return stream?.errored != null;
-});
-defineMissingModuleProperty(builtinStreamStdlibModule, "isDisturbed", (stream) => {
-  return Boolean(stream?.locked || stream?.disturbed === true || stream?.readableDidRead === true);
-});
-var builtinStringDecoderStdlibModule = cloneStdlibModule(stringDecoderStdlibModuleNs);
-var builtinUrlStdlibModule = cloneStdlibModule(urlStdlibModuleNs);
-var builtinUrlStdlibModuleInitialized = false;
-function ensureBuiltinUrlStdlibModule() {
-  if (builtinUrlStdlibModuleInitialized) {
-    return builtinUrlStdlibModule;
-  }
-  builtinUrlStdlibModuleInitialized = true;
-  builtinUrlStdlibModule.URL = URL2;
-  builtinUrlStdlibModule.URLSearchParams = URLSearchParams;
-  builtinUrlStdlibModule.fileURLToPath = fileURLToPath2;
-  builtinUrlStdlibModule.pathToFileURL = pathToFileURL2;
-  if (builtinUrlStdlibModule?.default && typeof builtinUrlStdlibModule.default === "object") {
-    builtinUrlStdlibModule.default.URL = URL2;
-    builtinUrlStdlibModule.default.URLSearchParams = URLSearchParams;
-    builtinUrlStdlibModule.default.fileURLToPath = fileURLToPath2;
-    builtinUrlStdlibModule.default.pathToFileURL = pathToFileURL2;
-  }
-  return builtinUrlStdlibModule;
-}
-function normalizeBuiltinRequest(request) {
-  return String(request).replace(/^node:/, "");
-}
-let __jsRuntimeBuiltinAllowlist = null;
-function rejectRestrictedBuiltinRequest(request) {
-  const normalized = normalizeBuiltinRequest(request);
-  // jsRuntime builtin allow-list gate. When the per-execution shim installed an
-  // allow-list (non-node platforms => empty => deny all; node + explicit list),
-  // deny any builtin whose root name is not permitted. Absent => unrestricted.
-  const allow = __jsRuntimeBuiltinAllowlist;
-  if (Array.isArray(allow)) {
-    const root = String(normalized == null ? request : normalized)
-      .replace(/^node:/, "")
-      .split("/")[0];
-    if (!allow.includes(root)) {
-      throw createAccessDeniedBuiltinError(request);
-    }
-  }
-  return normalized;
-}
-exposeCustomGlobal("__agentOSInitJsRuntime", function (allowlist) {
-  __jsRuntimeBuiltinAllowlist = Array.isArray(allowlist)
-    ? allowlist.map((name) => String(name).replace(/^node:/, "").split("/")[0])
-    : null;
-});
-function loadBuiltinModule(request) {
-  const normalized = rejectRestrictedBuiltinRequest(request);
-  switch (normalized) {
-    case "assert":
-      return globalThis.__secureExecBuiltinAssertModule;
-    case "async_hooks":
-      return builtinAsyncHooksModule;
-    case "buffer":
-      defineMissingModuleProperty(builtinBufferStdlibModule, "Blob", globalThis.Blob);
-      defineMissingModuleProperty(builtinBufferStdlibModule, "File", globalThis.File);
-      return builtinBufferStdlibModule;
-    case "cluster":
-      throw createAccessDeniedBuiltinError(request);
-    case "crypto":
-      return builtinCryptoModule;
-    case "diagnostics_channel":
-      return builtinDiagnosticsChannelModule;
-    case "domain":
-      throw createAccessDeniedBuiltinError(request);
-    case "http":
-      return _httpModule;
-    case "http2":
-      return _http2Module;
-    case "events":
-      return ensureBuiltinEventsStdlibModule();
-    case "fs":
-      return _fsModule;
-    case "fs/promises":
-      return _fsModule.promises;
-    case "os":
-      return _osModule;
-    case "path":
-      return builtinPathStdlibModule;
-    case "path/posix":
-      return builtinPathStdlibModule.posix;
-    case "path/win32":
-      return builtinPathStdlibModule.win32;
-    case "perf_hooks":
-      return builtinPerfHooksModule;
-    case "process":
-      return process_default;
-    case "punycode":
-      return builtinPunycodeStdlibModule;
-    case "querystring":
-      return builtinQuerystringStdlibModule;
-    case "readline":
-      return {
-        createInterface(options = {}) {
-          const input = options.input ?? null;
-          const output = options.output ?? null;
-          const listeners = new Map();
-          let closed = false;
-          let ended = false;
-          let lineBuffer = "";
-          const queuedLines = [];
-          let pendingLineResolve = null;
-          const pendingQuestionResolves = [];
-          const textDecoder = new TextDecoder();
-          const emit = (event, ...args) => {
-            const current = listeners.get(event) ?? [];
-            for (const listener of [...current]) {
-              listener(...args);
-            }
-          };
-          const enqueueLine = (line) => {
-            if (pendingQuestionResolves.length > 0) {
-              const resolve = pendingQuestionResolves.shift();
-              resolve(line);
-              return;
-            }
-            if (pendingLineResolve) {
-              const resolve = pendingLineResolve;
-              pendingLineResolve = null;
-              resolve({ done: false, value: line });
-              return;
-            }
-            queuedLines.push(line);
-          };
-          const emitLine = (line) => {
-            emit("line", line);
-            enqueueLine(line);
-          };
-          const flushBufferedLines = () => {
-            let newlineIndex = lineBuffer.indexOf("\n");
-            while (newlineIndex !== -1) {
-              let line = lineBuffer.slice(0, newlineIndex);
-              if (line.endsWith("\r")) {
-                line = line.slice(0, -1);
-              }
-              lineBuffer = lineBuffer.slice(newlineIndex + 1);
-              emitLine(line);
-              newlineIndex = lineBuffer.indexOf("\n");
-            }
-          };
-          const detachInput = () => {
-            if (!input || typeof input.off !== "function") {
-              return;
-            }
-            input.off("data", onData);
-            input.off("end", onEnd);
-          };
-          const onData = (chunk) => {
-            if (closed) {
-              return;
-            }
-            if (typeof chunk === "string") {
-              lineBuffer += chunk;
-            } else if (chunk instanceof Uint8Array) {
-              lineBuffer += textDecoder.decode(chunk, { stream: true });
-            } else if (chunk != null) {
-              lineBuffer += String(chunk);
-            }
-            flushBufferedLines();
-          };
-          const onEnd = () => {
-            if (ended) {
-              return;
-            }
-            ended = true;
-            const trailing = textDecoder.decode();
-            if (trailing) {
-              lineBuffer += trailing;
-            }
-            flushBufferedLines();
-            if (lineBuffer.length > 0) {
-              emitLine(lineBuffer);
-              lineBuffer = "";
-            }
-            api.close();
-          };
-          if (input && typeof input.on === "function") {
-            input.on("data", onData);
-            input.on("end", onEnd);
-            if (typeof input.resume === "function") {
-              input.resume();
-            }
-          }
-          const iterator = {
-            next() {
-              if (queuedLines.length > 0) {
-                return Promise.resolve({
-                  done: false,
-                  value: queuedLines.shift(),
-                });
-              }
-              if (closed || ended) {
-                return Promise.resolve({ done: true, value: void 0 });
-              }
-              return new Promise((resolve) => {
-                pendingLineResolve = resolve;
-              });
-            },
-            return() {
-              api.close();
-              return Promise.resolve({ done: true, value: void 0 });
-            },
-            [Symbol.asyncIterator]() {
-              return this;
-            },
-          };
-          const api = {
-            addListener(event, listener) {
-              return this.on(event, listener);
-            },
-            on(event, listener) {
-              const current = listeners.get(event) ?? [];
-              current.push(listener);
-              listeners.set(event, current);
-              return this;
-            },
-            once(event, listener) {
-              const wrapped = (...args) => {
-                this.off(event, wrapped);
-                listener(...args);
-              };
-              return this.on(event, wrapped);
-            },
-            off(event, listener) {
-              const current = listeners.get(event) ?? [];
-              listeners.set(
-                event,
-                current.filter((candidate) => candidate !== listener)
-              );
-              return this;
-            },
-            removeListener(event, listener) {
-              return this.off(event, listener);
-            },
-            close() {
-              if (closed) {
-                return;
-              }
-              closed = true;
-              detachInput();
-              while (pendingQuestionResolves.length > 0) {
-                const resolve = pendingQuestionResolves.shift();
-                resolve("");
-              }
-              if (pendingLineResolve) {
-                const resolve = pendingLineResolve;
-                pendingLineResolve = null;
-                resolve({ done: true, value: void 0 });
-              }
-              emit("close");
-            },
-            question(prompt, callback) {
-              if (output && typeof output.write === "function" && prompt) {
-                output.write(String(prompt));
-              }
-              const readAnswer = () => {
-                if (queuedLines.length > 0) {
-                  return Promise.resolve(queuedLines.shift());
-                }
-                if (closed || ended) {
-                  return Promise.resolve("");
-                }
-                return new Promise((resolve) => {
-                  pendingQuestionResolves.push(resolve);
-                });
-              };
-              if (typeof callback === "function") {
-                void readAnswer().then((answer) => {
-                  callback(answer);
-                });
-                return;
-              }
-              return readAnswer();
-            },
-            [Symbol.asyncIterator]() {
-              return iterator;
-            },
-          };
-          return api;
-        }
-      };
-    case "repl":
-      throw createAccessDeniedBuiltinError(request);
-    case "stream":
-      return builtinStreamStdlibModule;
-    case "stream/consumers":
-      return builtinStreamConsumersModule;
-    case "stream/promises":
-      return builtinStreamPromisesModule;
-    case "string_decoder":
-      return builtinStringDecoderStdlibModule;
-    case "stream/web":
-      return {
-        ReadableStream: globalThis.ReadableStream,
-        WritableStream: globalThis.WritableStream,
-        TransformStream: globalThis.TransformStream,
-        TextEncoderStream: globalThis.TextEncoderStream,
-        TextDecoderStream: globalThis.TextDecoderStream,
-        CompressionStream: globalThis.CompressionStream,
-        DecompressionStream: globalThis.DecompressionStream
-      };
-    case "timers":
-      return builtinTimersModule;
-    case "timers/promises":
-      return builtinTimersPromisesModule;
-    case "trace_events":
-      throw createAccessDeniedBuiltinError(request);
-    case "url":
-      return ensureBuiltinUrlStdlibModule();
-    case "sys":
-      return installBuiltinUtilFormatWithOptions(globalThis.__secureExecBuiltinUtilModule);
-    case "util":
-      return installBuiltinUtilFormatWithOptions(globalThis.__secureExecBuiltinUtilModule);
-    case "util/types":
-      return installBuiltinUtilFormatWithOptions(globalThis.__secureExecBuiltinUtilModule).types;
-    case "child_process":
-      return _childProcessModule;
-    case "console":
-      return builtinConsoleModule;
-    case "constants":
-      return builtinConstantsStdlibModule;
-    case "dns":
-      return _dnsModule;
-    case "dns/promises":
-      return _dnsModule.promises;
-    case "net":
-      return _netModule;
-    case "tls":
-      return _tlsModule;
-    case "tty":
-      return builtinTtyModule;
-    case "dgram":
-      return _dgramModule;
-    case "sqlite":
-      return _sqliteModule;
-    case "https":
-      return _httpsModule;
-    case "inspector":
-      throw createAccessDeniedBuiltinError(request);
-    case "module":
-      return _moduleModule;
-    case "wasi":
-      throw createAccessDeniedBuiltinError(request);
-    case "zlib":
-      return globalThis.__secureExecBuiltinZlibModule;
-    case "v8":
-      return builtinV8Module;
-    case "vm":
-      return builtinVmModule;
-    case "worker_threads":
-      return builtinWorkerThreadsModule;
-    default: {
-      const error = new Error(`Cannot find module '${request}'`);
-      error.code = "MODULE_NOT_FOUND";
-      throw error;
-    }
-  }
-}
-export { builtinModules, builtinTimersModule, unwrapStdlibModule, cloneStdlibModule, defineMissingModuleProperty, trimNonRootTrailingSlash, builtinBufferStdlibModule, builtinConstantsStdlibModule, builtinEventsStdlibModule, builtinEventsConstructor, builtinEventsStdlibModuleInitialized, ensureBuiltinEventsStdlibModule, builtinPathStdlibModule, builtinPunycodeStdlibModule, builtinQuerystringStdlibModule, builtinStreamStdlibModule, defineReadableAsyncIterator, builtinStringDecoderStdlibModule, builtinUrlStdlibModule, builtinUrlStdlibModuleInitialized, ensureBuiltinUrlStdlibModule, normalizeBuiltinRequest, __jsRuntimeBuiltinAllowlist, rejectRestrictedBuiltinRequest, loadBuiltinModule };
diff --git a/packages/build-tools/bridge-src/builtins/child-process.ts b/packages/build-tools/bridge-src/builtins/child-process.ts
deleted file mode 100644
index 7ad118c1d..000000000
--- a/packages/build-tools/bridge-src/builtins/child-process.ts
+++ /dev/null
@@ -1,1483 +0,0 @@
-import { _fdClose, encodeBridgeBytes, fs } from "./fs.js";
-import { normalizeChildProcessSignal } from "./os.js";
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { __export } from "../vendor/esbuild-runtime.js";
-
-var child_process_exports = {};
-__export(child_process_exports, {
-  ChildProcess: () => ChildProcess,
-  default: () => child_process_default,
-  exec: () => exec,
-  execFile: () => execFile,
-  execFileSync: () => execFileSync,
-  execSync: () => execSync,
-  fork: () => fork,
-  spawn: () => spawn,
-  spawnSync: () => spawnSync
-});
-var childProcessInstances = /* @__PURE__ */ new Map();
-// fds handed to a live child as its inherited stdout/stderr. Node keeps the
-// underlying file open for the child's lifetime even after the parent closes
-// its own descriptor (the child dup'd it at fork). We emulate that: the parent's
-// fs.closeSync on such an fd is deferred until the child exits, so async child
-// output can still be written to the fd. Per fd we track the number of live
-// children holding it and whether the parent already requested a close.
-var _childInheritedFds = /* @__PURE__ */ new Map();
-function retainChildInheritedFd(fd) {
-  if (typeof fd !== "number") return;
-  const entry = _childInheritedFds.get(fd);
-  if (entry) entry.holders += 1;
-  else _childInheritedFds.set(fd, { holders: 1, closePending: false });
-}
-function deferCloseIfChildInheritedFd(fd) {
-  const entry = _childInheritedFds.get(fd);
-  if (!entry) return false;
-  entry.closePending = true;
-  return true;
-}
-function releaseChildInheritedFd(fd) {
-  const entry = _childInheritedFds.get(fd);
-  if (!entry) return;
-  entry.holders -= 1;
-  if (entry.holders > 0) return;
-  _childInheritedFds.delete(fd);
-  if (entry.closePending) {
-    try {
-      _fdClose.applySyncPromise(void 0, [fd]);
-    } catch {
-    }
-  }
-}
-var DETACHED_CHILD_BOOTSTRAP_POLLS = 200;
-var DETACHED_CHILD_IMMEDIATE_BOOTSTRAP_POLLS = 25;
-function normalizeChildProcessSessionId(payload) {
-  if (!payload || typeof payload !== "object") {
-    return null;
-  }
-  if (typeof payload.sessionId === "string" && payload.sessionId.length > 0) {
-    return payload.sessionId;
-  }
-  if (typeof payload.sessionId === "number" && Number.isFinite(payload.sessionId)) {
-    return payload.sessionId;
-  }
-  return null;
-}
-function normalizeChildProcessBridgePayload(payload) {
-  if (payload && typeof payload === "object") {
-    return payload;
-  }
-  if (typeof payload === "string") {
-    try {
-      const parsed = JSON.parse(payload);
-      return parsed && typeof parsed === "object" ? parsed : payload;
-    } catch {
-    }
-  }
-  return payload;
-}
-const CHILD_PROCESS_IPC_FRAME_PREFIX = "\x1EAGENTOS_IPC:";
-function encodeChildProcessIpcFrame(message) {
-  const json = JSON.stringify(message);
-  const encoded = typeof Buffer !== "undefined" ? Buffer.from(json, "utf8").toString("base64") : btoa(json);
-  return `${CHILD_PROCESS_IPC_FRAME_PREFIX}${encoded}\n`;
-}
-function decodeChildProcessIpcFramePayload(payload) {
-  const json = typeof Buffer !== "undefined" ? Buffer.from(payload, "base64").toString("utf8") : atob(payload);
-  return JSON.parse(json);
-}
-function splitChildProcessIpcFrames(buffer, chunk) {
-  const text = `${buffer}${typeof Buffer !== "undefined" ? Buffer.from(chunk).toString("utf8") : String(chunk)}`;
-  const messages = [];
-  const output = [];
-  let cursor = 0;
-  while (true) {
-    const frameStart = text.indexOf(CHILD_PROCESS_IPC_FRAME_PREFIX, cursor);
-    if (frameStart === -1) {
-      output.push(text.slice(cursor));
-      return { buffer: "", messages, output: output.join("") };
-    }
-    output.push(text.slice(cursor, frameStart));
-    const payloadStart = frameStart + CHILD_PROCESS_IPC_FRAME_PREFIX.length;
-    const frameEnd = text.indexOf("\n", payloadStart);
-    if (frameEnd === -1) {
-      return { buffer: text.slice(frameStart), messages, output: output.join("") };
-    }
-    try {
-      messages.push(decodeChildProcessIpcFramePayload(text.slice(payloadStart, frameEnd)));
-    } catch (error) {
-      output.push(text.slice(frameStart, frameEnd + 1));
-    }
-    cursor = frameEnd + 1;
-  }
-}
-function dispatchChildProcessPollResult(sessionId, next) {
-  if (!next || typeof next !== "object") {
-    return false;
-  }
-  if (next.type === "stdout" || next.type === "stderr") {
-    const payload = { sessionId };
-    if (typeof next.data === "string") {
-      payload.data = next.data;
-    } else if (typeof Buffer !== "undefined" && Buffer.isBuffer(next.data)) {
-      payload.dataBase64 = next.data.toString("base64");
-    } else if (next.data instanceof Uint8Array) {
-      payload.dataBase64 = Buffer.from(
-        next.data.buffer,
-        next.data.byteOffset,
-        next.data.byteLength
-      ).toString("base64");
-    } else if (ArrayBuffer.isView(next.data)) {
-      payload.dataBase64 = Buffer.from(
-        next.data.buffer,
-        next.data.byteOffset,
-        next.data.byteLength
-      ).toString("base64");
-    } else if (next.data?.__agentOSType === "bytes" && typeof next.data.base64 === "string") {
-      payload.dataBase64 = next.data.base64;
-    }
-    childProcessDispatch(`child_${next.type}`, payload);
-    return true;
-  }
-  if (next.type === "exit") {
-    childProcessDispatch("child_exit", { sessionId, code: next.exitCode, signal: next.signal ?? null });
-    return true;
-  }
-  return false;
-}
-// Detached child_process instances keep the poll timer + synthetic handle refed
-// until we prove the child has crossed its bootstrap boundary. `_pollRefed`
-// records the public ref/unref state, `_detachedBootstrapPending` keeps the
-// bootstrap latch active, `_detachedBootstrapPollsRemaining` bounds how many
-// immediate/output-bearing polls we will drain before forcing completion, and
-// `_detachedBootstrapTimer` stays null because `unref()` no longer schedules a
-// retry timer that can race `exit` emission.
-function completeDetachedChildBootstrap(child) {
-  if (!child?._detachedBootstrapPending) {
-    return;
-  }
-  child._detachedBootstrapPending = false;
-  child._detachedBootstrapPollsRemaining = 0;
-  if (child._detachedBootstrapTimer != null) {
-    clearTimeout(child._detachedBootstrapTimer);
-    child._detachedBootstrapTimer = null;
-  }
-  if (!child._pollRefed) {
-    child._pollTimer?.unref?.();
-    if (child._handleRefed && child._handleId && typeof _unregisterHandle === "function") {
-      _unregisterHandle(child._handleId);
-      child._handleRefed = false;
-    }
-  }
-}
-function consumeDetachedChildBootstrapPoll(child) {
-  if (!child?._detachedBootstrapPending) {
-    return;
-  }
-  if (child._detachedBootstrapPollsRemaining > 0) {
-    child._detachedBootstrapPollsRemaining -= 1;
-  }
-  if (child._detachedBootstrapPollsRemaining === 0) {
-    completeDetachedChildBootstrap(child);
-  }
-}
-function pumpDetachedChildBootstrap(child, attempts = DETACHED_CHILD_IMMEDIATE_BOOTSTRAP_POLLS) {
-  if (!child?.detached || child._sessionId == null || typeof _childProcessPoll === "undefined") {
-    return false;
-  }
-  if (!child._detachedBootstrapPending) {
-    return true;
-  }
-  for (let attempt = 0; attempt < attempts; attempt += 1) {
-    if (!childProcessInstances.has(child._sessionId)) {
-      return true;
-    }
-    const next = normalizeChildProcessBridgePayload(
-      _childProcessPoll.applySync(void 0, [child._sessionId, 10])
-    );
-    consumeDetachedChildBootstrapPoll(child);
-    if (!next || typeof next !== "object") {
-      if (!child._detachedBootstrapPending) {
-        return true;
-      }
-      continue;
-    }
-    if (dispatchChildProcessPollResult(child._sessionId, next) && next?.type === "exit") {
-      return true;
-    }
-    if (!child._detachedBootstrapPending) {
-      return true;
-    }
-  }
-  return !child._detachedBootstrapPending;
-}
-// When a child stdout/stderr is wired to an inherited numeric fd, write the
-// bytes straight to that descriptor (matching native node, where the child's
-// output lands in the inherited file/pipe rather than on child.stdout). Returns
-// true when the data was consumed by the fd so the caller skips stream emission.
-function writeChildOutputToInheritedFd(fd, buf) {
-  if (typeof fd !== "number") return false;
-  try {
-    const bytes = typeof Buffer !== "undefined" && Buffer.isBuffer(buf) ? buf : typeof Buffer !== "undefined" ? Buffer.from(buf) : buf;
-    fs.writeSync(fd, bytes, 0, bytes.length, null);
-  } catch {
-  }
-  return true;
-}
-// Sync-path (spawnSync/execSync/execFileSync) fd inheritance: write the already
-// captured output value (string or Buffer) to the inherited descriptor.
-function redirectSyncOutputToInheritedFd(fd, output) {
-  if (typeof fd !== "number" || output == null) return false;
-  try {
-    const bytes = typeof output === "string" ? (typeof Buffer !== "undefined" ? Buffer.from(output) : output) : typeof Buffer !== "undefined" && Buffer.isBuffer(output) ? output : typeof Buffer !== "undefined" ? Buffer.from(output) : output;
-    fs.writeSync(fd, bytes, 0, bytes.length, null);
-  } catch {
-  }
-  return true;
-}
-function routeChildProcessEvent(sessionId, type, data) {
-  const child = childProcessInstances.get(sessionId);
-  if (!child) return;
-  if (type === "stdout") {
-    const buf = typeof Buffer !== "undefined" ? Buffer.from(data) : data;
-    if (child._ipcEnabled) {
-      const parsed = splitChildProcessIpcFrames(child._ipcStdoutBuffer, buf);
-      child._ipcStdoutBuffer = parsed.buffer;
-      for (const message of parsed.messages) {
-        child._emitOrQueueIpcMessage(message);
-      }
-      if (parsed.output.length === 0) {
-        return;
-      }
-      const outBuf = typeof Buffer !== "undefined" ? Buffer.from(parsed.output, "utf8") : parsed.output;
-      if (writeChildOutputToInheritedFd(child._stdoutFd, outBuf)) return;
-      child.stdout.emit("data", outBuf);
-      return;
-    }
-    if (writeChildOutputToInheritedFd(child._stdoutFd, buf)) return;
-    child.stdout.emit("data", buf);
-  } else if (type === "stderr") {
-    const buf = typeof Buffer !== "undefined" ? Buffer.from(data) : data;
-    if (writeChildOutputToInheritedFd(child._stderrFd, buf)) return;
-    child.stderr.emit("data", buf);
-  } else if (type === "exit") {
-    completeDetachedChildBootstrap(child);
-    const wasConnected = child.connected;
-    child.connected = false;
-    const signalCode = child._pendingSignalCode ?? (data && typeof data === "object" ? data.signal ?? null : null);
-    const exitCode = data && typeof data === "object" ? data.code : data;
-    child._pendingSignalCode = null;
-    child.signalCode = signalCode;
-    child.exitCode = signalCode == null ? exitCode : null;
-    child.stdout.emit("end");
-    child.stderr.emit("end");
-    if (wasConnected) {
-      child.emit("disconnect");
-    }
-    child.emit("close", child.exitCode, child.signalCode);
-    child.emit("exit", child.exitCode, child.signalCode);
-    if (Array.isArray(child._inheritedFds)) {
-      for (const fd of child._inheritedFds) releaseChildInheritedFd(fd);
-      child._inheritedFds = [];
-    }
-    childProcessInstances.delete(sessionId);
-    if (typeof _unregisterHandle === "function") {
-      _unregisterHandle(`child:${sessionId}`);
-    }
-  }
-}
-var childProcessDispatch = (eventTypeOrSessionId, payloadOrType, data) => {
-  if (typeof eventTypeOrSessionId === "number") {
-    routeChildProcessEvent(
-      eventTypeOrSessionId,
-      payloadOrType,
-      data
-    );
-    return;
-  }
-  const payload = (() => {
-    if (payloadOrType && typeof payloadOrType === "object") {
-      return payloadOrType;
-    }
-    if (typeof payloadOrType === "string") {
-      try {
-        return JSON.parse(payloadOrType);
-      } catch {
-        return null;
-      }
-    }
-    return null;
-  })();
-  const sessionId = normalizeChildProcessSessionId(payload);
-  if (sessionId == null) {
-    return;
-  }
-  if (eventTypeOrSessionId === "child_stdout" || eventTypeOrSessionId === "child_stderr") {
-    const directData = payload?.data;
-    let bytes;
-    if (typeof Buffer !== "undefined" && Buffer.isBuffer(directData)) {
-      bytes = Buffer.from(directData);
-    } else if (directData instanceof Uint8Array) {
-      bytes = typeof Buffer !== "undefined" ? Buffer.from(directData.buffer, directData.byteOffset, directData.byteLength) : directData;
-    } else if (ArrayBuffer.isView(directData)) {
-      bytes = typeof Buffer !== "undefined" ? Buffer.from(directData.buffer, directData.byteOffset, directData.byteLength) : new Uint8Array(directData.buffer, directData.byteOffset, directData.byteLength);
-    } else {
-      const encoded = typeof payload?.dataBase64 === "string" ? payload.dataBase64 : typeof directData === "string" ? directData : directData?.__agentOSType === "bytes" && typeof directData?.base64 === "string" ? directData.base64 : "";
-      bytes = typeof Buffer !== "undefined" ? Buffer.from(encoded, "base64") : new Uint8Array(
-        atob(encoded).split("").map((char) => char.charCodeAt(0))
-      );
-    }
-    routeChildProcessEvent(
-      sessionId,
-      eventTypeOrSessionId === "child_stdout" ? "stdout" : "stderr",
-      bytes
-    );
-    return;
-  }
-  if (eventTypeOrSessionId === "child_exit") {
-    const code = typeof payload?.code === "number" ? payload.code : Number(payload?.code ?? 1);
-    const signal = typeof payload?.signal === "string" ? payload.signal : null;
-    routeChildProcessEvent(sessionId, "exit", { code, signal });
-  }
-};
-exposeCustomGlobal("_childProcessDispatch", childProcessDispatch);
-var CHILD_PROCESS_POLL_DRAIN_LIMIT = 64;
-function scheduleChildProcessPoll(sessionId, delayMs = 0) {
-  const child = childProcessInstances.get(sessionId);
-  if (!child || typeof _childProcessPoll === "undefined" || child._pollScheduled) {
-    return;
-  }
-  child._pollScheduled = true;
-  const pollTimer = setTimeout(() => {
-    child._pollTimer = null;
-    child._pollScheduled = false;
-    if (!childProcessInstances.has(sessionId)) {
-      return;
-    }
-    let drained = 0;
-    while (drained < CHILD_PROCESS_POLL_DRAIN_LIMIT && childProcessInstances.has(sessionId)) {
-      consumeDetachedChildBootstrapPoll(child);
-      const next = normalizeChildProcessBridgePayload(
-        _childProcessPoll.applySync(void 0, [sessionId, drained === 0 ? 10 : 0])
-      );
-      if (!next || typeof next !== "object") {
-        scheduleChildProcessPoll(sessionId, drained === 0 ? 5 : 0);
-        return;
-      }
-      drained += 1;
-      if (dispatchChildProcessPollResult(sessionId, next) && next.type === "exit") {
-        return;
-      }
-    }
-    scheduleChildProcessPoll(sessionId, 0);
-  }, delayMs);
-  child._pollTimer = pollTimer;
-  if (!child._pollRefed && !child._detachedBootstrapPending && typeof pollTimer?.unref === "function") {
-    pollTimer.unref();
-  }
-}
-function hasOutputListeners(stream, event) {
-  return (stream._listeners[event]?.length ?? 0) > 0 || (stream._onceListeners[event]?.length ?? 0) > 0;
-}
-// Node Readable fidelity: when setEncoding(enc) is configured on a child
-// stdout/stderr stream, `data` chunks are delivered as strings decoded with
-// that encoding (and the same string flows through the async iterator), exactly
-// like node. Without an encoding the raw Buffer is delivered unchanged.
-function decodeOutputChunk(stream, chunk) {
-  const encoding = stream._readableEncoding;
-  if (!encoding) {
-    return chunk;
-  }
-  if (typeof chunk === "string") {
-    return chunk;
-  }
-  if (typeof Buffer !== "undefined" && Buffer.isBuffer(chunk)) {
-    return chunk.toString(encoding);
-  }
-  if (chunk instanceof Uint8Array) {
-    return typeof Buffer !== "undefined" ? Buffer.from(chunk).toString(encoding) : String(chunk);
-  }
-  return chunk;
-}
-function scheduleOutputFlush(stream) {
-  if (stream._flushScheduled) {
-    return;
-  }
-  stream._flushScheduled = true;
-  queueMicrotask(() => {
-    stream._flushScheduled = false;
-    if (stream._bufferedChunks.length > 0 && hasOutputListeners(stream, "data")) {
-      const chunks = stream._bufferedChunks.splice(0, stream._bufferedChunks.length);
-      for (const chunk of chunks) {
-        stream.emit("data", chunk);
-      }
-    }
-    if (stream._ended && stream._bufferedChunks.length === 0 && hasOutputListeners(stream, "end")) {
-      stream.emit("end");
-    }
-  });
-}
-function checkStreamMaxListeners(stream, event) {
-  if (!(stream._maxListenersWarned instanceof Set)) {
-    stream._maxListenersWarned = /* @__PURE__ */ new Set();
-  }
-  if (stream._maxListeners > 0 && !stream._maxListenersWarned.has(event)) {
-    const total = (stream._listeners[event]?.length ?? 0) + (stream._onceListeners[event]?.length ?? 0);
-    if (total > stream._maxListeners) {
-      stream._maxListenersWarned.add(event);
-      const warning = `MaxListenersExceededWarning: Possible EventEmitter memory leak detected. ${total} ${event} listeners added. MaxListeners is ${stream._maxListeners}. Use emitter.setMaxListeners() to increase limit`;
-      if (typeof console !== "undefined" && console.error) {
-        console.error(warning);
-      }
-    }
-  }
-}
-function createOutputAsyncIterator(stream) {
-  const queuedChunks = [];
-  const queuedErrors = [];
-  const pendingResolves = [];
-  let finished = false;
-  const settlePending = () => {
-    while (pendingResolves.length > 0) {
-      const resolve = pendingResolves.shift();
-      if (queuedErrors.length > 0) {
-        resolve(Promise.reject(queuedErrors.shift()));
-        continue;
-      }
-      if (queuedChunks.length > 0) {
-        resolve(Promise.resolve({ done: false, value: queuedChunks.shift() }));
-        continue;
-      }
-      if (finished) {
-        resolve(Promise.resolve({ done: true, value: void 0 }));
-        continue;
-      }
-      pendingResolves.unshift(resolve);
-      break;
-    }
-  };
-  const onData = (chunk) => {
-    queuedChunks.push(chunk);
-    settlePending();
-  };
-  const onEnd = () => {
-    finished = true;
-    settlePending();
-  };
-  const onError = (error) => {
-    queuedErrors.push(error);
-    finished = true;
-    settlePending();
-  };
-  stream.on("data", onData);
-  stream.on("end", onEnd);
-  stream.on("close", onEnd);
-  stream.on("error", onError);
-  scheduleOutputFlush(stream);
-  return {
-    next() {
-      if (queuedErrors.length > 0) {
-        return Promise.reject(queuedErrors.shift());
-      }
-      if (queuedChunks.length > 0) {
-        return Promise.resolve({ done: false, value: queuedChunks.shift() });
-      }
-      if (finished) {
-        return Promise.resolve({ done: true, value: void 0 });
-      }
-      return new Promise((resolve) => {
-        pendingResolves.push(resolve);
-      });
-    },
-    return() {
-      stream.off("data", onData);
-      stream.off("end", onEnd);
-      stream.off("close", onEnd);
-      stream.off("error", onError);
-      finished = true;
-      settlePending();
-      return Promise.resolve({ done: true, value: void 0 });
-    },
-    [Symbol.asyncIterator]() {
-      return this;
-    }
-  };
-}
-var _nextChildPid = 1e3;
-var ChildProcess = class {
-  _listeners = {};
-  _onceListeners = {};
-  _maxListeners = 10;
-  _maxListenersWarned = /* @__PURE__ */ new Set();
-  pid = _nextChildPid++;
-  killed = false;
-  exitCode = null;
-  signalCode = null;
-  _pendingSignalCode = null;
-  connected = false;
-  _pollScheduled = false;
-  _pollRefed = true;
-  _pollTimer = null;
-  _detachedBootstrapPending = false;
-  _detachedBootstrapPollsRemaining = 0;
-  _detachedBootstrapTimer = null;
-  _sessionId = null;
-  _handleId = null;
-  _handleDescription = "";
-  _handleRefed = false;
-  _ipcEnabled = false;
-  _ipcStdoutBuffer = "";
-  _ipcQueuedMessages = [];
-  spawnfile = "";
-  spawnargs = [];
-  stdin;
-  stdout;
-      stderr;
-      stdio;
-  constructor() {
-    this.stdin = {
-      writable: true,
-      destroyed: false,
-      _listeners: {},
-      _onceListeners: {},
-      write(_data, encodingOrCallback, callback) {
-        const done = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-        if (done) {
-          queueMicrotask(() => done(null));
-        }
-        return true;
-      },
-      end(dataOrCallback, encodingOrCallback, callback) {
-        const done = typeof dataOrCallback === "function" ? dataOrCallback : typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-        this.writable = false;
-        if (done) {
-          queueMicrotask(() => done());
-        }
-      },
-      destroy() {
-        this.writable = false;
-        this.destroyed = true;
-        this.emit("close");
-        return this;
-      },
-      on(event, listener) {
-        if (!this._listeners[event]) this._listeners[event] = [];
-        this._listeners[event].push(listener);
-        return this;
-      },
-      once(event, listener) {
-        if (!this._onceListeners[event]) this._onceListeners[event] = [];
-        this._onceListeners[event].push(listener);
-        return this;
-      },
-      off(event, listener) {
-        if (this._listeners[event]) {
-          const idx = this._listeners[event].indexOf(listener);
-          if (idx !== -1) this._listeners[event].splice(idx, 1);
-        }
-        if (this._onceListeners[event]) {
-          const idx = this._onceListeners[event].indexOf(listener);
-          if (idx !== -1) this._onceListeners[event].splice(idx, 1);
-        }
-        return this;
-      },
-      removeListener(event, listener) {
-        return this.off(event, listener);
-      },
-      emit(event, ...args) {
-        let handled = false;
-        if (this._listeners[event]) {
-          this._listeners[event].forEach((fn) => {
-            fn(...args);
-            handled = true;
-          });
-        }
-        if (this._onceListeners[event]) {
-          this._onceListeners[event].forEach((fn) => {
-            fn(...args);
-            handled = true;
-          });
-          this._onceListeners[event] = [];
-        }
-        return handled;
-      }
-    };
-    this.stdout = {
-      readable: true,
-      isTTY: false,
-      destroyed: false,
-      _listeners: {},
-      _onceListeners: {},
-      _bufferedChunks: [],
-      _ended: false,
-      _flushScheduled: false,
-      _maxListeners: 10,
-      _maxListenersWarned: /* @__PURE__ */ new Set(),
-      on(event, listener) {
-        if (!this._listeners[event]) this._listeners[event] = [];
-        this._listeners[event].push(listener);
-        checkStreamMaxListeners(this, event);
-        if (event === "data" || event === "end") {
-          scheduleOutputFlush(this);
-        }
-        return this;
-      },
-      once(event, listener) {
-        if (!this._onceListeners[event]) this._onceListeners[event] = [];
-        this._onceListeners[event].push(listener);
-        checkStreamMaxListeners(this, event);
-        if (event === "data" || event === "end") {
-          scheduleOutputFlush(this);
-        }
-        return this;
-      },
-      off(event, listener) {
-        if (this._listeners[event]) {
-          const idx = this._listeners[event].indexOf(listener);
-          if (idx !== -1) this._listeners[event].splice(idx, 1);
-        }
-        if (this._onceListeners[event]) {
-          const idx = this._onceListeners[event].indexOf(listener);
-          if (idx !== -1) this._onceListeners[event].splice(idx, 1);
-        }
-        return this;
-      },
-      removeListener(event, listener) {
-        return this.off(event, listener);
-      },
-      emit(event, ...args) {
-        if (event === "data") {
-          args[0] = decodeOutputChunk(this, args[0]);
-          if (!hasOutputListeners(this, "data")) {
-            this._bufferedChunks.push(args[0]);
-            return false;
-          }
-        }
-        if (event === "end") {
-          this._ended = true;
-          if (!hasOutputListeners(this, "end")) {
-            return false;
-          }
-        }
-        if (this._listeners[event]) {
-          this._listeners[event].forEach((fn) => fn(...args));
-        }
-        if (this._onceListeners[event]) {
-          this._onceListeners[event].forEach((fn) => fn(...args));
-          this._onceListeners[event] = [];
-        }
-        return true;
-      },
-      read() {
-        return null;
-      },
-      setEncoding(encoding) {
-        this._readableEncoding = encoding == null || encoding === "buffer" ? null : String(encoding);
-        return this;
-      },
-      setMaxListeners(n) {
-        this._maxListeners = n;
-        return this;
-      },
-      getMaxListeners() {
-        return this._maxListeners;
-      },
-      pipe(dest) {
-        return dest;
-      },
-      pause() {
-        return this;
-      },
-      resume() {
-        return this;
-      },
-      destroy() {
-        this.readable = false;
-        this._ended = true;
-        this.destroyed = true;
-        this.emit("close");
-        return this;
-      },
-      [Symbol.asyncIterator]() {
-        return createOutputAsyncIterator(this);
-      }
-    };
-    this.stderr = {
-      readable: true,
-      isTTY: false,
-      destroyed: false,
-      _listeners: {},
-      _onceListeners: {},
-      _bufferedChunks: [],
-      _ended: false,
-      _flushScheduled: false,
-      _maxListeners: 10,
-      _maxListenersWarned: /* @__PURE__ */ new Set(),
-      on(event, listener) {
-        if (!this._listeners[event]) this._listeners[event] = [];
-        this._listeners[event].push(listener);
-        checkStreamMaxListeners(this, event);
-        if (event === "data" || event === "end") {
-          scheduleOutputFlush(this);
-        }
-        return this;
-      },
-      once(event, listener) {
-        if (!this._onceListeners[event]) this._onceListeners[event] = [];
-        this._onceListeners[event].push(listener);
-        checkStreamMaxListeners(this, event);
-        if (event === "data" || event === "end") {
-          scheduleOutputFlush(this);
-        }
-        return this;
-      },
-      off(event, listener) {
-        if (this._listeners[event]) {
-          const idx = this._listeners[event].indexOf(listener);
-          if (idx !== -1) this._listeners[event].splice(idx, 1);
-        }
-        if (this._onceListeners[event]) {
-          const idx = this._onceListeners[event].indexOf(listener);
-          if (idx !== -1) this._onceListeners[event].splice(idx, 1);
-        }
-        return this;
-      },
-      removeListener(event, listener) {
-        return this.off(event, listener);
-      },
-      emit(event, ...args) {
-        if (event === "data") {
-          args[0] = decodeOutputChunk(this, args[0]);
-          if (!hasOutputListeners(this, "data")) {
-            this._bufferedChunks.push(args[0]);
-            return false;
-          }
-        }
-        if (event === "end") {
-          this._ended = true;
-          if (!hasOutputListeners(this, "end")) {
-            return false;
-          }
-        }
-        if (this._listeners[event]) {
-          this._listeners[event].forEach((fn) => fn(...args));
-        }
-        if (this._onceListeners[event]) {
-          this._onceListeners[event].forEach((fn) => fn(...args));
-          this._onceListeners[event] = [];
-        }
-        return true;
-      },
-      read() {
-        return null;
-      },
-      setEncoding(encoding) {
-        this._readableEncoding = encoding == null || encoding === "buffer" ? null : String(encoding);
-        return this;
-      },
-      setMaxListeners(n) {
-        this._maxListeners = n;
-        return this;
-      },
-      getMaxListeners() {
-        return this._maxListeners;
-      },
-      pipe(dest) {
-        return dest;
-      },
-      pause() {
-        return this;
-      },
-      resume() {
-        return this;
-      },
-      destroy() {
-        this.readable = false;
-        this._ended = true;
-        this.destroyed = true;
-        this.emit("close");
-        return this;
-      },
-      [Symbol.asyncIterator]() {
-        return createOutputAsyncIterator(this);
-      }
-    };
-    this.stdio = [this.stdin, this.stdout, this.stderr];
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    this._checkMaxListeners(event);
-    if (event === "message") {
-      this._flushQueuedIpcMessages();
-    }
-    return this;
-  }
-  once(event, listener) {
-    if (!this._onceListeners[event]) this._onceListeners[event] = [];
-    this._onceListeners[event].push(listener);
-    this._checkMaxListeners(event);
-    if (event === "message") {
-      this._flushQueuedIpcMessages();
-    }
-    return this;
-  }
-  off(event, listener) {
-    if (this._listeners[event]) {
-      const idx = this._listeners[event].indexOf(listener);
-      if (idx !== -1) this._listeners[event].splice(idx, 1);
-    }
-    return this;
-  }
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-  setMaxListeners(n) {
-    this._maxListeners = n;
-    return this;
-  }
-  getMaxListeners() {
-    return this._maxListeners;
-  }
-  _checkMaxListeners(event) {
-    if (!(this._maxListenersWarned instanceof Set)) {
-      this._maxListenersWarned = /* @__PURE__ */ new Set();
-    }
-    if (this._maxListeners > 0 && !this._maxListenersWarned.has(event)) {
-      const total = (this._listeners[event]?.length ?? 0) + (this._onceListeners[event]?.length ?? 0);
-      if (total > this._maxListeners) {
-        this._maxListenersWarned.add(event);
-        const warning = `MaxListenersExceededWarning: Possible EventEmitter memory leak detected. ${total} ${event} listeners added to [ChildProcess]. MaxListeners is ${this._maxListeners}. Use emitter.setMaxListeners() to increase limit`;
-        if (typeof console !== "undefined" && console.error) {
-          console.error(warning);
-        }
-      }
-    }
-  }
-  _hasIpcMessageListeners() {
-    return (this._listeners.message?.length ?? 0) > 0 || (this._onceListeners.message?.length ?? 0) > 0;
-  }
-  _emitOrQueueIpcMessage(message) {
-    if (!this._hasIpcMessageListeners()) {
-      this._ipcQueuedMessages.push(message);
-      return false;
-    }
-    return this.emit("message", message, void 0);
-  }
-  _flushQueuedIpcMessages() {
-    if (this._ipcQueuedMessages.length === 0) {
-      return;
-    }
-    queueMicrotask(() => {
-      while (this._ipcQueuedMessages.length > 0 && this._hasIpcMessageListeners()) {
-        this.emit("message", this._ipcQueuedMessages.shift(), void 0);
-      }
-    });
-  }
-  emit(event, ...args) {
-    let handled = false;
-    if (this._listeners[event]) {
-      this._listeners[event].forEach((fn) => {
-        fn(...args);
-        handled = true;
-      });
-    }
-    if (this._onceListeners[event]) {
-      this._onceListeners[event].forEach((fn) => {
-        fn(...args);
-        handled = true;
-      });
-      this._onceListeners[event] = [];
-    }
-    return handled;
-  }
-  kill(_signal) {
-    const normalizedSignal = normalizeChildProcessSignal(_signal);
-    this.killed = true;
-    this._pendingSignalCode = normalizedSignal.signalCode;
-    return true;
-  }
-  ref() {
-    this._pollRefed = true;
-    this._pollTimer?.ref?.();
-    if (!this._handleRefed && this._handleId && typeof _registerHandle === "function") {
-      _registerHandle(this._handleId, this._handleDescription);
-      this._handleRefed = true;
-    }
-    return this;
-  }
-  unref() {
-    this._pollRefed = false;
-    if (this._detachedBootstrapPending) {
-      pumpDetachedChildBootstrap(this);
-    }
-    if (!this._detachedBootstrapPending) {
-      this._pollTimer?.unref?.();
-    }
-    if (!this._detachedBootstrapPending && this._handleRefed && this._handleId && typeof _unregisterHandle === "function") {
-      _unregisterHandle(this._handleId);
-      this._handleRefed = false;
-    }
-    return this;
-  }
-  disconnect() {
-    this.connected = false;
-    this.emit("disconnect");
-  }
-  send(message, sendHandleOrOptions, optionsOrCallback, maybeCallback) {
-    if (!this.connected || !this._ipcEnabled || this._sessionId == null) {
-      return false;
-    }
-    const callback = typeof sendHandleOrOptions === "function" ? sendHandleOrOptions : typeof optionsOrCallback === "function" ? optionsOrCallback : maybeCallback;
-    try {
-      const frame = encodeChildProcessIpcFrame(message);
-      this.stdin.write(frame, "utf8", callback);
-      return true;
-    } catch (error) {
-      if (callback) {
-        queueMicrotask(() => callback(error));
-        return false;
-      }
-      this.emit("error", error);
-      return false;
-    }
-  }
-  _complete(stdout, stderr, code) {
-    const signalCode = this._pendingSignalCode ?? this.signalCode;
-    this._pendingSignalCode = null;
-    this.signalCode = signalCode ?? null;
-    this.exitCode = signalCode == null ? code : null;
-    if (stdout) {
-      const buf = typeof Buffer !== "undefined" ? Buffer.from(stdout) : stdout;
-      this.stdout.emit("data", buf);
-    }
-    if (stderr) {
-      const buf = typeof Buffer !== "undefined" ? Buffer.from(stderr) : stderr;
-      this.stderr.emit("data", buf);
-    }
-    this.stdout.emit("end");
-    this.stderr.emit("end");
-    this.emit("close", this.exitCode, this.signalCode);
-    this.emit("exit", this.exitCode, this.signalCode);
-  }
-};
-function exec(command, options, callback) {
-  if (typeof options === "function") {
-    callback = options;
-    options = {};
-  }
-  const child = spawn(command, [], {
-    ...options,
-    shell: true
-  });
-  child.spawnargs = [command];
-  child.spawnfile = command;
-  const maxBuffer = options?.maxBuffer ?? 1024 * 1024;
-  let stdout = "";
-  let stderr = "";
-  let stdoutBytes = 0;
-  let stderrBytes = 0;
-  let maxBufferExceeded = false;
-  let callbackSettled = false;
-  let spawnError = null;
-  const finishExec = (error) => {
-    if (!callback || callbackSettled) {
-      return;
-    }
-    callbackSettled = true;
-    callback(error, stdout, stderr);
-  };
-  child.stdout.on("data", (data) => {
-    if (maxBufferExceeded) return;
-    const chunk = String(data);
-    stdout += chunk;
-    stdoutBytes += chunk.length;
-    if (stdoutBytes > maxBuffer) {
-      maxBufferExceeded = true;
-      child.kill("SIGTERM");
-    }
-  });
-  child.stderr.on("data", (data) => {
-    if (maxBufferExceeded) return;
-    const chunk = String(data);
-    stderr += chunk;
-    stderrBytes += chunk.length;
-    if (stderrBytes > maxBuffer) {
-      maxBufferExceeded = true;
-      child.kill("SIGTERM");
-    }
-  });
-  child.on("close", (...args) => {
-    const code = args[0];
-    if (callback) {
-      if (maxBufferExceeded) {
-        const err = new Error("stdout maxBuffer length exceeded");
-        err.code = "ERR_CHILD_PROCESS_STDIO_MAXBUFFER";
-        err.killed = true;
-        err.cmd = command;
-        err.stdout = stdout;
-        err.stderr = stderr;
-        finishExec(err);
-      } else if (code !== 0 && spawnError == null) {
-        const err = new Error("Command failed: " + command);
-        err.code = code;
-        err.killed = false;
-        err.signal = null;
-        err.cmd = command;
-        err.stdout = stdout;
-        err.stderr = stderr;
-        finishExec(err);
-      } else {
-        finishExec(null);
-      }
-    }
-  });
-  child.on("error", (err) => {
-    if (callback) {
-      const error = err instanceof Error ? err : new Error(String(err));
-      spawnError = error;
-      error.cmd = command;
-      error.stdout = stdout;
-      error.stderr = stderr;
-      finishExec(error);
-    }
-  });
-  return child;
-}
-function execSync(command, options) {
-  const opts = options || {};
-  if (typeof _childProcessSpawnSync === "undefined") {
-    throw new Error("child_process.execSync requires CommandExecutor to be configured");
-  }
-  const effectiveCwd = opts.cwd ?? (typeof process !== "undefined" ? process.cwd() : "/");
-  const maxBuffer = opts.maxBuffer ?? 1024 * 1024;
-  const jsonResult = _childProcessSpawnSync.applySyncPromise(void 0, [
-    command,
-    JSON.stringify([]),
-    JSON.stringify({
-      cwd: effectiveCwd,
-      env: opts.env,
-      input: opts.input == null ? null : encodeBridgeBytes(opts.input),
-      maxBuffer,
-      shell: true
-    })
-  ]);
-  const result = typeof jsonResult === "string" ? JSON.parse(jsonResult) : jsonResult;
-  const execSyncStdio = Array.isArray(opts.stdio) ? opts.stdio : opts.stdio === "inherit" ? ["inherit", "inherit", "inherit"] : [];
-  // Node fd inheritance for the sync path: the captured stdout/stderr is written
-  // to the inherited descriptor and removed from the returned value, matching
-  // native node where the redirected stream does not also come back as output.
-  if (redirectSyncOutputToInheritedFd(execSyncStdio[1], result.stdout)) {
-    result.stdout = typeof result.stdout === "string" ? "" : Buffer.from("");
-  }
-  redirectSyncOutputToInheritedFd(execSyncStdio[2], result.stderr);
-  if (result.maxBufferExceeded) {
-    const err = new Error("stdout maxBuffer length exceeded");
-    err.code = "ERR_CHILD_PROCESS_STDIO_MAXBUFFER";
-    err.stdout = result.stdout;
-    err.stderr = result.stderr;
-    throw err;
-  }
-  if (result.code !== 0) {
-    const err = new Error("Command failed: " + command);
-    err.status = result.code;
-    err.stdout = result.stdout;
-    err.stderr = result.stderr;
-    err.output = [null, result.stdout, result.stderr];
-    throw err;
-  }
-  if (opts.encoding === "buffer" || !opts.encoding) {
-    return typeof Buffer !== "undefined" ? Buffer.from(result.stdout) : result.stdout;
-  }
-  return result.stdout;
-}
-function spawn(command, args, options) {
-  let argsArray = [];
-  let opts = {};
-  if (!Array.isArray(args)) {
-    opts = args || {};
-  } else {
-    argsArray = args;
-    opts = options || {};
-  }
-  const child = new ChildProcess();
-  child.spawnfile = command;
-  child.spawnargs = [command, ...argsArray];
-  child.detached = opts.detached === true;
-  child._detachedBootstrapPending = child.detached;
-  child._detachedBootstrapPollsRemaining = child.detached ? DETACHED_CHILD_BOOTSTRAP_POLLS : 0;
-  const stdio = Array.isArray(opts.stdio) ? opts.stdio : opts.stdio === "inherit" ? ["inherit", "inherit", "inherit"] : [];
-  // Node fd inheritance: when stdio[1]/stdio[2] is a numeric fd the child's
-  // stdout/stderr is wired to that (host/VFS) descriptor, so the bytes are
-  // written there instead of being delivered on child.stdout/child.stderr
-  // (which native node leaves null in that mode).
-  child._stdoutFd = typeof stdio[1] === "number" ? stdio[1] : null;
-  child._stderrFd = typeof stdio[2] === "number" ? stdio[2] : null;
-  child._inheritedFds = [];
-  for (const fd of [child._stdoutFd, child._stderrFd]) {
-    if (typeof fd === "number") {
-      retainChildInheritedFd(fd);
-      child._inheritedFds.push(fd);
-    }
-  }
-  if (typeof _childProcessSpawnStart !== "undefined") {
-    let spawnResult;
-    try {
-      const effectiveCwd = opts.cwd ?? (typeof process !== "undefined" ? process.cwd() : "/");
-      spawnResult = normalizeChildProcessBridgePayload(_childProcessSpawnStart.applySync(void 0, [
-        command,
-        JSON.stringify(argsArray),
-        JSON.stringify({
-          cwd: effectiveCwd,
-          env: opts.env,
-          shell: opts.shell === true || typeof opts.shell === "string",
-          detached: opts.detached === true
-        })
-      ]));
-    } catch (error) {
-      const spawnError = error instanceof Error ? error : new Error(String(error));
-      if (spawnError.code == null && /command not found:/i.test(String(spawnError.message || ""))) {
-        spawnError.code = "ENOENT";
-      } else if (
-        spawnError.code == null &&
-        /ERR_NATIVE_BINARY_NOT_SUPPORTED\b/i.test(String(spawnError.message || ""))
-      ) {
-        spawnError.code = "ERR_NATIVE_BINARY_NOT_SUPPORTED";
-      }
-      queueMicrotask(() => {
-        child.emit("error", spawnError);
-      });
-      return child;
-    }
-    const sessionId = typeof spawnResult === "object" && spawnResult !== null ? spawnResult.childId : spawnResult;
-    childProcessInstances.set(sessionId, child);
-    child._sessionId = sessionId;
-    if (typeof _registerHandle === "function") {
-      child._handleId = `child:${sessionId}`;
-      child._handleDescription = `child_process: ${command} ${argsArray.join(" ")}`;
-      _registerHandle(child._handleId, child._handleDescription);
-      child._handleRefed = true;
-    }
-    child.stdin.write = (data, encodingOrCallback, callback) => {
-      const done = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-      if (typeof _childProcessStdinWrite === "undefined") return false;
-      const bytes = typeof data === "string" ? new TextEncoder().encode(data) : data;
-      try {
-        _childProcessStdinWrite.applySync(void 0, [sessionId, bytes]);
-      } catch (error) {
-        if (done) {
-          queueMicrotask(() => done(error));
-          return false;
-        }
-        child.stdin.emit("error", error);
-        return false;
-      }
-      if (done) {
-        queueMicrotask(() => done(null));
-      }
-      return true;
-    };
-    child.stdin.end = (dataOrCallback, encodingOrCallback, callback) => {
-      const done = typeof dataOrCallback === "function" ? dataOrCallback : typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-      if (dataOrCallback != null && typeof dataOrCallback !== "function") {
-        child.stdin.write(dataOrCallback, typeof encodingOrCallback === "string" ? encodingOrCallback : void 0);
-      }
-      if (typeof _childProcessStdinClose !== "undefined") {
-        try {
-          _childProcessStdinClose.applySync(void 0, [sessionId]);
-        } catch (error) {
-          if (done) {
-            queueMicrotask(() => done(error));
-            return;
-          }
-          child.stdin.emit("error", error);
-          return;
-        }
-      }
-      child.stdin.writable = false;
-      if (done) {
-        queueMicrotask(() => done());
-      }
-    };
-    child.stdin.destroy = () => {
-      child.stdin.end();
-      child.stdin.destroyed = true;
-      child.stdin.emit("close");
-      return child.stdin;
-    };
-    child.kill = (signal) => {
-      if (typeof _childProcessKill === "undefined") return false;
-      const normalizedSignal = normalizeChildProcessSignal(signal);
-      _childProcessKill.applySync(void 0, [sessionId, normalizedSignal.bridgeSignal]);
-      child.killed = true;
-      child._pendingSignalCode = normalizedSignal.signalCode;
-      return true;
-    };
-    child.pid = typeof spawnResult === "object" && spawnResult !== null ? Number(spawnResult.pid) || -1 : Number(sessionId) || -1;
-    if (stdio[1] === "inherit" || stdio[1] === 1) {
-      child.stdout.on("data", (chunk) => process.stdout.write(chunk));
-    }
-    if (stdio[2] === "inherit" || stdio[2] === 2) {
-      child.stderr.on("data", (chunk) => process.stderr.write(chunk));
-    }
-    setTimeout(() => child.emit("spawn"), 0);
-    scheduleChildProcessPoll(sessionId, 0);
-    return child;
-  }
-  const err = new Error(
-    "child_process.spawn requires CommandExecutor to be configured"
-  );
-  setTimeout(() => {
-    child.emit("error", err);
-    child._complete("", err.message, 1);
-  }, 0);
-  return child;
-}
-function spawnSync(command, args, options) {
-  let argsArray = [];
-  let opts = {};
-  if (!Array.isArray(args)) {
-    opts = args || {};
-  } else {
-    argsArray = args;
-    opts = options || {};
-  }
-  if (typeof _childProcessSpawnSync === "undefined") {
-    return {
-      pid: _nextChildPid++,
-      output: [null, "", "child_process.spawnSync requires CommandExecutor to be configured"],
-      stdout: "",
-      stderr: "child_process.spawnSync requires CommandExecutor to be configured",
-      status: 1,
-      signal: null,
-      error: new Error("child_process.spawnSync requires CommandExecutor to be configured")
-    };
-  }
-  try {
-    const effectiveCwd = opts.cwd ?? (typeof process !== "undefined" ? process.cwd() : "/");
-    const maxBuffer = opts.maxBuffer;
-    const useBufferOutput = opts.encoding == null || opts.encoding === "buffer";
-    const timeout = Number.isInteger(opts.timeout) && opts.timeout > 0 ? opts.timeout : null;
-    const killSignal = normalizeChildProcessSignal(opts.killSignal).signalCode ?? "SIGTERM";
-    const jsonResult = _childProcessSpawnSync.applySyncPromise(void 0, [
-      command,
-      JSON.stringify(argsArray),
-      JSON.stringify({
-        cwd: effectiveCwd,
-        env: opts.env,
-        input: opts.input == null ? null : encodeBridgeBytes(opts.input),
-        maxBuffer,
-        shell: opts.shell === true || typeof opts.shell === "string",
-        timeout,
-        killSignal
-      })
-    ]);
-    const result = typeof jsonResult === "string" ? JSON.parse(jsonResult) : jsonResult;
-    const spawnSyncStdio = Array.isArray(opts.stdio) ? opts.stdio : opts.stdio === "inherit" ? ["inherit", "inherit", "inherit"] : [];
-    let stdoutValue = useBufferOutput && typeof Buffer !== "undefined" ? Buffer.from(result.stdout) : result.stdout;
-    let stderrValue = useBufferOutput && typeof Buffer !== "undefined" ? Buffer.from(result.stderr) : result.stderr;
-    // Node fd inheritance: redirect captured output to the inherited descriptor
-    // and null it out of the returned result, like native node.
-    if (redirectSyncOutputToInheritedFd(spawnSyncStdio[1], stdoutValue)) {
-      stdoutValue = useBufferOutput && typeof Buffer !== "undefined" ? Buffer.from("") : "";
-    }
-    if (redirectSyncOutputToInheritedFd(spawnSyncStdio[2], stderrValue)) {
-      stderrValue = useBufferOutput && typeof Buffer !== "undefined" ? Buffer.from("") : "";
-    }
-    if (result.timedOut) {
-      const err = new Error(`spawnSync ${command} ETIMEDOUT`);
-      err.code = "ETIMEDOUT";
-      return {
-        pid: _nextChildPid++,
-        output: [null, stdoutValue, stderrValue],
-        stdout: stdoutValue,
-        stderr: stderrValue,
-        status: null,
-        signal: result.signal ?? killSignal,
-        error: err
-      };
-    }
-    if (result.maxBufferExceeded) {
-      const err = new Error("stdout maxBuffer length exceeded");
-      err.code = "ERR_CHILD_PROCESS_STDIO_MAXBUFFER";
-      return {
-        pid: _nextChildPid++,
-        output: [null, stdoutValue, stderrValue],
-        stdout: stdoutValue,
-        stderr: stderrValue,
-        status: result.code,
-        signal: null,
-        error: err
-      };
-    }
-    return {
-      pid: _nextChildPid++,
-      output: [null, stdoutValue, stderrValue],
-      stdout: stdoutValue,
-      stderr: stderrValue,
-      status: result.code,
-      signal: null,
-      error: void 0
-    };
-  } catch (err) {
-    if (
-      err &&
-      typeof err === "object" &&
-      err.code == null &&
-      /ERR_NATIVE_BINARY_NOT_SUPPORTED\b/i.test(String(err.message || err))
-    ) {
-      err.code = "ERR_NATIVE_BINARY_NOT_SUPPORTED";
-    }
-    const errMsg = err instanceof Error ? err.message : String(err);
-    const useBufferOutput = opts.encoding == null || opts.encoding === "buffer";
-    const stdoutValue = useBufferOutput && typeof Buffer !== "undefined" ? Buffer.from("") : "";
-    const stderrValue = useBufferOutput && typeof Buffer !== "undefined" ? Buffer.from(errMsg) : errMsg;
-    return {
-      pid: _nextChildPid++,
-      output: [null, stdoutValue, stderrValue],
-      stdout: stdoutValue,
-      stderr: stderrValue,
-      status: 1,
-      signal: null,
-      error: err instanceof Error ? err : new Error(String(err))
-    };
-  }
-}
-function execFile(file, args, options, callback) {
-  let argsArray = [];
-  let opts = {};
-  let cb;
-  if (typeof args === "function") {
-    cb = args;
-  } else if (typeof options === "function") {
-    argsArray = args.slice();
-    cb = options;
-  } else {
-    argsArray = Array.isArray(args) ? args : [];
-    opts = options || {};
-    cb = callback;
-  }
-  const maxBuffer = opts.maxBuffer ?? 1024 * 1024;
-  const child = spawn(file, argsArray, opts);
-  let stdout = "";
-  let stderr = "";
-  let stdoutBytes = 0;
-  let stderrBytes = 0;
-  let maxBufferExceeded = false;
-  child.stdout.on("data", (data) => {
-    const chunk = String(data);
-    stdout += chunk;
-    stdoutBytes += chunk.length;
-    if (stdoutBytes > maxBuffer && !maxBufferExceeded) {
-      maxBufferExceeded = true;
-      child.kill("SIGTERM");
-    }
-  });
-  child.stderr.on("data", (data) => {
-    const chunk = String(data);
-    stderr += chunk;
-    stderrBytes += chunk.length;
-    if (stderrBytes > maxBuffer && !maxBufferExceeded) {
-      maxBufferExceeded = true;
-      child.kill("SIGTERM");
-    }
-  });
-  child.on("close", (...args2) => {
-    const code = args2[0];
-    if (cb) {
-      if (maxBufferExceeded) {
-        const err = new Error("stdout maxBuffer length exceeded");
-        err.code = "ERR_CHILD_PROCESS_STDIO_MAXBUFFER";
-        err.killed = true;
-        err.stdout = stdout;
-        err.stderr = stderr;
-        cb(err, stdout, stderr);
-      } else if (code !== 0) {
-        const err = new Error("Command failed: " + file);
-        err.code = code;
-        err.stdout = stdout;
-        err.stderr = stderr;
-        cb(err, stdout, stderr);
-      } else {
-        cb(null, stdout, stderr);
-      }
-    }
-  });
-  child.on("error", (err) => {
-    if (cb) {
-      cb(err, stdout, stderr);
-    }
-  });
-  return child;
-}
-function execFileSync(file, args, options) {
-  let argsArray = [];
-  let opts = {};
-  if (!Array.isArray(args)) {
-    opts = args || {};
-  } else {
-    argsArray = args;
-    opts = options || {};
-  }
-  const maxBuffer = opts.maxBuffer ?? 1024 * 1024;
-  const result = spawnSync(file, argsArray, { ...opts, maxBuffer });
-  if (result.error && String(result.error.code) === "ERR_CHILD_PROCESS_STDIO_MAXBUFFER") {
-    throw result.error;
-  }
-  if (result.status !== 0) {
-    const err = new Error("Command failed: " + file);
-    err.status = result.status ?? void 0;
-    err.stdout = String(result.stdout);
-    err.stderr = String(result.stderr);
-    throw err;
-  }
-  if (opts.encoding === "buffer" || !opts.encoding) {
-    return result.stdout;
-  }
-  return typeof result.stdout === "string" ? result.stdout : result.stdout.toString(opts.encoding);
-}
-function fork(modulePath, args, options) {
-  if (typeof modulePath !== "string" || modulePath.length === 0) {
-    throw new TypeError("The \"modulePath\" argument must be of type string");
-  }
-  let argsArray = [];
-  let opts = {};
-  if (Array.isArray(args)) {
-    argsArray = args.slice();
-    opts = options || {};
-  } else {
-    opts = args || {};
-  }
-  const effectiveCwd = opts.cwd ?? (typeof process !== "undefined" ? process.cwd() : "/");
-  const execArgv = Array.isArray(opts.execArgv) ? opts.execArgv : typeof process !== "undefined" && Array.isArray(process.execArgv) ? process.execArgv : [];
-  const env = {
-    ...(typeof process !== "undefined" ? process.env : {}),
-    ...(opts.env || {}),
-    AGENTOS_NODE_IPC: "1"
-  };
-  const child = spawn(opts.execPath || (typeof process !== "undefined" ? process.execPath : "node"), [
-    ...execArgv,
-    modulePath,
-    ...argsArray
-  ], {
-    ...opts,
-    cwd: effectiveCwd,
-    env,
-    shell: false
-  });
-  child._ipcEnabled = true;
-  child.connected = true;
-  return child;
-}
-var childProcess = {
-  ChildProcess,
-  exec,
-  execSync,
-  spawn,
-  spawnSync,
-  execFile,
-  execFileSync,
-  fork
-};
-exposeCustomGlobal("_childProcessModule", childProcess);
-var child_process_default = childProcess;
-export { child_process_exports, childProcessInstances, _childInheritedFds, retainChildInheritedFd, deferCloseIfChildInheritedFd, releaseChildInheritedFd, DETACHED_CHILD_BOOTSTRAP_POLLS, DETACHED_CHILD_IMMEDIATE_BOOTSTRAP_POLLS, normalizeChildProcessSessionId, normalizeChildProcessBridgePayload, CHILD_PROCESS_IPC_FRAME_PREFIX, encodeChildProcessIpcFrame, decodeChildProcessIpcFramePayload, splitChildProcessIpcFrames, dispatchChildProcessPollResult, completeDetachedChildBootstrap, consumeDetachedChildBootstrapPoll, pumpDetachedChildBootstrap, writeChildOutputToInheritedFd, redirectSyncOutputToInheritedFd, routeChildProcessEvent, childProcessDispatch, CHILD_PROCESS_POLL_DRAIN_LIMIT, scheduleChildProcessPoll, hasOutputListeners, decodeOutputChunk, scheduleOutputFlush, checkStreamMaxListeners, createOutputAsyncIterator, _nextChildPid, ChildProcess, exec, execSync, spawn, spawnSync, execFile, execFileSync, fork, childProcess, child_process_default };
diff --git a/packages/build-tools/bridge-src/builtins/console.ts b/packages/build-tools/bridge-src/builtins/console.ts
deleted file mode 100644
index 67eb805b6..000000000
--- a/packages/build-tools/bridge-src/builtins/console.ts
+++ /dev/null
@@ -1,382 +0,0 @@
-import { once } from "./events.js";
-import { import_buffer2 } from "./buffer-runtime.js";
-import { _queueMicrotask } from "./timers.js";
-import { _resolveRuntimeTtyConfig } from "./tty-config.js";
-
-function _getStdoutIsTTY() {
-  return _resolveRuntimeTtyConfig().stdoutIsTTY;
-}
-
-function _getStderrIsTTY() {
-  return _resolveRuntimeTtyConfig().stderrIsTTY;
-}
-
-function getWriteCallback(encodingOrCallback, callback) {
-  if (typeof encodingOrCallback === "function") {
-    return encodingOrCallback;
-  }
-  if (typeof callback === "function") {
-    return callback;
-  }
-  return void 0;
-}
-
-function emitListeners(listeners, onceListeners, event, args) {
-  const persistent = listeners[event] ? listeners[event].slice() : [];
-  const once = onceListeners[event] ? onceListeners[event].slice() : [];
-  if (once.length > 0) {
-    onceListeners[event] = [];
-  }
-  for (const listener of persistent) {
-    listener(...args);
-  }
-  for (const listener of once) {
-    listener(...args);
-  }
-  return persistent.length + once.length > 0;
-}
-
-function createStdioWriteStream(options) {
-  const listeners = {};
-  const onceListeners = {};
-  const remove = (event, listener) => {
-    if (listeners[event]) {
-      const idx = listeners[event].indexOf(listener);
-      if (idx !== -1) listeners[event].splice(idx, 1);
-    }
-    if (onceListeners[event]) {
-      const idx = onceListeners[event].indexOf(listener);
-      if (idx !== -1) onceListeners[event].splice(idx, 1);
-    }
-  };
-  const stream = {
-    write(data, encodingOrCallback, callback) {
-      if (data instanceof Uint8Array || typeof import_buffer2.Buffer !== "undefined" && import_buffer2.Buffer.isBuffer(data)) {
-        options.write(data);
-      } else {
-        options.write(String(data));
-      }
-      const done = getWriteCallback(encodingOrCallback, callback);
-      if (done) {
-        _queueMicrotask(() => done(null));
-      }
-      return true;
-    },
-    end(chunk, encoding, callback) {
-      if (typeof chunk === "function") { callback = chunk; chunk = undefined; }
-      else if (typeof encoding === "function") { callback = encoding; }
-      if (chunk != null) stream.write(chunk);
-      stream.writableEnded = true;
-      if (typeof callback === "function") _queueMicrotask(() => callback());
-      _queueMicrotask(() => emitListeners(listeners, onceListeners, "finish", []));
-      return stream;
-    },
-    // Node Writable surface that process.stdout/stderr must expose (node-fidelity A7); these
-    // streams are unbuffered host writes, so destroy/cork/uncork are no-ops that keep callers
-    // (and the Claude EPIPE/buffered-destroy guards) on the standard path.
-    destroyed: false,
-    destroy(error) {
-      if (stream.destroyed) return stream;
-      stream.destroyed = true;
-      if (error) _queueMicrotask(() => emitListeners(listeners, onceListeners, "error", [error]));
-      _queueMicrotask(() => emitListeners(listeners, onceListeners, "close", []));
-      return stream;
-    },
-    cork() {},
-    uncork() {},
-    setDefaultEncoding() { return stream; },
-    on(event, listener) {
-      if (!listeners[event]) listeners[event] = [];
-      listeners[event].push(listener);
-      return stream;
-    },
-    once(event, listener) {
-      if (!onceListeners[event]) onceListeners[event] = [];
-      onceListeners[event].push(listener);
-      return stream;
-    },
-    off(event, listener) {
-      remove(event, listener);
-      return stream;
-    },
-    removeListener(event, listener) {
-      remove(event, listener);
-      return stream;
-    },
-    addListener(event, listener) {
-      return stream.on(event, listener);
-    },
-    emit(event, ...args) {
-      return emitListeners(listeners, onceListeners, event, args);
-    },
-    writable: true,
-    get isTTY() {
-      return options.isTTY();
-    },
-    get columns() {
-      return _resolveRuntimeTtyConfig().cols;
-    },
-    get rows() {
-      return _resolveRuntimeTtyConfig().rows;
-    }
-  };
-  return stream;
-}
-
-var _stdout = createStdioWriteStream({
-  write(data) {
-    if (typeof _log !== "undefined") {
-      _log.applySync(void 0, [data]);
-    }
-  },
-  isTTY: _getStdoutIsTTY
-});
-
-var _stderr = createStdioWriteStream({
-  write(data) {
-    if (typeof _error !== "undefined") {
-      _error.applySync(void 0, [data]);
-    }
-  },
-  isTTY: _getStderrIsTTY
-});
-
-function formatConsoleValue(value) {
-  if (typeof value === "string") {
-    return value;
-  }
-  if (typeof value === "bigint") {
-    return `${value}n`;
-  }
-  if (value instanceof Error) {
-    return value.stack || value.message || String(value);
-  }
-  if (typeof value === "object" && value !== null) {
-    try {
-      return JSON.stringify(value);
-    } catch {
-    }
-  }
-  return String(value);
-}
-
-function formatConsoleArgs(args) {
-  if (typeof builtinUtilModule !== "undefined" && typeof builtinUtilModule?.formatWithOptions === "function") {
-    return builtinUtilModule.formatWithOptions({ colors: false }, ...args);
-  }
-  return args.map((value) => formatConsoleValue(value)).join(" ");
-}
-
-function formatConsoleLine(args) {
-  return `${formatConsoleArgs(args)}\n`;
-}
-
-class Console {
-  constructor(stdout = _stdout, stderr = _stderr) {
-    this._stdout = stdout;
-    this._stderr = stderr;
-    this._counts = new Map();
-    this._times = new Map();
-    for (const method of [
-      "assert",
-      "clear",
-      "count",
-      "countReset",
-      "debug",
-      "dir",
-      "dirxml",
-      "error",
-      "group",
-      "groupCollapsed",
-      "groupEnd",
-      "info",
-      "log",
-      "table",
-      "time",
-      "timeEnd",
-      "timeLog",
-      "trace",
-      "warn"
-    ]) {
-      this[method] = this[method].bind(this);
-    }
-  }
-  log(...args) {
-    this._stdout.write(formatConsoleLine(args));
-  }
-  info(...args) {
-    this._stdout.write(formatConsoleLine(args));
-  }
-  debug(...args) {
-    this._stdout.write(formatConsoleLine(args));
-  }
-  warn(...args) {
-    this._stderr.write(formatConsoleLine(args));
-  }
-  error(...args) {
-    this._stderr.write(formatConsoleLine(args));
-  }
-  dir(value) {
-    this._stdout.write(formatConsoleLine([value]));
-  }
-  dirxml(...args) {
-    this.log(...args);
-  }
-  trace(...args) {
-    const message = formatConsoleArgs(args);
-    const error = new Error(message);
-    this._stderr.write(`${error.stack || message}\n`);
-  }
-  assert(condition, ...args) {
-    if (!condition) {
-      const message = args.length > 0 ? formatConsoleArgs(args) : "Assertion failed";
-      this._stderr.write(`${message}\n`);
-    }
-  }
-  clear() {
-  }
-  count(label = "default") {
-    const next = (this._counts.get(label) ?? 0) + 1;
-    this._counts.set(label, next);
-    this.log(`${label}: ${next}`);
-  }
-  countReset(label = "default") {
-    this._counts.delete(label);
-  }
-  group(...args) {
-    if (args.length > 0) {
-      this.log(...args);
-    }
-  }
-  groupCollapsed(...args) {
-    if (args.length > 0) {
-      this.log(...args);
-    }
-  }
-  groupEnd() {
-  }
-  table(tabularData) {
-    this.log(tabularData);
-  }
-  time(label = "default") {
-    this._times.set(label, Date.now());
-  }
-  timeEnd(label = "default") {
-    if (!this._times.has(label)) {
-      return;
-    }
-    const startedAt = this._times.get(label);
-    this._times.delete(label);
-    this.log(`${label}: ${Date.now() - startedAt}ms`);
-  }
-  timeLog(label = "default", ...args) {
-    if (!this._times.has(label)) {
-      return;
-    }
-    const startedAt = this._times.get(label);
-    this.log(`${label}: ${Date.now() - startedAt}ms`, ...args);
-  }
-}
-
-const defaultConsole = new Console();
-
-globalThis.console = defaultConsole;
-
-function createConsoleTask() {
-  return {
-    run(callback, ...args) {
-      return typeof callback === "function" ? callback(...args) : void 0;
-    }
-  };
-}
-
-function consoleContext(stdout = _stdout, stderr = _stderr) {
-  return new Console(stdout, stderr);
-}
-
-var builtinConsoleModule = {
-  Console,
-  assert: defaultConsole.assert.bind(defaultConsole),
-  clear: defaultConsole.clear.bind(defaultConsole),
-  context: consoleContext,
-  count: defaultConsole.count.bind(defaultConsole),
-  countReset: defaultConsole.countReset.bind(defaultConsole),
-  createTask: createConsoleTask,
-  debug: defaultConsole.debug.bind(defaultConsole),
-  dir: defaultConsole.dir.bind(defaultConsole),
-  dirxml: defaultConsole.dirxml.bind(defaultConsole),
-  error: defaultConsole.error.bind(defaultConsole),
-  group: defaultConsole.group.bind(defaultConsole),
-  groupCollapsed: defaultConsole.groupCollapsed.bind(defaultConsole),
-  groupEnd: defaultConsole.groupEnd.bind(defaultConsole),
-  info: defaultConsole.info.bind(defaultConsole),
-  log: defaultConsole.log.bind(defaultConsole),
-  profile: void 0,
-  profileEnd: void 0,
-  table: defaultConsole.table.bind(defaultConsole),
-  time: defaultConsole.time.bind(defaultConsole),
-  timeEnd: defaultConsole.timeEnd.bind(defaultConsole),
-  timeLog: defaultConsole.timeLog.bind(defaultConsole),
-  timeStamp: void 0,
-  trace: defaultConsole.trace.bind(defaultConsole),
-  warn: defaultConsole.warn.bind(defaultConsole)
-};
-
-function installBuiltinUtilFormatWithOptions(builtinUtilModule) {
-  if (!builtinUtilModule || typeof builtinUtilModule.formatWithOptions === "function") {
-    return builtinUtilModule;
-  }
-  builtinUtilModule.formatWithOptions = function formatWithOptions(inspectOptions, format, ...args) {
-    const inspectValue = (value) => {
-      if (typeof builtinUtilModule.inspect === "function") {
-        return builtinUtilModule.inspect(value, inspectOptions);
-      }
-      try {
-        return JSON.stringify(value);
-      } catch {
-        return String(value);
-      }
-    };
-    const formatValue = (value) => typeof value === "string" ? value : inspectValue(value);
-    if (typeof format !== "string") {
-      return [format, ...args].map(formatValue).join(" ");
-    }
-    let index = 0;
-    const formatted = format.replace(/%[sdifjoO%]/g, (token) => {
-      if (token === "%%") {
-        return "%";
-      }
-      if (index >= args.length) {
-        return token;
-      }
-      const value = args[index++];
-      switch (token) {
-        case "%s":
-          return String(value);
-        case "%d":
-          return Number(value).toString();
-        case "%i":
-          return Number.parseInt(value, 10).toString();
-        case "%f":
-          return Number.parseFloat(value).toString();
-        case "%j":
-          try {
-            return JSON.stringify(value);
-          } catch {
-            return "[Circular]";
-          }
-        case "%o":
-        case "%O":
-          return inspectValue(value);
-        default:
-          return token;
-      }
-    });
-    if (index >= args.length) {
-      return formatted;
-    }
-    return [formatted, ...args.slice(index).map(formatValue)].join(" ");
-  };
-  return builtinUtilModule;
-}
-export { Console, _getStderrIsTTY, _getStdoutIsTTY, _stderr, _stdout, builtinConsoleModule, consoleContext, createConsoleTask, createStdioWriteStream, defaultConsole, emitListeners, formatConsoleArgs, formatConsoleLine, formatConsoleValue, getWriteCallback, installBuiltinUtilFormatWithOptions };
diff --git a/packages/build-tools/bridge-src/builtins/crypto.ts b/packages/build-tools/bridge-src/builtins/crypto.ts
deleted file mode 100644
index b269d5e7a..000000000
--- a/packages/build-tools/bridge-src/builtins/crypto.ts
+++ /dev/null
@@ -1,1286 +0,0 @@
-import { builtinConstantsStdlibModule } from "./builtin-modules.js";
-import { import_buffer2 } from "./buffer-runtime.js";
-
-function createUnsupportedCryptoApiError(subject) {
-  const error = new Error(`${subject} is not supported in sandbox`);
-  error.code = "ERR_NOT_IMPLEMENTED";
-  return error;
-}
-
-function throwUnsupportedCryptoApi(api) {
-  throw createUnsupportedCryptoApiError(`crypto.${api}`);
-}
-
-var kCryptoKeyToken = /* @__PURE__ */ Symbol("secureExecCryptoKey");
-
-var kCryptoToken = /* @__PURE__ */ Symbol("secureExecCrypto");
-
-var kSubtleToken = /* @__PURE__ */ Symbol("secureExecSubtle");
-
-var ERR_INVALID_THIS2 = "ERR_INVALID_THIS";
-
-var ERR_ILLEGAL_CONSTRUCTOR = "ERR_ILLEGAL_CONSTRUCTOR";
-
-function createNodeTypeError2(message, code) {
-  const error = new TypeError(message);
-  error.code = code;
-  return error;
-}
-
-class SandboxDOMException extends Error {
-  constructor(message = "", name = "Error") {
-    super(message);
-    this.name = String(name);
-    this.code = 0;
-  }
-}
-
-function createDomLikeError(name, code, message) {
-  const error = new Error(message);
-  error.name = name;
-  error.code = code;
-  return error;
-}
-
-function assertCryptoReceiver(receiver) {
-  if (!(receiver instanceof SandboxCrypto) || receiver._token !== kCryptoToken) {
-    throw createNodeTypeError2('Value of "this" must be of type Crypto', ERR_INVALID_THIS2);
-  }
-}
-
-function assertSubtleReceiver(receiver) {
-  if (!(receiver instanceof SandboxSubtleCrypto) || receiver._token !== kSubtleToken) {
-    throw createNodeTypeError2('Value of "this" must be of type SubtleCrypto', ERR_INVALID_THIS2);
-  }
-}
-
-function isIntegerTypedArray(value) {
-  if (!ArrayBuffer.isView(value) || value instanceof DataView) {
-    return false;
-  }
-  return value instanceof Int8Array || value instanceof Int16Array || value instanceof Int32Array || value instanceof Uint8Array || value instanceof Uint16Array || value instanceof Uint32Array || value instanceof Uint8ClampedArray || value instanceof BigInt64Array || value instanceof BigUint64Array || import_buffer2.Buffer.isBuffer(value);
-}
-
-function toBase64(data) {
-  if (typeof data === "string") {
-    return import_buffer2.Buffer.from(data).toString("base64");
-  }
-  if (data instanceof ArrayBuffer) {
-    return import_buffer2.Buffer.from(new Uint8Array(data)).toString("base64");
-  }
-  if (ArrayBuffer.isView(data)) {
-    return import_buffer2.Buffer.from(
-      new Uint8Array(data.buffer, data.byteOffset, data.byteLength)
-    ).toString("base64");
-  }
-  return import_buffer2.Buffer.from(data).toString("base64");
-}
-
-function toArrayBuffer(data) {
-  const buf = import_buffer2.Buffer.from(data, "base64");
-  return buf.buffer.slice(buf.byteOffset, buf.byteOffset + buf.byteLength);
-}
-
-function normalizeAlgorithm(algorithm) {
-  if (typeof algorithm === "string") {
-    return { name: algorithm };
-  }
-  return algorithm ?? {};
-}
-
-function normalizeBridgeAlgorithm(algorithm) {
-  const normalized = { ...normalizeAlgorithm(algorithm) };
-  const hash = normalized.hash;
-  const publicExponent = normalized.publicExponent;
-  const iv = normalized.iv;
-  const additionalData = normalized.additionalData;
-  const salt = normalized.salt;
-  const info = normalized.info;
-  const context = normalized.context;
-  const label = normalized.label;
-  const publicKey = normalized.public;
-  if (hash) {
-    normalized.hash = normalizeAlgorithm(hash);
-  }
-  if (publicExponent && ArrayBuffer.isView(publicExponent)) {
-    normalized.publicExponent = import_buffer2.Buffer.from(
-      new Uint8Array(
-        publicExponent.buffer,
-        publicExponent.byteOffset,
-        publicExponent.byteLength
-      )
-    ).toString("base64");
-  }
-  if (iv) {
-    normalized.iv = toBase64(iv);
-  }
-  if (additionalData) {
-    normalized.additionalData = toBase64(additionalData);
-  }
-  if (salt) {
-    normalized.salt = toBase64(salt);
-  }
-  if (info) {
-    normalized.info = toBase64(info);
-  }
-  if (context) {
-    normalized.context = toBase64(context);
-  }
-  if (label) {
-    normalized.label = toBase64(label);
-  }
-  if (publicKey && typeof publicKey === "object" && "_keyData" in publicKey) {
-    normalized.public = publicKey._keyData;
-  }
-  return normalized;
-}
-
-var SandboxCryptoKey = class {
-  type;
-  extractable;
-  algorithm;
-  usages;
-  _keyData;
-  _pem;
-  _jwk;
-  _raw;
-  _sourceKeyObjectData;
-  [kCryptoKeyToken];
-  constructor(keyData, token) {
-    if (token !== kCryptoKeyToken || !keyData) {
-      throw createNodeTypeError2("Illegal constructor", ERR_ILLEGAL_CONSTRUCTOR);
-    }
-    this.type = keyData.type;
-    this.extractable = keyData.extractable;
-    this.algorithm = keyData.algorithm;
-    this.usages = keyData.usages;
-    this._keyData = keyData;
-    this._pem = keyData._pem;
-    this._jwk = keyData._jwk;
-    this._raw = keyData._raw;
-    this._sourceKeyObjectData = keyData._sourceKeyObjectData;
-    this[kCryptoKeyToken] = true;
-  }
-};
-
-Object.defineProperty(SandboxCryptoKey.prototype, Symbol.toStringTag, {
-  value: "CryptoKey",
-  configurable: true
-});
-
-Object.defineProperty(SandboxCryptoKey, Symbol.hasInstance, {
-  value(candidate) {
-    return Boolean(
-      candidate && typeof candidate === "object" && (candidate[kCryptoKeyToken] === true || "_keyData" in candidate && candidate[Symbol.toStringTag] === "CryptoKey")
-    );
-  },
-  configurable: true
-});
-
-function createCryptoKey(keyData) {
-  const globalCryptoKey = globalThis.CryptoKey;
-  if (typeof globalCryptoKey === "function" && globalCryptoKey.prototype && globalCryptoKey.prototype !== SandboxCryptoKey.prototype) {
-    const key = Object.create(globalCryptoKey.prototype);
-    key.type = keyData.type;
-    key.extractable = keyData.extractable;
-    key.algorithm = keyData.algorithm;
-    key.usages = keyData.usages;
-    key._keyData = keyData;
-    key._pem = keyData._pem;
-    key._jwk = keyData._jwk;
-    key._raw = keyData._raw;
-    key._sourceKeyObjectData = keyData._sourceKeyObjectData;
-    return key;
-  }
-  return new SandboxCryptoKey(keyData, kCryptoKeyToken);
-}
-
-function subtleCall(request) {
-  if (typeof _cryptoSubtle === "undefined") {
-    throw new Error("crypto.subtle is not supported in sandbox");
-  }
-  return _cryptoSubtle.applySync(void 0, [JSON.stringify(request)]);
-}
-
-var SandboxSubtleCrypto = class {
-  _token;
-  constructor(token) {
-    if (token !== kSubtleToken) {
-      throw createNodeTypeError2("Illegal constructor", ERR_ILLEGAL_CONSTRUCTOR);
-    }
-    this._token = token;
-  }
-  digest(algorithm, data) {
-    assertSubtleReceiver(this);
-    return Promise.resolve().then(() => {
-      const result = JSON.parse(
-        subtleCall({
-          op: "digest",
-          algorithm: normalizeAlgorithm(algorithm).name,
-          data: toBase64(data)
-        })
-      );
-      return toArrayBuffer(result.data);
-    });
-  }
-  generateKey(algorithm, extractable, keyUsages) {
-    assertSubtleReceiver(this);
-    return Promise.resolve().then(() => {
-      const result = JSON.parse(
-        subtleCall({
-          op: "generateKey",
-          algorithm: normalizeBridgeAlgorithm(algorithm),
-          extractable,
-          usages: Array.from(keyUsages)
-        })
-      );
-      if ("publicKey" in result && "privateKey" in result) {
-        return {
-          publicKey: createCryptoKey(result.publicKey),
-          privateKey: createCryptoKey(result.privateKey)
-        };
-      }
-      return createCryptoKey(result.key);
-    });
-  }
-  importKey(format, keyData, algorithm, extractable, keyUsages) {
-    assertSubtleReceiver(this);
-    return Promise.resolve().then(() => {
-      const result = JSON.parse(
-        subtleCall({
-          op: "importKey",
-          format,
-          keyData: format === "jwk" ? keyData : toBase64(keyData),
-          algorithm: normalizeBridgeAlgorithm(algorithm),
-          extractable,
-          usages: Array.from(keyUsages)
-        })
-      );
-      return createCryptoKey(result.key);
-    });
-  }
-  exportKey(format, key) {
-    assertSubtleReceiver(this);
-    return Promise.resolve().then(() => {
-      const result = JSON.parse(
-        subtleCall({
-          op: "exportKey",
-          format,
-          key: key._keyData
-        })
-      );
-      if (format === "jwk") {
-        return result.jwk;
-      }
-      return toArrayBuffer(result.data ?? "");
-    });
-  }
-  encrypt(algorithm, key, data) {
-    assertSubtleReceiver(this);
-    return Promise.resolve().then(() => {
-      const result = JSON.parse(
-        subtleCall({
-          op: "encrypt",
-          algorithm: normalizeBridgeAlgorithm(algorithm),
-          key: key._keyData,
-          data: toBase64(data)
-        })
-      );
-      return toArrayBuffer(result.data);
-    });
-  }
-  decrypt(algorithm, key, data) {
-    assertSubtleReceiver(this);
-    return Promise.resolve().then(() => {
-      const result = JSON.parse(
-        subtleCall({
-          op: "decrypt",
-          algorithm: normalizeBridgeAlgorithm(algorithm),
-          key: key._keyData,
-          data: toBase64(data)
-        })
-      );
-      return toArrayBuffer(result.data);
-    });
-  }
-  sign(algorithm, key, data) {
-    assertSubtleReceiver(this);
-    return Promise.resolve().then(() => {
-      const result = JSON.parse(
-        subtleCall({
-          op: "sign",
-          algorithm: normalizeBridgeAlgorithm(algorithm),
-          key: key._keyData,
-          data: toBase64(data)
-        })
-      );
-      return toArrayBuffer(result.data);
-    });
-  }
-  verify(algorithm, key, signature, data) {
-    assertSubtleReceiver(this);
-    return Promise.resolve().then(() => {
-      const result = JSON.parse(
-        subtleCall({
-          op: "verify",
-          algorithm: normalizeBridgeAlgorithm(algorithm),
-          key: key._keyData,
-          signature: toBase64(signature),
-          data: toBase64(data)
-        })
-      );
-      return result.result;
-    });
-  }
-  deriveBits(algorithm, baseKey, length) {
-    assertSubtleReceiver(this);
-    return Promise.resolve().then(() => {
-      const result = JSON.parse(
-        subtleCall({
-          op: "deriveBits",
-          algorithm: normalizeBridgeAlgorithm(algorithm),
-          baseKey: baseKey._keyData,
-          length
-        })
-      );
-      return toArrayBuffer(result.data);
-    });
-  }
-  deriveKey(algorithm, baseKey, derivedKeyAlgorithm, extractable, keyUsages) {
-    assertSubtleReceiver(this);
-    return Promise.resolve().then(() => {
-      const result = JSON.parse(
-        subtleCall({
-          op: "deriveKey",
-          algorithm: normalizeBridgeAlgorithm(algorithm),
-          baseKey: baseKey._keyData,
-          derivedKeyAlgorithm: normalizeBridgeAlgorithm(derivedKeyAlgorithm),
-          extractable,
-          usages: Array.from(keyUsages)
-        })
-      );
-      return createCryptoKey(result.key);
-    });
-  }
-  wrapKey(format, key, wrappingKey, wrapAlgorithm) {
-    assertSubtleReceiver(this);
-    return Promise.resolve().then(() => {
-      const result = JSON.parse(
-        subtleCall({
-          op: "wrapKey",
-          format,
-          key: key._keyData,
-          wrappingKey: wrappingKey._keyData,
-          wrapAlgorithm: normalizeBridgeAlgorithm(wrapAlgorithm)
-        })
-      );
-      return toArrayBuffer(result.data);
-    });
-  }
-  unwrapKey(format, wrappedKey, unwrappingKey, unwrapAlgorithm, unwrappedKeyAlgorithm, extractable, keyUsages) {
-    assertSubtleReceiver(this);
-    return Promise.resolve().then(() => {
-      const result = JSON.parse(
-        subtleCall({
-          op: "unwrapKey",
-          format,
-          wrappedKey: toBase64(wrappedKey),
-          unwrappingKey: unwrappingKey._keyData,
-          unwrapAlgorithm: normalizeBridgeAlgorithm(unwrapAlgorithm),
-          unwrappedKeyAlgorithm: normalizeBridgeAlgorithm(unwrappedKeyAlgorithm),
-          extractable,
-          usages: Array.from(keyUsages)
-        })
-      );
-      return createCryptoKey(result.key);
-    });
-  }
-};
-
-var subtleCrypto = new SandboxSubtleCrypto(kSubtleToken);
-
-var SandboxCrypto = class {
-  _token;
-  constructor(token) {
-    if (token !== kCryptoToken) {
-      throw createNodeTypeError2("Illegal constructor", ERR_ILLEGAL_CONSTRUCTOR);
-    }
-    this._token = token;
-  }
-  get subtle() {
-    assertCryptoReceiver(this);
-    return subtleCrypto;
-  }
-  getRandomValues(array) {
-    assertCryptoReceiver(this);
-    if (!isIntegerTypedArray(array)) {
-      throw createDomLikeError(
-        "TypeMismatchError",
-        17,
-        "The data argument must be an integer-type TypedArray"
-      );
-    }
-    if (typeof _cryptoRandomFill === "undefined") {
-      throwUnsupportedCryptoApi("getRandomValues");
-    }
-    if (array.byteLength > 65536) {
-      throw createDomLikeError(
-        "QuotaExceededError",
-        22,
-        `The ArrayBufferView's byte length (${array.byteLength}) exceeds the number of bytes of entropy available via this API (65536)`
-      );
-    }
-    const bytes = new Uint8Array(array.buffer, array.byteOffset, array.byteLength);
-    try {
-      const base64 = _cryptoRandomFill.applySync(void 0, [bytes.byteLength]);
-      const hostBytes = import_buffer2.Buffer.from(base64, "base64");
-      if (hostBytes.byteLength !== bytes.byteLength) {
-        throw new Error("invalid host entropy size");
-      }
-      bytes.set(hostBytes);
-      return array;
-    } catch {
-      throwUnsupportedCryptoApi("getRandomValues");
-    }
-  }
-  randomUUID() {
-    assertCryptoReceiver(this);
-    if (typeof _cryptoRandomUUID === "undefined") {
-      throwUnsupportedCryptoApi("randomUUID");
-    }
-    try {
-      const uuid = _cryptoRandomUUID.applySync(void 0, []);
-      if (typeof uuid !== "string") {
-        throw new Error("invalid host uuid");
-      }
-      return uuid;
-    } catch {
-      throwUnsupportedCryptoApi("randomUUID");
-    }
-  }
-};
-
-var cryptoPolyfillInstance = new SandboxCrypto(kCryptoToken);
-
-var cryptoPolyfill = cryptoPolyfillInstance;
-
-function createBuiltinHash(algorithm) {
-  const chunks = [];
-  return {
-    update(data, encoding) {
-      const buffer = typeof data === "string" ? import_buffer2.Buffer.from(data, encoding || "utf8") : import_buffer2.Buffer.from(data);
-      chunks.push(buffer);
-      return this;
-    },
-    digest(encoding) {
-      if (typeof _cryptoHashDigest === "undefined") {
-        throwUnsupportedCryptoApi("createHash");
-      }
-      const input = chunks.length === 1 ? chunks[0] : import_buffer2.Buffer.concat(chunks);
-      const resultBase64 = _cryptoHashDigest.applySync(void 0, [
-        String(algorithm),
-        input.toString("base64")
-      ]);
-      const result = import_buffer2.Buffer.from(String(resultBase64 || ""), "base64");
-      return encoding ? result.toString(encoding) : result;
-    }
-  };
-}
-
-function toSymmetricKeyBuffer(key) {
-  if (isBuiltinKeyObject(key)) {
-    if (key.type !== "secret") {
-      throw new TypeError("Symmetric crypto operations require a secret KeyObject");
-    }
-    return import_buffer2.Buffer.from(String(key._serialized.raw || ""), "base64");
-  }
-  if (key && typeof key === "object" && key[Symbol.toStringTag] === "CryptoKey" && typeof key._raw === "string") {
-    return import_buffer2.Buffer.from(String(key._raw || ""), "base64");
-  }
-  return typeof key === "string" ? import_buffer2.Buffer.from(key) : toCryptoBuffer(key);
-}
-
-function createBuiltinHmac(algorithm, key) {
-  const chunks = [];
-  const keyBuffer = toSymmetricKeyBuffer(key);
-  return {
-    update(data, encoding) {
-      const buffer = typeof data === "string" ? import_buffer2.Buffer.from(data, encoding || "utf8") : import_buffer2.Buffer.from(data);
-      chunks.push(buffer);
-      return this;
-    },
-    digest(encoding) {
-      if (typeof _cryptoHmacDigest === "undefined") {
-        throwUnsupportedCryptoApi("createHmac");
-      }
-      const input = chunks.length === 1 ? chunks[0] : import_buffer2.Buffer.concat(chunks);
-      const resultBase64 = _cryptoHmacDigest.applySync(void 0, [
-        String(algorithm),
-        keyBuffer.toString("base64"),
-        input.toString("base64")
-      ]);
-      const result = import_buffer2.Buffer.from(String(resultBase64 || ""), "base64");
-      return encoding ? result.toString(encoding) : result;
-    }
-  };
-}
-
-var kBuiltinCryptoKeyObjectToken = /* @__PURE__ */ Symbol("secureExecBuiltinKeyObject");
-
-function isBufferLikeValue(value) {
-  return import_buffer2.Buffer.isBuffer(value) || value instanceof ArrayBuffer || ArrayBuffer.isView(value);
-}
-
-function toCryptoBuffer(value, encoding = void 0) {
-  if (import_buffer2.Buffer.isBuffer(value)) {
-    return import_buffer2.Buffer.from(value);
-  }
-  if (typeof value === "string") {
-    return import_buffer2.Buffer.from(value, encoding || "utf8");
-  }
-  if (value instanceof ArrayBuffer) {
-    return import_buffer2.Buffer.from(new Uint8Array(value));
-  }
-  if (ArrayBuffer.isView(value)) {
-    return import_buffer2.Buffer.from(new Uint8Array(value.buffer, value.byteOffset, value.byteLength));
-  }
-  return import_buffer2.Buffer.from(value ?? []);
-}
-
-function encodeCryptoResult(buffer, encoding = void 0) {
-  return encoding ? buffer.toString(encoding) : buffer;
-}
-
-function isBuiltinKeyObject(value) {
-  return Boolean(value && typeof value === "object" && (value[kBuiltinCryptoKeyObjectToken] === true || value[Symbol.toStringTag] === "KeyObject" && "_serialized" in value));
-}
-
-function serializeBridgeValue(value) {
-  if (isBuiltinKeyObject(value)) {
-    return value._serialized;
-  }
-  if (value && typeof value === "object" && value[Symbol.toStringTag] === "CryptoKey" && "_keyData" in value) {
-    return value._keyData;
-  }
-  if (typeof value === "bigint") {
-    return {
-      __type: "bigint",
-      value: value.toString()
-    };
-  }
-  if (isBufferLikeValue(value)) {
-    return {
-      __type: "buffer",
-      value: toCryptoBuffer(value).toString("base64")
-    };
-  }
-  if (Array.isArray(value)) {
-    return value.map((entry) => serializeBridgeValue(entry));
-  }
-  if (value && typeof value === "object") {
-    const normalized = {};
-    for (const [key, entry] of Object.entries(value)) {
-      if (entry !== void 0) {
-        normalized[key] = serializeBridgeValue(entry);
-      }
-    }
-    return normalized;
-  }
-  return value;
-}
-
-function deserializeBridgeValue(value) {
-  if (Array.isArray(value)) {
-    return value.map((entry) => deserializeBridgeValue(entry));
-  }
-  if (!value || typeof value !== "object") {
-    return value;
-  }
-  if (value.__type === "buffer") {
-    return import_buffer2.Buffer.from(String(value.value || ""), "base64");
-  }
-  if (value.__type === "bigint") {
-    return BigInt(String(value.value || "0"));
-  }
-  if (value.__type === "keyObject") {
-    return createBuiltinKeyObject(value.value);
-  }
-  const normalized = {};
-  for (const [key, entry] of Object.entries(value)) {
-    normalized[key] = deserializeBridgeValue(entry);
-  }
-  return normalized;
-}
-
-function normalizeDirectCryptoKeyInput(key) {
-  if (isBuiltinKeyObject(key)) {
-    return key._serialized;
-  }
-  if (key && typeof key === "object" && key[Symbol.toStringTag] === "CryptoKey" && "_keyData" in key) {
-    return key._keyData;
-  }
-  if (key && typeof key === "object" && !Array.isArray(key) && "key" in key) {
-    const { key: keySource, ...rest } = key;
-    const normalizedSource = normalizeDirectCryptoKeyInput(keySource);
-    if (normalizedSource && typeof normalizedSource === "object" && !Array.isArray(normalizedSource) && ("type" in normalizedSource && ("pem" in normalizedSource || "raw" in normalizedSource))) {
-      return {
-        ...normalizedSource,
-        ...Object.fromEntries(Object.entries(rest).map(([name, value]) => [name, serializeBridgeValue(value)]))
-      };
-    }
-    return {
-      ...Object.fromEntries(Object.entries(rest).map(([name, value]) => [name, serializeBridgeValue(value)])),
-      key: serializeBridgeValue(keySource)
-    };
-  }
-  return serializeBridgeValue(key);
-}
-
-function serializeCryptoKeyInput(key) {
-  return JSON.stringify(normalizeDirectCryptoKeyInput(key));
-}
-
-function serializeOptionalCryptoOptions(options) {
-  return JSON.stringify({
-    hasOptions: options !== void 0,
-    options: options === void 0 ? null : serializeBridgeValue(options)
-  });
-}
-
-function normalizeCryptoAlgorithmName(algorithm) {
-  if (algorithm == null) {
-    return null;
-  }
-  if (typeof algorithm === "string") {
-    return algorithm;
-  }
-  if (typeof algorithm === "object" && algorithm && typeof algorithm.name === "string") {
-    return algorithm.name;
-  }
-  return String(algorithm);
-}
-
-function callCryptoSync(bridge, api, args) {
-  if (typeof bridge === "undefined") {
-    throwUnsupportedCryptoApi(api);
-  }
-  return bridge.applySync(void 0, args);
-}
-
-function decodeGeneratedCryptoValue(value) {
-  if (value && typeof value === "object" && value.kind === "buffer") {
-    return import_buffer2.Buffer.from(String(value.value || ""), "base64");
-  }
-  if (value && typeof value === "object" && value.kind === "string") {
-    return String(value.value || "");
-  }
-  return createBuiltinKeyObject(value);
-}
-
-class BuiltinKeyObject {
-  type;
-  asymmetricKeyType;
-  asymmetricKeyDetails;
-  symmetricKeySize;
-  _serialized;
-  [kBuiltinCryptoKeyObjectToken];
-  constructor(serialized, token) {
-    if (token !== kBuiltinCryptoKeyObjectToken || !serialized || typeof serialized !== "object") {
-      throw createNodeTypeError2("Illegal constructor", ERR_ILLEGAL_CONSTRUCTOR);
-    }
-    this.type = serialized.type;
-    this.asymmetricKeyType = serialized.asymmetricKeyType;
-    this.asymmetricKeyDetails = serialized.asymmetricKeyDetails;
-    this.symmetricKeySize = serialized.raw ? import_buffer2.Buffer.from(String(serialized.raw), "base64").length : void 0;
-    this._serialized = serialized;
-    this[kBuiltinCryptoKeyObjectToken] = true;
-  }
-  export(options = void 0) {
-    if (this.type === "secret") {
-      if (options && options.format === "jwk" && this._serialized.jwk) {
-        return { ...this._serialized.jwk };
-      }
-      return import_buffer2.Buffer.from(String(this._serialized.raw || ""), "base64");
-    }
-    if (options == null || typeof options !== "object") {
-      const error = new TypeError('The "options" argument must be of type object. Received undefined');
-      error.code = "ERR_INVALID_ARG_TYPE";
-      throw error;
-    }
-    if (options.format === "jwk" && this._serialized.jwk) {
-      return { ...this._serialized.jwk };
-    }
-    if (options.format && options.format !== "pem") {
-      throw createUnsupportedCryptoApiError(`crypto.KeyObject.export(${options.format})`);
-    }
-    return String(this._serialized.pem || "");
-  }
-  equals(other) {
-    return isBuiltinKeyObject(other) && JSON.stringify(this._serialized) === JSON.stringify(other._serialized);
-  }
-}
-
-Object.defineProperty(BuiltinKeyObject.prototype, Symbol.toStringTag, {
-  value: "KeyObject",
-  configurable: true
-});
-
-Object.defineProperty(BuiltinKeyObject, Symbol.hasInstance, {
-  value(candidate) {
-    return isBuiltinKeyObject(candidate);
-  },
-  configurable: true
-});
-
-function createBuiltinKeyObject(serialized) {
-  if (isBuiltinKeyObject(serialized)) {
-    return serialized;
-  }
-  return new BuiltinKeyObject(serialized, kBuiltinCryptoKeyObjectToken);
-}
-
-function normalizeCipherOptions(options) {
-  if (!options || typeof options !== "object") {
-    return {};
-  }
-  const normalized = {};
-  if ("aad" in options && options.aad != null) {
-    normalized.aad = toCryptoBuffer(options.aad).toString("base64");
-  }
-  if ("authTag" in options && options.authTag != null) {
-    normalized.authTag = toCryptoBuffer(options.authTag).toString("base64");
-  }
-  if ("authTagLength" in options && options.authTagLength != null) {
-    normalized.authTagLength = Number(options.authTagLength);
-  }
-  if ("autoPadding" in options) {
-    normalized.autoPadding = Boolean(options.autoPadding);
-  }
-  return normalized;
-}
-
-class BuiltinCipherTransform {
-  _mode;
-  _algorithm;
-  _key;
-  _iv;
-  _options;
-  _sessionId;
-  _authTag;
-  constructor(mode, algorithm, key, iv, options = void 0) {
-    this._mode = mode;
-    this._algorithm = String(algorithm);
-    this._key = toSymmetricKeyBuffer(key);
-    this._iv = iv == null ? null : toCryptoBuffer(iv);
-    this._options = normalizeCipherOptions(options);
-    this._sessionId = null;
-    this._authTag = null;
-  }
-  _ensureSession() {
-    if (this._sessionId != null) {
-      return this._sessionId;
-    }
-    this._sessionId = Number(callCryptoSync(_cryptoCipherivCreate, this._mode === "cipher" ? "createCipheriv" : "createDecipheriv", [
-      this._mode,
-      this._algorithm,
-      this._key.toString("base64"),
-      this._iv ? this._iv.toString("base64") : null,
-      Object.keys(this._options).length > 0 ? JSON.stringify(this._options) : null
-    ]));
-    return this._sessionId;
-  }
-  _assertMutable(methodName) {
-    if (this._sessionId != null) {
-      throw createUnsupportedCryptoApiError(`crypto.${methodName} after update()`);
-    }
-  }
-  update(data, inputEncoding = void 0, outputEncoding = void 0) {
-    const chunk = toCryptoBuffer(data, inputEncoding);
-    const resultBase64 = callCryptoSync(_cryptoCipherivUpdate, this._mode === "cipher" ? "createCipheriv" : "createDecipheriv", [
-      this._ensureSession(),
-      chunk.toString("base64")
-    ]);
-    return encodeCryptoResult(import_buffer2.Buffer.from(String(resultBase64 || ""), "base64"), outputEncoding);
-  }
-  final(outputEncoding = void 0) {
-    const response = JSON.parse(String(callCryptoSync(_cryptoCipherivFinal, this._mode === "cipher" ? "createCipheriv" : "createDecipheriv", [this._ensureSession()]) || "{}"));
-    if (response.authTag) {
-      this._authTag = import_buffer2.Buffer.from(String(response.authTag), "base64");
-    }
-    return encodeCryptoResult(import_buffer2.Buffer.from(String(response.data || ""), "base64"), outputEncoding);
-  }
-  setAAD(buffer, options = void 0) {
-    this._assertMutable(this._mode === "cipher" ? "createCipheriv" : "createDecipheriv");
-    this._options.aad = toCryptoBuffer(buffer).toString("base64");
-    if (options && typeof options === "object" && options.authTagLength != null) {
-      this._options.authTagLength = Number(options.authTagLength);
-    }
-    return this;
-  }
-  setAuthTag(buffer) {
-    this._assertMutable("createDecipheriv");
-    this._authTag = toCryptoBuffer(buffer);
-    this._options.authTag = this._authTag.toString("base64");
-    return this;
-  }
-  getAuthTag() {
-    if (!this._authTag) {
-      throw new Error("Invalid state for operation getAuthTag");
-    }
-    return import_buffer2.Buffer.from(this._authTag);
-  }
-  setAutoPadding(autoPadding = true) {
-    this._assertMutable(this._mode === "cipher" ? "createCipheriv" : "createDecipheriv");
-    this._options.autoPadding = Boolean(autoPadding);
-    return this;
-  }
-}
-
-class BuiltinSignContext {
-  _algorithm;
-  _chunks;
-  constructor(algorithm) {
-    this._algorithm = algorithm;
-    this._chunks = [];
-  }
-  update(data, encoding = void 0) {
-    this._chunks.push(toCryptoBuffer(data, encoding));
-    return this;
-  }
-  write(data, encoding = void 0) {
-    this.update(data, encoding);
-    return true;
-  }
-  end(data = void 0, encoding = void 0) {
-    if (data !== void 0) {
-      this.update(data, encoding);
-    }
-    return this;
-  }
-  _inputBuffer() {
-    if (this._chunks.length === 0) {
-      return import_buffer2.Buffer.alloc(0);
-    }
-    return this._chunks.length === 1 ? this._chunks[0] : import_buffer2.Buffer.concat(this._chunks);
-  }
-  sign(key, outputEncoding = void 0) {
-    const resultBase64 = callCryptoSync(_cryptoSign, "sign", [
-      normalizeCryptoAlgorithmName(this._algorithm),
-      this._inputBuffer().toString("base64"),
-      serializeCryptoKeyInput(key)
-    ]);
-    return encodeCryptoResult(import_buffer2.Buffer.from(String(resultBase64 || ""), "base64"), outputEncoding);
-  }
-}
-
-class BuiltinVerifyContext extends BuiltinSignContext {
-  verify(key, signature, signatureEncoding = void 0) {
-    const signatureBuffer = toCryptoBuffer(signature, signatureEncoding);
-    return Boolean(callCryptoSync(_cryptoVerify, "verify", [
-      normalizeCryptoAlgorithmName(this._algorithm),
-      this._inputBuffer().toString("base64"),
-      serializeCryptoKeyInput(key),
-      signatureBuffer.toString("base64")
-    ]));
-  }
-}
-
-function normalizeDiffieHellmanArgs(sizeOrKey, keyEncoding = void 0, generator = void 0, generatorEncoding = void 0) {
-  const args = [];
-  if (typeof sizeOrKey === "string") {
-    args.push(toCryptoBuffer(sizeOrKey, typeof keyEncoding === "string" ? keyEncoding : void 0));
-    if (generator !== void 0) {
-      args.push(typeof generator === "string" ? toCryptoBuffer(generator, typeof generatorEncoding === "string" ? generatorEncoding : void 0) : generator);
-    } else if (typeof keyEncoding === "number" || isBufferLikeValue(keyEncoding)) {
-      args.push(keyEncoding);
-    }
-    return args;
-  }
-  args.push(sizeOrKey);
-  if (generator !== void 0) {
-    args.push(generator);
-  } else if (typeof keyEncoding === "number" || isBufferLikeValue(keyEncoding)) {
-    args.push(keyEncoding);
-  }
-  return args;
-}
-
-const diffieHellmanSessionFinalizer = typeof FinalizationRegistry === "function" ? new FinalizationRegistry((sessionId) => {
-  try {
-    callCryptoSync(_cryptoDiffieHellmanSessionDestroy, "createDiffieHellman", [sessionId]);
-  } catch {
-  }
-}) : null;
-
-class BuiltinDiffieHellmanSession {
-  _sessionId;
-  constructor(request) {
-    this._sessionId = Number(callCryptoSync(_cryptoDiffieHellmanSessionCreate, "createDiffieHellman", [JSON.stringify({
-      type: request.type,
-      name: request.name,
-      args: (request.args || []).map((entry) => serializeBridgeValue(entry))
-    })]));
-    diffieHellmanSessionFinalizer?.register(this, this._sessionId, this);
-  }
-  _destroySession() {
-    if (this._sessionId == null) {
-      return;
-    }
-    const sessionId = this._sessionId;
-    this._sessionId = null;
-    diffieHellmanSessionFinalizer?.unregister(this);
-    callCryptoSync(_cryptoDiffieHellmanSessionDestroy, "createDiffieHellman", [sessionId]);
-  }
-  dispose() {
-    this._destroySession();
-  }
-  [Symbol.dispose || Symbol.for("Symbol.dispose")]() {
-    this._destroySession();
-  }
-  _call(method, args = []) {
-    if (this._sessionId == null) {
-      throw new Error("Diffie-Hellman session has been destroyed");
-    }
-    const response = JSON.parse(String(callCryptoSync(_cryptoDiffieHellmanSessionCall, "createDiffieHellman", [
-      this._sessionId,
-      JSON.stringify({
-        method,
-        args: args.map((entry) => serializeBridgeValue(entry))
-      })
-    ]) || "{}"));
-    return response.hasResult ? deserializeBridgeValue(response.result) : void 0;
-  }
-  get verifyError() {
-    const value = this._call("verifyError");
-    return value == null ? 0 : Number(value);
-  }
-  generateKeys(encoding = void 0) {
-    return encodeCryptoResult(toCryptoBuffer(this._call("generateKeys")), encoding);
-  }
-  computeSecret(otherPublicKey, inputEncoding = void 0, outputEncoding = void 0) {
-    const result = this._call("computeSecret", [toCryptoBuffer(otherPublicKey, inputEncoding)]);
-    return encodeCryptoResult(toCryptoBuffer(result), outputEncoding);
-  }
-  getPrime(encoding = void 0) {
-    return encodeCryptoResult(toCryptoBuffer(this._call("getPrime")), encoding);
-  }
-  getGenerator(encoding = void 0) {
-    return encodeCryptoResult(toCryptoBuffer(this._call("getGenerator")), encoding);
-  }
-  getPublicKey(encoding = void 0) {
-    return encodeCryptoResult(toCryptoBuffer(this._call("getPublicKey")), encoding);
-  }
-  getPrivateKey(encoding = void 0) {
-    return encodeCryptoResult(toCryptoBuffer(this._call("getPrivateKey")), encoding);
-  }
-  setPrivateKey(privateKey, encoding = void 0) {
-    this._call("setPrivateKey", [toCryptoBuffer(privateKey, encoding)]);
-  }
-  setPublicKey(publicKey, encoding = void 0) {
-    this._call("setPublicKey", [toCryptoBuffer(publicKey, encoding)]);
-  }
-}
-
-var builtinCryptoModule = {
-  KeyObject: BuiltinKeyObject,
-  DiffieHellman: BuiltinDiffieHellmanSession,
-  ECDH: BuiltinDiffieHellmanSession,
-  randomFillSync(buffer, offset = 0, size = void 0) {
-    const target = buffer instanceof ArrayBuffer ? new Uint8Array(buffer) : buffer;
-    if (!ArrayBuffer.isView(target)) {
-      throw new TypeError(
-        'The "buffer" argument must be an instance of ArrayBuffer, Buffer, TypedArray, or DataView'
-      );
-    }
-    const start = Number(offset) || 0;
-    if (!Number.isInteger(start) || start < 0 || start > target.byteLength) {
-      throw new RangeError('The value of "offset" is out of range');
-    }
-    const length = size === void 0 ? target.byteLength - start : Number(size);
-    if (!Number.isInteger(length) || length < 0 || start + length > target.byteLength) {
-      throw new RangeError('The value of "size" is out of range');
-    }
-    const view = new Uint8Array(target.buffer, target.byteOffset + start, length);
-    cryptoPolyfill.getRandomValues(view);
-    return buffer;
-  },
-  randomFill(buffer, offset, size, callback) {
-    let start = offset;
-    let length = size;
-    let done = callback;
-    if (typeof start === "function") {
-      done = start;
-      start = 0;
-      length = void 0;
-    } else if (typeof length === "function") {
-      done = length;
-      length = void 0;
-    }
-    if (typeof done !== "function") {
-      throw new TypeError('The "callback" argument must be of type function');
-    }
-    try {
-      const result = builtinCryptoModule.randomFillSync(buffer, start, length);
-      queueMicrotask(() => done(null, result));
-    } catch (error) {
-      queueMicrotask(() => done(error));
-    }
-  },
-  createHash(algorithm) {
-    return createBuiltinHash(algorithm);
-  },
-  createHmac(algorithm, key) {
-    return createBuiltinHmac(algorithm, key);
-  },
-  createCipheriv(algorithm, key, iv, options = void 0) {
-    return new BuiltinCipherTransform("cipher", algorithm, key, iv, options);
-  },
-  createDecipheriv(algorithm, key, iv, options = void 0) {
-    return new BuiltinCipherTransform("decipher", algorithm, key, iv, options);
-  },
-  createSign(algorithm) {
-    return new BuiltinSignContext(algorithm);
-  },
-  createVerify(algorithm) {
-    return new BuiltinVerifyContext(algorithm);
-  },
-  sign(algorithm, data, key) {
-    const signer = new BuiltinSignContext(algorithm);
-    signer.update(data);
-    return signer.sign(key);
-  },
-  verify(algorithm, data, key, signature) {
-    const verifier = new BuiltinVerifyContext(algorithm);
-    verifier.update(data);
-    return verifier.verify(key, signature);
-  },
-  createPrivateKey(key) {
-    const payload = callCryptoSync(_cryptoCreateKeyObject, "createPrivateKey", [
-      "createPrivateKey",
-      serializeCryptoKeyInput(key)
-    ]);
-    return createBuiltinKeyObject(JSON.parse(String(payload || "{}")));
-  },
-  createPublicKey(key) {
-    const payload = callCryptoSync(_cryptoCreateKeyObject, "createPublicKey", [
-      "createPublicKey",
-      serializeCryptoKeyInput(key)
-    ]);
-    return createBuiltinKeyObject(JSON.parse(String(payload || "{}")));
-  },
-  createSecretKey(key) {
-    return createBuiltinKeyObject({
-      type: "secret",
-      raw: toCryptoBuffer(key).toString("base64")
-    });
-  },
-  publicEncrypt(key, buffer) {
-    const payload = callCryptoSync(_cryptoAsymmetricOp, "publicEncrypt", [
-      "publicEncrypt",
-      serializeCryptoKeyInput(key),
-      toCryptoBuffer(buffer).toString("base64")
-    ]);
-    return import_buffer2.Buffer.from(String(payload || ""), "base64");
-  },
-  publicDecrypt(key, buffer) {
-    const payload = callCryptoSync(_cryptoAsymmetricOp, "publicDecrypt", [
-      "publicDecrypt",
-      serializeCryptoKeyInput(key),
-      toCryptoBuffer(buffer).toString("base64")
-    ]);
-    return import_buffer2.Buffer.from(String(payload || ""), "base64");
-  },
-  privateEncrypt(key, buffer) {
-    const payload = callCryptoSync(_cryptoAsymmetricOp, "privateEncrypt", [
-      "privateEncrypt",
-      serializeCryptoKeyInput(key),
-      toCryptoBuffer(buffer).toString("base64")
-    ]);
-    return import_buffer2.Buffer.from(String(payload || ""), "base64");
-  },
-  privateDecrypt(key, buffer) {
-    const payload = callCryptoSync(_cryptoAsymmetricOp, "privateDecrypt", [
-      "privateDecrypt",
-      serializeCryptoKeyInput(key),
-      toCryptoBuffer(buffer).toString("base64")
-    ]);
-    return import_buffer2.Buffer.from(String(payload || ""), "base64");
-  },
-  pbkdf2Sync(password, salt, iterations, keylen, digest) {
-    const payload = callCryptoSync(_cryptoPbkdf2, "pbkdf2Sync", [
-      toCryptoBuffer(password).toString("base64"),
-      toCryptoBuffer(salt).toString("base64"),
-      Number(iterations),
-      Number(keylen),
-      String(digest)
-    ]);
-    return import_buffer2.Buffer.from(String(payload || ""), "base64");
-  },
-  pbkdf2(password, salt, iterations, keylen, digest, callback) {
-    let algorithm = digest;
-    let done = callback;
-    if (typeof algorithm === "function") {
-      done = algorithm;
-      algorithm = "sha1";
-    }
-    if (typeof done !== "function") {
-      throw new TypeError('The "callback" argument must be of type function');
-    }
-    queueMicrotask(() => {
-      try {
-        done(null, builtinCryptoModule.pbkdf2Sync(password, salt, iterations, keylen, algorithm));
-      } catch (error) {
-        done(error);
-      }
-    });
-  },
-  scryptSync(password, salt, keylen, options = void 0) {
-    const payload = callCryptoSync(_cryptoScrypt, "scryptSync", [
-      toCryptoBuffer(password).toString("base64"),
-      toCryptoBuffer(salt).toString("base64"),
-      Number(keylen),
-      JSON.stringify(serializeBridgeValue(options || {}))
-    ]);
-    return import_buffer2.Buffer.from(String(payload || ""), "base64");
-  },
-  scrypt(password, salt, keylen, options, callback) {
-    let normalizedOptions = options;
-    let done = callback;
-    if (typeof normalizedOptions === "function") {
-      done = normalizedOptions;
-      normalizedOptions = void 0;
-    }
-    if (typeof done !== "function") {
-      throw new TypeError('The "callback" argument must be of type function');
-    }
-    queueMicrotask(() => {
-      try {
-        done(null, builtinCryptoModule.scryptSync(password, salt, keylen, normalizedOptions));
-      } catch (error) {
-        done(error);
-      }
-    });
-  },
-  generateKeyPairSync(type, options = void 0) {
-    const payload = JSON.parse(String(callCryptoSync(_cryptoGenerateKeyPairSync, "generateKeyPairSync", [
-      String(type),
-      serializeOptionalCryptoOptions(options)
-    ]) || "{}"));
-    return {
-      publicKey: decodeGeneratedCryptoValue(payload.publicKey),
-      privateKey: decodeGeneratedCryptoValue(payload.privateKey)
-    };
-  },
-  generateKeyPair(type, options, callback) {
-    let normalizedOptions = options;
-    let done = callback;
-    if (typeof normalizedOptions === "function") {
-      done = normalizedOptions;
-      normalizedOptions = void 0;
-    }
-    if (typeof done !== "function") {
-      throw new TypeError('The "callback" argument must be of type function');
-    }
-    queueMicrotask(() => {
-      try {
-        const result = builtinCryptoModule.generateKeyPairSync(type, normalizedOptions);
-        done(null, result.publicKey, result.privateKey);
-      } catch (error) {
-        done(error);
-      }
-    });
-  },
-  generateKeySync(type, options = void 0) {
-    const payload = JSON.parse(String(callCryptoSync(_cryptoGenerateKeySync, "generateKeySync", [
-      String(type),
-      serializeOptionalCryptoOptions(options)
-    ]) || "{}"));
-    return createBuiltinKeyObject(payload);
-  },
-  generatePrimeSync(size, options = void 0) {
-    const payload = JSON.parse(String(callCryptoSync(_cryptoGeneratePrimeSync, "generatePrimeSync", [
-      Number(size),
-      serializeOptionalCryptoOptions(options)
-    ]) || "null"));
-    return deserializeBridgeValue(payload);
-  },
-  generatePrime(size, options, callback) {
-    let normalizedOptions = options;
-    let done = callback;
-    if (typeof normalizedOptions === "function") {
-      done = normalizedOptions;
-      normalizedOptions = void 0;
-    }
-    if (typeof done !== "function") {
-      throw new TypeError('The "callback" argument must be of type function');
-    }
-    queueMicrotask(() => {
-      try {
-        done(null, builtinCryptoModule.generatePrimeSync(size, normalizedOptions));
-      } catch (error) {
-        done(error);
-      }
-    });
-  },
-  diffieHellman(options) {
-    const payload = JSON.parse(String(callCryptoSync(_cryptoDiffieHellman, "diffieHellman", [
-      JSON.stringify(serializeBridgeValue(options))
-    ]) || "null"));
-    return toCryptoBuffer(deserializeBridgeValue(payload));
-  },
-  getDiffieHellman(name) {
-    return new BuiltinDiffieHellmanSession({ type: "group", name: String(name) });
-  },
-  createDiffieHellman(sizeOrKey, keyEncoding = void 0, generator = void 0, generatorEncoding = void 0) {
-    return new BuiltinDiffieHellmanSession({
-      type: "dh",
-      args: normalizeDiffieHellmanArgs(sizeOrKey, keyEncoding, generator, generatorEncoding)
-    });
-  },
-  createECDH(curve) {
-    return new BuiltinDiffieHellmanSession({ type: "ecdh", name: String(curve) });
-  },
-  getFips() {
-    return 0;
-  },
-  getHashes() {
-    return ["md5", "sha1", "sha224", "sha256", "sha384", "sha512"];
-  },
-  getCiphers() {
-    return [
-      "aes-128-cbc",
-      "aes-128-ctr",
-      "aes-128-gcm",
-      "aes-192-cbc",
-      "aes-192-ctr",
-      "aes-192-gcm",
-      "aes-256-cbc",
-      "aes-256-ctr",
-      "aes-256-gcm",
-      "aes128",
-      "aes192",
-      "aes256"
-    ];
-  },
-  getCurves() {
-    return ["prime256v1", "secp256k1", "secp384r1", "secp521r1"];
-  },
-  getRandomValues(array) {
-    return cryptoPolyfill.getRandomValues(array);
-  },
-  randomBytes(size) {
-    const length = Math.max(0, Number(size) || 0);
-    const bytes = new Uint8Array(length);
-    cryptoPolyfill.getRandomValues(bytes);
-    return import_buffer2.Buffer.from(bytes);
-  },
-  randomUUID() {
-    return cryptoPolyfill.randomUUID();
-  },
-  get constants() {
-    return builtinConstantsStdlibModule;
-  },
-  subtle: subtleCrypto,
-  webcrypto: cryptoPolyfill
-};
-export { BuiltinCipherTransform, BuiltinDiffieHellmanSession, BuiltinKeyObject, BuiltinSignContext, BuiltinVerifyContext, ERR_ILLEGAL_CONSTRUCTOR, ERR_INVALID_THIS2, SandboxCrypto, SandboxCryptoKey, SandboxDOMException, SandboxSubtleCrypto, assertCryptoReceiver, assertSubtleReceiver, builtinCryptoModule, callCryptoSync, createBuiltinHash, createBuiltinHmac, createBuiltinKeyObject, createCryptoKey, createDomLikeError, createNodeTypeError2, createUnsupportedCryptoApiError, cryptoPolyfill, cryptoPolyfillInstance, decodeGeneratedCryptoValue, deserializeBridgeValue, diffieHellmanSessionFinalizer, encodeCryptoResult, isBufferLikeValue, isBuiltinKeyObject, isIntegerTypedArray, kBuiltinCryptoKeyObjectToken, kCryptoKeyToken, kCryptoToken, kSubtleToken, normalizeAlgorithm, normalizeBridgeAlgorithm, normalizeCipherOptions, normalizeCryptoAlgorithmName, normalizeDiffieHellmanArgs, normalizeDirectCryptoKeyInput, serializeBridgeValue, serializeCryptoKeyInput, serializeOptionalCryptoOptions, subtleCall, subtleCrypto, throwUnsupportedCryptoApi, toArrayBuffer, toBase64, toCryptoBuffer, toSymmetricKeyBuffer };
diff --git a/packages/build-tools/bridge-src/builtins/dgram.ts b/packages/build-tools/bridge-src/builtins/dgram.ts
deleted file mode 100644
index 087b83fff..000000000
--- a/packages/build-tools/bridge-src/builtins/dgram.ts
+++ /dev/null
@@ -1,1024 +0,0 @@
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { createErrorWithCode, createInvalidArgTypeError2, createTypeErrorWithCode, formatReceivedType } from "./http.js";
-import { NET_BRIDGE_POLL_DELAY_MS, NET_BRIDGE_TIMEOUT_SENTINEL, countNetBridgeMetric, createFunctionArgTypeError, createSocketBadPortError, isIPv4String, isIPv6String, isValidTcpPort } from "./net.js";
-import { tlsModule } from "./tls.js";
-
-var DGRAM_HANDLE_PREFIX = "dgram-socket:";
-
-var registeredDgramSocketsByPort = /* @__PURE__ */ new Map();
-
-var registeredDgramSocketsById = /* @__PURE__ */ new Map();
-
-function registerDgramSocket(socket) {
-  if (socket?._socketId) {
-    registeredDgramSocketsById.set(socket._socketId, socket);
-  }
-  const port = socket?._localPort;
-  if (typeof port !== "number") {
-    return;
-  }
-  let sockets = registeredDgramSocketsByPort.get(port);
-  if (!sockets) {
-    sockets = /* @__PURE__ */ new Set();
-    registeredDgramSocketsByPort.set(port, sockets);
-  }
-  sockets.add(socket);
-}
-
-function unregisterDgramSocket(socket) {
-  if (socket?._socketId && registeredDgramSocketsById.get(socket._socketId) === socket) {
-    registeredDgramSocketsById.delete(socket._socketId);
-  }
-  const port = socket?._localPort;
-  if (typeof port !== "number") {
-    return;
-  }
-  const sockets = registeredDgramSocketsByPort.get(port);
-  if (!sockets) {
-    return;
-  }
-  sockets.delete(socket);
-  if (sockets.size === 0) {
-    registeredDgramSocketsByPort.delete(port);
-  }
-}
-
-function isDgramLoopbackAddress(address) {
-  return address === "127.0.0.1" || address === "::1" || address === "localhost";
-}
-
-function wakeDgramSocketReads(socket) {
-  countNetBridgeMetric("dgramWakeAttempts");
-  if (!socket || socket._closed || !socket._bound) {
-    countNetBridgeMetric("dgramWakeInvalidTargets");
-    return;
-  }
-  if (socket._receiveLoopRunning) {
-    countNetBridgeMetric("dgramWakeAlreadyRunning");
-    socket._pendingReceiveWake = true;
-    return;
-  }
-  if (!socket._receivePollTimer) {
-    countNetBridgeMetric("dgramWakeNoTimer");
-    socket._pendingReceiveWake = true;
-    queueMicrotask(() => {
-      if (!socket._closed && socket._bound && socket._pendingReceiveWake && !socket._receiveLoopRunning) {
-        socket._pendingReceiveWake = false;
-        socket._nextReceivePumpOrigin = "eventWake";
-        void socket._pumpMessages();
-      }
-    });
-    return;
-  }
-  clearTimeout(socket._receivePollTimer);
-  socket._receivePollTimer = null;
-  countNetBridgeMetric("dgramEventWakeups");
-  queueMicrotask(() => {
-    if (!socket._closed && socket._bound) {
-      socket._nextReceivePumpOrigin = "eventWake";
-      void socket._pumpMessages();
-    }
-  });
-}
-
-function createBadDgramSocketTypeError() {
-  return createTypeErrorWithCode(
-    "Bad socket type specified. Valid types are: udp4, udp6",
-    "ERR_SOCKET_BAD_TYPE"
-  );
-}
-
-function createDgramAlreadyBoundError() {
-  const error = new Error("Socket is already bound");
-  error.code = "ERR_SOCKET_ALREADY_BOUND";
-  return error;
-}
-
-function createDgramAddressError() {
-  return new Error("getsockname EBADF");
-}
-
-function createDgramArgTypeError(argumentName, expectedType, value) {
-  return createTypeErrorWithCode(
-    `The "${argumentName}" argument must be of type ${expectedType}. Received ${formatReceivedType(value)}`,
-    "ERR_INVALID_ARG_TYPE"
-  );
-}
-
-function createDgramMissingArgError(argumentName) {
-  return createTypeErrorWithCode(
-    `The "${argumentName}" argument must be specified`,
-    "ERR_MISSING_ARGS"
-  );
-}
-
-function createDgramNotRunningError() {
-  return createErrorWithCode("Not running", "ERR_SOCKET_DGRAM_NOT_RUNNING");
-}
-
-function getDgramErrno(code) {
-  switch (code) {
-    case "EBADF":
-      return -9;
-    case "EINVAL":
-      return -22;
-    case "EADDRNOTAVAIL":
-      return -99;
-    case "ENOPROTOOPT":
-      return -92;
-  }
-}
-
-function createDgramSyscallError(syscall, code) {
-  const error = new Error(`${syscall} ${code}`);
-  error.code = code;
-  error.errno = getDgramErrno(code);
-  error.syscall = syscall;
-  return error;
-}
-
-function createDgramTtlArgTypeError(value) {
-  return createTypeErrorWithCode(
-    `The "ttl" argument must be of type number. Received ${formatReceivedType(value)}`,
-    "ERR_INVALID_ARG_TYPE"
-  );
-}
-
-function createDgramBufferSizeTypeError() {
-  return createTypeErrorWithCode(
-    "Buffer size must be a positive integer",
-    "ERR_SOCKET_BAD_BUFFER_SIZE"
-  );
-}
-
-function createDgramBufferSizeSystemError(which, code) {
-  const syscall = `uv_${which}_buffer_size`;
-  const info = {
-    errno: code === "EBADF" ? -9 : -22,
-    code,
-    message: code === "EBADF" ? "bad file descriptor" : "invalid argument",
-    syscall
-  };
-  const error = new Error(
-    `Could not get or set buffer size: ${syscall} returned ${code} (${info.message})`
-  );
-  error.name = "SystemError [ERR_SOCKET_BUFFER_SIZE]";
-  error.code = "ERR_SOCKET_BUFFER_SIZE";
-  error.info = info;
-  let errno2 = info.errno;
-  let syscallValue = syscall;
-  Object.defineProperty(error, "errno", {
-    enumerable: true,
-    configurable: true,
-    get() {
-      return errno2;
-    },
-    set(value) {
-      errno2 = value;
-    }
-  });
-  Object.defineProperty(error, "syscall", {
-    enumerable: true,
-    configurable: true,
-    get() {
-      return syscallValue;
-    },
-    set(value) {
-      syscallValue = value;
-    }
-  });
-  return error;
-}
-
-function getPlatformDgramBufferSize(size) {
-  if (size <= 0) {
-    return size;
-  }
-  return process.platform === "linux" ? size * 2 : size;
-}
-
-function normalizeDgramTtlValue(value, syscall) {
-  if (typeof value !== "number") {
-    throw createDgramTtlArgTypeError(value);
-  }
-  if (!Number.isInteger(value) || value <= 0 || value >= 256) {
-    throw createDgramSyscallError(syscall, "EINVAL");
-  }
-  return value;
-}
-
-function isIPv4MulticastAddress(address) {
-  if (!isIPv4String(address)) {
-    return false;
-  }
-  const first = Number(address.split(".")[0]);
-  return first >= 224 && first <= 239;
-}
-
-function isIPv4UnicastAddress(address) {
-  return isIPv4String(address) && !isIPv4MulticastAddress(address) && address !== "255.255.255.255";
-}
-
-function isIPv6MulticastAddress(address) {
-  const zoneIndex = address.indexOf("%");
-  const normalized = zoneIndex === -1 ? address : address.slice(0, zoneIndex);
-  return isIPv6String(address) && normalized.toLowerCase().startsWith("ff");
-}
-
-function validateDgramMulticastAddress(type, syscall, address) {
-  if (typeof address !== "string") {
-    throw createDgramArgTypeError(
-      syscall === "addSourceSpecificMembership" || syscall === "dropSourceSpecificMembership" ? "groupAddress" : "multicastAddress",
-      "string",
-      address
-    );
-  }
-  const isValid = type === "udp6" ? isIPv6MulticastAddress(address) : isIPv4MulticastAddress(address);
-  if (!isValid) {
-    throw createDgramSyscallError(syscall, "EINVAL");
-  }
-  return address;
-}
-
-function validateDgramSourceAddress(type, syscall, address) {
-  if (typeof address !== "string") {
-    throw createDgramArgTypeError("sourceAddress", "string", address);
-  }
-  const isValid = type === "udp6" ? isIPv6String(address) && !isIPv6MulticastAddress(address) : isIPv4UnicastAddress(address);
-  if (!isValid) {
-    throw createDgramSyscallError(syscall, "EINVAL");
-  }
-  return address;
-}
-
-function normalizeDgramSocketType(value) {
-  if (value === "udp4" || value === "udp6") {
-    return value;
-  }
-  throw createBadDgramSocketTypeError();
-}
-
-function normalizeDgramSocketOptions(options) {
-  if (typeof options === "string") {
-    return { type: normalizeDgramSocketType(options) };
-  }
-  if (!options || typeof options !== "object" || Array.isArray(options)) {
-    throw createBadDgramSocketTypeError();
-  }
-  const typedOptions = options;
-  const result = {
-    type: normalizeDgramSocketType(typedOptions.type)
-  };
-  if (typedOptions.recvBufferSize !== void 0) {
-    if (typeof typedOptions.recvBufferSize !== "number") {
-      throw createInvalidArgTypeError2(
-        "options.recvBufferSize",
-        "number",
-        typedOptions.recvBufferSize
-      );
-    }
-    result.recvBufferSize = typedOptions.recvBufferSize;
-  }
-  if (typedOptions.sendBufferSize !== void 0) {
-    if (typeof typedOptions.sendBufferSize !== "number") {
-      throw createInvalidArgTypeError2(
-        "options.sendBufferSize",
-        "number",
-        typedOptions.sendBufferSize
-      );
-    }
-    result.sendBufferSize = typedOptions.sendBufferSize;
-  }
-  return result;
-}
-
-function normalizeDgramAddressValue(address, type, defaultAddress) {
-  if (address === void 0 || address === null || address === "") {
-    return defaultAddress;
-  }
-  if (typeof address !== "string") {
-    throw createDgramArgTypeError("address", "string", address);
-  }
-  if (address === "localhost") {
-    return type === "udp6" ? "::1" : "127.0.0.1";
-  }
-  return address;
-}
-
-function normalizeDgramPortValue(port) {
-  if (typeof port !== "number") {
-    throw createDgramArgTypeError("port", "number", port);
-  }
-  if (!isValidTcpPort(port)) {
-    throw createSocketBadPortError(port);
-  }
-  return port;
-}
-
-function createDgramMessageBuffer(value) {
-  if (typeof value === "string") {
-    return Buffer.from(value);
-  }
-  if (Buffer.isBuffer(value)) {
-    return Buffer.from(value);
-  }
-  if (ArrayBuffer.isView(value)) {
-    return Buffer.from(value.buffer, value.byteOffset, value.byteLength);
-  }
-  throw createDgramArgTypeError("msg", "string or Buffer or Uint8Array or DataView", value);
-}
-
-function createDgramMessageListBuffer(value) {
-  if (Array.isArray(value)) {
-    return Buffer.concat(value.map((entry) => createDgramMessageBuffer(entry)));
-  }
-  return createDgramMessageBuffer(value);
-}
-
-function normalizeDgramBridgeResult(value) {
-  if (typeof value !== "string") {
-    return value;
-  }
-  try {
-    return JSON.parse(value);
-  } catch {
-    return value;
-  }
-}
-
-function decodeDgramBridgeBytes(value) {
-  if (Buffer.isBuffer(value)) {
-    return Buffer.from(value);
-  }
-  if (value instanceof Uint8Array) {
-    return Buffer.from(value);
-  }
-  if (typeof value === "string") {
-    return Buffer.from(value, "base64");
-  }
-  if (value && typeof value === "object") {
-    if (value.__type === "Buffer" && typeof value.data === "string") {
-      return Buffer.from(value.data, "base64");
-    }
-    if (value.__agentOSType === "bytes" && typeof value.base64 === "string") {
-      return Buffer.from(value.base64, "base64");
-    }
-  }
-  return Buffer.alloc(0);
-}
-
-function normalizeDgramBindArgs(args, type) {
-  let port;
-  let address;
-  let callback;
-  if (typeof args[0] === "function") {
-    callback = args[0];
-  } else if (args[0] && typeof args[0] === "object" && !Array.isArray(args[0])) {
-    const options = args[0];
-    port = options.port;
-    address = options.address;
-    callback = args[1];
-  } else {
-    port = args[0];
-    if (typeof args[1] === "function") {
-      callback = args[1];
-    } else {
-      address = args[1];
-      callback = args[2];
-    }
-  }
-  if (callback !== void 0 && typeof callback !== "function") {
-    throw createFunctionArgTypeError("callback", callback);
-  }
-  return {
-    port: port === void 0 ? 0 : normalizeDgramPortValue(port),
-    address: normalizeDgramAddressValue(
-      address,
-      type,
-      type === "udp6" ? "::" : "0.0.0.0"
-    ),
-    callback
-  };
-}
-
-function normalizeDgramSendArgs(args, type) {
-  if (args.length === 0) {
-    throw createDgramArgTypeError("msg", "string or Buffer or Uint8Array or DataView", void 0);
-  }
-  const message = args[0];
-  const hasOffsetLength = typeof args[1] === "number" && typeof args[2] === "number" && args.length >= 4;
-  if (hasOffsetLength) {
-    const source = createDgramMessageBuffer(message);
-    const offset = args[1];
-    const length = args[2];
-    const callback2 = typeof args[4] === "function" ? args[4] : args[5];
-    if (callback2 !== void 0 && typeof callback2 !== "function") {
-      throw createFunctionArgTypeError("callback", callback2);
-    }
-    return {
-      data: Buffer.from(source.subarray(offset, offset + length)),
-      port: normalizeDgramPortValue(args[3]),
-      address: normalizeDgramAddressValue(
-        typeof args[4] === "function" ? void 0 : args[4],
-        type,
-        type === "udp6" ? "::1" : "127.0.0.1"
-      ),
-      callback: callback2
-    };
-  }
-  const callback = typeof args[2] === "function" ? args[2] : args[3];
-  if (callback !== void 0 && typeof callback !== "function") {
-    throw createFunctionArgTypeError("callback", callback);
-  }
-  return {
-    data: createDgramMessageListBuffer(message),
-    port: normalizeDgramPortValue(args[1]),
-    address: normalizeDgramAddressValue(
-      typeof args[2] === "function" ? void 0 : args[2],
-      type,
-      type === "udp6" ? "::1" : "127.0.0.1"
-    ),
-    callback
-  };
-}
-
-var DgramSocket = class {
-  _type;
-  _socketId;
-  _listeners = {};
-  _onceListeners = {};
-  _bindPromise = null;
-  _receiveLoopRunning = false;
-  _receivePollTimer = null;
-  _pendingReceiveWake = false;
-  _nextReceivePumpOrigin = null;
-  _refed = true;
-  _closed = false;
-  _bound = false;
-  _handleRefId = null;
-  _localAddress;
-  _localPort;
-  _localFamily;
-  _recvBufferSize;
-  _sendBufferSize;
-  _memberships = /* @__PURE__ */ new Set();
-  _multicastInterface;
-  _broadcast = false;
-  _multicastLoopback = 1;
-  _multicastTtl = 1;
-  _ttl = 64;
-  constructor(optionsOrType, listener) {
-    if (typeof _dgramSocketCreateRaw === "undefined") {
-      throw new Error("dgram.createSocket is not supported in sandbox");
-    }
-    const options = normalizeDgramSocketOptions(optionsOrType);
-    this._type = options.type;
-    const result = normalizeDgramBridgeResult(
-      _dgramSocketCreateRaw.applySync(void 0, [{ type: this._type }])
-    );
-    this._socketId = String(result?.socketId ?? result);
-    if (listener) {
-      this.on("message", listener);
-    }
-    if (options.recvBufferSize !== void 0) {
-      this._setBufferSize("recv", options.recvBufferSize, false);
-    }
-    if (options.sendBufferSize !== void 0) {
-      this._setBufferSize("send", options.sendBufferSize, false);
-    }
-  }
-  bind(...args) {
-    const { port, address, callback } = normalizeDgramBindArgs(args, this._type);
-    void this._bindInternal(port, address, callback);
-    return this;
-  }
-  send(...args) {
-    const { data, port, address, callback } = normalizeDgramSendArgs(args, this._type);
-    void this._sendInternal(data, port, address, callback);
-  }
-  sendto(...args) {
-    this.send(...args);
-  }
-  address() {
-    if (typeof _dgramSocketAddressRaw === "undefined") {
-      throw createDgramAddressError();
-    }
-    try {
-      return normalizeDgramBridgeResult(
-        _dgramSocketAddressRaw.applySync(void 0, [this._socketId])
-      );
-    } catch {
-      throw createDgramAddressError();
-    }
-  }
-  close(callback) {
-    if (callback !== void 0 && typeof callback !== "function") {
-      throw createFunctionArgTypeError("callback", callback);
-    }
-    if (callback) {
-      this.once("close", callback);
-    }
-    if (this._closed) {
-      return this;
-    }
-    this._closed = true;
-    unregisterDgramSocket(this);
-    this._bound = false;
-    this._clearReceivePollTimer();
-    this._syncHandleRef();
-    if (typeof _dgramSocketCloseRaw === "undefined") {
-      queueMicrotask(() => {
-        this._emit("close");
-      });
-      return this;
-    }
-    try {
-      _dgramSocketCloseRaw.applySyncPromise(void 0, [this._socketId]);
-    } finally {
-      queueMicrotask(() => {
-        this._emit("close");
-      });
-    }
-    return this;
-  }
-  ref() {
-    this._refed = true;
-    this._syncHandleRef();
-    if (this._receivePollTimer && typeof this._receivePollTimer.ref === "function") {
-      this._receivePollTimer.ref();
-    }
-    if (this._bound && !this._closed && !this._receiveLoopRunning) {
-      void this._pumpMessages();
-    }
-    return this;
-  }
-  unref() {
-    this._refed = false;
-    this._syncHandleRef();
-    if (this._receivePollTimer && typeof this._receivePollTimer.unref === "function") {
-      this._receivePollTimer.unref();
-    }
-    return this;
-  }
-  setRecvBufferSize(size) {
-    this._setBufferSize("recv", size);
-  }
-  setSendBufferSize(size) {
-    this._setBufferSize("send", size);
-  }
-  getRecvBufferSize() {
-    return this._getBufferSize("recv");
-  }
-  getSendBufferSize() {
-    return this._getBufferSize("send");
-  }
-  setBroadcast(flag) {
-    this._ensureBoundForSocketOption("setBroadcast");
-    this._broadcast = Boolean(flag);
-  }
-  setTTL(ttl) {
-    this._ensureBoundForSocketOption("setTTL");
-    this._ttl = normalizeDgramTtlValue(ttl, "setTTL");
-    return this._ttl;
-  }
-  setMulticastTTL(ttl) {
-    this._ensureBoundForSocketOption("setMulticastTTL");
-    this._multicastTtl = normalizeDgramTtlValue(ttl, "setMulticastTTL");
-    return this._multicastTtl;
-  }
-  setMulticastLoopback(flag) {
-    this._ensureBoundForSocketOption("setMulticastLoopback");
-    this._multicastLoopback = Number(flag);
-    return this._multicastLoopback;
-  }
-  addMembership(multicastAddress, multicastInterface) {
-    if (multicastAddress === void 0) {
-      throw createDgramMissingArgError("multicastAddress");
-    }
-    if (this._closed) {
-      throw createDgramNotRunningError();
-    }
-    const groupAddress = validateDgramMulticastAddress(
-      this._type,
-      "addMembership",
-      multicastAddress
-    );
-    if (multicastInterface !== void 0 && typeof multicastInterface !== "string") {
-      throw createDgramArgTypeError("multicastInterface", "string", multicastInterface);
-    }
-    this._memberships.add(`${groupAddress}|${multicastInterface ?? ""}`);
-  }
-  dropMembership(multicastAddress, multicastInterface) {
-    if (multicastAddress === void 0) {
-      throw createDgramMissingArgError("multicastAddress");
-    }
-    if (this._closed) {
-      throw createDgramNotRunningError();
-    }
-    const groupAddress = validateDgramMulticastAddress(
-      this._type,
-      "dropMembership",
-      multicastAddress
-    );
-    if (multicastInterface !== void 0 && typeof multicastInterface !== "string") {
-      throw createDgramArgTypeError("multicastInterface", "string", multicastInterface);
-    }
-    const membershipKey = `${groupAddress}|${multicastInterface ?? ""}`;
-    if (!this._memberships.has(membershipKey)) {
-      throw createDgramSyscallError("dropMembership", "EADDRNOTAVAIL");
-    }
-    this._memberships.delete(membershipKey);
-  }
-  addSourceSpecificMembership(sourceAddress, groupAddress, multicastInterface) {
-    if (this._closed) {
-      throw createDgramNotRunningError();
-    }
-    if (typeof sourceAddress !== "string") {
-      throw createDgramArgTypeError("sourceAddress", "string", sourceAddress);
-    }
-    if (typeof groupAddress !== "string") {
-      throw createDgramArgTypeError("groupAddress", "string", groupAddress);
-    }
-    const validatedSource = validateDgramSourceAddress(
-      this._type,
-      "addSourceSpecificMembership",
-      sourceAddress
-    );
-    const validatedGroup = validateDgramMulticastAddress(
-      this._type,
-      "addSourceSpecificMembership",
-      groupAddress
-    );
-    if (multicastInterface !== void 0 && typeof multicastInterface !== "string") {
-      throw createDgramArgTypeError("multicastInterface", "string", multicastInterface);
-    }
-    this._memberships.add(`${validatedSource}>${validatedGroup}|${multicastInterface ?? ""}`);
-  }
-  dropSourceSpecificMembership(sourceAddress, groupAddress, multicastInterface) {
-    if (this._closed) {
-      throw createDgramNotRunningError();
-    }
-    if (typeof sourceAddress !== "string") {
-      throw createDgramArgTypeError("sourceAddress", "string", sourceAddress);
-    }
-    if (typeof groupAddress !== "string") {
-      throw createDgramArgTypeError("groupAddress", "string", groupAddress);
-    }
-    const validatedSource = validateDgramSourceAddress(
-      this._type,
-      "dropSourceSpecificMembership",
-      sourceAddress
-    );
-    const validatedGroup = validateDgramMulticastAddress(
-      this._type,
-      "dropSourceSpecificMembership",
-      groupAddress
-    );
-    if (multicastInterface !== void 0 && typeof multicastInterface !== "string") {
-      throw createDgramArgTypeError("multicastInterface", "string", multicastInterface);
-    }
-    const membershipKey = `${validatedSource}>${validatedGroup}|${multicastInterface ?? ""}`;
-    if (!this._memberships.has(membershipKey)) {
-      throw createDgramSyscallError("dropSourceSpecificMembership", "EADDRNOTAVAIL");
-    }
-    this._memberships.delete(membershipKey);
-  }
-  setMulticastInterface(interfaceAddress) {
-    if (typeof interfaceAddress !== "string") {
-      throw createDgramArgTypeError("interfaceAddress", "string", interfaceAddress);
-    }
-    if (this._closed) {
-      throw createDgramNotRunningError();
-    }
-    this._ensureBoundForSocketOption("setMulticastInterface");
-    if (this._type === "udp4") {
-      if (interfaceAddress === "0.0.0.0") {
-        this._multicastInterface = interfaceAddress;
-        return;
-      }
-      if (!isIPv4String(interfaceAddress)) {
-        throw createDgramSyscallError("setMulticastInterface", "ENOPROTOOPT");
-      }
-      if (!isIPv4UnicastAddress(interfaceAddress)) {
-        throw createDgramSyscallError("setMulticastInterface", "EADDRNOTAVAIL");
-      }
-      this._multicastInterface = interfaceAddress;
-      return;
-    }
-    if (interfaceAddress === "" || interfaceAddress === "undefined" || !isIPv6String(interfaceAddress)) {
-      throw createDgramSyscallError("setMulticastInterface", "EINVAL");
-    }
-    this._multicastInterface = interfaceAddress;
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    return this;
-  }
-  addListener(event, listener) {
-    return this.on(event, listener);
-  }
-  once(event, listener) {
-    if (!this._onceListeners[event]) this._onceListeners[event] = [];
-    this._onceListeners[event].push(listener);
-    return this;
-  }
-  removeListener(event, listener) {
-    const listeners = this._listeners[event];
-    if (listeners) {
-      const index = listeners.indexOf(listener);
-      if (index >= 0) listeners.splice(index, 1);
-    }
-    const onceListeners = this._onceListeners[event];
-    if (onceListeners) {
-      const index = onceListeners.indexOf(listener);
-      if (index >= 0) onceListeners.splice(index, 1);
-    }
-    return this;
-  }
-  off(event, listener) {
-    return this.removeListener(event, listener);
-  }
-  emit(event, ...args) {
-    return this._emit(event, ...args);
-  }
-  async _bindInternal(port, address, callback) {
-    if (this._closed) {
-      return;
-    }
-    if (this._bound || this._bindPromise) {
-      throw createDgramAlreadyBoundError();
-    }
-    if (typeof _dgramSocketBindRaw === "undefined") {
-      throw new Error("dgram.bind is not supported in sandbox");
-    }
-    this._bindPromise = (async () => {
-      try {
-        const result = normalizeDgramBridgeResult(_dgramSocketBindRaw.applySyncPromise(void 0, [
-          this._socketId,
-          { port, address }
-        ]));
-        this._applyBoundAddress(result);
-        this._bound = true;
-        registerDgramSocket(this);
-        this._applyInitialBufferSizes();
-        this._syncHandleRef();
-        queueMicrotask(() => {
-          if (this._closed) {
-            return;
-          }
-          this._emit("listening");
-          callback?.call(this);
-          this._nextReceivePumpOrigin = "bind";
-          void this._pumpMessages();
-        });
-      } catch (error) {
-        queueMicrotask(() => {
-          this._emit("error", error);
-        });
-        throw error;
-      } finally {
-        this._bindPromise = null;
-      }
-    })();
-    return this._bindPromise;
-  }
-  async _ensureBound() {
-    if (this._bound) {
-      return;
-    }
-    if (this._bindPromise) {
-      await this._bindPromise;
-      return;
-    }
-    await this._bindInternal(0, this._type === "udp6" ? "::" : "0.0.0.0");
-  }
-  async _sendInternal(data, port, address, callback) {
-    try {
-      await this._ensureBound();
-      if (this._closed || typeof _dgramSocketSendRaw === "undefined") {
-        return;
-      }
-      const result = normalizeDgramBridgeResult(_dgramSocketSendRaw.applySyncPromise(void 0, [
-        this._socketId,
-        data,
-        { port, address }
-      ]));
-      this._applyBoundAddress(result);
-      if (isDgramLoopbackAddress(address)) {
-        const sockets = registeredDgramSocketsByPort.get(port);
-        if (sockets) {
-          countNetBridgeMetric("dgramWakeLoopbackHits");
-          for (const socket of sockets) {
-            wakeDgramSocketReads(socket);
-          }
-        } else {
-          countNetBridgeMetric("dgramWakeLoopbackMisses");
-        }
-      }
-      if (callback) {
-        queueMicrotask(() => {
-          callback(null, typeof result?.bytes === "number" ? result.bytes : data.length);
-        });
-      }
-    } catch (error) {
-      if (callback) {
-        queueMicrotask(() => {
-          callback(error);
-        });
-        return;
-      }
-      queueMicrotask(() => {
-        this._emit("error", error);
-      });
-    }
-  }
-  async _pumpMessages() {
-    if (this._receiveLoopRunning || this._closed || !this._bound) {
-      return;
-    }
-    if (typeof _dgramSocketRecvRaw === "undefined") {
-      return;
-    }
-    const pumpOrigin = this._nextReceivePumpOrigin;
-    this._nextReceivePumpOrigin = null;
-    const waitMs = pumpOrigin === "timer" ? NET_BRIDGE_POLL_DELAY_MS : 0;
-    this._receiveLoopRunning = true;
-    try {
-      while (!this._closed && this._bound) {
-        const payload = normalizeDgramBridgeResult(
-          _dgramSocketRecvRaw.applySync(void 0, [this._socketId, waitMs])
-        );
-        if (payload === NET_BRIDGE_TIMEOUT_SENTINEL || !payload) {
-          if (this._pendingReceiveWake) {
-            this._pendingReceiveWake = false;
-            this._nextReceivePumpOrigin = "eventWake";
-            continue;
-          }
-          this._receivePollTimer = setTimeout(() => {
-            this._receivePollTimer = null;
-            this._nextReceivePumpOrigin = "timer";
-            void this._pumpMessages();
-          }, NET_BRIDGE_POLL_DELAY_MS);
-          if (!this._refed && typeof this._receivePollTimer.unref === "function") {
-            this._receivePollTimer.unref();
-          }
-          return;
-        }
-        if (payload.type === "message") {
-          const message = decodeDgramBridgeBytes(payload.data);
-          this._emit("message", message, {
-            address: payload.remoteAddress,
-            family: payload.remoteFamily ?? socketFamilyForAddress(payload.remoteAddress),
-            port: payload.remotePort,
-            size: message.length
-          });
-          continue;
-        }
-        if (payload.type === "error") {
-          const error = new Error(
-            typeof payload.message === "string" ? payload.message : "secure-exec dgram socket error"
-          );
-          if (typeof payload.code === "string" && payload.code.length > 0) {
-            error.code = payload.code;
-          }
-          this._emit("error", error);
-        }
-      }
-    } catch (error) {
-      this._emit("error", error);
-    } finally {
-      this._receiveLoopRunning = false;
-      if (this._pendingReceiveWake && !this._closed && this._bound) {
-        this._pendingReceiveWake = false;
-        this._nextReceivePumpOrigin = "eventWake";
-        queueMicrotask(() => {
-          if (!this._closed && this._bound) {
-            void this._pumpMessages();
-          }
-        });
-      }
-    }
-  }
-  _applyBoundAddress(info) {
-    if (!info || typeof info !== "object") {
-      return;
-    }
-    const port = typeof info.localPort === "number" ? info.localPort : info.port;
-    if (typeof port === "number") {
-      this._localPort = port;
-    }
-    const address = typeof info.localAddress === "string" ? info.localAddress : info.address;
-    if (typeof address === "string") {
-      this._localAddress = address;
-    }
-    const family = typeof info.localFamily === "string" ? info.localFamily : info.family;
-    if (typeof family === "string") {
-      this._localFamily = family;
-    }
-  }
-  _clearReceivePollTimer() {
-    if (this._receivePollTimer) {
-      clearTimeout(this._receivePollTimer);
-      this._receivePollTimer = null;
-    }
-  }
-  _ensureBoundForSocketOption(syscall) {
-    if (!this._bound || this._closed) {
-      throw createDgramSyscallError(syscall, "EBADF");
-    }
-  }
-  _setBufferSize(which, size, requireRunning = true) {
-    if (!Number.isInteger(size) || size <= 0 || !Number.isFinite(size)) {
-      throw createDgramBufferSizeTypeError();
-    }
-    if (size > 2147483647) {
-      throw createDgramBufferSizeSystemError(which, "EINVAL");
-    }
-    if (requireRunning && (!this._bound || this._closed)) {
-      throw createDgramBufferSizeSystemError(which, "EBADF");
-    }
-    if (typeof _dgramSocketSetBufferSizeRaw !== "undefined" && this._bound && !this._closed) {
-      _dgramSocketSetBufferSizeRaw.applySync(void 0, [this._socketId, which, size]);
-    }
-    if (which === "recv") {
-      this._recvBufferSize = size;
-      return;
-    }
-    this._sendBufferSize = size;
-  }
-  _getBufferSize(which) {
-    if (!this._bound || this._closed) {
-      throw createDgramBufferSizeSystemError(which, "EBADF");
-    }
-    const fallback = which === "recv" ? this._recvBufferSize ?? 0 : this._sendBufferSize ?? 0;
-    if (typeof _dgramSocketGetBufferSizeRaw === "undefined") {
-      return getPlatformDgramBufferSize(fallback);
-    }
-    const rawSize = _dgramSocketGetBufferSizeRaw.applySync(void 0, [this._socketId, which]);
-    return getPlatformDgramBufferSize(rawSize > 0 ? rawSize : fallback);
-  }
-  _applyInitialBufferSizes() {
-    if (this._recvBufferSize !== void 0) {
-      this._setBufferSize("recv", this._recvBufferSize);
-    }
-    if (this._sendBufferSize !== void 0) {
-      this._setBufferSize("send", this._sendBufferSize);
-    }
-  }
-  _syncHandleRef() {
-    if (!this._bound || this._closed || !this._refed) {
-      if (this._handleRefId && typeof _unregisterHandle === "function") {
-        _unregisterHandle(this._handleRefId);
-      }
-      this._handleRefId = null;
-      return;
-    }
-    const nextHandleId = `${DGRAM_HANDLE_PREFIX}${this._socketId}`;
-    if (this._handleRefId === nextHandleId) {
-      return;
-    }
-    if (this._handleRefId && typeof _unregisterHandle === "function") {
-      _unregisterHandle(this._handleRefId);
-    }
-    this._handleRefId = nextHandleId;
-    if (typeof _registerHandle === "function") {
-      _registerHandle(this._handleRefId, "dgram socket");
-    }
-  }
-  _emit(event, ...args) {
-    let handled = false;
-    const listeners = this._listeners[event];
-    if (listeners) {
-      for (const listener of [...listeners]) {
-        listener(...args);
-        handled = true;
-      }
-    }
-    const onceListeners = this._onceListeners[event];
-    if (onceListeners) {
-      this._onceListeners[event] = [];
-      for (const listener of [...onceListeners]) {
-        listener(...args);
-        handled = true;
-      }
-    }
-    return handled;
-  }
-};
-
-var dgramModule = {
-  Socket: DgramSocket,
-  createSocket(optionsOrType, callback) {
-    return new DgramSocket(optionsOrType, callback);
-  }
-};
-
-exposeCustomGlobal("_tlsModule", tlsModule);
-exposeCustomGlobal("_dgramSocketDispatch", (payload) => {
-  const socket = registeredDgramSocketsById.get(payload?.socketId);
-  if (socket) {
-    wakeDgramSocketReads(socket);
-  }
-});
-export { DGRAM_HANDLE_PREFIX, DgramSocket, createBadDgramSocketTypeError, createDgramAddressError, createDgramAlreadyBoundError, createDgramArgTypeError, createDgramBufferSizeSystemError, createDgramBufferSizeTypeError, createDgramMessageBuffer, createDgramMessageListBuffer, createDgramMissingArgError, createDgramNotRunningError, createDgramSyscallError, createDgramTtlArgTypeError, decodeDgramBridgeBytes, dgramModule, getDgramErrno, getPlatformDgramBufferSize, isIPv4MulticastAddress, isIPv4UnicastAddress, isIPv6MulticastAddress, normalizeDgramAddressValue, normalizeDgramBindArgs, normalizeDgramBridgeResult, normalizeDgramPortValue, normalizeDgramSendArgs, normalizeDgramSocketOptions, normalizeDgramSocketType, normalizeDgramTtlValue, validateDgramMulticastAddress, validateDgramSourceAddress };
diff --git a/packages/build-tools/bridge-src/builtins/dns.ts b/packages/build-tools/bridge-src/builtins/dns.ts
deleted file mode 100644
index 3f179f2ce..000000000
--- a/packages/build-tools/bridge-src/builtins/dns.ts
+++ /dev/null
@@ -1,394 +0,0 @@
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { http2 } from "./http2.js";
-
-function normalizeDnsLookupInvocation(hostname, options, callback) {
-  let normalizedOptions = {};
-  let done = callback;
-  if (typeof options === "function") {
-    done = options;
-  } else if (typeof options === "number") {
-    normalizedOptions = { family: options };
-  } else if (options == null) {
-    normalizedOptions = {};
-  } else if (typeof options === "object") {
-    normalizedOptions = { ...options };
-  } else {
-    throw new TypeError("dns.lookup options must be a number, object, or callback");
-  }
-  const family = normalizedOptions.family === 4 || normalizedOptions.family === 6 ? normalizedOptions.family : void 0;
-  return {
-    callback: done,
-    options: {
-      hostname: String(hostname),
-      family,
-      all: normalizedOptions.all === true
-    }
-  };
-}
-
-function createUnsupportedDnsError(subject) {
-  const error = new Error(`${subject} is not supported by the secure-exec dns polyfill`);
-  error.code = "ERR_NOT_IMPLEMENTED";
-  return error;
-}
-
-function normalizeDnsResolveInvocation(methodName, hostname, rrtype, callback) {
-  let type = rrtype;
-  let done = callback;
-  if (typeof rrtype === "function") {
-    done = rrtype;
-    type = void 0;
-  }
-  const normalizedType = String(type ?? "A").toUpperCase();
-  if (![
-    "A",
-    "AAAA",
-    "MX",
-    "TXT",
-    "SRV",
-    "CNAME",
-    "PTR",
-    "NS",
-    "SOA",
-    "NAPTR",
-    "CAA",
-    "ANY"
-  ].includes(normalizedType)) {
-    throw createUnsupportedDnsError(`${methodName}(${normalizedType})`);
-  }
-  return {
-    callback: done,
-    options: {
-      hostname: String(hostname),
-      rrtype: normalizedType
-    }
-  };
-}
-
-function parseDnsLookupRecords(resultJson) {
-  let parsed = resultJson;
-  if (typeof parsed === "string") {
-    parsed = JSON.parse(parsed);
-  }
-  if (parsed && typeof parsed === "object" && Array.isArray(parsed.records)) {
-    parsed = parsed.records;
-  } else if (parsed && typeof parsed === "object" && typeof parsed.address === "string") {
-    parsed = [parsed];
-  }
-  if (!Array.isArray(parsed)) {
-    return [];
-  }
-  return parsed.filter((record) => record && typeof record.address === "string").map((record) => ({
-    address: record.address,
-    family: record.family === 6 ? 6 : 4
-  }));
-}
-
-function parseDnsResolveRecords(resultJson) {
-  let parsed = resultJson;
-  if (typeof parsed === "string") {
-    parsed = JSON.parse(parsed);
-  }
-  return parsed;
-}
-
-function createInvalidDnsServersError(subject) {
-  const error = new TypeError(`${subject} expects an array of non-empty server strings`);
-  error.code = "ERR_INVALID_ARG_TYPE";
-  return error;
-}
-
-function normalizeDnsServers(subject, servers) {
-  if (!Array.isArray(servers)) {
-    throw createInvalidDnsServersError(subject);
-  }
-  return servers.map((server) => {
-    if (typeof server !== "string" || server.length === 0) {
-      throw createInvalidDnsServersError(subject);
-    }
-    return server;
-  });
-}
-
-function lookupDnsRecords(hostname, options, callback) {
-  const invocation = normalizeDnsLookupInvocation(hostname, options, callback);
-  return _networkDnsLookupRaw.apply(
-    void 0,
-    [invocation.options],
-    { result: { promise: true } }
-  ).then((resultJson) => {
-    const records = parseDnsLookupRecords(resultJson);
-    if (typeof invocation.callback === "function") {
-      if (invocation.options.all) {
-        invocation.callback(null, records);
-      } else {
-        const first = records[0] ?? {
-          address: null,
-          family: invocation.options.family ?? 0
-        };
-        invocation.callback(null, first.address, first.family);
-      }
-    }
-    return invocation.options.all ? records : records[0] ?? {
-      address: "",
-      family: invocation.options.family ?? 0
-    };
-  });
-}
-
-function resolveDnsRecords(methodName, hostname, rrtype, callback) {
-  const invocation = normalizeDnsResolveInvocation(methodName, hostname, rrtype, callback);
-  return _networkDnsResolveRaw.apply(
-    void 0,
-    [invocation.options],
-    { result: { promise: true } }
-  ).then((resultJson) => {
-    const records = parseDnsResolveRecords(resultJson);
-    if (typeof invocation.callback === "function") {
-      queueMicrotask(() => invocation.callback(null, records));
-    }
-    return records;
-  }).catch((err) => {
-    if (typeof invocation.callback === "function") {
-      queueMicrotask(() => invocation.callback(err));
-    }
-    throw err;
-  });
-}
-
-// Resolver instances keep guest-owned server lists for API compatibility.
-// Queries still use the VM-wide kernel resolver until the sync RPC grows
-// per-request nameserver overrides.
-class SecureExecResolver {
-  constructor() {
-    this._servers = [];
-  }
-  cancel() {
-  }
-  getServers() {
-    return this._servers.slice();
-  }
-  lookup(hostname, options, callback) {
-    return lookupDnsRecords(hostname, options, callback);
-  }
-  resolve(hostname, rrtype, callback) {
-    return resolveDnsRecords("dns.resolve", hostname, rrtype, callback);
-  }
-  resolve4(hostname, callback) {
-    return resolveDnsRecords("dns.resolve4", hostname, "A", callback);
-  }
-  resolve6(hostname, callback) {
-    return resolveDnsRecords("dns.resolve6", hostname, "AAAA", callback);
-  }
-  resolveAny(hostname, callback) {
-    return resolveDnsRecords("dns.resolveAny", hostname, "ANY", callback);
-  }
-  resolveMx(hostname, callback) {
-    return resolveDnsRecords("dns.resolveMx", hostname, "MX", callback);
-  }
-  resolveTxt(hostname, callback) {
-    return resolveDnsRecords("dns.resolveTxt", hostname, "TXT", callback);
-  }
-  resolveSrv(hostname, callback) {
-    return resolveDnsRecords("dns.resolveSrv", hostname, "SRV", callback);
-  }
-  resolveCname(hostname, callback) {
-    return resolveDnsRecords("dns.resolveCname", hostname, "CNAME", callback);
-  }
-  resolvePtr(hostname, callback) {
-    return resolveDnsRecords("dns.resolvePtr", hostname, "PTR", callback);
-  }
-  resolveNs(hostname, callback) {
-    return resolveDnsRecords("dns.resolveNs", hostname, "NS", callback);
-  }
-  resolveSoa(hostname, callback) {
-    return resolveDnsRecords("dns.resolveSoa", hostname, "SOA", callback);
-  }
-  resolveNaptr(hostname, callback) {
-    return resolveDnsRecords("dns.resolveNaptr", hostname, "NAPTR", callback);
-  }
-  resolveCaa(hostname, callback) {
-    return resolveDnsRecords("dns.resolveCaa", hostname, "CAA", callback);
-  }
-  setServers(servers) {
-    this._servers = normalizeDnsServers("dns.Resolver.setServers", servers);
-  }
-}
-
-class SecureExecPromisesResolver {
-  constructor() {
-    this._servers = [];
-  }
-  cancel() {
-  }
-  getServers() {
-    return this._servers.slice();
-  }
-  lookup(hostname, options) {
-    return lookupDnsRecords(hostname, options);
-  }
-  resolve(hostname, rrtype) {
-    return resolveDnsRecords("dns.resolve", hostname, rrtype);
-  }
-  resolve4(hostname) {
-    return resolveDnsRecords("dns.resolve4", hostname, "A");
-  }
-  resolve6(hostname) {
-    return resolveDnsRecords("dns.resolve6", hostname, "AAAA");
-  }
-  resolveAny(hostname) {
-    return resolveDnsRecords("dns.resolveAny", hostname, "ANY");
-  }
-  resolveMx(hostname) {
-    return resolveDnsRecords("dns.resolveMx", hostname, "MX");
-  }
-  resolveTxt(hostname) {
-    return resolveDnsRecords("dns.resolveTxt", hostname, "TXT");
-  }
-  resolveSrv(hostname) {
-    return resolveDnsRecords("dns.resolveSrv", hostname, "SRV");
-  }
-  resolveCname(hostname) {
-    return resolveDnsRecords("dns.resolveCname", hostname, "CNAME");
-  }
-  resolvePtr(hostname) {
-    return resolveDnsRecords("dns.resolvePtr", hostname, "PTR");
-  }
-  resolveNs(hostname) {
-    return resolveDnsRecords("dns.resolveNs", hostname, "NS");
-  }
-  resolveSoa(hostname) {
-    return resolveDnsRecords("dns.resolveSoa", hostname, "SOA");
-  }
-  resolveNaptr(hostname) {
-    return resolveDnsRecords("dns.resolveNaptr", hostname, "NAPTR");
-  }
-  resolveCaa(hostname) {
-    return resolveDnsRecords("dns.resolveCaa", hostname, "CAA");
-  }
-  setServers(servers) {
-    this._servers = normalizeDnsServers("dns.promises.Resolver.setServers", servers);
-  }
-}
-
-var dns = {
-  lookup(hostname, options, callback) {
-    lookupDnsRecords(hostname, options, callback).catch((err) => {
-      const done = typeof options === "function" ? options : callback;
-      done?.(err);
-    });
-  },
-  resolve(hostname, rrtype, callback) {
-    resolveDnsRecords("dns.resolve", hostname, rrtype, callback).catch(() => {
-    });
-  },
-  resolve4(hostname, callback) {
-    resolveDnsRecords("dns.resolve4", hostname, "A", callback).catch(() => {
-    });
-  },
-  resolve6(hostname, callback) {
-    resolveDnsRecords("dns.resolve6", hostname, "AAAA", callback).catch(() => {
-    });
-  },
-  resolveAny(hostname, callback) {
-    resolveDnsRecords("dns.resolveAny", hostname, "ANY", callback).catch(() => {
-    });
-  },
-  resolveMx(hostname, callback) {
-    resolveDnsRecords("dns.resolveMx", hostname, "MX", callback).catch(() => {
-    });
-  },
-  resolveTxt(hostname, callback) {
-    resolveDnsRecords("dns.resolveTxt", hostname, "TXT", callback).catch(() => {
-    });
-  },
-  resolveSrv(hostname, callback) {
-    resolveDnsRecords("dns.resolveSrv", hostname, "SRV", callback).catch(() => {
-    });
-  },
-  resolveCname(hostname, callback) {
-    resolveDnsRecords("dns.resolveCname", hostname, "CNAME", callback).catch(() => {
-    });
-  },
-  resolvePtr(hostname, callback) {
-    resolveDnsRecords("dns.resolvePtr", hostname, "PTR", callback).catch(() => {
-    });
-  },
-  resolveNs(hostname, callback) {
-    resolveDnsRecords("dns.resolveNs", hostname, "NS", callback).catch(() => {
-    });
-  },
-  resolveSoa(hostname, callback) {
-    resolveDnsRecords("dns.resolveSoa", hostname, "SOA", callback).catch(() => {
-    });
-  },
-  resolveNaptr(hostname, callback) {
-    resolveDnsRecords("dns.resolveNaptr", hostname, "NAPTR", callback).catch(() => {
-    });
-  },
-  resolveCaa(hostname, callback) {
-    resolveDnsRecords("dns.resolveCaa", hostname, "CAA", callback).catch(() => {
-    });
-  },
-  promises: {
-    Resolver: SecureExecPromisesResolver,
-    lookup(hostname, _options) {
-      return lookupDnsRecords(hostname, _options);
-    },
-    resolve(hostname, rrtype) {
-      return resolveDnsRecords("dns.resolve", hostname, rrtype || "A");
-    },
-    resolve4(hostname) {
-      return resolveDnsRecords("dns.resolve4", hostname, "A");
-    },
-    resolve6(hostname) {
-      return resolveDnsRecords("dns.resolve6", hostname, "AAAA");
-    },
-    resolveAny(hostname) {
-      return resolveDnsRecords("dns.resolveAny", hostname, "ANY");
-    },
-    resolveMx(hostname) {
-      return resolveDnsRecords("dns.resolveMx", hostname, "MX");
-    },
-    resolveTxt(hostname) {
-      return resolveDnsRecords("dns.resolveTxt", hostname, "TXT");
-    },
-    resolveSrv(hostname) {
-      return resolveDnsRecords("dns.resolveSrv", hostname, "SRV");
-    },
-    resolveCname(hostname) {
-      return resolveDnsRecords("dns.resolveCname", hostname, "CNAME");
-    },
-    resolvePtr(hostname) {
-      return resolveDnsRecords("dns.resolvePtr", hostname, "PTR");
-    },
-    resolveNs(hostname) {
-      return resolveDnsRecords("dns.resolveNs", hostname, "NS");
-    },
-    resolveSoa(hostname) {
-      return resolveDnsRecords("dns.resolveSoa", hostname, "SOA");
-    },
-    resolveNaptr(hostname) {
-      return resolveDnsRecords("dns.resolveNaptr", hostname, "NAPTR");
-    },
-    resolveCaa(hostname) {
-      return resolveDnsRecords("dns.resolveCaa", hostname, "CAA");
-    }
-  },
-  Resolver: SecureExecResolver,
-  getServers() {
-    return [];
-  },
-  lookupService() {
-    throw createUnsupportedDnsError("dns.lookupService");
-  },
-  reverse() {
-    throw createUnsupportedDnsError("dns.reverse");
-  },
-  setServers() {
-    throw createUnsupportedDnsError("dns.setServers");
-  }
-};
-
-exposeCustomGlobal("_http2Module", http2);
-export { SecureExecPromisesResolver, SecureExecResolver, createInvalidDnsServersError, createUnsupportedDnsError, dns, lookupDnsRecords, normalizeDnsLookupInvocation, normalizeDnsResolveInvocation, normalizeDnsServers, parseDnsLookupRecords, parseDnsResolveRecords, resolveDnsRecords };
diff --git a/packages/build-tools/bridge-src/builtins/events.ts b/packages/build-tools/bridge-src/builtins/events.ts
deleted file mode 100644
index 11c0c1b2c..000000000
--- a/packages/build-tools/bridge-src/builtins/events.ts
+++ /dev/null
@@ -1,410 +0,0 @@
-import { process2, routeAsyncCallbackError } from "./process.js";
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { Event } from "../polyfills/index.js";
-
-var eventsErrorMonitor = Symbol("events.errorMonitor");
-var eventsDefaultMaxListeners = 10;
-function emitEventEmitterMeta(emitter, metaEvent, args) {
-  if (metaEvent === "newListener" && args[0] === "newListener") {
-    return false;
-  }
-  if (metaEvent === "removeListener" && args[0] === "removeListener") {
-    return false;
-  }
-  return emitEventRecords(emitter, metaEvent, args);
-}
-function cloneEventListeners(emitter, event) {
-  ensureEventEmitterInitialized(emitter);
-  const listeners = emitter._events[event];
-  return Array.isArray(listeners) ? listeners.slice() : [];
-}
-function removeEventListenerRecord(emitter, event, listener, onceOnly = false) {
-  ensureEventEmitterInitialized(emitter);
-  const listeners = emitter._events[event];
-  if (!Array.isArray(listeners) || listeners.length === 0) {
-    return emitter;
-  }
-  let removedRecord = null;
-  const next = listeners.slice();
-  for (let index = next.length - 1; index >= 0; index -= 1) {
-    const record = next[index];
-    if (record.listener !== listener && record.rawListener !== listener) {
-      continue;
-    }
-    if (onceOnly && !record.once) {
-      continue;
-    }
-    removedRecord = record;
-    next.splice(index, 1);
-    break;
-  }
-  if (removedRecord === null) {
-    return emitter;
-  }
-  if (next.length === 0) {
-    delete emitter._events[event];
-  } else {
-    emitter._events[event] = next;
-  }
-  emitEventEmitterMeta(emitter, "removeListener", [event, removedRecord.listener]);
-  return emitter;
-}
-function removeAllEventListenerRecords(emitter, event) {
-  const key = String(event);
-  const listeners = cloneEventListeners(emitter, key);
-  for (let index = listeners.length - 1; index >= 0; index -= 1) {
-    removeEventListenerRecord(emitter, key, listeners[index].listener);
-  }
-  return emitter;
-}
-function emitEventRecords(emitter, event, args) {
-  const listeners = cloneEventListeners(emitter, event);
-  if (listeners.length === 0) {
-    return false;
-  }
-  for (const record of listeners) {
-    if (record.once) {
-      removeEventListenerRecord(emitter, event, record.listener, true);
-    }
-    try {
-      record.listener.apply(emitter, args);
-    } catch (error) {
-      const outcome = routeAsyncCallbackError(error);
-      if (!outcome.handled && outcome.rethrow !== null) {
-        throw outcome.rethrow;
-      }
-      return true;
-    }
-  }
-  return true;
-}
-function topLevelEventListenerCount(emitter, event) {
-  return cloneEventListeners(emitter, event).length;
-}
-function topLevelGetEventListeners(emitter, event) {
-  return cloneEventListeners(emitter, event).map((record) => record.listener);
-}
-function topLevelGetRawEventListeners(emitter, event) {
-  return cloneEventListeners(emitter, event).map((record) => record.rawListener ?? record.listener);
-}
-function createOnceRawListener(emitter, event, listener) {
-  function onceRawListener(...args) {
-    removeEventListenerRecord(emitter, event, onceRawListener, true);
-    return listener.apply(emitter, args);
-  }
-  Object.defineProperty(onceRawListener, "listener", {
-    value: listener,
-    configurable: true,
-    enumerable: false,
-    writable: false
-  });
-  return onceRawListener;
-}
-function topLevelGetMaxListeners(emitter) {
-  if (emitter && typeof emitter.getMaxListeners === "function") {
-    return emitter.getMaxListeners();
-  }
-  return eventsDefaultMaxListeners;
-}
-function topLevelSetMaxListeners(n, ...emitters) {
-  for (const emitter of emitters) {
-    if (emitter && typeof emitter.setMaxListeners === "function") {
-      emitter.setMaxListeners(n);
-    }
-  }
-}
-function addAbortListener(signal, listener) {
-  if (!signal || typeof signal.addEventListener !== "function") {
-    throw new TypeError("AbortSignal is required");
-  }
-  const wrapped = () => listener();
-  if (signal.aborted) {
-    queueMicrotask(wrapped);
-    return { dispose() {
-    } };
-  }
-  signal.addEventListener("abort", wrapped, { once: true });
-  return {
-    dispose() {
-      signal.removeEventListener("abort", wrapped);
-    }
-  };
-}
-function once(emitter, eventName) {
-  return new Promise((resolve, reject) => {
-    const onEvent = (...args) => {
-      if (typeof emitter.removeListener === "function") {
-        emitter.removeListener("error", onError);
-      }
-      resolve(args);
-    };
-    const onError = (error) => {
-      if (typeof emitter.removeListener === "function") {
-        emitter.removeListener(eventName, onEvent);
-      }
-      reject(error);
-    };
-    emitter.once(eventName, onEvent);
-    if (eventName !== "error" && typeof emitter.once === "function") {
-      emitter.once("error", onError);
-    }
-  });
-}
-function initializeEventEmitter(target) {
-  target._events = Object.create(null);
-  target._maxListeners = eventsDefaultMaxListeners;
-  target._maxListenersWarned = /* @__PURE__ */ new Set();
-}
-function ensureEventEmitterInitialized(target) {
-  if (!target || (typeof target !== "object" && typeof target !== "function")) {
-    return;
-  }
-  if (typeof target._events === "undefined") {
-    initializeEventEmitter(target);
-    return;
-  }
-  if (!(target._maxListenersWarned instanceof Set)) {
-    target._maxListenersWarned = /* @__PURE__ */ new Set();
-  }
-  // An emitter can acquire `_events` without going through our constructor (e.g.
-  // a subclass that sets up its own event storage). If `_maxListeners` was never
-  // initialized, `maybeWarnEventEmitterListeners` would treat `total <= undefined`
-  // as false and fire a spurious MaxListenersExceededWarning on the *first*
-  // listener (reported count "1"). Default it to the standard limit so the
-  // threshold check is meaningful.
-  if (typeof target._maxListeners !== "number") {
-    target._maxListeners = eventsDefaultMaxListeners;
-  }
-}
-function createMaxListenersExceededWarning(emitter, event, total) {
-  const maxListeners = Number.isFinite(emitter._maxListeners) ? emitter._maxListeners : eventsDefaultMaxListeners;
-  const warning = new Error(
-    `Possible EventEmitter memory leak detected. ${total} ${event} listeners added to [EventEmitter]. MaxListeners is ${maxListeners}. Use emitter.setMaxListeners() to increase limit`
-  );
-  warning.name = "MaxListenersExceededWarning";
-  warning.emitter = emitter;
-  warning.type = event;
-  warning.count = total;
-  return warning;
-}
-function maybeWarnEventEmitterListeners(emitter, event, total) {
-  ensureEventEmitterInitialized(emitter);
-  if (!(emitter._maxListenersWarned instanceof Set)) {
-    emitter._maxListenersWarned = /* @__PURE__ */ new Set();
-  }
-  if (emitter._maxListeners <= 0 || emitter._maxListenersWarned.has(event) || total <= emitter._maxListeners) {
-    return;
-  }
-  emitter._maxListenersWarned.add(event);
-  const warning = createMaxListenersExceededWarning(emitter, event, total);
-  if (process2 && typeof process2.emitWarning === "function") {
-    process2.emitWarning(warning);
-    return;
-  }
-  if (typeof _error !== "undefined") {
-    _error.applySync(void 0, [`${warning.name}: ${warning.message}`]);
-  }
-}
-function addEventListenerRecord(emitter, event, record, prepend = false) {
-  ensureEventEmitterInitialized(emitter);
-  const listeners = emitter._events[event] ?? [];
-  if (prepend) {
-    listeners.unshift(record);
-  } else {
-    listeners.push(record);
-  }
-  emitter._events[event] = listeners;
-  maybeWarnEventEmitterListeners(emitter, event, listeners.length);
-}
-function EventEmitter() {
-  if (!this || (typeof this !== "object" && typeof this !== "function")) {
-    return new EventEmitter();
-  }
-  initializeEventEmitter(this);
-}
-EventEmitter.prototype.addListener = function(event, listener) {
-  return this.on(event, listener);
-};
-EventEmitter.prototype.on = function(event, listener) {
-  if (typeof listener !== "function") {
-    throw new TypeError("listener must be a function");
-  }
-  const key = String(event);
-  emitEventEmitterMeta(this, "newListener", [key, listener]);
-  addEventListenerRecord(this, key, { listener, once: false });
-  return this;
-};
-EventEmitter.prototype.once = function(event, listener) {
-  if (typeof listener !== "function") {
-    throw new TypeError("listener must be a function");
-  }
-  const key = String(event);
-  emitEventEmitterMeta(this, "newListener", [key, listener]);
-  addEventListenerRecord(this, key, {
-    listener,
-    rawListener: createOnceRawListener(this, key, listener),
-    once: true
-  });
-  return this;
-};
-EventEmitter.prototype.prependListener = function(event, listener) {
-  if (typeof listener !== "function") {
-    throw new TypeError("listener must be a function");
-  }
-  const key = String(event);
-  emitEventEmitterMeta(this, "newListener", [key, listener]);
-  addEventListenerRecord(this, key, { listener, once: false }, true);
-  return this;
-};
-EventEmitter.prototype.prependOnceListener = function(event, listener) {
-  if (typeof listener !== "function") {
-    throw new TypeError("listener must be a function");
-  }
-  const key = String(event);
-  emitEventEmitterMeta(this, "newListener", [key, listener]);
-  addEventListenerRecord(this, key, {
-    listener,
-    rawListener: createOnceRawListener(this, key, listener),
-    once: true
-  }, true);
-  return this;
-};
-EventEmitter.prototype.removeListener = function(event, listener) {
-  return removeEventListenerRecord(this, String(event), listener);
-};
-EventEmitter.prototype.off = function(event, listener) {
-  return removeEventListenerRecord(this, String(event), listener);
-};
-EventEmitter.prototype.removeAllListeners = function(event) {
-  ensureEventEmitterInitialized(this);
-  if (typeof event === "undefined") {
-    for (const key of Object.keys(this._events)) {
-      if (key === "removeListener") {
-        continue;
-      }
-      removeAllEventListenerRecords(this, key);
-    }
-    delete this._events.removeListener;
-  } else {
-    removeAllEventListenerRecords(this, String(event));
-  }
-  return this;
-};
-EventEmitter.prototype.emit = function(event, ...args) {
-  const key = String(event);
-  if (key === "error" && topLevelEventListenerCount(this, key) === 0) {
-    throw args[0] instanceof Error ? args[0] : new Error(String(args[0] ?? "Unhandled error event"));
-  }
-  let handled = emitEventRecords(this, key, args);
-  if (key === "error") {
-    handled = emitEventRecords(this, String(eventsErrorMonitor), args) || handled;
-  }
-  return handled;
-};
-EventEmitter.prototype.listeners = function(event) {
-  return topLevelGetEventListeners(this, String(event));
-};
-EventEmitter.prototype.rawListeners = function(event) {
-  return topLevelGetRawEventListeners(this, String(event));
-};
-EventEmitter.prototype.listenerCount = function(event) {
-  return topLevelEventListenerCount(this, String(event));
-};
-EventEmitter.prototype.eventNames = function() {
-  ensureEventEmitterInitialized(this);
-  return Object.keys(this._events);
-};
-EventEmitter.prototype.setMaxListeners = function(n) {
-  ensureEventEmitterInitialized(this);
-  this._maxListeners = Number(n);
-  return this;
-};
-EventEmitter.prototype.getMaxListeners = function() {
-  ensureEventEmitterInitialized(this);
-  return Number.isFinite(this._maxListeners) ? this._maxListeners : eventsDefaultMaxListeners;
-};
-EventEmitter.once = once;
-// Node 12.16+ async-iterator helper: `for await (const [a] of events.on(emitter, "data")) {}`.
-EventEmitter.on = function on(emitter, eventName, options) {
-  const signal = options && options.signal;
-  if (signal && signal.aborted) throw signal.reason ?? new Error("The operation was aborted");
-  const removeL = (ev, fn) => (emitter.off ?? emitter.removeListener).call(emitter, ev, fn);
-  const queue = [];
-  const unconsumed = [];
-  let error = null;
-  let finished = false;
-  const cleanup = () => {
-    removeL(eventName, onEvent);
-    removeL("error", onError);
-    if (signal && signal.removeEventListener) signal.removeEventListener("abort", onAbort);
-  };
-  const iterator = {
-    next() {
-      const value = queue.shift();
-      if (value !== undefined) return Promise.resolve({ value, done: false });
-      if (error) { const e = error; error = null; cleanup(); return Promise.reject(e); }
-      if (finished) return Promise.resolve({ value: undefined, done: true });
-      return new Promise((resolve, reject) => unconsumed.push({ resolve, reject }));
-    },
-    return() {
-      finished = true;
-      cleanup();
-      for (const c of unconsumed) c.resolve({ value: undefined, done: true });
-      unconsumed.length = 0;
-      return Promise.resolve({ value: undefined, done: true });
-    },
-    throw(err) { error = err; cleanup(); return Promise.reject(err); },
-    [Symbol.asyncIterator]() { return this; },
-  };
-  function onEvent(...args) {
-    const c = unconsumed.shift();
-    if (c) c.resolve({ value: args, done: false });
-    else queue.push(args);
-  }
-  function onError(err) {
-    const c = unconsumed.shift();
-    if (c) { cleanup(); c.reject(err); }
-    else error = err;
-  }
-  function onAbort() { iterator.return(); }
-  emitter.on(eventName, onEvent);
-  emitter.on("error", onError);
-  if (signal && signal.addEventListener) signal.addEventListener("abort", onAbort, { once: true });
-  return iterator;
-};
-EventEmitter.addAbortListener = function addAbortListener(signal, listener) {
-  if (signal && signal.aborted) {
-    queueMicrotask(() => listener(typeof Event === "function" ? new Event("abort") : { type: "abort" }));
-  } else if (signal && signal.addEventListener) {
-    signal.addEventListener("abort", listener, { once: true });
-  }
-  return {
-    [Symbol.dispose]() {
-      if (signal && signal.removeEventListener) signal.removeEventListener("abort", listener);
-    },
-  };
-};
-EventEmitter.getEventListeners = topLevelGetEventListeners;
-EventEmitter.getMaxListeners = topLevelGetMaxListeners;
-EventEmitter.setMaxListeners = topLevelSetMaxListeners;
-Object.defineProperty(EventEmitter, "defaultMaxListeners", {
-  get() {
-    return eventsDefaultMaxListeners;
-  },
-  set(value) {
-    eventsDefaultMaxListeners = Number(value);
-  }
-});
-var eventsModule = {
-  addAbortListener,
-  defaultMaxListeners: eventsDefaultMaxListeners,
-  errorMonitor: eventsErrorMonitor,
-  EventEmitter,
-  getEventListeners: topLevelGetEventListeners,
-  getMaxListeners: topLevelGetMaxListeners,
-  listenerCount: topLevelEventListenerCount,
-  once,
-  setMaxListeners: topLevelSetMaxListeners
-};
-exposeCustomGlobal("_eventsModule", eventsModule);
-export { eventsErrorMonitor, eventsDefaultMaxListeners, emitEventEmitterMeta, cloneEventListeners, removeEventListenerRecord, removeAllEventListenerRecords, emitEventRecords, topLevelEventListenerCount, topLevelGetEventListeners, topLevelGetRawEventListeners, createOnceRawListener, topLevelGetMaxListeners, topLevelSetMaxListeners, addAbortListener, once, initializeEventEmitter, ensureEventEmitterInitialized, createMaxListenersExceededWarning, maybeWarnEventEmitterListeners, addEventListenerRecord, EventEmitter, eventsModule };
diff --git a/packages/build-tools/bridge-src/builtins/fetch.ts b/packages/build-tools/bridge-src/builtins/fetch.ts
deleted file mode 100644
index cc5b18b1f..000000000
--- a/packages/build-tools/bridge-src/builtins/fetch.ts
+++ /dev/null
@@ -1,326 +0,0 @@
-import { getSecureExecUndiciDispatcher, undiciFetch } from "./undici.js";
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { undiciHeadersModule, undiciRequestModule, undiciResponseModule } from "../prelude.js";
-import { isFlatHeaderList, onUpgradeSocketEnd } from "./http.js";
-
-var MAX_HTTP_BODY_BYTES = 50 * 1024 * 1024;
-
-var MAX_HTTP_REQUEST_HEADER_BYTES = 64 * 1024;
-
-var MAX_HTTP_REQUEST_HEADERS = 2e3;
-
-var _fetchHandleCounter = 0;
-
-var UndiciHeaders = undiciHeadersModule?.Headers ?? undiciHeadersModule?.default ?? undiciHeadersModule;
-
-var UndiciRequest = undiciRequestModule?.Request ?? undiciRequestModule?.default ?? undiciRequestModule;
-
-var UndiciResponse = undiciResponseModule?.Response ?? undiciResponseModule?.default ?? undiciResponseModule;
-
-function serializeFetchHeaders(headers) {
-  if (!headers) {
-    return {};
-  }
-  if (headers instanceof Headers) {
-    return Object.fromEntries(headers.entries());
-  }
-  if (typeof UndiciHeaders === "function" && headers instanceof UndiciHeaders) {
-    return Object.fromEntries(headers.entries());
-  }
-  if (isFlatHeaderList(headers)) {
-    const normalized = {};
-    for (let index = 0; index < headers.length; index += 2) {
-      const key = headers[index];
-      const value = headers[index + 1];
-      if (key !== void 0 && value !== void 0) {
-        normalized[key] = value;
-      }
-    }
-    return normalized;
-  }
-  if (typeof headers.entries === "function") {
-    return Object.fromEntries(headers.entries());
-  }
-  if (typeof headers[Symbol.iterator] === "function") {
-    return Object.fromEntries(headers);
-  }
-  return Object.fromEntries(new Headers(headers).entries());
-}
-
-function createFetchHeaders(headers) {
-  return new Headers(serializeFetchHeaders(headers));
-}
-
-function normalizeFetchRequestInit(options = {}) {
-  const normalized = { ...options };
-  // Some bundled Node SDKs pass node-fetch style `agent` options into fetch().
-  // Undici doesn't accept that field, and the default global dispatcher already
-  // routes through the secure-exec virtual network stack.
-  if (Object.prototype.hasOwnProperty.call(normalized, "agent")) {
-    delete normalized.agent;
-  }
-  if (Object.prototype.hasOwnProperty.call(normalized, "headers")) {
-    normalized.headers = serializeFetchHeaders(normalized.headers);
-  }
-  if (
-    normalized.body != null &&
-    normalized.duplex == null &&
-    String(normalized.method ?? "GET").toUpperCase() !== "GET" &&
-    String(normalized.method ?? "GET").toUpperCase() !== "HEAD"
-  ) {
-    normalized.duplex = "half";
-  }
-  return normalized;
-}
-
-function ensureFetchAcceptEncoding(options) {
-  const headers = serializeFetchHeaders(options?.headers);
-  const hasAcceptEncoding = Object.keys(headers).some(
-    (key) => key.toLowerCase() === "accept-encoding"
-  );
-  if (!hasAcceptEncoding) {
-    headers["accept-encoding"] = "gzip, deflate";
-  }
-  return { ...(options || {}), headers };
-}
-
-async function fetch(input, options = {}) {
-  if (typeof undiciFetch !== "function") {
-    throw new Error("fetch requires undici to be configured");
-  }
-  let resolvedInput = input;
-  let normalizedOptions = options;
-  if (input instanceof Request) {
-    resolvedInput = input.url;
-    normalizedOptions = {
-      method: input.method,
-      headers: serializeFetchHeaders(input.headers),
-      body: input.body,
-      ...options
-    };
-  }
-  normalizedOptions = normalizeFetchRequestInit(normalizedOptions);
-  normalizedOptions = ensureFetchAcceptEncoding(normalizedOptions);
-  const requestLabel = typeof resolvedInput === "string" ? resolvedInput : resolvedInput?.url ? String(resolvedInput.url) : String(resolvedInput);
-  const handleId = typeof _registerHandle === "function" ? `fetch:${++_fetchHandleCounter}` : null;
-  if (handleId) {
-    _registerHandle?.(handleId, `fetch ${requestLabel}`);
-  }
-  // Shared bounded dispatcher (see undici.ts): keepalive pooling across fetch()
-  // calls. Per-call dispatchers (the 4f470c61 workaround for pooled clients
-  // going stale against released sockets) are no longer needed now that
-  // host->guest socket event push keeps pooled connections live.
-  const fetchDispatcher = normalizedOptions.dispatcher == null && typeof getSecureExecUndiciDispatcher === "function" ? getSecureExecUndiciDispatcher() : null;
-  try {
-    return await undiciFetch(
-      resolvedInput,
-      fetchDispatcher ? { ...normalizedOptions, dispatcher: fetchDispatcher } : normalizedOptions
-    );
-  } finally {
-    if (handleId) {
-      _unregisterHandle?.(handleId);
-    }
-  }
-}
-
-var Headers = class _Headers {
-  _headers = {};
-  constructor(init) {
-    if (init && init !== null) {
-      if (init instanceof _Headers) {
-        this._headers = { ...init._headers };
-      } else if (Array.isArray(init)) {
-        init.forEach(([key, value]) => {
-          this._headers[key.toLowerCase()] = value;
-        });
-      } else if (typeof init === "object") {
-        Object.entries(init).forEach(([key, value]) => {
-          this._headers[key.toLowerCase()] = value;
-        });
-      }
-    }
-  }
-  get(name) {
-    return this._headers[name.toLowerCase()] || null;
-  }
-  set(name, value) {
-    this._headers[name.toLowerCase()] = value;
-  }
-  has(name) {
-    return name.toLowerCase() in this._headers;
-  }
-  delete(name) {
-    delete this._headers[name.toLowerCase()];
-  }
-  entries() {
-    return Object.entries(this._headers)[Symbol.iterator]();
-  }
-  [Symbol.iterator]() {
-    return this.entries();
-  }
-  keys() {
-    return Object.keys(this._headers)[Symbol.iterator]();
-  }
-  values() {
-    return Object.values(this._headers)[Symbol.iterator]();
-  }
-  append(name, value) {
-    const key = name.toLowerCase();
-    if (key in this._headers) {
-      this._headers[key] = this._headers[key] + ", " + value;
-    } else {
-      this._headers[key] = value;
-    }
-  }
-  forEach(callback) {
-    Object.entries(this._headers).forEach(([k, v]) => callback(v, k, this));
-  }
-};
-
-var Request = class _Request {
-  url;
-  method;
-  headers;
-  body;
-  mode;
-  credentials;
-  cache;
-  redirect;
-  referrer;
-  integrity;
-  constructor(input, init = {}) {
-    this.url = typeof input === "string" ? input : input.url;
-    this.method = init.method || (typeof input !== "string" ? input.method : void 0) || "GET";
-    this.headers = createFetchHeaders(
-      init.headers || (typeof input !== "string" ? input.headers : void 0)
-    );
-    this.body = init.body || null;
-    this.mode = init.mode || "cors";
-    this.credentials = init.credentials || "same-origin";
-    this.cache = init.cache || "default";
-    this.redirect = init.redirect || "follow";
-    this.referrer = init.referrer || "about:client";
-    this.integrity = init.integrity || "";
-  }
-  clone() {
-    return new _Request(this.url, this);
-  }
-};
-
-var Response = class _Response {
-  _body;
-  status;
-  statusText;
-  headers;
-  ok;
-  type;
-  url;
-  redirected;
-  constructor(body, init = {}) {
-    this._body = body || null;
-    this.status = init.status || 200;
-    this.statusText = init.statusText || "OK";
-    this.headers = new Headers(init.headers);
-    this.ok = this.status >= 200 && this.status < 300;
-    this.type = "default";
-    this.url = "";
-    this.redirected = false;
-  }
-  async text() {
-    return String(this._body || "");
-  }
-  async json() {
-    return JSON.parse(this._body || "{}");
-  }
-  get body() {
-    const bodyStr = this._body;
-    if (bodyStr === null) return null;
-    return {
-      getReader() {
-        let consumed = false;
-        return {
-          async read() {
-            if (consumed) return { done: true };
-            consumed = true;
-            const encoder = new TextEncoder();
-            return { done: false, value: encoder.encode(bodyStr) };
-          }
-        };
-      }
-    };
-  }
-  clone() {
-    return new _Response(this._body, { status: this.status, statusText: this.statusText });
-  }
-  static error() {
-    return new _Response(null, { status: 0, statusText: "" });
-  }
-  static redirect(url, status = 302) {
-    return new _Response(null, { status, headers: { Location: url } });
-  }
-};
-
-exposeCustomGlobal("_upgradeSocketEnd", onUpgradeSocketEnd);
-
-exposeCustomGlobal("fetch", fetch);
-
-exposeCustomGlobal("Headers", UndiciHeaders);
-
-exposeCustomGlobal("Request", UndiciRequest);
-
-exposeCustomGlobal("Response", UndiciResponse);
-
-var Blob = globalThis.Blob;
-
-if (typeof Blob === "undefined") {
-  Blob = class BlobStub {
-  };
-  exposeCustomGlobal("Blob", Blob);
-}
-
-var File = globalThis.File;
-
-if (typeof File === "undefined") {
-  File = class FileStub extends Blob {
-    name;
-    lastModified;
-    webkitRelativePath;
-    constructor(parts = [], name = "", options = {}) {
-      super(parts, options);
-      this.name = String(name);
-      this.lastModified = typeof options.lastModified === "number" ? options.lastModified : Date.now();
-      this.webkitRelativePath = "";
-    }
-  };
-  exposeCustomGlobal("File", File);
-}
-
-if (typeof globalThis.FormData === "undefined") {
-  class FormDataStub {
-    _entries = [];
-    append(name, value) {
-      this._entries.push([name, value]);
-    }
-    get(name) {
-      const entry = this._entries.find(([k]) => k === name);
-      return entry ? entry[1] : null;
-    }
-    getAll(name) {
-      return this._entries.filter(([k]) => k === name).map(([, v]) => v);
-    }
-    has(name) {
-      return this._entries.some(([k]) => k === name);
-    }
-    delete(name) {
-      this._entries = this._entries.filter(([k]) => k !== name);
-    }
-    entries() {
-      return this._entries[Symbol.iterator]();
-    }
-    [Symbol.iterator]() {
-      return this.entries();
-    }
-  }
-  exposeCustomGlobal("FormData", FormDataStub);
-}
-export { Blob, File, Headers, MAX_HTTP_BODY_BYTES, MAX_HTTP_REQUEST_HEADERS, MAX_HTTP_REQUEST_HEADER_BYTES, Request, Response, UndiciHeaders, UndiciRequest, UndiciResponse, _fetchHandleCounter, createFetchHeaders, ensureFetchAcceptEncoding, fetch, normalizeFetchRequestInit, serializeFetchHeaders };
diff --git a/packages/build-tools/bridge-src/builtins/fs.ts b/packages/build-tools/bridge-src/builtins/fs.ts
deleted file mode 100644
index fbb387b8e..000000000
--- a/packages/build-tools/bridge-src/builtins/fs.ts
+++ /dev/null
@@ -1,4154 +0,0 @@
-import { deferCloseIfChildInheritedFd } from "./child-process.js";
-import { builtinCryptoModule } from "./crypto.js";
-import { _umask } from "./process.js";
-import { clearInterval, setInterval } from "./timers.js";
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { require_buffer } from "../vendor/buffer.js";
-import { __toESM } from "../vendor/esbuild-runtime.js";
-
-var import_buffer = __toESM(require_buffer(), 1);
-var O_RDONLY = 0;
-var O_WRONLY = 1;
-var O_RDWR = 2;
-var O_CREAT = 64;
-var O_EXCL = 128;
-var O_TRUNC = 512;
-var O_APPEND = 1024;
-var Stats = class {
-  dev;
-  ino;
-  mode;
-  nlink;
-  uid;
-  gid;
-  rdev;
-  size;
-  blksize;
-  blocks;
-  atimeMs;
-  mtimeMs;
-  ctimeMs;
-  birthtimeMs;
-  atime;
-  mtime;
-  ctime;
-  birthtime;
-  constructor(init) {
-    this.dev = init.dev ?? 0;
-    this.ino = init.ino ?? 0;
-    this.mode = init.mode;
-    this.nlink = init.nlink ?? 1;
-    this.uid = init.uid ?? 0;
-    this.gid = init.gid ?? 0;
-    this.rdev = init.rdev ?? 0;
-    this.size = init.size;
-    this.blksize = init.blksize ?? 4096;
-    this.blocks = init.blocks ?? Math.ceil(init.size / 512);
-    const atimeMs = init.atimeMs ?? Date.now();
-    const mtimeMs = init.mtimeMs ?? Date.now();
-    const ctimeMs = init.ctimeMs ?? Date.now();
-    this.atimeMs = atimeMs + ((init.atimeNsec ?? 0) % 1e6) / 1e6;
-    this.mtimeMs = mtimeMs + ((init.mtimeNsec ?? 0) % 1e6) / 1e6;
-    this.ctimeMs = ctimeMs + ((init.ctimeNsec ?? 0) % 1e6) / 1e6;
-    this.birthtimeMs = init.birthtimeMs ?? Date.now();
-    this.atime = new Date(this.atimeMs);
-    this.mtime = new Date(this.mtimeMs);
-    this.ctime = new Date(this.ctimeMs);
-    this.birthtime = new Date(this.birthtimeMs);
-  }
-  isFile() {
-    return (this.mode & 61440) === 32768;
-  }
-  isDirectory() {
-    return (this.mode & 61440) === 16384;
-  }
-  isSymbolicLink() {
-    return (this.mode & 61440) === 40960;
-  }
-  isBlockDevice() {
-    return false;
-  }
-  isCharacterDevice() {
-    return false;
-  }
-  isFIFO() {
-    return false;
-  }
-  isSocket() {
-    return false;
-  }
-};
-var Dirent = class {
-  name;
-  parentPath;
-  path;
-  // Deprecated alias for parentPath
-  _isDir;
-  constructor(name, isDir, parentPath = "") {
-    this.name = name;
-    this._isDir = isDir;
-    this.parentPath = parentPath;
-    this.path = parentPath;
-  }
-  isFile() {
-    return !this._isDir;
-  }
-  isDirectory() {
-    return this._isDir;
-  }
-  isSymbolicLink() {
-    return false;
-  }
-  isBlockDevice() {
-    return false;
-  }
-  isCharacterDevice() {
-    return false;
-  }
-  isFIFO() {
-    return false;
-  }
-  isSocket() {
-    return false;
-  }
-};
-var Dir = class {
-  path;
-  _entries = null;
-  _index = 0;
-  _closed = false;
-  constructor(dirPath) {
-    this.path = dirPath;
-  }
-  _load() {
-    if (this._entries === null) {
-      this._entries = fs.readdirSync(this.path, { withFileTypes: true });
-    }
-    return this._entries;
-  }
-  readSync() {
-    if (this._closed) throw new Error("Directory handle was closed");
-    const entries = this._load();
-    if (this._index >= entries.length) return null;
-    return entries[this._index++];
-  }
-  async read() {
-    return this.readSync();
-  }
-  closeSync() {
-    this._closed = true;
-  }
-  async close() {
-    this.closeSync();
-  }
-  async *[Symbol.asyncIterator]() {
-    const entries = this._load();
-    for (const entry of entries) {
-      if (this._closed) return;
-      yield entry;
-    }
-    this._closed = true;
-  }
-};
-var FILE_HANDLE_READ_CHUNK_BYTES = 64 * 1024;
-var FILE_HANDLE_READ_BUFFER_BYTES = 16 * 1024;
-var FILE_HANDLE_MAX_READ_BYTES = 2 ** 31 - 1;
-function createAbortError(reason) {
-  const error = new Error("The operation was aborted");
-  error.name = "AbortError";
-  error.code = "ABORT_ERR";
-  if (reason !== void 0) {
-    error.cause = reason;
-  }
-  return error;
-}
-function validateAbortSignal(signal) {
-  if (signal === void 0) {
-    return void 0;
-  }
-  if (signal === null || typeof signal !== "object" || typeof signal.aborted !== "boolean" || typeof signal.addEventListener !== "function" || typeof signal.removeEventListener !== "function") {
-    const error = new TypeError(
-      'The "signal" argument must be an instance of AbortSignal'
-    );
-    error.code = "ERR_INVALID_ARG_TYPE";
-    throw error;
-  }
-  return signal;
-}
-function throwIfAborted(signal) {
-  if (signal?.aborted) {
-    throw createAbortError(signal.reason);
-  }
-}
-function waitForNextTick() {
-  return new Promise((resolve) => process.nextTick(resolve));
-}
-function createInternalAssertionError(message) {
-  const error = new Error(message);
-  error.code = "ERR_INTERNAL_ASSERTION";
-  return error;
-}
-function createOutOfRangeError(name, range, received) {
-  const error = new RangeError(
-    `The value of "${name}" is out of range. It must be ${range}. Received ${String(received)}`
-  );
-  error.code = "ERR_OUT_OF_RANGE";
-  return error;
-}
-function formatInvalidArgReceived(actual) {
-  if (actual === null) {
-    return "Received null";
-  }
-  if (actual === void 0) {
-    return "Received undefined";
-  }
-  if (typeof actual === "string") {
-    return `Received type string ('${actual}')`;
-  }
-  if (typeof actual === "number") {
-    return `Received type number (${String(actual)})`;
-  }
-  if (typeof actual === "boolean") {
-    return `Received type boolean (${String(actual)})`;
-  }
-  if (typeof actual === "bigint") {
-    return `Received type bigint (${actual.toString()}n)`;
-  }
-  if (typeof actual === "symbol") {
-    return `Received type symbol (${String(actual)})`;
-  }
-  if (typeof actual === "function") {
-    return actual.name ? `Received function ${actual.name}` : "Received function";
-  }
-  if (Array.isArray(actual)) {
-    return "Received an instance of Array";
-  }
-  if (actual && typeof actual === "object") {
-    const constructorName = actual.constructor?.name;
-    if (constructorName) {
-      return `Received an instance of ${constructorName}`;
-    }
-  }
-  return `Received type ${typeof actual} (${String(actual)})`;
-}
-function createInvalidArgTypeError(name, expected, actual) {
-  const error = new TypeError(
-    `The "${name}" argument must be ${expected}. ${formatInvalidArgReceived(actual)}`
-  );
-  error.code = "ERR_INVALID_ARG_TYPE";
-  return error;
-}
-function createInvalidArgValueError(name, message) {
-  const error = new TypeError(
-    `The argument '${name}' ${message}`
-  );
-  error.code = "ERR_INVALID_ARG_VALUE";
-  return error;
-}
-function createInvalidEncodingError(encoding) {
-  const printable = typeof encoding === "string" ? `'${encoding}'` : encoding === void 0 ? "undefined" : encoding === null ? "null" : String(encoding);
-  const error = new TypeError(
-    `The argument 'encoding' is invalid encoding. Received ${printable}`
-  );
-  error.code = "ERR_INVALID_ARG_VALUE";
-  return error;
-}
-function toUint8ArrayChunk(chunk, encoding) {
-  if (typeof chunk === "string") {
-    return import_buffer.Buffer.from(chunk, encoding ?? "utf8");
-  }
-  if (import_buffer.Buffer.isBuffer(chunk)) {
-    return new Uint8Array(chunk.buffer, chunk.byteOffset, chunk.byteLength);
-  }
-  if (chunk instanceof Uint8Array) {
-    return chunk;
-  }
-  if (ArrayBuffer.isView(chunk)) {
-    return new Uint8Array(chunk.buffer, chunk.byteOffset, chunk.byteLength);
-  }
-  throw createInvalidArgTypeError("data", "a string, Buffer, TypedArray, or DataView", chunk);
-}
-async function* iterateWriteChunks(data, encoding) {
-  if (typeof data === "string" || ArrayBuffer.isView(data)) {
-    yield toUint8ArrayChunk(data, encoding);
-    return;
-  }
-  if (data && typeof data[Symbol.asyncIterator] === "function") {
-    for await (const chunk of data) {
-      yield toUint8ArrayChunk(chunk, encoding);
-    }
-    return;
-  }
-  if (data && typeof data[Symbol.iterator] === "function") {
-    for (const chunk of data) {
-      yield toUint8ArrayChunk(chunk, encoding);
-    }
-    return;
-  }
-  throw createInvalidArgTypeError("data", "a string, Buffer, TypedArray, DataView, or Iterable", data);
-}
-var FileHandle = class _FileHandle {
-  _fd;
-  _closing = false;
-  _closed = false;
-  _listeners = /* @__PURE__ */ new Map();
-  constructor(fd) {
-    this._fd = fd;
-  }
-  static _assertHandle(handle) {
-    if (!(handle instanceof _FileHandle)) {
-      throw createInternalAssertionError("handle must be an instance of FileHandle");
-    }
-    return handle;
-  }
-  _emitCloseOnce() {
-    if (this._closed) {
-      this._fd = -1;
-      this.emit("close");
-      return;
-    }
-    this._closed = true;
-    this._fd = -1;
-    this.emit("close");
-  }
-  _resolvePath() {
-    if (this._fd < 0) {
-      return null;
-    }
-    return _fdGetPath.applySync(void 0, [this._fd]);
-  }
-  get fd() {
-    return this._fd;
-  }
-  get closed() {
-    return this._closed;
-  }
-  on(event, listener) {
-    const listeners = this._listeners.get(event) ?? [];
-    listeners.push(listener);
-    this._listeners.set(event, listeners);
-    return this;
-  }
-  once(event, listener) {
-    const wrapper = (...args) => {
-      this.off(event, wrapper);
-      listener(...args);
-    };
-    wrapper._originalListener = listener;
-    return this.on(event, wrapper);
-  }
-  off(event, listener) {
-    const listeners = this._listeners.get(event);
-    if (!listeners) {
-      return this;
-    }
-    const index = listeners.findIndex(
-      (candidate) => candidate === listener || candidate._originalListener === listener
-    );
-    if (index !== -1) {
-      listeners.splice(index, 1);
-    }
-    return this;
-  }
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-  emit(event, ...args) {
-    const listeners = this._listeners.get(event);
-    if (!listeners || listeners.length === 0) {
-      return false;
-    }
-    for (const listener of listeners.slice()) {
-      listener(...args);
-    }
-    return true;
-  }
-  async close() {
-    const handle = _FileHandle._assertHandle(this);
-    if (handle._closing || handle._closed) {
-      if (handle._fd < 0) {
-        throw createFsError("EBADF", "EBADF: bad file descriptor, close", "close");
-      }
-    }
-    handle._closing = true;
-    try {
-      fs.closeSync(handle._fd);
-      handle._emitCloseOnce();
-    } finally {
-      handle._closing = false;
-    }
-  }
-  async stat() {
-    const handle = _FileHandle._assertHandle(this);
-    return fs.fstatSync(handle.fd);
-  }
-  async sync() {
-    const handle = _FileHandle._assertHandle(this);
-    fs.fsyncSync(handle.fd);
-  }
-  async datasync() {
-    return this.sync();
-  }
-  async truncate(len) {
-    const handle = _FileHandle._assertHandle(this);
-    fs.ftruncateSync(handle.fd, len);
-  }
-  async chmod(mode) {
-    const handle = _FileHandle._assertHandle(this);
-    const path = handle._resolvePath();
-    if (!path) {
-      throw createFsError("EBADF", "EBADF: bad file descriptor", "chmod");
-    }
-    fs.chmodSync(path, mode);
-  }
-  async chown(uid, gid) {
-    const handle = _FileHandle._assertHandle(this);
-    const path = handle._resolvePath();
-    if (!path) {
-      throw createFsError("EBADF", "EBADF: bad file descriptor", "chown");
-    }
-    fs.chownSync(path, uid, gid);
-  }
-  async utimes(atime, mtime) {
-    const handle = _FileHandle._assertHandle(this);
-    fs.futimesSync(handle.fd, atime, mtime);
-  }
-  async read(buffer, offset, length, position) {
-    const handle = _FileHandle._assertHandle(this);
-    let target = buffer;
-    let readOffset = offset;
-    let readLength = length;
-    let readPosition = position;
-    if (target !== null && typeof target === "object" && !ArrayBuffer.isView(target)) {
-      readOffset = target.offset;
-      readLength = target.length;
-      readPosition = target.position;
-      target = target.buffer ?? null;
-    }
-    if (target === null) {
-      target = import_buffer.Buffer.alloc(FILE_HANDLE_READ_BUFFER_BYTES);
-    }
-    if (!ArrayBuffer.isView(target)) {
-      throw createInvalidArgTypeError("buffer", "an instance of ArrayBufferView", target);
-    }
-    const normalizedOffset = readOffset ?? 0;
-    const normalizedLength = readLength ?? target.byteLength - normalizedOffset;
-    const bytesRead = fs.readSync(
-      handle.fd,
-      target,
-      normalizedOffset,
-      normalizedLength,
-      readPosition ?? null
-    );
-    return { bytesRead, buffer: target };
-  }
-  async write(buffer, offsetOrPosition, lengthOrEncoding, position) {
-    const handle = _FileHandle._assertHandle(this);
-    if (typeof buffer === "string") {
-      const encoding = typeof lengthOrEncoding === "string" ? lengthOrEncoding : "utf8";
-      if (encoding === "hex" && buffer.length % 2 !== 0) {
-        throw createInvalidArgValueError("encoding", `is invalid for data of length ${buffer.length}`);
-      }
-      const bytesWritten2 = fs.writeSync(handle.fd, import_buffer.Buffer.from(buffer, encoding), 0, void 0, offsetOrPosition ?? null);
-      return { bytesWritten: bytesWritten2, buffer };
-    }
-    if (!ArrayBuffer.isView(buffer)) {
-      throw createInvalidArgTypeError("buffer", "a string, Buffer, TypedArray, or DataView", buffer);
-    }
-    const offset = offsetOrPosition ?? 0;
-    const length = typeof lengthOrEncoding === "number" ? lengthOrEncoding : void 0;
-    const bytesWritten = fs.writeSync(handle.fd, buffer, offset, length, position ?? null);
-    return { bytesWritten, buffer };
-  }
-  async readFile(options) {
-    const handle = _FileHandle._assertHandle(this);
-    const normalized = typeof options === "string" ? { encoding: options } : options ?? void 0;
-    const signal = validateAbortSignal(normalized?.signal);
-    const encoding = normalized?.encoding ?? void 0;
-    const stats = await handle.stat();
-    if (stats.size > FILE_HANDLE_MAX_READ_BYTES) {
-      const error = new RangeError("File size is greater than 2 GiB");
-      error.code = "ERR_FS_FILE_TOO_LARGE";
-      throw error;
-    }
-    await waitForNextTick();
-    throwIfAborted(signal);
-    const chunks = [];
-    let totalLength = 0;
-    while (true) {
-      throwIfAborted(signal);
-      const chunk = import_buffer.Buffer.alloc(FILE_HANDLE_READ_CHUNK_BYTES);
-      const { bytesRead } = await handle.read(chunk, 0, chunk.byteLength, null);
-      if (bytesRead === 0) {
-        break;
-      }
-      chunks.push(chunk.subarray(0, bytesRead));
-      totalLength += bytesRead;
-      if (totalLength > FILE_HANDLE_MAX_READ_BYTES) {
-        const error = new RangeError("File size is greater than 2 GiB");
-        error.code = "ERR_FS_FILE_TOO_LARGE";
-        throw error;
-      }
-      await waitForNextTick();
-    }
-    const result = import_buffer.Buffer.concat(chunks, totalLength);
-    return encoding ? result.toString(encoding) : result;
-  }
-  async writeFile(data, options) {
-    const handle = _FileHandle._assertHandle(this);
-    const normalized = typeof options === "string" ? { encoding: options } : options ?? void 0;
-    const signal = validateAbortSignal(normalized?.signal);
-    const encoding = normalized?.encoding ?? void 0;
-    await waitForNextTick();
-    throwIfAborted(signal);
-    for await (const chunk of iterateWriteChunks(data, encoding)) {
-      throwIfAborted(signal);
-      await handle.write(chunk, 0, chunk.byteLength, void 0);
-      await waitForNextTick();
-    }
-  }
-  async appendFile(data, options) {
-    return this.writeFile(data, options);
-  }
-  createReadStream(options) {
-    _FileHandle._assertHandle(this);
-    return new ReadStream(null, { ...options ?? {}, fd: this });
-  }
-  createWriteStream(options) {
-    _FileHandle._assertHandle(this);
-    return new WriteStream(null, { ...options ?? {}, fd: this });
-  }
-};
-function isArrayBufferView(value) {
-  return ArrayBuffer.isView(value);
-}
-function createInvalidPropertyTypeError(propertyPath, actual) {
-  let received;
-  if (actual === null) {
-    received = "Received null";
-  } else if (typeof actual === "string") {
-    received = `Received type string ('${actual}')`;
-  } else {
-    received = `Received type ${typeof actual} (${String(actual)})`;
-  }
-  const error = new TypeError(
-    `The "${propertyPath}" property must be of type function. ${received}`
-  );
-  error.code = "ERR_INVALID_ARG_TYPE";
-  return error;
-}
-function validateCallback(callback, name = "cb") {
-  if (typeof callback !== "function") {
-    throw createInvalidArgTypeError(name, "of type function", callback);
-  }
-}
-function validateEncodingValue(encoding) {
-  if (encoding === void 0 || encoding === null) {
-    return;
-  }
-  if (typeof encoding !== "string" || !import_buffer.Buffer.isEncoding(encoding)) {
-    throw createInvalidEncodingError(encoding);
-  }
-}
-function validateEncodingOption(options) {
-  if (typeof options === "string") {
-    validateEncodingValue(options);
-    return;
-  }
-  if (options && typeof options === "object" && "encoding" in options) {
-    validateEncodingValue(options.encoding);
-  }
-}
-function normalizePathLike(path, name = "path") {
-  if (typeof path === "string") {
-    return path;
-  }
-  if (import_buffer.Buffer.isBuffer(path)) {
-    return path.toString("utf8");
-  }
-  if (path instanceof URL) {
-    if (path.protocol === "file:") {
-      return path.pathname;
-    }
-    throw createInvalidArgTypeError(name, "of type string or an instance of Buffer or URL", path);
-  }
-  throw createInvalidArgTypeError(name, "of type string or an instance of Buffer or URL", path);
-}
-function tryNormalizeExistsPath(path) {
-  try {
-    return normalizePathLike(path);
-  } catch {
-    return null;
-  }
-}
-function normalizeNumberArgument(name, value, options = {}) {
-  const { min = 0, max = 2147483647, allowNegativeOne = false } = options;
-  if (typeof value !== "number") {
-    throw createInvalidArgTypeError(name, "of type number", value);
-  }
-  if (!Number.isFinite(value) || !Number.isInteger(value)) {
-    throw createOutOfRangeError(name, "an integer", value);
-  }
-  if (allowNegativeOne && value === -1 || value >= min && value <= max) {
-    return value;
-  }
-  throw createOutOfRangeError(name, `>= ${min} && <= ${max}`, value);
-}
-function normalizeModeArgument(mode, name = "mode") {
-  if (typeof mode === "string") {
-    if (!/^[0-7]+$/.test(mode)) {
-      throw createInvalidArgValueError(name, "must be a 32-bit unsigned integer or an octal string. Received '" + mode + "'");
-    }
-    return parseInt(mode, 8);
-  }
-  return normalizeNumberArgument(name, mode, { min: 0, max: 4294967295 });
-}
-function normalizeOpenModeArgument(mode) {
-  if (mode === void 0 || mode === null) {
-    return void 0;
-  }
-  return normalizeModeArgument(mode);
-}
-function applyProcessUmask(mode) {
-  return (mode & ~0o777) | ((mode & 0o777) & ~(_umask & 0o777));
-}
-function validateWriteStreamStartOption(options) {
-  if (options?.start === void 0) {
-    return;
-  }
-  if (typeof options.start !== "number") {
-    throw createInvalidArgTypeError("start", "of type number", options.start);
-  }
-  if (!Number.isFinite(options.start) || !Number.isInteger(options.start) || options.start < 0) {
-    throw createOutOfRangeError("start", ">= 0", options.start);
-  }
-}
-function validateBooleanOption(name, value) {
-  if (value === void 0) {
-    return void 0;
-  }
-  if (typeof value !== "boolean") {
-    throw createInvalidArgTypeError(name, "of type boolean", value);
-  }
-  return value;
-}
-function validateAbortSignalOption(name, signal) {
-  if (signal === void 0) {
-    return void 0;
-  }
-  if (signal === null || typeof signal !== "object" || typeof signal.aborted !== "boolean" || typeof signal.addEventListener !== "function" || typeof signal.removeEventListener !== "function") {
-    const error = new TypeError(
-      `The "${name}" property must be an instance of AbortSignal. ${formatInvalidArgReceived(signal)}`
-    );
-    error.code = "ERR_INVALID_ARG_TYPE";
-    throw error;
-  }
-  return signal;
-}
-function normalizeWatchOptions(options, allowString) {
-  let normalized;
-  if (options === void 0 || options === null) {
-    normalized = {};
-  } else if (typeof options === "string") {
-    if (!allowString) {
-      throw createInvalidArgTypeError("options", "of type object", options);
-    }
-    validateEncodingValue(options);
-    normalized = { encoding: options };
-  } else if (typeof options === "object") {
-    normalized = options;
-  } else {
-    throw createInvalidArgTypeError(
-      "options",
-      allowString ? "one of type string or object" : "of type object",
-      options
-    );
-  }
-  validateBooleanOption("options.persistent", normalized.persistent);
-  validateBooleanOption("options.recursive", normalized.recursive);
-  validateEncodingOption(normalized);
-  const signal = validateAbortSignalOption("options.signal", normalized.signal);
-  return {
-    persistent: normalized.persistent,
-    recursive: normalized.recursive,
-    encoding: normalized.encoding,
-    signal
-  };
-}
-function normalizeWatchArguments(path, optionsOrListener, listener) {
-  const pathStr = normalizePathLike(path);
-  let options = optionsOrListener;
-  let resolvedListener = listener;
-  if (typeof optionsOrListener === "function") {
-    options = void 0;
-    resolvedListener = optionsOrListener;
-  }
-  if (resolvedListener !== void 0 && typeof resolvedListener !== "function") {
-    throw createInvalidArgTypeError("listener", "of type function", resolvedListener);
-  }
-  return {
-    path: pathStr,
-    listener: resolvedListener,
-    options: normalizeWatchOptions(options, true)
-  };
-}
-function normalizeWatchFileArguments(path, optionsOrListener, listener) {
-  const pathStr = normalizePathLike(path);
-  let options = {};
-  let resolvedListener = listener;
-  if (typeof optionsOrListener === "function") {
-    resolvedListener = optionsOrListener;
-  } else if (optionsOrListener === void 0 || optionsOrListener === null) {
-    options = {};
-  } else if (typeof optionsOrListener === "object") {
-    options = optionsOrListener;
-  } else {
-    throw createInvalidArgTypeError("listener", "of type function", optionsOrListener);
-  }
-  if (typeof resolvedListener !== "function") {
-    throw createInvalidArgTypeError("listener", "of type function", resolvedListener);
-  }
-  validateBooleanOption("persistent", options.persistent);
-  validateBooleanOption("bigint", options.bigint);
-  if (options.interval !== void 0 && typeof options.interval !== "number") {
-    throw createInvalidArgTypeError("interval", "of type number", options.interval);
-  }
-  return {
-    path: pathStr,
-    listener: resolvedListener,
-    options: {
-      persistent: options.persistent,
-      bigint: options.bigint,
-      interval: options.interval
-    }
-  };
-}
-function createMissingWatcherStats() {
-  return new Stats({
-    mode: 0,
-    size: 0,
-    dev: 0,
-    ino: 0,
-    nlink: 0,
-    uid: 0,
-    gid: 0,
-    rdev: 0,
-    blksize: 0,
-    blocks: 0,
-    atimeMs: 0,
-    mtimeMs: 0,
-    ctimeMs: 0,
-    birthtimeMs: 0
-  });
-}
-function createWatcherSnapshot(path) {
-  try {
-    const stats = fs.statSync(path);
-    return {
-      exists: true,
-      stats,
-      signature: JSON.stringify({
-        dev: stats.dev,
-        ino: stats.ino,
-        mode: stats.mode,
-        nlink: stats.nlink,
-        uid: stats.uid,
-        gid: stats.gid,
-        rdev: stats.rdev,
-        size: stats.size,
-        atimeMs: stats.atimeMs,
-        mtimeMs: stats.mtimeMs,
-        ctimeMs: stats.ctimeMs,
-        birthtimeMs: stats.birthtimeMs
-      })
-    };
-  } catch (error) {
-    if (error?.code === "ENOENT" || error?.code === "ENOTDIR") {
-      return {
-        exists: false,
-        stats: createMissingWatcherStats(),
-        signature: "missing"
-      };
-    }
-    throw error;
-  }
-}
-function createWatcherFilename(path, encoding) {
-  const basename = path === "/" ? "" : path.split("/").filter(Boolean).pop() ?? "";
-  if (encoding === "buffer") {
-    return import_buffer.Buffer.from(basename);
-  }
-  return basename;
-}
-function watcherEventType(previous, current) {
-  if (previous.exists !== current.exists) {
-    return "rename";
-  }
-  return "change";
-}
-var DEFAULT_FS_WATCH_INTERVAL_MS = 50;
-var DEFAULT_FS_WATCH_FILE_INTERVAL_MS = 5007;
-var activeStatWatchers = /* @__PURE__ */ new Map();
-var PollingFsWatcher = class {
-  constructor(path, options) {
-    this._path = path;
-    this._intervalMs = options.interval;
-    this._onChange = options.onChange;
-    this._onClose = options.onClose;
-    this._listeners = /* @__PURE__ */ new Map();
-    this._closed = false;
-    this._signal = options.signal;
-    this._snapshot = createWatcherSnapshot(path);
-    this._poll = () => {
-      if (this._closed) {
-        return;
-      }
-      let next;
-      try {
-        next = createWatcherSnapshot(this._path);
-      } catch (error) {
-        this.emit("error", error);
-        return;
-      }
-      if (next.signature === this._snapshot.signature) {
-        return;
-      }
-      const previous = this._snapshot;
-      this._snapshot = next;
-      this._onChange(next, previous);
-    };
-    this._handleAbort = () => {
-      this.close();
-    };
-    this._timer = setInterval(this._poll, this._intervalMs);
-    if (options.persistent === false) {
-      this._timer?.unref?.();
-    }
-    if (this._signal) {
-      if (this._signal.aborted) {
-        queueMicrotask(() => this.close());
-      } else {
-        this._signal.addEventListener("abort", this._handleAbort, { once: true });
-      }
-    }
-  }
-  _path;
-  _intervalMs;
-  _onChange;
-  _onClose;
-  _listeners;
-  _timer;
-  _closed;
-  _signal;
-  _handleAbort;
-  _snapshot;
-  _poll;
-  on(event, listener) {
-    const listeners = this._listeners.get(event) ?? [];
-    listeners.push(listener);
-    this._listeners.set(event, listeners);
-    return this;
-  }
-  addListener(event, listener) {
-    return this.on(event, listener);
-  }
-  once(event, listener) {
-    const wrapper = (...args) => {
-      this.removeListener(event, wrapper);
-      listener(...args);
-    };
-    wrapper._originalListener = listener;
-    return this.on(event, wrapper);
-  }
-  off(event, listener) {
-    return this.removeListener(event, listener);
-  }
-  removeListener(event, listener) {
-    const listeners = this._listeners.get(event);
-    if (!listeners) {
-      return this;
-    }
-    const index = listeners.findIndex(
-      (candidate) => candidate === listener || candidate._originalListener === listener
-    );
-    if (index >= 0) {
-      listeners.splice(index, 1);
-    }
-    if (listeners.length === 0) {
-      this._listeners.delete(event);
-    }
-    return this;
-  }
-  removeAllListeners(event) {
-    if (event === void 0) {
-      this._listeners.clear();
-    } else {
-      this._listeners.delete(event);
-    }
-    return this;
-  }
-  emit(event, ...args) {
-    const listeners = this._listeners.get(event);
-    if (!listeners?.length) {
-      return false;
-    }
-    listeners.slice().forEach((listener) => listener(...args));
-    return true;
-  }
-  ref() {
-    this._timer?.ref?.();
-    return this;
-  }
-  unref() {
-    this._timer?.unref?.();
-    return this;
-  }
-  close() {
-    if (this._closed) {
-      return;
-    }
-    this._closed = true;
-    if (this._timer !== void 0) {
-      clearInterval(this._timer);
-      this._timer = void 0;
-    }
-    if (this._signal) {
-      this._signal.removeEventListener("abort", this._handleAbort);
-    }
-    this._onClose?.();
-    this.emit("close");
-  }
-};
-function registerStatWatcher(path, watcher) {
-  const watchers = activeStatWatchers.get(path) ?? /* @__PURE__ */ new Set();
-  watchers.add(watcher);
-  activeStatWatchers.set(path, watchers);
-}
-function unregisterStatWatcher(path, watcher) {
-  const watchers = activeStatWatchers.get(path);
-  if (!watchers) {
-    return;
-  }
-  watchers.delete(watcher);
-  if (watchers.size === 0) {
-    activeStatWatchers.delete(path);
-  }
-}
-function createFsWatcher(path, options) {
-  const filename = createWatcherFilename(path, options.encoding);
-  const watcher = new PollingFsWatcher(path, {
-    interval: DEFAULT_FS_WATCH_INTERVAL_MS,
-    persistent: options.persistent,
-    signal: options.signal,
-    onChange(current, previous) {
-      watcher.emit("change", watcherEventType(previous, current), filename);
-    }
-  });
-  return watcher;
-}
-function createFsStatWatcher(path, options, listener) {
-  const watcher = new PollingFsWatcher(path, {
-    interval: options.interval ?? DEFAULT_FS_WATCH_FILE_INTERVAL_MS,
-    persistent: options.persistent,
-    onChange(current, previous) {
-      watcher.emit("change", current.stats, previous.stats);
-    },
-    onClose() {
-      unregisterStatWatcher(path, watcher);
-    }
-  });
-  watcher.on("change", listener);
-  registerStatWatcher(path, watcher);
-  return watcher;
-}
-async function* createPromisesWatchIterator(path, options) {
-  const events = [];
-  let wake = null;
-  let closed = false;
-  let thrown = null;
-  const watcher = fs.watch(path, options, (eventType, filename) => {
-    events.push({ eventType, filename });
-    wake?.();
-    wake = null;
-  });
-  watcher.on("close", () => {
-    closed = true;
-    wake?.();
-    wake = null;
-  });
-  watcher.on("error", (error) => {
-    thrown = error;
-    wake?.();
-    wake = null;
-  });
-  try {
-    while (true) {
-      if (events.length > 0) {
-        yield events.shift();
-        continue;
-      }
-      if (thrown) {
-        throw thrown;
-      }
-      if (closed) {
-        return;
-      }
-      await new Promise((resolve) => {
-        wake = resolve;
-      });
-    }
-  } finally {
-    watcher.close();
-  }
-}
-function isReadWriteOptionsObject(value) {
-  return value === null || value === void 0 || typeof value === "object" && !Array.isArray(value);
-}
-function normalizeOptionalPosition(value) {
-  if (value === void 0 || value === null || value === -1) {
-    return null;
-  }
-  if (typeof value === "bigint") {
-    return Number(value);
-  }
-  if (typeof value !== "number" || !Number.isInteger(value)) {
-    throw createInvalidArgTypeError("position", "an integer", value);
-  }
-  return value;
-}
-function normalizeOffsetLength(bufferByteLength, offsetValue, lengthValue) {
-  const offset = offsetValue ?? 0;
-  if (typeof offset !== "number" || !Number.isInteger(offset)) {
-    throw createInvalidArgTypeError("offset", "an integer", offset);
-  }
-  if (offset < 0 || offset > bufferByteLength) {
-    throw createOutOfRangeError("offset", `>= 0 && <= ${bufferByteLength}`, offset);
-  }
-  const defaultLength = bufferByteLength - offset;
-  const length = lengthValue ?? defaultLength;
-  if (typeof length !== "number" || !Number.isInteger(length)) {
-    throw createInvalidArgTypeError("length", "an integer", length);
-  }
-  if (length < 0 || length > 2147483647) {
-    throw createOutOfRangeError("length", ">= 0 && <= 2147483647", length);
-  }
-  if (offset + length > bufferByteLength) {
-    throw createOutOfRangeError("length", `>= 0 && <= ${bufferByteLength - offset}`, length);
-  }
-  return { offset, length };
-}
-function normalizeReadSyncArgs(buffer, offsetOrOptions, length, position) {
-  if (!isArrayBufferView(buffer)) {
-    throw createInvalidArgTypeError("buffer", "an instance of Buffer, TypedArray, or DataView", buffer);
-  }
-  if (length === void 0 && position === void 0 && isReadWriteOptionsObject(offsetOrOptions)) {
-    const options = offsetOrOptions ?? {};
-    const { offset: offset2, length: length2 } = normalizeOffsetLength(
-      buffer.byteLength,
-      options.offset,
-      options.length
-    );
-    return {
-      buffer,
-      offset: offset2,
-      length: length2,
-      position: normalizeOptionalPosition(options.position)
-    };
-  }
-  const { offset, length: normalizedLength } = normalizeOffsetLength(
-    buffer.byteLength,
-    offsetOrOptions,
-    length
-  );
-  return {
-    buffer,
-    offset,
-    length: normalizedLength,
-    position: normalizeOptionalPosition(position)
-  };
-}
-function normalizeWriteSyncArgs(buffer, offsetOrPosition, lengthOrEncoding, position) {
-  if (typeof buffer === "string") {
-    if (lengthOrEncoding === void 0 && position === void 0 && isReadWriteOptionsObject(offsetOrPosition)) {
-      const options = offsetOrPosition ?? {};
-      const encoding = typeof options.encoding === "string" ? options.encoding : void 0;
-      return {
-        buffer,
-        offset: 0,
-        length: import_buffer.Buffer.byteLength(buffer, encoding),
-        position: normalizeOptionalPosition(options.position),
-        encoding
-      };
-    }
-    if (offsetOrPosition !== void 0 && offsetOrPosition !== null && typeof offsetOrPosition !== "number") {
-      throw createInvalidArgTypeError("position", "an integer", offsetOrPosition);
-    }
-    return {
-      buffer,
-      offset: 0,
-      length: import_buffer.Buffer.byteLength(buffer, typeof lengthOrEncoding === "string" ? lengthOrEncoding : void 0),
-      position: normalizeOptionalPosition(offsetOrPosition),
-      encoding: typeof lengthOrEncoding === "string" ? lengthOrEncoding : void 0
-    };
-  }
-  if (!isArrayBufferView(buffer)) {
-    throw createInvalidArgTypeError("buffer", "a string, Buffer, TypedArray, or DataView", buffer);
-  }
-  if (lengthOrEncoding === void 0 && position === void 0 && isReadWriteOptionsObject(offsetOrPosition)) {
-    const options = offsetOrPosition ?? {};
-    const { offset: offset2, length: length2 } = normalizeOffsetLength(
-      buffer.byteLength,
-      options.offset,
-      options.length
-    );
-    return {
-      buffer,
-      offset: offset2,
-      length: length2,
-      position: normalizeOptionalPosition(options.position)
-    };
-  }
-  const { offset, length } = normalizeOffsetLength(
-    buffer.byteLength,
-    offsetOrPosition,
-    typeof lengthOrEncoding === "number" ? lengthOrEncoding : void 0
-  );
-  return {
-    buffer,
-    offset,
-    length,
-    position: normalizeOptionalPosition(position)
-  };
-}
-function normalizeFdInteger(fd) {
-  return normalizeNumberArgument("fd", fd);
-}
-function normalizeIoVectorBuffers(buffers) {
-  if (!Array.isArray(buffers)) {
-    throw createInvalidArgTypeError("buffers", "an ArrayBufferView[]", buffers);
-  }
-  for (const buffer of buffers) {
-    if (!isArrayBufferView(buffer)) {
-      throw createInvalidArgTypeError("buffers", "an ArrayBufferView[]", buffers);
-    }
-  }
-  return buffers;
-}
-function validateStreamFsOverride(streamFs, required) {
-  if (streamFs === void 0) {
-    return void 0;
-  }
-  if (streamFs === null || typeof streamFs !== "object") {
-    throw createInvalidArgTypeError("options.fs", "an object", streamFs);
-  }
-  const typed = streamFs;
-  for (const key of required) {
-    if (typeof typed[key] !== "function") {
-      throw createInvalidPropertyTypeError(`options.fs.${String(key)}`, typed[key]);
-    }
-  }
-  return typed;
-}
-function normalizeStreamFd(fd) {
-  if (fd === void 0) {
-    return void 0;
-  }
-  if (fd instanceof FileHandle) {
-    return fd;
-  }
-  return normalizeNumberArgument("fd", fd);
-}
-function normalizeStreamPath(pathValue, fd) {
-  if (pathValue === null) {
-    if (fd === void 0) {
-      throw createInvalidArgTypeError("path", "of type string or an instance of Buffer or URL", pathValue);
-    }
-    return null;
-  }
-  if (typeof pathValue === "string" || import_buffer.Buffer.isBuffer(pathValue)) {
-    return pathValue;
-  }
-  if (pathValue instanceof URL) {
-    if (pathValue.protocol === "file:") {
-      return pathValue.pathname;
-    }
-    throw createInvalidArgTypeError("path", "of type string or an instance of Buffer or URL", pathValue);
-  }
-  throw createInvalidArgTypeError("path", "of type string or an instance of Buffer or URL", pathValue);
-}
-function normalizeStreamStartEnd(options) {
-  const start = options?.start;
-  const end = options?.end;
-  if (start !== void 0 && typeof start !== "number") {
-    throw createInvalidArgTypeError("start", "of type number", start);
-  }
-  if (end !== void 0 && typeof end !== "number") {
-    throw createInvalidArgTypeError("end", "of type number", end);
-  }
-  const normalizedStart = start;
-  const normalizedEnd = end;
-  if (normalizedStart !== void 0 && (!Number.isFinite(normalizedStart) || normalizedStart < 0)) {
-    throw createOutOfRangeError("start", ">= 0", start);
-  }
-  if (normalizedEnd !== void 0 && (!Number.isFinite(normalizedEnd) || normalizedEnd < 0)) {
-    throw createOutOfRangeError("end", ">= 0", end);
-  }
-  if (normalizedStart !== void 0 && normalizedEnd !== void 0 && normalizedStart > normalizedEnd) {
-    throw createOutOfRangeError("start", `<= "end" (here: ${normalizedEnd})`, normalizedStart);
-  }
-  const highWaterMarkCandidate = options?.highWaterMark ?? options?.bufferSize;
-  const highWaterMark = typeof highWaterMarkCandidate === "number" && Number.isFinite(highWaterMarkCandidate) && highWaterMarkCandidate > 0 ? Math.floor(highWaterMarkCandidate) : 65536;
-  return {
-    start: normalizedStart,
-    end: normalizedEnd,
-    highWaterMark,
-    autoClose: options?.autoClose !== false
-  };
-}
-var ReadStream = class {
-  constructor(filePath, _options) {
-    this._options = _options;
-    const fdOption = normalizeStreamFd(_options?.fd);
-    const optionsRecord = _options ?? {};
-    const streamState = normalizeStreamStartEnd(optionsRecord);
-    this.path = filePath;
-    this.start = streamState.start;
-    this.end = streamState.end;
-    this.autoClose = streamState.autoClose;
-    this.readableHighWaterMark = streamState.highWaterMark;
-    this.readableEncoding = _options?.encoding ?? null;
-    this._position = this.start ?? null;
-    this._remaining = this.end !== void 0 ? this.end - (this.start ?? 0) + 1 : null;
-    this._signal = validateAbortSignal(_options?.signal);
-    if (fdOption instanceof FileHandle) {
-      if (_options?.fs !== void 0) {
-        const error = new Error("The FileHandle with fs method is not implemented");
-        error.code = "ERR_METHOD_NOT_IMPLEMENTED";
-        throw error;
-      }
-      this._fileHandle = fdOption;
-      this.fd = fdOption.fd;
-      this.pending = false;
-      this._handleCloseListener = () => {
-        if (!this.closed) {
-          this.closed = true;
-          this.destroyed = true;
-          this.readable = false;
-          this.emit("close");
-        }
-      };
-      this._fileHandle.on("close", this._handleCloseListener);
-    } else {
-      this._streamFs = validateStreamFsOverride(_options?.fs, ["open", "read", "close"]);
-      if (typeof fdOption === "number") {
-        this.fd = fdOption;
-        this.pending = false;
-      }
-    }
-    if (this._signal) {
-      if (this._signal.aborted) {
-        queueMicrotask(() => {
-          void this._abort(this._signal?.reason);
-        });
-      } else {
-        this._signal.addEventListener("abort", () => {
-          void this._abort(this._signal?.reason);
-        });
-      }
-    }
-    if (this.fd === null) {
-      queueMicrotask(() => {
-        void this._openIfNeeded();
-      });
-    }
-  }
-  _options;
-  bytesRead = 0;
-  path;
-  pending = true;
-  readable = true;
-  readableAborted = false;
-  readableDidRead = false;
-  readableEncoding = null;
-  readableEnded = false;
-  readableFlowing = null;
-  readableHighWaterMark = 65536;
-  readableLength = 0;
-  readableObjectMode = false;
-  destroyed = false;
-  closed = false;
-  errored = null;
-  fd = null;
-  autoClose = true;
-  start;
-  end;
-  _listeners = /* @__PURE__ */ new Map();
-  _started = false;
-  _reading = false;
-  _readScheduled = false;
-  _opening = false;
-  _remaining = null;
-  _position = null;
-  _fileHandle = null;
-  _streamFs;
-  _signal;
-  _handleCloseListener;
-  _emitOpen(fd) {
-    this.fd = fd;
-    this.pending = false;
-    this.emit("open", fd);
-    if (this._started || this.readableFlowing) {
-      this._scheduleRead();
-    }
-  }
-  async _openIfNeeded() {
-    if (this.fd !== null || this._opening || this.destroyed || this.closed) {
-      return;
-    }
-    const pathStr = typeof this.path === "string" ? this.path : this.path instanceof import_buffer.Buffer ? this.path.toString() : null;
-    if (!pathStr) {
-      this._handleStreamError(createFsError("EBADF", "EBADF: bad file descriptor", "read"));
-      return;
-    }
-    this._opening = true;
-    const opener = (this._streamFs?.open ?? fs.open).bind(this._streamFs ?? fs);
-    opener(pathStr, "r", 438, (error, fd) => {
-      this._opening = false;
-      if (error || typeof fd !== "number") {
-        this._handleStreamError(error ?? createFsError("EBADF", "EBADF: bad file descriptor", "open"));
-        return;
-      }
-      this._emitOpen(fd);
-    });
-  }
-  async _closeUnderlying() {
-    if (this._fileHandle) {
-      if (!this._fileHandle.closed) {
-        await this._fileHandle.close();
-      }
-      return;
-    }
-    if (this.fd !== null && this.fd >= 0) {
-      const fd = this.fd;
-      const closer = (this._streamFs?.close ?? fs.close).bind(this._streamFs ?? fs);
-      await new Promise((resolve) => {
-        closer(fd, () => resolve());
-      });
-      this.fd = -1;
-    }
-  }
-  _scheduleRead() {
-    if (this._readScheduled || this._reading || this.readableFlowing === false || this.destroyed || this.closed) {
-      return;
-    }
-    this._readScheduled = true;
-    queueMicrotask(() => {
-      this._readScheduled = false;
-      void this._readNextChunk();
-    });
-  }
-  async _readNextChunk() {
-    if (this._reading || this.destroyed || this.closed || this.readableFlowing === false) {
-      return;
-    }
-    throwIfAborted(this._signal);
-    if (this.fd === null) {
-      await this._openIfNeeded();
-      return;
-    }
-    if (this._remaining === 0) {
-      await this._finishReadable();
-      return;
-    }
-    const nextLength = this._remaining === null ? this.readableHighWaterMark : Math.min(this.readableHighWaterMark, this._remaining);
-    const target = import_buffer.Buffer.alloc(nextLength);
-    this._reading = true;
-    const onRead = async (error, bytesRead = 0) => {
-      this._reading = false;
-      if (error) {
-        this._handleStreamError(error);
-        return;
-      }
-      if (bytesRead === 0) {
-        await this._finishReadable();
-        return;
-      }
-      this.bytesRead += bytesRead;
-      this.readableDidRead = true;
-      if (typeof this._position === "number") {
-        this._position += bytesRead;
-      }
-      if (this._remaining !== null) {
-        this._remaining -= bytesRead;
-      }
-      const chunk = target.subarray(0, bytesRead);
-      this.emit("data", this.readableEncoding ? chunk.toString(this.readableEncoding) : import_buffer.Buffer.from(chunk));
-      if (this._remaining === 0) {
-        await this._finishReadable();
-        return;
-      }
-      this._scheduleRead();
-    };
-    if (this._fileHandle) {
-      try {
-        const result = await this._fileHandle.read(target, 0, nextLength, this._position);
-        await onRead(null, result.bytesRead);
-      } catch (error) {
-        await onRead(error);
-      }
-      return;
-    }
-    const reader = (this._streamFs?.read ?? fs.read).bind(this._streamFs ?? fs);
-    reader(this.fd, target, 0, nextLength, this._position, (error, bytesRead) => {
-      void onRead(error, bytesRead ?? 0);
-    });
-  }
-  async _finishReadable() {
-    if (this.readableEnded) {
-      return;
-    }
-    this.readable = false;
-    this.readableEnded = true;
-    this.emit("end");
-    if (this.autoClose) {
-      this.destroy();
-    }
-  }
-  _handleStreamError(error) {
-    if (this.closed) {
-      return;
-    }
-    this.errored = error;
-    this.emit("error", error);
-    if (this.autoClose) {
-      this.destroy();
-    } else {
-      this.readable = false;
-    }
-  }
-  async _abort(reason) {
-    if (this.closed || this.destroyed) {
-      return;
-    }
-    this.readableAborted = true;
-    this.errored = createAbortError(reason);
-    this.emit("error", this.errored);
-    if (this._fileHandle) {
-      this.destroyed = true;
-      this.readable = false;
-      this.closed = true;
-      this.emit("close");
-      return;
-    }
-    if (this.autoClose) {
-      this.destroy();
-      return;
-    }
-    this.closed = true;
-    this.emit("close");
-  }
-  async _readAllContent() {
-    const chunks = [];
-    let totalLength = 0;
-    const savedFlowing = this.readableFlowing;
-    this.readableFlowing = false;
-    while (this._remaining !== 0) {
-      if (this.fd === null) {
-        await this._openIfNeeded();
-      }
-      if (this.fd === null) {
-        break;
-      }
-      const nextLength = this._remaining === null ? FILE_HANDLE_READ_CHUNK_BYTES : Math.min(FILE_HANDLE_READ_CHUNK_BYTES, this._remaining);
-      const target = import_buffer.Buffer.alloc(nextLength);
-      let bytesRead = 0;
-      if (this._fileHandle) {
-        bytesRead = (await this._fileHandle.read(target, 0, nextLength, this._position)).bytesRead;
-      } else {
-        bytesRead = fs.readSync(this.fd, target, 0, nextLength, this._position);
-      }
-      if (bytesRead === 0) {
-        break;
-      }
-      const chunk = target.subarray(0, bytesRead);
-      chunks.push(chunk);
-      totalLength += bytesRead;
-      if (typeof this._position === "number") {
-        this._position += bytesRead;
-      }
-      if (this._remaining !== null) {
-        this._remaining -= bytesRead;
-      }
-    }
-    this.readableFlowing = savedFlowing;
-    return import_buffer.Buffer.concat(chunks, totalLength);
-  }
-  on(event, listener) {
-    const listeners = this._listeners.get(event) ?? [];
-    listeners.push(listener);
-    this._listeners.set(event, listeners);
-    if (event === "data") {
-      this._started = true;
-      if (this.readableFlowing !== false) {
-        this.readableFlowing = true;
-        this._scheduleRead();
-      }
-    }
-    return this;
-  }
-  once(event, listener) {
-    const wrapper = (...args) => {
-      this.off(event, wrapper);
-      listener(...args);
-    };
-    wrapper._originalListener = listener;
-    return this.on(event, wrapper);
-  }
-  off(event, listener) {
-    const listeners = this._listeners.get(event);
-    if (!listeners) {
-      return this;
-    }
-    const index = listeners.findIndex(
-      (fn) => fn === listener || fn._originalListener === listener
-    );
-    if (index >= 0) {
-      listeners.splice(index, 1);
-    }
-    return this;
-  }
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-  removeAllListeners(event) {
-    if (event === void 0) {
-      this._listeners.clear();
-    } else {
-      this._listeners.delete(event);
-    }
-    return this;
-  }
-  emit(event, ...args) {
-    const listeners = this._listeners.get(event);
-    if (!listeners?.length) {
-      return false;
-    }
-    listeners.slice().forEach((listener) => listener(...args));
-    return true;
-  }
-  read() {
-    return null;
-  }
-  pipe(destination, _options) {
-    this.on("data", (chunk) => {
-      destination.write(chunk);
-    });
-    this.on("end", () => {
-      destination.end?.();
-    });
-    this.resume();
-    return destination;
-  }
-  unpipe(_destination) {
-    return this;
-  }
-  pause() {
-    this.readableFlowing = false;
-    return this;
-  }
-  resume() {
-    this._started = true;
-    this.readableFlowing = true;
-    this._scheduleRead();
-    return this;
-  }
-  setEncoding(encoding) {
-    this.readableEncoding = encoding;
-    return this;
-  }
-  destroy(error) {
-    if (this.destroyed) {
-      return this;
-    }
-    this.destroyed = true;
-    this.readable = false;
-    if (error) {
-      this.errored = error;
-      this.emit("error", error);
-    }
-    queueMicrotask(() => {
-      void this._closeUnderlying().then(() => {
-        if (!this.closed) {
-          this.closed = true;
-          this.emit("close");
-        }
-      });
-    });
-    return this;
-  }
-  close(callback) {
-    this.destroy();
-    if (callback) {
-      queueMicrotask(() => callback(null));
-    }
-  }
-  async *[Symbol.asyncIterator]() {
-    const content = await this._readAllContent();
-    yield this.readableEncoding ? content.toString(this.readableEncoding) : content;
-  }
-};
-var MAX_WRITE_STREAM_BYTES = 16 * 1024 * 1024;
-var WriteStream = class {
-  constructor(filePath, _options) {
-    this._options = _options;
-    const fdOption = normalizeStreamFd(_options?.fd);
-    const startOption = _options?.start;
-    const highWaterMarkCandidate = _options?.highWaterMark ?? _options?.bufferSize;
-    const openFlags = _options?.flags ?? "w";
-    this.path = filePath;
-    this.autoClose = _options?.autoClose !== false;
-    this.writableHighWaterMark = typeof highWaterMarkCandidate === "number" && Number.isFinite(highWaterMarkCandidate) && highWaterMarkCandidate > 0 ? Math.floor(highWaterMarkCandidate) : 16384;
-    this._position = typeof startOption === "number" ? startOption : null;
-    this._streamFs = validateStreamFsOverride(_options?.fs, ["open", "close", "write"]);
-    if (_options?.fs !== void 0) {
-      validateStreamFsOverride(_options?.fs, ["writev"]);
-    }
-    if (fdOption instanceof FileHandle) {
-      this._fileHandle = fdOption;
-      this.fd = fdOption.fd;
-      return;
-    }
-    if (typeof fdOption === "number") {
-      this.fd = fdOption;
-      return;
-    }
-    const pathStr = typeof this.path === "string" ? this.path : this.path instanceof import_buffer.Buffer ? this.path.toString() : null;
-    if (!pathStr) {
-      throw createFsError("EBADF", "EBADF: bad file descriptor", "write");
-    }
-    this.fd = fs.openSync(pathStr, openFlags, _options?.mode);
-    queueMicrotask(() => {
-      if (this.fd !== null && this.fd >= 0) {
-        this.emit("open", this.fd);
-      }
-    });
-  }
-  _options;
-  bytesWritten = 0;
-  path;
-  pending = false;
-  writable = true;
-  writableAborted = false;
-  writableEnded = false;
-  writableFinished = false;
-  writableHighWaterMark = 16384;
-  writableLength = 0;
-  writableObjectMode = false;
-  writableCorked = 0;
-  destroyed = false;
-  closed = false;
-  errored = null;
-  writableNeedDrain = false;
-  fd = null;
-  autoClose = true;
-  _chunks = [];
-  _listeners = /* @__PURE__ */ new Map();
-  _fileHandle = null;
-  _streamFs;
-  _position = null;
-  async _closeUnderlying() {
-    if (this._fileHandle) {
-      if (!this._fileHandle.closed) {
-        await this._fileHandle.close();
-      }
-      return;
-    }
-    if (this.fd !== null && this.fd >= 0) {
-      const fd = this.fd;
-      const closer = (this._streamFs?.close ?? fs.close).bind(this._streamFs ?? fs);
-      await new Promise((resolve) => {
-        closer(fd, () => resolve());
-      });
-      this.fd = -1;
-    }
-  }
-  close(callback) {
-    queueMicrotask(() => {
-      void this._closeUnderlying().then(() => {
-        if (!this.closed) {
-          this.closed = true;
-          this.writable = false;
-          this.emit("close");
-        }
-        callback?.(null);
-      });
-    });
-  }
-  write(chunk, encodingOrCallback, callback) {
-    if (this.writableEnded || this.destroyed) {
-      const error = new Error("write after end");
-      const cb2 = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-      queueMicrotask(() => cb2?.(error));
-      return false;
-    }
-    let data;
-    if (typeof chunk === "string") {
-      data = import_buffer.Buffer.from(chunk, typeof encodingOrCallback === "string" ? encodingOrCallback : "utf8");
-    } else if (isArrayBufferView(chunk)) {
-      data = new Uint8Array(chunk.buffer, chunk.byteOffset, chunk.byteLength);
-    } else {
-      throw createInvalidArgTypeError("chunk", "a string, Buffer, TypedArray, or DataView", chunk);
-    }
-    if (this.writableLength + data.length > MAX_WRITE_STREAM_BYTES) {
-      const error = new Error(`WriteStream buffer exceeded ${MAX_WRITE_STREAM_BYTES} bytes`);
-      this.errored = error;
-      this.destroyed = true;
-      this.writable = false;
-      const cb2 = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-      queueMicrotask(() => {
-        cb2?.(error);
-        this.emit("error", error);
-      });
-      return false;
-    }
-    this._chunks.push(data);
-    this.bytesWritten += data.length;
-    this.writableLength += data.length;
-    const cb = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-    queueMicrotask(() => cb?.(null));
-    return true;
-  }
-  end(chunkOrCb, encodingOrCallback, callback) {
-    if (this.writableEnded) {
-      return this;
-    }
-    let cb;
-    if (typeof chunkOrCb === "function") {
-      cb = chunkOrCb;
-    } else if (typeof encodingOrCallback === "function") {
-      cb = encodingOrCallback;
-      if (chunkOrCb !== void 0 && chunkOrCb !== null) {
-        this.write(chunkOrCb);
-      }
-    } else {
-      cb = callback;
-      if (chunkOrCb !== void 0 && chunkOrCb !== null) {
-        this.write(chunkOrCb, encodingOrCallback);
-      }
-    }
-    this.writableEnded = true;
-    this.writable = false;
-    this.writableFinished = true;
-    this.writableLength = 0;
-    queueMicrotask(() => {
-      void (async () => {
-        try {
-          if (this._fileHandle) {
-            for (const chunk of this._chunks) {
-              const result = await this._fileHandle.write(
-                chunk,
-                0,
-                chunk.byteLength,
-                this._position
-              );
-              if (typeof this._position === "number") {
-                this._position += result?.bytesWritten ?? chunk.byteLength;
-              }
-            }
-            if (this.autoClose && !this._fileHandle.closed) {
-              await this._fileHandle.close();
-            }
-          } else {
-            const pathStr = typeof this.path === "string" ? this.path : this.path instanceof import_buffer.Buffer ? this.path.toString() : null;
-            if (this.fd !== null && this.fd >= 0) {
-              const bytesWritten = fs.writevSync(this.fd, this._chunks, this._position);
-              if (typeof this._position === "number") {
-                this._position += bytesWritten;
-              }
-              if (this.autoClose) {
-                await this._closeUnderlying();
-              }
-            } else if (pathStr) {
-              const chunks = this._chunks.map((chunk) => import_buffer.Buffer.from(chunk));
-              if (typeof this._position === "number") {
-                const existing = fs.readFileSync(pathStr);
-                const finalSize = Math.max(
-                  existing.length,
-                  this._position + chunks.reduce((sum, chunk) => sum + chunk.length, 0)
-                );
-                const output = import_buffer.Buffer.alloc(finalSize);
-                existing.copy(output);
-                let cursor = this._position;
-                for (const chunk of chunks) {
-                  chunk.copy(output, cursor);
-                  cursor += chunk.length;
-                }
-                fs.writeFileSync(pathStr, output);
-              } else {
-                fs.writeFileSync(
-                  pathStr,
-                  import_buffer.Buffer.concat(chunks)
-                );
-              }
-              if (this.autoClose && this.fd !== null && this.fd >= 0) {
-                await this._closeUnderlying();
-              }
-            } else {
-              throw createFsError("EBADF", "EBADF: bad file descriptor", "write");
-            }
-          }
-          this.emit("finish");
-          if (this.autoClose && !this.closed) {
-            this.closed = true;
-            this.emit("close");
-          }
-          cb?.();
-        } catch (error) {
-          this.errored = error;
-          this.emit("error", error);
-        }
-      })();
-    });
-    return this;
-  }
-  setDefaultEncoding(_encoding) {
-    return this;
-  }
-  cork() {
-    this.writableCorked++;
-  }
-  uncork() {
-    if (this.writableCorked > 0) {
-      this.writableCorked--;
-    }
-  }
-  destroy(error) {
-    if (this.destroyed) {
-      return this;
-    }
-    this.destroyed = true;
-    this.writable = false;
-    if (error) {
-      this.errored = error;
-      this.emit("error", error);
-    }
-    queueMicrotask(() => {
-      void this._closeUnderlying().then(() => {
-        if (!this.closed) {
-          this.closed = true;
-          this.emit("close");
-        }
-      });
-    });
-    return this;
-  }
-  addListener(event, listener) {
-    return this.on(event, listener);
-  }
-  on(event, listener) {
-    const listeners = this._listeners.get(event) ?? [];
-    listeners.push(listener);
-    this._listeners.set(event, listeners);
-    return this;
-  }
-  once(event, listener) {
-    const wrapper = (...args) => {
-      this.removeListener(event, wrapper);
-      listener(...args);
-    };
-    return this.on(event, wrapper);
-  }
-  removeListener(event, listener) {
-    const listeners = this._listeners.get(event);
-    if (!listeners) {
-      return this;
-    }
-    const index = listeners.indexOf(listener);
-    if (index >= 0) {
-      listeners.splice(index, 1);
-    }
-    return this;
-  }
-  off(event, listener) {
-    return this.removeListener(event, listener);
-  }
-  removeAllListeners(event) {
-    if (event === void 0) {
-      this._listeners.clear();
-    } else {
-      this._listeners.delete(event);
-    }
-    return this;
-  }
-  emit(event, ...args) {
-    const listeners = this._listeners.get(event);
-    if (!listeners?.length) {
-      return false;
-    }
-    listeners.slice().forEach((listener) => listener(...args));
-    return true;
-  }
-  pipe(destination, _options) {
-    return destination;
-  }
-  unpipe(_destination) {
-    return this;
-  }
-  [Symbol.asyncDispose]() {
-    return Promise.resolve();
-  }
-};
-var ReadStreamClass = ReadStream;
-var WriteStreamClass = WriteStream;
-var ReadStreamFactory = function ReadStream2(path, options) {
-  validateEncodingOption(options);
-  return new ReadStreamClass(path, options);
-};
-ReadStreamFactory.prototype = ReadStream.prototype;
-var WriteStreamFactory = function WriteStream2(path, options) {
-  validateEncodingOption(options);
-  validateWriteStreamStartOption(options ?? {});
-  return new WriteStreamClass(path, options);
-};
-WriteStreamFactory.prototype = WriteStream.prototype;
-function parseFlags(flags) {
-  if (typeof flags === "number") return flags;
-  const flagMap = {
-    r: O_RDONLY,
-    "r+": O_RDWR,
-    rs: O_RDONLY,
-    "rs+": O_RDWR,
-    w: O_WRONLY | O_CREAT | O_TRUNC,
-    "w+": O_RDWR | O_CREAT | O_TRUNC,
-    a: O_WRONLY | O_APPEND | O_CREAT,
-    "a+": O_RDWR | O_APPEND | O_CREAT,
-    wx: O_WRONLY | O_CREAT | O_TRUNC | O_EXCL,
-    xw: O_WRONLY | O_CREAT | O_TRUNC | O_EXCL,
-    "wx+": O_RDWR | O_CREAT | O_TRUNC | O_EXCL,
-    "xw+": O_RDWR | O_CREAT | O_TRUNC | O_EXCL,
-    ax: O_WRONLY | O_APPEND | O_CREAT | O_EXCL,
-    xa: O_WRONLY | O_APPEND | O_CREAT | O_EXCL,
-    "ax+": O_RDWR | O_APPEND | O_CREAT | O_EXCL,
-    "xa+": O_RDWR | O_APPEND | O_CREAT | O_EXCL
-  };
-  if (flags in flagMap) return flagMap[flags];
-  throw new Error("Unknown file flag: " + flags);
-}
-// Full Linux errno table so guest `err.errno` matches real Node for every
-// code (Node reports the negated Linux errno), not just the handful the old
-// inline ternary covered. The structured `code` from the kernel is the source
-// of truth; this maps it to the canonical number.
-const POSIX_ERRNO = {
-  EPERM: 1, ENOENT: 2, ESRCH: 3, EINTR: 4, EIO: 5, ENXIO: 6, E2BIG: 7,
-  ENOEXEC: 8, EBADF: 9, ECHILD: 10, EAGAIN: 11, EWOULDBLOCK: 11, ENOMEM: 12,
-  EACCES: 13, EFAULT: 14, ENOTBLK: 15, EBUSY: 16, EEXIST: 17, EXDEV: 18,
-  ENODEV: 19, ENOTDIR: 20, EISDIR: 21, EINVAL: 22, ENFILE: 23, EMFILE: 24,
-  ENOTTY: 25, ETXTBSY: 26, EFBIG: 27, ENOSPC: 28, ESPIPE: 29, EROFS: 30,
-  EMLINK: 31, EPIPE: 32, EDOM: 33, ERANGE: 34, ENAMETOOLONG: 36, ENOSYS: 38,
-  ENOTEMPTY: 39, ELOOP: 40, EOVERFLOW: 75, ENOTSOCK: 88, EDESTADDRREQ: 89,
-  EMSGSIZE: 90, EPROTOTYPE: 91, ENOPROTOOPT: 92, EPROTONOSUPPORT: 93,
-  ENOTSUP: 95, EOPNOTSUPP: 95, EAFNOSUPPORT: 97, EADDRINUSE: 98,
-  EADDRNOTAVAIL: 99, ENETDOWN: 100, ENETUNREACH: 101, ECONNABORTED: 103,
-  ECONNRESET: 104, ENOBUFS: 105, EISCONN: 106, ENOTCONN: 107, ETIMEDOUT: 110,
-  ECONNREFUSED: 111, EHOSTUNREACH: 113, EALREADY: 114, EINPROGRESS: 115,
-};
-function errnoForCode(code) {
-  return Object.prototype.hasOwnProperty.call(POSIX_ERRNO, code)
-    ? -POSIX_ERRNO[code]
-    : -1;
-}
-function createFsError(code, message, syscall, path) {
-  const err = new Error(message);
-  err.code = code;
-  err.errno = errnoForCode(code);
-  err.syscall = syscall;
-  if (path) err.path = path;
-  return err;
-}
-function bridgeErrorText(err) {
-  return String(err?.message ?? err ?? "");
-}
-function bridgeErrorCode(err) {
-  const msg = bridgeErrorText(err);
-  if (msg.includes("ENOENT") || msg.includes("entry not found") || msg.includes("no such file or directory") || msg.includes("not found")) {
-    return "ENOENT";
-  }
-  if (msg.includes("EROFS") || msg.includes("read-only file system")) {
-    return "EROFS";
-  }
-  if (msg.includes("ERR_ACCESS_DENIED")) {
-    return "ERR_ACCESS_DENIED";
-  }
-  if (msg.includes("EACCES") || msg.includes("permission denied")) {
-    return "EACCES";
-  }
-  if (msg.includes("EEXIST") || msg.includes("file already exists")) {
-    return "EEXIST";
-  }
-  if (msg.includes("EINVAL") || msg.includes("invalid argument")) {
-    return "EINVAL";
-  }
-  if (msg.includes("EXDEV") || msg.includes("cross-device link")) {
-    return "EXDEV";
-  }
-  if (typeof err?.code === "string" && err.code.length > 0) {
-    return err.code;
-  }
-  return null;
-}
-function bridgeCall(fn, syscall, path) {
-  try {
-    return fn();
-  } catch (err) {
-    const code = bridgeErrorCode(err);
-    if (code === "ENOENT") {
-      throw createFsError("ENOENT", `ENOENT: no such file or directory, ${syscall} '${path}'`, syscall, path);
-    }
-    if (code === "EACCES") {
-      throw createFsError("EACCES", `EACCES: permission denied, ${syscall} '${path}'`, syscall, path);
-    }
-    if (code === "EEXIST") {
-      throw createFsError("EEXIST", `EEXIST: file already exists, ${syscall} '${path}'`, syscall, path);
-    }
-    if (code === "EINVAL") {
-      throw createFsError("EINVAL", `EINVAL: invalid argument, ${syscall} '${path}'`, syscall, path);
-    }
-    if (code === "EXDEV") {
-      throw createFsError("EXDEV", `EXDEV: cross-device link not permitted, ${syscall} '${path}'`, syscall, path);
-    }
-    throw err;
-  }
-}
-function _globToRegex(pattern) {
-  let regexStr = "";
-  let i = 0;
-  while (i < pattern.length) {
-    const ch = pattern[i];
-    if (ch === "*" && pattern[i + 1] === "*") {
-      if (pattern[i + 2] === "/") {
-        regexStr += "(?:.+/)?";
-        i += 3;
-      } else {
-        regexStr += ".*";
-        i += 2;
-      }
-    } else if (ch === "*") {
-      regexStr += "[^/]*";
-      i++;
-    } else if (ch === "?") {
-      regexStr += "[^/]";
-      i++;
-    } else if (ch === "{") {
-      const close = pattern.indexOf("}", i);
-      if (close !== -1) {
-        const alternatives = pattern.slice(i + 1, close).split(",");
-        regexStr += "(?:" + alternatives.map((a) => a.replace(/[.*+?^${}()|[\]\\]/g, "\\$&").replace(/\\\*/g, "[^/]*")).join("|") + ")";
-        i = close + 1;
-      } else {
-        regexStr += "\\{";
-        i++;
-      }
-    } else if (ch === "[") {
-      const close = pattern.indexOf("]", i);
-      if (close !== -1) {
-        regexStr += pattern.slice(i, close + 1);
-        i = close + 1;
-      } else {
-        regexStr += "\\[";
-        i++;
-      }
-    } else if (".+^${}()|[]\\".includes(ch)) {
-      regexStr += "\\" + ch;
-      i++;
-    } else {
-      regexStr += ch;
-      i++;
-    }
-  }
-  return new RegExp("^" + regexStr + "$");
-}
-function _globGetBase(pattern) {
-  const parts = pattern.split("/");
-  const baseParts = [];
-  for (const part of parts) {
-    if (/[*?{}\[\]]/.test(part)) break;
-    baseParts.push(part);
-  }
-  return baseParts.join("/") || "/";
-}
-var MAX_GLOB_DEPTH = 100;
-function _globCollect(pattern, results) {
-  const regex = _globToRegex(pattern);
-  const base = _globGetBase(pattern);
-  const walk = (dir, depth) => {
-    if (depth > MAX_GLOB_DEPTH) return;
-    let entries;
-    try {
-      entries = _globReadDir(dir);
-    } catch {
-      return;
-    }
-    for (const entry of entries) {
-      const fullPath = dir === "/" ? "/" + entry : dir + "/" + entry;
-      if (regex.test(fullPath)) {
-        results.push(fullPath);
-      }
-      try {
-        const stat = _globStat(fullPath);
-        if (stat.isDirectory()) {
-          walk(fullPath, depth + 1);
-        }
-      } catch {
-      }
-    }
-  };
-  try {
-    if (regex.test(base)) {
-      const stat = _globStat(base);
-      if (!stat.isDirectory()) {
-        results.push(base);
-        return;
-      }
-    }
-    walk(base, 0);
-  } catch {
-  }
-}
-var _globReadDir;
-var _globStat;
-function toPathString(path) {
-  return normalizePathLike(path);
-}
-function getBridgeSyncFn(name) {
-  return typeof globalThis !== "undefined" ? globalThis[name] : void 0;
-}
-function createBridgeSyncFacade(name) {
-  return {
-    applySync(_thisArg, args) {
-      const fn = getBridgeSyncFn(name);
-      if (typeof fn === "function") {
-        return fn(...(args || []));
-      }
-      if (fn && typeof fn.applySync === "function") {
-        return fn.applySync(_thisArg, args);
-      }
-      return void 0;
-    },
-    applySyncPromise(_thisArg, args) {
-      const fn = getBridgeSyncFn(name);
-      if (typeof fn === "function") {
-        return fn(...(args || []));
-      }
-      if (fn && typeof fn.applySync === "function") {
-        return fn.applySync(_thisArg, args);
-      }
-      if (fn && typeof fn.applySyncPromise === "function") {
-        return fn.applySyncPromise(_thisArg, args);
-      }
-      return void 0;
-    }
-  };
-}
-function hasBridgeSyncFn(name) {
-  const fn = getBridgeSyncFn(name);
-  return typeof fn === "function" || !!(fn && (typeof fn.applySync === "function" || typeof fn.applySyncPromise === "function"));
-}
-function createBridgeAsyncFacade(name) {
-  return {
-    apply(_thisArg, args) {
-      const fn = getBridgeSyncFn(name);
-      if (typeof fn === "function") {
-        return fn(...(args || []));
-      }
-      if (fn && typeof fn.apply === "function") {
-        return fn.apply(_thisArg, args);
-      }
-      return Promise.resolve(void 0);
-    }
-  };
-}
-var _fs = {
-  readFile: createBridgeSyncFacade("_fsReadFile"),
-  writeFile: createBridgeSyncFacade("_fsWriteFile"),
-  readFileBinary: createBridgeSyncFacade("_fsReadFileBinary"),
-  writeFileBinary: createBridgeSyncFacade("_fsWriteFileBinary"),
-  writeFileBinaryRaw: createBridgeSyncFacade("_fsWriteFileBinaryRaw"),
-  readDir: createBridgeSyncFacade("_fsReadDir"),
-  mkdir: createBridgeSyncFacade("_fsMkdir"),
-  rmdir: createBridgeSyncFacade("_fsRmdir"),
-  exists: createBridgeSyncFacade("_fsExists"),
-  stat: createBridgeSyncFacade("_fsStat"),
-  unlink: createBridgeSyncFacade("_fsUnlink"),
-  rename: createBridgeSyncFacade("_fsRename"),
-  chmod: createBridgeSyncFacade("_fsChmod"),
-  chown: createBridgeSyncFacade("_fsChown"),
-  link: createBridgeSyncFacade("_fsLink"),
-  symlink: createBridgeSyncFacade("_fsSymlink"),
-  readlink: createBridgeSyncFacade("_fsReadlink"),
-  lstat: createBridgeSyncFacade("_fsLstat"),
-  truncate: createBridgeSyncFacade("_fsTruncate"),
-  utimes: createBridgeSyncFacade("_fsUtimes"),
-  lutimes: createBridgeSyncFacade("_fsLutimes")
-};
-var _fsAsync = {
-  readFile: createBridgeAsyncFacade("_fsReadFileAsync"),
-  writeFile: createBridgeAsyncFacade("_fsWriteFileAsync"),
-  readFileBinary: createBridgeAsyncFacade("_fsReadFileBinaryAsync"),
-  writeFileBinary: createBridgeAsyncFacade("_fsWriteFileBinaryAsync"),
-  readDir: createBridgeAsyncFacade("_fsReadDirAsync"),
-  mkdir: createBridgeAsyncFacade("_fsMkdirAsync"),
-  rmdir: createBridgeAsyncFacade("_fsRmdirAsync"),
-  stat: createBridgeAsyncFacade("_fsStatAsync"),
-  unlink: createBridgeAsyncFacade("_fsUnlinkAsync"),
-  rename: createBridgeAsyncFacade("_fsRenameAsync"),
-  chmod: createBridgeAsyncFacade("_fsChmodAsync"),
-  chown: createBridgeAsyncFacade("_fsChownAsync"),
-  link: createBridgeAsyncFacade("_fsLinkAsync"),
-  symlink: createBridgeAsyncFacade("_fsSymlinkAsync"),
-  readlink: createBridgeAsyncFacade("_fsReadlinkAsync"),
-  lstat: createBridgeAsyncFacade("_fsLstatAsync"),
-  truncate: createBridgeAsyncFacade("_fsTruncateAsync"),
-  utimes: createBridgeAsyncFacade("_fsUtimesAsync"),
-  lutimes: createBridgeAsyncFacade("_fsLutimesAsync"),
-  access: createBridgeAsyncFacade("_fsAccessAsync")
-};
-var _fdOpen = createBridgeSyncFacade("fs.openSync");
-var _fdClose = createBridgeSyncFacade("fs.closeSync");
-var _fdRead = createBridgeSyncFacade("fs.readSync");
-var _fsReadRaw = createBridgeSyncFacade("_fsReadRaw");
-var _fdWrite = createBridgeSyncFacade("fs.writeSync");
-var _fsWriteRaw = createBridgeSyncFacade("_fsWriteRaw");
-var _fsWritevRaw = createBridgeSyncFacade("_fsWritevRaw");
-var _fdFstat = createBridgeSyncFacade("fs.fstatSync");
-var _fdFtruncate = createBridgeSyncFacade("fs.ftruncateSync");
-var _fdFsync = createBridgeSyncFacade("fs.fsyncSync");
-var _fdFutimes = createBridgeSyncFacade("fs.futimesSync");
-var _fdGetPath = createBridgeSyncFacade("fs._getPathSync");
-var _processUmask = createBridgeSyncFacade("process.umask");
-var _processMemoryUsage = createBridgeSyncFacade("process.memoryUsage");
-var _processCpuUsage = createBridgeSyncFacade("process.cpuUsage");
-var _processResourceUsage = createBridgeSyncFacade("process.resourceUsage");
-var _processVersions = createBridgeSyncFacade("process.versions");
-var _kernelPollRaw = createBridgeSyncFacade("_kernelPollRaw");
-var _kernelIsattyRaw = createBridgeSyncFacade("_kernelIsattyRaw");
-var _kernelTtySizeRaw = createBridgeSyncFacade("_kernelTtySizeRaw");
-function decodeBridgeJson(value) {
-  return typeof value === "string" ? JSON.parse(value) : value;
-}
-function encodeBridgeBytes(value) {
-  return {
-    __agentOSType: "bytes",
-    base64: import_buffer.Buffer.from(value).toString("base64")
-  };
-}
-function throwNormalizedFsBridgeError(err, syscall, path) {
-  const code = bridgeErrorCode(err);
-  if (code === "ENOENT") {
-    throw createFsError("ENOENT", `ENOENT: no such file or directory, ${syscall} '${path}'`, syscall, path);
-  }
-  if (code === "EROFS") {
-    throw createFsError("EROFS", `EROFS: read-only file system, ${syscall} '${path}'`, syscall, path);
-  }
-  if (code === "ERR_ACCESS_DENIED") {
-    const error = createFsError("ERR_ACCESS_DENIED", `ERR_ACCESS_DENIED: permission denied, ${syscall} '${path}'`, syscall, path);
-    error.code = "ERR_ACCESS_DENIED";
-    throw error;
-  }
-  if (code === "EACCES") {
-    throw createFsError("EACCES", `EACCES: permission denied, ${syscall} '${path}'`, syscall, path);
-  }
-  throw err;
-}
-function joinDirEntryPath(dirPath, entryName) {
-  if (dirPath === "/") {
-    return `/${entryName}`;
-  }
-  return dirPath.endsWith("/") ? `${dirPath}${entryName}` : `${dirPath}/${entryName}`;
-}
-function normalizeReaddirEntries(entries, dirPath, withFileTypes) {
-  if (!Array.isArray(entries)) {
-    return [];
-  }
-  if (!withFileTypes) {
-    return entries.map((entry) => typeof entry === "string" ? entry : entry?.name);
-  }
-  return entries.map((entry) => {
-    if (typeof entry === "string") {
-      const stat = fs.statSync(joinDirEntryPath(dirPath, entry));
-      return new Dirent(entry, stat.isDirectory(), dirPath);
-    }
-    return new Dirent(entry.name, entry.isDirectory, dirPath);
-  });
-}
-function decodeRawReaddirEntries(entries, dirPath, withFileTypes) {
-  if (!(entries instanceof Uint8Array)) {
-    return normalizeReaddirEntries(entries, dirPath, withFileTypes);
-  }
-  const decoded = [];
-  let offset = 0;
-  while (offset < entries.byteLength) {
-    if (offset + 5 > entries.byteLength) {
-      throw new Error("Invalid raw readdir payload");
-    }
-    const kind = entries[offset++];
-    const nameLength = entries[offset] | entries[offset + 1] << 8 | entries[offset + 2] << 16 | entries[offset + 3] << 24;
-    offset += 4;
-    if (nameLength < 0 || offset + nameLength > entries.byteLength) {
-      throw new Error("Invalid raw readdir entry");
-    }
-    const name = import_buffer.Buffer.from(
-      entries.buffer,
-      entries.byteOffset + offset,
-      nameLength
-    ).toString("utf8");
-    offset += nameLength;
-    decoded.push(withFileTypes ? new Dirent(name, kind === 1, dirPath) : name);
-  }
-  return decoded;
-}
-async function fsReadFileAsync(path, options) {
-  validateEncodingOption(options);
-  const rawPath = typeof path === "number" ? _fdGetPath.applySync(void 0, [normalizeFdInteger(path)]) : normalizePathLike(path);
-  if (!rawPath) throw createFsError("EBADF", "EBADF: bad file descriptor", "read");
-  const pathStr = rawPath;
-  const encoding = typeof options === "string" ? options : options?.encoding;
-  try {
-    if (encoding) {
-      return await _fsAsync.readFile.apply(void 0, [pathStr, encoding]);
-    }
-    const base64Content = await _fsAsync.readFileBinary.apply(void 0, [pathStr]);
-    return import_buffer.Buffer.from(base64Content, "base64");
-  } catch (err) {
-    if (bridgeErrorCode(err) === "ENOENT") {
-      throw createFsError(
-        "ENOENT",
-        `ENOENT: no such file or directory, open '${rawPath}'`,
-        "open",
-        rawPath
-      );
-    }
-    if (bridgeErrorCode(err) === "EACCES") {
-      throw createFsError(
-        "EACCES",
-        `EACCES: permission denied, open '${rawPath}'`,
-        "open",
-        rawPath
-      );
-    }
-    throw err;
-  }
-}
-async function fsWriteFileAsync(file, data, options) {
-  validateEncodingOption(options);
-  const rawPath = typeof file === "number" ? _fdGetPath.applySync(void 0, [normalizeFdInteger(file)]) : normalizePathLike(file);
-  if (!rawPath) throw createFsError("EBADF", "EBADF: bad file descriptor", "write");
-  const pathStr = rawPath;
-  try {
-    if (typeof data === "string") {
-      return await _fsAsync.writeFile.apply(void 0, [pathStr, data]);
-    }
-    if (ArrayBuffer.isView(data)) {
-      const uint8 = new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
-      if (hasBridgeSyncFn("_fsWriteFileBinaryRaw")) {
-        return _fs.writeFileBinaryRaw.applySyncPromise(void 0, [pathStr, uint8]);
-      }
-      return await _fsAsync.writeFileBinary.apply(void 0, [pathStr, encodeBridgeBytes(uint8)]);
-    }
-    return await _fsAsync.writeFile.apply(void 0, [pathStr, String(data)]);
-  } catch (err) {
-    throwNormalizedFsBridgeError(err, "write", rawPath);
-  }
-}
-async function fsReaddirAsync(path, options) {
-  validateEncodingOption(options);
-  const rawPath = normalizePathLike(path);
-  try {
-    const entriesJson = await _fsAsync.readDir.apply(void 0, [rawPath]);
-    return normalizeReaddirEntries(decodeBridgeJson(entriesJson), rawPath, options?.withFileTypes);
-  } catch (err) {
-    if (bridgeErrorCode(err) === "ENOENT") {
-      throw createFsError(
-        "ENOENT",
-        `ENOENT: no such file or directory, scandir '${rawPath}'`,
-        "scandir",
-        rawPath
-      );
-    }
-    throw err;
-  }
-}
-async function fsMkdirAsync(path, options) {
-  const rawPath = normalizePathLike(path);
-  const recursive = typeof options === "object" ? options?.recursive ?? false : false;
-  await _fsAsync.mkdir.apply(void 0, [rawPath, recursive]);
-  return recursive ? rawPath : void 0;
-}
-async function fsRmdirAsync(path) {
-  const pathStr = normalizePathLike(path);
-  await _fsAsync.rmdir.apply(void 0, [pathStr]);
-}
-async function fsStatAsync(path) {
-  const rawPath = normalizePathLike(path);
-  try {
-    const statJson = await _fsAsync.stat.apply(void 0, [rawPath]);
-    return new Stats(decodeBridgeJson(statJson));
-  } catch (err) {
-    if (bridgeErrorCode(err) === "ENOENT") {
-      throw createFsError(
-        "ENOENT",
-        `ENOENT: no such file or directory, stat '${rawPath}'`,
-        "stat",
-        rawPath
-      );
-    }
-    throw err;
-  }
-}
-async function fsLstatAsync(path) {
-  const pathStr = normalizePathLike(path);
-  const statJson = await _fsAsync.lstat.apply(void 0, [pathStr]);
-  return new Stats(decodeBridgeJson(statJson));
-}
-async function fsUnlinkAsync(path) {
-  const pathStr = normalizePathLike(path);
-  await _fsAsync.unlink.apply(void 0, [pathStr]);
-}
-async function fsRenameAsync(oldPath, newPath) {
-  const oldPathStr = normalizePathLike(oldPath, "oldPath");
-  const newPathStr = normalizePathLike(newPath, "newPath");
-  await _fsAsync.rename.apply(void 0, [oldPathStr, newPathStr]);
-}
-async function fsAccessAsync(path) {
-  const pathStr = normalizePathLike(path);
-  try {
-    await _fsAsync.access.apply(void 0, [pathStr]);
-  } catch (err) {
-    if (bridgeErrorCode(err) === "ENOENT") {
-      throw createFsError(
-        "ENOENT",
-        `ENOENT: no such file or directory, access '${pathStr}'`,
-        "access",
-        pathStr
-      );
-    }
-    throw err;
-  }
-}
-async function fsChmodAsync(path, mode) {
-  const pathStr = normalizePathLike(path);
-  const modeNum = normalizeModeArgument(mode, "mode");
-  await _fsAsync.chmod.apply(void 0, [pathStr, modeNum]);
-}
-async function fsChownAsync(path, uid, gid) {
-  const pathStr = normalizePathLike(path);
-  const normalizedUid = normalizeNumberArgument("uid", uid, { min: -1, max: 4294967295, allowNegativeOne: true });
-  const normalizedGid = normalizeNumberArgument("gid", gid, { min: -1, max: 4294967295, allowNegativeOne: true });
-  await _fsAsync.chown.apply(void 0, [pathStr, normalizedUid, normalizedGid]);
-}
-async function fsLinkAsync(existingPath, newPath) {
-  const existingStr = normalizePathLike(existingPath, "existingPath");
-  const newStr = normalizePathLike(newPath, "newPath");
-  await _fsAsync.link.apply(void 0, [existingStr, newStr]);
-}
-async function fsSymlinkAsync(target, path) {
-  const targetStr = normalizePathLike(target, "target");
-  const pathStr = normalizePathLike(path);
-  await _fsAsync.symlink.apply(void 0, [targetStr, pathStr]);
-}
-async function fsReadlinkAsync(path) {
-  const pathStr = normalizePathLike(path);
-  return await _fsAsync.readlink.apply(void 0, [pathStr]);
-}
-async function fsTruncateAsync(path, len) {
-  const pathStr = normalizePathLike(path);
-  await _fsAsync.truncate.apply(void 0, [pathStr, len ?? 0]);
-}
-function normalizeFsTimeSpec(value, label) {
-  if (value && typeof value === "object" && !(value instanceof Date)) {
-    const kind = typeof value.kind === "string" ? value.kind : null;
-    if (kind === "now" || kind === "UTIME_NOW") {
-      return { kind: "now" };
-    }
-    if (kind === "omit" || kind === "UTIME_OMIT") {
-      return { kind: "omit" };
-    }
-    if ("nsec" in value) {
-      if (value.nsec === fs.constants.UTIME_NOW || value.nsec === "UTIME_NOW") {
-        return { kind: "now" };
-      }
-      if (value.nsec === fs.constants.UTIME_OMIT || value.nsec === "UTIME_OMIT") {
-        return { kind: "omit" };
-      }
-    }
-    const sec = Number(value.sec);
-    const nsec = Number(value.nsec ?? 0);
-    if (!Number.isInteger(sec)) {
-      throw createInvalidArgTypeError(label, "an integer sec field", value);
-    }
-    if (!Number.isInteger(nsec) || nsec < 0 || nsec >= 1e9) {
-      throw createRangeError(`${label}.nsec must be an integer between 0 and 999999999`);
-    }
-    return { sec, nsec };
-  }
-  const seconds = typeof value === "number" ? value : new Date(value).getTime() / 1e3;
-  if (!Number.isFinite(seconds)) {
-    throw createRangeError(`${label} must be a finite timestamp`);
-  }
-  const floor = Math.floor(seconds);
-  let sec = floor;
-  let nsec = Math.round((seconds - floor) * 1e9);
-  if (nsec >= 1e9) {
-    sec += 1;
-    nsec -= 1e9;
-  }
-  return { sec, nsec };
-}
-async function fsUtimesAsync(path, atime, mtime) {
-  const pathStr = normalizePathLike(path);
-  await _fsAsync.utimes.apply(void 0, [
-    pathStr,
-    normalizeFsTimeSpec(atime, "atime"),
-    normalizeFsTimeSpec(mtime, "mtime")
-  ]);
-}
-async function fsLutimesAsync(path, atime, mtime) {
-  const pathStr = normalizePathLike(path);
-  await _fsAsync.lutimes.apply(void 0, [
-    pathStr,
-    normalizeFsTimeSpec(atime, "atime"),
-    normalizeFsTimeSpec(mtime, "mtime")
-  ]);
-}
-function encodeWritevRawPayload(buffers) {
-  let totalBytes = 4;
-  for (const buffer of buffers) {
-    if (buffer.byteLength > 4294967295) {
-      throw createOutOfRangeError("buffer.byteLength", "<= 4294967295", buffer.byteLength);
-    }
-    totalBytes += 4 + buffer.byteLength;
-  }
-  const payload = new Uint8Array(totalBytes);
-  const view = new DataView(payload.buffer, payload.byteOffset, payload.byteLength);
-  view.setUint32(0, buffers.length, true);
-  let offset = 4;
-  for (const buffer of buffers) {
-    const bytes = buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer.buffer, buffer.byteOffset, buffer.byteLength);
-    view.setUint32(offset, bytes.byteLength, true);
-    offset += 4;
-    payload.set(bytes, offset);
-    offset += bytes.byteLength;
-  }
-  return payload;
-}
-var fs = {
-  // Constants
-  constants: {
-    // File Access Constants
-    F_OK: 0,
-    R_OK: 4,
-    W_OK: 2,
-    X_OK: 1,
-    // File Copy Constants
-    COPYFILE_EXCL: 1,
-    COPYFILE_FICLONE: 2,
-    COPYFILE_FICLONE_FORCE: 4,
-    // File Open Constants
-    O_RDONLY,
-    O_WRONLY,
-    O_RDWR,
-    O_CREAT,
-    O_EXCL,
-    O_NOCTTY: 256,
-    O_TRUNC,
-    O_APPEND,
-    O_DIRECTORY: 65536,
-    O_NOATIME: 262144,
-    O_NOFOLLOW: 131072,
-    O_SYNC: 1052672,
-    O_DSYNC: 4096,
-    O_SYMLINK: 2097152,
-    O_DIRECT: 16384,
-    O_NONBLOCK: 2048,
-    UTIME_NOW: 1073741823,
-    UTIME_OMIT: 1073741822,
-    // File Type Constants
-    S_IFMT: 61440,
-    S_IFREG: 32768,
-    S_IFDIR: 16384,
-    S_IFCHR: 8192,
-    S_IFBLK: 24576,
-    S_IFIFO: 4096,
-    S_IFLNK: 40960,
-    S_IFSOCK: 49152,
-    // File Mode Constants
-    S_IRWXU: 448,
-    S_IRUSR: 256,
-    S_IWUSR: 128,
-    S_IXUSR: 64,
-    S_IRWXG: 56,
-    S_IRGRP: 32,
-    S_IWGRP: 16,
-    S_IXGRP: 8,
-    S_IRWXO: 7,
-    S_IROTH: 4,
-    S_IWOTH: 2,
-    S_IXOTH: 1,
-    UV_FS_O_FILEMAP: 536870912
-  },
-  Stats,
-  Dirent,
-  Dir,
-  // Sync methods
-  readFileSync(path, options) {
-    validateEncodingOption(options);
-    const rawPath = typeof path === "number" ? _fdGetPath.applySync(void 0, [normalizeFdInteger(path)]) : normalizePathLike(path);
-    if (!rawPath) throw createFsError("EBADF", "EBADF: bad file descriptor", "read");
-    const pathStr = rawPath;
-    const encoding = typeof options === "string" ? options : options?.encoding;
-    try {
-      if (encoding) {
-        const content = _fs.readFile.applySyncPromise(void 0, [pathStr, encoding]);
-        return content;
-      } else {
-        const base64Content = _fs.readFileBinary.applySyncPromise(void 0, [pathStr]);
-        return import_buffer.Buffer.from(base64Content, "base64");
-      }
-    } catch (err) {
-      if (bridgeErrorCode(err) === "ENOENT") {
-        throw createFsError(
-          "ENOENT",
-          `ENOENT: no such file or directory, open '${rawPath}'`,
-          "open",
-          rawPath
-        );
-      }
-      if (bridgeErrorCode(err) === "EACCES") {
-        throw createFsError(
-          "EACCES",
-          `EACCES: permission denied, open '${rawPath}'`,
-          "open",
-          rawPath
-        );
-      }
-      throw err;
-    }
-  },
-  writeFileSync(file, data, _options) {
-    validateEncodingOption(_options);
-    const rawPath = typeof file === "number" ? _fdGetPath.applySync(void 0, [normalizeFdInteger(file)]) : normalizePathLike(file);
-    if (!rawPath) throw createFsError("EBADF", "EBADF: bad file descriptor", "write");
-    const pathStr = rawPath;
-    try {
-      if (typeof data === "string") {
-        return _fs.writeFile.applySyncPromise(void 0, [pathStr, data]);
-      } else if (ArrayBuffer.isView(data)) {
-        const uint8 = new Uint8Array(data.buffer, data.byteOffset, data.byteLength);
-        if (hasBridgeSyncFn("_fsWriteFileBinaryRaw")) {
-          return _fs.writeFileBinaryRaw.applySyncPromise(void 0, [pathStr, uint8]);
-        }
-        return _fs.writeFileBinary.applySyncPromise(void 0, [pathStr, encodeBridgeBytes(uint8)]);
-      } else {
-        return _fs.writeFile.applySyncPromise(void 0, [pathStr, String(data)]);
-      }
-    } catch (err) {
-      throwNormalizedFsBridgeError(err, "write", rawPath);
-    }
-  },
-  appendFileSync(path, data, options) {
-    validateEncodingOption(options);
-    const rawPath = normalizePathLike(path);
-    let existing = "";
-    try {
-      existing = fs.existsSync(path) ? fs.readFileSync(path, "utf8") : "";
-    } catch (err) {
-      throwNormalizedFsBridgeError(err, "open", rawPath);
-    }
-    const content = typeof data === "string" ? data : String(data);
-    try {
-      fs.writeFileSync(path, existing + content, options);
-    } catch (err) {
-      if (!err?.code) {
-        throw createFsError("EACCES", `EACCES: permission denied, write '${rawPath}'`, "write", rawPath);
-      }
-      throwNormalizedFsBridgeError(err, "write", rawPath);
-    }
-  },
-  readdirSync(path, options) {
-    validateEncodingOption(options);
-    const rawPath = normalizePathLike(path);
-    const pathStr = rawPath;
-    let entries;
-    try {
-      entries = _fs.readDir.applySyncPromise(void 0, [pathStr]);
-    } catch (err) {
-      if (bridgeErrorCode(err) === "ENOENT") {
-        throw createFsError(
-          "ENOENT",
-          `ENOENT: no such file or directory, scandir '${rawPath}'`,
-          "scandir",
-          rawPath
-        );
-      }
-      throw err;
-    }
-    if (entries instanceof Uint8Array) {
-      return decodeRawReaddirEntries(entries, rawPath, options?.withFileTypes);
-    }
-    return normalizeReaddirEntries(decodeBridgeJson(entries), rawPath, options?.withFileTypes);
-  },
-  mkdirSync(path, options) {
-    const rawPath = normalizePathLike(path);
-    const pathStr = rawPath;
-    const recursive = typeof options === "object" ? options?.recursive ?? false : false;
-    const rawMode = typeof options === "object" ? options?.mode : options;
-    const normalizedMode = rawMode === void 0 ? void 0 : normalizeModeArgument(rawMode);
-    _fs.mkdir.applySyncPromise(void 0, [pathStr, {
-      recursive,
-      mode: applyProcessUmask(normalizedMode ?? 511)
-    }]);
-    return recursive ? rawPath : void 0;
-  },
-  rmdirSync(path, _options) {
-    const pathStr = normalizePathLike(path);
-    _fs.rmdir.applySyncPromise(void 0, [pathStr]);
-  },
-  rmSync(path, options) {
-    const pathStr = toPathString(path);
-    const opts = options || {};
-    try {
-      const stats = fs.statSync(pathStr);
-      if (stats.isDirectory()) {
-        if (opts.recursive) {
-          const entries = fs.readdirSync(pathStr);
-          for (const entry of entries) {
-            const entryPath = pathStr.endsWith("/") ? pathStr + entry : pathStr + "/" + entry;
-            const entryStats = fs.statSync(entryPath);
-            if (entryStats.isDirectory()) {
-              fs.rmSync(entryPath, { recursive: true });
-            } else {
-              fs.unlinkSync(entryPath);
-            }
-          }
-          fs.rmdirSync(pathStr);
-        } else {
-          fs.rmdirSync(pathStr);
-        }
-      } else {
-        fs.unlinkSync(pathStr);
-      }
-    } catch (e) {
-      if (opts.force && e.code === "ENOENT") {
-        return;
-      }
-      throw e;
-    }
-  },
-  existsSync(path) {
-    const pathStr = tryNormalizeExistsPath(path);
-    if (!pathStr) {
-      return false;
-    }
-    // NOTE: residual band-aid. The kernel device layer + permission exemption
-    // (is_standard_device_path) now serve readFileSync/statSync on /dev/null
-    // through the host fs path, but `_fs.exists` ("fs.existsSync") still returns
-    // false for standard devices — the host exists path swallows the lookup via
-    // PermissionedFileSystem::exists' error->Ok(false) branch. Until that exists
-    // path is fixed to honor the device layer like read/stat do, keep this guard
-    // so existsSync("/dev/null") matches native Linux. See
-    // ~/.agents/research/v8-bridge-shim-analysis.md.
-    if (
-      pathStr === "/dev/null" ||
-      pathStr === "/dev/zero" ||
-      pathStr === "/dev/urandom" ||
-      pathStr === "/dev/stdin" ||
-      pathStr === "/dev/stdout" ||
-      pathStr === "/dev/stderr"
-    ) {
-      return true;
-    }
-    return _fs.exists.applySyncPromise(void 0, [pathStr]);
-  },
-  statSync(path, _options) {
-    const rawPath = normalizePathLike(path);
-    const pathStr = rawPath;
-    let statJson;
-    try {
-      statJson = _fs.stat.applySyncPromise(void 0, [pathStr]);
-    } catch (err) {
-      if (bridgeErrorCode(err) === "ENOENT") {
-        throw createFsError(
-          "ENOENT",
-          `ENOENT: no such file or directory, stat '${rawPath}'`,
-          "stat",
-          rawPath
-        );
-      }
-      throw err;
-    }
-    const stat = decodeBridgeJson(statJson);
-    return new Stats(stat);
-  },
-  lstatSync(path, _options) {
-    const pathStr = normalizePathLike(path);
-    const statJson = bridgeCall(() => _fs.lstat.applySyncPromise(void 0, [pathStr]), "lstat", pathStr);
-    const stat = decodeBridgeJson(statJson);
-    return new Stats(stat);
-  },
-  unlinkSync(path) {
-    const pathStr = normalizePathLike(path);
-    _fs.unlink.applySyncPromise(void 0, [pathStr]);
-  },
-  renameSync(oldPath, newPath) {
-    const oldPathStr = normalizePathLike(oldPath, "oldPath");
-    const newPathStr = normalizePathLike(newPath, "newPath");
-    _fs.rename.applySyncPromise(void 0, [oldPathStr, newPathStr]);
-  },
-  copyFileSync(src, dest, _mode) {
-    const content = fs.readFileSync(src);
-    fs.writeFileSync(dest, content);
-  },
-  // Recursive copy
-  cpSync(src, dest, options) {
-    const srcPath = toPathString(src);
-    const destPath = toPathString(dest);
-    const opts = options || {};
-    const srcStat = fs.statSync(srcPath);
-    if (srcStat.isDirectory()) {
-      if (!opts.recursive) {
-        throw createFsError(
-          "ERR_FS_EISDIR",
-          `Path is a directory: cp '${srcPath}'`,
-          "cp",
-          srcPath
-        );
-      }
-      try {
-        fs.mkdirSync(destPath, { recursive: true });
-      } catch {
-      }
-      const entries = fs.readdirSync(srcPath);
-      for (const entry of entries) {
-        const srcEntry = srcPath.endsWith("/") ? srcPath + entry : srcPath + "/" + entry;
-        const destEntry = destPath.endsWith("/") ? destPath + entry : destPath + "/" + entry;
-        fs.cpSync(srcEntry, destEntry, opts);
-      }
-    } else {
-      if (opts.errorOnExist && fs.existsSync(destPath)) {
-        throw createFsError(
-          "EEXIST",
-          `EEXIST: file already exists, cp '${srcPath}' -> '${destPath}'`,
-          "cp",
-          destPath
-        );
-      }
-      if (!opts.force && opts.force !== void 0 && fs.existsSync(destPath)) {
-        return;
-      }
-      fs.copyFileSync(srcPath, destPath);
-    }
-  },
-  // Temp directory creation
-  mkdtempSync(prefix, _options) {
-    validateEncodingOption(_options);
-    const prefixPath = normalizePathLike(prefix, "prefix");
-    const charset = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789";
-    for (let attempt = 0; attempt < 10; attempt += 1) {
-      const entropy = builtinCryptoModule.randomBytes(6);
-      let suffix = "";
-      for (const value of entropy) {
-        suffix += charset[value % charset.length];
-      }
-      const dirPath = prefixPath + suffix;
-      try {
-        bridgeCall(() => _fs.mkdir.applySyncPromise(void 0, [dirPath, {
-          recursive: false,
-          mode: applyProcessUmask(511)
-        }]), "mkdir", dirPath);
-        return dirPath;
-      } catch (error) {
-        if (attempt < 9 && (error?.code === "EEXIST" || bridgeErrorCode(error) === "EEXIST")) {
-          continue;
-        }
-        throw error;
-      }
-    }
-    throw createFsError(
-      "EEXIST",
-      `EEXIST: file already exists, mkdtemp '${prefixPath}'`,
-      "mkdtemp",
-      prefixPath
-    );
-  },
-  // Directory handle (sync)
-  opendirSync(path, _options) {
-    const pathStr = normalizePathLike(path);
-    const stat = fs.statSync(pathStr);
-    if (!stat.isDirectory()) {
-      throw createFsError(
-        "ENOTDIR",
-        `ENOTDIR: not a directory, opendir '${pathStr}'`,
-        "opendir",
-        pathStr
-      );
-    }
-    return new Dir(pathStr);
-  },
-  // File descriptor methods
-  openSync(path, flags, _mode) {
-    const pathStr = normalizePathLike(path);
-    const numFlags = parseFlags(flags ?? "r");
-    const requestedMode = normalizeOpenModeArgument(_mode);
-    const modeNum = numFlags & O_CREAT ? applyProcessUmask(requestedMode ?? 438) : requestedMode;
-    try {
-      return _fdOpen.applySyncPromise(void 0, [pathStr, numFlags, modeNum]);
-    } catch (e) {
-      const msg = e?.message ?? String(e);
-      if (msg.includes("ENOENT")) throw createFsError("ENOENT", msg, "open", pathStr);
-      if (msg.includes("EMFILE")) throw createFsError("EMFILE", msg, "open", pathStr);
-      throw e;
-    }
-  },
-  closeSync(fd) {
-    normalizeFdInteger(fd);
-    // If this fd is still bound to a live child's inherited stdio, defer the
-    // actual close until the child exits (node keeps it open for the child).
-    if (deferCloseIfChildInheritedFd(fd)) {
-      return;
-    }
-    try {
-      _fdClose.applySyncPromise(void 0, [fd]);
-    } catch (e) {
-      const msg = e?.message ?? String(e);
-      if (msg.includes("EBADF")) throw createFsError("EBADF", "EBADF: bad file descriptor, close", "close");
-      throw e;
-    }
-  },
-  readSync(fd, buffer, offset, length, position) {
-    const normalized = normalizeReadSyncArgs(buffer, offset, length, position);
-    let bytes;
-    try {
-      if (hasBridgeSyncFn("_fsReadRaw")) {
-        const rawBytes = _fsReadRaw.applySyncPromise(void 0, [fd, normalized.length, normalized.position ?? null]);
-        bytes = rawBytes instanceof Uint8Array ? rawBytes : import_buffer.Buffer.from(rawBytes);
-      } else {
-        const base64 = _fdRead.applySyncPromise(void 0, [fd, normalized.length, normalized.position ?? null]);
-        bytes = import_buffer.Buffer.from(base64, "base64");
-      }
-    } catch (e) {
-      const msg = e?.message ?? String(e);
-      if (msg.includes("EBADF")) throw createFsError("EBADF", msg, "read");
-      throw e;
-    }
-    const targetBuffer = new Uint8Array(
-      normalized.buffer.buffer,
-      normalized.buffer.byteOffset,
-      normalized.buffer.byteLength
-    );
-    const bytesRead = Math.min(bytes.length, normalized.length);
-    targetBuffer.set(bytes.subarray(0, bytesRead), normalized.offset);
-    return bytesRead;
-  },
-  writeSync(fd, buffer, offsetOrPosition, lengthOrEncoding, position) {
-    const normalized = normalizeWriteSyncArgs(buffer, offsetOrPosition, lengthOrEncoding, position);
-    let dataBytes;
-    if (typeof normalized.buffer === "string") {
-      dataBytes = import_buffer.Buffer.from(normalized.buffer, normalized.encoding);
-    } else {
-      dataBytes = new Uint8Array(
-        normalized.buffer.buffer,
-        normalized.buffer.byteOffset + normalized.offset,
-        normalized.length
-      );
-    }
-    const pos = normalized.position ?? null;
-    try {
-      if (hasBridgeSyncFn("_fsWriteRaw")) {
-        return _fsWriteRaw.applySyncPromise(void 0, [fd, dataBytes, pos]);
-      }
-      return _fdWrite.applySyncPromise(void 0, [fd, encodeBridgeBytes(dataBytes), pos]);
-    } catch (e) {
-      const msg = e?.message ?? String(e);
-      if (msg.includes("EBADF")) throw createFsError("EBADF", msg, "write");
-      throw e;
-    }
-  },
-  fstatSync(fd) {
-    normalizeFdInteger(fd);
-    let raw;
-    try {
-      raw = _fdFstat.applySyncPromise(void 0, [fd]);
-    } catch (e) {
-      const msg = e?.message ?? String(e);
-      if (msg.includes("EBADF")) throw createFsError("EBADF", "EBADF: bad file descriptor, fstat", "fstat");
-      throw e;
-    }
-    return new Stats(decodeBridgeJson(raw));
-  },
-  ftruncateSync(fd, len) {
-    normalizeFdInteger(fd);
-    try {
-      _fdFtruncate.applySyncPromise(void 0, [fd, len]);
-    } catch (e) {
-      const msg = e?.message ?? String(e);
-      if (msg.includes("EBADF")) throw createFsError("EBADF", "EBADF: bad file descriptor, ftruncate", "ftruncate");
-      throw e;
-    }
-  },
-  // fsync / fdatasync — no-op for in-memory VFS (validates FD exists)
-  fsyncSync(fd) {
-    normalizeFdInteger(fd);
-    try {
-      _fdFsync.applySyncPromise(void 0, [fd]);
-    } catch (e) {
-      const msg = e?.message ?? String(e);
-      if (msg.includes("EBADF")) throw createFsError("EBADF", "EBADF: bad file descriptor, fsync", "fsync");
-      throw e;
-    }
-  },
-  fdatasyncSync(fd) {
-    normalizeFdInteger(fd);
-    try {
-      _fdFsync.applySyncPromise(void 0, [fd]);
-    } catch (e) {
-      const msg = e?.message ?? String(e);
-      if (msg.includes("EBADF")) throw createFsError("EBADF", "EBADF: bad file descriptor, fdatasync", "fdatasync");
-      throw e;
-    }
-  },
-  // readv — scatter-read into multiple buffers (delegates to readSync)
-  readvSync(fd, buffers, position) {
-    const normalizedFd = normalizeFdInteger(fd);
-    const normalizedBuffers = normalizeIoVectorBuffers(buffers);
-    let totalBytesRead = 0;
-    const normalizedPosition = normalizeOptionalPosition(position);
-    let nextPosition = normalizedPosition;
-    for (const buffer of normalizedBuffers) {
-      const target = buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer.buffer, buffer.byteOffset, buffer.byteLength);
-      const bytesRead = fs.readSync(normalizedFd, target, 0, target.byteLength, nextPosition);
-      totalBytesRead += bytesRead;
-      if (nextPosition !== null) {
-        nextPosition += bytesRead;
-      }
-      if (bytesRead < target.byteLength) break;
-    }
-    return totalBytesRead;
-  },
-  // statfs — return synthetic filesystem stats for the in-memory VFS
-  statfsSync(path, _options) {
-    const pathStr = normalizePathLike(path);
-    if (!fs.existsSync(pathStr)) {
-      throw createFsError(
-        "ENOENT",
-        `ENOENT: no such file or directory, statfs '${pathStr}'`,
-        "statfs",
-        pathStr
-      );
-    }
-    return {
-      type: 16914839,
-      // TMPFS_MAGIC
-      bsize: 4096,
-      blocks: 262144,
-      // 1GB virtual capacity
-      bfree: 262144,
-      bavail: 262144,
-      files: 1e6,
-      ffree: 999999
-    };
-  },
-  // glob — pattern matching over VFS files
-  globSync(pattern, _options) {
-    const patterns = Array.isArray(pattern) ? pattern : [pattern];
-    const results = [];
-    for (const pat of patterns) {
-      _globCollect(pat, results);
-    }
-    return [...new Set(results)].sort();
-  },
-  // Metadata and link sync methods — delegate to VFS via host refs
-  chmodSync(path, mode) {
-    const pathStr = normalizePathLike(path);
-    const modeNum = normalizeModeArgument(mode);
-    bridgeCall(() => _fs.chmod.applySyncPromise(void 0, [pathStr, modeNum]), "chmod", pathStr);
-  },
-  chownSync(path, uid, gid) {
-    const pathStr = normalizePathLike(path);
-    const normalizedUid = normalizeNumberArgument("uid", uid, { min: -1, max: 4294967295, allowNegativeOne: true });
-    const normalizedGid = normalizeNumberArgument("gid", gid, { min: -1, max: 4294967295, allowNegativeOne: true });
-    bridgeCall(() => _fs.chown.applySyncPromise(void 0, [pathStr, normalizedUid, normalizedGid]), "chown", pathStr);
-  },
-  fchmodSync(fd, mode) {
-    const normalizedFd = normalizeFdInteger(fd);
-    const pathStr = _fdGetPath.applySync(void 0, [normalizedFd]);
-    if (!pathStr) {
-      throw createFsError("EBADF", "EBADF: bad file descriptor", "chmod");
-    }
-    fs.chmodSync(pathStr, normalizeModeArgument(mode));
-  },
-  fchownSync(fd, uid, gid) {
-    const normalizedFd = normalizeFdInteger(fd);
-    const pathStr = _fdGetPath.applySync(void 0, [normalizedFd]);
-    if (!pathStr) {
-      throw createFsError("EBADF", "EBADF: bad file descriptor", "chown");
-    }
-    fs.chownSync(pathStr, uid, gid);
-  },
-  lchownSync(path, uid, gid) {
-    const pathStr = normalizePathLike(path);
-    const normalizedUid = normalizeNumberArgument("uid", uid, { min: -1, max: 4294967295, allowNegativeOne: true });
-    const normalizedGid = normalizeNumberArgument("gid", gid, { min: -1, max: 4294967295, allowNegativeOne: true });
-    bridgeCall(() => _fs.chown.applySyncPromise(void 0, [pathStr, normalizedUid, normalizedGid]), "chown", pathStr);
-  },
-  linkSync(existingPath, newPath) {
-    const existingStr = normalizePathLike(existingPath, "existingPath");
-    const newStr = normalizePathLike(newPath, "newPath");
-    bridgeCall(() => _fs.link.applySyncPromise(void 0, [existingStr, newStr]), "link", newStr);
-  },
-  symlinkSync(target, path, _type) {
-    const targetStr = normalizePathLike(target, "target");
-    const pathStr = normalizePathLike(path);
-    bridgeCall(() => _fs.symlink.applySyncPromise(void 0, [targetStr, pathStr]), "symlink", pathStr);
-  },
-  readlinkSync(path, _options) {
-    validateEncodingOption(_options);
-    const pathStr = normalizePathLike(path);
-    return bridgeCall(() => _fs.readlink.applySyncPromise(void 0, [pathStr]), "readlink", pathStr);
-  },
-  truncateSync(path, len) {
-    const pathStr = normalizePathLike(path);
-    bridgeCall(() => _fs.truncate.applySyncPromise(void 0, [pathStr, len ?? 0]), "truncate", pathStr);
-  },
-  utimesSync(path, atime, mtime) {
-    const pathStr = normalizePathLike(path);
-    bridgeCall(() => _fs.utimes.applySyncPromise(void 0, [
-      pathStr,
-      normalizeFsTimeSpec(atime, "atime"),
-      normalizeFsTimeSpec(mtime, "mtime")
-    ]), "utimes", pathStr);
-  },
-  lutimesSync(path, atime, mtime) {
-    const pathStr = normalizePathLike(path);
-    bridgeCall(() => _fs.lutimes.applySyncPromise(void 0, [
-      pathStr,
-      normalizeFsTimeSpec(atime, "atime"),
-      normalizeFsTimeSpec(mtime, "mtime")
-    ]), "lutimes", pathStr);
-  },
-  futimesSync(fd, atime, mtime) {
-    const normalizedFd = normalizeFdInteger(fd);
-    bridgeCall(() => _fdFutimes.applySyncPromise(void 0, [
-      normalizedFd,
-      normalizeFsTimeSpec(atime, "atime"),
-      normalizeFsTimeSpec(mtime, "mtime")
-    ]), "futimes");
-  },
-  // Async methods - wrap sync methods in callbacks/promises
-  //
-  // IMPORTANT: Low-level fd operations (open, close, read, write) and operations commonly
-  // used by streaming libraries (stat, lstat, rename, unlink) must defer their callbacks
-  // using queueMicrotask(). This is critical for proper stream operation.
-  //
-  // Why: Node.js streams (like tar, minipass, fs-minipass) use callback chains where each
-  // callback triggers the next read/write operation. These streams also rely on events like
-  // 'drain' to know when to resume writing. If callbacks fire synchronously, the event loop
-  // never gets a chance to process these events, causing streams to stall after the first chunk.
-  //
-  // Example problem without queueMicrotask:
-  //   1. tar calls fs.read() with callback
-  //   2. Our sync implementation calls callback immediately
-  //   3. Callback writes to stream, stream buffer fills, returns false (needs drain)
-  //   4. Code sets up 'drain' listener and returns
-  //   5. But we never returned to event loop, so 'drain' never fires
-  //   6. Stream hangs forever
-  //
-  // With queueMicrotask, step 2 defers the callback, allowing the event loop to process
-  // pending events (including 'drain') before the next operation starts.
-  readFile(path, options, callback) {
-    if (typeof options === "function") {
-      callback = options;
-      options = void 0;
-    }
-    if (callback) {
-      normalizePathLike(path);
-      validateEncodingOption(options);
-      try {
-        callback(null, fs.readFileSync(path, options));
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.readFileSync(path, options));
-    }
-  },
-  writeFile(path, data, options, callback) {
-    if (typeof options === "function") {
-      callback = options;
-      options = void 0;
-    }
-    if (callback) {
-      normalizePathLike(path);
-      validateEncodingOption(options);
-      try {
-        fs.writeFileSync(path, data, options);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(
-        fs.writeFileSync(path, data, options)
-      );
-    }
-  },
-  appendFile(path, data, options, callback) {
-    if (typeof options === "function") {
-      callback = options;
-      options = void 0;
-    }
-    if (callback) {
-      normalizePathLike(path);
-      validateEncodingOption(options);
-      try {
-        fs.appendFileSync(path, data, options);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(
-        fs.appendFileSync(path, data, options)
-      );
-    }
-  },
-  readdir(path, options, callback) {
-    if (typeof options === "function") {
-      callback = options;
-      options = void 0;
-    }
-    if (callback) {
-      normalizePathLike(path);
-      validateEncodingOption(options);
-      try {
-        callback(null, fs.readdirSync(path, options));
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(
-        fs.readdirSync(path, options)
-      );
-    }
-  },
-  mkdir(path, options, callback) {
-    if (typeof options === "function") {
-      callback = options;
-      options = void 0;
-    }
-    if (callback) {
-      normalizePathLike(path);
-      try {
-        fs.mkdirSync(path, options);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      fs.mkdirSync(path, options);
-      return Promise.resolve();
-    }
-  },
-  rmdir(path, callback) {
-    if (callback) {
-      normalizePathLike(path);
-      const cb = callback;
-      try {
-        fs.rmdirSync(path);
-        queueMicrotask(() => cb(null));
-      } catch (e) {
-        queueMicrotask(() => cb(e));
-      }
-    } else {
-      return Promise.resolve(fs.rmdirSync(path));
-    }
-  },
-  // rm - remove files or directories (with recursive support)
-  rm(path, options, callback) {
-    let opts = {};
-    let cb;
-    if (typeof options === "function") {
-      cb = options;
-    } else if (options) {
-      opts = options;
-      cb = callback;
-    } else {
-      cb = callback;
-    }
-    const doRm = () => {
-      try {
-        const stats = fs.statSync(path);
-        if (stats.isDirectory()) {
-          if (opts.recursive) {
-            const entries = fs.readdirSync(path);
-            for (const entry of entries) {
-              const entryPath = path.endsWith("/") ? path + entry : path + "/" + entry;
-              const entryStats = fs.statSync(entryPath);
-              if (entryStats.isDirectory()) {
-                fs.rmSync(entryPath, { recursive: true });
-              } else {
-                fs.unlinkSync(entryPath);
-              }
-            }
-            fs.rmdirSync(path);
-          } else {
-            fs.rmdirSync(path);
-          }
-        } else {
-          fs.unlinkSync(path);
-        }
-      } catch (e) {
-        if (opts.force && e.code === "ENOENT") {
-          return;
-        }
-        throw e;
-      }
-    };
-    if (cb) {
-      try {
-        doRm();
-        queueMicrotask(() => cb(null));
-      } catch (e) {
-        queueMicrotask(() => cb(e));
-      }
-    } else {
-      doRm();
-      return Promise.resolve();
-    }
-  },
-  exists(path, callback) {
-    validateCallback(callback, "cb");
-    if (path === void 0) {
-      throw createInvalidArgTypeError("path", "of type string or an instance of Buffer or URL", path);
-    }
-    queueMicrotask(() => callback(Boolean(tryNormalizeExistsPath(path) && fs.existsSync(path))));
-  },
-  stat(path, callback) {
-    validateCallback(callback, "cb");
-    normalizePathLike(path);
-    const cb = callback;
-    try {
-      const stats = fs.statSync(path);
-      queueMicrotask(() => cb(null, stats));
-    } catch (e) {
-      queueMicrotask(() => cb(e));
-    }
-  },
-  lstat(path, callback) {
-    if (callback) {
-      const cb = callback;
-      try {
-        const stats = fs.lstatSync(path);
-        queueMicrotask(() => cb(null, stats));
-      } catch (e) {
-        queueMicrotask(() => cb(e));
-      }
-    } else {
-      return Promise.resolve(fs.lstatSync(path));
-    }
-  },
-  unlink(path, callback) {
-    if (callback) {
-      normalizePathLike(path);
-      const cb = callback;
-      try {
-        fs.unlinkSync(path);
-        queueMicrotask(() => cb(null));
-      } catch (e) {
-        queueMicrotask(() => cb(e));
-      }
-    } else {
-      return Promise.resolve(fs.unlinkSync(path));
-    }
-  },
-  rename(oldPath, newPath, callback) {
-    if (callback) {
-      normalizePathLike(oldPath, "oldPath");
-      normalizePathLike(newPath, "newPath");
-      const cb = callback;
-      try {
-        fs.renameSync(oldPath, newPath);
-        queueMicrotask(() => cb(null));
-      } catch (e) {
-        queueMicrotask(() => cb(e));
-      }
-    } else {
-      return Promise.resolve(fs.renameSync(oldPath, newPath));
-    }
-  },
-  copyFile(src, dest, callback) {
-    if (callback) {
-      try {
-        fs.copyFileSync(src, dest);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.copyFileSync(src, dest));
-    }
-  },
-  cp(src, dest, options, callback) {
-    if (typeof options === "function") {
-      callback = options;
-      options = void 0;
-    }
-    if (callback) {
-      try {
-        fs.cpSync(src, dest, options);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.cpSync(src, dest, options));
-    }
-  },
-  mkdtemp(prefix, options, callback) {
-    if (typeof options === "function") {
-      callback = options;
-      options = void 0;
-    }
-    validateCallback(callback, "cb");
-    validateEncodingOption(options);
-    try {
-      callback(null, fs.mkdtempSync(prefix, options));
-    } catch (e) {
-      callback(e);
-    }
-  },
-  opendir(path, options, callback) {
-    if (typeof options === "function") {
-      callback = options;
-      options = void 0;
-    }
-    if (callback) {
-      try {
-        callback(null, fs.opendirSync(path, options));
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.opendirSync(path, options));
-    }
-  },
-  open(path, flags, mode, callback) {
-    let resolvedFlags = "r";
-    let resolvedMode = mode;
-    if (typeof flags === "function") {
-      callback = flags;
-      resolvedMode = void 0;
-    } else {
-      resolvedFlags = flags ?? "r";
-    }
-    if (typeof mode === "function") {
-      callback = mode;
-      resolvedMode = void 0;
-    }
-    validateCallback(callback, "cb");
-    normalizePathLike(path);
-    normalizeOpenModeArgument(resolvedMode);
-    const cb = callback;
-    try {
-      const fd = fs.openSync(path, resolvedFlags, resolvedMode);
-      queueMicrotask(() => cb(null, fd));
-    } catch (e) {
-      queueMicrotask(() => cb(e));
-    }
-  },
-  close(fd, callback) {
-    normalizeFdInteger(fd);
-    validateCallback(callback, "cb");
-    const cb = callback;
-    try {
-      fs.closeSync(fd);
-      queueMicrotask(() => cb(null));
-    } catch (e) {
-      queueMicrotask(() => cb(e));
-    }
-  },
-  read(fd, buffer, offset, length, position, callback) {
-    if (callback) {
-      const cb = callback;
-      if (fd === 0 && (position === null || position === void 0) && typeof _kernelStdinRead !== "undefined") {
-        const target = new Uint8Array(buffer.buffer, buffer.byteOffset + offset, length);
-        const attemptKernelStdinRead = () => {
-          _kernelStdinRead.apply(void 0, [length, 100], {
-            result: { promise: true }
-          }).then((next) => {
-            if (next == null) {
-              setTimeout(attemptKernelStdinRead, 1);
-              return;
-            }
-            if (next?.done) {
-              queueMicrotask(() => cb(null, 0, buffer));
-              return;
-            }
-            const dataBase64 = String(next?.dataBase64 ?? "");
-            if (!dataBase64) {
-              setTimeout(attemptKernelStdinRead, 1);
-              return;
-            }
-            const bytes = import_buffer.Buffer.from(dataBase64, "base64");
-            const bytesRead = Math.min(length, bytes.length);
-            target.set(bytes.subarray(0, bytesRead), 0);
-            queueMicrotask(() => cb(null, bytesRead, buffer));
-          }, (error) => {
-            queueMicrotask(() => cb(error));
-          });
-        };
-        attemptKernelStdinRead();
-        return;
-      }
-      const attemptRead = () => {
-        try {
-          const bytesRead = fs.readSync(fd, buffer, offset, length, position);
-          queueMicrotask(() => cb(null, bytesRead, buffer));
-        } catch (e) {
-          const msg = e?.message ?? String(e);
-          if (msg.includes("EAGAIN")) {
-            setTimeout(attemptRead, 1);
-            return;
-          }
-          queueMicrotask(() => cb(e));
-        }
-      };
-      attemptRead();
-    } else {
-      return Promise.resolve(fs.readSync(fd, buffer, offset, length, position));
-    }
-  },
-  write(fd, buffer, offset, length, position, callback) {
-    if (typeof offset === "function") {
-      callback = offset;
-      offset = void 0;
-      length = void 0;
-      position = void 0;
-    } else if (typeof length === "function") {
-      callback = length;
-      length = void 0;
-      position = void 0;
-    } else if (typeof position === "function") {
-      callback = position;
-      position = void 0;
-    }
-    if (callback) {
-      const normalized = normalizeWriteSyncArgs(
-        buffer,
-        offset,
-        length,
-        position
-      );
-      const cb = callback;
-      try {
-        const bytesWritten = fs.writeSync(
-          fd,
-          buffer,
-          offset,
-          length,
-          position
-        );
-        queueMicrotask(() => cb(null, bytesWritten));
-      } catch (e) {
-        queueMicrotask(() => cb(e));
-      }
-    } else {
-      return Promise.resolve(
-        fs.writeSync(
-          fd,
-          buffer,
-          offset,
-          length,
-          position
-        )
-      );
-    }
-  },
-  // writev - write multiple buffers to a file descriptor
-  writev(fd, buffers, position, callback) {
-    if (typeof position === "function") {
-      callback = position;
-      position = null;
-    }
-    const normalizedFd = normalizeFdInteger(fd);
-    const normalizedBuffers = normalizeIoVectorBuffers(buffers);
-    const normalizedPosition = normalizeOptionalPosition(position);
-    if (callback) {
-      try {
-        const bytesWritten = fs.writevSync(normalizedFd, normalizedBuffers, normalizedPosition);
-        queueMicrotask(() => callback(null, bytesWritten, normalizedBuffers));
-      } catch (e) {
-        queueMicrotask(() => callback(e));
-      }
-    } else {
-      return Promise.resolve(fs.writevSync(normalizedFd, normalizedBuffers, normalizedPosition));
-    }
-  },
-  writevSync(fd, buffers, position) {
-    const normalizedFd = normalizeFdInteger(fd);
-    const normalizedBuffers = normalizeIoVectorBuffers(buffers);
-    if (hasBridgeSyncFn("_fsWritevRaw")) {
-      const normalizedPosition = normalizeOptionalPosition(position);
-      const payload = encodeWritevRawPayload(normalizedBuffers);
-      return _fsWritevRaw.applySyncPromise(void 0, [normalizedFd, payload, normalizedPosition]);
-    }
-    let nextPosition = normalizeOptionalPosition(position);
-    let totalBytesWritten = 0;
-    for (const buffer of normalizedBuffers) {
-      const bytes = buffer instanceof Uint8Array ? buffer : new Uint8Array(buffer.buffer, buffer.byteOffset, buffer.byteLength);
-      totalBytesWritten += fs.writeSync(normalizedFd, bytes, 0, bytes.length, nextPosition);
-      if (nextPosition !== null) {
-        nextPosition += bytes.length;
-      }
-    }
-    return totalBytesWritten;
-  },
-  fstat(fd, callback) {
-    if (callback) {
-      try {
-        callback(null, fs.fstatSync(fd));
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.fstatSync(fd));
-    }
-  },
-  // fsync / fdatasync async callback forms
-  fsync(fd, callback) {
-    normalizeFdInteger(fd);
-    validateCallback(callback, "cb");
-    try {
-      fs.fsyncSync(fd);
-      callback(null);
-    } catch (e) {
-      callback(e);
-    }
-  },
-  fdatasync(fd, callback) {
-    normalizeFdInteger(fd);
-    validateCallback(callback, "cb");
-    try {
-      fs.fdatasyncSync(fd);
-      callback(null);
-    } catch (e) {
-      callback(e);
-    }
-  },
-  // readv async callback form
-  readv(fd, buffers, position, callback) {
-    if (typeof position === "function") {
-      callback = position;
-      position = null;
-    }
-    const normalizedFd = normalizeFdInteger(fd);
-    const normalizedBuffers = normalizeIoVectorBuffers(buffers);
-    const normalizedPosition = normalizeOptionalPosition(position);
-    if (callback) {
-      try {
-        const bytesRead = fs.readvSync(normalizedFd, normalizedBuffers, normalizedPosition);
-        queueMicrotask(() => callback(null, bytesRead, normalizedBuffers));
-      } catch (e) {
-        queueMicrotask(() => callback(e));
-      }
-    }
-  },
-  // statfs async callback form
-  statfs(path, options, callback) {
-    if (typeof options === "function") {
-      callback = options;
-      options = void 0;
-    }
-    if (callback) {
-      try {
-        callback(null, fs.statfsSync(path, options));
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.statfsSync(path, options));
-    }
-  },
-  // glob async callback form
-  glob(pattern, options, callback) {
-    if (typeof options === "function") {
-      callback = options;
-      options = void 0;
-    }
-    if (callback) {
-      try {
-        callback(null, fs.globSync(pattern, options));
-      } catch (e) {
-        callback(e);
-      }
-    }
-  },
-  // fs.promises API
-  // Note: Using async functions to properly catch sync errors and return rejected promises
-  promises: {
-    async readFile(path, options) {
-      if (path instanceof FileHandle) {
-        return path.readFile(options);
-      }
-      return fsReadFileAsync(path, options);
-    },
-    async writeFile(path, data, options) {
-      if (path instanceof FileHandle) {
-        return path.writeFile(data, options);
-      }
-      return fsWriteFileAsync(path, data, options);
-    },
-    async appendFile(path, data, options) {
-      if (path instanceof FileHandle) {
-        return path.appendFile(data, options);
-      }
-      const existing = await fsReadFileAsync(path, "utf8").catch((err) => err?.code === "ENOENT" ? "" : Promise.reject(err));
-      const content = typeof data === "string" ? data : String(data);
-      await fsWriteFileAsync(path, existing + content, options);
-    },
-    async readdir(path, options) {
-      return fsReaddirAsync(path, options);
-    },
-    async mkdir(path, options) {
-      return fsMkdirAsync(path, options);
-    },
-    async rmdir(path) {
-      return fsRmdirAsync(path);
-    },
-    async stat(path) {
-      return fsStatAsync(path);
-    },
-    async lstat(path) {
-      return fsLstatAsync(path);
-    },
-    async unlink(path) {
-      return fsUnlinkAsync(path);
-    },
-    async rename(oldPath, newPath) {
-      return fsRenameAsync(oldPath, newPath);
-    },
-    async copyFile(src, dest) {
-      const content = await fsReadFileAsync(src);
-      await fsWriteFileAsync(dest, content);
-    },
-    async cp(src, dest, options) {
-      return fs.cpSync(src, dest, options);
-    },
-    async mkdtemp(prefix, options) {
-      return fs.mkdtempSync(prefix, options);
-    },
-    async opendir(path, options) {
-      return fs.opendirSync(path, options);
-    },
-    async open(path, flags, mode) {
-      return new FileHandle(fs.openSync(path, flags ?? "r", mode));
-    },
-    async statfs(path, options) {
-      return fs.statfsSync(path, options);
-    },
-    async glob(pattern, _options) {
-      return fs.globSync(pattern, _options);
-    },
-    async access(path) {
-      return fsAccessAsync(path);
-    },
-    async rm(path, options) {
-      return fs.rmSync(path, options);
-    },
-    async chmod(path, mode) {
-      return fsChmodAsync(path, mode);
-    },
-    async chown(path, uid, gid) {
-      return fsChownAsync(path, uid, gid);
-    },
-    async lchown(path, uid, gid) {
-      return fs.lchownSync(path, uid, gid);
-    },
-    async lutimes(path, atime, mtime) {
-      return fsLutimesAsync(path, atime, mtime);
-    },
-    async link(existingPath, newPath) {
-      return fsLinkAsync(existingPath, newPath);
-    },
-    async symlink(target, path) {
-      return fsSymlinkAsync(target, path);
-    },
-    async readlink(path) {
-      return fsReadlinkAsync(path);
-    },
-    async realpath(path, options) {
-      return fs.realpathSync(path, options);
-    },
-    async truncate(path, len) {
-      return fsTruncateAsync(path, len);
-    },
-    async utimes(path, atime, mtime) {
-      return fsUtimesAsync(path, atime, mtime);
-    },
-    watch(path, options) {
-      return createPromisesWatchIterator(path, options);
-    }
-  },
-  // Compatibility methods
-  accessSync(path) {
-    if (!fs.existsSync(path)) {
-      throw createFsError(
-        "ENOENT",
-        `ENOENT: no such file or directory, access '${path}'`,
-        "access",
-        path
-      );
-    }
-  },
-  access(path, mode, callback) {
-    if (typeof mode === "function") {
-      callback = mode;
-      mode = void 0;
-    }
-    if (callback) {
-      try {
-        fs.accessSync(path);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return fs.promises.access(path);
-    }
-  },
-  realpathSync: Object.assign(
-    function realpathSync(path, options) {
-      validateEncodingOption(options);
-      const MAX_SYMLINK_DEPTH = 40;
-      let symlinksFollowed = 0;
-      const raw = normalizePathLike(path);
-      const pending = [];
-      for (const seg of raw.split("/")) {
-        if (!seg || seg === ".") continue;
-        if (seg === "..") {
-          if (pending.length > 0) pending.pop();
-        } else pending.push(seg);
-      }
-      const resolved = [];
-      while (pending.length > 0) {
-        const seg = pending.shift();
-        if (seg === ".") continue;
-        if (seg === "..") {
-          if (resolved.length > 0) resolved.pop();
-          continue;
-        }
-        resolved.push(seg);
-        const currentPath = "/" + resolved.join("/");
-        try {
-          const stat = fs.lstatSync(currentPath);
-          if (stat.isSymbolicLink()) {
-            if (++symlinksFollowed > MAX_SYMLINK_DEPTH) {
-              const err = new Error(`ELOOP: too many levels of symbolic links, realpath '${raw}'`);
-              err.code = "ELOOP";
-              err.syscall = "realpath";
-              err.path = raw;
-              throw err;
-            }
-            const target = fs.readlinkSync(currentPath);
-            const targetSegs = target.split("/").filter(Boolean);
-            if (target.startsWith("/")) {
-              resolved.length = 0;
-            } else {
-              resolved.pop();
-            }
-            pending.unshift(...targetSegs);
-          }
-        } catch (e) {
-          const err = e;
-          if (err.code === "ELOOP") throw e;
-          if (err.code === "ENOENT" || err.code === "ENOTDIR") {
-            const enoent = new Error(`ENOENT: no such file or directory, realpath '${raw}'`);
-            enoent.code = "ENOENT";
-            enoent.syscall = "realpath";
-            enoent.path = raw;
-            throw enoent;
-          }
-          break;
-        }
-      }
-      return "/" + resolved.join("/") || "/";
-    },
-    {
-      native(path, options) {
-        validateEncodingOption(options);
-        return fs.realpathSync(path);
-      }
-    }
-  ),
-  realpath: Object.assign(
-    function realpath(path, optionsOrCallback, callback) {
-      let options;
-      if (typeof optionsOrCallback === "function") {
-        callback = optionsOrCallback;
-      } else {
-        options = optionsOrCallback;
-      }
-      if (callback) {
-        validateEncodingOption(options);
-        callback(null, fs.realpathSync(path, options));
-      } else {
-        return Promise.resolve(fs.realpathSync(path, options));
-      }
-    },
-    {
-      native(path, optionsOrCallback, callback) {
-        let options;
-        if (typeof optionsOrCallback === "function") {
-          callback = optionsOrCallback;
-        } else {
-          options = optionsOrCallback;
-        }
-        if (callback) {
-          validateEncodingOption(options);
-          callback(null, fs.realpathSync.native(path, options));
-        } else {
-          return Promise.resolve(fs.realpathSync.native(path, options));
-        }
-      }
-    }
-  ),
-  ReadStream: ReadStreamFactory,
-  WriteStream: WriteStreamFactory,
-  createReadStream: function createReadStream(path, options) {
-    const opts = typeof options === "string" ? { encoding: options } : options;
-    validateEncodingOption(opts);
-    const fd = normalizeStreamFd(opts?.fd);
-    const pathLike = normalizeStreamPath(path, fd);
-    return new ReadStream(pathLike, opts);
-  },
-  createWriteStream: function createWriteStream(path, options) {
-    const opts = typeof options === "string" ? { encoding: options } : options;
-    validateEncodingOption(opts);
-    validateWriteStreamStartOption(opts ?? {});
-    const fd = normalizeStreamFd(opts?.fd);
-    const pathLike = normalizeStreamPath(path, fd);
-    return new WriteStream(pathLike, opts);
-  },
-  // Watch APIs use guest-side polling over statSync until the kernel grows native notifications.
-  watch(...args) {
-    const { path, listener, options } = normalizeWatchArguments(args[0], args[1], args[2]);
-    const watcher = createFsWatcher(path, options);
-    if (listener) {
-      watcher.on("change", listener);
-    }
-    return watcher;
-  },
-  watchFile(...args) {
-    const { path, listener, options } = normalizeWatchFileArguments(args[0], args[1], args[2]);
-    return createFsStatWatcher(path, options, listener);
-  },
-  unwatchFile(...args) {
-    const path = normalizePathLike(args[0]);
-    const listener = args[1];
-    if (listener !== void 0 && typeof listener !== "function") {
-      throw createInvalidArgTypeError("listener", "of type function", listener);
-    }
-    const watchers = activeStatWatchers.get(path);
-    if (!watchers) {
-      return;
-    }
-    for (const watcher of [...watchers]) {
-      const listeners = watcher._listeners.get("change") ?? [];
-      if (listener === void 0 || listeners.some(
-        (candidate) => candidate === listener || candidate._originalListener === listener
-      )) {
-        watcher.close();
-      }
-    }
-  },
-  chmod(path, mode, callback) {
-    if (callback) {
-      normalizePathLike(path);
-      normalizeModeArgument(mode);
-      try {
-        fs.chmodSync(path, mode);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.chmodSync(path, mode));
-    }
-  },
-  chown(path, uid, gid, callback) {
-    if (callback) {
-      normalizePathLike(path);
-      normalizeNumberArgument("uid", uid, { min: -1, max: 4294967295, allowNegativeOne: true });
-      normalizeNumberArgument("gid", gid, { min: -1, max: 4294967295, allowNegativeOne: true });
-      try {
-        fs.chownSync(path, uid, gid);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.chownSync(path, uid, gid));
-    }
-  },
-  fchmod(fd, mode, callback) {
-    if (callback) {
-      normalizeFdInteger(fd);
-      normalizeModeArgument(mode);
-      try {
-        fs.fchmodSync(fd, mode);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      normalizeFdInteger(fd);
-      normalizeModeArgument(mode);
-      return Promise.resolve(fs.fchmodSync(fd, mode));
-    }
-  },
-  fchown(fd, uid, gid, callback) {
-    if (callback) {
-      normalizeFdInteger(fd);
-      normalizeNumberArgument("uid", uid, { min: -1, max: 4294967295, allowNegativeOne: true });
-      normalizeNumberArgument("gid", gid, { min: -1, max: 4294967295, allowNegativeOne: true });
-      try {
-        fs.fchownSync(fd, uid, gid);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      normalizeFdInteger(fd);
-      normalizeNumberArgument("uid", uid, { min: -1, max: 4294967295, allowNegativeOne: true });
-      normalizeNumberArgument("gid", gid, { min: -1, max: 4294967295, allowNegativeOne: true });
-      return Promise.resolve(fs.fchownSync(fd, uid, gid));
-    }
-  },
-  lchown(path, uid, gid, callback) {
-    if (arguments.length >= 4) {
-      validateCallback(callback, "cb");
-      normalizePathLike(path);
-      normalizeNumberArgument("uid", uid, { min: -1, max: 4294967295, allowNegativeOne: true });
-      normalizeNumberArgument("gid", gid, { min: -1, max: 4294967295, allowNegativeOne: true });
-      try {
-        fs.lchownSync(path, uid, gid);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.lchownSync(path, uid, gid));
-    }
-  },
-  link(existingPath, newPath, callback) {
-    if (callback) {
-      normalizePathLike(existingPath, "existingPath");
-      normalizePathLike(newPath, "newPath");
-      try {
-        fs.linkSync(existingPath, newPath);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.linkSync(existingPath, newPath));
-    }
-  },
-  symlink(target, path, typeOrCb, callback) {
-    if (typeof typeOrCb === "function") {
-      callback = typeOrCb;
-    }
-    if (callback) {
-      try {
-        fs.symlinkSync(target, path);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.symlinkSync(target, path));
-    }
-  },
-  readlink(path, optionsOrCb, callback) {
-    if (typeof optionsOrCb === "function") {
-      callback = optionsOrCb;
-      optionsOrCb = void 0;
-    }
-    if (callback) {
-      normalizePathLike(path);
-      validateEncodingOption(optionsOrCb);
-      try {
-        callback(null, fs.readlinkSync(path, optionsOrCb));
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.readlinkSync(path, optionsOrCb));
-    }
-  },
-  truncate(path, lenOrCb, callback) {
-    if (typeof lenOrCb === "function") {
-      callback = lenOrCb;
-      lenOrCb = 0;
-    }
-    if (callback) {
-      try {
-        fs.truncateSync(path, lenOrCb);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.truncateSync(path, lenOrCb));
-    }
-  },
-  utimes(path, atime, mtime, callback) {
-    if (callback) {
-      try {
-        fs.utimesSync(path, atime, mtime);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.utimesSync(path, atime, mtime));
-    }
-  },
-  lutimes(path, atime, mtime, callback) {
-    if (callback) {
-      try {
-        fs.lutimesSync(path, atime, mtime);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.lutimesSync(path, atime, mtime));
-    }
-  },
-  futimes(fd, atime, mtime, callback) {
-    if (callback) {
-      try {
-        fs.futimesSync(fd, atime, mtime);
-        callback(null);
-      } catch (e) {
-        callback(e);
-      }
-    } else {
-      return Promise.resolve(fs.futimesSync(fd, atime, mtime));
-    }
-  }
-};
-_globReadDir = (dir) => fs.readdirSync(dir);
-_globStat = (path) => fs.statSync(path);
-var fs_default = fs;
-exposeCustomGlobal("_fsModule", fs_default);
-export { import_buffer, O_RDONLY, O_WRONLY, O_RDWR, O_CREAT, O_EXCL, O_TRUNC, O_APPEND, Stats, Dirent, Dir, FILE_HANDLE_READ_CHUNK_BYTES, FILE_HANDLE_READ_BUFFER_BYTES, FILE_HANDLE_MAX_READ_BYTES, createAbortError, validateAbortSignal, throwIfAborted, waitForNextTick, createInternalAssertionError, createOutOfRangeError, formatInvalidArgReceived, createInvalidArgTypeError, createInvalidArgValueError, createInvalidEncodingError, toUint8ArrayChunk, iterateWriteChunks, FileHandle, isArrayBufferView, createInvalidPropertyTypeError, validateCallback, validateEncodingValue, validateEncodingOption, normalizePathLike, tryNormalizeExistsPath, normalizeNumberArgument, normalizeModeArgument, normalizeOpenModeArgument, applyProcessUmask, validateWriteStreamStartOption, validateBooleanOption, validateAbortSignalOption, normalizeWatchOptions, normalizeWatchArguments, normalizeWatchFileArguments, createMissingWatcherStats, createWatcherSnapshot, createWatcherFilename, watcherEventType, DEFAULT_FS_WATCH_INTERVAL_MS, DEFAULT_FS_WATCH_FILE_INTERVAL_MS, activeStatWatchers, PollingFsWatcher, registerStatWatcher, unregisterStatWatcher, createFsWatcher, createFsStatWatcher, createPromisesWatchIterator, isReadWriteOptionsObject, normalizeOptionalPosition, normalizeOffsetLength, normalizeReadSyncArgs, normalizeWriteSyncArgs, normalizeFdInteger, normalizeIoVectorBuffers, validateStreamFsOverride, normalizeStreamFd, normalizeStreamPath, normalizeStreamStartEnd, ReadStream, MAX_WRITE_STREAM_BYTES, WriteStream, ReadStreamClass, WriteStreamClass, ReadStreamFactory, WriteStreamFactory, parseFlags, POSIX_ERRNO, errnoForCode, createFsError, bridgeErrorText, bridgeErrorCode, bridgeCall, _globToRegex, _globGetBase, MAX_GLOB_DEPTH, _globCollect, _globReadDir, _globStat, toPathString, getBridgeSyncFn, createBridgeSyncFacade, createBridgeAsyncFacade, _fs, _fsAsync, _fdOpen, _fdClose, _fdRead, _fdWrite, _fdFstat, _fdFtruncate, _fdFsync, _fdFutimes, _fdGetPath, _processUmask, _processMemoryUsage, _processCpuUsage, _processResourceUsage, _processVersions, _kernelPollRaw, _kernelIsattyRaw, _kernelTtySizeRaw, decodeBridgeJson, encodeBridgeBytes, throwNormalizedFsBridgeError, joinDirEntryPath, normalizeReaddirEntries, fsReadFileAsync, fsWriteFileAsync, fsReaddirAsync, fsMkdirAsync, fsRmdirAsync, fsStatAsync, fsLstatAsync, fsUnlinkAsync, fsRenameAsync, fsAccessAsync, fsChmodAsync, fsChownAsync, fsLinkAsync, fsSymlinkAsync, fsReadlinkAsync, fsTruncateAsync, normalizeFsTimeSpec, fsUtimesAsync, fsLutimesAsync, fs, fs_default };
diff --git a/packages/build-tools/bridge-src/builtins/http.ts b/packages/build-tools/bridge-src/builtins/http.ts
deleted file mode 100644
index 04ff3cc0a..000000000
--- a/packages/build-tools/bridge-src/builtins/http.ts
+++ /dev/null
@@ -1,4558 +0,0 @@
-import { UndiciClient, undiciRequest } from "./undici.js";
-import { dispatchCustomEmitterListeners } from "./process.js";
-import { setImmediate } from "./timers.js";
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { dns } from "./dns.js";
-import { Headers, MAX_HTTP_BODY_BYTES, MAX_HTTP_REQUEST_HEADERS, MAX_HTTP_REQUEST_HEADER_BYTES, Request, Response } from "./fetch.js";
-import { http2Servers, onHttp2Dispatch, pendingHttp2CompatRequests } from "./http2.js";
-import { NetServer, NetSocket, netConnect } from "./net.js";
-import { TLSSocket, tlsConnect } from "./tls.js";
-
-function createConnResetError(message = "socket hang up") {
-  const error = new Error(message);
-  error.code = "ECONNRESET";
-  return error;
-}
-
-function createAbortError2() {
-  const error = new Error("The operation was aborted");
-  error.name = "AbortError";
-  error.code = "ABORT_ERR";
-  return error;
-}
-
-var IncomingMessage = class {
-  headers;
-  rawHeaders;
-  trailers;
-  rawTrailers;
-  httpVersion;
-  httpVersionMajor;
-  httpVersionMinor;
-  method;
-  url;
-  statusCode;
-  statusMessage;
-  _body;
-  _isBinary;
-  _listeners;
-  complete;
-  aborted;
-  socket;
-  _bodyConsumed;
-  _ended;
-  _flowing;
-  readable;
-  readableEnded;
-  readableFlowing;
-  destroyed;
-  _encoding;
-  _closeEmitted;
-  constructor(response) {
-    const normalizedHeaders = {};
-    if (Array.isArray(response?.headers)) {
-      response.headers.forEach(([key, value]) => {
-        appendNormalizedHeader(normalizedHeaders, key.toLowerCase(), value);
-      });
-    } else if (response?.headers) {
-      Object.entries(response.headers).forEach(([key, value]) => {
-        normalizedHeaders[key] = Array.isArray(value) ? [...value] : value;
-      });
-    }
-    this.rawHeaders = Array.isArray(response?.rawHeaders) ? [...response.rawHeaders] : [];
-    if (this.rawHeaders.length > 0) {
-      this.headers = {};
-      for (let index = 0; index < this.rawHeaders.length; index += 2) {
-        const key = this.rawHeaders[index];
-        const value = this.rawHeaders[index + 1];
-        if (key !== void 0 && value !== void 0) {
-          appendNormalizedHeader(this.headers, key.toLowerCase(), value);
-        }
-      }
-    } else {
-      this.headers = normalizedHeaders;
-    }
-    if (this.rawHeaders.length === 0 && this.headers && typeof this.headers === "object") {
-      Object.entries(this.headers).forEach(([k, v]) => {
-        if (Array.isArray(v)) {
-          v.forEach((entry) => {
-            this.rawHeaders.push(k, entry);
-          });
-          return;
-        }
-        this.rawHeaders.push(k, v);
-      });
-    }
-    if (response?.trailers && typeof response.trailers === "object") {
-      this.trailers = response.trailers;
-      this.rawTrailers = [];
-      Object.entries(response.trailers).forEach(([k, v]) => {
-        this.rawTrailers.push(k, v);
-      });
-    } else {
-      this.trailers = {};
-      this.rawTrailers = [];
-    }
-    this.httpVersion = "1.1";
-    this.httpVersionMajor = 1;
-    this.httpVersionMinor = 1;
-    this.method = null;
-    this.url = response?.url || "";
-    this.statusCode = response?.status;
-    this.statusMessage = response?.statusText;
-    const bodyEncodingHeader = this.headers["x-body-encoding"];
-    const bodyEncoding = response?.bodyEncoding || (Array.isArray(bodyEncodingHeader) ? bodyEncodingHeader[0] : bodyEncodingHeader);
-    if (bodyEncoding === "base64" && response?.body && typeof Buffer !== "undefined") {
-      this._body = Buffer.from(response.body, "base64").toString("binary");
-      this._isBinary = true;
-    } else {
-      this._body = response?.body || "";
-      this._isBinary = false;
-    }
-    this._listeners = {};
-    this.complete = false;
-    this.aborted = false;
-    this.socket = null;
-    this._bodyConsumed = false;
-    this._ended = false;
-    this._flowing = false;
-    this.readable = true;
-    this.readableEnded = false;
-    this.readableFlowing = null;
-    this.destroyed = false;
-    this._closeEmitted = false;
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    if (event === "data" && !this._bodyConsumed) {
-      this._flowing = true;
-      this.readableFlowing = true;
-      Promise.resolve().then(() => {
-        if (!this._bodyConsumed) {
-          this._bodyConsumed = true;
-          if (this._body && this._body.length > 0) {
-            let buf;
-            if (typeof Buffer !== "undefined") {
-              buf = this._isBinary ? Buffer.from(this._body, "binary") : Buffer.from(this._body);
-            } else {
-              buf = this._body;
-            }
-            this.emit("data", buf);
-          }
-          Promise.resolve().then(() => {
-            if (!this._ended) {
-              this._ended = true;
-              this.complete = true;
-              this.readable = false;
-              this.readableEnded = true;
-              this.emit("end");
-            }
-          });
-        }
-      });
-    }
-    if (event === "end" && this._bodyConsumed && !this._ended) {
-      Promise.resolve().then(() => {
-        if (!this._ended) {
-          this._ended = true;
-          this.complete = true;
-          this.readable = false;
-          this.readableEnded = true;
-          listener();
-        }
-      });
-    }
-    return this;
-  }
-  once(event, listener) {
-    const wrapper = (...args) => {
-      this.off(event, wrapper);
-      listener(...args);
-    };
-    wrapper._originalListener = listener;
-    return this.on(event, wrapper);
-  }
-  off(event, listener) {
-    if (this._listeners[event]) {
-      const idx = this._listeners[event].findIndex(
-        (fn) => fn === listener || fn._originalListener === listener
-      );
-      if (idx !== -1) this._listeners[event].splice(idx, 1);
-    }
-    return this;
-  }
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-  removeAllListeners(event) {
-    if (event) {
-      delete this._listeners[event];
-    } else {
-      this._listeners = {};
-    }
-    return this;
-  }
-  emit(event, ...args) {
-    return dispatchCustomEmitterListeners(this, this._listeners[event], args);
-  }
-  setEncoding(encoding) {
-    this._encoding = encoding;
-    return this;
-  }
-  read(_size) {
-    if (this._bodyConsumed) return null;
-    this._bodyConsumed = true;
-    let buf;
-    if (typeof Buffer !== "undefined") {
-      buf = this._isBinary ? Buffer.from(this._body, "binary") : Buffer.from(this._body);
-    } else {
-      buf = this._body;
-    }
-    Promise.resolve().then(() => {
-      if (!this._ended) {
-        this._ended = true;
-        this.complete = true;
-        this.readable = false;
-        this.readableEnded = true;
-        this.emit("end");
-      }
-    });
-    return buf;
-  }
-  pipe(dest) {
-    let buf;
-    if (typeof Buffer !== "undefined") {
-      buf = this._isBinary ? Buffer.from(this._body || "", "binary") : Buffer.from(this._body || "");
-    } else {
-      buf = this._body || "";
-    }
-    if (typeof dest.write === "function" && (typeof buf === "string" ? buf.length : buf.length) > 0) {
-      dest.write(buf);
-    }
-    if (typeof dest.end === "function") {
-      Promise.resolve().then(() => dest.end());
-    }
-    this._bodyConsumed = true;
-    this._ended = true;
-    this.complete = true;
-    this.readable = false;
-    this.readableEnded = true;
-    return dest;
-  }
-  pause() {
-    this._flowing = false;
-    this.readableFlowing = false;
-    return this;
-  }
-  resume() {
-    this._flowing = true;
-    this.readableFlowing = true;
-    if (!this._bodyConsumed) {
-      Promise.resolve().then(() => {
-        if (!this._bodyConsumed) {
-          this._bodyConsumed = true;
-          if (this._body) {
-            let buf;
-            if (typeof Buffer !== "undefined") {
-              buf = this._isBinary ? Buffer.from(this._body, "binary") : Buffer.from(this._body);
-            } else {
-              buf = this._body;
-            }
-            this.emit("data", buf);
-          }
-          Promise.resolve().then(() => {
-            if (!this._ended) {
-              this._ended = true;
-              this.complete = true;
-              this.readable = false;
-              this.readableEnded = true;
-              this.emit("end");
-            }
-          });
-        }
-      });
-    }
-    return this;
-  }
-  unpipe(_dest) {
-    return this;
-  }
-  destroy(err) {
-    this.destroyed = true;
-    this.readable = false;
-    if (err) this.emit("error", err);
-    this._emitClose();
-    return this;
-  }
-  _abort(err = createConnResetError("aborted")) {
-    if (this.aborted) {
-      return;
-    }
-    this.aborted = true;
-    this.complete = false;
-    this.destroyed = true;
-    this.readable = false;
-    this.readableEnded = true;
-    this.emit("aborted");
-    if (err) {
-      this.emit("error", err);
-    }
-    this._emitClose();
-  }
-  _emitClose() {
-    if (this._closeEmitted) {
-      return;
-    }
-    this._closeEmitted = true;
-    this.emit("close");
-  }
-  [Symbol.asyncIterator]() {
-    const self = this;
-    let dataEmitted = false;
-    let ended = false;
-    return {
-      async next() {
-        if (ended || self._ended) {
-          return { done: true, value: void 0 };
-        }
-        if (!dataEmitted && !self._bodyConsumed) {
-          dataEmitted = true;
-          self._bodyConsumed = true;
-          let buf;
-          if (typeof Buffer !== "undefined") {
-            buf = self._isBinary ? Buffer.from(self._body || "", "binary") : Buffer.from(self._body || "");
-          } else {
-            buf = self._body || "";
-          }
-          return { done: false, value: buf };
-        }
-        ended = true;
-        self._ended = true;
-        self.complete = true;
-        self.readable = false;
-        self.readableEnded = true;
-        return { done: true, value: void 0 };
-      },
-      return() {
-        ended = true;
-        return Promise.resolve({ done: true, value: void 0 });
-      },
-      throw(err) {
-        ended = true;
-        self.emit("error", err);
-        return Promise.resolve({ done: true, value: void 0 });
-      }
-    };
-  }
-};
-
-var ClientRequest = class {
-  _options;
-  _callback;
-  _listeners = {};
-  _headers = {};
-  _rawHeaderNames = /* @__PURE__ */ new Map();
-  _body = "";
-  _bodyBytes = 0;
-  _ended = false;
-  _agent;
-  _hostKey;
-  _socketEndListener = null;
-  _socketCloseListener = null;
-  _loopbackAbort;
-  _response = null;
-  _closeEmitted = false;
-  _abortEmitted = false;
-  _signalAbortHandler;
-  _signalPollTimer = null;
-  _skipExecute = false;
-  _destroyError;
-  _errorEmitted = false;
-  socket;
-  finished = false;
-  aborted = false;
-  destroyed = false;
-  path;
-  method;
-  reusedSocket = false;
-  timeoutCb;
-  constructor(options, callback) {
-    const normalizedMethod = validateRequestMethod(options.method);
-    this._options = {
-      ...options,
-      method: normalizedMethod,
-      path: validateRequestPath(options.path)
-    };
-    this._callback = callback;
-    this._validateTimeoutOption();
-    this._setOutgoingHeaders(options.headers);
-    if (!this._headers.host) {
-      this._setHeaderValue("Host", buildHostHeader(this._options));
-    }
-    this.path = String(this._options.path || "/");
-    this.method = String(this._options.method || "GET").toUpperCase();
-    const agentOpt = this._options.agent;
-    if (agentOpt === false) {
-      this._agent = null;
-    } else if (agentOpt instanceof Agent) {
-      this._agent = agentOpt;
-    } else if (this._options._agentOSDefaultAgent instanceof Agent) {
-      this._agent = this._options._agentOSDefaultAgent;
-    } else {
-      this._agent = null;
-    }
-    this._hostKey = this._agent ? this._agent._getHostKey(this._options) : "";
-    this._bindAbortSignal();
-    if (typeof this._options.timeout === "number") {
-      this.setTimeout(this._options.timeout);
-    }
-    Promise.resolve().then(() => this._execute());
-  }
-  _assignSocket(socket, reusedSocket) {
-    this.socket = socket;
-    this.reusedSocket = reusedSocket;
-    const trackedSocket = socket;
-    if (!trackedSocket._agentPermanentListenersInstalled) {
-      trackedSocket._agentPermanentListenersInstalled = true;
-      socket.on("error", () => {
-      });
-      socket.on("end", () => {
-      });
-    }
-    this._socketEndListener = () => {
-    };
-    socket.on("end", this._socketEndListener);
-    this._socketCloseListener = () => {
-      this.destroyed = true;
-      this._clearTimeout();
-      this._emitClose();
-    };
-    socket.on("close", this._socketCloseListener);
-    this._applyTimeoutToSocket(socket);
-    this._emit("socket", socket);
-    if (this.destroyed) {
-      if (this._destroyError && !this._errorEmitted) {
-        this._errorEmitted = true;
-        queueMicrotask(() => {
-          this._emit("error", this._destroyError);
-        });
-      }
-      socket.destroy();
-      return;
-    }
-    void this._dispatchWithSocket(socket);
-  }
-  _handleSocketError(err) {
-    this._emit("error", err);
-  }
-  _finalizeSocket(socket, keepSocketAlive) {
-    if (this._socketEndListener) {
-      socket.off?.("end", this._socketEndListener);
-      socket.removeListener?.("end", this._socketEndListener);
-      this._socketEndListener = null;
-    }
-    if (this._socketCloseListener) {
-      socket.off?.("close", this._socketCloseListener);
-      socket.removeListener?.("close", this._socketCloseListener);
-      this._socketCloseListener = null;
-    }
-    if (this._agent) {
-      this._agent._releaseSocket(this._hostKey, socket, this._options, keepSocketAlive);
-    } else if (!socket.destroyed) {
-      socket.destroy();
-    }
-  }
-  async _dispatchWithSocket(socket) {
-    try {
-      const normalizedHeaders = normalizeRequestHeaders(this._options.headers);
-      const requestMethod = String(this._options.method || "GET").toUpperCase();
-      const bridgeBackedSocket = socket instanceof NetSocket || (typeof socket?._socketId === "string" && socket._socketId.length > 0) || (typeof socket?._socketId === "number" && socket._socketId > 0);
-      // Bridge-backed sockets already speak kernel-routed byte streams, so route
-      // HTTP requests through the raw serializer instead of undici's dispatcher.
-      if (bridgeBackedSocket || socket?._loopbackServer || isRawSocketRequest(requestMethod, normalizedHeaders) || this._options.socketPath || this._agent?.keepAlive === true) {
-        await this._dispatchRawSocketRequest(socket, requestMethod, normalizedHeaders);
-      } else {
-        await this._dispatchUndiciRequest(socket, requestMethod);
-      }
-    } catch (err) {
-      this._clearTimeout();
-      this._emit("error", err);
-      this._finalizeSocket(socket, false);
-    }
-  }
-  async _dispatchUndiciRequest(socket, requestMethod) {
-    await waitForSocketReadyForProtocol(socket, this._options.protocol || "http:");
-    const dispatcher = getUndiciClientForSocket(socket, this._options);
-    const bodyBuffer = this._body ? Buffer.from(this._body) : Buffer.alloc(0);
-    const headerPairs = buildRawHttpHeaderPairs(this._headers, this._rawHeaderNames);
-    if (bodyBuffer.length > 0 && !this._headers["content-length"] && !this._headers["transfer-encoding"]) {
-      headerPairs.push(["Content-Length", String(bodyBuffer.length)]);
-    }
-    const response = await new Promise((resolve, reject) => {
-      try {
-        undiciRequest.call(dispatcher, {
-          path: this._options.path || "/",
-          method: requestMethod,
-          headers: flattenHeaderPairs(headerPairs),
-          body: bodyBuffer.length > 0 ? bodyBuffer : null,
-          signal: this._options.signal,
-          responseHeaders: "raw"
-        }, (err, result) => {
-          if (err) {
-            reject(err);
-            return;
-          }
-          resolve(result);
-        });
-      } catch (error) {
-        reject(error);
-      }
-    });
-    const responseBody = await readUndiciReadableBody(response?.body);
-    await new Promise((resolve) => {
-      queueMicrotask(resolve);
-    });
-    this.finished = true;
-    this._clearTimeout();
-    const res = new IncomingMessage({
-      status: response?.statusCode,
-      statusText: response?.statusText,
-      headers: Array.isArray(response?.headers) ? response.headers : [],
-      rawHeaders: Array.isArray(response?.headers) ? response.headers : [],
-      trailers: response?.trailers && typeof response.trailers === "object" ? response.trailers : {},
-      body: responseBody.length > 0 ? responseBody.toString("base64") : "",
-      bodyEncoding: "base64",
-      url: this._buildUrl()
-    });
-    this._response = res;
-    res.socket = socket;
-    res.once("end", () => {
-      process.nextTick(() => {
-        this._finalizeSocket(socket, this._agent?.keepAlive === true && !this.aborted);
-      });
-    });
-    if (this._callback) {
-      this._callback(res);
-    }
-    this._emit("response", res);
-    if (!this._callback && this._listenerCount("response") === 0) {
-      queueMicrotask(() => {
-        res.resume();
-      });
-    }
-  }
-  async _dispatchRawSocketRequest(socket, requestMethod, normalizedHeaders) {
-    const protocol = this._options.protocol || "http:";
-    await waitForSocketReadyForProtocol(socket, protocol);
-    const bodyBuffer = this._body ? Buffer.from(this._body) : Buffer.alloc(0);
-    const headerPairs = buildRawHttpHeaderPairs(this._headers, this._rawHeaderNames);
-    if (bodyBuffer.length > 0 && !normalizedHeaders["content-length"] && !normalizedHeaders["transfer-encoding"]) {
-      headerPairs.push(["Content-Length", String(bodyBuffer.length)]);
-    }
-    const requestBuffer = serializeRawHttpRequest(
-      requestMethod,
-      this._options.path || "/",
-      headerPairs,
-      bodyBuffer
-    );
-    const timeoutMs = typeof this._options.timeout === "number" && this._options.timeout > 0 ? this._options.timeout : 3e4;
-    const responsePromise = waitForRawHttpResponse(socket, requestMethod, timeoutMs);
-    socket.write(requestBuffer);
-    const response = await responsePromise;
-    this.finished = true;
-    this._clearTimeout();
-    if (response.status === 101) {
-      const res2 = new IncomingMessage({
-        status: response.status,
-        statusText: response.statusText,
-        headers: response.headers,
-        rawHeaders: response.rawHeaders,
-        body: "",
-        bodyEncoding: "base64",
-        url: this._buildUrl()
-      });
-      this._response = res2;
-      res2.socket = socket;
-      const head = response.head ?? Buffer.alloc(0);
-      if (this._listenerCount("upgrade") === 0) {
-        socket.destroy();
-        return;
-      }
-      this._emit("upgrade", res2, socket, head);
-      return;
-    }
-    if (requestMethod === "CONNECT") {
-      const res2 = new IncomingMessage({
-        status: response.status,
-        statusText: response.statusText,
-        headers: response.headers,
-        rawHeaders: response.rawHeaders,
-        body: "",
-        bodyEncoding: "base64",
-        url: this._buildUrl()
-      });
-      this._response = res2;
-      res2.socket = socket;
-      const head = response.head ?? Buffer.alloc(0);
-      this._emit("connect", res2, socket, head);
-      return;
-    }
-    const res = new IncomingMessage({
-      status: response.status,
-      statusText: response.statusText,
-      headers: response.headers,
-      rawHeaders: response.rawHeaders,
-      body: response.body && response.body.length > 0 ? response.body.toString("base64") : "",
-      bodyEncoding: "base64",
-      url: this._buildUrl()
-    });
-    this._response = res;
-    res.socket = socket;
-    res.once("end", () => {
-      process.nextTick(() => {
-        this._finalizeSocket(socket, this._agent?.keepAlive === true && !this.aborted);
-      });
-    });
-    if (this._callback) {
-      this._callback(res);
-    }
-    this._emit("response", res);
-    if (!this._callback && this._listenerCount("response") === 0) {
-      queueMicrotask(() => {
-        res.resume();
-      });
-    }
-  }
-  _execute() {
-    if (this._skipExecute) {
-      return;
-    }
-    if (this._agent) {
-      this._agent.addRequest(this, this._options);
-      return;
-    }
-    const finish = (socket) => {
-      if (!socket) {
-        this._handleSocketError(new Error("Failed to create socket"));
-        this._emitClose();
-        return;
-      }
-      this._assignSocket(socket, false);
-    };
-    const createConnection = this._options.createConnection;
-    if (typeof createConnection === "function") {
-      const maybeSocket = createConnection(this._options, (_err, socket) => {
-        finish(socket);
-      });
-      finish(maybeSocket);
-      return;
-    }
-    finish(createHttpRequestSocket(this._options));
-  }
-  _buildUrl() {
-    const opts = this._options;
-    const protocol = opts.protocol || (opts.port === 443 ? "https:" : "http:");
-    const host = opts.hostname || opts.host || "localhost";
-    const port = opts.port ? ":" + opts.port : "";
-    const path = opts.path || "/";
-    return protocol + "//" + host + port + path;
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    return this;
-  }
-  addListener(event, listener) {
-    return this.on(event, listener);
-  }
-  once(event, listener) {
-    const wrapper = (...args) => {
-      this.off(event, wrapper);
-      listener(...args);
-    };
-    wrapper.listener = listener;
-    return this.on(event, wrapper);
-  }
-  off(event, listener) {
-    if (this._listeners[event]) {
-      const idx = this._listeners[event].findIndex(
-        (registered) => registered === listener || registered.listener === listener
-      );
-      if (idx !== -1) this._listeners[event].splice(idx, 1);
-    }
-    return this;
-  }
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-  getHeader(name) {
-    if (typeof name !== "string") {
-      throw createTypeErrorWithCode(
-        `The "name" argument must be of type string. Received ${formatReceivedType(name)}`,
-        "ERR_INVALID_ARG_TYPE"
-      );
-    }
-    return this._headers[name.toLowerCase()];
-  }
-  getHeaders() {
-    const headers = /* @__PURE__ */ Object.create(null);
-    for (const [key, value] of Object.entries(this._headers)) {
-      headers[key] = Array.isArray(value) ? [...value] : value;
-    }
-    return headers;
-  }
-  getHeaderNames() {
-    return Object.keys(this._headers);
-  }
-  getRawHeaderNames() {
-    return Object.keys(this._headers).map((key) => this._rawHeaderNames.get(key) || key);
-  }
-  hasHeader(name) {
-    if (typeof name !== "string") {
-      throw createTypeErrorWithCode(
-        `The "name" argument must be of type string. Received ${formatReceivedType(name)}`,
-        "ERR_INVALID_ARG_TYPE"
-      );
-    }
-    return Object.prototype.hasOwnProperty.call(this._headers, name.toLowerCase());
-  }
-  removeHeader(name) {
-    if (typeof name !== "string") {
-      throw createTypeErrorWithCode(
-        `The "name" argument must be of type string. Received ${formatReceivedType(name)}`,
-        "ERR_INVALID_ARG_TYPE"
-      );
-    }
-    const lowerName = name.toLowerCase();
-    delete this._headers[lowerName];
-    this._rawHeaderNames.delete(lowerName);
-    this._options.headers = { ...this._headers };
-  }
-  _emit(event, ...args) {
-    dispatchCustomEmitterListeners(this, this._listeners[event], args);
-  }
-  _listenerCount(event) {
-    return this._listeners[event]?.length || 0;
-  }
-  _setOutgoingHeaders(headers) {
-    this._headers = {};
-    this._rawHeaderNames = /* @__PURE__ */ new Map();
-    if (!headers) {
-      this._options.headers = {};
-      return;
-    }
-    if (Array.isArray(headers)) {
-      for (let index = 0; index < headers.length; index += 2) {
-        const key = headers[index];
-        const value = headers[index + 1];
-        if (key !== void 0 && value !== void 0) {
-          this._setHeaderValue(String(key), value);
-        }
-      }
-      return;
-    }
-    Object.entries(headers).forEach(([key, value]) => {
-      if (value !== void 0) {
-        this._setHeaderValue(key, value);
-      }
-    });
-  }
-  _setHeaderValue(name, value) {
-    const actualName = validateHeaderName(name).toLowerCase();
-    validateHeaderValue(actualName, value);
-    this._headers[actualName] = Array.isArray(value) ? value.map((entry) => String(entry)) : String(value);
-    if (!this._rawHeaderNames.has(actualName)) {
-      this._rawHeaderNames.set(actualName, name);
-    }
-    this._options.headers = { ...this._headers };
-  }
-  write(data) {
-    const addedBytes = typeof Buffer !== "undefined" ? Buffer.byteLength(data) : data.length;
-    if (this._bodyBytes + addedBytes > MAX_HTTP_BODY_BYTES) {
-      throw new Error("ERR_HTTP_BODY_TOO_LARGE: request body exceeds " + MAX_HTTP_BODY_BYTES + " byte limit");
-    }
-    this._body += data;
-    this._bodyBytes += addedBytes;
-    return true;
-  }
-  end(data) {
-    if (data) this.write(data);
-    this._ended = true;
-    return this;
-  }
-  abort() {
-    if (this.aborted) {
-      return;
-    }
-    this.aborted = true;
-    if (!this._abortEmitted) {
-      this._abortEmitted = true;
-      queueMicrotask(() => {
-        this._emit("abort");
-      });
-    }
-    this._loopbackAbort?.();
-    this.destroy();
-  }
-  destroy(err) {
-    if (this.destroyed) {
-      return this;
-    }
-    this.destroyed = true;
-    this._clearTimeout();
-    this._unbindAbortSignal();
-    this._loopbackAbort?.();
-    this._loopbackAbort = void 0;
-    if (!this.socket && err && err.code === "ABORT_ERR") {
-      this._skipExecute = true;
-    }
-    const responseStarted = this._response != null;
-    const destroyError = err ?? (!this.aborted && !responseStarted ? createConnResetError() : void 0);
-    this._destroyError = destroyError;
-    if (this._response && !this._response.complete && !this._response.aborted) {
-      this._response._abort(destroyError ?? createConnResetError("aborted"));
-    }
-    if (this.socket && !this.socket.destroyed) {
-      if (destroyError && !this._errorEmitted) {
-        this._errorEmitted = true;
-        queueMicrotask(() => {
-          this._emit("error", destroyError);
-        });
-      }
-      this.socket.destroy(destroyError);
-    } else {
-      if (destroyError) {
-        this._errorEmitted = true;
-        queueMicrotask(() => {
-          this._emit("error", destroyError);
-        });
-      }
-      queueMicrotask(() => {
-        this._emitClose();
-      });
-    }
-    return this;
-  }
-  setTimeout(timeout, callback) {
-    if (callback) {
-      this.once("timeout", callback);
-    }
-    this.timeoutCb = () => {
-      this._emit("timeout");
-    };
-    this._clearTimeout();
-    if (timeout === 0) {
-      return this;
-    }
-    if (!Number.isFinite(timeout) || timeout < 0) {
-      throw new TypeError(`The "timeout" argument must be of type number. Received ${String(timeout)}`);
-    }
-    this._options.timeout = timeout;
-    if (this.socket) {
-      this._applyTimeoutToSocket(this.socket);
-    }
-    return this;
-  }
-  setNoDelay() {
-    return this;
-  }
-  setSocketKeepAlive() {
-    return this;
-  }
-  flushHeaders() {
-  }
-  _emitClose() {
-    if (this._closeEmitted) {
-      return;
-    }
-    this._closeEmitted = true;
-    this._emit("close");
-  }
-  _applyTimeoutToSocket(socket) {
-    const timeout = this._options.timeout;
-    if (typeof timeout !== "number" || timeout === 0) {
-      return;
-    }
-    if (!this.timeoutCb) {
-      this.timeoutCb = () => {
-        this._emit("timeout");
-      };
-    }
-    socket.off?.("timeout", this.timeoutCb);
-    socket.removeListener?.("timeout", this.timeoutCb);
-    socket.setTimeout?.(timeout, this.timeoutCb);
-  }
-  _validateTimeoutOption() {
-    const timeout = this._options.timeout;
-    if (timeout === void 0) {
-      return;
-    }
-    if (typeof timeout !== "number") {
-      const received = timeout === null ? "null" : typeof timeout === "string" ? `type string ('${timeout}')` : `type ${typeof timeout} (${JSON.stringify(timeout)})`;
-      const error = new TypeError(`The "timeout" argument must be of type number. Received ${received}`);
-      error.code = "ERR_INVALID_ARG_TYPE";
-      throw error;
-    }
-  }
-  _bindAbortSignal() {
-    const signal = this._options.signal;
-    if (!signal) {
-      return;
-    }
-    this._signalAbortHandler = () => {
-      this.destroy(createAbortError2());
-    };
-    if (signal.aborted) {
-      this.destroyed = true;
-      this._skipExecute = true;
-      queueMicrotask(() => {
-        this._emit("error", createAbortError2());
-        this._emitClose();
-      });
-      return;
-    }
-    if (typeof signal.addEventListener === "function") {
-      signal.addEventListener("abort", this._signalAbortHandler, { once: true });
-      return;
-    }
-    const signalWithOnAbort = signal;
-    signalWithOnAbort.__secureExecPrevOnAbort__ = signalWithOnAbort.onabort ?? null;
-    signalWithOnAbort.onabort = ((event) => {
-      signalWithOnAbort.__secureExecPrevOnAbort__?.call(signal, event);
-      this._signalAbortHandler?.();
-    });
-    this._startAbortSignalPoll(signal);
-  }
-  _unbindAbortSignal() {
-    const signal = this._options.signal;
-    if (!signal || !this._signalAbortHandler) {
-      return;
-    }
-    if (this._signalPollTimer) {
-      clearTimeout(this._signalPollTimer);
-      this._signalPollTimer = null;
-    }
-    if (typeof signal.removeEventListener === "function") {
-      signal.removeEventListener("abort", this._signalAbortHandler);
-      this._signalAbortHandler = void 0;
-      return;
-    }
-    const signalWithOnAbort = signal;
-    if (signalWithOnAbort.onabort === this._signalAbortHandler) {
-      signalWithOnAbort.onabort = signalWithOnAbort.__secureExecPrevOnAbort__ ?? null;
-    } else if (signalWithOnAbort.__secureExecPrevOnAbort__ !== void 0) {
-      signalWithOnAbort.onabort = signalWithOnAbort.__secureExecPrevOnAbort__ ?? null;
-    }
-    delete signalWithOnAbort.__secureExecPrevOnAbort__;
-    this._signalAbortHandler = void 0;
-  }
-  _startAbortSignalPoll(signal) {
-    const poll = () => {
-      if (this.destroyed) {
-        this._signalPollTimer = null;
-        return;
-      }
-      if (signal.aborted) {
-        this._signalPollTimer = null;
-        this._signalAbortHandler?.();
-        return;
-      }
-      this._signalPollTimer = setTimeout(poll, 5);
-    };
-    if (!this._signalPollTimer) {
-      this._signalPollTimer = setTimeout(poll, 5);
-    }
-  }
-  _clearTimeout() {
-    if (this.socket && this.timeoutCb) {
-      this.socket.off?.("timeout", this.timeoutCb);
-      this.socket.removeListener?.("timeout", this.timeoutCb);
-    }
-    if (this.socket?.setTimeout) {
-      this.socket.setTimeout(0);
-    }
-  }
-};
-
-function createUnsupportedHttpSocketWriteError(surface) {
-  return createErrorWithCode(
-    `${surface}.write() is not implemented by the secure-exec http compatibility layer`,
-    "ERR_NOT_IMPLEMENTED"
-  );
-}
-
-var FakeSocket = class {
-  remoteAddress;
-  remotePort;
-  localAddress = "127.0.0.1";
-  localPort = 0;
-  connecting = false;
-  destroyed = false;
-  writable = true;
-  readable = true;
-  timeout = 0;
-  _listeners = {};
-  _closed = false;
-  _closeScheduled = false;
-  _timeoutTimer = null;
-  _freeTimer = null;
-  constructor(options) {
-    this.remoteAddress = options?.host || "127.0.0.1";
-    this.remotePort = options?.port || 80;
-  }
-  setTimeout(ms, cb) {
-    this.timeout = ms;
-    if (cb) {
-      this.on("timeout", cb);
-    }
-    if (this._timeoutTimer) {
-      clearTimeout(this._timeoutTimer);
-      this._timeoutTimer = null;
-    }
-    if (ms > 0) {
-      this._timeoutTimer = setTimeout(() => {
-        this.emit("timeout");
-      }, ms);
-    }
-    return this;
-  }
-  setNoDelay(_noDelay) {
-    return this;
-  }
-  setKeepAlive(_enable, _delay) {
-    return this;
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    return this;
-  }
-  once(event, listener) {
-    const wrapper = (...args) => {
-      this.off(event, wrapper);
-      listener.call(this, ...args);
-    };
-    return this.on(event, wrapper);
-  }
-  off(event, listener) {
-    if (this._listeners[event]) {
-      const idx = this._listeners[event].indexOf(listener);
-      if (idx !== -1) this._listeners[event].splice(idx, 1);
-    }
-    return this;
-  }
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-  removeAllListeners(event) {
-    if (event) {
-      delete this._listeners[event];
-    } else {
-      this._listeners = {};
-    }
-    return this;
-  }
-  emit(event, ...args) {
-    const handlers = this._listeners[event];
-    return dispatchCustomEmitterListeners(this, handlers, args);
-  }
-  listenerCount(event) {
-    return this._listeners[event]?.length || 0;
-  }
-  listeners(event) {
-    return [...this._listeners[event] || []];
-  }
-  write(_data, _encodingOrCallback, _callback) {
-    throw createUnsupportedHttpSocketWriteError("http.ClientRequest.socket");
-  }
-  end() {
-    if (this.destroyed || this._closed) return this;
-    this.writable = false;
-    queueMicrotask(() => {
-      if (this.destroyed || this._closed) return;
-      this.readable = false;
-      this.emit("end");
-      this.destroy();
-    });
-    return this;
-  }
-  destroy() {
-    if (this.destroyed || this._closed) return this;
-    this.destroyed = true;
-    this._closed = true;
-    this.writable = false;
-    this.readable = false;
-    if (this._timeoutTimer) {
-      clearTimeout(this._timeoutTimer);
-      this._timeoutTimer = null;
-    }
-    if (!this._closeScheduled) {
-      this._closeScheduled = true;
-      queueMicrotask(() => {
-        this._closeScheduled = false;
-        this.emit("close");
-      });
-    }
-    return this;
-  }
-};
-
-var DirectTunnelSocket = class {
-  remoteAddress;
-  remotePort;
-  localAddress = "127.0.0.1";
-  localPort = 0;
-  connecting = false;
-  destroyed = false;
-  writable = true;
-  readable = true;
-  readyState = "open";
-  bytesWritten = 0;
-  _listeners = {};
-  _encoding;
-  _peer = null;
-  _readableState = { endEmitted: false, ended: false };
-  _writableState = { finished: false, errorEmitted: false };
-  constructor(options) {
-    this.remoteAddress = options?.host || "127.0.0.1";
-    this.remotePort = options?.port || 80;
-  }
-  _attachPeer(peer) {
-    this._peer = peer;
-  }
-  setTimeout(_ms, _cb) {
-    return this;
-  }
-  setNoDelay(_noDelay) {
-    return this;
-  }
-  setKeepAlive(_enable, _delay) {
-    return this;
-  }
-  setEncoding(encoding) {
-    this._encoding = encoding;
-    return this;
-  }
-  ref() {
-    return this;
-  }
-  unref() {
-    return this;
-  }
-  cork() {
-  }
-  uncork() {
-  }
-  pause() {
-    return this;
-  }
-  resume() {
-    return this;
-  }
-  address() {
-    return { address: this.localAddress, family: "IPv4", port: this.localPort };
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    return this;
-  }
-  once(event, listener) {
-    const wrapper = (...args) => {
-      this.off(event, wrapper);
-      listener.call(this, ...args);
-    };
-    return this.on(event, wrapper);
-  }
-  off(event, listener) {
-    const listeners = this._listeners[event];
-    if (!listeners) return this;
-    const index = listeners.indexOf(listener);
-    if (index !== -1) listeners.splice(index, 1);
-    return this;
-  }
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-  removeAllListeners(event) {
-    if (event) {
-      delete this._listeners[event];
-    } else {
-      this._listeners = {};
-    }
-    return this;
-  }
-  emit(event, ...args) {
-    const listeners = this._listeners[event];
-    return dispatchCustomEmitterListeners(this, listeners, args);
-  }
-  listenerCount(event) {
-    return this._listeners[event]?.length || 0;
-  }
-  write(data, encodingOrCb, cb) {
-    if (this.destroyed || !this._peer) return false;
-    const callback = typeof encodingOrCb === "function" ? encodingOrCb : cb;
-    const buffer = normalizeSocketChunk(data);
-    this.bytesWritten += buffer.length;
-    queueMicrotask(() => {
-      this._peer?._pushData(buffer);
-    });
-    callback?.();
-    return true;
-  }
-  end(data) {
-    if (data !== void 0) {
-      this.write(data);
-    }
-    this.writable = false;
-    this._writableState.finished = true;
-    queueMicrotask(() => {
-      this._peer?._pushEnd();
-    });
-    this.emit("finish");
-    return this;
-  }
-  destroy(err) {
-    if (this.destroyed) return this;
-    this.destroyed = true;
-    this.readable = false;
-    this.writable = false;
-    this._readableState.endEmitted = true;
-    this._readableState.ended = true;
-    this._writableState.finished = true;
-    if (err) {
-      this.emit("error", err);
-    }
-    queueMicrotask(() => {
-      this._peer?._pushEnd();
-    });
-    this.emit("close", false);
-    return this;
-  }
-  _pushData(buffer) {
-    if (!this.readable || this.destroyed) {
-      return;
-    }
-    this.emit("data", this._encoding ? buffer.toString(this._encoding) : buffer);
-  }
-  _pushEnd() {
-    if (this.destroyed) {
-      return;
-    }
-    this.readable = false;
-    this.writable = false;
-    this._readableState.endEmitted = true;
-    this._readableState.ended = true;
-    this._writableState.finished = true;
-    this.emit("end");
-    this.emit("close", false);
-  }
-};
-
-function normalizeSocketChunk(data) {
-  if (typeof Buffer !== "undefined" && Buffer.isBuffer(data)) {
-    return data;
-  }
-  if (data instanceof Uint8Array) {
-    return Buffer.from(data);
-  }
-  return Buffer.from(String(data));
-}
-
-var Agent = class _Agent {
-  static defaultMaxSockets = Infinity;
-  options;
-  maxSockets;
-  maxTotalSockets;
-  maxFreeSockets;
-  keepAlive;
-  keepAliveMsecs;
-  timeout;
-  requests;
-  sockets;
-  freeSockets;
-  totalSocketCount;
-  _listeners = {};
-  constructor(options) {
-    this.options = { ...options };
-    this._validateSocketCountOption("maxSockets", options?.maxSockets);
-    this._validateSocketCountOption("maxFreeSockets", options?.maxFreeSockets);
-    this._validateSocketCountOption("maxTotalSockets", options?.maxTotalSockets);
-    this.keepAlive = options?.keepAlive ?? false;
-    this.keepAliveMsecs = options?.keepAliveMsecs ?? 1e3;
-    this.maxSockets = options?.maxSockets ?? _Agent.defaultMaxSockets;
-    this.maxTotalSockets = options?.maxTotalSockets ?? Infinity;
-    this.maxFreeSockets = options?.maxFreeSockets ?? 256;
-    this.timeout = options?.timeout ?? -1;
-    this.requests = {};
-    this.sockets = {};
-    this.freeSockets = {};
-    this.totalSocketCount = 0;
-  }
-  _validateSocketCountOption(name, value) {
-    if (value === void 0) return;
-    if (typeof value !== "number") {
-      const received = typeof value === "string" ? `type string ('${value}')` : `type ${typeof value} (${JSON.stringify(value)})`;
-      const err = new TypeError(
-        `The "${name}" argument must be of type number. Received ${received}`
-      );
-      err.code = "ERR_INVALID_ARG_TYPE";
-      throw err;
-    }
-    if (Number.isNaN(value) || value <= 0) {
-      const err = new RangeError(
-        `The value of "${name}" is out of range. It must be > 0. Received ${String(value)}`
-      );
-      err.code = "ERR_OUT_OF_RANGE";
-      throw err;
-    }
-  }
-  getName(options) {
-    const host = options?.hostname || options?.host || "localhost";
-    const port = options?.port ?? "";
-    const localAddress = options?.localAddress ?? "";
-    let suffix = "";
-    if (options?.socketPath) {
-      suffix = `:${options.socketPath}`;
-    } else if (options?.family === 4 || options?.family === 6) {
-      suffix = `:${options.family}`;
-    }
-    return `${host}:${port}:${localAddress}${suffix}`;
-  }
-  _getHostKey(options) {
-    return this.getName(options);
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    return this;
-  }
-  once(event, listener) {
-    const wrapper = (...args) => {
-      this.off(event, wrapper);
-      listener(...args);
-    };
-    return this.on(event, wrapper);
-  }
-  off(event, listener) {
-    const listeners = this._listeners[event];
-    if (!listeners) return this;
-    const index = listeners.indexOf(listener);
-    if (index !== -1) listeners.splice(index, 1);
-    return this;
-  }
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-  emit(event, ...args) {
-    const listeners = this._listeners[event];
-    return dispatchCustomEmitterListeners(this, listeners, args);
-  }
-  createConnection(options, cb) {
-    const createConnection = typeof options.createConnection === "function" ? options.createConnection : typeof this.options.createConnection === "function" ? this.options.createConnection : null;
-    if (createConnection) {
-      return createConnection(
-        options,
-        cb ?? (() => void 0)
-      );
-    }
-    return createHttpRequestSocket(options, cb);
-  }
-  addRequest(request, options) {
-    const name = this.getName(options);
-    const freeSocket = this._takeFreeSocket(name);
-    if (freeSocket) {
-      this._activateSocket(name, freeSocket);
-      request._assignSocket(freeSocket, true);
-      return;
-    }
-    if (this._canCreateSocket(name)) {
-      this._createSocketForRequest(name, request, options);
-      return;
-    }
-    if (!this.requests[name]) {
-      this.requests[name] = [];
-    }
-    this.requests[name].push({ request, options });
-  }
-  _releaseSocket(name, socket, options, keepSocketAlive) {
-    const removedActive = this._removeSocket(this.sockets, name, socket);
-    if (keepSocketAlive && !socket.destroyed) {
-      const freeList = this.freeSockets[name] ?? (this.freeSockets[name] = []);
-      if (freeList.length < this.maxFreeSockets) {
-        if (socket._freeTimer) {
-          clearTimeout(socket._freeTimer);
-          socket._freeTimer = null;
-        }
-        freeList.push(socket);
-        if (this.timeout > 0) {
-          socket._freeTimer = setTimeout(() => {
-            socket._freeTimer = null;
-            socket.destroy();
-          }, this.timeout);
-        }
-        socket.emit("free");
-        this.emit("free", socket, options);
-      } else {
-        if (removedActive) {
-          this.totalSocketCount = Math.max(0, this.totalSocketCount - 1);
-        }
-        socket.destroy();
-      }
-    } else if (!socket.destroyed) {
-      if (removedActive) {
-        this.totalSocketCount = Math.max(0, this.totalSocketCount - 1);
-      }
-      socket.destroy();
-    }
-    Promise.resolve().then(() => this._processPendingRequests());
-  }
-  _removeSocketCompletely(name, socket) {
-    if (socket._freeTimer) {
-      clearTimeout(socket._freeTimer);
-      socket._freeTimer = null;
-    }
-    const removed = this._removeSocket(this.sockets, name, socket) || this._removeSocket(this.freeSockets, name, socket);
-    if (removed) {
-      this.totalSocketCount = Math.max(0, this.totalSocketCount - 1);
-      Promise.resolve().then(() => this._processPendingRequests());
-    }
-  }
-  _canCreateSocket(name) {
-    const activeCount = this.sockets[name]?.length ?? 0;
-    if (activeCount >= this.maxSockets) {
-      return false;
-    }
-    if (this.totalSocketCount < this.maxTotalSockets) {
-      return true;
-    }
-    this._evictFreeSocket(name);
-    return this.totalSocketCount < this.maxTotalSockets;
-  }
-  _takeFreeSocket(name) {
-    const freeList = this.freeSockets[name];
-    while (freeList && freeList.length > 0) {
-      const socket = freeList.shift();
-      if (!socket.destroyed) {
-        if (socket._freeTimer) {
-          clearTimeout(socket._freeTimer);
-          socket._freeTimer = null;
-        }
-        if (freeList.length === 0) delete this.freeSockets[name];
-        return socket;
-      }
-      this.totalSocketCount = Math.max(0, this.totalSocketCount - 1);
-    }
-    if (freeList && freeList.length === 0) {
-      delete this.freeSockets[name];
-    }
-    return null;
-  }
-  _activateSocket(name, socket) {
-    const activeList = this.sockets[name] ?? (this.sockets[name] = []);
-    activeList.push(socket);
-  }
-  _createSocketForRequest(name, request, options) {
-    let settled = false;
-    const finish = (err, socket) => {
-      if (settled) return;
-      settled = true;
-      if (err || !socket) {
-        request._handleSocketError(err ?? new Error("Failed to create socket"));
-        this._processPendingRequests();
-        return;
-      }
-      if (request.destroyed) {
-        this.totalSocketCount += 1;
-        this._activateSocket(name, socket);
-        socket.once("close", () => {
-          this._removeSocketCompletely(name, socket);
-        });
-        request._assignSocket(socket, false);
-        return;
-      }
-      this.totalSocketCount += 1;
-      this._activateSocket(name, socket);
-      socket.once("close", () => {
-        this._removeSocketCompletely(name, socket);
-      });
-      request._assignSocket(socket, false);
-    };
-    const connectionOptions = {
-      ...options,
-      keepAlive: this.keepAlive,
-      keepAliveInitialDelay: this.keepAliveMsecs
-    };
-    try {
-      const maybeSocket = this.createConnection(connectionOptions, (err, socket) => {
-        finish(err, socket);
-      });
-      if (maybeSocket) {
-        finish(null, maybeSocket);
-      }
-    } catch (err) {
-      finish(err instanceof Error ? err : new Error(String(err)));
-    }
-  }
-  _processPendingRequests() {
-    for (const name of Object.keys(this.requests)) {
-      const queue = this.requests[name];
-      while (queue && queue.length > 0) {
-        const freeSocket = this._takeFreeSocket(name);
-        if (freeSocket) {
-          const entry2 = queue.shift();
-          if (entry2.request.destroyed) {
-            this._activateSocket(name, freeSocket);
-            this._releaseSocket(name, freeSocket, entry2.options, true);
-            continue;
-          }
-          this._activateSocket(name, freeSocket);
-          entry2.request._assignSocket(freeSocket, true);
-          continue;
-        }
-        if (!this._canCreateSocket(name)) {
-          break;
-        }
-        const entry = queue.shift();
-        if (entry.request.destroyed) {
-          continue;
-        }
-        this._createSocketForRequest(name, entry.request, entry.options);
-      }
-      if (!queue || queue.length === 0) {
-        delete this.requests[name];
-      }
-    }
-  }
-  _removeSocket(sockets, name, socket) {
-    const list = sockets[name];
-    if (!list) return false;
-    const index = list.indexOf(socket);
-    if (index === -1) return false;
-    list.splice(index, 1);
-    if (list.length === 0) delete sockets[name];
-    return true;
-  }
-  _evictFreeSocket(preferredName) {
-    const keys = Object.keys(this.freeSockets);
-    const orderedKeys = keys.includes(preferredName) ? [...keys.filter((key) => key !== preferredName), preferredName] : keys;
-    for (const key of orderedKeys) {
-      const socket = this.freeSockets[key]?.[0];
-      if (!socket) continue;
-      socket.destroy();
-      return;
-    }
-  }
-  destroy() {
-    for (const socket of Object.values(this.sockets).flat()) {
-      socket.destroy();
-    }
-    for (const socket of Object.values(this.freeSockets).flat()) {
-      socket.destroy();
-    }
-    this.requests = {};
-    this.sockets = {};
-    this.freeSockets = {};
-    this.totalSocketCount = 0;
-  }
-};
-
-function debugBridgeNetwork(...args) {
-  if (process.env.SECURE_EXEC_DEBUG_HTTP_BRIDGE === "1") {
-    console.error("[secure-exec bridge network]", ...args);
-  }
-}
-
-var nextServerId = 1;
-
-var serverInstances = /* @__PURE__ */ new Map();
-
-var HTTP_METHODS = [
-  "ACL",
-  "BIND",
-  "CHECKOUT",
-  "CONNECT",
-  "COPY",
-  "DELETE",
-  "GET",
-  "HEAD",
-  "LINK",
-  "LOCK",
-  "M-SEARCH",
-  "MERGE",
-  "MKACTIVITY",
-  "MKCALENDAR",
-  "MKCOL",
-  "MOVE",
-  "NOTIFY",
-  "OPTIONS",
-  "PATCH",
-  "POST",
-  "PROPFIND",
-  "PROPPATCH",
-  "PURGE",
-  "PUT",
-  "QUERY",
-  "REBIND",
-  "REPORT",
-  "SEARCH",
-  "SOURCE",
-  "SUBSCRIBE",
-  "TRACE",
-  "UNBIND",
-  "UNLINK",
-  "UNLOCK",
-  "UNSUBSCRIBE"
-];
-
-var INVALID_REQUEST_PATH_REGEXP = /[^\u0021-\u00ff]/;
-
-var HTTP_TOKEN_EXTRA_CHARS = /* @__PURE__ */ new Set(["!", "#", "$", "%", "&", "'", "*", "+", "-", ".", "^", "_", "`", "|", "~"]);
-
-function createTypeErrorWithCode(message, code) {
-  const error = new TypeError(message);
-  error.code = code;
-  return error;
-}
-
-function createErrorWithCode(message, code) {
-  const error = new Error(message);
-  error.code = code;
-  return error;
-}
-
-function formatReceivedType(value) {
-  if (value === null) {
-    return "null";
-  }
-  if (Array.isArray(value)) {
-    return "an instance of Array";
-  }
-  const valueType = typeof value;
-  if (valueType === "function") {
-    const name = typeof value.name === "string" && value.name.length > 0 ? value.name : "anonymous";
-    return `function ${name}`;
-  }
-  if (valueType === "object") {
-    const ctorName = value && typeof value === "object" && typeof value.constructor?.name === "string" ? value.constructor.name : "Object";
-    return `an instance of ${ctorName}`;
-  }
-  if (valueType === "string") {
-    return `type string ('${String(value)}')`;
-  }
-  if (valueType === "symbol") {
-    return `type symbol (${String(value)})`;
-  }
-  return `type ${valueType} (${String(value)})`;
-}
-
-function createInvalidArgTypeError2(argumentName, expectedType, value) {
-  return createTypeErrorWithCode(
-    `The "${argumentName}" property must be of type ${expectedType}. Received ${formatReceivedType(value)}`,
-    "ERR_INVALID_ARG_TYPE"
-  );
-}
-
-function checkIsHttpToken(value) {
-  if (value.length === 0) {
-    return false;
-  }
-  for (let index = 0; index < value.length; index += 1) {
-    const char = value[index];
-    const code = value.charCodeAt(index);
-    const isAlphaNum = code >= 48 && code <= 57 || code >= 65 && code <= 90 || code >= 97 && code <= 122;
-    if (!isAlphaNum && !HTTP_TOKEN_EXTRA_CHARS.has(char)) {
-      return false;
-    }
-  }
-  return true;
-}
-
-function checkInvalidHeaderChar(value) {
-  for (let index = 0; index < value.length; index += 1) {
-    const code = value.charCodeAt(index);
-    if (code === 9) {
-      continue;
-    }
-    if (code < 32 || code === 127 || code > 255) {
-      return true;
-    }
-  }
-  return false;
-}
-
-function validateHeaderName(name, label = "Header name") {
-  const actualName = String(name);
-  if (!checkIsHttpToken(actualName)) {
-    throw createTypeErrorWithCode(
-      `${label} must be a valid HTTP token [${JSON.stringify(actualName)}]`,
-      "ERR_INVALID_HTTP_TOKEN"
-    );
-  }
-  return actualName;
-}
-
-function validateHeaderValue(name, value) {
-  if (value === void 0) {
-    throw createTypeErrorWithCode(
-      `Invalid value "undefined" for header "${name}"`,
-      "ERR_HTTP_INVALID_HEADER_VALUE"
-    );
-  }
-  if (Array.isArray(value)) {
-    for (const entry of value) {
-      validateHeaderValue(name, entry);
-    }
-    return;
-  }
-  if (checkInvalidHeaderChar(String(value))) {
-    throw createTypeErrorWithCode(
-      `Invalid character in header content [${JSON.stringify(name)}]`,
-      "ERR_INVALID_CHAR"
-    );
-  }
-}
-
-function serializeHeaderValue(value) {
-  if (Array.isArray(value)) {
-    return value.map((entry) => String(entry));
-  }
-  return String(value);
-}
-
-function joinHeaderValue(value) {
-  return Array.isArray(value) ? value.join(", ") : value;
-}
-
-function cloneStoredHeaderValue(value) {
-  return Array.isArray(value) ? [...value] : value;
-}
-
-function appendNormalizedHeader(target, key, value) {
-  if (key === "set-cookie") {
-    const existing2 = target[key];
-    if (existing2 === void 0) {
-      target[key] = [value];
-    } else if (Array.isArray(existing2)) {
-      existing2.push(value);
-    } else {
-      target[key] = [existing2, value];
-    }
-    return;
-  }
-  const existing = target[key];
-  target[key] = existing === void 0 ? value : `${joinHeaderValue(existing)}, ${value}`;
-}
-
-function validateRequestMethod(method) {
-  if (method == null || method === "") {
-    return void 0;
-  }
-  if (typeof method !== "string") {
-    throw createInvalidArgTypeError2("options.method", "string", method);
-  }
-  return validateHeaderName(method, "Method");
-}
-
-function validateRequestPath(path) {
-  const resolvedPath = path == null || path === "" ? "/" : String(path);
-  if (INVALID_REQUEST_PATH_REGEXP.test(resolvedPath)) {
-    throw createTypeErrorWithCode(
-      "Request path contains unescaped characters",
-      "ERR_UNESCAPED_CHARACTERS"
-    );
-  }
-  return resolvedPath;
-}
-
-function buildHostHeader(options) {
-  const host = String(options.hostname || options.host || "localhost");
-  const defaultPort = options.protocol === "https:" || Number(options.port) === 443 ? 443 : 80;
-  const port = options.port != null ? Number(options.port) : defaultPort;
-  return port === defaultPort ? host : `${host}:${port}`;
-}
-
-function isFlatHeaderList(headers) {
-  return Array.isArray(headers) && (headers.length === 0 || typeof headers[0] === "string");
-}
-
-function normalizeRequestHeaders(headers) {
-  if (!headers) return {};
-  if (Array.isArray(headers)) {
-    const normalized2 = {};
-    for (let i = 0; i < headers.length; i += 2) {
-      const key = headers[i];
-      const value = headers[i + 1];
-      if (key !== void 0 && value !== void 0) {
-        const normalizedKey = validateHeaderName(key).toLowerCase();
-        validateHeaderValue(normalizedKey, value);
-        appendNormalizedHeader(normalized2, normalizedKey, String(value));
-      }
-    }
-    return normalized2;
-  }
-  const normalized = {};
-  Object.entries(headers).forEach(([key, value]) => {
-    if (value === void 0) return;
-    const normalizedKey = validateHeaderName(key).toLowerCase();
-    validateHeaderValue(normalizedKey, value);
-    if (Array.isArray(value)) {
-      value.forEach((entry) => appendNormalizedHeader(normalized, normalizedKey, String(entry)));
-      return;
-    }
-    appendNormalizedHeader(normalized, normalizedKey, String(value));
-  });
-  return normalized;
-}
-
-function hasUpgradeRequestHeaders(headers) {
-  const connectionHeader = joinHeaderValue(headers.connection || "").toLowerCase();
-  return connectionHeader.includes("upgrade") && Boolean(headers.upgrade);
-}
-
-function isRawSocketRequest(method, headers) {
-  if (String(method || "GET").toUpperCase() === "CONNECT") {
-    return true;
-  }
-  return hasUpgradeRequestHeaders(headers);
-}
-
-function socketReadyEventNameForProtocol(protocol) {
-  return protocol === "https:" ? "secureConnect" : "connect";
-}
-
-function isSocketReadyForProtocol(socket, protocol) {
-  if (!socket || socket.destroyed === true) {
-    return false;
-  }
-  if (protocol === "https:") {
-    return socket.encrypted === true && socket._tlsUpgrading !== true;
-  }
-  if (socket._connected === true || socket._loopbackServer) {
-    return true;
-  }
-  if (typeof socket._socketId === "number") {
-    return false;
-  }
-  return socket.connecting === false;
-}
-
-function waitForSocketReadyForProtocol(socket, protocol) {
-  if (isSocketReadyForProtocol(socket, protocol)) {
-    return Promise.resolve();
-  }
-  return new Promise((resolve, reject) => {
-    const readyEvent = socketReadyEventNameForProtocol(protocol);
-    const onReady = () => {
-      cleanup();
-      resolve();
-    };
-    const onError = (error) => {
-      cleanup();
-      reject(error instanceof Error ? error : new Error(String(error)));
-    };
-    const onClose = () => {
-      cleanup();
-      reject(createConnResetError("socket closed before request was ready"));
-    };
-    const cleanup = () => {
-      socket.off?.(readyEvent, onReady);
-      socket.removeListener?.(readyEvent, onReady);
-      socket.off?.("error", onError);
-      socket.removeListener?.("error", onError);
-      socket.off?.("close", onClose);
-      socket.removeListener?.("close", onClose);
-    };
-    socket.once(readyEvent, onReady);
-    socket.once("error", onError);
-    socket.once("close", onClose);
-  });
-}
-
-function buildUndiciOrigin(options) {
-  const protocol = options?.protocol === "https:" ? "https:" : "http:";
-  const hostname = String(options?.hostname || options?.host || "localhost");
-  const defaultPort = protocol === "https:" ? 443 : 80;
-  const port = Number(options?.port) || defaultPort;
-  const originUrl = new URL(`${protocol}//${hostname}`);
-  if (port !== defaultPort) {
-    originUrl.port = String(port);
-  }
-  return originUrl.origin;
-}
-
-function getUndiciClientForSocket(socket, options) {
-  if (typeof UndiciClient !== "function" || typeof undiciRequest !== "function") {
-    throw new Error("Undici request transport is not available");
-  }
-  const origin = buildUndiciOrigin(options);
-  if (socket._agentOSUndiciClient && socket._agentOSUndiciOrigin === origin && socket._agentOSUndiciClient.destroyed !== true) {
-    return socket._agentOSUndiciClient;
-  }
-  const client = new UndiciClient(origin, {
-    pipelining: 1,
-    connect(_connectOptions, callback) {
-      callback(null, socket);
-      return socket;
-    }
-  });
-  const clearClient = () => {
-    if (socket._agentOSUndiciClient === client) {
-      socket._agentOSUndiciClient = null;
-      socket._agentOSUndiciOrigin = null;
-    }
-  };
-  socket.once?.("close", clearClient);
-  socket._agentOSUndiciClient = client;
-  socket._agentOSUndiciOrigin = origin;
-  return client;
-}
-
-function createHttpRequestSocket(options, callback) {
-  const protocol = options?.protocol === "https:" ? "https:" : "http:";
-  const host = String(options?.hostname || options?.host || "localhost");
-  const port = Number(options?.port) || (protocol === "https:" ? 443 : 80);
-	  const socket = protocol === "https:" ? tlsConnect({
-	    host,
-	    localAddress: options?.localAddress,
-	    localPort: options?.localPort,
-	    port,
-	    servername: options?.servername || host,
-	    rejectUnauthorized: options?.rejectUnauthorized,
-	    socket: options?.socket
-	  }) : netConnect({
-	    host,
-	    localAddress: options?.localAddress,
-	    localPort: options?.localPort,
-	    port,
-    path: options?.socketPath,
-    keepAlive: options?.keepAlive,
-    keepAliveInitialDelay: options?.keepAliveInitialDelay
-  });
-  if (callback) {
-    const readyEvent = socketReadyEventNameForProtocol(protocol);
-    const onReady = () => {
-      cleanup();
-      callback(null, socket);
-    };
-    const onError = (error) => {
-      cleanup();
-      callback(error instanceof Error ? error : new Error(String(error)));
-    };
-    const cleanup = () => {
-      socket.off?.(readyEvent, onReady);
-      socket.removeListener?.(readyEvent, onReady);
-      socket.off?.("error", onError);
-      socket.removeListener?.("error", onError);
-    };
-    socket.once(readyEvent, onReady);
-    socket.once("error", onError);
-  }
-  return socket;
-}
-
-function flattenHeaderPairs(headerPairs) {
-  const flattened = [];
-  for (const [name, value] of headerPairs) {
-    flattened.push(name, value);
-  }
-  return flattened;
-}
-
-function buildRawHttpHeaderPairs(headers, rawHeaderNames) {
-  const pairs = [];
-  Object.entries(headers).forEach(([key, value]) => {
-    const rawName = rawHeaderNames.get(key) || key;
-    if (Array.isArray(value)) {
-      value.forEach((entry) => {
-        pairs.push([rawName, String(entry)]);
-      });
-      return;
-    }
-    pairs.push([rawName, String(value)]);
-  });
-  return pairs;
-}
-
-function serializeRawHttpRequest(method, path, headerPairs, bodyBuffer) {
-  const lines = [`${method} ${path} HTTP/1.1`];
-  headerPairs.forEach(([name, value]) => {
-    lines.push(`${name}: ${value}`);
-  });
-  lines.push("", "");
-  const headerBuffer = Buffer.from(lines.join("\r\n"), "latin1");
-  if (!bodyBuffer || bodyBuffer.length === 0) {
-    return headerBuffer;
-  }
-  return Buffer.concat([headerBuffer, bodyBuffer]);
-}
-
-async function readUndiciReadableBody(body) {
-  if (!body) {
-    return Buffer.alloc(0);
-  }
-  const chunks = [];
-  for await (const chunk of body) {
-    if (typeof Buffer !== "undefined" && Buffer.isBuffer(chunk)) {
-      chunks.push(chunk);
-    } else if (chunk instanceof Uint8Array) {
-      chunks.push(Buffer.from(chunk));
-    } else {
-      chunks.push(Buffer.from(String(chunk)));
-    }
-  }
-  if (chunks.length === 0) {
-    return Buffer.alloc(0);
-  }
-  return chunks.length === 1 ? chunks[0] : Buffer.concat(chunks);
-}
-
-function parseRawHttpResponse(buffer) {
-  const headerEnd = buffer.indexOf("\r\n\r\n");
-  if (headerEnd === -1) {
-    return null;
-  }
-  const headText = buffer.subarray(0, headerEnd).toString("latin1");
-  const lines = headText.split("\r\n");
-  const statusLine = lines.shift() || "";
-  const statusMatch = /^HTTP\/(\d)\.(\d)\s+(\d{3})(?:\s+(.*))?$/.exec(statusLine);
-  if (!statusMatch) {
-    throw new Error(`Invalid HTTP response status line: ${statusLine}`);
-  }
-  const headers = {};
-  const rawHeaders = [];
-  let previousHeaderName = null;
-  for (const line of lines) {
-    if (!line) {
-      continue;
-    }
-    if ((line.startsWith(" ") || line.startsWith("\t")) && rawHeaders.length >= 2 && previousHeaderName) {
-      const continuation = line.trim();
-      rawHeaders[rawHeaders.length - 1] += ` ${continuation}`;
-      headers[previousHeaderName] = joinHeaderValue(headers[previousHeaderName]) + ` ${continuation}`;
-      continue;
-    }
-    const separatorIndex = line.indexOf(":");
-    if (separatorIndex === -1) {
-      throw new Error(`Invalid HTTP response header line: ${line}`);
-    }
-    const rawName = line.slice(0, separatorIndex);
-    const rawValue = line.slice(separatorIndex + 1).trim();
-    previousHeaderName = rawName.toLowerCase();
-    rawHeaders.push(rawName, rawValue);
-    appendNormalizedHeader(headers, previousHeaderName, rawValue);
-  }
-  return {
-    status: Number(statusMatch[3]),
-    statusText: statusMatch[4] || "",
-    headers,
-    rawHeaders,
-    head: buffer.subarray(headerEnd + 4)
-  };
-}
-
-function waitForRawHttpResponseHead(socket, timeoutMs) {
-  return new Promise((resolve, reject) => {
-    let buffer = Buffer.alloc(0);
-    let settled = false;
-    const finish = (error, value) => {
-      if (settled) {
-        return;
-      }
-      settled = true;
-      cleanup();
-      if (error) {
-        reject(error);
-        return;
-      }
-      resolve(value);
-    };
-    const cleanup = () => {
-      clearTimeout(timer);
-      socket.off?.("data", onData);
-      socket.removeListener?.("data", onData);
-      socket.off?.("error", onError);
-      socket.removeListener?.("error", onError);
-      socket.off?.("end", onEnd);
-      socket.removeListener?.("end", onEnd);
-      socket.off?.("close", onClose);
-      socket.removeListener?.("close", onClose);
-    };
-    const onData = (chunk) => {
-      const payload = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-      buffer = Buffer.concat([buffer, payload]);
-      try {
-        const parsed = parseRawHttpResponse(buffer);
-        if (parsed) {
-          finish(null, parsed);
-        }
-      } catch (error) {
-        finish(error instanceof Error ? error : new Error(String(error)));
-      }
-    };
-    const onError = (error) => {
-      finish(error instanceof Error ? error : new Error(String(error)));
-    };
-    const onEnd = () => {
-      finish(createConnResetError("socket ended before receiving HTTP response head"));
-    };
-    const onClose = () => {
-      finish(createConnResetError("socket closed before receiving HTTP response head"));
-    };
-    const timer = setTimeout(() => {
-      finish(new Error(`Timed out waiting for HTTP response head after ${timeoutMs}ms`));
-    }, timeoutMs);
-    socket.on("data", onData);
-    socket.once("error", onError);
-    socket.once("end", onEnd);
-    socket.once("close", onClose);
-  });
-}
-
-function waitForRawHttpResponse(socket, requestMethod, timeoutMs) {
-  return new Promise((resolve, reject) => {
-    let header = null;
-    let bodyBuffer = Buffer.alloc(0);
-    let expectedContentLength = null;
-    let expectsChunkedBody = false;
-    let expectsCloseDelimitedBody = false;
-    let settled = false;
-    const finish = (error, value) => {
-      if (settled) {
-        return;
-      }
-      settled = true;
-      cleanup();
-      if (error) {
-        reject(error);
-        return;
-      }
-      resolve(value);
-    };
-    const cleanup = () => {
-      clearTimeout(timer);
-      socket.off?.("data", onData);
-      socket.removeListener?.("data", onData);
-      socket.off?.("error", onError);
-      socket.removeListener?.("error", onError);
-      socket.off?.("end", onEnd);
-      socket.removeListener?.("end", onEnd);
-      socket.off?.("close", onClose);
-      socket.removeListener?.("close", onClose);
-    };
-    const maybeFinishWithBody = () => {
-      if (!header) {
-        return false;
-      }
-      if (!hasResponseBody(header.status, requestMethod)) {
-        finish(null, {
-          ...header,
-          body: Buffer.alloc(0)
-        });
-        return true;
-      }
-      if (expectsChunkedBody) {
-        const parsedChunked = parseChunkedBody(bodyBuffer);
-        if (parsedChunked === null) {
-          finish(new Error("Invalid chunked HTTP response body"));
-          return true;
-        }
-        if (!parsedChunked.complete) {
-          return false;
-        }
-        finish(null, {
-          ...header,
-          body: parsedChunked.body
-        });
-        return true;
-      }
-      if (expectedContentLength !== null) {
-        if (bodyBuffer.length < expectedContentLength) {
-          return false;
-        }
-        finish(null, {
-          ...header,
-          body: bodyBuffer.subarray(0, expectedContentLength)
-        });
-        return true;
-      }
-      return false;
-    };
-    const configureBodyHandling = () => {
-      if (!header || !hasResponseBody(header.status, requestMethod)) {
-        return;
-      }
-      const transferEncoding = header.headers["transfer-encoding"];
-      const contentLength = header.headers["content-length"];
-      if (transferEncoding !== void 0) {
-        const tokens = splitTransferEncodingTokens(joinHeaderValue(transferEncoding));
-        const chunkedCount = tokens.filter((entry) => entry === "chunked").length;
-        const hasChunked = chunkedCount > 0;
-        const chunkedIsFinal = hasChunked && tokens[tokens.length - 1] === "chunked";
-        if (!hasChunked || chunkedCount !== 1 || !chunkedIsFinal || contentLength !== void 0) {
-          throw new Error("Unsupported transfer-encoding in HTTP response");
-        }
-        expectsChunkedBody = true;
-        return;
-      }
-      if (contentLength !== void 0) {
-        const parsedContentLength = parseContentLengthHeader(contentLength);
-        if (parsedContentLength === null) {
-          throw new Error("Invalid content-length in HTTP response");
-        }
-        expectedContentLength = parsedContentLength;
-        return;
-      }
-      expectsCloseDelimitedBody = true;
-    };
-    const onData = (chunk) => {
-      const payload = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-      if (!header) {
-        bodyBuffer = Buffer.concat([bodyBuffer, payload]);
-        try {
-          const parsed = parseRawHttpResponse(bodyBuffer);
-          if (!parsed) {
-            return;
-          }
-          header = parsed;
-          bodyBuffer = Buffer.from(parsed.head);
-          configureBodyHandling();
-          maybeFinishWithBody();
-        } catch (error) {
-          finish(error instanceof Error ? error : new Error(String(error)));
-        }
-        return;
-      }
-      bodyBuffer = Buffer.concat([bodyBuffer, payload]);
-      try {
-        maybeFinishWithBody();
-      } catch (error) {
-        finish(error instanceof Error ? error : new Error(String(error)));
-      }
-    };
-    const onError = (error) => {
-      finish(error instanceof Error ? error : new Error(String(error)));
-    };
-    const onEnd = () => {
-      if (!header) {
-        finish(createConnResetError("socket ended before receiving HTTP response head"));
-        return;
-      }
-      if (expectsCloseDelimitedBody) {
-        finish(null, {
-          ...header,
-          body: bodyBuffer
-        });
-        return;
-      }
-      if (maybeFinishWithBody()) {
-        return;
-      }
-      finish(createConnResetError("socket ended before receiving complete HTTP response body"));
-    };
-    const onClose = () => {
-      if (!header) {
-        finish(createConnResetError("socket closed before receiving HTTP response head"));
-        return;
-      }
-      if (expectsCloseDelimitedBody) {
-        finish(null, {
-          ...header,
-          body: bodyBuffer
-        });
-        return;
-      }
-      if (maybeFinishWithBody()) {
-        return;
-      }
-      finish(createConnResetError("socket closed before receiving complete HTTP response body"));
-    };
-    const timer = setTimeout(() => {
-      finish(new Error(`Timed out waiting for HTTP response after ${timeoutMs}ms`));
-    }, timeoutMs);
-    socket.on("data", onData);
-    socket.once("error", onError);
-    socket.once("end", onEnd);
-    socket.once("close", onClose);
-  });
-}
-
-function hasResponseBody(statusCode, method) {
-  if (method === "HEAD") {
-    return false;
-  }
-  if (statusCode >= 100 && statusCode < 200 || statusCode === 204 || statusCode === 304) {
-    return false;
-  }
-  return true;
-}
-
-function splitTransferEncodingTokens(value) {
-  return value.split(",").map((entry) => entry.trim().toLowerCase()).filter((entry) => entry.length > 0);
-}
-
-function parseContentLengthHeader(value) {
-  if (value === void 0) {
-    return 0;
-  }
-  const entries = Array.isArray(value) ? value : [value];
-  let parsed = null;
-  for (const entry of entries) {
-    if (!/^\d+$/.test(entry)) {
-      return null;
-    }
-    const nextValue = Number(entry);
-    if (!Number.isSafeInteger(nextValue) || nextValue < 0) {
-      return null;
-    }
-    if (parsed !== null && parsed !== nextValue) {
-      return null;
-    }
-    parsed = nextValue;
-  }
-  return parsed ?? 0;
-}
-
-function parseChunkedBody(bodyBuffer, maxBodyBytes = MAX_HTTP_BODY_BYTES) {
-  let offset = 0;
-  let totalBodyBytes = 0;
-  const chunks = [];
-  while (true) {
-    const lineEnd = bodyBuffer.indexOf("\r\n", offset);
-    if (lineEnd === -1) {
-      return { complete: false };
-    }
-    const sizeLine = bodyBuffer.subarray(offset, lineEnd).toString("latin1");
-    if (sizeLine.length === 0 || /[\r\n]/.test(sizeLine)) {
-      return null;
-    }
-    const [sizePart, extensionPart] = sizeLine.split(";", 2);
-    if (!/^[0-9A-Fa-f]+$/.test(sizePart)) {
-      return null;
-    }
-    if (extensionPart !== void 0 && /[\r\n]/.test(extensionPart)) {
-      return null;
-    }
-    const chunkSize = Number.parseInt(sizePart, 16);
-    if (!Number.isSafeInteger(chunkSize) || chunkSize < 0) {
-      return null;
-    }
-    if (totalBodyBytes + chunkSize > maxBodyBytes) {
-      return null;
-    }
-    const chunkStart = lineEnd + 2;
-    if (chunkSize === 0) {
-      const trailersStart = chunkStart;
-      if (trailersStart === bodyBuffer.length) {
-        return { complete: false };
-      }
-      if (bodyBuffer[trailersStart] === 13 && bodyBuffer[trailersStart + 1] === 10) {
-        return {
-          complete: true,
-          bytesConsumed: trailersStart + 2,
-          body: chunks.length > 0 ? Buffer.concat(chunks) : Buffer.alloc(0)
-        };
-      }
-      const trailersEnd = bodyBuffer.indexOf("\r\n\r\n", trailersStart);
-      if (trailersEnd === -1) {
-        return { complete: false };
-      }
-      const trailerBlock = bodyBuffer.subarray(trailersStart, trailersEnd).toString("latin1");
-      if (trailerBlock.length > 0) {
-        for (const trailerLine of trailerBlock.split("\r\n")) {
-          if (trailerLine.length === 0) {
-            continue;
-          }
-          if (trailerLine.startsWith(" ") || trailerLine.startsWith("	")) {
-            return null;
-          }
-          if (trailerLine.indexOf(":") === -1) {
-            return null;
-          }
-        }
-      }
-      return {
-        complete: true,
-        bytesConsumed: trailersEnd + 4,
-        body: chunks.length > 0 ? Buffer.concat(chunks) : Buffer.alloc(0)
-      };
-    }
-    const chunkEnd = chunkStart + chunkSize;
-    const chunkTerminatorEnd = chunkEnd + 2;
-    if (chunkTerminatorEnd > bodyBuffer.length) {
-      return { complete: false };
-    }
-    if (bodyBuffer[chunkEnd] !== 13 || bodyBuffer[chunkEnd + 1] !== 10) {
-      return null;
-    }
-    totalBodyBytes += chunkSize;
-    chunks.push(bodyBuffer.subarray(chunkStart, chunkEnd));
-    offset = chunkTerminatorEnd;
-  }
-}
-
-function parseLoopbackRequestBuffer(buffer, server) {
-  let requestStart = 0;
-  while (requestStart + 1 < buffer.length && buffer[requestStart] === 13 && buffer[requestStart + 1] === 10) {
-    requestStart += 2;
-  }
-  const headerEnd = buffer.indexOf("\r\n\r\n", requestStart);
-  if (headerEnd === -1) {
-    if (buffer.length - requestStart > MAX_HTTP_REQUEST_HEADER_BYTES) {
-      return {
-        kind: "bad-request",
-        closeConnection: true
-      };
-    }
-    return { kind: "incomplete" };
-  }
-  if (headerEnd - requestStart > MAX_HTTP_REQUEST_HEADER_BYTES) {
-    return {
-      kind: "bad-request",
-      closeConnection: true
-    };
-  }
-  const headerBlock = buffer.subarray(requestStart, headerEnd).toString("latin1");
-  const [requestLine, ...headerLines] = headerBlock.split("\r\n");
-  if (headerLines.length > MAX_HTTP_REQUEST_HEADERS) {
-    return {
-      kind: "bad-request",
-      closeConnection: true
-    };
-  }
-  const requestMatch = /^([A-Z]+)\s+(\S+)\s+HTTP\/(1)\.(0|1)$/.exec(requestLine);
-  if (!requestMatch) {
-    return {
-      kind: "bad-request",
-      closeConnection: true
-    };
-  }
-  const headers = {};
-  const rawHeaders = [];
-  let previousHeaderName = null;
-  try {
-    for (const headerLine of headerLines) {
-      if (headerLine.length === 0) {
-        continue;
-      }
-      if (headerLine.startsWith(" ") || headerLine.startsWith("	")) {
-        return {
-          kind: "bad-request",
-          closeConnection: true
-        };
-      }
-      const separatorIndex = headerLine.indexOf(":");
-      if (separatorIndex === -1) {
-        return {
-          kind: "bad-request",
-          closeConnection: true
-        };
-      }
-      const rawName = headerLine.slice(0, separatorIndex).trim();
-      const rawValue = headerLine.slice(separatorIndex + 1).trim();
-      const normalizedName = validateHeaderName(rawName).toLowerCase();
-      validateHeaderValue(normalizedName, rawValue);
-      appendNormalizedHeader(headers, normalizedName, rawValue);
-      rawHeaders.push(rawName, rawValue);
-      previousHeaderName = normalizedName;
-    }
-  } catch {
-    return {
-      kind: "bad-request",
-      closeConnection: true
-    };
-  }
-  const requestMethod = requestMatch[1];
-  const requestUrl = requestMatch[2];
-  const httpMinorVersion = Number(requestMatch[4]);
-  const requestCloseHeader = joinHeaderValue(headers.connection || "").toLowerCase();
-  let closeConnection = httpMinorVersion === 0 ? !requestCloseHeader.includes("keep-alive") : requestCloseHeader.includes("close");
-  if (hasUpgradeRequestHeaders(headers) && server.listenerCount("upgrade") > 0) {
-    return {
-      kind: "request",
-      bytesConsumed: buffer.length,
-      closeConnection: false,
-      request: {
-        method: requestMethod,
-        url: requestUrl,
-        headers,
-        rawHeaders,
-        bodyBase64: headerEnd + 4 < buffer.length ? buffer.subarray(headerEnd + 4).toString("base64") : void 0
-      },
-      upgradeHead: headerEnd + 4 < buffer.length ? buffer.subarray(headerEnd + 4) : Buffer.alloc(0)
-    };
-  }
-  const transferEncoding = headers["transfer-encoding"];
-  const contentLength = headers["content-length"];
-  let requestBody = Buffer.alloc(0);
-  let bytesConsumed = headerEnd + 4;
-  if (transferEncoding !== void 0) {
-    const tokens = splitTransferEncodingTokens(joinHeaderValue(transferEncoding));
-    const chunkedCount = tokens.filter((entry) => entry === "chunked").length;
-    const hasChunked = chunkedCount > 0;
-    const chunkedIsFinal = hasChunked && tokens[tokens.length - 1] === "chunked";
-    if (!hasChunked || chunkedCount !== 1 || !chunkedIsFinal || contentLength !== void 0) {
-      return {
-        kind: "bad-request",
-        closeConnection: true
-      };
-    }
-    const parsedChunked = parseChunkedBody(buffer.subarray(headerEnd + 4));
-    if (parsedChunked === null) {
-      return {
-        kind: "bad-request",
-        closeConnection: true
-      };
-    }
-    if (!parsedChunked.complete) {
-      return { kind: "incomplete" };
-    }
-    requestBody = parsedChunked.body;
-    bytesConsumed = headerEnd + 4 + parsedChunked.bytesConsumed;
-  } else if (contentLength !== void 0) {
-    const parsedContentLength = parseContentLengthHeader(contentLength);
-    if (parsedContentLength === null || parsedContentLength > MAX_HTTP_BODY_BYTES) {
-      return {
-        kind: "bad-request",
-        closeConnection: true
-      };
-    }
-    const bodyEnd = headerEnd + 4 + parsedContentLength;
-    if (bodyEnd > buffer.length) {
-      return { kind: "incomplete" };
-    }
-    requestBody = buffer.subarray(headerEnd + 4, bodyEnd);
-    bytesConsumed = bodyEnd;
-  }
-  return {
-    kind: "request",
-    bytesConsumed,
-    closeConnection,
-    request: {
-      method: requestMethod,
-      url: requestUrl,
-      headers,
-      rawHeaders,
-      bodyBase64: requestBody.length > 0 ? requestBody.toString("base64") : void 0
-    }
-  };
-}
-
-function serializeRawHeaderPairs(rawHeaders, fallbackHeaders) {
-  const headers = {};
-  const rawNameMap = /* @__PURE__ */ new Map();
-  const order = [];
-  if (Array.isArray(rawHeaders) && rawHeaders.length > 0) {
-    for (let index = 0; index < rawHeaders.length; index += 2) {
-      const rawName = rawHeaders[index];
-      const value = rawHeaders[index + 1];
-      if (rawName === void 0 || value === void 0) {
-        continue;
-      }
-      const normalizedName = rawName.toLowerCase();
-      appendNormalizedHeader(headers, normalizedName, value);
-      if (!rawNameMap.has(normalizedName)) {
-        rawNameMap.set(normalizedName, rawName);
-        order.push(normalizedName);
-      }
-    }
-    return { headers, rawNameMap, order };
-  }
-  if (Array.isArray(fallbackHeaders)) {
-    for (const [name, value] of fallbackHeaders) {
-      const normalizedName = name.toLowerCase();
-      appendNormalizedHeader(headers, normalizedName, value);
-      if (!rawNameMap.has(normalizedName)) {
-        rawNameMap.set(normalizedName, name);
-        order.push(normalizedName);
-      }
-    }
-  }
-  return { headers, rawNameMap, order };
-}
-
-function finalizeRawHeaderPairs(headers, rawNameMap, order) {
-  const entries = [];
-  const seen = /* @__PURE__ */ new Set();
-  for (const key of order) {
-    const value = headers[key];
-    if (value === void 0) {
-      continue;
-    }
-    const rawName = rawNameMap.get(key) || key;
-    const serialized = Array.isArray(value) ? key === "set-cookie" ? value : [value.join(", ")] : [value];
-    for (const entry of serialized) {
-      entries.push([rawName, entry]);
-    }
-    seen.add(key);
-  }
-  for (const [key, value] of Object.entries(headers)) {
-    if (seen.has(key)) {
-      continue;
-    }
-    const rawName = rawNameMap.get(key) || key;
-    const serialized = Array.isArray(value) ? key === "set-cookie" ? value : [value.join(", ")] : [value];
-    for (const entry of serialized) {
-      entries.push([rawName, entry]);
-    }
-  }
-  return entries;
-}
-
-function createBadRequestResponseBuffer() {
-  return Buffer.from("HTTP/1.1 400 Bad Request\r\nConnection: close\r\n\r\n", "latin1");
-}
-
-function serializeLoopbackResponse(response, request, requestWantsClose) {
-  const statusCode = response.status || 200;
-  const statusText = HTTP_STATUS_TEXT[statusCode] || "OK";
-  const {
-    headers,
-    rawNameMap,
-    order
-  } = serializeRawHeaderPairs(response.rawHeaders, response.headers);
-  const trailerInfo = serializeRawHeaderPairs(response.rawTrailers, response.trailers);
-  const bodyBuffer = response.body == null ? Buffer.alloc(0) : response.bodyEncoding === "base64" ? Buffer.from(response.body, "base64") : Buffer.from(response.body, "utf8");
-  const bodyAllowed = hasResponseBody(statusCode, request.method);
-  const transferEncodingTokens = headers["transfer-encoding"] ? splitTransferEncodingTokens(joinHeaderValue(headers["transfer-encoding"])) : [];
-  let isChunked = transferEncodingTokens.includes("chunked");
-  const hasExplicitContentLength = headers["content-length"] !== void 0;
-  let closeConnection = requestWantsClose || response.connectionEnded === true || response.connectionReset === true;
-  if (!bodyAllowed) {
-    if (isChunked) {
-      closeConnection = true;
-    }
-    delete headers["content-length"];
-  } else if (!isChunked && !hasExplicitContentLength) {
-    if (response.streamed === true) {
-      headers["transfer-encoding"] = "chunked";
-      rawNameMap.set("transfer-encoding", "Transfer-Encoding");
-      order.push("transfer-encoding");
-      isChunked = true;
-    } else {
-      headers["content-length"] = String(bodyBuffer.length);
-      rawNameMap.set("content-length", "Content-Length");
-      order.push("content-length");
-    }
-  }
-  if (closeConnection) {
-    headers.connection = "close";
-    if (!rawNameMap.has("connection")) {
-      rawNameMap.set("connection", "Connection");
-      order.push("connection");
-    }
-  } else if (headers.connection === void 0 && request.headers.connection !== void 0) {
-    headers.connection = "keep-alive";
-    rawNameMap.set("connection", "Connection");
-    order.push("connection");
-  }
-  const serializedChunks = [];
-  for (const informational of response.informational ?? []) {
-    const infoHeaders = finalizeRawHeaderPairs(
-      serializeRawHeaderPairs(informational.rawHeaders, informational.headers).headers,
-      serializeRawHeaderPairs(informational.rawHeaders, informational.headers).rawNameMap,
-      serializeRawHeaderPairs(informational.rawHeaders, informational.headers).order
-    );
-    const headerLines2 = infoHeaders.map(([name, value]) => `${name}: ${value}\r
-`).join("");
-    serializedChunks.push(
-      Buffer.from(
-        `HTTP/1.1 ${informational.status} ${informational.statusText || HTTP_STATUS_TEXT[informational.status] || ""}\r
-${headerLines2}\r
-`,
-        "latin1"
-      )
-    );
-  }
-  const finalHeaders = finalizeRawHeaderPairs(headers, rawNameMap, order);
-  const headerLines = finalHeaders.map(([name, value]) => `${name}: ${value}\r
-`).join("");
-  serializedChunks.push(
-    Buffer.from(`HTTP/1.1 ${statusCode} ${statusText}\r
-${headerLines}\r
-`, "latin1")
-  );
-  if (bodyAllowed) {
-    if (isChunked) {
-      if (bodyBuffer.length > 0) {
-        serializedChunks.push(Buffer.from(bodyBuffer.length.toString(16) + "\r\n", "latin1"));
-        serializedChunks.push(bodyBuffer);
-        serializedChunks.push(Buffer.from("\r\n", "latin1"));
-      }
-      serializedChunks.push(Buffer.from("0\r\n", "latin1"));
-      if (Object.keys(trailerInfo.headers).length > 0) {
-        const trailerPairs = finalizeRawHeaderPairs(
-          trailerInfo.headers,
-          trailerInfo.rawNameMap,
-          trailerInfo.order
-        );
-        for (const [name, value] of trailerPairs) {
-          serializedChunks.push(Buffer.from(`${name}: ${value}\r
-`, "latin1"));
-        }
-      }
-      serializedChunks.push(Buffer.from("\r\n", "latin1"));
-    } else if (bodyBuffer.length > 0) {
-      serializedChunks.push(bodyBuffer);
-    }
-  }
-  return {
-    payload: serializedChunks.length === 1 ? serializedChunks[0] : Buffer.concat(serializedChunks),
-    closeConnection
-  };
-}
-
-var HTTP_STATUS_TEXT = {
-  100: "Continue",
-  101: "Switching Protocols",
-  102: "Processing",
-  103: "Early Hints",
-  200: "OK",
-  201: "Created",
-  204: "No Content",
-  301: "Moved Permanently",
-  302: "Found",
-  304: "Not Modified",
-  400: "Bad Request",
-  401: "Unauthorized",
-  403: "Forbidden",
-  404: "Not Found",
-  500: "Internal Server Error"
-};
-
-function isLoopbackRequestHost(hostname) {
-  const bare = hostname.startsWith("[") && hostname.endsWith("]") ? hostname.slice(1, -1) : hostname;
-  return bare === "localhost" || bare === "127.0.0.1" || bare === "::1";
-}
-
-var ServerIncomingMessage = class {
-  headers;
-  rawHeaders;
-  method;
-  url;
-  socket;
-  connection;
-  rawBody;
-  destroyed = false;
-  errored;
-  readable = true;
-  httpVersion = "1.1";
-  httpVersionMajor = 1;
-  httpVersionMinor = 1;
-  complete = true;
-  aborted = false;
-  // Readable stream state stub for frameworks that inspect internal state
-  _readableState = { flowing: null, length: 0, ended: false, objectMode: false };
-  _listeners = {};
-  constructor(request) {
-    this.headers = request.headers || {};
-    this.rawHeaders = request.rawHeaders || [];
-    if (!Array.isArray(this.rawHeaders) || this.rawHeaders.length % 2 !== 0) {
-      this.rawHeaders = [];
-    }
-    this.method = request.method || "GET";
-    this.url = request.url || "/";
-    const fakeSocket = {
-      encrypted: false,
-      remoteAddress: "127.0.0.1",
-      remotePort: 0,
-      writable: true,
-      on() {
-        return fakeSocket;
-      },
-      once() {
-        return fakeSocket;
-      },
-      removeListener() {
-        return fakeSocket;
-      },
-      destroy() {
-      },
-      end() {
-      }
-    };
-    this.socket = fakeSocket;
-    this.connection = fakeSocket;
-    const rawHost = this.headers.host;
-    if (typeof rawHost === "string" && rawHost.includes(",")) {
-      this.headers.host = rawHost.split(",")[0].trim();
-    }
-    if (!this.headers.host) {
-      this.headers.host = "127.0.0.1";
-    }
-    if (this.rawHeaders.length === 0) {
-      Object.entries(this.headers).forEach(([key, value]) => {
-        if (Array.isArray(value)) {
-          value.forEach((entry) => {
-            this.rawHeaders.push(key, entry);
-          });
-          return;
-        }
-        this.rawHeaders.push(key, value);
-      });
-    }
-    if (request.bodyBase64 && typeof Buffer !== "undefined") {
-      this.rawBody = Buffer.from(request.bodyBase64, "base64");
-    }
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    return this;
-  }
-  once(event, listener) {
-    const wrapped = (...args) => {
-      this.off(event, wrapped);
-      listener.call(this, ...args);
-    };
-    return this.on(event, wrapped);
-  }
-  off(event, listener) {
-    const listeners = this._listeners[event];
-    if (!listeners) return this;
-    const index = listeners.indexOf(listener);
-    if (index !== -1) listeners.splice(index, 1);
-    return this;
-  }
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-  emit(event, ...args) {
-    const listeners = this._listeners[event];
-    return dispatchCustomEmitterListeners(this, listeners, args);
-  }
-  // Readable stream stubs for framework compatibility
-  unpipe() {
-    return this;
-  }
-  pause() {
-    return this;
-  }
-  resume() {
-    return this;
-  }
-  read() {
-    return null;
-  }
-  pipe(dest) {
-    return dest;
-  }
-  isPaused() {
-    return false;
-  }
-  setEncoding() {
-    return this;
-  }
-  destroy(err) {
-    this.destroyed = true;
-    this.errored = err;
-    if (err) {
-      this.emit("error", err);
-    }
-    this.emit("close");
-    return this;
-  }
-  _abort() {
-    if (this.aborted) {
-      return;
-    }
-    this.aborted = true;
-    const error = createConnResetError("aborted");
-    this.emit("aborted");
-    this.emit("error", error);
-    this.emit("close");
-  }
-};
-
-var ServerResponseBridge = class {
-  statusCode = 200;
-  statusMessage = "OK";
-  headersSent = false;
-  writable = true;
-  writableFinished = false;
-  outputSize = 0;
-  _headers = /* @__PURE__ */ new Map();
-  _trailers = /* @__PURE__ */ new Map();
-  _chunks = [];
-  _chunksBytes = 0;
-  _streamed = false;
-  _listeners = {};
-  _closedPromise;
-  _resolveClosed = null;
-  _connectionEnded = false;
-  _connectionReset = false;
-  _rawHeaderNames = /* @__PURE__ */ new Map();
-  _rawTrailerNames = /* @__PURE__ */ new Map();
-  _informational = [];
-  _pendingRawInfoBuffer = "";
-  _streamSocket = null;
-  _streamRequest = null;
-  _streamedDirectly = false;
-  _streamCloseConnection = false;
-  constructor() {
-    this._closedPromise = new Promise((resolve) => {
-      this._resolveClosed = resolve;
-    });
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    return this;
-  }
-  once(event, listener) {
-    const wrapped = (...args) => {
-      this.off(event, wrapped);
-      listener.call(this, ...args);
-    };
-    return this.on(event, wrapped);
-  }
-  off(event, listener) {
-    const listeners = this._listeners[event];
-    if (!listeners) return this;
-    const index = listeners.indexOf(listener);
-    if (index !== -1) listeners.splice(index, 1);
-    return this;
-  }
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-  emit(event, ...args) {
-    const listeners = this._listeners[event];
-    if (!listeners || listeners.length === 0) return false;
-    listeners.slice().forEach((fn) => fn.call(this, ...args));
-    return true;
-  }
-  _emit(event, ...args) {
-    this.emit(event, ...args);
-  }
-  writeHead(statusCode, headers) {
-    if (statusCode >= 100 && statusCode < 200 && statusCode !== 101) {
-      const informationalHeaders = /* @__PURE__ */ new Map();
-      const informationalRawHeaderNames = /* @__PURE__ */ new Map();
-      if (headers) {
-        if (isFlatHeaderList(headers)) {
-          for (let index = 0; index < headers.length; index += 2) {
-            const key = headers[index];
-            const value = headers[index + 1];
-            if (key === void 0 || value === void 0) {
-              continue;
-            }
-            const actualName = validateHeaderName(key).toLowerCase();
-            validateHeaderValue(actualName, value);
-            informationalHeaders.set(actualName, String(value));
-            if (!informationalRawHeaderNames.has(actualName)) {
-              informationalRawHeaderNames.set(actualName, key);
-            }
-          }
-        } else if (Array.isArray(headers)) {
-          headers.forEach(([key, value]) => {
-            const actualName = validateHeaderName(key).toLowerCase();
-            validateHeaderValue(actualName, value);
-            informationalHeaders.set(actualName, String(value));
-            if (!informationalRawHeaderNames.has(actualName)) {
-              informationalRawHeaderNames.set(actualName, key);
-            }
-          });
-        } else {
-          Object.entries(headers).forEach(([key, value]) => {
-            const actualName = validateHeaderName(key).toLowerCase();
-            validateHeaderValue(actualName, value);
-            informationalHeaders.set(actualName, String(value));
-            if (!informationalRawHeaderNames.has(actualName)) {
-              informationalRawHeaderNames.set(actualName, key);
-            }
-          });
-        }
-      }
-      const normalizedHeaders = Array.from(informationalHeaders.entries()).flatMap(([key, value]) => {
-        const serialized = serializeHeaderValue(value);
-        return Array.isArray(serialized) ? serialized.map((entry) => [key, entry]) : [[key, serialized]];
-      });
-      const rawHeaders = Array.from(informationalHeaders.entries()).flatMap(([key, value]) => {
-        const rawName = informationalRawHeaderNames.get(key) || key;
-        const serialized = serializeHeaderValue(value);
-        return Array.isArray(serialized) ? serialized.flatMap((entry) => [rawName, entry]) : [rawName, serialized];
-      });
-      this._informational.push({
-        status: statusCode,
-        statusText: HTTP_STATUS_TEXT[statusCode],
-        headers: normalizedHeaders,
-        rawHeaders
-      });
-      return this;
-    }
-    this.statusCode = statusCode;
-    if (headers) {
-      if (isFlatHeaderList(headers)) {
-        for (let index = 0; index < headers.length; index += 2) {
-          const key = headers[index];
-          const value = headers[index + 1];
-          if (key !== void 0 && value !== void 0) {
-            this.setHeader(key, value);
-          }
-        }
-      } else if (Array.isArray(headers)) {
-        headers.forEach(([key, value]) => this.setHeader(key, value));
-      } else {
-        Object.entries(headers).forEach(
-          ([key, value]) => this.setHeader(key, value)
-        );
-      }
-    }
-    this.headersSent = true;
-    this.outputSize += 64;
-    return this;
-  }
-  setHeader(name, value) {
-    if (this.headersSent) {
-      throw createErrorWithCode(
-        "Cannot set headers after they are sent to the client",
-        "ERR_HTTP_HEADERS_SENT"
-      );
-    }
-    const lower = validateHeaderName(name).toLowerCase();
-    validateHeaderValue(lower, value);
-    const storedValue = Array.isArray(value) ? Array.from(value) : value;
-    this._headers.set(lower, storedValue);
-    if (!this._rawHeaderNames.has(lower)) {
-      this._rawHeaderNames.set(lower, name);
-    }
-    return this;
-  }
-  setHeaders(headers) {
-    if (this.headersSent) {
-      throw createErrorWithCode(
-        "Cannot set headers after they are sent to the client",
-        "ERR_HTTP_HEADERS_SENT"
-      );
-    }
-    if (!(headers instanceof Headers) && !(headers instanceof Map)) {
-      throw createTypeErrorWithCode(
-        `The "headers" argument must be an instance of Headers or Map. Received ${formatReceivedType(headers)}`,
-        "ERR_INVALID_ARG_TYPE"
-      );
-    }
-    if (headers instanceof Headers) {
-      const pending = /* @__PURE__ */ Object.create(null);
-      headers.forEach((value, key) => {
-        appendNormalizedHeader(pending, key.toLowerCase(), value);
-      });
-      Object.entries(pending).forEach(([key, value]) => {
-        this.setHeader(key, value);
-      });
-      return this;
-    }
-    headers.forEach((value, key) => {
-      this.setHeader(key, value);
-    });
-    return this;
-  }
-  getHeader(name) {
-    if (typeof name !== "string") {
-      throw createTypeErrorWithCode(
-        `The "name" argument must be of type string. Received ${formatReceivedType(name)}`,
-        "ERR_INVALID_ARG_TYPE"
-      );
-    }
-    const value = this._headers.get(name.toLowerCase());
-    return value === void 0 ? void 0 : cloneStoredHeaderValue(value);
-  }
-  hasHeader(name) {
-    if (typeof name !== "string") {
-      throw createTypeErrorWithCode(
-        `The "name" argument must be of type string. Received ${formatReceivedType(name)}`,
-        "ERR_INVALID_ARG_TYPE"
-      );
-    }
-    return this._headers.has(name.toLowerCase());
-  }
-  removeHeader(name) {
-    if (typeof name !== "string") {
-      throw createTypeErrorWithCode(
-        `The "name" argument must be of type string. Received ${formatReceivedType(name)}`,
-        "ERR_INVALID_ARG_TYPE"
-      );
-    }
-    const lower = name.toLowerCase();
-    this._headers.delete(lower);
-    this._rawHeaderNames.delete(lower);
-  }
-  _appendChunk(chunk, encoding, streamed) {
-    if (chunk == null) return true;
-    const buf = typeof chunk === "string" ? Buffer.from(chunk, typeof encoding === "string" ? encoding : void 0) : chunk;
-    if (this._chunksBytes + buf.byteLength > MAX_HTTP_BODY_BYTES) {
-      throw new Error("ERR_HTTP_BODY_TOO_LARGE: response body exceeds " + MAX_HTTP_BODY_BYTES + " byte limit");
-    }
-    this._chunks.push(buf);
-    this._chunksBytes += buf.byteLength;
-    this._streamed ||= streamed;
-    this.headersSent = true;
-    this.outputSize += buf.byteLength;
-    return true;
-  }
-  write(chunk, encodingOrCallback, callback) {
-    this._appendChunk(chunk, typeof encodingOrCallback === "string" ? encodingOrCallback : void 0, true);
-    const writeCallback = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-    if (typeof writeCallback === "function") {
-      queueMicrotask(writeCallback);
-    }
-    return true;
-  }
-  end(chunkOrCallback, encodingOrCallback, callback) {
-    let chunk;
-    let endCallback;
-    if (typeof chunkOrCallback === "function") {
-      endCallback = chunkOrCallback;
-    } else {
-      chunk = chunkOrCallback;
-      endCallback = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-    }
-    // Streaming fast path for socket-backed servers: a single `res.end(body)`
-    // with no prior `res.write()` flushes headers then streams the body to the
-    // connection socket in bounded slices. This avoids materializing the whole
-    // body (plus its serialize/transmit copies) at once — a multi-MB response
-    // otherwise trips the guest isolate heap-limit OOM guard before the host
-    // can apply its own response-size limit. Per-slice `socket.destroyed`
-    // checks also make the host's mid-stream rejection close graceful instead
-    // of crashing the guest.
-    if (
-      this._streamSocket &&
-      this._chunks.length === 0 &&
-      !this.writableFinished &&
-      !this._streamedDirectly
-    ) {
-      const encoding =
-        typeof encodingOrCallback === "string" ? encodingOrCallback : void 0;
-      this._streamEndBody(chunk, encoding);
-      if (typeof endCallback === "function") {
-        queueMicrotask(endCallback);
-      }
-      return this;
-    }
-    if (chunk != null) {
-      if (typeof chunk === "string" && typeof encodingOrCallback === "string") {
-        this._appendChunk(chunk, encodingOrCallback, false);
-      } else {
-        this._appendChunk(chunk, void 0, false);
-      }
-    }
-    this._finalize();
-    if (typeof endCallback === "function") {
-      queueMicrotask(endCallback);
-    }
-    return this;
-  }
-  _streamEndBody(body, encoding) {
-    const isString = typeof body === "string";
-    const SLICE_BYTES = 256 * 1024;
-    // Compute the body byte length in bounded slices. `Buffer.byteLength` on a
-    // whole multi-MB string allocates enough that, with the isolate already
-    // near its heap cap, it trips the OOM guard before a single byte is sent.
-    let byteLength = 0;
-    if (body != null) {
-      if (isString) {
-        for (let offset = 0; offset < body.length; offset += SLICE_BYTES) {
-          byteLength += Buffer.byteLength(
-            body.slice(offset, offset + SLICE_BYTES),
-            encoding,
-          );
-        }
-      } else {
-        byteLength = body.length;
-      }
-    }
-    if (!this._headers.has("content-length") && !this._headers.has("transfer-encoding")) {
-      this._headers.set("content-length", String(byteLength));
-      this._rawHeaderNames.set("content-length", "Content-Length");
-    }
-    this.headersSent = true;
-    // Serialize headers only (no buffered chunks => empty body in the payload),
-    // then stream the real body separately in bounded slices.
-    const headerResponse = this.serialize();
-    const built = serializeLoopbackResponse(headerResponse, this._streamRequest, true);
-    this._streamCloseConnection = built.closeConnection;
-    this._streamedDirectly = true;
-    this.outputSize += byteLength;
-    if (!this._streamSocket.destroyed && built.payload.length > 0) {
-      this._streamSocket.write(built.payload);
-    }
-    if (body != null && byteLength > 0) {
-      if (isString) {
-        for (let offset = 0; offset < body.length; offset += SLICE_BYTES) {
-          if (this._streamSocket.destroyed) break;
-          this._streamSocket.write(
-            Buffer.from(body.slice(offset, offset + SLICE_BYTES), encoding),
-          );
-        }
-      } else {
-        for (let offset = 0; offset < body.length; offset += SLICE_BYTES) {
-          if (this._streamSocket.destroyed) break;
-          this._streamSocket.write(body.subarray(offset, offset + SLICE_BYTES));
-        }
-      }
-    }
-    this._finalize();
-  }
-  getHeaderNames() {
-    return Array.from(this._headers.keys());
-  }
-  getRawHeaderNames() {
-    return Array.from(this._headers.keys()).map((key) => this._rawHeaderNames.get(key) || key);
-  }
-  getHeaders() {
-    const result = /* @__PURE__ */ Object.create(null);
-    for (const [key, value] of this._headers) {
-      result[key] = cloneStoredHeaderValue(value);
-    }
-    return result;
-  }
-  // Writable stream state stub for frameworks that inspect internal state
-  _writableState = { length: 0, ended: false, finished: false, objectMode: false, corked: 0 };
-  // Fake socket for frameworks that access res.socket/res.connection
-  socket = {
-    writable: true,
-    writableCorked: 0,
-    writableHighWaterMark: 16 * 1024,
-    on: () => this.socket,
-    once: () => this.socket,
-    removeListener: () => this.socket,
-    destroy: () => {
-      this._connectionReset = true;
-      this._finalize();
-    },
-    end: () => {
-      this._connectionEnded = true;
-    },
-    cork: () => {
-      this._writableState.corked += 1;
-      this.socket.writableCorked = this._writableState.corked;
-    },
-    uncork: () => {
-      this._writableState.corked = Math.max(0, this._writableState.corked - 1);
-      this.socket.writableCorked = this._writableState.corked;
-    },
-    write: (chunk, encodingOrCallback, callback) => {
-      return this.write(chunk, encodingOrCallback, callback);
-    }
-  };
-  connection = this.socket;
-  // Node.js http.ServerResponse socket/stream compatibility stubs
-  assignSocket() {
-  }
-  detachSocket() {
-  }
-  writeContinue() {
-    this.writeHead(100);
-  }
-  writeProcessing() {
-    this.writeHead(102);
-  }
-  addTrailers(headers) {
-    if (Array.isArray(headers)) {
-      for (let index = 0; index < headers.length; index += 2) {
-        const key = headers[index];
-        const value = headers[index + 1];
-        if (key === void 0 || value === void 0) {
-          continue;
-        }
-        const actualName = validateHeaderName(key).toLowerCase();
-        validateHeaderValue(actualName, value);
-        this._trailers.set(actualName, String(value));
-        if (!this._rawTrailerNames.has(actualName)) {
-          this._rawTrailerNames.set(actualName, key);
-        }
-      }
-      return;
-    }
-    Object.entries(headers).forEach(([key, value]) => {
-      const actualName = validateHeaderName(key).toLowerCase();
-      validateHeaderValue(actualName, value);
-      this._trailers.set(actualName, String(value));
-      if (!this._rawTrailerNames.has(actualName)) {
-        this._rawTrailerNames.set(actualName, key);
-      }
-    });
-  }
-  cork() {
-    this.socket.cork();
-  }
-  uncork() {
-    this.socket.uncork();
-  }
-  setTimeout(_msecs) {
-    return this;
-  }
-  get writableCorked() {
-    return Number(this.socket.writableCorked || 0);
-  }
-  flushHeaders() {
-    this.headersSent = true;
-  }
-  destroy(err) {
-    this._connectionReset = true;
-    if (err) {
-      this._emit("error", err);
-    }
-    this._finalize();
-  }
-  async waitForClose() {
-    await this._closedPromise;
-  }
-  serialize() {
-    const bodyBuffer = this._chunks.length > 0 ? Buffer.concat(this._chunks) : Buffer.alloc(0);
-    const serializedHeaders = Array.from(this._headers.entries()).flatMap(([key, value]) => {
-      const serialized = serializeHeaderValue(value);
-      if (Array.isArray(serialized)) {
-        if (key === "set-cookie") {
-          return serialized.map((entry) => [key, entry]);
-        }
-        return [[key, serialized.join(", ")]];
-      }
-      return [[key, serialized]];
-    });
-    const rawHeaders = Array.from(this._headers.entries()).flatMap(([key, value]) => {
-      const rawName = this._rawHeaderNames.get(key) || key;
-      const serialized = serializeHeaderValue(value);
-      if (Array.isArray(serialized)) {
-        if (key === "set-cookie") {
-          return serialized.flatMap((entry) => [rawName, entry]);
-        }
-        return [rawName, serialized.join(", ")];
-      }
-      return [rawName, serialized];
-    });
-    const serializedTrailers = Array.from(this._trailers.entries()).flatMap(([key, value]) => {
-      const serialized = serializeHeaderValue(value);
-      return Array.isArray(serialized) ? serialized.map((entry) => [key, entry]) : [[key, serialized]];
-    });
-    const rawTrailers = Array.from(this._trailers.entries()).flatMap(([key, value]) => {
-      const rawName = this._rawTrailerNames.get(key) || key;
-      const serialized = serializeHeaderValue(value);
-      return Array.isArray(serialized) ? serialized.flatMap((entry) => [rawName, entry]) : [rawName, serialized];
-    });
-    return {
-      status: this.statusCode,
-      headers: serializedHeaders,
-      rawHeaders,
-      informational: this._informational.length > 0 ? [...this._informational] : void 0,
-      body: bodyBuffer.toString("base64"),
-      bodyEncoding: "base64",
-      trailers: serializedTrailers.length > 0 ? serializedTrailers : void 0,
-      rawTrailers: rawTrailers.length > 0 ? rawTrailers : void 0,
-      connectionEnded: this._connectionEnded,
-      connectionReset: this._connectionReset,
-      streamed: this._streamed
-    };
-  }
-  _writeRaw(chunk, callback) {
-    this._pendingRawInfoBuffer += String(chunk);
-    this._flushPendingRawInformational();
-    if (typeof callback === "function") {
-      queueMicrotask(callback);
-    }
-    return true;
-  }
-  _finalize() {
-    if (this.writableFinished) {
-      return;
-    }
-    this.writableFinished = true;
-    this.writable = false;
-    this._writableState.ended = true;
-    this._writableState.finished = true;
-    this._emit("finish");
-    this._emit("close");
-    this._resolveClosed?.();
-    this._resolveClosed = null;
-  }
-  _flushPendingRawInformational() {
-    let separatorIndex = this._pendingRawInfoBuffer.indexOf("\r\n\r\n");
-    while (separatorIndex !== -1) {
-      const rawFrame = this._pendingRawInfoBuffer.slice(0, separatorIndex);
-      this._pendingRawInfoBuffer = this._pendingRawInfoBuffer.slice(separatorIndex + 4);
-      const [statusLine, ...headerLines] = rawFrame.split("\r\n");
-      const statusMatch = /^HTTP\/1\.[01]\s+(\d{3})(?:\s+(.*))?$/.exec(statusLine);
-      if (!statusMatch) {
-        separatorIndex = this._pendingRawInfoBuffer.indexOf("\r\n\r\n");
-        continue;
-      }
-      const status = Number(statusMatch[1]);
-      if (status >= 100 && status < 200 && status !== 101) {
-        const headers = [];
-        const rawHeaders = [];
-        for (const headerLine of headerLines) {
-          const separator = headerLine.indexOf(":");
-          if (separator === -1) {
-            continue;
-          }
-          const key = headerLine.slice(0, separator).trim();
-          const value = headerLine.slice(separator + 1).trim();
-          headers.push([key.toLowerCase(), value]);
-          rawHeaders.push(key, value);
-        }
-        this._informational.push({
-          status,
-          statusText: statusMatch[2] || HTTP_STATUS_TEXT[status] || void 0,
-          headers,
-          rawHeaders
-        });
-      }
-      separatorIndex = this._pendingRawInfoBuffer.indexOf("\r\n\r\n");
-    }
-  }
-};
-
-var Server = class {
-  listening = false;
-  _listeners = {};
-  _serverId;
-  _netServer = null;
-  _listenPromise = null;
-  _address = null;
-  _handleId = null;
-  _hostCloseWaitStarted = false;
-  _activeRequestDispatches = 0;
-  _closePending = false;
-  _closeRunning = false;
-  _closeCallbacks = [];
-  _tlsOptions = null;
-  /** @internal Request listener stored on the instance (replaces serverRequestListeners Map). */
-  _requestListener;
-  constructor(requestListener, tlsOptions = null) {
-    this._serverId = nextServerId++;
-    this._requestListener = requestListener ?? (() => void 0);
-    this._tlsOptions = tlsOptions;
-    serverInstances.set(this._serverId, this);
-  }
-  /** @internal Bridge-visible server ID for loopback self-dispatch. */
-  get _bridgeServerId() {
-    return this._serverId;
-  }
-  /** @internal Emit an event — used by upgrade dispatch to fire 'upgrade' events. */
-  _emit(event, ...args) {
-    const listeners = this._listeners[event];
-    if (!listeners || listeners.length === 0) return;
-    listeners.slice().forEach((listener) => listener.call(this, ...args));
-  }
-  _finishStart(resultJson) {
-    const result = JSON.parse(resultJson);
-    this._address = result.address;
-    this.listening = true;
-    this._handleId = `http-server:${this._serverId}`;
-    debugBridgeNetwork("server listening", this._serverId, this._address);
-    if (typeof _registerHandle === "function") {
-      _registerHandle(this._handleId, "http server");
-    }
-    this._startHostCloseWait();
-  }
-  _completeClose() {
-    this.listening = false;
-    this._address = null;
-    serverInstances.delete(this._serverId);
-    if (this._handleId && typeof _unregisterHandle === "function") {
-      _unregisterHandle(this._handleId);
-    }
-    this._handleId = null;
-  }
-  _beginRequestDispatch() {
-    this._activeRequestDispatches += 1;
-  }
-  _endRequestDispatch() {
-    this._activeRequestDispatches = Math.max(0, this._activeRequestDispatches - 1);
-    if (this._closePending && this._activeRequestDispatches === 0) {
-      this._closePending = false;
-      queueMicrotask(() => {
-        this._startClose();
-      });
-    }
-  }
-  _startHostCloseWait() {
-    this._hostCloseWaitStarted = true;
-  }
-  async _start(port, hostname) {
-    if (typeof NetServer === "undefined") {
-      throw new Error(
-        "http.createServer requires kernel-backed network bridge support"
-      );
-    }
-    debugBridgeNetwork("server listen start", this._serverId, port, hostname);
-    const netServer = new NetServer({ allowHalfOpen: true });
-    this._netServer = netServer;
-    netServer.on("connection", (socket) => {
-      if (this._tlsOptions) {
-        const tlsSocket = new TLSSocket(socket, {
-          ...this._tlsOptions,
-          isServer: true
-        });
-        tlsSocket.server = this;
-        tlsSocket.once("secure", () => {
-          this._emit("secureConnection", tlsSocket);
-          this._emit("connection", tlsSocket);
-          attachHttpServerSocket(this, tlsSocket);
-        });
-        tlsSocket.on("error", (error) => {
-          this._emit("tlsClientError", error, tlsSocket);
-        });
-        return;
-      }
-      this._emit("connection", socket);
-      attachHttpServerSocket(this, socket);
-    });
-    netServer.on("error", (error) => {
-      this._emit("error", error);
-    });
-    await new Promise((resolve, reject) => {
-      let settled = false;
-      const cleanup = () => {
-        netServer.removeListener?.("listening", onListening);
-        netServer.removeListener?.("error", onError);
-      };
-      const onListening = () => {
-        if (settled) return;
-        settled = true;
-        cleanup();
-        resolve();
-      };
-      const onError = (error) => {
-        if (settled) return;
-        settled = true;
-        cleanup();
-        reject(error instanceof Error ? error : new Error(String(error)));
-      };
-      netServer.once("listening", onListening);
-      netServer.once("error", onError);
-      netServer.listen(port ?? 0, hostname);
-    });
-    this._address = netServer.address();
-    this.listening = true;
-    this._startHostCloseWait();
-    debugBridgeNetwork("server listening", this._serverId, this._address);
-  }
-  listen(portOrCb, hostOrCb, cb) {
-    const port = typeof portOrCb === "number" ? portOrCb : void 0;
-    const hostname = typeof hostOrCb === "string" ? hostOrCb : void 0;
-    const callback = typeof cb === "function" ? cb : typeof hostOrCb === "function" ? hostOrCb : typeof portOrCb === "function" ? portOrCb : void 0;
-    if (!this._listenPromise) {
-      this._listenPromise = this._start(port, hostname).then(() => {
-        this._emit("listening");
-        callback?.call(this);
-      }).catch((error) => {
-        this._emit("error", error);
-      });
-    }
-    return this;
-  }
-  close(cb) {
-    debugBridgeNetwork("server close requested", this._serverId, this.listening);
-    if (cb) {
-      this._closeCallbacks.push(cb);
-    }
-    if (this._activeRequestDispatches > 0) {
-      this._closePending = true;
-      return this;
-    }
-    queueMicrotask(() => {
-      this._startClose();
-    });
-    return this;
-  }
-  _startClose() {
-    if (this._closeRunning) {
-      return;
-    }
-    this._closeRunning = true;
-    const run = async () => {
-      try {
-        if (this._listenPromise) {
-          await this._listenPromise;
-        }
-        const netServer = this._netServer;
-        if (this.listening && netServer) {
-          debugBridgeNetwork("server close net server", this._serverId);
-          await new Promise((resolve, reject) => {
-            netServer.close((error) => {
-              if (error) {
-                reject(error);
-              } else {
-                resolve();
-              }
-            });
-          });
-        }
-        this._netServer = null;
-        this._completeClose();
-        debugBridgeNetwork("server close complete", this._serverId);
-        const callbacks = this._closeCallbacks.splice(0);
-        callbacks.forEach((callback) => callback());
-        this._emit("close");
-      } catch (err) {
-        const error = err instanceof Error ? err : new Error(String(err));
-        debugBridgeNetwork("server close error", this._serverId, error.message);
-        const callbacks = this._closeCallbacks.splice(0);
-        callbacks.forEach((callback) => callback(error));
-        this._emit("error", error);
-      } finally {
-        this._closeRunning = false;
-      }
-    };
-    void run();
-  }
-  address() {
-    return this._address;
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    return this;
-  }
-  once(event, listener) {
-    const wrapped = (...args) => {
-      this.off(event, wrapped);
-      listener.call(this, ...args);
-    };
-    return this.on(event, wrapped);
-  }
-  off(event, listener) {
-    const listeners = this._listeners[event];
-    if (!listeners) return this;
-    const index = listeners.indexOf(listener);
-    if (index !== -1) listeners.splice(index, 1);
-    return this;
-  }
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-  removeAllListeners(event) {
-    if (event) {
-      delete this._listeners[event];
-    } else {
-      this._listeners = {};
-    }
-    return this;
-  }
-  listenerCount(event) {
-    return this._listeners[event]?.length || 0;
-  }
-  // Node.js Server timeout properties (no-op in sandbox)
-  keepAliveTimeout = 5e3;
-  requestTimeout = 3e5;
-  headersTimeout = 6e4;
-  timeout = 0;
-  maxRequestsPerSocket = 0;
-  setTimeout(_msecs, _callback) {
-    if (typeof _msecs === "number") this.timeout = _msecs;
-    return this;
-  }
-  ref() {
-    return this;
-  }
-  unref() {
-    return this;
-  }
-};
-
-function ServerCallable(requestListener) {
-  return new Server(requestListener);
-}
-
-ServerCallable.prototype = Server.prototype;
-
-async function dispatchServerRequest(serverId, requestJson) {
-  const server = serverInstances.get(serverId);
-  if (!server) {
-    throw new Error(`Unknown HTTP server: ${serverId}`);
-  }
-  const listener = server._requestListener;
-  server._beginRequestDispatch();
-  const request = JSON.parse(requestJson);
-  const incoming = new ServerIncomingMessage(request);
-  const outgoing = new ServerResponseBridge();
-  incoming.socket = outgoing.socket;
-  incoming.connection = outgoing.socket;
-  const pendingImmediates = [];
-  const pendingTimers = [];
-  const trackedTimers = /* @__PURE__ */ new Map();
-  let consumedTimerCount = 0;
-  let consumedImmediateCount = 0;
-  try {
-    try {
-      const originalSetImmediate = globalThis.setImmediate;
-      const originalSetTimeout = globalThis.setTimeout;
-      const originalClearTimeout = globalThis.clearTimeout;
-      if (typeof originalSetImmediate === "function") {
-        globalThis.setImmediate = ((callback, ...args) => {
-          const pending = new Promise((resolve) => {
-            queueMicrotask(() => {
-              try {
-                callback(...args);
-              } finally {
-                resolve();
-              }
-            });
-          });
-          pendingImmediates.push(pending);
-          return 0;
-        });
-      }
-      if (typeof originalSetTimeout === "function") {
-        globalThis.setTimeout = ((callback, delay, ...args) => {
-          if (typeof callback !== "function") {
-            return originalSetTimeout(callback, delay, ...args);
-          }
-          const normalizedDelay = typeof delay === "number" && Number.isFinite(delay) ? Math.max(0, delay) : 0;
-          if (normalizedDelay > 1e3) {
-            return originalSetTimeout(callback, normalizedDelay, ...args);
-          }
-          let resolvePending;
-          const pending = new Promise((resolve) => {
-            resolvePending = resolve;
-          });
-          let handle;
-          handle = originalSetTimeout(() => {
-            trackedTimers.delete(handle);
-            try {
-              callback(...args);
-            } finally {
-              resolvePending();
-            }
-          }, normalizedDelay);
-          trackedTimers.set(handle, resolvePending);
-          pendingTimers.push(pending);
-          return handle;
-        });
-      }
-      if (typeof originalClearTimeout === "function") {
-        globalThis.clearTimeout = ((handle) => {
-          if (handle != null) {
-            const resolvePending = trackedTimers.get(handle);
-            if (resolvePending) {
-              trackedTimers.delete(handle);
-              resolvePending();
-            }
-          }
-          return originalClearTimeout(handle);
-        });
-      }
-      try {
-        const listenerResult = listener(incoming, outgoing);
-        if (incoming.rawBody && incoming.rawBody.length > 0) {
-          incoming.emit("data", incoming.rawBody);
-        }
-        incoming.emit("end");
-        await Promise.resolve(listenerResult);
-        while (consumedTimerCount < pendingTimers.length || consumedImmediateCount < pendingImmediates.length) {
-          const pending = [
-            ...pendingTimers.slice(consumedTimerCount),
-            ...pendingImmediates.slice(consumedImmediateCount)
-          ];
-          consumedTimerCount = pendingTimers.length;
-          consumedImmediateCount = pendingImmediates.length;
-          await Promise.allSettled(pending);
-        }
-      } finally {
-        if (typeof originalSetImmediate === "function") {
-          globalThis.setImmediate = originalSetImmediate;
-        }
-        if (typeof originalSetTimeout === "function") {
-          globalThis.setTimeout = originalSetTimeout;
-        }
-        if (typeof originalClearTimeout === "function") {
-          globalThis.clearTimeout = originalClearTimeout;
-        }
-      }
-    } catch (err) {
-      outgoing.statusCode = 500;
-      try {
-        outgoing.end(err instanceof Error ? `Error: ${err.message}` : "Error");
-      } catch {
-        if (!outgoing.writableFinished) outgoing.end();
-      }
-    }
-    if (!outgoing.writableFinished) {
-      outgoing.end();
-    }
-    await outgoing.waitForClose();
-    await Promise.allSettled([...pendingTimers, ...pendingImmediates]);
-    return JSON.stringify(outgoing.serialize());
-  } finally {
-    server._endRequestDispatch();
-  }
-}
-
-async function dispatchHttp2CompatibilityRequest(serverId, requestId) {
-  const pending = pendingHttp2CompatRequests.get(requestId);
-  if (!pending || pending.serverId !== serverId || typeof _networkHttp2ServerRespondRaw === "undefined") {
-    return;
-  }
-  pendingHttp2CompatRequests.delete(requestId);
-  const server = http2Servers.get(serverId);
-  if (!server) {
-    _networkHttp2ServerRespondRaw.applySync(void 0, [
-      serverId,
-      requestId,
-      JSON.stringify({
-        status: 500,
-        headers: [["content-type", "text/plain"]],
-        body: "Unknown HTTP/2 server",
-        bodyEncoding: "utf8"
-      })
-    ]);
-    return;
-  }
-  const request = JSON.parse(pending.requestJson);
-  const incoming = new ServerIncomingMessage(request);
-  const outgoing = new ServerResponseBridge();
-  incoming.socket = outgoing.socket;
-  incoming.connection = outgoing.socket;
-  try {
-    server.emit("request", incoming, outgoing);
-    if (incoming.rawBody && incoming.rawBody.length > 0) {
-      incoming.emit("data", incoming.rawBody);
-    }
-    incoming.emit("end");
-    if (!outgoing.writableFinished) {
-      outgoing.end();
-    }
-    await outgoing.waitForClose();
-    _networkHttp2ServerRespondRaw.applySync(void 0, [
-      serverId,
-      requestId,
-      JSON.stringify(outgoing.serialize())
-    ]);
-  } catch (error) {
-    const message = error instanceof Error ? error.message : String(error);
-    _networkHttp2ServerRespondRaw.applySync(void 0, [
-      serverId,
-      requestId,
-      JSON.stringify({
-        status: 500,
-        headers: [["content-type", "text/plain"]],
-        body: `Error: ${message}`,
-        bodyEncoding: "utf8"
-      })
-    ]);
-  }
-}
-
-async function dispatchLoopbackServerRequest(serverOrId, requestInput) {
-  const server = typeof serverOrId === "number" ? serverInstances.get(serverOrId) : serverOrId;
-  if (!server) {
-    throw new Error(
-      `Unknown HTTP server: ${typeof serverOrId === "number" ? serverOrId : "<detached>"}`
-    );
-  }
-  const request = typeof requestInput === "string" ? JSON.parse(requestInput) : requestInput;
-  const incoming = new ServerIncomingMessage(request);
-  const outgoing = new ServerResponseBridge();
-  incoming.socket = outgoing.socket;
-  incoming.connection = outgoing.socket;
-  const pendingImmediates = [];
-  const pendingTimers = [];
-  const trackedTimers = /* @__PURE__ */ new Map();
-  let consumedTimerCount = 0;
-  let consumedImmediateCount = 0;
-  server._beginRequestDispatch();
-  try {
-    try {
-      const originalSetImmediate = globalThis.setImmediate;
-      const originalSetTimeout = globalThis.setTimeout;
-      const originalClearTimeout = globalThis.clearTimeout;
-      if (typeof originalSetImmediate === "function") {
-        globalThis.setImmediate = ((callback, ...args) => {
-          const pending = new Promise((resolve) => {
-            queueMicrotask(() => {
-              try {
-                callback(...args);
-              } finally {
-                resolve();
-              }
-            });
-          });
-          pendingImmediates.push(pending);
-          return 0;
-        });
-      }
-      if (typeof originalSetTimeout === "function") {
-        globalThis.setTimeout = ((callback, delay, ...args) => {
-          if (typeof callback !== "function") {
-            return originalSetTimeout(callback, delay, ...args);
-          }
-          const normalizedDelay = typeof delay === "number" && Number.isFinite(delay) ? Math.max(0, delay) : 0;
-          if (normalizedDelay > 1e3) {
-            return originalSetTimeout(callback, normalizedDelay, ...args);
-          }
-          let resolvePending;
-          const pending = new Promise((resolve) => {
-            resolvePending = resolve;
-          });
-          let handle;
-          handle = originalSetTimeout(() => {
-            trackedTimers.delete(handle);
-            try {
-              callback(...args);
-            } finally {
-              resolvePending();
-            }
-          }, normalizedDelay);
-          trackedTimers.set(handle, resolvePending);
-          pendingTimers.push(pending);
-          return handle;
-        });
-      }
-      if (typeof originalClearTimeout === "function") {
-        globalThis.clearTimeout = ((handle) => {
-          if (handle != null) {
-            const resolvePending = trackedTimers.get(handle);
-            if (resolvePending) {
-              trackedTimers.delete(handle);
-              resolvePending();
-            }
-          }
-          return originalClearTimeout(handle);
-        });
-      }
-      try {
-        const listenerResult = server._requestListener(incoming, outgoing);
-        if (incoming.rawBody && incoming.rawBody.length > 0) {
-          incoming.emit("data", incoming.rawBody);
-        }
-        incoming.emit("end");
-        await Promise.resolve(listenerResult);
-        while (consumedTimerCount < pendingTimers.length || consumedImmediateCount < pendingImmediates.length) {
-          const pending = [
-            ...pendingTimers.slice(consumedTimerCount),
-            ...pendingImmediates.slice(consumedImmediateCount)
-          ];
-          consumedTimerCount = pendingTimers.length;
-          consumedImmediateCount = pendingImmediates.length;
-          await Promise.allSettled(pending);
-        }
-      } finally {
-        if (typeof originalSetImmediate === "function") {
-          globalThis.setImmediate = originalSetImmediate;
-        }
-        if (typeof originalSetTimeout === "function") {
-          globalThis.setTimeout = originalSetTimeout;
-        }
-        if (typeof originalClearTimeout === "function") {
-          globalThis.clearTimeout = originalClearTimeout;
-        }
-      }
-    } catch (err) {
-      outgoing.statusCode = 500;
-      try {
-        outgoing.end(err instanceof Error ? `Error: ${err.message}` : "Error");
-      } catch {
-        if (!outgoing.writableFinished) outgoing.end();
-      }
-    }
-    if (!outgoing.writableFinished) {
-      outgoing.end();
-    }
-    await outgoing.waitForClose();
-    await Promise.allSettled([...pendingTimers, ...pendingImmediates]);
-    let aborted = false;
-    return {
-      responseJson: JSON.stringify(outgoing.serialize()),
-      abortRequest: () => {
-        if (aborted) {
-          return;
-        }
-        aborted = true;
-        incoming._abort();
-      }
-    };
-  } finally {
-    server._endRequestDispatch();
-  }
-}
-
-async function dispatchSocketBackedServerRequest(server, requestInput, streamSocket) {
-  const request = typeof requestInput === "string" ? JSON.parse(requestInput) : requestInput;
-  const incoming = new ServerIncomingMessage(request);
-  const outgoing = new ServerResponseBridge();
-  incoming.socket = outgoing.socket;
-  incoming.connection = outgoing.socket;
-  // Enable the streaming fast path so a single large `res.end(body)` is written
-  // to the connection socket in slices instead of buffered + serialized whole.
-  if (streamSocket) {
-    outgoing._streamSocket = streamSocket;
-    outgoing._streamRequest = request;
-  }
-  server._beginRequestDispatch();
-  try {
-    try {
-      const listenerResult = server._requestListener(incoming, outgoing);
-      if (incoming.rawBody && incoming.rawBody.length > 0) {
-        incoming.emit("data", incoming.rawBody);
-      }
-      incoming.emit("end");
-      await Promise.resolve(listenerResult);
-    } catch (err) {
-      outgoing.statusCode = 500;
-      try {
-        outgoing.end(err instanceof Error ? `Error: ${err.message}` : "Error");
-      } catch {
-        if (!outgoing.writableFinished) outgoing.end();
-      }
-    }
-    if (!outgoing.writableFinished) {
-      outgoing.end();
-    }
-    await outgoing.waitForClose();
-    let aborted = false;
-    const abortRequest = () => {
-      if (aborted) {
-        return;
-      }
-      aborted = true;
-      incoming._abort();
-    };
-    if (outgoing._streamedDirectly) {
-      // Response already written straight to the socket; nothing left to serialize.
-      return {
-        streamedDirectly: true,
-        closeConnection: outgoing._streamCloseConnection,
-        abortRequest
-      };
-    }
-    return {
-      responseJson: JSON.stringify(outgoing.serialize()),
-      abortRequest
-    };
-  } finally {
-    server._endRequestDispatch();
-  }
-}
-
-function attachHttpServerSocket(server, socket) {
-  let buffer = Buffer.alloc(0);
-  let dispatchRunning = false;
-  let dispatchPending = false;
-  let ended = false;
-  let detached = false;
-  const cleanup = () => {
-    if (detached) {
-      return;
-    }
-    detached = true;
-    socket.off?.("data", onData);
-    socket.removeListener?.("data", onData);
-    socket.off?.("end", onEnd);
-    socket.removeListener?.("end", onEnd);
-    socket.off?.("close", onClose);
-    socket.removeListener?.("close", onClose);
-    socket.off?.("error", onError);
-    socket.removeListener?.("error", onError);
-  };
-  const scheduleDispatch = () => {
-    if (dispatchRunning) {
-      dispatchPending = true;
-      return;
-    }
-    dispatchRunning = true;
-    void processRequests().finally(() => {
-      dispatchRunning = false;
-      if (dispatchPending && !detached) {
-        dispatchPending = false;
-        scheduleDispatch();
-      } else {
-        dispatchPending = false;
-      }
-    });
-  };
-  const finishSocket = () => {
-    cleanup();
-    if (!socket.destroyed && !socket._writableEnded) {
-      socket.end();
-    }
-  };
-  const onData = (chunk) => {
-    const payload = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-    buffer = buffer.length === 0 ? payload : Buffer.concat([buffer, payload]);
-    scheduleDispatch();
-  };
-  const onEnd = () => {
-    ended = true;
-    if (buffer.length === 0) {
-      cleanup();
-      return;
-    }
-    scheduleDispatch();
-  };
-  const onClose = () => {
-    cleanup();
-  };
-  const onError = () => {
-    cleanup();
-  };
-  async function processRequests() {
-    let closeAfterDrain = false;
-    while (!detached && !socket.destroyed) {
-      const parsed = parseLoopbackRequestBuffer(buffer, server);
-      if (parsed.kind === "incomplete") {
-        if (ended && buffer.length > 0) {
-          socket.write(createBadRequestResponseBuffer());
-          finishSocket();
-        }
-        return;
-      }
-      if (parsed.kind === "bad-request") {
-        socket.write(createBadRequestResponseBuffer());
-        finishSocket();
-        buffer = Buffer.alloc(0);
-        return;
-      }
-      buffer = buffer.subarray(parsed.bytesConsumed);
-      if (parsed.upgradeHead) {
-        cleanup();
-        const incoming = new ServerIncomingMessage(parsed.request);
-        incoming.socket = socket;
-        incoming.connection = socket;
-        server._emit("upgrade", incoming, socket, parsed.upgradeHead);
-        return;
-      }
-      const result = await dispatchSocketBackedServerRequest(
-        server,
-        parsed.request,
-        socket,
-      );
-      if (detached || socket.destroyed) {
-        return;
-      }
-      // Keep-alive for socket-backed HTTP servers is intentionally deferred:
-      // pipelined bytes already in `buffer` drain, then this connection closes.
-      // Revisit when the bridge owns full Node-compatible request lifecycle
-      // timers and per-socket request limits.
-      let mustClose;
-      if (result.streamedDirectly) {
-        // Response was already streamed straight to the socket by res.end().
-        mustClose = result.closeConnection;
-      } else {
-        const response = JSON.parse(result.responseJson);
-        const serialized = serializeLoopbackResponse(response, parsed.request, true);
-        if (!closeAfterDrain && serialized.payload.length > 0) {
-          socket.write(serialized.payload);
-        }
-        mustClose = serialized.closeConnection;
-      }
-      if (mustClose) {
-        closeAfterDrain = true;
-        if (buffer.length === 0) {
-          finishSocket();
-          return;
-        }
-      }
-    }
-  }
-  socket.on("data", onData);
-  socket.once("end", onEnd);
-  socket.once("close", onClose);
-  socket.once("error", onError);
-}
-
-function dispatchSocketRequest(event, serverId, requestJson, headBase64, socketId) {
-  const server = serverInstances.get(serverId);
-  if (!server) {
-    throw new Error(`Unknown HTTP server for ${event}: ${serverId}`);
-  }
-  const request = JSON.parse(requestJson);
-  const incoming = new ServerIncomingMessage(request);
-  const head = typeof Buffer !== "undefined" ? Buffer.from(headBase64, "base64") : new Uint8Array(0);
-  const hostHeader = incoming.headers["host"];
-  const socket = new UpgradeSocket(socketId, {
-    host: (Array.isArray(hostHeader) ? hostHeader[0] : hostHeader)?.split(":")[0] || "127.0.0.1"
-  });
-  upgradeSocketInstances.set(socketId, socket);
-  server._emit(event, incoming, socket, head);
-}
-
-var upgradeSocketInstances = /* @__PURE__ */ new Map();
-
-var UpgradeSocket = class {
-  remoteAddress;
-  remotePort;
-  localAddress = "127.0.0.1";
-  localPort = 0;
-  connecting = false;
-  destroyed = false;
-  writable = true;
-  readable = true;
-  readyState = "open";
-  bytesWritten = 0;
-  _listeners = {};
-  _socketId;
-  // Readable stream state stub for ws compatibility (socketOnClose checks _readableState.endEmitted)
-  _readableState = { endEmitted: false, ended: false };
-  _writableState = { finished: false, errorEmitted: false };
-  constructor(socketId, options) {
-    this._socketId = socketId;
-    this.remoteAddress = options?.host || "127.0.0.1";
-    this.remotePort = options?.port || 80;
-  }
-  setTimeout(_ms, _cb) {
-    return this;
-  }
-  setNoDelay(_noDelay) {
-    return this;
-  }
-  setKeepAlive(_enable, _delay) {
-    return this;
-  }
-  ref() {
-    return this;
-  }
-  unref() {
-    return this;
-  }
-  cork() {
-  }
-  uncork() {
-  }
-  pause() {
-    return this;
-  }
-  resume() {
-    return this;
-  }
-  address() {
-    return { address: this.localAddress, family: "IPv4", port: this.localPort };
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    return this;
-  }
-  addListener(event, listener) {
-    return this.on(event, listener);
-  }
-  once(event, listener) {
-    const wrapper = (...args) => {
-      this.off(event, wrapper);
-      listener(...args);
-    };
-    return this.on(event, wrapper);
-  }
-  off(event, listener) {
-    if (this._listeners[event]) {
-      const idx = this._listeners[event].indexOf(listener);
-      if (idx !== -1) this._listeners[event].splice(idx, 1);
-    }
-    return this;
-  }
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  }
-  removeAllListeners(event) {
-    if (event) {
-      delete this._listeners[event];
-    } else {
-      this._listeners = {};
-    }
-    return this;
-  }
-  emit(event, ...args) {
-    const handlers = this._listeners[event];
-    return dispatchCustomEmitterListeners(this, handlers, args);
-  }
-  listenerCount(event) {
-    return this._listeners[event]?.length || 0;
-  }
-  write(data, encodingOrCb, cb) {
-    if (this.destroyed) return false;
-    const callback = typeof encodingOrCb === "function" ? encodingOrCb : cb;
-    if (typeof _upgradeSocketWriteRaw !== "undefined") {
-      let base64;
-      if (typeof Buffer !== "undefined" && Buffer.isBuffer(data)) {
-        base64 = data.toString("base64");
-      } else if (typeof data === "string") {
-        base64 = typeof Buffer !== "undefined" ? Buffer.from(data).toString("base64") : btoa(data);
-      } else if (data instanceof Uint8Array) {
-        base64 = typeof Buffer !== "undefined" ? Buffer.from(data).toString("base64") : btoa(String.fromCharCode(...data));
-      } else {
-        base64 = typeof Buffer !== "undefined" ? Buffer.from(String(data)).toString("base64") : btoa(String(data));
-      }
-      this.bytesWritten += base64.length;
-      _upgradeSocketWriteRaw.applySync(void 0, [this._socketId, base64]);
-    }
-    if (callback) callback();
-    return true;
-  }
-  end(data) {
-    if (data) this.write(data);
-    if (typeof _upgradeSocketEndRaw !== "undefined" && !this.destroyed) {
-      _upgradeSocketEndRaw.applySync(void 0, [this._socketId]);
-    }
-    this.writable = false;
-    this.emit("finish");
-    return this;
-  }
-  destroy(err) {
-    if (this.destroyed) return this;
-    this.destroyed = true;
-    this.writable = false;
-    this.readable = false;
-    this._readableState.endEmitted = true;
-    this._readableState.ended = true;
-    this._writableState.finished = true;
-    if (typeof _upgradeSocketDestroyRaw !== "undefined") {
-      _upgradeSocketDestroyRaw.applySync(void 0, [this._socketId]);
-    }
-    upgradeSocketInstances.delete(this._socketId);
-    if (err) this.emit("error", err);
-    this.emit("close", false);
-    return this;
-  }
-  // Push data received from the host into this socket
-  _pushData(data) {
-    this.emit("data", data);
-  }
-  // Signal end-of-stream from the host
-  _pushEnd() {
-    this.readable = false;
-    this._readableState.endEmitted = true;
-    this._readableState.ended = true;
-    this._writableState.finished = true;
-    this.emit("end");
-    this.emit("close", false);
-    upgradeSocketInstances.delete(this._socketId);
-  }
-};
-
-function dispatchUpgradeRequest(serverId, requestJson, headBase64, socketId) {
-  dispatchSocketRequest("upgrade", serverId, requestJson, headBase64, socketId);
-}
-
-function dispatchConnectRequest(serverId, requestJson, headBase64, socketId) {
-  dispatchSocketRequest("connect", serverId, requestJson, headBase64, socketId);
-}
-
-function onUpgradeSocketData(socketId, dataBase64) {
-  const socket = upgradeSocketInstances.get(socketId);
-  if (socket) {
-    const data = typeof Buffer !== "undefined" ? Buffer.from(dataBase64, "base64") : new Uint8Array(0);
-    socket._pushData(data);
-  }
-}
-
-function onUpgradeSocketEnd(socketId) {
-  const socket = upgradeSocketInstances.get(socketId);
-  if (socket) {
-    socket._pushEnd();
-  }
-}
-
-function ServerResponseCallable() {
-  this.statusCode = 200;
-  this.statusMessage = "OK";
-  this.headersSent = false;
-  this.writable = true;
-  this.writableFinished = false;
-  this.outputSize = 0;
-  this._headers = /* @__PURE__ */ new Map();
-  this._trailers = /* @__PURE__ */ new Map();
-  this._rawHeaderNames = /* @__PURE__ */ new Map();
-  this._rawTrailerNames = /* @__PURE__ */ new Map();
-  this._informational = [];
-  this._pendingRawInfoBuffer = "";
-  this._chunks = [];
-  this._chunksBytes = 0;
-  this._listeners = {};
-  this._closedPromise = new Promise((resolve) => {
-    this._resolveClosed = resolve;
-  });
-  this._connectionEnded = false;
-  this._connectionReset = false;
-  this._writableState = { length: 0, ended: false, finished: false, objectMode: false, corked: 0 };
-  const fakeSocket = {
-    writable: true,
-    writableCorked: 0,
-    writableHighWaterMark: 16 * 1024,
-    on() {
-      return fakeSocket;
-    },
-    once() {
-      return fakeSocket;
-    },
-    removeListener() {
-      return fakeSocket;
-    },
-    destroy() {
-    },
-    end() {
-    },
-    cork() {
-    },
-    uncork() {
-    },
-    write: (chunk, encodingOrCallback, callback) => {
-      return this.write(chunk, encodingOrCallback, callback);
-    }
-  };
-  this.socket = fakeSocket;
-  this.connection = fakeSocket;
-}
-
-ServerResponseCallable.prototype = Object.create(ServerResponseBridge.prototype, {
-  constructor: { value: ServerResponseCallable, writable: true, configurable: true }
-});
-
-function createHttpModule(protocol) {
-  const defaultProtocol = protocol === "https" ? "https:" : "http:";
-  const moduleAgent = new Agent({
-    keepAlive: false,
-    createConnection(options, cb) {
-      return createHttpRequestSocket({ ...options, protocol: defaultProtocol }, cb);
-    }
-  });
-  function ensureProtocol(opts) {
-    if (!opts.protocol) return { ...opts, protocol: defaultProtocol };
-    return opts;
-  }
-  function withModuleDefaultAgent(opts) {
-    if (opts.agent !== void 0) {
-      return opts;
-    }
-    return {
-      ...opts,
-      _agentOSDefaultAgent: moduleAgent
-    };
-  }
-  return {
-    request(options, optionsOrCallback, maybeCallback) {
-      let opts;
-      const callback = typeof optionsOrCallback === "function" ? optionsOrCallback : maybeCallback;
-      if (typeof options === "string") {
-        const url = new URL(options);
-        opts = {
-          protocol: url.protocol,
-          hostname: url.hostname,
-          port: url.port,
-          path: url.pathname + url.search,
-          ...typeof optionsOrCallback === "object" && optionsOrCallback ? optionsOrCallback : {}
-        };
-      } else if (options instanceof URL) {
-        opts = {
-          protocol: options.protocol,
-          hostname: options.hostname,
-          port: options.port,
-          path: options.pathname + options.search,
-          ...typeof optionsOrCallback === "object" && optionsOrCallback ? optionsOrCallback : {}
-        };
-      } else {
-        opts = {
-          ...options,
-          ...typeof optionsOrCallback === "object" && optionsOrCallback ? optionsOrCallback : {}
-        };
-      }
-      return new ClientRequest(withModuleDefaultAgent(ensureProtocol(opts)), callback);
-    },
-    get(options, optionsOrCallback, maybeCallback) {
-      let opts;
-      const callback = typeof optionsOrCallback === "function" ? optionsOrCallback : maybeCallback;
-      if (typeof options === "string") {
-        const url = new URL(options);
-        opts = {
-          protocol: url.protocol,
-          hostname: url.hostname,
-          port: url.port,
-          path: url.pathname + url.search,
-          method: "GET",
-          ...typeof optionsOrCallback === "object" && optionsOrCallback ? optionsOrCallback : {}
-        };
-      } else if (options instanceof URL) {
-        opts = {
-          protocol: options.protocol,
-          hostname: options.hostname,
-          port: options.port,
-          path: options.pathname + options.search,
-          method: "GET",
-          ...typeof optionsOrCallback === "object" && optionsOrCallback ? optionsOrCallback : {}
-        };
-      } else {
-        opts = {
-          ...options,
-          ...typeof optionsOrCallback === "object" && optionsOrCallback ? optionsOrCallback : {},
-          method: "GET"
-        };
-      }
-      const req = new ClientRequest(withModuleDefaultAgent(ensureProtocol(opts)), callback);
-      req.end();
-      return req;
-    },
-    createServer(_optionsOrListener, maybeListener) {
-      const listener = typeof _optionsOrListener === "function" ? _optionsOrListener : maybeListener;
-      const serverOptions = typeof _optionsOrListener === "function" ? null : _optionsOrListener;
-      return new Server(listener, protocol === "https" ? serverOptions : null);
-    },
-    Agent,
-    globalAgent: moduleAgent,
-    Server: ServerCallable,
-    ServerResponse: ServerResponseCallable,
-    IncomingMessage,
-    ClientRequest,
-    validateHeaderName,
-    validateHeaderValue,
-    _checkIsHttpToken: checkIsHttpToken,
-    _checkInvalidHeaderChar: checkInvalidHeaderChar,
-    maxHeaderSize: 65535,
-    METHODS: [...HTTP_METHODS],
-    STATUS_CODES: HTTP_STATUS_TEXT
-  };
-}
-
-var http = createHttpModule("http");
-
-exposeCustomGlobal("_httpModule", http);
-
-exposeCustomGlobal("_dnsModule", dns);
-
-function onHttpServerRequest(eventType, payload) {
-  debugBridgeNetwork("http stream event", eventType, payload);
-  if (eventType !== "http_request") {
-    return;
-  }
-  if (!payload || payload.serverId === void 0 || payload.requestId === void 0 || typeof payload.request !== "string") {
-    return;
-  }
-  if (typeof _networkHttpServerRespondRaw === "undefined") {
-    debugBridgeNetwork("http stream missing respond bridge");
-    return;
-  }
-  void dispatchServerRequest(payload.serverId, payload.request).then((responseJson) => {
-    debugBridgeNetwork("http stream response", payload.serverId, payload.requestId);
-    _networkHttpServerRespondRaw.applySync(void 0, [
-      payload.serverId,
-      payload.requestId,
-      responseJson
-    ]);
-  }).catch((err) => {
-    const message = err instanceof Error ? err.message : String(err);
-    debugBridgeNetwork("http stream error", payload.serverId, payload.requestId, message);
-    _networkHttpServerRespondRaw.applySync(void 0, [
-      payload.serverId,
-      payload.requestId,
-      JSON.stringify({
-        status: 500,
-        headers: [["content-type", "text/plain"]],
-        body: `Error: ${message}`,
-        bodyEncoding: "utf8"
-      })
-    ]);
-  });
-}
-
-exposeCustomGlobal("_httpServerDispatch", onHttpServerRequest);
-
-exposeCustomGlobal("_httpServerUpgradeDispatch", dispatchUpgradeRequest);
-
-exposeCustomGlobal("_httpServerConnectDispatch", dispatchConnectRequest);
-
-exposeCustomGlobal("_http2Dispatch", onHttp2Dispatch);
-
-exposeCustomGlobal("_upgradeSocketData", onUpgradeSocketData);
-var https = createHttpModule("https");
-
-exposeCustomGlobal("_httpsModule", https);
-export { Agent, ClientRequest, DirectTunnelSocket, FakeSocket, HTTP_METHODS, HTTP_STATUS_TEXT, HTTP_TOKEN_EXTRA_CHARS, INVALID_REQUEST_PATH_REGEXP, IncomingMessage, Server, ServerCallable, ServerIncomingMessage, ServerResponseBridge, ServerResponseCallable, UpgradeSocket, appendNormalizedHeader, attachHttpServerSocket, buildHostHeader, buildRawHttpHeaderPairs, buildUndiciOrigin, checkInvalidHeaderChar, checkIsHttpToken, cloneStoredHeaderValue, createAbortError2, createBadRequestResponseBuffer, createConnResetError, createErrorWithCode, createHttpModule, createHttpRequestSocket, createInvalidArgTypeError2, createTypeErrorWithCode, createUnsupportedHttpSocketWriteError, debugBridgeNetwork, dispatchConnectRequest, dispatchHttp2CompatibilityRequest, dispatchLoopbackServerRequest, dispatchServerRequest, dispatchSocketBackedServerRequest, dispatchSocketRequest, dispatchUpgradeRequest, finalizeRawHeaderPairs, flattenHeaderPairs, formatReceivedType, getUndiciClientForSocket, hasResponseBody, hasUpgradeRequestHeaders, http, https, isFlatHeaderList, isLoopbackRequestHost, isRawSocketRequest, isSocketReadyForProtocol, joinHeaderValue, nextServerId, normalizeRequestHeaders, normalizeSocketChunk, onHttpServerRequest, onUpgradeSocketData, onUpgradeSocketEnd, parseChunkedBody, parseContentLengthHeader, parseLoopbackRequestBuffer, parseRawHttpResponse, readUndiciReadableBody, serializeHeaderValue, serializeLoopbackResponse, serializeRawHeaderPairs, serializeRawHttpRequest, serverInstances, socketReadyEventNameForProtocol, splitTransferEncodingTokens, upgradeSocketInstances, validateHeaderName, validateHeaderValue, validateRequestMethod, validateRequestPath, waitForRawHttpResponse, waitForRawHttpResponseHead, waitForSocketReadyForProtocol };
diff --git a/packages/build-tools/bridge-src/builtins/http2.ts b/packages/build-tools/bridge-src/builtins/http2.ts
deleted file mode 100644
index 1f4649d32..000000000
--- a/packages/build-tools/bridge-src/builtins/http2.ts
+++ /dev/null
@@ -1,2158 +0,0 @@
-import { _fdGetPath, _fs, decodeBridgeJson } from "./fs.js";
-import { setImmediate } from "./timers.js";
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { Response } from "./fetch.js";
-import { createErrorWithCode, createTypeErrorWithCode, dispatchHttp2CompatibilityRequest, formatReceivedType, http } from "./http.js";
-import { buildSerializedTlsOptions, normalizeListenArgs, normalizeSocketTimeout } from "./net.js";
-
-var HTTP2_K_SOCKET = /* @__PURE__ */ Symbol.for("secure-exec.http2.kSocket");
-
-var HTTP2_OPTIONS = /* @__PURE__ */ Symbol("options");
-
-var http2Servers = /* @__PURE__ */ new Map();
-
-var http2Sessions = /* @__PURE__ */ new Map();
-
-var http2Streams = /* @__PURE__ */ new Map();
-
-var pendingHttp2ClientStreamEvents = /* @__PURE__ */ new Map();
-
-var scheduledHttp2ClientStreamFlushes = /* @__PURE__ */ new Set();
-
-var queuedHttp2DispatchEvents = [];
-
-var pendingHttp2CompatRequests = /* @__PURE__ */ new Map();
-
-var scheduledHttp2DispatchDrain = false;
-
-var retainedHttp2Handles = /* @__PURE__ */ new Map();
-
-var nextHttp2ServerId = 1;
-
-var Http2EventEmitter = class {
-  _listeners = {};
-  _onceListeners = {};
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    return this;
-  }
-  addListener(event, listener) {
-    return this.on(event, listener);
-  }
-  once(event, listener) {
-    if (!this._onceListeners[event]) this._onceListeners[event] = [];
-    this._onceListeners[event].push(listener);
-    return this;
-  }
-  removeListener(event, listener) {
-    const remove = (target) => {
-      if (!target) return;
-      const index = target.indexOf(listener);
-      if (index !== -1) target.splice(index, 1);
-    };
-    remove(this._listeners[event]);
-    remove(this._onceListeners[event]);
-    return this;
-  }
-  off(event, listener) {
-    return this.removeListener(event, listener);
-  }
-  listenerCount(event) {
-    return (this._listeners[event]?.length ?? 0) + (this._onceListeners[event]?.length ?? 0);
-  }
-  setMaxListeners(_value) {
-    return this;
-  }
-  emit(event, ...args) {
-    let handled = false;
-    const listeners = this._listeners[event];
-    if (listeners) {
-      for (const listener of [...listeners]) {
-        listener.call(this, ...args);
-        handled = true;
-      }
-    }
-    const onceListeners = this._onceListeners[event];
-    if (onceListeners) {
-      this._onceListeners[event] = [];
-      for (const listener of [...onceListeners]) {
-        listener.call(this, ...args);
-        handled = true;
-      }
-    }
-    return handled;
-  }
-};
-
-var Http2SocketProxy = class extends Http2EventEmitter {
-  allowHalfOpen = false;
-  encrypted = false;
-  localAddress = "127.0.0.1";
-  localPort = 0;
-  localFamily = "IPv4";
-  remoteAddress = "127.0.0.1";
-  remotePort = 0;
-  remoteFamily = "IPv4";
-  servername;
-  alpnProtocol = false;
-  readable = true;
-  writable = true;
-  destroyed = false;
-  _bridgeReadPollTimer = null;
-  _loopbackServer = null;
-  _onDestroy;
-  _destroyCallbackInvoked = false;
-  constructor(state, onDestroy) {
-    super();
-    this._onDestroy = onDestroy;
-    this._applyState(state);
-  }
-  _applyState(state) {
-    if (!state) return;
-    this.allowHalfOpen = state.allowHalfOpen === true;
-    this.encrypted = state.encrypted === true;
-    this.localAddress = state.localAddress ?? this.localAddress;
-    this.localPort = state.localPort ?? this.localPort;
-    this.localFamily = state.localFamily ?? this.localFamily;
-    this.remoteAddress = state.remoteAddress ?? this.remoteAddress;
-    this.remotePort = state.remotePort ?? this.remotePort;
-    this.remoteFamily = state.remoteFamily ?? this.remoteFamily;
-    this.servername = state.servername;
-    this.alpnProtocol = state.alpnProtocol ?? this.alpnProtocol;
-  }
-  _clearTimeoutTimer() {
-  }
-  _emitNet(event, error) {
-    if (event === "error" && error) {
-      this.emit("error", error);
-      return;
-    }
-    if (event === "close") {
-      if (!this._destroyCallbackInvoked) {
-        this._destroyCallbackInvoked = true;
-        queueMicrotask(() => {
-          this._onDestroy?.();
-        });
-      }
-      this.emit("close");
-    }
-  }
-  end() {
-    this.destroyed = true;
-    this.readable = false;
-    this.writable = false;
-    this.emit("close");
-    return this;
-  }
-  destroy() {
-    if (this.destroyed) {
-      return this;
-    }
-    this.destroyed = true;
-    this.readable = false;
-    this.writable = false;
-    this._emitNet("close");
-    return this;
-  }
-};
-
-function createHttp2ArgTypeError(argumentName, expected, value) {
-  return createTypeErrorWithCode(
-    `The "${argumentName}" argument must be of type ${expected}. Received ${formatReceivedType(value)}`,
-    "ERR_INVALID_ARG_TYPE"
-  );
-}
-
-function createHttp2Error(code, message) {
-  return createErrorWithCode(message, code);
-}
-
-function createHttp2SettingRangeError(setting, value) {
-  const error = new RangeError(
-    `Invalid value for setting "${setting}": ${String(value)}`
-  );
-  error.code = "ERR_HTTP2_INVALID_SETTING_VALUE";
-  return error;
-}
-
-function createHttp2SettingTypeError(setting, value) {
-  const error = new TypeError(
-    `Invalid value for setting "${setting}": ${String(value)}`
-  );
-  error.code = "ERR_HTTP2_INVALID_SETTING_VALUE";
-  return error;
-}
-
-var HTTP2_INTERNAL_BINDING_CONSTANTS = {
-  NGHTTP2_NO_ERROR: 0,
-  NGHTTP2_PROTOCOL_ERROR: 1,
-  NGHTTP2_INTERNAL_ERROR: 2,
-  NGHTTP2_FLOW_CONTROL_ERROR: 3,
-  NGHTTP2_SETTINGS_TIMEOUT: 4,
-  NGHTTP2_STREAM_CLOSED: 5,
-  NGHTTP2_FRAME_SIZE_ERROR: 6,
-  NGHTTP2_REFUSED_STREAM: 7,
-  NGHTTP2_CANCEL: 8,
-  NGHTTP2_COMPRESSION_ERROR: 9,
-  NGHTTP2_CONNECT_ERROR: 10,
-  NGHTTP2_ENHANCE_YOUR_CALM: 11,
-  NGHTTP2_INADEQUATE_SECURITY: 12,
-  NGHTTP2_HTTP_1_1_REQUIRED: 13,
-  NGHTTP2_NV_FLAG_NONE: 0,
-  NGHTTP2_NV_FLAG_NO_INDEX: 1,
-  NGHTTP2_ERR_DEFERRED: -508,
-  NGHTTP2_ERR_STREAM_ID_NOT_AVAILABLE: -509,
-  NGHTTP2_ERR_STREAM_CLOSED: -510,
-  NGHTTP2_ERR_INVALID_ARGUMENT: -501,
-  NGHTTP2_ERR_FRAME_SIZE_ERROR: -522,
-  NGHTTP2_ERR_NOMEM: -901,
-  NGHTTP2_FLAG_NONE: 0,
-  NGHTTP2_FLAG_END_STREAM: 1,
-  NGHTTP2_FLAG_END_HEADERS: 4,
-  NGHTTP2_FLAG_ACK: 1,
-  NGHTTP2_FLAG_PADDED: 8,
-  NGHTTP2_FLAG_PRIORITY: 32,
-  NGHTTP2_DEFAULT_WEIGHT: 16,
-  NGHTTP2_SETTINGS_HEADER_TABLE_SIZE: 1,
-  NGHTTP2_SETTINGS_ENABLE_PUSH: 2,
-  NGHTTP2_SETTINGS_MAX_CONCURRENT_STREAMS: 3,
-  NGHTTP2_SETTINGS_INITIAL_WINDOW_SIZE: 4,
-  NGHTTP2_SETTINGS_MAX_FRAME_SIZE: 5,
-  NGHTTP2_SETTINGS_MAX_HEADER_LIST_SIZE: 6,
-  NGHTTP2_SETTINGS_ENABLE_CONNECT_PROTOCOL: 8
-};
-
-var HTTP2_NGHTTP2_ERROR_MESSAGES = {
-  [HTTP2_INTERNAL_BINDING_CONSTANTS.NGHTTP2_ERR_DEFERRED]: "Data deferred",
-  [HTTP2_INTERNAL_BINDING_CONSTANTS.NGHTTP2_ERR_STREAM_ID_NOT_AVAILABLE]: "Stream ID is not available",
-  [HTTP2_INTERNAL_BINDING_CONSTANTS.NGHTTP2_ERR_STREAM_CLOSED]: "Stream was already closed or invalid",
-  [HTTP2_INTERNAL_BINDING_CONSTANTS.NGHTTP2_ERR_INVALID_ARGUMENT]: "Invalid argument",
-  [HTTP2_INTERNAL_BINDING_CONSTANTS.NGHTTP2_ERR_FRAME_SIZE_ERROR]: "Frame size error",
-  [HTTP2_INTERNAL_BINDING_CONSTANTS.NGHTTP2_ERR_NOMEM]: "Out of memory"
-};
-
-var NghttpError = class extends Error {
-  code = "ERR_HTTP2_ERROR";
-  constructor(message) {
-    super(message);
-    this.name = "Error";
-  }
-};
-
-function nghttp2ErrorString(code) {
-  return HTTP2_NGHTTP2_ERROR_MESSAGES[code] ?? `HTTP/2 error (${String(code)})`;
-}
-
-function createHttp2InvalidArgValueError(property, value) {
-  return createTypeErrorWithCode(
-    `The property 'options.${property}' is invalid. Received ${formatHttp2InvalidValue(value)}`,
-    "ERR_INVALID_ARG_VALUE"
-  );
-}
-
-function formatHttp2InvalidValue(value) {
-  if (typeof value === "function") {
-    return `[Function${value.name ? `: ${value.name}` : ": function"}]`;
-  }
-  if (typeof value === "symbol") {
-    return value.toString();
-  }
-  if (Array.isArray(value)) {
-    return "[]";
-  }
-  if (value === null) {
-    return "null";
-  }
-  if (typeof value === "object") {
-    return "{}";
-  }
-  return String(value);
-}
-
-function createHttp2PayloadForbiddenError(statusCode) {
-  return createHttp2Error(
-    "ERR_HTTP2_PAYLOAD_FORBIDDEN",
-    `Responses with ${String(statusCode)} status must not have a payload`
-  );
-}
-
-var S_IFMT = 61440;
-
-var S_IFDIR = 16384;
-
-var S_IFREG = 32768;
-
-var S_IFIFO = 4096;
-
-var S_IFSOCK = 49152;
-
-var S_IFLNK = 40960;
-
-function createHttp2BridgeStat(stat) {
-  const atimeMs = stat.atimeMs ?? 0;
-  const mtimeMs = stat.mtimeMs ?? atimeMs;
-  const ctimeMs = stat.ctimeMs ?? mtimeMs;
-  const birthtimeMs = stat.birthtimeMs ?? ctimeMs;
-  const fileType = stat.mode & S_IFMT;
-  return {
-    size: stat.size,
-    mode: stat.mode,
-    atimeMs,
-    mtimeMs,
-    ctimeMs,
-    birthtimeMs,
-    atime: new Date(atimeMs),
-    mtime: new Date(mtimeMs),
-    ctime: new Date(ctimeMs),
-    birthtime: new Date(birthtimeMs),
-    isFile: () => fileType === S_IFREG,
-    isDirectory: () => fileType === S_IFDIR,
-    isFIFO: () => fileType === S_IFIFO,
-    isSocket: () => fileType === S_IFSOCK,
-    isSymbolicLink: () => fileType === S_IFLNK
-  };
-}
-
-function normalizeHttp2FileResponseOptions(options) {
-  const normalized = options ?? {};
-  const offset = normalized.offset;
-  if (offset !== void 0 && (typeof offset !== "number" || !Number.isFinite(offset))) {
-    throw createHttp2InvalidArgValueError("offset", offset);
-  }
-  const length = normalized.length;
-  if (length !== void 0 && (typeof length !== "number" || !Number.isFinite(length))) {
-    throw createHttp2InvalidArgValueError("length", length);
-  }
-  const statCheck = normalized.statCheck;
-  if (statCheck !== void 0 && typeof statCheck !== "function") {
-    throw createHttp2InvalidArgValueError("statCheck", statCheck);
-  }
-  const onError = normalized.onError;
-  return {
-    offset: offset === void 0 ? 0 : Math.max(0, Math.trunc(offset)),
-    length: typeof length === "number" ? Math.trunc(length) : void 0,
-    statCheck: typeof statCheck === "function" ? statCheck : void 0,
-    onError: typeof onError === "function" ? onError : void 0
-  };
-}
-
-function sliceHttp2FileBody(body, offset, length) {
-  const safeOffset = Math.max(0, Math.min(offset, body.length));
-  if (length === void 0 || length < 0) {
-    return body.subarray(safeOffset);
-  }
-  return body.subarray(safeOffset, Math.min(body.length, safeOffset + length));
-}
-
-var Http2Stream = class {
-  constructor(_streamId) {
-    this._streamId = _streamId;
-  }
-  _streamId;
-  respond(headers) {
-    if (typeof _networkHttp2StreamRespondRaw === "undefined") {
-      throw new Error("http2 server stream respond bridge is not available");
-    }
-    _networkHttp2StreamRespondRaw.applySync(void 0, [
-      this._streamId,
-      serializeHttp2Headers(headers)
-    ]);
-    return 0;
-  }
-};
-
-var DEFAULT_HTTP2_SETTINGS = {
-  headerTableSize: 4096,
-  enablePush: true,
-  initialWindowSize: 65535,
-  maxFrameSize: 16384,
-  maxConcurrentStreams: 4294967295,
-  maxHeaderListSize: 65535,
-  maxHeaderSize: 65535,
-  enableConnectProtocol: false
-};
-
-var DEFAULT_HTTP2_SESSION_STATE = {
-  effectiveLocalWindowSize: 65535,
-  localWindowSize: 65535,
-  remoteWindowSize: 65535,
-  nextStreamID: 1,
-  outboundQueueSize: 1,
-  deflateDynamicTableSize: 0,
-  inflateDynamicTableSize: 0
-};
-
-function cloneHttp2Settings(settings) {
-  const cloned = {};
-  for (const [key, value] of Object.entries(settings ?? {})) {
-    if (key === "customSettings" && value && typeof value === "object") {
-      const customSettings = {};
-      for (const [customKey, customValue] of Object.entries(value)) {
-        customSettings[Number(customKey)] = Number(customValue);
-      }
-      cloned.customSettings = customSettings;
-      continue;
-    }
-    cloned[key] = value;
-  }
-  return cloned;
-}
-
-function cloneHttp2SessionRuntimeState(state) {
-  return {
-    ...DEFAULT_HTTP2_SESSION_STATE,
-    ...state ?? {}
-  };
-}
-
-function parseHttp2SessionRuntimeState(state) {
-  if (!state || typeof state !== "object") {
-    return void 0;
-  }
-  const record = state;
-  const parsed = {};
-  const numericKeys = [
-    "effectiveLocalWindowSize",
-    "localWindowSize",
-    "remoteWindowSize",
-    "nextStreamID",
-    "outboundQueueSize",
-    "deflateDynamicTableSize",
-    "inflateDynamicTableSize"
-  ];
-  for (const key of numericKeys) {
-    if (typeof record[key] === "number") {
-      parsed[key] = record[key];
-    }
-  }
-  return parsed;
-}
-
-function validateHttp2Settings(settings, argumentName = "settings") {
-  if (!settings || typeof settings !== "object" || Array.isArray(settings)) {
-    throw createHttp2ArgTypeError(argumentName, "object", settings);
-  }
-  const record = settings;
-  const normalized = {};
-  const numberRanges = {
-    headerTableSize: [0, 4294967295],
-    initialWindowSize: [0, 4294967295],
-    maxFrameSize: [16384, 16777215],
-    maxConcurrentStreams: [0, 4294967295],
-    maxHeaderListSize: [0, 4294967295],
-    maxHeaderSize: [0, 4294967295]
-  };
-  for (const [key, value] of Object.entries(record)) {
-    if (value === void 0) {
-      continue;
-    }
-    if (key === "enablePush" || key === "enableConnectProtocol") {
-      if (typeof value !== "boolean") {
-        throw createHttp2SettingTypeError(key, value);
-      }
-      normalized[key] = value;
-      continue;
-    }
-    if (key === "customSettings") {
-      if (!value || typeof value !== "object" || Array.isArray(value)) {
-        throw createHttp2SettingRangeError(key, value);
-      }
-      const customSettings = {};
-      for (const [customKey, customValue] of Object.entries(value)) {
-        const numericKey = Number(customKey);
-        if (!Number.isInteger(numericKey) || numericKey < 0 || numericKey > 65535) {
-          throw createHttp2SettingRangeError(key, value);
-        }
-        if (typeof customValue !== "number" || !Number.isInteger(customValue) || customValue < 0 || customValue > 4294967295) {
-          throw createHttp2SettingRangeError(key, value);
-        }
-        customSettings[numericKey] = customValue;
-      }
-      normalized.customSettings = customSettings;
-      continue;
-    }
-    if (key in numberRanges) {
-      const [min, max] = numberRanges[key];
-      if (typeof value !== "number" || !Number.isInteger(value) || value < min || value > max) {
-        throw createHttp2SettingRangeError(key, value);
-      }
-      normalized[key] = value;
-      continue;
-    }
-    normalized[key] = value;
-  }
-  return normalized;
-}
-
-function serializeHttp2Headers(headers) {
-  return JSON.stringify(headers ?? {});
-}
-
-function parseHttp2Headers(headersJson) {
-  if (!headersJson) {
-    return {};
-  }
-  try {
-    const parsed = JSON.parse(headersJson);
-    return parsed && typeof parsed === "object" ? parsed : {};
-  } catch {
-    return {};
-  }
-}
-
-function parseHttp2SessionState(data) {
-  if (!data) {
-    return null;
-  }
-  try {
-    const parsed = JSON.parse(data);
-    return parsed && typeof parsed === "object" ? parsed : null;
-  } catch {
-    return null;
-  }
-}
-
-function parseHttp2SocketState(data) {
-  if (!data) {
-    return null;
-  }
-  try {
-    const parsed = JSON.parse(data);
-    return parsed && typeof parsed === "object" ? parsed : null;
-  } catch {
-    return null;
-  }
-}
-
-function parseHttp2ErrorPayload(data) {
-  if (!data) {
-    return new Error("Unknown HTTP/2 bridge error");
-  }
-  try {
-    const parsed = JSON.parse(data);
-    const error = new Error(parsed.message ?? "Unknown HTTP/2 bridge error");
-    if (parsed.name) error.name = parsed.name;
-    if (parsed.code) error.code = parsed.code;
-    return error;
-  } catch {
-    return new Error(data);
-  }
-}
-
-function normalizeHttp2Headers(headers) {
-  const normalized = {};
-  if (!headers || typeof headers !== "object") {
-    return normalized;
-  }
-  for (const [key, value] of Object.entries(headers)) {
-    normalized[String(key)] = value;
-  }
-  return normalized;
-}
-
-function validateHttp2RequestOptions(options) {
-  if (!options) {
-    return;
-  }
-  const validators = {
-    endStream: "boolean",
-    weight: "number",
-    parent: "number",
-    exclusive: "boolean",
-    silent: "boolean"
-  };
-  for (const [key, expectedType] of Object.entries(validators)) {
-    if (!(key in options) || options[key] === void 0) {
-      continue;
-    }
-    const value = options[key];
-    if (expectedType === "boolean" && typeof value !== "boolean") {
-      throw createHttp2ArgTypeError(key, "boolean", value);
-    }
-    if (expectedType === "number" && typeof value !== "number") {
-      throw createHttp2ArgTypeError(key, "number", value);
-    }
-  }
-}
-
-function validateHttp2ConnectOptions(options) {
-  if (!options || !options.settings || typeof options.settings !== "object") {
-    return;
-  }
-  const settings = options.settings;
-  if ("maxFrameSize" in settings) {
-    const value = settings.maxFrameSize;
-    if (typeof value !== "number" || !Number.isInteger(value) || value < 16384 || value > 16777215) {
-      throw createHttp2SettingRangeError("maxFrameSize", value);
-    }
-  }
-}
-
-function applyHttp2SessionState(session, state) {
-  if (!state) {
-    return;
-  }
-  session.encrypted = state.encrypted === true;
-  session.alpnProtocol = state.alpnProtocol ?? (session.encrypted ? "h2" : "h2c");
-  session.originSet = Array.isArray(state.originSet) && state.originSet.length > 0 ? [...state.originSet] : session.encrypted ? [] : void 0;
-  if (state.localSettings && typeof state.localSettings === "object") {
-    session.localSettings = cloneHttp2Settings(state.localSettings);
-  }
-  if (state.remoteSettings && typeof state.remoteSettings === "object") {
-    session.remoteSettings = cloneHttp2Settings(state.remoteSettings);
-  }
-  if (state.state && typeof state.state === "object") {
-    session._applyRuntimeState(parseHttp2SessionRuntimeState(state.state));
-  }
-  session.socket._applyState(state.socket);
-}
-
-function normalizeHttp2Authority(authority, options) {
-  if (authority instanceof URL) {
-    return authority;
-  }
-  if (typeof authority === "string") {
-    return new URL(authority);
-  }
-  if (authority && typeof authority === "object") {
-    const record = authority;
-    const protocol = typeof (options?.protocol ?? record.protocol) === "string" ? String(options?.protocol ?? record.protocol) : "http:";
-    const hostname = typeof (options?.host ?? record.host ?? options?.hostname ?? record.hostname) === "string" ? String(options?.host ?? record.host ?? options?.hostname ?? record.hostname) : "localhost";
-    const portValue = options?.port ?? record.port;
-    const port = portValue === void 0 ? "" : String(portValue);
-    return new URL(`${protocol}//${hostname}${port ? `:${port}` : ""}`);
-  }
-  return new URL("http://localhost");
-}
-
-function normalizeHttp2ConnectArgs(authorityOrOptions, optionsOrListener, maybeListener) {
-  const listener = typeof optionsOrListener === "function" ? optionsOrListener : typeof maybeListener === "function" ? maybeListener : void 0;
-  const options = typeof optionsOrListener === "function" ? {} : optionsOrListener ?? {};
-  return {
-    authority: normalizeHttp2Authority(authorityOrOptions, options),
-    options,
-    listener
-  };
-}
-
-function resolveHttp2SocketId(socket) {
-  if (!socket || typeof socket !== "object") {
-    return void 0;
-  }
-  const value = socket._socketId;
-  return typeof value === "number" && Number.isFinite(value) ? value : void 0;
-}
-
-var ClientHttp2Stream = class extends Http2EventEmitter {
-  _streamId;
-  _encoding;
-  _utf8Remainder;
-  _isPushStream;
-  _session;
-  _receivedResponse = false;
-  _needsDrain = false;
-  _pendingWritableBytes = 0;
-  _drainScheduled = false;
-  _writableHighWaterMark = 16 * 1024;
-  rstCode = 0;
-  readable = true;
-  writable = true;
-  writableEnded = false;
-  writableFinished = false;
-  destroyed = false;
-  _writableState = { ended: false, finished: false, objectMode: false, corked: 0, length: 0 };
-  constructor(streamId, session, isPushStream = false) {
-    super();
-    this._streamId = streamId;
-    this._session = session;
-    this._isPushStream = isPushStream;
-    if (!isPushStream) {
-      queueMicrotask(() => {
-        this.emit("ready");
-      });
-    }
-  }
-  setEncoding(encoding) {
-    this._encoding = encoding;
-    this._utf8Remainder = this._encoding === "utf8" || this._encoding === "utf-8" ? Buffer.alloc(0) : void 0;
-    return this;
-  }
-  close() {
-    this.end();
-    return this;
-  }
-  destroy(error) {
-    if (this.destroyed) {
-      return this;
-    }
-    this.destroyed = true;
-    if (error) {
-      this.emit("error", error);
-    }
-    this.end();
-    return this;
-  }
-  _scheduleDrain() {
-    if (!this._needsDrain || this._drainScheduled) {
-      return;
-    }
-    this._drainScheduled = true;
-    queueMicrotask(() => {
-      this._drainScheduled = false;
-      if (!this._needsDrain) {
-        return;
-      }
-      this._needsDrain = false;
-      this._pendingWritableBytes = 0;
-      this.emit("drain");
-    });
-  }
-  write(data, encodingOrCallback, callback) {
-    if (typeof _networkHttp2StreamWriteRaw === "undefined") {
-      throw new Error("http2 session stream write bridge is not available");
-    }
-    const buffer = Buffer.isBuffer(data) ? data : typeof data === "string" ? Buffer.from(data, typeof encodingOrCallback === "string" ? encodingOrCallback : "utf8") : Buffer.from(data);
-    const wrote = _networkHttp2StreamWriteRaw.applySync(void 0, [this._streamId, buffer.toString("base64")]);
-    this._pendingWritableBytes += buffer.byteLength;
-    const shouldBackpressure = wrote === false || this._pendingWritableBytes >= this._writableHighWaterMark;
-    if (shouldBackpressure) {
-      this._needsDrain = true;
-    }
-    const cb = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-    cb?.();
-    return !shouldBackpressure;
-  }
-  end(data) {
-    if (typeof _networkHttp2StreamEndRaw === "undefined") {
-      throw new Error("http2 session stream end bridge is not available");
-    }
-    let encoded = null;
-    if (data !== void 0) {
-      const buffer = Buffer.isBuffer(data) ? data : typeof data === "string" ? Buffer.from(data) : Buffer.from(data);
-      encoded = buffer.toString("base64");
-    }
-    _networkHttp2StreamEndRaw.applySync(void 0, [this._streamId, encoded]);
-    this.writableEnded = true;
-    this._writableState.ended = true;
-    queueMicrotask(() => {
-      this.writable = false;
-      this.writableFinished = true;
-      this._writableState.finished = true;
-      this.emit("finish");
-    });
-    return this;
-  }
-  resume() {
-    return this;
-  }
-  _emitPush(headers, flags) {
-    if (process.env.SECURE_EXEC_DEBUG_HTTP2_BRIDGE === "1") {
-      console.error("[secure-exec http2 isolate] push", this._streamId);
-    }
-    this.emit("push", headers, flags ?? 0);
-  }
-  _hasReceivedResponse() {
-    return this._receivedResponse;
-  }
-  _belongsTo(session) {
-    return this._session === session;
-  }
-  _emitResponseHeaders(headers) {
-    this._receivedResponse = true;
-    if (process.env.SECURE_EXEC_DEBUG_HTTP2_BRIDGE === "1") {
-      console.error("[secure-exec http2 isolate] response headers", this._streamId, this._isPushStream);
-    }
-    if (!this._isPushStream) {
-      this.emit("response", headers);
-    }
-  }
-  _emitDataChunk(dataBase64) {
-    if (!dataBase64) {
-      return;
-    }
-    const chunkBuffer = Buffer.from(dataBase64, "base64");
-    if (this._utf8Remainder !== void 0) {
-      const buffer = this._utf8Remainder.length > 0 ? Buffer.concat([this._utf8Remainder, chunkBuffer]) : chunkBuffer;
-      const completeLength = getCompleteUtf8PrefixLength(buffer);
-      const chunk = buffer.subarray(0, completeLength).toString("utf8");
-      this._utf8Remainder = completeLength < buffer.length ? buffer.subarray(completeLength) : Buffer.alloc(0);
-      if (chunk.length > 0) {
-        this.emit("data", chunk);
-      }
-    } else if (this._encoding) {
-      this.emit("data", chunkBuffer.toString(this._encoding));
-    } else {
-      this.emit("data", chunkBuffer);
-    }
-    this._scheduleDrain();
-  }
-  _emitEnd() {
-    if (this._utf8Remainder && this._utf8Remainder.length > 0) {
-      const trailing = this._utf8Remainder.toString("utf8");
-      this._utf8Remainder = Buffer.alloc(0);
-      if (trailing.length > 0) {
-        this.emit("data", trailing);
-      }
-    }
-    this.readable = false;
-    this.emit("end");
-    this._scheduleDrain();
-  }
-  _emitClose(rstCode) {
-    if (typeof rstCode === "number") {
-      this.rstCode = rstCode;
-    }
-    this.destroyed = true;
-    this.readable = false;
-    this.writable = false;
-    this._scheduleDrain();
-    this.emit("close");
-  }
-};
-
-function getCompleteUtf8PrefixLength(buffer) {
-  if (buffer.length === 0) {
-    return 0;
-  }
-  let continuationCount = 0;
-  for (let index = buffer.length - 1; index >= 0 && continuationCount < 3; index -= 1) {
-    if ((buffer[index] & 192) !== 128) {
-      const trailingBytes = buffer.length - index;
-      const lead = buffer[index];
-      const expectedBytes = (lead & 128) === 0 ? 1 : (lead & 224) === 192 ? 2 : (lead & 240) === 224 ? 3 : (lead & 248) === 240 ? 4 : 1;
-      return trailingBytes < expectedBytes ? index : buffer.length;
-    }
-    continuationCount += 1;
-  }
-  return continuationCount > 0 ? buffer.length - continuationCount : buffer.length;
-}
-
-var ServerHttp2Stream = class _ServerHttp2Stream extends Http2EventEmitter {
-  _streamId;
-  _binding;
-  _responded = false;
-  _endQueued = false;
-  _pendingSyntheticErrorSuppressions = 0;
-  _requestHeaders;
-  _isPushStream;
-  session;
-  rstCode = 0;
-  readable = true;
-  writable = true;
-  destroyed = false;
-  _readableState;
-  _writableState;
-  constructor(streamId, session, requestHeaders, isPushStream = false) {
-    super();
-    this._streamId = streamId;
-    this._binding = new Http2Stream(streamId);
-    this.session = session;
-    this._requestHeaders = requestHeaders;
-    this._isPushStream = isPushStream;
-    this._readableState = {
-      flowing: null,
-      ended: false,
-      highWaterMark: 16 * 1024
-    };
-    this._writableState = {
-      ended: requestHeaders?.[":method"] === "HEAD"
-    };
-  }
-  _closeWithCode(code) {
-    this.rstCode = code;
-    _networkHttp2StreamCloseRaw?.applySync(void 0, [this._streamId, code]);
-  }
-  _markSyntheticClose() {
-    this.destroyed = true;
-    this.readable = false;
-    this.writable = false;
-  }
-  _shouldSuppressHostError() {
-    if (this._pendingSyntheticErrorSuppressions <= 0) {
-      return false;
-    }
-    this._pendingSyntheticErrorSuppressions -= 1;
-    return true;
-  }
-  _emitNghttp2Error(errorCode) {
-    const error = new NghttpError(nghttp2ErrorString(errorCode));
-    this._pendingSyntheticErrorSuppressions += 1;
-    this._markSyntheticClose();
-    this.emit("error", error);
-    this._closeWithCode(HTTP2_INTERNAL_BINDING_CONSTANTS.NGHTTP2_INTERNAL_ERROR);
-  }
-  _emitInternalStreamError() {
-    const error = createHttp2Error(
-      "ERR_HTTP2_STREAM_ERROR",
-      "Stream closed with error code NGHTTP2_INTERNAL_ERROR"
-    );
-    this._pendingSyntheticErrorSuppressions += 1;
-    this._markSyntheticClose();
-    this.emit("error", error);
-    this._closeWithCode(HTTP2_INTERNAL_BINDING_CONSTANTS.NGHTTP2_INTERNAL_ERROR);
-  }
-  _submitResponse(headers) {
-    this._responded = true;
-    const ngError = this._binding.respond(headers);
-    if (typeof ngError === "number" && ngError !== 0) {
-      this._emitNghttp2Error(ngError);
-      return false;
-    }
-    return true;
-  }
-  respond(headers) {
-    if (this.destroyed) {
-      throw createHttp2Error("ERR_HTTP2_INVALID_STREAM", "The stream has been destroyed");
-    }
-    if (this._responded) {
-      throw createHttp2Error("ERR_HTTP2_HEADERS_SENT", "Response has already been initiated.");
-    }
-    this._submitResponse(headers);
-  }
-  pushStream(headers, optionsOrCallback, maybeCallback) {
-    if (this._isPushStream) {
-      throw createHttp2Error(
-        "ERR_HTTP2_NESTED_PUSH",
-        "A push stream cannot initiate another push stream."
-      );
-    }
-    const callback = typeof optionsOrCallback === "function" ? optionsOrCallback : maybeCallback;
-    if (typeof callback !== "function") {
-      throw createHttp2ArgTypeError("callback", "function", callback);
-    }
-    if (typeof _networkHttp2StreamPushStreamRaw === "undefined") {
-      throw new Error("http2 server stream push bridge is not available");
-    }
-    const options = optionsOrCallback && typeof optionsOrCallback === "object" && !Array.isArray(optionsOrCallback) ? optionsOrCallback : {};
-    const resultJson = _networkHttp2StreamPushStreamRaw.applySync(
-      void 0,
-      [
-        this._streamId,
-        serializeHttp2Headers(normalizeHttp2Headers(headers)),
-        JSON.stringify(options ?? {})
-      ]
-    );
-    const result = JSON.parse(resultJson);
-    if (result.error) {
-      callback(parseHttp2ErrorPayload(result.error));
-      return;
-    }
-    const pushStream = new _ServerHttp2Stream(
-      Number(result.streamId),
-      this.session,
-      parseHttp2Headers(result.headers),
-      true
-    );
-    http2Streams.set(Number(result.streamId), pushStream);
-    callback(null, pushStream, parseHttp2Headers(result.headers));
-  }
-  write(data) {
-    if (this._writableState.ended) {
-      queueMicrotask(() => {
-        this.emit("error", createHttp2Error("ERR_STREAM_WRITE_AFTER_END", "write after end"));
-      });
-      return false;
-    }
-    if (typeof _networkHttp2StreamWriteRaw === "undefined") {
-      throw new Error("http2 server stream write bridge is not available");
-    }
-    const buffer = Buffer.isBuffer(data) ? data : typeof data === "string" ? Buffer.from(data) : Buffer.from(data);
-    return _networkHttp2StreamWriteRaw.applySync(void 0, [this._streamId, buffer.toString("base64")]);
-  }
-  end(data) {
-    if (!this._responded) {
-      if (!this._submitResponse({ ":status": 200 })) {
-        return;
-      }
-    }
-    if (this._endQueued) {
-      return;
-    }
-    if (typeof _networkHttp2StreamEndRaw === "undefined") {
-      throw new Error("http2 server stream end bridge is not available");
-    }
-    this._writableState.ended = true;
-    let encoded = null;
-    if (data !== void 0) {
-      const buffer = Buffer.isBuffer(data) ? data : typeof data === "string" ? Buffer.from(data) : Buffer.from(data);
-      encoded = buffer.toString("base64");
-    }
-    this._endQueued = true;
-    queueMicrotask(() => {
-      if (!this._endQueued || this.destroyed) {
-        return;
-      }
-      this._endQueued = false;
-      _networkHttp2StreamEndRaw.applySync(void 0, [this._streamId, encoded]);
-    });
-  }
-  pause() {
-    this._readableState.flowing = false;
-    _networkHttp2StreamPauseRaw?.applySync(void 0, [this._streamId]);
-    return this;
-  }
-  resume() {
-    this._readableState.flowing = true;
-    _networkHttp2StreamResumeRaw?.applySync(void 0, [this._streamId]);
-    return this;
-  }
-  respondWithFile(path, headers, options) {
-    if (this.destroyed) {
-      throw createHttp2Error("ERR_HTTP2_INVALID_STREAM", "The stream has been destroyed");
-    }
-    if (this._responded) {
-      throw createHttp2Error("ERR_HTTP2_HEADERS_SENT", "Response has already been initiated.");
-    }
-    const normalizedOptions = normalizeHttp2FileResponseOptions(options);
-    const responseHeaders = { ...headers ?? {} };
-    const statusCode = responseHeaders[":status"];
-    if (statusCode === 204 || statusCode === 205 || statusCode === 304) {
-      throw createHttp2PayloadForbiddenError(Number(statusCode));
-    }
-    try {
-      const statJson = _fs.stat.applySyncPromise(void 0, [path]);
-      const bodyBase64 = _fs.readFileBinary.applySyncPromise(void 0, [path]);
-      const stat = createHttp2BridgeStat(decodeBridgeJson(statJson));
-      const callbackOptions = {
-        offset: normalizedOptions.offset,
-        length: normalizedOptions.length ?? Math.max(0, stat.size - normalizedOptions.offset)
-      };
-      normalizedOptions.statCheck?.(stat, responseHeaders, callbackOptions);
-      const body = Buffer.from(bodyBase64, "base64");
-      const slicedBody = sliceHttp2FileBody(
-        body,
-        normalizedOptions.offset,
-        normalizedOptions.length
-      );
-      if (responseHeaders["content-length"] === void 0) {
-        responseHeaders["content-length"] = slicedBody.byteLength;
-      }
-      if (!this._submitResponse({
-        ":status": 200,
-        ...responseHeaders
-      })) {
-        return;
-      }
-      this.end(slicedBody);
-      return;
-    } catch {
-    }
-    if (typeof _networkHttp2StreamRespondWithFileRaw === "undefined") {
-      throw new Error("http2 server stream respondWithFile bridge is not available");
-    }
-    this._responded = true;
-    _networkHttp2StreamRespondWithFileRaw.applySync(
-      void 0,
-      [
-        this._streamId,
-        path,
-        JSON.stringify(headers ?? {}),
-        JSON.stringify(options ?? {})
-      ]
-    );
-  }
-  respondWithFD(fdOrHandle, headers, options) {
-    const fd = typeof fdOrHandle === "number" ? fdOrHandle : typeof fdOrHandle?.fd === "number" ? fdOrHandle.fd : NaN;
-    const path = Number.isFinite(fd) ? _fdGetPath.applySync(void 0, [fd]) : null;
-    if (!path) {
-      this._emitInternalStreamError();
-      return;
-    }
-    this.respondWithFile(path, headers, options);
-  }
-  destroy(error) {
-    if (this.destroyed) {
-      return this;
-    }
-    this.destroyed = true;
-    if (error) {
-      this.emit("error", error);
-    }
-    this._closeWithCode(HTTP2_INTERNAL_BINDING_CONSTANTS.NGHTTP2_CANCEL);
-    return this;
-  }
-  _emitData(dataBase64) {
-    if (!dataBase64) {
-      return;
-    }
-    this.emit("data", Buffer.from(dataBase64, "base64"));
-  }
-  _emitEnd() {
-    this._readableState.ended = true;
-    this.emit("end");
-  }
-  _emitDrain() {
-    this.emit("drain");
-  }
-  _emitClose(rstCode) {
-    if (typeof rstCode === "number") {
-      this.rstCode = rstCode;
-    }
-    this.destroyed = true;
-    this.emit("close");
-  }
-};
-
-var Http2ServerRequest = class extends Http2EventEmitter {
-  headers;
-  method;
-  url;
-  connection;
-  socket;
-  stream;
-  destroyed = false;
-  readable = true;
-  _readableState = { flowing: null, length: 0, ended: false, objectMode: false };
-  constructor(headers, socket, stream) {
-    super();
-    this.headers = headers;
-    this.method = typeof headers[":method"] === "string" ? String(headers[":method"]) : "GET";
-    this.url = typeof headers[":path"] === "string" ? String(headers[":path"]) : "/";
-    this.connection = socket;
-    this.socket = socket;
-    this.stream = stream;
-  }
-  on(event, listener) {
-    super.on(event, listener);
-    if (event === "data" && this._readableState.flowing !== false) {
-      this.resume();
-    }
-    return this;
-  }
-  once(event, listener) {
-    super.once(event, listener);
-    if (event === "data" && this._readableState.flowing !== false) {
-      this.resume();
-    }
-    return this;
-  }
-  resume() {
-    this._readableState.flowing = true;
-    this.stream.resume();
-    return this;
-  }
-  pause() {
-    this._readableState.flowing = false;
-    this.stream.pause();
-    return this;
-  }
-  pipe(dest) {
-    this.on("data", (chunk) => {
-      const wrote = dest.write(chunk);
-      if (wrote === false && typeof dest.once === "function") {
-        this.pause();
-        dest.once("drain", () => this.resume());
-      }
-    });
-    this.on("end", () => dest.end());
-    this.resume();
-    return dest;
-  }
-  unpipe() {
-    return this;
-  }
-  read() {
-    return null;
-  }
-  isPaused() {
-    return this._readableState.flowing === false;
-  }
-  setEncoding() {
-    return this;
-  }
-  _emitData(chunk) {
-    this._readableState.length += chunk.byteLength;
-    this.emit("data", chunk);
-  }
-  _emitEnd() {
-    this._readableState.ended = true;
-    this.emit("end");
-    this.emit("close");
-  }
-  _emitError(error) {
-    this.emit("error", error);
-  }
-  destroy(err) {
-    this.destroyed = true;
-    if (err) {
-      this.emit("error", err);
-    }
-    this.emit("close");
-    return this;
-  }
-};
-
-var Http2ServerResponse = class extends Http2EventEmitter {
-  _stream;
-  _headers = {};
-  _statusCode = 200;
-  headersSent = false;
-  writable = true;
-  writableEnded = false;
-  writableFinished = false;
-  socket;
-  connection;
-  stream;
-  _writableState = { ended: false, finished: false, objectMode: false, corked: 0, length: 0 };
-  constructor(stream) {
-    super();
-    this._stream = stream;
-    this.stream = stream;
-    this.socket = stream.session.socket;
-    this.connection = this.socket;
-  }
-  writeHead(statusCode, headers) {
-    this._statusCode = statusCode;
-    this._headers = {
-      ...this._headers,
-      ...headers ?? {},
-      ":status": statusCode
-    };
-    this._stream.respond(this._headers);
-    this.headersSent = true;
-    return this;
-  }
-  setHeader(name, value) {
-    this._headers[name] = value;
-    return this;
-  }
-  getHeader(name) {
-    return this._headers[name];
-  }
-  hasHeader(name) {
-    return Object.prototype.hasOwnProperty.call(this._headers, name);
-  }
-  removeHeader(name) {
-    delete this._headers[name];
-  }
-  write(data, encodingOrCallback, callback) {
-    if (!(":status" in this._headers)) {
-      this._headers[":status"] = this._statusCode;
-      this._stream.respond(this._headers);
-      this.headersSent = true;
-    }
-    const wrote = this._stream.write(
-      typeof data === "string" && typeof encodingOrCallback === "string" ? Buffer.from(data, encodingOrCallback) : data
-    );
-    const cb = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-    cb?.();
-    return wrote;
-  }
-  end(data) {
-    if (!(":status" in this._headers)) {
-      this._headers[":status"] = this._statusCode;
-      this._stream.respond(this._headers);
-      this.headersSent = true;
-    }
-    this.writableEnded = true;
-    this._writableState.ended = true;
-    this._stream.end(data);
-    queueMicrotask(() => {
-      this.writable = false;
-      this.writableFinished = true;
-      this._writableState.finished = true;
-      this.emit("finish");
-      this.emit("close");
-    });
-    return this;
-  }
-  destroy(err) {
-    if (err) {
-      this.emit("error", err);
-    }
-    this.writable = false;
-    this.writableEnded = true;
-    this.writableFinished = true;
-    this.emit("close");
-    return this;
-  }
-};
-
-var Http2Session = class extends Http2EventEmitter {
-  encrypted = false;
-  alpnProtocol = false;
-  originSet;
-  localSettings = cloneHttp2Settings(DEFAULT_HTTP2_SETTINGS);
-  remoteSettings = cloneHttp2Settings(DEFAULT_HTTP2_SETTINGS);
-  pendingSettingsAck = false;
-  socket;
-  state = cloneHttp2SessionRuntimeState(DEFAULT_HTTP2_SESSION_STATE);
-  _sessionId;
-  _waitStarted = false;
-  _pendingSettingsAckCount = 0;
-  _awaitingInitialSettingsAck = false;
-  _settingsCallbacks = [];
-  constructor(sessionId, socketState) {
-    super();
-    this._sessionId = sessionId;
-    this.socket = new Http2SocketProxy(socketState, () => {
-      setTimeout(() => {
-        this.destroy();
-      }, 0);
-    });
-    this[HTTP2_K_SOCKET] = this.socket;
-  }
-  _retain() {
-    if (this._waitStarted || typeof _networkHttp2SessionPollRaw === "undefined") {
-      return;
-    }
-    this._waitStarted = true;
-    pollRetainedHttp2Handle(
-      "session",
-      this._sessionId,
-      () => this._waitStarted && http2Sessions.get(this._sessionId) === this,
-      () => _networkHttp2SessionPollRaw.applySyncPromise(void 0, [this._sessionId, 0]),
-      (error) => this.emit("error", error instanceof Error ? error : new Error(String(error)))
-    );
-  }
-  _release() {
-    this._waitStarted = false;
-    retainedHttp2Handles.delete(`session:${this._sessionId}`);
-  }
-  _beginInitialSettingsAck() {
-    this._awaitingInitialSettingsAck = true;
-    this._pendingSettingsAckCount += 1;
-    this.pendingSettingsAck = true;
-  }
-  _applyLocalSettings(settings) {
-    this.localSettings = cloneHttp2Settings(settings);
-    if (this._awaitingInitialSettingsAck) {
-      this._awaitingInitialSettingsAck = false;
-      this._pendingSettingsAckCount = Math.max(0, this._pendingSettingsAckCount - 1);
-      this.pendingSettingsAck = this._pendingSettingsAckCount > 0;
-    }
-    this.emit("localSettings", this.localSettings);
-  }
-  _applyRemoteSettings(settings) {
-    this.remoteSettings = cloneHttp2Settings(settings);
-    this.emit("remoteSettings", this.remoteSettings);
-  }
-  _applyRuntimeState(state) {
-    this.state = cloneHttp2SessionRuntimeState(state);
-  }
-  _ackSettings() {
-    this._pendingSettingsAckCount = Math.max(0, this._pendingSettingsAckCount - 1);
-    this.pendingSettingsAck = this._pendingSettingsAckCount > 0;
-    const callback = this._settingsCallbacks.shift();
-    callback?.();
-  }
-  request(headers, options) {
-    if (typeof _networkHttp2SessionRequestRaw === "undefined") {
-      throw new Error("http2 session request bridge is not available");
-    }
-    validateHttp2RequestOptions(options);
-    const streamId = _networkHttp2SessionRequestRaw.applySync(
-      void 0,
-      [
-        this._sessionId,
-        serializeHttp2Headers(normalizeHttp2Headers(headers)),
-        JSON.stringify(options ?? {})
-      ]
-    );
-    const stream = new ClientHttp2Stream(streamId, this);
-    http2Streams.set(streamId, stream);
-    return stream;
-  }
-  settings(settings, callback) {
-    if (callback !== void 0 && typeof callback !== "function") {
-      throw createHttp2ArgTypeError("callback", "function", callback);
-    }
-    if (typeof _networkHttp2SessionSettingsRaw === "undefined") {
-      throw new Error("http2 session settings bridge is not available");
-    }
-    const normalized = validateHttp2Settings(settings);
-    _networkHttp2SessionSettingsRaw.applySync(
-      void 0,
-      [this._sessionId, JSON.stringify(normalized)]
-    );
-    this._pendingSettingsAckCount += 1;
-    this.pendingSettingsAck = true;
-    if (callback) {
-      this._settingsCallbacks.push(callback);
-    }
-  }
-  setLocalWindowSize(windowSize) {
-    if (typeof windowSize !== "number" || Number.isNaN(windowSize)) {
-      throw createHttp2ArgTypeError("windowSize", "number", windowSize);
-    }
-    if (!Number.isInteger(windowSize) || windowSize < 0 || windowSize > 2147483647) {
-      const error = new RangeError(
-        `The value of "windowSize" is out of range. It must be >= 0 && <= 2147483647. Received ${windowSize}`
-      );
-      error.code = "ERR_OUT_OF_RANGE";
-      throw error;
-    }
-    if (typeof _networkHttp2SessionSetLocalWindowSizeRaw === "undefined") {
-      throw new Error("http2 session setLocalWindowSize bridge is not available");
-    }
-    const result = _networkHttp2SessionSetLocalWindowSizeRaw.applySync(
-      void 0,
-      [this._sessionId, windowSize]
-    );
-    this._applyRuntimeState(parseHttp2SessionState(result)?.state);
-  }
-  goaway(code = 0, lastStreamID = 0, opaqueData) {
-    const payload = opaqueData === void 0 ? null : Buffer.isBuffer(opaqueData) ? opaqueData.toString("base64") : typeof opaqueData === "string" ? Buffer.from(opaqueData).toString("base64") : Buffer.from(opaqueData).toString("base64");
-    _networkHttp2SessionGoawayRaw?.applySync(void 0, [this._sessionId, code, lastStreamID, payload]);
-  }
-  close() {
-    const pendingStreams = Array.from(http2Streams.entries()).filter(
-      ([, stream]) => typeof stream._belongsTo === "function" && stream._belongsTo(this) && !stream._hasReceivedResponse()
-    );
-    if (pendingStreams.length > 0) {
-      const error = createHttp2Error(
-        "ERR_HTTP2_GOAWAY_SESSION",
-        "The HTTP/2 session is closing before the stream could be established."
-      );
-      queueMicrotask(() => {
-        for (const [streamId, stream] of pendingStreams) {
-          if (http2Streams.get(streamId) !== stream) {
-            continue;
-          }
-          stream.emit("error", error);
-          stream.emit("close");
-          http2Streams.delete(streamId);
-        }
-      });
-      if (typeof _networkHttp2SessionDestroyRaw !== "undefined") {
-        _networkHttp2SessionDestroyRaw.applySync(void 0, [this._sessionId]);
-        return;
-      }
-    }
-    _networkHttp2SessionCloseRaw?.applySync(void 0, [this._sessionId]);
-    setTimeout(() => {
-      if (!http2Sessions.has(this._sessionId)) {
-        return;
-      }
-      this._release();
-      this.emit("close");
-      http2Sessions.delete(this._sessionId);
-      _unregisterHandle?.(`http2:session:${this._sessionId}`);
-    }, 50);
-  }
-  destroy() {
-    if (typeof _networkHttp2SessionDestroyRaw !== "undefined") {
-      _networkHttp2SessionDestroyRaw.applySync(void 0, [this._sessionId]);
-      return;
-    }
-    this.close();
-  }
-};
-
-var Http2Server = class extends Http2EventEmitter {
-  allowHalfOpen;
-  allowHTTP1;
-  encrypted;
-  _serverId;
-  listening = false;
-  _address = null;
-  _options;
-  _timeoutMs = 0;
-  _waitStarted = false;
-  constructor(options, listener, encrypted) {
-    super();
-    this.allowHalfOpen = options?.allowHalfOpen === true;
-    this.allowHTTP1 = options?.allowHTTP1 === true;
-    this.encrypted = encrypted;
-    const initialSettings = options?.settings && typeof options.settings === "object" && !Array.isArray(options.settings) ? cloneHttp2Settings(options.settings) : {};
-    this._options = {
-      ...options ?? {},
-      settings: initialSettings
-    };
-    this._serverId = nextHttp2ServerId++;
-    this[HTTP2_OPTIONS] = {
-      settings: cloneHttp2Settings(initialSettings),
-      unknownProtocolTimeout: 1e4,
-      ...encrypted ? { ALPNProtocols: ["h2"] } : {}
-    };
-    if (listener) {
-      this.on("request", listener);
-    }
-    http2Servers.set(this._serverId, this);
-  }
-  address() {
-    return this._address;
-  }
-  _retain() {
-    if (this._waitStarted || typeof _networkHttp2ServerPollRaw === "undefined") {
-      return;
-    }
-    this._waitStarted = true;
-    pollRetainedHttp2Handle(
-      "server",
-      this._serverId,
-      () => this._waitStarted && http2Servers.get(this._serverId) === this,
-      () => _networkHttp2ServerPollRaw.applySyncPromise(void 0, [this._serverId, 0]),
-      (error) => this.emit("error", error instanceof Error ? error : new Error(String(error)))
-    );
-  }
-  _release() {
-    this._waitStarted = false;
-    retainedHttp2Handles.delete(`server:${this._serverId}`);
-  }
-  setTimeout(timeout, callback) {
-    this._timeoutMs = normalizeSocketTimeout(timeout);
-    if (callback) {
-      this.on("timeout", callback);
-    }
-    return this;
-  }
-  updateSettings(settings) {
-    const normalized = validateHttp2Settings(settings);
-    const mergedSettings = {
-      ...cloneHttp2Settings(this._options.settings),
-      ...cloneHttp2Settings(normalized)
-    };
-    this._options = {
-      ...this._options,
-      settings: mergedSettings
-    };
-    const optionsState = this[HTTP2_OPTIONS];
-    optionsState.settings = cloneHttp2Settings(mergedSettings);
-    return this;
-  }
-  listen(portOrOptions, hostOrCallback, backlogOrCallback, callback) {
-    if (typeof _networkHttp2ServerListenRaw === "undefined") {
-      throw new Error(`http2.${this.encrypted ? "createSecureServer" : "createServer"} is not supported in sandbox`);
-    }
-    const options = normalizeListenArgs(portOrOptions, hostOrCallback, backlogOrCallback, callback);
-    if (options.callback) {
-      this.once("listening", options.callback);
-    }
-    const payload = {
-      serverId: this._serverId,
-      secure: this.encrypted,
-      port: options.port,
-      host: options.host,
-      backlog: options.backlog,
-      allowHalfOpen: this.allowHalfOpen,
-      allowHTTP1: this._options.allowHTTP1 === true,
-      timeout: this._timeoutMs,
-      settings: this._options.settings,
-      remoteCustomSettings: this._options.remoteCustomSettings,
-      tls: this.encrypted ? buildSerializedTlsOptions(
-        {
-          ...this._options,
-          ...portOrOptions && typeof portOrOptions === "object" ? portOrOptions : {}
-        },
-        { isServer: true }
-      ) : void 0
-    };
-    const result = JSON.parse(
-      _networkHttp2ServerListenRaw.applySyncPromise(void 0, [JSON.stringify(payload)])
-    );
-    this._address = result.address ?? null;
-    this.listening = true;
-    this._retain();
-    _registerHandle?.(`http2:server:${this._serverId}`, "http2 server");
-    this.emit("listening");
-    return this;
-  }
-  close(callback) {
-    if (callback) {
-      this.once("close", callback);
-    }
-    if (!this.listening) {
-      this._release();
-      queueMicrotask(() => this.emit("close"));
-      return this;
-    }
-    void _networkHttp2ServerCloseRaw?.apply(void 0, [this._serverId], {
-      result: { promise: true }
-    });
-    setTimeout(() => {
-      if (!this.listening) {
-        return;
-      }
-      this.listening = false;
-      this._release();
-      this.emit("close");
-      http2Servers.delete(this._serverId);
-      _unregisterHandle?.(`http2:server:${this._serverId}`);
-    }, 50);
-    return this;
-  }
-};
-
-function createHttp2Server(secure, optionsOrListener, maybeListener) {
-  const listener = typeof optionsOrListener === "function" ? optionsOrListener : maybeListener;
-  const options = optionsOrListener && typeof optionsOrListener === "object" && !Array.isArray(optionsOrListener) ? optionsOrListener : void 0;
-  return new Http2Server(options, listener, secure);
-}
-
-function connectHttp2(authorityOrOptions, optionsOrListener, maybeListener) {
-  if (typeof _networkHttp2SessionConnectRaw === "undefined") {
-    throw new Error("http2.connect is not supported in sandbox");
-  }
-  const { authority, options, listener } = normalizeHttp2ConnectArgs(
-    authorityOrOptions,
-    optionsOrListener,
-    maybeListener
-  );
-  if (authority.protocol !== "http:" && authority.protocol !== "https:") {
-    throw createHttp2Error(
-      "ERR_HTTP2_UNSUPPORTED_PROTOCOL",
-      `protocol "${authority.protocol}" is unsupported.`
-    );
-  }
-  validateHttp2ConnectOptions(options);
-  const socketId = options.createConnection ? resolveHttp2SocketId(options.createConnection()) : void 0;
-  const rawPort = options.port ?? authority.port;
-  const port = rawPort === "" || rawPort === void 0 || rawPort === null ? void 0 : Number(rawPort);
-  const response = JSON.parse(
-    _networkHttp2SessionConnectRaw.applySyncPromise(
-      void 0,
-      [
-        JSON.stringify({
-          authority: authority.toString(),
-          protocol: authority.protocol,
-          host: options.host ?? options.hostname ?? authority.hostname,
-          port,
-          localAddress: options.localAddress,
-          family: options.family,
-          socketId,
-          settings: options.settings,
-          remoteCustomSettings: options.remoteCustomSettings,
-          tls: authority.protocol === "https:" ? buildSerializedTlsOptions(options, { servername: typeof options.servername === "string" ? options.servername : authority.hostname }) : void 0
-        })
-      ]
-    )
-  );
-  const initialState = parseHttp2SessionState(response.state);
-  const session = new Http2Session(
-    response.sessionId,
-    initialState?.socket ?? void 0
-  );
-  applyHttp2SessionState(session, initialState);
-  session._beginInitialSettingsAck();
-  session._retain();
-  if (listener) {
-    session.once("connect", () => listener(session));
-  }
-  http2Sessions.set(response.sessionId, session);
-  _registerHandle?.(`http2:session:${response.sessionId}`, "http2 session");
-  if (authority.protocol === "https:") {
-    session.socket.once("secureConnect", () => {
-    });
-  }
-  return session;
-}
-
-function getOrCreateHttp2Session(sessionId, state) {
-  let session = http2Sessions.get(sessionId);
-  if (!session) {
-    session = new Http2Session(sessionId, state?.socket ?? void 0);
-    http2Sessions.set(sessionId, session);
-  }
-  applyHttp2SessionState(session, state);
-  return session;
-}
-
-function queuePendingHttp2ClientStreamEvent(streamId, event) {
-  const pending = pendingHttp2ClientStreamEvents.get(streamId) ?? [];
-  pending.push(event);
-  pendingHttp2ClientStreamEvents.set(streamId, pending);
-}
-
-function schedulePendingHttp2ClientStreamEventsFlush(streamId) {
-  if (scheduledHttp2ClientStreamFlushes.has(streamId)) {
-    return;
-  }
-  scheduledHttp2ClientStreamFlushes.add(streamId);
-  const flush = () => {
-    scheduledHttp2ClientStreamFlushes.delete(streamId);
-    flushPendingHttp2ClientStreamEvents(streamId);
-  };
-  const scheduleImmediate = globalThis.setImmediate;
-  if (typeof scheduleImmediate === "function") {
-    scheduleImmediate(flush);
-    return;
-  }
-  setTimeout(flush, 0);
-}
-
-function flushPendingHttp2ClientStreamEvents(streamId) {
-  const stream = http2Streams.get(streamId);
-  if (!stream || typeof stream._emitResponseHeaders !== "function") {
-    return;
-  }
-  const pending = pendingHttp2ClientStreamEvents.get(streamId);
-  if (!pending || pending.length === 0) {
-    return;
-  }
-  pendingHttp2ClientStreamEvents.delete(streamId);
-  for (const event of pending) {
-    if (event.kind === "push") {
-      stream._emitPush(parseHttp2Headers(event.data), event.extraNumber);
-      continue;
-    }
-    if (event.kind === "responseHeaders") {
-      stream._emitResponseHeaders(parseHttp2Headers(event.data));
-      continue;
-    }
-    if (event.kind === "data") {
-      stream._emitDataChunk(event.data);
-      continue;
-    }
-    if (event.kind === "end") {
-      stream._emitEnd();
-      continue;
-    }
-    if (event.kind === "error") {
-      stream.emit("error", parseHttp2ErrorPayload(event.data));
-      continue;
-    }
-    if (typeof stream._emitClose === "function") {
-      stream._emitClose(event.extraNumber);
-    } else {
-      stream.emit("close");
-    }
-    http2Streams.delete(streamId);
-  }
-}
-
-function http2Dispatch(kind, id, data, extra, extraNumber, extraHeaders, flags) {
-  if (kind === "sessionConnect") {
-    const session = http2Sessions.get(id);
-    if (!session) return;
-    const state = parseHttp2SessionState(data);
-    applyHttp2SessionState(session, state);
-    if (session.encrypted) {
-      session.socket.emit("secureConnect");
-    }
-    session.emit("connect");
-    return;
-  }
-  if (kind === "sessionClose") {
-    const session = http2Sessions.get(id);
-    if (!session) return;
-    session._release();
-    session.emit("close");
-    http2Sessions.delete(id);
-    _unregisterHandle?.(`http2:session:${id}`);
-    return;
-  }
-  if (kind === "sessionError") {
-    const session = http2Sessions.get(id);
-    if (!session) return;
-    session.emit("error", parseHttp2ErrorPayload(data));
-    return;
-  }
-  if (kind === "sessionLocalSettings") {
-    const session = http2Sessions.get(id);
-    if (!session) return;
-    session._applyLocalSettings(parseHttp2Headers(data));
-    return;
-  }
-  if (kind === "sessionRemoteSettings") {
-    const session = http2Sessions.get(id);
-    if (!session) return;
-    session._applyRemoteSettings(parseHttp2Headers(data));
-    return;
-  }
-  if (kind === "sessionSettingsAck") {
-    const session = http2Sessions.get(id);
-    if (!session) return;
-    session._ackSettings();
-    return;
-  }
-  if (kind === "sessionGoaway") {
-    const session = http2Sessions.get(id);
-    if (!session) return;
-    session.emit(
-      "goaway",
-      Number(extraNumber ?? 0),
-      Number(flags ?? 0),
-      data ? Buffer.from(data, "base64") : Buffer.alloc(0)
-    );
-    return;
-  }
-  if (kind === "clientPushStream") {
-    const session = http2Sessions.get(id);
-    if (!session) return;
-    const streamId = Number(data);
-    const stream = new ClientHttp2Stream(streamId, session, true);
-    http2Streams.set(streamId, stream);
-    session.emit("stream", stream, parseHttp2Headers(extraHeaders), Number(flags ?? 0));
-    schedulePendingHttp2ClientStreamEventsFlush(streamId);
-    return;
-  }
-  if (kind === "clientPushHeaders") {
-    queuePendingHttp2ClientStreamEvent(id, {
-      kind: "push",
-      data,
-      extraNumber: Number(extraNumber ?? 0)
-    });
-    schedulePendingHttp2ClientStreamEventsFlush(id);
-    return;
-  }
-  if (kind === "clientResponseHeaders") {
-    queuePendingHttp2ClientStreamEvent(id, {
-      kind: "responseHeaders",
-      data
-    });
-    schedulePendingHttp2ClientStreamEventsFlush(id);
-    return;
-  }
-  if (kind === "clientData") {
-    queuePendingHttp2ClientStreamEvent(id, {
-      kind: "data",
-      data
-    });
-    schedulePendingHttp2ClientStreamEventsFlush(id);
-    return;
-  }
-  if (kind === "clientEnd") {
-    queuePendingHttp2ClientStreamEvent(id, {
-      kind: "end"
-    });
-    schedulePendingHttp2ClientStreamEventsFlush(id);
-    return;
-  }
-  if (kind === "clientClose") {
-    queuePendingHttp2ClientStreamEvent(id, {
-      kind: "close",
-      extraNumber: Number(extraNumber ?? 0)
-    });
-    schedulePendingHttp2ClientStreamEventsFlush(id);
-    return;
-  }
-  if (kind === "clientError") {
-    queuePendingHttp2ClientStreamEvent(id, {
-      kind: "error",
-      data
-    });
-    schedulePendingHttp2ClientStreamEventsFlush(id);
-    return;
-  }
-  if (kind === "serverStream") {
-    const server = http2Servers.get(id);
-    if (!server) return;
-    const sessionState = parseHttp2SessionState(extra);
-    const sessionId = Number(extraNumber);
-    const session = getOrCreateHttp2Session(sessionId, sessionState);
-    const streamId = Number(data);
-    const headers = parseHttp2Headers(extraHeaders);
-    const numericFlags = Number(flags ?? 0);
-    const stream = new ServerHttp2Stream(streamId, session, headers);
-    http2Streams.set(streamId, stream);
-    server.emit("stream", stream, headers, numericFlags);
-    if (server.listenerCount("request") > 0) {
-      const request = new Http2ServerRequest(headers, session.socket, stream);
-      const response = new Http2ServerResponse(stream);
-      stream.on("data", (chunk) => {
-        request._emitData(chunk);
-      });
-      stream.on("end", () => {
-        request._emitEnd();
-      });
-      stream.on("error", (error) => {
-        request._emitError(error);
-      });
-      stream.on("drain", () => {
-        response.emit("drain");
-      });
-      server.emit("request", request, response);
-    }
-    return;
-  }
-  if (kind === "serverStreamData") {
-    const stream = http2Streams.get(id);
-    if (!stream || typeof stream._emitData !== "function") return;
-    stream._emitData(data);
-    return;
-  }
-  if (kind === "serverStreamEnd") {
-    const stream = http2Streams.get(id);
-    if (!stream || typeof stream._emitEnd !== "function") return;
-    stream._emitEnd();
-    return;
-  }
-  if (kind === "serverStreamDrain") {
-    const stream = http2Streams.get(id);
-    if (!stream || typeof stream._emitDrain !== "function") return;
-    stream._emitDrain();
-    return;
-  }
-  if (kind === "serverStreamError") {
-    const stream = http2Streams.get(id);
-    if (!stream) return;
-    if (typeof stream._shouldSuppressHostError === "function" && stream._shouldSuppressHostError()) {
-      return;
-    }
-    stream.emit("error", parseHttp2ErrorPayload(data));
-    return;
-  }
-  if (kind === "serverStreamClose") {
-    const stream = http2Streams.get(id);
-    if (!stream || typeof stream._emitClose !== "function") return;
-    stream._emitClose(Number(extraNumber ?? 0));
-    http2Streams.delete(id);
-    return;
-  }
-  if (kind === "serverSession") {
-    const server = http2Servers.get(id);
-    if (!server) return;
-    const sessionId = Number(extraNumber);
-    const session = getOrCreateHttp2Session(sessionId, parseHttp2SessionState(data));
-    server.emit("session", session);
-    return;
-  }
-  if (kind === "serverTimeout") {
-    http2Servers.get(id)?.emit("timeout");
-    return;
-  }
-  if (kind === "serverConnection") {
-    http2Servers.get(id)?.emit("connection", new Http2SocketProxy(parseHttp2SocketState(data) ?? void 0));
-    return;
-  }
-  if (kind === "serverSecureConnection") {
-    http2Servers.get(id)?.emit("secureConnection", new Http2SocketProxy(parseHttp2SocketState(data) ?? void 0));
-    return;
-  }
-  if (kind === "serverClose") {
-    const server = http2Servers.get(id);
-    if (!server) return;
-    server.listening = false;
-    server._release();
-    server.emit("close");
-    http2Servers.delete(id);
-    _unregisterHandle?.(`http2:server:${id}`);
-    return;
-  }
-  if (kind === "serverCompatRequest") {
-    pendingHttp2CompatRequests.set(Number(extraNumber), {
-      serverId: id,
-      requestJson: data ?? "{}"
-    });
-    void dispatchHttp2CompatibilityRequest(id, Number(extraNumber));
-  }
-}
-
-function dispatchPolledHttp2Event(event) {
-  if (typeof event === "string") {
-    event = JSON.parse(event);
-  }
-  if (!event || typeof event !== "object" || typeof event.kind !== "string") {
-    return false;
-  }
-  const id = Number(event.id);
-  if (!Number.isFinite(id)) {
-    return false;
-  }
-  http2Dispatch(
-    event.kind,
-    id,
-    typeof event.data === "string" ? event.data : void 0,
-    typeof event.extra === "string" ? event.extra : void 0,
-    typeof event.extraNumber === "string" || typeof event.extraNumber === "number" ? event.extraNumber : void 0,
-    typeof event.extraHeaders === "string" ? event.extraHeaders : void 0,
-    typeof event.flags === "string" || typeof event.flags === "number" ? event.flags : void 0
-  );
-  return event.kind === "serverClose" || event.kind === "sessionClose";
-}
-
-function pollRetainedHttp2Handle(kind, id, isActive, poll, onError) {
-  const handleKey = `${kind}:${id}`;
-  const handle = {
-    active: true,
-    running: false,
-    pendingWake: false,
-    fallbackTimer: null,
-    poll,
-    tick: null
-  };
-  const clearFallbackTimer = () => {
-    if (handle.fallbackTimer !== null) {
-      clearTimeout(handle.fallbackTimer);
-      handle.fallbackTimer = null;
-    }
-  };
-  const tick = () => {
-    clearFallbackTimer();
-    if (!isActive()) {
-      handle.active = false;
-      retainedHttp2Handles.delete(handleKey);
-      return;
-    }
-    if (handle.running) {
-      handle.pendingWake = true;
-      return;
-    }
-    handle.running = true;
-    try {
-      let sawTerminal = false;
-      let hitDrainLimit = false;
-      do {
-        handle.pendingWake = false;
-        hitDrainLimit = false;
-        let i = 0;
-        for (; i < 64 && isActive(); i++) {
-          const event = poll();
-          if (!event) {
-            break;
-          }
-          sawTerminal = dispatchPolledHttp2Event(event);
-          if (sawTerminal) {
-            break;
-          }
-        }
-        hitDrainLimit = i === 64;
-      } while (!sawTerminal && handle.pendingWake && isActive());
-      if (!sawTerminal && hitDrainLimit && isActive()) {
-        handle.fallbackTimer = setTimeout(tick, 0);
-      } else if (!sawTerminal && isActive()) {
-        handle.fallbackTimer = setTimeout(tick, 10);
-      } else if (sawTerminal) {
-        handle.active = false;
-        retainedHttp2Handles.delete(handleKey);
-      }
-    } catch (error) {
-      onError(error);
-      if (isActive()) {
-        handle.fallbackTimer = setTimeout(tick, 10);
-      } else {
-        handle.active = false;
-        retainedHttp2Handles.delete(handleKey);
-      }
-    } finally {
-      handle.running = false;
-      if (handle.pendingWake && handle.active && isActive()) {
-        clearFallbackTimer();
-        handle.fallbackTimer = setTimeout(tick, 0);
-      }
-    }
-  };
-  handle.tick = tick;
-  retainedHttp2Handles.set(handleKey, handle);
-  setTimeout(tick, 0);
-}
-
-function wakeRetainedHttp2Handle(kind, id) {
-  const handle = retainedHttp2Handles.get(`${kind}:${id}`);
-  if (!handle || !handle.active) {
-    return;
-  }
-  handle.pendingWake = true;
-  if (handle.running) {
-    return;
-  }
-  if (typeof queueMicrotask === "function") {
-    queueMicrotask(() => {
-      if (retainedHttp2Handles.get(`${kind}:${id}`) === handle) {
-        handle.tick?.();
-      }
-    });
-    return;
-  }
-  setTimeout(() => {
-    if (retainedHttp2Handles.get(`${kind}:${id}`) === handle) {
-      handle.tick?.();
-    }
-  }, 0);
-}
-
-function onHttp2RetainDispatch(payload) {
-  if (!payload || payload.event !== "http2") {
-    return;
-  }
-  const kind = payload.kind === "server" ? "server" : payload.kind === "session" ? "session" : null;
-  const id = Number(payload.id);
-  if (!kind || !Number.isFinite(id)) {
-    return;
-  }
-  wakeRetainedHttp2Handle(kind, id);
-}
-
-function scheduleQueuedHttp2DispatchDrain() {
-  if (scheduledHttp2DispatchDrain) {
-    return;
-  }
-  scheduledHttp2DispatchDrain = true;
-  const drain = () => {
-    scheduledHttp2DispatchDrain = false;
-    while (queuedHttp2DispatchEvents.length > 0) {
-      const event = queuedHttp2DispatchEvents.shift();
-      if (!event) {
-        continue;
-      }
-      http2Dispatch(
-        event.kind,
-        event.id,
-        event.data,
-        event.extra,
-        event.extraNumber,
-        event.extraHeaders,
-        event.flags
-      );
-    }
-  };
-  queueMicrotask(drain);
-}
-
-function onHttp2Dispatch(_eventType, payload) {
-  if (!payload || typeof payload !== "object") {
-    return;
-  }
-  const event = payload;
-  if (typeof event.kind !== "string" || typeof event.id !== "number") {
-    return;
-  }
-  if (process.env.SECURE_EXEC_DEBUG_HTTP2_BRIDGE === "1") {
-    console.error("[secure-exec http2 isolate dispatch]", event.kind, event.id);
-  }
-  const kind = event.kind;
-  const id = event.id;
-  const data = typeof event.data === "string" ? event.data : void 0;
-  const extra = typeof event.extra === "string" ? event.extra : void 0;
-  const normalizedExtraNumber = typeof event.extraNumber === "string" || typeof event.extraNumber === "number" ? event.extraNumber : void 0;
-  const extraHeaders = typeof event.extraHeaders === "string" ? event.extraHeaders : void 0;
-  const flags = typeof event.flags === "string" || typeof event.flags === "number" ? event.flags : void 0;
-  queuedHttp2DispatchEvents.push({
-    kind,
-    id,
-    data,
-    extra,
-    extraNumber: normalizedExtraNumber,
-    extraHeaders,
-    flags
-  });
-  scheduleQueuedHttp2DispatchDrain();
-}
-
-exposeCustomGlobal("_http2RetainDispatch", onHttp2RetainDispatch);
-
-var http2 = {
-  Http2ServerRequest,
-  Http2ServerResponse,
-  Http2Stream,
-  NghttpError,
-  nghttp2ErrorString,
-  constants: {
-    HTTP2_HEADER_METHOD: ":method",
-    HTTP2_HEADER_PATH: ":path",
-    HTTP2_HEADER_SCHEME: ":scheme",
-    HTTP2_HEADER_AUTHORITY: ":authority",
-    HTTP2_HEADER_STATUS: ":status",
-    HTTP2_HEADER_CONTENT_TYPE: "content-type",
-    HTTP2_HEADER_CONTENT_LENGTH: "content-length",
-    HTTP2_HEADER_LAST_MODIFIED: "last-modified",
-    HTTP2_HEADER_ACCEPT: "accept",
-    HTTP2_HEADER_ACCEPT_ENCODING: "accept-encoding",
-    HTTP2_METHOD_GET: "GET",
-    HTTP2_METHOD_POST: "POST",
-    HTTP2_METHOD_PUT: "PUT",
-    HTTP2_METHOD_DELETE: "DELETE",
-    ...HTTP2_INTERNAL_BINDING_CONSTANTS,
-    DEFAULT_SETTINGS_MAX_HEADER_LIST_SIZE: 65535
-  },
-  getDefaultSettings() {
-    return cloneHttp2Settings(DEFAULT_HTTP2_SETTINGS);
-  },
-  connect: connectHttp2,
-  createServer: createHttp2Server.bind(void 0, false),
-  createSecureServer: createHttp2Server.bind(void 0, true)
-};
-
-export { ClientHttp2Stream, DEFAULT_HTTP2_SESSION_STATE, DEFAULT_HTTP2_SETTINGS, HTTP2_INTERNAL_BINDING_CONSTANTS, HTTP2_K_SOCKET, HTTP2_NGHTTP2_ERROR_MESSAGES, HTTP2_OPTIONS, Http2EventEmitter, Http2Server, Http2ServerRequest, Http2ServerResponse, Http2Session, Http2SocketProxy, Http2Stream, NghttpError, S_IFDIR, S_IFIFO, S_IFLNK, S_IFMT, S_IFREG, S_IFSOCK, ServerHttp2Stream, applyHttp2SessionState, cloneHttp2SessionRuntimeState, cloneHttp2Settings, connectHttp2, createHttp2ArgTypeError, createHttp2BridgeStat, createHttp2Error, createHttp2InvalidArgValueError, createHttp2PayloadForbiddenError, createHttp2Server, createHttp2SettingRangeError, createHttp2SettingTypeError, flushPendingHttp2ClientStreamEvents, formatHttp2InvalidValue, getCompleteUtf8PrefixLength, getOrCreateHttp2Session, http2, http2Dispatch, http2Servers, http2Sessions, http2Streams, nextHttp2ServerId, nghttp2ErrorString, normalizeHttp2Authority, normalizeHttp2ConnectArgs, normalizeHttp2FileResponseOptions, normalizeHttp2Headers, onHttp2Dispatch, parseHttp2ErrorPayload, parseHttp2Headers, parseHttp2SessionRuntimeState, parseHttp2SessionState, parseHttp2SocketState, pendingHttp2ClientStreamEvents, pendingHttp2CompatRequests, queuePendingHttp2ClientStreamEvent, queuedHttp2DispatchEvents, resolveHttp2SocketId, schedulePendingHttp2ClientStreamEventsFlush, scheduleQueuedHttp2DispatchDrain, scheduledHttp2ClientStreamFlushes, scheduledHttp2DispatchDrain, serializeHttp2Headers, sliceHttp2FileBody, validateHttp2ConnectOptions, validateHttp2RequestOptions, validateHttp2Settings };
diff --git a/packages/build-tools/bridge-src/builtins/misc-stubs.ts b/packages/build-tools/bridge-src/builtins/misc-stubs.ts
deleted file mode 100644
index ea87f0834..000000000
--- a/packages/build-tools/bridge-src/builtins/misc-stubs.ts
+++ /dev/null
@@ -1,620 +0,0 @@
-import { EventEmitter, once } from "./events.js";
-import { process2 } from "./process.js";
-
-function createWorkerThreadsNotImplementedError(feature) {
-  const error = new Error(`node:worker_threads ${feature} is not available in the secure-exec guest runtime`);
-  error.code = "ERR_NOT_IMPLEMENTED";
-  return error;
-}
-
-class WorkerThreadPort extends EventEmitter {
-  postMessage() {
-  }
-  start() {
-  }
-  close() {
-    this.emit("close");
-  }
-  unref() {
-    return this;
-  }
-  ref() {
-    return this;
-  }
-}
-
-class WorkerThreadMessageChannel {
-  constructor() {
-    this.port1 = new WorkerThreadPort();
-    this.port2 = new WorkerThreadPort();
-  }
-}
-
-class WorkerThreadWorker extends EventEmitter {
-  constructor() {
-    super();
-    throw createWorkerThreadsNotImplementedError("Worker");
-  }
-}
-
-var builtinWorkerThreadsModule = {
-  BroadcastChannel: globalThis.BroadcastChannel,
-  MessageChannel: globalThis.MessageChannel ?? WorkerThreadMessageChannel,
-  MessagePort: globalThis.MessagePort ?? WorkerThreadPort,
-  SHARE_ENV: Symbol.for("secure-exec.worker_threads.SHARE_ENV"),
-  Worker: WorkerThreadWorker,
-  getEnvironmentData() {
-    return void 0;
-  },
-  isMainThread: true,
-  markAsUncloneable() {
-  },
-  markAsUntransferable() {
-  },
-  moveMessagePortToContext() {
-    throw createWorkerThreadsNotImplementedError("moveMessagePortToContext");
-  },
-  parentPort: null,
-  postMessageToThread() {
-    throw createWorkerThreadsNotImplementedError("postMessageToThread");
-  },
-  receiveMessageOnPort() {
-    return void 0;
-  },
-  resourceLimits: {},
-  setEnvironmentData() {
-  },
-  threadId: 0,
-  workerData: null
-};
-
-// NOTE: read the live `process2` import lazily inside each function (call time,
-// after all modules have initialized). A load-time snapshot `var process_default =
-// process2` would capture `undefined`, because misc-stubs evaluates far earlier than
-// process.ts in the bundle's module-cycle order.
-function ttyIsatty(fd) {
-  if (fd === 0) {
-    return !!process2.stdin?.isTTY;
-  }
-  if (fd === 1) {
-    return !!process2.stdout?.isTTY;
-  }
-  if (fd === 2) {
-    return !!process2.stderr?.isTTY;
-  }
-  return false;
-}
-
-function TtyReadStream(fd) {
-  return fd === 0 ? process2.stdin : void 0;
-}
-
-function TtyWriteStream(fd) {
-  if (fd === 1) {
-    return process2.stdout;
-  }
-  if (fd === 2) {
-    return process2.stderr;
-  }
-  return void 0;
-}
-
-var builtinTtyModule = {
-  ReadStream: class ReadStream {
-    constructor(fd) {
-      return TtyReadStream(fd);
-    }
-  },
-  WriteStream: class WriteStream {
-    constructor(fd) {
-      return TtyWriteStream(fd);
-    }
-  },
-  isatty: ttyIsatty
-};
-
-async function collectReadableChunks(input) {
-  const readable = getNodeReadableAsyncIterable(input);
-  if (readable) {
-    const chunks = [];
-    for await (const chunk of readable) {
-      chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk ?? []));
-    }
-    return chunks;
-  }
-  if (input && typeof input[Symbol.asyncIterator] === "function") {
-    const chunks = [];
-    for await (const chunk of input) {
-      chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk ?? []));
-    }
-    return chunks;
-  }
-  if (input && typeof input.getReader === "function") {
-    const reader = input.getReader();
-    const chunks = [];
-    try {
-      while (true) {
-        const { value, done } = await reader.read();
-        if (done) break;
-        chunks.push(Buffer.from(value ?? []));
-      }
-    } finally {
-      reader.releaseLock?.();
-    }
-    return chunks;
-  }
-  throw new TypeError("expected an async iterable or WHATWG ReadableStream");
-}
-
-function createBuiltinBlob(buffer, type = "") {
-  return {
-    size: buffer.byteLength,
-    type,
-    async arrayBuffer() {
-      return buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
-    },
-    stream() {
-      return new ReadableStream({
-        start(controller) {
-          controller.enqueue(buffer);
-          controller.close();
-        }
-      });
-    },
-    async text() {
-      return buffer.toString("utf8");
-    }
-  };
-}
-
-var builtinStreamConsumersModule = {
-  async arrayBuffer(stream) {
-    const chunks = await collectReadableChunks(stream);
-    const buffer = Buffer.concat(chunks);
-    return buffer.buffer.slice(buffer.byteOffset, buffer.byteOffset + buffer.byteLength);
-  },
-  async blob(stream) {
-    return createBuiltinBlob(await builtinStreamConsumersModule.buffer(stream));
-  },
-  async buffer(stream) {
-    return Buffer.concat(await collectReadableChunks(stream));
-  },
-  async json(stream) {
-    return JSON.parse(await builtinStreamConsumersModule.text(stream));
-  },
-  async text(stream) {
-    return (await builtinStreamConsumersModule.buffer(stream)).toString("utf8");
-  }
-};
-
-function getNodeReadableAsyncIterable(stream) {
-  if (
-    !stream ||
-    typeof stream.on !== "function" ||
-    (typeof stream.read !== "function" &&
-      typeof stream.pipe !== "function" &&
-      typeof stream.resume !== "function")
-  ) {
-    return null;
-  }
-  return {
-    async *[Symbol.asyncIterator]() {
-      const queuedChunks = [];
-      const pendingResolves = [];
-      let done = false;
-      let error = null;
-      const cleanup = [];
-      const removeListener =
-        typeof stream.off === "function"
-          ? stream.off.bind(stream)
-          : typeof stream.removeListener === "function"
-            ? stream.removeListener.bind(stream)
-            : null;
-      const flush = () => {
-        while (pendingResolves.length > 0) {
-          if (error) {
-            pendingResolves.shift()?.(Promise.reject(error));
-            continue;
-          }
-          if (queuedChunks.length > 0) {
-            pendingResolves.shift()?.(
-              Promise.resolve({ done: false, value: queuedChunks.shift() })
-            );
-            continue;
-          }
-          if (done) {
-            pendingResolves.shift()?.(Promise.resolve({ done: true, value: void 0 }));
-            continue;
-          }
-          break;
-        }
-      };
-      const add = (eventName, handler) => {
-        stream.on(eventName, handler);
-        cleanup.push(() => removeListener?.(eventName, handler));
-      };
-      const onData = (chunk) => {
-        queuedChunks.push(chunk);
-        flush();
-      };
-      const onEnd = () => {
-        done = true;
-        flush();
-      };
-      const onError = (reason) => {
-        error = reason;
-        done = true;
-        flush();
-      };
-      add("data", onData);
-      add("end", onEnd);
-      add("close", onEnd);
-      add("error", onError);
-      stream.resume?.();
-      try {
-        while (true) {
-          if (error) {
-            throw error;
-          }
-          if (queuedChunks.length > 0) {
-            yield queuedChunks.shift();
-            continue;
-          }
-          if (done) {
-            return;
-          }
-          const result = await new Promise((resolve) => {
-            pendingResolves.push(resolve);
-          });
-          if (result.done) {
-            return;
-          }
-          yield result.value;
-        }
-      } finally {
-        while (cleanup.length > 0) {
-          cleanup.pop()?.();
-        }
-      }
-    }
-  };
-}
-
-var builtinStreamPromisesModule = {
-  finished(stream) {
-    return new Promise((resolve, reject) => {
-      if (!stream || typeof stream !== "object") {
-        reject(new TypeError("finished() expects a stream"));
-        return;
-      }
-      const cleanup = [];
-      const add = (eventName, handler) => {
-        stream?.once?.(eventName, handler);
-        cleanup.push(() => stream?.off?.(eventName, handler));
-      };
-      const settle = (callback) => (value) => {
-        while (cleanup.length > 0) {
-          cleanup.pop()?.();
-        }
-        callback(value);
-      };
-      add("finish", settle(resolve));
-      add("end", settle(resolve));
-      add("close", settle(resolve));
-      add("error", settle(reject));
-    });
-  },
-  async pipeline(source, destination) {
-    const readable =
-      getNodeReadableAsyncIterable(source) ??
-      (source && typeof source[Symbol.asyncIterator] === "function"
-        ? source
-        : source && typeof source.getReader === "function"
-          ? {
-              async *[Symbol.asyncIterator]() {
-                const reader = source.getReader();
-                try {
-                  while (true) {
-                    const { value, done } = await reader.read();
-                    if (done) break;
-                    yield Buffer.from(value ?? []);
-                  }
-                } finally {
-                  reader.releaseLock?.();
-                }
-              }
-            }
-          : null);
-    if (readable == null) {
-      throw new TypeError("pipeline source must be async iterable or a WHATWG ReadableStream");
-    }
-    if (!destination || typeof destination.write !== "function") {
-      throw new TypeError("pipeline destination must provide write()");
-    }
-    for await (const chunk of readable) {
-      await new Promise((resolve, reject) => {
-        try {
-          destination.write(chunk, (error) => error ? reject(error) : resolve());
-        } catch (error) {
-          reject(error);
-        }
-      });
-    }
-    const completion = builtinStreamPromisesModule.finished(destination);
-    if (typeof destination.end === "function") {
-      await new Promise((resolve, reject) => {
-        try {
-          destination.end((error) => error ? reject(error) : resolve());
-        } catch (error) {
-          reject(error);
-        }
-      });
-    }
-    await completion;
-    return destination;
-  }
-};
-
-function createAccessDeniedBuiltinError(request) {
-  const normalized = String(request).replace(/^node:/, "");
-  const error = new Error(`node:${normalized} is not available in the secure-exec guest runtime`);
-  error.code = "ERR_ACCESS_DENIED";
-  return error;
-}
-
-class DiagnosticsChannel {
-  constructor(name = "") {
-    this.name = String(name);
-    this._subscribers = /* @__PURE__ */ new Set();
-  }
-  get hasSubscribers() {
-    return this._subscribers.size > 0;
-  }
-  publish(message) {
-    for (const subscriber of Array.from(this._subscribers)) {
-      subscriber(message, this.name);
-    }
-  }
-  subscribe(subscriber) {
-    if (typeof subscriber === "function") {
-      this._subscribers.add(subscriber);
-    }
-  }
-  unsubscribe(subscriber) {
-    return this._subscribers.delete(subscriber);
-  }
-  runStores(context, callback, thisArg, ...args) {
-    if (typeof callback !== "function") {
-      return callback;
-    }
-    return callback.apply(thisArg, args);
-  }
-}
-
-var diagnosticsChannelCache = /* @__PURE__ */ new Map();
-
-function getDiagnosticsChannel(name = "") {
-  const channelName = String(name);
-  let existing = diagnosticsChannelCache.get(channelName);
-  if (!existing) {
-    existing = new DiagnosticsChannel(channelName);
-    diagnosticsChannelCache.set(channelName, existing);
-  }
-  return existing;
-}
-
-function createDiagnosticsTracingChannel(name = "") {
-  const channelName = String(name);
-  const tracing = {
-    start: getDiagnosticsChannel(`tracing:${channelName}:start`),
-    end: getDiagnosticsChannel(`tracing:${channelName}:end`),
-    asyncStart: getDiagnosticsChannel(`tracing:${channelName}:asyncStart`),
-    asyncEnd: getDiagnosticsChannel(`tracing:${channelName}:asyncEnd`),
-    error: getDiagnosticsChannel(`tracing:${channelName}:error`),
-    subscribe() {
-    },
-    unsubscribe() {
-      return true;
-    },
-    traceSync(fn, context, thisArg, ...args) {
-      if (typeof fn !== "function") {
-        return fn;
-      }
-      return fn.apply(thisArg, args);
-    },
-    tracePromise(fn, context, thisArg, ...args) {
-      if (typeof fn !== "function") {
-        return Promise.resolve(fn);
-      }
-      return Promise.resolve(fn.apply(thisArg, args));
-    },
-    traceCallback(fn, position, context, thisArg, ...args) {
-      if (typeof fn !== "function") {
-        return fn;
-      }
-      return fn.apply(thisArg, args);
-    }
-  };
-  Object.defineProperty(tracing, "hasSubscribers", {
-    get() {
-      return tracing.start.hasSubscribers || tracing.end.hasSubscribers || tracing.asyncStart.hasSubscribers || tracing.asyncEnd.hasSubscribers || tracing.error.hasSubscribers;
-    },
-    enumerable: false,
-    configurable: true
-  });
-  return tracing;
-}
-
-var builtinDiagnosticsChannelModule = {
-  Channel: DiagnosticsChannel,
-  channel: getDiagnosticsChannel,
-  hasSubscribers(name = "") {
-    return getDiagnosticsChannel(name).hasSubscribers;
-  },
-  subscribe(name = "", subscriber) {
-    return getDiagnosticsChannel(name).subscribe(subscriber);
-  },
-  tracingChannel: createDiagnosticsTracingChannel,
-  unsubscribe(name = "", subscriber) {
-    return getDiagnosticsChannel(name).unsubscribe(subscriber);
-  }
-};
-
-function padDateTimeField(value, length = 2) {
-  return String(Math.trunc(value)).padStart(length, "0");
-}
-
-function coerceIntlDate(value) {
-  const date = value instanceof Date ? value : new Date(value ?? Date.now());
-  if (Number.isNaN(date.getTime())) {
-    throw new RangeError("Invalid time value");
-  }
-  return date;
-}
-
-function formatSafeDateTimeValue(value, options = {}) {
-  const date = coerceIntlDate(value);
-  const normalizedOptions = options && typeof options === "object" ? options : {};
-  const year = padDateTimeField(date.getUTCFullYear(), 4);
-  const month = padDateTimeField(date.getUTCMonth() + 1);
-  const day = padDateTimeField(date.getUTCDate());
-  const hour = padDateTimeField(date.getUTCHours());
-  const minute = padDateTimeField(date.getUTCMinutes());
-  const second = padDateTimeField(date.getUTCSeconds());
-  const datePart = `${year}-${month}-${day}`;
-  const timePart = `${hour}:${minute}:${second}`;
-  const wantsDate = normalizedOptions.dateStyle || normalizedOptions.year || normalizedOptions.month || normalizedOptions.day || !normalizedOptions.timeStyle && !normalizedOptions.hour && !normalizedOptions.minute && !normalizedOptions.second;
-  const wantsTime = normalizedOptions.timeStyle || normalizedOptions.hour || normalizedOptions.minute || normalizedOptions.second;
-  if (wantsDate && wantsTime) {
-    return `${datePart}, ${timePart}`;
-  }
-  if (wantsTime) {
-    return timePart;
-  }
-  return datePart;
-}
-
-class SafeDateTimeFormat {
-  constructor(locales = "en-US", options = {}) {
-    this.locales = locales;
-    this.options = options && typeof options === "object" ? { ...options } : {};
-    this.format = this.format.bind(this);
-  }
-  format(value = Date.now()) {
-    return formatSafeDateTimeValue(value, this.options);
-  }
-  formatToParts(value = Date.now()) {
-    return [{ type: "literal", value: this.format(value) }];
-  }
-  formatRange(start, end) {
-    return `${this.format(start)} – ${this.format(end)}`;
-  }
-  formatRangeToParts(start, end) {
-    return [{ type: "literal", value: this.formatRange(start, end), source: "shared" }];
-  }
-  resolvedOptions() {
-    const locale = Array.isArray(this.locales) ? this.locales.find((entry) => typeof entry === "string") || "en-US" : typeof this.locales === "string" ? this.locales : "en-US";
-    return {
-      locale,
-      calendar: "gregory",
-      numberingSystem: "latn",
-      timeZone: "UTC",
-      ...this.options
-    };
-  }
-  static supportedLocalesOf(locales) {
-    if (Array.isArray(locales)) {
-      return locales.filter((entry) => typeof entry === "string");
-    }
-    return typeof locales === "string" ? [locales] : [];
-  }
-}
-
-function normalizeFractionDigitOption(value, fallback) {
-  const number = Number(value);
-  if (!Number.isFinite(number)) return fallback;
-  return Math.min(20, Math.max(0, Math.trunc(number)));
-}
-
-function applySafeNumberGrouping(value) {
-  const [integer, fraction] = value.split(".");
-  const sign = integer.startsWith("-") ? "-" : "";
-  const digits = sign ? integer.slice(1) : integer;
-  const grouped = digits.replace(/\B(?=(\d{3})+(?!\d))/g, ",");
-  return fraction === void 0 ? `${sign}${grouped}` : `${sign}${grouped}.${fraction}`;
-}
-
-class SafeNumberFormat {
-  constructor(locales = "en-US", options = {}) {
-    this.locales = locales;
-    this.options = options && typeof options === "object" ? { ...options } : {};
-    this.format = this.format.bind(this);
-  }
-  format(value) {
-    const number = Number(value);
-    if (Number.isNaN(number)) return "NaN";
-    if (number === Infinity) return "∞";
-    if (number === -Infinity) return "-∞";
-    const minimumFractionDigits = normalizeFractionDigitOption(this.options.minimumFractionDigits, 0);
-    const maximumFractionDigits = Math.max(
-      minimumFractionDigits,
-      normalizeFractionDigitOption(this.options.maximumFractionDigits, Math.max(minimumFractionDigits, 3))
-    );
-    let formatted = number.toFixed(maximumFractionDigits);
-    if (maximumFractionDigits > minimumFractionDigits) {
-      formatted = formatted.replace(/(\.\d*?)0+$/, "$1").replace(/\.$/, "");
-      const fractionLength = formatted.includes(".") ? formatted.length - formatted.indexOf(".") - 1 : 0;
-      if (fractionLength < minimumFractionDigits) {
-        formatted += `${fractionLength === 0 ? "." : ""}${"0".repeat(minimumFractionDigits - fractionLength)}`;
-      }
-    }
-    if (this.options.useGrouping === false) return formatted;
-    return applySafeNumberGrouping(formatted);
-  }
-  formatToParts(value) {
-    return [{ type: "literal", value: this.format(value) }];
-  }
-  resolvedOptions() {
-    const locale = Array.isArray(this.locales) ? this.locales.find((entry) => typeof entry === "string") || "en-US" : typeof this.locales === "string" ? this.locales : "en-US";
-    return {
-      locale,
-      numberingSystem: "latn",
-      style: "decimal",
-      minimumFractionDigits: normalizeFractionDigitOption(this.options.minimumFractionDigits, 0),
-      maximumFractionDigits: normalizeFractionDigitOption(this.options.maximumFractionDigits, 3),
-      useGrouping: this.options.useGrouping !== false,
-      ...this.options
-    };
-  }
-  static supportedLocalesOf(locales) {
-    if (Array.isArray(locales)) {
-      return locales.filter((entry) => typeof entry === "string");
-    }
-    return typeof locales === "string" ? [locales] : [];
-  }
-}
-
-function installSafeIntlFormatters(target) {
-  const existingIntl = target.Intl && typeof target.Intl === "object" ? target.Intl : {};
-  existingIntl.DateTimeFormat = SafeDateTimeFormat;
-  existingIntl.NumberFormat = SafeNumberFormat;
-  target.Intl = existingIntl;
-  Date.prototype.toLocaleString = function(locales, options) {
-    return new target.Intl.DateTimeFormat(locales, options).format(this);
-  };
-  Date.prototype.toLocaleDateString = function(locales, options) {
-    return new target.Intl.DateTimeFormat(locales, { ...(options || {}), hour: void 0, minute: void 0, second: void 0 }).format(this);
-  };
-  Date.prototype.toLocaleTimeString = function(locales, options) {
-    return new target.Intl.DateTimeFormat(locales, {
-      hour: "2-digit",
-      minute: "2-digit",
-      second: "2-digit",
-      ...(options || {})
-    }).format(this);
-  };
-  Number.prototype.toLocaleString = function(locales, options) {
-    return new target.Intl.NumberFormat(locales, options).format(this.valueOf());
-  };
-}
-export { DiagnosticsChannel, SafeDateTimeFormat, SafeNumberFormat, TtyReadStream, TtyWriteStream, WorkerThreadMessageChannel, WorkerThreadPort, WorkerThreadWorker, applySafeNumberGrouping, builtinDiagnosticsChannelModule, builtinStreamConsumersModule, builtinStreamPromisesModule, builtinTtyModule, builtinWorkerThreadsModule, coerceIntlDate, collectReadableChunks, createAccessDeniedBuiltinError, createBuiltinBlob, createDiagnosticsTracingChannel, createWorkerThreadsNotImplementedError, diagnosticsChannelCache, formatSafeDateTimeValue, getDiagnosticsChannel, getNodeReadableAsyncIterable, installSafeIntlFormatters, normalizeFractionDigitOption, padDateTimeField, ttyIsatty };
diff --git a/packages/build-tools/bridge-src/builtins/module-loader.ts b/packages/build-tools/bridge-src/builtins/module-loader.ts
deleted file mode 100644
index 302a86aaa..000000000
--- a/packages/build-tools/bridge-src/builtins/module-loader.ts
+++ /dev/null
@@ -1,320 +0,0 @@
-import { builtinModules, loadBuiltinModule, rejectRestrictedBuiltinRequest } from "./builtin-modules.js";
-import { exposeCustomGlobal, exposeMutableRuntimeStateGlobal } from "../global-exposure.js";
-import { defineGlobal } from "../polyfills/index.js";
-
-var initialModuleCache = {};
-var initialPendingModules = {};
-var initialCurrentModule = {
-  id: "/<entry>.js",
-  filename: "/<entry>.js",
-  dirname: "/",
-  exports: {},
-  loaded: false
-};
-exposeMutableRuntimeStateGlobal("_moduleCache", initialModuleCache);
-exposeMutableRuntimeStateGlobal("_pendingModules", initialPendingModules);
-exposeMutableRuntimeStateGlobal("_currentModule", initialCurrentModule);
-function _pathDirname(p) {
-  const lastSlash = p.lastIndexOf("/");
-  if (lastSlash === -1) return ".";
-  if (lastSlash === 0) return "/";
-  return p.slice(0, lastSlash);
-}
-function _parseFileUrl(url) {
-  if (url.startsWith("file://")) {
-    let path = url.slice(7);
-    if (path.startsWith("/")) {
-      return path;
-    }
-    return "/" + path;
-  }
-  return url;
-}
-function computeRequireResolvePaths(dirname, request) {
-  if (Module.isBuiltin(request)) {
-    return null;
-  }
-  if (request.startsWith("./") || request.startsWith("../") || request.startsWith("/")) {
-    return [dirname];
-  }
-  return Module._nodeModulePaths(dirname);
-}
-function createRequireResolve(dirname) {
-  const resolve = function(request, _options) {
-    const resolved = _resolveModule.applySyncPromise(void 0, [
-      request,
-      dirname,
-      "require"
-    ]);
-    if (resolved === null) {
-      const err = new Error("Cannot find module '" + request + "'");
-      err.code = "MODULE_NOT_FOUND";
-      throw err;
-    }
-    return resolved;
-  };
-  resolve.paths = function(request) {
-    return computeRequireResolvePaths(dirname, request);
-  };
-  return resolve;
-}
-const defaultRequireExtensions = {
-  ".js": function(_module, _filename) {
-  },
-  ".json": function(_module, _filename) {
-  },
-  ".node": function(_module, _filename) {
-    throw new Error(".node extensions are not supported in sandbox");
-  }
-};
-function attachRequireMetadata(requireFn) {
-  requireFn.cache = _moduleCache;
-  requireFn.main = globalThis.process?.mainModule;
-  requireFn.extensions = defaultRequireExtensions;
-  return requireFn;
-}
-function createRequireEsmError(filename) {
-  const error = new Error(`require() of ES Module ${filename} is not supported.`);
-  error.code = "ERR_REQUIRE_ESM";
-  return error;
-}
-function createModuleFormatBridgeMissingError(filename) {
-  const error = new Error(
-    `secure-exec module format bridge is not registered; cannot require ${filename}.`
-  );
-  error.code = "ERR_AGENTOS_MODULE_FORMAT_BRIDGE_MISSING";
-  return error;
-}
-function assertCommonjsLoadable(filename) {
-  if (
-    typeof _moduleFormat === "undefined" ||
-    typeof _moduleFormat.applySyncPromise !== "function"
-  ) {
-    throw createModuleFormatBridgeMissingError(filename);
-  }
-  const format = _moduleFormat.applySyncPromise(void 0, [filename]);
-  if (format === "module") {
-    throw createRequireEsmError(filename);
-  }
-}
-function createRequire(filename) {
-  if (typeof filename !== "string" && !(filename instanceof URL)) {
-    throw new TypeError("filename must be a string or URL");
-  }
-  const filepath = _parseFileUrl(String(filename));
-  const dirname = _pathDirname(filepath);
-  const resolve = createRequireResolve(dirname);
-  const rejectRestrictedBuiltin = function(_request) {
-  };
-  const requireFn = function(request) {
-    rejectRestrictedBuiltin(request);
-    return _requireFrom(request, dirname);
-  };
-  requireFn.resolve = resolve;
-  return attachRequireMetadata(requireFn);
-}
-// Expose createRequire under a namespaced global so an agent-SDK snapshot bundle
-// (which runs as a raw IIFE Script, not a wrapped CJS module, when evaluated into
-// the V8 startup snapshot) can bind a `require` for its node-builtin imports. This
-// grants no new capability — guest CJS modules already receive `require` via the
-// module wrapper, and resolution still flows through _requireFrom with the same
-// permission checks — and the namespaced name avoids changing `typeof require` for
-// guest code that branches on CJS-vs-ESM.
-defineGlobal("__secureExecGuestCreateRequire", createRequire);
-var Module = class _Module {
-  id;
-  path;
-  exports;
-  filename;
-  loaded;
-  children;
-  paths;
-  parent;
-  isPreloading;
-  constructor(id, parent) {
-    this.id = id;
-    this.path = _pathDirname(id);
-    this.exports = {};
-    this.filename = id;
-    this.loaded = false;
-    this.children = [];
-    this.paths = [];
-    this.parent = parent;
-    this.isPreloading = false;
-    let current = this.path;
-    while (current !== "/") {
-      this.paths.push(current + "/node_modules");
-      current = _pathDirname(current);
-    }
-    this.paths.push("/node_modules");
-  }
-  require(request) {
-    return _requireFrom(request, this.path);
-  }
-  _compile(content, filename) {
-    const contentWithSourceUrl = String(content) + "\n//# sourceURL=" + String(filename);
-    const wrapper = new Function(
-      "exports",
-      "require",
-      "module",
-      "__filename",
-      "__dirname",
-      contentWithSourceUrl
-    );
-    const moduleRequire = (request) => {
-      rejectRestrictedBuiltinRequest(request);
-      return _requireFrom(request, this.path);
-    };
-    moduleRequire.resolve = createRequireResolve(this.path);
-    attachRequireMetadata(moduleRequire);
-    const previousModule = globalThis._currentModule;
-    globalThis._currentModule = this;
-    try {
-      wrapper(this.exports, moduleRequire, this, filename, this.path);
-      this.loaded = true;
-      return this.exports;
-    } finally {
-      globalThis._currentModule = previousModule;
-    }
-  }
-  static _extensions = {
-    ...defaultRequireExtensions,
-    ".js": function(module, filename) {
-      assertCommonjsLoadable(filename);
-      const content = typeof _loadFile !== "undefined" ? _loadFile.applySyncPromise(void 0, [
-        filename
-      ]) : _requireFrom("fs", "/").readFileSync(filename, "utf8");
-      module._compile(content, filename);
-    },
-    ".json": function(module, filename) {
-      const content = typeof _loadFile !== "undefined" ? _loadFile.applySyncPromise(void 0, [
-        filename
-      ]) : _requireFrom("fs", "/").readFileSync(filename, "utf8");
-      module.exports = JSON.parse(content);
-    }
-  };
-  static _cache = typeof _moduleCache !== "undefined" ? _moduleCache : {};
-  static _resolveFilename(request, parent, _isMain, _options) {
-    const parentDir = parent && parent.path ? parent.path : "/";
-    const resolved = _resolveModule.applySyncPromise(void 0, [
-      request,
-      parentDir,
-      "require"
-    ]);
-    if (resolved === null) {
-      const err = new Error("Cannot find module '" + request + "'");
-      err.code = "MODULE_NOT_FOUND";
-      throw err;
-    }
-    return resolved;
-  }
-  static wrap(content) {
-    return "(function (exports, require, module, __filename, __dirname) { " + content + "\n});";
-  }
-  static builtinModules = builtinModules;
-  static isBuiltin(moduleName) {
-    const name = moduleName.replace(/^node:/, "");
-    return _Module.builtinModules.includes(name);
-  }
-  static createRequire = createRequire;
-  static syncBuiltinESMExports() {
-  }
-  static findSourceMap(_path) {
-    return void 0;
-  }
-  static _nodeModulePaths(from) {
-    const paths = [];
-    let current = from;
-    while (current !== "/") {
-      paths.push(current + "/node_modules");
-      current = _pathDirname(current);
-      if (current === ".") break;
-    }
-    paths.push("/node_modules");
-    return paths;
-  }
-  static _load(request, parent, _isMain) {
-    const parentDir = parent && parent.path ? parent.path : "/";
-    return _requireFrom(request, parentDir);
-  }
-  static runMain() {
-  }
-};
-var SourceMap = class {
-  constructor(_payload) {
-    throw new Error("SourceMap is not implemented in sandbox");
-  }
-  get payload() {
-    throw new Error("SourceMap is not implemented in sandbox");
-  }
-  set payload(_value) {
-    throw new Error("SourceMap is not implemented in sandbox");
-  }
-  findEntry(_line, _column) {
-    throw new Error("SourceMap is not implemented in sandbox");
-  }
-};
-var moduleModule = Object.assign(Module, {
-  Module,
-  createRequire,
-  // Module._extensions (deprecated alias)
-  _extensions: Module._extensions,
-  // Module._cache reference
-  _cache: Module._cache,
-  // Built-in module list
-  builtinModules: Module.builtinModules,
-  // isBuiltin check
-  isBuiltin: Module.isBuiltin,
-  // Module._resolveFilename (internal but sometimes used)
-  _resolveFilename: Module._resolveFilename,
-  // wrap function
-  wrap: Module.wrap,
-  // syncBuiltinESMExports (stub for ESM interop)
-  syncBuiltinESMExports: Module.syncBuiltinESMExports,
-  // findSourceMap (stub)
-  findSourceMap: Module.findSourceMap,
-  // SourceMap class (stub)
-  SourceMap
-});
-exposeCustomGlobal("_moduleModule", moduleModule);
-function requireFrom(request, parentDir) {
-  const parentPath = typeof parentDir === "string" ? parentDir : "/";
-  if (Module.isBuiltin(request)) {
-    try {
-      return loadBuiltinModule(request);
-    } catch (error) {
-      if (error?.code !== "MODULE_NOT_FOUND") {
-        throw error;
-      }
-    }
-  }
-  const resolved = _resolveModule.applySyncPromise(void 0, [
-    request,
-    parentPath,
-    "require"
-  ]);
-  if (resolved === null) {
-    const error = new Error(`Cannot find module '${request}'`);
-    error.code = "MODULE_NOT_FOUND";
-    throw error;
-  }
-  if (Object.prototype.hasOwnProperty.call(_moduleCache, resolved)) {
-    return _moduleCache[resolved].exports;
-  }
-  assertCommonjsLoadable(resolved);
-  const module = new Module(resolved, { path: parentPath });
-  _moduleCache[resolved] = module;
-  try {
-    const extension = resolved.endsWith(".json") ? ".json" : resolved.endsWith(".node") ? ".node" : ".js";
-    const loader = Module._extensions[extension] ?? Module._extensions[".js"];
-    loader(module, resolved);
-    module.loaded = true;
-    return module.exports;
-  } catch (error) {
-    delete _moduleCache[resolved];
-    throw error;
-  }
-}
-exposeCustomGlobal("_requireFrom", requireFrom);
-var module_default = moduleModule;
-export { initialModuleCache, initialPendingModules, initialCurrentModule, _pathDirname, _parseFileUrl, computeRequireResolvePaths, createRequireResolve, defaultRequireExtensions, attachRequireMetadata, createRequireEsmError, createModuleFormatBridgeMissingError, assertCommonjsLoadable, createRequire, Module, SourceMap, moduleModule, requireFrom, module_default };
diff --git a/packages/build-tools/bridge-src/builtins/net.ts b/packages/build-tools/bridge-src/builtins/net.ts
deleted file mode 100644
index eacdbd68f..000000000
--- a/packages/build-tools/bridge-src/builtins/net.ts
+++ /dev/null
@@ -1,3178 +0,0 @@
-import { setImmediate } from "./timers.js";
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { DirectTunnelSocket, Server, ServerIncomingMessage, createBadRequestResponseBuffer, createTypeErrorWithCode, debugBridgeNetwork, dispatchLoopbackServerRequest, formatReceivedType, parseLoopbackRequestBuffer, serializeLoopbackResponse } from "./http.js";
-import { http2, http2Dispatch } from "./http2.js";
-
-var NET_SOCKET_REGISTRY_PREFIX = "__secureExecNetSocket:";
-
-var NET_SERVER_HANDLE_PREFIX = "net-server:";
-
-var registeredNetSockets = /* @__PURE__ */ new Map();
-
-var registeredNetServersByPort = /* @__PURE__ */ new Map();
-
-var registeredNetServersByPath = /* @__PURE__ */ new Map();
-
-var registeredNetServersById = /* @__PURE__ */ new Map();
-
-function getRegisteredNetSocket(socketId) {
-  return globalThis[`${NET_SOCKET_REGISTRY_PREFIX}${socketId}`];
-}
-
-function registerNetSocket(socketId, socket) {
-  globalThis[`${NET_SOCKET_REGISTRY_PREFIX}${socketId}`] = socket;
-  registeredNetSockets.set(socketId, socket);
-}
-
-function unregisterNetSocket(socketId) {
-  delete globalThis[`${NET_SOCKET_REGISTRY_PREFIX}${socketId}`];
-  registeredNetSockets.delete(socketId);
-}
-
-function isRegisteredNetSocket(socket) {
-  return !!socket && socket._socketId !== 0 && registeredNetSockets.get(socket._socketId) === socket;
-}
-
-function queueSocketBridgeReadPump(socket, origin) {
-  if (socket._bridgeReadPumpQueued) {
-    countNetBridgeMetric("readPumpQueueCoalesced");
-    return;
-  }
-  socket._bridgeReadPumpQueued = true;
-  queueMicrotask(() => {
-    socket._bridgeReadPumpQueued = false;
-    if (!socket.destroyed && isRegisteredNetSocket(socket) && socket._socketId !== 0) {
-      socket._nextReadPumpOrigin = origin;
-      void socket._pumpBridgeReads();
-    }
-  });
-}
-
-function netServerUnixPath(server) {
-  const address = server?._address;
-  if (typeof address === "string") {
-    return address;
-  }
-  const path = address?.path;
-  return typeof path === "string" ? path : void 0;
-}
-
-function registerNetServer(server) {
-  if (server?._serverId) {
-    registeredNetServersById.set(server._serverId, server);
-  }
-  const port = server?._address?.port;
-  if (typeof port === "number") {
-    registeredNetServersByPort.set(port, server);
-  }
-  const path = netServerUnixPath(server);
-  if (typeof path === "string") {
-    registeredNetServersByPath.set(path, server);
-  }
-}
-
-function unregisterNetServer(server) {
-  if (server?._serverId && registeredNetServersById.get(server._serverId) === server) {
-    registeredNetServersById.delete(server._serverId);
-  }
-  const port = server?._address?.port;
-  if (typeof port === "number" && registeredNetServersByPort.get(port) === server) {
-    registeredNetServersByPort.delete(port);
-  }
-  const path = netServerUnixPath(server);
-  if (typeof path === "string" && registeredNetServersByPath.get(path) === server) {
-    registeredNetServersByPath.delete(path);
-  }
-}
-
-function wakeSocketBridgeReads(socket) {
-  countNetBridgeMetric("readWakeAttempts");
-  if (!socket || socket.destroyed || socket._socketId === 0 || socket._loopbackServer || socket._loopbackHttpTarget) {
-    countNetBridgeMetric("readWakeInvalidTargets");
-    return;
-  }
-  socket._pendingBridgeWake = true;
-  socket._pendingBridgeWakeRetries = 0;
-  if (socket._bridgeReadLoopRunning) {
-    countNetBridgeMetric("readWakeAlreadyRunning");
-  }
-  if (!socket._bridgeReadPollTimer) {
-    countNetBridgeMetric("readWakeNoTimer");
-    countNetBridgeMetric(socket._bridgeReadPumpStarted ? "readWakeNoTimerAfterFirstPump" : "readWakeNoTimerBeforeFirstPump");
-    if (socket._connected) {
-      countNetBridgeMetric("readWakeNoTimerConnected");
-    }
-    if (socket.connecting) {
-      countNetBridgeMetric("readWakeNoTimerConnecting");
-    }
-    countNetBridgeMetric(socket._refed ? "readWakeNoTimerRefed" : "readWakeNoTimerUnrefed");
-    const hasDataListener = (socket._listeners?.data?.length ?? 0) > 0;
-    const hasReadableListener = (socket._listeners?.readable?.length ?? 0) > 0;
-    if (hasDataListener) {
-      countNetBridgeMetric("readWakeNoTimerHasDataListener");
-    }
-    if (hasReadableListener) {
-      countNetBridgeMetric("readWakeNoTimerHasReadableListener");
-    }
-    if (socket._bridgeWriteFlushScheduled) {
-      countNetBridgeMetric("readWakeNoTimerPendingWriteFlush");
-      countNetBridgeMetric("readWakeNoTimerPendingWriteBytes", socket._pendingBridgeWriteBytes);
-    }
-    if (!socket._bridgeReadPumpStarted && socket._firstReadNoTimerWakeAtUs === 0 && isNetBridgeMetricsEnabled()) {
-      socket._firstReadNoTimerWakeAtUs = netBridgeNowUs();
-    }
-    if (!socket._bridgeReadPumpStarted && socket._connected && socket._refed && (hasDataListener || hasReadableListener)) {
-      if (isNetBridgeMetricsEnabled()) {
-        countNetBridgeMetric("readFirstPumpScheduleCandidates");
-      }
-      if (socket._bridgeReadFirstPumpBenchmarkScheduled) {
-        if (isNetBridgeMetricsEnabled()) {
-          countNetBridgeMetric("readFirstPumpScheduleAlreadyScheduled");
-        }
-      } else {
-        if (isNetBridgeMetricsEnabled()) {
-          countNetBridgeMetric("readFirstPumpScheduleQueued");
-        }
-        socket._bridgeReadFirstPumpBenchmarkScheduled = true;
-        const queuedAtUs = netBridgeNowUs();
-        queueMicrotask(() => {
-          if (isNetBridgeMetricsEnabled()) {
-            countNetBridgeMetric("readFirstPumpScheduleRuns");
-          }
-          const runAtUs = netBridgeNowUs();
-          const queuedToRunUs = Math.max(0, runAtUs - queuedAtUs);
-          if (isNetBridgeMetricsEnabled()) {
-            countNetBridgeMetric("readFirstPumpScheduleQueuedToRunUs", queuedToRunUs);
-            maxNetBridgeMetric("readFirstPumpScheduleQueuedToRunMaxUs", queuedToRunUs);
-          }
-          socket._bridgeReadFirstPumpBenchmarkScheduled = false;
-          if (socket.destroyed) {
-            if (isNetBridgeMetricsEnabled()) {
-              countNetBridgeMetric("readFirstPumpScheduleSkipDestroyed");
-            }
-            return;
-          }
-          if (socket._tlsUpgrading) {
-            if (isNetBridgeMetricsEnabled()) {
-              countNetBridgeMetric("readFirstPumpScheduleSkipTlsUpgrading");
-            }
-            return;
-          }
-          if (socket._bridgeReadPumpStarted) {
-            if (isNetBridgeMetricsEnabled()) {
-              countNetBridgeMetric("readFirstPumpScheduleSkipPumpStarted");
-            }
-            return;
-          }
-          if (socket._bridgeReadLoopRunning) {
-            if (isNetBridgeMetricsEnabled()) {
-              countNetBridgeMetric("readFirstPumpScheduleSkipLoopRunning");
-            }
-            return;
-          }
-          if (socket._socketId === 0) {
-            if (isNetBridgeMetricsEnabled()) {
-              countNetBridgeMetric("readFirstPumpScheduleSkipSocketClosed");
-            }
-            return;
-          }
-          if (isNetBridgeMetricsEnabled()) {
-            countNetBridgeMetric("readFirstPumpSchedulePumpCalls");
-          }
-          socket._nextReadPumpOrigin = "eventWake";
-          socket._readFirstPumpScheduleActive = true;
-          socket._readFirstPumpScheduleQueuedAtUs = queuedAtUs;
-          void socket._pumpBridgeReads();
-        });
-      }
-    }
-    if (!socket._bridgeReadLoopRunning && socket._connected && socket._refed) {
-      queueSocketBridgeReadPump(socket, "eventWake");
-    }
-    return;
-  }
-  clearTimeout(socket._bridgeReadPollTimer);
-  socket._bridgeReadPollTimer = null;
-  countNetBridgeMetric("readEventWakeups");
-  if (isNetBridgeMetricsEnabled()) {
-    socket._readWakeQueuedAtUs = netBridgeNowUs();
-  }
-  queueSocketBridgeReadPump(socket, "eventWake");
-}
-
-function wakePeerBridgeReads(socket) {
-  countNetBridgeMetric("peerWakeScans");
-  if (!socket || socket._socketId === 0) {
-    countNetBridgeMetric("peerWakeInvalidTargets");
-    return;
-  }
-  if (typeof socket.remotePort === "number" && typeof socket.localPort === "number") {
-    for (const peer of registeredNetSockets.values()) {
-      if (peer === socket || peer.destroyed) {
-        continue;
-      }
-      if (peer.localPort === socket.remotePort && peer.remotePort === socket.localPort) {
-        countNetBridgeMetric("peerWakeFound");
-        wakeSocketBridgeReads(peer);
-        return;
-      }
-    }
-    countNetBridgeMetric("peerWakeMiss");
-    return;
-  }
-  const localPath = typeof socket.localPath === "string" ? socket.localPath : void 0;
-  const remotePath = typeof socket.remotePath === "string" ? socket.remotePath : void 0;
-  if (localPath === void 0 && remotePath === void 0) {
-    countNetBridgeMetric("peerWakeInvalidTargets");
-    return;
-  }
-  let foundUnixPeer = false;
-  for (const peer of registeredNetSockets.values()) {
-    if (peer === socket || peer.destroyed) {
-      continue;
-    }
-    const peerLocalPath = typeof peer.localPath === "string" ? peer.localPath : void 0;
-    const peerRemotePath = typeof peer.remotePath === "string" ? peer.remotePath : void 0;
-    const fullPathMirror = localPath !== void 0 && remotePath !== void 0 && peerLocalPath !== void 0 && peerRemotePath !== void 0 && peerLocalPath === remotePath && peerRemotePath === localPath;
-    const remoteToPeerLocal = remotePath !== void 0 && peerLocalPath !== void 0 && peerLocalPath === remotePath;
-    const localToPeerRemote = localPath !== void 0 && peerRemotePath !== void 0 && peerRemotePath === localPath;
-    if (fullPathMirror || remoteToPeerLocal || localToPeerRemote) {
-      foundUnixPeer = true;
-      countNetBridgeMetric("peerWakeUnixFound");
-      wakeSocketBridgeReads(peer);
-    }
-  }
-  if (!foundUnixPeer) {
-    countNetBridgeMetric("peerWakeUnixMiss");
-  }
-}
-
-function wakeNetServerAccept(server) {
-  countNetBridgeMetric("acceptWakeAttempts");
-  if (!server || !server.listening || server._serverId === 0 || !server._acceptPollTimer) {
-    if (!server || !server.listening || server._serverId === 0) {
-      countNetBridgeMetric("acceptWakeInvalidTargets");
-    } else {
-      server._pendingAcceptWake = true;
-      countNetBridgeMetric("acceptWakeNoTimer");
-      countNetBridgeMetric(server._acceptPumpStarted ? "acceptWakeNoTimerAfterFirstPump" : "acceptWakeNoTimerBeforeFirstPump");
-      if (server._acceptLoopRunning) {
-        countNetBridgeMetric("acceptWakeNoTimerLoopRunning");
-      }
-      if (server._acceptLoopActive) {
-        countNetBridgeMetric("acceptWakeNoTimerLoopActive");
-      }
-      countNetBridgeMetric(server._refed ? "acceptWakeNoTimerRefed" : "acceptWakeNoTimerUnrefed");
-      const connectionCount = server._connections?.size ?? 0;
-      countNetBridgeMetric("acceptWakeNoTimerConnections", connectionCount);
-      maxNetBridgeMetric("acceptWakeNoTimerConnectionsMax", connectionCount);
-      if (!server._acceptPumpStarted && server._firstAcceptNoTimerWakeAtUs === 0 && isNetBridgeMetricsEnabled()) {
-        server._firstAcceptNoTimerWakeAtUs = netBridgeNowUs();
-      }
-      if (server._acceptLoopActive && !server._acceptLoopRunning) {
-        queueMicrotask(() => {
-          if (server.listening && server._serverId !== 0 && !server._acceptLoopRunning) {
-            server._nextAcceptPumpOrigin = "eventWake";
-            return server._pumpAccepts();
-          }
-        });
-      }
-    }
-    return;
-  }
-  if (server._acceptLoopRunning) {
-    countNetBridgeMetric("acceptWakeAlreadyRunning");
-  }
-	    clearTimeout(server._acceptPollTimer);
-	    server._acceptPollTimer = null;
-	    countNetBridgeMetric("acceptEventWakeups");
-	    if (isNetBridgeMetricsEnabled()) {
-	      server._acceptWakeQueuedAtUs = netBridgeNowUs();
-	    }
-	    queueMicrotask(() => {
-    if (server.listening && server._serverId !== 0) {
-      server._nextAcceptPumpOrigin = "eventWake";
-      return server._pumpAccepts();
-    }
-  });
-}
-
-function wakeNetServerAcceptForSocket(socket) {
-  countNetBridgeMetric("acceptWakeSocketScans");
-  const port = socket?.remotePort;
-  if (typeof port === "number") {
-    const server = registeredNetServersByPort.get(port);
-    if (server) {
-      countNetBridgeMetric("acceptWakeSocketFound");
-    } else {
-      countNetBridgeMetric("acceptWakeSocketMiss");
-    }
-    if (server?._acceptLoopActive && !server._acceptLoopRunning) {
-      server._nextAcceptPumpOrigin = "eventWake";
-      return server._pumpAccepts();
-    }
-    return wakeNetServerAccept(server);
-  }
-  const path = socket?.remotePath;
-  if (typeof path !== "string") {
-    countNetBridgeMetric("acceptWakeSocketInvalidTargets");
-    return;
-  }
-  const server = registeredNetServersByPath.get(path);
-  if (server) {
-    countNetBridgeMetric("acceptWakeSocketFound");
-    countNetBridgeMetric("acceptWakeSocketUnixFound");
-  } else {
-    countNetBridgeMetric("acceptWakeSocketMiss");
-    countNetBridgeMetric("acceptWakeSocketUnixMiss");
-  }
-  if (server?._acceptLoopActive && !server._acceptLoopRunning) {
-    server._nextAcceptPumpOrigin = "eventWake";
-    return server._pumpAccepts();
-  }
-  return wakeNetServerAccept(server);
-}
-
-function isTruthySocketOption(value) {
-  return value === void 0 ? true : Boolean(value);
-}
-
-function normalizeKeepAliveDelay(initialDelay) {
-  if (typeof initialDelay !== "number" || !Number.isFinite(initialDelay)) {
-    return 0;
-  }
-  return Math.max(0, Math.floor(initialDelay / 1e3));
-}
-
-function createTimeoutArgTypeError(argumentName, value) {
-  return createTypeErrorWithCode(
-    `The "${argumentName}" argument must be of type number. Received ${formatReceivedType(value)}`,
-    "ERR_INVALID_ARG_TYPE"
-  );
-}
-
-function createFunctionArgTypeError(argumentName, value) {
-  return createTypeErrorWithCode(
-    `The "${argumentName}" argument must be of type function. Received ${formatReceivedType(value)}`,
-    "ERR_INVALID_ARG_TYPE"
-  );
-}
-
-function createTimeoutRangeError(value) {
-  const error = new RangeError(
-    `The value of "timeout" is out of range. It must be a non-negative finite number. Received ${String(value)}`
-  );
-  error.code = "ERR_OUT_OF_RANGE";
-  return error;
-}
-
-function createListenArgValueError(message) {
-  return createTypeErrorWithCode(message, "ERR_INVALID_ARG_VALUE");
-}
-
-function createSocketBadPortError(value) {
-  const error = new RangeError(
-    `options.port should be >= 0 and < 65536. Received ${formatReceivedType(value)}.`
-  );
-  error.code = "ERR_SOCKET_BAD_PORT";
-  return error;
-}
-
-function isValidTcpPort(value) {
-  return Number.isInteger(value) && value >= 0 && value < 65536;
-}
-
-function isDecimalIntegerString(value) {
-  return /^[0-9]+$/.test(value);
-}
-
-function normalizeListenPortValue(value) {
-  if (value === void 0 || value === null) {
-    return 0;
-  }
-  if (typeof value === "string" && value.length > 0) {
-    const parsed = Number(value);
-    if (isValidTcpPort(parsed)) {
-      return parsed;
-    }
-    throw createSocketBadPortError(value);
-  }
-  if (typeof value === "number") {
-    if (isValidTcpPort(value)) {
-      return value;
-    }
-    throw createSocketBadPortError(value);
-  }
-  throw createListenArgValueError(
-    `The argument 'options' is invalid. Received ${String(value)}`
-  );
-}
-
-function normalizeListenArgs(portOrOptions, hostOrCallback, backlogOrCallback, callback) {
-  const defaultOptions = {
-    port: 0,
-    host: "127.0.0.1",
-    backlog: 511,
-    readableAll: false,
-    writableAll: false
-  };
-  if (typeof portOrOptions === "function") {
-    return {
-      ...defaultOptions,
-      callback: portOrOptions
-    };
-  }
-  if (portOrOptions !== null && typeof portOrOptions === "object") {
-    const options = portOrOptions;
-    const hasPort = Object.prototype.hasOwnProperty.call(options, "port");
-    const hasPath = Object.prototype.hasOwnProperty.call(options, "path");
-    if (!hasPort && !hasPath) {
-      throw createListenArgValueError(
-        `The argument 'options' must have the property "port" or "path". Received ${String(portOrOptions)}`
-      );
-    }
-    if (hasPort && hasPath) {
-      throw createListenArgValueError(
-        `The argument 'options' is invalid. Received ${String(portOrOptions)}`
-      );
-    }
-    if (hasPort && options.port !== void 0 && options.port !== null && typeof options.port !== "number" && typeof options.port !== "string") {
-      throw createListenArgValueError(
-        `The argument 'options' is invalid. Received ${String(portOrOptions)}`
-      );
-    }
-    if (hasPath) {
-      if (typeof options.path !== "string" || options.path.length === 0) {
-        throw createListenArgValueError(
-          `The argument 'options' is invalid. Received ${String(portOrOptions)}`
-        );
-      }
-      return {
-        path: options.path,
-        backlog: typeof options.backlog === "number" && Number.isFinite(options.backlog) ? options.backlog : defaultOptions.backlog,
-        readableAll: options.readableAll === true,
-        writableAll: options.writableAll === true,
-        callback: typeof hostOrCallback === "function" ? hostOrCallback : typeof backlogOrCallback === "function" ? backlogOrCallback : callback
-      };
-    }
-    return {
-      port: normalizeListenPortValue(options.port),
-      host: typeof options.host === "string" && options.host.length > 0 ? options.host : defaultOptions.host,
-      backlog: typeof options.backlog === "number" && Number.isFinite(options.backlog) ? options.backlog : defaultOptions.backlog,
-      readableAll: false,
-      writableAll: false,
-      callback: typeof hostOrCallback === "function" ? hostOrCallback : typeof backlogOrCallback === "function" ? backlogOrCallback : callback
-    };
-  }
-  if (portOrOptions !== void 0 && portOrOptions !== null && typeof portOrOptions !== "number" && typeof portOrOptions !== "string") {
-    throw createListenArgValueError(
-      `The argument 'options' is invalid. Received ${String(portOrOptions)}`
-    );
-  }
-  if (typeof portOrOptions === "string" && portOrOptions.length > 0 && !isDecimalIntegerString(portOrOptions)) {
-    return {
-      path: portOrOptions,
-      backlog: defaultOptions.backlog,
-      readableAll: false,
-      writableAll: false,
-      callback: typeof hostOrCallback === "function" ? hostOrCallback : typeof backlogOrCallback === "function" ? backlogOrCallback : callback
-    };
-  }
-  return {
-    port: normalizeListenPortValue(portOrOptions),
-    host: typeof hostOrCallback === "string" ? hostOrCallback : defaultOptions.host,
-    backlog: typeof backlogOrCallback === "number" ? backlogOrCallback : defaultOptions.backlog,
-    readableAll: false,
-    writableAll: false,
-    callback: typeof hostOrCallback === "function" ? hostOrCallback : typeof backlogOrCallback === "function" ? backlogOrCallback : callback
-  };
-}
-
-function normalizeConnectArgs(portOrOptions, hostOrCallback, callback) {
-  if (portOrOptions !== null && typeof portOrOptions === "object") {
-    const normalizedPort = typeof portOrOptions.port === "string" ? Number(portOrOptions.port) : portOrOptions.port;
-    return {
-      host: typeof portOrOptions.host === "string" && portOrOptions.host.length > 0 ? portOrOptions.host : void 0,
-      port: normalizedPort,
-      path: typeof portOrOptions.path === "string" && portOrOptions.path.length > 0 ? portOrOptions.path : void 0,
-      localAddress: typeof portOrOptions.localAddress === "string" && portOrOptions.localAddress.length > 0 ? portOrOptions.localAddress : void 0,
-      localPort: typeof portOrOptions.localPort === "number" ? portOrOptions.localPort : void 0,
-      keepAlive: portOrOptions.keepAlive,
-      keepAliveInitialDelay: portOrOptions.keepAliveInitialDelay,
-      callback: typeof hostOrCallback === "function" ? hostOrCallback : callback
-    };
-  }
-  if (typeof portOrOptions === "string" && !isDecimalIntegerString(portOrOptions)) {
-    return {
-      path: portOrOptions,
-      callback: typeof hostOrCallback === "function" ? hostOrCallback : callback
-    };
-  }
-  return {
-    port: typeof portOrOptions === "number" ? portOrOptions : Number(portOrOptions),
-    host: typeof hostOrCallback === "string" ? hostOrCallback : "127.0.0.1",
-    callback: typeof hostOrCallback === "function" ? hostOrCallback : callback
-  };
-}
-
-function isValidIPv4Segment(segment) {
-  if (!/^[0-9]{1,3}$/.test(segment)) {
-    return false;
-  }
-  if (segment.length > 1 && segment.startsWith("0")) {
-    return false;
-  }
-  const value = Number(segment);
-  return Number.isInteger(value) && value >= 0 && value <= 255;
-}
-
-function isIPv4String(input) {
-  const segments = input.split(".");
-  return segments.length === 4 && segments.every((segment) => isValidIPv4Segment(segment));
-}
-
-function isValidIPv6Zone(zone) {
-  return zone.length > 0 && /^[0-9A-Za-z_.-]+$/.test(zone);
-}
-
-function countIPv6Parts(part) {
-  if (part.length === 0) {
-    return 0;
-  }
-  const segments = part.split(":");
-  let count = 0;
-  for (const segment of segments) {
-    if (segment.length === 0) {
-      return null;
-    }
-    if (segment.includes(".")) {
-      if (segment !== segments[segments.length - 1] || !isIPv4String(segment)) {
-        return null;
-      }
-      count += 2;
-      continue;
-    }
-    if (!/^[0-9A-Fa-f]{1,4}$/.test(segment)) {
-      return null;
-    }
-    count += 1;
-  }
-  return count;
-}
-
-function isIPv6String(input) {
-  if (input.length === 0) {
-    return false;
-  }
-  let address = input;
-  const zoneIndex = address.indexOf("%");
-  if (zoneIndex !== -1) {
-    if (address.indexOf("%", zoneIndex + 1) !== -1) {
-      return false;
-    }
-    const zone = address.slice(zoneIndex + 1);
-    if (!isValidIPv6Zone(zone)) {
-      return false;
-    }
-    address = address.slice(0, zoneIndex);
-  }
-  const doubleColonIndex = address.indexOf("::");
-  if (doubleColonIndex !== -1) {
-    if (address.indexOf("::", doubleColonIndex + 2) !== -1) {
-      return false;
-    }
-    const [left, right] = address.split("::");
-    if (left.includes(".")) {
-      return false;
-    }
-    const leftCount = countIPv6Parts(left);
-    const rightCount = countIPv6Parts(right);
-    if (leftCount === null || rightCount === null) {
-      return false;
-    }
-    return leftCount + rightCount < 8;
-  }
-  const count = countIPv6Parts(address);
-  return count === 8;
-}
-
-function coerceIpInput(input) {
-  if (input === null || input === void 0) {
-    return "";
-  }
-  return String(input);
-}
-
-function classifyIpAddress(input) {
-  const value = coerceIpInput(input);
-  if (isIPv4String(value)) {
-    return 4;
-  }
-  if (isIPv6String(value)) {
-    return 6;
-  }
-  return 0;
-}
-
-function normalizeIpFamilyLabel(address, family) {
-  if (family === "ipv4" || family === 4) {
-    return "ipv4";
-  }
-  if (family === "ipv6" || family === 6) {
-    return "ipv6";
-  }
-  const detected = classifyIpAddress(address);
-  if (detected === 4) {
-    return "ipv4";
-  }
-  if (detected === 6) {
-    return "ipv6";
-  }
-  throw new TypeError(`Invalid IP address: ${address}`);
-}
-
-function ipv4ToBigInt(address) {
-  return address.split(".").reduce((value, segment) => (value << 8n) + BigInt(Number(segment)), 0n);
-}
-
-function expandIpv6Address(address) {
-  let normalized = String(address);
-  const zoneIndex = normalized.indexOf("%");
-  if (zoneIndex !== -1) {
-    normalized = normalized.slice(0, zoneIndex);
-  }
-  if (normalized.includes(".")) {
-    const lastColonIndex = normalized.lastIndexOf(":");
-    const ipv4Part = normalized.slice(lastColonIndex + 1);
-    const ipv4Value = ipv4ToBigInt(ipv4Part);
-    const high = Number((ipv4Value >> 16n) & 65535n).toString(16);
-    const low = Number(ipv4Value & 65535n).toString(16);
-    normalized = `${normalized.slice(0, lastColonIndex)}:${high}:${low}`;
-  }
-  const hasDoubleColon = normalized.includes("::");
-  const [leftRaw, rightRaw] = hasDoubleColon ? normalized.split("::") : [normalized, ""];
-  const left = leftRaw.length > 0 ? leftRaw.split(":") : [];
-  const right = rightRaw.length > 0 ? rightRaw.split(":") : [];
-  const fill = hasDoubleColon ? Math.max(0, 8 - (left.length + right.length)) : 0;
-  const parts = [...left, ...new Array(fill).fill("0"), ...right];
-  if (parts.length !== 8) {
-    throw new TypeError(`Invalid IPv6 address: ${address}`);
-  }
-  return parts.map((part) => part.length === 0 ? "0" : part);
-}
-
-function ipv6ToBigInt(address) {
-  return expandIpv6Address(address).reduce((value, part) => (value << 16n) + BigInt(parseInt(part, 16)), 0n);
-}
-
-function ipAddressToBigInt(address, family) {
-  return family === "ipv4" ? ipv4ToBigInt(address) : ipv6ToBigInt(address);
-}
-
-function formatBlockListRule(rule) {
-  if (rule.type === "address") {
-    return `Address: ${rule.family === "ipv4" ? "IPv4" : "IPv6"} ${rule.address}`;
-  }
-  if (rule.type === "range") {
-    return `Range: ${rule.family === "ipv4" ? "IPv4" : "IPv6"} ${rule.start}-${rule.end}`;
-  }
-  return `Subnet: ${rule.family === "ipv4" ? "IPv4" : "IPv6"} ${rule.network}/${rule.prefix}`;
-}
-
-var BlockList = class {
-  _rules = [];
-  addAddress(address, family) {
-    const normalizedFamily = normalizeIpFamilyLabel(address, family);
-    this._rules.push({ type: "address", family: normalizedFamily, address: String(address) });
-    return this;
-  }
-  addRange(start, end, family) {
-    const normalizedFamily = normalizeIpFamilyLabel(start, family);
-    if (normalizeIpFamilyLabel(end, normalizedFamily) !== normalizedFamily) {
-      throw new TypeError("BlockList range family mismatch");
-    }
-    this._rules.push({
-      type: "range",
-      family: normalizedFamily,
-      start: String(start),
-      end: String(end)
-    });
-    return this;
-  }
-  addSubnet(network, prefix, family) {
-    const normalizedFamily = normalizeIpFamilyLabel(network, family);
-    const numericPrefix = Number(prefix);
-    const maxPrefix = normalizedFamily === "ipv4" ? 32 : 128;
-    if (!Number.isInteger(numericPrefix) || numericPrefix < 0 || numericPrefix > maxPrefix) {
-      throw new RangeError(`Invalid subnet prefix: ${prefix}`);
-    }
-    this._rules.push({
-      type: "subnet",
-      family: normalizedFamily,
-      network: String(network),
-      prefix: numericPrefix
-    });
-    return this;
-  }
-  check(address, family) {
-    const normalizedFamily = normalizeIpFamilyLabel(address, family);
-    const value = ipAddressToBigInt(String(address), normalizedFamily);
-    for (const rule of this._rules) {
-      if (rule.family !== normalizedFamily) {
-        continue;
-      }
-      if (rule.type === "address" && value === ipAddressToBigInt(rule.address, normalizedFamily)) {
-        return true;
-      }
-      if (rule.type === "range") {
-        const start = ipAddressToBigInt(rule.start, normalizedFamily);
-        const end = ipAddressToBigInt(rule.end, normalizedFamily);
-        if (value >= start && value <= end) {
-          return true;
-        }
-      }
-      if (rule.type === "subnet") {
-        const bits = normalizedFamily === "ipv4" ? 32n : 128n;
-        const prefixBits = BigInt(rule.prefix);
-        const shift = bits - prefixBits;
-        const mask = prefixBits === 0n ? 0n : ((1n << bits) - 1n) ^ ((1n << shift) - 1n);
-        const network = ipAddressToBigInt(rule.network, normalizedFamily);
-        if ((value & mask) === (network & mask)) {
-          return true;
-        }
-      }
-    }
-    return false;
-  }
-  toJSON() {
-    return this._rules.map((rule) => ({ ...rule }));
-  }
-  fromJSON(value) {
-    if (!Array.isArray(value)) {
-      throw new TypeError("BlockList JSON must be an array");
-    }
-    this._rules = value.map((rule) => ({ ...rule }));
-    return this;
-  }
-  get rules() {
-    return this._rules.map((rule) => formatBlockListRule(rule));
-  }
-};
-
-var defaultAutoSelectFamily = true;
-
-var defaultAutoSelectFamilyAttemptTimeout = 250;
-
-var SocketAddress = class _SocketAddress {
-  constructor(options = {}) {
-    const address = String(options.address ?? "");
-    const family = normalizeIpFamilyLabel(address, options.family);
-    const port = Number(options.port ?? 0);
-    const flowlabel = Number(options.flowlabel ?? 0);
-    if (!Number.isInteger(port) || port < 0 || port > 65535) {
-      throw new RangeError(`Invalid port: ${options.port}`);
-    }
-    if (!Number.isInteger(flowlabel) || flowlabel < 0) {
-      throw new RangeError(`Invalid flowlabel: ${options.flowlabel}`);
-    }
-    this.address = address;
-    this.port = port;
-    this.family = family;
-    this.flowlabel = flowlabel;
-  }
-  toJSON() {
-    return {
-      address: this.address,
-      port: this.port,
-      family: this.family,
-      flowlabel: this.flowlabel
-    };
-  }
-  static isSocketAddress(value) {
-    return value instanceof _SocketAddress;
-  }
-  static parse(value) {
-    const input = String(value);
-    if (input.startsWith("[")) {
-      const closingIndex = input.indexOf("]");
-      if (closingIndex === -1) {
-        return void 0;
-      }
-      const address = input.slice(1, closingIndex);
-      const port = input[closingIndex + 1] === ":" ? Number(input.slice(closingIndex + 2)) : 0;
-      return new _SocketAddress({ address, family: "ipv6", port });
-    }
-    const lastColonIndex = input.lastIndexOf(":");
-    if (lastColonIndex !== -1 && input.indexOf(":") === lastColonIndex) {
-      const address = input.slice(0, lastColonIndex);
-      const port = Number(input.slice(lastColonIndex + 1));
-      if (classifyIpAddress(address) !== 0 && Number.isInteger(port)) {
-        return new _SocketAddress({ address, port });
-      }
-    }
-    if (classifyIpAddress(input) !== 0) {
-      return new _SocketAddress({ address: input });
-    }
-    return void 0;
-  }
-};
-
-function normalizeSocketTimeout(timeout) {
-  if (typeof timeout !== "number") {
-    throw createTimeoutArgTypeError("timeout", timeout);
-  }
-  if (!Number.isFinite(timeout) || timeout < 0) {
-    throw createTimeoutRangeError(timeout);
-  }
-  return timeout;
-}
-
-function parseNetSocketInfo(data) {
-  if (!data) {
-    return null;
-  }
-  try {
-    const parsed = JSON.parse(data);
-    return parsed && typeof parsed === "object" ? parsed : null;
-  } catch {
-    return null;
-  }
-}
-
-function normalizeNetSocketHandle(handle) {
-  if (!handle) {
-    throw new Error("net.connect bridge returned an empty socket handle");
-  }
-  if (typeof handle === "string") {
-    return {
-      socketId: handle
-    };
-  }
-  if (typeof handle === "object" && (typeof handle.socketId === "string" || typeof handle.socketId === "number")) {
-    return handle;
-  }
-  if (typeof handle === "object" && handle.loopbackHttpTarget) {
-    return handle;
-  }
-  throw new Error("net.connect bridge returned an invalid socket handle");
-}
-
-function serializeTlsValue(value) {
-  if (value === void 0 || value === null) {
-    return void 0;
-  }
-  if (Array.isArray(value)) {
-    const entries = value.map((entry) => serializeTlsValue(entry)).flatMap((entry) => Array.isArray(entry) ? entry : entry ? [entry] : []);
-    return entries.length > 0 ? entries : void 0;
-  }
-  if (typeof value === "string") {
-    return { kind: "string", data: value };
-  }
-  if (Buffer.isBuffer(value) || value instanceof Uint8Array) {
-    return { kind: "buffer", data: Buffer.from(value).toString("base64") };
-  }
-  return void 0;
-}
-
-function isTlsSecureContextWrapper(value) {
-  return !!value && typeof value === "object" && "__secureExecTlsContext" in value;
-}
-
-function buildSerializedTlsOptions(options, extra) {
-  const contextOptions = isTlsSecureContextWrapper(options?.secureContext) ? options.secureContext.__secureExecTlsContext : void 0;
-  const serialized = {
-    ...contextOptions ?? {},
-    ...extra
-  };
-  const key = serializeTlsValue(options?.key);
-  const cert = serializeTlsValue(options?.cert);
-  const ca = serializeTlsValue(options?.ca);
-  if (key !== void 0) serialized.key = key;
-  if (cert !== void 0) serialized.cert = cert;
-  if (ca !== void 0) serialized.ca = ca;
-  if (typeof options?.passphrase === "string") serialized.passphrase = options.passphrase;
-  if (typeof options?.ciphers === "string") serialized.ciphers = options.ciphers;
-  if (Buffer.isBuffer(options?.session) || options?.session instanceof Uint8Array) {
-    serialized.session = Buffer.from(options.session).toString("base64");
-  }
-  if (Array.isArray(options?.ALPNProtocols)) {
-    const protocols = options.ALPNProtocols.filter((value) => typeof value === "string");
-    if (protocols.length > 0) {
-      serialized.ALPNProtocols = protocols;
-    }
-  }
-  if (typeof options?.minVersion === "string") serialized.minVersion = options.minVersion;
-  if (typeof options?.maxVersion === "string") serialized.maxVersion = options.maxVersion;
-  if (typeof options?.servername === "string") serialized.servername = options.servername;
-  if (typeof options?.rejectUnauthorized === "boolean") {
-    serialized.rejectUnauthorized = options.rejectUnauthorized;
-  }
-  if (typeof options?.requestCert === "boolean") {
-    serialized.requestCert = options.requestCert;
-  }
-  return serialized;
-}
-
-function parseTlsState(payload) {
-  if (!payload) {
-    return null;
-  }
-  try {
-    return JSON.parse(payload);
-  } catch {
-    return null;
-  }
-}
-
-function parseTlsClientHello(payload) {
-  if (!payload) {
-    return null;
-  }
-  try {
-    return JSON.parse(payload);
-  } catch {
-    return null;
-  }
-}
-
-function createBridgedTlsError(payload) {
-  if (!payload) {
-    return new Error("socket error");
-  }
-  try {
-    const parsed = JSON.parse(payload);
-    const error = new Error(parsed.message);
-    if (parsed.name) error.name = parsed.name;
-    if (parsed.code) {
-      error.code = parsed.code;
-    }
-    if (parsed.stack) error.stack = parsed.stack;
-    return error;
-  } catch {
-    return new Error(payload);
-  }
-}
-
-function deserializeTlsBridgeValue(value, refs = /* @__PURE__ */ new Map()) {
-  if (value === null || typeof value === "boolean" || typeof value === "number" || typeof value === "string") {
-    return value;
-  }
-  if (value.type === "undefined") {
-    return void 0;
-  }
-  if (value.type === "buffer") {
-    return Buffer.from(value.data, "base64");
-  }
-  if (value.type === "array") {
-    return value.value.map((entry) => deserializeTlsBridgeValue(entry, refs));
-  }
-  if (value.type === "ref") {
-    return refs.get(value.id);
-  }
-  const target = {};
-  refs.set(value.id, target);
-  for (const [key, entry] of Object.entries(value.value)) {
-    target[key] = deserializeTlsBridgeValue(entry, refs);
-  }
-  return target;
-}
-
-function queryTlsSocket(socketId, query, detailed) {
-  if (typeof _netSocketTlsQueryRaw === "undefined") {
-    return void 0;
-  }
-  const payload = _netSocketTlsQueryRaw.applySync(
-    void 0,
-    detailed === void 0 ? [socketId, query] : [socketId, query, detailed]
-  );
-  return deserializeTlsBridgeValue(JSON.parse(payload));
-}
-
-function finalizeTlsUpgrade(socket, eventName = "secureConnect", startReadPump = true) {
-  socket._tlsUpgrading = false;
-  socket.encrypted = true;
-  socket.authorized = socket.authorizationError == null;
-  if (typeof socket._socketId === "string" && socket._socketId.length > 0) {
-    const protocol = queryTlsSocket(socket._socketId, "getProtocol");
-    if (typeof protocol === "string" || protocol === null) {
-      socket._tlsProtocol = protocol;
-    }
-    const cipher = queryTlsSocket(socket._socketId, "getCipher");
-    if (cipher !== void 0) {
-      socket._tlsCipher = cipher;
-    }
-    const reused = queryTlsSocket(socket._socketId, "isSessionReused");
-    if (typeof reused === "boolean") {
-      socket._tlsSessionReused = reused;
-    }
-  }
-  socket._touchTimeout();
-  socket._emitNet(eventName);
-  if (eventName !== "secure") {
-    socket._emitNet("secure");
-  }
-  if (startReadPump && !socket.destroyed && !socket._bridgeReadLoopRunning) {
-    socket._nextReadPumpOrigin = "tls";
-    void socket._pumpBridgeReads();
-  }
-}
-
-function createConnectedSocketHandle(socketId) {
-  return {
-    socketId,
-    setNoDelay(enable) {
-      _netSocketSetNoDelayRaw?.applySync(void 0, [socketId, enable !== false]);
-      return this;
-    },
-    setKeepAlive(enable, initialDelay) {
-      _netSocketSetKeepAliveRaw?.applySync(void 0, [
-        socketId,
-        enable !== false,
-        normalizeKeepAliveDelay(initialDelay)
-      ]);
-      return this;
-    },
-    ref() {
-      return this;
-    },
-    unref() {
-      return this;
-    }
-  };
-}
-
-function createAcceptedClientHandle(socketId, info) {
-  return {
-    socketId,
-    info,
-    setNoDelay(enable) {
-      _netSocketSetNoDelayRaw?.applySync(void 0, [socketId, enable !== false]);
-      return this;
-    },
-    setKeepAlive(enable, initialDelay) {
-      _netSocketSetKeepAliveRaw?.applySync(void 0, [
-        socketId,
-        enable !== false,
-        normalizeKeepAliveDelay(initialDelay)
-      ]);
-      return this;
-    },
-    ref() {
-      return this;
-    },
-    unref() {
-      return this;
-    }
-  };
-}
-
-var NET_BRIDGE_TIMEOUT_SENTINEL = "__secure_exec_net_timeout__";
-
-var NET_BRIDGE_POLL_DELAY_MS = 10;
-
-var netBridgePollDelayOverrideMs = null;
-
-function isNetBridgeTraceEnabled() {
-  const env = typeof process !== "undefined" ? process.env : globalThis.__agentOSProcessConfigEnv;
-  return env?.AGENTOS_NET_BRIDGE_TRACE === "1";
-}
-
-function normalizeNetBridgePollDelayMs(value) {
-  const numeric = Number(value);
-  if (!Number.isFinite(numeric) || numeric < 0) {
-    return NET_BRIDGE_POLL_DELAY_MS;
-  }
-  return Math.trunc(numeric);
-}
-
-function netBridgePollDelayMs() {
-  return netBridgePollDelayOverrideMs ?? NET_BRIDGE_POLL_DELAY_MS;
-}
-
-function isNetRetainOwnedWriteBufferEnabled() {
-  const processEnv = typeof process !== "undefined" ? process.env : undefined;
-  const configEnv = globalThis.__agentOSProcessConfigEnv;
-  return processEnv?.AGENTOS_NET_RETAIN_OWNED_WRITE_BUFFER !== "0" && configEnv?.AGENTOS_NET_RETAIN_OWNED_WRITE_BUFFER !== "0";
-}
-
-function createNetBridgeMetrics() {
-  return {
-    userWriteCalls: 0,
-    userWriteBytes: 0,
-    queuedWriteChunks: 0,
-    queuedWriteBytes: 0,
-    queuedWriteCopiedChunks: 0,
-    queuedWriteCopiedBytes: 0,
-    queuedWriteRetainedChunks: 0,
-    queuedWriteRetainedBytes: 0,
-    flushCalls: 0,
-    flushChunks: 0,
-    flushBytes: 0,
-    writeBufferedBytesMax: 0,
-    writeBufferedChunksMax: 0,
-    writeBase64EncodeCalls: 0,
-    writeBase64EncodeBytes: 0,
-    writeBase64EncodeUs: 0,
-    writeRawCalls: 0,
-    writeRawBytes: 0,
-    writeRawElapsedUs: 0,
-    readRawCalls: 0,
-    readRawElapsedUs: 0,
-    readPumpRuns: 0,
-    readTimeoutSentinels: 0,
-    readPollTimersScheduled: 0,
-    readPollTimerFires: 0,
-    readPollTimerFireLagUs: 0,
-    readPollTimerFireLagMaxUs: 0,
-    readDataEvents: 0,
-    readBytes: 0,
-    readBase64DecodeCalls: 0,
-    readBase64DecodeBytes: 0,
-    readBase64DecodeChars: 0,
-    readBase64DecodeUs: 0,
-    readPayloadMaterializeCalls: 0,
-    readPayloadMaterializeBytes: 0,
-    readPayloadMaterializeUs: 0,
-    readEndEvents: 0,
-    readMacrotaskYields: 0,
-    readMacrotaskYieldElapsedUs: 0,
-    readMacrotaskYieldMaxUs: 0,
-    queueReadablePayloads: 0,
-    queueReadablePayloadElapsedUs: 0,
-    queueReadablePayloadMaxUs: 0,
-    queueReadableBytes: 0,
-    queueReadableBytesMax: 0,
-    queueReadableImmediateReadCalls: 0,
-    queueReadableImmediateReadUs: 0,
-    queueReadableImmediateReadMaxUs: 0,
-    socketReadableEmits: 0,
-    socketReadableEmitUs: 0,
-    socketReadableEmitMaxUs: 0,
-    socketDataEmits: 0,
-    socketDataEmitUs: 0,
-    socketDataEmitMaxUs: 0,
-    readPostDeliveryProbeCalls: 0,
-    readPostDeliveryProbeTimeoutSentinels: 0,
-    readPostDeliveryProbeDataEvents: 0,
-    readPostDeliveryNextRawCalls: 0,
-    readPostDeliveryNextRawTimeoutSentinels: 0,
-    readPostDeliveryNextRawDataEvents: 0,
-    readPostDeliveryToProbeStartUs: 0,
-    readPostDeliveryProbeElapsedUs: 0,
-    readPostDeliveryProbeMaxUs: 0,
-    readPostDeliveryPendingWriteFlushes: 0,
-    readPostDeliveryPendingWriteBytes: 0,
-    userWriteDuringDataEmitCalls: 0,
-    dataEmitStartToUserWriteUs: 0,
-    dataEmitEndToUserWriteUs: 0,
-    writeQueuedToFlushStartUs: 0,
-    writeQueuedToFlushStartMaxUs: 0,
-    writeFlushQueuedToRawUs: 0,
-    writeFlushQueuedToRawMaxUs: 0,
-    readWakeQueuedToPumpStartUs: 0,
-    readWakeQueuedToPumpStartMaxUs: 0,
-    acceptWakeQueuedToPumpStartUs: 0,
-    acceptWakeQueuedToPumpStartMaxUs: 0,
-    socketEndEmits: 0,
-    socketCloseEmits: 0,
-    socketConnectEmits: 0,
-    acceptRawCalls: 0,
-    acceptRawElapsedUs: 0,
-    acceptPumpRuns: 0,
-    acceptLoopAlreadyRunning: 0,
-    acceptTimeoutSentinels: 0,
-    acceptPollTimersScheduled: 0,
-    acceptPollTimerFires: 0,
-    acceptPollTimerFireLagUs: 0,
-    acceptPollTimerFireLagMaxUs: 0,
-    acceptConnections: 0,
-    acceptJsonParseUs: 0,
-    acceptOnConnectionUs: 0,
-    connectionEmits: 0,
-    readEventWakeups: 0,
-    readWakeAttempts: 0,
-    readWakeInvalidTargets: 0,
-    readWakeAlreadyRunning: 0,
-    readWakeNoTimer: 0,
-    readWakeNoTimerBeforeFirstPump: 0,
-    readWakeNoTimerAfterFirstPump: 0,
-    readWakeNoTimerConnected: 0,
-    readWakeNoTimerConnecting: 0,
-    readWakeNoTimerRefed: 0,
-    readWakeNoTimerUnrefed: 0,
-    readWakeNoTimerHasDataListener: 0,
-    readWakeNoTimerHasReadableListener: 0,
-    readWakeNoTimerPendingWriteFlush: 0,
-    readWakeNoTimerPendingWriteBytes: 0,
-    readFirstPumpAfterNoTimerWakeCalls: 0,
-    readFirstPumpAfterNoTimerWakeUs: 0,
-    readFirstPumpAfterNoTimerWakeMaxUs: 0,
-    readFirstPumpOriginConnectWait: 0,
-    readFirstPumpOriginAcceptedHandle: 0,
-    readFirstPumpOriginEventWake: 0,
-    readFirstPumpOriginTimer: 0,
-    readFirstPumpOriginRef: 0,
-    readFirstPumpOriginTls: 0,
-    readFirstPumpOriginUnknown: 0,
-    readFirstPumpResultData: 0,
-    readFirstPumpResultEnd: 0,
-    readFirstPumpResultTimeout: 0,
-    readFirstPumpScheduleCandidates: 0,
-    readFirstPumpScheduleQueued: 0,
-    readFirstPumpScheduleAlreadyScheduled: 0,
-    readFirstPumpScheduleRuns: 0,
-    readFirstPumpSchedulePumpCalls: 0,
-    readFirstPumpScheduleSkipDestroyed: 0,
-    readFirstPumpScheduleSkipTlsUpgrading: 0,
-    readFirstPumpScheduleSkipPumpStarted: 0,
-    readFirstPumpScheduleSkipLoopRunning: 0,
-    readFirstPumpScheduleSkipSocketClosed: 0,
-    readFirstPumpScheduleQueuedToRunUs: 0,
-    readFirstPumpScheduleQueuedToRunMaxUs: 0,
-    readFirstPumpScheduleQueuedToPumpStartUs: 0,
-    readFirstPumpScheduleQueuedToPumpStartMaxUs: 0,
-    readFirstPumpScheduleResultData: 0,
-    readFirstPumpScheduleResultTimeout: 0,
-    readFirstPumpScheduleResultEnd: 0,
-    peerWakeScans: 0,
-    peerWakeInvalidTargets: 0,
-    peerWakeFound: 0,
-    peerWakeMiss: 0,
-    peerWakeUnixFound: 0,
-    peerWakeUnixMiss: 0,
-    peerWakeOnShutdown: 0,
-    peerWakeOnDestroy: 0,
-    acceptEventWakeups: 0,
-    acceptWakeAttempts: 0,
-    acceptWakeInvalidTargets: 0,
-    acceptWakeNoTimer: 0,
-    acceptWakeNoTimerBeforeFirstPump: 0,
-    acceptWakeNoTimerAfterFirstPump: 0,
-    acceptWakeNoTimerLoopRunning: 0,
-    acceptWakeNoTimerLoopActive: 0,
-    acceptWakeNoTimerRefed: 0,
-    acceptWakeNoTimerUnrefed: 0,
-    acceptWakeNoTimerConnections: 0,
-    acceptWakeNoTimerConnectionsMax: 0,
-    acceptFirstPumpAfterNoTimerWakeCalls: 0,
-    acceptFirstPumpAfterNoTimerWakeUs: 0,
-    acceptFirstPumpAfterNoTimerWakeMaxUs: 0,
-    acceptFirstPumpOriginListen: 0,
-    acceptFirstPumpOriginEventWake: 0,
-    acceptFirstPumpOriginTimer: 0,
-    acceptFirstPumpOriginRef: 0,
-    acceptFirstPumpOriginUnknown: 0,
-    acceptFirstPumpResultConnection: 0,
-    acceptFirstPumpResultTimeout: 0,
-    acceptFirstPumpResultEmpty: 0,
-    acceptWakeAlreadyRunning: 0,
-    acceptWakeSocketScans: 0,
-    acceptWakeSocketInvalidTargets: 0,
-    acceptWakeSocketFound: 0,
-    acceptWakeSocketMiss: 0,
-    acceptWakeSocketUnixFound: 0,
-    acceptWakeSocketUnixMiss: 0,
-    dgramWakeAttempts: 0,
-    dgramWakeInvalidTargets: 0,
-    dgramWakeAlreadyRunning: 0,
-    dgramWakeNoTimer: 0,
-    dgramEventWakeups: 0,
-    dgramWakeLoopbackHits: 0,
-    dgramWakeLoopbackMisses: 0
-  };
-}
-
-var netBridgeTraceForced = false;
-
-var netBridgeMetrics = createNetBridgeMetrics();
-
-function isNetBridgeMetricsEnabled() {
-  return netBridgeTraceForced || isNetBridgeTraceEnabled();
-}
-
-function netBridgeNowUs() {
-  if (typeof __secureExecHrNowUs === "function") {
-    return Math.round(__secureExecHrNowUs());
-  }
-  if (typeof performance !== "undefined" && typeof performance.now === "function") {
-    return Math.round(performance.now() * 1000);
-  }
-  return Date.now() * 1000;
-}
-
-function countNetBridgeMetric(name, amount = 1) {
-  if (!isNetBridgeMetricsEnabled()) return;
-  netBridgeMetrics[name] = (netBridgeMetrics[name] ?? 0) + amount;
-}
-
-function maxNetBridgeMetric(name, value) {
-  if (!isNetBridgeMetricsEnabled()) return;
-  const numeric = Number(value);
-  if (!Number.isFinite(numeric)) return;
-  netBridgeMetrics[name] = Math.max(netBridgeMetrics[name] ?? 0, numeric);
-}
-
-function countReadFirstPumpOrigin(origin) {
-  switch (origin) {
-    case "connectWait":
-      countNetBridgeMetric("readFirstPumpOriginConnectWait");
-      break;
-    case "acceptedHandle":
-      countNetBridgeMetric("readFirstPumpOriginAcceptedHandle");
-      break;
-    case "eventWake":
-      countNetBridgeMetric("readFirstPumpOriginEventWake");
-      break;
-    case "timer":
-      countNetBridgeMetric("readFirstPumpOriginTimer");
-      break;
-    case "ref":
-      countNetBridgeMetric("readFirstPumpOriginRef");
-      break;
-    case "tls":
-      countNetBridgeMetric("readFirstPumpOriginTls");
-      break;
-    default:
-      countNetBridgeMetric("readFirstPumpOriginUnknown");
-      break;
-  }
-}
-
-function countAcceptFirstPumpOrigin(origin) {
-  switch (origin) {
-    case "listen":
-      countNetBridgeMetric("acceptFirstPumpOriginListen");
-      break;
-    case "eventWake":
-      countNetBridgeMetric("acceptFirstPumpOriginEventWake");
-      break;
-    case "timer":
-      countNetBridgeMetric("acceptFirstPumpOriginTimer");
-      break;
-    case "ref":
-      countNetBridgeMetric("acceptFirstPumpOriginRef");
-      break;
-    default:
-      countNetBridgeMetric("acceptFirstPumpOriginUnknown");
-      break;
-  }
-}
-
-exposeCustomGlobal("__agentOSNetBridgeMetrics", {
-  get enabled() {
-    return isNetBridgeMetricsEnabled();
-  },
-  enable() {
-    netBridgeTraceForced = true;
-  },
-  disable() {
-    netBridgeTraceForced = false;
-  },
-  setPollDelayMs(value) {
-    netBridgePollDelayOverrideMs = normalizeNetBridgePollDelayMs(value);
-  },
-  resetPollDelayMs() {
-    netBridgePollDelayOverrideMs = null;
-  },
-  pollDelayMs() {
-    return netBridgePollDelayMs();
-  },
-  reset() {
-    netBridgeMetrics = createNetBridgeMetrics();
-    if (typeof _benchNetTcpMetricsResetRaw !== "undefined") {
-      _benchNetTcpMetricsResetRaw.applySync(void 0, []);
-    }
-  },
-  snapshot() {
-    let sidecarNetTrace = void 0;
-    if (typeof _benchNetTcpMetricsSnapshotRaw !== "undefined") {
-      sidecarNetTrace = _benchNetTcpMetricsSnapshotRaw.applySync(void 0, []);
-    }
-    return {
-      ...netBridgeMetrics,
-      ...(sidecarNetTrace ? { sidecarNetTrace } : {})
-    };
-  }
-});
-
-function yieldBridgeMacrotask() {
-  return new Promise((resolve) => {
-    if (typeof setImmediate === "function") {
-      setImmediate(resolve);
-    } else {
-      setTimeout(resolve, 0);
-    }
-  });
-}
-
-function netSocketDispatch(socketId, event, data) {
-  if (socketId === "net_socket" && event && typeof event === "object") {
-    const payload = event;
-    if (payload.event === "accept") {
-      const server = registeredNetServersById.get(payload.serverId);
-      if (server) {
-        wakeNetServerAccept(server);
-      }
-      return;
-    }
-    if (payload.event === "dgram") {
-      globalThis._dgramSocketDispatch?.(payload);
-      return;
-    }
-    if (payload.event === "http2") {
-      globalThis._http2RetainDispatch?.(payload);
-      return;
-    }
-    const target = getRegisteredNetSocket(payload.socketId);
-    if (target) {
-      countNetBridgeMetric("readEventWakeups");
-      wakeSocketBridgeReads(target);
-    }
-    return;
-  }
-  if (socketId && typeof socketId === "object") {
-    const payload = socketId;
-    if (payload.event === "accept") {
-      const server = registeredNetServersById.get(payload.serverId);
-      if (server) {
-        wakeNetServerAccept(server);
-      }
-      return;
-    }
-    if (payload.event === "dgram") {
-      globalThis._dgramSocketDispatch?.(payload);
-      return;
-    }
-    if (payload.event === "http2") {
-      globalThis._http2RetainDispatch?.(payload);
-      return;
-    }
-    const target = getRegisteredNetSocket(payload.socketId);
-    if (target) {
-      countNetBridgeMetric("readEventWakeups");
-      wakeSocketBridgeReads(target);
-    }
-    return;
-  }
-  if (socketId === 0 && event.startsWith("http2:")) {
-    debugBridgeNetwork("http2 dispatch via netSocket", event);
-    try {
-      const payload = data ? JSON.parse(data) : {};
-      http2Dispatch(
-        event.slice("http2:".length),
-        Number(payload.id ?? 0),
-        payload.data,
-        payload.extra,
-        payload.extraNumber,
-        payload.extraHeaders,
-        payload.flags
-      );
-    } catch {
-    }
-    return;
-  }
-  const socket = getRegisteredNetSocket(socketId);
-  if (!socket) return;
-  switch (event) {
-    case "connect": {
-      socket._applySocketInfo(parseNetSocketInfo(data));
-      socket._connected = true;
-      socket.connecting = false;
-      socket._touchTimeout();
-      socket._emitNet("connect");
-      socket._emitNet("ready");
-      break;
-    }
-    case "secureConnect":
-    case "secure": {
-      const state = parseTlsState(data);
-      if (state) {
-        socket.authorized = state.authorized === true;
-        socket.authorizationError = state.authorizationError;
-        socket.alpnProtocol = state.alpnProtocol ?? false;
-        socket.servername = state.servername ?? socket.servername;
-        socket._tlsProtocol = state.protocol ?? null;
-        socket._tlsSessionReused = state.sessionReused === true;
-        socket._tlsCipher = state.cipher ?? null;
-      }
-      finalizeTlsUpgrade(socket, event);
-      break;
-    }
-    case "data": {
-      const buf = typeof Buffer !== "undefined" ? Buffer.from(data, "base64") : new Uint8Array(0);
-      socket._touchTimeout();
-      socket._emitNet("data", buf);
-      break;
-    }
-    case "end":
-      socket._handleRemoteReadableEnd();
-      break;
-    case "session": {
-      const session = typeof Buffer !== "undefined" ? Buffer.from(data ?? "", "base64") : new Uint8Array(0);
-      socket._tlsSession = Buffer.from(session);
-      socket._emitNet("session", session);
-      break;
-    }
-    case "error":
-      if (data) {
-        try {
-          const parsed = JSON.parse(data);
-          socket.authorized = parsed.authorized === true;
-          socket.authorizationError = parsed.authorizationError;
-        } catch {
-        }
-      }
-      socket._emitNet("error", createBridgedTlsError(data));
-      break;
-    case "close":
-      socket._emitSocketClose(false);
-      break;
-  }
-}
-
-exposeCustomGlobal("_netSocketDispatch", netSocketDispatch);
-
-const NET_BRIDGE_MAX_RAW_WRITE_BYTES = 256 * 1024;
-
-var NetSocket = class _NetSocket {
-  _listeners = {};
-  _onceListeners = {};
-  _socketId = 0;
-  _loopbackServer = null;
-  _loopbackBuffer = Buffer.alloc(0);
-  _loopbackDispatchRunning = false;
-  _loopbackDispatchPending = false;
-  _loopbackReadableEnded = false;
-  _loopbackUpgradeSocket = null;
-  _loopbackEventQueue = Promise.resolve();
-  _encoding;
-  _noDelayState = false;
-  _keepAliveState = false;
-  _keepAliveDelaySeconds = 0;
-  _refed = true;
-	  _bridgeReadLoopRunning = false;
-	  _bridgeReadPumpQueued = false;
-	  _bridgeReadPollTimer = null;
-	  _pendingBridgeWake = false;
-	  _pendingBridgeWakeRetries = 0;
-	  _bridgeReadPumpStarted = false;
-  _bridgeReadFirstPumpBenchmarkScheduled = false;
-  _readFirstPumpScheduleActive = false;
-  _readFirstPumpScheduleQueuedAtUs = 0;
-  _nextReadPumpOrigin = null;
-  _firstReadNoTimerWakeAtUs = 0;
-  _timeoutMs = 0;
-  _timeoutTimer = null;
-  _pendingBridgeWriteChunks = null;
-	    _pendingBridgeWriteCallbacks = null;
-	    _pendingBridgeWriteBytes = 0;
-	    _bridgeWriteFlushScheduled = false;
-	    _bridgeWriteFlushQueuedAtUs = 0;
-		    _lastReadDeliveryEndUs = 0;
-		    _currentDataEmitStartUs = 0;
-		    _wroteDuringDataEmit = false;
-		    _lastDataEmitEndUs = 0;
-	    _readWakeQueuedAtUs = 0;
-	    _tlsUpgrading = false;
-  _remoteEnded = false;
-  _writableEnded = false;
-  _closeEmitted = false;
-  _bridgeReleased = false;
-  _connected = false;
-  connecting = false;
-  destroyed = false;
-  writable = true;
-  readable = true;
-  readyState = "open";
-  readableLength = 0;
-  writableLength = 0;
-  remoteAddress;
-  remotePort;
-  remoteFamily;
-  localAddress = "0.0.0.0";
-  localPort = 0;
-  localFamily = "IPv4";
-  localPath;
-  remotePath;
-  bytesRead = 0;
-  bytesWritten = 0;
-  bufferSize = 0;
-  pending = true;
-  allowHalfOpen = false;
-  encrypted = false;
-  authorized = false;
-  authorizationError;
-  servername;
-  alpnProtocol = false;
-  writableHighWaterMark = 16 * 1024;
-  server;
-  _tlsCipher = null;
-  _tlsProtocol = null;
-  _tlsSession = null;
-  _tlsSessionReused = false;
-  // Readable stream state stub for library compatibility
-  _readableState = { endEmitted: false, ended: false };
-  _readQueue = [];
-  _handle = null;
-  constructor(options) {
-    if (options?.allowHalfOpen) this.allowHalfOpen = true;
-    if (options?.handle) this._handle = options.handle;
-  }
-  connect(portOrOptions, hostOrCallback, callback) {
-    if (typeof _netSocketConnectRaw === "undefined") {
-      throw new Error("net.Socket is not supported in sandbox (bridge not available)");
-    }
-    const {
-      host = "127.0.0.1",
-      port = 0,
-      path,
-      localAddress,
-      localPort,
-      keepAlive,
-      keepAliveInitialDelay,
-      callback: cb
-    } = normalizeConnectArgs(portOrOptions, hostOrCallback, callback);
-    if (cb) this.once("connect", cb);
-    this.connecting = true;
-    this.remoteAddress = path ?? host;
-    this.remotePort = path ? void 0 : port;
-    this.remotePath = path;
-    this.pending = false;
-    let handle;
-    try {
-      handle = normalizeNetSocketHandle(_netSocketConnectRaw.applySync(
-        void 0,
-        [path ? { path } : { host, port, localAddress, localPort }]
-      ));
-    } catch (error) {
-      this.connecting = false;
-      this.pending = false;
-      queueMicrotask(() => {
-        if (!this.destroyed) {
-          this.destroy(error);
-        }
-      });
-      return this;
-    }
-    if (handle.loopbackHttpTarget) {
-      this._loopbackHttpTarget = handle.loopbackHttpTarget;
-      this._applySocketInfo(handle);
-      this._connected = true;
-      this.connecting = false;
-      queueMicrotask(() => {
-        this._touchTimeout();
-        this._emitNet("connect");
-        this._emitNet("ready");
-      });
-      return this;
-    }
-    debugBridgeNetwork("socket connect", handle.socketId, host, port, path ?? null);
-    this._socketId = handle.socketId;
-    this._handle = createConnectedSocketHandle(this._socketId);
-    this._applySocketInfo(handle);
-    registerNetSocket(this._socketId, this);
-    void this._waitForConnect();
-    if (keepAlive) {
-      this.once("connect", () => {
-        this.setKeepAlive(true, keepAliveInitialDelay);
-      });
-    }
-    return this;
-  }
-  write(data, encodingOrCallback, callback) {
-    let buf;
-    let canRetainWriteBuffer = false;
-    if (Buffer.isBuffer(data)) {
-      buf = data;
-    } else if (typeof data === "string") {
-      const enc = typeof encodingOrCallback === "string" ? encodingOrCallback : "utf-8";
-      buf = Buffer.from(data, enc);
-      canRetainWriteBuffer = isNetRetainOwnedWriteBufferEnabled();
-    } else {
-      buf = Buffer.from(data);
-    }
-    if (this._loopbackServer || this._loopbackHttpTarget) {
-      debugBridgeNetwork("socket write loopback", this._socketId, buf.length);
-      this.bytesWritten += buf.length;
-      if (this._loopbackUpgradeSocket) {
-        this._touchTimeout();
-        this._loopbackUpgradeSocket._pushData(buf);
-        const cb2 = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-        if (cb2) cb2();
-        return true;
-      }
-      this._loopbackBuffer = Buffer.concat([this._loopbackBuffer, buf]);
-      this._touchTimeout();
-      this._dispatchLoopbackHttpRequest();
-      const cb2 = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-      if (cb2) cb2();
-      return true;
-    }
-    if (typeof _netSocketWriteRaw === "undefined") return false;
-	      if (this.destroyed || !this._socketId) return false;
-	      countNetBridgeMetric("userWriteCalls");
-	      countNetBridgeMetric("userWriteBytes", buf.length);
-	      if (isNetBridgeMetricsEnabled()) {
-	        const nowUs = netBridgeNowUs();
-		        if (this._currentDataEmitStartUs > 0) {
-		          countNetBridgeMetric("userWriteDuringDataEmitCalls");
-		          countNetBridgeMetric("dataEmitStartToUserWriteUs", nowUs - this._currentDataEmitStartUs);
-		          this._wroteDuringDataEmit = true;
-		        } else if (this._lastDataEmitEndUs > 0) {
-	          countNetBridgeMetric("dataEmitEndToUserWriteUs", nowUs - this._lastDataEmitEndUs);
-	        }
-	      }
-	      this.bytesWritten += buf.length;
-    const cb = typeof encodingOrCallback === "function" ? encodingOrCallback : callback;
-    this._queueBridgeWrite(buf, cb, canRetainWriteBuffer);
-    return true;
-  }
-  end(dataOrCallback, encodingOrCallback, callback) {
-    if (typeof dataOrCallback === "function") {
-      this.once("finish", dataOrCallback);
-    } else if (dataOrCallback != null) {
-      this.write(dataOrCallback, encodingOrCallback, callback);
-    }
-    if (this._writableEnded || this.destroyed) {
-      return this;
-    }
-    this._writableEnded = true;
-    this.writable = false;
-    queueMicrotask(() => {
-      if (!this.destroyed) {
-        this._emitNet("finish");
-        if (this._remoteEnded) {
-          this._emitSocketClose(false);
-        }
-      }
-    });
-    if (this._loopbackServer || this._loopbackHttpTarget) {
-      if (this._loopbackUpgradeSocket) {
-        queueMicrotask(() => {
-          this._loopbackUpgradeSocket?._pushEnd();
-        });
-      } else if (!this._loopbackReadableEnded) {
-        queueMicrotask(() => {
-          this._closeLoopbackReadable();
-        });
-      }
-      return this;
-    }
-    if (typeof _netSocketEndRaw !== "undefined" && this._socketId && !this.destroyed) {
-      this._flushBridgeWrites();
-      debugBridgeNetwork("socket end", this._socketId);
-      _netSocketEndRaw.applySync(void 0, [this._socketId]);
-      countNetBridgeMetric("peerWakeOnShutdown");
-      wakePeerBridgeReads(this);
-      this._touchTimeout();
-    }
-    return this;
-  }
-  destroy(error) {
-    if (this.destroyed) return this;
-    debugBridgeNetwork("socket destroy", this._socketId, error?.message ?? null);
-    this.destroyed = true;
-    this._writableEnded = true;
-    this.writable = false;
-    this.readable = false;
-    this._readableState.endEmitted = true;
-    this._readableState.ended = true;
-    this._clearTimeoutTimer();
-    if (this._bridgeReadPollTimer) {
-      clearTimeout(this._bridgeReadPollTimer);
-      this._bridgeReadPollTimer = null;
-    }
-    if (this._loopbackServer || this._loopbackHttpTarget) {
-      this._loopbackUpgradeSocket?.destroy(error);
-      this._loopbackUpgradeSocket = null;
-      this._loopbackServer = null;
-      this._loopbackHttpTarget = null;
-      if (error) {
-        this._emitNet("error", error);
-      }
-      this._emitSocketClose(Boolean(error));
-      return this;
-    }
-    this._releaseBridgeSocket();
-    if (error) {
-      this._emitNet("error", error);
-    }
-    this._emitSocketClose(Boolean(error));
-    return this;
-  }
-  _queueBridgeWrite(buf, callback, retainInput = false) {
-    if (!this._pendingBridgeWriteChunks) {
-      this._pendingBridgeWriteChunks = [];
-      this._pendingBridgeWriteCallbacks = [];
-    }
-    const chunk = retainInput ? buf : Buffer.from(buf);
-    this._pendingBridgeWriteChunks.push(chunk);
-    this._pendingBridgeWriteBytes += chunk.length;
-    countNetBridgeMetric("queuedWriteChunks");
-    countNetBridgeMetric("queuedWriteBytes", chunk.length);
-    if (retainInput) {
-      countNetBridgeMetric("queuedWriteRetainedChunks");
-      countNetBridgeMetric("queuedWriteRetainedBytes", chunk.length);
-    } else {
-      countNetBridgeMetric("queuedWriteCopiedChunks");
-      countNetBridgeMetric("queuedWriteCopiedBytes", chunk.length);
-    }
-    maxNetBridgeMetric("writeBufferedBytesMax", this._pendingBridgeWriteBytes);
-    maxNetBridgeMetric("writeBufferedChunksMax", this._pendingBridgeWriteChunks.length);
-    if (callback) {
-      this._pendingBridgeWriteCallbacks.push(callback);
-    }
-		      if (this._currentDataEmitStartUs > 0) {
-		        countNetBridgeMetric("writeFlushInlineDuringDataEmit");
-		        this._flushBridgeWrites();
-		      } else if (!this._bridgeWriteFlushScheduled) {
-		        this._bridgeWriteFlushScheduled = true;
-		        if (isNetBridgeMetricsEnabled()) {
-		          this._bridgeWriteFlushQueuedAtUs = netBridgeNowUs();
-		        }
-		        queueMicrotask(() => {
-		          this._flushBridgeWrites();
-		        });
-	    }
-  }
-  _flushBridgeWrites() {
-	      const chunks = this._pendingBridgeWriteChunks;
-	      if (!chunks || chunks.length === 0) {
-	        this._bridgeWriteFlushScheduled = false;
-	        this._bridgeWriteFlushQueuedAtUs = 0;
-	        return;
-	      }
-    const callbacks = this._pendingBridgeWriteCallbacks ?? [];
-    const totalBytes = this._pendingBridgeWriteBytes;
-    this._pendingBridgeWriteChunks = null;
-    this._pendingBridgeWriteCallbacks = null;
-    this._pendingBridgeWriteBytes = 0;
-    this._bridgeWriteFlushScheduled = false;
-    if (this.destroyed || !this._socketId || typeof _netSocketWriteRaw === "undefined") {
-      return;
-    }
-	      const traceMetrics = isNetBridgeMetricsEnabled();
-	      if (traceMetrics && this._bridgeWriteFlushQueuedAtUs > 0) {
-	        const queuedToFlushUs = Math.max(0, netBridgeNowUs() - this._bridgeWriteFlushQueuedAtUs);
-	        countNetBridgeMetric("writeQueuedToFlushStartUs", queuedToFlushUs);
-	        maxNetBridgeMetric("writeQueuedToFlushStartMaxUs", queuedToFlushUs);
-	        countNetBridgeMetric("writeFlushQueuedToRawUs", queuedToFlushUs);
-	        maxNetBridgeMetric("writeFlushQueuedToRawMaxUs", queuedToFlushUs);
-	        this._bridgeWriteFlushQueuedAtUs = 0;
-	      }
-	      debugBridgeNetwork("socket write", this._socketId, totalBytes, chunks.length);
-    countNetBridgeMetric("flushCalls");
-    countNetBridgeMetric("flushChunks", chunks.length);
-    countNetBridgeMetric("flushBytes", totalBytes);
-    const writeStartUs = traceMetrics ? netBridgeNowUs() : 0;
-    let pending = [];
-    let pendingBytes = 0;
-    const flushPending = () => {
-      if (pendingBytes === 0) return;
-      const payload = pending.length === 1 ? pending[0] : Buffer.concat(pending, pendingBytes);
-      countNetBridgeMetric("writeRawCalls");
-      countNetBridgeMetric("writeRawBytes", payload.length);
-      _netSocketWriteRaw.applySync(void 0, [this._socketId, payload]);
-      pending = [];
-      pendingBytes = 0;
-    };
-    for (const chunk of chunks) {
-      for (let offset = 0; offset < chunk.length; offset += NET_BRIDGE_MAX_RAW_WRITE_BYTES) {
-        const piece = chunk.subarray(offset, offset + NET_BRIDGE_MAX_RAW_WRITE_BYTES);
-        if (pendingBytes > 0 && pendingBytes + piece.length > NET_BRIDGE_MAX_RAW_WRITE_BYTES) {
-          flushPending();
-        }
-        pending.push(piece);
-        pendingBytes += piece.length;
-        if (pendingBytes >= NET_BRIDGE_MAX_RAW_WRITE_BYTES) {
-          flushPending();
-        }
-      }
-    }
-    flushPending();
-    if (traceMetrics) {
-      countNetBridgeMetric("writeRawElapsedUs", netBridgeNowUs() - writeStartUs);
-    }
-    wakePeerBridgeReads(this);
-    this._touchTimeout();
-    for (const callback of callbacks) {
-      callback();
-    }
-  }
-  _emitSocketClose(hadError = false) {
-    if (this._closeEmitted) {
-      return;
-    }
-    this._closeEmitted = true;
-    this._connected = false;
-    this.connecting = false;
-    this.pending = false;
-    this.readable = false;
-    this.writable = false;
-    this._clearTimeoutTimer();
-    if (this._socketId) {
-      unregisterNetSocket(this._socketId);
-    }
-    if (this.readableLength > 0) {
-      this._deferBridgeReleaseUntilReadDrained = true;
-    } else {
-      this._releaseBridgeSocket();
-    }
-    this._emitNet("close", hadError);
-  }
-  _releaseDeferredBridgeSocket() {
-    if (!this._deferBridgeReleaseUntilReadDrained || this.readableLength > 0) {
-      return;
-    }
-    this._deferBridgeReleaseUntilReadDrained = false;
-    this._releaseBridgeSocket();
-  }
-  _releaseBridgeSocket() {
-    if (this._bridgeReleased || !this._socketId || typeof _netSocketDestroyRaw === "undefined") {
-      return;
-    }
-    this._bridgeReleased = true;
-    try {
-      _netSocketDestroyRaw.applySync(void 0, [this._socketId]);
-    } catch {
-    }
-    countNetBridgeMetric("peerWakeOnDestroy");
-    wakePeerBridgeReads(this);
-  }
-  _handleRemoteReadableEnd() {
-    if (this.destroyed || this._remoteEnded) {
-      return;
-    }
-    debugBridgeNetwork("socket remote end", this._socketId);
-    this._remoteEnded = true;
-    this.readable = false;
-    this._readableState.endEmitted = true;
-    this._readableState.ended = true;
-    queueMicrotask(() => {
-      if (this.destroyed) {
-        return;
-      }
-      this._emitNet("end");
-      if (this.destroyed) {
-        return;
-      }
-      if (!this.allowHalfOpen && !this._writableEnded) {
-        this.end();
-        return;
-      }
-      if (this._writableEnded) {
-        this._emitSocketClose(false);
-      }
-    });
-  }
-  _applySocketInfo(info) {
-    if (!info) {
-      return;
-    }
-    this.localAddress = info.localAddress;
-    this.localPort = info.localPort;
-    this.localFamily = info.localFamily;
-    this.localPath = info.localPath;
-    this.remoteAddress = info.remoteAddress ?? this.remoteAddress;
-    this.remotePort = info.remotePort ?? this.remotePort;
-    this.remoteFamily = info.remoteFamily ?? this.remoteFamily;
-    this.remotePath = info.remotePath ?? this.remotePath;
-  }
-  _applyAcceptedKeepAlive(initialDelay) {
-    this._keepAliveState = true;
-    this._keepAliveDelaySeconds = normalizeKeepAliveDelay(initialDelay);
-  }
-  static fromAcceptedHandle(handle, options) {
-    const socket = new _NetSocket({ allowHalfOpen: options?.allowHalfOpen });
-    socket._socketId = handle.socketId;
-    socket._handle = createConnectedSocketHandle(handle.socketId);
-    socket._applySocketInfo(handle.info);
-    socket._connected = true;
-    socket.connecting = false;
-    socket.pending = false;
-    registerNetSocket(handle.socketId, socket);
-    queueMicrotask(() => {
-      if (!socket.destroyed && !socket._tlsUpgrading) {
-        socket._nextReadPumpOrigin = "acceptedHandle";
-        void socket._pumpBridgeReads();
-      }
-    });
-    return socket;
-  }
-  setKeepAlive(enable, initialDelay) {
-    const nextEnable = isTruthySocketOption(enable);
-    const nextDelaySeconds = normalizeKeepAliveDelay(initialDelay);
-    if (nextEnable === this._keepAliveState && (!nextEnable || nextDelaySeconds === this._keepAliveDelaySeconds)) {
-      return this;
-    }
-    this._keepAliveState = nextEnable;
-    this._keepAliveDelaySeconds = nextEnable ? nextDelaySeconds : 0;
-    debugBridgeNetwork("socket setKeepAlive", this._socketId, nextEnable, nextDelaySeconds);
-    this._handle?.setKeepAlive?.(nextEnable, nextDelaySeconds);
-    return this;
-  }
-  setNoDelay(noDelay) {
-    const nextState = isTruthySocketOption(noDelay);
-    if (nextState === this._noDelayState) {
-      return this;
-    }
-    this._noDelayState = nextState;
-    debugBridgeNetwork("socket setNoDelay", this._socketId, nextState);
-    this._handle?.setNoDelay?.(nextState);
-    return this;
-  }
-  setTimeout(timeout, callback) {
-    const nextTimeout = normalizeSocketTimeout(timeout);
-    if (callback !== void 0 && typeof callback !== "function") {
-      throw createFunctionArgTypeError("callback", callback);
-    }
-    if (callback) {
-      this.once("timeout", callback);
-    }
-    this._timeoutMs = nextTimeout;
-    if (nextTimeout === 0) {
-      this._clearTimeoutTimer();
-      return this;
-    }
-    this._touchTimeout();
-    return this;
-  }
-  ref() {
-    this._refed = true;
-    this._handle?.ref?.();
-    if (this._timeoutTimer && typeof this._timeoutTimer.ref === "function") {
-      this._timeoutTimer.ref();
-    }
-    if (!this.destroyed && this._connected && !this._loopbackServer && !this._loopbackHttpTarget && !this._bridgeReadLoopRunning) {
-      this._nextReadPumpOrigin = "ref";
-      void this._pumpBridgeReads();
-    }
-    return this;
-  }
-  unref() {
-    this._refed = false;
-    this._handle?.unref?.();
-    if (this._timeoutTimer && typeof this._timeoutTimer.unref === "function") {
-      this._timeoutTimer.unref();
-    }
-    if (this._bridgeReadPollTimer) {
-      clearTimeout(this._bridgeReadPollTimer);
-      this._bridgeReadPollTimer = null;
-    }
-    return this;
-  }
-  pause() {
-    return this;
-  }
-  resume() {
-    return this;
-  }
-  read(size) {
-    if (this._readQueue.length === 0) {
-      return null;
-    }
-    let chunk;
-    if (size == null || size <= 0) {
-      chunk = this._readQueue.shift() ?? null;
-      if (chunk) {
-        this.readableLength = Math.max(0, this.readableLength - chunk.length);
-      }
-    } else {
-      const head = this._readQueue[0];
-      if (!head) {
-        return null;
-      }
-      if (head.length <= size) {
-        this._readQueue.shift();
-        this.readableLength = Math.max(0, this.readableLength - head.length);
-        chunk = head;
-      } else {
-        chunk = head.subarray(0, size);
-        this._readQueue[0] = head.subarray(size);
-        this.readableLength = Math.max(0, this.readableLength - chunk.length);
-      }
-    }
-    if (this.readableLength === 0) {
-      this._releaseDeferredBridgeSocket();
-    }
-    return chunk;
-  }
-  unshift(chunk) {
-    const payload = Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk);
-    if (payload.length === 0) {
-      return this;
-    }
-    this._readQueue.unshift(payload);
-    this.readableLength += payload.length;
-    return this;
-  }
-  cork() {
-  }
-  uncork() {
-  }
-  address() {
-    return { port: this.localPort, family: this.localFamily, address: this.localAddress };
-  }
-  getCipher() {
-    return queryTlsSocket(this._socketId, "getCipher") ?? this._tlsCipher;
-  }
-  getSession() {
-    const session = queryTlsSocket(this._socketId, "getSession");
-    if (Buffer.isBuffer(session)) {
-      this._tlsSession = Buffer.from(session);
-      return Buffer.from(session);
-    }
-    return this._tlsSession ? Buffer.from(this._tlsSession) : null;
-  }
-  isSessionReused() {
-    const reused = queryTlsSocket(this._socketId, "isSessionReused");
-    return typeof reused === "boolean" ? reused : this._tlsSessionReused;
-  }
-  getPeerCertificate(detailed) {
-    const cert = queryTlsSocket(this._socketId, "getPeerCertificate", detailed === true);
-    return cert && typeof cert === "object" ? cert : {};
-  }
-  getCertificate() {
-    const cert = queryTlsSocket(this._socketId, "getCertificate");
-    return cert && typeof cert === "object" ? cert : {};
-  }
-  getProtocol() {
-    const protocol = queryTlsSocket(this._socketId, "getProtocol");
-    return typeof protocol === "string" ? protocol : this._tlsProtocol;
-  }
-  setEncoding(encoding) {
-    this._encoding = encoding;
-    return this;
-  }
-  pipe(destination) {
-    return destination;
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    return this;
-  }
-  addListener(event, listener) {
-    return this.on(event, listener);
-  }
-  once(event, listener) {
-    if (!this._onceListeners[event]) this._onceListeners[event] = [];
-    this._onceListeners[event].push(listener);
-    return this;
-  }
-  removeListener(event, listener) {
-    const listeners = this._listeners[event];
-    if (listeners) {
-      const idx = listeners.indexOf(listener);
-      if (idx >= 0) listeners.splice(idx, 1);
-    }
-    const onceListeners = this._onceListeners[event];
-    if (onceListeners) {
-      const idx = onceListeners.indexOf(listener);
-      if (idx >= 0) onceListeners.splice(idx, 1);
-    }
-    return this;
-  }
-  off(event, listener) {
-    return this.removeListener(event, listener);
-  }
-  removeAllListeners(event) {
-    if (event) {
-      delete this._listeners[event];
-      delete this._onceListeners[event];
-    } else {
-      this._listeners = {};
-      this._onceListeners = {};
-    }
-    return this;
-  }
-  listeners(event) {
-    return [...this._listeners[event] ?? [], ...this._onceListeners[event] ?? []];
-  }
-  listenerCount(event) {
-    return (this._listeners[event]?.length ?? 0) + (this._onceListeners[event]?.length ?? 0);
-  }
-  setMaxListeners(_n) {
-    return this;
-  }
-  getMaxListeners() {
-    return 10;
-  }
-  prependListener(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].unshift(listener);
-    return this;
-  }
-  prependOnceListener(event, listener) {
-    if (!this._onceListeners[event]) this._onceListeners[event] = [];
-    this._onceListeners[event].unshift(listener);
-    return this;
-  }
-  eventNames() {
-    return [.../* @__PURE__ */ new Set([...Object.keys(this._listeners), ...Object.keys(this._onceListeners)])];
-  }
-  rawListeners(event) {
-    return this.listeners(event);
-  }
-	    emit(event, ...args) {
-	      return this._emitNet(event, ...args);
-	    }
-	    _emitNet(event, ...args) {
-	      const traceEmit = isNetBridgeMetricsEnabled() && (event === "readable" || event === "data");
-	      const emitStartUs = traceEmit ? netBridgeNowUs() : 0;
-	      if (traceEmit && event === "data") {
-	        this._currentDataEmitStartUs = emitStartUs;
-	      }
-	      if (event === "readable") {
-	        countNetBridgeMetric("socketReadableEmits");
-	      } else if (event === "data") {
-      countNetBridgeMetric("socketDataEmits");
-    } else if (event === "end") {
-      countNetBridgeMetric("socketEndEmits");
-    } else if (event === "close") {
-      countNetBridgeMetric("socketCloseEmits");
-    } else if (event === "connect") {
-      countNetBridgeMetric("socketConnectEmits");
-    }
-	      if (event === "data" && this._encoding && args[0] && Buffer.isBuffer(args[0])) {
-	        args[0] = args[0].toString(this._encoding);
-	      }
-	      let handled = false;
-	      try {
-	        const listeners = this._listeners[event];
-	        if (listeners) {
-	          for (const fn of [...listeners]) {
-	            fn.call(this, ...args);
-	            handled = true;
-	          }
-	        }
-	        const onceListeners = this._onceListeners[event];
-	        if (onceListeners) {
-	          const fns = [...onceListeners];
-	          this._onceListeners[event] = [];
-	          for (const fn of fns) {
-	            fn.call(this, ...args);
-	            handled = true;
-	          }
-	        }
-	      } finally {
-	        if (traceEmit) {
-	          const elapsedUs = netBridgeNowUs() - emitStartUs;
-	          if (event === "readable") {
-	            countNetBridgeMetric("socketReadableEmitUs", elapsedUs);
-	            maxNetBridgeMetric("socketReadableEmitMaxUs", elapsedUs);
-	          } else if (event === "data") {
-	            countNetBridgeMetric("socketDataEmitUs", elapsedUs);
-	            maxNetBridgeMetric("socketDataEmitMaxUs", elapsedUs);
-	            this._lastDataEmitEndUs = netBridgeNowUs();
-	            this._currentDataEmitStartUs = 0;
-	          }
-	        }
-	      }
-	      return handled;
-	    }
-	    _queueReadablePayload(payload) {
-	      if (!payload || payload.length === 0) {
-	        return;
-	      }
-	      const traceMetrics = isNetBridgeMetricsEnabled();
-	      const queueStartUs = traceMetrics ? netBridgeNowUs() : 0;
-	      try {
-	        this._readQueue.push(payload);
-	        this.readableLength += payload.length;
-	        countNetBridgeMetric("queueReadablePayloads");
-	        countNetBridgeMetric("queueReadableBytes", payload.length);
-	        maxNetBridgeMetric("queueReadableBytesMax", this.readableLength);
-	        this._emitNet("readable");
-	        if (this.listenerCount("data") > 0) {
-	          const readStartUs = traceMetrics ? netBridgeNowUs() : 0;
-	          const chunk = this.read();
-	          if (traceMetrics) {
-	            const readElapsedUs = netBridgeNowUs() - readStartUs;
-	            countNetBridgeMetric("queueReadableImmediateReadCalls");
-	            countNetBridgeMetric("queueReadableImmediateReadUs", readElapsedUs);
-	            maxNetBridgeMetric("queueReadableImmediateReadMaxUs", readElapsedUs);
-	          }
-	          if (chunk !== null) {
-	            this._emitNet("data", chunk);
-	          }
-	        }
-	      } finally {
-	        if (traceMetrics) {
-	          const queueElapsedUs = netBridgeNowUs() - queueStartUs;
-	          countNetBridgeMetric("queueReadablePayloadElapsedUs", queueElapsedUs);
-	          maxNetBridgeMetric("queueReadablePayloadMaxUs", queueElapsedUs);
-	        }
-	      }
-	    }
-  async _waitForConnect() {
-    if (typeof _netSocketWaitConnectRaw === "undefined" || this._socketId === 0) {
-      return;
-    }
-    try {
-      const infoJson = await _netSocketWaitConnectRaw.apply(
-        void 0,
-        [this._socketId],
-        { result: { promise: true } }
-      );
-      if (this.destroyed) {
-        return;
-      }
-      this._applySocketInfo(parseNetSocketInfo(infoJson));
-      await wakeNetServerAcceptForSocket(this);
-      this._connected = true;
-      this.connecting = false;
-      debugBridgeNetwork("socket connected", this._socketId, this.localAddress, this.localPort, this.remoteAddress, this.remotePort);
-      this._touchTimeout();
-      debugBridgeNetwork("socket emit connect", this._socketId, this.listenerCount("connect"));
-      this._emitNet("connect");
-      debugBridgeNetwork("socket emit ready", this._socketId, this.listenerCount("ready"));
-      this._emitNet("ready");
-      if (!this._tlsUpgrading) {
-        this._nextReadPumpOrigin = "connectWait";
-        await this._pumpBridgeReads();
-      }
-    } catch (error) {
-      if (this.destroyed) {
-        return;
-      }
-      const err = error instanceof Error ? error : new Error(String(error));
-      debugBridgeNetwork("socket connect error", this._socketId, err.message, err.stack ?? null);
-      this._emitNet("error", err);
-      this.destroy();
-    }
-  }
-	    async _pumpBridgeReads() {
-	      if (this._bridgeReadLoopRunning || typeof _netSocketReadRaw === "undefined" || !isRegisteredNetSocket(this)) {
-	        return;
-	      }
-	      countNetBridgeMetric("readPumpRuns");
-	      const firstPumpRun = !this._bridgeReadPumpStarted;
-	      const scheduleActive = this._readFirstPumpScheduleActive === true;
-	      if (firstPumpRun) {
-	        countReadFirstPumpOrigin(this._nextReadPumpOrigin);
-	        if (this._firstReadNoTimerWakeAtUs > 0 && isNetBridgeMetricsEnabled()) {
-	          const elapsedUs = Math.max(0, netBridgeNowUs() - this._firstReadNoTimerWakeAtUs);
-	          countNetBridgeMetric("readFirstPumpAfterNoTimerWakeCalls");
-	          countNetBridgeMetric("readFirstPumpAfterNoTimerWakeUs", elapsedUs);
-	          maxNetBridgeMetric("readFirstPumpAfterNoTimerWakeMaxUs", elapsedUs);
-	        }
-	        if (scheduleActive && this._readFirstPumpScheduleQueuedAtUs > 0 && isNetBridgeMetricsEnabled()) {
-	          const queuedToPumpStartUs = Math.max(0, netBridgeNowUs() - this._readFirstPumpScheduleQueuedAtUs);
-	          countNetBridgeMetric("readFirstPumpScheduleQueuedToPumpStartUs", queuedToPumpStartUs);
-	          maxNetBridgeMetric("readFirstPumpScheduleQueuedToPumpStartMaxUs", queuedToPumpStartUs);
-	        }
-	      }
-	      this._readFirstPumpScheduleActive = false;
-	      this._readFirstPumpScheduleQueuedAtUs = 0;
-	      this._nextReadPumpOrigin = null;
-	      this._bridgeReadPumpStarted = true;
-	      let firstPumpResultRecorded = false;
-	      let scheduleResultRecorded = false;
-	      if (isNetBridgeMetricsEnabled() && this._readWakeQueuedAtUs > 0) {
-	        const queuedToPumpUs = Math.max(0, netBridgeNowUs() - this._readWakeQueuedAtUs);
-	        countNetBridgeMetric("readWakeQueuedToPumpStartUs", queuedToPumpUs);
-	        maxNetBridgeMetric("readWakeQueuedToPumpStartMaxUs", queuedToPumpUs);
-	        this._readWakeQueuedAtUs = 0;
-	      }
-	      this._bridgeReadLoopRunning = true;
-	      let deliveredPayloads = 0;
-	      try {
-	        while (!this.destroyed && isRegisteredNetSocket(this)) {
-	          countNetBridgeMetric("readRawCalls");
-	          const traceMetrics = isNetBridgeMetricsEnabled();
-	          const postDeliveryProbeStartUs = traceMetrics && this._lastReadDeliveryEndUs > 0 ? netBridgeNowUs() : 0;
-	          if (postDeliveryProbeStartUs > 0) {
-	            countNetBridgeMetric("readPostDeliveryProbeCalls");
-	            countNetBridgeMetric("readPostDeliveryNextRawCalls");
-	            countNetBridgeMetric("readPostDeliveryToProbeStartUs", postDeliveryProbeStartUs - this._lastReadDeliveryEndUs);
-	            if (this._bridgeWriteFlushScheduled) {
-	              countNetBridgeMetric("readPostDeliveryPendingWriteFlushes");
-	              countNetBridgeMetric("readPostDeliveryPendingWriteBytes", this._pendingBridgeWriteBytes);
-	            }
-	            this._lastReadDeliveryEndUs = 0;
-	          }
-	          if (!isRegisteredNetSocket(this)) {
-	            return;
-	          }
-	          const readStartUs = traceMetrics ? netBridgeNowUs() : 0;
-	          const chunk = _netSocketReadRaw.applySync(void 0, [this._socketId]);
-	          if (traceMetrics) {
-	            const readElapsedUs = netBridgeNowUs() - readStartUs;
-	            countNetBridgeMetric("readRawElapsedUs", readElapsedUs);
-	            if (postDeliveryProbeStartUs > 0) {
-	              countNetBridgeMetric("readPostDeliveryProbeElapsedUs", readElapsedUs);
-	              maxNetBridgeMetric("readPostDeliveryProbeMaxUs", readElapsedUs);
-	            }
-	          }
-        if (this.destroyed) {
-          return;
-        }
-	          if (chunk === NET_BRIDGE_TIMEOUT_SENTINEL) {
-	            if (firstPumpRun && !firstPumpResultRecorded) {
-	              firstPumpResultRecorded = true;
-	              countNetBridgeMetric("readFirstPumpResultTimeout");
-	            }
-	            if (scheduleActive && !scheduleResultRecorded) {
-	              scheduleResultRecorded = true;
-	              countNetBridgeMetric("readFirstPumpScheduleResultTimeout");
-	            }
-	            countNetBridgeMetric("readTimeoutSentinels");
-	            if (postDeliveryProbeStartUs > 0) {
-	              countNetBridgeMetric("readPostDeliveryProbeTimeoutSentinels");
-	              countNetBridgeMetric("readPostDeliveryNextRawTimeoutSentinels");
-	            }
-	          if (!this._refed) {
-            return;
-	            }
-		            if (this._pendingBridgeWake) {
-		              if (this._pendingBridgeWakeRetries < 2) {
-		                this._pendingBridgeWakeRetries++;
-		                countNetBridgeMetric("readPendingWakeImmediateRetries");
-		                this._nextReadPumpOrigin = "eventWake";
-		                await Promise.resolve();
-		                continue;
-		              }
-		              this._pendingBridgeWake = false;
-		              this._pendingBridgeWakeRetries = 0;
-		              countNetBridgeMetric("readPendingWakeShortRetryTimers");
-		              this._bridgeReadPollTimer = setTimeout(() => {
-		                this._bridgeReadPollTimer = null;
-		                this._nextReadPumpOrigin = "eventWake";
-		                void this._pumpBridgeReads();
-		              }, 1);
-		              return;
-		            }
-	            countNetBridgeMetric("readPollTimersScheduled");
-	            const pollDelayMs = netBridgePollDelayMs();
-	            const scheduledAtUs = isNetBridgeMetricsEnabled() ? netBridgeNowUs() : 0;
-	            this._bridgeReadPollTimer = setTimeout(() => {
-	              if (isNetBridgeMetricsEnabled()) {
-	                const lagUs = Math.max(0, netBridgeNowUs() - scheduledAtUs - pollDelayMs * 1000);
-	                countNetBridgeMetric("readPollTimerFires");
-	                countNetBridgeMetric("readPollTimerFireLagUs", lagUs);
-	                maxNetBridgeMetric("readPollTimerFireLagMaxUs", lagUs);
-	              }
-	              this._bridgeReadPollTimer = null;
-	              this._nextReadPumpOrigin = "timer";
-	              void this._pumpBridgeReads();
-	            }, pollDelayMs);
-          return;
-        }
-        if (chunk === null) {
-          if (firstPumpRun && !firstPumpResultRecorded) {
-            firstPumpResultRecorded = true;
-            countNetBridgeMetric("readFirstPumpResultEnd");
-          }
-          if (scheduleActive && !scheduleResultRecorded) {
-            scheduleResultRecorded = true;
-            countNetBridgeMetric("readFirstPumpScheduleResultEnd");
-          }
-	          countNetBridgeMetric("readEndEvents");
-	          this._pendingBridgeWake = false;
-	          this._pendingBridgeWakeRetries = 0;
-	          this._handleRemoteReadableEnd();
-	          return;
-	          }
-	          if (postDeliveryProbeStartUs > 0) {
-	            countNetBridgeMetric("readPostDeliveryProbeDataEvents");
-	            countNetBridgeMetric("readPostDeliveryNextRawDataEvents");
-	          }
-	          if (firstPumpRun && !firstPumpResultRecorded) {
-	            firstPumpResultRecorded = true;
-	            countNetBridgeMetric("readFirstPumpResultData");
-	          }
-	          if (scheduleActive && !scheduleResultRecorded) {
-	            scheduleResultRecorded = true;
-	            countNetBridgeMetric("readFirstPumpScheduleResultData");
-	          }
-	          let payload;
-        if (typeof chunk === "string") {
-          const decodeStartUs = traceMetrics ? netBridgeNowUs() : 0;
-          payload = Buffer.from(chunk, "base64");
-          if (traceMetrics) {
-            countNetBridgeMetric("readBase64DecodeCalls");
-            countNetBridgeMetric("readBase64DecodeBytes", payload.length);
-            countNetBridgeMetric("readBase64DecodeChars", chunk.length);
-            countNetBridgeMetric("readBase64DecodeUs", netBridgeNowUs() - decodeStartUs);
-          }
-        } else {
-          const materializeStartUs = traceMetrics ? netBridgeNowUs() : 0;
-          payload = Buffer.from(chunk);
-          if (traceMetrics) {
-            countNetBridgeMetric("readPayloadMaterializeCalls");
-            countNetBridgeMetric("readPayloadMaterializeBytes", payload.length);
-            countNetBridgeMetric("readPayloadMaterializeUs", netBridgeNowUs() - materializeStartUs);
-          }
-        }
-        debugBridgeNetwork("socket data", this._socketId, payload.length);
-        countNetBridgeMetric("readDataEvents");
-	        countNetBridgeMetric("readBytes", payload.length);
-	        this.bytesRead += payload.length;
-	        this._touchTimeout();
-        // Yield to a macrotask before delivering each payload so that socket
-        // bytes surface across distinct event-loop turns, exactly as they do
-        // on real Node where each readable arrives in its own I/O callback.
-        // _netSocketReadRaw is synchronous, so without this the loop drains an
-        // entire HTTP response and emits "readable"/"data" in one synchronous
-        // burst. That collapses the turn boundaries undici's keep-alive socket
-        // recycling depends on: its setImmediate(client[kResume]) never runs
-        // before the caller's microtask dispatches the next request, so the
-        // pool keeps every Client at kNeedDrain and allocates a fresh
-        // Client+socket per request — leaking EventEmitter listeners
-	          // (MaxListenersExceededWarning) and unbounded memory until the VM dies.
-		          if (deliveredPayloads > 0) {
-		            countNetBridgeMetric("readMacrotaskYields");
-		            const yieldStartUs = traceMetrics ? netBridgeNowUs() : 0;
-		            await yieldBridgeMacrotask();
-		            if (traceMetrics) {
-		              const yieldElapsedUs = netBridgeNowUs() - yieldStartUs;
-		              countNetBridgeMetric("readMacrotaskYieldElapsedUs", yieldElapsedUs);
-		              maxNetBridgeMetric("readMacrotaskYieldMaxUs", yieldElapsedUs);
-		            }
-		            if (this.destroyed) {
-		              return;
-		            }
-		          } else {
-		            countNetBridgeMetric("readFirstPayloadImmediateDeliveries");
-		          }
-		          this._pendingBridgeWake = false;
-		          this._pendingBridgeWakeRetries = 0;
-		          deliveredPayloads++;
-		          this._queueReadablePayload(payload);
-		          if (this._wroteDuringDataEmit) {
-		            this._wroteDuringDataEmit = false;
-		            countNetBridgeMetric("readPumpYieldAfterInlineDataWrite");
-		            queueSocketBridgeReadPump(this, "postDeliveryInlineWrite");
-		            return;
-		          }
-		          if (this._bridgeWriteFlushScheduled) {
-		            countNetBridgeMetric("readPumpYieldToPendingWriteFlush");
-		            queueSocketBridgeReadPump(this, "postDeliveryWriteFlush");
-		            return;
-		          }
-		          if (traceMetrics) {
-		            this._lastReadDeliveryEndUs = netBridgeNowUs();
-		          }
-	        }
-    } finally {
-      this._bridgeReadLoopRunning = false;
-	      if (this._pendingBridgeWake && !this.destroyed && isRegisteredNetSocket(this)) {
-	        queueSocketBridgeReadPump(this, "eventWake");
-	      }
-    }
-  }
-  _dispatchLoopbackHttpRequest() {
-    if ((!this._loopbackServer && !this._loopbackHttpTarget) || this.destroyed) {
-      return;
-    }
-    if (this._loopbackDispatchRunning) {
-      this._loopbackDispatchPending = true;
-      return;
-    }
-    this._loopbackDispatchRunning = true;
-    void this._processLoopbackHttpRequests().finally(() => {
-      this._loopbackDispatchRunning = false;
-      if (this._loopbackDispatchPending && this._loopbackBuffer.length > 0) {
-        this._loopbackDispatchPending = false;
-        this._dispatchLoopbackHttpRequest();
-      } else {
-        this._loopbackDispatchPending = false;
-      }
-    });
-  }
-  async _processLoopbackHttpRequests() {
-    let closeAfterDrain = false;
-    while ((this._loopbackServer || this._loopbackHttpTarget) && !this.destroyed) {
-      const parserServer = this._loopbackServer ?? { listenerCount: () => 0 };
-      const parsed = parseLoopbackRequestBuffer(this._loopbackBuffer, parserServer);
-      if (parsed.kind === "incomplete") {
-        if (closeAfterDrain) {
-          this._closeLoopbackReadable();
-        }
-        return;
-      }
-      if (parsed.kind === "bad-request") {
-        this._pushLoopbackData(createBadRequestResponseBuffer());
-        if (parsed.closeConnection) {
-          this._closeLoopbackReadable();
-        }
-        this._loopbackBuffer = Buffer.alloc(0);
-        return;
-      }
-      this._loopbackBuffer = this._loopbackBuffer.subarray(parsed.bytesConsumed);
-      if (parsed.upgradeHead) {
-        this._dispatchLoopbackUpgrade(parsed.request, parsed.upgradeHead);
-        return;
-      }
-      let responseJson;
-      if (this._loopbackHttpTarget) {
-        if (typeof _networkHttpServerRequestRaw === "undefined") {
-          throw new Error("HTTP loopback bridge is not available");
-        }
-        responseJson = _networkHttpServerRequestRaw.applySync(void 0, [{
-          ...this._loopbackHttpTarget,
-          request: JSON.stringify(parsed.request)
-        }]);
-      } else {
-        ({
-          responseJson
-        } = await dispatchLoopbackServerRequest(this._loopbackServer, parsed.request));
-      }
-      const response = JSON.parse(responseJson);
-      const serialized = serializeLoopbackResponse(response, parsed.request, parsed.closeConnection);
-      if (!closeAfterDrain && serialized.payload.length > 0) {
-        this._pushLoopbackData(serialized.payload);
-      }
-      if (serialized.closeConnection) {
-        closeAfterDrain = true;
-        if (this._loopbackBuffer.length === 0) {
-          this._closeLoopbackReadable();
-          return;
-        }
-      }
-    }
-  }
-  _pushLoopbackData(data) {
-    if (data.length === 0 || this._loopbackReadableEnded) {
-      return;
-    }
-    const payload = Buffer.from(data);
-    this._queueLoopbackEvent(() => {
-      if (this.destroyed) {
-        return;
-      }
-      this.bytesRead += payload.length;
-      this._touchTimeout();
-      this._queueReadablePayload(payload);
-    });
-  }
-  _closeLoopbackReadable() {
-    if (this._loopbackReadableEnded) {
-      return;
-    }
-    this._loopbackReadableEnded = true;
-    this.readable = false;
-    this.writable = false;
-    this._readableState.endEmitted = true;
-    this._readableState.ended = true;
-    this._clearTimeoutTimer();
-    this._queueLoopbackEvent(() => {
-      this._emitNet("end");
-      this._emitNet("close");
-    });
-  }
-  _queueLoopbackEvent(callback) {
-    this._loopbackEventQueue = this._loopbackEventQueue.then(
-      () => new Promise((resolve) => {
-        queueMicrotask(() => {
-          try {
-            callback();
-          } finally {
-            resolve();
-          }
-        });
-      })
-    );
-  }
-  _dispatchLoopbackUpgrade(request, head) {
-    if (!this._loopbackServer) {
-      return;
-    }
-    try {
-      const socket = new DirectTunnelSocket({
-        host: this.remoteAddress,
-        port: this.remotePort
-      });
-      socket._attachPeer({
-        _pushData: (data) => this._pushLoopbackData(data),
-        _pushEnd: () => this._closeLoopbackReadable()
-      });
-      this._loopbackUpgradeSocket = socket;
-      this._loopbackServer._emit(
-        "upgrade",
-        new ServerIncomingMessage(request),
-        socket,
-        head
-      );
-    } catch (error) {
-      const rethrow = error instanceof Error ? error : new Error(String(error));
-      let handled = false;
-      let exitCodeFromHandler = null;
-      if (typeof process !== "undefined" && typeof process.emit === "function") {
-        const processEmitter = process;
-        try {
-          handled = processEmitter.emit("uncaughtException", rethrow, "uncaughtException");
-        } catch (emitError) {
-          if (emitError && typeof emitError === "object" && emitError.name === "ProcessExitError") {
-            handled = true;
-            const exitCode = Number(emitError.code);
-            exitCodeFromHandler = Number.isFinite(exitCode) ? exitCode : 0;
-          } else {
-            throw emitError;
-          }
-        }
-      }
-      if (handled) {
-        if (exitCodeFromHandler !== null) {
-          process.exitCode = exitCodeFromHandler;
-        }
-        this._loopbackServer?.close();
-        this.destroy();
-        return;
-      }
-      throw rethrow;
-    }
-  }
-  // Upgrade this socket to TLS
-  _upgradeTls(options) {
-    if (typeof _netSocketUpgradeTlsRaw === "undefined") {
-      throw new Error("tls.connect is not supported in sandbox (bridge not available)");
-    }
-    this._tlsUpgrading = true;
-    if (this._loopbackServer && (typeof this._socketId !== "string" || this._socketId.length === 0)) {
-      queueMicrotask(() => {
-        if (!this.destroyed) {
-          finalizeTlsUpgrade(this);
-        }
-      });
-      return;
-    }
-    _netSocketUpgradeTlsRaw.applySync(void 0, [this._socketId, JSON.stringify(options ?? {})]);
-    const finalize = () => {
-      if (!this.destroyed) {
-        finalizeTlsUpgrade(this);
-      }
-    };
-    if (options?.isServer) {
-      queueMicrotask(finalize);
-    } else {
-      setTimeout(() => {
-        if (!this.destroyed) {
-          finalizeTlsUpgrade(this, "secureConnect", false);
-        }
-      }, 0);
-    }
-  }
-  _touchTimeout() {
-    if (this._timeoutMs === 0 || this.destroyed) {
-      return;
-    }
-    this._clearTimeoutTimer();
-    this._timeoutTimer = setTimeout(() => {
-      this._timeoutTimer = null;
-      if (this.destroyed) {
-        return;
-      }
-      this._emitNet("timeout");
-    }, this._timeoutMs);
-    if (!this._refed && typeof this._timeoutTimer.unref === "function") {
-      this._timeoutTimer.unref();
-    }
-  }
-  _clearTimeoutTimer() {
-    if (this._timeoutTimer) {
-      clearTimeout(this._timeoutTimer);
-      this._timeoutTimer = null;
-    }
-  }
-};
-
-function netConnect(portOrOptions, hostOrCallback, callback) {
-  const socket = new NetSocket();
-  socket.connect(portOrOptions, hostOrCallback, callback);
-  return socket;
-}
-
-var NetServer = class {
-  _listeners = {};
-  _onceListeners = {};
-  _serverId = 0;
-  _address = null;
-	    _acceptLoopActive = false;
-	    _acceptLoopRunning = false;
-	    _acceptPollTimer = null;
-	    _pendingAcceptWake = false;
-	    _acceptPumpStarted = false;
-	    _nextAcceptPumpOrigin = null;
-	    _firstAcceptNoTimerWakeAtUs = 0;
-	    _acceptWakeQueuedAtUs = 0;
-	    _handleRefId = null;
-  _connections = /* @__PURE__ */ new Set();
-  _refed = true;
-  listening = false;
-  keepAlive = false;
-  keepAliveInitialDelay = 0;
-  allowHalfOpen = false;
-  maxConnections;
-  _handle;
-  constructor(optionsOrListener, maybeListener) {
-    if (typeof optionsOrListener === "function") {
-      this.on("connection", optionsOrListener);
-    } else {
-      this.allowHalfOpen = optionsOrListener?.allowHalfOpen === true;
-      this.keepAlive = optionsOrListener?.keepAlive === true;
-      this.keepAliveInitialDelay = optionsOrListener?.keepAliveInitialDelay ?? 0;
-      if (maybeListener) {
-        this.on("connection", maybeListener);
-      }
-    }
-    this._handle = {
-      onconnection: (err, clientHandle) => {
-        if (err) {
-          this._emit("error", err);
-          return;
-        }
-        if (!clientHandle) {
-          return;
-        }
-        if (typeof this.maxConnections === "number" && this.maxConnections >= 0 && this._connections.size >= this.maxConnections) {
-          this._emit("drop", {
-            localAddress: clientHandle.info.localAddress,
-            localPort: clientHandle.info.localPort,
-            localFamily: clientHandle.info.localFamily,
-            remoteAddress: clientHandle.info.remoteAddress,
-            remotePort: clientHandle.info.remotePort,
-            remoteFamily: clientHandle.info.remoteFamily
-          });
-          _netSocketDestroyRaw?.applySync(void 0, [clientHandle.socketId]);
-          countNetBridgeMetric("peerWakeOnDestroy");
-          wakePeerBridgeReads({
-            _socketId: clientHandle.socketId,
-            localPort: clientHandle.info.localPort,
-            remotePort: clientHandle.info.remotePort,
-            localPath: clientHandle.info.localPath,
-            remotePath: clientHandle.info.remotePath
-          });
-          return;
-        }
-        if (this.keepAlive) {
-          clientHandle.setKeepAlive?.(true, this.keepAliveInitialDelay);
-        }
-        const socket = NetSocket.fromAcceptedHandle(clientHandle, {
-          allowHalfOpen: this.allowHalfOpen
-        });
-        socket.server = this;
-        this._connections.add(socket);
-        socket.once("close", () => {
-          this._connections.delete(socket);
-        });
-        if (this.keepAlive) {
-          socket._applyAcceptedKeepAlive(this.keepAliveInitialDelay);
-        }
-        countNetBridgeMetric("connectionEmits");
-        this._emit("connection", socket);
-      }
-    };
-  }
-  listen(portOrOptions, hostOrCallback, backlogOrCallback, callback) {
-    if (typeof _netServerListenRaw === "undefined" || typeof _netServerAcceptRaw === "undefined") {
-      throw new Error("net.createServer is not supported in sandbox");
-    }
-    const { port, host, path, backlog, readableAll, writableAll, callback: cb } = normalizeListenArgs(
-      portOrOptions,
-      hostOrCallback,
-      backlogOrCallback,
-      callback
-    );
-    if (cb) {
-      this.once("listening", cb);
-    }
-    try {
-      const resultValue = _netServerListenRaw.applySyncPromise(
-        void 0,
-        [{ port, host, path, backlog, readableAll, writableAll }]
-      );
-      const result = typeof resultValue === "string" ? JSON.parse(resultValue) : resultValue;
-      const address = result.address ?? result;
-      this._serverId = result.serverId;
-      this._address = address.localPath ? address.localPath : {
-        address: address.localAddress,
-        family: address.localFamily ?? address.family,
-        port: address.localPort
-      };
-      this.listening = true;
-      registerNetServer(this);
-      this._syncHandleRef();
-      this._acceptLoopActive = true;
-      queueMicrotask(() => {
-        if (!this.listening || this._serverId === 0) {
-          return;
-        }
-        this._emit("listening");
-        this._nextAcceptPumpOrigin = "listen";
-        void this._pumpAccepts();
-      });
-    } catch (error) {
-      queueMicrotask(() => {
-        this._emit("error", error);
-      });
-    }
-    return this;
-  }
-  close(callback) {
-    if (callback) {
-      this.once("close", callback);
-    }
-    if (!this.listening || typeof _netServerCloseRaw === "undefined") {
-      queueMicrotask(() => {
-        this._emit("close");
-      });
-      return this;
-    }
-    this.listening = false;
-    this._acceptLoopActive = false;
-    unregisterNetServer(this);
-    if (this._acceptPollTimer) {
-      clearTimeout(this._acceptPollTimer);
-      this._acceptPollTimer = null;
-    }
-    this._syncHandleRef();
-    const serverId = this._serverId;
-    this._serverId = 0;
-    void (async () => {
-      try {
-        await _netServerCloseRaw.apply(void 0, [serverId], {
-          result: { promise: true }
-        });
-      } finally {
-        this._address = null;
-        this._emit("close");
-      }
-    })();
-    return this;
-  }
-  address() {
-    return this._address;
-  }
-  getConnections(callback) {
-    if (typeof callback !== "function") {
-      throw createFunctionArgTypeError("callback", callback);
-    }
-    queueMicrotask(() => {
-      callback(null, this._connections.size);
-    });
-    return this;
-  }
-  ref() {
-    this._refed = true;
-    this._syncHandleRef();
-    if (this.listening && this._acceptLoopActive && !this._acceptLoopRunning) {
-      this._nextAcceptPumpOrigin = "ref";
-      void this._pumpAccepts();
-    }
-    return this;
-  }
-  unref() {
-    this._refed = false;
-    if (this._acceptPollTimer) {
-      clearTimeout(this._acceptPollTimer);
-      this._acceptPollTimer = null;
-    }
-    this._syncHandleRef();
-    return this;
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    return this;
-  }
-  once(event, listener) {
-    if (!this._onceListeners[event]) this._onceListeners[event] = [];
-    this._onceListeners[event].push(listener);
-    return this;
-  }
-  emit(event, ...args) {
-    return this._emit(event, ...args);
-  }
-  _emit(event, ...args) {
-    let handled = false;
-    const listeners = this._listeners[event];
-    if (listeners) {
-      for (const fn of [...listeners]) {
-        fn.call(this, ...args);
-        handled = true;
-      }
-    }
-    const onceListeners = this._onceListeners[event];
-    if (onceListeners) {
-      this._onceListeners[event] = [];
-      for (const fn of [...onceListeners]) {
-        fn.call(this, ...args);
-        handled = true;
-      }
-    }
-    return handled;
-  }
-  _syncHandleRef() {
-    if (!this.listening || this._serverId === 0 || !this._refed) {
-      if (this._handleRefId && typeof _unregisterHandle === "function") {
-        _unregisterHandle(this._handleRefId);
-      }
-      this._handleRefId = null;
-      return;
-    }
-    const nextHandleId = `${NET_SERVER_HANDLE_PREFIX}${this._serverId}`;
-    if (this._handleRefId === nextHandleId) {
-      return;
-    }
-    if (this._handleRefId && typeof _unregisterHandle === "function") {
-      _unregisterHandle(this._handleRefId);
-    }
-    this._handleRefId = nextHandleId;
-    if (typeof _registerHandle === "function") {
-      _registerHandle(this._handleRefId, "net server");
-    }
-  }
-	    async _pumpAccepts() {
-	      if (typeof _netServerAcceptRaw === "undefined" || this._acceptLoopRunning) {
-	        if (this._acceptLoopRunning) {
-	          countNetBridgeMetric("acceptLoopAlreadyRunning");
-	        }
-	        return;
-	      }
-	      countNetBridgeMetric("acceptPumpRuns");
-	      const firstPumpRun = !this._acceptPumpStarted;
-	      if (firstPumpRun) {
-	        countAcceptFirstPumpOrigin(this._nextAcceptPumpOrigin);
-	        if (this._firstAcceptNoTimerWakeAtUs > 0 && isNetBridgeMetricsEnabled()) {
-	          const elapsedUs = Math.max(0, netBridgeNowUs() - this._firstAcceptNoTimerWakeAtUs);
-	          countNetBridgeMetric("acceptFirstPumpAfterNoTimerWakeCalls");
-	          countNetBridgeMetric("acceptFirstPumpAfterNoTimerWakeUs", elapsedUs);
-	          maxNetBridgeMetric("acceptFirstPumpAfterNoTimerWakeMaxUs", elapsedUs);
-	        }
-	      }
-	      this._nextAcceptPumpOrigin = null;
-	      this._acceptPumpStarted = true;
-	      let firstPumpResultRecorded = false;
-	      if (isNetBridgeMetricsEnabled() && this._acceptWakeQueuedAtUs > 0) {
-	        const queuedToPumpUs = Math.max(0, netBridgeNowUs() - this._acceptWakeQueuedAtUs);
-	        countNetBridgeMetric("acceptWakeQueuedToPumpStartUs", queuedToPumpUs);
-	        maxNetBridgeMetric("acceptWakeQueuedToPumpStartMaxUs", queuedToPumpUs);
-	        this._acceptWakeQueuedAtUs = 0;
-	      }
-	      this._acceptLoopRunning = true;
-	      try {
-      while (this._acceptLoopActive && this._serverId !== 0) {
-        countNetBridgeMetric("acceptRawCalls");
-        const traceMetrics = isNetBridgeMetricsEnabled();
-        const acceptStartUs = traceMetrics ? netBridgeNowUs() : 0;
-        const payload = _netServerAcceptRaw.applySync(void 0, [this._serverId]);
-        if (traceMetrics) {
-          countNetBridgeMetric("acceptRawElapsedUs", netBridgeNowUs() - acceptStartUs);
-        }
-        if (payload === NET_BRIDGE_TIMEOUT_SENTINEL) {
-          if (firstPumpRun && !firstPumpResultRecorded) {
-            firstPumpResultRecorded = true;
-            countNetBridgeMetric("acceptFirstPumpResultTimeout");
-          }
-          countNetBridgeMetric("acceptTimeoutSentinels");
-	          if (!this._refed) {
-            return;
-		            }
-		            if (this._pendingAcceptWake) {
-		              this._pendingAcceptWake = false;
-		              this._nextAcceptPumpOrigin = "eventWake";
-		              continue;
-		            }
-		            countNetBridgeMetric("acceptPollTimersScheduled");
-	            const pollDelayMs = netBridgePollDelayMs();
-	            const scheduledAtUs = isNetBridgeMetricsEnabled() ? netBridgeNowUs() : 0;
-	            this._acceptPollTimer = setTimeout(() => {
-	              if (isNetBridgeMetricsEnabled()) {
-	                const lagUs = Math.max(0, netBridgeNowUs() - scheduledAtUs - pollDelayMs * 1000);
-	                countNetBridgeMetric("acceptPollTimerFires");
-	                countNetBridgeMetric("acceptPollTimerFireLagUs", lagUs);
-	                maxNetBridgeMetric("acceptPollTimerFireLagMaxUs", lagUs);
-	              }
-	              this._acceptPollTimer = null;
-	              this._nextAcceptPumpOrigin = "timer";
-	              void this._pumpAccepts();
-	            }, pollDelayMs);
-          return;
-        }
-        if (!payload) {
-          if (firstPumpRun && !firstPumpResultRecorded) {
-            firstPumpResultRecorded = true;
-            countNetBridgeMetric("acceptFirstPumpResultEmpty");
-          }
-          return;
-        }
-        try {
-          const parseStartUs = traceMetrics ? netBridgeNowUs() : 0;
-          const accepted = JSON.parse(payload);
-          if (traceMetrics) {
-            countNetBridgeMetric("acceptJsonParseUs", netBridgeNowUs() - parseStartUs);
-          }
-          countNetBridgeMetric("acceptConnections");
-          if (firstPumpRun && !firstPumpResultRecorded) {
-            firstPumpResultRecorded = true;
-            countNetBridgeMetric("acceptFirstPumpResultConnection");
-          }
-          const clientHandle = createAcceptedClientHandle(accepted.socketId, accepted.info);
-          const onConnectionStartUs = traceMetrics ? netBridgeNowUs() : 0;
-          this._handle.onconnection(null, clientHandle);
-          if (traceMetrics) {
-            countNetBridgeMetric("acceptOnConnectionUs", netBridgeNowUs() - onConnectionStartUs);
-          }
-        } catch (error) {
-          this._emit("error", error);
-        }
-      }
-    } finally {
-      this._acceptLoopRunning = false;
-      if (this._pendingAcceptWake && this.listening && this._serverId !== 0) {
-        this._pendingAcceptWake = false;
-        this._nextAcceptPumpOrigin = "eventWake";
-        queueMicrotask(() => {
-          if (this.listening && this._serverId !== 0) {
-            void this._pumpAccepts();
-          }
-        });
-      }
-    }
-  }
-};
-
-function NetServerCallable(optionsOrListener, maybeListener) {
-  return new NetServer(optionsOrListener, maybeListener);
-}
-
-var netModule = {
-  BlockList,
-  Socket: NetSocket,
-  SocketAddress,
-  Server: NetServerCallable,
-  Stream: NetSocket,
-  connect: netConnect,
-  createConnection: netConnect,
-  createServer(optionsOrListener, maybeListener) {
-    return new NetServer(optionsOrListener, maybeListener);
-  },
-  getDefaultAutoSelectFamily() {
-    return defaultAutoSelectFamily;
-  },
-  getDefaultAutoSelectFamilyAttemptTimeout() {
-    return defaultAutoSelectFamilyAttemptTimeout;
-  },
-  isIP(input) {
-    return classifyIpAddress(input);
-  },
-  isIPv4(input) {
-    return classifyIpAddress(input) === 4;
-  },
-  isIPv6(input) {
-    return classifyIpAddress(input) === 6;
-  },
-  setDefaultAutoSelectFamily(value) {
-    defaultAutoSelectFamily = value !== false;
-  },
-  setDefaultAutoSelectFamilyAttemptTimeout(value) {
-    const numeric = Number(value);
-    if (!Number.isFinite(numeric) || numeric < 0) {
-      throw new RangeError(`Invalid auto-select family attempt timeout: ${value}`);
-    }
-    defaultAutoSelectFamilyAttemptTimeout = Math.trunc(numeric);
-  }
-};
-export { BlockList, NET_BRIDGE_MAX_RAW_WRITE_BYTES, NET_BRIDGE_POLL_DELAY_MS, NET_BRIDGE_TIMEOUT_SENTINEL, NET_SERVER_HANDLE_PREFIX, NET_SOCKET_REGISTRY_PREFIX, NetServer, NetServerCallable, NetSocket, SocketAddress, buildSerializedTlsOptions, classifyIpAddress, coerceIpInput, countAcceptFirstPumpOrigin, countIPv6Parts, countNetBridgeMetric, countReadFirstPumpOrigin, createAcceptedClientHandle, createBridgedTlsError, createConnectedSocketHandle, createFunctionArgTypeError, createListenArgValueError, createNetBridgeMetrics, createSocketBadPortError, createTimeoutArgTypeError, createTimeoutRangeError, defaultAutoSelectFamily, defaultAutoSelectFamilyAttemptTimeout, deserializeTlsBridgeValue, expandIpv6Address, finalizeTlsUpgrade, formatBlockListRule, getRegisteredNetSocket, ipAddressToBigInt, ipv4ToBigInt, ipv6ToBigInt, isDecimalIntegerString, isIPv4String, isIPv6String, isNetBridgeMetricsEnabled, isNetBridgeTraceEnabled, isNetRetainOwnedWriteBufferEnabled, isTlsSecureContextWrapper, isTruthySocketOption, isValidIPv4Segment, isValidIPv6Zone, isValidTcpPort, maxNetBridgeMetric, netBridgeMetrics, netBridgeNowUs, netBridgePollDelayMs, netBridgePollDelayOverrideMs, netBridgeTraceForced, netConnect, netModule, netSocketDispatch, normalizeConnectArgs, normalizeIpFamilyLabel, normalizeKeepAliveDelay, normalizeListenArgs, normalizeListenPortValue, normalizeNetBridgePollDelayMs, normalizeNetSocketHandle, normalizeSocketTimeout, parseNetSocketInfo, parseTlsClientHello, parseTlsState, queryTlsSocket, registerNetServer, registerNetSocket, registeredNetServersByPort, registeredNetSockets, serializeTlsValue, unregisterNetServer, unregisterNetSocket, wakeNetServerAccept, wakeNetServerAcceptForSocket, wakePeerBridgeReads, wakeSocketBridgeReads, yieldBridgeMacrotask };
diff --git a/packages/build-tools/bridge-src/builtins/network.ts b/packages/build-tools/bridge-src/builtins/network.ts
deleted file mode 100644
index 88b539ada..000000000
--- a/packages/build-tools/bridge-src/builtins/network.ts
+++ /dev/null
@@ -1,48 +0,0 @@
-import { __export } from "../vendor/esbuild-runtime.js";
-import { Blob, File, Headers, MAX_HTTP_BODY_BYTES, MAX_HTTP_REQUEST_HEADERS, MAX_HTTP_REQUEST_HEADER_BYTES, Request, Response, _fetchHandleCounter, createFetchHeaders, ensureFetchAcceptEncoding, fetch, normalizeFetchRequestInit, serializeFetchHeaders } from "./fetch.js";
-import { SecureExecPromisesResolver, SecureExecResolver, createInvalidDnsServersError, createUnsupportedDnsError, dns, lookupDnsRecords, normalizeDnsLookupInvocation, normalizeDnsResolveInvocation, normalizeDnsServers, parseDnsLookupRecords, parseDnsResolveRecords, resolveDnsRecords } from "./dns.js";
-import { Agent, ClientRequest, DirectTunnelSocket, FakeSocket, HTTP_METHODS, HTTP_STATUS_TEXT, HTTP_TOKEN_EXTRA_CHARS, INVALID_REQUEST_PATH_REGEXP, IncomingMessage, Server, ServerCallable, ServerIncomingMessage, ServerResponseBridge, ServerResponseCallable, UpgradeSocket, appendNormalizedHeader, attachHttpServerSocket, buildHostHeader, buildRawHttpHeaderPairs, buildUndiciOrigin, checkInvalidHeaderChar, checkIsHttpToken, cloneStoredHeaderValue, createAbortError2, createBadRequestResponseBuffer, createConnResetError, createErrorWithCode, createHttpModule, createHttpRequestSocket, createInvalidArgTypeError2, createTypeErrorWithCode, createUnsupportedHttpSocketWriteError, debugBridgeNetwork, dispatchConnectRequest, dispatchHttp2CompatibilityRequest, dispatchLoopbackServerRequest, dispatchServerRequest, dispatchSocketBackedServerRequest, dispatchSocketRequest, dispatchUpgradeRequest, finalizeRawHeaderPairs, flattenHeaderPairs, formatReceivedType, getUndiciClientForSocket, hasResponseBody, hasUpgradeRequestHeaders, http, https, isFlatHeaderList, isLoopbackRequestHost, isRawSocketRequest, isSocketReadyForProtocol, joinHeaderValue, nextServerId, normalizeRequestHeaders, normalizeSocketChunk, onHttpServerRequest, onUpgradeSocketData, onUpgradeSocketEnd, parseChunkedBody, parseContentLengthHeader, parseLoopbackRequestBuffer, parseRawHttpResponse, readUndiciReadableBody, serializeHeaderValue, serializeLoopbackResponse, serializeRawHeaderPairs, serializeRawHttpRequest, serverInstances, socketReadyEventNameForProtocol, splitTransferEncodingTokens, upgradeSocketInstances, validateHeaderName, validateHeaderValue, validateRequestMethod, validateRequestPath, waitForRawHttpResponse, waitForRawHttpResponseHead, waitForSocketReadyForProtocol } from "./http.js";
-import { ClientHttp2Stream, DEFAULT_HTTP2_SESSION_STATE, DEFAULT_HTTP2_SETTINGS, HTTP2_INTERNAL_BINDING_CONSTANTS, HTTP2_K_SOCKET, HTTP2_NGHTTP2_ERROR_MESSAGES, HTTP2_OPTIONS, Http2EventEmitter, Http2Server, Http2ServerRequest, Http2ServerResponse, Http2Session, Http2SocketProxy, Http2Stream, NghttpError, S_IFDIR, S_IFIFO, S_IFLNK, S_IFMT, S_IFREG, S_IFSOCK, ServerHttp2Stream, applyHttp2SessionState, cloneHttp2SessionRuntimeState, cloneHttp2Settings, connectHttp2, createHttp2ArgTypeError, createHttp2BridgeStat, createHttp2Error, createHttp2InvalidArgValueError, createHttp2PayloadForbiddenError, createHttp2Server, createHttp2SettingRangeError, createHttp2SettingTypeError, flushPendingHttp2ClientStreamEvents, formatHttp2InvalidValue, getCompleteUtf8PrefixLength, getOrCreateHttp2Session, http2, http2Dispatch, http2Servers, http2Sessions, http2Streams, nextHttp2ServerId, nghttp2ErrorString, normalizeHttp2Authority, normalizeHttp2ConnectArgs, normalizeHttp2FileResponseOptions, normalizeHttp2Headers, onHttp2Dispatch, parseHttp2ErrorPayload, parseHttp2Headers, parseHttp2SessionRuntimeState, parseHttp2SessionState, parseHttp2SocketState, pendingHttp2ClientStreamEvents, pendingHttp2CompatRequests, queuePendingHttp2ClientStreamEvent, queuedHttp2DispatchEvents, resolveHttp2SocketId, schedulePendingHttp2ClientStreamEventsFlush, scheduleQueuedHttp2DispatchDrain, scheduledHttp2ClientStreamFlushes, scheduledHttp2DispatchDrain, serializeHttp2Headers, sliceHttp2FileBody, validateHttp2ConnectOptions, validateHttp2RequestOptions, validateHttp2Settings } from "./http2.js";
-import { BlockList, NET_BRIDGE_MAX_RAW_WRITE_BYTES, NET_BRIDGE_POLL_DELAY_MS, NET_BRIDGE_TIMEOUT_SENTINEL, NET_SERVER_HANDLE_PREFIX, NET_SOCKET_REGISTRY_PREFIX, NetServer, NetServerCallable, NetSocket, SocketAddress, buildSerializedTlsOptions, classifyIpAddress, coerceIpInput, countAcceptFirstPumpOrigin, countIPv6Parts, countNetBridgeMetric, countReadFirstPumpOrigin, createAcceptedClientHandle, createBridgedTlsError, createConnectedSocketHandle, createFunctionArgTypeError, createListenArgValueError, createNetBridgeMetrics, createSocketBadPortError, createTimeoutArgTypeError, createTimeoutRangeError, defaultAutoSelectFamily, defaultAutoSelectFamilyAttemptTimeout, deserializeTlsBridgeValue, expandIpv6Address, finalizeTlsUpgrade, formatBlockListRule, getRegisteredNetSocket, ipAddressToBigInt, ipv4ToBigInt, ipv6ToBigInt, isDecimalIntegerString, isIPv4String, isIPv6String, isNetBridgeMetricsEnabled, isNetBridgeTraceEnabled, isNetRetainOwnedWriteBufferEnabled, isTlsSecureContextWrapper, isTruthySocketOption, isValidIPv4Segment, isValidIPv6Zone, isValidTcpPort, maxNetBridgeMetric, netBridgeMetrics, netBridgeNowUs, netBridgePollDelayMs, netBridgePollDelayOverrideMs, netBridgeTraceForced, netConnect, netModule, netSocketDispatch, normalizeConnectArgs, normalizeIpFamilyLabel, normalizeKeepAliveDelay, normalizeListenArgs, normalizeListenPortValue, normalizeNetBridgePollDelayMs, normalizeNetSocketHandle, normalizeSocketTimeout, parseNetSocketInfo, parseTlsClientHello, parseTlsState, queryTlsSocket, registerNetServer, registerNetSocket, registeredNetServersByPort, registeredNetSockets, serializeTlsValue, unregisterNetServer, unregisterNetSocket, wakeNetServerAccept, wakeNetServerAcceptForSocket, wakePeerBridgeReads, wakeSocketBridgeReads, yieldBridgeMacrotask } from "./net.js";
-import { TLSServer, TLSServerCallable, TLSSocket, adoptRawTlsSocket, createSecureContextWrapper, matchesServername, tlsConnect, tlsModule } from "./tls.js";
-import { DGRAM_HANDLE_PREFIX, DgramSocket, createBadDgramSocketTypeError, createDgramAddressError, createDgramAlreadyBoundError, createDgramArgTypeError, createDgramBufferSizeSystemError, createDgramBufferSizeTypeError, createDgramMessageBuffer, createDgramMessageListBuffer, createDgramMissingArgError, createDgramNotRunningError, createDgramSyscallError, createDgramTtlArgTypeError, decodeDgramBridgeBytes, dgramModule, getDgramErrno, getPlatformDgramBufferSize, isIPv4MulticastAddress, isIPv4UnicastAddress, isIPv6MulticastAddress, normalizeDgramAddressValue, normalizeDgramBindArgs, normalizeDgramBridgeResult, normalizeDgramPortValue, normalizeDgramSendArgs, normalizeDgramSocketOptions, normalizeDgramSocketType, normalizeDgramTtlValue, validateDgramMulticastAddress, validateDgramSourceAddress } from "./dgram.js";
-import { DatabaseSync, StatementSync, _sqliteConstants, _sqliteDatabaseCheckpoint, _sqliteDatabaseClose, _sqliteDatabaseExec, _sqliteDatabaseLocation, _sqliteDatabaseOpen, _sqliteDatabasePrepare, _sqliteDatabaseQuery, _sqliteStatementAll, _sqliteStatementColumns, _sqliteStatementFinalize, _sqliteStatementGet, _sqliteStatementRun, _sqliteStatementSetAllowBareNamedParameters, _sqliteStatementSetAllowUnknownNamedParameters, _sqliteStatementSetReadBigInts, _sqliteStatementSetReturnArrays, decodeSqliteValue, encodeSqliteValue, getSqliteConstants, isSqlitePlainObject, normalizeSqliteParams, sqliteBridgeCall, sqliteConstants, sqliteModule } from "./sqlite.js";
-
-var network_exports = {};
-__export(network_exports, {
-  ClientRequest: () => ClientRequest,
-  Headers: () => Headers,
-  IncomingMessage: () => IncomingMessage,
-  Request: () => Request,
-  Response: () => Response,
-  default: () => network_default,
-  dns: () => dns,
-  fetch: () => fetch,
-  http: () => http,
-  http2: () => http2,
-  https: () => https
-});
-var network_default = {
-  fetch,
-  Headers,
-  Request,
-  Response,
-  dns,
-  http,
-  https,
-  http2,
-  IncomingMessage,
-  ClientRequest,
-  net: netModule,
-  tls: tlsModule,
-  dgram: dgramModule
-};
-export * from "./fetch.js";
-export * from "./dns.js";
-export * from "./http.js";
-export * from "./http2.js";
-export * from "./net.js";
-export * from "./tls.js";
-export * from "./dgram.js";
-export * from "./sqlite.js";
-export { network_exports, network_default };
diff --git a/packages/build-tools/bridge-src/builtins/os.ts b/packages/build-tools/bridge-src/builtins/os.ts
deleted file mode 100644
index 771585cf9..000000000
--- a/packages/build-tools/bridge-src/builtins/os.ts
+++ /dev/null
@@ -1,371 +0,0 @@
-import { exposeCustomGlobal } from "../global-exposure.js";
-
-var config = {
-  platform: typeof _osConfig !== "undefined" && _osConfig.platform || "linux",
-  arch: typeof _osConfig !== "undefined" && _osConfig.arch || "x64",
-  type: typeof _osConfig !== "undefined" && _osConfig.type || "Linux",
-  release: typeof _osConfig !== "undefined" && _osConfig.release || "6.8.0-secure-exec",
-  version: typeof _osConfig !== "undefined" && _osConfig.version || "#1 SMP PREEMPT_DYNAMIC secure-exec",
-  homedir: typeof _osConfig !== "undefined" && _osConfig.homedir || "/home/user",
-  tmpdir: typeof _osConfig !== "undefined" && _osConfig.tmpdir || "/tmp",
-  hostname: typeof _osConfig !== "undefined" && _osConfig.hostname || "secure-exec",
-  machine: typeof _osConfig !== "undefined" && _osConfig.machine || "x86_64"
-};
-function getRuntimeHomeDir() {
-  return runtimeVirtualOsString("homedir", globalThis.process?.env?.HOME || config.homedir);
-}
-function getRuntimeTmpDir() {
-  return runtimeVirtualOsString("tmpdir", globalThis.process?.env?.TMPDIR || config.tmpdir);
-}
-function getRuntimeUserName() {
-  return runtimeVirtualOsString(
-    "user",
-    globalThis.process?.env?.USER || globalThis.process?.env?.LOGNAME || "user"
-  );
-}
-function getRuntimeShell() {
-  return runtimeVirtualOsString("shell", globalThis.process?.env?.SHELL || "/bin/sh");
-}
-function getRuntimeUid() {
-  const value = globalThis.process?.uid;
-  return Number.isFinite(value) ? value : 0;
-}
-function getRuntimeGid() {
-  const value = globalThis.process?.gid;
-  return Number.isFinite(value) ? value : 0;
-}
-function getRuntimeInternalEnv(name) {
-  const bridgedValue = globalThis.__agentOSProcessConfigEnv?.[name];
-  if (typeof bridgedValue === "string" && bridgedValue.length > 0) {
-    return bridgedValue;
-  }
-  const hiddenValue = typeof _processConfig !== "undefined" ? _processConfig.env?.[name] : void 0;
-  if (typeof hiddenValue === "string" && hiddenValue.length > 0) {
-    return hiddenValue;
-  }
-  const publicValue = globalThis.process?.env?.[name];
-  return typeof publicValue === "string" ? publicValue : void 0;
-}
-function getRuntimePositiveIntEnv(name, fallback) {
-  const rawValue = getRuntimeInternalEnv(name);
-  if (typeof rawValue !== "string" || rawValue.length === 0) {
-    return fallback;
-  }
-  const parsed = Number.parseInt(rawValue, 10);
-  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : fallback;
-}
-function getRuntimeVirtualOs() {
-  return globalThis.__agentOSVirtualOs || {};
-}
-function runtimeVirtualOsString(name, fallback) {
-  const value = getRuntimeVirtualOs()[name];
-  return typeof value === "string" && value.length > 0 ? value : fallback;
-}
-function runtimeVirtualOsPositiveInt(name, fallback) {
-  const parsed = Number(getRuntimeVirtualOs()[name]);
-  return Number.isSafeInteger(parsed) && parsed > 0 ? parsed : fallback;
-}
-function getRuntimeVirtualCpuCount() {
-  return runtimeVirtualOsPositiveInt("cpuCount", 1);
-}
-function getRuntimeVirtualTotalMem() {
-  return runtimeVirtualOsPositiveInt("totalmem", 1073741824);
-}
-function getRuntimeVirtualFreeMem() {
-  return Math.min(
-    runtimeVirtualOsPositiveInt("freemem", 536870912),
-    getRuntimeVirtualTotalMem()
-  );
-}
-var signals = {
-  SIGHUP: 1,
-  SIGINT: 2,
-  SIGQUIT: 3,
-  SIGILL: 4,
-  SIGTRAP: 5,
-  SIGABRT: 6,
-  SIGIOT: 6,
-  SIGBUS: 7,
-  SIGFPE: 8,
-  SIGKILL: 9,
-  SIGUSR1: 10,
-  SIGSEGV: 11,
-  SIGUSR2: 12,
-  SIGPIPE: 13,
-  SIGALRM: 14,
-  SIGTERM: 15,
-  SIGSTKFLT: 16,
-  SIGCHLD: 17,
-  SIGCONT: 18,
-  SIGSTOP: 19,
-  SIGTSTP: 20,
-  SIGTTIN: 21,
-  SIGTTOU: 22,
-  SIGURG: 23,
-  SIGXCPU: 24,
-  SIGXFSZ: 25,
-  SIGVTALRM: 26,
-  SIGPROF: 27,
-  SIGWINCH: 28,
-  SIGIO: 29,
-  SIGPOLL: 29,
-  SIGPWR: 30,
-  SIGSYS: 31
-};
-var canonicalChildProcessSignalNamesByNumber = {
-  1: "SIGHUP",
-  2: "SIGINT",
-  3: "SIGQUIT",
-  4: "SIGILL",
-  5: "SIGTRAP",
-  6: "SIGABRT",
-  7: "SIGBUS",
-  8: "SIGFPE",
-  9: "SIGKILL",
-  10: "SIGUSR1",
-  11: "SIGSEGV",
-  12: "SIGUSR2",
-  13: "SIGPIPE",
-  14: "SIGALRM",
-  15: "SIGTERM",
-  16: "SIGSTKFLT",
-  17: "SIGCHLD",
-  18: "SIGCONT",
-  19: "SIGSTOP",
-  20: "SIGTSTP",
-  21: "SIGTTIN",
-  22: "SIGTTOU",
-  23: "SIGURG",
-  24: "SIGXCPU",
-  25: "SIGXFSZ",
-  26: "SIGVTALRM",
-  27: "SIGPROF",
-  28: "SIGWINCH",
-  29: "SIGIO",
-  30: "SIGPWR",
-  31: "SIGSYS"
-};
-function normalizeChildProcessSignal(signal) {
-  if (signal == null) {
-    return { bridgeSignal: "SIGTERM", signalCode: "SIGTERM" };
-  }
-  if (signal === 0 || signal === "0") {
-    return { bridgeSignal: "0", signalCode: null };
-  }
-  if (typeof signal === "number") {
-    const signalCode = canonicalChildProcessSignalNamesByNumber[signal];
-    if (signalCode) {
-      return { bridgeSignal: signalCode, signalCode };
-    }
-    throw new Error("Unknown signal: " + signal);
-  }
-  if (typeof signal === "string") {
-    const signalNumber = signals[signal];
-    if (signalNumber !== void 0) {
-      const signalCode = canonicalChildProcessSignalNamesByNumber[signalNumber] ?? signal;
-      return { bridgeSignal: signalCode, signalCode };
-    }
-  }
-  throw new Error("Unknown signal: " + signal);
-}
-var errno = {
-  E2BIG: 7,
-  EACCES: 13,
-  EADDRINUSE: 98,
-  EADDRNOTAVAIL: 99,
-  EAFNOSUPPORT: 97,
-  EAGAIN: 11,
-  EALREADY: 114,
-  EBADF: 9,
-  EBADMSG: 74,
-  EBUSY: 16,
-  ECANCELED: 125,
-  ECHILD: 10,
-  ECONNABORTED: 103,
-  ECONNREFUSED: 111,
-  ECONNRESET: 104,
-  EDEADLK: 35,
-  EDESTADDRREQ: 89,
-  EDOM: 33,
-  EDQUOT: 122,
-  EEXIST: 17,
-  EFAULT: 14,
-  EFBIG: 27,
-  EHOSTUNREACH: 113,
-  EIDRM: 43,
-  EILSEQ: 84,
-  EINPROGRESS: 115,
-  EINTR: 4,
-  EINVAL: 22,
-  EIO: 5,
-  EISCONN: 106,
-  EISDIR: 21,
-  ELOOP: 40,
-  EMFILE: 24,
-  EMLINK: 31,
-  EMSGSIZE: 90,
-  EMULTIHOP: 72,
-  ENAMETOOLONG: 36,
-  ENETDOWN: 100,
-  ENETRESET: 102,
-  ENETUNREACH: 101,
-  ENFILE: 23,
-  ENOBUFS: 105,
-  ENODATA: 61,
-  ENODEV: 19,
-  ENOENT: 2,
-  ENOEXEC: 8,
-  ENOLCK: 37,
-  ENOLINK: 67,
-  ENOMEM: 12,
-  ENOMSG: 42,
-  ENOPROTOOPT: 92,
-  ENOSPC: 28,
-  ENOSR: 63,
-  ENOSTR: 60,
-  ENOSYS: 38,
-  ENOTCONN: 107,
-  ENOTDIR: 20,
-  ENOTEMPTY: 39,
-  ENOTSOCK: 88,
-  ENOTSUP: 95,
-  ENOTTY: 25,
-  ENXIO: 6,
-  EOPNOTSUPP: 95,
-  EOVERFLOW: 75,
-  EPERM: 1,
-  EPIPE: 32,
-  EPROTO: 71,
-  EPROTONOSUPPORT: 93,
-  EPROTOTYPE: 91,
-  ERANGE: 34,
-  EROFS: 30,
-  ESPIPE: 29,
-  ESRCH: 3,
-  ESTALE: 116,
-  ETIME: 62,
-  ETIMEDOUT: 110,
-  ETXTBSY: 26,
-  EWOULDBLOCK: 11,
-  EXDEV: 18
-};
-var priority = {
-  PRIORITY_LOW: 19,
-  PRIORITY_BELOW_NORMAL: 10,
-  PRIORITY_NORMAL: 0,
-  PRIORITY_ABOVE_NORMAL: -7,
-  PRIORITY_HIGH: -14,
-  PRIORITY_HIGHEST: -20
-};
-var os = {
-  // Platform information
-  platform() {
-    return runtimeVirtualOsString("platform", config.platform);
-  },
-  arch() {
-    return runtimeVirtualOsString("arch", config.arch);
-  },
-  type() {
-    return runtimeVirtualOsString("type", config.type);
-  },
-  release() {
-    return runtimeVirtualOsString("release", config.release);
-  },
-  version() {
-    return runtimeVirtualOsString("version", config.version);
-  },
-  // Directory information
-  homedir() {
-    return getRuntimeHomeDir();
-  },
-  tmpdir() {
-    return getRuntimeTmpDir();
-  },
-  // System information
-  hostname() {
-    return runtimeVirtualOsString("hostname", config.hostname);
-  },
-  // User information
-  userInfo(_options) {
-    return {
-      username: getRuntimeUserName(),
-      uid: getRuntimeUid(),
-      gid: getRuntimeGid(),
-      shell: getRuntimeShell(),
-      homedir: getRuntimeHomeDir()
-    };
-  },
-  // CPU information
-  cpus() {
-    return Array.from({ length: getRuntimeVirtualCpuCount() }, () => ({
-      model: "Virtual CPU",
-      speed: 2e3,
-      times: {
-        user: 1e5,
-        nice: 0,
-        sys: 5e4,
-        idle: 8e5,
-        irq: 0
-      }
-    }));
-  },
-  // Memory information
-  totalmem() {
-    return getRuntimeVirtualTotalMem();
-  },
-  freemem() {
-    return getRuntimeVirtualFreeMem();
-  },
-  // System load
-  loadavg() {
-    return [0.1, 0.1, 0.1];
-  },
-  // System uptime
-  uptime() {
-    return 3600;
-  },
-  // Network interfaces (empty - not supported in sandbox)
-  networkInterfaces() {
-    return {};
-  },
-  // System endianness
-  endianness() {
-    return "LE";
-  },
-  // Line endings
-  EOL: "\n",
-  // Dev null path
-  devNull: "/dev/null",
-  // Machine type
-  machine() {
-    return runtimeVirtualOsString("machine", config.machine);
-  },
-  // Constants (partial — Linux subset, no Windows WSA* or RTLD_DEEPBIND)
-  constants: {
-    signals,
-    errno,
-    priority,
-    dlopen: {
-      RTLD_LAZY: 1,
-      RTLD_NOW: 2,
-      RTLD_GLOBAL: 256,
-      RTLD_LOCAL: 0
-    },
-    UV_UDP_REUSEADDR: 4
-  },
-  // Priority getters/setters (stubs)
-  getPriority(_pid) {
-    return 0;
-  },
-  setPriority(pid, priority2) {
-    void pid;
-    void priority2;
-  },
-  // Parallelism hint
-  availableParallelism() {
-    return getRuntimeVirtualCpuCount();
-  }
-};
-exposeCustomGlobal("_osModule", os);
-var os_default = os;
-export { config, getRuntimeHomeDir, getRuntimeTmpDir, getRuntimeUserName, getRuntimeShell, getRuntimeUid, getRuntimeGid, getRuntimeInternalEnv, getRuntimePositiveIntEnv, getRuntimeVirtualOs, runtimeVirtualOsString, runtimeVirtualOsPositiveInt, getRuntimeVirtualCpuCount, getRuntimeVirtualTotalMem, getRuntimeVirtualFreeMem, signals, canonicalChildProcessSignalNamesByNumber, normalizeChildProcessSignal, errno, priority, os, os_default };
diff --git a/packages/build-tools/bridge-src/builtins/perf.ts b/packages/build-tools/bridge-src/builtins/perf.ts
deleted file mode 100644
index fbf11e71e..000000000
--- a/packages/build-tools/bridge-src/builtins/perf.ts
+++ /dev/null
@@ -1,288 +0,0 @@
-import { getNowMs } from "./process.js";
-import { _queueMicrotask } from "./timers.js";
-
-function createPerfHooksOutOfRangeError(name, requirement, value) {
-  const error = new RangeError(
-    `The value of "${name}" is out of range. It must be ${requirement}. Received ${String(value)}`
-  );
-  error.code = "ERR_OUT_OF_RANGE";
-  return error;
-}
-
-function normalizePerformanceEntry(entry) {
-  return {
-    name: String(entry?.name ?? ""),
-    entryType: String(entry?.entryType ?? ""),
-    startTime: Number(entry?.startTime ?? 0),
-    duration: Number(entry?.duration ?? 0)
-  };
-}
-
-function createPerformanceObserverEntryList(entries) {
-  return {
-    getEntries() {
-      return entries.slice();
-    },
-    getEntriesByName(name, type = void 0) {
-      const normalizedName = String(name ?? "");
-      const matching = entries.filter((entry) => entry.name === normalizedName);
-      if (typeof type === "string") {
-        return matching.filter((entry) => entry.entryType === type);
-      }
-      return matching;
-    },
-    getEntriesByType(type) {
-      const normalizedType = String(type ?? "");
-      return entries.filter((entry) => entry.entryType === normalizedType);
-    }
-  };
-}
-
-function createPerformanceHistogram() {
-  const values = [];
-  return {
-    percentile(percentile) {
-      const normalizedPercentile = Number(percentile);
-      if (!Number.isFinite(normalizedPercentile) || normalizedPercentile <= 0 || normalizedPercentile > 100) {
-        throw createPerfHooksOutOfRangeError("percentile", "> 0 && <= 100", percentile);
-      }
-      if (values.length === 0) {
-        return 0;
-      }
-      const sorted = values.slice().sort((left, right) => left - right);
-      const index = Math.min(
-        sorted.length - 1,
-        Math.max(0, Math.ceil(normalizedPercentile / 100 * sorted.length) - 1)
-      );
-      return sorted[index];
-    },
-    record(value) {
-      const normalizedValue = typeof value === "bigint" ? Number(value) : Number(value);
-      if (!Number.isInteger(normalizedValue)) {
-        throw createPerfHooksOutOfRangeError("val", "an integer", value);
-      }
-      if (normalizedValue < 1 || normalizedValue > Number.MAX_SAFE_INTEGER) {
-        throw createPerfHooksOutOfRangeError(
-          "val",
-          `>= 1 && <= ${Number.MAX_SAFE_INTEGER}`,
-          value
-        );
-      }
-      values.push(normalizedValue);
-    }
-  };
-}
-
-var builtinPerformance = (() => {
-  const marks = /* @__PURE__ */ new Map();
-  const measures = [];
-  const observers = /* @__PURE__ */ new Set();
-  const perf = typeof performance !== "undefined" && performance && typeof performance.now === "function" ? performance : {
-    now() {
-      return getNowMs();
-    },
-    timeOrigin: Date.now() - getNowMs()
-  };
-  if (typeof perf.mark !== "function") {
-    perf.mark = function(name) {
-      const entry = {
-        name: String(name ?? ""),
-        entryType: "mark",
-        startTime: perf.now(),
-        duration: 0
-      };
-      const entries = marks.get(entry.name) ?? [];
-      entries.push(entry);
-      marks.set(entry.name, entries);
-      return entry;
-    };
-  }
-  if (typeof perf.measure !== "function") {
-    perf.measure = function(name, startMarkOrOptions, endMark) {
-      const normalizedName = String(name ?? "");
-      let startTime = 0;
-      let endTimeMs = perf.now();
-      if (typeof startMarkOrOptions === "string") {
-        const startEntries = marks.get(startMarkOrOptions);
-        if (startEntries?.length) {
-          startTime = startEntries[startEntries.length - 1].startTime;
-        }
-        if (typeof endMark === "string") {
-          const endEntries = marks.get(endMark);
-          if (endEntries?.length) {
-            endTimeMs = endEntries[endEntries.length - 1].startTime;
-          }
-        }
-      } else if (startMarkOrOptions && typeof startMarkOrOptions === "object") {
-        if (typeof startMarkOrOptions.start === "number") {
-          startTime = startMarkOrOptions.start;
-        } else if (typeof startMarkOrOptions.startMark === "string") {
-          const startEntries = marks.get(startMarkOrOptions.startMark);
-          if (startEntries?.length) {
-            startTime = startEntries[startEntries.length - 1].startTime;
-          }
-        }
-        if (typeof startMarkOrOptions.end === "number") {
-          endTimeMs = startMarkOrOptions.end;
-        } else if (typeof startMarkOrOptions.endMark === "string") {
-          const endEntries = marks.get(startMarkOrOptions.endMark);
-          if (endEntries?.length) {
-            endTimeMs = endEntries[endEntries.length - 1].startTime;
-          }
-        }
-      }
-      const entry = {
-        name: normalizedName,
-        entryType: "measure",
-        startTime,
-        duration: Math.max(0, endTimeMs - startTime)
-      };
-      measures.push(entry);
-      return entry;
-    };
-  }
-  if (typeof perf.getEntriesByName !== "function") {
-    perf.getEntriesByName = function(name, type = void 0) {
-      const normalizedName = String(name ?? "");
-      const markEntries = marks.get(normalizedName) ?? [];
-      const combined = [...markEntries, ...measures.filter((entry) => entry.name === normalizedName)];
-      if (typeof type === "string") {
-        return combined.filter((entry) => entry.entryType === type);
-      }
-      return combined;
-    };
-  }
-  if (typeof perf.getEntries !== "function") {
-    perf.getEntries = function() {
-      return [...marks.values()].flatMap((entries) => [...entries]).concat(measures);
-    };
-  }
-  if (typeof perf.getEntriesByType !== "function") {
-    perf.getEntriesByType = function(type) {
-      const normalizedType = String(type ?? "");
-      return perf.getEntries().filter((entry) => entry.entryType === normalizedType);
-    };
-  }
-  if (typeof perf.clearMarks !== "function") {
-    perf.clearMarks = function(name = void 0) {
-      if (typeof name === "undefined") {
-        marks.clear();
-        return;
-      }
-      marks.delete(String(name));
-    };
-  }
-  if (typeof perf.clearMeasures !== "function") {
-    perf.clearMeasures = function(name = void 0) {
-      if (typeof name === "undefined") {
-        measures.length = 0;
-        return;
-      }
-      const normalizedName = String(name);
-      for (let index = measures.length - 1; index >= 0; index -= 1) {
-        if (measures[index]?.name === normalizedName) {
-          measures.splice(index, 1);
-        }
-      }
-    };
-  }
-  const queueObserverDelivery = (observer) => {
-    if (observer._deliveryQueued) {
-      return;
-    }
-    observer._deliveryQueued = true;
-    _queueMicrotask(() => {
-      observer._deliveryQueued = false;
-      if (!observer._connected) {
-        return;
-      }
-      const records = observer.takeRecords();
-      observer._callback(createPerformanceObserverEntryList(records), observer);
-    });
-  };
-  const emitEntry = (entry) => {
-    const normalizedEntry = normalizePerformanceEntry(entry);
-    for (const observer of observers) {
-      if (!observer._entryTypes.has(normalizedEntry.entryType)) {
-        continue;
-      }
-      observer._records.push(normalizedEntry);
-      queueObserverDelivery(observer);
-    }
-  };
-  const originalMark = perf.mark.bind(perf);
-  perf.mark = function(...args) {
-    const entry = originalMark(...args);
-    emitEntry(entry);
-    return entry;
-  };
-  const originalMeasure = perf.measure.bind(perf);
-  perf.measure = function(...args) {
-    const entry = originalMeasure(...args);
-    emitEntry(entry);
-    return entry;
-  };
-  perf.__agentOSObservers = observers;
-  return perf;
-})();
-
-var builtinPerfHooksModule = {
-  PerformanceObserver: class {
-    constructor(callback) {
-      if (typeof callback !== "function") {
-        throw new TypeError("PerformanceObserver callback must be a function");
-      }
-      this._callback = callback;
-      this._connected = false;
-      this._deliveryQueued = false;
-      this._entryTypes = /* @__PURE__ */ new Set();
-      this._records = [];
-    }
-    static get supportedEntryTypes() {
-      return ["mark", "measure"];
-    }
-    observe(options = {}) {
-      const entryTypes = Array.isArray(options?.entryTypes) ? options.entryTypes.map((entryType) => String(entryType)) : typeof options?.type === "string" ? [String(options.type)] : [];
-      if (entryTypes.length === 0) {
-        throw new TypeError("PerformanceObserver.observe() requires an entryTypes array or type string");
-      }
-      this.disconnect();
-      this._entryTypes = new Set(entryTypes);
-      this._connected = true;
-      builtinPerformance.__agentOSObservers.add(this);
-      if (options?.buffered) {
-        for (const entryType of this._entryTypes) {
-          for (const entry of builtinPerformance.getEntriesByType(entryType)) {
-            this._records.push(normalizePerformanceEntry(entry));
-          }
-        }
-        if (this._records.length > 0) {
-          this._deliveryQueued = true;
-          _queueMicrotask(() => {
-            this._deliveryQueued = false;
-            if (!this._connected) {
-              return;
-            }
-            const records = this.takeRecords();
-            this._callback(createPerformanceObserverEntryList(records), this);
-          });
-        }
-      }
-    }
-    disconnect() {
-      this._connected = false;
-      builtinPerformance.__agentOSObservers.delete(this);
-    }
-    takeRecords() {
-      const records = this._records.slice();
-      this._records.length = 0;
-      return records;
-    }
-  },
-  constants: {},
-  createHistogram() {
-    return createPerformanceHistogram();
-  },
-  performance: builtinPerformance
-};
-export { builtinPerfHooksModule, builtinPerformance, createPerfHooksOutOfRangeError, createPerformanceHistogram, createPerformanceObserverEntryList, normalizePerformanceEntry };
diff --git a/packages/build-tools/bridge-src/builtins/process.ts b/packages/build-tools/bridge-src/builtins/process.ts
deleted file mode 100644
index f07df4e59..000000000
--- a/packages/build-tools/bridge-src/builtins/process.ts
+++ /dev/null
@@ -1,1037 +0,0 @@
-import { encodeChildProcessIpcFrame, splitChildProcessIpcFrames } from "./child-process.js";
-import { UndiciHeaders, UndiciRequest, UndiciResponse } from "./undici.js";
-import { BUFFER_CONSTANTS, BUFFER_MAX_LENGTH, BUFFER_MAX_STRING_LENGTH } from "./buffer-constants.js";
-import { EventEmitter, once } from "./events.js";
-import { _fs, _processCpuUsage, _processMemoryUsage, _processResourceUsage, _processUmask, _processVersions, decodeBridgeJson, normalizeModeArgument } from "./fs.js";
-import { builtinPathStdlibModule } from "./builtin-modules.js";
-import { fetch } from "./network.js";
-import { getRuntimeGid, getRuntimeUid } from "./os.js";
-import { URL2, installWhatwgUrlGlobals } from "./whatwg-url.js";
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { CustomEvent, Event, EventTarget, TextDecoder, TextEncoder2 } from "../polyfills/index.js";
-import { require_base64_js } from "../vendor/buffer.js";
-import { Buffer3 } from "./buffer-runtime.js";
-import { _stderr, _stdout, installBuiltinUtilFormatWithOptions } from "./console.js";
-import { SandboxCrypto, SandboxCryptoKey, SandboxDOMException, SandboxSubtleCrypto, builtinCryptoModule } from "./crypto.js";
-import { installSafeIntlFormatters } from "./misc-stubs.js";
-import { _stdin, _stdinListeners, _stdinOnceListeners, resetLiveStdinState, setStdinDataValue, setStdinEnded, setStdinFlowMode, setStdinPosition, stdinDispatch, syncLiveStdinHandle } from "./stdin.js";
-import { _nextTickQueue, _queueMicrotask, clearImmediate, clearInterval, clearTimeout2, runWithAsyncLocalStorageSnapshot, scheduleNextTickFlush, setImmediate, setInterval, setTimeout2, snapshotAsyncLocalStorageStores, wrapAsyncLocalStorageCallback } from "./timers.js";
-import { _resolveRuntimeTtyConfig } from "./tty-config.js";
-
-function readProcessConfig() {
-  return {
-    platform: typeof _processConfig !== "undefined" && _processConfig.platform || "linux",
-    arch: typeof _processConfig !== "undefined" && _processConfig.arch || "x64",
-    version: typeof _processConfig !== "undefined" && _processConfig.version || "v22.0.0",
-    cwd: typeof _processConfig !== "undefined" && _processConfig.cwd || "/root",
-    env: typeof _processConfig !== "undefined" && _processConfig.env || {},
-    argv: typeof _processConfig !== "undefined" && _processConfig.argv || [
-      "node",
-      "script.js"
-    ],
-    execPath: typeof _processConfig !== "undefined" && _processConfig.execPath || "/usr/bin/node",
-    pid: typeof _processConfig !== "undefined" && _processConfig.pid || 1,
-    ppid: typeof _processConfig !== "undefined" && _processConfig.ppid || 0,
-    uid: typeof _processConfig !== "undefined" && _processConfig.uid || 0,
-    gid: typeof _processConfig !== "undefined" && _processConfig.gid || 0,
-    stdin: typeof _processConfig !== "undefined" ? _processConfig.stdin : void 0,
-    timingMitigation: typeof _processConfig !== "undefined" && _processConfig.timingMitigation || "off",
-    frozenTimeMs: typeof _processConfig !== "undefined" ? _processConfig.frozenTimeMs : void 0,
-    highResolutionTime: typeof _processConfig !== "undefined" && _processConfig.high_resolution_time === true
-  };
-}
-
-var config2 = readProcessConfig();
-
-var processClockFallbackNow = typeof performance !== "undefined" && performance && typeof performance.now === "function" ? performance.now.bind(performance) : Date.now;
-
-var processClockNow = () => {
-  if (typeof __secureExecHrNowUs === "function") {
-    return __secureExecHrNowUs() / 1000;
-  }
-  return processClockFallbackNow();
-};
-
-function getNowMs() {
-  if (config2.timingMitigation === "freeze" && typeof config2.frozenTimeMs === "number") {
-    return config2.frozenTimeMs;
-  }
-  return processClockNow();
-}
-
-var _processStartTime = getNowMs();
-
-var _exitCode = void 0;
-
-var _exited = false;
-
-var ProcessExitError = class extends Error {
-  code;
-  _isProcessExit;
-  constructor(code) {
-    super("process.exit(" + code + ")");
-    this.name = "ProcessExitError";
-    this.code = code;
-    this._isProcessExit = true;
-  }
-};
-
-exposeCustomGlobal("ProcessExitError", ProcessExitError);
-
-var _signalNumbers = {
-  SIGHUP: 1,
-  SIGINT: 2,
-  SIGQUIT: 3,
-  SIGILL: 4,
-  SIGTRAP: 5,
-  SIGABRT: 6,
-  SIGBUS: 7,
-  SIGFPE: 8,
-  SIGKILL: 9,
-  SIGUSR1: 10,
-  SIGSEGV: 11,
-  SIGUSR2: 12,
-  SIGPIPE: 13,
-  SIGALRM: 14,
-  SIGTERM: 15,
-  SIGCHLD: 17,
-  SIGCONT: 18,
-  SIGSTOP: 19,
-  SIGTSTP: 20,
-  SIGTTIN: 21,
-  SIGTTOU: 22,
-  SIGURG: 23,
-  SIGXCPU: 24,
-  SIGXFSZ: 25,
-  SIGVTALRM: 26,
-  SIGPROF: 27,
-  SIGWINCH: 28,
-  SIGIO: 29,
-  SIGPWR: 30,
-  SIGSYS: 31
-};
-
-var _signalNamesByNumber = Object.fromEntries(
-  Object.entries(_signalNumbers).map(([name, num]) => [num, name])
-);
-
-var _ignoredSelfSignals = /* @__PURE__ */ new Set(["SIGWINCH", "SIGCHLD", "SIGCONT", "SIGURG"]);
-
-var _trackedProcessSignalEvents = /* @__PURE__ */ new Set(["SIGHUP", "SIGINT", "SIGTERM", "SIGWINCH", "SIGCHLD"]);
-
-function _resolveSignal(signal) {
-  if (signal === void 0 || signal === null) return 15;
-  if (typeof signal === "number") return signal;
-  const num = _signalNumbers[signal];
-  if (num !== void 0) return num;
-  throw new Error("Unknown signal: " + signal);
-}
-
-function _isTrackedProcessSignalEventName(eventName) {
-  return typeof eventName === "string" && _trackedProcessSignalEvents.has(eventName);
-}
-
-var _processKillErrnoByCode = { ESRCH: 3, EPERM: 1, EINVAL: 22 };
-
-function _createProcessKillError(error) {
-  const message = String((error && error.message) || error || "");
-  let code = null;
-  if (error && typeof error.code === "string" && Object.prototype.hasOwnProperty.call(_processKillErrnoByCode, error.code)) {
-    code = error.code;
-  } else if (/\bESRCH\b/.test(message)) {
-    code = "ESRCH";
-  } else if (/\bEINVAL\b/.test(message)) {
-    code = "EINVAL";
-  } else if (/\bEPERM\b/.test(message) || /permission denied/i.test(message)) {
-    code = "EPERM";
-  }
-  if (code === null) {
-    return error instanceof Error ? error : new Error(message);
-  }
-  const err = new Error(`kill ${code}`);
-  err.code = code;
-  err.errno = -_processKillErrnoByCode[code];
-  err.syscall = "kill";
-  return err;
-}
-
-var _processListeners = {};
-
-var _processOnceListeners = {};
-
-var _processMaxListeners = 10;
-
-var _processMaxListenersWarned = /* @__PURE__ */ new Set();
-
-function _listenerCountForEvent(event) {
-  return (_processListeners[event] || []).length + (_processOnceListeners[event] || []).length;
-}
-
-function _syncGuestProcessSignalState(eventName) {
-  if (!_isTrackedProcessSignalEventName(eventName) || typeof _processSignalState === "undefined") {
-    return;
-  }
-  const signal = _signalNumbers[eventName];
-  if (typeof signal !== "number") {
-    return;
-  }
-  const action = _listenerCountForEvent(eventName) > 0 ? "user" : "default";
-  try {
-    _processSignalState.applySyncPromise(void 0, [signal, action, JSON.stringify([]), 0]);
-  } catch {
-  }
-}
-
-function _syncAllGuestProcessSignalStates() {
-  for (const eventName of _trackedProcessSignalEvents) {
-    _syncGuestProcessSignalState(eventName);
-  }
-}
-
-function _deliverProcessSignal(signal, action = "default") {
-  const sigNum = _resolveSignal(signal);
-  if (sigNum === 0) {
-    return true;
-  }
-  const sigName = _signalNamesByNumber[sigNum] ?? `SIG${sigNum}`;
-  if (action === "ignore") {
-    return true;
-  }
-  if (_emit(sigName, sigName)) {
-    return true;
-  }
-  if (_ignoredSelfSignals.has(sigName)) {
-    return true;
-  }
-  return process2.exit(128 + sigNum);
-}
-
-function signalDispatch(eventType, payload) {
-  if (eventType !== "signal" || payload === null || typeof payload !== "object") {
-    return;
-  }
-  const signal = payload.signal ?? payload.number;
-  const action = typeof payload.action === "string" ? payload.action : "default";
-  _deliverProcessSignal(signal, action);
-}
-
-function _addListener(event, listener, once = false) {
-  const target = once ? _processOnceListeners : _processListeners;
-  if (!target[event]) {
-    target[event] = [];
-  }
-  target[event].push(listener);
-  if (_processMaxListeners > 0 && !_processMaxListenersWarned.has(event)) {
-    const total = (_processListeners[event]?.length ?? 0) + (_processOnceListeners[event]?.length ?? 0);
-    if (total > _processMaxListeners) {
-      _processMaxListenersWarned.add(event);
-      const warning = `MaxListenersExceededWarning: Possible EventEmitter memory leak detected. ${total} ${event} listeners added to [process]. MaxListeners is ${_processMaxListeners}. Use emitter.setMaxListeners() to increase limit`;
-      if (typeof _error !== "undefined") {
-        _error.applySync(void 0, [warning]);
-      }
-    }
-  }
-  _syncGuestProcessSignalState(event);
-  return process2;
-}
-
-function _removeListener(event, listener) {
-  if (_processListeners[event]) {
-    const idx = _processListeners[event].indexOf(listener);
-    if (idx !== -1) _processListeners[event].splice(idx, 1);
-  }
-  if (_processOnceListeners[event]) {
-    const idx = _processOnceListeners[event].indexOf(listener);
-    if (idx !== -1) _processOnceListeners[event].splice(idx, 1);
-  }
-  _syncGuestProcessSignalState(event);
-  return process2;
-}
-
-function _emit(event, ...args) {
-  let handled = false;
-  if (_processListeners[event]) {
-    for (const listener of _processListeners[event]) {
-      listener.call(process2, ...args);
-      handled = true;
-    }
-  }
-  if (_processOnceListeners[event]) {
-    const listeners = _processOnceListeners[event].slice();
-    _processOnceListeners[event] = [];
-    for (const listener of listeners) {
-      listener.call(process2, ...args);
-      handled = true;
-    }
-  }
-  return handled;
-}
-
-function isProcessExitError(error) {
-  return Boolean(
-    error && typeof error === "object" && (error._isProcessExit === true || error.name === "ProcessExitError")
-  );
-}
-
-function normalizeAsyncError(error) {
-  return error instanceof Error ? error : new Error(String(error));
-}
-
-function routeAsyncCallbackError(error) {
-  if (isProcessExitError(error)) {
-    return { handled: false, rethrow: error };
-  }
-  const normalized = normalizeAsyncError(error);
-  try {
-    if (_emit("uncaughtException", normalized, "uncaughtException")) {
-      return { handled: true, rethrow: null };
-    }
-  } catch (emitError) {
-    return { handled: false, rethrow: emitError };
-  }
-  return { handled: false, rethrow: normalized };
-}
-
-function scheduleAsyncRethrow(error) {
-  setTimeout2(() => {
-    throw error;
-  }, 0);
-}
-
-function dispatchCustomEmitterListeners(thisArg, listeners, args) {
-  if (!listeners || listeners.length === 0) {
-    return false;
-  }
-  for (const listener of listeners.slice()) {
-    try {
-      listener.call(thisArg, ...args);
-    } catch (error) {
-      const outcome = routeAsyncCallbackError(error);
-      if (!outcome.handled && outcome.rethrow !== null) {
-        throw outcome.rethrow;
-      }
-      return true;
-    }
-  }
-  return true;
-}
-
-function _getStdinIsTTY() {
-  return _resolveRuntimeTtyConfig().stdinIsTTY;
-}
-
-exposeCustomGlobal("_stdinDispatch", stdinDispatch);
-
-exposeCustomGlobal("_signalDispatch", signalDispatch);
-
-function hrtime(prev) {
-  const now = getNowMs();
-  const seconds = Math.floor(now / 1e3);
-  const nanoseconds = Math.floor(now % 1e3 * 1e6);
-  if (prev) {
-    let diffSec = seconds - prev[0];
-    let diffNano = nanoseconds - prev[1];
-    if (diffNano < 0) {
-      diffSec -= 1;
-      diffNano += 1e9;
-    }
-    return [diffSec, diffNano];
-  }
-  return [seconds, nanoseconds];
-}
-
-hrtime.bigint = function() {
-  const now = getNowMs();
-  return BigInt(Math.floor(now * 1e6));
-};
-
-var _cwd = config2.cwd;
-
-var _umask = 18;
-
-var _processVersionsCache = {
-  node: config2.version.replace(/^v/, ""),
-  v8: "11.3.244.8",
-  uv: "1.44.2",
-  zlib: "1.2.13",
-  brotli: "1.0.9",
-  ares: "1.19.0",
-  modules: "108",
-  nghttp2: "1.52.0",
-  napi: "8",
-  llhttp: "8.1.0",
-  openssl: "3.0.8",
-  cldr: "42.0",
-  icu: "72.1",
-  tz: "2022g",
-  unicode: "15.0"
-};
-
-function defaultProcessMemoryUsage() {
-  return {
-    rss: 50 * 1024 * 1024,
-    heapTotal: 20 * 1024 * 1024,
-    heapUsed: 10 * 1024 * 1024,
-    external: 1 * 1024 * 1024,
-    arrayBuffers: 500 * 1024
-  };
-}
-
-function readLiveProcessMemoryUsage() {
-  const fallback = defaultProcessMemoryUsage();
-  const usage = _processMemoryUsage.applySyncPromise(void 0, []);
-  if (!usage || typeof usage !== "object") {
-    return fallback;
-  }
-  return {
-    rss: Number.isFinite(usage.rss) ? Number(usage.rss) : fallback.rss,
-    heapTotal: Number.isFinite(usage.heapTotal) ? Number(usage.heapTotal) : fallback.heapTotal,
-    heapUsed: Number.isFinite(usage.heapUsed) ? Number(usage.heapUsed) : fallback.heapUsed,
-    external: Number.isFinite(usage.external) ? Number(usage.external) : fallback.external,
-    arrayBuffers: Number.isFinite(usage.arrayBuffers) ? Number(usage.arrayBuffers) : fallback.arrayBuffers
-  };
-}
-
-function readLiveProcessCpuUsage(prev) {
-  const usage = _processCpuUsage.applySyncPromise(void 0, [prev ?? null]);
-  if (usage && typeof usage === "object") {
-    return {
-      user: Number.isFinite(usage.user) ? Number(usage.user) : 1e6,
-      system: Number.isFinite(usage.system) ? Number(usage.system) : 5e5
-    };
-  }
-  const fallback = {
-    user: 1e6,
-    system: 5e5
-  };
-  if (prev && typeof prev === "object") {
-    return {
-      user: fallback.user - Number(prev.user || 0),
-      system: fallback.system - Number(prev.system || 0)
-    };
-  }
-  return fallback;
-}
-
-function defaultProcessResourceUsage() {
-  return {
-    userCPUTime: 1e6,
-    systemCPUTime: 5e5,
-    maxRSS: 50 * 1024,
-    sharedMemorySize: 0,
-    unsharedDataSize: 0,
-    unsharedStackSize: 0,
-    minorPageFault: 0,
-    majorPageFault: 0,
-    swappedOut: 0,
-    fsRead: 0,
-    fsWrite: 0,
-    ipcSent: 0,
-    ipcReceived: 0,
-    signalsCount: 0,
-    voluntaryContextSwitches: 0,
-    involuntaryContextSwitches: 0
-  };
-}
-
-function readLiveProcessResourceUsage() {
-  const fallback = defaultProcessResourceUsage();
-  const usage = _processResourceUsage.applySyncPromise(void 0, []);
-  if (!usage || typeof usage !== "object") {
-    return fallback;
-  }
-  return {
-    userCPUTime: Number.isFinite(usage.userCPUTime) ? Number(usage.userCPUTime) : fallback.userCPUTime,
-    systemCPUTime: Number.isFinite(usage.systemCPUTime) ? Number(usage.systemCPUTime) : fallback.systemCPUTime,
-    maxRSS: Number.isFinite(usage.maxRSS) ? Number(usage.maxRSS) : fallback.maxRSS,
-    sharedMemorySize: Number.isFinite(usage.sharedMemorySize) ? Number(usage.sharedMemorySize) : fallback.sharedMemorySize,
-    unsharedDataSize: Number.isFinite(usage.unsharedDataSize) ? Number(usage.unsharedDataSize) : fallback.unsharedDataSize,
-    unsharedStackSize: Number.isFinite(usage.unsharedStackSize) ? Number(usage.unsharedStackSize) : fallback.unsharedStackSize,
-    minorPageFault: Number.isFinite(usage.minorPageFault) ? Number(usage.minorPageFault) : fallback.minorPageFault,
-    majorPageFault: Number.isFinite(usage.majorPageFault) ? Number(usage.majorPageFault) : fallback.majorPageFault,
-    swappedOut: Number.isFinite(usage.swappedOut) ? Number(usage.swappedOut) : fallback.swappedOut,
-    fsRead: Number.isFinite(usage.fsRead) ? Number(usage.fsRead) : fallback.fsRead,
-    fsWrite: Number.isFinite(usage.fsWrite) ? Number(usage.fsWrite) : fallback.fsWrite,
-    ipcSent: Number.isFinite(usage.ipcSent) ? Number(usage.ipcSent) : fallback.ipcSent,
-    ipcReceived: Number.isFinite(usage.ipcReceived) ? Number(usage.ipcReceived) : fallback.ipcReceived,
-    signalsCount: Number.isFinite(usage.signalsCount) ? Number(usage.signalsCount) : fallback.signalsCount,
-    voluntaryContextSwitches: Number.isFinite(usage.voluntaryContextSwitches) ? Number(usage.voluntaryContextSwitches) : fallback.voluntaryContextSwitches,
-    involuntaryContextSwitches: Number.isFinite(usage.involuntaryContextSwitches) ? Number(usage.involuntaryContextSwitches) : fallback.involuntaryContextSwitches
-  };
-}
-
-function readLiveProcessVersions() {
-  _processVersionsCache.node = config2.version.replace(/^v/, "");
-  const versions = _processVersions.applySyncPromise(void 0, []);
-  if (versions && typeof versions === "object") {
-    Object.assign(_processVersionsCache, versions);
-    _processVersionsCache.node = config2.version.replace(/^v/, "");
-  }
-  return _processVersionsCache;
-}
-
-var process2 = {
-  // Static properties
-  platform: config2.platform,
-  arch: config2.arch,
-  version: config2.version,
-  get versions() {
-    return readLiveProcessVersions();
-  },
-  pid: config2.pid,
-  ppid: config2.ppid,
-  execPath: config2.execPath,
-  execArgv: [],
-  argv: config2.argv,
-  argv0: config2.argv[0] || "node",
-  title: "node",
-  env: config2.env,
-  // Config stubs
-  config: {
-    target_defaults: {
-      cflags: [],
-      default_configuration: "Release",
-      defines: [],
-      include_dirs: [],
-      libraries: []
-    },
-    variables: {
-      node_prefix: "/usr",
-      node_shared_libuv: false
-    }
-  },
-  release: {
-    name: "node",
-    sourceUrl: "https://nodejs.org/download/release/v20.0.0/node-v20.0.0.tar.gz",
-    headersUrl: "https://nodejs.org/download/release/v20.0.0/node-v20.0.0-headers.tar.gz"
-  },
-  // Feature flags
-  features: {
-    inspector: false,
-    debug: false,
-    uv: true,
-    ipv6: true,
-    tls_alpn: true,
-    tls_sni: true,
-    tls_ocsp: true,
-    tls: true
-  },
-  // Methods
-  cwd() {
-    return _cwd;
-  },
-  chdir(dir) {
-    let statJson;
-    try {
-      statJson = _fs.stat.applySyncPromise(void 0, [dir]);
-    } catch {
-      const err = new Error(`ENOENT: no such file or directory, chdir '${dir}'`);
-      err.code = "ENOENT";
-      err.errno = -2;
-      err.syscall = "chdir";
-      err.path = dir;
-      throw err;
-    }
-    const parsed = decodeBridgeJson(statJson);
-    if (!parsed.isDirectory) {
-      const err = new Error(`ENOTDIR: not a directory, chdir '${dir}'`);
-      err.code = "ENOTDIR";
-      err.errno = -20;
-      err.syscall = "chdir";
-      err.path = dir;
-      throw err;
-    }
-    _cwd = dir;
-  },
-  get exitCode() {
-    return _exitCode;
-  },
-  set exitCode(code) {
-    _exitCode = code == null ? void 0 : code;
-  },
-  exit(code) {
-    const exitCode = code !== void 0 ? code : _exitCode ?? 0;
-    _exitCode = exitCode;
-    _exited = true;
-    try {
-      _emit("exit", exitCode);
-    } catch (_e) {
-    }
-    throw new ProcessExitError(exitCode);
-  },
-  abort() {
-    return process2.kill(process2.pid, "SIGABRT");
-  },
-  nextTick(callback, ...args) {
-    const asyncLocalStorageSnapshot = snapshotAsyncLocalStorageStores();
-    _nextTickQueue.push({
-      callback: wrapAsyncLocalStorageCallback(callback, asyncLocalStorageSnapshot),
-      args
-    });
-    scheduleNextTickFlush();
-  },
-  hrtime,
-  getuid() {
-    return getRuntimeUid();
-  },
-  getgid() {
-    return getRuntimeGid();
-  },
-  geteuid() {
-    const value = globalThis.process?.euid;
-    return Number.isFinite(value) ? value : getRuntimeUid();
-  },
-  getegid() {
-    const value = globalThis.process?.egid;
-    return Number.isFinite(value) ? value : getRuntimeGid();
-  },
-  getgroups() {
-    return Array.isArray(globalThis.process?.groups) && globalThis.process.groups.length > 0 ? [...globalThis.process.groups] : [getRuntimeGid()];
-  },
-  setuid() {
-  },
-  setgid() {
-  },
-  seteuid() {
-  },
-  setegid() {
-  },
-  setgroups() {
-  },
-  umask(mask) {
-    const normalizedMask = mask === void 0 ? void 0 : normalizeModeArgument(mask, "mask");
-    const previousMask = Number(_processUmask.applySyncPromise(void 0, [normalizedMask ?? null]));
-    if (Number.isFinite(previousMask)) {
-      _umask = normalizedMask ?? previousMask;
-      return previousMask;
-    }
-    const oldMask = _umask;
-    if (normalizedMask !== void 0) {
-      _umask = normalizedMask;
-    }
-    return oldMask;
-  },
-  uptime() {
-    return (getNowMs() - _processStartTime) / 1e3;
-  },
-  memoryUsage() {
-    return readLiveProcessMemoryUsage();
-  },
-  cpuUsage(prev) {
-    return readLiveProcessCpuUsage(prev);
-  },
-  resourceUsage() {
-    return readLiveProcessResourceUsage();
-  },
-  kill(pid, signal) {
-    if (typeof pid !== "number" || !Number.isFinite(pid) || !Number.isInteger(pid)) {
-      throw new TypeError(`The "pid" argument must be an integer. Received ${String(pid)}`);
-    }
-    const sigNum = _resolveSignal(signal);
-    const sigName = _signalNamesByNumber[sigNum] ?? `SIG${sigNum}`;
-    if (typeof _processKill !== "undefined") {
-      let rawResult;
-      try {
-        rawResult = _processKill.applySyncPromise(void 0, [pid, sigName]);
-      } catch (error) {
-        throw _createProcessKillError(error);
-      }
-      let result = rawResult;
-      if (typeof result === "string") {
-        try {
-          result = JSON.parse(result);
-        } catch {
-          result = null;
-        }
-      }
-      if (result && typeof result === "object" && result.self === true) {
-        const action = typeof result.action === "string" ? result.action : "default";
-        return _deliverProcessSignal(sigNum, action);
-      }
-      return true;
-    }
-    if (pid !== process2.pid) {
-      const err = new Error("Operation not permitted");
-      err.code = "EPERM";
-      err.errno = -1;
-      err.syscall = "kill";
-      throw err;
-    }
-    return _deliverProcessSignal(sigNum, "default");
-  },
-  // EventEmitter methods
-  on(event, listener) {
-    return _addListener(event, listener);
-  },
-  once(event, listener) {
-    return _addListener(event, listener, true);
-  },
-  removeListener(event, listener) {
-    return _removeListener(event, listener);
-  },
-  // off is an alias for removeListener (assigned below to be same reference)
-  off: null,
-  removeAllListeners(event) {
-    if (event) {
-      delete _processListeners[event];
-      delete _processOnceListeners[event];
-      _syncGuestProcessSignalState(event);
-    } else {
-      Object.keys(_processListeners).forEach((k) => delete _processListeners[k]);
-      Object.keys(_processOnceListeners).forEach(
-        (k) => delete _processOnceListeners[k]
-      );
-      _syncAllGuestProcessSignalStates();
-    }
-    return process2;
-  },
-  addListener(event, listener) {
-    return _addListener(event, listener);
-  },
-  emit(event, ...args) {
-    return _emit(event, ...args);
-  },
-  listeners(event) {
-    return [
-      ..._processListeners[event] || [],
-      ..._processOnceListeners[event] || []
-    ];
-  },
-  listenerCount(event) {
-    return _listenerCountForEvent(event);
-  },
-  prependListener(event, listener) {
-    if (!_processListeners[event]) {
-      _processListeners[event] = [];
-    }
-    _processListeners[event].unshift(listener);
-    _syncGuestProcessSignalState(event);
-    return process2;
-  },
-  prependOnceListener(event, listener) {
-    if (!_processOnceListeners[event]) {
-      _processOnceListeners[event] = [];
-    }
-    _processOnceListeners[event].unshift(listener);
-    _syncGuestProcessSignalState(event);
-    return process2;
-  },
-  eventNames() {
-    return [
-      .../* @__PURE__ */ new Set([
-        ...Object.keys(_processListeners),
-        ...Object.keys(_processOnceListeners)
-      ])
-    ];
-  },
-  setMaxListeners(n) {
-    _processMaxListeners = n;
-    return process2;
-  },
-  getMaxListeners() {
-    return _processMaxListeners;
-  },
-  rawListeners(event) {
-    return process2.listeners(event);
-  },
-  // Stdio streams
-  stdout: _stdout,
-  stderr: _stderr,
-  stdin: _stdin,
-  // Process state
-  connected: config2.env?.AGENTOS_NODE_IPC === "1",
-  // Module info (will be set by createRequire)
-  mainModule: void 0,
-  // No-op methods for compatibility
-  emitWarning(warning) {
-    if (warning && typeof warning === "object") {
-      if (typeof warning.message !== "string") {
-        warning.message = String(warning.message ?? "");
-      }
-      if (typeof warning.name !== "string" || warning.name.length === 0) {
-        warning.name = "Warning";
-      }
-      _emit("warning", warning);
-      return;
-    }
-    _emit("warning", {
-      message: String(warning ?? ""),
-      name: "Warning"
-    });
-  },
-  binding(_name) {
-    const error = new Error("process.binding is not supported in sandbox");
-    error.code = "ERR_ACCESS_DENIED";
-    throw error;
-  },
-  _linkedBinding(_name) {
-    const error = new Error("process._linkedBinding is not supported in sandbox");
-    error.code = "ERR_ACCESS_DENIED";
-    throw error;
-  },
-  dlopen() {
-    throw new Error("process.dlopen is not supported");
-  },
-  hasUncaughtExceptionCaptureCallback() {
-    return false;
-  },
-  setUncaughtExceptionCaptureCallback() {
-  },
-  send(message, sendHandleOrOptions, optionsOrCallback, maybeCallback) {
-    const callback = typeof sendHandleOrOptions === "function" ? sendHandleOrOptions : typeof optionsOrCallback === "function" ? optionsOrCallback : maybeCallback;
-    if (!process2.connected) {
-      return false;
-    }
-    try {
-      process2.stdout.write(encodeChildProcessIpcFrame(message));
-      if (callback) {
-        queueMicrotask(() => callback(null));
-      }
-      return true;
-    } catch (error) {
-      if (callback) {
-        queueMicrotask(() => callback(error));
-        return false;
-      }
-      throw error;
-    }
-  },
-  disconnect() {
-    if (!process2.connected) {
-      return;
-    }
-    process2.connected = false;
-    if (process2._agentOSIpcHandleId && typeof _unregisterHandle === "function") {
-      _unregisterHandle(process2._agentOSIpcHandleId);
-      process2._agentOSIpcHandleId = null;
-    }
-    _emit("disconnect");
-  },
-  // Report
-  report: {
-    directory: "",
-    filename: "",
-    compact: false,
-    signal: "SIGUSR2",
-    reportOnFatalError: false,
-    reportOnSignal: false,
-    reportOnUncaughtException: false,
-    getReport() {
-      return {};
-    },
-    writeReport() {
-      return "";
-    }
-  },
-  // Debug port
-  debugPort: 9229,
-  // Internal state
-  _cwd: config2.cwd,
-  _umask: 18
-};
-
-function installProcessIpcBridge() {
-  const ipcEnabled = config2.env?.AGENTOS_NODE_IPC === "1" || globalThis.__agentOSProcessConfigEnv?.AGENTOS_NODE_IPC === "1";
-  if (!ipcEnabled || process2._agentOSIpcInstalled) {
-    return;
-  }
-  process2._agentOSIpcInstalled = true;
-  process2.connected = true;
-  if (!process2._agentOSIpcHandleId && typeof _registerHandle === "function") {
-    process2._agentOSIpcHandleId = `process-ipc:${process2.pid}`;
-    _registerHandle(process2._agentOSIpcHandleId, "child_process IPC channel");
-  }
-  let ipcInputBuffer = "";
-  process2.stdin.on("data", (chunk) => {
-    const parsed = splitChildProcessIpcFrames(ipcInputBuffer, chunk);
-    ipcInputBuffer = parsed.buffer;
-    for (const message of parsed.messages) {
-      _emit("message", message, void 0);
-    }
-  });
-}
-
-function applyProcessConfig(nextConfig) {
-  syncLiveStdinHandle(false);
-  resetLiveStdinState(new TextDecoder());
-  for (const key of Object.keys(_stdinListeners)) {
-    _stdinListeners[key] = [];
-  }
-  for (const key of Object.keys(_stdinOnceListeners)) {
-    _stdinOnceListeners[key] = [];
-  }
-  setStdinDataValue(nextConfig.stdin ?? "");
-  setStdinPosition(0);
-  setStdinEnded(false);
-  setStdinFlowMode(false);
-  config2 = nextConfig;
-  _cwd = nextConfig.cwd;
-  process2.platform = nextConfig.platform;
-  process2.arch = nextConfig.arch;
-  process2.version = nextConfig.version;
-  process2.pid = nextConfig.pid;
-  process2.ppid = nextConfig.ppid;
-  process2.execPath = nextConfig.execPath;
-  process2.argv = nextConfig.argv;
-  process2.argv0 = nextConfig.argv[0] || "node";
-  process2.env = nextConfig.env;
-  process2.connected = nextConfig.env?.AGENTOS_NODE_IPC === "1";
-  process2._cwd = nextConfig.cwd;
-  process2.stdin.paused = true;
-  process2.stdin.encoding = null;
-  process2.stdin.isRaw = false;
-  _processVersionsCache.node = nextConfig.version.replace(/^v/, "");
-}
-
-exposeCustomGlobal("__runtimeRefreshProcessConfig", () => {
-  applyProcessConfig(readProcessConfig());
-});
-
-process2.off = process2.removeListener;
-
-exposeCustomGlobal("__runtimeInstallProcessIpcBridge", installProcessIpcBridge);
-
-installProcessIpcBridge();
-
-process2.memoryUsage.rss = function() {
-  return readLiveProcessMemoryUsage().rss;
-};
-
-Object.defineProperty(process2, Symbol.toStringTag, {
-  value: "process",
-  writable: false,
-  configurable: true,
-  enumerable: false
-});
-
-var process_default = process2;
-
-function encodeFilePathSegment(value) {
-  return encodeURIComponent(String(value)).replace(/%2F/g, "/");
-}
-
-function pathToFileURL2(filePath) {
-  const normalized = builtinPathStdlibModule.posix.resolve(String(filePath || "/"));
-  const pathname = encodeFilePathSegment(normalized);
-  return new URL2(`file://${pathname.startsWith("/") ? pathname : `/${pathname}`}`);
-}
-
-function fileURLToPath2(input) {
-  const href = input instanceof URL2 ? input.href : String(input ?? "");
-  if (!href.startsWith("file:")) {
-    throw new TypeError("The URL must be of scheme file");
-  }
-  let pathname = href.slice("file:".length);
-  if (pathname.startsWith("//")) {
-    const authorityMatch = /^\/\/[^/]*(.*)$/.exec(pathname);
-    pathname = authorityMatch?.[1] || "/";
-  }
-  pathname = pathname.split(/[?#]/, 1)[0] || "/";
-  pathname = decodeURIComponent(pathname);
-  if (!pathname.startsWith("/")) {
-    pathname = `/${pathname}`;
-  }
-  return pathname;
-}
-
-function setupGlobals() {
-  const g = globalThis;
-  g.process = process2;
-  g.setTimeout = setTimeout2;
-  g.clearTimeout = clearTimeout2;
-  g.setInterval = setInterval;
-  g.clearInterval = clearInterval;
-  g.setImmediate = setImmediate;
-  g.clearImmediate = clearImmediate;
-  const nativeQueueMicrotask = typeof g.queueMicrotask === "function" ? g.queueMicrotask.bind(g) : _queueMicrotask;
-  g.queueMicrotask = (callback) => {
-    const asyncLocalStorageSnapshot = snapshotAsyncLocalStorageStores();
-    return nativeQueueMicrotask(() =>
-      runWithAsyncLocalStorageSnapshot(
-        asyncLocalStorageSnapshot,
-        callback,
-        g,
-        []
-      )
-    );
-  };
-  installWhatwgUrlGlobals(g);
-  g.TextEncoder = TextEncoder2;
-  g.TextDecoder = TextDecoder;
-  g.Event = Event;
-  g.CustomEvent = CustomEvent;
-  g.EventTarget = EventTarget;
-  if (typeof g.Buffer === "undefined") {
-    g.Buffer = Buffer3;
-  }
-  const globalBuffer = g.Buffer;
-  if (typeof globalBuffer.kMaxLength !== "number") {
-    globalBuffer.kMaxLength = BUFFER_MAX_LENGTH;
-  }
-  if (typeof globalBuffer.kStringMaxLength !== "number") {
-    globalBuffer.kStringMaxLength = BUFFER_MAX_STRING_LENGTH;
-  }
-  if (typeof globalBuffer.constants !== "object" || globalBuffer.constants === null) {
-    globalBuffer.constants = BUFFER_CONSTANTS;
-  }
-  const builtinUtilModule = globalThis.__secureExecBuiltinUtilModule;
-  if (builtinUtilModule?.types) {
-    builtinUtilModule.types.isProxy = () => false;
-  }
-  installBuiltinUtilFormatWithOptions(builtinUtilModule);
-  if (typeof g.atob === "undefined" || typeof g.btoa === "undefined") {
-    const base64 = require_base64_js();
-    if (typeof g.atob === "undefined") {
-      g.atob = (value) => {
-        const bytes = base64.toByteArray(String(value));
-        let decoded = "";
-        for (const byte of bytes) {
-          decoded += String.fromCharCode(byte);
-        }
-        return decoded;
-      };
-    }
-    if (typeof g.btoa === "undefined") {
-      g.btoa = (value) => {
-        const input = String(value);
-        const bytes = new Uint8Array(input.length);
-        for (let index = 0; index < input.length; index += 1) {
-          const code = input.charCodeAt(index);
-          if (code > 255) {
-            throw new TypeError("Invalid character");
-          }
-          bytes[index] = code;
-        }
-        return base64.fromByteArray(bytes);
-      };
-    }
-  }
-  if (typeof g.Crypto === "undefined") {
-    g.Crypto = SandboxCrypto;
-  }
-  if (typeof g.SubtleCrypto === "undefined") {
-    g.SubtleCrypto = SandboxSubtleCrypto;
-  }
-  if (typeof g.CryptoKey === "undefined") {
-    g.CryptoKey = SandboxCryptoKey;
-  }
-  if (typeof g.DOMException === "undefined") {
-    g.DOMException = SandboxDOMException;
-  }
-  if (typeof g.crypto === "undefined") {
-    g.crypto = builtinCryptoModule;
-  } else {
-    const cryptoObj = g.crypto;
-    for (const [name, value] of Object.entries(builtinCryptoModule)) {
-      if (typeof cryptoObj[name] === "undefined") {
-        cryptoObj[name] = value;
-      }
-    }
-  }
-  g.fetch = fetch;
-  g.Headers = UndiciHeaders;
-  g.Request = UndiciRequest;
-  g.Response = UndiciResponse;
-  installSafeIntlFormatters(g);
-}
-export { ProcessExitError, _addListener, _createProcessKillError, _cwd, _deliverProcessSignal, _emit, _exitCode, _exited, _getStdinIsTTY, _ignoredSelfSignals, _isTrackedProcessSignalEventName, _listenerCountForEvent, _processKillErrnoByCode, _processListeners, _processMaxListeners, _processMaxListenersWarned, _processOnceListeners, _processStartTime, _processVersionsCache, _removeListener, _resolveSignal, _signalNamesByNumber, _signalNumbers, _syncAllGuestProcessSignalStates, _syncGuestProcessSignalState, _trackedProcessSignalEvents, _umask, applyProcessConfig, config2, defaultProcessMemoryUsage, defaultProcessResourceUsage, dispatchCustomEmitterListeners, encodeFilePathSegment, fileURLToPath2, getNowMs, hrtime, installProcessIpcBridge, isProcessExitError, normalizeAsyncError, pathToFileURL2, process2, processClockNow, process_default, readLiveProcessCpuUsage, readLiveProcessMemoryUsage, readLiveProcessResourceUsage, readLiveProcessVersions, readProcessConfig, routeAsyncCallbackError, scheduleAsyncRethrow, setupGlobals, signalDispatch };
diff --git a/packages/build-tools/bridge-src/builtins/sqlite.ts b/packages/build-tools/bridge-src/builtins/sqlite.ts
deleted file mode 100644
index 4261072e8..000000000
--- a/packages/build-tools/bridge-src/builtins/sqlite.ts
+++ /dev/null
@@ -1,314 +0,0 @@
-import { createBridgeSyncFacade } from "./fs.js";
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { dgramModule } from "./dgram.js";
-
-function isSqlitePlainObject(value) {
-  if (!value || typeof value !== "object" || Array.isArray(value)) {
-    return false;
-  }
-  if (Buffer.isBuffer(value) || value instanceof Uint8Array) {
-    return false;
-  }
-  const prototype = Object.getPrototypeOf(value);
-  return prototype === Object.prototype || prototype === null;
-}
-
-function encodeSqliteValue(value) {
-  if (value === null || value === void 0 || typeof value === "boolean" || typeof value === "number" || typeof value === "string") {
-    return value ?? null;
-  }
-  if (typeof value === "bigint") {
-    return {
-      __agentosSqliteType: "bigint",
-      value: value.toString()
-    };
-  }
-  if (Buffer.isBuffer(value) || value instanceof Uint8Array) {
-    return {
-      __agentosSqliteType: "uint8array",
-      value: Buffer.from(value).toString("base64")
-    };
-  }
-  if (Array.isArray(value)) {
-    return value.map((entry) => encodeSqliteValue(entry));
-  }
-  if (value && typeof value === "object") {
-    return Object.fromEntries(
-      Object.entries(value).map(([key, entry]) => [key, encodeSqliteValue(entry)])
-    );
-  }
-  return null;
-}
-
-function decodeSqliteValue(value) {
-  if (value === null || value === void 0 || typeof value === "boolean" || typeof value === "number" || typeof value === "string") {
-    return value ?? null;
-  }
-  if (Array.isArray(value)) {
-    return value.map((entry) => decodeSqliteValue(entry));
-  }
-  if (value && typeof value === "object") {
-    if (value.__agentosSqliteType === "bigint" && typeof value.value === "string") {
-      return BigInt(value.value);
-    }
-    if (value.__agentosSqliteType === "uint8array" && typeof value.value === "string") {
-      return Buffer.from(value.value, "base64");
-    }
-    return Object.fromEntries(
-      Object.entries(value).map(([key, entry]) => [key, decodeSqliteValue(entry)])
-    );
-  }
-  return value;
-}
-
-function normalizeSqliteParams(params) {
-  if (!Array.isArray(params) || params.length === 0) {
-    return null;
-  }
-  if (params.length === 1 && isSqlitePlainObject(params[0])) {
-    return encodeSqliteValue(params[0]);
-  }
-  return params.map((entry) => encodeSqliteValue(entry));
-}
-
-function sqliteBridgeCall(bridgeFn, args, label) {
-  if (typeof bridgeFn === "function") {
-    return decodeSqliteValue(bridgeFn(...args));
-  }
-  if (!bridgeFn) {
-    throw new Error(`sqlite bridge is not available for ${label}`);
-  }
-  if (typeof bridgeFn.applySync === "function") {
-    return decodeSqliteValue(bridgeFn.applySync(void 0, args));
-  }
-  if (typeof bridgeFn.applySyncPromise === "function") {
-    return decodeSqliteValue(bridgeFn.applySyncPromise(void 0, args));
-  }
-  throw new Error(`sqlite bridge is not available for ${label}`);
-}
-
-var _sqliteConstants = createBridgeSyncFacade("_sqliteConstantsRaw");
-
-var _sqliteDatabaseOpen = createBridgeSyncFacade("_sqliteDatabaseOpenRaw");
-
-var _sqliteDatabaseClose = createBridgeSyncFacade("_sqliteDatabaseCloseRaw");
-
-var _sqliteDatabaseExec = createBridgeSyncFacade("_sqliteDatabaseExecRaw");
-
-var _sqliteDatabaseQuery = createBridgeSyncFacade("_sqliteDatabaseQueryRaw");
-
-var _sqliteDatabasePrepare = createBridgeSyncFacade("_sqliteDatabasePrepareRaw");
-
-var _sqliteDatabaseLocation = createBridgeSyncFacade("_sqliteDatabaseLocationRaw");
-
-var _sqliteDatabaseCheckpoint = createBridgeSyncFacade("_sqliteDatabaseCheckpointRaw");
-
-var _sqliteStatementRun = createBridgeSyncFacade("_sqliteStatementRunRaw");
-
-var _sqliteStatementGet = createBridgeSyncFacade("_sqliteStatementGetRaw");
-
-var _sqliteStatementAll = createBridgeSyncFacade("_sqliteStatementAllRaw");
-
-var _sqliteStatementColumns = createBridgeSyncFacade("_sqliteStatementColumnsRaw");
-
-var _sqliteStatementSetReturnArrays = createBridgeSyncFacade("_sqliteStatementSetReturnArraysRaw");
-
-var _sqliteStatementSetReadBigInts = createBridgeSyncFacade("_sqliteStatementSetReadBigIntsRaw");
-
-var _sqliteStatementSetAllowBareNamedParameters = createBridgeSyncFacade("_sqliteStatementSetAllowBareNamedParametersRaw");
-
-var _sqliteStatementSetAllowUnknownNamedParameters = createBridgeSyncFacade("_sqliteStatementSetAllowUnknownNamedParametersRaw");
-
-var _sqliteStatementFinalize = createBridgeSyncFacade("_sqliteStatementFinalizeRaw");
-
-var StatementSync = class {
-  constructor(database, statementId) {
-    this._database = database;
-    this._statementId = statementId;
-    this._finalized = false;
-  }
-  _assertOpen() {
-    this._database._assertOpen();
-    if (this._finalized) {
-      throw new Error("SQLite statement is already finalized");
-    }
-  }
-  run(...params) {
-    this._assertOpen();
-    return sqliteBridgeCall(
-      _sqliteStatementRun,
-      [this._statementId, normalizeSqliteParams(params)],
-      "statement.run"
-    );
-  }
-  get(...params) {
-    this._assertOpen();
-    return sqliteBridgeCall(
-      _sqliteStatementGet,
-      [this._statementId, normalizeSqliteParams(params)],
-      "statement.get"
-    );
-  }
-  all(...params) {
-    this._assertOpen();
-    return sqliteBridgeCall(
-      _sqliteStatementAll,
-      [this._statementId, normalizeSqliteParams(params)],
-      "statement.all"
-    );
-  }
-  iterate(...params) {
-    const rows = this.all(...params);
-    return rows[Symbol.iterator]();
-  }
-  columns() {
-    this._assertOpen();
-    return sqliteBridgeCall(
-      _sqliteStatementColumns,
-      [this._statementId],
-      "statement.columns"
-    );
-  }
-  setReturnArrays(enabled) {
-    this._assertOpen();
-    sqliteBridgeCall(
-      _sqliteStatementSetReturnArrays,
-      [this._statementId, Boolean(enabled)],
-      "statement.setReturnArrays"
-    );
-  }
-  setReadBigInts(enabled) {
-    this._assertOpen();
-    sqliteBridgeCall(
-      _sqliteStatementSetReadBigInts,
-      [this._statementId, Boolean(enabled)],
-      "statement.setReadBigInts"
-    );
-  }
-  setAllowBareNamedParameters(enabled) {
-    this._assertOpen();
-    sqliteBridgeCall(
-      _sqliteStatementSetAllowBareNamedParameters,
-      [this._statementId, Boolean(enabled)],
-      "statement.setAllowBareNamedParameters"
-    );
-  }
-  setAllowUnknownNamedParameters(enabled) {
-    this._assertOpen();
-    sqliteBridgeCall(
-      _sqliteStatementSetAllowUnknownNamedParameters,
-      [this._statementId, Boolean(enabled)],
-      "statement.setAllowUnknownNamedParameters"
-    );
-  }
-  finalize() {
-    if (this._finalized) {
-      return null;
-    }
-    this._database._assertOpen();
-    sqliteBridgeCall(
-      _sqliteStatementFinalize,
-      [this._statementId],
-      "statement.finalize"
-    );
-    this._finalized = true;
-    return null;
-  }
-};
-
-var DatabaseSync = class {
-  constructor(location = ":memory:", options = void 0) {
-    this._closed = false;
-    this._databaseId = sqliteBridgeCall(
-      _sqliteDatabaseOpen,
-      [typeof location === "string" ? location : ":memory:", options ?? null],
-      "database.open"
-    );
-  }
-  _assertOpen() {
-    if (this._closed) {
-      throw new Error("SQLite database is already closed");
-    }
-  }
-  close() {
-    if (this._closed) {
-      return null;
-    }
-    sqliteBridgeCall(
-      _sqliteDatabaseClose,
-      [this._databaseId],
-      "database.close"
-    );
-    this._closed = true;
-    return null;
-  }
-  exec(sql) {
-    this._assertOpen();
-    return sqliteBridgeCall(
-      _sqliteDatabaseExec,
-      [this._databaseId, String(sql ?? "")],
-      "database.exec"
-    );
-  }
-  query(sql, params = null, options = null) {
-    this._assertOpen();
-    const normalized = params === null ? null : normalizeSqliteParams(Array.isArray(params) ? params : [params]);
-    return sqliteBridgeCall(
-      _sqliteDatabaseQuery,
-      [this._databaseId, String(sql ?? ""), normalized, options ?? null],
-      "database.query"
-    );
-  }
-  prepare(sql) {
-    this._assertOpen();
-    const statementId = sqliteBridgeCall(
-      _sqliteDatabasePrepare,
-      [this._databaseId, String(sql ?? "")],
-      "database.prepare"
-    );
-    return new StatementSync(this, statementId);
-  }
-  location() {
-    this._assertOpen();
-    return sqliteBridgeCall(
-      _sqliteDatabaseLocation,
-      [this._databaseId],
-      "database.location"
-    );
-  }
-  checkpoint() {
-    this._assertOpen();
-    return sqliteBridgeCall(
-      _sqliteDatabaseCheckpoint,
-      [this._databaseId],
-      "database.checkpoint"
-    );
-  }
-};
-
-DatabaseSync.prototype[Symbol.dispose] = DatabaseSync.prototype.close;
-
-StatementSync.prototype[Symbol.dispose] = StatementSync.prototype.finalize;
-
-var sqliteConstants;
-
-function getSqliteConstants() {
-  if (sqliteConstants === void 0) {
-    sqliteConstants = Object.freeze(
-      sqliteBridgeCall(_sqliteConstants, [], "constants") ?? {}
-    );
-  }
-  return sqliteConstants;
-}
-
-var sqliteModule = {
-  DatabaseSync,
-  StatementSync,
-  get constants() {
-    return getSqliteConstants();
-  }
-};
-
-exposeCustomGlobal("_dgramModule", dgramModule);
-exposeCustomGlobal("_sqliteModule", sqliteModule);
-export { DatabaseSync, StatementSync, _sqliteConstants, _sqliteDatabaseCheckpoint, _sqliteDatabaseClose, _sqliteDatabaseExec, _sqliteDatabaseLocation, _sqliteDatabaseOpen, _sqliteDatabasePrepare, _sqliteDatabaseQuery, _sqliteStatementAll, _sqliteStatementColumns, _sqliteStatementFinalize, _sqliteStatementGet, _sqliteStatementRun, _sqliteStatementSetAllowBareNamedParameters, _sqliteStatementSetAllowUnknownNamedParameters, _sqliteStatementSetReadBigInts, _sqliteStatementSetReturnArrays, decodeSqliteValue, encodeSqliteValue, getSqliteConstants, isSqlitePlainObject, normalizeSqliteParams, sqliteBridgeCall, sqliteConstants, sqliteModule };
diff --git a/packages/build-tools/bridge-src/builtins/stdin.ts b/packages/build-tools/bridge-src/builtins/stdin.ts
deleted file mode 100644
index 88ee666d2..000000000
--- a/packages/build-tools/bridge-src/builtins/stdin.ts
+++ /dev/null
@@ -1,439 +0,0 @@
-import { once } from "./events.js";
-import { exposeMutableRuntimeStateGlobal } from "../global-exposure.js";
-import { TextDecoder } from "../polyfills/index.js";
-import { import_buffer2 } from "./buffer-runtime.js";
-import { _getStdinIsTTY, isProcessExitError, routeAsyncCallbackError, scheduleAsyncRethrow } from "./process.js";
-
-var _stdinListeners = {};
-
-var _stdinOnceListeners = {};
-
-var _stdinLiveDecoder = new TextDecoder();
-
-var STDIN_HANDLE_ID = "process.stdin";
-
-var _stdinLiveBuffer = "";
-
-var _stdinLiveStarted = false;
-
-var _stdinLiveHandleRegistered = false;
-
-var _stdinLiveTerminalEventsScheduled = false;
-
-var _stdinLiveTerminalEventsEmitted = false;
-
-exposeMutableRuntimeStateGlobal(
-  "_stdinData",
-  typeof _processConfig !== "undefined" && _processConfig.stdin || ""
-);
-
-exposeMutableRuntimeStateGlobal("_stdinPosition", 0);
-
-exposeMutableRuntimeStateGlobal("_stdinEnded", false);
-
-exposeMutableRuntimeStateGlobal("_stdinFlowMode", false);
-
-function getStdinData() {
-  return globalThis._stdinData;
-}
-
-function setStdinDataValue(v) {
-  globalThis._stdinData = v;
-}
-
-function getStdinPosition() {
-  return globalThis._stdinPosition;
-}
-
-function setStdinPosition(v) {
-  globalThis._stdinPosition = v;
-}
-
-function getStdinEnded() {
-  return globalThis._stdinEnded;
-}
-
-function setStdinEnded(v) {
-  globalThis._stdinEnded = v;
-}
-
-function getStdinFlowMode() {
-  return globalThis._stdinFlowMode;
-}
-
-function setStdinFlowMode(v) {
-  globalThis._stdinFlowMode = v;
-}
-
-function resetLiveStdinState(decoder) {
-  _stdinLiveBuffer = "";
-  _stdinLiveStarted = false;
-  _stdinLiveDecoder = decoder;
-  _stdinLiveTerminalEventsScheduled = false;
-  _stdinLiveTerminalEventsEmitted = false;
-}
-
-function _emitStdinData() {
-  if (getStdinEnded() || !getStdinData()) return;
-  if (getStdinFlowMode() && getStdinPosition() < getStdinData().length) {
-    const chunk = getStdinData().slice(getStdinPosition());
-    setStdinPosition(getStdinData().length);
-    const dataListeners = [..._stdinListeners["data"] || [], ..._stdinOnceListeners["data"] || []];
-    _stdinOnceListeners["data"] = [];
-    for (const listener of dataListeners) {
-      listener(chunk);
-    }
-    setStdinEnded(true);
-    const endListeners = [..._stdinListeners["end"] || [], ..._stdinOnceListeners["end"] || []];
-    _stdinOnceListeners["end"] = [];
-    for (const listener of endListeners) {
-      listener();
-    }
-    const closeListeners = [..._stdinListeners["close"] || [], ..._stdinOnceListeners["close"] || []];
-    _stdinOnceListeners["close"] = [];
-    for (const listener of closeListeners) {
-      listener();
-    }
-  }
-}
-
-function emitStdinListeners(event, value) {
-  const listeners = [..._stdinListeners[event] || [], ..._stdinOnceListeners[event] || []];
-  _stdinOnceListeners[event] = [];
-  for (const listener of listeners) {
-    try {
-      listener(value);
-    } catch (error) {
-      const outcome = routeAsyncCallbackError(error);
-      if (!outcome.handled && outcome.rethrow !== null) {
-        if (isProcessExitError(outcome.rethrow)) {
-          scheduleAsyncRethrow(outcome.rethrow);
-          return true;
-        }
-        throw outcome.rethrow;
-      }
-      return true;
-    }
-  }
-  return listeners.length > 0;
-}
-
-function syncLiveStdinHandle(active) {
-  if (active) {
-    if (!_stdinLiveHandleRegistered && typeof _registerHandle === "function") {
-      try {
-        _registerHandle(STDIN_HANDLE_ID, "process.stdin");
-        _stdinLiveHandleRegistered = true;
-      } catch {
-      }
-    }
-    return;
-  }
-  if (_stdinLiveHandleRegistered && typeof _unregisterHandle === "function") {
-    try {
-      _unregisterHandle(STDIN_HANDLE_ID);
-    } catch {
-    }
-    _stdinLiveHandleRegistered = false;
-  }
-}
-
-function flushLiveStdinBuffer() {
-  if (!getStdinFlowMode() || _stdinLiveBuffer.length === 0) return;
-  const chunk = _stdinLiveBuffer;
-  _stdinLiveBuffer = "";
-  const data = _stdin.encoding ? chunk : import_buffer2.Buffer.from(chunk);
-  emitStdinListeners("data", data);
-  maybeEmitLiveStdinTerminalEvents();
-}
-
-function maybeEmitLiveStdinTerminalEvents() {
-  if (!getStdinEnded() || _stdinLiveTerminalEventsEmitted || _stdinLiveBuffer.length > 0) {
-    return;
-  }
-  if (_stdinLiveTerminalEventsScheduled) {
-    return;
-  }
-  _stdinLiveTerminalEventsScheduled = true;
-  queueMicrotask(() => {
-    _stdinLiveTerminalEventsScheduled = false;
-    if (!getStdinEnded() || _stdinLiveTerminalEventsEmitted || _stdinLiveBuffer.length > 0) {
-      return;
-    }
-    _stdinLiveTerminalEventsEmitted = true;
-    emitStdinListeners("end");
-    emitStdinListeners("close");
-    syncLiveStdinHandle(false);
-  });
-}
-
-function finishLiveStdin() {
-  if (getStdinEnded()) return;
-  setStdinEnded(true);
-  flushLiveStdinBuffer();
-  maybeEmitLiveStdinTerminalEvents();
-}
-
-function _getStreamStdin() {
-  return typeof __runtimeStreamStdin !== "undefined" && !!__runtimeStreamStdin;
-}
-
-function ensureLiveStdinStarted() {
-  if (_stdinLiveStarted) return;
-  if (!_getStdinIsTTY() && !_getStreamStdin()) return;
-  _stdinLiveStarted = true;
-  syncLiveStdinHandle(!_stdin.paused);
-  if (_getStreamStdin()) {
-    return;
-  }
-  if (typeof _kernelStdinRead === "undefined") return;
-  void (async () => {
-    try {
-      while (!getStdinEnded()) {
-        if (typeof _kernelStdinRead === "undefined") {
-          break;
-        }
-        const next = await _kernelStdinRead.apply(void 0, [65536, 100], {
-          result: { promise: true }
-        });
-        if (next?.done) {
-          break;
-        }
-        const dataBase64 = String(next?.dataBase64 ?? "");
-        if (!dataBase64) {
-          continue;
-        }
-        _stdinLiveBuffer += _stdinLiveDecoder.decode(
-          import_buffer2.Buffer.from(dataBase64, "base64"),
-          { stream: true }
-        );
-        flushLiveStdinBuffer();
-      }
-    } catch {
-    }
-    _stdinLiveBuffer += _stdinLiveDecoder.decode();
-    finishLiveStdin();
-  })();
-}
-
-function stdinDispatch(eventType, payload) {
-  if (eventType === "stdin_end") {
-    finishLiveStdin();
-    return;
-  }
-  if (eventType !== "stdin" || getStdinEnded()) {
-    return;
-  }
-  let chunk;
-  let binary = false;
-  if (payload && typeof payload === "object" && typeof payload.dataBase64 === "string") {
-    const bytes = import_buffer2.Buffer.from(payload.dataBase64, "base64");
-    if (bytes.length === 0) {
-      return;
-    }
-    if (!_stdin.encoding && getStdinFlowMode()) {
-      emitStdinListeners("data", bytes);
-      maybeEmitLiveStdinTerminalEvents();
-      return;
-    }
-    chunk = _stdin.encoding ? bytes.toString(_stdin.encoding) : bytes.toString("latin1");
-    binary = !_stdin.encoding;
-  } else {
-    chunk = typeof payload === "string" ? payload : payload == null ? "" : import_buffer2.Buffer.from(payload).toString("utf8");
-  }
-  if (!chunk) {
-    return;
-  }
-  _stdinLiveBuffer += chunk;
-  if (binary && !_stdin.encoding && getStdinFlowMode()) {
-    const buffered = _stdinLiveBuffer;
-    _stdinLiveBuffer = "";
-    emitStdinListeners("data", import_buffer2.Buffer.from(buffered, "latin1"));
-    maybeEmitLiveStdinTerminalEvents();
-    return;
-  }
-  flushLiveStdinBuffer();
-}
-
-var _stdin = {
-  readable: true,
-  paused: true,
-  encoding: null,
-  isRaw: false,
-  read(size) {
-    if (_stdinLiveBuffer.length > 0) {
-      if (!size || size >= _stdinLiveBuffer.length) {
-        const chunk3 = _stdinLiveBuffer;
-        _stdinLiveBuffer = "";
-        return chunk3;
-      }
-      const chunk2 = _stdinLiveBuffer.slice(0, size);
-      _stdinLiveBuffer = _stdinLiveBuffer.slice(size);
-      return chunk2;
-    }
-    if (getStdinPosition() >= getStdinData().length) return null;
-    const chunk = size ? getStdinData().slice(getStdinPosition(), getStdinPosition() + size) : getStdinData().slice(getStdinPosition());
-    setStdinPosition(getStdinPosition() + chunk.length);
-    return chunk;
-  },
-  on(event, listener) {
-    if (!_stdinListeners[event]) _stdinListeners[event] = [];
-    _stdinListeners[event].push(listener);
-    if ((_getStdinIsTTY() || _getStreamStdin()) && (event === "data" || event === "end" || event === "close")) {
-      ensureLiveStdinStarted();
-    }
-    if (event === "data" && this.paused) {
-      this.resume();
-    }
-    if ((event === "end" || event === "close") && (_getStdinIsTTY() || _getStreamStdin())) {
-      maybeEmitLiveStdinTerminalEvents();
-    }
-    if (event === "end" && getStdinData() && !getStdinEnded()) {
-      setStdinFlowMode(true);
-      _emitStdinData();
-    }
-    return this;
-  },
-  once(event, listener) {
-    if (!_stdinOnceListeners[event]) _stdinOnceListeners[event] = [];
-    _stdinOnceListeners[event].push(listener);
-    if ((_getStdinIsTTY() || _getStreamStdin()) && (event === "data" || event === "end" || event === "close")) {
-      ensureLiveStdinStarted();
-    }
-    if (event === "data" && this.paused) {
-      this.resume();
-    }
-    if ((event === "end" || event === "close") && (_getStdinIsTTY() || _getStreamStdin())) {
-      maybeEmitLiveStdinTerminalEvents();
-    }
-    if (event === "end" && getStdinData() && !getStdinEnded()) {
-      setStdinFlowMode(true);
-      _emitStdinData();
-    }
-    return this;
-  },
-  off(event, listener) {
-    if (_stdinListeners[event]) {
-      const idx = _stdinListeners[event].indexOf(listener);
-      if (idx !== -1) _stdinListeners[event].splice(idx, 1);
-    }
-    return this;
-  },
-  removeListener(event, listener) {
-    return this.off(event, listener);
-  },
-  emit(event, ...args) {
-    const listeners = [..._stdinListeners[event] || [], ..._stdinOnceListeners[event] || []];
-    _stdinOnceListeners[event] = [];
-    for (const listener of listeners) {
-      listener(args[0]);
-    }
-    return listeners.length > 0;
-  },
-  pause() {
-    this.paused = true;
-    setStdinFlowMode(false);
-    syncLiveStdinHandle(false);
-    return this;
-  },
-  resume() {
-    if (_getStdinIsTTY() || _getStreamStdin()) {
-      ensureLiveStdinStarted();
-      syncLiveStdinHandle(true);
-    }
-    this.paused = false;
-    setStdinFlowMode(true);
-    flushLiveStdinBuffer();
-    _emitStdinData();
-    maybeEmitLiveStdinTerminalEvents();
-    return this;
-  },
-  setEncoding(enc) {
-    this.encoding = enc;
-    return this;
-  },
-  setRawMode(mode) {
-    if (!_getStdinIsTTY()) {
-      throw new Error("setRawMode is not supported when stdin is not a TTY");
-    }
-    if (typeof _ptySetRawMode !== "undefined") {
-      _ptySetRawMode.applySync(void 0, [mode]);
-    }
-    this.isRaw = mode;
-    return this;
-  },
-  get isTTY() {
-    return _getStdinIsTTY();
-  },
-  [Symbol.asyncIterator]: function() {
-    const stream = this;
-    const queuedChunks = [];
-    const pendingResolves = [];
-    let done = false;
-    let error = null;
-    const flush = () => {
-      while (pendingResolves.length > 0) {
-        if (error) {
-          pendingResolves.shift()(Promise.reject(error));
-          continue;
-        }
-        if (queuedChunks.length > 0) {
-          pendingResolves.shift()(Promise.resolve({ done: false, value: queuedChunks.shift() }));
-          continue;
-        }
-        if (done) {
-          pendingResolves.shift()(Promise.resolve({ done: true, value: void 0 }));
-          continue;
-        }
-        break;
-      }
-    };
-    const onData = (chunk) => {
-      queuedChunks.push(chunk);
-      flush();
-    };
-    const onEnd = () => {
-      done = true;
-      flush();
-    };
-    const onError = (reason) => {
-      error = reason;
-      done = true;
-      flush();
-    };
-    stream.on("end", onEnd);
-    stream.on("close", onEnd);
-    stream.on("error", onError);
-    stream.on("data", onData);
-    stream.resume();
-    return {
-      next() {
-        if (error) {
-          return Promise.reject(error);
-        }
-        if (queuedChunks.length > 0) {
-          return Promise.resolve({ done: false, value: queuedChunks.shift() });
-        }
-        if (done) {
-          return Promise.resolve({ done: true, value: void 0 });
-        }
-        return new Promise((resolve) => {
-          pendingResolves.push(resolve);
-        });
-      },
-      return() {
-        done = true;
-        stream.off?.("data", onData);
-        stream.off?.("end", onEnd);
-        stream.off?.("close", onEnd);
-        stream.off?.("error", onError);
-        flush();
-        return Promise.resolve({ done: true, value: void 0 });
-      },
-      [Symbol.asyncIterator]() {
-        return this;
-      }
-    };
-  }
-};
-export { STDIN_HANDLE_ID, _emitStdinData, _getStreamStdin, _stdin, _stdinListeners, _stdinLiveBuffer, _stdinLiveDecoder, _stdinLiveHandleRegistered, _stdinLiveStarted, _stdinLiveTerminalEventsEmitted, _stdinLiveTerminalEventsScheduled, _stdinOnceListeners, emitStdinListeners, ensureLiveStdinStarted, finishLiveStdin, flushLiveStdinBuffer, getStdinData, getStdinEnded, getStdinFlowMode, getStdinPosition, maybeEmitLiveStdinTerminalEvents, resetLiveStdinState, setStdinDataValue, setStdinEnded, setStdinFlowMode, setStdinPosition, stdinDispatch, syncLiveStdinHandle };
diff --git a/packages/build-tools/bridge-src/builtins/timers.ts b/packages/build-tools/bridge-src/builtins/timers.ts
deleted file mode 100644
index 350b94464..000000000
--- a/packages/build-tools/bridge-src/builtins/timers.ts
+++ /dev/null
@@ -1,569 +0,0 @@
-import { once } from "./events.js";
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { bridgeDispatchSync } from "../transport.js";
-import { _exited, isProcessExitError, routeAsyncCallbackError, scheduleAsyncRethrow } from "./process.js";
-
-var builtinTimersPromisesModule = {
-  scheduler: {
-    wait(delay = 0, options = void 0) {
-      return builtinTimersPromisesModule.setTimeout(delay, void 0, options);
-    },
-    yield() {
-      return builtinTimersPromisesModule.setImmediate();
-    }
-  },
-  setImmediate(value = void 0, options = void 0) {
-    if (options?.signal?.aborted) {
-      return Promise.reject(options.signal.reason ?? new Error("The operation was aborted"));
-    }
-    return new Promise((resolve, reject) => {
-      const onAbort = () => reject(options.signal.reason ?? new Error("The operation was aborted"));
-      options?.signal?.addEventListener?.("abort", onAbort, { once: true });
-      globalThis.setImmediate?.(() => {
-        options?.signal?.removeEventListener?.("abort", onAbort);
-        resolve(value);
-      }) ?? globalThis.setTimeout?.(() => {
-        options?.signal?.removeEventListener?.("abort", onAbort);
-        resolve(value);
-      }, 0);
-    });
-  },
-  setInterval(delay = 1, value = void 0, options = void 0) {
-    let active = true;
-    const signal = options?.signal;
-    if (signal?.aborted) {
-      active = false;
-    }
-    return {
-      [Symbol.asyncIterator]() {
-        return this;
-      },
-      async next() {
-        if (!active) {
-          return { done: true, value: void 0 };
-        }
-        try {
-          const intervalValue = await builtinTimersPromisesModule.setTimeout(delay, value, { signal });
-          return active ? { done: false, value: intervalValue } : { done: true, value: void 0 };
-        } catch (error) {
-          active = false;
-          throw error;
-        }
-      },
-      async return() {
-        active = false;
-        return { done: true, value: void 0 };
-      }
-    };
-  },
-  setTimeout(delay = 1, value = void 0, options = void 0) {
-    if (options?.signal?.aborted) {
-      return Promise.reject(options.signal.reason ?? new Error("The operation was aborted"));
-    }
-    return new Promise((resolve, reject) => {
-      const timer = globalThis.setTimeout?.(() => {
-        options?.signal?.removeEventListener?.("abort", onAbort);
-        resolve(value);
-      }, delay ?? 0);
-      const onAbort = () => {
-        if (typeof globalThis.clearTimeout === "function") {
-          globalThis.clearTimeout(timer);
-        }
-        reject(options.signal.reason ?? new Error("The operation was aborted"));
-      };
-      options?.signal?.addEventListener?.("abort", onAbort, { once: true });
-    });
-  }
-};
-
-var asyncLocalStorageInstances = /* @__PURE__ */ new Set();
-
-function snapshotAsyncLocalStorageStores() {
-  return Array.from(asyncLocalStorageInstances, (storage) => ({
-    storage,
-    hasStore: storage._hasStore === true,
-    store: storage._store
-  }));
-}
-
-function applyAsyncLocalStorageSnapshot(snapshot) {
-  for (const entry of snapshot) {
-    entry.storage._hasStore = entry.hasStore;
-    entry.storage._store = entry.store;
-  }
-}
-
-function runWithAsyncLocalStorageSnapshot(snapshot, callback, thisArg, args) {
-  if (typeof callback !== "function") {
-    return callback;
-  }
-  const previous = snapshotAsyncLocalStorageStores();
-  applyAsyncLocalStorageSnapshot(snapshot);
-  try {
-    return callback.apply(thisArg, args);
-  } finally {
-    applyAsyncLocalStorageSnapshot(previous);
-  }
-}
-
-function wrapAsyncLocalStorageCallback(callback, snapshot) {
-  if (typeof callback !== "function") {
-    return callback;
-  }
-  return function(...args) {
-    try {
-      return runWithAsyncLocalStorageSnapshot(snapshot, callback, this, args);
-    } catch (error) {
-      if (isProcessExitError(error)) {
-        throw error;
-      }
-      throw error;
-    }
-  };
-}
-
-var builtinAsyncHooksModule = {
-  AsyncLocalStorage: class {
-    constructor() {
-      this._hasStore = false;
-      this._store = void 0;
-      asyncLocalStorageInstances.add(this);
-    }
-    disable() {
-      this._hasStore = false;
-      this._store = void 0;
-    }
-    enterWith(store) {
-      this._hasStore = true;
-      this._store = store;
-    }
-    exit(callback, ...args) {
-      const previous = {
-        hasStore: this._hasStore,
-        store: this._store
-      };
-      this._hasStore = false;
-      this._store = void 0;
-      let restoreOnFinally = true;
-      try {
-        const result = callback(...args);
-        if (result && typeof result.then === "function") {
-          restoreOnFinally = false;
-          return Promise.resolve(result).finally(() => {
-            this._hasStore = previous.hasStore;
-            this._store = previous.store;
-          });
-        }
-        return result;
-      } finally {
-        if (restoreOnFinally) {
-          this._hasStore = previous.hasStore;
-          this._store = previous.store;
-        }
-      }
-    }
-    getStore() {
-      return this._hasStore ? this._store : void 0;
-    }
-    run(store, callback, ...args) {
-      const previous = {
-        hasStore: this._hasStore,
-        store: this._store
-      };
-      this._hasStore = true;
-      this._store = store;
-      let restoreOnFinally = true;
-      try {
-        const result = callback(...args);
-        if (result && typeof result.then === "function") {
-          restoreOnFinally = false;
-          return Promise.resolve(result).finally(() => {
-            this._hasStore = previous.hasStore;
-            this._store = previous.store;
-          });
-        }
-        return result;
-      } finally {
-        if (restoreOnFinally) {
-          this._hasStore = previous.hasStore;
-          this._store = previous.store;
-        }
-      }
-    }
-  },
-  AsyncResource: class {
-    constructor(type = "SecureExecAsyncResource") {
-      this.type = type;
-      this._asyncLocalStorageSnapshot = snapshotAsyncLocalStorageStores();
-    }
-    emitBefore() {
-    }
-    emitAfter() {
-    }
-    emitDestroy() {
-    }
-    asyncId() {
-      return 0;
-    }
-    triggerAsyncId() {
-      return 0;
-    }
-    runInAsyncScope(callback, thisArg, ...args) {
-      return runWithAsyncLocalStorageSnapshot(
-        this._asyncLocalStorageSnapshot,
-        callback,
-        thisArg,
-        args
-      );
-    }
-  },
-  createHook() {
-    return {
-      enable() {
-        return this;
-      },
-      disable() {
-        return this;
-      }
-    };
-  },
-  executionAsyncId() {
-    return 0;
-  },
-  triggerAsyncId() {
-    return 0;
-  }
-};
-
-if (!Promise.prototype.__agentOSAsyncLocalStoragePatched) {
-  const nativePromiseThen = Promise.prototype.then;
-  Promise.prototype.then = function(onFulfilled, onRejected) {
-    const snapshot = snapshotAsyncLocalStorageStores();
-    const wrappedRejected = typeof onRejected === "function" ? (error) => {
-      if (isProcessExitError(error)) {
-        throw error;
-      }
-      return onRejected(error);
-    } : onRejected;
-    return nativePromiseThen.call(
-      this,
-      wrapAsyncLocalStorageCallback(onFulfilled, snapshot),
-      wrapAsyncLocalStorageCallback(wrappedRejected, snapshot)
-    );
-  };
-  Object.defineProperty(Promise.prototype, "__agentOSAsyncLocalStoragePatched", {
-    value: true,
-    configurable: true
-  });
-}
-
-var TIMER_DISPATCH = {
-  create: "kernelTimerCreate",
-  arm: "kernelTimerArm",
-  clear: "kernelTimerClear"
-};
-
-exposeCustomGlobal("_asyncHooksModule", builtinAsyncHooksModule);
-
-var _queueMicrotask = typeof queueMicrotask === "function" ? queueMicrotask : function(fn) {
-  Promise.resolve().then(fn);
-};
-
-function normalizeTimerDelay(delay) {
-  const numericDelay = Number(delay ?? 0);
-  if (!Number.isFinite(numericDelay) || numericDelay <= 0) {
-    return 0;
-  }
-  return Math.floor(numericDelay);
-}
-
-function getTimerId(timer) {
-  if (timer && typeof timer === "object" && timer._id !== void 0) {
-    return timer._id;
-  }
-  if (typeof timer === "number") {
-    return timer;
-  }
-  return void 0;
-}
-
-function createKernelTimer(delayMs, repeat) {
-  try {
-    return bridgeDispatchSync(TIMER_DISPATCH.create, delayMs, repeat);
-  } catch (error) {
-    if (error instanceof Error && error.message.includes("EAGAIN")) {
-      throw new Error(
-        "ERR_RESOURCE_BUDGET_EXCEEDED: maximum number of timers exceeded"
-      );
-    }
-    throw error;
-  }
-}
-
-function armKernelTimer(timerId) {
-  bridgeDispatchSync(TIMER_DISPATCH.arm, timerId);
-}
-
-var TimerHandle = class {
-  _id;
-  _destroyed;
-  _refed;
-  constructor(id) {
-    this._id = id;
-    this._destroyed = false;
-    this._refed = true;
-  }
-  ref() {
-    this._refed = true;
-    return this;
-  }
-  unref() {
-    this._refed = false;
-    return this;
-  }
-  hasRef() {
-    return this._refed;
-  }
-  refresh() {
-    if (!this._destroyed && _timerEntries.has(this._id)) {
-      armKernelTimer(this._id);
-    }
-    return this;
-  }
-  [Symbol.toPrimitive]() {
-    return this._id;
-  }
-};
-
-var _timerEntries = /* @__PURE__ */ new Map();
-
-var _immediateEntries = /* @__PURE__ */ new Map();
-
-var _nextImmediateId = -1;
-
-var _timerDrainResolvers = [];
-
-function getRefedTimerCount() {
-  if (typeof _exited !== "undefined" && _exited) {
-    return 0;
-  }
-  let count = 0;
-  for (const entry of _timerEntries.values()) {
-    if (entry.handle?.hasRef?.() !== false) {
-      count += 1;
-    }
-  }
-  return count;
-}
-
-function getPendingImmediateCount() {
-  if (typeof _exited !== "undefined" && _exited) {
-    return 0;
-  }
-  return _immediateEntries.size;
-}
-
-function getPendingTimerDrainCount() {
-  return getRefedTimerCount() + getPendingImmediateCount();
-}
-
-function checkTimerDrain() {
-  if (getPendingTimerDrainCount() === 0 && _timerDrainResolvers.length > 0) {
-    const resolvers = _timerDrainResolvers;
-    _timerDrainResolvers = [];
-    resolvers.forEach((r) => r());
-  }
-}
-
-function _getPendingTimerCount() {
-  return getPendingTimerDrainCount();
-}
-
-function _getPendingImmediateCount() {
-  return getPendingImmediateCount();
-}
-
-function _waitForTimerDrain() {
-  if (getPendingTimerDrainCount() === 0) return Promise.resolve();
-  return new Promise((resolve) => {
-    _timerDrainResolvers.push(resolve);
-    checkTimerDrain();
-  });
-}
-
-var _nextTickQueue = [];
-
-var _nextTickScheduled = false;
-
-function flushNextTickQueue() {
-  _nextTickScheduled = false;
-  while (_nextTickQueue.length > 0) {
-    const entry = _nextTickQueue.shift();
-    if (!entry) {
-      break;
-    }
-    try {
-      entry.callback(...entry.args);
-    } catch (error) {
-      const outcome = routeAsyncCallbackError(error);
-      if (!outcome.handled && outcome.rethrow !== null) {
-        _nextTickQueue.length = 0;
-        scheduleAsyncRethrow(outcome.rethrow);
-      }
-      return;
-    }
-  }
-}
-
-function scheduleNextTickFlush() {
-  if (_nextTickScheduled) {
-    return;
-  }
-  _nextTickScheduled = true;
-  const asyncLocalStorageSnapshot = snapshotAsyncLocalStorageStores();
-  _queueMicrotask(() =>
-    runWithAsyncLocalStorageSnapshot(
-      asyncLocalStorageSnapshot,
-      flushNextTickQueue,
-      globalThis,
-      []
-    )
-  );
-}
-
-function timerDispatch(_eventType, payload) {
-  const timerId = typeof payload === "number" ? payload : Number(payload?.timerId);
-  if (!Number.isFinite(timerId)) return;
-  const entry = _timerEntries.get(timerId);
-  if (!entry) return;
-  if (!entry.repeat) {
-    entry.handle._destroyed = true;
-    _timerEntries.delete(timerId);
-  }
-  try {
-    entry.callback(...entry.args);
-  } catch (error) {
-    const outcome = routeAsyncCallbackError(error);
-    if (!outcome.handled && outcome.rethrow !== null) {
-      throw outcome.rethrow;
-    }
-    return;
-  }
-  if (typeof _exited !== "undefined" && _exited) {
-    checkTimerDrain();
-    return;
-  }
-  if (entry.repeat && _timerEntries.has(timerId)) {
-    armKernelTimer(timerId);
-  }
-  checkTimerDrain();
-}
-
-function setTimeout2(callback, delay, ...args) {
-  const actualDelay = Math.max(1, normalizeTimerDelay(delay));
-  const id = createKernelTimer(actualDelay, false);
-  const handle = new TimerHandle(id);
-  const asyncLocalStorageSnapshot = snapshotAsyncLocalStorageStores();
-  _timerEntries.set(id, {
-    handle,
-    callback: wrapAsyncLocalStorageCallback(callback, asyncLocalStorageSnapshot),
-    args,
-    repeat: false
-  });
-  armKernelTimer(id);
-  return handle;
-}
-
-function clearTimeout2(timer) {
-  const id = getTimerId(timer);
-  if (id === void 0) return;
-  const entry = _timerEntries.get(id);
-  if (entry) {
-    entry.handle._destroyed = true;
-    _timerEntries.delete(id);
-  }
-  bridgeDispatchSync(TIMER_DISPATCH.clear, id);
-  checkTimerDrain();
-}
-
-function setInterval(callback, delay, ...args) {
-  const actualDelay = Math.max(1, normalizeTimerDelay(delay));
-  const id = createKernelTimer(actualDelay, true);
-  const handle = new TimerHandle(id);
-  const asyncLocalStorageSnapshot = snapshotAsyncLocalStorageStores();
-  _timerEntries.set(id, {
-    handle,
-    callback: wrapAsyncLocalStorageCallback(callback, asyncLocalStorageSnapshot),
-    args,
-    repeat: true
-  });
-  armKernelTimer(id);
-  return handle;
-}
-
-function clearInterval(timer) {
-  clearTimeout2(timer);
-}
-
-exposeCustomGlobal("_timerDispatch", timerDispatch);
-
-function _drainImmediates() {
-  const entries = Array.from(_immediateEntries.entries());
-  for (const [immediateId, entry] of entries) {
-    if (_immediateEntries.get(immediateId) !== entry) {
-      continue;
-    }
-    entry.handle._destroyed = true;
-    _immediateEntries.delete(immediateId);
-    try {
-      entry.callback(...entry.args);
-    } catch (error) {
-      const outcome = routeAsyncCallbackError(error);
-      if (!outcome.handled && outcome.rethrow !== null) {
-        throw outcome.rethrow;
-      }
-      return;
-    }
-    if (typeof _exited !== "undefined" && _exited) {
-      checkTimerDrain();
-      return;
-    }
-  }
-  checkTimerDrain();
-}
-
-exposeCustomGlobal("_getPendingTimerCount", _getPendingTimerCount);
-
-exposeCustomGlobal("_drainImmediates", _drainImmediates);
-
-exposeCustomGlobal("_getPendingImmediateCount", _getPendingImmediateCount);
-
-exposeCustomGlobal("_waitForTimerDrain", _waitForTimerDrain);
-
-function setImmediate(callback, ...args) {
-  const id = _nextImmediateId--;
-  const handle = new TimerHandle(id);
-  const asyncLocalStorageSnapshot = snapshotAsyncLocalStorageStores();
-  _immediateEntries.set(id, {
-    handle,
-    callback: wrapAsyncLocalStorageCallback(callback, asyncLocalStorageSnapshot),
-    args,
-    repeat: false
-  });
-  return handle;
-}
-
-function clearImmediate(timer) {
-  const id = getTimerId(timer);
-  if (id === void 0) return;
-  const entry = _immediateEntries.get(id);
-  if (entry) {
-    entry.handle._destroyed = true;
-    _immediateEntries.delete(id);
-    checkTimerDrain();
-    return;
-  }
-  if (id < 0) return;
-  clearTimeout2(timer);
-}
-export { TIMER_DISPATCH, TimerHandle, _drainImmediates, _getPendingImmediateCount, _getPendingTimerCount, _immediateEntries, _nextImmediateId, _nextTickQueue, _nextTickScheduled, _queueMicrotask, _timerDrainResolvers, _timerEntries, _waitForTimerDrain, applyAsyncLocalStorageSnapshot, armKernelTimer, asyncLocalStorageInstances, builtinAsyncHooksModule, builtinTimersPromisesModule, checkTimerDrain, clearImmediate, clearInterval, clearTimeout2, createKernelTimer, flushNextTickQueue, getPendingImmediateCount, getPendingTimerDrainCount, getRefedTimerCount, getTimerId, normalizeTimerDelay, runWithAsyncLocalStorageSnapshot, scheduleNextTickFlush, setImmediate, setInterval, setTimeout2, snapshotAsyncLocalStorageStores, timerDispatch, wrapAsyncLocalStorageCallback };
diff --git a/packages/build-tools/bridge-src/builtins/tls.ts b/packages/build-tools/bridge-src/builtins/tls.ts
deleted file mode 100644
index 727ce0fee..000000000
--- a/packages/build-tools/bridge-src/builtins/tls.ts
+++ /dev/null
@@ -1,373 +0,0 @@
-import { exposeCustomGlobal } from "../global-exposure.js";
-import { NetServer, NetSocket, buildSerializedTlsOptions, isTlsSecureContextWrapper, netModule, parseTlsClientHello } from "./net.js";
-
-function createSecureContextWrapper(options) {
-  return {
-    __secureExecTlsContext: buildSerializedTlsOptions(options),
-    context: {}
-  };
-}
-
-function adoptRawTlsSocket(rawSocket, options) {
-  if (!(rawSocket instanceof NetSocket)) {
-    throw new TypeError("tls.TLSSocket requires a net.Socket instance");
-  }
-  const normalizedOptions = options && typeof options === "object" ? { ...options } : {};
-  Object.setPrototypeOf(rawSocket, TLSSocket.prototype);
-  const upgradeOptions = buildSerializedTlsOptions(
-    normalizedOptions,
-    {
-      isServer: normalizedOptions.isServer === true,
-      servername: normalizedOptions.servername ?? rawSocket.servername ?? rawSocket.remoteAddress ?? "127.0.0.1"
-    }
-  );
-  if (!upgradeOptions.isServer) {
-    rawSocket.servername = upgradeOptions.servername;
-  }
-  if (rawSocket._connected) {
-    rawSocket._upgradeTls(upgradeOptions);
-  } else {
-    rawSocket.once("connect", () => {
-      rawSocket._upgradeTls(upgradeOptions);
-    });
-  }
-  return rawSocket;
-}
-
-class TLSSocket extends NetSocket {
-  constructor(socketOrOptions, options) {
-    if (socketOrOptions instanceof NetSocket) {
-      super({ allowHalfOpen: socketOrOptions.allowHalfOpen === true });
-      return adoptRawTlsSocket(socketOrOptions, options);
-    }
-    super(
-      socketOrOptions && typeof socketOrOptions === "object" ? socketOrOptions : options
-    );
-  }
-}
-
-function tlsConnect(...args) {
-  let socket;
-  let options;
-  const values = [...args];
-  const cb = typeof values[values.length - 1] === "function" ? values.pop() : void 0;
-  if (values[0] != null && typeof values[0] === "object") {
-    options = { ...values[0] };
-    if (options.socket) {
-      socket = options.socket;
-		} else {
-			socket = new NetSocket();
-			socket.connect({
-				host: options.host ?? "127.0.0.1",
-				port: options.port,
-				localAddress: options.localAddress,
-				localPort: options.localPort
-			});
-		}
-  } else {
-    const positional = {};
-    if (values.length > 0) {
-      positional.port = values.shift();
-    }
-    if (typeof values[0] === "string") {
-      positional.host = values.shift();
-    }
-    const providedOptions = values[0] != null && typeof values[0] === "object" ? { ...values[0] } : {};
-    options = { ...providedOptions, ...positional };
-		socket = new NetSocket();
-		socket.connect({
-			host: options.host ?? "127.0.0.1",
-			port: options.port,
-			localAddress: options.localAddress,
-			localPort: options.localPort
-		});
-	}
-  if (cb) socket.once("secureConnect", cb);
-  const upgradeOptions = buildSerializedTlsOptions(
-    options,
-    {
-      isServer: false,
-      servername: options.servername ?? options.host ?? "127.0.0.1"
-    }
-  );
-  socket.servername = upgradeOptions.servername;
-  if (socket._connected) {
-    socket._upgradeTls(upgradeOptions);
-  } else {
-    socket.once("connect", () => {
-      socket._upgradeTls(upgradeOptions);
-    });
-  }
-  return socket;
-}
-
-function matchesServername(pattern, servername) {
-  if (!pattern.startsWith("*.")) {
-    return pattern === servername;
-  }
-  const suffix = pattern.slice(1);
-  if (!servername.endsWith(suffix)) {
-    return false;
-  }
-  const prefix = servername.slice(0, -suffix.length);
-  return prefix.length > 0 && !prefix.includes(".");
-}
-
-var TLSServer = class {
-  _listeners = {};
-  _onceListeners = {};
-  _server;
-  _tlsOptions;
-  _sniCallback;
-  _alpnCallback;
-  _contexts = [];
-  constructor(optionsOrListener, maybeListener) {
-    const options = typeof optionsOrListener === "function" || optionsOrListener === void 0 ? void 0 : optionsOrListener;
-    const listener = typeof optionsOrListener === "function" ? optionsOrListener : maybeListener;
-    if (options?.ALPNCallback && options?.ALPNProtocols) {
-      const error = new Error(
-        "The ALPNCallback and ALPNProtocols TLS options are mutually exclusive"
-      );
-      error.code = "ERR_TLS_ALPN_CALLBACK_WITH_PROTOCOLS";
-      throw error;
-    }
-    this._tlsOptions = buildSerializedTlsOptions(
-      options,
-      { isServer: true }
-    );
-    this._sniCallback = options?.SNICallback;
-    this._alpnCallback = options?.ALPNCallback;
-    this._server = new NetServer(
-      options ? {
-        allowHalfOpen: options.allowHalfOpen,
-        keepAlive: options.keepAlive,
-        keepAliveInitialDelay: options.keepAliveInitialDelay
-      } : void 0,
-      ((socket) => {
-        const tlsSocket = socket;
-        tlsSocket.server = this;
-        void this._handleSecureSocket(tlsSocket);
-      })
-    );
-    if (listener) {
-      this.on("secureConnection", listener);
-    }
-    this._server.on("listening", (...args) => this._emit("listening", ...args));
-    this._server.on("close", (...args) => this._emit("close", ...args));
-    this._server.on("error", (...args) => this._emit("error", ...args));
-    this._server.on("drop", (...args) => this._emit("drop", ...args));
-  }
-  listen(portOrOptions, hostOrCallback, backlogOrCallback, callback) {
-    this._server.listen(portOrOptions, hostOrCallback, backlogOrCallback, callback);
-    return this;
-  }
-  close(callback) {
-    if (callback) {
-      this.once("close", callback);
-    }
-    this._server.close();
-    return this;
-  }
-  address() {
-    return this._server.address();
-  }
-  getConnections(callback) {
-    this._server.getConnections(callback);
-    return this;
-  }
-  ref() {
-    this._server.ref();
-    return this;
-  }
-  unref() {
-    this._server.unref();
-    return this;
-  }
-  addContext(servername, context) {
-    const wrapper = isTlsSecureContextWrapper(context) ? context : createSecureContextWrapper(
-      context && typeof context === "object" ? context : void 0
-    );
-    this._contexts.push({ servername, context: wrapper });
-    return this;
-  }
-  on(event, listener) {
-    if (!this._listeners[event]) this._listeners[event] = [];
-    this._listeners[event].push(listener);
-    return this;
-  }
-  once(event, listener) {
-    if (!this._onceListeners[event]) this._onceListeners[event] = [];
-    this._onceListeners[event].push(listener);
-    return this;
-  }
-  emit(event, ...args) {
-    return this._emit(event, ...args);
-  }
-  _emit(event, ...args) {
-    let handled = false;
-    const listeners = this._listeners[event];
-    if (listeners) {
-      for (const fn of [...listeners]) {
-        fn.call(this, ...args);
-        handled = true;
-      }
-    }
-    const onceListeners = this._onceListeners[event];
-    if (onceListeners) {
-      this._onceListeners[event] = [];
-      for (const fn of [...onceListeners]) {
-        fn.call(this, ...args);
-        handled = true;
-      }
-    }
-    return handled;
-  }
-  async _handleSecureSocket(socket) {
-    const clientHello = this._getClientHello(socket);
-    const requestedServername = clientHello?.servername;
-    if (requestedServername) {
-      socket.servername = requestedServername;
-    }
-    try {
-      const upgradeOptions = await this._resolveTlsOptions(
-        requestedServername,
-        clientHello?.ALPNProtocols ?? []
-      );
-      if (!upgradeOptions) {
-        this._emitTlsClientError(socket, "Invalid SNI context");
-        return;
-      }
-      socket._upgradeTls(upgradeOptions);
-      socket.once("secure", () => {
-        this._emit("secureConnection", socket);
-        this._emit("connection", socket);
-      });
-      socket.on("error", (error) => {
-        this._emit("tlsClientError", error, socket);
-      });
-    } catch (error) {
-      const err = error instanceof Error ? error : new Error(String(error));
-      this._emitTlsClientError(socket, err.message, err);
-      if (err.uncaught) {
-        process.emit?.("uncaughtException", err, "uncaughtException");
-      }
-    }
-  }
-  _getClientHello(socket) {
-    if (typeof _netSocketGetTlsClientHelloRaw === "undefined") {
-      return null;
-    }
-    const socketId = socket._socketId;
-    if (typeof socketId !== "number" || socketId === 0) {
-      return null;
-    }
-    return parseTlsClientHello(
-      _netSocketGetTlsClientHelloRaw.applySync(void 0, [socketId])
-    );
-  }
-  async _resolveTlsOptions(servername, clientProtocols) {
-    let selectedContext = null;
-    let invalidContext = false;
-    if (servername && this._sniCallback) {
-      selectedContext = await new Promise((resolve, reject) => {
-        this._sniCallback?.(servername, (error, context) => {
-          if (error) {
-            reject(error);
-            return;
-          }
-          if (context == null) {
-            resolve(null);
-            return;
-          }
-          if (isTlsSecureContextWrapper(context)) {
-            resolve(context);
-            return;
-          }
-          if (context && typeof context === "object" && Object.keys(context).length > 0) {
-            resolve(createSecureContextWrapper(context));
-            return;
-          }
-          invalidContext = true;
-          resolve(null);
-        });
-      });
-      if (invalidContext) {
-        return null;
-      }
-    } else if (servername) {
-      selectedContext = this._findContext(servername);
-    }
-    const resolvedOptions = {
-      ...this._tlsOptions,
-      ...selectedContext?.__secureExecTlsContext ?? {},
-      isServer: true
-    };
-    if (this._alpnCallback) {
-      const selectedProtocol = this._alpnCallback({
-        servername,
-        protocols: clientProtocols
-      });
-      if (selectedProtocol === void 0) {
-        const error = new Error("ALPN callback rejected the client protocol list");
-        error.code = "ERR_SSL_TLSV1_ALERT_NO_APPLICATION_PROTOCOL";
-        throw error;
-      }
-      if (!clientProtocols.includes(selectedProtocol)) {
-        const error = new Error(
-          "The ALPNCallback callback returned an invalid protocol"
-        );
-        error.code = "ERR_TLS_ALPN_CALLBACK_INVALID_RESULT";
-        error.uncaught = true;
-        throw error;
-      }
-      resolvedOptions.ALPNProtocols = [selectedProtocol];
-    }
-    return resolvedOptions;
-  }
-  _findContext(servername) {
-    for (let index = this._contexts.length - 1; index >= 0; index -= 1) {
-      const entry = this._contexts[index];
-      if (matchesServername(entry.servername, servername)) {
-        return entry.context;
-      }
-    }
-    return null;
-  }
-  _emitTlsClientError(socket, message, existingError) {
-    const error = existingError ?? new Error(message);
-    socket.servername ??= this._getClientHello(socket)?.servername;
-    this._emit("tlsClientError", error, socket);
-    socket.destroy();
-  }
-};
-
-function TLSServerCallable(optionsOrListener, maybeListener) {
-  return new TLSServer(optionsOrListener, maybeListener);
-}
-
-var tlsModule = {
-  connect: tlsConnect,
-  TLSSocket,
-  Server: TLSServerCallable,
-  createServer(optionsOrListener, maybeListener) {
-    return new TLSServer(optionsOrListener, maybeListener);
-  },
-  createSecureContext(options) {
-    return createSecureContextWrapper(options);
-  },
-  getCiphers() {
-    if (typeof _tlsGetCiphersRaw === "undefined") {
-      throw new Error("tls.getCiphers is not supported in sandbox");
-    }
-    try {
-      return JSON.parse(_tlsGetCiphersRaw.applySync(void 0, []));
-    } catch {
-      return [];
-    }
-  },
-  DEFAULT_MIN_VERSION: "TLSv1.2",
-  DEFAULT_MAX_VERSION: "TLSv1.3"
-};
-
-exposeCustomGlobal("_netModule", netModule);
-export { TLSServer, TLSServerCallable, TLSSocket, adoptRawTlsSocket, createSecureContextWrapper, matchesServername, tlsConnect, tlsModule };
diff --git a/packages/build-tools/bridge-src/builtins/tty-config.ts b/packages/build-tools/bridge-src/builtins/tty-config.ts
deleted file mode 100644
index 856af2171..000000000
--- a/packages/build-tools/bridge-src/builtins/tty-config.ts
+++ /dev/null
@@ -1,61 +0,0 @@
-const DEFAULT_RUNTIME_TTY_CONFIG = {
-  stdinIsTTY: false,
-  stdoutIsTTY: false,
-  stderrIsTTY: false,
-  cols: 80,
-  rows: 24
-};
-
-var _cachedRuntimeTtyConfig;
-
-function _kernelIsatty(fd) {
-  if (typeof _kernelIsattyRaw === "undefined") {
-    throw new Error("_kernelIsattyRaw is unavailable");
-  }
-  return _kernelIsattyRaw.applySync(void 0, [fd]) === true;
-}
-
-function _kernelTtySize(fd) {
-  if (typeof _kernelTtySizeRaw === "undefined") {
-    throw new Error("_kernelTtySizeRaw is unavailable");
-  }
-  const size = _kernelTtySizeRaw.applySync(void 0, [fd]);
-  if (!size || typeof size.cols !== "number" || typeof size.rows !== "number") {
-    throw new Error("_kernelTtySizeRaw returned an invalid size");
-  }
-  return size;
-}
-
-function _resolveRuntimeTtyConfig() {
-  if (_cachedRuntimeTtyConfig) {
-    return _cachedRuntimeTtyConfig;
-  }
-  if (typeof __runtimeTtyConfig !== "undefined") {
-    _cachedRuntimeTtyConfig = __runtimeTtyConfig;
-    return _cachedRuntimeTtyConfig;
-  }
-  try {
-    _cachedRuntimeTtyConfig = {
-      stdinIsTTY: _kernelIsatty(0),
-      stdoutIsTTY: _kernelIsatty(1),
-      stderrIsTTY: _kernelIsatty(2),
-      cols: 80,
-      rows: 24
-    };
-  } catch {
-    _cachedRuntimeTtyConfig = DEFAULT_RUNTIME_TTY_CONFIG;
-    return _cachedRuntimeTtyConfig;
-  }
-  for (const fd of [1, 0]) {
-    try {
-      const size = _kernelTtySize(fd);
-      _cachedRuntimeTtyConfig.cols = size.cols;
-      _cachedRuntimeTtyConfig.rows = size.rows;
-      break;
-    } catch {
-    }
-  }
-  return _cachedRuntimeTtyConfig;
-}
-
-export { _resolveRuntimeTtyConfig };
diff --git a/packages/build-tools/bridge-src/builtins/undici.ts b/packages/build-tools/bridge-src/builtins/undici.ts
deleted file mode 100644
index 3ee20cba6..000000000
--- a/packages/build-tools/bridge-src/builtins/undici.ts
+++ /dev/null
@@ -1,92 +0,0 @@
-import { createHttpRequestSocket, socketReadyEventNameForProtocol } from "./network.js";
-import { undiciAgentModule, undiciApiModule, undiciClientModule, undiciFetchModule, undiciGlobalModule, undiciHeadersModule, undiciRequestModule, undiciResponseModule } from "../prelude.js";
-
-var UndiciAgent = undiciAgentModule?.default ?? undiciAgentModule;
-var UndiciClient = undiciClientModule?.default ?? undiciClientModule;
-var undiciRequest = undiciApiModule?.request ?? undiciApiModule?.default?.request ?? undiciApiModule?.default ?? undiciApiModule;
-var undiciFetch = undiciFetchModule?.fetch ?? undiciFetchModule?.default ?? undiciFetchModule;
-var UndiciHeaders = undiciHeadersModule?.Headers ?? undiciHeadersModule?.default ?? undiciHeadersModule;
-var UndiciRequest = undiciRequestModule?.Request ?? undiciRequestModule?.default ?? undiciRequestModule;
-var UndiciResponse = undiciResponseModule?.Response ?? undiciResponseModule?.default ?? undiciResponseModule;
-var setUndiciGlobalDispatcher = undiciGlobalModule?.setGlobalDispatcher;
-var getUndiciGlobalDispatcher = undiciGlobalModule?.getGlobalDispatcher;
-var secureExecUndiciDispatcher = null;
-function createSecureExecUndiciDispatcher() {
-  return new UndiciAgent({
-    // Bound the per-origin connection pool. With an unbounded pool, requests that
-    // overlap while the pool's clients are still connecting each find every client
-    // marked kNeedDrain and spawn a brand-new Client+socket (HTTP/2: a whole new
-    // session) instead of reusing one -- and the bridge's synchronous socket reads
-    // widen that connect window. Over a long, many-call turn (e.g. an LLM agent flow)
-    // those abandoned clients accumulate their listener sets (connect/close/drain/
-    // error/finish/readable/end/terminated) without bound, tripping
-    // MaxListenersExceededWarning and degrading the HTTP/2 path until requests abort.
-    // Capping connections makes excess requests queue on existing clients (HTTP/2
-    // multiplexes within one), so sockets/sessions/listeners stay bounded. 6 mirrors
-    // the browser per-origin connection limit; HTTP/2 multiplexes within each.
-    connections: 6,
-    connect(options, callback) {
-      try {
-        let protocol = options?.protocol === "https:" || options?.protocol === "https" ? "https:" : "http:";
-        let hostname = options?.hostname || options?.host || options?.servername || "localhost";
-        let port = options?.port;
-        if (options?.origin) {
-          const origin = new URL(String(options.origin));
-          protocol = origin.protocol === "https:" ? "https:" : "http:";
-          hostname = origin.hostname || hostname;
-          port = origin.port || port;
-        }
-        if (typeof hostname === "string" && hostname.startsWith("[") && hostname.endsWith("]")) {
-          hostname = hostname.slice(1, -1);
-        }
-        const socket = createHttpRequestSocket({
-          protocol,
-          hostname,
-          host: hostname,
-          port: port ? Number(port) : protocol === "https:" ? 443 : 80,
-          servername: options?.servername || hostname,
-          rejectUnauthorized: options?.rejectUnauthorized
-        });
-        const readyEvent = socketReadyEventNameForProtocol(protocol);
-        let settled = false;
-        const cleanup = () => {
-          socket.off?.(readyEvent, onReady);
-          socket.removeListener?.(readyEvent, onReady);
-          socket.off?.("error", onError);
-          socket.removeListener?.("error", onError);
-        };
-        const onReady = () => {
-          if (settled) return;
-          settled = true;
-          cleanup();
-          callback(null, socket);
-        };
-        const onError = (error) => {
-          if (settled) return;
-          settled = true;
-          cleanup();
-          callback(error instanceof Error ? error : new Error(String(error)));
-        };
-        socket.once(readyEvent, onReady);
-        socket.once("error", onError);
-        return socket;
-      } catch (error) {
-        callback(error instanceof Error ? error : new Error(String(error)));
-        return null;
-      }
-    }
-  });
-}
-function getSecureExecUndiciDispatcher() {
-  if (!secureExecUndiciDispatcher) {
-    secureExecUndiciDispatcher = createSecureExecUndiciDispatcher();
-  }
-  return secureExecUndiciDispatcher;
-}
-if (typeof setUndiciGlobalDispatcher === "function" && typeof UndiciAgent === "function") {
-  const currentDispatcher = typeof getUndiciGlobalDispatcher === "function" ? getUndiciGlobalDispatcher() : null;
-  if (currentDispatcher == null) {
-    setUndiciGlobalDispatcher(getSecureExecUndiciDispatcher());
-  }
-}
-export { UndiciAgent, UndiciClient, undiciRequest, undiciFetch, UndiciHeaders, UndiciRequest, UndiciResponse, setUndiciGlobalDispatcher, getUndiciGlobalDispatcher, secureExecUndiciDispatcher, createSecureExecUndiciDispatcher, getSecureExecUndiciDispatcher };
diff --git a/packages/build-tools/bridge-src/builtins/v8.ts b/packages/build-tools/bridge-src/builtins/v8.ts
deleted file mode 100644
index effe50010..000000000
--- a/packages/build-tools/bridge-src/builtins/v8.ts
+++ /dev/null
@@ -1,153 +0,0 @@
-function v8Serialize(value) {
-  const encoded = JSON.stringify(value ?? null);
-  return Buffer.from(encoded, "utf8");
-}
-
-function v8Deserialize(value) {
-  const buffer = Buffer.isBuffer(value) ? value : Buffer.from(value ?? []);
-  return JSON.parse(buffer.toString("utf8"));
-}
-
-class V8Serializer {
-  constructor() {
-    this._value = null;
-  }
-  writeHeader() {
-  }
-  writeValue(value) {
-    this._value = value;
-  }
-  releaseBuffer() {
-    return v8Serialize(this._value);
-  }
-  transferArrayBuffer() {
-  }
-}
-
-class V8Deserializer {
-  constructor(buffer) {
-    this._buffer = buffer;
-  }
-  readHeader() {
-  }
-  readValue() {
-    return v8Deserialize(this._buffer);
-  }
-  transferArrayBuffer() {
-  }
-}
-
-function configuredHeapLimitBytes() {
-  const configured = Number(globalThis.__agentOSV8HeapLimitBytes);
-  if (Number.isFinite(configured) && configured > 0) {
-    return configured;
-  }
-  return 128 * 1024 * 1024;
-}
-
-function getHeapStatistics() {
-  const heapLimit = configuredHeapLimitBytes();
-  return {
-    total_heap_size: Math.max(64 * 1024 * 1024, Math.floor(heapLimit / 2)),
-    total_heap_size_executable: 1024 * 1024,
-    total_physical_size: Math.max(64 * 1024 * 1024, Math.floor(heapLimit / 2)),
-    total_available_size: Math.max(0, heapLimit - 64 * 1024 * 1024),
-    used_heap_size: Math.max(0, Math.min(heapLimit, Math.floor(heapLimit * 0.4))),
-    heap_size_limit: heapLimit,
-    malloced_memory: 8192,
-    peak_malloced_memory: 16384,
-    does_zap_garbage: 0,
-    number_of_native_contexts: 1,
-    number_of_detached_contexts: 0,
-    total_global_handles_size: 16384,
-    used_global_handles_size: 8192,
-    external_memory: 0
-  };
-}
-
-function getHeapSpaceStatistics() {
-  return [];
-}
-
-function getHeapCodeStatistics() {
-  return {
-    code_and_metadata_size: 0,
-    bytecode_and_metadata_size: 0,
-    external_script_source_size: 0,
-    cpu_profiler_metadata_size: 0
-  };
-}
-
-function getCppHeapStatistics() {
-  return {
-    committed_size_bytes: 0,
-    resident_size_bytes: 0,
-    used_size_bytes: 0,
-    space_statistics: []
-  };
-}
-
-function getHeapSnapshot() {
-  return Readable.fromWeb(
-    new ReadableStream({
-      start(controller) {
-        controller.enqueue(Buffer.from("{}"));
-        controller.close();
-      }
-    })
-  );
-}
-
-var builtinV8Module = {
-  cachedDataVersionTag() {
-    return 0;
-  },
-  DefaultDeserializer: V8Deserializer,
-  DefaultSerializer: V8Serializer,
-  Deserializer: V8Deserializer,
-  GCProfiler: class GCProfiler {
-    start() {
-    }
-    stop() {
-      return [];
-    }
-  },
-  Serializer: V8Serializer,
-  deserialize: v8Deserialize,
-  getCppHeapStatistics,
-  getHeapCodeStatistics,
-  getHeapSnapshot,
-  getHeapSpaceStatistics,
-  getHeapStatistics,
-  isStringOneByteRepresentation(value) {
-    return typeof value === "string" && !/[^\x00-\xff]/.test(value);
-  },
-  promiseHooks: {},
-  queryObjects() {
-    return [];
-  },
-  serialize: v8Serialize,
-  setFlagsFromString() {
-  },
-  setHeapSnapshotNearHeapLimit() {
-    return [];
-  },
-  startCpuProfile() {
-    return {
-      stop() {
-        return {};
-      }
-    };
-  },
-  startupSnapshot: {},
-  stopCoverage() {
-    return [];
-  },
-  takeCoverage() {
-    return [];
-  },
-  writeHeapSnapshot() {
-    return "";
-  }
-};
-export { V8Deserializer, V8Serializer, builtinV8Module, configuredHeapLimitBytes, getCppHeapStatistics, getHeapCodeStatistics, getHeapSnapshot, getHeapSpaceStatistics, getHeapStatistics, v8Deserialize, v8Serialize };
diff --git a/packages/build-tools/bridge-src/builtins/vm.ts b/packages/build-tools/bridge-src/builtins/vm.ts
deleted file mode 100644
index e3d2f4490..000000000
--- a/packages/build-tools/bridge-src/builtins/vm.ts
+++ /dev/null
@@ -1,139 +0,0 @@
-var VM_CONTEXT_TAG = typeof Symbol === "function" ? Symbol.for("secure-exec.vm.context") : "__secure_exec_vm_context__";
-
-var VM_CONTEXT_ID = typeof Symbol === "function" ? Symbol.for("secure-exec.vm.context.id") : "__secure_exec_vm_context_id__";
-
-function createVmNotImplementedError(feature) {
-  const error = new Error(`node:vm ${feature} is not implemented in the secure-exec guest runtime`);
-  error.code = "ERR_NOT_IMPLEMENTED";
-  return error;
-}
-
-function isVmContextCandidate(value) {
-  return value !== null && (typeof value === "object" || typeof value === "function");
-}
-
-function normalizeVmOptions(options = void 0) {
-  if (typeof options === "string") {
-    return { filename: options };
-  }
-  if (!options || typeof options !== "object") {
-    return {};
-  }
-  const normalized = {};
-  if (typeof options.filename === "string") {
-    normalized.filename = options.filename;
-  }
-  if (Number.isInteger(options.lineOffset)) {
-    normalized.lineOffset = options.lineOffset;
-  }
-  if (Number.isInteger(options.columnOffset)) {
-    normalized.columnOffset = options.columnOffset;
-  }
-  if (Number.isInteger(options.timeout) && options.timeout > 0) {
-    normalized.timeout = options.timeout;
-  }
-  if (options.cachedData !== void 0) {
-    normalized.cachedData = options.cachedData;
-  }
-  if (options.produceCachedData === true) {
-    normalized.produceCachedData = true;
-  }
-  return normalized;
-}
-
-function mergeVmOptions(baseOptions, overrideOptions) {
-  const base = normalizeVmOptions(baseOptions);
-  const override = normalizeVmOptions(overrideOptions);
-  return { ...base, ...override };
-}
-
-function vmCreateContext(context = {}) {
-  if (!isVmContextCandidate(context)) {
-    throw new TypeError('The "object" argument must be of type object.');
-  }
-  if (context[VM_CONTEXT_TAG] === true && Number.isInteger(context[VM_CONTEXT_ID])) {
-    return context;
-  }
-  const contextId = _vmCreateContext(context);
-  Object.defineProperty(context, VM_CONTEXT_TAG, {
-    value: true,
-    configurable: true,
-    enumerable: false,
-    writable: false
-  });
-  Object.defineProperty(context, VM_CONTEXT_ID, {
-    value: contextId,
-    configurable: false,
-    enumerable: false,
-    writable: false
-  });
-  return context;
-}
-
-function vmIsContext(context) {
-  return isVmContextCandidate(context) && context[VM_CONTEXT_TAG] === true && Number.isInteger(context[VM_CONTEXT_ID]);
-}
-
-function assertVmContext(context) {
-  if (!vmIsContext(context)) {
-    throw new TypeError('The "contextifiedObject" argument must be a vm context.');
-  }
-  return context;
-}
-
-function vmRunInThisContext(code, options = void 0) {
-  return _vmRunInThisContext(String(code), normalizeVmOptions(options));
-}
-
-function vmRunInContext(code, contextifiedObject, options = void 0) {
-  const context = assertVmContext(contextifiedObject);
-  return _vmRunInContext(context[VM_CONTEXT_ID], String(code), normalizeVmOptions(options), context);
-}
-
-function vmRunInNewContext(code, contextOrOptions = {}, maybeOptions = void 0) {
-  const hasExplicitContext = isVmContextCandidate(contextOrOptions);
-  const context = hasExplicitContext ? contextOrOptions : {};
-  const options = hasExplicitContext ? maybeOptions : contextOrOptions;
-  return vmRunInContext(code, vmCreateContext(context), options);
-}
-
-class VmScript {
-  constructor(code, options = void 0) {
-    this.code = String(code);
-    this.options = normalizeVmOptions(options);
-    this.filename = this.options.filename ?? "evalmachine.<anonymous>";
-    this.lineOffset = this.options.lineOffset ?? 0;
-    this.columnOffset = this.options.columnOffset ?? 0;
-    this.cachedData = this.options.cachedData;
-    this.cachedDataProduced = false;
-    this.cachedDataRejected = false;
-  }
-  createCachedData() {
-    return typeof Buffer === "function" ? Buffer.alloc(0) : new Uint8Array(0);
-  }
-  runInThisContext(options = void 0) {
-    return vmRunInThisContext(this.code, mergeVmOptions(this.options, options));
-  }
-  runInContext(contextifiedObject, options = void 0) {
-    return vmRunInContext(this.code, contextifiedObject, mergeVmOptions(this.options, options));
-  }
-  runInNewContext(context = {}, options = void 0) {
-    return vmRunInNewContext(this.code, context, mergeVmOptions(this.options, options));
-  }
-}
-
-var builtinVmModule = {
-  Script: VmScript,
-  compileFunction() {
-    throw createVmNotImplementedError("compileFunction");
-  },
-  createContext: vmCreateContext,
-  isContext: vmIsContext,
-  measureMemory() {
-    throw createVmNotImplementedError("measureMemory");
-  },
-  runInContext: vmRunInContext,
-  runInNewContext: vmRunInNewContext,
-  runInThisContext: vmRunInThisContext
-};
-export { VM_CONTEXT_ID, VM_CONTEXT_TAG, VmScript, assertVmContext, builtinVmModule, createVmNotImplementedError, isVmContextCandidate, mergeVmOptions, normalizeVmOptions, vmCreateContext, vmIsContext, vmRunInContext, vmRunInNewContext, vmRunInThisContext };
diff --git a/packages/build-tools/bridge-src/builtins/whatwg-url.ts b/packages/build-tools/bridge-src/builtins/whatwg-url.ts
deleted file mode 100644
index f3edebe58..000000000
--- a/packages/build-tools/bridge-src/builtins/whatwg-url.ts
+++ /dev/null
@@ -1,1079 +0,0 @@
-import { builtinPathStdlibModule } from "./builtin-modules.js";
-import { Blob } from "./network.js";
-import { TextDecoder } from "../polyfills/index.js";
-import { urlStdlibModuleNs } from "../prelude.js";
-
-var inspectCustomSymbol = /* @__PURE__ */ Symbol.for("nodejs.util.inspect.custom");
-var toStringTagSymbol = Symbol.toStringTag;
-var ERR_INVALID_THIS = "ERR_INVALID_THIS";
-var ERR_MISSING_ARGS = "ERR_MISSING_ARGS";
-var ERR_INVALID_URL = "ERR_INVALID_URL";
-var ERR_ARG_NOT_ITERABLE = "ERR_ARG_NOT_ITERABLE";
-var ERR_INVALID_TUPLE = "ERR_INVALID_TUPLE";
-var URL_SEARCH_PARAMS_TYPE = "URLSearchParams";
-var kLinkedSearchParams = /* @__PURE__ */ Symbol("secureExecLinkedURLSearchParams");
-var kBlobUrlStore = /* @__PURE__ */ Symbol.for("secureExec.blobUrlStore");
-var kBlobUrlCounter = /* @__PURE__ */ Symbol.for("secureExec.blobUrlCounter");
-var SEARCH_PARAM_METHOD_NAMES = ["append", "delete", "get", "getAll", "has"];
-var SEARCH_PARAM_PAIR_METHOD_NAMES = ["append", "set"];
-var URL_SCHEME_TYPES = {
-  "http:": 0,
-  "https:": 2,
-  "ws:": 4,
-  "wss:": 5,
-  "file:": 6,
-  "ftp:": 8
-};
-var searchParamsBrand = /* @__PURE__ */ new WeakSet();
-var searchParamsState = /* @__PURE__ */ new WeakMap();
-var searchParamsIteratorBrand = /* @__PURE__ */ new WeakSet();
-var searchParamsIteratorState = /* @__PURE__ */ new WeakMap();
-function createNodeTypeError(message, code) {
-  const error = new TypeError(message);
-  error.code = code;
-  return error;
-}
-function createInvalidUrlError() {
-  const error = new TypeError("Invalid URL");
-  error.code = ERR_INVALID_URL;
-  return error;
-}
-function createUrlReceiverTypeError() {
-  return new TypeError("Receiver must be an instance of class URL");
-}
-function createMissingArgsError(message) {
-  return createNodeTypeError(message, ERR_MISSING_ARGS);
-}
-function createIterableTypeError() {
-  return createNodeTypeError("Query pairs must be iterable", ERR_ARG_NOT_ITERABLE);
-}
-function createTupleTypeError() {
-  return createNodeTypeError(
-    "Each query pair must be an iterable [name, value] tuple",
-    ERR_INVALID_TUPLE
-  );
-}
-function createSymbolStringError() {
-  return new TypeError("Cannot convert a Symbol value to a string");
-}
-function toNodeString(value) {
-  if (typeof value === "symbol") {
-    throw createSymbolStringError();
-  }
-  return String(value);
-}
-function toWellFormedString(value) {
-  let result = "";
-  for (let index = 0; index < value.length; index += 1) {
-    const codeUnit = value.charCodeAt(index);
-    if (codeUnit >= 55296 && codeUnit <= 56319) {
-      const nextIndex = index + 1;
-      if (nextIndex < value.length) {
-        const nextCodeUnit = value.charCodeAt(nextIndex);
-        if (nextCodeUnit >= 56320 && nextCodeUnit <= 57343) {
-          result += value[index] + value[nextIndex];
-          index = nextIndex;
-          continue;
-        }
-      }
-      result += "\uFFFD";
-      continue;
-    }
-    if (codeUnit >= 56320 && codeUnit <= 57343) {
-      result += "\uFFFD";
-      continue;
-    }
-    result += value[index];
-  }
-  return result;
-}
-function toNodeUSVString(value) {
-  return toWellFormedString(toNodeString(value));
-}
-function assertUrlSearchParamsReceiver(receiver) {
-  if (!searchParamsBrand.has(receiver)) {
-    throw createNodeTypeError(
-      'Value of "this" must be of type URLSearchParams',
-      ERR_INVALID_THIS
-    );
-  }
-}
-function assertUrlSearchParamsIteratorReceiver(receiver) {
-  if (!searchParamsIteratorBrand.has(receiver)) {
-    throw createNodeTypeError(
-      'Value of "this" must be of type URLSearchParamsIterator',
-      ERR_INVALID_THIS
-    );
-  }
-}
-function getUrlSearchParamsImpl(receiver) {
-  const state = searchParamsState.get(receiver);
-  if (!state) {
-    throw createNodeTypeError(
-      'Value of "this" must be of type URLSearchParams',
-      ERR_INVALID_THIS
-    );
-  }
-  return state.getImpl();
-}
-function countSearchParams(params) {
-  let count = 0;
-  for (const _entry of params) {
-    count++;
-  }
-  return count;
-}
-function isAsciiHexCodeUnit(codeUnit) {
-  return codeUnit >= 48 && codeUnit <= 57 || codeUnit >= 65 && codeUnit <= 70 || codeUnit >= 97 && codeUnit <= 102;
-}
-function decodeAsciiHexCodeUnit(codeUnit) {
-  if (codeUnit >= 48 && codeUnit <= 57) {
-    return codeUnit - 48;
-  }
-  if (codeUnit >= 65 && codeUnit <= 70) {
-    return codeUnit - 55;
-  }
-  return codeUnit - 87;
-}
-function appendUtf8CodePoint(bytes, codePoint) {
-  if (codePoint <= 127) {
-    bytes.push(codePoint);
-    return;
-  }
-  if (codePoint <= 2047) {
-    bytes.push(
-      192 | codePoint >> 6,
-      128 | codePoint & 63
-    );
-    return;
-  }
-  if (codePoint <= 65535) {
-    bytes.push(
-      224 | codePoint >> 12,
-      128 | codePoint >> 6 & 63,
-      128 | codePoint & 63
-    );
-    return;
-  }
-  bytes.push(
-    240 | codePoint >> 18,
-    128 | codePoint >> 12 & 63,
-    128 | codePoint >> 6 & 63,
-    128 | codePoint & 63
-  );
-}
-function decodeFormUrlencodedComponent(value) {
-  const source = String(value).replace(/\+/g, " ");
-  let output = "";
-  for (let index = 0; index < source.length; index += 1) {
-    if (source.charCodeAt(index) === 37 && index + 2 < source.length) {
-      const bytes = [];
-      let nextIndex = index;
-      while (nextIndex + 2 < source.length && source.charCodeAt(nextIndex) === 37) {
-        const high = source.charCodeAt(nextIndex + 1);
-        const low = source.charCodeAt(nextIndex + 2);
-        if (!isAsciiHexCodeUnit(high) || !isAsciiHexCodeUnit(low)) {
-          break;
-        }
-        bytes.push((decodeAsciiHexCodeUnit(high) << 4) + decodeAsciiHexCodeUnit(low));
-        nextIndex += 3;
-      }
-      if (bytes.length > 0) {
-        output += new TextDecoder().decode(Uint8Array.from(bytes));
-        index = nextIndex - 1;
-        continue;
-      }
-    }
-    const codePoint = source.codePointAt(index);
-    output += String.fromCodePoint(codePoint);
-    if (codePoint > 65535) {
-      index += 1;
-    }
-  }
-  return output;
-}
-function serializeFormUrlencodedComponent(value) {
-  const input = String(value);
-  const bytes = [];
-  for (let index = 0; index < input.length; index += 1) {
-    const codePoint = input.codePointAt(index);
-    appendUtf8CodePoint(bytes, codePoint);
-    if (codePoint > 65535) {
-      index += 1;
-    }
-  }
-  let output = "";
-  for (const byte of bytes) {
-    if (byte === 32) {
-      output += "+";
-      continue;
-    }
-    const isAlphaNumeric = byte >= 48 && byte <= 57 || byte >= 65 && byte <= 90 || byte >= 97 && byte <= 122;
-    if (isAlphaNumeric || byte === 42 || byte === 45 || byte === 46 || byte === 95) {
-      output += String.fromCharCode(byte);
-      continue;
-    }
-    output += `%${byte.toString(16).toUpperCase().padStart(2, "0")}`;
-  }
-  return output;
-}
-function compareCodeUnitStrings(left, right) {
-  const minLength = Math.min(left.length, right.length);
-  for (let index = 0; index < minLength; index += 1) {
-    const diff = left.charCodeAt(index) - right.charCodeAt(index);
-    if (diff !== 0) {
-      return diff;
-    }
-  }
-  return left.length - right.length;
-}
-function normalizeSearchParamsInit(init) {
-  if (init && typeof init === "object" && kLinkedSearchParams in init) {
-    return init;
-  }
-  if (init == null) {
-    return void 0;
-  }
-  if (typeof init === "string") {
-    return toNodeUSVString(init);
-  }
-  if (typeof init === "object" || typeof init === "function") {
-    const iterator2 = init[Symbol.iterator];
-    if (iterator2 !== void 0) {
-      if (typeof iterator2 !== "function") {
-        throw createIterableTypeError();
-      }
-      const pairs2 = [];
-      for (const pair of init) {
-        if (pair == null) {
-          throw createTupleTypeError();
-        }
-        const pairIterator = pair[Symbol.iterator];
-        if (typeof pairIterator !== "function") {
-          throw createTupleTypeError();
-        }
-        const values = Array.from(pair);
-        if (values.length !== 2) {
-          throw createTupleTypeError();
-        }
-        pairs2.push([toNodeUSVString(values[0]), toNodeUSVString(values[1])]);
-      }
-      return pairs2;
-    }
-    const pairs = [];
-    for (const key of Reflect.ownKeys(init)) {
-      if (!Object.prototype.propertyIsEnumerable.call(init, key)) {
-        continue;
-      }
-      pairs.push([
-        toNodeUSVString(key),
-        toNodeUSVString(init[key])
-      ]);
-    }
-    return pairs;
-  }
-  return toNodeUSVString(init);
-}
-var NativeURLSearchParams = typeof globalThis.URLSearchParams === "function" && globalThis.URLSearchParams.__secureExecBootstrapStub !== true ? globalThis.URLSearchParams : class URLSearchParams {
-  constructor(init = "") {
-    this._pairs = [];
-    if (typeof init === "string") {
-      const query = init.replace(/^\?/, "");
-      if (!query) {
-        return;
-      }
-      for (const entry of query.split("&")) {
-        if (!entry) {
-          continue;
-        }
-        const [key, ...rest] = entry.split("=");
-        this._pairs.push([
-          decodeFormUrlencodedComponent(key),
-          decodeFormUrlencodedComponent(rest.join("="))
-        ]);
-      }
-      return;
-    }
-    if (Array.isArray(init)) {
-      for (const pair of init) {
-        if (pair == null || pair.length !== 2) {
-          continue;
-        }
-        this._pairs.push([String(pair[0]), String(pair[1])]);
-      }
-      return;
-    }
-    if (init && typeof init === "object") {
-      for (const [key, value] of Object.entries(init)) {
-        this._pairs.push([String(key), String(value)]);
-      }
-    }
-  }
-  append(name, value) {
-    this._pairs.push([String(name), String(value)]);
-  }
-  delete(name) {
-    const key = String(name);
-    this._pairs = this._pairs.filter(([candidate]) => candidate !== key);
-  }
-  get(name) {
-    const key = String(name);
-    const match = this._pairs.find(([candidate]) => candidate === key);
-    return match ? match[1] : null;
-  }
-  getAll(name) {
-    const key = String(name);
-    return this._pairs.filter(([candidate]) => candidate === key).map(([, value]) => value);
-  }
-  has(name) {
-    const key = String(name);
-    return this._pairs.some(([candidate]) => candidate === key);
-  }
-  set(name, value) {
-    const key = String(name);
-    const stringValue = String(value);
-    const nextPairs = [];
-    let replaced = false;
-    for (const [candidate, currentValue] of this._pairs) {
-      if (candidate !== key) {
-        nextPairs.push([candidate, currentValue]);
-        continue;
-      }
-      if (!replaced) {
-        replaced = true;
-        nextPairs.push([key, stringValue]);
-      }
-    }
-    if (!replaced) {
-      nextPairs.push([key, stringValue]);
-    }
-    this._pairs = nextPairs;
-  }
-  sort() {
-    this._pairs = this._pairs.map((pair, index) => ({ pair, index })).sort((left, right) => {
-      const diff = compareCodeUnitStrings(left.pair[0], right.pair[0]);
-      return diff !== 0 ? diff : left.index - right.index;
-    }).map(({ pair }) => pair);
-  }
-  entries() {
-    return this._pairs[Symbol.iterator]();
-  }
-  keys() {
-    return this._pairs.map(([key]) => key)[Symbol.iterator]();
-  }
-  values() {
-    return this._pairs.map(([, value]) => value)[Symbol.iterator]();
-  }
-  [Symbol.iterator]() {
-    return this.entries();
-  }
-  toString() {
-    return this._pairs.map(([key, value]) => `${serializeFormUrlencodedComponent(key)}=${serializeFormUrlencodedComponent(value)}`).join("&");
-  }
-};
-function createStandaloneSearchParams(init) {
-  if (typeof init === "string") {
-    return new NativeURLSearchParams(init);
-  }
-  return init === void 0 ? new NativeURLSearchParams() : new NativeURLSearchParams(init);
-}
-function createCollectionBody(items, options, emptyBody) {
-  if (items.length === 0) {
-    return emptyBody;
-  }
-  const oneLine = `{ ${items.join(", ")} }`;
-  const breakLength = options?.breakLength ?? Infinity;
-  if (oneLine.length <= breakLength) {
-    return oneLine;
-  }
-  return `{
-${items.join(",\n  ")} }`;
-}
-function createUrlContext(url) {
-  const href = url.href;
-  const protocolEnd = href.indexOf(":") + 1;
-  const authIndex = href.indexOf("@");
-  const pathnameStart = href.indexOf("/", protocolEnd + 2);
-  const searchStart = href.indexOf("?");
-  const hashStart = href.indexOf("#");
-  const usernameEnd = url.username.length > 0 ? href.indexOf(":", protocolEnd + 2) : protocolEnd + 2;
-  const hostStart = authIndex === -1 ? protocolEnd + 2 : authIndex;
-  const hostEnd = pathnameStart === -1 ? href.length : pathnameStart - (url.port.length > 0 ? url.port.length + 1 : 0);
-  const port = url.port.length > 0 ? Number(url.port) : null;
-  return {
-    href,
-    protocol_end: protocolEnd,
-    username_end: usernameEnd,
-    host_start: hostStart,
-    host_end: hostEnd,
-    pathname_start: pathnameStart === -1 ? href.length : pathnameStart,
-    search_start: searchStart === -1 ? href.length : searchStart,
-    hash_start: hashStart === -1 ? href.length : hashStart,
-    port,
-    scheme_type: URL_SCHEME_TYPES[url.protocol] ?? 1,
-    hasPort: url.port.length > 0,
-    hasSearch: url.search.length > 0,
-    hasHash: url.hash.length > 0
-  };
-}
-function formatUrlContext(url, inspect, options) {
-  const context = createUrlContext(url);
-  const formatValue = typeof inspect === "function" ? (value) => inspect(value, options) : (value) => JSON.stringify(value);
-  const portValue = context.port === null ? "null" : String(context.port);
-  return [
-    "URLContext {",
-    `    href: ${formatValue(context.href)},`,
-    `    protocol_end: ${context.protocol_end},`,
-    `    username_end: ${context.username_end},`,
-    `    host_start: ${context.host_start},`,
-    `    host_end: ${context.host_end},`,
-    `    pathname_start: ${context.pathname_start},`,
-    `    search_start: ${context.search_start},`,
-    `    hash_start: ${context.hash_start},`,
-    `    port: ${portValue},`,
-    `    scheme_type: ${context.scheme_type},`,
-    "    [hasPort]: [Getter],",
-    "    [hasSearch]: [Getter],",
-    "    [hasHash]: [Getter]",
-    "  }"
-  ].join("\n");
-}
-function getBlobUrlStore() {
-  const globalRecord = globalThis;
-  const existing = globalRecord[kBlobUrlStore];
-  if (existing instanceof Map) {
-    return existing;
-  }
-  const store = /* @__PURE__ */ new Map();
-  globalRecord[kBlobUrlStore] = store;
-  return store;
-}
-function nextBlobUrlId() {
-  const globalRecord = globalThis;
-  const nextId = typeof globalRecord[kBlobUrlCounter] === "number" ? globalRecord[kBlobUrlCounter] : 1;
-  globalRecord[kBlobUrlCounter] = nextId + 1;
-  return nextId;
-}
-var URLSearchParamsIterator = class _URLSearchParamsIterator {
-  constructor(values) {
-    searchParamsIteratorBrand.add(this);
-    searchParamsIteratorState.set(this, { values, index: 0 });
-  }
-  next() {
-    assertUrlSearchParamsIteratorReceiver(this);
-    const state = searchParamsIteratorState.get(this);
-    if (state.index >= state.values.length) {
-      return { value: void 0, done: true };
-    }
-    const value = state.values[state.index];
-    state.index += 1;
-    return { value, done: false };
-  }
-  [inspectCustomSymbol](depth, options, inspect) {
-    assertUrlSearchParamsIteratorReceiver(this);
-    if (depth < 0) {
-      return "[Object]";
-    }
-    const state = searchParamsIteratorState.get(this);
-    const formatValue = typeof inspect === "function" ? (value) => inspect(value, options) : (value) => JSON.stringify(value);
-    const remaining = state.values.slice(state.index).map((value) => formatValue(value));
-    return `URLSearchParams Iterator ${createCollectionBody(remaining, options, "{  }")}`;
-  }
-  get [toStringTagSymbol]() {
-    if (this !== _URLSearchParamsIterator.prototype) {
-      assertUrlSearchParamsIteratorReceiver(this);
-    }
-    return "URLSearchParams Iterator";
-  }
-};
-Object.defineProperties(URLSearchParamsIterator.prototype, {
-  next: {
-    value: URLSearchParamsIterator.prototype.next,
-    writable: true,
-    configurable: true,
-    enumerable: true
-  },
-  [Symbol.iterator]: {
-    value: function iterator() {
-      assertUrlSearchParamsIteratorReceiver(this);
-      return this;
-    },
-    writable: true,
-    configurable: true,
-    enumerable: false
-  },
-  [inspectCustomSymbol]: {
-    value: URLSearchParamsIterator.prototype[inspectCustomSymbol],
-    writable: true,
-    configurable: true,
-    enumerable: false
-  },
-  [toStringTagSymbol]: {
-    get: Object.getOwnPropertyDescriptor(URLSearchParamsIterator.prototype, toStringTagSymbol)?.get,
-    configurable: true,
-    enumerable: false
-  }
-});
-Object.defineProperty(
-  Object.getOwnPropertyDescriptor(URLSearchParamsIterator.prototype, Symbol.iterator)?.value,
-  "name",
-  {
-    value: "entries",
-    configurable: true
-  }
-);
-var URLSearchParams = class _URLSearchParams {
-  constructor(init) {
-    searchParamsBrand.add(this);
-    const normalized = normalizeSearchParamsInit(init);
-    if (normalized && typeof normalized === "object" && kLinkedSearchParams in normalized) {
-      searchParamsState.set(this, {
-        getImpl: normalized[kLinkedSearchParams]
-      });
-      return;
-    }
-    const impl = createStandaloneSearchParams(
-      normalized
-    );
-    searchParamsState.set(this, { getImpl: () => impl });
-  }
-  append(name, value) {
-    assertUrlSearchParamsReceiver(this);
-    if (arguments.length < 2) {
-      throw createMissingArgsError('The "name" and "value" arguments must be specified');
-    }
-    getUrlSearchParamsImpl(this).append(toNodeUSVString(name), toNodeUSVString(value));
-  }
-  delete(name) {
-    assertUrlSearchParamsReceiver(this);
-    if (arguments.length < 1) {
-      throw createMissingArgsError('The "name" argument must be specified');
-    }
-    getUrlSearchParamsImpl(this).delete(toNodeUSVString(name));
-  }
-  get(name) {
-    assertUrlSearchParamsReceiver(this);
-    if (arguments.length < 1) {
-      throw createMissingArgsError('The "name" argument must be specified');
-    }
-    return getUrlSearchParamsImpl(this).get(toNodeUSVString(name));
-  }
-  getAll(name) {
-    assertUrlSearchParamsReceiver(this);
-    if (arguments.length < 1) {
-      throw createMissingArgsError('The "name" argument must be specified');
-    }
-    return getUrlSearchParamsImpl(this).getAll(toNodeUSVString(name));
-  }
-  has(name) {
-    assertUrlSearchParamsReceiver(this);
-    if (arguments.length < 1) {
-      throw createMissingArgsError('The "name" argument must be specified');
-    }
-    return getUrlSearchParamsImpl(this).has(toNodeUSVString(name));
-  }
-  set(name, value) {
-    assertUrlSearchParamsReceiver(this);
-    if (arguments.length < 2) {
-      throw createMissingArgsError('The "name" and "value" arguments must be specified');
-    }
-    getUrlSearchParamsImpl(this).set(toNodeUSVString(name), toNodeUSVString(value));
-  }
-  sort() {
-    assertUrlSearchParamsReceiver(this);
-    getUrlSearchParamsImpl(this).sort();
-  }
-  entries() {
-    assertUrlSearchParamsReceiver(this);
-    return new URLSearchParamsIterator(Array.from(getUrlSearchParamsImpl(this)));
-  }
-  keys() {
-    assertUrlSearchParamsReceiver(this);
-    return new URLSearchParamsIterator(Array.from(getUrlSearchParamsImpl(this).keys()));
-  }
-  values() {
-    assertUrlSearchParamsReceiver(this);
-    return new URLSearchParamsIterator(Array.from(getUrlSearchParamsImpl(this).values()));
-  }
-  forEach(callback, thisArg) {
-    assertUrlSearchParamsReceiver(this);
-    if (typeof callback !== "function") {
-      throw createNodeTypeError(
-        'The "callback" argument must be of type function. Received ' + (callback === void 0 ? "undefined" : typeof callback),
-        "ERR_INVALID_ARG_TYPE"
-      );
-    }
-    for (const [key, value] of getUrlSearchParamsImpl(this)) {
-      callback.call(thisArg, value, key, this);
-    }
-  }
-  toString() {
-    assertUrlSearchParamsReceiver(this);
-    return getUrlSearchParamsImpl(this).toString();
-  }
-  get size() {
-    assertUrlSearchParamsReceiver(this);
-    return countSearchParams(getUrlSearchParamsImpl(this));
-  }
-  [inspectCustomSymbol](depth, options, inspect) {
-    assertUrlSearchParamsReceiver(this);
-    if (depth < 0) {
-      return "[Object]";
-    }
-    const formatValue = typeof inspect === "function" ? (value) => inspect(value, options) : (value) => JSON.stringify(value);
-    const items = Array.from(
-      getUrlSearchParamsImpl(this)
-    ).map(
-      ([key, value]) => `${formatValue(key)} => ${formatValue(value)}`
-    );
-    return `URLSearchParams ${createCollectionBody(items, options, "{}")}`;
-  }
-  get [toStringTagSymbol]() {
-    if (this !== _URLSearchParams.prototype) {
-      assertUrlSearchParamsReceiver(this);
-    }
-    return URL_SEARCH_PARAMS_TYPE;
-  }
-};
-for (const name of SEARCH_PARAM_METHOD_NAMES) {
-  Object.defineProperty(URLSearchParams.prototype, name, {
-    value: URLSearchParams.prototype[name],
-    writable: true,
-    configurable: true,
-    enumerable: true
-  });
-}
-for (const name of SEARCH_PARAM_PAIR_METHOD_NAMES) {
-  Object.defineProperty(URLSearchParams.prototype, name, {
-    value: URLSearchParams.prototype[name],
-    writable: true,
-    configurable: true,
-    enumerable: true
-  });
-}
-for (const name of ["sort", "entries", "forEach", "keys", "values", "toString"]) {
-  Object.defineProperty(URLSearchParams.prototype, name, {
-    value: URLSearchParams.prototype[name],
-    writable: true,
-    configurable: true,
-    enumerable: true
-  });
-}
-Object.defineProperties(URLSearchParams.prototype, {
-  size: {
-    get: Object.getOwnPropertyDescriptor(URLSearchParams.prototype, "size")?.get,
-    configurable: true,
-    enumerable: true
-  },
-  [Symbol.iterator]: {
-    value: URLSearchParams.prototype.entries,
-    writable: true,
-    configurable: true,
-    enumerable: false
-  },
-  [inspectCustomSymbol]: {
-    value: URLSearchParams.prototype[inspectCustomSymbol],
-    writable: true,
-    configurable: true,
-    enumerable: false
-  },
-  [toStringTagSymbol]: {
-    get: Object.getOwnPropertyDescriptor(URLSearchParams.prototype, toStringTagSymbol)?.get,
-    configurable: true,
-    enumerable: false
-  }
-});
-function canUseNativeUrlImplementation(candidate) {
-  if (typeof candidate !== "function" || candidate.__secureExecBootstrapStub === true) {
-    return false;
-  }
-  try {
-    return String(new candidate("./child.mjs", "file:///root/base/entry.mjs").href) === "file:///root/base/child.mjs";
-  } catch {
-    return false;
-  }
-}
-function ensureTrailingSlashForFilePath(pathname) {
-  return pathname.endsWith("/") ? pathname : `${pathname}/`;
-}
-function normalizeRelativeFileUrlInput(input, base) {
-  const rawInput = String(input ?? "");
-  if (!rawInput.startsWith("file:")) {
-    return { input: rawInput, base };
-  }
-  const relativeMatch = /^file:(\.\.?(?:\/[^?#]*)?)([?#].*)?$/.exec(rawInput);
-  if (!relativeMatch) {
-    return { input: rawInput, base };
-  }
-  const relativePath = relativeMatch[1];
-  const suffix = relativeMatch[2] ?? "";
-  let baseHref = typeof base === "undefined" ? "file:///" : String(base);
-  try {
-    const parsedBase = new globalThis.URL(baseHref);
-    if (parsedBase.protocol !== "file:") {
-      return { input: rawInput, base };
-    }
-    let basePathname = parsedBase.pathname || "/";
-    if (!basePathname.startsWith("/")) {
-      basePathname = `/${basePathname}`;
-    }
-    const baseDirectory = basePathname.endsWith("/") ? basePathname : builtinPathStdlibModule.posix.dirname(basePathname);
-    const resolvedPath = builtinPathStdlibModule.posix.resolve(baseDirectory, relativePath);
-    const needsTrailingSlash = relativePath === "." || relativePath === ".." || relativePath.endsWith("/");
-    const normalizedPath = needsTrailingSlash ? ensureTrailingSlashForFilePath(resolvedPath) : resolvedPath;
-    return {
-      input: `file://${normalizedPath}${suffix}`,
-      base: void 0
-    };
-  } catch {
-    return { input: rawInput, base };
-  }
-}
-var nativeUrlCandidate = typeof urlStdlibModuleNs?.URL === "function" ? urlStdlibModuleNs.URL : typeof urlStdlibModuleNs?.default?.URL === "function" ? urlStdlibModuleNs.default.URL : globalThis.URL;
-var NativeURL = canUseNativeUrlImplementation(nativeUrlCandidate) ? nativeUrlCandidate : class URL {
-  constructor(url, base) {
-    const raw = String(url ?? "");
-    const hasScheme = /^[a-zA-Z][a-zA-Z\d+\-.]*:/.test(raw);
-    if (!hasScheme && typeof base === "undefined") {
-      throw new TypeError(`Invalid URL: ${raw}`);
-    }
-    let full = raw;
-    if (!hasScheme) {
-      const baseUrl = new URL(base);
-      if (baseUrl.protocol === "file:") {
-        const queryIndex2 = raw.indexOf("?");
-        const hashIndex2 = raw.indexOf("#");
-        const searchStart2 = queryIndex2 === -1 ? raw.length : queryIndex2;
-        const hashStart2 = hashIndex2 === -1 ? raw.length : hashIndex2;
-        const pathEnd2 = Math.min(searchStart2, hashStart2);
-        const relativePath = raw.slice(0, pathEnd2);
-        const suffix = raw.slice(pathEnd2);
-        let basePathname = baseUrl.pathname || "/";
-        if (!basePathname.startsWith("/")) {
-          basePathname = `/${basePathname}`;
-        }
-        const baseDirectory = basePathname.endsWith("/") ? basePathname : builtinPathStdlibModule.posix.dirname(basePathname);
-        let resolvedPath = builtinPathStdlibModule.posix.resolve(baseDirectory, relativePath);
-        if ((relativePath.endsWith("/") || /(^|\/)\.\.?$/.test(relativePath)) && !resolvedPath.endsWith("/")) {
-          resolvedPath += "/";
-        }
-        full = `file://${resolvedPath}${suffix}`;
-      } else {
-        const baseHref = String(baseUrl.href);
-        full = baseHref.replace(/\/[^/]*$/, "/") + raw;
-      }
-    }
-    const queryIndex = full.indexOf("?");
-    const hashIndex = full.indexOf("#");
-    const searchStart = queryIndex === -1 ? full.length : queryIndex;
-    const hashStart = hashIndex === -1 ? full.length : hashIndex;
-    const pathEnd = Math.min(searchStart, hashStart);
-    const searchValue = queryIndex === -1 ? "" : full.slice(queryIndex, hashStart);
-    const hashValue = hashIndex === -1 ? "" : full.slice(hashIndex);
-    if (full.startsWith("file:")) {
-      let pathname = full.slice(5, pathEnd);
-      if (pathname.startsWith("//")) {
-        const authorityMatch = /^\/\/[^/]*(.*)$/.exec(pathname);
-        pathname = authorityMatch?.[1] || "/";
-      }
-      if (!pathname.startsWith("/")) {
-        pathname = `/${pathname}`;
-      }
-      this.protocol = "file:";
-      this.hostname = "";
-      this.port = "";
-      this.pathname = pathname || "/";
-      this.search = searchValue;
-      this.hash = hashValue;
-      this.host = "";
-      this.href = `file://${this.pathname}${this.search}${this.hash}`;
-      this.origin = "null";
-      this.searchParams = new URLSearchParams(this.search);
-      const syncHrefFromSearchParams = () => {
-        const query = this.searchParams.toString();
-        this.search = query ? `?${query}` : "";
-        this.href = `file://${this.pathname}${this.search}${this.hash}`;
-      };
-      for (const method of ["append", "delete", "set", "sort"]) {
-        const original = this.searchParams[method]?.bind(this.searchParams);
-        if (!original) {
-          continue;
-        }
-        this.searchParams[method] = (...args) => {
-          const result = original(...args);
-          syncHrefFromSearchParams();
-          return result;
-        };
-      }
-      return;
-    }
-    const match = full.match(/^(\w+:)\/\/([^/:?#]+)(:\d+)?(.*)$/);
-    this.protocol = match?.[1] || "";
-    this.hostname = match?.[2] || "";
-    this.port = (match?.[3] || "").slice(1);
-    this.pathname = (match?.[4] || "/").split("?")[0].split("#")[0] || "/";
-    this.search = full.includes("?") ? "?" + full.split("?")[1].split("#")[0] : "";
-    this.hash = full.includes("#") ? "#" + full.split("#")[1] : "";
-    this.host = this.hostname + (this.port ? ":" + this.port : "");
-    this.href = this.protocol + "//" + this.host + this.pathname + this.search + this.hash;
-    this.origin = this.protocol + "//" + this.host;
-    this.searchParams = new URLSearchParams(this.search);
-    const syncHrefFromSearchParams = () => {
-      const query = this.searchParams.toString();
-      this.search = query ? `?${query}` : "";
-      this.href = this.protocol + "//" + this.host + this.pathname + this.search + this.hash;
-    };
-    for (const method of ["append", "delete", "set", "sort"]) {
-      const original = this.searchParams[method]?.bind(this.searchParams);
-      if (!original) {
-        continue;
-      }
-      this.searchParams[method] = (...args) => {
-        const result = original(...args);
-        syncHrefFromSearchParams();
-        return result;
-      };
-    }
-  }
-  toString() {
-    return this.href;
-  }
-};
-var URL2 = class _URL {
-  #impl;
-  #searchParams;
-  constructor(input, base) {
-    if (arguments.length < 1) {
-      throw createMissingArgsError('The "url" argument must be specified');
-    }
-    const normalizedArgs = normalizeRelativeFileUrlInput(
-      toNodeUSVString(input),
-      arguments.length >= 2 ? toNodeUSVString(base) : void 0
-    );
-    try {
-      this.#impl = normalizedArgs.base !== void 0 ? new NativeURL(normalizedArgs.input, normalizedArgs.base) : new NativeURL(normalizedArgs.input);
-    } catch {
-      throw createInvalidUrlError();
-    }
-  }
-  static canParse(input, base) {
-    if (arguments.length < 1) {
-      throw createMissingArgsError('The "url" argument must be specified');
-    }
-    try {
-      if (arguments.length >= 2) {
-        new _URL(input, base);
-      } else {
-        new _URL(input);
-      }
-      return true;
-    } catch {
-      return false;
-    }
-  }
-  static createObjectURL(obj) {
-    if (typeof Blob === "undefined" || !(obj instanceof Blob)) {
-      throw createNodeTypeError(
-        'The "obj" argument must be an instance of Blob. Received ' + (obj === null ? "null" : typeof obj),
-        "ERR_INVALID_ARG_TYPE"
-      );
-    }
-    const id = `blob:nodedata:${nextBlobUrlId()}`;
-    getBlobUrlStore().set(id, obj);
-    return id;
-  }
-  static revokeObjectURL(url) {
-    if (arguments.length < 1) {
-      throw createMissingArgsError('The "url" argument must be specified');
-    }
-    if (typeof url !== "string") {
-      return;
-    }
-    getBlobUrlStore().delete(url);
-  }
-  get href() {
-    if (!(this instanceof _URL)) {
-      throw createUrlReceiverTypeError();
-    }
-    return this.#impl.href;
-  }
-  set href(value) {
-    this.#impl.href = toNodeUSVString(value);
-  }
-  get origin() {
-    return this.#impl.origin;
-  }
-  get protocol() {
-    return this.#impl.protocol;
-  }
-  set protocol(value) {
-    this.#impl.protocol = toNodeUSVString(value);
-  }
-  get username() {
-    return this.#impl.username;
-  }
-  set username(value) {
-    this.#impl.username = toNodeUSVString(value);
-  }
-  get password() {
-    return this.#impl.password;
-  }
-  set password(value) {
-    this.#impl.password = toNodeUSVString(value);
-  }
-  get host() {
-    return this.#impl.host;
-  }
-  set host(value) {
-    this.#impl.host = toNodeUSVString(value);
-  }
-  get hostname() {
-    return this.#impl.hostname;
-  }
-  set hostname(value) {
-    this.#impl.hostname = toNodeUSVString(value);
-  }
-  get port() {
-    return this.#impl.port;
-  }
-  set port(value) {
-    this.#impl.port = toNodeUSVString(value);
-  }
-  get pathname() {
-    return this.#impl.pathname;
-  }
-  set pathname(value) {
-    this.#impl.pathname = toNodeUSVString(value);
-  }
-  get search() {
-    if (!(this instanceof _URL)) {
-      throw createUrlReceiverTypeError();
-    }
-    return this.#impl.search;
-  }
-  set search(value) {
-    this.#impl.search = toNodeUSVString(value);
-  }
-  get searchParams() {
-    if (!this.#searchParams) {
-      this.#searchParams = new URLSearchParams({
-        [kLinkedSearchParams]: () => this.#impl.searchParams
-      });
-    }
-    return this.#searchParams;
-  }
-  get hash() {
-    return this.#impl.hash;
-  }
-  set hash(value) {
-    this.#impl.hash = toNodeUSVString(value);
-  }
-  toString() {
-    if (!(this instanceof _URL)) {
-      throw createUrlReceiverTypeError();
-    }
-    return this.#impl.href;
-  }
-  toJSON() {
-    if (!(this instanceof _URL)) {
-      throw createUrlReceiverTypeError();
-    }
-    return this.#impl.href;
-  }
-  [inspectCustomSymbol](depth, options, inspect) {
-    const inspectName = this.constructor === _URL ? "URL" : this.constructor.name;
-    if (depth < 0) {
-      return `${inspectName} {}`;
-    }
-    const formatValue = typeof inspect === "function" ? (value) => inspect(value, options) : (value) => JSON.stringify(value);
-    const lines = [
-      `${inspectName} {`,
-      `  href: ${formatValue(this.href)},`,
-      `  origin: ${formatValue(this.origin)},`,
-      `  protocol: ${formatValue(this.protocol)},`,
-      `  username: ${formatValue(this.username)},`,
-      `  password: ${formatValue(this.password)},`,
-      `  host: ${formatValue(this.host)},`,
-      `  hostname: ${formatValue(this.hostname)},`,
-      `  port: ${formatValue(this.port)},`,
-      `  pathname: ${formatValue(this.pathname)},`,
-      `  search: ${formatValue(this.search)},`,
-      `  searchParams: ${this.searchParams[inspectCustomSymbol](depth - 1, void 0, inspect)},`,
-      `  hash: ${formatValue(this.hash)}`
-    ];
-    if (options?.showHidden) {
-      lines[lines.length - 1] += ",";
-      lines.push(`  [Symbol(context)]: ${formatUrlContext(this, inspect, options)}`);
-    }
-    lines.push("}");
-    return lines.join("\n");
-  }
-  get [toStringTagSymbol]() {
-    return "URL";
-  }
-};
-for (const name of ["toString", "toJSON"]) {
-  Object.defineProperty(URL2.prototype, name, {
-    value: URL2.prototype[name],
-    writable: true,
-    configurable: true,
-    enumerable: true
-  });
-}
-for (const name of [
-  "href",
-  "protocol",
-  "username",
-  "password",
-  "host",
-  "hostname",
-  "port",
-  "pathname",
-  "search",
-  "hash",
-  "origin",
-  "searchParams"
-]) {
-  const descriptor = Object.getOwnPropertyDescriptor(URL2.prototype, name);
-  if (!descriptor) {
-    continue;
-  }
-  descriptor.enumerable = true;
-  Object.defineProperty(URL2.prototype, name, descriptor);
-}
-Object.defineProperties(URL2.prototype, {
-  [inspectCustomSymbol]: {
-    value: URL2.prototype[inspectCustomSymbol],
-    writable: true,
-    configurable: true,
-    enumerable: false
-  },
-  [toStringTagSymbol]: {
-    get: Object.getOwnPropertyDescriptor(URL2.prototype, toStringTagSymbol)?.get,
-    configurable: true,
-    enumerable: false
-  }
-});
-for (const name of ["canParse", "createObjectURL", "revokeObjectURL"]) {
-  Object.defineProperty(URL2, name, {
-    value: URL2[name],
-    writable: true,
-    configurable: true,
-    enumerable: true
-  });
-}
-function installWhatwgUrlGlobals(target = globalThis) {
-  Object.defineProperty(target, "URL", {
-    value: URL2,
-    writable: true,
-    configurable: true,
-    enumerable: false
-  });
-  Object.defineProperty(target, "URLSearchParams", {
-    value: URLSearchParams,
-    writable: true,
-    configurable: true,
-    enumerable: false
-  });
-}
-export { inspectCustomSymbol, toStringTagSymbol, ERR_INVALID_THIS, ERR_MISSING_ARGS, ERR_INVALID_URL, ERR_ARG_NOT_ITERABLE, ERR_INVALID_TUPLE, URL_SEARCH_PARAMS_TYPE, kLinkedSearchParams, kBlobUrlStore, kBlobUrlCounter, SEARCH_PARAM_METHOD_NAMES, SEARCH_PARAM_PAIR_METHOD_NAMES, URL_SCHEME_TYPES, searchParamsBrand, searchParamsState, searchParamsIteratorBrand, searchParamsIteratorState, createNodeTypeError, createInvalidUrlError, createUrlReceiverTypeError, createMissingArgsError, createIterableTypeError, createTupleTypeError, createSymbolStringError, toNodeString, toWellFormedString, toNodeUSVString, assertUrlSearchParamsReceiver, assertUrlSearchParamsIteratorReceiver, getUrlSearchParamsImpl, countSearchParams, isAsciiHexCodeUnit, decodeAsciiHexCodeUnit, appendUtf8CodePoint, decodeFormUrlencodedComponent, serializeFormUrlencodedComponent, compareCodeUnitStrings, normalizeSearchParamsInit, NativeURLSearchParams, createStandaloneSearchParams, createCollectionBody, createUrlContext, formatUrlContext, getBlobUrlStore, nextBlobUrlId, URLSearchParamsIterator, URLSearchParams, canUseNativeUrlImplementation, ensureTrailingSlashForFilePath, normalizeRelativeFileUrlInput, nativeUrlCandidate, NativeURL, URL2, installWhatwgUrlGlobals };
diff --git a/packages/build-tools/bridge-src/global-exposure.ts b/packages/build-tools/bridge-src/global-exposure.ts
deleted file mode 100644
index a76be74fe..000000000
--- a/packages/build-tools/bridge-src/global-exposure.ts
+++ /dev/null
@@ -1,1248 +0,0 @@
-// .agent/recovery/secure-exec/shared/global-exposure.ts
-var NODE_CUSTOM_GLOBAL_INVENTORY = [
-  {
-    name: "_processConfig",
-    classification: "hardened",
-    rationale: "Bridge bootstrap configuration must not be replaced by sandbox code."
-  },
-  {
-    name: "__secureExecHrNowUs",
-    classification: "hardened",
-    rationale: "High-resolution monotonic clock, only installed when high_resolution_time opt-in is set."
-  },
-  {
-    name: "process.cpuUsage",
-    classification: "hardened",
-    rationale: "Host process CPU usage bridge reference."
-  },
-  {
-    name: "process.memoryUsage",
-    classification: "hardened",
-    rationale: "Host process memory usage bridge reference."
-  },
-  {
-    name: "process.resourceUsage",
-    classification: "hardened",
-    rationale: "Host process resource usage bridge reference."
-  },
-  {
-    name: "process.versions",
-    classification: "hardened",
-    rationale: "Host process versions bridge reference."
-  },
-  {
-    name: "_processKill",
-    classification: "hardened",
-    rationale: "Host process signal bridge reference."
-  },
-  {
-    name: "_processSignalState",
-    classification: "hardened",
-    rationale: "Host process signal-listener state bridge reference."
-  },
-  {
-    name: "_osConfig",
-    classification: "hardened",
-    rationale: "Bridge bootstrap configuration must not be replaced by sandbox code."
-  },
-  {
-    name: "bridge",
-    classification: "hardened",
-    rationale: "Bridge export object is runtime-owned control-plane state."
-  },
-  {
-    name: "_registerHandle",
-    classification: "hardened",
-    rationale: "Active-handle lifecycle hook controls runtime completion semantics."
-  },
-  {
-    name: "_unregisterHandle",
-    classification: "hardened",
-    rationale: "Active-handle lifecycle hook controls runtime completion semantics."
-  },
-  {
-    name: "_waitForActiveHandles",
-    classification: "hardened",
-    rationale: "Active-handle lifecycle hook controls runtime completion semantics."
-  },
-  {
-    name: "_getActiveHandles",
-    classification: "hardened",
-    rationale: "Bridge debug hook should not be replaced by sandbox code."
-  },
-  {
-    name: "_childProcessDispatch",
-    classification: "hardened",
-    rationale: "Host-to-sandbox child-process callback dispatch entrypoint."
-  },
-  {
-    name: "_childProcessModule",
-    classification: "hardened",
-    rationale: "Bridge-owned child_process module handle for require resolution."
-  },
-  {
-    name: "_osModule",
-    classification: "hardened",
-    rationale: "Bridge-owned os module handle for require resolution."
-  },
-  {
-    name: "_moduleModule",
-    classification: "hardened",
-    rationale: "Bridge-owned module module handle for require resolution."
-  },
-  {
-    name: "_httpModule",
-    classification: "hardened",
-    rationale: "Bridge-owned http module handle for require resolution."
-  },
-  {
-    name: "_httpsModule",
-    classification: "hardened",
-    rationale: "Bridge-owned https module handle for require resolution."
-  },
-  {
-    name: "_http2Module",
-    classification: "hardened",
-    rationale: "Bridge-owned http2 module handle for require resolution."
-  },
-  {
-    name: "_dnsModule",
-    classification: "hardened",
-    rationale: "Bridge-owned dns module handle for require resolution."
-  },
-  {
-    name: "_dgramModule",
-    classification: "hardened",
-    rationale: "Bridge-owned dgram module handle for require resolution."
-  },
-  {
-    name: "_netModule",
-    classification: "hardened",
-    rationale: "Bridge-owned net module handle for require resolution."
-  },
-  {
-    name: "_tlsModule",
-    classification: "hardened",
-    rationale: "Bridge-owned tls module handle for require resolution."
-  },
-  {
-    name: "_vmCreateContext",
-    classification: "hardened",
-    rationale: "Host vm context creation bridge reference."
-  },
-  {
-    name: "_vmRunInContext",
-    classification: "hardened",
-    rationale: "Host vm context execution bridge reference."
-  },
-  {
-    name: "_vmRunInThisContext",
-    classification: "hardened",
-    rationale: "Host vm current-context execution bridge reference."
-  },
-  {
-    name: "_netSocketDispatch",
-    classification: "hardened",
-    rationale: "Host-to-sandbox net socket event dispatch entrypoint."
-  },
-  {
-    name: "_dgramSocketDispatch",
-    classification: "hardened",
-    rationale: "Host-to-sandbox dgram socket event dispatch entrypoint."
-  },
-  {
-    name: "_http2RetainDispatch",
-    classification: "hardened",
-    rationale: "Host-to-sandbox HTTP/2 retain wake dispatch entrypoint."
-  },
-  {
-    name: "_httpServerDispatch",
-    classification: "hardened",
-    rationale: "Host-to-sandbox HTTP server dispatch entrypoint."
-  },
-  {
-    name: "_httpServerUpgradeDispatch",
-    classification: "hardened",
-    rationale: "Host-to-sandbox HTTP upgrade dispatch entrypoint."
-  },
-  {
-    name: "_httpServerConnectDispatch",
-    classification: "hardened",
-    rationale: "Host-to-sandbox HTTP CONNECT dispatch entrypoint."
-  },
-  {
-    name: "_http2Dispatch",
-    classification: "hardened",
-    rationale: "Host-to-sandbox HTTP/2 event dispatch entrypoint."
-  },
-  {
-    name: "_timerDispatch",
-    classification: "hardened",
-    rationale: "Host-to-sandbox timer callback dispatch entrypoint."
-  },
-  {
-    name: "_drainImmediates",
-    classification: "hardened",
-    rationale: "Runtime-owned setImmediate queue drain entrypoint."
-  },
-  {
-    name: "_getPendingImmediateCount",
-    classification: "hardened",
-    rationale: "Runtime-owned setImmediate pending-work counter."
-  },
-  {
-    name: "_upgradeSocketData",
-    classification: "hardened",
-    rationale: "Host-to-sandbox HTTP upgrade socket data dispatch entrypoint."
-  },
-  {
-    name: "_upgradeSocketEnd",
-    classification: "hardened",
-    rationale: "Host-to-sandbox HTTP upgrade socket close dispatch entrypoint."
-  },
-  {
-    name: "ProcessExitError",
-    classification: "hardened",
-    rationale: "Runtime-owned process-exit control-path error class."
-  },
-  {
-    name: "_log",
-    classification: "hardened",
-    rationale: "Host console capture reference consumed by sandbox console shim."
-  },
-  {
-    name: "_error",
-    classification: "hardened",
-    rationale: "Host console capture reference consumed by sandbox console shim."
-  },
-  {
-    name: "_pythonRpc",
-    classification: "hardened",
-    rationale: "Host Python VFS RPC bridge reference."
-  },
-  {
-    name: "_pythonStdinRead",
-    classification: "hardened",
-    rationale: "Host Python stdin bridge reference."
-  },
-  {
-    name: "_loadPolyfill",
-    classification: "hardened",
-    rationale: "Host module-loading bridge reference."
-  },
-  {
-    name: "_resolveModule",
-    classification: "hardened",
-    rationale: "Host module-resolution bridge reference."
-  },
-  {
-    name: "_loadFile",
-    classification: "hardened",
-    rationale: "Host file-loading bridge reference."
-  },
-  {
-    name: "_resolveModuleSync",
-    classification: "hardened",
-    rationale: "Host synchronous module-resolution bridge reference."
-  },
-  {
-    name: "_loadFileSync",
-    classification: "hardened",
-    rationale: "Host synchronous file-loading bridge reference."
-  },
-  {
-    name: "_moduleFormat",
-    classification: "hardened",
-    rationale: "Host module-format bridge reference used to enforce CommonJS and ESM boundaries."
-  },
-  {
-    name: "_scheduleTimer",
-    classification: "hardened",
-    rationale: "Host timer bridge reference used by process timers."
-  },
-  {
-    name: "_cryptoRandomFill",
-    classification: "hardened",
-    rationale: "Host entropy bridge reference for crypto.getRandomValues."
-  },
-  {
-    name: "_cryptoRandomUUID",
-    classification: "hardened",
-    rationale: "Host entropy bridge reference for crypto.randomUUID."
-  },
-  {
-    name: "_cryptoHashDigest",
-    classification: "hardened",
-    rationale: "Host crypto digest bridge reference."
-  },
-  {
-    name: "_cryptoHmacDigest",
-    classification: "hardened",
-    rationale: "Host crypto HMAC bridge reference."
-  },
-  {
-    name: "_cryptoPbkdf2",
-    classification: "hardened",
-    rationale: "Host crypto PBKDF2 bridge reference."
-  },
-  {
-    name: "_cryptoScrypt",
-    classification: "hardened",
-    rationale: "Host crypto scrypt bridge reference."
-  },
-  {
-    name: "_cryptoCipheriv",
-    classification: "hardened",
-    rationale: "Host crypto cipher bridge reference."
-  },
-  {
-    name: "_cryptoDecipheriv",
-    classification: "hardened",
-    rationale: "Host crypto decipher bridge reference."
-  },
-  {
-    name: "_cryptoCipherivCreate",
-    classification: "hardened",
-    rationale: "Host streaming cipher bridge reference."
-  },
-  {
-    name: "_cryptoCipherivUpdate",
-    classification: "hardened",
-    rationale: "Host streaming cipher update bridge reference."
-  },
-  {
-    name: "_cryptoCipherivFinal",
-    classification: "hardened",
-    rationale: "Host streaming cipher finalization bridge reference."
-  },
-  {
-    name: "_cryptoSign",
-    classification: "hardened",
-    rationale: "Host crypto sign bridge reference."
-  },
-  {
-    name: "_cryptoVerify",
-    classification: "hardened",
-    rationale: "Host crypto verify bridge reference."
-  },
-  {
-    name: "_cryptoAsymmetricOp",
-    classification: "hardened",
-    rationale: "Host asymmetric crypto operation bridge reference."
-  },
-  {
-    name: "_cryptoCreateKeyObject",
-    classification: "hardened",
-    rationale: "Host asymmetric key import bridge reference."
-  },
-  {
-    name: "_cryptoGenerateKeyPairSync",
-    classification: "hardened",
-    rationale: "Host crypto key-pair generation bridge reference."
-  },
-  {
-    name: "_cryptoGenerateKeySync",
-    classification: "hardened",
-    rationale: "Host symmetric crypto key generation bridge reference."
-  },
-  {
-    name: "_cryptoGeneratePrimeSync",
-    classification: "hardened",
-    rationale: "Host prime generation bridge reference."
-  },
-  {
-    name: "_cryptoDiffieHellman",
-    classification: "hardened",
-    rationale: "Host stateless Diffie-Hellman bridge reference."
-  },
-  {
-    name: "_cryptoDiffieHellmanGroup",
-    classification: "hardened",
-    rationale: "Host Diffie-Hellman group bridge reference."
-  },
-  {
-    name: "_cryptoDiffieHellmanSessionCreate",
-    classification: "hardened",
-    rationale: "Host Diffie-Hellman/ECDH session creation bridge reference."
-  },
-  {
-    name: "_cryptoDiffieHellmanSessionCall",
-    classification: "hardened",
-    rationale: "Host Diffie-Hellman/ECDH session method bridge reference."
-  },
-  {
-    name: "_cryptoDiffieHellmanSessionDestroy",
-    classification: "hardened",
-    rationale: "Host Diffie-Hellman/ECDH session release bridge reference."
-  },
-  {
-    name: "_cryptoSubtle",
-    classification: "hardened",
-    rationale: "Host WebCrypto subtle bridge reference."
-  },
-  {
-    name: "_benchNoop",
-    classification: "hardened",
-    rationale: "Benchmark-only sync bridge diagnostic."
-  },
-  {
-    name: "_fsReadFile",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsReadFileAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsWriteFile",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsWriteFileAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsReadFileBinary",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsReadFileBinaryAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsWriteFileBinary",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsWriteFileBinaryRaw",
-    classification: "hardened",
-    rationale: "Raw-byte host filesystem binary write bridge reference."
-  },
-  {
-    name: "_fsWriteFileBinaryAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsReadDir",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsReadDirAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsMkdir",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsMkdirAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsRmdir",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsRmdirAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsExists",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsAccessAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsStat",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsStatAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsUnlink",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsUnlinkAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsRename",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsRenameAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsChmod",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsChmodAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsChown",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsChownAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsLink",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsLinkAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsSymlink",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsSymlinkAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsReadlink",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsReadlinkAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsLstat",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsLstatAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsTruncate",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsTruncateAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsUtimes",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsLutimes",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsUtimesAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "_fsLutimesAsync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "fs.futimesSync",
-    classification: "hardened",
-    rationale: "Host filesystem bridge reference."
-  },
-  {
-    name: "fs.openSync",
-    classification: "hardened",
-    rationale: "Host file-descriptor open bridge reference."
-  },
-  {
-    name: "fs.closeSync",
-    classification: "hardened",
-    rationale: "Host file-descriptor close bridge reference."
-  },
-  {
-    name: "fs.readSync",
-    classification: "hardened",
-    rationale: "Host file-descriptor read bridge reference."
-  },
-  {
-    name: "_fsReadRaw",
-    classification: "hardened",
-    rationale: "Raw-byte host file-descriptor read bridge reference."
-  },
-  {
-    name: "fs.writeSync",
-    classification: "hardened",
-    rationale: "Host file-descriptor write bridge reference."
-  },
-  {
-    name: "_fsWriteRaw",
-    classification: "hardened",
-    rationale: "Raw-byte host file-descriptor write bridge reference."
-  },
-  {
-    name: "_fsWritevRaw",
-    classification: "hardened",
-    rationale: "Raw-byte host file-descriptor vector write bridge reference."
-  },
-  {
-    name: "fs.fstatSync",
-    classification: "hardened",
-    rationale: "Host file-descriptor stat bridge reference."
-  },
-  {
-    name: "_fs",
-    classification: "hardened",
-    rationale: "Bridge filesystem facade consumed by fs polyfill."
-  },
-  {
-    name: "_childProcessSpawnStart",
-    classification: "hardened",
-    rationale: "Host child_process bridge reference."
-  },
-  {
-    name: "_childProcessPoll",
-    classification: "hardened",
-    rationale: "Host child_process bridge reference."
-  },
-  {
-    name: "_childProcessStdinWrite",
-    classification: "hardened",
-    rationale: "Host child_process bridge reference."
-  },
-  {
-    name: "_childProcessStdinClose",
-    classification: "hardened",
-    rationale: "Host child_process bridge reference."
-  },
-  {
-    name: "_childProcessKill",
-    classification: "hardened",
-    rationale: "Host child_process bridge reference."
-  },
-  {
-    name: "_childProcessSpawnSync",
-    classification: "hardened",
-    rationale: "Host child_process bridge reference."
-  },
-  {
-    name: "_benchNetTcpMetricsResetRaw",
-    classification: "hardened",
-    rationale: "Benchmark-only TCP readiness counter reset bridge reference."
-  },
-  {
-    name: "_benchNetTcpMetricsSnapshotRaw",
-    classification: "hardened",
-    rationale: "Benchmark-only TCP readiness counter snapshot bridge reference."
-  },
-  {
-    name: "_networkDnsLookupRaw",
-    classification: "hardened",
-    rationale: "Host network bridge reference."
-  },
-  {
-    name: "_networkDnsLookupSyncRaw",
-    classification: "hardened",
-    rationale: "Host synchronous network lookup bridge reference."
-  },
-  {
-    name: "_networkDnsResolveRaw",
-    classification: "hardened",
-    rationale: "Host network bridge reference."
-  },
-  {
-    name: "_networkHttpServerListenRaw",
-    classification: "hardened",
-    rationale: "Host network bridge reference."
-  },
-  {
-    name: "_networkHttpServerCloseRaw",
-    classification: "hardened",
-    rationale: "Host network bridge reference."
-  },
-  {
-    name: "_networkHttpServerRespondRaw",
-    classification: "hardened",
-    rationale: "Host network bridge reference for sandbox HTTP server responses."
-  },
-  {
-    name: "_networkHttpServerRequestRaw",
-    classification: "hardened",
-    rationale: "Host network bridge reference for sandbox HTTP loopback requests."
-  },
-  {
-    name: "_networkHttpServerWaitRaw",
-    classification: "hardened",
-    rationale: "Host network bridge reference for sandbox HTTP server lifetime tracking."
-  },
-  {
-    name: "_networkHttp2ServerListenRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 server listen bridge reference."
-  },
-  {
-    name: "_networkHttp2ServerCloseRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 server close bridge reference."
-  },
-  {
-    name: "_networkHttp2ServerWaitRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 server lifetime bridge reference."
-  },
-  {
-    name: "_networkHttp2SessionConnectRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 session connect bridge reference."
-  },
-  {
-    name: "_networkHttp2SessionRequestRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 session request bridge reference."
-  },
-  {
-    name: "_networkHttp2SessionSettingsRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 session settings bridge reference."
-  },
-  {
-    name: "_networkHttp2SessionSetLocalWindowSizeRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 session local-window bridge reference."
-  },
-  {
-    name: "_networkHttp2SessionGoawayRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 session GOAWAY bridge reference."
-  },
-  {
-    name: "_networkHttp2SessionCloseRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 session close bridge reference."
-  },
-  {
-    name: "_networkHttp2SessionDestroyRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 session destroy bridge reference."
-  },
-  {
-    name: "_networkHttp2SessionWaitRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 session lifetime bridge reference."
-  },
-  {
-    name: "_networkHttp2ServerPollRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 server event-poll bridge reference."
-  },
-  {
-    name: "_networkHttp2SessionPollRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 session event-poll bridge reference."
-  },
-  {
-    name: "_networkHttp2StreamRespondRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 stream respond bridge reference."
-  },
-  {
-    name: "_networkHttp2StreamPushStreamRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 push stream bridge reference."
-  },
-  {
-    name: "_networkHttp2StreamWriteRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 stream write bridge reference."
-  },
-  {
-    name: "_networkHttp2StreamEndRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 stream end bridge reference."
-  },
-  {
-    name: "_networkHttp2StreamCloseRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 stream close bridge reference."
-  },
-  {
-    name: "_networkHttp2StreamPauseRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 stream pause bridge reference."
-  },
-  {
-    name: "_networkHttp2StreamResumeRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 stream resume bridge reference."
-  },
-  {
-    name: "_networkHttp2StreamRespondWithFileRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 stream respondWithFile bridge reference."
-  },
-  {
-    name: "_networkHttp2ServerRespondRaw",
-    classification: "hardened",
-    rationale: "Host HTTP/2 server-response bridge reference."
-  },
-  {
-    name: "_upgradeSocketWriteRaw",
-    classification: "hardened",
-    rationale: "Host HTTP upgrade socket write bridge reference."
-  },
-  {
-    name: "_upgradeSocketEndRaw",
-    classification: "hardened",
-    rationale: "Host HTTP upgrade socket half-close bridge reference."
-  },
-  {
-    name: "_upgradeSocketDestroyRaw",
-    classification: "hardened",
-    rationale: "Host HTTP upgrade socket destroy bridge reference."
-  },
-  {
-    name: "_netSocketConnectRaw",
-    classification: "hardened",
-    rationale: "Host net socket connect bridge reference."
-  },
-  {
-    name: "_netSocketPollRaw",
-    classification: "hardened",
-    rationale: "Host net socket poll bridge reference."
-  },
-  {
-    name: "_netSocketWaitConnectRaw",
-    classification: "hardened",
-    rationale: "Host net socket connect-wait bridge reference."
-  },
-  {
-    name: "_netSocketReadRaw",
-    classification: "hardened",
-    rationale: "Host net socket read bridge reference."
-  },
-  {
-    name: "_netSocketSetNoDelayRaw",
-    classification: "hardened",
-    rationale: "Host net socket no-delay bridge reference."
-  },
-  {
-    name: "_netSocketSetKeepAliveRaw",
-    classification: "hardened",
-    rationale: "Host net socket keepalive bridge reference."
-  },
-  {
-    name: "_netSocketWriteRaw",
-    classification: "hardened",
-    rationale: "Host net socket write bridge reference."
-  },
-  {
-    name: "_netSocketEndRaw",
-    classification: "hardened",
-    rationale: "Host net socket end bridge reference."
-  },
-  {
-    name: "_netSocketDestroyRaw",
-    classification: "hardened",
-    rationale: "Host net socket destroy bridge reference."
-  },
-  {
-    name: "_netSocketUpgradeTlsRaw",
-    classification: "hardened",
-    rationale: "Host net socket TLS-upgrade bridge reference."
-  },
-  {
-    name: "_netSocketGetTlsClientHelloRaw",
-    classification: "hardened",
-    rationale: "Host loopback TLS client-hello bridge reference."
-  },
-  {
-    name: "_netSocketTlsQueryRaw",
-    classification: "hardened",
-    rationale: "Host TLS socket query bridge reference."
-  },
-  {
-    name: "_tlsGetCiphersRaw",
-    classification: "hardened",
-    rationale: "Host TLS cipher-list bridge reference."
-  },
-  {
-    name: "_netReserveTcpPortRaw",
-    classification: "hardened",
-    rationale: "Host net TCP port reservation bridge reference."
-  },
-  {
-    name: "_netReleaseTcpPortRaw",
-    classification: "hardened",
-    rationale: "Host net TCP port release bridge reference."
-  },
-  {
-    name: "_netServerListenRaw",
-    classification: "hardened",
-    rationale: "Host net server listen bridge reference."
-  },
-  {
-    name: "_netServerAcceptRaw",
-    classification: "hardened",
-    rationale: "Host net server accept bridge reference."
-  },
-  {
-    name: "_netServerCloseRaw",
-    classification: "hardened",
-    rationale: "Host net server close bridge reference."
-  },
-  {
-    name: "_dgramSocketCreateRaw",
-    classification: "hardened",
-    rationale: "Host dgram socket create bridge reference."
-  },
-  {
-    name: "_dgramSocketBindRaw",
-    classification: "hardened",
-    rationale: "Host dgram socket bind bridge reference."
-  },
-  {
-    name: "_dgramSocketRecvRaw",
-    classification: "hardened",
-    rationale: "Host dgram socket receive bridge reference."
-  },
-  {
-    name: "_dgramSocketSendRaw",
-    classification: "hardened",
-    rationale: "Host dgram socket send bridge reference."
-  },
-  {
-    name: "_dgramSocketCloseRaw",
-    classification: "hardened",
-    rationale: "Host dgram socket close bridge reference."
-  },
-  {
-    name: "_dgramSocketAddressRaw",
-    classification: "hardened",
-    rationale: "Host dgram socket address bridge reference."
-  },
-  {
-    name: "_dgramSocketSetBufferSizeRaw",
-    classification: "hardened",
-    rationale: "Host dgram socket buffer-size setter bridge reference."
-  },
-  {
-    name: "_dgramSocketGetBufferSizeRaw",
-    classification: "hardened",
-    rationale: "Host dgram socket buffer-size getter bridge reference."
-  },
-  {
-    name: "_sqliteConstantsRaw",
-    classification: "hardened",
-    rationale: "Host sqlite constants bridge reference."
-  },
-  {
-    name: "_sqliteDatabaseOpenRaw",
-    classification: "hardened",
-    rationale: "Host sqlite database-open bridge reference."
-  },
-  {
-    name: "_sqliteDatabaseCloseRaw",
-    classification: "hardened",
-    rationale: "Host sqlite database-close bridge reference."
-  },
-  {
-    name: "_sqliteDatabaseExecRaw",
-    classification: "hardened",
-    rationale: "Host sqlite exec bridge reference."
-  },
-  {
-    name: "_sqliteDatabaseQueryRaw",
-    classification: "hardened",
-    rationale: "Host sqlite query bridge reference."
-  },
-  {
-    name: "_sqliteDatabasePrepareRaw",
-    classification: "hardened",
-    rationale: "Host sqlite prepare bridge reference."
-  },
-  {
-    name: "_sqliteDatabaseLocationRaw",
-    classification: "hardened",
-    rationale: "Host sqlite location bridge reference."
-  },
-  {
-    name: "_sqliteDatabaseCheckpointRaw",
-    classification: "hardened",
-    rationale: "Host sqlite checkpoint bridge reference."
-  },
-  {
-    name: "_sqliteStatementRunRaw",
-    classification: "hardened",
-    rationale: "Host sqlite statement-run bridge reference."
-  },
-  {
-    name: "_sqliteStatementGetRaw",
-    classification: "hardened",
-    rationale: "Host sqlite statement-get bridge reference."
-  },
-  {
-    name: "_sqliteStatementAllRaw",
-    classification: "hardened",
-    rationale: "Host sqlite statement-all bridge reference."
-  },
-  {
-    name: "_sqliteStatementColumnsRaw",
-    classification: "hardened",
-    rationale: "Host sqlite statement-columns bridge reference."
-  },
-  {
-    name: "_sqliteStatementSetReturnArraysRaw",
-    classification: "hardened",
-    rationale: "Host sqlite statement return-arrays bridge reference."
-  },
-  {
-    name: "_sqliteStatementSetReadBigIntsRaw",
-    classification: "hardened",
-    rationale: "Host sqlite statement read-bigints bridge reference."
-  },
-  {
-    name: "_sqliteStatementSetAllowBareNamedParametersRaw",
-    classification: "hardened",
-    rationale: "Host sqlite bare-named-parameter bridge reference."
-  },
-  {
-    name: "_sqliteStatementSetAllowUnknownNamedParametersRaw",
-    classification: "hardened",
-    rationale: "Host sqlite unknown-named-parameter bridge reference."
-  },
-  {
-    name: "_sqliteStatementFinalizeRaw",
-    classification: "hardened",
-    rationale: "Host sqlite statement-finalize bridge reference."
-  },
-  {
-    name: "_batchResolveModules",
-    classification: "hardened",
-    rationale: "Host bridge for batched module resolution to reduce IPC round-trips."
-  },
-  {
-    name: "_kernelPollRaw",
-    classification: "hardened",
-    rationale: "Host kernel poll bridge reference for multi-fd readiness waits."
-  },
-  {
-    name: "_kernelIsattyRaw",
-    classification: "hardened",
-    rationale: "Host kernel TTY detection bridge reference for WASM terminal commands."
-  },
-  {
-    name: "_kernelTtySizeRaw",
-    classification: "hardened",
-    rationale: "Host kernel TTY size bridge reference for WASM terminal commands."
-  },
-  {
-    name: "_kernelStdioWriteRaw",
-    classification: "hardened",
-    rationale: "Host kernel stdio write bridge reference."
-  },
-  {
-    name: "_kernelStdinReadRaw",
-    classification: "hardened",
-    rationale: "Host synchronous kernel stdin read bridge reference."
-  },
-  {
-    name: "_kernelStdinRead",
-    classification: "hardened",
-    rationale: "Host asynchronous kernel stdin read bridge reference."
-  },
-  {
-    name: "_ptySetRawMode",
-    classification: "hardened",
-    rationale: "Host PTY bridge reference for stdin.setRawMode()."
-  },
-  {
-    name: "require",
-    classification: "hardened",
-    rationale: "Runtime-owned global require shim entrypoint."
-  },
-  {
-    name: "_requireFrom",
-    classification: "hardened",
-    rationale: "Runtime-owned internal require shim used by module polyfill."
-  },
-  {
-    name: "_dynamicImport",
-    classification: "hardened",
-    rationale: "Runtime-owned host callback reference for dynamic import resolution."
-  },
-  {
-    name: "__dynamicImport",
-    classification: "hardened",
-    rationale: "Runtime-owned dynamic-import shim entrypoint."
-  },
-  {
-    name: "_moduleCache",
-    classification: "hardened",
-    rationale: "Per-execution CommonJS/require cache \u2014 hardened via read-only Proxy to prevent cache poisoning."
-  },
-  {
-    name: "_pendingModules",
-    classification: "mutable-runtime-state",
-    rationale: "Per-execution circular-load tracking state."
-  },
-  {
-    name: "_currentModule",
-    classification: "mutable-runtime-state",
-    rationale: "Per-execution module resolution context."
-  },
-  {
-    name: "_stdinData",
-    classification: "mutable-runtime-state",
-    rationale: "Per-execution stdin payload state."
-  },
-  {
-    name: "_stdinPosition",
-    classification: "mutable-runtime-state",
-    rationale: "Per-execution stdin stream cursor state."
-  },
-  {
-    name: "_stdinEnded",
-    classification: "mutable-runtime-state",
-    rationale: "Per-execution stdin completion state."
-  },
-  {
-    name: "_stdinFlowMode",
-    classification: "mutable-runtime-state",
-    rationale: "Per-execution stdin flow-control state."
-  },
-  {
-    name: "module",
-    classification: "mutable-runtime-state",
-    rationale: "Per-execution CommonJS module wrapper state."
-  },
-  {
-    name: "exports",
-    classification: "mutable-runtime-state",
-    rationale: "Per-execution CommonJS module wrapper state."
-  },
-  {
-    name: "__filename",
-    classification: "mutable-runtime-state",
-    rationale: "Per-execution CommonJS file context state."
-  },
-  {
-    name: "__dirname",
-    classification: "mutable-runtime-state",
-    rationale: "Per-execution CommonJS file context state."
-  },
-  {
-    name: "fetch",
-    classification: "hardened",
-    rationale: "Network fetch API global \u2014 must not be replaceable by sandbox code."
-  },
-  {
-    name: "Headers",
-    classification: "hardened",
-    rationale: "Network Headers API global \u2014 must not be replaceable by sandbox code."
-  },
-  {
-    name: "Request",
-    classification: "hardened",
-    rationale: "Network Request API global \u2014 must not be replaceable by sandbox code."
-  },
-  {
-    name: "Response",
-    classification: "hardened",
-    rationale: "Network Response API global \u2014 must not be replaceable by sandbox code."
-  },
-  {
-    name: "DOMException",
-    classification: "hardened",
-    rationale: "DOMException global stub for undici/bootstrap compatibility."
-  },
-  {
-    name: "__importMetaResolve",
-    classification: "hardened",
-    rationale: "Internal import.meta.resolve helper for transformed ESM modules."
-  },
-  {
-    name: "Blob",
-    classification: "hardened",
-    rationale: "Blob API global stub \u2014 must not be replaceable by sandbox code."
-  },
-  {
-    name: "File",
-    classification: "hardened",
-    rationale: "File API global stub \u2014 must not be replaceable by sandbox code."
-  },
-  {
-    name: "FormData",
-    classification: "hardened",
-    rationale: "FormData API global stub \u2014 must not be replaceable by sandbox code."
-  }
-];
-var HARDENED_NODE_CUSTOM_GLOBALS = NODE_CUSTOM_GLOBAL_INVENTORY.filter((entry) => entry.classification === "hardened").map((entry) => entry.name);
-var MUTABLE_NODE_CUSTOM_GLOBALS = NODE_CUSTOM_GLOBAL_INVENTORY.filter((entry) => entry.classification === "mutable-runtime-state").map((entry) => entry.name);
-function exposeGlobalBinding(target, name, value, options = {}) {
-  const mutable = options.mutable === true;
-  const enumerable = options.enumerable !== false;
-  Object.defineProperty(target, name, {
-    value,
-    writable: mutable,
-    // Always configurable so the per-execution jsRuntime shim can scrub
-    // host globals for non-node platforms (see prepend_v8_runtime_shim).
-    // This only affects the guest's own realm; the kernel boundary lives in
-    // the bridge RPC layer, not these property descriptors.
-    configurable: true,
-    enumerable
-  });
-}
-function exposeCustomGlobal(name, value) {
-  exposeGlobalBinding(globalThis, name, value);
-}
-function exposeMutableRuntimeStateGlobal(name, value) {
-  exposeGlobalBinding(globalThis, name, value, {
-    mutable: true
-  });
-}
-export { NODE_CUSTOM_GLOBAL_INVENTORY, HARDENED_NODE_CUSTOM_GLOBALS, MUTABLE_NODE_CUSTOM_GLOBALS, exposeGlobalBinding, exposeCustomGlobal, exposeMutableRuntimeStateGlobal };
diff --git a/packages/build-tools/bridge-src/index.ts b/packages/build-tools/bridge-src/index.ts
deleted file mode 100644
index 12f7cf2fc..000000000
--- a/packages/build-tools/bridge-src/index.ts
+++ /dev/null
@@ -1,82 +0,0 @@
-// Entry module for the V8 bridge. The section bodies live in real ES modules
-// under bridge-src/ and are bundled directly by scripts/build-v8-bridge.mjs.
-
-
-import "./polyfills/index.js";
-import "./global-exposure.js";
-import "./transport.js";
-import "./builtins/active-handles.js";
-import "./builtins/fs.js";
-import "./builtins/os.js";
-import "./builtins/child-process.js";
-import "./builtins/network.js";
-import "./builtins/whatwg-url.js";
-import "./builtins/events.js";
-import "./builtins/process.js";
-import "./builtins/module-loader.js";
-
-import { _getActiveHandles, _registerHandle2, _unregisterHandle2, _waitForActiveHandles } from "./builtins/active-handles.js";
-import { child_process_exports } from "./builtins/child-process.js";
-import { fs_default } from "./builtins/fs.js";
-import { Module, SourceMap, createRequire, module_default } from "./builtins/module-loader.js";
-import { network_exports } from "./builtins/network.js";
-import { os_default } from "./builtins/os.js";
-import { Buffer3 } from "./builtins/buffer-runtime.js";
-import { cryptoPolyfill } from "./builtins/crypto.js";
-import { ProcessExitError, process_default, setupGlobals } from "./builtins/process.js";
-import { clearImmediate, clearInterval, clearTimeout2, setImmediate, setInterval, setTimeout2 } from "./builtins/timers.js";
-import { URL2, URLSearchParams } from "./builtins/whatwg-url.js";
-import { CustomEvent, Event, EventTarget, TextDecoder, TextEncoder2 } from "./polyfills/index.js";
-import { __export } from "./vendor/esbuild-runtime.js";
-
-var index_exports = {};
-__export(index_exports, {
-  Buffer: () => Buffer3,
-  CustomEvent: () => CustomEvent,
-  Event: () => Event,
-  EventTarget: () => EventTarget,
-  Module: () => Module,
-  ProcessExitError: () => ProcessExitError,
-  SourceMap: () => SourceMap,
-  TextDecoder: () => TextDecoder,
-  TextEncoder: () => TextEncoder2,
-  URL: () => URL2,
-  URLSearchParams: () => URLSearchParams,
-  _getActiveHandles: () => _getActiveHandles,
-  _registerHandle: () => _registerHandle2,
-  _unregisterHandle: () => _unregisterHandle2,
-  _waitForActiveHandles: () => _waitForActiveHandles,
-  childProcess: () => child_process_exports,
-  clearImmediate: () => clearImmediate,
-  clearInterval: () => clearInterval,
-  clearTimeout: () => clearTimeout2,
-  createRequire: () => createRequire,
-  cryptoPolyfill: () => cryptoPolyfill,
-  default: () => index_default,
-  fs: () => fs_default,
-  module: () => module_default,
-  network: () => network_exports,
-  os: () => os_default,
-  process: () => process_default,
-  setImmediate: () => setImmediate,
-  setInterval: () => setInterval,
-  setTimeout: () => setTimeout2,
-  setupGlobals: () => setupGlobals
-});
-
-
-var index_default = fs_default;
-setupGlobals();
-/*! Bundled license information:
-
-ieee754/index.js:
-(*! ieee754. BSD-3-Clause License. Feross Aboukhadijeh <https://feross.org/opensource> *)
-
-buffer/index.js:
-(*!
- * The buffer module from node.js, for the browser.
- *
- * @author   Feross Aboukhadijeh <https://feross.org>
- * @license  MIT
- *)
-*/
diff --git a/packages/build-tools/bridge-src/polyfills/abort.ts b/packages/build-tools/bridge-src/polyfills/abort.ts
deleted file mode 100644
index a6cb83b7f..000000000
--- a/packages/build-tools/bridge-src/polyfills/abort.ts
+++ /dev/null
@@ -1,150 +0,0 @@
-import { NativeAbortControllerGlobal, NativeAbortSignalGlobal } from "../prelude.js";
-import { Event, EventTarget } from "./dom-events.js";
-
-var AbortSignal = typeof NativeAbortSignalGlobal === "function" ? NativeAbortSignalGlobal : class extends EventTarget {
-  constructor() {
-    super();
-    this.aborted = false;
-    this.reason = void 0;
-  }
-  throwIfAborted() {
-    if (this.aborted) {
-      throw this.reason instanceof Error ? this.reason : new Error(String(this.reason ?? "AbortError"));
-    }
-  }
-};
-var AbortController = typeof NativeAbortControllerGlobal === "function" ? NativeAbortControllerGlobal : class {
-  constructor() {
-    this.signal = new AbortSignal();
-  }
-  abort(reason) {
-    if (this.signal.aborted) {
-      return;
-    }
-    this.signal.aborted = true;
-    this.signal.reason = reason;
-    this.signal.dispatchEvent(new Event("abort"));
-  }
-};
-function ensureNamedConstructor(ctor, expectedName) {
-  if (typeof ctor !== "function") {
-    return;
-  }
-  try {
-    if (ctor.name !== expectedName) {
-      Object.defineProperty(ctor, "name", {
-        configurable: true,
-        value: expectedName
-      });
-    }
-  } catch {
-  }
-}
-ensureNamedConstructor(AbortSignal, "AbortSignal");
-ensureNamedConstructor(AbortController, "AbortController");
-try {
-  const signalCtor = Object.getPrototypeOf(new AbortController().signal)?.constructor;
-  ensureNamedConstructor(signalCtor, "AbortSignal");
-} catch {
-}
-try {
-  globalThis.AbortSignal = AbortSignal;
-} catch {
-}
-try {
-  globalThis.AbortController = AbortController;
-} catch {
-}
-function createAbortSignalReason(reason) {
-  if (reason !== void 0) {
-    return reason;
-  }
-  if (typeof globalThis.DOMException === "function") {
-    return new globalThis.DOMException("This operation was aborted", "AbortError");
-  }
-  const error = new Error("This operation was aborted");
-  error.name = "AbortError";
-  return error;
-}
-function createAbortedSignal(reason) {
-  const controller = new AbortController();
-  controller.abort(createAbortSignalReason(reason));
-  return controller.signal;
-}
-function normalizeAbortSignalTimeout(delay) {
-  if (typeof delay !== "number") {
-    throw new TypeError(`The "delay" argument must be of type number. Received ${typeof delay}`);
-  }
-  if (!Number.isFinite(delay) || delay < 0) {
-    throw new RangeError(`The value of "delay" is out of range. It must be >= 0. Received ${String(delay)}`);
-  }
-  return Math.trunc(delay);
-}
-if (typeof AbortSignal.abort !== "function") {
-  Object.defineProperty(AbortSignal, "abort", {
-    configurable: true,
-    writable: true,
-    value(reason = void 0) {
-      return createAbortedSignal(reason);
-    }
-  });
-}
-if (typeof AbortSignal.timeout !== "function") {
-  Object.defineProperty(AbortSignal, "timeout", {
-    configurable: true,
-    writable: true,
-    value(delay) {
-      const timeout = normalizeAbortSignalTimeout(delay);
-      const controller = new AbortController();
-      const timer = setTimeout(() => {
-        controller.abort(createAbortSignalReason());
-      }, timeout);
-      if (typeof timer?.unref === "function") {
-        timer.unref();
-      }
-      controller.signal.addEventListener("abort", () => {
-        clearTimeout(timer);
-      }, { once: true });
-      return controller.signal;
-    }
-  });
-}
-if (typeof AbortSignal.any !== "function") {
-  Object.defineProperty(AbortSignal, "any", {
-    configurable: true,
-    writable: true,
-    value(signals) {
-      if (!signals || typeof signals[Symbol.iterator] !== "function") {
-        throw new TypeError("The \"signals\" argument must be an iterable");
-      }
-      const inputs = Array.from(signals);
-      const controller = new AbortController();
-      if (inputs.length === 0) {
-        return controller.signal;
-      }
-      const listeners = [];
-      const abortFromSignal = (signal) => {
-        while (listeners.length > 0) {
-          const [candidate, listener] = listeners.pop();
-          candidate.removeEventListener?.("abort", listener);
-        }
-        controller.abort(signal.reason);
-      };
-      for (const signal of inputs) {
-        if (!signal || typeof signal.aborted !== "boolean" || typeof signal.addEventListener !== "function") {
-          throw new TypeError("The \"signals\" argument must contain AbortSignal instances");
-        }
-        if (signal.aborted) {
-          abortFromSignal(signal);
-          return controller.signal;
-        }
-        const onAbort = () => abortFromSignal(signal);
-        listeners.push([signal, onAbort]);
-        signal.addEventListener("abort", onAbort, { once: true });
-      }
-      return controller.signal;
-    }
-  });
-}
-
-export { AbortSignal, AbortController, ensureNamedConstructor, createAbortSignalReason, createAbortedSignal, normalizeAbortSignalTimeout };
diff --git a/packages/build-tools/bridge-src/polyfills/dom-events.ts b/packages/build-tools/bridge-src/polyfills/dom-events.ts
deleted file mode 100644
index 8448d8f97..000000000
--- a/packages/build-tools/bridge-src/polyfills/dom-events.ts
+++ /dev/null
@@ -1,219 +0,0 @@
-function normalizeAddEventListenerOptions(options) {
-  if (typeof options === "boolean") {
-    return {
-      capture: options,
-      once: false,
-      passive: false
-    };
-  }
-  if (options == null) {
-    return {
-      capture: false,
-      once: false,
-      passive: false
-    };
-  }
-  const normalized = Object(options);
-  return {
-    capture: Boolean(normalized.capture),
-    once: Boolean(normalized.once),
-    passive: Boolean(normalized.passive),
-    signal: normalized.signal
-  };
-}
-function normalizeRemoveEventListenerOptions(options) {
-  if (typeof options === "boolean") {
-    return options;
-  }
-  if (options == null) {
-    return false;
-  }
-  return Boolean(Object(options).capture);
-}
-function isAbortSignalLike(value) {
-  return typeof value === "object" && value !== null && "aborted" in value && typeof value.addEventListener === "function" && typeof value.removeEventListener === "function";
-}
-var PatchedEvent = class {
-  static NONE = 0;
-  static CAPTURING_PHASE = 1;
-  static AT_TARGET = 2;
-  static BUBBLING_PHASE = 3;
-  type;
-  bubbles;
-  cancelable;
-  composed;
-  detail = null;
-  defaultPrevented = false;
-  target = null;
-  currentTarget = null;
-  eventPhase = 0;
-  returnValue = true;
-  cancelBubble = false;
-  timeStamp = Date.now();
-  isTrusted = false;
-  srcElement = null;
-  inPassiveListener = false;
-  propagationStopped = false;
-  immediatePropagationStopped = false;
-  constructor(type, init) {
-    if (arguments.length === 0) {
-      throw new TypeError("The event type must be provided");
-    }
-    const normalizedInit = init == null ? {} : Object(init);
-    this.type = String(type);
-    this.bubbles = Boolean(normalizedInit.bubbles);
-    this.cancelable = Boolean(normalizedInit.cancelable);
-    this.composed = Boolean(normalizedInit.composed);
-  }
-  get [Symbol.toStringTag]() {
-    return "Event";
-  }
-  preventDefault() {
-    if (this.cancelable && !this.inPassiveListener) {
-      this.defaultPrevented = true;
-      this.returnValue = false;
-    }
-  }
-  stopPropagation() {
-    this.propagationStopped = true;
-    this.cancelBubble = true;
-  }
-  stopImmediatePropagation() {
-    this.propagationStopped = true;
-    this.immediatePropagationStopped = true;
-    this.cancelBubble = true;
-  }
-  composedPath() {
-    return this.target ? [this.target] : [];
-  }
-  _setPassive(value) {
-    this.inPassiveListener = value;
-  }
-  _isPropagationStopped() {
-    return this.propagationStopped;
-  }
-  _isImmediatePropagationStopped() {
-    return this.immediatePropagationStopped;
-  }
-};
-var PatchedCustomEvent = class extends PatchedEvent {
-  constructor(type, init) {
-    super(type, init);
-    const normalizedInit = init == null ? null : Object(init);
-    this.detail = normalizedInit && "detail" in normalizedInit ? normalizedInit.detail : null;
-  }
-  get [Symbol.toStringTag]() {
-    return "CustomEvent";
-  }
-};
-var PatchedEventTarget = class {
-  listeners = /* @__PURE__ */ new Map();
-  addEventListener(type, listener, options) {
-    const normalized = normalizeAddEventListenerOptions(options);
-    if (normalized.signal !== void 0 && !isAbortSignalLike(normalized.signal)) {
-      throw new TypeError(
-        'The "signal" option must be an instance of AbortSignal.'
-      );
-    }
-    if (listener == null) {
-      return void 0;
-    }
-    if (typeof listener !== "function" && (typeof listener !== "object" || listener === null)) {
-      return void 0;
-    }
-    if (normalized.signal?.aborted) {
-      return void 0;
-    }
-    const records = this.listeners.get(type) ?? [];
-    const existing = records.find(
-      (record2) => record2.listener === listener && record2.capture === normalized.capture
-    );
-    if (existing) {
-      return void 0;
-    }
-    const record = {
-      listener,
-      capture: normalized.capture,
-      once: normalized.once,
-      passive: normalized.passive,
-      kind: typeof listener === "function" ? "function" : "object",
-      signal: normalized.signal
-    };
-    if (normalized.signal) {
-      record.abortListener = () => {
-        this.removeEventListener(type, listener, normalized.capture);
-      };
-      normalized.signal.addEventListener("abort", record.abortListener, {
-        once: true
-      });
-    }
-    records.push(record);
-    this.listeners.set(type, records);
-    return void 0;
-  }
-  removeEventListener(type, listener, options) {
-    if (listener == null) {
-      return;
-    }
-    const capture = normalizeRemoveEventListenerOptions(options);
-    const records = this.listeners.get(type);
-    if (!records) {
-      return;
-    }
-    const nextRecords = records.filter((record) => {
-      const match = record.listener === listener && record.capture === capture;
-      if (match && record.signal && record.abortListener) {
-        record.signal.removeEventListener("abort", record.abortListener);
-      }
-      return !match;
-    });
-    if (nextRecords.length === 0) {
-      this.listeners.delete(type);
-      return;
-    }
-    this.listeners.set(type, nextRecords);
-  }
-  dispatchEvent(event) {
-    if (typeof event !== "object" || event === null || typeof event.type !== "string") {
-      throw new TypeError("Argument 1 must be an Event");
-    }
-    const patchedEvent = event;
-    const records = (this.listeners.get(patchedEvent.type) ?? []).slice();
-    patchedEvent.target = this;
-    patchedEvent.currentTarget = this;
-    patchedEvent.eventPhase = 2;
-    for (const record of records) {
-      const active = this.listeners.get(patchedEvent.type)?.includes(record);
-      if (!active) {
-        continue;
-      }
-      if (record.once) {
-        this.removeEventListener(patchedEvent.type, record.listener, record.capture);
-      }
-      patchedEvent._setPassive(record.passive);
-      if (record.kind === "function") {
-        record.listener.call(this, patchedEvent);
-      } else {
-        const handleEvent = record.listener.handleEvent;
-        if (typeof handleEvent === "function") {
-          handleEvent.call(record.listener, patchedEvent);
-        }
-      }
-      patchedEvent._setPassive(false);
-      if (patchedEvent._isImmediatePropagationStopped()) {
-        break;
-      }
-      if (patchedEvent._isPropagationStopped()) {
-        break;
-      }
-    }
-    patchedEvent.currentTarget = null;
-    patchedEvent.eventPhase = 0;
-    return !patchedEvent.defaultPrevented;
-  }
-};
-var Event = PatchedEvent;
-var CustomEvent = PatchedCustomEvent;
-var EventTarget = PatchedEventTarget;
-
-export { normalizeAddEventListenerOptions, normalizeRemoveEventListenerOptions, isAbortSignalLike, PatchedEvent, PatchedCustomEvent, PatchedEventTarget, Event, CustomEvent, EventTarget };
diff --git a/packages/build-tools/bridge-src/polyfills/index.ts b/packages/build-tools/bridge-src/polyfills/index.ts
deleted file mode 100644
index 0b5eadb0e..000000000
--- a/packages/build-tools/bridge-src/polyfills/index.ts
+++ /dev/null
@@ -1,114 +0,0 @@
-import { WebReadableStream, WebTextDecoderStream, WebTextEncoderStream, WebTransformStream, WebWritableStream, sandboxStructuredClone, undiciWebidlModule } from "../prelude.js";
-import { CustomEvent, Event, EventTarget } from "./dom-events.js";
-import { AbortController, AbortSignal } from "./abort.js";
-import { FallbackReadableStream, FallbackWritableStream } from "./web-streams-fallback.js";
-import { TextDecoder, TextEncoder2 } from "./text-encoding.js";
-
-function defineGlobal(name, value) {
-  globalThis[name] = value;
-}
-if (typeof globalThis.global === "undefined") {
-  defineGlobal("global", globalThis);
-}
-if (typeof globalThis.RegExp === "function" && !("__secureExecRgiEmojiCompat" in globalThis.RegExp)) {
-  const NativeRegExp = globalThis.RegExp;
-  const rgiEmojiPattern = "^\\p{RGI_Emoji}$";
-  const rgiEmojiBaseClass = "[\\u{00A9}\\u{00AE}\\u{203C}\\u{2049}\\u{2122}\\u{2139}\\u{2194}-\\u{21AA}\\u{231A}-\\u{23FF}\\u{24C2}\\u{25AA}-\\u{27BF}\\u{2934}-\\u{2935}\\u{2B05}-\\u{2B55}\\u{3030}\\u{303D}\\u{3297}\\u{3299}\\u{1F000}-\\u{1FAFF}]";
-  const rgiEmojiKeycap = "[#*0-9]\\uFE0F?\\u20E3";
-  const rgiEmojiFallbackSource = "^(?:" + rgiEmojiKeycap + "|\\p{Regional_Indicator}{2}|" + rgiEmojiBaseClass + "(?:\\uFE0F|\\u200D(?:" + rgiEmojiKeycap + "|" + rgiEmojiBaseClass + ")|[\\u{1F3FB}-\\u{1F3FF}])*)$";
-  try {
-    new NativeRegExp(rgiEmojiPattern, "v");
-  } catch (error) {
-    if (String(error?.message ?? error).includes("RGI_Emoji")) {
-      const CompatRegExp = function CompatRegExp2(pattern, flags) {
-        const normalizedPattern = pattern instanceof NativeRegExp && flags === void 0 ? pattern.source : String(pattern);
-        const normalizedFlags = flags === void 0 ? pattern instanceof NativeRegExp ? pattern.flags : "" : String(flags);
-        try {
-          return new NativeRegExp(pattern, flags);
-        } catch (innerError) {
-          if (normalizedPattern === rgiEmojiPattern && normalizedFlags === "v") {
-            return new NativeRegExp(rgiEmojiFallbackSource, "u");
-          }
-          throw innerError;
-        }
-      };
-      Object.setPrototypeOf(CompatRegExp, NativeRegExp);
-      CompatRegExp.prototype = NativeRegExp.prototype;
-      Object.defineProperty(CompatRegExp.prototype, "constructor", {
-        value: CompatRegExp,
-        writable: true,
-        configurable: true
-      });
-      defineGlobal(
-        "RegExp",
-        Object.assign(CompatRegExp, { __secureExecRgiEmojiCompat: true })
-      );
-    }
-  }
-}
-
-defineGlobal("TextEncoder", TextEncoder2);
-defineGlobal("TextDecoder", TextDecoder);
-defineGlobal("Event", Event);
-defineGlobal("CustomEvent", CustomEvent);
-defineGlobal("EventTarget", EventTarget);
-defineGlobal("AbortSignal", AbortSignal);
-defineGlobal("AbortController", AbortController);
-defineGlobal("structuredClone", sandboxStructuredClone);
-if (
-  globalThis.WebAssembly &&
-  typeof globalThis.WebAssembly.instantiateStreaming !== "function"
-) {
-  globalThis.WebAssembly.instantiateStreaming = async function instantiateStreaming(source, imports) {
-    const response = await source;
-    if (response == null || typeof response.arrayBuffer !== "function") {
-      throw new TypeError("WebAssembly.instantiateStreaming requires a Response or promise for one");
-    }
-    const bytes = new Uint8Array(await response.arrayBuffer());
-    return globalThis.WebAssembly.instantiate(bytes, imports);
-  };
-}
-defineGlobal("ReadableStream", typeof WebReadableStream === "function" ? WebReadableStream : FallbackReadableStream);
-defineGlobal("WritableStream", typeof WebWritableStream === "function" ? WebWritableStream : FallbackWritableStream);
-if (typeof WebTransformStream === "function") {
-  defineGlobal("TransformStream", WebTransformStream);
-}
-if (typeof WebTextEncoderStream === "function") {
-  defineGlobal("TextEncoderStream", WebTextEncoderStream);
-}
-if (typeof WebTextDecoderStream === "function") {
-  defineGlobal("TextDecoderStream", WebTextDecoderStream);
-}
-const undiciWebidl = undiciWebidlModule?.webidl ?? undiciWebidlModule;
-if (undiciWebidl?.is) {
-  undiciWebidl.is.ReadableStream = (value) =>
-    value != null &&
-    (value instanceof globalThis.ReadableStream ||
-      typeof value.getReader === "function");
-  undiciWebidl.is.AbortSignal = (value) =>
-    value != null &&
-    (value instanceof globalThis.AbortSignal ||
-      (typeof value.aborted === "boolean" &&
-        typeof value.addEventListener === "function"));
-}
-if (undiciWebidl?.converters?.AbortSignal) {
-  undiciWebidl.converters.AbortSignal = (value, ...args) => {
-    if (
-      value != null &&
-      (value instanceof globalThis.AbortSignal ||
-        (typeof value.aborted === "boolean" &&
-          typeof value.addEventListener === "function"))
-    ) {
-      return value;
-    }
-    return undiciWebidl.interfaceConverter(
-      undiciWebidl.is.AbortSignal,
-      "AbortSignal"
-    )(value, ...args);
-  };
-}
-
-export { defineGlobal, TextEncoder2, TextDecoder, Event, CustomEvent, EventTarget, AbortSignal, AbortController, FallbackWritableStream, FallbackReadableStream, undiciWebidl };
-export { withCode, createEncodingNotSupportedError, createEncodingInvalidDataError, createInvalidDecodeInputError, trimAsciiWhitespace, normalizeEncodingLabel, toUint8Array, encodeUtf8ScalarValue, encodeUtf8, appendCodePoint, isContinuationByte, decodeUtf8, decodeUtf16, PatchedTextEncoder, PatchedTextDecoder } from "./text-encoding.js";
-export { normalizeAddEventListenerOptions, normalizeRemoveEventListenerOptions, isAbortSignalLike, PatchedEvent, PatchedCustomEvent, PatchedEventTarget } from "./dom-events.js";
-export { ensureNamedConstructor, createAbortSignalReason, createAbortedSignal, normalizeAbortSignalTimeout } from "./abort.js";
diff --git a/packages/build-tools/bridge-src/polyfills/text-encoding.ts b/packages/build-tools/bridge-src/polyfills/text-encoding.ts
deleted file mode 100644
index cbd5dfb05..000000000
--- a/packages/build-tools/bridge-src/polyfills/text-encoding.ts
+++ /dev/null
@@ -1,409 +0,0 @@
-function withCode(error, code) {
-  error.code = code;
-  return error;
-}
-function createEncodingNotSupportedError(label) {
-  return withCode(
-    new RangeError(`The "${label}" encoding is not supported`),
-    "ERR_ENCODING_NOT_SUPPORTED"
-  );
-}
-function createEncodingInvalidDataError(encoding) {
-  return withCode(
-    new TypeError(`The encoded data was not valid for encoding ${encoding}`),
-    "ERR_ENCODING_INVALID_ENCODED_DATA"
-  );
-}
-function createInvalidDecodeInputError() {
-  return withCode(
-    new TypeError(
-      'The "input" argument must be an instance of ArrayBuffer, SharedArrayBuffer, or ArrayBufferView.'
-    ),
-    "ERR_INVALID_ARG_TYPE"
-  );
-}
-function trimAsciiWhitespace(value) {
-  return value.replace(/^[\t\n\f\r ]+|[\t\n\f\r ]+$/g, "");
-}
-function normalizeEncodingLabel(label) {
-  const normalized = trimAsciiWhitespace(
-    label === void 0 ? "utf-8" : String(label)
-  ).toLowerCase();
-  switch (normalized) {
-    case "utf-8":
-    case "utf8":
-    case "unicode-1-1-utf-8":
-    case "unicode11utf8":
-    case "unicode20utf8":
-    case "x-unicode20utf8":
-      return "utf-8";
-    case "utf-16":
-    case "utf-16le":
-    case "ucs-2":
-    case "ucs2":
-    case "csunicode":
-    case "iso-10646-ucs-2":
-    case "unicode":
-    case "unicodefeff":
-      return "utf-16le";
-    case "utf-16be":
-    case "unicodefffe":
-      return "utf-16be";
-    default:
-      throw createEncodingNotSupportedError(normalized);
-  }
-}
-function toUint8Array(input) {
-  if (input === void 0) {
-    return new Uint8Array(0);
-  }
-  if (ArrayBuffer.isView(input)) {
-    return new Uint8Array(input.buffer, input.byteOffset, input.byteLength);
-  }
-  if (input instanceof ArrayBuffer) {
-    return new Uint8Array(input);
-  }
-  if (typeof SharedArrayBuffer !== "undefined" && input instanceof SharedArrayBuffer) {
-    return new Uint8Array(input);
-  }
-  throw createInvalidDecodeInputError();
-}
-function encodeUtf8ScalarValue(codePoint, bytes) {
-  if (codePoint <= 127) {
-    bytes.push(codePoint);
-    return;
-  }
-  if (codePoint <= 2047) {
-    bytes.push(192 | codePoint >> 6, 128 | codePoint & 63);
-    return;
-  }
-  if (codePoint <= 65535) {
-    bytes.push(
-      224 | codePoint >> 12,
-      128 | codePoint >> 6 & 63,
-      128 | codePoint & 63
-    );
-    return;
-  }
-  bytes.push(
-    240 | codePoint >> 18,
-    128 | codePoint >> 12 & 63,
-    128 | codePoint >> 6 & 63,
-    128 | codePoint & 63
-  );
-}
-function encodeUtf8(input = "") {
-  const value = String(input);
-  const bytes = [];
-  for (let index = 0; index < value.length; index += 1) {
-    const codeUnit = value.charCodeAt(index);
-    if (codeUnit >= 55296 && codeUnit <= 56319) {
-      const nextIndex = index + 1;
-      if (nextIndex < value.length) {
-        const nextCodeUnit = value.charCodeAt(nextIndex);
-        if (nextCodeUnit >= 56320 && nextCodeUnit <= 57343) {
-          const codePoint = 65536 + (codeUnit - 55296 << 10) + (nextCodeUnit - 56320);
-          encodeUtf8ScalarValue(codePoint, bytes);
-          index = nextIndex;
-          continue;
-        }
-      }
-      encodeUtf8ScalarValue(65533, bytes);
-      continue;
-    }
-    if (codeUnit >= 56320 && codeUnit <= 57343) {
-      encodeUtf8ScalarValue(65533, bytes);
-      continue;
-    }
-    encodeUtf8ScalarValue(codeUnit, bytes);
-  }
-  return new Uint8Array(bytes);
-}
-function appendCodePoint(output, codePoint) {
-  if (codePoint <= 65535) {
-    output.push(String.fromCharCode(codePoint));
-    return;
-  }
-  const adjusted = codePoint - 65536;
-  output.push(
-    String.fromCharCode(55296 + (adjusted >> 10)),
-    String.fromCharCode(56320 + (adjusted & 1023))
-  );
-}
-function isContinuationByte(value) {
-  return value >= 128 && value <= 191;
-}
-function decodeUtf8(bytes, fatal, stream, encoding) {
-  const output = [];
-  for (let index = 0; index < bytes.length; ) {
-    const first = bytes[index];
-    if (first <= 127) {
-      output.push(String.fromCharCode(first));
-      index += 1;
-      continue;
-    }
-    let needed = 0;
-    let codePoint = 0;
-    if (first >= 194 && first <= 223) {
-      needed = 1;
-      codePoint = first & 31;
-    } else if (first >= 224 && first <= 239) {
-      needed = 2;
-      codePoint = first & 15;
-    } else if (first >= 240 && first <= 244) {
-      needed = 3;
-      codePoint = first & 7;
-    } else {
-      if (fatal) {
-        throw createEncodingInvalidDataError(encoding);
-      }
-      output.push("\uFFFD");
-      index += 1;
-      continue;
-    }
-    if (index + needed >= bytes.length) {
-      if (stream) {
-        return {
-          text: output.join(""),
-          pending: Array.from(bytes.slice(index))
-        };
-      }
-      if (fatal) {
-        throw createEncodingInvalidDataError(encoding);
-      }
-      output.push("\uFFFD");
-      break;
-    }
-    const second = bytes[index + 1];
-    if (!isContinuationByte(second)) {
-      if (fatal) {
-        throw createEncodingInvalidDataError(encoding);
-      }
-      output.push("\uFFFD");
-      index += 1;
-      continue;
-    }
-    if (first === 224 && second < 160 || first === 237 && second > 159 || first === 240 && second < 144 || first === 244 && second > 143) {
-      if (fatal) {
-        throw createEncodingInvalidDataError(encoding);
-      }
-      output.push("\uFFFD");
-      index += 1;
-      continue;
-    }
-    codePoint = codePoint << 6 | second & 63;
-    if (needed >= 2) {
-      const third = bytes[index + 2];
-      if (!isContinuationByte(third)) {
-        if (fatal) {
-          throw createEncodingInvalidDataError(encoding);
-        }
-        output.push("\uFFFD");
-        index += 1;
-        continue;
-      }
-      codePoint = codePoint << 6 | third & 63;
-    }
-    if (needed === 3) {
-      const fourth = bytes[index + 3];
-      if (!isContinuationByte(fourth)) {
-        if (fatal) {
-          throw createEncodingInvalidDataError(encoding);
-        }
-        output.push("\uFFFD");
-        index += 1;
-        continue;
-      }
-      codePoint = codePoint << 6 | fourth & 63;
-    }
-    if (codePoint >= 55296 && codePoint <= 57343) {
-      if (fatal) {
-        throw createEncodingInvalidDataError(encoding);
-      }
-      output.push("\uFFFD");
-      index += needed + 1;
-      continue;
-    }
-    appendCodePoint(output, codePoint);
-    index += needed + 1;
-  }
-  return { text: output.join(""), pending: [] };
-}
-function decodeUtf16(bytes, encoding, fatal, stream, bomSeen) {
-  const output = [];
-  let endian = encoding === "utf-16be" ? "be" : "le";
-  if (!bomSeen && encoding === "utf-16le" && bytes.length >= 2) {
-    if (bytes[0] === 254 && bytes[1] === 255) {
-      endian = "be";
-    }
-  }
-  for (let index = 0; index < bytes.length; ) {
-    if (index + 1 >= bytes.length) {
-      if (stream) {
-        return {
-          text: output.join(""),
-          pending: Array.from(bytes.slice(index))
-        };
-      }
-      if (fatal) {
-        throw createEncodingInvalidDataError(encoding);
-      }
-      output.push("\uFFFD");
-      break;
-    }
-    const first = bytes[index];
-    const second = bytes[index + 1];
-    const codeUnit = endian === "le" ? first | second << 8 : first << 8 | second;
-    index += 2;
-    if (codeUnit >= 55296 && codeUnit <= 56319) {
-      if (index + 1 >= bytes.length) {
-        if (stream) {
-          return {
-            text: output.join(""),
-            pending: Array.from(bytes.slice(index - 2))
-          };
-        }
-        if (fatal) {
-          throw createEncodingInvalidDataError(encoding);
-        }
-        output.push("\uFFFD");
-        continue;
-      }
-      const nextFirst = bytes[index];
-      const nextSecond = bytes[index + 1];
-      const nextCodeUnit = endian === "le" ? nextFirst | nextSecond << 8 : nextFirst << 8 | nextSecond;
-      if (nextCodeUnit >= 56320 && nextCodeUnit <= 57343) {
-        const codePoint = 65536 + (codeUnit - 55296 << 10) + (nextCodeUnit - 56320);
-        appendCodePoint(output, codePoint);
-        index += 2;
-        continue;
-      }
-      if (fatal) {
-        throw createEncodingInvalidDataError(encoding);
-      }
-      output.push("\uFFFD");
-      continue;
-    }
-    if (codeUnit >= 56320 && codeUnit <= 57343) {
-      if (fatal) {
-        throw createEncodingInvalidDataError(encoding);
-      }
-      output.push("\uFFFD");
-      continue;
-    }
-    output.push(String.fromCharCode(codeUnit));
-  }
-  return { text: output.join(""), pending: [] };
-}
-var PatchedTextEncoder = class {
-  encode(input = "") {
-    return encodeUtf8(input);
-  }
-  encodeInto(input, destination) {
-    const value = String(input);
-    let read = 0;
-    let written = 0;
-    for (let index = 0; index < value.length; index += 1) {
-      const codeUnit = value.charCodeAt(index);
-      let chunk = "";
-      if (codeUnit >= 55296 && codeUnit <= 56319 && index + 1 < value.length) {
-        const nextCodeUnit = value.charCodeAt(index + 1);
-        if (nextCodeUnit >= 56320 && nextCodeUnit <= 57343) {
-          chunk = value.slice(index, index + 2);
-        }
-      }
-      if (chunk === "") {
-        chunk = value[index] ?? "";
-      }
-      const encoded = encodeUtf8(chunk);
-      if (written + encoded.length > destination.length) {
-        break;
-      }
-      destination.set(encoded, written);
-      written += encoded.length;
-      read += chunk.length;
-      if (chunk.length === 2) {
-        index += 1;
-      }
-    }
-    return { read, written };
-  }
-  get encoding() {
-    return "utf-8";
-  }
-  get [Symbol.toStringTag]() {
-    return "TextEncoder";
-  }
-};
-var PatchedTextDecoder = class {
-  normalizedEncoding;
-  fatalFlag;
-  ignoreBOMFlag;
-  pendingBytes = [];
-  bomSeen = false;
-  constructor(label, options) {
-    const normalizedOptions = options == null ? {} : Object(options);
-    this.normalizedEncoding = normalizeEncodingLabel(label);
-    this.fatalFlag = Boolean(
-      normalizedOptions.fatal
-    );
-    this.ignoreBOMFlag = Boolean(
-      normalizedOptions.ignoreBOM
-    );
-  }
-  get encoding() {
-    return this.normalizedEncoding;
-  }
-  get fatal() {
-    return this.fatalFlag;
-  }
-  get ignoreBOM() {
-    return this.ignoreBOMFlag;
-  }
-  get [Symbol.toStringTag]() {
-    return "TextDecoder";
-  }
-  decode(input, options) {
-    const normalizedOptions = options == null ? {} : Object(options);
-    const stream = Boolean(
-      normalizedOptions.stream
-    );
-    const incoming = toUint8Array(input);
-    const merged = new Uint8Array(this.pendingBytes.length + incoming.length);
-    merged.set(this.pendingBytes, 0);
-    merged.set(incoming, this.pendingBytes.length);
-    const decoded = this.normalizedEncoding === "utf-8" ? decodeUtf8(
-      merged,
-      this.fatalFlag,
-      stream,
-      this.normalizedEncoding
-    ) : decodeUtf16(
-      merged,
-      this.normalizedEncoding,
-      this.fatalFlag,
-      stream,
-      this.bomSeen
-    );
-    this.pendingBytes = decoded.pending;
-    let text = decoded.text;
-    if (!this.bomSeen && text.length > 0) {
-      if (!this.ignoreBOMFlag && text.charCodeAt(0) === 65279) {
-        text = text.slice(1);
-      }
-      this.bomSeen = true;
-    }
-    if (!stream && this.pendingBytes.length > 0) {
-      const pending = this.pendingBytes;
-      this.pendingBytes = [];
-      if (this.fatalFlag) {
-        throw createEncodingInvalidDataError(this.normalizedEncoding);
-      }
-      return text + "\uFFFD".repeat(Math.ceil(pending.length / 2));
-    }
-    return text;
-  }
-};
-var TextEncoder2 = PatchedTextEncoder;
-var TextDecoder = PatchedTextDecoder;
-
-export { withCode, createEncodingNotSupportedError, createEncodingInvalidDataError, createInvalidDecodeInputError, trimAsciiWhitespace, normalizeEncodingLabel, toUint8Array, encodeUtf8ScalarValue, encodeUtf8, appendCodePoint, isContinuationByte, decodeUtf8, decodeUtf16, PatchedTextEncoder, PatchedTextDecoder, TextEncoder2, TextDecoder };
diff --git a/packages/build-tools/bridge-src/polyfills/web-streams-fallback.ts b/packages/build-tools/bridge-src/polyfills/web-streams-fallback.ts
deleted file mode 100644
index b4e9dc6f5..000000000
--- a/packages/build-tools/bridge-src/polyfills/web-streams-fallback.ts
+++ /dev/null
@@ -1,87 +0,0 @@
-var FallbackWritableStream = class {
-  constructor(sink = {}) {
-    this._sink = sink;
-  }
-  getWriter() {
-    const sink = this._sink;
-    return {
-      write(chunk) {
-        return Promise.resolve(typeof sink.write === "function" ? sink.write(chunk) : void 0);
-      },
-      close() {
-        return Promise.resolve(typeof sink.close === "function" ? sink.close() : void 0);
-      },
-      releaseLock() {
-      }
-    };
-  }
-};
-var FallbackReadableStream = class {
-  constructor(source = {}) {
-    this._queue = [];
-    this._pending = [];
-    this._closed = false;
-    this._error = null;
-    const flushPending = () => {
-      while (this._pending.length > 0) {
-        const waiter = this._pending.shift();
-        if (this._error) {
-          waiter.reject(this._error);
-          continue;
-        }
-        if (this._queue.length > 0) {
-          waiter.resolve({ value: this._queue.shift(), done: false });
-          continue;
-        }
-        if (this._closed) {
-          waiter.resolve({ value: void 0, done: true });
-          continue;
-        }
-        this._pending.unshift(waiter);
-        break;
-      }
-    };
-    const controller = {
-      enqueue: (value) => {
-        if (this._closed || this._error) return;
-        this._queue.push(value);
-        flushPending();
-      },
-      close: () => {
-        if (this._closed || this._error) return;
-        this._closed = true;
-        flushPending();
-      },
-      error: (error) => {
-        if (this._closed || this._error) return;
-        this._error = error instanceof Error ? error : new Error(String(error));
-        flushPending();
-      }
-    };
-    if (typeof source.start === "function") {
-      Promise.resolve().then(() => source.start(controller)).catch((error) => controller.error(error));
-    }
-  }
-  getReader() {
-    return {
-      read: () => {
-        if (this._error) {
-          return Promise.reject(this._error);
-        }
-        if (this._queue.length > 0) {
-          return Promise.resolve({ value: this._queue.shift(), done: false });
-        }
-        if (this._closed) {
-          return Promise.resolve({ value: void 0, done: true });
-        }
-        return new Promise((resolve, reject) => {
-          this._pending.push({ resolve, reject });
-        });
-      },
-      releaseLock() {
-      }
-    };
-  }
-};
-
-export { FallbackWritableStream, FallbackReadableStream };
diff --git a/packages/build-tools/bridge-src/prelude.ts b/packages/build-tools/bridge-src/prelude.ts
deleted file mode 100644
index 0ae622758..000000000
--- a/packages/build-tools/bridge-src/prelude.ts
+++ /dev/null
@@ -1,252 +0,0 @@
-import * as bufferStdlibModuleNs from "node:buffer";
-import * as constantsStdlibModuleNs from "node:constants";
-import * as eventsStdlibModuleNs from "node:events";
-import * as pathStdlibModuleNs from "node:path";
-import * as punycodeStdlibModuleNs from "node:punycode";
-import * as querystringStdlibModuleNs from "node:querystring";
-import * as streamStdlibModuleNs from "node:stream";
-import * as stringDecoderStdlibModuleNs from "node:string_decoder";
-import * as urlStdlibModuleNs from "node:url";
-import * as utilStdlibModuleNs from "node:util";
-import {
-  WebReadableStream,
-  WebWritableStream,
-  WebTransformStream,
-  WebTextEncoderStream,
-  WebTextDecoderStream,
-} from "./undici-shims/web-streams-global.js";
-import undiciApiModule from "undici/lib/api/index.js";
-import undiciAgentModule from "undici/lib/dispatcher/agent.js";
-import undiciClientModule from "undici/lib/dispatcher/client.js";
-import undiciFetchModule from "undici/lib/web/fetch/index.js";
-import undiciGlobalModule from "undici/lib/global.js";
-import undiciHeadersModule from "undici/lib/web/fetch/headers.js";
-import undiciRequestModule from "undici/lib/web/fetch/request.js";
-import undiciResponseModule from "undici/lib/web/fetch/response.js";
-import undiciWebidlModule from "undici/lib/web/webidl/index.js";
-
-const NativeAbortControllerGlobal = globalThis.AbortController;
-const NativeAbortSignalGlobal = globalThis.AbortSignal;
-
-const EarlyBufferGlobal =
-  bufferStdlibModuleNs.Buffer ??
-  bufferStdlibModuleNs.default?.Buffer ??
-  bufferStdlibModuleNs.default;
-function normalizeBase64UrlEncoding(encoding) {
-  return typeof encoding === "string" && encoding.toLowerCase() === "base64url" ? "base64" : encoding;
-}
-function base64ToBase64Url(value) {
-  return String(value).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
-}
-function installBase64UrlBufferEncoding(BufferCtor) {
-  if (typeof BufferCtor !== "function" || BufferCtor.__agentOSBase64UrlPatched) {
-    return;
-  }
-  const originalIsEncoding = typeof BufferCtor.isEncoding === "function" ? BufferCtor.isEncoding.bind(BufferCtor) : null;
-  const originalByteLength = typeof BufferCtor.byteLength === "function" ? BufferCtor.byteLength.bind(BufferCtor) : null;
-  const originalToString = typeof BufferCtor.prototype?.toString === "function" ? BufferCtor.prototype.toString : null;
-  const originalWrite = typeof BufferCtor.prototype?.write === "function" ? BufferCtor.prototype.write : null;
-  BufferCtor.isEncoding = function isEncodingPatched(encoding) {
-    return typeof encoding === "string" && encoding.toLowerCase() === "base64url" || originalIsEncoding?.(encoding) === true;
-  };
-  if (originalByteLength) {
-    BufferCtor.byteLength = function byteLengthPatched(value, encoding, ...rest) {
-      return originalByteLength(value, normalizeBase64UrlEncoding(encoding), ...rest);
-    };
-  }
-  if (originalToString) {
-    BufferCtor.prototype.toString = function toStringPatched(encoding, ...rest) {
-      if (typeof encoding === "string" && encoding.toLowerCase() === "base64url") {
-        return base64ToBase64Url(originalToString.call(this, "base64", ...rest));
-      }
-      return originalToString.call(this, encoding, ...rest);
-    };
-  }
-  if (originalWrite) {
-    BufferCtor.prototype.write = function writePatched(string, offset, length, encoding) {
-      if (typeof offset === "string") {
-        offset = normalizeBase64UrlEncoding(offset);
-      } else if (typeof length === "string") {
-        length = normalizeBase64UrlEncoding(length);
-      } else if (typeof encoding === "string") {
-        encoding = normalizeBase64UrlEncoding(encoding);
-      }
-      return originalWrite.call(this, string, offset, length, encoding);
-    };
-  }
-  BufferCtor.__agentOSBase64UrlPatched = true;
-}
-installBase64UrlBufferEncoding(EarlyBufferGlobal);
-if (typeof EarlyBufferGlobal === "function") {
-  globalThis.Buffer = EarlyBufferGlobal;
-}
-
-const EarlyUtilTypes =
-  utilStdlibModuleNs.types ??
-  utilStdlibModuleNs.default?.types;
-const StructuredCloneTypedArrayCtors = new Map([
-  ["[object Int8Array]", Int8Array],
-  ["[object Uint8Array]", Uint8Array],
-  ["[object Uint8ClampedArray]", Uint8ClampedArray],
-  ["[object Int16Array]", Int16Array],
-  ["[object Uint16Array]", Uint16Array],
-  ["[object Int32Array]", Int32Array],
-  ["[object Uint32Array]", Uint32Array],
-  ["[object Float32Array]", Float32Array],
-  ["[object Float64Array]", Float64Array],
-  ["[object BigInt64Array]", BigInt64Array],
-  ["[object BigUint64Array]", BigUint64Array],
-]);
-function createStructuredCloneDataCloneError(message = "The object could not be cloned.") {
-  if (typeof globalThis.DOMException === "function") {
-    return new globalThis.DOMException(message, "DataCloneError");
-  }
-  const error = new Error(message);
-  error.name = "DataCloneError";
-  error.code = 25;
-  return error;
-}
-function cloneStructuredArrayBuffer(value) {
-  const clone = new ArrayBuffer(value.byteLength);
-  new Uint8Array(clone).set(new Uint8Array(value));
-  return clone;
-}
-function cloneStructuredValue(value, seen) {
-  if (value === null) {
-    return value;
-  }
-  const valueType = typeof value;
-  if (valueType === "function" || valueType === "symbol") {
-    throw createStructuredCloneDataCloneError();
-  }
-  if (valueType !== "object") {
-    return value;
-  }
-  const cached = seen.get(value);
-  if (cached !== void 0) {
-    return cached;
-  }
-  const tag = Object.prototype.toString.call(value);
-  const TypedArrayCtor = StructuredCloneTypedArrayCtors.get(tag);
-  if (TypedArrayCtor) {
-    const clonedBuffer = cloneStructuredValue(value.buffer, seen);
-    const clone = new TypedArrayCtor(clonedBuffer, value.byteOffset, value.length);
-    seen.set(value, clone);
-    return clone;
-  }
-  if (tag === "[object ArrayBuffer]") {
-    const clone = cloneStructuredArrayBuffer(value);
-    seen.set(value, clone);
-    return clone;
-  }
-  if (tag === "[object DataView]") {
-    const clonedBuffer = cloneStructuredValue(value.buffer, seen);
-    const clone = new DataView(clonedBuffer, value.byteOffset, value.byteLength);
-    seen.set(value, clone);
-    return clone;
-  }
-  if (tag === "[object Date]") {
-    const clone = new Date(value.getTime());
-    seen.set(value, clone);
-    return clone;
-  }
-  if (tag === "[object RegExp]") {
-    const clone = new RegExp(value.source, value.flags);
-    clone.lastIndex = value.lastIndex;
-    seen.set(value, clone);
-    return clone;
-  }
-  if (tag === "[object Map]") {
-    const clone = new Map();
-    seen.set(value, clone);
-    for (const [entryKey, entryValue] of value.entries()) {
-      clone.set(
-        cloneStructuredValue(entryKey, seen),
-        cloneStructuredValue(entryValue, seen)
-      );
-    }
-    return clone;
-  }
-  if (tag === "[object Set]") {
-    const clone = new Set();
-    seen.set(value, clone);
-    for (const entryValue of value.values()) {
-      clone.add(cloneStructuredValue(entryValue, seen));
-    }
-    return clone;
-  }
-  if (tag === "[object Array]") {
-    const clone = new Array(value.length);
-    seen.set(value, clone);
-    for (const key of Object.keys(value)) {
-      clone[key] = cloneStructuredValue(value[key], seen);
-    }
-    return clone;
-  }
-  if (tag === "[object Object]") {
-    const clone = Object.getPrototypeOf(value) === null ? Object.create(null) : {};
-    seen.set(value, clone);
-    for (const key of Object.keys(value)) {
-      clone[key] = cloneStructuredValue(value[key], seen);
-    }
-    return clone;
-  }
-  throw createStructuredCloneDataCloneError();
-}
-function sandboxStructuredClone(value, options = void 0) {
-  if (options != null && typeof options === "object" && "transfer" in options) {
-    // Transfer lists are accepted but ignored because the bridge always clones in-realm.
-    void options.transfer;
-  }
-  return cloneStructuredValue(value, new Map());
-}
-if (EarlyUtilTypes && typeof EarlyUtilTypes.isProxy !== "function") {
-  EarlyUtilTypes.isProxy = () => false;
-} else if (EarlyUtilTypes) {
-  try {
-    EarlyUtilTypes.isProxy({});
-  } catch (_error) {
-    EarlyUtilTypes.isProxy = () => false;
-  }
-}
-
-"use strict";
-
-export {
-  EarlyBufferGlobal,
-  EarlyUtilTypes,
-  NativeAbortControllerGlobal,
-  NativeAbortSignalGlobal,
-  StructuredCloneTypedArrayCtors,
-  WebReadableStream,
-  WebTextDecoderStream,
-  WebTextEncoderStream,
-  WebTransformStream,
-  WebWritableStream,
-  base64ToBase64Url,
-  bufferStdlibModuleNs,
-  cloneStructuredArrayBuffer,
-  cloneStructuredValue,
-  constantsStdlibModuleNs,
-  createStructuredCloneDataCloneError,
-  eventsStdlibModuleNs,
-  installBase64UrlBufferEncoding,
-  normalizeBase64UrlEncoding,
-  pathStdlibModuleNs,
-  punycodeStdlibModuleNs,
-  querystringStdlibModuleNs,
-  sandboxStructuredClone,
-  streamStdlibModuleNs,
-  stringDecoderStdlibModuleNs,
-  undiciAgentModule,
-  undiciApiModule,
-  undiciClientModule,
-  undiciFetchModule,
-  undiciGlobalModule,
-  undiciHeadersModule,
-  undiciRequestModule,
-  undiciResponseModule,
-  undiciWebidlModule,
-  urlStdlibModuleNs,
-  utilStdlibModuleNs,
-};
diff --git a/packages/build-tools/bridge-src/transport.ts b/packages/build-tools/bridge-src/transport.ts
deleted file mode 100644
index 7fcb300dd..000000000
--- a/packages/build-tools/bridge-src/transport.ts
+++ /dev/null
@@ -1,40 +0,0 @@
-function encodeDispatchArgs(args) {
-  return JSON.stringify(
-    args,
-    (_key, value) => value === void 0 ? { __secureExecDispatchType: "undefined" } : value
-  );
-}
-function encodeDispatch(method, args) {
-  return `__bd:${method}:${encodeDispatchArgs(args)}`;
-}
-function parseDispatchResult(resultJson) {
-  if (resultJson === null) {
-    return void 0;
-  }
-  const parsed = JSON.parse(resultJson);
-  if (parsed.__bd_error) {
-    const error = new Error(parsed.__bd_error.message);
-    error.name = parsed.__bd_error.name ?? "Error";
-    if (parsed.__bd_error.code !== void 0) {
-      error.code = parsed.__bd_error.code;
-    }
-    if (parsed.__bd_error.stack) {
-      error.stack = parsed.__bd_error.stack;
-    }
-    throw error;
-  }
-  return parsed.__bd_result;
-}
-function requireDispatchBridge() {
-  if (!_loadPolyfill) {
-    throw new Error("_loadPolyfill is not available in sandbox");
-  }
-  return _loadPolyfill;
-}
-function bridgeDispatchSync(method, ...args) {
-  const bridge = requireDispatchBridge();
-  return parseDispatchResult(
-    bridge.applySyncPromise(void 0, [encodeDispatch(method, args)])
-  );
-}
-export { encodeDispatchArgs, encodeDispatch, parseDispatchResult, requireDispatchBridge, bridgeDispatchSync };
diff --git a/packages/build-tools/bridge-src/vendor/buffer.ts b/packages/build-tools/bridge-src/vendor/buffer.ts
deleted file mode 100644
index 92dac8f80..000000000
--- a/packages/build-tools/bridge-src/vendor/buffer.ts
+++ /dev/null
@@ -1,1786 +0,0 @@
-import { __commonJS } from "./esbuild-runtime.js";
-
-// ../../../tmp/buffer-build/node_modules/base64-js/index.js
-var require_base64_js = __commonJS({
-  "../../../tmp/buffer-build/node_modules/base64-js/index.js"(exports) {
-    "use strict";
-    exports.byteLength = byteLength;
-    exports.toByteArray = toByteArray;
-    exports.fromByteArray = fromByteArray;
-    var lookup = [];
-    var revLookup = [];
-    var Arr = typeof Uint8Array !== "undefined" ? Uint8Array : Array;
-    var code = "ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/";
-    for (i = 0, len = code.length; i < len; ++i) {
-      lookup[i] = code[i];
-      revLookup[code.charCodeAt(i)] = i;
-    }
-    var i;
-    var len;
-    revLookup["-".charCodeAt(0)] = 62;
-    revLookup["_".charCodeAt(0)] = 63;
-    function getLens(b64) {
-      var len2 = b64.length;
-      if (len2 % 4 > 0) {
-        throw new Error("Invalid string. Length must be a multiple of 4");
-      }
-      var validLen = b64.indexOf("=");
-      if (validLen === -1) validLen = len2;
-      var placeHoldersLen = validLen === len2 ? 0 : 4 - validLen % 4;
-      return [validLen, placeHoldersLen];
-    }
-    function byteLength(b64) {
-      var lens = getLens(b64);
-      var validLen = lens[0];
-      var placeHoldersLen = lens[1];
-      return (validLen + placeHoldersLen) * 3 / 4 - placeHoldersLen;
-    }
-    function _byteLength(b64, validLen, placeHoldersLen) {
-      return (validLen + placeHoldersLen) * 3 / 4 - placeHoldersLen;
-    }
-    function toByteArray(b64) {
-      var tmp;
-      var lens = getLens(b64);
-      var validLen = lens[0];
-      var placeHoldersLen = lens[1];
-      var arr = new Arr(_byteLength(b64, validLen, placeHoldersLen));
-      var curByte = 0;
-      var len2 = placeHoldersLen > 0 ? validLen - 4 : validLen;
-      var i2;
-      for (i2 = 0; i2 < len2; i2 += 4) {
-        tmp = revLookup[b64.charCodeAt(i2)] << 18 | revLookup[b64.charCodeAt(i2 + 1)] << 12 | revLookup[b64.charCodeAt(i2 + 2)] << 6 | revLookup[b64.charCodeAt(i2 + 3)];
-        arr[curByte++] = tmp >> 16 & 255;
-        arr[curByte++] = tmp >> 8 & 255;
-        arr[curByte++] = tmp & 255;
-      }
-      if (placeHoldersLen === 2) {
-        tmp = revLookup[b64.charCodeAt(i2)] << 2 | revLookup[b64.charCodeAt(i2 + 1)] >> 4;
-        arr[curByte++] = tmp & 255;
-      }
-      if (placeHoldersLen === 1) {
-        tmp = revLookup[b64.charCodeAt(i2)] << 10 | revLookup[b64.charCodeAt(i2 + 1)] << 4 | revLookup[b64.charCodeAt(i2 + 2)] >> 2;
-        arr[curByte++] = tmp >> 8 & 255;
-        arr[curByte++] = tmp & 255;
-      }
-      return arr;
-    }
-    function tripletToBase64(num) {
-      return lookup[num >> 18 & 63] + lookup[num >> 12 & 63] + lookup[num >> 6 & 63] + lookup[num & 63];
-    }
-    function encodeChunk(uint8, start, end) {
-      var tmp;
-      var output = [];
-      for (var i2 = start; i2 < end; i2 += 3) {
-        tmp = (uint8[i2] << 16 & 16711680) + (uint8[i2 + 1] << 8 & 65280) + (uint8[i2 + 2] & 255);
-        output.push(tripletToBase64(tmp));
-      }
-      return output.join("");
-    }
-    function fromByteArray(uint8) {
-      var tmp;
-      var len2 = uint8.length;
-      var extraBytes = len2 % 3;
-      var parts = [];
-      var maxChunkLength = 16383;
-      for (var i2 = 0, len22 = len2 - extraBytes; i2 < len22; i2 += maxChunkLength) {
-        parts.push(encodeChunk(uint8, i2, i2 + maxChunkLength > len22 ? len22 : i2 + maxChunkLength));
-      }
-      if (extraBytes === 1) {
-        tmp = uint8[len2 - 1];
-        parts.push(
-          lookup[tmp >> 2] + lookup[tmp << 4 & 63] + "=="
-        );
-      } else if (extraBytes === 2) {
-        tmp = (uint8[len2 - 2] << 8) + uint8[len2 - 1];
-        parts.push(
-          lookup[tmp >> 10] + lookup[tmp >> 4 & 63] + lookup[tmp << 2 & 63] + "="
-        );
-      }
-      return parts.join("");
-    }
-  }
-});
-
-// ../../../tmp/buffer-build/node_modules/ieee754/index.js
-var require_ieee754 = __commonJS({
-  "../../../tmp/buffer-build/node_modules/ieee754/index.js"(exports) {
-    exports.read = function(buffer, offset, isLE, mLen, nBytes) {
-      var e, m;
-      var eLen = nBytes * 8 - mLen - 1;
-      var eMax = (1 << eLen) - 1;
-      var eBias = eMax >> 1;
-      var nBits = -7;
-      var i = isLE ? nBytes - 1 : 0;
-      var d = isLE ? -1 : 1;
-      var s = buffer[offset + i];
-      i += d;
-      e = s & (1 << -nBits) - 1;
-      s >>= -nBits;
-      nBits += eLen;
-      for (; nBits > 0; e = e * 256 + buffer[offset + i], i += d, nBits -= 8) {
-      }
-      m = e & (1 << -nBits) - 1;
-      e >>= -nBits;
-      nBits += mLen;
-      for (; nBits > 0; m = m * 256 + buffer[offset + i], i += d, nBits -= 8) {
-      }
-      if (e === 0) {
-        e = 1 - eBias;
-      } else if (e === eMax) {
-        return m ? NaN : (s ? -1 : 1) * Infinity;
-      } else {
-        m = m + Math.pow(2, mLen);
-        e = e - eBias;
-      }
-      return (s ? -1 : 1) * m * Math.pow(2, e - mLen);
-    };
-    exports.write = function(buffer, value, offset, isLE, mLen, nBytes) {
-      var e, m, c;
-      var eLen = nBytes * 8 - mLen - 1;
-      var eMax = (1 << eLen) - 1;
-      var eBias = eMax >> 1;
-      var rt = mLen === 23 ? Math.pow(2, -24) - Math.pow(2, -77) : 0;
-      var i = isLE ? 0 : nBytes - 1;
-      var d = isLE ? 1 : -1;
-      var s = value < 0 || value === 0 && 1 / value < 0 ? 1 : 0;
-      value = Math.abs(value);
-      if (isNaN(value) || value === Infinity) {
-        m = isNaN(value) ? 1 : 0;
-        e = eMax;
-      } else {
-        e = Math.floor(Math.log(value) / Math.LN2);
-        if (value * (c = Math.pow(2, -e)) < 1) {
-          e--;
-          c *= 2;
-        }
-        if (e + eBias >= 1) {
-          value += rt / c;
-        } else {
-          value += rt * Math.pow(2, 1 - eBias);
-        }
-        if (value * c >= 2) {
-          e++;
-          c /= 2;
-        }
-        if (e + eBias >= eMax) {
-          m = 0;
-          e = eMax;
-        } else if (e + eBias >= 1) {
-          m = (value * c - 1) * Math.pow(2, mLen);
-          e = e + eBias;
-        } else {
-          m = value * Math.pow(2, eBias - 1) * Math.pow(2, mLen);
-          e = 0;
-        }
-      }
-      for (; mLen >= 8; buffer[offset + i] = m & 255, i += d, m /= 256, mLen -= 8) {
-      }
-      e = e << mLen | m;
-      eLen += mLen;
-      for (; eLen > 0; buffer[offset + i] = e & 255, i += d, e /= 256, eLen -= 8) {
-      }
-      buffer[offset + i - d] |= s * 128;
-    };
-  }
-});
-
-// ../../../tmp/buffer-build/node_modules/buffer/index.js
-var require_buffer = __commonJS({
-  "../../../tmp/buffer-build/node_modules/buffer/index.js"(exports) {
-    "use strict";
-    var base64 = require_base64_js();
-    var ieee754 = require_ieee754();
-    var customInspectSymbol = typeof Symbol === "function" && typeof Symbol["for"] === "function" ? Symbol["for"]("nodejs.util.inspect.custom") : null;
-    exports.Buffer = Buffer4;
-    exports.SlowBuffer = SlowBuffer;
-    exports.INSPECT_MAX_BYTES = 50;
-    var K_MAX_LENGTH = 2147483647;
-    exports.kMaxLength = K_MAX_LENGTH;
-    Buffer4.TYPED_ARRAY_SUPPORT = typedArraySupport();
-    if (!Buffer4.TYPED_ARRAY_SUPPORT && typeof console !== "undefined" && typeof console.error === "function") {
-      console.error(
-        "This browser lacks typed array (Uint8Array) support which is required by `buffer` v5.x. Use `buffer` v4.x if you require old browser support."
-      );
-    }
-    function typedArraySupport() {
-      try {
-        const arr = new Uint8Array(1);
-        const proto = { foo: function() {
-          return 42;
-        } };
-        Object.setPrototypeOf(proto, Uint8Array.prototype);
-        Object.setPrototypeOf(arr, proto);
-        return arr.foo() === 42;
-      } catch (e) {
-        return false;
-      }
-    }
-    Object.defineProperty(Buffer4.prototype, "parent", {
-      enumerable: true,
-      get: function() {
-        if (!Buffer4.isBuffer(this)) return void 0;
-        return this.buffer;
-      }
-    });
-    Object.defineProperty(Buffer4.prototype, "offset", {
-      enumerable: true,
-      get: function() {
-        if (!Buffer4.isBuffer(this)) return void 0;
-        return this.byteOffset;
-      }
-    });
-    function createBuffer(length) {
-      if (length > K_MAX_LENGTH) {
-        throw new RangeError('The value "' + length + '" is invalid for option "size"');
-      }
-      const buf = new Uint8Array(length);
-      Object.setPrototypeOf(buf, Buffer4.prototype);
-      return buf;
-    }
-    function Buffer4(arg, encodingOrOffset, length) {
-      if (typeof arg === "number") {
-        if (typeof encodingOrOffset === "string") {
-          throw new TypeError(
-            'The "string" argument must be of type string. Received type number'
-          );
-        }
-        return allocUnsafe(arg);
-      }
-      return from(arg, encodingOrOffset, length);
-    }
-    Buffer4.poolSize = 8192;
-    function from(value, encodingOrOffset, length) {
-      if (typeof value === "string") {
-        return fromString(value, encodingOrOffset);
-      }
-      if (ArrayBuffer.isView(value)) {
-        return fromArrayView(value);
-      }
-      if (value == null) {
-        throw new TypeError(
-          "The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type " + typeof value
-        );
-      }
-      if (isInstance(value, ArrayBuffer) || value && isInstance(value.buffer, ArrayBuffer)) {
-        return fromArrayBuffer(value, encodingOrOffset, length);
-      }
-      if (typeof SharedArrayBuffer !== "undefined" && (isInstance(value, SharedArrayBuffer) || value && isInstance(value.buffer, SharedArrayBuffer))) {
-        return fromArrayBuffer(value, encodingOrOffset, length);
-      }
-      if (typeof value === "number") {
-        throw new TypeError(
-          'The "value" argument must not be of type number. Received type number'
-        );
-      }
-      const valueOf = value.valueOf && value.valueOf();
-      if (valueOf != null && valueOf !== value) {
-        return Buffer4.from(valueOf, encodingOrOffset, length);
-      }
-      const b = fromObject(value);
-      if (b) return b;
-      if (typeof Symbol !== "undefined" && Symbol.toPrimitive != null && typeof value[Symbol.toPrimitive] === "function") {
-        return Buffer4.from(value[Symbol.toPrimitive]("string"), encodingOrOffset, length);
-      }
-      throw new TypeError(
-        "The first argument must be one of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type " + typeof value
-      );
-    }
-    Buffer4.from = function(value, encodingOrOffset, length) {
-      return from(value, encodingOrOffset, length);
-    };
-    Object.setPrototypeOf(Buffer4.prototype, Uint8Array.prototype);
-    Object.setPrototypeOf(Buffer4, Uint8Array);
-    function assertSize(size) {
-      if (typeof size !== "number") {
-        throw new TypeError('"size" argument must be of type number');
-      } else if (size < 0) {
-        throw new RangeError('The value "' + size + '" is invalid for option "size"');
-      }
-    }
-    function alloc(size, fill, encoding) {
-      assertSize(size);
-      if (size <= 0) {
-        return createBuffer(size);
-      }
-      if (fill !== void 0) {
-        return typeof encoding === "string" ? createBuffer(size).fill(fill, encoding) : createBuffer(size).fill(fill);
-      }
-      return createBuffer(size);
-    }
-    Buffer4.alloc = function(size, fill, encoding) {
-      return alloc(size, fill, encoding);
-    };
-    function allocUnsafe(size) {
-      assertSize(size);
-      return createBuffer(size < 0 ? 0 : checked(size) | 0);
-    }
-    Buffer4.allocUnsafe = function(size) {
-      return allocUnsafe(size);
-    };
-    Buffer4.allocUnsafeSlow = function(size) {
-      return allocUnsafe(size);
-    };
-    function fromString(string, encoding) {
-      if (typeof encoding !== "string" || encoding === "") {
-        encoding = "utf8";
-      }
-      if (!Buffer4.isEncoding(encoding)) {
-        throw new TypeError("Unknown encoding: " + encoding);
-      }
-      const length = byteLength(string, encoding) | 0;
-      let buf = createBuffer(length);
-      const actual = buf.write(string, encoding);
-      if (actual !== length) {
-        buf = buf.slice(0, actual);
-      }
-      return buf;
-    }
-    function fromArrayLike(array) {
-      const length = array.length < 0 ? 0 : checked(array.length) | 0;
-      const buf = createBuffer(length);
-      for (let i = 0; i < length; i += 1) {
-        buf[i] = array[i] & 255;
-      }
-      return buf;
-    }
-    function fromArrayView(arrayView) {
-      if (isInstance(arrayView, Uint8Array)) {
-        const copy = new Uint8Array(arrayView);
-        return fromArrayBuffer(copy.buffer, copy.byteOffset, copy.byteLength);
-      }
-      return fromArrayLike(arrayView);
-    }
-    function fromArrayBuffer(array, byteOffset, length) {
-      if (byteOffset < 0 || array.byteLength < byteOffset) {
-        throw new RangeError('"offset" is outside of buffer bounds');
-      }
-      if (array.byteLength < byteOffset + (length || 0)) {
-        throw new RangeError('"length" is outside of buffer bounds');
-      }
-      let buf;
-      if (byteOffset === void 0 && length === void 0) {
-        buf = new Uint8Array(array);
-      } else if (length === void 0) {
-        buf = new Uint8Array(array, byteOffset);
-      } else {
-        buf = new Uint8Array(array, byteOffset, length);
-      }
-      Object.setPrototypeOf(buf, Buffer4.prototype);
-      return buf;
-    }
-    function fromObject(obj) {
-      if (Buffer4.isBuffer(obj)) {
-        const len = checked(obj.length) | 0;
-        const buf = createBuffer(len);
-        if (buf.length === 0) {
-          return buf;
-        }
-        obj.copy(buf, 0, 0, len);
-        return buf;
-      }
-      if (obj.length !== void 0) {
-        if (typeof obj.length !== "number" || numberIsNaN(obj.length)) {
-          return createBuffer(0);
-        }
-        return fromArrayLike(obj);
-      }
-      if (obj.type === "Buffer" && Array.isArray(obj.data)) {
-        return fromArrayLike(obj.data);
-      }
-    }
-    function checked(length) {
-      if (length >= K_MAX_LENGTH) {
-        throw new RangeError("Attempt to allocate Buffer larger than maximum size: 0x" + K_MAX_LENGTH.toString(16) + " bytes");
-      }
-      return length | 0;
-    }
-    function SlowBuffer(length) {
-      if (+length != length) {
-        length = 0;
-      }
-      return Buffer4.alloc(+length);
-    }
-    Buffer4.isBuffer = function isBuffer(b) {
-      return b != null && b._isBuffer === true && b !== Buffer4.prototype;
-    };
-    Buffer4.compare = function compare(a, b) {
-      if (isInstance(a, Uint8Array)) a = Buffer4.from(a, a.offset, a.byteLength);
-      if (isInstance(b, Uint8Array)) b = Buffer4.from(b, b.offset, b.byteLength);
-      if (!Buffer4.isBuffer(a) || !Buffer4.isBuffer(b)) {
-        throw new TypeError(
-          'The "buf1", "buf2" arguments must be one of type Buffer or Uint8Array'
-        );
-      }
-      if (a === b) return 0;
-      let x = a.length;
-      let y = b.length;
-      for (let i = 0, len = Math.min(x, y); i < len; ++i) {
-        if (a[i] !== b[i]) {
-          x = a[i];
-          y = b[i];
-          break;
-        }
-      }
-      if (x < y) return -1;
-      if (y < x) return 1;
-      return 0;
-    };
-    Buffer4.isEncoding = function isEncoding(encoding) {
-      switch (String(encoding).toLowerCase()) {
-        case "hex":
-        case "utf8":
-        case "utf-8":
-        case "ascii":
-        case "latin1":
-        case "binary":
-        case "base64":
-        case "base64url":
-        case "ucs2":
-        case "ucs-2":
-        case "utf16le":
-        case "utf-16le":
-          return true;
-        default:
-          return false;
-      }
-    };
-    Buffer4.concat = function concat(list, length) {
-      if (!Array.isArray(list)) {
-        throw new TypeError('"list" argument must be an Array of Buffers');
-      }
-      if (list.length === 0) {
-        return Buffer4.alloc(0);
-      }
-      let i;
-      if (length === void 0) {
-        length = 0;
-        for (i = 0; i < list.length; ++i) {
-          length += list[i].length;
-        }
-      }
-      const buffer = Buffer4.alloc(length);
-      let pos = 0;
-      for (i = 0; i < list.length; ++i) {
-        let buf = list[i];
-        if (!isInstance(buf, Uint8Array)) {
-          throw new TypeError('"list" argument must be an Array of Buffers');
-        }
-        if (!Buffer4.isBuffer(buf)) {
-          buf = Buffer4.from(buf);
-        }
-        if (pos >= buffer.length) {
-          break;
-        }
-        const remaining = buffer.length - pos;
-        const copyLength = buf.length > remaining ? remaining : buf.length;
-        Uint8Array.prototype.set.call(
-          buffer,
-          buf.subarray(0, copyLength),
-          pos
-        );
-        pos += copyLength;
-      }
-      return buffer;
-    };
-    function byteLength(string, encoding) {
-      if (Buffer4.isBuffer(string)) {
-        return string.length;
-      }
-      if (ArrayBuffer.isView(string) || isInstance(string, ArrayBuffer)) {
-        return string.byteLength;
-      }
-      if (typeof string !== "string") {
-        throw new TypeError(
-          'The "string" argument must be one of type string, Buffer, or ArrayBuffer. Received type ' + typeof string
-        );
-      }
-      const len = string.length;
-      const mustMatch = arguments.length > 2 && arguments[2] === true;
-      if (!mustMatch && len === 0) return 0;
-      let loweredCase = false;
-      for (; ; ) {
-        switch (encoding) {
-          case "ascii":
-          case "latin1":
-          case "binary":
-            return len;
-          case "utf8":
-          case "utf-8":
-            return utf8ToBytes(string).length;
-          case "ucs2":
-          case "ucs-2":
-          case "utf16le":
-          case "utf-16le":
-            return len * 2;
-          case "hex":
-            return len >>> 1;
-          case "base64":
-          case "base64url":
-            return base64ToBytes(string).length;
-          default:
-            if (loweredCase) {
-              return mustMatch ? -1 : utf8ToBytes(string).length;
-            }
-            encoding = ("" + encoding).toLowerCase();
-            loweredCase = true;
-        }
-      }
-    }
-    Buffer4.byteLength = byteLength;
-    function slowToString(encoding, start, end) {
-      let loweredCase = false;
-      if (start === void 0 || start < 0) {
-        start = 0;
-      }
-      if (start > this.length) {
-        return "";
-      }
-      if (end === void 0 || end > this.length) {
-        end = this.length;
-      }
-      if (end <= 0) {
-        return "";
-      }
-      end >>>= 0;
-      start >>>= 0;
-      if (end <= start) {
-        return "";
-      }
-      if (!encoding) encoding = "utf8";
-      while (true) {
-        switch (encoding) {
-          case "hex":
-            return hexSlice(this, start, end);
-          case "utf8":
-          case "utf-8":
-            return utf8Slice(this, start, end);
-          case "ascii":
-            return asciiSlice(this, start, end);
-          case "latin1":
-          case "binary":
-            return latin1Slice(this, start, end);
-          case "base64":
-            return base64Slice(this, start, end);
-          case "base64url":
-            return base64UrlSlice(this, start, end);
-          case "ucs2":
-          case "ucs-2":
-          case "utf16le":
-          case "utf-16le":
-            return utf16leSlice(this, start, end);
-          default:
-            if (loweredCase) throw new TypeError("Unknown encoding: " + encoding);
-            encoding = (encoding + "").toLowerCase();
-            loweredCase = true;
-        }
-      }
-    }
-    Buffer4.prototype._isBuffer = true;
-    function swap(b, n, m) {
-      const i = b[n];
-      b[n] = b[m];
-      b[m] = i;
-    }
-    Buffer4.prototype.swap16 = function swap16() {
-      const len = this.length;
-      if (len % 2 !== 0) {
-        throw new RangeError("Buffer size must be a multiple of 16-bits");
-      }
-      for (let i = 0; i < len; i += 2) {
-        swap(this, i, i + 1);
-      }
-      return this;
-    };
-    Buffer4.prototype.swap32 = function swap32() {
-      const len = this.length;
-      if (len % 4 !== 0) {
-        throw new RangeError("Buffer size must be a multiple of 32-bits");
-      }
-      for (let i = 0; i < len; i += 4) {
-        swap(this, i, i + 3);
-        swap(this, i + 1, i + 2);
-      }
-      return this;
-    };
-    Buffer4.prototype.swap64 = function swap64() {
-      const len = this.length;
-      if (len % 8 !== 0) {
-        throw new RangeError("Buffer size must be a multiple of 64-bits");
-      }
-      for (let i = 0; i < len; i += 8) {
-        swap(this, i, i + 7);
-        swap(this, i + 1, i + 6);
-        swap(this, i + 2, i + 5);
-        swap(this, i + 3, i + 4);
-      }
-      return this;
-    };
-    Buffer4.prototype.toString = function toString() {
-      const length = this.length;
-      if (length === 0) return "";
-      if (arguments.length === 0) return utf8Slice(this, 0, length);
-      return slowToString.apply(this, arguments);
-    };
-    Buffer4.prototype.toLocaleString = Buffer4.prototype.toString;
-    Buffer4.prototype.equals = function equals(b) {
-      if (!Buffer4.isBuffer(b)) throw new TypeError("Argument must be a Buffer");
-      if (this === b) return true;
-      return Buffer4.compare(this, b) === 0;
-    };
-    Buffer4.prototype.inspect = function inspect() {
-      let str = "";
-      const max = exports.INSPECT_MAX_BYTES;
-      str = this.toString("hex", 0, max).replace(/(.{2})/g, "$1 ").trim();
-      if (this.length > max) str += " ... ";
-      return "<Buffer " + str + ">";
-    };
-    if (customInspectSymbol) {
-      Buffer4.prototype[customInspectSymbol] = Buffer4.prototype.inspect;
-    }
-    Buffer4.prototype.compare = function compare(target, start, end, thisStart, thisEnd) {
-      if (isInstance(target, Uint8Array)) {
-        target = Buffer4.from(target, target.offset, target.byteLength);
-      }
-      if (!Buffer4.isBuffer(target)) {
-        throw new TypeError(
-          'The "target" argument must be one of type Buffer or Uint8Array. Received type ' + typeof target
-        );
-      }
-      if (start === void 0) {
-        start = 0;
-      }
-      if (end === void 0) {
-        end = target ? target.length : 0;
-      }
-      if (thisStart === void 0) {
-        thisStart = 0;
-      }
-      if (thisEnd === void 0) {
-        thisEnd = this.length;
-      }
-      if (start < 0 || end > target.length || thisStart < 0 || thisEnd > this.length) {
-        throw new RangeError("out of range index");
-      }
-      if (thisStart >= thisEnd && start >= end) {
-        return 0;
-      }
-      if (thisStart >= thisEnd) {
-        return -1;
-      }
-      if (start >= end) {
-        return 1;
-      }
-      start >>>= 0;
-      end >>>= 0;
-      thisStart >>>= 0;
-      thisEnd >>>= 0;
-      if (this === target) return 0;
-      let x = thisEnd - thisStart;
-      let y = end - start;
-      const len = Math.min(x, y);
-      const thisCopy = this.slice(thisStart, thisEnd);
-      const targetCopy = target.slice(start, end);
-      for (let i = 0; i < len; ++i) {
-        if (thisCopy[i] !== targetCopy[i]) {
-          x = thisCopy[i];
-          y = targetCopy[i];
-          break;
-        }
-      }
-      if (x < y) return -1;
-      if (y < x) return 1;
-      return 0;
-    };
-    function bidirectionalIndexOf(buffer, val, byteOffset, encoding, dir) {
-      if (buffer.length === 0) return -1;
-      if (typeof byteOffset === "string") {
-        encoding = byteOffset;
-        byteOffset = 0;
-      } else if (byteOffset > 2147483647) {
-        byteOffset = 2147483647;
-      } else if (byteOffset < -2147483648) {
-        byteOffset = -2147483648;
-      }
-      byteOffset = +byteOffset;
-      if (numberIsNaN(byteOffset)) {
-        byteOffset = dir ? 0 : buffer.length - 1;
-      }
-      if (byteOffset < 0) byteOffset = buffer.length + byteOffset;
-      if (byteOffset >= buffer.length) {
-        if (dir) return -1;
-        else byteOffset = buffer.length - 1;
-      } else if (byteOffset < 0) {
-        if (dir) byteOffset = 0;
-        else return -1;
-      }
-      if (typeof val === "string") {
-        val = Buffer4.from(val, encoding);
-      }
-      if (Buffer4.isBuffer(val)) {
-        if (val.length === 0) {
-          return -1;
-        }
-        return arrayIndexOf(buffer, val, byteOffset, encoding, dir);
-      } else if (typeof val === "number") {
-        val = val & 255;
-        if (typeof Uint8Array.prototype.indexOf === "function") {
-          if (dir) {
-            return Uint8Array.prototype.indexOf.call(buffer, val, byteOffset);
-          } else {
-            return Uint8Array.prototype.lastIndexOf.call(buffer, val, byteOffset);
-          }
-        }
-        return arrayIndexOf(buffer, [val], byteOffset, encoding, dir);
-      }
-      throw new TypeError("val must be string, number or Buffer");
-    }
-    function arrayIndexOf(arr, val, byteOffset, encoding, dir) {
-      let indexSize = 1;
-      let arrLength = arr.length;
-      let valLength = val.length;
-      if (encoding !== void 0) {
-        encoding = String(encoding).toLowerCase();
-        if (encoding === "ucs2" || encoding === "ucs-2" || encoding === "utf16le" || encoding === "utf-16le") {
-          if (arr.length < 2 || val.length < 2) {
-            return -1;
-          }
-          indexSize = 2;
-          arrLength /= 2;
-          valLength /= 2;
-          byteOffset /= 2;
-        }
-      }
-      function read(buf, i2) {
-        if (indexSize === 1) {
-          return buf[i2];
-        } else {
-          return buf.readUInt16BE(i2 * indexSize);
-        }
-      }
-      let i;
-      if (dir) {
-        let foundIndex = -1;
-        for (i = byteOffset; i < arrLength; i++) {
-          if (read(arr, i) === read(val, foundIndex === -1 ? 0 : i - foundIndex)) {
-            if (foundIndex === -1) foundIndex = i;
-            if (i - foundIndex + 1 === valLength) return foundIndex * indexSize;
-          } else {
-            if (foundIndex !== -1) i -= i - foundIndex;
-            foundIndex = -1;
-          }
-        }
-      } else {
-        if (byteOffset + valLength > arrLength) byteOffset = arrLength - valLength;
-        for (i = byteOffset; i >= 0; i--) {
-          let found = true;
-          for (let j = 0; j < valLength; j++) {
-            if (read(arr, i + j) !== read(val, j)) {
-              found = false;
-              break;
-            }
-          }
-          if (found) return i;
-        }
-      }
-      return -1;
-    }
-    Buffer4.prototype.includes = function includes(val, byteOffset, encoding) {
-      return this.indexOf(val, byteOffset, encoding) !== -1;
-    };
-    Buffer4.prototype.indexOf = function indexOf(val, byteOffset, encoding) {
-      return bidirectionalIndexOf(this, val, byteOffset, encoding, true);
-    };
-    Buffer4.prototype.lastIndexOf = function lastIndexOf(val, byteOffset, encoding) {
-      return bidirectionalIndexOf(this, val, byteOffset, encoding, false);
-    };
-    function hexWrite(buf, string, offset, length) {
-      offset = Number(offset) || 0;
-      const remaining = buf.length - offset;
-      if (!length) {
-        length = remaining;
-      } else {
-        length = Number(length);
-        if (length > remaining) {
-          length = remaining;
-        }
-      }
-      const strLen = string.length;
-      if (length > strLen / 2) {
-        length = strLen / 2;
-      }
-      let i;
-      for (i = 0; i < length; ++i) {
-        const parsed = parseInt(string.substr(i * 2, 2), 16);
-        if (numberIsNaN(parsed)) return i;
-        buf[offset + i] = parsed;
-      }
-      return i;
-    }
-    function utf8Write(buf, string, offset, length) {
-      return blitBuffer(utf8ToBytes(string, buf.length - offset), buf, offset, length);
-    }
-    function asciiWrite(buf, string, offset, length) {
-      return blitBuffer(asciiToBytes(string), buf, offset, length);
-    }
-    function base64Write(buf, string, offset, length) {
-      return blitBuffer(base64ToBytes(string), buf, offset, length);
-    }
-    function ucs2Write(buf, string, offset, length) {
-      return blitBuffer(utf16leToBytes(string, buf.length - offset), buf, offset, length);
-    }
-    Buffer4.prototype.write = function write(string, offset, length, encoding) {
-      if (offset === void 0) {
-        encoding = "utf8";
-        length = this.length;
-        offset = 0;
-      } else if (length === void 0 && typeof offset === "string") {
-        encoding = offset;
-        length = this.length;
-        offset = 0;
-      } else if (isFinite(offset)) {
-        offset = offset >>> 0;
-        if (isFinite(length)) {
-          length = length >>> 0;
-          if (encoding === void 0) encoding = "utf8";
-        } else {
-          encoding = length;
-          length = void 0;
-        }
-      } else {
-        throw new Error(
-          "Buffer.write(string, encoding, offset[, length]) is no longer supported"
-        );
-      }
-      const remaining = this.length - offset;
-      if (length === void 0 || length > remaining) length = remaining;
-      if (string.length > 0 && (length < 0 || offset < 0) || offset > this.length) {
-        throw new RangeError("Attempt to write outside buffer bounds");
-      }
-      if (!encoding) encoding = "utf8";
-      let loweredCase = false;
-      for (; ; ) {
-        switch (encoding) {
-          case "hex":
-            return hexWrite(this, string, offset, length);
-          case "utf8":
-          case "utf-8":
-            return utf8Write(this, string, offset, length);
-          case "ascii":
-          case "latin1":
-          case "binary":
-            return asciiWrite(this, string, offset, length);
-          case "base64":
-          case "base64url":
-            return base64Write(this, string, offset, length);
-          case "ucs2":
-          case "ucs-2":
-          case "utf16le":
-          case "utf-16le":
-            return ucs2Write(this, string, offset, length);
-          default:
-            if (loweredCase) throw new TypeError("Unknown encoding: " + encoding);
-            encoding = ("" + encoding).toLowerCase();
-            loweredCase = true;
-        }
-      }
-    };
-    Buffer4.prototype.toJSON = function toJSON() {
-      return {
-        type: "Buffer",
-        data: Array.prototype.slice.call(this._arr || this, 0)
-      };
-    };
-    function base64Slice(buf, start, end) {
-      if (start === 0 && end === buf.length) {
-        return base64.fromByteArray(buf);
-      } else {
-        return base64.fromByteArray(buf.slice(start, end));
-      }
-    }
-    function base64UrlSlice(buf, start, end) {
-      return base64Slice(buf, start, end).replace(/\+/g, "-").replace(/\//g, "_").replace(/=+$/g, "");
-    }
-    function utf8Slice(buf, start, end) {
-      end = Math.min(buf.length, end);
-      const res = [];
-      let i = start;
-      while (i < end) {
-        const firstByte = buf[i];
-        let codePoint = null;
-        let bytesPerSequence = firstByte > 239 ? 4 : firstByte > 223 ? 3 : firstByte > 191 ? 2 : 1;
-        if (i + bytesPerSequence <= end) {
-          let secondByte, thirdByte, fourthByte, tempCodePoint;
-          switch (bytesPerSequence) {
-            case 1:
-              if (firstByte < 128) {
-                codePoint = firstByte;
-              }
-              break;
-            case 2:
-              secondByte = buf[i + 1];
-              if ((secondByte & 192) === 128) {
-                tempCodePoint = (firstByte & 31) << 6 | secondByte & 63;
-                if (tempCodePoint > 127) {
-                  codePoint = tempCodePoint;
-                }
-              }
-              break;
-            case 3:
-              secondByte = buf[i + 1];
-              thirdByte = buf[i + 2];
-              if ((secondByte & 192) === 128 && (thirdByte & 192) === 128) {
-                tempCodePoint = (firstByte & 15) << 12 | (secondByte & 63) << 6 | thirdByte & 63;
-                if (tempCodePoint > 2047 && (tempCodePoint < 55296 || tempCodePoint > 57343)) {
-                  codePoint = tempCodePoint;
-                }
-              }
-              break;
-            case 4:
-              secondByte = buf[i + 1];
-              thirdByte = buf[i + 2];
-              fourthByte = buf[i + 3];
-              if ((secondByte & 192) === 128 && (thirdByte & 192) === 128 && (fourthByte & 192) === 128) {
-                tempCodePoint = (firstByte & 15) << 18 | (secondByte & 63) << 12 | (thirdByte & 63) << 6 | fourthByte & 63;
-                if (tempCodePoint > 65535 && tempCodePoint < 1114112) {
-                  codePoint = tempCodePoint;
-                }
-              }
-          }
-        }
-        if (codePoint === null) {
-          codePoint = 65533;
-          bytesPerSequence = 1;
-        } else if (codePoint > 65535) {
-          codePoint -= 65536;
-          res.push(codePoint >>> 10 & 1023 | 55296);
-          codePoint = 56320 | codePoint & 1023;
-        }
-        res.push(codePoint);
-        i += bytesPerSequence;
-      }
-      return decodeCodePointsArray(res);
-    }
-    var MAX_ARGUMENTS_LENGTH = 4096;
-    function decodeCodePointsArray(codePoints) {
-      const len = codePoints.length;
-      if (len <= MAX_ARGUMENTS_LENGTH) {
-        return String.fromCharCode.apply(String, codePoints);
-      }
-      let res = "";
-      let i = 0;
-      while (i < len) {
-        res += String.fromCharCode.apply(
-          String,
-          codePoints.slice(i, i += MAX_ARGUMENTS_LENGTH)
-        );
-      }
-      return res;
-    }
-    function asciiSlice(buf, start, end) {
-      let ret = "";
-      end = Math.min(buf.length, end);
-      for (let i = start; i < end; ++i) {
-        ret += String.fromCharCode(buf[i] & 127);
-      }
-      return ret;
-    }
-    function latin1Slice(buf, start, end) {
-      let ret = "";
-      end = Math.min(buf.length, end);
-      for (let i = start; i < end; ++i) {
-        ret += String.fromCharCode(buf[i]);
-      }
-      return ret;
-    }
-    function hexSlice(buf, start, end) {
-      const len = buf.length;
-      if (!start || start < 0) start = 0;
-      if (!end || end < 0 || end > len) end = len;
-      let out = "";
-      for (let i = start; i < end; ++i) {
-        out += hexSliceLookupTable[buf[i]];
-      }
-      return out;
-    }
-    function utf16leSlice(buf, start, end) {
-      const bytes = buf.slice(start, end);
-      let res = "";
-      for (let i = 0; i < bytes.length - 1; i += 2) {
-        res += String.fromCharCode(bytes[i] + bytes[i + 1] * 256);
-      }
-      return res;
-    }
-    Buffer4.prototype.slice = function slice(start, end) {
-      const len = this.length;
-      start = ~~start;
-      end = end === void 0 ? len : ~~end;
-      if (start < 0) {
-        start += len;
-        if (start < 0) start = 0;
-      } else if (start > len) {
-        start = len;
-      }
-      if (end < 0) {
-        end += len;
-        if (end < 0) end = 0;
-      } else if (end > len) {
-        end = len;
-      }
-      if (end < start) end = start;
-      const newBuf = this.subarray(start, end);
-      Object.setPrototypeOf(newBuf, Buffer4.prototype);
-      return newBuf;
-    };
-    function checkOffset(offset, ext, length) {
-      if (offset % 1 !== 0 || offset < 0) throw new RangeError("offset is not uint");
-      if (offset + ext > length) throw new RangeError("Trying to access beyond buffer length");
-    }
-    Buffer4.prototype.readUintLE = Buffer4.prototype.readUIntLE = function readUIntLE(offset, byteLength2, noAssert) {
-      offset = offset >>> 0;
-      byteLength2 = byteLength2 >>> 0;
-      if (!noAssert) checkOffset(offset, byteLength2, this.length);
-      let val = this[offset];
-      let mul = 1;
-      let i = 0;
-      while (++i < byteLength2 && (mul *= 256)) {
-        val += this[offset + i] * mul;
-      }
-      return val;
-    };
-    Buffer4.prototype.readUintBE = Buffer4.prototype.readUIntBE = function readUIntBE(offset, byteLength2, noAssert) {
-      offset = offset >>> 0;
-      byteLength2 = byteLength2 >>> 0;
-      if (!noAssert) {
-        checkOffset(offset, byteLength2, this.length);
-      }
-      let val = this[offset + --byteLength2];
-      let mul = 1;
-      while (byteLength2 > 0 && (mul *= 256)) {
-        val += this[offset + --byteLength2] * mul;
-      }
-      return val;
-    };
-    Buffer4.prototype.readUint8 = Buffer4.prototype.readUInt8 = function readUInt8(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 1, this.length);
-      return this[offset];
-    };
-    Buffer4.prototype.readUint16LE = Buffer4.prototype.readUInt16LE = function readUInt16LE(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 2, this.length);
-      return this[offset] | this[offset + 1] << 8;
-    };
-    Buffer4.prototype.readUint16BE = Buffer4.prototype.readUInt16BE = function readUInt16BE(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 2, this.length);
-      return this[offset] << 8 | this[offset + 1];
-    };
-    Buffer4.prototype.readUint32LE = Buffer4.prototype.readUInt32LE = function readUInt32LE(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 4, this.length);
-      return (this[offset] | this[offset + 1] << 8 | this[offset + 2] << 16) + this[offset + 3] * 16777216;
-    };
-    Buffer4.prototype.readUint32BE = Buffer4.prototype.readUInt32BE = function readUInt32BE(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 4, this.length);
-      return this[offset] * 16777216 + (this[offset + 1] << 16 | this[offset + 2] << 8 | this[offset + 3]);
-    };
-    Buffer4.prototype.readBigUInt64LE = defineBigIntMethod(function readBigUInt64LE(offset) {
-      offset = offset >>> 0;
-      validateNumber(offset, "offset");
-      const first = this[offset];
-      const last = this[offset + 7];
-      if (first === void 0 || last === void 0) {
-        boundsError(offset, this.length - 8);
-      }
-      const lo = first + this[++offset] * 2 ** 8 + this[++offset] * 2 ** 16 + this[++offset] * 2 ** 24;
-      const hi = this[++offset] + this[++offset] * 2 ** 8 + this[++offset] * 2 ** 16 + last * 2 ** 24;
-      return BigInt(lo) + (BigInt(hi) << BigInt(32));
-    });
-    Buffer4.prototype.readBigUInt64BE = defineBigIntMethod(function readBigUInt64BE(offset) {
-      offset = offset >>> 0;
-      validateNumber(offset, "offset");
-      const first = this[offset];
-      const last = this[offset + 7];
-      if (first === void 0 || last === void 0) {
-        boundsError(offset, this.length - 8);
-      }
-      const hi = first * 2 ** 24 + this[++offset] * 2 ** 16 + this[++offset] * 2 ** 8 + this[++offset];
-      const lo = this[++offset] * 2 ** 24 + this[++offset] * 2 ** 16 + this[++offset] * 2 ** 8 + last;
-      return (BigInt(hi) << BigInt(32)) + BigInt(lo);
-    });
-    Buffer4.prototype.readIntLE = function readIntLE(offset, byteLength2, noAssert) {
-      offset = offset >>> 0;
-      byteLength2 = byteLength2 >>> 0;
-      if (!noAssert) checkOffset(offset, byteLength2, this.length);
-      let val = this[offset];
-      let mul = 1;
-      let i = 0;
-      while (++i < byteLength2 && (mul *= 256)) {
-        val += this[offset + i] * mul;
-      }
-      mul *= 128;
-      if (val >= mul) val -= Math.pow(2, 8 * byteLength2);
-      return val;
-    };
-    Buffer4.prototype.readIntBE = function readIntBE(offset, byteLength2, noAssert) {
-      offset = offset >>> 0;
-      byteLength2 = byteLength2 >>> 0;
-      if (!noAssert) checkOffset(offset, byteLength2, this.length);
-      let i = byteLength2;
-      let mul = 1;
-      let val = this[offset + --i];
-      while (i > 0 && (mul *= 256)) {
-        val += this[offset + --i] * mul;
-      }
-      mul *= 128;
-      if (val >= mul) val -= Math.pow(2, 8 * byteLength2);
-      return val;
-    };
-    Buffer4.prototype.readInt8 = function readInt8(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 1, this.length);
-      if (!(this[offset] & 128)) return this[offset];
-      return (255 - this[offset] + 1) * -1;
-    };
-    Buffer4.prototype.readInt16LE = function readInt16LE(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 2, this.length);
-      const val = this[offset] | this[offset + 1] << 8;
-      return val & 32768 ? val | 4294901760 : val;
-    };
-    Buffer4.prototype.readInt16BE = function readInt16BE(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 2, this.length);
-      const val = this[offset + 1] | this[offset] << 8;
-      return val & 32768 ? val | 4294901760 : val;
-    };
-    Buffer4.prototype.readInt32LE = function readInt32LE(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 4, this.length);
-      return this[offset] | this[offset + 1] << 8 | this[offset + 2] << 16 | this[offset + 3] << 24;
-    };
-    Buffer4.prototype.readInt32BE = function readInt32BE(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 4, this.length);
-      return this[offset] << 24 | this[offset + 1] << 16 | this[offset + 2] << 8 | this[offset + 3];
-    };
-    Buffer4.prototype.readBigInt64LE = defineBigIntMethod(function readBigInt64LE(offset) {
-      offset = offset >>> 0;
-      validateNumber(offset, "offset");
-      const first = this[offset];
-      const last = this[offset + 7];
-      if (first === void 0 || last === void 0) {
-        boundsError(offset, this.length - 8);
-      }
-      const val = this[offset + 4] + this[offset + 5] * 2 ** 8 + this[offset + 6] * 2 ** 16 + (last << 24);
-      return (BigInt(val) << BigInt(32)) + BigInt(first + this[++offset] * 2 ** 8 + this[++offset] * 2 ** 16 + this[++offset] * 2 ** 24);
-    });
-    Buffer4.prototype.readBigInt64BE = defineBigIntMethod(function readBigInt64BE(offset) {
-      offset = offset >>> 0;
-      validateNumber(offset, "offset");
-      const first = this[offset];
-      const last = this[offset + 7];
-      if (first === void 0 || last === void 0) {
-        boundsError(offset, this.length - 8);
-      }
-      const val = (first << 24) + // Overflow
-      this[++offset] * 2 ** 16 + this[++offset] * 2 ** 8 + this[++offset];
-      return (BigInt(val) << BigInt(32)) + BigInt(this[++offset] * 2 ** 24 + this[++offset] * 2 ** 16 + this[++offset] * 2 ** 8 + last);
-    });
-    Buffer4.prototype.readFloatLE = function readFloatLE(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 4, this.length);
-      return ieee754.read(this, offset, true, 23, 4);
-    };
-    Buffer4.prototype.readFloatBE = function readFloatBE(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 4, this.length);
-      return ieee754.read(this, offset, false, 23, 4);
-    };
-    Buffer4.prototype.readDoubleLE = function readDoubleLE(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 8, this.length);
-      return ieee754.read(this, offset, true, 52, 8);
-    };
-    Buffer4.prototype.readDoubleBE = function readDoubleBE(offset, noAssert) {
-      offset = offset >>> 0;
-      if (!noAssert) checkOffset(offset, 8, this.length);
-      return ieee754.read(this, offset, false, 52, 8);
-    };
-    function checkInt(buf, value, offset, ext, max, min) {
-      if (!Buffer4.isBuffer(buf)) throw new TypeError('"buffer" argument must be a Buffer instance');
-      if (value > max || value < min) throw new RangeError('"value" argument is out of bounds');
-      if (offset + ext > buf.length) throw new RangeError("Index out of range");
-    }
-    Buffer4.prototype.writeUintLE = Buffer4.prototype.writeUIntLE = function writeUIntLE(value, offset, byteLength2, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      byteLength2 = byteLength2 >>> 0;
-      if (!noAssert) {
-        const maxBytes = Math.pow(2, 8 * byteLength2) - 1;
-        checkInt(this, value, offset, byteLength2, maxBytes, 0);
-      }
-      let mul = 1;
-      let i = 0;
-      this[offset] = value & 255;
-      while (++i < byteLength2 && (mul *= 256)) {
-        this[offset + i] = value / mul & 255;
-      }
-      return offset + byteLength2;
-    };
-    Buffer4.prototype.writeUintBE = Buffer4.prototype.writeUIntBE = function writeUIntBE(value, offset, byteLength2, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      byteLength2 = byteLength2 >>> 0;
-      if (!noAssert) {
-        const maxBytes = Math.pow(2, 8 * byteLength2) - 1;
-        checkInt(this, value, offset, byteLength2, maxBytes, 0);
-      }
-      let i = byteLength2 - 1;
-      let mul = 1;
-      this[offset + i] = value & 255;
-      while (--i >= 0 && (mul *= 256)) {
-        this[offset + i] = value / mul & 255;
-      }
-      return offset + byteLength2;
-    };
-    Buffer4.prototype.writeUint8 = Buffer4.prototype.writeUInt8 = function writeUInt8(value, offset, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) checkInt(this, value, offset, 1, 255, 0);
-      this[offset] = value & 255;
-      return offset + 1;
-    };
-    Buffer4.prototype.writeUint16LE = Buffer4.prototype.writeUInt16LE = function writeUInt16LE(value, offset, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) checkInt(this, value, offset, 2, 65535, 0);
-      this[offset] = value & 255;
-      this[offset + 1] = value >>> 8;
-      return offset + 2;
-    };
-    Buffer4.prototype.writeUint16BE = Buffer4.prototype.writeUInt16BE = function writeUInt16BE(value, offset, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) checkInt(this, value, offset, 2, 65535, 0);
-      this[offset] = value >>> 8;
-      this[offset + 1] = value & 255;
-      return offset + 2;
-    };
-    Buffer4.prototype.writeUint32LE = Buffer4.prototype.writeUInt32LE = function writeUInt32LE(value, offset, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) checkInt(this, value, offset, 4, 4294967295, 0);
-      this[offset + 3] = value >>> 24;
-      this[offset + 2] = value >>> 16;
-      this[offset + 1] = value >>> 8;
-      this[offset] = value & 255;
-      return offset + 4;
-    };
-    Buffer4.prototype.writeUint32BE = Buffer4.prototype.writeUInt32BE = function writeUInt32BE(value, offset, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) checkInt(this, value, offset, 4, 4294967295, 0);
-      this[offset] = value >>> 24;
-      this[offset + 1] = value >>> 16;
-      this[offset + 2] = value >>> 8;
-      this[offset + 3] = value & 255;
-      return offset + 4;
-    };
-    function wrtBigUInt64LE(buf, value, offset, min, max) {
-      checkIntBI(value, min, max, buf, offset, 7);
-      let lo = Number(value & BigInt(4294967295));
-      buf[offset++] = lo;
-      lo = lo >> 8;
-      buf[offset++] = lo;
-      lo = lo >> 8;
-      buf[offset++] = lo;
-      lo = lo >> 8;
-      buf[offset++] = lo;
-      let hi = Number(value >> BigInt(32) & BigInt(4294967295));
-      buf[offset++] = hi;
-      hi = hi >> 8;
-      buf[offset++] = hi;
-      hi = hi >> 8;
-      buf[offset++] = hi;
-      hi = hi >> 8;
-      buf[offset++] = hi;
-      return offset;
-    }
-    function wrtBigUInt64BE(buf, value, offset, min, max) {
-      checkIntBI(value, min, max, buf, offset, 7);
-      let lo = Number(value & BigInt(4294967295));
-      buf[offset + 7] = lo;
-      lo = lo >> 8;
-      buf[offset + 6] = lo;
-      lo = lo >> 8;
-      buf[offset + 5] = lo;
-      lo = lo >> 8;
-      buf[offset + 4] = lo;
-      let hi = Number(value >> BigInt(32) & BigInt(4294967295));
-      buf[offset + 3] = hi;
-      hi = hi >> 8;
-      buf[offset + 2] = hi;
-      hi = hi >> 8;
-      buf[offset + 1] = hi;
-      hi = hi >> 8;
-      buf[offset] = hi;
-      return offset + 8;
-    }
-    Buffer4.prototype.writeBigUInt64LE = defineBigIntMethod(function writeBigUInt64LE(value, offset = 0) {
-      return wrtBigUInt64LE(this, value, offset, BigInt(0), BigInt("0xffffffffffffffff"));
-    });
-    Buffer4.prototype.writeBigUInt64BE = defineBigIntMethod(function writeBigUInt64BE(value, offset = 0) {
-      return wrtBigUInt64BE(this, value, offset, BigInt(0), BigInt("0xffffffffffffffff"));
-    });
-    Buffer4.prototype.writeIntLE = function writeIntLE(value, offset, byteLength2, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) {
-        const limit = Math.pow(2, 8 * byteLength2 - 1);
-        checkInt(this, value, offset, byteLength2, limit - 1, -limit);
-      }
-      let i = 0;
-      let mul = 1;
-      let sub = 0;
-      this[offset] = value & 255;
-      while (++i < byteLength2 && (mul *= 256)) {
-        if (value < 0 && sub === 0 && this[offset + i - 1] !== 0) {
-          sub = 1;
-        }
-        this[offset + i] = (value / mul >> 0) - sub & 255;
-      }
-      return offset + byteLength2;
-    };
-    Buffer4.prototype.writeIntBE = function writeIntBE(value, offset, byteLength2, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) {
-        const limit = Math.pow(2, 8 * byteLength2 - 1);
-        checkInt(this, value, offset, byteLength2, limit - 1, -limit);
-      }
-      let i = byteLength2 - 1;
-      let mul = 1;
-      let sub = 0;
-      this[offset + i] = value & 255;
-      while (--i >= 0 && (mul *= 256)) {
-        if (value < 0 && sub === 0 && this[offset + i + 1] !== 0) {
-          sub = 1;
-        }
-        this[offset + i] = (value / mul >> 0) - sub & 255;
-      }
-      return offset + byteLength2;
-    };
-    Buffer4.prototype.writeInt8 = function writeInt8(value, offset, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) checkInt(this, value, offset, 1, 127, -128);
-      if (value < 0) value = 255 + value + 1;
-      this[offset] = value & 255;
-      return offset + 1;
-    };
-    Buffer4.prototype.writeInt16LE = function writeInt16LE(value, offset, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) checkInt(this, value, offset, 2, 32767, -32768);
-      this[offset] = value & 255;
-      this[offset + 1] = value >>> 8;
-      return offset + 2;
-    };
-    Buffer4.prototype.writeInt16BE = function writeInt16BE(value, offset, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) checkInt(this, value, offset, 2, 32767, -32768);
-      this[offset] = value >>> 8;
-      this[offset + 1] = value & 255;
-      return offset + 2;
-    };
-    Buffer4.prototype.writeInt32LE = function writeInt32LE(value, offset, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) checkInt(this, value, offset, 4, 2147483647, -2147483648);
-      this[offset] = value & 255;
-      this[offset + 1] = value >>> 8;
-      this[offset + 2] = value >>> 16;
-      this[offset + 3] = value >>> 24;
-      return offset + 4;
-    };
-    Buffer4.prototype.writeInt32BE = function writeInt32BE(value, offset, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) checkInt(this, value, offset, 4, 2147483647, -2147483648);
-      if (value < 0) value = 4294967295 + value + 1;
-      this[offset] = value >>> 24;
-      this[offset + 1] = value >>> 16;
-      this[offset + 2] = value >>> 8;
-      this[offset + 3] = value & 255;
-      return offset + 4;
-    };
-    Buffer4.prototype.writeBigInt64LE = defineBigIntMethod(function writeBigInt64LE(value, offset = 0) {
-      return wrtBigUInt64LE(this, value, offset, -BigInt("0x8000000000000000"), BigInt("0x7fffffffffffffff"));
-    });
-    Buffer4.prototype.writeBigInt64BE = defineBigIntMethod(function writeBigInt64BE(value, offset = 0) {
-      return wrtBigUInt64BE(this, value, offset, -BigInt("0x8000000000000000"), BigInt("0x7fffffffffffffff"));
-    });
-    function checkIEEE754(buf, value, offset, ext, max, min) {
-      if (offset + ext > buf.length) throw new RangeError("Index out of range");
-      if (offset < 0) throw new RangeError("Index out of range");
-    }
-    function writeFloat(buf, value, offset, littleEndian, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) {
-        checkIEEE754(buf, value, offset, 4, 34028234663852886e22, -34028234663852886e22);
-      }
-      ieee754.write(buf, value, offset, littleEndian, 23, 4);
-      return offset + 4;
-    }
-    Buffer4.prototype.writeFloatLE = function writeFloatLE(value, offset, noAssert) {
-      return writeFloat(this, value, offset, true, noAssert);
-    };
-    Buffer4.prototype.writeFloatBE = function writeFloatBE(value, offset, noAssert) {
-      return writeFloat(this, value, offset, false, noAssert);
-    };
-    function writeDouble(buf, value, offset, littleEndian, noAssert) {
-      value = +value;
-      offset = offset >>> 0;
-      if (!noAssert) {
-        checkIEEE754(buf, value, offset, 8, 17976931348623157e292, -17976931348623157e292);
-      }
-      ieee754.write(buf, value, offset, littleEndian, 52, 8);
-      return offset + 8;
-    }
-    Buffer4.prototype.writeDoubleLE = function writeDoubleLE(value, offset, noAssert) {
-      return writeDouble(this, value, offset, true, noAssert);
-    };
-    Buffer4.prototype.writeDoubleBE = function writeDoubleBE(value, offset, noAssert) {
-      return writeDouble(this, value, offset, false, noAssert);
-    };
-    Buffer4.prototype.copy = function copy(target, targetStart, start, end) {
-      if (!Buffer4.isBuffer(target)) throw new TypeError("argument should be a Buffer");
-      if (!start) start = 0;
-      if (!end && end !== 0) end = this.length;
-      if (targetStart >= target.length) targetStart = target.length;
-      if (!targetStart) targetStart = 0;
-      if (end > 0 && end < start) end = start;
-      if (end === start) return 0;
-      if (target.length === 0 || this.length === 0) return 0;
-      if (targetStart < 0) {
-        throw new RangeError("targetStart out of bounds");
-      }
-      if (start < 0 || start >= this.length) throw new RangeError("Index out of range");
-      if (end < 0) throw new RangeError("sourceEnd out of bounds");
-      if (end > this.length) end = this.length;
-      if (target.length - targetStart < end - start) {
-        end = target.length - targetStart + start;
-      }
-      const len = end - start;
-      if (this === target && typeof Uint8Array.prototype.copyWithin === "function") {
-        this.copyWithin(targetStart, start, end);
-      } else {
-        Uint8Array.prototype.set.call(
-          target,
-          this.subarray(start, end),
-          targetStart
-        );
-      }
-      return len;
-    };
-    Buffer4.prototype.fill = function fill(val, start, end, encoding) {
-      if (typeof val === "string") {
-        if (typeof start === "string") {
-          encoding = start;
-          start = 0;
-          end = this.length;
-        } else if (typeof end === "string") {
-          encoding = end;
-          end = this.length;
-        }
-        if (encoding !== void 0 && typeof encoding !== "string") {
-          throw new TypeError("encoding must be a string");
-        }
-        if (typeof encoding === "string" && !Buffer4.isEncoding(encoding)) {
-          throw new TypeError("Unknown encoding: " + encoding);
-        }
-        if (val.length === 1) {
-          const code = val.charCodeAt(0);
-          if (encoding === "utf8" && code < 128 || encoding === "latin1") {
-            val = code;
-          }
-        }
-      } else if (typeof val === "number") {
-        val = val & 255;
-      } else if (typeof val === "boolean") {
-        val = Number(val);
-      }
-      if (start < 0 || this.length < start || this.length < end) {
-        throw new RangeError("Out of range index");
-      }
-      if (end <= start) {
-        return this;
-      }
-      start = start >>> 0;
-      end = end === void 0 ? this.length : end >>> 0;
-      if (!val) val = 0;
-      let i;
-      if (typeof val === "number") {
-        for (i = start; i < end; ++i) {
-          this[i] = val;
-        }
-      } else {
-        const bytes = Buffer4.isBuffer(val) ? val : Buffer4.from(val, encoding);
-        const len = bytes.length;
-        if (len === 0) {
-          throw new TypeError('The value "' + val + '" is invalid for argument "value"');
-        }
-        for (i = 0; i < end - start; ++i) {
-          this[i + start] = bytes[i % len];
-        }
-      }
-      return this;
-    };
-    var errors = {};
-    function E(sym, getMessage, Base) {
-      errors[sym] = class NodeError extends Base {
-        constructor() {
-          super();
-          Object.defineProperty(this, "message", {
-            value: getMessage.apply(this, arguments),
-            writable: true,
-            configurable: true
-          });
-          this.name = `${this.name} [${sym}]`;
-          this.stack;
-          delete this.name;
-        }
-        get code() {
-          return sym;
-        }
-        set code(value) {
-          Object.defineProperty(this, "code", {
-            configurable: true,
-            enumerable: true,
-            value,
-            writable: true
-          });
-        }
-        toString() {
-          return `${this.name} [${sym}]: ${this.message}`;
-        }
-      };
-    }
-    E(
-      "ERR_BUFFER_OUT_OF_BOUNDS",
-      function(name) {
-        if (name) {
-          return `${name} is outside of buffer bounds`;
-        }
-        return "Attempt to access memory outside buffer bounds";
-      },
-      RangeError
-    );
-    E(
-      "ERR_INVALID_ARG_TYPE",
-      function(name, actual) {
-        return `The "${name}" argument must be of type number. Received type ${typeof actual}`;
-      },
-      TypeError
-    );
-    E(
-      "ERR_OUT_OF_RANGE",
-      function(str, range, input) {
-        let msg = `The value of "${str}" is out of range.`;
-        let received = input;
-        if (Number.isInteger(input) && Math.abs(input) > 2 ** 32) {
-          received = addNumericalSeparator(String(input));
-        } else if (typeof input === "bigint") {
-          received = String(input);
-          if (input > BigInt(2) ** BigInt(32) || input < -(BigInt(2) ** BigInt(32))) {
-            received = addNumericalSeparator(received);
-          }
-          received += "n";
-        }
-        msg += ` It must be ${range}. Received ${received}`;
-        return msg;
-      },
-      RangeError
-    );
-    function addNumericalSeparator(val) {
-      let res = "";
-      let i = val.length;
-      const start = val[0] === "-" ? 1 : 0;
-      for (; i >= start + 4; i -= 3) {
-        res = `_${val.slice(i - 3, i)}${res}`;
-      }
-      return `${val.slice(0, i)}${res}`;
-    }
-    function checkBounds(buf, offset, byteLength2) {
-      validateNumber(offset, "offset");
-      if (buf[offset] === void 0 || buf[offset + byteLength2] === void 0) {
-        boundsError(offset, buf.length - (byteLength2 + 1));
-      }
-    }
-    function checkIntBI(value, min, max, buf, offset, byteLength2) {
-      if (value > max || value < min) {
-        const n = typeof min === "bigint" ? "n" : "";
-        let range;
-        if (byteLength2 > 3) {
-          if (min === 0 || min === BigInt(0)) {
-            range = `>= 0${n} and < 2${n} ** ${(byteLength2 + 1) * 8}${n}`;
-          } else {
-            range = `>= -(2${n} ** ${(byteLength2 + 1) * 8 - 1}${n}) and < 2 ** ${(byteLength2 + 1) * 8 - 1}${n}`;
-          }
-        } else {
-          range = `>= ${min}${n} and <= ${max}${n}`;
-        }
-        throw new errors.ERR_OUT_OF_RANGE("value", range, value);
-      }
-      checkBounds(buf, offset, byteLength2);
-    }
-    function validateNumber(value, name) {
-      if (typeof value !== "number") {
-        throw new errors.ERR_INVALID_ARG_TYPE(name, "number", value);
-      }
-    }
-    function boundsError(value, length, type) {
-      if (Math.floor(value) !== value) {
-        validateNumber(value, type);
-        throw new errors.ERR_OUT_OF_RANGE(type || "offset", "an integer", value);
-      }
-      if (length < 0) {
-        throw new errors.ERR_BUFFER_OUT_OF_BOUNDS();
-      }
-      throw new errors.ERR_OUT_OF_RANGE(
-        type || "offset",
-        `>= ${type ? 1 : 0} and <= ${length}`,
-        value
-      );
-    }
-    var INVALID_BASE64_RE = /[^+/0-9A-Za-z-_]/g;
-    function base64clean(str) {
-      str = str.split("=")[0];
-      str = str.trim().replace(INVALID_BASE64_RE, "");
-      if (str.length < 2) return "";
-      while (str.length % 4 !== 0) {
-        str = str + "=";
-      }
-      return str;
-    }
-    function utf8ToBytes(string, units) {
-      units = units || Infinity;
-      let codePoint;
-      const length = string.length;
-      let leadSurrogate = null;
-      const bytes = [];
-      for (let i = 0; i < length; ++i) {
-        codePoint = string.charCodeAt(i);
-        if (codePoint > 55295 && codePoint < 57344) {
-          if (!leadSurrogate) {
-            if (codePoint > 56319) {
-              if ((units -= 3) > -1) bytes.push(239, 191, 189);
-              continue;
-            } else if (i + 1 === length) {
-              if ((units -= 3) > -1) bytes.push(239, 191, 189);
-              continue;
-            }
-            leadSurrogate = codePoint;
-            continue;
-          }
-          if (codePoint < 56320) {
-            if ((units -= 3) > -1) bytes.push(239, 191, 189);
-            leadSurrogate = codePoint;
-            continue;
-          }
-          codePoint = (leadSurrogate - 55296 << 10 | codePoint - 56320) + 65536;
-        } else if (leadSurrogate) {
-          if ((units -= 3) > -1) bytes.push(239, 191, 189);
-        }
-        leadSurrogate = null;
-        if (codePoint < 128) {
-          if ((units -= 1) < 0) break;
-          bytes.push(codePoint);
-        } else if (codePoint < 2048) {
-          if ((units -= 2) < 0) break;
-          bytes.push(
-            codePoint >> 6 | 192,
-            codePoint & 63 | 128
-          );
-        } else if (codePoint < 65536) {
-          if ((units -= 3) < 0) break;
-          bytes.push(
-            codePoint >> 12 | 224,
-            codePoint >> 6 & 63 | 128,
-            codePoint & 63 | 128
-          );
-        } else if (codePoint < 1114112) {
-          if ((units -= 4) < 0) break;
-          bytes.push(
-            codePoint >> 18 | 240,
-            codePoint >> 12 & 63 | 128,
-            codePoint >> 6 & 63 | 128,
-            codePoint & 63 | 128
-          );
-        } else {
-          throw new Error("Invalid code point");
-        }
-      }
-      return bytes;
-    }
-    function asciiToBytes(str) {
-      const byteArray = [];
-      for (let i = 0; i < str.length; ++i) {
-        byteArray.push(str.charCodeAt(i) & 255);
-      }
-      return byteArray;
-    }
-    function utf16leToBytes(str, units) {
-      let c, hi, lo;
-      const byteArray = [];
-      for (let i = 0; i < str.length; ++i) {
-        if ((units -= 2) < 0) break;
-        c = str.charCodeAt(i);
-        hi = c >> 8;
-        lo = c % 256;
-        byteArray.push(lo);
-        byteArray.push(hi);
-      }
-      return byteArray;
-    }
-    function base64ToBytes(str) {
-      return base64.toByteArray(base64clean(str));
-    }
-    function blitBuffer(src, dst, offset, length) {
-      let i;
-      for (i = 0; i < length; ++i) {
-        if (i + offset >= dst.length || i >= src.length) break;
-        dst[i + offset] = src[i];
-      }
-      return i;
-    }
-    function isInstance(obj, type) {
-      return obj instanceof type || obj != null && obj.constructor != null && obj.constructor.name != null && obj.constructor.name === type.name;
-    }
-    function numberIsNaN(obj) {
-      return obj !== obj;
-    }
-    var hexSliceLookupTable = (function() {
-      const alphabet = "0123456789abcdef";
-      const table = new Array(256);
-      for (let i = 0; i < 16; ++i) {
-        const i16 = i * 16;
-        for (let j = 0; j < 16; ++j) {
-          table[i16 + j] = alphabet[i] + alphabet[j];
-        }
-      }
-      return table;
-    })();
-    function defineBigIntMethod(fn) {
-      return typeof BigInt === "undefined" ? BufferBigIntNotDefined : fn;
-    }
-    function BufferBigIntNotDefined() {
-      throw new Error("BigInt not supported");
-    }
-  }
-});
-export { require_base64_js, require_ieee754, require_buffer };
diff --git a/packages/build-tools/bridge-src/vendor/esbuild-runtime.ts b/packages/build-tools/bridge-src/vendor/esbuild-runtime.ts
deleted file mode 100644
index 3223f81d1..000000000
--- a/packages/build-tools/bridge-src/vendor/esbuild-runtime.ts
+++ /dev/null
@@ -1,31 +0,0 @@
-var __create = Object.create;
-var __defProp = Object.defineProperty;
-var __getOwnPropDesc = Object.getOwnPropertyDescriptor;
-var __getOwnPropNames = Object.getOwnPropertyNames;
-var __getProtoOf = Object.getPrototypeOf;
-var __hasOwnProp = Object.prototype.hasOwnProperty;
-var __commonJS = (cb, mod) => function __require() {
-  return mod || (0, cb[__getOwnPropNames(cb)[0]])((mod = { exports: {} }).exports, mod), mod.exports;
-};
-var __export = (target, all) => {
-  for (var name in all)
-    __defProp(target, name, { get: all[name], enumerable: true });
-};
-var __copyProps = (to, from, except, desc) => {
-  if (from && typeof from === "object" || typeof from === "function") {
-    for (let key of __getOwnPropNames(from))
-      if (!__hasOwnProp.call(to, key) && key !== except)
-        __defProp(to, key, { get: () => from[key], enumerable: !(desc = __getOwnPropDesc(from, key)) || desc.enumerable });
-  }
-  return to;
-};
-var __toESM = (mod, isNodeMode, target) => (target = mod != null ? __create(__getProtoOf(mod)) : {}, __copyProps(
-  // If the importer is in node compatibility mode or this is not an ESM
-  // file that has been converted to a CommonJS file using a Babel-
-  // compatible transform (i.e. "__esModule" has not been set), then set
-  // "default" to the CommonJS "module.exports" for node compatibility.
-  isNodeMode || !mod || !mod.__esModule ? __defProp(target, "default", { value: mod, enumerable: true }) : target,
-  mod
-));
-var __toCommonJS = (mod) => __copyProps(__defProp({}, "__esModule", { value: true }), mod);
-export { __create, __defProp, __getOwnPropDesc, __getOwnPropNames, __getProtoOf, __hasOwnProp, __commonJS, __export, __copyProps, __toESM, __toCommonJS };
diff --git a/packages/build-tools/package.json b/packages/build-tools/package.json
deleted file mode 100644
index c6be24a2f..000000000
--- a/packages/build-tools/package.json
+++ /dev/null
@@ -1,31 +0,0 @@
-{
-	"name": "@secure-exec/build-tools",
-	"version": "0.2.1",
-	"private": true,
-	"type": "module",
-	"license": "Apache-2.0",
-	"files": [
-		"scripts",
-		"README.md"
-	],
-	"scripts": {
-		"build:base-filesystem": "node ./scripts/build-base-filesystem.mjs",
-		"build:browser-buffer-polyfill": "node ./scripts/build-browser-buffer-polyfill.mjs",
-		"build:browser-path-polyfill": "node ./scripts/build-browser-path-polyfill.mjs",
-		"build:browser-util-polyfill": "node ./scripts/build-browser-util-polyfill.mjs",
-		"build:protocol": "node ./scripts/compile-sidecar-protocol.mjs",
-		"build:v8-bridge": "node ./scripts/build-v8-bridge.mjs",
-		"snapshot:alpine-defaults": "node ./scripts/snapshot-alpine-defaults.mjs",
-		"check:generated": "node ../../scripts/check-generated-artifacts.mjs",
-		"check-types": "node --check ./scripts/build-base-filesystem.mjs && node --check ./scripts/build-browser-buffer-polyfill.mjs && node --check ./scripts/build-browser-path-polyfill.mjs && node --check ./scripts/build-browser-util-polyfill.mjs && node --check ./scripts/build-v8-bridge.mjs && node --check ./scripts/compile-sidecar-protocol.mjs",
-		"build": "pnpm run check-types",
-		"test": "pnpm run check-types"
-	},
-	"dependencies": {
-		"@bare-ts/tools": "0.15.0",
-		"esbuild": "^0.27.4",
-		"node-stdlib-browser": "^1.3.1",
-		"undici": "^7.24.6",
-		"web-streams-polyfill": "^3.3.3"
-	}
-}
diff --git a/packages/build-tools/scripts/build-base-filesystem.mjs b/packages/build-tools/scripts/build-base-filesystem.mjs
deleted file mode 100644
index af746199e..000000000
--- a/packages/build-tools/scripts/build-base-filesystem.mjs
+++ /dev/null
@@ -1,292 +0,0 @@
-#!/usr/bin/env node
-
-// Build the secure-exec base filesystem in ONE step: snapshot a stock Alpine
-// container, apply the secure-exec transforms, and write the single
-// `base-filesystem.json`. Requires Docker. Run this BY HAND when the base needs
-// updating — nothing runs it during a build.
-//
-// There is exactly ONE committed copy: crates/vfs/assets/base-filesystem.json.
-// The vfs crate embeds it directly via `include_str!`; the sidecar reads it via
-// `vfs::posix::base_filesystem_json()`; the host bakes the env in as a constant
-// (packages/core/src/base-filesystem.ts) and reads no JSON. If you change the env
-// here, update that constant to match.
-
-import { execFileSync } from "node:child_process";
-import { mkdirSync, writeFileSync } from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const DEFAULT_IMAGE = process.env.ALPINE_IMAGE ?? "alpine:3.22";
-
-// The ONE committed copy — embedded into the vfs crate via include_str!.
-const OUTPUT_PATHS = [
-	fileURLToPath(new URL("../../../crates/vfs/assets/base-filesystem.json", import.meta.url)),
-];
-
-// --- secure-exec base identity (the transform target) -----------------------
-
-const BASE_HOSTNAME = "secure-exec";
-const BASE_USER = "agentos";
-const BASE_HOME = `/home/${BASE_USER}`;
-const BASE_UID = 1000;
-const BASE_GID = 1000;
-
-// Non-Alpine directories the secure-exec base layer always provides on top of the
-// captured snapshot. `/workspace` is the default agent working directory (cwd) and
-// the conventional mount root; it is kept separate from `$HOME` (/home/agentos),
-// which is never a mount.
-const EXTRA_DIRECTORIES = [
-	{ path: "/workspace", type: "directory", mode: "755", uid: BASE_UID, gid: BASE_GID },
-];
-
-const TRANSFORMS = [
-	"Normalize HOSTNAME to secure-exec",
-	"Preserve the captured user-level environment and filesystem layout as the secure-exec base layer",
-	"Add the non-Alpine /workspace directory (default agent working directory) owned by the base user",
-];
-
-// --- Alpine snapshot capture (Docker) ---------------------------------------
-
-const DEFAULT_ENV_KEYS = [
-	"CHARSET",
-	"HOME",
-	"HOSTNAME",
-	"LANG",
-	"LC_COLLATE",
-	"LOGNAME",
-	"PAGER",
-	"PATH",
-	"SHELL",
-	"USER",
-];
-
-const TEXT_FILE_PATHS = [
-	"/etc/alpine-release",
-	"/etc/group",
-	"/etc/hostname",
-	"/etc/nsswitch.conf",
-	"/etc/passwd",
-	"/etc/profile",
-	"/etc/shadow",
-	"/etc/shells",
-	"/usr/lib/os-release",
-];
-
-const METADATA_ONLY_FILE_PATHS = ["/usr/bin/env"];
-
-const SYMLINK_PATHS = [
-	"/etc/os-release",
-	"/var/lock",
-	"/var/run",
-	"/var/spool/cron/crontabs",
-];
-
-function addParentDirectories(paths) {
-	for (const entry of [...paths]) {
-		let current = path.posix.dirname(entry);
-		while (current !== "." && current !== "/") {
-			paths.add(current);
-			current = path.posix.dirname(current);
-		}
-	}
-}
-
-function runDocker(args, options = {}) {
-	return execFileSync("docker", args, {
-		encoding: "utf-8",
-		stdio: ["ignore", "pipe", "pipe"],
-		...options,
-	});
-}
-
-function dockerExec(containerId, args) {
-	return runDocker(["exec", containerId, ...args]);
-}
-
-function parseEnv(stdout) {
-	const result = {};
-	for (const line of stdout.split("\n")) {
-		if (!line.trim()) {
-			continue;
-		}
-		const separator = line.indexOf("=");
-		if (separator === -1) {
-			continue;
-		}
-		result[line.slice(0, separator)] = line.slice(separator + 1);
-	}
-	return result;
-}
-
-function mapFileType(type) {
-	switch (type) {
-		case "directory":
-			return "directory";
-		case "regular file":
-			return "file";
-		case "symbolic link":
-			return "symlink";
-		default:
-			throw new Error(`Unsupported file type: ${type}`);
-	}
-}
-
-function shouldIncludePath(path) {
-	if (path === "/dev" || path.startsWith("/dev/")) {
-		return false;
-	}
-	if (path === "/proc" || path.startsWith("/proc/")) {
-		return false;
-	}
-	if (path.startsWith("/sys/")) {
-		return false;
-	}
-	if (path === "/etc/mtab") {
-		return false;
-	}
-	return true;
-}
-
-function collectPaths(containerId) {
-	const discovered = dockerExec(containerId, [
-		"sh",
-		"-lc",
-		"find / -maxdepth 2 -type d | sort",
-	]);
-
-	const paths = new Set(
-		discovered
-			.split("\n")
-			.map((path) => path.trim())
-			.filter(Boolean)
-			.filter(shouldIncludePath),
-	);
-
-	for (const path of TEXT_FILE_PATHS) {
-		paths.add(path);
-	}
-	for (const path of METADATA_ONLY_FILE_PATHS) {
-		paths.add(path);
-	}
-	for (const path of SYMLINK_PATHS) {
-		paths.add(path);
-	}
-	paths.add("/");
-	addParentDirectories(paths);
-
-	return [...paths].sort((a, b) => a.localeCompare(b));
-}
-
-function readEntry(containerId, path) {
-	const statOutput = dockerExec(containerId, [
-		"sh",
-		"-lc",
-		`stat -c '%F\t%a\t%u\t%g' '${path}'`,
-	]).trim();
-	const [rawType, mode, uid, gid] = statOutput.split("\t");
-	const entry = {
-		path,
-		type: mapFileType(rawType),
-		mode,
-		uid: Number(uid),
-		gid: Number(gid),
-	};
-
-	if (entry.type === "symlink") {
-		entry.target = dockerExec(containerId, ["readlink", path]).trim();
-	}
-
-	if (entry.type === "file" && TEXT_FILE_PATHS.includes(path)) {
-		entry.content = dockerExec(containerId, ["cat", path]);
-	}
-
-	return entry;
-}
-
-function extractPrompt(profileContent) {
-	const match = profileContent.match(/PS1='([^']+)'/);
-	if (!match) {
-		throw new Error("Unable to extract PS1 from /etc/profile");
-	}
-	return match[1];
-}
-
-function captureAlpineSnapshot() {
-	const containerId = runDocker([
-		"run",
-		"--detach",
-		"--rm",
-		DEFAULT_IMAGE,
-		"sh",
-		"-lc",
-		"adduser -D agentos >/dev/null 2>&1 && sleep infinity",
-	]).trim();
-
-	try {
-		const env = parseEnv(dockerExec(containerId, ["sh", "-lc", "su agentos -c env"]));
-		const profileContent = dockerExec(containerId, ["cat", "/etc/profile"]);
-		const entries = collectPaths(containerId).map((path) => readEntry(containerId, path));
-		return {
-			env: Object.fromEntries(
-				DEFAULT_ENV_KEYS.filter((key) => env[key] !== undefined).map((key) => [key, env[key]]),
-			),
-			prompt: extractPrompt(profileContent),
-			entries,
-		};
-	} finally {
-		try {
-			runDocker(["rm", "--force", containerId]);
-		} catch {
-			// Container may already be gone.
-		}
-	}
-}
-
-// --- transform: raw Alpine snapshot -> secure-exec base filesystem ----------
-
-function normalizeEntry(entry) {
-	if (entry.path === "/etc/hostname" && entry.type === "file") {
-		return { ...entry, content: `${BASE_HOSTNAME}\n` };
-	}
-	return entry;
-}
-
-function withExtraDirectories(entries) {
-	const existing = new Set(entries.map((entry) => entry.path));
-	return [...entries, ...EXTRA_DIRECTORIES.filter((entry) => !existing.has(entry.path))];
-}
-
-function buildBaseFilesystem(snapshot) {
-	return {
-		source: {
-			image: DEFAULT_IMAGE,
-			builtAt: new Date().toISOString(),
-			transforms: TRANSFORMS,
-		},
-		environment: {
-			env: {
-				...snapshot.env,
-				HOME: BASE_HOME,
-				HOSTNAME: BASE_HOSTNAME,
-				LOGNAME: BASE_USER,
-				USER: BASE_USER,
-			},
-			prompt: snapshot.prompt,
-		},
-		filesystem: {
-			entries: withExtraDirectories(snapshot.entries.map(normalizeEntry)),
-		},
-	};
-}
-
-function main() {
-	const baseFilesystem = buildBaseFilesystem(captureAlpineSnapshot());
-	const json = `${JSON.stringify(baseFilesystem, null, 2)}\n`;
-	for (const outputPath of OUTPUT_PATHS) {
-		mkdirSync(path.dirname(outputPath), { recursive: true });
-		writeFileSync(outputPath, json);
-		process.stdout.write(`Wrote ${outputPath}\n`);
-	}
-}
-
-main();
diff --git a/packages/build-tools/scripts/build-browser-buffer-polyfill.mjs b/packages/build-tools/scripts/build-browser-buffer-polyfill.mjs
deleted file mode 100644
index f0fc5c946..000000000
--- a/packages/build-tools/scripts/build-browser-buffer-polyfill.mjs
+++ /dev/null
@@ -1,72 +0,0 @@
-import { build } from "esbuild";
-import { mkdir, writeFile } from "node:fs/promises";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import stdLibBrowser from "node-stdlib-browser";
-
-// Bundles the real `buffer` package (via node-stdlib-browser, same source the
-// rest of the pure-JS builtins use) into a guest polyfill, so the converged
-// browser exposes a faithful node:buffer / Buffer instead of the WASI runner's
-// internal Uint8Array shim. Mirrors build-browser-util-polyfill.mjs.
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const packageRoot = path.resolve(scriptDir, "..");
-const workspaceRoot = path.resolve(packageRoot, "..", "..");
-
-const outputPath = path.join(
-	workspaceRoot,
-	"packages",
-	"browser",
-	"src",
-	"generated",
-	"buffer-polyfill.ts",
-);
-
-const result = await build({
-	stdin: {
-		contents: [
-			'const buffer = require("buffer");',
-			"module.exports = buffer.default ?? buffer;",
-		].join("\n"),
-		resolveDir: workspaceRoot,
-		loader: "js",
-	},
-	bundle: true,
-	write: false,
-	format: "cjs",
-	platform: "browser",
-	alias: {
-		buffer: stdLibBrowser.buffer,
-		"node:buffer": stdLibBrowser.buffer,
-	},
-	banner: {
-		js: [
-			"var process = globalThis.process || {",
-			"  env: {},",
-			"  nextTick: (fn, ...args) => queueMicrotask(() => fn(...args)),",
-			"};",
-		].join("\n"),
-	},
-	target: "es2020",
-});
-
-let bufferBundle = result.outputFiles[0].text;
-bufferBundle += [
-	"",
-	"if (module.exports && module.exports.default == null) module.exports.default = module.exports;",
-	"",
-].join("\n");
-
-await mkdir(path.dirname(outputPath), { recursive: true });
-await writeFile(
-	outputPath,
-	[
-		"// @generated - run node packages/build-tools/scripts/build-browser-buffer-polyfill.mjs",
-		"export const BROWSER_BUFFER_POLYFILL_CODE =",
-		JSON.stringify(bufferBundle),
-		";",
-		"",
-	].join("\n"),
-);
-
-console.log("Built packages/browser/src/generated/buffer-polyfill.ts");
diff --git a/packages/build-tools/scripts/build-browser-path-polyfill.mjs b/packages/build-tools/scripts/build-browser-path-polyfill.mjs
deleted file mode 100644
index 27ea8377f..000000000
--- a/packages/build-tools/scripts/build-browser-path-polyfill.mjs
+++ /dev/null
@@ -1,76 +0,0 @@
-import { build } from "esbuild";
-import { mkdir, writeFile } from "node:fs/promises";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import stdLibBrowser from "node-stdlib-browser";
-
-// Bundles the real `path` package (path-browserify, via node-stdlib-browser)
-// into a guest polyfill so the converged browser presents node:path from a
-// single upstream source instead of a hand-maintained copy. The VM is Linux, so
-// path === path.posix. Mirrors build-browser-util-polyfill.mjs.
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const packageRoot = path.resolve(scriptDir, "..");
-const workspaceRoot = path.resolve(packageRoot, "..", "..");
-
-const outputPath = path.join(
-	workspaceRoot,
-	"packages",
-	"browser",
-	"src",
-	"generated",
-	"path-polyfill.ts",
-);
-
-const result = await build({
-	stdin: {
-		contents: [
-			'const path = require("path");',
-			"const resolved = path.default ?? path;",
-			// Present Linux semantics: path === path.posix, and make that reflexive.
-			"const posix = resolved.posix ?? resolved;",
-			"posix.posix = posix;",
-			"module.exports = posix;",
-		].join("\n"),
-		resolveDir: workspaceRoot,
-		loader: "js",
-	},
-	bundle: true,
-	write: false,
-	format: "cjs",
-	platform: "browser",
-	alias: {
-		path: stdLibBrowser.path,
-		"node:path": stdLibBrowser.path,
-	},
-	banner: {
-		js: [
-			"var process = globalThis.process || {",
-			"  env: {},",
-			"  cwd: () => '/',",
-			"};",
-		].join("\n"),
-	},
-	target: "es2020",
-});
-
-let pathBundle = result.outputFiles[0].text;
-pathBundle += [
-	"",
-	"if (module.exports && module.exports.default == null) module.exports.default = module.exports;",
-	"",
-].join("\n");
-
-await mkdir(path.dirname(outputPath), { recursive: true });
-await writeFile(
-	outputPath,
-	[
-		"// @generated - run node packages/build-tools/scripts/build-browser-path-polyfill.mjs",
-		"export const BROWSER_PATH_POLYFILL_CODE =",
-		JSON.stringify(pathBundle),
-		";",
-		"",
-	].join("\n"),
-);
-
-console.log("Built packages/browser/src/generated/path-polyfill.ts");
diff --git a/packages/build-tools/scripts/build-browser-util-polyfill.mjs b/packages/build-tools/scripts/build-browser-util-polyfill.mjs
deleted file mode 100644
index 6e07fc3ea..000000000
--- a/packages/build-tools/scripts/build-browser-util-polyfill.mjs
+++ /dev/null
@@ -1,105 +0,0 @@
-import { build } from "esbuild";
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import stdLibBrowser from "node-stdlib-browser";
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const packageRoot = path.resolve(scriptDir, "..");
-const workspaceRoot = path.resolve(packageRoot, "..", "..");
-
-const consoleBuiltinSourcePath = path.join(
-	workspaceRoot,
-	"packages",
-	"build-tools",
-	"bridge-src",
-	"builtins",
-	"console.ts",
-);
-const outputPath = path.join(
-	workspaceRoot,
-	"packages",
-	"browser",
-	"src",
-	"generated",
-	"util-polyfill.ts",
-);
-
-const consoleBuiltinSource = await readFile(consoleBuiltinSourcePath, "utf8");
-const formatWithOptionsHelper = extractFunction(
-	consoleBuiltinSource,
-	"installBuiltinUtilFormatWithOptions",
-);
-
-const result = await build({
-	stdin: {
-		contents: [
-			'const util = require("node:util");',
-			"module.exports = util.default ?? util;",
-		].join("\n"),
-		resolveDir: workspaceRoot,
-		loader: "js",
-	},
-	bundle: true,
-	write: false,
-	format: "cjs",
-	platform: "browser",
-	alias: {
-		util: stdLibBrowser.util,
-		"node:util": stdLibBrowser.util,
-	},
-	banner: {
-		js: [
-			"var process = globalThis.process || {",
-			"  env: {},",
-			"  nextTick: (fn, ...args) => queueMicrotask(() => fn(...args)),",
-			"};",
-		].join("\n"),
-	},
-	target: "es2020",
-});
-
-let utilBundle = result.outputFiles[0].text;
-utilBundle += [
-	"",
-	formatWithOptionsHelper,
-	"module.exports = installBuiltinUtilFormatWithOptions(module.exports);",
-	"if (module.exports && module.exports.default == null) module.exports.default = module.exports;",
-	"",
-].join("\n");
-
-await mkdir(path.dirname(outputPath), { recursive: true });
-await writeFile(
-	outputPath,
-	[
-		"// @generated - run node packages/build-tools/scripts/build-browser-util-polyfill.mjs",
-		"export const BROWSER_UTIL_POLYFILL_CODE =",
-		JSON.stringify(utilBundle),
-		";",
-		"",
-	].join("\n"),
-);
-
-function extractFunction(source, name) {
-	const start = source.indexOf(`function ${name}(`);
-	if (start < 0) {
-		throw new Error(`Failed to find ${name} in bridge-src/builtins/console.ts`);
-	}
-	const openBrace = source.indexOf("{", start);
-	if (openBrace < 0) {
-		throw new Error(`Failed to find ${name} body`);
-	}
-	let depth = 0;
-	for (let index = openBrace; index < source.length; index += 1) {
-		const char = source[index];
-		if (char === "{") {
-			depth += 1;
-		} else if (char === "}") {
-			depth -= 1;
-			if (depth === 0) {
-				return source.slice(start, index + 1);
-			}
-		}
-	}
-	throw new Error(`Failed to extract ${name}`);
-}
diff --git a/packages/build-tools/scripts/build-v8-bridge.mjs b/packages/build-tools/scripts/build-v8-bridge.mjs
deleted file mode 100644
index 14c96d959..000000000
--- a/packages/build-tools/scripts/build-v8-bridge.mjs
+++ /dev/null
@@ -1,795 +0,0 @@
-import { build } from "esbuild";
-import { createRequire } from "node:module";
-import { mkdir, readFile, rename, writeFile } from "node:fs/promises";
-import stdLibBrowser from "node-stdlib-browser";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const packageRoot = path.resolve(scriptDir, "..");
-const workspaceRoot = path.resolve(packageRoot, "..", "..");
-const require = createRequire(import.meta.url);
-
-function parseArgs(argv) {
-	const options = {};
-	for (let index = 0; index < argv.length; index++) {
-		const arg = argv[index];
-		if (arg === "--out-dir" || arg === "--bridge-out" || arg === "--zlib-out") {
-			const value = argv[++index];
-			if (!value) {
-				throw new Error(`${arg} requires a path`);
-			}
-			options[arg.slice(2)] = path.resolve(value);
-			continue;
-		}
-		throw new Error(`Unknown argument: ${arg}`);
-	}
-	return options;
-}
-
-const options = parseArgs(process.argv.slice(2));
-const bridgeEntry = path.join(packageRoot, "bridge-src", "index.ts");
-const bridgeAssetsDir = path.join(workspaceRoot, "crates", "execution", "assets");
-const bridgeSeamSourcefile = path.join(bridgeAssetsDir, "v8-bridge.generated-seam.js");
-const bridgeContract = path.join(
-	workspaceRoot,
-	"crates",
-	"bridge",
-	"bridge-contract.json",
-);
-const defaultBridgeOutput = path.join(
-	workspaceRoot,
-	"crates",
-	"execution",
-	"assets",
-	"v8-bridge.js",
-);
-const defaultZlibBridgeOutput = path.join(
-	workspaceRoot,
-	"crates",
-	"execution",
-	"assets",
-	"v8-bridge-zlib.js",
-);
-const bridgeOutput =
-	options["bridge-out"] ??
-	(options["out-dir"]
-		? path.join(options["out-dir"], "v8-bridge.js")
-		: defaultBridgeOutput);
-const zlibBridgeOutput =
-	options["zlib-out"] ??
-	(options["out-dir"]
-		? path.join(options["out-dir"], "v8-bridge-zlib.js")
-		: defaultZlibBridgeOutput);
-const tempSuffix = `.tmp-${process.pid}-${Date.now()}`;
-const bridgeTempOutput = `${bridgeOutput}${tempSuffix}`;
-const zlibBridgeTempOutput = `${zlibBridgeOutput}${tempSuffix}`;
-const undiciShimDir = path.join(
-	workspaceRoot,
-	"crates",
-	"execution",
-	"assets",
-	"undici-shims",
-);
-const undiciRuntimeFeaturesShim = path.join(
-	undiciShimDir,
-	"runtime-features.js",
-);
-const undiciRuntimeFeaturesPath = require.resolve(
-	"undici/lib/util/runtime-features.js",
-);
-const nodeStdlibUrlPackageEntry = createRequire(stdLibBrowser.url).resolve("url/");
-
-const alias = {};
-const customAlias = {
-	url: nodeStdlibUrlPackageEntry,
-	"node:url": nodeStdlibUrlPackageEntry,
-	stream: path.join(undiciShimDir, "stream.js"),
-	"node:stream": path.join(undiciShimDir, "stream.js"),
-	"secure-exec-stream-stdlib": stdLibBrowser.stream,
-	net: path.join(undiciShimDir, "net.js"),
-	"node:net": path.join(undiciShimDir, "net.js"),
-	tls: path.join(undiciShimDir, "tls.js"),
-	"node:tls": path.join(undiciShimDir, "tls.js"),
-	dns: path.join(undiciShimDir, "dns.js"),
-	"node:dns": path.join(undiciShimDir, "dns.js"),
-	"dns/promises": path.join(undiciShimDir, "dns-promises.js"),
-	"node:dns/promises": path.join(undiciShimDir, "dns-promises.js"),
-	http: path.join(undiciShimDir, "http.js"),
-	"node:http": path.join(undiciShimDir, "http.js"),
-	https: path.join(undiciShimDir, "https.js"),
-	"node:https": path.join(undiciShimDir, "https.js"),
-	http2: path.join(undiciShimDir, "http2.js"),
-	"node:http2": path.join(undiciShimDir, "http2.js"),
-	"node:diagnostics_channel": path.join(
-		undiciShimDir,
-		"diagnostics_channel.js",
-	),
-	"diagnostics_channel": path.join(undiciShimDir, "diagnostics_channel.js"),
-	"node:perf_hooks": path.join(undiciShimDir, "perf_hooks.js"),
-	"perf_hooks": path.join(undiciShimDir, "perf_hooks.js"),
-	"node:async_hooks": path.join(undiciShimDir, "async_hooks.js"),
-	async_hooks: path.join(undiciShimDir, "async_hooks.js"),
-	"node:util/types": path.join(undiciShimDir, "util-types.js"),
-	"util/types": path.join(undiciShimDir, "util-types.js"),
-	"node:worker_threads": path.join(undiciShimDir, "worker_threads.js"),
-	worker_threads: path.join(undiciShimDir, "worker_threads.js"),
-	"node:sqlite": path.join(undiciShimDir, "sqlite.js"),
-	sqlite: path.join(undiciShimDir, "sqlite.js"),
-};
-Object.assign(alias, customAlias);
-for (const [name, modulePath] of Object.entries(stdLibBrowser)) {
-	if (typeof modulePath === "string" && !(name in alias)) {
-		alias[name] = modulePath;
-		const nodeName = `node:${name}`;
-		if (!(nodeName in alias)) {
-			alias[nodeName] = modulePath;
-		}
-	}
-}
-const mainBundleAlias = {
-	...alias,
-	zlib: path.join(undiciShimDir, "zlib.js"),
-	"node:zlib": path.join(undiciShimDir, "zlib.js"),
-};
-
-await mkdir(path.dirname(bridgeOutput), { recursive: true });
-await mkdir(path.dirname(zlibBridgeOutput), { recursive: true });
-
-let bridgeSourceText = await generateBridgeSeamText();
-await validateBridgeContractGlobals(bridgeSourceText);
-bridgeSourceText = bridgeSourceText.replace(/\n\s*rationale:\s*"[^"]*",?/g, "");
-bridgeSourceText = bridgeSourceText
-	.replace(/classification:\s*"hardened"/g, 'c:"h"')
-	.replace(/classification:\s*"mutable-runtime-state"/g, 'c:"m"')
-	.replace(/entry\.classification === "hardened"/g, 'entry.c==="h"')
-	.replace(/entry\.classification === "mutable-runtime-state"/g, 'entry.c==="m"');
-
-async function generateBridgeSeamText() {
-	const result = await build({
-		entryPoints: [bridgeEntry],
-		outfile: bridgeSeamSourcefile,
-		bundle: true,
-		minify: false,
-		format: "esm",
-		platform: "neutral",
-		target: "es2020",
-		// Keep native class fields (do not lower to __publicField helpers) so the
-		// seam preserves readable `static builtinModules = [...]` etc. that the
-		// downstream text-consumers grep for.
-		supported: {
-			"class-field": true,
-			"class-static-field": true,
-		},
-		loader: { ".ts": "ts" },
-		write: false,
-		treeShaking: false,
-		// Externalize everything that is not a local bridge-src relative module.
-		packages: "external",
-		plugins: [
-			{
-				name: "secure-exec-bridge-source-externals",
-				setup(pluginBuild) {
-					// node: builtins stay as import specifiers.
-					pluginBuild.onResolve({ filter: /^node:/ }, () => ({
-						external: true,
-					}));
-					// ./undici-shims/* helpers are resolved by the downstream build
-					// relative to the bridge assets directory.
-					pluginBuild.onResolve({ filter: /^\.\/undici-shims\// }, () => ({
-						external: true,
-					}));
-				},
-			},
-		],
-	});
-	if (result.errors.length > 0) {
-		throw new Error(`Failed to build readable V8 bridge seam: ${result.errors[0].text}`);
-	}
-	return result.outputFiles[0].text;
-}
-
-async function validateBridgeContractGlobals(sourceText) {
-	const contract = JSON.parse(await readFile(bridgeContract, "utf8"));
-	const runtimeOnlyInventoryNames = new Set([
-		"_processConfig",
-		"__secureExecHrNowUs",
-		"_osConfig",
-		"bridge",
-		"_registerHandle",
-		"_unregisterHandle",
-		"_waitForActiveHandles",
-		"_getActiveHandles",
-		"_childProcessDispatch",
-		"_childProcessModule",
-		"_osModule",
-		"_moduleModule",
-		"_httpModule",
-		"_httpsModule",
-		"_http2Module",
-		"_dnsModule",
-		"_dgramModule",
-		"_netModule",
-		"_tlsModule",
-		"_netSocketDispatch",
-		"_dgramSocketDispatch",
-		"_http2RetainDispatch",
-		"_httpServerDispatch",
-		"_httpServerUpgradeDispatch",
-		"_httpServerConnectDispatch",
-		"_http2Dispatch",
-		"_timerDispatch",
-		"_drainImmediates",
-		"_getPendingImmediateCount",
-		"_upgradeSocketData",
-		"_upgradeSocketEnd",
-		"ProcessExitError",
-		"_fs",
-		"require",
-		"_requireFrom",
-		"__dynamicImport",
-		"_moduleCache",
-		"_pendingModules",
-		"_currentModule",
-		"_stdinData",
-		"_stdinPosition",
-		"_stdinEnded",
-		"_stdinFlowMode",
-		"module",
-		"exports",
-		"__filename",
-		"__dirname",
-		"fetch",
-		"Headers",
-		"Request",
-		"Response",
-		"DOMException",
-		"__importMetaResolve",
-		"Blob",
-		"File",
-		"FormData",
-	]);
-	const contractNames = new Set();
-	const duplicateContractNames = new Set();
-	for (const group of contract.groups ?? []) {
-		for (const name of group.names ?? []) {
-			if (contractNames.has(name)) {
-				duplicateContractNames.add(name);
-			}
-			contractNames.add(name);
-		}
-	}
-
-	const inventoryMatch = sourceText.match(
-		/var\s+NODE_CUSTOM_GLOBAL_INVENTORY\s*=\s*\[([\s\S]*?)\n\s*\];/,
-	);
-	if (!inventoryMatch) {
-		throw new Error(
-			"Failed to find NODE_CUSTOM_GLOBAL_INVENTORY in generated V8 bridge seam",
-		);
-	}
-
-	const inventoryNames = new Set();
-	const duplicateInventoryNames = new Set();
-	for (const match of inventoryMatch[1].matchAll(/\bname:\s*"([^"]+)"/g)) {
-		const name = match[1];
-		if (inventoryNames.has(name)) {
-			duplicateInventoryNames.add(name);
-		}
-		inventoryNames.add(name);
-	}
-
-	const missingInventoryNames = [...contractNames].filter(
-		(name) => !inventoryNames.has(name),
-	);
-	const unexpectedInventoryNames = [...inventoryNames].filter(
-		(name) => !contractNames.has(name) && !runtimeOnlyInventoryNames.has(name),
-	);
-	const staleRuntimeOnlyNames = [...runtimeOnlyInventoryNames].filter(
-		(name) => !inventoryNames.has(name),
-	);
-	const errors = [];
-	if (duplicateContractNames.size > 0) {
-		errors.push(
-			`duplicate names in bridge-contract.json: ${[...duplicateContractNames].sort().join(", ")}`,
-		);
-	}
-	if (duplicateInventoryNames.size > 0) {
-		errors.push(
-			`duplicate names in NODE_CUSTOM_GLOBAL_INVENTORY: ${[...duplicateInventoryNames].sort().join(", ")}`,
-		);
-	}
-	if (missingInventoryNames.length > 0) {
-		errors.push(
-			`contract names missing from NODE_CUSTOM_GLOBAL_INVENTORY: ${missingInventoryNames.sort().join(", ")}`,
-		);
-	}
-	if (unexpectedInventoryNames.length > 0) {
-		errors.push(
-			`NODE_CUSTOM_GLOBAL_INVENTORY names missing from bridge-contract.json or the runtime-only allowlist: ${unexpectedInventoryNames.sort().join(", ")}`,
-		);
-	}
-	if (staleRuntimeOnlyNames.length > 0) {
-		errors.push(
-			`runtime-only inventory allowlist names missing from NODE_CUSTOM_GLOBAL_INVENTORY: ${staleRuntimeOnlyNames.sort().join(", ")}`,
-		);
-	}
-	if (errors.length > 0) {
-		throw new Error(`V8 bridge contract drift detected:\n  - ${errors.join("\n  - ")}`);
-	}
-}
-
-async function rewriteUndiciRuntimeFeaturesBundle(bundlePath, { required } = { required: false }) {
-	const bundleText = await readFile(bundlePath, "utf8");
-	const replacement = (moduleVar, commonJsHelperVar, cjsModuleVar) =>
-		`${moduleVar}=${commonJsHelperVar}((_,${cjsModuleVar})=>{"use strict";var e=new Set(["crypto","sqlite","markAsUncloneable","zstd"]),t=new Map([["crypto",!0],["sqlite",!1],["markAsUncloneable",!1],["zstd",!1]]),r={clear(){t.clear()},has(n){if(!e.has(n))throw new TypeError(\`unknown feature: \${n}\`);return t.get(n)??!1},set(n,i){if(!e.has(n))throw new TypeError(\`unknown feature: \${n}\`);t.set(n,!!i)}};${cjsModuleVar}.exports.runtimeFeatures=r;${cjsModuleVar}.exports.default=r})`;
-	const runtimeFeaturesModulePattern =
-		/var ([A-Za-z_$][\w$]*)=([A-Za-z_$][\w$]*)\(\(([A-Za-z_$][\w$]*),([A-Za-z_$][\w$]*)\)=>\{"use strict";[\s\S]*?\4\.exports\.runtimeFeatures=([A-Za-z_$][\w$]*);\4\.exports\.default=\5\}\);/;
-	let patched = bundleText.replace(
-		runtimeFeaturesModulePattern,
-		(_match, moduleVar, commonJsHelperVar, _exportsArgVar, cjsModuleVar) =>
-			`var ${replacement(moduleVar, commonJsHelperVar, cjsModuleVar)};`,
-	);
-	if (patched === bundleText) {
-		const runtimeFeaturesObjectModulePattern =
-			/var ([A-Za-z_$][\w$]*)=([A-Za-z_$][\w$]*)\(\{"[^"]*runtime-features\.js"\(([A-Za-z_$][\w$]*),([A-Za-z_$][\w$]*)\)\{"use strict";[\s\S]*?\4\.exports\.runtimeFeatures=([A-Za-z_$][\w$]*),\4\.exports\.default=\5\}\}\);/;
-		patched = bundleText.replace(
-			runtimeFeaturesObjectModulePattern,
-			(_match, moduleVar, commonJsHelperVar, _exportsArgVar, cjsModuleVar) =>
-				`var ${replacement(moduleVar, commonJsHelperVar, cjsModuleVar)};`,
-		);
-	}
-	if (patched === bundleText) {
-		const runtimeFeaturesObjectAssignmentPattern =
-			/([A-Za-z_$][\w$]*)=([A-Za-z_$][\w$]*)\(\{"[^"]*runtime-features\.js"\(([A-Za-z_$][\w$]*),([A-Za-z_$][\w$]*)\)\{"use strict";[\s\S]*?\4\.exports\.runtimeFeatures=([A-Za-z_$][\w$]*),\4\.exports\.default=\5\}\}\)(?=,|;)/;
-		patched = bundleText.replace(
-			runtimeFeaturesObjectAssignmentPattern,
-			(_match, moduleVar, commonJsHelperVar, _exportsArgVar, cjsModuleVar) =>
-				replacement(moduleVar, commonJsHelperVar, cjsModuleVar),
-		);
-	}
-	if (patched === bundleText) {
-		if (required) {
-			throw new Error(`Failed to rewrite undici runtime-features in ${bundlePath}`);
-		}
-		return;
-	}
-	await writeFile(bundlePath, patched);
-}
-
-async function rewriteUnsupportedUtilTypesBundle(
-	bundlePath,
-	{ required } = { required: false },
-) {
-	const bundleText = await readFile(bundlePath, "utf8");
-	const unsupportedUserlandTypesPattern =
-		/\["isProxy","isExternal","isModuleNamespaceObject"\]\.forEach\(function\(([A-Za-z_$][\w$]*)\)\{Object\.defineProperty\(([A-Za-z_$][\w$]*),\1,\{enumerable:!1,value:function\(\)\{throw new Error\(\1\+" is not supported in userland"\)\}\}\)\}\)/;
-	const patched = bundleText.replace(
-		unsupportedUserlandTypesPattern,
-		(_match, methodVar, exportsVar) =>
-			`["isProxy","isExternal","isModuleNamespaceObject"].forEach(function(${methodVar}){Object.defineProperty(${exportsVar},${methodVar},{enumerable:!1,value:function(){return!1}})})`,
-	);
-	if (patched === bundleText) {
-		if (required) {
-			throw new Error(`Failed to rewrite util support/types in ${bundlePath}`);
-		}
-		return;
-	}
-	await writeFile(bundlePath, patched);
-}
-
-async function buildWebStreamsPrelude() {
-	const preludeResult = await build({
-		stdin: {
-			contents: [
-				'import {',
-				'  ReadableStream,',
-				'  WritableStream,',
-				'  TransformStream,',
-				'} from "web-streams-polyfill/ponyfill/es2018";',
-				'if (typeof globalThis.ReadableStream === "undefined") {',
-				"  globalThis.ReadableStream = ReadableStream;",
-				"}",
-				'if (typeof globalThis.WritableStream === "undefined") {',
-				"  globalThis.WritableStream = WritableStream;",
-				"}",
-				'if (typeof globalThis.TransformStream === "undefined") {',
-				"  globalThis.TransformStream = TransformStream;",
-				"}",
-				'if (typeof globalThis.URLSearchParams === "undefined") {',
-				"  globalThis.URLSearchParams = class URLSearchParamsStub {",
-				"    _entries = [];",
-				"    constructor(init = undefined) {",
-				'      if (typeof init === "string") {',
-				'        const source = init.startsWith("?") ? init.slice(1) : init;',
-				'        if (source.length > 0) {',
-				'          for (const pair of source.split("&")) {',
-				'            if (!pair) continue;',
-				'            const [rawKey, rawValue = ""] = pair.split("=");',
-				"            this.append(decodeURIComponent(rawKey), decodeURIComponent(rawValue));",
-				"          }",
-				"        }",
-				"      } else if (Array.isArray(init)) {",
-				"        for (const [key, value] of init) {",
-				"          this.append(key, value);",
-				"        }",
-				'      } else if (init && typeof init === "object") {',
-				"        for (const [key, value] of Object.entries(init)) {",
-				"          this.append(key, value);",
-				"        }",
-				"      }",
-				"    }",
-				"    append(name, value) {",
-				"      this._entries.push([String(name), String(value)]);",
-				"    }",
-				"    delete(name) {",
-				"      const key = String(name);",
-				"      this._entries = this._entries.filter(([entryKey]) => entryKey !== key);",
-				"    }",
-				"    get(name) {",
-				"      const key = String(name);",
-				"      const entry = this._entries.find(([entryKey]) => entryKey === key);",
-				"      return entry ? entry[1] : null;",
-				"    }",
-				"    getAll(name) {",
-				"      const key = String(name);",
-				"      return this._entries.filter(([entryKey]) => entryKey === key).map(([, value]) => value);",
-				"    }",
-				"    has(name) {",
-				"      const key = String(name);",
-				"      return this._entries.some(([entryKey]) => entryKey === key);",
-				"    }",
-				"    set(name, value) {",
-				"      this.delete(name);",
-				"      this.append(name, value);",
-				"    }",
-				"    entries() {",
-				"      return this._entries[Symbol.iterator]();",
-				"    }",
-				"    keys() {",
-				"      return this._entries.map(([key]) => key)[Symbol.iterator]();",
-				"    }",
-				"    values() {",
-				"      return this._entries.map(([, value]) => value)[Symbol.iterator]();",
-				"    }",
-				"    forEach(callback, thisArg = undefined) {",
-				"      for (const [key, value] of this._entries) {",
-				"        callback.call(thisArg, value, key, this);",
-				"      }",
-				"    }",
-				"    toString() {",
-				'      return this._entries.map(([key, value]) => `${encodeURIComponent(key)}=${encodeURIComponent(value)}`).join("&");',
-				"    }",
-				"    [Symbol.iterator]() {",
-				"      return this.entries();",
-				"    }",
-				"  };",
-				"  globalThis.URLSearchParams.__secureExecBootstrapStub = true;",
-				"}",
-				'if (typeof globalThis.URL === "undefined") {',
-				"  globalThis.URL = class URLStub {",
-				"    constructor(url, base = undefined) {",
-				"      const raw = String(url ?? \"\");",
-				"      const hasScheme = /^[a-zA-Z][a-zA-Z\\d+\\-.]*:/.test(raw);",
-				"      const baseHref = hasScheme || typeof base === \"undefined\"",
-				"        ? \"\"",
-				"        : String(new globalThis.URL(base).href);",
-				"      const resolved = hasScheme",
-				"        ? raw",
-				"        : baseHref.replace(/\\/[^/]*$/, \"/\") + raw;",
-				"      const match = resolved.match(/^(\\w+:)\\/\\/([^/:?#]+)(:\\d+)?(.*)$/);",
-				"      if (!match) {",
-				"        throw new TypeError(`Invalid URL: ${raw}`);",
-				"      }",
-				"      this.protocol = match[1];",
-				"      this.hostname = match[2];",
-				"      this.port = (match[3] || \"\").slice(1);",
-				"      const remainder = match[4] || \"/\";",
-				"      const searchIndex = remainder.indexOf(\"?\");",
-				"      const hashIndex = remainder.indexOf(\"#\");",
-				"      const pathEnd = [searchIndex, hashIndex].filter((index) => index >= 0).sort((a, b) => a - b)[0] ?? remainder.length;",
-				"      this.pathname = remainder.slice(0, pathEnd) || \"/\";",
-				"      this.search = searchIndex >= 0",
-				"        ? remainder.slice(searchIndex, hashIndex >= 0 && hashIndex > searchIndex ? hashIndex : remainder.length)",
-				"        : \"\";",
-				"      this.hash = hashIndex >= 0 ? remainder.slice(hashIndex) : \"\";",
-				"      this.host = this.hostname + (this.port ? `:${this.port}` : \"\");",
-				"      this.origin = `${this.protocol}//${this.host}`;",
-				"      this.href = `${this.origin}${this.pathname}${this.search}${this.hash}`;",
-				"      this.searchParams = new globalThis.URLSearchParams(this.search);",
-				"    }",
-				"    toString() {",
-				"      return this.href;",
-				"    }",
-				"    toJSON() {",
-				"      return this.href;",
-				"    }",
-				"  };",
-				"  globalThis.URL.__secureExecBootstrapStub = true;",
-				"}",
-				'if (typeof globalThis.Blob === "undefined") {',
-				"  globalThis.Blob = class BlobStub {};",
-				"}",
-				'if (typeof globalThis.AbortSignal === "undefined") {',
-				"  globalThis.AbortSignal = class AbortSignalStub {",
-				"    aborted = false;",
-				"    reason = undefined;",
-				"    _listeners = new Set();",
-				"    addEventListener(type, listener) {",
-				'      if (type !== "abort" || typeof listener !== "function") return;',
-				"      this._listeners.add(listener);",
-				"    }",
-				"    removeEventListener(type, listener) {",
-				'      if (type !== "abort") return;',
-				"      this._listeners.delete(listener);",
-				"    }",
-				"    dispatchEvent(event) {",
-				"      for (const listener of this._listeners) {",
-				"        listener.call(this, event);",
-				"      }",
-				"      return true;",
-				"    }",
-				"    throwIfAborted() {",
-				"      if (this.aborted) {",
-				'        throw this.reason instanceof Error ? this.reason : new Error(String(this.reason ?? "AbortError"));',
-				"      }",
-				"    }",
-				"  };",
-				"}",
-				'if (typeof globalThis.AbortController === "undefined") {',
-				"  globalThis.AbortController = class AbortControllerStub {",
-				"    constructor() {",
-				"      this.signal = new globalThis.AbortSignal();",
-				"    }",
-				"    abort(reason = undefined) {",
-				"      if (this.signal.aborted) return;",
-				"      this.signal.aborted = true;",
-				"      this.signal.reason = reason;",
-				'      this.signal.dispatchEvent({ type: "abort" });',
-				"    }",
-				"  };",
-				"}",
-				'if (typeof globalThis.File === "undefined") {',
-				"  globalThis.File = class FileStub extends Blob {",
-				"    name;",
-				"    lastModified;",
-				"    webkitRelativePath;",
-				'    constructor(parts = [], name = "", options = {}) {',
-				"      super(parts, options);",
-				"      this.name = String(name);",
-				'      this.lastModified = typeof options.lastModified === "number" ? options.lastModified : Date.now();',
-				'      this.webkitRelativePath = "";',
-				"    }",
-				"  };",
-				"}",
-				'if (typeof globalThis.FormData === "undefined") {',
-				"  globalThis.FormData = class FormDataStub {",
-				"    _entries = [];",
-				"    append(name, value) {",
-				"      this._entries.push([name, value]);",
-				"    }",
-				"    get(name) {",
-				"      const entry = this._entries.find(([key]) => key === name);",
-				"      return entry ? entry[1] : null;",
-				"    }",
-				"    getAll(name) {",
-				"      return this._entries.filter(([key]) => key === name).map(([, value]) => value);",
-				"    }",
-				"    has(name) {",
-				"      return this._entries.some(([key]) => key === name);",
-				"    }",
-				"    delete(name) {",
-				"      this._entries = this._entries.filter(([key]) => key !== name);",
-				"    }",
-				"    entries() {",
-				"      return this._entries[Symbol.iterator]();",
-				"    }",
-				"    [Symbol.iterator]() {",
-				"      return this.entries();",
-				"    }",
-				"  };",
-				"}",
-				'if (typeof globalThis.MessagePort === "undefined") {',
-				"  globalThis.MessagePort = class MessagePortStub {",
-				"    onmessage = null;",
-				"    postMessage(_message) {}",
-				"    start() {}",
-				"    close() {}",
-				"    addEventListener() {}",
-				"    removeEventListener() {}",
-				"  };",
-				"}",
-				'if (typeof globalThis.MessageChannel === "undefined") {',
-				"  globalThis.MessageChannel = class MessageChannelStub {",
-				"    constructor() {",
-				"      this.port1 = new globalThis.MessagePort();",
-				"      this.port2 = new globalThis.MessagePort();",
-				"    }",
-				"  };",
-				"}",
-				'if (typeof globalThis.performance === "undefined") {',
-				"  const performanceStart = Date.now();",
-				"  globalThis.performance = {",
-				"    now() {",
-				'      if (typeof globalThis.__secureExecHrNowUs === "function") {',
-				"        return globalThis.__secureExecHrNowUs() / 1000;",
-				"      }",
-				"      return Date.now() - performanceStart;",
-				"    },",
-				"  };",
-				"}",
-				'if (typeof globalThis.performance.markResourceTiming !== "function") {',
-				"  globalThis.performance.markResourceTiming = () => {};",
-				"}",
-			].join("\n"),
-			resolveDir: bridgeAssetsDir,
-			sourcefile: "v8-bridge-web-streams.entry.js",
-			loader: "js",
-		},
-		bundle: true,
-		write: false,
-		format: "iife",
-		platform: "browser",
-		target: "es2020",
-		minify: true,
-		alias,
-		plugins: createUndiciBuildPlugins(),
-		define: {
-			"process.env.NODE_ENV": '"production"',
-			global: "globalThis",
-		},
-		banner: {
-			js: [
-				'if(typeof globalThis.global==="undefined"){globalThis.global=globalThis;}',
-				'if(typeof globalThis.process==="undefined"){globalThis.process={env:{},argv:["node"],browser:false,version:"v22.0.0",versions:{node:"22.0.0"},nextTick(callback,...args){return Promise.resolve().then(()=>callback(...args));}};}',
-			].join(""),
-		},
-	});
-	if (preludeResult.errors.length > 0) {
-		throw new Error(`Failed to build web streams prelude: ${preludeResult.errors[0].text}`);
-	}
-	return `${preludeResult.outputFiles[0].text}\n`;
-}
-
-async function prependBundlePrelude(bundlePath, preludeSource) {
-	const bundleText = await readFile(bundlePath, "utf8");
-	if (bundleText.startsWith(preludeSource)) {
-		return;
-	}
-	await writeFile(bundlePath, `${preludeSource}${bundleText}`);
-}
-
-function createUndiciBuildPlugins() {
-	return [
-		{
-			name: "secure-exec-undici-runtime-features-shim",
-			setup(build) {
-				build.onResolve(
-					{
-						filter:
-							/^(undici\/lib\/.+|web-streams-polyfill\/ponyfill\/es2018)$/,
-					},
-					(args) => {
-						const resolvedPath = require.resolve(args.path, {
-							paths: [packageRoot, workspaceRoot, args.resolveDir],
-						});
-						return { path: resolvedPath };
-					},
-				);
-				build.onResolve({ filter: /^(?:node:)?worker_threads$/ }, () => ({
-					path: path.join(undiciShimDir, "worker_threads.js"),
-				}));
-				build.onResolve({ filter: /runtime-features(?:\.js)?$/ }, (args) => {
-					const resolved = path.resolve(args.resolveDir, args.path);
-					if (resolved !== undiciRuntimeFeaturesPath) {
-						return null;
-					}
-					return { path: undiciRuntimeFeaturesShim };
-				});
-			},
-		},
-	];
-}
-
-const result = await build({
-	stdin: {
-		contents: bridgeSourceText,
-		resolveDir: bridgeAssetsDir,
-		sourcefile: bridgeSeamSourcefile,
-		loader: "js",
-	},
-	bundle: true,
-	outfile: bridgeTempOutput,
-	write: true,
-	format: "iife",
-	platform: "browser",
-	target: "es2020",
-	minify: true,
-	alias: mainBundleAlias,
-	define: {
-		"process.env.NODE_ENV": '"production"',
-		global: "globalThis",
-	},
-	plugins: createUndiciBuildPlugins(),
-	banner: {
-			js: [
-				'if(typeof globalThis.global==="undefined"){globalThis.global=globalThis;}',
-				'if(typeof globalThis.process==="undefined"){globalThis.process={env:{},argv:["node"],browser:false,version:"v22.0.0",versions:{node:"22.0.0"},nextTick(callback,...args){return Promise.resolve().then(()=>callback(...args));}};}',
-				`if(typeof globalThis.TextEncoder==="undefined"){globalThis.TextEncoder=class{encode(value=""){const input=String(value??"");const encoded=unescape(encodeURIComponent(input));const out=new Uint8Array(encoded.length);for(let i=0;i<encoded.length;i++){out[i]=encoded.charCodeAt(i);}return out;}};}`,
-				`if(typeof globalThis.TextDecoder==="undefined"){globalThis.TextDecoder=class{decode(value=new Uint8Array()){const view=value instanceof Uint8Array?value:ArrayBuffer.isView(value)?new Uint8Array(value.buffer,value.byteOffset,value.byteLength):value instanceof ArrayBuffer?new Uint8Array(value):new Uint8Array(0);let binary="";for(let i=0;i<view.length;i++){binary+=String.fromCharCode(view[i]);}return decodeURIComponent(escape(binary));}};}`,
-				`if(typeof globalThis.Buffer==="undefined"){const __secureExecTe=typeof TextEncoder==="function"?new TextEncoder():null;const __secureExecTd=typeof TextDecoder==="function"?new TextDecoder():null;class __SecureExecEarlyBuffer extends Uint8Array{static from(value,encoding="utf8"){if(value instanceof ArrayBuffer){return new __SecureExecEarlyBuffer(value);}if(ArrayBuffer.isView(value)){return new __SecureExecEarlyBuffer(value.buffer.slice(value.byteOffset,value.byteOffset+value.byteLength));}if(Array.isArray(value)){return new __SecureExecEarlyBuffer(value);}const stringValue=String(value??"");if(encoding==="base64"&&typeof atob==="function"){const binary=atob(stringValue);const out=new __SecureExecEarlyBuffer(binary.length);for(let i=0;i<binary.length;i++){out[i]=binary.charCodeAt(i);}return out;}if(encoding==="binary"||encoding==="latin1"){const out=new __SecureExecEarlyBuffer(stringValue.length);for(let i=0;i<stringValue.length;i++){out[i]=stringValue.charCodeAt(i)&255;}return out;}if(__secureExecTe){return new __SecureExecEarlyBuffer(__secureExecTe.encode(stringValue));}const out=new __SecureExecEarlyBuffer(stringValue.length);for(let i=0;i<stringValue.length;i++){out[i]=stringValue.charCodeAt(i)&255;}return out;}static alloc(size){return new __SecureExecEarlyBuffer(Number(size)||0);}static concat(list,totalLength){const length=totalLength??list.reduce((sum,item)=>sum+(item?.length??0),0);const out=new __SecureExecEarlyBuffer(length);let offset=0;for(const item of list){const chunk=item instanceof Uint8Array?item:__SecureExecEarlyBuffer.from(item);out.set(chunk,offset);offset+=chunk.length;}return out;}static isBuffer(value){return value instanceof Uint8Array;}static byteLength(value,encoding="utf8"){return __SecureExecEarlyBuffer.from(value,encoding).byteLength;}toString(encoding="utf8"){if(encoding==="base64"&&typeof btoa==="function"){let binary="";for(const byte of this){binary+=String.fromCharCode(byte);}return btoa(binary);}if(encoding==="binary"||encoding==="latin1"){let binary="";for(const byte of this){binary+=String.fromCharCode(byte);}return binary;}if(__secureExecTd){return __secureExecTd.decode(this);}return Array.from(this,byte=>String.fromCharCode(byte)).join("");}}globalThis.Buffer=__SecureExecEarlyBuffer;}`,
-				'if(typeof globalThis.performance==="undefined"){const __secureExecPerformanceStart=Date.now();globalThis.performance={now(){if(typeof globalThis.__secureExecHrNowUs==="function"){return globalThis.__secureExecHrNowUs()/1000;}return Date.now()-__secureExecPerformanceStart;}};}if(typeof globalThis.performance.markResourceTiming!=="function"){globalThis.performance.markResourceTiming=()=>{};}',
-				'if(typeof TextEncoder==="undefined"&&typeof globalThis.TextEncoder!=="undefined"){var TextEncoder=globalThis.TextEncoder;}if(typeof TextDecoder==="undefined"&&typeof globalThis.TextDecoder!=="undefined"){var TextDecoder=globalThis.TextDecoder;}if(typeof Buffer==="undefined"&&typeof globalThis.Buffer!=="undefined"){var Buffer=globalThis.Buffer;}',
-			].join(""),
-	},
-	external: ["process"],
-});
-
-const zlibResult = await build({
-	stdin: {
-		contents: [
-			'import * as assertStdlibModuleNs from "node:assert";',
-			'import * as utilStdlibModuleNs from "node:util";',
-			'import * as zlibStdlibModuleNs from "node:zlib";',
-			"const assertModule = assertStdlibModuleNs.default ?? assertStdlibModuleNs;",
-			"const utilModule = utilStdlibModuleNs.default ?? utilStdlibModuleNs;",
-			"const zlibModule = zlibStdlibModuleNs.default ?? zlibStdlibModuleNs;",
-			'const zlibConstants = typeof zlibModule.constants === "object" && zlibModule.constants !== null ? zlibModule.constants : Object.fromEntries(Object.entries(zlibModule).filter(([key, value]) => /^[A-Z0-9_]+$/.test(key) && typeof value === "number"));',
-			'if(typeof zlibModule.constants === "undefined"){zlibModule.constants = zlibConstants;}',
-			'if(typeof utilModule.TextEncoder==="undefined"&&typeof globalThis.TextEncoder==="function"){utilModule.TextEncoder=globalThis.TextEncoder;}',
-			'if(typeof utilModule.TextDecoder==="undefined"&&typeof globalThis.TextDecoder==="function"){utilModule.TextDecoder=globalThis.TextDecoder;}',
-			"globalThis.__secureExecBuiltinAssertModule = assertModule;",
-			"globalThis.__secureExecBuiltinUtilModule = utilModule;",
-			"globalThis.__secureExecBuiltinZlibModule = zlibModule;",
-		].join("\n"),
-		resolveDir: bridgeAssetsDir,
-		sourcefile: "v8-bridge-zlib.entry.js",
-		loader: "js",
-	},
-	bundle: true,
-	outfile: zlibBridgeTempOutput,
-	write: true,
-	format: "iife",
-	platform: "browser",
-	target: "es2020",
-	minify: true,
-	alias,
-	define: {
-		"process.env.NODE_ENV": '"production"',
-		global: "globalThis",
-	},
-	plugins: createUndiciBuildPlugins(),
-	alias,
-	banner: {
-			js: [
-				'if(typeof globalThis.global==="undefined"){globalThis.global=globalThis;}',
-				'if(typeof globalThis.process==="undefined"){globalThis.process={env:{},argv:["node"],browser:false,version:"v22.0.0",versions:{node:"22.0.0"},nextTick(callback,...args){return Promise.resolve().then(()=>callback(...args));}};}',
-				`if(typeof globalThis.TextEncoder==="undefined"){globalThis.TextEncoder=class{encode(value=""){const input=String(value??"");const encoded=unescape(encodeURIComponent(input));const out=new Uint8Array(encoded.length);for(let i=0;i<encoded.length;i++){out[i]=encoded.charCodeAt(i);}return out;}};}`,
-				`if(typeof globalThis.TextDecoder==="undefined"){globalThis.TextDecoder=class{decode(value=new Uint8Array()){const view=value instanceof Uint8Array?value:ArrayBuffer.isView(value)?new Uint8Array(value.buffer,value.byteOffset,value.byteLength):value instanceof ArrayBuffer?new Uint8Array(value):new Uint8Array(0);let binary="";for(let i=0;i<view.length;i++){binary+=String.fromCharCode(view[i]);}return decodeURIComponent(escape(binary));}};}`,
-				`if(typeof globalThis.Buffer==="undefined"){const __secureExecTe=typeof TextEncoder==="function"?new TextEncoder():null;const __secureExecTd=typeof TextDecoder==="function"?new TextDecoder():null;class __SecureExecEarlyBuffer extends Uint8Array{static from(value,encoding="utf8"){if(value instanceof ArrayBuffer){return new __SecureExecEarlyBuffer(value);}if(ArrayBuffer.isView(value)){return new __SecureExecEarlyBuffer(value.buffer.slice(value.byteOffset,value.byteOffset+value.byteLength));}if(Array.isArray(value)){return new __SecureExecEarlyBuffer(value);}const stringValue=String(value??"");if(encoding==="base64"&&typeof atob==="function"){const binary=atob(stringValue);const out=new __SecureExecEarlyBuffer(binary.length);for(let i=0;i<binary.length;i++){out[i]=binary.charCodeAt(i);}return out;}if(encoding==="binary"||encoding==="latin1"){const out=new __SecureExecEarlyBuffer(stringValue.length);for(let i=0;i<stringValue.length;i++){out[i]=stringValue.charCodeAt(i)&255;}return out;}if(__secureExecTe){return new __SecureExecEarlyBuffer(__secureExecTe.encode(stringValue));}const out=new __SecureExecEarlyBuffer(stringValue.length);for(let i=0;i<stringValue.length;i++){out[i]=stringValue.charCodeAt(i)&255;}return out;}static alloc(size){return new __SecureExecEarlyBuffer(Number(size)||0);}static concat(list,totalLength){const length=totalLength??list.reduce((sum,item)=>sum+(item?.length??0),0);const out=new __SecureExecEarlyBuffer(length);let offset=0;for(const item of list){const chunk=item instanceof Uint8Array?item:__SecureExecEarlyBuffer.from(item);out.set(chunk,offset);offset+=chunk.length;}return out;}static isBuffer(value){return value instanceof Uint8Array;}static byteLength(value,encoding="utf8"){return __SecureExecEarlyBuffer.from(value,encoding).byteLength;}toString(encoding="utf8"){if(encoding==="base64"&&typeof btoa==="function"){let binary="";for(const byte of this){binary+=String.fromCharCode(byte);}return btoa(binary);}if(encoding==="binary"||encoding==="latin1"){let binary="";for(const byte of this){binary+=String.fromCharCode(byte);}return binary;}if(__secureExecTd){return __secureExecTd.decode(this);}return Array.from(this,byte=>String.fromCharCode(byte)).join("");}}globalThis.Buffer=__SecureExecEarlyBuffer;}`,
-				'if(typeof globalThis.performance==="undefined"){const __secureExecPerformanceStart=Date.now();globalThis.performance={now(){if(typeof globalThis.__secureExecHrNowUs==="function"){return globalThis.__secureExecHrNowUs()/1000;}return Date.now()-__secureExecPerformanceStart;}};}if(typeof globalThis.performance.markResourceTiming!=="function"){globalThis.performance.markResourceTiming=()=>{};}',
-				'if(typeof TextEncoder==="undefined"&&typeof globalThis.TextEncoder!=="undefined"){var TextEncoder=globalThis.TextEncoder;}if(typeof TextDecoder==="undefined"&&typeof globalThis.TextDecoder!=="undefined"){var TextDecoder=globalThis.TextDecoder;}if(typeof Buffer==="undefined"&&typeof globalThis.Buffer!=="undefined"){var Buffer=globalThis.Buffer;}',
-			].join(""),
-	},
-	external: ["process"],
-});
-
-if (result.errors.length > 0) {
-	throw new Error(`Failed to build v8-bridge.js: ${result.errors[0].text}`);
-}
-if (zlibResult.errors.length > 0) {
-	throw new Error(`Failed to build v8-bridge-zlib.js: ${zlibResult.errors[0].text}`);
-}
-
-const webStreamsPrelude = await buildWebStreamsPrelude();
-await prependBundlePrelude(bridgeTempOutput, webStreamsPrelude);
-await rewriteUndiciRuntimeFeaturesBundle(bridgeTempOutput, { required: true });
-await rewriteUnsupportedUtilTypesBundle(bridgeTempOutput, { required: true });
-await rewriteUndiciRuntimeFeaturesBundle(zlibBridgeTempOutput);
-await rewriteUnsupportedUtilTypesBundle(zlibBridgeTempOutput);
-await rename(bridgeTempOutput, bridgeOutput);
-await rename(zlibBridgeTempOutput, zlibBridgeOutput);
-
-console.log(
-	`Built ${path.relative(workspaceRoot, bridgeOutput)} (${result.outputFiles?.[0]?.text?.length ?? "written"} bytes)`,
-);
diff --git a/packages/build-tools/scripts/compile-sidecar-protocol.mjs b/packages/build-tools/scripts/compile-sidecar-protocol.mjs
deleted file mode 100644
index b8847e6c5..000000000
--- a/packages/build-tools/scripts/compile-sidecar-protocol.mjs
+++ /dev/null
@@ -1,45 +0,0 @@
-import { mkdir, readFile, writeFile } from "node:fs/promises";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import { transform } from "@bare-ts/tools";
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const buildToolsPackageDir = path.resolve(scriptDir, "..");
-const repoRoot = path.resolve(buildToolsPackageDir, "../..");
-const corePackageDir = path.join(repoRoot, "packages", "core");
-const schemaPath = path.join(
-	repoRoot,
-	"crates/sidecar-protocol/protocol/secure_exec_sidecar_v1.bare",
-);
-const outputPath = path.join(corePackageDir, "src/generated-protocol.ts");
-
-const schema = await readFile(schemaPath, "utf8");
-let output = transform(schema, { pedantic: false, generator: "ts" });
-output = postProcess(output);
-
-await mkdir(path.dirname(outputPath), { recursive: true });
-await writeFile(outputPath, output);
-
-function postProcess(code) {
-	code = code.replace(/@bare-ts\/lib/g, "@rivetkit/bare-ts");
-	code = code.replace(/^import assert from "assert"\n?/m, "");
-	code = code.replace(/^import assert from "node:assert"\n?/m, "");
-
-	if (code.includes("@bare-ts/lib")) {
-		throw new Error("failed to replace @bare-ts/lib import");
-	}
-	if (code.includes('import assert from "')) {
-		throw new Error("failed to remove generated assert import");
-	}
-
-	let header =
-		"// @generated - run pnpm --dir packages/build-tools build:protocol\n";
-	if (/\bassert\(/.test(code)) {
-		header += `function assert(condition: boolean, message?: string): asserts condition {
-\tif (!condition) throw new Error(message ?? "Assertion failed");
-}
-`;
-	}
-
-	return `${header}${code}`;
-}
diff --git a/packages/core/README.md b/packages/core/README.md
index 197a1044b..a97f4fe06 100644
--- a/packages/core/README.md
+++ b/packages/core/README.md
@@ -1,7 +1,3 @@
 # @secure-exec/core
 
-Raw Secure Exec protocol types and codecs.
-
-- `@secure-exec/core/protocol` exports the generated sidecar protocol.
-- `@secure-exec/core/binary` resolves the published `secure-exec-sidecar` binary and honors `SECURE_EXEC_SIDECAR_BIN`.
-- `@secure-exec/core/framing`, `@secure-exec/core/frame-stream`, `@secure-exec/core/frame-rpc`, `@secure-exec/core/frame-payload-codec`, `@secure-exec/core/correlation`, `@secure-exec/core/event-buffer`, `@secure-exec/core/ownership`, `@secure-exec/core/permissions`, `@secure-exec/core/state`, `@secure-exec/core/request-payloads`, `@secure-exec/core/response-payloads`, `@secure-exec/core/protocol-frames`, `@secure-exec/core/protocol-client`, `@secure-exec/core/native-client`, `@secure-exec/core/descriptors`, `@secure-exec/core/process`, `@secure-exec/core/protocol-schema`, `@secure-exec/core/protocol-maps`, `@secure-exec/core/callbacks`, `@secure-exec/core/filesystem`, `@secure-exec/core/json`, `@secure-exec/core/numbers`, `@secure-exec/core/bytes`, and `@secure-exec/core/ext` expose generic Node transport primitives.
+Compatibility shim for `@rivet-dev/agentos-runtime-core`.
diff --git a/packages/core/package.json b/packages/core/package.json
index 42b9121cf..67fc49f2a 100644
--- a/packages/core/package.json
+++ b/packages/core/package.json
@@ -3,11 +3,11 @@
 	"version": "0.0.1",
 	"type": "module",
 	"license": "Apache-2.0",
+	"description": "@secure-exec/core compatibility shim for @rivet-dev/agentos-runtime-core.",
 	"main": "./dist/index.js",
 	"types": "./dist/index.d.ts",
 	"files": [
 		"dist",
-		"commands",
 		"README.md"
 	],
 	"exports": {
@@ -16,189 +16,16 @@
 			"import": "./dist/index.js",
 			"default": "./dist/index.js"
 		},
-		"./protocol": {
-			"types": "./dist/generated-protocol.d.ts",
-			"import": "./dist/generated-protocol.js",
-			"default": "./dist/generated-protocol.js"
-		},
-		"./vm-config": {
-			"types": "./dist/vm-config.d.ts",
-			"import": "./dist/vm-config.js",
-			"default": "./dist/vm-config.js"
-		},
-		"./binary": {
-			"types": "./dist/binary.d.ts",
-			"import": "./dist/binary.js",
-			"default": "./dist/binary.js"
-		},
-		"./bytes": {
-			"types": "./dist/bytes.d.ts",
-			"import": "./dist/bytes.js",
-			"default": "./dist/bytes.js"
-		},
-		"./callbacks": {
-			"types": "./dist/callbacks.d.ts",
-			"import": "./dist/callbacks.js",
-			"default": "./dist/callbacks.js"
-		},
-		"./cargo": {
-			"types": "./dist/cargo.d.ts",
-			"import": "./dist/cargo.js",
-			"default": "./dist/cargo.js"
-		},
-		"./descriptors": {
-			"types": "./dist/descriptors.d.ts",
-			"import": "./dist/descriptors.js",
-			"default": "./dist/descriptors.js"
-		},
-		"./ext": {
-			"types": "./dist/ext.d.ts",
-			"import": "./dist/ext.js",
-			"default": "./dist/ext.js"
-		},
-		"./event-buffer": {
-			"types": "./dist/event-buffer.d.ts",
-			"import": "./dist/event-buffer.js",
-			"default": "./dist/event-buffer.js"
-		},
-		"./process": {
-			"types": "./dist/process.d.ts",
-			"import": "./dist/process.js",
-			"default": "./dist/process.js"
-		},
-		"./sidecar-client": {
-			"types": "./dist/sidecar-process.d.ts",
-			"import": "./dist/sidecar-process.js",
-			"default": "./dist/sidecar-process.js"
-		},
-		"./sidecar-errors": {
-			"types": "./dist/sidecar-errors.d.ts",
-			"import": "./dist/sidecar-errors.js",
-			"default": "./dist/sidecar-errors.js"
-		},
-		"./sidecar-process": {
-			"types": "./dist/sidecar-process.d.ts",
-			"import": "./dist/sidecar-process.js",
-			"default": "./dist/sidecar-process.js"
-		},
-		"./test-runtime": {
-			"types": "./dist/test-runtime.d.ts",
-			"import": "./dist/test-runtime.js",
-			"default": "./dist/test-runtime.js"
-		},
-		"./native-client": {
-			"types": "./dist/native-client.d.ts",
-			"import": "./dist/native-client.js",
-			"default": "./dist/native-client.js"
-		},
-		"./response-payloads": {
-			"types": "./dist/response-payloads.d.ts",
-			"import": "./dist/response-payloads.js",
-			"default": "./dist/response-payloads.js"
-		},
-		"./request-payloads": {
-			"types": "./dist/request-payloads.d.ts",
-			"import": "./dist/request-payloads.js",
-			"default": "./dist/request-payloads.js"
-		},
-		"./state": {
-			"types": "./dist/state.d.ts",
-			"import": "./dist/state.js",
-			"default": "./dist/state.js"
-		},
-		"./ownership": {
-			"types": "./dist/ownership.d.ts",
-			"import": "./dist/ownership.js",
-			"default": "./dist/ownership.js"
-		},
-		"./permissions": {
-			"types": "./dist/permissions.d.ts",
-			"import": "./dist/permissions.js",
-			"default": "./dist/permissions.js"
-		},
-		"./protocol-schema": {
-			"types": "./dist/protocol-schema.d.ts",
-			"import": "./dist/protocol-schema.js",
-			"default": "./dist/protocol-schema.js"
-		},
-		"./protocol-maps": {
-			"types": "./dist/protocol-maps.d.ts",
-			"import": "./dist/protocol-maps.js",
-			"default": "./dist/protocol-maps.js"
-		},
-		"./protocol-frames": {
-			"types": "./dist/protocol-frames.d.ts",
-			"import": "./dist/protocol-frames.js",
-			"default": "./dist/protocol-frames.js"
-		},
-		"./protocol-client": {
-			"types": "./dist/protocol-client.d.ts",
-			"import": "./dist/protocol-client.js",
-			"default": "./dist/protocol-client.js"
-		},
-		"./framing": {
-			"types": "./dist/framing.d.ts",
-			"import": "./dist/framing.js",
-			"default": "./dist/framing.js"
-		},
-		"./frame-stream": {
-			"types": "./dist/frame-stream.d.ts",
-			"import": "./dist/frame-stream.js",
-			"default": "./dist/frame-stream.js"
-		},
-		"./frame-rpc": {
-			"types": "./dist/frame-rpc.d.ts",
-			"import": "./dist/frame-rpc.js",
-			"default": "./dist/frame-rpc.js"
-		},
-		"./frame-payload-codec": {
-			"types": "./dist/frame-payload-codec.d.ts",
-			"import": "./dist/frame-payload-codec.js",
-			"default": "./dist/frame-payload-codec.js"
-		},
-		"./filesystem": {
-			"types": "./dist/filesystem.d.ts",
-			"import": "./dist/filesystem.js",
-			"default": "./dist/filesystem.js"
-		},
-		"./json": {
-			"types": "./dist/json.d.ts",
-			"import": "./dist/json.js",
-			"default": "./dist/json.js"
-		},
-		"./kernel-proxy": {
-			"types": "./dist/kernel-proxy.d.ts",
-			"import": "./dist/kernel-proxy.js",
-			"default": "./dist/kernel-proxy.js"
-		},
-		"./numbers": {
-			"types": "./dist/numbers.d.ts",
-			"import": "./dist/numbers.js",
-			"default": "./dist/numbers.js"
-		},
-		"./correlation": {
-			"types": "./dist/correlation.d.ts",
-			"import": "./dist/correlation.js",
-			"default": "./dist/correlation.js"
-		}
+		"./package.json": "./package.json"
 	},
 	"scripts": {
-		"build:protocol": "pnpm --dir ../build-tools build:protocol",
-		"build:vm-config": "cargo test -p secure-exec-vm-config --quiet",
-		"copy-commands": "node scripts/copy-wasm-commands.mjs",
-		"check-types": "pnpm run build:protocol && pnpm run build:vm-config && tsc --noEmit",
-		"build": "pnpm run build:protocol && pnpm run build:vm-config && tsc && pnpm run copy-commands",
-		"prepack": "node scripts/copy-wasm-commands.mjs --require",
-		"test": "vitest run"
+		"build": "tsc",
+		"check-types": "tsc --noEmit"
 	},
 	"dependencies": {
-		"@secure-exec/sidecar": "workspace:*",
-		"@rivetkit/bare-ts": "^0.6.2",
-		"zod": "^4.1.11"
+		"@rivet-dev/agentos-runtime-core": "link:../../../agentos/packages/runtime-core"
 	},
 	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"typescript": "^5.7.2",
-		"vitest": "^2.1.8"
+		"typescript": "^5.9.2"
 	}
 }
diff --git a/packages/core/scripts/copy-wasm-commands.mjs b/packages/core/scripts/copy-wasm-commands.mjs
deleted file mode 100644
index ce7e4b0cf..000000000
--- a/packages/core/scripts/copy-wasm-commands.mjs
+++ /dev/null
@@ -1,116 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Vendor the WASM coreutils/shell command binaries into `@secure-exec/core`'s
- * package directory so they ship inside the published tarball.
- *
- * The kernel needs a guest `sh` (plus coreutils) to spawn any process — without
- * these binaries `NodeRuntime.create()` cannot boot. The binaries are produced
- * by the in-repo Rust command build at
- * `registry/native/target/wasm32-wasip1/release/commands/`. That path only
- * exists in a developer checkout, so we copy the whole command set (symlinks
- * included, the way `bash -> sh` and the stub aliases are laid out) into
- * `packages/core/commands/`, which is listed in `files` and resolved at runtime
- * by `node-runtime.ts` for published installs.
- *
- * This mirrors how the sidecar binary ships via `@secure-exec/sidecar`: the
- * artifact is vendored into a published package and resolved from the installed
- * package at runtime, never from an in-repo build path.
- */
-
-import {
-	copyFileSync,
-	existsSync,
-	lstatSync,
-	mkdirSync,
-	readdirSync,
-	realpathSync,
-	rmSync,
-} from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const PACKAGE_ROOT = fileURLToPath(new URL("..", import.meta.url));
-const REPO_ROOT = fileURLToPath(new URL("../../..", import.meta.url));
-
-const SOURCE_DIR = path.join(
-	REPO_ROOT,
-	"registry/native/target/wasm32-wasip1/release/commands",
-);
-const DEST_DIR = path.join(PACKAGE_ROOT, "commands");
-
-function destIsPopulated() {
-	try {
-		return readdirSync(DEST_DIR).some((entry) => !entry.startsWith("."));
-	} catch {
-		return false;
-	}
-}
-
-function main() {
-	if (!existsSync(SOURCE_DIR)) {
-		// No in-repo build output. If `commands/` is already populated (a clean
-		// checkout that vendored earlier, or CI that dropped a prebuilt commands
-		// artifact straight into the package), keep it: it already ships.
-		if (destIsPopulated()) {
-			console.log(
-				`Using already-vendored commands at ${path.relative(REPO_ROOT, DEST_DIR)}; ` +
-					`in-repo build output ${path.relative(REPO_ROOT, SOURCE_DIR)} is absent.`,
-			);
-			return;
-		}
-		// Nothing to ship. Don't fail the plain TypeScript build over it — a
-		// developer who hasn't built the commands can still iterate, and runtime
-		// resolution falls back to the in-repo path when it later appears. The
-		// release/pack path guards this with `--require` so a published tarball is
-		// never built without the commands.
-		const message =
-			`WASM commands not found at ${SOURCE_DIR} and none vendored at ${DEST_DIR}. ` +
-			"Build them with `make -C registry/native wasm` (or drop a prebuilt " +
-			"commands artifact into the package) before packing so they ship in the tarball.";
-		if (process.argv.includes("--require")) {
-			console.error(`error: ${message}`);
-			process.exit(1);
-		}
-		console.warn(`warning: ${message} Skipping copy.`);
-		return;
-	}
-
-	rmSync(DEST_DIR, { recursive: true, force: true });
-	mkdirSync(DEST_DIR, { recursive: true });
-
-	// Copy every command as a real file, dereferencing the build's alias
-	// symlinks (bash -> sh, [ -> test, the `_stubs` aliases, dir/vdir -> ls,
-	// gunzip/zcat -> gzip). The command discovery at runtime
-	// (`discoverWasmCommandEntries`) keys each command off its filename and reads
-	// the resolved bytes, so a dereferenced copy is functionally identical to the
-	// symlink. Crucially, `npm pack` drops symlinks from the tarball, so shipping
-	// them as real files is what makes the full command set survive into a
-	// published install. The command tree is flat (no subdirectories), so a
-	// single-level walk covers it.
-	let copied = 0;
-	for (const entry of readdirSync(SOURCE_DIR)) {
-		if (entry.startsWith(".")) {
-			continue;
-		}
-		const sourcePath = path.join(SOURCE_DIR, entry);
-		const destPath = path.join(DEST_DIR, entry);
-		const stat = lstatSync(sourcePath);
-		// Resolve symlinks (and any chains) to the real file before copying so
-		// the destination is a standalone binary, not a dangling link.
-		const realSource = stat.isSymbolicLink()
-			? realpathSync(sourcePath)
-			: sourcePath;
-		if (!lstatSync(realSource).isFile()) {
-			continue;
-		}
-		copyFileSync(realSource, destPath);
-		copied += 1;
-	}
-
-	console.log(
-		`Copied ${copied} WASM command binaries to ${path.relative(REPO_ROOT, DEST_DIR)}`,
-	);
-}
-
-main();
diff --git a/packages/core/src/binary.ts b/packages/core/src/binary.ts
deleted file mode 100644
index 209bfbdec..000000000
--- a/packages/core/src/binary.ts
+++ /dev/null
@@ -1,34 +0,0 @@
-import { existsSync } from "node:fs";
-import { createRequire } from "node:module";
-
-interface SidecarBinaryModule {
-	getSidecarPath(): string;
-}
-
-/**
- * Resolves the published secure-exec sidecar binary for Node.js clients.
- */
-export function resolvePublishedSidecarBinary(): string {
-	const override = process.env.SECURE_EXEC_SIDECAR_BIN;
-	if (override) {
-		if (!existsSync(override)) {
-			throw new Error(
-				`SECURE_EXEC_SIDECAR_BIN is set to ${override} but the file does not exist`,
-			);
-		}
-		return override;
-	}
-
-	const require = createRequire(import.meta.url);
-	let mod: SidecarBinaryModule;
-	try {
-		mod = require("@secure-exec/sidecar") as SidecarBinaryModule;
-	} catch (error) {
-		throw new Error(
-			"failed to resolve the secure-exec sidecar binary: the @secure-exec/sidecar " +
-				"package is not installed. Install it, or set SECURE_EXEC_SIDECAR_BIN to a local " +
-				`secure-exec-sidecar binary. (${(error as Error).message})`,
-		);
-	}
-	return mod.getSidecarPath();
-}
diff --git a/packages/core/src/bytes.ts b/packages/core/src/bytes.ts
deleted file mode 100644
index 0981f4ee8..000000000
--- a/packages/core/src/bytes.ts
+++ /dev/null
@@ -1,10 +0,0 @@
-export function toExactArrayBuffer(value: Uint8Array): ArrayBuffer {
-	return value.buffer.slice(
-		value.byteOffset,
-		value.byteOffset + value.byteLength,
-	) as ArrayBuffer;
-}
-
-export function toExactUint8Array(value: Uint8Array): Uint8Array {
-	return Uint8Array.from(value);
-}
diff --git a/packages/core/src/callbacks.ts b/packages/core/src/callbacks.ts
deleted file mode 100644
index aabe91c24..000000000
--- a/packages/core/src/callbacks.ts
+++ /dev/null
@@ -1,166 +0,0 @@
-import {
-	fromGeneratedExtEnvelope,
-	toGeneratedExtEnvelope,
-} from "./ext.js";
-import type * as protocol from "./generated-protocol.js";
-import { parseJsonUtf8, stringifyJsonUtf8 } from "./json.js";
-import { bigIntToSafeNumber } from "./numbers.js";
-
-export interface CallbackExtEnvelope {
-	namespace: string;
-	payload: Uint8Array;
-}
-
-export type CallbackSidecarRequestPayload =
-	| {
-			type: "host_callback";
-			invocation_id: string;
-			callback_key: string;
-			input: unknown;
-			timeout_ms: number;
-	  }
-	| {
-			type: "js_bridge_call";
-			call_id: string;
-			mount_id: string;
-			operation: string;
-			args: unknown;
-	  }
-	| {
-			type: "ext";
-			envelope: CallbackExtEnvelope;
-	  };
-
-export type CallbackSidecarResponsePayload =
-	| {
-			type: "host_callback_result";
-			invocation_id: string;
-			result?: unknown;
-			error?: string;
-	  }
-	| {
-			type: "js_bridge_result";
-			call_id: string;
-			result?: unknown;
-			error?: string;
-	  }
-	| {
-			type: "ext_result";
-			envelope: CallbackExtEnvelope;
-	  };
-
-export type LiveSidecarRequestPayload = CallbackSidecarRequestPayload;
-export type LiveSidecarResponsePayload = CallbackSidecarResponsePayload;
-
-export function isMatchingSidecarResponsePayload(
-	request: CallbackSidecarRequestPayload,
-	response: CallbackSidecarResponsePayload,
-): boolean {
-	switch (request.type) {
-		case "host_callback":
-			return response.type === "host_callback_result";
-		case "js_bridge_call":
-			return response.type === "js_bridge_result";
-		case "ext":
-			return response.type === "ext_result";
-	}
-}
-
-export function errorSidecarResponsePayload(
-	request: CallbackSidecarRequestPayload,
-	error: unknown,
-): CallbackSidecarResponsePayload {
-	const message = error instanceof Error ? error.message : String(error);
-	switch (request.type) {
-		case "host_callback":
-			return {
-				type: "host_callback_result",
-				invocation_id: request.invocation_id,
-				error: message,
-			};
-		case "js_bridge_call":
-			return {
-				type: "js_bridge_result",
-				call_id: request.call_id,
-				error: message,
-			};
-		case "ext":
-			return {
-				type: "ext_result",
-				envelope: {
-					namespace: request.envelope.namespace,
-					payload: Buffer.from(message, "utf8"),
-				},
-			};
-	}
-}
-
-export function fromGeneratedSidecarRequestPayload(
-	payload: protocol.SidecarRequestPayload,
-): LiveSidecarRequestPayload {
-	switch (payload.tag) {
-		case "HostCallbackRequest":
-			return {
-				type: "host_callback",
-				invocation_id: payload.val.invocationId,
-				callback_key: payload.val.callbackKey,
-				input: parseJsonUtf8(payload.val.input, "host callback input"),
-				timeout_ms: bigIntToSafeNumber(
-					payload.val.timeoutMs,
-					"host callback timeout",
-				),
-			};
-		case "JsBridgeCallRequest":
-			return {
-				type: "js_bridge_call",
-				call_id: payload.val.callId,
-				mount_id: payload.val.mountId,
-				operation: payload.val.operation,
-				args: parseJsonUtf8(payload.val.args, "js bridge call args"),
-			};
-		case "ExtEnvelope":
-			return {
-				type: "ext",
-				envelope: fromGeneratedExtEnvelope(payload.val),
-			};
-	}
-}
-
-export function toGeneratedSidecarResponsePayload(
-	payload: LiveSidecarResponsePayload,
-): protocol.SidecarResponsePayload {
-	switch (payload.type) {
-		case "host_callback_result":
-			return {
-				tag: "HostCallbackResultResponse",
-				val: {
-					invocationId: payload.invocation_id,
-					result:
-						payload.result === undefined
-							? null
-							: stringifyJsonUtf8(
-									payload.result,
-									"host_callback_result.result",
-								),
-					error: payload.error ?? null,
-				},
-			};
-		case "js_bridge_result":
-			return {
-				tag: "JsBridgeResultResponse",
-				val: {
-					callId: payload.call_id,
-					result:
-						payload.result === undefined
-							? null
-							: stringifyJsonUtf8(payload.result, "js_bridge_result.result"),
-					error: payload.error ?? null,
-				},
-			};
-		case "ext_result":
-			return {
-				tag: "ExtEnvelope",
-				val: toGeneratedExtEnvelope(payload.envelope),
-			};
-	}
-}
diff --git a/packages/core/src/cargo.ts b/packages/core/src/cargo.ts
deleted file mode 100644
index 450ceb026..000000000
--- a/packages/core/src/cargo.ts
+++ /dev/null
@@ -1,173 +0,0 @@
-import { accessSync, constants as fsConstants, existsSync, readFileSync, readdirSync, statSync } from "node:fs";
-import { homedir } from "node:os";
-import path from "node:path";
-
-const CARGO_BINARY_NAME = process.platform === "win32" ? "cargo.exe" : "cargo";
-
-function hasPathSeparator(candidate: string): boolean {
-	return candidate.includes("/") || candidate.includes("\\");
-}
-
-function isExecutableFile(candidate: string): boolean {
-	try {
-		if (!statSync(candidate).isFile()) {
-			return false;
-		}
-		accessSync(candidate, fsConstants.X_OK);
-		return true;
-	} catch {
-		return false;
-	}
-}
-
-function resolveExecutableOnPath(binaryName: string): string | null {
-	const pathEntries = (process.env.PATH ?? "")
-		.split(path.delimiter)
-		.map((entry) => entry.trim())
-		.filter(Boolean);
-
-	for (const entry of pathEntries) {
-		const candidate = path.join(entry, binaryName);
-		if (isExecutableFile(candidate)) {
-			return candidate;
-		}
-	}
-
-	return null;
-}
-
-function resolveExecutableCandidate(candidate: string): string | null {
-	if (hasPathSeparator(candidate)) {
-		return isExecutableFile(candidate) ? candidate : null;
-	}
-
-	return resolveExecutableOnPath(candidate);
-}
-
-type ToolchainCargo = {
-	cargoPath: string;
-	rustupHome: string;
-};
-
-function getToolchainCargoFromRustupHome(rustupHome: string): ToolchainCargo | null {
-	const toolchainsDir = path.join(rustupHome, "toolchains");
-	if (!existsSync(toolchainsDir)) {
-		return null;
-	}
-
-	const settingsPath = path.join(rustupHome, "settings.toml");
-	const orderedToolchains: string[] = [];
-	if (existsSync(settingsPath)) {
-		const defaultToolchain = readFileSync(settingsPath, "utf8")
-			.match(/^default_toolchain\s*=\s*"([^"]+)"/m)?.[1]
-			?.trim();
-		if (defaultToolchain) {
-			orderedToolchains.push(defaultToolchain);
-		}
-	}
-
-	for (const entry of readdirSync(toolchainsDir)) {
-		if (!orderedToolchains.includes(entry)) {
-			orderedToolchains.push(entry);
-		}
-	}
-
-	for (const toolchain of orderedToolchains) {
-		const cargoPath = path.join(
-			toolchainsDir,
-			toolchain,
-			"bin",
-			CARGO_BINARY_NAME,
-		);
-		if (existsSync(cargoPath)) {
-			return { cargoPath, rustupHome };
-		}
-	}
-
-	return null;
-}
-
-function inferRustupHomesFromPath(): string[] {
-	const rustupHomes = new Set<string>();
-	const pathEntries = (process.env.PATH ?? "")
-		.split(path.delimiter)
-		.map((entry) => entry.trim())
-		.filter(Boolean);
-
-	for (const entry of pathEntries) {
-		if (path.basename(entry) !== "bin") {
-			continue;
-		}
-
-		const parentDir = path.dirname(entry);
-		if (existsSync(path.join(parentDir, "toolchains"))) {
-			rustupHomes.add(parentDir);
-		}
-
-		const siblingRoot = path.dirname(parentDir);
-		try {
-			for (const sibling of readdirSync(siblingRoot, { withFileTypes: true })) {
-				if (!sibling.isDirectory()) {
-					continue;
-				}
-				const siblingPath = path.join(siblingRoot, sibling.name);
-				if (existsSync(path.join(siblingPath, "toolchains"))) {
-					rustupHomes.add(siblingPath);
-				}
-			}
-		} catch {}
-	}
-
-	return [...rustupHomes];
-}
-
-function ensureToolchainEnvironment(toolchainCargo: ToolchainCargo): void {
-	const toolchainBin = path.dirname(toolchainCargo.cargoPath);
-	const currentPathEntries = (process.env.PATH ?? "")
-		.split(path.delimiter)
-		.filter(Boolean);
-	if (!currentPathEntries.includes(toolchainBin)) {
-		process.env.PATH = [toolchainBin, ...currentPathEntries].join(path.delimiter);
-	}
-	if (!process.env.RUSTUP_HOME) {
-		process.env.RUSTUP_HOME = toolchainCargo.rustupHome;
-	}
-	const toolchainName = path.basename(path.dirname(toolchainBin));
-	if (!process.env.RUSTUP_TOOLCHAIN) {
-		process.env.RUSTUP_TOOLCHAIN = toolchainName;
-	}
-}
-
-export function findCargoBinary(): string | null {
-	const explicitCargo = process.env.CARGO?.trim();
-	const rustupHomes = [
-		process.env.RUSTUP_HOME?.trim(),
-		path.join(homedir(), ".rustup"),
-		...inferRustupHomesFromPath(),
-	].filter((candidate): candidate is string => Boolean(candidate));
-	const toolchainCargoCandidates = rustupHomes
-		.map((rustupHome) => getToolchainCargoFromRustupHome(rustupHome))
-		.filter((candidate): candidate is ToolchainCargo => Boolean(candidate));
-	if (toolchainCargoCandidates.length > 0) {
-		ensureToolchainEnvironment(toolchainCargoCandidates[0]);
-	}
-	const candidates = [
-		explicitCargo,
-		...toolchainCargoCandidates.map((candidate) => candidate.cargoPath),
-		path.join(homedir(), ".cargo", "bin", CARGO_BINARY_NAME),
-		CARGO_BINARY_NAME,
-	].filter((candidate): candidate is string => Boolean(candidate));
-
-	for (const candidate of candidates) {
-		const resolved = resolveExecutableCandidate(candidate);
-		if (resolved) {
-			return resolved;
-		}
-	}
-
-	return null;
-}
-
-export function resolveCargoBinary(): string {
-	return findCargoBinary() ?? CARGO_BINARY_NAME;
-}
diff --git a/packages/core/src/correlation.ts b/packages/core/src/correlation.ts
deleted file mode 100644
index 13f8a4ee4..000000000
--- a/packages/core/src/correlation.ts
+++ /dev/null
@@ -1,67 +0,0 @@
-interface PendingResponse<TResponse> {
-	resolve: (frame: TResponse) => void;
-	reject: (error: Error) => void;
-	timer: ReturnType<typeof setTimeout>;
-}
-
-export class PendingResponseRegistry<TResponse> {
-	private readonly pending = new Map<number, PendingResponse<TResponse>>();
-
-	waitForResponse(
-		requestId: number,
-		options: {
-			timeoutMs: number;
-			timeoutMessage: () => string;
-		},
-	): Promise<TResponse> {
-		if (this.pending.has(requestId)) {
-			throw new Error(
-				`response waiter already registered for request ${requestId}`,
-			);
-		}
-		return new Promise<TResponse>((resolve, reject) => {
-			const entry = {
-				resolve: (frame: TResponse) => {
-					clearTimeout(entry.timer);
-					this.pending.delete(requestId);
-					resolve(frame);
-				},
-				reject: (error: Error) => {
-					clearTimeout(entry.timer);
-					this.pending.delete(requestId);
-					reject(error);
-				},
-				timer: setTimeout(() => {
-					this.pending.delete(requestId);
-					reject(new Error(options.timeoutMessage()));
-				}, options.timeoutMs),
-			};
-			this.pending.set(requestId, entry);
-		});
-	}
-
-	resolve(requestId: number, frame: TResponse): boolean {
-		const pending = this.pending.get(requestId);
-		if (!pending) {
-			return false;
-		}
-		pending.resolve(frame);
-		return true;
-	}
-
-	reject(requestId: number, error: Error): boolean {
-		const pending = this.pending.get(requestId);
-		if (!pending) {
-			return false;
-		}
-		pending.reject(error);
-		return true;
-	}
-
-	rejectAll(error: Error): void {
-		for (const pending of this.pending.values()) {
-			pending.reject(error);
-		}
-		this.pending.clear();
-	}
-}
diff --git a/packages/core/src/descriptors.ts b/packages/core/src/descriptors.ts
deleted file mode 100644
index 8eda00d92..000000000
--- a/packages/core/src/descriptors.ts
+++ /dev/null
@@ -1,178 +0,0 @@
-import type * as protocol from "./generated-protocol.js";
-import { stringifyJsonUtf8 } from "./json.js";
-
-export type LiveSidecarPlacement =
-	| { kind: "shared"; pool?: string | null }
-	| { kind: "explicit"; sidecar_id: string };
-
-export type MountConfigJsonPrimitive = string | number | boolean | null;
-export type MountConfigJsonValue =
-	| MountConfigJsonPrimitive
-	| MountConfigJsonObject
-	| MountConfigJsonValue[];
-
-export interface MountConfigJsonObject {
-	[key: string]: MountConfigJsonValue;
-}
-
-export interface NativeMountPluginDescriptor<
-	TConfig extends MountConfigJsonObject = MountConfigJsonObject,
-> {
-	id: string;
-	config?: TConfig;
-}
-
-export interface S3MountCredentialsConfig {
-	accessKeyId: string;
-	secretAccessKey: string;
-}
-
-export interface ObjectS3MountConfig {
-	bucket: string;
-	prefix?: string;
-	region?: string;
-	credentials?: S3MountCredentialsConfig;
-	endpoint?: string;
-	uid?: number;
-	gid?: number;
-	fileMode?: number;
-	dirMode?: number;
-}
-
-export interface ChunkedS3MountConfig {
-	bucket: string;
-	prefix?: string;
-	region?: string;
-	credentials?: S3MountCredentialsConfig;
-	endpoint?: string;
-	metadataBackend?: "sqlite" | "local" | "callback";
-	metadataPath?: string;
-	mountId?: string;
-	chunkSize?: number;
-	inlineThreshold?: number;
-	uid?: number;
-	gid?: number;
-	fileMode?: number;
-	dirMode?: number;
-	metadataCacheEntries?: number;
-}
-
-export interface ChunkedLocalMountConfig {
-	metadataPath: string;
-	blockRoot: string;
-	chunkSize?: number;
-	inlineThreshold?: number;
-	uid?: number;
-	gid?: number;
-	fileMode?: number;
-	dirMode?: number;
-	metadataCacheEntries?: number;
-}
-
-export function objectS3MountPlugin(
-	config: ObjectS3MountConfig,
-): NativeMountPluginDescriptor {
-	return {
-		id: "object_s3",
-		config: config as unknown as MountConfigJsonObject,
-	};
-}
-
-export function chunkedS3MountPlugin(
-	config: ChunkedS3MountConfig,
-): NativeMountPluginDescriptor {
-	return {
-		id: "chunked_s3",
-		config: config as unknown as MountConfigJsonObject,
-	};
-}
-
-export function chunkedLocalMountPlugin(
-	config: ChunkedLocalMountConfig,
-): NativeMountPluginDescriptor {
-	return {
-		id: "chunked_local",
-		config: config as unknown as MountConfigJsonObject,
-	};
-}
-
-export interface LiveMountDescriptor {
-	guest_path: string;
-	read_only: boolean;
-	plugin: NativeMountPluginDescriptor;
-}
-
-export interface LiveSoftwareDescriptor {
-	package_name: string;
-	root: string;
-}
-
-export interface LiveProjectedModuleDescriptor {
-	package_name: string;
-	entrypoint: string;
-}
-
-export interface LivePackageDescriptor {
-	dir?: string;
-	tar?: string;
-}
-
-export function toGeneratedSidecarPlacement(
-	placement: LiveSidecarPlacement,
-): protocol.SidecarPlacement {
-	switch (placement.kind) {
-		case "shared":
-			return {
-				tag: "SidecarPlacementShared",
-				val: { pool: placement.pool ?? null },
-			};
-		case "explicit":
-			return {
-				tag: "SidecarPlacementExplicit",
-				val: { sidecarId: placement.sidecar_id },
-			};
-	}
-}
-
-export function toGeneratedMountDescriptor(
-	descriptor: LiveMountDescriptor,
-): protocol.MountDescriptor {
-	return {
-		guestPath: descriptor.guest_path,
-		readOnly: descriptor.read_only,
-		plugin: {
-			id: descriptor.plugin.id,
-			config: stringifyJsonUtf8(
-				descriptor.plugin.config ?? {},
-				"mount plugin config",
-			),
-		},
-	};
-}
-
-export function toGeneratedSoftwareDescriptor(
-	descriptor: LiveSoftwareDescriptor,
-): protocol.SoftwareDescriptor {
-	return {
-		packageName: descriptor.package_name,
-		root: descriptor.root,
-	};
-}
-
-export function toGeneratedProjectedModuleDescriptor(
-	descriptor: LiveProjectedModuleDescriptor,
-): protocol.ProjectedModuleDescriptor {
-	return {
-		packageName: descriptor.package_name,
-		entrypoint: descriptor.entrypoint,
-	};
-}
-
-export function toGeneratedPackageDescriptor(
-	descriptor: LivePackageDescriptor,
-): protocol.PackageDescriptor {
-	return {
-		dir: descriptor.dir ?? null,
-		tar: descriptor.tar ?? null,
-	};
-}
diff --git a/packages/core/src/event-buffer.ts b/packages/core/src/event-buffer.ts
deleted file mode 100644
index 4e2cb9a6b..000000000
--- a/packages/core/src/event-buffer.ts
+++ /dev/null
@@ -1,488 +0,0 @@
-import {
-	fromGeneratedExtEnvelope,
-	type LiveExtEnvelope,
-} from "./ext.js";
-import type * as protocol from "./generated-protocol.js";
-import {
-	ownershipMatchesSelector,
-	ownershipSelectorKey,
-	type LiveOwnershipScope,
-} from "./ownership.js";
-import {
-	fromGeneratedStreamChannel,
-	fromGeneratedVmLifecycleState,
-} from "./protocol-maps.js";
-
-export const ANY_BUFFERED_EVENT_KEY = "*";
-
-export type { LiveOwnershipScope } from "./ownership.js";
-
-export type LiveSidecarEventPayload =
-	| {
-			type: "vm_lifecycle";
-			state: "creating" | "ready" | "disposing" | "disposed" | "failed";
-	  }
-	| {
-			type: "process_output";
-			process_id: string;
-			channel: "stdout" | "stderr";
-			chunk: Uint8Array;
-	  }
-	| {
-			type: "process_exited";
-			process_id: string;
-			exit_code: number;
-	  }
-	| {
-			type: "structured";
-			name: string;
-			detail: Record<string, string>;
-	  }
-	| {
-			type: "ext";
-			envelope: LiveExtEnvelope;
-	  };
-
-export interface LiveSidecarEventFrame {
-	ownership: LiveOwnershipScope;
-	payload: LiveSidecarEventPayload;
-}
-
-export type LiveSidecarEventSelector =
-	| {
-			any: true;
-	  }
-	| {
-			type: "vm_lifecycle";
-			ownership?: LiveOwnershipScope;
-			state?: Extract<
-				LiveSidecarEventPayload,
-				{ type: "vm_lifecycle" }
-			>["state"];
-	  }
-	| {
-			type: "process_output";
-			ownership?: LiveOwnershipScope;
-			processId?: string;
-			channel?: Extract<
-				LiveSidecarEventPayload,
-				{ type: "process_output" }
-			>["channel"];
-	  }
-	| {
-			type: "process_exited";
-			ownership?: LiveOwnershipScope;
-			processId?: string;
-	  }
-	| {
-			type: "structured";
-			ownership?: LiveOwnershipScope;
-			name?: string;
-			detail?: Record<string, string>;
-	  };
-
-export type LiveSidecarBufferedEventRecord<
-	TEvent extends LiveSidecarEventFrame,
-> = {
-	event: TEvent;
-	keys: readonly string[];
-};
-
-export type LiveSidecarEventWaitMatcher<TEvent extends LiveSidecarEventFrame> =
-	{
-		matches: (event: TEvent) => boolean;
-		bufferKey: string | null;
-	};
-
-export class SidecarEventBufferOverflow extends Error {
-	readonly capacity: number;
-	readonly bufferedEvents: number;
-	readonly eventType: LiveSidecarEventPayload["type"];
-
-	constructor(options: {
-		capacity: number;
-		bufferedEvents: number;
-		eventType: LiveSidecarEventPayload["type"];
-	}) {
-		super(
-			`sidecar event buffer overflow after ${options.bufferedEvents} queued events (capacity ${options.capacity}) while buffering ${options.eventType}`,
-		);
-		this.name = "SidecarEventBufferOverflow";
-		this.capacity = options.capacity;
-		this.bufferedEvents = options.bufferedEvents;
-		this.eventType = options.eventType;
-	}
-}
-
-export class SidecarEventBuffer<TEvent extends LiveSidecarEventFrame> {
-	private readonly bufferedEvents = new Map<
-		number,
-		LiveSidecarBufferedEventRecord<TEvent>
-	>();
-	private readonly bufferedEventQueues = new Map<string, Set<number>>();
-	private nextBufferedEventId = 1;
-
-	constructor(private readonly capacity: number) {}
-
-	get size(): number {
-		return this.bufferedEvents.size;
-	}
-
-	buffer(event: TEvent): SidecarEventBufferOverflow | null {
-		if (this.bufferedEvents.size >= this.capacity) {
-			return new SidecarEventBufferOverflow({
-				capacity: this.capacity,
-				bufferedEvents: this.bufferedEvents.size,
-				eventType: event.payload.type,
-			});
-		}
-		const eventId = this.nextBufferedEventId++;
-		const keys = sidecarEventBufferKeys(event);
-		this.bufferedEvents.set(eventId, {
-			event,
-			keys,
-		});
-		for (const key of keys) {
-			const queue = this.bufferedEventQueues.get(key);
-			if (queue) {
-				queue.add(eventId);
-				continue;
-			}
-			this.bufferedEventQueues.set(key, new Set([eventId]));
-		}
-		return null;
-	}
-
-	take(matcher: LiveSidecarEventWaitMatcher<TEvent>): TEvent | null {
-		if (matcher.bufferKey !== null) {
-			return this.takeFromKey(matcher.bufferKey);
-		}
-		const queue = this.bufferedEventQueues.get(ANY_BUFFERED_EVENT_KEY);
-		if (!queue) {
-			return null;
-		}
-		for (const eventId of queue) {
-			const record = this.bufferedEvents.get(eventId);
-			if (!record) {
-				continue;
-			}
-			if (!matcher.matches(record.event)) {
-				continue;
-			}
-			return this.remove(eventId);
-		}
-		return null;
-	}
-
-	private takeFromKey(key: string): TEvent | null {
-		const queue = this.bufferedEventQueues.get(key);
-		if (!queue) {
-			return null;
-		}
-		for (const eventId of queue) {
-			const record = this.bufferedEvents.get(eventId);
-			if (!record) {
-				queue.delete(eventId);
-				continue;
-			}
-			return this.remove(eventId);
-		}
-		return null;
-	}
-
-	private remove(eventId: number): TEvent | null {
-		const record = this.bufferedEvents.get(eventId);
-		if (!record) {
-			return null;
-		}
-		this.bufferedEvents.delete(eventId);
-		for (const key of record.keys) {
-			const queue = this.bufferedEventQueues.get(key);
-			if (!queue) {
-				continue;
-			}
-			queue.delete(eventId);
-			if (queue.size === 0) {
-				this.bufferedEventQueues.delete(key);
-			}
-		}
-		return record.event;
-	}
-}
-
-function buildBufferKey(
-	type: LiveSidecarEventPayload["type"],
-	options?: {
-		ownership?: LiveOwnershipScope;
-		state?: string;
-		processId?: string;
-		channel?: string;
-		name?: string;
-	},
-): string {
-	const parts = [`type:${type}`];
-	if (options?.ownership) {
-		parts.push(`ownership:${ownershipSelectorKey(options.ownership)}`);
-	}
-	if (options?.state) {
-		parts.push(`state:${options.state}`);
-	}
-	if (options?.processId) {
-		parts.push(`process:${options.processId}`);
-	}
-	if (options?.channel) {
-		parts.push(`channel:${options.channel}`);
-	}
-	if (options?.name) {
-		parts.push(`name:${options.name}`);
-	}
-	return parts.join("|");
-}
-
-export function sidecarSelectorMatchesEvent<TEvent extends LiveSidecarEventFrame>(
-	selector: LiveSidecarEventSelector,
-	event: TEvent,
-): boolean {
-	if ("any" in selector) {
-		return true;
-	}
-	if (event.payload.type !== selector.type) {
-		return false;
-	}
-	if (!ownershipMatchesSelector(selector.ownership, event.ownership)) {
-		return false;
-	}
-	switch (selector.type) {
-		case "vm_lifecycle": {
-			const payload = event.payload as Extract<
-				LiveSidecarEventPayload,
-				{ type: "vm_lifecycle" }
-			>;
-			return selector.state === undefined || payload.state === selector.state;
-		}
-		case "process_output": {
-			const payload = event.payload as Extract<
-				LiveSidecarEventPayload,
-				{ type: "process_output" }
-			>;
-			return (
-				(selector.processId === undefined ||
-					payload.process_id === selector.processId) &&
-				(selector.channel === undefined || payload.channel === selector.channel)
-			);
-		}
-		case "process_exited": {
-			const payload = event.payload as Extract<
-				LiveSidecarEventPayload,
-				{ type: "process_exited" }
-			>;
-			return (
-				selector.processId === undefined ||
-				payload.process_id === selector.processId
-			);
-		}
-		case "structured": {
-			const payload = event.payload as Extract<
-				LiveSidecarEventPayload,
-				{ type: "structured" }
-			>;
-			if (selector.name !== undefined && payload.name !== selector.name) {
-				return false;
-			}
-			if (!selector.detail) {
-				return true;
-			}
-			for (const [key, value] of Object.entries(selector.detail)) {
-				if (payload.detail[key] !== value) {
-					return false;
-				}
-			}
-			return true;
-		}
-	}
-}
-
-export function sidecarSelectorBufferKey(
-	selector: LiveSidecarEventSelector,
-): string | null {
-	if ("any" in selector) {
-		return ANY_BUFFERED_EVENT_KEY;
-	}
-	switch (selector.type) {
-		case "vm_lifecycle":
-			return buildBufferKey(selector.type, {
-				ownership: selector.ownership,
-				state: selector.state,
-			});
-		case "process_output":
-			return buildBufferKey(selector.type, {
-				ownership: selector.ownership,
-				processId: selector.processId,
-				channel: selector.channel,
-			});
-		case "process_exited":
-			return buildBufferKey(selector.type, {
-				ownership: selector.ownership,
-				processId: selector.processId,
-			});
-		case "structured":
-			if (selector.detail) {
-				return null;
-			}
-			return buildBufferKey(selector.type, {
-				ownership: selector.ownership,
-				name: selector.name,
-			});
-	}
-}
-
-export function normalizeSidecarEventMatcher<
-	TEvent extends LiveSidecarEventFrame,
->(
-	selector: LiveSidecarEventSelector | ((event: TEvent) => boolean),
-): LiveSidecarEventWaitMatcher<TEvent> {
-	if (typeof selector === "function") {
-		return {
-			matches: selector,
-			bufferKey: null,
-		};
-	}
-	return {
-		matches: (event) => sidecarSelectorMatchesEvent(selector, event),
-		bufferKey: sidecarSelectorBufferKey(selector),
-	};
-}
-
-export function fromGeneratedEventPayload(
-	payload: protocol.EventPayload,
-): LiveSidecarEventPayload {
-	switch (payload.tag) {
-		case "VmLifecycleEvent":
-			return {
-				type: "vm_lifecycle",
-				state: fromGeneratedVmLifecycleState(payload.val.state),
-			};
-		case "ProcessOutputEvent":
-			return {
-				type: "process_output",
-				process_id: payload.val.processId,
-				channel: fromGeneratedStreamChannel(payload.val.channel),
-				chunk: Buffer.from(payload.val.chunk),
-			};
-		case "ProcessExitedEvent":
-			return {
-				type: "process_exited",
-				process_id: payload.val.processId,
-				exit_code: payload.val.exitCode,
-			};
-		case "StructuredEvent":
-			return {
-				type: "structured",
-				name: payload.val.name,
-				detail: Object.fromEntries(payload.val.detail),
-			};
-		case "ExtEnvelope":
-			return {
-				type: "ext",
-				envelope: fromGeneratedExtEnvelope(payload.val),
-		};
-	}
-}
-
-export function sidecarEventWaitAbortError(reason: unknown): Error {
-	return reason instanceof Error
-		? reason
-		: new Error(reason ? String(reason) : "sidecar event wait aborted");
-}
-
-export function sidecarEventBufferKeys<TEvent extends LiveSidecarEventFrame>(
-	event: TEvent,
-): string[] {
-	const owner = event.ownership;
-	const keys = new Set<string>([
-		ANY_BUFFERED_EVENT_KEY,
-		buildBufferKey(event.payload.type),
-		buildBufferKey(event.payload.type, { ownership: owner }),
-	]);
-	switch (event.payload.type) {
-		case "vm_lifecycle":
-			keys.add(
-				buildBufferKey(event.payload.type, {
-					state: event.payload.state,
-				}),
-			);
-			keys.add(
-				buildBufferKey(event.payload.type, {
-					ownership: owner,
-					state: event.payload.state,
-				}),
-			);
-			break;
-		case "process_output":
-			keys.add(
-				buildBufferKey(event.payload.type, {
-					processId: event.payload.process_id,
-				}),
-			);
-			keys.add(
-				buildBufferKey(event.payload.type, {
-					channel: event.payload.channel,
-				}),
-			);
-			keys.add(
-				buildBufferKey(event.payload.type, {
-					processId: event.payload.process_id,
-					channel: event.payload.channel,
-				}),
-			);
-			keys.add(
-				buildBufferKey(event.payload.type, {
-					ownership: owner,
-					processId: event.payload.process_id,
-				}),
-			);
-			keys.add(
-				buildBufferKey(event.payload.type, {
-					ownership: owner,
-					channel: event.payload.channel,
-				}),
-			);
-			keys.add(
-				buildBufferKey(event.payload.type, {
-					ownership: owner,
-					processId: event.payload.process_id,
-					channel: event.payload.channel,
-				}),
-			);
-			break;
-		case "process_exited":
-			keys.add(
-				buildBufferKey(event.payload.type, {
-					processId: event.payload.process_id,
-				}),
-			);
-			keys.add(
-				buildBufferKey(event.payload.type, {
-					ownership: owner,
-					processId: event.payload.process_id,
-				}),
-			);
-			break;
-		case "structured":
-			keys.add(
-				buildBufferKey(event.payload.type, {
-					name: event.payload.name,
-				}),
-			);
-			keys.add(
-				buildBufferKey(event.payload.type, {
-					ownership: owner,
-					name: event.payload.name,
-				}),
-			);
-			break;
-		case "ext":
-			break;
-	}
-	return [...keys];
-}
diff --git a/packages/core/src/ext.ts b/packages/core/src/ext.ts
deleted file mode 100644
index 8f47832d3..000000000
--- a/packages/core/src/ext.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-import { toExactArrayBuffer } from "./bytes.js";
-import type * as sidecarProtocol from "./generated-protocol.js";
-
-export interface LiveExtEnvelope {
-	namespace: string;
-	payload: Uint8Array;
-}
-
-export function toGeneratedExtEnvelope(
-	envelope: LiveExtEnvelope,
-): sidecarProtocol.ExtEnvelope {
-	return {
-		namespace: envelope.namespace,
-		payload: toExactArrayBuffer(envelope.payload),
-	};
-}
-
-export function fromGeneratedExtEnvelope(
-	envelope: sidecarProtocol.ExtEnvelope,
-): LiveExtEnvelope {
-	return {
-		namespace: envelope.namespace,
-		payload: Buffer.from(envelope.payload),
-	};
-}
diff --git a/packages/core/src/filesystem.ts b/packages/core/src/filesystem.ts
deleted file mode 100644
index 708a85243..000000000
--- a/packages/core/src/filesystem.ts
+++ /dev/null
@@ -1,141 +0,0 @@
-import * as protocol from "./generated-protocol.js";
-import {
-	fromGeneratedRootFilesystemEntryEncoding,
-	fromGeneratedRootFilesystemEntryKind,
-	toGeneratedRootFilesystemEntryEncoding,
-	toGeneratedRootFilesystemEntryKind,
-	toGeneratedRootFilesystemMode,
-	type LiveRootFilesystemEntryEncoding,
-} from "./protocol-maps.js";
-
-export type { LiveRootFilesystemEntryEncoding } from "./protocol-maps.js";
-
-export type GuestFilesystemContentEncoding = "utf8" | "base64";
-
-export interface GuestFilesystemContentResult {
-	path: string;
-	content?: string;
-	encoding?: GuestFilesystemContentEncoding;
-}
-
-export type LiveRootFilesystemEntry = {
-	path: string;
-	kind: "file" | "directory" | "symlink";
-	mode?: number;
-	uid?: number;
-	gid?: number;
-	content?: string;
-	encoding?: LiveRootFilesystemEntryEncoding;
-	target?: string;
-	executable?: boolean;
-};
-
-export type LiveRootFilesystemLowerDescriptor =
-	| {
-			kind: "snapshot";
-			entries: LiveRootFilesystemEntry[];
-	  }
-	| {
-			kind: "bundled_base_filesystem";
-	  };
-
-export type LiveRootFilesystemDescriptor = {
-	mode?: "ephemeral" | "read_only";
-	disable_default_base_layer?: boolean;
-	lowers?: LiveRootFilesystemLowerDescriptor[];
-	bootstrap_entries?: LiveRootFilesystemEntry[];
-};
-
-export function encodeGuestFilesystemContent(content: string | Uint8Array): {
-	content: string;
-	encoding?: GuestFilesystemContentEncoding;
-} {
-	if (typeof content === "string") {
-		return { content };
-	}
-
-	return {
-		content: Buffer.from(content).toString("base64"),
-		encoding: "base64",
-	};
-}
-
-export function decodeGuestFilesystemContent(
-	response: GuestFilesystemContentResult,
-): Uint8Array {
-	if (response.content === undefined) {
-		throw new Error(`sidecar returned no file content for ${response.path}`);
-	}
-
-	if (response.encoding === "base64") {
-		return Buffer.from(response.content, "base64");
-	}
-
-	return Buffer.from(response.content, "utf8");
-}
-
-export function toGeneratedRootFilesystemDescriptor(
-	descriptor: LiveRootFilesystemDescriptor,
-): protocol.RootFilesystemDescriptor {
-	return {
-		mode: toGeneratedRootFilesystemMode(descriptor.mode ?? "ephemeral"),
-		disableDefaultBaseLayer: descriptor.disable_default_base_layer ?? false,
-		lowers: (descriptor.lowers ?? []).map(toGeneratedRootFilesystemLower),
-		bootstrapEntries: (descriptor.bootstrap_entries ?? []).map(
-			toGeneratedRootFilesystemEntry,
-		),
-	};
-}
-
-export function toGeneratedRootFilesystemLower(
-	lower: LiveRootFilesystemLowerDescriptor,
-): protocol.RootFilesystemLowerDescriptor {
-	switch (lower.kind) {
-		case "snapshot":
-			return {
-				tag: "SnapshotRootFilesystemLower",
-				val: {
-					entries: (lower.entries ?? []).map(toGeneratedRootFilesystemEntry),
-				},
-			};
-		case "bundled_base_filesystem":
-			return { tag: "BundledBaseFilesystemLower", val: null };
-	}
-}
-
-export function toGeneratedRootFilesystemEntry(
-	entry: LiveRootFilesystemEntry,
-): protocol.RootFilesystemEntry {
-	return {
-		path: entry.path,
-		kind: toGeneratedRootFilesystemEntryKind(entry.kind),
-		mode: entry.mode ?? null,
-		uid: entry.uid ?? null,
-		gid: entry.gid ?? null,
-		content: entry.content ?? null,
-		encoding:
-			entry.encoding === undefined
-				? null
-				: toGeneratedRootFilesystemEntryEncoding(entry.encoding),
-		target: entry.target ?? null,
-		executable: entry.executable ?? false,
-	};
-}
-
-export function fromGeneratedRootFilesystemEntry(
-	entry: protocol.RootFilesystemEntry,
-): LiveRootFilesystemEntry {
-	return {
-		path: entry.path,
-		kind: fromGeneratedRootFilesystemEntryKind(entry.kind),
-		...(entry.mode !== null ? { mode: entry.mode } : {}),
-		...(entry.uid !== null ? { uid: entry.uid } : {}),
-		...(entry.gid !== null ? { gid: entry.gid } : {}),
-		...(entry.content !== null ? { content: entry.content } : {}),
-		...(entry.encoding !== null
-			? { encoding: fromGeneratedRootFilesystemEntryEncoding(entry.encoding) }
-			: {}),
-		...(entry.target !== null ? { target: entry.target } : {}),
-		executable: entry.executable,
-	};
-}
diff --git a/packages/core/src/frame-payload-codec.ts b/packages/core/src/frame-payload-codec.ts
deleted file mode 100644
index 0f5c0c0b1..000000000
--- a/packages/core/src/frame-payload-codec.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-export type TransportPayloadCodec = "bare" | "json";
-
-export function encodeJsonFramePayload(frame: unknown): Uint8Array {
-	// BARE `data` fields are Uint8Array; JSON.stringify renders those as objects, so encode them
-	// as number arrays to match serde_json's Vec<u8> representation on the Rust side.
-	return new TextEncoder().encode(
-		JSON.stringify(frame, (_key, value) =>
-			value instanceof Uint8Array ? Array.from(value) : value,
-		),
-	);
-}
-
-export function decodeJsonFramePayload<
-	TFrame extends { payload?: { type?: string; chunk?: unknown } },
->(payload: Uint8Array): TFrame {
-	const frame = JSON.parse(new TextDecoder().decode(payload)) as TFrame;
-	const decodedPayload = frame.payload;
-	if (
-		decodedPayload?.type === "process_output" &&
-		Array.isArray(decodedPayload.chunk)
-	) {
-		decodedPayload.chunk = Uint8Array.from(decodedPayload.chunk as number[]);
-	}
-	return frame;
-}
diff --git a/packages/core/src/frame-rpc.ts b/packages/core/src/frame-rpc.ts
deleted file mode 100644
index 2e77ea540..000000000
--- a/packages/core/src/frame-rpc.ts
+++ /dev/null
@@ -1,165 +0,0 @@
-import type { Readable, Writable } from "node:stream";
-import { PendingResponseRegistry } from "./correlation.js";
-import {
-	type FrameTransport,
-	StdioFrameTransport,
-} from "./frame-stream.js";
-
-export type ClassifiedFrame<TResponseFrame, TEventFrame, TSidecarRequestFrame> =
-	| {
-			kind: "response";
-			requestId: number;
-			frame: TResponseFrame;
-	  }
-	| {
-			kind: "event";
-			frame: TEventFrame;
-	  }
-	| {
-			kind: "sidecarRequest";
-			frame: TSidecarRequestFrame;
-	  };
-
-export interface FrameRpcTransportOptions<
-	TReadFrame,
-	TWriteFrame,
-	TResponseFrame,
-	TEventFrame,
-	TSidecarRequestFrame,
-> {
-	frameTransport?: FrameTransport<TReadFrame, TWriteFrame>;
-	stdin?: Writable;
-	stdout?: Readable;
-	encodeFrame: (frame: TWriteFrame) => Uint8Array;
-	decodeFrame: (payload: Uint8Array) => TReadFrame;
-	classifyFrame: (
-		frame: TReadFrame,
-	) => ClassifiedFrame<TResponseFrame, TEventFrame, TSidecarRequestFrame>;
-}
-
-export class FrameRpcTransport<
-	TReadFrame,
-	TWriteFrame,
-	TResponseFrame,
-	TEventFrame,
-	TSidecarRequestFrame,
-> {
-	private readonly frameTransport: FrameTransport<TReadFrame, TWriteFrame>;
-	private readonly pendingResponses =
-		new PendingResponseRegistry<TResponseFrame>();
-	private readonly eventListeners = new Set<(event: TEventFrame) => void>();
-	private readonly sidecarRequestListeners = new Set<
-		(request: TSidecarRequestFrame) => void
-	>();
-
-	constructor(
-		options: FrameRpcTransportOptions<
-			TReadFrame,
-			TWriteFrame,
-			TResponseFrame,
-			TEventFrame,
-			TSidecarRequestFrame
-		>,
-	) {
-		if (options.frameTransport) {
-			this.frameTransport = options.frameTransport;
-		} else {
-			if (!options.stdin || !options.stdout) {
-				throw new Error(
-					"FrameRpcTransport requires either frameTransport or stdin/stdout streams",
-				);
-			}
-			this.frameTransport = new StdioFrameTransport<TReadFrame, TWriteFrame>({
-				stdin: options.stdin,
-				stdout: options.stdout,
-				encodeFrame: options.encodeFrame,
-				decodeFrame: options.decodeFrame,
-			});
-		}
-		this.frameTransport.onFrame((frame) => {
-			this.dispatchFrame(options.classifyFrame(frame));
-		});
-	}
-
-	onEvent(handler: (event: TEventFrame) => void): () => void {
-		this.eventListeners.add(handler);
-		return () => {
-			this.eventListeners.delete(handler);
-		};
-	}
-
-	onSidecarRequest(handler: (request: TSidecarRequestFrame) => void): () => void {
-		this.sidecarRequestListeners.add(handler);
-		return () => {
-			this.sidecarRequestListeners.delete(handler);
-		};
-	}
-
-	onError(handler: (error: Error) => void): () => void {
-		return this.frameTransport.onError(handler);
-	}
-
-	onEnd(handler: () => void): () => void {
-		return this.frameTransport.onEnd(handler);
-	}
-
-	async sendFrame(
-		requestId: number,
-		frame: TWriteFrame,
-		options: {
-			timeoutMs: number;
-			timeoutMessage: () => string;
-		},
-	): Promise<TResponseFrame> {
-		const response = this.pendingResponses.waitForResponse(requestId, options);
-		void this.writeFrame(frame).catch((error) => {
-			this.pendingResponses.reject(
-				requestId,
-				error instanceof Error ? error : new Error(String(error)),
-			);
-		});
-		return await response;
-	}
-
-	async writeFrame(frame: TWriteFrame): Promise<void> {
-		await this.frameTransport.writeFrame(frame);
-	}
-
-	rejectAll(error: Error): void {
-		this.pendingResponses.rejectAll(error);
-	}
-
-	dispose(): void {
-		this.frameTransport.dispose();
-		this.pendingResponses.rejectAll(new Error("frame rpc transport disposed"));
-		this.eventListeners.clear();
-		this.sidecarRequestListeners.clear();
-	}
-
-	private dispatchFrame(
-		classified: ClassifiedFrame<
-			TResponseFrame,
-			TEventFrame,
-			TSidecarRequestFrame
-		>,
-	): void {
-		switch (classified.kind) {
-			case "response":
-				this.pendingResponses.resolve(
-					classified.requestId,
-					classified.frame,
-				);
-				return;
-			case "event":
-				for (const listener of this.eventListeners) {
-					listener(classified.frame);
-				}
-				return;
-			case "sidecarRequest":
-				for (const listener of this.sidecarRequestListeners) {
-					listener(classified.frame);
-				}
-				return;
-		}
-	}
-}
diff --git a/packages/core/src/frame-stream.ts b/packages/core/src/frame-stream.ts
deleted file mode 100644
index a5c54c471..000000000
--- a/packages/core/src/frame-stream.ts
+++ /dev/null
@@ -1,143 +0,0 @@
-import type { Readable, Writable } from "node:stream";
-import type { ByteArray } from "./framing.js";
-import {
-	encodeLengthPrefixedPayload,
-	tryDecodeLengthPrefixedPayload,
-} from "./framing.js";
-
-export interface StdioFrameTransportOptions<TReadFrame, TWriteFrame> {
-	stdin: Writable;
-	stdout: Readable;
-	encodeFrame: (frame: TWriteFrame) => Uint8Array;
-	decodeFrame: (payload: Uint8Array) => TReadFrame;
-}
-
-export interface FrameTransport<TReadFrame, TWriteFrame = TReadFrame> {
-	onFrame(handler: (frame: TReadFrame) => void): () => void;
-	onError(handler: (error: Error) => void): () => void;
-	onEnd(handler: () => void): () => void;
-	writeFrame(frame: TWriteFrame): Promise<void>;
-	dispose(): void;
-}
-
-export class StdioFrameTransport<TReadFrame, TWriteFrame = TReadFrame>
-	implements FrameTransport<TReadFrame, TWriteFrame>
-{
-	private readonly stdin: Writable;
-	private readonly stdout: Readable;
-	private readonly encodeFrame: (frame: TWriteFrame) => Uint8Array;
-	private readonly decodeFrame: (payload: Uint8Array) => TReadFrame;
-	private readonly frameListeners = new Set<(frame: TReadFrame) => void>();
-	private readonly errorListeners = new Set<(error: Error) => void>();
-	private readonly endListeners = new Set<() => void>();
-	private stdoutBuffer: ByteArray = new Uint8Array(0);
-
-	constructor(options: StdioFrameTransportOptions<TReadFrame, TWriteFrame>) {
-		this.stdin = options.stdin;
-		this.stdout = options.stdout;
-		this.encodeFrame = options.encodeFrame;
-		this.decodeFrame = options.decodeFrame;
-		this.stdout.on("data", this.handleData);
-		this.stdout.on("end", this.handleEnd);
-		this.stdout.on("error", this.handleError);
-	}
-
-	onFrame(handler: (frame: TReadFrame) => void): () => void {
-		this.frameListeners.add(handler);
-		return () => {
-			this.frameListeners.delete(handler);
-		};
-	}
-
-	onError(handler: (error: Error) => void): () => void {
-		this.errorListeners.add(handler);
-		return () => {
-			this.errorListeners.delete(handler);
-		};
-	}
-
-	onEnd(handler: () => void): () => void {
-		this.endListeners.add(handler);
-		return () => {
-			this.endListeners.delete(handler);
-		};
-	}
-
-	async writeFrame(frame: TWriteFrame): Promise<void> {
-		const payload = this.encodeFrame(frame);
-		const encoded = encodeLengthPrefixedPayload(payload);
-		await new Promise<void>((resolve, reject) => {
-			this.stdin.write(encoded, (error) => {
-				if (error) {
-					reject(error);
-					return;
-				}
-				resolve();
-			});
-		});
-	}
-
-	dispose(): void {
-		this.stdout.off("data", this.handleData);
-		this.stdout.off("end", this.handleEnd);
-		this.stdout.off("error", this.handleError);
-		this.frameListeners.clear();
-		this.errorListeners.clear();
-		this.endListeners.clear();
-	}
-
-	private readonly handleData = (chunk: ByteArray | string): void => {
-		const bytes: ByteArray =
-			typeof chunk === "string"
-				? new TextEncoder().encode(chunk)
-				: new Uint8Array(chunk.buffer, chunk.byteOffset, chunk.byteLength);
-		this.stdoutBuffer = concatBytes(this.stdoutBuffer, bytes);
-		this.drainFrames();
-	};
-
-	private readonly handleEnd = (): void => {
-		for (const listener of this.endListeners) {
-			listener();
-		}
-	};
-
-	private readonly handleError = (error: unknown): void => {
-		const normalized = error instanceof Error ? error : new Error(String(error));
-		for (const listener of this.errorListeners) {
-			listener(normalized);
-		}
-	};
-
-	private drainFrames(): void {
-		for (;;) {
-			const decoded = tryDecodeLengthPrefixedPayload(this.stdoutBuffer);
-			if (!decoded) {
-				return;
-			}
-			this.stdoutBuffer = decoded.remaining;
-			let frame: TReadFrame;
-			try {
-				frame = this.decodeFrame(decoded.payload);
-			} catch (error) {
-				this.handleError(error);
-				continue;
-			}
-			for (const listener of this.frameListeners) {
-				listener(frame);
-			}
-		}
-	}
-}
-
-function concatBytes(left: ByteArray, right: ByteArray): ByteArray {
-	if (left.length === 0) {
-		return right;
-	}
-	if (right.length === 0) {
-		return left;
-	}
-	const combined = new Uint8Array(left.length + right.length);
-	combined.set(left);
-	combined.set(right, left.length);
-	return combined;
-}
diff --git a/packages/core/src/framing.ts b/packages/core/src/framing.ts
deleted file mode 100644
index 3cb7da9a5..000000000
--- a/packages/core/src/framing.ts
+++ /dev/null
@@ -1,36 +0,0 @@
-export const LENGTH_PREFIX_BYTES = 4;
-
-export type ByteArray = Uint8Array<ArrayBufferLike>;
-
-export interface LengthPrefixedPayload {
-	payload: ByteArray;
-	remaining: ByteArray;
-}
-
-export function encodeLengthPrefixedPayload(payload: Uint8Array): Uint8Array {
-	const encoded = new Uint8Array(LENGTH_PREFIX_BYTES + payload.length);
-	const view = new DataView(encoded.buffer, encoded.byteOffset, encoded.byteLength);
-	view.setUint32(0, payload.length, false);
-	encoded.set(payload, LENGTH_PREFIX_BYTES);
-	return encoded;
-}
-
-export function tryDecodeLengthPrefixedPayload(
-	buffer: ByteArray,
-): LengthPrefixedPayload | null {
-	if (buffer.length < LENGTH_PREFIX_BYTES) {
-		return null;
-	}
-
-	const view = new DataView(buffer.buffer, buffer.byteOffset, buffer.byteLength);
-	const declaredLength = view.getUint32(0, false);
-	const frameEnd = LENGTH_PREFIX_BYTES + declaredLength;
-	if (buffer.length < frameEnd) {
-		return null;
-	}
-
-	return {
-		payload: buffer.subarray(LENGTH_PREFIX_BYTES, frameEnd),
-		remaining: buffer.subarray(frameEnd),
-	};
-}
diff --git a/packages/core/src/generated-protocol.ts b/packages/core/src/generated-protocol.ts
deleted file mode 100644
index bcabc7136..000000000
--- a/packages/core/src/generated-protocol.ts
+++ /dev/null
@@ -1,4406 +0,0 @@
-// @generated - run pnpm --dir packages/build-tools build:protocol
-import * as bare from "@rivetkit/bare-ts"
-
-const DEFAULT_CONFIG = /* @__PURE__ */ bare.Config({})
-
-export type i32 = number
-export type i64 = bigint
-export type u16 = number
-export type u32 = number
-export type u64 = bigint
-
-export type JsonUtf8 = string
-
-export function readJsonUtf8(bc: bare.ByteCursor): JsonUtf8 {
-    return bare.readString(bc)
-}
-
-export function writeJsonUtf8(bc: bare.ByteCursor, x: JsonUtf8): void {
-    bare.writeString(bc, x)
-}
-
-export type ProtocolSchema = {
-    readonly name: string
-    readonly version: u16
-}
-
-export function readProtocolSchema(bc: bare.ByteCursor): ProtocolSchema {
-    return {
-        name: bare.readString(bc),
-        version: bare.readU16(bc),
-    }
-}
-
-export function writeProtocolSchema(bc: bare.ByteCursor, x: ProtocolSchema): void {
-    bare.writeString(bc, x.name)
-    bare.writeU16(bc, x.version)
-}
-
-export type RequestId = i64
-
-export function readRequestId(bc: bare.ByteCursor): RequestId {
-    return bare.readI64(bc)
-}
-
-export function writeRequestId(bc: bare.ByteCursor, x: RequestId): void {
-    bare.writeI64(bc, x)
-}
-
-export type ExtEnvelope = {
-    readonly namespace: string
-    readonly payload: ArrayBuffer
-}
-
-export function readExtEnvelope(bc: bare.ByteCursor): ExtEnvelope {
-    return {
-        namespace: bare.readString(bc),
-        payload: bare.readData(bc),
-    }
-}
-
-export function writeExtEnvelope(bc: bare.ByteCursor, x: ExtEnvelope): void {
-    bare.writeString(bc, x.namespace)
-    bare.writeData(bc, x.payload)
-}
-
-export type ConnectionOwnership = {
-    readonly connectionId: string
-}
-
-export function readConnectionOwnership(bc: bare.ByteCursor): ConnectionOwnership {
-    return {
-        connectionId: bare.readString(bc),
-    }
-}
-
-export function writeConnectionOwnership(bc: bare.ByteCursor, x: ConnectionOwnership): void {
-    bare.writeString(bc, x.connectionId)
-}
-
-export type SessionOwnership = {
-    readonly connectionId: string
-    readonly sessionId: string
-}
-
-export function readSessionOwnership(bc: bare.ByteCursor): SessionOwnership {
-    return {
-        connectionId: bare.readString(bc),
-        sessionId: bare.readString(bc),
-    }
-}
-
-export function writeSessionOwnership(bc: bare.ByteCursor, x: SessionOwnership): void {
-    bare.writeString(bc, x.connectionId)
-    bare.writeString(bc, x.sessionId)
-}
-
-export type VmOwnership = {
-    readonly connectionId: string
-    readonly sessionId: string
-    readonly vmId: string
-}
-
-export function readVmOwnership(bc: bare.ByteCursor): VmOwnership {
-    return {
-        connectionId: bare.readString(bc),
-        sessionId: bare.readString(bc),
-        vmId: bare.readString(bc),
-    }
-}
-
-export function writeVmOwnership(bc: bare.ByteCursor, x: VmOwnership): void {
-    bare.writeString(bc, x.connectionId)
-    bare.writeString(bc, x.sessionId)
-    bare.writeString(bc, x.vmId)
-}
-
-export type OwnershipScope =
-    | { readonly tag: "ConnectionOwnership"; readonly val: ConnectionOwnership }
-    | { readonly tag: "SessionOwnership"; readonly val: SessionOwnership }
-    | { readonly tag: "VmOwnership"; readonly val: VmOwnership }
-
-export function readOwnershipScope(bc: bare.ByteCursor): OwnershipScope {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return { tag: "ConnectionOwnership", val: readConnectionOwnership(bc) }
-        case 1:
-            return { tag: "SessionOwnership", val: readSessionOwnership(bc) }
-        case 2:
-            return { tag: "VmOwnership", val: readVmOwnership(bc) }
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeOwnershipScope(bc: bare.ByteCursor, x: OwnershipScope): void {
-    switch (x.tag) {
-        case "ConnectionOwnership": {
-            bare.writeU8(bc, 0)
-            writeConnectionOwnership(bc, x.val)
-            break
-        }
-        case "SessionOwnership": {
-            bare.writeU8(bc, 1)
-            writeSessionOwnership(bc, x.val)
-            break
-        }
-        case "VmOwnership": {
-            bare.writeU8(bc, 2)
-            writeVmOwnership(bc, x.val)
-            break
-        }
-    }
-}
-
-export type AuthenticateRequest = {
-    readonly clientName: string
-    readonly authToken: string
-    readonly protocolVersion: u16
-    readonly bridgeVersion: u32
-}
-
-export function readAuthenticateRequest(bc: bare.ByteCursor): AuthenticateRequest {
-    return {
-        clientName: bare.readString(bc),
-        authToken: bare.readString(bc),
-        protocolVersion: bare.readU16(bc),
-        bridgeVersion: bare.readU32(bc),
-    }
-}
-
-export function writeAuthenticateRequest(bc: bare.ByteCursor, x: AuthenticateRequest): void {
-    bare.writeString(bc, x.clientName)
-    bare.writeString(bc, x.authToken)
-    bare.writeU16(bc, x.protocolVersion)
-    bare.writeU32(bc, x.bridgeVersion)
-}
-
-function read0(bc: bare.ByteCursor): string | null {
-    return bare.readBool(bc) ? bare.readString(bc) : null
-}
-
-function write0(bc: bare.ByteCursor, x: string | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        bare.writeString(bc, x)
-    }
-}
-
-export type SidecarPlacementShared = {
-    readonly pool: string | null
-}
-
-export function readSidecarPlacementShared(bc: bare.ByteCursor): SidecarPlacementShared {
-    return {
-        pool: read0(bc),
-    }
-}
-
-export function writeSidecarPlacementShared(bc: bare.ByteCursor, x: SidecarPlacementShared): void {
-    write0(bc, x.pool)
-}
-
-export type SidecarPlacementExplicit = {
-    readonly sidecarId: string
-}
-
-export function readSidecarPlacementExplicit(bc: bare.ByteCursor): SidecarPlacementExplicit {
-    return {
-        sidecarId: bare.readString(bc),
-    }
-}
-
-export function writeSidecarPlacementExplicit(bc: bare.ByteCursor, x: SidecarPlacementExplicit): void {
-    bare.writeString(bc, x.sidecarId)
-}
-
-export type SidecarPlacement =
-    | { readonly tag: "SidecarPlacementShared"; readonly val: SidecarPlacementShared }
-    | { readonly tag: "SidecarPlacementExplicit"; readonly val: SidecarPlacementExplicit }
-
-export function readSidecarPlacement(bc: bare.ByteCursor): SidecarPlacement {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return { tag: "SidecarPlacementShared", val: readSidecarPlacementShared(bc) }
-        case 1:
-            return { tag: "SidecarPlacementExplicit", val: readSidecarPlacementExplicit(bc) }
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeSidecarPlacement(bc: bare.ByteCursor, x: SidecarPlacement): void {
-    switch (x.tag) {
-        case "SidecarPlacementShared": {
-            bare.writeU8(bc, 0)
-            writeSidecarPlacementShared(bc, x.val)
-            break
-        }
-        case "SidecarPlacementExplicit": {
-            bare.writeU8(bc, 1)
-            writeSidecarPlacementExplicit(bc, x.val)
-            break
-        }
-    }
-}
-
-function read1(bc: bare.ByteCursor): ReadonlyMap<string, string> {
-    const len = bare.readUintSafe(bc)
-    const result = new Map<string, string>()
-    for (let i = 0; i < len; i++) {
-        const offset = bc.offset
-        const key = bare.readString(bc)
-        if (result.has(key)) {
-            bc.offset = offset
-            throw new bare.BareError(offset, "duplicated key")
-        }
-        result.set(key, bare.readString(bc))
-    }
-    return result
-}
-
-function write1(bc: bare.ByteCursor, x: ReadonlyMap<string, string>): void {
-    bare.writeUintSafe(bc, x.size)
-    for (const kv of x) {
-        bare.writeString(bc, kv[0])
-        bare.writeString(bc, kv[1])
-    }
-}
-
-export type OpenSessionRequest = {
-    readonly placement: SidecarPlacement
-    readonly metadata: ReadonlyMap<string, string>
-}
-
-export function readOpenSessionRequest(bc: bare.ByteCursor): OpenSessionRequest {
-    return {
-        placement: readSidecarPlacement(bc),
-        metadata: read1(bc),
-    }
-}
-
-export function writeOpenSessionRequest(bc: bare.ByteCursor, x: OpenSessionRequest): void {
-    writeSidecarPlacement(bc, x.placement)
-    write1(bc, x.metadata)
-}
-
-export enum GuestRuntimeKind {
-    JavaScript = "JavaScript",
-    Python = "Python",
-    WebAssembly = "WebAssembly",
-}
-
-export function readGuestRuntimeKind(bc: bare.ByteCursor): GuestRuntimeKind {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return GuestRuntimeKind.JavaScript
-        case 1:
-            return GuestRuntimeKind.Python
-        case 2:
-            return GuestRuntimeKind.WebAssembly
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeGuestRuntimeKind(bc: bare.ByteCursor, x: GuestRuntimeKind): void {
-    switch (x) {
-        case GuestRuntimeKind.JavaScript: {
-            bare.writeU8(bc, 0)
-            break
-        }
-        case GuestRuntimeKind.Python: {
-            bare.writeU8(bc, 1)
-            break
-        }
-        case GuestRuntimeKind.WebAssembly: {
-            bare.writeU8(bc, 2)
-            break
-        }
-    }
-}
-
-export enum RootFilesystemMode {
-    Ephemeral = "Ephemeral",
-    ReadOnly = "ReadOnly",
-}
-
-export function readRootFilesystemMode(bc: bare.ByteCursor): RootFilesystemMode {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return RootFilesystemMode.Ephemeral
-        case 1:
-            return RootFilesystemMode.ReadOnly
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeRootFilesystemMode(bc: bare.ByteCursor, x: RootFilesystemMode): void {
-    switch (x) {
-        case RootFilesystemMode.Ephemeral: {
-            bare.writeU8(bc, 0)
-            break
-        }
-        case RootFilesystemMode.ReadOnly: {
-            bare.writeU8(bc, 1)
-            break
-        }
-    }
-}
-
-export enum RootFilesystemEntryKind {
-    File = "File",
-    Directory = "Directory",
-    Symlink = "Symlink",
-}
-
-export function readRootFilesystemEntryKind(bc: bare.ByteCursor): RootFilesystemEntryKind {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return RootFilesystemEntryKind.File
-        case 1:
-            return RootFilesystemEntryKind.Directory
-        case 2:
-            return RootFilesystemEntryKind.Symlink
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeRootFilesystemEntryKind(bc: bare.ByteCursor, x: RootFilesystemEntryKind): void {
-    switch (x) {
-        case RootFilesystemEntryKind.File: {
-            bare.writeU8(bc, 0)
-            break
-        }
-        case RootFilesystemEntryKind.Directory: {
-            bare.writeU8(bc, 1)
-            break
-        }
-        case RootFilesystemEntryKind.Symlink: {
-            bare.writeU8(bc, 2)
-            break
-        }
-    }
-}
-
-export enum RootFilesystemEntryEncoding {
-    UtF8 = "UtF8",
-    BasE64 = "BasE64",
-}
-
-export function readRootFilesystemEntryEncoding(bc: bare.ByteCursor): RootFilesystemEntryEncoding {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return RootFilesystemEntryEncoding.UtF8
-        case 1:
-            return RootFilesystemEntryEncoding.BasE64
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeRootFilesystemEntryEncoding(bc: bare.ByteCursor, x: RootFilesystemEntryEncoding): void {
-    switch (x) {
-        case RootFilesystemEntryEncoding.UtF8: {
-            bare.writeU8(bc, 0)
-            break
-        }
-        case RootFilesystemEntryEncoding.BasE64: {
-            bare.writeU8(bc, 1)
-            break
-        }
-    }
-}
-
-function read2(bc: bare.ByteCursor): u32 | null {
-    return bare.readBool(bc) ? bare.readU32(bc) : null
-}
-
-function write2(bc: bare.ByteCursor, x: u32 | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        bare.writeU32(bc, x)
-    }
-}
-
-function read3(bc: bare.ByteCursor): RootFilesystemEntryEncoding | null {
-    return bare.readBool(bc) ? readRootFilesystemEntryEncoding(bc) : null
-}
-
-function write3(bc: bare.ByteCursor, x: RootFilesystemEntryEncoding | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        writeRootFilesystemEntryEncoding(bc, x)
-    }
-}
-
-export type RootFilesystemEntry = {
-    readonly path: string
-    readonly kind: RootFilesystemEntryKind
-    readonly mode: u32 | null
-    readonly uid: u32 | null
-    readonly gid: u32 | null
-    readonly content: string | null
-    readonly encoding: RootFilesystemEntryEncoding | null
-    readonly target: string | null
-    readonly executable: boolean
-}
-
-export function readRootFilesystemEntry(bc: bare.ByteCursor): RootFilesystemEntry {
-    return {
-        path: bare.readString(bc),
-        kind: readRootFilesystemEntryKind(bc),
-        mode: read2(bc),
-        uid: read2(bc),
-        gid: read2(bc),
-        content: read0(bc),
-        encoding: read3(bc),
-        target: read0(bc),
-        executable: bare.readBool(bc),
-    }
-}
-
-export function writeRootFilesystemEntry(bc: bare.ByteCursor, x: RootFilesystemEntry): void {
-    bare.writeString(bc, x.path)
-    writeRootFilesystemEntryKind(bc, x.kind)
-    write2(bc, x.mode)
-    write2(bc, x.uid)
-    write2(bc, x.gid)
-    write0(bc, x.content)
-    write3(bc, x.encoding)
-    write0(bc, x.target)
-    bare.writeBool(bc, x.executable)
-}
-
-function read4(bc: bare.ByteCursor): readonly RootFilesystemEntry[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readRootFilesystemEntry(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readRootFilesystemEntry(bc)
-    }
-    return result
-}
-
-function write4(bc: bare.ByteCursor, x: readonly RootFilesystemEntry[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writeRootFilesystemEntry(bc, x[i])
-    }
-}
-
-export type SnapshotRootFilesystemLower = {
-    readonly entries: readonly RootFilesystemEntry[]
-}
-
-export function readSnapshotRootFilesystemLower(bc: bare.ByteCursor): SnapshotRootFilesystemLower {
-    return {
-        entries: read4(bc),
-    }
-}
-
-export function writeSnapshotRootFilesystemLower(bc: bare.ByteCursor, x: SnapshotRootFilesystemLower): void {
-    write4(bc, x.entries)
-}
-
-export type BundledBaseFilesystemLower = null
-
-export type RootFilesystemLowerDescriptor =
-    | { readonly tag: "SnapshotRootFilesystemLower"; readonly val: SnapshotRootFilesystemLower }
-    | { readonly tag: "BundledBaseFilesystemLower"; readonly val: BundledBaseFilesystemLower }
-
-export function readRootFilesystemLowerDescriptor(bc: bare.ByteCursor): RootFilesystemLowerDescriptor {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return { tag: "SnapshotRootFilesystemLower", val: readSnapshotRootFilesystemLower(bc) }
-        case 1:
-            return { tag: "BundledBaseFilesystemLower", val: null }
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeRootFilesystemLowerDescriptor(bc: bare.ByteCursor, x: RootFilesystemLowerDescriptor): void {
-    switch (x.tag) {
-        case "SnapshotRootFilesystemLower": {
-            bare.writeU8(bc, 0)
-            writeSnapshotRootFilesystemLower(bc, x.val)
-            break
-        }
-        case "BundledBaseFilesystemLower": {
-            bare.writeU8(bc, 1)
-            break
-        }
-    }
-}
-
-function read5(bc: bare.ByteCursor): readonly RootFilesystemLowerDescriptor[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readRootFilesystemLowerDescriptor(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readRootFilesystemLowerDescriptor(bc)
-    }
-    return result
-}
-
-function write5(bc: bare.ByteCursor, x: readonly RootFilesystemLowerDescriptor[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writeRootFilesystemLowerDescriptor(bc, x[i])
-    }
-}
-
-export type RootFilesystemDescriptor = {
-    readonly mode: RootFilesystemMode
-    readonly disableDefaultBaseLayer: boolean
-    readonly lowers: readonly RootFilesystemLowerDescriptor[]
-    readonly bootstrapEntries: readonly RootFilesystemEntry[]
-}
-
-export function readRootFilesystemDescriptor(bc: bare.ByteCursor): RootFilesystemDescriptor {
-    return {
-        mode: readRootFilesystemMode(bc),
-        disableDefaultBaseLayer: bare.readBool(bc),
-        lowers: read5(bc),
-        bootstrapEntries: read4(bc),
-    }
-}
-
-export function writeRootFilesystemDescriptor(bc: bare.ByteCursor, x: RootFilesystemDescriptor): void {
-    writeRootFilesystemMode(bc, x.mode)
-    bare.writeBool(bc, x.disableDefaultBaseLayer)
-    write5(bc, x.lowers)
-    write4(bc, x.bootstrapEntries)
-}
-
-export function encodeRootFilesystemDescriptor(x: RootFilesystemDescriptor, config?: Partial<bare.Config>): Uint8Array {
-    const fullConfig = config != null ? bare.Config(config) : DEFAULT_CONFIG
-    const bc = new bare.ByteCursor(
-        new Uint8Array(fullConfig.initialBufferLength),
-        fullConfig,
-    )
-    writeRootFilesystemDescriptor(bc, x)
-    return new Uint8Array(bc.view.buffer, bc.view.byteOffset, bc.offset)
-}
-
-export function decodeRootFilesystemDescriptor(bytes: Uint8Array): RootFilesystemDescriptor {
-    const bc = new bare.ByteCursor(bytes, DEFAULT_CONFIG)
-    const result = readRootFilesystemDescriptor(bc)
-    if (bc.offset < bc.view.byteLength) {
-        throw new bare.BareError(bc.offset, "remaining bytes")
-    }
-    return result
-}
-
-export enum PermissionMode {
-    Allow = "Allow",
-    Ask = "Ask",
-    Deny = "Deny",
-}
-
-export function readPermissionMode(bc: bare.ByteCursor): PermissionMode {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return PermissionMode.Allow
-        case 1:
-            return PermissionMode.Ask
-        case 2:
-            return PermissionMode.Deny
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writePermissionMode(bc: bare.ByteCursor, x: PermissionMode): void {
-    switch (x) {
-        case PermissionMode.Allow: {
-            bare.writeU8(bc, 0)
-            break
-        }
-        case PermissionMode.Ask: {
-            bare.writeU8(bc, 1)
-            break
-        }
-        case PermissionMode.Deny: {
-            bare.writeU8(bc, 2)
-            break
-        }
-    }
-}
-
-function read6(bc: bare.ByteCursor): readonly string[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [bare.readString(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = bare.readString(bc)
-    }
-    return result
-}
-
-function write6(bc: bare.ByteCursor, x: readonly string[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        bare.writeString(bc, x[i])
-    }
-}
-
-export type FsPermissionRule = {
-    readonly mode: PermissionMode
-    readonly operations: readonly string[]
-    readonly paths: readonly string[]
-}
-
-export function readFsPermissionRule(bc: bare.ByteCursor): FsPermissionRule {
-    return {
-        mode: readPermissionMode(bc),
-        operations: read6(bc),
-        paths: read6(bc),
-    }
-}
-
-export function writeFsPermissionRule(bc: bare.ByteCursor, x: FsPermissionRule): void {
-    writePermissionMode(bc, x.mode)
-    write6(bc, x.operations)
-    write6(bc, x.paths)
-}
-
-function read7(bc: bare.ByteCursor): PermissionMode | null {
-    return bare.readBool(bc) ? readPermissionMode(bc) : null
-}
-
-function write7(bc: bare.ByteCursor, x: PermissionMode | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        writePermissionMode(bc, x)
-    }
-}
-
-function read8(bc: bare.ByteCursor): readonly FsPermissionRule[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readFsPermissionRule(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readFsPermissionRule(bc)
-    }
-    return result
-}
-
-function write8(bc: bare.ByteCursor, x: readonly FsPermissionRule[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writeFsPermissionRule(bc, x[i])
-    }
-}
-
-export type FsPermissionRuleSet = {
-    readonly default: PermissionMode | null
-    readonly rules: readonly FsPermissionRule[]
-}
-
-export function readFsPermissionRuleSet(bc: bare.ByteCursor): FsPermissionRuleSet {
-    return {
-        default: read7(bc),
-        rules: read8(bc),
-    }
-}
-
-export function writeFsPermissionRuleSet(bc: bare.ByteCursor, x: FsPermissionRuleSet): void {
-    write7(bc, x.default)
-    write8(bc, x.rules)
-}
-
-export type FsPermissionScope =
-    | { readonly tag: "PermissionMode"; readonly val: PermissionMode }
-    | { readonly tag: "FsPermissionRuleSet"; readonly val: FsPermissionRuleSet }
-
-export function readFsPermissionScope(bc: bare.ByteCursor): FsPermissionScope {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return { tag: "PermissionMode", val: readPermissionMode(bc) }
-        case 1:
-            return { tag: "FsPermissionRuleSet", val: readFsPermissionRuleSet(bc) }
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeFsPermissionScope(bc: bare.ByteCursor, x: FsPermissionScope): void {
-    switch (x.tag) {
-        case "PermissionMode": {
-            bare.writeU8(bc, 0)
-            writePermissionMode(bc, x.val)
-            break
-        }
-        case "FsPermissionRuleSet": {
-            bare.writeU8(bc, 1)
-            writeFsPermissionRuleSet(bc, x.val)
-            break
-        }
-    }
-}
-
-export type PatternPermissionRule = {
-    readonly mode: PermissionMode
-    readonly operations: readonly string[]
-    readonly patterns: readonly string[]
-}
-
-export function readPatternPermissionRule(bc: bare.ByteCursor): PatternPermissionRule {
-    return {
-        mode: readPermissionMode(bc),
-        operations: read6(bc),
-        patterns: read6(bc),
-    }
-}
-
-export function writePatternPermissionRule(bc: bare.ByteCursor, x: PatternPermissionRule): void {
-    writePermissionMode(bc, x.mode)
-    write6(bc, x.operations)
-    write6(bc, x.patterns)
-}
-
-function read9(bc: bare.ByteCursor): readonly PatternPermissionRule[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readPatternPermissionRule(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readPatternPermissionRule(bc)
-    }
-    return result
-}
-
-function write9(bc: bare.ByteCursor, x: readonly PatternPermissionRule[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writePatternPermissionRule(bc, x[i])
-    }
-}
-
-export type PatternPermissionRuleSet = {
-    readonly default: PermissionMode | null
-    readonly rules: readonly PatternPermissionRule[]
-}
-
-export function readPatternPermissionRuleSet(bc: bare.ByteCursor): PatternPermissionRuleSet {
-    return {
-        default: read7(bc),
-        rules: read9(bc),
-    }
-}
-
-export function writePatternPermissionRuleSet(bc: bare.ByteCursor, x: PatternPermissionRuleSet): void {
-    write7(bc, x.default)
-    write9(bc, x.rules)
-}
-
-export type PatternPermissionScope =
-    | { readonly tag: "PermissionMode"; readonly val: PermissionMode }
-    | { readonly tag: "PatternPermissionRuleSet"; readonly val: PatternPermissionRuleSet }
-
-export function readPatternPermissionScope(bc: bare.ByteCursor): PatternPermissionScope {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return { tag: "PermissionMode", val: readPermissionMode(bc) }
-        case 1:
-            return { tag: "PatternPermissionRuleSet", val: readPatternPermissionRuleSet(bc) }
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writePatternPermissionScope(bc: bare.ByteCursor, x: PatternPermissionScope): void {
-    switch (x.tag) {
-        case "PermissionMode": {
-            bare.writeU8(bc, 0)
-            writePermissionMode(bc, x.val)
-            break
-        }
-        case "PatternPermissionRuleSet": {
-            bare.writeU8(bc, 1)
-            writePatternPermissionRuleSet(bc, x.val)
-            break
-        }
-    }
-}
-
-function read10(bc: bare.ByteCursor): FsPermissionScope | null {
-    return bare.readBool(bc) ? readFsPermissionScope(bc) : null
-}
-
-function write10(bc: bare.ByteCursor, x: FsPermissionScope | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        writeFsPermissionScope(bc, x)
-    }
-}
-
-function read11(bc: bare.ByteCursor): PatternPermissionScope | null {
-    return bare.readBool(bc) ? readPatternPermissionScope(bc) : null
-}
-
-function write11(bc: bare.ByteCursor, x: PatternPermissionScope | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        writePatternPermissionScope(bc, x)
-    }
-}
-
-export type PermissionsPolicy = {
-    readonly fs: FsPermissionScope | null
-    readonly network: PatternPermissionScope | null
-    readonly childProcess: PatternPermissionScope | null
-    readonly process: PatternPermissionScope | null
-    readonly env: PatternPermissionScope | null
-    readonly binding: PatternPermissionScope | null
-}
-
-export function readPermissionsPolicy(bc: bare.ByteCursor): PermissionsPolicy {
-    return {
-        fs: read10(bc),
-        network: read11(bc),
-        childProcess: read11(bc),
-        process: read11(bc),
-        env: read11(bc),
-        binding: read11(bc),
-    }
-}
-
-export function writePermissionsPolicy(bc: bare.ByteCursor, x: PermissionsPolicy): void {
-    write10(bc, x.fs)
-    write11(bc, x.network)
-    write11(bc, x.childProcess)
-    write11(bc, x.process)
-    write11(bc, x.env)
-    write11(bc, x.binding)
-}
-
-export type CreateVmRequest = {
-    readonly runtime: GuestRuntimeKind
-    readonly config: JsonUtf8
-}
-
-export function readCreateVmRequest(bc: bare.ByteCursor): CreateVmRequest {
-    return {
-        runtime: readGuestRuntimeKind(bc),
-        config: readJsonUtf8(bc),
-    }
-}
-
-export function writeCreateVmRequest(bc: bare.ByteCursor, x: CreateVmRequest): void {
-    writeGuestRuntimeKind(bc, x.runtime)
-    writeJsonUtf8(bc, x.config)
-}
-
-export enum DisposeReason {
-    Requested = "Requested",
-    ConnectionClosed = "ConnectionClosed",
-    HostShutdown = "HostShutdown",
-}
-
-export function readDisposeReason(bc: bare.ByteCursor): DisposeReason {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return DisposeReason.Requested
-        case 1:
-            return DisposeReason.ConnectionClosed
-        case 2:
-            return DisposeReason.HostShutdown
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeDisposeReason(bc: bare.ByteCursor, x: DisposeReason): void {
-    switch (x) {
-        case DisposeReason.Requested: {
-            bare.writeU8(bc, 0)
-            break
-        }
-        case DisposeReason.ConnectionClosed: {
-            bare.writeU8(bc, 1)
-            break
-        }
-        case DisposeReason.HostShutdown: {
-            bare.writeU8(bc, 2)
-            break
-        }
-    }
-}
-
-export type DisposeVmRequest = {
-    readonly reason: DisposeReason
-}
-
-export function readDisposeVmRequest(bc: bare.ByteCursor): DisposeVmRequest {
-    return {
-        reason: readDisposeReason(bc),
-    }
-}
-
-export function writeDisposeVmRequest(bc: bare.ByteCursor, x: DisposeVmRequest): void {
-    writeDisposeReason(bc, x.reason)
-}
-
-export type BootstrapRootFilesystemRequest = {
-    readonly entries: readonly RootFilesystemEntry[]
-}
-
-export function readBootstrapRootFilesystemRequest(bc: bare.ByteCursor): BootstrapRootFilesystemRequest {
-    return {
-        entries: read4(bc),
-    }
-}
-
-export function writeBootstrapRootFilesystemRequest(bc: bare.ByteCursor, x: BootstrapRootFilesystemRequest): void {
-    write4(bc, x.entries)
-}
-
-export type MountPluginDescriptor = {
-    readonly id: string
-    readonly config: JsonUtf8
-}
-
-export function readMountPluginDescriptor(bc: bare.ByteCursor): MountPluginDescriptor {
-    return {
-        id: bare.readString(bc),
-        config: readJsonUtf8(bc),
-    }
-}
-
-export function writeMountPluginDescriptor(bc: bare.ByteCursor, x: MountPluginDescriptor): void {
-    bare.writeString(bc, x.id)
-    writeJsonUtf8(bc, x.config)
-}
-
-export type MountDescriptor = {
-    readonly guestPath: string
-    readonly readOnly: boolean
-    readonly plugin: MountPluginDescriptor
-}
-
-export function readMountDescriptor(bc: bare.ByteCursor): MountDescriptor {
-    return {
-        guestPath: bare.readString(bc),
-        readOnly: bare.readBool(bc),
-        plugin: readMountPluginDescriptor(bc),
-    }
-}
-
-export function writeMountDescriptor(bc: bare.ByteCursor, x: MountDescriptor): void {
-    bare.writeString(bc, x.guestPath)
-    bare.writeBool(bc, x.readOnly)
-    writeMountPluginDescriptor(bc, x.plugin)
-}
-
-export type SoftwareDescriptor = {
-    readonly packageName: string
-    readonly root: string
-}
-
-export function readSoftwareDescriptor(bc: bare.ByteCursor): SoftwareDescriptor {
-    return {
-        packageName: bare.readString(bc),
-        root: bare.readString(bc),
-    }
-}
-
-export function writeSoftwareDescriptor(bc: bare.ByteCursor, x: SoftwareDescriptor): void {
-    bare.writeString(bc, x.packageName)
-    bare.writeString(bc, x.root)
-}
-
-export type ProjectedModuleDescriptor = {
-    readonly packageName: string
-    readonly entrypoint: string
-}
-
-export function readProjectedModuleDescriptor(bc: bare.ByteCursor): ProjectedModuleDescriptor {
-    return {
-        packageName: bare.readString(bc),
-        entrypoint: bare.readString(bc),
-    }
-}
-
-export function writeProjectedModuleDescriptor(bc: bare.ByteCursor, x: ProjectedModuleDescriptor): void {
-    bare.writeString(bc, x.packageName)
-    bare.writeString(bc, x.entrypoint)
-}
-
-export enum WasmPermissionTier {
-    Full = "Full",
-    ReadWrite = "ReadWrite",
-    ReadOnly = "ReadOnly",
-    Isolated = "Isolated",
-}
-
-export function readWasmPermissionTier(bc: bare.ByteCursor): WasmPermissionTier {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return WasmPermissionTier.Full
-        case 1:
-            return WasmPermissionTier.ReadWrite
-        case 2:
-            return WasmPermissionTier.ReadOnly
-        case 3:
-            return WasmPermissionTier.Isolated
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeWasmPermissionTier(bc: bare.ByteCursor, x: WasmPermissionTier): void {
-    switch (x) {
-        case WasmPermissionTier.Full: {
-            bare.writeU8(bc, 0)
-            break
-        }
-        case WasmPermissionTier.ReadWrite: {
-            bare.writeU8(bc, 1)
-            break
-        }
-        case WasmPermissionTier.ReadOnly: {
-            bare.writeU8(bc, 2)
-            break
-        }
-        case WasmPermissionTier.Isolated: {
-            bare.writeU8(bc, 3)
-            break
-        }
-    }
-}
-
-/**
- * agentOS package descriptor. The sidecar reads `agentos-package.json`, projects
- * the self-contained package read-only under `<packagesMountAt>/<manifest.name>/<version>`,
- * and links its `bin/` commands onto $PATH. `tar`/`dir` are trusted host paths
- * (the client configures its own VM); the sidecar is the host-side TCB that builds
- * the staging tree. New clients send `tar`; `dir` remains accepted for local tests
- * and transition fixtures.
- */
-export type PackageDescriptor = {
-    readonly dir: string | null
-    readonly tar: string | null
-}
-
-export function readPackageDescriptor(bc: bare.ByteCursor): PackageDescriptor {
-    return {
-        dir: read0(bc),
-        tar: read0(bc),
-    }
-}
-
-export function writePackageDescriptor(bc: bare.ByteCursor, x: PackageDescriptor): void {
-    write0(bc, x.dir)
-    write0(bc, x.tar)
-}
-
-export type AgentosProjectedAgent = {
-    readonly id: string
-    readonly acpEntrypoint: string
-    readonly adapterEntrypoint: string
-}
-
-export function readAgentosProjectedAgent(bc: bare.ByteCursor): AgentosProjectedAgent {
-    return {
-        id: bare.readString(bc),
-        acpEntrypoint: bare.readString(bc),
-        adapterEntrypoint: bare.readString(bc),
-    }
-}
-
-export function writeAgentosProjectedAgent(bc: bare.ByteCursor, x: AgentosProjectedAgent): void {
-    bare.writeString(bc, x.id)
-    bare.writeString(bc, x.acpEntrypoint)
-    bare.writeString(bc, x.adapterEntrypoint)
-}
-
-export type LinkPackageRequest = {
-    readonly package: PackageDescriptor
-}
-
-export function readLinkPackageRequest(bc: bare.ByteCursor): LinkPackageRequest {
-    return {
-        package: readPackageDescriptor(bc),
-    }
-}
-
-export function writeLinkPackageRequest(bc: bare.ByteCursor, x: LinkPackageRequest): void {
-    writePackageDescriptor(bc, x.package)
-}
-
-export type PackageCommands = {
-    readonly packageName: string
-    readonly commands: readonly string[]
-}
-
-export function readPackageCommands(bc: bare.ByteCursor): PackageCommands {
-    return {
-        packageName: bare.readString(bc),
-        commands: read6(bc),
-    }
-}
-
-export function writePackageCommands(bc: bare.ByteCursor, x: PackageCommands): void {
-    bare.writeString(bc, x.packageName)
-    write6(bc, x.commands)
-}
-
-export type ProvidedCommandsRequest = null
-
-function read12(bc: bare.ByteCursor): readonly PackageCommands[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readPackageCommands(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readPackageCommands(bc)
-    }
-    return result
-}
-
-function write12(bc: bare.ByteCursor, x: readonly PackageCommands[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writePackageCommands(bc, x[i])
-    }
-}
-
-export type ProvidedCommandsResponse = {
-    readonly packages: readonly PackageCommands[]
-}
-
-export function readProvidedCommandsResponse(bc: bare.ByteCursor): ProvidedCommandsResponse {
-    return {
-        packages: read12(bc),
-    }
-}
-
-export function writeProvidedCommandsResponse(bc: bare.ByteCursor, x: ProvidedCommandsResponse): void {
-    write12(bc, x.packages)
-}
-
-export type ProjectedCommand = {
-    readonly name: string
-    readonly guestPath: string
-}
-
-export function readProjectedCommand(bc: bare.ByteCursor): ProjectedCommand {
-    return {
-        name: bare.readString(bc),
-        guestPath: bare.readString(bc),
-    }
-}
-
-export function writeProjectedCommand(bc: bare.ByteCursor, x: ProjectedCommand): void {
-    bare.writeString(bc, x.name)
-    bare.writeString(bc, x.guestPath)
-}
-
-function read13(bc: bare.ByteCursor): readonly ProjectedCommand[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readProjectedCommand(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readProjectedCommand(bc)
-    }
-    return result
-}
-
-function write13(bc: bare.ByteCursor, x: readonly ProjectedCommand[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writeProjectedCommand(bc, x[i])
-    }
-}
-
-function read14(bc: bare.ByteCursor): readonly AgentosProjectedAgent[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readAgentosProjectedAgent(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readAgentosProjectedAgent(bc)
-    }
-    return result
-}
-
-function write14(bc: bare.ByteCursor, x: readonly AgentosProjectedAgent[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writeAgentosProjectedAgent(bc, x[i])
-    }
-}
-
-export type PackageLinkedResponse = {
-    readonly projectedCommands: readonly ProjectedCommand[]
-    readonly agents: readonly AgentosProjectedAgent[]
-}
-
-export function readPackageLinkedResponse(bc: bare.ByteCursor): PackageLinkedResponse {
-    return {
-        projectedCommands: read13(bc),
-        agents: read14(bc),
-    }
-}
-
-export function writePackageLinkedResponse(bc: bare.ByteCursor, x: PackageLinkedResponse): void {
-    write13(bc, x.projectedCommands)
-    write14(bc, x.agents)
-}
-
-function read15(bc: bare.ByteCursor): readonly MountDescriptor[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readMountDescriptor(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readMountDescriptor(bc)
-    }
-    return result
-}
-
-function write15(bc: bare.ByteCursor, x: readonly MountDescriptor[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writeMountDescriptor(bc, x[i])
-    }
-}
-
-function read16(bc: bare.ByteCursor): readonly SoftwareDescriptor[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readSoftwareDescriptor(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readSoftwareDescriptor(bc)
-    }
-    return result
-}
-
-function write16(bc: bare.ByteCursor, x: readonly SoftwareDescriptor[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writeSoftwareDescriptor(bc, x[i])
-    }
-}
-
-function read17(bc: bare.ByteCursor): PermissionsPolicy | null {
-    return bare.readBool(bc) ? readPermissionsPolicy(bc) : null
-}
-
-function write17(bc: bare.ByteCursor, x: PermissionsPolicy | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        writePermissionsPolicy(bc, x)
-    }
-}
-
-function read18(bc: bare.ByteCursor): readonly ProjectedModuleDescriptor[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readProjectedModuleDescriptor(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readProjectedModuleDescriptor(bc)
-    }
-    return result
-}
-
-function write18(bc: bare.ByteCursor, x: readonly ProjectedModuleDescriptor[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writeProjectedModuleDescriptor(bc, x[i])
-    }
-}
-
-function read19(bc: bare.ByteCursor): ReadonlyMap<string, WasmPermissionTier> {
-    const len = bare.readUintSafe(bc)
-    const result = new Map<string, WasmPermissionTier>()
-    for (let i = 0; i < len; i++) {
-        const offset = bc.offset
-        const key = bare.readString(bc)
-        if (result.has(key)) {
-            bc.offset = offset
-            throw new bare.BareError(offset, "duplicated key")
-        }
-        result.set(key, readWasmPermissionTier(bc))
-    }
-    return result
-}
-
-function write19(bc: bare.ByteCursor, x: ReadonlyMap<string, WasmPermissionTier>): void {
-    bare.writeUintSafe(bc, x.size)
-    for (const kv of x) {
-        bare.writeString(bc, kv[0])
-        writeWasmPermissionTier(bc, kv[1])
-    }
-}
-
-function read20(bc: bare.ByteCursor): readonly PackageDescriptor[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readPackageDescriptor(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readPackageDescriptor(bc)
-    }
-    return result
-}
-
-function write20(bc: bare.ByteCursor, x: readonly PackageDescriptor[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writePackageDescriptor(bc, x[i])
-    }
-}
-
-export type ConfigureVmRequest = {
-    readonly mounts: readonly MountDescriptor[]
-    readonly software: readonly SoftwareDescriptor[]
-    readonly permissions: PermissionsPolicy | null
-    readonly moduleAccessCwd: string | null
-    readonly instructions: readonly string[]
-    readonly projectedModules: readonly ProjectedModuleDescriptor[]
-    readonly commandPermissions: ReadonlyMap<string, WasmPermissionTier>
-    readonly loopbackExemptPorts: Uint16Array
-    readonly packages: readonly PackageDescriptor[]
-    readonly packagesMountAt: string
-    readonly bootstrapCommands: readonly string[]
-    readonly toolShimCommands: readonly string[]
-}
-
-export function readConfigureVmRequest(bc: bare.ByteCursor): ConfigureVmRequest {
-    return {
-        mounts: read15(bc),
-        software: read16(bc),
-        permissions: read17(bc),
-        moduleAccessCwd: read0(bc),
-        instructions: read6(bc),
-        projectedModules: read18(bc),
-        commandPermissions: read19(bc),
-        loopbackExemptPorts: bare.readU16Array(bc),
-        packages: read20(bc),
-        packagesMountAt: bare.readString(bc),
-        bootstrapCommands: read6(bc),
-        toolShimCommands: read6(bc),
-    }
-}
-
-export function writeConfigureVmRequest(bc: bare.ByteCursor, x: ConfigureVmRequest): void {
-    write15(bc, x.mounts)
-    write16(bc, x.software)
-    write17(bc, x.permissions)
-    write0(bc, x.moduleAccessCwd)
-    write6(bc, x.instructions)
-    write18(bc, x.projectedModules)
-    write19(bc, x.commandPermissions)
-    bare.writeU16Array(bc, x.loopbackExemptPorts)
-    write20(bc, x.packages)
-    bare.writeString(bc, x.packagesMountAt)
-    write6(bc, x.bootstrapCommands)
-    write6(bc, x.toolShimCommands)
-}
-
-export type RegisteredHostCallbackExample = {
-    readonly description: string
-    readonly input: JsonUtf8
-}
-
-export function readRegisteredHostCallbackExample(bc: bare.ByteCursor): RegisteredHostCallbackExample {
-    return {
-        description: bare.readString(bc),
-        input: readJsonUtf8(bc),
-    }
-}
-
-export function writeRegisteredHostCallbackExample(bc: bare.ByteCursor, x: RegisteredHostCallbackExample): void {
-    bare.writeString(bc, x.description)
-    writeJsonUtf8(bc, x.input)
-}
-
-function read21(bc: bare.ByteCursor): u64 | null {
-    return bare.readBool(bc) ? bare.readU64(bc) : null
-}
-
-function write21(bc: bare.ByteCursor, x: u64 | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        bare.writeU64(bc, x)
-    }
-}
-
-function read22(bc: bare.ByteCursor): readonly RegisteredHostCallbackExample[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readRegisteredHostCallbackExample(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readRegisteredHostCallbackExample(bc)
-    }
-    return result
-}
-
-function write22(bc: bare.ByteCursor, x: readonly RegisteredHostCallbackExample[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writeRegisteredHostCallbackExample(bc, x[i])
-    }
-}
-
-export type RegisteredHostCallbackDefinition = {
-    readonly description: string
-    readonly inputSchema: JsonUtf8
-    readonly timeoutMs: u64 | null
-    readonly examples: readonly RegisteredHostCallbackExample[]
-}
-
-export function readRegisteredHostCallbackDefinition(bc: bare.ByteCursor): RegisteredHostCallbackDefinition {
-    return {
-        description: bare.readString(bc),
-        inputSchema: readJsonUtf8(bc),
-        timeoutMs: read21(bc),
-        examples: read22(bc),
-    }
-}
-
-export function writeRegisteredHostCallbackDefinition(bc: bare.ByteCursor, x: RegisteredHostCallbackDefinition): void {
-    bare.writeString(bc, x.description)
-    writeJsonUtf8(bc, x.inputSchema)
-    write21(bc, x.timeoutMs)
-    write22(bc, x.examples)
-}
-
-function read23(bc: bare.ByteCursor): ReadonlyMap<string, RegisteredHostCallbackDefinition> {
-    const len = bare.readUintSafe(bc)
-    const result = new Map<string, RegisteredHostCallbackDefinition>()
-    for (let i = 0; i < len; i++) {
-        const offset = bc.offset
-        const key = bare.readString(bc)
-        if (result.has(key)) {
-            bc.offset = offset
-            throw new bare.BareError(offset, "duplicated key")
-        }
-        result.set(key, readRegisteredHostCallbackDefinition(bc))
-    }
-    return result
-}
-
-function write23(bc: bare.ByteCursor, x: ReadonlyMap<string, RegisteredHostCallbackDefinition>): void {
-    bare.writeUintSafe(bc, x.size)
-    for (const kv of x) {
-        bare.writeString(bc, kv[0])
-        writeRegisteredHostCallbackDefinition(bc, kv[1])
-    }
-}
-
-export type RegisterHostCallbacksRequest = {
-    readonly name: string
-    readonly description: string
-    readonly commandAliases: readonly string[]
-    readonly registryCommandAliases: readonly string[]
-    readonly callbacks: ReadonlyMap<string, RegisteredHostCallbackDefinition>
-}
-
-export function readRegisterHostCallbacksRequest(bc: bare.ByteCursor): RegisterHostCallbacksRequest {
-    return {
-        name: bare.readString(bc),
-        description: bare.readString(bc),
-        commandAliases: read6(bc),
-        registryCommandAliases: read6(bc),
-        callbacks: read23(bc),
-    }
-}
-
-export function writeRegisterHostCallbacksRequest(bc: bare.ByteCursor, x: RegisterHostCallbacksRequest): void {
-    bare.writeString(bc, x.name)
-    bare.writeString(bc, x.description)
-    write6(bc, x.commandAliases)
-    write6(bc, x.registryCommandAliases)
-    write23(bc, x.callbacks)
-}
-
-export type CreateLayerRequest = null
-
-export type SealLayerRequest = {
-    readonly layerId: string
-}
-
-export function readSealLayerRequest(bc: bare.ByteCursor): SealLayerRequest {
-    return {
-        layerId: bare.readString(bc),
-    }
-}
-
-export function writeSealLayerRequest(bc: bare.ByteCursor, x: SealLayerRequest): void {
-    bare.writeString(bc, x.layerId)
-}
-
-export type ImportSnapshotRequest = {
-    readonly entries: readonly RootFilesystemEntry[]
-}
-
-export function readImportSnapshotRequest(bc: bare.ByteCursor): ImportSnapshotRequest {
-    return {
-        entries: read4(bc),
-    }
-}
-
-export function writeImportSnapshotRequest(bc: bare.ByteCursor, x: ImportSnapshotRequest): void {
-    write4(bc, x.entries)
-}
-
-export type ExportSnapshotRequest = {
-    readonly layerId: string
-}
-
-export function readExportSnapshotRequest(bc: bare.ByteCursor): ExportSnapshotRequest {
-    return {
-        layerId: bare.readString(bc),
-    }
-}
-
-export function writeExportSnapshotRequest(bc: bare.ByteCursor, x: ExportSnapshotRequest): void {
-    bare.writeString(bc, x.layerId)
-}
-
-export type CreateOverlayRequest = {
-    readonly mode: RootFilesystemMode
-    readonly upperLayerId: string | null
-    readonly lowerLayerIds: readonly string[]
-}
-
-export function readCreateOverlayRequest(bc: bare.ByteCursor): CreateOverlayRequest {
-    return {
-        mode: readRootFilesystemMode(bc),
-        upperLayerId: read0(bc),
-        lowerLayerIds: read6(bc),
-    }
-}
-
-export function writeCreateOverlayRequest(bc: bare.ByteCursor, x: CreateOverlayRequest): void {
-    writeRootFilesystemMode(bc, x.mode)
-    write0(bc, x.upperLayerId)
-    write6(bc, x.lowerLayerIds)
-}
-
-export enum GuestFilesystemOperation {
-    ReadFile = "ReadFile",
-    WriteFile = "WriteFile",
-    CreateDir = "CreateDir",
-    Mkdir = "Mkdir",
-    Exists = "Exists",
-    Stat = "Stat",
-    Lstat = "Lstat",
-    ReadDir = "ReadDir",
-    ReadDirRecursive = "ReadDirRecursive",
-    RemoveFile = "RemoveFile",
-    RemoveDir = "RemoveDir",
-    Remove = "Remove",
-    Copy = "Copy",
-    Move = "Move",
-    Rename = "Rename",
-    Realpath = "Realpath",
-    Symlink = "Symlink",
-    ReadLink = "ReadLink",
-    Link = "Link",
-    Chmod = "Chmod",
-    Chown = "Chown",
-    Utimes = "Utimes",
-    Truncate = "Truncate",
-    Pread = "Pread",
-    Pwrite = "Pwrite",
-}
-
-export function readGuestFilesystemOperation(bc: bare.ByteCursor): GuestFilesystemOperation {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return GuestFilesystemOperation.ReadFile
-        case 1:
-            return GuestFilesystemOperation.WriteFile
-        case 2:
-            return GuestFilesystemOperation.CreateDir
-        case 3:
-            return GuestFilesystemOperation.Mkdir
-        case 4:
-            return GuestFilesystemOperation.Exists
-        case 5:
-            return GuestFilesystemOperation.Stat
-        case 6:
-            return GuestFilesystemOperation.Lstat
-        case 7:
-            return GuestFilesystemOperation.ReadDir
-        case 8:
-            return GuestFilesystemOperation.ReadDirRecursive
-        case 9:
-            return GuestFilesystemOperation.RemoveFile
-        case 10:
-            return GuestFilesystemOperation.RemoveDir
-        case 11:
-            return GuestFilesystemOperation.Remove
-        case 12:
-            return GuestFilesystemOperation.Copy
-        case 13:
-            return GuestFilesystemOperation.Move
-        case 14:
-            return GuestFilesystemOperation.Rename
-        case 15:
-            return GuestFilesystemOperation.Realpath
-        case 16:
-            return GuestFilesystemOperation.Symlink
-        case 17:
-            return GuestFilesystemOperation.ReadLink
-        case 18:
-            return GuestFilesystemOperation.Link
-        case 19:
-            return GuestFilesystemOperation.Chmod
-        case 20:
-            return GuestFilesystemOperation.Chown
-        case 21:
-            return GuestFilesystemOperation.Utimes
-        case 22:
-            return GuestFilesystemOperation.Truncate
-        case 23:
-            return GuestFilesystemOperation.Pread
-        case 24:
-            return GuestFilesystemOperation.Pwrite
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeGuestFilesystemOperation(bc: bare.ByteCursor, x: GuestFilesystemOperation): void {
-    switch (x) {
-        case GuestFilesystemOperation.ReadFile: {
-            bare.writeU8(bc, 0)
-            break
-        }
-        case GuestFilesystemOperation.WriteFile: {
-            bare.writeU8(bc, 1)
-            break
-        }
-        case GuestFilesystemOperation.CreateDir: {
-            bare.writeU8(bc, 2)
-            break
-        }
-        case GuestFilesystemOperation.Mkdir: {
-            bare.writeU8(bc, 3)
-            break
-        }
-        case GuestFilesystemOperation.Exists: {
-            bare.writeU8(bc, 4)
-            break
-        }
-        case GuestFilesystemOperation.Stat: {
-            bare.writeU8(bc, 5)
-            break
-        }
-        case GuestFilesystemOperation.Lstat: {
-            bare.writeU8(bc, 6)
-            break
-        }
-        case GuestFilesystemOperation.ReadDir: {
-            bare.writeU8(bc, 7)
-            break
-        }
-        case GuestFilesystemOperation.ReadDirRecursive: {
-            bare.writeU8(bc, 8)
-            break
-        }
-        case GuestFilesystemOperation.RemoveFile: {
-            bare.writeU8(bc, 9)
-            break
-        }
-        case GuestFilesystemOperation.RemoveDir: {
-            bare.writeU8(bc, 10)
-            break
-        }
-        case GuestFilesystemOperation.Remove: {
-            bare.writeU8(bc, 11)
-            break
-        }
-        case GuestFilesystemOperation.Copy: {
-            bare.writeU8(bc, 12)
-            break
-        }
-        case GuestFilesystemOperation.Move: {
-            bare.writeU8(bc, 13)
-            break
-        }
-        case GuestFilesystemOperation.Rename: {
-            bare.writeU8(bc, 14)
-            break
-        }
-        case GuestFilesystemOperation.Realpath: {
-            bare.writeU8(bc, 15)
-            break
-        }
-        case GuestFilesystemOperation.Symlink: {
-            bare.writeU8(bc, 16)
-            break
-        }
-        case GuestFilesystemOperation.ReadLink: {
-            bare.writeU8(bc, 17)
-            break
-        }
-        case GuestFilesystemOperation.Link: {
-            bare.writeU8(bc, 18)
-            break
-        }
-        case GuestFilesystemOperation.Chmod: {
-            bare.writeU8(bc, 19)
-            break
-        }
-        case GuestFilesystemOperation.Chown: {
-            bare.writeU8(bc, 20)
-            break
-        }
-        case GuestFilesystemOperation.Utimes: {
-            bare.writeU8(bc, 21)
-            break
-        }
-        case GuestFilesystemOperation.Truncate: {
-            bare.writeU8(bc, 22)
-            break
-        }
-        case GuestFilesystemOperation.Pread: {
-            bare.writeU8(bc, 23)
-            break
-        }
-        case GuestFilesystemOperation.Pwrite: {
-            bare.writeU8(bc, 24)
-            break
-        }
-    }
-}
-
-export type GuestFilesystemCallRequest = {
-    readonly operation: GuestFilesystemOperation
-    readonly path: string
-    readonly destinationPath: string | null
-    readonly target: string | null
-    readonly content: string | null
-    readonly encoding: RootFilesystemEntryEncoding | null
-    readonly recursive: boolean
-    readonly maxDepth: u32 | null
-    readonly mode: u32 | null
-    readonly uid: u32 | null
-    readonly gid: u32 | null
-    readonly atimeMs: u64 | null
-    readonly mtimeMs: u64 | null
-    readonly len: u64 | null
-    readonly offset: u64 | null
-}
-
-export function readGuestFilesystemCallRequest(bc: bare.ByteCursor): GuestFilesystemCallRequest {
-    return {
-        operation: readGuestFilesystemOperation(bc),
-        path: bare.readString(bc),
-        destinationPath: read0(bc),
-        target: read0(bc),
-        content: read0(bc),
-        encoding: read3(bc),
-        recursive: bare.readBool(bc),
-        maxDepth: read2(bc),
-        mode: read2(bc),
-        uid: read2(bc),
-        gid: read2(bc),
-        atimeMs: read21(bc),
-        mtimeMs: read21(bc),
-        len: read21(bc),
-        offset: read21(bc),
-    }
-}
-
-export function writeGuestFilesystemCallRequest(bc: bare.ByteCursor, x: GuestFilesystemCallRequest): void {
-    writeGuestFilesystemOperation(bc, x.operation)
-    bare.writeString(bc, x.path)
-    write0(bc, x.destinationPath)
-    write0(bc, x.target)
-    write0(bc, x.content)
-    write3(bc, x.encoding)
-    bare.writeBool(bc, x.recursive)
-    write2(bc, x.maxDepth)
-    write2(bc, x.mode)
-    write2(bc, x.uid)
-    write2(bc, x.gid)
-    write21(bc, x.atimeMs)
-    write21(bc, x.mtimeMs)
-    write21(bc, x.len)
-    write21(bc, x.offset)
-}
-
-export type GuestKernelCallRequest = {
-    readonly executionId: string
-    readonly operation: string
-    readonly payload: ArrayBuffer
-}
-
-export function readGuestKernelCallRequest(bc: bare.ByteCursor): GuestKernelCallRequest {
-    return {
-        executionId: bare.readString(bc),
-        operation: bare.readString(bc),
-        payload: bare.readData(bc),
-    }
-}
-
-export function writeGuestKernelCallRequest(bc: bare.ByteCursor, x: GuestKernelCallRequest): void {
-    bare.writeString(bc, x.executionId)
-    bare.writeString(bc, x.operation)
-    bare.writeData(bc, x.payload)
-}
-
-export type SnapshotRootFilesystemRequest = null
-
-function read24(bc: bare.ByteCursor): GuestRuntimeKind | null {
-    return bare.readBool(bc) ? readGuestRuntimeKind(bc) : null
-}
-
-function write24(bc: bare.ByteCursor, x: GuestRuntimeKind | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        writeGuestRuntimeKind(bc, x)
-    }
-}
-
-function read25(bc: bare.ByteCursor): WasmPermissionTier | null {
-    return bare.readBool(bc) ? readWasmPermissionTier(bc) : null
-}
-
-function write25(bc: bare.ByteCursor, x: WasmPermissionTier | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        writeWasmPermissionTier(bc, x)
-    }
-}
-
-export type ExecuteRequest = {
-    readonly processId: string
-    readonly command: string | null
-    readonly runtime: GuestRuntimeKind | null
-    readonly entrypoint: string | null
-    readonly args: readonly string[]
-    readonly env: ReadonlyMap<string, string>
-    readonly cwd: string | null
-    readonly wasmPermissionTier: WasmPermissionTier | null
-}
-
-export function readExecuteRequest(bc: bare.ByteCursor): ExecuteRequest {
-    return {
-        processId: bare.readString(bc),
-        command: read0(bc),
-        runtime: read24(bc),
-        entrypoint: read0(bc),
-        args: read6(bc),
-        env: read1(bc),
-        cwd: read0(bc),
-        wasmPermissionTier: read25(bc),
-    }
-}
-
-export function writeExecuteRequest(bc: bare.ByteCursor, x: ExecuteRequest): void {
-    bare.writeString(bc, x.processId)
-    write0(bc, x.command)
-    write24(bc, x.runtime)
-    write0(bc, x.entrypoint)
-    write6(bc, x.args)
-    write1(bc, x.env)
-    write0(bc, x.cwd)
-    write25(bc, x.wasmPermissionTier)
-}
-
-export type WriteStdinRequest = {
-    readonly processId: string
-    readonly chunk: ArrayBuffer
-}
-
-export function readWriteStdinRequest(bc: bare.ByteCursor): WriteStdinRequest {
-    return {
-        processId: bare.readString(bc),
-        chunk: bare.readData(bc),
-    }
-}
-
-export function writeWriteStdinRequest(bc: bare.ByteCursor, x: WriteStdinRequest): void {
-    bare.writeString(bc, x.processId)
-    bare.writeData(bc, x.chunk)
-}
-
-export type ResizePtyRequest = {
-    readonly processId: string
-    readonly cols: u16
-    readonly rows: u16
-}
-
-export function readResizePtyRequest(bc: bare.ByteCursor): ResizePtyRequest {
-    return {
-        processId: bare.readString(bc),
-        cols: bare.readU16(bc),
-        rows: bare.readU16(bc),
-    }
-}
-
-export function writeResizePtyRequest(bc: bare.ByteCursor, x: ResizePtyRequest): void {
-    bare.writeString(bc, x.processId)
-    bare.writeU16(bc, x.cols)
-    bare.writeU16(bc, x.rows)
-}
-
-export type CloseStdinRequest = {
-    readonly processId: string
-}
-
-export function readCloseStdinRequest(bc: bare.ByteCursor): CloseStdinRequest {
-    return {
-        processId: bare.readString(bc),
-    }
-}
-
-export function writeCloseStdinRequest(bc: bare.ByteCursor, x: CloseStdinRequest): void {
-    bare.writeString(bc, x.processId)
-}
-
-export type KillProcessRequest = {
-    readonly processId: string
-    readonly signal: string
-}
-
-export function readKillProcessRequest(bc: bare.ByteCursor): KillProcessRequest {
-    return {
-        processId: bare.readString(bc),
-        signal: bare.readString(bc),
-    }
-}
-
-export function writeKillProcessRequest(bc: bare.ByteCursor, x: KillProcessRequest): void {
-    bare.writeString(bc, x.processId)
-    bare.writeString(bc, x.signal)
-}
-
-export type GetProcessSnapshotRequest = null
-
-export type GetResourceSnapshotRequest = null
-
-function read26(bc: bare.ByteCursor): u16 | null {
-    return bare.readBool(bc) ? bare.readU16(bc) : null
-}
-
-function write26(bc: bare.ByteCursor, x: u16 | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        bare.writeU16(bc, x)
-    }
-}
-
-export type FindListenerRequest = {
-    readonly host: string | null
-    readonly port: u16 | null
-    readonly path: string | null
-}
-
-export function readFindListenerRequest(bc: bare.ByteCursor): FindListenerRequest {
-    return {
-        host: read0(bc),
-        port: read26(bc),
-        path: read0(bc),
-    }
-}
-
-export function writeFindListenerRequest(bc: bare.ByteCursor, x: FindListenerRequest): void {
-    write0(bc, x.host)
-    write26(bc, x.port)
-    write0(bc, x.path)
-}
-
-export type FindBoundUdpRequest = {
-    readonly host: string | null
-    readonly port: u16 | null
-}
-
-export function readFindBoundUdpRequest(bc: bare.ByteCursor): FindBoundUdpRequest {
-    return {
-        host: read0(bc),
-        port: read26(bc),
-    }
-}
-
-export function writeFindBoundUdpRequest(bc: bare.ByteCursor, x: FindBoundUdpRequest): void {
-    write0(bc, x.host)
-    write26(bc, x.port)
-}
-
-export type GetSignalStateRequest = {
-    readonly processId: string
-}
-
-export function readGetSignalStateRequest(bc: bare.ByteCursor): GetSignalStateRequest {
-    return {
-        processId: bare.readString(bc),
-    }
-}
-
-export function writeGetSignalStateRequest(bc: bare.ByteCursor, x: GetSignalStateRequest): void {
-    bare.writeString(bc, x.processId)
-}
-
-export type GetZombieTimerCountRequest = null
-
-export enum FilesystemOperation {
-    Read = "Read",
-    Write = "Write",
-    Stat = "Stat",
-    ReadDir = "ReadDir",
-    Mkdir = "Mkdir",
-    Remove = "Remove",
-    Rename = "Rename",
-}
-
-export function readFilesystemOperation(bc: bare.ByteCursor): FilesystemOperation {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return FilesystemOperation.Read
-        case 1:
-            return FilesystemOperation.Write
-        case 2:
-            return FilesystemOperation.Stat
-        case 3:
-            return FilesystemOperation.ReadDir
-        case 4:
-            return FilesystemOperation.Mkdir
-        case 5:
-            return FilesystemOperation.Remove
-        case 6:
-            return FilesystemOperation.Rename
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeFilesystemOperation(bc: bare.ByteCursor, x: FilesystemOperation): void {
-    switch (x) {
-        case FilesystemOperation.Read: {
-            bare.writeU8(bc, 0)
-            break
-        }
-        case FilesystemOperation.Write: {
-            bare.writeU8(bc, 1)
-            break
-        }
-        case FilesystemOperation.Stat: {
-            bare.writeU8(bc, 2)
-            break
-        }
-        case FilesystemOperation.ReadDir: {
-            bare.writeU8(bc, 3)
-            break
-        }
-        case FilesystemOperation.Mkdir: {
-            bare.writeU8(bc, 4)
-            break
-        }
-        case FilesystemOperation.Remove: {
-            bare.writeU8(bc, 5)
-            break
-        }
-        case FilesystemOperation.Rename: {
-            bare.writeU8(bc, 6)
-            break
-        }
-    }
-}
-
-export type HostFilesystemCallRequest = {
-    readonly operation: FilesystemOperation
-    readonly path: string
-    readonly payloadSizeBytes: u64
-}
-
-export function readHostFilesystemCallRequest(bc: bare.ByteCursor): HostFilesystemCallRequest {
-    return {
-        operation: readFilesystemOperation(bc),
-        path: bare.readString(bc),
-        payloadSizeBytes: bare.readU64(bc),
-    }
-}
-
-export function writeHostFilesystemCallRequest(bc: bare.ByteCursor, x: HostFilesystemCallRequest): void {
-    writeFilesystemOperation(bc, x.operation)
-    bare.writeString(bc, x.path)
-    bare.writeU64(bc, x.payloadSizeBytes)
-}
-
-export type PersistenceLoadRequest = {
-    readonly key: string
-}
-
-export function readPersistenceLoadRequest(bc: bare.ByteCursor): PersistenceLoadRequest {
-    return {
-        key: bare.readString(bc),
-    }
-}
-
-export function writePersistenceLoadRequest(bc: bare.ByteCursor, x: PersistenceLoadRequest): void {
-    bare.writeString(bc, x.key)
-}
-
-export type PersistenceFlushRequest = {
-    readonly key: string
-    readonly payloadSizeBytes: u64
-}
-
-export function readPersistenceFlushRequest(bc: bare.ByteCursor): PersistenceFlushRequest {
-    return {
-        key: bare.readString(bc),
-        payloadSizeBytes: bare.readU64(bc),
-    }
-}
-
-export function writePersistenceFlushRequest(bc: bare.ByteCursor, x: PersistenceFlushRequest): void {
-    bare.writeString(bc, x.key)
-    bare.writeU64(bc, x.payloadSizeBytes)
-}
-
-export type VmFetchRequest = {
-    readonly port: u16
-    readonly method: string
-    readonly path: string
-    readonly headersJson: string
-    readonly body: string | null
-}
-
-export function readVmFetchRequest(bc: bare.ByteCursor): VmFetchRequest {
-    return {
-        port: bare.readU16(bc),
-        method: bare.readString(bc),
-        path: bare.readString(bc),
-        headersJson: bare.readString(bc),
-        body: read0(bc),
-    }
-}
-
-export function writeVmFetchRequest(bc: bare.ByteCursor, x: VmFetchRequest): void {
-    bare.writeU16(bc, x.port)
-    bare.writeString(bc, x.method)
-    bare.writeString(bc, x.path)
-    bare.writeString(bc, x.headersJson)
-    write0(bc, x.body)
-}
-
-export type RequestPayload =
-    | { readonly tag: "AuthenticateRequest"; readonly val: AuthenticateRequest }
-    | { readonly tag: "OpenSessionRequest"; readonly val: OpenSessionRequest }
-    | { readonly tag: "CreateVmRequest"; readonly val: CreateVmRequest }
-    | { readonly tag: "DisposeVmRequest"; readonly val: DisposeVmRequest }
-    | { readonly tag: "BootstrapRootFilesystemRequest"; readonly val: BootstrapRootFilesystemRequest }
-    | { readonly tag: "ConfigureVmRequest"; readonly val: ConfigureVmRequest }
-    | { readonly tag: "RegisterHostCallbacksRequest"; readonly val: RegisterHostCallbacksRequest }
-    | { readonly tag: "CreateLayerRequest"; readonly val: CreateLayerRequest }
-    | { readonly tag: "SealLayerRequest"; readonly val: SealLayerRequest }
-    | { readonly tag: "ImportSnapshotRequest"; readonly val: ImportSnapshotRequest }
-    | { readonly tag: "ExportSnapshotRequest"; readonly val: ExportSnapshotRequest }
-    | { readonly tag: "CreateOverlayRequest"; readonly val: CreateOverlayRequest }
-    | { readonly tag: "GuestFilesystemCallRequest"; readonly val: GuestFilesystemCallRequest }
-    | { readonly tag: "SnapshotRootFilesystemRequest"; readonly val: SnapshotRootFilesystemRequest }
-    | { readonly tag: "ExecuteRequest"; readonly val: ExecuteRequest }
-    | { readonly tag: "WriteStdinRequest"; readonly val: WriteStdinRequest }
-    | { readonly tag: "CloseStdinRequest"; readonly val: CloseStdinRequest }
-    | { readonly tag: "KillProcessRequest"; readonly val: KillProcessRequest }
-    | { readonly tag: "GetProcessSnapshotRequest"; readonly val: GetProcessSnapshotRequest }
-    | { readonly tag: "FindListenerRequest"; readonly val: FindListenerRequest }
-    | { readonly tag: "FindBoundUdpRequest"; readonly val: FindBoundUdpRequest }
-    | { readonly tag: "GetSignalStateRequest"; readonly val: GetSignalStateRequest }
-    | { readonly tag: "GetZombieTimerCountRequest"; readonly val: GetZombieTimerCountRequest }
-    | { readonly tag: "HostFilesystemCallRequest"; readonly val: HostFilesystemCallRequest }
-    | { readonly tag: "PersistenceLoadRequest"; readonly val: PersistenceLoadRequest }
-    | { readonly tag: "PersistenceFlushRequest"; readonly val: PersistenceFlushRequest }
-    | { readonly tag: "VmFetchRequest"; readonly val: VmFetchRequest }
-    | { readonly tag: "ExtEnvelope"; readonly val: ExtEnvelope }
-    | { readonly tag: "GuestKernelCallRequest"; readonly val: GuestKernelCallRequest }
-    | { readonly tag: "ResizePtyRequest"; readonly val: ResizePtyRequest }
-    | { readonly tag: "GetResourceSnapshotRequest"; readonly val: GetResourceSnapshotRequest }
-    | { readonly tag: "LinkPackageRequest"; readonly val: LinkPackageRequest }
-    | { readonly tag: "ProvidedCommandsRequest"; readonly val: ProvidedCommandsRequest }
-
-export function readRequestPayload(bc: bare.ByteCursor): RequestPayload {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return { tag: "AuthenticateRequest", val: readAuthenticateRequest(bc) }
-        case 1:
-            return { tag: "OpenSessionRequest", val: readOpenSessionRequest(bc) }
-        case 2:
-            return { tag: "CreateVmRequest", val: readCreateVmRequest(bc) }
-        case 3:
-            return { tag: "DisposeVmRequest", val: readDisposeVmRequest(bc) }
-        case 4:
-            return { tag: "BootstrapRootFilesystemRequest", val: readBootstrapRootFilesystemRequest(bc) }
-        case 5:
-            return { tag: "ConfigureVmRequest", val: readConfigureVmRequest(bc) }
-        case 6:
-            return { tag: "RegisterHostCallbacksRequest", val: readRegisterHostCallbacksRequest(bc) }
-        case 7:
-            return { tag: "CreateLayerRequest", val: null }
-        case 8:
-            return { tag: "SealLayerRequest", val: readSealLayerRequest(bc) }
-        case 9:
-            return { tag: "ImportSnapshotRequest", val: readImportSnapshotRequest(bc) }
-        case 10:
-            return { tag: "ExportSnapshotRequest", val: readExportSnapshotRequest(bc) }
-        case 11:
-            return { tag: "CreateOverlayRequest", val: readCreateOverlayRequest(bc) }
-        case 12:
-            return { tag: "GuestFilesystemCallRequest", val: readGuestFilesystemCallRequest(bc) }
-        case 13:
-            return { tag: "SnapshotRootFilesystemRequest", val: null }
-        case 14:
-            return { tag: "ExecuteRequest", val: readExecuteRequest(bc) }
-        case 15:
-            return { tag: "WriteStdinRequest", val: readWriteStdinRequest(bc) }
-        case 16:
-            return { tag: "CloseStdinRequest", val: readCloseStdinRequest(bc) }
-        case 17:
-            return { tag: "KillProcessRequest", val: readKillProcessRequest(bc) }
-        case 18:
-            return { tag: "GetProcessSnapshotRequest", val: null }
-        case 19:
-            return { tag: "FindListenerRequest", val: readFindListenerRequest(bc) }
-        case 20:
-            return { tag: "FindBoundUdpRequest", val: readFindBoundUdpRequest(bc) }
-        case 21:
-            return { tag: "GetSignalStateRequest", val: readGetSignalStateRequest(bc) }
-        case 22:
-            return { tag: "GetZombieTimerCountRequest", val: null }
-        case 23:
-            return { tag: "HostFilesystemCallRequest", val: readHostFilesystemCallRequest(bc) }
-        case 24:
-            return { tag: "PersistenceLoadRequest", val: readPersistenceLoadRequest(bc) }
-        case 25:
-            return { tag: "PersistenceFlushRequest", val: readPersistenceFlushRequest(bc) }
-        case 26:
-            return { tag: "VmFetchRequest", val: readVmFetchRequest(bc) }
-        case 27:
-            return { tag: "ExtEnvelope", val: readExtEnvelope(bc) }
-        case 28:
-            return { tag: "GuestKernelCallRequest", val: readGuestKernelCallRequest(bc) }
-        case 29:
-            return { tag: "ResizePtyRequest", val: readResizePtyRequest(bc) }
-        case 30:
-            return { tag: "GetResourceSnapshotRequest", val: null }
-        case 31:
-            return { tag: "LinkPackageRequest", val: readLinkPackageRequest(bc) }
-        case 32:
-            return { tag: "ProvidedCommandsRequest", val: null }
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeRequestPayload(bc: bare.ByteCursor, x: RequestPayload): void {
-    switch (x.tag) {
-        case "AuthenticateRequest": {
-            bare.writeU8(bc, 0)
-            writeAuthenticateRequest(bc, x.val)
-            break
-        }
-        case "OpenSessionRequest": {
-            bare.writeU8(bc, 1)
-            writeOpenSessionRequest(bc, x.val)
-            break
-        }
-        case "CreateVmRequest": {
-            bare.writeU8(bc, 2)
-            writeCreateVmRequest(bc, x.val)
-            break
-        }
-        case "DisposeVmRequest": {
-            bare.writeU8(bc, 3)
-            writeDisposeVmRequest(bc, x.val)
-            break
-        }
-        case "BootstrapRootFilesystemRequest": {
-            bare.writeU8(bc, 4)
-            writeBootstrapRootFilesystemRequest(bc, x.val)
-            break
-        }
-        case "ConfigureVmRequest": {
-            bare.writeU8(bc, 5)
-            writeConfigureVmRequest(bc, x.val)
-            break
-        }
-        case "RegisterHostCallbacksRequest": {
-            bare.writeU8(bc, 6)
-            writeRegisterHostCallbacksRequest(bc, x.val)
-            break
-        }
-        case "CreateLayerRequest": {
-            bare.writeU8(bc, 7)
-            break
-        }
-        case "SealLayerRequest": {
-            bare.writeU8(bc, 8)
-            writeSealLayerRequest(bc, x.val)
-            break
-        }
-        case "ImportSnapshotRequest": {
-            bare.writeU8(bc, 9)
-            writeImportSnapshotRequest(bc, x.val)
-            break
-        }
-        case "ExportSnapshotRequest": {
-            bare.writeU8(bc, 10)
-            writeExportSnapshotRequest(bc, x.val)
-            break
-        }
-        case "CreateOverlayRequest": {
-            bare.writeU8(bc, 11)
-            writeCreateOverlayRequest(bc, x.val)
-            break
-        }
-        case "GuestFilesystemCallRequest": {
-            bare.writeU8(bc, 12)
-            writeGuestFilesystemCallRequest(bc, x.val)
-            break
-        }
-        case "SnapshotRootFilesystemRequest": {
-            bare.writeU8(bc, 13)
-            break
-        }
-        case "ExecuteRequest": {
-            bare.writeU8(bc, 14)
-            writeExecuteRequest(bc, x.val)
-            break
-        }
-        case "WriteStdinRequest": {
-            bare.writeU8(bc, 15)
-            writeWriteStdinRequest(bc, x.val)
-            break
-        }
-        case "CloseStdinRequest": {
-            bare.writeU8(bc, 16)
-            writeCloseStdinRequest(bc, x.val)
-            break
-        }
-        case "KillProcessRequest": {
-            bare.writeU8(bc, 17)
-            writeKillProcessRequest(bc, x.val)
-            break
-        }
-        case "GetProcessSnapshotRequest": {
-            bare.writeU8(bc, 18)
-            break
-        }
-        case "FindListenerRequest": {
-            bare.writeU8(bc, 19)
-            writeFindListenerRequest(bc, x.val)
-            break
-        }
-        case "FindBoundUdpRequest": {
-            bare.writeU8(bc, 20)
-            writeFindBoundUdpRequest(bc, x.val)
-            break
-        }
-        case "GetSignalStateRequest": {
-            bare.writeU8(bc, 21)
-            writeGetSignalStateRequest(bc, x.val)
-            break
-        }
-        case "GetZombieTimerCountRequest": {
-            bare.writeU8(bc, 22)
-            break
-        }
-        case "HostFilesystemCallRequest": {
-            bare.writeU8(bc, 23)
-            writeHostFilesystemCallRequest(bc, x.val)
-            break
-        }
-        case "PersistenceLoadRequest": {
-            bare.writeU8(bc, 24)
-            writePersistenceLoadRequest(bc, x.val)
-            break
-        }
-        case "PersistenceFlushRequest": {
-            bare.writeU8(bc, 25)
-            writePersistenceFlushRequest(bc, x.val)
-            break
-        }
-        case "VmFetchRequest": {
-            bare.writeU8(bc, 26)
-            writeVmFetchRequest(bc, x.val)
-            break
-        }
-        case "ExtEnvelope": {
-            bare.writeU8(bc, 27)
-            writeExtEnvelope(bc, x.val)
-            break
-        }
-        case "GuestKernelCallRequest": {
-            bare.writeU8(bc, 28)
-            writeGuestKernelCallRequest(bc, x.val)
-            break
-        }
-        case "ResizePtyRequest": {
-            bare.writeU8(bc, 29)
-            writeResizePtyRequest(bc, x.val)
-            break
-        }
-        case "GetResourceSnapshotRequest": {
-            bare.writeU8(bc, 30)
-            break
-        }
-        case "LinkPackageRequest": {
-            bare.writeU8(bc, 31)
-            writeLinkPackageRequest(bc, x.val)
-            break
-        }
-        case "ProvidedCommandsRequest": {
-            bare.writeU8(bc, 32)
-            break
-        }
-    }
-}
-
-export type RequestFrame = {
-    readonly schema: ProtocolSchema
-    readonly requestId: RequestId
-    readonly ownership: OwnershipScope
-    readonly payload: RequestPayload
-}
-
-export function readRequestFrame(bc: bare.ByteCursor): RequestFrame {
-    return {
-        schema: readProtocolSchema(bc),
-        requestId: readRequestId(bc),
-        ownership: readOwnershipScope(bc),
-        payload: readRequestPayload(bc),
-    }
-}
-
-export function writeRequestFrame(bc: bare.ByteCursor, x: RequestFrame): void {
-    writeProtocolSchema(bc, x.schema)
-    writeRequestId(bc, x.requestId)
-    writeOwnershipScope(bc, x.ownership)
-    writeRequestPayload(bc, x.payload)
-}
-
-export type AuthenticatedResponse = {
-    readonly sidecarId: string
-    readonly connectionId: string
-    readonly maxFrameBytes: u32
-}
-
-export function readAuthenticatedResponse(bc: bare.ByteCursor): AuthenticatedResponse {
-    return {
-        sidecarId: bare.readString(bc),
-        connectionId: bare.readString(bc),
-        maxFrameBytes: bare.readU32(bc),
-    }
-}
-
-export function writeAuthenticatedResponse(bc: bare.ByteCursor, x: AuthenticatedResponse): void {
-    bare.writeString(bc, x.sidecarId)
-    bare.writeString(bc, x.connectionId)
-    bare.writeU32(bc, x.maxFrameBytes)
-}
-
-export type SessionOpenedResponse = {
-    readonly sessionId: string
-    readonly ownerConnectionId: string
-}
-
-export function readSessionOpenedResponse(bc: bare.ByteCursor): SessionOpenedResponse {
-    return {
-        sessionId: bare.readString(bc),
-        ownerConnectionId: bare.readString(bc),
-    }
-}
-
-export function writeSessionOpenedResponse(bc: bare.ByteCursor, x: SessionOpenedResponse): void {
-    bare.writeString(bc, x.sessionId)
-    bare.writeString(bc, x.ownerConnectionId)
-}
-
-export type VmCreatedResponse = {
-    readonly vmId: string
-}
-
-export function readVmCreatedResponse(bc: bare.ByteCursor): VmCreatedResponse {
-    return {
-        vmId: bare.readString(bc),
-    }
-}
-
-export function writeVmCreatedResponse(bc: bare.ByteCursor, x: VmCreatedResponse): void {
-    bare.writeString(bc, x.vmId)
-}
-
-export type VmDisposedResponse = {
-    readonly vmId: string
-}
-
-export function readVmDisposedResponse(bc: bare.ByteCursor): VmDisposedResponse {
-    return {
-        vmId: bare.readString(bc),
-    }
-}
-
-export function writeVmDisposedResponse(bc: bare.ByteCursor, x: VmDisposedResponse): void {
-    bare.writeString(bc, x.vmId)
-}
-
-export type RootFilesystemBootstrappedResponse = {
-    readonly entryCount: u32
-}
-
-export function readRootFilesystemBootstrappedResponse(bc: bare.ByteCursor): RootFilesystemBootstrappedResponse {
-    return {
-        entryCount: bare.readU32(bc),
-    }
-}
-
-export function writeRootFilesystemBootstrappedResponse(bc: bare.ByteCursor, x: RootFilesystemBootstrappedResponse): void {
-    bare.writeU32(bc, x.entryCount)
-}
-
-export type VmConfiguredResponse = {
-    readonly appliedMounts: u32
-    readonly appliedSoftware: u32
-    readonly projectedCommands: readonly ProjectedCommand[]
-    readonly agents: readonly AgentosProjectedAgent[]
-}
-
-export function readVmConfiguredResponse(bc: bare.ByteCursor): VmConfiguredResponse {
-    return {
-        appliedMounts: bare.readU32(bc),
-        appliedSoftware: bare.readU32(bc),
-        projectedCommands: read13(bc),
-        agents: read14(bc),
-    }
-}
-
-export function writeVmConfiguredResponse(bc: bare.ByteCursor, x: VmConfiguredResponse): void {
-    bare.writeU32(bc, x.appliedMounts)
-    bare.writeU32(bc, x.appliedSoftware)
-    write13(bc, x.projectedCommands)
-    write14(bc, x.agents)
-}
-
-export type HostCallbacksRegisteredResponse = {
-    readonly registration: string
-    readonly commandCount: u32
-}
-
-export function readHostCallbacksRegisteredResponse(bc: bare.ByteCursor): HostCallbacksRegisteredResponse {
-    return {
-        registration: bare.readString(bc),
-        commandCount: bare.readU32(bc),
-    }
-}
-
-export function writeHostCallbacksRegisteredResponse(bc: bare.ByteCursor, x: HostCallbacksRegisteredResponse): void {
-    bare.writeString(bc, x.registration)
-    bare.writeU32(bc, x.commandCount)
-}
-
-export type LayerCreatedResponse = {
-    readonly layerId: string
-}
-
-export function readLayerCreatedResponse(bc: bare.ByteCursor): LayerCreatedResponse {
-    return {
-        layerId: bare.readString(bc),
-    }
-}
-
-export function writeLayerCreatedResponse(bc: bare.ByteCursor, x: LayerCreatedResponse): void {
-    bare.writeString(bc, x.layerId)
-}
-
-export type LayerSealedResponse = {
-    readonly layerId: string
-}
-
-export function readLayerSealedResponse(bc: bare.ByteCursor): LayerSealedResponse {
-    return {
-        layerId: bare.readString(bc),
-    }
-}
-
-export function writeLayerSealedResponse(bc: bare.ByteCursor, x: LayerSealedResponse): void {
-    bare.writeString(bc, x.layerId)
-}
-
-export type SnapshotImportedResponse = {
-    readonly layerId: string
-}
-
-export function readSnapshotImportedResponse(bc: bare.ByteCursor): SnapshotImportedResponse {
-    return {
-        layerId: bare.readString(bc),
-    }
-}
-
-export function writeSnapshotImportedResponse(bc: bare.ByteCursor, x: SnapshotImportedResponse): void {
-    bare.writeString(bc, x.layerId)
-}
-
-export type SnapshotExportedResponse = {
-    readonly layerId: string
-    readonly entries: readonly RootFilesystemEntry[]
-}
-
-export function readSnapshotExportedResponse(bc: bare.ByteCursor): SnapshotExportedResponse {
-    return {
-        layerId: bare.readString(bc),
-        entries: read4(bc),
-    }
-}
-
-export function writeSnapshotExportedResponse(bc: bare.ByteCursor, x: SnapshotExportedResponse): void {
-    bare.writeString(bc, x.layerId)
-    write4(bc, x.entries)
-}
-
-export type OverlayCreatedResponse = {
-    readonly layerId: string
-}
-
-export function readOverlayCreatedResponse(bc: bare.ByteCursor): OverlayCreatedResponse {
-    return {
-        layerId: bare.readString(bc),
-    }
-}
-
-export function writeOverlayCreatedResponse(bc: bare.ByteCursor, x: OverlayCreatedResponse): void {
-    bare.writeString(bc, x.layerId)
-}
-
-export type GuestFilesystemStat = {
-    readonly mode: u32
-    readonly size: u64
-    readonly blocks: u64
-    readonly dev: u64
-    readonly rdev: u64
-    readonly isDirectory: boolean
-    readonly isSymbolicLink: boolean
-    readonly atimeMs: u64
-    readonly mtimeMs: u64
-    readonly ctimeMs: u64
-    readonly birthtimeMs: u64
-    readonly ino: u64
-    readonly nlink: u64
-    readonly uid: u32
-    readonly gid: u32
-}
-
-export function readGuestFilesystemStat(bc: bare.ByteCursor): GuestFilesystemStat {
-    return {
-        mode: bare.readU32(bc),
-        size: bare.readU64(bc),
-        blocks: bare.readU64(bc),
-        dev: bare.readU64(bc),
-        rdev: bare.readU64(bc),
-        isDirectory: bare.readBool(bc),
-        isSymbolicLink: bare.readBool(bc),
-        atimeMs: bare.readU64(bc),
-        mtimeMs: bare.readU64(bc),
-        ctimeMs: bare.readU64(bc),
-        birthtimeMs: bare.readU64(bc),
-        ino: bare.readU64(bc),
-        nlink: bare.readU64(bc),
-        uid: bare.readU32(bc),
-        gid: bare.readU32(bc),
-    }
-}
-
-export function writeGuestFilesystemStat(bc: bare.ByteCursor, x: GuestFilesystemStat): void {
-    bare.writeU32(bc, x.mode)
-    bare.writeU64(bc, x.size)
-    bare.writeU64(bc, x.blocks)
-    bare.writeU64(bc, x.dev)
-    bare.writeU64(bc, x.rdev)
-    bare.writeBool(bc, x.isDirectory)
-    bare.writeBool(bc, x.isSymbolicLink)
-    bare.writeU64(bc, x.atimeMs)
-    bare.writeU64(bc, x.mtimeMs)
-    bare.writeU64(bc, x.ctimeMs)
-    bare.writeU64(bc, x.birthtimeMs)
-    bare.writeU64(bc, x.ino)
-    bare.writeU64(bc, x.nlink)
-    bare.writeU32(bc, x.uid)
-    bare.writeU32(bc, x.gid)
-}
-
-export type GuestDirEntry = {
-    readonly name: string
-    readonly path: string
-    readonly isDirectory: boolean
-    readonly isSymbolicLink: boolean
-    readonly size: u64
-}
-
-export function readGuestDirEntry(bc: bare.ByteCursor): GuestDirEntry {
-    return {
-        name: bare.readString(bc),
-        path: bare.readString(bc),
-        isDirectory: bare.readBool(bc),
-        isSymbolicLink: bare.readBool(bc),
-        size: bare.readU64(bc),
-    }
-}
-
-export function writeGuestDirEntry(bc: bare.ByteCursor, x: GuestDirEntry): void {
-    bare.writeString(bc, x.name)
-    bare.writeString(bc, x.path)
-    bare.writeBool(bc, x.isDirectory)
-    bare.writeBool(bc, x.isSymbolicLink)
-    bare.writeU64(bc, x.size)
-}
-
-function read27(bc: bare.ByteCursor): readonly GuestDirEntry[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readGuestDirEntry(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readGuestDirEntry(bc)
-    }
-    return result
-}
-
-function write27(bc: bare.ByteCursor, x: readonly GuestDirEntry[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writeGuestDirEntry(bc, x[i])
-    }
-}
-
-function read28(bc: bare.ByteCursor): readonly GuestDirEntry[] | null {
-    return bare.readBool(bc) ? read27(bc) : null
-}
-
-function write28(bc: bare.ByteCursor, x: readonly GuestDirEntry[] | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        write27(bc, x)
-    }
-}
-
-function read29(bc: bare.ByteCursor): GuestFilesystemStat | null {
-    return bare.readBool(bc) ? readGuestFilesystemStat(bc) : null
-}
-
-function write29(bc: bare.ByteCursor, x: GuestFilesystemStat | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        writeGuestFilesystemStat(bc, x)
-    }
-}
-
-function read30(bc: bare.ByteCursor): boolean | null {
-    return bare.readBool(bc) ? bare.readBool(bc) : null
-}
-
-function write30(bc: bare.ByteCursor, x: boolean | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        bare.writeBool(bc, x)
-    }
-}
-
-export type GuestFilesystemResultResponse = {
-    readonly operation: GuestFilesystemOperation
-    readonly path: string
-    readonly content: string | null
-    readonly encoding: RootFilesystemEntryEncoding | null
-    readonly entries: readonly GuestDirEntry[] | null
-    readonly stat: GuestFilesystemStat | null
-    readonly exists: boolean | null
-    readonly target: string | null
-}
-
-export function readGuestFilesystemResultResponse(bc: bare.ByteCursor): GuestFilesystemResultResponse {
-    return {
-        operation: readGuestFilesystemOperation(bc),
-        path: bare.readString(bc),
-        content: read0(bc),
-        encoding: read3(bc),
-        entries: read28(bc),
-        stat: read29(bc),
-        exists: read30(bc),
-        target: read0(bc),
-    }
-}
-
-export function writeGuestFilesystemResultResponse(bc: bare.ByteCursor, x: GuestFilesystemResultResponse): void {
-    writeGuestFilesystemOperation(bc, x.operation)
-    bare.writeString(bc, x.path)
-    write0(bc, x.content)
-    write3(bc, x.encoding)
-    write28(bc, x.entries)
-    write29(bc, x.stat)
-    write30(bc, x.exists)
-    write0(bc, x.target)
-}
-
-export type GuestKernelResultResponse = {
-    readonly payload: ArrayBuffer
-}
-
-export function readGuestKernelResultResponse(bc: bare.ByteCursor): GuestKernelResultResponse {
-    return {
-        payload: bare.readData(bc),
-    }
-}
-
-export function writeGuestKernelResultResponse(bc: bare.ByteCursor, x: GuestKernelResultResponse): void {
-    bare.writeData(bc, x.payload)
-}
-
-export type RootFilesystemSnapshotResponse = {
-    readonly entries: readonly RootFilesystemEntry[]
-}
-
-export function readRootFilesystemSnapshotResponse(bc: bare.ByteCursor): RootFilesystemSnapshotResponse {
-    return {
-        entries: read4(bc),
-    }
-}
-
-export function writeRootFilesystemSnapshotResponse(bc: bare.ByteCursor, x: RootFilesystemSnapshotResponse): void {
-    write4(bc, x.entries)
-}
-
-export type ProcessStartedResponse = {
-    readonly processId: string
-    readonly pid: u32 | null
-}
-
-export function readProcessStartedResponse(bc: bare.ByteCursor): ProcessStartedResponse {
-    return {
-        processId: bare.readString(bc),
-        pid: read2(bc),
-    }
-}
-
-export function writeProcessStartedResponse(bc: bare.ByteCursor, x: ProcessStartedResponse): void {
-    bare.writeString(bc, x.processId)
-    write2(bc, x.pid)
-}
-
-export type StdinWrittenResponse = {
-    readonly processId: string
-    readonly acceptedBytes: u64
-}
-
-export function readStdinWrittenResponse(bc: bare.ByteCursor): StdinWrittenResponse {
-    return {
-        processId: bare.readString(bc),
-        acceptedBytes: bare.readU64(bc),
-    }
-}
-
-export function writeStdinWrittenResponse(bc: bare.ByteCursor, x: StdinWrittenResponse): void {
-    bare.writeString(bc, x.processId)
-    bare.writeU64(bc, x.acceptedBytes)
-}
-
-export type PtyResizedResponse = {
-    readonly processId: string
-    readonly cols: u16
-    readonly rows: u16
-}
-
-export function readPtyResizedResponse(bc: bare.ByteCursor): PtyResizedResponse {
-    return {
-        processId: bare.readString(bc),
-        cols: bare.readU16(bc),
-        rows: bare.readU16(bc),
-    }
-}
-
-export function writePtyResizedResponse(bc: bare.ByteCursor, x: PtyResizedResponse): void {
-    bare.writeString(bc, x.processId)
-    bare.writeU16(bc, x.cols)
-    bare.writeU16(bc, x.rows)
-}
-
-export type StdinClosedResponse = {
-    readonly processId: string
-}
-
-export function readStdinClosedResponse(bc: bare.ByteCursor): StdinClosedResponse {
-    return {
-        processId: bare.readString(bc),
-    }
-}
-
-export function writeStdinClosedResponse(bc: bare.ByteCursor, x: StdinClosedResponse): void {
-    bare.writeString(bc, x.processId)
-}
-
-export type ProcessKilledResponse = {
-    readonly processId: string
-}
-
-export function readProcessKilledResponse(bc: bare.ByteCursor): ProcessKilledResponse {
-    return {
-        processId: bare.readString(bc),
-    }
-}
-
-export function writeProcessKilledResponse(bc: bare.ByteCursor, x: ProcessKilledResponse): void {
-    bare.writeString(bc, x.processId)
-}
-
-export enum ProcessSnapshotStatus {
-    Running = "Running",
-    Exited = "Exited",
-    Stopped = "Stopped",
-}
-
-export function readProcessSnapshotStatus(bc: bare.ByteCursor): ProcessSnapshotStatus {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return ProcessSnapshotStatus.Running
-        case 1:
-            return ProcessSnapshotStatus.Exited
-        case 2:
-            return ProcessSnapshotStatus.Stopped
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeProcessSnapshotStatus(bc: bare.ByteCursor, x: ProcessSnapshotStatus): void {
-    switch (x) {
-        case ProcessSnapshotStatus.Running: {
-            bare.writeU8(bc, 0)
-            break
-        }
-        case ProcessSnapshotStatus.Exited: {
-            bare.writeU8(bc, 1)
-            break
-        }
-        case ProcessSnapshotStatus.Stopped: {
-            bare.writeU8(bc, 2)
-            break
-        }
-    }
-}
-
-function read31(bc: bare.ByteCursor): i32 | null {
-    return bare.readBool(bc) ? bare.readI32(bc) : null
-}
-
-function write31(bc: bare.ByteCursor, x: i32 | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        bare.writeI32(bc, x)
-    }
-}
-
-export type ProcessSnapshotEntry = {
-    readonly processId: string
-    readonly pid: u32
-    readonly ppid: u32
-    readonly pgid: u32
-    readonly sid: u32
-    readonly driver: string
-    readonly command: string
-    readonly args: readonly string[]
-    readonly cwd: string
-    readonly status: ProcessSnapshotStatus
-    readonly exitCode: i32 | null
-}
-
-export function readProcessSnapshotEntry(bc: bare.ByteCursor): ProcessSnapshotEntry {
-    return {
-        processId: bare.readString(bc),
-        pid: bare.readU32(bc),
-        ppid: bare.readU32(bc),
-        pgid: bare.readU32(bc),
-        sid: bare.readU32(bc),
-        driver: bare.readString(bc),
-        command: bare.readString(bc),
-        args: read6(bc),
-        cwd: bare.readString(bc),
-        status: readProcessSnapshotStatus(bc),
-        exitCode: read31(bc),
-    }
-}
-
-export function writeProcessSnapshotEntry(bc: bare.ByteCursor, x: ProcessSnapshotEntry): void {
-    bare.writeString(bc, x.processId)
-    bare.writeU32(bc, x.pid)
-    bare.writeU32(bc, x.ppid)
-    bare.writeU32(bc, x.pgid)
-    bare.writeU32(bc, x.sid)
-    bare.writeString(bc, x.driver)
-    bare.writeString(bc, x.command)
-    write6(bc, x.args)
-    bare.writeString(bc, x.cwd)
-    writeProcessSnapshotStatus(bc, x.status)
-    write31(bc, x.exitCode)
-}
-
-function read32(bc: bare.ByteCursor): readonly ProcessSnapshotEntry[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readProcessSnapshotEntry(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readProcessSnapshotEntry(bc)
-    }
-    return result
-}
-
-function write32(bc: bare.ByteCursor, x: readonly ProcessSnapshotEntry[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writeProcessSnapshotEntry(bc, x[i])
-    }
-}
-
-export type ProcessSnapshotResponse = {
-    readonly processes: readonly ProcessSnapshotEntry[]
-}
-
-export function readProcessSnapshotResponse(bc: bare.ByteCursor): ProcessSnapshotResponse {
-    return {
-        processes: read32(bc),
-    }
-}
-
-export function writeProcessSnapshotResponse(bc: bare.ByteCursor, x: ProcessSnapshotResponse): void {
-    write32(bc, x.processes)
-}
-
-export type QueueSnapshotEntry = {
-    readonly name: string
-    readonly category: string
-    readonly depth: u64
-    readonly highWater: u64
-    readonly capacity: u64
-    readonly fillPercent: u64
-}
-
-export function readQueueSnapshotEntry(bc: bare.ByteCursor): QueueSnapshotEntry {
-    return {
-        name: bare.readString(bc),
-        category: bare.readString(bc),
-        depth: bare.readU64(bc),
-        highWater: bare.readU64(bc),
-        capacity: bare.readU64(bc),
-        fillPercent: bare.readU64(bc),
-    }
-}
-
-export function writeQueueSnapshotEntry(bc: bare.ByteCursor, x: QueueSnapshotEntry): void {
-    bare.writeString(bc, x.name)
-    bare.writeString(bc, x.category)
-    bare.writeU64(bc, x.depth)
-    bare.writeU64(bc, x.highWater)
-    bare.writeU64(bc, x.capacity)
-    bare.writeU64(bc, x.fillPercent)
-}
-
-function read33(bc: bare.ByteCursor): readonly QueueSnapshotEntry[] {
-    const len = bare.readUintSafe(bc)
-    if (len === 0) {
-        return []
-    }
-    const result = [readQueueSnapshotEntry(bc)]
-    for (let i = 1; i < len; i++) {
-        result[i] = readQueueSnapshotEntry(bc)
-    }
-    return result
-}
-
-function write33(bc: bare.ByteCursor, x: readonly QueueSnapshotEntry[]): void {
-    bare.writeUintSafe(bc, x.length)
-    for (let i = 0; i < x.length; i++) {
-        writeQueueSnapshotEntry(bc, x[i])
-    }
-}
-
-export type ResourceSnapshotResponse = {
-    readonly runningProcesses: u64
-    readonly exitedProcesses: u64
-    readonly fdTables: u64
-    readonly openFds: u64
-    readonly pipes: u64
-    readonly pipeBufferedBytes: u64
-    readonly ptys: u64
-    readonly ptyBufferedInputBytes: u64
-    readonly ptyBufferedOutputBytes: u64
-    readonly sockets: u64
-    readonly socketListeners: u64
-    readonly socketConnections: u64
-    readonly socketBufferedBytes: u64
-    readonly socketDatagramQueueLen: u64
-    readonly queueSnapshots: readonly QueueSnapshotEntry[]
-}
-
-export function readResourceSnapshotResponse(bc: bare.ByteCursor): ResourceSnapshotResponse {
-    return {
-        runningProcesses: bare.readU64(bc),
-        exitedProcesses: bare.readU64(bc),
-        fdTables: bare.readU64(bc),
-        openFds: bare.readU64(bc),
-        pipes: bare.readU64(bc),
-        pipeBufferedBytes: bare.readU64(bc),
-        ptys: bare.readU64(bc),
-        ptyBufferedInputBytes: bare.readU64(bc),
-        ptyBufferedOutputBytes: bare.readU64(bc),
-        sockets: bare.readU64(bc),
-        socketListeners: bare.readU64(bc),
-        socketConnections: bare.readU64(bc),
-        socketBufferedBytes: bare.readU64(bc),
-        socketDatagramQueueLen: bare.readU64(bc),
-        queueSnapshots: read33(bc),
-    }
-}
-
-export function writeResourceSnapshotResponse(bc: bare.ByteCursor, x: ResourceSnapshotResponse): void {
-    bare.writeU64(bc, x.runningProcesses)
-    bare.writeU64(bc, x.exitedProcesses)
-    bare.writeU64(bc, x.fdTables)
-    bare.writeU64(bc, x.openFds)
-    bare.writeU64(bc, x.pipes)
-    bare.writeU64(bc, x.pipeBufferedBytes)
-    bare.writeU64(bc, x.ptys)
-    bare.writeU64(bc, x.ptyBufferedInputBytes)
-    bare.writeU64(bc, x.ptyBufferedOutputBytes)
-    bare.writeU64(bc, x.sockets)
-    bare.writeU64(bc, x.socketListeners)
-    bare.writeU64(bc, x.socketConnections)
-    bare.writeU64(bc, x.socketBufferedBytes)
-    bare.writeU64(bc, x.socketDatagramQueueLen)
-    write33(bc, x.queueSnapshots)
-}
-
-export type SocketStateEntry = {
-    readonly processId: string
-    readonly host: string | null
-    readonly port: u16 | null
-    readonly path: string | null
-}
-
-export function readSocketStateEntry(bc: bare.ByteCursor): SocketStateEntry {
-    return {
-        processId: bare.readString(bc),
-        host: read0(bc),
-        port: read26(bc),
-        path: read0(bc),
-    }
-}
-
-export function writeSocketStateEntry(bc: bare.ByteCursor, x: SocketStateEntry): void {
-    bare.writeString(bc, x.processId)
-    write0(bc, x.host)
-    write26(bc, x.port)
-    write0(bc, x.path)
-}
-
-function read34(bc: bare.ByteCursor): SocketStateEntry | null {
-    return bare.readBool(bc) ? readSocketStateEntry(bc) : null
-}
-
-function write34(bc: bare.ByteCursor, x: SocketStateEntry | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        writeSocketStateEntry(bc, x)
-    }
-}
-
-export type ListenerSnapshotResponse = {
-    readonly listener: SocketStateEntry | null
-}
-
-export function readListenerSnapshotResponse(bc: bare.ByteCursor): ListenerSnapshotResponse {
-    return {
-        listener: read34(bc),
-    }
-}
-
-export function writeListenerSnapshotResponse(bc: bare.ByteCursor, x: ListenerSnapshotResponse): void {
-    write34(bc, x.listener)
-}
-
-export type BoundUdpSnapshotResponse = {
-    readonly socket: SocketStateEntry | null
-}
-
-export function readBoundUdpSnapshotResponse(bc: bare.ByteCursor): BoundUdpSnapshotResponse {
-    return {
-        socket: read34(bc),
-    }
-}
-
-export function writeBoundUdpSnapshotResponse(bc: bare.ByteCursor, x: BoundUdpSnapshotResponse): void {
-    write34(bc, x.socket)
-}
-
-export enum SignalDispositionAction {
-    Default = "Default",
-    Ignore = "Ignore",
-    User = "User",
-}
-
-export function readSignalDispositionAction(bc: bare.ByteCursor): SignalDispositionAction {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return SignalDispositionAction.Default
-        case 1:
-            return SignalDispositionAction.Ignore
-        case 2:
-            return SignalDispositionAction.User
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeSignalDispositionAction(bc: bare.ByteCursor, x: SignalDispositionAction): void {
-    switch (x) {
-        case SignalDispositionAction.Default: {
-            bare.writeU8(bc, 0)
-            break
-        }
-        case SignalDispositionAction.Ignore: {
-            bare.writeU8(bc, 1)
-            break
-        }
-        case SignalDispositionAction.User: {
-            bare.writeU8(bc, 2)
-            break
-        }
-    }
-}
-
-export type SignalHandlerRegistration = {
-    readonly action: SignalDispositionAction
-    readonly mask: Uint32Array
-    readonly flags: u32
-}
-
-export function readSignalHandlerRegistration(bc: bare.ByteCursor): SignalHandlerRegistration {
-    return {
-        action: readSignalDispositionAction(bc),
-        mask: bare.readU32Array(bc),
-        flags: bare.readU32(bc),
-    }
-}
-
-export function writeSignalHandlerRegistration(bc: bare.ByteCursor, x: SignalHandlerRegistration): void {
-    writeSignalDispositionAction(bc, x.action)
-    bare.writeU32Array(bc, x.mask)
-    bare.writeU32(bc, x.flags)
-}
-
-function read35(bc: bare.ByteCursor): ReadonlyMap<u32, SignalHandlerRegistration> {
-    const len = bare.readUintSafe(bc)
-    const result = new Map<u32, SignalHandlerRegistration>()
-    for (let i = 0; i < len; i++) {
-        const offset = bc.offset
-        const key = bare.readU32(bc)
-        if (result.has(key)) {
-            bc.offset = offset
-            throw new bare.BareError(offset, "duplicated key")
-        }
-        result.set(key, readSignalHandlerRegistration(bc))
-    }
-    return result
-}
-
-function write35(bc: bare.ByteCursor, x: ReadonlyMap<u32, SignalHandlerRegistration>): void {
-    bare.writeUintSafe(bc, x.size)
-    for (const kv of x) {
-        bare.writeU32(bc, kv[0])
-        writeSignalHandlerRegistration(bc, kv[1])
-    }
-}
-
-export type SignalStateResponse = {
-    readonly processId: string
-    readonly handlers: ReadonlyMap<u32, SignalHandlerRegistration>
-}
-
-export function readSignalStateResponse(bc: bare.ByteCursor): SignalStateResponse {
-    return {
-        processId: bare.readString(bc),
-        handlers: read35(bc),
-    }
-}
-
-export function writeSignalStateResponse(bc: bare.ByteCursor, x: SignalStateResponse): void {
-    bare.writeString(bc, x.processId)
-    write35(bc, x.handlers)
-}
-
-export type ZombieTimerCountResponse = {
-    readonly count: u64
-}
-
-export function readZombieTimerCountResponse(bc: bare.ByteCursor): ZombieTimerCountResponse {
-    return {
-        count: bare.readU64(bc),
-    }
-}
-
-export function writeZombieTimerCountResponse(bc: bare.ByteCursor, x: ZombieTimerCountResponse): void {
-    bare.writeU64(bc, x.count)
-}
-
-export type FilesystemResultResponse = {
-    readonly operation: FilesystemOperation
-    readonly status: string
-    readonly payloadSizeBytes: u64
-}
-
-export function readFilesystemResultResponse(bc: bare.ByteCursor): FilesystemResultResponse {
-    return {
-        operation: readFilesystemOperation(bc),
-        status: bare.readString(bc),
-        payloadSizeBytes: bare.readU64(bc),
-    }
-}
-
-export function writeFilesystemResultResponse(bc: bare.ByteCursor, x: FilesystemResultResponse): void {
-    writeFilesystemOperation(bc, x.operation)
-    bare.writeString(bc, x.status)
-    bare.writeU64(bc, x.payloadSizeBytes)
-}
-
-export type PermissionDecisionResponse = {
-    readonly capability: string
-    readonly decision: PermissionMode
-}
-
-export function readPermissionDecisionResponse(bc: bare.ByteCursor): PermissionDecisionResponse {
-    return {
-        capability: bare.readString(bc),
-        decision: readPermissionMode(bc),
-    }
-}
-
-export function writePermissionDecisionResponse(bc: bare.ByteCursor, x: PermissionDecisionResponse): void {
-    bare.writeString(bc, x.capability)
-    writePermissionMode(bc, x.decision)
-}
-
-export type PersistenceStateResponse = {
-    readonly key: string
-    readonly found: boolean
-    readonly payloadSizeBytes: u64
-}
-
-export function readPersistenceStateResponse(bc: bare.ByteCursor): PersistenceStateResponse {
-    return {
-        key: bare.readString(bc),
-        found: bare.readBool(bc),
-        payloadSizeBytes: bare.readU64(bc),
-    }
-}
-
-export function writePersistenceStateResponse(bc: bare.ByteCursor, x: PersistenceStateResponse): void {
-    bare.writeString(bc, x.key)
-    bare.writeBool(bc, x.found)
-    bare.writeU64(bc, x.payloadSizeBytes)
-}
-
-export type PersistenceFlushedResponse = {
-    readonly key: string
-    readonly committedBytes: u64
-}
-
-export function readPersistenceFlushedResponse(bc: bare.ByteCursor): PersistenceFlushedResponse {
-    return {
-        key: bare.readString(bc),
-        committedBytes: bare.readU64(bc),
-    }
-}
-
-export function writePersistenceFlushedResponse(bc: bare.ByteCursor, x: PersistenceFlushedResponse): void {
-    bare.writeString(bc, x.key)
-    bare.writeU64(bc, x.committedBytes)
-}
-
-export type RejectedResponse = {
-    readonly code: string
-    readonly message: string
-}
-
-export function readRejectedResponse(bc: bare.ByteCursor): RejectedResponse {
-    return {
-        code: bare.readString(bc),
-        message: bare.readString(bc),
-    }
-}
-
-export function writeRejectedResponse(bc: bare.ByteCursor, x: RejectedResponse): void {
-    bare.writeString(bc, x.code)
-    bare.writeString(bc, x.message)
-}
-
-export type VmFetchResponse = {
-    readonly responseJson: string
-}
-
-export function readVmFetchResponse(bc: bare.ByteCursor): VmFetchResponse {
-    return {
-        responseJson: bare.readString(bc),
-    }
-}
-
-export function writeVmFetchResponse(bc: bare.ByteCursor, x: VmFetchResponse): void {
-    bare.writeString(bc, x.responseJson)
-}
-
-export type ResponsePayload =
-    | { readonly tag: "AuthenticatedResponse"; readonly val: AuthenticatedResponse }
-    | { readonly tag: "SessionOpenedResponse"; readonly val: SessionOpenedResponse }
-    | { readonly tag: "VmCreatedResponse"; readonly val: VmCreatedResponse }
-    | { readonly tag: "VmDisposedResponse"; readonly val: VmDisposedResponse }
-    | { readonly tag: "RootFilesystemBootstrappedResponse"; readonly val: RootFilesystemBootstrappedResponse }
-    | { readonly tag: "VmConfiguredResponse"; readonly val: VmConfiguredResponse }
-    | { readonly tag: "HostCallbacksRegisteredResponse"; readonly val: HostCallbacksRegisteredResponse }
-    | { readonly tag: "LayerCreatedResponse"; readonly val: LayerCreatedResponse }
-    | { readonly tag: "LayerSealedResponse"; readonly val: LayerSealedResponse }
-    | { readonly tag: "SnapshotImportedResponse"; readonly val: SnapshotImportedResponse }
-    | { readonly tag: "SnapshotExportedResponse"; readonly val: SnapshotExportedResponse }
-    | { readonly tag: "OverlayCreatedResponse"; readonly val: OverlayCreatedResponse }
-    | { readonly tag: "GuestFilesystemResultResponse"; readonly val: GuestFilesystemResultResponse }
-    | { readonly tag: "RootFilesystemSnapshotResponse"; readonly val: RootFilesystemSnapshotResponse }
-    | { readonly tag: "ProcessStartedResponse"; readonly val: ProcessStartedResponse }
-    | { readonly tag: "StdinWrittenResponse"; readonly val: StdinWrittenResponse }
-    | { readonly tag: "StdinClosedResponse"; readonly val: StdinClosedResponse }
-    | { readonly tag: "ProcessKilledResponse"; readonly val: ProcessKilledResponse }
-    | { readonly tag: "ProcessSnapshotResponse"; readonly val: ProcessSnapshotResponse }
-    | { readonly tag: "ListenerSnapshotResponse"; readonly val: ListenerSnapshotResponse }
-    | { readonly tag: "BoundUdpSnapshotResponse"; readonly val: BoundUdpSnapshotResponse }
-    | { readonly tag: "SignalStateResponse"; readonly val: SignalStateResponse }
-    | { readonly tag: "ZombieTimerCountResponse"; readonly val: ZombieTimerCountResponse }
-    | { readonly tag: "FilesystemResultResponse"; readonly val: FilesystemResultResponse }
-    | { readonly tag: "PermissionDecisionResponse"; readonly val: PermissionDecisionResponse }
-    | { readonly tag: "PersistenceStateResponse"; readonly val: PersistenceStateResponse }
-    | { readonly tag: "PersistenceFlushedResponse"; readonly val: PersistenceFlushedResponse }
-    | { readonly tag: "RejectedResponse"; readonly val: RejectedResponse }
-    | { readonly tag: "VmFetchResponse"; readonly val: VmFetchResponse }
-    | { readonly tag: "ExtEnvelope"; readonly val: ExtEnvelope }
-    | { readonly tag: "GuestKernelResultResponse"; readonly val: GuestKernelResultResponse }
-    | { readonly tag: "PtyResizedResponse"; readonly val: PtyResizedResponse }
-    | { readonly tag: "ResourceSnapshotResponse"; readonly val: ResourceSnapshotResponse }
-    | { readonly tag: "PackageLinkedResponse"; readonly val: PackageLinkedResponse }
-    | { readonly tag: "ProvidedCommandsResponse"; readonly val: ProvidedCommandsResponse }
-
-export function readResponsePayload(bc: bare.ByteCursor): ResponsePayload {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return { tag: "AuthenticatedResponse", val: readAuthenticatedResponse(bc) }
-        case 1:
-            return { tag: "SessionOpenedResponse", val: readSessionOpenedResponse(bc) }
-        case 2:
-            return { tag: "VmCreatedResponse", val: readVmCreatedResponse(bc) }
-        case 3:
-            return { tag: "VmDisposedResponse", val: readVmDisposedResponse(bc) }
-        case 4:
-            return { tag: "RootFilesystemBootstrappedResponse", val: readRootFilesystemBootstrappedResponse(bc) }
-        case 5:
-            return { tag: "VmConfiguredResponse", val: readVmConfiguredResponse(bc) }
-        case 6:
-            return { tag: "HostCallbacksRegisteredResponse", val: readHostCallbacksRegisteredResponse(bc) }
-        case 7:
-            return { tag: "LayerCreatedResponse", val: readLayerCreatedResponse(bc) }
-        case 8:
-            return { tag: "LayerSealedResponse", val: readLayerSealedResponse(bc) }
-        case 9:
-            return { tag: "SnapshotImportedResponse", val: readSnapshotImportedResponse(bc) }
-        case 10:
-            return { tag: "SnapshotExportedResponse", val: readSnapshotExportedResponse(bc) }
-        case 11:
-            return { tag: "OverlayCreatedResponse", val: readOverlayCreatedResponse(bc) }
-        case 12:
-            return { tag: "GuestFilesystemResultResponse", val: readGuestFilesystemResultResponse(bc) }
-        case 13:
-            return { tag: "RootFilesystemSnapshotResponse", val: readRootFilesystemSnapshotResponse(bc) }
-        case 14:
-            return { tag: "ProcessStartedResponse", val: readProcessStartedResponse(bc) }
-        case 15:
-            return { tag: "StdinWrittenResponse", val: readStdinWrittenResponse(bc) }
-        case 16:
-            return { tag: "StdinClosedResponse", val: readStdinClosedResponse(bc) }
-        case 17:
-            return { tag: "ProcessKilledResponse", val: readProcessKilledResponse(bc) }
-        case 18:
-            return { tag: "ProcessSnapshotResponse", val: readProcessSnapshotResponse(bc) }
-        case 19:
-            return { tag: "ListenerSnapshotResponse", val: readListenerSnapshotResponse(bc) }
-        case 20:
-            return { tag: "BoundUdpSnapshotResponse", val: readBoundUdpSnapshotResponse(bc) }
-        case 21:
-            return { tag: "SignalStateResponse", val: readSignalStateResponse(bc) }
-        case 22:
-            return { tag: "ZombieTimerCountResponse", val: readZombieTimerCountResponse(bc) }
-        case 23:
-            return { tag: "FilesystemResultResponse", val: readFilesystemResultResponse(bc) }
-        case 24:
-            return { tag: "PermissionDecisionResponse", val: readPermissionDecisionResponse(bc) }
-        case 25:
-            return { tag: "PersistenceStateResponse", val: readPersistenceStateResponse(bc) }
-        case 26:
-            return { tag: "PersistenceFlushedResponse", val: readPersistenceFlushedResponse(bc) }
-        case 27:
-            return { tag: "RejectedResponse", val: readRejectedResponse(bc) }
-        case 28:
-            return { tag: "VmFetchResponse", val: readVmFetchResponse(bc) }
-        case 29:
-            return { tag: "ExtEnvelope", val: readExtEnvelope(bc) }
-        case 30:
-            return { tag: "GuestKernelResultResponse", val: readGuestKernelResultResponse(bc) }
-        case 31:
-            return { tag: "PtyResizedResponse", val: readPtyResizedResponse(bc) }
-        case 32:
-            return { tag: "ResourceSnapshotResponse", val: readResourceSnapshotResponse(bc) }
-        case 33:
-            return { tag: "PackageLinkedResponse", val: readPackageLinkedResponse(bc) }
-        case 34:
-            return { tag: "ProvidedCommandsResponse", val: readProvidedCommandsResponse(bc) }
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeResponsePayload(bc: bare.ByteCursor, x: ResponsePayload): void {
-    switch (x.tag) {
-        case "AuthenticatedResponse": {
-            bare.writeU8(bc, 0)
-            writeAuthenticatedResponse(bc, x.val)
-            break
-        }
-        case "SessionOpenedResponse": {
-            bare.writeU8(bc, 1)
-            writeSessionOpenedResponse(bc, x.val)
-            break
-        }
-        case "VmCreatedResponse": {
-            bare.writeU8(bc, 2)
-            writeVmCreatedResponse(bc, x.val)
-            break
-        }
-        case "VmDisposedResponse": {
-            bare.writeU8(bc, 3)
-            writeVmDisposedResponse(bc, x.val)
-            break
-        }
-        case "RootFilesystemBootstrappedResponse": {
-            bare.writeU8(bc, 4)
-            writeRootFilesystemBootstrappedResponse(bc, x.val)
-            break
-        }
-        case "VmConfiguredResponse": {
-            bare.writeU8(bc, 5)
-            writeVmConfiguredResponse(bc, x.val)
-            break
-        }
-        case "HostCallbacksRegisteredResponse": {
-            bare.writeU8(bc, 6)
-            writeHostCallbacksRegisteredResponse(bc, x.val)
-            break
-        }
-        case "LayerCreatedResponse": {
-            bare.writeU8(bc, 7)
-            writeLayerCreatedResponse(bc, x.val)
-            break
-        }
-        case "LayerSealedResponse": {
-            bare.writeU8(bc, 8)
-            writeLayerSealedResponse(bc, x.val)
-            break
-        }
-        case "SnapshotImportedResponse": {
-            bare.writeU8(bc, 9)
-            writeSnapshotImportedResponse(bc, x.val)
-            break
-        }
-        case "SnapshotExportedResponse": {
-            bare.writeU8(bc, 10)
-            writeSnapshotExportedResponse(bc, x.val)
-            break
-        }
-        case "OverlayCreatedResponse": {
-            bare.writeU8(bc, 11)
-            writeOverlayCreatedResponse(bc, x.val)
-            break
-        }
-        case "GuestFilesystemResultResponse": {
-            bare.writeU8(bc, 12)
-            writeGuestFilesystemResultResponse(bc, x.val)
-            break
-        }
-        case "RootFilesystemSnapshotResponse": {
-            bare.writeU8(bc, 13)
-            writeRootFilesystemSnapshotResponse(bc, x.val)
-            break
-        }
-        case "ProcessStartedResponse": {
-            bare.writeU8(bc, 14)
-            writeProcessStartedResponse(bc, x.val)
-            break
-        }
-        case "StdinWrittenResponse": {
-            bare.writeU8(bc, 15)
-            writeStdinWrittenResponse(bc, x.val)
-            break
-        }
-        case "StdinClosedResponse": {
-            bare.writeU8(bc, 16)
-            writeStdinClosedResponse(bc, x.val)
-            break
-        }
-        case "ProcessKilledResponse": {
-            bare.writeU8(bc, 17)
-            writeProcessKilledResponse(bc, x.val)
-            break
-        }
-        case "ProcessSnapshotResponse": {
-            bare.writeU8(bc, 18)
-            writeProcessSnapshotResponse(bc, x.val)
-            break
-        }
-        case "ListenerSnapshotResponse": {
-            bare.writeU8(bc, 19)
-            writeListenerSnapshotResponse(bc, x.val)
-            break
-        }
-        case "BoundUdpSnapshotResponse": {
-            bare.writeU8(bc, 20)
-            writeBoundUdpSnapshotResponse(bc, x.val)
-            break
-        }
-        case "SignalStateResponse": {
-            bare.writeU8(bc, 21)
-            writeSignalStateResponse(bc, x.val)
-            break
-        }
-        case "ZombieTimerCountResponse": {
-            bare.writeU8(bc, 22)
-            writeZombieTimerCountResponse(bc, x.val)
-            break
-        }
-        case "FilesystemResultResponse": {
-            bare.writeU8(bc, 23)
-            writeFilesystemResultResponse(bc, x.val)
-            break
-        }
-        case "PermissionDecisionResponse": {
-            bare.writeU8(bc, 24)
-            writePermissionDecisionResponse(bc, x.val)
-            break
-        }
-        case "PersistenceStateResponse": {
-            bare.writeU8(bc, 25)
-            writePersistenceStateResponse(bc, x.val)
-            break
-        }
-        case "PersistenceFlushedResponse": {
-            bare.writeU8(bc, 26)
-            writePersistenceFlushedResponse(bc, x.val)
-            break
-        }
-        case "RejectedResponse": {
-            bare.writeU8(bc, 27)
-            writeRejectedResponse(bc, x.val)
-            break
-        }
-        case "VmFetchResponse": {
-            bare.writeU8(bc, 28)
-            writeVmFetchResponse(bc, x.val)
-            break
-        }
-        case "ExtEnvelope": {
-            bare.writeU8(bc, 29)
-            writeExtEnvelope(bc, x.val)
-            break
-        }
-        case "GuestKernelResultResponse": {
-            bare.writeU8(bc, 30)
-            writeGuestKernelResultResponse(bc, x.val)
-            break
-        }
-        case "PtyResizedResponse": {
-            bare.writeU8(bc, 31)
-            writePtyResizedResponse(bc, x.val)
-            break
-        }
-        case "ResourceSnapshotResponse": {
-            bare.writeU8(bc, 32)
-            writeResourceSnapshotResponse(bc, x.val)
-            break
-        }
-        case "PackageLinkedResponse": {
-            bare.writeU8(bc, 33)
-            writePackageLinkedResponse(bc, x.val)
-            break
-        }
-        case "ProvidedCommandsResponse": {
-            bare.writeU8(bc, 34)
-            writeProvidedCommandsResponse(bc, x.val)
-            break
-        }
-    }
-}
-
-export type ResponseFrame = {
-    readonly schema: ProtocolSchema
-    readonly requestId: RequestId
-    readonly ownership: OwnershipScope
-    readonly payload: ResponsePayload
-}
-
-export function readResponseFrame(bc: bare.ByteCursor): ResponseFrame {
-    return {
-        schema: readProtocolSchema(bc),
-        requestId: readRequestId(bc),
-        ownership: readOwnershipScope(bc),
-        payload: readResponsePayload(bc),
-    }
-}
-
-export function writeResponseFrame(bc: bare.ByteCursor, x: ResponseFrame): void {
-    writeProtocolSchema(bc, x.schema)
-    writeRequestId(bc, x.requestId)
-    writeOwnershipScope(bc, x.ownership)
-    writeResponsePayload(bc, x.payload)
-}
-
-export enum VmLifecycleState {
-    Creating = "Creating",
-    Ready = "Ready",
-    Disposing = "Disposing",
-    Disposed = "Disposed",
-    Failed = "Failed",
-}
-
-export function readVmLifecycleState(bc: bare.ByteCursor): VmLifecycleState {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return VmLifecycleState.Creating
-        case 1:
-            return VmLifecycleState.Ready
-        case 2:
-            return VmLifecycleState.Disposing
-        case 3:
-            return VmLifecycleState.Disposed
-        case 4:
-            return VmLifecycleState.Failed
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeVmLifecycleState(bc: bare.ByteCursor, x: VmLifecycleState): void {
-    switch (x) {
-        case VmLifecycleState.Creating: {
-            bare.writeU8(bc, 0)
-            break
-        }
-        case VmLifecycleState.Ready: {
-            bare.writeU8(bc, 1)
-            break
-        }
-        case VmLifecycleState.Disposing: {
-            bare.writeU8(bc, 2)
-            break
-        }
-        case VmLifecycleState.Disposed: {
-            bare.writeU8(bc, 3)
-            break
-        }
-        case VmLifecycleState.Failed: {
-            bare.writeU8(bc, 4)
-            break
-        }
-    }
-}
-
-export type VmLifecycleEvent = {
-    readonly state: VmLifecycleState
-}
-
-export function readVmLifecycleEvent(bc: bare.ByteCursor): VmLifecycleEvent {
-    return {
-        state: readVmLifecycleState(bc),
-    }
-}
-
-export function writeVmLifecycleEvent(bc: bare.ByteCursor, x: VmLifecycleEvent): void {
-    writeVmLifecycleState(bc, x.state)
-}
-
-export enum StreamChannel {
-    Stdout = "Stdout",
-    Stderr = "Stderr",
-}
-
-export function readStreamChannel(bc: bare.ByteCursor): StreamChannel {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return StreamChannel.Stdout
-        case 1:
-            return StreamChannel.Stderr
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeStreamChannel(bc: bare.ByteCursor, x: StreamChannel): void {
-    switch (x) {
-        case StreamChannel.Stdout: {
-            bare.writeU8(bc, 0)
-            break
-        }
-        case StreamChannel.Stderr: {
-            bare.writeU8(bc, 1)
-            break
-        }
-    }
-}
-
-export type ProcessOutputEvent = {
-    readonly processId: string
-    readonly channel: StreamChannel
-    readonly chunk: ArrayBuffer
-}
-
-export function readProcessOutputEvent(bc: bare.ByteCursor): ProcessOutputEvent {
-    return {
-        processId: bare.readString(bc),
-        channel: readStreamChannel(bc),
-        chunk: bare.readData(bc),
-    }
-}
-
-export function writeProcessOutputEvent(bc: bare.ByteCursor, x: ProcessOutputEvent): void {
-    bare.writeString(bc, x.processId)
-    writeStreamChannel(bc, x.channel)
-    bare.writeData(bc, x.chunk)
-}
-
-export type ProcessExitedEvent = {
-    readonly processId: string
-    readonly exitCode: i32
-}
-
-export function readProcessExitedEvent(bc: bare.ByteCursor): ProcessExitedEvent {
-    return {
-        processId: bare.readString(bc),
-        exitCode: bare.readI32(bc),
-    }
-}
-
-export function writeProcessExitedEvent(bc: bare.ByteCursor, x: ProcessExitedEvent): void {
-    bare.writeString(bc, x.processId)
-    bare.writeI32(bc, x.exitCode)
-}
-
-export type StructuredEvent = {
-    readonly name: string
-    readonly detail: ReadonlyMap<string, string>
-}
-
-export function readStructuredEvent(bc: bare.ByteCursor): StructuredEvent {
-    return {
-        name: bare.readString(bc),
-        detail: read1(bc),
-    }
-}
-
-export function writeStructuredEvent(bc: bare.ByteCursor, x: StructuredEvent): void {
-    bare.writeString(bc, x.name)
-    write1(bc, x.detail)
-}
-
-export type EventPayload =
-    | { readonly tag: "VmLifecycleEvent"; readonly val: VmLifecycleEvent }
-    | { readonly tag: "ProcessOutputEvent"; readonly val: ProcessOutputEvent }
-    | { readonly tag: "ProcessExitedEvent"; readonly val: ProcessExitedEvent }
-    | { readonly tag: "StructuredEvent"; readonly val: StructuredEvent }
-    | { readonly tag: "ExtEnvelope"; readonly val: ExtEnvelope }
-
-export function readEventPayload(bc: bare.ByteCursor): EventPayload {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return { tag: "VmLifecycleEvent", val: readVmLifecycleEvent(bc) }
-        case 1:
-            return { tag: "ProcessOutputEvent", val: readProcessOutputEvent(bc) }
-        case 2:
-            return { tag: "ProcessExitedEvent", val: readProcessExitedEvent(bc) }
-        case 3:
-            return { tag: "StructuredEvent", val: readStructuredEvent(bc) }
-        case 4:
-            return { tag: "ExtEnvelope", val: readExtEnvelope(bc) }
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeEventPayload(bc: bare.ByteCursor, x: EventPayload): void {
-    switch (x.tag) {
-        case "VmLifecycleEvent": {
-            bare.writeU8(bc, 0)
-            writeVmLifecycleEvent(bc, x.val)
-            break
-        }
-        case "ProcessOutputEvent": {
-            bare.writeU8(bc, 1)
-            writeProcessOutputEvent(bc, x.val)
-            break
-        }
-        case "ProcessExitedEvent": {
-            bare.writeU8(bc, 2)
-            writeProcessExitedEvent(bc, x.val)
-            break
-        }
-        case "StructuredEvent": {
-            bare.writeU8(bc, 3)
-            writeStructuredEvent(bc, x.val)
-            break
-        }
-        case "ExtEnvelope": {
-            bare.writeU8(bc, 4)
-            writeExtEnvelope(bc, x.val)
-            break
-        }
-    }
-}
-
-export type EventFrame = {
-    readonly schema: ProtocolSchema
-    readonly ownership: OwnershipScope
-    readonly payload: EventPayload
-}
-
-export function readEventFrame(bc: bare.ByteCursor): EventFrame {
-    return {
-        schema: readProtocolSchema(bc),
-        ownership: readOwnershipScope(bc),
-        payload: readEventPayload(bc),
-    }
-}
-
-export function writeEventFrame(bc: bare.ByteCursor, x: EventFrame): void {
-    writeProtocolSchema(bc, x.schema)
-    writeOwnershipScope(bc, x.ownership)
-    writeEventPayload(bc, x.payload)
-}
-
-export type HostCallbackRequest = {
-    readonly invocationId: string
-    readonly callbackKey: string
-    readonly input: JsonUtf8
-    readonly timeoutMs: u64
-}
-
-export function readHostCallbackRequest(bc: bare.ByteCursor): HostCallbackRequest {
-    return {
-        invocationId: bare.readString(bc),
-        callbackKey: bare.readString(bc),
-        input: readJsonUtf8(bc),
-        timeoutMs: bare.readU64(bc),
-    }
-}
-
-export function writeHostCallbackRequest(bc: bare.ByteCursor, x: HostCallbackRequest): void {
-    bare.writeString(bc, x.invocationId)
-    bare.writeString(bc, x.callbackKey)
-    writeJsonUtf8(bc, x.input)
-    bare.writeU64(bc, x.timeoutMs)
-}
-
-export type JsBridgeCallRequest = {
-    readonly callId: string
-    readonly mountId: string
-    readonly operation: string
-    readonly args: JsonUtf8
-}
-
-export function readJsBridgeCallRequest(bc: bare.ByteCursor): JsBridgeCallRequest {
-    return {
-        callId: bare.readString(bc),
-        mountId: bare.readString(bc),
-        operation: bare.readString(bc),
-        args: readJsonUtf8(bc),
-    }
-}
-
-export function writeJsBridgeCallRequest(bc: bare.ByteCursor, x: JsBridgeCallRequest): void {
-    bare.writeString(bc, x.callId)
-    bare.writeString(bc, x.mountId)
-    bare.writeString(bc, x.operation)
-    writeJsonUtf8(bc, x.args)
-}
-
-export type SidecarRequestPayload =
-    | { readonly tag: "HostCallbackRequest"; readonly val: HostCallbackRequest }
-    | { readonly tag: "JsBridgeCallRequest"; readonly val: JsBridgeCallRequest }
-    | { readonly tag: "ExtEnvelope"; readonly val: ExtEnvelope }
-
-export function readSidecarRequestPayload(bc: bare.ByteCursor): SidecarRequestPayload {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return { tag: "HostCallbackRequest", val: readHostCallbackRequest(bc) }
-        case 1:
-            return { tag: "JsBridgeCallRequest", val: readJsBridgeCallRequest(bc) }
-        case 2:
-            return { tag: "ExtEnvelope", val: readExtEnvelope(bc) }
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeSidecarRequestPayload(bc: bare.ByteCursor, x: SidecarRequestPayload): void {
-    switch (x.tag) {
-        case "HostCallbackRequest": {
-            bare.writeU8(bc, 0)
-            writeHostCallbackRequest(bc, x.val)
-            break
-        }
-        case "JsBridgeCallRequest": {
-            bare.writeU8(bc, 1)
-            writeJsBridgeCallRequest(bc, x.val)
-            break
-        }
-        case "ExtEnvelope": {
-            bare.writeU8(bc, 2)
-            writeExtEnvelope(bc, x.val)
-            break
-        }
-    }
-}
-
-export type SidecarRequestFrame = {
-    readonly schema: ProtocolSchema
-    readonly requestId: RequestId
-    readonly ownership: OwnershipScope
-    readonly payload: SidecarRequestPayload
-}
-
-export function readSidecarRequestFrame(bc: bare.ByteCursor): SidecarRequestFrame {
-    return {
-        schema: readProtocolSchema(bc),
-        requestId: readRequestId(bc),
-        ownership: readOwnershipScope(bc),
-        payload: readSidecarRequestPayload(bc),
-    }
-}
-
-export function writeSidecarRequestFrame(bc: bare.ByteCursor, x: SidecarRequestFrame): void {
-    writeProtocolSchema(bc, x.schema)
-    writeRequestId(bc, x.requestId)
-    writeOwnershipScope(bc, x.ownership)
-    writeSidecarRequestPayload(bc, x.payload)
-}
-
-function read36(bc: bare.ByteCursor): JsonUtf8 | null {
-    return bare.readBool(bc) ? readJsonUtf8(bc) : null
-}
-
-function write36(bc: bare.ByteCursor, x: JsonUtf8 | null): void {
-    bare.writeBool(bc, x != null)
-    if (x != null) {
-        writeJsonUtf8(bc, x)
-    }
-}
-
-export type HostCallbackResultResponse = {
-    readonly invocationId: string
-    readonly result: JsonUtf8 | null
-    readonly error: string | null
-}
-
-export function readHostCallbackResultResponse(bc: bare.ByteCursor): HostCallbackResultResponse {
-    return {
-        invocationId: bare.readString(bc),
-        result: read36(bc),
-        error: read0(bc),
-    }
-}
-
-export function writeHostCallbackResultResponse(bc: bare.ByteCursor, x: HostCallbackResultResponse): void {
-    bare.writeString(bc, x.invocationId)
-    write36(bc, x.result)
-    write0(bc, x.error)
-}
-
-export type JsBridgeResultResponse = {
-    readonly callId: string
-    readonly result: JsonUtf8 | null
-    readonly error: string | null
-}
-
-export function readJsBridgeResultResponse(bc: bare.ByteCursor): JsBridgeResultResponse {
-    return {
-        callId: bare.readString(bc),
-        result: read36(bc),
-        error: read0(bc),
-    }
-}
-
-export function writeJsBridgeResultResponse(bc: bare.ByteCursor, x: JsBridgeResultResponse): void {
-    bare.writeString(bc, x.callId)
-    write36(bc, x.result)
-    write0(bc, x.error)
-}
-
-export type SidecarResponsePayload =
-    | { readonly tag: "HostCallbackResultResponse"; readonly val: HostCallbackResultResponse }
-    | { readonly tag: "JsBridgeResultResponse"; readonly val: JsBridgeResultResponse }
-    | { readonly tag: "ExtEnvelope"; readonly val: ExtEnvelope }
-
-export function readSidecarResponsePayload(bc: bare.ByteCursor): SidecarResponsePayload {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return { tag: "HostCallbackResultResponse", val: readHostCallbackResultResponse(bc) }
-        case 1:
-            return { tag: "JsBridgeResultResponse", val: readJsBridgeResultResponse(bc) }
-        case 2:
-            return { tag: "ExtEnvelope", val: readExtEnvelope(bc) }
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeSidecarResponsePayload(bc: bare.ByteCursor, x: SidecarResponsePayload): void {
-    switch (x.tag) {
-        case "HostCallbackResultResponse": {
-            bare.writeU8(bc, 0)
-            writeHostCallbackResultResponse(bc, x.val)
-            break
-        }
-        case "JsBridgeResultResponse": {
-            bare.writeU8(bc, 1)
-            writeJsBridgeResultResponse(bc, x.val)
-            break
-        }
-        case "ExtEnvelope": {
-            bare.writeU8(bc, 2)
-            writeExtEnvelope(bc, x.val)
-            break
-        }
-    }
-}
-
-export type SidecarResponseFrame = {
-    readonly schema: ProtocolSchema
-    readonly requestId: RequestId
-    readonly ownership: OwnershipScope
-    readonly payload: SidecarResponsePayload
-}
-
-export function readSidecarResponseFrame(bc: bare.ByteCursor): SidecarResponseFrame {
-    return {
-        schema: readProtocolSchema(bc),
-        requestId: readRequestId(bc),
-        ownership: readOwnershipScope(bc),
-        payload: readSidecarResponsePayload(bc),
-    }
-}
-
-export function writeSidecarResponseFrame(bc: bare.ByteCursor, x: SidecarResponseFrame): void {
-    writeProtocolSchema(bc, x.schema)
-    writeRequestId(bc, x.requestId)
-    writeOwnershipScope(bc, x.ownership)
-    writeSidecarResponsePayload(bc, x.payload)
-}
-
-export type ProtocolFrame =
-    | { readonly tag: "RequestFrame"; readonly val: RequestFrame }
-    | { readonly tag: "ResponseFrame"; readonly val: ResponseFrame }
-    | { readonly tag: "EventFrame"; readonly val: EventFrame }
-    | { readonly tag: "SidecarRequestFrame"; readonly val: SidecarRequestFrame }
-    | { readonly tag: "SidecarResponseFrame"; readonly val: SidecarResponseFrame }
-
-export function readProtocolFrame(bc: bare.ByteCursor): ProtocolFrame {
-    const offset = bc.offset
-    const tag = bare.readU8(bc)
-    switch (tag) {
-        case 0:
-            return { tag: "RequestFrame", val: readRequestFrame(bc) }
-        case 1:
-            return { tag: "ResponseFrame", val: readResponseFrame(bc) }
-        case 2:
-            return { tag: "EventFrame", val: readEventFrame(bc) }
-        case 3:
-            return { tag: "SidecarRequestFrame", val: readSidecarRequestFrame(bc) }
-        case 4:
-            return { tag: "SidecarResponseFrame", val: readSidecarResponseFrame(bc) }
-        default: {
-            bc.offset = offset
-            throw new bare.BareError(offset, "invalid tag")
-        }
-    }
-}
-
-export function writeProtocolFrame(bc: bare.ByteCursor, x: ProtocolFrame): void {
-    switch (x.tag) {
-        case "RequestFrame": {
-            bare.writeU8(bc, 0)
-            writeRequestFrame(bc, x.val)
-            break
-        }
-        case "ResponseFrame": {
-            bare.writeU8(bc, 1)
-            writeResponseFrame(bc, x.val)
-            break
-        }
-        case "EventFrame": {
-            bare.writeU8(bc, 2)
-            writeEventFrame(bc, x.val)
-            break
-        }
-        case "SidecarRequestFrame": {
-            bare.writeU8(bc, 3)
-            writeSidecarRequestFrame(bc, x.val)
-            break
-        }
-        case "SidecarResponseFrame": {
-            bare.writeU8(bc, 4)
-            writeSidecarResponseFrame(bc, x.val)
-            break
-        }
-    }
-}
-
-export function encodeProtocolFrame(x: ProtocolFrame, config?: Partial<bare.Config>): Uint8Array {
-    const fullConfig = config != null ? bare.Config(config) : DEFAULT_CONFIG
-    const bc = new bare.ByteCursor(
-        new Uint8Array(fullConfig.initialBufferLength),
-        fullConfig,
-    )
-    writeProtocolFrame(bc, x)
-    return new Uint8Array(bc.view.buffer, bc.view.byteOffset, bc.offset)
-}
-
-export function decodeProtocolFrame(bytes: Uint8Array): ProtocolFrame {
-    const bc = new bare.ByteCursor(bytes, DEFAULT_CONFIG)
-    const result = readProtocolFrame(bc)
-    if (bc.offset < bc.view.byteLength) {
-        throw new bare.BareError(bc.offset, "remaining bytes")
-    }
-    return result
-}
diff --git a/packages/core/src/generated/AcpLimitsConfig.ts b/packages/core/src/generated/AcpLimitsConfig.ts
deleted file mode 100644
index 21a81ddac..000000000
--- a/packages/core/src/generated/AcpLimitsConfig.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type AcpLimitsConfig = { maxReadLineBytes?: number, stdoutBufferByteLimit?: number, };
diff --git a/packages/core/src/generated/CreateVmConfig.ts b/packages/core/src/generated/CreateVmConfig.ts
deleted file mode 100644
index 35d5fb4fb..000000000
--- a/packages/core/src/generated/CreateVmConfig.ts
+++ /dev/null
@@ -1,16 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { JsRuntimeConfig } from "./JsRuntimeConfig.js";
-import type { NativeRootFilesystemConfig } from "./NativeRootFilesystemConfig.js";
-import type { PermissionsPolicy } from "./PermissionsPolicy.js";
-import type { RootFilesystemConfig } from "./RootFilesystemConfig.js";
-import type { VmDnsConfig } from "./VmDnsConfig.js";
-import type { VmLimitsConfig } from "./VmLimitsConfig.js";
-import type { VmListenPolicyConfig } from "./VmListenPolicyConfig.js";
-
-/**
- * Canonical Rust-side VM config. Unknown fields must stay rejected here and in
- * the TS preflight schema at
- * `packages/core/src/node-runtime-options-schema.ts`; update both when a
- * public `NodeRuntime.create(...)` option changes the generated VM config.
- */
-export type CreateVmConfig = { cwd?: string, env: Record<string, string>, rootFilesystem: RootFilesystemConfig, permissions?: PermissionsPolicy, limits?: VmLimitsConfig, dns?: VmDnsConfig, nativeRoot?: NativeRootFilesystemConfig, listen?: VmListenPolicyConfig, loopbackExemptPorts: Array<number>, jsRuntime?: JsRuntimeConfig, bootstrapCommands?: Array<string>, };
diff --git a/packages/core/src/generated/FsPermissionRule.ts b/packages/core/src/generated/FsPermissionRule.ts
deleted file mode 100644
index 0cd8bf46e..000000000
--- a/packages/core/src/generated/FsPermissionRule.ts
+++ /dev/null
@@ -1,4 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { PermissionMode } from "./PermissionMode.js";
-
-export type FsPermissionRule = { mode: PermissionMode, operations: Array<string>, paths: Array<string>, };
diff --git a/packages/core/src/generated/FsPermissionRuleSet.ts b/packages/core/src/generated/FsPermissionRuleSet.ts
deleted file mode 100644
index 03decdb8d..000000000
--- a/packages/core/src/generated/FsPermissionRuleSet.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { FsPermissionRule } from "./FsPermissionRule.js";
-import type { PermissionMode } from "./PermissionMode.js";
-
-export type FsPermissionRuleSet = { default?: PermissionMode, rules: Array<FsPermissionRule>, };
diff --git a/packages/core/src/generated/FsPermissionScope.ts b/packages/core/src/generated/FsPermissionScope.ts
deleted file mode 100644
index 59030d5e3..000000000
--- a/packages/core/src/generated/FsPermissionScope.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { FsPermissionRuleSet } from "./FsPermissionRuleSet.js";
-import type { PermissionMode } from "./PermissionMode.js";
-
-export type FsPermissionScope = PermissionMode | FsPermissionRuleSet;
diff --git a/packages/core/src/generated/HttpLimitsConfig.ts b/packages/core/src/generated/HttpLimitsConfig.ts
deleted file mode 100644
index 567631985..000000000
--- a/packages/core/src/generated/HttpLimitsConfig.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type HttpLimitsConfig = { maxFetchResponseBytes?: number, };
diff --git a/packages/core/src/generated/JsModuleResolution.ts b/packages/core/src/generated/JsModuleResolution.ts
deleted file mode 100644
index b6794d1dc..000000000
--- a/packages/core/src/generated/JsModuleResolution.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type JsModuleResolution = "node" | "relative" | "none";
diff --git a/packages/core/src/generated/JsRuntimeConfig.ts b/packages/core/src/generated/JsRuntimeConfig.ts
deleted file mode 100644
index 79c5e575e..000000000
--- a/packages/core/src/generated/JsRuntimeConfig.ts
+++ /dev/null
@@ -1,32 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { JsModuleResolution } from "./JsModuleResolution.js";
-import type { JsRuntimePlatform } from "./JsRuntimePlatform.js";
-
-/**
- * Guest JavaScript host-environment configuration.
- *
- * Selects which globals/builtins/module-resolution surface guest JS sees,
- * modeled on esbuild's `platform`. Omitting this preserves full Node.js
- * emulation (`platform = node`).
- */
-export type JsRuntimeConfig = { 
-/**
- * Which host environment to emulate for guest JS. Default `node`.
- */
-platform: JsRuntimePlatform, 
-/**
- * How bare import specifiers resolve. Independent of `platform`.
- * Default `node`.
- */
-moduleResolution: JsModuleResolution, 
-/**
- * Node builtin-module allow-list. Only valid when `platform = node`.
- * `None` => engine default allow-list. `Some([])` => deny all builtins.
- * `Some([..])` => exactly those.
- */
-allowedBuiltins?: Array<string>, 
-/**
- * Opt in to a high-resolution monotonic guest clock. Default false keeps
- * the security-oriented 1ms timer resolution.
- */
-highResolutionTime?: boolean, };
diff --git a/packages/core/src/generated/JsRuntimeLimitsConfig.ts b/packages/core/src/generated/JsRuntimeLimitsConfig.ts
deleted file mode 100644
index a2400cbda..000000000
--- a/packages/core/src/generated/JsRuntimeLimitsConfig.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type JsRuntimeLimitsConfig = { v8HeapLimitMb?: number, syncRpcWaitTimeoutMs?: number, cpuTimeLimitMs?: number, wallClockLimitMs?: number, importCacheMaterializeTimeoutMs?: number, capturedOutputLimitBytes?: number, stdinBufferLimitBytes?: number, eventPayloadLimitBytes?: number, v8IpcMaxFrameBytes?: number, };
diff --git a/packages/core/src/generated/JsRuntimePlatform.ts b/packages/core/src/generated/JsRuntimePlatform.ts
deleted file mode 100644
index f69e96d3d..000000000
--- a/packages/core/src/generated/JsRuntimePlatform.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type JsRuntimePlatform = "node" | "browser" | "neutral" | "bare";
diff --git a/packages/core/src/generated/MountPluginDescriptor.ts b/packages/core/src/generated/MountPluginDescriptor.ts
deleted file mode 100644
index 5c4fc3e26..000000000
--- a/packages/core/src/generated/MountPluginDescriptor.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type MountPluginDescriptor = { id: string, config: import("../descriptors.js").MountConfigJsonValue, };
diff --git a/packages/core/src/generated/NativeRootFilesystemConfig.ts b/packages/core/src/generated/NativeRootFilesystemConfig.ts
deleted file mode 100644
index e069771cd..000000000
--- a/packages/core/src/generated/NativeRootFilesystemConfig.ts
+++ /dev/null
@@ -1,4 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { MountPluginDescriptor } from "./MountPluginDescriptor.js";
-
-export type NativeRootFilesystemConfig = { plugin: MountPluginDescriptor, readOnly: boolean, };
diff --git a/packages/core/src/generated/PatternPermissionRule.ts b/packages/core/src/generated/PatternPermissionRule.ts
deleted file mode 100644
index b6b161691..000000000
--- a/packages/core/src/generated/PatternPermissionRule.ts
+++ /dev/null
@@ -1,4 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { PermissionMode } from "./PermissionMode.js";
-
-export type PatternPermissionRule = { mode: PermissionMode, operations: Array<string>, patterns: Array<string>, };
diff --git a/packages/core/src/generated/PatternPermissionRuleSet.ts b/packages/core/src/generated/PatternPermissionRuleSet.ts
deleted file mode 100644
index 8ffbf2b47..000000000
--- a/packages/core/src/generated/PatternPermissionRuleSet.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { PatternPermissionRule } from "./PatternPermissionRule.js";
-import type { PermissionMode } from "./PermissionMode.js";
-
-export type PatternPermissionRuleSet = { default?: PermissionMode, rules: Array<PatternPermissionRule>, };
diff --git a/packages/core/src/generated/PatternPermissionScope.ts b/packages/core/src/generated/PatternPermissionScope.ts
deleted file mode 100644
index 75a2e9f10..000000000
--- a/packages/core/src/generated/PatternPermissionScope.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { PatternPermissionRuleSet } from "./PatternPermissionRuleSet.js";
-import type { PermissionMode } from "./PermissionMode.js";
-
-export type PatternPermissionScope = PermissionMode | PatternPermissionRuleSet;
diff --git a/packages/core/src/generated/PermissionMode.ts b/packages/core/src/generated/PermissionMode.ts
deleted file mode 100644
index fc04c8293..000000000
--- a/packages/core/src/generated/PermissionMode.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type PermissionMode = "allow" | "ask" | "deny";
diff --git a/packages/core/src/generated/PermissionsPolicy.ts b/packages/core/src/generated/PermissionsPolicy.ts
deleted file mode 100644
index 9b51c8b8f..000000000
--- a/packages/core/src/generated/PermissionsPolicy.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { FsPermissionScope } from "./FsPermissionScope.js";
-import type { PatternPermissionScope } from "./PatternPermissionScope.js";
-
-export type PermissionsPolicy = { fs?: FsPermissionScope, network?: PatternPermissionScope, childProcess?: PatternPermissionScope, process?: PatternPermissionScope, env?: PatternPermissionScope, binding?: PatternPermissionScope, };
diff --git a/packages/core/src/generated/PluginLimitsConfig.ts b/packages/core/src/generated/PluginLimitsConfig.ts
deleted file mode 100644
index fbe2ead35..000000000
--- a/packages/core/src/generated/PluginLimitsConfig.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type PluginLimitsConfig = { maxPersistedManifestBytes?: number, maxPersistedManifestFileBytes?: number, };
diff --git a/packages/core/src/generated/PythonLimitsConfig.ts b/packages/core/src/generated/PythonLimitsConfig.ts
deleted file mode 100644
index b489773c3..000000000
--- a/packages/core/src/generated/PythonLimitsConfig.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type PythonLimitsConfig = { outputBufferMaxBytes?: number, executionTimeoutMs?: number, maxOldSpaceMb?: number, vfsRpcTimeoutMs?: number, };
diff --git a/packages/core/src/generated/ResourceLimitsConfig.ts b/packages/core/src/generated/ResourceLimitsConfig.ts
deleted file mode 100644
index bafed1495..000000000
--- a/packages/core/src/generated/ResourceLimitsConfig.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type ResourceLimitsConfig = { cpuCount?: number, maxProcesses?: number, maxOpenFds?: number, maxPipes?: number, maxPtys?: number, maxSockets?: number, maxConnections?: number, maxSocketBufferedBytes?: number, maxSocketDatagramQueueLen?: number, maxFilesystemBytes?: number, maxInodeCount?: number, maxBlockingReadMs?: number, maxPreadBytes?: number, maxFdWriteBytes?: number, maxProcessArgvBytes?: number, maxProcessEnvBytes?: number, maxReaddirEntries?: number, maxRecursiveFsDepth?: number, maxRecursiveFsEntries?: number, maxWasmFuel?: number, maxWasmMemoryBytes?: number, maxWasmStackBytes?: number, };
diff --git a/packages/core/src/generated/RootFilesystemConfig.ts b/packages/core/src/generated/RootFilesystemConfig.ts
deleted file mode 100644
index 569d423ce..000000000
--- a/packages/core/src/generated/RootFilesystemConfig.ts
+++ /dev/null
@@ -1,6 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { RootFilesystemEntry } from "./RootFilesystemEntry.js";
-import type { RootFilesystemLowerDescriptor } from "./RootFilesystemLowerDescriptor.js";
-import type { RootFilesystemMode } from "./RootFilesystemMode.js";
-
-export type RootFilesystemConfig = { mode: RootFilesystemMode, disableDefaultBaseLayer: boolean, lowers: Array<RootFilesystemLowerDescriptor>, bootstrapEntries: Array<RootFilesystemEntry>, };
diff --git a/packages/core/src/generated/RootFilesystemEntry.ts b/packages/core/src/generated/RootFilesystemEntry.ts
deleted file mode 100644
index e7220f307..000000000
--- a/packages/core/src/generated/RootFilesystemEntry.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { RootFilesystemEntryEncoding } from "./RootFilesystemEntryEncoding.js";
-import type { RootFilesystemEntryKind } from "./RootFilesystemEntryKind.js";
-
-export type RootFilesystemEntry = { path: string, kind: RootFilesystemEntryKind, mode?: number, uid?: number, gid?: number, content?: string, encoding?: RootFilesystemEntryEncoding, target?: string, executable: boolean, };
diff --git a/packages/core/src/generated/RootFilesystemEntryEncoding.ts b/packages/core/src/generated/RootFilesystemEntryEncoding.ts
deleted file mode 100644
index c7ec03363..000000000
--- a/packages/core/src/generated/RootFilesystemEntryEncoding.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type RootFilesystemEntryEncoding = "utf8" | "base64";
diff --git a/packages/core/src/generated/RootFilesystemEntryKind.ts b/packages/core/src/generated/RootFilesystemEntryKind.ts
deleted file mode 100644
index 587dec736..000000000
--- a/packages/core/src/generated/RootFilesystemEntryKind.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type RootFilesystemEntryKind = "file" | "directory" | "symlink";
diff --git a/packages/core/src/generated/RootFilesystemLowerDescriptor.ts b/packages/core/src/generated/RootFilesystemLowerDescriptor.ts
deleted file mode 100644
index b88082e60..000000000
--- a/packages/core/src/generated/RootFilesystemLowerDescriptor.ts
+++ /dev/null
@@ -1,4 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { RootFilesystemEntry } from "./RootFilesystemEntry.js";
-
-export type RootFilesystemLowerDescriptor = { "kind": "snapshot", entries: Array<RootFilesystemEntry>, } | { "kind": "bundledBaseFilesystem" };
diff --git a/packages/core/src/generated/RootFilesystemMode.ts b/packages/core/src/generated/RootFilesystemMode.ts
deleted file mode 100644
index 81f8031c2..000000000
--- a/packages/core/src/generated/RootFilesystemMode.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type RootFilesystemMode = "ephemeral" | "read-only";
diff --git a/packages/core/src/generated/ToolLimitsConfig.ts b/packages/core/src/generated/ToolLimitsConfig.ts
deleted file mode 100644
index c1f7c84ea..000000000
--- a/packages/core/src/generated/ToolLimitsConfig.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type ToolLimitsConfig = { defaultToolTimeoutMs?: number, maxToolTimeoutMs?: number, maxRegisteredToolkits?: number, maxRegisteredToolsPerVm?: number, maxToolsPerToolkit?: number, maxToolSchemaBytes?: number, maxToolExamplesPerTool?: number, maxToolExampleInputBytes?: number, };
diff --git a/packages/core/src/generated/VmDnsConfig.ts b/packages/core/src/generated/VmDnsConfig.ts
deleted file mode 100644
index 957144c2d..000000000
--- a/packages/core/src/generated/VmDnsConfig.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type VmDnsConfig = { nameServers: Array<string>, overrides: { [key in string]?: Array<string> }, };
diff --git a/packages/core/src/generated/VmLimitsConfig.ts b/packages/core/src/generated/VmLimitsConfig.ts
deleted file mode 100644
index ceb4ed3a7..000000000
--- a/packages/core/src/generated/VmLimitsConfig.ts
+++ /dev/null
@@ -1,11 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-import type { AcpLimitsConfig } from "./AcpLimitsConfig.js";
-import type { HttpLimitsConfig } from "./HttpLimitsConfig.js";
-import type { JsRuntimeLimitsConfig } from "./JsRuntimeLimitsConfig.js";
-import type { PluginLimitsConfig } from "./PluginLimitsConfig.js";
-import type { PythonLimitsConfig } from "./PythonLimitsConfig.js";
-import type { ResourceLimitsConfig } from "./ResourceLimitsConfig.js";
-import type { ToolLimitsConfig } from "./ToolLimitsConfig.js";
-import type { WasmLimitsConfig } from "./WasmLimitsConfig.js";
-
-export type VmLimitsConfig = { resources?: ResourceLimitsConfig, http?: HttpLimitsConfig, tools?: ToolLimitsConfig, plugins?: PluginLimitsConfig, acp?: AcpLimitsConfig, jsRuntime?: JsRuntimeLimitsConfig, python?: PythonLimitsConfig, wasm?: WasmLimitsConfig, };
diff --git a/packages/core/src/generated/VmListenPolicyConfig.ts b/packages/core/src/generated/VmListenPolicyConfig.ts
deleted file mode 100644
index 66a0426a4..000000000
--- a/packages/core/src/generated/VmListenPolicyConfig.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type VmListenPolicyConfig = { portMin?: number, portMax?: number, allowPrivileged?: boolean, };
diff --git a/packages/core/src/generated/WasmLimitsConfig.ts b/packages/core/src/generated/WasmLimitsConfig.ts
deleted file mode 100644
index f2a946610..000000000
--- a/packages/core/src/generated/WasmLimitsConfig.ts
+++ /dev/null
@@ -1,3 +0,0 @@
-// This file was generated by [ts-rs](https://github.com/Aleph-Alpha/ts-rs). Do not edit this file manually.
-
-export type WasmLimitsConfig = { maxModuleFileBytes?: number, capturedOutputLimitBytes?: number, syncReadLimitBytes?: number, prewarmTimeoutMs?: number, runnerHeapLimitMb?: number, };
diff --git a/packages/core/src/index.ts b/packages/core/src/index.ts
index e2dab3905..b8695c301 100644
--- a/packages/core/src/index.ts
+++ b/packages/core/src/index.ts
@@ -1,35 +1 @@
-export * from "./binary.js";
-export * from "./bytes.js";
-export * from "./callbacks.js";
-export * from "./correlation.js";
-export * from "./descriptors.js";
-export * from "./ext.js";
-export * from "./frame-payload-codec.js";
-export * from "./frame-rpc.js";
-export * from "./frame-stream.js";
-export * from "./filesystem.js";
-export * from "./framing.js";
-export * from "./json.js";
-export * from "./native-client.js";
-export * from "./node-runtime.js";
-export * from "./node-runtime-options-schema.js";
-export * from "./numbers.js";
-export * from "./permissions.js";
-export * from "./process.js";
-export * from "./sidecar-errors.js";
-export * from "./sidecar-client.js";
-export * from "./protocol-client.js";
-export * from "./protocol-frames.js";
-export * from "./request-payloads.js";
-export * from "./response-payloads.js";
-export {
-	registerSidecarProcessSpawnFactory,
-	SidecarProcess,
-} from "./sidecar-process.js";
-export type {
-	ResolvedSidecarSpawnOptions,
-	SidecarSpawnOptions,
-} from "./sidecar-process.js";
-export * from "./state.js";
-export * as protocol from "./generated-protocol.js";
-export * from "./generated-protocol.js";
+export * from "@rivet-dev/agentos-runtime-core";
diff --git a/packages/core/src/json.ts b/packages/core/src/json.ts
deleted file mode 100644
index 02c21ba97..000000000
--- a/packages/core/src/json.ts
+++ /dev/null
@@ -1,27 +0,0 @@
-export function stringifyJsonUtf8(value: unknown, context: string): string {
-	try {
-		const encoded = JSON.stringify(value);
-		if (encoded === undefined) {
-			throw new Error(`${context} must be JSON-serializable`);
-		}
-		return encoded;
-	} catch (error) {
-		throw new Error(
-			`${context} must be JSON-serializable: ${
-				error instanceof Error ? error.message : String(error)
-			}`,
-		);
-	}
-}
-
-export function parseJsonUtf8(value: string, context: string): unknown {
-	try {
-		return JSON.parse(value);
-	} catch (error) {
-		throw new Error(
-			`invalid ${context} JSON payload: ${
-				error instanceof Error ? error.message : String(error)
-			}`,
-		);
-	}
-}
diff --git a/packages/core/src/kernel-proxy.ts b/packages/core/src/kernel-proxy.ts
deleted file mode 100644
index 8a48a31f3..000000000
--- a/packages/core/src/kernel-proxy.ts
+++ /dev/null
@@ -1,2352 +0,0 @@
-import { randomUUID } from "node:crypto";
-import { rmSync } from "node:fs";
-import { constants as osConstants } from "node:os";
-import { posix as posixPath } from "node:path";
-import type { NativeMountPluginDescriptor } from "./descriptors.js";
-import type {
-	ConnectTerminalOptions,
-	Kernel,
-	KernelExecOptions,
-	KernelExecResult,
-	KernelSpawnOptions,
-	ManagedProcess,
-	OpenShellOptions,
-	ProcessInfo,
-	ShellHandle,
-	VirtualFileSystem,
-	VirtualStat,
-} from "./test-runtime.js";
-import type {
-	AuthenticatedSession,
-	CreatedVm,
-	GuestFilesystemStat,
-	SidecarProcess,
-	SidecarMountDescriptor,
-	SidecarProcessSnapshotEntry,
-	SidecarResourceSnapshot,
-	SidecarSignalHandlerRegistration,
-	SidecarSocketStateEntry,
-} from "./sidecar-process.js";
-
-export interface PlainMountConfig {
-	path: string;
-	driver: VirtualFileSystem;
-	readOnly?: boolean;
-}
-
-export interface NativeMountConfig {
-	path: string;
-	plugin: NativeMountPluginDescriptor;
-	readOnly?: boolean;
-}
-
-export function serializeMountConfigForSidecar(
-	mount: PlainMountConfig | NativeMountConfig,
-): SidecarMountDescriptor {
-	if ("driver" in mount) {
-		return {
-			guestPath: mount.path,
-			readOnly: mount.readOnly ?? false,
-			plugin: {
-				id: "js_bridge",
-				config: {},
-			},
-		};
-	}
-
-	return {
-		guestPath: mount.path,
-		readOnly: mount.readOnly ?? false,
-		plugin: {
-			id: mount.plugin.id,
-			config: mount.plugin.config ?? {},
-		},
-	};
-}
-
-const SYNTHETIC_PID_BASE = 1_000_000;
-const MISSING_EXIT_EVENT_GRACE_MS = 500;
-const PROTECTED_READ_ONLY_GUEST_ROOTS = ["/etc/secure-exec"] as const;
-const TRAILING_OUTPUT_DRAIN_INTERVAL_MS = 10;
-const TRAILING_OUTPUT_DRAIN_MAX_MS = 250;
-const TRAILING_OUTPUT_DRAIN_QUIET_TURNS = 2;
-
-async function drainTrailingProcessOutputTurn(
-	delayMs = 0,
-): Promise<void> {
-	// Native-sidecar `process_output` events can lag one macrotask behind the
-	// terminal `process_exited` notification for very short-lived processes, and
-	// under suite load the sidecar event pump can need a little extra time to
-	// flush delayed output through its listener callbacks.
-	await new Promise<void>((resolve) => {
-		setTimeout(resolve, delayMs);
-	});
-}
-
-const PREFERRED_SIGNAL_NAMES = [
-	"SIGHUP",
-	"SIGINT",
-	"SIGQUIT",
-	"SIGILL",
-	"SIGTRAP",
-	"SIGABRT",
-	"SIGBUS",
-	"SIGFPE",
-	"SIGKILL",
-	"SIGUSR1",
-	"SIGSEGV",
-	"SIGUSR2",
-	"SIGPIPE",
-	"SIGALRM",
-	"SIGTERM",
-	"SIGSTKFLT",
-	"SIGCHLD",
-	"SIGCONT",
-	"SIGSTOP",
-	"SIGTSTP",
-	"SIGTTIN",
-	"SIGTTOU",
-	"SIGURG",
-	"SIGXCPU",
-	"SIGXFSZ",
-	"SIGVTALRM",
-	"SIGPROF",
-	"SIGWINCH",
-	"SIGIO",
-	"SIGPWR",
-	"SIGSYS",
-	"SIGEMT",
-	"SIGINFO",
-] as const;
-const NON_CANONICAL_SIGNAL_NAMES = new Set([
-	"SIGCLD",
-	"SIGIOT",
-	"SIGPOLL",
-	"SIGUNUSED",
-]);
-const SIGNAL_NAME_BY_NUMBER = buildSignalNameByNumber();
-const DOUBLE_QUOTE_ESCAPABLE_CHARACTERS = new Set(['"', "\\", "$", "`"]);
-function appendDoubleQuotedEscape(current: string, character: string): string {
-	if (DOUBLE_QUOTE_ESCAPABLE_CHARACTERS.has(character)) {
-		return current + character;
-	}
-	if (character === "\n") {
-		return current;
-	}
-	return `${current}\\${character}`;
-}
-
-function parseSimpleExecCommand(command: string): string[] | null {
-	const tokens: string[] = [];
-	let current = "";
-	let quote: "'" | '"' | null = null;
-	let escaped = false;
-
-	for (const character of command) {
-		if (quote === null) {
-			if (escaped) {
-				current += character;
-				escaped = false;
-				continue;
-			}
-			if (character === "\\") {
-				escaped = true;
-				continue;
-			}
-			if (character === "'" || character === '"') {
-				quote = character;
-				continue;
-			}
-			if (/\s/.test(character)) {
-				if (current) {
-					tokens.push(current);
-					current = "";
-				}
-				continue;
-			}
-			if ("|&;<>()$`*?[]{}~!".includes(character)) {
-				return null;
-			}
-			current += character;
-			continue;
-		}
-
-		if (quote === "'") {
-			if (character === "'") {
-				quote = null;
-				continue;
-			}
-			current += character;
-			continue;
-		}
-
-		if (escaped) {
-			current = appendDoubleQuotedEscape(current, character);
-			escaped = false;
-			continue;
-		}
-		if (character === "\\") {
-			escaped = true;
-			continue;
-		}
-		if (character === '"') {
-			quote = null;
-			continue;
-		}
-		if (character === "$" || character === "`") {
-			return null;
-		}
-		current += character;
-	}
-
-	if (quote !== null || escaped) {
-		return null;
-	}
-	if (current) {
-		tokens.push(current);
-	}
-	if (tokens.length === 0) {
-		return null;
-	}
-	if (tokens.some((token) => token.length === 0)) {
-		return null;
-	}
-	return tokens;
-}
-
-function canUseDirectExec(
-	driver: string | undefined,
-	commandName: string | undefined,
-): boolean {
-	return driver === "wasmvm" || (driver === "node" && commandName === "node");
-}
-
-function shellSingleQuote(value: string): string {
-	if (value.length === 0) {
-		return "''";
-	}
-	return `'${value.replace(/'/g, `'\"'\"'`)}'`;
-}
-
-function buildSignalNameByNumber(): Map<number, string> {
-	const signals = osConstants.signals as Record<string, number | undefined>;
-	const names = new Map<number, string>();
-	for (const name of PREFERRED_SIGNAL_NAMES) {
-		const value = signals[name];
-		if (typeof value === "number") {
-			names.set(value, name);
-		}
-	}
-	for (const [name, value] of Object.entries(signals)) {
-		if (
-			typeof value === "number" &&
-			!NON_CANONICAL_SIGNAL_NAMES.has(name) &&
-			!names.has(value)
-		) {
-			names.set(value, name);
-		}
-	}
-	return names;
-}
-
-export function toSidecarSignalName(signal: number): string {
-	return SIGNAL_NAME_BY_NUMBER.get(signal) ?? String(signal);
-}
-
-export interface LocalCompatMount {
-	path: string;
-	fs: VirtualFileSystem;
-	readOnly: boolean;
-}
-
-interface KernelSocketSnapshot {
-	processId: string;
-	host?: string;
-	port?: number;
-	path?: string;
-}
-
-interface KernelSignalState {
-	handlers: Map<
-		number,
-		{
-			action: SidecarSignalHandlerRegistration["action"];
-			mask: Set<number>;
-			flags: number;
-		}
-	>;
-}
-
-interface SocketLookupCacheEntry {
-	value: KernelSocketSnapshot | null;
-	pending: Promise<void> | null;
-}
-
-interface TrackedProcessEntry {
-	pid: number;
-	processId: string;
-	command: string;
-	args: string[];
-	driver: string;
-	cwd: string;
-	env: Record<string, string>;
-	startTime: number;
-	exitTime: number | null;
-	hostPid: number | null;
-	exitCode: number | null;
-	started: boolean;
-	startPromise: Promise<void>;
-	waitPromise: Promise<number>;
-	resolveWait: (exitCode: number) => void;
-	rejectWait: (error: Error) => void;
-	onStdout: Set<(data: Uint8Array) => void>;
-	onStderr: Set<(data: Uint8Array) => void>;
-	pendingStdin: Array<string | Uint8Array>;
-	stdinFlushPromise: Promise<void> | null;
-	pendingCloseStdin: boolean;
-	pendingKillSignal: number | null;
-	waitWithFallbackPromise: Promise<number> | null;
-	hostExitObservedAt: number | null;
-	outputGeneration: number;
-	exitViaEvent: boolean;
-}
-
-interface NativeSidecarKernelProxyOptions {
-	client: SidecarProcess;
-	session: AuthenticatedSession;
-	vm: CreatedVm;
-	disposeClient?: boolean;
-	env: Record<string, string>;
-	cwd: string;
-	defaultExecCwd?: string;
-	localMounts: LocalCompatMount[];
-	commandGuestPaths: ReadonlyMap<string, string>;
-	onWasmCommandResolved?: (command: string) => void;
-	onDispose?: () => Promise<void>;
-}
-
-export class NativeSidecarKernelProxy {
-	readonly env: Record<string, string>;
-	readonly cwd: string;
-	readonly commands: ReadonlyMap<string, string>;
-	readonly vfs: VirtualFileSystem;
-	readonly processes = new Map<number, ProcessInfo>();
-	private readonly defaultExecCwd: string | undefined;
-
-	private readonly client: SidecarProcess;
-	private readonly disposeClient: boolean;
-	private readonly session: AuthenticatedSession;
-	private readonly vm: CreatedVm;
-	private readonly localMounts: LocalCompatMount[];
-	private readonly commandDrivers: Map<string, string>;
-	private readonly onWasmCommandResolved:
-		| ((command: string) => void)
-		| undefined;
-	private readonly onDispose: (() => Promise<void>) | undefined;
-	private readonly trackedProcesses = new Map<number, TrackedProcessEntry>();
-	private readonly trackedProcessesById = new Map<
-		string,
-		TrackedProcessEntry
-	>();
-	private readonly listenerLookups = new Map<string, SocketLookupCacheEntry>();
-	private readonly boundUdpLookups = new Map<string, SocketLookupCacheEntry>();
-	private readonly signalStates = new Map<number, KernelSignalState>();
-	private readonly signalRefreshes = new Map<number, Promise<void>>();
-	private sidecarProcessSnapshot: SidecarProcessSnapshotEntry[] = [];
-	private processSnapshotRefresh: Promise<void> | null = null;
-	private readonly observedProcessStartTimes = new Map<string, number>();
-	private readonly rootView: VirtualFileSystem;
-	private zombieTimerCountValue = 0;
-	private zombieTimerCountRefresh: Promise<void> | null = null;
-	private disposed = false;
-	private pumpError: Error | null = null;
-	private nextSyntheticPid = SYNTHETIC_PID_BASE;
-	private readonly eventPumpAbortController = new AbortController();
-	private readonly eventPump: Promise<void>;
-
-	constructor(options: NativeSidecarKernelProxyOptions) {
-		this.client = options.client;
-		this.disposeClient = options.disposeClient ?? true;
-		this.session = options.session;
-		this.vm = options.vm;
-		this.env = { ...options.env };
-		this.cwd = options.cwd;
-		this.defaultExecCwd = options.defaultExecCwd;
-		this.localMounts = [...options.localMounts].sort(
-			(left, right) => right.path.length - left.path.length,
-		);
-		this.commandDrivers = buildCommandMap(options.commandGuestPaths);
-		this.onWasmCommandResolved = options.onWasmCommandResolved;
-		this.onDispose = options.onDispose;
-		this.commands = this.commandDrivers;
-		this.vfs = this.createFilesystemView(true);
-		this.rootView = this.createFilesystemView(false);
-		this.eventPump = this.runEventPump();
-		void this.eventPump.catch(() => {});
-	}
-
-	createRootView(): VirtualFileSystem {
-		return this.rootView;
-	}
-
-	get zombieTimerCount(): number {
-		if (!this.zombieTimerCountRefresh) {
-			this.zombieTimerCountRefresh = this.refreshZombieTimerCount();
-		}
-		return this.zombieTimerCountValue;
-	}
-
-	registerCommandGuestPaths(
-		commandGuestPaths: ReadonlyMap<string, string>,
-	): void {
-		for (const name of commandGuestPaths.keys()) {
-			this.commandDrivers.set(name, "wasmvm");
-		}
-	}
-
-	async dispose(): Promise<void> {
-		if (this.disposed) {
-			return;
-		}
-		this.disposed = true;
-		this.eventPumpAbortController.abort();
-
-		const liveProcesses = [...this.trackedProcesses.values()].filter(
-			(entry) => entry.exitCode === null,
-		);
-		await Promise.allSettled(
-			liveProcesses.map((entry) => this.signalProcess(entry, 15)),
-		);
-
-		await this.client.disposeVm(this.session, this.vm).catch(() => {});
-		for (const entry of liveProcesses) {
-			if (entry.exitCode === null) {
-				// The sidecar dispose path already performs TERM/KILL escalation for any
-				// guest executions that are still live. Resolve local waiters eagerly so
-				// VM teardown does not hang on killed ACP adapter processes that never
-				// surface a terminal process_exited event back to the JS bridge.
-				this.finishProcess(entry, 143);
-			}
-		}
-		if (this.disposeClient) {
-			await this.client.dispose().catch(() => {});
-		}
-		await this.eventPump.catch(() => {});
-		await this.onDispose?.().catch(() => {});
-	}
-
-	async exec(
-		command: string,
-		options?: KernelExecOptions,
-	): Promise<KernelExecResult> {
-		if (!this.commands.has("sh")) {
-			throw new Error(
-				`native sidecar exec requires guest shell command 'sh': ${command}`,
-			);
-		}
-
-		const stdoutChunks: Uint8Array[] = [];
-		const stderrChunks: Uint8Array[] = [];
-		const effectiveCwd = options?.cwd ?? this.defaultExecCwd ?? this.cwd;
-		const parsedCommand = parseSimpleExecCommand(command);
-		const resolveExecPath = (targetPath: string) =>
-			targetPath.startsWith("/")
-				? posixPath.normalize(targetPath)
-				: posixPath.normalize(posixPath.join(effectiveCwd, targetPath));
-		const runAndCapture = async (
-			proc: ManagedProcess,
-			stdinOverride?: string | Uint8Array,
-			readExitCode?: () => Promise<number>,
-		): Promise<KernelExecResult> => {
-			if (stdinOverride !== undefined) {
-				proc.writeStdin(stdinOverride);
-			} else if (options?.stdin !== undefined) {
-				proc.writeStdin(options.stdin);
-			}
-			// `kernel.exec()` is a non-interactive run-to-completion API: when the
-			// caller does not opt into a streaming stdin handle, the guest process
-			// should observe EOF after any provided input so commands like
-			// `node -e ...` do not linger behind an inherited open stdin pipe.
-			proc.closeStdin();
-
-			const waitPromise = proc.wait();
-			const shellExitCode =
-				typeof options?.timeout === "number"
-					? await new Promise<number>((resolve) => {
-							const timer = setTimeout(() => {
-								proc.kill(9);
-								void proc.wait().then(resolve);
-							}, options.timeout);
-							void waitPromise.then((code) => {
-								clearTimeout(timer);
-								resolve(code);
-							});
-						})
-					: await waitPromise;
-
-			const exitCode = readExitCode
-				? await readExitCode().catch(() => shellExitCode)
-				: shellExitCode;
-
-			await drainTrailingProcessOutputTurn();
-
-			return {
-				exitCode,
-				stdout: Buffer.concat(
-					stdoutChunks.map((chunk) => Buffer.from(chunk)),
-				).toString("utf8"),
-				stderr: Buffer.concat(
-					stderrChunks.map((chunk) => Buffer.from(chunk)),
-				).toString("utf8"),
-			};
-		};
-		if (
-			parsedCommand &&
-			(parsedCommand[0] === "sh" || parsedCommand[0] === "/bin/sh") &&
-			parsedCommand[1] === "-c" &&
-			parsedCommand.length === 3
-		) {
-			const shellScript = parsedCommand[2].trim();
-			const exitMatch = shellScript.match(/^exit(?:\s+(-?\d+))?$/);
-			if (exitMatch) {
-				return {
-					exitCode: Number.parseInt(exitMatch[1] ?? "0", 10),
-					stdout: "",
-					stderr: "",
-				};
-			}
-			return this.exec(parsedCommand[2], options);
-		}
-		if (
-			parsedCommand &&
-			parsedCommand[0] === "chmod" &&
-			parsedCommand.length >= 3 &&
-			/^[0-7]{3,4}$/.test(parsedCommand[1] ?? "")
-		) {
-			const mode = Number.parseInt(parsedCommand[1]!, 8);
-			for (const target of parsedCommand.slice(2)) {
-				await this.client.chmod(
-					this.session,
-					this.vm,
-					resolveExecPath(target),
-					mode,
-				);
-			}
-			return { exitCode: 0, stdout: "", stderr: "" };
-		}
-		if (
-			parsedCommand &&
-			parsedCommand[0] === "stat" &&
-			parsedCommand.length === 4 &&
-			parsedCommand[1] === "-c" &&
-			parsedCommand[2] === "%a"
-		) {
-			const stat = await this.stat(resolveExecPath(parsedCommand[3]!));
-			return {
-				exitCode: 0,
-				stdout: `${(stat.mode & 0o777).toString(8)}\n`,
-				stderr: "",
-			};
-		}
-		const parsedCommandDriver = parsedCommand
-			? this.commands.get(parsedCommand[0])
-			: undefined;
-		const requiresShellWrappedWasmCwd =
-			parsedCommandDriver === "wasmvm" && parsedCommand?.[0] === "pwd";
-		if (
-			parsedCommand &&
-			parsedCommandDriver &&
-			canUseDirectExec(parsedCommandDriver, parsedCommand[0]) &&
-			!requiresShellWrappedWasmCwd
-		) {
-			if (parsedCommandDriver === "wasmvm") {
-				this.onWasmCommandResolved?.(parsedCommand[0]);
-			}
-			return runAndCapture(
-				this.spawn(parsedCommand[0], parsedCommand.slice(1), {
-					...options,
-					cwd: effectiveCwd,
-					onStdout: (chunk) => {
-						stdoutChunks.push(chunk);
-						options?.onStdout?.(chunk);
-					},
-					onStderr: (chunk) => {
-						stderrChunks.push(chunk);
-						options?.onStderr?.(chunk);
-					},
-				}),
-			);
-		}
-		const proc = this.spawn("sh", ["-c", command], {
-			...options,
-			cwd: effectiveCwd,
-			onStdout: (chunk) => {
-				stdoutChunks.push(chunk);
-				options?.onStdout?.(chunk);
-			},
-			onStderr: (chunk) => {
-				stderrChunks.push(chunk);
-				options?.onStderr?.(chunk);
-			},
-		});
-		return runAndCapture(proc);
-	}
-
-	spawn(
-		command: string,
-		args: string[],
-		options?: KernelSpawnOptions,
-	): ManagedProcess {
-		let spawnCommand = command;
-		let spawnArgs = [...args];
-		const shellOption = (options as ({ shell?: unknown } & KernelSpawnOptions) | undefined)
-			?.shell;
-		if (shellOption === true || typeof shellOption === "string") {
-			// Node's shell mode hands the raw command line to the shell. Shell
-			// grammar belongs to the guest shell, so the bridge never parses it.
-			if (!this.commands.has("sh")) {
-				throw new Error(
-					`native sidecar shell-mode spawn requires guest shell command 'sh': ${command}`,
-				);
-			}
-			spawnCommand = "sh";
-			spawnArgs = ["-c", [command, ...args].join(" ")];
-		}
-		const pid = this.nextSyntheticPid++;
-		const processId = `proc-${pid}`;
-		let resolveWait!: (exitCode: number) => void;
-		let rejectWait!: (error: Error) => void;
-		const waitPromise = new Promise<number>((resolve, reject) => {
-			resolveWait = resolve;
-			rejectWait = reject;
-		});
-
-		const entry: TrackedProcessEntry = {
-			pid,
-			processId,
-			command: spawnCommand,
-			args: spawnArgs,
-			driver: spawnCommand === "node" ? "node" : "wasmvm",
-			cwd: options?.cwd ?? this.cwd,
-			env: {
-				...(options?.env ?? {}),
-				...(options?.streamStdin ? { SECURE_EXEC_KEEP_STDIN_OPEN: "1" } : {}),
-			},
-			startTime: Date.now(),
-			exitTime: null,
-			hostPid: null,
-			exitCode: null,
-			started: false,
-			startPromise: Promise.resolve(),
-			waitPromise,
-			resolveWait,
-			rejectWait,
-			onStdout: new Set(options?.onStdout ? [options.onStdout] : []),
-			onStderr: new Set(options?.onStderr ? [options.onStderr] : []),
-			pendingStdin: [],
-			stdinFlushPromise: null,
-			pendingCloseStdin: false,
-			pendingKillSignal: null,
-			waitWithFallbackPromise: null,
-			hostExitObservedAt: null,
-			outputGeneration: 0,
-			exitViaEvent: false,
-		};
-		this.trackedProcesses.set(pid, entry);
-		this.trackedProcessesById.set(processId, entry);
-		this.updateTrackedProcessSnapshot(entry);
-
-		const proc: ManagedProcess = {
-			pid,
-			writeStdin: (data) => {
-				if (entry.exitCode !== null) {
-					return;
-				}
-				entry.pendingStdin.push(data);
-				void this.flushPendingStdin(entry).catch((error) => {
-					this.handleBackgroundProcessError(entry, error);
-				});
-			},
-			closeStdin: () => {
-				entry.pendingCloseStdin = true;
-				void this.closeTrackedStdin(entry).catch((error) => {
-					this.handleBackgroundProcessError(entry, error);
-				});
-			},
-			kill: (signal = 15) => {
-				if (entry.exitCode !== null) {
-					return;
-				}
-				entry.pendingKillSignal = signal;
-				void entry.startPromise.then(async () => {
-					if (entry.exitCode !== null || entry.pendingKillSignal === null) {
-						return;
-					}
-					const pendingSignal = entry.pendingKillSignal;
-					entry.pendingKillSignal = null;
-					await this.signalProcess(entry, pendingSignal);
-				});
-			},
-			wait: async () => {
-				const exitCode = await this.waitForTrackedProcess(entry);
-				await this.drainTrailingProcessOutput(entry);
-				return exitCode;
-			},
-			get exitCode() {
-				return entry.exitCode;
-			},
-		};
-
-		entry.startPromise = this.startTrackedProcess(entry).catch((error) => {
-			const normalized =
-				error instanceof Error ? error : new Error(String(error));
-			const stderr = new TextEncoder().encode(`${normalized.message}\n`);
-			for (const handler of entry.onStderr) {
-				handler(stderr);
-			}
-			this.finishProcess(entry, 1);
-		});
-
-		return proc;
-	}
-
-	openShell(options?: OpenShellOptions): ShellHandle {
-		const stdoutHandlers = new Set<(data: Uint8Array) => void>();
-		const stderrHandlers = new Set<(data: Uint8Array) => void>();
-		const command = options?.command ?? "sh";
-		const args =
-			options?.args ??
-			(command === "sh" || command === "/bin/sh" ? ["-i"] : []);
-		const synthesizePrompt = !options?.command && !options?.args;
-		const autoCloseExplicitCommandStdin =
-			Boolean(options?.command) &&
-			!["sh", "/bin/sh", "bash"].includes(command);
-		const promptText = "sh-0.4$ ";
-		const textEncoder = new TextEncoder();
-		const textDecoder = new TextDecoder();
-		const execCommand = this.exec.bind(this);
-		const spawnCommand = this.spawn.bind(this);
-		const sanitizeSyntheticShellText = (value: string) =>
-			value
-				.replace(/\u001b\[[0-9;]*m/g, "")
-				.replace(/^.*WARN could not retrieve pid for child process\n?/gm, "")
-				.replace(/^ProcessExitError:.*\n(?:\s+at .*\n)*/gm, "");
-		let bufferedInput = "";
-		let bufferedCommand = "";
-		let activeForegroundProcess: ManagedProcess | null = null;
-		let shellEnv = { ...(options?.env ?? {}) };
-		let shellCwd = options?.cwd ?? this.cwd;
-		let syntheticCommandQueue = Promise.resolve();
-		let promptTimer: ReturnType<typeof setTimeout> | null = null;
-		let closeStdinTimer: ReturnType<typeof setTimeout> | null = null;
-		let commandInFlight = false;
-		let syntheticCursorAtLineStart = true;
-		const syntheticPid = this.nextSyntheticPid++;
-		let syntheticExitCode: number | null = null;
-		let resolveSyntheticWait!: (exitCode: number) => void;
-		const syntheticWaitPromise = new Promise<number>((resolve) => {
-			resolveSyntheticWait = resolve;
-		});
-		const clearPromptTimer = () => {
-			if (promptTimer !== null) {
-				clearTimeout(promptTimer);
-				promptTimer = null;
-			}
-		};
-		const clearCloseStdinTimer = () => {
-			if (closeStdinTimer !== null) {
-				clearTimeout(closeStdinTimer);
-				closeStdinTimer = null;
-			}
-		};
-		const normalizeSyntheticTerminalText = (text: string) =>
-			text.replace(/\r?\n/g, "\r\n");
-		const updateSyntheticCursor = (text: string) => {
-			if (!text) {
-				return;
-			}
-			syntheticCursorAtLineStart = /(?:\r\n)$/.test(text);
-		};
-		const emitSyntheticStdout = (text: string) => {
-			if (!text) {
-				return;
-			}
-			const normalized = normalizeSyntheticTerminalText(text);
-			updateSyntheticCursor(normalized);
-			const chunk = textEncoder.encode(normalized);
-			for (const handler of stdoutHandlers) {
-				handler(chunk);
-			}
-		};
-		const emitSyntheticTerminal = (text: string) => {
-			if (!text) {
-				return;
-			}
-			const normalized = normalizeSyntheticTerminalText(text);
-			updateSyntheticCursor(normalized);
-			const chunk = textEncoder.encode(normalized);
-			for (const handler of stdoutHandlers) {
-				handler(chunk);
-			}
-		};
-		const finishSyntheticShell = (exitCode: number) => {
-			if (syntheticExitCode !== null) {
-				return;
-			}
-			syntheticExitCode = exitCode;
-			clearPromptTimer();
-			resolveSyntheticWait(exitCode);
-		};
-		const commandNeedsContinuation = (source: string) => {
-			let singleQuoted = false;
-			let doubleQuoted = false;
-			let escaped = false;
-			for (const character of source) {
-				if (escaped) {
-					escaped = false;
-					continue;
-				}
-				if (character === "\\") {
-					escaped = true;
-					continue;
-				}
-				if (!doubleQuoted && character === "'") {
-					singleQuoted = !singleQuoted;
-					continue;
-				}
-				if (!singleQuoted && character === '"') {
-					doubleQuoted = !doubleQuoted;
-				}
-			}
-			return singleQuoted || doubleQuoted || escaped;
-		};
-		const emitPrompt = () => {
-			if (!synthesizePrompt) {
-				return;
-			}
-			if (syntheticExitCode !== null) {
-				return;
-			}
-			commandInFlight = false;
-			const promptPrefix = syntheticCursorAtLineStart ? "" : "\r\n";
-			const promptChunk = textEncoder.encode(`${promptPrefix}${promptText}`);
-			for (const handler of stdoutHandlers) {
-				handler(promptChunk);
-			}
-			syntheticCursorAtLineStart = false;
-		};
-		const schedulePrompt = (delayMs: number) => {
-			if (!synthesizePrompt) {
-				return;
-			}
-			clearPromptTimer();
-			promptTimer = setTimeout(() => {
-				promptTimer = null;
-				emitPrompt();
-			}, delayMs);
-		};
-		const parseForegroundCommand = (source: string) => {
-			const parsed = parseSimpleExecCommand(source);
-			const driver = parsed ? this.commands.get(parsed[0]) : undefined;
-			if (
-				!parsed ||
-				!canUseDirectExec(driver, parsed[0]) ||
-				(driver === "wasmvm" && parsed[0] === "pwd")
-			) {
-				return null;
-			}
-			return parsed;
-		};
-		const writeForegroundInput = (
-			proc: ManagedProcess,
-			data: string | Uint8Array,
-		) => {
-			if (typeof data === "string") {
-				for (const character of data) {
-					proc.writeStdin(character);
-				}
-				return;
-			}
-			for (const byte of data) {
-				proc.writeStdin(new Uint8Array([byte]));
-			}
-		};
-
-		let onData: ((data: Uint8Array) => void) | null = null;
-		stdoutHandlers.add((data) => onData?.(data));
-		if (options?.onStderr) {
-			stderrHandlers.add(options.onStderr);
-		}
-		if (synthesizePrompt) {
-			schedulePrompt(0);
-			return {
-				pid: syntheticPid,
-				write(data) {
-					if (syntheticExitCode !== null) {
-						return;
-					}
-					if (activeForegroundProcess) {
-						const rawText =
-							typeof data === "string"
-								? data
-								: Buffer.from(data).toString("utf8");
-						if (rawText.includes("\u0003")) {
-							const [beforeInterrupt] = rawText.split("\u0003");
-							if (beforeInterrupt) {
-								writeForegroundInput(activeForegroundProcess, beforeInterrupt);
-							}
-							emitSyntheticTerminal("^C\n");
-							activeForegroundProcess.kill(2);
-							return;
-						}
-						writeForegroundInput(activeForegroundProcess, data);
-						return;
-					}
-					const rawText =
-						typeof data === "string"
-							? data
-							: Buffer.from(data).toString("utf8");
-					let text = rawText;
-					if (rawText.includes("\u0003")) {
-						const segments = rawText.split("\u0003");
-						bufferedInput = "";
-						bufferedCommand = "";
-						for (let index = 0; index < segments.length - 1; index += 1) {
-							emitSyntheticTerminal("^C\n");
-							emitPrompt();
-						}
-						text = segments[segments.length - 1] ?? "";
-					}
-					if (
-						text.includes("\u0004") &&
-						bufferedInput.length === 0 &&
-						bufferedCommand.length === 0
-					) {
-						finishSyntheticShell(0);
-						return;
-					}
-					bufferedInput += text.replace(/\u0004/g, "");
-					while (true) {
-						const newlineIndex = bufferedInput.indexOf("\n");
-						if (newlineIndex < 0) {
-							break;
-						}
-						const line = bufferedInput.slice(0, newlineIndex).replace(/\r$/, "");
-						bufferedInput = bufferedInput.slice(newlineIndex + 1);
-						emitSyntheticStdout(`${line}\n`);
-						const nextCommand = bufferedCommand
-							? `${bufferedCommand}\n${line}`
-							: line;
-						if (commandNeedsContinuation(nextCommand)) {
-							bufferedCommand = nextCommand;
-							continue;
-						}
-						bufferedCommand = "";
-						syntheticCommandQueue = syntheticCommandQueue
-							.then(async () => {
-								const trimmed = nextCommand.trim();
-								if (!trimmed) {
-									emitPrompt();
-									return;
-								}
-								const exitMatch = trimmed.match(/^exit(?:\s+(-?\d+))?$/);
-								if (exitMatch) {
-									finishSyntheticShell(Number.parseInt(exitMatch[1] ?? "0", 10));
-									return;
-								}
-								const exportMatch = trimmed.match(
-									/^export\s+([A-Za-z_][A-Za-z0-9_]*)=(.*)$/,
-								);
-								if (exportMatch) {
-									shellEnv = {
-										...shellEnv,
-										[exportMatch[1]]: exportMatch[2],
-									};
-									emitPrompt();
-									return;
-								}
-								const cdMatch = trimmed.match(/^cd(?:\s+(.*))?$/);
-								if (cdMatch) {
-									const target = cdMatch[1]?.trim() || "/";
-									shellCwd = target.startsWith("/")
-										? posixPath.normalize(target)
-										: posixPath.normalize(posixPath.join(shellCwd, target));
-									emitPrompt();
-									return;
-								}
-								const foregroundCommand = parseForegroundCommand(trimmed);
-								if (foregroundCommand) {
-									const proc = spawnCommand(
-										foregroundCommand[0],
-										foregroundCommand.slice(1),
-										{
-											env: shellEnv,
-											cwd: shellCwd,
-											streamStdin: true,
-											onStdout: (chunk) =>
-												emitSyntheticTerminal(textDecoder.decode(chunk)),
-											onStderr: (chunk) =>
-												emitSyntheticTerminal(textDecoder.decode(chunk)),
-										},
-									);
-									activeForegroundProcess = proc;
-									try {
-										await proc.wait();
-									} finally {
-										if (activeForegroundProcess === proc) {
-											activeForegroundProcess = null;
-										}
-									}
-									emitPrompt();
-									return;
-								}
-								const result = await execCommand(nextCommand, {
-									env: shellEnv,
-									cwd: shellCwd,
-								});
-								const sanitizedStdout = sanitizeSyntheticShellText(
-									result.stdout,
-								);
-								if (sanitizedStdout) {
-									emitSyntheticStdout(sanitizedStdout);
-								}
-								const sanitizedStderr = sanitizeSyntheticShellText(
-									result.stderr,
-								).replace(
-									/^error: failed to execute command '([^']+)': .*$/gm,
-									"error: command not found: $1",
-								);
-								if (sanitizedStderr) {
-									emitSyntheticTerminal(sanitizedStderr);
-								}
-								emitPrompt();
-							})
-							.catch((error) => {
-								const message =
-									error instanceof Error ? error.message : String(error);
-								emitSyntheticTerminal(`${message}\n`);
-								emitPrompt();
-							});
-					}
-				},
-				get onData() {
-					return onData;
-				},
-				set onData(handler) {
-					onData = handler;
-				},
-				resize() {
-					// Synthetic shells are terminal-less.
-				},
-				kill(signal = 15) {
-					finishSyntheticShell(128 + signal);
-				},
-				wait() {
-					return syntheticWaitPromise;
-				},
-			};
-		}
-
-		const proc = this.spawn(command, args, {
-			env: options?.env,
-			cwd: options?.cwd,
-			streamStdin: true,
-			onStdout: (chunk) => {
-				for (const handler of stdoutHandlers) {
-					handler(chunk);
-				}
-				if (commandInFlight) {
-					schedulePrompt(120);
-				}
-			},
-			onStderr: (chunk) => {
-				for (const handler of stderrHandlers) {
-					handler(chunk);
-				}
-				if (commandInFlight) {
-					schedulePrompt(120);
-				}
-			},
-		});
-
-		return {
-			pid: proc.pid,
-			write(data) {
-				if (synthesizePrompt) {
-					return;
-				}
-				proc.writeStdin(data);
-				if (autoCloseExplicitCommandStdin) {
-					clearCloseStdinTimer();
-					closeStdinTimer = setTimeout(() => {
-						closeStdinTimer = null;
-						proc.closeStdin();
-					}, 100);
-				}
-				if (
-					synthesizePrompt &&
-					typeof data === "string" &&
-					(data.includes("\n") || data.includes("\r"))
-				) {
-					commandInFlight = true;
-					schedulePrompt(120);
-				}
-			},
-			get onData() {
-				return onData;
-			},
-			set onData(handler) {
-				onData = handler;
-			},
-			resize() {
-				// The current stdio-native path is process-backed rather than PTY-backed.
-			},
-			kill(signal) {
-				clearCloseStdinTimer();
-				clearPromptTimer();
-				proc.kill(signal);
-			},
-			wait() {
-				clearPromptTimer();
-				return proc.wait();
-			},
-		};
-	}
-
-	async connectTerminal(options?: ConnectTerminalOptions): Promise<number> {
-		const stdin = process.stdin;
-		const stdout = process.stdout;
-		const { onData, ...shellOptions } = options ?? {};
-		const shell = this.openShell({
-			...shellOptions,
-			onStderr:
-				shellOptions.onStderr ??
-				((data) => {
-					process.stderr.write(data);
-				}),
-		});
-		const outputHandler =
-			onData ??
-			((data: Uint8Array) => {
-				stdout.write(data);
-			});
-		const restoreRawMode =
-			stdin.isTTY && typeof stdin.setRawMode === "function";
-		const onStdinData = (data: Uint8Array | string) => {
-			shell.write(data);
-		};
-		const onResize = () => {
-			shell.resize(stdout.columns, stdout.rows);
-		};
-
-		let cleanedUp = false;
-		const cleanup = () => {
-			if (cleanedUp) {
-				return;
-			}
-			cleanedUp = true;
-			stdin.removeListener("data", onStdinData);
-			stdin.pause();
-			if (restoreRawMode) {
-				stdin.setRawMode(false);
-			}
-			if (stdout.isTTY) {
-				stdout.removeListener("resize", onResize);
-			}
-		};
-
-		try {
-			if (restoreRawMode) {
-				stdin.setRawMode(true);
-			}
-			stdin.on("data", onStdinData);
-			stdin.resume();
-			shell.onData = outputHandler;
-
-			if (stdout.isTTY) {
-				stdout.on("resize", onResize);
-				shell.resize(stdout.columns, stdout.rows);
-			}
-		} catch (error) {
-			cleanup();
-			shell.kill();
-			throw error;
-		}
-		void shell.wait().finally(() => {
-			cleanup();
-		});
-		return shell.pid;
-	}
-
-	readFile(path: string): Promise<Uint8Array> {
-		return this.dispatchRead(path, (mount, relativePath) =>
-			mount.fs.readFile(relativePath),
-		);
-	}
-
-	writeFile(path: string, content: string | Uint8Array): Promise<void> {
-		return this.dispatchWrite(
-			path,
-			(mount, relativePath) => mount.fs.writeFile(relativePath, content),
-			() => this.client.writeFile(this.session, this.vm, path, content),
-		);
-	}
-
-	async mkdir(path: string, recursive = true): Promise<void> {
-		return this.dispatchWrite(
-			path,
-			(mount, relativePath) => mount.fs.mkdir(relativePath, { recursive }),
-			() => this.client.mkdir(this.session, this.vm, path, { recursive }),
-		);
-	}
-
-	async exists(path: string): Promise<boolean> {
-		const local = this.resolveLocalMount(path);
-		if (local) {
-			return local.mount.fs.exists(local.relativePath);
-		}
-		return this.client.exists(this.session, this.vm, path);
-	}
-
-	async stat(path: string): Promise<VirtualStat> {
-		const local = this.resolveLocalMount(path);
-		if (local) {
-			return local.mount.fs.stat(local.relativePath);
-		}
-		return toVirtualStat(await this.client.stat(this.session, this.vm, path));
-	}
-
-	async readdir(path: string): Promise<string[]> {
-		const local = this.resolveLocalMount(path);
-		if (local) {
-			return local.mount.fs.readDir(local.relativePath);
-		}
-
-		const entries = await this.client.readdir(this.session, this.vm, path);
-		return [...new Set([...entries, ...this.mountedChildNames(path)])].sort(
-			(a, b) => a.localeCompare(b),
-		);
-	}
-
-	async removeFile(path: string): Promise<void> {
-		return this.dispatchWrite(
-			path,
-			(mount, relativePath) => mount.fs.removeFile(relativePath),
-			() => this.client.removeFile(this.session, this.vm, path),
-		);
-	}
-
-	async removeDir(path: string): Promise<void> {
-		return this.dispatchWrite(
-			path,
-			(mount, relativePath) => mount.fs.removeDir(relativePath),
-			() => this.client.removeDir(this.session, this.vm, path),
-		);
-	}
-
-	async rename(oldPath: string, newPath: string): Promise<void> {
-		const from = this.resolveLocalMount(oldPath);
-		const to = this.resolveLocalMount(newPath);
-
-		if (!!from !== !!to) {
-			throw errnoError("EXDEV", "cross-device link not permitted");
-		}
-		if (from && to) {
-			if (from.mount.path !== to.mount.path) {
-				throw errnoError("EXDEV", "cross-device link not permitted");
-			}
-			this.assertLocalWritable(from.mount);
-			return from.mount.fs.rename(from.relativePath, to.relativePath);
-		}
-
-		return this.client.rename(this.session, this.vm, oldPath, newPath);
-	}
-
-	mountFs(
-		path: string,
-		driver: VirtualFileSystem,
-		options?: { readOnly?: boolean },
-	): void {
-		this.localMounts.unshift({
-			path: posixPath.normalize(path),
-			fs: driver,
-			readOnly: options?.readOnly ?? false,
-		});
-		this.localMounts.sort(
-			(left, right) => right.path.length - left.path.length,
-		);
-	}
-
-	unmountFs(path: string): void {
-		const normalized = posixPath.normalize(path);
-		const index = this.localMounts.findIndex(
-			(mount) => mount.path === normalized,
-		);
-		if (index >= 0) {
-			this.localMounts.splice(index, 1);
-		}
-	}
-
-	snapshotProcesses(): ProcessInfo[] {
-		return this.buildProcessSnapshot();
-	}
-
-	getResourceSnapshot(): Promise<SidecarResourceSnapshot> {
-		return this.client.getResourceSnapshot(this.session, this.vm);
-	}
-
-	findListener(request: {
-		host?: string;
-		port?: number;
-		path?: string;
-	}): KernelSocketSnapshot | null {
-		const key = socketLookupKey("listener", request);
-		const cached = this.listenerLookups.get(key);
-		if (!cached?.pending) {
-			this.listenerLookups.set(key, {
-				value: cached?.value ?? null,
-				pending: this.refreshSocketLookup(this.listenerLookups, key, () =>
-					this.client.findListener(this.session, this.vm, request),
-				),
-			});
-		}
-		return this.listenerLookups.get(key)?.value ?? null;
-	}
-
-	/**
-	 * Await a fresh listener lookup instead of reading the synchronous cache.
-	 *
-	 * {@link findListener} returns whatever value the background refresh has
-	 * populated so far, which starts `null`. Callers that poll (for example
-	 * `waitForListener`) can otherwise keep observing that stale `null` even once
-	 * the listener exists. This variant reuses an in-flight refresh when present,
-	 * otherwise starts one, awaits it, and returns the freshly resolved value.
-	 */
-	async findListenerAsync(request: {
-		host?: string;
-		port?: number;
-		path?: string;
-	}): Promise<KernelSocketSnapshot | null> {
-		const key = socketLookupKey("listener", request);
-		const existing = this.listenerLookups.get(key);
-		const pending =
-			existing?.pending ??
-			this.refreshSocketLookup(this.listenerLookups, key, () =>
-				this.client.findListener(this.session, this.vm, request),
-			);
-		if (!existing?.pending) {
-			this.listenerLookups.set(key, {
-				value: existing?.value ?? null,
-				pending,
-			});
-		}
-		await pending;
-		return this.listenerLookups.get(key)?.value ?? null;
-	}
-
-	findBoundUdp(request: {
-		host?: string;
-		port?: number;
-	}): KernelSocketSnapshot | null {
-		const key = socketLookupKey("udp", request);
-		const cached = this.boundUdpLookups.get(key);
-		if (!cached?.pending) {
-			this.boundUdpLookups.set(key, {
-				value: cached?.value ?? null,
-				pending: this.refreshSocketLookup(this.boundUdpLookups, key, () =>
-					this.client.findBoundUdp(this.session, this.vm, request),
-				),
-			});
-		}
-		return this.boundUdpLookups.get(key)?.value ?? null;
-	}
-
-	/**
-	 * Drive an HTTP request to a guest-bound TCP port inside the VM and return
-	 * the raw JSON response payload from the sidecar. The caller decodes the
-	 * JSON into a structured response.
-	 */
-	async vmFetch(request: {
-		port: number;
-		method: string;
-		path: string;
-		headersJson: string;
-		body?: string;
-	}): Promise<string> {
-		return this.client.vmFetch(this.session, this.vm, request);
-	}
-
-	getSignalState(pid: number): KernelSignalState {
-		const entry = this.trackedProcesses.get(pid);
-		if (entry && !this.signalRefreshes.has(pid)) {
-			this.signalRefreshes.set(pid, this.refreshSignalState(entry));
-		}
-		return this.signalStates.get(pid) ?? { handlers: new Map() };
-	}
-
-	private async refreshSocketLookup(
-		cache: Map<string, SocketLookupCacheEntry>,
-		key: string,
-		lookup: () => Promise<SidecarSocketStateEntry | null>,
-	): Promise<void> {
-		try {
-			const socket = await lookup();
-			cache.set(key, {
-				value: socket ? toKernelSocketSnapshot(socket) : null,
-				pending: null,
-			});
-		} catch {
-			cache.set(key, {
-				value: cache.get(key)?.value ?? null,
-				pending: null,
-			});
-		}
-	}
-
-	private async refreshSignalState(entry: TrackedProcessEntry): Promise<void> {
-		try {
-			const signalState = await this.client.getSignalState(
-				this.session,
-				this.vm,
-				entry.processId,
-			);
-			this.signalStates.set(
-				entry.pid,
-				toKernelSignalState(signalState.handlers),
-			);
-		} catch {
-			this.signalStates.set(
-				entry.pid,
-				this.signalStates.get(entry.pid) ?? { handlers: new Map() },
-			);
-		} finally {
-			this.signalRefreshes.delete(entry.pid);
-		}
-	}
-
-	private async refreshProcessSnapshot(): Promise<void> {
-		if (this.processSnapshotRefresh) {
-			await this.processSnapshotRefresh;
-			return;
-		}
-
-		this.processSnapshotRefresh = (async () => {
-			try {
-				this.sidecarProcessSnapshot = await this.client.getProcessSnapshot(
-					this.session,
-					this.vm,
-				);
-			} finally {
-				this.processSnapshotRefresh = null;
-			}
-		})();
-
-		await this.processSnapshotRefresh;
-	}
-
-	private async refreshZombieTimerCount(): Promise<void> {
-		try {
-			const snapshot = await this.client.getZombieTimerCount(
-				this.session,
-				this.vm,
-			);
-			this.zombieTimerCountValue = snapshot.count;
-		} catch {
-			// Keep the last known value if the sidecar query fails.
-		} finally {
-			this.zombieTimerCountRefresh = null;
-		}
-	}
-
-	private async drainTrailingProcessOutput(
-		entry: TrackedProcessEntry,
-	): Promise<void> {
-		if (entry.onStdout.size === 0 && entry.onStderr.size === 0) {
-			return;
-		}
-
-		if (entry.exitViaEvent) {
-			// The sidecar drains process output before it emits `process_exited`,
-			// the stdio frame stream is FIFO, and this pump dispatches events in
-			// order. Once the exit event reaches this entry, no trailing output can
-			// follow it; one zero-delay turn is cheap insurance for same-tick
-			// listener scheduling.
-			await drainTrailingProcessOutputTurn(0);
-			return;
-		}
-
-		let observedGeneration = entry.outputGeneration;
-		let quietTurns = 0;
-		let delayMs = 0;
-		const deadline = Date.now() + TRAILING_OUTPUT_DRAIN_MAX_MS;
-
-		while (quietTurns < TRAILING_OUTPUT_DRAIN_QUIET_TURNS) {
-			const remainingMs = deadline - Date.now();
-			if (remainingMs <= 0) {
-				return;
-			}
-
-			await drainTrailingProcessOutputTurn(
-				Math.min(delayMs, remainingMs),
-			);
-			if (entry.outputGeneration === observedGeneration) {
-				quietTurns += 1;
-			} else {
-				observedGeneration = entry.outputGeneration;
-				quietTurns = 0;
-			}
-			delayMs = TRAILING_OUTPUT_DRAIN_INTERVAL_MS;
-		}
-	}
-
-	private async startTrackedProcess(entry: TrackedProcessEntry): Promise<void> {
-		const started = await this.client.execute(this.session, this.vm, {
-			processId: entry.processId,
-			command: entry.command,
-			args: entry.args,
-			env: entry.env,
-			cwd: entry.cwd,
-		});
-		entry.hostPid = started.pid;
-		entry.started = true;
-		this.updateTrackedProcessSnapshot(entry);
-		void this.refreshProcessSnapshot().catch(() => {});
-		this.signalRefreshes.set(
-			entry.pid,
-			this.refreshSignalState(entry).catch(() => {}),
-		);
-
-		void this.flushPendingStdin(entry).catch((error) => {
-			this.handleBackgroundProcessError(entry, error);
-		});
-		void this.closeTrackedStdin(entry).catch((error) => {
-			this.handleBackgroundProcessError(entry, error);
-		});
-
-		if (entry.pendingKillSignal !== null) {
-			const signal = entry.pendingKillSignal;
-			entry.pendingKillSignal = null;
-			await this.signalProcess(entry, signal);
-		}
-	}
-
-	private async runEventPump(): Promise<void> {
-		while (!this.disposed) {
-			try {
-				const event = await this.client.waitForEvent(
-					{ any: true },
-					undefined,
-					{
-						signal: this.eventPumpAbortController.signal,
-					},
-				);
-				if (event.payload.type === "process_output") {
-					const entry = this.trackedProcessesById.get(event.payload.process_id);
-					if (!entry) {
-						continue;
-					}
-					entry.outputGeneration += 1;
-					void this.refreshProcessSnapshot().catch(() => {});
-					if (!this.signalRefreshes.has(entry.pid)) {
-						this.signalRefreshes.set(
-							entry.pid,
-							this.refreshSignalState(entry).catch(() => {}),
-						);
-					}
-					const chunk = event.payload.chunk;
-					const listeners =
-						event.payload.channel === "stdout"
-							? entry.onStdout
-							: entry.onStderr;
-					for (const listener of listeners) {
-						listener(chunk);
-					}
-					continue;
-				}
-
-				if (event.payload.type === "process_exited") {
-					const entry = this.trackedProcessesById.get(event.payload.process_id);
-					if (!entry) {
-						continue;
-					}
-					void this.refreshProcessSnapshot().catch(() => {});
-					entry.exitViaEvent = true;
-					this.finishProcess(entry, event.payload.exit_code);
-				}
-			} catch (error) {
-				if (this.disposed) {
-					return;
-				}
-				this.pumpError =
-					error instanceof Error ? error : new Error(String(error));
-				for (const entry of this.trackedProcesses.values()) {
-					if (entry.exitCode !== null) {
-						continue;
-					}
-					const stderr = new TextEncoder().encode(
-						`${this.pumpError.message}\n`,
-					);
-					for (const listener of entry.onStderr) {
-						listener(stderr);
-					}
-					this.finishProcess(entry, 1);
-				}
-				return;
-			}
-		}
-	}
-
-	private finishProcess(entry: TrackedProcessEntry, exitCode: number): void {
-		if (entry.exitCode !== null) {
-			return;
-		}
-		// Every started process now parks a signal-state refresh here, so clean
-		// up on the shared exit path — the snapshot-poll fallback exits never
-		// pass through the event pump's `process_exited` branch.
-		this.signalRefreshes.delete(entry.pid);
-		entry.exitCode = exitCode;
-		entry.exitTime = Date.now();
-		this.updateTrackedProcessSnapshot(entry);
-		entry.resolveWait(exitCode);
-	}
-
-	private waitForTrackedProcess(entry: TrackedProcessEntry): Promise<number> {
-		if (entry.exitCode !== null) {
-			return Promise.resolve(entry.exitCode);
-		}
-		if (entry.waitWithFallbackPromise !== null) {
-			return entry.waitWithFallbackPromise;
-		}
-
-		entry.waitWithFallbackPromise = (async () => {
-			await entry.startPromise.catch(() => {});
-			while (entry.exitCode === null && !this.disposed) {
-				const maybeExit = await Promise.race<number | null>([
-					entry.waitPromise.then((exitCode) => exitCode),
-					new Promise<null>((resolve) => setTimeout(() => resolve(null), 50)),
-				]);
-				if (maybeExit !== null) {
-					return maybeExit;
-				}
-
-				try {
-					await this.refreshProcessSnapshot();
-					const snapshot = this.sidecarProcessSnapshot.find(
-						(candidate) => candidate.processId === entry.processId,
-					);
-					if (snapshot?.status === "exited") {
-						this.finishProcess(entry, snapshot.exitCode ?? 0);
-						break;
-					}
-					if (snapshot) {
-						entry.hostExitObservedAt = null;
-						continue;
-					}
-
-					// Fast guest processes can exit before the sidecar emits a
-					// `process_exited` event. Once a started process disappears from the
-					// authoritative VM snapshot for a full grace window, treat it as
-					// reaped even if the `pid` returned at launch was only a kernel/shared
-					// runtime identifier rather than a probeable host PID.
-					if (!snapshot) {
-						const now = Date.now();
-						if (entry.hostExitObservedAt === null) {
-							entry.hostExitObservedAt = now;
-							continue;
-						}
-						if (
-							now - entry.hostExitObservedAt >= MISSING_EXIT_EVENT_GRACE_MS
-						) {
-							this.finishProcess(entry, 0);
-							break;
-						}
-						continue;
-					}
-				} catch {
-					// Fall back to the next wait interval if the sidecar snapshot query fails.
-				}
-			}
-
-			return entry.waitPromise;
-		})().finally(() => {
-			entry.waitWithFallbackPromise = null;
-		});
-
-		return entry.waitWithFallbackPromise;
-	}
-
-	private async signalProcess(
-		entry: TrackedProcessEntry,
-		signal: number,
-	): Promise<void> {
-		await this.signalRefreshes.get(entry.pid);
-		try {
-			await this.client.killProcess(
-				this.session,
-				this.vm,
-				entry.processId,
-				toSidecarSignalName(signal),
-			);
-		} catch (error) {
-			if (isNoSuchProcessError(error) || isUnknownVmError(error)) {
-				return;
-			}
-			throw error;
-		}
-	}
-
-	private flushPendingStdin(entry: TrackedProcessEntry): Promise<void> {
-		if (entry.stdinFlushPromise !== null) {
-			return entry.stdinFlushPromise;
-		}
-
-		entry.stdinFlushPromise = entry.startPromise
-				.then(async () => {
-					if (entry.exitCode !== null) {
-						return;
-					}
-					while (entry.pendingStdin.length > 0) {
-					const chunk = entry.pendingStdin.shift();
-					if (chunk === undefined) {
-						break;
-					}
-						await this.client.writeStdin(
-							this.session,
-							this.vm,
-							entry.processId,
-							chunk,
-						);
-					}
-				})
-				.catch((error) => {
-					if (isNoSuchProcessError(error) || isUnknownVmError(error)) {
-						return;
-					}
-					throw error;
-				})
-				.finally(() => {
-				entry.stdinFlushPromise = null;
-					if (entry.pendingStdin.length > 0 && entry.exitCode === null) {
-						void this.flushPendingStdin(entry).catch((error) => {
-							this.handleBackgroundProcessError(entry, error);
-						});
-					}
-				});
-			return entry.stdinFlushPromise;
-		}
-
-	private async closeTrackedStdin(entry: TrackedProcessEntry): Promise<void> {
-		await entry.startPromise;
-		await this.flushPendingStdin(entry);
-		if (entry.exitCode !== null || !entry.pendingCloseStdin) {
-			return;
-		}
-			entry.pendingCloseStdin = false;
-			try {
-				await this.client.closeStdin(this.session, this.vm, entry.processId);
-			} catch (error) {
-				if (isNoSuchProcessError(error) || isUnknownVmError(error)) {
-					return;
-				}
-				throw error;
-		}
-	}
-
-	private handleBackgroundProcessError(
-		entry: TrackedProcessEntry,
-		error: unknown,
-	): void {
-		if (this.disposed || isNoSuchProcessError(error) || isUnknownVmError(error)) {
-			return;
-		}
-		if (entry.exitCode !== null) {
-			this.recordCompletedProcessError(entry, error);
-			return;
-		}
-		this.emitBackgroundProcessError(entry, error);
-		this.finishProcess(entry, 1);
-	}
-
-	private recordCompletedProcessError(
-		entry: TrackedProcessEntry,
-		error: unknown,
-	): number {
-		if (this.disposed || isNoSuchProcessError(error) || isUnknownVmError(error)) {
-			return entry.exitCode ?? 1;
-		}
-		this.emitBackgroundProcessError(entry, error);
-		entry.exitCode =
-			entry.exitCode === null || entry.exitCode === 0 ? 1 : entry.exitCode;
-		entry.exitTime ??= Date.now();
-		this.updateTrackedProcessSnapshot(entry);
-		return entry.exitCode;
-	}
-
-	private emitBackgroundProcessError(
-		entry: TrackedProcessEntry,
-		error: unknown,
-	): void {
-		const normalized =
-			error instanceof Error ? error : new Error(String(error));
-		const stderr = new TextEncoder().encode(`${normalized.message}\n`);
-		for (const handler of entry.onStderr) {
-			handler(stderr);
-		}
-	}
-
-	private createFilesystemView(includeLocalMounts: boolean): VirtualFileSystem {
-		return {
-			readFile: (path) =>
-				this.dispatchRead(
-					path,
-					(mount, relativePath) => mount.fs.readFile(relativePath),
-					includeLocalMounts,
-				),
-			readTextFile: async (path) =>
-				new TextDecoder().decode(
-					await this.dispatchRead(
-						path,
-						(mount, relativePath) => mount.fs.readFile(relativePath),
-						includeLocalMounts,
-					),
-				),
-			readDir: async (path) => {
-				const local = includeLocalMounts ? this.resolveLocalMount(path) : null;
-				if (local) {
-					return local.mount.fs.readDir(local.relativePath);
-				}
-				const entries = await this.client.readdir(this.session, this.vm, path);
-				return includeLocalMounts
-					? [...new Set([...entries, ...this.mountedChildNames(path)])].sort(
-							(a, b) => a.localeCompare(b),
-						)
-					: entries;
-			},
-			readDirWithTypes: async (path) => {
-				const entries =
-					await this.createFilesystemView(includeLocalMounts).readDir(path);
-				return Promise.all(
-					entries.map(async (name) => {
-						const stat = await this.createFilesystemView(
-							includeLocalMounts,
-						).lstat(posixPath.join(path, name));
-						return {
-							name,
-							isDirectory: stat.isDirectory,
-							isSymbolicLink: stat.isSymbolicLink,
-						};
-					}),
-				);
-			},
-			writeFile: (path, content) =>
-				this.dispatchWrite(
-					path,
-					(mount, relativePath) => mount.fs.writeFile(relativePath, content),
-					() => this.client.writeFile(this.session, this.vm, path, content),
-					includeLocalMounts,
-				),
-			createDir: (path) =>
-				this.dispatchWrite(
-					path,
-					(mount, relativePath) => mount.fs.createDir(relativePath),
-					async () => {
-						try {
-							await this.client.mkdir(this.session, this.vm, path, {
-								recursive: false,
-							});
-						} catch (error) {
-							if (!isAlreadyExistsError(error)) {
-								throw error;
-							}
-						}
-					},
-					includeLocalMounts,
-				),
-			mkdir: (path, options) =>
-				this.dispatchWrite(
-					path,
-					(mount, relativePath) =>
-						mount.fs.mkdir(relativePath, {
-							recursive: options?.recursive ?? true,
-						}),
-					() =>
-						this.client.mkdir(this.session, this.vm, path, {
-							recursive: options?.recursive ?? true,
-						}),
-					includeLocalMounts,
-				),
-			exists: async (path) => {
-				const local = includeLocalMounts ? this.resolveLocalMount(path) : null;
-				if (local) {
-					return local.mount.fs.exists(local.relativePath);
-				}
-				return this.client.exists(this.session, this.vm, path);
-			},
-			stat: async (path) => {
-				const local = includeLocalMounts ? this.resolveLocalMount(path) : null;
-				if (local) {
-					return local.mount.fs.stat(local.relativePath);
-				}
-				return toVirtualStat(
-					await this.client.stat(this.session, this.vm, path),
-				);
-			},
-			removeFile: (path) =>
-				this.dispatchWrite(
-					path,
-					(mount, relativePath) => mount.fs.removeFile(relativePath),
-					() => this.client.removeFile(this.session, this.vm, path),
-					includeLocalMounts,
-				),
-			removeDir: (path) =>
-				this.dispatchWrite(
-					path,
-					(mount, relativePath) => mount.fs.removeDir(relativePath),
-					() => this.client.removeDir(this.session, this.vm, path),
-					includeLocalMounts,
-				),
-			rename: async (oldPath, newPath) => {
-				const from = includeLocalMounts
-					? this.resolveLocalMount(oldPath)
-					: null;
-				const to = includeLocalMounts ? this.resolveLocalMount(newPath) : null;
-				if (!!from !== !!to) {
-					throw errnoError("EXDEV", "cross-device link not permitted");
-				}
-				if (from && to) {
-					if (from.mount.path !== to.mount.path) {
-						throw errnoError("EXDEV", "cross-device link not permitted");
-					}
-					this.assertLocalWritable(from.mount);
-					return from.mount.fs.rename(from.relativePath, to.relativePath);
-				}
-				return this.client.rename(this.session, this.vm, oldPath, newPath);
-			},
-			realpath: async (path) => {
-				const local = includeLocalMounts ? this.resolveLocalMount(path) : null;
-				if (local) {
-					return local.mount.fs.realpath(local.relativePath);
-				}
-				return this.client.realpath(this.session, this.vm, path);
-			},
-			symlink: (target, linkPath) =>
-				this.dispatchWrite(
-					linkPath,
-					(mount, relativePath) => mount.fs.symlink(target, relativePath),
-					() => this.client.symlink(this.session, this.vm, target, linkPath),
-					includeLocalMounts,
-				),
-			readlink: async (path) => {
-				const local = includeLocalMounts ? this.resolveLocalMount(path) : null;
-				if (local) {
-					return local.mount.fs.readlink(local.relativePath);
-				}
-				return this.client.readLink(this.session, this.vm, path);
-			},
-			lstat: async (path) => {
-				const local = includeLocalMounts ? this.resolveLocalMount(path) : null;
-				if (local) {
-					return local.mount.fs.lstat(local.relativePath);
-				}
-				return toVirtualStat(
-					await this.client.lstat(this.session, this.vm, path),
-				);
-			},
-			link: async (oldPath, newPath) => {
-				const from = includeLocalMounts
-					? this.resolveLocalMount(oldPath)
-					: null;
-				const to = includeLocalMounts ? this.resolveLocalMount(newPath) : null;
-				if (!!from !== !!to) {
-					throw errnoError("EXDEV", "cross-device link not permitted");
-				}
-				if (from && to) {
-					if (from.mount.path !== to.mount.path) {
-						throw errnoError("EXDEV", "cross-device link not permitted");
-					}
-					this.assertLocalWritable(from.mount);
-					return from.mount.fs.link(from.relativePath, to.relativePath);
-				}
-				return this.client.link(this.session, this.vm, oldPath, newPath);
-			},
-			chmod: (path, mode) =>
-				this.dispatchWrite(
-					path,
-					(mount, relativePath) => mount.fs.chmod(relativePath, mode),
-					() => this.client.chmod(this.session, this.vm, path, mode),
-					includeLocalMounts,
-				),
-			chown: (path, uid, gid) =>
-				this.dispatchWrite(
-					path,
-					(mount, relativePath) => mount.fs.chown(relativePath, uid, gid),
-					() => this.client.chown(this.session, this.vm, path, uid, gid),
-					includeLocalMounts,
-				),
-			utimes: (path, atimeMs, mtimeMs) =>
-				this.dispatchWrite(
-					path,
-					(mount, relativePath) =>
-						mount.fs.utimes(relativePath, atimeMs, mtimeMs),
-					() =>
-						this.client.utimes(this.session, this.vm, path, atimeMs, mtimeMs),
-					includeLocalMounts,
-				),
-			truncate: (path, length) =>
-				this.dispatchWrite(
-					path,
-					(mount, relativePath) => mount.fs.truncate(relativePath, length),
-					() => this.client.truncate(this.session, this.vm, path, length),
-					includeLocalMounts,
-				),
-			pread: async (path, offset, length) => {
-				const local = includeLocalMounts ? this.resolveLocalMount(path) : null;
-				if (local) {
-					return local.mount.fs.pread(local.relativePath, offset, length);
-				}
-				return this.client.pread(this.session, this.vm, path, offset, length);
-			},
-			pwrite: async (path, offset, data) => {
-				const bytes =
-					await this.createFilesystemView(includeLocalMounts).readFile(path);
-				const nextSize = Math.max(bytes.length, offset + data.length);
-				const updated = new Uint8Array(nextSize);
-				updated.set(bytes);
-				updated.set(data, offset);
-				await this.createFilesystemView(includeLocalMounts).writeFile(
-					path,
-					updated,
-				);
-			},
-		};
-	}
-
-	private buildProcessSnapshot(): ProcessInfo[] {
-		void this.refreshProcessSnapshot().catch(() => {});
-		const processMap = new Map<number, ProcessInfo>();
-		const displayPidByKernelPid = new Map<number, number>();
-
-		for (const entry of this.sidecarProcessSnapshot) {
-			const tracked = this.trackedProcessesById.get(entry.processId);
-			if (tracked) {
-				displayPidByKernelPid.set(entry.pid, tracked.pid);
-			}
-		}
-
-		for (const entry of this.sidecarProcessSnapshot) {
-			const tracked = this.trackedProcessesById.get(entry.processId);
-			const displayPid = displayPidByKernelPid.get(entry.pid) ?? entry.pid;
-			const displayPpid = displayPidByKernelPid.get(entry.ppid) ?? entry.ppid;
-			const displayPgid = displayPidByKernelPid.get(entry.pgid) ?? entry.pgid;
-			const displaySid = displayPidByKernelPid.get(entry.sid) ?? entry.sid;
-			const processKey = `${entry.processId}:${entry.pid}`;
-			const startTime =
-				tracked?.startTime ??
-				this.observedProcessStartTimes.get(processKey) ??
-				Date.now();
-			this.observedProcessStartTimes.set(processKey, startTime);
-
-			processMap.set(displayPid, {
-				pid: displayPid,
-				ppid: displayPpid,
-				pgid: displayPgid,
-				sid: displaySid,
-				driver: tracked?.driver ?? entry.driver,
-				command: tracked?.command ?? entry.command,
-				args: tracked?.args ?? entry.args,
-				cwd: tracked?.cwd ?? entry.cwd,
-				status:
-					tracked?.exitCode !== null
-						? "exited"
-						: tracked
-							? "running"
-							: entry.status === "exited"
-								? "exited"
-								: "running",
-				exitCode: tracked?.exitCode ?? entry.exitCode,
-				startTime,
-				exitTime: tracked?.exitTime ?? null,
-			});
-		}
-
-		for (const entry of this.trackedProcesses.values()) {
-			if (processMap.has(entry.pid)) {
-				continue;
-			}
-			processMap.set(entry.pid, {
-				pid: entry.pid,
-				ppid: 0,
-				pgid: entry.pid,
-				sid: entry.pid,
-				driver: entry.driver,
-				command: entry.command,
-				args: entry.args,
-				cwd: entry.cwd,
-				status: entry.exitCode === null ? "running" : "exited",
-				exitCode: entry.exitCode,
-				startTime: entry.startTime,
-				exitTime: entry.exitTime,
-			});
-		}
-
-		this.processes.clear();
-		for (const process of processMap.values()) {
-			this.processes.set(process.pid, process);
-		}
-
-		return [...processMap.values()].sort((left, right) => left.pid - right.pid);
-	}
-
-	private dispatchRead<T>(
-		path: string,
-		handler: (mount: LocalCompatMount, relativePath: string) => Promise<T>,
-		includeLocalMounts = true,
-	): Promise<T> {
-		const local = includeLocalMounts ? this.resolveLocalMount(path) : null;
-		if (local) {
-			return handler(local.mount, local.relativePath);
-		}
-		return this.dispatchNativeRead(path) as Promise<T>;
-	}
-
-	private dispatchNativeRead(path: string): Promise<Uint8Array> {
-		return this.client.readFile(this.session, this.vm, path);
-	}
-
-	private async dispatchWrite(
-		path: string,
-		handler: (mount: LocalCompatMount, relativePath: string) => Promise<void>,
-		nativeHandler: () => Promise<void>,
-		includeLocalMounts = true,
-	): Promise<void> {
-		this.assertGuestPathWritable(path);
-		const local = includeLocalMounts ? this.resolveLocalMount(path) : null;
-		if (local) {
-			this.assertLocalWritable(local.mount);
-			await handler(local.mount, local.relativePath);
-			return;
-		}
-		await nativeHandler();
-	}
-
-	private resolveLocalMount(
-		path: string,
-	): { mount: LocalCompatMount; relativePath: string } | null {
-		const normalizedPath = posixPath.normalize(path);
-		for (const mount of this.localMounts) {
-			if (
-				normalizedPath !== mount.path &&
-				!normalizedPath.startsWith(`${mount.path}/`)
-			) {
-				continue;
-			}
-			const relativePath =
-				normalizedPath === mount.path
-					? "/"
-					: `/${normalizedPath.slice(mount.path.length + 1)}`;
-			return {
-				mount,
-				relativePath,
-			};
-		}
-		return null;
-	}
-
-	private assertGuestPathWritable(path: string): void {
-		const normalizedPath = posixPath.normalize(path);
-		for (const root of PROTECTED_READ_ONLY_GUEST_ROOTS) {
-			if (
-				normalizedPath === root ||
-				normalizedPath.startsWith(`${root}/`)
-			) {
-				throw errnoError("EROFS", "read-only file system");
-			}
-		}
-	}
-
-	private mountedChildNames(path: string): string[] {
-		const normalizedPath = posixPath.normalize(path);
-		const names = new Set<string>();
-		for (const mount of this.localMounts) {
-			if (mount.path === normalizedPath) {
-				continue;
-			}
-			if (
-				!mount.path.startsWith(`${normalizedPath}/`) &&
-				normalizedPath !== "/"
-			) {
-				continue;
-			}
-			const relative =
-				normalizedPath === "/"
-					? mount.path.slice(1)
-					: mount.path.slice(normalizedPath.length + 1);
-			const name = relative.split("/").find(Boolean);
-			if (name) {
-				names.add(name);
-			}
-		}
-		return [...names];
-	}
-
-	private assertLocalWritable(mount: LocalCompatMount): void {
-		if (mount.readOnly) {
-			throw errnoError("EROFS", "read-only file system");
-		}
-	}
-
-	private updateTrackedProcessSnapshot(entry: TrackedProcessEntry): void {
-		this.processes.set(entry.pid, {
-			pid: entry.pid,
-			ppid: 0,
-			pgid: entry.pid,
-			sid: entry.pid,
-			driver: entry.driver,
-			command: entry.command,
-			args: entry.args,
-			cwd: entry.cwd,
-			status: entry.exitCode === null ? "running" : "exited",
-			exitCode: entry.exitCode,
-			startTime: entry.startTime,
-			exitTime: entry.exitTime,
-		});
-	}
-}
-
-function buildCommandMap(
-	commandGuestPaths: ReadonlyMap<string, string>,
-): Map<string, string> {
-	const commands = new Map<string, string>([
-		["node", "node"],
-		["npm", "node"],
-		["npx", "node"],
-	]);
-	for (const name of commandGuestPaths.keys()) {
-		commands.set(name, "wasmvm");
-	}
-	return commands;
-}
-
-function isNoSuchProcessError(error: unknown): boolean {
-	if (!(error instanceof Error)) {
-		return false;
-	}
-	const message = error.message.toLowerCase();
-	return (
-		error.message.includes("ESRCH") ||
-		message.includes("no such process") ||
-		message.includes("has no active process")
-	);
-}
-
-function isUnknownVmError(error: unknown): boolean {
-	if (!(error instanceof Error)) {
-		return false;
-	}
-	return error.message.toLowerCase().includes("unknown sidecar vm");
-}
-
-function isAlreadyExistsError(error: unknown): boolean {
-	if (!(error instanceof Error)) {
-		return false;
-	}
-	const message = error.message.toLowerCase();
-	return error.message.includes("EEXIST") || message.includes("file exists");
-}
-
-function isMissingHostProcessError(error: unknown): boolean {
-	return (
-		typeof error === "object" &&
-		error !== null &&
-		"code" in error &&
-		(error as { code?: unknown }).code === "ESRCH"
-	);
-}
-
-function errnoError(code: string, message: string): Error {
-	return Object.assign(new Error(`${code}: ${message}`), { code });
-}
-
-function toVirtualStat(stat: GuestFilesystemStat): VirtualStat {
-	return {
-		mode: stat.mode,
-		size: stat.size,
-		blocks: stat.blocks,
-		dev: stat.dev,
-		rdev: stat.rdev,
-		isDirectory: stat.is_directory,
-		isSymbolicLink: stat.is_symbolic_link,
-		atimeMs: stat.atime_ms,
-		mtimeMs: stat.mtime_ms,
-		ctimeMs: stat.ctime_ms,
-		birthtimeMs: stat.birthtime_ms,
-		ino: stat.ino,
-		nlink: stat.nlink,
-		uid: stat.uid,
-		gid: stat.gid,
-	};
-}
-
-function toKernelSocketSnapshot(
-	socket: SidecarSocketStateEntry,
-): KernelSocketSnapshot {
-	return {
-		processId: socket.processId,
-		...(socket.host !== undefined ? { host: socket.host } : {}),
-		...(socket.port !== undefined ? { port: socket.port } : {}),
-		...(socket.path !== undefined ? { path: socket.path } : {}),
-	};
-}
-
-function toKernelSignalState(
-	handlers: ReadonlyMap<number, SidecarSignalHandlerRegistration>,
-): KernelSignalState {
-	return {
-		handlers: new Map(
-			[...handlers.entries()].map(([signal, registration]) => [
-				signal,
-				{
-					action: registration.action,
-					mask: new Set(registration.mask),
-					flags: registration.flags,
-				},
-			]),
-		),
-	};
-}
-
-function socketLookupKey(
-	kind: "listener" | "udp",
-	request: { host?: string; port?: number; path?: string },
-): string {
-	return JSON.stringify({
-		kind,
-		host: request.host ?? null,
-		port: request.port ?? null,
-		path: request.path ?? null,
-	});
-}
-
-export type {
-	AuthenticatedSession,
-	CreatedVm,
-	GuestFilesystemStat,
-	SidecarSpawnOptions,
-	RootFilesystemEntry,
-	SidecarEventSelector,
-	SidecarPermissionsPolicy,
-	SidecarRegisteredHostCallbackDefinition,
-	SidecarRequestFrame,
-	SidecarRequestHandler,
-	SidecarResponsePayload,
-	SidecarSessionState,
-	SidecarSignalHandlerRegistration,
-	SidecarSocketStateEntry,
-} from "./sidecar-process.js";
-export {
-	NATIVE_SIDECAR_FRAME_TIMEOUT_MS,
-	SidecarProcess,
-	SidecarEventBufferOverflow,
-	SidecarProcessError,
-	SidecarProcessExited,
-} from "./sidecar-process.js";
diff --git a/packages/core/src/native-client.ts b/packages/core/src/native-client.ts
deleted file mode 100644
index 3bda2d269..000000000
--- a/packages/core/src/native-client.ts
+++ /dev/null
@@ -1,206 +0,0 @@
-import { resolvePublishedSidecarBinary } from "./binary.js";
-import {
-	SidecarProcessExited,
-	StdioSidecarProcess,
-} from "./process.js";
-import { SidecarProtocolClient } from "./protocol-client.js";
-import type { SidecarProcessTransport } from "./sidecar-client.js";
-import { registerSidecarProcessSpawnFactory } from "./sidecar-process.js";
-import type {
-	LiveEventFrame,
-	LiveResponseFrame,
-	LiveSidecarRequestHandler,
-	ProtocolFramePayloadCodec,
-} from "./protocol-frames.js";
-import type { LiveOwnershipScope } from "./ownership.js";
-import type { LiveRequestPayload } from "./request-payloads.js";
-import type { LiveSidecarEventSelector } from "./event-buffer.js";
-
-export const DEFAULT_SIDECAR_FRAME_TIMEOUT_MS = 120_000;
-export const DEFAULT_SIDECAR_EVENT_BUFFER_CAPACITY = 4_096;
-export const DEFAULT_SIDECAR_GRACEFUL_EXIT_MS = 5_000;
-export const DEFAULT_SIDECAR_FORCE_EXIT_MS = 2_000;
-
-export interface StdioSidecarProtocolClientSpawnOptions {
-	cwd?: string;
-	command?: string;
-	args?: string[];
-	frameTimeoutMs?: number;
-	eventBufferCapacity?: number;
-	gracefulExitMs?: number;
-	forceExitMs?: number;
-	disposedErrorMessage?: string;
-	payloadCodec?: ProtocolFramePayloadCodec;
-}
-
-type ResolvedStdioSidecarProtocolClientOptions = Required<
-	Pick<
-		StdioSidecarProtocolClientSpawnOptions,
-		| "frameTimeoutMs"
-		| "eventBufferCapacity"
-		| "gracefulExitMs"
-		| "forceExitMs"
-		| "disposedErrorMessage"
-		| "payloadCodec"
-	>
->;
-
-export class StdioSidecarProtocolClient implements SidecarProcessTransport {
-	readonly child: StdioSidecarProcess["child"];
-	private readonly sidecarProcess: StdioSidecarProcess;
-	private readonly protocolClient: SidecarProtocolClient;
-	private readonly gracefulExitMs: number;
-	private readonly forceExitMs: number;
-	private readonly disposedErrorMessage: string;
-
-	private constructor(
-		sidecarProcess: StdioSidecarProcess,
-		options: ResolvedStdioSidecarProtocolClientOptions,
-	) {
-		this.sidecarProcess = sidecarProcess;
-		this.child = sidecarProcess.child;
-		this.gracefulExitMs = options.gracefulExitMs;
-		this.forceExitMs = options.forceExitMs;
-		this.disposedErrorMessage = options.disposedErrorMessage;
-		this.protocolClient = new SidecarProtocolClient({
-			stdin: this.child.stdin,
-			stdout: this.child.stdout,
-			frameTimeoutMs: options.frameTimeoutMs,
-			eventBufferCapacity: options.eventBufferCapacity,
-			payloadCodec: options.payloadCodec,
-			stderrText: () => this.sidecarProcess.stderrText(),
-			streamEndedError: () =>
-				this.sidecarProcess.currentExitError() ??
-				new SidecarProcessExited({
-					exitCode: this.child.exitCode,
-					signal: this.child.signalCode,
-					stderr: this.sidecarProcess.stderrText(),
-				}),
-			frameError: (error) => this.sidecarProcess.currentExitError() ?? error,
-		});
-		this.sidecarProcess.onExit((error) => {
-			this.failPermanently(error);
-		});
-		this.sidecarProcess.onError((error) => {
-			this.failPermanently(error);
-		});
-	}
-
-	static spawn(
-		options: StdioSidecarProtocolClientSpawnOptions = {},
-	): StdioSidecarProtocolClient {
-		return new StdioSidecarProtocolClient(
-			StdioSidecarProcess.spawn({
-				command: options.command ?? resolvePublishedSidecarBinary(),
-				args: options.args ?? [],
-				cwd: options.cwd,
-			}),
-			{
-				frameTimeoutMs:
-					options.frameTimeoutMs ?? DEFAULT_SIDECAR_FRAME_TIMEOUT_MS,
-				eventBufferCapacity:
-					options.eventBufferCapacity ??
-					DEFAULT_SIDECAR_EVENT_BUFFER_CAPACITY,
-				gracefulExitMs:
-					options.gracefulExitMs ?? DEFAULT_SIDECAR_GRACEFUL_EXIT_MS,
-				forceExitMs: options.forceExitMs ?? DEFAULT_SIDECAR_FORCE_EXIT_MS,
-				disposedErrorMessage:
-					options.disposedErrorMessage ?? "sidecar client disposed",
-				payloadCodec: options.payloadCodec ?? "bare",
-			},
-		);
-	}
-
-	setSidecarRequestHandler(handler: LiveSidecarRequestHandler | null): void {
-		this.protocolClient.setSidecarRequestHandler(handler);
-	}
-
-	onEvent(handler: (event: LiveEventFrame) => void): () => void {
-		return this.protocolClient.onEvent(handler);
-	}
-
-	async sendRequest(input: {
-		ownership: LiveOwnershipScope;
-		payload: LiveRequestPayload;
-	}): Promise<LiveResponseFrame> {
-		return await this.protocolClient.sendRequest(input);
-	}
-
-	async waitForEvent(
-		matcher:
-			| LiveSidecarEventSelector
-			| ((event: LiveEventFrame) => boolean),
-		timeoutMs?: number,
-		options?: {
-			signal?: AbortSignal;
-		},
-	): Promise<LiveEventFrame> {
-		return await this.protocolClient.waitForEvent(matcher, timeoutMs, options);
-	}
-
-	async dispose(): Promise<void> {
-		this.protocolClient.failPermanently(new Error(this.disposedErrorMessage));
-
-		if (!this.child.stdin.destroyed) {
-			try {
-				this.child.stdin.end();
-			} catch {
-				// Stdin may already be closing. The child exit watcher will catch up.
-			}
-		}
-
-		const exitCode = await this.sidecarProcess.waitForExit(
-			this.gracefulExitMs,
-		);
-		if (exitCode === null) {
-			try {
-				this.child.kill("SIGKILL");
-			} catch {
-				// The child may have exited between the timeout and the kill attempt.
-			}
-			await this.sidecarProcess.waitForExit(this.forceExitMs);
-		}
-
-		this.protocolClient.dispose();
-		try {
-			this.child.stdin.destroy();
-		} catch {
-			// Best effort. The child is gone so the descriptor will close on its own.
-		}
-		try {
-			this.child.stdout.destroy();
-		} catch {
-			// Best effort. The child is gone so the descriptor will close on its own.
-		}
-		try {
-			this.child.stderr.destroy();
-		} catch {
-			// Best effort. The child is gone so the descriptor will close on its own.
-		}
-
-		if (
-			exitCode !== null &&
-			exitCode !== 0 &&
-			this.child.signalCode === null
-		) {
-			throw new Error(
-				`sidecar exited with code ${exitCode}\nstderr:\n${this.sidecarProcess.stderrText()}`,
-			);
-		}
-	}
-
-	failPermanently(error: Error): void {
-		this.protocolClient.failPermanently(error, {
-			replaceExisting: (current, next) =>
-				current instanceof SidecarProcessExited &&
-				current.exitCode === null &&
-				current.signal === null &&
-				next instanceof SidecarProcessExited &&
-				(next.exitCode !== null || next.signal !== null),
-		});
-	}
-}
-
-registerSidecarProcessSpawnFactory((options) =>
-	StdioSidecarProtocolClient.spawn(options),
-);
diff --git a/packages/core/src/node-runtime-options-schema.ts b/packages/core/src/node-runtime-options-schema.ts
deleted file mode 100644
index 6121483c4..000000000
--- a/packages/core/src/node-runtime-options-schema.ts
+++ /dev/null
@@ -1,151 +0,0 @@
-import { z } from "zod";
-import type { NodeRuntimeCreateOptions } from "./node-runtime.js";
-
-const permissionModeSchema = z.enum(["allow", "deny"]);
-const stringArray = z.array(z.string());
-
-const fsPermissionRuleSchema = z
-	.object({
-		mode: permissionModeSchema,
-		operations: stringArray.optional(),
-		paths: stringArray.optional(),
-	})
-	.strict();
-
-const patternPermissionRuleSchema = z
-	.object({
-		mode: permissionModeSchema,
-		operations: stringArray.optional(),
-		patterns: stringArray.optional(),
-	})
-	.strict();
-
-const fsRulePermissionsSchema = z
-	.object({
-		default: permissionModeSchema.optional(),
-		rules: z.array(fsPermissionRuleSchema),
-	})
-	.strict();
-
-const patternRulePermissionsSchema = z
-	.object({
-		default: permissionModeSchema.optional(),
-		rules: z.array(patternPermissionRuleSchema),
-	})
-	.strict();
-
-const fsPermissionsSchema = z.union([permissionModeSchema, fsRulePermissionsSchema]);
-const patternPermissionsSchema = z.union([
-	permissionModeSchema,
-	patternRulePermissionsSchema,
-]);
-
-export const nodeRuntimePermissionsSchema = z
-	.object({
-		fs: fsPermissionsSchema.optional(),
-		network: patternPermissionsSchema.optional(),
-		childProcess: patternPermissionsSchema.optional(),
-		process: patternPermissionsSchema.optional(),
-		env: patternPermissionsSchema.optional(),
-		binding: patternPermissionsSchema.optional(),
-	})
-	.strict();
-
-const uint8ArraySchema = z.custom<Uint8Array>(
-	(value: unknown) => value instanceof Uint8Array,
-	{ message: "Expected Uint8Array" },
-);
-
-const hostDirectoryMountSchema = z
-	.object({
-		guestPath: z.string(),
-		hostPath: z.string(),
-		readOnly: z.boolean().optional(),
-	})
-	.strict();
-
-const nodeModulesMountSchema = z
-	.object({
-		hostPath: z.string(),
-		guestPath: z.string().optional(),
-	})
-	.strict();
-
-const jsRuntimeSchema = z
-	.object({
-		platform: z.enum(["node", "browser", "neutral", "bare"]).optional(),
-		moduleResolution: z.enum(["node", "relative", "none"]).optional(),
-		allowedBuiltins: stringArray.optional(),
-		highResolutionTime: z.boolean().optional(),
-	})
-	.strict();
-
-const bindingExampleSchema = z
-	.object({
-		description: z.string(),
-		input: z.unknown(),
-	})
-	.strict();
-
-const bindingDefinitionSchema = z
-	.object({
-		description: z.string(),
-		inputSchema: z.custom<object>(
-			(value: unknown) => typeof value === "object" && value !== null,
-			{ message: "Expected JSON Schema object" },
-		),
-		timeoutMs: z.number().int().nonnegative().optional(),
-		examples: z.array(bindingExampleSchema).optional(),
-		commandAliases: stringArray.optional(),
-		handler: z.custom<(input: unknown) => unknown | Promise<unknown>>(
-			(value: unknown) => typeof value === "function",
-			{ message: "Expected function" },
-		),
-	})
-	.strict();
-
-/**
- * Runtime validation for the public `NodeRuntime.create(...)` API.
- *
- * This is the TS-side guard for the ergonomic options shape. The sidecar VM
- * JSON it eventually produces is still validated by
- * `crates/vm-config/src/lib.rs::CreateVmConfig` with `deny_unknown_fields`.
- * Keep these in sync when adding high-level create options that translate into
- * the Rust VM config.
- */
-export const nodeRuntimeCreateOptionsSchema = z
-	.object({
-		env: z.record(z.string(), z.string()).optional(),
-		cwd: z.string().optional(),
-		permissions: nodeRuntimePermissionsSchema.optional(),
-		commandsDir: z.string().optional(),
-		wasmCommandDirs: stringArray.optional(),
-		sidecar: z
-			.custom((value: unknown) => typeof value === "object" && value !== null, {
-				message: "Expected SidecarProcess object",
-			})
-			.optional(),
-		onBootTiming: z
-			.custom<(timing: unknown) => void>(
-				(value: unknown) => typeof value === "function",
-				{ message: "Expected function" },
-			)
-			.optional(),
-		files: z
-			.record(z.string(), z.union([z.string(), uint8ArraySchema]))
-			.optional(),
-		mounts: z.array(hostDirectoryMountSchema).optional(),
-		nodeModules: z.union([z.string(), nodeModulesMountSchema]).optional(),
-		bindings: z.record(z.string(), bindingDefinitionSchema).optional(),
-		loopbackExemptPorts: z
-			.array(z.number().int().min(0).max(65535))
-			.optional(),
-		jsRuntime: jsRuntimeSchema.optional(),
-	})
-	.strict() as z.ZodType<NodeRuntimeCreateOptions>;
-
-export function parseNodeRuntimeCreateOptions(
-	options: NodeRuntimeCreateOptions = {},
-): NodeRuntimeCreateOptions {
-	return nodeRuntimeCreateOptionsSchema.parse(options);
-}
diff --git a/packages/core/src/node-runtime.ts b/packages/core/src/node-runtime.ts
deleted file mode 100644
index c330b2fe0..000000000
--- a/packages/core/src/node-runtime.ts
+++ /dev/null
@@ -1,1504 +0,0 @@
-/**
- * NodeRuntime — ergonomic façade for running guest JavaScript end-to-end.
- *
- * Boots a fully virtualized VM (via the native sidecar) and runs guest Node
- * programs with minimal boilerplate. All of the sidecar spawn, session
- * handshake, VM creation, root filesystem bootstrap, runtime-driver mounting,
- * and lifecycle waiting are hidden behind `NodeRuntime.create()`.
- *
- * ```ts
- * const rt = await NodeRuntime.create();
- * const { stdout, exitCode } = await rt.exec("console.log('hi', 1 + 1)");
- * await rt.dispose();
- * ```
- *
- * Guest code is written to an ESM module inside the VM and executed as
- * `node <file>` through the kernel, so all execution stays inside the kernel
- * isolation boundary — no host escapes, no real Node.js builtins for guest
- * work.
- */
-
-import { existsSync } from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-import type {
-	ExecResult,
-	BindingDefinition,
-	Kernel,
-	KernelBootTiming,
-	Permissions,
-	VirtualDirEntry,
-} from "./test-runtime.js";
-import type { JsRuntimeConfig } from "./generated/JsRuntimeConfig.js";
-import type { SidecarProcess } from "./sidecar-process.js";
-import {
-	createInMemoryFileSystem,
-	createKernel,
-	createNodeRuntime,
-	createWasmVmRuntime,
-	NodeFileSystem,
-} from "./test-runtime.js";
-import { parseNodeRuntimeCreateOptions } from "./node-runtime-options-schema.js";
-
-export type {
-	BindingDefinition,
-	HostToolExample,
-	VirtualDirEntry,
-} from "./test-runtime.js";
-export { resolveNodeRuntimeSidecarBinary } from "./test-runtime.js";
-
-export type NodeRuntimeBootTimingPhase =
-	| KernelBootTiming["phase"]
-	| "runtime_mount_wasm"
-	| "runtime_mount_node"
-	| "bindings";
-
-export interface NodeRuntimeBootTiming {
-	phase: NodeRuntimeBootTimingPhase;
-	durationMs: number;
-}
-
-/** Repository root, used to locate the in-repo WASM command build output. */
-const REPO_ROOT = fileURLToPath(new URL("../../..", import.meta.url));
-
-/**
- * In-repo build output for the WASM coreutils/shell command binaries, produced
- * by the Rust command build (`make -C registry/native wasm`). Only present in a
- * developer checkout; preferred when it exists so local edits are picked up
- * without re-vendoring.
- */
-const REPO_COMMANDS_DIR = path.join(
-	REPO_ROOT,
-	"registry/native/target/wasm32-wasip1/release/commands",
-);
-
-/**
- * Commands vendored into the published `@secure-exec/core` package by
- * `scripts/copy-wasm-commands.mjs` (listed in `files` as `commands`). This is
- * the directory a real `npm install secure-exec` resolves: from the compiled
- * `dist/node-runtime.js` it sits at `<package>/commands`. This is the analogue
- * of how the sidecar binary ships inside `@secure-exec/sidecar`.
- */
-const BUNDLED_COMMANDS_DIR = fileURLToPath(
-	new URL("../commands", import.meta.url),
-);
-
-/**
- * Resolve the directory holding the WASM command binaries (the source of the
- * guest `sh` the kernel needs to spawn any process). Precedence:
- *
- *   1. explicit `commandsDir` option,
- *   2. `SECURE_EXEC_WASM_COMMANDS_DIR` env var,
- *   3. the in-repo build output (developer checkout), when present,
- *   4. the commands vendored into the installed package (published installs).
- *
- * The in-repo path wins over the bundled copy so local development picks up
- * freshly built commands without re-vendoring. A fresh `npm install` has no
- * in-repo path, so it falls through to the bundled copy.
- */
-export function resolveNodeRuntimeCommandsDir(explicit?: string): string {
-	if (explicit !== undefined) {
-		return explicit;
-	}
-	const fromEnv = process.env.SECURE_EXEC_WASM_COMMANDS_DIR;
-	if (fromEnv) {
-		return fromEnv;
-	}
-	if (existsSync(REPO_COMMANDS_DIR)) {
-		return REPO_COMMANDS_DIR;
-	}
-	return BUNDLED_COMMANDS_DIR;
-}
-
-/**
- * Secure-by-default permission policy applied when the caller passes no
- * `permissions`. Outward-facing capabilities are denied: there is **no network
- * access** (and no host callbacks) by default — guest code cannot reach the
- * network until you opt in. The filesystem, child-process, process, and env
- * scopes are allowed because they are fully virtualized (the guest only ever
- * sees the VM's in-memory filesystem and kernel-managed processes, never the
- * real host) and are required for the runtime to execute a guest program at
- * all. Tighten or widen any scope by passing your own `permissions`.
- */
-const DEFAULT_PERMISSIONS: Permissions = {
-	fs: "allow",
-	childProcess: "allow",
-	process: "allow",
-	env: "allow",
-	network: "deny",
-};
-
-/**
- * Options for {@link NodeRuntime.create}.
- *
- * Keep this public interface in sync with
- * `packages/core/src/node-runtime-options-schema.ts::nodeRuntimeCreateOptionsSchema`.
- * Options that translate into sidecar VM JSON must also stay aligned with
- * `crates/vm-config/src/lib.rs::CreateVmConfig`.
- */
-export interface NodeRuntimeCreateOptions {
-	/** Environment variables visible to guest processes. */
-	env?: Record<string, string>;
-	/** Initial working directory for guest processes. Defaults to `/workspace`. */
-	cwd?: string;
-	/**
-	 * Permission policy for the VM. Merged over a secure default that **denies
-	 * network access** (guest code cannot reach the network until you opt in);
-	 * the virtualized filesystem and processes stay enabled so programs run.
-	 * Because it merges, a partial policy works: `{ network: "allow" }` grants
-	 * the network while keeping the execution essentials. Pass a fuller policy
-	 * (rule sets) to further sandbox individual scopes.
-	 */
-	permissions?: Permissions;
-	/**
-	 * Override the directory containing the WASM command binaries (the source of
-	 * the guest `sh`). When unset, resolution falls back through the
-	 * `SECURE_EXEC_WASM_COMMANDS_DIR` environment variable, the in-repo build
-	 * output (developer checkouts), then the commands vendored into the installed
-	 * `@secure-exec/core` package (published installs).
-	 */
-	commandsDir?: string;
-	/**
-	 * Additional directories of wasm32-wasip1 commands to register in the VM.
-	 * Intended for low-level tooling and benchmark harnesses; normal callers use
-	 * the bundled shell/coreutils command directory resolved by `commandsDir`.
-	 */
-	wasmCommandDirs?: string[];
-	/**
-	 * Existing native sidecar process to use for this runtime. Omit this to use
-	 * the default shared sidecar behavior. When provided, the runtime owns only
-	 * its VM and leaves sidecar process disposal to the caller.
-	 */
-	sidecar?: SidecarProcess;
-	/** Receives coarse boot phase timings for benchmarks and diagnostics. */
-	onBootTiming?: (timing: NodeRuntimeBootTiming) => void;
-	/**
-	 * Files to seed into the VM's virtual filesystem before the guest runs,
-	 * keyed by absolute guest path. Parent directories are created as needed.
-	 * Use this to project host assets, npm packages, or fixtures into the
-	 * sandbox so guest code can `import`/`require`/read them. The bytes are
-	 * copied into the VM's in-memory filesystem; the host filesystem is never
-	 * exposed to the guest.
-	 *
-	 * ```ts
-	 * const rt = await NodeRuntime.create({
-	 *   files: { "/root/data.json": '{"ok":true}' },
-	 * });
-	 * ```
-	 */
-	files?: Record<string, string | Uint8Array>;
-	/**
-	 * Host directories to project into the VM's virtual filesystem, Docker-style.
-	 * Each mount makes a host directory readable at a guest path. Files are read
-	 * lazily from the host as the guest accesses them, so large trees (for
-	 * example a `node_modules` package such as the TypeScript compiler) are
-	 * projected without copying their bytes up front. The guest sees only the
-	 * mounted subtree, never the wider host filesystem.
-	 *
-	 * ```ts
-	 * const rt = await NodeRuntime.create({
-	 *   mounts: [
-	 *     {
-	 *       guestPath: "/root/node_modules/typescript",
-	 *       hostPath: "/abs/path/to/node_modules/typescript",
-	 *       readOnly: true,
-	 *     },
-	 *   ],
-	 * });
-	 * ```
-	 */
-	mounts?: HostDirectoryMount[];
-	/**
-	 * Mount a host `node_modules` directory into the VM in one call so guest
-	 * `import`/`require` resolve real, host-installed npm packages.
-	 *
-	 * Pass the absolute host path to a `node_modules` directory (or an object
-	 * with that path and an explicit guest location). The whole directory is
-	 * projected lazily, Docker-style, at a guest `node_modules` on the resolution
-	 * path, so any package inside it resolves the way Node would over a real
-	 * filesystem (ancestor `node_modules` walk, `exports`/conditions, symlinks).
-	 * This is the ergonomic alternative to wiring up individual `mounts` entries
-	 * per package.
-	 *
-	 * By default the directory is mounted at `/tmp/node_modules`, which is where
-	 * the resolution walk for a program run by {@link NodeRuntime.exec} /
-	 * {@link NodeRuntime.run} begins (each program is written under `/tmp`). Pass
-	 * the object form with `guestPath` to mount it elsewhere on a different
-	 * module's resolution path.
-	 *
-	 * ```ts
-	 * const rt = await NodeRuntime.create({
-	 *   nodeModules: "/abs/path/to/project/node_modules",
-	 * });
-	 * await rt.exec(`
-	 *   import isNumber from "is-number";
-	 *   console.log(isNumber(42));
-	 * `);
-	 * ```
-	 *
-	 * The host filesystem is never exposed beyond the mounted `node_modules`
-	 * subtree. The mount is read-only.
-	 */
-	nodeModules?: string | NodeModulesMount;
-	/**
-	 * Host-side bindings the guest can invoke as shell commands. Each entry is
-	 * registered as a named guest command; when the guest runs it, the
-	 * invocation round-trips back to the host and runs the binding's `handler`,
-	 * whose return value is delivered back to the guest. This is how you give
-	 * sandboxed guest code controlled, named host capabilities (the kind an AI
-	 * agent calls as tools) without granting it the underlying access directly.
-	 *
-	 * The guest invokes a binding by name with JSON input:
-	 *
-	 * ```ts
-	 * const rt = await NodeRuntime.create({
-	 *   bindings: {
-	 *     add: {
-	 *       description: "Add two numbers",
-	 *       inputSchema: {
-	 *         type: "object",
-	 *         properties: { a: { type: "number" }, b: { type: "number" } },
-	 *         required: ["a", "b"],
-	 *       },
-	 *       handler: ({ a, b }: { a: number; b: number }) => ({ sum: a + b }),
-	 *     },
-	 *   },
-	 * });
-	 * await rt.exec(`
-	 *   import { execFileSync } from "node:child_process";
-	 *   const out = execFileSync("add", ["add", "--json", JSON.stringify({ a: 2, b: 3 })]);
-	 *   console.log(out.toString());
-	 * `);
-	 * ```
-	 *
-	 * When `bindings` is provided and no `binding` permission scope is set, the
-	 * `binding` scope is granted so the registered bindings are invocable; pass
-	 * your own `permissions.binding` policy to gate individual bindings.
-	 */
-	bindings?: Record<string, BindingDefinition>;
-	/**
-	 * Guest-bound ports that may accept non-loopback connections. By default a
-	 * guest server is reachable only over loopback inside the VM; listing a port
-	 * here lifts that restriction for that port, letting connections from outside
-	 * the loopback interface reach it. Use this for guests that run servers which
-	 * must accept external connections (for example a dev server you expose
-	 * beyond loopback).
-	 *
-	 * ```ts
-	 * const rt = await NodeRuntime.create({
-	 *   permissions: { network: "allow" },
-	 *   loopbackExemptPorts: [3000],
-	 * });
-	 * ```
-	 */
-	loopbackExemptPorts?: number[];
-	/**
-	 * Low-level guest JavaScript runtime configuration. Most callers should leave
-	 * this unset. Benchmarks may opt in to `highResolutionTime`, which disables
-	 * the default 1ms timer quantization and should not be enabled for untrusted
-	 * workloads.
-	 */
-	jsRuntime?: Partial<JsRuntimeConfig>;
-}
-
-/** A host directory projected into the VM's virtual filesystem. */
-export interface HostDirectoryMount {
-	/** Absolute guest path the directory appears at inside the VM. */
-	guestPath: string;
-	/** Absolute host directory to project (read through the VFS, lazily). */
-	hostPath: string;
-	/** Mount read-only (the default). Pass `false` to allow guest writes. */
-	readOnly?: boolean;
-}
-
-/** Guest path a `nodeModules` mount is projected at by default. */
-const DEFAULT_NODE_MODULES_GUEST_PATH = "/tmp/node_modules";
-
-/**
- * Object form of the `nodeModules` create option: a host `node_modules`
- * directory to project, optionally at an explicit guest path. The string form
- * (`nodeModules: "/abs/node_modules"`) is shorthand for `{ hostPath }`.
- */
-export interface NodeModulesMount {
-	/** Absolute host `node_modules` directory to project (read lazily). */
-	hostPath: string;
-	/**
-	 * Absolute guest path to mount it at. Defaults to `/tmp/node_modules`, where
-	 * the resolution walk for {@link NodeRuntime.exec} / {@link NodeRuntime.run}
-	 * programs begins. Override to put it on a different module's resolution path.
-	 */
-	guestPath?: string;
-}
-
-/** Result of {@link NodeRuntime.exec}. */
-export interface NodeRuntimeExecResult {
-	stdout: string;
-	stderr: string;
-	exitCode: number;
-}
-
-/** Options for a single {@link NodeRuntime.exec} call. */
-export interface NodeRuntimeExecOptions {
-	/** Extra environment variables for this run, merged over the VM env. */
-	env?: Record<string, string>;
-	/** Working directory for this run. */
-	cwd?: string;
-	/** Data piped to the guest program's stdin. */
-	stdin?: string | Uint8Array;
-	/** Abort the run after this many milliseconds. */
-	timeout?: number;
-	/**
-	 * Cancel the run when this signal aborts. On abort the guest process is
-	 * killed inside the VM (the kernel delivers `SIGTERM`) and the call rejects
-	 * with the signal's abort reason. Use this to cancel an in-flight run from
-	 * the outside, for example to enforce your own deadline or stop work when a
-	 * request is canceled.
-	 *
-	 * ```ts
-	 * const controller = new AbortController();
-	 * const pending = rt.exec("while (true) {}", { signal: controller.signal });
-	 * controller.abort();
-	 * await pending.catch((err) => console.log(err.name)); // "AbortError"
-	 * ```
-	 */
-	signal?: AbortSignal;
-	/**
-	 * Called with each chunk the guest writes to stdout as it is produced,
-	 * letting you observe output incrementally instead of waiting for the run to
-	 * finish. Chunks arrive as raw bytes; decode with a `TextDecoder` for text.
-	 * The complete output is still returned as `result.stdout` when the run ends.
-	 */
-	onStdout?: (chunk: Uint8Array) => void;
-	/**
-	 * Called with each chunk the guest writes to stderr as it is produced,
-	 * letting you observe output incrementally instead of waiting for the run to
-	 * finish. Chunks arrive as raw bytes; decode with a `TextDecoder` for text.
-	 * The complete output is still returned as `result.stderr` when the run ends.
-	 */
-	onStderr?: (chunk: Uint8Array) => void;
-}
-
-/** The HTTP request {@link NodeRuntime.fetch} drives into the VM. */
-export interface NodeRuntimeFetchInput {
-	/** HTTP method. Defaults to `GET`. */
-	method?: string;
-	/** Request path (and query), e.g. `/api/users?limit=10`. */
-	path: string;
-	/** Request headers. */
-	headers?: Record<string, string>;
-	/** Request body. */
-	body?: string | Uint8Array;
-}
-
-/** The HTTP response {@link NodeRuntime.fetch} returns from the VM. */
-export interface NodeRuntimeFetchResponse {
-	/** HTTP status code, e.g. `200`. */
-	status: number;
-	/** HTTP status text, e.g. `OK`. */
-	statusText: string;
-	/** Response headers, lower-cased by name. */
-	headers: Record<string, string>;
-	/** Response body decoded as UTF-8 text. */
-	body: string;
-}
-
-/**
- * Options for {@link NodeRuntime.spawn}. Inherits the streaming `onStdout` /
- * `onStderr` hooks from {@link NodeRuntimeExecOptions}.
- */
-export interface NodeRuntimeSpawnOptions extends NodeRuntimeExecOptions {}
-
-/**
- * Describes the guest TCP listener to wait for with
- * {@link NodeRuntime.waitForListener} or look up with
- * {@link NodeRuntime.findListener}. A listener matches when a guest process is
- * accepting connections on the given `port` (and `host`/`path` when supplied).
- */
-export interface NodeRuntimeListenerQuery {
-	/** TCP port the guest listener is bound to, e.g. `3000`. */
-	port: number;
-	/** Bind host to match, e.g. `127.0.0.1`. Omit to match any host. */
-	host?: string;
-	/** Unix socket path to match, for path-bound listeners. */
-	path?: string;
-}
-
-/**
- * A matched guest listener returned by {@link NodeRuntime.waitForListener} and
- * {@link NodeRuntime.findListener}. `processId` identifies the guest process
- * that owns the listening socket; the `host`/`port`/`path` it is bound to are
- * reported when known.
- */
-export interface NodeRuntimeListener {
-	/** The guest process id that owns the listening socket. */
-	processId: string;
-	/** The host the listener is bound to, when reported. */
-	host?: string;
-	/** The port the listener is bound to, when reported. */
-	port?: number;
-	/** The unix socket path the listener is bound to, when reported. */
-	path?: string;
-}
-
-/** Options for {@link NodeRuntime.waitForListener}. */
-export interface NodeRuntimeWaitForListenerOptions {
-	/**
-	 * Give up after this many milliseconds and reject. Defaults to 10000. The
-	 * wait also rejects if the bound `signal` aborts first.
-	 */
-	timeoutMs?: number;
-	/** Abort the wait early; the returned promise rejects when it fires. */
-	signal?: AbortSignal;
-	/**
-	 * How long to wait between listener lookups while polling, in milliseconds.
-	 * Defaults to 50.
-	 */
-	pollIntervalMs?: number;
-}
-
-/**
- * A live handle to a guest process started with {@link NodeRuntime.spawn}.
- *
- * Unlike {@link NodeRuntime.exec}, which runs a program to completion and
- * returns its captured output, a handle is returned immediately while the
- * process keeps running. Use it to stream stdout/stderr, feed stdin, signal or
- * kill the process, and await its exit. This is the building block for
- * long-running guests such as dev servers: start one here, then drive requests
- * into it with {@link NodeRuntime.fetch}.
- */
-export interface NodeRuntimeProcess {
-	/** The guest process id. */
-	readonly pid: number;
-	/** Write data to the guest process's stdin. */
-	writeStdin(data: string | Uint8Array): void;
-	/** Close the guest process's stdin, signalling end-of-input. */
-	closeStdin(): void;
-	/**
-	 * Send a signal to the guest process. Defaults to `SIGTERM`. Accepts a
-	 * signal name (e.g. `"SIGKILL"`) or a raw signal number.
-	 */
-	kill(signal?: NodeJS.Signals | number): void;
-	/** Resolve with the guest process's exit code once it terminates. */
-	wait(): Promise<number>;
-	/** The exit code once the process has exited, or `null` while it runs. */
-	readonly exitCode: number | null;
-}
-
-export interface NodeRuntimeResourceSnapshot {
-	runningProcesses: number;
-	exitedProcesses: number;
-	fdTables: number;
-	openFds: number;
-	pipes: number;
-	pipeBufferedBytes: number;
-	ptys: number;
-	ptyBufferedInputBytes: number;
-	ptyBufferedOutputBytes: number;
-	sockets: number;
-	socketListeners: number;
-	socketConnections: number;
-	socketBufferedBytes: number;
-	socketDatagramQueueLen: number;
-	queueSnapshots: Array<{
-		name: string;
-		category: string;
-		depth: number;
-		highWater: number;
-		capacity: number;
-		fillPercent: number;
-	}>;
-}
-
-export interface NodeRuntimeResidentRunnerExecOptions {
-	/** Abort the guest eval after this many milliseconds. */
-	timeout?: number;
-}
-
-export type NodeRuntimeResidentRunnerOptions = {};
-
-export interface NodeRuntimeResidentRunner {
-	exec(
-		code: string,
-		options?: NodeRuntimeResidentRunnerExecOptions,
-	): Promise<NodeRuntimeExecResult>;
-	dispose(): Promise<void>;
-}
-
-/** Result of {@link NodeRuntime.run}. */
-export interface NodeRuntimeRunResult<T = unknown> {
-	/** The JSON-decoded value the guest produced, when the run succeeded. */
-	value?: T;
-	stdout: string;
-	stderr: string;
-	exitCode: number;
-}
-
-let nextProgramId = 0;
-let nextResidentRequestId = 0;
-
-/**
- * Guest preamble exposing `globalThis.callBinding(name, input?)`: an ergonomic
- * async wrapper over the binding invocation path. It runs the registered binding
- * as the guest would by hand (`<binding> --json <input>` through
- * `node:child_process`), so it inherits every security property of that path:
- * the `binding` permission scope, the binding's input-schema validation, and the
- * host-side handler all still apply. It adds no new trust surface; it only
- * removes the manual `execFile`/JSON boilerplate so guest and agent code can do
- * `const out = await callBinding("add", { a, b })`. The value is a single line
- * so it shifts guest source line numbers by at most one in stack traces.
- *
- * Note: the binding still runs through a guest process. Eliminating that spawn
- * would require a dedicated async guest-to-host binding channel (the synchronous
- * sync-RPC path cannot be used: it runs on the sidecar's main sync-RPC thread and
- * a host round-trip would block it); that is a separate, test-gated change.
- */
-const BINDING_PREAMBLE =
-	`globalThis.callBinding = (name, input = {}) => import("node:child_process").then(({ execFile }) => new Promise((resolve, reject) => { execFile(name, [name, "--json", JSON.stringify(input)], { maxBuffer: 64 * 1024 * 1024 }, (error, stdout, stderr) => { if (error) { reject(new Error(String(stderr || "").trim() || error.message)); return; } const text = String(stdout ?? "").trim(); let reply; try { reply = text ? JSON.parse(text) : undefined; } catch { reject(new Error("binding returned invalid JSON: " + text)); return; } if (reply && reply.ok === false) { reject(new Error(reply.error || "binding failed")); return; } resolve(reply && typeof reply === "object" && "result" in reply ? reply.result : reply); }); }));`;
-
-/** Prepend the binding helper preamble to guest program source. */
-function withBindingPreamble(code: string): string {
-	return `${BINDING_PREAMBLE}\n${code}`;
-}
-
-const RESIDENT_READY_PREFIX = "__SECURE_EXEC_RESIDENT_READY__";
-const RESIDENT_RESULT_PREFIX = "__SECURE_EXEC_RESIDENT_RESULT__";
-
-/**
- * Ergonomic, batteries-included runtime for executing guest JavaScript.
- *
- * Construct one with {@link NodeRuntime.create}, run programs with
- * {@link NodeRuntime.exec} / {@link NodeRuntime.run}, and release the VM with
- * {@link NodeRuntime.dispose}. A single instance can run many programs; each
- * call executes a fresh guest process.
- */
-export class NodeRuntime {
-	private constructor(private readonly kernel: Kernel) {}
-
-	/**
-	 * Boot a VM and return a ready-to-use runtime. Spawns the sidecar, opens a
-	 * session, creates the VM with a bootstrapped root filesystem, mounts the
-	 * shell and Node runtimes, and waits for the VM to report ready.
-	 */
-	static async create(
-		options: NodeRuntimeCreateOptions = {},
-	): Promise<NodeRuntime> {
-		options = parseNodeRuntimeCreateOptions(options);
-		const commandsDir = resolveNodeRuntimeCommandsDir(options.commandsDir);
-
-		// Seed caller-provided files into the VM's in-memory filesystem before
-		// boot so they are part of the root filesystem snapshot the guest sees
-		// (e.g. projected npm packages or fixtures). The host filesystem is
-		// never exposed; only these bytes are copied in.
-		const filesystem = createInMemoryFileSystem();
-		if (options.files) {
-			for (const [filePath, content] of Object.entries(options.files)) {
-				await filesystem.writeFile(filePath, content);
-			}
-		}
-
-		// Project host directories into the VM, Docker-style. NodeFileSystem
-		// reads lazily through the VFS so large trees never traverse the
-		// protocol frame as a single blob.
-		const hostMounts: HostDirectoryMount[] = [...(options.mounts ?? [])];
-
-		// The `nodeModules` helper is sugar over a single host directory mount:
-		// project the whole host `node_modules` at a guest `node_modules` on the
-		// resolution path so any package inside resolves like real Node would.
-		if (options.nodeModules !== undefined) {
-			const nodeModules =
-				typeof options.nodeModules === "string"
-					? { hostPath: options.nodeModules }
-					: options.nodeModules;
-			hostMounts.push({
-				guestPath: nodeModules.guestPath ?? DEFAULT_NODE_MODULES_GUEST_PATH,
-				hostPath: nodeModules.hostPath,
-				readOnly: true,
-			});
-		}
-
-		const mounts = hostMounts.map((mount) => ({
-			path: mount.guestPath,
-			fs: new NodeFileSystem({ root: mount.hostPath }),
-			readOnly: mount.readOnly ?? true,
-		}));
-
-		// Grant the `binding` scope when the caller registers bindings but does not
-		// set their own binding policy, so the registered bindings are invocable.
-		const bindingDefaults =
-			options.bindings &&
-			Object.keys(options.bindings).length > 0 &&
-			options.permissions?.binding === undefined
-				? { binding: "allow" as const }
-				: {};
-
-		const kernel = createKernel({
-			filesystem,
-			mounts: mounts.length > 0 ? mounts : undefined,
-			// Merge the caller's policy over the secure default so partial
-			// opt-ins work: `{ network: "allow" }` enables the network while the
-			// execution essentials (fs/childProcess/process/env) stay granted.
-			permissions: {
-				...DEFAULT_PERMISSIONS,
-				...bindingDefaults,
-				...options.permissions,
-			},
-			env: options.env,
-			cwd: options.cwd,
-			sidecar: options.sidecar,
-			onBootTiming: (timing) => options.onBootTiming?.(timing),
-			loopbackExemptPorts: options.loopbackExemptPorts,
-			jsRuntime: options.jsRuntime,
-		});
-
-		try {
-			// The shell runtime provides `sh` plus coreutils; the Node runtime
-			// provides the real V8-backed `node`. `sh` is REQUIRED to spawn any
-			// process: the kernel runs every command through a shell, so without
-			// `sh` nothing can be spawned, including the guest `node` program we
-			// run here and any child the guest spawns via node:child_process.
-			await measureBootTiming("runtime_mount_wasm", options.onBootTiming, () =>
-				kernel.mount(
-					createWasmVmRuntime({
-						commandDirs: [commandsDir, ...(options.wasmCommandDirs ?? [])],
-					}),
-				),
-			);
-			await measureBootTiming("runtime_mount_node", options.onBootTiming, () =>
-				kernel.mount(createNodeRuntime()),
-			);
-
-			// Register bindings after the runtimes are mounted so they are
-			// installed as guest commands the moment the VM is ready.
-			const bindings = options.bindings;
-			if (bindings && Object.keys(bindings).length > 0) {
-				await measureBootTiming("bindings", options.onBootTiming, () =>
-					kernel.registerHostTools(bindings),
-				);
-			}
-		} catch (error) {
-			await kernel.dispose().catch(() => {});
-			throw error;
-		}
-
-		return new NodeRuntime(kernel);
-	}
-
-	async createResidentRunner(
-		_options: NodeRuntimeResidentRunnerOptions = {},
-	): Promise<NodeRuntimeResidentRunner> {
-		return ResidentNodeRunner.create(this);
-	}
-
-	/**
-	 * Run `code` as a guest Node program and capture its output.
-	 *
-	 * The source is written to an ES module inside the VM and executed with
-	 * `node <file>`; it runs as standard ESM (top-level `await`, `import`).
-	 */
-	async exec(
-		code: string,
-		options: NodeRuntimeExecOptions = {},
-	): Promise<NodeRuntimeExecResult> {
-		const programPath = `/tmp/secure-exec-program-${nextProgramId++}.mjs`;
-		await this.kernel.writeFile(programPath, withBindingPreamble(code));
-		return this.runProgram(programPath, options);
-	}
-
-	/**
-	 * Run an already-written guest program file to completion and capture its
-	 * output, honoring a caller-supplied `signal` for cancellation.
-	 *
-	 * Without a `signal`, this runs the program through the shell (`node <file>`)
-	 * exactly as before. With a `signal`, it starts the program as a guest
-	 * process so the run can be cancelled: when the signal aborts, the process is
-	 * killed inside the VM (the kernel delivers `SIGTERM`) and the call rejects
-	 * with the signal's abort reason.
-	 */
-	private async runProgram(
-		programPath: string,
-		options: NodeRuntimeExecOptions,
-	): Promise<NodeRuntimeExecResult> {
-		const signal = options.signal;
-		if (!signal) {
-			const result = await this.kernel.exec(`node ${programPath}`, {
-				env: options.env,
-				cwd: options.cwd,
-				stdin: options.stdin,
-				timeout: options.timeout,
-				onStdout: options.onStdout,
-				onStderr: options.onStderr,
-			});
-			return toExecResult(result);
-		}
-
-		if (signal.aborted) {
-			throw toAbortError(signal);
-		}
-
-		// A signal was supplied, so run the program as a guest process we can
-		// kill: aborting the signal maps to a kernel kill of the underlying
-		// process. Aggregate the streamed output ourselves to reproduce the
-		// run-to-completion result that the shell path returns.
-		const stdoutChunks: Uint8Array[] = [];
-		const stderrChunks: Uint8Array[] = [];
-		const proc = this.kernel.spawn("node", [programPath], {
-			env: options.env,
-			cwd: options.cwd,
-			onStdout: (chunk) => {
-				stdoutChunks.push(chunk);
-				options.onStdout?.(chunk);
-			},
-			onStderr: (chunk) => {
-				stderrChunks.push(chunk);
-				options.onStderr?.(chunk);
-			},
-			streamStdin: options.stdin !== undefined,
-		});
-
-		if (options.stdin !== undefined) {
-			proc.writeStdin(options.stdin);
-			proc.closeStdin();
-		}
-
-		const onAbort = () => {
-			// Deliver SIGTERM to cancel the in-flight run inside the VM.
-			proc.kill(toSignalNumber("SIGTERM"));
-		};
-		signal.addEventListener("abort", onAbort, { once: true });
-
-		let timer: ReturnType<typeof setTimeout> | undefined;
-		if (options.timeout !== undefined) {
-			timer = setTimeout(() => {
-				proc.kill(toSignalNumber("SIGKILL"));
-			}, options.timeout);
-		}
-
-		try {
-			const exitCode = await proc.wait();
-			if (signal.aborted) {
-				throw toAbortError(signal);
-			}
-			return {
-				stdout: decodeChunks(stdoutChunks),
-				stderr: decodeChunks(stderrChunks),
-				exitCode,
-			};
-		} finally {
-			if (timer !== undefined) {
-				clearTimeout(timer);
-			}
-			signal.removeEventListener("abort", onAbort);
-		}
-	}
-
-	/**
-	 * Start `code` as a long-running guest Node program and return a live handle
-	 * to it, without waiting for it to finish.
-	 *
-	 * The source is written to an ES module inside the VM and started with
-	 * `node <file>`; it runs as standard ESM (top-level `await`, `import`). The
-	 * returned {@link NodeRuntimeProcess} lets you stream output, write to stdin,
-	 * signal or kill the process, and await its exit. Pass `onStdout`/`onStderr`
-	 * to receive output chunks as they are produced.
-	 *
-	 * Use this for guests that do not run to completion, such as a dev server you
-	 * later drive with {@link NodeRuntime.fetch}:
-	 *
-	 * ```ts
-	 * const server = await rt.spawn(`
-	 *   import http from "node:http";
-	 *   http.createServer((_, res) => res.end("ok")).listen(3000);
-	 * `);
-	 * const res = await rt.fetch(3000, { path: "/" });
-	 * server.kill();
-	 * await server.wait();
-	 * ```
-	 */
-	async spawn(
-		code: string,
-		options: NodeRuntimeSpawnOptions = {},
-	): Promise<NodeRuntimeProcess> {
-		const programPath = `/tmp/secure-exec-program-${nextProgramId++}.mjs`;
-		await this.kernel.writeFile(programPath, withBindingPreamble(code));
-		const proc = this.kernel.spawn("node", [programPath], {
-			env: options.env,
-			cwd: options.cwd,
-			onStdout: options.onStdout,
-			onStderr: options.onStderr,
-			// Keep stdin open so callers can stream input via writeStdin and signal
-			// end-of-input with closeStdin.
-			streamStdin: true,
-		});
-		return {
-			pid: proc.pid,
-			writeStdin(data) {
-				proc.writeStdin(data);
-			},
-			closeStdin() {
-				proc.closeStdin();
-			},
-			kill(signal) {
-				proc.kill(toSignalNumber(signal));
-			},
-			wait() {
-				return proc.wait();
-			},
-			get exitCode() {
-				return proc.exitCode;
-			},
-		};
-	}
-
-	/**
-	 * Start an arbitrary guest command and return a live handle. This is the
-	 * command-level companion to {@link spawn}, used by benchmark harnesses that
-	 * need to measure kernel process spawning directly instead of running a source
-	 * string through the ergonomic Node wrapper.
-	 */
-	spawnCommand(
-		command: string,
-		args: string[] = [],
-		options: NodeRuntimeSpawnOptions = {},
-	): NodeRuntimeProcess {
-		const proc = this.kernel.spawn(command, args, {
-			env: options.env,
-			cwd: options.cwd,
-			onStdout: options.onStdout,
-			onStderr: options.onStderr,
-			streamStdin: true,
-		});
-		return {
-			pid: proc.pid,
-			writeStdin(data) {
-				proc.writeStdin(data);
-			},
-			closeStdin() {
-				proc.closeStdin();
-			},
-			kill(signal) {
-				proc.kill(toSignalNumber(signal));
-			},
-			wait() {
-				return proc.wait();
-			},
-			get exitCode() {
-				return proc.exitCode;
-			},
-		};
-	}
-
-	/**
-	 * Run an arbitrary guest command to completion and capture stdout/stderr.
-	 * Unlike {@link exec}, this does not write a JavaScript source file first.
-	 */
-	async execCommand(
-		command: string,
-		args: string[] = [],
-		options: NodeRuntimeExecOptions = {},
-	): Promise<NodeRuntimeExecResult> {
-		const stdoutChunks: Uint8Array[] = [];
-		const stderrChunks: Uint8Array[] = [];
-		const proc = this.spawnCommand(command, args, {
-			env: options.env,
-			cwd: options.cwd,
-			onStdout: (chunk) => {
-				stdoutChunks.push(chunk);
-				options.onStdout?.(chunk);
-			},
-			onStderr: (chunk) => {
-				stderrChunks.push(chunk);
-				options.onStderr?.(chunk);
-			},
-		});
-		if (options.stdin !== undefined) {
-			proc.writeStdin(options.stdin);
-		}
-		proc.closeStdin();
-
-		let timer: ReturnType<typeof setTimeout> | undefined;
-		if (options.timeout !== undefined) {
-			timer = setTimeout(() => proc.kill("SIGKILL"), options.timeout);
-		}
-		try {
-			const exitCode = await proc.wait();
-			return {
-				stdout: decodeChunks(stdoutChunks),
-				stderr: decodeChunks(stderrChunks),
-				exitCode,
-			};
-		} finally {
-			if (timer !== undefined) {
-				clearTimeout(timer);
-			}
-		}
-	}
-
-	/**
-	 * Run `code` and return the JSON-serializable value it produces.
-	 *
-	 * The guest exposes a `__return(value)` function; call it with a
-	 * JSON-serializable value and that value is decoded on the host as
-	 * `result.value`. If `__return` is never called the value is `undefined`.
-	 * stdout/stderr/exitCode are still captured.
-	 */
-	async run<T = unknown>(
-		code: string,
-		options: NodeRuntimeExecOptions = {},
-	): Promise<NodeRuntimeRunResult<T>> {
-		const id = nextProgramId++;
-		const resultPath = `/tmp/secure-exec-result-${id}.json`;
-		const programPath = `/tmp/secure-exec-program-${id}.mjs`;
-		// Inject the __return helper as a module-level preamble, then the user
-		// code at module top level. Import declarations (preamble's and the
-		// user's) are hoisted, so __return is defined before the user's
-		// executable code runs — and the user keeps full ESM semantics
-		// (top-level `import` and top-level `await` both work). Do NOT wrap the
-		// user code in an IIFE: that would push their top-level `import`
-		// statements inside a function and make them a SyntaxError.
-		const wrapped = [
-			`import { writeFileSync as __writeFileSync } from "node:fs";`,
-			BINDING_PREAMBLE,
-			`globalThis.__return = (value) => {`,
-			`  __writeFileSync(${JSON.stringify(resultPath)}, JSON.stringify(value === undefined ? null : value));`,
-			`};`,
-			code,
-		].join("\n");
-		await this.kernel.writeFile(programPath, wrapped);
-		const exec = await this.runProgram(programPath, options);
-
-		let value: T | undefined;
-		if (exec.exitCode === 0) {
-			try {
-				const bytes = await this.kernel.readFile(resultPath);
-				value = JSON.parse(new TextDecoder().decode(bytes)) as T;
-			} catch {
-				// No __return() call (or unreadable result): leave value undefined.
-			}
-		}
-
-		return { ...exec, value };
-	}
-
-	/**
-	 * Drive an HTTP request to a guest HTTP server listening inside the VM and
-	 * read the response back on the host.
-	 *
-	 * Point this at a port a guest program is serving, for example a dev server
-	 * started with {@link NodeRuntime.exec}. The
-	 * request and response never leave the VM: the connection is made to the
-	 * guest's loopback listener through the kernel socket table, so this works
-	 * even when guest network egress is denied.
-	 *
-	 * ```ts
-	 * const res = await rt.fetch(3000, { path: "/health" });
-	 * console.log(res.status, res.body);
-	 * ```
-	 */
-	async fetch(
-		port: number,
-		input: NodeRuntimeFetchInput,
-	): Promise<NodeRuntimeFetchResponse> {
-		const body =
-			input.body === undefined
-				? undefined
-				: typeof input.body === "string"
-					? input.body
-					: new TextDecoder().decode(input.body);
-		const responseJson = await this.kernel.vmFetch({
-			port,
-			method: input.method ?? "GET",
-			path: input.path,
-			headersJson: JSON.stringify(input.headers ?? {}),
-			body,
-		});
-		return parseFetchResponse(responseJson);
-	}
-
-	/**
-	 * Look up a guest TCP listener once and return it, or `null` when nothing is
-	 * listening yet.
-	 *
-	 * This is the immediate, non-blocking check behind
-	 * {@link NodeRuntime.waitForListener}: it asks the kernel socket table
-	 * whether a guest process is accepting connections on the requested `port`
-	 * (optionally narrowed by `host`/`path`) and returns the match, or `null` if
-	 * none is up. Use {@link NodeRuntime.waitForListener} when you want to block
-	 * until one appears.
-	 *
-	 * ```ts
-	 * const listener = rt.findListener({ port: 3000 });
-	 * if (listener) console.log("up on pid", listener.processId);
-	 * ```
-	 */
-	findListener(query: NodeRuntimeListenerQuery): NodeRuntimeListener | null {
-		const match = this.kernel.socketTable.findListener({
-			port: query.port,
-			...(query.host !== undefined ? { host: query.host } : {}),
-			...(query.path !== undefined ? { path: query.path } : {}),
-		}) as NodeRuntimeListener | null;
-		return match ?? null;
-	}
-
-	/**
-	 * Block until a guest TCP listener is accepting connections on the requested
-	 * `port` (optionally narrowed by `host`/`path`), then resolve with it.
-	 *
-	 * This is the companion to {@link NodeRuntime.spawn} and
-	 * {@link NodeRuntime.fetch} for dev-server scenarios: start a server, wait
-	 * until it is actually listening, then drive requests into it. The kernel
-	 * socket table is polled until a matching listener appears or the wait is
-	 * cut short. If `timeoutMs` elapses (default 10000) or the supplied `signal`
-	 * aborts first, the returned promise rejects.
-	 *
-	 * ```ts
-	 * const server = await rt.spawn(`
-	 *   import http from "node:http";
-	 *   http.createServer((_, res) => res.end("ok")).listen(3000);
-	 * `);
-	 * const listener = await rt.waitForListener({ port: 3000 });
-	 * const res = await rt.fetch(listener.port ?? 3000, { path: "/" });
-	 * server.kill();
-	 * await server.wait();
-	 * ```
-	 */
-	async waitForListener(
-		query: NodeRuntimeListenerQuery,
-		options: NodeRuntimeWaitForListenerOptions = {},
-	): Promise<NodeRuntimeListener> {
-		const timeoutMs = options.timeoutMs ?? 10_000;
-		const pollIntervalMs = options.pollIntervalMs ?? 50;
-		const signal = options.signal;
-		const deadline = Date.now() + timeoutMs;
-
-		for (;;) {
-			if (signal?.aborted) {
-				throw toAbortError(signal);
-			}
-
-			// Await a fresh lookup rather than reading the synchronous cache,
-			// which starts null and would otherwise let this loop poll a stale
-			// null even after the listener is up (issue #92).
-			const match = (await this.kernel.socketTable.findListenerAsync({
-				port: query.port,
-				...(query.host !== undefined ? { host: query.host } : {}),
-				...(query.path !== undefined ? { path: query.path } : {}),
-			})) as NodeRuntimeListener | null;
-			if (match) {
-				return match;
-			}
-
-			if (Date.now() >= deadline) {
-				throw new Error(
-					`Timed out after ${timeoutMs}ms waiting for a listener on port ${query.port}`,
-				);
-			}
-
-			await delayUntil(
-				Math.min(pollIntervalMs, Math.max(0, deadline - Date.now())),
-				signal,
-			);
-		}
-	}
-
-	/**
-	 * Register host-side bindings the guest can invoke as shell commands, after
-	 * the VM is already running. Each entry becomes a named guest command; when
-	 * the guest runs it, the invocation round-trips back to the host and runs the
-	 * binding's `handler`, whose return value is delivered back to the guest. This
-	 * is the same capability as the `bindings` create option, exposed for adding
-	 * bindings to a live runtime. See `bindings` on {@link NodeRuntime.create} for
-	 * the invocation shape and permission behavior.
-	 *
-	 * When registering bindings this way, make sure the `binding` permission scope
-	 * is granted (for example `permissions: { binding: "allow" }` on
-	 * {@link NodeRuntime.create}) so the bindings are invocable.
-	 */
-	async registerBindings(
-		bindings: Record<string, BindingDefinition>,
-	): Promise<void> {
-		await this.kernel.registerHostTools(bindings);
-	}
-
-	/**
-	 * Write a file into the VM's virtual filesystem, creating parent
-	 * directories as needed. Use this to project assets or npm packages into
-	 * the sandbox after boot; the host filesystem is never touched.
-	 */
-	async writeFile(
-		filePath: string,
-		content: string | Uint8Array,
-	): Promise<void> {
-		await this.kernel.writeFile(filePath, content);
-	}
-
-	/** Read a file from the VM's virtual filesystem as raw bytes. */
-	async readFile(filePath: string): Promise<Uint8Array> {
-		return this.kernel.readFile(filePath);
-	}
-
-	/** Read directory entry names from the VM's virtual filesystem. */
-	async readDir(dirPath: string): Promise<string[]> {
-		return this.kernel.readdir(dirPath);
-	}
-
-	/** Read typed directory entries from the VM's virtual filesystem. */
-	async readDirWithTypes(dirPath: string): Promise<VirtualDirEntry[]> {
-		return this.kernel.vfs.readDirWithTypes(dirPath);
-	}
-
-	async getResourceSnapshot(): Promise<NodeRuntimeResourceSnapshot> {
-		return this.kernel.getResourceSnapshot();
-	}
-
-	/** Tear down the VM and release the sidecar. */
-	async dispose(): Promise<void> {
-		await this.kernel.dispose();
-	}
-}
-
-const RESIDENT_RUNNER_SOURCE = `
-import { Buffer } from "node:buffer";
-import { createInterface } from "node:readline";
-
-const readyPrefix = ${JSON.stringify(RESIDENT_READY_PREFIX)};
-const resultPrefix = ${JSON.stringify(RESIDENT_RESULT_PREFIX)};
-console.log(readyPrefix);
-
-const rl = createInterface({ input: process.stdin, crlfDelay: Infinity });
-for await (const line of rl) {
-	let request;
-	try {
-		request = JSON.parse(line);
-		const source = Buffer.from(String(request.code), "utf8").toString("base64");
-		await import(\`data:text/javascript;base64,\${source}#\${request.id}\`);
-		process.stdout.write(resultPrefix + JSON.stringify({
-			id: request.id,
-			exitCode: 0,
-			stderr: "",
-		}) + "\\n");
-	} catch (error) {
-		process.stdout.write(resultPrefix + JSON.stringify({
-			id: request?.id,
-			exitCode: 1,
-			stderr: error instanceof Error ? (error.stack ?? error.message) : String(error),
-		}) + "\\n");
-	}
-}
-`;
-
-class ResidentNodeRunner implements NodeRuntimeResidentRunner {
-	private proc: NodeRuntimeProcess | null = null;
-	private stdoutBuffer = "";
-	private active: {
-		id: number;
-		stdout: Uint8Array[];
-		stderr: Uint8Array[];
-		resolve: (result: NodeRuntimeExecResult) => void;
-		reject: (error: Error) => void;
-		timer?: ReturnType<typeof setTimeout>;
-	} | null = null;
-	private readonly readyPromise: Promise<void>;
-	private resolveReady!: () => void;
-	private rejectReady!: (error: Error) => void;
-
-	private constructor() {
-		this.readyPromise = new Promise((resolve, reject) => {
-			this.resolveReady = resolve;
-			this.rejectReady = reject;
-		});
-	}
-
-	static async create(runtime: NodeRuntime): Promise<ResidentNodeRunner> {
-		const runner = new ResidentNodeRunner();
-		runner.proc = await runtime.spawn(RESIDENT_RUNNER_SOURCE, {
-			onStdout: (chunk) => runner.handleStdout(chunk),
-			onStderr: (chunk) => runner.handleStderr(chunk),
-		});
-		runner.proc.wait().then(
-			(exitCode) => {
-				const error = new Error(
-					`resident runner exited before completing request: ${exitCode}`,
-				);
-				runner.rejectReady(error);
-				runner.active?.reject(error);
-				runner.active = null;
-			},
-			(error) => {
-				const normalized =
-					error instanceof Error ? error : new Error(String(error));
-				runner.rejectReady(normalized);
-				runner.active?.reject(normalized);
-				runner.active = null;
-			},
-		);
-		await runner.readyPromise;
-		return runner;
-	}
-
-	async exec(
-		code: string,
-		options: NodeRuntimeResidentRunnerExecOptions = {},
-	): Promise<NodeRuntimeExecResult> {
-		await this.readyPromise;
-		if (!this.proc) {
-			throw new Error("resident runner is not running");
-		}
-		if (this.active) {
-			throw new Error("resident runner supports one in-flight exec");
-		}
-		const proc = this.proc;
-		const id = nextResidentRequestId++;
-		return new Promise((resolve, reject) => {
-			const active = {
-				id,
-				stdout: [],
-				stderr: [],
-				resolve,
-				reject,
-				timer: undefined as ReturnType<typeof setTimeout> | undefined,
-			};
-			if (options.timeout !== undefined) {
-				active.timer = setTimeout(() => {
-					proc.kill("SIGKILL");
-					this.active = null;
-					reject(
-						new Error(`resident runner timed out after ${options.timeout}ms`),
-					);
-				}, options.timeout);
-			}
-			this.active = active;
-			proc.writeStdin(`${JSON.stringify({ id, code })}\n`);
-		});
-	}
-
-	async dispose(): Promise<void> {
-		const proc = this.proc;
-		this.proc = null;
-		this.active = null;
-		if (!proc) {
-			return;
-		}
-		proc.kill("SIGTERM");
-		await proc.wait().catch(() => {});
-	}
-
-	private handleStdout(chunk: Uint8Array): void {
-		this.stdoutBuffer += new TextDecoder().decode(chunk);
-		while (true) {
-			const newlineIndex = this.stdoutBuffer.indexOf("\n");
-			if (newlineIndex < 0) {
-				break;
-			}
-			const rawLine = this.stdoutBuffer.slice(0, newlineIndex);
-			this.stdoutBuffer = this.stdoutBuffer.slice(newlineIndex + 1);
-			const line = rawLine.endsWith("\r") ? rawLine.slice(0, -1) : rawLine;
-			if (line === RESIDENT_READY_PREFIX) {
-				this.resolveReady();
-				continue;
-			}
-			if (line.startsWith(RESIDENT_RESULT_PREFIX)) {
-				this.finishRequest(line.slice(RESIDENT_RESULT_PREFIX.length));
-				continue;
-			}
-			this.active?.stdout.push(new TextEncoder().encode(`${line}\n`));
-		}
-	}
-
-	private handleStderr(chunk: Uint8Array): void {
-		this.active?.stderr.push(chunk);
-	}
-
-	private finishRequest(payload: string): void {
-		const active = this.active;
-		if (!active) {
-			return;
-		}
-		let parsed: { id?: number; exitCode?: number; stderr?: string };
-		try {
-			parsed = JSON.parse(payload) as {
-				id?: number;
-				exitCode?: number;
-				stderr?: string;
-			};
-		} catch (error) {
-			active.reject(error instanceof Error ? error : new Error(String(error)));
-			this.active = null;
-			return;
-		}
-		if (parsed.id !== active.id) {
-			active.reject(
-				new Error(`resident runner response id mismatch: ${parsed.id}`),
-			);
-			this.active = null;
-			return;
-		}
-		if (active.timer !== undefined) {
-			clearTimeout(active.timer);
-		}
-		this.active = null;
-		const stderr = `${decodeChunks(active.stderr)}${parsed.stderr ?? ""}`;
-		active.resolve({
-			stdout: decodeChunks(active.stdout),
-			stderr,
-			exitCode: parsed.exitCode ?? 1,
-		});
-	}
-}
-
-async function measureBootTiming<T>(
-	phase: NodeRuntimeBootTimingPhase,
-	onBootTiming: ((timing: NodeRuntimeBootTiming) => void) | undefined,
-	fn: () => Promise<T>,
-): Promise<T> {
-	const start = performance.now();
-	try {
-		return await fn();
-	} finally {
-		onBootTiming?.({ phase, durationMs: performance.now() - start });
-	}
-}
-
-/**
- * Common POSIX signal numbers, used to translate a signal name passed to
- * {@link NodeRuntimeProcess.kill} into the numeric signal the kernel expects.
- */
-const SIGNAL_NUMBERS: Record<string, number> = {
-	SIGHUP: 1,
-	SIGINT: 2,
-	SIGQUIT: 3,
-	SIGKILL: 9,
-	SIGUSR1: 10,
-	SIGUSR2: 12,
-	SIGTERM: 15,
-	SIGSTOP: 19,
-	SIGCONT: 18,
-};
-
-/**
- * Normalize a signal passed to {@link NodeRuntimeProcess.kill} into the numeric
- * signal the kernel expects. Accepts a signal name (e.g. `"SIGKILL"`) or a raw
- * number; defaults to `SIGTERM` when omitted.
- */
-function toSignalNumber(signal?: NodeJS.Signals | number): number {
-	if (signal === undefined) {
-		return SIGNAL_NUMBERS.SIGTERM;
-	}
-	if (typeof signal === "number") {
-		return signal;
-	}
-	const resolved = SIGNAL_NUMBERS[signal];
-	if (resolved === undefined) {
-		throw new Error(`Unknown signal: ${signal}`);
-	}
-	return resolved;
-}
-
-/**
- * Build the error a {@link NodeRuntime.waitForListener} wait rejects with when
- * its abort signal fires, preferring the signal's own `reason` when present.
- */
-function toAbortError(signal: AbortSignal): Error {
-	const reason = (signal as { reason?: unknown }).reason;
-	if (reason instanceof Error) {
-		return reason;
-	}
-	const error = new Error("The listener wait was aborted");
-	error.name = "AbortError";
-	return error;
-}
-
-/**
- * Resolve after `ms` milliseconds, or reject early if `signal` aborts. Used to
- * pace the polling loop in {@link NodeRuntime.waitForListener} without blocking
- * past an abort.
- */
-function delayUntil(ms: number, signal?: AbortSignal): Promise<void> {
-	return new Promise((resolve, reject) => {
-		if (signal?.aborted) {
-			reject(toAbortError(signal));
-			return;
-		}
-		const timer = setTimeout(() => {
-			signal?.removeEventListener("abort", onAbort);
-			resolve();
-		}, ms);
-		const onAbort = () => {
-			clearTimeout(timer);
-			reject(toAbortError(signal as AbortSignal));
-		};
-		signal?.addEventListener("abort", onAbort, { once: true });
-	});
-}
-
-/**
- * Concatenate streamed stdout/stderr chunks and decode them as UTF-8 text,
- * reproducing the aggregated `stdout`/`stderr` strings the shell-backed
- * {@link NodeRuntime.exec} path returns when a run is driven as a process for
- * cancellation support.
- */
-function decodeChunks(chunks: Uint8Array[]): string {
-	if (chunks.length === 0) {
-		return "";
-	}
-	let total = 0;
-	for (const chunk of chunks) {
-		total += chunk.length;
-	}
-	const merged = new Uint8Array(total);
-	let offset = 0;
-	for (const chunk of chunks) {
-		merged.set(chunk, offset);
-		offset += chunk.length;
-	}
-	return new TextDecoder().decode(merged);
-}
-
-function toExecResult(result: ExecResult): NodeRuntimeExecResult {
-	return {
-		stdout: result.stdout,
-		stderr: result.stderr,
-		exitCode: result.exitCode,
-	};
-}
-
-/**
- * Decode the raw JSON the kernel returns for a VM HTTP request into a
- * structured response. The wire shape carries `status`, an optional
- * `statusText`, `headers` (either an array of `[name, value]` pairs or an
- * object), and a `body` that is base64-encoded when `bodyEncoding` is
- * `"base64"`.
- */
-function parseFetchResponse(responseJson: string): NodeRuntimeFetchResponse {
-	const parsed = JSON.parse(responseJson) as {
-		status?: number;
-		statusText?: string;
-		headers?: Array<[string, string]> | Record<string, string>;
-		body?: string;
-		bodyEncoding?: string;
-	};
-
-	const headers: Record<string, string> = {};
-	if (Array.isArray(parsed.headers)) {
-		for (const [name, value] of parsed.headers) {
-			headers[name.toLowerCase()] = value;
-		}
-	} else if (parsed.headers) {
-		for (const [name, value] of Object.entries(parsed.headers)) {
-			headers[name.toLowerCase()] = value;
-		}
-	}
-
-	let body = parsed.body ?? "";
-	if (parsed.bodyEncoding === "base64" && body.length > 0) {
-		body = new TextDecoder().decode(
-			Uint8Array.from(globalThis.atob(body), (char) => char.charCodeAt(0)),
-		);
-	}
-
-	return {
-		status: parsed.status ?? 0,
-		statusText: parsed.statusText ?? "",
-		headers,
-		body,
-	};
-}
diff --git a/packages/core/src/numbers.ts b/packages/core/src/numbers.ts
deleted file mode 100644
index cbdad8710..000000000
--- a/packages/core/src/numbers.ts
+++ /dev/null
@@ -1,8 +0,0 @@
-export function bigIntToSafeNumber(value: bigint, context: string): number {
-	const max = BigInt(Number.MAX_SAFE_INTEGER);
-	const min = BigInt(Number.MIN_SAFE_INTEGER);
-	if (value > max || value < min) {
-		throw new Error(`${context} exceeds JavaScript safe integer range`);
-	}
-	return Number(value);
-}
diff --git a/packages/core/src/ownership.ts b/packages/core/src/ownership.ts
deleted file mode 100644
index 279d67734..000000000
--- a/packages/core/src/ownership.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-import * as protocol from "./generated-protocol.js";
-
-export type LiveOwnershipScope =
-	| { scope: "connection"; connection_id: string }
-	| { scope: "session"; connection_id: string; session_id: string }
-	| {
-			scope: "vm";
-			connection_id: string;
-			session_id: string;
-			vm_id: string;
-	  };
-
-export function ownershipSelectorKey(ownership: LiveOwnershipScope): string {
-	switch (ownership.scope) {
-		case "connection":
-			return `connection:${ownership.connection_id}`;
-		case "session":
-			return `session:${ownership.connection_id}:${ownership.session_id}`;
-		case "vm":
-			return `vm:${ownership.connection_id}:${ownership.session_id}:${ownership.vm_id}`;
-	}
-}
-
-export function ownershipMatchesSelector(
-	selector: LiveOwnershipScope | undefined,
-	ownership: LiveOwnershipScope,
-): boolean {
-	if (!selector) {
-		return true;
-	}
-	switch (selector.scope) {
-		case "connection":
-			return (
-				ownership.scope === "connection" &&
-				selector.connection_id === ownership.connection_id
-			);
-		case "session":
-			return (
-				ownership.scope === "session" &&
-				selector.connection_id === ownership.connection_id &&
-				selector.session_id === ownership.session_id
-			);
-		case "vm":
-			return (
-				ownership.scope === "vm" &&
-				selector.connection_id === ownership.connection_id &&
-				selector.session_id === ownership.session_id &&
-				selector.vm_id === ownership.vm_id
-			);
-	}
-}
-
-export function toGeneratedOwnershipScope(
-	ownership: LiveOwnershipScope,
-): protocol.OwnershipScope {
-	switch (ownership.scope) {
-		case "connection":
-			return {
-				tag: "ConnectionOwnership",
-				val: { connectionId: ownership.connection_id },
-			};
-		case "session":
-			return {
-				tag: "SessionOwnership",
-				val: {
-					connectionId: ownership.connection_id,
-					sessionId: ownership.session_id,
-				},
-			};
-		case "vm":
-			return {
-				tag: "VmOwnership",
-				val: {
-					connectionId: ownership.connection_id,
-					sessionId: ownership.session_id,
-					vmId: ownership.vm_id,
-				},
-			};
-	}
-}
-
-export function fromGeneratedOwnershipScope(
-	ownership: protocol.OwnershipScope,
-): LiveOwnershipScope {
-	switch (ownership.tag) {
-		case "ConnectionOwnership":
-			return {
-				scope: "connection",
-				connection_id: ownership.val.connectionId,
-			};
-		case "SessionOwnership":
-			return {
-				scope: "session",
-				connection_id: ownership.val.connectionId,
-				session_id: ownership.val.sessionId,
-			};
-		case "VmOwnership":
-			return {
-				scope: "vm",
-				connection_id: ownership.val.connectionId,
-				session_id: ownership.val.sessionId,
-				vm_id: ownership.val.vmId,
-			};
-	}
-}
diff --git a/packages/core/src/permissions.ts b/packages/core/src/permissions.ts
deleted file mode 100644
index 15943c0b2..000000000
--- a/packages/core/src/permissions.ts
+++ /dev/null
@@ -1,121 +0,0 @@
-import * as protocol from "./generated-protocol.js";
-import {
-	toGeneratedPermissionMode,
-	type LivePermissionMode,
-} from "./protocol-maps.js";
-
-export type { LivePermissionMode } from "./protocol-maps.js";
-
-export interface LiveFsPermissionRule {
-	mode: LivePermissionMode;
-	operations?: string[];
-	paths?: string[];
-}
-
-export interface LivePatternPermissionRule {
-	mode: LivePermissionMode;
-	operations?: string[];
-	patterns?: string[];
-}
-
-export interface LiveRulePermissions<TRule> {
-	default?: LivePermissionMode;
-	rules: TRule[];
-}
-
-export type LivePermissionScope<TRule> =
-	| LivePermissionMode
-	| LiveRulePermissions<TRule>;
-
-export interface LivePermissionsPolicy {
-	fs?: LivePermissionScope<LiveFsPermissionRule>;
-	network?: LivePermissionScope<LivePatternPermissionRule>;
-	child_process?: LivePermissionScope<LivePatternPermissionRule>;
-	process?: LivePermissionScope<LivePatternPermissionRule>;
-	env?: LivePermissionScope<LivePatternPermissionRule>;
-	binding?: LivePermissionScope<LivePatternPermissionRule>;
-}
-
-export function toGeneratedPermissionsPolicy(
-	policy: LivePermissionsPolicy | undefined,
-): protocol.PermissionsPolicy | null {
-	if (policy === undefined) {
-		return null;
-	}
-	return {
-		fs:
-			policy.fs === undefined
-				? null
-				: toGeneratedFilesystemPermissionScope(policy.fs),
-		network:
-			policy.network === undefined
-				? null
-				: toGeneratedPatternPermissionScope(policy.network),
-		childProcess:
-			policy.child_process === undefined
-				? null
-				: toGeneratedPatternPermissionScope(policy.child_process),
-		process:
-			policy.process === undefined
-				? null
-				: toGeneratedPatternPermissionScope(policy.process),
-		env:
-			policy.env === undefined
-				? null
-				: toGeneratedPatternPermissionScope(policy.env),
-		binding:
-			policy.binding === undefined
-				? null
-				: toGeneratedPatternPermissionScope(policy.binding),
-	};
-}
-
-export function toGeneratedFilesystemPermissionScope(
-	scope: LivePermissionScope<LiveFsPermissionRule>,
-): protocol.FsPermissionScope {
-	if (typeof scope === "string") {
-		return {
-			tag: "PermissionMode",
-			val: toGeneratedPermissionMode(scope),
-		};
-	}
-	return {
-		tag: "FsPermissionRuleSet",
-		val: {
-			default:
-				scope.default === undefined
-					? null
-					: toGeneratedPermissionMode(scope.default),
-			rules: scope.rules.map((rule) => ({
-				mode: toGeneratedPermissionMode(rule.mode),
-				operations: rule.operations ?? [],
-				paths: rule.paths ?? [],
-			})),
-		},
-	};
-}
-
-export function toGeneratedPatternPermissionScope(
-	scope: LivePermissionScope<LivePatternPermissionRule>,
-): protocol.PatternPermissionScope {
-	if (typeof scope === "string") {
-		return {
-			tag: "PermissionMode",
-			val: toGeneratedPermissionMode(scope),
-		};
-	}
-	return {
-		tag: "PatternPermissionRuleSet",
-		val: {
-			default:
-				scope.default === undefined
-					? null
-					: toGeneratedPermissionMode(scope.default),
-			rules: scope.rules.map((rule) => ({
-				mode: toGeneratedPermissionMode(rule.mode),
-				operations: rule.operations ?? [],
-				patterns: rule.patterns ?? [],
-			})),
-		},
-	};
-}
diff --git a/packages/core/src/process.ts b/packages/core/src/process.ts
deleted file mode 100644
index cb34ec9e0..000000000
--- a/packages/core/src/process.ts
+++ /dev/null
@@ -1,131 +0,0 @@
-import {
-	type ChildProcessWithoutNullStreams,
-	spawn,
-} from "node:child_process";
-export {
-	SidecarProcessError,
-	SidecarProcessExited,
-} from "./sidecar-errors.js";
-import {
-	SidecarProcessError,
-	SidecarProcessExited,
-} from "./sidecar-errors.js";
-
-export interface StdioSidecarProcessSpawnOptions {
-	command: string;
-	args?: string[];
-	cwd?: string;
-}
-
-export class StdioSidecarProcess {
-	readonly child: ChildProcessWithoutNullStreams;
-	private readonly stderrChunks: Buffer[] = [];
-	private readonly exitListeners = new Set<(error: SidecarProcessExited) => void>();
-	private readonly errorListeners = new Set<(error: SidecarProcessError) => void>();
-
-	private constructor(child: ChildProcessWithoutNullStreams) {
-		this.child = child;
-		this.child.stderr.on("data", (chunk: Buffer | string) => {
-			this.stderrChunks.push(
-				typeof chunk === "string" ? Buffer.from(chunk) : Buffer.from(chunk),
-			);
-		});
-		this.child.on("exit", (code, signal) => {
-			const error = new SidecarProcessExited({
-				exitCode: code,
-				signal,
-				stderr: this.stderrText(),
-			});
-			for (const listener of this.exitListeners) {
-				listener(error);
-			}
-		});
-		this.child.on("error", (error) => {
-			const normalized =
-				error instanceof Error ? error : new Error(String(error));
-			const sidecarError = new SidecarProcessError(
-				normalized,
-				this.stderrText(),
-			);
-			for (const listener of this.errorListeners) {
-				listener(sidecarError);
-			}
-		});
-	}
-
-	static spawn(options: StdioSidecarProcessSpawnOptions): StdioSidecarProcess {
-		return new StdioSidecarProcess(
-			spawn(options.command, options.args ?? [], {
-				cwd: options.cwd,
-				stdio: ["pipe", "pipe", "pipe"],
-			}),
-		);
-	}
-
-	static fromChild(
-		child: ChildProcessWithoutNullStreams,
-	): StdioSidecarProcess {
-		return new StdioSidecarProcess(child);
-	}
-
-	onExit(handler: (error: SidecarProcessExited) => void): () => void {
-		this.exitListeners.add(handler);
-		return () => {
-			this.exitListeners.delete(handler);
-		};
-	}
-
-	onError(handler: (error: SidecarProcessError) => void): () => void {
-		this.errorListeners.add(handler);
-		return () => {
-			this.errorListeners.delete(handler);
-		};
-	}
-
-	stderrText(): string {
-		return Buffer.concat(this.stderrChunks).toString("utf8").trim();
-	}
-
-	currentExitError(): SidecarProcessExited | null {
-		if (this.child.exitCode === null && this.child.signalCode === null) {
-			return null;
-		}
-		return new SidecarProcessExited({
-			exitCode: this.child.exitCode,
-			signal: this.child.signalCode,
-			stderr: this.stderrText(),
-		});
-	}
-
-	waitForExit(timeoutMs: number): Promise<number | null> {
-		return new Promise<number | null>((resolve) => {
-			let timer: ReturnType<typeof setTimeout> | null = null;
-			const cleanup = () => {
-				this.child.off("exit", onExit);
-				this.child.off("close", onClose);
-				if (timer !== null) {
-					clearTimeout(timer);
-					timer = null;
-				}
-			};
-			const onExit = (code: number | null) => {
-				cleanup();
-				resolve(code);
-			};
-			const onClose = (code: number | null) => {
-				cleanup();
-				resolve(code);
-			};
-			if (this.child.exitCode !== null || this.child.signalCode !== null) {
-				resolve(this.child.exitCode);
-				return;
-			}
-			this.child.on("exit", onExit);
-			this.child.on("close", onClose);
-			timer = setTimeout(() => {
-				cleanup();
-				resolve(null);
-			}, timeoutMs);
-		});
-	}
-}
diff --git a/packages/core/src/protocol-client.ts b/packages/core/src/protocol-client.ts
deleted file mode 100644
index 618e2c848..000000000
--- a/packages/core/src/protocol-client.ts
+++ /dev/null
@@ -1,292 +0,0 @@
-import type { Readable, Writable } from "node:stream";
-import {
-	SidecarEventBuffer,
-	SidecarEventBufferOverflow,
-	normalizeSidecarEventMatcher,
-	sidecarEventWaitAbortError,
-	type LiveSidecarEventSelector,
-} from "./event-buffer.js";
-import { FrameRpcTransport } from "./frame-rpc.js";
-import type { FrameTransport } from "./frame-stream.js";
-import {
-	HostProtocolFrameFactory,
-	classifySidecarWrittenProtocolFrame,
-	decodeProtocolFramePayload,
-	encodeProtocolFramePayload,
-	resolveSidecarRequestFramePayload,
-	type LiveEventFrame,
-	type LiveProtocolFrame,
-	type LiveRequestFrame,
-	type LiveResponseFrame,
-	type LiveSidecarRequestFrame,
-	type LiveSidecarRequestHandler,
-	type ProtocolFramePayloadCodec,
-} from "./protocol-frames.js";
-import type { LiveOwnershipScope } from "./ownership.js";
-import type { LiveRequestPayload } from "./request-payloads.js";
-
-export interface SidecarProtocolClientOptions {
-	frameTransport?: FrameTransport<
-		LiveResponseFrame | LiveEventFrame | LiveSidecarRequestFrame,
-		LiveProtocolFrame
-	>;
-	stdin?: Writable;
-	stdout?: Readable;
-	frameTimeoutMs: number;
-	eventBufferCapacity: number;
-	payloadCodec?: ProtocolFramePayloadCodec;
-	stderrText?: () => string;
-	frameError?: (error: Error) => Error;
-	streamEndedError?: () => Error;
-}
-
-export class SidecarProtocolClient {
-	private readonly eventBuffer: SidecarEventBuffer<LiveEventFrame>;
-	private readonly eventListeners = new Set<(event: LiveEventFrame) => void>();
-	private readonly frameTimeoutMs: number;
-	private readonly payloadCodec: ProtocolFramePayloadCodec;
-	private readonly stderrText: () => string;
-	private readonly hostFrameFactory = new HostProtocolFrameFactory();
-	private readonly frameTransport: FrameRpcTransport<
-		LiveResponseFrame | LiveEventFrame | LiveSidecarRequestFrame,
-		LiveProtocolFrame,
-		LiveResponseFrame,
-		LiveEventFrame,
-		LiveSidecarRequestFrame
-	>;
-	private closedError: Error | null = null;
-	private readonly eventWaiters = new Set<{
-		matches: (event: LiveEventFrame) => boolean;
-		resolve: (event: LiveEventFrame) => void;
-		reject: (error: Error) => void;
-		timer: ReturnType<typeof setTimeout> | null;
-	}>();
-	private sidecarRequestHandler: LiveSidecarRequestHandler | null = null;
-
-	constructor(options: SidecarProtocolClientOptions) {
-		this.frameTimeoutMs = options.frameTimeoutMs;
-		this.eventBuffer = new SidecarEventBuffer(options.eventBufferCapacity);
-		this.payloadCodec = options.payloadCodec ?? "bare";
-		this.stderrText = options.stderrText ?? (() => "");
-		this.frameTransport = new FrameRpcTransport<
-			LiveResponseFrame | LiveEventFrame | LiveSidecarRequestFrame,
-			LiveProtocolFrame,
-			LiveResponseFrame,
-			LiveEventFrame,
-			LiveSidecarRequestFrame
-		>({
-			frameTransport: options.frameTransport,
-			stdin: options.stdin,
-			stdout: options.stdout,
-			encodeFrame: (frame) =>
-				encodeProtocolFramePayload(frame, this.payloadCodec),
-			decodeFrame: (payload) =>
-				decodeProtocolFramePayload(payload, this.payloadCodec),
-			classifyFrame: classifySidecarWrittenProtocolFrame,
-		});
-		this.frameTransport.onEvent((event) => {
-			this.dispatchEvent(event);
-		});
-		this.frameTransport.onSidecarRequest((request) => {
-			void this.dispatchSidecarRequest(request);
-		});
-		this.frameTransport.onError((error) => {
-			this.failPermanently(options.frameError?.(error) ?? error);
-		});
-		this.frameTransport.onEnd(() => {
-			this.failPermanently(
-				options.streamEndedError?.() ??
-					new Error("sidecar protocol stream ended"),
-			);
-		});
-	}
-
-	setSidecarRequestHandler(handler: LiveSidecarRequestHandler | null): void {
-		this.sidecarRequestHandler = handler;
-	}
-
-	onEvent(handler: (event: LiveEventFrame) => void): () => void {
-		this.eventListeners.add(handler);
-		return () => {
-			this.eventListeners.delete(handler);
-		};
-	}
-
-	async sendRequest(input: {
-		ownership: LiveOwnershipScope;
-		payload: LiveRequestPayload;
-	}): Promise<LiveResponseFrame> {
-		if (this.closedError) {
-			throw this.closedError;
-		}
-
-		const request = this.hostFrameFactory.createRequestFrame(input);
-		const response = await this.frameTransport.sendFrame(
-			request.request_id,
-			request,
-			{
-				timeoutMs: this.frameTimeoutMs,
-				timeoutMessage: () =>
-					`timed out waiting for sidecar protocol frame for ${input.payload.type}\nstderr:\n${this.stderrText()}`,
-			},
-		);
-
-		if (response.payload.type === "rejected") {
-			throw new Error(
-				`sidecar rejected request ${request.request_id}: ${response.payload.code}: ${response.payload.message}`,
-			);
-		}
-		return response;
-	}
-
-	async waitForEvent(
-		matcher:
-			| LiveSidecarEventSelector
-			| ((event: LiveEventFrame) => boolean),
-		timeoutMs?: number,
-		options?: {
-			signal?: AbortSignal;
-		},
-	): Promise<LiveEventFrame> {
-		if (this.closedError instanceof SidecarEventBufferOverflow) {
-			throw this.closedError;
-		}
-		const normalizedMatcher =
-			normalizeSidecarEventMatcher<LiveEventFrame>(matcher);
-		const bufferedEvent = this.eventBuffer.take(normalizedMatcher);
-		if (bufferedEvent) {
-			return bufferedEvent;
-		}
-		if (this.closedError) {
-			throw this.closedError;
-		}
-		if (options?.signal?.aborted) {
-			throw sidecarEventWaitAbortError(options.signal.reason);
-		}
-
-		return await new Promise<LiveEventFrame>((resolve, reject) => {
-			let abortListener: (() => void) | null = null;
-			const waiter = {
-				matches: normalizedMatcher.matches,
-				resolve: (event: LiveEventFrame) => {
-					if (waiter.timer !== null) {
-						clearTimeout(waiter.timer);
-					}
-					if (abortListener) {
-						options?.signal?.removeEventListener("abort", abortListener);
-						abortListener = null;
-					}
-					this.eventWaiters.delete(waiter);
-					resolve(event);
-				},
-				reject: (error: Error) => {
-					if (waiter.timer !== null) {
-						clearTimeout(waiter.timer);
-					}
-					if (abortListener) {
-						options?.signal?.removeEventListener("abort", abortListener);
-						abortListener = null;
-					}
-					this.eventWaiters.delete(waiter);
-					reject(error);
-				},
-				timer:
-					timeoutMs === undefined
-						? null
-						: setTimeout(() => {
-								this.eventWaiters.delete(waiter);
-								reject(
-									new Error(
-										`timed out waiting for sidecar event\nstderr:\n${this.stderrText()}`,
-									),
-								);
-							}, timeoutMs),
-			};
-			if (options?.signal) {
-				abortListener = () => {
-					waiter.reject(sidecarEventWaitAbortError(options.signal?.reason));
-				};
-				options.signal.addEventListener("abort", abortListener, { once: true });
-			}
-			this.eventWaiters.add(waiter);
-		});
-	}
-
-	failPermanently(
-		error: Error,
-		options?: {
-			replaceExisting?: (current: Error, next: Error) => boolean;
-		},
-	): void {
-		if (this.closedError) {
-			if (!options?.replaceExisting?.(this.closedError, error)) {
-				return;
-			}
-		}
-		this.closedError = error;
-		this.rejectPending(error);
-	}
-
-	dispose(): void {
-		this.frameTransport.dispose();
-	}
-
-	private async writeFrame(frame: LiveProtocolFrame): Promise<void> {
-		await this.frameTransport.writeFrame(frame);
-	}
-
-	private async dispatchSidecarRequest(
-		request: LiveSidecarRequestFrame,
-	): Promise<void> {
-		const payload = await resolveSidecarRequestFramePayload(
-			request,
-			this.sidecarRequestHandler,
-		);
-
-		try {
-			await this.writeFrame(
-				this.hostFrameFactory.createSidecarResponseFrame({
-					request,
-					payload,
-				}),
-			);
-		} catch (error) {
-			const normalized =
-				error instanceof Error ? error : new Error(String(error));
-			this.failPermanently(normalized);
-		}
-	}
-
-	private dispatchEvent(event: LiveEventFrame): void {
-		for (const listener of this.eventListeners) {
-			try {
-				listener(event);
-			} catch {
-				// Event listeners are best-effort observers and must not break framing.
-			}
-		}
-		for (const waiter of this.eventWaiters) {
-			if (!waiter.matches(event)) {
-				continue;
-			}
-			waiter.resolve(event);
-			return;
-		}
-		this.bufferEvent(event);
-	}
-
-	private bufferEvent(event: LiveEventFrame): void {
-		const overflow = this.eventBuffer.buffer(event);
-		if (overflow) {
-			this.failPermanently(overflow);
-		}
-	}
-
-	private rejectPending(error: Error): void {
-		this.frameTransport.rejectAll(error);
-		for (const waiter of this.eventWaiters) {
-			waiter.reject(error);
-		}
-		this.eventWaiters.clear();
-	}
-}
diff --git a/packages/core/src/protocol-frames.ts b/packages/core/src/protocol-frames.ts
deleted file mode 100644
index 616658818..000000000
--- a/packages/core/src/protocol-frames.ts
+++ /dev/null
@@ -1,280 +0,0 @@
-import { toExactUint8Array } from "./bytes.js";
-import {
-	decodeJsonFramePayload,
-	encodeJsonFramePayload,
-	type TransportPayloadCodec,
-} from "./frame-payload-codec.js";
-import type { ClassifiedFrame } from "./frame-rpc.js";
-import {
-	errorSidecarResponsePayload,
-	fromGeneratedSidecarRequestPayload,
-	isMatchingSidecarResponsePayload,
-	toGeneratedSidecarResponsePayload,
-	type LiveSidecarRequestPayload,
-	type LiveSidecarResponsePayload,
-} from "./callbacks.js";
-import {
-	fromGeneratedEventPayload,
-	type LiveSidecarEventPayload,
-} from "./event-buffer.js";
-import * as protocol from "./generated-protocol.js";
-import { bigIntToSafeNumber } from "./numbers.js";
-import {
-	fromGeneratedOwnershipScope,
-	toGeneratedOwnershipScope,
-	type LiveOwnershipScope,
-} from "./ownership.js";
-import {
-	SIDECAR_PROTOCOL_SCHEMA,
-	validateSidecarProtocolSchema,
-} from "./protocol-schema.js";
-import {
-	toGeneratedRequestPayload,
-	type LiveRequestPayload,
-} from "./request-payloads.js";
-import {
-	fromGeneratedResponsePayload,
-	type LiveResponsePayload,
-} from "./response-payloads.js";
-
-export interface LiveRequestFrame {
-	frame_type: "request";
-	schema: typeof SIDECAR_PROTOCOL_SCHEMA;
-	request_id: number;
-	ownership: LiveOwnershipScope;
-	payload: LiveRequestPayload;
-}
-
-export interface LiveEventFrame {
-	frame_type: "event";
-	schema: typeof SIDECAR_PROTOCOL_SCHEMA;
-	ownership: LiveOwnershipScope;
-	payload: LiveSidecarEventPayload;
-}
-
-export interface LiveSidecarRequestFrame {
-	frame_type: "sidecar_request";
-	schema: typeof SIDECAR_PROTOCOL_SCHEMA;
-	request_id: number;
-	ownership: LiveOwnershipScope;
-	payload: LiveSidecarRequestPayload;
-}
-
-export interface LiveResponseFrame {
-	frame_type: "response";
-	schema: typeof SIDECAR_PROTOCOL_SCHEMA;
-	request_id: number;
-	ownership: LiveOwnershipScope;
-	payload: LiveResponsePayload;
-}
-
-export interface LiveSidecarResponseFrame {
-	frame_type: "sidecar_response";
-	schema: typeof SIDECAR_PROTOCOL_SCHEMA;
-	request_id: number;
-	ownership: LiveOwnershipScope;
-	payload: LiveSidecarResponsePayload;
-}
-
-export type LiveProtocolFrame =
-	| LiveRequestFrame
-	| LiveResponseFrame
-	| LiveEventFrame
-	| LiveSidecarRequestFrame
-	| LiveSidecarResponseFrame;
-
-export type LiveSidecarWrittenProtocolFrame =
-	| LiveResponseFrame
-	| LiveEventFrame
-	| LiveSidecarRequestFrame;
-
-export type ProtocolFramePayloadCodec = TransportPayloadCodec;
-
-export type ClassifiedSidecarWrittenProtocolFrame = ClassifiedFrame<
-	LiveResponseFrame,
-	LiveEventFrame,
-	LiveSidecarRequestFrame
->;
-
-export type LiveSidecarRequestHandler = (
-	request: LiveSidecarRequestFrame,
-) => Promise<LiveSidecarResponsePayload> | LiveSidecarResponsePayload;
-
-export class HostProtocolFrameFactory {
-	private nextRequestId = 1;
-
-	createRequestFrame(input: {
-		ownership: LiveOwnershipScope;
-		payload: LiveRequestPayload;
-	}): LiveRequestFrame {
-		return {
-			frame_type: "request",
-			schema: SIDECAR_PROTOCOL_SCHEMA,
-			request_id: this.nextRequestId++,
-			ownership: input.ownership,
-			payload: input.payload,
-		};
-	}
-
-	createSidecarResponseFrame(input: {
-		request: LiveSidecarRequestFrame;
-		payload: LiveSidecarResponsePayload;
-	}): LiveSidecarResponseFrame {
-		return {
-			frame_type: "sidecar_response",
-			schema: SIDECAR_PROTOCOL_SCHEMA,
-			request_id: input.request.request_id,
-			ownership: input.request.ownership,
-			payload: input.payload,
-		};
-	}
-}
-
-export async function resolveSidecarRequestFramePayload(
-	request: LiveSidecarRequestFrame,
-	handler: LiveSidecarRequestHandler | null,
-): Promise<LiveSidecarResponsePayload> {
-	try {
-		if (!handler) {
-			throw new Error(
-				`no sidecar request handler registered for ${request.payload.type}`,
-			);
-		}
-		const payload = await handler(request);
-		if (!isMatchingSidecarResponsePayload(request.payload, payload)) {
-			throw new Error(
-				`sidecar handler returned ${payload.type} for ${request.payload.type}`,
-			);
-		}
-		return payload;
-	} catch (error) {
-		return errorSidecarResponsePayload(request.payload, error);
-	}
-}
-
-export function toGeneratedProtocolFrame(
-	frame: LiveProtocolFrame,
-): protocol.ProtocolFrame {
-	switch (frame.frame_type) {
-		case "request":
-			return {
-				tag: "RequestFrame",
-				val: {
-					schema: frame.schema,
-					requestId: BigInt(frame.request_id),
-					ownership: toGeneratedOwnershipScope(frame.ownership),
-					payload: toGeneratedRequestPayload(frame.payload),
-				},
-			};
-		case "sidecar_response":
-			return {
-				tag: "SidecarResponseFrame",
-				val: {
-					schema: frame.schema,
-					requestId: BigInt(frame.request_id),
-					ownership: toGeneratedOwnershipScope(frame.ownership),
-					payload: toGeneratedSidecarResponsePayload(frame.payload),
-				},
-			};
-		case "response":
-		case "event":
-		case "sidecar_request":
-			throw new Error(
-				`BARE encoding is only implemented for host-written frames, received ${frame.frame_type}`,
-			);
-	}
-}
-
-export function encodeBareProtocolFrame(frame: LiveProtocolFrame): Uint8Array {
-	return protocol.encodeProtocolFrame(toGeneratedProtocolFrame(frame));
-}
-
-export function decodeBareProtocolFrame(
-	payload: Uint8Array,
-): LiveSidecarWrittenProtocolFrame {
-	return fromGeneratedSidecarWrittenProtocolFrame(
-		protocol.decodeProtocolFrame(toExactUint8Array(payload)),
-	);
-}
-
-export function encodeProtocolFramePayload(
-	frame: LiveProtocolFrame,
-	codec: ProtocolFramePayloadCodec,
-): Uint8Array {
-	if (codec === "json") {
-		return encodeJsonFramePayload(frame);
-	}
-	return encodeBareProtocolFrame(frame);
-}
-
-export function decodeProtocolFramePayload(
-	payload: Uint8Array,
-	codec: ProtocolFramePayloadCodec,
-): LiveSidecarWrittenProtocolFrame {
-	if (codec === "json") {
-		return decodeJsonFramePayload<LiveSidecarWrittenProtocolFrame>(payload);
-	}
-	return decodeBareProtocolFrame(payload);
-}
-
-export function classifySidecarWrittenProtocolFrame(
-	frame: LiveSidecarWrittenProtocolFrame,
-): ClassifiedSidecarWrittenProtocolFrame {
-	switch (frame.frame_type) {
-		case "response":
-			return {
-				kind: "response",
-				requestId: frame.request_id,
-				frame,
-			};
-		case "event":
-			return { kind: "event", frame };
-		case "sidecar_request":
-			return { kind: "sidecarRequest", frame };
-	}
-}
-
-export function fromGeneratedSidecarWrittenProtocolFrame(
-	frame: protocol.ProtocolFrame,
-): LiveSidecarWrittenProtocolFrame {
-	switch (frame.tag) {
-		case "ResponseFrame":
-			return {
-				frame_type: "response",
-				schema: toLiveProtocolSchema(frame.val.schema),
-				request_id: bigIntToSafeNumber(
-					frame.val.requestId,
-					"response request id",
-				),
-				ownership: fromGeneratedOwnershipScope(frame.val.ownership),
-				payload: fromGeneratedResponsePayload(frame.val.payload),
-			};
-		case "EventFrame":
-			return {
-				frame_type: "event",
-				schema: toLiveProtocolSchema(frame.val.schema),
-				ownership: fromGeneratedOwnershipScope(frame.val.ownership),
-				payload: fromGeneratedEventPayload(frame.val.payload),
-			};
-		case "SidecarRequestFrame":
-			return {
-				frame_type: "sidecar_request",
-				schema: toLiveProtocolSchema(frame.val.schema),
-				request_id: bigIntToSafeNumber(
-					frame.val.requestId,
-					"sidecar request id",
-				),
-				ownership: fromGeneratedOwnershipScope(frame.val.ownership),
-				payload: fromGeneratedSidecarRequestPayload(frame.val.payload),
-			};
-		case "RequestFrame":
-		case "SidecarResponseFrame":
-			throw new Error(`unsupported BARE protocol frame tag: ${frame.tag}`);
-	}
-}
-
-export function toLiveProtocolSchema(
-	schema: protocol.ProtocolSchema,
-): typeof SIDECAR_PROTOCOL_SCHEMA {
-	return validateSidecarProtocolSchema(schema);
-}
diff --git a/packages/core/src/protocol-maps.ts b/packages/core/src/protocol-maps.ts
deleted file mode 100644
index fbc6f50b3..000000000
--- a/packages/core/src/protocol-maps.ts
+++ /dev/null
@@ -1,382 +0,0 @@
-import * as protocol from "./generated-protocol.js";
-
-export type LiveGuestRuntimeKind = "java_script" | "python" | "web_assembly";
-export type LiveDisposeReason =
-	| "requested"
-	| "connection_closed"
-	| "host_shutdown";
-export type LiveRootFilesystemMode = "ephemeral" | "read_only";
-export type LiveRootFilesystemEntryKind = "file" | "directory" | "symlink";
-export type LiveRootFilesystemEntryEncoding = "utf8" | "base64";
-export type LiveWasmPermissionTier =
-	| "full"
-	| "read-write"
-	| "read-only"
-	| "isolated";
-export type LivePermissionMode = "allow" | "ask" | "deny";
-export type LiveGuestFilesystemOperation =
-	| "read_file"
-	| "write_file"
-	| "create_dir"
-	| "mkdir"
-	| "exists"
-	| "stat"
-	| "lstat"
-	| "read_dir"
-	| "read_dir_recursive"
-	| "remove_file"
-	| "remove_dir"
-	| "remove"
-	| "copy"
-	| "move"
-	| "rename"
-	| "realpath"
-	| "symlink"
-	| "read_link"
-	| "link"
-	| "chmod"
-	| "chown"
-	| "utimes"
-	| "truncate"
-	| "pread"
-	| "pwrite";
-export type LiveFilesystemOperation =
-	| "read"
-	| "write"
-	| "stat"
-	| "read_dir"
-	| "mkdir"
-	| "remove"
-	| "rename";
-export type LiveVmLifecycleState =
-	| "creating"
-	| "ready"
-	| "disposing"
-	| "disposed"
-	| "failed";
-export type LiveStreamChannel = "stdout" | "stderr";
-export type LiveProcessSnapshotStatus = "running" | "exited" | "stopped";
-export type LiveSignalDispositionAction = "default" | "ignore" | "user";
-
-export function toGeneratedPermissionMode(
-	mode: LivePermissionMode,
-): protocol.PermissionMode {
-	switch (mode) {
-		case "allow":
-			return protocol.PermissionMode.Allow;
-		case "ask":
-			return protocol.PermissionMode.Ask;
-		case "deny":
-			return protocol.PermissionMode.Deny;
-	}
-}
-
-export function toGeneratedGuestRuntimeKind(
-	runtime: LiveGuestRuntimeKind,
-): protocol.GuestRuntimeKind {
-	switch (runtime) {
-		case "java_script":
-			return protocol.GuestRuntimeKind.JavaScript;
-		case "python":
-			return protocol.GuestRuntimeKind.Python;
-		case "web_assembly":
-			return protocol.GuestRuntimeKind.WebAssembly;
-	}
-}
-
-export function toGeneratedDisposeReason(
-	reason: LiveDisposeReason,
-): protocol.DisposeReason {
-	switch (reason) {
-		case "requested":
-			return protocol.DisposeReason.Requested;
-		case "connection_closed":
-			return protocol.DisposeReason.ConnectionClosed;
-		case "host_shutdown":
-			return protocol.DisposeReason.HostShutdown;
-	}
-}
-
-export function toGeneratedRootFilesystemMode(
-	mode: LiveRootFilesystemMode,
-): protocol.RootFilesystemMode {
-	switch (mode) {
-		case "ephemeral":
-			return protocol.RootFilesystemMode.Ephemeral;
-		case "read_only":
-			return protocol.RootFilesystemMode.ReadOnly;
-	}
-}
-
-export function toGeneratedRootFilesystemEntryKind(
-	kind: LiveRootFilesystemEntryKind,
-): protocol.RootFilesystemEntryKind {
-	switch (kind) {
-		case "file":
-			return protocol.RootFilesystemEntryKind.File;
-		case "directory":
-			return protocol.RootFilesystemEntryKind.Directory;
-		case "symlink":
-			return protocol.RootFilesystemEntryKind.Symlink;
-	}
-}
-
-export function toGeneratedRootFilesystemEntryEncoding(
-	encoding: LiveRootFilesystemEntryEncoding,
-): protocol.RootFilesystemEntryEncoding {
-	switch (encoding) {
-		case "utf8":
-			return protocol.RootFilesystemEntryEncoding.UtF8;
-		case "base64":
-			return protocol.RootFilesystemEntryEncoding.BasE64;
-	}
-}
-
-export function toGeneratedWasmPermissionTier(
-	tier: LiveWasmPermissionTier,
-): protocol.WasmPermissionTier {
-	switch (tier) {
-		case "full":
-			return protocol.WasmPermissionTier.Full;
-		case "read-write":
-			return protocol.WasmPermissionTier.ReadWrite;
-		case "read-only":
-			return protocol.WasmPermissionTier.ReadOnly;
-		case "isolated":
-			return protocol.WasmPermissionTier.Isolated;
-	}
-}
-
-export function toGeneratedGuestFilesystemOperation(
-	operation: LiveGuestFilesystemOperation,
-): protocol.GuestFilesystemOperation {
-	switch (operation) {
-		case "read_file":
-			return protocol.GuestFilesystemOperation.ReadFile;
-		case "write_file":
-			return protocol.GuestFilesystemOperation.WriteFile;
-		case "create_dir":
-			return protocol.GuestFilesystemOperation.CreateDir;
-		case "mkdir":
-			return protocol.GuestFilesystemOperation.Mkdir;
-		case "exists":
-			return protocol.GuestFilesystemOperation.Exists;
-		case "stat":
-			return protocol.GuestFilesystemOperation.Stat;
-		case "lstat":
-			return protocol.GuestFilesystemOperation.Lstat;
-		case "read_dir":
-			return protocol.GuestFilesystemOperation.ReadDir;
-		case "read_dir_recursive":
-			return protocol.GuestFilesystemOperation.ReadDirRecursive;
-		case "remove_file":
-			return protocol.GuestFilesystemOperation.RemoveFile;
-		case "remove_dir":
-			return protocol.GuestFilesystemOperation.RemoveDir;
-		case "remove":
-			return protocol.GuestFilesystemOperation.Remove;
-		case "copy":
-			return protocol.GuestFilesystemOperation.Copy;
-		case "move":
-			return protocol.GuestFilesystemOperation.Move;
-		case "rename":
-			return protocol.GuestFilesystemOperation.Rename;
-		case "realpath":
-			return protocol.GuestFilesystemOperation.Realpath;
-		case "symlink":
-			return protocol.GuestFilesystemOperation.Symlink;
-		case "read_link":
-			return protocol.GuestFilesystemOperation.ReadLink;
-		case "link":
-			return protocol.GuestFilesystemOperation.Link;
-		case "chmod":
-			return protocol.GuestFilesystemOperation.Chmod;
-		case "chown":
-			return protocol.GuestFilesystemOperation.Chown;
-		case "utimes":
-			return protocol.GuestFilesystemOperation.Utimes;
-		case "truncate":
-			return protocol.GuestFilesystemOperation.Truncate;
-		case "pread":
-			return protocol.GuestFilesystemOperation.Pread;
-		case "pwrite":
-			return protocol.GuestFilesystemOperation.Pwrite;
-	}
-}
-
-export function toGeneratedFilesystemOperation(
-	operation: LiveFilesystemOperation,
-): protocol.FilesystemOperation {
-	switch (operation) {
-		case "read":
-			return protocol.FilesystemOperation.Read;
-		case "write":
-			return protocol.FilesystemOperation.Write;
-		case "stat":
-			return protocol.FilesystemOperation.Stat;
-		case "read_dir":
-			return protocol.FilesystemOperation.ReadDir;
-		case "mkdir":
-			return protocol.FilesystemOperation.Mkdir;
-		case "remove":
-			return protocol.FilesystemOperation.Remove;
-		case "rename":
-			return protocol.FilesystemOperation.Rename;
-	}
-}
-
-export function fromGeneratedFilesystemOperation(
-	operation: protocol.FilesystemOperation,
-): LiveFilesystemOperation {
-	switch (operation) {
-		case protocol.FilesystemOperation.Read:
-			return "read";
-		case protocol.FilesystemOperation.Write:
-			return "write";
-		case protocol.FilesystemOperation.Stat:
-			return "stat";
-		case protocol.FilesystemOperation.ReadDir:
-			return "read_dir";
-		case protocol.FilesystemOperation.Mkdir:
-			return "mkdir";
-		case protocol.FilesystemOperation.Remove:
-			return "remove";
-		case protocol.FilesystemOperation.Rename:
-			return "rename";
-	}
-}
-
-export function fromGeneratedVmLifecycleState(
-	state: protocol.VmLifecycleState,
-): LiveVmLifecycleState {
-	switch (state) {
-		case protocol.VmLifecycleState.Creating:
-			return "creating";
-		case protocol.VmLifecycleState.Ready:
-			return "ready";
-		case protocol.VmLifecycleState.Disposing:
-			return "disposing";
-		case protocol.VmLifecycleState.Disposed:
-			return "disposed";
-		case protocol.VmLifecycleState.Failed:
-			return "failed";
-	}
-}
-
-export function fromGeneratedStreamChannel(
-	channel: protocol.StreamChannel,
-): LiveStreamChannel {
-	switch (channel) {
-		case protocol.StreamChannel.Stdout:
-			return "stdout";
-		case protocol.StreamChannel.Stderr:
-			return "stderr";
-	}
-}
-
-export function fromGeneratedProcessSnapshotStatus(
-	status: protocol.ProcessSnapshotStatus,
-): LiveProcessSnapshotStatus {
-	switch (status) {
-		case protocol.ProcessSnapshotStatus.Running:
-			return "running";
-		case protocol.ProcessSnapshotStatus.Exited:
-			return "exited";
-		case protocol.ProcessSnapshotStatus.Stopped:
-			return "stopped";
-	}
-}
-
-export function fromGeneratedSignalDispositionAction(
-	action: protocol.SignalDispositionAction,
-): LiveSignalDispositionAction {
-	switch (action) {
-		case protocol.SignalDispositionAction.Default:
-			return "default";
-		case protocol.SignalDispositionAction.Ignore:
-			return "ignore";
-		case protocol.SignalDispositionAction.User:
-			return "user";
-	}
-}
-
-export function fromGeneratedRootFilesystemEntryKind(
-	kind: protocol.RootFilesystemEntryKind,
-): LiveRootFilesystemEntryKind {
-	switch (kind) {
-		case protocol.RootFilesystemEntryKind.File:
-			return "file";
-		case protocol.RootFilesystemEntryKind.Directory:
-			return "directory";
-		case protocol.RootFilesystemEntryKind.Symlink:
-			return "symlink";
-	}
-}
-
-export function fromGeneratedRootFilesystemEntryEncoding(
-	encoding: protocol.RootFilesystemEntryEncoding,
-): LiveRootFilesystemEntryEncoding {
-	switch (encoding) {
-		case protocol.RootFilesystemEntryEncoding.UtF8:
-			return "utf8";
-		case protocol.RootFilesystemEntryEncoding.BasE64:
-			return "base64";
-	}
-}
-
-export function fromGeneratedGuestFilesystemOperation(
-	operation: protocol.GuestFilesystemOperation,
-): LiveGuestFilesystemOperation {
-	switch (operation) {
-		case protocol.GuestFilesystemOperation.ReadFile:
-			return "read_file";
-		case protocol.GuestFilesystemOperation.WriteFile:
-			return "write_file";
-		case protocol.GuestFilesystemOperation.CreateDir:
-			return "create_dir";
-		case protocol.GuestFilesystemOperation.Mkdir:
-			return "mkdir";
-		case protocol.GuestFilesystemOperation.Exists:
-			return "exists";
-		case protocol.GuestFilesystemOperation.Stat:
-			return "stat";
-		case protocol.GuestFilesystemOperation.Lstat:
-			return "lstat";
-		case protocol.GuestFilesystemOperation.ReadDir:
-			return "read_dir";
-		case protocol.GuestFilesystemOperation.ReadDirRecursive:
-			return "read_dir_recursive";
-		case protocol.GuestFilesystemOperation.RemoveFile:
-			return "remove_file";
-		case protocol.GuestFilesystemOperation.RemoveDir:
-			return "remove_dir";
-		case protocol.GuestFilesystemOperation.Remove:
-			return "remove";
-		case protocol.GuestFilesystemOperation.Copy:
-			return "copy";
-		case protocol.GuestFilesystemOperation.Move:
-			return "move";
-		case protocol.GuestFilesystemOperation.Rename:
-			return "rename";
-		case protocol.GuestFilesystemOperation.Realpath:
-			return "realpath";
-		case protocol.GuestFilesystemOperation.Symlink:
-			return "symlink";
-		case protocol.GuestFilesystemOperation.ReadLink:
-			return "read_link";
-		case protocol.GuestFilesystemOperation.Link:
-			return "link";
-		case protocol.GuestFilesystemOperation.Chmod:
-			return "chmod";
-		case protocol.GuestFilesystemOperation.Chown:
-			return "chown";
-		case protocol.GuestFilesystemOperation.Utimes:
-			return "utimes";
-		case protocol.GuestFilesystemOperation.Truncate:
-			return "truncate";
-		case protocol.GuestFilesystemOperation.Pread:
-			return "pread";
-		case protocol.GuestFilesystemOperation.Pwrite:
-			return "pwrite";
-	}
-}
diff --git a/packages/core/src/protocol-schema.ts b/packages/core/src/protocol-schema.ts
deleted file mode 100644
index ed0812176..000000000
--- a/packages/core/src/protocol-schema.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-export const SIDECAR_PROTOCOL_SCHEMA = {
-	name: "secure-exec-sidecar",
-	version: 7,
-} as const;
-
-export type LiveProtocolSchema = typeof SIDECAR_PROTOCOL_SCHEMA;
-
-export type ProtocolSchemaLike = {
-	name: string;
-	version: number;
-};
-
-export function validateSidecarProtocolSchema(
-	schema: ProtocolSchemaLike,
-): LiveProtocolSchema {
-	if (
-		schema.name !== SIDECAR_PROTOCOL_SCHEMA.name ||
-		schema.version !== SIDECAR_PROTOCOL_SCHEMA.version
-	) {
-		throw new Error(
-			`unsupported sidecar protocol schema ${schema.name}@${schema.version}`,
-		);
-	}
-	return SIDECAR_PROTOCOL_SCHEMA;
-}
diff --git a/packages/core/src/request-payloads.ts b/packages/core/src/request-payloads.ts
deleted file mode 100644
index ef8d00c8e..000000000
--- a/packages/core/src/request-payloads.ts
+++ /dev/null
@@ -1,528 +0,0 @@
-import { toExactArrayBuffer } from "./bytes.js";
-import {
-	type LiveMountDescriptor,
-	type LivePackageDescriptor,
-	type LiveProjectedModuleDescriptor,
-	type LiveSidecarPlacement,
-	type LiveSoftwareDescriptor,
-	toGeneratedMountDescriptor,
-	toGeneratedPackageDescriptor,
-	toGeneratedProjectedModuleDescriptor,
-	toGeneratedSidecarPlacement,
-	toGeneratedSoftwareDescriptor,
-} from "./descriptors.js";
-import { type LiveExtEnvelope, toGeneratedExtEnvelope } from "./ext.js";
-import {
-	type LiveRootFilesystemEntry,
-	type LiveRootFilesystemEntryEncoding,
-	toGeneratedRootFilesystemEntry,
-} from "./filesystem.js";
-import type { CreateVmConfig } from "./generated/CreateVmConfig.js";
-import type * as protocol from "./generated-protocol.js";
-import { stringifyJsonUtf8 } from "./json.js";
-import {
-	type LivePermissionsPolicy,
-	toGeneratedPermissionsPolicy,
-} from "./permissions.js";
-import {
-	type LiveDisposeReason,
-	type LiveFilesystemOperation,
-	type LiveGuestFilesystemOperation,
-	type LiveGuestRuntimeKind,
-	type LiveRootFilesystemMode,
-	type LiveWasmPermissionTier,
-	toGeneratedDisposeReason,
-	toGeneratedFilesystemOperation,
-	toGeneratedGuestFilesystemOperation,
-	toGeneratedGuestRuntimeKind,
-	toGeneratedRootFilesystemEntryEncoding,
-	toGeneratedRootFilesystemMode,
-	toGeneratedWasmPermissionTier,
-} from "./protocol-maps.js";
-
-export interface LiveRegisteredHostCallbackExample {
-	description: string;
-	input: unknown;
-}
-
-export interface LiveRegisteredHostCallbackDefinition {
-	description: string;
-	input_schema: unknown;
-	timeout_ms?: number;
-	examples?: LiveRegisteredHostCallbackExample[];
-}
-
-export type LiveRequestPayload =
-	| {
-			type: "authenticate";
-			client_name: string;
-			auth_token: string;
-			protocol_version: number;
-			bridge_version: number;
-	  }
-	| {
-			type: "open_session";
-			placement: LiveSidecarPlacement;
-			metadata: Record<string, string>;
-	  }
-	| {
-			type: "create_vm";
-			runtime: LiveGuestRuntimeKind;
-			config: CreateVmConfig;
-	  }
-	| {
-			type: "configure_vm";
-			mounts: LiveMountDescriptor[];
-			software: LiveSoftwareDescriptor[];
-			permissions?: LivePermissionsPolicy;
-			module_access_cwd?: string;
-			instructions: string[];
-			projected_modules: LiveProjectedModuleDescriptor[];
-			command_permissions: Record<string, LiveWasmPermissionTier>;
-			loopback_exempt_ports?: number[];
-			packages?: LivePackageDescriptor[];
-			packages_mount_at?: string;
-			bootstrap_commands?: string[];
-			tool_shim_commands?: string[];
-	  }
-	| {
-			type: "link_package";
-			package: LivePackageDescriptor;
-	  }
-	| {
-			type: "provided_commands";
-	  }
-	| {
-			type: "register_host_callbacks";
-			name: string;
-			description: string;
-			command_aliases?: string[];
-			registry_command_aliases?: string[];
-			callbacks: Record<string, LiveRegisteredHostCallbackDefinition>;
-	  }
-	| {
-			type: "dispose_vm";
-			reason: LiveDisposeReason;
-	  }
-	| {
-			type: "bootstrap_root_filesystem";
-			entries: LiveRootFilesystemEntry[];
-	  }
-	| {
-			type: "create_layer";
-	  }
-	| {
-			type: "seal_layer";
-			layer_id: string;
-	  }
-	| {
-			type: "import_snapshot";
-			entries: LiveRootFilesystemEntry[];
-	  }
-	| {
-			type: "export_snapshot";
-			layer_id: string;
-	  }
-	| {
-			type: "create_overlay";
-			mode?: LiveRootFilesystemMode;
-			upper_layer_id?: string;
-			lower_layer_ids: string[];
-	  }
-	| {
-			type: "snapshot_root_filesystem";
-	  }
-	| {
-			type: "guest_kernel_call";
-			execution_id: string;
-			operation: string;
-			payload: ArrayBuffer;
-	  }
-	| {
-			type: "guest_filesystem_call";
-			operation: LiveGuestFilesystemOperation;
-			path: string;
-			destination_path?: string;
-			target?: string;
-			content?: string;
-			encoding?: LiveRootFilesystemEntryEncoding;
-			recursive?: boolean;
-			max_depth?: number;
-			mode?: number;
-			uid?: number;
-			gid?: number;
-			atime_ms?: number;
-			mtime_ms?: number;
-			len?: number;
-			offset?: number;
-	  }
-	| {
-			type: "execute";
-			process_id: string;
-			command?: string;
-			runtime?: LiveGuestRuntimeKind;
-			entrypoint?: string;
-			args: string[];
-			env?: Record<string, string>;
-			cwd?: string;
-			wasm_permission_tier?: LiveWasmPermissionTier;
-	  }
-	| {
-			type: "write_stdin";
-			process_id: string;
-			chunk: Uint8Array;
-	  }
-	| {
-			type: "resize_pty";
-			process_id: string;
-			cols: number;
-			rows: number;
-	  }
-	| {
-			type: "close_stdin";
-			process_id: string;
-	  }
-	| {
-			type: "kill_process";
-			process_id: string;
-			signal: string;
-	  }
-	| {
-			type: "get_process_snapshot";
-	  }
-	| {
-			type: "get_resource_snapshot";
-	  }
-	| {
-			type: "find_listener";
-			host?: string;
-			port?: number;
-			path?: string;
-	  }
-	| {
-			type: "find_bound_udp";
-			host?: string;
-			port?: number;
-	  }
-	| {
-			type: "vm_fetch";
-			port: number;
-			method: string;
-			path: string;
-			headers_json: string;
-			body?: string;
-	  }
-	| {
-			type: "get_signal_state";
-			process_id: string;
-	  }
-	| {
-			type: "get_zombie_timer_count";
-	  }
-	| {
-			type: "host_filesystem_call";
-			operation: LiveFilesystemOperation;
-			path: string;
-			payload_size_bytes: number;
-	  }
-	| {
-			type: "persistence_load";
-			key: string;
-	  }
-	| {
-			type: "persistence_flush";
-			key: string;
-			payload_size_bytes: number;
-	  }
-	| {
-			type: "ext";
-			envelope: LiveExtEnvelope;
-	  };
-
-export function toGeneratedRequestPayload(
-	payload: LiveRequestPayload,
-): protocol.RequestPayload {
-	switch (payload.type) {
-		case "authenticate":
-			return {
-				tag: "AuthenticateRequest",
-				val: {
-					clientName: payload.client_name,
-					authToken: payload.auth_token,
-					protocolVersion: payload.protocol_version,
-					bridgeVersion: payload.bridge_version,
-				},
-			};
-		case "open_session":
-			return {
-				tag: "OpenSessionRequest",
-				val: {
-					placement: toGeneratedSidecarPlacement(payload.placement),
-					metadata: new Map(Object.entries(payload.metadata ?? {})),
-				},
-			};
-		case "create_vm":
-			return {
-				tag: "CreateVmRequest",
-				val: {
-					runtime: toGeneratedGuestRuntimeKind(payload.runtime),
-					config: stringifyJsonUtf8(payload.config, "create VM config"),
-				},
-			};
-		case "dispose_vm":
-			return {
-				tag: "DisposeVmRequest",
-				val: { reason: toGeneratedDisposeReason(payload.reason) },
-			};
-		case "bootstrap_root_filesystem":
-			return {
-				tag: "BootstrapRootFilesystemRequest",
-				val: { entries: payload.entries.map(toGeneratedRootFilesystemEntry) },
-			};
-		case "configure_vm":
-			return {
-				tag: "ConfigureVmRequest",
-				val: {
-					mounts: (payload.mounts ?? []).map(toGeneratedMountDescriptor),
-					software: (payload.software ?? []).map(toGeneratedSoftwareDescriptor),
-					permissions: toGeneratedPermissionsPolicy(payload.permissions),
-					moduleAccessCwd: payload.module_access_cwd ?? null,
-					instructions: payload.instructions ?? [],
-					projectedModules: (payload.projected_modules ?? []).map(
-						toGeneratedProjectedModuleDescriptor,
-					),
-					commandPermissions: new Map(
-						Object.entries(payload.command_permissions ?? {}).map(
-							([name, tier]) => [name, toGeneratedWasmPermissionTier(tier)],
-						),
-					),
-					loopbackExemptPorts: new Uint16Array(
-						payload.loopback_exempt_ports ?? [],
-					),
-					packages: (payload.packages ?? []).map(
-						toGeneratedPackageDescriptor,
-					),
-					packagesMountAt: payload.packages_mount_at ?? "",
-					bootstrapCommands: payload.bootstrap_commands ?? [],
-					toolShimCommands: payload.tool_shim_commands ?? [],
-				},
-			};
-		case "link_package":
-			return {
-				tag: "LinkPackageRequest",
-				val: {
-					package: toGeneratedPackageDescriptor(payload.package),
-				},
-			};
-		case "provided_commands":
-			return {
-				tag: "ProvidedCommandsRequest",
-				val: null,
-			};
-		case "register_host_callbacks":
-			return {
-				tag: "RegisterHostCallbacksRequest",
-				val: {
-					name: payload.name,
-					description: payload.description,
-					commandAliases: payload.command_aliases ?? [],
-					registryCommandAliases: payload.registry_command_aliases ?? [],
-					callbacks: new Map(
-						Object.entries(payload.callbacks).map(([name, callback]) => [
-							name,
-							{
-								description: callback.description,
-								inputSchema: stringifyJsonUtf8(
-									callback.input_schema,
-									"register_host_callbacks.callback.input_schema",
-								),
-								timeoutMs:
-									callback.timeout_ms === undefined
-										? null
-										: BigInt(callback.timeout_ms),
-								examples: (callback.examples ?? []).map((example) => ({
-									description: example.description,
-									input: stringifyJsonUtf8(
-										example.input,
-										"register_host_callbacks.callback.example.input",
-									),
-								})),
-							},
-						]),
-					),
-				},
-			};
-		case "create_layer":
-			return { tag: "CreateLayerRequest", val: null };
-		case "seal_layer":
-			return { tag: "SealLayerRequest", val: { layerId: payload.layer_id } };
-		case "import_snapshot":
-			return {
-				tag: "ImportSnapshotRequest",
-				val: { entries: payload.entries.map(toGeneratedRootFilesystemEntry) },
-			};
-		case "export_snapshot":
-			return {
-				tag: "ExportSnapshotRequest",
-				val: { layerId: payload.layer_id },
-			};
-		case "create_overlay":
-			return {
-				tag: "CreateOverlayRequest",
-				val: {
-					mode: toGeneratedRootFilesystemMode(payload.mode ?? "ephemeral"),
-					upperLayerId: payload.upper_layer_id ?? null,
-					lowerLayerIds: payload.lower_layer_ids ?? [],
-				},
-			};
-		case "guest_filesystem_call":
-			return {
-				tag: "GuestFilesystemCallRequest",
-				val: {
-					operation: toGeneratedGuestFilesystemOperation(payload.operation),
-					path: payload.path,
-					destinationPath: payload.destination_path ?? null,
-					target: payload.target ?? null,
-					content: payload.content ?? null,
-					encoding:
-						payload.encoding === undefined
-							? null
-							: toGeneratedRootFilesystemEntryEncoding(payload.encoding),
-					recursive: payload.recursive ?? false,
-					maxDepth: payload.max_depth ?? null,
-					mode: payload.mode ?? null,
-					uid: payload.uid ?? null,
-					gid: payload.gid ?? null,
-					atimeMs: toGeneratedOptionalU64(payload.atime_ms),
-					mtimeMs: toGeneratedOptionalU64(payload.mtime_ms),
-					len: toGeneratedOptionalU64(payload.len),
-					offset: toGeneratedOptionalU64(payload.offset),
-				},
-			};
-		case "guest_kernel_call":
-			return {
-				tag: "GuestKernelCallRequest",
-				val: {
-					executionId: payload.execution_id,
-					operation: payload.operation,
-					payload: payload.payload,
-				},
-			};
-		case "snapshot_root_filesystem":
-			return { tag: "SnapshotRootFilesystemRequest", val: null };
-		case "execute":
-			return {
-				tag: "ExecuteRequest",
-				val: {
-					processId: payload.process_id,
-					command: payload.command ?? null,
-					runtime:
-						payload.runtime === undefined
-							? null
-							: toGeneratedGuestRuntimeKind(payload.runtime),
-					entrypoint: payload.entrypoint ?? null,
-					args: payload.args ?? [],
-					env: new Map(Object.entries(payload.env ?? {})),
-					cwd: payload.cwd ?? null,
-					wasmPermissionTier:
-						payload.wasm_permission_tier === undefined
-							? null
-							: toGeneratedWasmPermissionTier(payload.wasm_permission_tier),
-				},
-			};
-		case "write_stdin":
-			return {
-				tag: "WriteStdinRequest",
-				val: {
-					processId: payload.process_id,
-					chunk: toExactArrayBuffer(payload.chunk),
-				},
-			};
-		case "resize_pty":
-			return {
-				tag: "ResizePtyRequest",
-				val: {
-					processId: payload.process_id,
-					cols: payload.cols,
-					rows: payload.rows,
-				},
-			};
-		case "close_stdin":
-			return {
-				tag: "CloseStdinRequest",
-				val: { processId: payload.process_id },
-			};
-		case "kill_process":
-			return {
-				tag: "KillProcessRequest",
-				val: { processId: payload.process_id, signal: payload.signal },
-			};
-		case "get_process_snapshot":
-			return { tag: "GetProcessSnapshotRequest", val: null };
-		case "get_resource_snapshot":
-			return { tag: "GetResourceSnapshotRequest", val: null };
-		case "find_listener":
-			return {
-				tag: "FindListenerRequest",
-				val: {
-					host: payload.host ?? null,
-					port: payload.port ?? null,
-					path: payload.path ?? null,
-				},
-			};
-		case "find_bound_udp":
-			return {
-				tag: "FindBoundUdpRequest",
-				val: { host: payload.host ?? null, port: payload.port ?? null },
-			};
-		case "vm_fetch":
-			return {
-				tag: "VmFetchRequest",
-				val: {
-					port: payload.port,
-					method: payload.method,
-					path: payload.path,
-					headersJson: payload.headers_json,
-					body: payload.body ?? null,
-				},
-			};
-		case "get_signal_state":
-			return {
-				tag: "GetSignalStateRequest",
-				val: { processId: payload.process_id },
-			};
-		case "get_zombie_timer_count":
-			return { tag: "GetZombieTimerCountRequest", val: null };
-		case "host_filesystem_call":
-			return {
-				tag: "HostFilesystemCallRequest",
-				val: {
-					operation: toGeneratedFilesystemOperation(payload.operation),
-					path: payload.path,
-					payloadSizeBytes: BigInt(payload.payload_size_bytes),
-				},
-			};
-		case "persistence_load":
-			return {
-				tag: "PersistenceLoadRequest",
-				val: { key: payload.key },
-			};
-		case "persistence_flush":
-			return {
-				tag: "PersistenceFlushRequest",
-				val: {
-					key: payload.key,
-					payloadSizeBytes: BigInt(payload.payload_size_bytes),
-				},
-			};
-		case "ext":
-			return {
-				tag: "ExtEnvelope",
-				val: toGeneratedExtEnvelope(payload.envelope),
-			};
-	}
-}
-
-function toGeneratedOptionalU64(value: number | undefined): bigint | null {
-	return value === undefined ? null : BigInt(value);
-}
diff --git a/packages/core/src/response-payloads.ts b/packages/core/src/response-payloads.ts
deleted file mode 100644
index 6cadba9ea..000000000
--- a/packages/core/src/response-payloads.ts
+++ /dev/null
@@ -1,568 +0,0 @@
-import {
-	fromGeneratedRootFilesystemEntry,
-	type LiveRootFilesystemEntry,
-	type LiveRootFilesystemEntryEncoding,
-} from "./filesystem.js";
-import { fromGeneratedExtEnvelope, type LiveExtEnvelope } from "./ext.js";
-import type * as protocol from "./generated-protocol.js";
-import { bigIntToSafeNumber } from "./numbers.js";
-import {
-	fromGeneratedFilesystemOperation,
-	fromGeneratedGuestFilesystemOperation,
-	fromGeneratedRootFilesystemEntryEncoding,
-	fromGeneratedSignalDispositionAction,
-	type LiveFilesystemOperation,
-	type LiveGuestFilesystemOperation,
-	type LiveSignalDispositionAction,
-} from "./protocol-maps.js";
-import {
-	fromGeneratedGuestFilesystemStat,
-	fromGeneratedProcessSnapshotEntry,
-	fromGeneratedSocketStateEntry,
-	type LiveGuestFilesystemStat,
-	type LiveProcessSnapshotEntry,
-	type LiveSocketStateEntry,
-} from "./state.js";
-
-/** A directory child with its file type, from `read_dir` (no extra lstat). */
-export interface LiveGuestDirEntry {
-	name: string;
-	path: string;
-	isDirectory: boolean;
-	isSymbolicLink: boolean;
-	size: number;
-}
-
-export interface LiveSignalHandlerRegistration {
-	action: LiveSignalDispositionAction;
-	mask: number[];
-	flags: number;
-}
-
-export interface LiveQueueSnapshotEntry {
-	name: string;
-	category: string;
-	depth: number;
-	high_water: number;
-	capacity: number;
-	fill_percent: number;
-}
-
-export interface LiveResourceSnapshot {
-	running_processes: number;
-	exited_processes: number;
-	fd_tables: number;
-	open_fds: number;
-	pipes: number;
-	pipe_buffered_bytes: number;
-	ptys: number;
-	pty_buffered_input_bytes: number;
-	pty_buffered_output_bytes: number;
-	sockets: number;
-	socket_listeners: number;
-	socket_connections: number;
-	socket_buffered_bytes: number;
-	socket_datagram_queue_len: number;
-	queue_snapshots: LiveQueueSnapshotEntry[];
-}
-
-export interface LiveProjectedCommand {
-	name: string;
-	guest_path: string;
-}
-
-export interface LivePackageCommands {
-	package_name: string;
-	commands: string[];
-}
-
-export interface LiveAgentosProjectedAgent {
-	id: string;
-	acp_entrypoint: string;
-	adapter_entrypoint: string;
-}
-
-export type LiveResponsePayload =
-	| {
-			type: "authenticated";
-			sidecar_id: string;
-			connection_id: string;
-			max_frame_bytes: number;
-	  }
-	| {
-			type: "session_opened";
-			session_id: string;
-			owner_connection_id: string;
-	  }
-	| {
-			type: "vm_created";
-			vm_id: string;
-	  }
-	| {
-			type: "vm_configured";
-			applied_mounts: number;
-			applied_software: number;
-			projected_commands: LiveProjectedCommand[];
-			agents: LiveAgentosProjectedAgent[];
-	  }
-	| {
-			type: "package_linked";
-			projected_commands: LiveProjectedCommand[];
-			agents: LiveAgentosProjectedAgent[];
-	  }
-	| {
-			type: "provided_commands_response";
-			packages: LivePackageCommands[];
-	  }
-	| {
-			type: "host_callbacks_registered";
-			registration: string;
-			command_count: number;
-	  }
-	| {
-			type: "layer_created";
-			layer_id: string;
-	  }
-	| {
-			type: "layer_sealed";
-			layer_id: string;
-	  }
-	| {
-			type: "snapshot_imported";
-			layer_id: string;
-	  }
-	| {
-			type: "snapshot_exported";
-			layer_id: string;
-			entries: LiveRootFilesystemEntry[];
-	  }
-	| {
-			type: "overlay_created";
-			layer_id: string;
-	  }
-	| {
-			type: "root_filesystem_bootstrapped";
-			entry_count: number;
-	  }
-	| {
-			type: "guest_filesystem_result";
-			operation: LiveGuestFilesystemOperation;
-			path: string;
-			content?: string;
-			encoding?: LiveRootFilesystemEntryEncoding;
-			entries?: LiveGuestDirEntry[];
-			stat?: LiveGuestFilesystemStat;
-			exists?: boolean;
-			target?: string;
-	  }
-	| {
-			type: "guest_kernel_result";
-			payload: ArrayBuffer;
-	  }
-	| {
-			type: "root_filesystem_snapshot";
-			entries: LiveRootFilesystemEntry[];
-	  }
-	| {
-			type: "vm_disposed";
-			vm_id: string;
-	  }
-	| {
-			type: "process_started";
-			process_id: string;
-			pid?: number;
-	  }
-	| {
-			type: "stdin_written";
-			process_id: string;
-			accepted_bytes: number;
-	  }
-	| {
-			type: "pty_resized";
-			process_id: string;
-			cols: number;
-			rows: number;
-	  }
-	| {
-			type: "stdin_closed";
-			process_id: string;
-	  }
-	| {
-			type: "process_killed";
-			process_id: string;
-	  }
-	| {
-			type: "process_snapshot";
-			processes: LiveProcessSnapshotEntry[];
-	  }
-	| ({
-			type: "resource_snapshot";
-	  } & LiveResourceSnapshot)
-	| {
-			type: "listener_snapshot";
-			listener?: LiveSocketStateEntry;
-	  }
-	| {
-			type: "bound_udp_snapshot";
-			socket?: LiveSocketStateEntry;
-	  }
-	| {
-			type: "vm_fetch_result";
-			response_json: string;
-	  }
-	| {
-			type: "signal_state";
-			process_id: string;
-			handlers: Record<string, LiveSignalHandlerRegistration>;
-	  }
-	| {
-			type: "zombie_timer_count";
-			count: number;
-	  }
-	| {
-			type: "filesystem_result";
-			operation: LiveFilesystemOperation;
-			status: string;
-			payload_size_bytes: number;
-	  }
-	| {
-			type: "persistence_state";
-			key: string;
-			found: boolean;
-			payload_size_bytes: number;
-	  }
-	| {
-			type: "persistence_flushed";
-			key: string;
-			committed_bytes: number;
-	  }
-	| {
-			type: "rejected";
-			code: string;
-			message: string;
-	  }
-	| {
-			type: "ext_result";
-			envelope: LiveExtEnvelope;
-	  };
-
-export function fromGeneratedResponsePayload(
-	payload: protocol.ResponsePayload,
-): LiveResponsePayload {
-	switch (payload.tag) {
-		case "AuthenticatedResponse":
-			return {
-				type: "authenticated",
-				sidecar_id: payload.val.sidecarId,
-				connection_id: payload.val.connectionId,
-				max_frame_bytes: payload.val.maxFrameBytes,
-			};
-		case "SessionOpenedResponse":
-			return {
-				type: "session_opened",
-				session_id: payload.val.sessionId,
-				owner_connection_id: payload.val.ownerConnectionId,
-			};
-		case "VmCreatedResponse":
-			return { type: "vm_created", vm_id: payload.val.vmId };
-		case "VmDisposedResponse":
-			return { type: "vm_disposed", vm_id: payload.val.vmId };
-		case "RootFilesystemBootstrappedResponse":
-			return {
-				type: "root_filesystem_bootstrapped",
-				entry_count: payload.val.entryCount,
-			};
-		case "VmConfiguredResponse":
-			return {
-				type: "vm_configured",
-				applied_mounts: payload.val.appliedMounts,
-				applied_software: payload.val.appliedSoftware,
-				projected_commands: payload.val.projectedCommands.map(
-					(command) => ({
-						name: command.name,
-						guest_path: command.guestPath,
-					}),
-				),
-				agents: payload.val.agents.map(fromGeneratedAgentosProjectedAgent),
-			};
-		case "PackageLinkedResponse":
-			return {
-				type: "package_linked",
-				projected_commands: payload.val.projectedCommands.map(
-					(command) => ({
-						name: command.name,
-						guest_path: command.guestPath,
-					}),
-				),
-				agents: payload.val.agents.map(fromGeneratedAgentosProjectedAgent),
-			};
-		case "ProvidedCommandsResponse":
-			return {
-				type: "provided_commands_response",
-				packages: payload.val.packages.map((pkg) => ({
-					package_name: pkg.packageName,
-					commands: [...pkg.commands],
-				})),
-			};
-		case "HostCallbacksRegisteredResponse":
-			return {
-				type: "host_callbacks_registered",
-				registration: payload.val.registration,
-				command_count: payload.val.commandCount,
-			};
-		case "LayerCreatedResponse":
-			return { type: "layer_created", layer_id: payload.val.layerId };
-		case "LayerSealedResponse":
-			return { type: "layer_sealed", layer_id: payload.val.layerId };
-		case "SnapshotImportedResponse":
-			return { type: "snapshot_imported", layer_id: payload.val.layerId };
-		case "SnapshotExportedResponse":
-			return {
-				type: "snapshot_exported",
-				layer_id: payload.val.layerId,
-				entries: payload.val.entries.map(fromGeneratedRootFilesystemEntry),
-			};
-		case "OverlayCreatedResponse":
-			return { type: "overlay_created", layer_id: payload.val.layerId };
-		case "GuestFilesystemResultResponse":
-			return {
-				type: "guest_filesystem_result",
-				operation: fromGeneratedGuestFilesystemOperation(payload.val.operation),
-				path: payload.val.path,
-				...(payload.val.content !== null
-					? { content: payload.val.content }
-					: {}),
-				...(payload.val.encoding !== null
-					? {
-							encoding: fromGeneratedRootFilesystemEntryEncoding(
-								payload.val.encoding,
-							),
-						}
-					: {}),
-				...(payload.val.entries !== null
-					? {
-							entries: payload.val.entries.map((entry) => ({
-								name: entry.name,
-								path: entry.path,
-								isDirectory: entry.isDirectory,
-								isSymbolicLink: entry.isSymbolicLink,
-								size: bigIntToSafeNumber(entry.size, "guest dir entry size"),
-							})),
-						}
-					: {}),
-				...(payload.val.stat !== null
-					? { stat: fromGeneratedGuestFilesystemStat(payload.val.stat) }
-					: {}),
-				...(payload.val.exists !== null ? { exists: payload.val.exists } : {}),
-				...(payload.val.target !== null ? { target: payload.val.target } : {}),
-			};
-		case "GuestKernelResultResponse":
-			return {
-				type: "guest_kernel_result",
-				payload: payload.val.payload,
-			};
-		case "RootFilesystemSnapshotResponse":
-			return {
-				type: "root_filesystem_snapshot",
-				entries: payload.val.entries.map(fromGeneratedRootFilesystemEntry),
-			};
-		case "ProcessStartedResponse":
-			return {
-				type: "process_started",
-				process_id: payload.val.processId,
-				...(payload.val.pid !== null ? { pid: payload.val.pid } : {}),
-			};
-		case "StdinWrittenResponse":
-			return {
-				type: "stdin_written",
-				process_id: payload.val.processId,
-				accepted_bytes: bigIntToSafeNumber(
-					payload.val.acceptedBytes,
-					"stdin_written.accepted_bytes",
-				),
-			};
-		case "PtyResizedResponse":
-			return {
-				type: "pty_resized",
-				process_id: payload.val.processId,
-				cols: payload.val.cols,
-				rows: payload.val.rows,
-			};
-		case "StdinClosedResponse":
-			return { type: "stdin_closed", process_id: payload.val.processId };
-		case "ProcessKilledResponse":
-			return { type: "process_killed", process_id: payload.val.processId };
-		case "ProcessSnapshotResponse":
-			return {
-				type: "process_snapshot",
-				processes: payload.val.processes.map(fromGeneratedProcessSnapshotEntry),
-			};
-		case "ResourceSnapshotResponse":
-			return {
-				type: "resource_snapshot",
-				running_processes: bigIntToSafeNumber(
-					payload.val.runningProcesses,
-					"resource_snapshot.running_processes",
-				),
-				exited_processes: bigIntToSafeNumber(
-					payload.val.exitedProcesses,
-					"resource_snapshot.exited_processes",
-				),
-				fd_tables: bigIntToSafeNumber(
-					payload.val.fdTables,
-					"resource_snapshot.fd_tables",
-				),
-				open_fds: bigIntToSafeNumber(
-					payload.val.openFds,
-					"resource_snapshot.open_fds",
-				),
-				pipes: bigIntToSafeNumber(payload.val.pipes, "resource_snapshot.pipes"),
-				pipe_buffered_bytes: bigIntToSafeNumber(
-					payload.val.pipeBufferedBytes,
-					"resource_snapshot.pipe_buffered_bytes",
-				),
-				ptys: bigIntToSafeNumber(payload.val.ptys, "resource_snapshot.ptys"),
-				pty_buffered_input_bytes: bigIntToSafeNumber(
-					payload.val.ptyBufferedInputBytes,
-					"resource_snapshot.pty_buffered_input_bytes",
-				),
-				pty_buffered_output_bytes: bigIntToSafeNumber(
-					payload.val.ptyBufferedOutputBytes,
-					"resource_snapshot.pty_buffered_output_bytes",
-				),
-				sockets: bigIntToSafeNumber(
-					payload.val.sockets,
-					"resource_snapshot.sockets",
-				),
-				socket_listeners: bigIntToSafeNumber(
-					payload.val.socketListeners,
-					"resource_snapshot.socket_listeners",
-				),
-				socket_connections: bigIntToSafeNumber(
-					payload.val.socketConnections,
-					"resource_snapshot.socket_connections",
-				),
-				socket_buffered_bytes: bigIntToSafeNumber(
-					payload.val.socketBufferedBytes,
-					"resource_snapshot.socket_buffered_bytes",
-				),
-				socket_datagram_queue_len: bigIntToSafeNumber(
-					payload.val.socketDatagramQueueLen,
-					"resource_snapshot.socket_datagram_queue_len",
-				),
-				queue_snapshots: payload.val.queueSnapshots.map((queue) => ({
-					name: queue.name,
-					category: queue.category,
-					depth: bigIntToSafeNumber(queue.depth, "resource_snapshot.queue.depth"),
-					high_water: bigIntToSafeNumber(
-						queue.highWater,
-						"resource_snapshot.queue.high_water",
-					),
-					capacity: bigIntToSafeNumber(
-						queue.capacity,
-						"resource_snapshot.queue.capacity",
-					),
-					fill_percent: bigIntToSafeNumber(
-						queue.fillPercent,
-						"resource_snapshot.queue.fill_percent",
-					),
-				})),
-			};
-		case "ListenerSnapshotResponse":
-			return {
-				type: "listener_snapshot",
-				...(payload.val.listener !== null
-					? { listener: fromGeneratedSocketStateEntry(payload.val.listener) }
-					: {}),
-			};
-		case "BoundUdpSnapshotResponse":
-			return {
-				type: "bound_udp_snapshot",
-				...(payload.val.socket !== null
-					? { socket: fromGeneratedSocketStateEntry(payload.val.socket) }
-					: {}),
-			};
-		case "SignalStateResponse":
-			return {
-				type: "signal_state",
-				process_id: payload.val.processId,
-				handlers: Object.fromEntries(
-					[...payload.val.handlers].map(([signal, registration]) => [
-						String(signal),
-						{
-							action: fromGeneratedSignalDispositionAction(registration.action),
-							mask: Array.from(registration.mask),
-							flags: registration.flags,
-						},
-					]),
-				),
-			};
-		case "ZombieTimerCountResponse":
-			return {
-				type: "zombie_timer_count",
-				count: bigIntToSafeNumber(
-					payload.val.count,
-					"zombie_timer_count.count",
-				),
-			};
-		case "FilesystemResultResponse":
-			return {
-				type: "filesystem_result",
-				operation: fromGeneratedFilesystemOperation(payload.val.operation),
-				status: payload.val.status,
-				payload_size_bytes: bigIntToSafeNumber(
-					payload.val.payloadSizeBytes,
-					"filesystem_result.payload_size_bytes",
-				),
-			};
-		case "PermissionDecisionResponse":
-			throw new Error(
-				"unsupported bare response payload tag: permission_decision",
-			);
-		case "PersistenceStateResponse":
-			return {
-				type: "persistence_state",
-				key: payload.val.key,
-				found: payload.val.found,
-				payload_size_bytes: bigIntToSafeNumber(
-					payload.val.payloadSizeBytes,
-					"persistence_state.payload_size_bytes",
-				),
-			};
-		case "PersistenceFlushedResponse":
-			return {
-				type: "persistence_flushed",
-				key: payload.val.key,
-				committed_bytes: bigIntToSafeNumber(
-					payload.val.committedBytes,
-					"persistence_flushed.committed_bytes",
-				),
-			};
-		case "RejectedResponse":
-			return {
-				type: "rejected",
-				code: payload.val.code,
-				message: payload.val.message,
-			};
-		case "VmFetchResponse":
-			return {
-				type: "vm_fetch_result",
-				response_json: payload.val.responseJson,
-			};
-		case "ExtEnvelope":
-			return {
-				type: "ext_result",
-				envelope: fromGeneratedExtEnvelope(payload.val),
-			};
-	}
-}
-
-function fromGeneratedAgentosProjectedAgent(
-	agent: protocol.AgentosProjectedAgent,
-): LiveAgentosProjectedAgent {
-	return {
-		id: agent.id,
-		acp_entrypoint: agent.acpEntrypoint,
-		adapter_entrypoint: agent.adapterEntrypoint,
-	};
-}
diff --git a/packages/core/src/sidecar-client.ts b/packages/core/src/sidecar-client.ts
deleted file mode 100644
index 75423b704..000000000
--- a/packages/core/src/sidecar-client.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-import type { LiveSidecarEventSelector } from "./event-buffer.js";
-import type { LiveOwnershipScope } from "./ownership.js";
-import type {
-	LiveEventFrame,
-	LiveResponseFrame,
-	LiveSidecarRequestHandler,
-} from "./protocol-frames.js";
-import type { LiveRequestPayload } from "./request-payloads.js";
-
-export interface SidecarProcessTransport {
-	setSidecarRequestHandler(handler: LiveSidecarRequestHandler | null): void;
-	onEvent(handler: (event: LiveEventFrame) => void): () => void;
-	sendRequest(input: {
-		ownership: LiveOwnershipScope;
-		payload: LiveRequestPayload;
-	}): Promise<LiveResponseFrame>;
-	waitForEvent(
-		matcher:
-			| LiveSidecarEventSelector
-			| ((event: LiveEventFrame) => boolean),
-		timeoutMs?: number,
-		options?: {
-			signal?: AbortSignal;
-		},
-	): Promise<LiveEventFrame>;
-	failPermanently(error: Error): void;
-	dispose(): Promise<void>;
-}
diff --git a/packages/core/src/sidecar-errors.ts b/packages/core/src/sidecar-errors.ts
deleted file mode 100644
index 4e43177be..000000000
--- a/packages/core/src/sidecar-errors.ts
+++ /dev/null
@@ -1,43 +0,0 @@
-function formatSidecarStderrSuffix(stderr: string): string {
-	return stderr ? `\nstderr:\n${stderr}` : "";
-}
-
-export class SidecarProcessExited extends Error {
-	readonly exitCode: number | null;
-	readonly signal: string | null;
-	readonly stderr: string;
-
-	constructor(options: {
-		exitCode: number | null;
-		signal: string | null;
-		stderr: string;
-	}) {
-		const reason =
-			options.signal !== null
-				? `signal ${options.signal}`
-				: options.exitCode !== null
-					? `code ${options.exitCode}`
-					: "disconnect";
-		super(
-			`sidecar process exited with ${reason}${formatSidecarStderrSuffix(options.stderr)}`,
-		);
-		this.name = "SidecarProcessExited";
-		this.exitCode = options.exitCode;
-		this.signal = options.signal;
-		this.stderr = options.stderr;
-	}
-}
-
-export class SidecarProcessError extends Error {
-	readonly childError: Error;
-	readonly stderr: string;
-
-	constructor(error: Error, stderr: string) {
-		super(
-			`sidecar process error: ${error.message}${formatSidecarStderrSuffix(stderr)}`,
-		);
-		this.name = "SidecarProcessError";
-		this.childError = error;
-		this.stderr = stderr;
-	}
-}
diff --git a/packages/core/src/sidecar-process.ts b/packages/core/src/sidecar-process.ts
deleted file mode 100644
index 5e155d916..000000000
--- a/packages/core/src/sidecar-process.ts
+++ /dev/null
@@ -1,1808 +0,0 @@
-import {
-	type LiveSidecarRequestPayload,
-	type LiveSidecarResponsePayload,
-} from "./callbacks.js";
-import type { MountConfigJsonObject } from "./descriptors.js";
-import { type LiveSidecarEventSelector } from "./event-buffer.js";
-import {
-	decodeGuestFilesystemContent,
-	encodeGuestFilesystemContent,
-	type LiveRootFilesystemEntry,
-	type LiveRootFilesystemEntryEncoding,
-	type LiveRootFilesystemLowerDescriptor,
-} from "./filesystem.js";
-import type { CreateVmConfig } from "./generated/CreateVmConfig.js";
-import type { SidecarProcessTransport } from "./sidecar-client.js";
-import { type LiveOwnershipScope } from "./ownership.js";
-import {
-	type LiveFsPermissionRule,
-	type LivePatternPermissionRule,
-	type LivePermissionMode,
-	type LivePermissionScope,
-	type LivePermissionsPolicy,
-	type LiveRulePermissions,
-} from "./permissions.js";
-import { SIDECAR_PROTOCOL_SCHEMA } from "./protocol-schema.js";
-import type {
-	LiveFilesystemOperation,
-	LiveGuestRuntimeKind,
-	LiveWasmPermissionTier,
-} from "./protocol-maps.js";
-import {
-	type LiveEventFrame,
-	type LiveSidecarRequestHandler,
-	type LiveRequestFrame,
-	type LiveResponseFrame,
-	type LiveSidecarRequestFrame,
-	type LiveSidecarResponseFrame,
-	type ProtocolFramePayloadCodec,
-} from "./protocol-frames.js";
-import { type LiveRequestPayload } from "./request-payloads.js";
-import type { LiveGuestDirEntry } from "./response-payloads.js";
-import {
-	type LiveGuestFilesystemStat,
-	type LiveProcessSnapshotEntry,
-	type LiveSocketStateEntry,
-} from "./state.js";
-export {
-	SidecarProcessError,
-	SidecarProcessExited,
-} from "./sidecar-errors.js";
-export { SidecarEventBufferOverflow } from "./event-buffer.js";
-// `Sidecar` is the public name for the native sidecar process client. The class
-// is `SidecarProcess` internally; consumers import it as `Sidecar` via the
-// `@secure-exec/core/sidecar-client` subpath and the package root.
-export { SidecarProcess as Sidecar };
-
-const BRIDGE_CONTRACT_VERSION = 1;
-
-export const NATIVE_SIDECAR_FRAME_TIMEOUT_MS = 120_000;
-const DEFAULT_SIDECAR_EVENT_BUFFER_CAPACITY = 4_096;
-const DEFAULT_SIDECAR_GRACEFUL_EXIT_MS = 5_000;
-const DEFAULT_SIDECAR_FORCE_EXIT_MS = 2_000;
-
-type OwnershipScope = LiveOwnershipScope;
-
-type GuestRuntimeKind = Extract<
-	LiveGuestRuntimeKind,
-	"java_script" | "python" | "web_assembly"
->;
-type WasmPermissionTier = LiveWasmPermissionTier;
-type RootFilesystemEntryEncoding = LiveRootFilesystemEntryEncoding;
-
-type RootFilesystemDescriptor = {
-	mode?: "ephemeral" | "read_only";
-	disableDefaultBaseLayer?: boolean;
-	lowers?: RootFilesystemLowerDescriptor[];
-	bootstrapEntries?: RootFilesystemEntry[];
-};
-
-export interface RootFilesystemEntry extends LiveRootFilesystemEntry {}
-
-export interface RootFilesystemLowerDescriptor {
-	kind: "snapshot" | "bundled_base_filesystem";
-	entries?: RootFilesystemEntry[];
-}
-
-type WireRootFilesystemLowerDescriptor = LiveRootFilesystemLowerDescriptor;
-type WireRootFilesystemEntry = LiveRootFilesystemEntry;
-
-export interface GuestFilesystemStat extends LiveGuestFilesystemStat {}
-
-export interface SidecarSocketStateEntry {
-	processId: string;
-	host?: string;
-	port?: number;
-	path?: string;
-}
-
-export interface SidecarSignalHandlerRegistration {
-	action: "default" | "ignore" | "user";
-	mask: number[];
-	flags: number;
-}
-
-export interface SidecarSignalState {
-	processId: string;
-	handlers: Map<number, SidecarSignalHandlerRegistration>;
-}
-
-export interface SidecarProcessSnapshotEntry {
-	processId: string;
-	pid: number;
-	ppid: number;
-	pgid: number;
-	sid: number;
-	driver: string;
-	command: string;
-	args: string[];
-	cwd: string;
-	status: "running" | "exited" | "stopped";
-	exitCode: number | null;
-}
-
-export interface SidecarQueueSnapshotEntry {
-	name: string;
-	category: string;
-	depth: number;
-	highWater: number;
-	capacity: number;
-	fillPercent: number;
-}
-
-export interface SidecarResourceSnapshot {
-	runningProcesses: number;
-	exitedProcesses: number;
-	fdTables: number;
-	openFds: number;
-	pipes: number;
-	pipeBufferedBytes: number;
-	ptys: number;
-	ptyBufferedInputBytes: number;
-	ptyBufferedOutputBytes: number;
-	sockets: number;
-	socketListeners: number;
-	socketConnections: number;
-	socketBufferedBytes: number;
-	socketDatagramQueueLen: number;
-	queueSnapshots: SidecarQueueSnapshotEntry[];
-}
-
-export interface SidecarZombieTimerCount {
-	count: number;
-}
-
-export interface SidecarRegisteredHostCallbackExample {
-	description: string;
-	input: unknown;
-}
-
-export interface SidecarRegisteredHostCallbackDefinition {
-	description: string;
-	inputSchema: unknown;
-	timeoutMs?: number;
-	examples?: SidecarRegisteredHostCallbackExample[];
-}
-
-export interface ExtEnvelope {
-	namespace: string;
-	payload: Uint8Array;
-}
-
-type RequestPayload = LiveRequestPayload;
-
-export type SidecarRequestPayload = LiveSidecarRequestPayload;
-
-export type SidecarResponsePayload = LiveSidecarResponsePayload;
-
-type RequestFrame = LiveRequestFrame;
-
-type EventFrame = LiveEventFrame;
-
-export type SidecarEventSelector = LiveSidecarEventSelector;
-
-export type SidecarRequestFrame = LiveSidecarRequestFrame;
-
-type ResponseFrame = LiveResponseFrame;
-
-export type SidecarResponseFrame = LiveSidecarResponseFrame;
-
-type NativeTransportPayloadCodec = ProtocolFramePayloadCodec;
-
-export type SidecarRequestHandler = LiveSidecarRequestHandler;
-
-export interface SidecarSpawnOptions {
-	cwd?: string;
-	command?: string;
-	args?: string[];
-	frameTimeoutMs?: number;
-	eventBufferCapacity?: number;
-	// Migration-only compatibility path for pre-BARE test fixtures.
-	payloadCodec?: NativeTransportPayloadCodec;
-}
-
-export interface ResolvedSidecarSpawnOptions {
-	cwd?: string;
-	command?: string;
-	args: string[];
-	frameTimeoutMs: number;
-	eventBufferCapacity: number;
-	gracefulExitMs: number;
-	forceExitMs: number;
-	disposedErrorMessage: string;
-	payloadCodec: NativeTransportPayloadCodec;
-}
-
-type SidecarProcessSpawnFactory = (
-	options: ResolvedSidecarSpawnOptions,
-) => SidecarProcessTransport;
-
-let sidecarProcessSpawnFactory: SidecarProcessSpawnFactory | null = null;
-
-export function registerSidecarProcessSpawnFactory(
-	factory: SidecarProcessSpawnFactory,
-): void {
-	sidecarProcessSpawnFactory = factory;
-}
-
-export interface AuthenticatedSession {
-	connectionId: string;
-	sessionId: string;
-}
-
-export interface CreatedVm {
-	vmId: string;
-}
-
-export interface SidecarSessionState {
-	sessionId: string;
-	agentType: string;
-	processId: string;
-	pid?: number;
-	closed: boolean;
-	modes?: unknown;
-	configOptions: unknown[];
-	agentCapabilities?: unknown;
-	agentInfo?: unknown;
-}
-
-export interface SidecarMountPluginDescriptor {
-	id: string;
-	config?: MountConfigJsonObject;
-}
-
-export interface SidecarMountDescriptor {
-	guestPath: string;
-	readOnly: boolean;
-	plugin: SidecarMountPluginDescriptor;
-}
-
-export interface SidecarSoftwareDescriptor {
-	packageName: string;
-	root: string;
-}
-
-export type SidecarPermissionMode = LivePermissionMode;
-
-export interface SidecarFsPermissionRule extends LiveFsPermissionRule {}
-
-export interface SidecarPatternPermissionRule
-	extends LivePatternPermissionRule {}
-
-export interface SidecarRulePermissions<TRule>
-	extends LiveRulePermissions<TRule> {}
-
-export type SidecarPermissionScope<TRule> = LivePermissionScope<TRule>;
-
-export interface SidecarPermissionsPolicy {
-	fs?: SidecarPermissionScope<SidecarFsPermissionRule>;
-	network?: SidecarPermissionScope<SidecarPatternPermissionRule>;
-	childProcess?: SidecarPermissionScope<SidecarPatternPermissionRule>;
-	process?: SidecarPermissionScope<SidecarPatternPermissionRule>;
-	env?: SidecarPermissionScope<SidecarPatternPermissionRule>;
-	binding?: SidecarPermissionScope<SidecarPatternPermissionRule>;
-}
-
-type WirePermissionsPolicy = LivePermissionsPolicy;
-
-export interface SidecarProjectedModuleDescriptor {
-	packageName: string;
-	entrypoint: string;
-}
-
-export interface SidecarPackageDescriptor {
-	dir?: string;
-	tar?: string;
-}
-
-export interface SidecarProjectedAgent {
-	id: string;
-	acpEntrypoint: string;
-	adapterEntrypoint: string;
-}
-
-export interface SidecarLinkPackageResult {
-	projectedCommands: SidecarProjectedCommand[];
-	agents: SidecarProjectedAgent[];
-}
-
-export interface SidecarProjectedCommand {
-	name: string;
-	guestPath: string;
-}
-
-export interface SidecarPackageCommands {
-	packageName: string;
-	commands: string[];
-}
-
-export interface SidecarVmConfiguredResponse {
-	appliedMounts: number;
-	appliedSoftware: number;
-	projectedCommands: SidecarProjectedCommand[];
-	agents: SidecarProjectedAgent[];
-}
-
-export interface SidecarFilesystemResult {
-	operation: LiveFilesystemOperation;
-	status: string;
-	payloadSizeBytes: number;
-}
-export interface SidecarPersistenceState {
-	key: string;
-	found: boolean;
-	payloadSizeBytes: number;
-}
-export interface SidecarPersistenceFlushed {
-	key: string;
-	committedBytes: number;
-}
-
-export class SidecarProcess {
-	private readonly protocolClient: SidecarProcessTransport;
-
-	private constructor(protocolClient: SidecarProcessTransport) {
-		this.protocolClient = protocolClient;
-	}
-
-	static fromClient(protocolClient: SidecarProcessTransport): SidecarProcess {
-		return new SidecarProcess(protocolClient);
-	}
-
-	static spawn(
-		options: SidecarSpawnOptions = {},
-	): SidecarProcess {
-		if (!sidecarProcessSpawnFactory) {
-			throw new Error(
-				"native sidecar spawn is not registered; import @secure-exec/core/native-client before calling SidecarProcess.spawn, or use SidecarProcess.fromClient",
-			);
-		}
-		const protocolClient = sidecarProcessSpawnFactory({
-			command: options.command,
-			args: options.args ?? [],
-			cwd: options.cwd,
-			frameTimeoutMs: options.frameTimeoutMs ?? NATIVE_SIDECAR_FRAME_TIMEOUT_MS,
-			eventBufferCapacity:
-				options.eventBufferCapacity ?? DEFAULT_SIDECAR_EVENT_BUFFER_CAPACITY,
-			gracefulExitMs: DEFAULT_SIDECAR_GRACEFUL_EXIT_MS,
-			forceExitMs: DEFAULT_SIDECAR_FORCE_EXIT_MS,
-			disposedErrorMessage: "native sidecar disposed",
-			payloadCodec: options.payloadCodec ?? "bare",
-		});
-		return SidecarProcess.fromClient(protocolClient);
-	}
-
-	setSidecarRequestHandler(handler: SidecarRequestHandler | null): void {
-		this.protocolClient.setSidecarRequestHandler(handler);
-	}
-
-	onEvent(handler: (event: EventFrame) => void): () => void {
-		return this.protocolClient.onEvent(handler);
-	}
-
-	async authenticateAndOpenSession(
-		sessionMetadata: Record<string, string> = {},
-	): Promise<AuthenticatedSession> {
-		const authenticated = await this.sendRequest({
-			ownership: {
-				scope: "connection",
-				connection_id: "client-hint",
-			},
-			payload: {
-				type: "authenticate",
-				client_name: "secure-exec-core-client",
-				auth_token: "secure-exec-core-client-token",
-				protocol_version: SIDECAR_PROTOCOL_SCHEMA.version,
-				bridge_version: BRIDGE_CONTRACT_VERSION,
-			},
-		});
-		if (authenticated.payload.type !== "authenticated") {
-			throw new Error(
-				`unexpected authenticate response: ${authenticated.payload.type}`,
-			);
-		}
-
-		const opened = await this.sendRequest({
-			ownership: {
-				scope: "connection",
-				connection_id: authenticated.payload.connection_id,
-			},
-			payload: {
-				type: "open_session",
-				placement: {
-					kind: "shared",
-					pool: null,
-				},
-				metadata: sessionMetadata,
-			},
-		});
-		if (opened.payload.type !== "session_opened") {
-			throw new Error(
-				`unexpected open_session response: ${opened.payload.type}`,
-			);
-		}
-
-		return {
-			connectionId: authenticated.payload.connection_id,
-			sessionId: opened.payload.session_id,
-		};
-	}
-
-	async createVm(
-		session: AuthenticatedSession,
-		options: {
-			runtime: GuestRuntimeKind;
-			config: CreateVmConfig;
-		},
-	): Promise<CreatedVm> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "session",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-			},
-			payload: {
-				type: "create_vm",
-				runtime: options.runtime,
-				config: options.config,
-			},
-		});
-		if (response.payload.type !== "vm_created") {
-			throw new Error(
-				`unexpected create_vm response: ${response.payload.type}`,
-			);
-		}
-
-		return {
-			vmId: response.payload.vm_id,
-		};
-	}
-
-	async extensionRequest(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		envelope: ExtEnvelope,
-	): Promise<ExtEnvelope> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "ext",
-				envelope,
-			},
-		});
-		if (response.payload.type !== "ext_result") {
-			throw new Error(`unexpected ext response: ${response.payload.type}`);
-		}
-		return response.payload.envelope;
-	}
-
-	async configureVm(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		options: {
-			mounts?: SidecarMountDescriptor[];
-			software?: SidecarSoftwareDescriptor[];
-			permissions?: SidecarPermissionsPolicy;
-			moduleAccessCwd?: string;
-			instructions?: string[];
-			projectedModules?: SidecarProjectedModuleDescriptor[];
-			commandPermissions?: Record<string, WasmPermissionTier>;
-			loopbackExemptPorts?: number[];
-			packages?: SidecarPackageDescriptor[];
-			packagesMountAt?: string;
-			bootstrapCommands?: string[];
-			toolShimCommands?: string[];
-		},
-	): Promise<SidecarVmConfiguredResponse> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "configure_vm",
-				mounts: (options.mounts ?? []).map(toWireMountDescriptor),
-				software: (options.software ?? []).map(toWireSoftwareDescriptor),
-				permissions: toWirePermissionsPolicy(options.permissions),
-				module_access_cwd: options.moduleAccessCwd,
-				instructions: options.instructions ?? [],
-				projected_modules: (options.projectedModules ?? []).map(
-					toWireProjectedModuleDescriptor,
-				),
-				command_permissions: options.commandPermissions ?? {},
-				...(options.loopbackExemptPorts
-					? { loopback_exempt_ports: options.loopbackExemptPorts }
-					: {}),
-				packages: (options.packages ?? []).map(toWirePackageDescriptor),
-				...(options.packagesMountAt
-					? { packages_mount_at: options.packagesMountAt }
-					: {}),
-				bootstrap_commands: options.bootstrapCommands ?? [],
-				tool_shim_commands: options.toolShimCommands ?? [],
-			},
-		});
-		if (response.payload.type !== "vm_configured") {
-			throw new Error(
-				`unexpected configure_vm response: ${response.payload.type}`,
-			);
-		}
-		return {
-			appliedMounts: response.payload.applied_mounts,
-			appliedSoftware: response.payload.applied_software,
-			projectedCommands: response.payload.projected_commands.map((command) => ({
-				name: command.name,
-				guestPath: command.guest_path,
-			})),
-			agents: response.payload.agents.map(fromWireProjectedAgent),
-		};
-	}
-
-	/**
-	 * Runtime dynamic `linkSoftware`: project one package into the live
-	 * `/opt/agentos` tree. Returns projected command entrypoints and agents.
-	 */
-	async linkPackage(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		descriptor: SidecarPackageDescriptor,
-	): Promise<SidecarLinkPackageResult> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "link_package",
-				package: toWirePackageDescriptor(descriptor),
-			},
-		});
-		if (response.payload.type !== "package_linked") {
-			throw new Error(
-				`unexpected link_package response: ${response.payload.type}`,
-			);
-		}
-		return {
-			projectedCommands: response.payload.projected_commands.map((command) => ({
-				name: command.name,
-				guestPath: command.guest_path,
-			})),
-			agents: response.payload.agents.map(fromWireProjectedAgent),
-		};
-	}
-
-	async providedCommands(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-	): Promise<SidecarPackageCommands[]> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "provided_commands",
-			},
-		});
-		if (response.payload.type !== "provided_commands_response") {
-			throw new Error(
-				`unexpected provided_commands response: ${response.payload.type}`,
-			);
-		}
-		return response.payload.packages.map((pkg) => ({
-			packageName: pkg.package_name,
-			commands: [...pkg.commands],
-		}));
-	}
-
-	async registerHostCallbacks(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		registration: {
-			name: string;
-			description: string;
-			commandAliases?: string[];
-			registryCommandAliases?: string[];
-			callbacks: Record<string, SidecarRegisteredHostCallbackDefinition>;
-		},
-	): Promise<{
-		registration: string;
-		commandCount: number;
-	}> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "register_host_callbacks",
-				name: registration.name,
-				description: registration.description,
-				command_aliases: registration.commandAliases ?? [],
-				registry_command_aliases: registration.registryCommandAliases ?? [],
-				callbacks: Object.fromEntries(
-					Object.entries(registration.callbacks).map(
-						([callbackName, callback]) => [
-							callbackName,
-							{
-								description: callback.description,
-								input_schema: callback.inputSchema,
-								...(callback.timeoutMs !== undefined
-									? { timeout_ms: callback.timeoutMs }
-									: {}),
-								...(callback.examples && callback.examples.length > 0
-									? {
-											examples: callback.examples.map((example) => ({
-												description: example.description,
-												input: example.input,
-											})),
-										}
-									: {}),
-							},
-						],
-					),
-				),
-			},
-		});
-		if (response.payload.type !== "host_callbacks_registered") {
-			throw new Error(
-				`unexpected register_host_callbacks response: ${response.payload.type}`,
-			);
-		}
-		return {
-			registration: response.payload.registration,
-			commandCount: response.payload.command_count,
-		};
-	}
-
-	async createLayer(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-	): Promise<string> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "create_layer",
-			},
-		});
-		if (response.payload.type !== "layer_created") {
-			throw new Error(
-				`unexpected create_layer response: ${response.payload.type}`,
-			);
-		}
-		return response.payload.layer_id;
-	}
-
-	async sealLayer(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		layerId: string,
-	): Promise<string> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "seal_layer",
-				layer_id: layerId,
-			},
-		});
-		if (response.payload.type !== "layer_sealed") {
-			throw new Error(
-				`unexpected seal_layer response: ${response.payload.type}`,
-			);
-		}
-		return response.payload.layer_id;
-	}
-
-	async importSnapshot(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		entries: RootFilesystemEntry[],
-	): Promise<string> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "import_snapshot",
-				entries,
-			},
-		});
-		if (response.payload.type !== "snapshot_imported") {
-			throw new Error(
-				`unexpected import_snapshot response: ${response.payload.type}`,
-			);
-		}
-		return response.payload.layer_id;
-	}
-
-	async exportSnapshot(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		layerId: string,
-	): Promise<RootFilesystemEntry[]> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "export_snapshot",
-				layer_id: layerId,
-			},
-		});
-		if (response.payload.type !== "snapshot_exported") {
-			throw new Error(
-				`unexpected export_snapshot response: ${response.payload.type}`,
-			);
-		}
-		return response.payload.entries;
-	}
-
-	async createOverlay(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		options: {
-			mode?: "ephemeral" | "read_only";
-			upperLayerId?: string;
-			lowerLayerIds: string[];
-		},
-	): Promise<string> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "create_overlay",
-				mode: options.mode,
-				upper_layer_id: options.upperLayerId,
-				lower_layer_ids: options.lowerLayerIds,
-			},
-		});
-		if (response.payload.type !== "overlay_created") {
-			throw new Error(
-				`unexpected create_overlay response: ${response.payload.type}`,
-			);
-		}
-		return response.payload.layer_id;
-	}
-
-	async bootstrapRootFilesystem(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		entries: RootFilesystemEntry[],
-	): Promise<void> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "bootstrap_root_filesystem",
-				entries,
-			},
-		});
-		if (response.payload.type !== "root_filesystem_bootstrapped") {
-			throw new Error(
-				`unexpected bootstrap_root_filesystem response: ${response.payload.type}`,
-			);
-		}
-	}
-
-	async snapshotRootFilesystem(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-	): Promise<RootFilesystemEntry[]> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "snapshot_root_filesystem",
-			},
-		});
-		if (response.payload.type !== "root_filesystem_snapshot") {
-			throw new Error(
-				`unexpected snapshot_root_filesystem response: ${response.payload.type}`,
-			);
-		}
-		return response.payload.entries;
-	}
-
-	async readFile(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-	): Promise<Uint8Array> {
-		const response = await this.guestFilesystemCall(session, vm, {
-			operation: "read_file",
-			path,
-		});
-		return decodeGuestFilesystemContent(response);
-	}
-
-	async pread(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-		offset: number,
-		length: number,
-	): Promise<Uint8Array> {
-		const response = await this.guestFilesystemCall(session, vm, {
-			operation: "pread",
-			path,
-			offset,
-			len: length,
-		});
-		return decodeGuestFilesystemContent(response);
-	}
-
-	async writeFile(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-		content: string | Uint8Array,
-	): Promise<void> {
-		const encoded = encodeGuestFilesystemContent(content);
-		await this.guestFilesystemCall(session, vm, {
-			operation: "write_file",
-			path,
-			content: encoded.content,
-			encoding: encoded.encoding,
-		});
-	}
-
-	async mkdir(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-		options?: { recursive?: boolean },
-	): Promise<void> {
-		await this.guestFilesystemCall(session, vm, {
-			operation: options?.recursive ? "mkdir" : "create_dir",
-			path,
-			recursive: options?.recursive ?? false,
-		});
-	}
-
-	async readdir(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-	): Promise<string[]> {
-		const response = await this.guestFilesystemCall(session, vm, {
-			operation: "read_dir",
-			path,
-		});
-		return (response.entries ?? []).map((entry) => entry.name);
-	}
-
-	async readdirRecursive(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-		options?: { maxDepth?: number },
-	): Promise<LiveGuestDirEntry[]> {
-		const response = await this.guestFilesystemCall(session, vm, {
-			operation: "read_dir_recursive",
-			path,
-			max_depth: options?.maxDepth,
-		});
-		return response.entries ?? [];
-	}
-
-	async exists(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-	): Promise<boolean> {
-		const response = await this.guestFilesystemCall(session, vm, {
-			operation: "exists",
-			path,
-		});
-		return response.exists ?? false;
-	}
-
-	async stat(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-		options?: { dereference?: boolean },
-	): Promise<GuestFilesystemStat> {
-		const response = await this.guestFilesystemCall(session, vm, {
-			operation: options?.dereference === false ? "lstat" : "stat",
-			path,
-		});
-		if (!response.stat) {
-			throw new Error(`sidecar returned no stat payload for ${path}`);
-		}
-		return response.stat;
-	}
-
-	async lstat(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-	): Promise<GuestFilesystemStat> {
-		return this.stat(session, vm, path, { dereference: false });
-	}
-
-	async rename(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		fromPath: string,
-		toPath: string,
-	): Promise<void> {
-		await this.guestFilesystemCall(session, vm, {
-			operation: "rename",
-			path: fromPath,
-			destination_path: toPath,
-		});
-	}
-
-	async realpath(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-	): Promise<string> {
-		const response = await this.guestFilesystemCall(session, vm, {
-			operation: "realpath",
-			path,
-		});
-		if (response.target === undefined) {
-			throw new Error(`sidecar returned no realpath payload for ${path}`);
-		}
-		return response.target;
-	}
-
-	async removeFile(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-	): Promise<void> {
-		await this.guestFilesystemCall(session, vm, {
-			operation: "remove_file",
-			path,
-		});
-	}
-
-	async removeDir(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-	): Promise<void> {
-		await this.guestFilesystemCall(session, vm, {
-			operation: "remove_dir",
-			path,
-		});
-	}
-
-	async removePath(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-		options?: { recursive?: boolean },
-	): Promise<void> {
-		await this.guestFilesystemCall(session, vm, {
-			operation: "remove",
-			path,
-			recursive: options?.recursive ?? false,
-		});
-	}
-
-	async copyPath(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		fromPath: string,
-		toPath: string,
-		options?: { recursive?: boolean },
-	): Promise<void> {
-		await this.guestFilesystemCall(session, vm, {
-			operation: "copy",
-			path: fromPath,
-			destination_path: toPath,
-			recursive: options?.recursive ?? false,
-		});
-	}
-
-	async movePath(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		fromPath: string,
-		toPath: string,
-	): Promise<void> {
-		await this.guestFilesystemCall(session, vm, {
-			operation: "move",
-			path: fromPath,
-			destination_path: toPath,
-			recursive: true,
-		});
-	}
-
-	async symlink(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		target: string,
-		linkPath: string,
-	): Promise<void> {
-		await this.guestFilesystemCall(session, vm, {
-			operation: "symlink",
-			path: linkPath,
-			target,
-		});
-	}
-
-	async readLink(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-	): Promise<string> {
-		const response = await this.guestFilesystemCall(session, vm, {
-			operation: "read_link",
-			path,
-		});
-		if (response.target === undefined) {
-			throw new Error(`sidecar returned no symlink target for ${path}`);
-		}
-		return response.target;
-	}
-
-	async link(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		fromPath: string,
-		toPath: string,
-	): Promise<void> {
-		await this.guestFilesystemCall(session, vm, {
-			operation: "link",
-			path: fromPath,
-			destination_path: toPath,
-		});
-	}
-
-	async chmod(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-		mode: number,
-	): Promise<void> {
-		await this.guestFilesystemCall(session, vm, {
-			operation: "chmod",
-			path,
-			mode,
-		});
-	}
-
-	async chown(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-		uid: number,
-		gid: number,
-	): Promise<void> {
-		await this.guestFilesystemCall(session, vm, {
-			operation: "chown",
-			path,
-			uid,
-			gid,
-		});
-	}
-
-	async utimes(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-		atimeMs: number,
-		mtimeMs: number,
-	): Promise<void> {
-		await this.guestFilesystemCall(session, vm, {
-			operation: "utimes",
-			path,
-			atime_ms: atimeMs,
-			mtime_ms: mtimeMs,
-		});
-	}
-
-	async truncate(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		path: string,
-		length: number,
-	): Promise<void> {
-		await this.guestFilesystemCall(session, vm, {
-			operation: "truncate",
-			path,
-			len: length,
-		});
-	}
-
-	async disposeVm(session: AuthenticatedSession, vm: CreatedVm): Promise<void> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "dispose_vm",
-				reason: "requested",
-			},
-		});
-		if (response.payload.type !== "vm_disposed") {
-			throw new Error(
-				`unexpected dispose_vm response: ${response.payload.type}`,
-			);
-		}
-	}
-
-	async execute(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		options: {
-			processId: string;
-			command?: string;
-			runtime?: GuestRuntimeKind;
-			entrypoint?: string;
-			args?: string[];
-			env?: Record<string, string>;
-			cwd?: string;
-			wasmPermissionTier?: WasmPermissionTier;
-		},
-	): Promise<{ pid: number | null }> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "execute",
-				process_id: options.processId,
-				args: options.args ?? [],
-				...(options.command ? { command: options.command } : {}),
-				...(options.runtime ? { runtime: options.runtime } : {}),
-				...(options.entrypoint ? { entrypoint: options.entrypoint } : {}),
-				...(options.env ? { env: options.env } : {}),
-				...(options.cwd ? { cwd: options.cwd } : {}),
-				...(options.wasmPermissionTier
-					? { wasm_permission_tier: options.wasmPermissionTier }
-					: {}),
-			},
-		});
-		if (response.payload.type !== "process_started") {
-			throw new Error(`unexpected execute response: ${response.payload.type}`);
-		}
-		return {
-			pid: response.payload.pid ?? null,
-		};
-	}
-
-	async writeStdin(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		processId: string,
-		chunk: string | Uint8Array,
-	): Promise<void> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "write_stdin",
-				process_id: processId,
-				chunk: typeof chunk === "string" ? new TextEncoder().encode(chunk) : chunk,
-			},
-		});
-		if (response.payload.type !== "stdin_written") {
-			throw new Error(
-				`unexpected write_stdin response: ${response.payload.type}`,
-			);
-		}
-	}
-
-	async resizePty(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		processId: string,
-		cols: number,
-		rows: number,
-	): Promise<void> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "resize_pty",
-				process_id: processId,
-				cols,
-				rows,
-			},
-		});
-		if (response.payload.type !== "pty_resized") {
-			throw new Error(`unexpected resize_pty response: ${response.payload.type}`);
-		}
-	}
-
-	async closeStdin(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		processId: string,
-	): Promise<void> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "close_stdin",
-				process_id: processId,
-			},
-		});
-		if (response.payload.type !== "stdin_closed") {
-			throw new Error(
-				`unexpected close_stdin response: ${response.payload.type}`,
-			);
-		}
-	}
-
-	async killProcess(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		processId: string,
-		signal = "SIGTERM",
-	): Promise<void> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "kill_process",
-				process_id: processId,
-				signal,
-			},
-		});
-		if (response.payload.type !== "process_killed") {
-			throw new Error(
-				`unexpected kill_process response: ${response.payload.type}`,
-			);
-		}
-	}
-
-	async findListener(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		request: { host?: string; port?: number; path?: string },
-	): Promise<SidecarSocketStateEntry | null> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "find_listener",
-				...(request.host !== undefined ? { host: request.host } : {}),
-				...(request.port !== undefined ? { port: request.port } : {}),
-				...(request.path !== undefined ? { path: request.path } : {}),
-			},
-		});
-		if (response.payload.type !== "listener_snapshot") {
-			throw new Error(
-				`unexpected find_listener response: ${response.payload.type}`,
-			);
-		}
-		return response.payload.listener
-			? toSidecarSocketStateEntry(response.payload.listener)
-			: null;
-	}
-
-	async getProcessSnapshot(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-	): Promise<SidecarProcessSnapshotEntry[]> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "get_process_snapshot",
-			},
-		});
-		if (response.payload.type !== "process_snapshot") {
-			throw new Error(
-				`unexpected get_process_snapshot response: ${response.payload.type}`,
-			);
-		}
-		return response.payload.processes.map(toSidecarProcessSnapshotEntry);
-	}
-
-	async getResourceSnapshot(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-	): Promise<SidecarResourceSnapshot> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "get_resource_snapshot",
-			},
-		});
-		if (response.payload.type !== "resource_snapshot") {
-			throw new Error(
-				`unexpected get_resource_snapshot response: ${response.payload.type}`,
-			);
-		}
-		return {
-			runningProcesses: response.payload.running_processes,
-			exitedProcesses: response.payload.exited_processes,
-			fdTables: response.payload.fd_tables,
-			openFds: response.payload.open_fds,
-			pipes: response.payload.pipes,
-			pipeBufferedBytes: response.payload.pipe_buffered_bytes,
-			ptys: response.payload.ptys,
-			ptyBufferedInputBytes: response.payload.pty_buffered_input_bytes,
-			ptyBufferedOutputBytes: response.payload.pty_buffered_output_bytes,
-			sockets: response.payload.sockets,
-			socketListeners: response.payload.socket_listeners,
-			socketConnections: response.payload.socket_connections,
-			socketBufferedBytes: response.payload.socket_buffered_bytes,
-			socketDatagramQueueLen: response.payload.socket_datagram_queue_len,
-			queueSnapshots: response.payload.queue_snapshots.map((queue) => ({
-				name: queue.name,
-				category: queue.category,
-				depth: queue.depth,
-				highWater: queue.high_water,
-				capacity: queue.capacity,
-				fillPercent: queue.fill_percent,
-			})),
-		};
-	}
-
-	async findBoundUdp(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		request: { host?: string; port?: number },
-	): Promise<SidecarSocketStateEntry | null> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "find_bound_udp",
-				...(request.host !== undefined ? { host: request.host } : {}),
-				...(request.port !== undefined ? { port: request.port } : {}),
-			},
-		});
-		if (response.payload.type !== "bound_udp_snapshot") {
-			throw new Error(
-				`unexpected find_bound_udp response: ${response.payload.type}`,
-			);
-		}
-		return response.payload.socket
-			? toSidecarSocketStateEntry(response.payload.socket)
-			: null;
-	}
-
-	async vmFetch(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		request: {
-			port: number;
-			method: string;
-			path: string;
-			headersJson: string;
-			body?: string;
-		},
-	): Promise<string> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "vm_fetch",
-				port: request.port,
-				method: request.method,
-				path: request.path,
-				headers_json: request.headersJson,
-				...(request.body !== undefined ? { body: request.body } : {}),
-			},
-		});
-		if (response.payload.type !== "vm_fetch_result") {
-			throw new Error(`unexpected vm_fetch response: ${response.payload.type}`);
-		}
-		return response.payload.response_json;
-	}
-
-	async getSignalState(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		processId: string,
-	): Promise<SidecarSignalState> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "get_signal_state",
-				process_id: processId,
-			},
-		});
-		if (response.payload.type !== "signal_state") {
-			throw new Error(
-				`unexpected get_signal_state response: ${response.payload.type}`,
-			);
-		}
-		return {
-			processId: response.payload.process_id,
-			handlers: new Map(
-				Object.entries(response.payload.handlers).map(
-					([signal, registration]) => [
-						Number(signal),
-						{
-							action: registration.action,
-							mask: [...registration.mask],
-							flags: registration.flags,
-						},
-					],
-				),
-			),
-		};
-	}
-
-	async getZombieTimerCount(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-	): Promise<SidecarZombieTimerCount> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "get_zombie_timer_count",
-			},
-		});
-		if (response.payload.type !== "zombie_timer_count") {
-			throw new Error(
-				`unexpected get_zombie_timer_count response: ${response.payload.type}`,
-			);
-		}
-		return {
-			count: response.payload.count,
-		};
-	}
-
-	async hostFilesystemCall(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		request: { operation: LiveFilesystemOperation; path: string; payloadSizeBytes: number },
-	): Promise<SidecarFilesystemResult> {
-		const response = await this.sendRequest({
-			ownership: { scope: "vm", connection_id: session.connectionId, session_id: session.sessionId, vm_id: vm.vmId },
-			payload: { type: "host_filesystem_call", operation: request.operation, path: request.path, payload_size_bytes: request.payloadSizeBytes },
-		});
-		if (response.payload.type !== "filesystem_result") {
-			throw new Error(`unexpected host_filesystem_call response: ${response.payload.type}`);
-		}
-		return { operation: response.payload.operation, status: response.payload.status, payloadSizeBytes: response.payload.payload_size_bytes };
-	}
-
-	async persistenceLoad(session: AuthenticatedSession, key: string): Promise<SidecarPersistenceState> {
-		const response = await this.sendRequest({
-			ownership: { scope: "session", connection_id: session.connectionId, session_id: session.sessionId },
-			payload: { type: "persistence_load", key },
-		});
-		if (response.payload.type !== "persistence_state") {
-			throw new Error(`unexpected persistence_load response: ${response.payload.type}`);
-		}
-		return { key: response.payload.key, found: response.payload.found, payloadSizeBytes: response.payload.payload_size_bytes };
-	}
-
-	async persistenceFlush(session: AuthenticatedSession, request: { key: string; payloadSizeBytes: number }): Promise<SidecarPersistenceFlushed> {
-		const response = await this.sendRequest({
-			ownership: { scope: "session", connection_id: session.connectionId, session_id: session.sessionId },
-			payload: { type: "persistence_flush", key: request.key, payload_size_bytes: request.payloadSizeBytes },
-		});
-		if (response.payload.type !== "persistence_flushed") {
-			throw new Error(`unexpected persistence_flush response: ${response.payload.type}`);
-		}
-		return { key: response.payload.key, committedBytes: response.payload.committed_bytes };
-	}
-
-	async waitForEvent(
-		matcher: SidecarEventSelector | ((event: EventFrame) => boolean),
-		timeoutMs?: number,
-		options?: {
-			signal?: AbortSignal;
-		},
-	): Promise<EventFrame> {
-		return await this.protocolClient.waitForEvent(matcher, timeoutMs, options);
-	}
-
-	async dispose(): Promise<void> {
-		await this.protocolClient.dispose();
-	}
-
-	private async sendRequest(input: {
-		ownership: OwnershipScope;
-		payload: RequestPayload;
-	}): Promise<ResponseFrame> {
-		return await this.protocolClient.sendRequest(input);
-	}
-
-	private async guestFilesystemCall(
-		session: AuthenticatedSession,
-		vm: CreatedVm,
-		payload: Omit<
-			Extract<RequestPayload, { type: "guest_filesystem_call" }>,
-			"type"
-		>,
-	): Promise<
-		Extract<ResponseFrame["payload"], { type: "guest_filesystem_result" }>
-	> {
-		const response = await this.sendRequest({
-			ownership: {
-				scope: "vm",
-				connection_id: session.connectionId,
-				session_id: session.sessionId,
-				vm_id: vm.vmId,
-			},
-			payload: {
-				type: "guest_filesystem_call",
-				...payload,
-			},
-		});
-		if (response.payload.type !== "guest_filesystem_result") {
-			throw new Error(
-				`unexpected guest_filesystem_call response: ${response.payload.type}`,
-			);
-		}
-		return response.payload;
-	}
-}
-
-function toSidecarSocketStateEntry(
-	entry: LiveSocketStateEntry,
-): SidecarSocketStateEntry {
-	return {
-		processId: entry.process_id,
-		...(entry.host !== undefined ? { host: entry.host } : {}),
-		...(entry.port !== undefined ? { port: entry.port } : {}),
-		...(entry.path !== undefined ? { path: entry.path } : {}),
-	};
-}
-
-function toSidecarProcessSnapshotEntry(
-	entry: LiveProcessSnapshotEntry,
-): SidecarProcessSnapshotEntry {
-	return {
-		processId: entry.process_id,
-		pid: entry.pid,
-		ppid: entry.ppid,
-		pgid: entry.pgid,
-		sid: entry.sid,
-		driver: entry.driver,
-		command: entry.command,
-		args: [...(entry.args ?? [])],
-		cwd: entry.cwd,
-		status: entry.status,
-		exitCode: entry.exit_code ?? null,
-	};
-}
-
-function toWireRootFilesystemDescriptor(
-	descriptor: RootFilesystemDescriptor | undefined,
-): {
-	mode?: "ephemeral" | "read_only";
-	disable_default_base_layer?: boolean;
-	lowers?: WireRootFilesystemLowerDescriptor[];
-	bootstrap_entries?: Array<{
-		path: string;
-		kind: "file" | "directory" | "symlink";
-		mode?: number;
-		uid?: number;
-		gid?: number;
-		content?: string;
-		encoding?: RootFilesystemEntryEncoding;
-		target?: string;
-		executable?: boolean;
-	}>;
-} {
-	if (!descriptor) {
-		return {};
-	}
-
-	return {
-		...(descriptor.mode ? { mode: descriptor.mode } : {}),
-		...(descriptor.disableDefaultBaseLayer !== undefined
-			? { disable_default_base_layer: descriptor.disableDefaultBaseLayer }
-			: {}),
-		...(descriptor.lowers
-			? {
-					lowers: descriptor.lowers.map((lower) =>
-						lower.kind === "bundled_base_filesystem"
-							? { kind: "bundled_base_filesystem" }
-							: {
-									kind: "snapshot",
-									entries: (lower.entries ?? []).map(toWireRootFilesystemEntry),
-								},
-					),
-				}
-			: {}),
-		...(descriptor.bootstrapEntries
-			? {
-					bootstrap_entries: descriptor.bootstrapEntries.map(
-						toWireRootFilesystemEntry,
-					),
-				}
-			: {}),
-	};
-}
-
-function toWireRootFilesystemEntry(entry: RootFilesystemEntry): {
-	path: string;
-	kind: "file" | "directory" | "symlink";
-	mode?: number;
-	uid?: number;
-	gid?: number;
-	content?: string;
-	encoding?: RootFilesystemEntryEncoding;
-	target?: string;
-	executable?: boolean;
-} {
-	return {
-		path: entry.path,
-		kind: entry.kind,
-		...(entry.mode !== undefined ? { mode: entry.mode } : {}),
-		...(entry.uid !== undefined ? { uid: entry.uid } : {}),
-		...(entry.gid !== undefined ? { gid: entry.gid } : {}),
-		...(entry.content !== undefined ? { content: entry.content } : {}),
-		...(entry.encoding !== undefined ? { encoding: entry.encoding } : {}),
-		...(entry.target !== undefined ? { target: entry.target } : {}),
-		...(entry.executable !== undefined ? { executable: entry.executable } : {}),
-	};
-}
-
-function toWireMountDescriptor(descriptor: SidecarMountDescriptor): {
-	guest_path: string;
-	read_only: boolean;
-	plugin: {
-		id: string;
-		config: MountConfigJsonObject;
-	};
-} {
-	return {
-		guest_path: descriptor.guestPath,
-		read_only: descriptor.readOnly,
-		plugin: {
-			id: descriptor.plugin.id,
-			config: descriptor.plugin.config ?? {},
-		},
-	};
-}
-
-function toWireSoftwareDescriptor(descriptor: SidecarSoftwareDescriptor): {
-	package_name: string;
-	root: string;
-} {
-	return {
-		package_name: descriptor.packageName,
-		root: descriptor.root,
-	};
-}
-
-function toWirePermissionsPolicy(
-	policy: SidecarPermissionsPolicy | undefined,
-): WirePermissionsPolicy | undefined {
-	if (!policy) {
-		return undefined;
-	}
-	return {
-		fs: policy.fs,
-		network: policy.network,
-		child_process: policy.childProcess,
-		process: policy.process,
-		env: policy.env,
-		binding: policy.binding,
-	};
-}
-
-function toWireProjectedModuleDescriptor(
-	descriptor: SidecarProjectedModuleDescriptor,
-): {
-	package_name: string;
-	entrypoint: string;
-} {
-	return {
-		package_name: descriptor.packageName,
-		entrypoint: descriptor.entrypoint,
-	};
-}
-
-function toWirePackageDescriptor(descriptor: SidecarPackageDescriptor): {
-	dir?: string;
-	tar?: string;
-} {
-	return {
-		dir: descriptor.dir,
-		tar: descriptor.tar,
-	};
-}
-
-function fromWireProjectedAgent(agent: {
-	id: string;
-	acp_entrypoint: string;
-	adapter_entrypoint: string;
-}): SidecarProjectedAgent {
-	return {
-		id: agent.id,
-		acpEntrypoint: agent.acp_entrypoint,
-		adapterEntrypoint: agent.adapter_entrypoint,
-	};
-}
diff --git a/packages/core/src/state.ts b/packages/core/src/state.ts
deleted file mode 100644
index b0ac58953..000000000
--- a/packages/core/src/state.ts
+++ /dev/null
@@ -1,96 +0,0 @@
-import * as protocol from "./generated-protocol.js";
-import { bigIntToSafeNumber } from "./numbers.js";
-import { fromGeneratedProcessSnapshotStatus } from "./protocol-maps.js";
-
-export interface LiveGuestFilesystemStat {
-	mode: number;
-	size: number;
-	blocks: number;
-	dev: number;
-	rdev: number;
-	is_directory: boolean;
-	is_symbolic_link: boolean;
-	atime_ms: number;
-	mtime_ms: number;
-	ctime_ms: number;
-	birthtime_ms: number;
-	ino: number;
-	nlink: number;
-	uid: number;
-	gid: number;
-}
-
-export interface LiveSocketStateEntry {
-	process_id: string;
-	host?: string;
-	port?: number;
-	path?: string;
-}
-
-export interface LiveProcessSnapshotEntry {
-	process_id: string;
-	pid: number;
-	ppid: number;
-	pgid: number;
-	sid: number;
-	driver: string;
-	command: string;
-	args?: string[];
-	cwd: string;
-	status: "running" | "exited" | "stopped";
-	exit_code?: number;
-}
-
-export function fromGeneratedGuestFilesystemStat(
-	stat: protocol.GuestFilesystemStat,
-): LiveGuestFilesystemStat {
-	return {
-		mode: stat.mode,
-		size: bigIntToSafeNumber(stat.size, "guest filesystem stat size"),
-		blocks: bigIntToSafeNumber(stat.blocks, "guest filesystem stat blocks"),
-		dev: bigIntToSafeNumber(stat.dev, "guest filesystem stat dev"),
-		rdev: bigIntToSafeNumber(stat.rdev, "guest filesystem stat rdev"),
-		is_directory: stat.isDirectory,
-		is_symbolic_link: stat.isSymbolicLink,
-		atime_ms: bigIntToSafeNumber(stat.atimeMs, "guest filesystem stat atime"),
-		mtime_ms: bigIntToSafeNumber(stat.mtimeMs, "guest filesystem stat mtime"),
-		ctime_ms: bigIntToSafeNumber(stat.ctimeMs, "guest filesystem stat ctime"),
-		birthtime_ms: bigIntToSafeNumber(
-			stat.birthtimeMs,
-			"guest filesystem stat birthtime",
-		),
-		ino: bigIntToSafeNumber(stat.ino, "guest filesystem stat ino"),
-		nlink: bigIntToSafeNumber(stat.nlink, "guest filesystem stat nlink"),
-		uid: stat.uid,
-		gid: stat.gid,
-	};
-}
-
-export function fromGeneratedSocketStateEntry(
-	entry: protocol.SocketStateEntry,
-): LiveSocketStateEntry {
-	return {
-		process_id: entry.processId,
-		...(entry.host !== null ? { host: entry.host } : {}),
-		...(entry.port !== null ? { port: entry.port } : {}),
-		...(entry.path !== null ? { path: entry.path } : {}),
-	};
-}
-
-export function fromGeneratedProcessSnapshotEntry(
-	entry: protocol.ProcessSnapshotEntry,
-): LiveProcessSnapshotEntry {
-	return {
-		process_id: entry.processId,
-		pid: entry.pid,
-		ppid: entry.ppid,
-		pgid: entry.pgid,
-		sid: entry.sid,
-		driver: entry.driver,
-		command: entry.command,
-		args: [...entry.args],
-		cwd: entry.cwd,
-		status: fromGeneratedProcessSnapshotStatus(entry.status),
-		...(entry.exitCode !== null ? { exit_code: entry.exitCode } : {}),
-	};
-}
diff --git a/packages/core/src/test-runtime.ts b/packages/core/src/test-runtime.ts
deleted file mode 100644
index 6f7974bb2..000000000
--- a/packages/core/src/test-runtime.ts
+++ /dev/null
@@ -1,3217 +0,0 @@
-import { execFileSync } from "node:child_process";
-import * as fsSync from "node:fs";
-import * as fs from "node:fs/promises";
-import { tmpdir } from "node:os";
-import * as path from "node:path";
-import * as posixPath from "node:path/posix";
-import { fileURLToPath } from "node:url";
-import "./native-client.js";
-import {
-	type AuthenticatedSession,
-	type CreatedVm,
-	type LocalCompatMount,
-	NATIVE_SIDECAR_FRAME_TIMEOUT_MS,
-	NativeSidecarKernelProxy,
-	SidecarProcess,
-	type RootFilesystemEntry,
-	type SidecarRegisteredHostCallbackDefinition,
-	type SidecarRequestFrame,
-	type SidecarResponsePayload,
-	serializeMountConfigForSidecar,
-} from "./kernel-proxy.js";
-import { resolvePublishedSidecarBinary } from "./binary.js";
-import { findCargoBinary, resolveCargoBinary } from "./cargo.js";
-import type { PermissionsPolicy } from "./generated/PermissionsPolicy.js";
-import type { JsRuntimeConfig } from "./generated/JsRuntimeConfig.js";
-
-export const AF_INET = 2;
-export const AF_UNIX = 1;
-export const SOCK_STREAM = 1;
-export const SOCK_DGRAM = 2;
-export const SIGTERM = 15;
-
-const S_IFREG = 0o100000;
-const S_IFDIR = 0o040000;
-const S_IFLNK = 0o120000;
-const MAX_SYMLINK_DEPTH = 40;
-const KERNEL_COMMAND_STUB = "#!/bin/sh\n# kernel command stub\n";
-const NODE_RUNTIME_BOOTSTRAP_COMMANDS = ["node", "npm", "npx"] as const;
-const KERNEL_POSIX_BOOTSTRAP_DIRS = [
-	"/dev",
-	"/proc",
-	"/tmp",
-	"/bin",
-	"/lib",
-	"/sbin",
-	"/boot",
-	"/etc",
-	"/root",
-	"/run",
-	"/srv",
-	"/sys",
-	"/opt",
-	"/mnt",
-	"/media",
-	"/home",
-	"/home/agentos",
-	"/workspace",
-	"/usr",
-	"/usr/bin",
-	"/usr/games",
-	"/usr/include",
-	"/usr/lib",
-	"/usr/libexec",
-	"/usr/man",
-	"/usr/local",
-	"/usr/local/bin",
-	"/usr/sbin",
-	"/usr/share",
-	"/usr/share/man",
-	"/var",
-	"/var/cache",
-	"/var/empty",
-	"/var/lib",
-	"/var/lock",
-	"/var/log",
-	"/var/run",
-	"/var/spool",
-	"/var/tmp",
-] as const;
-const REPO_ROOT = fileURLToPath(new URL("../../..", import.meta.url));
-const SIDECAR_BINARY = path.join(REPO_ROOT, "target/debug/secure-exec-sidecar");
-const SIDECAR_BUILD_INPUTS = [
-	path.join(REPO_ROOT, "Cargo.toml"),
-	path.join(REPO_ROOT, "Cargo.lock"),
-	path.join(REPO_ROOT, "crates/bridge"),
-	path.join(REPO_ROOT, "crates/execution"),
-	path.join(REPO_ROOT, "crates/kernel"),
-	path.join(REPO_ROOT, "crates/sidecar"),
-] as const;
-
-export type KernelBootTimingPhase =
-	| "filesystem_snapshot"
-	| "sidecar_spawn"
-	| "session_open"
-	| "vm_create"
-	| "vm_ready"
-	| "vm_configure";
-
-export interface KernelBootTiming {
-	phase: KernelBootTimingPhase;
-	durationMs: number;
-}
-let ensuredSidecarBinary: string | null = null;
-
-export type StdioChannel = "stdout" | "stderr";
-export type TimingMitigation = "off" | "freeze";
-export type PermissionMode = "allow" | "deny";
-export type PermissionDecision = PermissionMode;
-
-export interface VirtualDirEntry {
-	name: string;
-	isDirectory: boolean;
-	isSymbolicLink?: boolean;
-}
-
-export interface VirtualStat {
-	mode: number;
-	size: number;
-	blocks: number;
-	dev: number;
-	rdev: number;
-	isDirectory: boolean;
-	isSymbolicLink: boolean;
-	atimeMs: number;
-	mtimeMs: number;
-	ctimeMs: number;
-	birthtimeMs: number;
-	ino: number;
-	nlink: number;
-	uid: number;
-	gid: number;
-}
-
-export interface VirtualFileSystem {
-	readFile(path: string): Promise<Uint8Array>;
-	readTextFile(path: string): Promise<string>;
-	readDir(path: string): Promise<string[]>;
-	readDirWithTypes(path: string): Promise<VirtualDirEntry[]>;
-	writeFile(path: string, content: string | Uint8Array): Promise<void>;
-	createDir(path: string): Promise<void>;
-	mkdir(path: string, options?: { recursive?: boolean }): Promise<void>;
-	exists(path: string): Promise<boolean>;
-	stat(path: string): Promise<VirtualStat>;
-	removeFile(path: string): Promise<void>;
-	removeDir(path: string): Promise<void>;
-	rename(oldPath: string, newPath: string): Promise<void>;
-	realpath(path: string): Promise<string>;
-	symlink(target: string, linkPath: string): Promise<void>;
-	readlink(path: string): Promise<string>;
-	lstat(path: string): Promise<VirtualStat>;
-	link(oldPath: string, newPath: string): Promise<void>;
-	chmod(path: string, mode: number): Promise<void>;
-	chown(path: string, uid: number, gid: number): Promise<void>;
-	utimes(path: string, atime: number, mtime: number): Promise<void>;
-	truncate(path: string, length: number): Promise<void>;
-	pread(path: string, offset: number, length: number): Promise<Uint8Array>;
-	pwrite(path: string, offset: number, data: Uint8Array): Promise<void>;
-}
-
-export interface NetworkAccessRequest {
-	url?: string;
-	host?: string;
-	port?: number;
-	protocol?: string;
-}
-
-export interface FsPermissionRule {
-	mode: PermissionMode;
-	operations?: string[];
-	paths?: string[];
-}
-
-export interface PatternPermissionRule {
-	mode: PermissionMode;
-	operations?: string[];
-	patterns?: string[];
-}
-
-export interface RulePermissions<TRule> {
-	default?: PermissionMode;
-	rules: TRule[];
-}
-
-export type FsPermissions = PermissionMode | RulePermissions<FsPermissionRule>;
-export type NetworkPermissions =
-	| PermissionMode
-	| RulePermissions<PatternPermissionRule>;
-export type ChildProcessPermissions =
-	| PermissionMode
-	| RulePermissions<PatternPermissionRule>;
-export type ProcessPermissions =
-	| PermissionMode
-	| RulePermissions<PatternPermissionRule>;
-export type EnvPermissions =
-	| PermissionMode
-	| RulePermissions<PatternPermissionRule>;
-export type BindingPermissions =
-	| PermissionMode
-	| RulePermissions<PatternPermissionRule>;
-
-export interface ProcessInfo {
-	pid: number;
-	ppid: number;
-	pgid: number;
-	sid: number;
-	driver: string;
-	command: string;
-	args: string[];
-	cwd: string;
-	status: "running" | "exited";
-	exitCode: number | null;
-	startTime: number;
-	exitTime: number | null;
-}
-
-export interface ManagedProcess {
-	pid: number;
-	writeStdin(data: Uint8Array | string): void;
-	closeStdin(): void;
-	kill(signal?: number): void;
-	wait(): Promise<number>;
-	readonly exitCode: number | null;
-}
-
-export interface ShellHandle {
-	pid: number;
-	write(data: Uint8Array | string): void;
-	onData: ((data: Uint8Array) => void) | null;
-	resize(cols: number, rows: number): void;
-	kill(signal?: number): void;
-	wait(): Promise<number>;
-}
-
-export interface OpenShellOptions {
-	command?: string;
-	args?: string[];
-	env?: Record<string, string>;
-	cwd?: string;
-	cols?: number;
-	rows?: number;
-	onStderr?: (data: Uint8Array) => void;
-}
-
-export interface ConnectTerminalOptions extends OpenShellOptions {
-	onData?: (data: Uint8Array) => void;
-}
-
-export interface ExecOptions {
-	env?: Record<string, string>;
-	cwd?: string;
-	stdin?: string | Uint8Array;
-	timeout?: number;
-	onStdout?: (data: Uint8Array) => void;
-	onStderr?: (data: Uint8Array) => void;
-	captureStdio?: boolean;
-	filePath?: string;
-	cpuTimeLimitMs?: number;
-	timingMitigation?: TimingMitigation;
-}
-
-export interface ExecResult {
-	exitCode: number;
-	stdout: string;
-	stderr: string;
-}
-
-export interface RunResult<T = unknown> {
-	value?: T;
-	code: number;
-	errorMessage?: string;
-}
-
-export interface KernelSpawnOptions extends ExecOptions {
-	stdio?: "pipe" | "inherit";
-	stdinFd?: number;
-	stdoutFd?: number;
-	stderrFd?: number;
-	streamStdin?: boolean;
-}
-
-export type KernelExecOptions = ExecOptions;
-export type KernelExecResult = ExecResult;
-export type StatInfo = VirtualStat;
-export type DirEntry = VirtualDirEntry;
-export type StdioEvent = { channel: StdioChannel; message: string };
-export type StdioHook = (event: StdioEvent) => void;
-
-export interface Permissions {
-	fs?: FsPermissions;
-	network?: NetworkPermissions;
-	childProcess?: ChildProcessPermissions;
-	process?: ProcessPermissions;
-	env?: EnvPermissions;
-	binding?: BindingPermissions;
-}
-
-/** A worked example shown alongside a registered binding. */
-export interface HostToolExample {
-	/** What this example demonstrates. */
-	description: string;
-	/** Example input matching the binding's input schema. */
-	input: unknown;
-}
-
-/**
- * A host-side binding that guest code can invoke as a shell command. The guest
- * runs the binding by name and the invocation round-trips back to the host JS
- * `handler`, whose return value is passed back to the guest. Bindings never run
- * inside the guest: they execute on the host, so they are the bridge for giving
- * sandboxed guest code controlled, named capabilities (the kind AI agents call
- * as tools).
- */
-export interface BindingDefinition {
-	/** Human-readable description of what the binding does. */
-	description: string;
-	/** JSON Schema describing the binding's input. */
-	inputSchema: object;
-	/** Abort the invocation after this many milliseconds. */
-	timeoutMs?: number;
-	/** Worked examples shown alongside the binding. */
-	examples?: HostToolExample[];
-	/**
-	 * Extra command names the guest can use to invoke this binding, in addition
-	 * to the key it is registered under.
-	 */
-	commandAliases?: string[];
-	/**
-	 * Host handler invoked when guest code runs the binding. Receives the parsed
-	 * input and returns a JSON-serializable result delivered back to the guest.
-	 */
-	handler: (input: unknown) => unknown | Promise<unknown>;
-}
-
-export interface ResourceBudgets {
-	maxOutputBytes?: number;
-	maxBridgeCalls?: number;
-	maxTimers?: number;
-	maxChildProcesses?: number;
-	maxHandles?: number;
-}
-
-export interface ProcessConfig {
-	cwd?: string;
-	env?: Record<string, string>;
-	argv?: string[];
-	stdinIsTTY?: boolean;
-	stdoutIsTTY?: boolean;
-	stderrIsTTY?: boolean;
-}
-
-export interface OSConfig {
-	homedir?: string;
-	tmpdir?: string;
-}
-
-export interface CommandExecutor {
-	spawn(
-		command: string,
-		args: string[],
-		options?: KernelSpawnOptions,
-	): ManagedProcess;
-}
-
-export interface NetworkAdapter {
-	fetch(
-		url: string,
-		options?: {
-			method?: string;
-			headers?: Record<string, string>;
-			body?: unknown;
-		},
-	): Promise<{
-		ok: boolean;
-		status: number;
-		statusText: string;
-		headers: Record<string, string>;
-		body: string;
-		url: string;
-		redirected: boolean;
-	}>;
-	dnsLookup(hostname: string): Promise<{
-		address?: string;
-		family?: number;
-		error?: string;
-		code?: string;
-	}>;
-	httpRequest(
-		url: string,
-		options?: {
-			method?: string;
-			headers?: Record<string, string>;
-			body?: unknown;
-		},
-	): Promise<{
-		status: number;
-		statusText: string;
-		headers: Record<string, string>;
-		body: string;
-		url: string;
-	}>;
-}
-
-export interface SystemDriver {
-	filesystem?: VirtualFileSystem;
-	network?: NetworkAdapter;
-	commandExecutor?: CommandExecutor;
-	permissions?: Permissions;
-	runtime: {
-		process: ProcessConfig;
-		os: OSConfig;
-	};
-}
-
-export interface RuntimeDriverOptions {
-	system: SystemDriver;
-	runtime: {
-		process: ProcessConfig;
-		os: OSConfig;
-	};
-	memoryLimit?: number;
-	cpuTimeLimitMs?: number;
-	timingMitigation?: TimingMitigation;
-	onStdio?: StdioHook;
-	payloadLimits?: {
-		base64TransferBytes?: number;
-		jsonPayloadBytes?: number;
-	};
-	resourceBudgets?: ResourceBudgets;
-}
-
-export interface NodeRuntimeDriver {
-	exec(code: string, options?: ExecOptions): Promise<ExecResult>;
-	run<T = unknown>(code: string, filePath?: string): Promise<RunResult<T>>;
-	dispose(): void;
-	terminate?(): Promise<void>;
-	readonly network?: Pick<
-		NetworkAdapter,
-		"fetch" | "dnsLookup" | "httpRequest"
-	>;
-}
-
-export interface NodeRuntimeDriverFactory {
-	createRuntimeDriver(options: RuntimeDriverOptions): NodeRuntimeDriver;
-}
-
-export interface KernelInterface {
-	vfs: VirtualFileSystem;
-}
-
-export interface Kernel extends KernelInterface {
-	mount(driver: KernelRuntimeDriver): Promise<void>;
-	dispose(): Promise<void>;
-	exec(command: string, options?: KernelExecOptions): Promise<KernelExecResult>;
-	spawn(
-		command: string,
-		args: string[],
-		options?: KernelSpawnOptions,
-	): ManagedProcess;
-	openShell(options?: OpenShellOptions): ShellHandle;
-	connectTerminal(options?: ConnectTerminalOptions): Promise<number>;
-	mountFs(
-		path: string,
-		fs: VirtualFileSystem,
-		options?: { readOnly?: boolean },
-	): void;
-	unmountFs(path: string): void;
-	readFile(path: string): Promise<Uint8Array>;
-	writeFile(path: string, content: string | Uint8Array): Promise<void>;
-	mkdir(path: string): Promise<void>;
-	readdir(path: string): Promise<string[]>;
-	stat(path: string): Promise<VirtualStat>;
-	exists(path: string): Promise<boolean>;
-	removeFile(path: string): Promise<void>;
-	removeDir(path: string): Promise<void>;
-	rename(oldPath: string, newPath: string): Promise<void>;
-	vmFetch(request: {
-		port: number;
-		method: string;
-		path: string;
-		headersJson: string;
-		body?: string;
-	}): Promise<string>;
-	registerHostTools(tools: Record<string, BindingDefinition>): Promise<void>;
-	getResourceSnapshot(): Promise<{
-		runningProcesses: number;
-		exitedProcesses: number;
-		fdTables: number;
-		openFds: number;
-		pipes: number;
-		pipeBufferedBytes: number;
-		ptys: number;
-		ptyBufferedInputBytes: number;
-		ptyBufferedOutputBytes: number;
-		sockets: number;
-		socketListeners: number;
-		socketConnections: number;
-		socketBufferedBytes: number;
-		socketDatagramQueueLen: number;
-		queueSnapshots: Array<{
-			name: string;
-			category: string;
-			depth: number;
-			highWater: number;
-			capacity: number;
-			fillPercent: number;
-		}>;
-	}>;
-	readonly commands: ReadonlyMap<string, string>;
-	readonly processes: ReadonlyMap<number, ProcessInfo>;
-	readonly env: Record<string, string>;
-	readonly cwd: string;
-	readonly socketTable: {
-		hasHostNetworkAdapter(): boolean;
-		findListener(_request: unknown): unknown | null;
-		findListenerAsync(_request: unknown): Promise<unknown | null>;
-		findBoundUdp(_request: unknown): unknown | null;
-	};
-	readonly processTable: {
-		getSignalState(_pid: number): { handlers: Map<number, unknown> };
-	};
-	readonly timerTable: Record<string, never>;
-	readonly zombieTimerCount: number;
-}
-
-export interface BindingTree {
-	[key: string]: BindingFunction | BindingTree;
-}
-
-export type BindingFunction = (...args: unknown[]) => unknown;
-
-export interface ModuleAccessOptions {
-	cwd?: string;
-}
-
-export interface NodeDriverOptions {
-	filesystem?: VirtualFileSystem;
-	networkAdapter?: NetworkAdapter;
-	commandExecutor?: CommandExecutor;
-	permissions?: Permissions;
-	processConfig?: ProcessConfig;
-	osConfig?: OSConfig;
-	moduleAccess?: ModuleAccessOptions;
-}
-
-export interface DefaultNetworkAdapterOptions {
-	loopbackExemptPorts?: number[];
-}
-
-export interface NodeRuntimeOptions {
-	systemDriver?: SystemDriver;
-	runtimeDriverFactory?: NodeRuntimeDriverFactory;
-	permissions?: Partial<Permissions>;
-	memoryLimit?: number;
-	moduleAccessPaths?: string[];
-	bindings?: BindingTree;
-	loopbackExemptPorts?: number[];
-	moduleAccessCwd?: string;
-	packageRoots?: Array<{ hostPath: string; vmPath: string }>;
-}
-
-export type NodeRuntimeDriverFactoryOptions = Record<string, never>;
-export type NodeExecutionDriverOptions = RuntimeDriverOptions;
-
-export interface KernelRuntimeDriver {
-	readonly kind: "node" | "wasmvm";
-	readonly name: string;
-	readonly commands: string[];
-	readonly commandDirs?: string[];
-	init?(kernel: KernelInterface): Promise<void> | void;
-	tryResolve?(command: string): boolean;
-	getGuestCommandPaths?(startIndex: number): ReadonlyMap<string, string>;
-	recordModuleExecution?(command: string): void;
-}
-
-export type DriverProcess = ManagedProcess;
-export type ProcessContext = Record<string, never>;
-
-export class KernelError extends Error {
-	readonly code: string;
-
-	constructor(code: string, message: string) {
-		super(message.startsWith(`${code}:`) ? message : `${code}: ${message}`);
-		this.name = "KernelError";
-		this.code = code;
-	}
-}
-
-function normalizePath(inputPath: string): string {
-	if (!inputPath) return "/";
-	let normalized = inputPath.startsWith("/") ? inputPath : `/${inputPath}`;
-	normalized = normalized.replace(/\/+/g, "/");
-	if (normalized.length > 1 && normalized.endsWith("/")) {
-		normalized = normalized.slice(0, -1);
-	}
-	const parts = normalized.split("/");
-	const resolved: string[] = [];
-	for (const part of parts) {
-		if (part === "" || part === ".") continue;
-		if (part === "..") {
-			resolved.pop();
-			continue;
-		}
-		resolved.push(part);
-	}
-	return resolved.length === 0 ? "/" : `/${resolved.join("/")}`;
-}
-
-function dirnameVirtual(inputPath: string): string {
-	const normalized = normalizePath(inputPath);
-	if (normalized === "/") return "/";
-	const parts = normalized.split("/").filter(Boolean);
-	return parts.length <= 1 ? "/" : `/${parts.slice(0, -1).join("/")}`;
-}
-
-interface FileEntry {
-	type: "file";
-	data: Uint8Array;
-	mode: number;
-	uid: number;
-	gid: number;
-	nlink: number;
-	ino: number;
-	atimeMs: number;
-	mtimeMs: number;
-	ctimeMs: number;
-	birthtimeMs: number;
-}
-
-interface DirectoryEntry {
-	type: "dir";
-	mode: number;
-	uid: number;
-	gid: number;
-	nlink: number;
-	ino: number;
-	atimeMs: number;
-	mtimeMs: number;
-	ctimeMs: number;
-	birthtimeMs: number;
-}
-
-interface SymlinkEntry {
-	type: "symlink";
-	target: string;
-	mode: number;
-	uid: number;
-	gid: number;
-	nlink: number;
-	ino: number;
-	atimeMs: number;
-	mtimeMs: number;
-	ctimeMs: number;
-	birthtimeMs: number;
-}
-
-type MemoryEntry = FileEntry | DirectoryEntry | SymlinkEntry;
-let nextInode = 1;
-
-export class InMemoryFileSystem implements VirtualFileSystem {
-	private readonly entries = new Map<string, MemoryEntry>();
-
-	constructor() {
-		this.entries.set("/", this.newDirectory());
-	}
-
-	async readFile(targetPath: string): Promise<Uint8Array> {
-		const entry = this.resolveEntry(targetPath);
-		if (!entry || entry.type !== "file") {
-			throw errnoError("ENOENT", `open '${targetPath}'`);
-		}
-		entry.atimeMs = Date.now();
-		return entry.data;
-	}
-
-	async readTextFile(targetPath: string): Promise<string> {
-		return new TextDecoder().decode(await this.readFile(targetPath));
-	}
-
-	async readDir(targetPath: string): Promise<string[]> {
-		return (await this.readDirWithTypes(targetPath)).map((entry) => entry.name);
-	}
-
-	async readDirWithTypes(targetPath: string): Promise<VirtualDirEntry[]> {
-		const resolved = this.resolvePath(targetPath);
-		const entry = this.entries.get(resolved);
-		if (!entry || entry.type !== "dir") {
-			throw errnoError("ENOENT", `scandir '${targetPath}'`);
-		}
-		const prefix = resolved === "/" ? "/" : `${resolved}/`;
-		const output = new Map<string, VirtualDirEntry>();
-		for (const [entryPath, candidate] of this.entries) {
-			if (!entryPath.startsWith(prefix)) continue;
-			const rest = entryPath.slice(prefix.length);
-			if (!rest || rest.includes("/")) continue;
-			output.set(rest, {
-				name: rest,
-				isDirectory: candidate.type === "dir",
-				isSymbolicLink: candidate.type === "symlink",
-			});
-		}
-		return [...output.values()];
-	}
-
-	async writeFile(
-		targetPath: string,
-		content: string | Uint8Array,
-	): Promise<void> {
-		const normalized = normalizePath(targetPath);
-		await this.mkdir(dirnameVirtual(normalized), { recursive: true });
-		const data =
-			typeof content === "string" ? new TextEncoder().encode(content) : content;
-		const existing = this.entries.get(normalized);
-		if (existing?.type === "file") {
-			existing.data = data;
-			existing.mtimeMs = Date.now();
-			existing.ctimeMs = Date.now();
-			return;
-		}
-		const now = Date.now();
-		this.entries.set(normalized, {
-			type: "file",
-			data,
-			mode: S_IFREG | 0o644,
-			uid: 0,
-			gid: 0,
-			nlink: 1,
-			ino: nextInode++,
-			atimeMs: now,
-			mtimeMs: now,
-			ctimeMs: now,
-			birthtimeMs: now,
-		});
-	}
-
-	async createDir(targetPath: string): Promise<void> {
-		const normalized = normalizePath(targetPath);
-		if (!this.entries.has(dirnameVirtual(normalized))) {
-			throw errnoError("ENOENT", `mkdir '${targetPath}'`);
-		}
-		if (!this.entries.has(normalized)) {
-			this.entries.set(normalized, this.newDirectory());
-		}
-	}
-
-	async mkdir(
-		targetPath: string,
-		options?: { recursive?: boolean },
-	): Promise<void> {
-		const normalized = normalizePath(targetPath);
-		if (options?.recursive === false) {
-			return this.createDir(normalized);
-		}
-		let current = "";
-		for (const part of normalized.split("/").filter(Boolean)) {
-			current += `/${part}`;
-			if (!this.entries.has(current)) {
-				this.entries.set(current, this.newDirectory());
-			}
-		}
-	}
-
-	async exists(targetPath: string): Promise<boolean> {
-		try {
-			return this.entries.has(this.resolvePath(targetPath));
-		} catch {
-			return false;
-		}
-	}
-
-	async stat(targetPath: string): Promise<VirtualStat> {
-		const entry = this.resolveEntry(targetPath);
-		if (!entry) throw errnoError("ENOENT", `stat '${targetPath}'`);
-		return this.toStat(entry);
-	}
-
-	async removeFile(targetPath: string): Promise<void> {
-		const resolved = this.resolvePath(targetPath);
-		const entry = this.entries.get(resolved);
-		if (!entry || entry.type === "dir") {
-			throw errnoError("ENOENT", `unlink '${targetPath}'`);
-		}
-		this.entries.delete(resolved);
-	}
-
-	async removeDir(targetPath: string): Promise<void> {
-		const resolved = this.resolvePath(targetPath);
-		if (resolved === "/") {
-			throw errnoError("EPERM", "operation not permitted");
-		}
-		const entry = this.entries.get(resolved);
-		if (!entry || entry.type !== "dir") {
-			throw errnoError("ENOENT", `rmdir '${targetPath}'`);
-		}
-		const prefix = `${resolved}/`;
-		for (const key of this.entries.keys()) {
-			if (key.startsWith(prefix)) {
-				throw errnoError("ENOTEMPTY", `directory not empty '${targetPath}'`);
-			}
-		}
-		this.entries.delete(resolved);
-	}
-
-	async rename(oldPath: string, newPath: string): Promise<void> {
-		const oldResolved = this.resolvePath(oldPath);
-		const newResolved = normalizePath(newPath);
-		const entry = this.entries.get(oldResolved);
-		if (!entry) throw errnoError("ENOENT", `rename '${oldPath}'`);
-		if (!this.entries.has(dirnameVirtual(newResolved))) {
-			throw errnoError("ENOENT", `rename '${newPath}'`);
-		}
-		if (entry.type !== "dir") {
-			this.entries.set(newResolved, entry);
-			this.entries.delete(oldResolved);
-			return;
-		}
-		const prefix = `${oldResolved}/`;
-		const moved: Array<[string, MemoryEntry]> = [];
-		for (const candidate of this.entries) {
-			if (candidate[0] === oldResolved || candidate[0].startsWith(prefix)) {
-				moved.push(candidate);
-			}
-		}
-		for (const [candidatePath] of moved) {
-			this.entries.delete(candidatePath);
-		}
-		for (const [candidatePath, candidate] of moved) {
-			const nextPath =
-				candidatePath === oldResolved
-					? newResolved
-					: `${newResolved}${candidatePath.slice(oldResolved.length)}`;
-			this.entries.set(nextPath, candidate);
-		}
-	}
-
-	async realpath(targetPath: string): Promise<string> {
-		return this.resolvePath(targetPath);
-	}
-
-	async symlink(target: string, linkPath: string): Promise<void> {
-		const normalized = normalizePath(linkPath);
-		if (this.entries.has(normalized)) {
-			throw errnoError("EEXIST", `symlink '${linkPath}'`);
-		}
-		const now = Date.now();
-		this.entries.set(normalized, {
-			type: "symlink",
-			target,
-			mode: S_IFLNK | 0o777,
-			uid: 0,
-			gid: 0,
-			nlink: 1,
-			ino: nextInode++,
-			atimeMs: now,
-			mtimeMs: now,
-			ctimeMs: now,
-			birthtimeMs: now,
-		});
-	}
-
-	async readlink(targetPath: string): Promise<string> {
-		const normalized = normalizePath(targetPath);
-		const entry = this.entries.get(normalized);
-		if (!entry || entry.type !== "symlink") {
-			throw errnoError("ENOENT", `readlink '${targetPath}'`);
-		}
-		return entry.target;
-	}
-
-	async lstat(targetPath: string): Promise<VirtualStat> {
-		const entry = this.entries.get(normalizePath(targetPath));
-		if (!entry) throw errnoError("ENOENT", `lstat '${targetPath}'`);
-		return this.toStat(entry);
-	}
-
-	async link(oldPath: string, newPath: string): Promise<void> {
-		const entry = this.resolveEntry(oldPath);
-		if (!entry || entry.type !== "file") {
-			throw errnoError("ENOENT", `link '${oldPath}'`);
-		}
-		const normalized = normalizePath(newPath);
-		if (this.entries.has(normalized)) {
-			throw errnoError("EEXIST", `link '${newPath}'`);
-		}
-		entry.nlink += 1;
-		this.entries.set(normalized, entry);
-	}
-
-	async chmod(targetPath: string, mode: number): Promise<void> {
-		const entry = this.resolveEntry(targetPath);
-		if (!entry) throw errnoError("ENOENT", `chmod '${targetPath}'`);
-		const typeBits = mode & 0o170000;
-		entry.mode =
-			typeBits === 0 ? (entry.mode & 0o170000) | (mode & 0o7777) : mode;
-		entry.ctimeMs = Date.now();
-	}
-
-	async chown(targetPath: string, uid: number, gid: number): Promise<void> {
-		const entry = this.resolveEntry(targetPath);
-		if (!entry) throw errnoError("ENOENT", `chown '${targetPath}'`);
-		entry.uid = uid;
-		entry.gid = gid;
-		entry.ctimeMs = Date.now();
-	}
-
-	async utimes(
-		targetPath: string,
-		atime: number,
-		mtime: number,
-	): Promise<void> {
-		const entry = this.resolveEntry(targetPath);
-		if (!entry) throw errnoError("ENOENT", `utimes '${targetPath}'`);
-		entry.atimeMs = atime;
-		entry.mtimeMs = mtime;
-		entry.ctimeMs = Date.now();
-	}
-
-	async truncate(targetPath: string, length: number): Promise<void> {
-		const entry = this.resolveEntry(targetPath);
-		if (!entry || entry.type !== "file") {
-			throw errnoError("ENOENT", `truncate '${targetPath}'`);
-		}
-		if (length < entry.data.length) {
-			entry.data = entry.data.slice(0, length);
-		} else if (length > entry.data.length) {
-			const expanded = new Uint8Array(length);
-			expanded.set(entry.data);
-			entry.data = expanded;
-		}
-		entry.mtimeMs = Date.now();
-		entry.ctimeMs = Date.now();
-	}
-
-	async pread(
-		targetPath: string,
-		offset: number,
-		length: number,
-	): Promise<Uint8Array> {
-		const entry = this.resolveEntry(targetPath);
-		if (!entry || entry.type !== "file") {
-			throw errnoError("ENOENT", `open '${targetPath}'`);
-		}
-		if (offset >= entry.data.length) return new Uint8Array(0);
-		return entry.data.slice(
-			offset,
-			Math.min(offset + length, entry.data.length),
-		);
-	}
-
-	async pwrite(
-		targetPath: string,
-		offset: number,
-		data: Uint8Array,
-	): Promise<void> {
-		const entry = this.resolveEntry(targetPath);
-		if (!entry || entry.type !== "file") {
-			throw errnoError("ENOENT", `open '${targetPath}'`);
-		}
-		const nextSize = Math.max(entry.data.length, offset + data.length);
-		const updated = new Uint8Array(nextSize);
-		updated.set(entry.data);
-		updated.set(data, offset);
-		entry.data = updated;
-		entry.mtimeMs = Date.now();
-		entry.ctimeMs = Date.now();
-	}
-
-	private resolvePath(targetPath: string, depth = 0): string {
-		if (depth > MAX_SYMLINK_DEPTH) {
-			throw errnoError("ELOOP", `too many symbolic links '${targetPath}'`);
-		}
-		const normalized = normalizePath(targetPath);
-		const entry = this.entries.get(normalized);
-		if (!entry) return normalized;
-		if (entry.type === "symlink") {
-			const target = entry.target.startsWith("/")
-				? entry.target
-				: `${dirnameVirtual(normalized)}/${entry.target}`;
-			return this.resolvePath(target, depth + 1);
-		}
-		return normalized;
-	}
-
-	private resolveEntry(targetPath: string): MemoryEntry | undefined {
-		return this.entries.get(this.resolvePath(targetPath));
-	}
-
-	private newDirectory(): DirectoryEntry {
-		const now = Date.now();
-		return {
-			type: "dir",
-			mode: S_IFDIR | 0o755,
-			uid: 0,
-			gid: 0,
-			nlink: 2,
-			ino: nextInode++,
-			atimeMs: now,
-			mtimeMs: now,
-			ctimeMs: now,
-			birthtimeMs: now,
-		};
-	}
-
-	private toStat(entry: MemoryEntry): VirtualStat {
-		const size = entry.type === "file" ? entry.data.length : 4096;
-		return {
-			mode: entry.mode,
-			size,
-			blocks: size === 0 ? 0 : Math.ceil(size / 512),
-			dev: 1,
-			rdev: 0,
-			isDirectory: entry.type === "dir",
-			isSymbolicLink: entry.type === "symlink",
-			atimeMs: entry.atimeMs,
-			mtimeMs: entry.mtimeMs,
-			ctimeMs: entry.ctimeMs,
-			birthtimeMs: entry.birthtimeMs,
-			ino: entry.ino,
-			nlink: entry.nlink,
-			uid: entry.uid,
-			gid: entry.gid,
-		};
-	}
-}
-
-export function createInMemoryFileSystem(): InMemoryFileSystem {
-	return new InMemoryFileSystem();
-}
-
-export class NodeFileSystem implements VirtualFileSystem {
-	readonly rootPath: string;
-
-	constructor(options: { root: string }) {
-		this.rootPath = fsSync.realpathSync(options.root);
-	}
-
-	private normalizeTarget(targetPath: string): string {
-		const normalized = normalizePath(targetPath).replace(/^\/+/, "");
-		const resolved = path.resolve(this.rootPath, normalized);
-		if (
-			resolved !== this.rootPath &&
-			!resolved.startsWith(`${this.rootPath}${path.sep}`)
-		) {
-			throw errnoError("EACCES", `path escapes root '${targetPath}'`);
-		}
-		return resolved;
-	}
-
-	private toStat(stat: fsSync.Stats): VirtualStat {
-		const posixStat = stat as fsSync.Stats & {
-			blocks?: number;
-			dev?: number;
-			rdev?: number;
-		};
-		return {
-			mode: stat.mode,
-			size: stat.size,
-			blocks:
-				posixStat.blocks ?? (stat.size === 0 ? 0 : Math.ceil(stat.size / 512)),
-			dev: posixStat.dev ?? 1,
-			rdev: posixStat.rdev ?? 0,
-			isDirectory: stat.isDirectory(),
-			isSymbolicLink: stat.isSymbolicLink(),
-			atimeMs: Math.trunc(stat.atimeMs),
-			mtimeMs: Math.trunc(stat.mtimeMs),
-			ctimeMs: Math.trunc(stat.ctimeMs),
-			birthtimeMs: Math.trunc(stat.birthtimeMs),
-			ino: stat.ino,
-			nlink: stat.nlink,
-			uid: stat.uid,
-			gid: stat.gid,
-		};
-	}
-
-	async readFile(targetPath: string): Promise<Uint8Array> {
-		return new Uint8Array(await fs.readFile(this.normalizeTarget(targetPath)));
-	}
-
-	async readTextFile(targetPath: string): Promise<string> {
-		return fs.readFile(this.normalizeTarget(targetPath), "utf8");
-	}
-
-	async readDir(targetPath: string): Promise<string[]> {
-		return fs.readdir(this.normalizeTarget(targetPath));
-	}
-
-	async readDirWithTypes(targetPath: string): Promise<VirtualDirEntry[]> {
-		const entries = await fs.readdir(this.normalizeTarget(targetPath), {
-			withFileTypes: true,
-		});
-		return entries.map((entry) => ({
-			name: entry.name,
-			isDirectory: entry.isDirectory(),
-			isSymbolicLink: entry.isSymbolicLink(),
-		}));
-	}
-
-	async writeFile(
-		targetPath: string,
-		content: string | Uint8Array,
-	): Promise<void> {
-		const resolved = this.normalizeTarget(targetPath);
-		await fs.mkdir(path.dirname(resolved), { recursive: true });
-		await fs.writeFile(resolved, content);
-	}
-
-	async createDir(targetPath: string): Promise<void> {
-		await fs.mkdir(this.normalizeTarget(targetPath));
-	}
-
-	async mkdir(
-		targetPath: string,
-		options?: { recursive?: boolean },
-	): Promise<void> {
-		await fs.mkdir(this.normalizeTarget(targetPath), {
-			recursive: options?.recursive ?? true,
-		});
-	}
-
-	async exists(targetPath: string): Promise<boolean> {
-		try {
-			await fs.access(this.normalizeTarget(targetPath));
-			return true;
-		} catch {
-			return false;
-		}
-	}
-
-	async stat(targetPath: string): Promise<VirtualStat> {
-		return this.toStat(await fs.stat(this.normalizeTarget(targetPath)));
-	}
-
-	async removeFile(targetPath: string): Promise<void> {
-		await fs.unlink(this.normalizeTarget(targetPath));
-	}
-
-	async removeDir(targetPath: string): Promise<void> {
-		await fs.rmdir(this.normalizeTarget(targetPath));
-	}
-
-	async rename(oldPath: string, newPath: string): Promise<void> {
-		const nextPath = this.normalizeTarget(newPath);
-		await fs.mkdir(path.dirname(nextPath), { recursive: true });
-		await fs.rename(this.normalizeTarget(oldPath), nextPath);
-	}
-
-	async realpath(targetPath: string): Promise<string> {
-		const real = await fs.realpath(this.normalizeTarget(targetPath));
-		const relative = path.relative(this.rootPath, real);
-		return relative ? `/${relative.split(path.sep).join("/")}` : "/";
-	}
-
-	async symlink(target: string, linkPath: string): Promise<void> {
-		const resolvedLink = this.normalizeTarget(linkPath);
-		await fs.mkdir(path.dirname(resolvedLink), { recursive: true });
-		await fs.symlink(target, resolvedLink);
-	}
-
-	async readlink(targetPath: string): Promise<string> {
-		return fs.readlink(this.normalizeTarget(targetPath));
-	}
-
-	async lstat(targetPath: string): Promise<VirtualStat> {
-		return this.toStat(await fs.lstat(this.normalizeTarget(targetPath)));
-	}
-
-	async link(oldPath: string, newPath: string): Promise<void> {
-		await fs.link(this.normalizeTarget(oldPath), this.normalizeTarget(newPath));
-	}
-
-	async chmod(targetPath: string, mode: number): Promise<void> {
-		await fs.chmod(this.normalizeTarget(targetPath), mode);
-	}
-
-	async chown(targetPath: string, uid: number, gid: number): Promise<void> {
-		await fs.chown(this.normalizeTarget(targetPath), uid, gid);
-	}
-
-	async utimes(
-		targetPath: string,
-		atime: number,
-		mtime: number,
-	): Promise<void> {
-		await fs.utimes(
-			this.normalizeTarget(targetPath),
-			atime / 1000,
-			mtime / 1000,
-		);
-	}
-
-	async truncate(targetPath: string, length: number): Promise<void> {
-		await fs.truncate(this.normalizeTarget(targetPath), length);
-	}
-
-	async pread(
-		targetPath: string,
-		offset: number,
-		length: number,
-	): Promise<Uint8Array> {
-		const handle = await fs.open(this.normalizeTarget(targetPath), "r");
-		try {
-			const buffer = Buffer.alloc(length);
-			const { bytesRead } = await handle.read(buffer, 0, length, offset);
-			return new Uint8Array(buffer.buffer, buffer.byteOffset, bytesRead);
-		} finally {
-			await handle.close();
-		}
-	}
-
-	async pwrite(
-		targetPath: string,
-		offset: number,
-		data: Uint8Array,
-	): Promise<void> {
-		const handle = await fs.open(this.normalizeTarget(targetPath), "r+");
-		try {
-			await handle.write(data, 0, data.length, offset);
-		} finally {
-			await handle.close();
-		}
-	}
-}
-
-function permissionAllows(mode: PermissionMode | undefined): boolean {
-	return mode !== "deny";
-}
-
-function globMatches(pattern: string, value: string): boolean {
-	const escaped = pattern.replace(/[|\\{}()[\]^$+?.]/g, "\\$&");
-	const expression = escaped.replace(/\*/g, ".*");
-	return new RegExp(`^${expression}$`).test(value);
-}
-
-function envPolicyAllows(
-	policy: EnvPermissions | undefined,
-	name: string,
-): boolean {
-	if (policy === undefined) {
-		return true;
-	}
-	if (typeof policy === "string") {
-		return permissionAllows(policy);
-	}
-	let mode = policy.default ?? "deny";
-	for (const rule of policy.rules) {
-		const operationsMatch =
-			!rule.operations ||
-			rule.operations.length === 0 ||
-			rule.operations.includes("read");
-		const patternsMatch =
-			!rule.patterns ||
-			rule.patterns.length === 0 ||
-			rule.patterns.some((pattern) => globMatches(pattern, name));
-		if (operationsMatch && patternsMatch) {
-			mode = rule.mode;
-		}
-	}
-	return permissionAllows(mode);
-}
-
-export const allowAllFs: FsPermissions = "allow";
-export const allowAllNetwork: NetworkPermissions = "allow";
-export const allowAllChildProcess: ChildProcessPermissions = "allow";
-export const allowAllProcess: ProcessPermissions = "allow";
-export const allowAllEnv: EnvPermissions = "allow";
-export const allowAll: Permissions = {
-	fs: allowAllFs,
-	network: allowAllNetwork,
-	childProcess: allowAllChildProcess,
-	process: allowAllProcess,
-	env: allowAllEnv,
-};
-
-function normalizeFsPermissionScope(
-	scope: FsPermissions | undefined,
-): PermissionsPolicy["fs"] {
-	if (scope === undefined || typeof scope === "string") {
-		return scope;
-	}
-	return {
-		...scope,
-		rules: scope.rules.map((rule) => ({
-			mode: rule.mode,
-			operations: rule.operations ?? [],
-			paths: rule.paths ?? [],
-		})),
-	};
-}
-
-function normalizePatternPermissionScope(
-	scope:
-		| NetworkPermissions
-		| ChildProcessPermissions
-		| ProcessPermissions
-		| EnvPermissions
-		| BindingPermissions
-		| undefined,
-): PermissionsPolicy["network"] {
-	if (scope === undefined || typeof scope === "string") {
-		return scope;
-	}
-	return {
-		...scope,
-		rules: scope.rules.map((rule) => ({
-			mode: rule.mode,
-			operations: rule.operations ?? [],
-			patterns: rule.patterns ?? [],
-		})),
-	};
-}
-
-function normalizePermissionsPolicy(
-	permissions: Permissions | undefined,
-): PermissionsPolicy | undefined {
-	if (!permissions) {
-		return undefined;
-	}
-	return {
-		fs: normalizeFsPermissionScope(permissions.fs),
-		network: normalizePatternPermissionScope(permissions.network),
-		childProcess: normalizePatternPermissionScope(permissions.childProcess),
-		process: normalizePatternPermissionScope(permissions.process),
-		env: normalizePatternPermissionScope(permissions.env),
-		binding: normalizePatternPermissionScope(permissions.binding),
-	};
-}
-
-export function filterEnv(
-	env: Record<string, string> | undefined,
-	permissions?: Permissions,
-): Record<string, string> {
-	const input = env ?? {};
-	if (!permissions?.env) return { ...input };
-	const output: Record<string, string> = {};
-	for (const [name, value] of Object.entries(input)) {
-		if (envPolicyAllows(permissions.env, name)) {
-			output[name] = value;
-		}
-	}
-	return output;
-}
-
-export function createProcessScopedFileSystem(
-	filesystem: VirtualFileSystem,
-): VirtualFileSystem {
-	return filesystem;
-}
-
-export async function exists(
-	filesystem: VirtualFileSystem,
-	targetPath: string,
-): Promise<boolean> {
-	return filesystem.exists(targetPath);
-}
-
-export async function stat(
-	filesystem: VirtualFileSystem,
-	targetPath: string,
-): Promise<VirtualStat> {
-	return filesystem.stat(targetPath);
-}
-
-export async function rename(
-	filesystem: VirtualFileSystem,
-	oldPath: string,
-	newPath: string,
-): Promise<void> {
-	return filesystem.rename(oldPath, newPath);
-}
-
-export async function readDirWithTypes(
-	filesystem: VirtualFileSystem,
-	targetPath: string,
-): Promise<VirtualDirEntry[]> {
-	return filesystem.readDirWithTypes(targetPath);
-}
-
-export async function mkdir(
-	filesystem: VirtualFileSystem,
-	targetPath: string,
-	options?: { recursive?: boolean },
-): Promise<void> {
-	return filesystem.mkdir(targetPath, options);
-}
-
-export function createNodeHostCommandExecutor(): CommandExecutor {
-	return {
-		spawn() {
-			throw new Error(
-				"createNodeHostCommandExecutor is not supported on the native runtime path",
-			);
-		},
-	};
-}
-
-export function createKernelCommandExecutor(kernel: Kernel): CommandExecutor {
-	return {
-		spawn(command, args, options) {
-			return kernel.spawn(command, args, options);
-		},
-	};
-}
-
-export function createKernelVfsAdapter(
-	kernelVfs: VirtualFileSystem,
-): VirtualFileSystem {
-	return kernelVfs;
-}
-
-export function createHostFallbackVfs(
-	base: VirtualFileSystem,
-): VirtualFileSystem {
-	return base;
-}
-
-export function isPrivateIp(host: string): boolean {
-	return (
-		host === "localhost" ||
-		host === "127.0.0.1" ||
-		host.startsWith("10.") ||
-		host.startsWith("192.168.") ||
-		/^172\.(1[6-9]|2\d|3[0-1])\./.test(host)
-	);
-}
-
-export function createNodeHostNetworkAdapter(): NetworkAdapter {
-	return createDefaultNetworkAdapter();
-}
-
-export function createDefaultNetworkAdapter(): NetworkAdapter {
-	return {
-		async fetch(url, options) {
-			const response = await globalThis.fetch(url, {
-				method: options?.method ?? "GET",
-				headers: options?.headers,
-				body: options?.body as RequestInit["body"],
-			});
-			const headers: Record<string, string> = {};
-			response.headers.forEach((value, key) => {
-				headers[key] = value;
-			});
-			return {
-				ok: response.ok,
-				status: response.status,
-				statusText: response.statusText,
-				headers,
-				body: await response.text(),
-				url: response.url,
-				redirected: response.redirected,
-			};
-		},
-		async dnsLookup(hostname) {
-			return { address: hostname, family: hostname.includes(":") ? 6 : 4 };
-		},
-		async httpRequest(url, options) {
-			const response = await globalThis.fetch(url, {
-				method: options?.method ?? "GET",
-				headers: options?.headers,
-				body: options?.body as RequestInit["body"],
-			});
-			const headers: Record<string, string> = {};
-			response.headers.forEach((value, key) => {
-				headers[key] = value;
-			});
-			return {
-				status: response.status,
-				statusText: response.statusText,
-				headers,
-				body: await response.text(),
-				url: response.url,
-			};
-		},
-	};
-}
-
-export function createNodeDriver(
-	options: NodeDriverOptions = {},
-): SystemDriver {
-	return {
-		filesystem: options.filesystem,
-		network: options.networkAdapter,
-		commandExecutor: options.commandExecutor,
-		permissions: options.permissions,
-		runtime: {
-			process: options.processConfig ?? {},
-			os: options.osConfig ?? {},
-		},
-	};
-}
-
-export class NodeExecutionDriver implements NodeRuntimeDriver {
-	readonly network?: Pick<
-		NetworkAdapter,
-		"fetch" | "dnsLookup" | "httpRequest"
-	>;
-
-	constructor(private readonly options: RuntimeDriverOptions) {
-		this.network = options.system.network;
-	}
-
-	async exec(): Promise<ExecResult> {
-		throw new Error(
-			"NodeExecutionDriver is not available after the native runtime migration",
-		);
-	}
-
-	async run<T = unknown>(): Promise<RunResult<T>> {
-		throw new Error(
-			"NodeExecutionDriver is not available after the native runtime migration",
-		);
-	}
-
-	dispose(): void {
-		void this.options;
-	}
-
-	async terminate(): Promise<void> {}
-}
-
-export class NodeRuntime extends NodeExecutionDriver {}
-
-export function createNodeRuntimeDriverFactory(): NodeRuntimeDriverFactory {
-	return {
-		createRuntimeDriver(options) {
-			return new NodeRuntime(options);
-		},
-	};
-}
-
-export class ModuleAccessFileSystem extends NodeFileSystem {}
-
-export const WASMVM_COMMANDS = Object.freeze([
-	"sh",
-	"bash",
-	"grep",
-	"egrep",
-	"fgrep",
-	"rg",
-	"sed",
-	"awk",
-	"jq",
-	"yq",
-	"find",
-	"fd",
-	"cat",
-	"chmod",
-	"column",
-	"cp",
-	"dd",
-	"diff",
-	"du",
-	"expr",
-	"file",
-	"head",
-	"ln",
-	"logname",
-	"ls",
-	"mkdir",
-	"mktemp",
-	"mv",
-	"pathchk",
-	"rev",
-	"rm",
-	"sleep",
-	"sort",
-	"split",
-	"stat",
-	"strings",
-	"tac",
-	"tail",
-	"test",
-	"[",
-	"touch",
-	"tree",
-	"tsort",
-	"whoami",
-	"gzip",
-	"gunzip",
-	"zcat",
-	"tar",
-	"zip",
-	"unzip",
-	"sqlite3",
-	"curl",
-	"wget",
-	"git",
-	"git-remote-http",
-	"git-remote-https",
-	"env",
-	"envsubst",
-	"nice",
-	"nohup",
-	"stdbuf",
-	"timeout",
-	"xargs",
-	"base32",
-	"base64",
-	"basenc",
-	"basename",
-	"comm",
-	"cut",
-	"dircolors",
-	"dirname",
-	"echo",
-	"expand",
-	"factor",
-	"false",
-	"fmt",
-	"fold",
-	"join",
-	"nl",
-	"numfmt",
-	"od",
-	"paste",
-	"printenv",
-	"printf",
-	"ptx",
-	"seq",
-	"shuf",
-	"tr",
-	"true",
-	"unexpand",
-	"uniq",
-	"wc",
-	"yes",
-	"b2sum",
-	"cksum",
-	"md5sum",
-	"sha1sum",
-	"sha224sum",
-	"sha256sum",
-	"sha384sum",
-	"sha512sum",
-	"sum",
-	"link",
-	"pwd",
-	"readlink",
-	"realpath",
-	"rmdir",
-	"shred",
-	"tee",
-	"truncate",
-	"unlink",
-	"arch",
-	"date",
-	"nproc",
-	"uname",
-	"dir",
-	"vdir",
-	"hostname",
-	"hostid",
-	"more",
-	"sync",
-	"tty",
-	"chcon",
-	"runcon",
-	"chgrp",
-	"chown",
-	"chroot",
-	"df",
-	"groups",
-	"id",
-	"install",
-	"kill",
-	"mkfifo",
-	"mknod",
-	"pinky",
-	"who",
-	"users",
-	"uptime",
-	"stty",
-	"codex",
-	"codex-exec",
-]) as readonly string[];
-
-export type PermissionTier = "full" | "read-write" | "read-only" | "isolated";
-
-export const DEFAULT_FIRST_PARTY_TIERS: Readonly<
-	Record<string, PermissionTier>
-> = Object.freeze({
-	sh: "full",
-	bash: "full",
-	env: "full",
-	timeout: "full",
-	xargs: "full",
-	nice: "full",
-	nohup: "full",
-	stdbuf: "full",
-	codex: "full",
-	"codex-exec": "full",
-	git: "full",
-	"git-remote-http": "full",
-	"git-remote-https": "full",
-	grep: "read-only",
-	egrep: "read-only",
-	fgrep: "read-only",
-	rg: "read-only",
-	cat: "read-only",
-	head: "read-only",
-	tail: "read-only",
-	wc: "read-only",
-	sort: "read-only",
-	uniq: "read-only",
-	diff: "read-only",
-	find: "read-only",
-	fd: "read-only",
-	tree: "read-only",
-	file: "read-only",
-	du: "read-only",
-	ls: "read-only",
-	dir: "read-only",
-	vdir: "read-only",
-	strings: "read-only",
-	stat: "read-only",
-	rev: "read-only",
-	column: "read-only",
-	cut: "read-only",
-	tr: "read-only",
-	paste: "read-only",
-	join: "read-only",
-	fold: "read-only",
-	expand: "read-only",
-	nl: "read-only",
-	od: "read-only",
-	comm: "read-only",
-	basename: "read-only",
-	dirname: "read-only",
-	realpath: "read-only",
-	readlink: "read-only",
-	pwd: "read-only",
-	echo: "read-only",
-	envsubst: "read-only",
-	printf: "read-only",
-	true: "read-only",
-	false: "read-only",
-	yes: "read-only",
-	seq: "read-only",
-	test: "read-only",
-	"[": "read-only",
-	expr: "read-only",
-	factor: "read-only",
-	date: "read-only",
-	uname: "read-only",
-	nproc: "read-only",
-	whoami: "read-only",
-	id: "read-only",
-	groups: "read-only",
-	base64: "read-only",
-	md5sum: "read-only",
-	sha256sum: "read-only",
-	tac: "read-only",
-	tsort: "read-only",
-	curl: "full",
-	wget: "full",
-	sqlite3: "read-write",
-});
-
-export interface WasmVmRuntimeOptions {
-	wasmBinaryPath?: string;
-	commandDirs?: string[];
-	permissions?: Record<string, PermissionTier>;
-}
-
-class NativeRuntimeDescriptor implements KernelRuntimeDriver {
-	constructor(
-		readonly kind: "node" | "wasmvm",
-		readonly name: string,
-		readonly commands: string[],
-		readonly commandDirs?: string[],
-	) {}
-}
-
-function normalizeCommandLookup(command: string): string {
-	return path.posix.basename(command);
-}
-
-interface DiscoveredWasmCommandEntry {
-	name: string;
-	hostPath: string;
-	dirOffset: number;
-}
-
-function isWasmBinaryFile(filePath: string): boolean {
-	try {
-		const header = fsSync.readFileSync(filePath, { encoding: null });
-		return (
-			header.length >= 4 &&
-			header[0] === 0x00 &&
-			header[1] === 0x61 &&
-			header[2] === 0x73 &&
-			header[3] === 0x6d
-		);
-	} catch {
-		return false;
-	}
-}
-
-function discoverWasmCommandEntries(
-	commandDirs: string[],
-): DiscoveredWasmCommandEntry[] {
-	const discovered: DiscoveredWasmCommandEntry[] = [];
-	const seen = new Set<string>();
-	commandDirs.forEach((commandDir, dirOffset) => {
-		let entries: string[];
-		try {
-			entries = fsSync
-				.readdirSync(commandDir)
-				.sort((left, right) => left.localeCompare(right));
-		} catch {
-			return;
-		}
-		for (const entry of entries) {
-			if (entry.startsWith(".")) continue;
-			if (seen.has(entry)) continue;
-			const fullPath = path.join(commandDir, entry);
-			if (isWasmBinaryFile(fullPath)) {
-				seen.add(entry);
-				discovered.push({
-					name: entry,
-					hostPath: fullPath,
-					dirOffset,
-				});
-				continue;
-			}
-			try {
-				const realPath = fsSync.realpathSync(fullPath);
-				if (isWasmBinaryFile(realPath)) {
-					seen.add(entry);
-					discovered.push({
-						name: entry,
-						hostPath: fullPath,
-						dirOffset,
-					});
-				}
-			} catch {}
-		}
-	});
-	return discovered;
-}
-
-class WasmVmRuntimeDescriptor implements KernelRuntimeDriver {
-	readonly kind = "wasmvm" as const;
-	readonly name = "wasmvm" as const;
-	readonly commands: string[] = [];
-	readonly commandDirs?: string[];
-	readonly _commandPaths = new Map<string, string>();
-	readonly _moduleCache = new Map<string, true>();
-	private readonly commandDirOffsets = new Map<string, number>();
-
-	constructor(options: WasmVmRuntimeOptions) {
-		this.commandDirs =
-			options.commandDirs && options.commandDirs.length > 0
-				? [...options.commandDirs]
-				: undefined;
-		if (options.commandDirs && options.commandDirs.length > 0) {
-			this.refreshDiscovery();
-			return;
-		}
-		this.commands.push(...WASMVM_COMMANDS);
-		if (options.wasmBinaryPath) {
-			console.warn(
-				"createWasmVmRuntime({ wasmBinaryPath }) is deprecated; use commandDirs instead.",
-			);
-		}
-	}
-
-	init(_kernel: KernelInterface): void {
-		if (this.commandDirs && this.commandDirs.length > 0) {
-			this.refreshDiscovery();
-		}
-	}
-
-	tryResolve(command: string): boolean {
-		if (!this.commandDirs || this.commandDirs.length === 0) {
-			return false;
-		}
-		const normalized = normalizeCommandLookup(command);
-		if (this._commandPaths.has(normalized)) {
-			return true;
-		}
-		this.refreshDiscovery();
-		return this._commandPaths.has(normalized);
-	}
-
-	getGuestCommandPaths(startIndex: number): ReadonlyMap<string, string> {
-		const guestPaths = new Map<string, string>();
-		for (const [name] of this._commandPaths) {
-			const dirOffset = this.commandDirOffsets.get(name);
-			if (dirOffset === undefined) {
-				continue;
-			}
-			guestPaths.set(
-				name,
-				`/__secure_exec/commands/${startIndex + dirOffset}/${name}`,
-			);
-		}
-		return guestPaths;
-	}
-
-	recordModuleExecution(command: string): void {
-		const normalized = normalizeCommandLookup(command);
-		if (
-			this._commandPaths.has(normalized) ||
-			(!this.commandDirs || this.commandDirs.length === 0) &&
-				this.commands.includes(normalized)
-		) {
-			this._moduleCache.set(normalized, true);
-		}
-	}
-
-	private refreshDiscovery(): void {
-		if (!this.commandDirs || this.commandDirs.length === 0) {
-			return;
-		}
-		const discovered = discoverWasmCommandEntries(this.commandDirs);
-		this.commands.length = 0;
-		this._commandPaths.clear();
-		this.commandDirOffsets.clear();
-		for (const entry of discovered) {
-			this.commands.push(entry.name);
-			this._commandPaths.set(entry.name, entry.hostPath);
-			this.commandDirOffsets.set(entry.name, entry.dirOffset);
-		}
-	}
-}
-
-export function createWasmVmRuntime(
-	options: WasmVmRuntimeOptions = {},
-): KernelRuntimeDriver {
-	return new WasmVmRuntimeDescriptor(options);
-}
-
-export function createNodeRuntime(): KernelRuntimeDriver {
-	return new NativeRuntimeDescriptor("node", "node", ["node", "npm", "npx"]);
-}
-
-function latestMtimeMs(targetPath: string): number {
-	try {
-		const stats = fsSync.statSync(targetPath);
-		if (!stats.isDirectory()) {
-			return stats.mtimeMs;
-		}
-		let latest = stats.mtimeMs;
-		for (const entry of fsSync.readdirSync(targetPath)) {
-			latest = Math.max(latest, latestMtimeMs(path.join(targetPath, entry)));
-		}
-		return latest;
-	} catch {
-		return 0;
-	}
-}
-
-function sidecarBinaryNeedsBuild(): boolean {
-	if (!fsSync.existsSync(SIDECAR_BINARY)) {
-		return true;
-	}
-	const binaryMtime = latestMtimeMs(SIDECAR_BINARY);
-	return SIDECAR_BUILD_INPUTS.some(
-		(inputPath) => latestMtimeMs(inputPath) > binaryMtime,
-	);
-}
-
-function ensureNativeSidecarBinary(): string {
-	// A published install has no in-repo Cargo workspace to build from: resolve
-	// the prebuilt platform binary (or the SECURE_EXEC_SIDECAR_BIN override).
-	if (
-		process.env.SECURE_EXEC_SIDECAR_BIN ||
-		!fsSync.existsSync(path.join(REPO_ROOT, "Cargo.toml"))
-	) {
-		return resolvePublishedSidecarBinary();
-	}
-	if (
-		ensuredSidecarBinary &&
-		fsSync.existsSync(ensuredSidecarBinary) &&
-		!sidecarBinaryNeedsBuild()
-	) {
-		return ensuredSidecarBinary;
-	}
-	if (sidecarBinaryNeedsBuild()) {
-		const cargoBinary = findCargoBinary();
-		if (cargoBinary) {
-			execFileSync(cargoBinary, ["build", "-q", "-p", "secure-exec-sidecar"], {
-				cwd: REPO_ROOT,
-				stdio: "pipe",
-			});
-		} else if (!fsSync.existsSync(SIDECAR_BINARY)) {
-			execFileSync(resolveCargoBinary(), ["build", "-q", "-p", "secure-exec-sidecar"], {
-				cwd: REPO_ROOT,
-				stdio: "pipe",
-			});
-		}
-	}
-	ensuredSidecarBinary = SIDECAR_BINARY;
-	return ensuredSidecarBinary;
-}
-
-export function resolveNodeRuntimeSidecarBinary(): string {
-	return ensureNativeSidecarBinary();
-}
-
-function createBootstrapEntries(commandNames: string[]): RootFilesystemEntry[] {
-	const entries: RootFilesystemEntry[] = [
-		{
-			path: "/",
-			kind: "directory",
-			mode: 0o755,
-			uid: 0,
-			gid: 0,
-		},
-		...KERNEL_POSIX_BOOTSTRAP_DIRS.map((entryPath) => ({
-			path: entryPath,
-			kind: "directory" as const,
-			mode: 0o755,
-			uid: 0,
-			gid: 0,
-		})),
-		{
-			path: "/usr/bin/env",
-			kind: "file",
-			mode: 0o644,
-			uid: 0,
-			gid: 0,
-			content: "",
-			encoding: "utf8",
-		},
-	];
-	for (const command of [...new Set(commandNames)].sort((left, right) =>
-		left.localeCompare(right),
-	)) {
-		entries.push({
-			path: `/bin/${command}`,
-			kind: "file",
-			mode: 0o755,
-			uid: 0,
-			gid: 0,
-			content: KERNEL_COMMAND_STUB,
-			encoding: "utf8",
-		});
-	}
-	return entries;
-}
-
-function mergeRootFilesystemEntries(
-	baseEntries: RootFilesystemEntry[],
-	overrideEntries: RootFilesystemEntry[],
-): RootFilesystemEntry[] {
-	const merged = new Map<string, RootFilesystemEntry>();
-	for (const entry of baseEntries) {
-		merged.set(entry.path, entry);
-	}
-	for (const entry of overrideEntries) {
-		merged.set(entry.path, entry);
-	}
-	return [...merged.values()];
-}
-
-async function snapshotFilesystemEntries(
-	filesystem: VirtualFileSystem,
-	targetPath = "/",
-	output: RootFilesystemEntry[] = [],
-	options?: {
-		passthroughDirectories?: ReadonlySet<string>;
-	},
-): Promise<RootFilesystemEntry[]> {
-	const passthroughDirectories = options?.passthroughDirectories;
-	const passthroughDirectory = passthroughDirectories?.has(targetPath) ?? false;
-	const statInfo =
-		targetPath === "/" || passthroughDirectory
-			? await filesystem.stat(targetPath)
-			: await filesystem.lstat(targetPath);
-	if (statInfo.isSymbolicLink) {
-		output.push({
-			path: targetPath,
-			kind: "symlink",
-			mode: statInfo.mode,
-			uid: statInfo.uid,
-			gid: statInfo.gid,
-			target: await filesystem.readlink(targetPath),
-		});
-		return output;
-	}
-	if (statInfo.isDirectory) {
-		output.push({
-			path: targetPath,
-			kind: "directory",
-			mode: statInfo.mode,
-			uid: statInfo.uid,
-			gid: statInfo.gid,
-		});
-		if (passthroughDirectory) {
-			return output;
-		}
-		const children = (await filesystem.readDirWithTypes(targetPath))
-			.map((entry) => entry.name)
-			.filter((name) => name !== "." && name !== "..")
-			.sort((left, right) => left.localeCompare(right));
-		for (const child of children) {
-			const childPath =
-				targetPath === "/"
-					? posixPath.join("/", child)
-					: posixPath.join(targetPath, child);
-			await snapshotFilesystemEntries(filesystem, childPath, output, options);
-		}
-		return output;
-	}
-	output.push({
-		path: targetPath,
-		kind: "file",
-		mode: statInfo.mode,
-		uid: statInfo.uid,
-		gid: statInfo.gid,
-		content: Buffer.from(await filesystem.readFile(targetPath)).toString(
-			"base64",
-		),
-		encoding: "base64",
-	});
-	return output;
-}
-
-async function materializeSnapshotEntriesIntoVm(
-	client: SidecarProcess,
-	session: AuthenticatedSession,
-	vm: CreatedVm,
-	entries: RootFilesystemEntry[],
-): Promise<void> {
-	for (const entry of entries) {
-		if (entry.path === "/") {
-			continue;
-		}
-		if (entry.kind === "directory") {
-			await client.mkdir(session, vm, entry.path, { recursive: true });
-		} else if (entry.kind === "file") {
-			await client.writeFile(
-				session,
-				vm,
-				entry.path,
-				decodeRootFilesystemEntryContent(entry),
-			);
-		} else {
-			await client.symlink(session, vm, entry.target ?? "", entry.path);
-			continue;
-		}
-
-		if (typeof entry.mode === "number") {
-			await client.chmod(session, vm, entry.path, entry.mode);
-		}
-		if (typeof entry.uid === "number" && typeof entry.gid === "number") {
-			await client.chown(session, vm, entry.path, entry.uid, entry.gid);
-		}
-	}
-}
-
-function decodeRootFilesystemEntryContent(entry: RootFilesystemEntry): Uint8Array {
-	const content = entry.content ?? "";
-	if (entry.encoding === "base64") {
-		return new Uint8Array(Buffer.from(content, "base64"));
-	}
-	return new TextEncoder().encode(content);
-}
-
-const NODE_FILESYSTEM_ROOT_PASSTHROUGH_DIRS = ["node_modules"] as const;
-
-function planNodeFilesystemPassthroughMounts(
-	filesystem: VirtualFileSystem,
-	existingMounts: readonly LocalCompatMount[],
-): {
-	mounts: LocalCompatMount[];
-	passthroughDirectories: ReadonlySet<string>;
-} {
-	if (!(filesystem instanceof NodeFileSystem)) {
-		return {
-			mounts: [],
-			passthroughDirectories: new Set<string>(),
-		};
-	}
-
-	const passthroughDirectories = new Set<string>();
-	const existingGuestPaths = new Set(existingMounts.map((mount) => mount.path));
-	const mounts: LocalCompatMount[] = [];
-	for (const directoryName of NODE_FILESYSTEM_ROOT_PASSTHROUGH_DIRS) {
-		const guestPath = normalizePath(`/${directoryName}`);
-		const hostPath = path.join(filesystem.rootPath, directoryName);
-		let statInfo: fsSync.Stats;
-		try {
-			statInfo = fsSync.statSync(hostPath);
-		} catch {
-			continue;
-		}
-		if (!statInfo.isDirectory()) {
-			continue;
-		}
-		passthroughDirectories.add(guestPath);
-		if (existingGuestPaths.has(guestPath)) {
-			continue;
-		}
-		mounts.push({
-			path: guestPath,
-			fs: new NodeFileSystem({ root: hostPath }),
-			readOnly: true,
-		});
-	}
-
-	return {
-		mounts,
-		passthroughDirectories,
-	};
-}
-
-function collectGuestCommandPaths(
-	commandDirs: string[],
-	startIndex = 0,
-): Map<string, string> {
-	const guestPaths = new Map<string, string>();
-	for (const entry of discoverWasmCommandEntries(commandDirs)) {
-		if (!guestPaths.has(entry.name)) {
-			guestPaths.set(
-				entry.name,
-				`/__secure_exec/commands/${startIndex + entry.dirOffset}/${entry.name}`,
-			);
-		}
-	}
-	return guestPaths;
-}
-
-async function ensureCommandStubs(
-	proxy: NativeSidecarKernelProxy,
-	commands: Iterable<string>,
-): Promise<void> {
-	const rootView = proxy.createRootView();
-	for (const command of commands) {
-		const stubPath = `/bin/${command}`;
-		await rootView.writeFile(stubPath, KERNEL_COMMAND_STUB);
-		await rootView.chmod(stubPath, 0o755);
-	}
-}
-
-class DeferredFileSystem implements VirtualFileSystem {
-	constructor(private readonly getFilesystem: () => VirtualFileSystem | null) {}
-
-	private filesystem(): VirtualFileSystem {
-		const filesystem = this.getFilesystem();
-		if (!filesystem) {
-			throw new Error("kernel filesystem is not ready; mount a runtime first");
-		}
-		return filesystem;
-	}
-
-	readFile(path: string): Promise<Uint8Array> {
-		return this.filesystem().readFile(path);
-	}
-	readTextFile(path: string): Promise<string> {
-		return this.filesystem().readTextFile(path);
-	}
-	readDir(path: string): Promise<string[]> {
-		return this.filesystem().readDir(path);
-	}
-	readDirWithTypes(path: string): Promise<VirtualDirEntry[]> {
-		return this.filesystem().readDirWithTypes(path);
-	}
-	writeFile(path: string, content: string | Uint8Array): Promise<void> {
-		return this.filesystem().writeFile(path, content);
-	}
-	createDir(path: string): Promise<void> {
-		return this.filesystem().createDir(path);
-	}
-	mkdir(path: string, options?: { recursive?: boolean }): Promise<void> {
-		return this.filesystem().mkdir(path, options);
-	}
-	exists(path: string): Promise<boolean> {
-		return this.filesystem().exists(path);
-	}
-	stat(path: string): Promise<VirtualStat> {
-		return this.filesystem().stat(path);
-	}
-	removeFile(path: string): Promise<void> {
-		return this.filesystem().removeFile(path);
-	}
-	removeDir(path: string): Promise<void> {
-		return this.filesystem().removeDir(path);
-	}
-	rename(oldPath: string, newPath: string): Promise<void> {
-		return this.filesystem().rename(oldPath, newPath);
-	}
-	realpath(path: string): Promise<string> {
-		return this.filesystem().realpath(path);
-	}
-	symlink(target: string, linkPath: string): Promise<void> {
-		return this.filesystem().symlink(target, linkPath);
-	}
-	readlink(path: string): Promise<string> {
-		return this.filesystem().readlink(path);
-	}
-	lstat(path: string): Promise<VirtualStat> {
-		return this.filesystem().lstat(path);
-	}
-	link(oldPath: string, newPath: string): Promise<void> {
-		return this.filesystem().link(oldPath, newPath);
-	}
-	chmod(path: string, mode: number): Promise<void> {
-		return this.filesystem().chmod(path, mode);
-	}
-	chown(path: string, uid: number, gid: number): Promise<void> {
-		return this.filesystem().chown(path, uid, gid);
-	}
-	utimes(path: string, atime: number, mtime: number): Promise<void> {
-		return this.filesystem().utimes(path, atime, mtime);
-	}
-	truncate(path: string, length: number): Promise<void> {
-		return this.filesystem().truncate(path, length);
-	}
-	pread(path: string, offset: number, length: number): Promise<Uint8Array> {
-		return this.filesystem().pread(path, offset, length);
-	}
-	pwrite(path: string, offset: number, data: Uint8Array): Promise<void> {
-		return this.filesystem().pwrite(path, offset, data);
-	}
-}
-
-const VIRTUAL_FILESYSTEM_METHOD_NAMES = [
-	"readFile",
-	"readTextFile",
-	"readDir",
-	"readDirWithTypes",
-	"writeFile",
-	"createDir",
-	"mkdir",
-	"exists",
-	"stat",
-	"removeFile",
-	"removeDir",
-	"rename",
-	"realpath",
-	"symlink",
-	"readlink",
-	"lstat",
-	"link",
-	"chmod",
-	"chown",
-	"utimes",
-	"truncate",
-	"pread",
-	"pwrite",
-] as const;
-
-type VirtualFileSystemMethodName =
-	(typeof VIRTUAL_FILESYSTEM_METHOD_NAMES)[number];
-
-type BoundVirtualFileSystemMethods = Partial<
-	Record<VirtualFileSystemMethodName, (...args: unknown[]) => unknown>
->;
-
-interface LiveFilesystemBinding {
-	syncFromLive(paths: readonly string[]): Promise<void>;
-	restore(): void;
-}
-
-const LIVE_FILESYSTEM_SYNC_CHUNK_SIZE = 512 * 1024;
-
-function topLevelSyncRoot(targetPath: string): string {
-	const normalized = normalizePath(targetPath);
-	const [first] = normalized.split("/").filter(Boolean);
-	return first ? `/${first}` : "/";
-}
-
-function collectLiveFilesystemSyncRoots(
-	entries: readonly RootFilesystemEntry[],
-): string[] {
-	const roots = new Set<string>();
-	for (const entry of entries) {
-		if (entry.path === "/") {
-			continue;
-		}
-		roots.add(topLevelSyncRoot(entry.path));
-	}
-	return [...roots].sort((left, right) => left.localeCompare(right));
-}
-
-async function callBoundFilesystemMethod<T>(
-	methods: BoundVirtualFileSystemMethods,
-	method: VirtualFileSystemMethodName,
-	...args: unknown[]
-): Promise<T> {
-	const delegate = methods[method];
-	if (!delegate) {
-		throw new Error(`filesystem method ${method} is unavailable`);
-	}
-	return (await delegate(...args)) as T;
-}
-
-async function ensureBoundParentDirectory(
-	methods: BoundVirtualFileSystemMethods,
-	targetPath: string,
-): Promise<void> {
-	const parent = dirnameVirtual(targetPath);
-	if (parent === targetPath) {
-		return;
-	}
-	await callBoundFilesystemMethod(methods, "mkdir", parent, { recursive: true });
-}
-
-async function syncLiveFilesystemToBoundMethods(
-	live: VirtualFileSystem,
-	methods: BoundVirtualFileSystemMethods,
-	paths: readonly string[],
-): Promise<void> {
-	for (const targetPath of [...new Set(paths.map(normalizePath))].sort((left, right) =>
-		left.localeCompare(right),
-	)) {
-		if (!(await live.exists(targetPath).catch(() => false))) {
-			continue;
-		}
-		await syncLiveFilesystemPathToBoundMethods(live, methods, targetPath);
-	}
-}
-
-async function syncLiveFilesystemPathToBoundMethods(
-	live: VirtualFileSystem,
-	methods: BoundVirtualFileSystemMethods,
-	targetPath: string,
-): Promise<void> {
-	const stat = targetPath === "/" ? await live.stat(targetPath) : await live.lstat(targetPath);
-	if (stat.isSymbolicLink) {
-		await ensureBoundParentDirectory(methods, targetPath);
-		await callBoundFilesystemMethod(methods, "removeFile", targetPath).catch(
-			() => {},
-		);
-		await callBoundFilesystemMethod(
-			methods,
-			"symlink",
-			await live.readlink(targetPath),
-			targetPath,
-		);
-		return;
-	}
-	if (stat.isDirectory) {
-		await callBoundFilesystemMethod(methods, "mkdir", targetPath, {
-			recursive: true,
-		});
-		const children = (await live.readDirWithTypes(targetPath))
-			.map((entry) => entry.name)
-			.filter((name) => name !== "." && name !== "..")
-			.sort((left, right) => left.localeCompare(right));
-		for (const child of children) {
-			await syncLiveFilesystemPathToBoundMethods(
-				live,
-				methods,
-				targetPath === "/" ? posixPath.join("/", child) : posixPath.join(targetPath, child),
-			);
-		}
-		return;
-	}
-
-	await ensureBoundParentDirectory(methods, targetPath);
-	await callBoundFilesystemMethod(methods, "writeFile", targetPath, new Uint8Array(0));
-	for (let offset = 0; offset < stat.size; offset += LIVE_FILESYSTEM_SYNC_CHUNK_SIZE) {
-		const chunk = await live.pread(
-			targetPath,
-			offset,
-			Math.min(LIVE_FILESYSTEM_SYNC_CHUNK_SIZE, stat.size - offset),
-		);
-		if (chunk.length === 0) {
-			break;
-		}
-		await callBoundFilesystemMethod(methods, "pwrite", targetPath, offset, chunk);
-	}
-}
-
-function bindLiveFilesystem(
-	target: VirtualFileSystem,
-	getFilesystem: () => VirtualFileSystem | null,
-): LiveFilesystemBinding {
-	const fallback: BoundVirtualFileSystemMethods = {};
-	for (const method of VIRTUAL_FILESYSTEM_METHOD_NAMES) {
-		const candidate = (target as unknown as Record<string, unknown>)[method];
-		if (typeof candidate === "function") {
-			fallback[method] = candidate.bind(target);
-		}
-	}
-
-	for (const method of VIRTUAL_FILESYSTEM_METHOD_NAMES) {
-		(target as unknown as Record<string, unknown>)[method] = (
-			...args: unknown[]
-		) => {
-			const filesystem = getFilesystem();
-			const delegate = filesystem
-				? (filesystem[method] as (...args: unknown[]) => unknown).bind(
-						filesystem,
-					)
-				: fallback[method];
-			if (!delegate) {
-				throw new Error(
-					`kernel filesystem is not ready; mount a runtime before calling ${method}()`,
-				);
-			}
-			return delegate(...args);
-		};
-	}
-
-	return {
-		async syncFromLive(paths: readonly string[]): Promise<void> {
-			const filesystem = getFilesystem();
-			if (!filesystem) {
-				return;
-			}
-			await syncLiveFilesystemToBoundMethods(filesystem, fallback, paths);
-		},
-		restore(): void {
-			for (const [method, delegate] of Object.entries(fallback)) {
-				(target as unknown as Record<string, unknown>)[method] = delegate;
-			}
-		},
-	};
-}
-
-class NativeKernel implements Kernel {
-	readonly env: Record<string, string>;
-	readonly cwd: string;
-	readonly commands = new Map<string, string>();
-	readonly processes = new Map<number, ProcessInfo>();
-	readonly socketTable;
-	readonly processTable;
-	readonly timerTable = {};
-	readonly vfs: VirtualFileSystem;
-
-	private client: SidecarProcess | null = null;
-	private session: AuthenticatedSession | null = null;
-	private vm: CreatedVm | null = null;
-	private proxy: NativeSidecarKernelProxy | null = null;
-	private rootFilesystem: VirtualFileSystem | null = null;
-	private readyPromise: Promise<void> | null = null;
-	private readonly liveFilesystemBinding: LiveFilesystemBinding;
-	private liveFilesystemSyncRoots: string[] = [];
-	private readonly pendingLocalMounts: LocalCompatMount[] = [];
-	private mountedCommandDirs: string[] = [];
-	private readonly mountedRuntimeDrivers: KernelRuntimeDriver[] = [];
-	private readonly runtimeDriverCommandDirStarts = new Map<
-		KernelRuntimeDriver,
-		number
-	>();
-	private readonly loopbackExemptPorts: number[];
-	// Bindings registered with the VM, keyed by the callback key the sidecar
-	// sends back on a host_callback request (the binding name). Installed lazily
-	// on the first registerHostTools call.
-	private readonly hostToolHandlers = new Map<
-		string,
-		(input: unknown) => unknown | Promise<unknown>
-	>();
-	private hostToolRequestHandlerInstalled = false;
-
-	constructor(
-		private readonly options: {
-			filesystem: VirtualFileSystem;
-			permissions?: Permissions;
-			env?: Record<string, string>;
-			cwd?: string;
-			sidecar?: SidecarProcess;
-			onBootTiming?: (timing: KernelBootTiming) => void;
-			hostNetworkAdapter?: unknown;
-			loopbackExemptPorts?: number[];
-			jsRuntime?: Partial<JsRuntimeConfig>;
-			mounts?: Array<{
-				path: string;
-				fs: VirtualFileSystem;
-				readOnly?: boolean;
-			}>;
-			syncFilesystemOnDispose?: boolean;
-		},
-	) {
-		this.env = { ...(options.env ?? {}) };
-		this.cwd = options.cwd ?? "/workspace";
-		this.socketTable = {
-			hasHostNetworkAdapter: () => Boolean(options.hostNetworkAdapter),
-			findListener: (request: {
-				host?: string;
-				port?: number;
-				path?: string;
-			}) => this.proxy?.findListener(request) ?? null,
-			findListenerAsync: async (request: {
-				host?: string;
-				port?: number;
-				path?: string;
-			}) => {
-				if (this.proxy?.findListenerAsync) {
-					return this.proxy.findListenerAsync(request);
-				}
-				return this.proxy?.findListener(request) ?? null;
-			},
-			findBoundUdp: (request: { host?: string; port?: number }) =>
-				this.proxy?.findBoundUdp(request) ?? null,
-		};
-		this.processTable = {
-			getSignalState: (pid: number) =>
-				this.proxy?.getSignalState(pid) ?? {
-					handlers: new Map<number, unknown>(),
-				},
-		};
-		this.loopbackExemptPorts = [...(options.loopbackExemptPorts ?? [])];
-		for (const mount of options.mounts ?? []) {
-			this.pendingLocalMounts.push({
-				path: normalizePath(mount.path),
-				fs: mount.fs,
-				readOnly: mount.readOnly ?? false,
-			});
-		}
-		this.vfs = new DeferredFileSystem(() => this.rootFilesystem);
-		this.liveFilesystemBinding = bindLiveFilesystem(
-			this.options.filesystem,
-			() => this.rootFilesystem,
-		);
-	}
-
-	get zombieTimerCount(): number {
-		return this.proxy?.zombieTimerCount ?? 0;
-	}
-
-	async getResourceSnapshot() {
-		if (!this.proxy) {
-			await this.ensureReady();
-		}
-		if (!this.proxy) {
-			throw new Error("kernel is not ready");
-		}
-		return this.proxy.getResourceSnapshot();
-	}
-
-	async mount(driver: KernelRuntimeDriver): Promise<void> {
-		await this.ensureReady();
-		if (!this.proxy || !this.client || !this.session || !this.vm) {
-			throw new Error("kernel is not ready");
-		}
-		await driver.init?.(this);
-		if (driver.kind === "node") {
-			for (const command of driver.commands) {
-				this.commands.set(command, "node");
-			}
-			this.mountedRuntimeDrivers.push(driver);
-			await ensureCommandStubs(this.proxy, driver.commands);
-			return;
-		}
-
-		const commandDirs = driver.commandDirs ?? [];
-		if (commandDirs.length === 0) {
-			for (const command of driver.commands) {
-				this.commands.set(command, "wasmvm");
-			}
-			this.mountedRuntimeDrivers.push(driver);
-			await ensureCommandStubs(this.proxy, driver.commands);
-			return;
-		}
-
-		const startIndex = this.mountedCommandDirs.length;
-		const newGuestPaths =
-			driver.getGuestCommandPaths?.(startIndex) ??
-			collectGuestCommandPaths(commandDirs, startIndex);
-		const allCommandDirs = [...this.mountedCommandDirs, ...commandDirs];
-		const sidecarMounts = allCommandDirs.map((commandDir, index) =>
-			serializeMountConfigForSidecar({
-				path: `/__secure_exec/commands/${index}`,
-				readOnly: true,
-				plugin: {
-					id: "host_dir",
-					config: {
-						hostPath: commandDir,
-						readOnly: true,
-					},
-				},
-			}),
-		);
-		const localMounts = this.pendingLocalMounts.map((mount) =>
-			mount.fs instanceof NodeFileSystem
-				? serializeMountConfigForSidecar({
-						path: mount.path,
-						readOnly: mount.readOnly,
-						plugin: {
-							id: "host_dir",
-							config: {
-								hostPath: mount.fs.rootPath,
-								readOnly: mount.readOnly,
-							},
-						},
-					})
-				: serializeMountConfigForSidecar({
-						path: mount.path,
-						driver: mount.fs,
-						readOnly: mount.readOnly,
-					}),
-		);
-		await this.client.configureVm(this.session, this.vm, {
-			mounts: [...localMounts, ...sidecarMounts],
-			loopbackExemptPorts: this.loopbackExemptPorts,
-		});
-		this.proxy.registerCommandGuestPaths(newGuestPaths);
-		this.mountedCommandDirs.push(...commandDirs);
-		this.mountedRuntimeDrivers.push(driver);
-		this.runtimeDriverCommandDirStarts.set(driver, startIndex);
-		for (const command of newGuestPaths.keys()) {
-			this.commands.set(command, "wasmvm");
-		}
-		await ensureCommandStubs(this.proxy, newGuestPaths.keys());
-	}
-
-	async dispose(): Promise<void> {
-		await this.readyPromise?.catch(() => {});
-		let syncError: unknown;
-		if (
-			this.options.syncFilesystemOnDispose !== false &&
-			this.rootFilesystem &&
-			!(this.options.filesystem instanceof NodeFileSystem)
-		) {
-			try {
-				await this.liveFilesystemBinding.syncFromLive(
-					this.liveFilesystemSyncRoots,
-				);
-			} catch (error) {
-				syncError = error;
-			}
-		}
-		try {
-			await this.proxy?.dispose().catch(() => {});
-		} finally {
-			this.proxy = null;
-			this.rootFilesystem = null;
-			this.client = null;
-			this.session = null;
-			this.vm = null;
-			this.liveFilesystemBinding.restore();
-		}
-		if (syncError) {
-			throw syncError;
-		}
-	}
-
-	async exec(
-		command: string,
-		options?: KernelExecOptions,
-	): Promise<KernelExecResult> {
-		await this.ensureReady();
-		if (!this.proxy) {
-			throw new Error("kernel is not ready");
-		}
-		return this.proxy.exec(command, options);
-	}
-
-	spawn(
-		command: string,
-		args: string[],
-		options?: KernelSpawnOptions,
-	): ManagedProcess {
-		if (!this.proxy) {
-			throw new Error("kernel is not ready; await kernel.mount(...) first");
-		}
-		const normalized = normalizeCommandLookup(command);
-		const knownCommand =
-			this.commands.has(command) || this.commands.has(normalized);
-		if (!knownCommand && !this.tryResolveMountedCommand(command)) {
-			throw new Error(`ENOENT: command not found: ${command}`);
-		}
-		const proc = this.proxy.spawn(command, args, options);
-		const syncProcessSnapshot = () => {
-			const snapshot = this.proxy?.processes.get(proc.pid);
-			if (!snapshot) {
-				return;
-			}
-			this.processes.set(proc.pid, {
-				...snapshot,
-				args: [...snapshot.args],
-			});
-		};
-		syncProcessSnapshot();
-		return {
-			pid: proc.pid,
-			writeStdin(data) {
-				proc.writeStdin(data);
-			},
-			closeStdin() {
-				proc.closeStdin();
-			},
-			kill(signal) {
-				proc.kill(signal);
-				syncProcessSnapshot();
-			},
-			async wait() {
-				const exitCode = await proc.wait();
-				syncProcessSnapshot();
-				return exitCode;
-			},
-			get exitCode() {
-				return proc.exitCode;
-			},
-		};
-	}
-
-	openShell(options?: OpenShellOptions): ShellHandle {
-		if (!this.proxy) {
-			throw new Error("kernel is not ready; await kernel.mount(...) first");
-		}
-		return this.proxy.openShell(options);
-	}
-
-	async connectTerminal(options?: ConnectTerminalOptions): Promise<number> {
-		await this.ensureReady();
-		if (!this.proxy) {
-			throw new Error("kernel is not ready");
-		}
-		return this.proxy.connectTerminal(options);
-	}
-
-	mountFs(
-		mountPath: string,
-		filesystem: VirtualFileSystem,
-		options?: { readOnly?: boolean },
-	): void {
-		if (!this.proxy) {
-			this.pendingLocalMounts.push({
-				path: normalizePath(mountPath),
-				fs: filesystem,
-				readOnly: options?.readOnly ?? false,
-			});
-			return;
-		}
-		this.proxy.mountFs(mountPath, filesystem, options);
-	}
-
-	unmountFs(mountPath: string): void {
-		this.proxy?.unmountFs(mountPath);
-	}
-
-	async readFile(targetPath: string): Promise<Uint8Array> {
-		await this.ensureReady();
-		return this.proxy!.readFile(targetPath);
-	}
-
-	async vmFetch(request: {
-		port: number;
-		method: string;
-		path: string;
-		headersJson: string;
-		body?: string;
-	}): Promise<string> {
-		await this.ensureReady();
-		return this.proxy!.vmFetch(request);
-	}
-
-	async registerHostTools(
-		tools: Record<string, BindingDefinition>,
-	): Promise<void> {
-		await this.ensureReady();
-		if (!this.client || !this.session || !this.vm) {
-			throw new Error("kernel is not ready");
-		}
-
-		// Install the dispatcher once. It routes every host_callback request the
-		// sidecar emits to the matching registered handler and replies with a
-		// host_callback_result frame.
-		if (!this.hostToolRequestHandlerInstalled) {
-			this.client.setSidecarRequestHandler((request: SidecarRequestFrame) =>
-				this.dispatchHostToolRequest(request),
-			);
-			this.hostToolRequestHandlerInstalled = true;
-		}
-
-		for (const [name, binding] of Object.entries(tools)) {
-			this.hostToolHandlers.set(name, binding.handler);
-			const definition: SidecarRegisteredHostCallbackDefinition = {
-				description: binding.description,
-				inputSchema: binding.inputSchema,
-				...(binding.timeoutMs !== undefined
-					? { timeoutMs: binding.timeoutMs }
-					: {}),
-				...(binding.examples && binding.examples.length > 0
-					? {
-							examples: binding.examples.map((example) => ({
-								description: example.description,
-								input: example.input,
-							})),
-						}
-					: {}),
-			};
-			// Register each binding as its own single-callback toolkit so the guest
-			// can invoke it directly by name (or by any caller-provided alias). The
-			// sidecar exposes the toolkit name as a guest command; the single
-			// callback carries the binding's schema and gates the `binding`
-			// permission.
-			await this.client.registerHostCallbacks(this.session, this.vm, {
-				name,
-				description: binding.description,
-				commandAliases: [name, ...(binding.commandAliases ?? [])],
-				callbacks: { [name]: definition },
-			});
-			this.commands.set(name, "wasmvm");
-			for (const alias of binding.commandAliases ?? []) {
-				this.commands.set(alias, "wasmvm");
-			}
-		}
-	}
-
-	private async dispatchHostToolRequest(
-		request: SidecarRequestFrame,
-	): Promise<SidecarResponsePayload> {
-		const { payload } = request;
-		if (payload.type !== "host_callback") {
-			throw new Error(
-				`unsupported sidecar request for bindings: ${payload.type}`,
-			);
-		}
-		// Callback keys arrive as `${toolkit}:${tool}` for toolkit invocations and
-		// as the bare command name otherwise. The toolkit name and tool name are
-		// the same here, so the registered tool name is the segment after the last
-		// colon (or the whole key when no colon is present).
-		const callbackKey = payload.callback_key;
-		const toolName = callbackKey.includes(":")
-			? callbackKey.slice(callbackKey.lastIndexOf(":") + 1)
-			: callbackKey;
-		const handler =
-			this.hostToolHandlers.get(toolName) ??
-			this.hostToolHandlers.get(callbackKey);
-		if (!handler) {
-			return {
-				type: "host_callback_result",
-				invocation_id: payload.invocation_id,
-				error: `no binding registered for ${callbackKey}`,
-			};
-		}
-		try {
-			const result = await handler(payload.input);
-			return {
-				type: "host_callback_result",
-				invocation_id: payload.invocation_id,
-				result: result === undefined ? null : result,
-			};
-		} catch (error) {
-			return {
-				type: "host_callback_result",
-				invocation_id: payload.invocation_id,
-				error: error instanceof Error ? error.message : String(error),
-			};
-		}
-	}
-
-	async writeFile(
-		targetPath: string,
-		content: string | Uint8Array,
-	): Promise<void> {
-		await this.ensureReady();
-		return this.proxy!.writeFile(targetPath, content);
-	}
-
-	async mkdir(targetPath: string): Promise<void> {
-		await this.ensureReady();
-		return this.proxy!.mkdir(targetPath);
-	}
-
-	async readdir(targetPath: string): Promise<string[]> {
-		await this.ensureReady();
-		return this.proxy!.readdir(targetPath);
-	}
-
-	async stat(targetPath: string): Promise<VirtualStat> {
-		await this.ensureReady();
-		return this.proxy!.stat(targetPath);
-	}
-
-	async exists(targetPath: string): Promise<boolean> {
-		await this.ensureReady();
-		return this.proxy!.exists(targetPath);
-	}
-
-	async removeFile(targetPath: string): Promise<void> {
-		await this.ensureReady();
-		return this.proxy!.removeFile(targetPath);
-	}
-
-	async removeDir(targetPath: string): Promise<void> {
-		await this.ensureReady();
-		return this.proxy!.removeDir(targetPath);
-	}
-
-	async rename(oldPath: string, newPath: string): Promise<void> {
-		await this.ensureReady();
-		return this.proxy!.rename(oldPath, newPath);
-	}
-
-	private tryResolveMountedCommand(command: string): boolean {
-		const normalized = normalizeCommandLookup(command);
-		for (const driver of this.mountedRuntimeDrivers) {
-			if (!driver.tryResolve?.(command)) {
-				continue;
-			}
-			this.commands.set(normalized, driver.kind);
-			if (driver.kind === "wasmvm" && this.proxy) {
-				const startIndex = this.runtimeDriverCommandDirStarts.get(driver);
-				if (startIndex !== undefined) {
-					const guestPaths = driver.getGuestCommandPaths?.(startIndex);
-					if (guestPaths?.has(normalized)) {
-						this.proxy.registerCommandGuestPaths(
-							new Map([[normalized, guestPaths.get(normalized)!]]),
-						);
-					}
-				}
-			}
-			return true;
-		}
-		return false;
-	}
-
-	private recordModuleExecution(command: string): void {
-		for (const driver of this.mountedRuntimeDrivers) {
-			driver.recordModuleExecution?.(command);
-		}
-	}
-
-	private async ensureReady(): Promise<void> {
-		if (!this.readyPromise) {
-			this.readyPromise = this.initialize();
-		}
-		return this.readyPromise;
-	}
-
-	private async initialize(): Promise<void> {
-		const createVmEnv = { ...this.env };
-		const requestedPermissions = this.options.permissions;
-		const bootstrapPermissions = requestedPermissions
-			? normalizePermissionsPolicy(allowAll)
-			: undefined;
-		if (this.loopbackExemptPorts.length > 0) {
-			createVmEnv.SECURE_EXEC_LOOPBACK_EXEMPT_PORTS = JSON.stringify(
-				this.loopbackExemptPorts,
-			);
-		}
-		const rootPassthroughPlan = planNodeFilesystemPassthroughMounts(
-			this.options.filesystem,
-			this.pendingLocalMounts,
-		);
-		const snapshotEntries = await this.measureBoot(
-			"filesystem_snapshot",
-			() =>
-				snapshotFilesystemEntries(this.options.filesystem, "/", [], {
-					passthroughDirectories:
-						rootPassthroughPlan.passthroughDirectories,
-				}),
-		);
-		this.liveFilesystemSyncRoots =
-			collectLiveFilesystemSyncRoots(snapshotEntries);
-		const rootFilesystem = {
-			mode: "ephemeral" as const,
-			disableDefaultBaseLayer: true,
-			lowers: [
-				{
-					kind: "snapshot" as const,
-					entries: mergeRootFilesystemEntries(
-						createBootstrapEntries([...NODE_RUNTIME_BOOTSTRAP_COMMANDS]),
-						snapshotEntries,
-					).map((entry) => ({
-						...entry,
-						executable: entry.executable ?? false,
-					})),
-				},
-			],
-			bootstrapEntries: [],
-		};
-
-		const ownsClient = this.options.sidecar === undefined;
-		const client =
-			this.options.sidecar ??
-			this.measureSyncBoot("sidecar_spawn", () =>
-				SidecarProcess.spawn({
-					cwd: REPO_ROOT,
-					command: ensureNativeSidecarBinary(),
-					args: [],
-					frameTimeoutMs: NATIVE_SIDECAR_FRAME_TIMEOUT_MS,
-				}),
-			);
-		const session = await this.measureBoot("session_open", () =>
-			client.authenticateAndOpenSession(),
-		);
-		const vm = await this.measureBoot("vm_create", () =>
-			client.createVm(session, {
-				runtime: "java_script",
-				config: {
-					env: createVmEnv,
-					rootFilesystem,
-					...(bootstrapPermissions ? { permissions: bootstrapPermissions } : {}),
-					loopbackExemptPorts: this.loopbackExemptPorts,
-					...(this.options.jsRuntime
-						? { jsRuntime: this.options.jsRuntime as JsRuntimeConfig }
-						: {}),
-				},
-			}),
-		);
-		await this.measureBoot("vm_ready", () =>
-			client.waitForEvent(
-				{
-					type: "vm_lifecycle",
-					ownership: {
-						scope: "vm",
-						connection_id: session.connectionId,
-						session_id: session.sessionId,
-						vm_id: vm.vmId,
-					},
-					state: "ready",
-				},
-				10_000,
-			),
-		);
-		if (requestedPermissions && snapshotEntries.length > 1) {
-			await materializeSnapshotEntriesIntoVm(
-				client,
-				session,
-				vm,
-				snapshotEntries,
-			);
-		}
-		if (rootPassthroughPlan.mounts.length > 0) {
-			this.pendingLocalMounts.push(...rootPassthroughPlan.mounts);
-		}
-		if (
-			this.pendingLocalMounts.length > 0 ||
-			this.loopbackExemptPorts.length > 0 ||
-			requestedPermissions
-		) {
-			await this.measureBoot("vm_configure", () =>
-				client.configureVm(session, vm, {
-					mounts: this.pendingLocalMounts.map((mount) =>
-						mount.fs instanceof NodeFileSystem
-							? serializeMountConfigForSidecar({
-									path: mount.path,
-									readOnly: mount.readOnly,
-									plugin: {
-										id: "host_dir",
-										config: {
-											hostPath: mount.fs.rootPath,
-											readOnly: mount.readOnly,
-										},
-									},
-								})
-							: serializeMountConfigForSidecar({
-									path: mount.path,
-									driver: mount.fs,
-									readOnly: mount.readOnly,
-								}),
-					),
-					permissions: requestedPermissions,
-					loopbackExemptPorts: this.loopbackExemptPorts,
-				}),
-			);
-		}
-
-		const proxy = new NativeSidecarKernelProxy({
-			client,
-			session,
-			vm,
-			disposeClient: ownsClient,
-			env: this.env,
-			cwd: this.cwd,
-			defaultExecCwd: this.options.cwd === undefined ? "/workspace" : this.cwd,
-			localMounts: this.pendingLocalMounts,
-			commandGuestPaths: new Map<string, string>(),
-			onWasmCommandResolved: (command) => {
-				this.recordModuleExecution(command);
-			},
-		});
-
-		this.client = client;
-		this.session = session;
-		this.vm = vm;
-		this.proxy = proxy;
-		this.rootFilesystem = proxy.createRootView();
-	}
-
-	private async measureBoot<T>(
-		phase: KernelBootTimingPhase,
-		fn: () => Promise<T>,
-	): Promise<T> {
-		const start = performance.now();
-		try {
-			return await fn();
-		} finally {
-			this.options.onBootTiming?.({
-				phase,
-				durationMs: performance.now() - start,
-			});
-		}
-	}
-
-	private measureSyncBoot<T>(phase: KernelBootTimingPhase, fn: () => T): T {
-		const start = performance.now();
-		try {
-			return fn();
-		} finally {
-			this.options.onBootTiming?.({
-				phase,
-				durationMs: performance.now() - start,
-			});
-		}
-	}
-}
-
-export function createKernel(options: {
-	filesystem: VirtualFileSystem;
-	permissions?: Permissions;
-	env?: Record<string, string>;
-	cwd?: string;
-	sidecar?: SidecarProcess;
-	onBootTiming?: (timing: KernelBootTiming) => void;
-	maxProcesses?: number;
-	hostNetworkAdapter?: unknown;
-	loopbackExemptPorts?: number[];
-	jsRuntime?: Partial<JsRuntimeConfig>;
-	logger?: unknown;
-	mounts?: Array<{ path: string; fs: VirtualFileSystem; readOnly?: boolean }>;
-	syncFilesystemOnDispose?: boolean;
-}): Kernel {
-	return new NativeKernel(options);
-}
-
-function errnoError(code: string, message: string): KernelError {
-	return new KernelError(code, `${code}: ${message}`);
-}
diff --git a/packages/core/src/vm-config.ts b/packages/core/src/vm-config.ts
deleted file mode 100644
index c1f455780..000000000
--- a/packages/core/src/vm-config.ts
+++ /dev/null
@@ -1,31 +0,0 @@
-export type { AcpLimitsConfig } from "./generated/AcpLimitsConfig.js";
-export type { CreateVmConfig } from "./generated/CreateVmConfig.js";
-export type { FsPermissionRule } from "./generated/FsPermissionRule.js";
-export type { FsPermissionRuleSet } from "./generated/FsPermissionRuleSet.js";
-export type { FsPermissionScope } from "./generated/FsPermissionScope.js";
-export type { HttpLimitsConfig } from "./generated/HttpLimitsConfig.js";
-export type { JsModuleResolution } from "./generated/JsModuleResolution.js";
-export type { JsRuntimeConfig } from "./generated/JsRuntimeConfig.js";
-export type { JsRuntimeLimitsConfig } from "./generated/JsRuntimeLimitsConfig.js";
-export type { JsRuntimePlatform } from "./generated/JsRuntimePlatform.js";
-export type { MountPluginDescriptor } from "./generated/MountPluginDescriptor.js";
-export type { NativeRootFilesystemConfig } from "./generated/NativeRootFilesystemConfig.js";
-export type { PatternPermissionRule } from "./generated/PatternPermissionRule.js";
-export type { PatternPermissionRuleSet } from "./generated/PatternPermissionRuleSet.js";
-export type { PatternPermissionScope } from "./generated/PatternPermissionScope.js";
-export type { PermissionMode } from "./generated/PermissionMode.js";
-export type { PermissionsPolicy } from "./generated/PermissionsPolicy.js";
-export type { PluginLimitsConfig } from "./generated/PluginLimitsConfig.js";
-export type { PythonLimitsConfig } from "./generated/PythonLimitsConfig.js";
-export type { ResourceLimitsConfig } from "./generated/ResourceLimitsConfig.js";
-export type { RootFilesystemConfig } from "./generated/RootFilesystemConfig.js";
-export type { RootFilesystemEntry } from "./generated/RootFilesystemEntry.js";
-export type { RootFilesystemEntryEncoding } from "./generated/RootFilesystemEntryEncoding.js";
-export type { RootFilesystemEntryKind } from "./generated/RootFilesystemEntryKind.js";
-export type { RootFilesystemLowerDescriptor } from "./generated/RootFilesystemLowerDescriptor.js";
-export type { RootFilesystemMode } from "./generated/RootFilesystemMode.js";
-export type { ToolLimitsConfig } from "./generated/ToolLimitsConfig.js";
-export type { VmDnsConfig } from "./generated/VmDnsConfig.js";
-export type { VmLimitsConfig } from "./generated/VmLimitsConfig.js";
-export type { VmListenPolicyConfig } from "./generated/VmListenPolicyConfig.js";
-export type { WasmLimitsConfig } from "./generated/WasmLimitsConfig.js";
diff --git a/packages/core/tests/binary.test.ts b/packages/core/tests/binary.test.ts
deleted file mode 100644
index 22fbc474b..000000000
--- a/packages/core/tests/binary.test.ts
+++ /dev/null
@@ -1,53 +0,0 @@
-import { existsSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { afterEach, describe, expect, test } from "vitest";
-import { resolvePublishedSidecarBinary } from "../src/binary.js";
-
-const ORIGINAL_OVERRIDE = process.env.SECURE_EXEC_SIDECAR_BIN;
-
-afterEach(() => {
-	if (ORIGINAL_OVERRIDE === undefined) {
-		delete process.env.SECURE_EXEC_SIDECAR_BIN;
-	} else {
-		process.env.SECURE_EXEC_SIDECAR_BIN = ORIGINAL_OVERRIDE;
-	}
-});
-
-describe("secure-exec sidecar binary resolution", () => {
-	test("honors SECURE_EXEC_SIDECAR_BIN when the file exists", () => {
-		const root = mkdtempSync(join(tmpdir(), "secure-exec-sidecar-bin-"));
-		try {
-			const binaryPath = join(root, "secure-exec-sidecar");
-			writeFileSync(binaryPath, "#!/bin/sh\n", { mode: 0o755 });
-			process.env.SECURE_EXEC_SIDECAR_BIN = binaryPath;
-
-			expect(resolvePublishedSidecarBinary()).toBe(binaryPath);
-		} finally {
-			rmSync(root, { recursive: true, force: true });
-		}
-	});
-
-	test("rejects a missing SECURE_EXEC_SIDECAR_BIN override", () => {
-		const binaryPath = join(
-			tmpdir(),
-			`secure-exec-sidecar-missing-${process.pid}-${Date.now()}`,
-		);
-		if (existsSync(binaryPath)) {
-			rmSync(binaryPath, { force: true });
-		}
-		process.env.SECURE_EXEC_SIDECAR_BIN = binaryPath;
-
-		expect(() => resolvePublishedSidecarBinary()).toThrow(
-			/SECURE_EXEC_SIDECAR_BIN is set to .* but the file does not exist/,
-		);
-	});
-
-	test("delegates to the secure-exec resolver package when no override is set", () => {
-		delete process.env.SECURE_EXEC_SIDECAR_BIN;
-
-		expect(() => resolvePublishedSidecarBinary()).toThrow(
-			/@secure-exec\/sidecar: platform package .* is not installed/,
-		);
-	});
-});
diff --git a/packages/core/tests/bytes.test.ts b/packages/core/tests/bytes.test.ts
deleted file mode 100644
index be857b3f7..000000000
--- a/packages/core/tests/bytes.test.ts
+++ /dev/null
@@ -1,22 +0,0 @@
-import { describe, expect, test } from "vitest";
-import { toExactArrayBuffer, toExactUint8Array } from "../src/bytes.js";
-
-describe("byte normalization helpers", () => {
-	test("copies sliced Uint8Array views into exact ArrayBuffers", () => {
-		const source = new Uint8Array([9, 1, 2, 3, 9]);
-		const view = source.subarray(1, 4);
-		const exact = toExactArrayBuffer(view);
-
-		expect(exact.byteLength).toBe(3);
-		expect(Array.from(new Uint8Array(exact))).toEqual([1, 2, 3]);
-	});
-
-	test("copies sliced Uint8Array views into exact Uint8Arrays", () => {
-		const source = new Uint8Array([9, 4, 5, 6, 9]);
-		const view = source.subarray(1, 4);
-		const exact = toExactUint8Array(view);
-
-		expect(exact.byteOffset).toBe(0);
-		expect(Array.from(exact)).toEqual([4, 5, 6]);
-	});
-});
diff --git a/packages/core/tests/callbacks.test.ts b/packages/core/tests/callbacks.test.ts
deleted file mode 100644
index 42171941e..000000000
--- a/packages/core/tests/callbacks.test.ts
+++ /dev/null
@@ -1,145 +0,0 @@
-import { describe, expect, test } from "vitest";
-import {
-	errorSidecarResponsePayload,
-	fromGeneratedSidecarRequestPayload,
-	isMatchingSidecarResponsePayload,
-	toGeneratedSidecarResponsePayload,
-	type CallbackSidecarRequestPayload,
-} from "../src/callbacks.js";
-
-describe("sidecar callback helpers", () => {
-	test("matches callback request and response payload families", () => {
-		const request: CallbackSidecarRequestPayload = {
-			type: "host_callback",
-			invocation_id: "invocation-1",
-			callback_key: "tool",
-			input: null,
-			timeout_ms: 1000,
-		};
-
-		expect(
-			isMatchingSidecarResponsePayload(request, {
-				type: "host_callback_result",
-				invocation_id: "invocation-1",
-			}),
-		).toBe(true);
-		expect(
-			isMatchingSidecarResponsePayload(request, {
-				type: "js_bridge_result",
-				call_id: "call-1",
-			}),
-		).toBe(false);
-	});
-
-	test("formats callback errors as matching responses", () => {
-		expect(
-			errorSidecarResponsePayload(
-				{
-					type: "js_bridge_call",
-					call_id: "call-1",
-					mount_id: "mount-1",
-					operation: "read",
-					args: {},
-				},
-				new Error("boom"),
-			),
-		).toEqual({
-			type: "js_bridge_result",
-			call_id: "call-1",
-			error: "boom",
-		});
-	});
-
-	test("formats ext errors as namespace-scoped payloads", () => {
-		const envelope = {
-			namespace: "dev.test",
-			payload: new Uint8Array([1, 2, 3]),
-		};
-
-		expect(
-			errorSidecarResponsePayload(
-				{
-					type: "ext",
-					envelope,
-				},
-				new Error("ignored"),
-			),
-		).toEqual({
-			type: "ext_result",
-			envelope: {
-				namespace: "dev.test",
-				payload: Buffer.from("ignored", "utf8"),
-			},
-		});
-	});
-
-	test("maps generated sidecar callback requests to live payloads", () => {
-		expect(
-			fromGeneratedSidecarRequestPayload({
-				tag: "HostCallbackRequest",
-				val: {
-					invocationId: "invocation-1",
-					callbackKey: "tool",
-					input: '{"path":"/tmp/file"}',
-					timeoutMs: 2500n,
-				},
-			}),
-		).toEqual({
-			type: "host_callback",
-			invocation_id: "invocation-1",
-			callback_key: "tool",
-			input: { path: "/tmp/file" },
-			timeout_ms: 2500,
-		});
-
-		expect(
-			fromGeneratedSidecarRequestPayload({
-				tag: "JsBridgeCallRequest",
-				val: {
-					callId: "call-1",
-					mountId: "mount-1",
-					operation: "read",
-					args: '["/tmp/file"]',
-				},
-			}),
-		).toEqual({
-			type: "js_bridge_call",
-			call_id: "call-1",
-			mount_id: "mount-1",
-			operation: "read",
-			args: ["/tmp/file"],
-		});
-	});
-
-	test("maps live callback responses to generated payloads", () => {
-		expect(
-			toGeneratedSidecarResponsePayload({
-				type: "host_callback_result",
-				invocation_id: "invocation-1",
-				result: { ok: true },
-			}),
-		).toEqual({
-			tag: "HostCallbackResultResponse",
-			val: {
-				invocationId: "invocation-1",
-				result: '{"ok":true}',
-				error: null,
-			},
-		});
-
-		expect(
-			toGeneratedSidecarResponsePayload({
-				type: "js_bridge_result",
-				call_id: "call-1",
-				error: "boom",
-			}),
-		).toEqual({
-			tag: "JsBridgeResultResponse",
-			val: {
-				callId: "call-1",
-				result: null,
-				error: "boom",
-			},
-		});
-	});
-});
diff --git a/packages/core/tests/correlation.test.ts b/packages/core/tests/correlation.test.ts
deleted file mode 100644
index 12b84ee94..000000000
--- a/packages/core/tests/correlation.test.ts
+++ /dev/null
@@ -1,86 +0,0 @@
-import { describe, expect, test, vi } from "vitest";
-import { PendingResponseRegistry } from "../src/correlation.js";
-
-describe("pending response registry", () => {
-	test("resolves a registered response by request id", async () => {
-		const registry = new PendingResponseRegistry<string>();
-		const response = registry.waitForResponse(7, {
-			timeoutMs: 1_000,
-			timeoutMessage: () => "timed out",
-		});
-
-		expect(registry.resolve(7, "ok")).toBe(true);
-		await expect(response).resolves.toBe("ok");
-		expect(registry.resolve(7, "late")).toBe(false);
-	});
-
-	test("rejects a registered response by request id", async () => {
-		const registry = new PendingResponseRegistry<string>();
-		const response = registry.waitForResponse(9, {
-			timeoutMs: 1_000,
-			timeoutMessage: () => "timed out",
-		});
-		const error = new Error("write failed");
-
-		expect(registry.reject(9, error)).toBe(true);
-		await expect(response).rejects.toThrow("write failed");
-		expect(registry.reject(9, error)).toBe(false);
-	});
-
-	test("times out pending responses", async () => {
-		vi.useFakeTimers();
-		try {
-			const registry = new PendingResponseRegistry<string>();
-			const response = registry.waitForResponse(11, {
-				timeoutMs: 25,
-				timeoutMessage: () => "request timed out",
-			});
-			const expectedRejection = expect(response).rejects.toThrow(
-				"request timed out",
-			);
-
-			await vi.advanceTimersByTimeAsync(25);
-			await expectedRejection;
-			expect(registry.resolve(11, "late")).toBe(false);
-		} finally {
-			vi.useRealTimers();
-		}
-	});
-
-	test("rejects duplicate request ids", () => {
-		const registry = new PendingResponseRegistry<string>();
-		const pending = registry.waitForResponse(13, {
-			timeoutMs: 1_000,
-			timeoutMessage: () => "timed out",
-		});
-		void pending.catch(() => undefined);
-
-		expect(() =>
-			registry.waitForResponse(13, {
-				timeoutMs: 1_000,
-				timeoutMessage: () => "timed out",
-			}),
-		).toThrow("response waiter already registered for request 13");
-
-		registry.rejectAll(new Error("cleanup"));
-	});
-
-	test("rejects all pending responses", async () => {
-		const registry = new PendingResponseRegistry<string>();
-		const first = registry.waitForResponse(1, {
-			timeoutMs: 1_000,
-			timeoutMessage: () => "first timed out",
-		});
-		const second = registry.waitForResponse(2, {
-			timeoutMs: 1_000,
-			timeoutMessage: () => "second timed out",
-		});
-
-		registry.rejectAll(new Error("transport closed"));
-
-		await expect(first).rejects.toThrow("transport closed");
-		await expect(second).rejects.toThrow("transport closed");
-		expect(registry.resolve(1, "late")).toBe(false);
-		expect(registry.resolve(2, "late")).toBe(false);
-	});
-});
diff --git a/packages/core/tests/descriptors.test.ts b/packages/core/tests/descriptors.test.ts
deleted file mode 100644
index 18ab316b9..000000000
--- a/packages/core/tests/descriptors.test.ts
+++ /dev/null
@@ -1,72 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-	toGeneratedMountDescriptor,
-	toGeneratedProjectedModuleDescriptor,
-	toGeneratedSidecarPlacement,
-	toGeneratedSoftwareDescriptor,
-} from "../src/descriptors.js";
-
-describe("descriptors", () => {
-	it("maps shared and explicit sidecar placements", () => {
-		expect(toGeneratedSidecarPlacement({ kind: "shared" })).toEqual({
-			tag: "SidecarPlacementShared",
-			val: { pool: null },
-		});
-		expect(
-			toGeneratedSidecarPlacement({ kind: "shared", pool: "workers" }),
-		).toEqual({
-			tag: "SidecarPlacementShared",
-			val: { pool: "workers" },
-		});
-		expect(
-			toGeneratedSidecarPlacement({
-				kind: "explicit",
-				sidecar_id: "sidecar-1",
-			}),
-		).toEqual({
-			tag: "SidecarPlacementExplicit",
-			val: { sidecarId: "sidecar-1" },
-		});
-	});
-
-	it("maps mount descriptors and serializes plugin config as JSON", () => {
-		expect(
-			toGeneratedMountDescriptor({
-				guest_path: "/workspace",
-				read_only: true,
-				plugin: {
-					id: "host",
-					config: { source: "/tmp/project", depth: 2 },
-				},
-			}),
-		).toEqual({
-			guestPath: "/workspace",
-			readOnly: true,
-			plugin: {
-				id: "host",
-				config: '{"source":"/tmp/project","depth":2}',
-			},
-		});
-	});
-
-	it("maps software and projected module descriptors", () => {
-		expect(
-			toGeneratedSoftwareDescriptor({
-				package_name: "node",
-				root: "/software/node",
-			}),
-		).toEqual({
-			packageName: "node",
-			root: "/software/node",
-		});
-		expect(
-			toGeneratedProjectedModuleDescriptor({
-				package_name: "@acme/tool",
-				entrypoint: "dist/index.js",
-			}),
-		).toEqual({
-			packageName: "@acme/tool",
-			entrypoint: "dist/index.js",
-		});
-	});
-});
diff --git a/packages/core/tests/event-buffer.test.ts b/packages/core/tests/event-buffer.test.ts
deleted file mode 100644
index 029142d1e..000000000
--- a/packages/core/tests/event-buffer.test.ts
+++ /dev/null
@@ -1,209 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-	ANY_BUFFERED_EVENT_KEY,
-	SidecarEventBuffer,
-	SidecarEventBufferOverflow,
-	fromGeneratedEventPayload,
-	normalizeSidecarEventMatcher,
-	sidecarEventBufferKeys,
-	sidecarEventWaitAbortError,
-	sidecarSelectorBufferKey,
-	sidecarSelectorMatchesEvent,
-	type LiveSidecarEventFrame,
-} from "../src/event-buffer.js";
-import * as protocol from "../src/generated-protocol.js";
-
-const vmReadyEvent: LiveSidecarEventFrame = {
-	ownership: {
-		scope: "vm",
-		connection_id: "conn",
-		session_id: "session",
-		vm_id: "vm",
-	},
-	payload: {
-		type: "vm_lifecycle",
-		state: "ready",
-	},
-};
-
-describe("event buffer helpers", () => {
-	it("reports bounded event buffer overflows", () => {
-		const error = new SidecarEventBufferOverflow({
-			capacity: 4,
-			bufferedEvents: 4,
-			eventType: "process_output",
-		});
-
-		expect(error).toBeInstanceOf(Error);
-		expect(error.name).toBe("SidecarEventBufferOverflow");
-		expect(error.capacity).toBe(4);
-		expect(error.bufferedEvents).toBe(4);
-		expect(error.eventType).toBe("process_output");
-		expect(error.message).toContain(
-			"sidecar event buffer overflow after 4 queued events",
-		);
-	});
-
-	it("buffers, takes, and bounds unmatched events", () => {
-		const buffer = new SidecarEventBuffer<LiveSidecarEventFrame>(1);
-		expect(buffer.buffer(vmReadyEvent)).toBe(null);
-		expect(buffer.size).toBe(1);
-
-		const readyMatcher =
-			normalizeSidecarEventMatcher<LiveSidecarEventFrame>({
-				type: "vm_lifecycle",
-				state: "ready",
-			});
-		expect(buffer.take(readyMatcher)).toBe(vmReadyEvent);
-		expect(buffer.take(readyMatcher)).toBe(null);
-		expect(buffer.size).toBe(0);
-
-		expect(buffer.buffer(vmReadyEvent)).toBe(null);
-		const overflow = buffer.buffer({
-			...vmReadyEvent,
-			payload: { type: "vm_lifecycle", state: "failed" },
-		});
-		expect(overflow).toBeInstanceOf(SidecarEventBufferOverflow);
-		expect(overflow).toMatchObject({
-			capacity: 1,
-			bufferedEvents: 1,
-			eventType: "vm_lifecycle",
-		});
-	});
-
-	it("normalizes event wait abort reasons", () => {
-		const error = new Error("stop");
-		expect(sidecarEventWaitAbortError(error)).toBe(error);
-		expect(sidecarEventWaitAbortError("stop").message).toBe("stop");
-		expect(sidecarEventWaitAbortError(undefined).message).toBe(
-			"sidecar event wait aborted",
-		);
-	});
-
-	it("matches event selectors by ownership and payload fields", () => {
-		expect(
-			sidecarSelectorMatchesEvent(
-				{
-					type: "vm_lifecycle",
-					ownership: vmReadyEvent.ownership,
-					state: "ready",
-				},
-				vmReadyEvent,
-			),
-		).toBe(true);
-		expect(
-			sidecarSelectorMatchesEvent(
-				{
-					type: "vm_lifecycle",
-					ownership: vmReadyEvent.ownership,
-					state: "failed",
-				},
-				vmReadyEvent,
-			),
-		).toBe(false);
-	});
-
-	it("uses exact keys for direct buffered-event lookup", () => {
-		expect(
-			sidecarSelectorBufferKey({
-				type: "vm_lifecycle",
-				ownership: vmReadyEvent.ownership,
-				state: "ready",
-			}),
-		).toBe("type:vm_lifecycle|ownership:vm:conn:session:vm|state:ready");
-		expect(sidecarSelectorBufferKey({ any: true })).toBe(
-			ANY_BUFFERED_EVENT_KEY,
-		);
-	});
-
-	it("declines direct lookup when structured detail filtering requires scan", () => {
-		expect(
-			sidecarSelectorBufferKey({
-				type: "structured",
-				name: "tool",
-				detail: { ok: "true" },
-			}),
-		).toBe(null);
-	});
-
-	it("indexes process output by type, ownership, process, and channel", () => {
-		const event: LiveSidecarEventFrame = {
-			ownership: vmReadyEvent.ownership,
-			payload: {
-				type: "process_output",
-				process_id: "proc",
-				channel: "stderr",
-				chunk: new Uint8Array([1, 2, 3]),
-			},
-		};
-		expect(sidecarEventBufferKeys(event)).toEqual([
-			"*",
-			"type:process_output",
-			"type:process_output|ownership:vm:conn:session:vm",
-			"type:process_output|process:proc",
-			"type:process_output|channel:stderr",
-			"type:process_output|process:proc|channel:stderr",
-			"type:process_output|ownership:vm:conn:session:vm|process:proc",
-			"type:process_output|ownership:vm:conn:session:vm|channel:stderr",
-			"type:process_output|ownership:vm:conn:session:vm|process:proc|channel:stderr",
-		]);
-	});
-
-	it("normalizes selector and function matchers", () => {
-		const selectorMatcher = normalizeSidecarEventMatcher<LiveSidecarEventFrame>({
-			type: "vm_lifecycle",
-			state: "ready",
-		});
-		expect(selectorMatcher.matches(vmReadyEvent)).toBe(true);
-		expect(selectorMatcher.bufferKey).toBe("type:vm_lifecycle|state:ready");
-
-		const functionMatcher =
-			normalizeSidecarEventMatcher<LiveSidecarEventFrame>(
-				(event) => event.payload.type === "vm_lifecycle",
-			);
-		expect(functionMatcher.matches(vmReadyEvent)).toBe(true);
-		expect(functionMatcher.bufferKey).toBe(null);
-	});
-
-	it("maps generated event payloads to live payloads", () => {
-		expect(
-			fromGeneratedEventPayload({
-				tag: "VmLifecycleEvent",
-				val: { state: protocol.VmLifecycleState.Ready },
-			}),
-		).toEqual({
-			type: "vm_lifecycle",
-			state: "ready",
-		});
-
-		expect(
-			fromGeneratedEventPayload({
-				tag: "ProcessOutputEvent",
-				val: {
-					processId: "proc",
-					channel: protocol.StreamChannel.Stdout,
-					chunk: new Uint8Array([1, 2, 3]).buffer,
-				},
-			}),
-		).toMatchObject({
-			type: "process_output",
-			process_id: "proc",
-			channel: "stdout",
-			chunk: Buffer.from([1, 2, 3]),
-		});
-
-		expect(
-			fromGeneratedEventPayload({
-				tag: "StructuredEvent",
-				val: {
-					name: "tool",
-					detail: new Map([["ok", "true"]]),
-				},
-			}),
-		).toEqual({
-			type: "structured",
-			name: "tool",
-			detail: { ok: "true" },
-		});
-	});
-});
diff --git a/packages/core/tests/ext.test.ts b/packages/core/tests/ext.test.ts
deleted file mode 100644
index e801bd998..000000000
--- a/packages/core/tests/ext.test.ts
+++ /dev/null
@@ -1,29 +0,0 @@
-import { describe, expect, test } from "vitest";
-import {
-	fromGeneratedExtEnvelope,
-	toGeneratedExtEnvelope,
-} from "../src/ext.js";
-
-describe("ext envelope helpers", () => {
-	test("converts live envelopes to generated envelopes with exact payload buffers", () => {
-		const source = new Uint8Array([9, 1, 2, 3, 9]);
-		const generated = toGeneratedExtEnvelope({
-			namespace: "dev.test",
-			payload: source.subarray(1, 4),
-		});
-
-		expect(generated.namespace).toBe("dev.test");
-		expect(generated.payload.byteLength).toBe(3);
-		expect(Array.from(new Uint8Array(generated.payload))).toEqual([1, 2, 3]);
-	});
-
-	test("converts generated envelopes back to live envelopes", () => {
-		const live = fromGeneratedExtEnvelope({
-			namespace: "dev.test",
-			payload: new Uint8Array([4, 5, 6]).buffer,
-		});
-
-		expect(live.namespace).toBe("dev.test");
-		expect(Array.from(live.payload)).toEqual([4, 5, 6]);
-	});
-});
diff --git a/packages/core/tests/filesystem.test.ts b/packages/core/tests/filesystem.test.ts
deleted file mode 100644
index a94c4e3e9..000000000
--- a/packages/core/tests/filesystem.test.ts
+++ /dev/null
@@ -1,118 +0,0 @@
-import { describe, expect, test } from "vitest";
-import * as protocol from "../src/generated-protocol.js";
-import {
-	decodeGuestFilesystemContent,
-	encodeGuestFilesystemContent,
-	fromGeneratedRootFilesystemEntry,
-	toGeneratedRootFilesystemDescriptor,
-	toGeneratedRootFilesystemEntry,
-} from "../src/filesystem.js";
-
-describe("guest filesystem content helpers", () => {
-	test("leaves string content as utf8 text", () => {
-		expect(encodeGuestFilesystemContent("hello")).toEqual({
-			content: "hello",
-		});
-	});
-
-	test("encodes and decodes binary content as base64", () => {
-		const encoded = encodeGuestFilesystemContent(new Uint8Array([0, 1, 2, 255]));
-
-		expect(encoded).toEqual({
-			content: "AAEC/w==",
-			encoding: "base64",
-		});
-		expect(
-			Array.from(
-				decodeGuestFilesystemContent({
-					path: "/tmp/blob",
-					content: encoded.content,
-					encoding: encoded.encoding,
-				}),
-			),
-		).toEqual([0, 1, 2, 255]);
-	});
-
-	test("throws when read responses omit content", () => {
-		expect(() => decodeGuestFilesystemContent({ path: "/tmp/missing" })).toThrow(
-			"sidecar returned no file content for /tmp/missing",
-		);
-	});
-
-	test("maps live root filesystem entries to generated protocol entries", () => {
-		expect(
-			toGeneratedRootFilesystemEntry({
-				path: "/bin/tool",
-				kind: "file",
-				mode: 0o755,
-				content: "echo ok",
-				encoding: "utf8",
-				executable: true,
-			}),
-		).toEqual({
-			path: "/bin/tool",
-			kind: protocol.RootFilesystemEntryKind.File,
-			mode: 0o755,
-			uid: null,
-			gid: null,
-			content: "echo ok",
-			encoding: protocol.RootFilesystemEntryEncoding.UtF8,
-			target: null,
-			executable: true,
-		});
-	});
-
-	test("maps generated root filesystem entries to live entries", () => {
-		expect(
-			fromGeneratedRootFilesystemEntry({
-				path: "/link",
-				kind: protocol.RootFilesystemEntryKind.Symlink,
-				mode: null,
-				uid: null,
-				gid: null,
-				content: null,
-				encoding: null,
-				target: "/target",
-				executable: false,
-			}),
-		).toEqual({
-			path: "/link",
-			kind: "symlink",
-			target: "/target",
-			executable: false,
-		});
-	});
-
-	test("maps live root filesystem descriptors to generated descriptors", () => {
-		expect(
-			toGeneratedRootFilesystemDescriptor({
-				mode: "read_only",
-				disable_default_base_layer: true,
-				lowers: [
-					{
-						kind: "snapshot",
-						entries: [{ path: "/etc/app", kind: "directory" }],
-					},
-					{ kind: "bundled_base_filesystem" },
-				],
-				bootstrap_entries: [
-					{ path: "/etc/app/config.json", kind: "file", content: "{}" },
-				],
-			}),
-		).toMatchObject({
-			mode: protocol.RootFilesystemMode.ReadOnly,
-			disableDefaultBaseLayer: true,
-			lowers: [
-				{ tag: "SnapshotRootFilesystemLower" },
-				{ tag: "BundledBaseFilesystemLower", val: null },
-			],
-			bootstrapEntries: [
-				{
-					path: "/etc/app/config.json",
-					kind: protocol.RootFilesystemEntryKind.File,
-					content: "{}",
-				},
-			],
-		});
-	});
-});
diff --git a/packages/core/tests/frame-payload-codec.test.ts b/packages/core/tests/frame-payload-codec.test.ts
deleted file mode 100644
index 278cbc72b..000000000
--- a/packages/core/tests/frame-payload-codec.test.ts
+++ /dev/null
@@ -1,44 +0,0 @@
-import { describe, expect, test } from "vitest";
-import {
-	decodeJsonFramePayload,
-	encodeJsonFramePayload,
-} from "../src/frame-payload-codec.js";
-
-const textDecoder = new TextDecoder();
-const textEncoder = new TextEncoder();
-
-describe("frame payload codec helpers", () => {
-	test("encodes Uint8Array values as number arrays for JSON frames", () => {
-		const encoded = encodeJsonFramePayload({
-			payload: {
-				type: "process_output",
-				chunk: new Uint8Array([1, 2, 3]),
-			},
-		});
-
-		expect(JSON.parse(textDecoder.decode(encoded))).toEqual({
-			payload: {
-				type: "process_output",
-				chunk: [1, 2, 3],
-			},
-		});
-	});
-
-	test("restores process output chunks to Uint8Array", () => {
-		const decoded = decodeJsonFramePayload<{
-			payload: { type: "process_output"; chunk: Uint8Array };
-		}>(
-			textEncoder.encode(
-				JSON.stringify({
-					payload: {
-						type: "process_output",
-						chunk: [4, 5, 6],
-					},
-				}),
-			),
-		);
-
-		expect(decoded.payload.chunk).toBeInstanceOf(Uint8Array);
-		expect(Array.from(decoded.payload.chunk)).toEqual([4, 5, 6]);
-	});
-});
diff --git a/packages/core/tests/frame-rpc.test.ts b/packages/core/tests/frame-rpc.test.ts
deleted file mode 100644
index 39e3a96c9..000000000
--- a/packages/core/tests/frame-rpc.test.ts
+++ /dev/null
@@ -1,131 +0,0 @@
-import { PassThrough } from "node:stream";
-import { describe, expect, test } from "vitest";
-import { FrameRpcTransport } from "../src/frame-rpc.js";
-import { encodeLengthPrefixedPayload } from "../src/framing.js";
-
-type TestFrame =
-	| { frame_type: "request"; request_id: number; payload: string }
-	| { frame_type: "response"; request_id: number; payload: string }
-	| { frame_type: "event"; payload: string }
-	| { frame_type: "sidecar_request"; request_id: number; payload: string };
-
-function encodeTestFrame(frame: TestFrame): Uint8Array {
-	return Buffer.from(JSON.stringify(frame), "utf8");
-}
-
-function decodeTestFrame(payload: Uint8Array): TestFrame {
-	return JSON.parse(Buffer.from(payload).toString("utf8")) as TestFrame;
-}
-
-function createTransport() {
-	const stdin = new PassThrough();
-	const stdout = new PassThrough();
-	const transport = new FrameRpcTransport<
-		TestFrame,
-		TestFrame,
-		Extract<TestFrame, { frame_type: "response" }>,
-		Extract<TestFrame, { frame_type: "event" }>,
-		Extract<TestFrame, { frame_type: "sidecar_request" }>
-	>({
-		stdin,
-		stdout,
-		encodeFrame: encodeTestFrame,
-		decodeFrame: decodeTestFrame,
-		classifyFrame: (frame) => {
-			switch (frame.frame_type) {
-				case "response":
-					return {
-						kind: "response",
-						requestId: frame.request_id,
-						frame,
-					};
-				case "event":
-					return { kind: "event", frame };
-				case "sidecar_request":
-					return { kind: "sidecarRequest", frame };
-				case "request":
-					throw new Error("unexpected request frame from sidecar");
-			}
-		},
-	});
-	return { stdin, stdout, transport };
-}
-
-function writeIncomingFrame(stdout: PassThrough, frame: TestFrame): void {
-	stdout.write(encodeLengthPrefixedPayload(encodeTestFrame(frame)));
-}
-
-describe("frame RPC transport", () => {
-	test("correlates responses by request id", async () => {
-		const { stdin, stdout, transport } = createTransport();
-		const written = new Promise<TestFrame>((resolve) => {
-			stdin.once("data", (chunk: Buffer) => {
-				const payloadLength = chunk.readUInt32BE(0);
-				resolve(decodeTestFrame(chunk.subarray(4, 4 + payloadLength)));
-			});
-		});
-
-		const response = transport.sendFrame(
-			3,
-			{ frame_type: "request", request_id: 3, payload: "ping" },
-			{ timeoutMs: 1_000, timeoutMessage: () => "timed out" },
-		);
-		await expect(written).resolves.toEqual({
-			frame_type: "request",
-			request_id: 3,
-			payload: "ping",
-		});
-
-		writeIncomingFrame(stdout, {
-			frame_type: "response",
-			request_id: 3,
-			payload: "pong",
-		});
-
-		await expect(response).resolves.toEqual({
-			frame_type: "response",
-			request_id: 3,
-			payload: "pong",
-		});
-		transport.dispose();
-	});
-
-	test("dispatches event frames", async () => {
-		const { stdout, transport } = createTransport();
-		const event = new Promise<Extract<TestFrame, { frame_type: "event" }>>(
-			(resolve) => {
-				transport.onEvent(resolve);
-			},
-		);
-
-		writeIncomingFrame(stdout, { frame_type: "event", payload: "ready" });
-
-		await expect(event).resolves.toEqual({
-			frame_type: "event",
-			payload: "ready",
-		});
-		transport.dispose();
-	});
-
-	test("dispatches sidecar request frames", async () => {
-		const { stdout, transport } = createTransport();
-		const request = new Promise<
-			Extract<TestFrame, { frame_type: "sidecar_request" }>
-		>((resolve) => {
-			transport.onSidecarRequest(resolve);
-		});
-
-		writeIncomingFrame(stdout, {
-			frame_type: "sidecar_request",
-			request_id: 9,
-			payload: "callback",
-		});
-
-		await expect(request).resolves.toEqual({
-			frame_type: "sidecar_request",
-			request_id: 9,
-			payload: "callback",
-		});
-		transport.dispose();
-	});
-});
diff --git a/packages/core/tests/frame-stream.test.ts b/packages/core/tests/frame-stream.test.ts
deleted file mode 100644
index 978bef290..000000000
--- a/packages/core/tests/frame-stream.test.ts
+++ /dev/null
@@ -1,88 +0,0 @@
-import { PassThrough } from "node:stream";
-import { describe, expect, test } from "vitest";
-import { StdioFrameTransport } from "../src/frame-stream.js";
-import { encodeLengthPrefixedPayload } from "../src/framing.js";
-
-function concatBytes(...chunks: Uint8Array[]): Uint8Array {
-	const totalLength = chunks.reduce((sum, chunk) => sum + chunk.length, 0);
-	const combined = new Uint8Array(totalLength);
-	let offset = 0;
-	for (const chunk of chunks) {
-		combined.set(chunk, offset);
-		offset += chunk.length;
-	}
-	return combined;
-}
-
-describe("stdio frame transport", () => {
-	test("decodes complete frames from partial stdout chunks", async () => {
-		const stdin = new PassThrough();
-		const stdout = new PassThrough();
-		const transport = new StdioFrameTransport<string>({
-			stdin,
-			stdout,
-			encodeFrame: (frame) => Buffer.from(frame, "utf8"),
-			decodeFrame: (payload) => Buffer.from(payload).toString("utf8"),
-		});
-		const frames = new Promise<string[]>((resolve) => {
-			const seen: string[] = [];
-			transport.onFrame((frame) => {
-				seen.push(frame);
-				if (seen.length === 2) {
-					resolve(seen);
-				}
-			});
-		});
-		const first = encodeLengthPrefixedPayload(Buffer.from("one"));
-		const second = encodeLengthPrefixedPayload(Buffer.from("two"));
-		const combined = concatBytes(first, second);
-
-		stdout.write(combined.subarray(0, 5));
-		stdout.write(combined.subarray(5));
-
-		await expect(frames).resolves.toEqual(["one", "two"]);
-		transport.dispose();
-	});
-
-	test("writes length-prefixed frames to stdin", async () => {
-		const stdin = new PassThrough();
-		const stdout = new PassThrough();
-		const transport = new StdioFrameTransport<string>({
-			stdin,
-			stdout,
-			encodeFrame: (frame) => Buffer.from(frame, "utf8"),
-			decodeFrame: (payload) => Buffer.from(payload).toString("utf8"),
-		});
-		const written = new Promise<Buffer>((resolve) => {
-			stdin.once("data", (chunk: Buffer) => resolve(Buffer.from(chunk)));
-		});
-
-		await transport.writeFrame("hello");
-
-		expect([...(await written)]).toEqual([
-			...encodeLengthPrefixedPayload(Buffer.from("hello")),
-		]);
-		transport.dispose();
-	});
-
-	test("reports decode errors", async () => {
-		const stdin = new PassThrough();
-		const stdout = new PassThrough();
-		const transport = new StdioFrameTransport<string>({
-			stdin,
-			stdout,
-			encodeFrame: (frame) => Buffer.from(frame, "utf8"),
-			decodeFrame: () => {
-				throw new Error("bad frame");
-			},
-		});
-		const error = new Promise<Error>((resolve) => {
-			transport.onError(resolve);
-		});
-
-		stdout.write(encodeLengthPrefixedPayload(Buffer.from("bad")));
-
-		expect((await error).message).toBe("bad frame");
-		transport.dispose();
-	});
-});
diff --git a/packages/core/tests/framing.test.ts b/packages/core/tests/framing.test.ts
deleted file mode 100644
index 58d7a860a..000000000
--- a/packages/core/tests/framing.test.ts
+++ /dev/null
@@ -1,90 +0,0 @@
-import { describe, expect, test } from "vitest";
-import {
-	encodeLengthPrefixedPayload,
-	LENGTH_PREFIX_BYTES,
-	tryDecodeLengthPrefixedPayload,
-} from "../src/framing.js";
-
-function readUint32Be(bytes: Uint8Array): number {
-	return new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength).getUint32(
-		0,
-		false,
-	);
-}
-
-function writeUint32Be(bytes: Uint8Array, value: number): void {
-	new DataView(bytes.buffer, bytes.byteOffset, bytes.byteLength).setUint32(
-		0,
-		value,
-		false,
-	);
-}
-
-function concatBytes(...chunks: Uint8Array[]): Uint8Array {
-	const totalLength = chunks.reduce((sum, chunk) => sum + chunk.length, 0);
-	const combined = new Uint8Array(totalLength);
-	let offset = 0;
-	for (const chunk of chunks) {
-		combined.set(chunk, offset);
-		offset += chunk.length;
-	}
-	return combined;
-}
-
-describe("length-prefixed framing", () => {
-	test("encodes payload length as a four-byte big-endian prefix", () => {
-		const encoded = encodeLengthPrefixedPayload(Uint8Array.from([1, 2, 3]));
-
-		expect(readUint32Be(encoded)).toBe(3);
-		expect([...encoded.subarray(LENGTH_PREFIX_BYTES)]).toEqual([1, 2, 3]);
-	});
-
-	test("waits for complete prefixes and payloads", () => {
-		expect(tryDecodeLengthPrefixedPayload(Uint8Array.from([0, 0]))).toBeNull();
-
-		const encoded = encodeLengthPrefixedPayload(Uint8Array.from([4, 5, 6]));
-		expect(tryDecodeLengthPrefixedPayload(encoded.subarray(0, 5))).toBeNull();
-	});
-
-	test("decodes one payload and returns remaining bytes", () => {
-		const first = encodeLengthPrefixedPayload(Uint8Array.from([7, 8]));
-		const second = encodeLengthPrefixedPayload(Uint8Array.from([9]));
-		const decoded = tryDecodeLengthPrefixedPayload(concatBytes(first, second));
-
-		expect(decoded).not.toBeNull();
-		expect([...(decoded?.payload ?? [])]).toEqual([7, 8]);
-		expect([...(decoded?.remaining ?? [])]).toEqual([...second]);
-	});
-
-	// Adversarial coverage (VECTORS.md E2 / browser TS frame-length cap): a
-	// hostile peer declares an enormous frame length. The decoder must NOT
-	// allocate or slice based on the *declared* length; it only ever yields a
-	// payload once that many real bytes have actually arrived. An oversized
-	// declared length therefore returns null (keep waiting) and never produces
-	// an out-of-bounds read or an unbounded allocation from the length field.
-	test("an oversized declared length never over-reads or over-allocates", () => {
-		// declaredLength = 0xFFFFFFFF (~4 GiB) but only a handful of real bytes.
-		const hostile = new Uint8Array(LENGTH_PREFIX_BYTES + 8);
-		writeUint32Be(hostile, 0xffffffff);
-		hostile.fill(0x41, LENGTH_PREFIX_BYTES);
-
-		// No 4 GiB allocation, no throw: the decoder simply waits for bytes that
-		// will never come and reports "incomplete".
-		expect(tryDecodeLengthPrefixedPayload(hostile)).toBeNull();
-
-		// A frame is only ever emitted when the buffer truly holds frameEnd
-		// bytes, and the emitted payload length equals the declared length and
-		// is bounded by the bytes actually supplied.
-		const honest = encodeLengthPrefixedPayload(Uint8Array.from([1, 2, 3, 4]));
-		const decoded = tryDecodeLengthPrefixedPayload(honest);
-		expect(decoded?.payload.length).toBe(4);
-		expect(decoded?.payload.length).toBeLessThanOrEqual(honest.length);
-	});
-
-	test("a declared length larger than the buffer is treated as incomplete", () => {
-		// Claim 1 KiB but provide only 10 payload bytes.
-		const buf = new Uint8Array(LENGTH_PREFIX_BYTES + 10);
-		writeUint32Be(buf, 1024);
-		expect(tryDecodeLengthPrefixedPayload(buf)).toBeNull();
-	});
-});
diff --git a/packages/core/tests/json.test.ts b/packages/core/tests/json.test.ts
deleted file mode 100644
index ec09ba90a..000000000
--- a/packages/core/tests/json.test.ts
+++ /dev/null
@@ -1,23 +0,0 @@
-import { describe, expect, test } from "vitest";
-import { parseJsonUtf8, stringifyJsonUtf8 } from "../src/json.js";
-
-describe("json utf8 helpers", () => {
-	test("stringifies and parses JSON payloads", () => {
-		const encoded = stringifyJsonUtf8({ ok: true }, "payload");
-
-		expect(encoded).toBe('{"ok":true}');
-		expect(parseJsonUtf8(encoded, "payload")).toEqual({ ok: true });
-	});
-
-	test("rejects non-serializable values", () => {
-		expect(() => stringifyJsonUtf8(undefined, "payload")).toThrow(
-			"payload must be JSON-serializable",
-		);
-	});
-
-	test("adds context to parse errors", () => {
-		expect(() => parseJsonUtf8("{", "payload")).toThrow(
-			"invalid payload JSON payload",
-		);
-	});
-});
diff --git a/packages/core/tests/mount-fs-custom-vfs.test.ts b/packages/core/tests/mount-fs-custom-vfs.test.ts
deleted file mode 100644
index e81efc256..000000000
--- a/packages/core/tests/mount-fs-custom-vfs.test.ts
+++ /dev/null
@@ -1,86 +0,0 @@
-import { afterEach, describe, expect, test } from "vitest";
-import {
-	createInMemoryFileSystem,
-	createKernel,
-	type Kernel,
-	type VirtualFileSystem,
-} from "../src/test-runtime.js";
-
-const VFS_METHODS = [
-	"readFile",
-	"readTextFile",
-	"readDir",
-	"readDirWithTypes",
-	"writeFile",
-	"createDir",
-	"mkdir",
-	"exists",
-	"stat",
-	"removeFile",
-	"removeDir",
-	"rename",
-	"realpath",
-	"symlink",
-	"readlink",
-	"lstat",
-	"link",
-	"chmod",
-	"chown",
-	"utimes",
-	"truncate",
-	"pread",
-	"pwrite",
-] as const;
-
-function createRecordingFilesystem(): {
-	fs: VirtualFileSystem;
-	calls: string[];
-} {
-	const base = createInMemoryFileSystem();
-	const calls: string[] = [];
-	const delegates = base as unknown as Record<
-		(typeof VFS_METHODS)[number],
-		(...args: unknown[]) => unknown
-	>;
-	const fs = Object.fromEntries(
-		VFS_METHODS.map((method) => [
-			method,
-			(...args: unknown[]) => {
-				calls.push(`${method}:${String(args[0])}`);
-				return delegates[method].apply(base, args);
-			},
-		]),
-	) as unknown as VirtualFileSystem;
-
-	return { fs, calls };
-}
-
-describe("Kernel.mountFs custom JS VFS", () => {
-	let kernel: Kernel | undefined;
-
-	afterEach(async () => {
-		await kernel?.dispose();
-		kernel = undefined;
-	});
-
-	test(
-		"routes runtime reads and writes through a plain JS VFS object",
-		async () => {
-			const mounted = createRecordingFilesystem();
-			kernel = createKernel({ filesystem: createInMemoryFileSystem() });
-
-			kernel.mountFs("/mnt/custom", mounted.fs);
-			await kernel.writeFile("/mnt/custom/note.txt", "from custom vfs");
-
-			expect(
-				new TextDecoder().decode(await kernel.readFile("/mnt/custom/note.txt")),
-			).toBe("from custom vfs");
-			expect(mounted.calls).toContain("writeFile:/note.txt");
-			expect(mounted.calls).toContain("readFile:/note.txt");
-
-			kernel.unmountFs("/mnt/custom");
-			await expect(kernel.readFile("/mnt/custom/note.txt")).rejects.toThrow();
-		},
-		120_000,
-	);
-});
diff --git a/packages/core/tests/native-client.test.ts b/packages/core/tests/native-client.test.ts
deleted file mode 100644
index 5a7081410..000000000
--- a/packages/core/tests/native-client.test.ts
+++ /dev/null
@@ -1,136 +0,0 @@
-import { mkdtempSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import { describe, expect, test } from "vitest";
-import { StdioSidecarProtocolClient } from "../src/native-client.js";
-import { SidecarProcess } from "../src/sidecar-process.js";
-
-const ownership = {
-	scope: "connection" as const,
-	connection_id: "conn",
-};
-
-describe("stdio sidecar protocol client", () => {
-	test("drives a stdio protocol process", async () => {
-		const fixtureRoot = mkdtempSync(join(tmpdir(), "secure-exec-client-"));
-		const driverPath = join(fixtureRoot, "fake-sidecar.mjs");
-		writeFileSync(
-			driverPath,
-			[
-				"let stdinBuffer = Buffer.alloc(0);",
-				"const writeFrame = (frame) => {",
-				"  const payload = Buffer.from(JSON.stringify(frame));",
-				"  const header = Buffer.alloc(4);",
-				"  header.writeUInt32BE(payload.length, 0);",
-				"  process.stdout.write(Buffer.concat([header, payload]));",
-				"};",
-				"const handleFrame = (frame) => {",
-				"  if (frame.payload.type !== 'create_layer') {",
-				"    throw new Error(`unexpected payload ${frame.payload.type}`);",
-				"  }",
-				"  writeFrame({",
-				"    frame_type: 'response',",
-				"    schema: frame.schema,",
-				"    request_id: frame.request_id,",
-				"    ownership: frame.ownership,",
-				"    payload: { type: 'layer_created', layer_id: 'layer-1' },",
-				"  });",
-				"};",
-				"const drain = () => {",
-				"  while (stdinBuffer.length >= 4) {",
-				"    const length = stdinBuffer.readUInt32BE(0);",
-				"    if (stdinBuffer.length < 4 + length) return;",
-				"    const payload = stdinBuffer.subarray(4, 4 + length);",
-				"    stdinBuffer = stdinBuffer.subarray(4 + length);",
-				"    handleFrame(JSON.parse(payload.toString('utf8')));",
-				"  }",
-				"};",
-				"process.stdin.on('data', (chunk) => {",
-				"  stdinBuffer = Buffer.concat([stdinBuffer, Buffer.from(chunk)]);",
-				"  drain();",
-				"});",
-				"process.stdin.resume();",
-			].join("\n"),
-		);
-
-		const client = StdioSidecarProtocolClient.spawn({
-			command: process.execPath,
-			args: [driverPath],
-			frameTimeoutMs: 1_000,
-			eventBufferCapacity: 8,
-			payloadCodec: "json",
-		});
-
-		try {
-			await expect(
-				client.sendRequest({
-					ownership,
-					payload: { type: "create_layer" },
-				}),
-			).resolves.toMatchObject({
-				payload: { type: "layer_created", layer_id: "layer-1" },
-			});
-		} finally {
-			await client.dispose();
-		}
-	});
-
-	test("registers native spawn for the shared SidecarProcess wrapper", async () => {
-		const fixtureRoot = mkdtempSync(join(tmpdir(), "secure-exec-process-"));
-		const driverPath = join(fixtureRoot, "fake-sidecar.mjs");
-		writeFileSync(
-			driverPath,
-			[
-				"let stdinBuffer = Buffer.alloc(0);",
-				"const writeFrame = (frame) => {",
-				"  const payload = Buffer.from(JSON.stringify(frame));",
-				"  const header = Buffer.alloc(4);",
-				"  header.writeUInt32BE(payload.length, 0);",
-				"  process.stdout.write(Buffer.concat([header, payload]));",
-				"};",
-				"const handleFrame = (frame) => {",
-				"  writeFrame({",
-				"    frame_type: 'response',",
-				"    schema: frame.schema,",
-				"    request_id: frame.request_id,",
-				"    ownership: frame.ownership,",
-				"    payload: { type: 'layer_created', layer_id: 'layer-1' },",
-				"  });",
-				"};",
-				"const drain = () => {",
-				"  while (stdinBuffer.length >= 4) {",
-				"    const length = stdinBuffer.readUInt32BE(0);",
-				"    if (stdinBuffer.length < 4 + length) return;",
-				"    const payload = stdinBuffer.subarray(4, 4 + length);",
-				"    stdinBuffer = stdinBuffer.subarray(4 + length);",
-				"    handleFrame(JSON.parse(payload.toString('utf8')));",
-				"  }",
-				"};",
-				"process.stdin.on('data', (chunk) => {",
-				"  stdinBuffer = Buffer.concat([stdinBuffer, Buffer.from(chunk)]);",
-				"  drain();",
-				"});",
-				"process.stdin.resume();",
-			].join("\n"),
-		);
-
-		const sidecarProcess = SidecarProcess.spawn({
-			command: process.execPath,
-			args: [driverPath],
-			frameTimeoutMs: 1_000,
-			eventBufferCapacity: 8,
-			payloadCodec: "json",
-		});
-
-		try {
-			await expect(
-				sidecarProcess.createLayer(
-					{ connectionId: "conn", sessionId: "session" },
-					{ vmId: "vm" },
-				),
-			).resolves.toBe("layer-1");
-		} finally {
-			await sidecarProcess.dispose();
-		}
-	});
-});
diff --git a/packages/core/tests/node-runtime-decode.test.ts b/packages/core/tests/node-runtime-decode.test.ts
deleted file mode 100644
index 7eb9cbb54..000000000
--- a/packages/core/tests/node-runtime-decode.test.ts
+++ /dev/null
@@ -1,72 +0,0 @@
-import { readFileSync } from "node:fs";
-import { fileURLToPath } from "node:url";
-import { describe, expect, test } from "vitest";
-
-// Regression guard for #11 and #59.
-//
-// Both issues were caused by the removed `@secure-exec/v8` runtime.js
-// (a stdout/socket-path handshake plus a TDZ bug) together with a host-side
-// `node:v8.deserialize()` decode of `run()` results. That host-side V8
-// serialization made result decoding sensitive to the host Node version /
-// V8 engine build (#11) and crashed on constrained hosts such as Lambda
-// cold-starts (#59).
-//
-// The current architecture runs guest code in a process-isolated sidecar
-// binary and decodes `run()` results as plain JSON read back over the VFS
-// (`packages/core/src/node-runtime.ts`), with NO host-side `node:v8`. These
-// tests lock in that root-cause fix at the source level (so they run in a
-// plain Node-host CI without booting a sidecar) and verify the structured
-// JSON-over-VFS decode behaves correctly for nested values.
-
-const nodeRuntimeSource = readFileSync(
-	fileURLToPath(new URL("../src/node-runtime.ts", import.meta.url)),
-	"utf8",
-);
-
-describe("node-runtime run() result transport (#11, #59)", () => {
-	test("the host transport never uses node:v8 deserialize", () => {
-		// The whole point of the fix: no host-side V8 serialization in the
-		// run()/decode path, which is what made #11 host-engine-sensitive and
-		// crashed Lambda cold-starts in #59.
-		expect(nodeRuntimeSource).not.toContain("node:v8");
-		expect(nodeRuntimeSource).not.toContain("v8.deserialize");
-		expect(nodeRuntimeSource).not.toContain("deserialize(");
-	});
-
-	test("run() decodes structured results as JSON read back over the VFS", () => {
-		// The decode must go through a VFS result file plus JSON.parse over a
-		// TextDecoder, not a host-engine-specific binary deserializer.
-		expect(nodeRuntimeSource).toContain("this.kernel.readFile(resultPath)");
-		expect(nodeRuntimeSource).toMatch(
-			/JSON\.parse\(\s*new TextDecoder\(\)\.decode\(bytes\)/,
-		);
-		// And the guest writes its return value as JSON to that same VFS file.
-		expect(nodeRuntimeSource).toContain(
-			"JSON.stringify(value === undefined ? null : value)",
-		);
-	});
-
-	test("structured nested values round-trip through the JSON-over-VFS path", () => {
-		// Model the exact host/guest decode used by run(): the guest writes
-		// JSON.stringify(value) into a VFS file; the host reads the bytes back
-		// and decodes them with JSON.parse(new TextDecoder().decode(bytes)).
-		// A nested object with numbers must survive intact, with no dependency
-		// on host V8 structured-clone serialization.
-		const value = {
-			ok: true,
-			count: 3,
-			ratio: 1.5,
-			nested: { items: [1, 2, 3], label: "x", deep: { n: 42 } },
-		};
-
-		// Guest side: __return() writes JSON.stringify(value) to the result file.
-		const guestBytes = new TextEncoder().encode(JSON.stringify(value));
-
-		// Host side: node-runtime reads the file bytes and JSON.parses them.
-		const decoded = JSON.parse(new TextDecoder().decode(guestBytes));
-
-		expect(decoded).toEqual(value);
-		expect(decoded.nested.items).toEqual([1, 2, 3]);
-		expect(decoded.nested.deep.n).toBe(42);
-	});
-});
diff --git a/packages/core/tests/node-runtime-exec-output.test.ts b/packages/core/tests/node-runtime-exec-output.test.ts
deleted file mode 100644
index e1f933538..000000000
--- a/packages/core/tests/node-runtime-exec-output.test.ts
+++ /dev/null
@@ -1,31 +0,0 @@
-import { describe, expect, test } from "vitest";
-import { NodeRuntime } from "../src/index.js";
-
-describe("NodeRuntime execCommand output capture", () => {
-	test(
-		"captures complete stdout when a fast process exits immediately",
-		async () => {
-			const runtime = await NodeRuntime.create();
-			const expected = "x".repeat(64 * 1024);
-			const script = [
-				'const fs = require("node:fs");',
-				"const chunk = Buffer.alloc(4096, 120);",
-				"for (let i = 0; i < 16; i += 1) fs.writeSync(1, chunk);",
-				"process.exit(0);",
-			].join(" ");
-
-			try {
-				for (let i = 0; i < 10; i += 1) {
-					const result = await runtime.execCommand("node", ["-e", script]);
-
-					expect(result.exitCode).toBe(0);
-					expect(result.stdout).toBe(expected);
-					expect(result.stderr).toBe("");
-				}
-			} finally {
-				await runtime.dispose();
-			}
-		},
-		120_000,
-	);
-});
diff --git a/packages/core/tests/node-runtime-options-schema.test.ts b/packages/core/tests/node-runtime-options-schema.test.ts
deleted file mode 100644
index d941cd824..000000000
--- a/packages/core/tests/node-runtime-options-schema.test.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-import { describe, expect, test } from "vitest";
-import {
-	NodeRuntime,
-	nodeRuntimeCreateOptionsSchema,
-} from "../src/index.js";
-
-describe("NodeRuntime create options validation", () => {
-	test("rejects unknown top-level options before booting a VM", async () => {
-		await expect(
-			NodeRuntime.create({
-				notARealOption: true,
-			} as never),
-		).rejects.toThrow(/notARealOption/);
-	});
-
-	test("rejects unknown nested permission fields", () => {
-		expect(() =>
-			nodeRuntimeCreateOptionsSchema.parse({
-				permissions: {
-					filesystem: "allow",
-				},
-			}),
-		).toThrow(/filesystem/);
-	});
-});
diff --git a/packages/core/tests/numbers.test.ts b/packages/core/tests/numbers.test.ts
deleted file mode 100644
index a7ac55c64..000000000
--- a/packages/core/tests/numbers.test.ts
+++ /dev/null
@@ -1,20 +0,0 @@
-import { describe, expect, test } from "vitest";
-import { bigIntToSafeNumber } from "../src/numbers.js";
-
-describe("number helpers", () => {
-	test("converts safe bigint values", () => {
-		expect(bigIntToSafeNumber(42n, "value")).toBe(42);
-		expect(bigIntToSafeNumber(BigInt(Number.MIN_SAFE_INTEGER), "value")).toBe(
-			Number.MIN_SAFE_INTEGER,
-		);
-	});
-
-	test("rejects values outside JavaScript safe integer range", () => {
-		expect(() =>
-			bigIntToSafeNumber(BigInt(Number.MAX_SAFE_INTEGER) + 1n, "value"),
-		).toThrow("value exceeds JavaScript safe integer range");
-		expect(() =>
-			bigIntToSafeNumber(BigInt(Number.MIN_SAFE_INTEGER) - 1n, "value"),
-		).toThrow("value exceeds JavaScript safe integer range");
-	});
-});
diff --git a/packages/core/tests/ownership.test.ts b/packages/core/tests/ownership.test.ts
deleted file mode 100644
index e30a720ba..000000000
--- a/packages/core/tests/ownership.test.ts
+++ /dev/null
@@ -1,47 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-	fromGeneratedOwnershipScope,
-	ownershipMatchesSelector,
-	ownershipSelectorKey,
-	toGeneratedOwnershipScope,
-	type LiveOwnershipScope,
-} from "../src/ownership.js";
-
-const vmOwnership: LiveOwnershipScope = {
-	scope: "vm",
-	connection_id: "conn",
-	session_id: "session",
-	vm_id: "vm",
-};
-
-describe("ownership", () => {
-	it("builds stable selector keys", () => {
-		expect(ownershipSelectorKey({ scope: "connection", connection_id: "c" }))
-			.toBe("connection:c");
-		expect(
-			ownershipSelectorKey({
-				scope: "session",
-				connection_id: "c",
-				session_id: "s",
-			}),
-		).toBe("session:c:s");
-		expect(ownershipSelectorKey(vmOwnership)).toBe("vm:conn:session:vm");
-	});
-
-	it("matches ownership selectors exactly", () => {
-		expect(ownershipMatchesSelector(undefined, vmOwnership)).toBe(true);
-		expect(ownershipMatchesSelector(vmOwnership, vmOwnership)).toBe(true);
-		expect(
-			ownershipMatchesSelector(
-				{ scope: "session", connection_id: "conn", session_id: "session" },
-				vmOwnership,
-			),
-		).toBe(false);
-	});
-
-	it("round-trips live ownership through generated protocol shapes", () => {
-		expect(
-			fromGeneratedOwnershipScope(toGeneratedOwnershipScope(vmOwnership)),
-		).toEqual(vmOwnership);
-	});
-});
diff --git a/packages/core/tests/permissions.test.ts b/packages/core/tests/permissions.test.ts
deleted file mode 100644
index 497096a43..000000000
--- a/packages/core/tests/permissions.test.ts
+++ /dev/null
@@ -1,87 +0,0 @@
-import { describe, expect, it } from "vitest";
-import * as protocol from "../src/generated-protocol.js";
-import {
-	toGeneratedFilesystemPermissionScope,
-	toGeneratedPatternPermissionScope,
-	toGeneratedPermissionsPolicy,
-} from "../src/permissions.js";
-
-describe("permissions", () => {
-	it("returns null when no policy is supplied", () => {
-		expect(toGeneratedPermissionsPolicy(undefined)).toBe(null);
-	});
-
-	it("maps direct permission modes", () => {
-		expect(toGeneratedPermissionsPolicy({ fs: "deny" })).toMatchObject({
-			fs: {
-				tag: "PermissionMode",
-				val: protocol.PermissionMode.Deny,
-			},
-		});
-	});
-
-	it("maps filesystem rule sets", () => {
-		expect(
-			toGeneratedFilesystemPermissionScope({
-				default: "ask",
-				rules: [
-					{ mode: "allow", operations: ["read"], paths: ["/tmp"] },
-				],
-			}),
-		).toEqual({
-			tag: "FsPermissionRuleSet",
-			val: {
-				default: protocol.PermissionMode.Ask,
-				rules: [
-					{
-						mode: protocol.PermissionMode.Allow,
-						operations: ["read"],
-						paths: ["/tmp"],
-					},
-				],
-			},
-		});
-	});
-
-	it("maps pattern rule sets", () => {
-		expect(
-			toGeneratedPatternPermissionScope({
-				rules: [{ mode: "deny", patterns: ["*.local"] }],
-			}),
-		).toEqual({
-			tag: "PatternPermissionRuleSet",
-			val: {
-				default: null,
-				rules: [
-					{
-						mode: protocol.PermissionMode.Deny,
-						operations: [],
-						patterns: ["*.local"],
-					},
-				],
-			},
-		});
-	});
-
-	it("maps child_process to generated childProcess", () => {
-		expect(
-			toGeneratedPermissionsPolicy({
-				child_process: {
-					rules: [{ mode: "allow", operations: ["spawn"] }],
-				},
-			})?.childProcess,
-		).toEqual({
-			tag: "PatternPermissionRuleSet",
-			val: {
-				default: null,
-				rules: [
-					{
-						mode: protocol.PermissionMode.Allow,
-						operations: ["spawn"],
-						patterns: [],
-					},
-				],
-			},
-		});
-	});
-});
diff --git a/packages/core/tests/process.test.ts b/packages/core/tests/process.test.ts
deleted file mode 100644
index 23097f873..000000000
--- a/packages/core/tests/process.test.ts
+++ /dev/null
@@ -1,52 +0,0 @@
-import { PassThrough } from "node:stream";
-import { describe, expect, test } from "vitest";
-import {
-	SidecarProcessError,
-	SidecarProcessExited,
-	StdioSidecarProcess,
-} from "../src/process.js";
-
-describe("stdio sidecar process monitor", () => {
-	test("formats process exit errors with stderr", () => {
-		const error = new SidecarProcessExited({
-			exitCode: 7,
-			signal: null,
-			stderr: "boom",
-		});
-
-		expect(error.message).toBe("sidecar process exited with code 7\nstderr:\nboom");
-		expect(error.exitCode).toBe(7);
-		expect(error.signal).toBeNull();
-		expect(error.stderr).toBe("boom");
-	});
-
-	test("formats process spawn errors with stderr", () => {
-		const error = new SidecarProcessError(new Error("missing"), "nope");
-
-		expect(error.message).toBe("sidecar process error: missing\nstderr:\nnope");
-		expect(error.childError.message).toBe("missing");
-		expect(error.stderr).toBe("nope");
-	});
-
-	test("captures stderr chunks from a child-like process", async () => {
-		const child = {
-			stdin: new PassThrough(),
-			stdout: new PassThrough(),
-			stderr: new PassThrough(),
-			exitCode: null,
-			signalCode: null,
-			on() {
-				return this;
-			},
-			off() {
-				return this;
-			},
-		} as unknown as Parameters<typeof StdioSidecarProcess.fromChild>[0];
-		const monitor = StdioSidecarProcess.fromChild(child);
-
-		child.stderr.write("first");
-		child.stderr.write(Buffer.from(" second"));
-
-		expect(monitor.stderrText()).toBe("first second");
-	});
-});
diff --git a/packages/core/tests/protocol-client.test.ts b/packages/core/tests/protocol-client.test.ts
deleted file mode 100644
index cc9908f0c..000000000
--- a/packages/core/tests/protocol-client.test.ts
+++ /dev/null
@@ -1,238 +0,0 @@
-import { PassThrough } from "node:stream";
-import { describe, expect, it } from "vitest";
-import type { FrameTransport } from "../src/frame-stream.js";
-import { encodeLengthPrefixedPayload } from "../src/framing.js";
-import {
-	encodeProtocolFramePayload,
-	type LiveProtocolFrame,
-	type LiveResponseFrame,
-	type LiveEventFrame,
-	type LiveSidecarRequestFrame,
-} from "../src/protocol-frames.js";
-import { SidecarProtocolClient } from "../src/protocol-client.js";
-import { SIDECAR_PROTOCOL_SCHEMA } from "../src/protocol-schema.js";
-
-const ownership = {
-	scope: "connection" as const,
-	connection_id: "conn",
-};
-
-function createClient() {
-	const stdin = new PassThrough();
-	const stdout = new PassThrough();
-	const client = new SidecarProtocolClient({
-		stdin,
-		stdout,
-		frameTimeoutMs: 1_000,
-		eventBufferCapacity: 8,
-		payloadCodec: "json",
-		stderrText: () => "stderr",
-	});
-	return { stdin, stdout, client };
-}
-
-class MemoryFrameTransport
-	implements
-		FrameTransport<
-			LiveResponseFrame | LiveEventFrame | LiveSidecarRequestFrame,
-			LiveProtocolFrame
-		>
-{
-	readonly writes: LiveProtocolFrame[] = [];
-	private readonly frameListeners = new Set<
-		(frame: LiveResponseFrame | LiveEventFrame | LiveSidecarRequestFrame) => void
-	>();
-	private readonly errorListeners = new Set<(error: Error) => void>();
-	private readonly endListeners = new Set<() => void>();
-
-	onFrame(
-		handler: (frame: LiveResponseFrame | LiveEventFrame | LiveSidecarRequestFrame) => void,
-	): () => void {
-		this.frameListeners.add(handler);
-		return () => {
-			this.frameListeners.delete(handler);
-		};
-	}
-
-	onError(handler: (error: Error) => void): () => void {
-		this.errorListeners.add(handler);
-		return () => {
-			this.errorListeners.delete(handler);
-		};
-	}
-
-	onEnd(handler: () => void): () => void {
-		this.endListeners.add(handler);
-		return () => {
-			this.endListeners.delete(handler);
-		};
-	}
-
-	async writeFrame(frame: LiveProtocolFrame): Promise<void> {
-		this.writes.push(frame);
-	}
-
-	emitFrame(frame: LiveResponseFrame | LiveEventFrame | LiveSidecarRequestFrame): void {
-		for (const listener of this.frameListeners) {
-			listener(frame);
-		}
-	}
-
-	dispose(): void {
-		this.frameListeners.clear();
-		this.errorListeners.clear();
-		this.endListeners.clear();
-	}
-}
-
-function readWrittenFrame(stdin: PassThrough): Promise<unknown> {
-	return new Promise((resolve) => {
-		stdin.once("data", (chunk: Buffer) => {
-			const payloadLength = chunk.readUInt32BE(0);
-			resolve(
-				JSON.parse(chunk.subarray(4, 4 + payloadLength).toString("utf8")),
-			);
-		});
-	});
-}
-
-function writeIncomingFrame(stdout: PassThrough, frame: LiveProtocolFrame): void {
-	stdout.write(
-		encodeLengthPrefixedPayload(encodeProtocolFramePayload(frame, "json")),
-	);
-}
-
-describe("sidecar protocol client", () => {
-	it("sends host request frames and correlates responses", async () => {
-		const { stdin, stdout, client } = createClient();
-		const written = readWrittenFrame(stdin);
-
-		const response = client.sendRequest({
-			ownership,
-			payload: { type: "create_layer" },
-		});
-
-		await expect(written).resolves.toMatchObject({
-			frame_type: "request",
-			request_id: 1,
-			payload: { type: "create_layer" },
-		});
-
-		writeIncomingFrame(stdout, {
-			frame_type: "response",
-			schema: SIDECAR_PROTOCOL_SCHEMA,
-			request_id: 1,
-			ownership,
-			payload: { type: "layer_created", layer_id: "layer" },
-		});
-
-		await expect(response).resolves.toMatchObject({
-			frame_type: "response",
-			request_id: 1,
-			payload: { type: "layer_created", layer_id: "layer" },
-		});
-		client.dispose();
-	});
-
-	it("can run over an injected non-stdio frame transport", async () => {
-		const frameTransport = new MemoryFrameTransport();
-		const client = new SidecarProtocolClient({
-			frameTransport,
-			frameTimeoutMs: 1_000,
-			eventBufferCapacity: 8,
-			payloadCodec: "json",
-			stderrText: () => "stderr",
-		});
-
-		const response = client.sendRequest({
-			ownership,
-			payload: { type: "create_layer" },
-		});
-
-		await expect.poll(() => frameTransport.writes.length).toBe(1);
-		expect(frameTransport.writes[0]).toMatchObject({
-			frame_type: "request",
-			request_id: 1,
-			payload: { type: "create_layer" },
-		});
-
-		frameTransport.emitFrame({
-			frame_type: "response",
-			schema: SIDECAR_PROTOCOL_SCHEMA,
-			request_id: 1,
-			ownership,
-			payload: { type: "layer_created", layer_id: "layer" },
-		});
-
-		await expect(response).resolves.toMatchObject({
-			frame_type: "response",
-			request_id: 1,
-			payload: { type: "layer_created", layer_id: "layer" },
-		});
-		client.dispose();
-	});
-
-	it("delivers event frames to waiters", async () => {
-		const { stdout, client } = createClient();
-		const event = client.waitForEvent({
-			type: "structured",
-			name: "ready",
-		});
-
-		writeIncomingFrame(stdout, {
-			frame_type: "event",
-			schema: SIDECAR_PROTOCOL_SCHEMA,
-			ownership,
-			payload: {
-				type: "structured",
-				name: "ready",
-				detail: { ok: "true" },
-			},
-		});
-
-		await expect(event).resolves.toMatchObject({
-			frame_type: "event",
-			payload: {
-				type: "structured",
-				name: "ready",
-				detail: { ok: "true" },
-			},
-		});
-		client.dispose();
-	});
-
-	it("writes sidecar request handler responses", async () => {
-		const { stdin, stdout, client } = createClient();
-		const written = readWrittenFrame(stdin);
-		client.setSidecarRequestHandler(async () => ({
-			type: "host_callback_result",
-			invocation_id: "invocation",
-			result: { ok: true },
-		}));
-
-		writeIncomingFrame(stdout, {
-			frame_type: "sidecar_request",
-			schema: SIDECAR_PROTOCOL_SCHEMA,
-			request_id: 7,
-			ownership,
-			payload: {
-				type: "host_callback",
-				invocation_id: "invocation",
-				callback_key: "tool",
-				input: {},
-				timeout_ms: 1000,
-			},
-		});
-
-		await expect(written).resolves.toMatchObject({
-			frame_type: "sidecar_response",
-			request_id: 7,
-			payload: {
-				type: "host_callback_result",
-				invocation_id: "invocation",
-				result: { ok: true },
-			},
-		});
-		client.dispose();
-	});
-});
diff --git a/packages/core/tests/protocol-frames.test.ts b/packages/core/tests/protocol-frames.test.ts
deleted file mode 100644
index aecf68006..000000000
--- a/packages/core/tests/protocol-frames.test.ts
+++ /dev/null
@@ -1,360 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-	HostProtocolFrameFactory,
-	classifySidecarWrittenProtocolFrame,
-	decodeBareProtocolFrame,
-	decodeProtocolFramePayload,
-	encodeBareProtocolFrame,
-	encodeProtocolFramePayload,
-	fromGeneratedSidecarWrittenProtocolFrame,
-	resolveSidecarRequestFramePayload,
-	toGeneratedProtocolFrame,
-} from "../src/protocol-frames.js";
-import * as protocol from "../src/generated-protocol.js";
-import { SIDECAR_PROTOCOL_SCHEMA } from "../src/protocol-schema.js";
-
-const textDecoder = new TextDecoder();
-
-const ownership = {
-	scope: "connection" as const,
-	connection_id: "conn",
-};
-
-const generatedAuthOwnership = {
-	scope: "connection" as const,
-	connection_id: "conn-1",
-};
-
-const GENERATED_AUTH_FRAME_HEX =
-	"00137365637572652d657865632d73696465636172070007000000000000000006636f6e6e2d31000e67656e6572617465642d7465737405746f6b656e070001000000";
-
-const hostCallbackRequest = {
-	frame_type: "sidecar_request" as const,
-	schema: SIDECAR_PROTOCOL_SCHEMA,
-	request_id: 7,
-	ownership,
-	payload: {
-		type: "host_callback" as const,
-		invocation_id: "invocation",
-		callback_key: "tool",
-		input: {},
-		timeout_ms: 1000,
-	},
-};
-
-describe("protocol frame conversion", () => {
-	it("creates host-written request and sidecar response frames", () => {
-		const factory = new HostProtocolFrameFactory();
-
-		const first = factory.createRequestFrame({
-			ownership,
-			payload: {
-				type: "authenticate",
-				client_name: "agentos",
-				auth_token: "token",
-				protocol_version: 7,
-				bridge_version: 1,
-			},
-		});
-		const second = factory.createRequestFrame({
-			ownership,
-			payload: {
-				type: "create_layer",
-			},
-		});
-
-		expect(first).toMatchObject({
-			frame_type: "request",
-			schema: SIDECAR_PROTOCOL_SCHEMA,
-			request_id: 1,
-			ownership,
-		});
-		expect(second.request_id).toBe(2);
-		expect(
-			factory.createSidecarResponseFrame({
-				request: hostCallbackRequest,
-				payload: {
-					type: "host_callback_result",
-					invocation_id: "invocation",
-					result: { ok: true },
-				},
-			}),
-		).toEqual({
-			frame_type: "sidecar_response",
-			schema: SIDECAR_PROTOCOL_SCHEMA,
-			request_id: 7,
-			ownership,
-			payload: {
-				type: "host_callback_result",
-				invocation_id: "invocation",
-				result: { ok: true },
-			},
-		});
-	});
-
-	it("resolves sidecar request frame handlers", async () => {
-		await expect(
-			resolveSidecarRequestFramePayload(hostCallbackRequest, async () => ({
-				type: "host_callback_result",
-				invocation_id: "invocation",
-				result: { ok: true },
-			})),
-		).resolves.toEqual({
-			type: "host_callback_result",
-			invocation_id: "invocation",
-			result: { ok: true },
-		});
-	});
-
-	it("returns error payloads for missing or mismatched sidecar handlers", async () => {
-		await expect(
-			resolveSidecarRequestFramePayload(hostCallbackRequest, null),
-		).resolves.toMatchObject({
-			type: "host_callback_result",
-			invocation_id: "invocation",
-			error:
-				"no sidecar request handler registered for host_callback",
-		});
-
-		await expect(
-			resolveSidecarRequestFramePayload(hostCallbackRequest, async () => ({
-				type: "js_bridge_result",
-				call_id: "call",
-				result: {},
-			})),
-		).resolves.toMatchObject({
-			type: "host_callback_result",
-			invocation_id: "invocation",
-			error:
-				"sidecar handler returned js_bridge_result for host_callback",
-		});
-	});
-
-	it("maps host-written request frames to generated protocol frames", () => {
-		expect(
-			toGeneratedProtocolFrame({
-				frame_type: "request",
-				schema: SIDECAR_PROTOCOL_SCHEMA,
-				request_id: 7,
-				ownership,
-				payload: {
-					type: "authenticate",
-					client_name: "agentos",
-					auth_token: "token",
-					protocol_version: 7,
-					bridge_version: 1,
-				},
-			}),
-		).toMatchObject({
-			tag: "RequestFrame",
-			val: {
-				requestId: 7n,
-				payload: {
-					tag: "AuthenticateRequest",
-				},
-			},
-		});
-	});
-
-	it("encodes host-written frames as BARE protocol bytes", () => {
-		const encoded = encodeBareProtocolFrame({
-			frame_type: "sidecar_response",
-			schema: SIDECAR_PROTOCOL_SCHEMA,
-			request_id: 8,
-			ownership,
-			payload: {
-				type: "host_callback_result",
-				invocation_id: "invocation",
-				result: { ok: true },
-			},
-		});
-
-		expect(
-			protocol.decodeProtocolFrame(new Uint8Array(encoded)).tag,
-		).toBe("SidecarResponseFrame");
-	});
-
-	it("matches native generated auth frame BARE bytes", () => {
-		const encoded = encodeBareProtocolFrame({
-			frame_type: "request",
-			schema: SIDECAR_PROTOCOL_SCHEMA,
-			request_id: 7,
-			ownership: generatedAuthOwnership,
-			payload: {
-				type: "authenticate",
-				client_name: "generated-test",
-				auth_token: "token",
-				protocol_version: SIDECAR_PROTOCOL_SCHEMA.version,
-				bridge_version: 1,
-			},
-		});
-
-		expect(Buffer.from(encoded).toString("hex")).toBe(GENERATED_AUTH_FRAME_HEX);
-		expect(protocol.decodeProtocolFrame(new Uint8Array(encoded))).toMatchObject({
-			tag: "RequestFrame",
-			val: {
-				requestId: 7n,
-				payload: { tag: "AuthenticateRequest" },
-			},
-		});
-	});
-
-	it("decodes sidecar-written response frames from generated protocol frames", () => {
-		expect(
-			fromGeneratedSidecarWrittenProtocolFrame({
-				tag: "ResponseFrame",
-				val: {
-					schema: SIDECAR_PROTOCOL_SCHEMA,
-					requestId: 9n,
-					ownership: {
-						tag: "ConnectionOwnership",
-						val: { connectionId: "conn" },
-					},
-					payload: {
-						tag: "VmCreatedResponse",
-						val: { vmId: "vm" },
-					},
-				},
-			}),
-		).toEqual({
-			frame_type: "response",
-			schema: SIDECAR_PROTOCOL_SCHEMA,
-			request_id: 9,
-			ownership,
-			payload: { type: "vm_created", vm_id: "vm" },
-		});
-	});
-
-	it("decodes sidecar-written event frames from BARE bytes", () => {
-		const bytes = protocol.encodeProtocolFrame({
-			tag: "EventFrame",
-			val: {
-				schema: SIDECAR_PROTOCOL_SCHEMA,
-				ownership: {
-					tag: "ConnectionOwnership",
-					val: { connectionId: "conn" },
-				},
-				payload: {
-					tag: "StructuredEvent",
-					val: {
-						name: "ready",
-						detail: new Map([["ok", "true"]]),
-					},
-				},
-			},
-		});
-
-		expect(decodeBareProtocolFrame(bytes)).toEqual({
-			frame_type: "event",
-			schema: SIDECAR_PROTOCOL_SCHEMA,
-			ownership,
-			payload: {
-				type: "structured",
-				name: "ready",
-				detail: { ok: "true" },
-			},
-		});
-	});
-
-	it("encodes and decodes JSON compatibility protocol frames", () => {
-		const encoded = encodeProtocolFramePayload(
-			{
-				frame_type: "event",
-				schema: SIDECAR_PROTOCOL_SCHEMA,
-				ownership,
-				payload: {
-					type: "process_output",
-					process_id: "proc",
-					channel: "stdout",
-					chunk: new Uint8Array([1, 2, 3]),
-				},
-			},
-			"json",
-		);
-
-		expect(JSON.parse(textDecoder.decode(encoded)).payload.chunk).toEqual([
-			1, 2, 3,
-		]);
-
-		const decoded = decodeProtocolFramePayload(encoded, "json");
-		if (
-			decoded.frame_type !== "event" ||
-			decoded.payload.type !== "process_output"
-		) {
-			throw new Error("expected process_output event");
-		}
-		expect(decoded.payload.chunk).toBeInstanceOf(Uint8Array);
-		expect(Array.from(decoded.payload.chunk)).toEqual([1, 2, 3]);
-	});
-
-	it("classifies sidecar-written protocol frames for RPC dispatch", () => {
-		expect(
-			classifySidecarWrittenProtocolFrame({
-				frame_type: "response",
-				schema: SIDECAR_PROTOCOL_SCHEMA,
-				request_id: 10,
-				ownership,
-				payload: { type: "vm_created", vm_id: "vm" },
-			}),
-		).toMatchObject({
-			kind: "response",
-			requestId: 10,
-			frame: { frame_type: "response" },
-		});
-
-		expect(
-			classifySidecarWrittenProtocolFrame({
-				frame_type: "event",
-				schema: SIDECAR_PROTOCOL_SCHEMA,
-				ownership,
-				payload: {
-					type: "structured",
-					name: "ready",
-					detail: {},
-				},
-			}),
-		).toMatchObject({
-			kind: "event",
-			frame: { frame_type: "event" },
-		});
-
-		expect(
-			classifySidecarWrittenProtocolFrame({
-				frame_type: "sidecar_request",
-				schema: SIDECAR_PROTOCOL_SCHEMA,
-				request_id: 11,
-				ownership,
-				payload: {
-					type: "host_callback",
-					invocation_id: "invocation",
-					callback_key: "tool",
-					input: { ok: true },
-					timeout_ms: 1_000,
-				},
-			}),
-		).toMatchObject({
-			kind: "sidecarRequest",
-			frame: { frame_type: "sidecar_request" },
-		});
-	});
-
-	it("rejects host-written generated frames on the sidecar-written decode path", () => {
-		expect(() =>
-			fromGeneratedSidecarWrittenProtocolFrame({
-				tag: "RequestFrame",
-				val: {
-					schema: SIDECAR_PROTOCOL_SCHEMA,
-					requestId: 1n,
-					ownership: {
-						tag: "ConnectionOwnership",
-						val: { connectionId: "conn" },
-					},
-					payload: {
-						tag: "CreateLayerRequest",
-						val: null,
-					},
-				},
-			}),
-		).toThrow("unsupported BARE protocol frame tag: RequestFrame");
-	});
-});
diff --git a/packages/core/tests/protocol-maps.test.ts b/packages/core/tests/protocol-maps.test.ts
deleted file mode 100644
index fc3bf7633..000000000
--- a/packages/core/tests/protocol-maps.test.ts
+++ /dev/null
@@ -1,82 +0,0 @@
-import { describe, expect, it } from "vitest";
-import * as protocol from "../src/generated-protocol.js";
-import {
-	fromGeneratedGuestFilesystemOperation,
-	fromGeneratedProcessSnapshotStatus,
-	fromGeneratedRootFilesystemEntryEncoding,
-	fromGeneratedRootFilesystemEntryKind,
-	fromGeneratedSignalDispositionAction,
-	fromGeneratedStreamChannel,
-	fromGeneratedVmLifecycleState,
-	toGeneratedDisposeReason,
-	toGeneratedGuestFilesystemOperation,
-	toGeneratedGuestRuntimeKind,
-	toGeneratedPermissionMode,
-	toGeneratedRootFilesystemEntryEncoding,
-	toGeneratedRootFilesystemEntryKind,
-	toGeneratedRootFilesystemMode,
-	toGeneratedWasmPermissionTier,
-} from "../src/protocol-maps.js";
-
-describe("protocol maps", () => {
-	it("maps live scalar strings to generated enums", () => {
-		expect(toGeneratedPermissionMode("allow")).toBe(
-			protocol.PermissionMode.Allow,
-		);
-		expect(toGeneratedGuestRuntimeKind("python")).toBe(
-			protocol.GuestRuntimeKind.Python,
-		);
-		expect(toGeneratedDisposeReason("host_shutdown")).toBe(
-			protocol.DisposeReason.HostShutdown,
-		);
-		expect(toGeneratedRootFilesystemMode("read_only")).toBe(
-			protocol.RootFilesystemMode.ReadOnly,
-		);
-		expect(toGeneratedRootFilesystemEntryKind("symlink")).toBe(
-			protocol.RootFilesystemEntryKind.Symlink,
-		);
-		expect(toGeneratedRootFilesystemEntryEncoding("base64")).toBe(
-			protocol.RootFilesystemEntryEncoding.BasE64,
-		);
-		expect(toGeneratedWasmPermissionTier("read-write")).toBe(
-			protocol.WasmPermissionTier.ReadWrite,
-		);
-		expect(toGeneratedGuestFilesystemOperation("pread")).toBe(
-			protocol.GuestFilesystemOperation.Pread,
-		);
-	});
-
-	it("maps generated enums to live scalar strings", () => {
-		expect(
-			fromGeneratedVmLifecycleState(protocol.VmLifecycleState.Disposed),
-		).toBe("disposed");
-		expect(fromGeneratedStreamChannel(protocol.StreamChannel.Stderr)).toBe(
-			"stderr",
-		);
-		expect(
-			fromGeneratedProcessSnapshotStatus(
-				protocol.ProcessSnapshotStatus.Stopped,
-			),
-		).toBe("stopped");
-		expect(
-			fromGeneratedSignalDispositionAction(
-				protocol.SignalDispositionAction.Ignore,
-			),
-		).toBe("ignore");
-		expect(
-			fromGeneratedRootFilesystemEntryKind(
-				protocol.RootFilesystemEntryKind.Directory,
-			),
-		).toBe("directory");
-		expect(
-			fromGeneratedRootFilesystemEntryEncoding(
-				protocol.RootFilesystemEntryEncoding.UtF8,
-			),
-		).toBe("utf8");
-		expect(
-			fromGeneratedGuestFilesystemOperation(
-				protocol.GuestFilesystemOperation.ReadLink,
-			),
-		).toBe("read_link");
-	});
-});
diff --git a/packages/core/tests/protocol-schema.test.ts b/packages/core/tests/protocol-schema.test.ts
deleted file mode 100644
index a1606e871..000000000
--- a/packages/core/tests/protocol-schema.test.ts
+++ /dev/null
@@ -1,25 +0,0 @@
-import { describe, expect, it } from "vitest";
-import {
-	SIDECAR_PROTOCOL_SCHEMA,
-	validateSidecarProtocolSchema,
-} from "../src/protocol-schema.js";
-
-describe("protocol schema", () => {
-	it("returns the canonical schema for the supported sidecar protocol", () => {
-		expect(
-			validateSidecarProtocolSchema({
-				name: "secure-exec-sidecar",
-				version: 7,
-			}),
-		).toBe(SIDECAR_PROTOCOL_SCHEMA);
-	});
-
-	it("rejects unsupported schema versions with context", () => {
-		expect(() =>
-			validateSidecarProtocolSchema({
-				name: "secure-exec-sidecar",
-				version: 4,
-			}),
-		).toThrow("unsupported sidecar protocol schema secure-exec-sidecar@4");
-	});
-});
diff --git a/packages/core/tests/protocol.test.ts b/packages/core/tests/protocol.test.ts
deleted file mode 100644
index 6dda47953..000000000
--- a/packages/core/tests/protocol.test.ts
+++ /dev/null
@@ -1,9 +0,0 @@
-import { describe, expect, test } from "vitest";
-import { protocol } from "../src/index.js";
-
-describe("@secure-exec/core raw protocol", () => {
-	test("exports generated ExtEnvelope codec", () => {
-		expect(protocol.writeExtEnvelope).toBeTypeOf("function");
-		expect(protocol.readExtEnvelope).toBeTypeOf("function");
-	});
-});
diff --git a/packages/core/tests/request-payloads.test.ts b/packages/core/tests/request-payloads.test.ts
deleted file mode 100644
index c9b76f6ab..000000000
--- a/packages/core/tests/request-payloads.test.ts
+++ /dev/null
@@ -1,261 +0,0 @@
-import { describe, expect, it } from "vitest";
-import * as protocol from "../src/generated-protocol.js";
-import { toGeneratedRequestPayload } from "../src/request-payloads.js";
-
-describe("request payload conversion", () => {
-	it("maps authentication and session requests", () => {
-		expect(
-			toGeneratedRequestPayload({
-				type: "authenticate",
-				client_name: "agentos",
-				auth_token: "token",
-				protocol_version: 7,
-				bridge_version: 1,
-			}),
-		).toEqual({
-			tag: "AuthenticateRequest",
-			val: {
-				clientName: "agentos",
-				authToken: "token",
-				protocolVersion: 7,
-				bridgeVersion: 1,
-			},
-		});
-
-		expect(
-			toGeneratedRequestPayload({
-				type: "open_session",
-				placement: { kind: "shared", pool: "default" },
-				metadata: { owner: "test" },
-			}),
-		).toEqual({
-			tag: "OpenSessionRequest",
-			val: {
-				placement: {
-					tag: "SidecarPlacementShared",
-					val: { pool: "default" },
-				},
-				metadata: new Map([["owner", "test"]]),
-			},
-		});
-	});
-
-	it("maps VM creation and configuration requests", () => {
-		const createVmPayload = toGeneratedRequestPayload({
-			type: "create_vm",
-			runtime: "java_script",
-			config: {
-				env: {},
-				rootFilesystem: {
-					mode: "read-only",
-					disableDefaultBaseLayer: true,
-					lowers: [],
-					bootstrapEntries: [{ path: "/tmp", kind: "directory" }],
-				},
-				permissions: { fs: "allow" },
-				loopbackExemptPorts: [],
-			},
-		});
-		expect(createVmPayload).toMatchObject({
-			tag: "CreateVmRequest",
-			val: {
-				runtime: protocol.GuestRuntimeKind.JavaScript,
-			},
-		});
-		expect(JSON.parse(createVmPayload.val.config)).toMatchObject({
-			rootFilesystem: {
-				mode: "read-only",
-				disableDefaultBaseLayer: true,
-				bootstrapEntries: [{ path: "/tmp", kind: "directory" }],
-			},
-			permissions: { fs: "allow" },
-		});
-
-		expect(
-			toGeneratedRequestPayload({
-				type: "configure_vm",
-				mounts: [
-					{
-						guest_path: "/workspace",
-						read_only: true,
-						plugin: { id: "host", config: { source: "/src" } },
-					},
-				],
-				software: [{ package_name: "node", root: "/software/node" }],
-				instructions: ["use node"],
-				projected_modules: [
-					{ package_name: "@acme/tool", entrypoint: "dist/index.js" },
-				],
-				command_permissions: { node: "read-only" },
-				loopback_exempt_ports: [8080],
-			}),
-		).toMatchObject({
-			tag: "ConfigureVmRequest",
-			val: {
-				moduleAccessCwd: null,
-				instructions: ["use node"],
-				commandPermissions: new Map([
-					["node", protocol.WasmPermissionTier.ReadOnly],
-				]),
-			},
-		});
-	});
-
-	it("maps resource snapshot requests", () => {
-		expect(
-			toGeneratedRequestPayload({
-				type: "get_resource_snapshot",
-			}),
-		).toEqual({ tag: "GetResourceSnapshotRequest", val: null });
-	});
-
-	it("maps host callback registration JSON fields", () => {
-		expect(
-			toGeneratedRequestPayload({
-				type: "register_host_callbacks",
-				name: "tools",
-				description: "demo tools",
-				command_aliases: ["agentos-tools"],
-				registry_command_aliases: ["agentos"],
-				callbacks: {
-					read: {
-						description: "read a file",
-						input_schema: { type: "object" },
-						timeout_ms: 2500,
-						examples: [{ description: "basic", input: { path: "/tmp" } }],
-					},
-				},
-			}),
-		).toEqual({
-			tag: "RegisterHostCallbacksRequest",
-			val: {
-				name: "tools",
-				description: "demo tools",
-				commandAliases: ["agentos-tools"],
-				registryCommandAliases: ["agentos"],
-				callbacks: new Map([
-					[
-						"read",
-						{
-							description: "read a file",
-							inputSchema: '{"type":"object"}',
-							timeoutMs: 2500n,
-							examples: [
-								{
-									description: "basic",
-									input: '{"path":"/tmp"}',
-								},
-							],
-						},
-					],
-				]),
-			},
-		});
-	});
-
-	it("maps filesystem and process requests", () => {
-		expect(
-			toGeneratedRequestPayload({
-				type: "guest_filesystem_call",
-				operation: "pread",
-				path: "/tmp/file",
-				len: 10,
-				offset: 2,
-				encoding: "base64",
-			}),
-		).toEqual({
-			tag: "GuestFilesystemCallRequest",
-			val: {
-				operation: protocol.GuestFilesystemOperation.Pread,
-				path: "/tmp/file",
-				destinationPath: null,
-				target: null,
-				content: null,
-				encoding: protocol.RootFilesystemEntryEncoding.BasE64,
-				recursive: false,
-				mode: null,
-				uid: null,
-				gid: null,
-				atimeMs: null,
-				mtimeMs: null,
-				len: 10n,
-				offset: 2n,
-			},
-		});
-
-		expect(
-			toGeneratedRequestPayload({
-				type: "execute",
-				process_id: "proc",
-				command: "node",
-				args: ["-e", "0"],
-				env: { A: "1" },
-				runtime: "java_script",
-				wasm_permission_tier: "isolated",
-			}),
-		).toEqual({
-			tag: "ExecuteRequest",
-			val: {
-				processId: "proc",
-				command: "node",
-				runtime: protocol.GuestRuntimeKind.JavaScript,
-				entrypoint: null,
-				args: ["-e", "0"],
-				env: new Map([["A", "1"]]),
-				cwd: null,
-				wasmPermissionTier: protocol.WasmPermissionTier.Isolated,
-			},
-		});
-	});
-
-	it("maps guest kernel call requests", () => {
-		const payload = new TextEncoder().encode(
-			JSON.stringify({ host: "127.0.0.1", port: 39221 }),
-		).buffer;
-		expect(
-			toGeneratedRequestPayload({
-				type: "guest_kernel_call",
-				execution_id: "exec-1",
-				operation: "net.connect",
-				payload,
-			}),
-		).toEqual({
-			tag: "GuestKernelCallRequest",
-			val: {
-				executionId: "exec-1",
-				operation: "net.connect",
-				payload,
-			},
-		});
-	});
-
-	it("maps stdin and ext requests", () => {
-		expect(
-			toGeneratedRequestPayload({
-				type: "write_stdin",
-				process_id: "proc",
-				chunk: new Uint8Array([1, 2, 3]),
-			}),
-		).toMatchObject({
-			tag: "WriteStdinRequest",
-			val: {
-				processId: "proc",
-			},
-		});
-
-		expect(
-			toGeneratedRequestPayload({
-				type: "ext",
-				envelope: {
-					namespace: "dev.test",
-					payload: new Uint8Array([4, 5]),
-				},
-			}),
-		).toMatchObject({
-			tag: "ExtEnvelope",
-			val: {
-				namespace: "dev.test",
-			},
-		});
-	});
-});
diff --git a/packages/core/tests/response-payloads.test.ts b/packages/core/tests/response-payloads.test.ts
deleted file mode 100644
index 1f6d074c8..000000000
--- a/packages/core/tests/response-payloads.test.ts
+++ /dev/null
@@ -1,255 +0,0 @@
-import { describe, expect, it } from "vitest";
-import * as protocol from "../src/generated-protocol.js";
-import { fromGeneratedResponsePayload } from "../src/response-payloads.js";
-
-describe("response payload conversion", () => {
-	it("maps simple generated responses to live payloads", () => {
-		expect(
-			fromGeneratedResponsePayload({
-				tag: "AuthenticatedResponse",
-				val: {
-					sidecarId: "sidecar",
-					connectionId: "conn",
-					maxFrameBytes: 1024,
-				},
-			}),
-		).toEqual({
-			type: "authenticated",
-			sidecar_id: "sidecar",
-			connection_id: "conn",
-			max_frame_bytes: 1024,
-		});
-
-		expect(
-			fromGeneratedResponsePayload({
-				tag: "RejectedResponse",
-				val: { code: "bad_request", message: "nope" },
-			}),
-		).toEqual({
-			type: "rejected",
-			code: "bad_request",
-			message: "nope",
-		});
-	});
-
-	it("maps guest filesystem result details", () => {
-		expect(
-			fromGeneratedResponsePayload({
-				tag: "GuestFilesystemResultResponse",
-				val: {
-					operation: protocol.GuestFilesystemOperation.ReadFile,
-					path: "/tmp/file",
-					content: "hello",
-					encoding: protocol.RootFilesystemEntryEncoding.UtF8,
-					entries: null,
-					stat: null,
-					exists: true,
-					target: null,
-				},
-			}),
-		).toEqual({
-			type: "guest_filesystem_result",
-			operation: "read_file",
-			path: "/tmp/file",
-			content: "hello",
-			encoding: "utf8",
-			exists: true,
-		});
-	});
-
-	it("maps guest kernel call results", () => {
-		const payload = new TextEncoder().encode(
-			JSON.stringify({ socketId: 3, written: 5 }),
-		).buffer;
-		expect(
-			fromGeneratedResponsePayload({
-				tag: "GuestKernelResultResponse",
-				val: { payload },
-			}),
-		).toEqual({
-			type: "guest_kernel_result",
-			payload,
-		});
-	});
-
-	it("maps process and socket snapshots", () => {
-		expect(
-			fromGeneratedResponsePayload({
-				tag: "ProcessSnapshotResponse",
-				val: {
-					processes: [
-						{
-							processId: "proc",
-							pid: 10,
-							ppid: 1,
-							pgid: 10,
-							sid: 10,
-							driver: "native",
-							command: "node",
-							args: ["-e", "0"],
-							cwd: "/work",
-							status: protocol.ProcessSnapshotStatus.Running,
-							exitCode: null,
-						},
-					],
-				},
-			}),
-		).toEqual({
-			type: "process_snapshot",
-			processes: [
-				{
-					process_id: "proc",
-					pid: 10,
-					ppid: 1,
-					pgid: 10,
-					sid: 10,
-					driver: "native",
-					command: "node",
-					args: ["-e", "0"],
-					cwd: "/work",
-					status: "running",
-				},
-			],
-		});
-
-		expect(
-			fromGeneratedResponsePayload({
-				tag: "ListenerSnapshotResponse",
-				val: {
-					listener: {
-						processId: "proc",
-						host: "127.0.0.1",
-						port: 8080,
-						path: null,
-					},
-				},
-			}),
-		).toEqual({
-			type: "listener_snapshot",
-			listener: {
-				process_id: "proc",
-				host: "127.0.0.1",
-				port: 8080,
-			},
-		});
-	});
-
-	it("maps resource snapshots", () => {
-		expect(
-			fromGeneratedResponsePayload({
-				tag: "ResourceSnapshotResponse",
-				val: {
-					runningProcesses: 2n,
-					exitedProcesses: 1n,
-					fdTables: 2n,
-					openFds: 6n,
-					pipes: 1n,
-					pipeBufferedBytes: 12n,
-					ptys: 0n,
-					ptyBufferedInputBytes: 0n,
-					ptyBufferedOutputBytes: 0n,
-					sockets: 3n,
-					socketListeners: 1n,
-					socketConnections: 2n,
-					socketBufferedBytes: 256n,
-					socketDatagramQueueLen: 4n,
-					queueSnapshots: [
-						{
-							name: "pending_process_events",
-							category: "queue",
-							depth: 1n,
-							highWater: 3n,
-							capacity: 128n,
-							fillPercent: 2n,
-						},
-					],
-				},
-			}),
-		).toEqual({
-			type: "resource_snapshot",
-			running_processes: 2,
-			exited_processes: 1,
-			fd_tables: 2,
-			open_fds: 6,
-			pipes: 1,
-			pipe_buffered_bytes: 12,
-			ptys: 0,
-			pty_buffered_input_bytes: 0,
-			pty_buffered_output_bytes: 0,
-			sockets: 3,
-			socket_listeners: 1,
-			socket_connections: 2,
-			socket_buffered_bytes: 256,
-			socket_datagram_queue_len: 4,
-			queue_snapshots: [
-				{
-					name: "pending_process_events",
-					category: "queue",
-					depth: 1,
-					high_water: 3,
-					capacity: 128,
-					fill_percent: 2,
-				},
-			],
-		});
-	});
-
-	it("maps generated toolkit registration to host callback registration", () => {
-		expect(
-			fromGeneratedResponsePayload({
-				tag: "HostCallbacksRegisteredResponse",
-				val: { registration: "tools", commandCount: 2 },
-			}),
-		).toEqual({
-			type: "host_callbacks_registered",
-			registration: "tools",
-			command_count: 2,
-		});
-	});
-
-	it("maps signal handlers and bigint counts", () => {
-		expect(
-			fromGeneratedResponsePayload({
-				tag: "SignalStateResponse",
-				val: {
-					processId: "proc",
-					handlers: new Map([
-						[
-							15,
-							{
-								action: protocol.SignalDispositionAction.User,
-								mask: new Uint32Array([2, 15]),
-								flags: 4,
-							},
-						],
-					]),
-				},
-			}),
-		).toEqual({
-			type: "signal_state",
-			process_id: "proc",
-			handlers: {
-				"15": { action: "user", mask: [2, 15], flags: 4 },
-			},
-		});
-
-		expect(
-			fromGeneratedResponsePayload({
-				tag: "ZombieTimerCountResponse",
-				val: { count: 3n },
-			}),
-		).toEqual({
-			type: "zombie_timer_count",
-			count: 3,
-		});
-	});
-
-	it("keeps unsupported legacy response tags fail-closed", () => {
-		expect(() =>
-			fromGeneratedResponsePayload({
-				tag: "PermissionDecisionResponse",
-				val: { allowed: true },
-			}),
-		).toThrow("unsupported bare response payload tag: permission_decision");
-	});
-});
diff --git a/packages/core/tests/sidecar-process.test.ts b/packages/core/tests/sidecar-process.test.ts
deleted file mode 100644
index 793a01c7f..000000000
--- a/packages/core/tests/sidecar-process.test.ts
+++ /dev/null
@@ -1,89 +0,0 @@
-import { describe, expect, test } from "vitest";
-import type { SidecarProcessTransport } from "../src/sidecar-client.js";
-import { SidecarProcess } from "../src/sidecar-process.js";
-import type {
-	LiveEventFrame,
-	LiveResponseFrame,
-	LiveSidecarRequestHandler,
-} from "../src/protocol-frames.js";
-import { SIDECAR_PROTOCOL_SCHEMA } from "../src/protocol-schema.js";
-import type { LiveOwnershipScope } from "../src/ownership.js";
-import type { LiveRequestPayload } from "../src/request-payloads.js";
-
-class MemorySidecarTransport implements SidecarProcessTransport {
-	readonly requests: Array<{
-		ownership: LiveOwnershipScope;
-		payload: LiveRequestPayload;
-	}> = [];
-	disposed = false;
-	failed: Error | null = null;
-	private sidecarRequestHandler: LiveSidecarRequestHandler | null = null;
-	private readonly eventListeners = new Set<(event: LiveEventFrame) => void>();
-
-	setSidecarRequestHandler(handler: LiveSidecarRequestHandler | null): void {
-		this.sidecarRequestHandler = handler;
-	}
-
-	onEvent(handler: (event: LiveEventFrame) => void): () => void {
-		this.eventListeners.add(handler);
-		return () => {
-			this.eventListeners.delete(handler);
-		};
-	}
-
-	async sendRequest(input: {
-		ownership: LiveOwnershipScope;
-		payload: LiveRequestPayload;
-	}): Promise<LiveResponseFrame> {
-		this.requests.push(input);
-		if (input.payload.type !== "create_layer") {
-			throw new Error(`unexpected request ${input.payload.type}`);
-		}
-		return {
-			frame_type: "response",
-			schema: SIDECAR_PROTOCOL_SCHEMA,
-			request_id: this.requests.length,
-			ownership: input.ownership,
-			payload: { type: "layer_created", layer_id: "layer-from-memory" },
-		};
-	}
-
-	async waitForEvent(): Promise<LiveEventFrame> {
-		throw new Error("waitForEvent not implemented for this test");
-	}
-
-	failPermanently(error: Error): void {
-		this.failed = error;
-	}
-
-	async dispose(): Promise<void> {
-		this.disposed = true;
-	}
-}
-
-describe("sidecar process transport injection", () => {
-	test("runs high-level process operations over an injected transport", async () => {
-		const transport = new MemorySidecarTransport();
-		const process = SidecarProcess.fromClient(transport);
-
-		const layerId = await process.createLayer(
-			{ connectionId: "conn", sessionId: "session" },
-			{ vmId: "vm" },
-		);
-		await process.dispose();
-
-		expect(layerId).toBe("layer-from-memory");
-		expect(transport.requests).toMatchObject([
-			{
-				ownership: {
-					scope: "vm",
-					connection_id: "conn",
-					session_id: "session",
-					vm_id: "vm",
-				},
-				payload: { type: "create_layer" },
-			},
-		]);
-		expect(transport.disposed).toBe(true);
-	});
-});
diff --git a/packages/core/tests/state.test.ts b/packages/core/tests/state.test.ts
deleted file mode 100644
index e0d071bd0..000000000
--- a/packages/core/tests/state.test.ts
+++ /dev/null
@@ -1,92 +0,0 @@
-import { describe, expect, it } from "vitest";
-import * as protocol from "../src/generated-protocol.js";
-import {
-	fromGeneratedGuestFilesystemStat,
-	fromGeneratedProcessSnapshotEntry,
-	fromGeneratedSocketStateEntry,
-} from "../src/state.js";
-
-describe("state conversion", () => {
-	it("maps generated guest filesystem stat entries to live stat entries", () => {
-		expect(
-			fromGeneratedGuestFilesystemStat({
-				mode: 0o100644,
-				size: 42n,
-				blocks: 1n,
-				dev: 2n,
-				rdev: 0n,
-				isDirectory: false,
-				isSymbolicLink: false,
-				atimeMs: 100n,
-				mtimeMs: 200n,
-				ctimeMs: 300n,
-				birthtimeMs: 400n,
-				ino: 10n,
-				nlink: 1n,
-				uid: 1000,
-				gid: 1000,
-			}),
-		).toEqual({
-			mode: 0o100644,
-			size: 42,
-			blocks: 1,
-			dev: 2,
-			rdev: 0,
-			is_directory: false,
-			is_symbolic_link: false,
-			atime_ms: 100,
-			mtime_ms: 200,
-			ctime_ms: 300,
-			birthtime_ms: 400,
-			ino: 10,
-			nlink: 1,
-			uid: 1000,
-			gid: 1000,
-		});
-	});
-
-	it("maps generated socket state entries to live socket entries", () => {
-		expect(
-			fromGeneratedSocketStateEntry({
-				processId: "proc",
-				host: "127.0.0.1",
-				port: 8080,
-				path: null,
-			}),
-		).toEqual({
-			process_id: "proc",
-			host: "127.0.0.1",
-			port: 8080,
-		});
-	});
-
-	it("maps generated process snapshots to live process snapshots", () => {
-		expect(
-			fromGeneratedProcessSnapshotEntry({
-				processId: "proc",
-				pid: 10,
-				ppid: 1,
-				pgid: 10,
-				sid: 10,
-				driver: "native",
-				command: "node",
-				args: ["-e", "0"],
-				cwd: "/work",
-				status: protocol.ProcessSnapshotStatus.Exited,
-				exitCode: 0,
-			}),
-		).toEqual({
-			process_id: "proc",
-			pid: 10,
-			ppid: 1,
-			pgid: 10,
-			sid: 10,
-			driver: "native",
-			command: "node",
-			args: ["-e", "0"],
-			cwd: "/work",
-			status: "exited",
-			exit_code: 0,
-		});
-	});
-});
diff --git a/packages/core/tsconfig.json b/packages/core/tsconfig.json
index 3877f082e..0eb722e69 100644
--- a/packages/core/tsconfig.json
+++ b/packages/core/tsconfig.json
@@ -1,13 +1,10 @@
 {
 	"extends": "../../tsconfig.base.json",
 	"compilerOptions": {
-		"module": "NodeNext",
-		"moduleResolution": "NodeNext",
-		"esModuleInterop": true,
-		"declaration": true,
-		"outDir": "./dist",
-		"rootDir": "./src"
+		"outDir": "dist",
+		"rootDir": "src"
 	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules", "dist"]
+	"include": [
+		"src/**/*.ts"
+	]
 }
diff --git a/packages/core/vitest.config.ts b/packages/core/vitest.config.ts
deleted file mode 100644
index 62291e9b9..000000000
--- a/packages/core/vitest.config.ts
+++ /dev/null
@@ -1,13 +0,0 @@
-import { defineConfig } from "vitest/config";
-
-export default defineConfig({
-	test: {
-		include: ["tests/**/*.test.ts"],
-		// Many test files each spawn a debug sidecar + V8 warm isolates;
-		// running files in parallel thrashes small CI runners until frame
-		// waits exceed their 120s timeout (mount-fs-custom-vfs and
-		// node-runtime-exec-output timed out deterministically on 4-core
-		// GitHub runners, and passed serially). Keep files sequential.
-		fileParallelism: false,
-	},
-});
diff --git a/packages/manifest/agentos-package.schema.json b/packages/manifest/agentos-package.schema.json
deleted file mode 100644
index b894f88f7..000000000
--- a/packages/manifest/agentos-package.schema.json
+++ /dev/null
@@ -1,70 +0,0 @@
-{
-  "$schema": "https://json-schema.org/draft/2020-12/schema",
-  "$id": "https://secureexec.dev/schemas/agentos-package.schema.json",
-  "title": "agentos-package.json",
-  "type": "object",
-  "additionalProperties": false,
-  "required": ["name"],
-  "properties": {
-    "name": {
-      "type": "string",
-      "minLength": 1
-    },
-    "agent": {
-      "type": "object",
-      "additionalProperties": false,
-      "required": ["acpEntrypoint"],
-      "properties": {
-        "acpEntrypoint": {
-          "type": "string",
-          "minLength": 1
-        },
-        "env": {
-          "type": "object",
-          "additionalProperties": {
-            "type": "string"
-          }
-        },
-        "launchArgs": {
-          "type": "array",
-          "items": {
-            "type": "string"
-          }
-        },
-        "snapshot": {
-          "type": "boolean"
-        }
-      }
-    },
-    "provides": {
-      "type": "object",
-      "additionalProperties": false,
-      "properties": {
-        "env": {
-          "type": "object",
-          "additionalProperties": {
-            "type": "string"
-          }
-        },
-        "files": {
-          "type": "array",
-          "items": {
-            "type": "object",
-            "additionalProperties": false,
-            "required": ["source", "target"],
-            "properties": {
-              "source": {
-                "type": "string",
-                "minLength": 1
-              },
-              "target": {
-                "type": "string",
-                "minLength": 1
-              }
-            }
-          }
-        }
-      }
-    }
-  }
-}
diff --git a/packages/manifest/package.json b/packages/manifest/package.json
deleted file mode 100644
index e739e9007..000000000
--- a/packages/manifest/package.json
+++ /dev/null
@@ -1,22 +0,0 @@
-{
-	"name": "@agentos-software/manifest",
-	"version": "0.0.1",
-	"type": "module",
-	"license": "Apache-2.0",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "tsc",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/packages/manifest/src/index.ts b/packages/manifest/src/index.ts
deleted file mode 100644
index 5bc9101c0..000000000
--- a/packages/manifest/src/index.ts
+++ /dev/null
@@ -1,134 +0,0 @@
-/**
- * Agent metadata for an agent package descriptor.
- */
-export interface PackageAgentDescriptor {
-	/** `bin/` command that speaks ACP over stdio. */
-	acpEntrypoint: string;
-	/** Static environment variables for the agent process. */
-	env?: Record<string, string>;
-	/** Optional extra launch arguments. */
-	launchArgs?: string[];
-	/** Optional snapshot flag. */
-	snapshot?: boolean;
-}
-
-/**
- * Read-only file content contributed by a package.
- *
- * `source` is absolute or relative to the package directory. `target` is the
- * guest path where the sidecar mounts it read-only.
- */
-export interface PackageProvidesFileDescriptor {
-	source: string;
-	target: string;
-}
-
-/**
- * Defaults contributed by a package when it is configured in a VM.
- */
-export interface PackageProvidesDescriptor {
-	/** VM environment defaults. Existing caller/base env values win. */
-	env?: Record<string, string>;
-	/** Host directories to expose as read-only guest file layers. */
-	files?: PackageProvidesFileDescriptor[];
-}
-
-/**
- * Pure JSON manifest read by the sidecar from `<package dir>/agentos-package.json`.
- *
- * Commands come from `bin/`; version lives in this manifest.
- */
-export interface AgentosPackageManifest {
-	/** Short package name (e.g., "jq", "git", "claude"). */
-	name: string;
-	/** Package version. */
-	version: string;
-	/** Present only for agent packages. */
-	agent?: PackageAgentDescriptor;
-	/** Optional VM environment defaults and read-only file layers. */
-	provides?: PackageProvidesDescriptor;
-}
-
-/** Runtime package reference passed by registry packages during the JSON manifest migration. */
-export type PackageRef = string;
-
-/** Client-facing software reference: points at a self-contained package tar.
- *  Extensible — future fields can be added without breaking callers. */
-export interface SoftwarePackageRef {
-	/** Absolute path to the self-contained package tar. */
-	packageTar: string;
-	/** @deprecated Directory refs are accepted only for local transition fixtures. */
-	packageDir?: string;
-}
-
-/**
- * Descriptor for a registry package (software or agent).
- *
- * Each @agentos-software/* package default-exports a plain object literal
- * satisfying this type. Commands are derived by the sidecar from the package's
- * package's `bin/` directory, so no per-command metadata lives here.
- */
-export interface PackageDescriptor {
-	/** Short package name (e.g., "jq", "git", "claude"). */
-	name: string;
-	/** Absolute path to the self-contained package directory. */
-	dir: string;
-	/** Present only for agent packages. */
-	agent?: PackageAgentDescriptor;
-	/** Optional VM environment defaults and read-only file layers. */
-	provides?: PackageProvidesDescriptor;
-}
-
-/**
- * Permission tier for WASM command execution.
- * Shared runtime permission tiers for registry command metadata.
- *
- * - full: spawn processes, network I/O, file read/write
- * - read-write: file read/write, no network or process spawning
- * - read-only: file read-only, no writes, no spawn, no network
- * - isolated: restricted to cwd subtree reads only
- */
-export type PermissionTier = "full" | "read-write" | "read-only" | "isolated";
-
-/**
- * Descriptor for a single command within a WASM command package.
- */
-export interface WasmCommandEntry {
-	/** Command name as invoked (e.g., "grep", "egrep"). */
-	name: string;
-	/** Default permission tier for this command. */
-	permissionTier: PermissionTier;
-	/** If set, this command is an alias for another command in the same package. */
-	aliasOf?: string;
-}
-
-/**
- * Descriptor for a WASM command package.
- * Each @secure-exec/* software package exports a default value satisfying this type.
- */
-export interface WasmCommandPackage {
-	/** Package name without scope (e.g., "coreutils", "grep"). */
-	name: string;
-	/** Apt/Debian equivalent package name. */
-	aptName: string;
-	/** Human-readable description. */
-	description: string;
-	/** Build source: "rust" or "c". */
-	source: "rust" | "c";
-	/** Commands provided by this package. */
-	commands: WasmCommandEntry[];
-	/** Absolute path to the directory containing WASM command binaries. */
-	readonly commandDir: string;
-}
-
-/**
- * Descriptor for a meta-package that aggregates other WASM command packages.
- */
-export interface WasmMetaPackage {
-	/** Package name without scope. */
-	name: string;
-	/** Human-readable description. */
-	description: string;
-	/** Package names (without scope) included in this meta-package. */
-	includes: string[];
-}
diff --git a/packages/manifest/tsconfig.json b/packages/manifest/tsconfig.json
deleted file mode 100644
index 3877f082e..000000000
--- a/packages/manifest/tsconfig.json
+++ /dev/null
@@ -1,13 +0,0 @@
-{
-	"extends": "../../tsconfig.base.json",
-	"compilerOptions": {
-		"module": "NodeNext",
-		"moduleResolution": "NodeNext",
-		"esModuleInterop": true,
-		"declaration": true,
-		"outDir": "./dist",
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules", "dist"]
-}
diff --git a/packages/playground/secure-exec-worker.js b/packages/playground/secure-exec-worker.js
deleted file mode 100644
index 4196ee089..000000000
--- a/packages/playground/secure-exec-worker.js
+++ /dev/null
@@ -1,220 +0,0 @@
-// Generated by packages/playground/scripts/build-worker.ts
-var lc=Object.create;var Xo=Object.defineProperty;var uc=Object.getOwnPropertyDescriptor;var pc=Object.getOwnPropertyNames;var fc=Object.getPrototypeOf,hc=Object.prototype.hasOwnProperty;var Tt=(e,r)=>()=>(r||e((r={exports:{}}).exports,r),r.exports);var mc=(e,r,n,s)=>{if(r&&typeof r=="object"||typeof r=="function")for(let i of pc(r))!hc.call(e,i)&&i!==n&&Xo(e,i,{get:()=>r[i],enumerable:!(s=uc(r,i))||s.enumerable});return e};var ur=(e,r,n)=>(n=e!=null?lc(fc(e)):{},mc(r||!e||!e.__esModule?Xo(n,"default",{value:e,enumerable:!0}):n,e));var mi=Tt((Ps,Cs)=>{(function(e,r){typeof Ps=="object"&&typeof Cs<"u"?Cs.exports=r():typeof define=="function"&&define.amd?define(r):(e=typeof globalThis<"u"?globalThis:e||self,e.resolveURI=r())})(Ps,(function(){"use strict";let e=/^[\w+.-]+:\/\//,r=/^([\w+.-]+:)\/\/([^@/#?]*@)?([^:/#?]*)(:\d+)?(\/[^#?]*)?(\?[^#]*)?(#.*)?/,n=/^file:(?:\/\/((?![a-z]:)[^/#?]*)?)?(\/?[^#?]*)(\?[^#]*)?(#.*)?/i;function s(T){return e.test(T)}function i(T){return T.startsWith("//")}function a(T){return T.startsWith("/")}function u(T){return T.startsWith("file:")}function h(T){return/^[.?#]/.test(T)}function f(T){let L=r.exec(T);return _(L[1],L[2]||"",L[3],L[4]||"",L[5]||"/",L[6]||"",L[7]||"")}function m(T){let L=n.exec(T),F=L[2];return _("file:","",L[1]||"","",a(F)?F:"/"+F,L[3]||"",L[4]||"")}function _(T,L,F,V,W,Y,re){return{scheme:T,user:L,host:F,port:V,path:W,query:Y,hash:re,type:7}}function x(T){if(i(T)){let F=f("http:"+T);return F.scheme="",F.type=6,F}if(a(T)){let F=f("http://foo.com"+T);return F.scheme="",F.host="",F.type=5,F}if(u(T))return m(T);if(s(T))return f(T);let L=f("http://foo.com/"+T);return L.scheme="",L.host="",L.type=T?T.startsWith("?")?3:T.startsWith("#")?2:4:1,L}function b(T){if(T.endsWith("/.."))return T;let L=T.lastIndexOf("/");return T.slice(0,L+1)}function y(T,L){S(L,L.type),T.path==="/"?T.path=L.path:T.path=b(L.path)+T.path}function S(T,L){let F=L<=4,V=T.path.split("/"),W=1,Y=0,re=!1;for(let R=1;R<V.length;R++){let X=V[R];if(!X){re=!0;continue}if(re=!1,X!=="."){if(X===".."){Y?(re=!0,Y--,W--):F&&(V[W++]=X);continue}V[W++]=X,Y++}}let A="";for(let R=1;R<W;R++)A+="/"+V[R];(!A||re&&!A.endsWith("/.."))&&(A+="/"),T.path=A}function q(T,L){if(!T&&!L)return"";let F=x(T),V=F.type;if(L&&V!==7){let Y=x(L),re=Y.type;switch(V){case 1:F.hash=Y.hash;case 2:F.query=Y.query;case 3:case 4:y(F,Y);case 5:F.user=Y.user,F.host=Y.host,F.port=Y.port;case 6:F.scheme=Y.scheme}re>V&&(V=re)}S(F,V);let W=F.query+F.hash;switch(V){case 2:case 3:return W;case 4:{let Y=F.path.slice(1);return Y?h(L||T)&&!h(Y)?"./"+Y+W:Y+W:W||"."}case 5:return F.path+W;default:return F.scheme+"//"+F.user+F.host+F.port+F.path+W}}return q}))});var wr=Tt(De=>{"use strict";var ol=De&&De.__extends||(function(){var e=function(r,n){return e=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(s,i){s.__proto__=i}||function(s,i){for(var a in i)i.hasOwnProperty(a)&&(s[a]=i[a])},e(r,n)};return function(r,n){e(r,n);function s(){this.constructor=r}r.prototype=n===null?Object.create(n):(s.prototype=n.prototype,new s)}})();Object.defineProperty(De,"__esModule",{value:!0});De.DetailContext=De.NoopContext=De.VError=void 0;var wi=(function(e){ol(r,e);function r(n,s){var i=e.call(this,s)||this;return i.path=n,Object.setPrototypeOf(i,r.prototype),i}return r})(Error);De.VError=wi;var il=(function(){function e(){}return e.prototype.fail=function(r,n,s){return!1},e.prototype.unionResolver=function(){return this},e.prototype.createContext=function(){return this},e.prototype.resolveUnion=function(r){},e})();De.NoopContext=il;var bi=(function(){function e(){this._propNames=[""],this._messages=[null],this._score=0}return e.prototype.fail=function(r,n,s){return this._propNames.push(r),this._messages.push(n),this._score+=s,!1},e.prototype.unionResolver=function(){return new al},e.prototype.resolveUnion=function(r){for(var n,s,i=r,a=null,u=0,h=i.contexts;u<h.length;u++){var f=h[u];(!a||f._score>=a._score)&&(a=f)}a&&a._score>0&&((n=this._propNames).push.apply(n,a._propNames),(s=this._messages).push.apply(s,a._messages))},e.prototype.getError=function(r){for(var n=[],s=this._propNames.length-1;s>=0;s--){var i=this._propNames[s];r+=typeof i=="number"?"["+i+"]":i?"."+i:"";var a=this._messages[s];a&&n.push(r+" "+a)}return new wi(r,n.join("; "))},e.prototype.getErrorDetail=function(r){for(var n=[],s=this._propNames.length-1;s>=0;s--){var i=this._propNames[s];r+=typeof i=="number"?"["+i+"]":i?"."+i:"";var a=this._messages[s];a&&n.push({path:r,message:a})}for(var u=null,s=n.length-1;s>=0;s--)u&&(n[s].nested=[u]),u=n[s];return u},e})();De.DetailContext=bi;var al=(function(){function e(){this.contexts=[]}return e.prototype.createContext=function(){var r=new bi;return this.contexts.push(r),r},e})()});var $s=Tt(v=>{"use strict";var _e=v&&v.__extends||(function(){var e=function(r,n){return e=Object.setPrototypeOf||{__proto__:[]}instanceof Array&&function(s,i){s.__proto__=i}||function(s,i){for(var a in i)i.hasOwnProperty(a)&&(s[a]=i[a])},e(r,n)};return function(r,n){e(r,n);function s(){this.constructor=r}r.prototype=n===null?Object.create(n):(s.prototype=n.prototype,new s)}})();Object.defineProperty(v,"__esModule",{value:!0});v.basicTypes=v.BasicType=v.TParamList=v.TParam=v.param=v.TFunc=v.func=v.TProp=v.TOptional=v.opt=v.TIface=v.iface=v.TEnumLiteral=v.enumlit=v.TEnumType=v.enumtype=v.TIntersection=v.intersection=v.TUnion=v.union=v.TTuple=v.tuple=v.TArray=v.array=v.TLiteral=v.lit=v.TName=v.name=v.TType=void 0;var Ii=wr(),ge=(function(){function e(){}return e})();v.TType=ge;function Ye(e){return typeof e=="string"?Ei(e):e}function Fs(e,r){var n=e[r];if(!n)throw new Error("Unknown type "+r);return n}function Ei(e){return new Ms(e)}v.name=Ei;var Ms=(function(e){_e(r,e);function r(n){var s=e.call(this)||this;return s.name=n,s._failMsg="is not a "+n,s}return r.prototype.getChecker=function(n,s,i){var a=this,u=Fs(n,this.name),h=u.getChecker(n,s,i);return u instanceof le||u instanceof r?h:function(f,m){return h(f,m)?!0:m.fail(null,a._failMsg,0)}},r})(ge);v.TName=Ms;function cl(e){return new Bs(e)}v.lit=cl;var Bs=(function(e){_e(r,e);function r(n){var s=e.call(this)||this;return s.value=n,s.name=JSON.stringify(n),s._failMsg="is not "+s.name,s}return r.prototype.getChecker=function(n,s){var i=this;return function(a,u){return a===i.value?!0:u.fail(null,i._failMsg,-1)}},r})(ge);v.TLiteral=Bs;function ll(e){return new Ai(Ye(e))}v.array=ll;var Ai=(function(e){_e(r,e);function r(n){var s=e.call(this)||this;return s.ttype=n,s}return r.prototype.getChecker=function(n,s){var i=this.ttype.getChecker(n,s);return function(a,u){if(!Array.isArray(a))return u.fail(null,"is not an array",0);for(var h=0;h<a.length;h++){var f=i(a[h],u);if(!f)return u.fail(h,null,1)}return!0}},r})(ge);v.TArray=Ai;function ul(){for(var e=[],r=0;r<arguments.length;r++)e[r]=arguments[r];return new vi(e.map(function(n){return Ye(n)}))}v.tuple=ul;var vi=(function(e){_e(r,e);function r(n){var s=e.call(this)||this;return s.ttypes=n,s}return r.prototype.getChecker=function(n,s){var i=this.ttypes.map(function(u){return u.getChecker(n,s)}),a=function(u,h){if(!Array.isArray(u))return h.fail(null,"is not an array",0);for(var f=0;f<i.length;f++){var m=i[f](u[f],h);if(!m)return h.fail(f,null,1)}return!0};return s?function(u,h){return a(u,h)?u.length<=i.length?!0:h.fail(i.length,"is extraneous",2):!1}:a},r})(ge);v.TTuple=vi;function pl(){for(var e=[],r=0;r<arguments.length;r++)e[r]=arguments[r];return new Pi(e.map(function(n){return Ye(n)}))}v.union=pl;var Pi=(function(e){_e(r,e);function r(n){var s=e.call(this)||this;s.ttypes=n;var i=n.map(function(u){return u instanceof Ms||u instanceof Bs?u.name:null}).filter(function(u){return u}),a=n.length-i.length;return i.length?(a>0&&i.push(a+" more"),s._failMsg="is none of "+i.join(", ")):s._failMsg="is none of "+a+" types",s}return r.prototype.getChecker=function(n,s){var i=this,a=this.ttypes.map(function(u){return u.getChecker(n,s)});return function(u,h){for(var f=h.unionResolver(),m=0;m<a.length;m++){var _=a[m](u,f.createContext());if(_)return!0}return h.resolveUnion(f),h.fail(null,i._failMsg,0)}},r})(ge);v.TUnion=Pi;function fl(){for(var e=[],r=0;r<arguments.length;r++)e[r]=arguments[r];return new Ci(e.map(function(n){return Ye(n)}))}v.intersection=fl;var Ci=(function(e){_e(r,e);function r(n){var s=e.call(this)||this;return s.ttypes=n,s}return r.prototype.getChecker=function(n,s){var i=new Set,a=this.ttypes.map(function(u){return u.getChecker(n,s,i)});return function(u,h){var f=a.every(function(m){return m(u,h)});return f?!0:h.fail(null,null,0)}},r})(ge);v.TIntersection=Ci;function hl(e){return new js(e)}v.enumtype=hl;var js=(function(e){_e(r,e);function r(n){var s=e.call(this)||this;return s.members=n,s.validValues=new Set,s._failMsg="is not a valid enum value",s.validValues=new Set(Object.keys(n).map(function(i){return n[i]})),s}return r.prototype.getChecker=function(n,s){var i=this;return function(a,u){return i.validValues.has(a)?!0:u.fail(null,i._failMsg,0)}},r})(ge);v.TEnumType=js;function ml(e,r){return new Ri(e,r)}v.enumlit=ml;var Ri=(function(e){_e(r,e);function r(n,s){var i=e.call(this)||this;return i.enumName=n,i.prop=s,i._failMsg="is not "+n+"."+s,i}return r.prototype.getChecker=function(n,s){var i=this,a=Fs(n,this.enumName);if(!(a instanceof js))throw new Error("Type "+this.enumName+" used in enumlit is not an enum type");var u=a.members[this.prop];if(!a.members.hasOwnProperty(this.prop))throw new Error("Unknown value "+this.enumName+"."+this.prop+" used in enumlit");return function(h,f){return h===u?!0:f.fail(null,i._failMsg,-1)}},r})(ge);v.TEnumLiteral=Ri;function dl(e){return Object.keys(e).map(function(r){return gl(r,e[r])})}function gl(e,r){return r instanceof qs?new Os(e,r.ttype,!0):new Os(e,Ye(r),!1)}function kl(e,r){return new Ni(e,dl(r))}v.iface=kl;var Ni=(function(e){_e(r,e);function r(n,s){var i=e.call(this)||this;return i.bases=n,i.props=s,i.propSet=new Set(s.map(function(a){return a.name})),i}return r.prototype.getChecker=function(n,s,i){var a=this,u=this.bases.map(function(b){return Fs(n,b).getChecker(n,s)}),h=this.props.map(function(b){return b.ttype.getChecker(n,s)}),f=new Ii.NoopContext,m=this.props.map(function(b,y){return!b.isOpt&&!h[y](void 0,f)}),_=function(b,y){if(typeof b!="object"||b===null)return y.fail(null,"is not an object",0);for(var S=0;S<u.length;S++)if(!u[S](b,y))return!1;for(var S=0;S<h.length;S++){var q=a.props[S].name,T=b[q];if(T===void 0){if(m[S])return y.fail(q,"is missing",1)}else{var L=h[S](T,y);if(!L)return y.fail(q,null,1)}}return!0};if(!s)return _;var x=this.propSet;return i&&(this.propSet.forEach(function(b){return i.add(b)}),x=i),function(b,y){if(!_(b,y))return!1;for(var S in b)if(!x.has(S))return y.fail(S,"is extraneous",2);return!0}},r})(ge);v.TIface=Ni;function yl(e){return new qs(Ye(e))}v.opt=yl;var qs=(function(e){_e(r,e);function r(n){var s=e.call(this)||this;return s.ttype=n,s}return r.prototype.getChecker=function(n,s){var i=this.ttype.getChecker(n,s);return function(a,u){return a===void 0||i(a,u)}},r})(ge);v.TOptional=qs;var Os=(function(){function e(r,n,s){this.name=r,this.ttype=n,this.isOpt=s}return e})();v.TProp=Os;function xl(e){for(var r=[],n=1;n<arguments.length;n++)r[n-1]=arguments[n];return new Di(new Oi(r),Ye(e))}v.func=xl;var Di=(function(e){_e(r,e);function r(n,s){var i=e.call(this)||this;return i.paramList=n,i.result=s,i}return r.prototype.getChecker=function(n,s){return function(i,a){return typeof i=="function"?!0:a.fail(null,"is not a function",0)}},r})(ge);v.TFunc=Di;function _l(e,r,n){return new Li(e,Ye(r),!!n)}v.param=_l;var Li=(function(){function e(r,n,s){this.name=r,this.ttype=n,this.isOpt=s}return e})();v.TParam=Li;var Oi=(function(e){_e(r,e);function r(n){var s=e.call(this)||this;return s.params=n,s}return r.prototype.getChecker=function(n,s){var i=this,a=this.params.map(function(m){return m.ttype.getChecker(n,s)}),u=new Ii.NoopContext,h=this.params.map(function(m,_){return!m.isOpt&&!a[_](void 0,u)}),f=function(m,_){if(!Array.isArray(m))return _.fail(null,"is not an array",0);for(var x=0;x<a.length;x++){var b=i.params[x];if(m[x]===void 0){if(h[x])return _.fail(b.name,"is missing",1)}else{var y=a[x](m[x],_);if(!y)return _.fail(b.name,null,1)}}return!0};return s?function(m,_){return f(m,_)?m.length<=a.length?!0:_.fail(a.length,"is extraneous",2):!1}:f},r})(ge);v.TParamList=Oi;var le=(function(e){_e(r,e);function r(n,s){var i=e.call(this)||this;return i.validator=n,i.message=s,i}return r.prototype.getChecker=function(n,s){var i=this;return function(a,u){return i.validator(a)?!0:u.fail(null,i.message,0)}},r})(ge);v.BasicType=le;v.basicTypes={any:new le(function(e){return!0},"is invalid"),number:new le(function(e){return typeof e=="number"},"is not a number"),object:new le(function(e){return typeof e=="object"&&e},"is not an object"),boolean:new le(function(e){return typeof e=="boolean"},"is not a boolean"),string:new le(function(e){return typeof e=="string"},"is not a string"),symbol:new le(function(e){return typeof e=="symbol"},"is not a symbol"),void:new le(function(e){return e==null},"is not void"),undefined:new le(function(e){return e===void 0},"is not undefined"),null:new le(function(e){return e===null},"is not null"),never:new le(function(e){return!1},"is unexpected"),Date:new le(Ti("[object Date]"),"is not a Date"),RegExp:new le(Ti("[object RegExp]"),"is not a RegExp")};var wl=Object.prototype.toString;function Ti(e){return function(r){return typeof r=="object"&&r&&wl.call(r)===e}}typeof Buffer<"u"&&(v.basicTypes.Buffer=new le(function(e){return Buffer.isBuffer(e)},"is not a Buffer"));var bl=function(e){v.basicTypes[e.name]=new le(function(r){return r instanceof e},"is not a "+e.name)};for(br=0,Ls=[Int8Array,Uint8Array,Uint8ClampedArray,Int16Array,Uint16Array,Int32Array,Uint32Array,Float32Array,Float64Array,ArrayBuffer];br<Ls.length;br++)Si=Ls[br],bl(Si);var Si,br,Ls});var Us=Tt(j=>{"use strict";var Tl=j&&j.__spreadArrays||function(){for(var e=0,r=0,n=arguments.length;r<n;r++)e+=arguments[r].length;for(var s=Array(e),i=0,r=0;r<n;r++)for(var a=arguments[r],u=0,h=a.length;u<h;u++,i++)s[i]=a[u];return s};Object.defineProperty(j,"__esModule",{value:!0});j.Checker=j.createCheckers=void 0;var Rt=$s(),ft=wr(),z=$s();Object.defineProperty(j,"TArray",{enumerable:!0,get:function(){return z.TArray}});Object.defineProperty(j,"TEnumType",{enumerable:!0,get:function(){return z.TEnumType}});Object.defineProperty(j,"TEnumLiteral",{enumerable:!0,get:function(){return z.TEnumLiteral}});Object.defineProperty(j,"TFunc",{enumerable:!0,get:function(){return z.TFunc}});Object.defineProperty(j,"TIface",{enumerable:!0,get:function(){return z.TIface}});Object.defineProperty(j,"TLiteral",{enumerable:!0,get:function(){return z.TLiteral}});Object.defineProperty(j,"TName",{enumerable:!0,get:function(){return z.TName}});Object.defineProperty(j,"TOptional",{enumerable:!0,get:function(){return z.TOptional}});Object.defineProperty(j,"TParam",{enumerable:!0,get:function(){return z.TParam}});Object.defineProperty(j,"TParamList",{enumerable:!0,get:function(){return z.TParamList}});Object.defineProperty(j,"TProp",{enumerable:!0,get:function(){return z.TProp}});Object.defineProperty(j,"TTuple",{enumerable:!0,get:function(){return z.TTuple}});Object.defineProperty(j,"TType",{enumerable:!0,get:function(){return z.TType}});Object.defineProperty(j,"TUnion",{enumerable:!0,get:function(){return z.TUnion}});Object.defineProperty(j,"TIntersection",{enumerable:!0,get:function(){return z.TIntersection}});Object.defineProperty(j,"array",{enumerable:!0,get:function(){return z.array}});Object.defineProperty(j,"enumlit",{enumerable:!0,get:function(){return z.enumlit}});Object.defineProperty(j,"enumtype",{enumerable:!0,get:function(){return z.enumtype}});Object.defineProperty(j,"func",{enumerable:!0,get:function(){return z.func}});Object.defineProperty(j,"iface",{enumerable:!0,get:function(){return z.iface}});Object.defineProperty(j,"lit",{enumerable:!0,get:function(){return z.lit}});Object.defineProperty(j,"name",{enumerable:!0,get:function(){return z.name}});Object.defineProperty(j,"opt",{enumerable:!0,get:function(){return z.opt}});Object.defineProperty(j,"param",{enumerable:!0,get:function(){return z.param}});Object.defineProperty(j,"tuple",{enumerable:!0,get:function(){return z.tuple}});Object.defineProperty(j,"union",{enumerable:!0,get:function(){return z.union}});Object.defineProperty(j,"intersection",{enumerable:!0,get:function(){return z.intersection}});Object.defineProperty(j,"BasicType",{enumerable:!0,get:function(){return z.BasicType}});var Sl=wr();Object.defineProperty(j,"VError",{enumerable:!0,get:function(){return Sl.VError}});function Il(){for(var e=[],r=0;r<arguments.length;r++)e[r]=arguments[r];for(var n=Object.assign.apply(Object,Tl([{},Rt.basicTypes],e)),s={},i=0,a=e;i<a.length;i++)for(var u=a[i],h=0,f=Object.keys(u);h<f.length;h++){var m=f[h];s[m]=new Fi(n,u[m])}return s}j.createCheckers=Il;var Fi=(function(){function e(r,n,s){if(s===void 0&&(s="value"),this.suite=r,this.ttype=n,this._path=s,this.props=new Map,n instanceof Rt.TIface)for(var i=0,a=n.props;i<a.length;i++){var u=a[i];this.props.set(u.name,u.ttype)}this.checkerPlain=this.ttype.getChecker(r,!1),this.checkerStrict=this.ttype.getChecker(r,!0)}return e.prototype.setReportedPath=function(r){this._path=r},e.prototype.check=function(r){return this._doCheck(this.checkerPlain,r)},e.prototype.test=function(r){return this.checkerPlain(r,new ft.NoopContext)},e.prototype.validate=function(r){return this._doValidate(this.checkerPlain,r)},e.prototype.strictCheck=function(r){return this._doCheck(this.checkerStrict,r)},e.prototype.strictTest=function(r){return this.checkerStrict(r,new ft.NoopContext)},e.prototype.strictValidate=function(r){return this._doValidate(this.checkerStrict,r)},e.prototype.getProp=function(r){var n=this.props.get(r);if(!n)throw new Error("Type has no property "+r);return new e(this.suite,n,this._path+"."+r)},e.prototype.methodArgs=function(r){var n=this._getMethod(r);return new e(this.suite,n.paramList)},e.prototype.methodResult=function(r){var n=this._getMethod(r);return new e(this.suite,n.result)},e.prototype.getArgs=function(){if(!(this.ttype instanceof Rt.TFunc))throw new Error("getArgs() applied to non-function");return new e(this.suite,this.ttype.paramList)},e.prototype.getResult=function(){if(!(this.ttype instanceof Rt.TFunc))throw new Error("getResult() applied to non-function");return new e(this.suite,this.ttype.result)},e.prototype.getType=function(){return this.ttype},e.prototype._doCheck=function(r,n){var s=new ft.NoopContext;if(!r(n,s)){var i=new ft.DetailContext;throw r(n,i),i.getError(this._path)}},e.prototype._doValidate=function(r,n){var s=new ft.NoopContext;if(r(n,s))return null;var i=new ft.DetailContext;return r(n,i),i.getErrorDetail(this._path)},e.prototype._getMethod=function(r){var n=this.props.get(r);if(!n)throw new Error("Type has no property "+r);if(!(n instanceof Rt.TFunc))throw new Error("Property "+r+" is not a method");return n},e})();j.Checker=Fi});var _a=Tt(ir=>{"use strict";ir.__esModule=!0;ir.LinesAndColumns=void 0;var Yr=`
-`,ya="\r",xa=(function(){function e(r){this.string=r;for(var n=[0],s=0;s<r.length;)switch(r[s]){case Yr:s+=Yr.length,n.push(s);break;case ya:s+=ya.length,r[s]===Yr&&(s+=Yr.length),n.push(s);break;default:s++;break}this.offsets=n}return e.prototype.locationForIndex=function(r){if(r<0||r>this.string.length)return null;for(var n=0,s=this.offsets;s[n+1]<=r;)n++;var i=r-s[n];return{line:n,column:i}},e.prototype.indexForLocation=function(r){var n=r.line,s=r.column;return n<0||n>=this.offsets.length||s<0||s>this.lengthOfLine(n)?null:this.offsets[n]+s},e.prototype.lengthOfLine=function(r){var n=this.offsets[r],s=r===this.offsets.length-1?this.string.length:this.offsets[r+1];return s-n},e})();ir.LinesAndColumns=xa;ir.default=xa});var l;(function(e){e[e.NONE=0]="NONE";let n=1;e[e._abstract=n]="_abstract";let s=n+1;e[e._accessor=s]="_accessor";let i=s+1;e[e._as=i]="_as";let a=i+1;e[e._assert=a]="_assert";let u=a+1;e[e._asserts=u]="_asserts";let h=u+1;e[e._async=h]="_async";let f=h+1;e[e._await=f]="_await";let m=f+1;e[e._checks=m]="_checks";let _=m+1;e[e._constructor=_]="_constructor";let x=_+1;e[e._declare=x]="_declare";let b=x+1;e[e._enum=b]="_enum";let y=b+1;e[e._exports=y]="_exports";let S=y+1;e[e._from=S]="_from";let q=S+1;e[e._get=q]="_get";let T=q+1;e[e._global=T]="_global";let L=T+1;e[e._implements=L]="_implements";let F=L+1;e[e._infer=F]="_infer";let V=F+1;e[e._interface=V]="_interface";let W=V+1;e[e._is=W]="_is";let Y=W+1;e[e._keyof=Y]="_keyof";let re=Y+1;e[e._mixins=re]="_mixins";let A=re+1;e[e._module=A]="_module";let R=A+1;e[e._namespace=R]="_namespace";let X=R+1;e[e._of=X]="_of";let ae=X+1;e[e._opaque=ae]="_opaque";let be=ae+1;e[e._out=be]="_out";let ce=be+1;e[e._override=ce]="_override";let Te=ce+1;e[e._private=Te]="_private";let ye=Te+1;e[e._protected=ye]="_protected";let We=ye+1;e[e._proto=We]="_proto";let Oe=We+1;e[e._public=Oe]="_public";let He=Oe+1;e[e._readonly=He]="_readonly";let Ge=He+1;e[e._require=Ge]="_require";let me=Ge+1;e[e._satisfies=me]="_satisfies";let ot=me+1;e[e._set=ot]="_set";let it=ot+1;e[e._static=it]="_static";let at=it+1;e[e._symbol=at]="_symbol";let ct=at+1;e[e._type=ct]="_type";let lt=ct+1;e[e._unique=lt]="_unique";let bt=lt+1;e[e._using=bt]="_using"})(l||(l={}));var t;(function(e){e[e.PRECEDENCE_MASK=15]="PRECEDENCE_MASK";let n=16;e[e.IS_KEYWORD=n]="IS_KEYWORD";let s=32;e[e.IS_ASSIGN=s]="IS_ASSIGN";let i=64;e[e.IS_RIGHT_ASSOCIATIVE=i]="IS_RIGHT_ASSOCIATIVE";let a=128;e[e.IS_PREFIX=a]="IS_PREFIX";let u=256;e[e.IS_POSTFIX=u]="IS_POSTFIX";let h=512;e[e.IS_EXPRESSION_START=h]="IS_EXPRESSION_START";let f=512;e[e.num=f]="num";let m=1536;e[e.bigint=m]="bigint";let _=2560;e[e.decimal=_]="decimal";let x=3584;e[e.regexp=x]="regexp";let b=4608;e[e.string=b]="string";let y=5632;e[e.name=y]="name";let S=6144;e[e.eof=S]="eof";let q=7680;e[e.bracketL=q]="bracketL";let T=8192;e[e.bracketR=T]="bracketR";let L=9728;e[e.braceL=L]="braceL";let F=10752;e[e.braceBarL=F]="braceBarL";let V=11264;e[e.braceR=V]="braceR";let W=12288;e[e.braceBarR=W]="braceBarR";let Y=13824;e[e.parenL=Y]="parenL";let re=14336;e[e.parenR=re]="parenR";let A=15360;e[e.comma=A]="comma";let R=16384;e[e.semi=R]="semi";let X=17408;e[e.colon=X]="colon";let ae=18432;e[e.doubleColon=ae]="doubleColon";let be=19456;e[e.dot=be]="dot";let ce=20480;e[e.question=ce]="question";let Te=21504;e[e.questionDot=Te]="questionDot";let ye=22528;e[e.arrow=ye]="arrow";let We=23552;e[e.template=We]="template";let Oe=24576;e[e.ellipsis=Oe]="ellipsis";let He=25600;e[e.backQuote=He]="backQuote";let Ge=27136;e[e.dollarBraceL=Ge]="dollarBraceL";let me=27648;e[e.at=me]="at";let ot=29184;e[e.hash=ot]="hash";let it=29728;e[e.eq=it]="eq";let at=30752;e[e.assign=at]="assign";let ct=32640;e[e.preIncDec=ct]="preIncDec";let lt=33664;e[e.postIncDec=lt]="postIncDec";let bt=34432;e[e.bang=bt]="bang";let tn=35456;e[e.tilde=tn]="tilde";let rn=35841;e[e.pipeline=rn]="pipeline";let nn=36866;e[e.nullishCoalescing=nn]="nullishCoalescing";let sn=37890;e[e.logicalOR=sn]="logicalOR";let on=38915;e[e.logicalAND=on]="logicalAND";let an=39940;e[e.bitwiseOR=an]="bitwiseOR";let cn=40965;e[e.bitwiseXOR=cn]="bitwiseXOR";let ln=41990;e[e.bitwiseAND=ln]="bitwiseAND";let un=43015;e[e.equality=un]="equality";let pn=44040;e[e.lessThan=pn]="lessThan";let fn=45064;e[e.greaterThan=fn]="greaterThan";let hn=46088;e[e.relationalOrEqual=hn]="relationalOrEqual";let mn=47113;e[e.bitShiftL=mn]="bitShiftL";let dn=48137;e[e.bitShiftR=dn]="bitShiftR";let gn=49802;e[e.plus=gn]="plus";let kn=50826;e[e.minus=kn]="minus";let yn=51723;e[e.modulo=yn]="modulo";let xn=52235;e[e.star=xn]="star";let _n=53259;e[e.slash=_n]="slash";let wn=54348;e[e.exponent=wn]="exponent";let bn=55296;e[e.jsxName=bn]="jsxName";let Tn=56320;e[e.jsxText=Tn]="jsxText";let Sn=57344;e[e.jsxEmptyText=Sn]="jsxEmptyText";let In=58880;e[e.jsxTagStart=In]="jsxTagStart";let En=59392;e[e.jsxTagEnd=En]="jsxTagEnd";let An=60928;e[e.typeParameterStart=An]="typeParameterStart";let vn=61440;e[e.nonNullAssertion=vn]="nonNullAssertion";let Pn=62480;e[e._break=Pn]="_break";let Cn=63504;e[e._case=Cn]="_case";let Rn=64528;e[e._catch=Rn]="_catch";let Nn=65552;e[e._continue=Nn]="_continue";let Dn=66576;e[e._debugger=Dn]="_debugger";let Ln=67600;e[e._default=Ln]="_default";let On=68624;e[e._do=On]="_do";let Fn=69648;e[e._else=Fn]="_else";let Mn=70672;e[e._finally=Mn]="_finally";let Bn=71696;e[e._for=Bn]="_for";let jn=73232;e[e._function=jn]="_function";let qn=73744;e[e._if=qn]="_if";let $n=74768;e[e._return=$n]="_return";let Un=75792;e[e._switch=Un]="_switch";let Vn=77456;e[e._throw=Vn]="_throw";let Wn=77840;e[e._try=Wn]="_try";let Hn=78864;e[e._var=Hn]="_var";let Gn=79888;e[e._let=Gn]="_let";let Yn=80912;e[e._const=Yn]="_const";let zn=81936;e[e._while=zn]="_while";let Xn=82960;e[e._with=Xn]="_with";let Jn=84496;e[e._new=Jn]="_new";let Kn=85520;e[e._this=Kn]="_this";let Qn=86544;e[e._super=Qn]="_super";let Zn=87568;e[e._class=Zn]="_class";let es=88080;e[e._extends=es]="_extends";let ts=89104;e[e._export=ts]="_export";let rs=90640;e[e._import=rs]="_import";let ns=91664;e[e._yield=ns]="_yield";let ss=92688;e[e._null=ss]="_null";let os=93712;e[e._true=os]="_true";let is=94736;e[e._false=is]="_false";let as=95256;e[e._in=as]="_in";let cs=96280;e[e._instanceof=cs]="_instanceof";let ls=97936;e[e._typeof=ls]="_typeof";let us=98960;e[e._void=us]="_void";let Ya=99984;e[e._delete=Ya]="_delete";let za=100880;e[e._async=za]="_async";let Xa=101904;e[e._get=Xa]="_get";let Ja=102928;e[e._set=Ja]="_set";let Ka=103952;e[e._declare=Ka]="_declare";let Qa=104976;e[e._readonly=Qa]="_readonly";let Za=106e3;e[e._abstract=Za]="_abstract";let ec=107024;e[e._static=ec]="_static";let tc=107536;e[e._public=tc]="_public";let rc=108560;e[e._private=rc]="_private";let nc=109584;e[e._protected=nc]="_protected";let sc=110608;e[e._override=sc]="_override";let oc=112144;e[e._as=oc]="_as";let ic=113168;e[e._enum=ic]="_enum";let ac=114192;e[e._type=ac]="_type";let cc=115216;e[e._implements=cc]="_implements"})(t||(t={}));function ps(e){switch(e){case t.num:return"num";case t.bigint:return"bigint";case t.decimal:return"decimal";case t.regexp:return"regexp";case t.string:return"string";case t.name:return"name";case t.eof:return"eof";case t.bracketL:return"[";case t.bracketR:return"]";case t.braceL:return"{";case t.braceBarL:return"{|";case t.braceR:return"}";case t.braceBarR:return"|}";case t.parenL:return"(";case t.parenR:return")";case t.comma:return",";case t.semi:return";";case t.colon:return":";case t.doubleColon:return"::";case t.dot:return".";case t.question:return"?";case t.questionDot:return"?.";case t.arrow:return"=>";case t.template:return"template";case t.ellipsis:return"...";case t.backQuote:return"`";case t.dollarBraceL:return"${";case t.at:return"@";case t.hash:return"#";case t.eq:return"=";case t.assign:return"_=";case t.preIncDec:return"++/--";case t.postIncDec:return"++/--";case t.bang:return"!";case t.tilde:return"~";case t.pipeline:return"|>";case t.nullishCoalescing:return"??";case t.logicalOR:return"||";case t.logicalAND:return"&&";case t.bitwiseOR:return"|";case t.bitwiseXOR:return"^";case t.bitwiseAND:return"&";case t.equality:return"==/!=";case t.lessThan:return"<";case t.greaterThan:return">";case t.relationalOrEqual:return"<=/>=";case t.bitShiftL:return"<<";case t.bitShiftR:return">>/>>>";case t.plus:return"+";case t.minus:return"-";case t.modulo:return"%";case t.star:return"*";case t.slash:return"/";case t.exponent:return"**";case t.jsxName:return"jsxName";case t.jsxText:return"jsxText";case t.jsxEmptyText:return"jsxEmptyText";case t.jsxTagStart:return"jsxTagStart";case t.jsxTagEnd:return"jsxTagEnd";case t.typeParameterStart:return"typeParameterStart";case t.nonNullAssertion:return"nonNullAssertion";case t._break:return"break";case t._case:return"case";case t._catch:return"catch";case t._continue:return"continue";case t._debugger:return"debugger";case t._default:return"default";case t._do:return"do";case t._else:return"else";case t._finally:return"finally";case t._for:return"for";case t._function:return"function";case t._if:return"if";case t._return:return"return";case t._switch:return"switch";case t._throw:return"throw";case t._try:return"try";case t._var:return"var";case t._let:return"let";case t._const:return"const";case t._while:return"while";case t._with:return"with";case t._new:return"new";case t._this:return"this";case t._super:return"super";case t._class:return"class";case t._extends:return"extends";case t._export:return"export";case t._import:return"import";case t._yield:return"yield";case t._null:return"null";case t._true:return"true";case t._false:return"false";case t._in:return"in";case t._instanceof:return"instanceof";case t._typeof:return"typeof";case t._void:return"void";case t._delete:return"delete";case t._async:return"async";case t._get:return"get";case t._set:return"set";case t._declare:return"declare";case t._readonly:return"readonly";case t._abstract:return"abstract";case t._static:return"static";case t._public:return"public";case t._private:return"private";case t._protected:return"protected";case t._override:return"override";case t._as:return"as";case t._enum:return"enum";case t._type:return"type";case t._implements:return"implements";default:return""}}var de=class{constructor(r,n,s){this.startTokenIndex=r,this.endTokenIndex=n,this.isFunctionScope=s}},fs=class{constructor(r,n,s,i,a,u,h,f,m,_,x,b,y){this.potentialArrowAt=r,this.noAnonFunctionType=n,this.inDisallowConditionalTypesContext=s,this.tokensLength=i,this.scopesLength=a,this.pos=u,this.type=h,this.contextualKeyword=f,this.start=m,this.end=_,this.isType=x,this.scopeDepth=b,this.error=y}},St=class e{constructor(){e.prototype.__init.call(this),e.prototype.__init2.call(this),e.prototype.__init3.call(this),e.prototype.__init4.call(this),e.prototype.__init5.call(this),e.prototype.__init6.call(this),e.prototype.__init7.call(this),e.prototype.__init8.call(this),e.prototype.__init9.call(this),e.prototype.__init10.call(this),e.prototype.__init11.call(this),e.prototype.__init12.call(this),e.prototype.__init13.call(this)}__init(){this.potentialArrowAt=-1}__init2(){this.noAnonFunctionType=!1}__init3(){this.inDisallowConditionalTypesContext=!1}__init4(){this.tokens=[]}__init5(){this.scopes=[]}__init6(){this.pos=0}__init7(){this.type=t.eof}__init8(){this.contextualKeyword=l.NONE}__init9(){this.start=0}__init10(){this.end=0}__init11(){this.isType=!1}__init12(){this.scopeDepth=0}__init13(){this.error=null}snapshot(){return new fs(this.potentialArrowAt,this.noAnonFunctionType,this.inDisallowConditionalTypesContext,this.tokens.length,this.scopes.length,this.pos,this.type,this.contextualKeyword,this.start,this.end,this.isType,this.scopeDepth,this.error)}restoreFromSnapshot(r){this.potentialArrowAt=r.potentialArrowAt,this.noAnonFunctionType=r.noAnonFunctionType,this.inDisallowConditionalTypesContext=r.inDisallowConditionalTypesContext,this.tokens.length=r.tokensLength,this.scopes.length=r.scopesLength,this.pos=r.pos,this.type=r.type,this.contextualKeyword=r.contextualKeyword,this.start=r.start,this.end=r.end,this.isType=r.isType,this.scopeDepth=r.scopeDepth,this.error=r.error}};var p;(function(e){e[e.backSpace=8]="backSpace";let n=10;e[e.lineFeed=n]="lineFeed";let s=9;e[e.tab=s]="tab";let i=13;e[e.carriageReturn=i]="carriageReturn";let a=14;e[e.shiftOut=a]="shiftOut";let u=32;e[e.space=u]="space";let h=33;e[e.exclamationMark=h]="exclamationMark";let f=34;e[e.quotationMark=f]="quotationMark";let m=35;e[e.numberSign=m]="numberSign";let _=36;e[e.dollarSign=_]="dollarSign";let x=37;e[e.percentSign=x]="percentSign";let b=38;e[e.ampersand=b]="ampersand";let y=39;e[e.apostrophe=y]="apostrophe";let S=40;e[e.leftParenthesis=S]="leftParenthesis";let q=41;e[e.rightParenthesis=q]="rightParenthesis";let T=42;e[e.asterisk=T]="asterisk";let L=43;e[e.plusSign=L]="plusSign";let F=44;e[e.comma=F]="comma";let V=45;e[e.dash=V]="dash";let W=46;e[e.dot=W]="dot";let Y=47;e[e.slash=Y]="slash";let re=48;e[e.digit0=re]="digit0";let A=49;e[e.digit1=A]="digit1";let R=50;e[e.digit2=R]="digit2";let X=51;e[e.digit3=X]="digit3";let ae=52;e[e.digit4=ae]="digit4";let be=53;e[e.digit5=be]="digit5";let ce=54;e[e.digit6=ce]="digit6";let Te=55;e[e.digit7=Te]="digit7";let ye=56;e[e.digit8=ye]="digit8";let We=57;e[e.digit9=We]="digit9";let Oe=58;e[e.colon=Oe]="colon";let He=59;e[e.semicolon=He]="semicolon";let Ge=60;e[e.lessThan=Ge]="lessThan";let me=61;e[e.equalsTo=me]="equalsTo";let ot=62;e[e.greaterThan=ot]="greaterThan";let it=63;e[e.questionMark=it]="questionMark";let at=64;e[e.atSign=at]="atSign";let ct=65;e[e.uppercaseA=ct]="uppercaseA";let lt=66;e[e.uppercaseB=lt]="uppercaseB";let bt=67;e[e.uppercaseC=bt]="uppercaseC";let tn=68;e[e.uppercaseD=tn]="uppercaseD";let rn=69;e[e.uppercaseE=rn]="uppercaseE";let nn=70;e[e.uppercaseF=nn]="uppercaseF";let sn=71;e[e.uppercaseG=sn]="uppercaseG";let on=72;e[e.uppercaseH=on]="uppercaseH";let an=73;e[e.uppercaseI=an]="uppercaseI";let cn=74;e[e.uppercaseJ=cn]="uppercaseJ";let ln=75;e[e.uppercaseK=ln]="uppercaseK";let un=76;e[e.uppercaseL=un]="uppercaseL";let pn=77;e[e.uppercaseM=pn]="uppercaseM";let fn=78;e[e.uppercaseN=fn]="uppercaseN";let hn=79;e[e.uppercaseO=hn]="uppercaseO";let mn=80;e[e.uppercaseP=mn]="uppercaseP";let dn=81;e[e.uppercaseQ=dn]="uppercaseQ";let gn=82;e[e.uppercaseR=gn]="uppercaseR";let kn=83;e[e.uppercaseS=kn]="uppercaseS";let yn=84;e[e.uppercaseT=yn]="uppercaseT";let xn=85;e[e.uppercaseU=xn]="uppercaseU";let _n=86;e[e.uppercaseV=_n]="uppercaseV";let wn=87;e[e.uppercaseW=wn]="uppercaseW";let bn=88;e[e.uppercaseX=bn]="uppercaseX";let Tn=89;e[e.uppercaseY=Tn]="uppercaseY";let Sn=90;e[e.uppercaseZ=Sn]="uppercaseZ";let In=91;e[e.leftSquareBracket=In]="leftSquareBracket";let En=92;e[e.backslash=En]="backslash";let An=93;e[e.rightSquareBracket=An]="rightSquareBracket";let vn=94;e[e.caret=vn]="caret";let Pn=95;e[e.underscore=Pn]="underscore";let Cn=96;e[e.graveAccent=Cn]="graveAccent";let Rn=97;e[e.lowercaseA=Rn]="lowercaseA";let Nn=98;e[e.lowercaseB=Nn]="lowercaseB";let Dn=99;e[e.lowercaseC=Dn]="lowercaseC";let Ln=100;e[e.lowercaseD=Ln]="lowercaseD";let On=101;e[e.lowercaseE=On]="lowercaseE";let Fn=102;e[e.lowercaseF=Fn]="lowercaseF";let Mn=103;e[e.lowercaseG=Mn]="lowercaseG";let Bn=104;e[e.lowercaseH=Bn]="lowercaseH";let jn=105;e[e.lowercaseI=jn]="lowercaseI";let qn=106;e[e.lowercaseJ=qn]="lowercaseJ";let $n=107;e[e.lowercaseK=$n]="lowercaseK";let Un=108;e[e.lowercaseL=Un]="lowercaseL";let Vn=109;e[e.lowercaseM=Vn]="lowercaseM";let Wn=110;e[e.lowercaseN=Wn]="lowercaseN";let Hn=111;e[e.lowercaseO=Hn]="lowercaseO";let Gn=112;e[e.lowercaseP=Gn]="lowercaseP";let Yn=113;e[e.lowercaseQ=Yn]="lowercaseQ";let zn=114;e[e.lowercaseR=zn]="lowercaseR";let Xn=115;e[e.lowercaseS=Xn]="lowercaseS";let Jn=116;e[e.lowercaseT=Jn]="lowercaseT";let Kn=117;e[e.lowercaseU=Kn]="lowercaseU";let Qn=118;e[e.lowercaseV=Qn]="lowercaseV";let Zn=119;e[e.lowercaseW=Zn]="lowercaseW";let es=120;e[e.lowercaseX=es]="lowercaseX";let ts=121;e[e.lowercaseY=ts]="lowercaseY";let rs=122;e[e.lowercaseZ=rs]="lowercaseZ";let ns=123;e[e.leftCurlyBrace=ns]="leftCurlyBrace";let ss=124;e[e.verticalBar=ss]="verticalBar";let os=125;e[e.rightCurlyBrace=os]="rightCurlyBrace";let is=126;e[e.tilde=is]="tilde";let as=160;e[e.nonBreakingSpace=as]="nonBreakingSpace";let cs=5760;e[e.oghamSpaceMark=cs]="oghamSpaceMark";let ls=8232;e[e.lineSeparator=ls]="lineSeparator";let us=8233;e[e.paragraphSeparator=us]="paragraphSeparator"})(p||(p={}));var ut,M,B,o,w,Jo;function Ke(){return Jo++}function Ko(e){if("pos"in e){let r=dc(e.pos);e.message+=` (${r.line}:${r.column})`,e.loc=r}return e}var hs=class{constructor(r,n){this.line=r,this.column=n}};function dc(e){let r=1,n=1;for(let s=0;s<e;s++)w.charCodeAt(s)===p.lineFeed?(r++,n=1):n++;return new hs(r,n)}function Qo(e,r,n,s){w=e,o=new St,Jo=1,ut=r,M=n,B=s}function I(e){return o.contextualKeyword===e}function pt(e){let r=Fe();return r.type===t.name&&r.contextualKeyword===e}function Z(e){return o.contextualKeyword===e&&d(t.name)}function J(e){Z(e)||C()}function ie(){return c(t.eof)||c(t.braceR)||ne()}function ne(){let e=o.tokens[o.tokens.length-1],r=e?e.end:0;for(let n=r;n<o.start;n++){let s=w.charCodeAt(n);if(s===p.lineFeed||s===p.carriageReturn||s===8232||s===8233)return!0}return!1}function pr(){let e=It();for(let r=o.end;r<e;r++){let n=w.charCodeAt(r);if(n===p.lineFeed||n===p.carriageReturn||n===8232||n===8233)return!0}return!1}function Se(){return d(t.semi)||ie()}function H(){Se()||C('Unexpected token, expected ";"')}function g(e){d(e)||C(`Unexpected token, expected "${ps(e)}"`)}function C(e="Unexpected token",r=o.start){if(o.error)return;let n=new SyntaxError(e);n.pos=r,o.error=n,o.pos=w.length,N(t.eof)}var ms=[9,11,12,p.space,p.nonBreakingSpace,p.oghamSpaceMark,8192,8193,8194,8195,8196,8197,8198,8199,8200,8201,8202,8239,8287,12288,65279],ds=/(?:\s|\/\/.*|\/\*[^]*?\*\/)*/g,gs=new Uint8Array(65536);for(let e of ms)gs[e]=1;function gc(e){if(e<48)return e===36;if(e<58)return!0;if(e<65)return!1;if(e<91)return!0;if(e<97)return e===95;if(e<123)return!0;if(e<128)return!1;throw new Error("Should not be called with non-ASCII char code.")}var ue=new Uint8Array(65536);for(let e=0;e<128;e++)ue[e]=gc(e)?1:0;for(let e=128;e<65536;e++)ue[e]=1;for(let e of ms)ue[e]=0;ue[8232]=0;ue[8233]=0;var Me=ue.slice();for(let e=p.digit0;e<=p.digit9;e++)Me[e]=0;var ks=new Int32Array([-1,27,783,918,1755,2376,2862,3483,-1,3699,-1,4617,4752,4833,5130,5508,5940,-1,6480,6939,7749,8181,8451,8613,-1,8829,-1,-1,-1,54,243,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,432,-1,-1,-1,675,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,81,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,108,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,135,-1,-1,-1,-1,-1,-1,-1,-1,-1,162,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,189,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,216,-1,-1,-1,-1,-1,-1,l._abstract<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,270,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,297,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,324,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,351,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,378,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,405,-1,-1,-1,-1,-1,-1,-1,-1,l._accessor<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._as<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,459,-1,-1,-1,-1,-1,594,-1,-1,-1,-1,-1,-1,486,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,513,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,540,-1,-1,-1,-1,-1,-1,l._assert<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,567,-1,-1,-1,-1,-1,-1,-1,l._asserts<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,621,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,648,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._async<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,702,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,729,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,756,-1,-1,-1,-1,-1,-1,l._await<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,810,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,837,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,864,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,891,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._break<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,945,-1,-1,-1,-1,-1,-1,1107,-1,-1,-1,1242,-1,-1,1350,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,972,1026,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,999,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._case<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1053,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1080,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._catch<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1134,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1161,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1188,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1215,-1,-1,-1,-1,-1,-1,-1,l._checks<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1269,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1296,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1323,-1,-1,-1,-1,-1,-1,-1,(t._class<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1377,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1404,1620,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1431,-1,-1,-1,-1,-1,-1,(t._const<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1458,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1485,-1,-1,-1,-1,-1,-1,-1,-1,1512,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1539,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1566,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1593,-1,-1,-1,-1,-1,-1,-1,-1,l._constructor<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1647,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1674,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1701,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1728,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._continue<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1782,-1,-1,-1,-1,-1,-1,-1,-1,-1,2349,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1809,1971,-1,-1,2106,-1,-1,-1,-1,-1,2241,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1836,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1863,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1890,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1917,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1944,-1,-1,-1,-1,-1,-1,-1,-1,(t._debugger<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,1998,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2025,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2052,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2079,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._declare<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2133,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2160,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2187,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2214,-1,-1,-1,-1,-1,-1,(t._default<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2268,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2295,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2322,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._delete<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._do<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2403,-1,2484,-1,-1,-1,-1,-1,-1,-1,-1,-1,2565,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2430,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2457,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._else<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2511,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2538,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._enum<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2592,-1,-1,-1,2727,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2619,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2646,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2673,-1,-1,-1,-1,-1,-1,(t._export<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2700,-1,-1,-1,-1,-1,-1,-1,l._exports<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2754,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2781,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2808,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2835,-1,-1,-1,-1,-1,-1,-1,(t._extends<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2889,-1,-1,-1,-1,-1,-1,-1,2997,-1,-1,-1,-1,-1,3159,-1,-1,3213,-1,-1,3294,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2916,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2943,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,2970,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._false<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3024,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3051,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3078,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3105,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3132,-1,(t._finally<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3186,-1,-1,-1,-1,-1,-1,-1,-1,(t._for<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3240,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3267,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._from<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3321,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3348,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3375,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3402,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3429,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3456,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._function<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3510,-1,-1,-1,-1,-1,-1,3564,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3537,-1,-1,-1,-1,-1,-1,l._get<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3591,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3618,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3645,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3672,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._global<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3726,-1,-1,-1,-1,-1,-1,3753,4077,-1,-1,-1,-1,4590,-1,-1,-1,-1,-1,-1,-1,(t._if<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3780,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3807,-1,-1,3996,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3834,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3861,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3888,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3915,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3942,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,3969,-1,-1,-1,-1,-1,-1,-1,l._implements<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4023,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4050,-1,-1,-1,-1,-1,-1,(t._import<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._in<<1)+1,-1,-1,-1,-1,-1,4104,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4185,4401,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4131,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4158,-1,-1,-1,-1,-1,-1,-1,-1,l._infer<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4212,-1,-1,-1,-1,-1,-1,-1,4239,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4266,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4293,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4320,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4347,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4374,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._instanceof<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4428,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4455,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4482,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4509,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4536,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4563,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._interface<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._is<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4644,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4671,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4698,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4725,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._keyof<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4779,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4806,-1,-1,-1,-1,-1,-1,(t._let<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4860,-1,-1,-1,-1,-1,4995,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4887,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4914,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4941,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,4968,-1,-1,-1,-1,-1,-1,-1,l._mixins<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5022,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5049,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5076,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5103,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._module<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5157,-1,-1,-1,5373,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5427,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5184,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5211,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5238,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5265,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5292,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5319,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5346,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._namespace<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5400,-1,-1,-1,(t._new<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5454,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5481,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._null<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5535,-1,-1,-1,-1,-1,-1,-1,-1,-1,5562,-1,-1,-1,-1,5697,5751,-1,-1,-1,-1,l._of<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5589,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5616,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5643,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5670,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._opaque<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5724,-1,-1,-1,-1,-1,-1,l._out<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5778,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5805,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5832,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5859,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5886,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5913,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._override<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5967,-1,-1,6345,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,5994,-1,-1,-1,-1,-1,6129,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6021,-1,-1,-1,-1,-1,6048,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6075,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6102,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._private<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6156,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6183,-1,-1,-1,-1,-1,-1,-1,-1,-1,6318,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6210,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6237,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6264,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6291,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._protected<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._proto<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6372,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6399,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6426,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6453,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._public<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6507,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6534,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6696,-1,-1,6831,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6561,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6588,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6615,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6642,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6669,-1,l._readonly<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6723,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6750,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6777,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6804,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._require<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6858,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6885,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6912,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._return<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6966,-1,-1,-1,7182,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7236,7371,-1,7479,-1,7614,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,6993,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7020,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7047,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7074,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7101,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7128,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7155,-1,-1,-1,-1,-1,-1,-1,l._satisfies<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7209,-1,-1,-1,-1,-1,-1,l._set<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7263,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7290,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7317,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7344,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._static<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7398,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7425,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7452,-1,-1,-1,-1,-1,-1,-1,-1,(t._super<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7506,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7533,-1,-1,-1,-1,-1,-1,-1,-1,-1,7560,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7587,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._switch<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7641,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7668,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7695,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7722,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._symbol<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7776,-1,-1,-1,-1,-1,-1,-1,-1,-1,7938,-1,-1,-1,-1,-1,-1,8046,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7803,-1,-1,-1,-1,-1,-1,-1,-1,7857,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7830,-1,-1,-1,-1,-1,-1,-1,(t._this<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7884,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7911,-1,-1,-1,(t._throw<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,7965,-1,-1,-1,8019,-1,-1,-1,-1,-1,-1,7992,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._true<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._try<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8073,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8100,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._type<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8127,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8154,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._typeof<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8208,-1,-1,-1,-1,8343,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8235,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8262,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8289,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8316,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._unique<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8370,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8397,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8424,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,l._using<<1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8478,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8532,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8505,-1,-1,-1,-1,-1,-1,-1,-1,(t._var<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8559,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8586,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._void<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8640,8748,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8667,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8694,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8721,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._while<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8775,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8802,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._with<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8856,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8883,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8910,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,8937,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,(t._yield<<1)+1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1,-1]);function ys(){let e=0,r=0,n=o.pos;for(;n<w.length&&(r=w.charCodeAt(n),!(r<p.lowercaseA||r>p.lowercaseZ));){let i=ks[e+(r-p.lowercaseA)+1];if(i===-1)break;e=i,n++}let s=ks[e];if(s>-1&&!ue[r]){o.pos=n,s&1?N(s>>>1):N(t.name,s>>>1);return}for(;n<w.length;){let i=w.charCodeAt(n);if(ue[i])n++;else if(i===p.backslash){if(n+=2,w.charCodeAt(n)===p.leftCurlyBrace){for(;n<w.length&&w.charCodeAt(n)!==p.rightCurlyBrace;)n++;n++}}else if(i===p.atSign&&w.charCodeAt(n+1)===p.atSign)n+=2;else break}o.pos=n,N(t.name)}var E;(function(e){e[e.Access=0]="Access";let n=1;e[e.ExportAccess=n]="ExportAccess";let s=n+1;e[e.TopLevelDeclaration=s]="TopLevelDeclaration";let i=s+1;e[e.FunctionScopedDeclaration=i]="FunctionScopedDeclaration";let a=i+1;e[e.BlockScopedDeclaration=a]="BlockScopedDeclaration";let u=a+1;e[e.ObjectShorthandTopLevelDeclaration=u]="ObjectShorthandTopLevelDeclaration";let h=u+1;e[e.ObjectShorthandFunctionScopedDeclaration=h]="ObjectShorthandFunctionScopedDeclaration";let f=h+1;e[e.ObjectShorthandBlockScopedDeclaration=f]="ObjectShorthandBlockScopedDeclaration";let m=f+1;e[e.ObjectShorthand=m]="ObjectShorthand";let _=m+1;e[e.ImportDeclaration=_]="ImportDeclaration";let x=_+1;e[e.ObjectKey=x]="ObjectKey";let b=x+1;e[e.ImportAccess=b]="ImportAccess"})(E||(E={}));var xe;(function(e){e[e.NoChildren=0]="NoChildren";let n=1;e[e.OneChild=n]="OneChild";let s=n+1;e[e.StaticChildren=s]="StaticChildren";let i=s+1;e[e.KeyAfterPropSpread=i]="KeyAfterPropSpread"})(xe||(xe={}));function fr(e){let r=e.identifierRole;return r===E.TopLevelDeclaration||r===E.FunctionScopedDeclaration||r===E.BlockScopedDeclaration||r===E.ObjectShorthandTopLevelDeclaration||r===E.ObjectShorthandFunctionScopedDeclaration||r===E.ObjectShorthandBlockScopedDeclaration}function Zo(e){let r=e.identifierRole;return r===E.FunctionScopedDeclaration||r===E.BlockScopedDeclaration||r===E.ObjectShorthandFunctionScopedDeclaration||r===E.ObjectShorthandBlockScopedDeclaration}function hr(e){let r=e.identifierRole;return r===E.TopLevelDeclaration||r===E.ObjectShorthandTopLevelDeclaration||r===E.ImportDeclaration}function ei(e){let r=e.identifierRole;return r===E.TopLevelDeclaration||r===E.BlockScopedDeclaration||r===E.ObjectShorthandTopLevelDeclaration||r===E.ObjectShorthandBlockScopedDeclaration}function ti(e){let r=e.identifierRole;return r===E.FunctionScopedDeclaration||r===E.ObjectShorthandFunctionScopedDeclaration}function ri(e){return e.identifierRole===E.ObjectShorthandTopLevelDeclaration||e.identifierRole===E.ObjectShorthandBlockScopedDeclaration||e.identifierRole===E.ObjectShorthandFunctionScopedDeclaration}var Qe=class{constructor(){this.type=o.type,this.contextualKeyword=o.contextualKeyword,this.start=o.start,this.end=o.end,this.scopeDepth=o.scopeDepth,this.isType=o.isType,this.identifierRole=null,this.jsxRole=null,this.shadowsGlobal=!1,this.isAsyncOperation=!1,this.contextId=null,this.rhsEndIndex=null,this.isExpression=!1,this.numNullishCoalesceStarts=0,this.numNullishCoalesceEnds=0,this.isOptionalChainStart=!1,this.isOptionalChainEnd=!1,this.subscriptStartIndex=null,this.nullishStartIndex=null}};function k(){o.tokens.push(new Qe),Ts()}function Re(){o.tokens.push(new Qe),o.start=o.pos,Rc()}function ni(){o.type===t.assign&&--o.pos,vc()}function O(e){for(let n=o.tokens.length-e;n<o.tokens.length;n++)o.tokens[n].isType=!0;let r=o.isType;return o.isType=!0,r}function D(e){o.isType=e}function d(e){return c(e)?(k(),!0):!1}function mr(e){let r=o.isType;o.isType=!0,d(e),o.isType=r}function c(e){return o.type===e}function G(){let e=o.snapshot();k();let r=o.type;return o.restoreFromSnapshot(e),r}var _s=class{constructor(r,n){this.type=r,this.contextualKeyword=n}};function Fe(){let e=o.snapshot();k();let r=o.type,n=o.contextualKeyword;return o.restoreFromSnapshot(e),new _s(r,n)}function It(){return ws(o.pos)}function ws(e){ds.lastIndex=e;let r=ds.exec(w);return e+r[0].length}function bs(){return w.charCodeAt(It())}function Ts(){if(Is(),o.start=o.pos,o.pos>=w.length){let e=o.tokens;e.length>=2&&e[e.length-1].start>=w.length&&e[e.length-2].start>=w.length&&C("Unexpectedly reached the end of input."),N(t.eof);return}kc(w.charCodeAt(o.pos))}function kc(e){Me[e]||e===p.backslash||e===p.atSign&&w.charCodeAt(o.pos+1)===p.atSign?ys():Es(e)}function yc(){for(;w.charCodeAt(o.pos)!==p.asterisk||w.charCodeAt(o.pos+1)!==p.slash;)if(o.pos++,o.pos>w.length){C("Unterminated comment",o.pos-2);return}o.pos+=2}function Ss(e){let r=w.charCodeAt(o.pos+=e);if(o.pos<w.length)for(;r!==p.lineFeed&&r!==p.carriageReturn&&r!==p.lineSeparator&&r!==p.paragraphSeparator&&++o.pos<w.length;)r=w.charCodeAt(o.pos)}function Is(){for(;o.pos<w.length;){let e=w.charCodeAt(o.pos);switch(e){case p.carriageReturn:w.charCodeAt(o.pos+1)===p.lineFeed&&++o.pos;case p.lineFeed:case p.lineSeparator:case p.paragraphSeparator:++o.pos;break;case p.slash:switch(w.charCodeAt(o.pos+1)){case p.asterisk:o.pos+=2,yc();break;case p.slash:Ss(2);break;default:return}break;default:if(gs[e])++o.pos;else return}}}function N(e,r=l.NONE){o.end=o.pos,o.type=e,o.contextualKeyword=r}function xc(){let e=w.charCodeAt(o.pos+1);if(e>=p.digit0&&e<=p.digit9){oi(!0);return}e===p.dot&&w.charCodeAt(o.pos+2)===p.dot?(o.pos+=3,N(t.ellipsis)):(++o.pos,N(t.dot))}function _c(){w.charCodeAt(o.pos+1)===p.equalsTo?$(t.assign,2):$(t.slash,1)}function wc(e){let r=e===p.asterisk?t.star:t.modulo,n=1,s=w.charCodeAt(o.pos+1);e===p.asterisk&&s===p.asterisk&&(n++,s=w.charCodeAt(o.pos+2),r=t.exponent),s===p.equalsTo&&w.charCodeAt(o.pos+2)!==p.greaterThan&&(n++,r=t.assign),$(r,n)}function bc(e){let r=w.charCodeAt(o.pos+1);if(r===e){w.charCodeAt(o.pos+2)===p.equalsTo?$(t.assign,3):$(e===p.verticalBar?t.logicalOR:t.logicalAND,2);return}if(e===p.verticalBar){if(r===p.greaterThan){$(t.pipeline,2);return}else if(r===p.rightCurlyBrace&&B){$(t.braceBarR,2);return}}if(r===p.equalsTo){$(t.assign,2);return}$(e===p.verticalBar?t.bitwiseOR:t.bitwiseAND,1)}function Tc(){w.charCodeAt(o.pos+1)===p.equalsTo?$(t.assign,2):$(t.bitwiseXOR,1)}function Sc(e){let r=w.charCodeAt(o.pos+1);if(r===e){$(t.preIncDec,2);return}r===p.equalsTo?$(t.assign,2):e===p.plusSign?$(t.plus,1):$(t.minus,1)}function Ic(){let e=w.charCodeAt(o.pos+1);if(e===p.lessThan){if(w.charCodeAt(o.pos+2)===p.equalsTo){$(t.assign,3);return}o.isType?$(t.lessThan,1):$(t.bitShiftL,2);return}e===p.equalsTo?$(t.relationalOrEqual,2):$(t.lessThan,1)}function si(){if(o.isType){$(t.greaterThan,1);return}let e=w.charCodeAt(o.pos+1);if(e===p.greaterThan){let r=w.charCodeAt(o.pos+2)===p.greaterThan?3:2;if(w.charCodeAt(o.pos+r)===p.equalsTo){$(t.assign,r+1);return}$(t.bitShiftR,r);return}e===p.equalsTo?$(t.relationalOrEqual,2):$(t.greaterThan,1)}function dr(){o.type===t.greaterThan&&(o.pos-=1,si())}function Ec(e){let r=w.charCodeAt(o.pos+1);if(r===p.equalsTo){$(t.equality,w.charCodeAt(o.pos+2)===p.equalsTo?3:2);return}if(e===p.equalsTo&&r===p.greaterThan){o.pos+=2,N(t.arrow);return}$(e===p.equalsTo?t.eq:t.bang,1)}function Ac(){let e=w.charCodeAt(o.pos+1),r=w.charCodeAt(o.pos+2);e===p.questionMark&&!(B&&o.isType)?r===p.equalsTo?$(t.assign,3):$(t.nullishCoalescing,2):e===p.dot&&!(r>=p.digit0&&r<=p.digit9)?(o.pos+=2,N(t.questionDot)):(++o.pos,N(t.question))}function Es(e){switch(e){case p.numberSign:++o.pos,N(t.hash);return;case p.dot:xc();return;case p.leftParenthesis:++o.pos,N(t.parenL);return;case p.rightParenthesis:++o.pos,N(t.parenR);return;case p.semicolon:++o.pos,N(t.semi);return;case p.comma:++o.pos,N(t.comma);return;case p.leftSquareBracket:++o.pos,N(t.bracketL);return;case p.rightSquareBracket:++o.pos,N(t.bracketR);return;case p.leftCurlyBrace:B&&w.charCodeAt(o.pos+1)===p.verticalBar?$(t.braceBarL,2):(++o.pos,N(t.braceL));return;case p.rightCurlyBrace:++o.pos,N(t.braceR);return;case p.colon:w.charCodeAt(o.pos+1)===p.colon?$(t.doubleColon,2):(++o.pos,N(t.colon));return;case p.questionMark:Ac();return;case p.atSign:++o.pos,N(t.at);return;case p.graveAccent:++o.pos,N(t.backQuote);return;case p.digit0:{let r=w.charCodeAt(o.pos+1);if(r===p.lowercaseX||r===p.uppercaseX||r===p.lowercaseO||r===p.uppercaseO||r===p.lowercaseB||r===p.uppercaseB){Pc();return}}case p.digit1:case p.digit2:case p.digit3:case p.digit4:case p.digit5:case p.digit6:case p.digit7:case p.digit8:case p.digit9:oi(!1);return;case p.quotationMark:case p.apostrophe:Cc(e);return;case p.slash:_c();return;case p.percentSign:case p.asterisk:wc(e);return;case p.verticalBar:case p.ampersand:bc(e);return;case p.caret:Tc();return;case p.plusSign:case p.dash:Sc(e);return;case p.lessThan:Ic();return;case p.greaterThan:si();return;case p.equalsTo:case p.exclamationMark:Ec(e);return;case p.tilde:$(t.tilde,1);return;default:break}C(`Unexpected character '${String.fromCharCode(e)}'`,o.pos)}function $(e,r){o.pos+=r,N(e)}function vc(){let e=o.pos,r=!1,n=!1;for(;;){if(o.pos>=w.length){C("Unterminated regular expression",e);return}let s=w.charCodeAt(o.pos);if(r)r=!1;else{if(s===p.leftSquareBracket)n=!0;else if(s===p.rightSquareBracket&&n)n=!1;else if(s===p.slash&&!n)break;r=s===p.backslash}++o.pos}++o.pos,Nc(),N(t.regexp)}function xs(){for(;;){let e=w.charCodeAt(o.pos);if(e>=p.digit0&&e<=p.digit9||e===p.underscore)o.pos++;else break}}function Pc(){for(o.pos+=2;;){let r=w.charCodeAt(o.pos);if(r>=p.digit0&&r<=p.digit9||r>=p.lowercaseA&&r<=p.lowercaseF||r>=p.uppercaseA&&r<=p.uppercaseF||r===p.underscore)o.pos++;else break}w.charCodeAt(o.pos)===p.lowercaseN?(++o.pos,N(t.bigint)):N(t.num)}function oi(e){let r=!1,n=!1;e||xs();let s=w.charCodeAt(o.pos);if(s===p.dot&&(++o.pos,xs(),s=w.charCodeAt(o.pos)),(s===p.uppercaseE||s===p.lowercaseE)&&(s=w.charCodeAt(++o.pos),(s===p.plusSign||s===p.dash)&&++o.pos,xs(),s=w.charCodeAt(o.pos)),s===p.lowercaseN?(++o.pos,r=!0):s===p.lowercaseM&&(++o.pos,n=!0),r){N(t.bigint);return}if(n){N(t.decimal);return}N(t.num)}function Cc(e){for(o.pos++;;){if(o.pos>=w.length){C("Unterminated string constant");return}let r=w.charCodeAt(o.pos);if(r===p.backslash)o.pos++;else if(r===e)break;o.pos++}o.pos++,N(t.string)}function Rc(){for(;;){if(o.pos>=w.length){C("Unterminated template");return}let e=w.charCodeAt(o.pos);if(e===p.graveAccent||e===p.dollarSign&&w.charCodeAt(o.pos+1)===p.leftCurlyBrace){if(o.pos===o.start&&c(t.template))if(e===p.dollarSign){o.pos+=2,N(t.dollarBraceL);return}else{++o.pos,N(t.backQuote);return}N(t.template);return}e===p.backslash&&o.pos++,o.pos++}}function Nc(){for(;o.pos<w.length;){let e=w.charCodeAt(o.pos);if(ue[e])o.pos++;else if(e===p.backslash){if(o.pos+=2,w.charCodeAt(o.pos)===p.leftCurlyBrace){for(;o.pos<w.length&&w.charCodeAt(o.pos)!==p.rightCurlyBrace;)o.pos++;o.pos++}}else break}}function Ne(e,r=e.currentIndex()){let n=r+1;if(gr(e,n)){let s=e.identifierNameAtIndex(r);return{isType:!1,leftName:s,rightName:s,endIndex:n}}if(n++,gr(e,n))return{isType:!0,leftName:null,rightName:null,endIndex:n};if(n++,gr(e,n))return{isType:!1,leftName:e.identifierNameAtIndex(r),rightName:e.identifierNameAtIndex(r+2),endIndex:n};if(n++,gr(e,n))return{isType:!0,leftName:null,rightName:null,endIndex:n};throw new Error(`Unexpected import/export specifier at ${r}`)}function gr(e,r){let n=e.tokens[r];return n.type===t.braceR||n.type===t.comma}var ii=new Map([["quot",'"'],["amp","&"],["apos","'"],["lt","<"],["gt",">"],["nbsp","\xA0"],["iexcl","\xA1"],["cent","\xA2"],["pound","\xA3"],["curren","\xA4"],["yen","\xA5"],["brvbar","\xA6"],["sect","\xA7"],["uml","\xA8"],["copy","\xA9"],["ordf","\xAA"],["laquo","\xAB"],["not","\xAC"],["shy","\xAD"],["reg","\xAE"],["macr","\xAF"],["deg","\xB0"],["plusmn","\xB1"],["sup2","\xB2"],["sup3","\xB3"],["acute","\xB4"],["micro","\xB5"],["para","\xB6"],["middot","\xB7"],["cedil","\xB8"],["sup1","\xB9"],["ordm","\xBA"],["raquo","\xBB"],["frac14","\xBC"],["frac12","\xBD"],["frac34","\xBE"],["iquest","\xBF"],["Agrave","\xC0"],["Aacute","\xC1"],["Acirc","\xC2"],["Atilde","\xC3"],["Auml","\xC4"],["Aring","\xC5"],["AElig","\xC6"],["Ccedil","\xC7"],["Egrave","\xC8"],["Eacute","\xC9"],["Ecirc","\xCA"],["Euml","\xCB"],["Igrave","\xCC"],["Iacute","\xCD"],["Icirc","\xCE"],["Iuml","\xCF"],["ETH","\xD0"],["Ntilde","\xD1"],["Ograve","\xD2"],["Oacute","\xD3"],["Ocirc","\xD4"],["Otilde","\xD5"],["Ouml","\xD6"],["times","\xD7"],["Oslash","\xD8"],["Ugrave","\xD9"],["Uacute","\xDA"],["Ucirc","\xDB"],["Uuml","\xDC"],["Yacute","\xDD"],["THORN","\xDE"],["szlig","\xDF"],["agrave","\xE0"],["aacute","\xE1"],["acirc","\xE2"],["atilde","\xE3"],["auml","\xE4"],["aring","\xE5"],["aelig","\xE6"],["ccedil","\xE7"],["egrave","\xE8"],["eacute","\xE9"],["ecirc","\xEA"],["euml","\xEB"],["igrave","\xEC"],["iacute","\xED"],["icirc","\xEE"],["iuml","\xEF"],["eth","\xF0"],["ntilde","\xF1"],["ograve","\xF2"],["oacute","\xF3"],["ocirc","\xF4"],["otilde","\xF5"],["ouml","\xF6"],["divide","\xF7"],["oslash","\xF8"],["ugrave","\xF9"],["uacute","\xFA"],["ucirc","\xFB"],["uuml","\xFC"],["yacute","\xFD"],["thorn","\xFE"],["yuml","\xFF"],["OElig","\u0152"],["oelig","\u0153"],["Scaron","\u0160"],["scaron","\u0161"],["Yuml","\u0178"],["fnof","\u0192"],["circ","\u02C6"],["tilde","\u02DC"],["Alpha","\u0391"],["Beta","\u0392"],["Gamma","\u0393"],["Delta","\u0394"],["Epsilon","\u0395"],["Zeta","\u0396"],["Eta","\u0397"],["Theta","\u0398"],["Iota","\u0399"],["Kappa","\u039A"],["Lambda","\u039B"],["Mu","\u039C"],["Nu","\u039D"],["Xi","\u039E"],["Omicron","\u039F"],["Pi","\u03A0"],["Rho","\u03A1"],["Sigma","\u03A3"],["Tau","\u03A4"],["Upsilon","\u03A5"],["Phi","\u03A6"],["Chi","\u03A7"],["Psi","\u03A8"],["Omega","\u03A9"],["alpha","\u03B1"],["beta","\u03B2"],["gamma","\u03B3"],["delta","\u03B4"],["epsilon","\u03B5"],["zeta","\u03B6"],["eta","\u03B7"],["theta","\u03B8"],["iota","\u03B9"],["kappa","\u03BA"],["lambda","\u03BB"],["mu","\u03BC"],["nu","\u03BD"],["xi","\u03BE"],["omicron","\u03BF"],["pi","\u03C0"],["rho","\u03C1"],["sigmaf","\u03C2"],["sigma","\u03C3"],["tau","\u03C4"],["upsilon","\u03C5"],["phi","\u03C6"],["chi","\u03C7"],["psi","\u03C8"],["omega","\u03C9"],["thetasym","\u03D1"],["upsih","\u03D2"],["piv","\u03D6"],["ensp","\u2002"],["emsp","\u2003"],["thinsp","\u2009"],["zwnj","\u200C"],["zwj","\u200D"],["lrm","\u200E"],["rlm","\u200F"],["ndash","\u2013"],["mdash","\u2014"],["lsquo","\u2018"],["rsquo","\u2019"],["sbquo","\u201A"],["ldquo","\u201C"],["rdquo","\u201D"],["bdquo","\u201E"],["dagger","\u2020"],["Dagger","\u2021"],["bull","\u2022"],["hellip","\u2026"],["permil","\u2030"],["prime","\u2032"],["Prime","\u2033"],["lsaquo","\u2039"],["rsaquo","\u203A"],["oline","\u203E"],["frasl","\u2044"],["euro","\u20AC"],["image","\u2111"],["weierp","\u2118"],["real","\u211C"],["trade","\u2122"],["alefsym","\u2135"],["larr","\u2190"],["uarr","\u2191"],["rarr","\u2192"],["darr","\u2193"],["harr","\u2194"],["crarr","\u21B5"],["lArr","\u21D0"],["uArr","\u21D1"],["rArr","\u21D2"],["dArr","\u21D3"],["hArr","\u21D4"],["forall","\u2200"],["part","\u2202"],["exist","\u2203"],["empty","\u2205"],["nabla","\u2207"],["isin","\u2208"],["notin","\u2209"],["ni","\u220B"],["prod","\u220F"],["sum","\u2211"],["minus","\u2212"],["lowast","\u2217"],["radic","\u221A"],["prop","\u221D"],["infin","\u221E"],["ang","\u2220"],["and","\u2227"],["or","\u2228"],["cap","\u2229"],["cup","\u222A"],["int","\u222B"],["there4","\u2234"],["sim","\u223C"],["cong","\u2245"],["asymp","\u2248"],["ne","\u2260"],["equiv","\u2261"],["le","\u2264"],["ge","\u2265"],["sub","\u2282"],["sup","\u2283"],["nsub","\u2284"],["sube","\u2286"],["supe","\u2287"],["oplus","\u2295"],["otimes","\u2297"],["perp","\u22A5"],["sdot","\u22C5"],["lceil","\u2308"],["rceil","\u2309"],["lfloor","\u230A"],["rfloor","\u230B"],["lang","\u2329"],["rang","\u232A"],["loz","\u25CA"],["spades","\u2660"],["clubs","\u2663"],["hearts","\u2665"],["diams","\u2666"]]);function Et(e){let[r,n]=ai(e.jsxPragma||"React.createElement"),[s,i]=ai(e.jsxFragmentPragma||"React.Fragment");return{base:r,suffix:n,fragmentBase:s,fragmentSuffix:i}}function ai(e){let r=e.indexOf(".");return r===-1&&(r=e.length),[e.slice(0,r),e.slice(r)]}var K=class{getPrefixCode(){return""}getHoistedCode(){return""}getSuffixCode(){return""}};var At=class e extends K{__init(){this.lastLineNumber=1}__init2(){this.lastIndex=0}__init3(){this.filenameVarName=null}__init4(){this.esmAutomaticImportNameResolutions={}}__init5(){this.cjsAutomaticModuleNameResolutions={}}constructor(r,n,s,i,a){super(),this.rootTransformer=r,this.tokens=n,this.importProcessor=s,this.nameManager=i,this.options=a,e.prototype.__init.call(this),e.prototype.__init2.call(this),e.prototype.__init3.call(this),e.prototype.__init4.call(this),e.prototype.__init5.call(this),this.jsxPragmaInfo=Et(a),this.isAutomaticRuntime=a.jsxRuntime==="automatic",this.jsxImportSource=a.jsxImportSource||"react"}process(){return this.tokens.matches1(t.jsxTagStart)?(this.processJSXTag(),!0):!1}getPrefixCode(){let r="";if(this.filenameVarName&&(r+=`const ${this.filenameVarName} = ${JSON.stringify(this.options.filePath||"")};`),this.isAutomaticRuntime)if(this.importProcessor)for(let[n,s]of Object.entries(this.cjsAutomaticModuleNameResolutions))r+=`var ${s} = require("${n}");`;else{let{createElement:n,...s}=this.esmAutomaticImportNameResolutions;n&&(r+=`import {createElement as ${n}} from "${this.jsxImportSource}";`);let i=Object.entries(s).map(([a,u])=>`${a} as ${u}`).join(", ");if(i){let a=this.jsxImportSource+(this.options.production?"/jsx-runtime":"/jsx-dev-runtime");r+=`import {${i}} from "${a}";`}}return r}processJSXTag(){let{jsxRole:r,start:n}=this.tokens.currentToken(),s=this.options.production?null:this.getElementLocationCode(n);this.isAutomaticRuntime&&r!==xe.KeyAfterPropSpread?this.transformTagToJSXFunc(s,r):this.transformTagToCreateElement(s)}getElementLocationCode(r){return`lineNumber: ${this.getLineNumberForIndex(r)}`}getLineNumberForIndex(r){let n=this.tokens.code;for(;this.lastIndex<r&&this.lastIndex<n.length;)n[this.lastIndex]===`
-`&&this.lastLineNumber++,this.lastIndex++;return this.lastLineNumber}transformTagToJSXFunc(r,n){let s=n===xe.StaticChildren;this.tokens.replaceToken(this.getJSXFuncInvocationCode(s));let i=null;if(this.tokens.matches1(t.jsxTagEnd))this.tokens.replaceToken(`${this.getFragmentCode()}, {`),this.processAutomaticChildrenAndEndProps(n);else{if(this.processTagIntro(),this.tokens.appendCode(", {"),i=this.processProps(!0),this.tokens.matches2(t.slash,t.jsxTagEnd))this.tokens.appendCode("}");else if(this.tokens.matches1(t.jsxTagEnd))this.tokens.removeToken(),this.processAutomaticChildrenAndEndProps(n);else throw new Error("Expected either /> or > at the end of the tag.");i&&this.tokens.appendCode(`, ${i}`)}for(this.options.production||(i===null&&this.tokens.appendCode(", void 0"),this.tokens.appendCode(`, ${s}, ${this.getDevSource(r)}, this`)),this.tokens.removeInitialToken();!this.tokens.matches1(t.jsxTagEnd);)this.tokens.removeToken();this.tokens.replaceToken(")")}transformTagToCreateElement(r){if(this.tokens.replaceToken(this.getCreateElementInvocationCode()),this.tokens.matches1(t.jsxTagEnd))this.tokens.replaceToken(`${this.getFragmentCode()}, null`),this.processChildren(!0);else if(this.processTagIntro(),this.processPropsObjectWithDevInfo(r),!this.tokens.matches2(t.slash,t.jsxTagEnd))if(this.tokens.matches1(t.jsxTagEnd))this.tokens.removeToken(),this.processChildren(!0);else throw new Error("Expected either /> or > at the end of the tag.");for(this.tokens.removeInitialToken();!this.tokens.matches1(t.jsxTagEnd);)this.tokens.removeToken();this.tokens.replaceToken(")")}getJSXFuncInvocationCode(r){return this.options.production?r?this.claimAutoImportedFuncInvocation("jsxs","/jsx-runtime"):this.claimAutoImportedFuncInvocation("jsx","/jsx-runtime"):this.claimAutoImportedFuncInvocation("jsxDEV","/jsx-dev-runtime")}getCreateElementInvocationCode(){if(this.isAutomaticRuntime)return this.claimAutoImportedFuncInvocation("createElement","");{let{jsxPragmaInfo:r}=this;return`${this.importProcessor&&this.importProcessor.getIdentifierReplacement(r.base)||r.base}${r.suffix}(`}}getFragmentCode(){if(this.isAutomaticRuntime)return this.claimAutoImportedName("Fragment",this.options.production?"/jsx-runtime":"/jsx-dev-runtime");{let{jsxPragmaInfo:r}=this;return(this.importProcessor&&this.importProcessor.getIdentifierReplacement(r.fragmentBase)||r.fragmentBase)+r.fragmentSuffix}}claimAutoImportedFuncInvocation(r,n){let s=this.claimAutoImportedName(r,n);return this.importProcessor?`${s}.call(void 0, `:`${s}(`}claimAutoImportedName(r,n){if(this.importProcessor){let s=this.jsxImportSource+n;return this.cjsAutomaticModuleNameResolutions[s]||(this.cjsAutomaticModuleNameResolutions[s]=this.importProcessor.getFreeIdentifierForPath(s)),`${this.cjsAutomaticModuleNameResolutions[s]}.${r}`}else return this.esmAutomaticImportNameResolutions[r]||(this.esmAutomaticImportNameResolutions[r]=this.nameManager.claimFreeName(`_${r}`)),this.esmAutomaticImportNameResolutions[r]}processTagIntro(){let r=this.tokens.currentIndex()+1;for(;this.tokens.tokens[r].isType||!this.tokens.matches2AtIndex(r-1,t.jsxName,t.jsxName)&&!this.tokens.matches2AtIndex(r-1,t.greaterThan,t.jsxName)&&!this.tokens.matches1AtIndex(r,t.braceL)&&!this.tokens.matches1AtIndex(r,t.jsxTagEnd)&&!this.tokens.matches2AtIndex(r,t.slash,t.jsxTagEnd);)r++;if(r===this.tokens.currentIndex()+1){let n=this.tokens.identifierName();As(n)&&this.tokens.replaceToken(`'${n}'`)}for(;this.tokens.currentIndex()<r;)this.rootTransformer.processToken()}processPropsObjectWithDevInfo(r){let n=this.options.production?"":`__self: this, __source: ${this.getDevSource(r)}`;if(!this.tokens.matches1(t.jsxName)&&!this.tokens.matches1(t.braceL)){n?this.tokens.appendCode(`, {${n}}`):this.tokens.appendCode(", null");return}this.tokens.appendCode(", {"),this.processProps(!1),n?this.tokens.appendCode(` ${n}}`):this.tokens.appendCode("}")}processProps(r){let n=null;for(;;){if(this.tokens.matches2(t.jsxName,t.eq)){let s=this.tokens.identifierName();if(r&&s==="key"){n!==null&&this.tokens.appendCode(n.replace(/[^\n]/g,"")),this.tokens.removeToken(),this.tokens.removeToken();let i=this.tokens.snapshot();this.processPropValue(),n=this.tokens.dangerouslyGetAndRemoveCodeSinceSnapshot(i);continue}else this.processPropName(s),this.tokens.replaceToken(": "),this.processPropValue()}else if(this.tokens.matches1(t.jsxName)){let s=this.tokens.identifierName();this.processPropName(s),this.tokens.appendCode(": true")}else if(this.tokens.matches1(t.braceL))this.tokens.replaceToken(""),this.rootTransformer.processBalancedCode(),this.tokens.replaceToken("");else break;this.tokens.appendCode(",")}return n}processPropName(r){r.includes("-")?this.tokens.replaceToken(`'${r}'`):this.tokens.copyToken()}processPropValue(){this.tokens.matches1(t.braceL)?(this.tokens.replaceToken(""),this.rootTransformer.processBalancedCode(),this.tokens.replaceToken("")):this.tokens.matches1(t.jsxTagStart)?this.processJSXTag():this.processStringPropValue()}processStringPropValue(){let r=this.tokens.currentToken(),n=this.tokens.code.slice(r.start+1,r.end-1),s=ci(n),i=Lc(n);this.tokens.replaceToken(i+s)}processAutomaticChildrenAndEndProps(r){r===xe.StaticChildren?(this.tokens.appendCode(" children: ["),this.processChildren(!1),this.tokens.appendCode("]}")):(r===xe.OneChild&&this.tokens.appendCode(" children: "),this.processChildren(!1),this.tokens.appendCode("}"))}processChildren(r){let n=r;for(;;){if(this.tokens.matches2(t.jsxTagStart,t.slash))return;let s=!1;if(this.tokens.matches1(t.braceL))this.tokens.matches2(t.braceL,t.braceR)?(this.tokens.replaceToken(""),this.tokens.replaceToken("")):(this.tokens.replaceToken(n?", ":""),this.rootTransformer.processBalancedCode(),this.tokens.replaceToken(""),s=!0);else if(this.tokens.matches1(t.jsxTagStart))this.tokens.appendCode(n?", ":""),this.processJSXTag(),s=!0;else if(this.tokens.matches1(t.jsxText)||this.tokens.matches1(t.jsxEmptyText))s=this.processChildTextElement(n);else throw new Error("Unexpected token when processing JSX children.");s&&(n=!0)}}processChildTextElement(r){let n=this.tokens.currentToken(),s=this.tokens.code.slice(n.start,n.end),i=ci(s),a=Dc(s);return a==='""'?(this.tokens.replaceToken(i),!1):(this.tokens.replaceToken(`${r?", ":""}${a}${i}`),!0)}getDevSource(r){return`{fileName: ${this.getFilenameVarName()}, ${r}}`}getFilenameVarName(){return this.filenameVarName||(this.filenameVarName=this.nameManager.claimFreeName("_jsxFileName")),this.filenameVarName}};function As(e){let r=e.charCodeAt(0);return r>=p.lowercaseA&&r<=p.lowercaseZ}function Dc(e){let r="",n="",s=!1,i=!1;for(let a=0;a<e.length;a++){let u=e[a];if(u===" "||u==="	"||u==="\r")s||(n+=u);else if(u===`
-`)n="",s=!0;else{if(i&&s&&(r+=" "),r+=n,n="",u==="&"){let{entity:h,newI:f}=li(e,a+1);a=f-1,r+=h}else r+=u;i=!0,s=!1}}return s||(r+=n),JSON.stringify(r)}function ci(e){let r=0,n=0;for(let s of e)s===`
-`?(r++,n=0):s===" "&&n++;return`
-`.repeat(r)+" ".repeat(n)}function Lc(e){let r="";for(let n=0;n<e.length;n++){let s=e[n];if(s===`
-`)if(/\s/.test(e[n+1]))for(r+=" ";n<e.length&&/\s/.test(e[n+1]);)n++;else r+=`
-`;else if(s==="&"){let{entity:i,newI:a}=li(e,n+1);r+=i,n=a-1}else r+=s}return JSON.stringify(r)}function li(e,r){let n="",s=0,i,a=r;if(e[a]==="#"){let u=10;a++;let h;if(e[a]==="x")for(u=16,a++,h=a;a<e.length&&Fc(e.charCodeAt(a));)a++;else for(h=a;a<e.length&&Oc(e.charCodeAt(a));)a++;if(e[a]===";"){let f=e.slice(h,a);f&&(a++,i=String.fromCodePoint(parseInt(f,u)))}}else for(;a<e.length&&s++<10;){let u=e[a];if(a++,u===";"){i=ii.get(n);break}n+=u}return i?{entity:i,newI:a}:{entity:"&",newI:r}}function Oc(e){return e>=p.digit0&&e<=p.digit9}function Fc(e){return e>=p.digit0&&e<=p.digit9||e>=p.lowercaseA&&e<=p.lowercaseF||e>=p.uppercaseA&&e<=p.uppercaseF}function kr(e,r){let n=Et(r),s=new Set;for(let i=0;i<e.tokens.length;i++){let a=e.tokens[i];if(a.type===t.name&&!a.isType&&(a.identifierRole===E.Access||a.identifierRole===E.ObjectShorthand||a.identifierRole===E.ExportAccess)&&!a.shadowsGlobal&&s.add(e.identifierNameForToken(a)),a.type===t.jsxTagStart&&s.add(n.base),a.type===t.jsxTagStart&&i+1<e.tokens.length&&e.tokens[i+1].type===t.jsxTagEnd&&(s.add(n.base),s.add(n.fragmentBase)),a.type===t.jsxName&&a.identifierRole===E.Access){let u=e.identifierNameForToken(a);(!As(u)||e.tokens[i+1].type===t.dot)&&s.add(e.identifierNameForToken(a))}}return s}var vt=class e{__init(){this.nonTypeIdentifiers=new Set}__init2(){this.importInfoByPath=new Map}__init3(){this.importsToReplace=new Map}__init4(){this.identifierReplacements=new Map}__init5(){this.exportBindingsByLocalName=new Map}constructor(r,n,s,i,a,u,h){this.nameManager=r,this.tokens=n,this.enableLegacyTypeScriptModuleInterop=s,this.options=i,this.isTypeScriptTransformEnabled=a,this.keepUnusedImports=u,this.helperManager=h,e.prototype.__init.call(this),e.prototype.__init2.call(this),e.prototype.__init3.call(this),e.prototype.__init4.call(this),e.prototype.__init5.call(this)}preprocessTokens(){for(let r=0;r<this.tokens.tokens.length;r++)this.tokens.matches1AtIndex(r,t._import)&&!this.tokens.matches3AtIndex(r,t._import,t.name,t.eq)&&this.preprocessImportAtIndex(r),this.tokens.matches1AtIndex(r,t._export)&&!this.tokens.matches2AtIndex(r,t._export,t.eq)&&this.preprocessExportAtIndex(r);this.generateImportReplacements()}pruneTypeOnlyImports(){this.nonTypeIdentifiers=kr(this.tokens,this.options);for(let[r,n]of this.importInfoByPath.entries()){if(n.hasBareImport||n.hasStarExport||n.exportStarNames.length>0||n.namedExports.length>0)continue;[...n.defaultNames,...n.wildcardNames,...n.namedImports.map(({localName:i})=>i)].every(i=>this.shouldAutomaticallyElideImportedName(i))&&this.importsToReplace.set(r,"")}}shouldAutomaticallyElideImportedName(r){return this.isTypeScriptTransformEnabled&&!this.keepUnusedImports&&!this.nonTypeIdentifiers.has(r)}generateImportReplacements(){for(let[r,n]of this.importInfoByPath.entries()){let{defaultNames:s,wildcardNames:i,namedImports:a,namedExports:u,exportStarNames:h,hasStarExport:f}=n;if(s.length===0&&i.length===0&&a.length===0&&u.length===0&&h.length===0&&!f){this.importsToReplace.set(r,`require('${r}');`);continue}let m=this.getFreeIdentifierForPath(r),_;this.enableLegacyTypeScriptModuleInterop?_=m:_=i.length>0?i[0]:this.getFreeIdentifierForPath(r);let x=`var ${m} = require('${r}');`;if(i.length>0)for(let b of i){let y=this.enableLegacyTypeScriptModuleInterop?m:`${this.helperManager.getHelperName("interopRequireWildcard")}(${m})`;x+=` var ${b} = ${y};`}else h.length>0&&_!==m?x+=` var ${_} = ${this.helperManager.getHelperName("interopRequireWildcard")}(${m});`:s.length>0&&_!==m&&(x+=` var ${_} = ${this.helperManager.getHelperName("interopRequireDefault")}(${m});`);for(let{importedName:b,localName:y}of u)x+=` ${this.helperManager.getHelperName("createNamedExportFrom")}(${m}, '${y}', '${b}');`;for(let b of h)x+=` exports.${b} = ${_};`;f&&(x+=` ${this.helperManager.getHelperName("createStarExport")}(${m});`),this.importsToReplace.set(r,x);for(let b of s)this.identifierReplacements.set(b,`${_}.default`);for(let{importedName:b,localName:y}of a)this.identifierReplacements.set(y,`${m}.${b}`)}}getFreeIdentifierForPath(r){let n=r.split("/"),i=n[n.length-1].replace(/\W/g,"");return this.nameManager.claimFreeName(`_${i}`)}preprocessImportAtIndex(r){let n=[],s=[],i=[];if(r++,(this.tokens.matchesContextualAtIndex(r,l._type)||this.tokens.matches1AtIndex(r,t._typeof))&&!this.tokens.matches1AtIndex(r+1,t.comma)&&!this.tokens.matchesContextualAtIndex(r+1,l._from)||this.tokens.matches1AtIndex(r,t.parenL))return;if(this.tokens.matches1AtIndex(r,t.name)&&(n.push(this.tokens.identifierNameAtIndex(r)),r++,this.tokens.matches1AtIndex(r,t.comma)&&r++),this.tokens.matches1AtIndex(r,t.star)&&(r+=2,s.push(this.tokens.identifierNameAtIndex(r)),r++),this.tokens.matches1AtIndex(r,t.braceL)){let h=this.getNamedImports(r+1);r=h.newIndex;for(let f of h.namedImports)f.importedName==="default"?n.push(f.localName):i.push(f)}if(this.tokens.matchesContextualAtIndex(r,l._from)&&r++,!this.tokens.matches1AtIndex(r,t.string))throw new Error("Expected string token at the end of import statement.");let a=this.tokens.stringValueAtIndex(r),u=this.getImportInfo(a);u.defaultNames.push(...n),u.wildcardNames.push(...s),u.namedImports.push(...i),n.length===0&&s.length===0&&i.length===0&&(u.hasBareImport=!0)}preprocessExportAtIndex(r){if(this.tokens.matches2AtIndex(r,t._export,t._var)||this.tokens.matches2AtIndex(r,t._export,t._let)||this.tokens.matches2AtIndex(r,t._export,t._const))this.preprocessVarExportAtIndex(r);else if(this.tokens.matches2AtIndex(r,t._export,t._function)||this.tokens.matches2AtIndex(r,t._export,t._class)){let n=this.tokens.identifierNameAtIndex(r+2);this.addExportBinding(n,n)}else if(this.tokens.matches3AtIndex(r,t._export,t.name,t._function)){let n=this.tokens.identifierNameAtIndex(r+3);this.addExportBinding(n,n)}else this.tokens.matches2AtIndex(r,t._export,t.braceL)?this.preprocessNamedExportAtIndex(r):this.tokens.matches2AtIndex(r,t._export,t.star)&&this.preprocessExportStarAtIndex(r)}preprocessVarExportAtIndex(r){let n=0;for(let s=r+2;;s++)if(this.tokens.matches1AtIndex(s,t.braceL)||this.tokens.matches1AtIndex(s,t.dollarBraceL)||this.tokens.matches1AtIndex(s,t.bracketL))n++;else if(this.tokens.matches1AtIndex(s,t.braceR)||this.tokens.matches1AtIndex(s,t.bracketR))n--;else{if(n===0&&!this.tokens.matches1AtIndex(s,t.name))break;if(this.tokens.matches1AtIndex(1,t.eq)){let i=this.tokens.currentToken().rhsEndIndex;if(i==null)throw new Error("Expected = token with an end index.");s=i-1}else{let i=this.tokens.tokens[s];if(fr(i)){let a=this.tokens.identifierNameAtIndex(s);this.identifierReplacements.set(a,`exports.${a}`)}}}}preprocessNamedExportAtIndex(r){r+=2;let{newIndex:n,namedImports:s}=this.getNamedImports(r);if(r=n,this.tokens.matchesContextualAtIndex(r,l._from))r++;else{for(let{importedName:u,localName:h}of s)this.addExportBinding(u,h);return}if(!this.tokens.matches1AtIndex(r,t.string))throw new Error("Expected string token at the end of import statement.");let i=this.tokens.stringValueAtIndex(r);this.getImportInfo(i).namedExports.push(...s)}preprocessExportStarAtIndex(r){let n=null;if(this.tokens.matches3AtIndex(r,t._export,t.star,t._as)?(r+=3,n=this.tokens.identifierNameAtIndex(r),r+=2):r+=3,!this.tokens.matches1AtIndex(r,t.string))throw new Error("Expected string token at the end of star export statement.");let s=this.tokens.stringValueAtIndex(r),i=this.getImportInfo(s);n!==null?i.exportStarNames.push(n):i.hasStarExport=!0}getNamedImports(r){let n=[];for(;;){if(this.tokens.matches1AtIndex(r,t.braceR)){r++;break}let s=Ne(this.tokens,r);if(r=s.endIndex,s.isType||n.push({importedName:s.leftName,localName:s.rightName}),this.tokens.matches2AtIndex(r,t.comma,t.braceR)){r+=2;break}else if(this.tokens.matches1AtIndex(r,t.braceR)){r++;break}else if(this.tokens.matches1AtIndex(r,t.comma))r++;else throw new Error(`Unexpected token: ${JSON.stringify(this.tokens.tokens[r])}`)}return{newIndex:r,namedImports:n}}getImportInfo(r){let n=this.importInfoByPath.get(r);if(n)return n;let s={defaultNames:[],wildcardNames:[],namedImports:[],namedExports:[],hasBareImport:!1,exportStarNames:[],hasStarExport:!1};return this.importInfoByPath.set(r,s),s}addExportBinding(r,n){this.exportBindingsByLocalName.has(r)||this.exportBindingsByLocalName.set(r,[]),this.exportBindingsByLocalName.get(r).push(n)}claimImportCode(r){let n=this.importsToReplace.get(r);return this.importsToReplace.set(r,""),n||""}getIdentifierReplacement(r){return this.identifierReplacements.get(r)||null}resolveExportBinding(r){let n=this.exportBindingsByLocalName.get(r);return!n||n.length===0?null:n.map(s=>`exports.${s}`).join(" = ")}getGlobalNames(){return new Set([...this.identifierReplacements.keys(),...this.exportBindingsByLocalName.keys()])}};var Mc=44,Bc=59,ui="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",hi=new Uint8Array(64),jc=new Uint8Array(128);for(let e=0;e<ui.length;e++){let r=ui.charCodeAt(e);hi[e]=r,jc[r]=e}function Pt(e,r,n){let s=r-n;s=s<0?-s<<1|1:s<<1;do{let i=s&31;s>>>=5,s>0&&(i|=32),e.write(hi[i])}while(s>0);return r}var pi=1024*16,fi=typeof TextDecoder<"u"?new TextDecoder:typeof Buffer<"u"?{decode(e){return Buffer.from(e.buffer,e.byteOffset,e.byteLength).toString()}}:{decode(e){let r="";for(let n=0;n<e.length;n++)r+=String.fromCharCode(e[n]);return r}},qc=class{constructor(){this.pos=0,this.out="",this.buffer=new Uint8Array(pi)}write(e){let{buffer:r}=this;r[this.pos++]=e,this.pos===pi&&(this.out+=fi.decode(r),this.pos=0)}flush(){let{buffer:e,out:r,pos:n}=this;return n>0?r+fi.decode(e.subarray(0,n)):r}};function vs(e){let r=new qc,n=0,s=0,i=0,a=0;for(let u=0;u<e.length;u++){let h=e[u];if(u>0&&r.write(Bc),h.length===0)continue;let f=0;for(let m=0;m<h.length;m++){let _=h[m];m>0&&r.write(Mc),f=Pt(r,_[0],f),_.length!==1&&(n=Pt(r,_[1],n),s=Pt(r,_[2],s),i=Pt(r,_[3],i),_.length!==4&&(a=Pt(r,_[4],a)))}}return r.flush()}var $c=ur(mi(),1);var Rs=class{constructor(){this._indexes={__proto__:null},this.array=[]}};function Uc(e,r){return e._indexes[r]}function di(e,r){let n=Uc(e,r);if(n!==void 0)return n;let{array:s,_indexes:i}=e,a=s.push(r);return i[r]=a-1}var Vc=0,Wc=1,Hc=2,Gc=3,Yc=4,ki=-1,yi=class{constructor({file:e,sourceRoot:r}={}){this._names=new Rs,this._sources=new Rs,this._sourcesContent=[],this._mappings=[],this.file=e,this.sourceRoot=r,this._ignoreList=new Rs}};var yr=(e,r,n,s,i,a,u,h)=>Xc(!0,e,r,n,s,i,a,u,h);function zc(e){let{_mappings:r,_sources:n,_sourcesContent:s,_names:i,_ignoreList:a}=e;return Qc(r),{version:3,file:e.file||void 0,names:i.array,sourceRoot:e.sourceRoot||void 0,sources:n.array,sourcesContent:s,mappings:r,ignoreList:a.array}}function xi(e){let r=zc(e);return Object.assign({},r,{mappings:vs(r.mappings)})}function Xc(e,r,n,s,i,a,u,h,f){let{_mappings:m,_sources:_,_sourcesContent:x,_names:b}=r,y=Jc(m,n),S=Kc(y,s);if(!i)return e&&Zc(y,S)?void 0:gi(y,S,[s]);let q=di(_,i),T=h?di(b,h):ki;if(q===x.length&&(x[q]=f??null),!(e&&el(y,S,q,a,u,T)))return gi(y,S,h?[s,q,a,u,T]:[s,q,a,u])}function Jc(e,r){for(let n=e.length;n<=r;n++)e[n]=[];return e[r]}function Kc(e,r){let n=e.length;for(let s=n-1;s>=0;n=s--){let i=e[s];if(r>=i[Vc])break}return n}function gi(e,r,n){for(let s=e.length;s>r;s--)e[s]=e[s-1];e[r]=n}function Qc(e){let{length:r}=e,n=r;for(let s=n-1;s>=0&&!(e[s].length>0);n=s,s--);n<r&&(e.length=n)}function Zc(e,r){return r===0?!0:e[r-1].length===1}function el(e,r,n,s,i,a){if(r===0)return!1;let u=e[r-1];return u.length===1?!1:n===u[Wc]&&s===u[Hc]&&i===u[Gc]&&a===(u.length===5?u[Yc]:ki)}function Ns({code:e,mappings:r},n,s,i,a){let u=tl(i,a),h=new yi({file:s.compiledFilename}),f=0,m=r[0];for(;m===void 0&&f<r.length-1;)f++,m=r[f];let _=0,x=0;m!==x&&yr(h,_,0,n,_,0);for(let q=0;q<e.length;q++){if(q===m){let T=m-x,L=u[f];for(yr(h,_,T,n,_,L);(m===q||m===void 0)&&f<r.length-1;)f++,m=r[f]}e.charCodeAt(q)===p.lineFeed&&(_++,x=q+1,m!==x&&yr(h,_,0,n,_,0))}let{sourceRoot:b,sourcesContent:y,...S}=xi(h);return S}function tl(e,r){let n=new Array(r.length),s=0,i=r[s].start,a=0;for(let u=0;u<e.length;u++)u===i&&(n[s]=i-a,s++,i=r[s].start),e.charCodeAt(u)===p.lineFeed&&(a=u+1);return n}var rl={require:`
-    import {createRequire as CREATE_REQUIRE_NAME} from "module";
-    const require = CREATE_REQUIRE_NAME(import.meta.url);
-  `,interopRequireWildcard:`
-    function interopRequireWildcard(obj) {
-      if (obj && obj.__esModule) {
-        return obj;
-      } else {
-        var newObj = {};
-        if (obj != null) {
-          for (var key in obj) {
-            if (Object.prototype.hasOwnProperty.call(obj, key)) {
-              newObj[key] = obj[key];
-            }
-          }
-        }
-        newObj.default = obj;
-        return newObj;
-      }
-    }
-  `,interopRequireDefault:`
-    function interopRequireDefault(obj) {
-      return obj && obj.__esModule ? obj : { default: obj };
-    }
-  `,createNamedExportFrom:`
-    function createNamedExportFrom(obj, localName, importedName) {
-      Object.defineProperty(exports, localName, {enumerable: true, configurable: true, get: () => obj[importedName]});
-    }
-  `,createStarExport:`
-    function createStarExport(obj) {
-      Object.keys(obj)
-        .filter((key) => key !== "default" && key !== "__esModule")
-        .forEach((key) => {
-          if (exports.hasOwnProperty(key)) {
-            return;
-          }
-          Object.defineProperty(exports, key, {enumerable: true, configurable: true, get: () => obj[key]});
-        });
-    }
-  `,nullishCoalesce:`
-    function nullishCoalesce(lhs, rhsFn) {
-      if (lhs != null) {
-        return lhs;
-      } else {
-        return rhsFn();
-      }
-    }
-  `,asyncNullishCoalesce:`
-    async function asyncNullishCoalesce(lhs, rhsFn) {
-      if (lhs != null) {
-        return lhs;
-      } else {
-        return await rhsFn();
-      }
-    }
-  `,optionalChain:`
-    function optionalChain(ops) {
-      let lastAccessLHS = undefined;
-      let value = ops[0];
-      let i = 1;
-      while (i < ops.length) {
-        const op = ops[i];
-        const fn = ops[i + 1];
-        i += 2;
-        if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) {
-          return undefined;
-        }
-        if (op === 'access' || op === 'optionalAccess') {
-          lastAccessLHS = value;
-          value = fn(value);
-        } else if (op === 'call' || op === 'optionalCall') {
-          value = fn((...args) => value.call(lastAccessLHS, ...args));
-          lastAccessLHS = undefined;
-        }
-      }
-      return value;
-    }
-  `,asyncOptionalChain:`
-    async function asyncOptionalChain(ops) {
-      let lastAccessLHS = undefined;
-      let value = ops[0];
-      let i = 1;
-      while (i < ops.length) {
-        const op = ops[i];
-        const fn = ops[i + 1];
-        i += 2;
-        if ((op === 'optionalAccess' || op === 'optionalCall') && value == null) {
-          return undefined;
-        }
-        if (op === 'access' || op === 'optionalAccess') {
-          lastAccessLHS = value;
-          value = await fn(value);
-        } else if (op === 'call' || op === 'optionalCall') {
-          value = await fn((...args) => value.call(lastAccessLHS, ...args));
-          lastAccessLHS = undefined;
-        }
-      }
-      return value;
-    }
-  `,optionalChainDelete:`
-    function optionalChainDelete(ops) {
-      const result = OPTIONAL_CHAIN_NAME(ops);
-      return result == null ? true : result;
-    }
-  `,asyncOptionalChainDelete:`
-    async function asyncOptionalChainDelete(ops) {
-      const result = await ASYNC_OPTIONAL_CHAIN_NAME(ops);
-      return result == null ? true : result;
-    }
-  `},xr=class e{__init(){this.helperNames={}}__init2(){this.createRequireName=null}constructor(r){this.nameManager=r,e.prototype.__init.call(this),e.prototype.__init2.call(this)}getHelperName(r){let n=this.helperNames[r];return n||(n=this.nameManager.claimFreeName(`_${r}`),this.helperNames[r]=n,n)}emitHelpers(){let r="";this.helperNames.optionalChainDelete&&this.getHelperName("optionalChain"),this.helperNames.asyncOptionalChainDelete&&this.getHelperName("asyncOptionalChain");for(let[n,s]of Object.entries(rl)){let i=this.helperNames[n],a=s;n==="optionalChainDelete"?a=a.replace("OPTIONAL_CHAIN_NAME",this.helperNames.optionalChain):n==="asyncOptionalChainDelete"?a=a.replace("ASYNC_OPTIONAL_CHAIN_NAME",this.helperNames.asyncOptionalChain):n==="require"&&(this.createRequireName===null&&(this.createRequireName=this.nameManager.claimFreeName("_createRequire")),a=a.replace(/CREATE_REQUIRE_NAME/g,this.createRequireName)),i&&(r+=" ",r+=a.replace(n,i).replace(/\s+/g," ").trim())}return r}};function _r(e,r,n){nl(e,n)&&sl(e,r,n)}function nl(e,r){for(let n of e.tokens)if(n.type===t.name&&!n.isType&&Zo(n)&&r.has(e.identifierNameForToken(n)))return!0;return!1}function sl(e,r,n){let s=[],i=r.length-1;for(let a=e.tokens.length-1;;a--){for(;s.length>0&&s[s.length-1].startTokenIndex===a+1;)s.pop();for(;i>=0&&r[i].endTokenIndex===a+1;)s.push(r[i]),i--;if(a<0)break;let u=e.tokens[a],h=e.identifierNameForToken(u);if(s.length>1&&!u.isType&&u.type===t.name&&n.has(h)){if(ei(u))_i(s[s.length-1],e,h);else if(ti(u)){let f=s.length-1;for(;f>0&&!s[f].isFunctionScope;)f--;if(f<0)throw new Error("Did not find parent function scope.");_i(s[f],e,h)}}}if(s.length>0)throw new Error("Expected empty scope stack after processing file.")}function _i(e,r,n){for(let s=e.startTokenIndex;s<e.endTokenIndex;s++){let i=r.tokens[s];(i.type===t.name||i.type===t.jsxName)&&r.identifierNameForToken(i)===n&&(i.shadowsGlobal=!0)}}function Ds(e,r){let n=[];for(let s of r)s.type===t.name&&n.push(e.slice(s.start,s.end));return n}var Ct=class e{__init(){this.usedNames=new Set}constructor(r,n){e.prototype.__init.call(this),this.usedNames=new Set(Ds(r,n))}claimFreeName(r){let n=this.findFreeName(r);return this.usedNames.add(n),n}findFreeName(r){if(!this.usedNames.has(r))return r;let n=2;for(;this.usedNames.has(r+String(n));)n++;return r+String(n)}};var Bi=ur(Us());var U=ur(Us()),El=U.union(U.lit("jsx"),U.lit("typescript"),U.lit("flow"),U.lit("imports"),U.lit("react-hot-loader"),U.lit("jest")),Al=U.iface([],{compiledFilename:"string"}),vl=U.iface([],{transforms:U.array("Transform"),disableESTransforms:U.opt("boolean"),jsxRuntime:U.opt(U.union(U.lit("classic"),U.lit("automatic"),U.lit("preserve"))),production:U.opt("boolean"),jsxImportSource:U.opt("string"),jsxPragma:U.opt("string"),jsxFragmentPragma:U.opt("string"),keepUnusedImports:U.opt("boolean"),preserveDynamicImport:U.opt("boolean"),injectCreateRequireForImportRequire:U.opt("boolean"),enableLegacyTypeScriptModuleInterop:U.opt("boolean"),enableLegacyBabel5ModuleInterop:U.opt("boolean"),sourceMapOptions:U.opt("SourceMapOptions"),filePath:U.opt("string")}),Pl={Transform:El,SourceMapOptions:Al,Options:vl},Mi=Pl;var{Options:Cl}=(0,Bi.createCheckers)(Mi);function ji(e){Cl.strictCheck(e)}function Vs(){k(),ee(!1)}function Ws(e){k(),Dt(e)}function ve(e){P(),Tr(e)}function ht(){P(),o.tokens[o.tokens.length-1].identifierRole=E.ImportDeclaration}function Tr(e){let r;o.scopeDepth===0?r=E.TopLevelDeclaration:e?r=E.BlockScopedDeclaration:r=E.FunctionScopedDeclaration,o.tokens[o.tokens.length-1].identifierRole=r}function Dt(e){switch(o.type){case t._this:{let r=O(0);k(),D(r);return}case t._yield:case t.name:{o.type=t.name,ve(e);return}case t.bracketL:{k(),Lt(t.bracketR,e,!0);return}case t.braceL:Ft(!0,e);return;default:C()}}function Lt(e,r,n=!1,s=!1,i=0){let a=!0,u=!1,h=o.tokens.length;for(;!d(e)&&!o.error;)if(a?a=!1:(g(t.comma),o.tokens[o.tokens.length-1].contextId=i,!u&&o.tokens[h].isType&&(o.tokens[o.tokens.length-1].isType=!0,u=!0)),!(n&&c(t.comma))){if(d(e))break;if(c(t.ellipsis)){Ws(r),qi(),d(t.comma),g(e);break}else Rl(s,r)}}function Rl(e,r){e&&Ot([l._public,l._protected,l._private,l._readonly,l._override]),Nt(r),qi(),Nt(r,!0)}function qi(){B?Ui():M&&$i()}function Nt(e,r=!1){if(r||Dt(e),!d(t.eq))return;let n=o.tokens.length-1;ee(),o.tokens[n].rhsEndIndex=o.tokens.length}function Gs(){return c(t.name)}function Nl(){return c(t.name)||!!(o.type&t.IS_KEYWORD)||c(t.string)||c(t.num)||c(t.bigint)||c(t.decimal)}function zi(){let e=o.snapshot();return k(),(c(t.bracketL)||c(t.braceL)||c(t.star)||c(t.ellipsis)||c(t.hash)||Nl())&&!ne()?!0:(o.restoreFromSnapshot(e),!1)}function Ot(e){for(;Xi(e)!==null;);}function Xi(e){if(!c(t.name))return null;let r=o.contextualKeyword;if(e.indexOf(r)!==-1&&zi()){switch(r){case l._readonly:o.tokens[o.tokens.length-1].type=t._readonly;break;case l._abstract:o.tokens[o.tokens.length-1].type=t._abstract;break;case l._static:o.tokens[o.tokens.length-1].type=t._static;break;case l._public:o.tokens[o.tokens.length-1].type=t._public;break;case l._private:o.tokens[o.tokens.length-1].type=t._private;break;case l._protected:o.tokens[o.tokens.length-1].type=t._protected;break;case l._override:o.tokens[o.tokens.length-1].type=t._override;break;case l._declare:o.tokens[o.tokens.length-1].type=t._declare;break;default:break}return r}return null}function Bt(){for(P();d(t.dot);)P()}function Dl(){Bt(),!ne()&&c(t.lessThan)&&gt()}function Ll(){k(),dt()}function Ol(){k()}function Fl(){g(t._typeof),c(t._import)?Ji():Bt(),!ne()&&c(t.lessThan)&&gt()}function Ji(){g(t._import),g(t.parenL),g(t.string),g(t.parenR),d(t.dot)&&Bt(),c(t.lessThan)&&gt()}function Ml(){d(t._const);let e=d(t._in),r=Z(l._out);d(t._const),(e||r)&&!c(t.name)?o.tokens[o.tokens.length-1].type=t.name:P(),d(t._extends)&&Q(),d(t.eq)&&Q()}function Je(){c(t.lessThan)&&Ir()}function Ir(){let e=O(0);for(c(t.lessThan)||c(t.typeParameterStart)?k():C();!d(t.greaterThan)&&!o.error;)Ml(),d(t.comma);D(e)}function Xs(e){let r=e===t.arrow;Je(),g(t.parenL),o.scopeDepth++,Bl(!1),o.scopeDepth--,(r||c(e))&&Mt(e)}function Bl(e){Lt(t.parenR,e)}function Sr(){d(t.comma)||H()}function Vi(){Xs(t.colon),Sr()}function jl(){let e=o.snapshot();k();let r=d(t.name)&&c(t.colon);return o.restoreFromSnapshot(e),r}function Ki(){if(!(c(t.bracketL)&&jl()))return!1;let e=O(0);return g(t.bracketL),P(),dt(),g(t.bracketR),Ze(),Sr(),D(e),!0}function Wi(e){d(t.question),!e&&(c(t.parenL)||c(t.lessThan))?(Xs(t.colon),Sr()):(Ze(),Sr())}function ql(){if(c(t.parenL)||c(t.lessThan)){Vi();return}if(c(t._new)){k(),c(t.parenL)||c(t.lessThan)?Vi():Wi(!1);return}let e=!!Xi([l._readonly]);Ki()||((I(l._get)||I(l._set))&&zi(),et(-1),Wi(e))}function $l(){Qi()}function Qi(){for(g(t.braceL);!d(t.braceR)&&!o.error;)ql()}function Ul(){let e=o.snapshot(),r=Vl();return o.restoreFromSnapshot(e),r}function Vl(){return k(),d(t.plus)||d(t.minus)?I(l._readonly):(I(l._readonly)&&k(),!c(t.bracketL)||(k(),!Gs())?!1:(k(),c(t._in)))}function Wl(){P(),g(t._in),Q()}function Hl(){g(t.braceL),c(t.plus)||c(t.minus)?(k(),J(l._readonly)):Z(l._readonly),g(t.bracketL),Wl(),Z(l._as)&&Q(),g(t.bracketR),c(t.plus)||c(t.minus)?(k(),g(t.question)):d(t.question),ou(),H(),g(t.braceR)}function Gl(){for(g(t.bracketL);!d(t.bracketR)&&!o.error;)Yl(),d(t.comma)}function Yl(){d(t.ellipsis)?Q():(Q(),d(t.question)),d(t.colon)&&Q()}function zl(){g(t.parenL),Q(),g(t.parenR)}function Xl(){for(Re(),Re();!c(t.backQuote)&&!o.error;)g(t.dollarBraceL),Q(),Re(),Re();k()}var ze;(function(e){e[e.TSFunctionType=0]="TSFunctionType";let n=1;e[e.TSConstructorType=n]="TSConstructorType";let s=n+1;e[e.TSAbstractConstructorType=s]="TSAbstractConstructorType"})(ze||(ze={}));function Hs(e){e===ze.TSAbstractConstructorType&&J(l._abstract),(e===ze.TSConstructorType||e===ze.TSAbstractConstructorType)&&g(t._new);let r=o.inDisallowConditionalTypesContext;o.inDisallowConditionalTypesContext=!1,Xs(t.arrow),o.inDisallowConditionalTypesContext=r}function Jl(){switch(o.type){case t.name:Dl();return;case t._void:case t._null:k();return;case t.string:case t.num:case t.bigint:case t.decimal:case t._true:case t._false:Xe();return;case t.minus:k(),Xe();return;case t._this:{Ol(),I(l._is)&&!ne()&&Ll();return}case t._typeof:Fl();return;case t._import:Ji();return;case t.braceL:Ul()?Hl():$l();return;case t.bracketL:Gl();return;case t.parenL:zl();return;case t.backQuote:Xl();return;default:if(o.type&t.IS_KEYWORD){k(),o.tokens[o.tokens.length-1].type=t.name;return}break}C()}function Kl(){for(Jl();!ne()&&d(t.bracketL);)d(t.bracketR)||(Q(),g(t.bracketR))}function Ql(){if(J(l._infer),P(),c(t._extends)){let e=o.snapshot();g(t._extends);let r=o.inDisallowConditionalTypesContext;o.inDisallowConditionalTypesContext=!0,Q(),o.inDisallowConditionalTypesContext=r,(o.error||!o.inDisallowConditionalTypesContext&&c(t.question))&&o.restoreFromSnapshot(e)}}function Ys(){if(I(l._keyof)||I(l._unique)||I(l._readonly))k(),Ys();else if(I(l._infer))Ql();else{let e=o.inDisallowConditionalTypesContext;o.inDisallowConditionalTypesContext=!1,Kl(),o.inDisallowConditionalTypesContext=e}}function Hi(){if(d(t.bitwiseAND),Ys(),c(t.bitwiseAND))for(;d(t.bitwiseAND);)Ys()}function Zl(){if(d(t.bitwiseOR),Hi(),c(t.bitwiseOR))for(;d(t.bitwiseOR);)Hi()}function eu(){return c(t.lessThan)?!0:c(t.parenL)&&ru()}function tu(){if(c(t.name)||c(t._this))return k(),!0;if(c(t.braceL)||c(t.bracketL)){let e=1;for(k();e>0&&!o.error;)c(t.braceL)||c(t.bracketL)?e++:(c(t.braceR)||c(t.bracketR))&&e--,k();return!0}return!1}function ru(){let e=o.snapshot(),r=nu();return o.restoreFromSnapshot(e),r}function nu(){return k(),!!(c(t.parenR)||c(t.ellipsis)||tu()&&(c(t.colon)||c(t.comma)||c(t.question)||c(t.eq)||c(t.parenR)&&(k(),c(t.arrow))))}function Mt(e){let r=O(0);g(e),iu()||Q(),D(r)}function su(){c(t.colon)&&Mt(t.colon)}function Ze(){c(t.colon)&&dt()}function ou(){d(t.colon)&&Q()}function iu(){let e=o.snapshot();return I(l._asserts)?(k(),Z(l._is)?(Q(),!0):Gs()||c(t._this)?(k(),Z(l._is)&&Q(),!0):(o.restoreFromSnapshot(e),!1)):Gs()||c(t._this)?(k(),I(l._is)&&!ne()?(k(),Q(),!0):(o.restoreFromSnapshot(e),!1)):!1}function dt(){let e=O(0);g(t.colon),Q(),D(e)}function Q(){if(Gi(),o.inDisallowConditionalTypesContext||ne()||!d(t._extends))return;let e=o.inDisallowConditionalTypesContext;o.inDisallowConditionalTypesContext=!0,Gi(),o.inDisallowConditionalTypesContext=e,g(t.question),Q(),g(t.colon),Q()}function au(){return I(l._abstract)&&G()===t._new}function Gi(){if(eu()){Hs(ze.TSFunctionType);return}if(c(t._new)){Hs(ze.TSConstructorType);return}else if(au()){Hs(ze.TSAbstractConstructorType);return}Zl()}function Zi(){let e=O(1);Q(),g(t.greaterThan),D(e),kt()}function e1(){if(d(t.jsxTagStart)){o.tokens[o.tokens.length-1].type=t.typeParameterStart;let e=O(1);for(;!c(t.greaterThan)&&!o.error;)Q(),d(t.comma);we(),D(e)}}function t1(){for(;!c(t.braceL)&&!o.error;)cu(),d(t.comma)}function cu(){Bt(),c(t.lessThan)&&gt()}function lu(){ve(!1),Je(),d(t._extends)&&t1(),Qi()}function uu(){ve(!1),Je(),g(t.eq),Q(),H()}function pu(){if(c(t.string)?Xe():P(),d(t.eq)){let e=o.tokens.length-1;ee(),o.tokens[e].rhsEndIndex=o.tokens.length}}function Js(){for(ve(!1),g(t.braceL);!d(t.braceR)&&!o.error;)pu(),d(t.comma)}function Ks(){g(t.braceL),yt(t.braceR)}function zs(){ve(!1),d(t.dot)?zs():Ks()}function r1(){I(l._global)?P():c(t.string)?Ee():C(),c(t.braceL)?Ks():H()}function Er(){ht(),g(t.eq),hu(),H()}function fu(){return I(l._require)&&G()===t.parenL}function hu(){fu()?mu():Bt()}function mu(){J(l._require),g(t.parenL),c(t.string)||C(),Xe(),g(t.parenR)}function du(){if(Se())return!1;switch(o.type){case t._function:{let e=O(1);k();let r=o.start;return Be(r,!0),D(e),!0}case t._class:{let e=O(1);return qe(!0,!1),D(e),!0}case t._const:if(c(t._const)&&pt(l._enum)){let e=O(1);return g(t._const),J(l._enum),o.tokens[o.tokens.length-1].type=t._enum,Js(),D(e),!0}case t._var:case t._let:{let e=O(1);return qt(o.type!==t._var),D(e),!0}case t.name:{let e=O(1),r=o.contextualKeyword,n=!1;return r===l._global?(r1(),n=!0):n=Ar(r,!0),D(e),n}default:return!1}}function Yi(){return Ar(o.contextualKeyword,!0)}function gu(e){switch(e){case l._declare:{let r=o.tokens.length-1;if(du())return o.tokens[r].type=t._declare,!0;break}case l._global:if(c(t.braceL))return Ks(),!0;break;default:return Ar(e,!1)}return!1}function Ar(e,r){switch(e){case l._abstract:if(mt(r)&&c(t._class))return o.tokens[o.tokens.length-1].type=t._abstract,qe(!0,!1),!0;break;case l._enum:if(mt(r)&&c(t.name))return o.tokens[o.tokens.length-1].type=t._enum,Js(),!0;break;case l._interface:if(mt(r)&&c(t.name)){let n=O(r?2:1);return lu(),D(n),!0}break;case l._module:if(mt(r)){if(c(t.string)){let n=O(r?2:1);return r1(),D(n),!0}else if(c(t.name)){let n=O(r?2:1);return zs(),D(n),!0}}break;case l._namespace:if(mt(r)&&c(t.name)){let n=O(r?2:1);return zs(),D(n),!0}break;case l._type:if(mt(r)&&c(t.name)){let n=O(r?2:1);return uu(),D(n),!0}break;default:break}return!1}function mt(e){return e?(k(),!0):!Se()}function ku(){let e=o.snapshot();return Ir(),je(),su(),g(t.arrow),o.error?(o.restoreFromSnapshot(e),!1):(tt(!0),!0)}function Qs(){o.type===t.bitShiftL&&(o.pos-=1,N(t.lessThan)),gt()}function gt(){let e=O(0);for(g(t.lessThan);!c(t.greaterThan)&&!o.error;)Q(),d(t.comma);e?(g(t.greaterThan),D(e)):(D(e),dr(),g(t.greaterThan),o.tokens[o.tokens.length-1].isType=!0)}function Zs(){if(c(t.name))switch(o.contextualKeyword){case l._abstract:case l._declare:case l._enum:case l._interface:case l._module:case l._namespace:case l._type:return!0;default:break}return!1}function n1(e,r){if(c(t.colon)&&Mt(t.colon),!c(t.braceL)&&Se()){let n=o.tokens.length-1;for(;n>=0&&(o.tokens[n].start>=e||o.tokens[n].type===t._default||o.tokens[n].type===t._export);)o.tokens[n].isType=!0,n--;return}tt(!1,r)}function s1(e,r,n){if(!ne()&&d(t.bang)){o.tokens[o.tokens.length-1].type=t.nonNullAssertion;return}if(c(t.lessThan)||c(t.bitShiftL)){let s=o.snapshot();if(!r&&eo()&&ku())return;if(Qs(),!r&&d(t.parenL)?(o.tokens[o.tokens.length-1].subscriptStartIndex=e,Pe()):c(t.backQuote)?vr():(o.type===t.greaterThan||o.type!==t.parenL&&o.type&t.IS_EXPRESSION_START&&!ne())&&C(),o.error)o.restoreFromSnapshot(s);else return}else!r&&c(t.questionDot)&&G()===t.lessThan&&(k(),o.tokens[e].isOptionalChainStart=!0,o.tokens[o.tokens.length-1].subscriptStartIndex=e,gt(),g(t.parenL),Pe());jt(e,r,n)}function o1(){if(d(t._import))return I(l._type)&&G()!==t.eq&&J(l._type),Er(),!0;if(d(t.eq))return te(),H(),!0;if(Z(l._as))return J(l._namespace),P(),H(),!0;if(I(l._type)){let e=G();(e===t.braceL||e===t.star)&&k()}return!1}function i1(){if(P(),c(t.comma)||c(t.braceR)){o.tokens[o.tokens.length-1].identifierRole=E.ImportDeclaration;return}if(P(),c(t.comma)||c(t.braceR)){o.tokens[o.tokens.length-1].identifierRole=E.ImportDeclaration,o.tokens[o.tokens.length-2].isType=!0,o.tokens[o.tokens.length-1].isType=!0;return}if(P(),c(t.comma)||c(t.braceR)){o.tokens[o.tokens.length-3].identifierRole=E.ImportAccess,o.tokens[o.tokens.length-1].identifierRole=E.ImportDeclaration;return}P(),o.tokens[o.tokens.length-3].identifierRole=E.ImportAccess,o.tokens[o.tokens.length-1].identifierRole=E.ImportDeclaration,o.tokens[o.tokens.length-4].isType=!0,o.tokens[o.tokens.length-3].isType=!0,o.tokens[o.tokens.length-2].isType=!0,o.tokens[o.tokens.length-1].isType=!0}function a1(){if(P(),c(t.comma)||c(t.braceR)){o.tokens[o.tokens.length-1].identifierRole=E.ExportAccess;return}if(P(),c(t.comma)||c(t.braceR)){o.tokens[o.tokens.length-1].identifierRole=E.ExportAccess,o.tokens[o.tokens.length-2].isType=!0,o.tokens[o.tokens.length-1].isType=!0;return}if(P(),c(t.comma)||c(t.braceR)){o.tokens[o.tokens.length-3].identifierRole=E.ExportAccess;return}P(),o.tokens[o.tokens.length-3].identifierRole=E.ExportAccess,o.tokens[o.tokens.length-4].isType=!0,o.tokens[o.tokens.length-3].isType=!0,o.tokens[o.tokens.length-2].isType=!0,o.tokens[o.tokens.length-1].isType=!0}function c1(){if(I(l._abstract)&&G()===t._class)return o.type=t._abstract,k(),qe(!0,!0),!0;if(I(l._interface)){let e=O(2);return Ar(l._interface,!0),D(e),!0}return!1}function l1(){if(o.type===t._const){let e=Fe();if(e.type===t.name&&e.contextualKeyword===l._enum)return g(t._const),J(l._enum),o.tokens[o.tokens.length-1].type=t._enum,Js(),!0}return!1}function u1(e){let r=o.tokens.length;Ot([l._abstract,l._readonly,l._declare,l._static,l._override]);let n=o.tokens.length;if(Ki()){let i=e?r-1:r;for(let a=i;a<n;a++)o.tokens[a].isType=!0;return!0}return!1}function p1(e){gu(e)||H()}function f1(){let e=Z(l._declare);e&&(o.tokens[o.tokens.length-1].type=t._declare);let r=!1;if(c(t.name))if(e){let n=O(2);r=Yi(),D(n)}else r=Yi();if(!r)if(e){let n=O(2);pe(!0),D(n)}else pe(!0)}function h1(e){if(e&&(c(t.lessThan)||c(t.bitShiftL))&&Qs(),Z(l._implements)){o.tokens[o.tokens.length-1].type=t._implements;let r=O(1);t1(),D(r)}}function m1(){Je()}function d1(){Je()}function g1(){let e=O(0);ne()||d(t.bang),Ze(),D(e)}function k1(){c(t.colon)&&dt()}function y1(e,r){return ut?yu(e,r):xu(e,r)}function yu(e,r){if(!c(t.lessThan))return Ie(e,r);let n=o.snapshot(),s=Ie(e,r);if(o.error)o.restoreFromSnapshot(n);else return s;return o.type=t.typeParameterStart,Ir(),s=Ie(e,r),s||C(),s}function xu(e,r){if(!c(t.lessThan))return Ie(e,r);let n=o.snapshot();Ir();let s=Ie(e,r);if(s||C(),o.error)o.restoreFromSnapshot(n);else return s;return Ie(e,r)}function x1(){if(c(t.colon)){let e=o.snapshot();Mt(t.colon),ie()&&C(),c(t.arrow)||C(),o.error&&o.restoreFromSnapshot(e)}return d(t.arrow)}function $i(){let e=O(0);d(t.question),Ze(),D(e)}function _1(){(c(t.lessThan)||c(t.bitShiftL))&&Qs(),to()}function _u(){let e=!1,r=!1;for(;;){if(o.pos>=w.length){C("Unterminated JSX contents");return}let n=w.charCodeAt(o.pos);if(n===p.lessThan||n===p.leftCurlyBrace){if(o.pos===o.start){if(n===p.lessThan){o.pos++,N(t.jsxTagStart);return}Es(n);return}e&&!r?N(t.jsxEmptyText):N(t.jsxText);return}n===p.lineFeed?e=!0:n!==p.space&&n!==p.carriageReturn&&n!==p.tab&&(r=!0),o.pos++}}function wu(e){for(o.pos++;;){if(o.pos>=w.length){C("Unterminated string constant");return}if(w.charCodeAt(o.pos)===e){o.pos++;break}o.pos++}N(t.string)}function bu(){let e;do{if(o.pos>w.length){C("Unexpectedly reached the end of input.");return}e=w.charCodeAt(++o.pos)}while(ue[e]||e===p.dash);N(t.jsxName)}function ro(){we()}function w1(e){if(ro(),!d(t.colon)){o.tokens[o.tokens.length-1].identifierRole=e;return}ro()}function b1(){let e=o.tokens.length;w1(E.Access);let r=!1;for(;c(t.dot);)r=!0,we(),ro();if(!r){let n=o.tokens[e],s=w.charCodeAt(n.start);s>=p.lowercaseA&&s<=p.lowercaseZ&&(n.identifierRole=null)}}function Tu(){switch(o.type){case t.braceL:k(),te(),we();return;case t.jsxTagStart:no(),we();return;case t.string:we();return;default:C("JSX value should be either an expression or a quoted JSX text")}}function Su(){g(t.ellipsis),te()}function Iu(e){if(c(t.jsxTagEnd))return!1;b1(),M&&e1();let r=!1;for(;!c(t.slash)&&!c(t.jsxTagEnd)&&!o.error;){if(d(t.braceL)){r=!0,g(t.ellipsis),ee(),we();continue}r&&o.end-o.start===3&&w.charCodeAt(o.start)===p.lowercaseK&&w.charCodeAt(o.start+1)===p.lowercaseE&&w.charCodeAt(o.start+2)===p.lowercaseY&&(o.tokens[e].jsxRole=xe.KeyAfterPropSpread),w1(E.ObjectKey),c(t.eq)&&(we(),Tu())}let n=c(t.slash);return n&&we(),n}function Eu(){c(t.jsxTagEnd)||b1()}function T1(){let e=o.tokens.length-1;o.tokens[e].jsxRole=xe.NoChildren;let r=0;if(!Iu(e))for(xt();;)switch(o.type){case t.jsxTagStart:if(we(),c(t.slash)){we(),Eu(),o.tokens[e].jsxRole!==xe.KeyAfterPropSpread&&(r===1?o.tokens[e].jsxRole=xe.OneChild:r>1&&(o.tokens[e].jsxRole=xe.StaticChildren));return}r++,T1(),xt();break;case t.jsxText:r++,xt();break;case t.jsxEmptyText:xt();break;case t.braceL:k(),c(t.ellipsis)?(Su(),xt(),r+=2):(c(t.braceR)||(r++,te()),xt());break;default:C();return}}function no(){we(),T1()}function we(){o.tokens.push(new Qe),Is(),o.start=o.pos;let e=w.charCodeAt(o.pos);if(Me[e])bu();else if(e===p.quotationMark||e===p.apostrophe)wu(e);else switch(++o.pos,e){case p.greaterThan:N(t.jsxTagEnd);break;case p.lessThan:N(t.jsxTagStart);break;case p.slash:N(t.slash);break;case p.equalsTo:N(t.eq);break;case p.leftCurlyBrace:N(t.braceL);break;case p.dot:N(t.dot);break;case p.colon:N(t.colon);break;default:C()}}function xt(){o.tokens.push(new Qe),o.start=o.pos,_u()}function S1(e){if(c(t.question)){let r=G();if(r===t.colon||r===t.comma||r===t.parenR)return}so(e)}function I1(){mr(t.question),c(t.colon)&&(M?dt():B&&$e())}var oo=class{constructor(r){this.stop=r}};function te(e=!1){if(ee(e),c(t.comma))for(;d(t.comma);)ee(e)}function ee(e=!1,r=!1){return M?y1(e,r):B?L1(e,r):Ie(e,r)}function Ie(e,r){if(c(t._yield))return Uu(),!1;(c(t.parenL)||c(t.name)||c(t._yield))&&(o.potentialArrowAt=o.start);let n=Au(e);return r&&uo(),o.type&t.IS_ASSIGN?(k(),ee(e),!1):n}function Au(e){return Pu(e)?!0:(vu(e),!1)}function vu(e){M||B?S1(e):so(e)}function so(e){d(t.question)&&(ee(),g(t.colon),ee(e))}function Pu(e){let r=o.tokens.length;return kt()?!0:(Pr(r,-1,e),!1)}function Pr(e,r,n){if(M&&(t._in&t.PRECEDENCE_MASK)>r&&!ne()&&(Z(l._as)||Z(l._satisfies))){let i=O(1);Q(),D(i),dr(),Pr(e,r,n);return}let s=o.type&t.PRECEDENCE_MASK;if(s>0&&(!n||!c(t._in))&&s>r){let i=o.type;k(),i===t.nullishCoalescing&&(o.tokens[o.tokens.length-1].nullishStartIndex=e);let a=o.tokens.length;kt(),Pr(a,i&t.IS_RIGHT_ASSOCIATIVE?s-1:s,n),i===t.nullishCoalescing&&(o.tokens[e].numNullishCoalesceStarts++,o.tokens[o.tokens.length-1].numNullishCoalesceEnds++),Pr(e,r,n)}}function kt(){if(M&&!ut&&d(t.lessThan))return Zi(),!1;if(I(l._module)&&bs()===p.leftCurlyBrace&&!pr())return Vu(),!1;if(o.type&t.IS_PREFIX)return k(),kt(),!1;if(io())return!0;for(;o.type&t.IS_POSTFIX&&!ie();)o.type===t.preIncDec&&(o.type=t.postIncDec),k();return!1}function io(){let e=o.tokens.length;return Ee()?!0:(ao(e),o.tokens.length>e&&o.tokens[e].isOptionalChainStart&&(o.tokens[o.tokens.length-1].isOptionalChainEnd=!0),!1)}function ao(e,r=!1){B?F1(e,r):co(e,r)}function co(e,r=!1){let n=new oo(!1);do Cu(e,r,n);while(!n.stop&&!o.error)}function Cu(e,r,n){M?s1(e,r,n):B?C1(e,r,n):jt(e,r,n)}function jt(e,r,n){if(!r&&d(t.doubleColon))lo(),n.stop=!0,ao(e,r);else if(c(t.questionDot)){if(o.tokens[e].isOptionalChainStart=!0,r&&G()===t.parenL){n.stop=!0;return}k(),o.tokens[o.tokens.length-1].subscriptStartIndex=e,d(t.bracketL)?(te(),g(t.bracketR)):d(t.parenL)?Pe():Cr()}else if(d(t.dot))o.tokens[o.tokens.length-1].subscriptStartIndex=e,Cr();else if(d(t.bracketL))o.tokens[o.tokens.length-1].subscriptStartIndex=e,te(),g(t.bracketR);else if(!r&&c(t.parenL))if(eo()){let s=o.snapshot(),i=o.tokens.length;k(),o.tokens[o.tokens.length-1].subscriptStartIndex=e;let a=Ke();o.tokens[o.tokens.length-1].contextId=a,Pe(),o.tokens[o.tokens.length-1].contextId=a,Ru()&&(o.restoreFromSnapshot(s),n.stop=!0,o.scopeDepth++,je(),Nu(i))}else{k(),o.tokens[o.tokens.length-1].subscriptStartIndex=e;let s=Ke();o.tokens[o.tokens.length-1].contextId=s,Pe(),o.tokens[o.tokens.length-1].contextId=s}else c(t.backQuote)?vr():n.stop=!0}function eo(){return o.tokens[o.tokens.length-1].contextualKeyword===l._async&&!ie()}function Pe(){let e=!0;for(;!d(t.parenR)&&!o.error;){if(e)e=!1;else if(g(t.comma),d(t.parenR))break;v1(!1)}}function Ru(){return c(t.colon)||c(t.arrow)}function Nu(e){M?k1():B&&D1(),g(t.arrow),_t(e)}function lo(){let e=o.tokens.length;Ee(),ao(e,!0)}function Ee(){if(d(t.modulo))return P(),!1;if(c(t.jsxText)||c(t.jsxEmptyText))return Xe(),!1;if(c(t.lessThan)&&ut)return o.type=t.jsxTagStart,no(),k(),!1;let e=o.potentialArrowAt===o.start;switch(o.type){case t.slash:case t.assign:ni();case t._super:case t._this:case t.regexp:case t.num:case t.bigint:case t.decimal:case t.string:case t._null:case t._true:case t._false:return k(),!1;case t._import:return k(),c(t.dot)&&(o.tokens[o.tokens.length-1].type=t.name,k(),P()),!1;case t.name:{let r=o.tokens.length,n=o.start,s=o.contextualKeyword;return P(),s===l._await?($u(),!1):s===l._async&&c(t._function)&&!ie()?(k(),Be(n,!1),!1):e&&s===l._async&&!ie()&&c(t.name)?(o.scopeDepth++,ve(!1),g(t.arrow),_t(r),!0):c(t._do)&&!ie()?(k(),Ue(),!1):e&&!ie()&&c(t.arrow)?(o.scopeDepth++,Tr(!1),g(t.arrow),_t(r),!0):(o.tokens[o.tokens.length-1].identifierRole=E.Access,!1)}case t._do:return k(),Ue(),!1;case t.parenL:return E1(e);case t.bracketL:return k(),A1(t.bracketR,!0),!1;case t.braceL:return Ft(!1,!1),!1;case t._function:return Du(),!1;case t.at:Lr();case t._class:return qe(!1),!1;case t._new:return Ou(),!1;case t.backQuote:return vr(),!1;case t.doubleColon:return k(),lo(),!1;case t.hash:{let r=bs();return Me[r]||r===p.backslash?Cr():k(),!1}default:return C(),!1}}function Cr(){d(t.hash),P()}function Du(){let e=o.start;P(),d(t.dot)&&P(),Be(e,!1)}function Xe(){k()}function $t(){g(t.parenL),te(),g(t.parenR)}function E1(e){let r=o.snapshot(),n=o.tokens.length;g(t.parenL);let s=!0;for(;!c(t.parenR)&&!o.error;){if(s)s=!1;else if(g(t.comma),c(t.parenR))break;if(c(t.ellipsis)){Ws(!1),uo();break}else ee(!1,!0)}return g(t.parenR),e&&Lu()&&Rr()?(o.restoreFromSnapshot(r),o.scopeDepth++,je(),Rr(),_t(n),o.error?(o.restoreFromSnapshot(r),E1(!1),!1):!0):!1}function Lu(){return c(t.colon)||!ie()}function Rr(){return M?x1():B?O1():d(t.arrow)}function uo(){(M||B)&&I1()}function Ou(){if(g(t._new),d(t.dot)){P();return}Fu(),B&&R1(),d(t.parenL)&&A1(t.parenR)}function Fu(){lo(),d(t.questionDot)}function vr(){for(Re(),Re();!c(t.backQuote)&&!o.error;)g(t.dollarBraceL),te(),Re(),Re();k()}function Ft(e,r){let n=Ke(),s=!0;for(k(),o.tokens[o.tokens.length-1].contextId=n;!d(t.braceR)&&!o.error;){if(s)s=!1;else if(g(t.comma),d(t.braceR))break;let i=!1;if(c(t.ellipsis)){let a=o.tokens.length;if(Vs(),e&&(o.tokens.length===a+2&&Tr(r),d(t.braceR)))break;continue}e||(i=d(t.star)),!e&&I(l._async)?(i&&C(),P(),c(t.colon)||c(t.parenL)||c(t.braceR)||c(t.eq)||c(t.comma)||(c(t.star)&&(k(),i=!0),et(n))):et(n),qu(e,r,n)}o.tokens[o.tokens.length-1].contextId=n}function Mu(e){return!e&&(c(t.string)||c(t.num)||c(t.bracketL)||c(t.name)||!!(o.type&t.IS_KEYWORD))}function Bu(e,r){let n=o.start;return c(t.parenL)?(e&&C(),Nr(n,!1),!0):Mu(e)?(et(r),Nr(n,!1),!0):!1}function ju(e,r){if(d(t.colon)){e?Nt(r):ee(!1);return}let n;e?o.scopeDepth===0?n=E.ObjectShorthandTopLevelDeclaration:r?n=E.ObjectShorthandBlockScopedDeclaration:n=E.ObjectShorthandFunctionScopedDeclaration:n=E.ObjectShorthand,o.tokens[o.tokens.length-1].identifierRole=n,Nt(r,!0)}function qu(e,r,n){M?m1():B&&N1(),Bu(e,n)||ju(e,r)}function et(e){B&&Dr(),d(t.bracketL)?(o.tokens[o.tokens.length-1].contextId=e,ee(),g(t.bracketR),o.tokens[o.tokens.length-1].contextId=e):(c(t.num)||c(t.string)||c(t.bigint)||c(t.decimal)?Ee():Cr(),o.tokens[o.tokens.length-1].identifierRole=E.ObjectKey,o.tokens[o.tokens.length-1].contextId=e)}function Nr(e,r){let n=Ke();o.scopeDepth++;let s=o.tokens.length;je(r,n),po(e,n);let a=o.tokens.length;o.scopes.push(new de(s,a,!0)),o.scopeDepth--}function _t(e){tt(!0);let r=o.tokens.length;o.scopes.push(new de(e,r,!0)),o.scopeDepth--}function po(e,r=0){M?n1(e,r):B?P1(r):tt(!1,r)}function tt(e,r=0){e&&!c(t.braceL)?ee():Ue(!0,r)}function A1(e,r=!1){let n=!0;for(;!d(e)&&!o.error;){if(n)n=!1;else if(g(t.comma),d(e))break;v1(r)}}function v1(e){e&&c(t.comma)||(c(t.ellipsis)?(Vs(),uo()):c(t.question)?k():ee(!1,!0))}function P(){k(),o.tokens[o.tokens.length-1].type=t.name}function $u(){kt()}function Uu(){k(),!c(t.semi)&&!ie()&&(d(t.star),ee())}function Vu(){J(l._module),g(t.braceL),yt(t.braceR)}function Wu(e){return(e.type===t.name||!!(e.type&t.IS_KEYWORD))&&e.contextualKeyword!==l._from}function Le(e){let r=O(0);g(e||t.colon),ke(),D(r)}function M1(){g(t.modulo),J(l._checks),d(t.parenL)&&(te(),g(t.parenR))}function mo(){let e=O(0);g(t.colon),c(t.modulo)?M1():(ke(),c(t.modulo)&&M1()),D(e)}function Hu(){k(),go(!0)}function Gu(){k(),P(),c(t.lessThan)&&Ae(),g(t.parenL),ho(),g(t.parenR),mo(),H()}function fo(){c(t._class)?Hu():c(t._function)?Gu():c(t._var)?Yu():Z(l._module)?d(t.dot)?Ju():zu():I(l._type)?Ku():I(l._opaque)?Qu():I(l._interface)?Zu():c(t._export)?Xu():C()}function Yu(){k(),V1(),H()}function zu(){for(c(t.string)?Ee():P(),g(t.braceL);!c(t.braceR)&&!o.error;)c(t._import)?(k(),To()):C();g(t.braceR)}function Xu(){g(t._export),d(t._default)?c(t._function)||c(t._class)?fo():(ke(),H()):c(t._var)||c(t._function)||c(t._class)||I(l._opaque)?fo():c(t.star)||c(t.braceL)||I(l._interface)||I(l._type)||I(l._opaque)?bo():C()}function Ju(){J(l._exports),$e(),H()}function Ku(){k(),yo()}function Qu(){k(),xo(!0)}function Zu(){k(),go()}function go(e=!1){if(jr(),c(t.lessThan)&&Ae(),d(t._extends))do Or();while(!e&&d(t.comma));if(I(l._mixins)){k();do Or();while(d(t.comma))}if(I(l._implements)){k();do Or();while(d(t.comma))}Fr(e,!1,e)}function Or(){q1(!1),c(t.lessThan)&&rt()}function ko(){go()}function jr(){P()}function yo(){jr(),c(t.lessThan)&&Ae(),Le(t.eq),H()}function xo(e){J(l._type),jr(),c(t.lessThan)&&Ae(),c(t.colon)&&Le(t.colon),e||Le(t.eq),H()}function ep(){Dr(),V1(),d(t.eq)&&ke()}function Ae(){let e=O(0);c(t.lessThan)||c(t.typeParameterStart)?k():C();do ep(),c(t.greaterThan)||g(t.comma);while(!c(t.greaterThan)&&!o.error);g(t.greaterThan),D(e)}function rt(){let e=O(0);for(g(t.lessThan);!c(t.greaterThan)&&!o.error;)ke(),c(t.greaterThan)||g(t.comma);g(t.greaterThan),D(e)}function tp(){if(J(l._interface),d(t._extends))do Or();while(d(t.comma));Fr(!1,!1,!1)}function _o(){c(t.num)||c(t.string)?Ee():P()}function rp(){G()===t.colon?(_o(),Le()):ke(),g(t.bracketR),Le()}function np(){_o(),g(t.bracketR),g(t.bracketR),c(t.lessThan)||c(t.parenL)?wo():(d(t.question),Le())}function wo(){for(c(t.lessThan)&&Ae(),g(t.parenL);!c(t.parenR)&&!c(t.ellipsis)&&!o.error;)Mr(),c(t.parenR)||g(t.comma);d(t.ellipsis)&&Mr(),g(t.parenR),Le()}function sp(){wo()}function Fr(e,r,n){let s;for(r&&c(t.braceBarL)?(g(t.braceBarL),s=t.braceBarR):(g(t.braceL),s=t.braceR);!c(s)&&!o.error;){if(n&&I(l._proto)){let i=G();i!==t.colon&&i!==t.question&&(k(),e=!1)}if(e&&I(l._static)){let i=G();i!==t.colon&&i!==t.question&&k()}if(Dr(),d(t.bracketL))d(t.bracketL)?np():rp();else if(c(t.parenL)||c(t.lessThan))sp();else{if(I(l._get)||I(l._set)){let i=G();(i===t.name||i===t.string||i===t.num)&&k()}op()}ip()}g(s)}function op(){if(c(t.ellipsis)){if(g(t.ellipsis),d(t.comma)||d(t.semi),c(t.braceR))return;ke()}else _o(),c(t.lessThan)||c(t.parenL)?wo():(d(t.question),Le())}function ip(){!d(t.semi)&&!d(t.comma)&&!c(t.braceR)&&!c(t.braceBarR)&&C()}function q1(e){for(e||P();d(t.dot);)P()}function ap(){q1(!0),c(t.lessThan)&&rt()}function cp(){g(t._typeof),$1()}function lp(){for(g(t.bracketL);o.pos<w.length&&!c(t.bracketR)&&(ke(),!c(t.bracketR));)g(t.comma);g(t.bracketR)}function Mr(){let e=G();e===t.colon||e===t.question?(P(),d(t.question),Le()):ke()}function ho(){for(;!c(t.parenR)&&!c(t.ellipsis)&&!o.error;)Mr(),c(t.parenR)||g(t.comma);d(t.ellipsis)&&Mr()}function $1(){let e=!1,r=o.noAnonFunctionType;switch(o.type){case t.name:{if(I(l._interface)){tp();return}P(),ap();return}case t.braceL:Fr(!1,!1,!1);return;case t.braceBarL:Fr(!1,!0,!1);return;case t.bracketL:lp();return;case t.lessThan:Ae(),g(t.parenL),ho(),g(t.parenR),g(t.arrow),ke();return;case t.parenL:if(k(),!c(t.parenR)&&!c(t.ellipsis))if(c(t.name)){let n=G();e=n!==t.question&&n!==t.colon}else e=!0;if(e)if(o.noAnonFunctionType=!1,ke(),o.noAnonFunctionType=r,o.noAnonFunctionType||!(c(t.comma)||c(t.parenR)&&G()===t.arrow)){g(t.parenR);return}else d(t.comma);ho(),g(t.parenR),g(t.arrow),ke();return;case t.minus:k(),Xe();return;case t.string:case t.num:case t._true:case t._false:case t._null:case t._this:case t._void:case t.star:k();return;default:if(o.type===t._typeof){cp();return}else if(o.type&t.IS_KEYWORD){k(),o.tokens[o.tokens.length-1].type=t.name;return}}C()}function up(){for($1();!ie()&&(c(t.bracketL)||c(t.questionDot));)d(t.questionDot),g(t.bracketL),d(t.bracketR)||(ke(),g(t.bracketR))}function U1(){d(t.question)?U1():up()}function B1(){U1(),!o.noAnonFunctionType&&d(t.arrow)&&ke()}function j1(){for(d(t.bitwiseAND),B1();d(t.bitwiseAND);)B1()}function pp(){for(d(t.bitwiseOR),j1();d(t.bitwiseOR);)j1()}function ke(){pp()}function $e(){Le()}function V1(){P(),c(t.colon)&&$e()}function Dr(){(c(t.plus)||c(t.minus))&&(k(),o.tokens[o.tokens.length-1].isType=!0)}function P1(e){c(t.colon)&&mo(),tt(!1,e)}function C1(e,r,n){if(c(t.questionDot)&&G()===t.lessThan){if(r){n.stop=!0;return}k(),rt(),g(t.parenL),Pe();return}else if(!r&&c(t.lessThan)){let s=o.snapshot();if(rt(),g(t.parenL),Pe(),o.error)o.restoreFromSnapshot(s);else return}jt(e,r,n)}function R1(){if(c(t.lessThan)){let e=o.snapshot();rt(),o.error&&o.restoreFromSnapshot(e)}}function W1(){if(c(t.name)&&o.contextualKeyword===l._interface){let e=O(0);return k(),ko(),D(e),!0}else if(I(l._enum))return na(),!0;return!1}function H1(){return I(l._enum)?(na(),!0):!1}function G1(e){if(e===l._declare){if(c(t._class)||c(t.name)||c(t._function)||c(t._var)||c(t._export)){let r=O(1);fo(),D(r)}}else if(c(t.name)){if(e===l._interface){let r=O(1);ko(),D(r)}else if(e===l._type){let r=O(1);yo(),D(r)}else if(e===l._opaque){let r=O(1);xo(!1),D(r)}}H()}function Y1(){return I(l._type)||I(l._interface)||I(l._opaque)||I(l._enum)}function z1(){return c(t.name)&&(o.contextualKeyword===l._type||o.contextualKeyword===l._interface||o.contextualKeyword===l._opaque||o.contextualKeyword===l._enum)}function X1(){if(I(l._type)){let e=O(1);k(),c(t.braceL)?(qr(),wt()):yo(),D(e)}else if(I(l._opaque)){let e=O(1);k(),xo(!1),D(e)}else if(I(l._interface)){let e=O(1);k(),ko(),D(e)}else pe(!0)}function J1(){return c(t.star)||I(l._type)&&G()===t.star}function K1(){if(Z(l._type)){let e=O(2);Br(),D(e)}else Br()}function Q1(e){if(e&&c(t.lessThan)&&rt(),I(l._implements)){let r=O(0);k(),o.tokens[o.tokens.length-1].type=t._implements;do jr(),c(t.lessThan)&&rt();while(d(t.comma));D(r)}}function N1(){c(t.lessThan)&&(Ae(),c(t.parenL)||C())}function Ui(){let e=O(0);d(t.question),c(t.colon)&&$e(),D(e)}function Z1(){if(c(t._typeof)||I(l._type)){let e=Fe();(Wu(e)||e.type===t.braceL||e.type===t.star)&&k()}}function ea(){let e=o.contextualKeyword===l._type||o.type===t._typeof;e?k():P(),I(l._as)&&!pt(l._as)?(P(),e&&!c(t.name)&&!(o.type&t.IS_KEYWORD)||P()):(e&&(c(t.name)||o.type&t.IS_KEYWORD)&&P(),Z(l._as)&&P())}function ta(){if(c(t.lessThan)){let e=O(0);Ae(),D(e)}}function ra(){c(t.colon)&&$e()}function D1(){if(c(t.colon)){let e=o.noAnonFunctionType;o.noAnonFunctionType=!0,$e(),o.noAnonFunctionType=e}}function L1(e,r){if(c(t.lessThan)){let n=o.snapshot(),s=Ie(e,r);if(o.error)o.restoreFromSnapshot(n),o.type=t.typeParameterStart;else return s;let i=O(0);if(Ae(),D(i),s=Ie(e,r),s)return!0;C()}return Ie(e,r)}function O1(){if(c(t.colon)){let e=O(0),r=o.snapshot(),n=o.noAnonFunctionType;o.noAnonFunctionType=!0,mo(),o.noAnonFunctionType=n,ie()&&C(),c(t.arrow)||C(),o.error&&o.restoreFromSnapshot(r),D(e)}return d(t.arrow)}function F1(e,r=!1){if(o.tokens[o.tokens.length-1].contextualKeyword===l._async&&c(t.lessThan)){let n=o.snapshot();if(fp()&&!o.error)return;o.restoreFromSnapshot(n)}co(e,r)}function fp(){o.scopeDepth++;let e=o.tokens.length;return je(),Rr()?(_t(e),!0):!1}function na(){J(l._enum),o.tokens[o.tokens.length-1].type=t._enum,P(),hp()}function hp(){Z(l._of)&&k(),g(t.braceL),mp(),g(t.braceR)}function mp(){for(;!c(t.braceR)&&!o.error&&!d(t.ellipsis);)dp(),c(t.braceR)||g(t.comma)}function dp(){P(),d(t.eq)&&k()}function aa(){if(yt(t.eof),o.scopes.push(new de(0,o.tokens.length,!0)),o.scopeDepth!==0)throw new Error(`Invalid scope depth at end of file: ${o.scopeDepth}`);return new Ur(o.tokens,o.scopes)}function pe(e){B&&W1()||(c(t.at)&&Lr(),gp(e))}function gp(e){if(M&&l1())return;let r=o.type;switch(r){case t._break:case t._continue:yp();return;case t._debugger:xp();return;case t._do:_p();return;case t._for:wp();return;case t._function:if(G()===t.dot)break;e||C(),Sp();return;case t._class:e||C(),qe(!0);return;case t._if:Ip();return;case t._return:Ep();return;case t._switch:Ap();return;case t._throw:vp();return;case t._try:Cp();return;case t._let:case t._const:e||C();case t._var:qt(r!==t._var);return;case t._while:Rp();return;case t.braceL:Ue();return;case t.semi:Np();return;case t._export:case t._import:{let i=G();if(i===t.parenL||i===t.dot)break;k(),r===t._import?To():bo();return}case t.name:if(o.contextualKeyword===l._async){let i=o.start,a=o.snapshot();if(k(),c(t._function)&&!ie()){g(t._function),Be(i,!0);return}else o.restoreFromSnapshot(a)}else if(o.contextualKeyword===l._using&&!pr()&&G()===t.name){qt(!0);return}else if(ca()){J(l._await),qt(!0);return}default:break}let n=o.tokens.length;te();let s=null;if(o.tokens.length===n+1){let i=o.tokens[o.tokens.length-1];i.type===t.name&&(s=i.contextualKeyword)}if(s==null){H();return}d(t.colon)?Dp():Lp(s)}function ca(){if(!I(l._await))return!1;let e=o.snapshot();return k(),!I(l._using)||ne()?(o.restoreFromSnapshot(e),!1):(k(),!c(t.name)||ne()?(o.restoreFromSnapshot(e),!1):(o.restoreFromSnapshot(e),!0))}function Lr(){for(;c(t.at);)la()}function la(){if(k(),d(t.parenL))te(),g(t.parenR);else{for(P();d(t.dot);)P();kp()}}function kp(){M?_1():to()}function to(){d(t.parenL)&&Pe()}function yp(){k(),Se()||(P(),H())}function xp(){k(),H()}function _p(){k(),pe(!1),g(t._while),$t(),d(t.semi)}function wp(){o.scopeDepth++;let e=o.tokens.length;Tp();let r=o.tokens.length;o.scopes.push(new de(e,r,!1)),o.scopeDepth--}function bp(){return!(!I(l._using)||pt(l._of))}function Tp(){k();let e=!1;if(I(l._await)&&(e=!0,k()),g(t.parenL),c(t.semi)){e&&C(),So();return}let r=ca();if(r||c(t._var)||c(t._let)||c(t._const)||bp()){if(r&&J(l._await),k(),ua(!0,o.type!==t._var),c(t._in)||I(l._of)){sa(e);return}So();return}if(te(!0),c(t._in)||I(l._of)){sa(e);return}e&&C(),So()}function Sp(){let e=o.start;k(),Be(e,!0)}function Ip(){k(),$t(),pe(!1),d(t._else)&&pe(!1)}function Ep(){k(),Se()||(te(),H())}function Ap(){k(),$t(),o.scopeDepth++;let e=o.tokens.length;for(g(t.braceL);!c(t.braceR)&&!o.error;)if(c(t._case)||c(t._default)){let n=c(t._case);k(),n&&te(),g(t.colon)}else pe(!0);k();let r=o.tokens.length;o.scopes.push(new de(e,r,!1)),o.scopeDepth--}function vp(){k(),te(),H()}function Pp(){Dt(!0),M&&Ze()}function Cp(){if(k(),Ue(),c(t._catch)){k();let e=null;if(c(t.parenL)&&(o.scopeDepth++,e=o.tokens.length,g(t.parenL),Pp(),g(t.parenR)),Ue(),e!=null){let r=o.tokens.length;o.scopes.push(new de(e,r,!1)),o.scopeDepth--}}d(t._finally)&&Ue()}function qt(e){k(),ua(!1,e),H()}function Rp(){k(),$t(),pe(!1)}function Np(){k()}function Dp(){pe(!0)}function Lp(e){M?p1(e):B?G1(e):H()}function Ue(e=!1,r=0){let n=o.tokens.length;o.scopeDepth++,g(t.braceL),r&&(o.tokens[o.tokens.length-1].contextId=r),yt(t.braceR),r&&(o.tokens[o.tokens.length-1].contextId=r);let s=o.tokens.length;o.scopes.push(new de(n,s,e)),o.scopeDepth--}function yt(e){for(;!d(e)&&!o.error;)pe(!0)}function So(){g(t.semi),c(t.semi)||te(),g(t.semi),c(t.parenR)||te(),g(t.parenR),pe(!1)}function sa(e){e?Z(l._of):k(),te(),g(t.parenR),pe(!1)}function ua(e,r){for(;;){if(Op(r),d(t.eq)){let n=o.tokens.length-1;ee(e),o.tokens[n].rhsEndIndex=o.tokens.length}if(!d(t.comma))break}}function Op(e){Dt(e),M?g1():B&&ra()}function Be(e,r,n=!1){c(t.star)&&k(),r&&!n&&!c(t.name)&&!c(t._yield)&&C();let s=null;c(t.name)&&(r||(s=o.tokens.length,o.scopeDepth++),ve(!1));let i=o.tokens.length;o.scopeDepth++,je(),po(e);let a=o.tokens.length;o.scopes.push(new de(i,a,!0)),o.scopeDepth--,s!==null&&(o.scopes.push(new de(s,a,!0)),o.scopeDepth--)}function je(e=!1,r=0){M?d1():B&&ta(),g(t.parenL),r&&(o.tokens[o.tokens.length-1].contextId=r),Lt(t.parenR,!1,!1,e,r),r&&(o.tokens[o.tokens.length-1].contextId=r)}function qe(e,r=!1){let n=Ke();k(),o.tokens[o.tokens.length-1].contextId=n,o.tokens[o.tokens.length-1].isExpression=!e;let s=null;e||(s=o.tokens.length,o.scopeDepth++),jp(e,r),qp();let i=o.tokens.length;if(Fp(n),!o.error&&(o.tokens[i].contextId=n,o.tokens[o.tokens.length-1].contextId=n,s!==null)){let a=o.tokens.length;o.scopes.push(new de(s,a,!1)),o.scopeDepth--}}function pa(){return c(t.eq)||c(t.semi)||c(t.braceR)||c(t.bang)||c(t.colon)}function fa(){return c(t.parenL)||c(t.lessThan)}function Fp(e){for(g(t.braceL);!d(t.braceR)&&!o.error;){if(d(t.semi))continue;if(c(t.at)){la();continue}let r=o.start;Mp(r,e)}}function Mp(e,r){M&&Ot([l._declare,l._public,l._protected,l._private,l._override]);let n=!1;if(c(t.name)&&o.contextualKeyword===l._static){if(P(),fa()){Vt(e,!1);return}else if(pa()){$r();return}if(o.tokens[o.tokens.length-1].type=t._static,n=!0,c(t.braceL)){o.tokens[o.tokens.length-1].contextId=r,Ue();return}}Bp(e,n,r)}function Bp(e,r,n){if(M&&u1(r))return;if(d(t.star)){Ut(n),Vt(e,!1);return}Ut(n);let s=!1,i=o.tokens[o.tokens.length-1];i.contextualKeyword===l._constructor&&(s=!0),oa(),fa()?Vt(e,s):pa()?$r():i.contextualKeyword===l._async&&!Se()?(o.tokens[o.tokens.length-1].type=t._async,c(t.star)&&k(),Ut(n),oa(),Vt(e,!1)):(i.contextualKeyword===l._get||i.contextualKeyword===l._set)&&!(Se()&&c(t.star))?(i.contextualKeyword===l._get?o.tokens[o.tokens.length-1].type=t._get:o.tokens[o.tokens.length-1].type=t._set,Ut(n),Vt(e,!1)):i.contextualKeyword===l._accessor&&!Se()?(Ut(n),$r()):Se()?$r():C()}function Vt(e,r){M?Je():B&&c(t.lessThan)&&Ae(),Nr(e,r)}function Ut(e){et(e)}function oa(){if(M){let e=O(0);d(t.question),D(e)}}function $r(){if(M?(mr(t.bang),Ze()):B&&c(t.colon)&&$e(),c(t.eq)){let e=o.tokens.length;k(),ee(),o.tokens[e].rhsEndIndex=o.tokens.length}H()}function jp(e,r=!1){M&&(!e||r)&&I(l._implements)||(c(t.name)&&ve(!0),M?Je():B&&c(t.lessThan)&&Ae())}function qp(){let e=!1;d(t._extends)?(io(),e=!0):e=!1,M?h1(e):B&&Q1(e)}function bo(){let e=o.tokens.length-1;M&&o1()||(Wp()?Hp():Vp()?(P(),c(t.comma)&&G()===t.star?(g(t.comma),g(t.star),J(l._as),P()):ha(),wt()):d(t._default)?$p():Yp()?Up():(qr(),wt()),o.tokens[e].rhsEndIndex=o.tokens.length)}function $p(){if(M&&c1()||B&&H1())return;let e=o.start;d(t._function)?Be(e,!0,!0):I(l._async)&&G()===t._function?(Z(l._async),d(t._function),Be(e,!0,!0)):c(t._class)?qe(!0,!0):c(t.at)?(Lr(),qe(!0,!0)):(ee(),H())}function Up(){M?f1():B?X1():pe(!0)}function Vp(){if(M&&Zs())return!1;if(B&&z1())return!1;if(c(t.name))return o.contextualKeyword!==l._async;if(!c(t._default))return!1;let e=It(),r=Fe(),n=r.type===t.name&&r.contextualKeyword===l._from;if(r.type===t.comma)return!0;if(n){let s=w.charCodeAt(ws(e+4));return s===p.quotationMark||s===p.apostrophe}return!1}function ha(){d(t.comma)&&qr()}function wt(){Z(l._from)&&(Ee(),ma()),H()}function Wp(){return B?J1():c(t.star)}function Hp(){B?K1():Br()}function Br(){g(t.star),I(l._as)?Gp():wt()}function Gp(){k(),o.tokens[o.tokens.length-1].type=t._as,P(),ha(),wt()}function Yp(){return M&&Zs()||B&&Y1()||o.type===t._var||o.type===t._const||o.type===t._let||o.type===t._function||o.type===t._class||I(l._async)||c(t.at)}function qr(){let e=!0;for(g(t.braceL);!d(t.braceR)&&!o.error;){if(e)e=!1;else if(g(t.comma),d(t.braceR))break;zp()}}function zp(){if(M){a1();return}P(),o.tokens[o.tokens.length-1].identifierRole=E.ExportAccess,Z(l._as)&&P()}function Xp(){let e=o.snapshot();return J(l._module),Z(l._from)?I(l._from)?(o.restoreFromSnapshot(e),!0):(o.restoreFromSnapshot(e),!1):c(t.comma)?(o.restoreFromSnapshot(e),!1):(o.restoreFromSnapshot(e),!0)}function Jp(){I(l._module)&&Xp()&&k()}function To(){if(M&&c(t.name)&&G()===t.eq){Er();return}if(M&&I(l._type)){let e=Fe();if(e.type===t.name&&e.contextualKeyword!==l._from){if(J(l._type),G()===t.eq){Er();return}}else(e.type===t.star||e.type===t.braceL)&&J(l._type)}c(t.string)?Ee():(Jp(),Qp(),J(l._from),Ee()),ma(),H()}function Kp(){return c(t.name)}function ia(){ht()}function Qp(){B&&Z1();let e=!0;if(!(Kp()&&(ia(),!d(t.comma)))){if(c(t.star)){k(),J(l._as),ia();return}for(g(t.braceL);!d(t.braceR)&&!o.error;){if(e)e=!1;else if(d(t.colon)&&C("ES2015 named imports do not destructure. Use another statement for destructuring after the import."),g(t.comma),d(t.braceR))break;Zp()}}}function Zp(){if(M){i1();return}if(B){ea();return}ht(),I(l._as)&&(o.tokens[o.tokens.length-1].identifierRole=E.ImportAccess,k(),ht())}function ma(){(c(t._with)||I(l._assert)&&!ne())&&(k(),Ft(!1,!1))}function da(){return o.pos===0&&w.charCodeAt(0)===p.numberSign&&w.charCodeAt(1)===p.exclamationMark&&Ss(2),Ts(),aa()}var Ur=class{constructor(r,n){this.tokens=r,this.scopes=n}};function ga(e,r,n,s){if(s&&n)throw new Error("Cannot combine flow and typescript plugins.");Qo(e,r,n,s);let i=da();if(o.error)throw Ko(o.error);return i}function Io(e){let r=e.currentIndex(),n=0,s=e.currentToken();do{let i=e.tokens[r];if(i.isOptionalChainStart&&n++,i.isOptionalChainEnd&&n--,n+=i.numNullishCoalesceStarts,n-=i.numNullishCoalesceEnds,i.contextualKeyword===l._await&&i.identifierRole==null&&i.scopeDepth===s.scopeDepth)return!0;r+=1}while(n>0&&r<e.tokens.length);return!1}var Wt=class e{__init(){this.resultCode=""}__init2(){this.resultMappings=new Array(this.tokens.length)}__init3(){this.tokenIndex=0}constructor(r,n,s,i,a){this.code=r,this.tokens=n,this.isFlowEnabled=s,this.disableESTransforms=i,this.helperManager=a,e.prototype.__init.call(this),e.prototype.__init2.call(this),e.prototype.__init3.call(this)}snapshot(){return{resultCode:this.resultCode,tokenIndex:this.tokenIndex}}restoreToSnapshot(r){this.resultCode=r.resultCode,this.tokenIndex=r.tokenIndex}dangerouslyGetAndRemoveCodeSinceSnapshot(r){let n=this.resultCode.slice(r.resultCode.length);return this.resultCode=r.resultCode,n}reset(){this.resultCode="",this.resultMappings=new Array(this.tokens.length),this.tokenIndex=0}matchesContextualAtIndex(r,n){return this.matches1AtIndex(r,t.name)&&this.tokens[r].contextualKeyword===n}identifierNameAtIndex(r){return this.identifierNameForToken(this.tokens[r])}identifierNameAtRelativeIndex(r){return this.identifierNameForToken(this.tokenAtRelativeIndex(r))}identifierName(){return this.identifierNameForToken(this.currentToken())}identifierNameForToken(r){return this.code.slice(r.start,r.end)}rawCodeForToken(r){return this.code.slice(r.start,r.end)}stringValueAtIndex(r){return this.stringValueForToken(this.tokens[r])}stringValue(){return this.stringValueForToken(this.currentToken())}stringValueForToken(r){return this.code.slice(r.start+1,r.end-1)}matches1AtIndex(r,n){return this.tokens[r].type===n}matches2AtIndex(r,n,s){return this.tokens[r].type===n&&this.tokens[r+1].type===s}matches3AtIndex(r,n,s,i){return this.tokens[r].type===n&&this.tokens[r+1].type===s&&this.tokens[r+2].type===i}matches1(r){return this.tokens[this.tokenIndex].type===r}matches2(r,n){return this.tokens[this.tokenIndex].type===r&&this.tokens[this.tokenIndex+1].type===n}matches3(r,n,s){return this.tokens[this.tokenIndex].type===r&&this.tokens[this.tokenIndex+1].type===n&&this.tokens[this.tokenIndex+2].type===s}matches4(r,n,s,i){return this.tokens[this.tokenIndex].type===r&&this.tokens[this.tokenIndex+1].type===n&&this.tokens[this.tokenIndex+2].type===s&&this.tokens[this.tokenIndex+3].type===i}matches5(r,n,s,i,a){return this.tokens[this.tokenIndex].type===r&&this.tokens[this.tokenIndex+1].type===n&&this.tokens[this.tokenIndex+2].type===s&&this.tokens[this.tokenIndex+3].type===i&&this.tokens[this.tokenIndex+4].type===a}matchesContextual(r){return this.matchesContextualAtIndex(this.tokenIndex,r)}matchesContextIdAndLabel(r,n){return this.matches1(r)&&this.currentToken().contextId===n}previousWhitespaceAndComments(){let r=this.code.slice(this.tokenIndex>0?this.tokens[this.tokenIndex-1].end:0,this.tokenIndex<this.tokens.length?this.tokens[this.tokenIndex].start:this.code.length);return this.isFlowEnabled&&(r=r.replace(/@flow/g,"")),r}replaceToken(r){this.resultCode+=this.previousWhitespaceAndComments(),this.appendTokenPrefix(),this.resultMappings[this.tokenIndex]=this.resultCode.length,this.resultCode+=r,this.appendTokenSuffix(),this.tokenIndex++}replaceTokenTrimmingLeftWhitespace(r){this.resultCode+=this.previousWhitespaceAndComments().replace(/[^\r\n]/g,""),this.appendTokenPrefix(),this.resultMappings[this.tokenIndex]=this.resultCode.length,this.resultCode+=r,this.appendTokenSuffix(),this.tokenIndex++}removeInitialToken(){this.replaceToken("")}removeToken(){this.replaceTokenTrimmingLeftWhitespace("")}removeBalancedCode(){let r=0;for(;!this.isAtEnd();){if(this.matches1(t.braceL))r++;else if(this.matches1(t.braceR)){if(r===0)return;r--}this.removeToken()}}copyExpectedToken(r){if(this.tokens[this.tokenIndex].type!==r)throw new Error(`Expected token ${r}`);this.copyToken()}copyToken(){this.resultCode+=this.previousWhitespaceAndComments(),this.appendTokenPrefix(),this.resultMappings[this.tokenIndex]=this.resultCode.length,this.resultCode+=this.code.slice(this.tokens[this.tokenIndex].start,this.tokens[this.tokenIndex].end),this.appendTokenSuffix(),this.tokenIndex++}copyTokenWithPrefix(r){this.resultCode+=this.previousWhitespaceAndComments(),this.appendTokenPrefix(),this.resultCode+=r,this.resultMappings[this.tokenIndex]=this.resultCode.length,this.resultCode+=this.code.slice(this.tokens[this.tokenIndex].start,this.tokens[this.tokenIndex].end),this.appendTokenSuffix(),this.tokenIndex++}appendTokenPrefix(){let r=this.currentToken();if((r.numNullishCoalesceStarts||r.isOptionalChainStart)&&(r.isAsyncOperation=Io(this)),!this.disableESTransforms){if(r.numNullishCoalesceStarts)for(let n=0;n<r.numNullishCoalesceStarts;n++)r.isAsyncOperation?(this.resultCode+="await ",this.resultCode+=this.helperManager.getHelperName("asyncNullishCoalesce")):this.resultCode+=this.helperManager.getHelperName("nullishCoalesce"),this.resultCode+="(";r.isOptionalChainStart&&(r.isAsyncOperation&&(this.resultCode+="await "),this.tokenIndex>0&&this.tokenAtRelativeIndex(-1).type===t._delete?r.isAsyncOperation?this.resultCode+=this.helperManager.getHelperName("asyncOptionalChainDelete"):this.resultCode+=this.helperManager.getHelperName("optionalChainDelete"):r.isAsyncOperation?this.resultCode+=this.helperManager.getHelperName("asyncOptionalChain"):this.resultCode+=this.helperManager.getHelperName("optionalChain"),this.resultCode+="([")}}appendTokenSuffix(){let r=this.currentToken();if(r.isOptionalChainEnd&&!this.disableESTransforms&&(this.resultCode+="])"),r.numNullishCoalesceEnds&&!this.disableESTransforms)for(let n=0;n<r.numNullishCoalesceEnds;n++)this.resultCode+="))"}appendCode(r){this.resultCode+=r}currentToken(){return this.tokens[this.tokenIndex]}currentTokenCode(){let r=this.currentToken();return this.code.slice(r.start,r.end)}tokenAtRelativeIndex(r){return this.tokens[this.tokenIndex+r]}currentIndex(){return this.tokenIndex}nextToken(){if(this.tokenIndex===this.tokens.length)throw new Error("Unexpectedly reached end of input.");this.tokenIndex++}previousToken(){this.tokenIndex--}finish(){if(this.tokenIndex!==this.tokens.length)throw new Error("Tried to finish processing tokens before reaching the end.");return this.resultCode+=this.previousWhitespaceAndComments(),{code:this.resultCode,mappings:this.resultMappings}}isAtEnd(){return this.tokenIndex===this.tokens.length}};function Ao(e,r,n,s){let i=r.snapshot(),a=ef(r),u=[],h=[],f=[],m=null,_=[],x=[],b=r.currentToken().contextId;if(b==null)throw new Error("Expected non-null class context ID on class open-brace.");for(r.nextToken();!r.matchesContextIdAndLabel(t.braceR,b);)if(r.matchesContextual(l._constructor)&&!r.currentToken().isType)({constructorInitializerStatements:u,constructorInsertPos:m}=ka(r));else if(r.matches1(t.semi))s||x.push({start:r.currentIndex(),end:r.currentIndex()+1}),r.nextToken();else if(r.currentToken().isType)r.nextToken();else{let y=r.currentIndex(),S=!1,q=!1,T=!1;for(;Vr(r.currentToken());)r.matches1(t._static)&&(S=!0),r.matches1(t.hash)&&(q=!0),(r.matches1(t._declare)||r.matches1(t._abstract))&&(T=!0),r.nextToken();if(S&&r.matches1(t.braceL)){Eo(r,b);continue}if(q){Eo(r,b);continue}if(r.matchesContextual(l._constructor)&&!r.currentToken().isType){({constructorInitializerStatements:u,constructorInsertPos:m}=ka(r));continue}let L=r.currentIndex();if(tf(r),r.matches1(t.lessThan)||r.matches1(t.parenL)){Eo(r,b);continue}for(;r.currentToken().isType;)r.nextToken();if(r.matches1(t.eq)){let F=r.currentIndex(),V=r.currentToken().rhsEndIndex;if(V==null)throw new Error("Expected rhsEndIndex on class field assignment.");for(r.nextToken();r.currentIndex()<V;)e.processToken();let W;S?(W=n.claimFreeName("__initStatic"),f.push(W)):(W=n.claimFreeName("__init"),h.push(W)),_.push({initializerName:W,equalsIndex:F,start:L,end:r.currentIndex()})}else(!s||T)&&x.push({start:y,end:r.currentIndex()})}return r.restoreToSnapshot(i),s?{headerInfo:a,constructorInitializerStatements:u,instanceInitializerNames:[],staticInitializerNames:[],constructorInsertPos:m,fields:[],rangesToRemove:x}:{headerInfo:a,constructorInitializerStatements:u,instanceInitializerNames:h,staticInitializerNames:f,constructorInsertPos:m,fields:_,rangesToRemove:x}}function Eo(e,r){for(e.nextToken();e.currentToken().contextId!==r;)e.nextToken();for(;Vr(e.tokenAtRelativeIndex(-1));)e.previousToken()}function ef(e){let r=e.currentToken(),n=r.contextId;if(n==null)throw new Error("Expected context ID on class token.");let s=r.isExpression;if(s==null)throw new Error("Expected isExpression on class token.");let i=null,a=!1;for(e.nextToken(),e.matches1(t.name)&&(i=e.identifierName());!e.matchesContextIdAndLabel(t.braceL,n);)e.matches1(t._extends)&&!e.currentToken().isType&&(a=!0),e.nextToken();return{isExpression:s,className:i,hasSuperclass:a}}function ka(e){let r=[];e.nextToken();let n=e.currentToken().contextId;if(n==null)throw new Error("Expected context ID on open-paren starting constructor params.");for(;!e.matchesContextIdAndLabel(t.parenR,n);)if(e.currentToken().contextId===n){if(e.nextToken(),Vr(e.currentToken())){for(e.nextToken();Vr(e.currentToken());)e.nextToken();let a=e.currentToken();if(a.type!==t.name)throw new Error("Expected identifier after access modifiers in constructor arg.");let u=e.identifierNameForToken(a);r.push(`this.${u} = ${u}`)}}else e.nextToken();for(e.nextToken();e.currentToken().isType;)e.nextToken();let s=e.currentIndex(),i=!1;for(;!e.matchesContextIdAndLabel(t.braceR,n);){if(!i&&e.matches2(t._super,t.parenL)){e.nextToken();let a=e.currentToken().contextId;if(a==null)throw new Error("Expected a context ID on the super call");for(;!e.matchesContextIdAndLabel(t.parenR,a);)e.nextToken();s=e.currentIndex(),i=!0}e.nextToken()}return e.nextToken(),{constructorInitializerStatements:r,constructorInsertPos:s}}function Vr(e){return[t._async,t._get,t._set,t.plus,t.minus,t._readonly,t._static,t._public,t._private,t._protected,t._override,t._abstract,t.star,t._declare,t.hash].includes(e.type)}function tf(e){if(e.matches1(t.bracketL)){let n=e.currentToken().contextId;if(n==null)throw new Error("Expected class context ID on computed name open bracket.");for(;!e.matchesContextIdAndLabel(t.bracketR,n);)e.nextToken();e.nextToken()}else e.nextToken()}function Ht(e){if(e.removeInitialToken(),e.removeToken(),e.removeToken(),e.removeToken(),e.matches1(t.parenL))e.removeToken(),e.removeToken(),e.removeToken();else for(;e.matches1(t.dot);)e.removeToken(),e.removeToken()}var Wr={typeDeclarations:new Set,valueDeclarations:new Set};function Gt(e){let r=new Set,n=new Set;for(let s=0;s<e.tokens.length;s++){let i=e.tokens[s];i.type===t.name&&hr(i)&&(i.isType?r.add(e.identifierNameForToken(i)):n.add(e.identifierNameForToken(i)))}return{typeDeclarations:r,valueDeclarations:n}}function Yt(e){let r=e.currentIndex();for(;!e.matches1AtIndex(r,t.braceR);)r++;return e.matchesContextualAtIndex(r+1,l._from)&&e.matches1AtIndex(r+2,t.string)}function Ve(e){(e.matches2(t._with,t.braceL)||e.matches2(t.name,t.braceL)&&e.matchesContextual(l._assert))&&(e.removeToken(),e.removeToken(),e.removeBalancedCode(),e.removeToken())}function zt(e,r,n,s){if(!e||r)return!1;let i=n.currentToken();if(i.rhsEndIndex==null)throw new Error("Expected non-null rhsEndIndex on export token.");let a=i.rhsEndIndex-n.currentIndex();if(a!==3&&!(a===4&&n.matches1AtIndex(i.rhsEndIndex-1,t.semi)))return!1;let u=n.tokenAtRelativeIndex(2);if(u.type!==t.name)return!1;let h=n.identifierNameForToken(u);return s.typeDeclarations.has(h)&&!s.valueDeclarations.has(h)}var Xt=class e extends K{__init(){this.hadExport=!1}__init2(){this.hadNamedExport=!1}__init3(){this.hadDefaultExport=!1}constructor(r,n,s,i,a,u,h,f,m,_,x,b){super(),this.rootTransformer=r,this.tokens=n,this.importProcessor=s,this.nameManager=i,this.helperManager=a,this.reactHotLoaderTransformer=u,this.enableLegacyBabel5ModuleInterop=h,this.enableLegacyTypeScriptModuleInterop=f,this.isTypeScriptTransformEnabled=m,this.isFlowTransformEnabled=_,this.preserveDynamicImport=x,this.keepUnusedImports=b,e.prototype.__init.call(this),e.prototype.__init2.call(this),e.prototype.__init3.call(this),this.declarationInfo=m?Gt(n):Wr}getPrefixCode(){let r="";return this.hadExport&&(r+='Object.defineProperty(exports, "__esModule", {value: true});'),r}getSuffixCode(){return this.enableLegacyBabel5ModuleInterop&&this.hadDefaultExport&&!this.hadNamedExport?`
-module.exports = exports.default;
-`:""}process(){return this.tokens.matches3(t._import,t.name,t.eq)?this.processImportEquals():this.tokens.matches1(t._import)?(this.processImport(),!0):this.tokens.matches2(t._export,t.eq)?(this.tokens.replaceToken("module.exports"),!0):this.tokens.matches1(t._export)&&!this.tokens.currentToken().isType?(this.hadExport=!0,this.processExport()):this.tokens.matches2(t.name,t.postIncDec)&&this.processPostIncDec()?!0:this.tokens.matches1(t.name)||this.tokens.matches1(t.jsxName)?this.processIdentifier():this.tokens.matches1(t.eq)?this.processAssignment():this.tokens.matches1(t.assign)?this.processComplexAssignment():this.tokens.matches1(t.preIncDec)?this.processPreIncDec():!1}processImportEquals(){let r=this.tokens.identifierNameAtIndex(this.tokens.currentIndex()+1);return this.importProcessor.shouldAutomaticallyElideImportedName(r)?Ht(this.tokens):this.tokens.replaceToken("const"),!0}processImport(){if(this.tokens.matches2(t._import,t.parenL)){if(this.preserveDynamicImport){this.tokens.copyToken();return}let n=this.enableLegacyTypeScriptModuleInterop?"":`${this.helperManager.getHelperName("interopRequireWildcard")}(`;this.tokens.replaceToken(`Promise.resolve().then(() => ${n}require`);let s=this.tokens.currentToken().contextId;if(s==null)throw new Error("Expected context ID on dynamic import invocation.");for(this.tokens.copyToken();!this.tokens.matchesContextIdAndLabel(t.parenR,s);)this.rootTransformer.processToken();this.tokens.replaceToken(n?")))":"))");return}if(this.removeImportAndDetectIfShouldElide())this.tokens.removeToken();else{let n=this.tokens.stringValue();this.tokens.replaceTokenTrimmingLeftWhitespace(this.importProcessor.claimImportCode(n)),this.tokens.appendCode(this.importProcessor.claimImportCode(n))}Ve(this.tokens),this.tokens.matches1(t.semi)&&this.tokens.removeToken()}removeImportAndDetectIfShouldElide(){if(this.tokens.removeInitialToken(),this.tokens.matchesContextual(l._type)&&!this.tokens.matches1AtIndex(this.tokens.currentIndex()+1,t.comma)&&!this.tokens.matchesContextualAtIndex(this.tokens.currentIndex()+1,l._from))return this.removeRemainingImport(),!0;if(this.tokens.matches1(t.name)||this.tokens.matches1(t.star))return this.removeRemainingImport(),!1;if(this.tokens.matches1(t.string))return!1;let r=!1,n=!1;for(;!this.tokens.matches1(t.string);)(!r&&this.tokens.matches1(t.braceL)||this.tokens.matches1(t.comma))&&(this.tokens.removeToken(),this.tokens.matches1(t.braceR)||(n=!0),(this.tokens.matches2(t.name,t.comma)||this.tokens.matches2(t.name,t.braceR)||this.tokens.matches4(t.name,t.name,t.name,t.comma)||this.tokens.matches4(t.name,t.name,t.name,t.braceR))&&(r=!0)),this.tokens.removeToken();return this.keepUnusedImports?!1:this.isTypeScriptTransformEnabled?!r:this.isFlowTransformEnabled?n&&!r:!1}removeRemainingImport(){for(;!this.tokens.matches1(t.string);)this.tokens.removeToken()}processIdentifier(){let r=this.tokens.currentToken();if(r.shadowsGlobal)return!1;if(r.identifierRole===E.ObjectShorthand)return this.processObjectShorthand();if(r.identifierRole!==E.Access)return!1;let n=this.importProcessor.getIdentifierReplacement(this.tokens.identifierNameForToken(r));if(!n)return!1;let s=this.tokens.currentIndex()+1;for(;s<this.tokens.tokens.length&&this.tokens.tokens[s].type===t.parenR;)s++;return this.tokens.tokens[s].type===t.parenL?this.tokens.tokenAtRelativeIndex(1).type===t.parenL&&this.tokens.tokenAtRelativeIndex(-1).type!==t._new?(this.tokens.replaceToken(`${n}.call(void 0, `),this.tokens.removeToken(),this.rootTransformer.processBalancedCode(),this.tokens.copyExpectedToken(t.parenR)):this.tokens.replaceToken(`(0, ${n})`):this.tokens.replaceToken(n),!0}processObjectShorthand(){let r=this.tokens.identifierName(),n=this.importProcessor.getIdentifierReplacement(r);return n?(this.tokens.replaceToken(`${r}: ${n}`),!0):!1}processExport(){if(this.tokens.matches2(t._export,t._enum)||this.tokens.matches3(t._export,t._const,t._enum))return this.hadNamedExport=!0,!1;if(this.tokens.matches2(t._export,t._default))return this.tokens.matches3(t._export,t._default,t._enum)?(this.hadDefaultExport=!0,!1):(this.processExportDefault(),!0);if(this.tokens.matches2(t._export,t.braceL))return this.processExportBindings(),!0;if(this.tokens.matches2(t._export,t.name)&&this.tokens.matchesContextualAtIndex(this.tokens.currentIndex()+1,l._type)){if(this.tokens.removeInitialToken(),this.tokens.removeToken(),this.tokens.matches1(t.braceL)){for(;!this.tokens.matches1(t.braceR);)this.tokens.removeToken();this.tokens.removeToken()}else this.tokens.removeToken(),this.tokens.matches1(t._as)&&(this.tokens.removeToken(),this.tokens.removeToken());return this.tokens.matchesContextual(l._from)&&this.tokens.matches1AtIndex(this.tokens.currentIndex()+1,t.string)&&(this.tokens.removeToken(),this.tokens.removeToken(),Ve(this.tokens)),!0}if(this.hadNamedExport=!0,this.tokens.matches2(t._export,t._var)||this.tokens.matches2(t._export,t._let)||this.tokens.matches2(t._export,t._const))return this.processExportVar(),!0;if(this.tokens.matches2(t._export,t._function)||this.tokens.matches3(t._export,t.name,t._function))return this.processExportFunction(),!0;if(this.tokens.matches2(t._export,t._class)||this.tokens.matches3(t._export,t._abstract,t._class)||this.tokens.matches2(t._export,t.at))return this.processExportClass(),!0;if(this.tokens.matches2(t._export,t.star))return this.processExportStar(),!0;throw new Error("Unrecognized export syntax.")}processAssignment(){let r=this.tokens.currentIndex(),n=this.tokens.tokens[r-1];if(n.isType||n.type!==t.name||n.shadowsGlobal||r>=2&&this.tokens.matches1AtIndex(r-2,t.dot)||r>=2&&[t._var,t._let,t._const].includes(this.tokens.tokens[r-2].type))return!1;let s=this.importProcessor.resolveExportBinding(this.tokens.identifierNameForToken(n));return s?(this.tokens.copyToken(),this.tokens.appendCode(` ${s} =`),!0):!1}processComplexAssignment(){let r=this.tokens.currentIndex(),n=this.tokens.tokens[r-1];if(n.type!==t.name||n.shadowsGlobal||r>=2&&this.tokens.matches1AtIndex(r-2,t.dot))return!1;let s=this.importProcessor.resolveExportBinding(this.tokens.identifierNameForToken(n));return s?(this.tokens.appendCode(` = ${s}`),this.tokens.copyToken(),!0):!1}processPreIncDec(){let r=this.tokens.currentIndex(),n=this.tokens.tokens[r+1];if(n.type!==t.name||n.shadowsGlobal||r+2<this.tokens.tokens.length&&(this.tokens.matches1AtIndex(r+2,t.dot)||this.tokens.matches1AtIndex(r+2,t.bracketL)||this.tokens.matches1AtIndex(r+2,t.parenL)))return!1;let s=this.tokens.identifierNameForToken(n),i=this.importProcessor.resolveExportBinding(s);return i?(this.tokens.appendCode(`${i} = `),this.tokens.copyToken(),!0):!1}processPostIncDec(){let r=this.tokens.currentIndex(),n=this.tokens.tokens[r],s=this.tokens.tokens[r+1];if(n.type!==t.name||n.shadowsGlobal||r>=1&&this.tokens.matches1AtIndex(r-1,t.dot))return!1;let i=this.tokens.identifierNameForToken(n),a=this.importProcessor.resolveExportBinding(i);if(!a)return!1;let u=this.tokens.rawCodeForToken(s),h=this.importProcessor.getIdentifierReplacement(i)||i;if(u==="++")this.tokens.replaceToken(`(${h} = ${a} = ${h} + 1, ${h} - 1)`);else if(u==="--")this.tokens.replaceToken(`(${h} = ${a} = ${h} - 1, ${h} + 1)`);else throw new Error(`Unexpected operator: ${u}`);return this.tokens.removeToken(),!0}processExportDefault(){let r=!0;if(this.tokens.matches4(t._export,t._default,t._function,t.name)||this.tokens.matches5(t._export,t._default,t.name,t._function,t.name)&&this.tokens.matchesContextualAtIndex(this.tokens.currentIndex()+2,l._async)){this.tokens.removeInitialToken(),this.tokens.removeToken();let n=this.processNamedFunction();this.tokens.appendCode(` exports.default = ${n};`)}else if(this.tokens.matches4(t._export,t._default,t._class,t.name)||this.tokens.matches5(t._export,t._default,t._abstract,t._class,t.name)||this.tokens.matches3(t._export,t._default,t.at)){this.tokens.removeInitialToken(),this.tokens.removeToken(),this.copyDecorators(),this.tokens.matches1(t._abstract)&&this.tokens.removeToken();let n=this.rootTransformer.processNamedClass();this.tokens.appendCode(` exports.default = ${n};`)}else if(zt(this.isTypeScriptTransformEnabled,this.keepUnusedImports,this.tokens,this.declarationInfo))r=!1,this.tokens.removeInitialToken(),this.tokens.removeToken(),this.tokens.removeToken();else if(this.reactHotLoaderTransformer){let n=this.nameManager.claimFreeName("_default");this.tokens.replaceToken(`let ${n}; exports.`),this.tokens.copyToken(),this.tokens.appendCode(` = ${n} =`),this.reactHotLoaderTransformer.setExtractedDefaultExportName(n)}else this.tokens.replaceToken("exports."),this.tokens.copyToken(),this.tokens.appendCode(" =");r&&(this.hadDefaultExport=!0)}copyDecorators(){for(;this.tokens.matches1(t.at);)if(this.tokens.copyToken(),this.tokens.matches1(t.parenL))this.tokens.copyExpectedToken(t.parenL),this.rootTransformer.processBalancedCode(),this.tokens.copyExpectedToken(t.parenR);else{for(this.tokens.copyExpectedToken(t.name);this.tokens.matches1(t.dot);)this.tokens.copyExpectedToken(t.dot),this.tokens.copyExpectedToken(t.name);this.tokens.matches1(t.parenL)&&(this.tokens.copyExpectedToken(t.parenL),this.rootTransformer.processBalancedCode(),this.tokens.copyExpectedToken(t.parenR))}}processExportVar(){this.isSimpleExportVar()?this.processSimpleExportVar():this.processComplexExportVar()}isSimpleExportVar(){let r=this.tokens.currentIndex();if(r++,r++,!this.tokens.matches1AtIndex(r,t.name))return!1;for(r++;r<this.tokens.tokens.length&&this.tokens.tokens[r].isType;)r++;return!!this.tokens.matches1AtIndex(r,t.eq)}processSimpleExportVar(){this.tokens.removeInitialToken(),this.tokens.copyToken();let r=this.tokens.identifierName();for(;!this.tokens.matches1(t.eq);)this.rootTransformer.processToken();let n=this.tokens.currentToken().rhsEndIndex;if(n==null)throw new Error("Expected = token with an end index.");for(;this.tokens.currentIndex()<n;)this.rootTransformer.processToken();this.tokens.appendCode(`; exports.${r} = ${r}`)}processComplexExportVar(){this.tokens.removeInitialToken(),this.tokens.removeToken();let r=this.tokens.matches1(t.braceL);r&&this.tokens.appendCode("(");let n=0;for(;;)if(this.tokens.matches1(t.braceL)||this.tokens.matches1(t.dollarBraceL)||this.tokens.matches1(t.bracketL))n++,this.tokens.copyToken();else if(this.tokens.matches1(t.braceR)||this.tokens.matches1(t.bracketR))n--,this.tokens.copyToken();else{if(n===0&&!this.tokens.matches1(t.name)&&!this.tokens.currentToken().isType)break;if(this.tokens.matches1(t.eq)){let s=this.tokens.currentToken().rhsEndIndex;if(s==null)throw new Error("Expected = token with an end index.");for(;this.tokens.currentIndex()<s;)this.rootTransformer.processToken()}else{let s=this.tokens.currentToken();if(fr(s)){let i=this.tokens.identifierName(),a=this.importProcessor.getIdentifierReplacement(i);if(a===null)throw new Error(`Expected a replacement for ${i} in \`export var\` syntax.`);ri(s)&&(a=`${i}: ${a}`),this.tokens.replaceToken(a)}else this.rootTransformer.processToken()}}if(r){let s=this.tokens.currentToken().rhsEndIndex;if(s==null)throw new Error("Expected = token with an end index.");for(;this.tokens.currentIndex()<s;)this.rootTransformer.processToken();this.tokens.appendCode(")")}}processExportFunction(){this.tokens.replaceToken("");let r=this.processNamedFunction();this.tokens.appendCode(` exports.${r} = ${r};`)}processNamedFunction(){if(this.tokens.matches1(t._function))this.tokens.copyToken();else if(this.tokens.matches2(t.name,t._function)){if(!this.tokens.matchesContextual(l._async))throw new Error("Expected async keyword in function export.");this.tokens.copyToken(),this.tokens.copyToken()}if(this.tokens.matches1(t.star)&&this.tokens.copyToken(),!this.tokens.matches1(t.name))throw new Error("Expected identifier for exported function name.");let r=this.tokens.identifierName();if(this.tokens.copyToken(),this.tokens.currentToken().isType)for(this.tokens.removeInitialToken();this.tokens.currentToken().isType;)this.tokens.removeToken();return this.tokens.copyExpectedToken(t.parenL),this.rootTransformer.processBalancedCode(),this.tokens.copyExpectedToken(t.parenR),this.rootTransformer.processPossibleTypeRange(),this.tokens.copyExpectedToken(t.braceL),this.rootTransformer.processBalancedCode(),this.tokens.copyExpectedToken(t.braceR),r}processExportClass(){this.tokens.removeInitialToken(),this.copyDecorators(),this.tokens.matches1(t._abstract)&&this.tokens.removeToken();let r=this.rootTransformer.processNamedClass();this.tokens.appendCode(` exports.${r} = ${r};`)}processExportBindings(){this.tokens.removeInitialToken(),this.tokens.removeToken();let r=Yt(this.tokens),n=[];for(;;){if(this.tokens.matches1(t.braceR)){this.tokens.removeToken();break}let s=Ne(this.tokens);for(;this.tokens.currentIndex()<s.endIndex;)this.tokens.removeToken();if(!(s.isType||!r&&this.shouldElideExportedIdentifier(s.leftName))){let a=s.rightName;a==="default"?this.hadDefaultExport=!0:this.hadNamedExport=!0;let u=s.leftName,h=this.importProcessor.getIdentifierReplacement(u);n.push(`exports.${a} = ${h||u};`)}if(this.tokens.matches1(t.braceR)){this.tokens.removeToken();break}if(this.tokens.matches2(t.comma,t.braceR)){this.tokens.removeToken(),this.tokens.removeToken();break}else if(this.tokens.matches1(t.comma))this.tokens.removeToken();else throw new Error(`Unexpected token: ${JSON.stringify(this.tokens.currentToken())}`)}if(this.tokens.matchesContextual(l._from)){this.tokens.removeToken();let s=this.tokens.stringValue();this.tokens.replaceTokenTrimmingLeftWhitespace(this.importProcessor.claimImportCode(s)),Ve(this.tokens)}else this.tokens.appendCode(n.join(" "));this.tokens.matches1(t.semi)&&this.tokens.removeToken()}processExportStar(){for(this.tokens.removeInitialToken();!this.tokens.matches1(t.string);)this.tokens.removeToken();let r=this.tokens.stringValue();this.tokens.replaceTokenTrimmingLeftWhitespace(this.importProcessor.claimImportCode(r)),Ve(this.tokens),this.tokens.matches1(t.semi)&&this.tokens.removeToken()}shouldElideExportedIdentifier(r){return this.isTypeScriptTransformEnabled&&!this.keepUnusedImports&&!this.declarationInfo.valueDeclarations.has(r)}};var Jt=class extends K{constructor(r,n,s,i,a,u,h,f){super(),this.tokens=r,this.nameManager=n,this.helperManager=s,this.reactHotLoaderTransformer=i,this.isTypeScriptTransformEnabled=a,this.isFlowTransformEnabled=u,this.keepUnusedImports=h,this.nonTypeIdentifiers=a&&!h?kr(r,f):new Set,this.declarationInfo=a&&!h?Gt(r):Wr,this.injectCreateRequireForImportRequire=!!f.injectCreateRequireForImportRequire}process(){if(this.tokens.matches3(t._import,t.name,t.eq))return this.processImportEquals();if(this.tokens.matches4(t._import,t.name,t.name,t.eq)&&this.tokens.matchesContextualAtIndex(this.tokens.currentIndex()+1,l._type)){this.tokens.removeInitialToken();for(let r=0;r<7;r++)this.tokens.removeToken();return!0}if(this.tokens.matches2(t._export,t.eq))return this.tokens.replaceToken("module.exports"),!0;if(this.tokens.matches5(t._export,t._import,t.name,t.name,t.eq)&&this.tokens.matchesContextualAtIndex(this.tokens.currentIndex()+2,l._type)){this.tokens.removeInitialToken();for(let r=0;r<8;r++)this.tokens.removeToken();return!0}if(this.tokens.matches1(t._import))return this.processImport();if(this.tokens.matches2(t._export,t._default))return this.processExportDefault();if(this.tokens.matches2(t._export,t.braceL))return this.processNamedExports();if(this.tokens.matches2(t._export,t.name)&&this.tokens.matchesContextualAtIndex(this.tokens.currentIndex()+1,l._type)){if(this.tokens.removeInitialToken(),this.tokens.removeToken(),this.tokens.matches1(t.braceL)){for(;!this.tokens.matches1(t.braceR);)this.tokens.removeToken();this.tokens.removeToken()}else this.tokens.removeToken(),this.tokens.matches1(t._as)&&(this.tokens.removeToken(),this.tokens.removeToken());return this.tokens.matchesContextual(l._from)&&this.tokens.matches1AtIndex(this.tokens.currentIndex()+1,t.string)&&(this.tokens.removeToken(),this.tokens.removeToken(),Ve(this.tokens)),!0}return!1}processImportEquals(){let r=this.tokens.identifierNameAtIndex(this.tokens.currentIndex()+1);return this.shouldAutomaticallyElideImportedName(r)?Ht(this.tokens):this.injectCreateRequireForImportRequire?(this.tokens.replaceToken("const"),this.tokens.copyToken(),this.tokens.copyToken(),this.tokens.replaceToken(this.helperManager.getHelperName("require"))):this.tokens.replaceToken("const"),!0}processImport(){if(this.tokens.matches2(t._import,t.parenL))return!1;let r=this.tokens.snapshot();if(this.removeImportTypeBindings()){for(this.tokens.restoreToSnapshot(r);!this.tokens.matches1(t.string);)this.tokens.removeToken();this.tokens.removeToken(),Ve(this.tokens),this.tokens.matches1(t.semi)&&this.tokens.removeToken()}return!0}removeImportTypeBindings(){if(this.tokens.copyExpectedToken(t._import),this.tokens.matchesContextual(l._type)&&!this.tokens.matches1AtIndex(this.tokens.currentIndex()+1,t.comma)&&!this.tokens.matchesContextualAtIndex(this.tokens.currentIndex()+1,l._from))return!0;if(this.tokens.matches1(t.string))return this.tokens.copyToken(),!1;this.tokens.matchesContextual(l._module)&&this.tokens.matchesContextualAtIndex(this.tokens.currentIndex()+2,l._from)&&this.tokens.copyToken();let r=!1,n=!1,s=!1;if(this.tokens.matches1(t.name)&&(this.shouldAutomaticallyElideImportedName(this.tokens.identifierName())?(this.tokens.removeToken(),this.tokens.matches1(t.comma)&&this.tokens.removeToken()):(r=!0,this.tokens.copyToken(),this.tokens.matches1(t.comma)&&(s=!0,this.tokens.removeToken()))),this.tokens.matches1(t.star))this.shouldAutomaticallyElideImportedName(this.tokens.identifierNameAtRelativeIndex(2))?(this.tokens.removeToken(),this.tokens.removeToken(),this.tokens.removeToken()):(s&&this.tokens.appendCode(","),r=!0,this.tokens.copyExpectedToken(t.star),this.tokens.copyExpectedToken(t.name),this.tokens.copyExpectedToken(t.name));else if(this.tokens.matches1(t.braceL)){for(s&&this.tokens.appendCode(","),this.tokens.copyToken();!this.tokens.matches1(t.braceR);){n=!0;let i=Ne(this.tokens);if(i.isType||this.shouldAutomaticallyElideImportedName(i.rightName)){for(;this.tokens.currentIndex()<i.endIndex;)this.tokens.removeToken();this.tokens.matches1(t.comma)&&this.tokens.removeToken()}else{for(r=!0;this.tokens.currentIndex()<i.endIndex;)this.tokens.copyToken();this.tokens.matches1(t.comma)&&this.tokens.copyToken()}}this.tokens.copyExpectedToken(t.braceR)}return this.keepUnusedImports?!1:this.isTypeScriptTransformEnabled?!r:this.isFlowTransformEnabled?n&&!r:!1}shouldAutomaticallyElideImportedName(r){return this.isTypeScriptTransformEnabled&&!this.keepUnusedImports&&!this.nonTypeIdentifiers.has(r)}processExportDefault(){if(zt(this.isTypeScriptTransformEnabled,this.keepUnusedImports,this.tokens,this.declarationInfo))return this.tokens.removeInitialToken(),this.tokens.removeToken(),this.tokens.removeToken(),!0;if(!(this.tokens.matches4(t._export,t._default,t._function,t.name)||this.tokens.matches5(t._export,t._default,t.name,t._function,t.name)&&this.tokens.matchesContextualAtIndex(this.tokens.currentIndex()+2,l._async)||this.tokens.matches4(t._export,t._default,t._class,t.name)||this.tokens.matches5(t._export,t._default,t._abstract,t._class,t.name))&&this.reactHotLoaderTransformer){let n=this.nameManager.claimFreeName("_default");return this.tokens.replaceToken(`let ${n}; export`),this.tokens.copyToken(),this.tokens.appendCode(` ${n} =`),this.reactHotLoaderTransformer.setExtractedDefaultExportName(n),!0}return!1}processNamedExports(){if(!this.isTypeScriptTransformEnabled)return!1;this.tokens.copyExpectedToken(t._export),this.tokens.copyExpectedToken(t.braceL);let r=Yt(this.tokens),n=!1;for(;!this.tokens.matches1(t.braceR);){let s=Ne(this.tokens);if(s.isType||!r&&this.shouldElideExportedName(s.leftName)){for(;this.tokens.currentIndex()<s.endIndex;)this.tokens.removeToken();this.tokens.matches1(t.comma)&&this.tokens.removeToken()}else{for(n=!0;this.tokens.currentIndex()<s.endIndex;)this.tokens.copyToken();this.tokens.matches1(t.comma)&&this.tokens.copyToken()}}return this.tokens.copyExpectedToken(t.braceR),!this.keepUnusedImports&&r&&!n&&(this.tokens.removeToken(),this.tokens.removeToken(),Ve(this.tokens)),!0}shouldElideExportedName(r){return this.isTypeScriptTransformEnabled&&!this.keepUnusedImports&&this.declarationInfo.typeDeclarations.has(r)&&!this.declarationInfo.valueDeclarations.has(r)}};var Kt=class extends K{constructor(r,n,s){super(),this.rootTransformer=r,this.tokens=n,this.isImportsTransformEnabled=s}process(){return this.rootTransformer.processPossibleArrowParamEnd()||this.rootTransformer.processPossibleAsyncArrowWithTypeParams()||this.rootTransformer.processPossibleTypeRange()?!0:this.tokens.matches1(t._enum)?(this.processEnum(),!0):this.tokens.matches2(t._export,t._enum)?(this.processNamedExportEnum(),!0):this.tokens.matches3(t._export,t._default,t._enum)?(this.processDefaultExportEnum(),!0):!1}processNamedExportEnum(){if(this.isImportsTransformEnabled){this.tokens.removeInitialToken();let r=this.tokens.identifierNameAtRelativeIndex(1);this.processEnum(),this.tokens.appendCode(` exports.${r} = ${r};`)}else this.tokens.copyToken(),this.processEnum()}processDefaultExportEnum(){this.tokens.removeInitialToken(),this.tokens.removeToken();let r=this.tokens.identifierNameAtRelativeIndex(1);this.processEnum(),this.isImportsTransformEnabled?this.tokens.appendCode(` exports.default = ${r};`):this.tokens.appendCode(` export default ${r};`)}processEnum(){this.tokens.replaceToken("const"),this.tokens.copyExpectedToken(t.name);let r=!1;this.tokens.matchesContextual(l._of)&&(this.tokens.removeToken(),r=this.tokens.matchesContextual(l._symbol),this.tokens.removeToken());let n=this.tokens.matches3(t.braceL,t.name,t.eq);this.tokens.appendCode(' = require("flow-enums-runtime")');let s=!r&&!n;for(this.tokens.replaceTokenTrimmingLeftWhitespace(s?".Mirrored([":"({");!this.tokens.matches1(t.braceR);){if(this.tokens.matches1(t.ellipsis)){this.tokens.removeToken();break}this.processEnumElement(r,n),this.tokens.matches1(t.comma)&&this.tokens.copyToken()}this.tokens.replaceToken(s?"]);":"});")}processEnumElement(r,n){if(r){let s=this.tokens.identifierName();this.tokens.copyToken(),this.tokens.appendCode(`: Symbol("${s}")`)}else n?(this.tokens.copyToken(),this.tokens.replaceTokenTrimmingLeftWhitespace(":"),this.tokens.copyToken()):this.tokens.replaceToken(`"${this.tokens.identifierName()}"`)}};function rf(e){let r,n=e[0],s=1;for(;s<e.length;){let i=e[s],a=e[s+1];if(s+=2,(i==="optionalAccess"||i==="optionalCall")&&n==null)return;i==="access"||i==="optionalAccess"?(r=n,n=a(n)):(i==="call"||i==="optionalCall")&&(n=a((...u)=>n.call(r,...u)),r=void 0)}return n}var Hr="jest",nf=["mock","unmock","enableAutomock","disableAutomock"],Qt=class e extends K{__init(){this.hoistedFunctionNames=[]}constructor(r,n,s,i){super(),this.rootTransformer=r,this.tokens=n,this.nameManager=s,this.importProcessor=i,e.prototype.__init.call(this)}process(){return this.tokens.currentToken().scopeDepth===0&&this.tokens.matches4(t.name,t.dot,t.name,t.parenL)&&this.tokens.identifierName()===Hr?rf([this,"access",r=>r.importProcessor,"optionalAccess",r=>r.getGlobalNames,"call",r=>r(),"optionalAccess",r=>r.has,"call",r=>r(Hr)])?!1:this.extractHoistedCalls():!1}getHoistedCode(){return this.hoistedFunctionNames.length>0?this.hoistedFunctionNames.map(r=>`${r}();`).join(""):""}extractHoistedCalls(){this.tokens.removeToken();let r=!1;for(;this.tokens.matches3(t.dot,t.name,t.parenL);){let n=this.tokens.identifierNameAtIndex(this.tokens.currentIndex()+1);if(nf.includes(n)){let i=this.nameManager.claimFreeName("__jestHoist");this.hoistedFunctionNames.push(i),this.tokens.replaceToken(`function ${i}(){${Hr}.`),this.tokens.copyToken(),this.tokens.copyToken(),this.rootTransformer.processBalancedCode(),this.tokens.copyExpectedToken(t.parenR),this.tokens.appendCode(";}"),r=!1}else r?this.tokens.copyToken():this.tokens.replaceToken(`${Hr}.`),this.tokens.copyToken(),this.tokens.copyToken(),this.rootTransformer.processBalancedCode(),this.tokens.copyExpectedToken(t.parenR),r=!0}return!0}};var Zt=class extends K{constructor(r){super(),this.tokens=r}process(){if(this.tokens.matches1(t.num)){let r=this.tokens.currentTokenCode();if(r.includes("_"))return this.tokens.replaceToken(r.replace(/_/g,"")),!0}return!1}};var er=class extends K{constructor(r,n){super(),this.tokens=r,this.nameManager=n}process(){return this.tokens.matches2(t._catch,t.braceL)?(this.tokens.copyToken(),this.tokens.appendCode(` (${this.nameManager.claimFreeName("e")})`),!0):!1}};var tr=class extends K{constructor(r,n){super(),this.tokens=r,this.nameManager=n}process(){if(this.tokens.matches1(t.nullishCoalescing)){let s=this.tokens.currentToken();return this.tokens.tokens[s.nullishStartIndex].isAsyncOperation?this.tokens.replaceTokenTrimmingLeftWhitespace(", async () => ("):this.tokens.replaceTokenTrimmingLeftWhitespace(", () => ("),!0}if(this.tokens.matches1(t._delete)&&this.tokens.tokenAtRelativeIndex(1).isOptionalChainStart)return this.tokens.removeInitialToken(),!0;let n=this.tokens.currentToken().subscriptStartIndex;if(n!=null&&this.tokens.tokens[n].isOptionalChainStart&&this.tokens.tokenAtRelativeIndex(-1).type!==t._super){let s=this.nameManager.claimFreeName("_"),i;if(n>0&&this.tokens.matches1AtIndex(n-1,t._delete)&&this.isLastSubscriptInChain()?i=`${s} => delete ${s}`:i=`${s} => ${s}`,this.tokens.tokens[n].isAsyncOperation&&(i=`async ${i}`),this.tokens.matches2(t.questionDot,t.parenL)||this.tokens.matches2(t.questionDot,t.lessThan))this.justSkippedSuper()&&this.tokens.appendCode(".bind(this)"),this.tokens.replaceTokenTrimmingLeftWhitespace(`, 'optionalCall', ${i}`);else if(this.tokens.matches2(t.questionDot,t.bracketL))this.tokens.replaceTokenTrimmingLeftWhitespace(`, 'optionalAccess', ${i}`);else if(this.tokens.matches1(t.questionDot))this.tokens.replaceTokenTrimmingLeftWhitespace(`, 'optionalAccess', ${i}.`);else if(this.tokens.matches1(t.dot))this.tokens.replaceTokenTrimmingLeftWhitespace(`, 'access', ${i}.`);else if(this.tokens.matches1(t.bracketL))this.tokens.replaceTokenTrimmingLeftWhitespace(`, 'access', ${i}[`);else if(this.tokens.matches1(t.parenL))this.justSkippedSuper()&&this.tokens.appendCode(".bind(this)"),this.tokens.replaceTokenTrimmingLeftWhitespace(`, 'call', ${i}(`);else throw new Error("Unexpected subscript operator in optional chain.");return!0}return!1}isLastSubscriptInChain(){let r=0;for(let n=this.tokens.currentIndex()+1;;n++){if(n>=this.tokens.tokens.length)throw new Error("Reached the end of the code while finding the end of the access chain.");if(this.tokens.tokens[n].isOptionalChainStart?r++:this.tokens.tokens[n].isOptionalChainEnd&&r--,r<0)return!0;if(r===0&&this.tokens.tokens[n].subscriptStartIndex!=null)return!1}}justSkippedSuper(){let r=0,n=this.tokens.currentIndex()-1;for(;;){if(n<0)throw new Error("Reached the start of the code while finding the start of the access chain.");if(this.tokens.tokens[n].isOptionalChainStart?r--:this.tokens.tokens[n].isOptionalChainEnd&&r++,r<0)return!1;if(r===0&&this.tokens.tokens[n].subscriptStartIndex!=null)return this.tokens.tokens[n-1].type===t._super;n--}}};var rr=class extends K{constructor(r,n,s,i){super(),this.rootTransformer=r,this.tokens=n,this.importProcessor=s,this.options=i}process(){let r=this.tokens.currentIndex();if(this.tokens.identifierName()==="createReactClass"){let n=this.importProcessor&&this.importProcessor.getIdentifierReplacement("createReactClass");return n?this.tokens.replaceToken(`(0, ${n})`):this.tokens.copyToken(),this.tryProcessCreateClassCall(r),!0}if(this.tokens.matches3(t.name,t.dot,t.name)&&this.tokens.identifierName()==="React"&&this.tokens.identifierNameAtIndex(this.tokens.currentIndex()+2)==="createClass"){let n=this.importProcessor&&this.importProcessor.getIdentifierReplacement("React")||"React";return n?(this.tokens.replaceToken(n),this.tokens.copyToken(),this.tokens.copyToken()):(this.tokens.copyToken(),this.tokens.copyToken(),this.tokens.copyToken()),this.tryProcessCreateClassCall(r),!0}return!1}tryProcessCreateClassCall(r){let n=this.findDisplayName(r);n&&this.classNeedsDisplayName()&&(this.tokens.copyExpectedToken(t.parenL),this.tokens.copyExpectedToken(t.braceL),this.tokens.appendCode(`displayName: '${n}',`),this.rootTransformer.processBalancedCode(),this.tokens.copyExpectedToken(t.braceR),this.tokens.copyExpectedToken(t.parenR))}findDisplayName(r){return r<2?null:this.tokens.matches2AtIndex(r-2,t.name,t.eq)?this.tokens.identifierNameAtIndex(r-2):r>=2&&this.tokens.tokens[r-2].identifierRole===E.ObjectKey?this.tokens.identifierNameAtIndex(r-2):this.tokens.matches2AtIndex(r-2,t._export,t._default)?this.getDisplayNameFromFilename():null}getDisplayNameFromFilename(){let n=(this.options.filePath||"unknown").split("/"),s=n[n.length-1],i=s.lastIndexOf("."),a=i===-1?s:s.slice(0,i);return a==="index"&&n[n.length-2]?n[n.length-2]:a}classNeedsDisplayName(){let r=this.tokens.currentIndex();if(!this.tokens.matches2(t.parenL,t.braceL))return!1;let n=r+1,s=this.tokens.tokens[n].contextId;if(s==null)throw new Error("Expected non-null context ID on object open-brace.");for(;r<this.tokens.tokens.length;r++){let i=this.tokens.tokens[r];if(i.type===t.braceR&&i.contextId===s){r++;break}if(this.tokens.identifierNameAtIndex(r)==="displayName"&&this.tokens.tokens[r].identifierRole===E.ObjectKey&&i.contextId===s)return!1}if(r===this.tokens.tokens.length)throw new Error("Unexpected end of input when processing React class.");return this.tokens.matches1AtIndex(r,t.parenR)||this.tokens.matches2AtIndex(r,t.comma,t.parenR)}};var nr=class e extends K{__init(){this.extractedDefaultExportName=null}constructor(r,n){super(),this.tokens=r,this.filePath=n,e.prototype.__init.call(this)}setExtractedDefaultExportName(r){this.extractedDefaultExportName=r}getPrefixCode(){return`
-      (function () {
-        var enterModule = require('react-hot-loader').enterModule;
-        enterModule && enterModule(module);
-      })();`.replace(/\s+/g," ").trim()}getSuffixCode(){let r=new Set;for(let s of this.tokens.tokens)!s.isType&&hr(s)&&s.identifierRole!==E.ImportDeclaration&&r.add(this.tokens.identifierNameForToken(s));let n=Array.from(r).map(s=>({variableName:s,uniqueLocalName:s}));return this.extractedDefaultExportName&&n.push({variableName:this.extractedDefaultExportName,uniqueLocalName:"default"}),`
-;(function () {
-  var reactHotLoader = require('react-hot-loader').default;
-  var leaveModule = require('react-hot-loader').leaveModule;
-  if (!reactHotLoader) {
-    return;
-  }
-${n.map(({variableName:s,uniqueLocalName:i})=>`  reactHotLoader.register(${s}, "${i}", ${JSON.stringify(this.filePath||"")});`).join(`
-`)}
-  leaveModule(module);
-})();`}process(){return!1}};var sf=new Set(["break","case","catch","class","const","continue","debugger","default","delete","do","else","export","extends","finally","for","function","if","import","in","instanceof","new","return","super","switch","this","throw","try","typeof","var","void","while","with","yield","enum","implements","interface","let","package","private","protected","public","static","await","false","null","true"]);function Gr(e){if(e.length===0||!Me[e.charCodeAt(0)])return!1;for(let r=1;r<e.length;r++)if(!ue[e.charCodeAt(r)])return!1;return!sf.has(e)}var sr=class extends K{constructor(r,n,s){super(),this.rootTransformer=r,this.tokens=n,this.isImportsTransformEnabled=s}process(){return this.rootTransformer.processPossibleArrowParamEnd()||this.rootTransformer.processPossibleAsyncArrowWithTypeParams()||this.rootTransformer.processPossibleTypeRange()?!0:this.tokens.matches1(t._public)||this.tokens.matches1(t._protected)||this.tokens.matches1(t._private)||this.tokens.matches1(t._abstract)||this.tokens.matches1(t._readonly)||this.tokens.matches1(t._override)||this.tokens.matches1(t.nonNullAssertion)?(this.tokens.removeInitialToken(),!0):this.tokens.matches1(t._enum)||this.tokens.matches2(t._const,t._enum)?(this.processEnum(),!0):this.tokens.matches2(t._export,t._enum)||this.tokens.matches3(t._export,t._const,t._enum)?(this.processEnum(!0),!0):!1}processEnum(r=!1){for(this.tokens.removeInitialToken();this.tokens.matches1(t._const)||this.tokens.matches1(t._enum);)this.tokens.removeToken();let n=this.tokens.identifierName();this.tokens.removeToken(),r&&!this.isImportsTransformEnabled&&this.tokens.appendCode("export "),this.tokens.appendCode(`var ${n}; (function (${n})`),this.tokens.copyExpectedToken(t.braceL),this.processEnumBody(n),this.tokens.copyExpectedToken(t.braceR),r&&this.isImportsTransformEnabled?this.tokens.appendCode(`)(${n} || (exports.${n} = ${n} = {}));`):this.tokens.appendCode(`)(${n} || (${n} = {}));`)}processEnumBody(r){let n=null;for(;!this.tokens.matches1(t.braceR);){let{nameStringCode:s,variableName:i}=this.extractEnumKeyInfo(this.tokens.currentToken());this.tokens.removeInitialToken(),this.tokens.matches3(t.eq,t.string,t.comma)||this.tokens.matches3(t.eq,t.string,t.braceR)?this.processStringLiteralEnumMember(r,s,i):this.tokens.matches1(t.eq)?this.processExplicitValueEnumMember(r,s,i):this.processImplicitValueEnumMember(r,s,i,n),this.tokens.matches1(t.comma)&&this.tokens.removeToken(),i!=null?n=i:n=`${r}[${s}]`}}extractEnumKeyInfo(r){if(r.type===t.name){let n=this.tokens.identifierNameForToken(r);return{nameStringCode:`"${n}"`,variableName:Gr(n)?n:null}}else if(r.type===t.string){let n=this.tokens.stringValueForToken(r);return{nameStringCode:this.tokens.code.slice(r.start,r.end),variableName:Gr(n)?n:null}}else throw new Error("Expected name or string at beginning of enum element.")}processStringLiteralEnumMember(r,n,s){s!=null?(this.tokens.appendCode(`const ${s}`),this.tokens.copyToken(),this.tokens.copyToken(),this.tokens.appendCode(`; ${r}[${n}] = ${s};`)):(this.tokens.appendCode(`${r}[${n}]`),this.tokens.copyToken(),this.tokens.copyToken(),this.tokens.appendCode(";"))}processExplicitValueEnumMember(r,n,s){let i=this.tokens.currentToken().rhsEndIndex;if(i==null)throw new Error("Expected rhsEndIndex on enum assign.");if(s!=null){for(this.tokens.appendCode(`const ${s}`),this.tokens.copyToken();this.tokens.currentIndex()<i;)this.rootTransformer.processToken();this.tokens.appendCode(`; ${r}[${r}[${n}] = ${s}] = ${n};`)}else{for(this.tokens.appendCode(`${r}[${r}[${n}]`),this.tokens.copyToken();this.tokens.currentIndex()<i;)this.rootTransformer.processToken();this.tokens.appendCode(`] = ${n};`)}}processImplicitValueEnumMember(r,n,s,i){let a=i!=null?`${i} + 1`:"0";s!=null&&(this.tokens.appendCode(`const ${s} = ${a}; `),a=s),this.tokens.appendCode(`${r}[${r}[${n}] = ${a}] = ${n};`)}};var or=class e{__init(){this.transformers=[]}__init2(){this.generatedVariables=[]}constructor(r,n,s,i){e.prototype.__init.call(this),e.prototype.__init2.call(this),this.nameManager=r.nameManager,this.helperManager=r.helperManager;let{tokenProcessor:a,importProcessor:u}=r;this.tokens=a,this.isImportsTransformEnabled=n.includes("imports"),this.isReactHotLoaderTransformEnabled=n.includes("react-hot-loader"),this.disableESTransforms=!!i.disableESTransforms,i.disableESTransforms||(this.transformers.push(new tr(a,this.nameManager)),this.transformers.push(new Zt(a)),this.transformers.push(new er(a,this.nameManager))),n.includes("jsx")&&(i.jsxRuntime!=="preserve"&&this.transformers.push(new At(this,a,u,this.nameManager,i)),this.transformers.push(new rr(this,a,u,i)));let h=null;if(n.includes("react-hot-loader")){if(!i.filePath)throw new Error("filePath is required when using the react-hot-loader transform.");h=new nr(a,i.filePath),this.transformers.push(h)}if(n.includes("imports")){if(u===null)throw new Error("Expected non-null importProcessor with imports transform enabled.");this.transformers.push(new Xt(this,a,u,this.nameManager,this.helperManager,h,s,!!i.enableLegacyTypeScriptModuleInterop,n.includes("typescript"),n.includes("flow"),!!i.preserveDynamicImport,!!i.keepUnusedImports))}else this.transformers.push(new Jt(a,this.nameManager,this.helperManager,h,n.includes("typescript"),n.includes("flow"),!!i.keepUnusedImports,i));n.includes("flow")&&this.transformers.push(new Kt(this,a,n.includes("imports"))),n.includes("typescript")&&this.transformers.push(new sr(this,a,n.includes("imports"))),n.includes("jest")&&this.transformers.push(new Qt(this,a,this.nameManager,u))}transform(){this.tokens.reset(),this.processBalancedCode();let n=this.isImportsTransformEnabled?'"use strict";':"";for(let u of this.transformers)n+=u.getPrefixCode();n+=this.helperManager.emitHelpers(),n+=this.generatedVariables.map(u=>` var ${u};`).join("");for(let u of this.transformers)n+=u.getHoistedCode();let s="";for(let u of this.transformers)s+=u.getSuffixCode();let i=this.tokens.finish(),{code:a}=i;if(a.startsWith("#!")){let u=a.indexOf(`
-`);return u===-1&&(u=a.length,a+=`
-`),{code:a.slice(0,u+1)+n+a.slice(u+1)+s,mappings:this.shiftMappings(i.mappings,n.length)}}else return{code:n+a+s,mappings:this.shiftMappings(i.mappings,n.length)}}processBalancedCode(){let r=0,n=0;for(;!this.tokens.isAtEnd();){if(this.tokens.matches1(t.braceL)||this.tokens.matches1(t.dollarBraceL))r++;else if(this.tokens.matches1(t.braceR)){if(r===0)return;r--}if(this.tokens.matches1(t.parenL))n++;else if(this.tokens.matches1(t.parenR)){if(n===0)return;n--}this.processToken()}}processToken(){if(this.tokens.matches1(t._class)){this.processClass();return}for(let r of this.transformers)if(r.process())return;this.tokens.copyToken()}processNamedClass(){if(!this.tokens.matches2(t._class,t.name))throw new Error("Expected identifier for exported class name.");let r=this.tokens.identifierNameAtIndex(this.tokens.currentIndex()+1);return this.processClass(),r}processClass(){let r=Ao(this,this.tokens,this.nameManager,this.disableESTransforms),n=(r.headerInfo.isExpression||!r.headerInfo.className)&&r.staticInitializerNames.length+r.instanceInitializerNames.length>0,s=r.headerInfo.className;n&&(s=this.nameManager.claimFreeName("_class"),this.generatedVariables.push(s),this.tokens.appendCode(` (${s} =`));let a=this.tokens.currentToken().contextId;if(a==null)throw new Error("Expected class to have a context ID.");for(this.tokens.copyExpectedToken(t._class);!this.tokens.matchesContextIdAndLabel(t.braceL,a);)this.processToken();this.processClassBody(r,s);let u=r.staticInitializerNames.map(h=>`${s}.${h}()`);n?this.tokens.appendCode(`, ${u.map(h=>`${h}, `).join("")}${s})`):r.staticInitializerNames.length>0&&this.tokens.appendCode(` ${u.map(h=>`${h};`).join(" ")}`)}processClassBody(r,n){let{headerInfo:s,constructorInsertPos:i,constructorInitializerStatements:a,fields:u,instanceInitializerNames:h,rangesToRemove:f}=r,m=0,_=0,x=this.tokens.currentToken().contextId;if(x==null)throw new Error("Expected non-null context ID on class.");this.tokens.copyExpectedToken(t.braceL),this.isReactHotLoaderTransformEnabled&&this.tokens.appendCode("__reactstandin__regenerateByEval(key, code) {this[key] = eval(code);}");let b=a.length+h.length>0;if(i===null&&b){let y=this.makeConstructorInitCode(a,h,n);if(s.hasSuperclass){let S=this.nameManager.claimFreeName("args");this.tokens.appendCode(`constructor(...${S}) { super(...${S}); ${y}; }`)}else this.tokens.appendCode(`constructor() { ${y}; }`)}for(;!this.tokens.matchesContextIdAndLabel(t.braceR,x);)if(m<u.length&&this.tokens.currentIndex()===u[m].start){let y=!1;for(this.tokens.matches1(t.bracketL)?this.tokens.copyTokenWithPrefix(`${u[m].initializerName}() {this`):this.tokens.matches1(t.string)||this.tokens.matches1(t.num)?(this.tokens.copyTokenWithPrefix(`${u[m].initializerName}() {this[`),y=!0):this.tokens.copyTokenWithPrefix(`${u[m].initializerName}() {this.`);this.tokens.currentIndex()<u[m].end;)y&&this.tokens.currentIndex()===u[m].equalsIndex&&this.tokens.appendCode("]"),this.processToken();this.tokens.appendCode("}"),m++}else if(_<f.length&&this.tokens.currentIndex()>=f[_].start){for(this.tokens.currentIndex()<f[_].end&&this.tokens.removeInitialToken();this.tokens.currentIndex()<f[_].end;)this.tokens.removeToken();_++}else this.tokens.currentIndex()===i?(this.tokens.copyToken(),b&&this.tokens.appendCode(`;${this.makeConstructorInitCode(a,h,n)};`),this.processToken()):this.processToken();this.tokens.copyExpectedToken(t.braceR)}makeConstructorInitCode(r,n,s){return[...r,...n.map(i=>`${s}.prototype.${i}.call(this)`)].join(";")}processPossibleArrowParamEnd(){if(this.tokens.matches2(t.parenR,t.colon)&&this.tokens.tokenAtRelativeIndex(1).isType){let r=this.tokens.currentIndex()+1;for(;this.tokens.tokens[r].isType;)r++;if(this.tokens.matches1AtIndex(r,t.arrow)){for(this.tokens.removeInitialToken();this.tokens.currentIndex()<r;)this.tokens.removeToken();return this.tokens.replaceTokenTrimmingLeftWhitespace(") =>"),!0}}return!1}processPossibleAsyncArrowWithTypeParams(){if(!this.tokens.matchesContextual(l._async)&&!this.tokens.matches1(t._async))return!1;let r=this.tokens.tokenAtRelativeIndex(1);if(r.type!==t.lessThan||!r.isType)return!1;let n=this.tokens.currentIndex()+1;for(;this.tokens.tokens[n].isType;)n++;if(this.tokens.matches1AtIndex(n,t.parenL)){for(this.tokens.replaceToken("async ("),this.tokens.removeInitialToken();this.tokens.currentIndex()<n;)this.tokens.removeToken();return this.tokens.removeToken(),this.processBalancedCode(),this.processToken(),!0}return!1}processPossibleTypeRange(){if(this.tokens.currentToken().isType){for(this.tokens.removeInitialToken();this.tokens.currentToken().isType;)this.tokens.removeToken();return!0}return!1}shiftMappings(r,n){for(let s=0;s<r.length;s++){let i=r[s];i!==void 0&&(r[s]=i+n)}return r}};var of=ur(_a());function vo(e){let r=new Set;for(let n=0;n<e.tokens.length;n++)e.matches1AtIndex(n,t._import)&&!e.matches3AtIndex(n,t._import,t.name,t.eq)&&af(e,n,r);return r}function af(e,r,n){r++,!e.matches1AtIndex(r,t.parenL)&&(e.matches1AtIndex(r,t.name)&&(n.add(e.identifierNameAtIndex(r)),r++,e.matches1AtIndex(r,t.comma)&&r++),e.matches1AtIndex(r,t.star)&&(r+=2,n.add(e.identifierNameAtIndex(r)),r++),e.matches1AtIndex(r,t.braceL)&&(r++,cf(e,r,n)))}function cf(e,r,n){for(;;){if(e.matches1AtIndex(r,t.braceR))return;let s=Ne(e,r);if(r=s.endIndex,s.isType||n.add(s.rightName),e.matches2AtIndex(r,t.comma,t.braceR))return;if(e.matches1AtIndex(r,t.braceR))return;if(e.matches1AtIndex(r,t.comma))r++;else throw new Error(`Unexpected token: ${JSON.stringify(e.tokens[r])}`)}}function Po(e,r){ji(r);try{let n=lf(e,r),i=new or(n,r.transforms,!!r.enableLegacyBabel5ModuleInterop,r).transform(),a={code:i.code};if(r.sourceMapOptions){if(!r.filePath)throw new Error("filePath must be specified when generating a source map.");a={...a,sourceMap:Ns(i,r.filePath,r.sourceMapOptions,e,n.tokenProcessor.tokens)}}return a}catch(n){throw r.filePath&&(n.message=`Error transforming ${r.filePath}: ${n.message}`),n}}function lf(e,r){let n=r.transforms.includes("jsx"),s=r.transforms.includes("typescript"),i=r.transforms.includes("flow"),a=r.disableESTransforms===!0,u=ga(e,n,s,i),h=u.tokens,f=u.scopes,m=new Ct(e,h),_=new xr(m),x=new Wt(e,h,i,a,_),b=!!r.enableLegacyTypeScriptModuleInterop,y=null;return r.transforms.includes("imports")?(y=new vt(m,x,b,r,r.transforms.includes("typescript"),!!r.keepUnusedImports,_),y.preprocessTokens(),_r(x,f,y.getGlobalNames()),r.transforms.includes("typescript")&&!r.keepUnusedImports&&y.pruneTypeOnlyImports()):r.transforms.includes("typescript")&&!r.keepUnusedImports&&_r(x,f,vo(x)),{tokenProcessor:x,scopes:f,nameManager:m,importProcessor:y,helperManager:_}}function wa(e){return e===void 0?!0:typeof e=="boolean"?e:"allowed"in e?e.allowed:e.allow}function Co(e,r){let n=e??{};if(!r?.env)return{...n};let s={};for(let[i,a]of Object.entries(n))wa(r.env({name:i,value:a}))&&(s[i]=a);return s}function zr(e){let r=new Error(`ENOSYS: ${e} is not supported`);return r.code="ENOSYS",r}function Xr(){return{async fetch(){throw zr("network.fetch")},async dnsLookup(){return{error:"DNS not supported",code:"ENOSYS"}},async httpRequest(){throw zr("network.httpRequest")}}}function Jr(){return{spawn(){throw zr("child_process.spawn")}}}function Ro(e,r){if(!r?.network)return e;let n=s=>{if(!wa(r.network?.(s)))throw new Error(`EACCES: blocked network access to '${s.url??s.host??""}'`)};return{async fetch(s,i){return n({url:s}),e.fetch(s,i)},async dnsLookup(s){return n({host:s}),e.dnsLookup(s)},async httpRequest(s,i){return n({url:s}),e.httpRequest(s,i)}}}function No(e,r){return r?.endsWith(".mjs")?!0:/\b(import|export)\b/.test(e)}var ba={fs:"module.exports = globalThis._fsModule;","node:fs":"module.exports = globalThis._fsModule;"};function se(e,r){globalThis[e]=r}function fe(e,r){globalThis[e]=r}function Ta(e){return e==="overrideProcessCwd"?`
-			if (globalThis.process && globalThis.__runtimeProcessCwdOverride) {
-				globalThis.process.cwd = () => String(globalThis.__runtimeProcessCwdOverride);
-			}
-		`:""}function Sa(){return`
-		(function () {
-			const callSyncBridge = (ref, ...args) => {
-				if (typeof ref === "function") {
-					return ref(...args);
-				}
-				if (ref && typeof ref.applySync === "function") {
-					return ref.applySync(undefined, args);
-				}
-				if (ref && typeof ref.applySyncPromise === "function") {
-					return ref.applySyncPromise(undefined, args);
-				}
-				return undefined;
-			};
-
-			const pathDirname = (value) => {
-				const normalized = String(value || "/").replace(/\\\\/g, "/");
-				if (normalized === "/") return "/";
-				const parts = normalized.split("/").filter(Boolean);
-				return parts.length <= 1 ? "/" : "/" + parts.slice(0, -1).join("/");
-			};
-
-			globalThis.require = function require(specifier) {
-				const polyfillSource = callSyncBridge(
-					globalThis._loadPolyfill,
-					specifier.replace(/^node:/, ""),
-				);
-				if (polyfillSource) {
-					const module = { exports: {} };
-					const fn = new Function("module", "exports", polyfillSource);
-					fn(module, module.exports);
-					return module.exports;
-				}
-
-				const currentModule = globalThis._currentModule || { dirname: "/" };
-				const resolved = callSyncBridge(
-					globalThis._resolveModuleSync,
-					specifier,
-					currentModule.dirname || "/",
-					"require",
-				);
-				if (!resolved) {
-					throw new Error("Cannot resolve module '" + specifier + "'");
-				}
-
-				const cache = globalThis._moduleCache || (globalThis._moduleCache = {});
-				if (cache[resolved]) {
-					return cache[resolved].exports;
-				}
-
-				const source = callSyncBridge(
-					globalThis._loadFileSync,
-					resolved,
-					"require",
-				);
-				if (source == null) {
-					throw new Error("Cannot load module '" + resolved + "'");
-				}
-
-				const module = { exports: {} };
-				cache[resolved] = module;
-				const previous = globalThis._currentModule;
-				globalThis._currentModule = { filename: resolved, dirname: pathDirname(resolved) };
-				try {
-					const fn = new Function(
-						"require",
-						"module",
-						"exports",
-						"__filename",
-						"__dirname",
-						source,
-					);
-					fn(globalThis.require, module, module.exports, resolved, pathDirname(resolved));
-				} finally {
-					globalThis._currentModule = previous;
-				}
-				return module.exports;
-			};
-		})();
-	`}function Ia(){return{async fetch(e,r){let n=await fetch(e,{method:r?.method||"GET",headers:r?.headers,body:r?.body}),s={};n.headers.forEach((h,f)=>{s[f]=h});let i=n.headers.get("content-type")||"",a=i.includes("octet-stream")||i.includes("gzip")||e.endsWith(".tgz"),u;if(a){let h=await n.arrayBuffer();u=btoa(String.fromCharCode(...new Uint8Array(h))),s["x-body-encoding"]="base64"}else u=await n.text();return{ok:n.ok,status:n.status,statusText:n.statusText,headers:s,body:u,url:n.url,redirected:n.redirected}},async dnsLookup(e){return{error:"DNS not supported in browser",code:"ENOSYS"}},async httpRequest(e,r){let n=await fetch(e,{method:r?.method||"GET",headers:r?.headers,body:r?.body}),s={};n.headers.forEach((a,u)=>{s[u]=a});let i=await n.text();return{status:n.status,statusText:n.statusText,headers:s,body:i,url:n.url}}}}var pf=[/\beval\s*\(/,/\bFunction\s*\(/,/\bnew\s+Function\b/,/\bimport\s*\(/,/\bimportScripts\s*\(/,/\brequire\s*\(/,/\bglobalThis\b/,/\bself\b/,/\bwindow\b/,/\bprocess\s*\.\s*(?:exit|kill|binding|_linkedBinding|env)\b/,/\bXMLHttpRequest\b/,/\bWebSocket\b/,/\bfetch\s*\(/,/\bconstructor\s*\[/,/\b__proto__\b/,/Object\s*\.\s*(?:defineProperty|setPrototypeOf|assign)\b/,/\bpostMessage\b/];function Ea(e){if(!e||typeof e!="string")return!1;let r=e.trim();if(!(r.startsWith("function")||r.startsWith("(")||/^[a-zA-Z_$][a-zA-Z0-9_$]*\s*=>/.test(r)))return!1;for(let s of pf)if(s.test(e))return!1;return!0}var ny=4*Int32Array.BYTES_PER_ELEMENT;var sy=16*1024*1024,oy=64*1024;function Aa(){if(typeof SharedArrayBuffer>"u")throw new Error("Browser runtime requires SharedArrayBuffer for sync filesystem and module loading parity");if(typeof Atomics>"u"||typeof Atomics.wait!="function")throw new Error("Browser runtime requires Atomics.wait for sync filesystem and module loading parity")}var Oo=null,Da=null,Zr,jo=!1,nt=null,en="freeze",Ce=null,lr=null,df=new Map,La=8192,Oa=8192,gf=6,Fa=60,Ma=120,Va=16*1024*1024,Wa=4*1024*1024,Ba="ERR_SANDBOX_PAYLOAD_TOO_LARGE",Fo=Va,Kr=Wa,Ha=new TextEncoder,st=new TextDecoder,Vo=eval,Wo=["byteLength","slice","grow","maxByteLength","growable"],oe={captured:!1,sharedArrayBufferPrototypeDescriptors:new Map};function kf(e){return Ha.encode(e).byteLength}function Ho(){if(!nt)throw new Error("Browser runtime worker control channel is not initialized");return nt}function Go(){if(oe.captured)return;oe.captured=!0,oe.dateDescriptor=Object.getOwnPropertyDescriptor(globalThis,"Date"),oe.dateValue=globalThis.Date,oe.performanceDescriptor=Object.getOwnPropertyDescriptor(globalThis,"performance"),oe.performanceValue=globalThis.performance,oe.sharedArrayBufferDescriptor=Object.getOwnPropertyDescriptor(globalThis,"SharedArrayBuffer"),oe.sharedArrayBufferValue=globalThis.SharedArrayBuffer;let e=globalThis.SharedArrayBuffer;if(typeof e!="function")return;let r=e.prototype;for(let n of Wo)oe.sharedArrayBufferPrototypeDescriptors.set(n,Object.getOwnPropertyDescriptor(r,n))}function Mo(e,r){if(r)try{Object.defineProperty(globalThis,e,r);return}catch{if("value"in r){globalThis[e]=r.value;return}}Reflect.deleteProperty(globalThis,e)}function yf(){let e=oe.sharedArrayBufferValue;if(typeof e!="function")return;let r=e.prototype;for(let n of Wo){let s=oe.sharedArrayBufferPrototypeDescriptors.get(n);try{s?Object.defineProperty(r,n,s):delete r[n]}catch{}}}function xf(){Go(),Mo("Date",oe.dateDescriptor),Mo("performance",oe.performanceDescriptor),yf(),Mo("SharedArrayBuffer",oe.sharedArrayBufferDescriptor),(typeof globalThis.performance>"u"||globalThis.performance===null)&&Object.defineProperty(globalThis,"performance",{value:{now:()=>Date.now()},configurable:!0,writable:!0})}function _f(e,r){if(Go(),xf(),e!=="freeze")return;let n=typeof r=="number"&&Number.isFinite(r)?Math.trunc(r):Date.now(),s=oe.dateValue??oe.dateDescriptor?.value??Date,i=()=>n,a=function(...m){return new.target?m.length===0?new s(n):new s(...m):s()};Object.defineProperty(a,"prototype",{value:s.prototype,writable:!1,configurable:!1}),Object.defineProperty(a,"now",{value:i,configurable:!0,writable:!1}),a.parse=s.parse,a.UTC=s.UTC;try{Object.defineProperty(globalThis,"Date",{value:a,configurable:!0,writable:!1})}catch{globalThis.Date=a}let u=Object.create(null),h=oe.performanceValue;if(typeof h<"u"&&h!==null){let m=h;for(let _ of Object.getOwnPropertyNames(Object.getPrototypeOf(h)??h))if(_!=="now")try{let x=m[_];u[_]=typeof x=="function"?x.bind(h):x}catch{}}Object.defineProperty(u,"now",{value:()=>0,configurable:!0,writable:!1}),Object.freeze(u);try{Object.defineProperty(globalThis,"performance",{value:u,configurable:!0,writable:!1})}catch{globalThis.performance=u}let f=oe.sharedArrayBufferValue;if(typeof f=="function"){let m=f.prototype;for(let _ of Wo)try{Object.defineProperty(m,_,{get(){throw new TypeError("SharedArrayBuffer is not available in sandbox")},configurable:!0})}catch{}}try{Object.defineProperty(globalThis,"SharedArrayBuffer",{value:void 0,configurable:!0,writable:!1,enumerable:!1})}catch{Reflect.deleteProperty(globalThis,"SharedArrayBuffer")}return n}function qo(e,r,n){if(r<=n)return;let s=new Error(`[${Ba}] ${e}: payload is ${r} bytes, limit is ${n} bytes`);throw s.code=Ba,s}function Bo(e,r,n){qo(e,kf(r),n)}function wf(e){return e.length<=La?e:`${e.slice(0,La)}...[Truncated]`}function bf(e){return e.length<=Oa?e:`${e.slice(0,Oa)}...[Truncated]`}function Qr(e){if(e&&Ea(e))try{let r=new Function(`return (${e});`)();return typeof r=="function"?r:void 0}catch{return}}function Tf(e){if(!e)return;let r={};return r.fs=Qr(e.fs),r.network=Qr(e.network),r.childProcess=Qr(e.childProcess),r.env=Qr(e.env),r}function he(e){let r=(n,s)=>e(...s);return{applySync:r,applySyncPromise:r}}function Sf(e){return{applySyncPromise(r,n){return e(...n)}}}function ja(e){return{apply(r,n){return e(...n)}}}function If(e){if(typeof e=="string")return e;if(e&&typeof e=="object"&&"encoding"in e){let r=e.encoding;return typeof r=="string"?r:null}return null}function Ef(e){return e instanceof Uint8Array?e:ArrayBuffer.isView(e)?new Uint8Array(e.buffer,e.byteOffset,e.byteLength):e instanceof ArrayBuffer?new Uint8Array(e):new TextEncoder().encode(String(e))}function Af(e){return typeof Buffer=="function"?Buffer.from(e):e}function qa(e){return{...e,isFile:()=>!e.isDirectory&&!e.isSymbolicLink,isDirectory:()=>e.isDirectory,isSymbolicLink:()=>e.isSymbolicLink}}function vf(e){return{name:e.name,isFile:()=>!e.isDirectory&&!e.isSymbolicLink,isDirectory:()=>e.isDirectory,isSymbolicLink:()=>!!e.isSymbolicLink}}function Pf(e){let r=(f,m)=>If(m)?e.requestText("fs.readFile",[f]):Af(e.requestBinary("fs.readFileBinary",[f])),n=(f,m)=>{if(typeof m=="string"){e.requestVoid("fs.writeFile",[f,m]);return}e.requestVoid("fs.writeFileBinary",[f,Ef(m)])},s=(f,m)=>{if(typeof m=="boolean"?m:m?.recursive??!0){e.requestVoid("fs.mkdir",[f]);return}e.requestVoid("fs.createDir",[f])},i=(f,m)=>{let _=e.requestJson("fs.readDir",[f]);return m?.withFileTypes?_.map(x=>vf(x)):_.map(x=>x.name)},a=f=>qa(e.requestJson("fs.stat",[f])),u=f=>qa(e.requestJson("fs.lstat",[f]));return{readFileSync:r,writeFileSync:n,mkdirSync:s,readdirSync:i,existsSync(f){return e.requestJson("fs.exists",[f])},statSync:a,lstatSync:u,unlinkSync(f){e.requestVoid("fs.unlink",[f])},rmdirSync(f){e.requestVoid("fs.rmdir",[f])},rmSync(f){e.requestVoid("fs.unlink",[f])},renameSync(f,m){e.requestVoid("fs.rename",[f,m])},realpathSync(f){return e.requestText("fs.realpath",[f])},readlinkSync(f){return e.requestText("fs.readlink",[f])},symlinkSync(f,m){e.requestVoid("fs.symlink",[f,m])},linkSync(f,m){e.requestVoid("fs.link",[f,m])},chmodSync(f,m){e.requestVoid("fs.chmod",[f,m])},truncateSync(f,m=0){e.requestVoid("fs.truncate",[f,m])},promises:{readFile(f,m){return Promise.resolve(r(f,m))},writeFile(f,m){return n(f,m),Promise.resolve()},mkdir(f,m){return s(f,m),Promise.resolve()},readdir(f,m){return Promise.resolve(i(f,m))},stat(f){return Promise.resolve(a(f))},lstat(f){return Promise.resolve(u(f))},unlink(f){return e.requestVoid("fs.unlink",[f]),Promise.resolve()},rmdir(f){return e.requestVoid("fs.rmdir",[f]),Promise.resolve()},rm(f){return e.requestVoid("fs.unlink",[f]),Promise.resolve()},rename(f,m){return e.requestVoid("fs.rename",[f,m]),Promise.resolve()},realpath(f){return Promise.resolve(e.requestText("fs.realpath",[f]))},readlink(f){return Promise.resolve(e.requestText("fs.readlink",[f]))},symlink(f,m){return e.requestVoid("fs.symlink",[f,m]),Promise.resolve()},link(f,m){return e.requestVoid("fs.link",[f,m]),Promise.resolve()},chmod(f,m){return e.requestVoid("fs.chmod",[f,m]),Promise.resolve()},truncate(f,m=0){return e.requestVoid("fs.truncate",[f,m]),Promise.resolve()}}}}var Yo=self.postMessage.bind(self);function ar(e){Yo({controlToken:Ho(),...e})}function Cf(e){Yo({controlToken:Ho(),...e})}function Rf(e,r,n){let s={controlToken:Ho(),type:"stdio",requestId:e,channel:r,message:n};Yo(s)}function $o(e,r=new WeakSet,n=0){if(e===null)return"null";if(e===void 0)return"undefined";if(typeof e=="string")return e;if(typeof e=="number"||typeof e=="boolean")return String(e);if(typeof e=="bigint")return`${e.toString()}n`;if(typeof e=="symbol")return e.toString();if(typeof e=="function")return`[Function ${e.name||"anonymous"}]`;if(typeof e!="object")return String(e);if(r.has(e))return"[Circular]";if(n>=gf)return"[MaxDepth]";r.add(e);try{if(Array.isArray(e)){let i=e.slice(0,Ma).map(a=>$o(a,r,n+1));return e.length>Ma&&i.push('"[Truncated]"'),`[${i.join(", ")}]`}let s=[];for(let i of Object.keys(e).slice(0,Fa))s.push(`${i}: ${$o(e[i],r,n+1)}`);return Object.keys(e).length>Fa&&s.push('"[Truncated]"'),`{ ${s.join(", ")} }`}catch{return"[Unserializable]"}finally{r.delete(e)}}function cr(e,r,n){let s=bf(n.map(i=>$o(i)).join(" "));Rf(e,r,s)}function Nf(e){let r=new Int32Array(e.signalBuffer),n=new Uint8Array(e.dataBuffer),s=1,i=e.timeoutMs??3e4;function a(h){return h<=0?new Uint8Array(0):n.slice(0,h)}function u(h,f){for(Atomics.store(r,0,0),Atomics.store(r,1,0),Atomics.store(r,2,0),Atomics.store(r,3,0),Cf({type:"sync-request",requestId:s++,operation:h,args:f});Atomics.wait(r,0,0,i)==="timed-out";)throw new Error(`Browser runtime sync bridge timed out while handling ${h}`);let m=Atomics.load(r,1),_=Atomics.load(r,2),x=Atomics.load(r,3),b=a(x);if(Atomics.store(r,0,0),m===1){let y=JSON.parse(st.decode(b)),S=new Error(y.message);throw y.code&&(S.code=y.code),S}return{kind:_,bytes:b}}return{requestVoid(h,f){u(h,f)},requestText(h,f){let m=u(h,f);if(m.kind!==1)throw new Error(`Expected text response from ${h}, received kind ${m.kind}`);return st.decode(m.bytes)},requestNullableText(h,f){let m=u(h,f);if(m.kind===0)return null;if(m.kind!==1)throw new Error(`Expected text response from ${h}, received kind ${m.kind}`);return st.decode(m.bytes)},requestBinary(h,f){let m=u(h,f);if(m.kind!==2)throw new Error(`Expected binary response from ${h}, received kind ${m.kind}`);return m.bytes},requestJson(h,f){let m=u(h,f);if(m.kind!==3)throw new Error(`Expected JSON response from ${h}, received kind ${m.kind}`);return JSON.parse(st.decode(m.bytes))}}}async function Df(e){if(jo)return;if(Aa(),Go(),!e.syncBridge)throw new Error("Browser runtime sync bridge is required for filesystem and module loading parity");Zr=Tf(e.permissions);let r=Nf(e.syncBridge);Fo=e.payloadLimits?.base64TransferBytes??Va,Kr=e.payloadLimits?.jsonPayloadBytes??Wa,e.networkEnabled?Oo=Ro(Ia(),Zr):Oo=Xr(),Da=Jr();let n=e.processConfig??{};Ce=n,en=e.timingMitigation??n.timingMitigation??en,n.env=Co(n.env,Zr),n.timingMitigation=en,delete n.frozenTimeMs,se("_processConfig",n),se("_osConfig",e.osConfig??{});let s=he(A=>{let R=r.requestText("fs.readFile",[A]);return Bo(`fs.readFile ${A}`,R,Kr),R}),i=he((A,R)=>{Bo(`fs.writeFile ${A}`,R,Kr),r.requestVoid("fs.writeFile",[A,R])}),a=he(A=>{let R=r.requestBinary("fs.readFileBinary",[A]);return qo(`fs.readFileBinary ${A}`,R.byteLength,Fo),R}),u=he((A,R)=>{qo(`fs.writeFileBinary ${A}`,R.byteLength,Fo),r.requestVoid("fs.writeFileBinary",[A,R])}),h=he(A=>{let R=JSON.stringify(r.requestJson("fs.readDir",[A]));return Bo(`fs.readDir ${A}`,R,Kr),R}),f=he(A=>{r.requestVoid("fs.mkdir",[A])}),m=he(A=>{r.requestVoid("fs.rmdir",[A])}),_=he(A=>r.requestJson("fs.exists",[A])),x=he(A=>JSON.stringify(r.requestJson("fs.stat",[A]))),b=he(A=>{r.requestVoid("fs.unlink",[A])}),y=he((A,R)=>{r.requestVoid("fs.rename",[A,R])});se("_fs",{readFile:s,writeFile:i,readFileBinary:a,writeFileBinary:u,readDir:h,mkdir:f,rmdir:m,exists:_,stat:x,unlink:b,rename:y}),se("_loadPolyfill",A=>{let R=A.replace(/^node:/,"");return ba[R]??null});let S=(A,R,X)=>r.requestNullableText("module.resolve",[A,R,X??"require"]),q=(A,R)=>{let X=r.requestNullableText("module.loadFile",[A]);if(X===null)return null;let ae=X;return No(X,A)&&(ae=Po(ae,{transforms:["imports"]}).code),ae};se("_resolveModuleSync",S),se("_loadFileSync",q),se("_resolveModule",S),se("_loadFile",q),se("_scheduleTimer",{apply(A,R){return new Promise(X=>{setTimeout(X,R[0])})}});let T=Oo??Xr();se("_networkFetchRaw",ja(async(A,R)=>{let X=JSON.parse(R),ae=await T.fetch(A,X);return JSON.stringify(ae)})),se("_networkDnsLookupRaw",ja(async A=>{let R=await T.dnsLookup(A);return JSON.stringify(R)}));let L=Da??Jr(),F=1,V=new Map,W=()=>globalThis._childProcessDispatch;se("_childProcessSpawnStart",he((A,R,X)=>{let ae=JSON.parse(R),be=JSON.parse(X),ce=F++,Te=L.spawn(A,ae,{cwd:be.cwd,env:be.env,onStdout:ye=>{W()?.(ce,"stdout",ye)},onStderr:ye=>{W()?.(ce,"stderr",ye)}});return Te.wait().then(ye=>{W()?.(ce,"exit",ye),V.delete(ce)}),V.set(ce,Te),ce})),se("_childProcessStdinWrite",he((A,R)=>{V.get(A)?.writeStdin(R)})),se("_childProcessStdinClose",he(A=>{V.get(A)?.closeStdin()})),se("_childProcessKill",he((A,R)=>{V.get(A)?.kill(R)})),se("_childProcessSpawnSync",Sf(async(A,R,X)=>{let ae=JSON.parse(R),be=JSON.parse(X),ce=[],Te=[],We=await L.spawn(A,ae,{cwd:be.cwd,env:be.env,onStdout:me=>ce.push(me),onStderr:me=>Te.push(me)}).wait(),Oe=new TextDecoder,He=ce.map(me=>Oe.decode(me)).join(""),Ge=Te.map(me=>Oe.decode(me)).join("");return JSON.stringify({stdout:He,stderr:Ge,code:We})})),se("_fsModule",Pf(r)),fe("_moduleCache",{}),fe("_pendingModules",{}),fe("_currentModule",{dirname:"/"}),Vo(Sa()),Bf();let Y=["XMLHttpRequest","WebSocket","importScripts","indexedDB","caches","BroadcastChannel"];for(let A of Y){try{delete self[A]}catch{}Object.defineProperty(self,A,{get(){throw new ReferenceError(`${A} is not available in sandbox`)},configurable:!1})}let re=self.onmessage;Object.defineProperty(self,"onmessage",{value:re,writable:!1,configurable:!1}),Object.defineProperty(self,"postMessage",{get(){throw new TypeError("postMessage is not available in sandbox")},configurable:!1}),jo=!0}function Lf(e){fe("_moduleCache",{}),fe("_pendingModules",{}),fe("_currentModule",{dirname:e})}function Of(){fe("__dynamicImport",e=>{let r=df.get(e);if(r)return Promise.resolve(r);try{let n=globalThis.require;if(typeof n!="function")throw new Error("require is not available in browser runtime");let s=n(e);return Promise.resolve({default:s,...s})}catch(n){return Promise.reject(new Error(`Cannot dynamically import '${e}': ${String(n)}`))}})}function $a(e,r){return r?e:Ha.encode(e)}function Ff(e){return typeof e=="string"?e:e instanceof Uint8Array?st.decode(e):ArrayBuffer.isView(e)?st.decode(new Uint8Array(e.buffer,e.byteOffset,e.byteLength)):e instanceof ArrayBuffer?st.decode(new Uint8Array(e)):String(e)}function Ua(e,r){return lr===null||cr(lr,e,[Ff(r)]),!0}function Mf(){let e="/",r="",n=0,s=!1,i=!1,a=Object.create(null),u=Object.create(null),h=(y,S)=>{let q=[...a[y]??[],...u[y]??[]];u[y]=[];for(let T of q)T(S);return q.length>0},f=()=>{for(let y of Object.keys(a))a[y]=[];for(let y of Object.keys(u))u[y]=[]},m=()=>{if(i=!1,!(x.paused||s)){if(n<r.length){let y=r.slice(n);n=r.length,h("data",$a(y,x.encoding))}s||(s=!0,h("end"),h("close"))}},_=()=>{i||(i=!0,queueMicrotask(m))},x={readable:!0,paused:!0,encoding:null,isRaw:!1,read(y){if(n>=r.length)return null;let S=y?r.slice(n,n+y):r.slice(n);return n+=S.length,$a(S,x.encoding)},on(y,S){return a[y]||(a[y]=[]),a[y].push(S),y==="data"&&x.paused&&x.resume(),x},once(y,S){return u[y]||(u[y]=[]),u[y].push(S),y==="data"&&x.paused&&x.resume(),x},off(y,S){return a[y]&&(a[y]=a[y].filter(q=>q!==S)),x},removeListener(y,S){return x.off(y,S)},emit(y,S){return h(y,S)},pause(){return x.paused=!0,x},resume(){return x.paused=!1,_(),x},setEncoding(y){return x.encoding=y,x},setRawMode(y){return x.isRaw=y,x},get isTTY(){return!1},async*[Symbol.asyncIterator](){let y=r.slice(n);for(let S of y.split(`
-`))S.length>0&&(yield S)}},b={browser:!0,env:{},argv:["node"],argv0:"node",pid:1,ppid:0,platform:"browser",version:"v22.0.0",versions:{node:"22.0.0"},stdin:x,stdout:{isTTY:!1,write(y){return Ua("stdout",y)}},stderr:{isTTY:!1,write(y){return Ua("stderr",y)}},exitCode:0,cwd:()=>e,chdir:y=>{e=String(y)},nextTick:(y,...S)=>{queueMicrotask(()=>y(...S))},exit(y){let S=typeof y=="number"?y:b.exitCode??0;throw b.exitCode=S,new Error(`process.exit(${S})`)},on(){return b},once(){return b},off(){return b},removeListener(){return b},emit(){return!1},__secureExecRefreshProcess(y){f(),r=typeof y?.stdin=="string"?y.stdin:"",n=0,s=!1,i=!1,x.paused=!0,x.encoding=null,x.isRaw=!1,b.exitCode=0,b.env=y?.env&&typeof y.env=="object"?{...y.env}:{},typeof y?.cwd=="string"&&(e=y.cwd),b.argv=Array.isArray(y?.argv)?y.argv.map(S=>String(S)):["node"],b.argv0=b.argv[0]??"node",typeof y?.platform=="string"&&(b.platform=y.platform),typeof y?.version=="string"&&(b.version=y.version,b.versions.node=y.version.replace(/^v/,"")),typeof y?.pid=="number"&&(b.pid=y.pid),typeof y?.ppid=="number"&&(b.ppid=y.ppid)}};return b}function zo(){let e=globalThis.process;if(!(!e||typeof e!="object"))return e}function Uo(){let r=zo()?.__secureExecRefreshProcess;typeof r=="function"&&r(Ce)}function Bf(){if(zo()){Uo();return}fe("process",Mf()),Uo()}function jf(e,r){let n=console;if(!r){let i={log:()=>{},info:()=>{},warn:()=>{},error:()=>{}};return globalThis.console=i,{restore:()=>{globalThis.console=n}}}let s={log:(...i)=>cr(e,"stdout",i),info:(...i)=>cr(e,"stdout",i),warn:(...i)=>cr(e,"stderr",i),error:(...i)=>cr(e,"stderr",i)};return globalThis.console=s,{restore:()=>{globalThis.console=n}}}function qf(e,r,n){if(Ce&&(Ce.timingMitigation=r,n===void 0?delete Ce.frozenTimeMs:Ce.frozenTimeMs=n,Ce.stdin=e?.stdin??"",e?.env)){let i=Co(e.env,Zr),a=Ce.env&&typeof Ce.env=="object"?Ce.env:{};Ce.env={...a,...i}}Uo();let s=zo();if(s&&(s.exitCode=0,s.timingMitigation=r,n===void 0?delete s.frozenTimeMs:s.frozenTimeMs=n,e?.cwd&&typeof s.chdir=="function")){fe("__runtimeProcessCwdOverride",e.cwd),Vo(Ta("overrideProcessCwd"));try{s.chdir(e.cwd)}catch(i){if(!(i instanceof Error&&i.message.includes("process.chdir() is not supported in workers")))throw i}}}async function Ga(e,r,n,s=!1){Lf(n?.cwd??"/");let i=n?.timingMitigation??en,a=_f(i);qf(n,i,a),Of();let u=lr;lr=s?e:null;let{restore:h}=jf(e,s);try{let f=r;No(r,n?.filePath)&&(f=Po(f,{transforms:["imports"]}).code),f=f,fe("module",{exports:{}});let m=globalThis.module;if(fe("exports",m.exports),n?.filePath){let y=n.filePath.includes("/")&&n.filePath.substring(0,n.filePath.lastIndexOf("/"))||"/";fe("__filename",n.filePath),fe("__dirname",y),fe("_currentModule",{dirname:y,filename:n.filePath})}let _=Vo(f);_&&typeof _=="object"&&typeof _.then=="function"&&await _,await Promise.resolve();let x=globalThis._waitForActiveHandles;return typeof x=="function"&&await x(),{code:globalThis.process?.exitCode??0}}catch(f){let m=f instanceof Error?f.message:String(f),_=m.match(/process\.exit\((\d+)\)/);return _?{code:Number.parseInt(_[1],10)}:{code:1,errorMessage:wf(m)}}finally{lr=u,h()}}async function $f(e,r,n,s=!1){let i=await Ga(e,r,{filePath:n},s),a=globalThis.module;return{...i,exports:a?.exports}}self.onmessage=async e=>{let r=e.data;try{if(r.type==="init"){if(typeof r.controlToken!="string"||r.controlToken.length===0||nt&&r.controlToken!==nt)return;nt=r.controlToken,await Df(r.payload),ar({type:"response",id:r.id,ok:!0,result:!0});return}if(!nt||r.controlToken!==nt)return;if(!jo)throw new Error("Sandbox worker not initialized");if(r.type==="exec"){let n=await Ga(r.id,r.payload.code,r.payload.options,r.payload.captureStdio);ar({type:"response",id:r.id,ok:!0,result:n});return}if(r.type==="run"){let n=await $f(r.id,r.payload.code,r.payload.filePath,r.payload.captureStdio);ar({type:"response",id:r.id,ok:!0,result:n});return}if(r.type==="extension"){let n=new Error(`Browser worker extension dispatch is not implemented for namespace ${r.payload.namespace}`);throw n.code="ERR_SECURE_EXEC_BROWSER_EXTENSION_UNSUPPORTED",n}r.type==="dispose"&&(ar({type:"response",id:r.id,ok:!0,result:!0}),close())}catch(n){let s=n;ar({type:"response",id:r.id,ok:!1,error:{message:s?.message??String(n),stack:s?.stack,code:s?.code}})}};
diff --git a/packages/playground/vendor/monaco b/packages/playground/vendor/monaco
deleted file mode 120000
index 3221fdfa7..000000000
--- a/packages/playground/vendor/monaco
+++ /dev/null
@@ -1 +0,0 @@
-../node_modules/monaco-editor/min
\ No newline at end of file
diff --git a/packages/playground/vendor/typescript.js b/packages/playground/vendor/typescript.js
deleted file mode 120000
index 1a68cf3e8..000000000
--- a/packages/playground/vendor/typescript.js
+++ /dev/null
@@ -1 +0,0 @@
-../node_modules/typescript/lib/typescript.js
\ No newline at end of file
diff --git a/packages/sandbox/README.md b/packages/sandbox/README.md
new file mode 100644
index 000000000..b875b7d94
--- /dev/null
+++ b/packages/sandbox/README.md
@@ -0,0 +1,3 @@
+# @secure-exec/sandbox
+
+Compatibility shim for `@rivet-dev/agentos-sandbox`.
diff --git a/registry/tool/sandbox/package.json b/packages/sandbox/package.json
similarity index 54%
rename from registry/tool/sandbox/package.json
rename to packages/sandbox/package.json
index 68122fc77..9a5fb0c01 100644
--- a/registry/tool/sandbox/package.json
+++ b/packages/sandbox/package.json
@@ -3,10 +3,12 @@
 	"version": "0.0.1",
 	"type": "module",
 	"license": "Apache-2.0",
+	"description": "@secure-exec/sandbox compatibility shim for @rivet-dev/agentos-sandbox.",
 	"main": "./dist/index.js",
 	"types": "./dist/index.d.ts",
 	"files": [
-		"dist"
+		"dist",
+		"README.md"
 	],
 	"exports": {
 		".": {
@@ -14,24 +16,16 @@
 			"import": "./dist/index.js",
 			"default": "./dist/index.js"
 		},
-		"./mount": {
-			"types": "./dist/mount.d.ts",
-			"import": "./dist/mount.js",
-			"default": "./dist/mount.js"
-		}
+		"./package.json": "./package.json"
 	},
 	"scripts": {
-		"check-types": "tsc --noEmit",
 		"build": "tsc",
-		"test": "vitest run"
+		"check-types": "tsc --noEmit"
 	},
 	"dependencies": {
-		"@secure-exec/core": "workspace:*",
-		"sandbox-agent": "^0.4.2"
+		"@rivet-dev/agentos-sandbox": "link:../../../agentos/packages/agentos-sandbox"
 	},
 	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"typescript": "^5.7.2",
-		"vitest": "^2.1.8"
+		"typescript": "^5.9.2"
 	}
 }
diff --git a/packages/sandbox/src/index.ts b/packages/sandbox/src/index.ts
new file mode 100644
index 000000000..d689d6c86
--- /dev/null
+++ b/packages/sandbox/src/index.ts
@@ -0,0 +1 @@
+export * from "@rivet-dev/agentos-sandbox";
diff --git a/packages/sandbox/tsconfig.json b/packages/sandbox/tsconfig.json
new file mode 100644
index 000000000..0eb722e69
--- /dev/null
+++ b/packages/sandbox/tsconfig.json
@@ -0,0 +1,10 @@
+{
+	"extends": "../../tsconfig.base.json",
+	"compilerOptions": {
+		"outDir": "dist",
+		"rootDir": "src"
+	},
+	"include": [
+		"src/**/*.ts"
+	]
+}
diff --git a/packages/secure-exec/README.md b/packages/secure-exec/README.md
index 54c0e94af..d281a152c 100644
--- a/packages/secure-exec/README.md
+++ b/packages/secure-exec/README.md
@@ -1,31 +1,3 @@
 # secure-exec
 
-The public SDK for secure-exec, a fully virtualized runtime for executing
-untrusted JavaScript inside a kernel isolation boundary.
-
-This package re-exports the curated public surface. For low-level and advanced
-APIs, use `@secure-exec/core`.
-
-## Install
-
-```sh
-npm install secure-exec
-```
-
-## Usage
-
-```ts
-import { NodeRuntime } from "secure-exec";
-
-const rt = await NodeRuntime.create();
-const { stdout, exitCode } = await rt.exec("console.log('hi', 1 + 1)");
-console.log(stdout, exitCode);
-await rt.dispose();
-```
-
-Guest code runs inside a virtualized VM with no network access by default.
-Opt into the network by passing a permission policy:
-
-```ts
-const rt = await NodeRuntime.create({ permissions: { network: "allow" } });
-```
+Compatibility shim for `@rivet-dev/agentos-runtime-core`.
diff --git a/packages/secure-exec/package.json b/packages/secure-exec/package.json
index 402c66cc9..3f3fd8449 100644
--- a/packages/secure-exec/package.json
+++ b/packages/secure-exec/package.json
@@ -3,6 +3,7 @@
 	"version": "0.0.1",
 	"type": "module",
 	"license": "Apache-2.0",
+	"description": "secure-exec compatibility shim for @rivet-dev/agentos-runtime-core.",
 	"main": "./dist/index.js",
 	"types": "./dist/index.d.ts",
 	"files": [
@@ -14,17 +15,17 @@
 			"types": "./dist/index.d.ts",
 			"import": "./dist/index.js",
 			"default": "./dist/index.js"
-		}
+		},
+		"./package.json": "./package.json"
 	},
 	"scripts": {
 		"build": "tsc",
 		"check-types": "tsc --noEmit"
 	},
 	"dependencies": {
-		"@secure-exec/core": "workspace:*"
+		"@rivet-dev/agentos-runtime-core": "link:../../../agentos/packages/runtime-core"
 	},
 	"devDependencies": {
-		"@types/node": "^22.10.2",
-		"typescript": "^5.7.2"
+		"typescript": "^5.9.2"
 	}
 }
diff --git a/packages/secure-exec/src/index.ts b/packages/secure-exec/src/index.ts
index 956310c15..b8695c301 100644
--- a/packages/secure-exec/src/index.ts
+++ b/packages/secure-exec/src/index.ts
@@ -1,24 +1 @@
-export type {
-	HostDirectoryMount,
-	BindingDefinition,
-	HostToolExample,
-	SidecarSpawnOptions,
-	NodeRuntimeBootTiming,
-	NodeRuntimeBootTimingPhase,
-	NodeRuntimeCreateOptions,
-	NodeRuntimeExecOptions,
-	NodeRuntimeExecResult,
-	NodeRuntimeFetchInput,
-	NodeRuntimeFetchResponse,
-	NodeModulesMount,
-	NodeRuntimeListener,
-	NodeRuntimeListenerQuery,
-	NodeRuntimeProcess,
-	NodeRuntimeResidentRunner,
-	NodeRuntimeResidentRunnerExecOptions,
-	NodeRuntimeResidentRunnerOptions,
-	NodeRuntimeRunResult,
-	NodeRuntimeSpawnOptions,
-	NodeRuntimeWaitForListenerOptions,
-} from "@secure-exec/core";
-export { SidecarProcess as Sidecar, NodeRuntime } from "@secure-exec/core";
+export * from "@rivet-dev/agentos-runtime-core";
diff --git a/packages/secure-exec/tsconfig.json b/packages/secure-exec/tsconfig.json
index 89d02911d..0eb722e69 100644
--- a/packages/secure-exec/tsconfig.json
+++ b/packages/secure-exec/tsconfig.json
@@ -1,9 +1,10 @@
 {
 	"extends": "../../tsconfig.base.json",
 	"compilerOptions": {
-		"outDir": "./dist",
-		"rootDir": "./src",
-		"declaration": true
+		"outDir": "dist",
+		"rootDir": "src"
 	},
-	"include": ["src"]
+	"include": [
+		"src/**/*.ts"
+	]
 }
diff --git a/packages/sidecar/README.md b/packages/sidecar/README.md
index 4526dfb2e..ff0d107b9 100644
--- a/packages/sidecar/README.md
+++ b/packages/sidecar/README.md
@@ -1,19 +1,3 @@
 # @secure-exec/sidecar
 
-Platform-specific resolver for the Secure Exec native sidecar binary.
-
-The compiled `secure-exec-sidecar` binary ships inside one of the
-`@secure-exec/sidecar-<platform>` packages. npm installs only the package
-matching the current `os`/`cpu`/`libc` at install time.
-
-```js
-const { getSidecarPath } = require("@secure-exec/sidecar");
-
-const binaryPath = getSidecarPath();
-```
-
-Set `SECURE_EXEC_SIDECAR_BIN` to an absolute path to override resolution for
-development or custom builds.
-
-Supported platforms: `linux-x64-gnu`, `linux-arm64-gnu`, `darwin-x64`,
-`darwin-arm64`.
+Compatibility shim for `@rivet-dev/agentos-sidecar`.
diff --git a/packages/sidecar/index.d.ts b/packages/sidecar/index.d.ts
deleted file mode 100644
index 32c578d3b..000000000
--- a/packages/sidecar/index.d.ts
+++ /dev/null
@@ -1,12 +0,0 @@
-/**
- * Resolve the absolute path to the prebuilt `secure-exec-sidecar` binary for
- * the current platform.
- *
- * Resolution priority:
- *   1. `SECURE_EXEC_SIDECAR_BIN` env var.
- *   2. A `secure-exec-sidecar` binary placed next to this package.
- *   3. The platform-specific `@secure-exec/sidecar-<platform>` package.
- *
- * @throws if the platform is unsupported or no binary can be found.
- */
-export function getSidecarPath(): string;
diff --git a/packages/sidecar/index.js b/packages/sidecar/index.js
deleted file mode 100644
index ea01cd738..000000000
--- a/packages/sidecar/index.js
+++ /dev/null
@@ -1,113 +0,0 @@
-"use strict";
-
-// Platform-specific resolver for the prebuilt `secure-exec-sidecar` binary.
-// The binary itself ships inside one of the `@secure-exec/sidecar-<platform>`
-// packages, declared as optionalDependencies at publish time so npm only
-// installs the package matching the current `os`/`cpu`/`libc`.
-//
-// Resolution priority:
-//   1. `SECURE_EXEC_SIDECAR_BIN` env var.
-//   2. A `secure-exec-sidecar` binary placed next to this package.
-//   3. The platform-specific `@secure-exec/sidecar-<platform>` package.
-
-const { existsSync } = require("node:fs");
-const { join, dirname } = require("node:path");
-
-const BINARY_BASENAME = "secure-exec-sidecar";
-
-// The on-disk binary name carries the `.exe` suffix on Windows; every other
-// platform ships an extension-less ELF/Mach-O binary.
-const BINARY_NAME =
-	process.platform === "win32" ? `${BINARY_BASENAME}.exe` : BINARY_BASENAME;
-
-// No runtime chmod. Platform packages are published with `npm publish`, which
-// preserves the binary's 0755 executable bit.
-
-// Detect whether the current Linux process links glibc or musl. Mirrors the
-// npm `libc` field used to gate the platform packages: glibc reports a glibc
-// version via `process.report`, musl does not.
-function detectLinuxLibc() {
-	try {
-		const report = process.report?.getReport?.();
-		const glibc = report?.header?.glibcVersionRuntime;
-		if (glibc) return "glibc";
-	} catch {
-		// fall through to filesystem probe
-	}
-	// Fallback: presence of the musl loader implies a musl userland.
-	if (existsSync("/lib/ld-musl-x86_64.so.1") || existsSync("/lib/ld-musl-aarch64.so.1")) {
-		return "musl";
-	}
-	return "glibc";
-}
-
-function getPlatformPackageName() {
-	const { platform, arch } = process;
-	switch (platform) {
-		case "linux": {
-			const libc = detectLinuxLibc();
-			if (arch === "x64")
-				return libc === "musl"
-					? "@secure-exec/sidecar-linux-x64-musl"
-					: "@secure-exec/sidecar-linux-x64-gnu";
-			if (arch === "arm64")
-				return libc === "musl"
-					? "@secure-exec/sidecar-linux-arm64-musl"
-					: "@secure-exec/sidecar-linux-arm64-gnu";
-			break;
-		}
-		case "darwin":
-			if (arch === "x64") return "@secure-exec/sidecar-darwin-x64";
-			if (arch === "arm64") return "@secure-exec/sidecar-darwin-arm64";
-			break;
-		case "win32":
-			if (arch === "x64") return "@secure-exec/sidecar-windows-x64";
-			break;
-		default:
-			break;
-	}
-	return null;
-}
-
-function getSidecarPath() {
-	const override = process.env.SECURE_EXEC_SIDECAR_BIN;
-	if (override) {
-		if (!existsSync(override)) {
-			throw new Error(
-				`SECURE_EXEC_SIDECAR_BIN is set to ${override} but the file does not exist`,
-			);
-		}
-		return override;
-	}
-
-	const localBinary = join(__dirname, BINARY_NAME);
-	if (existsSync(localBinary)) {
-		return localBinary;
-	}
-
-	const platformPkg = getPlatformPackageName();
-	if (!platformPkg) {
-		throw new Error(
-			`@secure-exec/sidecar: unsupported platform ${process.platform}/${process.arch}. ` +
-				"The Secure Exec sidecar supports linux (x64/arm64, glibc/musl), " +
-				"macOS (x64/arm64), and Windows (x64). " +
-				"Set SECURE_EXEC_SIDECAR_BIN to a local secure-exec-sidecar binary to override.",
-		);
-	}
-
-	let pkgJsonPath;
-	try {
-		pkgJsonPath = require.resolve(`${platformPkg}/package.json`);
-	} catch {
-		throw new Error(
-			`@secure-exec/sidecar: platform package ${platformPkg} is not installed.\n` +
-				"This usually means the platform is unsupported or optionalDependencies were\n" +
-				`skipped during install. Try: npm install --include=optional ${platformPkg}\n` +
-				"Or set SECURE_EXEC_SIDECAR_BIN to a local secure-exec-sidecar binary.",
-		);
-	}
-
-	return join(dirname(pkgJsonPath), BINARY_NAME);
-}
-
-module.exports = { getSidecarPath };
diff --git a/packages/sidecar/npm/README.md b/packages/sidecar/npm/README.md
deleted file mode 100644
index 637cae6a2..000000000
--- a/packages/sidecar/npm/README.md
+++ /dev/null
@@ -1,8 +0,0 @@
-# @secure-exec/sidecar platform packages
-
-These packages are release artifacts. Each package contains the
-`secure-exec-sidecar` binary for one target. They are published by the release
-workflow with `npm publish` so the executable bit is preserved.
-
-The meta package `@secure-exec/sidecar` resolves the package for the current
-platform at runtime.
diff --git a/packages/sidecar/npm/darwin-arm64/package.json b/packages/sidecar/npm/darwin-arm64/package.json
deleted file mode 100644
index ea936c236..000000000
--- a/packages/sidecar/npm/darwin-arm64/package.json
+++ /dev/null
@@ -1,23 +0,0 @@
-{
-	"name": "@secure-exec/sidecar-darwin-arm64",
-	"version": "0.0.1",
-	"description": "Secure Exec native sidecar binary for macOS arm64",
-	"license": "Apache-2.0",
-	"repository": {
-		"type": "git",
-		"url": "https://github.com/rivet-dev/secure-exec.git",
-		"directory": "packages/sidecar/npm/darwin-arm64"
-	},
-	"os": [
-		"darwin"
-	],
-	"cpu": [
-		"arm64"
-	],
-	"files": [
-		"secure-exec-sidecar"
-	],
-	"engines": {
-		"node": ">=20"
-	}
-}
diff --git a/packages/sidecar/npm/darwin-x64/package.json b/packages/sidecar/npm/darwin-x64/package.json
deleted file mode 100644
index 40b0dc609..000000000
--- a/packages/sidecar/npm/darwin-x64/package.json
+++ /dev/null
@@ -1,23 +0,0 @@
-{
-	"name": "@secure-exec/sidecar-darwin-x64",
-	"version": "0.0.1",
-	"description": "Secure Exec native sidecar binary for macOS x64",
-	"license": "Apache-2.0",
-	"repository": {
-		"type": "git",
-		"url": "https://github.com/rivet-dev/secure-exec.git",
-		"directory": "packages/sidecar/npm/darwin-x64"
-	},
-	"os": [
-		"darwin"
-	],
-	"cpu": [
-		"x64"
-	],
-	"files": [
-		"secure-exec-sidecar"
-	],
-	"engines": {
-		"node": ">=20"
-	}
-}
diff --git a/packages/sidecar/npm/linux-arm64-gnu/package.json b/packages/sidecar/npm/linux-arm64-gnu/package.json
deleted file mode 100644
index 871f58c16..000000000
--- a/packages/sidecar/npm/linux-arm64-gnu/package.json
+++ /dev/null
@@ -1,26 +0,0 @@
-{
-	"name": "@secure-exec/sidecar-linux-arm64-gnu",
-	"version": "0.0.1",
-	"description": "Secure Exec native sidecar binary for Linux arm64 (glibc)",
-	"license": "Apache-2.0",
-	"repository": {
-		"type": "git",
-		"url": "https://github.com/rivet-dev/secure-exec.git",
-		"directory": "packages/sidecar/npm/linux-arm64-gnu"
-	},
-	"os": [
-		"linux"
-	],
-	"cpu": [
-		"arm64"
-	],
-	"libc": [
-		"glibc"
-	],
-	"files": [
-		"secure-exec-sidecar"
-	],
-	"engines": {
-		"node": ">=20"
-	}
-}
diff --git a/packages/sidecar/npm/linux-x64-gnu/package.json b/packages/sidecar/npm/linux-x64-gnu/package.json
deleted file mode 100644
index 33e177872..000000000
--- a/packages/sidecar/npm/linux-x64-gnu/package.json
+++ /dev/null
@@ -1,26 +0,0 @@
-{
-	"name": "@secure-exec/sidecar-linux-x64-gnu",
-	"version": "0.0.1",
-	"description": "Secure Exec native sidecar binary for Linux x64 (glibc)",
-	"license": "Apache-2.0",
-	"repository": {
-		"type": "git",
-		"url": "https://github.com/rivet-dev/secure-exec.git",
-		"directory": "packages/sidecar/npm/linux-x64-gnu"
-	},
-	"os": [
-		"linux"
-	],
-	"cpu": [
-		"x64"
-	],
-	"libc": [
-		"glibc"
-	],
-	"files": [
-		"secure-exec-sidecar"
-	],
-	"engines": {
-		"node": ">=20"
-	}
-}
diff --git a/packages/sidecar/package.json b/packages/sidecar/package.json
index 04f07cb33..a3fef59a1 100644
--- a/packages/sidecar/package.json
+++ b/packages/sidecar/package.json
@@ -1,24 +1,31 @@
 {
 	"name": "@secure-exec/sidecar",
 	"version": "0.0.1",
-	"description": "Platform-specific resolver for the Secure Exec native sidecar binary",
+	"type": "module",
 	"license": "Apache-2.0",
-	"repository": {
-		"type": "git",
-		"url": "https://github.com/rivet-dev/secure-exec.git",
-		"directory": "packages/sidecar"
-	},
-	"main": "./index.js",
-	"types": "./index.d.ts",
+	"description": "@secure-exec/sidecar compatibility shim for @rivet-dev/agentos-sidecar.",
+	"main": "./dist/index.js",
+	"types": "./dist/index.d.ts",
 	"files": [
-		"index.js",
-		"index.d.ts",
+		"dist",
 		"README.md"
 	],
+	"exports": {
+		".": {
+			"types": "./dist/index.d.ts",
+			"import": "./dist/index.js",
+			"default": "./dist/index.js"
+		},
+		"./package.json": "./package.json"
+	},
 	"scripts": {
-		"test": "node --test tests/*.test.cjs"
+		"build": "tsc",
+		"check-types": "tsc --noEmit"
+	},
+	"dependencies": {
+		"@rivet-dev/agentos-sidecar": "link:../../../agentos/packages/sidecar-binary"
 	},
-	"engines": {
-		"node": ">=20"
+	"devDependencies": {
+		"typescript": "^5.9.2"
 	}
 }
diff --git a/packages/sidecar/src/index.ts b/packages/sidecar/src/index.ts
new file mode 100644
index 000000000..f8f51a9cd
--- /dev/null
+++ b/packages/sidecar/src/index.ts
@@ -0,0 +1 @@
+export * from "@rivet-dev/agentos-sidecar";
diff --git a/packages/sidecar/tests/index.test.cjs b/packages/sidecar/tests/index.test.cjs
deleted file mode 100644
index f352753aa..000000000
--- a/packages/sidecar/tests/index.test.cjs
+++ /dev/null
@@ -1,52 +0,0 @@
-"use strict";
-
-const assert = require("node:assert/strict");
-const { mkdtempSync, rmSync, writeFileSync } = require("node:fs");
-const { tmpdir } = require("node:os");
-const { join } = require("node:path");
-const test = require("node:test");
-const { getSidecarPath } = require("../index.js");
-
-const originalOverride = process.env.SECURE_EXEC_SIDECAR_BIN;
-
-test.afterEach(() => {
-	if (originalOverride === undefined) {
-		delete process.env.SECURE_EXEC_SIDECAR_BIN;
-	} else {
-		process.env.SECURE_EXEC_SIDECAR_BIN = originalOverride;
-	}
-});
-
-test("honors SECURE_EXEC_SIDECAR_BIN when the file exists", () => {
-	const root = mkdtempSync(join(tmpdir(), "secure-exec-sidecar-bin-"));
-	try {
-		const binaryPath = join(root, "secure-exec-sidecar");
-		writeFileSync(binaryPath, "#!/bin/sh\n", { mode: 0o755 });
-		process.env.SECURE_EXEC_SIDECAR_BIN = binaryPath;
-
-		assert.equal(getSidecarPath(), binaryPath);
-	} finally {
-		rmSync(root, { recursive: true, force: true });
-	}
-});
-
-test("rejects a missing SECURE_EXEC_SIDECAR_BIN override", () => {
-	process.env.SECURE_EXEC_SIDECAR_BIN = join(
-		tmpdir(),
-		`secure-exec-sidecar-missing-${process.pid}-${Date.now()}`,
-	);
-
-	assert.throws(
-		() => getSidecarPath(),
-		/SECURE_EXEC_SIDECAR_BIN is set to .* but the file does not exist/,
-	);
-});
-
-test("reports missing platform packages without chmod fallbacks", () => {
-	delete process.env.SECURE_EXEC_SIDECAR_BIN;
-
-	assert.throws(
-		() => getSidecarPath(),
-		/@secure-exec\/sidecar: platform package .* is not installed/,
-	);
-});
diff --git a/packages/sidecar/tsconfig.json b/packages/sidecar/tsconfig.json
new file mode 100644
index 000000000..0eb722e69
--- /dev/null
+++ b/packages/sidecar/tsconfig.json
@@ -0,0 +1,10 @@
+{
+	"extends": "../../tsconfig.base.json",
+	"compilerOptions": {
+		"outDir": "dist",
+		"rootDir": "src"
+	},
+	"include": [
+		"src/**/*.ts"
+	]
+}
diff --git a/packages/typescript/README.md b/packages/typescript/README.md
index b9320a586..3c48c7ad2 100644
--- a/packages/typescript/README.md
+++ b/packages/typescript/README.md
@@ -1,50 +1,3 @@
 # @secure-exec/typescript
 
-Run the TypeScript compiler **inside the secure-exec sandbox**. The compiler is
-projected into the VM and every compile and type-check happens in the guest, so
-untrusted TypeScript never executes (or compiles) on the host.
-
-## Install
-
-```sh
-npm install @secure-exec/typescript secure-exec
-```
-
-## Usage
-
-```ts
-import { createTypeScriptTools } from "@secure-exec/typescript";
-
-const tools = createTypeScriptTools();
-
-// Compile TypeScript to JavaScript inside the sandbox.
-const compiled = await tools.compileSource({
-  sourceText: "const answer: number = 42;\nconsole.log(answer);",
-  compilerOptions: { module: "ESNext", target: "ES2022" },
-});
-console.log(compiled.outputText);
-
-// Type-check inside the sandbox and get structured diagnostics back.
-const checked = await tools.typecheckSource({
-  sourceText: `const total: number = "not a number";`,
-});
-console.log(checked.success, checked.diagnostics);
-```
-
-## API
-
-`createTypeScriptTools(options?)` returns:
-
-- `compileSource({ sourceText, filePath?, cwd?, configFilePath?, compilerOptions? })`
-  -> `{ success, diagnostics, outputText, sourceMapText }`
-- `typecheckSource({ sourceText, ... })` -> `{ success, diagnostics }`
-- `compileProject({ cwd?, configFilePath? })`
-  -> `{ success, diagnostics, emitSkipped, emittedFiles }`
-- `typecheckProject({ cwd?, configFilePath? })` -> `{ success, diagnostics }`
-
-Each diagnostic is `{ code, category, message, filePath?, line?, column? }`.
-
-Seed extra files into the VM with the `files` option, or project host
-directories with the `mounts` option, to compile whole projects.
-
-See the [documentation](https://secureexec.dev/docs) for details.
+Compatibility shim for `@rivet-dev/agentos-typescript`.
diff --git a/packages/typescript/package.json b/packages/typescript/package.json
index 716f0a394..f19c10f10 100644
--- a/packages/typescript/package.json
+++ b/packages/typescript/package.json
@@ -3,34 +3,29 @@
 	"version": "0.0.1",
 	"type": "module",
 	"license": "Apache-2.0",
+	"description": "@secure-exec/typescript compatibility shim for @rivet-dev/agentos-typescript.",
 	"main": "./dist/index.js",
 	"types": "./dist/index.d.ts",
 	"files": [
 		"dist",
 		"README.md"
 	],
-	"repository": {
-		"type": "git",
-		"url": "https://github.com/rivet-dev/secure-exec.git",
-		"directory": "packages/typescript"
-	},
 	"exports": {
 		".": {
 			"types": "./dist/index.d.ts",
 			"import": "./dist/index.js",
 			"default": "./dist/index.js"
-		}
+		},
+		"./package.json": "./package.json"
 	},
 	"scripts": {
 		"build": "tsc",
 		"check-types": "tsc --noEmit"
 	},
 	"dependencies": {
-		"@secure-exec/core": "workspace:*",
-		"secure-exec": "workspace:*",
-		"typescript": "^5.9.3"
+		"@rivet-dev/agentos-typescript": "link:../../../agentos/packages/typescript"
 	},
 	"devDependencies": {
-		"@types/node": "^22.10.2"
+		"typescript": "^5.9.2"
 	}
 }
diff --git a/packages/typescript/src/index.ts b/packages/typescript/src/index.ts
index d3ffcd299..89c01715c 100644
--- a/packages/typescript/src/index.ts
+++ b/packages/typescript/src/index.ts
@@ -1,503 +1 @@
-/**
- * @secure-exec/typescript — run the TypeScript compiler inside the sandbox.
- *
- * The TypeScript compiler (`typescript.js`) is projected into the VM's virtual
- * filesystem and the compile/type-check program is executed in-guest through
- * the `secure-exec` `NodeRuntime`. The compiler never runs on the host: every
- * `createSourceFile`/`createProgram`/`emit` call happens inside the kernel
- * isolation boundary, over the VM's filesystem.
- */
-
-import { createRequire } from "node:module";
-import { dirname } from "node:path";
-import { NodeRuntime } from "secure-exec";
-import type { HostDirectoryMount, NodeRuntimeCreateOptions } from "secure-exec";
-
-/** VM permission policy, as accepted by `NodeRuntime.create`. */
-export type Permissions = NonNullable<NodeRuntimeCreateOptions["permissions"]>;
-
-/** A single TypeScript diagnostic, normalized for host consumption. */
-export interface TypeScriptDiagnostic {
-	code: number;
-	category: "error" | "warning" | "suggestion" | "message";
-	message: string;
-	filePath?: string;
-	line?: number;
-	column?: number;
-}
-
-/** Result of a type-check (no emit). */
-export interface TypeCheckResult {
-	success: boolean;
-	diagnostics: TypeScriptDiagnostic[];
-}
-
-/** Result of compiling a project (emit to the VM filesystem). */
-export interface ProjectCompileResult extends TypeCheckResult {
-	emitSkipped: boolean;
-	emittedFiles: string[];
-}
-
-/** Result of compiling a single source string (emit returned in-memory). */
-export interface SourceCompileResult extends TypeCheckResult {
-	outputText?: string;
-	sourceMapText?: string;
-}
-
-/** Options for the project-oriented tools. */
-export interface ProjectCompilerOptions {
-	/** Working directory inside the VM. Defaults to `/root`. */
-	cwd?: string;
-	/** Explicit path to a `tsconfig.json` inside the VM. */
-	configFilePath?: string;
-}
-
-/** Options for the single-source tools. */
-export interface SourceCompilerOptions {
-	/** TypeScript source text to compile or type-check. */
-	sourceText: string;
-	/** Virtual path the source should appear at. Defaults to a temp `.ts` file. */
-	filePath?: string;
-	/** Working directory inside the VM. Defaults to `/root`. */
-	cwd?: string;
-	/** Optional `tsconfig.json` whose `compilerOptions` are applied. */
-	configFilePath?: string;
-	/** Inline compiler options (esbuild/tsc JSON spelling). */
-	compilerOptions?: Record<string, unknown>;
-}
-
-/** Options for {@link createTypeScriptTools}. */
-export interface TypeScriptToolsOptions {
-	/**
-	 * Host directory of the `typescript` npm package to project into the VM.
-	 * Defaults to the `typescript` package resolved from this package. The
-	 * directory is mounted (read lazily) into the VM; the compiler never runs
-	 * on the host.
-	 */
-	compilerPackageDir?: string;
-	/**
-	 * Guest path the `typescript` package is mounted at. Defaults to
-	 * `/root/node_modules/typescript` so it resolves as the `typescript`
-	 * package inside the VM.
-	 */
-	compilerGuestDir?: string;
-	/** Extra files to seed into the VM (e.g. a `tsconfig.json` or sources). */
-	files?: Record<string, string | Uint8Array>;
-	/** Extra host directories to project into the VM, Docker-style. */
-	mounts?: HostDirectoryMount[];
-	/** Permission policy forwarded to the VM. */
-	permissions?: Permissions;
-	/** Environment variables visible to the guest compiler. */
-	env?: Record<string, string>;
-}
-
-/** The in-sandbox TypeScript tools returned by {@link createTypeScriptTools}. */
-export interface TypeScriptTools {
-	/** Type-check a `tsconfig.json` project inside the VM. */
-	typecheckProject(options?: ProjectCompilerOptions): Promise<TypeCheckResult>;
-	/** Compile a `tsconfig.json` project, emitting into the VM filesystem. */
-	compileProject(
-		options?: ProjectCompilerOptions,
-	): Promise<ProjectCompileResult>;
-	/** Type-check a single TypeScript source string inside the VM. */
-	typecheckSource(options: SourceCompilerOptions): Promise<TypeCheckResult>;
-	/** Compile a single TypeScript source string, returning the emitted JS. */
-	compileSource(options: SourceCompilerOptions): Promise<SourceCompileResult>;
-}
-
-const DEFAULT_COMPILER_GUEST_DIR = "/root/node_modules/typescript";
-
-type CompilerRequest =
-	| { kind: "typecheckProject"; options: ProjectCompilerOptions }
-	| { kind: "compileProject"; options: ProjectCompilerOptions }
-	| { kind: "typecheckSource"; options: SourceCompilerOptions }
-	| { kind: "compileSource"; options: SourceCompilerOptions };
-
-type CompilerResponse =
-	| TypeCheckResult
-	| ProjectCompileResult
-	| SourceCompileResult;
-
-function resolveCompilerPackageDir(explicit?: string): string {
-	if (explicit) {
-		return explicit;
-	}
-	const require = createRequire(import.meta.url);
-	// `lib/typescript.js` is the full compiler bundle; its grandparent is the
-	// `typescript` package directory (containing package.json + lib/).
-	return dirname(dirname(require.resolve("typescript/lib/typescript.js")));
-}
-
-/**
- * Create a set of TypeScript tools whose compiler runs entirely inside the
- * secure-exec sandbox. The compiler bundle is read from the host and projected
- * into the VM filesystem; all compilation happens in-guest.
- */
-export function createTypeScriptTools(
-	options: TypeScriptToolsOptions = {},
-): TypeScriptTools {
-	const compilerPackageDir = resolveCompilerPackageDir(
-		options.compilerPackageDir,
-	);
-	const compilerGuestDir =
-		options.compilerGuestDir ?? DEFAULT_COMPILER_GUEST_DIR;
-	const compilerGuestPath = `${compilerGuestDir}/lib/typescript.js`;
-	const compilerMount: HostDirectoryMount = {
-		guestPath: compilerGuestDir,
-		hostPath: compilerPackageDir,
-		readOnly: true,
-	};
-
-	const run = <T extends CompilerResponse>(
-		request: CompilerRequest,
-	): Promise<T> =>
-		runCompilerRequest<T>(request, compilerGuestPath, options, compilerMount);
-
-	return {
-		typecheckProject: (requestOptions = {}) =>
-			run<TypeCheckResult>({
-				kind: "typecheckProject",
-				options: requestOptions,
-			}),
-		compileProject: (requestOptions = {}) =>
-			run<ProjectCompileResult>({
-				kind: "compileProject",
-				options: requestOptions,
-			}),
-		typecheckSource: (requestOptions) =>
-			run<TypeCheckResult>({ kind: "typecheckSource", options: requestOptions }),
-		compileSource: (requestOptions) =>
-			run<SourceCompileResult>({
-				kind: "compileSource",
-				options: requestOptions,
-			}),
-	};
-}
-
-async function runCompilerRequest<T extends CompilerResponse>(
-	request: CompilerRequest,
-	compilerGuestPath: string,
-	toolsOptions: TypeScriptToolsOptions,
-	compilerMount: HostDirectoryMount,
-): Promise<T> {
-	const createOptions: NodeRuntimeCreateOptions = {
-		files: toolsOptions.files,
-		mounts: [compilerMount, ...(toolsOptions.mounts ?? [])],
-		permissions: toolsOptions.permissions,
-		env: toolsOptions.env,
-	};
-
-	const rt = await NodeRuntime.create(createOptions);
-	try {
-		const guestSource = buildCompilerGuestSource(request, compilerGuestPath);
-		const result = await rt.run<T>(guestSource);
-		if (result.exitCode === 0 && result.value !== undefined) {
-			return result.value;
-		}
-		return createFailureResult<T>(
-			request.kind,
-			result.stderr.trim() || `compiler exited with code ${result.exitCode}`,
-		);
-	} catch (error) {
-		const message = error instanceof Error ? error.message : String(error);
-		return createFailureResult<T>(request.kind, message);
-	} finally {
-		await rt.dispose();
-	}
-}
-
-function createFailureResult<T extends CompilerResponse>(
-	kind: CompilerRequest["kind"],
-	errorMessage: string,
-): T {
-	const diagnostic: TypeScriptDiagnostic = {
-		code: 0,
-		category: "error",
-		message: errorMessage || "TypeScript compiler failed",
-	};
-	if (kind === "compileProject") {
-		return {
-			success: false,
-			diagnostics: [diagnostic],
-			emitSkipped: true,
-			emittedFiles: [],
-		} as unknown as T;
-	}
-	return { success: false, diagnostics: [diagnostic] } as unknown as T;
-}
-
-/**
- * Build the guest ES module that loads the projected compiler and runs the
- * requested compile/type-check entirely inside the VM, then hands the result
- * back to the host via `__return`.
- */
-function buildCompilerGuestSource(
-	request: CompilerRequest,
-	compilerGuestPath: string,
-): string {
-	return [
-		`import { createRequire } from "node:module";`,
-		`import fs from "node:fs";`,
-		`import path from "node:path";`,
-		`const require = createRequire(${JSON.stringify(compilerGuestPath)});`,
-		`const ts = require(${JSON.stringify(compilerGuestPath)});`,
-		`const request = ${JSON.stringify(request)};`,
-		`const result = (${compilerGuestMain.toString()})(ts, fs, path, request);`,
-		`globalThis.__return(result);`,
-	].join("\n");
-}
-
-// NOTE: This function is serialized with `.toString()` and executed INSIDE the
-// VM. It must be self-contained: it may only reference its parameters and the
-// in-guest globals. Do not capture host-side variables.
-function compilerGuestMain(
-	ts: typeof import("typescript"),
-	fs: typeof import("node:fs"),
-	path: typeof import("node:path"),
-	request: CompilerRequest,
-): CompilerResponse {
-	function toDiagnostic(
-		diagnostic: import("typescript").Diagnostic,
-	): TypeScriptDiagnostic {
-		const message = ts
-			.flattenDiagnosticMessageText(diagnostic.messageText, "\n")
-			.trim();
-		const result: TypeScriptDiagnostic = {
-			code: diagnostic.code,
-			category: toDiagnosticCategory(diagnostic.category),
-			message,
-		};
-		if (!diagnostic.file || diagnostic.start === undefined) {
-			return result;
-		}
-		const { line, character } = diagnostic.file.getLineAndCharacterOfPosition(
-			diagnostic.start,
-		);
-		result.filePath = diagnostic.file.fileName.replace(/\\/g, "/");
-		result.line = line + 1;
-		result.column = character + 1;
-		return result;
-	}
-
-	function toDiagnosticCategory(
-		category: import("typescript").DiagnosticCategory,
-	): TypeScriptDiagnostic["category"] {
-		switch (category) {
-			case ts.DiagnosticCategory.Warning:
-				return "warning";
-			case ts.DiagnosticCategory.Suggestion:
-				return "suggestion";
-			case ts.DiagnosticCategory.Message:
-				return "message";
-			default:
-				return "error";
-		}
-	}
-
-	function hasErrors(diagnostics: TypeScriptDiagnostic[]): boolean {
-		return diagnostics.some((diagnostic) => diagnostic.category === "error");
-	}
-
-	function convertCompilerOptions(
-		compilerOptions: Record<string, unknown> | undefined,
-		basePath: string,
-	): import("typescript").CompilerOptions {
-		if (!compilerOptions) {
-			return {};
-		}
-		const converted = ts.convertCompilerOptionsFromJson(
-			compilerOptions,
-			basePath,
-		);
-		if (converted.errors.length > 0) {
-			throw new Error(
-				converted.errors
-					.map((diagnostic) => toDiagnostic(diagnostic).message)
-					.join("\n"),
-			);
-		}
-		return converted.options;
-	}
-
-	function resolveProjectConfig(
-		options: ProjectCompilerOptions,
-		overrideCompilerOptions: import("typescript").CompilerOptions = {},
-	) {
-		const cwd = path.resolve(options.cwd ?? "/root");
-		const configFilePath = options.configFilePath
-			? path.resolve(cwd, options.configFilePath)
-			: ts.findConfigFile(cwd, ts.sys.fileExists, "tsconfig.json");
-		if (!configFilePath) {
-			throw new Error(`Unable to find tsconfig.json from '${cwd}'`);
-		}
-		const configFile = ts.readConfigFile(configFilePath, ts.sys.readFile);
-		if (configFile.error) {
-			return { parsed: null, diagnostics: [toDiagnostic(configFile.error)] };
-		}
-		const parsed = ts.parseJsonConfigFileContent(
-			configFile.config,
-			ts.sys,
-			path.dirname(configFilePath),
-			overrideCompilerOptions,
-			configFilePath,
-		);
-		return { parsed, diagnostics: parsed.errors.map(toDiagnostic) };
-	}
-
-	function createSourceProgram(
-		options: SourceCompilerOptions,
-		overrideCompilerOptions: import("typescript").CompilerOptions = {},
-	) {
-		const cwd = path.resolve(options.cwd ?? "/root");
-		const filePath = path.resolve(
-			cwd,
-			options.filePath ?? "__secure_exec_typescript_input__.ts",
-		);
-		const projectCompilerOptions = options.configFilePath
-			? resolveProjectConfig(
-					{ cwd, configFilePath: options.configFilePath },
-					overrideCompilerOptions,
-				)
-			: { parsed: null, diagnostics: [] as TypeScriptDiagnostic[] };
-		if (projectCompilerOptions.diagnostics.length > 0) {
-			return {
-				filePath,
-				program: null,
-				diagnostics: projectCompilerOptions.diagnostics,
-			};
-		}
-		const compilerOptions = {
-			target: ts.ScriptTarget.ES2022,
-			module: ts.ModuleKind.ESNext,
-			...projectCompilerOptions.parsed?.options,
-			...convertCompilerOptions(options.compilerOptions, cwd),
-			...overrideCompilerOptions,
-		};
-		const host = ts.createCompilerHost(compilerOptions);
-		const normalize = (candidate: string) =>
-			ts.sys.useCaseSensitiveFileNames ? candidate : candidate.toLowerCase();
-		const normalizedFilePath = normalize(filePath);
-		const defaultGetSourceFile = host.getSourceFile.bind(host);
-		const defaultReadFile = host.readFile.bind(host);
-		const defaultFileExists = host.fileExists.bind(host);
-
-		host.fileExists = (candidate) =>
-			normalize(candidate) === normalizedFilePath ||
-			defaultFileExists(candidate);
-		host.readFile = (candidate) =>
-			normalize(candidate) === normalizedFilePath
-				? options.sourceText
-				: defaultReadFile(candidate);
-		host.getSourceFile = (candidate, languageVersion, onError, shouldCreate) =>
-			normalize(candidate) === normalizedFilePath
-				? ts.createSourceFile(candidate, options.sourceText, languageVersion, true)
-				: defaultGetSourceFile(candidate, languageVersion, onError, shouldCreate);
-
-		return {
-			filePath,
-			program: ts.createProgram([filePath], compilerOptions, host),
-			diagnostics: [] as TypeScriptDiagnostic[],
-		};
-	}
-
-	switch (request.kind) {
-		case "typecheckProject": {
-			const { parsed, diagnostics } = resolveProjectConfig(request.options, {
-				noEmit: true,
-			});
-			if (!parsed) {
-				return { success: false, diagnostics };
-			}
-			const program = ts.createProgram({
-				rootNames: parsed.fileNames,
-				options: parsed.options,
-				projectReferences: parsed.projectReferences,
-			});
-			const combined = ts
-				.sortAndDeduplicateDiagnostics([
-					...parsed.errors,
-					...ts.getPreEmitDiagnostics(program),
-				])
-				.map(toDiagnostic);
-			return { success: !hasErrors(combined), diagnostics: combined };
-		}
-		case "compileProject": {
-			const { parsed, diagnostics } = resolveProjectConfig(request.options);
-			if (!parsed) {
-				return {
-					success: false,
-					diagnostics,
-					emitSkipped: true,
-					emittedFiles: [],
-				};
-			}
-			const program = ts.createProgram({
-				rootNames: parsed.fileNames,
-				options: parsed.options,
-				projectReferences: parsed.projectReferences,
-			});
-			const emittedFiles: string[] = [];
-			const emitResult = program.emit(undefined, (fileName, text) => {
-				fs.mkdirSync(path.dirname(fileName), { recursive: true });
-				fs.writeFileSync(fileName, text, "utf8");
-				emittedFiles.push(fileName.replace(/\\/g, "/"));
-			});
-			const combined = ts
-				.sortAndDeduplicateDiagnostics([
-					...parsed.errors,
-					...ts.getPreEmitDiagnostics(program),
-					...emitResult.diagnostics,
-				])
-				.map(toDiagnostic);
-			return {
-				success: !hasErrors(combined),
-				diagnostics: combined,
-				emitSkipped: emitResult.emitSkipped,
-				emittedFiles,
-			};
-		}
-		case "typecheckSource": {
-			const { program, diagnostics } = createSourceProgram(request.options, {
-				noEmit: true,
-			});
-			if (!program) {
-				return { success: false, diagnostics };
-			}
-			const combined = ts
-				.sortAndDeduplicateDiagnostics(ts.getPreEmitDiagnostics(program))
-				.map(toDiagnostic);
-			return { success: !hasErrors(combined), diagnostics: combined };
-		}
-		case "compileSource": {
-			const { program, diagnostics } = createSourceProgram(request.options);
-			if (!program) {
-				return { success: false, diagnostics };
-			}
-			let outputText: string | undefined;
-			let sourceMapText: string | undefined;
-			const emitResult = program.emit(undefined, (fileName, text) => {
-				if (
-					fileName.endsWith(".js") ||
-					fileName.endsWith(".mjs") ||
-					fileName.endsWith(".cjs")
-				) {
-					outputText = text;
-				} else if (fileName.endsWith(".map")) {
-					sourceMapText = text;
-				}
-			});
-			const combined = ts
-				.sortAndDeduplicateDiagnostics([
-					...ts.getPreEmitDiagnostics(program),
-					...emitResult.diagnostics,
-				])
-				.map(toDiagnostic);
-			return {
-				success: !hasErrors(combined),
-				diagnostics: combined,
-				outputText,
-				sourceMapText,
-			};
-		}
-	}
-}
+export * from "@rivet-dev/agentos-typescript";
diff --git a/packages/typescript/tsconfig.json b/packages/typescript/tsconfig.json
index 3877f082e..0eb722e69 100644
--- a/packages/typescript/tsconfig.json
+++ b/packages/typescript/tsconfig.json
@@ -1,13 +1,10 @@
 {
 	"extends": "../../tsconfig.base.json",
 	"compilerOptions": {
-		"module": "NodeNext",
-		"moduleResolution": "NodeNext",
-		"esModuleInterop": true,
-		"declaration": true,
-		"outDir": "./dist",
-		"rootDir": "./src"
+		"outDir": "dist",
+		"rootDir": "src"
 	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules", "dist"]
+	"include": [
+		"src/**/*.ts"
+	]
 }
diff --git a/pnpm-lock.yaml b/pnpm-lock.yaml
index 9c8068805..d152ad6f4 100644
--- a/pnpm-lock.yaml
+++ b/pnpm-lock.yaml
@@ -4,15848 +4,137 @@ settings:
   autoInstallPeers: true
   excludeLinksFromLockfile: false
 
-overrides:
-  '@mariozechner/pi-tui': 0.60.0
-  '@mariozechner/pi-agent-core': 0.60.0
-  '@rivet-gg/components': github:rivet-dev/docs-theme#v0.3.1&path:vendor/components
-  '@rivet-gg/icons': github:rivet-dev/docs-theme#v0.3.1&path:vendor/icons
-
 importers:
 
   .:
     devDependencies:
-      '@biomejs/biome':
-        specifier: ^2.3
-        version: 2.4.10
-      '@types/node':
-        specifier: ^22.19.15
-        version: 22.19.15
       turbo:
         specifier: ^2.5.6
         version: 2.9.1
       typescript:
         specifier: ^5.9.2
         version: 5.9.3
-      vitest:
-        specifier: ^2.1.8
-        version: 2.1.9(@types/node@22.19.15)
-
-  examples/docs/feat-child-processes:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/feat-filesystem:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/feat-module-loading:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/feat-networking:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/feat-networking-wasm:
-    dependencies:
-      '@secure-exec/core':
-        specifier: workspace:*
-        version: link:../../../packages/core
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/feat-output-capture:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/feat-permissions:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/feat-resource-limits:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/feat-runtime-platform:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/feat-typescript:
-    dependencies:
-      '@secure-exec/typescript':
-        specifier: workspace:*
-        version: link:../../../packages/typescript
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-
-  examples/docs/feat-virtual-filesystem:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/process-isolation:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/quickstart:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/sdk-overview:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/uc-ai-agent-code-exec:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/uc-code-mode:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/uc-dev-servers:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/docs/uc-plugin-systems:
-    dependencies:
-      secure-exec:
-        specifier: workspace:*
-        version: link:../../../packages/secure-exec
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  examples/native-client:
-    dependencies:
-      '@secure-exec/core':
-        specifier: workspace:*
-        version: link:../../packages/core
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  packages/agentos-toolchain:
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsup:
-        specifier: ^8.3.5
-        version: 8.5.1(jiti@1.21.7)(postcss@8.5.8)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0)
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-      vitest:
-        specifier: ^2.1.9
-        version: 2.1.9(@types/node@22.19.15)
-
-  packages/benchmarks:
-    dependencies:
-      '@secure-exec/core':
-        specifier: workspace:*
-        version: link:../core
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      tsx:
-        specifier: ^4.19.2
-        version: 4.21.0
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
 
   packages/browser:
     dependencies:
-      '@noble/ciphers':
-        specifier: ^2.2.0
-        version: 2.2.0
-      '@noble/hashes':
-        specifier: ^2.2.0
-        version: 2.2.0
-      '@secure-exec/core':
-        specifier: workspace:*
-        version: link:../core
-      sucrase:
-        specifier: ^3.35.0
-        version: 3.35.1
+      '@rivet-dev/agentos-runtime-browser':
+        specifier: link:../../../agentos/packages/runtime-browser
+        version: link:../../../agentos/packages/runtime-browser
     devDependencies:
-      '@playwright/test':
-        specifier: ^1.54.2
-        version: 1.59.1
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
       typescript:
-        specifier: ^5.7.2
+        specifier: ^5.9.2
         version: 5.9.3
-      vitest:
-        specifier: ^2.1.8
-        version: 2.1.9(@types/node@22.19.15)
-
-  packages/build-tools:
-    dependencies:
-      '@bare-ts/tools':
-        specifier: 0.15.0
-        version: 0.15.0(@bare-ts/lib@0.4.0)
-      esbuild:
-        specifier: ^0.27.4
-        version: 0.27.4
-      node-stdlib-browser:
-        specifier: ^1.3.1
-        version: 1.3.1
-      undici:
-        specifier: ^7.24.6
-        version: 7.24.6
-      web-streams-polyfill:
-        specifier: ^3.3.3
-        version: 3.3.3
 
   packages/core:
     dependencies:
-      '@rivetkit/bare-ts':
-        specifier: ^0.6.2
-        version: 0.6.2
-      '@secure-exec/sidecar':
-        specifier: workspace:*
-        version: link:../sidecar
-      zod:
-        specifier: ^4.1.11
-        version: 4.3.6
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-      vitest:
-        specifier: ^2.1.8
-        version: 2.1.9(@types/node@22.19.15)
-
-  packages/manifest:
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  packages/secure-exec:
-    dependencies:
-      '@secure-exec/core':
-        specifier: workspace:*
-        version: link:../core
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  packages/sidecar: {}
-
-  packages/typescript:
-    dependencies:
-      '@secure-exec/core':
-        specifier: workspace:*
-        version: link:../core
-      secure-exec:
-        specifier: workspace:*
-        version: link:../secure-exec
-      typescript:
-        specifier: ^5.9.3
-        version: 5.9.3
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-
-  registry/agent/claude:
-    dependencies:
-      '@agentclientprotocol/sdk':
-        specifier: ^0.16.1
-        version: 0.16.1(zod@4.3.6)
-      '@anthropic-ai/claude-agent-sdk':
-        specifier: 0.2.87
-        version: 0.2.87(zod@4.3.6)
-      zod:
-        specifier: ^4.1.11
-        version: 4.3.6
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  registry/agent/codex:
-    dependencies:
-      '@agentos-software/codex-cli':
-        specifier: workspace:*
-        version: link:../../software/codex-cli
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-
-  registry/agent/opencode:
+      '@rivet-dev/agentos-runtime-core':
+        specifier: link:../../../agentos/packages/runtime-core
+        version: link:../../../agentos/packages/runtime-core
     devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      bun:
-        specifier: 1.3.11
-        version: 1.3.11
       typescript:
-        specifier: ^5.7.2
+        specifier: ^5.9.2
         version: 5.9.3
 
-  registry/agent/pi:
+  packages/sandbox:
     dependencies:
-      '@agentclientprotocol/sdk':
-        specifier: ^0.16.1
-        version: 0.16.1(zod@4.3.6)
-      '@mariozechner/pi-ai':
-        specifier: 0.60.0
-        version: 0.60.0(@modelcontextprotocol/sdk@1.29.0(zod@4.3.6))(bufferutil@4.1.0)(ws@8.21.0(bufferutil@4.1.0))(zod@4.3.6)
-      '@mariozechner/pi-coding-agent':
-        specifier: 0.60.0
-        version: 0.60.0(@modelcontextprotocol/sdk@1.29.0(zod@4.3.6))(bufferutil@4.1.0)(ws@8.21.0(bufferutil@4.1.0))(zod@4.3.6)
+      '@rivet-dev/agentos-sandbox':
+        specifier: link:../../../agentos/packages/agentos-sandbox
+        version: link:../../../agentos/packages/agentos-sandbox
     devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
       typescript:
-        specifier: ^5.7.2
+        specifier: ^5.9.2
         version: 5.9.3
 
-  registry/agent/pi-cli:
+  packages/secure-exec:
     dependencies:
-      '@mariozechner/pi-coding-agent':
-        specifier: ^0.60.0
-        version: 0.60.0(zod@3.25.76)
-      pi-acp:
-        specifier: ^0.0.23
-        version: 0.0.23
+      '@rivet-dev/agentos-runtime-core':
+        specifier: link:../../../agentos/packages/runtime-core
+        version: link:../../../agentos/packages/runtime-core
     devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
       typescript:
-        specifier: ^5.7.2
+        specifier: ^5.9.2
         version: 5.9.3
 
-  registry/software/browserbase:
+  packages/sidecar:
     dependencies:
-      browse:
-        specifier: ^0.9.3
-        version: 0.9.3(bufferutil@4.1.0)(playwright-core@1.59.1)
+      '@rivet-dev/agentos-sidecar':
+        specifier: link:../../../agentos/packages/sidecar-binary
+        version: link:../../../agentos/packages/sidecar-binary
     devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
       typescript:
-        specifier: ^5.7.2
+        specifier: ^5.9.2
         version: 5.9.3
 
-  registry/software/build-essential:
+  packages/typescript:
     dependencies:
-      '@agentos-software/common':
-        specifier: workspace:*
-        version: link:../common
-      '@agentos-software/curl':
-        specifier: workspace:*
-        version: link:../curl
-      '@agentos-software/git':
-        specifier: workspace:*
-        version: link:../git
+      '@rivet-dev/agentos-typescript':
+        specifier: link:../../../agentos/packages/typescript
+        version: link:../../../agentos/packages/typescript
     devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
       typescript:
         specifier: ^5.9.2
         version: 5.9.3
 
-  registry/software/codex-cli:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+packages:
 
-  registry/software/common:
-    dependencies:
-      '@agentos-software/coreutils':
-        specifier: workspace:*
-        version: link:../coreutils
-      '@agentos-software/diffutils':
-        specifier: workspace:*
-        version: link:../diffutils
-      '@agentos-software/findutils':
-        specifier: workspace:*
-        version: link:../findutils
-      '@agentos-software/gawk':
-        specifier: workspace:*
-        version: link:../gawk
-      '@agentos-software/grep':
-        specifier: workspace:*
-        version: link:../grep
-      '@agentos-software/gzip':
-        specifier: workspace:*
-        version: link:../gzip
-      '@agentos-software/sed':
-        specifier: workspace:*
-        version: link:../sed
-      '@agentos-software/tar':
-        specifier: workspace:*
-        version: link:../tar
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+  '@turbo/darwin-64@2.9.1':
+    resolution: {integrity: sha512-d1zTcIf6VWT7cdfjhi0X36C2PRsUi2HdEwYzVgkLHmuuYtL+1Y1Zu3JdlouoB/NjG2vX3q4NnKLMNhDOEweoIg==}
+    cpu: [x64]
+    os: [darwin]
 
-  registry/software/coreutils:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+  '@turbo/darwin-arm64@2.9.1':
+    resolution: {integrity: sha512-AwJ4mA++Kpem33Lcov093hS1LrgqbKxqq5FCReoqsA8ayEG6eAJAo8ItDd9qQTdBiXxZH8GHCspLAMIe1t3Xyw==}
+    cpu: [arm64]
+    os: [darwin]
 
-  registry/software/curl:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+  '@turbo/linux-64@2.9.1':
+    resolution: {integrity: sha512-HT9SjKkjEw9uvlgly/qwCGEm4wOXOwQPSPS+wkg+/O1Qan3F1uU/0PFYzxl3m4lfuV3CP9wr2Dq5dPrUX+B9Ag==}
+    cpu: [x64]
+    os: [linux]
 
-  registry/software/diffutils:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+  '@turbo/linux-arm64@2.9.1':
+    resolution: {integrity: sha512-+4s5GZs3kjxc1KMhLBhoQy4UBkXjOhgidA9ipNllkA4JLivSqUCuOgU1Xbyp6vzYrsqHJ9vvwo/2mXgEtD6ZHg==}
+    cpu: [arm64]
+    os: [linux]
 
-  registry/software/duckdb:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+  '@turbo/windows-64@2.9.1':
+    resolution: {integrity: sha512-ZO7GCyQd5HV564XWHc9KysjanFfM3DmnWquyEByu+hQMq42g9OMU/fYOCfHS6Xj2aXkIg2FHJeRV+iAck2YrbQ==}
+    cpu: [x64]
+    os: [win32]
 
-  registry/software/everything:
-    dependencies:
-      '@agentos-software/codex-cli':
-        specifier: workspace:*
-        version: link:../codex-cli
-      '@agentos-software/coreutils':
-        specifier: workspace:*
-        version: link:../coreutils
-      '@agentos-software/curl':
-        specifier: workspace:*
-        version: link:../curl
-      '@agentos-software/diffutils':
-        specifier: workspace:*
-        version: link:../diffutils
-      '@agentos-software/fd':
-        specifier: workspace:*
-        version: link:../fd
-      '@agentos-software/file':
-        specifier: workspace:*
-        version: link:../file
-      '@agentos-software/findutils':
-        specifier: workspace:*
-        version: link:../findutils
-      '@agentos-software/gawk':
-        specifier: workspace:*
-        version: link:../gawk
-      '@agentos-software/grep':
-        specifier: workspace:*
-        version: link:../grep
-      '@agentos-software/gzip':
-        specifier: workspace:*
-        version: link:../gzip
-      '@agentos-software/jq':
-        specifier: workspace:*
-        version: link:../jq
-      '@agentos-software/ripgrep':
-        specifier: workspace:*
-        version: link:../ripgrep
-      '@agentos-software/sed':
-        specifier: workspace:*
-        version: link:../sed
-      '@agentos-software/tar':
-        specifier: workspace:*
-        version: link:../tar
-      '@agentos-software/tree':
-        specifier: workspace:*
-        version: link:../tree
-      '@agentos-software/unzip':
-        specifier: workspace:*
-        version: link:../unzip
-      '@agentos-software/yq':
-        specifier: workspace:*
-        version: link:../yq
-      '@agentos-software/zip':
-        specifier: workspace:*
-        version: link:../zip
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+  '@turbo/windows-arm64@2.9.1':
+    resolution: {integrity: sha512-BjX2fdz38mBb/H94JXrD5cJ+mEq8NmsCbYdC42JzQebJ0X8EdNgyFoEhOydPGViOmaRmhhdZnPZKKn6wahSpcA==}
+    cpu: [arm64]
+    os: [win32]
 
-  registry/software/fd:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+  turbo@2.9.1:
+    resolution: {integrity: sha512-TO9du8MwLTAKoXcGezekh9cPJabJUb0+8KxtpMR6kXdRASrmJ8qXf2GkVbCREgzbMQakzfNcux9cZtxheDY4RQ==}
+    hasBin: true
 
-  registry/software/file:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+  typescript@5.9.3:
+    resolution: {integrity: sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==}
+    engines: {node: '>=14.17'}
+    hasBin: true
 
-  registry/software/findutils:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+snapshots:
 
-  registry/software/gawk:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+  '@turbo/darwin-64@2.9.1':
+    optional: true
 
-  registry/software/git:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+  '@turbo/darwin-arm64@2.9.1':
+    optional: true
 
-  registry/software/grep:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+  '@turbo/linux-64@2.9.1':
+    optional: true
 
-  registry/software/gzip:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+  '@turbo/linux-arm64@2.9.1':
+    optional: true
 
-  registry/software/http-get:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
+  '@turbo/windows-64@2.9.1':
+    optional: true
 
-  registry/software/jq:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
-
-  registry/software/ripgrep:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
-
-  registry/software/sed:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
-
-  registry/software/sqlite3:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
-
-  registry/software/tar:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
-
-  registry/software/tree:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
-
-  registry/software/unzip:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
-
-  registry/software/vim:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
-
-  registry/software/vix:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
-
-  registry/software/wget:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
-
-  registry/software/yq:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
-
-  registry/software/zip:
-    devDependencies:
-      '@agentos-software/manifest':
-        specifier: workspace:*
-        version: link:../../../packages/manifest
-      '@rivet-dev/agentos-toolchain':
-        specifier: workspace:*
-        version: link:../../../packages/agentos-toolchain
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.9.2
-        version: 5.9.3
-
-  registry/tool/sandbox:
-    dependencies:
-      '@secure-exec/core':
-        specifier: workspace:*
-        version: link:../../../packages/core
-      sandbox-agent:
-        specifier: ^0.4.2
-        version: 0.4.2(dockerode@4.0.10)(get-port@7.2.0)(zod@4.3.6)
-    devDependencies:
-      '@types/node':
-        specifier: ^22.10.2
-        version: 22.19.15
-      typescript:
-        specifier: ^5.7.2
-        version: 5.9.3
-      vitest:
-        specifier: ^2.1.8
-        version: 2.1.9(@types/node@22.19.15)
-
-  scripts/publish:
-    dependencies:
-      commander:
-        specifier: ^12.1.0
-        version: 12.1.0
-      execa:
-        specifier: ^8.0.1
-        version: 8.0.1
-      glob:
-        specifier: ^10.3.10
-        version: 10.5.0
-      semver:
-        specifier: ^7.6.0
-        version: 7.7.4
-    devDependencies:
-      '@types/node':
-        specifier: ^24.3.0
-        version: 24.13.2
-      '@types/semver':
-        specifier: ^7.5.8
-        version: 7.7.1
-      tsx:
-        specifier: ^4.0.0
-        version: 4.21.0
-      typescript:
-        specifier: ^5.5.2
-        version: 5.9.3
-
-  website:
-    dependencies:
-      '@astrojs/react':
-        specifier: ^4.2.0
-        version: 4.4.2(@types/node@24.13.2)(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(jiti@1.21.7)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tsx@4.21.0)(yaml@2.9.0)
-      '@astrojs/sitemap':
-        specifier: ^3.2.0
-        version: 3.7.3
-      '@astrojs/tailwind':
-        specifier: ^6.0.0
-        version: 6.0.2(astro@5.18.2(@types/node@24.13.2)(aws4fetch@1.0.20)(jiti@1.21.7)(rollup@4.60.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0))(tailwindcss@3.4.19(tsx@4.21.0)(yaml@2.9.0))
-      '@rivet-dev/docs-theme':
-        specifier: github:rivet-dev/docs-theme#v0.3.1
-        version: https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7(@babel/core@7.29.7)(@babel/runtime@7.29.7)(@babel/template@7.29.7)(@codemirror/language@6.12.4)(@codemirror/search@6.7.1)(@codemirror/theme-one-dark@6.1.3)(@types/node@24.13.2)(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(astro@5.18.2(@types/node@24.13.2)(aws4fetch@1.0.20)(jiti@1.21.7)(rollup@4.60.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0))(codemirror@6.0.2)(jiti@1.21.7)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tsx@4.21.0)(use-sync-external-store@1.6.0(react@19.2.7))(yaml@2.9.0)
-      '@rivet-gg/components':
-        specifier: github:rivet-dev/docs-theme#v0.3.1&path:vendor/components
-        version: https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7#path:vendor/components(@babel/core@7.29.7)(@babel/runtime@7.29.7)(@babel/template@7.29.7)(@codemirror/language@6.12.4)(@codemirror/search@6.7.1)(@codemirror/theme-one-dark@6.1.3)(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(codemirror@6.0.2)(lodash@4.18.1)(posthog-js@1.396.5)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@3.4.19(tsx@4.21.0)(yaml@2.9.0))
-      '@rivet-gg/icons':
-        specifier: github:rivet-dev/docs-theme#v0.3.1&path:vendor/icons
-        version: https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7#path:vendor/icons(@fortawesome/fontawesome-svg-core@6.7.2)(@fortawesome/free-brands-svg-icons@6.7.2)(@fortawesome/free-solid-svg-icons@6.7.2)(@fortawesome/react-fontawesome@0.2.6(@fortawesome/fontawesome-svg-core@6.7.2)(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      astro:
-        specifier: ^5.18.2
-        version: 5.18.2(@types/node@24.13.2)(aws4fetch@1.0.20)(jiti@1.21.7)(rollup@4.60.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0)
-      framer-motion:
-        specifier: ^12.0.0
-        version: 12.40.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      lucide-react:
-        specifier: ^0.469.0
-        version: 0.469.0(react@19.2.7)
-      react:
-        specifier: ^19.0.0
-        version: 19.2.7
-      react-dom:
-        specifier: ^19.0.0
-        version: 19.2.7(react@19.2.7)
-      sharp:
-        specifier: ^0.33.5
-        version: 0.33.5
-      tailwindcss:
-        specifier: ^3.4.0
-        version: 3.4.19(tsx@4.21.0)(yaml@2.9.0)
-    devDependencies:
-      '@types/react':
-        specifier: ^19.0.0
-        version: 19.2.17
-      '@types/react-dom':
-        specifier: ^19.0.0
-        version: 19.2.3(@types/react@19.2.17)
-      pixelmatch:
-        specifier: ^7.2.0
-        version: 7.2.0
-      pngjs:
-        specifier: ^7.0.0
-        version: 7.0.0
-      typedoc:
-        specifier: ^0.28.0
-        version: 0.28.19(typescript@5.9.3)
-      typedoc-plugin-markdown:
-        specifier: ^4.0.0
-        version: 4.12.0(typedoc@0.28.19(typescript@5.9.3))
-      typescript:
-        specifier: ^5.7.0
-        version: 5.9.3
-      vite:
-        specifier: ^6.4.1
-        version: 6.4.3(@types/node@24.13.2)(jiti@1.21.7)(tsx@4.21.0)(yaml@2.9.0)
-
-packages:
-
-  '@agentclientprotocol/sdk@0.12.0':
-    resolution: {integrity: sha512-V8uH/KK1t7utqyJmTA7y7DzKu6+jKFIXM+ZVouz8E55j8Ej2RV42rEvPKn3/PpBJlliI5crcGk1qQhZ7VwaepA==}
-    peerDependencies:
-      zod: ^3.25.0 || ^4.0.0
-
-  '@agentclientprotocol/sdk@0.16.1':
-    resolution: {integrity: sha512-1ad+Sc/0sCtZGHthxxvgEUo5Wsbw16I+aF+YwdiLnPwkZG8KAGUEAPK6LM6Pf69lCyJPt1Aomk1d+8oE3C4ZEw==}
-    peerDependencies:
-      zod: ^3.25.0 || ^4.0.0
-
-  '@ai-sdk/amazon-bedrock@3.0.105':
-    resolution: {integrity: sha512-zMO80RQhm5r9jm8u01CydTAQFo956LO92NeOZYPuzeNdeS1ZXRz9vWA5X2GeSJBGZBSSRc7o1D8tFQK6n1R91w==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/anthropic@2.0.85':
-    resolution: {integrity: sha512-ozfPUXb5cnXyFWXyY0hRFi8fudgNDr+FAuP2J1HTRhPjkTHTSFLbPSVRXEXCVoJhfl1IboF+xNDZs35nOHDU7w==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/azure@2.0.114':
-    resolution: {integrity: sha512-gS4rv2Kd/Q8ek3ztQ8Kc5e0J6n853QcbZ9ISZtTxw9UHn/4Wg9rwUYyyLYJc0CBXGZG2grJBQJk1uqEc91jU8Q==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/cerebras@1.0.47':
-    resolution: {integrity: sha512-K8Q8TOPuyIbXOi1R9O+5JM2v+NbQRv1uLfgg8QBUI4/tKPC0yu6MUcg5qk/lk4FLacI7T+45lhgcHUCg/FzsYA==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/deepseek@1.0.45':
-    resolution: {integrity: sha512-DrV5KFfii+LS38Ky6dY3fmfCBybxAQ0/HyImf8fhm2AfNtfZvANSYre5zBVLH5YkZRdESZGUhISGgzjFs6vtVA==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/gateway@2.0.109':
-    resolution: {integrity: sha512-jvTQnfmcKD/bc8fbp2bbaO8QvqSPaj7lv5rj9kj/GLHUfTGpjQV3pH7GdO4fDi1SX2PdHpPQY0y6rxJ05Xo5cg==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/google-vertex@3.0.146':
-    resolution: {integrity: sha512-/rel0/S71P/iGOMyTlj6flSnRK29DT/7oCVcVSpFfkrfZvhRh14qxJ5E3TDPJH4dD95X5mBj1NYo+SVoddN34A==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/google@2.0.78':
-    resolution: {integrity: sha512-21AeBlmeXcFVzujaW6I6bWSENYAVpaEYZ767Pv4LJeuSt7F6TR3/SutbLhi6n9XBiT+F5kWOtJnt/VPLHHb7XA==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/groq@2.0.43':
-    resolution: {integrity: sha512-D2BVVeID0nX4USXApbN2QPJ8yXudDDJuRPfvHubzw0zHP5fjyS8QnDLlBgK9xB2BVaKryg6nxlA7itDnmA7uxA==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/mistral@2.0.36':
-    resolution: {integrity: sha512-8p1Fa5AwnrdZJMgSaFDhnmwfEeddbR8SXcFAwbL3wTouBx0Q+2nohGoIWleJTPuQqeAW2FaBMMTt+DKpdFqjEw==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/openai-compatible@1.0.42':
-    resolution: {integrity: sha512-zEvULhRonXDacqpjJGgOhADHsQnPwrx3dWj0wOev5ASUlzVlOO8PhUhXE+tr8v70xc4xmXHEkVSAV/MGVqu69w==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/openai@2.0.110':
-    resolution: {integrity: sha512-PVbq0vXo6LVBCKeIOiDsOfrUIL2IOkMUipWP53SJZppDo594kbu5BFs/NdwnJMAX4q6EM6sGPVv751RN9PrZ9A==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/perplexity@2.0.33':
-    resolution: {integrity: sha512-gJzzD/Jg4e9tqq/NLI/L+nNDssHOWLZPqSmbbNTIGyEkN70DZvFbeNcBySqH13IbqtUAH0vD8Duf8Yi4jZigyQ==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/provider-utils@3.0.28':
-    resolution: {integrity: sha512-bXlX1WX7E50a2N+AJW+1a/x63m52aPhm+6xYe5THxWrx9vW9NR7E2Ay+1G1ndlCdMdYKo2Fnsd7kBhuyQPaphw==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/provider@2.0.3':
-    resolution: {integrity: sha512-h88OPkavHTiN9tMn2l5awAznGB0lXzjcLhgR1/rvjB2zlLprsNxbM2tt6OJsHUxduLC3klq0/eqaSf6fX5XVww==}
-    engines: {node: '>=18'}
-
-  '@ai-sdk/togetherai@1.0.45':
-    resolution: {integrity: sha512-dedlp1iFG37BZlxAvhfvTmGdP5JML7X3w0pxp19Hysi1BaJlS5b2aLB8RKNUThLDKxwoULW20ndNvLMRSANeEQ==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@ai-sdk/xai@2.0.76':
-    resolution: {integrity: sha512-OfmSestD/bKeFsv4P1PPsLY8apzLVZfpygLXhHdRqT4p/o4WCfu05m6ZiuALp46tfPwOCdoxcjuQdvfv/9J8Tg==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  '@alloc/quick-lru@5.2.0':
-    resolution: {integrity: sha512-UrcABB+4bUrFABwbluTIBErXwvbsU/V7TZWfmbgJfbkwiBuziS9gxdODUyuiecfdGQ85jglMW6juS3+z5TsKLw==}
-    engines: {node: '>=10'}
-
-  '@antfu/install-pkg@1.1.0':
-    resolution: {integrity: sha512-MGQsmw10ZyI+EJo45CdSER4zEb+p31LpDAFp2Z3gkSd1yqVZGi0Ebx++YTEMonJy4oChEMLsxZ64j8FH6sSqtQ==}
-
-  '@anthropic-ai/claude-agent-sdk@0.2.87':
-    resolution: {integrity: sha512-WWmgBPxPhBOvNT0ujI8vPTI2lK+w5YEkEZ/y1mH0EDkK/0kBnxVJNhCtG5vnueiAViwLoUOFn66pbkDiivijdA==}
-    engines: {node: '>=18.0.0'}
-    peerDependencies:
-      zod: ^4.0.0
-
-  '@anthropic-ai/sdk@0.39.0':
-    resolution: {integrity: sha512-eMyDIPRZbt1CCLErRCi3exlAvNkBtRe+kW5vvJyef93PmNr/clstYgHhtvmkxN82nlKgzyGPCyGxrm0JQ1ZIdg==}
-
-  '@anthropic-ai/sdk@0.73.0':
-    resolution: {integrity: sha512-URURVzhxXGJDGUGFunIOtBlSl7KWvZiAAKY/ttTkZAkXT9bTPqdk2eK0b8qqSxXpikh3QKPnPYpiyX98zf5ebw==}
-    hasBin: true
-    peerDependencies:
-      zod: ^3.25.0 || ^4.0.0
-    peerDependenciesMeta:
-      zod:
-        optional: true
-
-  '@anthropic-ai/sdk@0.74.0':
-    resolution: {integrity: sha512-srbJV7JKsc5cQ6eVuFzjZO7UR3xEPJqPamHFIe29bs38Ij2IripoAhC0S5NslNbaFUYqBKypmmpzMTpqfHEUDw==}
-    hasBin: true
-    peerDependencies:
-      zod: ^3.25.0 || ^4.0.0
-    peerDependenciesMeta:
-      zod:
-        optional: true
-
-  '@astrojs/compiler@2.13.1':
-    resolution: {integrity: sha512-f3FN83d2G/v32ipNClRKgYv30onQlMZX1vCeZMjPsMMPl1mDpmbl0+N5BYo4S/ofzqJyS5hvwacEo0CCVDn/Qg==}
-
-  '@astrojs/internal-helpers@0.7.6':
-    resolution: {integrity: sha512-GOle7smBWKfMSP8osUIGOlB5kaHdQLV3foCsf+5Q9Wsuu+C6Fs3Ez/ttXmhjZ1HkSgsogcM1RXSjjOVieHq16Q==}
-
-  '@astrojs/markdown-remark@6.3.11':
-    resolution: {integrity: sha512-hcaxX/5aC6lQgHeGh1i+aauvSwIT6cfyFjKWvExYSxUhZZBBdvCliOtu06gbQyhbe0pGJNoNmqNlQZ5zYUuIyQ==}
-
-  '@astrojs/mdx@4.3.14':
-    resolution: {integrity: sha512-FBrqJQORVm+rkRa2TS5CjU9PBA6hkhrwLVBSS9A77gN2+iehvjq1w6yya/d0YKC7osiVorKkr3Qd9wNbl0ZkGA==}
-    engines: {node: 18.20.8 || ^20.3.0 || >=22.0.0}
-    peerDependencies:
-      astro: ^5.0.0
-
-  '@astrojs/prism@3.3.0':
-    resolution: {integrity: sha512-q8VwfU/fDZNoDOf+r7jUnMC2//H2l0TuQ6FkGJL8vD8nw/q5KiL3DS1KKBI3QhI9UQhpJ5dc7AtqfbXWuOgLCQ==}
-    engines: {node: 18.20.8 || ^20.3.0 || >=22.0.0}
-
-  '@astrojs/react@4.4.2':
-    resolution: {integrity: sha512-1tl95bpGfuaDMDn8O3x/5Dxii1HPvzjvpL2YTuqOOrQehs60I2DKiDgh1jrKc7G8lv+LQT5H15V6QONQ+9waeQ==}
-    engines: {node: 18.20.8 || ^20.3.0 || >=22.0.0}
-    peerDependencies:
-      '@types/react': ^17.0.50 || ^18.0.21 || ^19.0.0
-      '@types/react-dom': ^17.0.17 || ^18.0.6 || ^19.0.0
-      react: ^17.0.2 || ^18.0.0 || ^19.0.0
-      react-dom: ^17.0.2 || ^18.0.0 || ^19.0.0
-
-  '@astrojs/sitemap@3.7.3':
-    resolution: {integrity: sha512-f8euLVsyeAmAkSm/1M2Kb8sL8byQmfgbvBNaHFItCheTj/IpiJYSEWVcqDHZ/yEHxiS7+w87mQkzwZaPHmk5GA==}
-
-  '@astrojs/tailwind@6.0.2':
-    resolution: {integrity: sha512-j3mhLNeugZq6A8dMNXVarUa8K6X9AW+QHU9u3lKNrPLMHhOQ0S7VeWhHwEeJFpEK1BTKEUY1U78VQv2gN6hNGg==}
-    peerDependencies:
-      astro: ^3.0.0 || ^4.0.0 || ^5.0.0
-      tailwindcss: ^3.0.24
-
-  '@astrojs/telemetry@3.3.0':
-    resolution: {integrity: sha512-UFBgfeldP06qu6khs/yY+q1cDAaArM2/7AEIqQ9Cuvf7B1hNLq0xDrZkct+QoIGyjq56y8IaE2I3CTvG99mlhQ==}
-    engines: {node: 18.20.8 || ^20.3.0 || >=22.0.0}
-
-  '@aws-crypto/crc32@5.2.0':
-    resolution: {integrity: sha512-nLbCWqQNgUiwwtFsen1AdzAtvuLRsQS8rYgMuxCrdKf9kOssamGLuPwyTY9wyYblNr9+1XM8v6zoDTPPSIeANg==}
-    engines: {node: '>=16.0.0'}
-
-  '@aws-crypto/sha256-browser@5.2.0':
-    resolution: {integrity: sha512-AXfN/lGotSQwu6HNcEsIASo7kWXZ5HYWvfOmSNKDsEqC4OashTp8alTmaz+F7TC2L083SFv5RdB+qU3Vs1kZqw==}
-
-  '@aws-crypto/sha256-js@5.2.0':
-    resolution: {integrity: sha512-FFQQyu7edu4ufvIZ+OadFpHHOt+eSTBaYaki44c+akjg7qZg9oOQeLlk77F6tSYqjDAFClrHJk9tMf0HdVyOvA==}
-    engines: {node: '>=16.0.0'}
-
-  '@aws-crypto/supports-web-crypto@5.2.0':
-    resolution: {integrity: sha512-iAvUotm021kM33eCdNfwIN//F77/IADDSs58i+MDaOqFrVjZo9bAal0NK7HurRuWLLpF1iLX7gbWrjHjeo+YFg==}
-
-  '@aws-crypto/util@5.2.0':
-    resolution: {integrity: sha512-4RkU9EsI6ZpBve5fseQlGNUWKMa1RLPQ1dnjnQoe07ldfIzcsGb5hC5W0Dm7u423KWzawlrpbjXBrXCEv9zazQ==}
-
-  '@aws-sdk/client-bedrock-runtime@3.1075.0':
-    resolution: {integrity: sha512-LDGtNMOxnMz0dw9q+8z0f/X+Soj8OyiYg5zPcqToLh6H9/HHlazogFj7PXqFLOhnvhCqyAvKVAC1ZrL0RX418g==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/core@3.974.23':
-    resolution: {integrity: sha512-MiWR/uWjxjFXGzrE0Ghc5lWxUxzHsUWFhV+OX7M4cR9SrmrnZs6TXavnCWnzzdwJeFri34xQo81rvGNzK3c4BQ==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/credential-provider-env@3.972.49':
-    resolution: {integrity: sha512-liB3yQNHCM9k/gu/w36XHMKPluT7HTlnGUhRbBGSISDQkcr/Sy1zsZabiuvQj8WG5yW573u9RehrBvvnIQ9OEQ==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/credential-provider-http@3.972.51':
-    resolution: {integrity: sha512-XET0H2oofciJ5lMRWNIvRjAP7Q3wv2XT+JtJJEdhPWUMwe3TvQ9qcxonpu7vXmNngncvFpi4E2It+Tamas/naA==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/credential-provider-ini@3.972.56':
-    resolution: {integrity: sha512-IAmc61hbgQiHht9U3x0tnRwz0lzdwOwD/i9voRgdJrKamF+JtmrBOsW9GwB7mfFonNWOWL4qARWYrF8veEMe3w==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/credential-provider-login@3.972.55':
-    resolution: {integrity: sha512-hBBkANo3cDn+h2qxxzER4a+J8JCO9o9Z/YYmU7iky6AcaarX5RRdRcHNC6SLdwY0vAXQygn6soUbDqPn3GghaA==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/credential-provider-node@3.972.58':
-    resolution: {integrity: sha512-OyCLVmSI7pZO8hxwNVX6pXhTVlJqRBTp+ijdEfJSUj0RyjHnF602OfAarOzGq6wkGodeFkYBt8MmJ6A6ycRgWw==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/credential-provider-process@3.972.49':
-    resolution: {integrity: sha512-C8h36lBuC/RnBSsjlO+dn6xZm3KbAl5vpJaVPAfQnMmz2/OISmKOc8XZcqMQgO2ADwBYNRMM6Kf3vz9G/TulMQ==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/credential-provider-sso@3.972.55':
-    resolution: {integrity: sha512-1FkOz74Ea5QGS9jtIoXp55T/IkSS3spv+nLTT07fRY/+T5xmEOqaYBVIaEmX4zTNvbV6g2lrtlaVKWEoNyJt3w==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/credential-provider-web-identity@3.972.55':
-    resolution: {integrity: sha512-g2BoECD1q01kTPByi56+VLVvdWDzMkKIcr77qixpqH0okw2t0U5CoPv+6S8v/D1Y2Wa6QKKtn6XAtDzP+Kfpvg==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/eventstream-handler-node@3.972.22':
-    resolution: {integrity: sha512-tqPJv0dz4+O0hWGm1a6YekcMZyPhDFs/zH73Von7icaVT5n0Jqvm86typ3jRrG+qoUdPhALOnboRLTmnWQTlYQ==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/middleware-eventstream@3.972.18':
-    resolution: {integrity: sha512-OHpk8YoZi3yexPq8aFt1vN1IxA2zLKvsIR5GpWYylX/ve6kQmY7wxHNSFy/D3t2apMZ16rs76Co4dJWcDyIk3A==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/middleware-websocket@3.972.31':
-    resolution: {integrity: sha512-ps1rumU1LybSFHaW9dTDgkhCMJLVaedEY78kKSzUDDY+b9974/g6aiaYYA0U9WV0oL4CJCJrVWG+EZ/qr4or7g==}
-    engines: {node: '>= 14.0.0'}
-
-  '@aws-sdk/nested-clients@3.997.23':
-    resolution: {integrity: sha512-gO93ZPsI2bxeFZD42f1/qjDw6FAZkNZcKRO94LIiT03fzOmcJ9e/tunxjVjA1Rl69ClmVJzz8H3G9CdKef10PA==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/signature-v4-multi-region@3.996.35':
-    resolution: {integrity: sha512-6L/VWs+Wch2stHemCGTmUNqKLMzURxQDK5boNG3Jn3kAOp71meDUuS5sbObpEvFxHDq0uWeSLFDNSYsjNt+Dlg==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/token-providers@3.1074.0':
-    resolution: {integrity: sha512-pv80IzgGW4RnXWtft692chZOM9i6PhebVsLCcnaM4dBEPZva2fE6FXAHs76G7Rc7s3yGyX/68G0nZMrUy+Vmpg==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/token-providers@3.1075.0':
-    resolution: {integrity: sha512-SsunyegDXq68TaN5Iut8ElErGIAA6DeuKPKd5/v0lpSmZBI7ZKOC5OALyi1MRHsl/cuO/zHkJL3vKnNHdGaI+Q==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/types@3.973.13':
-    resolution: {integrity: sha512-pEHZqRkAlHfnfAU9tK+WpKv/gBNjGJrHMgA3A0iYRGyswBS2t0pfez+lWlwktb3Bqa0ovh7w/QJTFwp3fDxLNg==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/util-locate-window@3.965.8':
-    resolution: {integrity: sha512-uUbMs1cBZPafD0ohUj6EwNf0fPZ534NvBxHox4hjX+0Rxq5paSYUem7+hi833pYrzrcnBATKIYpR02MDXT5M9g==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws-sdk/xml-builder@3.972.31':
-    resolution: {integrity: sha512-SzE4Pgyl+hDF+BuyuzxUSpwnuUu9lJuO1YGgteG89/4Qv0+2IQiVQqdbPV32IozLvXWQChPQcdkk/sKvb1QHiQ==}
-    engines: {node: '>=20.0.0'}
-
-  '@aws/lambda-invoke-store@0.2.4':
-    resolution: {integrity: sha512-iY8yvjE0y651BixKNPgmv1WrQc+GZ142sb0z4gYnChDDY2YqI4P/jsSopBWrKfAt7LOJAkOXt7rC/hms+WclQQ==}
-    engines: {node: '>=18.0.0'}
-
-  '@babel/code-frame@7.29.7':
-    resolution: {integrity: sha512-Aup7aUOfpbAUg2ROOJN6Iw5f9DMBlzu0mIkm/malLQFN/YQgO48wCj0Kxa3sEHJvPVFg7siR+qRInwXd2qhQKw==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/compat-data@7.29.7':
-    resolution: {integrity: sha512-locTkQyKvwIEgBzVrn8693ebc97F2U8ZHjbXwDXJ5Fn2TCpNwTlKcaKLkdHop5c/icOFE7qt7Q9JC5hnKNa6Gg==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/core@7.29.7':
-    resolution: {integrity: sha512-RgHBCvtjbOK2gXSNBNIkNoEc9qoVEtau3hj8gEqKQuL3HZAibKarWFEI3Lfm6EYKkLalOh8eSrj9b+ch9H/VBA==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/generator@7.29.7':
-    resolution: {integrity: sha512-DkXD5OJQaAQIdZ1bt3UZdEnHAn9Imd3IVBdX03UFe+ony9Ojw5pzr9YVKGDY1jt+Gcn/FnGkNf8r+Vj5NOJWtQ==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-compilation-targets@7.29.7':
-    resolution: {integrity: sha512-wem6WaBj4NaVYVdNhLPPVacES6ZJ+KBBfSkTMD3YZxbP3rm3Di85tJU5ljaUNhaOynt+Aj0xruhYuzQBt8n71g==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-globals@7.29.7':
-    resolution: {integrity: sha512-3nQVUAtvkKH9zahfWgw96Jc/uFOmjACE1kQz82E2lqWmHBgjzbNlsC22nuQTfahmWeQtTq5nQ/4Nnd2A1wj4zA==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-module-imports@7.29.7':
-    resolution: {integrity: sha512-ejHwrQQYcm9xnTivShn2IDOlIzInN34AXskvq9QicvCtEzq1Vzclu/tKF8Jq1Cg8JG2GL6/EmjgsCT7lXepE3g==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-module-transforms@7.29.7':
-    resolution: {integrity: sha512-UPUVSyXbOh627KiCIGQSgwWzGeBKLkaJ9PJEdrngIwMSzxLR4jS4+f1f1jb7VzBbg8nFLaYotvVPFCTqdrmTAg==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0
-
-  '@babel/helper-plugin-utils@7.29.7':
-    resolution: {integrity: sha512-G7sHYigPY17oO5SYWnfD/0MTBwVR781S/JI643e/JhUYgVgWE/61SoW3NH9KWUKyKq5LVh3npif99Wkt6j86Jw==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-string-parser@7.29.7':
-    resolution: {integrity: sha512-Pb5ijPrZ89GDH8223L4UP8i6QApWxs04RbPQJTeWDV0/keR2E36MeKnyr6LYmUUvqRRI+Iv87SuF1W6ErINzYw==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-validator-identifier@7.29.7':
-    resolution: {integrity: sha512-qehxGkRj55h/ff8EMaJ+cYhyaKlHIxqYDn682wQD7RNp9UujOQsHog2uS0r2vzr4pW+sXf90NeeayjcNaX3fFg==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helper-validator-option@7.29.7':
-    resolution: {integrity: sha512-N9ZErrD+yW5geCDtBqnOoxmR8+tNKiGuxKlDpuJxfsqpa2dFcexaziGAE/qoHLiDDreVNMupxGmSoNlyvsA3gw==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/helpers@7.29.7':
-    resolution: {integrity: sha512-1k2lAGRMfHTcwuNYcCNUmaUffmQv8KWMfh2iJUUeRlwlwH4FdNG7mfPI10NPfLHJFThE4Tyr4mv7kTNZOiPuBg==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/parser@7.29.7':
-    resolution: {integrity: sha512-hnORnjP/1P/zFEndoeX+n+t1RwWRJiJpM/jO7FW32Kn9r5+sJB2JWOdYo4L6k78j15eCwY3Gm/7364B1EMwtNg==}
-    engines: {node: '>=6.0.0'}
-    hasBin: true
-
-  '@babel/plugin-transform-react-jsx-self@7.29.7':
-    resolution: {integrity: sha512-TL0hMc9xzy86VD31nUiwzd5otRAcyEPcsegCxolO0PvcXuH1v0kECe/UIznYFihpkvU5wg/jk4v0TTEFfm53fw==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-
-  '@babel/plugin-transform-react-jsx-source@7.29.7':
-    resolution: {integrity: sha512-06IyK09H3wi4cGbhDBwp5gUGo0IKtnYa8tyTiephirPCK6fbobVGiXMMI5zLQ4aKEYP3wZ3ArU44o+8KMrSG/Q==}
-    engines: {node: '>=6.9.0'}
-    peerDependencies:
-      '@babel/core': ^7.0.0-0
-
-  '@babel/runtime@7.29.7':
-    resolution: {integrity: sha512-Nq8OhGWiZIZGV6hLHoyAKLLcJihP/xFeBMGJoUrxTX2psI8dCifzLhZISFb+VWS3wFMRDmCGw5R+dOySCqPLhw==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/template@7.29.7':
-    resolution: {integrity: sha512-puq+Gf35oI24FeN11LkoUQFqv9uwNeWpxXZi/Ji3rRIoKAzKnxRaZ+Gkj0vKS9ZCiTESfng1N9LyOyXvo+m+Gg==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/traverse@7.29.7':
-    resolution: {integrity: sha512-EhlfNQtZ+NK22w5BM61ciuiq1m58ed33Wr1Xan//ZRTy6hgjnwyCffRYwzsGXdASJSUJ1guZILsErh1eQcl+zw==}
-    engines: {node: '>=6.9.0'}
-
-  '@babel/types@7.29.7':
-    resolution: {integrity: sha512-4zBIxpPzowiZpusoFkyGVwakdRJUyuH5PxQ/PrqghfdFWWasvnCdPfQXHrenDai+gyLARulZjZowCOj6fjT4pA==}
-    engines: {node: '>=6.9.0'}
-
-  '@balena/dockerignore@1.0.2':
-    resolution: {integrity: sha512-wMue2Sy4GAVTk6Ic4tJVcnfdau+gx2EnG7S+uAEe+TWJFqE4YoWN4/H8MSLj4eYJKxGg26lZwboEniNiNwZQ6Q==}
-
-  '@bare-ts/lib@0.4.0':
-    resolution: {integrity: sha512-uTb12lcDkvwwwGb/4atNy/+2Xuksx88tlxKuwnDuxmsOFVo4R/WsE+fmAf2nWtzHDi7m6NDw8Ke9j+XlNBLoJg==}
-    engines: {node: ^14.18.0 || >=16.0.0}
-
-  '@bare-ts/tools@0.15.0':
-    resolution: {integrity: sha512-YMDrsZjyzW0rFMya0CgNDwR8O0rH1QdbZG1jZblwvt0dCCxbAseapnc3BZ5h1/bkJ9mYdPTedge0S7UaQzZKmg==}
-    engines: {node: '>=16.9.0'}
-    hasBin: true
-    peerDependencies:
-      '@bare-ts/lib': '>=0.3.0 <=0.4.0'
-
-  '@biomejs/biome@2.4.10':
-    resolution: {integrity: sha512-xxA3AphFQ1geij4JTHXv4EeSTda1IFn22ye9LdyVPoJU19fNVl0uzfEuhsfQ4Yue/0FaLs2/ccVi4UDiE7R30w==}
-    engines: {node: '>=14.21.3'}
-    hasBin: true
-
-  '@biomejs/cli-darwin-arm64@2.4.10':
-    resolution: {integrity: sha512-vuzzI1cWqDVzOMIkYyHbKqp+AkQq4K7k+UCXWpkYcY/HDn1UxdsbsfgtVpa40shem8Kax4TLDLlx8kMAecgqiw==}
-    engines: {node: '>=14.21.3'}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@biomejs/cli-darwin-x64@2.4.10':
-    resolution: {integrity: sha512-14fzASRo+BPotwp7nWULy2W5xeUyFnTaq1V13Etrrxkrih+ez/2QfgFm5Ehtf5vSjtgx/IJycMMpn5kPd5ZNaA==}
-    engines: {node: '>=14.21.3'}
-    cpu: [x64]
-    os: [darwin]
-
-  '@biomejs/cli-linux-arm64-musl@2.4.10':
-    resolution: {integrity: sha512-WrJY6UuiSD/Dh+nwK2qOTu8kdMDlLV3dLMmychIghHPAysWFq1/DGC1pVZx8POE3ZkzKR3PUUnVrtZfMfaJjyQ==}
-    engines: {node: '>=14.21.3'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@biomejs/cli-linux-arm64@2.4.10':
-    resolution: {integrity: sha512-7MH1CMW5uuxQ/s7FLST63qF8B3Hgu2HRdZ7tA1X1+mk+St4JOuIrqdhIBnnyqeyWJNI+Bww7Es5QZ0wIc1Cmkw==}
-    engines: {node: '>=14.21.3'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@biomejs/cli-linux-x64-musl@2.4.10':
-    resolution: {integrity: sha512-kDTi3pI6PBN6CiczsWYOyP2zk0IJI08EWEQyDMQWW221rPaaEz6FvjLhnU07KMzLv8q3qSuoB93ua6inSQ55Tw==}
-    engines: {node: '>=14.21.3'}
-    cpu: [x64]
-    os: [linux]
-
-  '@biomejs/cli-linux-x64@2.4.10':
-    resolution: {integrity: sha512-tZLvEEi2u9Xu1zAqRjTcpIDGVtldigVvzug2fTuPG0ME/g8/mXpRPcNgLB22bGn6FvLJpHHnqLnwliOu8xjYrg==}
-    engines: {node: '>=14.21.3'}
-    cpu: [x64]
-    os: [linux]
-
-  '@biomejs/cli-win32-arm64@2.4.10':
-    resolution: {integrity: sha512-umwQU6qPzH+ISTf/eHyJ/QoQnJs3V9Vpjz2OjZXe9MVBZ7prgGafMy7yYeRGnlmDAn87AKTF3Q6weLoMGpeqdQ==}
-    engines: {node: '>=14.21.3'}
-    cpu: [arm64]
-    os: [win32]
-
-  '@biomejs/cli-win32-x64@2.4.10':
-    resolution: {integrity: sha512-aW/JU5GuyH4uxMrNYpoC2kjaHlyJGLgIa3XkhPEZI0uKhZhJZU8BuEyJmvgzSPQNGozBwWjC972RaNdcJ9KyJg==}
-    engines: {node: '>=14.21.3'}
-    cpu: [x64]
-    os: [win32]
-
-  '@borewit/text-codec@0.2.2':
-    resolution: {integrity: sha512-DDaRehssg1aNrH4+2hnj1B7vnUGEjU6OIlyRdkMd0aUdIUvKXrJfXsy8LVtXAy7DRvYVluWbMspsRhz2lcW0mQ==}
-
-  '@braintree/sanitize-url@7.1.2':
-    resolution: {integrity: sha512-jigsZK+sMF/cuiB7sERuo9V7N9jx+dhmHHnQyDSVdpZwVutaBu7WvNYqMDLSgFgfB30n452TP3vjDAvFC973mA==}
-
-  '@browserbasehq/sdk@2.15.0':
-    resolution: {integrity: sha512-yWT7URYwpON1MvYRAA18Vmhg3iIhvj1VMqHC9igdh1CdS740xhYerxlvrm5GxMX5ExnjNbf7tf0k1VOUIvZbbg==}
-
-  '@browserbasehq/stagehand@3.6.0':
-    resolution: {integrity: sha512-wQ3Mv5b2xy64SntWNUbvgd7liWPbQRvGa8KEb1LorwheTkpUZFkt3BpZE8ovMY/lIleV9DfYjbvqghbeOOla4w==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    peerDependencies:
-      patchright-core: ^1.55.2
-      playwright-core: ^1.55.1
-      puppeteer-core: ^24.43.0
-      zod: ^3.25.76 || ^4.2.0
-    peerDependenciesMeta:
-      patchright-core:
-        optional: true
-      playwright-core:
-        optional: true
-      puppeteer-core:
-        optional: true
-
-  '@capsizecss/unpack@4.0.1':
-    resolution: {integrity: sha512-CuNiSqg7+e1cO/GjffyMOm5Tt2jUF9CWHHnvQ/UkqvtkGfHdgwEC0wpmq7fkN3gxwpRnrAN0WzO3vREKmNolMQ==}
-    engines: {node: '>=18'}
-
-  '@chevrotain/types@11.1.2':
-    resolution: {integrity: sha512-U+HFai5+zmJCkK86QsaJtoITlboZHBqrVketcO2ROv865xfCMSFpELQoz1GkX5GzME8pTa+3kbKrZHQtI0gdbw==}
-
-  '@codemirror/autocomplete@6.20.3':
-    resolution: {integrity: sha512-tlosUqb+3BbxCxZdu4tKeRghPFC+QM7q4X5YhKV2eCmPG+1r2F3f4AaSz5sCrFqUtX4Jh20VFTKecl16MgiV9g==}
-
-  '@codemirror/commands@6.10.4':
-    resolution: {integrity: sha512-Ryk9y9T0FFVF0cUGhAknveAyUOl/A1qReTFi+qPKtOh2Z9F4AUBz3XOrYD4ZEgZirdugVzHvd/2/Wcwy5OliTg==}
-
-  '@codemirror/lang-javascript@6.2.5':
-    resolution: {integrity: sha512-zD4e5mS+50htS7F+TYjBPsiIFGanfVqg4HyUz6WNFikgOPf2BgKlx+TQedI1w6n/IqRBVBbBWmGFdLB/7uxO4A==}
-
-  '@codemirror/lang-json@6.0.2':
-    resolution: {integrity: sha512-x2OtO+AvwEHrEwR0FyyPtfDUiloG3rnVTSZV1W8UteaLL8/MajQd8DpvUb2YVzC+/T18aSDv0H9mu+xw0EStoQ==}
-
-  '@codemirror/language@6.12.4':
-    resolution: {integrity: sha512-1q4PaT+o6PbgpkJt4Q8Fv5XJxTy4FUZ4MWETtyiDw3J0Pyr9E2vqcKL+k9wcvjNTIsauxvE7OfmWj3FRPHQ76A==}
-
-  '@codemirror/lint@6.9.7':
-    resolution: {integrity: sha512-28/+iWLYxKxsvGYhSYL7zaCZqLz5+FFFDq9tVsvGv9kv8RY4fFAchJ5WX9M3YrrRlTIsECjsXPqeNgnSmNP2dg==}
-
-  '@codemirror/search@6.7.1':
-    resolution: {integrity: sha512-uMe5UO6PamJtSHrXhhHOzSX3ReWtiJrva6GnPMwSOrZtiExb5X5eExhr2OUZQVvdxPsKpY3Ro2mFbQadpPWmHA==}
-
-  '@codemirror/state@6.7.0':
-    resolution: {integrity: sha512-Zbl9NyscLMZkfXPQnNAIIAFftidrA1UbcJEIMp24C0Bukc2I5T8wJS0wsXYsnDOqCFJUeJ1BITGNs5CqPDSmSg==}
-
-  '@codemirror/theme-one-dark@6.1.3':
-    resolution: {integrity: sha512-NzBdIvEJmx6fjeremiGp3t/okrLPYT0d9orIc7AFun8oZcRk58aejkqhv6spnz4MLAevrKNPMQYXEWMg4s+sKA==}
-
-  '@codemirror/view@6.43.4':
-    resolution: {integrity: sha512-YImu23iyKfncJzT7sRy+rEqEhSc8RhOHqDxwy4WzXRKJwYm6iwf/9OJk5ctCAdZ6yi2ZqaGEvmf55fSVqMDrgg==}
-
-  '@emnapi/runtime@1.11.1':
-    resolution: {integrity: sha512-vgj7R3y3Wgx24IQaGPA/R6YFXLHVMOZ0uVEyIQPaWs+rd1AzfEMXlAC22FYwO1XkKR6NPsq7mUandH8oIRdZFw==}
-
-  '@esbuild/aix-ppc64@0.21.5':
-    resolution: {integrity: sha512-1SDgH6ZSPTlggy1yI6+Dbkiz8xzpHJEVAlF/AM1tHPLsf5STom9rwtjE4hKAF20FfXXNTFqEYXyJNWh1GiZedQ==}
-    engines: {node: '>=12'}
-    cpu: [ppc64]
-    os: [aix]
-
-  '@esbuild/aix-ppc64@0.25.12':
-    resolution: {integrity: sha512-Hhmwd6CInZ3dwpuGTF8fJG6yoWmsToE+vYgD4nytZVxcu1ulHpUQRAB1UJ8+N1Am3Mz4+xOByoQoSZf4D+CpkA==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [aix]
-
-  '@esbuild/aix-ppc64@0.27.4':
-    resolution: {integrity: sha512-cQPwL2mp2nSmHHJlCyoXgHGhbEPMrEEU5xhkcy3Hs/O7nGZqEpZ2sUtLaL9MORLtDfRvVl2/3PAuEkYZH0Ty8Q==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [aix]
-
-  '@esbuild/android-arm64@0.21.5':
-    resolution: {integrity: sha512-c0uX9VAUBQ7dTDCjq+wdyGLowMdtR/GoC2U5IYk/7D1H1JYC0qseD7+11iMP2mRLN9RcCMRcjC4YMclCzGwS/A==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [android]
-
-  '@esbuild/android-arm64@0.25.12':
-    resolution: {integrity: sha512-6AAmLG7zwD1Z159jCKPvAxZd4y/VTO0VkprYy+3N2FtJ8+BQWFXU+OxARIwA46c5tdD9SsKGZ/1ocqBS/gAKHg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [android]
-
-  '@esbuild/android-arm64@0.27.4':
-    resolution: {integrity: sha512-gdLscB7v75wRfu7QSm/zg6Rx29VLdy9eTr2t44sfTW7CxwAtQghZ4ZnqHk3/ogz7xao0QAgrkradbBzcqFPasw==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [android]
-
-  '@esbuild/android-arm@0.21.5':
-    resolution: {integrity: sha512-vCPvzSjpPHEi1siZdlvAlsPxXl7WbOVUBBAowWug4rJHb68Ox8KualB+1ocNvT5fjv6wpkX6o/iEpbDrf68zcg==}
-    engines: {node: '>=12'}
-    cpu: [arm]
-    os: [android]
-
-  '@esbuild/android-arm@0.25.12':
-    resolution: {integrity: sha512-VJ+sKvNA/GE7Ccacc9Cha7bpS8nyzVv0jdVgwNDaR4gDMC/2TTRc33Ip8qrNYUcpkOHUT5OZ0bUcNNVZQ9RLlg==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [android]
-
-  '@esbuild/android-arm@0.27.4':
-    resolution: {integrity: sha512-X9bUgvxiC8CHAGKYufLIHGXPJWnr0OCdR0anD2e21vdvgCI8lIfqFbnoeOz7lBjdrAGUhqLZLcQo6MLhTO2DKQ==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [android]
-
-  '@esbuild/android-x64@0.21.5':
-    resolution: {integrity: sha512-D7aPRUUNHRBwHxzxRvp856rjUHRFW1SdQATKXH2hqA0kAZb1hKmi02OpYRacl0TxIGz/ZmXWlbZgjwWYaCakTA==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [android]
-
-  '@esbuild/android-x64@0.25.12':
-    resolution: {integrity: sha512-5jbb+2hhDHx5phYR2By8GTWEzn6I9UqR11Kwf22iKbNpYrsmRB18aX/9ivc5cabcUiAT/wM+YIZ6SG9QO6a8kg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [android]
-
-  '@esbuild/android-x64@0.27.4':
-    resolution: {integrity: sha512-PzPFnBNVF292sfpfhiyiXCGSn9HZg5BcAz+ivBuSsl6Rk4ga1oEXAamhOXRFyMcjwr2DVtm40G65N3GLeH1Lvw==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [android]
-
-  '@esbuild/darwin-arm64@0.21.5':
-    resolution: {integrity: sha512-DwqXqZyuk5AiWWf3UfLiRDJ5EDd49zg6O9wclZ7kUMv2WRFr4HKjXp/5t8JZ11QbQfUS6/cRCKGwYhtNAY88kQ==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@esbuild/darwin-arm64@0.25.12':
-    resolution: {integrity: sha512-N3zl+lxHCifgIlcMUP5016ESkeQjLj/959RxxNYIthIg+CQHInujFuXeWbWMgnTo4cp5XVHqFPmpyu9J65C1Yg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@esbuild/darwin-arm64@0.27.4':
-    resolution: {integrity: sha512-b7xaGIwdJlht8ZFCvMkpDN6uiSmnxxK56N2GDTMYPr2/gzvfdQN8rTfBsvVKmIVY/X7EM+/hJKEIbbHs9oA4tQ==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@esbuild/darwin-x64@0.21.5':
-    resolution: {integrity: sha512-se/JjF8NlmKVG4kNIuyWMV/22ZaerB+qaSi5MdrXtd6R08kvs2qCN4C09miupktDitvh8jRFflwGFBQcxZRjbw==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [darwin]
-
-  '@esbuild/darwin-x64@0.25.12':
-    resolution: {integrity: sha512-HQ9ka4Kx21qHXwtlTUVbKJOAnmG1ipXhdWTmNXiPzPfWKpXqASVcWdnf2bnL73wgjNrFXAa3yYvBSd9pzfEIpA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [darwin]
-
-  '@esbuild/darwin-x64@0.27.4':
-    resolution: {integrity: sha512-sR+OiKLwd15nmCdqpXMnuJ9W2kpy0KigzqScqHI3Hqwr7IXxBp3Yva+yJwoqh7rE8V77tdoheRYataNKL4QrPw==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [darwin]
-
-  '@esbuild/freebsd-arm64@0.21.5':
-    resolution: {integrity: sha512-5JcRxxRDUJLX8JXp/wcBCy3pENnCgBR9bN6JsY4OmhfUtIHe3ZW0mawA7+RDAcMLrMIZaf03NlQiX9DGyB8h4g==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [freebsd]
-
-  '@esbuild/freebsd-arm64@0.25.12':
-    resolution: {integrity: sha512-gA0Bx759+7Jve03K1S0vkOu5Lg/85dou3EseOGUes8flVOGxbhDDh/iZaoek11Y8mtyKPGF3vP8XhnkDEAmzeg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [freebsd]
-
-  '@esbuild/freebsd-arm64@0.27.4':
-    resolution: {integrity: sha512-jnfpKe+p79tCnm4GVav68A7tUFeKQwQyLgESwEAUzyxk/TJr4QdGog9sqWNcUbr/bZt/O/HXouspuQDd9JxFSw==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [freebsd]
-
-  '@esbuild/freebsd-x64@0.21.5':
-    resolution: {integrity: sha512-J95kNBj1zkbMXtHVH29bBriQygMXqoVQOQYA+ISs0/2l3T9/kj42ow2mpqerRBxDJnmkUDCaQT/dfNXWX/ZZCQ==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [freebsd]
-
-  '@esbuild/freebsd-x64@0.25.12':
-    resolution: {integrity: sha512-TGbO26Yw2xsHzxtbVFGEXBFH0FRAP7gtcPE7P5yP7wGy7cXK2oO7RyOhL5NLiqTlBh47XhmIUXuGciXEqYFfBQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [freebsd]
-
-  '@esbuild/freebsd-x64@0.27.4':
-    resolution: {integrity: sha512-2kb4ceA/CpfUrIcTUl1wrP/9ad9Atrp5J94Lq69w7UwOMolPIGrfLSvAKJp0RTvkPPyn6CIWrNy13kyLikZRZQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [freebsd]
-
-  '@esbuild/linux-arm64@0.21.5':
-    resolution: {integrity: sha512-ibKvmyYzKsBeX8d8I7MH/TMfWDXBF3db4qM6sy+7re0YXya+K1cem3on9XgdT2EQGMu4hQyZhan7TeQ8XkGp4Q==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@esbuild/linux-arm64@0.25.12':
-    resolution: {integrity: sha512-8bwX7a8FghIgrupcxb4aUmYDLp8pX06rGh5HqDT7bB+8Rdells6mHvrFHHW2JAOPZUbnjUpKTLg6ECyzvas2AQ==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@esbuild/linux-arm64@0.27.4':
-    resolution: {integrity: sha512-7nQOttdzVGth1iz57kxg9uCz57dxQLHWxopL6mYuYthohPKEK0vU0C3O21CcBK6KDlkYVcnDXY099HcCDXd9dA==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@esbuild/linux-arm@0.21.5':
-    resolution: {integrity: sha512-bPb5AHZtbeNGjCKVZ9UGqGwo8EUu4cLq68E95A53KlxAPRmUyYv2D6F0uUI65XisGOL1hBP5mTronbgo+0bFcA==}
-    engines: {node: '>=12'}
-    cpu: [arm]
-    os: [linux]
-
-  '@esbuild/linux-arm@0.25.12':
-    resolution: {integrity: sha512-lPDGyC1JPDou8kGcywY0YILzWlhhnRjdof3UlcoqYmS9El818LLfJJc3PXXgZHrHCAKs/Z2SeZtDJr5MrkxtOw==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [linux]
-
-  '@esbuild/linux-arm@0.27.4':
-    resolution: {integrity: sha512-aBYgcIxX/wd5n2ys0yESGeYMGF+pv6g0DhZr3G1ZG4jMfruU9Tl1i2Z+Wnj9/KjGz1lTLCcorqE2viePZqj4Eg==}
-    engines: {node: '>=18'}
-    cpu: [arm]
-    os: [linux]
-
-  '@esbuild/linux-ia32@0.21.5':
-    resolution: {integrity: sha512-YvjXDqLRqPDl2dvRODYmmhz4rPeVKYvppfGYKSNGdyZkA01046pLWyRKKI3ax8fbJoK5QbxblURkwK/MWY18Tg==}
-    engines: {node: '>=12'}
-    cpu: [ia32]
-    os: [linux]
-
-  '@esbuild/linux-ia32@0.25.12':
-    resolution: {integrity: sha512-0y9KrdVnbMM2/vG8KfU0byhUN+EFCny9+8g202gYqSSVMonbsCfLjUO+rCci7pM0WBEtz+oK/PIwHkzxkyharA==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [linux]
-
-  '@esbuild/linux-ia32@0.27.4':
-    resolution: {integrity: sha512-oPtixtAIzgvzYcKBQM/qZ3R+9TEUd1aNJQu0HhGyqtx6oS7qTpvjheIWBbes4+qu1bNlo2V4cbkISr8q6gRBFA==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [linux]
-
-  '@esbuild/linux-loong64@0.21.5':
-    resolution: {integrity: sha512-uHf1BmMG8qEvzdrzAqg2SIG/02+4/DHB6a9Kbya0XDvwDEKCoC8ZRWI5JJvNdUjtciBGFQ5PuBlpEOXQj+JQSg==}
-    engines: {node: '>=12'}
-    cpu: [loong64]
-    os: [linux]
-
-  '@esbuild/linux-loong64@0.25.12':
-    resolution: {integrity: sha512-h///Lr5a9rib/v1GGqXVGzjL4TMvVTv+s1DPoxQdz7l/AYv6LDSxdIwzxkrPW438oUXiDtwM10o9PmwS/6Z0Ng==}
-    engines: {node: '>=18'}
-    cpu: [loong64]
-    os: [linux]
-
-  '@esbuild/linux-loong64@0.27.4':
-    resolution: {integrity: sha512-8mL/vh8qeCoRcFH2nM8wm5uJP+ZcVYGGayMavi8GmRJjuI3g1v6Z7Ni0JJKAJW+m0EtUuARb6Lmp4hMjzCBWzA==}
-    engines: {node: '>=18'}
-    cpu: [loong64]
-    os: [linux]
-
-  '@esbuild/linux-mips64el@0.21.5':
-    resolution: {integrity: sha512-IajOmO+KJK23bj52dFSNCMsz1QP1DqM6cwLUv3W1QwyxkyIWecfafnI555fvSGqEKwjMXVLokcV5ygHW5b3Jbg==}
-    engines: {node: '>=12'}
-    cpu: [mips64el]
-    os: [linux]
-
-  '@esbuild/linux-mips64el@0.25.12':
-    resolution: {integrity: sha512-iyRrM1Pzy9GFMDLsXn1iHUm18nhKnNMWscjmp4+hpafcZjrr2WbT//d20xaGljXDBYHqRcl8HnxbX6uaA/eGVw==}
-    engines: {node: '>=18'}
-    cpu: [mips64el]
-    os: [linux]
-
-  '@esbuild/linux-mips64el@0.27.4':
-    resolution: {integrity: sha512-1RdrWFFiiLIW7LQq9Q2NES+HiD4NyT8Itj9AUeCl0IVCA459WnPhREKgwrpaIfTOe+/2rdntisegiPWn/r/aAw==}
-    engines: {node: '>=18'}
-    cpu: [mips64el]
-    os: [linux]
-
-  '@esbuild/linux-ppc64@0.21.5':
-    resolution: {integrity: sha512-1hHV/Z4OEfMwpLO8rp7CvlhBDnjsC3CttJXIhBi+5Aj5r+MBvy4egg7wCbe//hSsT+RvDAG7s81tAvpL2XAE4w==}
-    engines: {node: '>=12'}
-    cpu: [ppc64]
-    os: [linux]
-
-  '@esbuild/linux-ppc64@0.25.12':
-    resolution: {integrity: sha512-9meM/lRXxMi5PSUqEXRCtVjEZBGwB7P/D4yT8UG/mwIdze2aV4Vo6U5gD3+RsoHXKkHCfSxZKzmDssVlRj1QQA==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [linux]
-
-  '@esbuild/linux-ppc64@0.27.4':
-    resolution: {integrity: sha512-tLCwNG47l3sd9lpfyx9LAGEGItCUeRCWeAx6x2Jmbav65nAwoPXfewtAdtbtit/pJFLUWOhpv0FpS6GQAmPrHA==}
-    engines: {node: '>=18'}
-    cpu: [ppc64]
-    os: [linux]
-
-  '@esbuild/linux-riscv64@0.21.5':
-    resolution: {integrity: sha512-2HdXDMd9GMgTGrPWnJzP2ALSokE/0O5HhTUvWIbD3YdjME8JwvSCnNGBnTThKGEB91OZhzrJ4qIIxk/SBmyDDA==}
-    engines: {node: '>=12'}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@esbuild/linux-riscv64@0.25.12':
-    resolution: {integrity: sha512-Zr7KR4hgKUpWAwb1f3o5ygT04MzqVrGEGXGLnj15YQDJErYu/BGg+wmFlIDOdJp0PmB0lLvxFIOXZgFRrdjR0w==}
-    engines: {node: '>=18'}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@esbuild/linux-riscv64@0.27.4':
-    resolution: {integrity: sha512-BnASypppbUWyqjd1KIpU4AUBiIhVr6YlHx/cnPgqEkNoVOhHg+YiSVxM1RLfiy4t9cAulbRGTNCKOcqHrEQLIw==}
-    engines: {node: '>=18'}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@esbuild/linux-s390x@0.21.5':
-    resolution: {integrity: sha512-zus5sxzqBJD3eXxwvjN1yQkRepANgxE9lgOW2qLnmr8ikMTphkjgXu1HR01K4FJg8h1kEEDAqDcZQtbrRnB41A==}
-    engines: {node: '>=12'}
-    cpu: [s390x]
-    os: [linux]
-
-  '@esbuild/linux-s390x@0.25.12':
-    resolution: {integrity: sha512-MsKncOcgTNvdtiISc/jZs/Zf8d0cl/t3gYWX8J9ubBnVOwlk65UIEEvgBORTiljloIWnBzLs4qhzPkJcitIzIg==}
-    engines: {node: '>=18'}
-    cpu: [s390x]
-    os: [linux]
-
-  '@esbuild/linux-s390x@0.27.4':
-    resolution: {integrity: sha512-+eUqgb/Z7vxVLezG8bVB9SfBie89gMueS+I0xYh2tJdw3vqA/0ImZJ2ROeWwVJN59ihBeZ7Tu92dF/5dy5FttA==}
-    engines: {node: '>=18'}
-    cpu: [s390x]
-    os: [linux]
-
-  '@esbuild/linux-x64@0.21.5':
-    resolution: {integrity: sha512-1rYdTpyv03iycF1+BhzrzQJCdOuAOtaqHTWJZCWvijKD2N5Xu0TtVC8/+1faWqcP9iBCWOmjmhoH94dH82BxPQ==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [linux]
-
-  '@esbuild/linux-x64@0.25.12':
-    resolution: {integrity: sha512-uqZMTLr/zR/ed4jIGnwSLkaHmPjOjJvnm6TVVitAa08SLS9Z0VM8wIRx7gWbJB5/J54YuIMInDquWyYvQLZkgw==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [linux]
-
-  '@esbuild/linux-x64@0.27.4':
-    resolution: {integrity: sha512-S5qOXrKV8BQEzJPVxAwnryi2+Iq5pB40gTEIT69BQONqR7JH1EPIcQ/Uiv9mCnn05jff9umq/5nqzxlqTOg9NA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [linux]
-
-  '@esbuild/netbsd-arm64@0.25.12':
-    resolution: {integrity: sha512-xXwcTq4GhRM7J9A8Gv5boanHhRa/Q9KLVmcyXHCTaM4wKfIpWkdXiMog/KsnxzJ0A1+nD+zoecuzqPmCRyBGjg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [netbsd]
-
-  '@esbuild/netbsd-arm64@0.27.4':
-    resolution: {integrity: sha512-xHT8X4sb0GS8qTqiwzHqpY00C95DPAq7nAwX35Ie/s+LO9830hrMd3oX0ZMKLvy7vsonee73x0lmcdOVXFzd6Q==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [netbsd]
-
-  '@esbuild/netbsd-x64@0.21.5':
-    resolution: {integrity: sha512-Woi2MXzXjMULccIwMnLciyZH4nCIMpWQAs049KEeMvOcNADVxo0UBIQPfSmxB3CWKedngg7sWZdLvLczpe0tLg==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [netbsd]
-
-  '@esbuild/netbsd-x64@0.25.12':
-    resolution: {integrity: sha512-Ld5pTlzPy3YwGec4OuHh1aCVCRvOXdH8DgRjfDy/oumVovmuSzWfnSJg+VtakB9Cm0gxNO9BzWkj6mtO1FMXkQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [netbsd]
-
-  '@esbuild/netbsd-x64@0.27.4':
-    resolution: {integrity: sha512-RugOvOdXfdyi5Tyv40kgQnI0byv66BFgAqjdgtAKqHoZTbTF2QqfQrFwa7cHEORJf6X2ht+l9ABLMP0dnKYsgg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [netbsd]
-
-  '@esbuild/openbsd-arm64@0.25.12':
-    resolution: {integrity: sha512-fF96T6KsBo/pkQI950FARU9apGNTSlZGsv1jZBAlcLL1MLjLNIWPBkj5NlSz8aAzYKg+eNqknrUJ24QBybeR5A==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openbsd]
-
-  '@esbuild/openbsd-arm64@0.27.4':
-    resolution: {integrity: sha512-2MyL3IAaTX+1/qP0O1SwskwcwCoOI4kV2IBX1xYnDDqthmq5ArrW94qSIKCAuRraMgPOmG0RDTA74mzYNQA9ow==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openbsd]
-
-  '@esbuild/openbsd-x64@0.21.5':
-    resolution: {integrity: sha512-HLNNw99xsvx12lFBUwoT8EVCsSvRNDVxNpjZ7bPn947b8gJPzeHWyNVhFsaerc0n3TsbOINvRP2byTZ5LKezow==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [openbsd]
-
-  '@esbuild/openbsd-x64@0.25.12':
-    resolution: {integrity: sha512-MZyXUkZHjQxUvzK7rN8DJ3SRmrVrke8ZyRusHlP+kuwqTcfWLyqMOE3sScPPyeIXN/mDJIfGXvcMqCgYKekoQw==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [openbsd]
-
-  '@esbuild/openbsd-x64@0.27.4':
-    resolution: {integrity: sha512-u8fg/jQ5aQDfsnIV6+KwLOf1CmJnfu1ShpwqdwC0uA7ZPwFws55Ngc12vBdeUdnuWoQYx/SOQLGDcdlfXhYmXQ==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [openbsd]
-
-  '@esbuild/openharmony-arm64@0.25.12':
-    resolution: {integrity: sha512-rm0YWsqUSRrjncSXGA7Zv78Nbnw4XL6/dzr20cyrQf7ZmRcsovpcRBdhD43Nuk3y7XIoW2OxMVvwuRvk9XdASg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openharmony]
-
-  '@esbuild/openharmony-arm64@0.27.4':
-    resolution: {integrity: sha512-JkTZrl6VbyO8lDQO3yv26nNr2RM2yZzNrNHEsj9bm6dOwwu9OYN28CjzZkH57bh4w0I2F7IodpQvUAEd1mbWXg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [openharmony]
-
-  '@esbuild/sunos-x64@0.21.5':
-    resolution: {integrity: sha512-6+gjmFpfy0BHU5Tpptkuh8+uw3mnrvgs+dSPQXQOv3ekbordwnzTVEb4qnIvQcYXq6gzkyTnoZ9dZG+D4garKg==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [sunos]
-
-  '@esbuild/sunos-x64@0.25.12':
-    resolution: {integrity: sha512-3wGSCDyuTHQUzt0nV7bocDy72r2lI33QL3gkDNGkod22EsYl04sMf0qLb8luNKTOmgF/eDEDP5BFNwoBKH441w==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [sunos]
-
-  '@esbuild/sunos-x64@0.27.4':
-    resolution: {integrity: sha512-/gOzgaewZJfeJTlsWhvUEmUG4tWEY2Spp5M20INYRg2ZKl9QPO3QEEgPeRtLjEWSW8FilRNacPOg8R1uaYkA6g==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [sunos]
-
-  '@esbuild/win32-arm64@0.21.5':
-    resolution: {integrity: sha512-Z0gOTd75VvXqyq7nsl93zwahcTROgqvuAcYDUr+vOv8uHhNSKROyU961kgtCD1e95IqPKSQKH7tBTslnS3tA8A==}
-    engines: {node: '>=12'}
-    cpu: [arm64]
-    os: [win32]
-
-  '@esbuild/win32-arm64@0.25.12':
-    resolution: {integrity: sha512-rMmLrur64A7+DKlnSuwqUdRKyd3UE7oPJZmnljqEptesKM8wx9J8gx5u0+9Pq0fQQW8vqeKebwNXdfOyP+8Bsg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [win32]
-
-  '@esbuild/win32-arm64@0.27.4':
-    resolution: {integrity: sha512-Z9SExBg2y32smoDQdf1HRwHRt6vAHLXcxD2uGgO/v2jK7Y718Ix4ndsbNMU/+1Qiem9OiOdaqitioZwxivhXYg==}
-    engines: {node: '>=18'}
-    cpu: [arm64]
-    os: [win32]
-
-  '@esbuild/win32-ia32@0.21.5':
-    resolution: {integrity: sha512-SWXFF1CL2RVNMaVs+BBClwtfZSvDgtL//G/smwAc5oVK/UPu2Gu9tIaRgFmYFFKrmg3SyAjSrElf0TiJ1v8fYA==}
-    engines: {node: '>=12'}
-    cpu: [ia32]
-    os: [win32]
-
-  '@esbuild/win32-ia32@0.25.12':
-    resolution: {integrity: sha512-HkqnmmBoCbCwxUKKNPBixiWDGCpQGVsrQfJoVGYLPT41XWF8lHuE5N6WhVia2n4o5QK5M4tYr21827fNhi4byQ==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [win32]
-
-  '@esbuild/win32-ia32@0.27.4':
-    resolution: {integrity: sha512-DAyGLS0Jz5G5iixEbMHi5KdiApqHBWMGzTtMiJ72ZOLhbu/bzxgAe8Ue8CTS3n3HbIUHQz/L51yMdGMeoxXNJw==}
-    engines: {node: '>=18'}
-    cpu: [ia32]
-    os: [win32]
-
-  '@esbuild/win32-x64@0.21.5':
-    resolution: {integrity: sha512-tQd/1efJuzPC6rCFwEvLtci/xNFcTZknmXs98FYDfGE4wP9ClFV98nyKrzJKVPMhdDnjzLhdUyMX4PsQAPjwIw==}
-    engines: {node: '>=12'}
-    cpu: [x64]
-    os: [win32]
-
-  '@esbuild/win32-x64@0.25.12':
-    resolution: {integrity: sha512-alJC0uCZpTFrSL0CCDjcgleBXPnCrEAhTBILpeAp7M/OFgoqtAetfBzX0xM00MUsVVPpVjlPuMbREqnZCXaTnA==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [win32]
-
-  '@esbuild/win32-x64@0.27.4':
-    resolution: {integrity: sha512-+knoa0BDoeXgkNvvV1vvbZX4+hizelrkwmGJBdT17t8FNPwG2lKemmuMZlmaNQ3ws3DKKCxpb4zRZEIp3UxFCg==}
-    engines: {node: '>=18'}
-    cpu: [x64]
-    os: [win32]
-
-  '@floating-ui/core@1.7.5':
-    resolution: {integrity: sha512-1Ih4WTWyw0+lKyFMcBHGbb5U5FtuHJuujoyyr5zTaWS5EYMeT6Jb2AuDeftsCsEuchO+mM2ij5+q9crhydzLhQ==}
-
-  '@floating-ui/dom@1.7.6':
-    resolution: {integrity: sha512-9gZSAI5XM36880PPMm//9dfiEngYoC6Am2izES1FF406YFsjvyBMmeJ2g4SAju3xWwtuynNRFL2s9hgxpLI5SQ==}
-
-  '@floating-ui/react-dom@2.1.8':
-    resolution: {integrity: sha512-cC52bHwM/n/CxS87FH0yWdngEZrjdtLW/qVruo68qg+prK7ZQ4YGdut2GyDVpoGeAYe/h899rVeOVm6Oi40k2A==}
-    peerDependencies:
-      react: '>=16.8.0'
-      react-dom: '>=16.8.0'
-
-  '@floating-ui/react@0.26.28':
-    resolution: {integrity: sha512-yORQuuAtVpiRjpMhdc0wJj06b9JFjrYF4qp96j++v2NBpbi6SEGF7donUJ3TMieerQ6qVkAv1tgr7L4r5roTqw==}
-    peerDependencies:
-      react: '>=16.8.0'
-      react-dom: '>=16.8.0'
-
-  '@floating-ui/utils@0.2.11':
-    resolution: {integrity: sha512-RiB/yIh78pcIxl6lLMG0CgBXAZ2Y0eVHqMPYugu+9U0AeT6YBeiJpf7lbdJNIugFP5SIjwNRgo4DhR1Qxi26Gg==}
-
-  '@fortawesome/fontawesome-common-types@6.7.2':
-    resolution: {integrity: sha512-Zs+YeHUC5fkt7Mg1l6XTniei3k4bwG/yo3iFUtZWd/pMx9g3fdvkSK9E0FOC+++phXOka78uJcYb8JaFkW52Xg==}
-    engines: {node: '>=6'}
-
-  '@fortawesome/fontawesome-common-types@7.3.0':
-    resolution: {integrity: sha512-X/vND0Y1l9fVJ9O79UgtZnXSpz4aNF3bXlDxiJAEAm6kgeSftp9wjjBPgqzazJV8YlmxfRoeXNfSCJ48sf/Hhw==}
-    engines: {node: '>=6'}
-
-  '@fortawesome/fontawesome-free@6.7.2':
-    resolution: {integrity: sha512-JUOtgFW6k9u4Y+xeIaEiLr3+cjoUPiAuLXoyKOJSia6Duzb7pq+A76P9ZdPDoAoxHdHzq6gE9/jKBGXlZT8FbA==}
-    engines: {node: '>=6'}
-
-  '@fortawesome/fontawesome-svg-core@6.7.2':
-    resolution: {integrity: sha512-yxtOBWDrdi5DD5o1pmVdq3WMCvnobT0LU6R8RyyVXPvFRd2o79/0NCuQoCjNTeZz9EzA9xS3JxNWfv54RIHFEA==}
-    engines: {node: '>=6'}
-
-  '@fortawesome/fontawesome-svg-core@7.3.0':
-    resolution: {integrity: sha512-MFbTNLDWkLJwbozDvHOZ7hwyDjQcBMBattlcOQ6ZmV5YD9bBrqdl1rNtmVjQ/lzqveXXX3sMz2Ew6fAgXoxmkw==}
-    engines: {node: '>=6'}
-
-  '@fortawesome/free-brands-svg-icons@6.7.2':
-    resolution: {integrity: sha512-zu0evbcRTgjKfrr77/2XX+bU+kuGfjm0LbajJHVIgBWNIDzrhpRxiCPNT8DW5AdmSsq7Mcf9D1bH0aSeSUSM+Q==}
-    engines: {node: '>=6'}
-
-  '@fortawesome/free-brands-svg-icons@7.3.0':
-    resolution: {integrity: sha512-W6C9ZbPWpwcUycq6U90lVbvWTrEnr01Td2x5jlO8fOtvww4kqDBMSmZqXQCc6FIIJD4kTH6G1MBRExAaSXz3yg==}
-    engines: {node: '>=6'}
-
-  '@fortawesome/free-solid-svg-icons@6.7.2':
-    resolution: {integrity: sha512-GsBrnOzU8uj0LECDfD5zomZJIjrPhIlWU82AHwa2s40FKH+kcxQaBvBo3Z4TxyZHIyX8XTDxsyA33/Vx9eFuQA==}
-    engines: {node: '>=6'}
-
-  '@fortawesome/free-solid-svg-icons@7.3.0':
-    resolution: {integrity: sha512-YxI/CuwWeI3nPIoYU//vkDS+3ige/67DPZ6XwMATpYEFESzO9L8zfJOKllGRgIlpT/uebrZCcvAzp3peD7GmTw==}
-    engines: {node: '>=6'}
-
-  '@fortawesome/react-fontawesome@0.2.6':
-    resolution: {integrity: sha512-mtBFIi1UsYQo7rYonYFkjgYKGoL8T+fEH6NGUpvuqtY3ytMsAoDaPo5rk25KuMtKDipY4bGYM/CkmCHA1N3FUg==}
-    deprecated: v0.2.x is no longer supported. Unless you are still using FontAwesome 5, please update to v3.1.1 or greater.
-    peerDependencies:
-      '@fortawesome/fontawesome-svg-core': ~1 || ~6 || ~7
-      react: ^16.3 || ^17.0.0 || ^18.0.0 || ^19.0.0
-
-  '@fortawesome/react-fontawesome@3.3.1':
-    resolution: {integrity: sha512-wGnAPhfzivDwBWYmEG8MSrEXPruoiMMo48NnsRkj1NZkoaawgOijPNAiSHKMYEoCsqTBSgLTzL6EqTTWGaUR4w==}
-    engines: {node: '>=20'}
-    peerDependencies:
-      '@fortawesome/fontawesome-svg-core': ~6 || ~7
-      react: ^18.0.0 || ^19.0.0
-
-  '@gerrit0/mini-shiki@3.23.0':
-    resolution: {integrity: sha512-bEMORlG0cqdjVyCEuU0cDQbORWX+kYCeo0kV1lbxF5bt4r7SID2l9bqsxJEM0zndaxpOUT7riCyIVEuqq/Ynxg==}
-
-  '@google/genai@1.52.0':
-    resolution: {integrity: sha512-gwSvbpiN/17O9TbsqSsE/OzZcpv5Fo4RQjdngGgogtuB9RsyJ8ZHhX5KjHj1bp5N9snN2eK8LDGXSaWW2hof8Q==}
-    engines: {node: '>=20.0.0'}
-    peerDependencies:
-      '@modelcontextprotocol/sdk': ^1.25.2
-    peerDependenciesMeta:
-      '@modelcontextprotocol/sdk':
-        optional: true
-
-  '@grpc/grpc-js@1.14.3':
-    resolution: {integrity: sha512-Iq8QQQ/7X3Sac15oB6p0FmUg/klxQvXLeileoqrTRGJYLV+/9tubbr9ipz0GKHjmXVsgFPo/+W+2cA8eNcR+XA==}
-    engines: {node: '>=12.10.0'}
-
-  '@grpc/proto-loader@0.7.15':
-    resolution: {integrity: sha512-tMXdRCfYVixjuFK+Hk0Q1s38gV9zDiDJfWL3h1rv4Qc39oILCu1TRTDt7+fGUI8K4G1Fj125Hx/ru3azECWTyQ==}
-    engines: {node: '>=6'}
-    hasBin: true
-
-  '@grpc/proto-loader@0.8.0':
-    resolution: {integrity: sha512-rc1hOQtjIWGxcxpb9aHAfLpIctjEnsDehj0DAiVfBlmT84uvR0uUtN2hEi/ecvWVjXUGf5qPF4qEgiLOx1YIMQ==}
-    engines: {node: '>=6'}
-    hasBin: true
-
-  '@headlessui/react@2.2.10':
-    resolution: {integrity: sha512-5pVLNK9wlpxTUTy9GpgbX/SdcRh+HBnPktjM2wbiLTH4p+2EPHBO1aoSryUCuKUIItdDWO9ITlhUL8UnUN/oIA==}
-    engines: {node: '>=10'}
-    peerDependencies:
-      react: ^18 || ^19 || ^19.0.0-rc
-      react-dom: ^18 || ^19 || ^19.0.0-rc
-
-  '@hono/node-server@1.19.14':
-    resolution: {integrity: sha512-GwtvgtXxnWsucXvbQXkRgqksiH2Qed37H9xHZocE5sA3N8O8O8/8FA3uclQXxXVzc9XBZuEOMK7+r02FmSpHtw==}
-    engines: {node: '>=18.14.1'}
-    peerDependencies:
-      hono: ^4
-
-  '@hookform/resolvers@3.10.0':
-    resolution: {integrity: sha512-79Dv+3mDF7i+2ajj7SkypSKHhl1cbln1OGavqrsF7p6mbUv11xpqpacPsGDCTRvCSjEEIez2ef1NveSVL3b0Ag==}
-    peerDependencies:
-      react-hook-form: ^7.0.0
-
-  '@iconify/types@2.0.0':
-    resolution: {integrity: sha512-+wluvCrRhXrhyOmRDJ3q8mux9JkKy5SJ/v8ol2tu4FVjyYvtEzkc/3pK15ET6RKg4b4w4BmTk1+gsCUhf21Ykg==}
-
-  '@iconify/utils@3.1.3':
-    resolution: {integrity: sha512-LPKOXPn/zV+zis1oOfGWogaXVpqUybF3ZS6SCZIsz8vg0ivVp9+fVqyYB7xq0aiST/VhUQYGO1qo6uoYSiEJqw==}
-
-  '@img/colour@1.1.0':
-    resolution: {integrity: sha512-Td76q7j57o/tLVdgS746cYARfSyxk8iEfRxewL9h4OMzYhbW4TAcppl0mT4eyqXddh6L/jwoM75mo7ixa/pCeQ==}
-    engines: {node: '>=18'}
-
-  '@img/sharp-darwin-arm64@0.33.5':
-    resolution: {integrity: sha512-UT4p+iz/2H4twwAoLCqfA9UH5pI6DggwKEGuaPy7nCVQ8ZsiY5PIcrRvD1DzuY3qYL07NtIQcWnBSY/heikIFQ==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@img/sharp-darwin-arm64@0.34.5':
-    resolution: {integrity: sha512-imtQ3WMJXbMY4fxb/Ndp6HBTNVtWCUI0WdobyheGf5+ad6xX8VIDO8u2xE4qc/fr08CKG/7dDseFtn6M6g/r3w==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@img/sharp-darwin-x64@0.33.5':
-    resolution: {integrity: sha512-fyHac4jIc1ANYGRDxtiqelIbdWkIuQaI84Mv45KvGRRxSAa7o7d1ZKAOBaYbnepLC1WqxfpimdeWfvqqSGwR2Q==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [darwin]
-
-  '@img/sharp-darwin-x64@0.34.5':
-    resolution: {integrity: sha512-YNEFAF/4KQ/PeW0N+r+aVVsoIY0/qxxikF2SWdp+NRkmMB7y9LBZAVqQ4yhGCm/H3H270OSykqmQMKLBhBJDEw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [darwin]
-
-  '@img/sharp-libvips-darwin-arm64@1.0.4':
-    resolution: {integrity: sha512-XblONe153h0O2zuFfTAbQYAX2JhYmDHeWikp1LM9Hul9gVPjFY427k6dFEcOL72O01QxQsWi761svJ/ev9xEDg==}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@img/sharp-libvips-darwin-arm64@1.2.4':
-    resolution: {integrity: sha512-zqjjo7RatFfFoP0MkQ51jfuFZBnVE2pRiaydKJ1G/rHZvnsrHAOcQALIi9sA5co5xenQdTugCvtb1cuf78Vf4g==}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@img/sharp-libvips-darwin-x64@1.0.4':
-    resolution: {integrity: sha512-xnGR8YuZYfJGmWPvmlunFaWJsb9T/AO2ykoP3Fz/0X5XV2aoYBPkX6xqCQvUTKKiLddarLaxpzNe+b1hjeWHAQ==}
-    cpu: [x64]
-    os: [darwin]
-
-  '@img/sharp-libvips-darwin-x64@1.2.4':
-    resolution: {integrity: sha512-1IOd5xfVhlGwX+zXv2N93k0yMONvUlANylbJw1eTah8K/Jtpi15KC+WSiaX/nBmbm2HxRM1gZ0nSdjSsrZbGKg==}
-    cpu: [x64]
-    os: [darwin]
-
-  '@img/sharp-libvips-linux-arm64@1.0.4':
-    resolution: {integrity: sha512-9B+taZ8DlyyqzZQnoeIvDVR/2F4EbMepXMc/NdVbkzsJbzkUjhXv/70GQJ7tdLA4YJgNP25zukcxpX2/SueNrA==}
-    cpu: [arm64]
-    os: [linux]
-
-  '@img/sharp-libvips-linux-arm64@1.2.4':
-    resolution: {integrity: sha512-excjX8DfsIcJ10x1Kzr4RcWe1edC9PquDRRPx3YVCvQv+U5p7Yin2s32ftzikXojb1PIFc/9Mt28/y+iRklkrw==}
-    cpu: [arm64]
-    os: [linux]
-
-  '@img/sharp-libvips-linux-arm@1.0.5':
-    resolution: {integrity: sha512-gvcC4ACAOPRNATg/ov8/MnbxFDJqf/pDePbBnuBDcjsI8PssmjoKMAz4LtLaVi+OnSb5FK/yIOamqDwGmXW32g==}
-    cpu: [arm]
-    os: [linux]
-
-  '@img/sharp-libvips-linux-arm@1.2.4':
-    resolution: {integrity: sha512-bFI7xcKFELdiNCVov8e44Ia4u2byA+l3XtsAj+Q8tfCwO6BQ8iDojYdvoPMqsKDkuoOo+X6HZA0s0q11ANMQ8A==}
-    cpu: [arm]
-    os: [linux]
-
-  '@img/sharp-libvips-linux-ppc64@1.2.4':
-    resolution: {integrity: sha512-FMuvGijLDYG6lW+b/UvyilUWu5Ayu+3r2d1S8notiGCIyYU/76eig1UfMmkZ7vwgOrzKzlQbFSuQfgm7GYUPpA==}
-    cpu: [ppc64]
-    os: [linux]
-
-  '@img/sharp-libvips-linux-riscv64@1.2.4':
-    resolution: {integrity: sha512-oVDbcR4zUC0ce82teubSm+x6ETixtKZBh/qbREIOcI3cULzDyb18Sr/Wcyx7NRQeQzOiHTNbZFF1UwPS2scyGA==}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@img/sharp-libvips-linux-s390x@1.0.4':
-    resolution: {integrity: sha512-u7Wz6ntiSSgGSGcjZ55im6uvTrOxSIS8/dgoVMoiGE9I6JAfU50yH5BoDlYA1tcuGS7g/QNtetJnxA6QEsCVTA==}
-    cpu: [s390x]
-    os: [linux]
-
-  '@img/sharp-libvips-linux-s390x@1.2.4':
-    resolution: {integrity: sha512-qmp9VrzgPgMoGZyPvrQHqk02uyjA0/QrTO26Tqk6l4ZV0MPWIW6LTkqOIov+J1yEu7MbFQaDpwdwJKhbJvuRxQ==}
-    cpu: [s390x]
-    os: [linux]
-
-  '@img/sharp-libvips-linux-x64@1.0.4':
-    resolution: {integrity: sha512-MmWmQ3iPFZr0Iev+BAgVMb3ZyC4KeFc3jFxnNbEPas60e1cIfevbtuyf9nDGIzOaW9PdnDciJm+wFFaTlj5xYw==}
-    cpu: [x64]
-    os: [linux]
-
-  '@img/sharp-libvips-linux-x64@1.2.4':
-    resolution: {integrity: sha512-tJxiiLsmHc9Ax1bz3oaOYBURTXGIRDODBqhveVHonrHJ9/+k89qbLl0bcJns+e4t4rvaNBxaEZsFtSfAdquPrw==}
-    cpu: [x64]
-    os: [linux]
-
-  '@img/sharp-libvips-linuxmusl-arm64@1.0.4':
-    resolution: {integrity: sha512-9Ti+BbTYDcsbp4wfYib8Ctm1ilkugkA/uscUn6UXK1ldpC1JjiXbLfFZtRlBhjPZ5o1NCLiDbg8fhUPKStHoTA==}
-    cpu: [arm64]
-    os: [linux]
-
-  '@img/sharp-libvips-linuxmusl-arm64@1.2.4':
-    resolution: {integrity: sha512-FVQHuwx1IIuNow9QAbYUzJ+En8KcVm9Lk5+uGUQJHaZmMECZmOlix9HnH7n1TRkXMS0pGxIJokIVB9SuqZGGXw==}
-    cpu: [arm64]
-    os: [linux]
-
-  '@img/sharp-libvips-linuxmusl-x64@1.0.4':
-    resolution: {integrity: sha512-viYN1KX9m+/hGkJtvYYp+CCLgnJXwiQB39damAO7WMdKWlIhmYTfHjwSbQeUK/20vY154mwezd9HflVFM1wVSw==}
-    cpu: [x64]
-    os: [linux]
-
-  '@img/sharp-libvips-linuxmusl-x64@1.2.4':
-    resolution: {integrity: sha512-+LpyBk7L44ZIXwz/VYfglaX/okxezESc6UxDSoyo2Ks6Jxc4Y7sGjpgU9s4PMgqgjj1gZCylTieNamqA1MF7Dg==}
-    cpu: [x64]
-    os: [linux]
-
-  '@img/sharp-linux-arm64@0.33.5':
-    resolution: {integrity: sha512-JMVv+AMRyGOHtO1RFBiJy/MBsgz0x4AWrT6QoEVVTyh1E39TrCUpTRI7mx9VksGX4awWASxqCYLCV4wBZHAYxA==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [linux]
-
-  '@img/sharp-linux-arm64@0.34.5':
-    resolution: {integrity: sha512-bKQzaJRY/bkPOXyKx5EVup7qkaojECG6NLYswgktOZjaXecSAeCWiZwwiFf3/Y+O1HrauiE3FVsGxFg8c24rZg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [linux]
-
-  '@img/sharp-linux-arm@0.33.5':
-    resolution: {integrity: sha512-JTS1eldqZbJxjvKaAkxhZmBqPRGmxgu+qFKSInv8moZ2AmT5Yib3EQ1c6gp493HvrvV8QgdOXdyaIBrhvFhBMQ==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm]
-    os: [linux]
-
-  '@img/sharp-linux-arm@0.34.5':
-    resolution: {integrity: sha512-9dLqsvwtg1uuXBGZKsxem9595+ujv0sJ6Vi8wcTANSFpwV/GONat5eCkzQo/1O6zRIkh0m/8+5BjrRr7jDUSZw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm]
-    os: [linux]
-
-  '@img/sharp-linux-ppc64@0.34.5':
-    resolution: {integrity: sha512-7zznwNaqW6YtsfrGGDA6BRkISKAAE1Jo0QdpNYXNMHu2+0dTrPflTLNkpc8l7MUP5M16ZJcUvysVWWrMefZquA==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [ppc64]
-    os: [linux]
-
-  '@img/sharp-linux-riscv64@0.34.5':
-    resolution: {integrity: sha512-51gJuLPTKa7piYPaVs8GmByo7/U7/7TZOq+cnXJIHZKavIRHAP77e3N2HEl3dgiqdD/w0yUfiJnII77PuDDFdw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@img/sharp-linux-s390x@0.33.5':
-    resolution: {integrity: sha512-y/5PCd+mP4CA/sPDKl2961b+C9d+vPAveS33s6Z3zfASk2j5upL6fXVPZi7ztePZ5CuH+1kW8JtvxgbuXHRa4Q==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [s390x]
-    os: [linux]
-
-  '@img/sharp-linux-s390x@0.34.5':
-    resolution: {integrity: sha512-nQtCk0PdKfho3eC5MrbQoigJ2gd1CgddUMkabUj+rBevs8tZ2cULOx46E7oyX+04WGfABgIwmMC0VqieTiR4jg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [s390x]
-    os: [linux]
-
-  '@img/sharp-linux-x64@0.33.5':
-    resolution: {integrity: sha512-opC+Ok5pRNAzuvq1AG0ar+1owsu842/Ab+4qvU879ippJBHvyY5n2mxF1izXqkPYlGuP/M556uh53jRLJmzTWA==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [linux]
-
-  '@img/sharp-linux-x64@0.34.5':
-    resolution: {integrity: sha512-MEzd8HPKxVxVenwAa+JRPwEC7QFjoPWuS5NZnBt6B3pu7EG2Ge0id1oLHZpPJdn3OQK+BQDiw9zStiHBTJQQQQ==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [linux]
-
-  '@img/sharp-linuxmusl-arm64@0.33.5':
-    resolution: {integrity: sha512-XrHMZwGQGvJg2V/oRSUfSAfjfPxO+4DkiRh6p2AFjLQztWUuY/o8Mq0eMQVIY7HJ1CDQUJlxGGZRw1a5bqmd1g==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [linux]
-
-  '@img/sharp-linuxmusl-arm64@0.34.5':
-    resolution: {integrity: sha512-fprJR6GtRsMt6Kyfq44IsChVZeGN97gTD331weR1ex1c1rypDEABN6Tm2xa1wE6lYb5DdEnk03NZPqA7Id21yg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [linux]
-
-  '@img/sharp-linuxmusl-x64@0.33.5':
-    resolution: {integrity: sha512-WT+d/cgqKkkKySYmqoZ8y3pxx7lx9vVejxW/W4DOFMYVSkErR+w7mf2u8m/y4+xHe7yY9DAXQMWQhpnMuFfScw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [linux]
-
-  '@img/sharp-linuxmusl-x64@0.34.5':
-    resolution: {integrity: sha512-Jg8wNT1MUzIvhBFxViqrEhWDGzqymo3sV7z7ZsaWbZNDLXRJZoRGrjulp60YYtV4wfY8VIKcWidjojlLcWrd8Q==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [linux]
-
-  '@img/sharp-wasm32@0.33.5':
-    resolution: {integrity: sha512-ykUW4LVGaMcU9lu9thv85CbRMAwfeadCJHRsg2GmeRa/cJxsVY9Rbd57JcMxBkKHag5U/x7TSBpScF4U8ElVzg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [wasm32]
-
-  '@img/sharp-wasm32@0.34.5':
-    resolution: {integrity: sha512-OdWTEiVkY2PHwqkbBI8frFxQQFekHaSSkUIJkwzclWZe64O1X4UlUjqqqLaPbUpMOQk6FBu/HtlGXNblIs0huw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [wasm32]
-
-  '@img/sharp-win32-arm64@0.34.5':
-    resolution: {integrity: sha512-WQ3AgWCWYSb2yt+IG8mnC6Jdk9Whs7O0gxphblsLvdhSpSTtmu69ZG1Gkb6NuvxsNACwiPV6cNSZNzt0KPsw7g==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [arm64]
-    os: [win32]
-
-  '@img/sharp-win32-ia32@0.33.5':
-    resolution: {integrity: sha512-T36PblLaTwuVJ/zw/LaH0PdZkRz5rd3SmMHX8GSmR7vtNSP5Z6bQkExdSK7xGWyxLw4sUknBuugTelgw2faBbQ==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [ia32]
-    os: [win32]
-
-  '@img/sharp-win32-ia32@0.34.5':
-    resolution: {integrity: sha512-FV9m/7NmeCmSHDD5j4+4pNI8Cp3aW+JvLoXcTUo0IqyjSfAZJ8dIUmijx1qaJsIiU+Hosw6xM5KijAWRJCSgNg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [ia32]
-    os: [win32]
-
-  '@img/sharp-win32-x64@0.33.5':
-    resolution: {integrity: sha512-MpY/o8/8kj+EcnxwvrP4aTJSWw/aZ7JIGR4aBeZkZw5B7/Jn+tY9/VNwtcoGmdT7GfggGIU4kygOMSbYnOrAbg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [win32]
-
-  '@img/sharp-win32-x64@0.34.5':
-    resolution: {integrity: sha512-+29YMsqY2/9eFEiW93eqWnuLcWcufowXewwSNIT6UwZdUUCrM3oFjMWH/Z6/TMmb4hlFenmfAVbpWeup2jryCw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-    cpu: [x64]
-    os: [win32]
-
-  '@internationalized/date@3.12.2':
-    resolution: {integrity: sha512-FY1Y+H64NDs+HAF6omlnWxm3mEpfgaCSWtL5l551ZZfImA+kGjPFgrnJrGjH6lfmLL0g8Z/mBu1R3kufeCp6Jw==}
-
-  '@internationalized/number@3.6.7':
-    resolution: {integrity: sha512-3ji1fcrT+FPAK86UqEhB/psHixYo6niWPJtt7+qRaYFynt/BaJG8GhAPimtWUpEiVSTq8ZM8L5psMxGquiB/Vg==}
-
-  '@internationalized/string@3.2.9':
-    resolution: {integrity: sha512-kzP/M/mbQxODlmOt4bIQZ2SBVUWUSqMLXooXixnX7noche8WHaQcA+nwFN1K2KCF/cp+LDUhcJsCicwkvhD1pg==}
-
-  '@isaacs/cliui@8.0.2':
-    resolution: {integrity: sha512-O8jcjabXaleOG9DQ0+ARXWZBTfnP4WNAqzuiJK7ll44AmxGKv/J2M4TPjxjY3znBCfvBXFzucm1twdyFybFqEA==}
-    engines: {node: '>=12'}
-
-  '@jridgewell/gen-mapping@0.3.13':
-    resolution: {integrity: sha512-2kkt/7niJ6MgEPxF0bYdQ6etZaA+fQvDcLKckhy1yIQOzaoKjBBjSj63/aLVjYE3qhRt5dvM+uUyfCg6UKCBbA==}
-
-  '@jridgewell/remapping@2.3.5':
-    resolution: {integrity: sha512-LI9u/+laYG4Ds1TDKSJW2YPrIlcVYOwi2fUC6xB43lueCjgxV4lffOCZCtYFiH6TNOX+tQKXx97T4IKHbhyHEQ==}
-
-  '@jridgewell/resolve-uri@3.1.2':
-    resolution: {integrity: sha512-bRISgCIjP20/tbWSPWMEi54QVPRZExkuD9lJL+UIxUKtwVJA8wW1Trb1jMs1RFXo1CBTNZ/5hpC9QvmKWdopKw==}
-    engines: {node: '>=6.0.0'}
-
-  '@jridgewell/sourcemap-codec@1.5.5':
-    resolution: {integrity: sha512-cYQ9310grqxueWbl+WuIUIaiUaDcj7WOq5fVhEljNVgRfOUhY9fy2zTvfoqWsnebh8Sl70VScFbICvJnLKB0Og==}
-
-  '@jridgewell/trace-mapping@0.3.31':
-    resolution: {integrity: sha512-zzNR+SdQSDJzc8joaeP8QQoCQr8NuYx2dIIytl1QeBEZHJ9uW6hebsrYgbz8hJwUQao3TWCMtmfV8Nu1twOLAw==}
-
-  '@js-sdsl/ordered-map@4.4.2':
-    resolution: {integrity: sha512-iUKgm52T8HOE/makSxjqoWhe95ZJA1/G1sYsGev2JDKUSS14KAgg1LHb+Ba+IPow0xflbnSkOsZcO08C7w1gYw==}
-
-  '@lezer/common@1.5.2':
-    resolution: {integrity: sha512-sxQE460fPZyU3sdc8lafxiPwJHBzZRy/udNFynGQky1SePYBdhkBl1kOagA9uT3pxR8K09bOrmTUqA9wb/PjSQ==}
-
-  '@lezer/highlight@1.2.3':
-    resolution: {integrity: sha512-qXdH7UqTvGfdVBINrgKhDsVTJTxactNNxLk7+UMwZhU13lMHaOBlJe9Vqp907ya56Y3+ed2tlqzys7jDkTmW0g==}
-
-  '@lezer/javascript@1.5.4':
-    resolution: {integrity: sha512-vvYx3MhWqeZtGPwDStM2dwgljd5smolYD2lR2UyFcHfxbBQebqx8yjmFmxtJ/E6nN6u1D9srOiVWm3Rb4tmcUA==}
-
-  '@lezer/json@1.0.3':
-    resolution: {integrity: sha512-BP9KzdF9Y35PDpv04r0VeSTKDeox5vVr3efE7eBbx3r4s3oNLfunchejZhjArmeieBH+nVOpgIiBJpEAv8ilqQ==}
-
-  '@lezer/lr@1.4.10':
-    resolution: {integrity: sha512-rnCpTIBafOx4mRp43xOxDJbFipJm/c0cia/V5TiGlhmMa+wsSdoGmUN3w5Bqrks/09Q/D4tNAmWaT8p6NRi77A==}
-
-  '@marijn/find-cluster-break@1.0.3':
-    resolution: {integrity: sha512-FY+MKLBoTsLNJF/eLWaOsXGdz6uh3Iu1axjPf6TUq92IYumcTcXWHoS747JARLkcdlJ/Waiaxc5wQfFO8jC6NA==}
-
-  '@mariozechner/clipboard-darwin-arm64@0.3.9':
-    resolution: {integrity: sha512-BfgV7vCEWZwJwZJw03r6bP5+tf0iI/ANuQYCxi9RNn7FrWB3yzGuMKCrNLRl6V761vXRdL8+OqZ0wd4TqlsNOQ==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@mariozechner/clipboard-darwin-universal@0.3.9':
-    resolution: {integrity: sha512-BGGR4iA9Z2shAjI65eI5xtyb3LYNlDW9X3gxKxDbqtbnREohsrqznov6zpKoIrsRWpzlYVEdKphS7ksJ0/ndSQ==}
-    engines: {node: '>= 10'}
-    os: [darwin]
-
-  '@mariozechner/clipboard-darwin-x64@0.3.9':
-    resolution: {integrity: sha512-4kURmCbS6nt8uYhtmWpUcJWyPHfmAr5dTpXD1nO3pIfa+TSQ9DbrGOYCKH+aEFW47XhQ4Vp8ZTszie+wfFvDKg==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [darwin]
-
-  '@mariozechner/clipboard-linux-arm64-gnu@0.3.9':
-    resolution: {integrity: sha512-g59OkUGP2DDfCOIKypHeYgv2M55u/cKvXa5dSxFbEJ34XvIQMdcVmpKCkGUro3ZgefXiGVdwguvTMQGpHWzIXw==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@mariozechner/clipboard-linux-arm64-musl@0.3.9':
-    resolution: {integrity: sha512-AGuJdgKsmJdm4Pych7kv3sqe591ERRaAHW3xjLooiFzn8J+PxUyof++7YZrB5Y5tpnTO+K18Og3taj2NpluCRQ==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [linux]
-
-  '@mariozechner/clipboard-linux-riscv64-gnu@0.3.9':
-    resolution: {integrity: sha512-DXBEAiuMpk7dhS1a9NzNxVAFi1vaKoPu7rQNgY8LIDLGrK3lnIp3nT10DUum+PKVJoJppIP+NAA8IZe4DMNDPw==}
-    engines: {node: '>= 10'}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@mariozechner/clipboard-linux-x64-gnu@0.3.9':
-    resolution: {integrity: sha512-WORrMLd6EpElEME7JRKfSaY34nW1P5LbdgK5YNCS1ncG2LqmITsSMEJ8nh2mpvxb3TxqbOOKgY7k9eMJYlW9Mw==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [linux]
-
-  '@mariozechner/clipboard-linux-x64-musl@0.3.9':
-    resolution: {integrity: sha512-/DHn+1DrfL6oRaPPWXaOKvonFFrni666fxd+zFqiQEfvBH0tsHVWjq9iqBk0oDp0qaPA72lIMy5BptxISBEhZQ==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [linux]
-
-  '@mariozechner/clipboard-win32-arm64-msvc@0.3.9':
-    resolution: {integrity: sha512-O5FHD3ErkMwMhNzAfu3ggy0ug4z7btZuoQgwwxlzPrwV2bxlD6WDpqBY4NCgICAgZdDKdp+loUEKVAVt8aYnhQ==}
-    engines: {node: '>= 10'}
-    cpu: [arm64]
-    os: [win32]
-
-  '@mariozechner/clipboard-win32-x64-msvc@0.3.9':
-    resolution: {integrity: sha512-ihQC3EufqEY81vhXBgVBtK4prL+wc62zJsSvxrgz7K1hsdt6OObz6v9p3Rn1OG3GJksTTKMJF0u/guMISHPhSA==}
-    engines: {node: '>= 10'}
-    cpu: [x64]
-    os: [win32]
-
-  '@mariozechner/clipboard@0.3.9':
-    resolution: {integrity: sha512-ABnA53mdfkGZwOFUdZNv2S0CWGO/EIuPj8Vv9xmBFmSYg/qFc7ihO6q5FcQjvoE67kZpWkEc4AhD6B/os04yuA==}
-    engines: {node: '>= 10'}
-
-  '@mariozechner/jiti@2.6.5':
-    resolution: {integrity: sha512-faGUlTcXka5l7rv0lP3K3vGW/ejRuOS24RR2aSFWREUQqzjgdsuWNo/IiPqL3kWRGt6Ahl2+qcDAwtdeWeuGUw==}
-    hasBin: true
-
-  '@mariozechner/pi-agent-core@0.60.0':
-    resolution: {integrity: sha512-1zQcfFp8r0iwZCxCBQ9/ccFJoagns68cndLPTJJXl1ZqkYirzSld1zBOPxLAgeAKWIz3OX8dB2WQwTJFhmEojQ==}
-    engines: {node: '>=20.0.0'}
-    deprecated: please use @earendil-works/pi-agent-core instead going forward
-
-  '@mariozechner/pi-ai@0.60.0':
-    resolution: {integrity: sha512-OiMuXQturnEDPmA+ho7eLe4G8plO2z21yjNMs9niQREauoblWOz7Glv58I66KPzczLED4aZTlQLTRdU6t1rz8A==}
-    engines: {node: '>=20.0.0'}
-    deprecated: please use @earendil-works/pi-ai instead going forward
-    hasBin: true
-
-  '@mariozechner/pi-coding-agent@0.60.0':
-    resolution: {integrity: sha512-IOv7cTU4nbznFNUE5ofi13k2dmSG39coBoGWIBQTVw3iVyl0HxuHbg0NiTx3ktrPIDNtkii+y7tWXzWqwoo4lw==}
-    engines: {node: '>=20.6.0'}
-    deprecated: please use @earendil-works/pi-coding-agent instead going forward
-    hasBin: true
-
-  '@mariozechner/pi-tui@0.60.0':
-    resolution: {integrity: sha512-ZAK5gxYhGmfJqMjfWcRBjB8glITltDbTrYJXvcDtfengbKTZN0p39p5uO5pvUB8/PiAWKTRS06yaNMhf/LG26g==}
-    engines: {node: '>=20.0.0'}
-    deprecated: please use @earendil-works/pi-tui instead going forward
-
-  '@mdx-js/mdx@3.1.1':
-    resolution: {integrity: sha512-f6ZO2ifpwAQIpzGWaBQT2TXxPv6z3RBzQKpVftEWN78Vl/YweF1uwussDx8ECAXVtr3Rs89fKyG9YlzUs9DyGQ==}
-
-  '@mermaid-js/parser@1.2.0':
-    resolution: {integrity: sha512-oYPyv8A4As1yH5Bx+04iQEQxXuIQDe0GKCNSRgao6z8AM9jixXIfP0vsppRLvGf+nKIOb9/LdpWA4YuJiVvESA==}
-
-  '@mistralai/mistralai@1.14.1':
-    resolution: {integrity: sha512-IiLmmZFCCTReQgPAT33r7KQ1nYo5JPdvGkrkZqA8qQ2qB1GHgs5LoP5K2ICyrjnpw2n8oSxMM/VP+liiKcGNlQ==}
-
-  '@modelcontextprotocol/sdk@1.29.0':
-    resolution: {integrity: sha512-zo37mZA9hJWpULgkRpowewez1y6ML5GsXJPY8FI0tBBCd77HEvza4jDqRKOXgHNn867PVGCyTdzqpz0izu5ZjQ==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      '@cfworker/json-schema': ^4.1.1
-      zod: ^3.25 || ^4.0
-    peerDependenciesMeta:
-      '@cfworker/json-schema':
-        optional: true
-
-  '@noble/ciphers@2.2.0':
-    resolution: {integrity: sha512-Z6pjIZ/8IJcCGzb2S/0Px5J81yij85xASuk1teLNeg75bfT07MV3a/O2Mtn1I2se43k3lkVEcFaR10N4cgQcZA==}
-    engines: {node: '>= 20.19.0'}
-
-  '@noble/hashes@2.2.0':
-    resolution: {integrity: sha512-IYqDGiTXab6FniAgnSdZwgWbomxpy9FtYvLKs7wCUs2a8RkITG+DFGO1DM9cr+E3/RgADRpFjrKVaJ1z6sjtEg==}
-    engines: {node: '>= 20.19.0'}
-
-  '@nodelib/fs.scandir@2.1.5':
-    resolution: {integrity: sha512-vq24Bq3ym5HEQm2NKCr3yXDwjc7vTsEThRDnkp2DK9p1uqLR+DHurm/NOTo0KG7HYHU7eppKZj3MyqYuMBf62g==}
-    engines: {node: '>= 8'}
-
-  '@nodelib/fs.stat@2.0.5':
-    resolution: {integrity: sha512-RkhPPp2zrqDAQA/2jNhnztcPAlv64XdhIp7a7454A5ovI7Bukxgt7MX7udwAu3zg1DcpPU0rz3VV1SeaqvY4+A==}
-    engines: {node: '>= 8'}
-
-  '@nodelib/fs.walk@1.2.8':
-    resolution: {integrity: sha512-oGB+UxlgWcgQkgwo8GcEGwemoTFt3FIO9ababBmaGwXIoBKZ+GTy0pP185beGg7Llih/NSHSV2XAs1lnznocSg==}
-    engines: {node: '>= 8'}
-
-  '@oclif/core@4.11.14':
-    resolution: {integrity: sha512-cZ5Ktd+rT0PO+o7KBH4vRFTgg+xMLf8F41WK39p8MkXEViZA/Qqe+4lzZT6102zgUxMORET1HtF9t5w8CB3tnQ==}
-    engines: {node: '>=18.0.0'}
-
-  '@opentelemetry/api@1.9.0':
-    resolution: {integrity: sha512-3giAOQvZiH5F9bMlMiv8+GSPMeqg0dbaeo58/0SlA9sxSqZhnUtxzX9/2FzyhS9sWQf5S0GJE0AKBrFqjpeYcg==}
-    engines: {node: '>=8.0.0'}
-
-  '@oslojs/encoding@1.1.0':
-    resolution: {integrity: sha512-70wQhgYmndg4GCPxPPxPGevRKqTIJ2Nh4OkiMWmDAVYsTQ+Ta7Sq+rPevXyXGdzr30/qZBnyOalCszoMxlyldQ==}
-
-  '@oven/bun-darwin-aarch64@1.3.11':
-    resolution: {integrity: sha512-/8IzqSu4/OWGRs7Fs2ROzGVwJMFTBQkgAp6sAthkBYoN7OiM4rY/CpPVs2X9w9N1W61CHSkEdNKi8HrLZKfK3g==}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@oven/bun-darwin-x64-baseline@1.3.11':
-    resolution: {integrity: sha512-CYjIHWaQG7T4phfjErHr6BiXRs0K/9DqMeiohJmuYSBF+H2m56vFslOenLCguGYQL9jeiiCZBeoVCpwjxZrMgQ==}
-    cpu: [x64]
-    os: [darwin]
-
-  '@oven/bun-darwin-x64@1.3.11':
-    resolution: {integrity: sha512-TT7eUihnAzxM2tlZesusuC75PAOYKvUBgVU/Nm/lakZ/DpyuqhNkzUfcxSgmmK9IjVWzMmezLIGZl16XGCGJng==}
-    cpu: [x64]
-    os: [darwin]
-
-  '@oven/bun-linux-aarch64-musl@1.3.11':
-    resolution: {integrity: sha512-jBwYCLG5Eb+PqtFrc3Wp2WMYlw1Id75gUcsdP+ApCOpf5oQhHxkFWCjZmcDoioDmEhMWAiM3wtwSrTlPg+sI6Q==}
-    cpu: [arm64]
-    os: [linux]
-
-  '@oven/bun-linux-aarch64@1.3.11':
-    resolution: {integrity: sha512-8XMLyRNxHF4jfLajkWt+F8UDxsWbzysyxQVMZKUXwoeGvaxB0rVd07r3YbgDtG8U6khhRFM3oaGp+CQ0whwmdA==}
-    cpu: [arm64]
-    os: [linux]
-
-  '@oven/bun-linux-x64-baseline@1.3.11':
-    resolution: {integrity: sha512-KZlf1jKtf4jai8xiQv/0XRjxVVhHnw/HtUKtLdOeQpTOQ1fQFhLoz2FGGtVRd0LVa/yiRbSz9HlWIzWlmJClng==}
-    cpu: [x64]
-    os: [linux]
-
-  '@oven/bun-linux-x64-musl-baseline@1.3.11':
-    resolution: {integrity: sha512-J+qz4Al05PrNIOdj7xsWVTyx0c/gjUauG5nKV3Rrx0Q+5JO+1pPVlnfNmWbOF9pKG4f3IGad8KXJUfGMORld+Q==}
-    cpu: [x64]
-    os: [linux]
-
-  '@oven/bun-linux-x64-musl@1.3.11':
-    resolution: {integrity: sha512-ADImD4yCHNpqZu718E2chWcCaAHvua90yhmpzzV6fF4zOhwkGGbPCgUWmKyJ83uz+DXaPdYxX0ttDvtolrzx3Q==}
-    cpu: [x64]
-    os: [linux]
-
-  '@oven/bun-linux-x64@1.3.11':
-    resolution: {integrity: sha512-z3GFCk1UBzDOOiEBHL32lVP7Edi26BhOjKb6bIc0nRyabbRiyON4++GR0zmd/H5zM5S0+UcXFgCGnD+b8avTLw==}
-    cpu: [x64]
-    os: [linux]
-
-  '@oven/bun-windows-aarch64@1.3.11':
-    resolution: {integrity: sha512-UOdkwScHRkGPz+n9ZJU7sTkTvqV7rD1SLCLaru1xH8WRsV7tDorPqNCzEN1msOIiPRK825nvAtEm9UsomO1GsA==}
-    cpu: [arm64]
-    os: [win32]
-
-  '@oven/bun-windows-x64-baseline@1.3.11':
-    resolution: {integrity: sha512-cCsXK9AQ9Zf18QlVnbrFu2IKfr4sf2sfbErkF2jfCzyCO9Bnhl0KRx63zlN+Ni1xU7gcBLAssgcui5R400N2eA==}
-    cpu: [x64]
-    os: [win32]
-
-  '@oven/bun-windows-x64@1.3.11':
-    resolution: {integrity: sha512-E51tyWDP1l0CbjZYhiUxhDGPaY8Hf5YBREx0PHBff1LM1/q3qsJ6ZvRUa8YbbOO0Ax9QP6GHjD9vf3n6bXZ7QA==}
-    cpu: [x64]
-    os: [win32]
-
-  '@pinojs/redact@0.4.0':
-    resolution: {integrity: sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==}
-
-  '@pkgjs/parseargs@0.11.0':
-    resolution: {integrity: sha512-+1VkjdD0QBLPodGrJUeqarH8VAIvQODIbwh9XpP5Syisf7YoQgsJKPNFoqqLQlu+VQ/tVSshMR6loPMn8U+dPg==}
-    engines: {node: '>=14'}
-
-  '@playwright/test@1.59.1':
-    resolution: {integrity: sha512-PG6q63nQg5c9rIi4/Z5lR5IVF7yU5MqmKaPOe0HSc0O2cX1fPi96sUQu5j7eo4gKCkB2AnNGoWt7y4/Xx3Kcqg==}
-    engines: {node: '>=18'}
-    hasBin: true
-
-  '@posthog/core@1.39.6':
-    resolution: {integrity: sha512-o6ajIwN5zXoNP0D4H/QPmOyibNTUkSyOR6ya7AG5U2ywXx4awo72L2KnCoiZPQM5x/bXv6jPBdimH8M18Ax0aw==}
-
-  '@posthog/types@1.392.0':
-    resolution: {integrity: sha512-nctNujXL3FC1v99FktaTMSugSD9ZOZekEpahUSafkU2TSvW+XGKNkQZbokuJtiWvPBK208dwMJva8UfBkChqpw==}
-
-  '@protobufjs/aspromise@1.1.2':
-    resolution: {integrity: sha512-j+gKExEuLmKwvz3OgROXtrJ2UG2x8Ch2YZUxahh+s1F2HZ+wAceUNLkvy6zKCPVRkU++ZWQrdxsUeQXmcg4uoQ==}
-
-  '@protobufjs/base64@1.1.2':
-    resolution: {integrity: sha512-AZkcAA5vnN/v4PDqKyMR5lx7hZttPDgClv83E//FMNhR2TMcLUhfRUBHCmSl0oi9zMgDDqRUJkSxO3wm85+XLg==}
-
-  '@protobufjs/codegen@2.0.4':
-    resolution: {integrity: sha512-YyFaikqM5sH0ziFZCN3xDC7zeGaB/d0IUb9CATugHWbd1FRFwWwt4ld4OYMPWu5a3Xe01mGAULCdqhMlPl29Jg==}
-
-  '@protobufjs/eventemitter@1.1.0':
-    resolution: {integrity: sha512-j9ednRT81vYJ9OfVuXG6ERSTdEL1xVsNgqpkxMsbIabzSo3goCjDIveeGv5d03om39ML71RdmrGNjG5SReBP/Q==}
-
-  '@protobufjs/fetch@1.1.0':
-    resolution: {integrity: sha512-lljVXpqXebpsijW71PZaCYeIcE5on1w5DlQy5WH6GLbFryLUrBD4932W/E2BSpfRJWseIL4v/KPgBFxDOIdKpQ==}
-
-  '@protobufjs/float@1.0.2':
-    resolution: {integrity: sha512-Ddb+kVXlXst9d+R9PfTIxh1EdNkgoRe5tOX6t01f1lYWOvJnSPDBlG241QLzcyPdoNTsblLUdujGSE4RzrTZGQ==}
-
-  '@protobufjs/inquire@1.1.0':
-    resolution: {integrity: sha512-kdSefcPdruJiFMVSbn801t4vFK7KB/5gd2fYvrxhuJYg8ILrmn9SKSX2tZdV6V+ksulWqS7aXjBcRXl3wHoD9Q==}
-
-  '@protobufjs/path@1.1.2':
-    resolution: {integrity: sha512-6JOcJ5Tm08dOHAbdR3GrvP+yUUfkjG5ePsHYczMFLq3ZmMkAD98cDgcT2iA1lJ9NVwFd4tH/iSSoe44YWkltEA==}
-
-  '@protobufjs/pool@1.1.0':
-    resolution: {integrity: sha512-0kELaGSIDBKvcgS4zkjz1PeddatrjYcmMWOlAuAPwAeccUrPHdUqo/J6LiymHHEiJT5NrF1UVwxY14f+fy4WQw==}
-
-  '@protobufjs/utf8@1.1.0':
-    resolution: {integrity: sha512-Vvn3zZrhQZkkBE8LSuW3em98c0FwgO4nxzv6OdSxPKJIEKY2bGbHn+mhGIPerzI4twdxaP8/0+06HBpwf345Lw==}
-
-  '@radix-ui/number@1.1.2':
-    resolution: {integrity: sha512-ceTwaxc4I5IOi97DgCotl3pqiyRGvffcc0oOsE2dQYaJOFIDsDt4VWG6xEbg1QePv9QWausCEIppud/tJ1wNig==}
-
-  '@radix-ui/primitive@1.1.4':
-    resolution: {integrity: sha512-7AdCK9PQyiljKoBDbN8OuctCbd/esdwZPQ8RtOE3SsyQtUpiPb+ND75q0jEhC1m1ecBI0MFNeLJvwIh9iKHRcQ==}
-
-  '@radix-ui/react-accordion@1.2.15':
-    resolution: {integrity: sha512-24Zz/0SYx8F2bSVThBnQrdJs2VbKelyuJordcFRRdA0fRAhrq/wSegGCqaQz34VQoiWqSMGYCYXEhynLSlyQlg==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-arrow@1.1.11':
-    resolution: {integrity: sha512-Kdil9BB1rIFC/khmf4hC35bn8701AJcizTU7G7cUbEbk5XqqbjDuHW60uUfKqO5WojjZcbAW51Q7P0hRmMLw8A==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-avatar@1.2.1':
-    resolution: {integrity: sha512-+8PWoLLZv3AVb5m0pvoiOca/bQGzc9vPVb+982HB2x3Un0DpYEPM3zLMl4oqRpBsocJuNqLkiv/HXTnTrlwr4g==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-checkbox@1.3.6':
-    resolution: {integrity: sha512-eUEUoGMDpfkgHWSE97ZZaUJtzR1M7EKnNIpD1Q16+8JR9NWghcaqMulx9PuCQ720w0UclfYn6FEbCdd5Hx087g==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-collapsible@1.1.15':
-    resolution: {integrity: sha512-8A1zibu5skAQ+UVbaeNH5hVMibiFCRJzgMuM14LTWGttnTZKQL9jwYnhAbHRuxrtCqPXa4JvvnVUq1pTNgyZYw==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-collection@1.1.11':
-    resolution: {integrity: sha512-djW9+zeg137KQdlPtmE8xnaD+K2rcXXMWFrSg0hsmYZ6HRbdTA7tDHFgpaW9+huWVEu0RCabL+985T4TA0BE7g==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-compose-refs@1.1.3':
-    resolution: {integrity: sha512-rYOP8OMnuuPMQF1uhPVlGNcCDlkokKqGFE3JcxFViIkAXP7EvFWUliJAstrapypaBLJNHbZL6jGhbVDGTwmVhA==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-context-menu@2.3.2':
-    resolution: {integrity: sha512-qzsA/ZPhF6yMxBOTIk1nlCkoy2mswSbwYL+ErBa2iP0s4WWrlxmczArYqMcpVfEjmM7KJj/ADPXky0yZfbSxtQ==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-context@1.1.4':
-    resolution: {integrity: sha512-QwH4PO5urrbO+FaGd5Aglg+YJgWTyyuZ3g/6mKvsqraLkglDdckw9JafgL5McL5VEJ6EPNduPaT3ZE9BttDAqg==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-dialog@1.1.18':
-    resolution: {integrity: sha512-apa28mldjMgORmE6g/w3sCcA0Y9UAVeeDVoozN4i7kOw12mLl9RBchfzK3Nn6qxOWjrZhK1Lfy7f07kyzxtnBw==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-direction@1.1.2':
-    resolution: {integrity: sha512-C3vFhbyi4SW3PmbAi6Awpu4OzJtd0MxGurvSsYtr7p7nM8RNB3VAF3CUmnp2j50knpkrRcB7+ycVXzgLgF6yNA==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-dismissable-layer@1.1.14':
-    resolution: {integrity: sha512-4lUhWTWAjbDIqFrAPWJ3WqBOpO5YchVZ88X3nh6H9Lu5AFi5nCUeTPj3D8FSDmabmFeRe9ME0BDA4MwKTha5GQ==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-dropdown-menu@2.1.19':
-    resolution: {integrity: sha512-HZccBkbK0LOi8nYKIp5jll/zIRW0cCOmG6WWyqsSpmXCU+ZlcBbTqIwlBvPCu886C5RVu6c/kHV7xSP8IgYNHw==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-focus-guards@1.1.4':
-    resolution: {integrity: sha512-cot/aB/mOm0IYVYTTmQcEEK1M48lZWi8FlYe5nDPQQ8NYZUlXEFgncJ9p2Kzer3RKSrY7cTTpEMLZKNo9QoP5Q==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-focus-scope@1.1.11':
-    resolution: {integrity: sha512-Mn88Vg2whaRocGJNOH+DKFqYm6ySFPQaiwHNxZPyjn99B52KAEJWWY9NP83+nWdk2HM3rdov+STu9AG471Rt9w==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-id@1.1.2':
-    resolution: {integrity: sha512-orBC88futVpqCmhX1p4cvquNHsELQ+w+vBJnuj3ftETI5bJb0bZn3Tqu3SWN2IOcPycTnMGnhwoermvISt72sA==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-label@2.1.11':
-    resolution: {integrity: sha512-3PKvDDxOn62k0oV1n4QtNtD2vpu+zYjXR7ojLBPaO6SPvhy53yg0vAmgNeBQeJW5rV3dffoRG+HYfLBZuzw0CQ==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-menu@2.1.19':
-    resolution: {integrity: sha512-Mht9BVd1AIsNFVQr4KG3bIK7XQn5IXF0TL/2ObsrzOdc1loaly/+kBDL5roSCYn8j8XZkvpOD0WYLz2FQtH1Eg==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-popover@1.1.18':
-    resolution: {integrity: sha512-qdXDes+eHlnMUGlBAAAe5EG7oOQvqsXuq4mq585diMudg80iB+jHbsSeG3+Q4eWNsogNyhqU2p/3i+Y0iEepqg==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-popper@1.3.2':
-    resolution: {integrity: sha512-3QXNeMkdshed1MR3LNoiCirBywRFPkD8ETJa/HlPuLwSajaQixf2ro+isoDNJlGABg9ug41XuZpINZJIle4XWg==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-portal@1.1.13':
-    resolution: {integrity: sha512-z3oXfmaHLJTF1wktbjgD6cn9jiEbq3WSondB10LIuIt2m2Ym4iJlrW04/euMwENDdWDdE7z+OuY7Qyp1YpRSwA==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-presence@1.1.6':
-    resolution: {integrity: sha512-zdTk4PlUO0E18HnZ3wYbW0KkJJxWCdiNYp6g6X1PtONFhxVkg01vliTJAmwIszU6mHiyBOoW9P0rAugl5/hULQ==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-primitive@2.1.7':
-    resolution: {integrity: sha512-bC3NiwsprbxKjuon9l7X6BUTw7FPVzEYaL92MPEY5SCd/9hUTPXVFtVwRix7778wtRsVao+zE062gL79FZleeQ==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-progress@1.1.11':
-    resolution: {integrity: sha512-KqiGJcFaZDc+BvveAgU3ZhACg2MvSUDrCBx4lRR/ZVRNal0bvt8lBpvnSkep9heeOuF8Qfw3fszLDX4OpQ2NVw==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-radio-group@1.4.2':
-    resolution: {integrity: sha512-W8Uo9riHnlzLLWy+r2mVHUyuEWqD/+be4PZzbEvaGoFSBDHkm+GYWjtcE6u3AmPKNyfanWpnVfpZ2GqPCdzzsw==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-roving-focus@1.1.14':
-    resolution: {integrity: sha512-8Qcnx9447tx/aCBgw6Jenfqg4Skq+vqab9mCBmuGNipIS5YXvL275wbKEu7+ICYHIlAPgCduUMJH1XOYewKF6Q==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-scroll-area@1.2.13':
-    resolution: {integrity: sha512-7tncSubo2G0UY1e8rk+72qe3XRzrGnOLtZQ1PL1KoBfRUNX0NrJT5akb+0kfwSCc3gVR4wdHqyhAQBDpDNOwDw==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-select@2.3.2':
-    resolution: {integrity: sha512-brXD6C/V0fVK0DDbscLVw6LsXrjQ+ay8jdOBaN+tLb4vsHsAMm6Gt6eT77wHX1Eq8GPtD5rJ+RxFtfDozsb4+Q==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-separator@1.1.11':
-    resolution: {integrity: sha512-jRhe86+8PF7VZ1u14eOWVOuh2BuAhALg/FT1VcMC4OHedMTRUazDnDlKTt+yxo5cRNKHMfmvZ4sSQtWDeMV4CQ==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-slider@1.4.2':
-    resolution: {integrity: sha512-qt5C1ppJz66aUDrH1VccjPrq7aFchK0wBrn6xsxlCHNUyE57dRRQ7lp1QFpF7OscMexZF8MCGBTVBlENHPkNiA==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-slot@1.3.0':
-    resolution: {integrity: sha512-MojKku4U/miO8Av4Dkb+ctMAQx7JmY96LmtDQlAarCRtd7rN52QCSzBF+XAvr5S6coSVj9HEPBgHAHKEJVk/WA==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-switch@1.3.2':
-    resolution: {integrity: sha512-tgRBI3DdNwAJYE4BBZyZcz/HRRCvAsPkRvG1wvKc+41tBGMxPn/a87T/wikXAvyDypNQ9kaZwHbeZe+veHCGpA==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-tabs@1.1.16':
-    resolution: {integrity: sha512-v3Ab2l7z6U7tRB4xA0IyKdq0OsqaO1o9ZjsIEoKKnSZ/l96mZz8aCTX0NCXw+YVHJXr8Km4d+Mn6/Q8YjXa+gw==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-toggle-group@1.1.14':
-    resolution: {integrity: sha512-TK1vusNKb8IRhF23FTbRgUNZ9zfs5rGIyI7LfR3h26p9LrQ060i0uW9QWeD8baZMddaaP0DBGlIa6pbZG+mitg==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-toggle@1.1.13':
-    resolution: {integrity: sha512-bI2ILJrzwgmAsH05TsJ9pVrzqQwAip7OM2/krqAdYn0R16bl86UPWbe5VPHsALat0EnqpV01cGtkleaUKPNdNg==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-tooltip@1.2.11':
-    resolution: {integrity: sha512-8XZ6Py3y3W2nEzAUGCN5cfVKaUi+CVApcz1d6lrNVVf2hvYEixMRkq8k9ggPKnQUpRRuOV5avt8uvxViH2jLwA==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/react-use-callback-ref@1.1.2':
-    resolution: {integrity: sha512-xCso9j1/u8sEgP1RNHjFrXJLApL8LiqOkI1R4ywuN00rxWdYg4oQXuwKLS3i0j5NWLromUD27/4nlxj2UFVvIw==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-use-controllable-state@1.2.3':
-    resolution: {integrity: sha512-PLzC90MS+ReootmjC597dvopoelpZ8Q61HJkDXZSExitIq7PL55vHNnesAHwguHK0aPfBnpdNzQtv1uliaqQrA==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-use-effect-event@0.0.3':
-    resolution: {integrity: sha512-6c8ZqvPTWILEKnyVkP53EGRCcpnJiKTC21sS/6R1GF5xKyHJJWQEPfkqlcgUkdRQivd6tb23abUwe4ngWmY0JA==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-use-is-hydrated@0.1.1':
-    resolution: {integrity: sha512-qwOiz4Tjo8CNnrOLAYUMXeZwDzXgXpvK4TKQPmWLECM9XoWvA6+0Z2/7Ag3A4ivjS4ovbLJPbskkxioFyBhr8A==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-use-layout-effect@1.1.2':
-    resolution: {integrity: sha512-jrBWOxZITuGcnjRCM2t2U5ZPkCLxD+Ym6DjfssS5haTj2iiak/DOb64JeN6OdLfLgptb6/e2kKR+ZuTrGoZTPA==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-use-previous@1.1.2':
-    resolution: {integrity: sha512-IGBQPtRFdhN6MQ8dbegVmBq1LVZluya3F1jWY+puIcQC3MHctRwTDSBWCkL/3ZcnMJLTMJ++Z+ktmvg0F89iCw==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-use-rect@1.1.2':
-    resolution: {integrity: sha512-d8a+bBY/FxikNPlgJJoaBHZX+zKVbWHYJGTLnLvveQgFSTntkGdEKv3JDtHrMS0DNYpllz2nRsTLGLKYttbpmw==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-use-size@1.1.2':
-    resolution: {integrity: sha512-giWQp+4mxjBPt4KZ0MmyuykFNWfbDxKt4x+fPkRYmgRFJSbCZFzUglvMb/Kjn38tm10YP4ufiQZDx3zna4LU6w==}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  '@radix-ui/react-visually-hidden@1.2.7':
-    resolution: {integrity: sha512-1wNZBggTDK3GRuuQ6nP4k2yi7a6l7I5qbMPbZcRsrGsGVead/f/d5FhEzUvqFs0bcrDLx7n1zKQ3JvLR6whaaw==}
-    peerDependencies:
-      '@types/react': '*'
-      '@types/react-dom': '*'
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      '@types/react-dom':
-        optional: true
-
-  '@radix-ui/rect@1.1.2':
-    resolution: {integrity: sha512-xnXE7wG13PI+cxieVssYXlQJuYVRhH9NBoxt3KNwzghDIA69GMm7d4wXRouHIYjE+KvS6U/MsMO73NdS2MH9ZA==}
-
-  '@react-aria/focus@3.22.1':
-    resolution: {integrity: sha512-CPxtkyrBi/HYY5P3lE/57sQ6qfa0lN8E55TOm89H0kNGv0lKt+/0zP7lWERzBjRr5IxBVrQX4gFEowBN52LPaA==}
-    peerDependencies:
-      react: ^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1
-      react-dom: ^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1
-
-  '@react-aria/interactions@3.28.1':
-    resolution: {integrity: sha512-Bqb+HrD5I5MHS2SKBhISYqo2SW8Y2dfzgF/Y1lIJq7xqLxheo9vzxPGEHhz+XzkgGfoqEJx8A6a3C7uiqS3HWA==}
-    peerDependencies:
-      react: ^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1
-      react-dom: ^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1
-
-  '@react-types/shared@3.36.0':
-    resolution: {integrity: sha512-DkP/H0C2YjjS7gZWKNqOmU8a16qHPjQNdzMwmTq9SzplM6Iw0kVMTZ0OIoe6FOgGqa+FwMsE2QbPjh/n3g/jXQ==}
-    peerDependencies:
-      react: ^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1
-
-  '@rivet-dev/docs-theme@https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7':
-    resolution: {tarball: https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7}
-    version: 0.3.1
-    hasBin: true
-    peerDependencies:
-      astro: '>=5.0.0'
-      react: '>=19.0.0'
-      react-dom: '>=19.0.0'
-
-  '@rivet-gg/components@https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7#path:vendor/components':
-    resolution: {path: vendor/components, tarball: https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7}
-    version: 2.2.1
-    peerDependencies:
-      lodash: ^4.0.0
-      posthog-js: ^1.0.0
-      react: ^19
-      react-dom: ^19
-    peerDependenciesMeta:
-      posthog-js:
-        optional: true
-
-  '@rivet-gg/icons@https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7#path:vendor/icons':
-    resolution: {path: vendor/icons, tarball: https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7}
-    version: 2.2.1
-    engines: {node: '>=18'}
-    peerDependencies:
-      '@fortawesome/fontawesome-svg-core': ^6.5.2
-      '@fortawesome/free-brands-svg-icons': ^6.5.2
-      '@fortawesome/free-solid-svg-icons': ^6.5.2
-      '@fortawesome/react-fontawesome': ^0.2.2
-      react: ^19
-      react-dom: ^19
-
-  '@rivetkit/bare-ts@0.6.2':
-    resolution: {integrity: sha512-3qndQUQXLdwafMEqfhz24hUtDPcsf1Bu3q52Kb8MqeH8JUh3h6R4HYW3ZJXiQsLcyYyFM68PuIwlLRlg1xDEpg==}
-    engines: {node: ^14.18.0 || >=16.0.0}
-
-  '@rolldown/pluginutils@1.0.0-beta.27':
-    resolution: {integrity: sha512-+d0F4MKMCbeVUJwG96uQ4SgAznZNSq93I3V+9NHA4OpvqG8mRCpGdKmK8l/dl02h2CCDHwW2FqilnTyDcAnqjA==}
-
-  '@rollup/pluginutils@5.4.0':
-    resolution: {integrity: sha512-MfPp06CjRLfXQ3wY0R8vJDYBy/MvVcc9OulEfR0B8Iv9ko+GCNaRZ+EpJYFl27LhKsZK0o420sYCRHCjfCgeUg==}
-    engines: {node: '>=14.0.0'}
-    peerDependencies:
-      rollup: ^1.20.0||^2.0.0||^3.0.0||^4.0.0
-    peerDependenciesMeta:
-      rollup:
-        optional: true
-
-  '@rollup/rollup-android-arm-eabi@4.60.1':
-    resolution: {integrity: sha512-d6FinEBLdIiK+1uACUttJKfgZREXrF0Qc2SmLII7W2AD8FfiZ9Wjd+rD/iRuf5s5dWrr1GgwXCvPqOuDquOowA==}
-    cpu: [arm]
-    os: [android]
-
-  '@rollup/rollup-android-arm64@4.60.1':
-    resolution: {integrity: sha512-YjG/EwIDvvYI1YvYbHvDz/BYHtkY4ygUIXHnTdLhG+hKIQFBiosfWiACWortsKPKU/+dUwQQCKQM3qrDe8c9BA==}
-    cpu: [arm64]
-    os: [android]
-
-  '@rollup/rollup-darwin-arm64@4.60.1':
-    resolution: {integrity: sha512-mjCpF7GmkRtSJwon+Rq1N8+pI+8l7w5g9Z3vWj4T7abguC4Czwi3Yu/pFaLvA3TTeMVjnu3ctigusqWUfjZzvw==}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@rollup/rollup-darwin-x64@4.60.1':
-    resolution: {integrity: sha512-haZ7hJ1JT4e9hqkoT9R/19XW2QKqjfJVv+i5AGg57S+nLk9lQnJ1F/eZloRO3o9Scy9CM3wQ9l+dkXtcBgN5Ew==}
-    cpu: [x64]
-    os: [darwin]
-
-  '@rollup/rollup-freebsd-arm64@4.60.1':
-    resolution: {integrity: sha512-czw90wpQq3ZsAVBlinZjAYTKduOjTywlG7fEeWKUA7oCmpA8xdTkxZZlwNJKWqILlq0wehoZcJYfBvOyhPTQ6w==}
-    cpu: [arm64]
-    os: [freebsd]
-
-  '@rollup/rollup-freebsd-x64@4.60.1':
-    resolution: {integrity: sha512-KVB2rqsxTHuBtfOeySEyzEOB7ltlB/ux38iu2rBQzkjbwRVlkhAGIEDiiYnO2kFOkJp+Z7pUXKyrRRFuFUKt+g==}
-    cpu: [x64]
-    os: [freebsd]
-
-  '@rollup/rollup-linux-arm-gnueabihf@4.60.1':
-    resolution: {integrity: sha512-L+34Qqil+v5uC0zEubW7uByo78WOCIrBvci69E7sFASRl0X7b/MB6Cqd1lky/CtcSVTydWa2WZwFuWexjS5o6g==}
-    cpu: [arm]
-    os: [linux]
-
-  '@rollup/rollup-linux-arm-musleabihf@4.60.1':
-    resolution: {integrity: sha512-n83O8rt4v34hgFzlkb1ycniJh7IR5RCIqt6mz1VRJD6pmhRi0CXdmfnLu9dIUS6buzh60IvACM842Ffb3xd6Gg==}
-    cpu: [arm]
-    os: [linux]
-
-  '@rollup/rollup-linux-arm64-gnu@4.60.1':
-    resolution: {integrity: sha512-Nql7sTeAzhTAja3QXeAI48+/+GjBJ+QmAH13snn0AJSNL50JsDqotyudHyMbO2RbJkskbMbFJfIJKWA6R1LCJQ==}
-    cpu: [arm64]
-    os: [linux]
-
-  '@rollup/rollup-linux-arm64-musl@4.60.1':
-    resolution: {integrity: sha512-+pUymDhd0ys9GcKZPPWlFiZ67sTWV5UU6zOJat02M1+PiuSGDziyRuI/pPue3hoUwm2uGfxdL+trT6Z9rxnlMA==}
-    cpu: [arm64]
-    os: [linux]
-
-  '@rollup/rollup-linux-loong64-gnu@4.60.1':
-    resolution: {integrity: sha512-VSvgvQeIcsEvY4bKDHEDWcpW4Yw7BtlKG1GUT4FzBUlEKQK0rWHYBqQt6Fm2taXS+1bXvJT6kICu5ZwqKCnvlQ==}
-    cpu: [loong64]
-    os: [linux]
-
-  '@rollup/rollup-linux-loong64-musl@4.60.1':
-    resolution: {integrity: sha512-4LqhUomJqwe641gsPp6xLfhqWMbQV04KtPp7/dIp0nzPxAkNY1AbwL5W0MQpcalLYk07vaW9Kp1PBhdpZYYcEw==}
-    cpu: [loong64]
-    os: [linux]
-
-  '@rollup/rollup-linux-ppc64-gnu@4.60.1':
-    resolution: {integrity: sha512-tLQQ9aPvkBxOc/EUT6j3pyeMD6Hb8QF2BTBnCQWP/uu1lhc9AIrIjKnLYMEroIz/JvtGYgI9dF3AxHZNaEH0rw==}
-    cpu: [ppc64]
-    os: [linux]
-
-  '@rollup/rollup-linux-ppc64-musl@4.60.1':
-    resolution: {integrity: sha512-RMxFhJwc9fSXP6PqmAz4cbv3kAyvD1etJFjTx4ONqFP9DkTkXsAMU4v3Vyc5BgzC+anz7nS/9tp4obsKfqkDHg==}
-    cpu: [ppc64]
-    os: [linux]
-
-  '@rollup/rollup-linux-riscv64-gnu@4.60.1':
-    resolution: {integrity: sha512-QKgFl+Yc1eEk6MmOBfRHYF6lTxiiiV3/z/BRrbSiW2I7AFTXoBFvdMEyglohPj//2mZS4hDOqeB0H1ACh3sBbg==}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@rollup/rollup-linux-riscv64-musl@4.60.1':
-    resolution: {integrity: sha512-RAjXjP/8c6ZtzatZcA1RaQr6O1TRhzC+adn8YZDnChliZHviqIjmvFwHcxi4JKPSDAt6Uhf/7vqcBzQJy0PDJg==}
-    cpu: [riscv64]
-    os: [linux]
-
-  '@rollup/rollup-linux-s390x-gnu@4.60.1':
-    resolution: {integrity: sha512-wcuocpaOlaL1COBYiA89O6yfjlp3RwKDeTIA0hM7OpmhR1Bjo9j31G1uQVpDlTvwxGn2nQs65fBFL5UFd76FcQ==}
-    cpu: [s390x]
-    os: [linux]
-
-  '@rollup/rollup-linux-x64-gnu@4.60.1':
-    resolution: {integrity: sha512-77PpsFQUCOiZR9+LQEFg9GClyfkNXj1MP6wRnzYs0EeWbPcHs02AXu4xuUbM1zhwn3wqaizle3AEYg5aeoohhg==}
-    cpu: [x64]
-    os: [linux]
-
-  '@rollup/rollup-linux-x64-musl@4.60.1':
-    resolution: {integrity: sha512-5cIATbk5vynAjqqmyBjlciMJl1+R/CwX9oLk/EyiFXDWd95KpHdrOJT//rnUl4cUcskrd0jCCw3wpZnhIHdD9w==}
-    cpu: [x64]
-    os: [linux]
-
-  '@rollup/rollup-openbsd-x64@4.60.1':
-    resolution: {integrity: sha512-cl0w09WsCi17mcmWqqglez9Gk8isgeWvoUZ3WiJFYSR3zjBQc2J5/ihSjpl+VLjPqjQ/1hJRcqBfLjssREQILw==}
-    cpu: [x64]
-    os: [openbsd]
-
-  '@rollup/rollup-openharmony-arm64@4.60.1':
-    resolution: {integrity: sha512-4Cv23ZrONRbNtbZa37mLSueXUCtN7MXccChtKpUnQNgF010rjrjfHx3QxkS2PI7LqGT5xXyYs1a7LbzAwT0iCA==}
-    cpu: [arm64]
-    os: [openharmony]
-
-  '@rollup/rollup-win32-arm64-msvc@4.60.1':
-    resolution: {integrity: sha512-i1okWYkA4FJICtr7KpYzFpRTHgy5jdDbZiWfvny21iIKky5YExiDXP+zbXzm3dUcFpkEeYNHgQ5fuG236JPq0g==}
-    cpu: [arm64]
-    os: [win32]
-
-  '@rollup/rollup-win32-ia32-msvc@4.60.1':
-    resolution: {integrity: sha512-u09m3CuwLzShA0EYKMNiFgcjjzwqtUMLmuCJLeZWjjOYA3IT2Di09KaxGBTP9xVztWyIWjVdsB2E9goMjZvTQg==}
-    cpu: [ia32]
-    os: [win32]
-
-  '@rollup/rollup-win32-x64-gnu@4.60.1':
-    resolution: {integrity: sha512-k+600V9Zl1CM7eZxJgMyTUzmrmhB/0XZnF4pRypKAlAgxmedUA+1v9R+XOFv56W4SlHEzfeMtzujLJD22Uz5zg==}
-    cpu: [x64]
-    os: [win32]
-
-  '@rollup/rollup-win32-x64-msvc@4.60.1':
-    resolution: {integrity: sha512-lWMnixq/QzxyhTV6NjQJ4SFo1J6PvOX8vUx5Wb4bBPsEb+8xZ89Bz6kOXpfXj9ak9AHTQVQzlgzBEc1SyM27xQ==}
-    cpu: [x64]
-    os: [win32]
-
-  '@sandbox-agent/cli-darwin-arm64@0.4.2':
-    resolution: {integrity: sha512-+L1O8SI7k/LLhyB4dG0ghmz1cJHa0WtVjuRTrEE2gw/5EbGLWopPBsCVCmQ7snrQ4fPwtaiZDhfExcEj1VI7aw==}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@sandbox-agent/cli-darwin-x64@0.4.2':
-    resolution: {integrity: sha512-dDg/EwWsdgVVbJiiCX1scSNRRA48u77SsC7Tuqrfzx4fIJMLuLiIcmEtXQyCBWysSyQNV2Cr+PYXXQfCb3xg8g==}
-    cpu: [x64]
-    os: [darwin]
-
-  '@sandbox-agent/cli-linux-arm64@0.4.2':
-    resolution: {integrity: sha512-TGmTUexMoubmWQyTeaOJu0rDVl2h0Ifh1pZ0ceZy7u/6Eoqs2n46CbfQtasUxZJf10uxPgRyzEDhcdDrTYVQUA==}
-    cpu: [arm64]
-    os: [linux]
-
-  '@sandbox-agent/cli-linux-x64@0.4.2':
-    resolution: {integrity: sha512-H9Rbqq0DRkCHvakzefJUDrDa2y+vJjlYd5/tefzKbQ34locE13TGNygRLxdEVXpBECjK9wVdBwTVEphQNsOcjw==}
-    cpu: [x64]
-    os: [linux]
-
-  '@sandbox-agent/cli-shared@0.4.2':
-    resolution: {integrity: sha512-sjZXRkKeFXCSKR6hHzF2Af8CCRO3F3WFwVQJ22+sLTXJ2xskV8lkUE4egknQU9B5BC1Zumts/YiNCFQWG85awQ==}
-
-  '@sandbox-agent/cli-win32-x64@0.4.2':
-    resolution: {integrity: sha512-lZNfHWPwQe/VH51Yvrl/ATCUvBZ3a+c8mwovojhQcmZlv4QuUQPkuvxhPqHRh9AyBx78L5J/ha46es2doa34nQ==}
-    cpu: [x64]
-    os: [win32]
-
-  '@sandbox-agent/cli@0.4.2':
-    resolution: {integrity: sha512-trO//ypJBSt5xkewuol9LOykvDgHwUXq8R+yQVS+0CmpN3lYUtewHkb+At9RVGRhDMmJZY2oasaXDnhfurQ33w==}
-    hasBin: true
-
-  '@sentry-internal/browser-utils@8.55.2':
-    resolution: {integrity: sha512-GnKod+gL/Y+1FUM/RGV8q6le1CoyiGbT40MitEK7eVwWe+bfTRq1gN7ioupyHFMUg1RlQkDQ4/sENmio/uow5A==}
-    engines: {node: '>=14.18'}
-
-  '@sentry-internal/feedback@8.55.2':
-    resolution: {integrity: sha512-XQy//NWbL0mLLM5w8wNDWMNpXz39VUyW2397dUrH8++kR63WhUVAvTOtL0o0GMVadSAzl1b08oHP9zSUNFQwcg==}
-    engines: {node: '>=14.18'}
-
-  '@sentry-internal/replay-canvas@8.55.2':
-    resolution: {integrity: sha512-P/jGiuR7dRLG9IzD/463fLgiibyYceauav/9prRG0ZxJm1AtuO02OKball2Fs3bbzdzwHCTlcsUuL2ivDF4b5A==}
-    engines: {node: '>=14.18'}
-
-  '@sentry-internal/replay@8.55.2':
-    resolution: {integrity: sha512-+W43Z697EVe/OgpGW07B773sa8xO1UbpnW0Cr+E+3FMDb6ZbXlaBUoagPTUkkQPdwBe35SDh6r8y2M3EOPGbxg==}
-    engines: {node: '>=14.18'}
-
-  '@sentry/browser@8.55.2':
-    resolution: {integrity: sha512-xHuPIEKhx9zw5quWvv4YgZprnwoVMCfxIhmOIf6KJ9iizyUHeUDcKpLS59xERroqwX4RpvK+l/27AZu4zfZlzQ==}
-    engines: {node: '>=14.18'}
-
-  '@sentry/core@8.55.2':
-    resolution: {integrity: sha512-YlEBwybUcOQ/KjMHDmof1vwweVnBtBxYlQp7DE3fOdtW4pqqdHWTnTntQs4VgYfxzjJYgtkd9LHlGtg8qy+JVQ==}
-    engines: {node: '>=14.18'}
-
-  '@sentry/react@8.55.2':
-    resolution: {integrity: sha512-1TPfKZYkJal2Dyt2W0tf1roOZmu7sqr6/dTqjdsuu2WgGTilMEreK26YqB8ROOYdMjkVJpNCcIKXQHyMp2eCwA==}
-    engines: {node: '>=14.18'}
-    peerDependencies:
-      react: ^16.14.0 || 17.x || 18.x || 19.x
-
-  '@shikijs/core@3.23.0':
-    resolution: {integrity: sha512-NSWQz0riNb67xthdm5br6lAkvpDJRTgB36fxlo37ZzM2yq0PQFFzbd8psqC2XMPgCzo1fW6cVi18+ArJ44wqgA==}
-
-  '@shikijs/engine-javascript@3.23.0':
-    resolution: {integrity: sha512-aHt9eiGFobmWR5uqJUViySI1bHMqrAgamWE1TYSUoftkAeCCAiGawPMwM+VCadylQtF4V3VNOZ5LmfItH5f3yA==}
-
-  '@shikijs/engine-oniguruma@3.23.0':
-    resolution: {integrity: sha512-1nWINwKXxKKLqPibT5f4pAFLej9oZzQTsby8942OTlsJzOBZ0MWKiwzMsd+jhzu8YPCHAswGnnN1YtQfirL35g==}
-
-  '@shikijs/langs@3.23.0':
-    resolution: {integrity: sha512-2Ep4W3Re5aB1/62RSYQInK9mM3HsLeB91cHqznAJMuylqjzNVAVCMnNWRHFtcNHXsoNRayP9z1qj4Sq3nMqYXg==}
-
-  '@shikijs/themes@3.23.0':
-    resolution: {integrity: sha512-5qySYa1ZgAT18HR/ypENL9cUSGOeI2x+4IvYJu4JgVJdizn6kG4ia5Q1jDEOi7gTbN4RbuYtmHh0W3eccOrjMA==}
-
-  '@shikijs/transformers@3.23.0':
-    resolution: {integrity: sha512-F9msZVxdF+krQNSdQ4V+Ja5QemeAoTQ2jxt7nJCwhDsdF1JWS3KxIQXA3lQbyKwS3J61oHRUSv4jYWv3CkaKTQ==}
-
-  '@shikijs/types@3.23.0':
-    resolution: {integrity: sha512-3JZ5HXOZfYjsYSk0yPwBrkupyYSLpAE26Qc0HLghhZNGTZg/SKxXIIgoxOpmmeQP0RRSDJTk1/vPfw9tbw+jSQ==}
-
-  '@shikijs/vscode-textmate@10.0.2':
-    resolution: {integrity: sha512-83yeghZ2xxin3Nj8z1NMd/NCuca+gsYXswywDy5bHvwlWL8tpTQmzGeUuHd9FC3E/SBEMvzJRwWEOz5gGes9Qg==}
-
-  '@silvia-odwyer/photon-node@0.3.4':
-    resolution: {integrity: sha512-bnly4BKB3KDTFxrUIcgCLbaeVVS8lrAkri1pEzskpmxu9MdfGQTy8b8EgcD83ywD3RPMsIulY8xJH5Awa+t9fA==}
-
-  '@sinclair/typebox@0.34.49':
-    resolution: {integrity: sha512-brySQQs7Jtn0joV8Xh9ZV/hZb9Ozb0pmazDIASBkYKCjXrXU3mpcFahmK/z4YDhGkQvP9mWJbVyahdtU5wQA+A==}
-
-  '@sindresorhus/slugify@3.0.0':
-    resolution: {integrity: sha512-SCrKh1zS96q+CuH5GumHcyQEVPsM4Ve8oE0E6tw7AAhGq50K8ojbTUOQnX/j9Mhcv/AXiIsbCfquovyGOo5fGw==}
-    engines: {node: '>=20'}
-
-  '@sindresorhus/transliterate@2.3.1':
-    resolution: {integrity: sha512-gVaaGtKYMYAMmI8buULVH3A2TXVJ98QiwGwI7ddrWGuGidGC2uRt4FHs22+8iROJ0QTzju9CuMjlVsrvpqsdhA==}
-    engines: {node: '>=20'}
-
-  '@smithy/core@3.26.0':
-    resolution: {integrity: sha512-mLUktFAn+Pa2agl1J7VgtYNFWCX8/b4GMJSK1hCu4YCvtBfM6F8Os3EP4ry+DFFlXOf3wyvlgXhuUdFoy52D3g==}
-    engines: {node: '>=18.0.0'}
-
-  '@smithy/core@3.29.1':
-    resolution: {integrity: sha512-qoiY4nrk5OCu1+eIR1VB8l5DmON/oKiqrd5zZFAhXJXjJlLWQusKEW/SkBDAtGDcPaz86m9kfcE1lngU0GlM6A==}
-    engines: {node: '>=18.0.0'}
-
-  '@smithy/credential-provider-imds@4.4.2':
-    resolution: {integrity: sha512-18UMDMyrAbDcpmL1gLUA7ww0fRTcdCrSjSJOi2Sbld+tVjwD/pW+OAwjlScFLR7vvBnhZrIPQ7kVuTf1mnJLug==}
-    engines: {node: '>=18.0.0'}
-
-  '@smithy/eventstream-codec@4.4.6':
-    resolution: {integrity: sha512-4N/HbPptAjynK/FDrTiSAEXmpEDcQw54SeY7qnKbNMOcbHK0B0nEq+OKDYXrnqyp5YhZGzXFDUJANGkdzz6H5Q==}
-    engines: {node: '>=18.0.0'}
-
-  '@smithy/fetch-http-handler@5.5.2':
-    resolution: {integrity: sha512-Ei/UK/QMhq0rKaMqGPlOAkE2yS9DZeYmZdk1RAKc3vp3zxgleZHZyBLlZv8yLsxljX4svCRuMTD6u3LLIcU4Bg==}
-    engines: {node: '>=18.0.0'}
-
-  '@smithy/is-array-buffer@2.2.0':
-    resolution: {integrity: sha512-GGP3O9QFD24uGeAXYUjwSTXARoqpZykHadOmA8G5vfJPK0/DC67qa//0qvqrJzL1xc8WQWX7/yc7fwudjPHPhA==}
-    engines: {node: '>=14.0.0'}
-
-  '@smithy/node-http-handler@4.8.2':
-    resolution: {integrity: sha512-wfl1uwrAqMH9/pi4kqBo5LBcFwrJLxuDLqL7p7qNcJIFcyZDUc6pzhYk4CYv+DP7fIUpQCZumwNnkhPKS52osQ==}
-    engines: {node: '>=18.0.0'}
-
-  '@smithy/signature-v4@5.5.2':
-    resolution: {integrity: sha512-7xHpmPY4rt0IOmeAA8EfjgEH8isT+587TCdy9H6a7d4OMi5CQ0oEHhWllunvPu4j4Cq0vTFwdxXN/kABWPjdyA==}
-    engines: {node: '>=18.0.0'}
-
-  '@smithy/types@4.15.0':
-    resolution: {integrity: sha512-Z5TAOxygoFvybJV3igo5SloFflSokHx2hu1eFA+DxDTcn+FtKxUSui+rbTRG1pAafMA888Z3MVvCWUuvCrTXjg==}
-    engines: {node: '>=18.0.0'}
-
-  '@smithy/types@4.15.1':
-    resolution: {integrity: sha512-x3L0XSACF6UYzKpa9biqiRMgvH5+wnFFew9Tm/grFYqgaupPwx/+ojDPpPJM8dZON3S9tjz5U+PQYsCBd1Mw5Q==}
-    engines: {node: '>=18.0.0'}
-
-  '@smithy/util-buffer-from@2.2.0':
-    resolution: {integrity: sha512-IJdWBbTcMQ6DA0gdNhh/BwrLkDR+ADW5Kr1aZmd4k3DIF6ezMV4R2NIAmT08wQJ3yUK82thHWmC/TnK/wpMMIA==}
-    engines: {node: '>=14.0.0'}
-
-  '@smithy/util-utf8@2.3.0':
-    resolution: {integrity: sha512-R8Rdn8Hy72KKcebgLiv8jQcQkXoLMOGGv5uI1/k0l+snqkOzQ1R0ChUBCxWMlBsFMekWjq0wRudIweFs7sKT5A==}
-    engines: {node: '>=14.0.0'}
-
-  '@smithy/util-utf8@4.4.6':
-    resolution: {integrity: sha512-gncTZwzB/RTzm29VvK1nZhCHdPjBkR8pNaFtUMbQpkG6vFMjPHe/RsnmMXfrYj8Qs5s6QH5f1Mp9CBXFOHxqlQ==}
-    engines: {node: '>=18.0.0'}
-
-  '@standard-schema/spec@1.1.0':
-    resolution: {integrity: sha512-l2aFy5jALhniG5HgqrD6jXLi/rUWrKvqN/qJx6yoJsgKhblVd+iqqU4RCXavm/jPityDo5TCvKMnpjKnOriy0w==}
-
-  '@swc/helpers@0.5.23':
-    resolution: {integrity: sha512-5lSsMOTXURePglDfvuAQUqkGek9Hg2kksOYay2m0+XR++b2NWYL/4sWyuvVBIs8oKnJaxkdi9whaL/sqN13afw==}
-
-  '@tailwindcss/container-queries@0.1.1':
-    resolution: {integrity: sha512-p18dswChx6WnTSaJCSGx6lTmrGzNNvm2FtXmiO6AuA1V4U5REyoqwmT6kgAsIMdjo07QdAfYXHJ4hnMtfHzWgA==}
-    peerDependencies:
-      tailwindcss: '>=3.2.0'
-
-  '@tailwindcss/typography@0.5.20':
-    resolution: {integrity: sha512-hwbzQuNUfcPvbegQFatVPl/MY/tcM9KLl963hQ5laJKPh81TEZ1+dNG9PirGvcaDBkp+BCshExAyKVPW91dozw==}
-    peerDependencies:
-      tailwindcss: '>=3.0.0 || >=4.0.0 || insiders'
-
-  '@tanstack/react-table@8.21.3':
-    resolution: {integrity: sha512-5nNMTSETP4ykGegmVkhjcS8tTLW6Vl4axfEGQN3v0zdHYbK4UfoqfPChclTrJ4EoK9QynqAu9oUf8VEmrpZ5Ww==}
-    engines: {node: '>=12'}
-    peerDependencies:
-      react: '>=16.8'
-      react-dom: '>=16.8'
-
-  '@tanstack/react-virtual@3.14.5':
-    resolution: {integrity: sha512-4EKRXh7zBLkbKbFmG3AUVkircuHd+7OdT1pocJSepxtfBd3qnrJgJ5rtPkRYyo9fmyVb2+pI2xPy5oYvMLQy6A==}
-    peerDependencies:
-      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-      react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-
-  '@tanstack/table-core@8.21.3':
-    resolution: {integrity: sha512-ldZXEhOBb8Is7xLs01fR3YEc3DERiz5silj8tnGkFZytt1abEvl/GhUmCE0PMLaMPTa3Jk4HbKmRlHmu+gCftg==}
-    engines: {node: '>=12'}
-
-  '@tanstack/virtual-core@3.17.3':
-    resolution: {integrity: sha512-8Np/TFELpI0ySuJoVmjvOrQYXH/8sTX0Biv9szhFhY39xOdAAY+smrMxjxOum/ux3eM8MUJQsEJ0/R0UpvC8dw==}
-
-  '@tokenizer/inflate@0.4.1':
-    resolution: {integrity: sha512-2mAv+8pkG6GIZiF1kNg1jAjh27IDxEPKwdGul3snfztFerfPGI1LjDezZp3i7BElXompqEtPmoPx6c2wgtWsOA==}
-    engines: {node: '>=18'}
-
-  '@tokenizer/token@0.3.0':
-    resolution: {integrity: sha512-OvjF+z51L3ov0OyAU0duzsYuvO01PH7x4t6DJx+guahgTnBHkhJdG7soQeTSFLWN3efnHyibZ4Z8l2EuWwJN3A==}
-
-  '@tootallnate/quickjs-emscripten@0.23.0':
-    resolution: {integrity: sha512-C5Mc6rdnsaJDjO3UpGW/CQTHtCKaYlScZTly4JIu97Jxo/odCiH0ITnDXSJPTOrEKk/ycSZ0AOgTmkDtkOsvIA==}
-
-  '@turbo/darwin-64@2.9.1':
-    resolution: {integrity: sha512-d1zTcIf6VWT7cdfjhi0X36C2PRsUi2HdEwYzVgkLHmuuYtL+1Y1Zu3JdlouoB/NjG2vX3q4NnKLMNhDOEweoIg==}
-    cpu: [x64]
-    os: [darwin]
-
-  '@turbo/darwin-arm64@2.9.1':
-    resolution: {integrity: sha512-AwJ4mA++Kpem33Lcov093hS1LrgqbKxqq5FCReoqsA8ayEG6eAJAo8ItDd9qQTdBiXxZH8GHCspLAMIe1t3Xyw==}
-    cpu: [arm64]
-    os: [darwin]
-
-  '@turbo/linux-64@2.9.1':
-    resolution: {integrity: sha512-HT9SjKkjEw9uvlgly/qwCGEm4wOXOwQPSPS+wkg+/O1Qan3F1uU/0PFYzxl3m4lfuV3CP9wr2Dq5dPrUX+B9Ag==}
-    cpu: [x64]
-    os: [linux]
-
-  '@turbo/linux-arm64@2.9.1':
-    resolution: {integrity: sha512-+4s5GZs3kjxc1KMhLBhoQy4UBkXjOhgidA9ipNllkA4JLivSqUCuOgU1Xbyp6vzYrsqHJ9vvwo/2mXgEtD6ZHg==}
-    cpu: [arm64]
-    os: [linux]
-
-  '@turbo/windows-64@2.9.1':
-    resolution: {integrity: sha512-ZO7GCyQd5HV564XWHc9KysjanFfM3DmnWquyEByu+hQMq42g9OMU/fYOCfHS6Xj2aXkIg2FHJeRV+iAck2YrbQ==}
-    cpu: [x64]
-    os: [win32]
-
-  '@turbo/windows-arm64@2.9.1':
-    resolution: {integrity: sha512-BjX2fdz38mBb/H94JXrD5cJ+mEq8NmsCbYdC42JzQebJ0X8EdNgyFoEhOydPGViOmaRmhhdZnPZKKn6wahSpcA==}
-    cpu: [arm64]
-    os: [win32]
-
-  '@types/babel__core@7.20.5':
-    resolution: {integrity: sha512-qoQprZvz5wQFJwMDqeseRXWv3rqMvhgpbXFfVyWhbx9X47POIA6i/+dXefEmZKoAgOaTdaIgNSMqMIU61yRyzA==}
-
-  '@types/babel__generator@7.27.0':
-    resolution: {integrity: sha512-ufFd2Xi92OAVPYsy+P4n7/U7e68fex0+Ee8gSG9KX7eo084CWiQ4sdxktvdl0bOPupXtVJPY19zk6EwWqUQ8lg==}
-
-  '@types/babel__template@7.4.4':
-    resolution: {integrity: sha512-h/NUaSyG5EyxBIp8YRxo4RMe2/qQgvyowRwVMzhYhBCONbW8PUsg4lkFMrhgZhUe5z3L3MiLDuvyJ/CaPa2A8A==}
-
-  '@types/babel__traverse@7.28.0':
-    resolution: {integrity: sha512-8PvcXf70gTDZBgt9ptxJ8elBeBjcLOAcOtoO/mPJjtji1+CdGbHgm77om1GrsPxsiE+uXIpNSK64UYaIwQXd4Q==}
-
-  '@types/d3-array@3.2.2':
-    resolution: {integrity: sha512-hOLWVbm7uRza0BYXpIIW5pxfrKe0W+D5lrFiAEYR+pb6w3N2SwSMaJbXdUfSEv+dT4MfHBLtn5js0LAWaO6otw==}
-
-  '@types/d3-axis@3.0.6':
-    resolution: {integrity: sha512-pYeijfZuBd87T0hGn0FO1vQ/cgLk6E1ALJjfkC0oJ8cbwkZl3TpgS8bVBLZN+2jjGgg38epgxb2zmoGtSfvgMw==}
-
-  '@types/d3-brush@3.0.6':
-    resolution: {integrity: sha512-nH60IZNNxEcrh6L1ZSMNA28rj27ut/2ZmI3r96Zd+1jrZD++zD3LsMIjWlvg4AYrHn/Pqz4CF3veCxGjtbqt7A==}
-
-  '@types/d3-chord@3.0.6':
-    resolution: {integrity: sha512-LFYWWd8nwfwEmTZG9PfQxd17HbNPksHBiJHaKuY1XeqscXacsS2tyoo6OdRsjf+NQYeB6XrNL3a25E3gH69lcg==}
-
-  '@types/d3-color@3.1.3':
-    resolution: {integrity: sha512-iO90scth9WAbmgv7ogoq57O9YpKmFBbmoEoCHDB2xMBY0+/KVrqAaCDyCE16dUspeOvIxFFRI+0sEtqDqy2b4A==}
-
-  '@types/d3-contour@3.0.6':
-    resolution: {integrity: sha512-BjzLgXGnCWjUSYGfH1cpdo41/hgdWETu4YxpezoztawmqsvCeep+8QGfiY6YbDvfgHz/DkjeIkkZVJavB4a3rg==}
-
-  '@types/d3-delaunay@6.0.4':
-    resolution: {integrity: sha512-ZMaSKu4THYCU6sV64Lhg6qjf1orxBthaC161plr5KuPHo3CNm8DTHiLw/5Eq2b6TsNP0W0iJrUOFscY6Q450Hw==}
-
-  '@types/d3-dispatch@3.0.7':
-    resolution: {integrity: sha512-5o9OIAdKkhN1QItV2oqaE5KMIiXAvDWBDPrD85e58Qlz1c1kI/J0NcqbEG88CoTwJrYe7ntUCVfeUl2UJKbWgA==}
-
-  '@types/d3-drag@3.0.7':
-    resolution: {integrity: sha512-HE3jVKlzU9AaMazNufooRJ5ZpWmLIoc90A37WU2JMmeq28w1FQqCZswHZ3xR+SuxYftzHq6WU6KJHvqxKzTxxQ==}
-
-  '@types/d3-dsv@3.0.7':
-    resolution: {integrity: sha512-n6QBF9/+XASqcKK6waudgL0pf/S5XHPPI8APyMLLUHd8NqouBGLsU8MgtO7NINGtPBtk9Kko/W4ea0oAspwh9g==}
-
-  '@types/d3-ease@3.0.2':
-    resolution: {integrity: sha512-NcV1JjO5oDzoK26oMzbILE6HW7uVXOHLQvHshBUW4UMdZGfiY6v5BeQwh9a9tCzv+CeefZQHJt5SRgK154RtiA==}
-
-  '@types/d3-fetch@3.0.7':
-    resolution: {integrity: sha512-fTAfNmxSb9SOWNB9IoG5c8Hg6R+AzUHDRlsXsDZsNp6sxAEOP0tkP3gKkNSO/qmHPoBFTxNrjDprVHDQDvo5aA==}
-
-  '@types/d3-force@3.0.10':
-    resolution: {integrity: sha512-ZYeSaCF3p73RdOKcjj+swRlZfnYpK1EbaDiYICEEp5Q6sUiqFaFQ9qgoshp5CzIyyb/yD09kD9o2zEltCexlgw==}
-
-  '@types/d3-format@3.0.4':
-    resolution: {integrity: sha512-fALi2aI6shfg7vM5KiR1wNJnZ7r6UuggVqtDA+xiEdPZQwy/trcQaHnwShLuLdta2rTymCNpxYTiMZX/e09F4g==}
-
-  '@types/d3-geo@3.1.0':
-    resolution: {integrity: sha512-856sckF0oP/diXtS4jNsiQw/UuK5fQG8l/a9VVLeSouf1/PPbBE1i1W852zVwKwYCBkFJJB7nCFTbk6UMEXBOQ==}
-
-  '@types/d3-hierarchy@3.1.7':
-    resolution: {integrity: sha512-tJFtNoYBtRtkNysX1Xq4sxtjK8YgoWUNpIiUee0/jHGRwqvzYxkq0hGVbbOGSz+JgFxxRu4K8nb3YpG3CMARtg==}
-
-  '@types/d3-interpolate@3.0.4':
-    resolution: {integrity: sha512-mgLPETlrpVV1YRJIglr4Ez47g7Yxjl1lj7YKsiMCb27VJH9W8NVM6Bb9d8kkpG/uAQS5AmbA48q2IAolKKo1MA==}
-
-  '@types/d3-path@3.1.1':
-    resolution: {integrity: sha512-VMZBYyQvbGmWyWVea0EHs/BwLgxc+MKi1zLDCONksozI4YJMcTt8ZEuIR4Sb1MMTE8MMW49v0IwI5+b7RmfWlg==}
-
-  '@types/d3-polygon@3.0.2':
-    resolution: {integrity: sha512-ZuWOtMaHCkN9xoeEMr1ubW2nGWsp4nIql+OPQRstu4ypeZ+zk3YKqQT0CXVe/PYqrKpZAi+J9mTs05TKwjXSRA==}
-
-  '@types/d3-quadtree@3.0.6':
-    resolution: {integrity: sha512-oUzyO1/Zm6rsxKRHA1vH0NEDG58HrT5icx/azi9MF1TWdtttWl0UIUsjEQBBh+SIkrpd21ZjEv7ptxWys1ncsg==}
-
-  '@types/d3-random@3.0.4':
-    resolution: {integrity: sha512-UHYId5WTCx4L4YNel7NU00XUXXgvgpgZOvp10PuvsQENjMDXhh2RyFc0KBjO7B45ne4Ha1yVH7ii0vnzKkuzWA==}
-
-  '@types/d3-scale-chromatic@3.1.0':
-    resolution: {integrity: sha512-iWMJgwkK7yTRmWqRB5plb1kadXyQ5Sj8V/zYlFGMUBbIPKQScw+Dku9cAAMgJG+z5GYDoMjWGLVOvjghDEFnKQ==}
-
-  '@types/d3-scale@4.0.9':
-    resolution: {integrity: sha512-dLmtwB8zkAeO/juAMfnV+sItKjlsw2lKdZVVy6LRr0cBmegxSABiLEpGVmSJJ8O08i4+sGR6qQtb6WtuwJdvVw==}
-
-  '@types/d3-selection@3.0.11':
-    resolution: {integrity: sha512-bhAXu23DJWsrI45xafYpkQ4NtcKMwWnAC/vKrd2l+nxMFuvOT3XMYTIj2opv8vq8AO5Yh7Qac/nSeP/3zjTK0w==}
-
-  '@types/d3-shape@3.1.8':
-    resolution: {integrity: sha512-lae0iWfcDeR7qt7rA88BNiqdvPS5pFVPpo5OfjElwNaT2yyekbM0C9vK+yqBqEmHr6lDkRnYNoTBYlAgJa7a4w==}
-
-  '@types/d3-time-format@4.0.3':
-    resolution: {integrity: sha512-5xg9rC+wWL8kdDj153qZcsJ0FWiFt0J5RB6LYUNZjwSnesfblqrI/bJ1wBdJ8OQfncgbJG5+2F+qfqnqyzYxyg==}
-
-  '@types/d3-time@3.0.4':
-    resolution: {integrity: sha512-yuzZug1nkAAaBlBBikKZTgzCeA+k1uy4ZFwWANOfKw5z5LRhV0gNA7gNkKm7HoK+HRN0wX3EkxGk0fpbWhmB7g==}
-
-  '@types/d3-timer@3.0.2':
-    resolution: {integrity: sha512-Ps3T8E8dZDam6fUyNiMkekK3XUsaUEik+idO9/YjPtfj2qruF8tFBXS7XhtE4iIXBLxhmLjP3SXpLhVf21I9Lw==}
-
-  '@types/d3-transition@3.0.9':
-    resolution: {integrity: sha512-uZS5shfxzO3rGlu0cC3bjmMFKsXv+SmZZcgp0KD22ts4uGXp5EVYGzu/0YdwZeKmddhcAccYtREJKkPfXkZuCg==}
-
-  '@types/d3-zoom@3.0.8':
-    resolution: {integrity: sha512-iqMC4/YlFCSlO8+2Ii1GGGliCAY4XdeG748w5vQUbevlbDu0zSjH/+jojorQVBK/se0j6DUFNPBGSqD3YWYnDw==}
-
-  '@types/d3@7.4.3':
-    resolution: {integrity: sha512-lZXZ9ckh5R8uiFVt8ogUNf+pIrK4EsWrx2Np75WvF/eTpJ0FMHNhjXk8CKEx/+gpHbNQyJWehbFaTvqmHWB3ww==}
-
-  '@types/debug@4.1.13':
-    resolution: {integrity: sha512-KSVgmQmzMwPlmtljOomayoR89W4FynCAi3E8PPs7vmDVPe84hT+vGPKkJfThkmXs0x0jAaa9U8uW8bbfyS2fWw==}
-
-  '@types/estree-jsx@1.0.5':
-    resolution: {integrity: sha512-52CcUVNFyfb1A2ALocQw/Dd1BQFNmSdkuC3BkZ6iqhdMfQz7JWOFRuJFloOzjk+6WijU56m9oKXFAXc7o3Towg==}
-
-  '@types/estree@1.0.8':
-    resolution: {integrity: sha512-dWHzHa2WqEXI/O1E9OjrocMTKJl2mSrEolh1Iomrv6U+JuNwaHXsXx9bLu5gG7BUWFIN0skIQJQ/L1rIex4X6w==}
-
-  '@types/geojson@7946.0.16':
-    resolution: {integrity: sha512-6C8nqWur3j98U6+lXDfTUWIfgvZU+EumvpHKcYjujKH7woYyLj2sUmff0tRhrqM7BohUw7Pz3ZB1jj2gW9Fvmg==}
-
-  '@types/hast@3.0.4':
-    resolution: {integrity: sha512-WPs+bbQw5aCj+x6laNGWLH3wviHtoCv/P3+otBhbOhJgG8qtpdAMlTCxLtsTWA7LH1Oh/bFCHsBn0TPS5m30EQ==}
-
-  '@types/mdast@4.0.4':
-    resolution: {integrity: sha512-kGaNbPh1k7AFzgpud/gMdvIm5xuECykRR+JnWKQno9TAXVa6WIVCGTPvYGekIDL4uwCZQSYbUxNBSb1aUo79oA==}
-
-  '@types/mdx@2.0.14':
-    resolution: {integrity: sha512-T48PeuJtvLosNTPVhfnIp3i/n3a4g4Bad7YCq5k64D4u7NwDrAotikQ+5+sjtUvBmxCMlbo3dVL+C2dP0rWHzg==}
-
-  '@types/mime-types@2.1.4':
-    resolution: {integrity: sha512-lfU4b34HOri+kAY5UheuFMWPDOI+OPceBSHZKp69gEyTL/mmJ4cnU6Y/rlme3UL3GyOn6Y42hyIEw0/q8sWx5w==}
-
-  '@types/ms@2.1.0':
-    resolution: {integrity: sha512-GsCCIZDE/p3i96vtEqx+7dBUGXrc7zeSK3wwPHIaRThS+9OhWIXRqzs4d6k1SVU8g91DrNRWxWUGhp5KXQb2VA==}
-
-  '@types/nlcst@2.0.3':
-    resolution: {integrity: sha512-vSYNSDe6Ix3q+6Z7ri9lyWqgGhJTmzRjZRqyq15N0Z/1/UnVsno9G/N40NBijoYx2seFDIl0+B2mgAb9mezUCA==}
-
-  '@types/node-fetch@2.6.13':
-    resolution: {integrity: sha512-QGpRVpzSaUs30JBSGPjOg4Uveu384erbHBoT1zeONvyCfwQxIkUshLAOqN/k9EjGviPRmWTTe6aH2qySWKTVSw==}
-
-  '@types/node@18.19.130':
-    resolution: {integrity: sha512-GRaXQx6jGfL8sKfaIDD6OupbIHBr9jv7Jnaml9tB7l4v068PAOXqfcujMMo5PhbIs6ggR1XODELqahT2R8v0fg==}
-
-  '@types/node@22.19.15':
-    resolution: {integrity: sha512-F0R/h2+dsy5wJAUe3tAU6oqa2qbWY5TpNfL/RGmo1y38hiyO1w3x2jPtt76wmuaJI4DQnOBu21cNXQ2STIUUWg==}
-
-  '@types/node@24.13.2':
-    resolution: {integrity: sha512-fRa09kZTgu8o71KFcDjUFuc7F+dEbZYZmkI0mg5YBTRs0yMKjYHsq/c0urDKeDb+D5qVgXOdFcuu+DZPKOITwA==}
-
-  '@types/react-dom@19.2.3':
-    resolution: {integrity: sha512-jp2L/eY6fn+KgVVQAOqYItbF0VY/YApe5Mz2F0aykSO8gx31bYCZyvSeYxCHKvzHG5eZjc+zyaS5BrBWya2+kQ==}
-    peerDependencies:
-      '@types/react': ^19.2.0
-
-  '@types/react@19.2.17':
-    resolution: {integrity: sha512-MXfmqaVPEVgkBT/aY0aGCkRWWtByiYQXo3xdQ8r5RzuFrPiRn8Gar2tQdXSUQ2GKV3bkXckek89V8wQBY2Q/Aw==}
-
-  '@types/retry@0.12.0':
-    resolution: {integrity: sha512-wWKOClTTiizcZhXnPY4wikVAwmdYHp8q6DmC+EJUzAMsycb7HB32Kh9RN4+0gExjmPmZSAQjgURXIGATPegAvA==}
-
-  '@types/sax@1.2.7':
-    resolution: {integrity: sha512-rO73L89PJxeYM3s3pPPjiPgVVcymqU490g0YO5n5By0k2Erzj6tay/4lr1CHAAU4JyOWd1rpQ8bCf6cZfHU96A==}
-
-  '@types/semver@7.7.1':
-    resolution: {integrity: sha512-FmgJfu+MOcQ370SD0ev7EI8TlCAfKYU+B4m5T3yXc1CiRN94g/SZPtsCkk506aUDtlMnFZvasDwHHUcZUEaYuA==}
-
-  '@types/trusted-types@2.0.7':
-    resolution: {integrity: sha512-ScaPdn1dQczgbl0QFTeTOmVHFULt394XJgOQNoyVhZ6r2vLnMLJfBPd53SB52T/3G36VI1/g2MZaX0cwDuXsfw==}
-
-  '@types/unist@2.0.11':
-    resolution: {integrity: sha512-CmBKiL6NNo/OqgmMn95Fk9Whlp2mtvIv+KNpQKN2F4SjvrEesubTRWGYSg+BnWZOnlCaSTU1sMpsBOzgbYhnsA==}
-
-  '@types/unist@3.0.3':
-    resolution: {integrity: sha512-ko/gIFJRv177XgZsZcBwnqJN5x/Gien8qNOn0D5bQU/zAzVf9Zt3BlcUiLqhV9y4ARk0GbT3tnUiPNgnTXzc/Q==}
-
-  '@types/yauzl@2.10.3':
-    resolution: {integrity: sha512-oJoftv0LSuaDZE3Le4DbKX+KS9G36NzOeSap90UIK0yMA/NhKJhqlSGtNDORNRaIbQfzjXDrQa0ytJ6mNRGz/Q==}
-
-  '@uiw/codemirror-extensions-basic-setup@4.25.10':
-    resolution: {integrity: sha512-P3vytLlpE62KYSWrMUnwDCv2lvaQDuDZzyj03mHntuHo5bSl34fRZpjTY3kQTPGuXHxkGSYpoPFFj+hMTqaaMQ==}
-    peerDependencies:
-      '@codemirror/autocomplete': '>=6.0.0'
-      '@codemirror/commands': '>=6.0.0'
-      '@codemirror/language': '>=6.0.0'
-      '@codemirror/lint': '>=6.0.0'
-      '@codemirror/search': '>=6.0.0'
-      '@codemirror/state': '>=6.0.0'
-      '@codemirror/view': '>=6.0.0'
-
-  '@uiw/codemirror-theme-github@4.25.10':
-    resolution: {integrity: sha512-iMM2QT4FaebJMO4W7lXmxNkRPIjKzgY26wL0QG0Ugy0gzsnxoNz4zgNeFIblPA8rvrN3vOIhNNh4nk9UOlFKxA==}
-
-  '@uiw/codemirror-themes@4.25.10':
-    resolution: {integrity: sha512-Fqiz1HIuDlDftcL+/O53V333UOH6MqQ84VbiQB5egn6u+uDwAqACp1FrdAoi4wgpR3b3TGW4Gr0wIYcrJSSz1A==}
-    peerDependencies:
-      '@codemirror/language': '>=6.0.0'
-      '@codemirror/state': '>=6.0.0'
-      '@codemirror/view': '>=6.0.0'
-
-  '@uiw/react-codemirror@4.25.10':
-    resolution: {integrity: sha512-DzgSMwM5qzB7v1FIb4gEeriYt67iiay756/HIOM9mAbeOVK0MO7rqefHf0O5c0269pJKMW7AH9FjclExD23V9w==}
-    peerDependencies:
-      '@babel/runtime': '>=7.11.0'
-      '@codemirror/state': '>=6.0.0'
-      '@codemirror/theme-one-dark': '>=6.0.0'
-      '@codemirror/view': '>=6.0.0'
-      codemirror: '>=6.0.0'
-      react: '>=17.0.0'
-      react-dom: '>=17.0.0'
-
-  '@ungap/structured-clone@1.3.1':
-    resolution: {integrity: sha512-mUFwbeTqrVgDQxFveS+df2yfap6iuP20NAKAsBt5jDEoOTDew+zwLAOilHCeQJOVSvmgCX4ogqIrA0mnyr08yQ==}
-
-  '@upsetjs/venn.js@2.0.0':
-    resolution: {integrity: sha512-WbBhLrooyePuQ1VZxrJjtLvTc4NVfpOyKx0sKqioq9bX1C1m7Jgykkn8gLrtwumBioXIqam8DLxp88Adbue6Hw==}
-
-  '@vercel/detect-agent@1.2.3':
-    resolution: {integrity: sha512-VYNCgUc0nOmC4WJmWw9GkrKdfr8Zl4/rxhC5SvgacBgxiW9W/9NRttUoHHXV8xdII3MaRgkZZVX8Ikzc/Jmjag==}
-    engines: {node: '>=14'}
-
-  '@vercel/oidc@3.1.0':
-    resolution: {integrity: sha512-Fw28YZpRnA3cAHHDlkt7xQHiJ0fcL+NRcIqsocZQUSmbzeIKRpwttJjik5ZGanXP+vlA4SbTg+AbA3bP363l+w==}
-    engines: {node: '>= 20'}
-
-  '@vitejs/plugin-react@4.7.0':
-    resolution: {integrity: sha512-gUu9hwfWvvEDBBmgtAowQCojwZmJ5mcLn3aufeCsitijs3+f2NsrPtlAWIR6OPiqljl96GVCUbLe0HyqIpVaoA==}
-    engines: {node: ^14.18.0 || >=16.0.0}
-    peerDependencies:
-      vite: ^4.2.0 || ^5.0.0 || ^6.0.0 || ^7.0.0
-
-  '@vitest/expect@2.1.9':
-    resolution: {integrity: sha512-UJCIkTBenHeKT1TTlKMJWy1laZewsRIzYighyYiJKZreqtdxSos/S1t+ktRMQWu2CKqaarrkeszJx1cgC5tGZw==}
-
-  '@vitest/mocker@2.1.9':
-    resolution: {integrity: sha512-tVL6uJgoUdi6icpxmdrn5YNo3g3Dxv+IHJBr0GXHaEdTcw3F+cPKnsXFhli6nO+f/6SDKPHEK1UN+k+TQv0Ehg==}
-    peerDependencies:
-      msw: ^2.4.9
-      vite: ^5.0.0
-    peerDependenciesMeta:
-      msw:
-        optional: true
-      vite:
-        optional: true
-
-  '@vitest/pretty-format@2.1.9':
-    resolution: {integrity: sha512-KhRIdGV2U9HOUzxfiHmY8IFHTdqtOhIzCpd8WRdJiE7D/HUcZVD0EgQCVjm+Q9gkUXWgBvMmTtZgIG48wq7sOQ==}
-
-  '@vitest/runner@2.1.9':
-    resolution: {integrity: sha512-ZXSSqTFIrzduD63btIfEyOmNcBmQvgOVsPNPe0jYtESiXkhd8u2erDLnMxmGrDCwHCCHE7hxwRDCT3pt0esT4g==}
-
-  '@vitest/snapshot@2.1.9':
-    resolution: {integrity: sha512-oBO82rEjsxLNJincVhLhaxxZdEtV0EFHMK5Kmx5sJ6H9L183dHECjiefOAdnqpIgT5eZwT04PoggUnW88vOBNQ==}
-
-  '@vitest/spy@2.1.9':
-    resolution: {integrity: sha512-E1B35FwzXXTs9FHNK6bDszs7mtydNi5MIfUWpceJ8Xbfb1gBMscAnwLbEu+B44ed6W3XjL9/ehLPHR1fkf1KLQ==}
-
-  '@vitest/utils@2.1.9':
-    resolution: {integrity: sha512-v0psaMSkNJ3A2NMrUEHFRzJtDPFn+/VWZ5WxImB21T9fjucJRmS7xCS3ppEnARb9y11OAzaD+P2Ps+b+BGX5iQ==}
-
-  abort-controller@3.0.0:
-    resolution: {integrity: sha512-h8lQ8tacZYnR3vNQTgibj+tODHI5/+l06Au2Pcriv/Gmet0eaj4TwWH41sO9wnHDiQsEj19q0drzdWdeAHtweg==}
-    engines: {node: '>=6.5'}
-
-  accepts@2.0.0:
-    resolution: {integrity: sha512-5cvg6CtKwfgdmVqY1WIiXKc3Q1bkRqGLi+2W/6ao+6Y7gu/RCwRuAhGEzh5B4KlszSuTLgZYuqFqo5bImjNKng==}
-    engines: {node: '>= 0.6'}
-
-  acorn-jsx@5.3.2:
-    resolution: {integrity: sha512-rq9s+JNhf0IChjtDXxllJ7g41oZk5SlXtp0LHwyA5cejwn7vKmKp4pPri6YEePv2PU65sAsegbXtIinmDFDXgQ==}
-    peerDependencies:
-      acorn: ^6.0.0 || ^7.0.0 || ^8.0.0
-
-  acorn@8.17.0:
-    resolution: {integrity: sha512-xRQbDb9BnwDafYNn6Vwl839DYVjqXYb1XVGtWAZ1kcDc6iwAL4hg3B1dZlRiuENFeO2H53gFG3in621AdERVAg==}
-    engines: {node: '>=0.4.0'}
-    hasBin: true
-
-  acp-http-client@0.4.2:
-    resolution: {integrity: sha512-3wtPieF08YIU4vNXaoL5up/1D0if4i9IX3Ye5q/bwbcwg1BKsazIK/VNNfvN4ldbPjWul69IqIOpGRS3I0qo3Q==}
-
-  agent-base@6.0.2:
-    resolution: {integrity: sha512-RZNwNclF7+MS/8bDg70amg32dyeZGZxiDuQmZxKLAlQjr3jGyLx+4Kkk58UO7D2QdgFIQCovuSuZESne6RG6XQ==}
-    engines: {node: '>= 6.0.0'}
-
-  agent-base@7.1.4:
-    resolution: {integrity: sha512-MnA+YT8fwfJPgBx3m60MNqakm30XOkyIoH1y6huTQvC0PwZG7ki8NacLBcrPbNoo8vEZy7Jpuk7+jMO+CUovTQ==}
-    engines: {node: '>= 14'}
-
-  agentkeepalive@4.6.0:
-    resolution: {integrity: sha512-kja8j7PjmncONqaTsB8fQ+wE2mSU2DJ9D4XKoJ5PFWIdRMa6SLSN1ff4mOr4jCbfRSsxR4keIiySJU0N9T5hIQ==}
-    engines: {node: '>= 8.0.0'}
-
-  ai@5.0.210:
-    resolution: {integrity: sha512-HAYfzP0vMU3/1GzjQkpJT7/x7BqacIYimAMgm6wXZKjZfOHGv1458hLDqYcC7o9BuAr23sFijvL41MSx9KEnEQ==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^3.25.76 || ^4.1.8
-
-  ajv-formats@3.0.1:
-    resolution: {integrity: sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==}
-    peerDependencies:
-      ajv: ^8.0.0
-    peerDependenciesMeta:
-      ajv:
-        optional: true
-
-  ajv@8.20.0:
-    resolution: {integrity: sha512-Thbli+OlOj+iMPYFBVBfJ3OmCAnaSyNn4M1vz9T6Gka5Jt9ba/HIR56joy65tY6kx/FCF5VXNB819Y7/GUrBGA==}
-
-  ansi-align@3.0.1:
-    resolution: {integrity: sha512-IOfwwBF5iczOjp/WeY4YxyjqAFMQoZufdQWDd19SEExbVLNXqvpzSJ/M7Za4/sCPmQ0+GRquoA7bGcINcxew6w==}
-
-  ansi-escapes@4.3.2:
-    resolution: {integrity: sha512-gKXj5ALrKWQLsYG9jlTRmR/xKluxHV+Z9QEwNIgCfM1/uwPMCuzVVnh5mwTd+OuBZcwSIMbqssNWRm1lE51QaQ==}
-    engines: {node: '>=8'}
-
-  ansi-regex@5.0.1:
-    resolution: {integrity: sha512-quJQXlTSUGL2LH9SUXo8VwsY4soanhgo6LNSm84E1LBcE8s3O0wpdiRzyR9z/ZZJMlMWv37qOOb9pdJlMUEKFQ==}
-    engines: {node: '>=8'}
-
-  ansi-regex@6.2.2:
-    resolution: {integrity: sha512-Bq3SmSpyFHaWjPk8If9yc6svM8c56dB5BAtW4Qbw5jHTwwXXcTLoRMkpDJp6VL0XzlWaCHTXrkFURMYmD0sLqg==}
-    engines: {node: '>=12'}
-
-  ansi-styles@4.3.0:
-    resolution: {integrity: sha512-zbB9rCJAT1rbjiVDb2hqKFHNYLxgtk8NURxZ3IZwD3F6NtxbXZQCnnSi1Lkx+IDohdPlFp222wVALIheZJQSEg==}
-    engines: {node: '>=8'}
-
-  ansi-styles@6.2.3:
-    resolution: {integrity: sha512-4Dj6M28JB+oAH8kFkTLUo+a2jwOFkuqb3yucU0CANcRRUbxS0cP0nZYCGjcc3BNXwRIsUVmDGgzawme7zvJHvg==}
-    engines: {node: '>=12'}
-
-  ansis@3.17.0:
-    resolution: {integrity: sha512-0qWUglt9JEqLFr3w1I1pbrChn1grhaiAR2ocX1PP/flRmxgtwTzPFFFnfIlD6aMOLQZgSuCRlidD70lvx8yhzg==}
-    engines: {node: '>=14'}
-
-  any-promise@1.3.0:
-    resolution: {integrity: sha512-7UvmKalWRt1wgjL1RrGxoSJW/0QZFIegpeGvZG9kjp8vrRu55XTHbwnqq2GpXm9uLbcuhxm3IqX9OB4MZR1b2A==}
-
-  anymatch@3.1.3:
-    resolution: {integrity: sha512-KMReFUr0B4t+D+OBkjR3KYqvocp2XaSzO55UcB6mgQMd3KbcE+mWTyvVV7D/zsdEbNnV6acZUutkiHQXvTr1Rw==}
-    engines: {node: '>= 8'}
-
-  archiver-utils@5.0.2:
-    resolution: {integrity: sha512-wuLJMmIBQYCsGZgYLTy5FIB2pF6Lfb6cXMSF8Qywwk3t20zWnAi7zLcQFdKQmIB8wyZpY5ER38x08GbwtR2cLA==}
-    engines: {node: '>= 14'}
-
-  archiver@7.0.1:
-    resolution: {integrity: sha512-ZcbTaIqJOfCc03QwD468Unz/5Ir8ATtvAHsK+FdXbDIbGfihqh9mrvdcYunQzqn4HrvWWaFyaxJhGZagaJJpPQ==}
-    engines: {node: '>= 14'}
-
-  arg@5.0.2:
-    resolution: {integrity: sha512-PYjyFOLKQ9y57JvQ6QLo8dAgNqswh8M1RMJYdQduT6xbWSgK36P/Z/v+p888pM69jMMfS8Xd8F6I1kQ/I9HUGg==}
-
-  argparse@2.0.1:
-    resolution: {integrity: sha512-8+9WqebbFzpX9OR+Wa6O29asIogeRMzcGtAINdpMHHyAg10f05aSFVBbcEqGf/PXw1EjAZ+q2/bEBg3DvurK3Q==}
-
-  aria-hidden@1.2.6:
-    resolution: {integrity: sha512-ik3ZgC9dY/lYVVM++OISsaYDeg1tb0VtP5uL3ouh1koGOaUMDPpbFIei4JkFimWUFPn90sbMNMXQAIVOlnYKJA==}
-    engines: {node: '>=10'}
-
-  aria-query@5.3.2:
-    resolution: {integrity: sha512-COROpnaoap1E2F000S62r6A60uHZnmlvomhfyT2DlTcrY1OrBKn2UhH7qn5wTC9zMvD0AY7csdPSNwKP+7WiQw==}
-    engines: {node: '>= 0.4'}
-
-  array-iterate@2.0.1:
-    resolution: {integrity: sha512-I1jXZMjAgCMmxT4qxXfPXa6SthSoE8h6gkSI9BGGNv8mP8G/v0blc+qFnZu6K42vTOiuME596QaLO0TP3Lk0xg==}
-
-  asn1.js@4.10.1:
-    resolution: {integrity: sha512-p32cOF5q0Zqs9uBiONKYLm6BClCoBCM5O9JfeUSlnQLBTxYdTK+pW+nXflm8UkKd2UYlEbYz5qEi0JuZR9ckSw==}
-
-  asn1@0.2.6:
-    resolution: {integrity: sha512-ix/FxPn0MDjeyJ7i/yoHGFt/EX6LyNbxSEhPPXODPL+KB0VPk86UYfL0lMdy+KCnv+fmvIzySwaK5COwqVbWTQ==}
-
-  assert@2.1.0:
-    resolution: {integrity: sha512-eLHpSK/Y4nhMJ07gDaAzoX/XAKS8PSaojml3M0DM4JpV1LAi5JOJ/p6H/XWrl8L+DzVEvVCW1z3vWAaB9oTsQw==}
-
-  assertion-error@2.0.1:
-    resolution: {integrity: sha512-Izi8RQcffqCeNVgFigKli1ssklIbpHnCYc6AknXGYoB6grJqyeby7jv12JUQgmTAnIDnbck1uxksT4dzN3PWBA==}
-    engines: {node: '>=12'}
-
-  ast-types@0.13.4:
-    resolution: {integrity: sha512-x1FCFnFifvYDDzTaLII71vG5uvDwgtmDTEVWAxrgeiR8VjMONcCXJx7E+USjDtHlwFmt9MysbqgF9b9Vjr6w+w==}
-    engines: {node: '>=4'}
-
-  astring@1.9.0:
-    resolution: {integrity: sha512-LElXdjswlqjWrPpJFg1Fx4wpkOCxj1TDHlSV4PlaRxHGWko024xICaa97ZkMfs6DRKlCguiAI+rbXv5GWwXIkg==}
-    hasBin: true
-
-  astro@5.18.2:
-    resolution: {integrity: sha512-TnFwLnAXty5MXKPDGuKXqK4AMBXG+FH6RUdK7Oyc3gyfNoFIthT+4eRbzOK43bdRlLaZuxgciDSjgtggZ3OtGQ==}
-    engines: {node: 18.20.8 || ^20.3.0 || >=22.0.0, npm: '>=9.6.5', pnpm: '>=7.1.0'}
-    hasBin: true
-
-  async@3.2.6:
-    resolution: {integrity: sha512-htCUDlxyyCLMgaM3xXg0C0LW2xqfuQ6p05pCEIsXuyQ+a1koYKTuBMzRNwmybfLgvJDMd0r1LTn4+E0Ti6C2AA==}
-
-  asynckit@0.4.0:
-    resolution: {integrity: sha512-Oei9OH4tRh0YqU3GxhX79dM/mwVgvbZJaSNaRk+bshkj0S5cfHcgYakreBjrHwatXKbz+IoIdYLxrKim2MjW0Q==}
-
-  atomic-sleep@1.0.0:
-    resolution: {integrity: sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ==}
-    engines: {node: '>=8.0.0'}
-
-  autoprefixer@10.5.0:
-    resolution: {integrity: sha512-FMhOoZV4+qR6aTUALKX2rEqGG+oyATvwBt9IIzVR5rMa2HRWPkxf+P+PAJLD1I/H5/II+HuZcBJYEFBpq39ong==}
-    engines: {node: ^10 || ^12 || >=14}
-    hasBin: true
-    peerDependencies:
-      postcss: ^8.1.0
-
-  available-typed-arrays@1.0.7:
-    resolution: {integrity: sha512-wvUjBtSGN7+7SjNpq/9M2Tg350UZD3q62IFZLbRAR1bSMlCo1ZaeW+BJ+D090e4hIIZLBcTDWe4Mh4jvUDajzQ==}
-    engines: {node: '>= 0.4'}
-
-  aws4fetch@1.0.20:
-    resolution: {integrity: sha512-/djoAN709iY65ETD6LKCtyyEI04XIBP5xVvfmNxsEP0uJB5tyaGBztSryRr4HqMStr9R06PisQE7m9zDTXKu6g==}
-
-  axios@1.18.1:
-    resolution: {integrity: sha512-3nTvFlvpn9Zu/RkHUqtc7/+al4UpRW5az71ap5zccp6e8RAYEzhMTecX8Dz1wWDYrPpUoB1HAQEGEAEvUr7S9g==}
-
-  axobject-query@4.1.0:
-    resolution: {integrity: sha512-qIj0G9wZbMGNLjLmg1PT6v2mE9AH2zlnADJD/2tC6E00hgmhUOfEB6greHPAfLRSufHqROIUTkw6E+M3lH0PTQ==}
-    engines: {node: '>= 0.4'}
-
-  b4a@1.8.1:
-    resolution: {integrity: sha512-aiqre1Nr0B/6DgE2N5vwTc+2/oQZ4Wh1t4NznYY4E00y8LCt6NqdRv81so00oo27D8MVKTpUa/MwUUtBLXCoDw==}
-    peerDependencies:
-      react-native-b4a: '*'
-    peerDependenciesMeta:
-      react-native-b4a:
-        optional: true
-
-  bail@2.0.2:
-    resolution: {integrity: sha512-0xO6mYd7JB2YesxDKplafRpsiOzPt9V02ddPCLbY1xYGPOX24NTyN50qnUxgCPcSoYMhKpAuBTjQoRZCAkUDRw==}
-
-  balanced-match@1.0.2:
-    resolution: {integrity: sha512-3oSeUO0TMV67hN1AmbXsK4yaqU7tjiHlbxRDZOpH0KW9+CeX4bRAaX0Anxt0tx2MrpRpWwQaPwIlISEJhYU5Pw==}
-
-  balanced-match@4.0.4:
-    resolution: {integrity: sha512-BLrgEcRTwX2o6gGxGOCNyMvGSp35YofuYzw9h1IMTRmKqttAZZVU67bdb9Pr2vUHA8+j3i2tJfjO6C6+4myGTA==}
-    engines: {node: 18 || 20 || >=22}
-
-  bare-events@2.9.1:
-    resolution: {integrity: sha512-Z0oHEHAFDZkffN8Qc39zNZjQlMDkPJRyyyZieU1VH7u8c5S+qHZ2S8ixdKIAxEjfHO7FJxXmJWgteOghVanIsg==}
-    peerDependencies:
-      bare-abort-controller: '*'
-    peerDependenciesMeta:
-      bare-abort-controller:
-        optional: true
-
-  bare-fs@4.7.3:
-    resolution: {integrity: sha512-xRgplks8SvcKkdlv2M6Z2LZmRsmqd+x0nXXGXeMEjwdibj1HSDrlnqBRLeYdMvsgCox7Bq0e+DHwfczOfsn6IA==}
-    engines: {bare: '>=1.16.0'}
-    peerDependencies:
-      bare-buffer: '*'
-    peerDependenciesMeta:
-      bare-buffer:
-        optional: true
-
-  bare-os@3.9.3:
-    resolution: {integrity: sha512-fF4Q7QsyKVF5Rj0qvI8BgUNjqzC2JvQlpTaPLjVJVxYVUX5Zr9un+y3w1HmA4nNKdFmRBT8z/WmrjvXzXVerKQ==}
-    engines: {bare: '>=1.14.0'}
-
-  bare-path@3.0.1:
-    resolution: {integrity: sha512-ghj2DSK/2e99a1anTVPCV4m4YIYtrbXhfM7V3D7XZLOTsybnYyaJloymGqssQc8l/or0UoDyRtNQkmkEF/ysgQ==}
-
-  bare-stream@2.13.3:
-    resolution: {integrity: sha512-Kc+brLqvEqGkjyfiwJmImAOqLZL7OsoLKuavx+hJjgVV3nLTOjloJyPMFxjUPerGGHrNH0fLU06jjykMLWrERQ==}
-    peerDependencies:
-      bare-abort-controller: '*'
-      bare-buffer: '*'
-      bare-events: '*'
-    peerDependenciesMeta:
-      bare-abort-controller:
-        optional: true
-      bare-buffer:
-        optional: true
-      bare-events:
-        optional: true
-
-  bare-url@2.4.5:
-    resolution: {integrity: sha512-K+y9xF1tN+CdPu4qWwr0QiK1Al07eFPGYK5M2pDXcmHdMdgC/tT/bpmMe1hrmRHaidKLkXrC+cRNYf3XVDUhSQ==}
-
-  base-64@1.0.0:
-    resolution: {integrity: sha512-kwDPIFCGx0NZHog36dj+tHiwP4QMzsZ3AgMViUBKI0+V5n4U0ufTCUMhnQ04diaRI8EX/QcPfql7zlhZ7j4zgg==}
-
-  base64-js@1.5.1:
-    resolution: {integrity: sha512-AKpaYlHn8t4SVbOHCy+b5+KKgvR4vrsD8vbvrbiQJps7fKDTkjkDry6ji0rUJjC0kzbNePLwzxq8iypo41qeWA==}
-
-  baseline-browser-mapping@2.10.38:
-    resolution: {integrity: sha512-31/02mVB4yuQU6adKk5SlY6m+mxDwUq5KZkyYgnLrrKl7TEm1+3PyDtDBz2kOv/wxZz41GHsvV1A/u6RmiyBvw==}
-    engines: {node: '>=6.0.0'}
-    hasBin: true
-
-  basic-ftp@5.3.1:
-    resolution: {integrity: sha512-bopVNp6ugyA150DDuZfPFdt1KZ5a94ZDiwX4hMgZDzF+GttD80lEy8kj98kbyhLXnPvhtIo93mdnLIjpCAeeOw==}
-    engines: {node: '>=10.0.0'}
-
-  bcrypt-pbkdf@1.0.2:
-    resolution: {integrity: sha512-qeFIXtP4MSoi6NLqO12WfqARWWuCKi2Rn/9hJLEmtB5yTNr9DqFWkJRCf2qShWzPeAMRnOgCrq0sg/KLv5ES9w==}
-
-  bignumber.js@9.3.1:
-    resolution: {integrity: sha512-Ko0uX15oIUS7wJ3Rb30Fs6SkVbLmPBAKdlm7q9+ak9bbIeFf0MwuBsQV6z7+X768/cHsfg+WlysDWJcmthjsjQ==}
-
-  binary-extensions@2.3.0:
-    resolution: {integrity: sha512-Ceh+7ox5qe7LJuLHoY0feh3pHuUDHAcRUeyL2VYghZwfpkNIy/+8Ocg0a3UuSoYzavmylwuLWQOf3hl0jjMMIw==}
-    engines: {node: '>=8'}
-
-  bl@4.1.0:
-    resolution: {integrity: sha512-1W07cM9gS6DcLperZfFSj+bWLtaPGSOHWhPiGzXmvVJbRLdG82sH/Kn8EtW1VqWVA54AKf2h5k5BbnIbwF3h6w==}
-
-  bn.js@4.12.3:
-    resolution: {integrity: sha512-fGTi3gxV/23FTYdAoUtLYp6qySe2KE3teyZitipKNRuVYcBkoP/bB3guXN/XVKUe9mxCHXnc9C4ocyz8OmgN0g==}
-
-  bn.js@5.2.3:
-    resolution: {integrity: sha512-EAcmnPkxpntVL+DS7bO1zhcZNvCkxqtkd0ZY53h06GNQ3DEkkGZ/gKgmDv6DdZQGj9BgfSPKtJJ7Dp1GPP8f7w==}
-
-  body-parser@2.3.0:
-    resolution: {integrity: sha512-2cGmJupaNgg+QUwVLAucDuWuoMZ6EX9iHDRswZ5lsNYEmwPaRknMPCLZz07yTzVq/83p4o/wzbDZbBrTvGGTIw==}
-    engines: {node: '>=18'}
-
-  boolbase@1.0.0:
-    resolution: {integrity: sha512-JZOSA7Mo9sNGB8+UjSgzdLtokWAky1zbztM3WRLCbZ70/3cTANmQmOdR7y2g+J0e2WXywy1yS468tY+IruqEww==}
-
-  bowser@2.14.1:
-    resolution: {integrity: sha512-tzPjzCxygAKWFOJP011oxFHs57HzIhOEracIgAePE4pqB3LikALKnSzUyU4MGs9/iCEUuHlAJTjTc5M+u7YEGg==}
-
-  boxen@8.0.1:
-    resolution: {integrity: sha512-F3PH5k5juxom4xktynS7MoFY+NUWH5LC4CnH11YB8NPew+HLpmBLCybSAEyb2F+4pRXhuhWqFesoQd6DAyc2hw==}
-    engines: {node: '>=18'}
-
-  brace-expansion@2.0.3:
-    resolution: {integrity: sha512-MCV/fYJEbqx68aE58kv2cA/kiky1G8vux3OR6/jbS+jIMe/6fJWa0DTzJU7dqijOWYwHi1t29FlfYI9uytqlpA==}
-
-  brace-expansion@5.0.6:
-    resolution: {integrity: sha512-kLpxurY4Z4r9sgMsyG0Z9uzsBlgiU/EFKhj/h91/8yHu0edo7XuixOIH3VcJ8kkxs6/jPzoI6U9Vj3WqbMQ94g==}
-    engines: {node: 18 || 20 || >=22}
-
-  braces@3.0.3:
-    resolution: {integrity: sha512-yQbXgO/OSZVD2IsiLlro+7Hf6Q18EJrKSEsdoMzKePKXct3gvD8oLcOQdIzGupr5Fj+EDe8gO/lxc1BzfMpxvA==}
-    engines: {node: '>=8'}
-
-  brorand@1.1.0:
-    resolution: {integrity: sha512-cKV8tMCEpQs4hK/ik71d6LrPOnpkpGBR0wzxqr68g2m/LB2GxVYQroAjMJZRVM1Y4BCjCKc3vAamxSzOY2RP+w==}
-
-  browse@0.9.3:
-    resolution: {integrity: sha512-J+3MhvMsy7G7B8FoQuCLrZyWhG6gJKGJYObyzD1EuA+1/2EQ2fLogACZtwPe9RReql3J/LZvfIefyJ17G7B5KA==}
-    engines: {node: ^20.19.0 || >=22.12.0}
-    hasBin: true
-
-  browser-resolve@2.0.0:
-    resolution: {integrity: sha512-7sWsQlYL2rGLy2IWm8WL8DCTJvYLc/qlOnsakDac87SOoCd16WLsaAMdCiAqsTNHIe+SXfaqyxyo6THoWqs8WQ==}
-
-  browserify-aes@1.2.0:
-    resolution: {integrity: sha512-+7CHXqGuspUn/Sl5aO7Ea0xWGAtETPXNSAjHo48JfLdPWcMng33Xe4znFvQweqc/uzk5zSOI3H52CYnjCfb5hA==}
-
-  browserify-cipher@1.0.1:
-    resolution: {integrity: sha512-sPhkz0ARKbf4rRQt2hTpAHqn47X3llLkUGn+xEJzLjwY8LRs2p0v7ljvI5EyoRO/mexrNunNECisZs+gw2zz1w==}
-
-  browserify-des@1.0.2:
-    resolution: {integrity: sha512-BioO1xf3hFwz4kc6iBhI3ieDFompMhrMlnDFC4/0/vd5MokpuAc3R+LYbwTA9A5Yc9pq9UYPqffKpW2ObuwX5A==}
-
-  browserify-rsa@4.1.1:
-    resolution: {integrity: sha512-YBjSAiTqM04ZVei6sXighu679a3SqWORA3qZTEqZImnlkDIFtKc6pNutpjyZ8RJTjQtuYfeetkxM11GwoYXMIQ==}
-    engines: {node: '>= 0.10'}
-
-  browserify-sign@4.2.5:
-    resolution: {integrity: sha512-C2AUdAJg6rlM2W5QMp2Q4KGQMVBwR1lIimTsUnutJ8bMpW5B52pGpR2gEnNBNwijumDo5FojQ0L9JrXA8m4YEw==}
-    engines: {node: '>= 0.10'}
-
-  browserify-zlib@0.2.0:
-    resolution: {integrity: sha512-Z942RysHXmJrhqk88FmKBVq/v5tqmSkDz7p54G/MGyjMnCFFnC79XWNbg+Vta8W6Wb2qtSZTSxIGkJrRpCFEiA==}
-
-  browserslist@4.28.2:
-    resolution: {integrity: sha512-48xSriZYYg+8qXna9kwqjIVzuQxi+KYWp2+5nCYnYKPTr0LvD89Jqk2Or5ogxz0NUMfIjhh2lIUX/LyX9B4oIg==}
-    engines: {node: ^6 || ^7 || ^8 || ^9 || ^10 || ^11 || ^12 || >=13.7}
-    hasBin: true
-
-  buffer-crc32@0.2.13:
-    resolution: {integrity: sha512-VO9Ht/+p3SN7SKWqcrgEzjGbRSJYTx+Q1pTQC0wrWqHx0vpJraQ6GtHx8tvcg1rlK1byhU5gccxgOgj7B0TDkQ==}
-
-  buffer-crc32@1.0.0:
-    resolution: {integrity: sha512-Db1SbgBS/fg/392AblrMJk97KggmvYhr4pB5ZIMTWtaivCPMWLkmb7m21cJvpvgK+J3nsU2CmmixNBZx4vFj/w==}
-    engines: {node: '>=8.0.0'}
-
-  buffer-equal-constant-time@1.0.1:
-    resolution: {integrity: sha512-zRpUiDwd/xk6ADqPMATG8vc9VPrkck7T07OIx0gnjmJAnHnTVXNQG3vfvWNuiZIkwu9KrKdA1iJKfsfTVxE6NA==}
-
-  buffer-xor@1.0.3:
-    resolution: {integrity: sha512-571s0T7nZWK6vB67HI5dyUF7wXiNcfaPPPTl6zYCNApANjIvYJTg7hlud/+cJpdAhS7dVzqMLmfhfHR3rAcOjQ==}
-
-  buffer@5.7.1:
-    resolution: {integrity: sha512-EHcyIPBQ4BSGlvjB16k5KgAJ27CIsHY/2JBmCRReo48y9rQ3MaUzWX3KVlBa4U7MyX02HdVj0K7C3WaB3ju7FQ==}
-
-  buffer@6.0.3:
-    resolution: {integrity: sha512-FTiCpNxtwiZZHEZbcbTIcZjERVICn9yq/pDFkTl95/AxzD1naBctN7YO68riM/gLSDY7sdrMby8hofADYuuqOA==}
-
-  bufferutil@4.1.0:
-    resolution: {integrity: sha512-ZMANVnAixE6AWWnPzlW2KpUrxhm9woycYvPOo67jWHyFowASTEd9s+QN1EIMsSDtwhIxN4sWE1jotpuDUIgyIw==}
-    engines: {node: '>=6.14.2'}
-
-  buildcheck@0.0.7:
-    resolution: {integrity: sha512-lHblz4ahamxpTmnsk+MNTRWsjYKv965MwOrSJyeD588rR3Jcu7swE+0wN5F+PbL5cjgu/9ObkhfzEPuofEMwLA==}
-    engines: {node: '>=10.0.0'}
-
-  builtin-status-codes@3.0.0:
-    resolution: {integrity: sha512-HpGFw18DgFWlncDfjTa2rcQ4W88O1mC8e8yZ2AvQY5KDaktSTwo+KRf6nHK6FRI5FyRyb/5T6+TSxfP7QyGsmQ==}
-
-  bun@1.3.11:
-    resolution: {integrity: sha512-AvXWYFO6j/ZQ7bhGm4X6eilq2JHsDVC90ZM32k2B7/srhC2gs3Sdki1QTbwrdRCo8o7eT+167vcB1yzOvPdbjA==}
-    cpu: [arm64, x64]
-    os: [darwin, linux, win32]
-    hasBin: true
-
-  bundle-require@5.1.0:
-    resolution: {integrity: sha512-3WrrOuZiyaaZPWiEt4G3+IffISVC9HYlWueJEBWED4ZH4aIAC2PnkdnuRrR94M+w6yGWn4AglWtJtBI8YqvgoA==}
-    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
-    peerDependencies:
-      esbuild: '>=0.18'
-
-  bytes@3.1.2:
-    resolution: {integrity: sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==}
-    engines: {node: '>= 0.8'}
-
-  cac@6.7.14:
-    resolution: {integrity: sha512-b6Ilus+c3RrdDk+JhLKUAQfzzgLEPy6wcXqS7f/xe1EETvsDP6GORG7SFuOs6cID5YkqchW/LXZbX5bc8j7ZcQ==}
-    engines: {node: '>=8'}
-
-  call-bind-apply-helpers@1.0.2:
-    resolution: {integrity: sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==}
-    engines: {node: '>= 0.4'}
-
-  call-bind@1.0.8:
-    resolution: {integrity: sha512-oKlSFMcMwpUg2ednkhQ454wfWiU/ul3CkJe/PEHcTKuiX6RpbehUiFMXu13HalGZxfUwCQzZG747YXBn1im9ww==}
-    engines: {node: '>= 0.4'}
-
-  call-bound@1.0.4:
-    resolution: {integrity: sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==}
-    engines: {node: '>= 0.4'}
-
-  camelcase-css@2.0.1:
-    resolution: {integrity: sha512-QOSvevhslijgYwRx6Rv7zKdMF8lbRmx+uQGx2+vDc+KI/eBnsy9kit5aj23AgGu3pa4t9AgwbnXWqS+iOY+2aA==}
-    engines: {node: '>= 6'}
-
-  camelcase@8.0.0:
-    resolution: {integrity: sha512-8WB3Jcas3swSvjIeA2yvCJ+Miyz5l1ZmB6HFb9R1317dt9LCQoswg/BGrmAmkWVEszSrrg4RwmO46qIm2OEnSA==}
-    engines: {node: '>=16'}
-
-  caniuse-lite@1.0.30001799:
-    resolution: {integrity: sha512-hG1bReV+OUU+MOqK4t/ZWI0tZOyz3rqS9XuhOUz1cIcbwBKjOyJEJuw9ER5JuNyqxNk8u/JUVbGibBOL1yrjFw==}
-
-  ccount@2.0.1:
-    resolution: {integrity: sha512-eyrF0jiFpY+3drT6383f1qhkbGsLSifNAjA61IUjZjmLCWjItY6LB9ft9YhoDgwfmclB2zhu51Lc7+95b8NRAg==}
-
-  chai@5.3.3:
-    resolution: {integrity: sha512-4zNhdJD/iOjSH0A05ea+Ke6MU5mmpQcbQsSOkgdaUMJ9zTlDTD/GYlwohmIE2u0gaxHYiVHEn1Fw9mZ/ktJWgw==}
-    engines: {node: '>=18'}
-
-  chalk@4.1.2:
-    resolution: {integrity: sha512-oKnbhFyRIXpUuez8iBMmyEa4nbj4IOQyuhc/wy9kY7/WVPcwIO9VA668Pu8RkO7+0G76SLROeyw9CpQ061i4mA==}
-    engines: {node: '>=10'}
-
-  chalk@5.6.2:
-    resolution: {integrity: sha512-7NzBL0rN6fMUW+f7A6Io4h40qQlG+xGmtMxfbnH/K7TAtt8JQWVQK+6g0UXKMeVJoyV5EkkNsErQ8pVD3bLHbA==}
-    engines: {node: ^12.17.0 || ^14.13 || >=16.0.0}
-
-  character-entities-html4@2.1.0:
-    resolution: {integrity: sha512-1v7fgQRj6hnSwFpq1Eu0ynr/CDEw0rXo2B61qXrLNdHZmPKgb7fqS1a2JwF0rISo9q77jDI8VMEHoApn8qDoZA==}
-
-  character-entities-legacy@3.0.0:
-    resolution: {integrity: sha512-RpPp0asT/6ufRm//AJVwpViZbGM/MkjQFxJccQRHmISF/22NBtsHqAWmL+/pmkPWoIUJdWyeVleTl1wydHATVQ==}
-
-  character-entities@2.0.2:
-    resolution: {integrity: sha512-shx7oQ0Awen/BRIdkjkvz54PnEEI/EjwXDSIZp86/KKdbafHh1Df/RYGBhn4hbe2+uKC9FnT5UCEdyPz3ai9hQ==}
-
-  character-reference-invalid@2.0.1:
-    resolution: {integrity: sha512-iBZ4F4wRbyORVsu0jPV7gXkOsGYjGHPmAyv+HiHG8gi5PtC9KI2j1+v8/tlibRvjoWX027ypmG/n0HtO5t7unw==}
-
-  check-error@2.1.3:
-    resolution: {integrity: sha512-PAJdDJusoxnwm1VwW07VWwUN1sl7smmC3OKggvndJFadxxDRyFJBX/ggnu/KE4kQAB7a3Dp8f/YXC1FlUprWmA==}
-    engines: {node: '>= 16'}
-
-  chokidar@3.6.0:
-    resolution: {integrity: sha512-7VT13fmjotKpGipCW9JEQAusEPE+Ei8nl6/g4FBAmIm0GOOLMua9NDDo/DWp0ZAxCr3cPq5ZpBqmPAQgDda2Pw==}
-    engines: {node: '>= 8.10.0'}
-
-  chokidar@4.0.3:
-    resolution: {integrity: sha512-Qgzu8kfBvo+cA4962jnP1KkS6Dop5NS6g7R5LFYJr4b8Ub94PPQXUksCw9PvXoeXPRRddRNC5C1JQUR2SMGtnA==}
-    engines: {node: '>= 14.16.0'}
-
-  chokidar@5.0.0:
-    resolution: {integrity: sha512-TQMmc3w+5AxjpL8iIiwebF73dRDF4fBIieAqGn9RGCWaEVwQ6Fb2cGe31Yns0RRIzii5goJ1Y7xbMwo1TxMplw==}
-    engines: {node: '>= 20.19.0'}
-
-  chownr@1.1.4:
-    resolution: {integrity: sha512-jJ0bqzaylmJtVnNgzTeSOs8DPavpbYgEr/b0YL8/2GO3xJEhInFmhKMUnEJQjZumK7KXGFhUy89PrsJWlakBVg==}
-
-  chrome-launcher@1.2.1:
-    resolution: {integrity: sha512-qmFR5PLMzHyuNJHwOloHPAHhbaNglkfeV/xDtt5b7xiFFyU1I+AZZX0PYseMuhenJSSirgxELYIbswcoc+5H4A==}
-    engines: {node: '>=12.13.0'}
-    hasBin: true
-
-  ci-info@4.4.0:
-    resolution: {integrity: sha512-77PSwercCZU2Fc4sX94eF8k8Pxte6JAwL4/ICZLFjJLqegs7kCuAsqqj/70NQF6TvDpgFjkubQB2FW2ZZddvQg==}
-    engines: {node: '>=8'}
-
-  cipher-base@1.0.7:
-    resolution: {integrity: sha512-Mz9QMT5fJe7bKI7MH31UilT5cEK5EHHRCccw/YRFsRY47AuNgaV6HY3rscp0/I4Q+tTW/5zoqpSeRRI54TkDWA==}
-    engines: {node: '>= 0.10'}
-
-  class-variance-authority@0.7.1:
-    resolution: {integrity: sha512-Ka+9Trutv7G8M6WT6SeiRWz792K5qEqIGEGzXKhAE6xOWAY6pPH8U+9IY3oCMv6kqTmLsv7Xh/2w2RigkePMsg==}
-
-  clean-stack@3.0.1:
-    resolution: {integrity: sha512-lR9wNiMRcVQjSB3a7xXGLuz4cr4wJuuXlaAEbRutGowQTmlp7R72/DOgN21e8jdwblMWl9UOJMJXarX94pzKdg==}
-    engines: {node: '>=10'}
-
-  cli-boxes@3.0.0:
-    resolution: {integrity: sha512-/lzGpEWL/8PfI0BmBOPRwp0c/wFNX1RdUML3jK/RcSBA9T8mZDdQpqYBKtCFTOfQbwPqWEOpjqW+Fnayc0969g==}
-    engines: {node: '>=10'}
-
-  cli-highlight@2.1.11:
-    resolution: {integrity: sha512-9KDcoEVwyUXrjcJNvHD0NFc/hiwe/WPVYIleQh2O1N2Zro5gWJZ/K+3DGn8w8P/F6FxOgzyC5bxDyHIgCSPhGg==}
-    engines: {node: '>=8.0.0', npm: '>=5.0.0'}
-    hasBin: true
-
-  cli-spinners@2.9.2:
-    resolution: {integrity: sha512-ywqV+5MmyL4E7ybXgKys4DugZbX0FC6LnwrhjuykIjnK9k8OQacQ7axGKnjDXWNhns0xot3bZI5h55H8yo9cJg==}
-    engines: {node: '>=6'}
-
-  cliui@7.0.4:
-    resolution: {integrity: sha512-OcRE68cOsVMXp1Yvonl/fzkQOyjLSu/8bhPDfQt0e0/Eb283TKP20Fs2MqoPsr9SwA595rRCA+QMzYc9nBP+JQ==}
-
-  cliui@8.0.1:
-    resolution: {integrity: sha512-BSeNnyus75C4//NQ9gQt1/csTXyo/8Sb+afLAkzAptFuMsod9HFokGNudZpi/oQV73hnVK+sR+5PVRMd+Dr7YQ==}
-    engines: {node: '>=12'}
-
-  clsx@2.1.1:
-    resolution: {integrity: sha512-eYm0QWBtUrBWZWG0d386OGAw16Z995PiOVo2B7bjWSbHedGl5e0ZWaq65kOGgUSNesEIDkB9ISbTg/JK9dhCZA==}
-    engines: {node: '>=6'}
-
-  cmdk@1.1.1:
-    resolution: {integrity: sha512-Vsv7kFaXm+ptHDMZ7izaRsP70GgrW9NBNGswt9OZaVBLlE0SNpDq8eu/VGXyF9r7M0azK3Wy7OlYXsuyYLFzHg==}
-    peerDependencies:
-      react: ^18 || ^19 || ^19.0.0-rc
-      react-dom: ^18 || ^19 || ^19.0.0-rc
-
-  codemirror@6.0.2:
-    resolution: {integrity: sha512-VhydHotNW5w1UGK0Qj96BwSk/Zqbp9WbnyK2W/eVMv4QyF41INRGpjUhFJY7/uDNuudSc33a/PKr4iDqRduvHw==}
-
-  collapse-white-space@2.1.0:
-    resolution: {integrity: sha512-loKTxY1zCOuG4j9f6EPnuyyYkf58RnhhWTvRoZEokgB+WbdXehfjFviyOVYkqzEWz1Q5kRiZdBYS5SwxbQYwzw==}
-
-  color-convert@2.0.1:
-    resolution: {integrity: sha512-RRECPsj7iu/xb5oKYcsFHSppFNnsj/52OVTRKb4zP5onXwVF3zVmmToNcOfGC+CRDpfK/U584fMg38ZHCaElKQ==}
-    engines: {node: '>=7.0.0'}
-
-  color-name@1.1.4:
-    resolution: {integrity: sha512-dOy+3AuW3a2wNbZHIuMZpTcgjGuLU/uBL/ubcZF9OXbDo8ff4O8yVp5Bf0efS8uEoYo5q4Fx7dY9OgQGXgAsQA==}
-
-  color-string@1.9.1:
-    resolution: {integrity: sha512-shrVawQFojnZv6xM40anx4CkoDP+fZsw/ZerEMsW/pyzsRbElpsL/DBVW7q3ExxwusdNXI3lXpuhEZkzs8p5Eg==}
-
-  color@4.2.3:
-    resolution: {integrity: sha512-1rXeuUUiGGrykh+CeBdu5Ie7OJwinCgQY0bc7GCRxy5xVHy+moaqkpL/jqQq0MtQOeYcrqEz4abc5f0KtU7W4A==}
-    engines: {node: '>=12.5.0'}
-
-  colorette@2.0.20:
-    resolution: {integrity: sha512-IfEDxwoWIjkeXL1eXcDiow4UbKjhLdq6/EuSVR9GMN7KVH3r9gQ83e73hsz1Nd1T3ijd5xv1wcWRYO+D6kCI2w==}
-
-  combined-stream@1.0.8:
-    resolution: {integrity: sha512-FQN4MRfuJeHf7cBbBMJFXhKSDq+2kAArBlmRBvcvFE5BB1HZKXtSFASDhdlz9zOYwxh8lDdnvmMOe/+5cdoEdg==}
-    engines: {node: '>= 0.8'}
-
-  comma-separated-tokens@2.0.3:
-    resolution: {integrity: sha512-Fu4hJdvzeylCfQPp9SGWidpzrMs7tTrlu6Vb8XGaRGck8QSNZJJp538Wrb60Lax4fPwR64ViY468OIUTbRlGZg==}
-
-  commander@11.1.0:
-    resolution: {integrity: sha512-yPVavfyCcRhmorC7rWlkHn15b4wDVgVmBA7kV4QVBsF7kv/9TKJAbAXVTxvTnwP8HHKjRCJDClKbciiYS7p0DQ==}
-    engines: {node: '>=16'}
-
-  commander@12.1.0:
-    resolution: {integrity: sha512-Vw8qHK3bZM9y/P10u3Vib8o/DdkvA2OtPtZvD871QKjy74Wj1WSKFILMPRPSdUSx5RFK1arlJzEtA4PkFgnbuA==}
-    engines: {node: '>=18'}
-
-  commander@4.1.1:
-    resolution: {integrity: sha512-NOKm8xhkzAjzFx8B2v5OAHT+u5pRQc2UCa2Vq9jYL/31o2wi9mxBA7LIFs3sV5VSC49z6pEhfbMULvShKj26WA==}
-    engines: {node: '>= 6'}
-
-  commander@7.2.0:
-    resolution: {integrity: sha512-QrWXB+ZQSVPmIWIhtEO9H+gwHaMGYiF5ChvoJ+K9ZGHG/sVsa6yiesAD1GC/x46sET00Xlwo1u49RVVVzvcSkw==}
-    engines: {node: '>= 10'}
-
-  commander@8.3.0:
-    resolution: {integrity: sha512-OkTL9umf+He2DZkUq8f8J9of7yL6RJKI24dVITBmNfZBmri9zYZQrKkuXiKhyfPSu8tUhnVBB1iKXevvnlR4Ww==}
-    engines: {node: '>= 12'}
-
-  common-ancestor-path@1.0.1:
-    resolution: {integrity: sha512-L3sHRo1pXXEqX8VU28kfgUY+YGsk09hPqZiZmLacNib6XNTCM8ubYeT7ryXQw8asB1sKgcU5lkB7ONug08aB8w==}
-
-  compress-commons@6.0.2:
-    resolution: {integrity: sha512-6FqVXeETqWPoGcfzrXb37E50NP0LXT8kAMu5ooZayhWWdgEY4lBEEcbQNXtkuKQsGduxiIcI4gOTsxTmuq/bSg==}
-    engines: {node: '>= 14'}
-
-  confbox@0.1.8:
-    resolution: {integrity: sha512-RMtmw0iFkeR4YV+fUOSucriAQNb9g8zFR52MWCtl+cCZOFRNL6zeB395vPzFhEjjn4fMxXudmELnl/KF/WrK6w==}
-
-  consola@3.4.2:
-    resolution: {integrity: sha512-5IKcdX0nnYavi6G7TtOhwkYzyjfJlatbjMjuLSfE2kYT5pMDOilZ4OvMhi637CcDICTmz3wARPoyhqyX1Y+XvA==}
-    engines: {node: ^14.18.0 || >=16.10.0}
-
-  console-browserify@1.2.0:
-    resolution: {integrity: sha512-ZMkYO/LkF17QvCPqM0gxw8yUzigAOZOSWSHg91FH6orS7vcEj5dVZTidN2fQ14yBSdg97RqhSNwLUXInd52OTA==}
-
-  constants-browserify@1.0.0:
-    resolution: {integrity: sha512-xFxOwqIzR/e1k1gLiWEophSCMqXcwVHIH7akf7b/vxcUeGunlj3hvZaaqxwHsTgn+IndtkQJgSztIDWeumWJDQ==}
-
-  content-disposition@1.1.0:
-    resolution: {integrity: sha512-5jRCH9Z/+DRP7rkvY83B+yGIGX96OYdJmzngqnw2SBSxqCFPd0w2km3s5iawpGX8krnwSGmF0FW5Nhr0Hfai3g==}
-    engines: {node: '>=18'}
-
-  content-type@1.0.5:
-    resolution: {integrity: sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==}
-    engines: {node: '>= 0.6'}
-
-  content-type@2.0.0:
-    resolution: {integrity: sha512-j/O/d7GcZCyNl7/hwZAb606rzqkyvaDctLmckbxLzHvFBzTJHuGEdodATcP3yIRoDrLHkIATJuvzbFlp/ki2cQ==}
-    engines: {node: '>=18'}
-
-  convert-source-map@2.0.0:
-    resolution: {integrity: sha512-Kvp459HrV2FEJ1CAsi1Ku+MY3kasH19TFykTz2xWmMeq6bk2NU3XXvfJ+Q61m0xktWwt+1HSYf3JZsTms3aRJg==}
-
-  cookie-es@1.2.3:
-    resolution: {integrity: sha512-lXVyvUvrNXblMqzIRrxHb57UUVmqsSWlxqt3XIjCkUP0wDAf6uicO6KMbEgYrMNtEvWgWHwe42CKxPu9MYAnWw==}
-
-  cookie-signature@1.2.2:
-    resolution: {integrity: sha512-D76uU73ulSXrD1UXF4KE2TMxVVwhsnCgfAyTg9k8P6KGZjlXKrOLe4dJQKI3Bxi5wjesZoFXJWElNWBjPZMbhg==}
-    engines: {node: '>=6.6.0'}
-
-  cookie@0.7.2:
-    resolution: {integrity: sha512-yki5XnKuf750l50uGTllt6kKILY4nQ1eNIQatoXEByZ5dWgnKqbnqmTrBE5B4N7lrMJKQ2ytWMiTO2o0v6Ew/w==}
-    engines: {node: '>= 0.6'}
-
-  cookie@1.1.1:
-    resolution: {integrity: sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ==}
-    engines: {node: '>=18'}
-
-  core-js@3.49.0:
-    resolution: {integrity: sha512-es1U2+YTtzpwkxVLwAFdSpaIMyQaq0PBgm3YD1W3Qpsn1NAmO3KSgZfu+oGSWVu6NvLHoHCV/aYcsE5wiB7ALg==}
-
-  core-util-is@1.0.3:
-    resolution: {integrity: sha512-ZQBvi1DcpJ4GDqanjucZ2Hj3wEO5pZDS89BWbkcrvdxksJorwUDDZamX9ldFkp9aw2lmBDLgkObEA4DWNJ9FYQ==}
-
-  cors@2.8.6:
-    resolution: {integrity: sha512-tJtZBBHA6vjIAaF6EnIaq6laBBP9aq/Y3ouVJjEfoHbRBcHBAHYcMh/w8LDrk2PvIMMq8gmopa5D4V8RmbrxGw==}
-    engines: {node: '>= 0.10'}
-
-  cose-base@1.0.3:
-    resolution: {integrity: sha512-s9whTXInMSgAp/NVXVNuVxVKzGH2qck3aQlVHxDCdAEPgtMKwc4Wq6/QKhgdEdgbLSi9rBTAcPoRa6JpiG4ksg==}
-
-  cose-base@2.2.0:
-    resolution: {integrity: sha512-AzlgcsCbUMymkADOJtQm3wO9S3ltPfYOFD5033keQn9NJzIbtnZj+UdBJe7DYml/8TdbtHJW3j58SOnKhWY/5g==}
-
-  cpu-features@0.0.10:
-    resolution: {integrity: sha512-9IkYqtX3YHPCzoVg1Py+o9057a3i0fp7S530UWokCSaFVTc7CwXPRiOjRjBQQ18ZCNafx78YfnG+HALxtVmOGA==}
-    engines: {node: '>=10.0.0'}
-
-  crc-32@1.2.2:
-    resolution: {integrity: sha512-ROmzCKrTnOwybPcJApAA6WBWij23HVfGVNKqqrZpuyZOHqK2CwHSvpGuyt/UNNvaIjEd8X5IFGp4Mh+Ie1IHJQ==}
-    engines: {node: '>=0.8'}
-    hasBin: true
-
-  crc32-stream@6.0.0:
-    resolution: {integrity: sha512-piICUB6ei4IlTv1+653yq5+KoqfBYmj9bw6LqXoOneTMDXk5nM1qt12mFW1caG3LlJXEKW1Bp0WggEmIfQB34g==}
-    engines: {node: '>= 14'}
-
-  create-ecdh@4.0.4:
-    resolution: {integrity: sha512-mf+TCx8wWc9VpuxfP2ht0iSISLZnt0JgWlrOKZiNqyUZWnjIaCIVNQArMHnCZKfEYRg6IM7A+NeJoN8gf/Ws0A==}
-
-  create-hash@1.2.0:
-    resolution: {integrity: sha512-z00bCGNHDG8mHAkP7CtT1qVu+bFQUPjYq/4Iv3C3kWjTFV10zIjfSoeqXo9Asws8gwSHDGj/hl2u4OGIjapeCg==}
-
-  create-hmac@1.1.7:
-    resolution: {integrity: sha512-MJG9liiZ+ogc4TzUwuvbER1JRdgvUFSB5+VR/g5h82fGaIRWMWddtKBHi7/sVhfjQZ6SehlyhvQYrcYkaUIpLg==}
-
-  create-require@1.1.1:
-    resolution: {integrity: sha512-dcKFX3jn0MpIaXjisoRvexIJVEKzaq7z2rZKxf+MSr9TkdmHmsU4m2lcLojrj/FHl8mk5VxMmYA+ftRkP/3oKQ==}
-
-  crelt@1.0.7:
-    resolution: {integrity: sha512-aK6BbWfhf4U/wCcLHKPJl/xa6VkVstRaPywWtMKGwuOLc/wZTyQYuoxgvZnNsBvv7Kg3YTBQYYBCggcviQczuA==}
-
-  cross-spawn@7.0.6:
-    resolution: {integrity: sha512-uV2QOWP2nWzsy2aMp8aRibhi9dlzF5Hgh5SHaB9OiTGEyDTiJJyx0uy51QXdyWbtAHNua4XJzUKca3OzKUd3vA==}
-    engines: {node: '>= 8'}
-
-  crossws@0.3.5:
-    resolution: {integrity: sha512-ojKiDvcmByhwa8YYqbQI/hg7MEU0NC03+pSdEq4ZUnZR9xXpwk7E43SMNGkn+JxJGPFtNvQ48+vV2p+P1ml5PA==}
-
-  crypto-browserify@3.12.1:
-    resolution: {integrity: sha512-r4ESw/IlusD17lgQi1O20Fa3qNnsckR126TdUuBgAu7GBYSIPvdNyONd3Zrxh0xCwA4+6w/TDArBPsMvhur+KQ==}
-    engines: {node: '>= 0.10'}
-
-  css-select@5.2.2:
-    resolution: {integrity: sha512-TizTzUddG/xYLA3NXodFM0fSbNizXjOKhqiQQwvhlspadZokn1KDy0NZFS0wuEubIYAV5/c1/lAr0TaaFXEXzw==}
-
-  css-tree@2.2.1:
-    resolution: {integrity: sha512-OA0mILzGc1kCOCSJerOeqDxDQ4HOh+G8NbOJFOTgOCzpw7fCBubk0fEyxp8AgOL/jvLgYA/uV0cMbe43ElF1JA==}
-    engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0, npm: '>=7.0.0'}
-
-  css-tree@3.2.1:
-    resolution: {integrity: sha512-X7sjQzceUhu1u7Y/ylrRZFU2FS6LRiFVp6rKLPg23y3x3c3DOKAwuXGDp+PAGjh6CSnCjYeAul8pcT8bAl+lSA==}
-    engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0}
-
-  css-what@6.2.2:
-    resolution: {integrity: sha512-u/O3vwbptzhMs3L1fQE82ZSLHQQfto5gyZzwteVIEyeaY5Fc7R4dapF/BvRoSYFeqfBk4m0V1Vafq5Pjv25wvA==}
-    engines: {node: '>= 6'}
-
-  cssesc@3.0.0:
-    resolution: {integrity: sha512-/Tb/JcjK111nNScGob5MNtsntNM1aCNUDipB/TkwZFhyDrrE47SOx/18wF2bbjgc3ZzCSKW1T5nt5EbFoAz/Vg==}
-    engines: {node: '>=4'}
-    hasBin: true
-
-  csso@5.0.5:
-    resolution: {integrity: sha512-0LrrStPOdJj+SPCCrGhzryycLjwcgUSHBtxNA8aIDxf0GLsRh1cKYhB00Gd1lDOS4yGH69+SNn13+TWbVHETFQ==}
-    engines: {node: ^10 || ^12.20.0 || ^14.13.0 || >=15.0.0, npm: '>=7.0.0'}
-
-  csstype@3.2.3:
-    resolution: {integrity: sha512-z1HGKcYy2xA8AGQfwrn0PAy+PB7X/GSj3UVJW9qKyn43xWa+gl5nXmU4qqLMRzWVLFC8KusUX8T/0kCiOYpAIQ==}
-
-  cytoscape-cose-bilkent@4.1.0:
-    resolution: {integrity: sha512-wgQlVIUJF13Quxiv5e1gstZ08rnZj2XaLHGoFMYXz7SkNfCDOOteKBE6SYRfA9WxxI/iBc3ajfDoc6hb/MRAHQ==}
-    peerDependencies:
-      cytoscape: ^3.2.0
-
-  cytoscape-fcose@2.2.0:
-    resolution: {integrity: sha512-ki1/VuRIHFCzxWNrsshHYPs6L7TvLu3DL+TyIGEsRcvVERmxokbf5Gdk7mFxZnTdiGtnA4cfSmjZJMviqSuZrQ==}
-    peerDependencies:
-      cytoscape: ^3.2.0
-
-  cytoscape@3.34.0:
-    resolution: {integrity: sha512-62rNSrioXw93uliKFBwjukeQyeWwH2PqDrTac31r2P6464u3AUvTk0xS4LVvT251g7IgkFunrI48ZEZGjywSOg==}
-    engines: {node: '>=0.10'}
-
-  d3-array@2.12.1:
-    resolution: {integrity: sha512-B0ErZK/66mHtEsR1TkPEEkwdy+WDesimkM5gpZr5Dsg54BiTA5RXtYW5qTLIAcekaS9xfZrzBLF/OAkB3Qn1YQ==}
-
-  d3-array@3.2.4:
-    resolution: {integrity: sha512-tdQAmyA18i4J7wprpYq8ClcxZy3SC31QMeByyCFyRt7BVHdREQZ5lpzoe5mFEYZUWe+oq8HBvk9JjpibyEV4Jg==}
-    engines: {node: '>=12'}
-
-  d3-axis@3.0.0:
-    resolution: {integrity: sha512-IH5tgjV4jE/GhHkRV0HiVYPDtvfjHQlQfJHs0usq7M30XcSBvOotpmH1IgkcXsO/5gEQZD43B//fc7SRT5S+xw==}
-    engines: {node: '>=12'}
-
-  d3-brush@3.0.0:
-    resolution: {integrity: sha512-ALnjWlVYkXsVIGlOsuWH1+3udkYFI48Ljihfnh8FZPF2QS9o+PzGLBslO0PjzVoHLZ2KCVgAM8NVkXPJB2aNnQ==}
-    engines: {node: '>=12'}
-
-  d3-chord@3.0.1:
-    resolution: {integrity: sha512-VE5S6TNa+j8msksl7HwjxMHDM2yNK3XCkusIlpX5kwauBfXuyLAtNg9jCp/iHH61tgI4sb6R/EIMWCqEIdjT/g==}
-    engines: {node: '>=12'}
-
-  d3-color@3.1.0:
-    resolution: {integrity: sha512-zg/chbXyeBtMQ1LbD/WSoW2DpC3I0mpmPdW+ynRTj/x2DAWYrIY7qeZIHidozwV24m4iavr15lNwIwLxRmOxhA==}
-    engines: {node: '>=12'}
-
-  d3-contour@4.0.2:
-    resolution: {integrity: sha512-4EzFTRIikzs47RGmdxbeUvLWtGedDUNkTcmzoeyg4sP/dvCexO47AaQL7VKy/gul85TOxw+IBgA8US2xwbToNA==}
-    engines: {node: '>=12'}
-
-  d3-delaunay@6.0.4:
-    resolution: {integrity: sha512-mdjtIZ1XLAM8bm/hx3WwjfHt6Sggek7qH043O8KEjDXN40xi3vx/6pYSVTwLjEgiXQTbvaouWKynLBiUZ6SK6A==}
-    engines: {node: '>=12'}
-
-  d3-dispatch@3.0.1:
-    resolution: {integrity: sha512-rzUyPU/S7rwUflMyLc1ETDeBj0NRuHKKAcvukozwhshr6g6c5d8zh4c2gQjY2bZ0dXeGLWc1PF174P2tVvKhfg==}
-    engines: {node: '>=12'}
-
-  d3-drag@3.0.0:
-    resolution: {integrity: sha512-pWbUJLdETVA8lQNJecMxoXfH6x+mO2UQo8rSmZ+QqxcbyA3hfeprFgIT//HW2nlHChWeIIMwS2Fq+gEARkhTkg==}
-    engines: {node: '>=12'}
-
-  d3-dsv@3.0.1:
-    resolution: {integrity: sha512-UG6OvdI5afDIFP9w4G0mNq50dSOsXHJaRE8arAS5o9ApWnIElp8GZw1Dun8vP8OyHOZ/QJUKUJwxiiCCnUwm+Q==}
-    engines: {node: '>=12'}
-    hasBin: true
-
-  d3-ease@3.0.1:
-    resolution: {integrity: sha512-wR/XK3D3XcLIZwpbvQwQ5fK+8Ykds1ip7A2Txe0yxncXSdq1L9skcG7blcedkOX+ZcgxGAmLX1FrRGbADwzi0w==}
-    engines: {node: '>=12'}
-
-  d3-fetch@3.0.1:
-    resolution: {integrity: sha512-kpkQIM20n3oLVBKGg6oHrUchHM3xODkTzjMoj7aWQFq5QEM+R6E4WkzT5+tojDY7yjez8KgCBRoj4aEr99Fdqw==}
-    engines: {node: '>=12'}
-
-  d3-force@3.0.0:
-    resolution: {integrity: sha512-zxV/SsA+U4yte8051P4ECydjD/S+qeYtnaIyAs9tgHCqfguma/aAQDjo85A9Z6EKhBirHRJHXIgJUlffT4wdLg==}
-    engines: {node: '>=12'}
-
-  d3-format@3.1.2:
-    resolution: {integrity: sha512-AJDdYOdnyRDV5b6ArilzCPPwc1ejkHcoyFarqlPqT7zRYjhavcT3uSrqcMvsgh2CgoPbK3RCwyHaVyxYcP2Arg==}
-    engines: {node: '>=12'}
-
-  d3-geo@3.1.1:
-    resolution: {integrity: sha512-637ln3gXKXOwhalDzinUgY83KzNWZRKbYubaG+fGVuc/dxO64RRljtCTnf5ecMyE1RIdtqpkVcq0IbtU2S8j2Q==}
-    engines: {node: '>=12'}
-
-  d3-hierarchy@3.1.2:
-    resolution: {integrity: sha512-FX/9frcub54beBdugHjDCdikxThEqjnR93Qt7PvQTOHxyiNCAlvMrHhclk3cD5VeAaq9fxmfRp+CnWw9rEMBuA==}
-    engines: {node: '>=12'}
-
-  d3-interpolate@3.0.1:
-    resolution: {integrity: sha512-3bYs1rOD33uo8aqJfKP3JWPAibgw8Zm2+L9vBKEHJ2Rg+viTR7o5Mmv5mZcieN+FRYaAOWX5SJATX6k1PWz72g==}
-    engines: {node: '>=12'}
-
-  d3-path@1.0.9:
-    resolution: {integrity: sha512-VLaYcn81dtHVTjEHd8B+pbe9yHWpXKZUC87PzoFmsFrJqgFwDe/qxfp5MlfsfM1V5E/iVt0MmEbWQ7FVIXh/bg==}
-
-  d3-path@3.1.0:
-    resolution: {integrity: sha512-p3KP5HCf/bvjBSSKuXid6Zqijx7wIfNW+J/maPs+iwR35at5JCbLUT0LzF1cnjbCHWhqzQTIN2Jpe8pRebIEFQ==}
-    engines: {node: '>=12'}
-
-  d3-polygon@3.0.1:
-    resolution: {integrity: sha512-3vbA7vXYwfe1SYhED++fPUQlWSYTTGmFmQiany/gdbiWgU/iEyQzyymwL9SkJjFFuCS4902BSzewVGsHHmHtXg==}
-    engines: {node: '>=12'}
-
-  d3-quadtree@3.0.1:
-    resolution: {integrity: sha512-04xDrxQTDTCFwP5H6hRhsRcb9xxv2RzkcsygFzmkSIOJy3PeRJP7sNk3VRIbKXcog561P9oU0/rVH6vDROAgUw==}
-    engines: {node: '>=12'}
-
-  d3-random@3.0.1:
-    resolution: {integrity: sha512-FXMe9GfxTxqd5D6jFsQ+DJ8BJS4E/fT5mqqdjovykEB2oFbTMDVdg1MGFxfQW+FBOGoB++k8swBrgwSHT1cUXQ==}
-    engines: {node: '>=12'}
-
-  d3-sankey@0.12.3:
-    resolution: {integrity: sha512-nQhsBRmM19Ax5xEIPLMY9ZmJ/cDvd1BG3UVvt5h3WRxKg5zGRbvnteTyWAbzeSvlh3tW7ZEmq4VwR5mB3tutmQ==}
-
-  d3-scale-chromatic@3.1.0:
-    resolution: {integrity: sha512-A3s5PWiZ9YCXFye1o246KoscMWqf8BsD9eRiJ3He7C9OBaxKhAd5TFCdEx/7VbKtxxTsu//1mMJFrEt572cEyQ==}
-    engines: {node: '>=12'}
-
-  d3-scale@4.0.2:
-    resolution: {integrity: sha512-GZW464g1SH7ag3Y7hXjf8RoUuAFIqklOAq3MRl4OaWabTFJY9PN/E1YklhXLh+OQ3fM9yS2nOkCoS+WLZ6kvxQ==}
-    engines: {node: '>=12'}
-
-  d3-selection@3.0.0:
-    resolution: {integrity: sha512-fmTRWbNMmsmWq6xJV8D19U/gw/bwrHfNXxrIN+HfZgnzqTHp9jOmKMhsTUjXOJnZOdZY9Q28y4yebKzqDKlxlQ==}
-    engines: {node: '>=12'}
-
-  d3-shape@1.3.7:
-    resolution: {integrity: sha512-EUkvKjqPFUAZyOlhY5gzCxCeI0Aep04LwIRpsZ/mLFelJiUfnK56jo5JMDSE7yyP2kLSb6LtF+S5chMk7uqPqw==}
-
-  d3-shape@3.2.0:
-    resolution: {integrity: sha512-SaLBuwGm3MOViRq2ABk3eLoxwZELpH6zhl3FbAoJ7Vm1gofKx6El1Ib5z23NUEhF9AsGl7y+dzLe5Cw2AArGTA==}
-    engines: {node: '>=12'}
-
-  d3-time-format@4.1.0:
-    resolution: {integrity: sha512-dJxPBlzC7NugB2PDLwo9Q8JiTR3M3e4/XANkreKSUxF8vvXKqm1Yfq4Q5dl8budlunRVlUUaDUgFt7eA8D6NLg==}
-    engines: {node: '>=12'}
-
-  d3-time@3.1.0:
-    resolution: {integrity: sha512-VqKjzBLejbSMT4IgbmVgDjpkYrNWUYJnbCGo874u7MMKIWsILRX+OpX/gTk8MqjpT1A/c6HY2dCA77ZN0lkQ2Q==}
-    engines: {node: '>=12'}
-
-  d3-timer@3.0.1:
-    resolution: {integrity: sha512-ndfJ/JxxMd3nw31uyKoY2naivF+r29V+Lc0svZxe1JvvIRmi8hUsrMvdOwgS1o6uBHmiz91geQ0ylPP0aj1VUA==}
-    engines: {node: '>=12'}
-
-  d3-transition@3.0.1:
-    resolution: {integrity: sha512-ApKvfjsSR6tg06xrL434C0WydLr7JewBB3V+/39RMHsaXTOG0zmt/OAXeng5M5LBm0ojmxJrpomQVZ1aPvBL4w==}
-    engines: {node: '>=12'}
-    peerDependencies:
-      d3-selection: 2 - 3
-
-  d3-zoom@3.0.0:
-    resolution: {integrity: sha512-b8AmV3kfQaqWAuacbPuNbL6vahnOJflOhexLzMMNLga62+/nh0JzvJ0aO/5a5MVgUFGS7Hu1P9P03o3fJkDCyw==}
-    engines: {node: '>=12'}
-
-  d3@7.9.0:
-    resolution: {integrity: sha512-e1U46jVP+w7Iut8Jt8ri1YsPOvFpg46k+K8TpCb0P+zjCkjkPnV7WzfDJzMHy1LnA+wj5pLT1wjO901gLXeEhA==}
-    engines: {node: '>=12'}
-
-  dagre-d3-es@7.0.14:
-    resolution: {integrity: sha512-P4rFMVq9ESWqmOgK+dlXvOtLwYg0i7u0HBGJER0LZDJT2VHIPAMZ/riPxqJceWMStH5+E61QxFra9kIS3AqdMg==}
-
-  data-uri-to-buffer@4.0.1:
-    resolution: {integrity: sha512-0R9ikRb668HB7QDxT1vkpuUBtqc53YyAwMwGeUFKRojY/NWKvdZ+9UYtRfGmhqNbRkTSVpMbmyhXipFFv2cb/A==}
-    engines: {node: '>= 12'}
-
-  data-uri-to-buffer@6.0.2:
-    resolution: {integrity: sha512-7hvf7/GW8e86rW0ptuwS3OcBGDjIi6SZva7hCyWC0yYry2cOPmLIjXAUHI6DK2HsnwJd9ifmt57i8eV2n4YNpw==}
-    engines: {node: '>= 14'}
-
-  date-fns@4.4.0:
-    resolution: {integrity: sha512-+1UMbeh68lH1SegH83CGWwpb6OHHbpSgr3+s5Eww5M4CAgswBpoWS0AjTOfEJ33HiYKz1hdj/KTFprzXHmq/6w==}
-
-  dateformat@4.6.3:
-    resolution: {integrity: sha512-2P0p0pFGzHS5EMnhdxQi7aJN+iMheud0UhG4dlE1DLAlvL8JHjJJTX/CSm4JXwV0Ka5nGk3zC5mcb5bUQUxxMA==}
-
-  dayjs@1.11.21:
-    resolution: {integrity: sha512-98IT+HOahAisibz/yjKbzuOBwYcjJ7BCLPzARyHiyEBmRz4fatF+KPJszEHXsGYjUG234aH/cOjW1wwTbKUZlA==}
-
-  debug@4.4.3:
-    resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
-    engines: {node: '>=6.0'}
-    peerDependencies:
-      supports-color: '*'
-    peerDependenciesMeta:
-      supports-color:
-        optional: true
-
-  decimal.js-light@2.5.1:
-    resolution: {integrity: sha512-qIMFpTMZmny+MMIitAB6D7iVPEorVw6YQRWkvarTkT4tBeSLLiHzcwj6q0MmYSFCiVpiqPJTJEYIrpcPzVEIvg==}
-
-  decode-named-character-reference@1.3.0:
-    resolution: {integrity: sha512-GtpQYB283KrPp6nRw50q3U9/VfOutZOe103qlN7BPP6Ad27xYnOIWv4lPzo8HCAL+mMZofJ9KEy30fq6MfaK6Q==}
-
-  dedent@1.7.2:
-    resolution: {integrity: sha512-WzMx3mW98SN+zn3hgemf4OzdmyNhhhKz5Ay0pUfQiMQ3e1g+xmTJWp/pKdwKVXhdSkAEGIIzqeuWrL3mV/AXbA==}
-    peerDependencies:
-      babel-plugin-macros: ^3.1.0
-    peerDependenciesMeta:
-      babel-plugin-macros:
-        optional: true
-
-  deep-eql@5.0.2:
-    resolution: {integrity: sha512-h5k/5U50IJJFpzfL6nO9jaaumfjO/f2NjK/oYB2Djzm4p9L+3T9qWpZqZ2hAbLPuuYq9wrU08WQyBTL5GbPk5Q==}
-    engines: {node: '>=6'}
-
-  deepmerge@4.3.1:
-    resolution: {integrity: sha512-3sUqbMEc77XqpdNO7FRyRog+eW3ph+GYCbj+rK+uYyRMuwsVy0rMiVtPn+QJlKFvWP/1PYpapqYn0Me2knFn+A==}
-    engines: {node: '>=0.10.0'}
-
-  define-data-property@1.1.4:
-    resolution: {integrity: sha512-rBMvIzlpA8v6E+SJZoo++HAYqsLrkg7MSfIinMPFhmkorw7X+dOXVJQs+QT69zGkzMyfDnIMN2Wid1+NbL3T+A==}
-    engines: {node: '>= 0.4'}
-
-  define-properties@1.2.1:
-    resolution: {integrity: sha512-8QmQKqEASLd5nx0U1B1okLElbUuuttJ/AnYmRXbbbGDWh6uS208EjD4Xqq/I9wK7u0v6O08XhTWnt5XtEbR6Dg==}
-    engines: {node: '>= 0.4'}
-
-  defu@6.1.7:
-    resolution: {integrity: sha512-7z22QmUWiQ/2d0KkdYmANbRUVABpZ9SNYyH5vx6PZ+nE5bcC0l7uFvEfHlyld/HcGBFTL536ClDt3DEcSlEJAQ==}
-
-  degenerator@5.0.1:
-    resolution: {integrity: sha512-TllpMR/t0M5sqCXfj85i4XaAzxmS5tVA16dqvdkMwGmzI+dXLXnw3J+3Vdv7VKw+ThlTMboK6i9rnZ6Nntj5CQ==}
-    engines: {node: '>= 14'}
-
-  delaunator@5.1.0:
-    resolution: {integrity: sha512-AGrQ4QSgssa1NGmWmLPqN5NY2KajF5MqxetNEO+o0n3ZwZZeTmt7bBnvzHWrmkZFxGgr4HdyFgelzgi06otLuQ==}
-
-  delayed-stream@1.0.0:
-    resolution: {integrity: sha512-ZySD7Nf91aLB0RxL4KGrKHBXl7Eds1DAmEdcoVawXnLD7SDhpNgtuII2aAkg7a7QS41jxPSZ17p4VdGnMHk3MQ==}
-    engines: {node: '>=0.4.0'}
-
-  depd@2.0.0:
-    resolution: {integrity: sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==}
-    engines: {node: '>= 0.8'}
-
-  dequal@2.0.3:
-    resolution: {integrity: sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==}
-    engines: {node: '>=6'}
-
-  des.js@1.1.0:
-    resolution: {integrity: sha512-r17GxjhUCjSRy8aiJpr8/UadFIzMzJGexI3Nmz4ADi9LYSFx4gTBp80+NaX/YsXWWLhpZ7v/v/ubEc/bCNfKwg==}
-
-  destr@2.0.5:
-    resolution: {integrity: sha512-ugFTXCtDZunbzasqBxrK93Ik/DRYsO6S/fedkWEMKqt04xZ4csmnmwGDBAb07QWNaGMAmnTIemsYZCksjATwsA==}
-
-  detect-libc@2.1.2:
-    resolution: {integrity: sha512-Btj2BOOO83o3WyH59e8MgXsxEQVcarkUOpEYrubB0urwnN10yQ364rsiByU11nZlqWYZm05i/of7io4mzihBtQ==}
-    engines: {node: '>=8'}
-
-  detect-node-es@1.1.0:
-    resolution: {integrity: sha512-ypdmJU/TbBby2Dxibuv7ZLW3Bs1QEmM7nHjEANfohJLvE0XVujisn1qPJcZxg+qDucsr+bP6fLD1rPS3AhJ7EQ==}
-
-  deterministic-object-hash@2.0.2:
-    resolution: {integrity: sha512-KxektNH63SrbfUyDiwXqRb1rLwKt33AmMv+5Nhsw1kqZ13SJBRTgZHtGbE+hH3a1mVW1cz+4pqSWVPAtLVXTzQ==}
-    engines: {node: '>=18'}
-
-  devalue@5.8.1:
-    resolution: {integrity: sha512-4CXDYRBGqN+57wVJkuXBYmpAVUSg3L6JAQa/DFqm238G73E1wuyc/JhGQJzN7vUf/CMphYau2zXbfWzDR5aTEw==}
-
-  devlop@1.1.0:
-    resolution: {integrity: sha512-RWmIqhcFf1lRYBvNmr7qTNuyCt/7/ns2jbpp1+PalgE/rDQcBT0fioSMUpJ93irlUhC5hrg4cYqe6U+0ImW0rA==}
-
-  devtools-protocol@0.0.1642743:
-    resolution: {integrity: sha512-vTCGze95hGFayPNUXv2H/3cNt/Kqv3J7XqS519j7U8HYhmtD6+eVEPHp6nRHD64dDXJ022TU4reAYhjYyuxm8Q==}
-
-  didyoumean@1.2.2:
-    resolution: {integrity: sha512-gxtyfqMg7GKyhQmb056K7M3xszy/myH8w+B4RT+QXBQsvAOdc3XymqDDPHx1BgPgsdAA5SIifona89YtRATDzw==}
-
-  diff@8.0.4:
-    resolution: {integrity: sha512-DPi0FmjiSU5EvQV0++GFDOJ9ASQUVFh5kD+OzOnYdi7n3Wpm9hWWGfB/O2blfHcMVTL5WkQXSnRiK9makhrcnw==}
-    engines: {node: '>=0.3.1'}
-
-  diffie-hellman@5.0.3:
-    resolution: {integrity: sha512-kqag/Nl+f3GwyK25fhUMYj81BUOrZ9IuJsjIcDE5icNM9FJHAVm3VcUDxdLPoQtTuUylWm6ZIknYJwwaPxsUzg==}
-
-  dlv@1.1.3:
-    resolution: {integrity: sha512-+HlytyjlPKnIG8XuRG8WvmBP8xs8P71y+SKKS6ZXWoEgLuePxtDoUEiH7WkdePWrQ5JBpE6aoVqfZfJUQkjXwA==}
-
-  docker-modem@5.0.7:
-    resolution: {integrity: sha512-XJgGhoR/CLpqshm4d3L7rzH6t8NgDFUIIpztYlLHIApeJjMZKYJMz2zxPsYxnejq5h3ELYSw/RBsi3t5h7gNTA==}
-    engines: {node: '>= 8.0'}
-
-  dockerode@4.0.10:
-    resolution: {integrity: sha512-8L/P9JynLBiG7/coiA4FlQXegHltRqS0a+KqI44P1zgQh8QLHTg7FKOwhkBgSJwZTeHsq30WRoVFLuwkfK0YFg==}
-    engines: {node: '>= 8.0'}
-
-  dom-helpers@5.2.1:
-    resolution: {integrity: sha512-nRCa7CK3VTrM2NmGkIy4cbK7IZlgBE/PYMn55rrXefr5xXDP0LdtfPnblFDoVdcAfslJ7or6iqAUnx0CCGIWQA==}
-
-  dom-serializer@2.0.0:
-    resolution: {integrity: sha512-wIkAryiqt/nV5EQKqQpo3SToSOV9J0DnbJqwK7Wv/Trc92zIAYZ4FlMu+JPFW1DfGFt81ZTCGgDEabffXeLyJg==}
-
-  domain-browser@4.22.0:
-    resolution: {integrity: sha512-IGBwjF7tNk3cwypFNH/7bfzBcgSCbaMOD3GsaY1AU/JRrnHnYgEM0+9kQt52iZxjNsjBtJYtao146V+f8jFZNw==}
-    engines: {node: '>=10'}
-
-  domelementtype@2.3.0:
-    resolution: {integrity: sha512-OLETBj6w0OsagBwdXnPdN0cnMfF9opN69co+7ZrbfPGrdpPVNBUj02spi6B1N7wChLQiPn4CSH/zJvXw56gmHw==}
-
-  domhandler@5.0.3:
-    resolution: {integrity: sha512-cgwlv/1iFQiFnU96XXgROh8xTeetsnJiDsTc7TYCLFd9+/WNkIqPTxiM/8pSd8VIrhXGTf1Ny1q1hquVqDJB5w==}
-    engines: {node: '>= 4'}
-
-  dompurify@3.4.11:
-    resolution: {integrity: sha512-zhlUV12GsaRzMsf9q5M254YhA4+VuF0fG+QFqu6aYpoGlKtz+w8//jBcGVYBgQkR5GHjUomejY84AV+/uPbWdw==}
-
-  domutils@3.2.2:
-    resolution: {integrity: sha512-6kZKyUajlDuqlHKVX1w7gyslj9MPIXzIFiz/rGu35uC1wMi+kMhQwGhl4lt9unC9Vb9INnY9Z3/ZA3+FhASLaw==}
-
-  dotenv@16.6.1:
-    resolution: {integrity: sha512-uBq4egWHTcTt33a72vpSG0z3HnPuIl6NqYcTrKEg2azoEyl2hpW0zqlxysq2pK9HlDIHyHyakeYaYnSAwd8bow==}
-    engines: {node: '>=12'}
-
-  dset@3.1.4:
-    resolution: {integrity: sha512-2QF/g9/zTaPDc3BjNcVTGoBbXBgYfMTTceLaYcFJ/W9kggFUkhxD/hMEeuLKbugyef9SqAx8cpgwlIP/jinUTA==}
-    engines: {node: '>=4'}
-
-  dunder-proto@1.0.1:
-    resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
-    engines: {node: '>= 0.4'}
-
-  eastasianwidth@0.2.0:
-    resolution: {integrity: sha512-I88TYZWc9XiYHRQ4/3c5rjjfgkjhLyW2luGIheGERbNQ6OY7yTybanSpDXZa8y7VUP9YmDcYa+eyq4ca7iLqWA==}
-
-  ecdsa-sig-formatter@1.0.11:
-    resolution: {integrity: sha512-nagl3RYrbNv6kQkeJIpt6NJZy8twLB/2vtz6yN9Z4vRKHN4/QZJIEbqohALSgwKdnksuY3k5Addp5lg8sVoVcQ==}
-
-  ee-first@1.1.1:
-    resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
-
-  ejs@3.1.10:
-    resolution: {integrity: sha512-UeJmFfOrAQS8OJWPZ4qtgHyWExa088/MtK5UEyoJGFH67cDEXkZSviOiKRCZ4Xij0zxI3JECgYs3oKx+AizQBA==}
-    engines: {node: '>=0.10.0'}
-    hasBin: true
-
-  electron-to-chromium@1.5.375:
-    resolution: {integrity: sha512-ZWP5eB4BVPW/ZYo9252hQZHZ5XavtsTgpbhcmMmRwymavC5AsLWQWBPaKMeNd2LW0KGby5HPXvj7+sr4ta5j/Q==}
-
-  elliptic@6.6.1:
-    resolution: {integrity: sha512-RaddvvMatK2LJHqFJ+YA4WysVN5Ita9E35botqIYspQ4TkRAlCicdzKOjlyv/1Za5RyTNn7di//eEV0uTAfe3g==}
-
-  emoji-regex@10.6.0:
-    resolution: {integrity: sha512-toUI84YS5YmxW219erniWD0CIVOo46xGKColeNQRgOzDorgBi1v4D71/OFzgD9GO2UGKIv1C3Sp8DAn0+j5w7A==}
-
-  emoji-regex@8.0.0:
-    resolution: {integrity: sha512-MSjYzcWNOA0ewAHpz0MxpYFvwg6yjy1NG3xteoqz644VCo/RPgnr1/GGt+ic3iJTzQ8Eu3TdM14SawnVUmGE6A==}
-
-  emoji-regex@9.2.2:
-    resolution: {integrity: sha512-L18DaJsXSUk2+42pv8mLs5jJT2hqFkFE4j21wOmgbUqsZ2hL72NsUU785g9RXgo3s0ZNgVl42TiHp3ZtOv/Vyg==}
-
-  encodeurl@2.0.0:
-    resolution: {integrity: sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==}
-    engines: {node: '>= 0.8'}
-
-  end-of-stream@1.4.5:
-    resolution: {integrity: sha512-ooEGc6HP26xXq/N+GCGOT0JKCLDGrq2bQUZrQ7gyrJiZANJ/8YDTxTpQBXGMn+WbIQXNVpyWymm7KYVICQnyOg==}
-
-  entities@4.5.0:
-    resolution: {integrity: sha512-V0hjH4dGPh9Ao5p0MoRY6BVqtwCjhz6vI5LT8AJ55H+4g9/4vbHx1I54fS0XuclLhDHArPQCiMjDxjaL8fPxhw==}
-    engines: {node: '>=0.12'}
-
-  entities@6.0.1:
-    resolution: {integrity: sha512-aN97NXWF6AWBTahfVOIrB/NShkzi5H7F9r1s9mD3cDj4Ko5f2qhhVoYMibXF7GlLveb/D2ioWay8lxI97Ven3g==}
-    engines: {node: '>=0.12'}
-
-  es-define-property@1.0.1:
-    resolution: {integrity: sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==}
-    engines: {node: '>= 0.4'}
-
-  es-errors@1.3.0:
-    resolution: {integrity: sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==}
-    engines: {node: '>= 0.4'}
-
-  es-module-lexer@1.7.0:
-    resolution: {integrity: sha512-jEQoCwk8hyb2AZziIOLhDqpm5+2ww5uIE6lkO/6jcOCusfk6LhMHpXXfBLXTZ7Ydyt0j4VoUQv6uGNYbdW+kBA==}
-
-  es-object-atoms@1.1.1:
-    resolution: {integrity: sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==}
-    engines: {node: '>= 0.4'}
-
-  es-set-tostringtag@2.1.0:
-    resolution: {integrity: sha512-j6vWzfrGVfyXxge+O0x5sh6cvxAog0a/4Rdd2K36zCMV5eJ+/+tOAngRO8cODMNWbVRdVlmGZQL2YS3yR8bIUA==}
-    engines: {node: '>= 0.4'}
-
-  es-toolkit@1.49.0:
-    resolution: {integrity: sha512-G5iZ6Pc/FNRY/soKZHC+TxGDD83rHUDXxzaWhGCX44vAv/tMs56WMusnm/KMNK+luUPsgA9U28cGr4RDlSzL2g==}
-
-  esast-util-from-estree@2.0.0:
-    resolution: {integrity: sha512-4CyanoAudUSBAn5K13H4JhsMH6L9ZP7XbLVe/dKybkxMO7eDyLsT8UHl9TRNrU2Gr9nz+FovfSIjuXWJ81uVwQ==}
-
-  esast-util-from-js@2.0.1:
-    resolution: {integrity: sha512-8Ja+rNJ0Lt56Pcf3TAmpBZjmx8ZcK5Ts4cAzIOjsjevg9oSXJnl6SUQ2EevU8tv3h6ZLWmoKL5H4fgWvdvfETw==}
-
-  esbuild@0.21.5:
-    resolution: {integrity: sha512-mg3OPMV4hXywwpoDxu3Qda5xCKQi+vCTZq8S9J/EpkhB2HzKXq4SNFZE3+NK93JYxc8VMSep+lOUSC/RVKaBqw==}
-    engines: {node: '>=12'}
-    hasBin: true
-
-  esbuild@0.25.12:
-    resolution: {integrity: sha512-bbPBYYrtZbkt6Os6FiTLCTFxvq4tt3JKall1vRwshA3fdVztsLAatFaZobhkBC8/BrPetoa0oksYoKXoG4ryJg==}
-    engines: {node: '>=18'}
-    hasBin: true
-
-  esbuild@0.27.4:
-    resolution: {integrity: sha512-Rq4vbHnYkK5fws5NF7MYTU68FPRE1ajX7heQ/8QXXWqNgqqJ/GkmmyxIzUnf2Sr/bakf8l54716CcMGHYhMrrQ==}
-    engines: {node: '>=18'}
-    hasBin: true
-
-  escalade@3.2.0:
-    resolution: {integrity: sha512-WUj2qlxaQtO4g6Pq5c29GTcWGDyd8itL8zTlipgECz3JesAiiOKotd8JU6otB3PACgG6xkJUyVhboMS+bje/jA==}
-    engines: {node: '>=6'}
-
-  escape-html@1.0.3:
-    resolution: {integrity: sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==}
-
-  escape-string-regexp@4.0.0:
-    resolution: {integrity: sha512-TtpcNJ3XAzx3Gq8sWRzJaVajRs0uVxA2YAkdb1jm2YkPz4G6egUFAyA3n5vtEIZefPk5Wa4UXbKuS5fKkJWdgA==}
-    engines: {node: '>=10'}
-
-  escape-string-regexp@5.0.0:
-    resolution: {integrity: sha512-/veY75JbMK4j1yjvuUxuVsiS/hr/4iHs9FTT6cgTexxdE0Ly/glccBAkloH/DofkjRbZU3bnoj38mOmhkZ0lHw==}
-    engines: {node: '>=12'}
-
-  escodegen@2.1.0:
-    resolution: {integrity: sha512-2NlIDTwUWJN0mRPQOdtQBzbUHvdGY2P1VXSyU83Q3xKxM7WHX2Ql8dKq782Q9TgQUNOLEzEYu9bzLNj1q88I5w==}
-    engines: {node: '>=6.0'}
-    hasBin: true
-
-  esprima@4.0.1:
-    resolution: {integrity: sha512-eGuFFw7Upda+g4p+QHvnW0RyTX/SVeJBDM/gCtMARO0cLuT2HcEKnTPvhjV6aGeqrCB/sbNop0Kszm0jsaWU4A==}
-    engines: {node: '>=4'}
-    hasBin: true
-
-  estraverse@5.3.0:
-    resolution: {integrity: sha512-MMdARuVEQziNTeJD8DgMqmhwR11BRQ/cBP+pLtYdSTnf3MIO8fFeiINEbX36ZdNlfU/7A9f3gUw49B3oQsvwBA==}
-    engines: {node: '>=4.0'}
-
-  estree-util-attach-comments@3.0.0:
-    resolution: {integrity: sha512-cKUwm/HUcTDsYh/9FgnuFqpfquUbwIqwKM26BVCGDPVgvaCl/nDCCjUfiLlx6lsEZ3Z4RFxNbOQ60pkaEwFxGw==}
-
-  estree-util-build-jsx@3.0.1:
-    resolution: {integrity: sha512-8U5eiL6BTrPxp/CHbs2yMgP8ftMhR5ww1eIKoWRMlqvltHF8fZn5LRDvTKuxD3DUn+shRbLGqXemcP51oFCsGQ==}
-
-  estree-util-is-identifier-name@3.0.0:
-    resolution: {integrity: sha512-hFtqIDZTIUZ9BXLb8y4pYGyk6+wekIivNVTcmvk8NoOh+VeRn5y6cEHzbURrWbfp1fIqdVipilzj+lfaadNZmg==}
-
-  estree-util-scope@1.0.0:
-    resolution: {integrity: sha512-2CAASclonf+JFWBNJPndcOpA8EMJwa0Q8LUFJEKqXLW6+qBvbFZuF5gItbQOs/umBUkjviCSDCbBwU2cXbmrhQ==}
-
-  estree-util-to-js@2.0.0:
-    resolution: {integrity: sha512-WDF+xj5rRWmD5tj6bIqRi6CkLIXbbNQUcxQHzGysQzvHmdYG2G7p/Tf0J0gpxGgkeMZNTIjT/AoSvC9Xehcgdg==}
-
-  estree-util-visit@1.2.1:
-    resolution: {integrity: sha512-xbgqcrkIVbIG+lI/gzbvd9SGTJL4zqJKBFttUl5pP27KhAjtMKbX/mQXJ7qgyXpMgVy/zvpm0xoQQaGL8OloOw==}
-
-  estree-util-visit@2.0.0:
-    resolution: {integrity: sha512-m5KgiH85xAhhW8Wta0vShLcUvOsh3LLPI2YVwcbio1l7E09NTLL1EyMZFM1OyWowoH0skScNbhOPl4kcBgzTww==}
-
-  estree-walker@2.0.2:
-    resolution: {integrity: sha512-Rfkk/Mp/DL7JVje3u18FxFujQlTNR2q6QfMSMB7AvCBx91NGj/ba3kCfza0f6dVDbw7YlRf/nDrn7pQrCCyQ/w==}
-
-  estree-walker@3.0.3:
-    resolution: {integrity: sha512-7RUKfXgSMMkzt6ZuXmqapOurLGPPfgj6l9uRZ7lRGolvk0y2yocc35LdcxKC5PQZdn2DMqioAQ2NoWcrTKmm6g==}
-
-  esutils@2.0.3:
-    resolution: {integrity: sha512-kVscqXk4OCp68SZ0dkgEKVi6/8ij300KBWTJq32P/dYeWTSwK41WyTxalN1eRmA5Z9UU/LX9D7FWSmV9SAYx6g==}
-    engines: {node: '>=0.10.0'}
-
-  etag@1.8.1:
-    resolution: {integrity: sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==}
-    engines: {node: '>= 0.6'}
-
-  event-target-shim@5.0.1:
-    resolution: {integrity: sha512-i/2XbnSz/uxRCU6+NdVJgKWDTM427+MqYbkQzD321DuCQJUqOuJKIA0IM2+W2xtYHdKOmZ4dR6fExsd4SXL+WQ==}
-    engines: {node: '>=6'}
-
-  eventemitter3@4.0.7:
-    resolution: {integrity: sha512-8guHBZCwKnFhYdHr2ysuRWErTwhoN2X8XELRlrRwpmfeY2jjuUN4taQMsULKUVo1K4DvZl+0pgfyoysHxvmvEw==}
-
-  eventemitter3@5.0.4:
-    resolution: {integrity: sha512-mlsTRyGaPBjPedk6Bvw+aqbsXDtoAyAzm5MO7JgU+yVRyMQ5O8bD4Kcci7BS85f93veegeCPkL8R4GLClnjLFw==}
-
-  events-universal@1.0.1:
-    resolution: {integrity: sha512-LUd5euvbMLpwOF8m6ivPCbhQeSiYVNb8Vs0fQ8QjXo0JTkEHpz8pxdQf0gStltaPpw0Cca8b39KxvK9cfKRiAw==}
-
-  events@3.3.0:
-    resolution: {integrity: sha512-mQw+2fkQbALzQ7V0MY0IqdnXNOeTtP4r0lN9z7AAawCXgqea7bDii20AYrIBrFd/Hx0M2Ocz6S111CaFkUcb0Q==}
-    engines: {node: '>=0.8.x'}
-
-  eventsource-parser@3.1.0:
-    resolution: {integrity: sha512-kJezFj9YFAMLeORyi7aCLxLbD5/qWMQnoMVlVPyHIll7lgRJCc3JVln9Vgl9nwQi0YkMnhdGTMNn7CkRRAptMg==}
-    engines: {node: '>=18.0.0'}
-
-  eventsource@3.0.7:
-    resolution: {integrity: sha512-CRT1WTyuQoD771GW56XEZFQ/ZoSfWid1alKGDYMmkt2yl8UXrVR4pspqWNEcqKvVIzg6PAltWjxcSSPrboA4iA==}
-    engines: {node: '>=18.0.0'}
-
-  evp_bytestokey@1.0.3:
-    resolution: {integrity: sha512-/f2Go4TognH/KvCISP7OUsHn85hT9nUkxxA9BEWxFn+Oj9o8ZNLm/40hdlgSLyuOimsrTKLUMEorQexp/aPQeA==}
-
-  execa@8.0.1:
-    resolution: {integrity: sha512-VyhnebXciFV2DESc+p6B+y0LjSm0krU4OgJN44qFAhBY0TJ+1V61tYD2+wHusZ6F9n5K+vl8k0sTy7PEfV4qpg==}
-    engines: {node: '>=16.17'}
-
-  expect-type@1.3.0:
-    resolution: {integrity: sha512-knvyeauYhqjOYvQ66MznSMs83wmHrCycNEN6Ao+2AeYEfxUIkuiVxdEa1qlGEPK+We3n0THiDciYSsCcgW/DoA==}
-    engines: {node: '>=12.0.0'}
-
-  express-rate-limit@8.5.2:
-    resolution: {integrity: sha512-5Kb34ipNX694DH48vN9irak1Qx30nb0PLYHXfJgw4YEjiC3ZEmZJhwOp+VfiCYwFzvFTdB9QkArYS5kXa2cx2A==}
-    engines: {node: '>= 16'}
-    peerDependencies:
-      express: '>= 4.11'
-
-  express@5.2.1:
-    resolution: {integrity: sha512-hIS4idWWai69NezIdRt2xFVofaF4j+6INOpJlVOLDO8zXGpUVEVzIYk12UUi2JzjEzWL3IOAxcTubgz9Po0yXw==}
-    engines: {node: '>= 18'}
-
-  extend@3.0.2:
-    resolution: {integrity: sha512-fjquC59cD7CyW6urNXK0FBufkZcoiGG80wTuPujX590cB5Ttln20E2UB4S/WARVqhXffZl2LNgS+gQdPIIim/g==}
-
-  extract-zip@2.0.1:
-    resolution: {integrity: sha512-GDhU9ntwuKyGXdZBUgTIe+vXnWj0fppUEtMDL0+idd5Sta8TGpHssn/eusA9mrPr9qNDym6SxAYZjNvCn/9RBg==}
-    engines: {node: '>= 10.17.0'}
-    hasBin: true
-
-  fast-copy@4.0.3:
-    resolution: {integrity: sha512-58apWr0GUiDFM8+3afrO6eYwJBn9ZAhDOzG3L+/9llab/haCARS2UIfffmOurYLwbgDRs8n0rfr6qAAPEAuAQw==}
-
-  fast-deep-equal@3.1.3:
-    resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==}
-
-  fast-equals@5.4.0:
-    resolution: {integrity: sha512-jt2DW/aNFNwke7AUd+Z+e6pz39KO5rzdbbFCg2sGafS4mk13MI7Z8O5z9cADNn5lhGODIgLwug6TZO2ctf7kcw==}
-    engines: {node: '>=6.0.0'}
-
-  fast-fifo@1.3.2:
-    resolution: {integrity: sha512-/d9sfos4yxzpwkDkuN7k2SqFKtYNmCTzgfEpz82x34IM9/zc8KGxQoXg1liNC/izpRM/MBdt44Nmx41ZWqk+FQ==}
-
-  fast-glob@3.3.3:
-    resolution: {integrity: sha512-7MptL8U0cqcFdzIzwOTHoilX9x5BrNqye7Z/LuC7kCMRio1EMSyqRK3BEAUD7sXRq4iT4AzTVuZdhgQ2TCvYLg==}
-    engines: {node: '>=8.6.0'}
-
-  fast-safe-stringify@2.1.1:
-    resolution: {integrity: sha512-W+KJc2dmILlPplD/H4K9l9LcAHAfPtP6BY84uVLXQ6Evcz9Lcg33Y2z1IVblT6xdY54PXYVHEv+0Wpq8Io6zkA==}
-
-  fast-uri@3.1.2:
-    resolution: {integrity: sha512-rVjf7ArG3LTk+FS6Yw81V1DLuZl1bRbNrev6Tmd/9RaroeeRRJhAt7jg/6YFxbvAQXUCavSoZhPPj6oOx+5KjQ==}
-
-  fastest-levenshtein@1.0.16:
-    resolution: {integrity: sha512-eRnCtTTtGZFpQCwhJiUOuxPQWRXVKYDn0b2PeHfXL6/Zi53SLAzAHfVhVWK2AryC/WH05kGfxhFIPvTF0SXQzg==}
-    engines: {node: '>= 4.9.1'}
-
-  fastq@1.20.1:
-    resolution: {integrity: sha512-GGToxJ/w1x32s/D2EKND7kTil4n8OVk/9mycTc4VDza13lOvpUZTGX3mFSCtV9ksdGBVzvsyAVLM6mHFThxXxw==}
-
-  fd-slicer@1.1.0:
-    resolution: {integrity: sha512-cE1qsB/VwyQozZ+q1dGxR8LBYNZeofhEdUNGSMbQD3Gw2lAzX9Zb3uIU6Ebc/Fmyjo9AWWfnn0AUCHqtevs/8g==}
-
-  fdir@6.5.0:
-    resolution: {integrity: sha512-tIbYtZbucOs0BRGqPJkshJUYdL+SDH7dVM8gjy+ERp3WAUjLEFJE+02kanyHtwjWOnwrKYBiwAmM0p4kLJAnXg==}
-    engines: {node: '>=12.0.0'}
-    peerDependencies:
-      picomatch: ^3 || ^4
-    peerDependenciesMeta:
-      picomatch:
-        optional: true
-
-  fetch-blob@3.2.0:
-    resolution: {integrity: sha512-7yAQpD2UMJzLi1Dqv7qFYnPbaPx7ZfFK6PiIxQ4PfkGPyNyl2Ugx+a/umUonmKqjhM4DnfbMvdX6otXq83soQQ==}
-    engines: {node: ^12.20 || >= 14.13}
-
-  fetch-cookie@3.2.0:
-    resolution: {integrity: sha512-n61pQIxP25C6DRhcJxn7BDzgHP/+S56Urowb5WFxtcRMpU6drqXD90xjyAsVQYsNSNNVbaCcYY1DuHsdkZLuiA==}
-
-  fflate@0.4.8:
-    resolution: {integrity: sha512-FJqqoDBR00Mdj9ppamLa/Y7vxm+PRmNWA67N846RvsoYVMKB4q3y/de5PA7gUmRMYK/8CMz2GDZQmCRN1wBcWA==}
-
-  file-type@21.3.4:
-    resolution: {integrity: sha512-Ievi/yy8DS3ygGvT47PjSfdFoX+2isQueoYP1cntFW1JLYAuS4GD7NUPGg4zv2iZfV52uDyk5w5Z0TdpRS6Q1g==}
-    engines: {node: '>=20'}
-
-  filelist@1.0.6:
-    resolution: {integrity: sha512-5giy2PkLYY1cP39p17Ech+2xlpTRL9HLspOfEgm0L6CwBXBTgsK5ou0JtzYuepxkaQ/tvhCFIJ5uXo0OrM2DxA==}
-
-  fill-range@7.1.1:
-    resolution: {integrity: sha512-YsGpe3WHLK8ZYi4tWDg2Jy3ebRz2rXowDxnld4bkQB00cc/1Zw9AWnC0i9ztDJitivtQvaI9KaLyKrc+hBW0yg==}
-    engines: {node: '>=8'}
-
-  finalhandler@2.1.1:
-    resolution: {integrity: sha512-S8KoZgRZN+a5rNwqTxlZZePjT/4cnm0ROV70LedRHZ0p8u9fRID0hJUZQpkKLzro8LfmC8sx23bY6tVNxv8pQA==}
-    engines: {node: '>= 18.0.0'}
-
-  find-up@5.0.0:
-    resolution: {integrity: sha512-78/PXT1wlLLDgTzDs7sjq9hzz0vXD+zn+7wypEe4fXQxCmdmqfGsEPQxmiCSQI3ajFV91bVSsvNtrJRiW6nGng==}
-    engines: {node: '>=10'}
-
-  fix-dts-default-cjs-exports@1.0.1:
-    resolution: {integrity: sha512-pVIECanWFC61Hzl2+oOCtoJ3F17kglZC/6N94eRWycFgBH35hHx0Li604ZIzhseh97mf2p0cv7vVrOZGoqhlEg==}
-
-  flattie@1.1.1:
-    resolution: {integrity: sha512-9UbaD6XdAL97+k/n+N7JwX46K/M6Zc6KcFYskrYL8wbBV/Uyk0CTAMY0VT+qiK5PM7AIc9aTWYtq65U7T+aCNQ==}
-    engines: {node: '>=8'}
-
-  follow-redirects@1.16.0:
-    resolution: {integrity: sha512-y5rN/uOsadFT/JfYwhxRS5R7Qce+g3zG97+JrtFZlC9klX/W5hD7iiLzScI4nZqUS7DNUdhPgw4xI8W2LuXlUw==}
-    engines: {node: '>=4.0'}
-    peerDependencies:
-      debug: '*'
-    peerDependenciesMeta:
-      debug:
-        optional: true
-
-  fontace@0.4.1:
-    resolution: {integrity: sha512-lDMvbAzSnHmbYMTEld5qdtvNH2/pWpICOqpean9IgC7vUbUJc3k+k5Dokp85CegamqQpFbXf0rAVkbzpyTA8aw==}
-
-  fontkitten@1.0.3:
-    resolution: {integrity: sha512-Wp1zXWPVUPBmfoa3Cqc9ctaKuzKAV6uLstRqlR56kSjplf5uAce+qeyYym7F+PHbGTk+tCEdkCW6RD7DX/gBZw==}
-    engines: {node: '>=20'}
-
-  for-each@0.3.5:
-    resolution: {integrity: sha512-dKx12eRCVIzqCxFGplyFKJMPvLEWgmNtUrpTiJIR5u97zEhRG8ySrtboPHZXx7daLxQVrl643cTzbab2tkQjxg==}
-    engines: {node: '>= 0.4'}
-
-  foreground-child@3.3.1:
-    resolution: {integrity: sha512-gIXjKqtFuWEgzFRJA9WCQeSJLZDjgJUOMCMzxtvFq/37KojM1BFGufqsCy0r4qSQmYLsZYMeyRqzIWOMup03sw==}
-    engines: {node: '>=14'}
-
-  form-data-encoder@1.7.2:
-    resolution: {integrity: sha512-qfqtYan3rxrnCk1VYaA4H+Ms9xdpPqvLZa6xmMgFvhO32x7/3J/ExcTd6qpxM0vH2GdMI+poehyBZvqfMTto8A==}
-
-  form-data@4.0.6:
-    resolution: {integrity: sha512-vKatAh4SlVfgbv+YtmhiRjhEMJsYpsG1Y2rMQtR+SVSbytsSD1YGzDIcrAJmdFec88u/+VoGmxnl+80gL1tRCQ==}
-    engines: {node: '>= 6'}
-
-  formdata-node@4.4.1:
-    resolution: {integrity: sha512-0iirZp3uVDjVGt9p49aTaqjk84TrglENEDuqfdlZQ1roC9CWlPk6Avf8EEnZNcAqPonwkG35x4n3ww/1THYAeQ==}
-    engines: {node: '>= 12.20'}
-
-  formdata-polyfill@4.0.10:
-    resolution: {integrity: sha512-buewHzMvYL29jdeQTVILecSaZKnt/RJWjoZCF5OW60Z67/GmSLBkOFM7qh1PI3zFNtJbaZL5eQu1vLfazOwj4g==}
-    engines: {node: '>=12.20.0'}
-
-  forwarded@0.2.0:
-    resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
-    engines: {node: '>= 0.6'}
-
-  fraction.js@5.3.4:
-    resolution: {integrity: sha512-1X1NTtiJphryn/uLQz3whtY6jK3fTqoE3ohKs0tT+Ujr1W59oopxmoEh7Lu5p6vBaPbgoM0bzveAW4Qi5RyWDQ==}
-
-  framer-motion@11.18.2:
-    resolution: {integrity: sha512-5F5Och7wrvtLVElIpclDT0CBzMVg3dL22B64aZwHtsIY8RB4mXICLrkajK4G9R+ieSAGcgrLeae2SeUTg2pr6w==}
-    peerDependencies:
-      '@emotion/is-prop-valid': '*'
-      react: ^18.0.0 || ^19.0.0
-      react-dom: ^18.0.0 || ^19.0.0
-    peerDependenciesMeta:
-      '@emotion/is-prop-valid':
-        optional: true
-      react:
-        optional: true
-      react-dom:
-        optional: true
-
-  framer-motion@12.40.0:
-    resolution: {integrity: sha512-uaBd3qC1v3KQqBEjwTUd183K6PbS+j0yR9w9VmEOLWA/tnUcSn8Xa3uck7t4dgpDoUss8xQTcj8W2L07lrnLFg==}
-    peerDependencies:
-      '@emotion/is-prop-valid': '*'
-      react: ^18.0.0 || ^19.0.0
-      react-dom: ^18.0.0 || ^19.0.0
-    peerDependenciesMeta:
-      '@emotion/is-prop-valid':
-        optional: true
-      react:
-        optional: true
-      react-dom:
-        optional: true
-
-  fresh@2.0.0:
-    resolution: {integrity: sha512-Rx/WycZ60HOaqLKAi6cHRKKI7zxWbJ31MhntmtwMoaTeF7XFH9hhBp8vITaMidfljRQ6eYWCKkaTK+ykVJHP2A==}
-    engines: {node: '>= 0.8'}
-
-  fs-constants@1.0.0:
-    resolution: {integrity: sha512-y6OAwoSIf7FyjMIv94u+b5rdheZEjzR63GTyZJm5qh4Bi+2YgwLCcI/fPFZkL5PSixOt6ZNKm+w+Hfp/Bciwow==}
-
-  fsevents@2.3.2:
-    resolution: {integrity: sha512-xiqMQR4xAeHTuB9uWm+fFRcIOgKBMiOBP+eXiyT7jsgVCq1bkVygt00oASowB7EdtpOHaaPgKt812P9ab+DDKA==}
-    engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0}
-    os: [darwin]
-
-  fsevents@2.3.3:
-    resolution: {integrity: sha512-5xoDfX+fL7faATnagmWPpbFtwh/R77WmMMqqHGS65C3vvB0YHrgF+B1YmZ3441tMj5n63k0212XNoJwzlhffQw==}
-    engines: {node: ^8.16.0 || ^10.6.0 || >=11.0.0}
-    os: [darwin]
-
-  function-bind@1.1.2:
-    resolution: {integrity: sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==}
-
-  fuse.js@7.4.2:
-    resolution: {integrity: sha512-LVbzjD4WA6UP5B1UnP8wuaXJiLnqMdM/E4fiJXTJ5haJ5b/MBNsK29h2fm6swEoQaVQjvYFWKLE2RanyZIoRVQ==}
-    engines: {node: '>=10'}
-
-  gaxios@7.1.5:
-    resolution: {integrity: sha512-5FZy72Rh8LhtjmvDrKkI+lVhrsQrVKVsItxMoDm5mNQE+xR0WVIIs+jzPSJgBvKVsLi24fZhXJIsNI0bihDzFg==}
-    engines: {node: '>=18'}
-
-  gcp-metadata@8.1.2:
-    resolution: {integrity: sha512-zV/5HKTfCeKWnxG0Dmrw51hEWFGfcF2xiXqcA3+J90WDuP0SvoiSO5ORvcBsifmx/FoIjgQN3oNOGaQ5PhLFkg==}
-    engines: {node: '>=18'}
-
-  generator-function@2.0.1:
-    resolution: {integrity: sha512-SFdFmIJi+ybC0vjlHN0ZGVGHc3lgE0DxPAT0djjVg+kjOnSqclqmj0KQ7ykTOLP6YxoqOvuAODGdcHJn+43q3g==}
-    engines: {node: '>= 0.4'}
-
-  gensync@1.0.0-beta.2:
-    resolution: {integrity: sha512-3hN7NaskYvMDLQY55gnW3NQ+mesEAepTqlg+VEbj7zzqEMBVNhzcGYYeqFo/TlYz6eQiFcp1HcsCZO+nGgS8zg==}
-    engines: {node: '>=6.9.0'}
-
-  get-caller-file@2.0.5:
-    resolution: {integrity: sha512-DyFP3BM/3YHTQOCUL/w0OZHR0lpKeGrxotcHWcqNEdnltqFwXVfhEBQ94eIo34AfQpo0rGki4cyIiftY06h2Fg==}
-    engines: {node: 6.* || 8.* || >= 10.*}
-
-  get-east-asian-width@1.6.0:
-    resolution: {integrity: sha512-QRbvDIbx6YklUe6RxeTeleMR0yv3cYH6PsPZHcnVn7xv7zO1BHN8r0XETu8n6Ye3Q+ahtSarc3WgtNWmehIBfA==}
-    engines: {node: '>=18'}
-
-  get-intrinsic@1.3.0:
-    resolution: {integrity: sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==}
-    engines: {node: '>= 0.4'}
-
-  get-nonce@1.0.1:
-    resolution: {integrity: sha512-FJhYRoDaiatfEkUK8HKlicmu/3SGFD51q3itKDGoSTysQJBnfOcxU5GxnhE1E6soB76MbT0MBtnKJuXyAx+96Q==}
-    engines: {node: '>=6'}
-
-  get-package-type@0.1.0:
-    resolution: {integrity: sha512-pjzuKtY64GYfWizNAJ0fr9VqttZkNiK2iS430LtIHzjBEr6bX8Am2zm4sW4Ro5wjWW5cAlRL1qAMTcXbjNAO2Q==}
-    engines: {node: '>=8.0.0'}
-
-  get-port@7.2.0:
-    resolution: {integrity: sha512-afP4W205ONCuMoPBqcR6PSXnzX35KTcJygfJfcp+QY+uwm3p20p1YczWXhlICIzGMCxYBQcySEcOgsJcrkyobg==}
-    engines: {node: '>=16'}
-
-  get-proto@1.0.1:
-    resolution: {integrity: sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==}
-    engines: {node: '>= 0.4'}
-
-  get-stream@5.2.0:
-    resolution: {integrity: sha512-nBF+F1rAZVCu/p7rjzgA+Yb4lfYXrpl7a6VmJrU8wF9I1CKvP/QwPNZHnOlwbTkY6dvtFIzFMSyQXbLoTQPRpA==}
-    engines: {node: '>=8'}
-
-  get-stream@8.0.1:
-    resolution: {integrity: sha512-VaUJspBffn/LMCJVoMvSAdmscJyS1auj5Zulnn5UoYcY531UWmdwhRWkcGKnGU93m5HSXP9LP2usOryrBtQowA==}
-    engines: {node: '>=16'}
-
-  get-tsconfig@4.13.7:
-    resolution: {integrity: sha512-7tN6rFgBlMgpBML5j8typ92BKFi2sFQvIdpAqLA2beia5avZDrMs0FLZiM5etShWq5irVyGcGMEA1jcDaK7A/Q==}
-
-  get-uri@6.0.5:
-    resolution: {integrity: sha512-b1O07XYq8eRuVzBNgJLstU6FYc1tS6wnMtF1I1D9lE8LxZSOGZ7LhxN54yPP6mGw5f2CkXY2BQUL9Fx41qvcIg==}
-    engines: {node: '>= 14'}
-
-  github-slugger@2.0.0:
-    resolution: {integrity: sha512-IaOQ9puYtjrkq7Y0Ygl9KDZnrf/aiUJYUpVf89y8kyaxbRG7Y1SrX/jaumrv81vc61+kiMempujsM3Yw7w5qcw==}
-
-  glob-parent@5.1.2:
-    resolution: {integrity: sha512-AOIgSQCepiJYwP3ARnGx+5VnTu2HBYdzbGP45eLw1vr3zB3vZLeyed1sC9hnbcOc9/SrMyM5RPQrkGz4aS9Zow==}
-    engines: {node: '>= 6'}
-
-  glob-parent@6.0.2:
-    resolution: {integrity: sha512-XxwI8EOhVQgWp6iDL+3b0r86f4d6AX6zSU55HfB4ydCEuXLXc5FcYeOu+nnGftS4TEju/11rt4KJPTMgbfmv4A==}
-    engines: {node: '>=10.13.0'}
-
-  glob@10.5.0:
-    resolution: {integrity: sha512-DfXN8DfhJ7NH3Oe7cFmu3NCu1wKbkReJ8TorzSAFbSKrlNaQSKfIzqYqVY8zlbs2NLBbWpRiU52GX2PbaBVNkg==}
-    deprecated: Old versions of glob are not supported, and contain widely publicized security vulnerabilities, which have been fixed in the current version. Please update. Support for old versions may be purchased (at exorbitant rates) by contacting i@izs.me
-    hasBin: true
-
-  glob@13.0.6:
-    resolution: {integrity: sha512-Wjlyrolmm8uDpm/ogGyXZXb1Z+Ca2B8NbJwqBVg0axK9GbBeoS7yGV6vjXnYdGm6X53iehEuxxbyiKp8QmN4Vw==}
-    engines: {node: 18 || 20 || >=22}
-
-  google-auth-library@10.9.0:
-    resolution: {integrity: sha512-xtvUqvINPhTaBm7nXqlYPcrMHJPm1lCNdSovxnKKhTm+4JsvQ+KGVYJViLoH9Yxu8w+T0Qv5HubzYT9BLrppJg==}
-    engines: {node: '>=18'}
-
-  google-logging-utils@1.1.3:
-    resolution: {integrity: sha512-eAmLkjDjAFCVXg7A1unxHsLf961m6y17QFqXqAXGj/gVkKFrEICfStRfwUlGNfeCEjNRa32JEWOUTlYXPyyKvA==}
-    engines: {node: '>=14'}
-
-  gopd@1.2.0:
-    resolution: {integrity: sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==}
-    engines: {node: '>= 0.4'}
-
-  graceful-fs@4.2.11:
-    resolution: {integrity: sha512-RbJ5/jmFcNNCcDV5o9eTnBLJ/HszWV0P73bc+Ff4nS/rJj+YaS6IGyiOL0VoBYX+l1Wrl3k63h/KrH+nhJ0XvQ==}
-
-  h3@1.15.11:
-    resolution: {integrity: sha512-L3THSe2MPeBwgIZVSH5zLdBBU90TOxarvhK9d04IDY2AmVS8j2Jz2LIWtwsGOU3lu2I5jCN7FNvVfY2+XyF+mg==}
-
-  hachure-fill@0.5.2:
-    resolution: {integrity: sha512-3GKBOn+m2LX9iq+JC1064cSFprJY4jL1jCXTcpnfER5HYE2l/4EfWSGzkPa/ZDBmYI0ZOEj5VHV/eKnPGkHuOg==}
-
-  has-flag@4.0.0:
-    resolution: {integrity: sha512-EykJT/Q1KjTWctppgIAgfSO0tKVuZUjhgMr17kqTumMl6Afv3EISleU7qZUzoXDFTAHTDC4NOoG/ZxU3EvlMPQ==}
-    engines: {node: '>=8'}
-
-  has-property-descriptors@1.0.2:
-    resolution: {integrity: sha512-55JNKuIW+vq4Ke1BjOTjM2YctQIvCT7GFzHwmfZPGo5wnrgkid0YQtnAleFSqumZm4az3n2BS+erby5ipJdgrg==}
-
-  has-symbols@1.1.0:
-    resolution: {integrity: sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==}
-    engines: {node: '>= 0.4'}
-
-  has-tostringtag@1.0.2:
-    resolution: {integrity: sha512-NqADB8VjPFLM2V0VvHUewwwsw0ZWBaIdgo+ieHtK3hasLz4qeCRjYcqfB6AQrBggRKppKF8L52/VqdVsO47Dlw==}
-    engines: {node: '>= 0.4'}
-
-  hash-base@3.0.5:
-    resolution: {integrity: sha512-vXm0l45VbcHEVlTCzs8M+s0VeYsB2lnlAaThoLKGXr3bE/VWDOelNUnycUPEhKEaXARL2TEFjBOyUiM6+55KBg==}
-    engines: {node: '>= 0.10'}
-
-  hash-base@3.1.2:
-    resolution: {integrity: sha512-Bb33KbowVTIj5s7Ked1OsqHUeCpz//tPwR+E2zJgJKo9Z5XolZ9b6bdUgjmYlwnWhoOQKoTd1TYToZGn5mAYOg==}
-    engines: {node: '>= 0.8'}
-
-  hash.js@1.1.7:
-    resolution: {integrity: sha512-taOaskGt4z4SOANNseOviYDvjEJinIkRgmp7LbKP2YTTmVxWBl87s/uzK9r+44BclBSp2X7K1hqeNfz9JbBeXA==}
-
-  hasown@2.0.2:
-    resolution: {integrity: sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==}
-    engines: {node: '>= 0.4'}
-
-  hasown@2.0.4:
-    resolution: {integrity: sha512-T2UbfbBEF32wiepXIsMlTW9+dDYC6wMh/t/vYA4tuOMKqWz/n3vr1NFSxQiyP+zk2mXsoMA/i/7qV6LKut1t1A==}
-    engines: {node: '>= 0.4'}
-
-  hast-util-from-dom@5.0.1:
-    resolution: {integrity: sha512-N+LqofjR2zuzTjCPzyDUdSshy4Ma6li7p/c3pA78uTwzFgENbgbUrm2ugwsOdcjI1muO+o6Dgzp9p8WHtn/39Q==}
-
-  hast-util-from-html-isomorphic@2.0.0:
-    resolution: {integrity: sha512-zJfpXq44yff2hmE0XmwEOzdWin5xwH+QIhMLOScpX91e/NSGPsAzNCvLQDIEPyO2TXi+lBmU6hjLIhV8MwP2kw==}
-
-  hast-util-from-html@2.0.3:
-    resolution: {integrity: sha512-CUSRHXyKjzHov8yKsQjGOElXy/3EKpyX56ELnkHH34vDVw1N1XSQ1ZcAvTyAPtGqLTuKP/uxM+aLkSPqF/EtMw==}
-
-  hast-util-from-parse5@8.0.3:
-    resolution: {integrity: sha512-3kxEVkEKt0zvcZ3hCRYI8rqrgwtlIOFMWkbclACvjlDw8Li9S2hk/d51OI0nr/gIpdMHNepwgOKqZ/sy0Clpyg==}
-
-  hast-util-is-element@3.0.0:
-    resolution: {integrity: sha512-Val9mnv2IWpLbNPqc/pUem+a7Ipj2aHacCwgNfTiK0vJKl0LF+4Ba4+v1oPHFpf3bLYmreq0/l3Gud9S5OH42g==}
-
-  hast-util-parse-selector@4.0.0:
-    resolution: {integrity: sha512-wkQCkSYoOGCRKERFWcxMVMOcYE2K1AaNLU8DXS9arxnLOUEWbOXKXiJUNzEpqZ3JOKpnha3jkFrumEjVliDe7A==}
-
-  hast-util-raw@9.1.0:
-    resolution: {integrity: sha512-Y8/SBAHkZGoNkpzqqfCldijcuUKh7/su31kEBp67cFY09Wy0mTRgtsLYsiIxMJxlu0f6AA5SUTbDR8K0rxnbUw==}
-
-  hast-util-to-estree@3.1.3:
-    resolution: {integrity: sha512-48+B/rJWAp0jamNbAAf9M7Uf//UVqAoMmgXhBdxTDJLGKY+LRnZ99qcG+Qjl5HfMpYNzS5v4EAwVEF34LeAj7w==}
-
-  hast-util-to-html@9.0.5:
-    resolution: {integrity: sha512-OguPdidb+fbHQSU4Q4ZiLKnzWo8Wwsf5bZfbvu7//a9oTYoqD/fWpe96NuHkoS9h0ccGOTe0C4NGXdtS0iObOw==}
-
-  hast-util-to-jsx-runtime@2.3.6:
-    resolution: {integrity: sha512-zl6s8LwNyo1P9uw+XJGvZtdFF1GdAkOg8ujOw+4Pyb76874fLps4ueHXDhXWdk6YHQ6OgUtinliG7RsYvCbbBg==}
-
-  hast-util-to-parse5@8.0.1:
-    resolution: {integrity: sha512-MlWT6Pjt4CG9lFCjiz4BH7l9wmrMkfkJYCxFwKQic8+RTZgWPuWxwAfjJElsXkex7DJjfSJsQIt931ilUgmwdA==}
-
-  hast-util-to-text@4.0.2:
-    resolution: {integrity: sha512-KK6y/BN8lbaq654j7JgBydev7wuNMcID54lkRav1P0CaE1e47P72AWWPiGKXTJU271ooYzcvTAn/Zt0REnvc7A==}
-
-  hast-util-whitespace@3.0.0:
-    resolution: {integrity: sha512-88JUN06ipLwsnv+dVn+OIYOvAuvBMy/Qoi6O7mQHxdPXpjy+Cd6xRkWwux7DKO+4sYILtLBRIKgsdpS2gQc7qw==}
-
-  hastscript@9.0.1:
-    resolution: {integrity: sha512-g7df9rMFX/SPi34tyGCyUBREQoKkapwdY/T04Qn9TDWfHhAYt4/I0gMVirzK5wEzeUqIjEB+LXC/ypb7Aqno5w==}
-
-  he@1.2.0:
-    resolution: {integrity: sha512-F/1DnUGPopORZi0ni+CvrCgHQ5FyEAHRLSApuYWMmrbSwoN2Mn/7k+Gl38gJnR7yyDZk6WLXwiGod1JOWNDKGw==}
-    hasBin: true
-
-  help-me@5.0.0:
-    resolution: {integrity: sha512-7xgomUX6ADmcYzFik0HzAxh/73YlKR9bmFzf51CZwR+b6YtzU2m0u49hQCqV6SvlqIqsaxovfwdvbnsw3b/zpg==}
-
-  highlight.js@10.7.3:
-    resolution: {integrity: sha512-tzcUFauisWKNHaRkN4Wjl/ZA07gENAjFl3J/c480dprkGTg5EQstgaNFqBfUqCq54kZRIEcreTsAgF/m2quD7A==}
-
-  hmac-drbg@1.0.1:
-    resolution: {integrity: sha512-Tti3gMqLdZfhOQY1Mzf/AanLiqh1WTiJgEj26ZuYQ9fbkLomzGchCws4FyrSd4VkpBfiNhaE1On+lOz894jvXg==}
-
-  hoist-non-react-statics@3.3.2:
-    resolution: {integrity: sha512-/gGivxi8JPKWNm/W0jSmzcMPpfpPLc3dY/6GxhX2hQ9iGj3aDfklV4ET7NjKpSinLpJ5vafa9iiGIEZg10SfBw==}
-
-  hono@4.12.27:
-    resolution: {integrity: sha512-1yrb/+w6HWQJrUCLkJ2IF5jNIPvvFkblV5RNOYl6bV+OA6p9GLcMpHFFGTosSvHvcAUibuUukRqhlYI4z32C7Q==}
-    engines: {node: '>=16.9.0'}
-
-  hosted-git-info@9.0.3:
-    resolution: {integrity: sha512-Hc+ghLoSt6QaYZUv0WBiIvmMDZuZZ7oaDvdH8MbfOO4lOsxdXLEvuC6ePoGs9H1X9oCLyq6+NVN0MKqD+ydxyg==}
-    engines: {node: ^20.17.0 || >=22.9.0}
-
-  html-escaper@3.0.3:
-    resolution: {integrity: sha512-RuMffC89BOWQoY0WKGpIhn5gX3iI54O6nRA0yC124NYVtzjmFWBIiFd8M0x+ZdX0P9R4lADg1mgP8C7PxGOWuQ==}
-
-  html-url-attributes@3.0.1:
-    resolution: {integrity: sha512-ol6UPyBWqsrO6EJySPz2O7ZSr856WDrEzM5zMqp+FJJLGMW35cLYmmZnl0vztAZxRUoNZJFTCohfjuIJ8I4QBQ==}
-
-  html-void-elements@3.0.0:
-    resolution: {integrity: sha512-bEqo66MRXsUGxWHV5IP0PUiAWwoEjba4VCzg0LjFJBpchPaTfyfCKTG6bc5F8ucKec3q5y6qOdGyYTSBEvhCrg==}
-
-  http-cache-semantics@4.2.0:
-    resolution: {integrity: sha512-dTxcvPXqPvXBQpq5dUr6mEMJX4oIEFv6bwom3FDwKRDsuIjjJGANqhBuoAn9c1RQJIdAKav33ED65E2ys+87QQ==}
-
-  http-errors@2.0.1:
-    resolution: {integrity: sha512-4FbRdAX+bSdmo4AUFuS0WNiPz8NgFt+r8ThgNWmlrjQjt1Q7ZR9+zTlce2859x4KSXrwIsaeTqDoKQmtP8pLmQ==}
-    engines: {node: '>= 0.8'}
-
-  http-proxy-agent@7.0.2:
-    resolution: {integrity: sha512-T1gkAiYYDWYx3V5Bmyu7HcfcvL7mUrTWiM6yOfa3PIphViJ/gFPbvidQ+veqSOHci/PxBcDabeUNCzpOODJZig==}
-    engines: {node: '>= 14'}
-
-  http-status-codes@2.3.0:
-    resolution: {integrity: sha512-RJ8XvFvpPM/Dmc5SV+dC4y5PCeOhT3x1Hq0NU3rjGeg5a/CqlhZ7uudknPwZFz4aeAXDcbAyaeP7GAo9lvngtA==}
-
-  https-browserify@1.0.0:
-    resolution: {integrity: sha512-J+FkSdyD+0mA0N+81tMotaRMfSL9SGi+xpD3T6YApKsc3bGSXJlfXri3VyFOeYkfLRQisDk1W+jIFFKBeUBbBg==}
-
-  https-proxy-agent@5.0.1:
-    resolution: {integrity: sha512-dFcAjpTQFgoLMzC2VwU+C/CbS7uRL0lWmxDITmqm7C+7F0Odmj6s9l6alZc6AELXhrnggM2CeWSXHGOdX2YtwA==}
-    engines: {node: '>= 6'}
-
-  https-proxy-agent@7.0.6:
-    resolution: {integrity: sha512-vK9P5/iUfdl95AI+JVyUuIcVtd4ofvtrOr3HNtM2yxC9bnMbEdp3x01OhQNnjb8IJYi38VlTE3mBXwcfvywuSw==}
-    engines: {node: '>= 14'}
-
-  human-signals@5.0.0:
-    resolution: {integrity: sha512-AXcZb6vzzrFAUE61HnN4mpLqd/cSIwNQjtNWR0euPm6y0iqx3G4gOXaIDdtdDwZmhwe82LA6+zinmW4UBWVePQ==}
-    engines: {node: '>=16.17.0'}
-
-  humanize-ms@1.2.1:
-    resolution: {integrity: sha512-Fl70vYtsAFb/C06PTS9dZBo7ihau+Tu/DNCk/OyHhea07S+aeMWpFFkUaXRa8fI+ScZbEI8dfSxwY7gxZ9SAVQ==}
-
-  iconv-lite@0.6.3:
-    resolution: {integrity: sha512-4fCk79wshMdzMp2rH06qWrJE4iolqLhCUH+OiuIgU++RB0+94NlDL81atO7GX55uUKueo0txHNtvEyI6D7WdMw==}
-    engines: {node: '>=0.10.0'}
-
-  iconv-lite@0.7.2:
-    resolution: {integrity: sha512-im9DjEDQ55s9fL4EYzOAv0yMqmMBSZp6G0VvFyTMPKWxiSBHUj9NW/qqLmXUwXrrM7AvqSlTCfvqRb0cM8yYqw==}
-    engines: {node: '>=0.10.0'}
-
-  ieee754@1.2.1:
-    resolution: {integrity: sha512-dcyqhDvX1C46lXZcVqCpK+FtMRQVdIMN6/Df5js2zouUsqG7I6sFxitIC+7KYK29KdXOLHdu9zL4sFnoVQnqaA==}
-
-  ignore@7.0.5:
-    resolution: {integrity: sha512-Hs59xBNfUIunMFgWAbGX5cq6893IbWg4KnrjbYwX3tx0ztorVgTDA6B2sxf8ejHJ4wz8BqGUMYlnzNBer5NvGg==}
-    engines: {node: '>= 4'}
-
-  import-meta-resolve@4.2.0:
-    resolution: {integrity: sha512-Iqv2fzaTQN28s/FwZAoFq0ZSs/7hMAHJVX+w8PZl3cY19Pxk6jFFalxQoIfW2826i/fDLXv8IiEZRIT0lDuWcg==}
-
-  indent-string@4.0.0:
-    resolution: {integrity: sha512-EdDDZu4A2OyIK7Lr/2zG+w5jmbuk1DVBnEwREQvBzspBJkCEbRa8GxU1lghYcaGJCnRWibjDXlq779X1/y5xwg==}
-    engines: {node: '>=8'}
-
-  inherits@2.0.4:
-    resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
-
-  inline-style-parser@0.2.7:
-    resolution: {integrity: sha512-Nb2ctOyNR8DqQoR0OwRG95uNWIC0C1lCgf5Naz5H6Ji72KZ8OcFZLz2P5sNgwlyoJ8Yif11oMuYs5pBQa86csA==}
-
-  input-otp@1.4.2:
-    resolution: {integrity: sha512-l3jWwYNvrEa6NTCt7BECfCm48GvwuZzkoeG3gBL2w4CHeOXW3eKFmf9UNYkNfYc3mxMrthMnxjIE07MT0zLBQA==}
-    peerDependencies:
-      react: ^16.8 || ^17.0 || ^18.0 || ^19.0.0 || ^19.0.0-rc
-      react-dom: ^16.8 || ^17.0 || ^18.0 || ^19.0.0 || ^19.0.0-rc
-
-  internmap@1.0.1:
-    resolution: {integrity: sha512-lDB5YccMydFBtasVtxnZ3MRBHuaoE8GKsppq+EchKL2U4nK/DmEpPHNH8MZe5HkMtpSiTSOZwfN0tzYjO/lJEw==}
-
-  internmap@2.0.3:
-    resolution: {integrity: sha512-5Hh7Y1wQbvY5ooGgPbDaL5iYLAPzMTUrjMulskHLH6wnv/A+1q5rgEaiuqEjB+oxGXIVZs1FF+R/KPN3ZSQYYg==}
-    engines: {node: '>=12'}
-
-  ip-address@10.2.0:
-    resolution: {integrity: sha512-/+S6j4E9AHvW9SWMSEY9Xfy66O5PWvVEJ08O0y5JGyEKQpojb0K0GKpz/v5HJ/G0vi3D2sjGK78119oXZeE0qA==}
-    engines: {node: '>= 12'}
-
-  ipaddr.js@1.9.1:
-    resolution: {integrity: sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==}
-    engines: {node: '>= 0.10'}
-
-  iron-webcrypto@1.2.1:
-    resolution: {integrity: sha512-feOM6FaSr6rEABp/eDfVseKyTMDt+KGpeB35SkVn9Tyn0CqvVsY3EwI0v5i8nMHyJnzCIQf7nsy3p41TPkJZhg==}
-
-  is-alphabetical@2.0.1:
-    resolution: {integrity: sha512-FWyyY60MeTNyeSRpkM2Iry0G9hpr7/9kD40mD/cGQEuilcZYS4okz8SN2Q6rLCJ8gbCt6fN+rC+6tMGS99LaxQ==}
-
-  is-alphanumerical@2.0.1:
-    resolution: {integrity: sha512-hmbYhX/9MUMF5uh7tOXyK/n0ZvWpad5caBA17GsC6vyuCqaWliRG5K1qS9inmUhEMaOBIW7/whAnSwveW/LtZw==}
-
-  is-arguments@1.2.0:
-    resolution: {integrity: sha512-7bVbi0huj/wrIAOzb8U1aszg9kdi3KN/CyU19CTI7tAoZYEZoL9yCDXpbXN+uPsuWnP02cyug1gleqq+TU+YCA==}
-    engines: {node: '>= 0.4'}
-
-  is-arrayish@0.3.4:
-    resolution: {integrity: sha512-m6UrgzFVUYawGBh1dUsWR5M2Clqic9RVXC/9f8ceNlv2IcO9j9J/z8UoCLPqtsPBFNzEpfR3xftohbfqDx8EQA==}
-
-  is-binary-path@2.1.0:
-    resolution: {integrity: sha512-ZMERYes6pDydyuGidse7OsHxtbI7WVeUEozgR/g7rd0xUimYNlvZRE/K2MgZTjWy725IfelLeVcEM97mmtRGXw==}
-    engines: {node: '>=8'}
-
-  is-callable@1.2.7:
-    resolution: {integrity: sha512-1BC0BVFhS/p0qtw6enp8e+8OD0UrK0oFLztSjNzhcKA3WDuJxxAPXzPuPtKkjEY9UUoEWlX/8fgKeu2S8i9JTA==}
-    engines: {node: '>= 0.4'}
-
-  is-core-module@2.16.1:
-    resolution: {integrity: sha512-UfoeMA6fIJ8wTYFEUjelnaGI67v6+N7qXJEvQuIGa99l4xsCruSYOVSQ0uPANn4dAzm8lkYPaKLrrijLq7x23w==}
-    engines: {node: '>= 0.4'}
-
-  is-decimal@2.0.1:
-    resolution: {integrity: sha512-AAB9hiomQs5DXWcRB1rqsxGUstbRroFOPPVAomNk/3XHR5JyEZChOyTWe2oayKnsSsr/kcGqF+z6yuH6HHpN0A==}
-
-  is-docker@2.2.1:
-    resolution: {integrity: sha512-F+i2BKsFrH66iaUFc0woD8sLy8getkwTwtOBjvs56Cx4CgJDeKQeqfz8wAYiSb8JOprWhHH5p77PbmYCvvUuXQ==}
-    engines: {node: '>=8'}
-    hasBin: true
-
-  is-docker@3.0.0:
-    resolution: {integrity: sha512-eljcgEDlEns/7AXFosB5K/2nCM4P7FQPkGc/DWLy5rmFEWvZayGrik1d9/QIY5nJ4f9YsVvBkA6kJpHn9rISdQ==}
-    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
-    hasBin: true
-
-  is-extglob@2.1.1:
-    resolution: {integrity: sha512-SbKbANkN603Vi4jEZv49LeVJMn4yGwsbzZworEoyEiutsN3nJYdbO36zfhGJ6QEDpOZIFkDtnq5JRxmvl3jsoQ==}
-    engines: {node: '>=0.10.0'}
-
-  is-fullwidth-code-point@3.0.0:
-    resolution: {integrity: sha512-zymm5+u+sCsSWyD9qNaejV3DFvhCKclKdizYaJUuHA83RLjb7nSuGnddCHGv0hk+KY7BMAlsWeK4Ueg6EV6XQg==}
-    engines: {node: '>=8'}
-
-  is-generator-function@1.1.2:
-    resolution: {integrity: sha512-upqt1SkGkODW9tsGNG5mtXTXtECizwtS2kA161M+gJPc1xdb/Ax629af6YrTwcOeQHbewrPNlE5Dx7kzvXTizA==}
-    engines: {node: '>= 0.4'}
-
-  is-glob@4.0.3:
-    resolution: {integrity: sha512-xelSayHH36ZgE7ZWhli7pW34hNbNl8Ojv5KVmkJD4hBdD3th8Tfk9vYasLM+mXWOZhFkgZfxhLSnrwRr4elSSg==}
-    engines: {node: '>=0.10.0'}
-
-  is-hexadecimal@2.0.1:
-    resolution: {integrity: sha512-DgZQp241c8oO6cA1SbTEWiXeoxV42vlcJxgH+B3hi1AiqqKruZR3ZGF8In3fj4+/y/7rHvlOZLZtgJ/4ttYGZg==}
-
-  is-inside-container@1.0.0:
-    resolution: {integrity: sha512-KIYLCCJghfHZxqjYBE7rEy0OBuTd5xCHS7tHVgvCLkx7StIoaxwNW3hCALgEUjFfeRk+MG/Qxmp/vtETEF3tRA==}
-    engines: {node: '>=14.16'}
-    hasBin: true
-
-  is-nan@1.3.2:
-    resolution: {integrity: sha512-E+zBKpQ2t6MEo1VsonYmluk9NxGrbzpeeLC2xIViuO2EjU2xsXsBPwTr3Ykv9l08UYEVEdWeRZNouaZqF6RN0w==}
-    engines: {node: '>= 0.4'}
-
-  is-number@7.0.0:
-    resolution: {integrity: sha512-41Cifkg6e8TylSpdtTpeLVMqvSBEVzTttHvERD741+pnZ8ANv0004MRL43QKPDlK9cGvNp6NZWZUBlbGXYxxng==}
-    engines: {node: '>=0.12.0'}
-
-  is-plain-obj@4.1.0:
-    resolution: {integrity: sha512-+Pgi+vMuUNkJyExiMBt5IlFoMyKnr5zhJ4Uspz58WOhBF5QoIZkFyNHIbBAtHwzVAgk5RtndVNsDRN61/mmDqg==}
-    engines: {node: '>=12'}
-
-  is-promise@4.0.0:
-    resolution: {integrity: sha512-hvpoI6korhJMnej285dSg6nu1+e6uxs7zG3BYAm5byqDsgJNWwxzM6z6iZiAgQR4TJ30JmBTOwqZUw3WlyH3AQ==}
-
-  is-regex@1.2.1:
-    resolution: {integrity: sha512-MjYsKHO5O7mCsmRGxWcLWheFqN9DJ/2TmngvjKXihe6efViPqc274+Fx/4fYj/r03+ESvBdTXK0V6tA3rgez1g==}
-    engines: {node: '>= 0.4'}
-
-  is-stream@2.0.1:
-    resolution: {integrity: sha512-hFoiJiTl63nn+kstHGBtewWSKnQLpyb155KHheA1l39uvtO9nWIop1p3udqPcUd/xbF1VLMO4n7OI6p7RbngDg==}
-    engines: {node: '>=8'}
-
-  is-stream@3.0.0:
-    resolution: {integrity: sha512-LnQR4bZ9IADDRSkvpqMGvt/tEJWclzklNgSw48V5EAaAeDd6qGvN8ei6k5p0tvxSR171VmGyHuTiAOfxAbr8kA==}
-    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
-
-  is-typed-array@1.1.15:
-    resolution: {integrity: sha512-p3EcsicXjit7SaskXHs1hA91QxgTw46Fv6EFKKGS5DRFLD8yKnohjF3hxoju94b/OcMZoQukzpPpBE9uLVKzgQ==}
-    engines: {node: '>= 0.4'}
-
-  is-wsl@2.2.0:
-    resolution: {integrity: sha512-fKzAra0rGJUUBwGBgNkHZuToZcn+TtXHpeCgmkMJMMYx1sQDYaCSyjJBSCa2nH1DGm7s3n1oBnohoVTBaN7Lww==}
-    engines: {node: '>=8'}
-
-  is-wsl@3.1.1:
-    resolution: {integrity: sha512-e6rvdUCiQCAuumZslxRJWR/Doq4VpPR82kqclvcS0efgt430SlGIk05vdCN58+VrzgtIcfNODjozVielycD4Sw==}
-    engines: {node: '>=16'}
-
-  isarray@1.0.0:
-    resolution: {integrity: sha512-VLghIWNM6ELQzo7zwmcg0NmTVyWKYjvIeM83yjp0wRDTmUnrM678fQbcKBo6n2CJEF0szoG//ytg+TKla89ALQ==}
-
-  isarray@2.0.5:
-    resolution: {integrity: sha512-xHjhDr3cNBK0BzdUJSPXZntQUx/mwMS5Rw4A7lPJ90XGAO6ISP/ePDNuo0vhqOZU+UD5JoodwCAAoZQd3FeAKw==}
-
-  isexe@2.0.0:
-    resolution: {integrity: sha512-RHxMLp9lnKHGHRng9QFhRCMbYAcVpn69smSGcq3f36xjgVVWThj4qqLbTLlq7Ssj8B+fIQ1EuCEGI2lKsyQeIw==}
-
-  isomorphic-timers-promises@1.0.1:
-    resolution: {integrity: sha512-u4sej9B1LPSxTGKB/HiuzvEQnXH0ECYkSVQU39koSwmFAxhlEAFl9RdTvLv4TOTQUgBS5O3O5fwUxk6byBZ+IQ==}
-    engines: {node: '>=10'}
-
-  jackspeak@3.4.3:
-    resolution: {integrity: sha512-OGlZQpz2yfahA/Rd1Y8Cd9SIEsqvXkLVoSw/cgwhnhFMDbsQFeZYoJJ7bIZBS9BcamUW96asq/npPWugM+RQBw==}
-
-  jake@10.9.4:
-    resolution: {integrity: sha512-wpHYzhxiVQL+IV05BLE2Xn34zW1S223hvjtqk0+gsPrwd/8JNLXJgZZM/iPFsYc1xyphF+6M6EvdE5E9MBGkDA==}
-    engines: {node: '>=10'}
-    hasBin: true
-
-  jiti@1.21.7:
-    resolution: {integrity: sha512-/imKNG4EbWNrVjoNC/1H5/9GFy+tqjGBHCaSsN+P2RnPqjsLmv6UD3Ej+Kj8nBWaRAwyk7kK5ZUc+OEatnTR3A==}
-    hasBin: true
-
-  jose@6.2.3:
-    resolution: {integrity: sha512-YYVDInQKFJfR/xa3ojUTl8c2KoTwiL1R5Wg9YCydwH0x0B9grbzlg5HC7mMjCtUJjbQ/YnGEZIhI5tCgfTb4Hw==}
-
-  jotai-effect@2.3.1:
-    resolution: {integrity: sha512-FBBVXDM2podbbxJsZ19+uDv45LxeXoVA5yh6CfkQ35AVCuRHj7Lanlcjiea3b67Q7+/MMGXWf8+GeB73JcbeMg==}
-    engines: {node: '>=12.20.0'}
-    peerDependencies:
-      jotai: '>=2.20.0'
-
-  jotai@2.20.1:
-    resolution: {integrity: sha512-dnuKfU/GLi8B28RRMjQ3AfoN7kfzP8o41+AX2FmITZqEMY8PHnjABq+VkEooomLwYaGjda+pgy0yFSjaHX/ZPg==}
-    engines: {node: '>=12.20.0'}
-    peerDependencies:
-      '@babel/core': '>=7.0.0'
-      '@babel/template': '>=7.0.0'
-      '@types/react': '>=17.0.0'
-      react: '>=17.0.0'
-    peerDependenciesMeta:
-      '@babel/core':
-        optional: true
-      '@babel/template':
-        optional: true
-      '@types/react':
-        optional: true
-      react:
-        optional: true
-
-  joycon@3.1.1:
-    resolution: {integrity: sha512-34wB/Y7MW7bzjKRjUKTa46I2Z7eV62Rkhva+KkopW7Qvv/OSWBqvkSY7vusOPrNuZcUG3tApvdVgNB8POj3SPw==}
-    engines: {node: '>=10'}
-
-  js-tokens@4.0.0:
-    resolution: {integrity: sha512-RdJUflcE3cUzKiMqQgsCu06FPu9UdIJO0beYbPhHN4k6apgJtifcoCtT9bcxOpYBtpD2kCM6Sbzg4CausW/PKQ==}
-
-  js-yaml@4.2.0:
-    resolution: {integrity: sha512-ePWsvanv0DWuDRsW8dnt+R4jQ31SCRCQ7hhNcPXZPsoBZiemuZNYGf7adZdqX2D86j6rvKp3RpCxVTSb8WQlOw==}
-    hasBin: true
-
-  jsesc@3.1.0:
-    resolution: {integrity: sha512-/sM3dO2FOzXjKQhJuo0Q173wf2KOo8t4I8vHy6lF9poUp7bKT0/NHE8fPX23PwfhnykfqnC2xRxOnVw5XuGIaA==}
-    engines: {node: '>=6'}
-    hasBin: true
-
-  json-bigint@1.0.0:
-    resolution: {integrity: sha512-SiPv/8VpZuWbvLSMtTDU8hEfrZWg/mH/nV/b4o0CYbSxu1UIQPLdwKOCIyLQX+VIPO5vrLX3i8qtqFyhdPSUSQ==}
-
-  json-schema-to-ts@3.1.1:
-    resolution: {integrity: sha512-+DWg8jCJG2TEnpy7kOm/7/AxaYoaRbjVB4LFZLySZlWn8exGs3A4OLJR966cVvU26N7X9TWxl+Jsw7dzAqKT6g==}
-    engines: {node: '>=16'}
-
-  json-schema-traverse@1.0.0:
-    resolution: {integrity: sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==}
-
-  json-schema-typed@8.0.2:
-    resolution: {integrity: sha512-fQhoXdcvc3V28x7C7BMs4P5+kNlgUURe2jmUT1T//oBRMDrqy1QPelJimwZGo7Hg9VPV3EQV5Bnq4hbFy2vetA==}
-
-  json-schema@0.4.0:
-    resolution: {integrity: sha512-es94M3nTIfsEPisRafak+HDLfHXnKBhV3vU5eqPcS3flIWqcxJWgXHXiey3YrpaNsanY5ei1VoYEbOzijuq9BA==}
-
-  json5@2.2.3:
-    resolution: {integrity: sha512-XmOWe7eyHYH14cLdVPoyg+GOH3rYX++KpzrylJwSW98t3Nk+U8XOl8FWKOgwtzdb8lXGf6zYwDUzeHMWfxasyg==}
-    engines: {node: '>=6'}
-    hasBin: true
-
-  jwa@2.0.1:
-    resolution: {integrity: sha512-hRF04fqJIP8Abbkq5NKGN0Bbr3JxlQ+qhZufXVr0DvujKy93ZCbXZMHDL4EOtodSbCWxOqR8MS1tXA5hwqCXDg==}
-
-  jws@4.0.1:
-    resolution: {integrity: sha512-EKI/M/yqPncGUUh44xz0PxSidXFr/+r0pA70+gIYhjv+et7yxM+s29Y+VGDkovRofQem0fs7Uvf4+YmAdyRduA==}
-
-  katex@0.16.47:
-    resolution: {integrity: sha512-Eeo8Ys1doU1z+x8AZsPpQu+p/QcZBI5PeOo7QGQdy2x2m0MU/hYagBbGOmXwr5KVbEfVuWv9LpnQWeehogurjg==}
-    hasBin: true
-
-  khroma@2.1.0:
-    resolution: {integrity: sha512-Ls993zuzfayK269Svk9hzpeGUKob/sIgZzyHYdjQoAdQetRKpOLj+k/QQQ/6Qi0Yz65mlROrfd+Ev+1+7dz9Kw==}
-
-  kleur@3.0.3:
-    resolution: {integrity: sha512-eTIzlVOSUR+JxdDFepEYcBMtZ9Qqdef+rnzWdRZuMbOywu5tO2w2N7rqjoANZ5k9vywhL6Br1VRjUIgTQx4E8w==}
-    engines: {node: '>=6'}
-
-  koffi@2.16.2:
-    resolution: {integrity: sha512-owU0MRwv6xkrVqCd+33uw6BaYppkTRXbO/rVdJNI2dvZG0gzyRhYwW25eWtc5pauwK8TGh3AbkFONSezdykfSA==}
-
-  layout-base@1.0.2:
-    resolution: {integrity: sha512-8h2oVEZNktL4BH2JCOI90iD1yXwL6iNW7KcCKT2QZgQJR2vbqDsldCTPRU9NifTCqHZci57XvQQ15YTu+sTYPg==}
-
-  layout-base@2.0.1:
-    resolution: {integrity: sha512-dp3s92+uNI1hWIpPGH3jK2kxE2lMjdXdr+DH8ynZHpd6PUlH6x6cbuXnoMmiNumznqaNO31xu9e79F0uuZ0JFg==}
-
-  lazystream@1.0.1:
-    resolution: {integrity: sha512-b94GiNHQNy6JNTrt5w6zNyffMrNkXZb3KTkCZJb2V1xaEGCk093vkZ2jk3tpaeP33/OiXC+WvK9AxUebnf5nbw==}
-    engines: {node: '>= 0.6.3'}
-
-  lighthouse-logger@2.0.2:
-    resolution: {integrity: sha512-vWl2+u5jgOQuZR55Z1WM0XDdrJT6mzMP8zHUct7xTlWhuQs+eV0g+QL0RQdFjT54zVmbhLCP8vIVpy1wGn/gCg==}
-
-  lilconfig@3.1.3:
-    resolution: {integrity: sha512-/vlFKAoH5Cgt3Ie+JLhRbwOsCQePABiU3tJ1egGvyQ+33R/vcwM2Zl2QR/LzjsBeItPt3oSVXapn+m4nQDvpzw==}
-    engines: {node: '>=14'}
-
-  lines-and-columns@1.2.4:
-    resolution: {integrity: sha512-7ylylesZQ/PV29jhEDl3Ufjo6ZX7gCqJr5F7PKrqc93v7fzSymt1BpwEU8nAUXs8qzzvqhbjhK5QZg6Mt/HkBg==}
-
-  linkify-it@5.0.1:
-    resolution: {integrity: sha512-wVoTjP4Q6R0NW5hiZkVJaFZPWgtXfoGF+6LucL3/FtiNjmcHhYjEr5f1Kqjirc1nBW07J/ZuRFumqr2oqccEWg==}
-
-  load-tsconfig@0.2.5:
-    resolution: {integrity: sha512-IXO6OCs9yg8tMKzfPZ1YmheJbZCiEsnBdcB03l0OcfK9prKnJb96siuHCr5Fl37/yo9DnKU+TLpxzTUspw9shg==}
-    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
-
-  locate-path@6.0.0:
-    resolution: {integrity: sha512-iPZK6eYjbxRu3uB4/WZ3EsEIMJFMqAoopl3R+zuq0UjcAm/MO6KCweDgPfP3elTztoKP3KtnVHxTn2NHBSDVUw==}
-    engines: {node: '>=10'}
-
-  lodash-es@4.18.1:
-    resolution: {integrity: sha512-J8xewKD/Gk22OZbhpOVSwcs60zhd95ESDwezOFuA3/099925PdHJ7OFHNTGtajL3AlZkykD32HykiMo+BIBI8A==}
-
-  lodash.camelcase@4.3.0:
-    resolution: {integrity: sha512-TwuEnCnxbc3rAvhf/LbG7tJUDzhqXyFnv3dtzLOPgCG/hODL7WFnsbwktkD7yUV0RrreP/l1PALq/YSg6VvjlA==}
-
-  lodash.debounce@4.0.8:
-    resolution: {integrity: sha512-FT1yDzDYEoYWhnSGnpE/4Kj1fLZkDFyqRb7fNt6FdYOSxlUWAtp42Eh6Wb0rGIv/m9Bgo7x4GhQbm5Ys4SG5ow==}
-
-  lodash@4.18.1:
-    resolution: {integrity: sha512-dMInicTPVE8d1e5otfwmmjlxkZoUpiVLwyeTdUsi/Caj/gfzzblBcCE5sRHV/AsjuCmxWrte2TNGSYuCeCq+0Q==}
-
-  loglevel@1.9.2:
-    resolution: {integrity: sha512-HgMmCqIJSAKqo68l0rS2AanEWfkxaZ5wNiEFb5ggm08lDs9Xl2KxBlX3PTcaD2chBM1gXAYf491/M2Rv8Jwayg==}
-    engines: {node: '>= 0.6.0'}
-
-  long@5.3.2:
-    resolution: {integrity: sha512-mNAgZ1GmyNhD7AuqnTG3/VQ26o760+ZYBPKjPvugO8+nLbYfX6TVpJPseBvopbdY+qpZ/lKUnmEc1LeZYS3QAA==}
-
-  longest-streak@3.1.0:
-    resolution: {integrity: sha512-9Ri+o0JYgehTaVBBDoMqIl8GXtbWg711O3srftcHhZ0dqnETqLaoIK0x17fUw9rFSlK/0NlsKe0Ahhyl5pXE2g==}
-
-  loose-envify@1.4.0:
-    resolution: {integrity: sha512-lyuxPGr/Wfhrlem2CL/UcnUc1zcqKAImBDzukY7Y5F/yQiNdko6+fRLevlw1HgMySw7f611UIY408EtxRSoK3Q==}
-    hasBin: true
-
-  loupe@3.2.1:
-    resolution: {integrity: sha512-CdzqowRJCeLU72bHvWqwRBBlLcMEtIvGrlvef74kMnV2AolS9Y8xUv1I0U/MNAWMhBlKIoyuEgoJ0t/bbwHbLQ==}
-
-  lru-cache@10.4.3:
-    resolution: {integrity: sha512-JNAzZcXrCt42VGLuYz0zfAzDfAvJWW6AfYlDBQyDV5DClI2m5sAmK+OIO7s59XfsRsWHp02jAJrRadPRGTt6SQ==}
-
-  lru-cache@11.5.1:
-    resolution: {integrity: sha512-RPimw/7aMdv2oqRrxKwvZXcPfwBrn/JZ2xYcY9Hus/6LaS3VOAKVWKWgNLCFSiOm1ESXinjsDlidVU7JlnCN2A==}
-    engines: {node: 20 || >=22}
-
-  lru-cache@5.1.1:
-    resolution: {integrity: sha512-KpNARQA3Iwv+jTA0utUVVbrh+Jlrr1Fv0e56GGzAFOXN7dk/FviaDW8LHmK52DlcH4WP2n6gI8vN1aesBFgo9w==}
-
-  lru-cache@7.18.3:
-    resolution: {integrity: sha512-jumlc0BIUrS3qJGgIkWZsyfAM7NCWiBcCDhnd+3NNM5KbBmLTgHVfWBcg6W+rLUsIpzpERPsvwUP7CckAQSOoA==}
-    engines: {node: '>=12'}
-
-  lucide-react@0.439.0:
-    resolution: {integrity: sha512-PafSWvDTpxdtNEndS2HIHxcNAbd54OaqSYJO90/b63rab2HWYqDbH194j0i82ZFdWOAcf0AHinRykXRRK2PJbw==}
-    peerDependencies:
-      react: ^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0-rc
-
-  lucide-react@0.469.0:
-    resolution: {integrity: sha512-28vvUnnKQ/dBwiCQtwJw7QauYnE7yd2Cyp4tTTJpvglX4EMpbflcdBgrgToX2j71B3YvugK/NH3BGUk+E/p/Fw==}
-    peerDependencies:
-      react: ^16.5.1 || ^17.0.0 || ^18.0.0 || ^19.0.0
-
-  lunr@2.3.9:
-    resolution: {integrity: sha512-zTU3DaZaF3Rt9rhN3uBMGQD3dD2/vFQqnvZCDv4dl5iOzq2IZQqTxu90r4E5J+nP70J3ilqVCrbho2eWaeW8Ow==}
-
-  magic-string@0.30.21:
-    resolution: {integrity: sha512-vd2F4YUyEXKGcLHoq+TEyCjxueSeHnFxyyjNp80yg0XV4vUhnDer/lvvlqM/arB5bXQN5K2/3oinyCRyx8T2CQ==}
-
-  magicast@0.5.3:
-    resolution: {integrity: sha512-pVKE4UdSQ7DvHzivsCIFx2BJn1mHG6KsyrFcaxFx6tONdneEuThrDx0Cj3AMg58KyN4pzYT+LHOotxDQDjNvkw==}
-
-  markdown-extensions@2.0.0:
-    resolution: {integrity: sha512-o5vL7aDWatOTX8LzaS1WMoaoxIiLRQJuIKKe2wAw6IeULDHaqbiqiggmx+pKvZDb1Sj+pE46Sn1T7lCqfFtg1Q==}
-    engines: {node: '>=16'}
-
-  markdown-it@14.2.0:
-    resolution: {integrity: sha512-1TGiQiJVRQ3NPmZH6sx5Cfnmg6GQm9jvC1ch4TK511NjSJvjzKLzn5pPfZRNZkRPZP0HqCioSndqH8v2nRaWVQ==}
-    hasBin: true
-
-  markdown-table@3.0.4:
-    resolution: {integrity: sha512-wiYz4+JrLyb/DqW2hkFJxP7Vd7JuTDm77fvbM8VfEQdmSMqcImWeeRbHwZjBjIFki/VaMK2BhFi7oUUZeM5bqw==}
-
-  marked@15.0.12:
-    resolution: {integrity: sha512-8dD6FusOQSrpv9Z1rdNMdlSgQOIP880DHqnohobOmYLElGEqAL/JvxvuxZO16r4HtjTlfPRDC1hbvxC9dPN2nA==}
-    engines: {node: '>= 18'}
-    hasBin: true
-
-  marked@16.4.2:
-    resolution: {integrity: sha512-TI3V8YYWvkVf3KJe1dRkpnjs68JUPyEa5vjKrp1XEEJUAOaQc+Qj+L1qWbPd0SJuAdQkFU0h73sXXqwDYxsiDA==}
-    engines: {node: '>= 20'}
-    hasBin: true
-
-  marky@1.3.0:
-    resolution: {integrity: sha512-ocnPZQLNpvbedwTy9kNrQEsknEfgvcLMvOtz3sFeWApDq1MXH1TqkCIx58xlpESsfwQOnuBO9beyQuNGzVvuhQ==}
-
-  math-intrinsics@1.1.0:
-    resolution: {integrity: sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==}
-    engines: {node: '>= 0.4'}
-
-  md5.js@1.3.5:
-    resolution: {integrity: sha512-xitP+WxNPcTTOgnTJcrhM0xvdPepipPSf3I8EIpGKeFLjt3PlJLIDG3u8EX53ZIubkb+5U2+3rELYpEhHhzdkg==}
-
-  mdast-util-definitions@6.0.0:
-    resolution: {integrity: sha512-scTllyX6pnYNZH/AIp/0ePz6s4cZtARxImwoPJ7kS42n+MnVsI4XbnG6d4ibehRIldYMWM2LD7ImQblVhUejVQ==}
-
-  mdast-util-find-and-replace@3.0.2:
-    resolution: {integrity: sha512-Tmd1Vg/m3Xz43afeNxDIhWRtFZgM2VLyaf4vSTYwudTyeuTneoL3qtWMA5jeLyz/O1vDJmmV4QuScFCA2tBPwg==}
-
-  mdast-util-from-markdown@2.0.3:
-    resolution: {integrity: sha512-W4mAWTvSlKvf8L6J+VN9yLSqQ9AOAAvHuoDAmPkz4dHf553m5gVj2ejadHJhoJmcmxEnOv6Pa8XJhpxE93kb8Q==}
-
-  mdast-util-gfm-autolink-literal@2.0.1:
-    resolution: {integrity: sha512-5HVP2MKaP6L+G6YaxPNjuL0BPrq9orG3TsrZ9YXbA3vDw/ACI4MEsnoDpn6ZNm7GnZgtAcONJyPhOP8tNJQavQ==}
-
-  mdast-util-gfm-footnote@2.1.0:
-    resolution: {integrity: sha512-sqpDWlsHn7Ac9GNZQMeUzPQSMzR6Wv0WKRNvQRg0KqHh02fpTz69Qc1QSseNX29bhz1ROIyNyxExfawVKTm1GQ==}
-
-  mdast-util-gfm-strikethrough@2.0.0:
-    resolution: {integrity: sha512-mKKb915TF+OC5ptj5bJ7WFRPdYtuHv0yTRxK2tJvi+BDqbkiG7h7u/9SI89nRAYcmap2xHQL9D+QG/6wSrTtXg==}
-
-  mdast-util-gfm-table@2.0.0:
-    resolution: {integrity: sha512-78UEvebzz/rJIxLvE7ZtDd/vIQ0RHv+3Mh5DR96p7cS7HsBhYIICDBCu8csTNWNO6tBWfqXPWekRuj2FNOGOZg==}
-
-  mdast-util-gfm-task-list-item@2.0.0:
-    resolution: {integrity: sha512-IrtvNvjxC1o06taBAVJznEnkiHxLFTzgonUdy8hzFVeDun0uTjxxrRGVaNFqkU1wJR3RBPEfsxmU6jDWPofrTQ==}
-
-  mdast-util-gfm@3.1.0:
-    resolution: {integrity: sha512-0ulfdQOM3ysHhCJ1p06l0b0VKlhU0wuQs3thxZQagjcjPrlFRqY215uZGHHJan9GEAXd9MbfPjFJz+qMkVR6zQ==}
-
-  mdast-util-mdx-expression@2.0.1:
-    resolution: {integrity: sha512-J6f+9hUp+ldTZqKRSg7Vw5V6MqjATc+3E4gf3CFNcuZNWD8XdyI6zQ8GqH7f8169MM6P7hMBRDVGnn7oHB9kXQ==}
-
-  mdast-util-mdx-jsx@3.2.0:
-    resolution: {integrity: sha512-lj/z8v0r6ZtsN/cGNNtemmmfoLAFZnjMbNyLzBafjzikOM+glrjNHPlf6lQDOTccj9n5b0PPihEBbhneMyGs1Q==}
-
-  mdast-util-mdx@3.0.0:
-    resolution: {integrity: sha512-JfbYLAW7XnYTTbUsmpu0kdBUVe+yKVJZBItEjwyYJiDJuZ9w4eeaqks4HQO+R7objWgS2ymV60GYpI14Ug554w==}
-
-  mdast-util-mdxjs-esm@2.0.1:
-    resolution: {integrity: sha512-EcmOpxsZ96CvlP03NghtH1EsLtr0n9Tm4lPUJUBccV9RwUOneqSycg19n5HGzCf+10LozMRSObtVr3ee1WoHtg==}
-
-  mdast-util-phrasing@4.1.0:
-    resolution: {integrity: sha512-TqICwyvJJpBwvGAMZjj4J2n0X8QWp21b9l0o7eXyVJ25YNWYbJDVIyD1bZXE6WtV6RmKJVYmQAKWa0zWOABz2w==}
-
-  mdast-util-to-hast@13.2.1:
-    resolution: {integrity: sha512-cctsq2wp5vTsLIcaymblUriiTcZd0CwWtCbLvrOzYCDZoWyMNV8sZ7krj09FSnsiJi3WVsHLM4k6Dq/yaPyCXA==}
-
-  mdast-util-to-markdown@2.1.2:
-    resolution: {integrity: sha512-xj68wMTvGXVOKonmog6LwyJKrYXZPvlwabaryTjLh9LuvovB/KAH+kvi8Gjj+7rJjsFi23nkUxRQv1KqSroMqA==}
-
-  mdast-util-to-string@4.0.0:
-    resolution: {integrity: sha512-0H44vDimn51F0YwvxSJSm0eCDOJTRlmN0R1yBh4HLj9wiV1Dn0QoXGbvFAWj2hSItVTlCmBF1hqKlIyUBVFLPg==}
-
-  mdn-data@2.0.28:
-    resolution: {integrity: sha512-aylIc7Z9y4yzHYAJNuESG3hfhC+0Ibp/MAMiaOZgNv4pmEdFyfZhhhny4MNiAfWdBQ1RQ2mfDWmM1x8SvGyp8g==}
-
-  mdn-data@2.27.1:
-    resolution: {integrity: sha512-9Yubnt3e8A0OKwxYSXyhLymGW4sCufcLG6VdiDdUGVkPhpqLxlvP5vl1983gQjJl3tqbrM731mjaZaP68AgosQ==}
-
-  mdurl@2.0.0:
-    resolution: {integrity: sha512-Lf+9+2r+Tdp5wXDXC4PcIBjTDtq4UKjCPMQhKIuzpJNW0b96kVqSwW0bT7FhRSfmAiFYgP+SCRvdrDozfh0U5w==}
-
-  mdx-annotations@0.1.4:
-    resolution: {integrity: sha512-SUYBUXP1qbgr0nRFFnUBg4HxxTbYyl5rE38fLTaIm0naPK+EhmKa0wRlUdgTMlMBj5gdCMwP1n7+L47JIHHWUQ==}
-
-  media-typer@1.1.0:
-    resolution: {integrity: sha512-aisnrDP4GNe06UcKFnV5bfMNPBUw4jsLGaWwWfnH3v02GnBuXX2MCVn5RbrWo0j3pczUilYblq7fQ7Nw2t5XKw==}
-    engines: {node: '>= 0.8'}
-
-  merge-descriptors@2.0.0:
-    resolution: {integrity: sha512-Snk314V5ayFLhp3fkUREub6WtjBfPdCPY1Ln8/8munuLuiYhsABgBVWsozAG+MWMbVEvcdcpbi9R7ww22l9Q3g==}
-    engines: {node: '>=18'}
-
-  merge-stream@2.0.0:
-    resolution: {integrity: sha512-abv/qOcuPfk3URPfDzmZU1LKmuw8kT+0nIHvKrKgFrwifol/doWcdA4ZqsWQ8ENrFKkd67Mfpo/LovbIUsbt3w==}
-
-  merge2@1.4.1:
-    resolution: {integrity: sha512-8q7VEgMJW4J8tcfVPy8g09NcQwZdbwFEqhe/WZkoIzjn/3TGDwtOCYtXGxA3O8tPzpczCCDgv+P2P5y00ZJOOg==}
-    engines: {node: '>= 8'}
-
-  mermaid-isomorphic@3.1.0:
-    resolution: {integrity: sha512-mzrvfEVjnJIkJlEqxp3eMuR1wS0TeLCH1VK5E/T5yzWaBwI3JqjJuw70yUIThSCDJ5bRs6O3rgfp00oBAbvSeQ==}
-    peerDependencies:
-      playwright: '1'
-    peerDependenciesMeta:
-      playwright:
-        optional: true
-
-  mermaid@11.16.0:
-    resolution: {integrity: sha512-Zvm3kbstgdpvIJPPItlL7fppIZ3kibvc1oZIGxdvk9t6UFz6flv+Jw7FtRGKwfcI8OckmH04LqG6LlS6X4B1pA==}
-
-  micromark-core-commonmark@2.0.3:
-    resolution: {integrity: sha512-RDBrHEMSxVFLg6xvnXmb1Ayr2WzLAWjeSATAoxwKYJV94TeNavgoIdA0a9ytzDSVzBy2YKFK+emCPOEibLeCrg==}
-
-  micromark-extension-gfm-autolink-literal@2.1.0:
-    resolution: {integrity: sha512-oOg7knzhicgQ3t4QCjCWgTmfNhvQbDDnJeVu9v81r7NltNCVmhPy1fJRX27pISafdjL+SVc4d3l48Gb6pbRypw==}
-
-  micromark-extension-gfm-footnote@2.1.0:
-    resolution: {integrity: sha512-/yPhxI1ntnDNsiHtzLKYnE3vf9JZ6cAisqVDauhp4CEHxlb4uoOTxOCJ+9s51bIB8U1N1FJ1RXOKTIlD5B/gqw==}
-
-  micromark-extension-gfm-strikethrough@2.1.0:
-    resolution: {integrity: sha512-ADVjpOOkjz1hhkZLlBiYA9cR2Anf8F4HqZUO6e5eDcPQd0Txw5fxLzzxnEkSkfnD0wziSGiv7sYhk/ktvbf1uw==}
-
-  micromark-extension-gfm-table@2.1.1:
-    resolution: {integrity: sha512-t2OU/dXXioARrC6yWfJ4hqB7rct14e8f7m0cbI5hUmDyyIlwv5vEtooptH8INkbLzOatzKuVbQmAYcbWoyz6Dg==}
-
-  micromark-extension-gfm-tagfilter@2.0.0:
-    resolution: {integrity: sha512-xHlTOmuCSotIA8TW1mDIM6X2O1SiX5P9IuDtqGonFhEK0qgRI4yeC6vMxEV2dgyr2TiD+2PQ10o+cOhdVAcwfg==}
-
-  micromark-extension-gfm-task-list-item@2.1.0:
-    resolution: {integrity: sha512-qIBZhqxqI6fjLDYFTBIa4eivDMnP+OZqsNwmQ3xNLE4Cxwc+zfQEfbs6tzAo2Hjq+bh6q5F+Z8/cksrLFYWQQw==}
-
-  micromark-extension-gfm@3.0.0:
-    resolution: {integrity: sha512-vsKArQsicm7t0z2GugkCKtZehqUm31oeGBV/KVSorWSy8ZlNAv7ytjFhvaryUiCUJYqs+NoE6AFhpQvBTM6Q4w==}
-
-  micromark-extension-mdx-expression@3.0.1:
-    resolution: {integrity: sha512-dD/ADLJ1AeMvSAKBwO22zG22N4ybhe7kFIZ3LsDI0GlsNr2A3KYxb0LdC1u5rj4Nw+CHKY0RVdnHX8vj8ejm4Q==}
-
-  micromark-extension-mdx-jsx@3.0.2:
-    resolution: {integrity: sha512-e5+q1DjMh62LZAJOnDraSSbDMvGJ8x3cbjygy2qFEi7HCeUT4BDKCvMozPozcD6WmOt6sVvYDNBKhFSz3kjOVQ==}
-
-  micromark-extension-mdx-md@2.0.0:
-    resolution: {integrity: sha512-EpAiszsB3blw4Rpba7xTOUptcFeBFi+6PY8VnJ2hhimH+vCQDirWgsMpz7w1XcZE7LVrSAUGb9VJpG9ghlYvYQ==}
-
-  micromark-extension-mdxjs-esm@3.0.0:
-    resolution: {integrity: sha512-DJFl4ZqkErRpq/dAPyeWp15tGrcrrJho1hKK5uBS70BCtfrIFg81sqcTVu3Ta+KD1Tk5vAtBNElWxtAa+m8K9A==}
-
-  micromark-extension-mdxjs@3.0.0:
-    resolution: {integrity: sha512-A873fJfhnJ2siZyUrJ31l34Uqwy4xIFmvPY1oj+Ean5PHcPBYzEsvqvWGaWcfEIr11O5Dlw3p2y0tZWpKHDejQ==}
-
-  micromark-factory-destination@2.0.1:
-    resolution: {integrity: sha512-Xe6rDdJlkmbFRExpTOmRj9N3MaWmbAgdpSrBQvCFqhezUn4AHqJHbaEnfbVYYiexVSs//tqOdY/DxhjdCiJnIA==}
-
-  micromark-factory-label@2.0.1:
-    resolution: {integrity: sha512-VFMekyQExqIW7xIChcXn4ok29YE3rnuyveW3wZQWWqF4Nv9Wk5rgJ99KzPvHjkmPXF93FXIbBp6YdW3t71/7Vg==}
-
-  micromark-factory-mdx-expression@2.0.3:
-    resolution: {integrity: sha512-kQnEtA3vzucU2BkrIa8/VaSAsP+EJ3CKOvhMuJgOEGg9KDC6OAY6nSnNDVRiVNRqj7Y4SlSzcStaH/5jge8JdQ==}
-
-  micromark-factory-space@2.0.1:
-    resolution: {integrity: sha512-zRkxjtBxxLd2Sc0d+fbnEunsTj46SWXgXciZmHq0kDYGnck/ZSGj9/wULTV95uoeYiK5hRXP2mJ98Uo4cq/LQg==}
-
-  micromark-factory-title@2.0.1:
-    resolution: {integrity: sha512-5bZ+3CjhAd9eChYTHsjy6TGxpOFSKgKKJPJxr293jTbfry2KDoWkhBb6TcPVB4NmzaPhMs1Frm9AZH7OD4Cjzw==}
-
-  micromark-factory-whitespace@2.0.1:
-    resolution: {integrity: sha512-Ob0nuZ3PKt/n0hORHyvoD9uZhr+Za8sFoP+OnMcnWK5lngSzALgQYKMr9RJVOWLqQYuyn6ulqGWSXdwf6F80lQ==}
-
-  micromark-util-character@2.1.1:
-    resolution: {integrity: sha512-wv8tdUTJ3thSFFFJKtpYKOYiGP2+v96Hvk4Tu8KpCAsTMs6yi+nVmGh1syvSCsaxz45J6Jbw+9DD6g97+NV67Q==}
-
-  micromark-util-chunked@2.0.1:
-    resolution: {integrity: sha512-QUNFEOPELfmvv+4xiNg2sRYeS/P84pTW0TCgP5zc9FpXetHY0ab7SxKyAQCNCc1eK0459uoLI1y5oO5Vc1dbhA==}
-
-  micromark-util-classify-character@2.0.1:
-    resolution: {integrity: sha512-K0kHzM6afW/MbeWYWLjoHQv1sgg2Q9EccHEDzSkxiP/EaagNzCm7T/WMKZ3rjMbvIpvBiZgwR3dKMygtA4mG1Q==}
-
-  micromark-util-combine-extensions@2.0.1:
-    resolution: {integrity: sha512-OnAnH8Ujmy59JcyZw8JSbK9cGpdVY44NKgSM7E9Eh7DiLS2E9RNQf0dONaGDzEG9yjEl5hcqeIsj4hfRkLH/Bg==}
-
-  micromark-util-decode-numeric-character-reference@2.0.2:
-    resolution: {integrity: sha512-ccUbYk6CwVdkmCQMyr64dXz42EfHGkPQlBj5p7YVGzq8I7CtjXZJrubAYezf7Rp+bjPseiROqe7G6foFd+lEuw==}
-
-  micromark-util-decode-string@2.0.1:
-    resolution: {integrity: sha512-nDV/77Fj6eH1ynwscYTOsbK7rR//Uj0bZXBwJZRfaLEJ1iGBR6kIfNmlNqaqJf649EP0F3NWNdeJi03elllNUQ==}
-
-  micromark-util-encode@2.0.1:
-    resolution: {integrity: sha512-c3cVx2y4KqUnwopcO9b/SCdo2O67LwJJ/UyqGfbigahfegL9myoEFoDYZgkT7f36T0bLrM9hZTAaAyH+PCAXjw==}
-
-  micromark-util-events-to-acorn@2.0.3:
-    resolution: {integrity: sha512-jmsiEIiZ1n7X1Rr5k8wVExBQCg5jy4UXVADItHmNk1zkwEVhBuIUKRu3fqv+hs4nxLISi2DQGlqIOGiFxgbfHg==}
-
-  micromark-util-html-tag-name@2.0.1:
-    resolution: {integrity: sha512-2cNEiYDhCWKI+Gs9T0Tiysk136SnR13hhO8yW6BGNyhOC4qYFnwF1nKfD3HFAIXA5c45RrIG1ub11GiXeYd1xA==}
-
-  micromark-util-normalize-identifier@2.0.1:
-    resolution: {integrity: sha512-sxPqmo70LyARJs0w2UclACPUUEqltCkJ6PhKdMIDuJ3gSf/Q+/GIe3WKl0Ijb/GyH9lOpUkRAO2wp0GVkLvS9Q==}
-
-  micromark-util-resolve-all@2.0.1:
-    resolution: {integrity: sha512-VdQyxFWFT2/FGJgwQnJYbe1jjQoNTS4RjglmSjTUlpUMa95Htx9NHeYW4rGDJzbjvCsl9eLjMQwGeElsqmzcHg==}
-
-  micromark-util-sanitize-uri@2.0.1:
-    resolution: {integrity: sha512-9N9IomZ/YuGGZZmQec1MbgxtlgougxTodVwDzzEouPKo3qFWvymFHWcnDi2vzV1ff6kas9ucW+o3yzJK9YB1AQ==}
-
-  micromark-util-subtokenize@2.1.0:
-    resolution: {integrity: sha512-XQLu552iSctvnEcgXw6+Sx75GflAPNED1qx7eBJ+wydBb2KCbRZe+NwvIEEMM83uml1+2WSXpBAcp9IUCgCYWA==}
-
-  micromark-util-symbol@2.0.1:
-    resolution: {integrity: sha512-vs5t8Apaud9N28kgCrRUdEed4UJ+wWNvicHLPxCa9ENlYuAY31M0ETy5y1vA33YoNPDFTghEbnh6efaE8h4x0Q==}
-
-  micromark-util-types@2.0.2:
-    resolution: {integrity: sha512-Yw0ECSpJoViF1qTU4DC6NwtC4aWGt1EkzaQB8KPPyCRR8z9TWeV0HbEFGTO+ZY1wB22zmxnJqhPyTpOVCpeHTA==}
-
-  micromark@4.0.2:
-    resolution: {integrity: sha512-zpe98Q6kvavpCr1NPVSCMebCKfD7CA2NqZ+rykeNhONIJBpc1tFKt9hucLGwha3jNTNI8lHpctWJWoimVF4PfA==}
-
-  micromatch@4.0.8:
-    resolution: {integrity: sha512-PXwfBhYu0hBCPw8Dn0E+WDYb7af3dSLVWKi3HGv84IdF4TyFoC0ysxFd0Goxw7nSv4T/PzEJQxsYsEiFCKo2BA==}
-    engines: {node: '>=8.6'}
-
-  miller-rabin@4.0.1:
-    resolution: {integrity: sha512-115fLhvZVqWwHPbClyntxEVfVDfl9DLLTuJvq3g2O/Oxi8AiNouAHvDSzHS0viUJc+V5vm3eq91Xwqn9dp4jRA==}
-    hasBin: true
-
-  mime-db@1.52.0:
-    resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==}
-    engines: {node: '>= 0.6'}
-
-  mime-db@1.54.0:
-    resolution: {integrity: sha512-aU5EJuIN2WDemCcAp2vFBfp/m4EAhWJnUNSSw0ixs7/kXbd6Pg64EmwJkNdFhB8aWt1sH2CTXrLxo/iAGV3oPQ==}
-    engines: {node: '>= 0.6'}
-
-  mime-types@2.1.35:
-    resolution: {integrity: sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==}
-    engines: {node: '>= 0.6'}
-
-  mime-types@3.0.2:
-    resolution: {integrity: sha512-Lbgzdk0h4juoQ9fCKXW4by0UJqj+nOOrI9MJ1sSj4nI8aI2eo1qmvQEie4VD1glsS250n15LsWsYtCugiStS5A==}
-    engines: {node: '>=18'}
-
-  mimic-fn@4.0.0:
-    resolution: {integrity: sha512-vqiC06CuhBTUdZH+RYl8sFrL096vA45Ok5ISO6sE/Mr1jRbGH4Csnhi8f3wKVl7x8mO4Au7Ir9D3Oyv1VYMFJw==}
-    engines: {node: '>=12'}
-
-  mini-svg-data-uri@1.4.4:
-    resolution: {integrity: sha512-r9deDe9p5FJUPZAk3A59wGH7Ii9YrjjWw0jmw/liSbHl2CHiyXj6FcDXDu2K3TjVAXqiJdaw3xxwlZZr9E6nHg==}
-    hasBin: true
-
-  minimalistic-assert@1.0.1:
-    resolution: {integrity: sha512-UtJcAD4yEaGtjPezWuO9wC4nwUnVH/8/Im3yEHQP4b67cXlD/Qr9hdITCU1xDbSEXg2XKNaP8jsReV7vQd00/A==}
-
-  minimalistic-crypto-utils@1.0.1:
-    resolution: {integrity: sha512-JIYlbt6g8i5jKfJ3xz7rF0LXmv2TkDxBLUkiBeZ7bAx4GnnNMr8xFpGnOxn6GhTEHx3SjRrZEoU+j04prX1ktg==}
-
-  minimatch@10.2.5:
-    resolution: {integrity: sha512-MULkVLfKGYDFYejP07QOurDLLQpcjk7Fw+7jXS2R2czRQzR56yHRveU5NDJEOviH+hETZKSkIk5c+T23GjFUMg==}
-    engines: {node: 18 || 20 || >=22}
-
-  minimatch@5.1.9:
-    resolution: {integrity: sha512-7o1wEA2RyMP7Iu7GNba9vc0RWWGACJOCZBJX2GJWip0ikV+wcOsgVuY9uE8CPiyQhkGFSlhuSkZPavN7u1c2Fw==}
-    engines: {node: '>=10'}
-
-  minimatch@9.0.9:
-    resolution: {integrity: sha512-OBwBN9AL4dqmETlpS2zasx+vTeWclWzkblfZk7KTA5j3jeOONz/tRCnZomUyvNg83wL5Zv9Ss6HMJXAgL8R2Yg==}
-    engines: {node: '>=16 || 14 >=14.17'}
-
-  minimist@1.2.8:
-    resolution: {integrity: sha512-2yyAR8qBkN3YuheJanUpWC5U3bb5osDywNB8RzDVlDwDHbocAJveqqj1u8+SVD7jkWT4yvsHCpWqqWqAxb0zCA==}
-
-  minipass@7.1.3:
-    resolution: {integrity: sha512-tEBHqDnIoM/1rXME1zgka9g6Q2lcoCkxHLuc7ODJ5BxbP5d4c2Z5cGgtXAku59200Cx7diuHTOYfSBD8n6mm8A==}
-    engines: {node: '>=16 || 14 >=14.17'}
-
-  mkdirp-classic@0.5.3:
-    resolution: {integrity: sha512-gKLcREMhtuZRwRAfqP3RFW+TK4JqApVBtOIftVgjuABpAtpxhPGaDcfvbhNvD0B8iD1oUr/txX35NjcaY6Ns/A==}
-
-  mlly@1.8.2:
-    resolution: {integrity: sha512-d+ObxMQFmbt10sretNDytwt85VrbkhhUA/JBGm1MPaWJ65Cl4wOgLaB1NYvJSZ0Ef03MMEU/0xpPMXUIQ29UfA==}
-
-  motion-dom@11.18.1:
-    resolution: {integrity: sha512-g76KvA001z+atjfxczdRtw/RXOM3OMSdd1f4DL77qCTF/+avrRJiawSG4yDibEQ215sr9kpinSlX2pCTJ9zbhw==}
-
-  motion-dom@12.40.0:
-    resolution: {integrity: sha512-HxU3ZaBwNPVQUBQf1xxgq+7JrPNZvjLVxgbpEZL7RrWJnsxOf0/OM+yrHG9ogLQ31Do/r57Oz2gQWPK+6q62mg==}
-
-  motion-utils@11.18.1:
-    resolution: {integrity: sha512-49Kt+HKjtbJKLtgO/LKj9Ld+6vw9BjH5d9sc40R/kVyH8GLAXgT42M2NnuPcJNuA3s9ZfZBUcwIgpmZWGEE+hA==}
-
-  motion-utils@12.39.0:
-    resolution: {integrity: sha512-8nadJAJjTtqRkmRF36FoJTrywK9nnFmnPwnSMyxaOCU7GDjN9RTMJIxx9De8ErM+vpPhMccr/6fo5WciyQLnMQ==}
-
-  mrmime@2.0.1:
-    resolution: {integrity: sha512-Y3wQdFg2Va6etvQ5I82yUhGdsKrcYox6p7FfL1LbK2J4V01F9TGlepTIhnK24t7koZibmg82KGglhA1XK5IsLQ==}
-    engines: {node: '>=10'}
-
-  ms@2.1.3:
-    resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
-
-  mz@2.7.0:
-    resolution: {integrity: sha512-z81GNO7nnYMEhrGh9LeymoE4+Yr0Wn5McHIZMK5cfQCl+NDX08sCZgUc9/6MHni9IWuFLm1Z3HTCXu2z9fN62Q==}
-
-  nan@2.26.2:
-    resolution: {integrity: sha512-0tTvBTYkt3tdGw22nrAy50x7gpbGCCFH3AFcyS5WiUu7Eu4vWlri1woE6qHBSfy11vksDqkiwjOnlR7WV8G1Hw==}
-
-  nanoid@3.3.11:
-    resolution: {integrity: sha512-N8SpfPUnUp1bK+PMYW8qSWdl9U+wwNWI4QKxOYDy9JAro3WMX7p2OeVRF9v+347pnakNevPmiHhNmZ2HbFA76w==}
-    engines: {node: ^10 || ^12 || ^13.7 || ^14 || >=15.0.1}
-    hasBin: true
-
-  negotiator@1.0.0:
-    resolution: {integrity: sha512-8Ofs/AUQh8MaEcrlq5xOX0CQ9ypTF5dl78mjlMNfOK08fzpgTHQRQPBxcPlEtIw0yRpws+Zo/3r+5WRby7u3Gg==}
-    engines: {node: '>= 0.6'}
-
-  neotraverse@0.6.18:
-    resolution: {integrity: sha512-Z4SmBUweYa09+o6pG+eASabEpP6QkQ70yHj351pQoEXIs8uHbaU2DWVmzBANKgflPa47A50PtB2+NgRpQvr7vA==}
-    engines: {node: '>= 10'}
-
-  netmask@2.1.1:
-    resolution: {integrity: sha512-eonl3sLUha+S1GzTPxychyhnUzKyeQkZ7jLjKrBagJgPla13F+uQ71HgpFefyHgqrjEbCPkDArxYsjY8/+gLKA==}
-    engines: {node: '>= 0.4.0'}
-
-  nlcst-to-string@4.0.0:
-    resolution: {integrity: sha512-YKLBCcUYKAg0FNlOBT6aI91qFmSiFKiluk655WzPF+DDMA02qIyy8uiRqI8QXtcFpEvll12LpL5MXqEmAZ+dcA==}
-
-  node-domexception@1.0.0:
-    resolution: {integrity: sha512-/jKZoMpw0F8GRwl4/eLROPA3cfcXtLApP0QzLmUT/HuPCZWyB7IY9ZrMeKw2O/nFIqPQB3PVM9aYm0F312AXDQ==}
-    engines: {node: '>=10.5.0'}
-    deprecated: Use your platform's native DOMException instead
-
-  node-fetch-native@1.6.7:
-    resolution: {integrity: sha512-g9yhqoedzIUm0nTnTqAQvueMPVOuIY16bqgAJJC8XOOubYFNwz6IER9qs0Gq2Xd0+CecCKFjtdDTMA4u4xG06Q==}
-
-  node-fetch@2.7.0:
-    resolution: {integrity: sha512-c4FRfUm/dbcWZ7U+1Wq0AwCyFL+3nt2bEw05wfxSz+DWpWsitgmSgYmy2dQdWyKC1694ELPqMs/YzUSNozLt8A==}
-    engines: {node: 4.x || >=6.0.0}
-    peerDependencies:
-      encoding: ^0.1.0
-    peerDependenciesMeta:
-      encoding:
-        optional: true
-
-  node-fetch@3.3.2:
-    resolution: {integrity: sha512-dRB78srN/l6gqWulah9SrxeYnxeddIG30+GOqK/9OlLVyLg3HPnr6SqOWTWOXKRwC2eGYCkZ59NNuSgvSrpgOA==}
-    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
-
-  node-gyp-build@4.8.4:
-    resolution: {integrity: sha512-LA4ZjwlnUblHVgq0oBF3Jl/6h/Nvs5fzBLwdEF4nuxnFdsfajde4WfxtJr3CaiH+F6ewcIB/q4jQ4UzPyid+CQ==}
-    hasBin: true
-
-  node-html-markdown@1.3.0:
-    resolution: {integrity: sha512-OeFi3QwC/cPjvVKZ114tzzu+YoR+v9UXW5RwSXGUqGb0qCl0DvP406tzdL7SFn8pZrMyzXoisfG2zcuF9+zw4g==}
-    engines: {node: '>=10.0.0'}
-
-  node-html-parser@6.1.13:
-    resolution: {integrity: sha512-qIsTMOY4C/dAa5Q5vsobRpOOvPfC4pB61UVW2uSwZNUp0QU/jCekTal1vMmbO0DgdHeLUJpv/ARmDqErVxA3Sg==}
-
-  node-mock-http@1.0.4:
-    resolution: {integrity: sha512-8DY+kFsDkNXy1sJglUfuODx1/opAGJGyrTuFqEoN90oRc2Vk0ZbD4K2qmKXBBEhZQzdKHIVfEJpDU8Ak2NJEvQ==}
-
-  node-releases@2.0.47:
-    resolution: {integrity: sha512-Uzmd6LXpouKo8EUK68IjH4+E01w/hXyV3R3g/geCJo+rXLNfh1xucB+LOzYEOQPSiUK3h/xZf0cQGcSsmyL2Og==}
-    engines: {node: '>=18'}
-
-  node-stdlib-browser@1.3.1:
-    resolution: {integrity: sha512-X75ZN8DCLftGM5iKwoYLA3rjnrAEs97MkzvSd4q2746Tgpg8b8XWiBGiBG4ZpgcAqBgtgPHTiAc8ZMCvZuikDw==}
-    engines: {node: '>=10'}
-
-  normalize-path@3.0.0:
-    resolution: {integrity: sha512-6eZs5Ls3WtCisHWp9S2GUy8dqkpGi4BVSz3GaqiE6ezub0512ESztXUwUB6C6IKbQkY2Pnb/mD4WYojCRwcwLA==}
-    engines: {node: '>=0.10.0'}
-
-  npm-run-path@5.3.0:
-    resolution: {integrity: sha512-ppwTtiJZq0O/ai0z7yfudtBpWIoxM8yE6nHi1X47eFR2EWORqfbu6CnPlNsjeN683eT0qG6H/Pyf9fCcvjnnnQ==}
-    engines: {node: ^12.20.0 || ^14.13.1 || >=16.0.0}
-
-  nth-check@2.1.1:
-    resolution: {integrity: sha512-lqjrjmaOoAnWfMmBPL+XNnynZh2+swxiX3WUE0s4yEHI6m+AwrK2UZOimIRl3X/4QctVqS8AiZjFqyOGrMXb/w==}
-
-  object-assign@4.1.1:
-    resolution: {integrity: sha512-rJgTQnkUnH1sFw8yT6VSU3zD3sWmu6sZhIseY8VX+GRu3P6F7Fu+JNDoXfklElbLJSnc3FUQHVe4cU5hj+BcUg==}
-    engines: {node: '>=0.10.0'}
-
-  object-hash@3.0.0:
-    resolution: {integrity: sha512-RSn9F68PjH9HqtltsSnqYC1XXoWe9Bju5+213R98cNGttag9q9yAOTzdbsqvIa7aNm5WffBZFpWYr2aWrklWAw==}
-    engines: {node: '>= 6'}
-
-  object-inspect@1.13.4:
-    resolution: {integrity: sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==}
-    engines: {node: '>= 0.4'}
-
-  object-is@1.1.6:
-    resolution: {integrity: sha512-F8cZ+KfGlSGi09lJT7/Nd6KJZ9ygtvYC0/UYYLI9nmQKLMnydpB9yvbv9K1uSkEu7FU9vYPmVwLg328tX+ot3Q==}
-    engines: {node: '>= 0.4'}
-
-  object-keys@1.1.1:
-    resolution: {integrity: sha512-NuAESUOUMrlIXOfHKzD6bpPu3tYt3xvjNdRIQ+FeT0lNb4K8WR70CaDxhuNguS2XG+GjkyMwOzsN5ZktImfhLA==}
-    engines: {node: '>= 0.4'}
-
-  object.assign@4.1.7:
-    resolution: {integrity: sha512-nK28WOo+QIjBkDduTINE4JkF/UJJKyf2EJxvJKfblDpyg0Q+pkOHNTL0Qwy6NP6FhE/EnzV73BxxqcJaXY9anw==}
-    engines: {node: '>= 0.4'}
-
-  ofetch@1.5.1:
-    resolution: {integrity: sha512-2W4oUZlVaqAPAil6FUg/difl6YhqhUR7x2eZY4bQCko22UXg3hptq9KLQdqFClV+Wu85UX7hNtdGTngi/1BxcA==}
-
-  ohash@2.0.11:
-    resolution: {integrity: sha512-RdR9FQrFwNBNXAr4GixM8YaRZRJ5PUWbKYbE5eOsrwAjJW0q2REGcf79oYPsLyskQCZG1PLN+S/K1V00joZAoQ==}
-
-  ollama-ai-provider-v2@1.5.5:
-    resolution: {integrity: sha512-1YwTFdPjhPNHny/DrOHO+s8oVGGIE5Jib61/KnnjPRNWQhVVimrJJdaAX3e6nNRRDXrY5zbb9cfm2+yVvgsrqw==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      zod: ^4.0.16
-
-  on-exit-leak-free@2.1.2:
-    resolution: {integrity: sha512-0eJJY6hXLGf1udHwfNftBqH+g73EU4B504nZeKpz1sYRKafAghwxEJunB2O7rDZkL4PGfsMVnTXZ2EjibbqcsA==}
-    engines: {node: '>=14.0.0'}
-
-  on-finished@2.4.1:
-    resolution: {integrity: sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==}
-    engines: {node: '>= 0.8'}
-
-  once@1.4.0:
-    resolution: {integrity: sha512-lNaJgI+2Q5URQBkccEKHTQOPaXdUxnZZElQTZY0MFUAuaEqe1E+Nyvgdz/aIyNi6Z9MzO5dv1H8n58/GELp3+w==}
-
-  onetime@6.0.0:
-    resolution: {integrity: sha512-1FlR+gjXK7X+AsAHso35MnyN5KqGwJRi/31ft6x0M194ht7S+rWAvd7PHss9xSKMzE0asv1pyIHaJYq+BbacAQ==}
-    engines: {node: '>=12'}
-
-  oniguruma-parser@0.12.2:
-    resolution: {integrity: sha512-6HVa5oIrgMC6aA6WF6XyyqbhRPJrKR02L20+2+zpDtO5QAzGHAUGw5TKQvwi5vctNnRHkJYmjAhRVQF2EKdTQw==}
-
-  oniguruma-to-es@4.3.6:
-    resolution: {integrity: sha512-csuQ9x3Yr0cEIs/Zgx/OEt9iBw9vqIunAPQkx19R/fiMq2oGVTgcMqO/V3Ybqefr1TBvosI6jU539ksaBULJyA==}
-
-  openai@4.104.0:
-    resolution: {integrity: sha512-p99EFNsA/yX6UhVO93f5kJsDRLAg+CTA2RBqdHK4RtK8u5IJw32Hyb2dTGKbnnFmnuoBv5r7Z2CURI9sGZpSuA==}
-    hasBin: true
-    peerDependencies:
-      ws: ^8.18.0
-      zod: ^3.23.8
-    peerDependenciesMeta:
-      ws:
-        optional: true
-      zod:
-        optional: true
-
-  openai@6.26.0:
-    resolution: {integrity: sha512-zd23dbWTjiJ6sSAX6s0HrCZi41JwTA1bQVs0wLQPZ2/5o2gxOJA5wh7yOAUgwYybfhDXyhwlpeQf7Mlgx8EOCA==}
-    hasBin: true
-    peerDependencies:
-      ws: ^8.18.0
-      zod: ^3.25 || ^4.0
-    peerDependenciesMeta:
-      ws:
-        optional: true
-      zod:
-        optional: true
-
-  os-browserify@0.3.0:
-    resolution: {integrity: sha512-gjcpUc3clBf9+210TRaDWbf+rZZZEshZ+DlXMRCeAjp0xhTrnQsKHypIy1J3d5hKdUzj69t708EHtU8P6bUn0A==}
-
-  p-limit@3.1.0:
-    resolution: {integrity: sha512-TYOanM3wGwNGsZN2cVTYPArw454xnXj5qmWF1bEoAc4+cU/ol7GVh7odevjp1FNHduHc3KZMcFduxU5Xc6uJRQ==}
-    engines: {node: '>=10'}
-
-  p-limit@6.2.0:
-    resolution: {integrity: sha512-kuUqqHNUqoIWp/c467RI4X6mmyuojY5jGutNU0wVTmEOOfcuwLqyMVoAi9MKi2Ak+5i9+nhmrK4ufZE8069kHA==}
-    engines: {node: '>=18'}
-
-  p-locate@5.0.0:
-    resolution: {integrity: sha512-LaNjtRWUBY++zB5nE/NwcaoMylSPk+S+ZHNB1TzdbMJMny6dynpAGt7X/tl/QYq3TIeE6nxHppbo2LGymrG5Pw==}
-    engines: {node: '>=10'}
-
-  p-queue@8.1.1:
-    resolution: {integrity: sha512-aNZ+VfjobsWryoiPnEApGGmf5WmNsCo9xu8dfaYamG5qaLP7ClhLN6NgsFe6SwJ2UbLEBK5dv9x8Mn5+RVhMWQ==}
-    engines: {node: '>=18'}
-
-  p-retry@4.6.2:
-    resolution: {integrity: sha512-312Id396EbJdvRONlngUx0NydfrIQ5lsYu0znKVUzVvArzEIt08V1qhtyESbGVd1FGX7UKtiFp5uwKZdM8wIuQ==}
-    engines: {node: '>=8'}
-
-  p-timeout@6.1.4:
-    resolution: {integrity: sha512-MyIV3ZA/PmyBN/ud8vV9XzwTrNtR4jFrObymZYnZqMmW0zA8Z17vnT0rBgFE/TlohB+YCHqXMgZzb3Csp49vqg==}
-    engines: {node: '>=14.16'}
-
-  pac-proxy-agent@7.2.0:
-    resolution: {integrity: sha512-TEB8ESquiLMc0lV8vcd5Ql/JAKAoyzHFXaStwjkzpOpC5Yv+pIzLfHvjTSdf3vpa2bMiUQrg9i6276yn8666aA==}
-    engines: {node: '>= 14'}
-
-  pac-resolver@7.0.1:
-    resolution: {integrity: sha512-5NPgf87AT2STgwa2ntRMr45jTKrYBGkVU36yT0ig/n/GMAa3oPqhZfIQ2kMEimReg0+t9kZViDVZ83qfVUlckg==}
-    engines: {node: '>= 14'}
-
-  package-json-from-dist@1.0.1:
-    resolution: {integrity: sha512-UEZIS3/by4OC8vL3P2dTXRETpebLI2NiI5vIrjaD/5UtrkFX/tNbwjTSRAGC/+7CAo2pIcBaRgWmcBBHcsaCIw==}
-
-  package-manager-detector@1.6.0:
-    resolution: {integrity: sha512-61A5ThoTiDG/C8s8UMZwSorAGwMJ0ERVGj2OjoW5pAalsNOg15+iQiPzrLJ4jhZ1HJzmC2PIHT2oEiH3R5fzNA==}
-
-  pako@1.0.11:
-    resolution: {integrity: sha512-4hLB8Py4zZce5s4yd9XzopqwVv/yGNhV1Bl8NTmCq1763HeK2+EwVTv+leGeL13Dnh2wfbqowVPXCIO0z4taYw==}
-
-  parse-asn1@5.1.9:
-    resolution: {integrity: sha512-fIYNuZ/HastSb80baGOuPRo1O9cf4baWw5WsAp7dBuUzeTD/BoaG8sVTdlPFksBE2lF21dN+A1AnrpIjSWqHHg==}
-    engines: {node: '>= 0.10'}
-
-  parse-entities@4.0.2:
-    resolution: {integrity: sha512-GG2AQYWoLgL877gQIKeRPGO1xF9+eG1ujIb5soS5gPvLQ1y2o8FL90w2QWNdf9I361Mpp7726c+lj3U0qK1uGw==}
-
-  parse-latin@7.0.0:
-    resolution: {integrity: sha512-mhHgobPPua5kZ98EF4HWiH167JWBfl4pvAIXXdbaVohtK7a6YBOy56kvhCqduqyo/f3yrHFWmqmiMg/BkBkYYQ==}
-
-  parse5-htmlparser2-tree-adapter@6.0.1:
-    resolution: {integrity: sha512-qPuWvbLgvDGilKc5BoicRovlT4MtYT6JfJyBOMDsKoiT+GiuP5qyrPCnR9HcPECIJJmZh5jRndyNThnhhb/vlA==}
-
-  parse5@5.1.1:
-    resolution: {integrity: sha512-ugq4DFI0Ptb+WWjAdOK16+u/nHfiIrcE+sh8kZMaM0WllQKLI9rOUq6c2b7cwPkXdzfQESqvoqK6ug7U/Yyzug==}
-
-  parse5@6.0.1:
-    resolution: {integrity: sha512-Ofn/CTFzRGTTxwpNEs9PP93gXShHcTq255nzRYSKe8AkVpZY7e1fpmTfOyoIvjP5HG7Z2ZM7VS9PPhQGW2pOpw==}
-
-  parse5@7.3.0:
-    resolution: {integrity: sha512-IInvU7fabl34qmi9gY8XOVxhYyMyuH2xUNpb2q8/Y+7552KlejkRvqvD19nMoUW/uQGGbqNpA6Tufu5FL5BZgw==}
-
-  parseurl@1.3.3:
-    resolution: {integrity: sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==}
-    engines: {node: '>= 0.8'}
-
-  partial-json@0.1.7:
-    resolution: {integrity: sha512-Njv/59hHaokb/hRUjce3Hdv12wd60MtM9Z5Olmn+nehe0QDAsRtRbJPvJ0Z91TusF0SuZRIvnM+S4l6EIP8leA==}
-
-  path-browserify@1.0.1:
-    resolution: {integrity: sha512-b7uo2UCUOYZcnF/3ID0lulOJi/bafxa1xPe7ZPsammBSpjSWQkjNxlt635YGS2MiR9GjvuXCtz2emr3jbsz98g==}
-
-  path-data-parser@0.1.0:
-    resolution: {integrity: sha512-NOnmBpt5Y2RWbuv0LMzsayp3lVylAHLPUTut412ZA3l+C4uw4ZVkQbjShYCQ8TCpUMdPapr4YjUqLYD6v68j+w==}
-
-  path-exists@4.0.0:
-    resolution: {integrity: sha512-ak9Qy5Q7jYb2Wwcey5Fpvg2KoAc/ZIhLSLOSBmRmygPsGwkVVt0fZa0qrtMz+m6tJTAHfZQ8FnmB4MG4LWy7/w==}
-    engines: {node: '>=8'}
-
-  path-key@3.1.1:
-    resolution: {integrity: sha512-ojmeN0qd+y0jszEtoY48r0Peq5dwMEkIlCOu6Q5f41lfkswXuKtYrhgoTpLnyIcHm24Uhqx+5Tqm2InSwLhE6Q==}
-    engines: {node: '>=8'}
-
-  path-key@4.0.0:
-    resolution: {integrity: sha512-haREypq7xkM7ErfgIyA0z+Bj4AGKlMSdlQE2jvJo6huWD1EdkKYV+G/T4nq0YEF2vgTT8kqMFKo1uHn950r4SQ==}
-    engines: {node: '>=12'}
-
-  path-parse@1.0.7:
-    resolution: {integrity: sha512-LDJzPVEEEPR+y48z93A0Ed0yXb8pAByGWo/k5YYdYgpY2/2EsOsksJrq7lOHxryrVOn1ejG6oAp8ahvOIQD8sw==}
-
-  path-scurry@1.11.1:
-    resolution: {integrity: sha512-Xa4Nw17FS9ApQFJ9umLiJS4orGjm7ZzwUrwamcGQuHSzDyth9boKDaycYdDcZDuqYATXw4HFXgaqWTctW/v1HA==}
-    engines: {node: '>=16 || 14 >=14.18'}
-
-  path-scurry@2.0.2:
-    resolution: {integrity: sha512-3O/iVVsJAPsOnpwWIeD+d6z/7PmqApyQePUtCndjatj/9I5LylHvt5qluFaBT3I5h3r1ejfR056c+FCv+NnNXg==}
-    engines: {node: 18 || 20 || >=22}
-
-  path-to-regexp@8.4.2:
-    resolution: {integrity: sha512-qRcuIdP69NPm4qbACK+aDogI5CBDMi1jKe0ry5rSQJz8JVLsC7jV8XpiJjGRLLol3N+R5ihGYcrPLTno6pAdBA==}
-
-  pathe@1.1.2:
-    resolution: {integrity: sha512-whLdWMYL2TwI08hn8/ZqAbrVemu0LNaNNJZX73O6qaIdCTfXutsLhMkjdENX0qhsQ9uIimo4/aQOmXkoon2nDQ==}
-
-  pathe@2.0.3:
-    resolution: {integrity: sha512-WUjGcAqP1gQacoQe+OBJsFA7Ld4DyXuUIjZ5cc75cLHvJ7dtNsTugphxIADwspS+AraAUePCKrSVtPLFj/F88w==}
-
-  pathval@2.0.1:
-    resolution: {integrity: sha512-//nshmD55c46FuFw26xV/xFAaB5HF9Xdap7HJBBnrKdAd6/GxDBaNA1870O79+9ueg61cZLSVc+OaFlfmObYVQ==}
-    engines: {node: '>= 14.16'}
-
-  pbkdf2@3.1.5:
-    resolution: {integrity: sha512-Q3CG/cYvCO1ye4QKkuH7EXxs3VC/rI1/trd+qX2+PolbaKG0H+bgcZzrTt96mMyRtejk+JMCiLUn3y29W8qmFQ==}
-    engines: {node: '>= 0.10'}
-
-  pend@1.2.0:
-    resolution: {integrity: sha512-F3asv42UuXchdzt+xXqfW1OGlVBe+mxa2mqI0pg5yAHZPvFmY3Y6drSf/GQ1A86WgWEN9Kzh/WrgKa6iGcHXLg==}
-
-  pi-acp@0.0.23:
-    resolution: {integrity: sha512-neOq/zgZoViyaDN/KsoAMJ1ToE63kqvzm5fdoQkDzQ2+UezO3vwdVY1WjyEfDHaLQiOKgQQjXVqFUZ9fn3LZvQ==}
-    engines: {node: '>=20'}
-    hasBin: true
-
-  piccolore@0.1.3:
-    resolution: {integrity: sha512-o8bTeDWjE086iwKrROaDf31K0qC/BENdm15/uH9usSC/uZjJOKb2YGiVHfLY4GhwsERiPI1jmwI2XrA7ACOxVw==}
-
-  picocolors@1.1.1:
-    resolution: {integrity: sha512-xceH2snhtb5M9liqDsmEw56le376mTZkEX/jEb/RxNFyegNul7eNslCXP9FDj/Lcu0X8KEyMceP2ntpaHrDEVA==}
-
-  picomatch@2.3.2:
-    resolution: {integrity: sha512-V7+vQEJ06Z+c5tSye8S+nHUfI51xoXIXjHQ99cQtKUkQqqO1kO/KCJUfZXuB47h/YBlDhah2H3hdUGXn8ie0oA==}
-    engines: {node: '>=8.6'}
-
-  picomatch@4.0.4:
-    resolution: {integrity: sha512-QP88BAKvMam/3NxH6vj2o21R6MjxZUAd6nlwAS/pnGvN9IVLocLHxGYIzFhg6fUQ+5th6P4dv4eW9jX3DSIj7A==}
-    engines: {node: '>=12'}
-
-  pify@2.3.0:
-    resolution: {integrity: sha512-udgsAY+fTnvv7kI7aaxbqwWNb0AHiB0qBO89PZKPkoTmGOgdbrHDKD+0B2X4uTfJ/FT1R09r9gTsjUjNJotuog==}
-    engines: {node: '>=0.10.0'}
-
-  pino-abstract-transport@2.0.0:
-    resolution: {integrity: sha512-F63x5tizV6WCh4R6RHyi2Ml+M70DNRXt/+HANowMflpgGFMAym/VKm6G7ZOQRjqN7XbGxK1Lg9t6ZrtzOaivMw==}
-
-  pino-abstract-transport@3.0.0:
-    resolution: {integrity: sha512-wlfUczU+n7Hy/Ha5j9a/gZNy7We5+cXp8YL+X+PG8S0KXxw7n/JXA3c46Y0zQznIJ83URJiwy7Lh56WLokNuxg==}
-
-  pino-pretty@13.1.3:
-    resolution: {integrity: sha512-ttXRkkOz6WWC95KeY9+xxWL6AtImwbyMHrL1mSwqwW9u+vLp/WIElvHvCSDg0xO/Dzrggz1zv3rN5ovTRVowKg==}
-    hasBin: true
-
-  pino-std-serializers@7.1.0:
-    resolution: {integrity: sha512-BndPH67/JxGExRgiX1dX0w1FvZck5Wa4aal9198SrRhZjH3GxKQUKIBnYJTdj2HDN3UQAS06HlfcSbQj2OHmaw==}
-
-  pino@9.14.0:
-    resolution: {integrity: sha512-8OEwKp5juEvb/MjpIc4hjqfgCNysrS94RIOMXYvpYCdm/jglrKEiAYmiumbmGhCvs+IcInsphYDFwqrjr7398w==}
-    hasBin: true
-
-  pirates@4.0.7:
-    resolution: {integrity: sha512-TfySrs/5nm8fQJDcBDuUng3VOUKsd7S+zqvbOTiGXHfxX4wK31ard+hoNuvkicM/2YFzlpDgABOevKSsB4G/FA==}
-    engines: {node: '>= 6'}
-
-  pixelmatch@7.2.0:
-    resolution: {integrity: sha512-xhcb4yHu9sM/G7foGzoLtXYcC0zHEaOXXjRKhGup0fw78Nf2Tkiapv4EQyMzrbcmQPsllAI7DbFY2UT7PlI9Pg==}
-    hasBin: true
-
-  pkce-challenge@5.0.1:
-    resolution: {integrity: sha512-wQ0b/W4Fr01qtpHlqSqspcj3EhBvimsdh0KlHhH8HRZnMsEa0ea2fTULOXOS9ccQr3om+GcGRk4e+isrZWV8qQ==}
-    engines: {node: '>=16.20.0'}
-
-  pkg-dir@5.0.0:
-    resolution: {integrity: sha512-NPE8TDbzl/3YQYY7CSS228s3g2ollTFnc+Qi3tqmqJp9Vg2ovUpixcJEo2HJScN2Ez+kEaal6y70c0ehqJBJeA==}
-    engines: {node: '>=10'}
-
-  pkg-types@1.3.1:
-    resolution: {integrity: sha512-/Jm5M4RvtBFVkKWRu2BLUTNP8/M2a+UwuAX+ae4770q1qVGtfjG+WTCupoZixokjmHiry8uI+dlY8KXYV5HVVQ==}
-
-  playwright-core@1.59.1:
-    resolution: {integrity: sha512-HBV/RJg81z5BiiZ9yPzIiClYV/QMsDCKUyogwH9p3MCP6IYjUFu/MActgYAvK0oWyV9NlwM3GLBjADyWgydVyg==}
-    engines: {node: '>=18'}
-    hasBin: true
-
-  playwright@1.59.1:
-    resolution: {integrity: sha512-C8oWjPR3F81yljW9o5OxcWzfh6avkVwDD2VYdwIGqTkl+OGFISgypqzfu7dOe4QNLL2aqcWBmI3PMtLIK233lw==}
-    engines: {node: '>=18'}
-    hasBin: true
-
-  pngjs@7.0.0:
-    resolution: {integrity: sha512-LKWqWJRhstyYo9pGvgor/ivk2w94eSjE3RGVuzLGlr3NmD8bf7RcYGze1mNdEHRP6TRP6rMuDHk5t44hnTRyow==}
-    engines: {node: '>=14.19.0'}
-
-  points-on-curve@0.2.0:
-    resolution: {integrity: sha512-0mYKnYYe9ZcqMCWhUjItv/oHjvgEsfKvnUTg8sAtnHr3GVy7rGkXCb6d5cSyqrWqL4k81b9CPg3urd+T7aop3A==}
-
-  points-on-path@0.2.1:
-    resolution: {integrity: sha512-25ClnWWuw7JbWZcgqY/gJ4FQWadKxGWk+3kR/7kD0tCaDtPPMj7oHu2ToLaVhfpnHrZzYby2w6tUA0eOIuUg8g==}
-
-  possible-typed-array-names@1.1.0:
-    resolution: {integrity: sha512-/+5VFTchJDoVj3bhoqi6UeymcD00DAwb1nJwamzPvHEszJ4FpF6SNNbUbOS8yI56qHzdV8eK0qEfOSiodkTdxg==}
-    engines: {node: '>= 0.4'}
-
-  postcss-import@15.1.0:
-    resolution: {integrity: sha512-hpr+J05B2FVYUAXHeK1YyI267J/dDDhMU6B6civm8hSY1jYJnBXxzKDKDswzJmtLHryrjhnDjqqp/49t8FALew==}
-    engines: {node: '>=14.0.0'}
-    peerDependencies:
-      postcss: ^8.0.0
-
-  postcss-js@4.1.0:
-    resolution: {integrity: sha512-oIAOTqgIo7q2EOwbhb8UalYePMvYoIeRY2YKntdpFQXNosSu3vLrniGgmH9OKs/qAkfoj5oB3le/7mINW1LCfw==}
-    engines: {node: ^12 || ^14 || >= 16}
-    peerDependencies:
-      postcss: ^8.4.21
-
-  postcss-load-config@4.0.2:
-    resolution: {integrity: sha512-bSVhyJGL00wMVoPUzAVAnbEoWyqRxkjv64tUl427SKnPrENtq6hJwUojroMz2VB+Q1edmi4IfrAPpami5VVgMQ==}
-    engines: {node: '>= 14'}
-    peerDependencies:
-      postcss: '>=8.0.9'
-      ts-node: '>=9.0.0'
-    peerDependenciesMeta:
-      postcss:
-        optional: true
-      ts-node:
-        optional: true
-
-  postcss-load-config@6.0.1:
-    resolution: {integrity: sha512-oPtTM4oerL+UXmx+93ytZVN82RrlY/wPUV8IeDxFrzIjXOLF1pN+EmKPLbubvKHT2HC20xXsCAH2Z+CKV6Oz/g==}
-    engines: {node: '>= 18'}
-    peerDependencies:
-      jiti: '>=1.21.0'
-      postcss: '>=8.0.9'
-      tsx: ^4.8.1
-      yaml: ^2.4.2
-    peerDependenciesMeta:
-      jiti:
-        optional: true
-      postcss:
-        optional: true
-      tsx:
-        optional: true
-      yaml:
-        optional: true
-
-  postcss-nested@6.2.0:
-    resolution: {integrity: sha512-HQbt28KulC5AJzG+cZtj9kvKB93CFCdLvog1WFLf1D+xmMvPGlBstkpTEZfK5+AN9hfJocyBFCNiqyS48bpgzQ==}
-    engines: {node: '>=12.0'}
-    peerDependencies:
-      postcss: ^8.2.14
-
-  postcss-selector-parser@6.0.10:
-    resolution: {integrity: sha512-IQ7TZdoaqbT+LCpShg46jnZVlhWD2w6iQYAcYXfHARZ7X1t/UGhhceQDs5X0cGqKvYlHNOuv7Oa1xmb0oQuA3w==}
-    engines: {node: '>=4'}
-
-  postcss-selector-parser@6.1.4:
-    resolution: {integrity: sha512-bIoJLOmjCO1S9XdY/DcnR5hJxvrDir1PbGChrzXG3vw0/FOliy/fA3dmdhQ441kah4gKv+TwckGzex6wNS5cnQ==}
-    engines: {node: '>=4'}
-
-  postcss-value-parser@4.2.0:
-    resolution: {integrity: sha512-1NNCs6uurfkVbeXG4S8JFT9t19m45ICnif8zWLd5oPSZ50QnwMfK+H3jv408d4jw/7Bttv5axS5IiHoLaVNHeQ==}
-
-  postcss@8.5.8:
-    resolution: {integrity: sha512-OW/rX8O/jXnm82Ey1k44pObPtdblfiuWnrd8X7GJ7emImCOstunGbXUpp7HdBrFQX6rJzn3sPT397Wp5aCwCHg==}
-    engines: {node: ^10 || ^12 || >=14}
-
-  posthog-js@1.396.5:
-    resolution: {integrity: sha512-huW/8R151I08i/tkOaAv3Q/yWVqzhqPj3SxyhpgNLB/xysaNeV1ibp6DHzbRWV5D7FRM48Zg6Icxsm4q0irEtg==}
-
-  preact@10.29.3:
-    resolution: {integrity: sha512-D9NL1GAnJZhc3RndVs4gDdxEeU9TcHgywMrhhOsnpdlvFjdbx0gAsLUnH6JEhlJH5giL7Tx5biWPUSEXE/HPzw==}
-
-  prismjs@1.30.0:
-    resolution: {integrity: sha512-DEvV2ZF2r2/63V+tK8hQvrR2ZGn10srHbXviTlcv7Kpzw8jWiNTqbVgjO3IY8RxrrOUF8VPMQQFysYYYv0YZxw==}
-    engines: {node: '>=6'}
-
-  process-nextick-args@2.0.1:
-    resolution: {integrity: sha512-3ouUOpQhtgrbOa17J7+uxOTpITYWaGP7/AhoR3+A+/1e9skrzelGi/dXzEYyvbxubEF6Wn2ypscTKiKJFFn1ag==}
-
-  process-warning@5.0.0:
-    resolution: {integrity: sha512-a39t9ApHNx2L4+HBnQKqxxHNs1r7KF+Intd8Q/g1bUh6q0WIp9voPXJ/x0j+ZL45KF1pJd9+q2jLIRMfvEshkA==}
-
-  process@0.11.10:
-    resolution: {integrity: sha512-cdGef/drWFoydD1JsMzuFf8100nZl+GT+yacc2bEced5f9Rjk4z+WtFUTBu9PhOi9j/jfmBPu0mMEY4wIdAF8A==}
-    engines: {node: '>= 0.6.0'}
-
-  prompts@2.4.2:
-    resolution: {integrity: sha512-NxNv/kLguCA7p3jE8oL2aEBsrJWgAakBpgmgK6lpPWV+WuOmY6r2/zbAVnP+T8bQlA0nzHXSJSJW0Hq7ylaD2Q==}
-    engines: {node: '>= 6'}
-
-  prop-types@15.8.1:
-    resolution: {integrity: sha512-oj87CgZICdulUohogVAR7AjlC0327U4el4L6eAvOqCeudMDVU0NThNaV+b9Df4dXgSP1gXMTnPdhfe/2qDH5cg==}
-
-  proper-lockfile@4.1.2:
-    resolution: {integrity: sha512-TjNPblN4BwAWMXU8s9AEz4JmQxnD1NNL7bNOY/AKUzyamc379FWASUhc/K1pL2noVb+XmZKLL68cjzLsiOAMaA==}
-
-  property-information@7.2.0:
-    resolution: {integrity: sha512-IAtzIB6sUiWaJYrX9smp3V46pBGbBeLFRGdh25kg1334VcBlD8HzhPeNIWQH9zhGmo2itIe25EHt9dQP7G5hmg==}
-
-  protobufjs@7.5.4:
-    resolution: {integrity: sha512-CvexbZtbov6jW2eXAvLukXjXUW1TzFaivC46BpWc/3BpcCysb5Vffu+B3XHMm8lVEuy2Mm4XGex8hBSg1yapPg==}
-    engines: {node: '>=12.0.0'}
-
-  proxy-addr@2.0.7:
-    resolution: {integrity: sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==}
-    engines: {node: '>= 0.10'}
-
-  proxy-agent@6.5.0:
-    resolution: {integrity: sha512-TmatMXdr2KlRiA2CyDu8GqR8EjahTG3aY3nXjdzFyoZbmB8hrBsTyMezhULIXKnC0jpfjlmiZ3+EaCzoInSu/A==}
-    engines: {node: '>= 14'}
-
-  proxy-from-env@1.1.0:
-    resolution: {integrity: sha512-D+zkORCbA9f1tdWRK0RaCR3GPv50cMxcrz4X8k5LTSUD1Dkw47mKJEZQNunItRTkWwgtaUSo1RVFRIG9ZXiFYg==}
-
-  proxy-from-env@2.1.0:
-    resolution: {integrity: sha512-cJ+oHTW1VAEa8cJslgmUZrc+sjRKgAKl3Zyse6+PV38hZe/V6Z14TbCuXcan9F9ghlz4QrFr2c92TNF82UkYHA==}
-    engines: {node: '>=10'}
-
-  public-encrypt@4.0.3:
-    resolution: {integrity: sha512-zVpa8oKZSz5bTMTFClc1fQOnyyEzpl5ozpi1B5YcvBrdohMjH2rfsBtyXcuNuwjsDIXmBYlF2N5FlJYhR29t8Q==}
-
-  pump@3.0.4:
-    resolution: {integrity: sha512-VS7sjc6KR7e1ukRFhQSY5LM2uBWAUPiOPa/A3mkKmiMwSmRFUITt0xuj+/lesgnCv+dPIEYlkzrcyXgquIHMcA==}
-
-  punycode.js@2.3.1:
-    resolution: {integrity: sha512-uxFIHU0YlHYhDQtV4R9J6a52SLx28BCjT+4ieh7IGbgwVJWO+km431c4yRlREUAsAmt/uMjQUyQHNEPf0M39CA==}
-    engines: {node: '>=6'}
-
-  punycode@1.4.1:
-    resolution: {integrity: sha512-jmYNElW7yvO7TV33CjSmvSiE2yco3bV2czu/OzDKdMNVZQWfxCblURLhf+47syQRBntjfLdd/H0egrzIG+oaFQ==}
-
-  qs@6.15.0:
-    resolution: {integrity: sha512-mAZTtNCeetKMH+pSjrb76NAM8V9a05I9aBZOHztWy/UqcJdQYNsf59vrRKWnojAT9Y+GbIvoTBC++CPHqpDBhQ==}
-    engines: {node: '>=0.6'}
-
-  qs@6.15.3:
-    resolution: {integrity: sha512-O9gl3zCl5h5blw1KGUzQKhA5oUXSl8rwUIM5o0S3nCXMliSvy5Dzx7/DJcI+SwgICv+IneSZwhBh1oSyEHA71A==}
-    engines: {node: '>=0.6'}
-
-  query-selector-shadow-dom@1.0.1:
-    resolution: {integrity: sha512-lT5yCqEBgfoMYpf3F2xQRK7zEr1rhIIZuceDK6+xRkJQ4NMbHTwXqk4NkwDwQMNqXgG9r9fyHnzwNVs6zV5KRw==}
-
-  querystring-es3@0.2.1:
-    resolution: {integrity: sha512-773xhDQnZBMFobEiztv8LIl70ch5MSF/jUQVlhwFyBILqq96anmoctVIYz+ZRp0qbCKATTn6ev02M3r7Ga5vqA==}
-    engines: {node: '>=0.4.x'}
-
-  queue-microtask@1.2.3:
-    resolution: {integrity: sha512-NuaNSa6flKT5JaSYQzJok04JzTL1CA6aGhv5rfLW3PgqA+M2ChpZQnAC8h8i4ZFkBS8X5RqkDBHA7r4hej3K9A==}
-
-  quick-format-unescaped@4.0.4:
-    resolution: {integrity: sha512-tYC1Q1hgyRuHgloV/YXs2w15unPVh8qfu/qCTfhTYamaw7fyhumKa2yGpdSo87vY32rIclj+4fWYQXUMs9EHvg==}
-
-  radix3@1.1.2:
-    resolution: {integrity: sha512-b484I/7b8rDEdSDKckSSBA8knMpcdsXudlE/LNL639wFoHKwLbEkQFZHWEYwDC0wa0FKUcCY+GAF73Z7wxNVFA==}
-
-  randombytes@2.1.0:
-    resolution: {integrity: sha512-vYl3iOX+4CKUWuxGi9Ukhie6fsqXqS9FE2Zaic4tNFD2N2QQaXOMFbuKK4QmDHC0JO6B1Zp41J0LpT0oR68amQ==}
-
-  randomfill@1.0.4:
-    resolution: {integrity: sha512-87lcbR8+MhcWcUiQ+9e+Rwx8MyR2P7qnt15ynUlbm3TU/fjbgz4GsvfSUDTemtCCtVCqb4ZcEFlyPNTh9bBTLw==}
-
-  range-parser@1.3.0:
-    resolution: {integrity: sha512-hek2mFQpPuI4E1BBKrSto+BU3e3x4xuarsbiwr3+lf7p44juvFMV0XFWQAP3xUyqXA4RrXLIoaSUGbSt056ZMw==}
-    engines: {node: '>= 0.6'}
-
-  raw-body@3.0.2:
-    resolution: {integrity: sha512-K5zQjDllxWkf7Z5xJdV0/B0WTNqx6vxG70zJE4N0kBs4LovmEYWJzQGxC9bS9RAKu3bgM40lrd5zoLJ12MQ5BA==}
-    engines: {node: '>= 0.10'}
-
-  react-aria@3.50.0:
-    resolution: {integrity: sha512-S0Os6QZk33fzUAKu1QLT9afoUaCBt1ZNdoiq0n2YMVgKIdNIQS8zxiZ8O9hYE6QyDkHKjD6q39LQZ+qaSAIgjw==}
-    peerDependencies:
-      react: ^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1
-      react-dom: ^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1
-
-  react-day-picker@8.10.1:
-    resolution: {integrity: sha512-TMx7fNbhLk15eqcMt+7Z7S2KF7mfTId/XJDjKE8f+IUcFn0l08/kI4FiYTL/0yuOLmEcbR4Fwe3GJf/NiiMnPA==}
-    peerDependencies:
-      date-fns: ^2.28.0 || ^3.0.0
-      react: ^16.8.0 || ^17.0.0 || ^18.0.0
-
-  react-dom@19.2.7:
-    resolution: {integrity: sha512-t0BRVXvbiE/o20Hfw669rLbMCDWtYZLvmJigy2f0MxsXF+71pxhR3xOkspmsO8h3ZlNzyibAmtCa3l4lYKk6gQ==}
-    peerDependencies:
-      react: ^19.2.7
-
-  react-hook-form@7.80.0:
-    resolution: {integrity: sha512-4P+fk6oXsxY+6xSj7Euhc2sumQD8zQqCuVHoJwoyp9EchP+IUW9OESB7uHFJOKsIBQ4MQqYE84INJFqUCYNoOg==}
-    engines: {node: '>=18.0.0'}
-    peerDependencies:
-      react: ^16.8.0 || ^17 || ^18 || ^19
-
-  react-is@16.13.1:
-    resolution: {integrity: sha512-24e6ynE2H+OKt4kqsOvNd8kBpV65zoxbA4BVsEOB3ARVWQki/DHzaUoC5KuON/BiccDaCCTZBuOcfZs70kR8bQ==}
-
-  react-is@18.3.1:
-    resolution: {integrity: sha512-/LLMVyas0ljjAtoYiPqYiL8VWXzUUdThrmU5+n20DZv+a+ClRoevUzw5JxU+Ieh5/c87ytoTBV9G1FiKfNJdmg==}
-
-  react-markdown@10.1.0:
-    resolution: {integrity: sha512-qKxVopLT/TyA6BX3Ue5NwabOsAzm0Q7kAPwq6L+wWDwisYs7R8vZ0nRXqq6rkueboxpkjvLGU9fWifiX/ZZFxQ==}
-    peerDependencies:
-      '@types/react': '>=18'
-      react: '>=18'
-
-  react-refresh@0.17.0:
-    resolution: {integrity: sha512-z6F7K9bV85EfseRCp2bzrpyQ0Gkw1uLoCel9XBVWPg/TjRj94SkJzUTGfOa4bs7iJvBWtQG0Wq7wnI0syw3EBQ==}
-    engines: {node: '>=0.10.0'}
-
-  react-remove-scroll-bar@2.3.8:
-    resolution: {integrity: sha512-9r+yi9+mgU33AKcj6IbT9oRCO78WriSj6t/cF8DWBZJ9aOGPOTEDvdUDz1FwKim7QXWwmHqtdHnRJfhAxEG46Q==}
-    engines: {node: '>=10'}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  react-remove-scroll@2.7.2:
-    resolution: {integrity: sha512-Iqb9NjCCTt6Hf+vOdNIZGdTiH1QSqr27H/Ek9sv/a97gfueI/5h1s3yRi1nngzMUaOOToin5dI1dXKdXiF+u0Q==}
-    engines: {node: '>=10'}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  react-resizable-panels@2.1.9:
-    resolution: {integrity: sha512-z77+X08YDIrgAes4jl8xhnUu1LNIRp4+E7cv4xHmLOxxUPO/ML7PSrE813b90vj7xvQ1lcf7g2uA9GeMZonjhQ==}
-    peerDependencies:
-      react: ^16.14.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
-      react-dom: ^16.14.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
-
-  react-smooth@4.0.4:
-    resolution: {integrity: sha512-gnGKTpYwqL0Iii09gHobNolvX4Kiq4PKx6eWBCYYix+8cdw+cGo3do906l1NBPKkSWx1DghC1dlWG9L2uGd61Q==}
-    peerDependencies:
-      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-      react-dom: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-
-  react-stately@3.48.0:
-    resolution: {integrity: sha512-ImicSAG+lTotAe5izcs1fz49Zk48w7pDusqYg04WaPhCoej8BJ24soMu3iLXIrsi273s4P1gZrYGrqReMfgEEA==}
-    peerDependencies:
-      react: ^16.8.0 || ^17.0.0-rc.1 || ^18.0.0 || ^19.0.0-rc.1
-
-  react-style-singleton@2.2.3:
-    resolution: {integrity: sha512-b6jSvxvVnyptAiLjbkWLE/lOnR4lfTtDAl+eUC7RZy+QQWc6wRzIV2CE6xBuMmDxc2qIihtDCZD5NPOFl7fRBQ==}
-    engines: {node: '>=10'}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  react-transition-group@4.4.5:
-    resolution: {integrity: sha512-pZcd1MCJoiKiBR2NRxeCRg13uCXbydPnmB4EOeRrY7480qNWO8IIgQG6zlDkm6uRMsURXPuKq0GWtiM59a5Q6g==}
-    peerDependencies:
-      react: '>=16.6.0'
-      react-dom: '>=16.6.0'
-
-  react@19.2.7:
-    resolution: {integrity: sha512-HNe9WslTbXmFK8o8cmwgAeJFSBvt1bPdHCVKtaaV+WlAN36mpT4hcRpwbf3fY56ar2oIXzsBpOAiIRHAdY0OlQ==}
-    engines: {node: '>=0.10.0'}
-
-  read-cache@1.0.0:
-    resolution: {integrity: sha512-Owdv/Ft7IjOgm/i0xvNDZ1LrRANRfew4b2prF3OWMQLxLfu3bS8FVhCsrSCMK4lR56Y9ya+AThoTpDCTxCmpRA==}
-
-  readable-stream@2.3.8:
-    resolution: {integrity: sha512-8p0AUk4XODgIewSi0l8Epjs+EVnWiK7NoDIEGU0HhE7+ZyY8D1IMY7odu5lRrFXGg71L15KG8QrPmum45RTtdA==}
-
-  readable-stream@3.6.2:
-    resolution: {integrity: sha512-9u/sniCrY3D5WdsERHzHE4G2YCXqoG5FTHUiCC4SIbr6XcLZBY05ya9EKjYek9O5xOAwjGq+1JdGBAS7Q9ScoA==}
-    engines: {node: '>= 6'}
-
-  readable-stream@4.7.0:
-    resolution: {integrity: sha512-oIGGmcpTLwPga8Bn6/Z75SVaH1z5dUut2ibSyAMVhmUggWpmDn2dapB0n7f8nwaSiRtepAsfJyfXIO5DCVAODg==}
-    engines: {node: ^12.22.0 || ^14.17.0 || >=16.0.0}
-
-  readdir-glob@1.1.3:
-    resolution: {integrity: sha512-v05I2k7xN8zXvPD9N+z/uhXPaj0sUFCe2rcWZIpBsqxfP7xXFQ0tipAd/wjj1YxWyWtUS5IDJpOG82JKt2EAVA==}
-
-  readdirp@3.6.0:
-    resolution: {integrity: sha512-hOS089on8RduqdbhvQ5Z37A0ESjsqz6qnRcffsMU3495FuTdqSm+7bhJ29JvIOsBDEEnan5DPu9t3To9VRlMzA==}
-    engines: {node: '>=8.10.0'}
-
-  readdirp@4.1.2:
-    resolution: {integrity: sha512-GDhwkLfywWL2s6vEjyhri+eXmfH6j1L7JE27WhqLeYzoh/A3DBaYGEj2H/HFZCn/kMfim73FXxEJTw06WtxQwg==}
-    engines: {node: '>= 14.18.0'}
-
-  readdirp@5.0.0:
-    resolution: {integrity: sha512-9u/XQ1pvrQtYyMpZe7DXKv2p5CNvyVwzUB6uhLAnQwHMSgKMBR62lc7AHljaeteeHXn11XTAaLLUVZYVZyuRBQ==}
-    engines: {node: '>= 20.19.0'}
-
-  real-require@0.2.0:
-    resolution: {integrity: sha512-57frrGM/OCTLqLOAh0mhVA9VBMHd+9U7Zb2THMGdBUoZVOtGbJzjxsYGDJ3A9AYYCP4hn6y1TVbaOfzWtm5GFg==}
-    engines: {node: '>= 12.13.0'}
-
-  recharts-scale@0.4.5:
-    resolution: {integrity: sha512-kivNFO+0OcUNu7jQquLXAxz1FIwZj8nrj+YkOKc5694NbjCvcT6aSZiIzNzd2Kul4o4rTto8QVR9lMNtxD4G1w==}
-
-  recharts@2.15.4:
-    resolution: {integrity: sha512-UT/q6fwS3c1dHbXv2uFgYJ9BMFHu3fwnd7AYZaEQhXuYQ4hgsxLvsUXzGdKeZrW5xopzDCvuA2N41WJ88I7zIw==}
-    engines: {node: '>=14'}
-    deprecated: 1.x and 2.x branches are no longer active. Bump to Recharts v3 to receive latest features and bugfixes. See https://github.com/recharts/recharts/wiki/3.0-migration-guide
-    peerDependencies:
-      react: ^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-      react-dom: ^16.0.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-
-  recma-build-jsx@1.0.0:
-    resolution: {integrity: sha512-8GtdyqaBcDfva+GUKDr3nev3VpKAhup1+RvkMvUxURHpW7QyIvk9F5wz7Vzo06CEMSilw6uArgRqhpiUcWp8ew==}
-
-  recma-jsx@1.0.1:
-    resolution: {integrity: sha512-huSIy7VU2Z5OLv6oFLosQGGDqPqdO1iq6bWNAdhzMxSJP7RAso4fCZ1cKu8j9YHCZf3TPrq4dw3okhrylgcd7w==}
-    peerDependencies:
-      acorn: ^6.0.0 || ^7.0.0 || ^8.0.0
-
-  recma-parse@1.0.0:
-    resolution: {integrity: sha512-OYLsIGBB5Y5wjnSnQW6t3Xg7q3fQ7FWbw/vcXtORTnyaSFscOtABg+7Pnz6YZ6c27fG1/aN8CjfwoUEUIdwqWQ==}
-
-  recma-stringify@1.0.0:
-    resolution: {integrity: sha512-cjwII1MdIIVloKvC9ErQ+OgAtwHBmcZ0Bg4ciz78FtbT8In39aAYbaA7zvxQ61xVMSPE8WxhLwLbhif4Js2C+g==}
-
-  regex-recursion@6.0.2:
-    resolution: {integrity: sha512-0YCaSCq2VRIebiaUviZNs0cBz1kg5kVS2UKUfNIx8YVs1cN3AV7NTctO5FOKBA+UT2BPJIWZauYHPqJODG50cg==}
-
-  regex-utilities@2.3.0:
-    resolution: {integrity: sha512-8VhliFJAWRaUiVvREIiW2NXXTmHs4vMNnSzuJVhscgmGav3g9VDxLrQndI3dZZVVdp0ZO/5v0xmX516/7M9cng==}
-
-  regex@6.1.0:
-    resolution: {integrity: sha512-6VwtthbV4o/7+OaAF9I5L5V3llLEsoPyq9P1JVXkedTP33c7MfCG0/5NOPcSJn0TzXcG9YUrR0gQSWioew3LDg==}
-
-  rehype-mermaid@3.0.0:
-    resolution: {integrity: sha512-fxrD5E4Fa1WXUjmjNDvLOMT4XB1WaxcfycFIWiYU0yEMQhcTDElc9aDFnbDFRLxG1Cfo1I3mfD5kg4sjlWaB+Q==}
-    peerDependencies:
-      playwright: '1'
-    peerDependenciesMeta:
-      playwright:
-        optional: true
-
-  rehype-parse@9.0.1:
-    resolution: {integrity: sha512-ksCzCD0Fgfh7trPDxr2rSylbwq9iYDkSn8TCDmEJ49ljEUBxDVCzCHv7QNzZOfODanX4+bWQ4WZqLCRWYLfhag==}
-
-  rehype-raw@7.0.0:
-    resolution: {integrity: sha512-/aE8hCfKlQeA8LmyeyQvQF3eBiLRGNlfBJEvWH7ivp9sBqs7TNqBL5X3v157rM4IFETqDnIOO+z5M/biZbo9Ww==}
-
-  rehype-recma@1.0.0:
-    resolution: {integrity: sha512-lqA4rGUf1JmacCNWWZx0Wv1dHqMwxzsDWYMTowuplHF3xH0N/MmrZ/G3BDZnzAkRmxDadujCjaKM2hqYdCBOGw==}
-
-  rehype-stringify@10.0.1:
-    resolution: {integrity: sha512-k9ecfXHmIPuFVI61B9DeLPN0qFHfawM6RsuX48hoqlaKSF61RskNjSm1lI8PhBEM0MRdLxVVm4WmTqJQccH9mA==}
-
-  rehype@13.0.2:
-    resolution: {integrity: sha512-j31mdaRFrwFRUIlxGeuPXXKWQxet52RBQRvCmzl5eCefn/KGbomK5GMHNMsOJf55fgo3qw5tST5neDuarDYR2A==}
-
-  remark-gfm@4.0.1:
-    resolution: {integrity: sha512-1quofZ2RQ9EWdeN34S79+KExV1764+wCUGop5CPL1WGdD0ocPpu91lzPGbwWMECpEpd42kJGQwzRfyov9j4yNg==}
-
-  remark-mdx@3.1.1:
-    resolution: {integrity: sha512-Pjj2IYlUY3+D8x00UJsIOg5BEvfMyeI+2uLPn9VO9Wg4MEtN/VTIq2NEJQfde9PnX15KgtHyl9S0BcTnWrIuWg==}
-
-  remark-parse@11.0.0:
-    resolution: {integrity: sha512-FCxlKLNGknS5ba/1lmpYijMUzX2esxW5xQqjWxw2eHFfS2MSdaHVINFmhjo+qN1WhZhNimq0dZATN9pH0IDrpA==}
-
-  remark-rehype@11.1.2:
-    resolution: {integrity: sha512-Dh7l57ianaEoIpzbp0PC9UKAdCSVklD8E5Rpw7ETfbTl3FqcOOgq5q2LVDhgGCkaBv7p24JXikPdvhhmHvKMsw==}
-
-  remark-smartypants@3.0.2:
-    resolution: {integrity: sha512-ILTWeOriIluwEvPjv67v7Blgrcx+LZOkAUVtKI3putuhlZm84FnqDORNXPPm+HY3NdZOMhyDwZ1E+eZB/Df5dA==}
-    engines: {node: '>=16.0.0'}
-
-  remark-stringify@11.0.0:
-    resolution: {integrity: sha512-1OSmLd3awB/t8qdoEOMazZkNsfVTeY4fTsgzcQFdXNq8ToTN4ZGwrMnlda4K6smTFKD+GRV6O48i6Z4iKgPPpw==}
-
-  require-directory@2.1.1:
-    resolution: {integrity: sha512-fGxEI7+wsG9xrvdjsrlmL22OMTTiHRwAMroiEeMgq8gzoLC/PQr7RsRDSTLUg/bZAZtF+TVIkHc6/4RIKrui+Q==}
-    engines: {node: '>=0.10.0'}
-
-  require-from-string@2.0.2:
-    resolution: {integrity: sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==}
-    engines: {node: '>=0.10.0'}
-
-  resolve-from@5.0.0:
-    resolution: {integrity: sha512-qYg9KP24dD5qka9J47d0aVky0N+b4fTU89LN9iDnjB5waksiC49rvMB0PrUJQGoTmH50XPiqOvAjDfaijGxYZw==}
-    engines: {node: '>=8'}
-
-  resolve-pkg-maps@1.0.0:
-    resolution: {integrity: sha512-seS2Tj26TBVOC2NIc2rOe2y2ZO7efxITtLZcGSOnHHNOQ7CkiUBfw0Iw2ck6xkIhPwLhKNLS8BO+hEpngQlqzw==}
-
-  resolve@1.22.11:
-    resolution: {integrity: sha512-RfqAvLnMl313r7c9oclB1HhUEAezcpLjz95wFH4LVuhk9JF/r22qmVP9AMmOU4vMX7Q8pN8jwNg/CSpdFnMjTQ==}
-    engines: {node: '>= 0.4'}
-    hasBin: true
-
-  retext-latin@4.0.0:
-    resolution: {integrity: sha512-hv9woG7Fy0M9IlRQloq/N6atV82NxLGveq+3H2WOi79dtIYWN8OaxogDm77f8YnVXJL2VD3bbqowu5E3EMhBYA==}
-
-  retext-smartypants@6.2.0:
-    resolution: {integrity: sha512-kk0jOU7+zGv//kfjXEBjdIryL1Acl4i9XNkHxtM7Tm5lFiCog576fjNC9hjoR7LTKQ0DsPWy09JummSsH1uqfQ==}
-
-  retext-stringify@4.0.0:
-    resolution: {integrity: sha512-rtfN/0o8kL1e+78+uxPTqu1Klt0yPzKuQ2BfWwwfgIUSayyzxpM1PJzkKt4V8803uB9qSy32MvI7Xep9khTpiA==}
-
-  retext@9.0.0:
-    resolution: {integrity: sha512-sbMDcpHCNjvlheSgMfEcVrZko3cDzdbe1x/e7G66dFp0Ff7Mldvi2uv6JkJQzdRcvLYE8CA8Oe8siQx8ZOgTcA==}
-
-  retry@0.12.0:
-    resolution: {integrity: sha512-9LkiTwjUh6rT555DtE9rTX+BKByPfrMzEAtnlEtdEwr3Nkffwiihqe2bWADg+OQRjt9gl6ICdmB/ZFDCGAtSow==}
-    engines: {node: '>= 4'}
-
-  retry@0.13.1:
-    resolution: {integrity: sha512-XQBQ3I8W1Cge0Seh+6gjj03LbmRFWuoszgK9ooCpwYIrhhoO80pfq4cUkU5DkknwfOfFteRwlZ56PYOGYyFWdg==}
-    engines: {node: '>= 4'}
-
-  reusify@1.1.0:
-    resolution: {integrity: sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==}
-    engines: {iojs: '>=1.0.0', node: '>=0.10.0'}
-
-  ripemd160@2.0.3:
-    resolution: {integrity: sha512-5Di9UC0+8h1L6ZD2d7awM7E/T4uA1fJRlx6zk/NvdCCVEoAnFqvHmCuNeIKoCeIixBX/q8uM+6ycDvF8woqosA==}
-    engines: {node: '>= 0.8'}
-
-  robust-predicates@3.0.3:
-    resolution: {integrity: sha512-NS3levdsRIUOmiJ8FZWCP7LG3QpJyrs/TE0Zpf1yvZu8cAJJ6QMW92H1c7kWpdIHo8RvmLxN/o2JXTKHp74lUA==}
-
-  rollup@4.60.1:
-    resolution: {integrity: sha512-VmtB2rFU/GroZ4oL8+ZqXgSA38O6GR8KSIvWmEFv63pQ0G6KaBH9s07PO8XTXP4vI+3UJUEypOfjkGfmSBBR0w==}
-    engines: {node: '>=18.0.0', npm: '>=8.0.0'}
-    hasBin: true
-
-  roughjs@4.6.6:
-    resolution: {integrity: sha512-ZUz/69+SYpFN/g/lUlo2FXcIjRkSu3nDarreVdGGndHEBJ6cXPdKguS8JGxwj5HA5xIbVKSmLgr5b3AWxtRfvQ==}
-
-  router@2.2.0:
-    resolution: {integrity: sha512-nLTrUKm2UyiL7rlhapu/Zl45FwNgkZGaCpZbIHajDYgwlJCOzLSk+cIPAnsEqV955GjILJnKbdQC1nVPz+gAYQ==}
-    engines: {node: '>= 18'}
-
-  run-parallel@1.2.0:
-    resolution: {integrity: sha512-5l4VyZR86LZ/lDxZTR6jqL8AFE2S0IFLMP26AbjsLVADxHdhB/c0GUsH+y39UfCi3dzz8OlQuPmnaJOMoDHQBA==}
-
-  rw@1.3.3:
-    resolution: {integrity: sha512-PdhdWy89SiZogBLaw42zdeqtRJ//zFd2PgQavcICDUgJT5oW10QCRKbJ6bg4r0/UY2M6BWd5tkxuGFRvCkgfHQ==}
-
-  safe-buffer@5.1.2:
-    resolution: {integrity: sha512-Gd2UZBJDkXlY7GbJxfsE8/nvKkUEU1G38c1siN6QP6a9PT9MmHB8GnpscSmMJSoF8LOIrt8ud/wPtojys4G6+g==}
-
-  safe-buffer@5.2.1:
-    resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
-
-  safe-regex-test@1.1.0:
-    resolution: {integrity: sha512-x/+Cz4YrimQxQccJf5mKEbIa1NzeCRNI5Ecl/ekmlYaampdNLPalVyIcCZNNH3MvmqBugV5TMYZXv0ljslUlaw==}
-    engines: {node: '>= 0.4'}
-
-  safe-stable-stringify@2.5.0:
-    resolution: {integrity: sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==}
-    engines: {node: '>=10'}
-
-  safer-buffer@2.1.2:
-    resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
-
-  sandbox-agent@0.4.2:
-    resolution: {integrity: sha512-fH6WDQEaIrgiu93LxZcy+4Dx+t+/cslu+hzXImDyUlsaL6jV2jIv4fdxELkALlo7uzyEDVK9lmqs9qy65RHwBQ==}
-    peerDependencies:
-      '@cloudflare/sandbox': '>=0.1.0'
-      '@daytonaio/sdk': '>=0.12.0'
-      '@e2b/code-interpreter': '>=1.0.0'
-      '@fly/sprites': '>=0.0.1'
-      '@vercel/sandbox': '>=0.1.0'
-      computesdk: '>=0.1.0'
-      dockerode: '>=4.0.0'
-      get-port: '>=7.0.0'
-      modal: '>=0.1.0'
-    peerDependenciesMeta:
-      '@cloudflare/sandbox':
-        optional: true
-      '@daytonaio/sdk':
-        optional: true
-      '@e2b/code-interpreter':
-        optional: true
-      '@fly/sprites':
-        optional: true
-      '@vercel/sandbox':
-        optional: true
-      computesdk:
-        optional: true
-      dockerode:
-        optional: true
-      get-port:
-        optional: true
-      modal:
-        optional: true
-
-  sax@1.6.0:
-    resolution: {integrity: sha512-6R3J5M4AcbtLUdZmRv2SygeVaM7IhrLXu9BmnOGmmACak8fiUtOsYNWUS4uK7upbmHIBbLBeFeI//477BKLBzA==}
-    engines: {node: '>=11.0.0'}
-
-  scheduler@0.27.0:
-    resolution: {integrity: sha512-eNv+WrVbKu1f3vbYJT/xtiF5syA5HPIMtf9IgY/nKg0sWqzAUEvqY/xm7OcZc/qafLx/iO9FgOmeSAp4v5ti/Q==}
-
-  secure-json-parse@4.1.0:
-    resolution: {integrity: sha512-l4KnYfEyqYJxDwlNVyRfO2E4NTHfMKAWdUuA8J0yve2Dz/E/PdBepY03RvyJpssIpRFwJoCD55wA+mEDs6ByWA==}
-
-  semver@6.3.1:
-    resolution: {integrity: sha512-BR7VvDCVHO+q2xBEWskxS6DJE1qRnb7DxzUrogb71CWoSficBxYsiAGd+Kl0mmq/MprG9yArRkyrQxTO6XjMzA==}
-    hasBin: true
-
-  semver@7.7.4:
-    resolution: {integrity: sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==}
-    engines: {node: '>=10'}
-    hasBin: true
-
-  semver@7.8.5:
-    resolution: {integrity: sha512-Y7/KDsb8LjooZpwaqGyulO6DQlksgCncchHGk+sZIY4SBvUocMBEFH5Ur1fI4dV+Jvl0w6cjvucaIi40puRioA==}
-    engines: {node: '>=10'}
-    hasBin: true
-
-  send@1.2.1:
-    resolution: {integrity: sha512-1gnZf7DFcoIcajTjTwjwuDjzuz4PPcY2StKPlsGAQ1+YH20IRVrBaXSWmdjowTJ6u8Rc01PoYOGHXfP1mYcZNQ==}
-    engines: {node: '>= 18'}
-
-  serve-static@2.2.1:
-    resolution: {integrity: sha512-xRXBn0pPqQTVQiC8wyQrKs2MOlX24zQ0POGaj0kultvoOCstBQM5yvOhAVSUwOMjQtTvsPWoNCHfPGwaaQJhTw==}
-    engines: {node: '>= 18'}
-
-  set-cookie-parser@2.7.2:
-    resolution: {integrity: sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==}
-
-  set-function-length@1.2.2:
-    resolution: {integrity: sha512-pgRc4hJ4/sNjWCSS9AmnS40x3bNMDTknHgL5UaMBTMyJnU90EgWh1Rz+MC9eFu4BuN/UwZjKQuY/1v3rM7HMfg==}
-    engines: {node: '>= 0.4'}
-
-  setimmediate@1.0.5:
-    resolution: {integrity: sha512-MATJdZp8sLqDl/68LfQmbP8zKPLQNV6BIZoIgrscFDQ+RsvK/BxeDQOgyxKKoh0y/8h3BqVFnCqQ/gd+reiIXA==}
-
-  setprototypeof@1.2.0:
-    resolution: {integrity: sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==}
-
-  sha.js@2.4.12:
-    resolution: {integrity: sha512-8LzC5+bvI45BjpfXU8V5fdU2mfeKiQe1D1gIMn7XUlF3OTUrpdJpPPH4EMAnF0DsHHdSZqCdSss5qCmJKuiO3w==}
-    engines: {node: '>= 0.10'}
-    hasBin: true
-
-  sharp@0.33.5:
-    resolution: {integrity: sha512-haPVm1EkS9pgvHrQ/F3Xy+hgcuMV0Wm9vfIBSiwZ05k+xgb0PkBQpGsAA/oWdDobNaZTH5ppvHtzCFbnSEwHVw==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-
-  sharp@0.34.5:
-    resolution: {integrity: sha512-Ou9I5Ft9WNcCbXrU9cMgPBcCK8LiwLqcbywW3t4oDV37n1pzpuNLsYiAV8eODnjbtQlSDwZ2cUEeQz4E54Hltg==}
-    engines: {node: ^18.17.0 || ^20.3.0 || >=21.0.0}
-
-  shebang-command@2.0.0:
-    resolution: {integrity: sha512-kHxr2zZpYtdmrN1qDjrrX/Z1rR1kG8Dx+gkpK1G4eXmvXswmcE1hTWBWYUzlraYw1/yZp6YuDY77YtvbN0dmDA==}
-    engines: {node: '>=8'}
-
-  shebang-regex@3.0.0:
-    resolution: {integrity: sha512-7++dFhtcx3353uBaq8DDR4NuxBetBzC7ZQOhmTQInHEd6bSrXdiEyzCvG07Z44UYdLShWUyXt5M/yhz8ekcb1A==}
-    engines: {node: '>=8'}
-
-  shiki@3.23.0:
-    resolution: {integrity: sha512-55Dj73uq9ZXL5zyeRPzHQsK7Nbyt6Y10k5s7OjuFZGMhpp4r/rsLBH0o/0fstIzX1Lep9VxefWljK/SKCzygIA==}
-
-  side-channel-list@1.0.0:
-    resolution: {integrity: sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==}
-    engines: {node: '>= 0.4'}
-
-  side-channel-list@1.0.1:
-    resolution: {integrity: sha512-mjn/0bi/oUURjc5Xl7IaWi/OJJJumuoJFQJfDDyO46+hBWsfaVM65TBHq2eoZBhzl9EchxOijpkbRC8SVBQU0w==}
-    engines: {node: '>= 0.4'}
-
-  side-channel-map@1.0.1:
-    resolution: {integrity: sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==}
-    engines: {node: '>= 0.4'}
-
-  side-channel-weakmap@1.0.2:
-    resolution: {integrity: sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==}
-    engines: {node: '>= 0.4'}
-
-  side-channel@1.1.0:
-    resolution: {integrity: sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==}
-    engines: {node: '>= 0.4'}
-
-  side-channel@1.1.1:
-    resolution: {integrity: sha512-6x6dK6zJdpTzF4sQeNYxwtvBzf6Eg4GtlesS94HOvTudUeyK2WXAaIfmDgsyslYrRBeFIlsi54AYsFGUuhmvrQ==}
-    engines: {node: '>= 0.4'}
-
-  siginfo@2.0.0:
-    resolution: {integrity: sha512-ybx0WO1/8bSBLEWXZvEd7gMW3Sn3JFlW3TvX1nREbDLRNQNaeNN8WK0meBwPdAaOI7TtRRRJn/Es1zhrrCHu7g==}
-
-  signal-exit@3.0.7:
-    resolution: {integrity: sha512-wnD2ZE+l+SPC/uoS0vXeE9L1+0wuaMqKlfz9AMUo38JsyLSBWSFcHR1Rri62LZc12vLr1gb3jl7iwQhgwpAbGQ==}
-
-  signal-exit@4.1.0:
-    resolution: {integrity: sha512-bzyZ1e88w9O1iNJbKnOlvYTrWPDl46O1bG0D3XInv+9tkPrxrN8jUUTiFlDkkmKWgn1M6CfIA13SuGqOa9Korw==}
-    engines: {node: '>=14'}
-
-  simple-swizzle@0.2.4:
-    resolution: {integrity: sha512-nAu1WFPQSMNr2Zn9PGSZK9AGn4t/y97lEm+MXTtUDwfP0ksAIX4nO+6ruD9Jwut4C49SB1Ws+fbXsm/yScWOHw==}
-
-  sisteransi@1.0.5:
-    resolution: {integrity: sha512-bLGGlR1QxBcynn2d5YmDX4MGjlZvy2MRBDRNHLJ8VI6l6+9FUiyTFNJ0IveOSP0bcXgVDPRcfGqA0pjaqUpfVg==}
-
-  sitemap@9.0.1:
-    resolution: {integrity: sha512-S6hzjGJSG3d6if0YoF5kTyeRJvia6FSTBroE5fQ0bu1QNxyJqhhinfUsXi9fH3MgtXODWvwo2BDyQSnhPQ88uQ==}
-    engines: {node: '>=20.19.5', npm: '>=10.8.2'}
-    hasBin: true
-
-  smart-buffer@4.2.0:
-    resolution: {integrity: sha512-94hK0Hh8rPqQl2xXc3HsaBoOXKV20MToPkcXvwbISWLEs+64sBq5kFgn2kJDHb1Pry9yrP0dxrCI9RRci7RXKg==}
-    engines: {node: '>= 6.0.0', npm: '>= 3.0.0'}
-
-  smol-toml@1.6.1:
-    resolution: {integrity: sha512-dWUG8F5sIIARXih1DTaQAX4SsiTXhInKf1buxdY9DIg4ZYPZK5nGM1VRIYmEbDbsHt7USo99xSLFu5Q1IqTmsg==}
-    engines: {node: '>= 18'}
-
-  socks-proxy-agent@8.0.5:
-    resolution: {integrity: sha512-HehCEsotFqbPW9sJ8WVYB6UbmIMv7kUUORIF2Nncq4VQvBfNBLibW9YZR5dlYCSUhwcD628pRllm7n+E+YTzJw==}
-    engines: {node: '>= 14'}
-
-  socks@2.8.9:
-    resolution: {integrity: sha512-LJhUYUvItdQ0LkJTmPeaEObWXAqFyfmP85x0tch/ez9cahmhlBBLbIqDFnvBnUJGagb0JbIQrkBs1wJ+yRYpEw==}
-    engines: {node: '>= 10.0.0', npm: '>= 3.0.0'}
-
-  sonic-boom@4.2.1:
-    resolution: {integrity: sha512-w6AxtubXa2wTXAUsZMMWERrsIRAdrK0Sc+FUytWvYAhBJLyuI4llrMIC1DtlNSdI99EI86KZum2MMq3EAZlF9Q==}
-
-  sonner@1.7.4:
-    resolution: {integrity: sha512-DIS8z4PfJRbIyfVFDVnK9rO3eYDtse4Omcm6bt0oEr5/jtLgysmjuBl1frJ9E/EQZrFmKx2A8m/s5s9CRXIzhw==}
-    peerDependencies:
-      react: ^18.0.0 || ^19.0.0 || ^19.0.0-rc
-      react-dom: ^18.0.0 || ^19.0.0 || ^19.0.0-rc
-
-  source-map-js@1.2.1:
-    resolution: {integrity: sha512-UXWMKhLOwVKb728IUtQPXxfYU+usdybtUrK/8uGE8CQMvrhOpwvzDBwj0QhSL7MQc7vIsISBG8VQ8+IDQxpfQA==}
-    engines: {node: '>=0.10.0'}
-
-  source-map@0.6.1:
-    resolution: {integrity: sha512-UjgapumWlbMhkBgzT7Ykc5YXUT46F0iKu8SGXq0bcwP5dz/h0Plj6enJqjz1Zbq2l5WaqYnrVbwWOWMyF3F47g==}
-    engines: {node: '>=0.10.0'}
-
-  source-map@0.7.6:
-    resolution: {integrity: sha512-i5uvt8C3ikiWeNZSVZNWcfZPItFQOsYTUAOkcUPGd8DqDy1uOUikjt5dG+uRlwyvR108Fb9DOd4GvXfT0N2/uQ==}
-    engines: {node: '>= 12'}
-
-  space-separated-tokens@2.0.2:
-    resolution: {integrity: sha512-PEGlAwrG8yXGXRjW32fGbg66JAlOAwbObuqVoJpv/mRgoWDQfgH1wDPvtzWyUSNAXBGSk8h755YDbbcEy3SH2Q==}
-
-  split-ca@1.0.1:
-    resolution: {integrity: sha512-Q5thBSxp5t8WPTTJQS59LrGqOZqOsrhDGDVm8azCqIBjSBd7nd9o2PM+mDulQQkh8h//4U6hFZnc/mul8t5pWQ==}
-
-  split2@4.2.0:
-    resolution: {integrity: sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==}
-    engines: {node: '>= 10.x'}
-
-  ssh2@1.17.0:
-    resolution: {integrity: sha512-wPldCk3asibAjQ/kziWQQt1Wh3PgDFpC0XpwclzKcdT1vql6KeYxf5LIt4nlFkUeR8WuphYMKqUA56X4rjbfgQ==}
-    engines: {node: '>=10.16.0'}
-
-  stackback@0.0.2:
-    resolution: {integrity: sha512-1XMJE5fQo1jGH6Y/7ebnwPOBEkIEnT4QF32d5R1+VXdXveM0IBMJt8zfaxX1P3QhVwrYe+576+jkANtSS2mBbw==}
-
-  statuses@2.0.2:
-    resolution: {integrity: sha512-DvEy55V3DB7uknRo+4iOGT5fP1slR8wQohVdknigZPMpMstaKJQWhwiYBACJE3Ul2pTnATihhBYnRhZQHGBiRw==}
-    engines: {node: '>= 0.8'}
-
-  std-env@3.10.0:
-    resolution: {integrity: sha512-5GS12FdOZNliM5mAOxFRg7Ir0pWz8MdpYm6AY6VPkGpbA7ZzmbzNcBJQ0GPvvyWgcY7QAhCgf9Uy89I03faLkg==}
-
-  stream-browserify@3.0.0:
-    resolution: {integrity: sha512-H73RAHsVBapbim0tU2JwwOiXUj+fikfiaoYAKHF3VJfA0pe2BCzkhAHBlLG6REzE+2WNZcxOXjK7lkso+9euLA==}
-
-  stream-http@3.2.0:
-    resolution: {integrity: sha512-Oq1bLqisTyK3TSCXpPbT4sdeYNdmyZJv1LxpEm2vu1ZhK89kSE5YXwZc3cWk0MagGaKriBh9mCFbVGtO+vY29A==}
-
-  stream-replace-string@2.0.0:
-    resolution: {integrity: sha512-TlnjJ1C0QrmxRNrON00JvaFFlNh5TTG00APw23j74ET7gkQpTASi6/L2fuiav8pzK715HXtUeClpBTw2NPSn6w==}
-
-  streamx@2.28.0:
-    resolution: {integrity: sha512-1Yowhzjf0ivGMrTIkY9hav5TxobO9qIVqUE41fiCGMGgc3CLlf4MY+9AHmZqBWgDTue0fY9zWjYFVyf6Diuobw==}
-
-  string-width@4.2.3:
-    resolution: {integrity: sha512-wKyQRQpjJ0sIp62ErSZdGsjMJWsap5oRNihHhu6G7JVO/9jIB6UyevL+tXuOqrng8j/cxKTWyWUwvSTriiZz/g==}
-    engines: {node: '>=8'}
-
-  string-width@5.1.2:
-    resolution: {integrity: sha512-HnLOCR3vjcY8beoNLtcjZ5/nxn2afmME6lhrDrebokqMap+XbeW8n9TXpPDOqdGK5qcI3oT0GKTW6wC7EMiVqA==}
-    engines: {node: '>=12'}
-
-  string-width@7.2.0:
-    resolution: {integrity: sha512-tsaTIkKW9b4N+AEj+SVA+WhJzV7/zMhcSu78mLKWSk7cXMOSHsBKFWUs0fWwq8QyK3MgJBQRX6Gbi4kYbdvGkQ==}
-    engines: {node: '>=18'}
-
-  string_decoder@1.1.1:
-    resolution: {integrity: sha512-n/ShnvDi6FHbbVfviro+WojiFzv+s8MPMHBczVePfUpDJLwoLT0ht1l4YwBCbi8pJAveEEdnkHyPyTP/mzRfwg==}
-
-  string_decoder@1.3.0:
-    resolution: {integrity: sha512-hkRX8U1WjJFd8LsDJ2yQ/wWWxaopEsABU1XfkM8A+j0+85JAGppt16cr1Whg6KIbb4okU6Mql6BOj+uup/wKeA==}
-
-  stringify-entities@4.0.4:
-    resolution: {integrity: sha512-IwfBptatlO+QCJUo19AqvrPNqlVMpW9YEL2LIVY+Rpv2qsjCGxaDLNRgeGsQWJhfItebuJhsGSLjaBbNSQ+ieg==}
-
-  strip-ansi@6.0.1:
-    resolution: {integrity: sha512-Y38VPSHcqkFrCpFnQ9vuSXmquuv5oXOKpGeT6aGrr3o3Gc9AlVa6JBfUSOCnbxGGZF+/0ooI7KrPuUSztUdU5A==}
-    engines: {node: '>=8'}
-
-  strip-ansi@7.2.0:
-    resolution: {integrity: sha512-yDPMNjp4WyfYBkHnjIRLfca1i6KMyGCtsVgoKe/z1+6vukgaENdgGBZt+ZmKPc4gavvEZ5OgHfHdrazhgNyG7w==}
-    engines: {node: '>=12'}
-
-  strip-final-newline@3.0.0:
-    resolution: {integrity: sha512-dOESqjYr96iWYylGObzd39EuNTa5VJxyvVAEm5Jnh7KGo75V43Hk1odPQkNDyXNmUR6k+gEiDVXnjB8HJ3crXw==}
-    engines: {node: '>=12'}
-
-  strip-json-comments@5.0.3:
-    resolution: {integrity: sha512-1tB5mhVo7U+ETBKNf92xT4hrQa3pm0MZ0PQvuDnWgAAGHDsfp4lPSpiS6psrSiet87wyGPh9ft6wmhOMQ0hDiw==}
-    engines: {node: '>=14.16'}
-
-  strtok3@10.3.5:
-    resolution: {integrity: sha512-ki4hZQfh5rX0QDLLkOCj+h+CVNkqmp/CMf8v8kZpkNVK6jGQooMytqzLZYUVYIZcFZ6yDB70EfD8POcFXiF5oA==}
-    engines: {node: '>=18'}
-
-  style-mod@4.1.3:
-    resolution: {integrity: sha512-i/n8VsZydrugj3Iuzll8+x/00GH2vnYsk1eomD8QiRrSAeW6ItbCQDtfXCeJHd0iwiNagqjQkvpvREEPtW3IoQ==}
-
-  style-to-js@1.1.21:
-    resolution: {integrity: sha512-RjQetxJrrUJLQPHbLku6U/ocGtzyjbJMP9lCNK7Ag0CNh690nSH8woqWH9u16nMjYBAok+i7JO1NP2pOy8IsPQ==}
-
-  style-to-object@1.0.14:
-    resolution: {integrity: sha512-LIN7rULI0jBscWQYaSswptyderlarFkjQ+t79nzty8tcIAceVomEVlLzH5VP4Cmsv6MtKhs7qaAiwlcp+Mgaxw==}
-
-  stylis@4.4.0:
-    resolution: {integrity: sha512-5Z9ZpRzfuH6l/UAvCPAPUo3665Nk2wLaZU3x+TLHKVzIz33+sbJqbtrYoC3KD4/uVOr2Zp+L0LySezP9OHV9yA==}
-
-  sucrase@3.35.1:
-    resolution: {integrity: sha512-DhuTmvZWux4H1UOnWMB3sk0sbaCVOoQZjv8u1rDoTV0HTdGem9hkAZtl4JZy8P2z4Bg0nT+YMeOFyVr4zcG5Tw==}
-    engines: {node: '>=16 || 14 >=14.17'}
-    hasBin: true
-
-  supports-color@7.2.0:
-    resolution: {integrity: sha512-qpCAvRl9stuOHveKsn7HncJRvv501qIacKzQlO/+Lwxc9+0q2wLyv4Dfvt80/DPn2pqOBsJdDiogXGR9+OvwRw==}
-    engines: {node: '>=8'}
-
-  supports-color@8.1.1:
-    resolution: {integrity: sha512-MpUEN2OodtUzxvKQl72cUF7RQ5EiHsGvSsVG0ia9c5RbWGL2CI4C7EpPS8UTBIplnlzZiNuV56w+FuNxy3ty2Q==}
-    engines: {node: '>=10'}
-
-  supports-preserve-symlinks-flag@1.0.0:
-    resolution: {integrity: sha512-ot0WnXS9fgdkgIcePe6RHNk1WA8+muPa6cSjeR3V8K27q9BB1rTE3R1p7Hv0z1ZyAc8s6Vvv8DIyWf681MAt0w==}
-    engines: {node: '>= 0.4'}
-
-  svgo@4.0.1:
-    resolution: {integrity: sha512-XDpWUOPC6FEibaLzjfe0ucaV0YrOjYotGJO1WpF0Zd+n6ZGEQUsSugaoLq9QkEZtAfQIxT42UChcssDVPP3+/w==}
-    engines: {node: '>=16'}
-    hasBin: true
-
-  tabbable@6.5.0:
-    resolution: {integrity: sha512-wieBHXygIm7OyQOu5hQlkk62/WyCFYGlWg7L6/ZCUZwx0o398Zkn4pVmMyfYhfMG8kGrj/Krt8eIk6UKC6VzwA==}
-
-  tailwind-merge@2.6.1:
-    resolution: {integrity: sha512-Oo6tHdpZsGpkKG88HJ8RR1rg/RdnEkQEfMoEk2x1XRI3F1AxeU+ijRXpiVUF4UbLfcxxRGw6TbUINKYdWVsQTQ==}
-
-  tailwindcss-animate@1.0.7:
-    resolution: {integrity: sha512-bl6mpH3T7I3UFxuvDEXLxy/VuFxBk5bbzplh7tXI68mwMokNYd1t9qPBHlnyTwfa4JGC4zP516I1hYYtQ/vspA==}
-    peerDependencies:
-      tailwindcss: '>=3.0.0 || insiders'
-
-  tailwindcss@3.4.19:
-    resolution: {integrity: sha512-3ofp+LL8E+pK/JuPLPggVAIaEuhvIz4qNcf3nA1Xn2o/7fb7s/TYpHhwGDv1ZU3PkBluUVaF8PyCHcm48cKLWQ==}
-    engines: {node: '>=14.0.0'}
-    hasBin: true
-
-  tar-fs@2.1.4:
-    resolution: {integrity: sha512-mDAjwmZdh7LTT6pNleZ05Yt65HC3E+NiQzl672vQG38jIrehtJk/J3mNwIg+vShQPcLF/LV7CMnDW6vjj6sfYQ==}
-
-  tar-stream@2.2.0:
-    resolution: {integrity: sha512-ujeqbceABgwMZxEJnk2HDY2DlnUZ+9oEcb1KzTVfYHio0UE6dG71n60d8D2I4qNvleWrrXpmjpt7vZeF1LnMZQ==}
-    engines: {node: '>=6'}
-
-  tar-stream@3.2.0:
-    resolution: {integrity: sha512-ojzvCvVaNp6aOTFmG7jaRD0meowIAuPc3cMMhSgKiVWws1GyHbGd/xvnyuRKcKlMpt3qvxx6r0hreCNITP9hIg==}
-
-  teex@1.0.1:
-    resolution: {integrity: sha512-eYE6iEI62Ni1H8oIa7KlDU6uQBtqr4Eajni3wX7rpfXD8ysFx8z0+dri+KWEPWpBsxXfxu58x/0jvTVT1ekOSg==}
-
-  text-decoder@1.2.7:
-    resolution: {integrity: sha512-vlLytXkeP4xvEq2otHeJfSQIRyWxo/oZGEbXrtEEF9Hnmrdly59sUbzZ/QgyWuLYHctCHxFF4tRQZNQ9k60ExQ==}
-
-  thenify-all@1.6.0:
-    resolution: {integrity: sha512-RNxQH/qI8/t3thXJDwcstUO4zeqo64+Uy/+sNVRBx4Xn2OX+OZ9oP+iJnNFqplFra2ZUVeKCSa2oVWi3T4uVmA==}
-    engines: {node: '>=0.8'}
-
-  thenify@3.3.1:
-    resolution: {integrity: sha512-RVZSIV5IG10Hk3enotrhvz0T9em6cyHBLkH/YAZuKqd8hRkKhSfCGIcP2KUY0EPxndzANBmNllzWPwak+bheSw==}
-
-  thread-stream@3.2.0:
-    resolution: {integrity: sha512-zLBvqpwr4Esa0kRjcrzGU6zL25lePWaCLMx0RQFrmteozIfeNdaMLpG5U7PeHzvlFkAWaRKA9/KVW4F60iB+qw==}
-
-  timers-browserify@2.0.12:
-    resolution: {integrity: sha512-9phl76Cqm6FhSX9Xe1ZUAMLtm1BLkKj2Qd5ApyWkXzsMRaA7dgr81kf4wJmQf/hAvg8EEyJxDo3du/0KlhPiKQ==}
-    engines: {node: '>=0.6.0'}
-
-  tiny-inflate@1.0.3:
-    resolution: {integrity: sha512-pkY1fj1cKHb2seWDy0B16HeWyczlJA9/WW3u3c4z/NiWDsO3DOU5D7nhTLE9CF0yXv/QZFY7sEJmj24dK+Rrqw==}
-
-  tiny-invariant@1.3.3:
-    resolution: {integrity: sha512-+FbBPE1o9QAYvviau/qC5SE3caw21q3xkvWKBtja5vgqOWIHHJ3ioaq1VPfn/Szqctz2bU/oYeKd9/z5BL+PVg==}
-
-  tinybench@2.9.0:
-    resolution: {integrity: sha512-0+DUvqWMValLmha6lr4kD8iAMK1HzV0/aKnCtWb9v9641TnP/MFb7Pc2bxoxQjTXAErryXVgUOfv2YqNllqGeg==}
-
-  tinyexec@0.3.2:
-    resolution: {integrity: sha512-KQQR9yN7R5+OSwaK0XQoj22pwHoTlgYqmUscPYoknOoWCWfj/5/ABTMRi69FrKU5ffPVh5QcFikpWJI/P1ocHA==}
-
-  tinyexec@1.2.4:
-    resolution: {integrity: sha512-SHf/r48b7vOrjve9PxJo3MN5v5yuyjHvdUcrQffT3WXMUfnGmHDVbC4k3sHJaJTgZCwpUplIaAo5ANtMyp3YHg==}
-    engines: {node: '>=18'}
-
-  tinyglobby@0.2.15:
-    resolution: {integrity: sha512-j2Zq4NyQYG5XMST4cbs02Ak8iJUdxRM0XI5QyxXuZOzKOINmWurp3smXu3y5wDcJrptwpSjgXHzIQxR0omXljQ==}
-    engines: {node: '>=12.0.0'}
-
-  tinyglobby@0.2.17:
-    resolution: {integrity: sha512-wXR/dYpcqKmfWpEdZjiKJOwCNFndD0DMnrW/cYjVGttEkBfVgcLFHoNrlj47mjOVic9yyNu65alsgF4NQyTa2g==}
-    engines: {node: '>=12.0.0'}
-
-  tinypool@1.1.1:
-    resolution: {integrity: sha512-Zba82s87IFq9A9XmjiX5uZA/ARWDrB03OHlq+Vw1fSdt0I+4/Kutwy8BP4Y/y/aORMo61FQ0vIb5j44vSo5Pkg==}
-    engines: {node: ^18.0.0 || >=20.0.0}
-
-  tinyrainbow@1.2.0:
-    resolution: {integrity: sha512-weEDEq7Z5eTHPDh4xjX789+fHfF+P8boiFB+0vbWzpbnbsEr/GRaohi/uMKxg8RZMXnl1ItAi/IUHWMsjDV7kQ==}
-    engines: {node: '>=14.0.0'}
-
-  tinyspy@3.0.2:
-    resolution: {integrity: sha512-n1cw8k1k0x4pgA2+9XrOkFydTerNcJ1zWCO5Nn9scWHTD+5tp8dghT2x1uduQePZTZgd3Tupf+x9BxJjeJi77Q==}
-    engines: {node: '>=14.0.0'}
-
-  tldts-core@7.4.6:
-    resolution: {integrity: sha512-TkQNGJIhlEphpHCjKodMTSe23egUZr/g+flI2qkLgiJ/maAzSgXypSLRTNH3nCmqgayEmtcJBiLcfODSAr1xoA==}
-
-  tldts@7.4.6:
-    resolution: {integrity: sha512-rbP0Gyx8b3Ae9yO//CU2wbSnQNoQ66m1nJdSbSHmnwKwzkkz/u8mERYU8T2rmlmy+bJvRNn84yNCW8gYqox44Q==}
-    hasBin: true
-
-  tm-themes@1.12.2:
-    resolution: {integrity: sha512-DDcp7Feso0zvb8McGdChR1elzS0kWYcaGjxcz1R3L88xv3hvN9wP3GvOagj5JKexFrPneiGOoU5AZELXTWk4oA==}
-
-  to-buffer@1.2.2:
-    resolution: {integrity: sha512-db0E3UJjcFhpDhAF4tLo03oli3pwl3dbnzXOUIlRKrp+ldk/VUxzpWYZENsw2SZiuBjHAk7DfB0VU7NKdpb6sw==}
-    engines: {node: '>= 0.4'}
-
-  to-regex-range@5.0.1:
-    resolution: {integrity: sha512-65P7iz6X5yEr1cwcgvQxbbIw7Uk3gOy5dIdtZ4rDveLqhrdJP+Li/Hx6tyK0NEb+2GCyneCMJiGqrADCSNk8sQ==}
-    engines: {node: '>=8.0'}
-
-  toidentifier@1.0.1:
-    resolution: {integrity: sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==}
-    engines: {node: '>=0.6'}
-
-  token-types@6.1.2:
-    resolution: {integrity: sha512-dRXchy+C0IgK8WPC6xvCHFRIWYUbqqdEIKPaKo/AcTUNzwLTK6AH7RjdLWsEZcAN/TBdtfUw3PYEgPr5VPr6ww==}
-    engines: {node: '>=14.16'}
-
-  tough-cookie@6.0.1:
-    resolution: {integrity: sha512-LktZQb3IeoUWB9lqR5EWTHgW/VTITCXg4D21M+lvybRVdylLrRMnqaIONLVb5mav8vM19m44HIcGq4qASeu2Qw==}
-    engines: {node: '>=16'}
-
-  tr46@0.0.3:
-    resolution: {integrity: sha512-N3WMsuqV66lT30CrXNbEjx4GEwlow3v6rr4mCcv6prnfwhS01rkgyFdjPNBYd9br7LpXV1+Emh01fHnq2Gdgrw==}
-
-  tree-kill@1.2.2:
-    resolution: {integrity: sha512-L0Orpi8qGpRG//Nd+H90vFB+3iHnue1zSSGmNOOCh1GLJ7rUKVwV2HvijphGQS2UmhUZewS9VgvxYIdgr+fG1A==}
-    hasBin: true
-
-  trim-lines@3.0.1:
-    resolution: {integrity: sha512-kRj8B+YHZCc9kQYdWfJB2/oUl9rA99qbowYYBtr4ui4mZyAQ2JpvVBd/6U2YloATfqBhBTSMhTpgBHtU0Mf3Rg==}
-
-  trough@2.2.0:
-    resolution: {integrity: sha512-tmMpK00BjZiUyVyvrBK7knerNgmgvcV/KLVyuma/SC+TQN167GrMRciANTz09+k3zW8L8t60jWO1GpfkZdjTaw==}
-
-  ts-algebra@2.0.0:
-    resolution: {integrity: sha512-FPAhNPFMrkwz76P7cdjdmiShwMynZYN6SgOujD1urY4oNm80Ou9oMdmbR45LotcKOXoy7wSmHkRFE6Mxbrhefw==}
-
-  ts-dedent@2.3.0:
-    resolution: {integrity: sha512-JfJeIHke7y2egdGGgRAvpCwYFUsHlM2gPcrVOxFkznt/4uzQ7HFmvE63iFHVLBJNDuyDOQgijDK/tXH/f6Msjg==}
-    engines: {node: '>=6.10'}
-
-  ts-interface-checker@0.1.13:
-    resolution: {integrity: sha512-Y/arvbn+rrz3JCKl9C4kVNfTfSm2/mEp5FSz5EsZSANGPSlQrpRI5M4PKF+mJnE52jOO90PnPSc3Ur3bTQw0gA==}
-
-  tsconfck@3.1.6:
-    resolution: {integrity: sha512-ks6Vjr/jEw0P1gmOVwutM3B7fWxoWBL2KRDb1JfqGVawBmO5UsvmWOQFGHBPl5yxYz4eERr19E6L7NMv+Fej4w==}
-    engines: {node: ^18 || >=20}
-    deprecated: unmaintained
-    hasBin: true
-    peerDependencies:
-      typescript: ^5.0.0
-    peerDependenciesMeta:
-      typescript:
-        optional: true
-
-  tslib@2.8.1:
-    resolution: {integrity: sha512-oJFu94HQb+KVduSUQL7wnpmqnfmLsOA/nAh6b6EH0wCEoK0/mPeXU6c3wKDV83MkOuHPRHtSXKKU99IBazS/2w==}
-
-  tsup@8.5.1:
-    resolution: {integrity: sha512-xtgkqwdhpKWr3tKPmCkvYmS9xnQK3m3XgxZHwSUjvfTjp7YfXe5tT3GgWi0F2N+ZSMsOeWeZFh7ZZFg5iPhing==}
-    engines: {node: '>=18'}
-    hasBin: true
-    peerDependencies:
-      '@microsoft/api-extractor': ^7.36.0
-      '@swc/core': ^1
-      postcss: ^8.4.12
-      typescript: '>=4.5.0'
-    peerDependenciesMeta:
-      '@microsoft/api-extractor':
-        optional: true
-      '@swc/core':
-        optional: true
-      postcss:
-        optional: true
-      typescript:
-        optional: true
-
-  tsx@4.21.0:
-    resolution: {integrity: sha512-5C1sg4USs1lfG0GFb2RLXsdpXqBSEhAaA/0kPL01wxzpMqLILNxIxIOKiILz+cdg/pLnOUxFYOR5yhHU666wbw==}
-    engines: {node: '>=18.0.0'}
-    hasBin: true
-
-  tty-browserify@0.0.1:
-    resolution: {integrity: sha512-C3TaO7K81YvjCgQH9Q1S3R3P3BtN3RIM8n+OvX4il1K1zgE8ZhI0op7kClgkxtutIE8hQrcrHBXvIheqKUUCxw==}
-
-  turbo@2.9.1:
-    resolution: {integrity: sha512-TO9du8MwLTAKoXcGezekh9cPJabJUb0+8KxtpMR6kXdRASrmJ8qXf2GkVbCREgzbMQakzfNcux9cZtxheDY4RQ==}
-    hasBin: true
-
-  tweetnacl@0.14.5:
-    resolution: {integrity: sha512-KXXFFdAbFXY4geFIwoyNK+f5Z1b7swfXABfL7HXCmoIWMKU3dmS26672A4EeQtDzLKy7SXmfBu51JolvEKwtGA==}
-
-  type-fest@0.21.3:
-    resolution: {integrity: sha512-t0rzBq87m3fVcduHDUFhKmyyX+9eo6WQjZvf51Ea/M0Q7+T374Jp1aUiyUl0GKxp8M/OETVHSDvmkyPgvX+X2w==}
-    engines: {node: '>=10'}
-
-  type-fest@4.41.0:
-    resolution: {integrity: sha512-TeTSQ6H5YHvpqVwBRcnLDCBnDOHWYu7IvGbHT6N8AOymcr9PJGjc1GTtiWZTYg0NCgYwvnYWEkVChQAr9bjfwA==}
-    engines: {node: '>=16'}
-
-  type-is@2.1.0:
-    resolution: {integrity: sha512-faYHw0anBbc/kWF3zFTEnxSFOAGUX9GFbOBthvDdLsIlEoWOFOtS0zgCiQYwIskL9iGXZL3kAXD8OoZ4GmMATA==}
-    engines: {node: '>= 18'}
-
-  typed-array-buffer@1.0.3:
-    resolution: {integrity: sha512-nAYYwfY3qnzX30IkA6AQZjVbtK6duGontcQm1WSG1MD94YLqK0515GNApXkoxKOWMusVssAHWLh9SeaoefYFGw==}
-    engines: {node: '>= 0.4'}
-
-  typedoc-plugin-markdown@4.12.0:
-    resolution: {integrity: sha512-eJDEMAfxCmede22c/Jw7d0FA13ggAQv+KkwQYKYCdqI02cin6Rc9QRwbG/7XvvHWinuFejySnZVUWDtvGk3Vbg==}
-    engines: {node: '>= 18'}
-    peerDependencies:
-      typedoc: 0.28.x
-
-  typedoc@0.28.19:
-    resolution: {integrity: sha512-wKh+lhdmMFivMlc6vRRcMGXeGEHGU2g8a2CkPTJjJlwRf1iXbimWIPcFolCqe4E0d/FRtGszpIrsp3WLpDB8Pw==}
-    engines: {node: '>= 18', pnpm: '>= 10'}
-    hasBin: true
-    peerDependencies:
-      typescript: 5.0.x || 5.1.x || 5.2.x || 5.3.x || 5.4.x || 5.5.x || 5.6.x || 5.7.x || 5.8.x || 5.9.x || 6.0.x
-
-  typescript@5.9.3:
-    resolution: {integrity: sha512-jl1vZzPDinLr9eUt3J/t7V6FgNEw9QjvBPdysz9KfQDD41fQrC2Y4vKQdiaUpFT4bXlb1RHhLpp8wtm6M5TgSw==}
-    engines: {node: '>=14.17'}
-    hasBin: true
-
-  typesense@2.1.0:
-    resolution: {integrity: sha512-a/IRTL+dRXlpRDU4UodyGj8hl5xBz3nKihVRd/KfSFAfFPGcpdX6lxIgwdXy3O6VLNNiEsN8YwIsPHQPVT0vNw==}
-    engines: {node: '>=18'}
-    peerDependencies:
-      '@babel/runtime': ^7.23.2
-
-  uc.micro@2.1.0:
-    resolution: {integrity: sha512-ARDJmphmdvUk6Glw7y9DQ2bFkKBHwQHLi2lsaH6PPmz/Ka9sFOBsBluozhDltWmnv9u/cF6Rt87znRTPV+yp/A==}
-
-  ufo@1.6.4:
-    resolution: {integrity: sha512-JFNbkD1Svwe0KvGi8GOeLcP4kAWQ609twvCdcHxq1oSL8svv39ZuSvajcD8B+5D0eL4+s1Is2D/O6KN3qcTeRA==}
-
-  uint8array-extras@1.5.0:
-    resolution: {integrity: sha512-rvKSBiC5zqCCiDZ9kAOszZcDvdAHwwIKJG33Ykj43OKcWsnmcBRL09YTU4nOeHZ8Y2a7l1MgTd08SBe9A8Qj6A==}
-    engines: {node: '>=18'}
-
-  ultrahtml@1.6.0:
-    resolution: {integrity: sha512-R9fBn90VTJrqqLDwyMph+HGne8eqY1iPfYhPzZrvKpIfwkWZbcYlfpsb8B9dTvBfpy1/hqAD7Wi8EKfP9e8zdw==}
-
-  uncrypto@0.1.3:
-    resolution: {integrity: sha512-Ql87qFHB3s/De2ClA9e0gsnS6zXG27SkTiSJwjCc9MebbfapQfuPzumMIUMi38ezPZVNFcHI9sUIepeQfw8J8Q==}
-
-  undici-types@5.26.5:
-    resolution: {integrity: sha512-JlCMO+ehdEIKqlFxk6IfVoAUVmgz7cU7zD/h9XZ0qzeosSHmUJVOzSQvvYSYWXkFXC+IfLKSIffhv0sVZup6pA==}
-
-  undici-types@6.21.0:
-    resolution: {integrity: sha512-iwDZqg0QAGrg9Rav5H4n0M64c3mkR59cJ6wQp+7C4nI0gsmExaedaYLNO44eT4AtBBwjbTiGPMlt2Md0T9H9JQ==}
-
-  undici-types@7.18.2:
-    resolution: {integrity: sha512-AsuCzffGHJybSaRrmr5eHr81mwJU3kjw6M+uprWvCXiNeN9SOGwQ3Jn8jb8m3Z6izVgknn1R0FTCEAP2QrLY/w==}
-
-  undici@7.24.6:
-    resolution: {integrity: sha512-Xi4agocCbRzt0yYMZGMA6ApD7gvtUFaxm4ZmeacWI4cZxaF6C+8I8QfofC20NAePiB/IcvZmzkJ7XPa471AEtA==}
-    engines: {node: '>=20.18.1'}
-
-  unified@11.0.5:
-    resolution: {integrity: sha512-xKvGhPWw3k84Qjh8bI3ZeJjqnyadK+GEFtazSfZv/rKeTkTjOJho6mFqh2SM96iIcZokxiOpg78GazTSg8+KHA==}
-
-  unifont@0.7.4:
-    resolution: {integrity: sha512-oHeis4/xl42HUIeHuNZRGEvxj5AaIKR+bHPNegRq5LV1gdc3jundpONbjglKpihmJf+dswygdMJn3eftGIMemg==}
-
-  unist-util-filter@5.0.1:
-    resolution: {integrity: sha512-pHx7D4Zt6+TsfwylH9+lYhBhzyhEnCXs/lbq/Hstxno5z4gVdyc2WEW0asfjGKPyG4pEKrnBv5hdkO6+aRnQJw==}
-
-  unist-util-find-after@5.0.0:
-    resolution: {integrity: sha512-amQa0Ep2m6hE2g72AugUItjbuM8X8cGQnFoHk0pGfrFeT9GZhzN5SW8nRsiGKK7Aif4CrACPENkA6P/Lw6fHGQ==}
-
-  unist-util-is@5.2.1:
-    resolution: {integrity: sha512-u9njyyfEh43npf1M+yGKDGVPbY/JWEemg5nH05ncKPfi+kBbKBJoTdsogMu33uhytuLlv9y0O7GH7fEdwLdLQw==}
-
-  unist-util-is@6.0.1:
-    resolution: {integrity: sha512-LsiILbtBETkDz8I9p1dQ0uyRUWuaQzd/cuEeS1hoRSyW5E5XGmTzlwY1OrNzzakGowI9Dr/I8HVaw4hTtnxy8g==}
-
-  unist-util-modify-children@4.0.0:
-    resolution: {integrity: sha512-+tdN5fGNddvsQdIzUF3Xx82CU9sMM+fA0dLgR9vOmT0oPT2jH+P1nd5lSqfCfXAw+93NhcXNY2qqvTUtE4cQkw==}
-
-  unist-util-position-from-estree@2.0.0:
-    resolution: {integrity: sha512-KaFVRjoqLyF6YXCbVLNad/eS4+OfPQQn2yOd7zF/h5T/CSL2v8NpN6a5TPvtbXthAGw5nG+PuTtq+DdIZr+cRQ==}
-
-  unist-util-position@5.0.0:
-    resolution: {integrity: sha512-fucsC7HjXvkB5R3kTCO7kUjRdrS0BJt3M/FPxmHMBOm8JQi2BsHAHFsy27E0EolP8rp0NzXsJ+jNPyDWvOJZPA==}
-
-  unist-util-remove-position@5.0.0:
-    resolution: {integrity: sha512-Hp5Kh3wLxv0PHj9m2yZhhLt58KzPtEYKQQ4yxfYFEO7EvHwzyDYnduhHnY1mDxoqr7VUwVuHXk9RXKIiYS1N8Q==}
-
-  unist-util-stringify-position@4.0.0:
-    resolution: {integrity: sha512-0ASV06AAoKCDkS2+xw5RXJywruurpbC4JZSm7nr7MOt1ojAzvyyaO+UxZf18j8FCF6kmzCZKcAgN/yu2gm2XgQ==}
-
-  unist-util-visit-children@3.0.0:
-    resolution: {integrity: sha512-RgmdTfSBOg04sdPcpTSD1jzoNBjt9a80/ZCzp5cI9n1qPzLZWF9YdvWGN2zmTumP1HWhXKdUWexjy/Wy/lJ7tA==}
-
-  unist-util-visit-parents@5.1.3:
-    resolution: {integrity: sha512-x6+y8g7wWMyQhL1iZfhIPhDAs7Xwbn9nRosDXl7qoPTSCy0yNxnKc+hWokFifWQIDGi154rdUqKvbCa4+1kLhg==}
-
-  unist-util-visit-parents@6.0.2:
-    resolution: {integrity: sha512-goh1s1TBrqSqukSc8wrjwWhL0hiJxgA8m4kFxGlQ+8FYQ3C/m11FcTs4YYem7V664AhHVvgoQLk890Ssdsr2IQ==}
-
-  unist-util-visit@4.1.2:
-    resolution: {integrity: sha512-MSd8OUGISqHdVvfY9TPhyK2VdUrPgxkUtWSuMHF6XAAFuL4LokseigBnZtPnJMu+FbynTkFNnFlyjxpVKujMRg==}
-
-  unist-util-visit@5.1.0:
-    resolution: {integrity: sha512-m+vIdyeCOpdr/QeQCu2EzxX/ohgS8KbnPDgFni4dQsfSCtpz8UqDyY5GjRru8PDKuYn7Fq19j1CQ+nJSsGKOzg==}
-
-  unpipe@1.0.0:
-    resolution: {integrity: sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==}
-    engines: {node: '>= 0.8'}
-
-  unstorage@1.17.5:
-    resolution: {integrity: sha512-0i3iqvRfx29hkNntHyQvJTpf5W9dQ9ZadSoRU8+xVlhVtT7jAX57fazYO9EHvcRCfBCyi5YRya7XCDOsbTgkPg==}
-    peerDependencies:
-      '@azure/app-configuration': ^1.8.0
-      '@azure/cosmos': ^4.2.0
-      '@azure/data-tables': ^13.3.0
-      '@azure/identity': ^4.6.0
-      '@azure/keyvault-secrets': ^4.9.0
-      '@azure/storage-blob': ^12.26.0
-      '@capacitor/preferences': ^6 || ^7 || ^8
-      '@deno/kv': '>=0.9.0'
-      '@netlify/blobs': ^6.5.0 || ^7.0.0 || ^8.1.0 || ^9.0.0 || ^10.0.0
-      '@planetscale/database': ^1.19.0
-      '@upstash/redis': ^1.34.3
-      '@vercel/blob': '>=0.27.1'
-      '@vercel/functions': ^2.2.12 || ^3.0.0
-      '@vercel/kv': ^1 || ^2 || ^3
-      aws4fetch: ^1.0.20
-      db0: '>=0.2.1'
-      idb-keyval: ^6.2.1
-      ioredis: ^5.4.2
-      uploadthing: ^7.4.4
-    peerDependenciesMeta:
-      '@azure/app-configuration':
-        optional: true
-      '@azure/cosmos':
-        optional: true
-      '@azure/data-tables':
-        optional: true
-      '@azure/identity':
-        optional: true
-      '@azure/keyvault-secrets':
-        optional: true
-      '@azure/storage-blob':
-        optional: true
-      '@capacitor/preferences':
-        optional: true
-      '@deno/kv':
-        optional: true
-      '@netlify/blobs':
-        optional: true
-      '@planetscale/database':
-        optional: true
-      '@upstash/redis':
-        optional: true
-      '@vercel/blob':
-        optional: true
-      '@vercel/functions':
-        optional: true
-      '@vercel/kv':
-        optional: true
-      aws4fetch:
-        optional: true
-      db0:
-        optional: true
-      idb-keyval:
-        optional: true
-      ioredis:
-        optional: true
-      uploadthing:
-        optional: true
-
-  update-browserslist-db@1.2.3:
-    resolution: {integrity: sha512-Js0m9cx+qOgDxo0eMiFGEueWztz+d4+M3rGlmKPT+T4IS/jP4ylw3Nwpu6cpTTP8R1MAC1kF4VbdLt3ARf209w==}
-    hasBin: true
-    peerDependencies:
-      browserslist: '>= 4.21.0'
-
-  url@0.11.4:
-    resolution: {integrity: sha512-oCwdVC7mTuWiPyjLUz/COz5TLk6wgp0RCsN+wHZ2Ekneac9w8uuV0njcbbie2ME+Vs+d6duwmYuR3HgQXs1fOg==}
-    engines: {node: '>= 0.4'}
-
-  use-callback-ref@1.3.3:
-    resolution: {integrity: sha512-jQL3lRnocaFtu3V00JToYz/4QkNWswxijDaCVNZRiRTO3HQDLsdu1ZtmIUvV4yPp+rvWm5j0y0TG/S61cuijTg==}
-    engines: {node: '>=10'}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  use-sidecar@1.1.3:
-    resolution: {integrity: sha512-Fedw0aZvkhynoPYlA5WXrMCAMm+nSWdZt6lzJQ7Ok8S6Q+VsHmHpRWndVRJ8Be0ZbkfPc5LRYH+5XrzXcEeLRQ==}
-    engines: {node: '>=10'}
-    peerDependencies:
-      '@types/react': '*'
-      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0 || ^19.0.0-rc
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-
-  use-sync-external-store@1.6.0:
-    resolution: {integrity: sha512-Pp6GSwGP/NrPIrxVFAIkOQeyw8lFenOHijQWkUTrDvrF4ALqylP2C/KCkeS9dpUM3KvYRQhna5vt7IL95+ZQ9w==}
-    peerDependencies:
-      react: ^16.8.0 || ^17.0.0 || ^18.0.0 || ^19.0.0
-
-  usehooks-ts@3.1.1:
-    resolution: {integrity: sha512-I4diPp9Cq6ieSUH2wu+fDAVQO43xwtulo+fKEidHUwZPnYImbtkTjzIJYcDcJqxgmX31GVqNFURodvcgHcW0pA==}
-    engines: {node: '>=16.15.0'}
-    peerDependencies:
-      react: ^16.8.0  || ^17 || ^18 || ^19 || ^19.0.0-rc
-
-  util-deprecate@1.0.2:
-    resolution: {integrity: sha512-EPD5q1uXyFxJpCrLnCc1nHnq3gOa6DZBocAIiI2TaSCA7VCJ1UJDMagCzIkXNsUYfD1daK//LTEQ8xiIbrHtcw==}
-
-  util@0.12.5:
-    resolution: {integrity: sha512-kZf/K6hEIrWHI6XqOFUiiMa+79wE/D8Q+NCNAWclkyg3b4d2k7s0QGepNjiABc+aR3N1PAyHL7p6UcLY6LmrnA==}
-
-  uuid@10.0.0:
-    resolution: {integrity: sha512-8XkAphELsDnEGrDxUOHB3RGvXz6TeuYSGEZBOjtTtPm2lwhGBjLgOzLHB63IUWfBpNucQjND6d3AOudO+H3RWQ==}
-    deprecated: uuid@10 and below is no longer supported.  For ESM codebases, update to uuid@latest.  For CommonJS codebases, use uuid@11 (but be aware this version will likely be deprecated in 2028).
-    hasBin: true
-
-  uuid@11.1.1:
-    resolution: {integrity: sha512-vIYxrBCC/N/K+Js3qSN88go7kIfNPssr/hHCesKCQNAjmgvYS2oqr69kIufEG+O4+PfezOH4EbIeHCfFov8ZgQ==}
-    hasBin: true
-
-  uuid@14.0.1:
-    resolution: {integrity: sha512-6ZxzVpzDXDa3bJWaHilVayA+BH/1zmxCJoVgvmqJnid/gPoKHxUrS/aC/T6LGQtNHT+XHG9fXPJB4d+IrU30Ew==}
-    hasBin: true
-
-  vary@1.1.2:
-    resolution: {integrity: sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==}
-    engines: {node: '>= 0.8'}
-
-  vfile-location@5.0.3:
-    resolution: {integrity: sha512-5yXvWDEgqeiYiBe1lbxYF7UMAIm/IcopxMHrMQDq3nvKcjPKIhZklUKL+AE7J7uApI4kwe2snsK+eI6UTj9EHg==}
-
-  vfile-message@4.0.3:
-    resolution: {integrity: sha512-QTHzsGd1EhbZs4AsQ20JX1rC3cOlt/IWJruk893DfLRr57lcnOeMaWG4K0JrRta4mIJZKth2Au3mM3u03/JWKw==}
-
-  vfile@6.0.3:
-    resolution: {integrity: sha512-KzIbH/9tXat2u30jf+smMwFCsno4wHVdNmzFyL+T/L3UGqqk6JKfVqOFOZEpZSHADH1k40ab6NUIXZq422ov3Q==}
-
-  victory-vendor@36.9.2:
-    resolution: {integrity: sha512-PnpQQMuxlwYdocC8fIJqVXvkeViHYzotI+NJrCuav0ZYFoq912ZHBk3mCeuj+5/VpodOjPe1z0Fk2ihgzlXqjQ==}
-
-  vite-node@2.1.9:
-    resolution: {integrity: sha512-AM9aQ/IPrW/6ENLQg3AGY4K1N2TGZdR5e4gu/MmmR2xR3Ll1+dib+nook92g4TV3PXVyeyxdWwtaCAiUL0hMxA==}
-    engines: {node: ^18.0.0 || >=20.0.0}
-    hasBin: true
-
-  vite@5.4.21:
-    resolution: {integrity: sha512-o5a9xKjbtuhY6Bi5S3+HvbRERmouabWbyUcpXXUA1u+GNUKoROi9byOJ8M0nHbHYHkYICiMlqxkg1KkYmm25Sw==}
-    engines: {node: ^18.0.0 || >=20.0.0}
-    hasBin: true
-    peerDependencies:
-      '@types/node': ^18.0.0 || >=20.0.0
-      less: '*'
-      lightningcss: ^1.21.0
-      sass: '*'
-      sass-embedded: '*'
-      stylus: '*'
-      sugarss: '*'
-      terser: ^5.4.0
-    peerDependenciesMeta:
-      '@types/node':
-        optional: true
-      less:
-        optional: true
-      lightningcss:
-        optional: true
-      sass:
-        optional: true
-      sass-embedded:
-        optional: true
-      stylus:
-        optional: true
-      sugarss:
-        optional: true
-      terser:
-        optional: true
-
-  vite@6.4.3:
-    resolution: {integrity: sha512-NTKlcQjlAK7MlQoyb6LgaqHc8sso/pVyUJYWMws3jg21uTJw/LddqIFPcPqP6PzpgbIcZyKI85sFE4HBrQDA8A==}
-    engines: {node: ^18.0.0 || ^20.0.0 || >=22.0.0}
-    hasBin: true
-    peerDependencies:
-      '@types/node': ^18.0.0 || ^20.0.0 || >=22.0.0
-      jiti: '>=1.21.0'
-      less: '*'
-      lightningcss: ^1.21.0
-      sass: '*'
-      sass-embedded: '*'
-      stylus: '*'
-      sugarss: '*'
-      terser: ^5.16.0
-      tsx: ^4.8.1
-      yaml: ^2.4.2
-    peerDependenciesMeta:
-      '@types/node':
-        optional: true
-      jiti:
-        optional: true
-      less:
-        optional: true
-      lightningcss:
-        optional: true
-      sass:
-        optional: true
-      sass-embedded:
-        optional: true
-      stylus:
-        optional: true
-      sugarss:
-        optional: true
-      terser:
-        optional: true
-      tsx:
-        optional: true
-      yaml:
-        optional: true
-
-  vitefu@1.1.3:
-    resolution: {integrity: sha512-ub4okH7Z5KLjb6hDyjqrGXqWtWvoYdU3IGm/NorpgHncKoLTCfRIbvlhBm7r0YstIaQRYlp4yEbFqDcKSzXSSg==}
-    peerDependencies:
-      vite: ^3.0.0 || ^4.0.0 || ^5.0.0 || ^6.0.0 || ^7.0.0 || ^8.0.0
-    peerDependenciesMeta:
-      vite:
-        optional: true
-
-  vitest@2.1.9:
-    resolution: {integrity: sha512-MSmPM9REYqDGBI8439mA4mWhV5sKmDlBKWIYbA3lRb2PTHACE0mgKwA8yQ2xq9vxDTuk4iPrECBAEW2aoFXY0Q==}
-    engines: {node: ^18.0.0 || >=20.0.0}
-    hasBin: true
-    peerDependencies:
-      '@edge-runtime/vm': '*'
-      '@types/node': ^18.0.0 || >=20.0.0
-      '@vitest/browser': 2.1.9
-      '@vitest/ui': 2.1.9
-      happy-dom: '*'
-      jsdom: '*'
-    peerDependenciesMeta:
-      '@edge-runtime/vm':
-        optional: true
-      '@types/node':
-        optional: true
-      '@vitest/browser':
-        optional: true
-      '@vitest/ui':
-        optional: true
-      happy-dom:
-        optional: true
-      jsdom:
-        optional: true
-
-  vm-browserify@1.1.2:
-    resolution: {integrity: sha512-2ham8XPWTONajOR0ohOKOHXkm3+gaBmGut3SRuu75xLd/RRaY6vqgh8NBYYk7+RW3u5AtzPQZG8F10LHkl0lAQ==}
-
-  w3c-keyname@2.2.8:
-    resolution: {integrity: sha512-dpojBhNsCNN7T82Tm7k26A6G9ML3NkhDsnw9n/eoxSRlVBB4CEtIQ/KTCLI2Fwf3ataSXRhYFkQi3SlnFwPvPQ==}
-
-  web-namespaces@2.0.1:
-    resolution: {integrity: sha512-bKr1DkiNa2krS7qxNtdrtHAmzuYGFQLiQ13TsorsdT6ULTkPLKuu5+GsFpDlg6JFjUTwX2DyhMPG2be8uPrqsQ==}
-
-  web-streams-polyfill@3.3.3:
-    resolution: {integrity: sha512-d2JWLCivmZYTSIoge9MsgFCZrt571BikcWGYkjC1khllbTeDlGqZ2D8vD8E/lJa8WGWbb7Plm8/XJYV7IJHZZw==}
-    engines: {node: '>= 8'}
-
-  web-streams-polyfill@4.0.0-beta.3:
-    resolution: {integrity: sha512-QW95TCTaHmsYfHDybGMwO5IJIM93I/6vTRk+daHTWFPhwh+C8Cg7j7XyKrwrj8Ib6vYXe0ocYNrmzY4xAAN6ug==}
-    engines: {node: '>= 14'}
-
-  web-vitals@5.3.0:
-    resolution: {integrity: sha512-q6LWsLatGYZp5VGBIOvbTj6JBV2nOmC8KvWztXBmwJcfFAzhwKwbOxhUH306XY3CcaZDUlSmSuNPBsCn0bFu+g==}
-
-  webidl-conversions@3.0.1:
-    resolution: {integrity: sha512-2JAn3z8AR6rjK8Sm8orRC0h/bcl/DqL7tRPdGZ4I1CjdF+EaMLmYxBHyXuKL849eucPFhvBoxMsflfOb8kxaeQ==}
-
-  whatwg-url@5.0.0:
-    resolution: {integrity: sha512-saE57nupxk6v3HY35+jzBwYa0rKSy0XR8JSxZPwgLr7ys0IBzhGviA1/TUGJLmSVqs8pb9AnvICXEuOHLprYTw==}
-
-  which-pm-runs@1.1.0:
-    resolution: {integrity: sha512-n1brCuqClxfFfq/Rb0ICg9giSZqCS+pLtccdag6C2HyufBrh3fBOiy9nb6ggRMvWOVH5GrdJskj5iGTZNxd7SA==}
-    engines: {node: '>=4'}
-
-  which-typed-array@1.1.20:
-    resolution: {integrity: sha512-LYfpUkmqwl0h9A2HL09Mms427Q1RZWuOHsukfVcKRq9q95iQxdw0ix1JQrqbcDR9PH1QDwf5Qo8OZb5lksZ8Xg==}
-    engines: {node: '>= 0.4'}
-
-  which@2.0.2:
-    resolution: {integrity: sha512-BLI3Tl1TW3Pvl70l3yq3Y64i+awpwXqsGBYWkkqMtnbXgrMD+yj7rhW0kuEDxzJaYXGjEW5ogapKNMEKNMjibA==}
-    engines: {node: '>= 8'}
-    hasBin: true
-
-  why-is-node-running@2.3.0:
-    resolution: {integrity: sha512-hUrmaWBdVDcxvYqnyh09zunKzROWjbZTiNy8dBEjkS7ehEDQibXJ7XvlmtbwuTclUiIyN+CyXQD4Vmko8fNm8w==}
-    engines: {node: '>=8'}
-    hasBin: true
-
-  widest-line@3.1.0:
-    resolution: {integrity: sha512-NsmoXalsWVDMGupxZ5R08ka9flZjjiLvHVAWYOKtiKM8ujtZWr9cRffak+uSE48+Ob8ObalXpwyeUiyDD6QFgg==}
-    engines: {node: '>=8'}
-
-  widest-line@5.0.0:
-    resolution: {integrity: sha512-c9bZp7b5YtRj2wOe6dlj32MK+Bx/M/d+9VB2SHM1OtsUHR0aV0tdP6DWh/iMt0kWi1t5g1Iudu6hQRNd1A4PVA==}
-    engines: {node: '>=18'}
-
-  wordwrap@1.0.0:
-    resolution: {integrity: sha512-gvVzJFlPycKc5dZN4yPkP8w7Dc37BtP1yczEneOb4uq34pXZcvrtRTmWV8W+Ume+XCxKgbjM+nevkyFPMybd4Q==}
-
-  wrap-ansi@7.0.0:
-    resolution: {integrity: sha512-YVGIj2kamLSTxw6NsZjoBxfSwsn0ycdesmc4p+Q21c5zPuZ1pl+NfxVdxPtdHvmNVOQ6XSYG4AUtyt/Fi7D16Q==}
-    engines: {node: '>=10'}
-
-  wrap-ansi@8.1.0:
-    resolution: {integrity: sha512-si7QWI6zUMq56bESFvagtmzMdGOtoxfR+Sez11Mobfc7tm+VkUckk9bW2UeffTGVUbOksxmSw0AA2gs8g71NCQ==}
-    engines: {node: '>=12'}
-
-  wrap-ansi@9.0.2:
-    resolution: {integrity: sha512-42AtmgqjV+X1VpdOfyTGOYRi0/zsoLqtXQckTmqTeybT+BDIbM/Guxo7x3pE2vtpr1ok6xRqM9OpBe+Jyoqyww==}
-    engines: {node: '>=18'}
-
-  wrappy@1.0.2:
-    resolution: {integrity: sha512-l4Sp/DRseor9wL6EvV2+TuQn63dMkPjZ/sp9XkghTEbV9KlPS1xUsZ3u7/IQO4wxtcFB4bgpQPRcR3QCvezPcQ==}
-
-  ws@8.21.0:
-    resolution: {integrity: sha512-Vsp28b7DRcimFQvrqu2Wek3z1iYxDCWqHYB8Qsnk/S4RfaCQzPGPyBNuVjJV3cd6UiKtUtp6sNM77gWvzcCH+g==}
-    engines: {node: '>=10.0.0'}
-    peerDependencies:
-      bufferutil: ^4.0.1
-      utf-8-validate: '>=5.0.2'
-    peerDependenciesMeta:
-      bufferutil:
-        optional: true
-      utf-8-validate:
-        optional: true
-
-  xtend@4.0.2:
-    resolution: {integrity: sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==}
-    engines: {node: '>=0.4'}
-
-  xxhash-wasm@1.1.0:
-    resolution: {integrity: sha512-147y/6YNh+tlp6nd/2pWq38i9h6mz/EuQ6njIrmW8D1BS5nCqs0P6DG+m6zTGnNz5I+uhZ0SHxBs9BsPrwcKDA==}
-
-  y18n@5.0.8:
-    resolution: {integrity: sha512-0pfFzegeDWJHJIAmTLRP2DwHjdF5s7jo9tuztdQxAhINCdvS+3nGINqPd00AphqJR/0LhANUS6/+7SCb98YOfA==}
-    engines: {node: '>=10'}
-
-  yallist@3.1.1:
-    resolution: {integrity: sha512-a4UGQaWPH59mOXUYnAG2ewncQS4i4F43Tv3JoAM+s2VDAmS9NsK8GpDMLrCHPksFT7h3K6TOoUNn2pb7RoXx4g==}
-
-  yaml@2.9.0:
-    resolution: {integrity: sha512-2AvhNX3mb8zd6Zy7INTtSpl1F15HW6Wnqj0srWlkKLcpYl/gMIMJiyuGq2KeI2YFxUPjdlB+3Lc10seMLtL4cA==}
-    engines: {node: '>= 14.6'}
-    hasBin: true
-
-  yargs-parser@20.2.9:
-    resolution: {integrity: sha512-y11nGElTIV+CT3Zv9t7VKl+Q3hTQoT9a1Qzezhhl6Rp21gJ/IVTW7Z3y9EWXhuUBC2Shnf+DX0antecpAwSP8w==}
-    engines: {node: '>=10'}
-
-  yargs-parser@21.1.1:
-    resolution: {integrity: sha512-tVpsJW7DdjecAiFpbIB1e3qxIQsE6NoPc5/eTdrbbIC4h0LVsWhnoa3g+m2HclBIujHzsxZ4VJVA+GUuc2/LBw==}
-    engines: {node: '>=12'}
-
-  yargs@16.2.2:
-    resolution: {integrity: sha512-Nt9ZJjXTv5R8MHbqby/wXQ6Gi0Bb3TcYZkR1bzuL4yB2OxWPkXknz513gEF0GoA6tn00UpbPvERW8rzCuWCA6w==}
-    engines: {node: '>=10'}
-
-  yargs@17.7.2:
-    resolution: {integrity: sha512-7dSzzRQ++CKnNI/krKnYRV7JKKPUXMEh61soaHKg9mrWEhzFWhFnxPxGl+69cD1Ou63C13NUPCnmIcrvqCuM6w==}
-    engines: {node: '>=12'}
-
-  yauzl@2.10.0:
-    resolution: {integrity: sha512-p4a9I6X6nu6IhoGmBqAcbJy1mlC4j27vEPZX9F4L4/vZT3Lyq1VkFHw/V/PUcB9Buo+DG3iHkT0x3Qya58zc3g==}
-
-  yocto-queue@0.1.0:
-    resolution: {integrity: sha512-rVksvsnNCdJ/ohGc6xgPwyN8eheCxsiLM8mxuE/t/mOVqJewPuO1miLpTHQiRgTKCLexL4MeAFVagts7HmNZ2Q==}
-    engines: {node: '>=10'}
-
-  yocto-queue@1.2.2:
-    resolution: {integrity: sha512-4LCcse/U2MHZ63HAJVE+v71o7yOdIe4cZ70Wpf8D/IyjDKYQLV5GD46B+hSTjJsvV5PztjvHoU580EftxjDZFQ==}
-    engines: {node: '>=12.20'}
-
-  yocto-spinner@0.2.3:
-    resolution: {integrity: sha512-sqBChb33loEnkoXte1bLg45bEBsOP9N1kzQh5JZNKj/0rik4zAPTNSAVPj3uQAdc6slYJ0Ksc403G2XgxsJQFQ==}
-    engines: {node: '>=18.19'}
-
-  yoctocolors@2.1.2:
-    resolution: {integrity: sha512-CzhO+pFNo8ajLM2d2IW/R93ipy99LWjtwblvC1RsoSUMZgyLbYFr221TnSNT7GjGdYui6P459mw9JH/g/zW2ug==}
-    engines: {node: '>=18'}
-
-  zip-stream@6.0.1:
-    resolution: {integrity: sha512-zK7YHHz4ZXpW89AHXUPbQVGKI7uvkd3hzusTdotCg1UxyaVtg0zFJSTfW/Dq5f7OBBVnq6cZIaC8Ti4hb6dtCA==}
-    engines: {node: '>= 14'}
-
-  zod-to-json-schema@3.25.2:
-    resolution: {integrity: sha512-O/PgfnpT1xKSDeQYSCfRI5Gy3hPf91mKVDuYLUHZJMiDFptvP41MSnWofm8dnCm0256ZNfZIM7DSzuSMAFnjHA==}
-    peerDependencies:
-      zod: ^3.25.28 || ^4
-
-  zod-to-ts@1.2.0:
-    resolution: {integrity: sha512-x30XE43V+InwGpvTySRNz9kB7qFU8DlyEy7BsSTCHPH1R0QasMmHWZDCzYm6bVXtj/9NNJAZF3jW8rzFvH5OFA==}
-    peerDependencies:
-      typescript: ^4.9.4 || ^5.0.2
-      zod: ^3
-
-  zod@3.25.76:
-    resolution: {integrity: sha512-gzUt/qt81nXsFGKIFcC3YnfEAx5NkunCfnDlvuBSSFS02bcXu4Lmea0AFIUwbLWxWPx3d9p8S5QoaujKcNQxcQ==}
-
-  zod@4.3.6:
-    resolution: {integrity: sha512-rftlrkhHZOcjDwkGlnUtZZkvaPHCsDATp4pGpuOOMDaTdDDXF91wuVDJoWoPsKX/3YPQ5fHuF3STjcYyKr+Qhg==}
-
-  zustand@5.0.14:
-    resolution: {integrity: sha512-/8tAspM5LMPr28b3fwLYrtdj77ECpfZviaP75CMTnwO8ISyaE4GDIG/9rDDYq/cH9D2Xw2A2RXglLInmVBQB/g==}
-    engines: {node: '>=12.20.0'}
-    peerDependencies:
-      '@types/react': '>=18.0.0'
-      immer: '>=9.0.6'
-      react: '>=18.0.0'
-      use-sync-external-store: '>=1.2.0'
-    peerDependenciesMeta:
-      '@types/react':
-        optional: true
-      immer:
-        optional: true
-      react:
-        optional: true
-      use-sync-external-store:
-        optional: true
-
-  zwitch@2.0.4:
-    resolution: {integrity: sha512-bXE4cR/kVZhKZX/RjPEflHaKVhUVl85noU3v6b8apfQEc1x4A+zBxjZ4lN8LqGd6WZ3dl98pY4o717VFmoPp+A==}
-
-snapshots:
-
-  '@agentclientprotocol/sdk@0.12.0(zod@3.25.76)':
-    dependencies:
-      zod: 3.25.76
-
-  '@agentclientprotocol/sdk@0.16.1(zod@4.3.6)':
-    dependencies:
-      zod: 4.3.6
-
-  '@ai-sdk/amazon-bedrock@3.0.105(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/anthropic': 2.0.85(zod@4.3.6)
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      '@smithy/eventstream-codec': 4.4.6
-      '@smithy/util-utf8': 4.4.6
-      aws4fetch: 1.0.20
-      zod: 4.3.6
-    optional: true
-
-  '@ai-sdk/anthropic@2.0.85(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      zod: 4.3.6
-    optional: true
-
-  '@ai-sdk/azure@2.0.114(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/deepseek': 1.0.45(zod@4.3.6)
-      '@ai-sdk/openai': 2.0.110(zod@4.3.6)
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      zod: 4.3.6
-    optional: true
-
-  '@ai-sdk/cerebras@1.0.47(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/openai-compatible': 1.0.42(zod@4.3.6)
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      zod: 4.3.6
-    optional: true
-
-  '@ai-sdk/deepseek@1.0.45(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      zod: 4.3.6
-    optional: true
-
-  '@ai-sdk/gateway@2.0.109(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      '@vercel/oidc': 3.1.0
-      zod: 4.3.6
-
-  '@ai-sdk/google-vertex@3.0.146(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/anthropic': 2.0.85(zod@4.3.6)
-      '@ai-sdk/google': 2.0.78(zod@4.3.6)
-      '@ai-sdk/openai-compatible': 1.0.42(zod@4.3.6)
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      google-auth-library: 10.9.0
-      zod: 4.3.6
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  '@ai-sdk/google@2.0.78(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      zod: 4.3.6
-    optional: true
-
-  '@ai-sdk/groq@2.0.43(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      zod: 4.3.6
-    optional: true
-
-  '@ai-sdk/mistral@2.0.36(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      zod: 4.3.6
-    optional: true
-
-  '@ai-sdk/openai-compatible@1.0.42(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      zod: 4.3.6
-    optional: true
-
-  '@ai-sdk/openai@2.0.110(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      zod: 4.3.6
-    optional: true
-
-  '@ai-sdk/perplexity@2.0.33(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      zod: 4.3.6
-    optional: true
-
-  '@ai-sdk/provider-utils@3.0.28(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 2.0.3
-      '@standard-schema/spec': 1.1.0
-      eventsource-parser: 3.1.0
-      zod: 4.3.6
-
-  '@ai-sdk/provider@2.0.3':
-    dependencies:
-      json-schema: 0.4.0
-
-  '@ai-sdk/togetherai@1.0.45(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/openai-compatible': 1.0.42(zod@4.3.6)
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      zod: 4.3.6
-    optional: true
-
-  '@ai-sdk/xai@2.0.76(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/openai-compatible': 1.0.42(zod@4.3.6)
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      zod: 4.3.6
-    optional: true
-
-  '@alloc/quick-lru@5.2.0': {}
-
-  '@antfu/install-pkg@1.1.0':
-    dependencies:
-      package-manager-detector: 1.6.0
-      tinyexec: 1.2.4
-
-  '@anthropic-ai/claude-agent-sdk@0.2.87(zod@4.3.6)':
-    dependencies:
-      '@anthropic-ai/sdk': 0.74.0(zod@4.3.6)
-      '@modelcontextprotocol/sdk': 1.29.0(zod@4.3.6)
-      zod: 4.3.6
-    optionalDependencies:
-      '@img/sharp-darwin-arm64': 0.34.5
-      '@img/sharp-darwin-x64': 0.34.5
-      '@img/sharp-linux-arm': 0.34.5
-      '@img/sharp-linux-arm64': 0.34.5
-      '@img/sharp-linux-x64': 0.34.5
-      '@img/sharp-linuxmusl-arm64': 0.34.5
-      '@img/sharp-linuxmusl-x64': 0.34.5
-      '@img/sharp-win32-arm64': 0.34.5
-      '@img/sharp-win32-x64': 0.34.5
-    transitivePeerDependencies:
-      - '@cfworker/json-schema'
-      - supports-color
-
-  '@anthropic-ai/sdk@0.39.0':
-    dependencies:
-      '@types/node': 18.19.130
-      '@types/node-fetch': 2.6.13
-      abort-controller: 3.0.0
-      agentkeepalive: 4.6.0
-      form-data-encoder: 1.7.2
-      formdata-node: 4.4.1
-      node-fetch: 2.7.0
-    transitivePeerDependencies:
-      - encoding
-
-  '@anthropic-ai/sdk@0.73.0(zod@3.25.76)':
-    dependencies:
-      json-schema-to-ts: 3.1.1
-    optionalDependencies:
-      zod: 3.25.76
-
-  '@anthropic-ai/sdk@0.73.0(zod@4.3.6)':
-    dependencies:
-      json-schema-to-ts: 3.1.1
-    optionalDependencies:
-      zod: 4.3.6
-
-  '@anthropic-ai/sdk@0.74.0(zod@4.3.6)':
-    dependencies:
-      json-schema-to-ts: 3.1.1
-    optionalDependencies:
-      zod: 4.3.6
-
-  '@astrojs/compiler@2.13.1': {}
-
-  '@astrojs/internal-helpers@0.7.6': {}
-
-  '@astrojs/markdown-remark@6.3.11':
-    dependencies:
-      '@astrojs/internal-helpers': 0.7.6
-      '@astrojs/prism': 3.3.0
-      github-slugger: 2.0.0
-      hast-util-from-html: 2.0.3
-      hast-util-to-text: 4.0.2
-      import-meta-resolve: 4.2.0
-      js-yaml: 4.2.0
-      mdast-util-definitions: 6.0.0
-      rehype-raw: 7.0.0
-      rehype-stringify: 10.0.1
-      remark-gfm: 4.0.1
-      remark-parse: 11.0.0
-      remark-rehype: 11.1.2
-      remark-smartypants: 3.0.2
-      shiki: 3.23.0
-      smol-toml: 1.6.1
-      unified: 11.0.5
-      unist-util-remove-position: 5.0.0
-      unist-util-visit: 5.1.0
-      unist-util-visit-parents: 6.0.2
-      vfile: 6.0.3
-    transitivePeerDependencies:
-      - supports-color
-
-  '@astrojs/mdx@4.3.14(astro@5.18.2(@types/node@24.13.2)(aws4fetch@1.0.20)(jiti@1.21.7)(rollup@4.60.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0))':
-    dependencies:
-      '@astrojs/markdown-remark': 6.3.11
-      '@mdx-js/mdx': 3.1.1
-      acorn: 8.17.0
-      astro: 5.18.2(@types/node@24.13.2)(aws4fetch@1.0.20)(jiti@1.21.7)(rollup@4.60.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0)
-      es-module-lexer: 1.7.0
-      estree-util-visit: 2.0.0
-      hast-util-to-html: 9.0.5
-      piccolore: 0.1.3
-      rehype-raw: 7.0.0
-      remark-gfm: 4.0.1
-      remark-smartypants: 3.0.2
-      source-map: 0.7.6
-      unist-util-visit: 5.1.0
-      vfile: 6.0.3
-    transitivePeerDependencies:
-      - supports-color
-
-  '@astrojs/prism@3.3.0':
-    dependencies:
-      prismjs: 1.30.0
-
-  '@astrojs/react@4.4.2(@types/node@24.13.2)(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(jiti@1.21.7)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tsx@4.21.0)(yaml@2.9.0)':
-    dependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-      '@vitejs/plugin-react': 4.7.0(vite@6.4.3(@types/node@24.13.2)(jiti@1.21.7)(tsx@4.21.0)(yaml@2.9.0))
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-      ultrahtml: 1.6.0
-      vite: 6.4.3(@types/node@24.13.2)(jiti@1.21.7)(tsx@4.21.0)(yaml@2.9.0)
-    transitivePeerDependencies:
-      - '@types/node'
-      - jiti
-      - less
-      - lightningcss
-      - sass
-      - sass-embedded
-      - stylus
-      - sugarss
-      - supports-color
-      - terser
-      - tsx
-      - yaml
-
-  '@astrojs/sitemap@3.7.3':
-    dependencies:
-      sitemap: 9.0.1
-      stream-replace-string: 2.0.0
-      zod: 4.3.6
-
-  '@astrojs/tailwind@6.0.2(astro@5.18.2(@types/node@24.13.2)(aws4fetch@1.0.20)(jiti@1.21.7)(rollup@4.60.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0))(tailwindcss@3.4.19(tsx@4.21.0)(yaml@2.9.0))':
-    dependencies:
-      astro: 5.18.2(@types/node@24.13.2)(aws4fetch@1.0.20)(jiti@1.21.7)(rollup@4.60.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0)
-      autoprefixer: 10.5.0(postcss@8.5.8)
-      postcss: 8.5.8
-      postcss-load-config: 4.0.2(postcss@8.5.8)
-      tailwindcss: 3.4.19(tsx@4.21.0)(yaml@2.9.0)
-    transitivePeerDependencies:
-      - ts-node
-
-  '@astrojs/telemetry@3.3.0':
-    dependencies:
-      ci-info: 4.4.0
-      debug: 4.4.3(supports-color@8.1.1)
-      dlv: 1.1.3
-      dset: 3.1.4
-      is-docker: 3.0.0
-      is-wsl: 3.1.1
-      which-pm-runs: 1.1.0
-    transitivePeerDependencies:
-      - supports-color
-
-  '@aws-crypto/crc32@5.2.0':
-    dependencies:
-      '@aws-crypto/util': 5.2.0
-      '@aws-sdk/types': 3.973.13
-      tslib: 2.8.1
-
-  '@aws-crypto/sha256-browser@5.2.0':
-    dependencies:
-      '@aws-crypto/sha256-js': 5.2.0
-      '@aws-crypto/supports-web-crypto': 5.2.0
-      '@aws-crypto/util': 5.2.0
-      '@aws-sdk/types': 3.973.13
-      '@aws-sdk/util-locate-window': 3.965.8
-      '@smithy/util-utf8': 2.3.0
-      tslib: 2.8.1
-
-  '@aws-crypto/sha256-js@5.2.0':
-    dependencies:
-      '@aws-crypto/util': 5.2.0
-      '@aws-sdk/types': 3.973.13
-      tslib: 2.8.1
-
-  '@aws-crypto/supports-web-crypto@5.2.0':
-    dependencies:
-      tslib: 2.8.1
-
-  '@aws-crypto/util@5.2.0':
-    dependencies:
-      '@aws-sdk/types': 3.973.13
-      '@smithy/util-utf8': 2.3.0
-      tslib: 2.8.1
-
-  '@aws-sdk/client-bedrock-runtime@3.1075.0':
-    dependencies:
-      '@aws-crypto/sha256-browser': 5.2.0
-      '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.974.23
-      '@aws-sdk/credential-provider-node': 3.972.58
-      '@aws-sdk/eventstream-handler-node': 3.972.22
-      '@aws-sdk/middleware-eventstream': 3.972.18
-      '@aws-sdk/middleware-websocket': 3.972.31
-      '@aws-sdk/token-providers': 3.1075.0
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/fetch-http-handler': 5.5.2
-      '@smithy/node-http-handler': 4.8.2
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/core@3.974.23':
-    dependencies:
-      '@aws-sdk/types': 3.973.13
-      '@aws-sdk/xml-builder': 3.972.31
-      '@aws/lambda-invoke-store': 0.2.4
-      '@smithy/core': 3.26.0
-      '@smithy/signature-v4': 5.5.2
-      '@smithy/types': 4.15.0
-      bowser: 2.14.1
-      tslib: 2.8.1
-
-  '@aws-sdk/credential-provider-env@3.972.49':
-    dependencies:
-      '@aws-sdk/core': 3.974.23
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/credential-provider-http@3.972.51':
-    dependencies:
-      '@aws-sdk/core': 3.974.23
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/fetch-http-handler': 5.5.2
-      '@smithy/node-http-handler': 4.8.2
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/credential-provider-ini@3.972.56':
-    dependencies:
-      '@aws-sdk/core': 3.974.23
-      '@aws-sdk/credential-provider-env': 3.972.49
-      '@aws-sdk/credential-provider-http': 3.972.51
-      '@aws-sdk/credential-provider-login': 3.972.55
-      '@aws-sdk/credential-provider-process': 3.972.49
-      '@aws-sdk/credential-provider-sso': 3.972.55
-      '@aws-sdk/credential-provider-web-identity': 3.972.55
-      '@aws-sdk/nested-clients': 3.997.23
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/credential-provider-imds': 4.4.2
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/credential-provider-login@3.972.55':
-    dependencies:
-      '@aws-sdk/core': 3.974.23
-      '@aws-sdk/nested-clients': 3.997.23
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/credential-provider-node@3.972.58':
-    dependencies:
-      '@aws-sdk/credential-provider-env': 3.972.49
-      '@aws-sdk/credential-provider-http': 3.972.51
-      '@aws-sdk/credential-provider-ini': 3.972.56
-      '@aws-sdk/credential-provider-process': 3.972.49
-      '@aws-sdk/credential-provider-sso': 3.972.55
-      '@aws-sdk/credential-provider-web-identity': 3.972.55
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/credential-provider-imds': 4.4.2
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/credential-provider-process@3.972.49':
-    dependencies:
-      '@aws-sdk/core': 3.974.23
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/credential-provider-sso@3.972.55':
-    dependencies:
-      '@aws-sdk/core': 3.974.23
-      '@aws-sdk/nested-clients': 3.997.23
-      '@aws-sdk/token-providers': 3.1074.0
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/credential-provider-web-identity@3.972.55':
-    dependencies:
-      '@aws-sdk/core': 3.974.23
-      '@aws-sdk/nested-clients': 3.997.23
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/eventstream-handler-node@3.972.22':
-    dependencies:
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/middleware-eventstream@3.972.18':
-    dependencies:
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/middleware-websocket@3.972.31':
-    dependencies:
-      '@aws-sdk/core': 3.974.23
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/fetch-http-handler': 5.5.2
-      '@smithy/signature-v4': 5.5.2
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/nested-clients@3.997.23':
-    dependencies:
-      '@aws-crypto/sha256-browser': 5.2.0
-      '@aws-crypto/sha256-js': 5.2.0
-      '@aws-sdk/core': 3.974.23
-      '@aws-sdk/signature-v4-multi-region': 3.996.35
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/fetch-http-handler': 5.5.2
-      '@smithy/node-http-handler': 4.8.2
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/signature-v4-multi-region@3.996.35':
-    dependencies:
-      '@aws-sdk/types': 3.973.13
-      '@smithy/signature-v4': 5.5.2
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/token-providers@3.1074.0':
-    dependencies:
-      '@aws-sdk/core': 3.974.23
-      '@aws-sdk/nested-clients': 3.997.23
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/token-providers@3.1075.0':
-    dependencies:
-      '@aws-sdk/core': 3.974.23
-      '@aws-sdk/nested-clients': 3.997.23
-      '@aws-sdk/types': 3.973.13
-      '@smithy/core': 3.26.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/types@3.973.13':
-    dependencies:
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws-sdk/util-locate-window@3.965.8':
-    dependencies:
-      tslib: 2.8.1
-
-  '@aws-sdk/xml-builder@3.972.31':
-    dependencies:
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@aws/lambda-invoke-store@0.2.4': {}
-
-  '@babel/code-frame@7.29.7':
-    dependencies:
-      '@babel/helper-validator-identifier': 7.29.7
-      js-tokens: 4.0.0
-      picocolors: 1.1.1
-
-  '@babel/compat-data@7.29.7': {}
-
-  '@babel/core@7.29.7':
-    dependencies:
-      '@babel/code-frame': 7.29.7
-      '@babel/generator': 7.29.7
-      '@babel/helper-compilation-targets': 7.29.7
-      '@babel/helper-module-transforms': 7.29.7(@babel/core@7.29.7)
-      '@babel/helpers': 7.29.7
-      '@babel/parser': 7.29.7
-      '@babel/template': 7.29.7
-      '@babel/traverse': 7.29.7
-      '@babel/types': 7.29.7
-      '@jridgewell/remapping': 2.3.5
-      convert-source-map: 2.0.0
-      debug: 4.4.3(supports-color@8.1.1)
-      gensync: 1.0.0-beta.2
-      json5: 2.2.3
-      semver: 6.3.1
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/generator@7.29.7':
-    dependencies:
-      '@babel/parser': 7.29.7
-      '@babel/types': 7.29.7
-      '@jridgewell/gen-mapping': 0.3.13
-      '@jridgewell/trace-mapping': 0.3.31
-      jsesc: 3.1.0
-
-  '@babel/helper-compilation-targets@7.29.7':
-    dependencies:
-      '@babel/compat-data': 7.29.7
-      '@babel/helper-validator-option': 7.29.7
-      browserslist: 4.28.2
-      lru-cache: 5.1.1
-      semver: 6.3.1
-
-  '@babel/helper-globals@7.29.7': {}
-
-  '@babel/helper-module-imports@7.29.7':
-    dependencies:
-      '@babel/traverse': 7.29.7
-      '@babel/types': 7.29.7
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/helper-module-transforms@7.29.7(@babel/core@7.29.7)':
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-module-imports': 7.29.7
-      '@babel/helper-validator-identifier': 7.29.7
-      '@babel/traverse': 7.29.7
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/helper-plugin-utils@7.29.7': {}
-
-  '@babel/helper-string-parser@7.29.7': {}
-
-  '@babel/helper-validator-identifier@7.29.7': {}
-
-  '@babel/helper-validator-option@7.29.7': {}
-
-  '@babel/helpers@7.29.7':
-    dependencies:
-      '@babel/template': 7.29.7
-      '@babel/types': 7.29.7
-
-  '@babel/parser@7.29.7':
-    dependencies:
-      '@babel/types': 7.29.7
-
-  '@babel/plugin-transform-react-jsx-self@7.29.7(@babel/core@7.29.7)':
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-plugin-utils': 7.29.7
-
-  '@babel/plugin-transform-react-jsx-source@7.29.7(@babel/core@7.29.7)':
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/helper-plugin-utils': 7.29.7
-
-  '@babel/runtime@7.29.7': {}
-
-  '@babel/template@7.29.7':
-    dependencies:
-      '@babel/code-frame': 7.29.7
-      '@babel/parser': 7.29.7
-      '@babel/types': 7.29.7
-
-  '@babel/traverse@7.29.7':
-    dependencies:
-      '@babel/code-frame': 7.29.7
-      '@babel/generator': 7.29.7
-      '@babel/helper-globals': 7.29.7
-      '@babel/parser': 7.29.7
-      '@babel/template': 7.29.7
-      '@babel/types': 7.29.7
-      debug: 4.4.3(supports-color@8.1.1)
-    transitivePeerDependencies:
-      - supports-color
-
-  '@babel/types@7.29.7':
-    dependencies:
-      '@babel/helper-string-parser': 7.29.7
-      '@babel/helper-validator-identifier': 7.29.7
-
-  '@balena/dockerignore@1.0.2':
-    optional: true
-
-  '@bare-ts/lib@0.4.0': {}
-
-  '@bare-ts/tools@0.15.0(@bare-ts/lib@0.4.0)':
-    dependencies:
-      '@bare-ts/lib': 0.4.0
-      commander: 11.1.0
-
-  '@biomejs/biome@2.4.10':
-    optionalDependencies:
-      '@biomejs/cli-darwin-arm64': 2.4.10
-      '@biomejs/cli-darwin-x64': 2.4.10
-      '@biomejs/cli-linux-arm64': 2.4.10
-      '@biomejs/cli-linux-arm64-musl': 2.4.10
-      '@biomejs/cli-linux-x64': 2.4.10
-      '@biomejs/cli-linux-x64-musl': 2.4.10
-      '@biomejs/cli-win32-arm64': 2.4.10
-      '@biomejs/cli-win32-x64': 2.4.10
-
-  '@biomejs/cli-darwin-arm64@2.4.10':
-    optional: true
-
-  '@biomejs/cli-darwin-x64@2.4.10':
-    optional: true
-
-  '@biomejs/cli-linux-arm64-musl@2.4.10':
-    optional: true
-
-  '@biomejs/cli-linux-arm64@2.4.10':
-    optional: true
-
-  '@biomejs/cli-linux-x64-musl@2.4.10':
-    optional: true
-
-  '@biomejs/cli-linux-x64@2.4.10':
-    optional: true
-
-  '@biomejs/cli-win32-arm64@2.4.10':
-    optional: true
-
-  '@biomejs/cli-win32-x64@2.4.10':
-    optional: true
-
-  '@borewit/text-codec@0.2.2': {}
-
-  '@braintree/sanitize-url@7.1.2': {}
-
-  '@browserbasehq/sdk@2.15.0':
-    dependencies:
-      '@types/node': 18.19.130
-      '@types/node-fetch': 2.6.13
-      abort-controller: 3.0.0
-      agentkeepalive: 4.6.0
-      form-data-encoder: 1.7.2
-      formdata-node: 4.4.1
-      node-fetch: 2.7.0
-    transitivePeerDependencies:
-      - encoding
-
-  '@browserbasehq/stagehand@3.6.0(playwright-core@1.59.1)(zod@4.3.6)':
-    dependencies:
-      '@ai-sdk/provider': 2.0.3
-      '@anthropic-ai/sdk': 0.39.0
-      '@browserbasehq/sdk': 2.15.0
-      '@google/genai': 1.52.0(@modelcontextprotocol/sdk@1.29.0(zod@4.3.6))(bufferutil@4.1.0)
-      '@modelcontextprotocol/sdk': 1.29.0(zod@4.3.6)
-      ai: 5.0.210(zod@4.3.6)
-      devtools-protocol: 0.0.1642743
-      fetch-cookie: 3.2.0
-      openai: 4.104.0(ws@8.21.0(bufferutil@4.1.0))(zod@4.3.6)
-      pino: 9.14.0
-      pino-pretty: 13.1.3
-      uuid: 11.1.1
-      ws: 8.21.0(bufferutil@4.1.0)
-      zod: 4.3.6
-      zod-to-json-schema: 3.25.2(zod@4.3.6)
-    optionalDependencies:
-      '@ai-sdk/amazon-bedrock': 3.0.105(zod@4.3.6)
-      '@ai-sdk/anthropic': 2.0.85(zod@4.3.6)
-      '@ai-sdk/azure': 2.0.114(zod@4.3.6)
-      '@ai-sdk/cerebras': 1.0.47(zod@4.3.6)
-      '@ai-sdk/deepseek': 1.0.45(zod@4.3.6)
-      '@ai-sdk/google': 2.0.78(zod@4.3.6)
-      '@ai-sdk/google-vertex': 3.0.146(zod@4.3.6)
-      '@ai-sdk/groq': 2.0.43(zod@4.3.6)
-      '@ai-sdk/mistral': 2.0.36(zod@4.3.6)
-      '@ai-sdk/openai': 2.0.110(zod@4.3.6)
-      '@ai-sdk/perplexity': 2.0.33(zod@4.3.6)
-      '@ai-sdk/togetherai': 1.0.45(zod@4.3.6)
-      '@ai-sdk/xai': 2.0.76(zod@4.3.6)
-      bufferutil: 4.1.0
-      chrome-launcher: 1.2.1
-      ollama-ai-provider-v2: 1.5.5(zod@4.3.6)
-      playwright-core: 1.59.1
-    transitivePeerDependencies:
-      - '@cfworker/json-schema'
-      - encoding
-      - supports-color
-      - utf-8-validate
-
-  '@capsizecss/unpack@4.0.1':
-    dependencies:
-      fontkitten: 1.0.3
-
-  '@chevrotain/types@11.1.2': {}
-
-  '@codemirror/autocomplete@6.20.3':
-    dependencies:
-      '@codemirror/language': 6.12.4
-      '@codemirror/state': 6.7.0
-      '@codemirror/view': 6.43.4
-      '@lezer/common': 1.5.2
-
-  '@codemirror/commands@6.10.4':
-    dependencies:
-      '@codemirror/language': 6.12.4
-      '@codemirror/state': 6.7.0
-      '@codemirror/view': 6.43.4
-      '@lezer/common': 1.5.2
-
-  '@codemirror/lang-javascript@6.2.5':
-    dependencies:
-      '@codemirror/autocomplete': 6.20.3
-      '@codemirror/language': 6.12.4
-      '@codemirror/lint': 6.9.7
-      '@codemirror/state': 6.7.0
-      '@codemirror/view': 6.43.4
-      '@lezer/common': 1.5.2
-      '@lezer/javascript': 1.5.4
-
-  '@codemirror/lang-json@6.0.2':
-    dependencies:
-      '@codemirror/language': 6.12.4
-      '@lezer/json': 1.0.3
-
-  '@codemirror/language@6.12.4':
-    dependencies:
-      '@codemirror/state': 6.7.0
-      '@codemirror/view': 6.43.4
-      '@lezer/common': 1.5.2
-      '@lezer/highlight': 1.2.3
-      '@lezer/lr': 1.4.10
-      style-mod: 4.1.3
-
-  '@codemirror/lint@6.9.7':
-    dependencies:
-      '@codemirror/state': 6.7.0
-      '@codemirror/view': 6.43.4
-      crelt: 1.0.7
-
-  '@codemirror/search@6.7.1':
-    dependencies:
-      '@codemirror/state': 6.7.0
-      '@codemirror/view': 6.43.4
-      crelt: 1.0.7
-
-  '@codemirror/state@6.7.0':
-    dependencies:
-      '@marijn/find-cluster-break': 1.0.3
-
-  '@codemirror/theme-one-dark@6.1.3':
-    dependencies:
-      '@codemirror/language': 6.12.4
-      '@codemirror/state': 6.7.0
-      '@codemirror/view': 6.43.4
-      '@lezer/highlight': 1.2.3
-
-  '@codemirror/view@6.43.4':
-    dependencies:
-      '@codemirror/state': 6.7.0
-      crelt: 1.0.7
-      style-mod: 4.1.3
-      w3c-keyname: 2.2.8
-
-  '@emnapi/runtime@1.11.1':
-    dependencies:
-      tslib: 2.8.1
-    optional: true
-
-  '@esbuild/aix-ppc64@0.21.5':
-    optional: true
-
-  '@esbuild/aix-ppc64@0.25.12':
-    optional: true
-
-  '@esbuild/aix-ppc64@0.27.4':
-    optional: true
-
-  '@esbuild/android-arm64@0.21.5':
-    optional: true
-
-  '@esbuild/android-arm64@0.25.12':
-    optional: true
-
-  '@esbuild/android-arm64@0.27.4':
-    optional: true
-
-  '@esbuild/android-arm@0.21.5':
-    optional: true
-
-  '@esbuild/android-arm@0.25.12':
-    optional: true
-
-  '@esbuild/android-arm@0.27.4':
-    optional: true
-
-  '@esbuild/android-x64@0.21.5':
-    optional: true
-
-  '@esbuild/android-x64@0.25.12':
-    optional: true
-
-  '@esbuild/android-x64@0.27.4':
-    optional: true
-
-  '@esbuild/darwin-arm64@0.21.5':
-    optional: true
-
-  '@esbuild/darwin-arm64@0.25.12':
-    optional: true
-
-  '@esbuild/darwin-arm64@0.27.4':
-    optional: true
-
-  '@esbuild/darwin-x64@0.21.5':
-    optional: true
-
-  '@esbuild/darwin-x64@0.25.12':
-    optional: true
-
-  '@esbuild/darwin-x64@0.27.4':
-    optional: true
-
-  '@esbuild/freebsd-arm64@0.21.5':
-    optional: true
-
-  '@esbuild/freebsd-arm64@0.25.12':
-    optional: true
-
-  '@esbuild/freebsd-arm64@0.27.4':
-    optional: true
-
-  '@esbuild/freebsd-x64@0.21.5':
-    optional: true
-
-  '@esbuild/freebsd-x64@0.25.12':
-    optional: true
-
-  '@esbuild/freebsd-x64@0.27.4':
-    optional: true
-
-  '@esbuild/linux-arm64@0.21.5':
-    optional: true
-
-  '@esbuild/linux-arm64@0.25.12':
-    optional: true
-
-  '@esbuild/linux-arm64@0.27.4':
-    optional: true
-
-  '@esbuild/linux-arm@0.21.5':
-    optional: true
-
-  '@esbuild/linux-arm@0.25.12':
-    optional: true
-
-  '@esbuild/linux-arm@0.27.4':
-    optional: true
-
-  '@esbuild/linux-ia32@0.21.5':
-    optional: true
-
-  '@esbuild/linux-ia32@0.25.12':
-    optional: true
-
-  '@esbuild/linux-ia32@0.27.4':
-    optional: true
-
-  '@esbuild/linux-loong64@0.21.5':
-    optional: true
-
-  '@esbuild/linux-loong64@0.25.12':
-    optional: true
-
-  '@esbuild/linux-loong64@0.27.4':
-    optional: true
-
-  '@esbuild/linux-mips64el@0.21.5':
-    optional: true
-
-  '@esbuild/linux-mips64el@0.25.12':
-    optional: true
-
-  '@esbuild/linux-mips64el@0.27.4':
-    optional: true
-
-  '@esbuild/linux-ppc64@0.21.5':
-    optional: true
-
-  '@esbuild/linux-ppc64@0.25.12':
-    optional: true
-
-  '@esbuild/linux-ppc64@0.27.4':
-    optional: true
-
-  '@esbuild/linux-riscv64@0.21.5':
-    optional: true
-
-  '@esbuild/linux-riscv64@0.25.12':
-    optional: true
-
-  '@esbuild/linux-riscv64@0.27.4':
-    optional: true
-
-  '@esbuild/linux-s390x@0.21.5':
-    optional: true
-
-  '@esbuild/linux-s390x@0.25.12':
-    optional: true
-
-  '@esbuild/linux-s390x@0.27.4':
-    optional: true
-
-  '@esbuild/linux-x64@0.21.5':
-    optional: true
-
-  '@esbuild/linux-x64@0.25.12':
-    optional: true
-
-  '@esbuild/linux-x64@0.27.4':
-    optional: true
-
-  '@esbuild/netbsd-arm64@0.25.12':
-    optional: true
-
-  '@esbuild/netbsd-arm64@0.27.4':
-    optional: true
-
-  '@esbuild/netbsd-x64@0.21.5':
-    optional: true
-
-  '@esbuild/netbsd-x64@0.25.12':
-    optional: true
-
-  '@esbuild/netbsd-x64@0.27.4':
-    optional: true
-
-  '@esbuild/openbsd-arm64@0.25.12':
-    optional: true
-
-  '@esbuild/openbsd-arm64@0.27.4':
-    optional: true
-
-  '@esbuild/openbsd-x64@0.21.5':
-    optional: true
-
-  '@esbuild/openbsd-x64@0.25.12':
-    optional: true
-
-  '@esbuild/openbsd-x64@0.27.4':
-    optional: true
-
-  '@esbuild/openharmony-arm64@0.25.12':
-    optional: true
-
-  '@esbuild/openharmony-arm64@0.27.4':
-    optional: true
-
-  '@esbuild/sunos-x64@0.21.5':
-    optional: true
-
-  '@esbuild/sunos-x64@0.25.12':
-    optional: true
-
-  '@esbuild/sunos-x64@0.27.4':
-    optional: true
-
-  '@esbuild/win32-arm64@0.21.5':
-    optional: true
-
-  '@esbuild/win32-arm64@0.25.12':
-    optional: true
-
-  '@esbuild/win32-arm64@0.27.4':
-    optional: true
-
-  '@esbuild/win32-ia32@0.21.5':
-    optional: true
-
-  '@esbuild/win32-ia32@0.25.12':
-    optional: true
-
-  '@esbuild/win32-ia32@0.27.4':
-    optional: true
-
-  '@esbuild/win32-x64@0.21.5':
-    optional: true
-
-  '@esbuild/win32-x64@0.25.12':
-    optional: true
-
-  '@esbuild/win32-x64@0.27.4':
-    optional: true
-
-  '@floating-ui/core@1.7.5':
-    dependencies:
-      '@floating-ui/utils': 0.2.11
-
-  '@floating-ui/dom@1.7.6':
-    dependencies:
-      '@floating-ui/core': 1.7.5
-      '@floating-ui/utils': 0.2.11
-
-  '@floating-ui/react-dom@2.1.8(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@floating-ui/dom': 1.7.6
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-
-  '@floating-ui/react@0.26.28(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@floating-ui/react-dom': 2.1.8(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@floating-ui/utils': 0.2.11
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-      tabbable: 6.5.0
-
-  '@floating-ui/utils@0.2.11': {}
-
-  '@fortawesome/fontawesome-common-types@6.7.2': {}
-
-  '@fortawesome/fontawesome-common-types@7.3.0': {}
-
-  '@fortawesome/fontawesome-free@6.7.2': {}
-
-  '@fortawesome/fontawesome-svg-core@6.7.2':
-    dependencies:
-      '@fortawesome/fontawesome-common-types': 6.7.2
-
-  '@fortawesome/fontawesome-svg-core@7.3.0':
-    dependencies:
-      '@fortawesome/fontawesome-common-types': 7.3.0
-
-  '@fortawesome/free-brands-svg-icons@6.7.2':
-    dependencies:
-      '@fortawesome/fontawesome-common-types': 6.7.2
-
-  '@fortawesome/free-brands-svg-icons@7.3.0':
-    dependencies:
-      '@fortawesome/fontawesome-common-types': 7.3.0
-
-  '@fortawesome/free-solid-svg-icons@6.7.2':
-    dependencies:
-      '@fortawesome/fontawesome-common-types': 6.7.2
-
-  '@fortawesome/free-solid-svg-icons@7.3.0':
-    dependencies:
-      '@fortawesome/fontawesome-common-types': 7.3.0
-
-  '@fortawesome/react-fontawesome@0.2.6(@fortawesome/fontawesome-svg-core@6.7.2)(react@19.2.7)':
-    dependencies:
-      '@fortawesome/fontawesome-svg-core': 6.7.2
-      prop-types: 15.8.1
-      react: 19.2.7
-
-  '@fortawesome/react-fontawesome@3.3.1(@fortawesome/fontawesome-svg-core@7.3.0)(react@19.2.7)':
-    dependencies:
-      '@fortawesome/fontawesome-svg-core': 7.3.0
-      react: 19.2.7
-
-  '@gerrit0/mini-shiki@3.23.0':
-    dependencies:
-      '@shikijs/engine-oniguruma': 3.23.0
-      '@shikijs/langs': 3.23.0
-      '@shikijs/themes': 3.23.0
-      '@shikijs/types': 3.23.0
-      '@shikijs/vscode-textmate': 10.0.2
-
-  '@google/genai@1.52.0(@modelcontextprotocol/sdk@1.29.0(zod@4.3.6))(bufferutil@4.1.0)':
-    dependencies:
-      google-auth-library: 10.9.0
-      p-retry: 4.6.2
-      protobufjs: 7.5.4
-      ws: 8.21.0(bufferutil@4.1.0)
-    optionalDependencies:
-      '@modelcontextprotocol/sdk': 1.29.0(zod@4.3.6)
-    transitivePeerDependencies:
-      - bufferutil
-      - supports-color
-      - utf-8-validate
-
-  '@grpc/grpc-js@1.14.3':
-    dependencies:
-      '@grpc/proto-loader': 0.8.0
-      '@js-sdsl/ordered-map': 4.4.2
-    optional: true
-
-  '@grpc/proto-loader@0.7.15':
-    dependencies:
-      lodash.camelcase: 4.3.0
-      long: 5.3.2
-      protobufjs: 7.5.4
-      yargs: 17.7.2
-    optional: true
-
-  '@grpc/proto-loader@0.8.0':
-    dependencies:
-      lodash.camelcase: 4.3.0
-      long: 5.3.2
-      protobufjs: 7.5.4
-      yargs: 17.7.2
-    optional: true
-
-  '@headlessui/react@2.2.10(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@floating-ui/react': 0.26.28(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@react-aria/focus': 3.22.1(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@react-aria/interactions': 3.28.1(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@tanstack/react-virtual': 3.14.5(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-      use-sync-external-store: 1.6.0(react@19.2.7)
-
-  '@hono/node-server@1.19.14(hono@4.12.27)':
-    dependencies:
-      hono: 4.12.27
-
-  '@hookform/resolvers@3.10.0(react-hook-form@7.80.0(react@19.2.7))':
-    dependencies:
-      react-hook-form: 7.80.0(react@19.2.7)
-
-  '@iconify/types@2.0.0': {}
-
-  '@iconify/utils@3.1.3':
-    dependencies:
-      '@antfu/install-pkg': 1.1.0
-      '@iconify/types': 2.0.0
-      import-meta-resolve: 4.2.0
-
-  '@img/colour@1.1.0':
-    optional: true
-
-  '@img/sharp-darwin-arm64@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-darwin-arm64': 1.0.4
-    optional: true
-
-  '@img/sharp-darwin-arm64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-darwin-arm64': 1.2.4
-    optional: true
-
-  '@img/sharp-darwin-x64@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-darwin-x64': 1.0.4
-    optional: true
-
-  '@img/sharp-darwin-x64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-darwin-x64': 1.2.4
-    optional: true
-
-  '@img/sharp-libvips-darwin-arm64@1.0.4':
-    optional: true
-
-  '@img/sharp-libvips-darwin-arm64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-darwin-x64@1.0.4':
-    optional: true
-
-  '@img/sharp-libvips-darwin-x64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-arm64@1.0.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-arm64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-arm@1.0.5':
-    optional: true
-
-  '@img/sharp-libvips-linux-arm@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-ppc64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-riscv64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-s390x@1.0.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-s390x@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-x64@1.0.4':
-    optional: true
-
-  '@img/sharp-libvips-linux-x64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linuxmusl-arm64@1.0.4':
-    optional: true
-
-  '@img/sharp-libvips-linuxmusl-arm64@1.2.4':
-    optional: true
-
-  '@img/sharp-libvips-linuxmusl-x64@1.0.4':
-    optional: true
-
-  '@img/sharp-libvips-linuxmusl-x64@1.2.4':
-    optional: true
-
-  '@img/sharp-linux-arm64@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-arm64': 1.0.4
-    optional: true
-
-  '@img/sharp-linux-arm64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-arm64': 1.2.4
-    optional: true
-
-  '@img/sharp-linux-arm@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-arm': 1.0.5
-    optional: true
-
-  '@img/sharp-linux-arm@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-arm': 1.2.4
-    optional: true
-
-  '@img/sharp-linux-ppc64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-ppc64': 1.2.4
-    optional: true
-
-  '@img/sharp-linux-riscv64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-riscv64': 1.2.4
-    optional: true
-
-  '@img/sharp-linux-s390x@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-s390x': 1.0.4
-    optional: true
-
-  '@img/sharp-linux-s390x@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-s390x': 1.2.4
-    optional: true
-
-  '@img/sharp-linux-x64@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-x64': 1.0.4
-    optional: true
-
-  '@img/sharp-linux-x64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linux-x64': 1.2.4
-    optional: true
-
-  '@img/sharp-linuxmusl-arm64@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-arm64': 1.0.4
-    optional: true
-
-  '@img/sharp-linuxmusl-arm64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-arm64': 1.2.4
-    optional: true
-
-  '@img/sharp-linuxmusl-x64@0.33.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-x64': 1.0.4
-    optional: true
-
-  '@img/sharp-linuxmusl-x64@0.34.5':
-    optionalDependencies:
-      '@img/sharp-libvips-linuxmusl-x64': 1.2.4
-    optional: true
-
-  '@img/sharp-wasm32@0.33.5':
-    dependencies:
-      '@emnapi/runtime': 1.11.1
-    optional: true
-
-  '@img/sharp-wasm32@0.34.5':
-    dependencies:
-      '@emnapi/runtime': 1.11.1
-    optional: true
-
-  '@img/sharp-win32-arm64@0.34.5':
-    optional: true
-
-  '@img/sharp-win32-ia32@0.33.5':
-    optional: true
-
-  '@img/sharp-win32-ia32@0.34.5':
-    optional: true
-
-  '@img/sharp-win32-x64@0.33.5':
-    optional: true
-
-  '@img/sharp-win32-x64@0.34.5':
-    optional: true
-
-  '@internationalized/date@3.12.2':
-    dependencies:
-      '@swc/helpers': 0.5.23
-
-  '@internationalized/number@3.6.7':
-    dependencies:
-      '@swc/helpers': 0.5.23
-
-  '@internationalized/string@3.2.9':
-    dependencies:
-      '@swc/helpers': 0.5.23
-
-  '@isaacs/cliui@8.0.2':
-    dependencies:
-      string-width: 5.1.2
-      string-width-cjs: string-width@4.2.3
-      strip-ansi: 7.2.0
-      strip-ansi-cjs: strip-ansi@6.0.1
-      wrap-ansi: 8.1.0
-      wrap-ansi-cjs: wrap-ansi@7.0.0
-
-  '@jridgewell/gen-mapping@0.3.13':
-    dependencies:
-      '@jridgewell/sourcemap-codec': 1.5.5
-      '@jridgewell/trace-mapping': 0.3.31
-
-  '@jridgewell/remapping@2.3.5':
-    dependencies:
-      '@jridgewell/gen-mapping': 0.3.13
-      '@jridgewell/trace-mapping': 0.3.31
-
-  '@jridgewell/resolve-uri@3.1.2': {}
-
-  '@jridgewell/sourcemap-codec@1.5.5': {}
-
-  '@jridgewell/trace-mapping@0.3.31':
-    dependencies:
-      '@jridgewell/resolve-uri': 3.1.2
-      '@jridgewell/sourcemap-codec': 1.5.5
-
-  '@js-sdsl/ordered-map@4.4.2':
-    optional: true
-
-  '@lezer/common@1.5.2': {}
-
-  '@lezer/highlight@1.2.3':
-    dependencies:
-      '@lezer/common': 1.5.2
-
-  '@lezer/javascript@1.5.4':
-    dependencies:
-      '@lezer/common': 1.5.2
-      '@lezer/highlight': 1.2.3
-      '@lezer/lr': 1.4.10
-
-  '@lezer/json@1.0.3':
-    dependencies:
-      '@lezer/common': 1.5.2
-      '@lezer/highlight': 1.2.3
-      '@lezer/lr': 1.4.10
-
-  '@lezer/lr@1.4.10':
-    dependencies:
-      '@lezer/common': 1.5.2
-
-  '@marijn/find-cluster-break@1.0.3': {}
-
-  '@mariozechner/clipboard-darwin-arm64@0.3.9':
-    optional: true
-
-  '@mariozechner/clipboard-darwin-universal@0.3.9':
-    optional: true
-
-  '@mariozechner/clipboard-darwin-x64@0.3.9':
-    optional: true
-
-  '@mariozechner/clipboard-linux-arm64-gnu@0.3.9':
-    optional: true
-
-  '@mariozechner/clipboard-linux-arm64-musl@0.3.9':
-    optional: true
-
-  '@mariozechner/clipboard-linux-riscv64-gnu@0.3.9':
-    optional: true
-
-  '@mariozechner/clipboard-linux-x64-gnu@0.3.9':
-    optional: true
-
-  '@mariozechner/clipboard-linux-x64-musl@0.3.9':
-    optional: true
-
-  '@mariozechner/clipboard-win32-arm64-msvc@0.3.9':
-    optional: true
-
-  '@mariozechner/clipboard-win32-x64-msvc@0.3.9':
-    optional: true
-
-  '@mariozechner/clipboard@0.3.9':
-    optionalDependencies:
-      '@mariozechner/clipboard-darwin-arm64': 0.3.9
-      '@mariozechner/clipboard-darwin-universal': 0.3.9
-      '@mariozechner/clipboard-darwin-x64': 0.3.9
-      '@mariozechner/clipboard-linux-arm64-gnu': 0.3.9
-      '@mariozechner/clipboard-linux-arm64-musl': 0.3.9
-      '@mariozechner/clipboard-linux-riscv64-gnu': 0.3.9
-      '@mariozechner/clipboard-linux-x64-gnu': 0.3.9
-      '@mariozechner/clipboard-linux-x64-musl': 0.3.9
-      '@mariozechner/clipboard-win32-arm64-msvc': 0.3.9
-      '@mariozechner/clipboard-win32-x64-msvc': 0.3.9
-    optional: true
-
-  '@mariozechner/jiti@2.6.5':
-    dependencies:
-      std-env: 3.10.0
-      yoctocolors: 2.1.2
-
-  '@mariozechner/pi-agent-core@0.60.0(@modelcontextprotocol/sdk@1.29.0(zod@4.3.6))(bufferutil@4.1.0)(ws@8.21.0(bufferutil@4.1.0))(zod@4.3.6)':
-    dependencies:
-      '@mariozechner/pi-ai': 0.60.0(@modelcontextprotocol/sdk@1.29.0(zod@4.3.6))(bufferutil@4.1.0)(ws@8.21.0(bufferutil@4.1.0))(zod@4.3.6)
-    transitivePeerDependencies:
-      - '@modelcontextprotocol/sdk'
-      - bufferutil
-      - supports-color
-      - utf-8-validate
-      - ws
-      - zod
-
-  '@mariozechner/pi-agent-core@0.60.0(zod@3.25.76)':
-    dependencies:
-      '@mariozechner/pi-ai': 0.60.0(zod@3.25.76)
-    transitivePeerDependencies:
-      - '@modelcontextprotocol/sdk'
-      - bufferutil
-      - supports-color
-      - utf-8-validate
-      - ws
-      - zod
-
-  '@mariozechner/pi-ai@0.60.0(@modelcontextprotocol/sdk@1.29.0(zod@4.3.6))(bufferutil@4.1.0)(ws@8.21.0(bufferutil@4.1.0))(zod@4.3.6)':
-    dependencies:
-      '@anthropic-ai/sdk': 0.73.0(zod@4.3.6)
-      '@aws-sdk/client-bedrock-runtime': 3.1075.0
-      '@google/genai': 1.52.0(@modelcontextprotocol/sdk@1.29.0(zod@4.3.6))(bufferutil@4.1.0)
-      '@mistralai/mistralai': 1.14.1(bufferutil@4.1.0)
-      '@sinclair/typebox': 0.34.49
-      ajv: 8.20.0
-      ajv-formats: 3.0.1(ajv@8.20.0)
-      chalk: 5.6.2
-      openai: 6.26.0(ws@8.21.0(bufferutil@4.1.0))(zod@4.3.6)
-      partial-json: 0.1.7
-      proxy-agent: 6.5.0
-      undici: 7.24.6
-      zod-to-json-schema: 3.25.2(zod@4.3.6)
-    transitivePeerDependencies:
-      - '@modelcontextprotocol/sdk'
-      - bufferutil
-      - supports-color
-      - utf-8-validate
-      - ws
-      - zod
-
-  '@mariozechner/pi-ai@0.60.0(zod@3.25.76)':
-    dependencies:
-      '@anthropic-ai/sdk': 0.73.0(zod@3.25.76)
-      '@aws-sdk/client-bedrock-runtime': 3.1075.0
-      '@google/genai': 1.52.0(@modelcontextprotocol/sdk@1.29.0(zod@4.3.6))(bufferutil@4.1.0)
-      '@mistralai/mistralai': 1.14.1(bufferutil@4.1.0)
-      '@sinclair/typebox': 0.34.49
-      ajv: 8.20.0
-      ajv-formats: 3.0.1(ajv@8.20.0)
-      chalk: 5.6.2
-      openai: 6.26.0(zod@3.25.76)
-      partial-json: 0.1.7
-      proxy-agent: 6.5.0
-      undici: 7.24.6
-      zod-to-json-schema: 3.25.2(zod@3.25.76)
-    transitivePeerDependencies:
-      - '@modelcontextprotocol/sdk'
-      - bufferutil
-      - supports-color
-      - utf-8-validate
-      - ws
-      - zod
-
-  '@mariozechner/pi-coding-agent@0.60.0(@modelcontextprotocol/sdk@1.29.0(zod@4.3.6))(bufferutil@4.1.0)(ws@8.21.0(bufferutil@4.1.0))(zod@4.3.6)':
-    dependencies:
-      '@mariozechner/jiti': 2.6.5
-      '@mariozechner/pi-agent-core': 0.60.0(@modelcontextprotocol/sdk@1.29.0(zod@4.3.6))(bufferutil@4.1.0)(ws@8.21.0(bufferutil@4.1.0))(zod@4.3.6)
-      '@mariozechner/pi-ai': 0.60.0(@modelcontextprotocol/sdk@1.29.0(zod@4.3.6))(bufferutil@4.1.0)(ws@8.21.0(bufferutil@4.1.0))(zod@4.3.6)
-      '@mariozechner/pi-tui': 0.60.0
-      '@silvia-odwyer/photon-node': 0.3.4
-      chalk: 5.6.2
-      cli-highlight: 2.1.11
-      diff: 8.0.4
-      extract-zip: 2.0.1
-      file-type: 21.3.4
-      glob: 13.0.6
-      hosted-git-info: 9.0.3
-      ignore: 7.0.5
-      marked: 15.0.12
-      minimatch: 10.2.5
-      proper-lockfile: 4.1.2
-      strip-ansi: 7.2.0
-      undici: 7.24.6
-      yaml: 2.9.0
-    optionalDependencies:
-      '@mariozechner/clipboard': 0.3.9
-    transitivePeerDependencies:
-      - '@modelcontextprotocol/sdk'
-      - bufferutil
-      - supports-color
-      - utf-8-validate
-      - ws
-      - zod
-
-  '@mariozechner/pi-coding-agent@0.60.0(zod@3.25.76)':
-    dependencies:
-      '@mariozechner/jiti': 2.6.5
-      '@mariozechner/pi-agent-core': 0.60.0(zod@3.25.76)
-      '@mariozechner/pi-ai': 0.60.0(zod@3.25.76)
-      '@mariozechner/pi-tui': 0.60.0
-      '@silvia-odwyer/photon-node': 0.3.4
-      chalk: 5.6.2
-      cli-highlight: 2.1.11
-      diff: 8.0.4
-      extract-zip: 2.0.1
-      file-type: 21.3.4
-      glob: 13.0.6
-      hosted-git-info: 9.0.3
-      ignore: 7.0.5
-      marked: 15.0.12
-      minimatch: 10.2.5
-      proper-lockfile: 4.1.2
-      strip-ansi: 7.2.0
-      undici: 7.24.6
-      yaml: 2.9.0
-    optionalDependencies:
-      '@mariozechner/clipboard': 0.3.9
-    transitivePeerDependencies:
-      - '@modelcontextprotocol/sdk'
-      - bufferutil
-      - supports-color
-      - utf-8-validate
-      - ws
-      - zod
-
-  '@mariozechner/pi-tui@0.60.0':
-    dependencies:
-      '@types/mime-types': 2.1.4
-      chalk: 5.6.2
-      get-east-asian-width: 1.6.0
-      marked: 15.0.12
-      mime-types: 3.0.2
-    optionalDependencies:
-      koffi: 2.16.2
-
-  '@mdx-js/mdx@3.1.1':
-    dependencies:
-      '@types/estree': 1.0.8
-      '@types/estree-jsx': 1.0.5
-      '@types/hast': 3.0.4
-      '@types/mdx': 2.0.14
-      acorn: 8.17.0
-      collapse-white-space: 2.1.0
-      devlop: 1.1.0
-      estree-util-is-identifier-name: 3.0.0
-      estree-util-scope: 1.0.0
-      estree-walker: 3.0.3
-      hast-util-to-jsx-runtime: 2.3.6
-      markdown-extensions: 2.0.0
-      recma-build-jsx: 1.0.0
-      recma-jsx: 1.0.1(acorn@8.17.0)
-      recma-stringify: 1.0.0
-      rehype-recma: 1.0.0
-      remark-mdx: 3.1.1
-      remark-parse: 11.0.0
-      remark-rehype: 11.1.2
-      source-map: 0.7.6
-      unified: 11.0.5
-      unist-util-position-from-estree: 2.0.0
-      unist-util-stringify-position: 4.0.0
-      unist-util-visit: 5.1.0
-      vfile: 6.0.3
-    transitivePeerDependencies:
-      - supports-color
-
-  '@mermaid-js/parser@1.2.0':
-    dependencies:
-      '@chevrotain/types': 11.1.2
-
-  '@mistralai/mistralai@1.14.1(bufferutil@4.1.0)':
-    dependencies:
-      ws: 8.21.0(bufferutil@4.1.0)
-      zod: 4.3.6
-      zod-to-json-schema: 3.25.2(zod@4.3.6)
-    transitivePeerDependencies:
-      - bufferutil
-      - utf-8-validate
-
-  '@modelcontextprotocol/sdk@1.29.0(zod@4.3.6)':
-    dependencies:
-      '@hono/node-server': 1.19.14(hono@4.12.27)
-      ajv: 8.20.0
-      ajv-formats: 3.0.1(ajv@8.20.0)
-      content-type: 1.0.5
-      cors: 2.8.6
-      cross-spawn: 7.0.6
-      eventsource: 3.0.7
-      eventsource-parser: 3.1.0
-      express: 5.2.1
-      express-rate-limit: 8.5.2(express@5.2.1)
-      hono: 4.12.27
-      jose: 6.2.3
-      json-schema-typed: 8.0.2
-      pkce-challenge: 5.0.1
-      raw-body: 3.0.2
-      zod: 4.3.6
-      zod-to-json-schema: 3.25.2(zod@4.3.6)
-    transitivePeerDependencies:
-      - supports-color
-
-  '@noble/ciphers@2.2.0': {}
-
-  '@noble/hashes@2.2.0': {}
-
-  '@nodelib/fs.scandir@2.1.5':
-    dependencies:
-      '@nodelib/fs.stat': 2.0.5
-      run-parallel: 1.2.0
-
-  '@nodelib/fs.stat@2.0.5': {}
-
-  '@nodelib/fs.walk@1.2.8':
-    dependencies:
-      '@nodelib/fs.scandir': 2.1.5
-      fastq: 1.20.1
-
-  '@oclif/core@4.11.14':
-    dependencies:
-      ansi-escapes: 4.3.2
-      ansis: 3.17.0
-      clean-stack: 3.0.1
-      cli-spinners: 2.9.2
-      debug: 4.4.3(supports-color@8.1.1)
-      ejs: 3.1.10
-      get-package-type: 0.1.0
-      indent-string: 4.0.0
-      is-wsl: 2.2.0
-      lilconfig: 3.1.3
-      minimatch: 10.2.5
-      semver: 7.8.5
-      string-width: 4.2.3
-      supports-color: 8.1.1
-      tinyglobby: 0.2.17
-      widest-line: 3.1.0
-      wordwrap: 1.0.0
-      wrap-ansi: 7.0.0
-
-  '@opentelemetry/api@1.9.0': {}
-
-  '@oslojs/encoding@1.1.0': {}
-
-  '@oven/bun-darwin-aarch64@1.3.11':
-    optional: true
-
-  '@oven/bun-darwin-x64-baseline@1.3.11':
-    optional: true
-
-  '@oven/bun-darwin-x64@1.3.11':
-    optional: true
-
-  '@oven/bun-linux-aarch64-musl@1.3.11':
-    optional: true
-
-  '@oven/bun-linux-aarch64@1.3.11':
-    optional: true
-
-  '@oven/bun-linux-x64-baseline@1.3.11':
-    optional: true
-
-  '@oven/bun-linux-x64-musl-baseline@1.3.11':
-    optional: true
-
-  '@oven/bun-linux-x64-musl@1.3.11':
-    optional: true
-
-  '@oven/bun-linux-x64@1.3.11':
-    optional: true
-
-  '@oven/bun-windows-aarch64@1.3.11':
-    optional: true
-
-  '@oven/bun-windows-x64-baseline@1.3.11':
-    optional: true
-
-  '@oven/bun-windows-x64@1.3.11':
-    optional: true
-
-  '@pinojs/redact@0.4.0': {}
-
-  '@pkgjs/parseargs@0.11.0':
-    optional: true
-
-  '@playwright/test@1.59.1':
-    dependencies:
-      playwright: 1.59.1
-
-  '@posthog/core@1.39.6':
-    dependencies:
-      '@posthog/types': 1.392.0
-
-  '@posthog/types@1.392.0': {}
-
-  '@protobufjs/aspromise@1.1.2': {}
-
-  '@protobufjs/base64@1.1.2': {}
-
-  '@protobufjs/codegen@2.0.4': {}
-
-  '@protobufjs/eventemitter@1.1.0': {}
-
-  '@protobufjs/fetch@1.1.0':
-    dependencies:
-      '@protobufjs/aspromise': 1.1.2
-      '@protobufjs/inquire': 1.1.0
-
-  '@protobufjs/float@1.0.2': {}
-
-  '@protobufjs/inquire@1.1.0': {}
-
-  '@protobufjs/path@1.1.2': {}
-
-  '@protobufjs/pool@1.1.0': {}
-
-  '@protobufjs/utf8@1.1.0': {}
-
-  '@radix-ui/number@1.1.2': {}
-
-  '@radix-ui/primitive@1.1.4': {}
-
-  '@radix-ui/react-accordion@1.2.15(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-collapsible': 1.1.15(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-collection': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-arrow@1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-avatar@1.2.1(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-is-hydrated': 0.1.1(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-checkbox@1.3.6(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.6(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-size': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-collapsible@1.1.15(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.6(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-collection@1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-compose-refs@1.1.3(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-context-menu@2.3.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-menu': 2.1.19(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-context@1.1.4(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-dialog@1.1.18(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-focus-scope': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.6(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      aria-hidden: 1.2.6
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-      react-remove-scroll: 2.7.2(@types/react@19.2.17)(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-direction@1.1.2(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-dismissable-layer@1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-dropdown-menu@2.1.19(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-menu': 2.1.19(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-focus-guards@1.1.4(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-focus-scope@1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-id@1.1.2(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-label@2.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-menu@2.1.19(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-collection': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-focus-scope': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-popper': 1.3.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.6(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-roving-focus': 1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      aria-hidden: 1.2.6
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-      react-remove-scroll: 2.7.2(@types/react@19.2.17)(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-popover@1.1.18(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-focus-scope': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-popper': 1.3.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.6(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      aria-hidden: 1.2.6
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-      react-remove-scroll: 2.7.2(@types/react@19.2.17)(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-popper@1.3.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@floating-ui/react-dom': 2.1.8(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-arrow': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-rect': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-size': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/rect': 1.1.2
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-portal@1.1.13(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-presence@1.1.6(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-primitive@2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-progress@1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-radio-group@1.4.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.6(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-roving-focus': 1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-size': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-roving-focus@1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-collection': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-scroll-area@1.2.13(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/number': 1.1.2
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.6(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-select@2.3.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/number': 1.1.2
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-collection': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-focus-guards': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-focus-scope': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-popper': 1.3.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.6(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-callback-ref': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      aria-hidden: 1.2.6
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-      react-remove-scroll: 2.7.2(@types/react@19.2.17)(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-separator@1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-slider@1.4.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/number': 1.1.2
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-collection': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-size': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-slot@1.3.0(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-switch@1.3.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-previous': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-size': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-tabs@1.1.16(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.6(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-roving-focus': 1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-toggle-group@1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-direction': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-roving-focus': 1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-toggle': 1.1.13(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-toggle@1.1.13(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-tooltip@1.2.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/primitive': 1.1.4
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-context': 1.1.4(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-dismissable-layer': 1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-popper': 1.3.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-portal': 1.1.13(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-presence': 1.1.6(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-controllable-state': 1.2.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/react-use-callback-ref@1.1.2(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-use-controllable-state@1.2.3(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-use-effect-event': 0.0.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-use-effect-event@0.0.3(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-use-is-hydrated@0.1.1(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-use-layout-effect@1.1.2(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-use-previous@1.1.2(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-use-rect@1.1.2(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      '@radix-ui/rect': 1.1.2
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-use-size@1.1.2(@types/react@19.2.17)(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-use-layout-effect': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      react: 19.2.7
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  '@radix-ui/react-visually-hidden@1.2.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-      '@types/react-dom': 19.2.3(@types/react@19.2.17)
-
-  '@radix-ui/rect@1.1.2': {}
-
-  '@react-aria/focus@3.22.1(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@swc/helpers': 0.5.23
-      react: 19.2.7
-      react-aria: 3.50.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      react-dom: 19.2.7(react@19.2.7)
-
-  '@react-aria/interactions@3.28.1(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@react-types/shared': 3.36.0(react@19.2.7)
-      '@swc/helpers': 0.5.23
-      react: 19.2.7
-      react-aria: 3.50.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      react-dom: 19.2.7(react@19.2.7)
-
-  '@react-types/shared@3.36.0(react@19.2.7)':
-    dependencies:
-      react: 19.2.7
-
-  '@rivet-dev/docs-theme@https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7(@babel/core@7.29.7)(@babel/runtime@7.29.7)(@babel/template@7.29.7)(@codemirror/language@6.12.4)(@codemirror/search@6.7.1)(@codemirror/theme-one-dark@6.1.3)(@types/node@24.13.2)(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(astro@5.18.2(@types/node@24.13.2)(aws4fetch@1.0.20)(jiti@1.21.7)(rollup@4.60.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0))(codemirror@6.0.2)(jiti@1.21.7)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tsx@4.21.0)(use-sync-external-store@1.6.0(react@19.2.7))(yaml@2.9.0)':
-    dependencies:
-      '@astrojs/mdx': 4.3.14(astro@5.18.2(@types/node@24.13.2)(aws4fetch@1.0.20)(jiti@1.21.7)(rollup@4.60.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0))
-      '@astrojs/react': 4.4.2(@types/node@24.13.2)(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(jiti@1.21.7)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tsx@4.21.0)(yaml@2.9.0)
-      '@astrojs/sitemap': 3.7.3
-      '@fortawesome/fontawesome-svg-core': 7.3.0
-      '@fortawesome/free-brands-svg-icons': 7.3.0
-      '@fortawesome/free-solid-svg-icons': 7.3.0
-      '@fortawesome/react-fontawesome': 3.3.1(@fortawesome/fontawesome-svg-core@7.3.0)(react@19.2.7)
-      '@headlessui/react': 2.2.10(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@rivet-gg/components': https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7#path:vendor/components(@babel/core@7.29.7)(@babel/runtime@7.29.7)(@babel/template@7.29.7)(@codemirror/language@6.12.4)(@codemirror/search@6.7.1)(@codemirror/theme-one-dark@6.1.3)(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(codemirror@6.0.2)(lodash@4.18.1)(posthog-js@1.396.5)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@3.4.19(tsx@4.21.0)(yaml@2.9.0))
-      '@rivet-gg/icons': https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7#path:vendor/icons(@fortawesome/fontawesome-svg-core@7.3.0)(@fortawesome/free-brands-svg-icons@7.3.0)(@fortawesome/free-solid-svg-icons@7.3.0)(@fortawesome/react-fontawesome@3.3.1(@fortawesome/fontawesome-svg-core@7.3.0)(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@shikijs/transformers': 3.23.0
-      '@sindresorhus/slugify': 3.0.0
-      '@tailwindcss/typography': 0.5.20(tailwindcss@3.4.19(tsx@4.21.0)(yaml@2.9.0))
-      acorn: 8.17.0
-      astro: 5.18.2(@types/node@24.13.2)(aws4fetch@1.0.20)(jiti@1.21.7)(rollup@4.60.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0)
-      clsx: 2.1.1
-      dedent: 1.7.2
-      esast-util-from-js: 2.0.1
-      escape-html: 1.0.3
-      estree-util-to-js: 2.0.0
-      fast-glob: 3.3.3
-      framer-motion: 12.40.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      fuse.js: 7.4.2
-      lodash: 4.18.1
-      lucide-react: 0.439.0(react@19.2.7)
-      mdast-util-to-string: 4.0.0
-      mdx-annotations: 0.1.4
-      mermaid: 11.16.0
-      playwright: 1.59.1
-      posthog-js: 1.396.5
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-      react-markdown: 10.1.0(@types/react@19.2.17)(react@19.2.7)
-      rehype-mermaid: 3.0.0(playwright@1.59.1)
-      rehype-parse: 9.0.1
-      remark-gfm: 4.0.1
-      shiki: 3.23.0
-      tailwindcss: 3.4.19(tsx@4.21.0)(yaml@2.9.0)
-      tm-themes: 1.12.2
-      typesense: 2.1.0(@babel/runtime@7.29.7)
-      unified: 11.0.5
-      unist-util-filter: 5.0.1
-      unist-util-visit: 5.1.0
-      zustand: 5.0.14(@types/react@19.2.17)(react@19.2.7)(use-sync-external-store@1.6.0(react@19.2.7))
-    transitivePeerDependencies:
-      - '@babel/core'
-      - '@babel/runtime'
-      - '@babel/template'
-      - '@codemirror/language'
-      - '@codemirror/search'
-      - '@codemirror/theme-one-dark'
-      - '@emotion/is-prop-valid'
-      - '@types/node'
-      - '@types/react'
-      - '@types/react-dom'
-      - babel-plugin-macros
-      - codemirror
-      - debug
-      - immer
-      - jiti
-      - less
-      - lightningcss
-      - sass
-      - sass-embedded
-      - stylus
-      - sugarss
-      - supports-color
-      - terser
-      - tsx
-      - use-sync-external-store
-      - yaml
-
-  '@rivet-gg/components@https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7#path:vendor/components(@babel/core@7.29.7)(@babel/runtime@7.29.7)(@babel/template@7.29.7)(@codemirror/language@6.12.4)(@codemirror/search@6.7.1)(@codemirror/theme-one-dark@6.1.3)(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(codemirror@6.0.2)(lodash@4.18.1)(posthog-js@1.396.5)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)(tailwindcss@3.4.19(tsx@4.21.0)(yaml@2.9.0))':
-    dependencies:
-      '@codemirror/autocomplete': 6.20.3
-      '@codemirror/commands': 6.10.4
-      '@codemirror/lang-javascript': 6.2.5
-      '@codemirror/lang-json': 6.0.2
-      '@codemirror/lint': 6.9.7
-      '@codemirror/state': 6.7.0
-      '@codemirror/view': 6.43.4
-      '@fortawesome/fontawesome-svg-core': 6.7.2
-      '@fortawesome/free-brands-svg-icons': 6.7.2
-      '@fortawesome/free-solid-svg-icons': 6.7.2
-      '@fortawesome/react-fontawesome': 0.2.6(@fortawesome/fontawesome-svg-core@6.7.2)(react@19.2.7)
-      '@hookform/resolvers': 3.10.0(react-hook-form@7.80.0(react@19.2.7))
-      '@radix-ui/react-accordion': 1.2.15(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-avatar': 1.2.1(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-checkbox': 1.3.6(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-context-menu': 2.3.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-dialog': 1.1.18(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-dropdown-menu': 2.1.19(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-label': 2.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-popover': 1.1.18(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-progress': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-radio-group': 1.4.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-scroll-area': 1.2.13(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-select': 2.3.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-separator': 1.1.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-slider': 1.4.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-slot': 1.3.0(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-switch': 1.3.2(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-tabs': 1.1.16(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-toggle': 1.1.13(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-toggle-group': 1.1.14(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-tooltip': 1.2.11(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-visually-hidden': 1.2.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@rivet-gg/icons': https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7#path:vendor/icons(@fortawesome/fontawesome-svg-core@6.7.2)(@fortawesome/free-brands-svg-icons@6.7.2)(@fortawesome/free-solid-svg-icons@6.7.2)(@fortawesome/react-fontawesome@0.2.6(@fortawesome/fontawesome-svg-core@6.7.2)(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@sentry/react': 8.55.2(react@19.2.7)
-      '@shikijs/langs': 3.23.0
-      '@tailwindcss/container-queries': 0.1.1(tailwindcss@3.4.19(tsx@4.21.0)(yaml@2.9.0))
-      '@tailwindcss/typography': 0.5.20(tailwindcss@3.4.19(tsx@4.21.0)(yaml@2.9.0))
-      '@tanstack/react-table': 8.21.3(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@tanstack/react-virtual': 3.14.5(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@uiw/codemirror-extensions-basic-setup': 4.25.10(@codemirror/autocomplete@6.20.3)(@codemirror/commands@6.10.4)(@codemirror/language@6.12.4)(@codemirror/lint@6.9.7)(@codemirror/search@6.7.1)(@codemirror/state@6.7.0)(@codemirror/view@6.43.4)
-      '@uiw/codemirror-theme-github': 4.25.10(@codemirror/language@6.12.4)(@codemirror/state@6.7.0)(@codemirror/view@6.43.4)
-      '@uiw/react-codemirror': 4.25.10(@babel/runtime@7.29.7)(@codemirror/autocomplete@6.20.3)(@codemirror/language@6.12.4)(@codemirror/lint@6.9.7)(@codemirror/search@6.7.1)(@codemirror/state@6.7.0)(@codemirror/theme-one-dark@6.1.3)(@codemirror/view@6.43.4)(codemirror@6.0.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      class-variance-authority: 0.7.1
-      clsx: 2.1.1
-      cmdk: 1.1.1(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      date-fns: 4.4.0
-      esast-util-from-js: 2.0.1
-      estree-util-to-js: 2.0.0
-      fast-deep-equal: 3.1.3
-      framer-motion: 11.18.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      input-otp: 1.4.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      jotai: 2.20.1(@babel/core@7.29.7)(@babel/template@7.29.7)(@types/react@19.2.17)(react@19.2.7)
-      jotai-effect: 2.3.1(jotai@2.20.1(@babel/core@7.29.7)(@babel/template@7.29.7)(@types/react@19.2.17)(react@19.2.7))
-      lodash: 4.18.1
-      lucide-react: 0.439.0(react@19.2.7)
-      react: 19.2.7
-      react-day-picker: 8.10.1(date-fns@4.4.0)(react@19.2.7)
-      react-dom: 19.2.7(react@19.2.7)
-      react-hook-form: 7.80.0(react@19.2.7)
-      react-resizable-panels: 2.1.9(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      recharts: 2.15.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      sonner: 1.7.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      tailwind-merge: 2.6.1
-      tailwindcss-animate: 1.0.7(tailwindcss@3.4.19(tsx@4.21.0)(yaml@2.9.0))
-      usehooks-ts: 3.1.1(react@19.2.7)
-      zod: 3.25.76
-    optionalDependencies:
-      posthog-js: 1.396.5
-    transitivePeerDependencies:
-      - '@babel/core'
-      - '@babel/runtime'
-      - '@babel/template'
-      - '@codemirror/language'
-      - '@codemirror/search'
-      - '@codemirror/theme-one-dark'
-      - '@emotion/is-prop-valid'
-      - '@types/react'
-      - '@types/react-dom'
-      - codemirror
-      - tailwindcss
-
-  '@rivet-gg/icons@https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7#path:vendor/icons(@fortawesome/fontawesome-svg-core@6.7.2)(@fortawesome/free-brands-svg-icons@6.7.2)(@fortawesome/free-solid-svg-icons@6.7.2)(@fortawesome/react-fontawesome@0.2.6(@fortawesome/fontawesome-svg-core@6.7.2)(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@fortawesome/fontawesome-svg-core': 6.7.2
-      '@fortawesome/free-brands-svg-icons': 6.7.2
-      '@fortawesome/free-solid-svg-icons': 6.7.2
-      '@fortawesome/react-fontawesome': 0.2.6(@fortawesome/fontawesome-svg-core@6.7.2)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-
-  '@rivet-gg/icons@https://codeload.github.com/rivet-dev/docs-theme/tar.gz/71c3e482fe43e4cbc4f4327a26c8899b6bd4aaa7#path:vendor/icons(@fortawesome/fontawesome-svg-core@7.3.0)(@fortawesome/free-brands-svg-icons@7.3.0)(@fortawesome/free-solid-svg-icons@7.3.0)(@fortawesome/react-fontawesome@3.3.1(@fortawesome/fontawesome-svg-core@7.3.0)(react@19.2.7))(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@fortawesome/fontawesome-svg-core': 7.3.0
-      '@fortawesome/free-brands-svg-icons': 7.3.0
-      '@fortawesome/free-solid-svg-icons': 7.3.0
-      '@fortawesome/react-fontawesome': 3.3.1(@fortawesome/fontawesome-svg-core@7.3.0)(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-
-  '@rivetkit/bare-ts@0.6.2': {}
-
-  '@rolldown/pluginutils@1.0.0-beta.27': {}
-
-  '@rollup/pluginutils@5.4.0(rollup@4.60.1)':
-    dependencies:
-      '@types/estree': 1.0.8
-      estree-walker: 2.0.2
-      picomatch: 4.0.4
-    optionalDependencies:
-      rollup: 4.60.1
-
-  '@rollup/rollup-android-arm-eabi@4.60.1':
-    optional: true
-
-  '@rollup/rollup-android-arm64@4.60.1':
-    optional: true
-
-  '@rollup/rollup-darwin-arm64@4.60.1':
-    optional: true
-
-  '@rollup/rollup-darwin-x64@4.60.1':
-    optional: true
-
-  '@rollup/rollup-freebsd-arm64@4.60.1':
-    optional: true
-
-  '@rollup/rollup-freebsd-x64@4.60.1':
-    optional: true
-
-  '@rollup/rollup-linux-arm-gnueabihf@4.60.1':
-    optional: true
-
-  '@rollup/rollup-linux-arm-musleabihf@4.60.1':
-    optional: true
-
-  '@rollup/rollup-linux-arm64-gnu@4.60.1':
-    optional: true
-
-  '@rollup/rollup-linux-arm64-musl@4.60.1':
-    optional: true
-
-  '@rollup/rollup-linux-loong64-gnu@4.60.1':
-    optional: true
-
-  '@rollup/rollup-linux-loong64-musl@4.60.1':
-    optional: true
-
-  '@rollup/rollup-linux-ppc64-gnu@4.60.1':
-    optional: true
-
-  '@rollup/rollup-linux-ppc64-musl@4.60.1':
-    optional: true
-
-  '@rollup/rollup-linux-riscv64-gnu@4.60.1':
-    optional: true
-
-  '@rollup/rollup-linux-riscv64-musl@4.60.1':
-    optional: true
-
-  '@rollup/rollup-linux-s390x-gnu@4.60.1':
-    optional: true
-
-  '@rollup/rollup-linux-x64-gnu@4.60.1':
-    optional: true
-
-  '@rollup/rollup-linux-x64-musl@4.60.1':
-    optional: true
-
-  '@rollup/rollup-openbsd-x64@4.60.1':
-    optional: true
-
-  '@rollup/rollup-openharmony-arm64@4.60.1':
-    optional: true
-
-  '@rollup/rollup-win32-arm64-msvc@4.60.1':
-    optional: true
-
-  '@rollup/rollup-win32-ia32-msvc@4.60.1':
-    optional: true
-
-  '@rollup/rollup-win32-x64-gnu@4.60.1':
-    optional: true
-
-  '@rollup/rollup-win32-x64-msvc@4.60.1':
-    optional: true
-
-  '@sandbox-agent/cli-darwin-arm64@0.4.2':
-    optional: true
-
-  '@sandbox-agent/cli-darwin-x64@0.4.2':
-    optional: true
-
-  '@sandbox-agent/cli-linux-arm64@0.4.2':
-    optional: true
-
-  '@sandbox-agent/cli-linux-x64@0.4.2':
-    optional: true
-
-  '@sandbox-agent/cli-shared@0.4.2': {}
-
-  '@sandbox-agent/cli-win32-x64@0.4.2':
-    optional: true
-
-  '@sandbox-agent/cli@0.4.2':
-    dependencies:
-      '@sandbox-agent/cli-shared': 0.4.2
-    optionalDependencies:
-      '@sandbox-agent/cli-darwin-arm64': 0.4.2
-      '@sandbox-agent/cli-darwin-x64': 0.4.2
-      '@sandbox-agent/cli-linux-arm64': 0.4.2
-      '@sandbox-agent/cli-linux-x64': 0.4.2
-      '@sandbox-agent/cli-win32-x64': 0.4.2
-    optional: true
-
-  '@sentry-internal/browser-utils@8.55.2':
-    dependencies:
-      '@sentry/core': 8.55.2
-
-  '@sentry-internal/feedback@8.55.2':
-    dependencies:
-      '@sentry/core': 8.55.2
-
-  '@sentry-internal/replay-canvas@8.55.2':
-    dependencies:
-      '@sentry-internal/replay': 8.55.2
-      '@sentry/core': 8.55.2
-
-  '@sentry-internal/replay@8.55.2':
-    dependencies:
-      '@sentry-internal/browser-utils': 8.55.2
-      '@sentry/core': 8.55.2
-
-  '@sentry/browser@8.55.2':
-    dependencies:
-      '@sentry-internal/browser-utils': 8.55.2
-      '@sentry-internal/feedback': 8.55.2
-      '@sentry-internal/replay': 8.55.2
-      '@sentry-internal/replay-canvas': 8.55.2
-      '@sentry/core': 8.55.2
-
-  '@sentry/core@8.55.2': {}
-
-  '@sentry/react@8.55.2(react@19.2.7)':
-    dependencies:
-      '@sentry/browser': 8.55.2
-      '@sentry/core': 8.55.2
-      hoist-non-react-statics: 3.3.2
-      react: 19.2.7
-
-  '@shikijs/core@3.23.0':
-    dependencies:
-      '@shikijs/types': 3.23.0
-      '@shikijs/vscode-textmate': 10.0.2
-      '@types/hast': 3.0.4
-      hast-util-to-html: 9.0.5
-
-  '@shikijs/engine-javascript@3.23.0':
-    dependencies:
-      '@shikijs/types': 3.23.0
-      '@shikijs/vscode-textmate': 10.0.2
-      oniguruma-to-es: 4.3.6
-
-  '@shikijs/engine-oniguruma@3.23.0':
-    dependencies:
-      '@shikijs/types': 3.23.0
-      '@shikijs/vscode-textmate': 10.0.2
-
-  '@shikijs/langs@3.23.0':
-    dependencies:
-      '@shikijs/types': 3.23.0
-
-  '@shikijs/themes@3.23.0':
-    dependencies:
-      '@shikijs/types': 3.23.0
-
-  '@shikijs/transformers@3.23.0':
-    dependencies:
-      '@shikijs/core': 3.23.0
-      '@shikijs/types': 3.23.0
-
-  '@shikijs/types@3.23.0':
-    dependencies:
-      '@shikijs/vscode-textmate': 10.0.2
-      '@types/hast': 3.0.4
-
-  '@shikijs/vscode-textmate@10.0.2': {}
-
-  '@silvia-odwyer/photon-node@0.3.4': {}
-
-  '@sinclair/typebox@0.34.49': {}
-
-  '@sindresorhus/slugify@3.0.0':
-    dependencies:
-      '@sindresorhus/transliterate': 2.3.1
-      escape-string-regexp: 5.0.0
-
-  '@sindresorhus/transliterate@2.3.1': {}
-
-  '@smithy/core@3.26.0':
-    dependencies:
-      '@aws-crypto/crc32': 5.2.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@smithy/core@3.29.1':
-    dependencies:
-      '@smithy/types': 4.15.1
-      tslib: 2.8.1
-    optional: true
-
-  '@smithy/credential-provider-imds@4.4.2':
-    dependencies:
-      '@smithy/core': 3.26.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@smithy/eventstream-codec@4.4.6':
-    dependencies:
-      '@smithy/core': 3.29.1
-      tslib: 2.8.1
-    optional: true
-
-  '@smithy/fetch-http-handler@5.5.2':
-    dependencies:
-      '@smithy/core': 3.26.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@smithy/is-array-buffer@2.2.0':
-    dependencies:
-      tslib: 2.8.1
-
-  '@smithy/node-http-handler@4.8.2':
-    dependencies:
-      '@smithy/core': 3.26.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@smithy/signature-v4@5.5.2':
-    dependencies:
-      '@smithy/core': 3.26.0
-      '@smithy/types': 4.15.0
-      tslib: 2.8.1
-
-  '@smithy/types@4.15.0':
-    dependencies:
-      tslib: 2.8.1
-
-  '@smithy/types@4.15.1':
-    dependencies:
-      tslib: 2.8.1
-    optional: true
-
-  '@smithy/util-buffer-from@2.2.0':
-    dependencies:
-      '@smithy/is-array-buffer': 2.2.0
-      tslib: 2.8.1
-
-  '@smithy/util-utf8@2.3.0':
-    dependencies:
-      '@smithy/util-buffer-from': 2.2.0
-      tslib: 2.8.1
-
-  '@smithy/util-utf8@4.4.6':
-    dependencies:
-      '@smithy/core': 3.29.1
-      tslib: 2.8.1
-    optional: true
-
-  '@standard-schema/spec@1.1.0': {}
-
-  '@swc/helpers@0.5.23':
-    dependencies:
-      tslib: 2.8.1
-
-  '@tailwindcss/container-queries@0.1.1(tailwindcss@3.4.19(tsx@4.21.0)(yaml@2.9.0))':
-    dependencies:
-      tailwindcss: 3.4.19(tsx@4.21.0)(yaml@2.9.0)
-
-  '@tailwindcss/typography@0.5.20(tailwindcss@3.4.19(tsx@4.21.0)(yaml@2.9.0))':
-    dependencies:
-      postcss-selector-parser: 6.0.10
-      tailwindcss: 3.4.19(tsx@4.21.0)(yaml@2.9.0)
-
-  '@tanstack/react-table@8.21.3(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@tanstack/table-core': 8.21.3
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-
-  '@tanstack/react-virtual@3.14.5(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@tanstack/virtual-core': 3.17.3
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-
-  '@tanstack/table-core@8.21.3': {}
-
-  '@tanstack/virtual-core@3.17.3': {}
-
-  '@tokenizer/inflate@0.4.1':
-    dependencies:
-      debug: 4.4.3(supports-color@8.1.1)
-      token-types: 6.1.2
-    transitivePeerDependencies:
-      - supports-color
-
-  '@tokenizer/token@0.3.0': {}
-
-  '@tootallnate/quickjs-emscripten@0.23.0': {}
-
-  '@turbo/darwin-64@2.9.1':
-    optional: true
-
-  '@turbo/darwin-arm64@2.9.1':
-    optional: true
-
-  '@turbo/linux-64@2.9.1':
-    optional: true
-
-  '@turbo/linux-arm64@2.9.1':
-    optional: true
-
-  '@turbo/windows-64@2.9.1':
-    optional: true
-
-  '@turbo/windows-arm64@2.9.1':
-    optional: true
-
-  '@types/babel__core@7.20.5':
-    dependencies:
-      '@babel/parser': 7.29.7
-      '@babel/types': 7.29.7
-      '@types/babel__generator': 7.27.0
-      '@types/babel__template': 7.4.4
-      '@types/babel__traverse': 7.28.0
-
-  '@types/babel__generator@7.27.0':
-    dependencies:
-      '@babel/types': 7.29.7
-
-  '@types/babel__template@7.4.4':
-    dependencies:
-      '@babel/parser': 7.29.7
-      '@babel/types': 7.29.7
-
-  '@types/babel__traverse@7.28.0':
-    dependencies:
-      '@babel/types': 7.29.7
-
-  '@types/d3-array@3.2.2': {}
-
-  '@types/d3-axis@3.0.6':
-    dependencies:
-      '@types/d3-selection': 3.0.11
-
-  '@types/d3-brush@3.0.6':
-    dependencies:
-      '@types/d3-selection': 3.0.11
-
-  '@types/d3-chord@3.0.6': {}
-
-  '@types/d3-color@3.1.3': {}
-
-  '@types/d3-contour@3.0.6':
-    dependencies:
-      '@types/d3-array': 3.2.2
-      '@types/geojson': 7946.0.16
-
-  '@types/d3-delaunay@6.0.4': {}
-
-  '@types/d3-dispatch@3.0.7': {}
-
-  '@types/d3-drag@3.0.7':
-    dependencies:
-      '@types/d3-selection': 3.0.11
-
-  '@types/d3-dsv@3.0.7': {}
-
-  '@types/d3-ease@3.0.2': {}
-
-  '@types/d3-fetch@3.0.7':
-    dependencies:
-      '@types/d3-dsv': 3.0.7
-
-  '@types/d3-force@3.0.10': {}
-
-  '@types/d3-format@3.0.4': {}
-
-  '@types/d3-geo@3.1.0':
-    dependencies:
-      '@types/geojson': 7946.0.16
-
-  '@types/d3-hierarchy@3.1.7': {}
-
-  '@types/d3-interpolate@3.0.4':
-    dependencies:
-      '@types/d3-color': 3.1.3
-
-  '@types/d3-path@3.1.1': {}
-
-  '@types/d3-polygon@3.0.2': {}
-
-  '@types/d3-quadtree@3.0.6': {}
-
-  '@types/d3-random@3.0.4': {}
-
-  '@types/d3-scale-chromatic@3.1.0': {}
-
-  '@types/d3-scale@4.0.9':
-    dependencies:
-      '@types/d3-time': 3.0.4
-
-  '@types/d3-selection@3.0.11': {}
-
-  '@types/d3-shape@3.1.8':
-    dependencies:
-      '@types/d3-path': 3.1.1
-
-  '@types/d3-time-format@4.0.3': {}
-
-  '@types/d3-time@3.0.4': {}
-
-  '@types/d3-timer@3.0.2': {}
-
-  '@types/d3-transition@3.0.9':
-    dependencies:
-      '@types/d3-selection': 3.0.11
-
-  '@types/d3-zoom@3.0.8':
-    dependencies:
-      '@types/d3-interpolate': 3.0.4
-      '@types/d3-selection': 3.0.11
-
-  '@types/d3@7.4.3':
-    dependencies:
-      '@types/d3-array': 3.2.2
-      '@types/d3-axis': 3.0.6
-      '@types/d3-brush': 3.0.6
-      '@types/d3-chord': 3.0.6
-      '@types/d3-color': 3.1.3
-      '@types/d3-contour': 3.0.6
-      '@types/d3-delaunay': 6.0.4
-      '@types/d3-dispatch': 3.0.7
-      '@types/d3-drag': 3.0.7
-      '@types/d3-dsv': 3.0.7
-      '@types/d3-ease': 3.0.2
-      '@types/d3-fetch': 3.0.7
-      '@types/d3-force': 3.0.10
-      '@types/d3-format': 3.0.4
-      '@types/d3-geo': 3.1.0
-      '@types/d3-hierarchy': 3.1.7
-      '@types/d3-interpolate': 3.0.4
-      '@types/d3-path': 3.1.1
-      '@types/d3-polygon': 3.0.2
-      '@types/d3-quadtree': 3.0.6
-      '@types/d3-random': 3.0.4
-      '@types/d3-scale': 4.0.9
-      '@types/d3-scale-chromatic': 3.1.0
-      '@types/d3-selection': 3.0.11
-      '@types/d3-shape': 3.1.8
-      '@types/d3-time': 3.0.4
-      '@types/d3-time-format': 4.0.3
-      '@types/d3-timer': 3.0.2
-      '@types/d3-transition': 3.0.9
-      '@types/d3-zoom': 3.0.8
-
-  '@types/debug@4.1.13':
-    dependencies:
-      '@types/ms': 2.1.0
-
-  '@types/estree-jsx@1.0.5':
-    dependencies:
-      '@types/estree': 1.0.8
-
-  '@types/estree@1.0.8': {}
-
-  '@types/geojson@7946.0.16': {}
-
-  '@types/hast@3.0.4':
-    dependencies:
-      '@types/unist': 3.0.3
-
-  '@types/mdast@4.0.4':
-    dependencies:
-      '@types/unist': 3.0.3
-
-  '@types/mdx@2.0.14': {}
-
-  '@types/mime-types@2.1.4': {}
-
-  '@types/ms@2.1.0': {}
-
-  '@types/nlcst@2.0.3':
-    dependencies:
-      '@types/unist': 3.0.3
-
-  '@types/node-fetch@2.6.13':
-    dependencies:
-      '@types/node': 22.19.15
-      form-data: 4.0.6
-
-  '@types/node@18.19.130':
-    dependencies:
-      undici-types: 5.26.5
-
-  '@types/node@22.19.15':
-    dependencies:
-      undici-types: 6.21.0
-
-  '@types/node@24.13.2':
-    dependencies:
-      undici-types: 7.18.2
-
-  '@types/react-dom@19.2.3(@types/react@19.2.17)':
-    dependencies:
-      '@types/react': 19.2.17
-
-  '@types/react@19.2.17':
-    dependencies:
-      csstype: 3.2.3
-
-  '@types/retry@0.12.0': {}
-
-  '@types/sax@1.2.7':
-    dependencies:
-      '@types/node': 22.19.15
-
-  '@types/semver@7.7.1': {}
-
-  '@types/trusted-types@2.0.7':
-    optional: true
-
-  '@types/unist@2.0.11': {}
-
-  '@types/unist@3.0.3': {}
-
-  '@types/yauzl@2.10.3':
-    dependencies:
-      '@types/node': 22.19.15
-    optional: true
-
-  '@uiw/codemirror-extensions-basic-setup@4.25.10(@codemirror/autocomplete@6.20.3)(@codemirror/commands@6.10.4)(@codemirror/language@6.12.4)(@codemirror/lint@6.9.7)(@codemirror/search@6.7.1)(@codemirror/state@6.7.0)(@codemirror/view@6.43.4)':
-    dependencies:
-      '@codemirror/autocomplete': 6.20.3
-      '@codemirror/commands': 6.10.4
-      '@codemirror/language': 6.12.4
-      '@codemirror/lint': 6.9.7
-      '@codemirror/search': 6.7.1
-      '@codemirror/state': 6.7.0
-      '@codemirror/view': 6.43.4
-
-  '@uiw/codemirror-theme-github@4.25.10(@codemirror/language@6.12.4)(@codemirror/state@6.7.0)(@codemirror/view@6.43.4)':
-    dependencies:
-      '@uiw/codemirror-themes': 4.25.10(@codemirror/language@6.12.4)(@codemirror/state@6.7.0)(@codemirror/view@6.43.4)
-    transitivePeerDependencies:
-      - '@codemirror/language'
-      - '@codemirror/state'
-      - '@codemirror/view'
-
-  '@uiw/codemirror-themes@4.25.10(@codemirror/language@6.12.4)(@codemirror/state@6.7.0)(@codemirror/view@6.43.4)':
-    dependencies:
-      '@codemirror/language': 6.12.4
-      '@codemirror/state': 6.7.0
-      '@codemirror/view': 6.43.4
-
-  '@uiw/react-codemirror@4.25.10(@babel/runtime@7.29.7)(@codemirror/autocomplete@6.20.3)(@codemirror/language@6.12.4)(@codemirror/lint@6.9.7)(@codemirror/search@6.7.1)(@codemirror/state@6.7.0)(@codemirror/theme-one-dark@6.1.3)(@codemirror/view@6.43.4)(codemirror@6.0.2)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)':
-    dependencies:
-      '@babel/runtime': 7.29.7
-      '@codemirror/commands': 6.10.4
-      '@codemirror/state': 6.7.0
-      '@codemirror/theme-one-dark': 6.1.3
-      '@codemirror/view': 6.43.4
-      '@uiw/codemirror-extensions-basic-setup': 4.25.10(@codemirror/autocomplete@6.20.3)(@codemirror/commands@6.10.4)(@codemirror/language@6.12.4)(@codemirror/lint@6.9.7)(@codemirror/search@6.7.1)(@codemirror/state@6.7.0)(@codemirror/view@6.43.4)
-      codemirror: 6.0.2
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    transitivePeerDependencies:
-      - '@codemirror/autocomplete'
-      - '@codemirror/language'
-      - '@codemirror/lint'
-      - '@codemirror/search'
-
-  '@ungap/structured-clone@1.3.1': {}
-
-  '@upsetjs/venn.js@2.0.0':
-    optionalDependencies:
-      d3-selection: 3.0.0
-      d3-transition: 3.0.1(d3-selection@3.0.0)
-
-  '@vercel/detect-agent@1.2.3': {}
-
-  '@vercel/oidc@3.1.0': {}
-
-  '@vitejs/plugin-react@4.7.0(vite@6.4.3(@types/node@24.13.2)(jiti@1.21.7)(tsx@4.21.0)(yaml@2.9.0))':
-    dependencies:
-      '@babel/core': 7.29.7
-      '@babel/plugin-transform-react-jsx-self': 7.29.7(@babel/core@7.29.7)
-      '@babel/plugin-transform-react-jsx-source': 7.29.7(@babel/core@7.29.7)
-      '@rolldown/pluginutils': 1.0.0-beta.27
-      '@types/babel__core': 7.20.5
-      react-refresh: 0.17.0
-      vite: 6.4.3(@types/node@24.13.2)(jiti@1.21.7)(tsx@4.21.0)(yaml@2.9.0)
-    transitivePeerDependencies:
-      - supports-color
-
-  '@vitest/expect@2.1.9':
-    dependencies:
-      '@vitest/spy': 2.1.9
-      '@vitest/utils': 2.1.9
-      chai: 5.3.3
-      tinyrainbow: 1.2.0
-
-  '@vitest/mocker@2.1.9(vite@5.4.21(@types/node@22.19.15))':
-    dependencies:
-      '@vitest/spy': 2.1.9
-      estree-walker: 3.0.3
-      magic-string: 0.30.21
-    optionalDependencies:
-      vite: 5.4.21(@types/node@22.19.15)
-
-  '@vitest/pretty-format@2.1.9':
-    dependencies:
-      tinyrainbow: 1.2.0
-
-  '@vitest/runner@2.1.9':
-    dependencies:
-      '@vitest/utils': 2.1.9
-      pathe: 1.1.2
-
-  '@vitest/snapshot@2.1.9':
-    dependencies:
-      '@vitest/pretty-format': 2.1.9
-      magic-string: 0.30.21
-      pathe: 1.1.2
-
-  '@vitest/spy@2.1.9':
-    dependencies:
-      tinyspy: 3.0.2
-
-  '@vitest/utils@2.1.9':
-    dependencies:
-      '@vitest/pretty-format': 2.1.9
-      loupe: 3.2.1
-      tinyrainbow: 1.2.0
-
-  abort-controller@3.0.0:
-    dependencies:
-      event-target-shim: 5.0.1
-
-  accepts@2.0.0:
-    dependencies:
-      mime-types: 3.0.2
-      negotiator: 1.0.0
-
-  acorn-jsx@5.3.2(acorn@8.17.0):
-    dependencies:
-      acorn: 8.17.0
-
-  acorn@8.17.0: {}
-
-  acp-http-client@0.4.2(zod@4.3.6):
-    dependencies:
-      '@agentclientprotocol/sdk': 0.16.1(zod@4.3.6)
-    transitivePeerDependencies:
-      - zod
-
-  agent-base@6.0.2:
-    dependencies:
-      debug: 4.4.3(supports-color@8.1.1)
-    transitivePeerDependencies:
-      - supports-color
-
-  agent-base@7.1.4: {}
-
-  agentkeepalive@4.6.0:
-    dependencies:
-      humanize-ms: 1.2.1
-
-  ai@5.0.210(zod@4.3.6):
-    dependencies:
-      '@ai-sdk/gateway': 2.0.109(zod@4.3.6)
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      '@opentelemetry/api': 1.9.0
-      zod: 4.3.6
-
-  ajv-formats@3.0.1(ajv@8.20.0):
-    optionalDependencies:
-      ajv: 8.20.0
-
-  ajv@8.20.0:
-    dependencies:
-      fast-deep-equal: 3.1.3
-      fast-uri: 3.1.2
-      json-schema-traverse: 1.0.0
-      require-from-string: 2.0.2
-
-  ansi-align@3.0.1:
-    dependencies:
-      string-width: 4.2.3
-
-  ansi-escapes@4.3.2:
-    dependencies:
-      type-fest: 0.21.3
-
-  ansi-regex@5.0.1: {}
-
-  ansi-regex@6.2.2: {}
-
-  ansi-styles@4.3.0:
-    dependencies:
-      color-convert: 2.0.1
-
-  ansi-styles@6.2.3: {}
-
-  ansis@3.17.0: {}
-
-  any-promise@1.3.0: {}
-
-  anymatch@3.1.3:
-    dependencies:
-      normalize-path: 3.0.0
-      picomatch: 2.3.2
-
-  archiver-utils@5.0.2:
-    dependencies:
-      glob: 10.5.0
-      graceful-fs: 4.2.11
-      is-stream: 2.0.1
-      lazystream: 1.0.1
-      lodash: 4.18.1
-      normalize-path: 3.0.0
-      readable-stream: 4.7.0
-
-  archiver@7.0.1:
-    dependencies:
-      archiver-utils: 5.0.2
-      async: 3.2.6
-      buffer-crc32: 1.0.0
-      readable-stream: 4.7.0
-      readdir-glob: 1.1.3
-      tar-stream: 3.2.0
-      zip-stream: 6.0.1
-    transitivePeerDependencies:
-      - bare-abort-controller
-      - bare-buffer
-      - react-native-b4a
-
-  arg@5.0.2: {}
-
-  argparse@2.0.1: {}
-
-  aria-hidden@1.2.6:
-    dependencies:
-      tslib: 2.8.1
-
-  aria-query@5.3.2: {}
-
-  array-iterate@2.0.1: {}
-
-  asn1.js@4.10.1:
-    dependencies:
-      bn.js: 4.12.3
-      inherits: 2.0.4
-      minimalistic-assert: 1.0.1
-
-  asn1@0.2.6:
-    dependencies:
-      safer-buffer: 2.1.2
-    optional: true
-
-  assert@2.1.0:
-    dependencies:
-      call-bind: 1.0.8
-      is-nan: 1.3.2
-      object-is: 1.1.6
-      object.assign: 4.1.7
-      util: 0.12.5
-
-  assertion-error@2.0.1: {}
-
-  ast-types@0.13.4:
-    dependencies:
-      tslib: 2.8.1
-
-  astring@1.9.0: {}
-
-  astro@5.18.2(@types/node@24.13.2)(aws4fetch@1.0.20)(jiti@1.21.7)(rollup@4.60.1)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0):
-    dependencies:
-      '@astrojs/compiler': 2.13.1
-      '@astrojs/internal-helpers': 0.7.6
-      '@astrojs/markdown-remark': 6.3.11
-      '@astrojs/telemetry': 3.3.0
-      '@capsizecss/unpack': 4.0.1
-      '@oslojs/encoding': 1.1.0
-      '@rollup/pluginutils': 5.4.0(rollup@4.60.1)
-      acorn: 8.17.0
-      aria-query: 5.3.2
-      axobject-query: 4.1.0
-      boxen: 8.0.1
-      ci-info: 4.4.0
-      clsx: 2.1.1
-      common-ancestor-path: 1.0.1
-      cookie: 1.1.1
-      cssesc: 3.0.0
-      debug: 4.4.3(supports-color@8.1.1)
-      deterministic-object-hash: 2.0.2
-      devalue: 5.8.1
-      diff: 8.0.4
-      dlv: 1.1.3
-      dset: 3.1.4
-      es-module-lexer: 1.7.0
-      esbuild: 0.27.4
-      estree-walker: 3.0.3
-      flattie: 1.1.1
-      fontace: 0.4.1
-      github-slugger: 2.0.0
-      html-escaper: 3.0.3
-      http-cache-semantics: 4.2.0
-      import-meta-resolve: 4.2.0
-      js-yaml: 4.2.0
-      magic-string: 0.30.21
-      magicast: 0.5.3
-      mrmime: 2.0.1
-      neotraverse: 0.6.18
-      p-limit: 6.2.0
-      p-queue: 8.1.1
-      package-manager-detector: 1.6.0
-      piccolore: 0.1.3
-      picomatch: 4.0.4
-      prompts: 2.4.2
-      rehype: 13.0.2
-      semver: 7.7.4
-      shiki: 3.23.0
-      smol-toml: 1.6.1
-      svgo: 4.0.1
-      tinyexec: 1.2.4
-      tinyglobby: 0.2.15
-      tsconfck: 3.1.6(typescript@5.9.3)
-      ultrahtml: 1.6.0
-      unifont: 0.7.4
-      unist-util-visit: 5.1.0
-      unstorage: 1.17.5(aws4fetch@1.0.20)
-      vfile: 6.0.3
-      vite: 6.4.3(@types/node@24.13.2)(jiti@1.21.7)(tsx@4.21.0)(yaml@2.9.0)
-      vitefu: 1.1.3(vite@6.4.3(@types/node@24.13.2)(jiti@1.21.7)(tsx@4.21.0)(yaml@2.9.0))
-      xxhash-wasm: 1.1.0
-      yargs-parser: 21.1.1
-      yocto-spinner: 0.2.3
-      zod: 3.25.76
-      zod-to-json-schema: 3.25.2(zod@3.25.76)
-      zod-to-ts: 1.2.0(typescript@5.9.3)(zod@3.25.76)
-    optionalDependencies:
-      sharp: 0.34.5
-    transitivePeerDependencies:
-      - '@azure/app-configuration'
-      - '@azure/cosmos'
-      - '@azure/data-tables'
-      - '@azure/identity'
-      - '@azure/keyvault-secrets'
-      - '@azure/storage-blob'
-      - '@capacitor/preferences'
-      - '@deno/kv'
-      - '@netlify/blobs'
-      - '@planetscale/database'
-      - '@types/node'
-      - '@upstash/redis'
-      - '@vercel/blob'
-      - '@vercel/functions'
-      - '@vercel/kv'
-      - aws4fetch
-      - db0
-      - idb-keyval
-      - ioredis
-      - jiti
-      - less
-      - lightningcss
-      - rollup
-      - sass
-      - sass-embedded
-      - stylus
-      - sugarss
-      - supports-color
-      - terser
-      - tsx
-      - typescript
-      - uploadthing
-      - yaml
-
-  async@3.2.6: {}
-
-  asynckit@0.4.0: {}
-
-  atomic-sleep@1.0.0: {}
-
-  autoprefixer@10.5.0(postcss@8.5.8):
-    dependencies:
-      browserslist: 4.28.2
-      caniuse-lite: 1.0.30001799
-      fraction.js: 5.3.4
-      picocolors: 1.1.1
-      postcss: 8.5.8
-      postcss-value-parser: 4.2.0
-
-  available-typed-arrays@1.0.7:
-    dependencies:
-      possible-typed-array-names: 1.1.0
-
-  aws4fetch@1.0.20:
-    optional: true
-
-  axios@1.18.1:
-    dependencies:
-      follow-redirects: 1.16.0
-      form-data: 4.0.6
-      https-proxy-agent: 5.0.1
-      proxy-from-env: 2.1.0
-    transitivePeerDependencies:
-      - debug
-      - supports-color
-
-  axobject-query@4.1.0: {}
-
-  b4a@1.8.1: {}
-
-  bail@2.0.2: {}
-
-  balanced-match@1.0.2: {}
-
-  balanced-match@4.0.4: {}
-
-  bare-events@2.9.1: {}
-
-  bare-fs@4.7.3:
-    dependencies:
-      bare-events: 2.9.1
-      bare-path: 3.0.1
-      bare-stream: 2.13.3(bare-events@2.9.1)
-      bare-url: 2.4.5
-      fast-fifo: 1.3.2
-    transitivePeerDependencies:
-      - bare-abort-controller
-      - react-native-b4a
-
-  bare-os@3.9.3: {}
-
-  bare-path@3.0.1:
-    dependencies:
-      bare-os: 3.9.3
-
-  bare-stream@2.13.3(bare-events@2.9.1):
-    dependencies:
-      b4a: 1.8.1
-      streamx: 2.28.0
-      teex: 1.0.1
-    optionalDependencies:
-      bare-events: 2.9.1
-    transitivePeerDependencies:
-      - react-native-b4a
-
-  bare-url@2.4.5:
-    dependencies:
-      bare-path: 3.0.1
-
-  base-64@1.0.0: {}
-
-  base64-js@1.5.1: {}
-
-  baseline-browser-mapping@2.10.38: {}
-
-  basic-ftp@5.3.1: {}
-
-  bcrypt-pbkdf@1.0.2:
-    dependencies:
-      tweetnacl: 0.14.5
-    optional: true
-
-  bignumber.js@9.3.1: {}
-
-  binary-extensions@2.3.0: {}
-
-  bl@4.1.0:
-    dependencies:
-      buffer: 5.7.1
-      inherits: 2.0.4
-      readable-stream: 3.6.2
-    optional: true
-
-  bn.js@4.12.3: {}
-
-  bn.js@5.2.3: {}
-
-  body-parser@2.3.0:
-    dependencies:
-      bytes: 3.1.2
-      content-type: 2.0.0
-      debug: 4.4.3(supports-color@8.1.1)
-      http-errors: 2.0.1
-      iconv-lite: 0.7.2
-      on-finished: 2.4.1
-      qs: 6.15.3
-      raw-body: 3.0.2
-      type-is: 2.1.0
-    transitivePeerDependencies:
-      - supports-color
-
-  boolbase@1.0.0: {}
-
-  bowser@2.14.1: {}
-
-  boxen@8.0.1:
-    dependencies:
-      ansi-align: 3.0.1
-      camelcase: 8.0.0
-      chalk: 5.6.2
-      cli-boxes: 3.0.0
-      string-width: 7.2.0
-      type-fest: 4.41.0
-      widest-line: 5.0.0
-      wrap-ansi: 9.0.2
-
-  brace-expansion@2.0.3:
-    dependencies:
-      balanced-match: 1.0.2
-
-  brace-expansion@5.0.6:
-    dependencies:
-      balanced-match: 4.0.4
-
-  braces@3.0.3:
-    dependencies:
-      fill-range: 7.1.1
-
-  brorand@1.1.0: {}
-
-  browse@0.9.3(bufferutil@4.1.0)(playwright-core@1.59.1):
-    dependencies:
-      '@browserbasehq/sdk': 2.15.0
-      '@browserbasehq/stagehand': 3.6.0(playwright-core@1.59.1)(zod@4.3.6)
-      '@oclif/core': 4.11.14
-      '@vercel/detect-agent': 1.2.3
-      archiver: 7.0.1
-      deepmerge: 4.3.1
-      dotenv: 16.6.1
-      fastest-levenshtein: 1.0.16
-      http-status-codes: 2.3.0
-      ignore: 7.0.5
-      node-html-markdown: 1.3.0
-      semver: 7.7.4
-      tsx: 4.21.0
-      ws: 8.21.0(bufferutil@4.1.0)
-      zod: 4.3.6
-    transitivePeerDependencies:
-      - '@cfworker/json-schema'
-      - bare-abort-controller
-      - bare-buffer
-      - bufferutil
-      - encoding
-      - patchright-core
-      - playwright-core
-      - puppeteer-core
-      - react-native-b4a
-      - supports-color
-      - utf-8-validate
-
-  browser-resolve@2.0.0:
-    dependencies:
-      resolve: 1.22.11
-
-  browserify-aes@1.2.0:
-    dependencies:
-      buffer-xor: 1.0.3
-      cipher-base: 1.0.7
-      create-hash: 1.2.0
-      evp_bytestokey: 1.0.3
-      inherits: 2.0.4
-      safe-buffer: 5.2.1
-
-  browserify-cipher@1.0.1:
-    dependencies:
-      browserify-aes: 1.2.0
-      browserify-des: 1.0.2
-      evp_bytestokey: 1.0.3
-
-  browserify-des@1.0.2:
-    dependencies:
-      cipher-base: 1.0.7
-      des.js: 1.1.0
-      inherits: 2.0.4
-      safe-buffer: 5.2.1
-
-  browserify-rsa@4.1.1:
-    dependencies:
-      bn.js: 5.2.3
-      randombytes: 2.1.0
-      safe-buffer: 5.2.1
-
-  browserify-sign@4.2.5:
-    dependencies:
-      bn.js: 5.2.3
-      browserify-rsa: 4.1.1
-      create-hash: 1.2.0
-      create-hmac: 1.1.7
-      elliptic: 6.6.1
-      inherits: 2.0.4
-      parse-asn1: 5.1.9
-      readable-stream: 2.3.8
-      safe-buffer: 5.2.1
-
-  browserify-zlib@0.2.0:
-    dependencies:
-      pako: 1.0.11
-
-  browserslist@4.28.2:
-    dependencies:
-      baseline-browser-mapping: 2.10.38
-      caniuse-lite: 1.0.30001799
-      electron-to-chromium: 1.5.375
-      node-releases: 2.0.47
-      update-browserslist-db: 1.2.3(browserslist@4.28.2)
-
-  buffer-crc32@0.2.13: {}
-
-  buffer-crc32@1.0.0: {}
-
-  buffer-equal-constant-time@1.0.1: {}
-
-  buffer-xor@1.0.3: {}
-
-  buffer@5.7.1:
-    dependencies:
-      base64-js: 1.5.1
-      ieee754: 1.2.1
-
-  buffer@6.0.3:
-    dependencies:
-      base64-js: 1.5.1
-      ieee754: 1.2.1
-
-  bufferutil@4.1.0:
-    dependencies:
-      node-gyp-build: 4.8.4
-    optional: true
-
-  buildcheck@0.0.7:
-    optional: true
-
-  builtin-status-codes@3.0.0: {}
-
-  bun@1.3.11:
-    optionalDependencies:
-      '@oven/bun-darwin-aarch64': 1.3.11
-      '@oven/bun-darwin-x64': 1.3.11
-      '@oven/bun-darwin-x64-baseline': 1.3.11
-      '@oven/bun-linux-aarch64': 1.3.11
-      '@oven/bun-linux-aarch64-musl': 1.3.11
-      '@oven/bun-linux-x64': 1.3.11
-      '@oven/bun-linux-x64-baseline': 1.3.11
-      '@oven/bun-linux-x64-musl': 1.3.11
-      '@oven/bun-linux-x64-musl-baseline': 1.3.11
-      '@oven/bun-windows-aarch64': 1.3.11
-      '@oven/bun-windows-x64': 1.3.11
-      '@oven/bun-windows-x64-baseline': 1.3.11
-
-  bundle-require@5.1.0(esbuild@0.27.4):
-    dependencies:
-      esbuild: 0.27.4
-      load-tsconfig: 0.2.5
-
-  bytes@3.1.2: {}
-
-  cac@6.7.14: {}
-
-  call-bind-apply-helpers@1.0.2:
-    dependencies:
-      es-errors: 1.3.0
-      function-bind: 1.1.2
-
-  call-bind@1.0.8:
-    dependencies:
-      call-bind-apply-helpers: 1.0.2
-      es-define-property: 1.0.1
-      get-intrinsic: 1.3.0
-      set-function-length: 1.2.2
-
-  call-bound@1.0.4:
-    dependencies:
-      call-bind-apply-helpers: 1.0.2
-      get-intrinsic: 1.3.0
-
-  camelcase-css@2.0.1: {}
-
-  camelcase@8.0.0: {}
-
-  caniuse-lite@1.0.30001799: {}
-
-  ccount@2.0.1: {}
-
-  chai@5.3.3:
-    dependencies:
-      assertion-error: 2.0.1
-      check-error: 2.1.3
-      deep-eql: 5.0.2
-      loupe: 3.2.1
-      pathval: 2.0.1
-
-  chalk@4.1.2:
-    dependencies:
-      ansi-styles: 4.3.0
-      supports-color: 7.2.0
-
-  chalk@5.6.2: {}
-
-  character-entities-html4@2.1.0: {}
-
-  character-entities-legacy@3.0.0: {}
-
-  character-entities@2.0.2: {}
-
-  character-reference-invalid@2.0.1: {}
-
-  check-error@2.1.3: {}
-
-  chokidar@3.6.0:
-    dependencies:
-      anymatch: 3.1.3
-      braces: 3.0.3
-      glob-parent: 5.1.2
-      is-binary-path: 2.1.0
-      is-glob: 4.0.3
-      normalize-path: 3.0.0
-      readdirp: 3.6.0
-    optionalDependencies:
-      fsevents: 2.3.3
-
-  chokidar@4.0.3:
-    dependencies:
-      readdirp: 4.1.2
-
-  chokidar@5.0.0:
-    dependencies:
-      readdirp: 5.0.0
-
-  chownr@1.1.4:
-    optional: true
-
-  chrome-launcher@1.2.1:
-    dependencies:
-      '@types/node': 22.19.15
-      escape-string-regexp: 4.0.0
-      is-wsl: 2.2.0
-      lighthouse-logger: 2.0.2
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  ci-info@4.4.0: {}
-
-  cipher-base@1.0.7:
-    dependencies:
-      inherits: 2.0.4
-      safe-buffer: 5.2.1
-      to-buffer: 1.2.2
-
-  class-variance-authority@0.7.1:
-    dependencies:
-      clsx: 2.1.1
-
-  clean-stack@3.0.1:
-    dependencies:
-      escape-string-regexp: 4.0.0
-
-  cli-boxes@3.0.0: {}
-
-  cli-highlight@2.1.11:
-    dependencies:
-      chalk: 4.1.2
-      highlight.js: 10.7.3
-      mz: 2.7.0
-      parse5: 5.1.1
-      parse5-htmlparser2-tree-adapter: 6.0.1
-      yargs: 16.2.2
-
-  cli-spinners@2.9.2: {}
-
-  cliui@7.0.4:
-    dependencies:
-      string-width: 4.2.3
-      strip-ansi: 6.0.1
-      wrap-ansi: 7.0.0
-
-  cliui@8.0.1:
-    dependencies:
-      string-width: 4.2.3
-      strip-ansi: 6.0.1
-      wrap-ansi: 7.0.0
-    optional: true
-
-  clsx@2.1.1: {}
-
-  cmdk@1.1.1(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
-    dependencies:
-      '@radix-ui/react-compose-refs': 1.1.3(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-dialog': 1.1.18(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      '@radix-ui/react-id': 1.1.2(@types/react@19.2.17)(react@19.2.7)
-      '@radix-ui/react-primitive': 2.1.7(@types/react-dom@19.2.3(@types/react@19.2.17))(@types/react@19.2.17)(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-    transitivePeerDependencies:
-      - '@types/react'
-      - '@types/react-dom'
-
-  codemirror@6.0.2:
-    dependencies:
-      '@codemirror/autocomplete': 6.20.3
-      '@codemirror/commands': 6.10.4
-      '@codemirror/language': 6.12.4
-      '@codemirror/lint': 6.9.7
-      '@codemirror/search': 6.7.1
-      '@codemirror/state': 6.7.0
-      '@codemirror/view': 6.43.4
-
-  collapse-white-space@2.1.0: {}
-
-  color-convert@2.0.1:
-    dependencies:
-      color-name: 1.1.4
-
-  color-name@1.1.4: {}
-
-  color-string@1.9.1:
-    dependencies:
-      color-name: 1.1.4
-      simple-swizzle: 0.2.4
-
-  color@4.2.3:
-    dependencies:
-      color-convert: 2.0.1
-      color-string: 1.9.1
-
-  colorette@2.0.20: {}
-
-  combined-stream@1.0.8:
-    dependencies:
-      delayed-stream: 1.0.0
-
-  comma-separated-tokens@2.0.3: {}
-
-  commander@11.1.0: {}
-
-  commander@12.1.0: {}
-
-  commander@4.1.1: {}
-
-  commander@7.2.0: {}
-
-  commander@8.3.0: {}
-
-  common-ancestor-path@1.0.1: {}
-
-  compress-commons@6.0.2:
-    dependencies:
-      crc-32: 1.2.2
-      crc32-stream: 6.0.0
-      is-stream: 2.0.1
-      normalize-path: 3.0.0
-      readable-stream: 4.7.0
-
-  confbox@0.1.8: {}
-
-  consola@3.4.2: {}
-
-  console-browserify@1.2.0: {}
-
-  constants-browserify@1.0.0: {}
-
-  content-disposition@1.1.0: {}
-
-  content-type@1.0.5: {}
-
-  content-type@2.0.0: {}
-
-  convert-source-map@2.0.0: {}
-
-  cookie-es@1.2.3: {}
-
-  cookie-signature@1.2.2: {}
-
-  cookie@0.7.2: {}
-
-  cookie@1.1.1: {}
-
-  core-js@3.49.0: {}
-
-  core-util-is@1.0.3: {}
-
-  cors@2.8.6:
-    dependencies:
-      object-assign: 4.1.1
-      vary: 1.1.2
-
-  cose-base@1.0.3:
-    dependencies:
-      layout-base: 1.0.2
-
-  cose-base@2.2.0:
-    dependencies:
-      layout-base: 2.0.1
-
-  cpu-features@0.0.10:
-    dependencies:
-      buildcheck: 0.0.7
-      nan: 2.26.2
-    optional: true
-
-  crc-32@1.2.2: {}
-
-  crc32-stream@6.0.0:
-    dependencies:
-      crc-32: 1.2.2
-      readable-stream: 4.7.0
-
-  create-ecdh@4.0.4:
-    dependencies:
-      bn.js: 4.12.3
-      elliptic: 6.6.1
-
-  create-hash@1.2.0:
-    dependencies:
-      cipher-base: 1.0.7
-      inherits: 2.0.4
-      md5.js: 1.3.5
-      ripemd160: 2.0.3
-      sha.js: 2.4.12
-
-  create-hmac@1.1.7:
-    dependencies:
-      cipher-base: 1.0.7
-      create-hash: 1.2.0
-      inherits: 2.0.4
-      ripemd160: 2.0.3
-      safe-buffer: 5.2.1
-      sha.js: 2.4.12
-
-  create-require@1.1.1: {}
-
-  crelt@1.0.7: {}
-
-  cross-spawn@7.0.6:
-    dependencies:
-      path-key: 3.1.1
-      shebang-command: 2.0.0
-      which: 2.0.2
-
-  crossws@0.3.5:
-    dependencies:
-      uncrypto: 0.1.3
-
-  crypto-browserify@3.12.1:
-    dependencies:
-      browserify-cipher: 1.0.1
-      browserify-sign: 4.2.5
-      create-ecdh: 4.0.4
-      create-hash: 1.2.0
-      create-hmac: 1.1.7
-      diffie-hellman: 5.0.3
-      hash-base: 3.0.5
-      inherits: 2.0.4
-      pbkdf2: 3.1.5
-      public-encrypt: 4.0.3
-      randombytes: 2.1.0
-      randomfill: 1.0.4
-
-  css-select@5.2.2:
-    dependencies:
-      boolbase: 1.0.0
-      css-what: 6.2.2
-      domhandler: 5.0.3
-      domutils: 3.2.2
-      nth-check: 2.1.1
-
-  css-tree@2.2.1:
-    dependencies:
-      mdn-data: 2.0.28
-      source-map-js: 1.2.1
-
-  css-tree@3.2.1:
-    dependencies:
-      mdn-data: 2.27.1
-      source-map-js: 1.2.1
-
-  css-what@6.2.2: {}
-
-  cssesc@3.0.0: {}
-
-  csso@5.0.5:
-    dependencies:
-      css-tree: 2.2.1
-
-  csstype@3.2.3: {}
-
-  cytoscape-cose-bilkent@4.1.0(cytoscape@3.34.0):
-    dependencies:
-      cose-base: 1.0.3
-      cytoscape: 3.34.0
-
-  cytoscape-fcose@2.2.0(cytoscape@3.34.0):
-    dependencies:
-      cose-base: 2.2.0
-      cytoscape: 3.34.0
-
-  cytoscape@3.34.0: {}
-
-  d3-array@2.12.1:
-    dependencies:
-      internmap: 1.0.1
-
-  d3-array@3.2.4:
-    dependencies:
-      internmap: 2.0.3
-
-  d3-axis@3.0.0: {}
-
-  d3-brush@3.0.0:
-    dependencies:
-      d3-dispatch: 3.0.1
-      d3-drag: 3.0.0
-      d3-interpolate: 3.0.1
-      d3-selection: 3.0.0
-      d3-transition: 3.0.1(d3-selection@3.0.0)
-
-  d3-chord@3.0.1:
-    dependencies:
-      d3-path: 3.1.0
-
-  d3-color@3.1.0: {}
-
-  d3-contour@4.0.2:
-    dependencies:
-      d3-array: 3.2.4
-
-  d3-delaunay@6.0.4:
-    dependencies:
-      delaunator: 5.1.0
-
-  d3-dispatch@3.0.1: {}
-
-  d3-drag@3.0.0:
-    dependencies:
-      d3-dispatch: 3.0.1
-      d3-selection: 3.0.0
-
-  d3-dsv@3.0.1:
-    dependencies:
-      commander: 7.2.0
-      iconv-lite: 0.6.3
-      rw: 1.3.3
-
-  d3-ease@3.0.1: {}
-
-  d3-fetch@3.0.1:
-    dependencies:
-      d3-dsv: 3.0.1
-
-  d3-force@3.0.0:
-    dependencies:
-      d3-dispatch: 3.0.1
-      d3-quadtree: 3.0.1
-      d3-timer: 3.0.1
-
-  d3-format@3.1.2: {}
-
-  d3-geo@3.1.1:
-    dependencies:
-      d3-array: 3.2.4
-
-  d3-hierarchy@3.1.2: {}
-
-  d3-interpolate@3.0.1:
-    dependencies:
-      d3-color: 3.1.0
-
-  d3-path@1.0.9: {}
-
-  d3-path@3.1.0: {}
-
-  d3-polygon@3.0.1: {}
-
-  d3-quadtree@3.0.1: {}
-
-  d3-random@3.0.1: {}
-
-  d3-sankey@0.12.3:
-    dependencies:
-      d3-array: 2.12.1
-      d3-shape: 1.3.7
-
-  d3-scale-chromatic@3.1.0:
-    dependencies:
-      d3-color: 3.1.0
-      d3-interpolate: 3.0.1
-
-  d3-scale@4.0.2:
-    dependencies:
-      d3-array: 3.2.4
-      d3-format: 3.1.2
-      d3-interpolate: 3.0.1
-      d3-time: 3.1.0
-      d3-time-format: 4.1.0
-
-  d3-selection@3.0.0: {}
-
-  d3-shape@1.3.7:
-    dependencies:
-      d3-path: 1.0.9
-
-  d3-shape@3.2.0:
-    dependencies:
-      d3-path: 3.1.0
-
-  d3-time-format@4.1.0:
-    dependencies:
-      d3-time: 3.1.0
-
-  d3-time@3.1.0:
-    dependencies:
-      d3-array: 3.2.4
-
-  d3-timer@3.0.1: {}
-
-  d3-transition@3.0.1(d3-selection@3.0.0):
-    dependencies:
-      d3-color: 3.1.0
-      d3-dispatch: 3.0.1
-      d3-ease: 3.0.1
-      d3-interpolate: 3.0.1
-      d3-selection: 3.0.0
-      d3-timer: 3.0.1
-
-  d3-zoom@3.0.0:
-    dependencies:
-      d3-dispatch: 3.0.1
-      d3-drag: 3.0.0
-      d3-interpolate: 3.0.1
-      d3-selection: 3.0.0
-      d3-transition: 3.0.1(d3-selection@3.0.0)
-
-  d3@7.9.0:
-    dependencies:
-      d3-array: 3.2.4
-      d3-axis: 3.0.0
-      d3-brush: 3.0.0
-      d3-chord: 3.0.1
-      d3-color: 3.1.0
-      d3-contour: 4.0.2
-      d3-delaunay: 6.0.4
-      d3-dispatch: 3.0.1
-      d3-drag: 3.0.0
-      d3-dsv: 3.0.1
-      d3-ease: 3.0.1
-      d3-fetch: 3.0.1
-      d3-force: 3.0.0
-      d3-format: 3.1.2
-      d3-geo: 3.1.1
-      d3-hierarchy: 3.1.2
-      d3-interpolate: 3.0.1
-      d3-path: 3.1.0
-      d3-polygon: 3.0.1
-      d3-quadtree: 3.0.1
-      d3-random: 3.0.1
-      d3-scale: 4.0.2
-      d3-scale-chromatic: 3.1.0
-      d3-selection: 3.0.0
-      d3-shape: 3.2.0
-      d3-time: 3.1.0
-      d3-time-format: 4.1.0
-      d3-timer: 3.0.1
-      d3-transition: 3.0.1(d3-selection@3.0.0)
-      d3-zoom: 3.0.0
-
-  dagre-d3-es@7.0.14:
-    dependencies:
-      d3: 7.9.0
-      lodash-es: 4.18.1
-
-  data-uri-to-buffer@4.0.1: {}
-
-  data-uri-to-buffer@6.0.2: {}
-
-  date-fns@4.4.0: {}
-
-  dateformat@4.6.3: {}
-
-  dayjs@1.11.21: {}
-
-  debug@4.4.3(supports-color@8.1.1):
-    dependencies:
-      ms: 2.1.3
-    optionalDependencies:
-      supports-color: 8.1.1
-
-  decimal.js-light@2.5.1: {}
-
-  decode-named-character-reference@1.3.0:
-    dependencies:
-      character-entities: 2.0.2
-
-  dedent@1.7.2: {}
-
-  deep-eql@5.0.2: {}
-
-  deepmerge@4.3.1: {}
-
-  define-data-property@1.1.4:
-    dependencies:
-      es-define-property: 1.0.1
-      es-errors: 1.3.0
-      gopd: 1.2.0
-
-  define-properties@1.2.1:
-    dependencies:
-      define-data-property: 1.1.4
-      has-property-descriptors: 1.0.2
-      object-keys: 1.1.1
-
-  defu@6.1.7: {}
-
-  degenerator@5.0.1:
-    dependencies:
-      ast-types: 0.13.4
-      escodegen: 2.1.0
-      esprima: 4.0.1
-
-  delaunator@5.1.0:
-    dependencies:
-      robust-predicates: 3.0.3
-
-  delayed-stream@1.0.0: {}
-
-  depd@2.0.0: {}
-
-  dequal@2.0.3: {}
-
-  des.js@1.1.0:
-    dependencies:
-      inherits: 2.0.4
-      minimalistic-assert: 1.0.1
-
-  destr@2.0.5: {}
-
-  detect-libc@2.1.2: {}
-
-  detect-node-es@1.1.0: {}
-
-  deterministic-object-hash@2.0.2:
-    dependencies:
-      base-64: 1.0.0
-
-  devalue@5.8.1: {}
-
-  devlop@1.1.0:
-    dependencies:
-      dequal: 2.0.3
-
-  devtools-protocol@0.0.1642743: {}
-
-  didyoumean@1.2.2: {}
-
-  diff@8.0.4: {}
-
-  diffie-hellman@5.0.3:
-    dependencies:
-      bn.js: 4.12.3
-      miller-rabin: 4.0.1
-      randombytes: 2.1.0
-
-  dlv@1.1.3: {}
-
-  docker-modem@5.0.7:
-    dependencies:
-      debug: 4.4.3(supports-color@8.1.1)
-      readable-stream: 3.6.2
-      split-ca: 1.0.1
-      ssh2: 1.17.0
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  dockerode@4.0.10:
-    dependencies:
-      '@balena/dockerignore': 1.0.2
-      '@grpc/grpc-js': 1.14.3
-      '@grpc/proto-loader': 0.7.15
-      docker-modem: 5.0.7
-      protobufjs: 7.5.4
-      tar-fs: 2.1.4
-      uuid: 10.0.0
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  dom-helpers@5.2.1:
-    dependencies:
-      '@babel/runtime': 7.29.7
-      csstype: 3.2.3
-
-  dom-serializer@2.0.0:
-    dependencies:
-      domelementtype: 2.3.0
-      domhandler: 5.0.3
-      entities: 4.5.0
-
-  domain-browser@4.22.0: {}
-
-  domelementtype@2.3.0: {}
-
-  domhandler@5.0.3:
-    dependencies:
-      domelementtype: 2.3.0
-
-  dompurify@3.4.11:
-    optionalDependencies:
-      '@types/trusted-types': 2.0.7
-
-  domutils@3.2.2:
-    dependencies:
-      dom-serializer: 2.0.0
-      domelementtype: 2.3.0
-      domhandler: 5.0.3
-
-  dotenv@16.6.1: {}
-
-  dset@3.1.4: {}
-
-  dunder-proto@1.0.1:
-    dependencies:
-      call-bind-apply-helpers: 1.0.2
-      es-errors: 1.3.0
-      gopd: 1.2.0
-
-  eastasianwidth@0.2.0: {}
-
-  ecdsa-sig-formatter@1.0.11:
-    dependencies:
-      safe-buffer: 5.2.1
-
-  ee-first@1.1.1: {}
-
-  ejs@3.1.10:
-    dependencies:
-      jake: 10.9.4
-
-  electron-to-chromium@1.5.375: {}
-
-  elliptic@6.6.1:
-    dependencies:
-      bn.js: 4.12.3
-      brorand: 1.1.0
-      hash.js: 1.1.7
-      hmac-drbg: 1.0.1
-      inherits: 2.0.4
-      minimalistic-assert: 1.0.1
-      minimalistic-crypto-utils: 1.0.1
-
-  emoji-regex@10.6.0: {}
-
-  emoji-regex@8.0.0: {}
-
-  emoji-regex@9.2.2: {}
-
-  encodeurl@2.0.0: {}
-
-  end-of-stream@1.4.5:
-    dependencies:
-      once: 1.4.0
-
-  entities@4.5.0: {}
-
-  entities@6.0.1: {}
-
-  es-define-property@1.0.1: {}
-
-  es-errors@1.3.0: {}
-
-  es-module-lexer@1.7.0: {}
-
-  es-object-atoms@1.1.1:
-    dependencies:
-      es-errors: 1.3.0
-
-  es-set-tostringtag@2.1.0:
-    dependencies:
-      es-errors: 1.3.0
-      get-intrinsic: 1.3.0
-      has-tostringtag: 1.0.2
-      hasown: 2.0.4
-
-  es-toolkit@1.49.0: {}
-
-  esast-util-from-estree@2.0.0:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      devlop: 1.1.0
-      estree-util-visit: 2.0.0
-      unist-util-position-from-estree: 2.0.0
-
-  esast-util-from-js@2.0.1:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      acorn: 8.17.0
-      esast-util-from-estree: 2.0.0
-      vfile-message: 4.0.3
-
-  esbuild@0.21.5:
-    optionalDependencies:
-      '@esbuild/aix-ppc64': 0.21.5
-      '@esbuild/android-arm': 0.21.5
-      '@esbuild/android-arm64': 0.21.5
-      '@esbuild/android-x64': 0.21.5
-      '@esbuild/darwin-arm64': 0.21.5
-      '@esbuild/darwin-x64': 0.21.5
-      '@esbuild/freebsd-arm64': 0.21.5
-      '@esbuild/freebsd-x64': 0.21.5
-      '@esbuild/linux-arm': 0.21.5
-      '@esbuild/linux-arm64': 0.21.5
-      '@esbuild/linux-ia32': 0.21.5
-      '@esbuild/linux-loong64': 0.21.5
-      '@esbuild/linux-mips64el': 0.21.5
-      '@esbuild/linux-ppc64': 0.21.5
-      '@esbuild/linux-riscv64': 0.21.5
-      '@esbuild/linux-s390x': 0.21.5
-      '@esbuild/linux-x64': 0.21.5
-      '@esbuild/netbsd-x64': 0.21.5
-      '@esbuild/openbsd-x64': 0.21.5
-      '@esbuild/sunos-x64': 0.21.5
-      '@esbuild/win32-arm64': 0.21.5
-      '@esbuild/win32-ia32': 0.21.5
-      '@esbuild/win32-x64': 0.21.5
-
-  esbuild@0.25.12:
-    optionalDependencies:
-      '@esbuild/aix-ppc64': 0.25.12
-      '@esbuild/android-arm': 0.25.12
-      '@esbuild/android-arm64': 0.25.12
-      '@esbuild/android-x64': 0.25.12
-      '@esbuild/darwin-arm64': 0.25.12
-      '@esbuild/darwin-x64': 0.25.12
-      '@esbuild/freebsd-arm64': 0.25.12
-      '@esbuild/freebsd-x64': 0.25.12
-      '@esbuild/linux-arm': 0.25.12
-      '@esbuild/linux-arm64': 0.25.12
-      '@esbuild/linux-ia32': 0.25.12
-      '@esbuild/linux-loong64': 0.25.12
-      '@esbuild/linux-mips64el': 0.25.12
-      '@esbuild/linux-ppc64': 0.25.12
-      '@esbuild/linux-riscv64': 0.25.12
-      '@esbuild/linux-s390x': 0.25.12
-      '@esbuild/linux-x64': 0.25.12
-      '@esbuild/netbsd-arm64': 0.25.12
-      '@esbuild/netbsd-x64': 0.25.12
-      '@esbuild/openbsd-arm64': 0.25.12
-      '@esbuild/openbsd-x64': 0.25.12
-      '@esbuild/openharmony-arm64': 0.25.12
-      '@esbuild/sunos-x64': 0.25.12
-      '@esbuild/win32-arm64': 0.25.12
-      '@esbuild/win32-ia32': 0.25.12
-      '@esbuild/win32-x64': 0.25.12
-
-  esbuild@0.27.4:
-    optionalDependencies:
-      '@esbuild/aix-ppc64': 0.27.4
-      '@esbuild/android-arm': 0.27.4
-      '@esbuild/android-arm64': 0.27.4
-      '@esbuild/android-x64': 0.27.4
-      '@esbuild/darwin-arm64': 0.27.4
-      '@esbuild/darwin-x64': 0.27.4
-      '@esbuild/freebsd-arm64': 0.27.4
-      '@esbuild/freebsd-x64': 0.27.4
-      '@esbuild/linux-arm': 0.27.4
-      '@esbuild/linux-arm64': 0.27.4
-      '@esbuild/linux-ia32': 0.27.4
-      '@esbuild/linux-loong64': 0.27.4
-      '@esbuild/linux-mips64el': 0.27.4
-      '@esbuild/linux-ppc64': 0.27.4
-      '@esbuild/linux-riscv64': 0.27.4
-      '@esbuild/linux-s390x': 0.27.4
-      '@esbuild/linux-x64': 0.27.4
-      '@esbuild/netbsd-arm64': 0.27.4
-      '@esbuild/netbsd-x64': 0.27.4
-      '@esbuild/openbsd-arm64': 0.27.4
-      '@esbuild/openbsd-x64': 0.27.4
-      '@esbuild/openharmony-arm64': 0.27.4
-      '@esbuild/sunos-x64': 0.27.4
-      '@esbuild/win32-arm64': 0.27.4
-      '@esbuild/win32-ia32': 0.27.4
-      '@esbuild/win32-x64': 0.27.4
-
-  escalade@3.2.0: {}
-
-  escape-html@1.0.3: {}
-
-  escape-string-regexp@4.0.0: {}
-
-  escape-string-regexp@5.0.0: {}
-
-  escodegen@2.1.0:
-    dependencies:
-      esprima: 4.0.1
-      estraverse: 5.3.0
-      esutils: 2.0.3
-    optionalDependencies:
-      source-map: 0.6.1
-
-  esprima@4.0.1: {}
-
-  estraverse@5.3.0: {}
-
-  estree-util-attach-comments@3.0.0:
-    dependencies:
-      '@types/estree': 1.0.8
-
-  estree-util-build-jsx@3.0.1:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      devlop: 1.1.0
-      estree-util-is-identifier-name: 3.0.0
-      estree-walker: 3.0.3
-
-  estree-util-is-identifier-name@3.0.0: {}
-
-  estree-util-scope@1.0.0:
-    dependencies:
-      '@types/estree': 1.0.8
-      devlop: 1.1.0
-
-  estree-util-to-js@2.0.0:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      astring: 1.9.0
-      source-map: 0.7.6
-
-  estree-util-visit@1.2.1:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      '@types/unist': 2.0.11
-
-  estree-util-visit@2.0.0:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      '@types/unist': 3.0.3
-
-  estree-walker@2.0.2: {}
-
-  estree-walker@3.0.3:
-    dependencies:
-      '@types/estree': 1.0.8
-
-  esutils@2.0.3: {}
-
-  etag@1.8.1: {}
-
-  event-target-shim@5.0.1: {}
-
-  eventemitter3@4.0.7: {}
-
-  eventemitter3@5.0.4: {}
-
-  events-universal@1.0.1:
-    dependencies:
-      bare-events: 2.9.1
-    transitivePeerDependencies:
-      - bare-abort-controller
-
-  events@3.3.0: {}
-
-  eventsource-parser@3.1.0: {}
-
-  eventsource@3.0.7:
-    dependencies:
-      eventsource-parser: 3.1.0
-
-  evp_bytestokey@1.0.3:
-    dependencies:
-      md5.js: 1.3.5
-      safe-buffer: 5.2.1
-
-  execa@8.0.1:
-    dependencies:
-      cross-spawn: 7.0.6
-      get-stream: 8.0.1
-      human-signals: 5.0.0
-      is-stream: 3.0.0
-      merge-stream: 2.0.0
-      npm-run-path: 5.3.0
-      onetime: 6.0.0
-      signal-exit: 4.1.0
-      strip-final-newline: 3.0.0
-
-  expect-type@1.3.0: {}
-
-  express-rate-limit@8.5.2(express@5.2.1):
-    dependencies:
-      express: 5.2.1
-      ip-address: 10.2.0
-
-  express@5.2.1:
-    dependencies:
-      accepts: 2.0.0
-      body-parser: 2.3.0
-      content-disposition: 1.1.0
-      content-type: 1.0.5
-      cookie: 0.7.2
-      cookie-signature: 1.2.2
-      debug: 4.4.3(supports-color@8.1.1)
-      depd: 2.0.0
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      etag: 1.8.1
-      finalhandler: 2.1.1
-      fresh: 2.0.0
-      http-errors: 2.0.1
-      merge-descriptors: 2.0.0
-      mime-types: 3.0.2
-      on-finished: 2.4.1
-      once: 1.4.0
-      parseurl: 1.3.3
-      proxy-addr: 2.0.7
-      qs: 6.15.3
-      range-parser: 1.3.0
-      router: 2.2.0
-      send: 1.2.1
-      serve-static: 2.2.1
-      statuses: 2.0.2
-      type-is: 2.1.0
-      vary: 1.1.2
-    transitivePeerDependencies:
-      - supports-color
-
-  extend@3.0.2: {}
-
-  extract-zip@2.0.1:
-    dependencies:
-      debug: 4.4.3(supports-color@8.1.1)
-      get-stream: 5.2.0
-      yauzl: 2.10.0
-    optionalDependencies:
-      '@types/yauzl': 2.10.3
-    transitivePeerDependencies:
-      - supports-color
-
-  fast-copy@4.0.3: {}
-
-  fast-deep-equal@3.1.3: {}
-
-  fast-equals@5.4.0: {}
-
-  fast-fifo@1.3.2: {}
-
-  fast-glob@3.3.3:
-    dependencies:
-      '@nodelib/fs.stat': 2.0.5
-      '@nodelib/fs.walk': 1.2.8
-      glob-parent: 5.1.2
-      merge2: 1.4.1
-      micromatch: 4.0.8
-
-  fast-safe-stringify@2.1.1: {}
-
-  fast-uri@3.1.2: {}
-
-  fastest-levenshtein@1.0.16: {}
-
-  fastq@1.20.1:
-    dependencies:
-      reusify: 1.1.0
-
-  fd-slicer@1.1.0:
-    dependencies:
-      pend: 1.2.0
-
-  fdir@6.5.0(picomatch@4.0.4):
-    optionalDependencies:
-      picomatch: 4.0.4
-
-  fetch-blob@3.2.0:
-    dependencies:
-      node-domexception: 1.0.0
-      web-streams-polyfill: 3.3.3
-
-  fetch-cookie@3.2.0:
-    dependencies:
-      set-cookie-parser: 2.7.2
-      tough-cookie: 6.0.1
-
-  fflate@0.4.8: {}
-
-  file-type@21.3.4:
-    dependencies:
-      '@tokenizer/inflate': 0.4.1
-      strtok3: 10.3.5
-      token-types: 6.1.2
-      uint8array-extras: 1.5.0
-    transitivePeerDependencies:
-      - supports-color
-
-  filelist@1.0.6:
-    dependencies:
-      minimatch: 5.1.9
-
-  fill-range@7.1.1:
-    dependencies:
-      to-regex-range: 5.0.1
-
-  finalhandler@2.1.1:
-    dependencies:
-      debug: 4.4.3(supports-color@8.1.1)
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      on-finished: 2.4.1
-      parseurl: 1.3.3
-      statuses: 2.0.2
-    transitivePeerDependencies:
-      - supports-color
-
-  find-up@5.0.0:
-    dependencies:
-      locate-path: 6.0.0
-      path-exists: 4.0.0
-
-  fix-dts-default-cjs-exports@1.0.1:
-    dependencies:
-      magic-string: 0.30.21
-      mlly: 1.8.2
-      rollup: 4.60.1
-
-  flattie@1.1.1: {}
-
-  follow-redirects@1.16.0: {}
-
-  fontace@0.4.1:
-    dependencies:
-      fontkitten: 1.0.3
-
-  fontkitten@1.0.3:
-    dependencies:
-      tiny-inflate: 1.0.3
-
-  for-each@0.3.5:
-    dependencies:
-      is-callable: 1.2.7
-
-  foreground-child@3.3.1:
-    dependencies:
-      cross-spawn: 7.0.6
-      signal-exit: 4.1.0
-
-  form-data-encoder@1.7.2: {}
-
-  form-data@4.0.6:
-    dependencies:
-      asynckit: 0.4.0
-      combined-stream: 1.0.8
-      es-set-tostringtag: 2.1.0
-      hasown: 2.0.4
-      mime-types: 2.1.35
-
-  formdata-node@4.4.1:
-    dependencies:
-      node-domexception: 1.0.0
-      web-streams-polyfill: 4.0.0-beta.3
-
-  formdata-polyfill@4.0.10:
-    dependencies:
-      fetch-blob: 3.2.0
-
-  forwarded@0.2.0: {}
-
-  fraction.js@5.3.4: {}
-
-  framer-motion@11.18.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
-    dependencies:
-      motion-dom: 11.18.1
-      motion-utils: 11.18.1
-      tslib: 2.8.1
-    optionalDependencies:
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-
-  framer-motion@12.40.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
-    dependencies:
-      motion-dom: 12.40.0
-      motion-utils: 12.39.0
-      tslib: 2.8.1
-    optionalDependencies:
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-
-  fresh@2.0.0: {}
-
-  fs-constants@1.0.0:
-    optional: true
-
-  fsevents@2.3.2:
-    optional: true
-
-  fsevents@2.3.3:
-    optional: true
-
-  function-bind@1.1.2: {}
-
-  fuse.js@7.4.2: {}
-
-  gaxios@7.1.5:
-    dependencies:
-      extend: 3.0.2
-      https-proxy-agent: 7.0.6
-      node-fetch: 3.3.2
-    transitivePeerDependencies:
-      - supports-color
-
-  gcp-metadata@8.1.2:
-    dependencies:
-      gaxios: 7.1.5
-      google-logging-utils: 1.1.3
-      json-bigint: 1.0.0
-    transitivePeerDependencies:
-      - supports-color
-
-  generator-function@2.0.1: {}
-
-  gensync@1.0.0-beta.2: {}
-
-  get-caller-file@2.0.5: {}
-
-  get-east-asian-width@1.6.0: {}
-
-  get-intrinsic@1.3.0:
-    dependencies:
-      call-bind-apply-helpers: 1.0.2
-      es-define-property: 1.0.1
-      es-errors: 1.3.0
-      es-object-atoms: 1.1.1
-      function-bind: 1.1.2
-      get-proto: 1.0.1
-      gopd: 1.2.0
-      has-symbols: 1.1.0
-      hasown: 2.0.2
-      math-intrinsics: 1.1.0
-
-  get-nonce@1.0.1: {}
-
-  get-package-type@0.1.0: {}
-
-  get-port@7.2.0:
-    optional: true
-
-  get-proto@1.0.1:
-    dependencies:
-      dunder-proto: 1.0.1
-      es-object-atoms: 1.1.1
-
-  get-stream@5.2.0:
-    dependencies:
-      pump: 3.0.4
-
-  get-stream@8.0.1: {}
-
-  get-tsconfig@4.13.7:
-    dependencies:
-      resolve-pkg-maps: 1.0.0
-
-  get-uri@6.0.5:
-    dependencies:
-      basic-ftp: 5.3.1
-      data-uri-to-buffer: 6.0.2
-      debug: 4.4.3(supports-color@8.1.1)
-    transitivePeerDependencies:
-      - supports-color
-
-  github-slugger@2.0.0: {}
-
-  glob-parent@5.1.2:
-    dependencies:
-      is-glob: 4.0.3
-
-  glob-parent@6.0.2:
-    dependencies:
-      is-glob: 4.0.3
-
-  glob@10.5.0:
-    dependencies:
-      foreground-child: 3.3.1
-      jackspeak: 3.4.3
-      minimatch: 9.0.9
-      minipass: 7.1.3
-      package-json-from-dist: 1.0.1
-      path-scurry: 1.11.1
-
-  glob@13.0.6:
-    dependencies:
-      minimatch: 10.2.5
-      minipass: 7.1.3
-      path-scurry: 2.0.2
-
-  google-auth-library@10.9.0:
-    dependencies:
-      base64-js: 1.5.1
-      ecdsa-sig-formatter: 1.0.11
-      gaxios: 7.1.5
-      gcp-metadata: 8.1.2
-      google-logging-utils: 1.1.3
-      jws: 4.0.1
-    transitivePeerDependencies:
-      - supports-color
-
-  google-logging-utils@1.1.3: {}
-
-  gopd@1.2.0: {}
-
-  graceful-fs@4.2.11: {}
-
-  h3@1.15.11:
-    dependencies:
-      cookie-es: 1.2.3
-      crossws: 0.3.5
-      defu: 6.1.7
-      destr: 2.0.5
-      iron-webcrypto: 1.2.1
-      node-mock-http: 1.0.4
-      radix3: 1.1.2
-      ufo: 1.6.4
-      uncrypto: 0.1.3
-
-  hachure-fill@0.5.2: {}
-
-  has-flag@4.0.0: {}
-
-  has-property-descriptors@1.0.2:
-    dependencies:
-      es-define-property: 1.0.1
-
-  has-symbols@1.1.0: {}
-
-  has-tostringtag@1.0.2:
-    dependencies:
-      has-symbols: 1.1.0
-
-  hash-base@3.0.5:
-    dependencies:
-      inherits: 2.0.4
-      safe-buffer: 5.2.1
-
-  hash-base@3.1.2:
-    dependencies:
-      inherits: 2.0.4
-      readable-stream: 2.3.8
-      safe-buffer: 5.2.1
-      to-buffer: 1.2.2
-
-  hash.js@1.1.7:
-    dependencies:
-      inherits: 2.0.4
-      minimalistic-assert: 1.0.1
-
-  hasown@2.0.2:
-    dependencies:
-      function-bind: 1.1.2
-
-  hasown@2.0.4:
-    dependencies:
-      function-bind: 1.1.2
-
-  hast-util-from-dom@5.0.1:
-    dependencies:
-      '@types/hast': 3.0.4
-      hastscript: 9.0.1
-      web-namespaces: 2.0.1
-
-  hast-util-from-html-isomorphic@2.0.0:
-    dependencies:
-      '@types/hast': 3.0.4
-      hast-util-from-dom: 5.0.1
-      hast-util-from-html: 2.0.3
-      unist-util-remove-position: 5.0.0
-
-  hast-util-from-html@2.0.3:
-    dependencies:
-      '@types/hast': 3.0.4
-      devlop: 1.1.0
-      hast-util-from-parse5: 8.0.3
-      parse5: 7.3.0
-      vfile: 6.0.3
-      vfile-message: 4.0.3
-
-  hast-util-from-parse5@8.0.3:
-    dependencies:
-      '@types/hast': 3.0.4
-      '@types/unist': 3.0.3
-      devlop: 1.1.0
-      hastscript: 9.0.1
-      property-information: 7.2.0
-      vfile: 6.0.3
-      vfile-location: 5.0.3
-      web-namespaces: 2.0.1
-
-  hast-util-is-element@3.0.0:
-    dependencies:
-      '@types/hast': 3.0.4
-
-  hast-util-parse-selector@4.0.0:
-    dependencies:
-      '@types/hast': 3.0.4
-
-  hast-util-raw@9.1.0:
-    dependencies:
-      '@types/hast': 3.0.4
-      '@types/unist': 3.0.3
-      '@ungap/structured-clone': 1.3.1
-      hast-util-from-parse5: 8.0.3
-      hast-util-to-parse5: 8.0.1
-      html-void-elements: 3.0.0
-      mdast-util-to-hast: 13.2.1
-      parse5: 7.3.0
-      unist-util-position: 5.0.0
-      unist-util-visit: 5.1.0
-      vfile: 6.0.3
-      web-namespaces: 2.0.1
-      zwitch: 2.0.4
-
-  hast-util-to-estree@3.1.3:
-    dependencies:
-      '@types/estree': 1.0.8
-      '@types/estree-jsx': 1.0.5
-      '@types/hast': 3.0.4
-      comma-separated-tokens: 2.0.3
-      devlop: 1.1.0
-      estree-util-attach-comments: 3.0.0
-      estree-util-is-identifier-name: 3.0.0
-      hast-util-whitespace: 3.0.0
-      mdast-util-mdx-expression: 2.0.1
-      mdast-util-mdx-jsx: 3.2.0
-      mdast-util-mdxjs-esm: 2.0.1
-      property-information: 7.2.0
-      space-separated-tokens: 2.0.2
-      style-to-js: 1.1.21
-      unist-util-position: 5.0.0
-      zwitch: 2.0.4
-    transitivePeerDependencies:
-      - supports-color
-
-  hast-util-to-html@9.0.5:
-    dependencies:
-      '@types/hast': 3.0.4
-      '@types/unist': 3.0.3
-      ccount: 2.0.1
-      comma-separated-tokens: 2.0.3
-      hast-util-whitespace: 3.0.0
-      html-void-elements: 3.0.0
-      mdast-util-to-hast: 13.2.1
-      property-information: 7.2.0
-      space-separated-tokens: 2.0.2
-      stringify-entities: 4.0.4
-      zwitch: 2.0.4
-
-  hast-util-to-jsx-runtime@2.3.6:
-    dependencies:
-      '@types/estree': 1.0.8
-      '@types/hast': 3.0.4
-      '@types/unist': 3.0.3
-      comma-separated-tokens: 2.0.3
-      devlop: 1.1.0
-      estree-util-is-identifier-name: 3.0.0
-      hast-util-whitespace: 3.0.0
-      mdast-util-mdx-expression: 2.0.1
-      mdast-util-mdx-jsx: 3.2.0
-      mdast-util-mdxjs-esm: 2.0.1
-      property-information: 7.2.0
-      space-separated-tokens: 2.0.2
-      style-to-js: 1.1.21
-      unist-util-position: 5.0.0
-      vfile-message: 4.0.3
-    transitivePeerDependencies:
-      - supports-color
-
-  hast-util-to-parse5@8.0.1:
-    dependencies:
-      '@types/hast': 3.0.4
-      comma-separated-tokens: 2.0.3
-      devlop: 1.1.0
-      property-information: 7.2.0
-      space-separated-tokens: 2.0.2
-      web-namespaces: 2.0.1
-      zwitch: 2.0.4
-
-  hast-util-to-text@4.0.2:
-    dependencies:
-      '@types/hast': 3.0.4
-      '@types/unist': 3.0.3
-      hast-util-is-element: 3.0.0
-      unist-util-find-after: 5.0.0
-
-  hast-util-whitespace@3.0.0:
-    dependencies:
-      '@types/hast': 3.0.4
-
-  hastscript@9.0.1:
-    dependencies:
-      '@types/hast': 3.0.4
-      comma-separated-tokens: 2.0.3
-      hast-util-parse-selector: 4.0.0
-      property-information: 7.2.0
-      space-separated-tokens: 2.0.2
-
-  he@1.2.0: {}
-
-  help-me@5.0.0: {}
-
-  highlight.js@10.7.3: {}
-
-  hmac-drbg@1.0.1:
-    dependencies:
-      hash.js: 1.1.7
-      minimalistic-assert: 1.0.1
-      minimalistic-crypto-utils: 1.0.1
-
-  hoist-non-react-statics@3.3.2:
-    dependencies:
-      react-is: 16.13.1
-
-  hono@4.12.27: {}
-
-  hosted-git-info@9.0.3:
-    dependencies:
-      lru-cache: 11.5.1
-
-  html-escaper@3.0.3: {}
-
-  html-url-attributes@3.0.1: {}
-
-  html-void-elements@3.0.0: {}
-
-  http-cache-semantics@4.2.0: {}
-
-  http-errors@2.0.1:
-    dependencies:
-      depd: 2.0.0
-      inherits: 2.0.4
-      setprototypeof: 1.2.0
-      statuses: 2.0.2
-      toidentifier: 1.0.1
-
-  http-proxy-agent@7.0.2:
-    dependencies:
-      agent-base: 7.1.4
-      debug: 4.4.3(supports-color@8.1.1)
-    transitivePeerDependencies:
-      - supports-color
-
-  http-status-codes@2.3.0: {}
-
-  https-browserify@1.0.0: {}
-
-  https-proxy-agent@5.0.1:
-    dependencies:
-      agent-base: 6.0.2
-      debug: 4.4.3(supports-color@8.1.1)
-    transitivePeerDependencies:
-      - supports-color
-
-  https-proxy-agent@7.0.6:
-    dependencies:
-      agent-base: 7.1.4
-      debug: 4.4.3(supports-color@8.1.1)
-    transitivePeerDependencies:
-      - supports-color
-
-  human-signals@5.0.0: {}
-
-  humanize-ms@1.2.1:
-    dependencies:
-      ms: 2.1.3
-
-  iconv-lite@0.6.3:
-    dependencies:
-      safer-buffer: 2.1.2
-
-  iconv-lite@0.7.2:
-    dependencies:
-      safer-buffer: 2.1.2
-
-  ieee754@1.2.1: {}
-
-  ignore@7.0.5: {}
-
-  import-meta-resolve@4.2.0: {}
-
-  indent-string@4.0.0: {}
-
-  inherits@2.0.4: {}
-
-  inline-style-parser@0.2.7: {}
-
-  input-otp@1.4.2(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-
-  internmap@1.0.1: {}
-
-  internmap@2.0.3: {}
-
-  ip-address@10.2.0: {}
-
-  ipaddr.js@1.9.1: {}
-
-  iron-webcrypto@1.2.1: {}
-
-  is-alphabetical@2.0.1: {}
-
-  is-alphanumerical@2.0.1:
-    dependencies:
-      is-alphabetical: 2.0.1
-      is-decimal: 2.0.1
-
-  is-arguments@1.2.0:
-    dependencies:
-      call-bound: 1.0.4
-      has-tostringtag: 1.0.2
-
-  is-arrayish@0.3.4: {}
-
-  is-binary-path@2.1.0:
-    dependencies:
-      binary-extensions: 2.3.0
-
-  is-callable@1.2.7: {}
-
-  is-core-module@2.16.1:
-    dependencies:
-      hasown: 2.0.2
-
-  is-decimal@2.0.1: {}
-
-  is-docker@2.2.1: {}
-
-  is-docker@3.0.0: {}
-
-  is-extglob@2.1.1: {}
-
-  is-fullwidth-code-point@3.0.0: {}
-
-  is-generator-function@1.1.2:
-    dependencies:
-      call-bound: 1.0.4
-      generator-function: 2.0.1
-      get-proto: 1.0.1
-      has-tostringtag: 1.0.2
-      safe-regex-test: 1.1.0
-
-  is-glob@4.0.3:
-    dependencies:
-      is-extglob: 2.1.1
-
-  is-hexadecimal@2.0.1: {}
-
-  is-inside-container@1.0.0:
-    dependencies:
-      is-docker: 3.0.0
-
-  is-nan@1.3.2:
-    dependencies:
-      call-bind: 1.0.8
-      define-properties: 1.2.1
-
-  is-number@7.0.0: {}
-
-  is-plain-obj@4.1.0: {}
-
-  is-promise@4.0.0: {}
-
-  is-regex@1.2.1:
-    dependencies:
-      call-bound: 1.0.4
-      gopd: 1.2.0
-      has-tostringtag: 1.0.2
-      hasown: 2.0.2
-
-  is-stream@2.0.1: {}
-
-  is-stream@3.0.0: {}
-
-  is-typed-array@1.1.15:
-    dependencies:
-      which-typed-array: 1.1.20
-
-  is-wsl@2.2.0:
-    dependencies:
-      is-docker: 2.2.1
-
-  is-wsl@3.1.1:
-    dependencies:
-      is-inside-container: 1.0.0
-
-  isarray@1.0.0: {}
-
-  isarray@2.0.5: {}
-
-  isexe@2.0.0: {}
-
-  isomorphic-timers-promises@1.0.1: {}
-
-  jackspeak@3.4.3:
-    dependencies:
-      '@isaacs/cliui': 8.0.2
-    optionalDependencies:
-      '@pkgjs/parseargs': 0.11.0
-
-  jake@10.9.4:
-    dependencies:
-      async: 3.2.6
-      filelist: 1.0.6
-      picocolors: 1.1.1
-
-  jiti@1.21.7: {}
-
-  jose@6.2.3: {}
-
-  jotai-effect@2.3.1(jotai@2.20.1(@babel/core@7.29.7)(@babel/template@7.29.7)(@types/react@19.2.17)(react@19.2.7)):
-    dependencies:
-      jotai: 2.20.1(@babel/core@7.29.7)(@babel/template@7.29.7)(@types/react@19.2.17)(react@19.2.7)
-
-  jotai@2.20.1(@babel/core@7.29.7)(@babel/template@7.29.7)(@types/react@19.2.17)(react@19.2.7):
-    optionalDependencies:
-      '@babel/core': 7.29.7
-      '@babel/template': 7.29.7
-      '@types/react': 19.2.17
-      react: 19.2.7
-
-  joycon@3.1.1: {}
-
-  js-tokens@4.0.0: {}
-
-  js-yaml@4.2.0:
-    dependencies:
-      argparse: 2.0.1
-
-  jsesc@3.1.0: {}
-
-  json-bigint@1.0.0:
-    dependencies:
-      bignumber.js: 9.3.1
-
-  json-schema-to-ts@3.1.1:
-    dependencies:
-      '@babel/runtime': 7.29.7
-      ts-algebra: 2.0.0
-
-  json-schema-traverse@1.0.0: {}
-
-  json-schema-typed@8.0.2: {}
-
-  json-schema@0.4.0: {}
-
-  json5@2.2.3: {}
-
-  jwa@2.0.1:
-    dependencies:
-      buffer-equal-constant-time: 1.0.1
-      ecdsa-sig-formatter: 1.0.11
-      safe-buffer: 5.2.1
-
-  jws@4.0.1:
-    dependencies:
-      jwa: 2.0.1
-      safe-buffer: 5.2.1
-
-  katex@0.16.47:
-    dependencies:
-      commander: 8.3.0
-
-  khroma@2.1.0: {}
-
-  kleur@3.0.3: {}
-
-  koffi@2.16.2:
-    optional: true
-
-  layout-base@1.0.2: {}
-
-  layout-base@2.0.1: {}
-
-  lazystream@1.0.1:
-    dependencies:
-      readable-stream: 2.3.8
-
-  lighthouse-logger@2.0.2:
-    dependencies:
-      debug: 4.4.3(supports-color@8.1.1)
-      marky: 1.3.0
-    transitivePeerDependencies:
-      - supports-color
-    optional: true
-
-  lilconfig@3.1.3: {}
-
-  lines-and-columns@1.2.4: {}
-
-  linkify-it@5.0.1:
-    dependencies:
-      uc.micro: 2.1.0
-
-  load-tsconfig@0.2.5: {}
-
-  locate-path@6.0.0:
-    dependencies:
-      p-locate: 5.0.0
-
-  lodash-es@4.18.1: {}
-
-  lodash.camelcase@4.3.0:
-    optional: true
-
-  lodash.debounce@4.0.8: {}
-
-  lodash@4.18.1: {}
-
-  loglevel@1.9.2: {}
-
-  long@5.3.2: {}
-
-  longest-streak@3.1.0: {}
-
-  loose-envify@1.4.0:
-    dependencies:
-      js-tokens: 4.0.0
-
-  loupe@3.2.1: {}
-
-  lru-cache@10.4.3: {}
-
-  lru-cache@11.5.1: {}
-
-  lru-cache@5.1.1:
-    dependencies:
-      yallist: 3.1.1
-
-  lru-cache@7.18.3: {}
-
-  lucide-react@0.439.0(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-
-  lucide-react@0.469.0(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-
-  lunr@2.3.9: {}
-
-  magic-string@0.30.21:
-    dependencies:
-      '@jridgewell/sourcemap-codec': 1.5.5
-
-  magicast@0.5.3:
-    dependencies:
-      '@babel/parser': 7.29.7
-      '@babel/types': 7.29.7
-      source-map-js: 1.2.1
-
-  markdown-extensions@2.0.0: {}
-
-  markdown-it@14.2.0:
-    dependencies:
-      argparse: 2.0.1
-      entities: 4.5.0
-      linkify-it: 5.0.1
-      mdurl: 2.0.0
-      punycode.js: 2.3.1
-      uc.micro: 2.1.0
-
-  markdown-table@3.0.4: {}
-
-  marked@15.0.12: {}
-
-  marked@16.4.2: {}
-
-  marky@1.3.0:
-    optional: true
-
-  math-intrinsics@1.1.0: {}
-
-  md5.js@1.3.5:
-    dependencies:
-      hash-base: 3.1.2
-      inherits: 2.0.4
-      safe-buffer: 5.2.1
-
-  mdast-util-definitions@6.0.0:
-    dependencies:
-      '@types/mdast': 4.0.4
-      '@types/unist': 3.0.3
-      unist-util-visit: 5.1.0
-
-  mdast-util-find-and-replace@3.0.2:
-    dependencies:
-      '@types/mdast': 4.0.4
-      escape-string-regexp: 5.0.0
-      unist-util-is: 6.0.1
-      unist-util-visit-parents: 6.0.2
-
-  mdast-util-from-markdown@2.0.3:
-    dependencies:
-      '@types/mdast': 4.0.4
-      '@types/unist': 3.0.3
-      decode-named-character-reference: 1.3.0
-      devlop: 1.1.0
-      mdast-util-to-string: 4.0.0
-      micromark: 4.0.2
-      micromark-util-decode-numeric-character-reference: 2.0.2
-      micromark-util-decode-string: 2.0.1
-      micromark-util-normalize-identifier: 2.0.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-      unist-util-stringify-position: 4.0.0
-    transitivePeerDependencies:
-      - supports-color
-
-  mdast-util-gfm-autolink-literal@2.0.1:
-    dependencies:
-      '@types/mdast': 4.0.4
-      ccount: 2.0.1
-      devlop: 1.1.0
-      mdast-util-find-and-replace: 3.0.2
-      micromark-util-character: 2.1.1
-
-  mdast-util-gfm-footnote@2.1.0:
-    dependencies:
-      '@types/mdast': 4.0.4
-      devlop: 1.1.0
-      mdast-util-from-markdown: 2.0.3
-      mdast-util-to-markdown: 2.1.2
-      micromark-util-normalize-identifier: 2.0.1
-    transitivePeerDependencies:
-      - supports-color
-
-  mdast-util-gfm-strikethrough@2.0.0:
-    dependencies:
-      '@types/mdast': 4.0.4
-      mdast-util-from-markdown: 2.0.3
-      mdast-util-to-markdown: 2.1.2
-    transitivePeerDependencies:
-      - supports-color
-
-  mdast-util-gfm-table@2.0.0:
-    dependencies:
-      '@types/mdast': 4.0.4
-      devlop: 1.1.0
-      markdown-table: 3.0.4
-      mdast-util-from-markdown: 2.0.3
-      mdast-util-to-markdown: 2.1.2
-    transitivePeerDependencies:
-      - supports-color
-
-  mdast-util-gfm-task-list-item@2.0.0:
-    dependencies:
-      '@types/mdast': 4.0.4
-      devlop: 1.1.0
-      mdast-util-from-markdown: 2.0.3
-      mdast-util-to-markdown: 2.1.2
-    transitivePeerDependencies:
-      - supports-color
-
-  mdast-util-gfm@3.1.0:
-    dependencies:
-      mdast-util-from-markdown: 2.0.3
-      mdast-util-gfm-autolink-literal: 2.0.1
-      mdast-util-gfm-footnote: 2.1.0
-      mdast-util-gfm-strikethrough: 2.0.0
-      mdast-util-gfm-table: 2.0.0
-      mdast-util-gfm-task-list-item: 2.0.0
-      mdast-util-to-markdown: 2.1.2
-    transitivePeerDependencies:
-      - supports-color
-
-  mdast-util-mdx-expression@2.0.1:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      '@types/hast': 3.0.4
-      '@types/mdast': 4.0.4
-      devlop: 1.1.0
-      mdast-util-from-markdown: 2.0.3
-      mdast-util-to-markdown: 2.1.2
-    transitivePeerDependencies:
-      - supports-color
-
-  mdast-util-mdx-jsx@3.2.0:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      '@types/hast': 3.0.4
-      '@types/mdast': 4.0.4
-      '@types/unist': 3.0.3
-      ccount: 2.0.1
-      devlop: 1.1.0
-      mdast-util-from-markdown: 2.0.3
-      mdast-util-to-markdown: 2.1.2
-      parse-entities: 4.0.2
-      stringify-entities: 4.0.4
-      unist-util-stringify-position: 4.0.0
-      vfile-message: 4.0.3
-    transitivePeerDependencies:
-      - supports-color
-
-  mdast-util-mdx@3.0.0:
-    dependencies:
-      mdast-util-from-markdown: 2.0.3
-      mdast-util-mdx-expression: 2.0.1
-      mdast-util-mdx-jsx: 3.2.0
-      mdast-util-mdxjs-esm: 2.0.1
-      mdast-util-to-markdown: 2.1.2
-    transitivePeerDependencies:
-      - supports-color
-
-  mdast-util-mdxjs-esm@2.0.1:
-    dependencies:
-      '@types/estree-jsx': 1.0.5
-      '@types/hast': 3.0.4
-      '@types/mdast': 4.0.4
-      devlop: 1.1.0
-      mdast-util-from-markdown: 2.0.3
-      mdast-util-to-markdown: 2.1.2
-    transitivePeerDependencies:
-      - supports-color
-
-  mdast-util-phrasing@4.1.0:
-    dependencies:
-      '@types/mdast': 4.0.4
-      unist-util-is: 6.0.1
-
-  mdast-util-to-hast@13.2.1:
-    dependencies:
-      '@types/hast': 3.0.4
-      '@types/mdast': 4.0.4
-      '@ungap/structured-clone': 1.3.1
-      devlop: 1.1.0
-      micromark-util-sanitize-uri: 2.0.1
-      trim-lines: 3.0.1
-      unist-util-position: 5.0.0
-      unist-util-visit: 5.1.0
-      vfile: 6.0.3
-
-  mdast-util-to-markdown@2.1.2:
-    dependencies:
-      '@types/mdast': 4.0.4
-      '@types/unist': 3.0.3
-      longest-streak: 3.1.0
-      mdast-util-phrasing: 4.1.0
-      mdast-util-to-string: 4.0.0
-      micromark-util-classify-character: 2.0.1
-      micromark-util-decode-string: 2.0.1
-      unist-util-visit: 5.1.0
-      zwitch: 2.0.4
-
-  mdast-util-to-string@4.0.0:
-    dependencies:
-      '@types/mdast': 4.0.4
-
-  mdn-data@2.0.28: {}
-
-  mdn-data@2.27.1: {}
-
-  mdurl@2.0.0: {}
-
-  mdx-annotations@0.1.4:
-    dependencies:
-      acorn: 8.17.0
-      estree-util-visit: 1.2.1
-      unist-util-visit: 4.1.2
-
-  media-typer@1.1.0: {}
-
-  merge-descriptors@2.0.0: {}
-
-  merge-stream@2.0.0: {}
-
-  merge2@1.4.1: {}
-
-  mermaid-isomorphic@3.1.0(playwright@1.59.1):
-    dependencies:
-      '@fortawesome/fontawesome-free': 6.7.2
-      katex: 0.16.47
-      mermaid: 11.16.0
-    optionalDependencies:
-      playwright: 1.59.1
-
-  mermaid@11.16.0:
-    dependencies:
-      '@braintree/sanitize-url': 7.1.2
-      '@iconify/utils': 3.1.3
-      '@mermaid-js/parser': 1.2.0
-      '@types/d3': 7.4.3
-      '@upsetjs/venn.js': 2.0.0
-      cytoscape: 3.34.0
-      cytoscape-cose-bilkent: 4.1.0(cytoscape@3.34.0)
-      cytoscape-fcose: 2.2.0(cytoscape@3.34.0)
-      d3: 7.9.0
-      d3-sankey: 0.12.3
-      dagre-d3-es: 7.0.14
-      dayjs: 1.11.21
-      dompurify: 3.4.11
-      es-toolkit: 1.49.0
-      katex: 0.16.47
-      khroma: 2.1.0
-      marked: 16.4.2
-      roughjs: 4.6.6
-      stylis: 4.4.0
-      ts-dedent: 2.3.0
-      uuid: 14.0.1
-
-  micromark-core-commonmark@2.0.3:
-    dependencies:
-      decode-named-character-reference: 1.3.0
-      devlop: 1.1.0
-      micromark-factory-destination: 2.0.1
-      micromark-factory-label: 2.0.1
-      micromark-factory-space: 2.0.1
-      micromark-factory-title: 2.0.1
-      micromark-factory-whitespace: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-chunked: 2.0.1
-      micromark-util-classify-character: 2.0.1
-      micromark-util-html-tag-name: 2.0.1
-      micromark-util-normalize-identifier: 2.0.1
-      micromark-util-resolve-all: 2.0.1
-      micromark-util-subtokenize: 2.1.0
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-extension-gfm-autolink-literal@2.1.0:
-    dependencies:
-      micromark-util-character: 2.1.1
-      micromark-util-sanitize-uri: 2.0.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-extension-gfm-footnote@2.1.0:
-    dependencies:
-      devlop: 1.1.0
-      micromark-core-commonmark: 2.0.3
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-normalize-identifier: 2.0.1
-      micromark-util-sanitize-uri: 2.0.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-extension-gfm-strikethrough@2.1.0:
-    dependencies:
-      devlop: 1.1.0
-      micromark-util-chunked: 2.0.1
-      micromark-util-classify-character: 2.0.1
-      micromark-util-resolve-all: 2.0.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-extension-gfm-table@2.1.1:
-    dependencies:
-      devlop: 1.1.0
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-extension-gfm-tagfilter@2.0.0:
-    dependencies:
-      micromark-util-types: 2.0.2
-
-  micromark-extension-gfm-task-list-item@2.1.0:
-    dependencies:
-      devlop: 1.1.0
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-extension-gfm@3.0.0:
-    dependencies:
-      micromark-extension-gfm-autolink-literal: 2.1.0
-      micromark-extension-gfm-footnote: 2.1.0
-      micromark-extension-gfm-strikethrough: 2.1.0
-      micromark-extension-gfm-table: 2.1.1
-      micromark-extension-gfm-tagfilter: 2.0.0
-      micromark-extension-gfm-task-list-item: 2.1.0
-      micromark-util-combine-extensions: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-extension-mdx-expression@3.0.1:
-    dependencies:
-      '@types/estree': 1.0.8
-      devlop: 1.1.0
-      micromark-factory-mdx-expression: 2.0.3
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-events-to-acorn: 2.0.3
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-extension-mdx-jsx@3.0.2:
-    dependencies:
-      '@types/estree': 1.0.8
-      devlop: 1.1.0
-      estree-util-is-identifier-name: 3.0.0
-      micromark-factory-mdx-expression: 2.0.3
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-events-to-acorn: 2.0.3
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-      vfile-message: 4.0.3
-
-  micromark-extension-mdx-md@2.0.0:
-    dependencies:
-      micromark-util-types: 2.0.2
-
-  micromark-extension-mdxjs-esm@3.0.0:
-    dependencies:
-      '@types/estree': 1.0.8
-      devlop: 1.1.0
-      micromark-core-commonmark: 2.0.3
-      micromark-util-character: 2.1.1
-      micromark-util-events-to-acorn: 2.0.3
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-      unist-util-position-from-estree: 2.0.0
-      vfile-message: 4.0.3
-
-  micromark-extension-mdxjs@3.0.0:
-    dependencies:
-      acorn: 8.17.0
-      acorn-jsx: 5.3.2(acorn@8.17.0)
-      micromark-extension-mdx-expression: 3.0.1
-      micromark-extension-mdx-jsx: 3.0.2
-      micromark-extension-mdx-md: 2.0.0
-      micromark-extension-mdxjs-esm: 3.0.0
-      micromark-util-combine-extensions: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-factory-destination@2.0.1:
-    dependencies:
-      micromark-util-character: 2.1.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-factory-label@2.0.1:
-    dependencies:
-      devlop: 1.1.0
-      micromark-util-character: 2.1.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-factory-mdx-expression@2.0.3:
-    dependencies:
-      '@types/estree': 1.0.8
-      devlop: 1.1.0
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-events-to-acorn: 2.0.3
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-      unist-util-position-from-estree: 2.0.0
-      vfile-message: 4.0.3
-
-  micromark-factory-space@2.0.1:
-    dependencies:
-      micromark-util-character: 2.1.1
-      micromark-util-types: 2.0.2
-
-  micromark-factory-title@2.0.1:
-    dependencies:
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-factory-whitespace@2.0.1:
-    dependencies:
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-util-character@2.1.1:
-    dependencies:
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-util-chunked@2.0.1:
-    dependencies:
-      micromark-util-symbol: 2.0.1
-
-  micromark-util-classify-character@2.0.1:
-    dependencies:
-      micromark-util-character: 2.1.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-util-combine-extensions@2.0.1:
-    dependencies:
-      micromark-util-chunked: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-util-decode-numeric-character-reference@2.0.2:
-    dependencies:
-      micromark-util-symbol: 2.0.1
-
-  micromark-util-decode-string@2.0.1:
-    dependencies:
-      decode-named-character-reference: 1.3.0
-      micromark-util-character: 2.1.1
-      micromark-util-decode-numeric-character-reference: 2.0.2
-      micromark-util-symbol: 2.0.1
-
-  micromark-util-encode@2.0.1: {}
-
-  micromark-util-events-to-acorn@2.0.3:
-    dependencies:
-      '@types/estree': 1.0.8
-      '@types/unist': 3.0.3
-      devlop: 1.1.0
-      estree-util-visit: 2.0.0
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-      vfile-message: 4.0.3
-
-  micromark-util-html-tag-name@2.0.1: {}
-
-  micromark-util-normalize-identifier@2.0.1:
-    dependencies:
-      micromark-util-symbol: 2.0.1
-
-  micromark-util-resolve-all@2.0.1:
-    dependencies:
-      micromark-util-types: 2.0.2
-
-  micromark-util-sanitize-uri@2.0.1:
-    dependencies:
-      micromark-util-character: 2.1.1
-      micromark-util-encode: 2.0.1
-      micromark-util-symbol: 2.0.1
-
-  micromark-util-subtokenize@2.1.0:
-    dependencies:
-      devlop: 1.1.0
-      micromark-util-chunked: 2.0.1
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-
-  micromark-util-symbol@2.0.1: {}
-
-  micromark-util-types@2.0.2: {}
-
-  micromark@4.0.2:
-    dependencies:
-      '@types/debug': 4.1.13
-      debug: 4.4.3(supports-color@8.1.1)
-      decode-named-character-reference: 1.3.0
-      devlop: 1.1.0
-      micromark-core-commonmark: 2.0.3
-      micromark-factory-space: 2.0.1
-      micromark-util-character: 2.1.1
-      micromark-util-chunked: 2.0.1
-      micromark-util-combine-extensions: 2.0.1
-      micromark-util-decode-numeric-character-reference: 2.0.2
-      micromark-util-encode: 2.0.1
-      micromark-util-normalize-identifier: 2.0.1
-      micromark-util-resolve-all: 2.0.1
-      micromark-util-sanitize-uri: 2.0.1
-      micromark-util-subtokenize: 2.1.0
-      micromark-util-symbol: 2.0.1
-      micromark-util-types: 2.0.2
-    transitivePeerDependencies:
-      - supports-color
-
-  micromatch@4.0.8:
-    dependencies:
-      braces: 3.0.3
-      picomatch: 2.3.2
-
-  miller-rabin@4.0.1:
-    dependencies:
-      bn.js: 4.12.3
-      brorand: 1.1.0
-
-  mime-db@1.52.0: {}
-
-  mime-db@1.54.0: {}
-
-  mime-types@2.1.35:
-    dependencies:
-      mime-db: 1.52.0
-
-  mime-types@3.0.2:
-    dependencies:
-      mime-db: 1.54.0
-
-  mimic-fn@4.0.0: {}
-
-  mini-svg-data-uri@1.4.4: {}
-
-  minimalistic-assert@1.0.1: {}
-
-  minimalistic-crypto-utils@1.0.1: {}
-
-  minimatch@10.2.5:
-    dependencies:
-      brace-expansion: 5.0.6
-
-  minimatch@5.1.9:
-    dependencies:
-      brace-expansion: 2.0.3
-
-  minimatch@9.0.9:
-    dependencies:
-      brace-expansion: 2.0.3
-
-  minimist@1.2.8: {}
-
-  minipass@7.1.3: {}
-
-  mkdirp-classic@0.5.3:
-    optional: true
-
-  mlly@1.8.2:
-    dependencies:
-      acorn: 8.17.0
-      pathe: 2.0.3
-      pkg-types: 1.3.1
-      ufo: 1.6.4
-
-  motion-dom@11.18.1:
-    dependencies:
-      motion-utils: 11.18.1
-
-  motion-dom@12.40.0:
-    dependencies:
-      motion-utils: 12.39.0
-
-  motion-utils@11.18.1: {}
-
-  motion-utils@12.39.0: {}
-
-  mrmime@2.0.1: {}
-
-  ms@2.1.3: {}
-
-  mz@2.7.0:
-    dependencies:
-      any-promise: 1.3.0
-      object-assign: 4.1.1
-      thenify-all: 1.6.0
-
-  nan@2.26.2:
-    optional: true
-
-  nanoid@3.3.11: {}
-
-  negotiator@1.0.0: {}
-
-  neotraverse@0.6.18: {}
-
-  netmask@2.1.1: {}
-
-  nlcst-to-string@4.0.0:
-    dependencies:
-      '@types/nlcst': 2.0.3
-
-  node-domexception@1.0.0: {}
-
-  node-fetch-native@1.6.7: {}
-
-  node-fetch@2.7.0:
-    dependencies:
-      whatwg-url: 5.0.0
-
-  node-fetch@3.3.2:
-    dependencies:
-      data-uri-to-buffer: 4.0.1
-      fetch-blob: 3.2.0
-      formdata-polyfill: 4.0.10
-
-  node-gyp-build@4.8.4:
-    optional: true
-
-  node-html-markdown@1.3.0:
-    dependencies:
-      node-html-parser: 6.1.13
-
-  node-html-parser@6.1.13:
-    dependencies:
-      css-select: 5.2.2
-      he: 1.2.0
-
-  node-mock-http@1.0.4: {}
-
-  node-releases@2.0.47: {}
-
-  node-stdlib-browser@1.3.1:
-    dependencies:
-      assert: 2.1.0
-      browser-resolve: 2.0.0
-      browserify-zlib: 0.2.0
-      buffer: 5.7.1
-      console-browserify: 1.2.0
-      constants-browserify: 1.0.0
-      create-require: 1.1.1
-      crypto-browserify: 3.12.1
-      domain-browser: 4.22.0
-      events: 3.3.0
-      https-browserify: 1.0.0
-      isomorphic-timers-promises: 1.0.1
-      os-browserify: 0.3.0
-      path-browserify: 1.0.1
-      pkg-dir: 5.0.0
-      process: 0.11.10
-      punycode: 1.4.1
-      querystring-es3: 0.2.1
-      readable-stream: 3.6.2
-      stream-browserify: 3.0.0
-      stream-http: 3.2.0
-      string_decoder: 1.3.0
-      timers-browserify: 2.0.12
-      tty-browserify: 0.0.1
-      url: 0.11.4
-      util: 0.12.5
-      vm-browserify: 1.1.2
-
-  normalize-path@3.0.0: {}
-
-  npm-run-path@5.3.0:
-    dependencies:
-      path-key: 4.0.0
-
-  nth-check@2.1.1:
-    dependencies:
-      boolbase: 1.0.0
-
-  object-assign@4.1.1: {}
-
-  object-hash@3.0.0: {}
-
-  object-inspect@1.13.4: {}
-
-  object-is@1.1.6:
-    dependencies:
-      call-bind: 1.0.8
-      define-properties: 1.2.1
-
-  object-keys@1.1.1: {}
-
-  object.assign@4.1.7:
-    dependencies:
-      call-bind: 1.0.8
-      call-bound: 1.0.4
-      define-properties: 1.2.1
-      es-object-atoms: 1.1.1
-      has-symbols: 1.1.0
-      object-keys: 1.1.1
-
-  ofetch@1.5.1:
-    dependencies:
-      destr: 2.0.5
-      node-fetch-native: 1.6.7
-      ufo: 1.6.4
-
-  ohash@2.0.11: {}
-
-  ollama-ai-provider-v2@1.5.5(zod@4.3.6):
-    dependencies:
-      '@ai-sdk/provider': 2.0.3
-      '@ai-sdk/provider-utils': 3.0.28(zod@4.3.6)
-      zod: 4.3.6
-    optional: true
-
-  on-exit-leak-free@2.1.2: {}
-
-  on-finished@2.4.1:
-    dependencies:
-      ee-first: 1.1.1
-
-  once@1.4.0:
-    dependencies:
-      wrappy: 1.0.2
-
-  onetime@6.0.0:
-    dependencies:
-      mimic-fn: 4.0.0
-
-  oniguruma-parser@0.12.2: {}
-
-  oniguruma-to-es@4.3.6:
-    dependencies:
-      oniguruma-parser: 0.12.2
-      regex: 6.1.0
-      regex-recursion: 6.0.2
-
-  openai@4.104.0(ws@8.21.0(bufferutil@4.1.0))(zod@4.3.6):
-    dependencies:
-      '@types/node': 18.19.130
-      '@types/node-fetch': 2.6.13
-      abort-controller: 3.0.0
-      agentkeepalive: 4.6.0
-      form-data-encoder: 1.7.2
-      formdata-node: 4.4.1
-      node-fetch: 2.7.0
-    optionalDependencies:
-      ws: 8.21.0(bufferutil@4.1.0)
-      zod: 4.3.6
-    transitivePeerDependencies:
-      - encoding
-
-  openai@6.26.0(ws@8.21.0(bufferutil@4.1.0))(zod@4.3.6):
-    optionalDependencies:
-      ws: 8.21.0(bufferutil@4.1.0)
-      zod: 4.3.6
-
-  openai@6.26.0(zod@3.25.76):
-    optionalDependencies:
-      zod: 3.25.76
-
-  os-browserify@0.3.0: {}
-
-  p-limit@3.1.0:
-    dependencies:
-      yocto-queue: 0.1.0
-
-  p-limit@6.2.0:
-    dependencies:
-      yocto-queue: 1.2.2
-
-  p-locate@5.0.0:
-    dependencies:
-      p-limit: 3.1.0
-
-  p-queue@8.1.1:
-    dependencies:
-      eventemitter3: 5.0.4
-      p-timeout: 6.1.4
-
-  p-retry@4.6.2:
-    dependencies:
-      '@types/retry': 0.12.0
-      retry: 0.13.1
-
-  p-timeout@6.1.4: {}
-
-  pac-proxy-agent@7.2.0:
-    dependencies:
-      '@tootallnate/quickjs-emscripten': 0.23.0
-      agent-base: 7.1.4
-      debug: 4.4.3(supports-color@8.1.1)
-      get-uri: 6.0.5
-      http-proxy-agent: 7.0.2
-      https-proxy-agent: 7.0.6
-      pac-resolver: 7.0.1
-      socks-proxy-agent: 8.0.5
-    transitivePeerDependencies:
-      - supports-color
-
-  pac-resolver@7.0.1:
-    dependencies:
-      degenerator: 5.0.1
-      netmask: 2.1.1
-
-  package-json-from-dist@1.0.1: {}
-
-  package-manager-detector@1.6.0: {}
-
-  pako@1.0.11: {}
-
-  parse-asn1@5.1.9:
-    dependencies:
-      asn1.js: 4.10.1
-      browserify-aes: 1.2.0
-      evp_bytestokey: 1.0.3
-      pbkdf2: 3.1.5
-      safe-buffer: 5.2.1
-
-  parse-entities@4.0.2:
-    dependencies:
-      '@types/unist': 2.0.11
-      character-entities-legacy: 3.0.0
-      character-reference-invalid: 2.0.1
-      decode-named-character-reference: 1.3.0
-      is-alphanumerical: 2.0.1
-      is-decimal: 2.0.1
-      is-hexadecimal: 2.0.1
-
-  parse-latin@7.0.0:
-    dependencies:
-      '@types/nlcst': 2.0.3
-      '@types/unist': 3.0.3
-      nlcst-to-string: 4.0.0
-      unist-util-modify-children: 4.0.0
-      unist-util-visit-children: 3.0.0
-      vfile: 6.0.3
-
-  parse5-htmlparser2-tree-adapter@6.0.1:
-    dependencies:
-      parse5: 6.0.1
-
-  parse5@5.1.1: {}
-
-  parse5@6.0.1: {}
-
-  parse5@7.3.0:
-    dependencies:
-      entities: 6.0.1
-
-  parseurl@1.3.3: {}
-
-  partial-json@0.1.7: {}
-
-  path-browserify@1.0.1: {}
-
-  path-data-parser@0.1.0: {}
-
-  path-exists@4.0.0: {}
-
-  path-key@3.1.1: {}
-
-  path-key@4.0.0: {}
-
-  path-parse@1.0.7: {}
-
-  path-scurry@1.11.1:
-    dependencies:
-      lru-cache: 10.4.3
-      minipass: 7.1.3
-
-  path-scurry@2.0.2:
-    dependencies:
-      lru-cache: 11.5.1
-      minipass: 7.1.3
-
-  path-to-regexp@8.4.2: {}
-
-  pathe@1.1.2: {}
-
-  pathe@2.0.3: {}
-
-  pathval@2.0.1: {}
-
-  pbkdf2@3.1.5:
-    dependencies:
-      create-hash: 1.2.0
-      create-hmac: 1.1.7
-      ripemd160: 2.0.3
-      safe-buffer: 5.2.1
-      sha.js: 2.4.12
-      to-buffer: 1.2.2
-
-  pend@1.2.0: {}
-
-  pi-acp@0.0.23:
-    dependencies:
-      '@agentclientprotocol/sdk': 0.12.0(zod@3.25.76)
-      zod: 3.25.76
-
-  piccolore@0.1.3: {}
-
-  picocolors@1.1.1: {}
-
-  picomatch@2.3.2: {}
-
-  picomatch@4.0.4: {}
-
-  pify@2.3.0: {}
-
-  pino-abstract-transport@2.0.0:
-    dependencies:
-      split2: 4.2.0
-
-  pino-abstract-transport@3.0.0:
-    dependencies:
-      split2: 4.2.0
-
-  pino-pretty@13.1.3:
-    dependencies:
-      colorette: 2.0.20
-      dateformat: 4.6.3
-      fast-copy: 4.0.3
-      fast-safe-stringify: 2.1.1
-      help-me: 5.0.0
-      joycon: 3.1.1
-      minimist: 1.2.8
-      on-exit-leak-free: 2.1.2
-      pino-abstract-transport: 3.0.0
-      pump: 3.0.4
-      secure-json-parse: 4.1.0
-      sonic-boom: 4.2.1
-      strip-json-comments: 5.0.3
-
-  pino-std-serializers@7.1.0: {}
-
-  pino@9.14.0:
-    dependencies:
-      '@pinojs/redact': 0.4.0
-      atomic-sleep: 1.0.0
-      on-exit-leak-free: 2.1.2
-      pino-abstract-transport: 2.0.0
-      pino-std-serializers: 7.1.0
-      process-warning: 5.0.0
-      quick-format-unescaped: 4.0.4
-      real-require: 0.2.0
-      safe-stable-stringify: 2.5.0
-      sonic-boom: 4.2.1
-      thread-stream: 3.2.0
-
-  pirates@4.0.7: {}
-
-  pixelmatch@7.2.0:
-    dependencies:
-      pngjs: 7.0.0
-
-  pkce-challenge@5.0.1: {}
-
-  pkg-dir@5.0.0:
-    dependencies:
-      find-up: 5.0.0
-
-  pkg-types@1.3.1:
-    dependencies:
-      confbox: 0.1.8
-      mlly: 1.8.2
-      pathe: 2.0.3
-
-  playwright-core@1.59.1: {}
-
-  playwright@1.59.1:
-    dependencies:
-      playwright-core: 1.59.1
-    optionalDependencies:
-      fsevents: 2.3.2
-
-  pngjs@7.0.0: {}
-
-  points-on-curve@0.2.0: {}
-
-  points-on-path@0.2.1:
-    dependencies:
-      path-data-parser: 0.1.0
-      points-on-curve: 0.2.0
-
-  possible-typed-array-names@1.1.0: {}
-
-  postcss-import@15.1.0(postcss@8.5.8):
-    dependencies:
-      postcss: 8.5.8
-      postcss-value-parser: 4.2.0
-      read-cache: 1.0.0
-      resolve: 1.22.11
-
-  postcss-js@4.1.0(postcss@8.5.8):
-    dependencies:
-      camelcase-css: 2.0.1
-      postcss: 8.5.8
-
-  postcss-load-config@4.0.2(postcss@8.5.8):
-    dependencies:
-      lilconfig: 3.1.3
-      yaml: 2.9.0
-    optionalDependencies:
-      postcss: 8.5.8
-
-  postcss-load-config@6.0.1(jiti@1.21.7)(postcss@8.5.8)(tsx@4.21.0)(yaml@2.9.0):
-    dependencies:
-      lilconfig: 3.1.3
-    optionalDependencies:
-      jiti: 1.21.7
-      postcss: 8.5.8
-      tsx: 4.21.0
-      yaml: 2.9.0
-
-  postcss-nested@6.2.0(postcss@8.5.8):
-    dependencies:
-      postcss: 8.5.8
-      postcss-selector-parser: 6.1.4
-
-  postcss-selector-parser@6.0.10:
-    dependencies:
-      cssesc: 3.0.0
-      util-deprecate: 1.0.2
-
-  postcss-selector-parser@6.1.4:
-    dependencies:
-      cssesc: 3.0.0
-      util-deprecate: 1.0.2
-
-  postcss-value-parser@4.2.0: {}
-
-  postcss@8.5.8:
-    dependencies:
-      nanoid: 3.3.11
-      picocolors: 1.1.1
-      source-map-js: 1.2.1
-
-  posthog-js@1.396.5:
-    dependencies:
-      '@posthog/core': 1.39.6
-      '@posthog/types': 1.392.0
-      core-js: 3.49.0
-      dompurify: 3.4.11
-      fflate: 0.4.8
-      preact: 10.29.3
-      query-selector-shadow-dom: 1.0.1
-      web-vitals: 5.3.0
-
-  preact@10.29.3: {}
-
-  prismjs@1.30.0: {}
-
-  process-nextick-args@2.0.1: {}
-
-  process-warning@5.0.0: {}
-
-  process@0.11.10: {}
-
-  prompts@2.4.2:
-    dependencies:
-      kleur: 3.0.3
-      sisteransi: 1.0.5
-
-  prop-types@15.8.1:
-    dependencies:
-      loose-envify: 1.4.0
-      object-assign: 4.1.1
-      react-is: 16.13.1
-
-  proper-lockfile@4.1.2:
-    dependencies:
-      graceful-fs: 4.2.11
-      retry: 0.12.0
-      signal-exit: 3.0.7
-
-  property-information@7.2.0: {}
-
-  protobufjs@7.5.4:
-    dependencies:
-      '@protobufjs/aspromise': 1.1.2
-      '@protobufjs/base64': 1.1.2
-      '@protobufjs/codegen': 2.0.4
-      '@protobufjs/eventemitter': 1.1.0
-      '@protobufjs/fetch': 1.1.0
-      '@protobufjs/float': 1.0.2
-      '@protobufjs/inquire': 1.1.0
-      '@protobufjs/path': 1.1.2
-      '@protobufjs/pool': 1.1.0
-      '@protobufjs/utf8': 1.1.0
-      '@types/node': 22.19.15
-      long: 5.3.2
-
-  proxy-addr@2.0.7:
-    dependencies:
-      forwarded: 0.2.0
-      ipaddr.js: 1.9.1
-
-  proxy-agent@6.5.0:
-    dependencies:
-      agent-base: 7.1.4
-      debug: 4.4.3(supports-color@8.1.1)
-      http-proxy-agent: 7.0.2
-      https-proxy-agent: 7.0.6
-      lru-cache: 7.18.3
-      pac-proxy-agent: 7.2.0
-      proxy-from-env: 1.1.0
-      socks-proxy-agent: 8.0.5
-    transitivePeerDependencies:
-      - supports-color
-
-  proxy-from-env@1.1.0: {}
-
-  proxy-from-env@2.1.0: {}
-
-  public-encrypt@4.0.3:
-    dependencies:
-      bn.js: 4.12.3
-      browserify-rsa: 4.1.1
-      create-hash: 1.2.0
-      parse-asn1: 5.1.9
-      randombytes: 2.1.0
-      safe-buffer: 5.2.1
-
-  pump@3.0.4:
-    dependencies:
-      end-of-stream: 1.4.5
-      once: 1.4.0
-
-  punycode.js@2.3.1: {}
-
-  punycode@1.4.1: {}
-
-  qs@6.15.0:
-    dependencies:
-      side-channel: 1.1.0
-
-  qs@6.15.3:
-    dependencies:
-      es-define-property: 1.0.1
-      side-channel: 1.1.1
-
-  query-selector-shadow-dom@1.0.1: {}
-
-  querystring-es3@0.2.1: {}
-
-  queue-microtask@1.2.3: {}
-
-  quick-format-unescaped@4.0.4: {}
-
-  radix3@1.1.2: {}
-
-  randombytes@2.1.0:
-    dependencies:
-      safe-buffer: 5.2.1
-
-  randomfill@1.0.4:
-    dependencies:
-      randombytes: 2.1.0
-      safe-buffer: 5.2.1
-
-  range-parser@1.3.0: {}
-
-  raw-body@3.0.2:
-    dependencies:
-      bytes: 3.1.2
-      http-errors: 2.0.1
-      iconv-lite: 0.7.2
-      unpipe: 1.0.0
-
-  react-aria@3.50.0(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
-    dependencies:
-      '@internationalized/date': 3.12.2
-      '@internationalized/number': 3.6.7
-      '@internationalized/string': 3.2.9
-      '@react-types/shared': 3.36.0(react@19.2.7)
-      '@swc/helpers': 0.5.23
-      aria-hidden: 1.2.6
-      clsx: 2.1.1
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-      react-stately: 3.48.0(react@19.2.7)
-      use-sync-external-store: 1.6.0(react@19.2.7)
-
-  react-day-picker@8.10.1(date-fns@4.4.0)(react@19.2.7):
-    dependencies:
-      date-fns: 4.4.0
-      react: 19.2.7
-
-  react-dom@19.2.7(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-      scheduler: 0.27.0
-
-  react-hook-form@7.80.0(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-
-  react-is@16.13.1: {}
-
-  react-is@18.3.1: {}
-
-  react-markdown@10.1.0(@types/react@19.2.17)(react@19.2.7):
-    dependencies:
-      '@types/hast': 3.0.4
-      '@types/mdast': 4.0.4
-      '@types/react': 19.2.17
-      devlop: 1.1.0
-      hast-util-to-jsx-runtime: 2.3.6
-      html-url-attributes: 3.0.1
-      mdast-util-to-hast: 13.2.1
-      react: 19.2.7
-      remark-parse: 11.0.0
-      remark-rehype: 11.1.2
-      unified: 11.0.5
-      unist-util-visit: 5.1.0
-      vfile: 6.0.3
-    transitivePeerDependencies:
-      - supports-color
-
-  react-refresh@0.17.0: {}
-
-  react-remove-scroll-bar@2.3.8(@types/react@19.2.17)(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-      react-style-singleton: 2.2.3(@types/react@19.2.17)(react@19.2.7)
-      tslib: 2.8.1
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  react-remove-scroll@2.7.2(@types/react@19.2.17)(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-      react-remove-scroll-bar: 2.3.8(@types/react@19.2.17)(react@19.2.7)
-      react-style-singleton: 2.2.3(@types/react@19.2.17)(react@19.2.7)
-      tslib: 2.8.1
-      use-callback-ref: 1.3.3(@types/react@19.2.17)(react@19.2.7)
-      use-sidecar: 1.1.3(@types/react@19.2.17)(react@19.2.7)
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  react-resizable-panels@2.1.9(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-
-  react-smooth@4.0.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
-    dependencies:
-      fast-equals: 5.4.0
-      prop-types: 15.8.1
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-      react-transition-group: 4.4.5(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-
-  react-stately@3.48.0(react@19.2.7):
-    dependencies:
-      '@internationalized/date': 3.12.2
-      '@internationalized/number': 3.6.7
-      '@internationalized/string': 3.2.9
-      '@react-types/shared': 3.36.0(react@19.2.7)
-      '@swc/helpers': 0.5.23
-      react: 19.2.7
-      use-sync-external-store: 1.6.0(react@19.2.7)
-
-  react-style-singleton@2.2.3(@types/react@19.2.17)(react@19.2.7):
-    dependencies:
-      get-nonce: 1.0.1
-      react: 19.2.7
-      tslib: 2.8.1
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  react-transition-group@4.4.5(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
-    dependencies:
-      '@babel/runtime': 7.29.7
-      dom-helpers: 5.2.1
-      loose-envify: 1.4.0
-      prop-types: 15.8.1
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-
-  react@19.2.7: {}
-
-  read-cache@1.0.0:
-    dependencies:
-      pify: 2.3.0
-
-  readable-stream@2.3.8:
-    dependencies:
-      core-util-is: 1.0.3
-      inherits: 2.0.4
-      isarray: 1.0.0
-      process-nextick-args: 2.0.1
-      safe-buffer: 5.1.2
-      string_decoder: 1.1.1
-      util-deprecate: 1.0.2
-
-  readable-stream@3.6.2:
-    dependencies:
-      inherits: 2.0.4
-      string_decoder: 1.3.0
-      util-deprecate: 1.0.2
-
-  readable-stream@4.7.0:
-    dependencies:
-      abort-controller: 3.0.0
-      buffer: 6.0.3
-      events: 3.3.0
-      process: 0.11.10
-      string_decoder: 1.3.0
-
-  readdir-glob@1.1.3:
-    dependencies:
-      minimatch: 5.1.9
-
-  readdirp@3.6.0:
-    dependencies:
-      picomatch: 2.3.2
-
-  readdirp@4.1.2: {}
-
-  readdirp@5.0.0: {}
-
-  real-require@0.2.0: {}
-
-  recharts-scale@0.4.5:
-    dependencies:
-      decimal.js-light: 2.5.1
-
-  recharts@2.15.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
-    dependencies:
-      clsx: 2.1.1
-      eventemitter3: 4.0.7
-      lodash: 4.18.1
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-      react-is: 18.3.1
-      react-smooth: 4.0.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7)
-      recharts-scale: 0.4.5
-      tiny-invariant: 1.3.3
-      victory-vendor: 36.9.2
-
-  recma-build-jsx@1.0.0:
-    dependencies:
-      '@types/estree': 1.0.8
-      estree-util-build-jsx: 3.0.1
-      vfile: 6.0.3
-
-  recma-jsx@1.0.1(acorn@8.17.0):
-    dependencies:
-      acorn: 8.17.0
-      acorn-jsx: 5.3.2(acorn@8.17.0)
-      estree-util-to-js: 2.0.0
-      recma-parse: 1.0.0
-      recma-stringify: 1.0.0
-      unified: 11.0.5
-
-  recma-parse@1.0.0:
-    dependencies:
-      '@types/estree': 1.0.8
-      esast-util-from-js: 2.0.1
-      unified: 11.0.5
-      vfile: 6.0.3
-
-  recma-stringify@1.0.0:
-    dependencies:
-      '@types/estree': 1.0.8
-      estree-util-to-js: 2.0.0
-      unified: 11.0.5
-      vfile: 6.0.3
-
-  regex-recursion@6.0.2:
-    dependencies:
-      regex-utilities: 2.3.0
-
-  regex-utilities@2.3.0: {}
-
-  regex@6.1.0:
-    dependencies:
-      regex-utilities: 2.3.0
-
-  rehype-mermaid@3.0.0(playwright@1.59.1):
-    dependencies:
-      '@types/hast': 3.0.4
-      hast-util-from-html-isomorphic: 2.0.0
-      hast-util-to-text: 4.0.2
-      mermaid-isomorphic: 3.1.0(playwright@1.59.1)
-      mini-svg-data-uri: 1.4.4
-      space-separated-tokens: 2.0.2
-      unified: 11.0.5
-      unist-util-visit-parents: 6.0.2
-      vfile: 6.0.3
-    optionalDependencies:
-      playwright: 1.59.1
-
-  rehype-parse@9.0.1:
-    dependencies:
-      '@types/hast': 3.0.4
-      hast-util-from-html: 2.0.3
-      unified: 11.0.5
-
-  rehype-raw@7.0.0:
-    dependencies:
-      '@types/hast': 3.0.4
-      hast-util-raw: 9.1.0
-      vfile: 6.0.3
-
-  rehype-recma@1.0.0:
-    dependencies:
-      '@types/estree': 1.0.8
-      '@types/hast': 3.0.4
-      hast-util-to-estree: 3.1.3
-    transitivePeerDependencies:
-      - supports-color
-
-  rehype-stringify@10.0.1:
-    dependencies:
-      '@types/hast': 3.0.4
-      hast-util-to-html: 9.0.5
-      unified: 11.0.5
-
-  rehype@13.0.2:
-    dependencies:
-      '@types/hast': 3.0.4
-      rehype-parse: 9.0.1
-      rehype-stringify: 10.0.1
-      unified: 11.0.5
-
-  remark-gfm@4.0.1:
-    dependencies:
-      '@types/mdast': 4.0.4
-      mdast-util-gfm: 3.1.0
-      micromark-extension-gfm: 3.0.0
-      remark-parse: 11.0.0
-      remark-stringify: 11.0.0
-      unified: 11.0.5
-    transitivePeerDependencies:
-      - supports-color
-
-  remark-mdx@3.1.1:
-    dependencies:
-      mdast-util-mdx: 3.0.0
-      micromark-extension-mdxjs: 3.0.0
-    transitivePeerDependencies:
-      - supports-color
-
-  remark-parse@11.0.0:
-    dependencies:
-      '@types/mdast': 4.0.4
-      mdast-util-from-markdown: 2.0.3
-      micromark-util-types: 2.0.2
-      unified: 11.0.5
-    transitivePeerDependencies:
-      - supports-color
-
-  remark-rehype@11.1.2:
-    dependencies:
-      '@types/hast': 3.0.4
-      '@types/mdast': 4.0.4
-      mdast-util-to-hast: 13.2.1
-      unified: 11.0.5
-      vfile: 6.0.3
-
-  remark-smartypants@3.0.2:
-    dependencies:
-      retext: 9.0.0
-      retext-smartypants: 6.2.0
-      unified: 11.0.5
-      unist-util-visit: 5.1.0
-
-  remark-stringify@11.0.0:
-    dependencies:
-      '@types/mdast': 4.0.4
-      mdast-util-to-markdown: 2.1.2
-      unified: 11.0.5
-
-  require-directory@2.1.1: {}
-
-  require-from-string@2.0.2: {}
-
-  resolve-from@5.0.0: {}
-
-  resolve-pkg-maps@1.0.0: {}
-
-  resolve@1.22.11:
-    dependencies:
-      is-core-module: 2.16.1
-      path-parse: 1.0.7
-      supports-preserve-symlinks-flag: 1.0.0
-
-  retext-latin@4.0.0:
-    dependencies:
-      '@types/nlcst': 2.0.3
-      parse-latin: 7.0.0
-      unified: 11.0.5
-
-  retext-smartypants@6.2.0:
-    dependencies:
-      '@types/nlcst': 2.0.3
-      nlcst-to-string: 4.0.0
-      unist-util-visit: 5.1.0
-
-  retext-stringify@4.0.0:
-    dependencies:
-      '@types/nlcst': 2.0.3
-      nlcst-to-string: 4.0.0
-      unified: 11.0.5
-
-  retext@9.0.0:
-    dependencies:
-      '@types/nlcst': 2.0.3
-      retext-latin: 4.0.0
-      retext-stringify: 4.0.0
-      unified: 11.0.5
-
-  retry@0.12.0: {}
-
-  retry@0.13.1: {}
-
-  reusify@1.1.0: {}
-
-  ripemd160@2.0.3:
-    dependencies:
-      hash-base: 3.1.2
-      inherits: 2.0.4
-
-  robust-predicates@3.0.3: {}
-
-  rollup@4.60.1:
-    dependencies:
-      '@types/estree': 1.0.8
-    optionalDependencies:
-      '@rollup/rollup-android-arm-eabi': 4.60.1
-      '@rollup/rollup-android-arm64': 4.60.1
-      '@rollup/rollup-darwin-arm64': 4.60.1
-      '@rollup/rollup-darwin-x64': 4.60.1
-      '@rollup/rollup-freebsd-arm64': 4.60.1
-      '@rollup/rollup-freebsd-x64': 4.60.1
-      '@rollup/rollup-linux-arm-gnueabihf': 4.60.1
-      '@rollup/rollup-linux-arm-musleabihf': 4.60.1
-      '@rollup/rollup-linux-arm64-gnu': 4.60.1
-      '@rollup/rollup-linux-arm64-musl': 4.60.1
-      '@rollup/rollup-linux-loong64-gnu': 4.60.1
-      '@rollup/rollup-linux-loong64-musl': 4.60.1
-      '@rollup/rollup-linux-ppc64-gnu': 4.60.1
-      '@rollup/rollup-linux-ppc64-musl': 4.60.1
-      '@rollup/rollup-linux-riscv64-gnu': 4.60.1
-      '@rollup/rollup-linux-riscv64-musl': 4.60.1
-      '@rollup/rollup-linux-s390x-gnu': 4.60.1
-      '@rollup/rollup-linux-x64-gnu': 4.60.1
-      '@rollup/rollup-linux-x64-musl': 4.60.1
-      '@rollup/rollup-openbsd-x64': 4.60.1
-      '@rollup/rollup-openharmony-arm64': 4.60.1
-      '@rollup/rollup-win32-arm64-msvc': 4.60.1
-      '@rollup/rollup-win32-ia32-msvc': 4.60.1
-      '@rollup/rollup-win32-x64-gnu': 4.60.1
-      '@rollup/rollup-win32-x64-msvc': 4.60.1
-      fsevents: 2.3.3
-
-  roughjs@4.6.6:
-    dependencies:
-      hachure-fill: 0.5.2
-      path-data-parser: 0.1.0
-      points-on-curve: 0.2.0
-      points-on-path: 0.2.1
-
-  router@2.2.0:
-    dependencies:
-      debug: 4.4.3(supports-color@8.1.1)
-      depd: 2.0.0
-      is-promise: 4.0.0
-      parseurl: 1.3.3
-      path-to-regexp: 8.4.2
-    transitivePeerDependencies:
-      - supports-color
-
-  run-parallel@1.2.0:
-    dependencies:
-      queue-microtask: 1.2.3
-
-  rw@1.3.3: {}
-
-  safe-buffer@5.1.2: {}
-
-  safe-buffer@5.2.1: {}
-
-  safe-regex-test@1.1.0:
-    dependencies:
-      call-bound: 1.0.4
-      es-errors: 1.3.0
-      is-regex: 1.2.1
-
-  safe-stable-stringify@2.5.0: {}
-
-  safer-buffer@2.1.2: {}
-
-  sandbox-agent@0.4.2(dockerode@4.0.10)(get-port@7.2.0)(zod@4.3.6):
-    dependencies:
-      '@sandbox-agent/cli-shared': 0.4.2
-      acp-http-client: 0.4.2(zod@4.3.6)
-    optionalDependencies:
-      '@sandbox-agent/cli': 0.4.2
-      dockerode: 4.0.10
-      get-port: 7.2.0
-    transitivePeerDependencies:
-      - zod
-
-  sax@1.6.0: {}
-
-  scheduler@0.27.0: {}
-
-  secure-json-parse@4.1.0: {}
-
-  semver@6.3.1: {}
-
-  semver@7.7.4: {}
-
-  semver@7.8.5: {}
-
-  send@1.2.1:
-    dependencies:
-      debug: 4.4.3(supports-color@8.1.1)
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      etag: 1.8.1
-      fresh: 2.0.0
-      http-errors: 2.0.1
-      mime-types: 3.0.2
-      ms: 2.1.3
-      on-finished: 2.4.1
-      range-parser: 1.3.0
-      statuses: 2.0.2
-    transitivePeerDependencies:
-      - supports-color
-
-  serve-static@2.2.1:
-    dependencies:
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      parseurl: 1.3.3
-      send: 1.2.1
-    transitivePeerDependencies:
-      - supports-color
-
-  set-cookie-parser@2.7.2: {}
-
-  set-function-length@1.2.2:
-    dependencies:
-      define-data-property: 1.1.4
-      es-errors: 1.3.0
-      function-bind: 1.1.2
-      get-intrinsic: 1.3.0
-      gopd: 1.2.0
-      has-property-descriptors: 1.0.2
-
-  setimmediate@1.0.5: {}
-
-  setprototypeof@1.2.0: {}
-
-  sha.js@2.4.12:
-    dependencies:
-      inherits: 2.0.4
-      safe-buffer: 5.2.1
-      to-buffer: 1.2.2
-
-  sharp@0.33.5:
-    dependencies:
-      color: 4.2.3
-      detect-libc: 2.1.2
-      semver: 7.7.4
-    optionalDependencies:
-      '@img/sharp-darwin-arm64': 0.33.5
-      '@img/sharp-darwin-x64': 0.33.5
-      '@img/sharp-libvips-darwin-arm64': 1.0.4
-      '@img/sharp-libvips-darwin-x64': 1.0.4
-      '@img/sharp-libvips-linux-arm': 1.0.5
-      '@img/sharp-libvips-linux-arm64': 1.0.4
-      '@img/sharp-libvips-linux-s390x': 1.0.4
-      '@img/sharp-libvips-linux-x64': 1.0.4
-      '@img/sharp-libvips-linuxmusl-arm64': 1.0.4
-      '@img/sharp-libvips-linuxmusl-x64': 1.0.4
-      '@img/sharp-linux-arm': 0.33.5
-      '@img/sharp-linux-arm64': 0.33.5
-      '@img/sharp-linux-s390x': 0.33.5
-      '@img/sharp-linux-x64': 0.33.5
-      '@img/sharp-linuxmusl-arm64': 0.33.5
-      '@img/sharp-linuxmusl-x64': 0.33.5
-      '@img/sharp-wasm32': 0.33.5
-      '@img/sharp-win32-ia32': 0.33.5
-      '@img/sharp-win32-x64': 0.33.5
-
-  sharp@0.34.5:
-    dependencies:
-      '@img/colour': 1.1.0
-      detect-libc: 2.1.2
-      semver: 7.7.4
-    optionalDependencies:
-      '@img/sharp-darwin-arm64': 0.34.5
-      '@img/sharp-darwin-x64': 0.34.5
-      '@img/sharp-libvips-darwin-arm64': 1.2.4
-      '@img/sharp-libvips-darwin-x64': 1.2.4
-      '@img/sharp-libvips-linux-arm': 1.2.4
-      '@img/sharp-libvips-linux-arm64': 1.2.4
-      '@img/sharp-libvips-linux-ppc64': 1.2.4
-      '@img/sharp-libvips-linux-riscv64': 1.2.4
-      '@img/sharp-libvips-linux-s390x': 1.2.4
-      '@img/sharp-libvips-linux-x64': 1.2.4
-      '@img/sharp-libvips-linuxmusl-arm64': 1.2.4
-      '@img/sharp-libvips-linuxmusl-x64': 1.2.4
-      '@img/sharp-linux-arm': 0.34.5
-      '@img/sharp-linux-arm64': 0.34.5
-      '@img/sharp-linux-ppc64': 0.34.5
-      '@img/sharp-linux-riscv64': 0.34.5
-      '@img/sharp-linux-s390x': 0.34.5
-      '@img/sharp-linux-x64': 0.34.5
-      '@img/sharp-linuxmusl-arm64': 0.34.5
-      '@img/sharp-linuxmusl-x64': 0.34.5
-      '@img/sharp-wasm32': 0.34.5
-      '@img/sharp-win32-arm64': 0.34.5
-      '@img/sharp-win32-ia32': 0.34.5
-      '@img/sharp-win32-x64': 0.34.5
-    optional: true
-
-  shebang-command@2.0.0:
-    dependencies:
-      shebang-regex: 3.0.0
-
-  shebang-regex@3.0.0: {}
-
-  shiki@3.23.0:
-    dependencies:
-      '@shikijs/core': 3.23.0
-      '@shikijs/engine-javascript': 3.23.0
-      '@shikijs/engine-oniguruma': 3.23.0
-      '@shikijs/langs': 3.23.0
-      '@shikijs/themes': 3.23.0
-      '@shikijs/types': 3.23.0
-      '@shikijs/vscode-textmate': 10.0.2
-      '@types/hast': 3.0.4
-
-  side-channel-list@1.0.0:
-    dependencies:
-      es-errors: 1.3.0
-      object-inspect: 1.13.4
-
-  side-channel-list@1.0.1:
-    dependencies:
-      es-errors: 1.3.0
-      object-inspect: 1.13.4
-
-  side-channel-map@1.0.1:
-    dependencies:
-      call-bound: 1.0.4
-      es-errors: 1.3.0
-      get-intrinsic: 1.3.0
-      object-inspect: 1.13.4
-
-  side-channel-weakmap@1.0.2:
-    dependencies:
-      call-bound: 1.0.4
-      es-errors: 1.3.0
-      get-intrinsic: 1.3.0
-      object-inspect: 1.13.4
-      side-channel-map: 1.0.1
-
-  side-channel@1.1.0:
-    dependencies:
-      es-errors: 1.3.0
-      object-inspect: 1.13.4
-      side-channel-list: 1.0.0
-      side-channel-map: 1.0.1
-      side-channel-weakmap: 1.0.2
-
-  side-channel@1.1.1:
-    dependencies:
-      es-errors: 1.3.0
-      object-inspect: 1.13.4
-      side-channel-list: 1.0.1
-      side-channel-map: 1.0.1
-      side-channel-weakmap: 1.0.2
-
-  siginfo@2.0.0: {}
-
-  signal-exit@3.0.7: {}
-
-  signal-exit@4.1.0: {}
-
-  simple-swizzle@0.2.4:
-    dependencies:
-      is-arrayish: 0.3.4
-
-  sisteransi@1.0.5: {}
-
-  sitemap@9.0.1:
-    dependencies:
-      '@types/node': 24.13.2
-      '@types/sax': 1.2.7
-      arg: 5.0.2
-      sax: 1.6.0
-
-  smart-buffer@4.2.0: {}
-
-  smol-toml@1.6.1: {}
-
-  socks-proxy-agent@8.0.5:
-    dependencies:
-      agent-base: 7.1.4
-      debug: 4.4.3(supports-color@8.1.1)
-      socks: 2.8.9
-    transitivePeerDependencies:
-      - supports-color
-
-  socks@2.8.9:
-    dependencies:
-      ip-address: 10.2.0
-      smart-buffer: 4.2.0
-
-  sonic-boom@4.2.1:
-    dependencies:
-      atomic-sleep: 1.0.0
-
-  sonner@1.7.4(react-dom@19.2.7(react@19.2.7))(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-      react-dom: 19.2.7(react@19.2.7)
-
-  source-map-js@1.2.1: {}
-
-  source-map@0.6.1:
-    optional: true
-
-  source-map@0.7.6: {}
-
-  space-separated-tokens@2.0.2: {}
-
-  split-ca@1.0.1:
-    optional: true
-
-  split2@4.2.0: {}
-
-  ssh2@1.17.0:
-    dependencies:
-      asn1: 0.2.6
-      bcrypt-pbkdf: 1.0.2
-    optionalDependencies:
-      cpu-features: 0.0.10
-      nan: 2.26.2
-    optional: true
-
-  stackback@0.0.2: {}
-
-  statuses@2.0.2: {}
-
-  std-env@3.10.0: {}
-
-  stream-browserify@3.0.0:
-    dependencies:
-      inherits: 2.0.4
-      readable-stream: 3.6.2
-
-  stream-http@3.2.0:
-    dependencies:
-      builtin-status-codes: 3.0.0
-      inherits: 2.0.4
-      readable-stream: 3.6.2
-      xtend: 4.0.2
-
-  stream-replace-string@2.0.0: {}
-
-  streamx@2.28.0:
-    dependencies:
-      events-universal: 1.0.1
-      fast-fifo: 1.3.2
-      text-decoder: 1.2.7
-    transitivePeerDependencies:
-      - bare-abort-controller
-      - react-native-b4a
-
-  string-width@4.2.3:
-    dependencies:
-      emoji-regex: 8.0.0
-      is-fullwidth-code-point: 3.0.0
-      strip-ansi: 6.0.1
-
-  string-width@5.1.2:
-    dependencies:
-      eastasianwidth: 0.2.0
-      emoji-regex: 9.2.2
-      strip-ansi: 7.2.0
-
-  string-width@7.2.0:
-    dependencies:
-      emoji-regex: 10.6.0
-      get-east-asian-width: 1.6.0
-      strip-ansi: 7.2.0
-
-  string_decoder@1.1.1:
-    dependencies:
-      safe-buffer: 5.1.2
-
-  string_decoder@1.3.0:
-    dependencies:
-      safe-buffer: 5.2.1
-
-  stringify-entities@4.0.4:
-    dependencies:
-      character-entities-html4: 2.1.0
-      character-entities-legacy: 3.0.0
-
-  strip-ansi@6.0.1:
-    dependencies:
-      ansi-regex: 5.0.1
-
-  strip-ansi@7.2.0:
-    dependencies:
-      ansi-regex: 6.2.2
-
-  strip-final-newline@3.0.0: {}
-
-  strip-json-comments@5.0.3: {}
-
-  strtok3@10.3.5:
-    dependencies:
-      '@tokenizer/token': 0.3.0
-
-  style-mod@4.1.3: {}
-
-  style-to-js@1.1.21:
-    dependencies:
-      style-to-object: 1.0.14
-
-  style-to-object@1.0.14:
-    dependencies:
-      inline-style-parser: 0.2.7
-
-  stylis@4.4.0: {}
-
-  sucrase@3.35.1:
-    dependencies:
-      '@jridgewell/gen-mapping': 0.3.13
-      commander: 4.1.1
-      lines-and-columns: 1.2.4
-      mz: 2.7.0
-      pirates: 4.0.7
-      tinyglobby: 0.2.15
-      ts-interface-checker: 0.1.13
-
-  supports-color@7.2.0:
-    dependencies:
-      has-flag: 4.0.0
-
-  supports-color@8.1.1:
-    dependencies:
-      has-flag: 4.0.0
-
-  supports-preserve-symlinks-flag@1.0.0: {}
-
-  svgo@4.0.1:
-    dependencies:
-      commander: 11.1.0
-      css-select: 5.2.2
-      css-tree: 3.2.1
-      css-what: 6.2.2
-      csso: 5.0.5
-      picocolors: 1.1.1
-      sax: 1.6.0
-
-  tabbable@6.5.0: {}
-
-  tailwind-merge@2.6.1: {}
-
-  tailwindcss-animate@1.0.7(tailwindcss@3.4.19(tsx@4.21.0)(yaml@2.9.0)):
-    dependencies:
-      tailwindcss: 3.4.19(tsx@4.21.0)(yaml@2.9.0)
-
-  tailwindcss@3.4.19(tsx@4.21.0)(yaml@2.9.0):
-    dependencies:
-      '@alloc/quick-lru': 5.2.0
-      arg: 5.0.2
-      chokidar: 3.6.0
-      didyoumean: 1.2.2
-      dlv: 1.1.3
-      fast-glob: 3.3.3
-      glob-parent: 6.0.2
-      is-glob: 4.0.3
-      jiti: 1.21.7
-      lilconfig: 3.1.3
-      micromatch: 4.0.8
-      normalize-path: 3.0.0
-      object-hash: 3.0.0
-      picocolors: 1.1.1
-      postcss: 8.5.8
-      postcss-import: 15.1.0(postcss@8.5.8)
-      postcss-js: 4.1.0(postcss@8.5.8)
-      postcss-load-config: 6.0.1(jiti@1.21.7)(postcss@8.5.8)(tsx@4.21.0)(yaml@2.9.0)
-      postcss-nested: 6.2.0(postcss@8.5.8)
-      postcss-selector-parser: 6.1.4
-      resolve: 1.22.11
-      sucrase: 3.35.1
-    transitivePeerDependencies:
-      - tsx
-      - yaml
-
-  tar-fs@2.1.4:
-    dependencies:
-      chownr: 1.1.4
-      mkdirp-classic: 0.5.3
-      pump: 3.0.4
-      tar-stream: 2.2.0
-    optional: true
-
-  tar-stream@2.2.0:
-    dependencies:
-      bl: 4.1.0
-      end-of-stream: 1.4.5
-      fs-constants: 1.0.0
-      inherits: 2.0.4
-      readable-stream: 3.6.2
-    optional: true
-
-  tar-stream@3.2.0:
-    dependencies:
-      b4a: 1.8.1
-      bare-fs: 4.7.3
-      fast-fifo: 1.3.2
-      streamx: 2.28.0
-    transitivePeerDependencies:
-      - bare-abort-controller
-      - bare-buffer
-      - react-native-b4a
-
-  teex@1.0.1:
-    dependencies:
-      streamx: 2.28.0
-    transitivePeerDependencies:
-      - bare-abort-controller
-      - react-native-b4a
-
-  text-decoder@1.2.7:
-    dependencies:
-      b4a: 1.8.1
-    transitivePeerDependencies:
-      - react-native-b4a
-
-  thenify-all@1.6.0:
-    dependencies:
-      thenify: 3.3.1
-
-  thenify@3.3.1:
-    dependencies:
-      any-promise: 1.3.0
-
-  thread-stream@3.2.0:
-    dependencies:
-      real-require: 0.2.0
-
-  timers-browserify@2.0.12:
-    dependencies:
-      setimmediate: 1.0.5
-
-  tiny-inflate@1.0.3: {}
-
-  tiny-invariant@1.3.3: {}
-
-  tinybench@2.9.0: {}
-
-  tinyexec@0.3.2: {}
-
-  tinyexec@1.2.4: {}
-
-  tinyglobby@0.2.15:
-    dependencies:
-      fdir: 6.5.0(picomatch@4.0.4)
-      picomatch: 4.0.4
-
-  tinyglobby@0.2.17:
-    dependencies:
-      fdir: 6.5.0(picomatch@4.0.4)
-      picomatch: 4.0.4
-
-  tinypool@1.1.1: {}
-
-  tinyrainbow@1.2.0: {}
-
-  tinyspy@3.0.2: {}
-
-  tldts-core@7.4.6: {}
-
-  tldts@7.4.6:
-    dependencies:
-      tldts-core: 7.4.6
-
-  tm-themes@1.12.2: {}
-
-  to-buffer@1.2.2:
-    dependencies:
-      isarray: 2.0.5
-      safe-buffer: 5.2.1
-      typed-array-buffer: 1.0.3
-
-  to-regex-range@5.0.1:
-    dependencies:
-      is-number: 7.0.0
-
-  toidentifier@1.0.1: {}
-
-  token-types@6.1.2:
-    dependencies:
-      '@borewit/text-codec': 0.2.2
-      '@tokenizer/token': 0.3.0
-      ieee754: 1.2.1
-
-  tough-cookie@6.0.1:
-    dependencies:
-      tldts: 7.4.6
-
-  tr46@0.0.3: {}
-
-  tree-kill@1.2.2: {}
-
-  trim-lines@3.0.1: {}
-
-  trough@2.2.0: {}
-
-  ts-algebra@2.0.0: {}
-
-  ts-dedent@2.3.0: {}
-
-  ts-interface-checker@0.1.13: {}
-
-  tsconfck@3.1.6(typescript@5.9.3):
-    optionalDependencies:
-      typescript: 5.9.3
-
-  tslib@2.8.1: {}
-
-  tsup@8.5.1(jiti@1.21.7)(postcss@8.5.8)(tsx@4.21.0)(typescript@5.9.3)(yaml@2.9.0):
-    dependencies:
-      bundle-require: 5.1.0(esbuild@0.27.4)
-      cac: 6.7.14
-      chokidar: 4.0.3
-      consola: 3.4.2
-      debug: 4.4.3(supports-color@8.1.1)
-      esbuild: 0.27.4
-      fix-dts-default-cjs-exports: 1.0.1
-      joycon: 3.1.1
-      picocolors: 1.1.1
-      postcss-load-config: 6.0.1(jiti@1.21.7)(postcss@8.5.8)(tsx@4.21.0)(yaml@2.9.0)
-      resolve-from: 5.0.0
-      rollup: 4.60.1
-      source-map: 0.7.6
-      sucrase: 3.35.1
-      tinyexec: 0.3.2
-      tinyglobby: 0.2.15
-      tree-kill: 1.2.2
-    optionalDependencies:
-      postcss: 8.5.8
-      typescript: 5.9.3
-    transitivePeerDependencies:
-      - jiti
-      - supports-color
-      - tsx
-      - yaml
-
-  tsx@4.21.0:
-    dependencies:
-      esbuild: 0.27.4
-      get-tsconfig: 4.13.7
-    optionalDependencies:
-      fsevents: 2.3.3
-
-  tty-browserify@0.0.1: {}
+  '@turbo/windows-arm64@2.9.1':
+    optional: true
 
   turbo@2.9.1:
     optionalDependencies:
@@ -15856,484 +145,4 @@ snapshots:
       '@turbo/windows-64': 2.9.1
       '@turbo/windows-arm64': 2.9.1
 
-  tweetnacl@0.14.5:
-    optional: true
-
-  type-fest@0.21.3: {}
-
-  type-fest@4.41.0: {}
-
-  type-is@2.1.0:
-    dependencies:
-      content-type: 2.0.0
-      media-typer: 1.1.0
-      mime-types: 3.0.2
-
-  typed-array-buffer@1.0.3:
-    dependencies:
-      call-bound: 1.0.4
-      es-errors: 1.3.0
-      is-typed-array: 1.1.15
-
-  typedoc-plugin-markdown@4.12.0(typedoc@0.28.19(typescript@5.9.3)):
-    dependencies:
-      typedoc: 0.28.19(typescript@5.9.3)
-
-  typedoc@0.28.19(typescript@5.9.3):
-    dependencies:
-      '@gerrit0/mini-shiki': 3.23.0
-      lunr: 2.3.9
-      markdown-it: 14.2.0
-      minimatch: 10.2.5
-      typescript: 5.9.3
-      yaml: 2.9.0
-
   typescript@5.9.3: {}
-
-  typesense@2.1.0(@babel/runtime@7.29.7):
-    dependencies:
-      '@babel/runtime': 7.29.7
-      axios: 1.18.1
-      loglevel: 1.9.2
-      tslib: 2.8.1
-    transitivePeerDependencies:
-      - debug
-      - supports-color
-
-  uc.micro@2.1.0: {}
-
-  ufo@1.6.4: {}
-
-  uint8array-extras@1.5.0: {}
-
-  ultrahtml@1.6.0: {}
-
-  uncrypto@0.1.3: {}
-
-  undici-types@5.26.5: {}
-
-  undici-types@6.21.0: {}
-
-  undici-types@7.18.2: {}
-
-  undici@7.24.6: {}
-
-  unified@11.0.5:
-    dependencies:
-      '@types/unist': 3.0.3
-      bail: 2.0.2
-      devlop: 1.1.0
-      extend: 3.0.2
-      is-plain-obj: 4.1.0
-      trough: 2.2.0
-      vfile: 6.0.3
-
-  unifont@0.7.4:
-    dependencies:
-      css-tree: 3.2.1
-      ofetch: 1.5.1
-      ohash: 2.0.11
-
-  unist-util-filter@5.0.1:
-    dependencies:
-      '@types/unist': 3.0.3
-      unist-util-is: 6.0.1
-      unist-util-visit-parents: 6.0.2
-
-  unist-util-find-after@5.0.0:
-    dependencies:
-      '@types/unist': 3.0.3
-      unist-util-is: 6.0.1
-
-  unist-util-is@5.2.1:
-    dependencies:
-      '@types/unist': 2.0.11
-
-  unist-util-is@6.0.1:
-    dependencies:
-      '@types/unist': 3.0.3
-
-  unist-util-modify-children@4.0.0:
-    dependencies:
-      '@types/unist': 3.0.3
-      array-iterate: 2.0.1
-
-  unist-util-position-from-estree@2.0.0:
-    dependencies:
-      '@types/unist': 3.0.3
-
-  unist-util-position@5.0.0:
-    dependencies:
-      '@types/unist': 3.0.3
-
-  unist-util-remove-position@5.0.0:
-    dependencies:
-      '@types/unist': 3.0.3
-      unist-util-visit: 5.1.0
-
-  unist-util-stringify-position@4.0.0:
-    dependencies:
-      '@types/unist': 3.0.3
-
-  unist-util-visit-children@3.0.0:
-    dependencies:
-      '@types/unist': 3.0.3
-
-  unist-util-visit-parents@5.1.3:
-    dependencies:
-      '@types/unist': 2.0.11
-      unist-util-is: 5.2.1
-
-  unist-util-visit-parents@6.0.2:
-    dependencies:
-      '@types/unist': 3.0.3
-      unist-util-is: 6.0.1
-
-  unist-util-visit@4.1.2:
-    dependencies:
-      '@types/unist': 2.0.11
-      unist-util-is: 5.2.1
-      unist-util-visit-parents: 5.1.3
-
-  unist-util-visit@5.1.0:
-    dependencies:
-      '@types/unist': 3.0.3
-      unist-util-is: 6.0.1
-      unist-util-visit-parents: 6.0.2
-
-  unpipe@1.0.0: {}
-
-  unstorage@1.17.5(aws4fetch@1.0.20):
-    dependencies:
-      anymatch: 3.1.3
-      chokidar: 5.0.0
-      destr: 2.0.5
-      h3: 1.15.11
-      lru-cache: 11.5.1
-      node-fetch-native: 1.6.7
-      ofetch: 1.5.1
-      ufo: 1.6.4
-    optionalDependencies:
-      aws4fetch: 1.0.20
-
-  update-browserslist-db@1.2.3(browserslist@4.28.2):
-    dependencies:
-      browserslist: 4.28.2
-      escalade: 3.2.0
-      picocolors: 1.1.1
-
-  url@0.11.4:
-    dependencies:
-      punycode: 1.4.1
-      qs: 6.15.0
-
-  use-callback-ref@1.3.3(@types/react@19.2.17)(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-      tslib: 2.8.1
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  use-sidecar@1.1.3(@types/react@19.2.17)(react@19.2.7):
-    dependencies:
-      detect-node-es: 1.1.0
-      react: 19.2.7
-      tslib: 2.8.1
-    optionalDependencies:
-      '@types/react': 19.2.17
-
-  use-sync-external-store@1.6.0(react@19.2.7):
-    dependencies:
-      react: 19.2.7
-
-  usehooks-ts@3.1.1(react@19.2.7):
-    dependencies:
-      lodash.debounce: 4.0.8
-      react: 19.2.7
-
-  util-deprecate@1.0.2: {}
-
-  util@0.12.5:
-    dependencies:
-      inherits: 2.0.4
-      is-arguments: 1.2.0
-      is-generator-function: 1.1.2
-      is-typed-array: 1.1.15
-      which-typed-array: 1.1.20
-
-  uuid@10.0.0:
-    optional: true
-
-  uuid@11.1.1: {}
-
-  uuid@14.0.1: {}
-
-  vary@1.1.2: {}
-
-  vfile-location@5.0.3:
-    dependencies:
-      '@types/unist': 3.0.3
-      vfile: 6.0.3
-
-  vfile-message@4.0.3:
-    dependencies:
-      '@types/unist': 3.0.3
-      unist-util-stringify-position: 4.0.0
-
-  vfile@6.0.3:
-    dependencies:
-      '@types/unist': 3.0.3
-      vfile-message: 4.0.3
-
-  victory-vendor@36.9.2:
-    dependencies:
-      '@types/d3-array': 3.2.2
-      '@types/d3-ease': 3.0.2
-      '@types/d3-interpolate': 3.0.4
-      '@types/d3-scale': 4.0.9
-      '@types/d3-shape': 3.1.8
-      '@types/d3-time': 3.0.4
-      '@types/d3-timer': 3.0.2
-      d3-array: 3.2.4
-      d3-ease: 3.0.1
-      d3-interpolate: 3.0.1
-      d3-scale: 4.0.2
-      d3-shape: 3.2.0
-      d3-time: 3.1.0
-      d3-timer: 3.0.1
-
-  vite-node@2.1.9(@types/node@22.19.15):
-    dependencies:
-      cac: 6.7.14
-      debug: 4.4.3(supports-color@8.1.1)
-      es-module-lexer: 1.7.0
-      pathe: 1.1.2
-      vite: 5.4.21(@types/node@22.19.15)
-    transitivePeerDependencies:
-      - '@types/node'
-      - less
-      - lightningcss
-      - sass
-      - sass-embedded
-      - stylus
-      - sugarss
-      - supports-color
-      - terser
-
-  vite@5.4.21(@types/node@22.19.15):
-    dependencies:
-      esbuild: 0.21.5
-      postcss: 8.5.8
-      rollup: 4.60.1
-    optionalDependencies:
-      '@types/node': 22.19.15
-      fsevents: 2.3.3
-
-  vite@6.4.3(@types/node@24.13.2)(jiti@1.21.7)(tsx@4.21.0)(yaml@2.9.0):
-    dependencies:
-      esbuild: 0.25.12
-      fdir: 6.5.0(picomatch@4.0.4)
-      picomatch: 4.0.4
-      postcss: 8.5.8
-      rollup: 4.60.1
-      tinyglobby: 0.2.15
-    optionalDependencies:
-      '@types/node': 24.13.2
-      fsevents: 2.3.3
-      jiti: 1.21.7
-      tsx: 4.21.0
-      yaml: 2.9.0
-
-  vitefu@1.1.3(vite@6.4.3(@types/node@24.13.2)(jiti@1.21.7)(tsx@4.21.0)(yaml@2.9.0)):
-    optionalDependencies:
-      vite: 6.4.3(@types/node@24.13.2)(jiti@1.21.7)(tsx@4.21.0)(yaml@2.9.0)
-
-  vitest@2.1.9(@types/node@22.19.15):
-    dependencies:
-      '@vitest/expect': 2.1.9
-      '@vitest/mocker': 2.1.9(vite@5.4.21(@types/node@22.19.15))
-      '@vitest/pretty-format': 2.1.9
-      '@vitest/runner': 2.1.9
-      '@vitest/snapshot': 2.1.9
-      '@vitest/spy': 2.1.9
-      '@vitest/utils': 2.1.9
-      chai: 5.3.3
-      debug: 4.4.3(supports-color@8.1.1)
-      expect-type: 1.3.0
-      magic-string: 0.30.21
-      pathe: 1.1.2
-      std-env: 3.10.0
-      tinybench: 2.9.0
-      tinyexec: 0.3.2
-      tinypool: 1.1.1
-      tinyrainbow: 1.2.0
-      vite: 5.4.21(@types/node@22.19.15)
-      vite-node: 2.1.9(@types/node@22.19.15)
-      why-is-node-running: 2.3.0
-    optionalDependencies:
-      '@types/node': 22.19.15
-    transitivePeerDependencies:
-      - less
-      - lightningcss
-      - msw
-      - sass
-      - sass-embedded
-      - stylus
-      - sugarss
-      - supports-color
-      - terser
-
-  vm-browserify@1.1.2: {}
-
-  w3c-keyname@2.2.8: {}
-
-  web-namespaces@2.0.1: {}
-
-  web-streams-polyfill@3.3.3: {}
-
-  web-streams-polyfill@4.0.0-beta.3: {}
-
-  web-vitals@5.3.0: {}
-
-  webidl-conversions@3.0.1: {}
-
-  whatwg-url@5.0.0:
-    dependencies:
-      tr46: 0.0.3
-      webidl-conversions: 3.0.1
-
-  which-pm-runs@1.1.0: {}
-
-  which-typed-array@1.1.20:
-    dependencies:
-      available-typed-arrays: 1.0.7
-      call-bind: 1.0.8
-      call-bound: 1.0.4
-      for-each: 0.3.5
-      get-proto: 1.0.1
-      gopd: 1.2.0
-      has-tostringtag: 1.0.2
-
-  which@2.0.2:
-    dependencies:
-      isexe: 2.0.0
-
-  why-is-node-running@2.3.0:
-    dependencies:
-      siginfo: 2.0.0
-      stackback: 0.0.2
-
-  widest-line@3.1.0:
-    dependencies:
-      string-width: 4.2.3
-
-  widest-line@5.0.0:
-    dependencies:
-      string-width: 7.2.0
-
-  wordwrap@1.0.0: {}
-
-  wrap-ansi@7.0.0:
-    dependencies:
-      ansi-styles: 4.3.0
-      string-width: 4.2.3
-      strip-ansi: 6.0.1
-
-  wrap-ansi@8.1.0:
-    dependencies:
-      ansi-styles: 6.2.3
-      string-width: 5.1.2
-      strip-ansi: 7.2.0
-
-  wrap-ansi@9.0.2:
-    dependencies:
-      ansi-styles: 6.2.3
-      string-width: 7.2.0
-      strip-ansi: 7.2.0
-
-  wrappy@1.0.2: {}
-
-  ws@8.21.0(bufferutil@4.1.0):
-    optionalDependencies:
-      bufferutil: 4.1.0
-
-  xtend@4.0.2: {}
-
-  xxhash-wasm@1.1.0: {}
-
-  y18n@5.0.8: {}
-
-  yallist@3.1.1: {}
-
-  yaml@2.9.0: {}
-
-  yargs-parser@20.2.9: {}
-
-  yargs-parser@21.1.1: {}
-
-  yargs@16.2.2:
-    dependencies:
-      cliui: 7.0.4
-      escalade: 3.2.0
-      get-caller-file: 2.0.5
-      require-directory: 2.1.1
-      string-width: 4.2.3
-      y18n: 5.0.8
-      yargs-parser: 20.2.9
-
-  yargs@17.7.2:
-    dependencies:
-      cliui: 8.0.1
-      escalade: 3.2.0
-      get-caller-file: 2.0.5
-      require-directory: 2.1.1
-      string-width: 4.2.3
-      y18n: 5.0.8
-      yargs-parser: 21.1.1
-    optional: true
-
-  yauzl@2.10.0:
-    dependencies:
-      buffer-crc32: 0.2.13
-      fd-slicer: 1.1.0
-
-  yocto-queue@0.1.0: {}
-
-  yocto-queue@1.2.2: {}
-
-  yocto-spinner@0.2.3:
-    dependencies:
-      yoctocolors: 2.1.2
-
-  yoctocolors@2.1.2: {}
-
-  zip-stream@6.0.1:
-    dependencies:
-      archiver-utils: 5.0.2
-      compress-commons: 6.0.2
-      readable-stream: 4.7.0
-
-  zod-to-json-schema@3.25.2(zod@3.25.76):
-    dependencies:
-      zod: 3.25.76
-
-  zod-to-json-schema@3.25.2(zod@4.3.6):
-    dependencies:
-      zod: 4.3.6
-
-  zod-to-ts@1.2.0(typescript@5.9.3)(zod@3.25.76):
-    dependencies:
-      typescript: 5.9.3
-      zod: 3.25.76
-
-  zod@3.25.76: {}
-
-  zod@4.3.6: {}
-
-  zustand@5.0.14(@types/react@19.2.17)(react@19.2.7)(use-sync-external-store@1.6.0(react@19.2.7)):
-    optionalDependencies:
-      '@types/react': 19.2.17
-      react: 19.2.7
-      use-sync-external-store: 1.6.0(react@19.2.7)
-
-  zwitch@2.0.4: {}
diff --git a/pnpm-workspace.yaml b/pnpm-workspace.yaml
index 9bceee63f..6acd4a675 100644
--- a/pnpm-workspace.yaml
+++ b/pnpm-workspace.yaml
@@ -1,24 +1,4 @@
 packages:
-  - website
   - packages/*
-  - examples/*
-  - examples/docs/*
-  - registry/agent/*
-  - registry/software/*
-  - registry/tool/*
-  - scripts/publish
 
-ignoredBuiltDependencies:
-  - '@clerk/shared'
-  - '@parcel/watcher'
-  - browser-tabs-lock
-  - core-js
-
-onlyBuiltDependencies:
-  - '@biomejs/biome'
-  - better-sqlite3
-  - bun
-  - cbor-extract
-  - esbuild
-  - lefthook
-  - sharp
+onlyBuiltDependencies: []
diff --git a/registry/README.md b/registry/README.md
deleted file mode 100644
index 9ba8fcab6..000000000
--- a/registry/README.md
+++ /dev/null
@@ -1,131 +0,0 @@
-# secure-exec Registry
-
-Software packages for secure-exec VMs: WASM command binaries
-(`registry/software/*`), JavaScript agent adapters (`registry/agent/*`), and
-tool packages (`registry/tool/*`). Everything under the `@agentos-software/*`
-npm scope.
-
-## Consuming packages
-
-```bash
-npm install @agentos-software/coreutils @agentos-software/grep
-# or a meta-package for a complete set:
-npm install @agentos-software/common
-```
-
-Each package default-exports a descriptor whose `packageDir` points at the
-self-contained runtime dir the sidecar projects under
-`/opt/agentos/<name>/<version>` (meta-packages export an array of descriptors):
-
-```typescript
-import coreutils from "@agentos-software/coreutils";
-import grep from "@agentos-software/grep";
-
-export const software = [coreutils, grep];
-```
-
-## Package anatomy
-
-```
-registry/software/<pkg>/
-├── package.json           name, per-package semver version, build script
-├── agentos-package.json   manifest: runtime fields (name/agent/provides) +
-│                          staging fields (commands/aliases/stubs)
-├── src/index.ts           descriptor: packageDir -> ./package/ (dist/package)
-├── bin/                   staged command binaries (gitignored, built)
-└── dist/package/          the assembled runtime dir (shipped in the npm tarball):
-    ├── package.json       { name, version, bin: { <cmd>: "bin/<cmd>" } }
-    ├── agentos-package.json
-    └── bin/<cmd>          the binaries, copied verbatim
-```
-
-The whole lifecycle is owned by **`@rivet-dev/agentos-toolchain`**
-(`packages/agentos-toolchain`) — the same CLI 3rd-party repos use to build and
-publish their own agentOS packages (`npx @rivet-dev/agentos-toolchain`):
-
-- `stage --commands-dir <dir>` — populate `bin/` from a compiled commands
-  directory, per the `commands` / `aliases` / `stubs` lists in
-  `agentos-package.json`.
-- `build` — assemble the clean `dist/package/` runtime dir from `bin/`.
-- `pack` — build a self-contained node-closure package (JS agents).
-- `publish` — publish to npm; dist-tag `dev` by default, `latest` only with an
-  explicit `--latest`.
-
-## Building
-
-All recipes run from the repo root (see `justfile`):
-
-```bash
-just registry-native            # compile ALL native wasm command binaries (slow, once per checkout)
-just registry-native-cmd <name> # build ONE command binary, whatever its toolchain
-just registry-build             # stage + assemble every registry package
-just registry-build coreutils   # ... or just one
-just registry-status            # per-package state; --remote adds npm dist-tags
-just registry-test              # registry integration tests (registry/tests)
-```
-
-`registry-native-cmd` (= `make -C registry/native cmd/<name>`) is the uniform
-per-binary entry point; it dispatches to whichever toolchain owns the command:
-
-| kind | commands | what it runs |
-|---|---|---|
-| Rust | any `crates/commands/<name>` (sh, ls, rg, git, …) | `cargo build -p cmd-<name>` (build-std) + `wasm-opt` |
-| C | `zip unzip envsubst sqlite3 curl wget duckdb` | `make -C c sysroot build/<src>` + per-command install |
-| codex | `codex`, `codex-exec` | the codex fork build (needs the fork checkout) |
-| C | `vim` (pinned upstream clone + bridge in `c/vim/`) | `make -C c sysroot build/vim` + install |
-| external | `vix` | validates the hand-built binary is in the drop zone; errors with instructions otherwise |
-
-The native build (`registry/native`) compiles each `crates/commands/<name>`
-(cargo package `cmd-<name>`) to `wasm32-wasip1` with a patched std
-(`-Z build-std`, `patches/`), runs `wasm-opt -O3`, and drops the binaries in
-`registry/native/target/wasm32-wasip1/release/commands/`. Package builds then
-run `agentos-toolchain stage` (with `--if-missing skip`, so a checkout without
-the native build still assembles valid empty placeholders) followed by `tsc`
-and `agentos-toolchain build`.
-
-Within this repo, everything consumes the LOCAL builds by default: the registry
-packages are pnpm workspace members, so tests and examples resolve them via
-`workspace:*` — no publish needed for local development.
-
-Exceptions:
-- `software/codex/wasm/` is the install target of the codex fork's build
-  (`make -C registry/native codex`); `software/codex-cli` stages from it.
-- C-built commands (sqlite3, zip, unzip, wget, duckdb) need the patched
-  sysroot; `just registry-native-cmd <name>` builds it on demand. Without it
-  those packages stay empty placeholders.
-- `vim` builds from source: `just registry-native-cmd vim` clones the pinned
-  vim tag and compiles it against the patched sysroot + the termios/termcap
-  bridge in `registry/native/c/vim/` (its runtime tree is staged by the
-  package `scripts/stage-runtime.mjs` and applied via manifest `provides`).
-- `vix` is the one remaining external drop-zone binary (no source pipeline):
-  place the hand-built wasm at `registry/native/target/.../commands/vix`.
-
-## Publishing
-
-Packages **version independently** (per-package semver in each
-`package.json`). Publishing NEVER moves the `latest` dist-tag unless asked:
-
-```bash
-just registry-publish coreutils            # publish @agentos-software/coreutils under dist-tag `dev`
-just registry-publish coreutils my-branch  # ... under a custom tag
-just registry-publish coreutils latest     # DELIBERATE release: moves `latest`
-just registry-publish-all                  # every built software package, dist-tag `dev`
-```
-
-Bump the package's `version` in its `package.json` (commit it) before
-publishing. CI does not publish these packages (the publish workflow's package
-discovery skips `@agentos-software/*` except the manifest); the agent packages
-under `registry/agent/*` preview-publish via `.github/workflows/publish.yaml`
-under a branch dist-tag.
-
-agent-os consumes the published packages pinned per-package in its catalog
-(`just agentos-pkgs-status` there), and flips to these local checkouts with
-`just agentos-pkgs-local`.
-
-## Contributing
-
-See [CONTRIBUTING.md](CONTRIBUTING.md) for how to add new packages.
-
-## License
-
-Apache-2.0
diff --git a/registry/agent/claude/agentos-package.json b/registry/agent/claude/agentos-package.json
deleted file mode 100644
index 5a3cb7832..000000000
--- a/registry/agent/claude/agentos-package.json
+++ /dev/null
@@ -1,25 +0,0 @@
-{
-  "name": "claude",
-  "agent": {
-    "acpEntrypoint": "claude-sdk-acp",
-    "env": {
-      "CLAUDE_AGENT_SDK_CLIENT_APP": "@rivet-dev/agentos",
-      "CLAUDE_CODE_SIMPLE": "1",
-      "CLAUDE_CODE_FORCE_AGENT_OS_RIPGREP": "1",
-      "CLAUDE_CODE_DEFER_GROWTHBOOK_INIT": "1",
-      "CLAUDE_CODE_DISABLE_CWD_PERSIST": "1",
-      "CLAUDE_CODE_DISABLE_DEV_NULL_REDIRECT": "1",
-      "CLAUDE_CODE_NODE_SHELL_WRAPPER": "1",
-      "CLAUDE_CODE_DISABLE_STREAM_JSON_HOOK_EVENTS": "1",
-      "CLAUDE_CODE_SHELL": "/bin/sh",
-      "CLAUDE_CODE_SKIP_INITIAL_MESSAGES": "1",
-      "CLAUDE_CODE_SKIP_SANDBOX_INIT": "1",
-      "CLAUDE_CODE_SIMPLE_SHELL_EXEC": "1",
-      "CLAUDE_CODE_SWAP_STDIO": "0",
-      "CLAUDE_CODE_USE_PIPE_OUTPUT": "1",
-      "DISABLE_TELEMETRY": "1",
-      "SHELL": "/bin/sh",
-      "USE_BUILTIN_RIPGREP": "0"
-    }
-  }
-}
diff --git a/registry/agent/claude/package.json b/registry/agent/claude/package.json
deleted file mode 100644
index 44f2b2d3f..000000000
--- a/registry/agent/claude/package.json
+++ /dev/null
@@ -1,39 +0,0 @@
-{
-	"name": "@agentos-software/claude-code",
-	"version": "0.2.1",
-	"type": "module",
-	"license": "Apache-2.0",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"bin": {
-		"claude": "./dist/claude-cli.mjs",
-		"claude-sdk-acp": "./dist/adapter.js"
-	},
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js",
-			"default": "./dist/index.js"
-		}
-	},
-	"files": [
-		"dist",
-		"agentos-package.json"
-	],
-	"scripts": {
-		"build": "tsc && node ./scripts/build-patched-cli.mjs && rm -rf dist/package && agentos-toolchain pack . --out dist/package --agent claude-sdk-acp --prune-native",
-		"check-types": "tsc --noEmit",
-		"test": "pnpm build && node --test --test-force-exit tests/*.test.mjs"
-	},
-	"dependencies": {
-		"@agentclientprotocol/sdk": "^0.16.1",
-		"@anthropic-ai/claude-agent-sdk": "0.2.87",
-		"zod": "^4.1.11"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/registry/agent/claude/scripts/build-patched-cli.mjs b/registry/agent/claude/scripts/build-patched-cli.mjs
deleted file mode 100644
index 5ca689bc7..000000000
--- a/registry/agent/claude/scripts/build-patched-cli.mjs
+++ /dev/null
@@ -1,350 +0,0 @@
-#!/usr/bin/env node
-
-import { createHash } from "node:crypto";
-import { mkdirSync, readFileSync, writeFileSync } from "node:fs";
-import { createRequire } from "node:module";
-import { dirname, resolve as resolvePath } from "node:path";
-
-const require = createRequire(import.meta.url);
-const sdkPath = require.resolve("@anthropic-ai/claude-agent-sdk");
-const cliPath = resolvePath(dirname(sdkPath), "cli.js");
-const distDir = resolvePath(import.meta.dirname, "..", "dist");
-const manifestPath = resolvePath(distDir, "claude-cli-patched.json");
-const sdkManifestPath = resolvePath(distDir, "claude-sdk-patched.json");
-
-const source = readFileSync(cliPath, "utf-8");
-const sdkSource = readFileSync(sdkPath, "utf-8");
-const patches = [
-	{
-		name: "inject stdout normalization helpers",
-		needle: 'import{createRequire as H15}from"node:module";',
-		replacement:
-			'import{createRequire as H15}from"node:module";if(process.env.CLAUDE_CODE_TRACE_STARTUP==="1")process.stderr.write("[agentos-claude] bootstrap_loaded\\n");function __agentOsTrimOutput(q){if(typeof q==="string")return q.trim();if(q==null)return"";if(typeof q.trim==="function")return q.trim();if(typeof Buffer!=="undefined"&&Buffer.isBuffer(q))return q.toString("utf8").trim();if(q instanceof Uint8Array)return Buffer.from(q).toString("utf8").trim();return String(q).trim()}function __agentOsTrimStdout(q){return __agentOsTrimOutput(q?.stdout)}function __agentOsTrimStderr(q){return __agentOsTrimOutput(q?.stderr)}const __agentOsOriginalRealpath=globalThis["Nkq"];async function __agentOsRealpath(q){return typeof __agentOsOriginalRealpath==="function"?__agentOsOriginalRealpath(q):q}function __agentOsEnsureAsyncIterable(q){if(q&&typeof q[Symbol.asyncIterator]==="function")return q;if(q&&typeof q[Symbol.iterator]==="function")return(async function*(){for(let K of q)yield K})();if(q&&typeof q.on==="function"){return{[Symbol.asyncIterator](){let K=[],_=[],Y=!1,z=null;let A=(X)=>{K.push(X);O()};let O=()=>{for(;_.length>0;){if(z){_.shift().reject(z);continue}if(K.length>0){_.shift().resolve({done:!1,value:K.shift()});continue}if(Y){_.shift().resolve({done:!0,value:void 0});continue}break}};let $=()=>{Y=!0;w()};let w=()=>{q.off?.("data",A);q.off?.("end",$);q.off?.("close",$);q.off?.("error",j)};let j=(X)=>{z=X,Y=!0,w(),O()};q.on("data",A);q.on("end",$);q.on("close",$);q.on("error",j);q.resume?.();return{next(){if(z)return Promise.reject(z);if(K.length>0)return Promise.resolve({done:!1,value:K.shift()});if(Y)return Promise.resolve({done:!0,value:void 0});return new Promise((X,M)=>{_.push({resolve:X,reject:M})})},return(){Y=!0,w(),O();return Promise.resolve({done:!0,value:void 0})},[Symbol.asyncIterator](){return this}}}}}throw new TypeError("expected input to be async iterable")}',
-	},
-	{
-		name: "ignore startup exit code in headless mode",
-		needle:
-			'if(process.exitCode!==void 0){k("Graceful shutdown initiated, skipping further initialization");return}',
-		replacement:
-			'if(process.exitCode!==void 0){if(process.env.CLAUDE_CODE_IGNORE_STARTUP_EXIT_CODE!=="1"){k("Graceful shutdown initiated, skipping further initialization");return}process.stderr.write("[agentos-claude] ignoring_startup_exit_code "+String(process.exitCode)+"\\n");process.exitCode=void 0}',
-	},
-	{
-		name: "guard EPIPE destroy calls for Agent OS stdio",
-		needle:
-			'function ow7(q){return(K)=>{if(K.code==="EPIPE")q.destroy()}}',
-		replacement:
-			'function ow7(q){return(K)=>{if(K.code==="EPIPE")typeof q.destroy=="function"?q.destroy():typeof q.end=="function"&&q.end()}}',
-	},
-	{
-		name: "guard buffered stream destroy helper",
-		needle:
-			'Mr8=async(q,K)=>{if(!q||K===void 0)return;await Kz5(0),q.destroy();try{return await K}catch(_){return _.bufferedData}}',
-		replacement:
-			'Mr8=async(q,K)=>{if(!q||K===void 0)return;await Kz5(0),typeof q.destroy=="function"&&q.destroy();try{return await K}catch(_){return _.bufferedData}}',
-	},
-	{
-		name: "force Agent OS ripgrep when requested",
-		needle:
-			'KG8=Y1(()=>{if(V_(process.env.USE_BUILTIN_RIPGREP)){let{cmd:Y}=x_8("rg",[]);if(Y!=="rg")return{mode:"system",command:"rg",args:[]}}if(lw())return{mode:"embedded",command:process.execPath,args:["--no-config"],argv0:"rg"};let K=Z16.resolve(dy_,"vendor","ripgrep");return{mode:"builtin",command:process.platform==="win32"?Z16.resolve(K,`${process.arch}-win32`,"rg.exe"):Z16.resolve(K,`${process.arch}-${process.platform}`,"rg"),args:[]}});',
-		replacement:
-			'KG8=Y1(()=>{if(process.env.CLAUDE_CODE_FORCE_AGENT_OS_RIPGREP==="1")return{mode:"system",command:"rg",args:[]};if(V_(process.env.USE_BUILTIN_RIPGREP)){let{cmd:Y}=x_8("rg",[]);if(Y!=="rg")return{mode:"system",command:"rg",args:[]}}if(lw())return{mode:"embedded",command:process.execPath,args:["--no-config"],argv0:"rg"};let K=Z16.resolve(dy_,"vendor","ripgrep");return{mode:"builtin",command:process.platform==="win32"?Z16.resolve(K,`${process.arch}-win32`,"rg.exe"):Z16.resolve(K,`${process.arch}-${process.platform}`,"rg"),args:[]}});',
-	},
-	{
-		name: "guard missing events.setMaxListeners export",
-		needle:
-			'function C3(q=Xi_){let K=new AbortController;return Ji_(q,K.signal),K}',
-		replacement:
-			'function C3(q=Xi_){let K=new AbortController;return typeof Ji_=="function"&&Ji_(q,K.signal),K}',
-	},
-	{
-		name: "fix shell snapshot login shell argument ordering",
-		needle: 'O9Y(q,["-c","-l",j],{env:{',
-		replacement: 'O9Y(q,["-l","-c",j],{env:{',
-	},
-	{
-		name: "fix bash provider spawn argument ordering",
-		needle:
-			'return["-c",...O?[]:["-l"],A]},async getEnvironmentOverrides(A){',
-		replacement:
-			'return O?["-c",A]:["-l","-c",A]},async getEnvironmentOverrides(A){',
-	},
-	{
-		name: "force pipe-mode bash output under Agent OS",
-		needle:
-			'L=await J.getEnvironmentOverrides(q),S=!!j,h=JL("local_bash"),x=new iA(h,A??null,!S);',
-		replacement:
-			'L=await J.getEnvironmentOverrides(q),S=!!j||process.env.CLAUDE_CODE_USE_PIPE_OUTPUT==="1",h=JL("local_bash"),x=new iA(h,A??null,!S);',
-	},
-	{
-		name: "disable /dev/null shell redirection under Agent OS",
-		needle: 'if(K)return Gq([q,"<","/dev/null"]);return Gq([q])',
-		replacement:
-			'if(process.env.CLAUDE_CODE_DISABLE_DEV_NULL_REDIRECT==="1")return Gq([q]);if(K)return Gq([q,"<","/dev/null"]);return Gq([q])',
-	},
-	{
-		name: "disable cwd persistence checkpoint under Agent OS",
-		needle: 'let Z=await lNq();if(Z)W.push(Z);let f=v9Y(q);if(f)W.push(f);W.push(`eval ${P}`),W.push(`pwd -P >| ${Gq([J])}`);let G=W.join(" && ");',
-		replacement:
-			'let Z=await lNq();if(Z)W.push(Z);let f=v9Y(q);if(f)W.push(f);W.push(`eval ${P}`),process.env.CLAUDE_CODE_DISABLE_CWD_PERSIST!=="1"&&W.push(`pwd -P >| ${Gq([J])}`);let G=W.join(" && ");',
-	},
-	{
-		name: "use direct shell command execution under Agent OS",
-		needle:
-			'let G=W.join(" && ");if(process.env.CLAUDE_CODE_SHELL_PREFIX)G=rN8(process.env.CLAUDE_CODE_SHELL_PREFIX,G);',
-		replacement:
-			'let G=W.join(" && ");if(process.env.CLAUDE_CODE_SIMPLE_SHELL_EXEC==="1")G=A;if(process.env.CLAUDE_CODE_SHELL_PREFIX)G=rN8(process.env.CLAUDE_CODE_SHELL_PREFIX,G);',
-	},
-	{
-		name: "trace bash shell spawn configuration",
-		needle:
-			'let V=G?"/bin/sh":f,N=G?["-c",W]:J.getSpawnArgs(W),L=await J.getEnvironmentOverrides(q),S=!!j||process.env.CLAUDE_CODE_USE_PIPE_OUTPUT==="1",h=JL("local_bash"),x=new iA(h,A??null,!S);',
-		replacement:
-			'let V=G?"/bin/sh":f,N=G?["-c",W]:J.getSpawnArgs(W),L=await J.getEnvironmentOverrides(q),S=!!j||process.env.CLAUDE_CODE_USE_PIPE_OUTPUT==="1";if(!G&&process.env.CLAUDE_CODE_FORCE_SH_FOR_BASH==="1")V="/bin/sh",N=["-c",W];if(process.env.CLAUDE_CODE_TRACE_BASH_SHELL==="1")process.stderr.write("[agentos-claude] bash_spawn_config "+JSON.stringify({shell:V,args:N,cwd:Z,command:W,envOverrides:L,pipeOutput:S})+"\\n");let h=JL("local_bash"),x=new iA(h,A??null,!S);',
-	},
-	{
-		name: "trace bash shell child process output",
-		needle:
-			'try{let p=h9Y(V,N,{env:{...Vu(),SHELL:_==="bash"?f:void 0,GIT_EDITOR:"true",CLAUDECODE:"1",...L,...{}},cwd:Z,stdio:S?["pipe","pipe","pipe"]:["pipe",I?.fd,I?.fd],detached:J.detached,windowsHide:!0}),B=aN8(p,K,H,x,w);',
-		replacement:
-			'try{let BA=Vu(),BB=Object.entries(BA).filter(([Q,i])=>typeof i!=="string"&&i!==void 0),BC=Object.fromEntries(Object.entries(BA).filter(([Q,i])=>typeof i==="string")),BD={...BC,SHELL:_==="bash"?f:void 0,GIT_EDITOR:"true",CLAUDECODE:"1",...L,...{}};if(process.env.CLAUDE_CODE_TRACE_DIRECT_XU==="1"){let Q=h9Y("xu",["hello-agent-os"],{env:BD,cwd:Z,stdio:["pipe","pipe","pipe"],detached:!1,windowsHide:!0}),i="",R="";Q.stdout?.on("data",(k)=>i+=String(k)),Q.stderr?.on("data",(k)=>R+=String(k));let se=await new Promise((k)=>Q.on("close",(ve,ye)=>k({code:ve,signal:ye})));process.stderr.write("[agentos-claude] direct_xu "+JSON.stringify({stdout:i,stderr:R,...se})+"\\n")}let BE=V,BF=N,BG=BD;if(process.env.CLAUDE_CODE_NODE_SHELL_WRAPPER==="1"){let Q=\'const{spawn}=require("child_process");const cmd=process.env.CLAUDE_CODE_NODE_SHELL_COMMAND||"";const child=spawn(cmd,[],{cwd:process.env.CLAUDE_CODE_NODE_SHELL_CWD||process.cwd(),env:process.env,shell:true,stdio:["ignore","pipe","pipe"],windowsHide:true});child.stdout?.on("data",(c)=>process.stdout.write(c));child.stderr?.on("data",(c)=>process.stderr.write(c));child.on("close",(code)=>process.exit(typeof code==="number"?code:1));child.on("error",(error)=>{process.stderr.write(String(error?.stack??error)+"\\\\n");process.exit(126)});\';BE=process.execPath||"node",BF=["-e",Q],BG={...BD,CLAUDE_CODE_NODE_SHELL_COMMAND:W,CLAUDE_CODE_NODE_SHELL_CWD:Z};if(process.env.CLAUDE_CODE_TRACE_BASH_SHELL==="1")process.stderr.write("[agentos-claude] bash_node_wrapper "+JSON.stringify({command:W,cwd:Z,exec:BE})+"\\n")}let p=h9Y(BE,BF,{env:BG,cwd:Z,stdio:S?["pipe","pipe","pipe"]:["pipe",I?.fd,I?.fd],detached:J.detached,windowsHide:!0});if(process.env.CLAUDE_CODE_TRACE_BASH_SHELL==="1")(BB.length>0&&process.stderr.write("[agentos-claude] bash_non_string_env "+JSON.stringify(BB.map(([Q,i])=>[Q,typeof i]))+"\\n"),process.stderr.write("[agentos-claude] bash_spawned "+JSON.stringify({pid:p.pid,shell:BE,args:BF})+"\\n"),p.stdout?.on("data",(Q)=>process.stderr.write("[agentos-claude] bash_stdout "+JSON.stringify(String(Q))+"\\n")),p.stderr?.on("data",(Q)=>process.stderr.write("[agentos-claude] bash_stderr "+JSON.stringify(String(Q))+"\\n")),p.on("exit",(Q,i)=>process.stderr.write("[agentos-claude] bash_exit "+JSON.stringify({code:Q,signal:i})+"\\n")));let B=aN8(p,K,H,x,w);',
-	},
-	{
-		name: "skip special CLI entrypoints under Agent OS",
-		needle:
-			'if(K("cli_entry"),process.argv[2]==="--claude-in-chrome-mcp"){',
-		replacement:
-			'let __agentOsArg2=process.argv[2];if(process.env.CLAUDE_CODE_TRACE_STARTUP==="1")process.stderr.write("[agentos-claude] cli_argv "+JSON.stringify(process.argv)+"\\n");if(K("cli_entry"),process.env.CLAUDE_CODE_SKIP_SPECIAL_ENTRYPOINTS==="1"&&(__agentOsArg2==="--claude-in-chrome-mcp"||__agentOsArg2==="--chrome-native-host"||__agentOsArg2==="--computer-use-mcp"))process.stderr.write("[agentos-claude] skip_special_entrypoint "+String(__agentOsArg2)+"\\n");else if(process.argv[2]==="--claude-in-chrome-mcp"){',
-	},
-	{
-		name: "trace message loop startup",
-		needle: 'n8("info","cli_message_loop_started");',
-		replacement:
-			'process.stderr.write("[agentos-claude] cli_message_loop_started\\n"),n8("info","cli_message_loop_started");',
-	},
-	{
-		name: "trace stdin message parsing",
-		needle: 'if(z)n8("info","cli_stdin_message_parsed",{type:z.type}),yield z',
-		replacement:
-			'if(z)(process.stderr.write("[agentos-claude] cli_stdin_message_parsed "+z.type+"\\n"),n8("info","cli_stdin_message_parsed",{type:z.type}),yield z)',
-	},
-	{
-		name: "coerce structured IO input streams into async iterables",
-		needle: "yield*K();for await(let _ of this.input)q+=_,yield*K();if(q){",
-		replacement:
-			"yield*K();for await(let _ of __agentOsEnsureAsyncIterable(this.input))q+=_,yield*K();if(q){",
-	},
-	{
-		name: "trace initialize request handling",
-		needle:
-			'if(await Xcz(h6.request,h6.request_id,L6,f,_,I,q,!!H.enableAuthStatus,H,j,$),h6.request.promptSuggestions)',
-		replacement:
-			'if(process.stderr.write("[agentos-claude] initialize_request_start\\n"),await Xcz(h6.request,h6.request_id,L6,f,_,I,q,!!H.enableAuthStatus,H,j,$),process.stderr.write("[agentos-claude] initialize_request_done\\n"),h6.request.promptSuggestions)',
-	},
-	{
-		name: "trace pre-runHeadlessStreaming bootstrap",
-		needle:
-			'aw7(),oJ("after_loadInitialMessages"),await jw8(),oJ("after_modelStrings");',
-		replacement:
-			'aw7(),oJ("after_loadInitialMessages"),process.stderr.write("[agentos-claude] before_ensureModelStrings\\n"),await jw8(),process.stderr.write("[agentos-claude] after_ensureModelStrings\\n"),oJ("after_modelStrings");',
-	},
-	{
-		name: "trace before runHeadlessStreaming consumption",
-		needle: 'oJ("before_runHeadlessStreaming");',
-		replacement:
-			'process.stderr.write("[agentos-claude] before_runHeadlessStreaming\\n"),oJ("before_runHeadlessStreaming");',
-	},
-	{
-		name: "trace runHeadless entry",
-		needle: 'oJ("runHeadless_entry"),',
-		replacement:
-			'process.stderr.write("[agentos-claude] runHeadless_entry\\n"),oJ("runHeadless_entry"),',
-	},
-	{
-		name: "trace after grove check",
-		needle: 'oJ("after_grove_check"),',
-		replacement:
-			'process.stderr.write("[agentos-claude] after_grove_check\\n"),oJ("after_grove_check"),',
-	},
-	{
-		name: "defer growthbook init when requested",
-		needle:
-			'process.stderr.write("[agentos-claude] after_grove_check\\n"),oJ("after_grove_check"),Zi(),$.resumeSessionAt&&!$.resume){',
-		replacement:
-			'process.stderr.write("[agentos-claude] after_grove_check\\n"),oJ("after_grove_check"),process.env.CLAUDE_CODE_DEFER_GROWTHBOOK_INIT==="1"?queueMicrotask(()=>{void Zi()}):Zi(),$.resumeSessionAt&&!$.resume){',
-	},
-	{
-		name: "trace structured IO and stream-json guard setup",
-		needle:
-			'let w=Wcz(q,$);if($.outputFormat==="stream-json")VeK();let j=w7.getSandboxUnavailableReason();',
-		replacement:
-			'let w=Wcz(q,$);process.stderr.write("[agentos-claude] after_structured_io\\n");if($.outputFormat==="stream-json")(process.stderr.write("[agentos-claude] before_stream_json_guard\\n"),VeK(),process.stderr.write("[agentos-claude] after_stream_json_guard\\n"));let j=w7.getSandboxUnavailableReason();process.stderr.write("[agentos-claude] after_sandbox_reason\\n");',
-	},
-	{
-		name: "allow skipping Claude sandbox initialization",
-		needle:
-			'else if(w7.isSandboxingEnabled())try{await w7.initialize(w.createSandboxAskCallback())}catch(x){process.stderr.write(`\n❌ Sandbox Error: ${i6(x)}\n`),iK(1,"other");return}',
-		replacement:
-			'else if(w7.isSandboxingEnabled())if(process.env.CLAUDE_CODE_SKIP_SANDBOX_INIT==="1")process.stderr.write("[agentos-claude] sandbox_init_skipped\\n");else try{process.stderr.write("[agentos-claude] before_sandbox_init\\n");await w7.initialize(w.createSandboxAskCallback());process.stderr.write("[agentos-claude] after_sandbox_init\\n")}catch(x){process.stderr.write(`\n❌ Sandbox Error: ${i6(x)}\n`),iK(1,"other");return}',
-	},
-	{
-		name: "gate stream-json hook event forwarding behind opt-out env var",
-		needle: 'if($.outputFormat==="stream-json"&&$.verbose)JMK((x)=>{',
-		replacement:
-			'if($.outputFormat==="stream-json"&&$.verbose&&process.env.AGENT_OS_CLAUDE_DISABLE_HOOK_EVENTS!=="1")JMK((x)=>{',
-	},
-	{
-		name: "trace before loadInitialMessages",
-		needle: 'if($.setupTrigger)await cI8($.setupTrigger);oJ("before_loadInitialMessages");',
-		replacement:
-			'process.stderr.write("[agentos-claude] after_hook_event_registration\\n");if($.setupTrigger)(process.stderr.write("[agentos-claude] before_setup_hooks\\n"),await cI8($.setupTrigger),process.stderr.write("[agentos-claude] after_setup_hooks\\n"));process.stderr.write("[agentos-claude] before_loadInitialMessages\\n"),oJ("before_loadInitialMessages");',
-	},
-	{
-		name: "trace after loadInitialMessages returns",
-		needle:
-			'let H=K(),{messages:J,turnInterruptionState:X,agentSetting:M}=await Pcz(_,{continue:$.continue,teleport:$.teleport,resume:$.resume,resumeSessionAt:$.resumeSessionAt,forkSession:$.forkSession,outputFormat:$.outputFormat,sessionStartHooksPromise:$.sessionStartHooksPromise,restoredWorkerState:w.restoredWorkerState}),D=cYK();',
-		replacement:
-			'let H=K(),{messages:J,turnInterruptionState:X,agentSetting:M}=process.env.CLAUDE_CODE_SKIP_INITIAL_MESSAGES==="1"?(process.stderr.write("[agentos-claude] skip_initial_messages\\n"),{messages:[],turnInterruptionState:void 0,agentSetting:void 0}):await Pcz(_,{continue:$.continue,teleport:$.teleport,resume:$.resume,resumeSessionAt:$.resumeSessionAt,forkSession:$.forkSession,outputFormat:$.outputFormat,sessionStartHooksPromise:$.sessionStartHooksPromise,restoredWorkerState:w.restoredWorkerState}),D=(process.stderr.write("[agentos-claude] after_loadInitialMessages_return messages="+J.length+" exit="+String(process.exitCode)+" agent="+String(M)+"\\n"),cYK());',
-	},
-	{
-		name: "trace prepend initial user message",
-		needle: "if(D)w.prependUserMessage(D);",
-		replacement:
-			'if(D)(process.stderr.write("[agentos-claude] prepend_initial_user_message\\n"),w.prependUserMessage(D));',
-	},
-	{
-		name: "trace after agent restore block",
-		needle:
-			'if(!$.agent&&!NB()&&M){let{agentDefinition:x}=KJ6(M,void 0,{activeAgents:O,allAgents:O});if(x){if(_((I)=>({...I,agent:x.agentType})),!$.systemPrompt&&!Pw(x)){let I=x.getSystemPrompt();if(I)$.systemPrompt=I}$78(x.agentType)}}if(J.length===0&&process.exitCode!==void 0)return;',
-		replacement:
-			'if(!$.agent&&!NB()&&M){let{agentDefinition:x}=KJ6(M,void 0,{activeAgents:O,allAgents:O});if(x){if(_((I)=>({...I,agent:x.agentType})),!$.systemPrompt&&!Pw(x)){let I=x.getSystemPrompt();if(I)$.systemPrompt=I}$78(x.agentType)}}process.stderr.write("[agentos-claude] after_agent_restore_block\\n");if(J.length===0&&process.exitCode!==void 0){if(process.env.CLAUDE_CODE_IGNORE_STARTUP_EXIT_CODE==="1"){process.stderr.write("[agentos-claude] ignoring_post_initial_exit_code "+String(process.exitCode)+"\\n");process.exitCode=void 0}else return;}',
-	},
-	{
-		name: "trace before tool filtering",
-		needle: 'let Z=L68(H.mcp.tools,H.toolPermissionContext),',
-		replacement:
-			'process.stderr.write("[agentos-claude] before_tool_filtering\\n");let Z=L68(H.mcp.tools,H.toolPermissionContext),',
-	},
-	{
-		name: "trace after permission handler setup",
-		needle:
-			'if($.permissionPromptToolName)f=f.filter((x)=>!L_(x,$.permissionPromptToolName));aw7(),',
-		replacement:
-			'if($.permissionPromptToolName)f=f.filter((x)=>!L_(x,$.permissionPromptToolName));process.stderr.write("[agentos-claude] after_permission_handler_setup\\n"),aw7(),',
-	},
-	{
-		name: "trace after registerProcessOutputErrorHandlers",
-		needle: 'aw7(),oJ("after_loadInitialMessages"),',
-		replacement:
-			'aw7(),process.stderr.write("[agentos-claude] after_registerProcessOutputErrorHandlers\\n"),oJ("after_loadInitialMessages"),',
-	},
-	{
-		name: "trace before connectMcp",
-		needle: 'xq("before_connectMcp"),await z5(H3,"regular"),',
-		replacement:
-			'process.stderr.write("[agentos-claude] before_connectMcp\\n"),xq("before_connectMcp"),await z5(H3,"regular"),',
-	},
-	{
-		name: "trace after connectMcp",
-		needle: 'xq("after_connectMcp"),await j6.then(',
-		replacement:
-			'process.stderr.write("[agentos-claude] after_connectMcp\\n"),xq("after_connectMcp"),await j6.then(',
-	},
-	{
-		name: "trace after claudeai MCP connect",
-		needle: 'xq("after_connectMcp_claudeai"),',
-		replacement:
-			'process.stderr.write("[agentos-claude] after_connectMcp_claudeai\\n"),xq("after_connectMcp_claudeai"),',
-	},
-	{
-		name: "trace before print import",
-		needle: 'S65(),xq("before_print_import");',
-		replacement:
-			'S65(),process.stderr.write("[agentos-claude] before_print_import\\n"),xq("before_print_import");',
-	},
-	{
-		name: "trace after print import",
-		needle: 'xq("after_print_import"),OK(',
-		replacement:
-			'process.stderr.write("[agentos-claude] after_print_import\\n"),xq("after_print_import"),OK(',
-	},
-	{
-		name: "trace early input capture and main import",
-		needle:
-			'if(q.includes("--bare"))process.env.CLAUDE_CODE_SIMPLE="1";let{startCapturingEarlyInput:Y}=await Promise.resolve().then(() => (Jd6(),Dn4));Y(),K("cli_before_main_import");let{main:z}=await Promise.resolve().then(() => (eY7(),C65));K("cli_after_main_import"),await z(),K("cli_after_main_complete")',
-		replacement:
-			'if(q.includes("--bare"))process.env.CLAUDE_CODE_SIMPLE="1";process.stderr.write("[agentos-claude] before_early_input_import\\n");let{startCapturingEarlyInput:Y}=await Promise.resolve().then(() => (Jd6(),Dn4));process.stderr.write("[agentos-claude] after_early_input_import\\n");if(process.env.CLAUDE_CODE_SKIP_EARLY_INPUT_CAPTURE==="1")process.stderr.write("[agentos-claude] skip_early_input_capture\\n");else{process.stderr.write("[agentos-claude] before_early_input_start\\n");Y();process.stderr.write("[agentos-claude] after_early_input_start\\n")}K("cli_before_main_import");process.stderr.write("[agentos-claude] before_main_import\\n");let{main:z}=await Promise.resolve().then(() => (eY7(),C65));process.stderr.write("[agentos-claude] after_main_import\\n");K("cli_after_main_import"),await z(),K("cli_after_main_complete")',
-	},
-];
-
-let patched = source;
-for (const patch of patches) {
-	if (!patched.includes(patch.needle)) {
-		throw new Error(`Could not find Claude CLI patch target: ${patch.name}`);
-	}
-	patched = patched.replace(patch.needle, patch.replacement);
-}
-
-patched = patched.replace(
-	/\b([A-Za-z_$][\w$]*)\.stdout\.trim\(\)/g,
-	"__agentOsTrimStdout($1)",
-);
-patched = patched.replace(
-	/\b([A-Za-z_$][\w$]*)\.stderr\.trim\(\)/g,
-	"__agentOsTrimStderr($1)",
-);
-patched = patched.replace(/\bNkq\(/g, "__agentOsRealpath(");
-
-const streamJsonHookGuard =
-	'if($.outputFormat==="stream-json"&&$.verbose&&process.env.AGENT_OS_CLAUDE_DISABLE_HOOK_EVENTS!=="1")JMK((x)=>{';
-if (!patched.includes(streamJsonHookGuard)) {
-	throw new Error(
-		"Patched Claude CLI is missing the AGENT_OS_CLAUDE_DISABLE_HOOK_EVENTS guard",
-	);
-}
-if (patched.includes('if($.outputFormat==="stream-json"&&$.verbose&&false)JMK((x)=>{')) {
-	throw new Error(
-		"Patched Claude CLI still contains the disabled stream-json hook-event kill-switch",
-	);
-}
-
-const sdkNeedle =
-	'function y1($=AL){let X=new AbortController;return ML($,X.signal),X}';
-const sdkReplacement =
-	'function y1($=AL){let X=new AbortController;return typeof ML==="function"&&ML($,X.signal),X}';
-const patchedSdk = sdkSource.includes(sdkNeedle)
-	? sdkSource.replace(sdkNeedle, sdkReplacement)
-	: sdkSource;
-
-mkdirSync(distDir, { recursive: true });
-const hash = createHash("sha256").update(patched).digest("hex").slice(0, 16);
-const fileName = `claude-cli-patched-${hash}.mjs`;
-const outputPath = resolvePath(distDir, fileName);
-writeFileSync(outputPath, patched, "utf-8");
-
-const sdkHash = createHash("sha256")
-	.update(patchedSdk)
-	.digest("hex")
-	.slice(0, 16);
-const sdkFileName = `claude-sdk-patched-${sdkHash}.mjs`;
-const sdkOutputPath = resolvePath(distDir, sdkFileName);
-writeFileSync(sdkOutputPath, patchedSdk, "utf-8");
-
-// Stable `claude` CLI entry for the package bin map (the patched CLI file is
-// content-hashed, so the bin target is this generated one-line import shim).
-writeFileSync(
-	resolvePath(distDir, "claude-cli.mjs"),
-	`#!/usr/bin/env node\nimport("./${fileName}");\n`,
-	"utf-8",
-);
-
-writeFileSync(
-	manifestPath,
-	JSON.stringify({ entry: `./${fileName}` }, null, 2) + "\n",
-	"utf-8",
-);
-writeFileSync(
-	sdkManifestPath,
-	JSON.stringify({ entry: `./${sdkFileName}` }, null, 2) + "\n",
-	"utf-8",
-);
-process.stdout.write(`Wrote ${outputPath}\n`);
diff --git a/registry/agent/claude/src/adapter.ts b/registry/agent/claude/src/adapter.ts
deleted file mode 100644
index 99e87d2b8..000000000
--- a/registry/agent/claude/src/adapter.ts
+++ /dev/null
@@ -1,1321 +0,0 @@
-#!/usr/bin/env node
-
-import {
-	type Agent,
-	AgentSideConnection,
-	type AuthenticateRequest,
-	type AuthenticateResponse,
-	type CancelNotification,
-	type InitializeRequest,
-	type InitializeResponse,
-	type NewSessionRequest,
-	type NewSessionResponse,
-	type PromptRequest,
-	type PromptResponse,
-	type RequestPermissionResponse,
-	type SessionUpdate,
-	type SetSessionModeRequest,
-	type SetSessionModeResponse,
-	ndJsonStream,
-} from "@agentclientprotocol/sdk";
-import {
-	type CanUseTool,
-	type McpServerConfig,
-	type PermissionMode,
-	type PermissionResult,
-	type PermissionUpdate,
-	type Query,
-	type SDKUserMessage,
-} from "@anthropic-ai/claude-agent-sdk";
-import { createHash, randomUUID } from "node:crypto";
-import {
-	appendFileSync,
-	existsSync,
-	mkdirSync,
-	writeFileSync,
-} from "node:fs";
-import { spawn } from "node:child_process";
-import { createRequire } from "node:module";
-import { tmpdir } from "node:os";
-import { dirname, isAbsolute, resolve as resolvePath } from "node:path";
-import { PassThrough } from "node:stream";
-import { fileURLToPath } from "node:url";
-import { resolveClaudeCliPath, resolveClaudeSdkPath } from "./patched-cli.js";
-
-type PromptPart = { type?: string; text?: string };
-type ClaudeSdkRuntime = Awaited<typeof claudeSdkRuntimePromise>;
-type QueryFactory = ClaudeSdkRuntime["query"];
-
-const ACP_MODES: PermissionMode[] = [
-	"default",
-	"acceptEdits",
-	"bypassPermissions",
-	"plan",
-	"dontAsk",
-];
-
-let appendSystemPrompt: string | undefined;
-const argv = process.argv.slice(2);
-for (let i = 0; i < argv.length; i++) {
-	if (argv[i] === "--append-system-prompt" && i + 1 < argv.length) {
-		appendSystemPrompt = argv[i + 1];
-		i++;
-	}
-}
-
-const claudeSdkRuntimePromise = loadPatchedClaudeSdkRuntime();
-const traceAdapterMessages =
-	process.env.CLAUDE_CODE_TRACE_ADAPTER_MESSAGES === "1";
-const traceFile = process.env.CLAUDE_CODE_TRACE_FILE;
-
-function traceAdapter(message: string): void {
-	if (!traceAdapterMessages) return;
-	process.stderr.write(`[agentos-claude] ${message}\n`);
-	if (traceFile) {
-		appendFileSync(traceFile, `[agentos-claude] ${message}\n`);
-	}
-}
-
-async function loadPatchedClaudeSdkRuntime(): Promise<
-	{
-		cliPath: string;
-		query: typeof import("@anthropic-ai/claude-agent-sdk").query;
-	}
-> {
-	const require = createRequire(import.meta.url);
-	const sdkPath = require.resolve("@anthropic-ai/claude-agent-sdk");
-	const packageDir = resolvePath(dirname(fileURLToPath(import.meta.url)), "..");
-	const cliPath = resolveClaudeCliPath({ packageDir, sdkPath });
-	const runtime = await import(resolveClaudeSdkPath({ packageDir, sdkPath }));
-	return {
-		cliPath,
-		query: runtime.query,
-	};
-}
-
-function ensureClaudeCliWrapper(originalCliPath: string): string {
-	const cacheDir = resolvePath(tmpdir(), "agentos-claude-sdk");
-	mkdirSync(cacheDir, { recursive: true });
-
-const wrapperSource = `#!/usr/bin/env node
-import { appendFileSync as __agentOsAppendFileSync } from "node:fs";
-import { inspect } from "node:util";
-import { PassThrough } from "node:stream";
-
-const originalCliPath = ${JSON.stringify(originalCliPath)};
-const swapStdio = process.env.CLAUDE_CODE_SWAP_STDIO === "1";
-const traceExit = process.env.CLAUDE_CODE_TRACE_EXIT === "1";
-const traceStdio = process.env.CLAUDE_CODE_TRACE_STDIO === "1";
-const traceFile = process.env.CLAUDE_CODE_TRACE_FILE;
-const realStdout = process.stdout;
-const realStderr = process.stderr;
-
-function wrapperTrace(message) {
-	if (traceFile) {
-		try {
-			__agentOsAppendFileSync(traceFile, message + "\\n");
-		} catch {}
-	}
-}
-
-if (swapStdio) {
-	Object.defineProperty(process, "stdout", {
-		configurable: true,
-		enumerable: true,
-		value: realStderr,
-	});
-	Object.defineProperty(process, "stderr", {
-		configurable: true,
-		enumerable: true,
-		value: realStdout,
-	});
-}
-
-process.stderr.write(
-	"[agentos-claude] wrapper_start cli=" + originalCliPath + "\\n",
-);
-wrapperTrace(
-	"[agentos-claude] wrapper_start cli=" + originalCliPath,
-);
-process.stderr.write(
-	"[agentos-claude] wrapper_argv " +
-		JSON.stringify(process.argv) +
-		"\\n",
-);
-wrapperTrace(
-	"[agentos-claude] wrapper_argv " + JSON.stringify(process.argv),
-);
-
-process.on("unhandledRejection", (error) => {
-	process.stderr.write(
-		"[agentos-claude] unhandledRejection " + inspect(error, { depth: 6 }) + "\\n",
-	);
-});
-
-process.on("uncaughtException", (error) => {
-	process.stderr.write(
-		"[agentos-claude] uncaughtException " + inspect(error, { depth: 6 }) + "\\n",
-	);
-});
-
-function writeTrace(label, value) {
-	if (!traceExit) return;
-	const stack = new Error().stack ?? "";
-	process.stderr.write(
-		"[agentos-claude] " +
-			label +
-			" " +
-			inspect(value, { depth: 4, breakLength: Infinity }) +
-			"\\n" +
-			stack +
-			"\\n",
-	);
-}
-
-let exitCodeValue = process.exitCode;
-if (
-	process.env.CLAUDE_CODE_IGNORE_STARTUP_EXIT_CODE === "1" &&
-	exitCodeValue === 0
-) {
-	exitCodeValue = undefined;
-}
-Object.defineProperty(process, "exitCode", {
-	configurable: true,
-	enumerable: true,
-	get() {
-		return exitCodeValue;
-	},
-	set(value) {
-		writeTrace("process.exitCode =", value);
-		exitCodeValue = value;
-	},
-});
-
-const originalExit = process.exit.bind(process);
-process.exit = (code) => {
-	writeTrace("process.exit()", code);
-	return originalExit(code);
-};
-
-const realStdin = process.stdin;
-const bufferedStdin = new PassThrough();
-bufferedStdin.isTTY = realStdin.isTTY;
-bufferedStdin.fd = realStdin.fd;
-if (typeof realStdin.setRawMode === "function") {
-	bufferedStdin.setRawMode = realStdin.setRawMode.bind(realStdin);
-}
-realStdin.on("data", (chunk) => {
-	bufferedStdin.write(chunk);
-});
-realStdin.on("end", () => {
-	bufferedStdin.end();
-});
-realStdin.on("error", (error) => {
-	bufferedStdin.destroy(error);
-});
-realStdin.resume();
-Object.defineProperty(process, "stdin", {
-	configurable: true,
-	enumerable: true,
-	value: bufferedStdin,
-});
-
-for (const stream of [process.stdout, process.stderr]) {
-	if (typeof stream.destroy !== "function") {
-		stream.destroy = (error) => {
-			if (error) {
-				stream.emit("error", error);
-				return stream;
-			}
-			if (typeof stream.end === "function") {
-				stream.end();
-			}
-			return stream;
-		};
-	}
-}
-
-if (traceStdio) {
-	realStdin.on("data", (chunk) => {
-		process.stderr.write(
-			"[agentos-claude] stdin_chunk " +
-				JSON.stringify(String(chunk)).slice(0, 4000) +
-				"\\n",
-		);
-	});
-
-	const originalStdoutWrite = process.stdout.write.bind(process.stdout);
-	process.stdout.write = function (chunk, encoding, callback) {
-		process.stderr.write(
-			"[agentos-claude] stdout_chunk " +
-				JSON.stringify(
-					typeof chunk === "string"
-						? chunk
-						: Buffer.from(chunk).toString(
-								typeof encoding === "string" ? encoding : undefined,
-							),
-				).slice(0, 4000) +
-				"\\n",
-		);
-		return originalStdoutWrite(chunk, encoding, callback);
-	};
-}
-
-await import(originalCliPath);
-`;
-
-	const wrapperHash = createHash("sha256")
-		.update(originalCliPath)
-		.update(wrapperSource)
-		.digest("hex")
-		.slice(0, 16);
-	const wrapperPath = resolvePath(cacheDir, `cli-wrapper-${wrapperHash}.mjs`);
-	if (!existsSync(wrapperPath)) {
-		writeFileSync(wrapperPath, wrapperSource, "utf-8");
-	}
-	return wrapperPath;
-}
-
-class AsyncQueue<T> implements AsyncIterable<T> {
-	private items: T[] = [];
-	private waiters: Array<(result: IteratorResult<T>) => void> = [];
-	private closed = false;
-
-	push(item: T): void {
-		if (this.closed) {
-			throw new Error("Queue is closed");
-		}
-		const waiter = this.waiters.shift();
-		if (waiter) {
-			waiter({ value: item, done: false });
-			return;
-		}
-		this.items.push(item);
-	}
-
-	end(): void {
-		if (this.closed) return;
-		this.closed = true;
-		for (const waiter of this.waiters.splice(0)) {
-			waiter({ value: undefined, done: true });
-		}
-	}
-
-	[Symbol.asyncIterator](): AsyncIterator<T> {
-		return {
-			next: () => {
-				const item = this.items.shift();
-				if (item !== undefined) {
-					return Promise.resolve({ value: item, done: false });
-				}
-				if (this.closed) {
-					return Promise.resolve({ value: undefined, done: true });
-				}
-				return new Promise<IteratorResult<T>>((resolve) => {
-					this.waiters.push(resolve);
-				});
-			},
-		};
-	}
-}
-
-type PendingTurn = {
-	resolve: (response: PromptResponse) => void;
-	reject: (error: Error) => void;
-	sawAssistantText: boolean;
-	sawToolCall: boolean;
-};
-
-// Exported for unit tests (the constructor takes an injectable `queryFactory`,
-// so the SDK can be faked). Not part of the package's public API.
-export class ClaudeQuerySession {
-	private promptQueue = new AsyncQueue<SDKUserMessage>();
-	private query: Query;
-	private readyPromise: Promise<void>;
-	private pendingTurn: PendingTurn | null = null;
-	private lastEmit: Promise<void> = Promise.resolve();
-	private pendingMcpServers: Record<string, McpServerConfig> | undefined;
-	private mcpServersApplied = false;
-	private activeToolCalls = new Map<
-		string,
-		{ toolName: string; rawInput?: Record<string, unknown> }
-	>();
-	// Maps a streaming content-block `index` -> toolUseId for the current turn.
-	// `content_block_delta` (input_json_delta) events reference the tool call by
-	// its content-block index, NOT by tool-call ordinal — any text/thinking block
-	// before a tool_use shifts that index. Cleared on each turn terminus.
-	private toolUseBlockIndex = new Map<number, string>();
-	private reader: Promise<void>;
-	private closed = false;
-	private cancelled = false;
-
-	constructor(
-		private readonly conn: AgentSideConnection,
-		readonly sessionId: string,
-		private readonly cwd: string,
-		private mode: PermissionMode,
-		params: NewSessionRequest,
-		private readonly pathToClaudeCodeExecutable: string,
-		queryFactory: QueryFactory,
-	) {
-		traceAdapter(
-			`session_ctor id=${sessionId} cwd=${cwd} mode=${mode} cli=${pathToClaudeCodeExecutable}`,
-		);
-		this.query = queryFactory({
-			prompt: this.promptQueue,
-			options: {
-				canUseTool: this.createPermissionHandler(),
-				cwd,
-				env: {
-					...process.env,
-					CLAUDE_CODE_SHELL:
-						process.env.CLAUDE_CODE_SHELL ?? "/bin/sh",
-					CLAUDE_CODE_IGNORE_STARTUP_EXIT_CODE:
-						process.env.CLAUDE_CODE_IGNORE_STARTUP_EXIT_CODE ?? "1",
-					CLAUDE_CODE_DISABLE_DEV_NULL_REDIRECT:
-						process.env.CLAUDE_CODE_DISABLE_DEV_NULL_REDIRECT ?? "1",
-					CLAUDE_CODE_DISABLE_CWD_PERSIST:
-						process.env.CLAUDE_CODE_DISABLE_CWD_PERSIST ?? "1",
-					CLAUDE_CODE_SIMPLE_SHELL_EXEC:
-						process.env.CLAUDE_CODE_SIMPLE_SHELL_EXEC ?? "1",
-					CLAUDE_CODE_SIMPLE: process.env.CLAUDE_CODE_SIMPLE ?? "1",
-					CLAUDE_CODE_NODE_SHELL_WRAPPER:
-						process.env.CLAUDE_CODE_NODE_SHELL_WRAPPER ?? "1",
-					CLAUDE_CODE_SKIP_INITIAL_MESSAGES:
-						process.env.CLAUDE_CODE_SKIP_INITIAL_MESSAGES ?? "1",
-					CLAUDE_CODE_SKIP_SPECIAL_ENTRYPOINTS:
-						process.env.CLAUDE_CODE_SKIP_SPECIAL_ENTRYPOINTS ?? "1",
-					CLAUDE_CODE_USE_PIPE_OUTPUT:
-						process.env.CLAUDE_CODE_USE_PIPE_OUTPUT ?? "1",
-					CLAUDE_CODE_TRACE_EXIT:
-						process.env.CLAUDE_CODE_TRACE_EXIT ?? "0",
-					CLAUDE_CODE_TRACE_STARTUP:
-						process.env.CLAUDE_CODE_TRACE_STARTUP ?? "0",
-					SHELL: process.env.SHELL ?? "/bin/sh",
-				},
-				extraArgs: {
-					bare: null,
-				},
-				includePartialMessages: true,
-				pathToClaudeCodeExecutable,
-				permissionMode: normalizeClaudePermissionMode(mode),
-				persistSession: false,
-				sandbox: { enabled: false },
-				settingSources: ["project"],
-				spawnClaudeCodeProcess: ({ command, args, cwd, env }) => {
-					traceAdapter(
-						`spawn_child command=${command} args=${JSON.stringify(args)} cwd=${cwd}`,
-					);
-					const childEnv: NodeJS.ProcessEnv = {
-						...env,
-						CLAUDE_CODE_SWAP_STDIO:
-							env.CLAUDE_CODE_SWAP_STDIO ?? "0",
-					};
-					const traceChildIo =
-						childEnv.CLAUDE_CODE_TRACE_CHILD_IO === "1" ||
-						(traceAdapterMessages && Boolean(traceFile));
-					const child = spawn(command, args, {
-						cwd,
-						env: childEnv,
-						stdio: ["pipe", "pipe", "pipe"],
-					});
-					const stdout = new PassThrough();
-					const lineBuffers: Record<"stdout" | "stderr", string> = {
-						stdout: "",
-						stderr: "",
-					};
-					let openStreams = 2;
-
-					const looksLikeProtocolLine = (line: string): boolean => {
-						const trimmed = line.trim();
-						if (!trimmed.startsWith("{")) {
-							return false;
-						}
-						try {
-							const parsed = JSON.parse(trimmed) as {
-								type?: unknown;
-								subtype?: unknown;
-								response?: { request_id?: unknown } | unknown;
-								message?: unknown;
-							};
-							return (
-								typeof parsed.type === "string" ||
-								typeof parsed.subtype === "string" ||
-								(typeof parsed.response === "object" &&
-									parsed.response !== null &&
-									"request_id" in parsed.response) ||
-								typeof parsed.message === "string"
-							);
-						} catch {
-							return false;
-						}
-					};
-
-					const writeSideLog = (source: "stdout" | "stderr", text: string) => {
-						if (!text) return;
-						if (traceChildIo) {
-							traceAdapter(
-								`child_side_${source} ${JSON.stringify(text).slice(0, 4000)}`,
-							);
-						}
-						process.stderr.write(text);
-					};
-
-					const flushBuffer = (
-						source: "stdout" | "stderr",
-						final = false,
-					): void => {
-						const buffer = lineBuffers[source];
-						const lines = buffer.split("\n");
-						if (!final) {
-							lineBuffers[source] = lines.pop() ?? "";
-						} else {
-							lineBuffers[source] = "";
-						}
-						for (const line of lines) {
-							const text = `${line}\n`;
-							if (looksLikeProtocolLine(line)) {
-								if (traceChildIo) {
-									traceAdapter(
-										`child_protocol_${source} ${JSON.stringify(text).slice(0, 4000)}`,
-									);
-								}
-								stdout.write(text);
-							} else {
-								writeSideLog(source, text);
-							}
-						}
-						if (final && lineBuffers[source]) {
-							const text = lineBuffers[source];
-							if (looksLikeProtocolLine(text)) {
-								if (traceChildIo) {
-									traceAdapter(
-										`child_protocol_${source} ${JSON.stringify(text).slice(0, 4000)}`,
-									);
-								}
-								stdout.write(text);
-							} else {
-								writeSideLog(source, text);
-							}
-							lineBuffers[source] = "";
-						}
-					};
-
-					const attachStream = (
-						source: "stdout" | "stderr",
-						stream: NodeJS.ReadableStream | null,
-					): void => {
-						if (!stream) {
-							openStreams -= 1;
-							if (openStreams <= 0) {
-								stdout.end();
-							}
-							return;
-						}
-						stream.on("data", (chunk) => {
-							lineBuffers[source] += String(chunk);
-							flushBuffer(source);
-						});
-						stream.on("end", () => {
-							flushBuffer(source, true);
-							openStreams -= 1;
-							if (openStreams <= 0) {
-								stdout.end();
-							}
-						});
-						stream.on("close", () => {
-							flushBuffer(source, true);
-						});
-						stream.on("error", (error) => {
-							stdout.destroy(error);
-						});
-					};
-
-					attachStream("stdout", child.stdout);
-					attachStream("stderr", child.stderr);
-
-					return {
-						stdin: child.stdin,
-						stdout,
-						get killed() {
-							return child.killed;
-						},
-						get exitCode() {
-							return child.exitCode;
-						},
-						kill: child.kill.bind(child),
-						on: child.on.bind(child),
-						once: child.once.bind(child),
-						off: child.off.bind(child),
-					};
-				},
-				stderr: (data) => process.stderr.write(data),
-				systemPrompt: appendSystemPrompt
-					? {
-							type: "preset",
-							preset: "claude_code",
-							append: appendSystemPrompt,
-						}
-					: {
-							type: "preset",
-							preset: "claude_code",
-						},
-				tools: { type: "preset", preset: "claude_code" },
-			},
-		});
-		this.readyPromise = this.initialize(params);
-		this.reader = this.consume();
-	}
-
-	get currentMode(): PermissionMode {
-		return this.mode;
-	}
-
-	async ready(): Promise<void> {
-		await this.readyPromise;
-	}
-
-	async prompt(params: PromptRequest): Promise<PromptResponse> {
-		if (this.closed) {
-			throw new Error("Session is closed");
-		}
-		if (this.pendingTurn) {
-			throw new Error("A Claude prompt is already running");
-		}
-		await this.readyPromise;
-
-		const text = joinPromptText(params.prompt as PromptPart[] | undefined);
-		traceAdapter(
-			`prompt_start session=${this.sessionId} textLength=${text.length}`,
-		);
-		return new Promise<PromptResponse>((resolve, reject) => {
-			this.cancelled = false;
-			this.pendingTurn = {
-				resolve,
-				reject,
-				sawAssistantText: false,
-				sawToolCall: false,
-			};
-			void this.applyPendingMcpServers()
-				.then(() => {
-					traceAdapter(`prompt_queue_push session=${this.sessionId}`);
-					this.promptQueue.push({
-						type: "user",
-						session_id: "",
-						message: {
-							role: "user",
-							content: [{ type: "text", text }],
-						},
-						parent_tool_use_id: null,
-					});
-					traceAdapter(`prompt_queue_pushed session=${this.sessionId}`);
-				})
-				.catch((error) => {
-					traceAdapter(
-						`prompt_setup_error session=${this.sessionId} error=${formatError(error)}`,
-					);
-					if (this.pendingTurn) {
-						this.pendingTurn.reject(asError(error));
-						this.pendingTurn = null;
-					}
-				});
-		});
-	}
-
-	async cancel(): Promise<void> {
-		if (this.closed) return;
-		this.cancelled = true;
-		await this.readyPromise.catch(() => {});
-		await this.query.interrupt();
-	}
-
-	async setMode(mode: PermissionMode): Promise<void> {
-		await this.readyPromise;
-		this.mode = mode;
-		await this.query.setPermissionMode(mode);
-		await this.emit({
-			sessionUpdate: "current_mode_update" as const,
-			currentModeId: mode,
-		});
-	}
-
-	close(): void {
-		if (this.closed) return;
-		this.closed = true;
-		this.promptQueue.end();
-		this.query.close();
-		if (this.pendingTurn) {
-			this.pendingTurn.reject(new Error("Claude session closed"));
-			this.pendingTurn = null;
-		}
-	}
-
-	private async initialize(params: NewSessionRequest): Promise<void> {
-		this.pendingMcpServers = toSdkMcpServers(params.mcpServers);
-		traceAdapter(
-			`session_initialize id=${this.sessionId} mcpServers=${Object.keys(
-				this.pendingMcpServers ?? {},
-			).length}`,
-		);
-	}
-
-	private async applyPendingMcpServers(): Promise<void> {
-		if (this.mcpServersApplied || !this.pendingMcpServers) {
-			traceAdapter(
-				`apply_mcp_skip session=${this.sessionId} applied=${String(this.mcpServersApplied)} pending=${String(Boolean(this.pendingMcpServers))}`,
-			);
-			return;
-		}
-		traceAdapter(`apply_mcp_start session=${this.sessionId}`);
-		await this.query.setMcpServers(this.pendingMcpServers);
-		this.mcpServersApplied = true;
-		traceAdapter(`apply_mcp_done session=${this.sessionId}`);
-	}
-
-	private async consume(): Promise<void> {
-		traceAdapter(`consume_start session=${this.sessionId}`);
-		try {
-			for await (const message of this.query) {
-				traceAdapter(
-					`consume_message session=${this.sessionId} type=${String(message.type ?? "")}`,
-				);
-				await this.handleMessage(message);
-			}
-			traceAdapter(`consume_done session=${this.sessionId}`);
-		} catch (error) {
-			traceAdapter(
-				`consume_error session=${this.sessionId} error=${formatError(error)}`,
-			);
-			if (this.pendingTurn) {
-				this.pendingTurn.reject(asError(error));
-				this.pendingTurn = null;
-			}
-			if (!this.closed) {
-				process.stderr.write(`${formatError(error)}\n`);
-			}
-		} finally {
-			traceAdapter(`consume_finally session=${this.sessionId}`);
-			// The reader loop has exited — the SDK query stream is done (cleanly or
-			// via error), so this session can never produce another result. Mark it
-			// closed so a subsequent prompt() fails fast via the guard in prompt()
-			// instead of queueing onto a dead reader and hanging to the ACP method
-			// timeout (a zombie session).
-			this.closed = true;
-			if (this.pendingTurn) {
-				this.pendingTurn.reject(
-					new Error("Claude session ended before producing a result"),
-				);
-				this.pendingTurn = null;
-			}
-		}
-	}
-
-	private async handleMessage(message: Record<string, unknown>): Promise<void> {
-		if (traceAdapterMessages) {
-			const details =
-				message.type === "result"
-					? ` result=${JSON.stringify({
-							subtype: message.subtype,
-							result: message.result,
-							error: message.error,
-							errors: message.errors,
-						})}`
-					: "";
-			traceAdapter(
-				`adapter_message type=${String(message.type ?? "")} subtype=${String(
-					message.subtype ?? "",
-				)} pendingTurn=${String(Boolean(this.pendingTurn))}${details}`,
-			);
-		}
-		switch (message.type) {
-			case "stream_event":
-				await this.handleStreamEvent(message);
-				return;
-			case "assistant":
-				await this.handleAssistantMessage(message);
-				return;
-			case "tool_progress":
-				await this.handleToolProgress(message);
-				return;
-			case "system":
-				await this.handleSystemMessage(message);
-				return;
-			case "result":
-				await this.handleResult(message);
-				return;
-			case "tool_use_summary":
-				await this.emitText(String(message.summary ?? ""));
-				return;
-			default:
-				return;
-		}
-	}
-
-	private async handleStreamEvent(message: Record<string, unknown>): Promise<void> {
-		if (!this.pendingTurn) return;
-
-		const event = (message.event ?? {}) as Record<string, unknown>;
-		const type = String(event.type ?? "");
-
-		if (type === "content_block_delta") {
-			const delta = (event.delta ?? {}) as Record<string, unknown>;
-			if (delta.type === "text_delta" && typeof delta.text === "string") {
-				if (this.pendingTurn) this.pendingTurn.sawAssistantText = true;
-				await this.emit({
-					sessionUpdate: "agent_message_chunk" as const,
-					content: { type: "text" as const, text: delta.text },
-				});
-				return;
-			}
-			if (
-				delta.type === "thinking_delta" &&
-				typeof delta.thinking === "string"
-			) {
-				await this.emit({
-					sessionUpdate: "agent_thought_chunk" as const,
-					content: { type: "text" as const, text: delta.thinking },
-				});
-				return;
-			}
-			if (
-				delta.type === "input_json_delta" &&
-				typeof event.index === "number"
-			) {
-				const toolCall = this.findToolCallByIndex(Number(event.index));
-				if (!toolCall) return;
-				const rawInput = {
-					...(toolCall.rawInput ?? {}),
-					partial_json: String(delta.partial_json ?? ""),
-				};
-				toolCall.rawInput = rawInput;
-				await this.emitToolCallUpdate(toolCall.toolName, toolCall.toolUseId, {
-					rawInput,
-					status: "pending",
-				});
-			}
-			return;
-		}
-
-		if (type === "content_block_start") {
-			const block = (event.content_block ?? {}) as Record<string, unknown>;
-			if (block.type !== "tool_use") return;
-
-			const toolUseId = String(block.id ?? "");
-			if (!toolUseId) return;
-
-			const toolName = String(block.name ?? "tool");
-			const rawInput = isRecord(block.input) ? block.input : undefined;
-			this.activeToolCalls.set(toolUseId, { toolName, rawInput });
-			// Remember this tool_use block's content-block index so subsequent
-			// input_json_delta events (which reference the block by index) are
-			// attributed to the right tool call.
-			if (typeof event.index === "number") {
-				this.toolUseBlockIndex.set(Number(event.index), toolUseId);
-			}
-			if (this.pendingTurn) this.pendingTurn.sawToolCall = true;
-
-			await this.emit({
-				sessionUpdate: "tool_call" as const,
-				toolCallId: toolUseId,
-				kind: toToolKind(toolName),
-				locations: toToolCallLocations(rawInput, this.cwd),
-				rawInput,
-				status: "pending" as const,
-				title: toolName,
-			});
-		}
-	}
-
-	private async handleAssistantMessage(
-		message: Record<string, unknown>,
-	): Promise<void> {
-		if (!this.pendingTurn) return;
-
-		const content = Array.isArray((message.message as Record<string, unknown>)?.content)
-			? (((message.message as Record<string, unknown>).content ??
-					[]) as Array<Record<string, unknown>>)
-			: [];
-
-		for (const block of content) {
-			if (block.type === "tool_use") {
-				const toolUseId = String(block.id ?? "");
-				if (!toolUseId) continue;
-				const toolName = String(block.name ?? "tool");
-				const rawInput = isRecord(block.input) ? block.input : undefined;
-				this.activeToolCalls.set(toolUseId, { toolName, rawInput });
-				if (this.pendingTurn) this.pendingTurn.sawToolCall = true;
-
-				await this.emit({
-					sessionUpdate: "tool_call" as const,
-					toolCallId: toolUseId,
-					kind: toToolKind(toolName),
-					locations: toToolCallLocations(rawInput, this.cwd),
-					rawInput,
-					status: "pending" as const,
-					title: toolName,
-				});
-			}
-		}
-
-		const text = extractTextContent(content);
-		if (text && this.pendingTurn && !this.pendingTurn.sawAssistantText) {
-			this.pendingTurn.sawAssistantText = true;
-			await this.emitText(text);
-		}
-	}
-
-	private async handleToolProgress(
-		message: Record<string, unknown>,
-	): Promise<void> {
-		if (!this.pendingTurn) return;
-
-		const toolUseId = String(message.tool_use_id ?? "");
-		const toolName = String(message.tool_name ?? "tool");
-		if (!toolUseId) return;
-
-		const existing = this.activeToolCalls.get(toolUseId);
-		this.activeToolCalls.set(toolUseId, {
-			toolName,
-			rawInput: existing?.rawInput,
-		});
-
-		await this.emitToolCallUpdate(toolName, toolUseId, {
-			status: "in_progress",
-		});
-	}
-
-	private async handleSystemMessage(
-		message: Record<string, unknown>,
-	): Promise<void> {
-		if (!this.pendingTurn) return;
-
-		if (message.subtype === "local_command_output") {
-			await this.emitText(String(message.content ?? ""));
-		}
-	}
-
-	private async handleResult(message: Record<string, unknown>): Promise<void> {
-		const turn = this.pendingTurn;
-		if (!turn) return;
-
-		const subtype = String(message.subtype ?? "success");
-		const resultText =
-			typeof message.result === "string" ? message.result : undefined;
-		if (resultText && !turn.sawAssistantText) {
-			await this.emitText(resultText);
-		}
-
-		for (const [toolUseId, info] of this.activeToolCalls) {
-			await this.emitToolCallUpdate(info.toolName, toolUseId, {
-				status: subtype === "success" ? "completed" : "failed",
-			});
-		}
-		this.activeToolCalls.clear();
-		this.toolUseBlockIndex.clear();
-
-		await this.lastEmit;
-
-		this.pendingTurn = null;
-		turn.resolve({
-			stopReason: this.cancelled ? "cancelled" : "end_turn",
-		});
-		this.cancelled = false;
-	}
-
-	private async emitText(text: string): Promise<void> {
-		if (!text) return;
-		await this.emit({
-			sessionUpdate: "agent_message_chunk" as const,
-			content: {
-				type: "text" as const,
-				text,
-			},
-		});
-	}
-
-	private emit(update: SessionUpdate): Promise<void> {
-		this.lastEmit = this.lastEmit
-			.then(() =>
-				this.conn.sessionUpdate({
-					sessionId: this.sessionId,
-					update,
-				}),
-			)
-			// The catch is load-bearing: lastEmit is awaited at turn end and a
-			// rejected chain would halt all later updates and surface as a spurious
-			// prompt failure. But never swallow silently — a dropped session/update
-			// (host disconnect / broken pipe) must be host-visible, so write it to
-			// stderr (the onAgentStderr channel).
-			.catch((error) => {
-				process.stderr.write(
-					`[claude-acp] failed to deliver session/update: ${formatError(error)}\n`,
-				);
-			});
-		return this.lastEmit;
-	}
-
-	private async emitToolCallUpdate(
-		toolName: string,
-		toolUseId: string,
-		update: {
-			status: "pending" | "in_progress" | "completed" | "failed";
-			rawInput?: Record<string, unknown>;
-		},
-	): Promise<void> {
-		await this.emit({
-			sessionUpdate: "tool_call_update" as const,
-			toolCallId: toolUseId,
-			kind: toToolKind(toolName),
-			locations: toToolCallLocations(update.rawInput, this.cwd),
-			rawInput: update.rawInput,
-			status: update.status,
-		});
-	}
-
-	private createPermissionHandler(): CanUseTool {
-		return async (toolName, input, options) => {
-			traceAdapter(
-				`permission_request_start session=${this.sessionId} tool=${toolName} toolUseId=${options.toolUseID}`,
-			);
-			const request = {
-				options: buildPermissionOptions(),
-				sessionId: this.sessionId,
-				toolCall: {
-					kind: toToolKind(toolName),
-					locations: toToolCallLocations(input, this.cwd),
-					rawInput: input,
-					status: "pending" as const,
-					title: options.title ?? toolName,
-					toolCallId: options.toolUseID,
-				},
-			};
-			// The host's permission handler is authoritative: never auto-resolve
-			// the request on a timer. A timer-based fallback here would either
-			// fail OPEN (auto-allow — the untrusted guest's tool runs without host
-			// consent) or fail closed early (deny a legitimate slow approval). If
-			// the host never answers, the request fails via the bounded ACP method
-			// timeout, which surfaces to the host rather than silently granting.
-			const response = await this.conn.requestPermission(request);
-			traceAdapter(
-				`permission_request_done session=${this.sessionId} tool=${toolName} toolUseId=${options.toolUseID}`,
-			);
-			return toPermissionResult(
-				response,
-				options.suggestions,
-				options.toolUseID,
-				input,
-			);
-		};
-	}
-
-	private findToolCallByIndex(index: number): {
-		toolUseId: string;
-		toolName: string;
-		rawInput?: Record<string, unknown>;
-	} | null {
-		// `index` is the streaming content-block index, not a tool-call ordinal —
-		// resolve it through the per-turn block-index map so the partial input is
-		// attributed to the correct tool call even when text/thinking blocks
-		// precede the tool_use block.
-		const toolUseId = this.toolUseBlockIndex.get(index);
-		if (!toolUseId) return null;
-		const value = this.activeToolCalls.get(toolUseId);
-		if (!value) return null;
-		return { toolUseId, toolName: value.toolName, rawInput: value.rawInput };
-	}
-}
-
-class ClaudeSdkAgent implements Agent {
-	private sessions = new Map<string, ClaudeQuerySession>();
-
-	constructor(private readonly conn: AgentSideConnection) {
-		setTimeout(() => {
-			void this.conn.closed.then(() => {
-				for (const session of this.sessions.values()) {
-					session.close();
-				}
-				this.sessions.clear();
-			});
-		}, 0);
-	}
-
-	async initialize(
-		_params: InitializeRequest,
-	): Promise<InitializeResponse> {
-		return {
-			protocolVersion: 1,
-			agentInfo: {
-				name: "claude-sdk-acp",
-				title: "Claude Agent SDK ACP adapter",
-				version: "0.1.0",
-			},
-			agentCapabilities: {
-				promptCapabilities: {
-					audio: false,
-					embeddedContext: false,
-					image: true,
-				},
-			},
-		};
-	}
-
-	async newSession(params: NewSessionRequest): Promise<NewSessionResponse> {
-		const sessionId = randomUUID();
-		const sdk = await claudeSdkRuntimePromise;
-		const session = new ClaudeQuerySession(
-			this.conn,
-			sessionId,
-			params.cwd,
-			"default",
-			params,
-			sdk.cliPath,
-			sdk.query,
-		);
-		await session.ready();
-		this.sessions.set(sessionId, session);
-		return {
-			sessionId,
-			modes: {
-				currentModeId: "default",
-				availableModes: ACP_MODES.map((id) => ({
-					id,
-					name: id,
-				})),
-			},
-		};
-	}
-
-	async prompt(params: PromptRequest): Promise<PromptResponse> {
-		const session = this.requireSession(params.sessionId);
-		return session.prompt(params);
-	}
-
-	async cancel(params: CancelNotification): Promise<void> {
-		const session = this.requireSession(params.sessionId);
-		await session.cancel();
-	}
-
-	async setSessionMode(
-		params: SetSessionModeRequest,
-	): Promise<SetSessionModeResponse | void> {
-		const session = this.requireSession(params.sessionId);
-		await session.setMode(params.modeId as PermissionMode);
-		return {};
-	}
-
-	async authenticate(
-		_params: AuthenticateRequest,
-	): Promise<AuthenticateResponse | void> {
-	}
-
-	private requireSession(sessionId: string): ClaudeQuerySession {
-		const session = this.sessions.get(sessionId);
-		if (!session) {
-			throw new Error(`Unknown Claude session: ${sessionId}`);
-		}
-		return session;
-	}
-}
-
-function joinPromptText(prompt: PromptPart[] | undefined): string {
-	return (prompt ?? [])
-		.map((part) => (part.type === "text" ? (part.text ?? "") : ""))
-		.join("");
-}
-
-function extractTextContent(content: Array<Record<string, unknown>>): string {
-	return content
-		.filter((block) => block.type === "text" && typeof block.text === "string")
-		.map((block) => String(block.text))
-		.join("");
-}
-
-function toSdkMcpServers(
-	servers: NewSessionRequest["mcpServers"],
-): Record<string, McpServerConfig> | undefined {
-	if (!Array.isArray(servers) || servers.length === 0) {
-		return undefined;
-	}
-
-	return Object.fromEntries(
-		servers.map((server, index) => {
-			const name = `mcp-${index + 1}`;
-			const record = server as Record<string, unknown>;
-			if (record.type === "local") {
-				return [
-					name,
-					{
-						args: Array.isArray(record.args)
-							? (record.args as string[])
-							: undefined,
-						command: String(record.command ?? ""),
-						env: isRecord(record.env)
-							? (record.env as Record<string, string>)
-							: undefined,
-						type: "stdio",
-					} satisfies McpServerConfig,
-				];
-			}
-
-			return [
-				name,
-				{
-					headers: isRecord(record.headers)
-						? (record.headers as Record<string, string>)
-						: undefined,
-					type: "http",
-					url: String(record.url ?? ""),
-				} satisfies McpServerConfig,
-			];
-		}),
-	);
-}
-
-function toToolKind(
-	toolName: string,
-): "read" | "edit" | "execute" | "search" | "fetch" | "think" | "other" {
-	switch (toolName) {
-		case "Read":
-			return "read";
-		case "Edit":
-		case "Write":
-		case "MultiEdit":
-		case "NotebookEdit":
-			return "edit";
-		case "Bash":
-		case "Monitor":
-			return "execute";
-		case "Grep":
-		case "Glob":
-		case "LS":
-			return "search";
-		case "WebFetch":
-		case "WebSearch":
-			return "fetch";
-		case "Think":
-			return "think";
-		default:
-			return "other";
-	}
-}
-
-function toToolCallLocations(
-	rawInput: Record<string, unknown> | undefined,
-	cwd: string,
-): Array<{ path: string; line?: number }> | undefined {
-	const path =
-		typeof rawInput?.file_path === "string"
-			? rawInput.file_path
-			: typeof rawInput?.path === "string"
-				? rawInput.path
-				: undefined;
-	if (!path) return undefined;
-
-	return [
-		{
-			path: isAbsolute(path) ? path : resolvePath(cwd, path),
-		},
-	];
-}
-
-function buildPermissionOptions(): Array<{
-	kind: "allow_once" | "allow_always" | "reject_once" | "reject_always";
-	name: string;
-	optionId: string;
-}> {
-	return [
-		{ kind: "allow_once", name: "Allow once", optionId: "allow_once" },
-		{ kind: "allow_always", name: "Always allow", optionId: "allow_always" },
-		{ kind: "reject_once", name: "Reject", optionId: "reject_once" },
-	];
-}
-
-function toPermissionResult(
-	response: RequestPermissionResponse,
-	suggestions: PermissionUpdate[] | undefined,
-	toolUseID: string,
-	input: Record<string, unknown>,
-): PermissionResult {
-	if (response.outcome.outcome === "cancelled") {
-		return {
-			behavior: "deny",
-			decisionClassification: "user_reject",
-			interrupt: true,
-			message: "Permission request cancelled",
-			toolUseID,
-		};
-	}
-
-	switch (response.outcome.optionId) {
-		case "allow_always":
-			return {
-				behavior: "allow",
-				decisionClassification: "user_permanent",
-				toolUseID,
-				updatedInput: input,
-				updatedPermissions: suggestions,
-			};
-		case "allow_once":
-			return {
-				behavior: "allow",
-				decisionClassification: "user_temporary",
-				toolUseID,
-				updatedInput: input,
-			};
-		default:
-			return {
-				behavior: "deny",
-				decisionClassification: "user_reject",
-				message: "Permission denied",
-				toolUseID,
-			};
-	}
-}
-
-function normalizeClaudePermissionMode(mode: PermissionMode): PermissionMode {
-	// Claude Code refuses bypassPermissions when running as root, which is the
-	// normal VM user in this workspace. Fall back to the standard interactive
-	// mode instead of letting startup abort.
-	return mode === "bypassPermissions" ? "default" : mode;
-}
-
-function isRecord(value: unknown): value is Record<string, unknown> {
-	return typeof value === "object" && value !== null;
-}
-
-function asError(error: unknown): Error {
-	return error instanceof Error ? error : new Error(String(error));
-}
-
-function formatError(error: unknown): string {
-	return asError(error).stack ?? asError(error).message;
-}
-
-const input = new WritableStream<Uint8Array>({
-	write(chunk) {
-		return new Promise<void>((resolve) => {
-			process.stdout.write(chunk, () => resolve());
-		});
-	},
-});
-
-const output = new ReadableStream<Uint8Array>({
-	start(controller) {
-		process.stdin.on("data", (chunk: Buffer) => {
-			controller.enqueue(new Uint8Array(chunk));
-		});
-		process.stdin.on("end", () => controller.close());
-		process.stdin.on("error", (error: Error) => controller.error(error));
-	},
-});
-
-const stream = ndJsonStream(input, output);
-const _connection = new AgentSideConnection(
-	(conn) => new ClaudeSdkAgent(conn),
-	stream,
-);
-
-process.stdin.resume();
-process.stdin.on("end", () => {
-	process.exit(0);
-});
diff --git a/registry/agent/claude/src/index.ts b/registry/agent/claude/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/agent/claude/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/agent/claude/src/patched-cli.ts b/registry/agent/claude/src/patched-cli.ts
deleted file mode 100644
index afe05a9ac..000000000
--- a/registry/agent/claude/src/patched-cli.ts
+++ /dev/null
@@ -1,45 +0,0 @@
-import { readFileSync } from "node:fs";
-import { dirname, resolve as resolvePath } from "node:path";
-
-type PatchedArtifactOptions = {
-	packageDir: string;
-	sdkPath: string;
-};
-
-type PatchedManifest = {
-	entry?: string;
-};
-
-function resolveManifestEntry(
-	packageDir: string,
-	manifestName: string,
-): string | undefined {
-	const manifestPath = resolvePath(packageDir, "dist", manifestName);
-	try {
-		const manifest = JSON.parse(readFileSync(manifestPath, "utf-8")) as PatchedManifest;
-		if (typeof manifest.entry === "string" && manifest.entry.length > 0) {
-			return resolvePath(packageDir, "dist", manifest.entry.replace(/^\.\//, ""));
-		}
-	} catch {
-	}
-	return undefined;
-}
-
-export function resolveClaudeCliPath({
-	packageDir,
-	sdkPath,
-}: PatchedArtifactOptions): string {
-	return (
-		resolveManifestEntry(packageDir, "claude-cli-patched.json") ??
-		resolvePath(dirname(sdkPath), "cli.js")
-	);
-}
-
-export function resolveClaudeSdkPath({
-	packageDir,
-	sdkPath,
-}: PatchedArtifactOptions): string {
-	return (
-		resolveManifestEntry(packageDir, "claude-sdk-patched.json") ?? sdkPath
-	);
-}
diff --git a/registry/agent/claude/tests/adapter.test.mjs b/registry/agent/claude/tests/adapter.test.mjs
deleted file mode 100644
index 80855ac98..000000000
--- a/registry/agent/claude/tests/adapter.test.mjs
+++ /dev/null
@@ -1,203 +0,0 @@
-import test, { after } from "node:test";
-import assert from "node:assert/strict";
-import { resolve as resolvePath } from "node:path";
-
-// Stop fns for every "open" fake query, drained after the run so the dangling
-// consume() loops (and the process) can exit.
-const cleanups = [];
-after(() => {
-	for (const stop of cleanups) stop();
-});
-
-// Unit tests for the ClaudeQuerySession adapter fixes. The class is exported
-// for testing and its constructor takes an injectable `queryFactory`, so these
-// drive the translation/permission/teardown logic with a fake Claude SDK query
-// and a mock ACP connection — no real SDK, no VM.
-const packageDir = resolvePath(import.meta.dirname, "..");
-const { ClaudeQuerySession } = await import(
-	resolvePath(packageDir, "dist", "adapter.js")
-);
-
-function makeConn(overrides = {}) {
-	let closeConn;
-	const closed = new Promise((r) => {
-		closeConn = r;
-	});
-	const updates = [];
-	return {
-		updates,
-		closeConn: () => closeConn(),
-		sessionUpdate: async (u) => {
-			updates.push(u);
-		},
-		requestPermission: async () => ({
-			outcome: { outcome: "selected", optionId: "allow_once" },
-		}),
-		closed,
-		...overrides,
-	};
-}
-
-function makeQuery({ endImmediately = false } = {}) {
-	let stop;
-	const stopped = new Promise((r) => {
-		stop = r;
-	});
-	if (!endImmediately) cleanups.push(stop);
-	return {
-		setMcpServers: async () => {},
-		interrupt: async () => {},
-		setPermissionMode: async () => {},
-		async *[Symbol.asyncIterator]() {
-			if (endImmediately) return;
-			await stopped; // ends consume() when drained in `after`
-		},
-	};
-}
-
-function makeSession({ endImmediately = false, conn } = {}) {
-	const c = conn ?? makeConn();
-	let capturedOptions;
-	const queryFactory = (arg) => {
-		capturedOptions = arg.options;
-		return makeQuery({ endImmediately });
-	};
-	const sess = new ClaudeQuerySession(
-		c,
-		"sess-1",
-		"/workspace",
-		"default",
-		{ cwd: "/workspace", mcpServers: undefined },
-		"/usr/bin/claude",
-		queryFactory,
-	);
-	return { sess, conn: c, getOptions: () => capturedOptions };
-}
-
-// ── Fix #5: input_json_delta maps to the correct tool by content-block index ──
-test("claude #5: partial tool input is attributed by content-block index, not insertion order", async () => {
-	const { sess, conn } = makeSession();
-	sess.pendingTurn = {
-		sawAssistantText: false,
-		sawToolCall: false,
-		resolve() {},
-		reject() {},
-	};
-	// A text block occupies content-block index 0; the tool_use block is index 1.
-	await sess.handleStreamEvent({
-		event: { type: "content_block_delta", index: 0, delta: { type: "text_delta", text: "thinking..." } },
-	});
-	await sess.handleStreamEvent({
-		event: {
-			type: "content_block_start",
-			index: 1,
-			content_block: { type: "tool_use", id: "tool-A", name: "Bash", input: {} },
-		},
-	});
-	await sess.handleStreamEvent({
-		event: { type: "content_block_delta", index: 1, delta: { type: "input_json_delta", partial_json: '{"command":"ls"}' } },
-	});
-	await sess.lastEmit;
-
-	const toolUpdates = conn.updates
-		.map((u) => u.update)
-		.filter((u) => u?.sessionUpdate === "tool_call_update");
-	// With the old insertion-order lookup, findToolCallByIndex(1) on a 1-entry
-	// map returns null and the partial input is silently dropped (no update).
-	assert.equal(toolUpdates.length, 1, "expected exactly one tool_call_update for the partial input");
-	assert.equal(toolUpdates[0].toolCallId, "tool-A", "partial input must target the tool at block index 1");
-	assert.equal(toolUpdates[0].rawInput.partial_json, '{"command":"ls"}');
-});
-
-test("claude #5: two tool_use blocks at different indices each get their own partial input", async () => {
-	const { sess, conn } = makeSession();
-	sess.pendingTurn = { sawAssistantText: false, sawToolCall: false, resolve() {}, reject() {} };
-	// index 0 = text, index 1 = toolA, index 2 = toolB
-	await sess.handleStreamEvent({ event: { type: "content_block_delta", index: 0, delta: { type: "text_delta", text: "x" } } });
-	await sess.handleStreamEvent({ event: { type: "content_block_start", index: 1, content_block: { type: "tool_use", id: "tool-A", name: "Bash", input: {} } } });
-	await sess.handleStreamEvent({ event: { type: "content_block_start", index: 2, content_block: { type: "tool_use", id: "tool-B", name: "Read", input: {} } } });
-	await sess.handleStreamEvent({ event: { type: "content_block_delta", index: 2, delta: { type: "input_json_delta", partial_json: '{"path":"/a"}' } } });
-	await sess.handleStreamEvent({ event: { type: "content_block_delta", index: 1, delta: { type: "input_json_delta", partial_json: '{"command":"echo"}' } } });
-	await sess.lastEmit;
-
-	const updates = conn.updates.map((u) => u.update).filter((u) => u?.sessionUpdate === "tool_call_update");
-	const byTool = Object.fromEntries(updates.map((u) => [u.toolCallId, u.rawInput.partial_json]));
-	assert.equal(byTool["tool-B"], '{"path":"/a"}', "block index 2 → tool-B");
-	assert.equal(byTool["tool-A"], '{"command":"echo"}', "block index 1 → tool-A");
-});
-
-// ── Fix #1: permission handler is host-authoritative; no timer auto-resolve ──
-test("claude #1: permission handler returns the host's deny decision", async () => {
-	const conn = makeConn({
-		requestPermission: async () => ({ outcome: { outcome: "selected", optionId: "reject_once" } }),
-	});
-	const { getOptions } = makeSession({ conn });
-	const canUseTool = getOptions().canUseTool;
-	const result = await canUseTool("Bash", { command: "rm -rf /" }, { toolUseID: "t1", title: "Bash", suggestions: [] });
-	assert.equal(result.behavior, "deny", "host reject must produce a deny");
-});
-
-test("claude #1: permission handler does NOT auto-resolve on a timer when the host is silent", async () => {
-	let pendingResolve;
-	const conn = makeConn({
-		// Never settles — simulates a host that hasn't answered yet.
-		requestPermission: () => new Promise((r) => {
-			pendingResolve = r;
-		}),
-	});
-	const { getOptions } = makeSession({ conn });
-	const canUseTool = getOptions().canUseTool;
-	const handlerPromise = canUseTool("Bash", {}, { toolUseID: "t1", title: "Bash", suggestions: [] });
-	const timer = new Promise((r) => setTimeout(() => r("TIMER_WON"), 300));
-	const winner = await Promise.race([handlerPromise.then(() => "HANDLER_WON"), timer]);
-	assert.equal(winner, "TIMER_WON", "handler must not auto-resolve before the host answers (no fail-open timer)");
-	// settle the pending request so the handler promise doesn't dangle
-	pendingResolve({ outcome: { outcome: "selected", optionId: "reject_once" } });
-	await handlerPromise;
-});
-
-// ── Fix #2: emit logs delivery failures (host-visible) and keeps the chain alive ──
-test("claude #2: a failed sessionUpdate is logged to stderr and the emit chain survives", async () => {
-	let failNext = true;
-	const delivered = [];
-	const conn = makeConn({
-		sessionUpdate: async (u) => {
-			if (failNext) {
-				failNext = false;
-				throw new Error("broken pipe");
-			}
-			delivered.push(u);
-		},
-	});
-	const { sess } = makeSession({ conn });
-
-	const writes = [];
-	const orig = process.stderr.write;
-	process.stderr.write = (s) => {
-		writes.push(String(s));
-		return true;
-	};
-	try {
-		await sess.emit({ sessionUpdate: "agent_message_chunk", content: { type: "text", text: "a" } });
-		await sess.emit({ sessionUpdate: "agent_message_chunk", content: { type: "text", text: "b" } });
-		await sess.lastEmit;
-	} finally {
-		process.stderr.write = orig;
-	}
-	assert.ok(
-		writes.some((w) => w.includes("failed to deliver session/update")),
-		"a delivery failure must be written to stderr, not swallowed",
-	);
-	assert.equal(delivered.length, 1, "the chain must survive the failure and deliver the next update");
-});
-
-// ── Fix #4: a dead reader marks the session closed so prompt() fails fast ──
-test("claude #4: once the query stream ends, prompt() fails fast instead of hanging", async () => {
-	const { sess } = makeSession({ endImmediately: true });
-	await sess.reader; // wait for consume() to finish on the now-ended query
-	await assert.rejects(
-		sess.prompt({ prompt: [{ type: "text", text: "hi" }] }),
-		/Session is closed/,
-		"a prompt on a dead session must reject promptly, not hang",
-	);
-});
diff --git a/registry/agent/claude/tests/patched-cli.test.mjs b/registry/agent/claude/tests/patched-cli.test.mjs
deleted file mode 100644
index b91b65f70..000000000
--- a/registry/agent/claude/tests/patched-cli.test.mjs
+++ /dev/null
@@ -1,119 +0,0 @@
-import test from "node:test";
-import assert from "node:assert/strict";
-import { mkdtempSync, mkdirSync, readFileSync, rmSync, writeFileSync } from "node:fs";
-import { createRequire } from "node:module";
-import { dirname, resolve as resolvePath } from "node:path";
-import { tmpdir } from "node:os";
-
-const require = createRequire(import.meta.url);
-const sdkPath = require.resolve("@anthropic-ai/claude-agent-sdk");
-const packageDir = resolvePath(import.meta.dirname, "..");
-const cliManifestPath = resolvePath(packageDir, "dist", "claude-cli-patched.json");
-const sdkManifestPath = resolvePath(packageDir, "dist", "claude-sdk-patched.json");
-const { resolveClaudeCliPath, resolveClaudeSdkPath } = await import(
-	resolvePath(packageDir, "dist", "patched-cli.js")
-);
-
-function readManifest(manifestPath) {
-	return JSON.parse(readFileSync(manifestPath, "utf-8"));
-}
-
-test("build writes patched Claude CLI and SDK manifests to dist", () => {
-	const cliManifest = readManifest(cliManifestPath);
-	const sdkManifest = readManifest(sdkManifestPath);
-
-	assert.equal(typeof cliManifest.entry, "string");
-	assert.equal(typeof sdkManifest.entry, "string");
-	assert.equal(
-		resolveClaudeCliPath({ packageDir, sdkPath }),
-		resolvePath(packageDir, "dist", cliManifest.entry.replace(/^\.\//, "")),
-	);
-	assert.equal(
-		resolveClaudeSdkPath({ packageDir, sdkPath }),
-		resolvePath(packageDir, "dist", sdkManifest.entry.replace(/^\.\//, "")),
-	);
-});
-
-test("patched-path helpers fall back to the upstream SDK when manifests are missing", () => {
-	const tempDir = mkdtempSync(resolvePath(tmpdir(), "agentos-claude-test-"));
-	try {
-		assert.equal(
-			resolveClaudeCliPath({ packageDir: tempDir, sdkPath }),
-			resolvePath(dirname(sdkPath), "cli.js"),
-		);
-		assert.equal(resolveClaudeSdkPath({ packageDir: tempDir, sdkPath }), sdkPath);
-	} finally {
-		rmSync(tempDir, { recursive: true, force: true });
-	}
-});
-
-test("patched-path helpers resolve custom manifest entries from dist", () => {
-	const tempDir = mkdtempSync(resolvePath(tmpdir(), "agentos-claude-test-"));
-	try {
-		const distDir = resolvePath(tempDir, "dist");
-		mkdirSync(distDir, { recursive: true });
-		writeFileSync(
-			resolvePath(distDir, "claude-cli-patched.json"),
-			JSON.stringify({ entry: "./custom-cli.mjs" }),
-			"utf-8",
-		);
-		writeFileSync(
-			resolvePath(distDir, "claude-sdk-patched.json"),
-			JSON.stringify({ entry: "./custom-sdk.mjs" }),
-			"utf-8",
-		);
-
-		assert.equal(
-			resolveClaudeCliPath({ packageDir: tempDir, sdkPath }),
-			resolvePath(distDir, "custom-cli.mjs"),
-		);
-		assert.equal(
-			resolveClaudeSdkPath({ packageDir: tempDir, sdkPath }),
-			resolvePath(distDir, "custom-sdk.mjs"),
-		);
-	} finally {
-		rmSync(tempDir, { recursive: true, force: true });
-	}
-});
-
-test("patched CLI keeps stream-json hook events enabled by default", () => {
-	const patchedCliPath = resolveClaudeCliPath({ packageDir, sdkPath });
-	const patchedCliSource = readFileSync(patchedCliPath, "utf-8");
-	const hookForwardingGuard =
-		'if($.outputFormat==="stream-json"&&$.verbose&&process.env.AGENT_OS_CLAUDE_DISABLE_HOOK_EVENTS!=="1")JMK((x)=>{';
-
-	assert.ok(
-		patchedCliSource.includes(hookForwardingGuard),
-		"expected patched CLI to guard stream-json hook events with AGENT_OS_CLAUDE_DISABLE_HOOK_EVENTS",
-	);
-	assert.ok(
-		!patchedCliSource.includes(
-			'if($.outputFormat==="stream-json"&&$.verbose&&false)JMK((x)=>{',
-		),
-		"expected patched CLI to remove the unconditional && false kill-switch",
-	);
-
-	const hookEvents = [];
-	const maybeRegisterHookEvents = (env, options, onHookEvent) => {
-		if (
-			options.outputFormat === "stream-json" &&
-			options.verbose &&
-			env.AGENT_OS_CLAUDE_DISABLE_HOOK_EVENTS !== "1"
-		) {
-			onHookEvent({ type: "hook_event" });
-		}
-	};
-
-	maybeRegisterHookEvents({}, { outputFormat: "stream-json", verbose: true }, (event) =>
-		hookEvents.push(event.type),
-	);
-	assert.deepEqual(hookEvents, ["hook_event"]);
-
-	const disabledHookEvents = [];
-	maybeRegisterHookEvents(
-		{ AGENT_OS_CLAUDE_DISABLE_HOOK_EVENTS: "1" },
-		{ outputFormat: "stream-json", verbose: true },
-		(event) => disabledHookEvents.push(event.type),
-	);
-	assert.deepEqual(disabledHookEvents, []);
-});
diff --git a/registry/agent/claude/tsconfig.json b/registry/agent/claude/tsconfig.json
deleted file mode 100644
index bff731325..000000000
--- a/registry/agent/claude/tsconfig.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"declaration": true,
-		"outDir": "./dist",
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules", "dist"]
-}
diff --git a/registry/agent/codex/package.json b/registry/agent/codex/package.json
deleted file mode 100644
index bdc2e759a..000000000
--- a/registry/agent/codex/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/codex",
-	"version": "0.2.0-rc.3",
-	"type": "module",
-	"license": "Apache-2.0",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js",
-			"default": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "tsc",
-		"check-types": "tsc --noEmit",
-		"test": "pnpm build && node --test tests/*.test.mjs"
-	},
-	"dependencies": {
-		"@agentos-software/codex-cli": "workspace:*"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/registry/agent/codex/src/index.ts b/registry/agent/codex/src/index.ts
deleted file mode 100644
index 232172431..000000000
--- a/registry/agent/codex/src/index.ts
+++ /dev/null
@@ -1 +0,0 @@
-export { default } from "@agentos-software/codex-cli";
diff --git a/registry/agent/codex/tests/package.test.mjs b/registry/agent/codex/tests/package.test.mjs
deleted file mode 100644
index 25592a983..000000000
--- a/registry/agent/codex/tests/package.test.mjs
+++ /dev/null
@@ -1,20 +0,0 @@
-import assert from "node:assert/strict";
-import { readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import test from "node:test";
-import { fileURLToPath } from "node:url";
-import codex from "../dist/index.js";
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-
-test("codex package does not advertise an ACP adapter until the real agent is wired", () => {
-	const manifest = JSON.parse(
-		readFileSync(join(__dirname, "..", "package.json"), "utf8"),
-	);
-
-	assert.equal(manifest.bin, undefined);
-	// The package now re-exports the @agentos-software/codex-cli toolchain
-	// package descriptor ({ packageDir }) instead of a bespoke shape.
-	assert.equal(typeof codex.packageDir, "string");
-	assert.equal(codex.agent, undefined);
-});
diff --git a/registry/agent/codex/tsconfig.json b/registry/agent/codex/tsconfig.json
deleted file mode 100644
index bff731325..000000000
--- a/registry/agent/codex/tsconfig.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"declaration": true,
-		"outDir": "./dist",
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules", "dist"]
-}
diff --git a/registry/agent/opencode/agentos-package.json b/registry/agent/opencode/agentos-package.json
deleted file mode 100644
index 90233c7ad..000000000
--- a/registry/agent/opencode/agentos-package.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-  "name": "opencode",
-  "agent": {
-    "acpEntrypoint": "agentos-opencode-acp",
-    "env": {
-      "OPENCODE_DISABLE_CONFIG_DEP_INSTALL": "1",
-      "OPENCODE_DISABLE_EMBEDDED_WEB_UI": "1"
-    }
-  }
-}
diff --git a/registry/agent/opencode/package.json b/registry/agent/opencode/package.json
deleted file mode 100644
index 7716c0fa9..000000000
--- a/registry/agent/opencode/package.json
+++ /dev/null
@@ -1,33 +0,0 @@
-{
-	"name": "@agentos-software/opencode",
-	"version": "0.2.1",
-	"type": "module",
-	"license": "Apache-2.0",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"bin": {
-		"agentos-opencode-acp": "./dist/adapter.js"
-	},
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js",
-			"default": "./dist/index.js"
-		}
-	},
-	"files": [
-		"dist",
-		"agentos-package.json"
-	],
-	"scripts": {
-		"build": "node ./scripts/build-opencode-acp.mjs && tsc && agentos-toolchain pack . --out dist/package --agent agentos-opencode-acp",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"bun": "1.3.11",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/registry/agent/opencode/scripts/build-opencode-acp.mjs b/registry/agent/opencode/scripts/build-opencode-acp.mjs
deleted file mode 100644
index afdee7947..000000000
--- a/registry/agent/opencode/scripts/build-opencode-acp.mjs
+++ /dev/null
@@ -1,3681 +0,0 @@
-#!/usr/bin/env node
-
-import { createHash } from "node:crypto";
-import {
-	copyFileSync,
-	existsSync,
-	mkdirSync,
-	readFileSync,
-	rmSync,
-	writeFileSync,
-} from "node:fs";
-import { mkdtemp, readdir, readFile, writeFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { dirname, join, resolve } from "node:path";
-import { spawnSync } from "node:child_process";
-import { fileURLToPath } from "node:url";
-
-const SOURCE_REPOSITORY = "anomalyco/opencode";
-const SOURCE_VERSION = "1.3.13";
-const SOURCE_TARBALL_URL = `https://github.com/${SOURCE_REPOSITORY}/archive/refs/tags/v${SOURCE_VERSION}.tar.gz`;
-
-// Upstream `packages/app/package.json` pins `ghostty-web: github:anomalyco/ghostty-web#main`,
-// but the bundled bun.lock snapshots the SHA below. Because `main` is a moving ref, a fresh
-// `bun install --frozen-lockfile` resolves to whatever `main` points at *now* and fails the
-// lockfile check. Rewriting the manifest to the lockfile's SHA before install keeps frozen-
-// lockfile guarantees intact (i.e. CI still breaks loudly if either side drifts) without
-// trusting arbitrary new HEADs on the ghostty-web branch.
-const GHOSTTY_WEB_PINNED_SHA = "4af877d";
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const packageDir = resolve(__dirname, "..");
-const distDir = resolve(packageDir, "dist");
-const cacheDir = resolve(packageDir, "node_modules", ".cache", "opencode-build");
-const patchPath = resolve(packageDir, "upstream", `opencode-v${SOURCE_VERSION}.patch`);
-const bundleDir = resolve(distDir, "opencode-acp");
-const manifestPath = resolve(distDir, "opencode-acp.manifest.json");
-const SQL_JS_VERSION = "1.14.1";
-const bunBin = resolve(
-	packageDir,
-	"node_modules",
-	".bin",
-	process.platform === "win32" ? "bun.cmd" : "bun",
-);
-
-function run(command, args, options = {}) {
-	const result = spawnSync(command, args, {
-		stdio: "inherit",
-		...options,
-	});
-	if (result.status !== 0) {
-		throw new Error(
-			`Command failed (${result.status ?? "unknown"}): ${command} ${args.join(" ")}`,
-		);
-	}
-	return result;
-}
-
-function pinGhosttyWebRef(sourceRoot) {
-	const manifestPath = resolve(sourceRoot, "packages", "app", "package.json");
-	const raw = readFileSync(manifestPath, "utf-8");
-	const movingRef = '"ghostty-web": "github:anomalyco/ghostty-web#main"';
-	const pinnedRef = `"ghostty-web": "github:anomalyco/ghostty-web#${GHOSTTY_WEB_PINNED_SHA}"`;
-	if (raw.includes(pinnedRef)) return;
-	if (!raw.includes(movingRef)) {
-		throw new Error(
-			`Expected ghostty-web ref ${movingRef} in ${manifestPath}; upstream layout changed — re-audit GHOSTTY_WEB_PINNED_SHA before updating.`,
-		);
-	}
-	writeFileSync(manifestPath, raw.replace(movingRef, pinnedRef));
-}
-
-const PATCHED_SOURCE_FILES = [
-	"packages/opencode/src/cli/cmd/acp.ts",
-	"packages/opencode/src/config/config.ts",
-	"packages/opencode/src/plugin/index.ts",
-	"packages/opencode/src/server/instance.ts",
-	"packages/opencode/src/server/server.ts",
-];
-
-async function ensureNodeAcpPatch(sourceRoot, tarballPath) {
-	const serverFile = resolve(
-		sourceRoot,
-		"packages",
-		"opencode",
-		"src",
-		"server",
-		"server.ts",
-	);
-	const pluginFile = resolve(
-		sourceRoot,
-		"packages",
-		"opencode",
-		"src",
-		"plugin",
-		"index.ts",
-	);
-	const acpFile = resolve(
-		sourceRoot,
-		"packages",
-		"opencode",
-		"src",
-		"cli",
-		"cmd",
-		"acp.ts",
-	);
-	const serverSource = readFileSync(serverFile, "utf-8");
-	const pluginSource = readFileSync(pluginFile, "utf-8");
-	const acpSource = readFileSync(acpFile, "utf-8");
-	const alreadyPatched =
-		serverSource.includes('from "node:http"') &&
-		!serverSource.includes('from "hono/bun"') &&
-		pluginSource.includes("Bun shell is unavailable in the Node ACP build") &&
-		acpSource.includes("const server = await Server.listen(opts)");
-
-	if (alreadyPatched) {
-		return;
-	}
-
-	const scratchRoot = await mkdtemp(join(tmpdir(), "agentos-opencode-patch-"));
-	try {
-		run("tar", ["-xzf", tarballPath, "--strip-components=1", "-C", scratchRoot]);
-		run("git", ["apply", "--whitespace=nowarn", patchPath], { cwd: scratchRoot });
-		for (const relativePath of PATCHED_SOURCE_FILES) {
-			copyFileSync(
-				resolve(scratchRoot, relativePath),
-				resolve(sourceRoot, relativePath),
-			);
-		}
-	} finally {
-		rmSync(scratchRoot, { recursive: true, force: true });
-	}
-
-	const verifiedServerSource = readFileSync(serverFile, "utf-8");
-	const verifiedPluginSource = readFileSync(pluginFile, "utf-8");
-	const verifiedAcpSource = readFileSync(acpFile, "utf-8");
-	if (
-		!verifiedServerSource.includes('from "node:http"') ||
-		verifiedServerSource.includes('from "hono/bun"') ||
-		!verifiedPluginSource.includes("Bun shell is unavailable in the Node ACP build") ||
-		!verifiedAcpSource.includes("const server = await Server.listen(opts)")
-	) {
-		throw new Error("Failed to stage the Node ACP patches into the prepared OpenCode source tree");
-	}
-}
-
-async function downloadFile(url, destination) {
-	const response = await fetch(url);
-	if (!response.ok) {
-		throw new Error(`Failed to download ${url}: ${response.status} ${response.statusText}`);
-	}
-
-	const buffer = Buffer.from(await response.arrayBuffer());
-	await writeFile(destination, buffer);
-}
-
-async function readMigrations(sourceRoot) {
-	const migrationRoot = join(sourceRoot, "packages", "opencode", "migration");
-	const entries = (await readdir(migrationRoot, { withFileTypes: true }))
-		.filter((entry) => entry.isDirectory() && /^\d{14}/.test(entry.name))
-		.map((entry) => entry.name)
-		.sort();
-
-	return Promise.all(
-		entries.map(async (name) => {
-			const sql = await readFile(
-				join(migrationRoot, name, "migration.sql"),
-				"utf8",
-			);
-			const match = /^(\d{4})(\d{2})(\d{2})(\d{2})(\d{2})(\d{2})/.exec(name);
-			const timestamp = match
-				? Date.UTC(
-						Number(match[1]),
-						Number(match[2]) - 1,
-						Number(match[3]),
-						Number(match[4]),
-						Number(match[5]),
-						Number(match[6]),
-					)
-				: 0;
-			return { name, sql, timestamp };
-		}),
-	);
-}
-
-async function rewriteSourceFile(sourceRoot, relativePath, transform) {
-	const filePath = resolve(sourceRoot, relativePath);
-	const original = await readFile(filePath, "utf8");
-	const next = transform(original);
-	if (next !== original) {
-		await writeFile(filePath, next);
-	}
-}
-
-async function ensureSqlJsDependency(sourceRoot) {
-	const packageJsonPath = resolve(
-		sourceRoot,
-		"packages",
-		"opencode",
-		"package.json",
-	);
-	const packageJson = JSON.parse(await readFile(packageJsonPath, "utf8"));
-	const dependencies = packageJson.dependencies ?? {};
-	const bunStoreDir = resolve(sourceRoot, "node_modules", ".bun");
-	const hasInstalledSqlJs =
-		existsSync(bunStoreDir) &&
-		(await readdir(bunStoreDir)).some((entry) => entry.startsWith("sql.js@"));
-	if (dependencies["sql.js"] === SQL_JS_VERSION && hasInstalledSqlJs) {
-		return;
-	}
-
-	packageJson.dependencies = {
-		...dependencies,
-		"sql.js": SQL_JS_VERSION,
-	};
-	await writeFile(packageJsonPath, `${JSON.stringify(packageJson, null, 2)}\n`);
-	run(bunBin, ["install"], { cwd: sourceRoot });
-}
-
-async function applyNodeAcpRuntimeTweaks(sourceRoot) {
-	await writeFile(
-		resolve(sourceRoot, "packages/opencode/src/cli/cmd/acp.ts"),
-		`import type { Argv, InferredOptionTypes } from "yargs"
-import { cmd } from "./cmd"
-import { AgentSideConnection, ndJsonStream } from "@agentclientprotocol/sdk"
-import { Log } from "../../util/log"
-
-const options = {
-  port: {
-    type: "number" as const,
-    describe: "port to listen on",
-    default: 0,
-  },
-  hostname: {
-    type: "string" as const,
-    describe: "hostname to listen on",
-    default: "127.0.0.1",
-  },
-  mdns: {
-    type: "boolean" as const,
-    describe: "enable mDNS service discovery (defaults hostname to 0.0.0.0)",
-    default: false,
-  },
-  "mdns-domain": {
-    type: "string" as const,
-    describe: "custom domain name for mDNS service (default: opencode.local)",
-    default: "opencode.local",
-  },
-  cors: {
-    type: "string" as const,
-    array: true,
-    describe: "additional domains to allow for CORS",
-    default: [] as string[],
-  },
-}
-
-type NetworkOptions = InferredOptionTypes<typeof options>
-
-function withNetworkOptions<T>(yargs: Argv<T>) {
-  return yargs.options(options)
-}
-
-async function resolveNetworkOptions(args: NetworkOptions) {
-  const { Config } = await import("../../config/config")
-  const config = await Config.getGlobal()
-  const portExplicitlySet = process.argv.includes("--port")
-  const hostnameExplicitlySet = process.argv.includes("--hostname")
-  const mdnsExplicitlySet = process.argv.includes("--mdns")
-  const mdnsDomainExplicitlySet = process.argv.includes("--mdns-domain")
-  const corsExplicitlySet = process.argv.includes("--cors")
-
-  const mdns = mdnsExplicitlySet ? args.mdns : (config?.server?.mdns ?? args.mdns)
-  const mdnsDomain = mdnsDomainExplicitlySet ? args["mdns-domain"] : (config?.server?.mdnsDomain ?? args["mdns-domain"])
-  const port = portExplicitlySet ? args.port : (config?.server?.port ?? args.port)
-  const hostname = hostnameExplicitlySet
-    ? args.hostname
-    : mdns && !config?.server?.hostname
-      ? "0.0.0.0"
-      : (config?.server?.hostname ?? args.hostname)
-  const configCors = config?.server?.cors ?? []
-  const argsCors = Array.isArray(args.cors) ? args.cors : args.cors ? [args.cors] : []
-  const cors = [...configCors, ...argsCors]
-
-  return { hostname, port, mdns, mdnsDomain, cors }
-}
-
-function wrapData<T>(data: T) {
-  return { data }
-}
-
-async function loadProviderCatalog(directory: string | undefined) {
-  const [{ Config }] = await Promise.all([import("../../config/config")])
-
-  return withDirectory(directory, async () => {
-    const config = await Config.get()
-    const providers: any[] = []
-
-    if (config?.provider?.anthropic || config?.model?.startsWith("anthropic/") || process.env.ANTHROPIC_API_KEY) {
-      providers.push({
-        id: "anthropic",
-        name: "Anthropic",
-        source: "config",
-        env: ["ANTHROPIC_API_KEY"],
-        options: {
-          ...(config?.provider?.anthropic?.options ?? {}),
-        },
-        models: {
-          "claude-sonnet-4-20250514": {
-            id: "claude-sonnet-4-20250514",
-            providerID: "anthropic",
-            api: { id: "claude-sonnet-4-20250514", url: "", npm: "@ai-sdk/anthropic" },
-            name: "Claude Sonnet 4",
-            family: "claude-sonnet-4",
-            capabilities: {
-              temperature: true,
-              reasoning: true,
-              attachment: true,
-              toolcall: true,
-              input: { text: true, audio: false, image: true, video: false, pdf: true },
-              output: { text: true, audio: false, image: false, video: false, pdf: false },
-              interleaved: false,
-            },
-            cost: { input: 0, output: 0, cache: { read: 0, write: 0 } },
-            limit: { context: 200000, output: 32000 },
-            status: "active",
-            options: {},
-            headers: {},
-            release_date: "2025-05-14",
-            variants: {},
-          },
-          "claude-opus-4-1-20250805": {
-            id: "claude-opus-4-1-20250805",
-            providerID: "anthropic",
-            api: { id: "claude-opus-4-1-20250805", url: "", npm: "@ai-sdk/anthropic" },
-            name: "Claude Opus 4.1",
-            family: "claude-opus-4-1",
-            capabilities: {
-              temperature: true,
-              reasoning: true,
-              attachment: true,
-              toolcall: true,
-              input: { text: true, audio: false, image: true, video: false, pdf: true },
-              output: { text: true, audio: false, image: false, video: false, pdf: false },
-              interleaved: false,
-            },
-            cost: { input: 0, output: 0, cache: { read: 0, write: 0 } },
-            limit: { context: 200000, output: 32000 },
-            status: "active",
-            options: {},
-            headers: {},
-            release_date: "2025-08-05",
-            variants: {},
-          },
-          "claude-haiku-4-5-20251001": {
-            id: "claude-haiku-4-5-20251001",
-            providerID: "anthropic",
-            api: { id: "claude-haiku-4-5-20251001", url: "", npm: "@ai-sdk/anthropic" },
-            name: "Claude Haiku 4.5",
-            family: "claude-haiku-4-5",
-            capabilities: {
-              temperature: true,
-              reasoning: false,
-              attachment: true,
-              toolcall: true,
-              input: { text: true, audio: false, image: true, video: false, pdf: true },
-              output: { text: true, audio: false, image: false, video: false, pdf: false },
-              interleaved: false,
-            },
-            cost: { input: 0, output: 0, cache: { read: 0, write: 0 } },
-            limit: { context: 200000, output: 16000 },
-            status: "active",
-            options: {},
-            headers: {},
-            release_date: "2025-10-01",
-            variants: {},
-          },
-        },
-      })
-    }
-
-    if (config?.provider?.openai || config?.model?.startsWith("openai/") || process.env.OPENAI_API_KEY) {
-      providers.push({
-        id: "openai",
-        name: "OpenAI",
-        source: "config",
-        env: ["OPENAI_API_KEY"],
-        options: {
-          ...(config?.provider?.openai?.options ?? {}),
-        },
-        models: {
-          "gpt-5": {
-            id: "gpt-5",
-            providerID: "openai",
-            api: { id: "gpt-5", url: "", npm: "@ai-sdk/openai" },
-            name: "GPT-5",
-            family: "gpt-5",
-            capabilities: {
-              temperature: true,
-              reasoning: true,
-              attachment: true,
-              toolcall: true,
-              input: { text: true, audio: false, image: true, video: false, pdf: true },
-              output: { text: true, audio: false, image: false, video: false, pdf: false },
-              interleaved: false,
-            },
-            cost: { input: 0, output: 0, cache: { read: 0, write: 0 } },
-            limit: { context: 200000, output: 32000 },
-            status: "active",
-            options: {},
-            headers: {},
-            release_date: "2025-01-01",
-            variants: {},
-          },
-          "gpt-5-mini": {
-            id: "gpt-5-mini",
-            providerID: "openai",
-            api: { id: "gpt-5-mini", url: "", npm: "@ai-sdk/openai" },
-            name: "GPT-5 Mini",
-            family: "gpt-5-mini",
-            capabilities: {
-              temperature: true,
-              reasoning: true,
-              attachment: true,
-              toolcall: true,
-              input: { text: true, audio: false, image: true, video: false, pdf: true },
-              output: { text: true, audio: false, image: false, video: false, pdf: false },
-              interleaved: false,
-            },
-            cost: { input: 0, output: 0, cache: { read: 0, write: 0 } },
-            limit: { context: 200000, output: 16000 },
-            status: "active",
-            options: {},
-            headers: {},
-            release_date: "2025-01-01",
-            variants: {},
-          },
-        },
-      })
-    }
-
-    if (
-      config?.provider?.google ||
-      config?.model?.startsWith("google/") ||
-      process.env.GOOGLE_GENERATIVE_AI_API_KEY
-    ) {
-      providers.push({
-        id: "google",
-        name: "Google",
-        source: "config",
-        env: ["GOOGLE_GENERATIVE_AI_API_KEY"],
-        options: {
-          ...(config?.provider?.google?.options ?? {}),
-        },
-        models: {
-          "gemini-2.5-pro": {
-            id: "gemini-2.5-pro",
-            providerID: "google",
-            api: { id: "gemini-2.5-pro", url: "", npm: "@ai-sdk/google" },
-            name: "Gemini 2.5 Pro",
-            family: "gemini-2.5-pro",
-            capabilities: {
-              temperature: true,
-              reasoning: true,
-              attachment: true,
-              toolcall: true,
-              input: { text: true, audio: false, image: true, video: false, pdf: true },
-              output: { text: true, audio: false, image: false, video: false, pdf: false },
-              interleaved: false,
-            },
-            cost: { input: 0, output: 0, cache: { read: 0, write: 0 } },
-            limit: { context: 200000, output: 32000 },
-            status: "active",
-            options: {},
-            headers: {},
-            release_date: "2025-01-01",
-            variants: {},
-          },
-          "gemini-2.5-flash": {
-            id: "gemini-2.5-flash",
-            providerID: "google",
-            api: { id: "gemini-2.5-flash", url: "", npm: "@ai-sdk/google" },
-            name: "Gemini 2.5 Flash",
-            family: "gemini-2.5-flash",
-            capabilities: {
-              temperature: true,
-              reasoning: true,
-              attachment: true,
-              toolcall: true,
-              input: { text: true, audio: false, image: true, video: false, pdf: true },
-              output: { text: true, audio: false, image: false, video: false, pdf: false },
-              interleaved: false,
-            },
-            cost: { input: 0, output: 0, cache: { read: 0, write: 0 } },
-            limit: { context: 200000, output: 16000 },
-            status: "active",
-            options: {},
-            headers: {},
-            release_date: "2025-01-01",
-            variants: {},
-          },
-        },
-      })
-    }
-
-    if (
-      config?.provider?.["google-vertex"] ||
-      config?.model?.startsWith("google-vertex/") ||
-      (process.env.GOOGLE_VERTEX_PROJECT && process.env.GOOGLE_VERTEX_LOCATION)
-    ) {
-      providers.push({
-        id: "google-vertex",
-        name: "Google Vertex",
-        source: "config",
-        env: [],
-        options: {
-          ...(config?.provider?.["google-vertex"]?.options ?? {}),
-        },
-        models: {
-          "gemini-2.5-pro": {
-            id: "gemini-2.5-pro",
-            providerID: "google-vertex",
-            api: { id: "gemini-2.5-pro", url: "", npm: "@ai-sdk/google-vertex" },
-            name: "Gemini 2.5 Pro",
-            family: "gemini-2.5-pro",
-            capabilities: {
-              temperature: true,
-              reasoning: true,
-              attachment: true,
-              toolcall: true,
-              input: { text: true, audio: false, image: true, video: false, pdf: true },
-              output: { text: true, audio: false, image: false, video: false, pdf: false },
-              interleaved: false,
-            },
-            cost: { input: 0, output: 0, cache: { read: 0, write: 0 } },
-            limit: { context: 200000, output: 32000 },
-            status: "active",
-            options: {},
-            headers: {},
-            release_date: "2025-01-01",
-            variants: {},
-          },
-        },
-      })
-    }
-
-    if (config?.provider?.groq || config?.model?.startsWith("groq/") || process.env.GROQ_API_KEY) {
-      providers.push({
-        id: "groq",
-        name: "Groq",
-        source: "config",
-        env: ["GROQ_API_KEY"],
-        options: {
-          ...(config?.provider?.groq?.options ?? {}),
-        },
-        models: {
-          "llama-3.3-70b-versatile": {
-            id: "llama-3.3-70b-versatile",
-            providerID: "groq",
-            api: { id: "llama-3.3-70b-versatile", url: "", npm: "@ai-sdk/groq" },
-            name: "Llama 3.3 70B Versatile",
-            family: "llama-3.3-70b",
-            capabilities: {
-              temperature: true,
-              reasoning: true,
-              attachment: false,
-              toolcall: true,
-              input: { text: true, audio: false, image: false, video: false, pdf: false },
-              output: { text: true, audio: false, image: false, video: false, pdf: false },
-              interleaved: false,
-            },
-            cost: { input: 0, output: 0, cache: { read: 0, write: 0 } },
-            limit: { context: 200000, output: 32000 },
-            status: "active",
-            options: {},
-            headers: {},
-            release_date: "2025-01-01",
-            variants: {},
-          },
-        },
-      })
-    }
-
-    if (config?.provider?.mistral || config?.model?.startsWith("mistral/") || process.env.MISTRAL_API_KEY) {
-      providers.push({
-        id: "mistral",
-        name: "Mistral",
-        source: "config",
-        env: ["MISTRAL_API_KEY"],
-        options: {
-          ...(config?.provider?.mistral?.options ?? {}),
-        },
-        models: {
-          "mistral-small-latest": {
-            id: "mistral-small-latest",
-            providerID: "mistral",
-            api: { id: "mistral-small-latest", url: "", npm: "@ai-sdk/mistral" },
-            name: "Mistral Small Latest",
-            family: "mistral-small",
-            capabilities: {
-              temperature: true,
-              reasoning: true,
-              attachment: true,
-              toolcall: true,
-              input: { text: true, audio: false, image: true, video: false, pdf: true },
-              output: { text: true, audio: false, image: false, video: false, pdf: false },
-              interleaved: false,
-            },
-            cost: { input: 0, output: 0, cache: { read: 0, write: 0 } },
-            limit: { context: 200000, output: 32000 },
-            status: "active",
-            options: {},
-            headers: {},
-            release_date: "2025-01-01",
-            variants: {},
-          },
-        },
-      })
-    }
-
-    if (providers.length === 0) {
-      providers.push({
-        id: "anthropic",
-        name: "Anthropic",
-        source: "custom",
-        env: ["ANTHROPIC_API_KEY"],
-        options: {},
-        models: {
-          "claude-sonnet-4-20250514": {
-            id: "claude-sonnet-4-20250514",
-            providerID: "anthropic",
-            api: { id: "claude-sonnet-4-20250514", url: "", npm: "@ai-sdk/anthropic" },
-            name: "Claude Sonnet 4",
-            family: "claude-sonnet-4",
-            capabilities: {
-              temperature: true,
-              reasoning: true,
-              attachment: true,
-              toolcall: true,
-              input: { text: true, audio: false, image: true, video: false, pdf: true },
-              output: { text: true, audio: false, image: false, video: false, pdf: false },
-              interleaved: false,
-            },
-            cost: { input: 0, output: 0, cache: { read: 0, write: 0 } },
-            limit: { context: 200000, output: 32000 },
-            status: "active",
-            options: {},
-            headers: {},
-            release_date: "2025-05-14",
-            variants: {},
-          },
-        },
-      })
-    }
-
-    const defaults = Object.fromEntries(
-      providers.map((provider) => {
-        const specifiedModel =
-          typeof config.model === "string" && config.model.startsWith(provider.id + "/")
-            ? config.model.slice(provider.id.length + 1)
-            : undefined
-        return [
-          provider.id,
-          specifiedModel ?? Object.keys(provider.models)[0] ?? "",
-        ]
-      }),
-    )
-
-    return { providers, default: defaults }
-  })
-}
-
-async function runServiceWithCurrentInstance<T>(
-  serviceModule: { Service: any; defaultLayer: any },
-  ctx: any,
-  fn: (service: any) => any,
-): Promise<T> {
-  const [{ Effect, ManagedRuntime }, { InstanceRef }, { memoMap }, { Instance }] = await Promise.all([
-    import("effect"),
-    import("../../effect/instance-ref"),
-    import("../../effect/run-service"),
-    import("../../project/instance"),
-  ])
-  console.error("[opencode-acp] serviceRuntime:ctx", ctx.directory)
-  ;(globalThis as typeof globalThis & { __agentosOpencodeInstanceFallback?: unknown }).__agentosOpencodeInstanceFallback =
-    ctx
-  const runtime = ManagedRuntime.make(serviceModule.defaultLayer, { memoMap })
-  try {
-    const result = await Instance.restore(
-      ctx,
-      () =>
-        runtime.runPromise(
-          Effect.provideService(serviceModule.Service.use(fn), InstanceRef, ctx),
-        ),
-    )
-    console.error("[opencode-acp] serviceRuntime:done", ctx.directory)
-    return result
-  } catch (error) {
-    console.error(
-      "[opencode-acp] serviceRuntime:error",
-      error instanceof Error ? error.stack ?? error.message : String(error),
-    )
-    throw error
-  }
-}
-
-async function loadAgentCatalog(directory: string | undefined) {
-  const { Config } = await import("../../config/config")
-
-  return withDirectory(directory, async () => {
-    const cfg = await Config.get()
-    const agents = new Map<string, any>([
-      [
-        "build",
-        {
-          name: "build",
-          description: "The default agent. Executes tools based on configured permissions.",
-          mode: "primary",
-        },
-      ],
-      [
-        "plan",
-        {
-          name: "plan",
-          description: "Plan mode. Disallows all edit tools.",
-          mode: "primary",
-        },
-      ],
-      [
-        "general",
-        {
-          name: "general",
-          description:
-            "General-purpose agent for researching complex questions and executing multi-step tasks. Use this agent to execute multiple units of work in parallel.",
-          mode: "subagent",
-        },
-      ],
-      [
-        "explore",
-        {
-          name: "explore",
-          description:
-            "Fast agent specialized for exploring codebases. Use this when you need to quickly find files, search code, or answer questions about the codebase.",
-          mode: "subagent",
-        },
-      ],
-      ["compaction", { name: "compaction", mode: "primary", hidden: true }],
-      ["title", { name: "title", mode: "primary", hidden: true }],
-      ["summary", { name: "summary", mode: "primary", hidden: true }],
-    ])
-
-    for (const [key, value] of Object.entries(cfg.agent ?? {})) {
-      if (value?.disable) {
-        agents.delete(key)
-        continue
-      }
-      const current = agents.get(key) ?? {
-        name: key,
-        mode: "all",
-      }
-      agents.set(key, {
-        ...current,
-        ...(value?.name ? { name: value.name } : {}),
-        ...(value?.description ? { description: value.description } : {}),
-        ...(value?.mode ? { mode: value.mode } : {}),
-        ...(value?.hidden !== undefined ? { hidden: value.hidden } : {}),
-      })
-    }
-
-    const defaultAgent = cfg.default_agent ?? "build"
-    return Array.from(agents.values()).sort((a, b) => {
-      const aRank = a.name === defaultAgent ? 0 : 1
-      const bRank = b.name === defaultAgent ? 0 : 1
-      if (aRank !== bRank) return aRank - bRank
-      return a.name.localeCompare(b.name)
-    })
-  })
-}
-
-async function loadCommandCatalog(directory: string | undefined) {
-  const { Config } = await import("../../config/config")
-
-  return withDirectory(directory, async () => {
-    const cfg = await Config.get()
-    const commands = new Map<string, any>([
-      ["init", { name: "init", description: "create/update AGENTS.md" }],
-      ["review", { name: "review", description: "review changes [commit|branch|pr], defaults to uncommitted" }],
-    ])
-
-    for (const [name, command] of Object.entries(cfg.command ?? {})) {
-      commands.set(name, {
-        name,
-        ...(command?.description ? { description: command.description } : {}),
-      })
-    }
-
-    return Array.from(commands.values()).sort((a, b) => a.name.localeCompare(b.name))
-  })
-}
-
-async function withDirectory<T>(
-  directory: string | undefined,
-  fn: (ctx: any) => Promise<T>,
-): Promise<T> {
-  console.error("[opencode-acp] withDirectory:start", directory ?? process.cwd())
-  const [{ Instance }, { InstanceBootstrap }] = await Promise.all([
-    import("../../project/instance"),
-    import("../../project/bootstrap"),
-  ])
-  console.error("[opencode-acp] withDirectory:modules:done", directory ?? process.cwd())
-  return Instance.provide({
-    directory: directory ?? process.cwd(),
-    init: InstanceBootstrap,
-    fn: () => {
-      const ctx = Instance.current
-      ;(globalThis as typeof globalThis & { __agentosOpencodeInstanceFallback?: unknown }).__agentosOpencodeInstanceFallback =
-        ctx
-      return fn(ctx)
-    },
-  })
-}
-
-async function ensureProjectors() {
-  if ((globalThis as any).__agentosOpencodeProjectorsReady) return
-  console.error("[opencode-acp] projectors:ensure:start")
-  const [{ SyncEvent }, { default: sessionProjectors }] = await Promise.all([
-    import("../../sync"),
-    import("../../session/projectors"),
-  ])
-  SyncEvent.init({
-    projectors: sessionProjectors,
-  })
-  ;(globalThis as any).__agentosOpencodeProjectorsReady = true
-  console.error("[opencode-acp] projectors:ensure:done")
-}
-
-async function createGlobalEventStream(signal?: AbortSignal) {
-  const { GlobalBus } = await import("../../bus/global")
-  let closed = false
-  const queue: any[] = []
-  let nextResolve: ((result: IteratorResult<any>) => void) | undefined
-
-  const close = () => {
-    if (closed) return
-    closed = true
-    GlobalBus.off("event", onEvent)
-    signal?.removeEventListener("abort", close)
-    nextResolve?.({ done: true, value: undefined })
-    nextResolve = undefined
-  }
-
-  const onEvent = (event: any) => {
-    if (closed) return
-    if (nextResolve) {
-      const resolve = nextResolve
-      nextResolve = undefined
-      resolve({ done: false, value: event })
-      return
-    }
-    queue.push(event)
-  }
-
-  GlobalBus.on("event", onEvent)
-  if (signal) {
-    if (signal.aborted) close()
-    else signal.addEventListener("abort", close, { once: true })
-  }
-
-  return {
-    stream: (async function* () {
-      try {
-        while (true) {
-          if (queue.length > 0) {
-            yield queue.shift()
-            continue
-          }
-
-          const next = await new Promise<IteratorResult<any>>((resolve) => {
-            nextResolve = resolve
-          })
-          if (next.done) return
-          yield next.value
-        }
-      } finally {
-        close()
-      }
-    })(),
-  }
-}
-
-function createLocalSdk() {
-  return {
-    global: {
-      event: async ({ signal }: { signal?: AbortSignal }) => createGlobalEventStream(signal),
-    },
-    permission: {
-      reply: async ({ requestID, reply, directory }: any) =>
-        wrapData(
-          await withDirectory(directory, async () => {
-            const { Permission } = await import("../../permission")
-            await Permission.reply({ requestID, reply })
-            return true
-          }),
-        ),
-    },
-    config: {
-      get: async ({ directory }: any) =>
-        wrapData(
-          await (async () => {
-            const { Config } = await import("../../config/config")
-            return withDirectory(directory, async () => {
-              console.error("[opencode-acp] sdk.config.get:start", directory ?? process.cwd())
-              const result = await Config.get()
-              console.error("[opencode-acp] sdk.config.get:done", directory ?? process.cwd())
-              return result
-            })
-          })(),
-        ),
-      providers: async ({ directory }: any) =>
-        wrapData(
-          await (async () => {
-            console.error("[opencode-acp] sdk.config.providers:start", directory ?? process.cwd())
-            return withDirectory(directory, async () => {
-              const result = await loadProviderCatalog(directory)
-              console.error(
-                "[opencode-acp] sdk.config.providers:done",
-                directory ?? process.cwd(),
-                result.providers.length,
-              )
-              return result
-            })
-          })(),
-        ),
-    },
-    app: {
-      agents: async ({ directory }: any) =>
-        wrapData(
-          await loadAgentCatalog(directory),
-        ),
-    },
-    command: {
-      list: async ({ directory }: any) =>
-        wrapData(
-          await loadCommandCatalog(directory),
-        ),
-    },
-    mcp: {
-      add: async ({ directory, name, config }: any) =>
-        wrapData(
-          await (async () => {
-            const { MCP } = await import("../../mcp")
-            return withDirectory(directory, async () => MCP.add(name, config))
-          })(),
-        ),
-    },
-    session: {
-      create: async ({ directory, title, permission, workspaceID, parentID }: any) =>
-        wrapData(
-          await (async () => {
-            await ensureProjectors()
-            return withDirectory(directory, async (ctx) => {
-              const { Session } = await import("../../session")
-              console.error("[opencode-acp] sdk.session.create:start", directory ?? process.cwd())
-              try {
-                const result = await runServiceWithCurrentInstance(Session, ctx, (service) =>
-                  service.create({
-                    ...(title ? { title } : {}),
-                    ...(permission ? { permission } : {}),
-                    ...(workspaceID ? { workspaceID } : {}),
-                    ...(parentID ? { parentID } : {}),
-                  }),
-                )
-                console.error("[opencode-acp] sdk.session.create:done", directory ?? process.cwd())
-                return result
-              } catch (error) {
-                console.error(
-                  "[opencode-acp] sdk.session.create:error",
-                  error instanceof Error ? error.stack ?? error.message : String(error),
-                )
-                throw error
-              }
-            })
-          })(),
-        ),
-      get: async ({ sessionID, directory }: any) =>
-        wrapData(
-          await (async () => {
-            const { Session } = await import("../../session")
-            return withDirectory(directory, async (ctx) =>
-              runServiceWithCurrentInstance(Session, ctx, (service) => service.get(sessionID)),
-            )
-          })(),
-        ),
-      list: async ({ directory, roots, start, search, limit }: any) =>
-        wrapData(
-          await (async () => {
-            const { Session } = await import("../../session")
-            return withDirectory(directory, async (ctx) => {
-              return runServiceWithCurrentInstance(Session, ctx, (service) =>
-                service.list({ directory, roots, start, search, limit }),
-              )
-            })
-          })(),
-        ),
-      fork: async ({ sessionID, messageID, directory }: any) =>
-        wrapData(
-          await (async () => {
-            const { Session } = await import("../../session")
-            await ensureProjectors()
-            return withDirectory(directory, async (ctx) =>
-              runServiceWithCurrentInstance(Session, ctx, (service) =>
-                service.fork({
-                  sessionID,
-                  ...(messageID ? { messageID } : {}),
-                }),
-              ),
-            )
-          })(),
-        ),
-      messages: async ({ sessionID, limit, directory }: any) =>
-        wrapData(
-          await (async () => {
-            const { Session } = await import("../../session")
-            return withDirectory(directory, async (ctx) =>
-              runServiceWithCurrentInstance(Session, ctx, (service) =>
-                service.messages({ sessionID, ...(limit ? { limit } : {}) }),
-              ),
-            )
-          })(),
-        ),
-      message: async ({ sessionID, messageID, directory }: any) =>
-        wrapData(
-          await (async () => {
-            const { MessageV2 } = await import("../../session/message-v2")
-            return withDirectory(directory, async () => MessageV2.get({ sessionID, messageID }))
-          })(),
-        ),
-      prompt: async ({ sessionID, directory, ...input }: any) =>
-        wrapData(
-          await (async () => {
-            const { SessionPrompt } = await import("../../session/prompt")
-            await ensureProjectors()
-            return withDirectory(directory, async (ctx) =>
-              runServiceWithCurrentInstance(SessionPrompt, ctx, (service) =>
-                service.prompt({ sessionID, ...input }),
-              ),
-            )
-          })(),
-        ),
-      command: async ({ sessionID, directory, ...input }: any) =>
-        wrapData(
-          await (async () => {
-            const { SessionPrompt } = await import("../../session/prompt")
-            await ensureProjectors()
-            return withDirectory(directory, async (ctx) =>
-              runServiceWithCurrentInstance(SessionPrompt, ctx, (service) =>
-                service.command({ sessionID, ...input }),
-              ),
-            )
-          })(),
-        ),
-      summarize: async ({ sessionID, directory, providerID, modelID, auto = false }: any) =>
-        wrapData(
-          await (async () => {
-            const [{ Session }, { SessionRevert }, { SessionCompaction }, { SessionPrompt }, { Agent }] =
-              await Promise.all([
-                import("../../session"),
-                import("../../session/revert"),
-                import("../../session/compaction"),
-                import("../../session/prompt"),
-                import("../../agent/agent"),
-              ])
-            await ensureProjectors()
-            return withDirectory(directory, async (ctx) => {
-              const session = await Session.get(sessionID)
-              await SessionRevert.cleanup(session)
-              const messages = await Session.messages({ sessionID })
-              let currentAgent = await Agent.defaultAgent()
-              for (let i = messages.length - 1; i >= 0; i--) {
-                const info = messages[i].info
-                if (info.role === "user") {
-                  currentAgent = info.agent || (await Agent.defaultAgent())
-                  break
-                }
-              }
-              await SessionCompaction.create({
-                sessionID,
-                agent: currentAgent,
-                model: { providerID, modelID },
-                auto,
-              })
-              await runServiceWithCurrentInstance(SessionPrompt, ctx, (service) =>
-                service.loop({ sessionID }),
-              )
-              return true
-            })
-          })(),
-        ),
-      abort: async ({ sessionID, directory }: any) =>
-        wrapData(
-          await (async () => {
-            const { SessionPrompt } = await import("../../session/prompt")
-            return withDirectory(directory, async (ctx) => {
-              await runServiceWithCurrentInstance(SessionPrompt, ctx, (service) =>
-                service.cancel(sessionID),
-              )
-              return true
-            })
-          })(),
-        ),
-    },
-  } as any
-}
-
-export const AcpCommand = cmd({
-  command: "acp",
-  describe: "start ACP (Agent Client Protocol) server",
-  builder: (yargs) => {
-    return withNetworkOptions(yargs).option("cwd", {
-      describe: "working directory",
-      type: "string",
-      default: process.cwd(),
-    })
-  },
-  handler: async (args: NetworkOptions) => {
-    process.env.OPENCODE_CLIENT = "acp"
-    process.env.OPENCODE_DISABLE_MODELS_FETCH = process.env.OPENCODE_DISABLE_MODELS_FETCH ?? "1"
-    process.env.OPENCODE_DISABLE_DEFAULT_PLUGINS = process.env.OPENCODE_DISABLE_DEFAULT_PLUGINS ?? "1"
-    const [{ ACP }] = await Promise.all([import("../../acp/agent")])
-
-    const log = Log.create({ service: "acp-command" })
-    console.error("[opencode-acp] bootstrap:entered")
-    console.error("[opencode-acp] network:resolve:start")
-    const opts = await resolveNetworkOptions(args)
-    console.error("[opencode-acp] network:resolve:done", JSON.stringify(opts))
-
-    console.error("[opencode-acp] sdk:create:start")
-    const sdk = createLocalSdk()
-    console.error("[opencode-acp] sdk:create:done")
-
-    console.error("[opencode-acp] streams:create:start")
-    const input = new WritableStream<Uint8Array>({
-      write(chunk) {
-        return new Promise<void>((resolve, reject) => {
-          process.stdout.write(chunk, (err) => {
-            if (err) {
-              reject(err)
-            } else {
-              resolve()
-            }
-          })
-        })
-      },
-    })
-    const output = new ReadableStream<Uint8Array>({
-      start(controller) {
-        process.stdin.on("data", (chunk: Buffer) => {
-          controller.enqueue(new Uint8Array(chunk))
-        })
-        process.stdin.on("end", () => controller.close())
-        process.stdin.on("error", (err) => controller.error(err))
-      },
-    })
-    console.error("[opencode-acp] streams:create:done")
-
-    console.error("[opencode-acp] ndjson:start")
-    const stream = ndJsonStream(input, output)
-    console.error("[opencode-acp] ndjson:done")
-    console.error("[opencode-acp] agent:init:start")
-    const agent = await ACP.init({ sdk })
-    console.error("[opencode-acp] agent:init:done")
-
-    console.error("[opencode-acp] connection:start")
-    new AgentSideConnection((conn) => {
-      return agent.create(conn, { sdk })
-    }, stream)
-    console.error("[opencode-acp] connection:done")
-
-    log.info("setup connection")
-    process.stdin.resume()
-    await new Promise((resolve, reject) => {
-      process.stdin.on("end", resolve)
-      process.stdin.on("error", reject)
-    })
-  },
-})
-`,
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/server/instance.ts",
-		(contents) =>
-			contents
-				.replace('import { TuiRoutes } from "./routes/tui"\n', "")
-				.replace('import { PtyRoutes } from "./routes/pty"\n', "")
-				.replace('    .route("/pty", PtyRoutes())\n', "")
-				.replace('    .route("/tui", TuiRoutes())\n', ""),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/agent/agent.ts",
-		(contents) =>
-			contents.replace(
-				`                    [path.relative(Instance.worktree, path.join(Global.Path.data, path.join("plans", "*.md")))]:
-                      "allow",`,
-				`                    [path.relative(ctx.worktree, path.join(Global.Path.data, path.join("plans", "*.md")))]:
-                      "allow",`,
-			),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/shell/shell.ts",
-		(contents) => contents.replaceAll("Bun.which(", "which("),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/server/server.ts",
-		(contents) =>
-			contents
-				.replace('import { MDNS } from "./mdns"\n', "")
-				.replace(
-					`    if (shouldPublishMDNS) {
-      MDNS.publish(server.port, opts.mdnsDomain)
-    } else if (opts.mdns) {`,
-					`    let mdns:
-      | {
-          publish(port: number, domain?: string): void
-          unpublish(): void
-        }
-      | undefined
-    if (shouldPublishMDNS) {
-      ;({ MDNS: mdns } = await import("./mdns"))
-      mdns.publish(server.port, opts.mdnsDomain)
-    } else if (opts.mdns) {`,
-				)
-				.replace(
-					"      if (shouldPublishMDNS) MDNS.unpublish()\n",
-					"      if (shouldPublishMDNS) mdns?.unpublish()\n",
-				),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/project/bootstrap.ts",
-		(contents) =>
-			contents.replace(
-				`  Bus.subscribe(Command.Event.Executed, async (payload) => {
-    if (payload.properties.name === Command.Default.INIT) {
-      Project.setInitialized(Instance.project.id)
-    }
-  })
-`,
-				`  Log.Default.info("bootstrap step", { step: "bus.subscribe:skipped" })
-`,
-			),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/acp/agent.ts",
-		(contents) =>
-			contents
-				.replaceAll(
-					`      console.error("[opencode-acp] agent.loadSessionMode:commands:done", directory, commands.length)
-`,
-					"",
-				)
-				.replace(
-					`          const defaultAgentName = await AgentModule.defaultAgent()
-          const resolvedModeId =
-            availableModes.find((mode) => mode.name === defaultAgentName)?.id ?? availableModes[0].id
-`,
-					`          const resolvedModeId = availableModes[0].id
-`,
-				)
-				.replace(
-					`        const model = await defaultModel(this.config, directory)
-`,
-					`        console.error("[opencode-acp] agent.newSession:defaultModel:start", directory)
-        const model = await defaultModel(this.config, directory)
-        console.error("[opencode-acp] agent.newSession:defaultModel:done", directory, model.providerID, model.modelID)
-`,
-				)
-				.replace(
-					`        const state = await this.sessionManager.create(params.cwd, params.mcpServers, model)
-`,
-					`        console.error("[opencode-acp] agent.newSession:sessionManager.create:start", directory)
-        const state = await this.sessionManager.create(params.cwd, params.mcpServers, model)
-        console.error("[opencode-acp] agent.newSession:sessionManager.create:done", directory, state.id)
-`,
-				)
-				.replace(
-					`        const load = await this.loadSessionMode({
-`,
-					`        console.error("[opencode-acp] agent.newSession:loadSessionMode:start", directory)
-        const load = await this.loadSessionMode({
-`,
-				)
-				.replace(
-					`      const providers = await this.sdk.config.providers({ directory }).then((x) => x.data!.providers)
-`,
-					`      console.error("[opencode-acp] agent.loadSessionMode:providers:start", directory)
-      const providers = await this.sdk.config.providers({ directory }).then((x) => x.data!.providers)
-      console.error("[opencode-acp] agent.loadSessionMode:providers:done", directory, providers.length)
-`,
-				)
-				.replace(
-					`      const modeState = await this.resolveModeState(directory, sessionId)
-`,
-					`      console.error("[opencode-acp] agent.loadSessionMode:resolveModeState:start", directory)
-      const modeState = await this.resolveModeState(directory, sessionId)
-      console.error("[opencode-acp] agent.loadSessionMode:resolveModeState:done", directory, modeState.availableModes.length)
-`,
-				)
-				.replace(
-					`      const commands = await this.config.sdk.command
-`,
-					`      console.error("[opencode-acp] agent.loadSessionMode:commands:start", directory)
-      const commands = await this.config.sdk.command
-`,
-				),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/project/bootstrap.ts",
-		(contents) =>
-			contents.replace(
-				`  Log.Default.info("bootstrap step", { step: "snapshot.init:start" })
-  Snapshot.init()
-  Log.Default.info("bootstrap step", { step: "snapshot.init:done" })
-`,
-				`  Log.Default.info("bootstrap step", { step: "snapshot.init:skipped" })
-`,
-			),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/util/filesystem.ts",
-		(contents) => {
-			if (contents.includes("cachedAgentOsGuestPathMappings")) {
-				return contents;
-			}
-
-			return contents
-				.replace(
-					'import { dirname, join, relative, resolve as pathResolve, win32 } from "path"\n',
-					`import { dirname, join, relative, resolve as pathResolve, win32 } from "path"
-
-type AgentOsGuestPathMapping = {
-  guestPath?: string
-  hostPath?: string
-}
-
-let cachedAgentOsGuestPathMappings:
-  | Array<{ guestPath: string; hostPath: string }>
-  | undefined
-
-function runtimeWindowsPath(p: string): string {
-  if (process.platform !== "win32") return p
-  return p
-    .replace(/^\\/([a-zA-Z]):(?:[\\\\/]|$)/, (_, drive) => \`\${drive.toUpperCase()}:/\`)
-    .replace(/^\\/([a-zA-Z])(?:\\/|$)/, (_, drive) => \`\${drive.toUpperCase()}:/\`)
-    .replace(/^\\/cygdrive\\/([a-zA-Z])(?:\\/|$)/, (_, drive) => \`\${drive.toUpperCase()}:/\`)
-    .replace(/^\\/mnt\\/([a-zA-Z])(?:\\/|$)/, (_, drive) => \`\${drive.toUpperCase()}:/\`)
-}
-
-function agentOsGuestPathMappings() {
-  if (cachedAgentOsGuestPathMappings) return cachedAgentOsGuestPathMappings
-  const raw = process.env.AGENT_OS_GUEST_PATH_MAPPINGS
-  if (!raw) {
-    cachedAgentOsGuestPathMappings = []
-    return cachedAgentOsGuestPathMappings
-  }
-
-  try {
-    const parsed = JSON.parse(raw)
-    if (!Array.isArray(parsed)) {
-      cachedAgentOsGuestPathMappings = []
-      return cachedAgentOsGuestPathMappings
-    }
-
-    cachedAgentOsGuestPathMappings = parsed
-      .filter(
-        (item): item is AgentOsGuestPathMapping =>
-          typeof item === "object" &&
-          item !== null &&
-          typeof item.guestPath === "string" &&
-          typeof item.hostPath === "string",
-      )
-      .map((item) => ({
-        guestPath: item.guestPath === "/" ? "/" : pathResolve(runtimeWindowsPath(item.guestPath)),
-        hostPath: pathResolve(runtimeWindowsPath(item.hostPath)),
-      }))
-      .sort((left, right) => right.guestPath.length - left.guestPath.length)
-    return cachedAgentOsGuestPathMappings
-  } catch {
-    cachedAgentOsGuestPathMappings = []
-    return cachedAgentOsGuestPathMappings
-  }
-}
-
-function runtimePath(p: string): string {
-  if (!p.startsWith("/")) return p
-
-  const normalized = pathResolve(runtimeWindowsPath(p))
-  for (const mapping of agentOsGuestPathMappings()) {
-    if (
-      mapping.guestPath !== "/" &&
-      normalized !== mapping.guestPath &&
-      !normalized.startsWith(\`\${mapping.guestPath}/\`)
-    ) {
-      continue
-    }
-
-    const suffix =
-      mapping.guestPath === "/"
-        ? normalized.slice(1)
-        : normalized.slice(mapping.guestPath.length).replace(/^[/\\\\]+/, "")
-    return suffix ? join(mapping.hostPath, suffix) : mapping.hostPath
-  }
-
-  return p
-}
-`,
-				)
-				.replace(
-					`    return existsSync(p)
-`,
-					`    return existsSync(runtimePath(p))
-`,
-				)
-				.replace(
-					`      return statSync(p).isDirectory()
-`,
-					`      return statSync(runtimePath(p)).isDirectory()
-`,
-				)
-				.replace(
-					`    return statSync(p, { throwIfNoEntry: false }) ?? undefined
-`,
-					`    return statSync(runtimePath(p), { throwIfNoEntry: false }) ?? undefined
-`,
-				)
-				.replace(
-					`    return statFile(p).catch((e) => {
-`,
-					`    return statFile(runtimePath(p)).catch((e) => {
-`,
-				)
-				.replace(
-					`    return readFile(p, "utf-8")
-`,
-					`    return readFile(runtimePath(p), "utf-8")
-`,
-				)
-				.replace(
-					`    return JSON.parse(await readFile(p, "utf-8"))
-`,
-					`    return JSON.parse(await readFile(runtimePath(p), "utf-8"))
-`,
-				)
-				.replace(
-					`    return readFile(p)
-`,
-					`    return readFile(runtimePath(p))
-`,
-				)
-				.replace(
-					`    const buf = await readFile(p)
-`,
-					`    const buf = await readFile(runtimePath(p))
-`,
-				)
-				.replace(
-					`    try {
-      if (mode) {
-        await writeFile(p, content, { mode })
-      } else {
-        await writeFile(p, content)
-      }
-    } catch (e) {
-      if (isEnoent(e)) {
-        await mkdir(dirname(p), { recursive: true })
-        if (mode) {
-          await writeFile(p, content, { mode })
-        } else {
-          await writeFile(p, content)
-        }
-        return
-      }
-      throw e
-    }
-`,
-					`    const target = runtimePath(p)
-    try {
-      if (mode) {
-        await writeFile(target, content, { mode })
-      } else {
-        await writeFile(target, content)
-      }
-    } catch (e) {
-      if (isEnoent(e)) {
-        await mkdir(dirname(target), { recursive: true })
-        if (mode) {
-          await writeFile(target, content, { mode })
-        } else {
-          await writeFile(target, content)
-        }
-        return
-      }
-      throw e
-    }
-`,
-				)
-				.replace(
-					`    const dir = dirname(p)
-`,
-					`    const target = runtimePath(p)
-    const dir = dirname(target)
-`,
-				)
-				.replace(
-					`    const writeStream = createWriteStream(p)
-`,
-					`    const writeStream = createWriteStream(target)
-`,
-				)
-				.replace(
-					`      await chmod(p, mode)
-`,
-					`      await chmod(target, mode)
-`,
-				);
-		},
-	);
-
-	for (const relativePath of [
-		"packages/opencode/src/cli/cmd/mcp.ts",
-		"packages/opencode/src/config/config.ts",
-		"packages/opencode/src/config/migrate-tui-config.ts",
-		"packages/opencode/src/config/paths.ts",
-		"packages/opencode/src/plugin/install.ts",
-	]) {
-		await rewriteSourceFile(sourceRoot, relativePath, (contents) =>
-			contents.replaceAll(
-				'"jsonc-parser"',
-				'"jsonc-parser/lib/esm/main.js"',
-			),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/plugin/index.ts",
-		(contents) =>
-			contents.replace(
-				`  const state = Instance.state(async () => {
-    const client = createOpencodeClient({
-`,
-				`  const state = Instance.state(async () => {
-    if (Flag.OPENCODE_CLIENT === "acp") {
-      log.info("skipping plugin runtime in ACP mode")
-      return {
-        hooks: [],
-        input: {
-          client: undefined as any,
-          project: Instance.project,
-          worktree: Instance.worktree,
-          directory: Instance.directory,
-          serverUrl: "",
-          $: Bun.$,
-        } as PluginInput,
-      }
-    }
-
-    const client = createOpencodeClient({
-`,
-			),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/session/index.ts",
-		(contents) =>
-			contents
-				.replace('import { SessionPrompt } from "./prompt"\n', "")
-				.replace('import { Command } from "../command"\n', "")
-				.replace(
-					`      const initialize = Effect.fn("Session.initialize")(function* (input: {
-        sessionID: SessionID
-        modelID: ModelID
-        providerID: ProviderID
-        messageID: MessageID
-      }) {
-        yield* Effect.promise(() =>
-          SessionPrompt.command({
-            sessionID: input.sessionID,
-            messageID: input.messageID,
-            model: input.providerID + "/" + input.modelID,
-            command: Command.Default.INIT,
-            arguments: "",
-          }),
-        )
-      })
-`,
-					`      const initialize = Effect.fn("Session.initialize")(function* (input: {
-        sessionID: SessionID
-        modelID: ModelID
-        providerID: ProviderID
-        messageID: MessageID
-      }) {
-        const [{ SessionPrompt }, { Command }] = yield* Effect.promise(() =>
-          Promise.all([import("./prompt"), import("../command")]),
-        )
-        yield* Effect.promise(() =>
-          SessionPrompt.command({
-            sessionID: input.sessionID,
-            messageID: input.messageID,
-            model: input.providerID + "/" + input.modelID,
-            command: Command.Default.INIT,
-            arguments: "",
-          }),
-        )
-      })
-`,
-			),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/session/prompt.ts",
-		(contents) =>
-			contents
-				.replace(
-					/        const text = yield\* Effect\.promise\(async \(signal\) => \{\n[\s\S]*?          return result\.text\n        \}\)\n/,
-					`        const instanceCtx = yield* InstanceState.context
-        const text = yield* Effect.promise((signal) =>
-          Instance.restore(instanceCtx, async () => {
-            const mdl = ag.model
-              ? await Provider.getModel(ag.model.providerID, ag.model.modelID)
-              : ((await Provider.getSmallModel(input.providerID)) ??
-                (await Provider.getModel(input.providerID, input.modelID)))
-            const msgs = onlySubtasks
-              ? [{ role: "user" as const, content: subtasks.map((p) => p.prompt).join("\\n") }]
-              : await MessageV2.toModelMessages(context, mdl)
-            const result = await LLM.stream({
-              agent: ag,
-              user: firstInfo,
-              system: [],
-              small: true,
-              tools: {},
-              model: mdl,
-              abort: signal,
-              sessionID: input.session.id,
-              retries: 2,
-              messages: [{ role: "user", content: "Generate a title for this conversation:\\n" }, ...msgs],
-            })
-            return result.text
-          }),
-        )
-`,
-				)
-				.replace(
-					`      const getModel = (providerID: ProviderID, modelID: ModelID, sessionID: SessionID) =>
-        Effect.promise(() =>
-          Provider.getModel(providerID, modelID).catch((e) => {
-            if (Provider.ModelNotFoundError.isInstance(e)) {
-              const hint = e.data.suggestions?.length ? \` Did you mean: \${e.data.suggestions.join(", ")}?\` : ""
-              Bus.publish(Session.Event.Error, {
-                sessionID,
-                error: new NamedError.Unknown({
-                  message: \`Model not found: \${e.data.providerID}/\${e.data.modelID}.\${hint}\`,
-                }).toObject(),
-              })
-            }
-            throw e
-          }),
-        )
-`,
-					`      const getModel = (providerID: ProviderID, modelID: ModelID, sessionID: SessionID) =>
-        Effect.gen(function* () {
-          const instanceCtx = yield* InstanceState.context
-          return yield* Effect.promise(() =>
-            Instance.restore(instanceCtx, () =>
-              Provider.getModel(providerID, modelID).catch((e) => {
-                if (Provider.ModelNotFoundError.isInstance(e)) {
-                  const hint = e.data.suggestions?.length ? \` Did you mean: \${e.data.suggestions.join(", ")}?\` : ""
-                  Bus.publish(Session.Event.Error, {
-                    sessionID,
-                    error: new NamedError.Unknown({
-                      message: \`Model not found: \${e.data.providerID}/\${e.data.modelID}.\${hint}\`,
-                    }).toObject(),
-                  })
-                }
-                throw e
-              }),
-            ),
-          )
-        })
-`,
-				)
-				.replace(
-					`        const model = input.model ?? ag.model ?? (yield* lastModel(input.sessionID))
-        const full =
-          !input.variant && ag.variant
-            ? yield* Effect.promise(() => Provider.getModel(model.providerID, model.modelID).catch(() => undefined))
-            : undefined
-`,
-					`        const model = input.model ?? ag.model ?? (yield* lastModel(input.sessionID))
-        const instanceCtx = yield* InstanceState.context
-        const full =
-          !input.variant && ag.variant
-            ? yield* Effect.promise(() =>
-                Instance.restore(instanceCtx, () =>
-                  Provider.getModel(model.providerID, model.modelID).catch(() => undefined),
-                ),
-              )
-            : undefined
-`,
-				)
-				.replace(
-					`                      Effect.promise(() => Provider.getModel(info.model.providerID, info.model.modelID)).pipe(
-`,
-					`                      Effect.gen(function* () {
-                        const instanceCtx = yield* InstanceState.context
-                        return yield* Effect.promise(() =>
-                          Instance.restore(instanceCtx, () =>
-                            Provider.getModel(info.model.providerID, info.model.modelID),
-                          ),
-                        )
-                      }).pipe(
-`,
-				)
-				.replace(
-					`                const tools = yield* resolveTools({
-                  agent,
-                  session,
-                  model,
-                  tools: lastUser.tools,
-                  processor: handle,
-                  bypassAgentCheck,
-                  messages: msgs,
-                })
-`,
-					`                const tools = yield* resolveTools({
-                  agent,
-                  session,
-                  model,
-                  tools: lastUser.tools,
-                  processor: handle,
-                  bypassAgentCheck,
-                  messages: msgs,
-                })
-`,
-				)
-				.replace(
-					`                const [skills, env, instructions, modelMsgs] = yield* Effect.promise(() =>
-                  Promise.all([
-                    SystemPrompt.skills(agent),
-                    SystemPrompt.environment(model),
-                    InstructionPrompt.system(),
-                    MessageV2.toModelMessages(msgs, model),
-                  ]),
-                )
-`,
-					`                const instanceCtx = yield* InstanceState.context
-                const [skills, env, instructions, modelMsgs] = yield* Effect.promise(() =>
-                  Instance.restore(instanceCtx, () =>
-                    (async () => {
-                      console.error("[opencode-acp] prompt.system:skills:start", sessionID)
-                      const skills = await Instance.restore(instanceCtx, () => SystemPrompt.skills(agent))
-                      console.error("[opencode-acp] prompt.system:skills:done", sessionID)
-                      console.error("[opencode-acp] prompt.system:env:start", sessionID)
-                      const env = await Instance.restore(instanceCtx, () => SystemPrompt.environment(model))
-                      console.error("[opencode-acp] prompt.system:env:done", sessionID)
-                      console.error("[opencode-acp] prompt.system:instructions:start", sessionID)
-                      const instructions = await Instance.restore(instanceCtx, () => InstructionPrompt.system())
-                      console.error("[opencode-acp] prompt.system:instructions:done", sessionID)
-                      console.error("[opencode-acp] prompt.system:modelMessages:start", sessionID)
-                      const modelMsgs = await Instance.restore(instanceCtx, () =>
-                        MessageV2.toModelMessages(msgs, model),
-                      )
-                      console.error("[opencode-acp] prompt.system:modelMessages:done", sessionID)
-                      return [skills, env, instructions, modelMsgs] as const
-                    })(),
-                  ),
-                )
-`,
-				)
-				.replace(
-					`  const defaultLayer = Layer.unwrap(
-    Effect.sync(() =>
-      layer.pipe(
-        Layer.provide(SessionStatus.layer),
-        Layer.provide(SessionCompaction.defaultLayer),
-        Layer.provide(SessionProcessor.defaultLayer),
-        Layer.provide(Command.defaultLayer),
-        Layer.provide(Permission.layer),
-        Layer.provide(MCP.defaultLayer),
-        Layer.provide(LSP.defaultLayer),
-        Layer.provide(FileTime.defaultLayer),
-        Layer.provide(ToolRegistry.defaultLayer),
-        Layer.provide(Truncate.layer),
-        Layer.provide(AppFileSystem.defaultLayer),
-        Layer.provide(Plugin.defaultLayer),
-        Layer.provide(Session.defaultLayer),
-        Layer.provide(Agent.defaultLayer),
-        Layer.provide(Bus.layer),
-      ),
-    ),
-  )
-`,
-					`  export const defaultLayer = Layer.unwrap(
-    Effect.sync(() =>
-      layer.pipe(
-        Layer.provide(SessionStatus.layer),
-        Layer.provide(SessionCompaction.defaultLayer),
-        Layer.provide(SessionProcessor.defaultLayer),
-        Layer.provide(Command.defaultLayer),
-        Layer.provide(Permission.layer),
-        Layer.provide(MCP.defaultLayer),
-        Layer.provide(LSP.defaultLayer),
-        Layer.provide(FileTime.defaultLayer),
-        Layer.provide(ToolRegistry.defaultLayer),
-        Layer.provide(Truncate.layer),
-        Layer.provide(AppFileSystem.defaultLayer),
-        Layer.provide(Plugin.defaultLayer),
-        Layer.provide(Session.defaultLayer),
-        Layer.provide(Agent.defaultLayer),
-        Layer.provide(Bus.layer),
-      ),
-    ),
-  )
-`,
-				),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/session/llm.ts",
-		(contents) => {
-			let updated = contents;
-			if (
-				!updated.includes(
-					'import { InstanceState } from "@/effect/instance-state"\n',
-				)
-			) {
-				updated = updated.replace(
-					'import { Installation } from "@/installation"\n',
-					'import { Installation } from "@/installation"\nimport { InstanceState } from "@/effect/instance-state"\n',
-				);
-			}
-			updated = updated
-				.replace(
-					`        stream(input) {
-          return Stream.scoped(
-            Stream.unwrap(
-              Effect.gen(function* () {
-                const ctrl = yield* Effect.acquireRelease(
-                  Effect.sync(() => new AbortController()),
-                  (ctrl) => Effect.sync(() => ctrl.abort()),
-                )
-
-                const result = yield* Effect.promise(() => LLM.stream({ ...input, abort: ctrl.signal }))
-
-                return Stream.fromAsyncIterable(result.fullStream, (e) =>
-                  e instanceof Error ? e : new Error(String(e)),
-                )
-              }),
-            ),
-          )
-        },
-`,
-					`        stream(input) {
-          return Stream.scoped(
-            Stream.unwrap(
-              Effect.gen(function* () {
-                const instanceCtx = yield* InstanceState.context
-                const ctrl = yield* Effect.acquireRelease(
-                  Effect.sync(() => new AbortController()),
-                  (ctrl) => Effect.sync(() => ctrl.abort()),
-                )
-
-                const result = yield* Effect.promise(() =>
-                  Instance.restore(instanceCtx, () => LLM.stream({ ...input, abort: ctrl.signal })),
-                )
-
-                return Stream.fromAsyncIterable(result.fullStream, (e) =>
-                  e instanceof Error ? e : new Error(String(e)),
-                )
-              }),
-            ),
-          )
-        },
-`,
-				)
-				.replace(
-					`    const [language, cfg, provider, auth] = await Promise.all([
-      Provider.getLanguage(input.model),
-      Config.get(),
-      Provider.getProvider(input.model.providerID),
-      Auth.get(input.model.providerID),
-    ])
-`,
-					`    const instanceCtx = Instance.current
-    const [language, cfg, provider, auth] = await Instance.restore(instanceCtx, () =>
-      Promise.all([
-        Provider.getLanguage(input.model),
-        Config.get(),
-        Provider.getProvider(input.model.providerID),
-        Auth.get(input.model.providerID),
-      ]),
-    )
-`,
-				)
-				.replace(
-					`    await Plugin.trigger(
-      "experimental.chat.system.transform",
-      { sessionID: input.sessionID, model: input.model },
-      { system },
-    )
-`,
-					`    await Instance.restore(instanceCtx, () =>
-      Plugin.trigger(
-        "experimental.chat.system.transform",
-        { sessionID: input.sessionID, model: input.model },
-        { system },
-      ),
-    )
-`,
-				)
-				.replace(
-					`    const params = await Plugin.trigger(
-      "chat.params",
-      {
-        sessionID: input.sessionID,
-        agent: input.agent.name,
-        model: input.model,
-        provider,
-        message: input.user,
-      },
-      {
-        temperature: input.model.capabilities.temperature
-          ? (input.agent.temperature ?? ProviderTransform.temperature(input.model))
-          : undefined,
-        topP: input.agent.topP ?? ProviderTransform.topP(input.model),
-        topK: ProviderTransform.topK(input.model),
-        options,
-      },
-    )
-`,
-					`    const params = await Instance.restore(instanceCtx, () =>
-      Plugin.trigger(
-        "chat.params",
-        {
-          sessionID: input.sessionID,
-          agent: input.agent.name,
-          model: input.model,
-          provider,
-          message: input.user,
-        },
-        {
-          temperature: input.model.capabilities.temperature
-            ? (input.agent.temperature ?? ProviderTransform.temperature(input.model))
-            : undefined,
-          topP: input.agent.topP ?? ProviderTransform.topP(input.model),
-          topK: ProviderTransform.topK(input.model),
-          options,
-        },
-      ),
-    )
-`,
-				)
-				.replace(
-					`    const { headers } = await Plugin.trigger(
-      "chat.headers",
-      {
-        sessionID: input.sessionID,
-        agent: input.agent.name,
-        model: input.model,
-        provider,
-        message: input.user,
-      },
-      {
-        headers: {},
-      },
-    )
-`,
-					`    const { headers } = await Instance.restore(instanceCtx, () =>
-      Plugin.trigger(
-        "chat.headers",
-        {
-          sessionID: input.sessionID,
-          agent: input.agent.name,
-          model: input.model,
-          provider,
-          message: input.user,
-        },
-        {
-          headers: {},
-        },
-      ),
-    )
-`,
-				)
-				.replace(
-					`    const tools = await resolveTools(input)
-`,
-					`    const tools = await Instance.restore(instanceCtx, () => resolveTools(input))
-`,
-				)
-				.replace(
-					`      headers: {
-        ...(input.model.providerID.startsWith("opencode")
-          ? {
-              "x-opencode-project": Instance.project.id,
-              "x-opencode-session": input.sessionID,
-              "x-opencode-request": input.user.id,
-              "x-opencode-client": Flag.OPENCODE_CLIENT,
-            }
-          : {
-              "User-Agent": \`opencode/\${Installation.VERSION}\`,
-            }),
-        ...input.model.headers,
-        ...headers,
-      },
-`,
-					`      headers: {
-        ...(input.model.providerID.startsWith("opencode")
-          ? Instance.restore(instanceCtx, () => ({
-              "x-opencode-project": Instance.project.id,
-              "x-opencode-session": input.sessionID,
-              "x-opencode-request": input.user.id,
-              "x-opencode-client": Flag.OPENCODE_CLIENT,
-            }))
-          : {
-              "User-Agent": \`opencode/\${Installation.VERSION}\`,
-            }),
-        ...input.model.headers,
-        ...headers,
-      },
-`,
-				)
-				.replace(
-					`    return streamText({
-`,
-					`    return Instance.restore(instanceCtx, () => streamText({
-`,
-				)
-				.replace(
-					`    })
-  }
-`,
-					`    }))
-  }
-`,
-				);
-			return updated;
-		},
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/session/prompt.ts",
-		(contents) =>
-			contents.replace(
-				`            execute(args, options) {
-              return Effect.runPromise(
-                Effect.gen(function* () {
-                  const ctx = context(args, options)
-                  yield* plugin.trigger(
-                    "tool.execute.before",
-                    { tool: item.id, sessionID: ctx.sessionID, callID: ctx.callID },
-                    { args },
-                  )
-                  const result = yield* Effect.promise(() => item.execute(args, ctx))
-                  const output = {
-                    ...result,
-                    attachments: result.attachments?.map((attachment) => ({
-                      ...attachment,
-                      id: PartID.ascending(),
-                      sessionID: ctx.sessionID,
-                      messageID: input.processor.message.id,
-                    })),
-                  }
-                  yield* plugin.trigger(
-                    "tool.execute.after",
-                    { tool: item.id, sessionID: ctx.sessionID, callID: ctx.callID, args },
-                    output,
-                  )
-                  return output
-                }),
-              )
-            },
-`,
-				`            execute(args, options) {
-              const instanceCtx =
-                ((globalThis as typeof globalThis & { __agentosOpencodeInstanceFallback?: unknown })
-                  .__agentosOpencodeInstanceFallback ??
-                  Instance.current) as any
-              return Instance.restore(instanceCtx, () =>
-                Effect.runPromise(
-                  Effect.gen(function* () {
-                    const ctx = context(args, options)
-                    yield* plugin.trigger(
-                      "tool.execute.before",
-                      { tool: item.id, sessionID: ctx.sessionID, callID: ctx.callID },
-                      { args },
-                    )
-                    const result = yield* Effect.promise(() => item.execute(args, ctx))
-                    const output = {
-                      ...result,
-                      attachments: result.attachments?.map((attachment) => ({
-                        ...attachment,
-                        id: PartID.ascending(),
-                        sessionID: ctx.sessionID,
-                        messageID: input.processor.message.id,
-                      })),
-                    }
-                    yield* plugin.trigger(
-                      "tool.execute.after",
-                      { tool: item.id, sessionID: ctx.sessionID, callID: ctx.callID, args },
-                      output,
-                    )
-                    return output
-                  }),
-                ),
-              )
-            },
-`,
-			),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/session/instruction.ts",
-		(contents) =>
-			contents
-				.replace(
-					`async function resolveRelative(instruction: string): Promise<string[]> {
-  if (!Flag.OPENCODE_DISABLE_PROJECT_CONFIG) {
-    return Filesystem.globUp(instruction, Instance.directory, Instance.worktree).catch(() => [])
-  }
-  if (!Flag.OPENCODE_CONFIG_DIR) {
-    log.warn(
-      \`Skipping relative instruction "\${instruction}" - no OPENCODE_CONFIG_DIR set while project config is disabled\`,
-    )
-    return []
-  }
-  return Filesystem.globUp(instruction, Flag.OPENCODE_CONFIG_DIR, Flag.OPENCODE_CONFIG_DIR).catch(() => [])
-}
-`,
-					`async function resolveRelative(instruction: string): Promise<string[]> {
-  const ctx = Instance.current
-  if (!Flag.OPENCODE_DISABLE_PROJECT_CONFIG) {
-    return Instance.restore(ctx, () =>
-      Filesystem.globUp(instruction, ctx.directory, ctx.worktree).catch(() => []),
-    )
-  }
-  if (!Flag.OPENCODE_CONFIG_DIR) {
-    log.warn(
-      \`Skipping relative instruction "\${instruction}" - no OPENCODE_CONFIG_DIR set while project config is disabled\`,
-    )
-    return []
-  }
-  return Filesystem.globUp(instruction, Flag.OPENCODE_CONFIG_DIR, Flag.OPENCODE_CONFIG_DIR).catch(() => [])
-}
-`,
-				)
-				.replace(
-					`  export async function systemPaths() {
-    const config = await Config.get()
-`,
-					`  export async function systemPaths() {
-    const ctx = Instance.current
-    const config = await Instance.restore(ctx, () => Config.get())
-`,
-				)
-				.replace(
-					`        const matches = await Filesystem.findUp(file, Instance.directory, Instance.worktree)
-`,
-					`        const matches = await Instance.restore(ctx, () =>
-          Filesystem.findUp(file, ctx.directory, ctx.worktree),
-        )
-`,
-				)
-				.replace(
-					`          : await resolveRelative(instruction)
-`,
-					`          : await Instance.restore(ctx, () => resolveRelative(instruction))
-`,
-				)
-				.replace(
-					`  export async function system() {
-    const config = await Config.get()
-    const paths = await systemPaths()
-`,
-					`  export async function system() {
-    const ctx = Instance.current
-    const config = await Instance.restore(ctx, () => Config.get())
-    const paths = await Instance.restore(ctx, () => systemPaths())
-`,
-				)
-				.replace(
-					`  export async function resolve(messages: MessageV2.WithParts[], filepath: string, messageID: string) {
-    const system = await systemPaths()
-    const already = loaded(messages)
-    const results: { filepath: string; content: string }[] = []
-
-    const target = path.resolve(filepath)
-    let current = path.dirname(target)
-    const root = path.resolve(Instance.directory)
-`,
-					`  export async function resolve(messages: MessageV2.WithParts[], filepath: string, messageID: string) {
-    const ctx = Instance.current
-    const system = await Instance.restore(ctx, () => systemPaths())
-    const already = loaded(messages)
-    const results: { filepath: string; content: string }[] = []
-
-    const target = path.resolve(filepath)
-    let current = path.dirname(target)
-    const root = path.resolve(ctx.directory)
-`,
-				),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/provider/provider.ts",
-		(contents) =>
-			contents
-				.replace(
-					'import { Config } from "../config/config"\n',
-					'import { Config } from "../config/config"\nimport { Instance } from "../project/instance"\n',
-				)
-				.replace(
-					`  async function loadProviders() {
-    const cfg = await Config.get()
-`,
-					`  async function loadProviders() {
-    const ctx = Instance.current
-    const cfg = await Instance.restore(ctx, () => Config.get())
-`,
-				)
-				.replace(
-					`  export async function defaultModel() {
-    const cfg = await Config.get()
-`,
-					`  export async function defaultModel() {
-    const ctx = Instance.current
-    const cfg = await Instance.restore(ctx, () => Config.get())
-`,
-				)
-				.replace(
-					`    const providers = await loadProviders()
-    for (const provider of Object.values(providers)) {
-`,
-					`    const providers = await Instance.restore(ctx, () => loadProviders())
-    for (const provider of Object.values(providers)) {
-`,
-				),
-		);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/effect/instance-state.ts",
-		(contents) =>
-			contents.replace(
-				`    const fiber = Fiber.getCurrent()
-    const ctx = fiber ? ServiceMap.getReferenceUnsafe(fiber.services, InstanceRef) : undefined
-    if (!ctx) return fn
-    return ((...args: any[]) => Instance.restore(ctx, () => fn(...args))) as F
-`,
-				`    const fiber = Fiber.getCurrent()
-    const ctx = fiber ? ServiceMap.getReferenceUnsafe(fiber.services, InstanceRef) : undefined
-    const fallback = (globalThis as typeof globalThis & { __agentosOpencodeInstanceFallback?: unknown })
-      .__agentosOpencodeInstanceFallback as typeof ctx
-    const boundCtx = ctx ?? fallback
-    if (!boundCtx) return fn
-    return ((...args: any[]) => Instance.restore(boundCtx, () => fn(...args))) as F
-`,
-			).replace(
-				`  export const context = Effect.fnUntraced(function* () {
-    return (yield* InstanceRef) ?? Instance.current
-  })()
-`,
-				`  export const context = Effect.fnUntraced(function* () {
-    const ref = yield* InstanceRef
-    if (ref) return ref
-    const fallback = (globalThis as typeof globalThis & { __agentosOpencodeInstanceFallback?: unknown })
-      .__agentosOpencodeInstanceFallback
-    if (fallback) return fallback as typeof ref
-    try {
-      return Instance.current
-    } catch (error) {
-      console.error("[opencode-acp] missing-instance-context", new Error().stack)
-      throw error
-    }
-  })()
-`,
-			),
-	);
-
-	await writeFile(
-		resolve(sourceRoot, "packages/opencode/src/effect/run-service.ts"),
-		`import { Effect, Layer, ManagedRuntime } from "effect"
-import * as ServiceMap from "effect/ServiceMap"
-import { Instance } from "@/project/instance"
-import { Context } from "@/util/context"
-import { InstanceRef } from "./instance-ref"
-
-export const memoMap = Layer.makeMemoMapUnsafe()
-
-function attach<A, E, R>(effect: Effect.Effect<A, E, R>) {
-  try {
-    const ctx = Instance.current
-    return {
-      ctx,
-      effect: Effect.provideService(effect, InstanceRef, ctx),
-    }
-  } catch (err) {
-    if (!(err instanceof Context.NotFound)) throw err
-  }
-  return { ctx: undefined, effect }
-}
-
-export function makeRuntime<I, S, E>(service: ServiceMap.Service<I, S>, layer: Layer.Layer<I, E>) {
-  let rt: ManagedRuntime.ManagedRuntime<I, E> | undefined
-  const getRuntime = () => (rt ??= ManagedRuntime.make(layer, { memoMap }))
-
-  return {
-    runSync: <A, Err>(fn: (svc: S) => Effect.Effect<A, Err, I>) => {
-      const attached = attach(service.use(fn))
-      return attached.ctx
-        ? Instance.restore(attached.ctx, () => getRuntime().runSync(attached.effect))
-        : getRuntime().runSync(attached.effect)
-    },
-    runPromiseExit: <A, Err>(fn: (svc: S) => Effect.Effect<A, Err, I>, options?: Effect.RunOptions) => {
-      const attached = attach(service.use(fn))
-      return attached.ctx
-        ? Instance.restore(attached.ctx, () => getRuntime().runPromiseExit(attached.effect, options))
-        : getRuntime().runPromiseExit(attached.effect, options)
-    },
-    runPromise: <A, Err>(fn: (svc: S) => Effect.Effect<A, Err, I>, options?: Effect.RunOptions) => {
-      const attached = attach(service.use(fn))
-      return attached.ctx
-        ? Instance.restore(attached.ctx, () => getRuntime().runPromise(attached.effect, options))
-        : getRuntime().runPromise(attached.effect, options)
-    },
-    runFork: <A, Err>(fn: (svc: S) => Effect.Effect<A, Err, I>) => {
-      const attached = attach(service.use(fn))
-      return attached.ctx
-        ? Instance.restore(attached.ctx, () => getRuntime().runFork(attached.effect))
-        : getRuntime().runFork(attached.effect)
-    },
-    runCallback: <A, Err>(fn: (svc: S) => Effect.Effect<A, Err, I>) => {
-      const attached = attach(service.use(fn))
-      return attached.ctx
-        ? Instance.restore(attached.ctx, () => getRuntime().runCallback(attached.effect))
-        : getRuntime().runCallback(attached.effect)
-    },
-  }
-}
-`,
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/tool/tool.ts",
-		(contents) =>
-			contents
-				.replace(
-					'import { Truncate } from "./truncate"\n',
-					'import { Truncate } from "./truncate"\nimport { InstanceState } from "@/effect/instance-state"\n',
-				)
-				.replace(
-					`        const toolInfo = init instanceof Function ? await init(initCtx) : init
-        const execute = toolInfo.execute
-        toolInfo.execute = async (args, ctx) => {
-`,
-					`        const toolInfo =
-          init instanceof Function ? await InstanceState.bind(() => init(initCtx))() : init
-        const execute = toolInfo.execute
-        toolInfo.execute = InstanceState.bind(async (args, ctx) => {
-`,
-				)
-				.replace(
-					`        }
-        return toolInfo
-`,
-					`        })
-        return toolInfo
-`,
-				),
-		);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/storage/db.ts",
-		(contents) =>
-			contents.replace(
-				`    db.run("PRAGMA journal_mode = WAL")
-    db.run("PRAGMA synchronous = NORMAL")
-    db.run("PRAGMA busy_timeout = 5000")
-    db.run("PRAGMA cache_size = -64000")
-    db.run("PRAGMA foreign_keys = ON")
-    db.run("PRAGMA wal_checkpoint(PASSIVE)")`,
-				`    db.$client.exec("PRAGMA journal_mode = WAL")
-    db.$client.exec("PRAGMA synchronous = NORMAL")
-    db.$client.exec("PRAGMA busy_timeout = 5000")
-    db.$client.exec("PRAGMA cache_size = -64000")
-    db.$client.exec("PRAGMA foreign_keys = ON")
-    db.$client.exec("PRAGMA wal_checkpoint(PASSIVE)")`,
-			),
-	);
-}
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/provider/provider.ts",
-		(contents) =>
-			contents
-				.replace(
-					`// Direct imports for bundled providers
-import { createAmazonBedrock, type AmazonBedrockProviderSettings } from "@ai-sdk/amazon-bedrock"
-import { createAnthropic } from "@ai-sdk/anthropic"
-import { createAzure } from "@ai-sdk/azure"
-import { createGoogleGenerativeAI } from "@ai-sdk/google"
-import { createVertex } from "@ai-sdk/google-vertex"
-import { createVertexAnthropic } from "@ai-sdk/google-vertex/anthropic"
-import { createOpenAI } from "@ai-sdk/openai"
-import { createOpenAICompatible } from "@ai-sdk/openai-compatible"
-import { createOpenRouter, type LanguageModelV2 } from "@openrouter/ai-sdk-provider"
-import { createOpenaiCompatible as createGitHubCopilotOpenAICompatible } from "./sdk/openai-compatible/src"
-import { createXai } from "@ai-sdk/xai"
-import { createMistral } from "@ai-sdk/mistral"
-import { createGroq } from "@ai-sdk/groq"
-import { createDeepInfra } from "@ai-sdk/deepinfra"
-import { createCerebras } from "@ai-sdk/cerebras"
-import { createCohere } from "@ai-sdk/cohere"
-import { createGateway } from "@ai-sdk/gateway"
-import { createTogetherAI } from "@ai-sdk/togetherai"
-import { createPerplexity } from "@ai-sdk/perplexity"
-import { createVercel } from "@ai-sdk/vercel"
-import { createGitLab } from "@gitlab/gitlab-ai-provider"
-import { ProviderTransform } from "./transform"
-`,
-					`import type { LanguageModelV2 } from "@openrouter/ai-sdk-provider"
-import { ProviderTransform } from "./transform"
-`,
-				)
-				.replace(
-					`  const BUNDLED_PROVIDERS: Record<string, (options: any) => SDK> = {
-    "@ai-sdk/amazon-bedrock": createAmazonBedrock,
-    "@ai-sdk/anthropic": createAnthropic,
-    "@ai-sdk/azure": createAzure,
-    "@ai-sdk/google": createGoogleGenerativeAI,
-    "@ai-sdk/google-vertex": createVertex,
-    "@ai-sdk/google-vertex/anthropic": createVertexAnthropic,
-    "@ai-sdk/openai": createOpenAI,
-    "@ai-sdk/openai-compatible": createOpenAICompatible,
-    "@openrouter/ai-sdk-provider": createOpenRouter,
-    "@ai-sdk/xai": createXai,
-    "@ai-sdk/mistral": createMistral,
-    "@ai-sdk/groq": createGroq,
-    "@ai-sdk/deepinfra": createDeepInfra,
-    "@ai-sdk/cerebras": createCerebras,
-    "@ai-sdk/cohere": createCohere,
-    "@ai-sdk/gateway": createGateway,
-    "@ai-sdk/togetherai": createTogetherAI,
-    "@ai-sdk/perplexity": createPerplexity,
-    "@ai-sdk/vercel": createVercel,
-    "@gitlab/gitlab-ai-provider": createGitLab,
-    // @ts-ignore (TODO: kill this code so we dont have to maintain it)
-    "@ai-sdk/github-copilot": createGitHubCopilotOpenAICompatible,
-  }
-`,
-					`  const BUNDLED_PROVIDERS: Record<string, (options: any) => Promise<SDK>> = {
-    "@ai-sdk/amazon-bedrock": async (options) =>
-      (await import("@ai-sdk/amazon-bedrock")).createAmazonBedrock(options),
-    "@ai-sdk/anthropic": async (options) => (await import("@ai-sdk/anthropic")).createAnthropic(options),
-    "@ai-sdk/azure": async (options) => (await import("@ai-sdk/azure")).createAzure(options),
-    "@ai-sdk/google": async (options) => (await import("@ai-sdk/google")).createGoogleGenerativeAI(options),
-    "@ai-sdk/google-vertex": async (options) => (await import("@ai-sdk/google-vertex")).createVertex(options),
-    "@ai-sdk/google-vertex/anthropic": async (options) =>
-      (await import("@ai-sdk/google-vertex/anthropic")).createVertexAnthropic(options),
-    "@ai-sdk/openai": async (options) => (await import("@ai-sdk/openai")).createOpenAI(options),
-    "@ai-sdk/openai-compatible": async (options) =>
-      (await import("@ai-sdk/openai-compatible")).createOpenAICompatible(options),
-    "@openrouter/ai-sdk-provider": async (options) =>
-      (await import("@openrouter/ai-sdk-provider")).createOpenRouter(options),
-    "@ai-sdk/xai": async (options) => (await import("@ai-sdk/xai")).createXai(options),
-    "@ai-sdk/mistral": async (options) => (await import("@ai-sdk/mistral")).createMistral(options),
-    "@ai-sdk/groq": async (options) => (await import("@ai-sdk/groq")).createGroq(options),
-    "@ai-sdk/deepinfra": async (options) => (await import("@ai-sdk/deepinfra")).createDeepInfra(options),
-    "@ai-sdk/cerebras": async (options) => (await import("@ai-sdk/cerebras")).createCerebras(options),
-    "@ai-sdk/cohere": async (options) => (await import("@ai-sdk/cohere")).createCohere(options),
-    "@ai-sdk/gateway": async (options) => (await import("@ai-sdk/gateway")).createGateway(options),
-    "@ai-sdk/togetherai": async (options) => (await import("@ai-sdk/togetherai")).createTogetherAI(options),
-    "@ai-sdk/perplexity": async (options) => (await import("@ai-sdk/perplexity")).createPerplexity(options),
-    "@ai-sdk/vercel": async (options) => (await import("@ai-sdk/vercel")).createVercel(options),
-    "@gitlab/gitlab-ai-provider": async (options) =>
-      (await import("@gitlab/gitlab-ai-provider")).createGitLab(options),
-    "@ai-sdk/github-copilot": async (options) =>
-      (await import("./sdk/openai-compatible/src")).createOpenaiCompatible(options),
-  }
-`,
-				)
-				.replace(
-					"        async getModel(sdk: ReturnType<typeof createGitLab>, modelID: string) {\n",
-					"        async getModel(sdk: any, modelID: string) {\n",
-				)
-				.replace(
-					`        const loaded = bundledFn({
-          name: model.providerID,
-          ...options,
-        })
-`,
-					`        const loaded = await bundledFn({
-          name: model.providerID,
-          ...options,
-        })
-`,
-				),
-	);
-
-	await writeFile(
-		resolve(sourceRoot, "packages/opencode/src/provider/provider.ts"),
-		`import z from "zod"
-import { createAnthropic } from "@ai-sdk/anthropic"
-import { createGoogleGenerativeAI } from "@ai-sdk/google"
-import { createVertex } from "@ai-sdk/google-vertex"
-import { createVertexAnthropic } from "@ai-sdk/google-vertex/anthropic"
-import { createGroq } from "@ai-sdk/groq"
-import { createMistral } from "@ai-sdk/mistral"
-import { createOpenAI } from "@ai-sdk/openai"
-import type { LanguageModelV3 } from "@ai-sdk/provider"
-import { NamedError } from "@opencode-ai/util/error"
-import { Config } from "../config/config"
-import { ModelID, ProviderID } from "./schema"
-
-type ProviderConfig = {
-  name?: string
-  env?: string[]
-  npm?: string
-  api?: string
-  options?: Record<string, any>
-  models?: Record<string, any>
-}
-
-type ProviderSeed = {
-  name: string
-  env: string[]
-  npm: string
-  models: Array<{
-    id: string
-    name: string
-    family?: string
-    reasoning?: boolean
-    attachment?: boolean
-    input?: Partial<{ text: boolean; audio: boolean; image: boolean; video: boolean; pdf: boolean }>
-    output?: Partial<{ text: boolean; audio: boolean; image: boolean; video: boolean; pdf: boolean }>
-    limit?: Partial<{ context: number; input: number; output: number }>
-    cost?: Partial<{
-      input: number
-      output: number
-      cache: Partial<{ read: number; write: number }>
-    }>
-    releaseDate?: string
-  }>
-}
-
-export namespace Provider {
-  export const Model = z
-    .object({
-      id: ModelID.zod,
-      providerID: ProviderID.zod,
-      api: z.object({
-        id: z.string(),
-        url: z.string(),
-        npm: z.string(),
-      }),
-      name: z.string(),
-      family: z.string().optional(),
-      capabilities: z.object({
-        temperature: z.boolean(),
-        reasoning: z.boolean(),
-        attachment: z.boolean(),
-        toolcall: z.boolean(),
-        input: z.object({
-          text: z.boolean(),
-          audio: z.boolean(),
-          image: z.boolean(),
-          video: z.boolean(),
-          pdf: z.boolean(),
-        }),
-        output: z.object({
-          text: z.boolean(),
-          audio: z.boolean(),
-          image: z.boolean(),
-          video: z.boolean(),
-          pdf: z.boolean(),
-        }),
-        interleaved: z.union([
-          z.boolean(),
-          z.object({
-            field: z.enum(["reasoning_content", "reasoning_details"]),
-          }),
-        ]),
-      }),
-      cost: z.object({
-        input: z.number(),
-        output: z.number(),
-        cache: z.object({
-          read: z.number(),
-          write: z.number(),
-        }),
-        experimentalOver200K: z
-          .object({
-            input: z.number(),
-            output: z.number(),
-            cache: z.object({
-              read: z.number(),
-              write: z.number(),
-            }),
-          })
-          .optional(),
-      }),
-      limit: z.object({
-        context: z.number(),
-        input: z.number().optional(),
-        output: z.number(),
-      }),
-      status: z.enum(["alpha", "beta", "deprecated", "active"]),
-      options: z.record(z.string(), z.any()),
-      headers: z.record(z.string(), z.string()),
-      release_date: z.string(),
-      variants: z.record(z.string(), z.record(z.string(), z.any())).optional(),
-    })
-    .meta({
-      ref: "Model",
-    })
-  export type Model = z.infer<typeof Model>
-
-  export const Info = z
-    .object({
-      id: ProviderID.zod,
-      name: z.string(),
-      source: z.enum(["env", "config", "custom", "api"]),
-      env: z.string().array(),
-      key: z.string().optional(),
-      options: z.record(z.string(), z.any()),
-      models: z.record(z.string(), Model),
-    })
-    .meta({
-      ref: "Provider",
-    })
-  export type Info = z.infer<typeof Info>
-
-  const DEFAULT_CONTEXT_LIMIT = 200_000
-  const DEFAULT_OUTPUT_LIMIT = 32_000
-
-  const PROVIDER_SEEDS: Record<string, ProviderSeed> = {
-    anthropic: {
-      name: "Anthropic",
-      env: ["ANTHROPIC_API_KEY"],
-      npm: "@ai-sdk/anthropic",
-      models: [
-        {
-          id: "claude-sonnet-4-20250514",
-          name: "Claude Sonnet 4",
-          family: "claude-sonnet-4",
-          reasoning: true,
-          attachment: true,
-          input: { image: true, pdf: true },
-          releaseDate: "2025-05-14",
-        },
-        {
-          id: "claude-opus-4-1-20250805",
-          name: "Claude Opus 4.1",
-          family: "claude-opus-4-1",
-          reasoning: true,
-          attachment: true,
-          input: { image: true, pdf: true },
-          releaseDate: "2025-08-05",
-        },
-        {
-          id: "claude-haiku-4-5-20251001",
-          name: "Claude Haiku 4.5",
-          family: "claude-haiku-4-5",
-          reasoning: false,
-          attachment: true,
-          input: { image: true, pdf: true },
-          limit: { output: 16_000 },
-          releaseDate: "2025-10-01",
-        },
-      ],
-    },
-    openai: {
-      name: "OpenAI",
-      env: ["OPENAI_API_KEY"],
-      npm: "@ai-sdk/openai",
-      models: [
-        {
-          id: "gpt-5",
-          name: "GPT-5",
-          family: "gpt-5",
-          reasoning: true,
-          attachment: true,
-          input: { image: true, pdf: true },
-          releaseDate: "2025-01-01",
-        },
-        {
-          id: "gpt-5-mini",
-          name: "GPT-5 Mini",
-          family: "gpt-5-mini",
-          reasoning: true,
-          attachment: true,
-          input: { image: true, pdf: true },
-          limit: { output: 16_000 },
-          releaseDate: "2025-01-01",
-        },
-        {
-          id: "gpt-5-nano",
-          name: "GPT-5 Nano",
-          family: "gpt-5-nano",
-          reasoning: false,
-          attachment: true,
-          input: { image: true, pdf: true },
-          limit: { output: 8_000 },
-          releaseDate: "2025-01-01",
-        },
-      ],
-    },
-    google: {
-      name: "Google",
-      env: ["GOOGLE_GENERATIVE_AI_API_KEY"],
-      npm: "@ai-sdk/google",
-      models: [
-        {
-          id: "gemini-2.5-pro",
-          name: "Gemini 2.5 Pro",
-          family: "gemini-2.5-pro",
-          reasoning: true,
-          attachment: true,
-          input: { image: true, pdf: true },
-          releaseDate: "2025-01-01",
-        },
-        {
-          id: "gemini-2.5-flash",
-          name: "Gemini 2.5 Flash",
-          family: "gemini-2.5-flash",
-          reasoning: true,
-          attachment: true,
-          input: { image: true, pdf: true },
-          limit: { output: 16_000 },
-          releaseDate: "2025-01-01",
-        },
-      ],
-    },
-    "google-vertex": {
-      name: "Google Vertex",
-      env: [],
-      npm: "@ai-sdk/google-vertex",
-      models: [
-        {
-          id: "gemini-2.5-pro",
-          name: "Gemini 2.5 Pro",
-          family: "gemini-2.5-pro",
-          reasoning: true,
-          attachment: true,
-          input: { image: true, pdf: true },
-          releaseDate: "2025-01-01",
-        },
-      ],
-    },
-    groq: {
-      name: "Groq",
-      env: ["GROQ_API_KEY"],
-      npm: "@ai-sdk/groq",
-      models: [
-        {
-          id: "llama-3.3-70b-versatile",
-          name: "Llama 3.3 70B Versatile",
-          family: "llama-3.3-70b",
-          reasoning: true,
-          releaseDate: "2025-01-01",
-        },
-      ],
-    },
-    mistral: {
-      name: "Mistral",
-      env: ["MISTRAL_API_KEY"],
-      npm: "@ai-sdk/mistral",
-      models: [
-        {
-          id: "mistral-small-latest",
-          name: "Mistral Small Latest",
-          family: "mistral-small",
-          reasoning: true,
-          attachment: true,
-          input: { image: true, pdf: true },
-          releaseDate: "2025-01-01",
-        },
-      ],
-    },
-  }
-
-  const providerCache = new Map<string, any>()
-  const languageCache = new Map<string, LanguageModelV3>()
-  const SDK_FACTORIES: Record<string, (options: Record<string, any>) => any> = {
-    "@ai-sdk/anthropic": createAnthropic,
-    "@ai-sdk/google": createGoogleGenerativeAI,
-    "@ai-sdk/google-vertex": createVertex,
-    "@ai-sdk/google-vertex/anthropic": createVertexAnthropic,
-    "@ai-sdk/groq": createGroq,
-    "@ai-sdk/mistral": createMistral,
-    "@ai-sdk/openai": createOpenAI,
-  }
-  const priority = ["gpt-5", "claude-sonnet-4", "big-pickle", "gemini-3-pro"]
-
-  function firstEnv(names: string[]) {
-    for (const name of names) {
-      const value = process.env[name]
-      if (typeof value === "string" && value.length > 0) {
-        return value
-      }
-    }
-    return undefined
-  }
-
-  function cloneRecord<T extends Record<string, any>>(value: T | undefined): T {
-    return { ...(value ?? ({} as T)) }
-  }
-
-  function buildModel(
-    providerID: ProviderID,
-    seed: ProviderSeed,
-    input: {
-      id: string
-      name?: string
-      family?: string
-      reasoning?: boolean
-      attachment?: boolean
-      toolCall?: boolean
-      status?: "alpha" | "beta" | "deprecated" | "active"
-      input?: Partial<{ text: boolean; audio: boolean; image: boolean; video: boolean; pdf: boolean }>
-      output?: Partial<{ text: boolean; audio: boolean; image: boolean; video: boolean; pdf: boolean }>
-      limit?: Partial<{ context: number; input: number; output: number }>
-      cost?: Partial<{
-        input: number
-        output: number
-        cache: Partial<{ read: number; write: number }>
-      }>
-      headers?: Record<string, string>
-      options?: Record<string, any>
-      api?: {
-        id?: string
-        url?: string
-        npm?: string
-      }
-      releaseDate?: string
-      variants?: Record<string, Record<string, any>>
-    },
-  ): Model {
-    return {
-      id: ModelID.make(input.id),
-      providerID,
-      api: {
-        id: input.api?.id ?? input.id,
-        url: input.api?.url ?? "",
-        npm: input.api?.npm ?? seed.npm,
-      },
-      name: input.name ?? input.id,
-      family: input.family,
-      capabilities: {
-        temperature: true,
-        reasoning: input.reasoning ?? false,
-        attachment: input.attachment ?? false,
-        toolcall: input.toolCall ?? true,
-        input: {
-          text: input.input?.text ?? true,
-          audio: input.input?.audio ?? false,
-          image: input.input?.image ?? false,
-          video: input.input?.video ?? false,
-          pdf: input.input?.pdf ?? false,
-        },
-        output: {
-          text: input.output?.text ?? true,
-          audio: input.output?.audio ?? false,
-          image: input.output?.image ?? false,
-          video: input.output?.video ?? false,
-          pdf: input.output?.pdf ?? false,
-        },
-        interleaved: false,
-      },
-      cost: {
-        input: input.cost?.input ?? 0,
-        output: input.cost?.output ?? 0,
-        cache: {
-          read: input.cost?.cache?.read ?? 0,
-          write: input.cost?.cache?.write ?? 0,
-        },
-      },
-      limit: {
-        context: input.limit?.context ?? DEFAULT_CONTEXT_LIMIT,
-        ...(input.limit?.input !== undefined ? { input: input.limit.input } : {}),
-        output: input.limit?.output ?? DEFAULT_OUTPUT_LIMIT,
-      },
-      status: input.status ?? "active",
-      options: cloneRecord(input.options),
-      headers: cloneRecord(input.headers),
-      release_date: input.releaseDate ?? "2025-01-01",
-      variants: input.variants ?? {},
-    }
-  }
-
-  function buildSeedModels(providerID: ProviderID, seed: ProviderSeed) {
-    return Object.fromEntries(
-      seed.models.map((model) => [model.id, buildModel(providerID, seed, model)]),
-    ) as Record<string, Model>
-  }
-
-  function applyConfiguredModels(
-    providerID: ProviderID,
-    seed: ProviderSeed,
-    provider: Info,
-    configuredProvider: ProviderConfig | undefined,
-  ) {
-    for (const [modelID, raw] of Object.entries(configuredProvider?.models ?? {})) {
-      const existing = provider.models[modelID]
-      provider.models[modelID] = buildModel(providerID, seed, {
-        id: modelID,
-        name: raw?.name ?? existing?.name ?? modelID,
-        family: raw?.family ?? existing?.family,
-        reasoning: raw?.reasoning ?? existing?.capabilities.reasoning ?? false,
-        attachment: raw?.attachment ?? existing?.capabilities.attachment ?? false,
-        toolCall: raw?.tool_call ?? existing?.capabilities.toolcall ?? true,
-        status: raw?.status ?? existing?.status ?? "active",
-        input: {
-          text: raw?.modalities?.input?.includes("text") ?? existing?.capabilities.input.text ?? true,
-          audio: raw?.modalities?.input?.includes("audio") ?? existing?.capabilities.input.audio ?? false,
-          image: raw?.modalities?.input?.includes("image") ?? existing?.capabilities.input.image ?? false,
-          video: raw?.modalities?.input?.includes("video") ?? existing?.capabilities.input.video ?? false,
-          pdf: raw?.modalities?.input?.includes("pdf") ?? existing?.capabilities.input.pdf ?? false,
-        },
-        output: {
-          text: raw?.modalities?.output?.includes("text") ?? existing?.capabilities.output.text ?? true,
-          audio: raw?.modalities?.output?.includes("audio") ?? existing?.capabilities.output.audio ?? false,
-          image: raw?.modalities?.output?.includes("image") ?? existing?.capabilities.output.image ?? false,
-          video: raw?.modalities?.output?.includes("video") ?? existing?.capabilities.output.video ?? false,
-          pdf: raw?.modalities?.output?.includes("pdf") ?? existing?.capabilities.output.pdf ?? false,
-        },
-        limit: {
-          context: raw?.limit?.context ?? existing?.limit.context,
-          input: raw?.limit?.input ?? existing?.limit.input,
-          output: raw?.limit?.output ?? existing?.limit.output,
-        },
-        cost: {
-          input: raw?.cost?.input ?? existing?.cost.input,
-          output: raw?.cost?.output ?? existing?.cost.output,
-          cache: {
-            read: raw?.cost?.cache_read ?? existing?.cost.cache.read,
-            write: raw?.cost?.cache_write ?? existing?.cost.cache.write,
-          },
-        },
-        headers: {
-          ...existing?.headers,
-          ...cloneRecord(raw?.headers),
-        },
-        options: {
-          ...existing?.options,
-          ...cloneRecord(raw?.options),
-        },
-        api: {
-          id: raw?.id ?? existing?.api.id ?? modelID,
-          url: raw?.provider?.api ?? configuredProvider?.api ?? existing?.api.url ?? "",
-          npm: raw?.provider?.npm ?? configuredProvider?.npm ?? existing?.api.npm ?? seed.npm,
-        },
-        releaseDate: raw?.release_date ?? existing?.release_date,
-        variants: raw?.variants ?? existing?.variants,
-      })
-    }
-  }
-
-  async function loadProviders() {
-    const cfg = await Config.get()
-    const configured = (cfg.provider ?? {}) as Record<string, ProviderConfig>
-    const providers: Record<string, Info> = {}
-
-    for (const [providerName, seed] of Object.entries(PROVIDER_SEEDS)) {
-      const providerID = ProviderID.make(providerName)
-      const configuredProvider = configured[providerName]
-      const configuredModel = typeof cfg.model === "string" && cfg.model.startsWith(providerName + "/")
-      const key = firstEnv(configuredProvider?.env ?? seed.env) ?? configuredProvider?.options?.apiKey
-
-      if (!configuredProvider && !configuredModel && !key) {
-        continue
-      }
-
-      const info: Info = {
-        id: providerID,
-        name: configuredProvider?.name ?? seed.name,
-        source: configuredProvider ? "config" : key ? "env" : "custom",
-        env: configuredProvider?.env ?? seed.env,
-        ...(typeof key === "string" && key.length > 0 ? { key } : {}),
-        options: {
-          ...cloneRecord(configuredProvider?.options),
-        },
-        models: buildSeedModels(providerID, seed),
-      }
-
-      applyConfiguredModels(providerID, seed, info, configuredProvider)
-      providers[providerID] = info
-    }
-
-    if (Object.keys(providers).length === 0) {
-      const fallback = PROVIDER_SEEDS.anthropic
-      providers[ProviderID.anthropic] = {
-        id: ProviderID.anthropic,
-        name: fallback.name,
-        source: "custom",
-        env: fallback.env,
-        options: {},
-        models: buildSeedModels(ProviderID.anthropic, fallback),
-      }
-    }
-
-    return providers as Record<ProviderID, Info>
-  }
-
-  function modelKey(providerID: ProviderID, modelID: ModelID) {
-    return String(providerID) + "/" + String(modelID)
-  }
-
-  export async function list() {
-    return loadProviders()
-  }
-
-  export async function getProvider(providerID: ProviderID) {
-    const providers = await loadProviders()
-    const provider = providers[providerID]
-    if (!provider) {
-      throw new InitError({ providerID })
-    }
-    return provider
-  }
-
-  export async function getModel(providerID: ProviderID, modelID: ModelID) {
-    const provider = await getProvider(providerID)
-    const model = provider.models[modelID]
-    if (model) return model
-
-    const suggestions = Object.keys(provider.models).filter(
-      (candidate) => candidate.includes(String(modelID)) || String(modelID).includes(candidate),
-    )
-    throw new ModelNotFoundError({
-      providerID,
-      modelID,
-      ...(suggestions.length ? { suggestions: suggestions.slice(0, 3) } : {}),
-    })
-  }
-
-  async function getSdk(provider: Info, model: Model) {
-    const cacheKey = JSON.stringify({
-      providerID: provider.id,
-      apiId: model.api.id,
-      baseURL: provider.options?.baseURL,
-      headers: provider.options?.headers,
-      key: provider.key,
-    })
-    if (providerCache.has(cacheKey)) {
-      return providerCache.get(cacheKey)
-    }
-
-    const options = {
-      ...cloneRecord(provider.options),
-      ...(provider.key ? { apiKey: provider.key } : {}),
-      headers: {
-        ...cloneRecord(provider.options?.headers),
-        ...cloneRecord(model.headers),
-      },
-    }
-
-    const factory = SDK_FACTORIES[model.api.npm]
-    if (!factory) {
-      throw new InitError(
-        { providerID: provider.id },
-        {
-          cause: new Error(
-            "Unsupported provider in ACP VM build: " + provider.id + " (" + model.api.npm + ")",
-          ),
-        },
-      )
-    }
-
-    const sdk = factory(options)
-
-    providerCache.set(cacheKey, sdk)
-    return sdk
-  }
-
-  export async function getLanguage(model: Model) {
-    const key = modelKey(model.providerID, model.id)
-    const cached = languageCache.get(key)
-    if (cached) return cached
-
-    try {
-      const provider = await getProvider(model.providerID)
-      const sdk = await getSdk(provider, model)
-      const language =
-        model.providerID === ProviderID.openai && typeof sdk.responses === "function"
-          ? sdk.responses(model.api.id)
-          : sdk.languageModel(model.api.id)
-      languageCache.set(key, language)
-      return language
-    } catch (cause) {
-      throw new InitError({ providerID: model.providerID }, { cause })
-    }
-  }
-
-  export async function closest(providerID: ProviderID, query: string[]) {
-    const provider = await getProvider(providerID).catch(() => undefined)
-    if (!provider) return undefined
-    for (const item of query) {
-      const match = Object.keys(provider.models).find((modelID) => modelID.includes(item))
-      if (match) return { providerID, modelID: ModelID.make(match) }
-    }
-    return undefined
-  }
-
-  export async function getSmallModel(providerID: ProviderID) {
-    const provider = await getProvider(providerID).catch(() => undefined)
-    if (!provider) return undefined
-
-    const preferred =
-      providerID === ProviderID.anthropic
-        ? ["haiku", "mini", "nano"]
-        : ["mini", "nano", "haiku"]
-
-    for (const token of preferred) {
-      const match = Object.values(provider.models).find((model) => model.id.includes(token))
-      if (match) return match
-    }
-
-    return undefined
-  }
-
-  export async function defaultModel() {
-    const cfg = await Config.get()
-    if (cfg.model) {
-      const parsed = parseModel(cfg.model)
-      const model = await getModel(parsed.providerID, parsed.modelID).catch(() => undefined)
-      if (model) {
-        return {
-          providerID: parsed.providerID,
-          modelID: parsed.modelID,
-        }
-      }
-    }
-
-    const providers = await loadProviders()
-    for (const provider of Object.values(providers)) {
-      const [model] = sort(Object.values(provider.models))
-      if (model) {
-        return {
-          providerID: provider.id,
-          modelID: model.id,
-        }
-      }
-    }
-
-    return {
-      providerID: ProviderID.anthropic,
-      modelID: ModelID.make("claude-sonnet-4-20250514"),
-    }
-  }
-
-  export function sort<T extends { id: string }>(models: T[]) {
-    return [...models].sort((a, b) => {
-      const aPriority = priority.findIndex((item) => a.id.includes(item))
-      const bPriority = priority.findIndex((item) => b.id.includes(item))
-      const aRank = aPriority === -1 ? Number.MAX_SAFE_INTEGER : aPriority
-      const bRank = bPriority === -1 ? Number.MAX_SAFE_INTEGER : bPriority
-      if (aRank !== bRank) return aRank - bRank
-
-      const aLatest = a.id.includes("latest") ? 1 : 0
-      const bLatest = b.id.includes("latest") ? 1 : 0
-      if (aLatest !== bLatest) return aLatest - bLatest
-
-      return a.id.localeCompare(b.id)
-    })
-  }
-
-  export function parseModel(model: string) {
-    const [providerID, ...rest] = model.split("/")
-    return {
-      providerID: ProviderID.make(providerID),
-      modelID: ModelID.make(rest.join("/")),
-    }
-  }
-
-  export const ModelNotFoundError = NamedError.create(
-    "ProviderModelNotFoundError",
-    z.object({
-      providerID: ProviderID.zod,
-      modelID: ModelID.zod,
-      suggestions: z.array(z.string()).optional(),
-    }),
-  )
-
-  export const InitError = NamedError.create(
-    "ProviderInitError",
-    z.object({
-      providerID: ProviderID.zod,
-    }),
-  )
-}
-`,
-	);
-
-	await writeFile(
-		resolve(sourceRoot, "packages/opencode/src/plugin/index.ts"),
-		`import { Effect, Layer, ServiceMap } from "effect"
-
-export namespace Plugin {
-  export interface Interface {
-    readonly trigger: <Name extends string, Input, Output>(
-      name: Name,
-      input: Input,
-      output: Output,
-    ) => Effect.Effect<Output>
-    readonly list: () => Effect.Effect<any[]>
-    readonly init: () => Effect.Effect<void>
-  }
-
-  export class Service extends ServiceMap.Service<Service, Interface>()("@opencode/Plugin") {}
-
-  const noop = Service.of({
-    trigger: <Name extends string, Input, Output>(_name: Name, _input: Input, output: Output) =>
-      Effect.succeed(output),
-    list: () => Effect.succeed([]),
-    init: () => Effect.void,
-  })
-
-  export const layer = Layer.succeed(Service, noop)
-  export const defaultLayer = layer
-
-  export async function trigger<Name extends string, Input, Output>(
-    _name: Name,
-    _input: Input,
-    output: Output,
-  ): Promise<Output> {
-    return output
-  }
-
-  export async function list(): Promise<any[]> {
-    return []
-  }
-
-  export async function init(): Promise<void> {}
-}
-`,
-	);
-
-	await writeFile(
-		resolve(sourceRoot, "packages/opencode/src/project/bootstrap.ts"),
-		`import { Instance } from "./instance"
-import { Log } from "@/util/log"
-
-export async function InstanceBootstrap() {
-  Log.Default.info("bootstrapping", { directory: Instance.directory })
-  Log.Default.info("bootstrap step", { step: "minimal:init" })
-}
-`,
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/project/instance.ts",
-		(contents) =>
-			contents
-				.replace(
-					`function boot(input: { directory: string; init?: () => Promise<any>; project?: Project.Info; worktree?: string }) {
-  return iife(async () => {
-`,
-					`function boot(input: { directory: string; init?: () => Promise<any>; project?: Project.Info; worktree?: string }) {
-  return iife(async () => {
-    Log.Default.info("instance boot:start", { directory: input.directory })
-`,
-				)
-				.replace(
-					`    await context.provide(ctx, async () => {
-      await input.init?.()
-    })
-    return ctx
-`,
-					`    Log.Default.info("instance boot:ctx", {
-      directory: ctx.directory,
-      worktree: ctx.worktree,
-      projectID: ctx.project.id,
-    })
-    await context.provide(ctx, async () => {
-      Log.Default.info("instance boot:init:start", { directory: ctx.directory })
-      await input.init?.()
-      Log.Default.info("instance boot:init:done", { directory: ctx.directory })
-    })
-    Log.Default.info("instance boot:done", { directory: ctx.directory })
-    return ctx
-`,
-				)
-				.replace(
-					`    const ctx = await existing
-    return context.provide(ctx, async () => {
-      return input.fn()
-    })
-`,
-					`    Log.Default.info("instance provide:await:start", { directory })
-    const ctx = await existing
-    Log.Default.info("instance provide:await:done", { directory })
-    return context.provide(ctx, async () => {
-      Log.Default.info("instance provide:fn:start", { directory })
-      const result = await input.fn()
-      Log.Default.info("instance provide:fn:done", { directory })
-      return result
-    })
-`,
-				),
-	);
-
-	await rewriteSourceFile(
-		sourceRoot,
-		"packages/opencode/src/project/project.ts",
-		(contents) =>
-			contents.includes('log.info("phase2 select project"')
-				? contents
-				: contents
-				.replace(
-					`        // Phase 2: upsert
-        const row = yield* db((d) => d.select().from(ProjectTable).where(eq(ProjectTable.id, data.id)).get())
-`,
-					`        // Phase 2: upsert
-        log.info("phase2 select project", { projectID: data.id })
-        const row = yield* db((d) => d.select().from(ProjectTable).where(eq(ProjectTable.id, data.id)).get())
-        log.info("phase2 select project done", { projectID: data.id, found: !!row })
-`,
-				)
-				.replace(
-					`        yield* db((d) =>
-          d
-            .insert(ProjectTable)
-            .values({
-`,
-					`        log.info("phase2 upsert project", {
-          projectID: result.id,
-          sandboxes: result.sandboxes.length,
-        })
-        yield* db((d) =>
-          d
-            .insert(ProjectTable)
-            .values({
-`,
-				)
-				.replace(
-					`        if (data.id !== ProjectID.global) {
-`,
-					`        log.info("phase2 upsert project done", { projectID: result.id })
-        if (data.id !== ProjectID.global) {
-`,
-				),
-	);
-
-	await writeFile(
-		resolve(sourceRoot, "packages/opencode/src/share/share-next.ts"),
-		`export namespace ShareNext {
-  const EMPTY_API = {
-    create: "",
-    sync: () => "",
-    remove: () => "",
-    data: () => "",
-  }
-
-  export async function url() {
-    return ""
-  }
-
-  export async function request() {
-    return {
-      headers: {},
-      api: EMPTY_API,
-      baseUrl: "",
-    }
-  }
-
-  export async function init() {}
-
-  export async function create(_sessionID: string) {
-    return { id: "", url: "", secret: "" }
-  }
-
-  export async function remove(_sessionID: string) {}
-}
-`,
-	);
-
-	await writeFile(
-		resolve(sourceRoot, "packages/opencode/src/cli/cmd/tui/win32.ts"),
-		`export function win32DisableProcessedInput() {}
-export function win32FlushInputBuffer() {}
-export function win32InstallCtrlCGuard() {
-  return
-}
-`,
-	);
-}
-
-function patchBuiltBundle(bundlePath) {
-	const original = readFileSync(bundlePath, "utf-8");
-	if (
-		original.includes(
-			"bash tool command scan failed, falling back to raw permission request",
-		)
-	) {
-		return;
-	}
-
-	const updated = original.replace(
-		`      async execute(params, ctx) {
-        const cwd = params.workdir ? await resolvePath(params.workdir, Instance.directory, shell2) : Instance.directory;
-        if (params.timeout !== undefined && params.timeout < 0) {
-          throw new Error(\`Invalid timeout value: \${params.timeout}. Timeout must be a positive number.\`);
-        }
-        const timeout4 = params.timeout ?? DEFAULT_TIMEOUT;
-        const ps2 = PS.has(name21);
-        const root = await parse10(params.command, ps2);
-        const scan5 = await collect6(root, cwd, ps2, shell2);
-        if (!Instance.containsPath(cwd))
-          scan5.dirs.add(cwd);
-        await ask(ctx, scan5);
-        return run7({
-`,
-		`      async execute(params, ctx) {
-        const cwd = params.workdir ? await resolvePath(params.workdir, Instance.directory, shell2) : Instance.directory;
-        if (params.timeout !== undefined && params.timeout < 0) {
-          throw new Error(\`Invalid timeout value: \${params.timeout}. Timeout must be a positive number.\`);
-        }
-        const timeout4 = params.timeout ?? DEFAULT_TIMEOUT;
-        const ps2 = PS.has(name21);
-        let scan5;
-        try {
-          const root = await parse10(params.command, ps2);
-          scan5 = await collect6(root, cwd, ps2, shell2);
-        } catch (error48) {
-          log7.warn("bash tool command scan failed, falling back to raw permission request", {
-            command: params.command,
-            error: error48 instanceof Error ? error48.message : String(error48)
-          });
-          scan5 = {
-            dirs: new Set,
-            patterns: new Set([params.command]),
-            always: new Set([params.command])
-          };
-        }
-        if (!Instance.containsPath(cwd))
-          scan5.dirs.add(cwd);
-        await ask(ctx, scan5);
-        return run7({
-`,
-	);
-
-	if (updated === original) {
-		throw new Error(
-			"Failed to patch built OpenCode ACP bundle for bash scan fallback",
-		);
-	}
-
-	writeFileSync(bundlePath, updated);
-}
-
-async function assertPreparedSource(sourceRoot) {
-	const instanceSource = await readFile(
-		resolve(sourceRoot, "packages/opencode/src/server/instance.ts"),
-		"utf8",
-	);
-	if (
-		instanceSource.includes('import { PtyRoutes } from "./routes/pty"') ||
-		instanceSource.includes('import { TuiRoutes } from "./routes/tui"') ||
-		instanceSource.includes('.route("/pty", PtyRoutes())') ||
-		instanceSource.includes('.route("/tui", TuiRoutes())')
-	) {
-		throw new Error("Prepared OpenCode source still exposes PTY/TUI routes in the ACP build");
-	}
-
-	const shellSource = await readFile(
-		resolve(sourceRoot, "packages/opencode/src/shell/shell.ts"),
-		"utf8",
-	);
-	if (shellSource.includes("Bun.which(")) {
-		throw new Error("Prepared OpenCode source still references Bun.which in shell.ts");
-	}
-
-	const win32Source = await readFile(
-		resolve(sourceRoot, "packages/opencode/src/cli/cmd/tui/win32.ts"),
-		"utf8",
-	);
-	if (win32Source.includes("bun:ffi")) {
-		throw new Error("Prepared OpenCode source still references bun:ffi in the Win32 TUI shim");
-	}
-
-	const dbNodeSource = await readFile(
-		resolve(sourceRoot, "packages/opencode/src/storage/db.node.ts"),
-		"utf8",
-	);
-	if (
-		!dbNodeSource.includes('from "drizzle-orm/node-sqlite"') ||
-		!dbNodeSource.includes('from "node:sqlite"')
-	) {
-		throw new Error("Prepared OpenCode source does not use the native node:sqlite database path");
-	}
-}
-
-async function assertBundleClean(bundlePath) {
-	const bundle = await readFile(bundlePath, "utf8");
-	for (const pattern of [
-		"bun:ffi",
-		"bun-pty",
-		"hono/bun",
-		'.route("/pty", PtyRoutes())',
-		'.route("/tui", TuiRoutes())',
-		"Bun.which(",
-		"bun:sqlite",
-	]) {
-		if (bundle.includes(pattern)) {
-			throw new Error(
-				`OpenCode ACP bundle still contains forbidden runtime dependency: ${pattern}`,
-			);
-		}
-	}
-}
-
-async function main() {
-	if (!existsSync(bunBin)) {
-		throw new Error(
-			`bun is not installed for @agentos-software/opencode (expected ${bunBin}). Run pnpm install first.`,
-		);
-	}
-
-	mkdirSync(distDir, { recursive: true });
-	mkdirSync(cacheDir, { recursive: true });
-	rmSync(bundleDir, { recursive: true, force: true });
-
-	const patch = readFileSync(patchPath, "utf-8");
-	const buildScript = readFileSync(fileURLToPath(import.meta.url), "utf-8");
-	const patchHash = createHash("sha256")
-		.update(`${SOURCE_VERSION}\n${patch}\n${buildScript}`)
-		.digest("hex")
-		.slice(0, 16);
-	const sourceRoot = join(cacheDir, `source-v${SOURCE_VERSION}-${patchHash}`);
-	const preparedMarker = join(sourceRoot, ".agentos-prepared.json");
-	const tarballPath = join(cacheDir, `opencode-v${SOURCE_VERSION}.tar.gz`);
-
-	if (!existsSync(preparedMarker)) {
-		rmSync(sourceRoot, { recursive: true, force: true });
-		mkdirSync(sourceRoot, { recursive: true });
-
-		if (!existsSync(tarballPath)) {
-			process.stdout.write(`Downloading OpenCode v${SOURCE_VERSION} source...\n`);
-			await downloadFile(SOURCE_TARBALL_URL, tarballPath);
-		}
-
-		run("tar", ["-xzf", tarballPath, "--strip-components=1", "-C", sourceRoot]);
-		pinGhosttyWebRef(sourceRoot);
-		run(bunBin, ["install", "--frozen-lockfile"], { cwd: sourceRoot });
-		await ensureNodeAcpPatch(sourceRoot, tarballPath);
-		await applyNodeAcpRuntimeTweaks(sourceRoot);
-		await assertPreparedSource(sourceRoot);
-
-		writeFileSync(
-			preparedMarker,
-			JSON.stringify(
-				{
-					sourceVersion: SOURCE_VERSION,
-					sourceRepository: SOURCE_REPOSITORY,
-					patchHash,
-				},
-				null,
-				2,
-				) + "\n",
-		);
-	}
-
-	await ensureNodeAcpPatch(sourceRoot, tarballPath);
-	await applyNodeAcpRuntimeTweaks(sourceRoot);
-	await assertPreparedSource(sourceRoot);
-
-	const migrations = await readMigrations(sourceRoot);
-	const buildHelperDir = await mkdtemp(join(tmpdir(), "agentos-opencode-build-"));
-	const buildHelperPath = join(buildHelperDir, "build-opencode-acp.mjs");
-	const bunVersion =
-		spawnSync(bunBin, ["--version"], { encoding: "utf-8" }).stdout?.trim() ??
-		"unknown";
-
-	try {
-		await writeFile(
-			buildHelperPath,
-			`
-import { mkdir } from "node:fs/promises";
-import { dirname, join } from "node:path";
-
-const outdir = process.env.OUTDIR;
-if (!outdir) {
-	throw new Error("OUTDIR is required");
-}
-
-const result = await Bun.build({
-	target: "node",
-	format: "esm",
-	outdir,
-	entrypoints: ["./packages/opencode/src/cli/cmd/acp.ts"],
-	define: {
-		OPENCODE_MIGRATIONS: ${JSON.stringify(JSON.stringify(migrations))},
-		OPENCODE_LIBC: ${JSON.stringify(JSON.stringify("glibc"))},
-	},
-});
-if (!result.success) {
-	for (const log of result.logs) {
-		console.error(log);
-	}
-	throw new Error("OpenCode ACP bundle build failed");
-}
-for (const output of result.outputs) {
-	const filePath = join(outdir, output.path);
-	await mkdir(dirname(filePath), { recursive: true });
-	await Bun.write(filePath, output);
-}
-`,
-		);
-
-		run(bunBin, [buildHelperPath], {
-			cwd: sourceRoot,
-			env: {
-				...process.env,
-				OUTDIR: bundleDir,
-			},
-		});
-	} finally {
-		rmSync(buildHelperDir, { recursive: true, force: true });
-	}
-
-	await assertBundleClean(join(bundleDir, "acp.js"));
-	patchBuiltBundle(join(bundleDir, "acp.js"));
-
-	writeFileSync(
-		manifestPath,
-		JSON.stringify(
-			{
-				source: {
-					repository: SOURCE_REPOSITORY,
-					version: SOURCE_VERSION,
-					tarballUrl: SOURCE_TARBALL_URL,
-				},
-				build: {
-					bunVersion,
-					patchHash,
-					externalDependencies: [],
-					entry: "./opencode-acp/acp.js",
-				},
-			},
-			null,
-			2,
-		) + "\n",
-	);
-}
-
-void main().catch((error) => {
-	process.stderr.write(`${error instanceof Error ? error.stack ?? error.message : String(error)}\n`);
-	process.exitCode = 1;
-});
diff --git a/registry/agent/opencode/src/adapter.ts b/registry/agent/opencode/src/adapter.ts
deleted file mode 100644
index 0ac881439..000000000
--- a/registry/agent/opencode/src/adapter.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-#!/usr/bin/env node
-process.env.OPENCODE_DISABLE_CONFIG_DEP_INSTALL ??= "1";
-process.env.OPENCODE_DISABLE_EMBEDDED_WEB_UI ??= "1";
-
-// @ts-expect-error Generated at build time by scripts/build-opencode-acp.mjs.
-const { AcpCommand } = (await import("./opencode-acp/acp.js")) as {
-	AcpCommand: {
-		handler(args: {
-			port: number;
-			hostname: string;
-			mdns: boolean;
-			"mdns-domain": string;
-			cors: string[];
-			cwd: string;
-		}): Promise<void>;
-	};
-};
-
-await AcpCommand.handler({
-	port: 0,
-	hostname: "127.0.0.1",
-	mdns: false,
-	"mdns-domain": "opencode.local",
-	cors: [],
-	cwd: process.cwd(),
-});
-
-export {};
diff --git a/registry/agent/opencode/src/index.ts b/registry/agent/opencode/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/agent/opencode/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/agent/opencode/src/opencode-acp.mjs.d.ts b/registry/agent/opencode/src/opencode-acp.mjs.d.ts
deleted file mode 100644
index 06aac778f..000000000
--- a/registry/agent/opencode/src/opencode-acp.mjs.d.ts
+++ /dev/null
@@ -1,14 +0,0 @@
-declare module "./opencode-acp.mjs" {
-	export const AcpCommand: {
-		handler(args: {
-			port: number;
-			hostname: string;
-			mdns: boolean;
-			"mdns-domain": string;
-			cors: string[];
-			cwd: string;
-		}): Promise<void>;
-	};
-}
-
-export {};
diff --git a/registry/agent/opencode/tsconfig.json b/registry/agent/opencode/tsconfig.json
deleted file mode 100644
index bff731325..000000000
--- a/registry/agent/opencode/tsconfig.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"declaration": true,
-		"outDir": "./dist",
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules", "dist"]
-}
diff --git a/registry/agent/opencode/upstream/opencode-v1.3.13.patch b/registry/agent/opencode/upstream/opencode-v1.3.13.patch
deleted file mode 100644
index 43e4fae95..000000000
--- a/registry/agent/opencode/upstream/opencode-v1.3.13.patch
+++ /dev/null
@@ -1,251 +0,0 @@
-diff --git a/packages/opencode/src/cli/cmd/acp.ts b/packages/opencode/src/cli/cmd/acp.ts
-index 99a9a81ab..2fb9038b0 100644
---- a/packages/opencode/src/cli/cmd/acp.ts
-+++ b/packages/opencode/src/cli/cmd/acp.ts
-@@ -23,7 +23,7 @@ export const AcpCommand = cmd({
-     process.env.OPENCODE_CLIENT = "acp"
-     await bootstrap(process.cwd(), async () => {
-       const opts = await resolveNetworkOptions(args)
--      const server = Server.listen(opts)
-+      const server = await Server.listen(opts)
- 
-       const sdk = createOpencodeClient({
-         baseUrl: `http://${server.hostname}:${server.port}`,
-diff --git a/packages/opencode/src/config/config.ts b/packages/opencode/src/config/config.ts
-index f86d8d32a..fdb4dc107 100644
---- a/packages/opencode/src/config/config.ts
-+++ b/packages/opencode/src/config/config.ts
-@@ -90,6 +90,11 @@ export namespace Config {
-   }
- 
-   export async function installDependencies(dir: string, input?: InstallInput) {
-+    if (process.env.OPENCODE_DISABLE_CONFIG_DEP_INSTALL === "1") {
-+      log.info("skipping dependency install", { dir, reason: "disabled_by_env" })
-+      return
-+    }
-+
-     if (!(await needsInstall(dir))) return
- 
-     await using _ = await Flock.acquire(`config-install:${Filesystem.resolve(dir)}`, {
-diff --git a/packages/opencode/src/plugin/index.ts b/packages/opencode/src/plugin/index.ts
-index b05dd8625..f2afc5979 100644
---- a/packages/opencode/src/plugin/index.ts
-+++ b/packages/opencode/src/plugin/index.ts
-@@ -50,7 +50,10 @@ export namespace Plugin {
-   export class Service extends ServiceMap.Service<Service, Interface>()("@opencode/Plugin") {}
- 
-   // Built-in plugins that are directly imported (not installed from npm)
--  const INTERNAL_PLUGINS: PluginInstance[] = [CodexAuthPlugin, CopilotAuthPlugin, GitlabAuthPlugin, PoeAuthPlugin]
-+  const INTERNAL_PLUGINS: PluginInstance[] =
-+    process.env.OPENCODE_ENABLE_INTERNAL_AUTH_PLUGINS === "1"
-+      ? [CodexAuthPlugin, CopilotAuthPlugin, GitlabAuthPlugin, PoeAuthPlugin]
-+      : []
- 
-   function isServerPlugin(value: unknown): value is PluginInstance {
-     return typeof value === "function"
-@@ -128,7 +131,9 @@ export namespace Plugin {
-             get serverUrl(): URL {
-               return Server.url ?? new URL("http://localhost:4096")
-             },
--            $: Bun.$,
-+            $: ((..._args: unknown[]) => {
-+              throw new Error("Bun shell is unavailable in the Node ACP build")
-+            }) as PluginInput["$"],
-           }
- 
-           for (const plugin of INTERNAL_PLUGINS) {
-diff --git a/packages/opencode/src/server/instance.ts b/packages/opencode/src/server/instance.ts
-index 4bb6efaf9..fc634f5c2 100644
---- a/packages/opencode/src/server/instance.ts
-+++ b/packages/opencode/src/server/instance.ts
-@@ -18,7 +18,6 @@ import { QuestionRoutes } from "./routes/question"
- import { PermissionRoutes } from "./routes/permission"
- import { ProjectRoutes } from "./routes/project"
- import { SessionRoutes } from "./routes/session"
--import { PtyRoutes } from "./routes/pty"
- import { McpRoutes } from "./routes/mcp"
- import { FileRoutes } from "./routes/file"
- import { ConfigRoutes } from "./routes/config"
-@@ -44,7 +43,6 @@ export const InstanceRoutes = (app?: Hono) =>
-   (app ?? new Hono())
-     .onError(errorHandler(log))
-     .route("/project", ProjectRoutes())
--    .route("/pty", PtyRoutes())
-     .route("/config", ConfigRoutes())
-     .route("/experimental", ExperimentalRoutes())
-     .route("/session", SessionRoutes())
-diff --git a/packages/opencode/src/server/server.ts b/packages/opencode/src/server/server.ts
-index ec245ed59..8df8fe679 100644
---- a/packages/opencode/src/server/server.ts
-+++ b/packages/opencode/src/server/server.ts
-@@ -9,7 +9,6 @@ import { Auth } from "../auth"
- import { Flag } from "../flag/flag"
- import { ProviderID } from "../provider/schema"
- import { WorkspaceRouterMiddleware } from "./router"
--import { websocket } from "hono/bun"
- import { errors } from "./error"
- import { GlobalRoutes } from "./routes/global"
- import { MDNS } from "./mdns"
-@@ -17,6 +16,9 @@ import { lazy } from "@/util/lazy"
- import { errorHandler } from "./middleware"
- import { InstanceRoutes } from "./instance"
- import { initProjectors } from "./projectors"
-+import { createServer, type IncomingMessage, type ServerResponse } from "node:http"
-+import type { AddressInfo } from "node:net"
-+import { Readable } from "node:stream"
- 
- // @ts-ignore This global is needed to prevent ai-sdk from logging warnings to stdout https://github.com/vercel/ai/blob/2dc67e0ef538307f21368db32d5a12345d98831b/packages/ai/src/logger/log-warnings.ts#L85
- globalThis.AI_SDK_LOG_WARNINGS = false
-@@ -264,7 +266,106 @@ export namespace Server {
-   /** @deprecated do not use this dumb shit */
-   export let url: URL
- 
--  export function listen(opts: {
-+  type NodeServeHandle = {
-+    hostname: string
-+    port: number
-+    stop: (closeActiveConnections?: boolean) => Promise<void>
-+  }
-+
-+  function toRequestUrl(req: IncomingMessage, fallbackHost: string, fallbackPort: number) {
-+    const host = req.headers.host ?? `${fallbackHost}:${fallbackPort}`
-+    return new URL(req.url ?? "/", `http://${host}`)
-+  }
-+
-+  function toHeaders(req: IncomingMessage) {
-+    const headers = new Headers()
-+    for (const [key, value] of Object.entries(req.headers)) {
-+      if (Array.isArray(value)) {
-+        for (const item of value) headers.append(key, item)
-+        continue
-+      }
-+      if (typeof value === "string") headers.set(key, value)
-+    }
-+    return headers
-+  }
-+
-+  async function writeResponse(res: ServerResponse, response: Response) {
-+    res.statusCode = response.status
-+    res.statusMessage = response.statusText
-+    response.headers.forEach((value, key) => {
-+      res.setHeader(key, value)
-+    })
-+
-+    if (!response.body) {
-+      res.end()
-+      return
-+    }
-+
-+    await new Promise<void>((resolve, reject) => {
-+      const body = Readable.fromWeb(response.body as globalThis.ReadableStream<Uint8Array>)
-+      body.on("error", reject)
-+      res.on("error", reject)
-+      res.on("close", resolve)
-+      body.pipe(res)
-+    })
-+  }
-+
-+  async function serveNode(opts: {
-+    hostname: string
-+    port: number
-+    fetch: (request: Request) => Response | Promise<Response>
-+  }): Promise<NodeServeHandle> {
-+    const server = createServer(async (req, res) => {
-+      try {
-+        const request = new Request(toRequestUrl(req, opts.hostname, opts.port), {
-+          method: req.method,
-+          headers: toHeaders(req),
-+          body:
-+            req.method && req.method !== "GET" && req.method !== "HEAD"
-+              ? (Readable.toWeb(req) as globalThis.ReadableStream<Uint8Array>)
-+              : undefined,
-+          duplex: "half",
-+        })
-+        const response = await opts.fetch(request)
-+        await writeResponse(res, response)
-+      } catch (error) {
-+        log.error("node server request failed", { error })
-+        if (!res.headersSent) {
-+          res.statusCode = 500
-+          res.setHeader("content-type", "text/plain; charset=utf-8")
-+        }
-+        res.end("Internal Server Error")
-+      }
-+    })
-+
-+    await new Promise<void>((resolve, reject) => {
-+      server.once("error", reject)
-+      server.listen(opts.port, opts.hostname, () => {
-+        server.off("error", reject)
-+        resolve()
-+      })
-+    })
-+
-+    const address = server.address()
-+    if (!address || typeof address === "string") {
-+      throw new Error("Failed to resolve server address")
-+    }
-+
-+    return {
-+      hostname: opts.hostname,
-+      port: (address as AddressInfo).port,
-+      stop() {
-+        return new Promise<void>((resolve, reject) => {
-+          server.close((error) => {
-+            if (error) reject(error)
-+            else resolve()
-+          })
-+        })
-+      },
-+    }
-+  }
-+
-+  export async function listen(opts: {
-     port: number
-     hostname: string
-     mdns?: boolean
-@@ -273,20 +374,18 @@ export namespace Server {
-   }) {
-     url = new URL(`http://${opts.hostname}:${opts.port}`)
-     const app = ControlPlaneRoutes({ cors: opts.cors })
--    const args = {
--      hostname: opts.hostname,
--      idleTimeout: 0,
--      fetch: app.fetch,
--      websocket: websocket,
--    } as const
--    const tryServe = (port: number) => {
-+    const tryServe = async (port: number) => {
-       try {
--        return Bun.serve({ ...args, port })
-+        return await serveNode({
-+          hostname: opts.hostname,
-+          port,
-+          fetch: app.fetch,
-+        })
-       } catch {
-         return undefined
-       }
-     }
--    const server = opts.port === 0 ? (tryServe(4096) ?? tryServe(0)) : tryServe(opts.port)
-+    const server = opts.port === 0 ? ((await tryServe(4096)) ?? (await tryServe(0))) : await tryServe(opts.port)
-     if (!server) throw new Error(`Failed to start server on port ${opts.port}`)
- 
-     const shouldPublishMDNS =
-@@ -296,7 +395,7 @@ export namespace Server {
-       opts.hostname !== "localhost" &&
-       opts.hostname !== "::1"
-     if (shouldPublishMDNS) {
--      MDNS.publish(server.port!, opts.mdnsDomain)
-+      MDNS.publish(server.port, opts.mdnsDomain)
-     } else if (opts.mdns) {
-       log.warn("mDNS enabled but hostname is loopback; skipping mDNS publish")
-     }
-@@ -307,6 +406,7 @@ export namespace Server {
-       return originalStop(closeActiveConnections)
-     }
- 
-+    url = new URL(`http://${opts.hostname}:${server.port}`)
-     return server
-   }
- }
diff --git a/registry/agent/pi-cli/agentos-package.json b/registry/agent/pi-cli/agentos-package.json
deleted file mode 100644
index fdd6c08d5..000000000
--- a/registry/agent/pi-cli/agentos-package.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-  "name": "pi-cli",
-  "agent": {
-    "acpEntrypoint": "pi-acp",
-    "env": {
-      "PI_ACP_PI_COMMAND": "pi"
-    }
-  }
-}
diff --git a/registry/agent/pi-cli/package.json b/registry/agent/pi-cli/package.json
deleted file mode 100644
index 746199345..000000000
--- a/registry/agent/pi-cli/package.json
+++ /dev/null
@@ -1,37 +0,0 @@
-{
-	"name": "@agentos-software/pi-cli",
-	"version": "0.2.1",
-	"type": "module",
-	"license": "Apache-2.0",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"bin": {
-		"pi-acp": "./node_modules/pi-acp/dist/index.js",
-		"pi": "./node_modules/@mariozechner/pi-coding-agent/dist/cli.js"
-	},
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js",
-			"default": "./dist/index.js"
-		}
-	},
-	"files": [
-		"dist",
-		"agentos-package.json"
-	],
-	"scripts": {
-		"build": "tsc && agentos-toolchain pack . --out dist/package --agent pi-acp --prune-native",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"@mariozechner/pi-coding-agent": "^0.60.0",
-		"pi-acp": "^0.0.23"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/registry/agent/pi-cli/src/index.ts b/registry/agent/pi-cli/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/agent/pi-cli/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/agent/pi-cli/tsconfig.json b/registry/agent/pi-cli/tsconfig.json
deleted file mode 100644
index bff731325..000000000
--- a/registry/agent/pi-cli/tsconfig.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"declaration": true,
-		"outDir": "./dist",
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules", "dist"]
-}
diff --git a/registry/agent/pi/agentos-package.json b/registry/agent/pi/agentos-package.json
deleted file mode 100644
index 5d35f768c..000000000
--- a/registry/agent/pi/agentos-package.json
+++ /dev/null
@@ -1,7 +0,0 @@
-{
-  "name": "pi",
-  "agent": {
-    "acpEntrypoint": "pi-sdk-acp",
-    "snapshot": true
-  }
-}
diff --git a/registry/agent/pi/package.json b/registry/agent/pi/package.json
deleted file mode 100644
index 7a104f70e..000000000
--- a/registry/agent/pi/package.json
+++ /dev/null
@@ -1,40 +0,0 @@
-{
-	"name": "@agentos-software/pi",
-	"version": "0.2.1",
-	"type": "module",
-	"license": "Apache-2.0",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"bin": {
-		"pi": "./node_modules/@mariozechner/pi-coding-agent/dist/cli.js",
-		"pi-sdk-acp": "./dist/adapter.js"
-	},
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js",
-			"default": "./dist/index.js"
-		}
-	},
-	"files": [
-		"dist",
-		"agentos-package.json"
-	],
-	"scripts": {
-		"build": "tsc && node scripts/build-snapshot-bundle.mjs && agentos-toolchain pack . --out dist/package --agent pi-sdk-acp --prune-native && node scripts/copy-snapshot-into-package.mjs",
-		"build:snapshot": "node scripts/build-snapshot-bundle.mjs",
-		"check-types": "tsc --noEmit",
-		"test": "pnpm build && node --test --test-force-exit tests/*.test.mjs"
-	},
-	"dependencies": {
-		"@agentclientprotocol/sdk": "^0.16.1",
-		"@mariozechner/pi-coding-agent": "0.60.0",
-		"@mariozechner/pi-ai": "0.60.0"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/registry/agent/pi/scripts/build-snapshot-bundle.mjs b/registry/agent/pi/scripts/build-snapshot-bundle.mjs
deleted file mode 100644
index 3ba5062e9..000000000
--- a/registry/agent/pi/scripts/build-snapshot-bundle.mjs
+++ /dev/null
@@ -1,226 +0,0 @@
-/**
- * Builds the Pi SDK snapshot bundle (Step 2a).
- *
- * Bundles src/snapshot-entry.ts into a single IIFE at dist/sdk-snapshot.js that
- * evaluates the SDK graph and publishes it on globalThis.__PI_SDK_RUNTIME__. node:
- * builtins stay external (provided by the V8 runtime's bridge polyfills, already in
- * the snapshot heap); heavy provider SDKs reached only via dynamic import() stay
- * external so they remain lazy and load post-restore from the VFS.
- *
- * The build env intentionally clears DISPLAY/WAYLAND_DISPLAY (C0 mitigation): the
- * optional @mariozechner/clipboard NAPI addon is behind a DISPLAY guard; with it
- * unset the SDK bakes `clipboard = null` so no native pointer enters the snapshot.
- */
-import { createHash } from "node:crypto";
-import { createRequire } from "node:module";
-import { readFileSync, writeFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-import { pathToFileURL } from "node:url";
-
-const here = dirname(fileURLToPath(import.meta.url));
-const pkgRoot = join(here, "..");
-
-// esbuild lives in the workspace pnpm store; resolve it from there.
-const require = createRequire(import.meta.url);
-const repoRoot = join(pkgRoot, "..", "..", "..");
-let esbuildPath;
-try {
-	esbuildPath = require.resolve("esbuild", { paths: [pkgRoot, repoRoot] });
-} catch {
-	const { globSync } = await import("node:fs");
-	const matches = globSync(
-		join(repoRoot, "node_modules/.pnpm/esbuild@*/node_modules/esbuild/lib/main.js"),
-	);
-	if (matches.length === 0) throw new Error("esbuild not found in workspace");
-	esbuildPath = matches.sort().reverse()[0];
-}
-const { build } = await import(pathToFileURL(esbuildPath).href);
-// Entry/outfile are overridable (PI_SNAPSHOT_ENTRY / PI_SNAPSHOT_OUTFILE) for
-// bisection/testing; default to the committed entry + artifact.
-const entryPoint = process.env.PI_SNAPSHOT_ENTRY || join(pkgRoot, "src", "snapshot-entry.ts");
-const outfile = process.env.PI_SNAPSHOT_OUTFILE || join(pkgRoot, "dist", "sdk-snapshot.js");
-
-// Provider SDKs the pi-ai layer pulls only via dynamic import(); keep them lazy.
-const lazyExternals = [
-	"@anthropic-ai/sdk",
-	"openai",
-	"@google/genai",
-	"@mistralai/mistralai",
-	"@aws-sdk/client-bedrock-runtime",
-	"proxy-agent",
-	"@mariozechner/clipboard",
-];
-
-// The adapter deliberately imports deep `dist/core/*` paths to skip the SDK's TUI
-// graph, but the package `exports` map only exposes `.`/`./hooks`. Mirror the
-// adapter: resolve the deep specifiers to absolute file paths under the package's
-// dist dir, bypassing the exports map (esbuild bundles absolute paths fine).
-const { realpathSync, existsSync } = await import("node:fs");
-const piCodingRoot = [
-	join(pkgRoot, "node_modules/@mariozechner/pi-coding-agent"),
-	join(repoRoot, "node_modules/@mariozechner/pi-coding-agent"),
-].find((p) => existsSync(p));
-if (!piCodingRoot) throw new Error("pi-coding-agent not found in node_modules");
-const piCodingReal = realpathSync(piCodingRoot);
-const piCodingDist = join(piCodingReal, "dist");
-// pnpm sibling layout: pi-coding-agent's own deps (incl. pi-agent-core) live in the
-// same `.pnpm/<hash>/node_modules/@mariozechner` dir. Resolve transitive
-// @mariozechner/* deps from there so we bundle exactly what the SDK links against.
-const piSiblingScope = dirname(piCodingReal); // .../node_modules/@mariozechner
-const deepImportPlugin = {
-	name: "pi-deep-imports",
-	setup(b) {
-		b.onResolve({ filter: /^@mariozechner\/pi-coding-agent\/dist\// }, (a) => {
-			const rel = a.path.replace("@mariozechner/pi-coding-agent/dist/", "");
-			return { path: join(piCodingDist, rel) };
-		});
-		b.onResolve({ filter: /^@mariozechner\/pi-agent-core/ }, (a) => {
-			const sub = a.path.replace("@mariozechner/pi-agent-core", "") || "/dist/index.js";
-			return { path: join(piSiblingScope, "pi-agent-core", sub) };
-		});
-	},
-};
-
-// Bisection helper (PI_SNAPSHOT_STUB_MODULES=a,b,c): alias the named bare specifiers
-// to an empty module so they're elided from the snapshot graph — used to find which
-// heavy dep creates an un-serializable native handle at module-init.
-const stubModules = (process.env.PI_SNAPSHOT_STUB_MODULES || "")
-	.split(",")
-	.map((s) => s.trim())
-	.filter(Boolean);
-const stubPlugin = {
-	name: "pi-stub-modules",
-	setup(b) {
-		if (stubModules.length === 0) return;
-		// Substring match against the import specifier (catches bare specifiers AND
-		// relative paths like ../modes/interactive/theme/theme.js).
-		b.onResolve({ filter: /.*/ }, (a) => {
-			if (stubModules.some((m) => a.path.includes(m))) {
-				return { path: a.path, namespace: "pi-stub" };
-			}
-			return undefined;
-		});
-		b.onLoad({ filter: /.*/, namespace: "pi-stub" }, () => ({
-			// Pure CJS so esbuild interop synthesizes ANY named import as a no-op.
-			contents:
-				"module.exports = new Proxy(function () {}, { get: function () { return function () {}; } });",
-			loader: "js",
-		}));
-	},
-};
-
-// Make the bundle SNAPSHOT-SAFE by eliminating its two top-level I/O hazards at
-// build time, so the IIFE evaluates as pure JS (no fs read, no pending promise)
-// when run into the V8 snapshot where bridge fns are stubs. See the C0 scan.
-const snapshotSafePlugin = {
-	name: "pi-snapshot-safe",
-	setup(b) {
-		// config.js bakes VERSION/APP_NAME from a top-level readFileSync(package.json).
-		// Inline the real package.json content so no fs read happens at eval.
-		const piCodingPkgJson = readFileSync(
-			join(piCodingReal, "package.json"),
-			"utf8",
-		);
-		b.onLoad({ filter: /\/pi-coding-agent\/dist\/config\.js$/ }, (a) => {
-			let src = readFileSync(a.path, "utf8");
-			const needle = 'readFileSync(getPackageJsonPath(), "utf-8")';
-			if (!src.includes(needle)) {
-				throw new Error(
-					"snapshot-safe: config.js readFileSync(package.json) shape changed; update the transform",
-				);
-			}
-			src = src.replace(needle, JSON.stringify(piCodingPkgJson));
-			return { contents: src, loader: "js" };
-		});
-		// env-api-keys.js eagerly fires 3 fire-and-forget dynamicImport().then()
-		// at top level, leaving pending promises. Convert to synchronous require()
-		// (grabs the polyfill module reference only — no I/O, no pending promise),
-		// preserving the feature post-restore.
-		const ENV_API_KEYS_EAGER_IMPORTS = 3;
-		b.onLoad({ filter: /\/pi-ai\/dist\/env-api-keys\.js$/ }, (a) => {
-			let src = readFileSync(a.path, "utf8");
-			const re =
-				/dynamicImport\((NODE_\w+_SPECIFIER)\)\.then\(\(m\)\s*=>\s*\{\s*(_\w+)\s*=\s*m\.(\w+);\s*\}\);/g;
-			// Count matches BEFORE replacing: a `src === before` check only catches a
-			// total shape change. If upstream adds a 4th eager import (or drops one),
-			// the regex would silently transform a subset and leave a pending-promise
-			// hazard at module-init — re-breaking snapshot-safety with no build error.
-			// Assert the exact expected count so any drift fails the build loudly.
-			const matchCount = (src.match(re) || []).length;
-			if (matchCount !== ENV_API_KEYS_EAGER_IMPORTS) {
-				throw new Error(
-					`snapshot-safe: env-api-keys.js eager dynamicImport shape changed ` +
-						`(found ${matchCount}, expected ${ENV_API_KEYS_EAGER_IMPORTS}); update the transform`,
-				);
-			}
-			src = src.replace(
-				re,
-				(_m, spec, lhs, prop) => `try { ${lhs} = require(${spec}).${prop}; } catch {}`,
-			);
-			return { contents: src, loader: "js" };
-		});
-		// pi-tui/dist/utils.js creates a module-level `new Intl.Segmenter(...)` — an
-		// ICU-backed native (External) object that V8's SnapshotCreator cannot
-		// serialize ("global handle not serialized: <Foreign>"). Lazy-init it behind
-		// a Proxy so the real segmenter is created on first use (post-restore, where
-		// Intl is fully available) instead of at module-init. The headless ACP adapter
-		// never renders the TUI, so the segmenter is only touched after restore anyway.
-		b.onLoad({ filter: /\/pi-tui\/dist\/utils\.js$/ }, (a) => {
-			let src = readFileSync(a.path, "utf8");
-			const needle =
-				'const segmenter = new Intl.Segmenter(undefined, { granularity: "grapheme" });';
-			if (!src.includes(needle)) {
-				throw new Error(
-					"snapshot-safe: pi-tui utils.js Intl.Segmenter singleton shape changed; update the transform",
-				);
-			}
-			src = src.replace(
-				needle,
-				"const segmenter = (() => { let s; const get = () => (s || (s = new Intl.Segmenter(undefined, { granularity: \"grapheme\" }))); return new Proxy({}, { get: (_, k) => { const v = get()[k]; return typeof v === \"function\" ? v.bind(get()) : v; } }); })();",
-			);
-			return { contents: src, loader: "js" };
-		});
-	},
-};
-
-// esbuild stubs `import.meta` to `{}` in IIFE output, so import.meta.url is
-// undefined and the SDK's top-level install-detection (fileURLToPath(import.meta.url))
-// crashes. Pin it to a single deterministic URL: the SDK's projected guest path, so
-// any top-level dir/version computation resolves to where the SDK actually lives in
-// the VM. Override with PI_SNAPSHOT_BASE_URL (e.g. the real host path for testing).
-const baseUrl =
-	process.env.PI_SNAPSHOT_BASE_URL ||
-	"file:///root/node_modules/@mariozechner/pi-coding-agent/dist/index.js";
-
-const result = await build({
-	entryPoints: [entryPoint],
-	outfile,
-	bundle: true,
-	format: "iife",
-	platform: "node", // node: builtins become external require() calls
-	target: "esnext",
-	external: lazyExternals,
-	plugins: [stubPlugin, deepImportPlugin, snapshotSafePlugin],
-	define: {
-		"import.meta.url": JSON.stringify(baseUrl),
-		// C0 mitigation: force the headless path in the clipboard native-addon
-		// guard so `require("@mariozechner/clipboard")` (a NAPI addon) is never
-		// triggered at snapshot-eval time, regardless of the sidecar's env.
-		"process.env.DISPLAY": '""',
-		"process.env.WAYLAND_DISPLAY": '""',
-		"process.env.TERMUX_VERSION": '""',
-	},
-	legalComments: "none",
-	logLevel: "info",
-	metafile: true,
-});
-
-const bytes = readFileSync(outfile);
-const sha256 = createHash("sha256").update(bytes).digest("hex");
-writeFileSync(`${outfile}.sha256`, `${sha256}\n`);
-
-const inputs = Object.keys(result.metafile.inputs).length;
-console.log(
-	`\nsdk-snapshot.js: ${(bytes.length / 1024).toFixed(0)} KiB · ${inputs} modules inlined · sha256 ${sha256.slice(0, 12)}…`,
-);
diff --git a/registry/agent/pi/scripts/copy-snapshot-into-package.mjs b/registry/agent/pi/scripts/copy-snapshot-into-package.mjs
deleted file mode 100644
index ac2cbc284..000000000
--- a/registry/agent/pi/scripts/copy-snapshot-into-package.mjs
+++ /dev/null
@@ -1,48 +0,0 @@
-/**
- * Copies the Pi SDK V8 snapshot bundle into the assembled `dist/package/` closure
- * and refreshes `dist/package.tar`.
- *
- * The descriptor's `packageTar` points at `dist/package.tar` (the clean runtime closure the
- * sidecar projects into `/opt/agentos/pi/<version>`). The agent-os host reads the
- * snapshot bundle from `<dir>/dist/sdk-snapshot.js`
- * (`resolveAgentSnapshotBundle()` in `@rivet-dev/agentos-core`), so the bundle —
- * built by `build-snapshot-bundle.mjs` at `dist/sdk-snapshot.js` — must be mirrored
- * to `dist/package/dist/sdk-snapshot.js` (plus its `.sha256`). The toolchain `pack`
- * rebuilds `dist/package/` from scratch, so this runs AFTER pack and then refreshes
- * the tar.
- */
-import { execFileSync } from "node:child_process";
-import { copyFileSync, existsSync, mkdirSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const here = dirname(fileURLToPath(import.meta.url));
-const pkgRoot = join(here, "..");
-const srcDir = join(pkgRoot, "dist");
-const destDir = join(pkgRoot, "dist", "package", "dist");
-
-const files = ["sdk-snapshot.js", "sdk-snapshot.js.sha256"];
-
-const missing = files.filter((f) => !existsSync(join(srcDir, f)));
-if (missing.length > 0) {
-	throw new Error(
-		`copy-snapshot-into-package: missing snapshot artifact(s) ${missing.join(", ")} in ${srcDir}; ` +
-			`run build-snapshot-bundle.mjs first`,
-	);
-}
-if (!existsSync(join(pkgRoot, "dist", "package", "agentos-package.json"))) {
-	throw new Error(
-		`copy-snapshot-into-package: dist/package not assembled; run the toolchain pack first`,
-	);
-}
-
-mkdirSync(destDir, { recursive: true });
-for (const f of files) {
-	copyFileSync(join(srcDir, f), join(destDir, f));
-}
-execFileSync("tar", ["-cf", join(pkgRoot, "dist", "package.tar"), "-C", join(pkgRoot, "dist", "package"), "."], {
-	stdio: "pipe",
-});
-console.log(
-	`copy-snapshot-into-package: mirrored ${files.join(", ")} -> dist/package/dist/ and refreshed dist/package.tar`,
-);
diff --git a/registry/agent/pi/src/adapter.ts b/registry/agent/pi/src/adapter.ts
deleted file mode 100644
index 6fb8a3bf6..000000000
--- a/registry/agent/pi/src/adapter.ts
+++ /dev/null
@@ -1,1559 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Pi SDK ACP Adapter
- *
- * ACP-compliant adapter that embeds the Pi coding agent SDK directly
- * instead of spawning a subprocess. This avoids loading ~100MB of TUI
- * code that the CLI pulls in even in headless mode.
- *
- * Speaks ACP JSON-RPC over stdin/stdout using @agentclientprotocol/sdk.
- * Internally builds a real Pi AgentSession without loading the CLI's
- * resource loader path, which pulls jiti into the VM runtime.
- */
-
-import {
-	type Agent,
-	AgentSideConnection,
-	type RequestError,
-	ndJsonStream,
-} from "@agentclientprotocol/sdk";
-import type {
-	AuthenticateRequest,
-	AuthenticateResponse,
-	CancelNotification,
-	InitializeRequest,
-	InitializeResponse,
-	NewSessionRequest,
-	NewSessionResponse,
-	PromptRequest,
-	PromptResponse,
-	SetSessionModeRequest,
-	SetSessionModeResponse,
-	SessionNotification,
-} from "@agentclientprotocol/sdk";
-import type {
-	AgentSessionEvent,
-} from "@mariozechner/pi-coding-agent";
-import {
-	existsSync,
-	readFileSync,
-	readdirSync,
-	writeFileSync,
-} from "node:fs";
-import { createRequire } from "node:module";
-import { isAbsolute, join, resolve as resolvePath } from "node:path";
-import { PassThrough } from "node:stream";
-
-// ── Phase tracing (opt-in via PI_TRACE_FILE) ────────────────────────
-// Emits Chrome-trace ("X") events for newSession sub-phases so the otherwise
-// opaque ACP `session/new` span can be broken down and compared against the
-// bare-node equivalent. The file is written in the guest VFS and read by the
-// host (e.g. the benchmark) via vm.readFile.
-function startPhaseTrace() {
-	const spans: { name: string; ts: number; dur: number }[] = [];
-	const t0 = Date.now();
-	return {
-		async span<T>(name: string, fn: () => Promise<T> | T): Promise<T> {
-			const start = Date.now();
-			try {
-				return await fn();
-			} finally {
-				spans.push({ name, ts: (start - t0) * 1000, dur: (Date.now() - start) * 1000 });
-			}
-		},
-		flush(extra: Record<string, unknown> = {}) {
-			const file = process.env.PI_TRACE_FILE;
-			if (!file) return;
-			const events = [
-				{ name: "newSession", cat: "pi", ph: "X", pid: 1, tid: 1, ts: 0, dur: (Date.now() - t0) * 1000, args: extra },
-				...spans.map((s) => ({ name: s.name, cat: "pi", ph: "X", pid: 1, tid: 1, ts: s.ts, dur: s.dur })),
-			];
-			try {
-				writeFileSync(file, JSON.stringify(events));
-			} catch {
-				/* tracing is best-effort */
-			}
-		},
-	};
-}
-
-const PI_SDK_PACKAGE = "@mariozechner/pi-coding-agent";
-const MODULE_ACCESS_NODE_MODULES = "/root/node_modules";
-const require = createRequire(import.meta.url);
-
-const realStdin = process.stdin;
-const bufferedStdin = new PassThrough();
-(bufferedStdin as PassThrough & { isTTY?: boolean; fd?: number }).isTTY =
-	realStdin.isTTY;
-(bufferedStdin as PassThrough & { isTTY?: boolean; fd?: number }).fd =
-	realStdin.fd;
-if (typeof realStdin.setRawMode === "function") {
-	(
-		bufferedStdin as PassThrough & {
-			setRawMode?: (mode: boolean) => void;
-		}
-	).setRawMode = realStdin.setRawMode.bind(realStdin);
-}
-Object.defineProperty(process, "stdin", {
-	configurable: true,
-	enumerable: true,
-	value: bufferedStdin,
-});
-
-type SessionManagerLike = {
-	inMemory(cwd?: string): unknown;
-};
-
-type ModelLike = {
-	id: string;
-	provider: string;
-	baseUrl?: string;
-	reasoning?: boolean;
-};
-
-type MinimalResourceLoaderLike = {
-	reload(): Promise<void>;
-	getExtensions(): {
-		extensions: unknown[];
-		errors: unknown[];
-		runtime: {
-			flagValues: Map<string, unknown>;
-			pendingProviderRegistrations: Array<{
-				name: string;
-				config: unknown;
-			}>;
-		};
-	};
-	getSkills(): { skills: unknown[]; diagnostics: unknown[] };
-	getPrompts(): { prompts: unknown[]; diagnostics: unknown[] };
-	getThemes(): { themes: unknown[]; diagnostics: unknown[] };
-	getAgentsFiles(): { agentsFiles: unknown[] };
-	getSystemPrompt(): string;
-	getAppendSystemPrompt(): string[];
-	getPathMetadata(): Map<string, unknown>;
-	extendResources(_paths: string[]): void;
-};
-
-type PiAgentCoreLike = new (config: {
-	initialState: {
-		systemPrompt: string;
-		model: ModelLike | undefined;
-		thinkingLevel: string;
-		tools: unknown[];
-	};
-	convertToLlm: (messages: unknown[]) => unknown[];
-	onPayload: (payload: unknown, model: unknown) => Promise<unknown>;
-	sessionId: string;
-	transformContext: (messages: unknown[]) => Promise<unknown[]>;
-	steeringMode: unknown;
-	followUpMode: unknown;
-	transport: unknown;
-	thinkingBudgets: unknown;
-	maxRetryDelayMs: number;
-	getApiKey: (provider?: string) => Promise<string>;
-}) => {
-	state: {
-		model?: ModelLike;
-		thinkingLevel: string;
-	};
-	subscribe(listener: (event: unknown) => void): () => void;
-	prompt(text: string): Promise<void>;
-	abort(): void;
-	setThinkingLevel(level: string): void;
-	setTools(tools: PiToolLike[]): void;
-	setSystemPrompt(prompt: string): void;
-	replaceMessages(messages: unknown[]): void;
-};
-
-type SettingsManagerInstanceLike = {
-	getDefaultProvider(): string | undefined;
-	getDefaultModel(): string | undefined;
-	getDefaultThinkingLevel(): string | undefined;
-	getBlockImages(): boolean;
-	getSteeringMode(): unknown;
-	getFollowUpMode(): unknown;
-	getTransport(): unknown;
-	getThinkingBudgets(): unknown;
-	getRetrySettings(): { maxDelayMs: number };
-	getShellCommandPrefix(): string | undefined;
-	getImageAutoResize(): boolean;
-};
-
-type ModelRegistryInstanceLike = {
-	find(provider: string, modelId: string): ModelLike | undefined;
-	getAvailable(): Promise<ModelLike[]>;
-	getApiKey(model: ModelLike): Promise<string | undefined>;
-	getApiKeyForProvider(provider: string): Promise<string | undefined>;
-	isUsingOAuth(model: ModelLike): boolean;
-};
-
-type SessionManagerInstanceLike = {
-	buildSessionContext(): {
-		messages: unknown[];
-		model?: { provider: string; modelId: string };
-		thinkingLevel?: string;
-	};
-	getBranch(): Array<{ type: string }>;
-	appendModelChange(provider: string, modelId: string): void;
-	appendThinkingLevelChange(thinkingLevel: string): void;
-	getSessionId(): string;
-};
-
-type PiToolLike = {
-	name: string;
-	description?: string;
-	parameters?: unknown;
-	execute(
-		toolCallId: string,
-		args: unknown,
-		signal: AbortSignal,
-		onUpdate?: (partialResult: unknown) => void,
-	): Promise<{
-		content: unknown;
-		details?: unknown;
-	}>;
-};
-
-type ExtensionFactoryLike = (api: unknown) => unknown;
-
-type PiSessionLike = {
-	readonly sessionId: string;
-	readonly thinkingLevel: string;
-	readonly messages: unknown[];
-	subscribe(
-		listener: (event: AgentSessionEvent) => void,
-	): () => void;
-	getAvailableThinkingLevels(): string[];
-	prompt(text: string): Promise<void>;
-	abort(): Promise<void>;
-	setThinkingLevel(level: string): void;
-};
-
-type PiSdkRuntime = {
-	Agent: PiAgentCoreLike;
-	AuthStorage: {
-		create(authPath?: string): unknown;
-	};
-	DefaultResourceLoader: new (options: {
-		cwd?: string;
-		agentDir?: string;
-		settingsManager?: SettingsManagerInstanceLike;
-		appendSystemPrompt?: string;
-		extensionFactories?: ExtensionFactoryLike[];
-		noExtensions?: boolean;
-	}) => MinimalResourceLoaderLike;
-	DEFAULT_THINKING_LEVEL: string;
-	ModelRegistry: new (authStorage: unknown, modelsPath?: string) => {
-		find(provider: string, modelId: string): ModelLike | undefined;
-		getAvailable(): Promise<ModelLike[]>;
-		getApiKey(model: ModelLike): Promise<string | undefined>;
-		getApiKeyForProvider(provider: string): Promise<string | undefined>;
-		isUsingOAuth(model: ModelLike): boolean;
-	};
-	SettingsManager: {
-		create(cwd?: string, agentDir?: string): SettingsManagerInstanceLike;
-	};
-	SessionManager: SessionManagerLike;
-	convertToLlm(messages: unknown[]): unknown[];
-	getAgentDir(): string;
-	getDocsPath(): string;
-	createAgentSession(options?: {
-		cwd?: string;
-		agentDir?: string;
-		sessionManager?: unknown;
-		resourceLoader?: MinimalResourceLoaderLike;
-		settingsManager?: SettingsManagerInstanceLike;
-		tools?: PiToolLike[];
-		customTools?: PiToolLike[];
-	}): Promise<{ session: PiSessionLike; modelFallbackMessage?: string }>;
-	createCodingTools(
-		cwd: string,
-		options?: {
-			read?: { autoResizeImages?: boolean };
-			bash?: {
-				commandPrefix?: string;
-			};
-		},
-	): PiToolLike[];
-	createAllTools(
-		cwd: string,
-		options?: {
-			read?: { autoResizeImages?: boolean };
-			bash?: {
-				commandPrefix?: string;
-			};
-		},
-	): Record<string, PiToolLike>;
-};
-
-let piSdkRuntimePromise: Promise<PiSdkRuntime> | undefined;
-
-class MinimalPiSession implements PiSessionLike {
-	private readonly listeners = new Set<
-		(event: AgentSessionEvent) => void
-	>();
-
-	constructor(
-		private readonly agent: InstanceType<PiAgentCoreLike>,
-		private readonly sessionManager: SessionManagerInstanceLike,
-		private readonly settingsManager: SettingsManagerInstanceLike,
-		private readonly resourceLoader: MinimalResourceLoaderLike,
-		private readonly runtime: Pick<PiSdkRuntime, "createAllTools">,
-		private readonly cwd: string,
-		private readonly appendPrompt?: string,
-	) {
-		this.agent.subscribe((event) => {
-			this.emit(event as AgentSessionEvent);
-		});
-		this.rebuildRuntime();
-	}
-
-	get sessionId(): string {
-		return this.sessionManager.getSessionId();
-	}
-
-	get thinkingLevel(): string {
-		return this.agent.state.thinkingLevel;
-	}
-
-	get messages(): unknown[] {
-		return (this.agent as { state: { messages?: unknown[] } }).state.messages ?? [];
-	}
-
-	subscribe(listener: (event: AgentSessionEvent) => void): () => void {
-		this.listeners.add(listener);
-		return () => this.listeners.delete(listener);
-	}
-
-	getAvailableThinkingLevels(): string[] {
-		return this.agent.state.model?.reasoning
-			? ["off", "minimal", "low", "medium", "high"]
-			: ["off"];
-	}
-
-	async prompt(text: string): Promise<void> {
-		await this.agent.prompt(text);
-	}
-
-	async abort(): Promise<void> {
-		this.agent.abort();
-	}
-
-	setThinkingLevel(level: string): void {
-		const nextLevel = this.agent.state.model?.reasoning ? level : "off";
-		this.agent.setThinkingLevel(nextLevel);
-		this.sessionManager.appendThinkingLevelChange(nextLevel);
-	}
-
-	private emit(event: AgentSessionEvent): void {
-		for (const listener of this.listeners) {
-			listener(event);
-		}
-	}
-
-	private rebuildRuntime(): void {
-		const baseTools = this.runtime.createAllTools(this.cwd, {
-			read: {
-				autoResizeImages: this.settingsManager.getImageAutoResize(),
-			},
-			bash: {
-				commandPrefix: this.settingsManager.getShellCommandPrefix(),
-			},
-		});
-		const activeToolNames = ["read", "bash", "edit", "write"].filter(
-			(name) => name in baseTools,
-		);
-		this.agent.setTools(
-			activeToolNames.map((name) => baseTools[name]).filter(Boolean),
-		);
-		this.agent.setSystemPrompt(
-			buildAdapterSystemPrompt(this.cwd, this.appendPrompt),
-		);
-	}
-}
-
-function buildAdapterSystemPrompt(
-	cwd: string,
-	appendPrompt?: string,
-): string {
-	const date = new Date().toISOString().slice(0, 10);
-	const extra = appendPrompt ? `\n\n${appendPrompt}` : "";
-	return (
-		"You are an expert coding assistant operating inside Pi's ACP adapter.\n" +
-		"Use the available tools when they help complete the user's request.\n" +
-		"Be concise, prefer direct file and shell operations, and describe file paths clearly." +
-		`${extra}\nCurrent date: ${date}\nCurrent working directory: ${cwd}`
-	);
-}
-
-const DISCOVERED_EXTENSION_INDEX_CANDIDATES = [
-	"index.js",
-	"index.mjs",
-	"index.cjs",
-] as const;
-
-function isDiscoveredExtensionEntry(name: string): boolean {
-	return (
-		name.endsWith(".js") || name.endsWith(".mjs") || name.endsWith(".cjs")
-	);
-}
-
-function discoverAutoExtensionPaths(cwd: string, agentDir: string): string[] {
-	const extensionRoots = [join(agentDir, "extensions"), join(cwd, ".pi", "extensions")];
-	const discovered = new Set<string>();
-
-	for (const root of extensionRoots) {
-		if (!existsSync(root)) {
-			continue;
-		}
-		for (const entry of readdirSync(root, { withFileTypes: true })) {
-			const entryPath = join(root, entry.name);
-			if (entry.isFile() && isDiscoveredExtensionEntry(entry.name)) {
-				discovered.add(entryPath);
-				continue;
-			}
-			if (!entry.isDirectory()) {
-				continue;
-			}
-			for (const candidate of DISCOVERED_EXTENSION_INDEX_CANDIDATES) {
-				const candidatePath = join(entryPath, candidate);
-				if (existsSync(candidatePath)) {
-					discovered.add(candidatePath);
-					break;
-				}
-			}
-		}
-	}
-
-	return [...discovered].sort();
-}
-
-function readCommonJsExtensionFactory(
-	extensionPath: string,
-): ExtensionFactoryLike | undefined {
-	const required = require(extensionPath);
-	if (typeof required === "function") {
-		return required as ExtensionFactoryLike;
-	}
-	if (typeof required?.default === "function") {
-		return required.default as ExtensionFactoryLike;
-	}
-	return undefined;
-}
-
-// Temporary workaround: the V8 module loader currently fails dynamic
-// import() of ESM `.js` extension files, so this evaluates a transformed
-// copy of bare `export default` extensions. It cannot handle `import`
-// statements or named exports. Delete this once the loader supports ESM
-// `.js` dynamic import.
-function readInlineDefaultExportFactory(
-	extensionPath: string,
-): ExtensionFactoryLike | undefined {
-	const source = readFileSync(extensionPath, "utf8");
-	if (!/\bexport\s+default\b/.test(source)) {
-		return undefined;
-	}
-
-	const module = { exports: {} as { default?: unknown } };
-	const transformed = source.replace(
-		/\bexport\s+default\b/,
-		"module.exports.default =",
-	);
-	new Function("module", "exports", "require", transformed)(
-		module,
-		module.exports,
-		require,
-	);
-
-	return typeof module.exports.default === "function"
-		? (module.exports.default as ExtensionFactoryLike)
-		: undefined;
-}
-
-async function loadExtensionFactoryFromPath(
-	extensionPath: string,
-): Promise<ExtensionFactoryLike | undefined> {
-	if (extensionPath.endsWith(".cjs")) {
-		return readCommonJsExtensionFactory(extensionPath);
-	}
-
-	if (extensionPath.endsWith(".mjs")) {
-		const module = await import(extensionPath);
-		return typeof module.default === "function"
-			? (module.default as ExtensionFactoryLike)
-			: undefined;
-	}
-
-	try {
-		return readCommonJsExtensionFactory(extensionPath);
-	} catch (error) {
-		let inlineFactory: ExtensionFactoryLike | undefined;
-		try {
-			inlineFactory = readInlineDefaultExportFactory(extensionPath);
-		} catch (inlineError) {
-			const inlineMessage =
-				inlineError instanceof Error ? inlineError.message : String(inlineError);
-			if (error instanceof Error) {
-				error.message = `${error.message} (inline default-export fallback also failed: ${inlineMessage})`;
-			}
-			throw error;
-		}
-		if (inlineFactory) {
-			return inlineFactory;
-		}
-		throw error;
-	}
-}
-
-async function loadDiscoveredExtensionFactories(
-	cwd: string,
-	agentDir: string,
-): Promise<{
-	extensionFactories: ExtensionFactoryLike[];
-	errors: Array<{ path: string; error: string }>;
-}> {
-	const extensionFactories: ExtensionFactoryLike[] = [];
-	const errors: Array<{ path: string; error: string }> = [];
-
-	for (const extensionPath of discoverAutoExtensionPaths(cwd, agentDir)) {
-		try {
-			const factory = await loadExtensionFactoryFromPath(extensionPath);
-			if (!factory) {
-				errors.push({
-					path: extensionPath,
-					error: "Extension does not export a valid factory function",
-				});
-				continue;
-			}
-			extensionFactories.push(factory);
-		} catch (error) {
-			errors.push({
-				path: extensionPath,
-				error: error instanceof Error ? error.message : String(error),
-			});
-		}
-	}
-
-	return { extensionFactories, errors };
-}
-
-class MinimalResourceLoader implements MinimalResourceLoaderLike {
-	private readonly runtime = {
-		flagValues: new Map<string, unknown>(),
-		pendingProviderRegistrations: [] as Array<{
-			name: string;
-			config: unknown;
-		}>,
-	};
-
-	constructor(private readonly options: { appendSystemPrompt?: string }) {}
-
-	async reload(): Promise<void> {}
-
-	getExtensions() {
-		return {
-			extensions: [],
-			errors: [],
-			runtime: this.runtime,
-		};
-	}
-
-	getSkills() {
-		return { skills: [], diagnostics: [] };
-	}
-
-	getPrompts() {
-		return { prompts: [], diagnostics: [] };
-	}
-
-	getThemes() {
-		return { themes: [], diagnostics: [] };
-	}
-
-	getAgentsFiles() {
-		return { agentsFiles: [] };
-	}
-
-	getSystemPrompt(): string {
-		return "";
-	}
-
-	getAppendSystemPrompt(): string[] {
-		return this.options.appendSystemPrompt ? [this.options.appendSystemPrompt] : [];
-	}
-
-	getPathMetadata(): Map<string, unknown> {
-		return new Map();
-	}
-
-	extendResources(_paths: string[]): void {}
-}
-
-function findInstalledPackageRoot(packageName: string): string | null {
-	const searchPaths = require.resolve.paths(packageName) ?? [];
-	for (const basePath of searchPaths) {
-		const candidateRoot = join(basePath, packageName);
-		if (existsSync(join(candidateRoot, "package.json"))) {
-			return candidateRoot;
-		}
-	}
-	return null;
-}
-
-function findProjectedPackageRoot(packageName: string): string {
-	const installedRoot = findInstalledPackageRoot(packageName);
-	if (installedRoot) {
-		return installedRoot;
-	}
-
-	const directRoot = `${MODULE_ACCESS_NODE_MODULES}/${packageName}`;
-	const pnpmRoot = `${MODULE_ACCESS_NODE_MODULES}/.pnpm`;
-	const pnpmPrefix = `${packageName.replace("/", "+")}@`;
-
-	if (existsSync(pnpmRoot)) {
-		for (const entry of readdirSync(pnpmRoot)) {
-			if (!entry.startsWith(pnpmPrefix)) continue;
-			const candidateRoot = join(pnpmRoot, entry, "node_modules", packageName);
-			if (existsSync(join(candidateRoot, "package.json"))) {
-				return candidateRoot;
-			}
-		}
-	}
-
-	return directRoot;
-}
-
-// When the agent SDK has been evaluated into the V8 startup snapshot (built once
-// per sidecar), its runtime API is already present on this global — published by
-// the snapshot build-entry (snapshot-entry.ts). Reading it skips the per-session
-// dynamic-import + evaluate of the whole SDK graph entirely.
-const PI_SDK_RUNTIME_GLOBAL = "__PI_SDK_RUNTIME__";
-
-function readSnapshotRuntime(): PiSdkRuntime | undefined {
-	const candidate = (globalThis as Record<string, unknown>)[
-		PI_SDK_RUNTIME_GLOBAL
-	];
-	if (
-		candidate &&
-		typeof candidate === "object" &&
-		typeof (candidate as PiSdkRuntime).createAgentSession === "function"
-	) {
-		return candidate as PiSdkRuntime;
-	}
-	return undefined;
-}
-
-async function loadPiSdkRuntime(): Promise<PiSdkRuntime> {
-	if (!piSdkRuntimePromise) {
-		// Snapshot fast path: the SDK runtime is already on the global (evaluated
-		// into the snapshot at sidecar startup). No I/O, no module resolution.
-		const snapshotRuntime = readSnapshotRuntime();
-		if (snapshotRuntime) {
-			piSdkRuntimePromise = Promise.resolve(snapshotRuntime);
-			return piSdkRuntimePromise;
-		}
-		// Fallback: load the SDK from the guest VFS via dynamic import (the path
-		// used when no snapshot is present, e.g. a cold/unsupported runtime).
-		piSdkRuntimePromise = (async () => {
-			const packageRoot = findProjectedPackageRoot(PI_SDK_PACKAGE);
-			const agentCoreRoot = findProjectedPackageRoot("@mariozechner/pi-agent-core");
-			const [
-				agentCoreModule,
-				authStorageModule,
-				configModule,
-				defaultsModule,
-				messagesModule,
-				modelRegistryModule,
-				resourceLoaderModule,
-				sdkModule,
-				sessionManagerModule,
-				settingsManagerModule,
-				toolsModule,
-			] =
-				await Promise.all([
-					import(`${agentCoreRoot}/dist/index.js`),
-					import(`${packageRoot}/dist/core/auth-storage.js`),
-					import(`${packageRoot}/dist/config.js`),
-					import(`${packageRoot}/dist/core/defaults.js`),
-					import(`${packageRoot}/dist/core/messages.js`),
-					import(`${packageRoot}/dist/core/model-registry.js`),
-					import(`${packageRoot}/dist/core/resource-loader.js`),
-					import(`${packageRoot}/dist/core/sdk.js`),
-					import(`${packageRoot}/dist/core/session-manager.js`),
-					import(`${packageRoot}/dist/core/settings-manager.js`),
-					import(`${packageRoot}/dist/core/tools/index.js`),
-				]);
-
-			return {
-				Agent: agentCoreModule.Agent as PiAgentCoreLike,
-				AuthStorage: authStorageModule.AuthStorage as PiSdkRuntime["AuthStorage"],
-				DefaultResourceLoader:
-					resourceLoaderModule.DefaultResourceLoader as PiSdkRuntime["DefaultResourceLoader"],
-				DEFAULT_THINKING_LEVEL:
-					defaultsModule.DEFAULT_THINKING_LEVEL as string,
-				ModelRegistry:
-					modelRegistryModule.ModelRegistry as PiSdkRuntime["ModelRegistry"],
-				SettingsManager:
-					settingsManagerModule.SettingsManager as PiSdkRuntime["SettingsManager"],
-				SessionManager: sessionManagerModule.SessionManager as SessionManagerLike,
-				convertToLlm:
-					messagesModule.convertToLlm as PiSdkRuntime["convertToLlm"],
-				getAgentDir: configModule.getAgentDir as PiSdkRuntime["getAgentDir"],
-				getDocsPath: configModule.getDocsPath as PiSdkRuntime["getDocsPath"],
-				createAgentSession:
-					sdkModule.createAgentSession as PiSdkRuntime["createAgentSession"],
-				createCodingTools:
-					sdkModule.createCodingTools as PiSdkRuntime["createCodingTools"],
-				createAllTools:
-					toolsModule.createAllTools as PiSdkRuntime["createAllTools"],
-			};
-		})();
-	}
-
-	return piSdkRuntimePromise;
-}
-
-async function createAgentSession(options: {
-	cwd: string;
-	sessionManager: unknown;
-	resourceLoader: MinimalResourceLoaderLike;
-	tools?: PiToolLike[];
-}): Promise<{ session: PiSessionLike; modelFallbackMessage?: string }> {
-	const { createAgentSession: createPiAgentSession, SettingsManager } =
-		await loadPiSdkRuntime();
-
-	const cwd = options.cwd;
-	const homeDir = process.env.HOME || "/home/agentos";
-	const agentDir = join(homeDir, ".pi", "agent");
-	const settingsManager = SettingsManager.create(cwd, agentDir);
-	const result = await createPiAgentSession({
-		cwd,
-		agentDir,
-		sessionManager: options.sessionManager,
-		resourceLoader: options.resourceLoader,
-		settingsManager,
-		tools: options.tools,
-		customTools: options.tools,
-	});
-	applyAnthropicBaseUrlOverride(result.session);
-	return result;
-}
-
-function applyAnthropicBaseUrlOverride(session: PiSessionLike): void {
-	const baseUrl = process.env.ANTHROPIC_BASE_URL;
-	if (!baseUrl) return;
-	const agent = (session as { agent?: { state?: { model?: ModelLike } } }).agent;
-	const model = agent?.state?.model;
-	if (model?.provider !== "anthropic") return;
-	if (!agent?.state) return;
-	agent.state.model = { ...model, baseUrl };
-}
-
-// ── CLI argument parsing ────────────────────────────────────────────
-
-let appendSystemPrompt: string | undefined;
-const argv = process.argv.slice(2);
-for (let i = 0; i < argv.length; i++) {
-	if (argv[i] === "--append-system-prompt" && i + 1 < argv.length) {
-		appendSystemPrompt = argv[i + 1];
-		i++;
-	}
-}
-
-// ── Agent implementation ────────────────────────────────────────────
-
-// Exported for unit tests (drive the translation handlers with a mock
-// connection + a fake session). Not part of the package's public API.
-export class PiSdkAgent implements Agent {
-	private conn: AgentSideConnection;
-	private session: PiSessionLike | null = null;
-	private sessionId = "";
-	private cwd = "/workspace";
-	private cancelRequested = false;
-	private currentToolCalls = new Map<string, string>();
-	private emittedAssistantText = false;
-	private bufferingUpdates = false;
-	private pendingUpdates: SessionNotification["update"][] = [];
-	private streamedTextContent = new Set<string>();
-	private editSnapshots = new Map<
-		string,
-		{ path: string; oldText: string }
-	>();
-	private lastEmit: Promise<void> = Promise.resolve();
-	private unsubscribe: (() => void) | null = null;
-	private disposed = false;
-
-	constructor(conn: AgentSideConnection) {
-		this.conn = conn;
-		// The ACP connection ending is the only unconditional teardown signal for
-		// this adapter (there is no SDK-invoked close hook). Drop the live Pi event
-		// subscription on connection close so a closed connection doesn't leave a
-		// listener — and the session it closes over — alive. Defer to the next tick:
-		// AgentSideConnection invokes this agent factory mid-construction, so
-		// `conn.closed` is not yet readable synchronously here (matches the claude
-		// adapter's pattern).
-		setTimeout(() => {
-			void this.conn.closed.then(() => this.dispose());
-		}, 0);
-	}
-
-	private dispose(): void {
-		this.disposed = true;
-		if (this.unsubscribe) {
-			this.unsubscribe();
-			this.unsubscribe = null;
-		}
-		this.session = null;
-	}
-
-	async initialize(
-		_params: InitializeRequest,
-	): Promise<InitializeResponse> {
-		return {
-			protocolVersion: 1,
-			agentInfo: {
-				name: "pi-sdk-acp",
-				title: "Pi SDK ACP adapter",
-				version: "0.1.0",
-			},
-			agentCapabilities: {
-				promptCapabilities: {
-					image: true,
-					audio: false,
-					embeddedContext: false,
-				},
-			},
-		};
-	}
-
-	async newSession(
-		params: NewSessionRequest,
-	): Promise<NewSessionResponse> {
-		const __trace = startPhaseTrace();
-		this.cwd = params.cwd;
-		process.chdir(params.cwd);
-		const agentDir = join(process.env.HOME || "/home/agentos", ".pi", "agent");
-		const {
-			DefaultResourceLoader,
-			SessionManager,
-			SettingsManager,
-			createCodingTools,
-		} = await __trace.span("loadPiSdkRuntime", () => loadPiSdkRuntime());
-		const { extensionFactories, errors: extensionLoadErrors } =
-			await __trace.span("loadExtensions", () =>
-				loadDiscoveredExtensionFactories(params.cwd, agentDir),
-			);
-		// Step 3: when no workspace extensions were discovered (the common case),
-		// skip DefaultResourceLoader entirely — it eagerly loads skills/themes/
-		// prompts/agentsFiles (~250ms) the headless ACP adapter doesn't use. The
-		// MinimalResourceLoader's reload() is a no-op. Only the full loader (with its
-		// extension runtime) is constructed when extensions are actually present.
-		const resourceLoader: MinimalResourceLoaderLike =
-			extensionFactories.length > 0
-				? new DefaultResourceLoader({
-						cwd: params.cwd,
-						agentDir,
-						noExtensions: true,
-						extensionFactories,
-						...(appendSystemPrompt ? { appendSystemPrompt } : {}),
-					})
-				: new MinimalResourceLoader({
-						...(appendSystemPrompt ? { appendSystemPrompt } : {}),
-					});
-		await __trace.span("resourceLoader.reload", () => resourceLoader.reload());
-		for (const { path, error } of extensionLoadErrors) {
-			console.warn(`[pi-sdk-acp] Failed to load extension ${path}: ${error}`);
-		}
-		const settingsManager = SettingsManager.create(
-			params.cwd,
-			agentDir,
-		);
-
-		const { session } = await __trace.span("createAgentSession", () =>
-			createAgentSession({
-				cwd: params.cwd,
-				sessionManager: SessionManager.inMemory(params.cwd),
-				resourceLoader,
-				tools: this.wrapTools(
-					createCodingTools(params.cwd, {
-						read: {
-							autoResizeImages: settingsManager.getImageAutoResize(),
-						},
-						bash: {
-							commandPrefix: settingsManager.getShellCommandPrefix(),
-						},
-					}),
-				),
-			}),
-		);
-		__trace.flush();
-
-		// Replacing the session: drop the previous session's subscription so its
-		// listener (and the session it closes over) doesn't leak or fire against
-		// stale state.
-		if (this.unsubscribe) {
-			this.unsubscribe();
-			this.unsubscribe = null;
-		}
-		this.session = session;
-		this.sessionId = session.sessionId;
-
-		// Subscribe to Pi SDK events and translate to ACP notifications. Keep the
-		// disposer so the subscription is torn down on session replace / connection
-		// close (`subscribe` returns an unsubscribe function).
-		this.unsubscribe = session.subscribe((event) => this.handlePiEvent(event));
-
-		// Build thinking modes
-		const thinkingLevels = session.getAvailableThinkingLevels();
-		const modes = {
-			currentModeId: session.thinkingLevel,
-			availableModes: thinkingLevels.map((id) => ({
-				id,
-				name: `Thinking: ${id}`,
-			})),
-		};
-
-		return {
-			sessionId: this.sessionId,
-			modes,
-		};
-	}
-
-	async prompt(params: PromptRequest): Promise<PromptResponse> {
-		const session = this.session;
-		if (!session) {
-			throw new Error("No session created");
-		}
-
-		this.cancelRequested = false;
-		this.currentToolCalls.clear();
-		this.emittedAssistantText = false;
-		this.pendingUpdates = [];
-		this.streamedTextContent.clear();
-		// Pre-edit snapshots are per-tool-call, captured at tool_execution_start and
-		// consumed at tool_execution_end. If a tool never reaches `end` (cancel /
-		// crash / abort) the entry would otherwise leak across turns — reset here so
-		// the map can't grow unbounded.
-		this.editSnapshots.clear();
-
-		// Extract text from prompt parts
-		const promptParts = params.prompt ?? [];
-		const text = promptParts
-			.map((p: { type?: string; text?: string }) =>
-				p.type === "text" ? (p.text ?? "") : "",
-			)
-			.join("");
-
-		// session.prompt() resolves when the agent loop completes.
-		// Events fire via subscribe() during execution and are translated
-		// to ACP notifications in handlePiEvent().
-		try {
-			await session.prompt(text);
-		} catch (error) {
-			if (!this.cancelRequested) {
-				throw error;
-			}
-		}
-
-		if (!this.emittedAssistantText) {
-			const latestText = this.latestAssistantText();
-			await this.emitAssistantText(latestText);
-		}
-
-		// The SDK resolves prompt() before its queued session event pipeline
-		// has necessarily drained through subscribe() listeners.
-		await new Promise<void>((resolve) => setTimeout(resolve, 0));
-
-		await this.flushPendingUpdates();
-		await this.lastEmit;
-
-		const stopReason = this.cancelRequested ? "cancelled" : "end_turn";
-		return {
-			stopReason: stopReason as PromptResponse["stopReason"],
-		};
-	}
-
-	async cancel(_params: CancelNotification): Promise<void> {
-		this.cancelRequested = true;
-		// A cancelled turn may abort tools mid-execution before their
-		// tool_execution_end fires; clear the per-tool maps so their entries don't
-		// leak (prompt() also resets these at the next turn's start).
-		this.currentToolCalls.clear();
-		this.editSnapshots.clear();
-		await this.session?.abort();
-	}
-
-	async setSessionMode(
-		params: SetSessionModeRequest,
-	): Promise<SetSessionModeResponse | void> {
-		if (!this.session) return;
-
-		this.session.setThinkingLevel(
-			params.modeId as Parameters<PiSessionLike["setThinkingLevel"]>[0],
-		);
-
-		await this.emit({
-			sessionUpdate: "current_mode_update" as const,
-			currentModeId: params.modeId,
-		});
-	}
-
-	async authenticate(
-		_params: AuthenticateRequest,
-	): Promise<AuthenticateResponse | void> {
-		// Auth handled via env vars (ANTHROPIC_API_KEY)
-	}
-
-	// ── Event translation ───────────────────────────────────────────
-
-	private emit(update: SessionNotification["update"]): Promise<void> {
-		if (this.bufferingUpdates) {
-			this.pendingUpdates.push(update);
-			return Promise.resolve();
-		}
-		return this.sendUpdate(update);
-	}
-
-	private sendUpdate(update: SessionNotification["update"]): Promise<void> {
-		this.lastEmit = this.lastEmit
-			.then(() =>
-				this.conn.sessionUpdate({
-					sessionId: this.sessionId,
-					update,
-				}),
-			)
-			// The catch is load-bearing: `lastEmit` is awaited at turn end and a
-			// rejected chain would halt all later updates and surface as a spurious
-			// prompt failure (plus an unhandled rejection on detached emit callers).
-			// But never swallow silently — a dropped session/update (host disconnect
-			// / broken pipe) must be host-visible, so log it to stderr (the
-			// onAgentStderr channel).
-			.catch((error) => {
-				console.warn(
-					`[pi-sdk-acp] failed to deliver session/update: ${
-						error instanceof Error ? error.message : String(error)
-					}`,
-				);
-			});
-		return this.lastEmit;
-	}
-
-	private async flushPendingUpdates(): Promise<void> {
-		const updates = this.pendingUpdates;
-		this.pendingUpdates = [];
-		for (const update of updates) {
-			await this.sendUpdate(update);
-		}
-	}
-
-	private emitAssistantText(text: string): Promise<void> {
-		if (!text) {
-			return Promise.resolve();
-		}
-		this.emittedAssistantText = true;
-		return this.emit({
-			sessionUpdate: "agent_message_chunk",
-			content: {
-				type: "text",
-				text,
-			},
-		});
-	}
-
-	private handlePiEvent(event: AgentSessionEvent): void {
-		switch (event.type) {
-			case "message_update": {
-				const ame = event.assistantMessageEvent;
-				if (!ame) break;
-
-				if (ame.type === "text_delta" && "delta" in ame) {
-					this.streamedTextContent.add(this.textContentKey(ame));
-					this.emitAssistantText(String((ame as { delta: string }).delta));
-				} else if (ame.type === "text_end" && "content" in ame) {
-					const textKey = this.textContentKey(ame);
-					if (!this.streamedTextContent.has(textKey)) {
-						this.emitAssistantText(String((ame as { content: string }).content));
-					}
-				} else if (ame.type === "thinking_delta" && "delta" in ame) {
-					this.emit({
-						sessionUpdate: "agent_thought_chunk",
-						content: {
-							type: "text",
-							text: String((ame as { delta: string }).delta),
-						},
-					});
-				} else if (
-					ame.type === "toolcall_start" ||
-					ame.type === "toolcall_delta" ||
-					ame.type === "toolcall_end"
-				) {
-					this.handleToolCallMessage(ame);
-				}
-				break;
-			}
-
-			case "tool_execution_start":
-				this.handleToolExecutionStart(event);
-				break;
-
-			case "tool_execution_update":
-				this.handleToolExecutionUpdate(event);
-				break;
-
-			case "tool_execution_end":
-				this.handleToolExecutionEnd(event);
-				break;
-
-			case "agent_end":
-				// Agent loop finished. Notifications are flushed in prompt().
-				break;
-		}
-	}
-
-	private handleToolCallMessage(ame: Record<string, unknown>): void {
-		const toolCall =
-			(ame.toolCall as Record<string, unknown>) ??
-			(
-				(ame.partial as Record<string, unknown>)
-					?.content as Array<Record<string, unknown>>
-			)?.[(ame.contentIndex as number) ?? 0];
-
-		if (!toolCall) return;
-
-		const toolCallId = String(toolCall.id ?? "");
-		const toolName = String(toolCall.name ?? "tool");
-
-		if (!toolCallId) return;
-
-		const rawInput = this.parseToolArgs(toolCall);
-		const locations = this.toToolCallLocations(rawInput);
-		const existingStatus = this.currentToolCalls.get(toolCallId);
-		const status = existingStatus ?? "pending";
-
-		if (!existingStatus) {
-			this.currentToolCalls.set(toolCallId, "pending");
-			this.emit({
-				sessionUpdate: "tool_call",
-				toolCallId,
-				title: toolName,
-				kind: toToolKind(toolName),
-				status: status as "pending",
-				locations,
-				rawInput,
-			});
-		} else {
-			this.emit({
-				sessionUpdate: "tool_call_update",
-				toolCallId,
-				status: status as "pending",
-				locations,
-				rawInput,
-			});
-		}
-	}
-
-	private handleToolExecutionStart(event: {
-		toolCallId: string;
-		toolName: string;
-		args: unknown;
-	}): void {
-		const { toolCallId, toolName, args } = event;
-		const rawInput = args as Record<string, unknown> | undefined;
-
-		// Snapshot for edit diff support
-		if (toolName === "edit" && rawInput) {
-			const p =
-				typeof rawInput.path === "string" ? rawInput.path : undefined;
-			if (p) {
-				try {
-					const abs = isAbsolute(p)
-						? p
-						: resolvePath(this.cwd, p);
-					const oldText = readFileSync(abs, "utf8");
-					this.editSnapshots.set(toolCallId, {
-						path: p,
-						oldText,
-					});
-				} catch {
-					// File may not exist
-				}
-			}
-		}
-
-		const locations = this.toToolCallLocations(rawInput);
-
-		if (!this.currentToolCalls.has(toolCallId)) {
-			this.currentToolCalls.set(toolCallId, "in_progress");
-			this.emit({
-				sessionUpdate: "tool_call",
-				toolCallId,
-				title: toolName,
-				kind: toToolKind(toolName),
-				status: "in_progress",
-				locations,
-				rawInput,
-			});
-		} else {
-			this.currentToolCalls.set(toolCallId, "in_progress");
-			this.emit({
-				sessionUpdate: "tool_call_update",
-				toolCallId,
-				status: "in_progress",
-				locations,
-				rawInput,
-			});
-		}
-	}
-
-	private handleToolExecutionUpdate(event: {
-		toolCallId: string;
-		partialResult: unknown;
-	}): void {
-		const { toolCallId, partialResult } = event;
-		const text = toolResultToText(partialResult);
-
-		this.emit({
-			sessionUpdate: "tool_call_update",
-			toolCallId,
-			status: "in_progress",
-			content: text
-				? [{ type: "content", content: { type: "text", text } }]
-				: undefined,
-			rawOutput: partialResult as Record<string, unknown>,
-		});
-	}
-
-	private handleToolExecutionEnd(event: {
-		toolCallId: string;
-		result: unknown;
-		isError: boolean;
-	}): void {
-		const { toolCallId, result, isError } = event;
-		const text = toolResultToText(result);
-		const snapshot = this.editSnapshots.get(toolCallId);
-
-		let content:
-			| Array<
-					| { type: "diff"; path: string; oldText: string; newText: string }
-					| { type: "content"; content: { type: "text"; text: string } }
-				>
-			| undefined;
-
-		// Generate diff for edit tool
-		if (!isError && snapshot) {
-			try {
-				const abs = isAbsolute(snapshot.path)
-					? snapshot.path
-					: resolvePath(this.cwd, snapshot.path);
-				const newText = readFileSync(abs, "utf8");
-				if (newText !== snapshot.oldText) {
-					content = [
-						{
-							type: "diff" as const,
-							path: snapshot.path,
-							oldText: snapshot.oldText,
-							newText,
-						},
-						...(text
-							? [
-									{
-										type: "content" as const,
-										content: { type: "text" as const, text },
-									},
-								]
-							: []),
-					];
-				}
-			} catch {
-				// File may have been deleted
-			}
-		}
-
-		if (!content && text) {
-			content = [
-				{ type: "content" as const, content: { type: "text" as const, text } },
-			];
-		}
-
-		this.emit({
-			sessionUpdate: "tool_call_update",
-			toolCallId,
-			status: isError ? "failed" : "completed",
-			content,
-			rawOutput: result as Record<string, unknown>,
-		});
-
-		this.currentToolCalls.delete(toolCallId);
-		this.editSnapshots.delete(toolCallId);
-	}
-
-	// ── Helpers ──────────────────────────────────────────────────────
-
-	private parseToolArgs(
-		toolCall: Record<string, unknown>,
-	): Record<string, unknown> | undefined {
-		if (
-			toolCall.arguments &&
-			typeof toolCall.arguments === "object"
-		) {
-			return toolCall.arguments as Record<string, unknown>;
-		}
-		const s = String(toolCall.partialArgs ?? "");
-		if (!s) return undefined;
-		try {
-			return JSON.parse(s);
-		} catch {
-			return { partialArgs: s };
-		}
-	}
-
-	private toToolCallLocations(
-		args: Record<string, unknown> | undefined,
-	): Array<{ path: string; line?: number }> | undefined {
-		const path =
-			typeof args?.path === "string" ? args.path : undefined;
-		if (!path) return undefined;
-		const resolvedPath = isAbsolute(path)
-			? path
-			: resolvePath(this.cwd, path);
-		return [{ path: resolvedPath }];
-	}
-
-	private textContentKey(ame: Record<string, unknown>): string {
-		const contentIndex =
-			typeof ame.contentIndex === "number" ? ame.contentIndex : -1;
-		return String(contentIndex);
-	}
-
-	private latestAssistantText(): string {
-		if (!this.session) {
-			return "";
-		}
-
-		for (let index = this.session.messages.length - 1; index >= 0; index--) {
-			const message = this.session.messages[index] as {
-				role?: string;
-				content?: unknown;
-			};
-			if (message.role !== "assistant") {
-				continue;
-			}
-
-			const content = message.content;
-			if (typeof content === "string") {
-				return content;
-			}
-			if (!Array.isArray(content)) {
-				const errorMessage =
-					typeof (message as { errorMessage?: unknown }).errorMessage === "string"
-						? (message as { errorMessage: string }).errorMessage
-						: "";
-				return errorMessage;
-			}
-
-			const text = content
-				.map((part) => {
-					const block = part as { type?: string; text?: string };
-					return block.type === "text" && typeof block.text === "string"
-						? block.text
-						: "";
-				})
-				.filter(Boolean)
-				.join("");
-			if (text) {
-				return text;
-			}
-
-			const errorMessage =
-				typeof (message as { errorMessage?: unknown }).errorMessage === "string"
-					? (message as { errorMessage: string }).errorMessage
-					: "";
-			return errorMessage;
-		}
-
-		return "";
-	}
-
-	private wrapTools(tools: PiToolLike[]): PiToolLike[] {
-		return tools.map((tool) => ({
-			...tool,
-			execute: async (toolCallId, args, signal, onUpdate) => {
-				const rawInput =
-					args && typeof args === "object"
-						? (args as Record<string, unknown>)
-						: undefined;
-				const locations = this.toToolCallLocations(rawInput);
-
-				this.currentToolCalls.set(toolCallId, "in_progress");
-				await this.emit({
-					sessionUpdate: "tool_call",
-					toolCallId,
-					title: tool.name,
-					kind: toToolKind(tool.name),
-					status: "in_progress",
-					locations,
-					rawInput,
-				});
-
-				try {
-					const result = await tool.execute(
-						toolCallId,
-						args,
-						signal,
-						(partialResult) => {
-							void this.emit({
-								sessionUpdate: "tool_call_update",
-								toolCallId,
-								status: "in_progress",
-								content: toTextContent(toolResultToText(partialResult)),
-								rawOutput:
-									partialResult && typeof partialResult === "object"
-										? (partialResult as Record<string, unknown>)
-										: undefined,
-							});
-							onUpdate?.(partialResult);
-						},
-					);
-
-					await this.emit({
-						sessionUpdate: "tool_call_update",
-						toolCallId,
-						status: "completed",
-						content: toTextContent(toolResultToText(result)),
-						rawOutput:
-							result && typeof result === "object"
-								? (result as Record<string, unknown>)
-								: undefined,
-					});
-					return result;
-				} catch (error) {
-					await this.emit({
-						sessionUpdate: "tool_call_update",
-						toolCallId,
-						status: "failed",
-						content:
-							error instanceof Error
-								? toTextContent(error.message)
-								: undefined,
-					});
-					throw error;
-				} finally {
-					this.currentToolCalls.delete(toolCallId);
-				}
-			},
-		}));
-	}
-}
-
-// ── Standalone helpers ──────────────────────────────────────────────
-
-function toToolKind(
-	toolName: string,
-): "read" | "edit" | "other" {
-	if (toolName === "read") return "read";
-	if (toolName === "write" || toolName === "edit") return "edit";
-	return "other";
-}
-
-function toTextContent(text: string):
-	| Array<{ type: "content"; content: { type: "text"; text: string } }>
-	| undefined {
-	if (!text) {
-		return undefined;
-	}
-	return [
-		{
-			type: "content",
-			content: {
-				type: "text",
-				text,
-			},
-		},
-	];
-}
-
-function toolResultToText(result: unknown): string {
-	if (!result) return "";
-	const r = result as Record<string, unknown>;
-	const content = r.content;
-	if (Array.isArray(content)) {
-		const texts = content
-			.map((c: Record<string, unknown>) =>
-				c?.type === "text" && typeof c.text === "string"
-					? c.text
-					: "",
-			)
-			.filter(Boolean);
-		if (texts.length) return texts.join("");
-	}
-	const details = r.details as Record<string, unknown> | undefined;
-	const stdout =
-		(typeof details?.stdout === "string" ? details.stdout : undefined) ??
-		(typeof r.stdout === "string" ? r.stdout : undefined) ??
-		(typeof details?.output === "string" ? details.output : undefined) ??
-		(typeof r.output === "string" ? r.output : undefined);
-	const stderr =
-		(typeof details?.stderr === "string" ? details.stderr : undefined) ??
-		(typeof r.stderr === "string" ? r.stderr : undefined);
-	const exitCode =
-		(typeof details?.exitCode === "number"
-			? details.exitCode
-			: undefined) ??
-		(typeof r.exitCode === "number" ? r.exitCode : undefined) ??
-		(typeof details?.code === "number" ? details.code : undefined) ??
-		(typeof r.code === "number" ? r.code : undefined);
-
-	if (
-		(typeof stdout === "string" && stdout.trim()) ||
-		(typeof stderr === "string" && stderr.trim())
-	) {
-		const parts: string[] = [];
-		if (typeof stdout === "string" && stdout.trim()) parts.push(stdout);
-		if (typeof stderr === "string" && stderr.trim())
-			parts.push(`stderr:\n${stderr}`);
-		if (typeof exitCode === "number")
-			parts.push(`exit code: ${exitCode}`);
-		return parts.join("\n\n").trimEnd();
-	}
-
-	try {
-		return JSON.stringify(result, null, 2);
-	} catch {
-		return String(result);
-	}
-}
-
-// ── Entry point ─────────────────────────────────────────────────────
-
-const input = new WritableStream<Uint8Array>({
-	write(chunk) {
-		return new Promise<void>((resolve) => {
-			process.stdout.write(chunk, () => resolve());
-		});
-	},
-});
-
-const output = new ReadableStream<Uint8Array>({
-	start(controller) {
-		realStdin.on("data", (chunk: Buffer) => {
-			controller.enqueue(new Uint8Array(chunk));
-		});
-		realStdin.on("end", () => controller.close());
-		realStdin.on("error", (error: Error) => controller.error(error));
-	},
-});
-
-const stream = ndJsonStream(input, output);
-const _connection = new AgentSideConnection(
-	(conn) => new PiSdkAgent(conn),
-	stream,
-);
-
-// Keep process alive
-realStdin.resume();
-
-// Shutdown on stdin close
-realStdin.on("end", () => {
-	process.exit(0);
-});
diff --git a/registry/agent/pi/src/index.ts b/registry/agent/pi/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/agent/pi/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/agent/pi/src/snapshot-entry.ts b/registry/agent/pi/src/snapshot-entry.ts
deleted file mode 100644
index bc90b5d14..000000000
--- a/registry/agent/pi/src/snapshot-entry.ts
+++ /dev/null
@@ -1,63 +0,0 @@
-/**
- * Pi SDK snapshot entry (Step 2a/2c — eval/entry split).
- *
- * This module is bundled by esbuild into a single IIFE (`dist/pi-sdk-snapshot.js`)
- * whose ONLY job is to evaluate the Pi SDK module graph and publish its exports on
- * a well-known global, `globalThis.__PI_SDK_RUNTIME__`. The bundle is run once at V8
- * snapshot-creation time; the evaluated SDK heap is captured into the startup blob
- * and reused to seed every fresh per-session isolate. After restore the adapter
- * reads the global instead of dynamically importing the SDK from the guest VFS,
- * collapsing the ~830ms per-session module-load/eval tax.
- *
- * INVARIANTS (enforced by the C0 snapshot-safety scan — see
- * ~/.agents/research/pi-snapshot-safety-scan.md):
- *  - This entry performs NO per-session work: it must not read cwd, model,
- *    ANTHROPIC env vars, HOME, argv, open fds/sockets, or start timers. It only
- *    binds the SDK's static exports. All per-session configuration is injected
- *    post-restore by the adapter (newSession), exactly as before.
- *  - Heavy provider SDKs (@anthropic-ai/sdk, openai, …) are loaded by the SDK via
- *    dynamic import() and are intentionally NOT part of this static graph; they
- *    stay lazy and load post-restore from the VFS on first prompt.
- *  - The bundle is keyed by the sha256 of its own (fully inlined) bytes, so any SDK
- *    dependency change invalidates the snapshot.
- */
-
-import { Agent } from "@mariozechner/pi-agent-core";
-import { AuthStorage } from "@mariozechner/pi-coding-agent/dist/core/auth-storage.js";
-import {
-	getAgentDir,
-	getDocsPath,
-} from "@mariozechner/pi-coding-agent/dist/config.js";
-import { DEFAULT_THINKING_LEVEL } from "@mariozechner/pi-coding-agent/dist/core/defaults.js";
-import { convertToLlm } from "@mariozechner/pi-coding-agent/dist/core/messages.js";
-import { ModelRegistry } from "@mariozechner/pi-coding-agent/dist/core/model-registry.js";
-import { DefaultResourceLoader } from "@mariozechner/pi-coding-agent/dist/core/resource-loader.js";
-import {
-	createAgentSession,
-	createCodingTools,
-} from "@mariozechner/pi-coding-agent/dist/core/sdk.js";
-import { SessionManager } from "@mariozechner/pi-coding-agent/dist/core/session-manager.js";
-import { SettingsManager } from "@mariozechner/pi-coding-agent/dist/core/settings-manager.js";
-import { createAllTools } from "@mariozechner/pi-coding-agent/dist/core/tools/index.js";
-
-// The shape mirrors `PiSdkRuntime` in adapter.ts so the adapter can read the
-// global with no behavioral difference from the dynamic-import path.
-const runtime = {
-	Agent,
-	AuthStorage,
-	DefaultResourceLoader,
-	DEFAULT_THINKING_LEVEL,
-	ModelRegistry,
-	SettingsManager,
-	SessionManager,
-	convertToLlm,
-	getAgentDir,
-	getDocsPath,
-	createAgentSession,
-	createCodingTools,
-	createAllTools,
-};
-
-// Publish on the global so it survives into every fresh context cloned from the
-// snapshotted default context.
-(globalThis as Record<string, unknown>).__PI_SDK_RUNTIME__ = runtime;
diff --git a/registry/agent/pi/tests/adapter.test.mjs b/registry/agent/pi/tests/adapter.test.mjs
deleted file mode 100644
index e52c4d918..000000000
--- a/registry/agent/pi/tests/adapter.test.mjs
+++ /dev/null
@@ -1,102 +0,0 @@
-import test from "node:test";
-import assert from "node:assert/strict";
-import { resolve as resolvePath } from "node:path";
-
-// Unit tests for the PiSdkAgent adapter fixes. The class is exported for
-// testing; newSession needs the real Pi SDK, so these drive the translation /
-// lifecycle logic directly with a mock ACP connection + a fake session.
-const packageDir = resolvePath(import.meta.dirname, "..");
-const { PiSdkAgent } = await import(resolvePath(packageDir, "dist", "adapter.js"));
-
-function makeConn(overrides = {}) {
-	return {
-		closed: new Promise(() => {}), // never closes unless a test overrides
-		sessionUpdate: async () => {},
-		...overrides,
-	};
-}
-
-function fakeSession(overrides = {}) {
-	return {
-		messages: [],
-		prompt: async () => {},
-		abort: async () => {},
-		subscribe: () => () => {},
-		...overrides,
-	};
-}
-
-// ── Fix #3: editSnapshots is cleared each turn (no unbounded leak) ──
-test("pi #3: prompt() clears leaked edit snapshots from a prior aborted turn", async () => {
-	const agent = new PiSdkAgent(makeConn());
-	agent.session = fakeSession();
-	agent.sessionId = "s1";
-	// Simulate a tool that started an edit but never reached tool_execution_end.
-	agent.editSnapshots.set("tool-1", { path: "/workspace/a.txt", oldText: "before" });
-	assert.equal(agent.editSnapshots.size, 1);
-
-	await agent.prompt({ prompt: [{ type: "text", text: "hi" }] });
-	assert.equal(agent.editSnapshots.size, 0, "editSnapshots must be reset at prompt start");
-});
-
-test("pi #3: cancel() clears the per-turn tool maps", async () => {
-	const agent = new PiSdkAgent(makeConn());
-	agent.session = fakeSession();
-	agent.editSnapshots.set("tool-1", { path: "/a", oldText: "x" });
-	agent.currentToolCalls.set("tool-1", "call-1");
-	await agent.cancel({});
-	assert.equal(agent.editSnapshots.size, 0);
-	assert.equal(agent.currentToolCalls.size, 0);
-});
-
-// ── Fix #4: the live subscription is disposed when the connection closes ──
-test("pi #4: connection close disposes the session subscription", async () => {
-	let closeConn;
-	const conn = makeConn({ closed: new Promise((r) => (closeConn = r)) });
-	const agent = new PiSdkAgent(conn);
-	let unsubscribed = false;
-	agent.unsubscribe = () => {
-		unsubscribed = true;
-	};
-	agent.session = fakeSession();
-
-	closeConn();
-	await new Promise((r) => setTimeout(r, 10)); // let conn.closed.then(dispose) run
-
-	assert.ok(unsubscribed, "conn.closed must call the subscription disposer");
-	assert.equal(agent.session, null, "the session reference must be dropped on dispose");
-});
-
-// ── Fix #2: emit logs delivery failures (host-visible) and survives them ──
-test("pi #2: a failed sessionUpdate is logged and the emit chain survives", async () => {
-	let failNext = true;
-	const delivered = [];
-	const conn = makeConn({
-		sessionUpdate: async (u) => {
-			if (failNext) {
-				failNext = false;
-				throw new Error("broken pipe");
-			}
-			delivered.push(u);
-		},
-	});
-	const agent = new PiSdkAgent(conn);
-	agent.sessionId = "s1";
-
-	const warns = [];
-	const origWarn = console.warn;
-	console.warn = (...a) => warns.push(a.join(" "));
-	try {
-		await agent.sendUpdate({ sessionUpdate: "agent_message_chunk", content: { type: "text", text: "a" } });
-		await agent.sendUpdate({ sessionUpdate: "agent_message_chunk", content: { type: "text", text: "b" } });
-		await agent.lastEmit;
-	} finally {
-		console.warn = origWarn;
-	}
-
-	assert.ok(
-		warns.some((w) => w.includes("failed to deliver session/update")),
-		"a delivery failure must be logged, not swallowed",
-	);
-	assert.equal(delivered.length, 1, "the chain must survive the failure and deliver the next update");
-});
diff --git a/registry/agent/pi/tsconfig.json b/registry/agent/pi/tsconfig.json
deleted file mode 100644
index e15131c84..000000000
--- a/registry/agent/pi/tsconfig.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"declaration": true,
-		"outDir": "./dist",
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules", "dist", "src/snapshot-entry.ts"]
-}
diff --git a/registry/native/Cargo.lock b/registry/native/Cargo.lock
deleted file mode 100644
index fb7e69a72..000000000
--- a/registry/native/Cargo.lock
+++ /dev/null
@@ -1,6545 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 4
-
-[[package]]
-name = "addr2line"
-version = "0.25.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b5d307320b3181d6d7954e663bd7c774a838b8220fe0593c86d9fb09f498b4b"
-dependencies = [
- "gimli",
-]
-
-[[package]]
-name = "adler2"
-version = "2.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
-
-[[package]]
-name = "ahash"
-version = "0.8.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a15f179cd60c4584b8a8c596927aadc462e27f2ca70c04e0071964a73ba7a75"
-dependencies = [
- "cfg-if",
- "once_cell",
- "version_check",
- "zerocopy",
-]
-
-[[package]]
-name = "aho-corasick"
-version = "1.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "allocator-api2"
-version = "0.2.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "683d7910e743518b0e34f1186f92494becacb047c7b6bf616c96772180fef923"
-
-[[package]]
-name = "android_system_properties"
-version = "0.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "ansi-width"
-version = "0.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "219e3ce6f2611d83b51ec2098a12702112c29e57203a6b0a0929b2cddb486608"
-dependencies = [
- "unicode-width 0.1.14",
-]
-
-[[package]]
-name = "anstream"
-version = "0.6.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "43d5b281e737544384e969a5ccad3f1cdd24b48086a0fc1b2a5262a26b8f4f4a"
-dependencies = [
- "anstyle",
- "anstyle-parse 0.2.7",
- "anstyle-query",
- "anstyle-wincon",
- "colorchoice",
- "is_terminal_polyfill",
- "utf8parse",
-]
-
-[[package]]
-name = "anstream"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "824a212faf96e9acacdbd09febd34438f8f711fb84e09a8916013cd7815ca28d"
-dependencies = [
- "anstyle",
- "anstyle-parse 1.0.0",
- "anstyle-query",
- "anstyle-wincon",
- "colorchoice",
- "is_terminal_polyfill",
- "utf8parse",
-]
-
-[[package]]
-name = "anstyle"
-version = "1.0.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "940b3a0ca603d1eade50a4846a2afffd5ef57a9feac2c0e2ec2e14f9ead76000"
-
-[[package]]
-name = "anstyle-parse"
-version = "0.2.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4e7644824f0aa2c7b9384579234ef10eb7efb6a0deb83f9630a49594dd9c15c2"
-dependencies = [
- "utf8parse",
-]
-
-[[package]]
-name = "anstyle-parse"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "52ce7f38b242319f7cabaa6813055467063ecdc9d355bbb4ce0c68908cd8130e"
-dependencies = [
- "utf8parse",
-]
-
-[[package]]
-name = "anstyle-query"
-version = "1.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
-dependencies = [
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "anstyle-wincon"
-version = "3.0.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
-dependencies = [
- "anstyle",
- "once_cell_polyfill",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "anyhow"
-version = "1.0.102"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f202df86484c868dbad7eaa557ef785d5c66295e41b460ef922eca0723b842c"
-
-[[package]]
-name = "archery"
-version = "1.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "70e0a5f99dfebb87bb342d0f53bb92c81842e100bbb915223e38349580e5441d"
-dependencies = [
- "triomphe",
-]
-
-[[package]]
-name = "arrayref"
-version = "0.3.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
-
-[[package]]
-name = "arrayvec"
-version = "0.7.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c02d123df017efcdfbd739ef81735b36c5ba83ec3c59c80a9d7ecc718f92e50"
-
-[[package]]
-name = "async-recursion"
-version = "1.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3b43422f69d8ff38f95f1b2bb76517c91589a924d1559a0e935d7c8ce0274c11"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "async-trait"
-version = "0.1.89"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9035ad2d096bed7955a320ee7e2230574d28fd3c3a0f186cbea1ff3c7eed5dbb"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "autocfg"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
-
-[[package]]
-name = "awk-rs"
-version = "0.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ed6041a9be45690d0003e8d2ea488cb0a578104e591944398d96d9b7d9a0fbf9"
-dependencies = [
- "regex",
- "thiserror 1.0.69",
-]
-
-[[package]]
-name = "backtrace"
-version = "0.3.76"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bb531853791a215d7c62a30daf0dde835f381ab5de4589cfe7c649d2cbe92bd6"
-dependencies = [
- "addr2line",
- "cfg-if",
- "libc",
- "miniz_oxide",
- "object",
- "rustc-demangle",
- "windows-link 0.2.1",
-]
-
-[[package]]
-name = "base64"
-version = "0.22.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72b3254f16251a8381aa12e40e3c4d2f0199f8c6508fbecb9d91f575e0fbb8c6"
-
-[[package]]
-name = "base64-simd"
-version = "0.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "339abbe78e73178762e23bea9dfd08e697eb3f3301cd4be981c0f78ba5859195"
-dependencies = [
- "outref",
- "vsimd",
-]
-
-[[package]]
-name = "bigdecimal"
-version = "0.4.10"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4d6867f1565b3aad85681f1015055b087fcfd840d6aeee6eee7f2da317603695"
-dependencies = [
- "autocfg",
- "libm",
- "num-bigint",
- "num-integer",
- "num-traits",
-]
-
-[[package]]
-name = "binary-heap-plus"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e4551d8382e911ecc0d0f0ffb602777988669be09447d536ff4388d1def11296"
-dependencies = [
- "compare",
-]
-
-[[package]]
-name = "bit-set"
-version = "0.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "08807e080ed7f9d5433fa9b275196cfc35414f66a0c79d864dc51a0d825231a3"
-dependencies = [
- "bit-vec",
-]
-
-[[package]]
-name = "bit-vec"
-version = "0.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e764a1d40d510daf35e07be9eb06e75770908c27d411ee6c92109c9840eaaf7"
-
-[[package]]
-name = "bitflags"
-version = "1.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bef38d45163c2f1dde094a7dfd33ccf595c92905c8f8f4fdc18d06fb1037718a"
-
-[[package]]
-name = "bitflags"
-version = "2.11.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "843867be96c8daad0d758b57df9392b6d8d271134fce549de6ce169ff98a92af"
-dependencies = [
- "serde_core",
-]
-
-[[package]]
-name = "bitvec"
-version = "1.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1bc2832c24239b0141d5674bb9174f9d68a8b5b3f2753311927c172ca46f7e9c"
-dependencies = [
- "funty",
- "radium",
- "tap",
- "wyz",
-]
-
-[[package]]
-name = "blake2b_simd"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b79834656f71332577234b50bfc009996f7449e0c056884e6a02492ded0ca2f3"
-dependencies = [
- "arrayref",
- "arrayvec",
- "constant_time_eq",
-]
-
-[[package]]
-name = "blake3"
-version = "1.8.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2468ef7d57b3fb7e16b576e8377cdbde2320c60e1491e961d11da40fc4f02a2d"
-dependencies = [
- "arrayref",
- "arrayvec",
- "cc",
- "cfg-if",
- "constant_time_eq",
- "cpufeatures",
-]
-
-[[package]]
-name = "block-buffer"
-version = "0.10.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
-dependencies = [
- "generic-array",
-]
-
-[[package]]
-name = "bon"
-version = "3.9.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f47dbe92550676ee653353c310dfb9cf6ba17ee70396e1f7cf0a2020ad49b2fe"
-dependencies = [
- "bon-macros",
- "rustversion",
-]
-
-[[package]]
-name = "bon-macros"
-version = "3.9.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "519bd3116aeeb42d5372c29d982d16d0170d3d4a5ed85fc7dd91642ffff3c67c"
-dependencies = [
- "darling 0.23.0",
- "ident_case",
- "prettyplease",
- "proc-macro2",
- "quote",
- "rustversion",
- "syn",
-]
-
-[[package]]
-name = "brush-builtins"
-version = "0.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "454219f460ee4308ae5b8befc47936b4ef7ac3a94347052270e59b6c6cfe14ec"
-dependencies = [
- "brush-core",
- "brush-parser",
- "cfg-if",
- "chrono",
- "clap",
- "fancy-regex 0.16.2",
- "futures",
- "itertools 0.14.0",
- "nix 0.30.1",
- "procfs",
- "rlimit",
- "strum 0.27.2",
- "strum_macros 0.27.2",
- "thiserror 2.0.18",
- "tokio",
- "tracing",
- "uucore 0.4.0",
-]
-
-[[package]]
-name = "brush-core"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a3ad2f2d4eb45ef7f11e74bc1a0816c8f3dce298072352c6b3b41a2c4bfdb74"
-dependencies = [
- "async-recursion",
- "async-trait",
- "bon",
- "brush-parser",
- "cached",
- "cfg-if",
- "chrono",
- "clap",
- "command-fds",
- "fancy-regex 0.16.2",
- "futures",
- "getrandom 0.3.4",
- "homedir",
- "hostname",
- "indexmap",
- "itertools 0.14.0",
- "nix 0.30.1",
- "normalize-path",
- "rand 0.9.2",
- "rpds",
- "strum 0.27.2",
- "strum_macros 0.27.2",
- "terminfo",
- "thiserror 2.0.18",
- "tokio",
- "tracing",
- "uuid",
- "uzers",
- "whoami",
-]
-
-[[package]]
-name = "brush-interactive"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0d971b1d01934fa815b061451d183f6f25e248f491a0e181fa186e3d78a1ad51"
-dependencies = [
- "brush-core",
- "brush-parser",
- "crossterm 0.29.0",
- "getrandom 0.3.4",
- "indexmap",
- "nix 0.30.1",
- "nu-ansi-term",
- "reedline",
- "thiserror 2.0.18",
- "tokio",
- "tracing",
-]
-
-[[package]]
-name = "brush-parser"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f7367124d4f38fdcd65f4b815bda7caeb3de377b9cd95ffa1b23627989c93718"
-dependencies = [
- "bon",
- "cached",
- "indenter",
- "peg",
- "thiserror 2.0.18",
- "tracing",
- "utf8-chars",
-]
-
-[[package]]
-name = "brush-shell"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c0d5917155a7043b86d27d4832feea614b4e1349735a18ab65c551949bc15d5"
-dependencies = [
- "brush-builtins",
- "brush-core",
- "brush-interactive",
- "clap",
- "color-print",
- "const_format",
- "crossterm 0.29.0",
- "getrandom 0.3.4",
- "git-version",
- "human-panic",
- "tokio",
- "tracing",
- "tracing-subscriber",
- "uuid",
-]
-
-[[package]]
-name = "bstr"
-version = "1.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "63044e1ae8e69f3b5a92c736ca6269b8d12fa7efe39bf34ddb06d102cf0e2cab"
-dependencies = [
- "memchr",
- "regex-automata",
- "serde",
-]
-
-[[package]]
-name = "bumpalo"
-version = "3.20.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d20789868f4b01b2f2caec9f5c4e0213b41e3e5702a50157d699ae31ced2fcb"
-
-[[package]]
-name = "bytecount"
-version = "0.6.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "175812e0be2bccb6abe50bb8d566126198344f707e304f45c648fd8f2cc0365e"
-
-[[package]]
-name = "byteorder"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
-
-[[package]]
-name = "bytes"
-version = "1.11.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e748733b7cbc798e1434b6ac524f0c1ff2ab456fe201501e6497c8417a4fc33"
-
-[[package]]
-name = "cached"
-version = "0.56.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "801927ee168e17809ab8901d9f01f700cd7d8d6a6527997fee44e4b0327a253c"
-dependencies = [
- "ahash",
- "cached_proc_macro",
- "cached_proc_macro_types",
- "hashbrown 0.15.5",
- "once_cell",
- "thiserror 2.0.18",
- "web-time",
-]
-
-[[package]]
-name = "cached_proc_macro"
-version = "0.25.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9225bdcf4e4a9a4c08bf16607908eb2fbf746828d5e0b5e019726dbf6571f201"
-dependencies = [
- "darling 0.20.11",
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "cached_proc_macro_types"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ade8366b8bd5ba243f0a58f036cc0ca8a2f069cff1a2351ef1cac6b083e16fc0"
-
-[[package]]
-name = "calendrical_calculations"
-version = "0.2.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3a0b39595c6ee54a8d0900204ba4c401d0ab4eb45adaf07178e8d017541529e7"
-dependencies = [
- "core_maths",
- "displaydoc",
-]
-
-[[package]]
-name = "cassowary"
-version = "0.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df8670b8c7b9dae1793364eafadf7239c40d669904660c5960d74cfd80b46a53"
-
-[[package]]
-name = "castaway"
-version = "0.2.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dec551ab6e7578819132c713a93c022a05d60159dc86e7a7050223577484c55a"
-dependencies = [
- "rustversion",
-]
-
-[[package]]
-name = "cc"
-version = "1.2.57"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7a0dd1ca384932ff3641c8718a02769f1698e7563dc6974ffd03346116310423"
-dependencies = [
- "find-msvc-tools",
- "shlex",
-]
-
-[[package]]
-name = "cfb"
-version = "0.7.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d38f2da7a0a2c4ccf0065be06397cc26a81f4e528be095826eee9d4adbb8c60f"
-dependencies = [
- "byteorder",
- "fnv",
- "uuid",
-]
-
-[[package]]
-name = "cfg-if"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
-
-[[package]]
-name = "cfg_aliases"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
-
-[[package]]
-name = "chrono"
-version = "0.4.44"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c673075a2e0e5f4a1dde27ce9dee1ea4558c7ffe648f576438a20ca1d2acc4b0"
-dependencies = [
- "iana-time-zone",
- "js-sys",
- "num-traits",
- "serde",
- "wasm-bindgen",
- "windows-link 0.2.1",
-]
-
-[[package]]
-name = "clap"
-version = "4.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b193af5b67834b676abd72466a96c1024e6a6ad978a1f484bd90b85c94041351"
-dependencies = [
- "clap_builder",
- "clap_derive",
-]
-
-[[package]]
-name = "clap_builder"
-version = "4.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "714a53001bf66416adb0e2ef5ac857140e7dc3a0c48fb28b2f10762fc4b5069f"
-dependencies = [
- "anstream 1.0.0",
- "anstyle",
- "clap_lex",
- "strsim",
- "terminal_size",
-]
-
-[[package]]
-name = "clap_derive"
-version = "4.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1110bd8a634a1ab8cb04345d8d878267d57c3cf1b38d91b71af6686408bbca6a"
-dependencies = [
- "heck",
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "clap_lex"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c8d4a3bb8b1e0c1050499d1815f5ab16d04f0959b233085fb31653fbfc9d98f9"
-
-[[package]]
-name = "cmd-arch"
-version = "0.1.0"
-dependencies = [
- "uu_arch",
-]
-
-[[package]]
-name = "cmd-awk"
-version = "0.1.0"
-dependencies = [
- "secureexec-awk",
-]
-
-[[package]]
-name = "cmd-b2sum"
-version = "0.1.0"
-dependencies = [
- "uu_b2sum",
-]
-
-[[package]]
-name = "cmd-base32"
-version = "0.1.0"
-dependencies = [
- "uu_base32",
-]
-
-[[package]]
-name = "cmd-base64"
-version = "0.1.0"
-dependencies = [
- "uu_base64",
-]
-
-[[package]]
-name = "cmd-basename"
-version = "0.1.0"
-dependencies = [
- "uu_basename",
-]
-
-[[package]]
-name = "cmd-basenc"
-version = "0.1.0"
-dependencies = [
- "uu_basenc",
-]
-
-[[package]]
-name = "cmd-cat"
-version = "0.1.0"
-dependencies = [
- "uu_cat",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "cmd-chmod"
-version = "0.1.0"
-dependencies = [
- "uu_chmod",
-]
-
-[[package]]
-name = "cmd-cksum"
-version = "0.1.0"
-dependencies = [
- "uu_cksum",
-]
-
-[[package]]
-name = "cmd-codex"
-version = "0.1.0"
-dependencies = [
- "codex-network-proxy",
- "codex-otel",
- "ratatui",
- "secureexec-wasi-http",
- "secureexec-wasi-spawn",
-]
-
-[[package]]
-name = "cmd-codex-exec"
-version = "0.1.0"
-dependencies = [
- "codex-network-proxy",
- "codex-otel",
- "secureexec-wasi-http",
-]
-
-[[package]]
-name = "cmd-column"
-version = "0.1.0"
-dependencies = [
- "secureexec-column",
-]
-
-[[package]]
-name = "cmd-comm"
-version = "0.1.0"
-dependencies = [
- "uu_comm",
-]
-
-[[package]]
-name = "cmd-cp"
-version = "0.1.0"
-dependencies = [
- "uu_cp",
-]
-
-[[package]]
-name = "cmd-curl"
-version = "0.1.0"
-dependencies = [
- "secureexec-wasi-http",
-]
-
-[[package]]
-name = "cmd-cut"
-version = "0.1.0"
-dependencies = [
- "uu_cut",
-]
-
-[[package]]
-name = "cmd-date"
-version = "0.1.0"
-dependencies = [
- "uu_date",
-]
-
-[[package]]
-name = "cmd-dd"
-version = "0.1.0"
-dependencies = [
- "uu_dd",
-]
-
-[[package]]
-name = "cmd-diff"
-version = "0.1.0"
-dependencies = [
- "secureexec-diff",
-]
-
-[[package]]
-name = "cmd-dircolors"
-version = "0.1.0"
-dependencies = [
- "uu_dircolors",
-]
-
-[[package]]
-name = "cmd-dirname"
-version = "0.1.0"
-dependencies = [
- "uu_dirname",
-]
-
-[[package]]
-name = "cmd-du"
-version = "0.1.0"
-dependencies = [
- "secureexec-du",
-]
-
-[[package]]
-name = "cmd-echo"
-version = "0.1.0"
-dependencies = [
- "uu_echo",
-]
-
-[[package]]
-name = "cmd-env"
-version = "0.1.0"
-dependencies = [
- "secureexec-shims",
-]
-
-[[package]]
-name = "cmd-expand"
-version = "0.1.0"
-dependencies = [
- "uu_expand",
-]
-
-[[package]]
-name = "cmd-expr"
-version = "0.1.0"
-dependencies = [
- "secureexec-expr",
-]
-
-[[package]]
-name = "cmd-factor"
-version = "0.1.0"
-dependencies = [
- "uu_factor",
-]
-
-[[package]]
-name = "cmd-false"
-version = "0.1.0"
-dependencies = [
- "uu_false",
-]
-
-[[package]]
-name = "cmd-fd"
-version = "0.1.0"
-dependencies = [
- "secureexec-fd",
-]
-
-[[package]]
-name = "cmd-file"
-version = "0.1.0"
-dependencies = [
- "secureexec-file-cmd",
-]
-
-[[package]]
-name = "cmd-find"
-version = "0.1.0"
-dependencies = [
- "secureexec-find",
-]
-
-[[package]]
-name = "cmd-fmt"
-version = "0.1.0"
-dependencies = [
- "uu_fmt",
-]
-
-[[package]]
-name = "cmd-fold"
-version = "0.1.0"
-dependencies = [
- "uu_fold",
-]
-
-[[package]]
-name = "cmd-git"
-version = "0.1.0"
-dependencies = [
- "secureexec-git",
-]
-
-[[package]]
-name = "cmd-grep"
-version = "0.1.0"
-dependencies = [
- "secureexec-grep",
-]
-
-[[package]]
-name = "cmd-gzip"
-version = "0.1.0"
-dependencies = [
- "secureexec-gzip",
-]
-
-[[package]]
-name = "cmd-head"
-version = "0.1.0"
-dependencies = [
- "uu_head",
-]
-
-[[package]]
-name = "cmd-http-test"
-version = "0.1.0"
-dependencies = [
- "secureexec-wasi-http",
-]
-
-[[package]]
-name = "cmd-join"
-version = "0.1.0"
-dependencies = [
- "uu_join",
-]
-
-[[package]]
-name = "cmd-jq"
-version = "0.1.0"
-dependencies = [
- "secureexec-jq",
-]
-
-[[package]]
-name = "cmd-link"
-version = "0.1.0"
-dependencies = [
- "uu_link",
-]
-
-[[package]]
-name = "cmd-ln"
-version = "0.1.0"
-dependencies = [
- "uu_ln",
-]
-
-[[package]]
-name = "cmd-logname"
-version = "0.1.0"
-dependencies = [
- "uu_logname",
-]
-
-[[package]]
-name = "cmd-ls"
-version = "0.1.0"
-dependencies = [
- "uu_ls",
-]
-
-[[package]]
-name = "cmd-md5sum"
-version = "0.1.0"
-dependencies = [
- "uu_md5sum",
-]
-
-[[package]]
-name = "cmd-mkdir"
-version = "0.1.0"
-dependencies = [
- "uu_mkdir",
-]
-
-[[package]]
-name = "cmd-mktemp"
-version = "0.1.0"
-dependencies = [
- "uu_mktemp",
-]
-
-[[package]]
-name = "cmd-mv"
-version = "0.1.0"
-dependencies = [
- "uu_mv",
-]
-
-[[package]]
-name = "cmd-nice"
-version = "0.1.0"
-dependencies = [
- "secureexec-shims",
-]
-
-[[package]]
-name = "cmd-nl"
-version = "0.1.0"
-dependencies = [
- "uu_nl",
-]
-
-[[package]]
-name = "cmd-nohup"
-version = "0.1.0"
-dependencies = [
- "secureexec-shims",
-]
-
-[[package]]
-name = "cmd-nproc"
-version = "0.1.0"
-dependencies = [
- "uu_nproc",
-]
-
-[[package]]
-name = "cmd-numfmt"
-version = "0.1.0"
-dependencies = [
- "uu_numfmt",
-]
-
-[[package]]
-name = "cmd-od"
-version = "0.1.0"
-dependencies = [
- "uu_od",
-]
-
-[[package]]
-name = "cmd-paste"
-version = "0.1.0"
-dependencies = [
- "uu_paste",
-]
-
-[[package]]
-name = "cmd-pathchk"
-version = "0.1.0"
-dependencies = [
- "uu_pathchk",
-]
-
-[[package]]
-name = "cmd-printenv"
-version = "0.1.0"
-dependencies = [
- "uu_printenv",
-]
-
-[[package]]
-name = "cmd-printf"
-version = "0.1.0"
-dependencies = [
- "uu_printf",
-]
-
-[[package]]
-name = "cmd-ptx"
-version = "0.1.0"
-dependencies = [
- "uu_ptx",
-]
-
-[[package]]
-name = "cmd-pwd"
-version = "0.1.0"
-dependencies = [
- "uu_pwd",
-]
-
-[[package]]
-name = "cmd-readlink"
-version = "0.1.0"
-dependencies = [
- "uu_readlink",
-]
-
-[[package]]
-name = "cmd-realpath"
-version = "0.1.0"
-dependencies = [
- "uu_realpath",
-]
-
-[[package]]
-name = "cmd-rev"
-version = "0.1.0"
-dependencies = [
- "secureexec-rev",
-]
-
-[[package]]
-name = "cmd-rg"
-version = "0.1.0"
-dependencies = [
- "secureexec-grep",
-]
-
-[[package]]
-name = "cmd-rm"
-version = "0.1.0"
-dependencies = [
- "uu_rm",
-]
-
-[[package]]
-name = "cmd-rmdir"
-version = "0.1.0"
-dependencies = [
- "uu_rmdir",
-]
-
-[[package]]
-name = "cmd-sed"
-version = "0.1.0"
-dependencies = [
- "sed",
-]
-
-[[package]]
-name = "cmd-seq"
-version = "0.1.0"
-dependencies = [
- "uu_seq",
-]
-
-[[package]]
-name = "cmd-sh"
-version = "0.1.0"
-dependencies = [
- "brush-shell",
-]
-
-[[package]]
-name = "cmd-sha1sum"
-version = "0.1.0"
-dependencies = [
- "uu_sha1sum",
-]
-
-[[package]]
-name = "cmd-sha224sum"
-version = "0.1.0"
-dependencies = [
- "uu_sha224sum",
-]
-
-[[package]]
-name = "cmd-sha256sum"
-version = "0.1.0"
-dependencies = [
- "uu_sha256sum",
-]
-
-[[package]]
-name = "cmd-sha384sum"
-version = "0.1.0"
-dependencies = [
- "uu_sha384sum",
-]
-
-[[package]]
-name = "cmd-sha512sum"
-version = "0.1.0"
-dependencies = [
- "uu_sha512sum",
-]
-
-[[package]]
-name = "cmd-shred"
-version = "0.1.0"
-dependencies = [
- "uu_shred",
-]
-
-[[package]]
-name = "cmd-shuf"
-version = "0.1.0"
-dependencies = [
- "uu_shuf",
-]
-
-[[package]]
-name = "cmd-sleep"
-version = "0.1.0"
-dependencies = [
- "secureexec-builtins",
-]
-
-[[package]]
-name = "cmd-sort"
-version = "0.1.0"
-dependencies = [
- "uu_sort",
-]
-
-[[package]]
-name = "cmd-spawn-test-host"
-version = "0.1.0"
-dependencies = [
- "secureexec-wasi-spawn",
-]
-
-[[package]]
-name = "cmd-split"
-version = "0.1.0"
-dependencies = [
- "uu_split",
-]
-
-[[package]]
-name = "cmd-stat"
-version = "0.1.0"
-dependencies = [
- "uu_stat",
-]
-
-[[package]]
-name = "cmd-stdbuf"
-version = "0.1.0"
-dependencies = [
- "secureexec-shims",
-]
-
-[[package]]
-name = "cmd-strings"
-version = "0.1.0"
-dependencies = [
- "secureexec-strings-cmd",
-]
-
-[[package]]
-name = "cmd-stubs"
-version = "0.1.0"
-dependencies = [
- "secureexec-stubs",
-]
-
-[[package]]
-name = "cmd-sum"
-version = "0.1.0"
-dependencies = [
- "uu_sum",
-]
-
-[[package]]
-name = "cmd-tac"
-version = "0.1.0"
-dependencies = [
- "uu_tac",
-]
-
-[[package]]
-name = "cmd-tail"
-version = "0.1.0"
-dependencies = [
- "uu_tail",
-]
-
-[[package]]
-name = "cmd-tar"
-version = "0.1.0"
-dependencies = [
- "secureexec-tar",
-]
-
-[[package]]
-name = "cmd-tee"
-version = "0.1.0"
-dependencies = [
- "uu_tee",
-]
-
-[[package]]
-name = "cmd-test"
-version = "0.1.0"
-dependencies = [
- "secureexec-builtins",
-]
-
-[[package]]
-name = "cmd-timeout"
-version = "0.1.0"
-dependencies = [
- "secureexec-shims",
-]
-
-[[package]]
-name = "cmd-touch"
-version = "0.1.0"
-dependencies = [
- "uu_touch",
-]
-
-[[package]]
-name = "cmd-tr"
-version = "0.1.0"
-dependencies = [
- "uu_tr",
-]
-
-[[package]]
-name = "cmd-tree"
-version = "0.1.0"
-dependencies = [
- "secureexec-tree",
-]
-
-[[package]]
-name = "cmd-true"
-version = "0.1.0"
-dependencies = [
- "uu_true",
-]
-
-[[package]]
-name = "cmd-truncate"
-version = "0.1.0"
-dependencies = [
- "uu_truncate",
-]
-
-[[package]]
-name = "cmd-tsort"
-version = "0.1.0"
-dependencies = [
- "uu_tsort",
-]
-
-[[package]]
-name = "cmd-uname"
-version = "0.1.0"
-dependencies = [
- "uu_uname",
-]
-
-[[package]]
-name = "cmd-unexpand"
-version = "0.1.0"
-dependencies = [
- "uu_unexpand",
-]
-
-[[package]]
-name = "cmd-uniq"
-version = "0.1.0"
-dependencies = [
- "uu_uniq",
-]
-
-[[package]]
-name = "cmd-unlink"
-version = "0.1.0"
-dependencies = [
- "uu_unlink",
-]
-
-[[package]]
-name = "cmd-wc"
-version = "0.1.0"
-dependencies = [
- "uu_wc",
-]
-
-[[package]]
-name = "cmd-which"
-version = "0.1.0"
-dependencies = [
- "secureexec-shims",
-]
-
-[[package]]
-name = "cmd-whoami"
-version = "0.1.0"
-dependencies = [
- "secureexec-builtins",
-]
-
-[[package]]
-name = "cmd-xargs"
-version = "0.1.0"
-dependencies = [
- "secureexec-shims",
-]
-
-[[package]]
-name = "cmd-xu"
-version = "0.1.0"
-
-[[package]]
-name = "cmd-yes"
-version = "0.1.0"
-dependencies = [
- "uu_yes",
-]
-
-[[package]]
-name = "cmd-yq"
-version = "0.1.0"
-dependencies = [
- "secureexec-yq",
-]
-
-[[package]]
-name = "codex-network-proxy"
-version = "0.0.0"
-
-[[package]]
-name = "codex-otel"
-version = "0.0.0"
-
-[[package]]
-name = "color-print"
-version = "0.3.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3aa954171903797d5623e047d9ab69d91b493657917bdfb8c2c80ecaf9cdb6f4"
-dependencies = [
- "color-print-proc-macro",
-]
-
-[[package]]
-name = "color-print-proc-macro"
-version = "0.3.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "692186b5ebe54007e45a59aea47ece9eb4108e141326c304cdc91699a7118a22"
-dependencies = [
- "nom 7.1.3",
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "colorchoice"
-version = "1.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1d07550c9036bf2ae0c684c4297d503f838287c83c53686d05370d0e139ae570"
-
-[[package]]
-name = "command-fds"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f849b92c694fe237ecd8fafd1ba0df7ae0d45c1df6daeb7f68ed4220d51640bd"
-dependencies = [
- "nix 0.30.1",
- "thiserror 2.0.18",
-]
-
-[[package]]
-name = "compact_str"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3b79c4069c6cad78e2e0cdfcbd26275770669fb39fd308a752dc110e83b9af32"
-dependencies = [
- "castaway",
- "cfg-if",
- "itoa",
- "rustversion",
- "ryu",
- "static_assertions",
-]
-
-[[package]]
-name = "compare"
-version = "0.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "120133d4db2ec47efe2e26502ee984747630c67f51974fca0b6c1340cf2368d3"
-
-[[package]]
-name = "console"
-version = "0.16.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d64e8af5551369d19cf50138de61f1c42074ab970f74e99be916646777f8fc87"
-dependencies = [
- "encode_unicode",
- "libc",
- "unicode-width 0.2.0",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "const_format"
-version = "0.2.35"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7faa7469a93a566e9ccc1c73fe783b4a65c274c5ace346038dca9c39fe0030ad"
-dependencies = [
- "const_format_proc_macros",
-]
-
-[[package]]
-name = "const_format_proc_macros"
-version = "0.2.34"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1d57c2eccfb16dbac1f4e61e206105db5820c9d26c3c472bc17c774259ef7744"
-dependencies = [
- "proc-macro2",
- "quote",
- "unicode-xid",
-]
-
-[[package]]
-name = "constant_time_eq"
-version = "0.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b"
-
-[[package]]
-name = "convert_case"
-version = "0.10.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "633458d4ef8c78b72454de2d54fd6ab2e60f9e02be22f3c6104cdc8a4e0fceb9"
-dependencies = [
- "unicode-segmentation",
-]
-
-[[package]]
-name = "core-foundation-sys"
-version = "0.8.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
-
-[[package]]
-name = "core_maths"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "77745e017f5edba1a9c1d854f6f3a52dac8a12dd5af5d2f54aecf61e43d80d30"
-dependencies = [
- "libm",
-]
-
-[[package]]
-name = "cpufeatures"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "crc-fast"
-version = "1.10.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e75b2483e97a5a7da73ac68a05b629f9c53cff58d8ed1c77866079e18b00dba5"
-dependencies = [
- "digest",
- "spin",
-]
-
-[[package]]
-name = "crc32fast"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
-dependencies = [
- "cfg-if",
-]
-
-[[package]]
-name = "crossbeam-deque"
-version = "0.8.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9dd111b7b7f7d55b72c0a6ae361660ee5853c9af73f70c3c2ef6858b950e2e51"
-dependencies = [
- "crossbeam-epoch",
- "crossbeam-utils",
-]
-
-[[package]]
-name = "crossbeam-epoch"
-version = "0.9.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b82ac4a3c2ca9c3460964f020e1402edd5753411d7737aa39c3714ad1b5420e"
-dependencies = [
- "crossbeam-utils",
-]
-
-[[package]]
-name = "crossbeam-utils"
-version = "0.8.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d0a5c400df2834b80a4c3327b3aad3a4c4cd4de0629063962b03235697506a28"
-
-[[package]]
-name = "crossterm"
-version = "0.28.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "829d955a0bb380ef178a640b91779e3987da38c9aea133b20614cfed8cdea9c6"
-dependencies = [
- "bitflags 2.11.0",
- "crossterm_winapi",
- "mio",
- "parking_lot",
- "rustix 0.38.44",
- "serde",
- "signal-hook",
- "signal-hook-mio",
- "winapi",
-]
-
-[[package]]
-name = "crossterm"
-version = "0.29.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d8b9f2e4c67f833b660cdb0a3523065869fb35570177239812ed4c905aeff87b"
-dependencies = [
- "bitflags 2.11.0",
- "crossterm_winapi",
- "derive_more",
- "document-features",
- "mio",
- "parking_lot",
- "rustix 1.1.4",
- "serde",
- "signal-hook",
- "signal-hook-mio",
- "winapi",
-]
-
-[[package]]
-name = "crossterm_winapi"
-version = "0.9.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "acdd7c62a3665c7f6830a51635d9ac9b23ed385797f70a83bb8bafe9c572ab2b"
-dependencies = [
- "winapi",
-]
-
-[[package]]
-name = "crunchy"
-version = "0.2.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "460fbee9c2c2f33933d720630a6a0bac33ba7053db5344fac858d4b8952d77d5"
-
-[[package]]
-name = "crypto-common"
-version = "0.1.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
-dependencies = [
- "generic-array",
- "typenum",
-]
-
-[[package]]
-name = "ctrlc"
-version = "3.5.2"
-
-[[package]]
-name = "darling"
-version = "0.20.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fc7f46116c46ff9ab3eb1597a45688b6715c6e628b5c133e288e709a29bcb4ee"
-dependencies = [
- "darling_core 0.20.11",
- "darling_macro 0.20.11",
-]
-
-[[package]]
-name = "darling"
-version = "0.23.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "25ae13da2f202d56bd7f91c25fba009e7717a1e4a1cc98a76d844b65ae912e9d"
-dependencies = [
- "darling_core 0.23.0",
- "darling_macro 0.23.0",
-]
-
-[[package]]
-name = "darling_core"
-version = "0.20.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0d00b9596d185e565c2207a0b01f8bd1a135483d02d9b7b0a54b11da8d53412e"
-dependencies = [
- "fnv",
- "ident_case",
- "proc-macro2",
- "quote",
- "strsim",
- "syn",
-]
-
-[[package]]
-name = "darling_core"
-version = "0.23.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9865a50f7c335f53564bb694ef660825eb8610e0a53d3e11bf1b0d3df31e03b0"
-dependencies = [
- "ident_case",
- "proc-macro2",
- "quote",
- "strsim",
- "syn",
-]
-
-[[package]]
-name = "darling_macro"
-version = "0.20.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fc34b93ccb385b40dc71c6fceac4b2ad23662c7eeb248cf10d529b7e055b6ead"
-dependencies = [
- "darling_core 0.20.11",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "darling_macro"
-version = "0.23.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ac3984ec7bd6cfa798e62b4a642426a5be0e68f9401cfc2a01e3fa9ea2fcdb8d"
-dependencies = [
- "darling_core 0.23.0",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "data-encoding"
-version = "2.10.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7a1e2f27636f116493b8b860f5546edb47c8d8f8ea73e1d2a20be88e28d1fea"
-
-[[package]]
-name = "data-encoding-macro"
-version = "0.1.19"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8142a83c17aa9461d637e649271eae18bf2edd00e91f2e105df36c3c16355bdb"
-dependencies = [
- "data-encoding",
- "data-encoding-macro-internal",
-]
-
-[[package]]
-name = "data-encoding-macro-internal"
-version = "0.1.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7ab67060fc6b8ef687992d439ca0fa36e7ed17e9a0b16b25b601e8757df720de"
-dependencies = [
- "data-encoding",
- "syn",
-]
-
-[[package]]
-name = "derive_more"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d751e9e49156b02b44f9c1815bcb94b984cdcc4396ecc32521c739452808b134"
-dependencies = [
- "derive_more-impl",
-]
-
-[[package]]
-name = "derive_more-impl"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "799a97264921d8623a957f6c3b9011f3b5492f557bbb7a5a19b7fa6d06ba8dcb"
-dependencies = [
- "convert_case",
- "proc-macro2",
- "quote",
- "rustc_version",
- "syn",
-]
-
-[[package]]
-name = "digest"
-version = "0.10.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
-dependencies = [
- "block-buffer",
- "crypto-common",
-]
-
-[[package]]
-name = "displaydoc"
-version = "0.2.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "document-features"
-version = "0.2.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d4b8a88685455ed29a21542a33abd9cb6510b6b129abadabdcef0f4c55bc8f61"
-dependencies = [
- "litrs",
-]
-
-[[package]]
-name = "dunce"
-version = "1.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
-
-[[package]]
-name = "dyn-clone"
-version = "1.0.20"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d0881ea181b1df73ff77ffaaf9c7544ecc11e82fba9b5f27b262a3c73a332555"
-
-[[package]]
-name = "either"
-version = "1.15.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
-
-[[package]]
-name = "encode_unicode"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34aa73646ffb006b8f5147f3dc182bd4bcb190227ce861fc4a4844bf8e3cb2c0"
-
-[[package]]
-name = "equivalent"
-version = "1.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
-
-[[package]]
-name = "errno"
-version = "0.3.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
-dependencies = [
- "libc",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "fancy-regex"
-version = "0.16.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "998b056554fbe42e03ae0e152895cd1a7e1002aec800fdc6635d20270260c46f"
-dependencies = [
- "bit-set",
- "regex-automata",
- "regex-syntax",
-]
-
-[[package]]
-name = "fancy-regex"
-version = "0.17.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72cf461f865c862bb7dc573f643dd6a2b6842f7c30b07882b56bd148cc2761b8"
-dependencies = [
- "bit-set",
- "regex-automata",
- "regex-syntax",
-]
-
-[[package]]
-name = "fastrand"
-version = "2.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be"
-
-[[package]]
-name = "fd-lock"
-version = "4.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0ce92ff622d6dadf7349484f42c93271a0d49b7cc4d466a936405bacbe10aa78"
-dependencies = [
- "cfg-if",
- "rustix 1.1.4",
- "windows-sys 0.59.0",
-]
-
-[[package]]
-name = "filetime"
-version = "0.2.27"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f98844151eee8917efc50bd9e8318cb963ae8b297431495d3f758616ea5c57db"
-dependencies = [
- "cfg-if",
- "libc",
- "libredox",
-]
-
-[[package]]
-name = "find-msvc-tools"
-version = "0.1.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
-
-[[package]]
-name = "fixed_decimal"
-version = "0.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "35eabf480f94d69182677e37571d3be065822acfafd12f2f085db44fbbcc8e57"
-dependencies = [
- "displaydoc",
- "smallvec",
- "writeable",
-]
-
-[[package]]
-name = "flate2"
-version = "1.1.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "843fba2746e448b37e26a819579957415c8cef339bf08564fe8b7ddbd959573c"
-dependencies = [
- "crc32fast",
- "miniz_oxide",
-]
-
-[[package]]
-name = "fluent"
-version = "0.17.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8137a6d5a2c50d6b0ebfcb9aaa91a28154e0a70605f112d30cb0cd4a78670477"
-dependencies = [
- "fluent-bundle",
- "unic-langid",
-]
-
-[[package]]
-name = "fluent-bundle"
-version = "0.16.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "01203cb8918f5711e73891b347816d932046f95f54207710bda99beaeb423bf4"
-dependencies = [
- "fluent-langneg",
- "fluent-syntax",
- "intl-memoizer",
- "intl_pluralrules",
- "rustc-hash",
- "self_cell",
- "smallvec",
- "unic-langid",
-]
-
-[[package]]
-name = "fluent-langneg"
-version = "0.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7eebbe59450baee8282d71676f3bfed5689aeab00b27545e83e5f14b1195e8b0"
-dependencies = [
- "unic-langid",
-]
-
-[[package]]
-name = "fluent-syntax"
-version = "0.12.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "54f0d287c53ffd184d04d8677f590f4ac5379785529e5e08b1c8083acdd5c198"
-dependencies = [
- "memchr",
- "thiserror 2.0.18",
-]
-
-[[package]]
-name = "fnv"
-version = "1.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f9eec918d3f24069decb9af1554cad7c880e2da24a9afd88aca000531ab82c1"
-
-[[package]]
-name = "foldhash"
-version = "0.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d9c4f5dac5e15c24eb999c26181a6ca40b39fe946cbe4c263c7209467bc83af2"
-
-[[package]]
-name = "foldhash"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "77ce24cb58228fbb8aa041425bb1050850ac19177686ea6e0f41a70416f56fdb"
-
-[[package]]
-name = "fs_extra"
-version = "1.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "42703706b716c37f96a77aea830392ad231f44c9e9a67872fa5548707e11b11c"
-
-[[package]]
-name = "fsevent-sys"
-version = "4.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "76ee7a02da4d231650c7cea31349b889be2f45ddb3ef3032d2ec8185f6313fd2"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "funty"
-version = "2.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6d5a32815ae3f33302d95fdcb2ce17862f8c65363dcfd29360480ba1001fc9c"
-
-[[package]]
-name = "futures"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8b147ee9d1f6d097cef9ce628cd2ee62288d963e16fb287bd9286455b241382d"
-dependencies = [
- "futures-channel",
- "futures-core",
- "futures-executor",
- "futures-io",
- "futures-sink",
- "futures-task",
- "futures-util",
-]
-
-[[package]]
-name = "futures-channel"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "07bbe89c50d7a535e539b8c17bc0b49bdb77747034daa8087407d655f3f7cc1d"
-dependencies = [
- "futures-core",
- "futures-sink",
-]
-
-[[package]]
-name = "futures-core"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e3450815272ef58cec6d564423f6e755e25379b217b0bc688e295ba24df6b1d"
-
-[[package]]
-name = "futures-executor"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "baf29c38818342a3b26b5b923639e7b1f4a61fc5e76102d4b1981c6dc7a7579d"
-dependencies = [
- "futures-core",
- "futures-task",
- "futures-util",
-]
-
-[[package]]
-name = "futures-io"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cecba35d7ad927e23624b22ad55235f2239cfa44fd10428eecbeba6d6a717718"
-
-[[package]]
-name = "futures-macro"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e835b70203e41293343137df5c0664546da5745f82ec9b84d40be8336958447b"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "futures-sink"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c39754e157331b013978ec91992bde1ac089843443c49cbc7f46150b0fad0893"
-
-[[package]]
-name = "futures-task"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "037711b3d59c33004d3856fbdc83b99d4ff37a24768fa1be9ce3538a1cde4393"
-
-[[package]]
-name = "futures-util"
-version = "0.3.32"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "389ca41296e6190b48053de0321d02a77f32f8a5d2461dd38762c0593805c6d6"
-dependencies = [
- "futures-channel",
- "futures-core",
- "futures-io",
- "futures-macro",
- "futures-sink",
- "futures-task",
- "memchr",
- "pin-project-lite",
- "slab",
-]
-
-[[package]]
-name = "gcd"
-version = "2.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1d758ba1b47b00caf47f24925c0074ecb20d6dfcffe7f6d53395c0465674841a"
-
-[[package]]
-name = "generic-array"
-version = "0.14.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
-dependencies = [
- "typenum",
- "version_check",
-]
-
-[[package]]
-name = "getrandom"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
-dependencies = [
- "cfg-if",
- "libc",
- "wasi",
-]
-
-[[package]]
-name = "getrandom"
-version = "0.3.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
-dependencies = [
- "cfg-if",
- "js-sys",
- "libc",
- "r-efi 5.3.0",
- "wasip2",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "getrandom"
-version = "0.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0de51e6874e94e7bf76d726fc5d13ba782deca734ff60d5bb2fb2607c7406555"
-dependencies = [
- "cfg-if",
- "libc",
- "r-efi 6.0.0",
- "wasip2",
- "wasip3",
-]
-
-[[package]]
-name = "gimli"
-version = "0.32.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e629b9b98ef3dd8afe6ca2bd0f89306cec16d43d907889945bc5d6687f2f13c7"
-
-[[package]]
-name = "git-version"
-version = "0.3.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1ad568aa3db0fcbc81f2f116137f263d7304f512a1209b35b85150d3ef88ad19"
-dependencies = [
- "git-version-macro",
-]
-
-[[package]]
-name = "git-version-macro"
-version = "0.3.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "53010ccb100b96a67bc32c0175f0ed1426b31b655d562898e57325f81c023ac0"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "glob"
-version = "0.3.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0cc23270f6e1808e30a928bdc84dea0b9b4136a8bc82338574f23baf47bbd280"
-
-[[package]]
-name = "half"
-version = "2.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ea2d84b969582b4b1864a92dc5d27cd2b77b622a8d79306834f1be5ba20d84b"
-dependencies = [
- "cfg-if",
- "crunchy",
- "zerocopy",
-]
-
-[[package]]
-name = "hashbrown"
-version = "0.15.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9229cfe53dfd69f0609a49f65461bd93001ea1ef889cd5529dd176593f5338a1"
-dependencies = [
- "allocator-api2",
- "equivalent",
- "foldhash 0.1.5",
-]
-
-[[package]]
-name = "hashbrown"
-version = "0.16.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
-dependencies = [
- "allocator-api2",
- "equivalent",
- "foldhash 0.2.0",
-]
-
-[[package]]
-name = "heck"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2304e00983f87ffb38b55b444b5e3b60a884b5d30c0fca7d82fe33449bbe55ea"
-
-[[package]]
-name = "hex"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
-
-[[package]]
-name = "hifijson"
-version = "0.2.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0a7763b98ba8a24f59e698bf9ab197e7676c640d6455d1580b4ce7dc560f0f0d"
-
-[[package]]
-name = "homedir"
-version = "0.3.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5bdbbd5bc8c5749697ccaa352fa45aff8730cf21c68029c0eef1ffed7c3d6ba2"
-dependencies = [
- "cfg-if",
- "nix 0.29.0",
- "widestring",
- "windows 0.57.0",
-]
-
-[[package]]
-name = "hostname"
-version = "0.4.2"
-
-[[package]]
-name = "human-panic"
-version = "2.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "075e8747af11abcff07d55d98297c9c6c70eb5d6365b25e7b12f02e484935191"
-dependencies = [
- "anstream 0.6.21",
- "anstyle",
- "backtrace",
- "serde",
- "serde_derive",
- "sysinfo",
- "toml 0.9.12+spec-1.1.0",
- "uuid",
-]
-
-[[package]]
-name = "iana-time-zone"
-version = "0.1.65"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
-dependencies = [
- "android_system_properties",
- "core-foundation-sys",
- "iana-time-zone-haiku",
- "js-sys",
- "log",
- "wasm-bindgen",
- "windows-core 0.62.2",
-]
-
-[[package]]
-name = "iana-time-zone-haiku"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
-dependencies = [
- "cc",
-]
-
-[[package]]
-name = "icu_calendar"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d6f0e52e009b6b16ba9c0693578796f2dd4aaa59a7f8f920423706714a89ac4e"
-dependencies = [
- "calendrical_calculations",
- "displaydoc",
- "icu_calendar_data",
- "icu_locale",
- "icu_locale_core",
- "icu_provider",
- "ixdtf",
- "serde",
- "tinystr",
- "zerovec",
-]
-
-[[package]]
-name = "icu_calendar_data"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "527f04223b17edfe0bd43baf14a0cb1b017830db65f3950dc00224860a9a446d"
-
-[[package]]
-name = "icu_collator"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32eed11a5572f1088b63fa21dc2e70d4a865e5739fc2d10abc05be93bae97019"
-dependencies = [
- "icu_collator_data",
- "icu_collections",
- "icu_locale",
- "icu_locale_core",
- "icu_normalizer",
- "icu_properties",
- "icu_provider",
- "smallvec",
- "utf16_iter",
- "utf8_iter",
- "zerovec",
-]
-
-[[package]]
-name = "icu_collator_data"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5ab06f0e83a613efddba3e4913e00e43ed4001fae651cb7d40fc7e66b83b6fb9"
-
-[[package]]
-name = "icu_collections"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4c6b649701667bbe825c3b7e6388cb521c23d88644678e83c0c4d0a621a34b43"
-dependencies = [
- "displaydoc",
- "potential_utf",
- "yoke",
- "zerofrom",
- "zerovec",
-]
-
-[[package]]
-name = "icu_datetime"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b9d49f41ded8e63761b6b4c3120dfdc289415a1ed10107db6198eb311057ca5"
-dependencies = [
- "displaydoc",
- "fixed_decimal",
- "icu_calendar",
- "icu_datetime_data",
- "icu_decimal",
- "icu_locale",
- "icu_locale_core",
- "icu_pattern",
- "icu_plurals",
- "icu_provider",
- "icu_time",
- "potential_utf",
- "tinystr",
- "writeable",
- "zerovec",
-]
-
-[[package]]
-name = "icu_datetime_data"
-version = "2.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "46597233625417b7c8052a63d916e4fdc73df21614ac0b679492a5d6e3b01aeb"
-
-[[package]]
-name = "icu_decimal"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a38c52231bc348f9b982c1868a2af3195199623007ba2c7650f432038f5b3e8e"
-dependencies = [
- "fixed_decimal",
- "icu_decimal_data",
- "icu_locale",
- "icu_locale_core",
- "icu_provider",
- "writeable",
- "zerovec",
-]
-
-[[package]]
-name = "icu_decimal_data"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2905b4044eab2dd848fe84199f9195567b63ab3a93094711501363f63546fef7"
-
-[[package]]
-name = "icu_locale"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "532b11722e350ab6bf916ba6eb0efe3ee54b932666afec989465f9243fe6dd60"
-dependencies = [
- "icu_collections",
- "icu_locale_core",
- "icu_locale_data",
- "icu_provider",
- "potential_utf",
- "tinystr",
- "zerovec",
-]
-
-[[package]]
-name = "icu_locale_core"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "edba7861004dd3714265b4db54a3c390e880ab658fec5f7db895fae2046b5bb6"
-dependencies = [
- "displaydoc",
- "litemap",
- "serde",
- "tinystr",
- "writeable",
- "zerovec",
-]
-
-[[package]]
-name = "icu_locale_data"
-version = "2.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1c5f1d16b4c3a2642d3a719f18f6b06070ab0aef246a6418130c955ae08aa831"
-
-[[package]]
-name = "icu_normalizer"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f6c8828b67bf8908d82127b2054ea1b4427ff0230ee9141c54251934ab1b599"
-dependencies = [
- "icu_collections",
- "icu_normalizer_data",
- "icu_properties",
- "icu_provider",
- "smallvec",
- "utf16_iter",
- "utf8_iter",
- "write16",
- "zerovec",
-]
-
-[[package]]
-name = "icu_normalizer_data"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7aedcccd01fc5fe81e6b489c15b247b8b0690feb23304303a9e560f37efc560a"
-
-[[package]]
-name = "icu_pattern"
-version = "0.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7a7ff8c0ff6f61cdce299dcb54f557b0a251adbc78f6f0c35a21332c452b4a1b"
-dependencies = [
- "displaydoc",
- "either",
- "serde",
- "writeable",
- "zerovec",
-]
-
-[[package]]
-name = "icu_plurals"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4f9cfe49f5b1d1163cc58db451562339916a9ca5cbcaae83924d41a0bf839474"
-dependencies = [
- "fixed_decimal",
- "icu_locale",
- "icu_plurals_data",
- "icu_provider",
- "zerovec",
-]
-
-[[package]]
-name = "icu_plurals_data"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f018a98dccf7f0eb02ba06ac0ff67d102d8ded80734724305e924de304e12ff0"
-
-[[package]]
-name = "icu_properties"
-version = "2.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "020bfc02fe870ec3a66d93e677ccca0562506e5872c650f893269e08615d74ec"
-dependencies = [
- "icu_collections",
- "icu_locale_core",
- "icu_properties_data",
- "icu_provider",
- "zerotrie",
- "zerovec",
-]
-
-[[package]]
-name = "icu_properties_data"
-version = "2.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "616c294cf8d725c6afcd8f55abc17c56464ef6211f9ed59cccffe534129c77af"
-
-[[package]]
-name = "icu_provider"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85962cf0ce02e1e0a629cc34e7ca3e373ce20dda4c4d7294bbd0bf1fdb59e614"
-dependencies = [
- "displaydoc",
- "icu_locale_core",
- "serde",
- "stable_deref_trait",
- "writeable",
- "yoke",
- "zerofrom",
- "zerotrie",
- "zerovec",
-]
-
-[[package]]
-name = "icu_time"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8242b00da3b3b6678f731437a11c8833a43c821ae081eca60ba1b7579d45b6d8"
-dependencies = [
- "calendrical_calculations",
- "displaydoc",
- "icu_calendar",
- "icu_locale_core",
- "icu_provider",
- "icu_time_data",
- "ixdtf",
- "serde",
- "zerotrie",
- "zerovec",
-]
-
-[[package]]
-name = "icu_time_data"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3e10b0e5e87a2c84bd5fa407705732052edebe69291d347d0c3033785470edbf"
-
-[[package]]
-name = "id-arena"
-version = "2.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3d3067d79b975e8844ca9eb072e16b31c3c1c36928edf9c6789548c524d0d954"
-
-[[package]]
-name = "ident_case"
-version = "1.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9e0384b61958566e926dc50660321d12159025e767c18e043daf26b70104c39"
-
-[[package]]
-name = "indenter"
-version = "0.3.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "964de6e86d545b246d84badc0fef527924ace5134f30641c203ef52ba83f58d5"
-
-[[package]]
-name = "indexmap"
-version = "2.13.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7714e70437a7dc3ac8eb7e6f8df75fd8eb422675fc7678aff7364301092b1017"
-dependencies = [
- "equivalent",
- "hashbrown 0.16.1",
- "serde",
- "serde_core",
-]
-
-[[package]]
-name = "indicatif"
-version = "0.18.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "25470f23803092da7d239834776d653104d551bc4d7eacaf31e6837854b8e9eb"
-dependencies = [
- "console",
- "portable-atomic",
- "unicode-width 0.2.0",
- "unit-prefix",
- "web-time",
-]
-
-[[package]]
-name = "indoc"
-version = "2.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "79cf5c93f93228cf8efb3ba362535fb11199ac548a09ce117c9b1adc3030d706"
-dependencies = [
- "rustversion",
-]
-
-[[package]]
-name = "infer"
-version = "0.16.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bc150e5ce2330295b8616ce0e3f53250e53af31759a9dbedad1621ba29151847"
-dependencies = [
- "cfb",
-]
-
-[[package]]
-name = "inotify"
-version = "0.11.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bd5b3eaf1a28b758ac0faa5a4254e8ab2705605496f1b1f3fbbc3988ad73d199"
-dependencies = [
- "bitflags 2.11.0",
- "inotify-sys",
- "libc",
-]
-
-[[package]]
-name = "inotify-sys"
-version = "0.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e05c02b5e89bff3b946cedeca278abc628fe811e604f027c45a8aa3cf793d0eb"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "instability"
-version = "0.3.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5eb2d60ef19920a3a9193c3e371f726ec1dafc045dac788d0fb3704272458971"
-dependencies = [
- "darling 0.23.0",
- "indoc",
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "intl-memoizer"
-version = "0.5.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "310da2e345f5eb861e7a07ee182262e94975051db9e4223e909ba90f392f163f"
-dependencies = [
- "type-map",
- "unic-langid",
-]
-
-[[package]]
-name = "intl_pluralrules"
-version = "7.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "078ea7b7c29a2b4df841a7f6ac8775ff6074020c6776d48491ce2268e068f972"
-dependencies = [
- "unic-langid",
-]
-
-[[package]]
-name = "is_terminal_polyfill"
-version = "1.70.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
-
-[[package]]
-name = "itertools"
-version = "0.13.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "413ee7dfc52ee1a4949ceeb7dbc8a33f2d6c088194d9f922fb8318faf1f01186"
-dependencies = [
- "either",
-]
-
-[[package]]
-name = "itertools"
-version = "0.14.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285"
-dependencies = [
- "either",
-]
-
-[[package]]
-name = "itoa"
-version = "1.0.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "92ecc6618181def0457392ccd0ee51198e065e016d1d527a7ac1b6dc7c1f09d2"
-
-[[package]]
-name = "ixdtf"
-version = "0.6.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "84de9d95a6d2547d9b77ee3f25fa0ee32e3c3a6484d47a55adebc0439c077992"
-
-[[package]]
-name = "jaq-core"
-version = "2.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "77526a72eb79412c29fd141767a6549bbfcb1cb40e00556fe16532d5e878e098"
-dependencies = [
- "dyn-clone",
- "once_cell",
- "typed-arena",
-]
-
-[[package]]
-name = "jaq-json"
-version = "1.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "01dbdbd07b076e8403abac68ce7744d93e2ecd953bbc44bf77bf00e1e81172bc"
-dependencies = [
- "foldhash 0.1.5",
- "hifijson",
- "indexmap",
- "jaq-core",
- "jaq-std",
- "serde_json",
-]
-
-[[package]]
-name = "jaq-std"
-version = "2.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2c264fe397c981705976c71f1bfe020382b9eda52ae950e57fe885e147bdd67d"
-dependencies = [
- "aho-corasick",
- "base64",
- "chrono",
- "jaq-core",
- "libm",
- "log",
- "regex-lite",
- "urlencoding",
-]
-
-[[package]]
-name = "jiff"
-version = "0.2.23"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1a3546dc96b6d42c5f24902af9e2538e82e39ad350b0c766eb3fbf2d8f3d8359"
-dependencies = [
- "jiff-static",
- "jiff-tzdb-platform",
- "log",
- "portable-atomic",
- "portable-atomic-util",
- "serde_core",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "jiff-icu"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0e67c2beaae8b10a82d849b9aabb698a43a682f32b17bcdc035d5ecadb44d646"
-dependencies = [
- "icu_calendar",
- "icu_time",
- "jiff",
-]
-
-[[package]]
-name = "jiff-static"
-version = "0.2.23"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a8c8b344124222efd714b73bb41f8b5120b27a7cc1c75593a6ff768d9d05aa4"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "jiff-tzdb"
-version = "0.1.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c900ef84826f1338a557697dc8fc601df9ca9af4ac137c7fb61d4c6f2dfd3076"
-
-[[package]]
-name = "jiff-tzdb-platform"
-version = "0.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "875a5a69ac2bab1a891711cf5eccbec1ce0341ea805560dcd90b7a2e925132e8"
-dependencies = [
- "jiff-tzdb",
-]
-
-[[package]]
-name = "js-sys"
-version = "0.3.91"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b49715b7073f385ba4bc528e5747d02e66cb39c6146efb66b781f131f0fb399c"
-dependencies = [
- "once_cell",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "keccak"
-version = "0.1.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cb26cec98cce3a3d96cbb7bced3c4b16e3d13f27ec56dbd62cbc8f39cfb9d653"
-dependencies = [
- "cpufeatures",
-]
-
-[[package]]
-name = "kqueue"
-version = "1.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eac30106d7dce88daf4a3fcb4879ea939476d5074a9b7ddd0fb97fa4bed5596a"
-dependencies = [
- "kqueue-sys",
- "libc",
-]
-
-[[package]]
-name = "kqueue-sys"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ed9625ffda8729b85e45cf04090035ac368927b8cebc34898e7c120f52e4838b"
-dependencies = [
- "bitflags 1.3.2",
- "libc",
-]
-
-[[package]]
-name = "lazy_static"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
-
-[[package]]
-name = "leb128fmt"
-version = "0.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "09edd9e8b54e49e587e4f6295a7d29c3ea94d469cb40ab8ca70b288248a81db2"
-
-[[package]]
-name = "libc"
-version = "0.2.183"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b5b646652bf6661599e1da8901b3b9522896f01e736bad5f723fe7a3a27f899d"
-
-[[package]]
-name = "libm"
-version = "0.2.16"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6d2cec3eae94f9f509c767b45932f1ada8350c4bdb85af2fcab4a3c14807981"
-
-[[package]]
-name = "libredox"
-version = "0.1.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1744e39d1d6a9948f4f388969627434e31128196de472883b39f148769bfe30a"
-dependencies = [
- "bitflags 2.11.0",
- "libc",
- "plain",
- "redox_syscall 0.7.3",
-]
-
-[[package]]
-name = "linux-raw-sys"
-version = "0.4.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d26c52dbd32dccf2d10cac7725f8eae5296885fb5703b261f7d0a0739ec807ab"
-
-[[package]]
-name = "linux-raw-sys"
-version = "0.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
-
-[[package]]
-name = "litemap"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6373607a59f0be73a39b6fe456b8192fcc3585f602af20751600e974dd455e77"
-
-[[package]]
-name = "litrs"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "11d3d7f243d5c5a8b9bb5d6dd2b1602c0cb0b9db1621bafc7ed66e35ff9fe092"
-
-[[package]]
-name = "lock_api"
-version = "0.4.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
-dependencies = [
- "scopeguard",
-]
-
-[[package]]
-name = "log"
-version = "0.4.29"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
-
-[[package]]
-name = "lru"
-version = "0.12.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "234cf4f4a04dc1f57e24b96cc0cd600cf2af460d4161ac5ecdd0af8e1f3b2a38"
-dependencies = [
- "hashbrown 0.15.5",
-]
-
-[[package]]
-name = "lru"
-version = "0.16.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a1dc47f592c06f33f8e3aea9591776ec7c9f9e4124778ff8a3c3b87159f7e593"
-dependencies = [
- "hashbrown 0.16.1",
-]
-
-[[package]]
-name = "lscolors"
-version = "0.21.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d60e266dfb1426eb2d24792602e041131fdc0236bb7007abc0e589acafd60929"
-dependencies = [
- "aho-corasick",
- "nu-ansi-term",
-]
-
-[[package]]
-name = "md-5"
-version = "0.10.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d89e7ee0cfbedfc4da3340218492196241d89eefb6dab27de5df917a6d2e78cf"
-dependencies = [
- "cfg-if",
- "digest",
-]
-
-[[package]]
-name = "memchr"
-version = "2.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
-
-[[package]]
-name = "memmap2"
-version = "0.9.10"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "714098028fe011992e1c3962653c96b2d578c4b4bce9036e15ff220319b1e0e3"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "minimal-lexical"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
-
-[[package]]
-name = "miniz_oxide"
-version = "0.8.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
-dependencies = [
- "adler2",
- "simd-adler32",
-]
-
-[[package]]
-name = "mio"
-version = "1.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a69bcab0ad47271a0234d9422b131806bf3968021e5dc9328caf2d4cd58557fc"
-dependencies = [
- "libc",
- "log",
- "wasi",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "nix"
-version = "0.29.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "71e2746dc3a24dd78b3cfcb7be93368c6de9963d30f43a6a73998a9cf4b17b46"
-dependencies = [
- "bitflags 2.11.0",
- "cfg-if",
- "cfg_aliases",
- "libc",
-]
-
-[[package]]
-name = "nix"
-version = "0.30.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "74523f3a35e05aba87a1d978330aef40f67b0304ac79c1c00b294c9830543db6"
-dependencies = [
- "bitflags 2.11.0",
- "cfg-if",
- "cfg_aliases",
- "libc",
-]
-
-[[package]]
-name = "nom"
-version = "7.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
-dependencies = [
- "memchr",
- "minimal-lexical",
-]
-
-[[package]]
-name = "nom"
-version = "8.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df9761775871bdef83bee530e60050f7e54b1105350d6884eb0fb4f46c2f9405"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "normalize-path"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f5438dd2b2ff4c6df6e1ce22d825ed2fa93ee2922235cc45186991717f0a892d"
-
-[[package]]
-name = "notify"
-version = "8.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4d3d07927151ff8575b7087f245456e549fea62edf0ec4e565a5ee50c8402bc3"
-dependencies = [
- "bitflags 2.11.0",
- "fsevent-sys",
- "inotify",
- "kqueue",
- "libc",
- "log",
- "mio",
- "notify-types",
- "walkdir",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "notify-types"
-version = "2.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "42b8cfee0e339a0337359f3c88165702ac6e600dc01c0cc9579a92d62b08477a"
-dependencies = [
- "bitflags 2.11.0",
-]
-
-[[package]]
-name = "ntapi"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c3b335231dfd352ffb0f8017f3b6027a4917f7df785ea2143d8af2adc66980ae"
-dependencies = [
- "winapi",
-]
-
-[[package]]
-name = "nu-ansi-term"
-version = "0.50.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7957b9740744892f114936ab4a57b3f487491bbeafaf8083688b16841a4240e5"
-dependencies = [
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "num-bigint"
-version = "0.4.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a5e44f723f1133c9deac646763579fdb3ac745e418f2a7af9cd0c431da1f20b9"
-dependencies = [
- "num-integer",
- "num-traits",
- "rand 0.8.5",
-]
-
-[[package]]
-name = "num-integer"
-version = "0.1.46"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7969661fd2958a5cb096e56c8e1ad0444ac2bbcd0061bd28660485a44879858f"
-dependencies = [
- "num-traits",
-]
-
-[[package]]
-name = "num-modular"
-version = "0.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "17bb261bf36fa7d83f4c294f834e91256769097b3cb505d44831e0a179ac647f"
-dependencies = [
- "num-bigint",
- "num-integer",
- "num-traits",
-]
-
-[[package]]
-name = "num-prime"
-version = "0.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b285c575532a33ef6fdd3a57640d0b1c70e6ca48644d6df7bbd4b7a0cfbbb12d"
-dependencies = [
- "bitvec",
- "either",
- "lru 0.16.3",
- "num-bigint",
- "num-integer",
- "num-modular",
- "num-traits",
- "rand 0.8.5",
-]
-
-[[package]]
-name = "num-traits"
-version = "0.2.19"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
-dependencies = [
- "autocfg",
-]
-
-[[package]]
-name = "number_prefix"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "830b246a0e5f20af87141b25c173cd1b609bd7779a4617d6ec582abaf90870f3"
-
-[[package]]
-name = "objc2-core-foundation"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a180dd8642fa45cdb7dd721cd4c11b1cadd4929ce112ebd8b9f5803cc79d536"
-dependencies = [
- "bitflags 2.11.0",
-]
-
-[[package]]
-name = "objc2-io-kit"
-version = "0.3.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "33fafba39597d6dc1fb709123dfa8289d39406734be322956a69f0931c73bb15"
-dependencies = [
- "libc",
- "objc2-core-foundation",
-]
-
-[[package]]
-name = "object"
-version = "0.37.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ff76201f031d8863c38aa7f905eca4f53abbfa15f609db4277d44cd8938f33fe"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "once_cell"
-version = "1.21.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9f7c3e4beb33f85d45ae3e3a1792185706c8e16d043238c593331cc7cd313b50"
-
-[[package]]
-name = "once_cell_polyfill"
-version = "1.70.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
-
-[[package]]
-name = "os_display"
-version = "0.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ad5fd71b79026fb918650dde6d125000a233764f1c2f1659a1c71118e33ea08f"
-dependencies = [
- "unicode-width 0.2.0",
-]
-
-[[package]]
-name = "outref"
-version = "0.5.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1a80800c0488c3a21695ea981a54918fbb37abf04f4d0720c453632255e2ff0e"
-
-[[package]]
-name = "parking_lot"
-version = "0.12.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
-dependencies = [
- "lock_api",
- "parking_lot_core",
-]
-
-[[package]]
-name = "parking_lot_core"
-version = "0.9.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
-dependencies = [
- "cfg-if",
- "libc",
- "redox_syscall 0.5.18",
- "smallvec",
- "windows-link 0.2.1",
-]
-
-[[package]]
-name = "parse_datetime"
-version = "0.14.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "413775a7eac2261d2211a79d10ef275e5b6f7b527eec42ad09adce2ffa92b6e5"
-dependencies = [
- "jiff",
- "num-traits",
- "winnow",
-]
-
-[[package]]
-name = "paste"
-version = "1.0.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "57c0d7b74b563b49d38dae00a0c37d4d6de9b432382b2892f0574ddcae73fd0a"
-
-[[package]]
-name = "peg"
-version = "0.8.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9928cfca101b36ec5163e70049ee5368a8a1c3c6efc9ca9c5f9cc2f816152477"
-dependencies = [
- "peg-macros",
- "peg-runtime",
-]
-
-[[package]]
-name = "peg-macros"
-version = "0.8.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6298ab04c202fa5b5d52ba03269fb7b74550b150323038878fe6c372d8280f71"
-dependencies = [
- "peg-runtime",
- "proc-macro2",
- "quote",
-]
-
-[[package]]
-name = "peg-runtime"
-version = "0.8.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "132dca9b868d927b35b5dd728167b2dee150eb1ad686008fc71ccb298b776fca"
-
-[[package]]
-name = "phf"
-version = "0.11.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fd6780a80ae0c52cc120a26a1a42c1ae51b247a253e4e06113d23d2c2edd078"
-dependencies = [
- "phf_shared 0.11.3",
-]
-
-[[package]]
-name = "phf"
-version = "0.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c1562dc717473dbaa4c1f85a36410e03c047b2e7df7f45ee938fbef64ae7fadf"
-dependencies = [
- "phf_shared 0.13.1",
- "serde",
-]
-
-[[package]]
-name = "phf_codegen"
-version = "0.11.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "aef8048c789fa5e851558d709946d6d79a8ff88c0440c587967f8e94bfb1216a"
-dependencies = [
- "phf_generator 0.11.3",
- "phf_shared 0.11.3",
-]
-
-[[package]]
-name = "phf_codegen"
-version = "0.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "49aa7f9d80421bca176ca8dbfebe668cc7a2684708594ec9f3c0db0805d5d6e1"
-dependencies = [
- "phf_generator 0.13.1",
- "phf_shared 0.13.1",
-]
-
-[[package]]
-name = "phf_generator"
-version = "0.11.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3c80231409c20246a13fddb31776fb942c38553c51e871f8cbd687a4cfb5843d"
-dependencies = [
- "phf_shared 0.11.3",
- "rand 0.8.5",
-]
-
-[[package]]
-name = "phf_generator"
-version = "0.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "135ace3a761e564ec88c03a77317a7c6b80bb7f7135ef2544dbe054243b89737"
-dependencies = [
- "fastrand",
- "phf_shared 0.13.1",
-]
-
-[[package]]
-name = "phf_shared"
-version = "0.11.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "67eabc2ef2a60eb7faa00097bd1ffdb5bd28e62bf39990626a582201b7a754e5"
-dependencies = [
- "siphasher",
-]
-
-[[package]]
-name = "phf_shared"
-version = "0.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e57fef6bc5981e38c2ce2d63bfa546861309f875b8a75f092d1d54ae2d64f266"
-dependencies = [
- "siphasher",
-]
-
-[[package]]
-name = "pin-project-lite"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a89322df9ebe1c1578d689c92318e070967d1042b512afbe49518723f4e6d5cd"
-
-[[package]]
-name = "plain"
-version = "0.2.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b4596b6d070b27117e987119b4dac604f3c58cfb0b191112e24771b2faeac1a6"
-
-[[package]]
-name = "platform-info"
-version = "2.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7539aeb3fdd8cb4f6a331307cf71a1039cee75e94e8a71725b9484f4a0d9451a"
-dependencies = [
- "libc",
- "winapi",
-]
-
-[[package]]
-name = "portable-atomic"
-version = "1.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49"
-
-[[package]]
-name = "portable-atomic-util"
-version = "0.2.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "091397be61a01d4be58e7841595bd4bfedb15f1cd54977d79b8271e94ed799a3"
-dependencies = [
- "portable-atomic",
-]
-
-[[package]]
-name = "potential_utf"
-version = "0.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b73949432f5e2a09657003c25bca5e19a0e9c84f8058ca374f49e0ebe605af77"
-dependencies = [
- "serde_core",
- "writeable",
- "zerovec",
-]
-
-[[package]]
-name = "ppv-lite86"
-version = "0.2.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85eae3c4ed2f50dcfe72643da4befc30deadb458a9b590d720cde2f2b1e97da9"
-dependencies = [
- "zerocopy",
-]
-
-[[package]]
-name = "prettyplease"
-version = "0.2.37"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
-dependencies = [
- "proc-macro2",
- "syn",
-]
-
-[[package]]
-name = "proc-macro2"
-version = "1.0.106"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
-dependencies = [
- "unicode-ident",
-]
-
-[[package]]
-name = "procfs"
-version = "0.18.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "25485360a54d6861439d60facef26de713b1e126bf015ec8f98239467a2b82f7"
-dependencies = [
- "bitflags 2.11.0",
- "chrono",
- "flate2",
- "procfs-core",
- "rustix 1.1.4",
-]
-
-[[package]]
-name = "procfs-core"
-version = "0.18.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6401bf7b6af22f78b563665d15a22e9aef27775b79b149a66ca022468a4e405"
-dependencies = [
- "bitflags 2.11.0",
- "chrono",
- "hex",
-]
-
-[[package]]
-name = "quick-xml"
-version = "0.37.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "331e97a1af0bf59823e6eadffe373d7b27f485be8748f71471c662c1f269b7fb"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "quote"
-version = "1.0.45"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
-dependencies = [
- "proc-macro2",
-]
-
-[[package]]
-name = "r-efi"
-version = "5.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
-
-[[package]]
-name = "r-efi"
-version = "6.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8dcc9c7d52a811697d2151c701e0d08956f92b0e24136cf4cf27b57a6a0d9bf"
-
-[[package]]
-name = "radium"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc33ff2d4973d518d823d61aa239014831e521c75da58e3df4840d3f47749d09"
-
-[[package]]
-name = "rand"
-version = "0.8.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "34af8d1a0e25924bc5b7c43c079c942339d8f0a8b57c39049bef581b46327404"
-dependencies = [
- "libc",
- "rand_chacha 0.3.1",
- "rand_core 0.6.4",
-]
-
-[[package]]
-name = "rand"
-version = "0.9.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6db2770f06117d490610c7488547d543617b21bfa07796d7a12f6f1bd53850d1"
-dependencies = [
- "rand_chacha 0.9.0",
- "rand_core 0.9.5",
-]
-
-[[package]]
-name = "rand_chacha"
-version = "0.3.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6c10a63a0fa32252be49d21e7709d4d4baf8d231c2dbce1eaa8141b9b127d88"
-dependencies = [
- "ppv-lite86",
- "rand_core 0.6.4",
-]
-
-[[package]]
-name = "rand_chacha"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d3022b5f1df60f26e1ffddd6c66e8aa15de382ae63b3a0c1bfc0e4d3e3f325cb"
-dependencies = [
- "ppv-lite86",
- "rand_core 0.9.5",
-]
-
-[[package]]
-name = "rand_core"
-version = "0.6.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec0be4795e2f6a28069bec0b5ff3e2ac9bafc99e6a9a7dc3547996c5c816922c"
-dependencies = [
- "getrandom 0.2.17",
-]
-
-[[package]]
-name = "rand_core"
-version = "0.9.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "76afc826de14238e6e8c374ddcc1fa19e374fd8dd986b0d2af0d02377261d83c"
-dependencies = [
- "getrandom 0.3.4",
-]
-
-[[package]]
-name = "ratatui"
-version = "0.29.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eabd94c2f37801c20583fc49dd5cd6b0ba68c716787c2dd6ed18571e1e63117b"
-dependencies = [
- "bitflags 2.11.0",
- "cassowary",
- "compact_str",
- "crossterm 0.28.1",
- "indoc",
- "instability",
- "itertools 0.13.0",
- "lru 0.12.5",
- "paste",
- "strum 0.26.3",
- "unicode-segmentation",
- "unicode-truncate",
- "unicode-width 0.2.0",
-]
-
-[[package]]
-name = "rayon"
-version = "1.11.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "368f01d005bf8fd9b1206fb6fa653e6c4a81ceb1466406b81792d87c5677a58f"
-dependencies = [
- "either",
- "rayon-core",
-]
-
-[[package]]
-name = "rayon-core"
-version = "1.13.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22e18b0f0062d30d4230b2e85ff77fdfe4326feb054b9783a3460d8435c8ab91"
-dependencies = [
- "crossbeam-deque",
- "crossbeam-utils",
-]
-
-[[package]]
-name = "redox_syscall"
-version = "0.5.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
-dependencies = [
- "bitflags 2.11.0",
-]
-
-[[package]]
-name = "redox_syscall"
-version = "0.7.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ce70a74e890531977d37e532c34d45e9055d2409ed08ddba14529471ed0be16"
-dependencies = [
- "bitflags 2.11.0",
-]
-
-[[package]]
-name = "reedline"
-version = "0.43.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b0fcf9f5225169f49622af4027b6d775cf9b6313f9eba16ba9e5ebd9d319a1f0"
-dependencies = [
- "chrono",
- "crossterm 0.28.1",
- "fd-lock",
- "itertools 0.13.0",
- "nu-ansi-term",
- "serde",
- "strip-ansi-escapes",
- "strum 0.26.3",
- "strum_macros 0.26.4",
- "thiserror 2.0.18",
- "unicode-segmentation",
- "unicode-width 0.2.0",
-]
-
-[[package]]
-name = "regex"
-version = "1.12.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e10754a14b9137dd7b1e3e5b0493cc9171fdd105e0ab477f51b72e7f3ac0e276"
-dependencies = [
- "aho-corasick",
- "memchr",
- "regex-automata",
- "regex-syntax",
-]
-
-[[package]]
-name = "regex-automata"
-version = "0.4.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
-dependencies = [
- "aho-corasick",
- "memchr",
- "regex-syntax",
-]
-
-[[package]]
-name = "regex-lite"
-version = "0.1.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cab834c73d247e67f4fae452806d17d3c7501756d98c8808d7c9c7aa7d18f973"
-
-[[package]]
-name = "regex-syntax"
-version = "0.8.10"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc897dd8d9e8bd1ed8cdad82b5966c3e0ecae09fb1907d58efaa013543185d0a"
-
-[[package]]
-name = "rlimit"
-version = "0.10.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7043b63bd0cd1aaa628e476b80e6d4023a3b50eb32789f2728908107bd0c793a"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "rpds"
-version = "1.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9e75f485e819d4d3015e6c0d55d02a4fd3db47c1993d9e603e0361fba2bffb34"
-dependencies = [
- "archery",
-]
-
-[[package]]
-name = "rustc-demangle"
-version = "0.1.27"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b50b8869d9fc858ce7266cce0194bd74df58b9d0e3f6df3a9fc8eb470d95c09d"
-
-[[package]]
-name = "rustc-hash"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d"
-
-[[package]]
-name = "rustc_version"
-version = "0.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cfcb3a22ef46e85b45de6ee7e79d063319ebb6594faafcf1c225ea92ab6e9b92"
-dependencies = [
- "semver",
-]
-
-[[package]]
-name = "rustix"
-version = "0.38.44"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fdb5bc1ae2baa591800df16c9ca78619bf65c0488b41b96ccec5d11220d8c154"
-dependencies = [
- "bitflags 2.11.0",
- "errno",
- "libc",
- "linux-raw-sys 0.4.15",
- "windows-sys 0.59.0",
-]
-
-[[package]]
-name = "rustix"
-version = "1.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
-dependencies = [
- "bitflags 2.11.0",
- "errno",
- "libc",
- "linux-raw-sys 0.12.1",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "rustversion"
-version = "1.0.22"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
-
-[[package]]
-name = "ryu"
-version = "1.0.23"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9774ba4a74de5f7b1c1451ed6cd5285a32eddb5cccb8cc655a4e50009e06477f"
-
-[[package]]
-name = "same-file"
-version = "1.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502"
-dependencies = [
- "winapi-util",
-]
-
-[[package]]
-name = "scopeguard"
-version = "1.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
-
-[[package]]
-name = "secureexec-awk"
-version = "0.1.0"
-dependencies = [
- "awk-rs",
-]
-
-[[package]]
-name = "secureexec-builtins"
-version = "0.1.0"
-dependencies = [
- "libc",
- "wasi-ext",
-]
-
-[[package]]
-name = "secureexec-column"
-version = "0.1.0"
-
-[[package]]
-name = "secureexec-diff"
-version = "0.1.0"
-dependencies = [
- "similar",
-]
-
-[[package]]
-name = "secureexec-du"
-version = "0.1.0"
-
-[[package]]
-name = "secureexec-expr"
-version = "0.1.0"
-dependencies = [
- "regex",
-]
-
-[[package]]
-name = "secureexec-fd"
-version = "0.1.0"
-dependencies = [
- "regex",
-]
-
-[[package]]
-name = "secureexec-file-cmd"
-version = "0.1.0"
-dependencies = [
- "infer",
-]
-
-[[package]]
-name = "secureexec-find"
-version = "0.1.0"
-dependencies = [
- "regex",
-]
-
-[[package]]
-name = "secureexec-git"
-version = "0.1.0"
-dependencies = [
- "flate2",
- "secureexec-wasi-http",
- "sha1",
-]
-
-[[package]]
-name = "secureexec-grep"
-version = "0.1.0"
-dependencies = [
- "regex",
-]
-
-[[package]]
-name = "secureexec-gzip"
-version = "0.1.0"
-dependencies = [
- "flate2",
-]
-
-[[package]]
-name = "secureexec-jq"
-version = "0.1.0"
-dependencies = [
- "jaq-core",
- "jaq-json",
- "jaq-std",
- "serde_json",
-]
-
-[[package]]
-name = "secureexec-rev"
-version = "0.1.0"
-
-[[package]]
-name = "secureexec-shims"
-version = "0.1.0"
-dependencies = [
- "wasi-ext",
-]
-
-[[package]]
-name = "secureexec-strings-cmd"
-version = "0.1.0"
-
-[[package]]
-name = "secureexec-stubs"
-version = "0.1.0"
-
-[[package]]
-name = "secureexec-tar"
-version = "0.1.0"
-dependencies = [
- "flate2",
- "tar",
-]
-
-[[package]]
-name = "secureexec-tree"
-version = "0.1.0"
-
-[[package]]
-name = "secureexec-wasi-http"
-version = "0.1.0"
-dependencies = [
- "wasi-ext",
-]
-
-[[package]]
-name = "secureexec-wasi-pty"
-version = "0.1.0"
-dependencies = [
- "secureexec-wasi-spawn",
- "wasi-ext",
-]
-
-[[package]]
-name = "secureexec-wasi-spawn"
-version = "0.1.0"
-dependencies = [
- "wasi",
- "wasi-ext",
-]
-
-[[package]]
-name = "secureexec-yq"
-version = "0.1.0"
-dependencies = [
- "jaq-core",
- "jaq-json",
- "jaq-std",
- "quick-xml",
- "serde_json",
- "serde_yaml",
- "toml 0.8.23",
-]
-
-[[package]]
-name = "sed"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f5a00cdbffacbccf02decb7577da5e298c091bdee492a2a1b87a3d8b0cc5b7c5"
-dependencies = [
- "clap",
- "fancy-regex 0.17.0",
- "memchr",
- "memmap2",
- "once_cell",
- "phf 0.13.1",
- "phf_codegen 0.13.1",
- "regex",
- "tempfile",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "self_cell"
-version = "1.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b12e76d157a900eb52e81bc6e9f3069344290341720e9178cde2407113ac8d89"
-
-[[package]]
-name = "semver"
-version = "1.0.27"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d767eb0aabc880b29956c35734170f26ed551a859dbd361d140cdbeca61ab1e2"
-
-[[package]]
-name = "serde"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
-dependencies = [
- "serde_core",
- "serde_derive",
-]
-
-[[package]]
-name = "serde_core"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
-dependencies = [
- "serde_derive",
-]
-
-[[package]]
-name = "serde_derive"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "serde_json"
-version = "1.0.149"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
-dependencies = [
- "itoa",
- "memchr",
- "serde",
- "serde_core",
- "zmij",
-]
-
-[[package]]
-name = "serde_spanned"
-version = "0.6.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bf41e0cfaf7226dca15e8197172c295a782857fcb97fad1808a166870dee75a3"
-dependencies = [
- "serde",
-]
-
-[[package]]
-name = "serde_spanned"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8bbf91e5a4d6315eee45e704372590b30e260ee83af6639d64557f51b067776"
-dependencies = [
- "serde_core",
-]
-
-[[package]]
-name = "serde_yaml"
-version = "0.9.34+deprecated"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6a8b1a1a2ebf674015cc02edccce75287f1a0130d394307b36743c2f5d504b47"
-dependencies = [
- "indexmap",
- "itoa",
- "ryu",
- "serde",
- "unsafe-libyaml",
-]
-
-[[package]]
-name = "sha1"
-version = "0.10.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba"
-dependencies = [
- "cfg-if",
- "cpufeatures",
- "digest",
-]
-
-[[package]]
-name = "sha2"
-version = "0.10.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
-dependencies = [
- "cfg-if",
- "cpufeatures",
- "digest",
-]
-
-[[package]]
-name = "sha3"
-version = "0.10.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "75872d278a8f37ef87fa0ddbda7802605cb18344497949862c0d4dcb291eba60"
-dependencies = [
- "digest",
- "keccak",
-]
-
-[[package]]
-name = "sharded-slab"
-version = "0.1.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f40ca3c46823713e0d4209592e8d6e826aa57e928f09752619fc696c499637f6"
-dependencies = [
- "lazy_static",
-]
-
-[[package]]
-name = "shlex"
-version = "1.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
-
-[[package]]
-name = "signal-hook"
-version = "0.3.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d881a16cf4426aa584979d30bd82cb33429027e42122b169753d6ef1085ed6e2"
-dependencies = [
- "libc",
- "signal-hook-registry",
-]
-
-[[package]]
-name = "signal-hook-mio"
-version = "0.2.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b75a19a7a740b25bc7944bdee6172368f988763b744e3d4dfe753f6b4ece40cc"
-dependencies = [
- "libc",
- "mio",
- "signal-hook",
-]
-
-[[package]]
-name = "signal-hook-registry"
-version = "1.4.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c4db69cba1110affc0e9f7bcd48bbf87b3f4fc7c61fc9155afd4c469eb3d6c1b"
-dependencies = [
- "errno",
- "libc",
-]
-
-[[package]]
-name = "simd-adler32"
-version = "0.3.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e320a6c5ad31d271ad523dcf3ad13e2767ad8b1cb8f047f75a8aeaf8da139da2"
-
-[[package]]
-name = "similar"
-version = "2.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bbbb5d9659141646ae647b42fe094daf6c6192d1620870b449d9557f748b2daa"
-
-[[package]]
-name = "siphasher"
-version = "1.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b2aa850e253778c88a04c3d7323b043aeda9d3e30d5971937c1855769763678e"
-
-[[package]]
-name = "slab"
-version = "0.4.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0c790de23124f9ab44544d7ac05d60440adc586479ce501c1d6d7da3cd8c9cf5"
-
-[[package]]
-name = "sm3"
-version = "0.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebb9a3b702d0a7e33bc4d85a14456633d2b165c2ad839c5fd9a8417c1ab15860"
-dependencies = [
- "digest",
-]
-
-[[package]]
-name = "smallvec"
-version = "1.15.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
-
-[[package]]
-name = "spin"
-version = "0.10.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d5fe4ccb98d9c292d56fec89a5e07da7fc4cf0dc11e156b41793132775d3e591"
-
-[[package]]
-name = "stable_deref_trait"
-version = "1.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
-
-[[package]]
-name = "static_assertions"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a2eb9349b6444b326872e140eb1cf5e7c522154d69e7a0ffb0fb81c06b37543f"
-
-[[package]]
-name = "string-interner"
-version = "0.19.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "23de088478b31c349c9ba67816fa55d9355232d63c3afea8bf513e31f0f1d2c0"
-dependencies = [
- "hashbrown 0.15.5",
- "serde",
-]
-
-[[package]]
-name = "strip-ansi-escapes"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a8f8038e7e7969abb3f1b7c2a811225e9296da208539e0f79c5251d6cac0025"
-dependencies = [
- "vte",
-]
-
-[[package]]
-name = "strsim"
-version = "0.11.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
-
-[[package]]
-name = "strum"
-version = "0.26.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8fec0f0aef304996cf250b31b5a10dee7980c85da9d759361292b8bca5a18f06"
-dependencies = [
- "strum_macros 0.26.4",
-]
-
-[[package]]
-name = "strum"
-version = "0.27.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "af23d6f6c1a224baef9d3f61e287d2761385a5b88fdab4eb4c6f11aeb54c4bcf"
-
-[[package]]
-name = "strum_macros"
-version = "0.26.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4c6bee85a5a24955dc440386795aa378cd9cf82acd5f764469152d2270e581be"
-dependencies = [
- "heck",
- "proc-macro2",
- "quote",
- "rustversion",
- "syn",
-]
-
-[[package]]
-name = "strum_macros"
-version = "0.27.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7695ce3845ea4b33927c055a39dc438a45b059f7c1b3d91d38d10355fb8cbca7"
-dependencies = [
- "heck",
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "syn"
-version = "2.0.117"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e665b8803e7b1d2a727f4023456bbbbe74da67099c585258af0ad9c5013b9b99"
-dependencies = [
- "proc-macro2",
- "quote",
- "unicode-ident",
-]
-
-[[package]]
-name = "synstructure"
-version = "0.13.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "sysinfo"
-version = "0.37.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "16607d5caffd1c07ce073528f9ed972d88db15dd44023fa57142963be3feb11f"
-dependencies = [
- "libc",
- "memchr",
- "ntapi",
- "objc2-core-foundation",
- "objc2-io-kit",
- "windows 0.61.3",
-]
-
-[[package]]
-name = "tap"
-version = "1.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "55937e1799185b12863d447f42597ed69d9928686b8d88a1df17376a097d8369"
-
-[[package]]
-name = "tar"
-version = "0.4.44"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1d863878d212c87a19c1a610eb53bb01fe12951c0501cf5a0d65f724914a667a"
-dependencies = [
- "filetime",
- "libc",
- "xattr",
-]
-
-[[package]]
-name = "tempfile"
-version = "3.27.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32497e9a4c7b38532efcdebeef879707aa9f794296a4f0244f6f69e9bc8574bd"
-dependencies = [
- "fastrand",
- "getrandom 0.4.2",
- "once_cell",
- "rustix 1.1.4",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "terminal_size"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "60b8cb979cb11c32ce1603f8137b22262a9d131aaa5c37b5678025f22b8becd0"
-dependencies = [
- "rustix 1.1.4",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "terminfo"
-version = "0.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d4ea810f0692f9f51b382fff5893887bb4580f5fa246fde546e0b13e7fcee662"
-dependencies = [
- "fnv",
- "nom 7.1.3",
- "phf 0.11.3",
- "phf_codegen 0.11.3",
-]
-
-[[package]]
-name = "thiserror"
-version = "1.0.69"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
-dependencies = [
- "thiserror-impl 1.0.69",
-]
-
-[[package]]
-name = "thiserror"
-version = "2.0.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
-dependencies = [
- "thiserror-impl 2.0.18",
-]
-
-[[package]]
-name = "thiserror-impl"
-version = "1.0.69"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "thiserror-impl"
-version = "2.0.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "thread_local"
-version = "1.1.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f60246a4944f24f6e018aa17cdeffb7818b76356965d03b07d6a9886e8962185"
-dependencies = [
- "cfg-if",
-]
-
-[[package]]
-name = "tinystr"
-version = "0.8.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "42d3e9c45c09de15d06dd8acf5f4e0e399e85927b7f00711024eb7ae10fa4869"
-dependencies = [
- "displaydoc",
- "serde_core",
- "zerovec",
-]
-
-[[package]]
-name = "tokio"
-version = "1.50.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "27ad5e34374e03cfffefc301becb44e9dc3c17584f414349ebe29ed26661822d"
-dependencies = [
- "bytes",
- "libc",
- "mio",
- "pin-project-lite",
- "signal-hook-registry",
- "tokio-macros",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "tokio-macros"
-version = "2.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c55a2eff8b69ce66c84f85e1da1c233edc36ceb85a2058d11b0d6a3c7e7569c"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "toml"
-version = "0.8.23"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dc1beb996b9d83529a9e75c17a1686767d148d70663143c7854d8b4a09ced362"
-dependencies = [
- "serde",
- "serde_spanned 0.6.9",
- "toml_datetime 0.6.11",
- "toml_edit",
-]
-
-[[package]]
-name = "toml"
-version = "0.9.12+spec-1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cf92845e79fc2e2def6a5d828f0801e29a2f8acc037becc5ab08595c7d5e9863"
-dependencies = [
- "serde_core",
- "serde_spanned 1.0.4",
- "toml_datetime 0.7.5+spec-1.1.0",
- "toml_writer",
-]
-
-[[package]]
-name = "toml_datetime"
-version = "0.6.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22cddaf88f4fbc13c51aebbf5f8eceb5c7c5a9da2ac40a13519eb5b0a0e8f11c"
-dependencies = [
- "serde",
-]
-
-[[package]]
-name = "toml_datetime"
-version = "0.7.5+spec-1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347"
-dependencies = [
- "serde_core",
-]
-
-[[package]]
-name = "toml_edit"
-version = "0.22.27"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41fe8c660ae4257887cf66394862d21dbca4a6ddd26f04a3560410406a2f819a"
-dependencies = [
- "indexmap",
- "serde",
- "serde_spanned 0.6.9",
- "toml_datetime 0.6.11",
- "toml_write",
- "winnow",
-]
-
-[[package]]
-name = "toml_write"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d99f8c9a7727884afe522e9bd5edbfc91a3312b36a77b5fb8926e4c31a41801"
-
-[[package]]
-name = "toml_writer"
-version = "1.0.6+spec-1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ab16f14aed21ee8bfd8ec22513f7287cd4a91aa92e44edfe2c17ddd004e92607"
-
-[[package]]
-name = "tracing"
-version = "0.1.44"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "63e71662fa4b2a2c3a26f570f037eb95bb1f85397f3cd8076caed2f026a6d100"
-dependencies = [
- "pin-project-lite",
- "tracing-attributes",
- "tracing-core",
-]
-
-[[package]]
-name = "tracing-attributes"
-version = "0.1.31"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7490cfa5ec963746568740651ac6781f701c9c5ea257c58e057f3ba8cf69e8da"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "tracing-core"
-version = "0.1.36"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "db97caf9d906fbde555dd62fa95ddba9eecfd14cb388e4f491a66d74cd5fb79a"
-dependencies = [
- "once_cell",
- "valuable",
-]
-
-[[package]]
-name = "tracing-log"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ee855f1f400bd0e5c02d150ae5de3840039a3f54b025156404e34c23c03f47c3"
-dependencies = [
- "log",
- "once_cell",
- "tracing-core",
-]
-
-[[package]]
-name = "tracing-subscriber"
-version = "0.3.23"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cb7f578e5945fb242538965c2d0b04418d38ec25c79d160cd279bf0731c8d319"
-dependencies = [
- "nu-ansi-term",
- "sharded-slab",
- "smallvec",
- "thread_local",
- "tracing-core",
- "tracing-log",
-]
-
-[[package]]
-name = "triomphe"
-version = "0.1.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dd69c5aa8f924c7519d6372789a74eac5b94fb0f8fcf0d4a97eb0bfc3e785f39"
-
-[[package]]
-name = "type-map"
-version = "0.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cb30dbbd9036155e74adad6812e9898d03ec374946234fbcebd5dfc7b9187b90"
-dependencies = [
- "rustc-hash",
-]
-
-[[package]]
-name = "typed-arena"
-version = "2.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6af6ae20167a9ece4bcb41af5b80f8a1f1df981f6391189ce00fd257af04126a"
-
-[[package]]
-name = "typenum"
-version = "1.19.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb"
-
-[[package]]
-name = "unic-langid"
-version = "0.9.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a28ba52c9b05311f4f6e62d5d9d46f094bd6e84cb8df7b3ef952748d752a7d05"
-dependencies = [
- "unic-langid-impl",
-]
-
-[[package]]
-name = "unic-langid-impl"
-version = "0.9.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dce1bf08044d4b7a94028c93786f8566047edc11110595914de93362559bc658"
-dependencies = [
- "tinystr",
-]
-
-[[package]]
-name = "unicode-ident"
-version = "1.0.24"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6e4313cd5fcd3dad5cafa179702e2b244f760991f45397d14d4ebf38247da75"
-
-[[package]]
-name = "unicode-segmentation"
-version = "1.12.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f6ccf251212114b54433ec949fd6a7841275f9ada20dddd2f29e9ceea4501493"
-
-[[package]]
-name = "unicode-truncate"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b3644627a5af5fa321c95b9b235a72fd24cd29c648c2c379431e6628655627bf"
-dependencies = [
- "itertools 0.13.0",
- "unicode-segmentation",
- "unicode-width 0.1.14",
-]
-
-[[package]]
-name = "unicode-width"
-version = "0.1.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7dd6e30e90baa6f72411720665d41d89b9a3d039dc45b8faea1ddd07f617f6af"
-
-[[package]]
-name = "unicode-width"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fc81956842c57dac11422a97c3b8195a1ff727f06e85c84ed2e8aa277c9a0fd"
-
-[[package]]
-name = "unicode-xid"
-version = "0.2.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebc1c04c71510c7f702b52b7c350734c9ff1295c464a03335b00bb84fc54f853"
-
-[[package]]
-name = "unit-prefix"
-version = "0.5.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "81e544489bf3d8ef66c953931f56617f423cd4b5494be343d9b9d3dda037b9a3"
-
-[[package]]
-name = "unsafe-libyaml"
-version = "0.2.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "673aac59facbab8a9007c7f6108d11f63b603f7cabff99fabf650fea5c32b861"
-
-[[package]]
-name = "urlencoding"
-version = "2.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "daf8dba3b7eb870caf1ddeed7bc9d2a049f3cfdfae7cb521b087cc33ae4c49da"
-
-[[package]]
-name = "utf16_iter"
-version = "1.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c8232dd3cdaed5356e0f716d285e4b40b932ac434100fe9b7e0e8e935b9e6246"
-
-[[package]]
-name = "utf8-chars"
-version = "3.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebe49e006d6df172d7f14794568a90fe41e05a1fa9e03dc276fa6da4bb747ec3"
-dependencies = [
- "arrayvec",
-]
-
-[[package]]
-name = "utf8_iter"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
-
-[[package]]
-name = "utf8parse"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
-
-[[package]]
-name = "uu_arch"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f789358d2df8eb5933daa0d6ae53b79334269360d33cdd7079032d554a7e982c"
-dependencies = [
- "clap",
- "fluent",
- "platform-info",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_b2sum"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "272b257659f523df2788d94866f95ea196188975a8b267a9ca0d566292a3a772"
-dependencies = [
- "clap",
- "fluent",
- "uu_checksum_common",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_base32"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1db368d94af37dcd4d9b91d0f57f8ad2088af770be12b0114829b230762c4274"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_base64"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "17b4eef6f62da9204fd7be919be88ef0c8271e22483415bf284a5efc0f173366"
-dependencies = [
- "clap",
- "fluent",
- "uu_base32",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_basename"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fdedbc10b8ef9c97415bfa80b1f25f3775420080dd59341bd39505fbbe797c48"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_basenc"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "06a5c56ce70e8783820401ed2ec4468a2a235f58fb2d90f5c163f14e7a94eacc"
-dependencies = [
- "clap",
- "fluent",
- "uu_base32",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_cat"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "043b7b9873244298be72a26057d1d85a0129497817c304ff7d1a2a1a0b27b335"
-dependencies = [
- "clap",
- "fluent",
- "memchr",
- "nix 0.30.1",
- "thiserror 2.0.18",
- "uucore 0.7.0",
- "winapi-util",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "uu_checksum_common"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "485e68c04134bfda144c9c79073e190586a105713b45971692be83775a9ef5e8"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_chmod"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a3a5d93a175bf8993f2e0437228e7b736658f10d642dd7476397259cc6ed6af3"
-dependencies = [
- "clap",
- "fluent",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_cksum"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "30ecef1133f3970c22aad791c34d6fd70d24f10d25082ff8fa4493d4158ae1a6"
-dependencies = [
- "clap",
- "fluent",
- "uu_checksum_common",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_comm"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4cf70eb4d7bc82aa7ce6be80087e85d9dfa2d431e1cad2ba3080dd362d2bf717"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_cp"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ffd199017f3fcfc2d266fb9d76385d510665393c400163b7c9cfd6f622e313b6"
-dependencies = [
- "clap",
- "filetime",
- "fluent",
- "indicatif",
- "libc",
- "nix 0.30.1",
- "thiserror 2.0.18",
- "uucore 0.7.0",
- "walkdir",
-]
-
-[[package]]
-name = "uu_cut"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ba96ac3631f81c4beef269d8eaba79b9bf2f72d97bdbd6ddadbf0e787327c63a"
-dependencies = [
- "bstr",
- "clap",
- "fluent",
- "memchr",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_date"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f41472a2321637ae96a126708210fc4c3603b1684e810af244df4a736f86515"
-dependencies = [
- "clap",
- "fluent",
- "icu_calendar",
- "icu_locale",
- "jiff",
- "jiff-icu",
- "nix 0.30.1",
- "parse_datetime",
- "regex",
- "uucore 0.7.0",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "uu_dd"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e14a3ee96607b62ca4d65807be7ec1c2b5782b36d22fe7998307a0d08b85d94"
-dependencies = [
- "clap",
- "fluent",
- "gcd",
- "libc",
- "nix 0.30.1",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_dircolors"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "391283cfef2dd209cffd699ba5ea7bd84cdba817105acd66bb020262ca59660a"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_dirname"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8954430cc6fc6d426905eea23c4aa13af3eb5260311ff712d698e208546b831c"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_echo"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a77f4d0beb31487fe8f4b9202ffc118b9561dda1341e3dd6d3bb52991bfbd58d"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_expand"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9ca8a49c55b0396ae0a5326704130e9706fc09acd6180d795bff1154b60db708"
-dependencies = [
- "clap",
- "fluent",
- "thiserror 2.0.18",
- "unicode-width 0.2.0",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_factor"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "520da1c9c94bb354ac1ee753eb8fb4f81d0512ec8c2405d21a6ff6f07c2fe1b3"
-dependencies = [
- "clap",
- "fluent",
- "num-bigint",
- "num-prime",
- "num-traits",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_false"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e3a963cd94c29de3678273df72ca60857f6ffe6af5a3ede672cb4bc79a11ef22"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_fmt"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e133acad1273c60086d190ac76c4caaf6f694b4e2b85276124307d9e639b442c"
-dependencies = [
- "clap",
- "fluent",
- "thiserror 2.0.18",
- "unicode-width 0.2.0",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_fold"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8098e158f38287fe1144c3e7337856c6ac6e6f45c9924e75592d45e78dc467e6"
-dependencies = [
- "clap",
- "fluent",
- "unicode-width 0.2.0",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_head"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d886e39ddc1a462479b0cd6fcdc7b1b2d2d086db53d65149c1cfe69b74b6baa"
-dependencies = [
- "clap",
- "fluent",
- "memchr",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_join"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "57ae9afe4a6a602d1fb3752f63a55bea0957403b0fc3c244184ba6f9c1a65932"
-dependencies = [
- "clap",
- "fluent",
- "memchr",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_link"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "64a7c36d0be50e550760b5d6d10a4735d8f5ca94fc8a32f5e0ca33af3fbc7e3a"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_ln"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "99cb878e1b6b498aeb55704caa2f764ac0dd61347fd3efc6eff0bda6bf0b9536"
-dependencies = [
- "clap",
- "fluent",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_logname"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "be8dd72043a0b5032741234a0854bf1ac01b8f7a47d7a20cae6e9649d803d408"
-dependencies = [
- "clap",
- "fluent",
- "libc",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_ls"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8dc54d6f54ed818aca41490fa92eaf094b5e6ff613257245f8d9c6fe1b0a2224"
-dependencies = [
- "ansi-width",
- "clap",
- "fluent",
- "glob",
- "hostname",
- "lscolors",
- "rustc-hash",
- "terminal_size",
- "thiserror 2.0.18",
- "uucore 0.7.0",
- "uutils_term_grid",
-]
-
-[[package]]
-name = "uu_md5sum"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "db8003075b73ee23011de0618d2f84da765c37bd0be34e301aeb70dd7f0996bd"
-dependencies = [
- "clap",
- "fluent",
- "uu_checksum_common",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_mkdir"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d8cdba0fed9c1c12d0a0c954e447cc75a50b466b001f1a814921ee702fafff7a"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_mktemp"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5b7af3550fa4c926d8fde66932421d904cbe1102a7031947b456ad0f90f81569"
-dependencies = [
- "clap",
- "fluent",
- "rand 0.9.2",
- "tempfile",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_mv"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f678a9ce279116c4d1aa3dc460be904069336adc63d9130acdb543568bee22a6"
-dependencies = [
- "clap",
- "fluent",
- "fs_extra",
- "indicatif",
- "libc",
- "rustc-hash",
- "thiserror 2.0.18",
- "uucore 0.7.0",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "uu_nl"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "823a2102789b4fc5227ae76c15f8b57df0534a9aff1ac19bf1961303bf663d48"
-dependencies = [
- "clap",
- "fluent",
- "itoa",
- "regex",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_nproc"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cceeca12036b18857d4c773373419185ffa057b32b0c87a447a1861a06c5ddc3"
-dependencies = [
- "clap",
- "fluent",
- "libc",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_numfmt"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4ac350590aecae7aa234270b48380013188786969fe0c17824b542d3ce904baf"
-dependencies = [
- "clap",
- "fluent",
- "memchr",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_od"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c5b9c0c5345041b6734f89e7642995f479c1740c7c91075f0602e042ec55b268"
-dependencies = [
- "byteorder",
- "clap",
- "fluent",
- "half",
- "libc",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_paste"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cbc4e66bb50e347e68b76aa3703064ba1953af2ca21a67bcee15d5a6e1f9aa4c"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_pathchk"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "013e2313eafe2d854e271c00b2a7822042e03f8d52493dd7ea70260c1eca37c4"
-dependencies = [
- "clap",
- "fluent",
- "libc",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_printenv"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c733e8c3c4ff851d86733b2c79968a9b30ae1b2453d904b357d0a0588f4c5c68"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_printf"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2079ccf2689495f99ffd0aafdcaf81753d73b710fbd80884487f71715635bf53"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_ptx"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "268dc2ca3624228b9929fa60c843d54affa9024586e7f553a1484d029f6e9d99"
-dependencies = [
- "clap",
- "fluent",
- "regex",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_pwd"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "58b6e26cf64171f8825fccbade68bf03de15924955cff36c5d9a2574a6ceecd3"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_readlink"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "695c0287310f05d6dfedae9a0f62139742ad19b3f6d57e2d21ab93fe56ca374d"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_realpath"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d65bb98033c204f1b6a985564b4d58eaa35b0e5855c996642823c21b6f1448c9"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_rm"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cb65631fc1a8e8834bd30ac4ad8ee337c6d5a46c15254dfdbdfaea96f7290fa1"
-dependencies = [
- "clap",
- "fluent",
- "indicatif",
- "libc",
- "thiserror 2.0.18",
- "uucore 0.7.0",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "uu_rmdir"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7462a7b03e28881b5c8129dc576524fe42fcb7e8de9a30e16bf90f25b64a095f"
-dependencies = [
- "clap",
- "fluent",
- "libc",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_seq"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "689227681b5be62ece851a5b3d28b8d175feb18624a4b24d1bc4c4ce9c760ea4"
-dependencies = [
- "bigdecimal",
- "clap",
- "fluent",
- "num-bigint",
- "num-traits",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_sha1sum"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "426f471bcdf58779e0125a5231421330982533d354ac13291677a8a3a5d9b765"
-dependencies = [
- "clap",
- "fluent",
- "uu_checksum_common",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_sha224sum"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b353936ed3b67b8654169161a2bc84ba29c72bedbd95dc504a23f69016fa9ea1"
-dependencies = [
- "clap",
- "fluent",
- "uu_checksum_common",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_sha256sum"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "071ec05bd12da342a70e1d094b5b210453e5e028041058722db6769d06d5719a"
-dependencies = [
- "clap",
- "fluent",
- "uu_checksum_common",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_sha384sum"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bfc23178584a12c7cd7266c77c9a187ebfff4fd761738d9c838203bb17020f1f"
-dependencies = [
- "clap",
- "fluent",
- "uu_checksum_common",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_sha512sum"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "83c7719ee5dfdd58be739b87add1dfe8026114303b83b3ae24fb099824ae5fda"
-dependencies = [
- "clap",
- "fluent",
- "uu_checksum_common",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_shred"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "33090888bfc315a756f028ba16251ed34dca810e708435eae54a5064e3d9f3fb"
-dependencies = [
- "clap",
- "fluent",
- "libc",
- "rand 0.9.2",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_shuf"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6c2e5663694fde672961884c94c8afd3cd5859969878594eda6a25059621cd97"
-dependencies = [
- "clap",
- "fluent",
- "itoa",
- "rand 0.9.2",
- "rand_chacha 0.9.0",
- "rustc-hash",
- "sha3",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_sort"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cb61d4619d85c291b9fa5c4cf057c8da764efe0541f4ff888c8f2e603294a965"
-dependencies = [
- "bigdecimal",
- "binary-heap-plus",
- "clap",
- "compare",
- "ctrlc",
- "fluent",
- "foldhash 0.2.0",
- "itertools 0.14.0",
- "memchr",
- "nix 0.30.1",
- "rand 0.9.2",
- "rayon",
- "self_cell",
- "tempfile",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_split"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7514e1430433a581b7317685a90858d34fdbdc726d778ae00a0a9541123eda76"
-dependencies = [
- "clap",
- "fluent",
- "memchr",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_stat"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bef4ee0943facf79c267e2ff7fe8869f15b76d9ce4709d2c8117db788bc851c6"
-dependencies = [
- "clap",
- "fluent",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_sum"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "31a443c458befede734a5e1cd76768bef727d568d4290c651a82c6fc8217f201"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_tac"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ec0075181c425cfdf7b2e3400cdfa90d419aa9f4723163210b94d85e2ea47d25"
-dependencies = [
- "clap",
- "fluent",
- "libc",
- "memchr",
- "memmap2",
- "regex",
- "tempfile",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_tail"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "88cb366f24aecb51aa9b03c2ae8b40538aa5081351822a6dfec883f95cc744d3"
-dependencies = [
- "clap",
- "fluent",
- "libc",
- "memchr",
- "nix 0.30.1",
- "notify",
- "same-file",
- "uucore 0.7.0",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "uu_tee"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a1a8d33dd843a8e5fb37018390edf904678767a995308514bd3f64fe7d01bb4f"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_touch"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "56f1f61215638f2b85f03008f94bdb26b5071579ee8b4ab1d0ff74c3e12e3acd"
-dependencies = [
- "clap",
- "filetime",
- "fluent",
- "jiff",
- "nix 0.30.1",
- "parse_datetime",
- "thiserror 2.0.18",
- "uucore 0.7.0",
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "uu_tr"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b3028c44f9e14787a07e96d7365f645d18ab060126515a67857150f57bb96c45"
-dependencies = [
- "bytecount",
- "clap",
- "fluent",
- "nom 8.0.0",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_true"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dfec486c633bf98e354373f7d0ec26910e51376ddfeea29b2fd8a2d2f3d96736"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_truncate"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c5790fe8bc07089c2e38e2965afa16c0beca87c6df7c655251e15a5050c980eb"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_tsort"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "29fc5c3773a819f847867c5c964ddfa7fd48b372b00490f611aa0629722d7ad2"
-dependencies = [
- "clap",
- "fluent",
- "nix 0.30.1",
- "rustc-hash",
- "string-interner",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_uname"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8650f019d2addbb56c316bd53058d5a0165e573e2ae46636df9f36e1719b3280"
-dependencies = [
- "clap",
- "fluent",
- "platform-info",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_unexpand"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "24f324b11a5f7d27f0f0cceb255fc755748b83dba844bd0ff4c6ddbbbc93c3d0"
-dependencies = [
- "clap",
- "fluent",
- "thiserror 2.0.18",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_uniq"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d6c3864b9912a51bab19445351f8def44fb30ccf1a87be02d68ae185c264b217"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_unlink"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "05bd002b6736800fd985546043667a22264781526dcbd56a623a237f9391a91a"
-dependencies = [
- "clap",
- "fluent",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_wc"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d606da8f0184e8450502430bb3434419b2b66d66d315d5d58cda3d2190af1764"
-dependencies = [
- "bytecount",
- "clap",
- "fluent",
- "libc",
- "nix 0.30.1",
- "thiserror 2.0.18",
- "unicode-width 0.2.0",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uu_yes"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "21740c358b89a807706ddb273570ac7853a25e59bf175d3d6f7e77f67d1efdc1"
-dependencies = [
- "clap",
- "fluent",
- "itertools 0.14.0",
- "uucore 0.7.0",
-]
-
-[[package]]
-name = "uucore"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2003164a38a7f39da1de103a70fa66b745f572f0045ec261481539516c0a8a0e"
-dependencies = [
- "bigdecimal",
- "bstr",
- "clap",
- "fluent",
- "fluent-bundle",
- "fluent-syntax",
- "glob",
- "icu_locale",
- "itertools 0.14.0",
- "nix 0.30.1",
- "num-traits",
- "number_prefix",
- "os_display",
- "phf 0.13.1",
- "procfs",
- "thiserror 2.0.18",
- "unic-langid",
- "uucore_procs 0.4.0",
- "wild",
-]
-
-[[package]]
-name = "uucore"
-version = "0.7.0"
-dependencies = [
- "base64-simd",
- "bigdecimal",
- "blake2b_simd",
- "blake3",
- "bstr",
- "clap",
- "crc-fast",
- "data-encoding",
- "data-encoding-macro",
- "digest",
- "dunce",
- "fluent",
- "fluent-bundle",
- "fluent-syntax",
- "glob",
- "hex",
- "icu_calendar",
- "icu_collator",
- "icu_datetime",
- "icu_decimal",
- "icu_locale",
- "icu_provider",
- "itertools 0.14.0",
- "jiff",
- "jiff-icu",
- "libc",
- "md-5",
- "memchr",
- "nix 0.30.1",
- "num-traits",
- "os_display",
- "procfs",
- "rustc-hash",
- "sha1",
- "sha2",
- "sha3",
- "sm3",
- "thiserror 2.0.18",
- "unic-langid",
- "unit-prefix",
- "uucore_procs 0.7.0",
- "walkdir",
- "wild",
- "winapi-util",
- "windows-sys 0.61.2",
- "xattr",
- "z85",
-]
-
-[[package]]
-name = "uucore_procs"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c76f0308f7810d915246a39748e7f5d64e43e6bb9d6c8107224f9d741aefc375"
-dependencies = [
- "proc-macro2",
- "quote",
-]
-
-[[package]]
-name = "uucore_procs"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0f63e2d5083ff0983193a33e2d57fd271c7e3e3e7df8e46e8f471865647b2cbc"
-dependencies = [
- "proc-macro2",
- "quote",
-]
-
-[[package]]
-name = "uuid"
-version = "1.22.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a68d3c8f01c0cfa54a75291d83601161799e4a89a39e0929f4b0354d88757a37"
-dependencies = [
- "getrandom 0.4.2",
- "js-sys",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "uutils_term_grid"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fcba141ce511bad08e80b43f02976571072e1ff4286f7d628943efbd277c6361"
-dependencies = [
- "ansi-width",
-]
-
-[[package]]
-name = "uzers"
-version = "0.12.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0b8275fb1afee25b4111d2dc8b5c505dbbc4afd0b990cb96deb2d88bff8be18d"
-dependencies = [
- "libc",
- "log",
-]
-
-[[package]]
-name = "valuable"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ba73ea9cf16a25df0c8caa16c51acb937d5712a8429db78a3ee29d5dcacd3a65"
-
-[[package]]
-name = "version_check"
-version = "0.9.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
-
-[[package]]
-name = "vsimd"
-version = "0.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c3082ca00d5a5ef149bb8b555a72ae84c9c59f7250f013ac822ac2e49b19c64"
-
-[[package]]
-name = "vte"
-version = "0.14.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "231fdcd7ef3037e8330d8e17e61011a2c244126acc0a982f4040ac3f9f0bc077"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "walkdir"
-version = "2.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
-dependencies = [
- "same-file",
- "winapi-util",
-]
-
-[[package]]
-name = "wasi"
-version = "0.11.1+wasi-snapshot-preview1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
-
-[[package]]
-name = "wasi-ext"
-version = "0.1.0"
-
-[[package]]
-name = "wasip2"
-version = "1.0.2+wasi-0.2.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9517f9239f02c069db75e65f174b3da828fe5f5b945c4dd26bd25d89c03ebcf5"
-dependencies = [
- "wit-bindgen",
-]
-
-[[package]]
-name = "wasip3"
-version = "0.4.0+wasi-0.3.0-rc-2026-01-06"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5428f8bf88ea5ddc08faddef2ac4a67e390b88186c703ce6dbd955e1c145aca5"
-dependencies = [
- "wit-bindgen",
-]
-
-[[package]]
-name = "wasite"
-version = "0.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b8dad83b4f25e74f184f64c43b150b91efe7647395b42289f38e50566d82855b"
-
-[[package]]
-name = "wasm-bindgen"
-version = "0.2.114"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6532f9a5c1ece3798cb1c2cfdba640b9b3ba884f5db45973a6f442510a87d38e"
-dependencies = [
- "cfg-if",
- "once_cell",
- "rustversion",
- "wasm-bindgen-macro",
- "wasm-bindgen-shared",
-]
-
-[[package]]
-name = "wasm-bindgen-macro"
-version = "0.2.114"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "18a2d50fcf105fb33bb15f00e7a77b772945a2ee45dcf454961fd843e74c18e6"
-dependencies = [
- "quote",
- "wasm-bindgen-macro-support",
-]
-
-[[package]]
-name = "wasm-bindgen-macro-support"
-version = "0.2.114"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "03ce4caeaac547cdf713d280eda22a730824dd11e6b8c3ca9e42247b25c631e3"
-dependencies = [
- "bumpalo",
- "proc-macro2",
- "quote",
- "syn",
- "wasm-bindgen-shared",
-]
-
-[[package]]
-name = "wasm-bindgen-shared"
-version = "0.2.114"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "75a326b8c223ee17883a4251907455a2431acc2791c98c26279376490c378c16"
-dependencies = [
- "unicode-ident",
-]
-
-[[package]]
-name = "wasm-encoder"
-version = "0.244.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "990065f2fe63003fe337b932cfb5e3b80e0b4d0f5ff650e6985b1048f62c8319"
-dependencies = [
- "leb128fmt",
- "wasmparser",
-]
-
-[[package]]
-name = "wasm-metadata"
-version = "0.244.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bb0e353e6a2fbdc176932bbaab493762eb1255a7900fe0fea1a2f96c296cc909"
-dependencies = [
- "anyhow",
- "indexmap",
- "wasm-encoder",
- "wasmparser",
-]
-
-[[package]]
-name = "wasmparser"
-version = "0.244.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "47b807c72e1bac69382b3a6fb3dbe8ea4c0ed87ff5629b8685ae6b9a611028fe"
-dependencies = [
- "bitflags 2.11.0",
- "hashbrown 0.15.5",
- "indexmap",
- "semver",
-]
-
-[[package]]
-name = "web-sys"
-version = "0.3.91"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "854ba17bb104abfb26ba36da9729addc7ce7f06f5c0f90f3c391f8461cca21f9"
-dependencies = [
- "js-sys",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "web-time"
-version = "1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a6580f308b1fad9207618087a65c04e7a10bc77e02c8e84e9b00dd4b12fa0bb"
-dependencies = [
- "js-sys",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "whoami"
-version = "1.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5d4a4db5077702ca3015d3d02d74974948aba2ad9e12ab7df718ee64ccd7e97d"
-dependencies = [
- "libredox",
- "wasite",
- "web-sys",
-]
-
-[[package]]
-name = "widestring"
-version = "1.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72069c3113ab32ab29e5584db3c6ec55d416895e60715417b5b883a357c3e471"
-
-[[package]]
-name = "wild"
-version = "2.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a3131afc8c575281e1e80f36ed6a092aa502c08b18ed7524e86fbbb12bb410e1"
-dependencies = [
- "glob",
-]
-
-[[package]]
-name = "winapi"
-version = "0.3.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c839a674fcd7a98952e593242ea400abe93992746761e38641405d28b00f419"
-dependencies = [
- "winapi-i686-pc-windows-gnu",
- "winapi-x86_64-pc-windows-gnu",
-]
-
-[[package]]
-name = "winapi-i686-pc-windows-gnu"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ac3b87c63620426dd9b991e5ce0329eff545bccbbb34f3be09ff6fb6ab51b7b6"
-
-[[package]]
-name = "winapi-util"
-version = "0.1.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
-dependencies = [
- "windows-sys 0.61.2",
-]
-
-[[package]]
-name = "winapi-x86_64-pc-windows-gnu"
-version = "0.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "712e227841d057c1ee1cd2fb22fa7e5a5461ae8e48fa2ca79ec42cfc1931183f"
-
-[[package]]
-name = "windows"
-version = "0.57.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "12342cb4d8e3b046f3d80effd474a7a02447231330ef77d71daa6fbc40681143"
-dependencies = [
- "windows-core 0.57.0",
- "windows-targets 0.52.6",
-]
-
-[[package]]
-name = "windows"
-version = "0.61.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9babd3a767a4c1aef6900409f85f5d53ce2544ccdfaa86dad48c91782c6d6893"
-dependencies = [
- "windows-collections",
- "windows-core 0.61.2",
- "windows-future",
- "windows-link 0.1.3",
- "windows-numerics",
-]
-
-[[package]]
-name = "windows-collections"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3beeceb5e5cfd9eb1d76b381630e82c4241ccd0d27f1a39ed41b2760b255c5e8"
-dependencies = [
- "windows-core 0.61.2",
-]
-
-[[package]]
-name = "windows-core"
-version = "0.57.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d2ed2439a290666cd67ecce2b0ffaad89c2a56b976b736e6ece670297897832d"
-dependencies = [
- "windows-implement 0.57.0",
- "windows-interface 0.57.0",
- "windows-result 0.1.2",
- "windows-targets 0.52.6",
-]
-
-[[package]]
-name = "windows-core"
-version = "0.61.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c0fdd3ddb90610c7638aa2b3a3ab2904fb9e5cdbecc643ddb3647212781c4ae3"
-dependencies = [
- "windows-implement 0.60.2",
- "windows-interface 0.59.3",
- "windows-link 0.1.3",
- "windows-result 0.3.4",
- "windows-strings 0.4.2",
-]
-
-[[package]]
-name = "windows-core"
-version = "0.62.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
-dependencies = [
- "windows-implement 0.60.2",
- "windows-interface 0.59.3",
- "windows-link 0.2.1",
- "windows-result 0.4.1",
- "windows-strings 0.5.1",
-]
-
-[[package]]
-name = "windows-future"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fc6a41e98427b19fe4b73c550f060b59fa592d7d686537eebf9385621bfbad8e"
-dependencies = [
- "windows-core 0.61.2",
- "windows-link 0.1.3",
- "windows-threading",
-]
-
-[[package]]
-name = "windows-implement"
-version = "0.57.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9107ddc059d5b6fbfbffdfa7a7fe3e22a226def0b2608f72e9d552763d3e1ad7"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "windows-implement"
-version = "0.60.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "windows-interface"
-version = "0.57.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "29bee4b38ea3cde66011baa44dba677c432a78593e202392d1e9070cf2a7fca7"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "windows-interface"
-version = "0.59.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "windows-link"
-version = "0.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e6ad25900d524eaabdbbb96d20b4311e1e7ae1699af4fb28c17ae66c80d798a"
-
-[[package]]
-name = "windows-link"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
-
-[[package]]
-name = "windows-numerics"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9150af68066c4c5c07ddc0ce30421554771e528bde427614c61038bc2c92c2b1"
-dependencies = [
- "windows-core 0.61.2",
- "windows-link 0.1.3",
-]
-
-[[package]]
-name = "windows-result"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e383302e8ec8515204254685643de10811af0ed97ea37210dc26fb0032647f8"
-dependencies = [
- "windows-targets 0.52.6",
-]
-
-[[package]]
-name = "windows-result"
-version = "0.3.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "56f42bd332cc6c8eac5af113fc0c1fd6a8fd2aa08a0119358686e5160d0586c6"
-dependencies = [
- "windows-link 0.1.3",
-]
-
-[[package]]
-name = "windows-result"
-version = "0.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
-dependencies = [
- "windows-link 0.2.1",
-]
-
-[[package]]
-name = "windows-strings"
-version = "0.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "56e6c93f3a0c3b36176cb1327a4958a0353d5d166c2a35cb268ace15e91d3b57"
-dependencies = [
- "windows-link 0.1.3",
-]
-
-[[package]]
-name = "windows-strings"
-version = "0.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
-dependencies = [
- "windows-link 0.2.1",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.59.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
-dependencies = [
- "windows-targets 0.52.6",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.60.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
-dependencies = [
- "windows-targets 0.53.5",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.61.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
-dependencies = [
- "windows-link 0.2.1",
-]
-
-[[package]]
-name = "windows-targets"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
-dependencies = [
- "windows_aarch64_gnullvm 0.52.6",
- "windows_aarch64_msvc 0.52.6",
- "windows_i686_gnu 0.52.6",
- "windows_i686_gnullvm 0.52.6",
- "windows_i686_msvc 0.52.6",
- "windows_x86_64_gnu 0.52.6",
- "windows_x86_64_gnullvm 0.52.6",
- "windows_x86_64_msvc 0.52.6",
-]
-
-[[package]]
-name = "windows-targets"
-version = "0.53.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
-dependencies = [
- "windows-link 0.2.1",
- "windows_aarch64_gnullvm 0.53.1",
- "windows_aarch64_msvc 0.53.1",
- "windows_i686_gnu 0.53.1",
- "windows_i686_gnullvm 0.53.1",
- "windows_i686_msvc 0.53.1",
- "windows_x86_64_gnu 0.53.1",
- "windows_x86_64_gnullvm 0.53.1",
- "windows_x86_64_msvc 0.53.1",
-]
-
-[[package]]
-name = "windows-threading"
-version = "0.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b66463ad2e0ea3bbf808b7f1d371311c80e115c0b71d60efc142cafbcfb057a6"
-dependencies = [
- "windows-link 0.1.3",
-]
-
-[[package]]
-name = "windows_aarch64_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
-
-[[package]]
-name = "windows_aarch64_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
-
-[[package]]
-name = "windows_aarch64_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
-
-[[package]]
-name = "windows_aarch64_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
-
-[[package]]
-name = "windows_i686_gnu"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
-
-[[package]]
-name = "windows_i686_gnu"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
-
-[[package]]
-name = "windows_i686_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
-
-[[package]]
-name = "windows_i686_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
-
-[[package]]
-name = "windows_i686_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
-
-[[package]]
-name = "windows_i686_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
-
-[[package]]
-name = "windows_x86_64_gnu"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
-
-[[package]]
-name = "windows_x86_64_gnu"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
-
-[[package]]
-name = "windows_x86_64_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
-
-[[package]]
-name = "windows_x86_64_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
-
-[[package]]
-name = "windows_x86_64_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
-
-[[package]]
-name = "windows_x86_64_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
-
-[[package]]
-name = "winnow"
-version = "0.7.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "df79d97927682d2fd8adb29682d1140b343be4ac0f08fd68b7765d9c059d3945"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "wit-bindgen"
-version = "0.51.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"
-dependencies = [
- "wit-bindgen-rust-macro",
-]
-
-[[package]]
-name = "wit-bindgen-core"
-version = "0.51.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ea61de684c3ea68cb082b7a88508a8b27fcc8b797d738bfc99a82facf1d752dc"
-dependencies = [
- "anyhow",
- "heck",
- "wit-parser",
-]
-
-[[package]]
-name = "wit-bindgen-rust"
-version = "0.51.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b7c566e0f4b284dd6561c786d9cb0142da491f46a9fbed79ea69cdad5db17f21"
-dependencies = [
- "anyhow",
- "heck",
- "indexmap",
- "prettyplease",
- "syn",
- "wasm-metadata",
- "wit-bindgen-core",
- "wit-component",
-]
-
-[[package]]
-name = "wit-bindgen-rust-macro"
-version = "0.51.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0c0f9bfd77e6a48eccf51359e3ae77140a7f50b1e2ebfe62422d8afdaffab17a"
-dependencies = [
- "anyhow",
- "prettyplease",
- "proc-macro2",
- "quote",
- "syn",
- "wit-bindgen-core",
- "wit-bindgen-rust",
-]
-
-[[package]]
-name = "wit-component"
-version = "0.244.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9d66ea20e9553b30172b5e831994e35fbde2d165325bec84fc43dbf6f4eb9cb2"
-dependencies = [
- "anyhow",
- "bitflags 2.11.0",
- "indexmap",
- "log",
- "serde",
- "serde_derive",
- "serde_json",
- "wasm-encoder",
- "wasm-metadata",
- "wasmparser",
- "wit-parser",
-]
-
-[[package]]
-name = "wit-parser"
-version = "0.244.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ecc8ac4bc1dc3381b7f59c34f00b67e18f910c2c0f50015669dde7def656a736"
-dependencies = [
- "anyhow",
- "id-arena",
- "indexmap",
- "log",
- "semver",
- "serde",
- "serde_derive",
- "serde_json",
- "unicode-xid",
- "wasmparser",
-]
-
-[[package]]
-name = "write16"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d1890f4022759daae28ed4fe62859b1236caebfc61ede2f63ed4e695f3f6d936"
-
-[[package]]
-name = "writeable"
-version = "0.6.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9"
-dependencies = [
- "either",
-]
-
-[[package]]
-name = "wyz"
-version = "0.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "05f360fc0b24296329c78fda852a1e9ae82de9cf7b27dae4b7f62f118f77b9ed"
-dependencies = [
- "tap",
-]
-
-[[package]]
-name = "xattr"
-version = "1.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32e45ad4206f6d2479085147f02bc2ef834ac85886624a23575ae137c8aa8156"
-dependencies = [
- "libc",
- "rustix 1.1.4",
-]
-
-[[package]]
-name = "yoke"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72d6e5c6afb84d73944e5cedb052c4680d5657337201555f9f2a16b7406d4954"
-dependencies = [
- "stable_deref_trait",
- "yoke-derive",
- "zerofrom",
-]
-
-[[package]]
-name = "yoke-derive"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b659052874eb698efe5b9e8cf382204678a0086ebf46982b79d6ca3182927e5d"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
- "synstructure",
-]
-
-[[package]]
-name = "z85"
-version = "3.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c6e61e59a957b7ccee15d2049f86e8bfd6f66968fcd88f018950662d9b86e675"
-
-[[package]]
-name = "zerocopy"
-version = "0.8.42"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2578b716f8a7a858b7f02d5bd870c14bf4ddbbcf3a4c05414ba6503640505e3"
-dependencies = [
- "zerocopy-derive",
-]
-
-[[package]]
-name = "zerocopy-derive"
-version = "0.8.42"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7e6cc098ea4d3bd6246687de65af3f920c430e236bee1e3bf2e441463f08a02f"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "zerofrom"
-version = "0.1.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5"
-dependencies = [
- "zerofrom-derive",
-]
-
-[[package]]
-name = "zerofrom-derive"
-version = "0.1.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
- "synstructure",
-]
-
-[[package]]
-name = "zerotrie"
-version = "0.2.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a59c17a5562d507e4b54960e8569ebee33bee890c70aa3fe7b97e85a9fd7851"
-dependencies = [
- "displaydoc",
- "yoke",
- "zerofrom",
-]
-
-[[package]]
-name = "zerovec"
-version = "0.11.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6c28719294829477f525be0186d13efa9a3c602f7ec202ca9e353d310fb9a002"
-dependencies = [
- "serde",
- "yoke",
- "zerofrom",
- "zerovec-derive",
-]
-
-[[package]]
-name = "zerovec-derive"
-version = "0.11.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eadce39539ca5cb3985590102671f2567e659fca9666581ad3411d59207951f3"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "zmij"
-version = "1.0.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b8848ee67ecc8aedbaf3e4122217aff892639231befc6a1b58d29fff4c2cabaa"
diff --git a/registry/native/Cargo.toml b/registry/native/Cargo.toml
deleted file mode 100644
index 4d567ae04..000000000
--- a/registry/native/Cargo.toml
+++ /dev/null
@@ -1,168 +0,0 @@
-[workspace]
-resolver = "2"
-members = [
-    "crates/wasi-ext",
-    "crates/libs/shims",
-    "crates/libs/builtins",
-    "crates/libs/stubs",
-    "crates/libs/grep",
-    "crates/libs/awk",
-    "crates/libs/jq",
-    "crates/libs/yq",
-    "crates/commands/grep",
-    "crates/commands/sh",
-    "crates/commands/sed",
-    "crates/commands/awk",
-    "crates/commands/jq",
-    "crates/commands/yq",
-    "crates/commands/rg",
-    "crates/libs/find",
-    "crates/libs/file-cmd",
-    "crates/libs/tree",
-    "crates/libs/du",
-    "crates/libs/column",
-    "crates/libs/rev",
-    "crates/libs/strings-cmd",
-    "crates/libs/expr",
-    "crates/libs/diff",
-    "crates/commands/find",
-    "crates/commands/file",
-    "crates/commands/tree",
-    "crates/commands/du",
-    "crates/commands/column",
-    "crates/commands/rev",
-    "crates/commands/strings",
-    "crates/commands/expr",
-    "crates/commands/diff",
-    "crates/libs/gzip",
-    "crates/libs/tar",
-    "crates/commands/gzip",
-    "crates/commands/tar",
-    "crates/commands/ls",
-    "crates/commands/cat",
-    "crates/commands/cp",
-    "crates/commands/mv",
-    "crates/commands/rm",
-    "crates/commands/mkdir",
-    "crates/commands/chmod",
-    "crates/commands/sort",
-    "crates/commands/head",
-    "crates/commands/tail",
-    "crates/commands/wc",
-    "crates/commands/cut",
-    "crates/commands/tr",
-    "crates/commands/echo",
-    "crates/commands/printf",
-    # US-009: remaining uutils coreutils
-    "crates/commands/dd",
-    "crates/commands/ln",
-    "crates/commands/logname",
-    "crates/commands/mktemp",
-    "crates/commands/pathchk",
-    "crates/commands/split",
-    "crates/commands/stat",
-    "crates/commands/tac",
-    "crates/commands/touch",
-    "crates/commands/tsort",
-    "crates/commands/base32",
-    "crates/commands/base64",
-    "crates/commands/basenc",
-    "crates/commands/basename",
-    "crates/commands/comm",
-    "crates/commands/dircolors",
-    "crates/commands/dirname",
-    "crates/commands/expand",
-    "crates/commands/factor",
-    "crates/commands/false",
-    "crates/commands/fmt",
-    "crates/commands/fold",
-    "crates/commands/join",
-    "crates/commands/nl",
-    "crates/commands/numfmt",
-    "crates/commands/od",
-    "crates/commands/paste",
-    "crates/commands/printenv",
-    "crates/commands/ptx",
-    "crates/commands/seq",
-    "crates/commands/shuf",
-    "crates/commands/true",
-    "crates/commands/unexpand",
-    "crates/commands/uniq",
-    "crates/commands/yes",
-    "crates/commands/b2sum",
-    "crates/commands/cksum",
-    "crates/commands/md5sum",
-    "crates/commands/sha1sum",
-    "crates/commands/sha224sum",
-    "crates/commands/sha256sum",
-    "crates/commands/sha384sum",
-    "crates/commands/sha512sum",
-    "crates/commands/sum",
-    "crates/commands/link",
-    "crates/commands/pwd",
-    "crates/commands/readlink",
-    "crates/commands/realpath",
-    "crates/commands/rmdir",
-    "crates/commands/shred",
-    "crates/commands/tee",
-    "crates/commands/truncate",
-    "crates/commands/unlink",
-    "crates/commands/arch",
-    "crates/commands/date",
-    "crates/commands/nproc",
-    "crates/commands/uname",
-    # US-010: builtins, shims, and stubs
-    "crates/commands/sleep",
-    "crates/commands/test",
-    "crates/commands/whoami",
-    "crates/commands/env",
-    "crates/commands/timeout",
-    "crates/commands/which",
-    "crates/commands/xu",
-    "crates/commands/xargs",
-    "crates/commands/nice",
-    "crates/commands/nohup",
-    "crates/commands/stdbuf",
-    "crates/commands/_stubs",
-    # US-079: fd-find compatible file finder
-    "crates/libs/fd",
-    "crates/commands/fd",
-    # US-099: codex (OpenAI Codex CLI) WASI build skeleton
-    "crates/commands/codex",
-    # US-100: WASI process spawning via host_process FFI
-    "crates/libs/wasi-spawn",
-    "crates/commands/spawn-test-host",
-    # US-101: WASI PTY-based process management via host_process FFI
-    "crates/libs/wasi-pty",
-    # US-102: WASI HTTP client via host_net TCP/TLS
-    "crates/libs/wasi-http",
-    "crates/commands/curl",
-    "crates/commands/http-test",
-    # US-104: codex-exec headless agent binary
-    "crates/commands/codex-exec",
-    # git: minimal git implementation
-    "crates/libs/git",
-    "crates/commands/git",
-    "stubs/codex-otel",
-    "stubs/ctrlc",
-    "stubs/hostname",
-]
-
-[workspace.package]
-version = "0.1.0"
-edition = "2021"
-license = "Apache-2.0"
-
-[profile.release]
-opt-level = "z"
-lto = true
-codegen-units = 1
-strip = true
-
-# WASM-compatible stubs for crates that don't support wasm32-wasip1
-[patch.crates-io]
-ctrlc = { path = "stubs/ctrlc" }
-hostname = { path = "stubs/hostname" }
-uucore = { path = "stubs/uucore" }
-codex-network-proxy = { path = "stubs/codex-network-proxy" }
-codex-otel = { path = "stubs/codex-otel" }
diff --git a/registry/native/Makefile b/registry/native/Makefile
deleted file mode 100644
index e0d542532..000000000
--- a/registry/native/Makefile
+++ /dev/null
@@ -1,322 +0,0 @@
-WASM_TARGET := wasm32-wasip1
-RELEASE_DIR := target/$(WASM_TARGET)/release
-
-# Standalone binary output directory (configurable)
-COMMANDS_DIR ?= $(RELEASE_DIR)/commands
-
-# Detect patched std: if patches/ has .patch files and patch-std.sh exists, use patched sysroot
-PATCHES := $(wildcard patches/*.patch)
-PATCH_SCRIPT := scripts/patch-std.sh
-
-# Resolve WASI sysroot for CRT/libc needed by -Z build-std linking
-# Uses rustc without +toolchain override so rust-toolchain.toml is respected
-WASI_SYSROOT_SELF_CONTAINED := $(shell rustc --print sysroot)/lib/rustlib/$(WASM_TARGET)/lib/self-contained
-
-# Discover command binary names from crates/commands/
-COMMAND_NAMES := $(notdir $(wildcard crates/commands/*))
-
-# Alias symlinks: link_name:target_binary
-ALIAS_SYMLINKS := \
-	egrep:grep fgrep:grep \
-	gunzip:gzip zcat:gzip \
-	bash:sh \
-	dir:ls vdir:ls \
-	more:cat \
-	[:test
-
-# Stub commands: each gets a symlink to _stubs
-STUB_COMMANDS := \
-	chcon runcon \
-	chgrp chown chroot \
-	df \
-	groups id \
-	hostname hostid \
-	install \
-	kill \
-	mkfifo mknod \
-	pinky who users uptime \
-	stty sync tty
-
-.PHONY: all commands wasm wasm-opt-check host test clean patch-std patch-check vendor patch-vendor vendor-patch-check size-report install c-wasm codex
-
-all: wasm
-
-# Build EVERYTHING that lands in COMMANDS_DIR: all Rust commands (+ codex when
-# the fork is present), then the opted-in C commands (curl, wget, sqlite3, zip,
-# unzip, envsubst, duckdb). C runs second so a C port wins over a Rust crate of
-# the same name (e.g. curl). vim builds from source via `make cmd/vim` (not in
-# the bulk C set); vix has no source pipeline and must still be dropped into
-# COMMANDS_DIR by hand.
-commands: wasm
-	$(MAKE) -C c programs install
-
-# Build the real wasm32-wasip1 `codex-exec` agent engine from the codex fork
-# (branch wasi-port-codex-core). The fork ships a committed, idempotent, self-prepping build script
-# (it prepares the rustup sysroot for -Z build-std and restores it on exit — no manual stash), so
-# this folds codex into the toolchain: `make -C registry/native codex` produces and installs
-# registry/software/codex/wasm/{codex-exec,codex}. Override CODEX_REPO if the fork is not at the
-# default sibling path. See the fork's docs/wasi-build.md for the toolchain constraints, and the
-# remaining work to source the CRT from wasi-sdk so the prebuilt rust target need not be installed.
-SECURE_EXEC_ROOT := $(abspath $(CURDIR)/../..)
-CODEX_REPO ?= $(abspath $(SECURE_EXEC_ROOT)/../codex-rs/codex-rs)
-codex:
-	@if [ -x "$(CODEX_REPO)/scripts/build-wasi-codex-exec.sh" ]; then \
-		SECURE_EXEC_DIR="$(SECURE_EXEC_ROOT)" "$(CODEX_REPO)/scripts/build-wasi-codex-exec.sh"; \
-	else \
-		echo "codex: fork build script not found at $(CODEX_REPO)/scripts/build-wasi-codex-exec.sh — skipping."; \
-		echo "       Set CODEX_REPO=/path/to/codex-rs/codex-rs (the wasi-port-codex-core checkout) to build it."; \
-	fi
-
-# Strict variant (fails if the fork is absent) for environments that require the codex artifact.
-.PHONY: codex-required
-codex-required:
-	@test -x "$(CODEX_REPO)/scripts/build-wasi-codex-exec.sh" || { \
-		echo "ERROR: codex fork build script not found at $(CODEX_REPO); set CODEX_REPO"; exit 1; }
-	@$(MAKE) codex
-
-# Apply std patches if they exist
-patch-std:
-ifneq ($(PATCHES),)
-	@if [ -x "$(PATCH_SCRIPT)" ]; then \
-		echo "Applying std patches..."; \
-		./$(PATCH_SCRIPT); \
-	else \
-		echo "Warning: patches found but $(PATCH_SCRIPT) not executable or missing"; \
-	fi
-else
-	@echo "No patches found, using stock std"
-endif
-
-# Resolve Rust std source for vendoring build-std deps
-RUST_STD_SRC := $(shell rustc --print sysroot)/lib/rustlib/src/rust
-
-# Vendor dependencies from crates.io into vendor/ (includes std deps for -Z build-std)
-vendor:
-	@if [ ! -d vendor ]; then \
-		echo "Vendoring dependencies (including std library deps)..."; \
-		mkdir -p .cargo; \
-		cargo vendor \
-			--sync "$(RUST_STD_SRC)/library/std/Cargo.toml" \
-			--sync "$(RUST_STD_SRC)/library/test/Cargo.toml" \
-			vendor > .cargo/config.toml; \
-	else \
-		echo "vendor/ exists — skipping (run 'make clean-vendor' to re-vendor)"; \
-	fi
-	@# Source-replacement config so cargo builds from the patched vendor/ tree
-	@# instead of the crates.io registry cache. This file is gitignored, so a
-	@# fresh checkout (CI) has none; without it every patches/crates/*.patch
-	@# wasi fix is silently ignored and crates like uu_tac fail to compile for
-	@# wasm32-wasip1. `cargo vendor` prints the exact config (including the
-	@# synced std-dep sources) on stdout, so capture it above.
-	@test -s .cargo/config.toml || { \
-		echo "ERROR: .cargo/config.toml missing or empty after vendor"; \
-		echo "Run 'make clean-vendor && make vendor' to regenerate."; \
-		exit 1; \
-	}
-
-# Apply crate-level patches to vendored sources
-patch-vendor: vendor
-	@if [ -x scripts/patch-vendor.sh ]; then \
-		./scripts/patch-vendor.sh; \
-	else \
-		echo "Warning: scripts/patch-vendor.sh not found or not executable"; \
-	fi
-
-# Dry-run verification of crate patches
-vendor-patch-check: vendor
-	@if [ -x scripts/patch-vendor.sh ]; then \
-		./scripts/patch-vendor.sh --check; \
-	else \
-		echo "Warning: scripts/patch-vendor.sh not found or not executable"; \
-	fi
-
-# Ensure wasm-opt is installed (needed for post-build optimization)
-wasm-opt-check:
-	@if ! command -v wasm-opt >/dev/null 2>&1; then \
-		echo "wasm-opt not found — installing via cargo..."; \
-		cargo install wasm-opt; \
-	else \
-		echo "wasm-opt found: $$(wasm-opt --version)"; \
-	fi
-
-# Build all standalone command binaries, optimize, strip .wasm extension, create symlinks
-wasm: vendor patch-vendor patch-std wasm-opt-check
-	# --cfg tokio_unstable lifts tokio's wasm `compile_error!` so the patched
-	# tokio process/net modules (patches/crates/tokio) compile on wasm32-wasip1.
-	# Needed by codex (tokio::process/net). Harmless for commands not using tokio.
-	RUSTFLAGS="-C link-arg=-L$(WASI_SYSROOT_SELF_CONTAINED) --cfg tokio_unstable" \
-	cargo build --target $(WASM_TARGET) \
-		-Z build-std=std,panic_abort \
-		--release
-	@mkdir -p $(COMMANDS_DIR)
-	@TOTAL=0; SKIPPED=0; \
-	HAS_OPT=$$(command -v wasm-opt >/dev/null 2>&1 && echo 1 || echo 0); \
-	for cmd in $(COMMAND_NAMES); do \
-		wasm="$(RELEASE_DIR)/$$cmd.wasm"; \
-		if [ -f "$$wasm" ]; then \
-			TOTAL=$$((TOTAL + 1)); \
-			if [ "$$HAS_OPT" = "1" ]; then \
-				wasm-opt -O3 --strip-debug --all-features "$$wasm" -o "$(COMMANDS_DIR)/$$cmd"; \
-			else \
-				cp "$$wasm" "$(COMMANDS_DIR)/$$cmd"; \
-			fi; \
-		else \
-			SKIPPED=$$((SKIPPED + 1)); \
-			echo "Warning: $$wasm not found — skipping $$cmd"; \
-		fi; \
-	done; \
-	echo ""; \
-	echo "=== Standalone Binary Build Report ==="; \
-	echo "Binaries: $$TOTAL built"; \
-	if [ $$SKIPPED -gt 0 ]; then \
-		echo "Skipped:  $$SKIPPED (binary not found)"; \
-	fi; \
-	if [ "$$HAS_OPT" = "1" ]; then \
-		echo "Optimized: wasm-opt -O3 --strip-debug"; \
-	else \
-		echo "Optimized: none (wasm-opt not found)"; \
-	fi
-	@# Create alias symlinks (fall back to copy on platforms without symlink support)
-	@cd $(COMMANDS_DIR) && \
-	for pair in $(ALIAS_SYMLINKS); do \
-		link=$${pair%%:*}; target=$${pair##*:}; \
-		if [ -f "$$target" ]; then \
-			ln -sf "$$target" "$$link" 2>/dev/null || cp "$$target" "$$link"; \
-		fi; \
-	done
-	@# Create stub command symlinks
-	@cd $(COMMANDS_DIR) && \
-	for stub in $(STUB_COMMANDS); do \
-		if [ -f _stubs ]; then \
-			ln -sf _stubs "$$stub" 2>/dev/null || cp _stubs "$$stub"; \
-		fi; \
-	done
-	@TOTAL_FILES=$$(ls -1 $(COMMANDS_DIR) 2>/dev/null | wc -l); \
-	echo "Total:    $$TOTAL_FILES entries in $(COMMANDS_DIR)"; \
-	echo "=== Build complete ==="
-	@# Also produce the real codex-exec engine from the fork when present (skips with a notice if not).
-	@$(MAKE) --no-print-directory codex
-
-# ---------------------------------------------------------------------------
-# Uniform per-binary entry point: `make cmd/<name>` builds ONE command binary
-# into $(COMMANDS_DIR), dispatching to the toolchain that owns it:
-#   Rust      crates/commands/<name>  (cargo package cmd-<name>, via wasm-cmd)
-#   C         the C opt-in set below  (registry/native/c, patched sysroot)
-#   codex     the codex fork build    (codex, codex-exec)
-#   external  hand-built drop-zone binaries with no source pipeline yet
-# `just registry-native-cmd <name>` calls this. `make wasm` still builds the
-# whole Rust set; `make -C c programs install` still builds the whole C set.
-C_COMMANDS := zip unzip envsubst sqlite3 curl wget duckdb vim http_get
-EXTERNAL_COMMANDS := vix
-
-.PHONY: cmd/%
-cmd/%:
-	@name="$*"; \
-	if [ -d "crates/commands/$$name" ]; then \
-		$(MAKE) wasm-cmd CMD=$$name; \
-	elif echo " $(C_COMMANDS) " | grep -q " $$name "; then \
-		src=$$name; [ "$$name" = "sqlite3" ] && src=sqlite3_cli; \
-		$(MAKE) -C c sysroot "build/$$src" && $(MAKE) -C c install COMMANDS="$$name"; \
-	elif [ "$$name" = "codex" ] || [ "$$name" = "codex-exec" ]; then \
-		$(MAKE) codex-required; \
-	elif echo " $(EXTERNAL_COMMANDS) " | grep -q " $$name "; then \
-		if [ -f "$(COMMANDS_DIR)/$$name" ]; then \
-			echo "cmd/$$name: external hand-built binary present at $(COMMANDS_DIR)/$$name"; \
-		else \
-			echo "ERROR: '$$name' has no source pipeline yet — place the hand-built wasm binary at $(COMMANDS_DIR)/$$name (see registry/README.md)"; \
-			exit 1; \
-		fi; \
-	else \
-		echo "ERROR: unknown command '$$name' (no crates/commands/$$name; not in C_COMMANDS, codex, or EXTERNAL_COMMANDS)"; \
-		exit 1; \
-	fi
-
-# Build ONE command binary (cargo package cmd-$(CMD) -> $(COMMANDS_DIR)/$(CMD)).
-# Usage: make wasm-cmd CMD=sh
-.PHONY: wasm-cmd
-wasm-cmd: vendor patch-vendor patch-std wasm-opt-check
-	@test -n "$(CMD)" || { echo "ERROR: pass CMD=<name> (a dir under crates/commands/)"; exit 1; }
-	@test -d "crates/commands/$(CMD)" || { echo "ERROR: no crates/commands/$(CMD)"; exit 1; }
-	RUSTFLAGS="-C link-arg=-L$(WASI_SYSROOT_SELF_CONTAINED) --cfg tokio_unstable" \
-	cargo build --target $(WASM_TARGET) \
-		-Z build-std=std,panic_abort \
-		--release \
-		-p cmd-$(CMD)
-	@mkdir -p $(COMMANDS_DIR)
-	@if command -v wasm-opt >/dev/null 2>&1; then \
-		wasm-opt -O3 --strip-debug --all-features "$(RELEASE_DIR)/$(CMD).wasm" -o "$(COMMANDS_DIR)/$(CMD)"; \
-	else \
-		cp "$(RELEASE_DIR)/$(CMD).wasm" "$(COMMANDS_DIR)/$(CMD)"; \
-	fi
-	@echo "Built $(COMMANDS_DIR)/$(CMD)"
-
-# Show per-command binary sizes in COMMANDS_DIR
-size-report:
-	@if [ ! -d "$(COMMANDS_DIR)" ]; then \
-		echo "Error: $(COMMANDS_DIR) not found. Run 'make wasm' first."; \
-		exit 1; \
-	fi
-	@echo "=== Standalone Binary Size Report ==="
-	@echo ""
-	@printf "%-10s  %s\n" "SIZE" "COMMAND"
-	@printf "%-10s  %s\n" "----" "-------"
-	@ls -lhS $(COMMANDS_DIR)/* 2>/dev/null | \
-		grep -v "^total" | \
-		while read line; do \
-			size=$$(echo "$$line" | awk '{print $$5}'); \
-			name=$$(echo "$$line" | awk '{print $$NF}'); \
-			base=$$(basename "$$name"); \
-			link=""; \
-			if [ -L "$$name" ]; then \
-				target=$$(readlink "$$name"); \
-				link=" -> $$target"; \
-			fi; \
-			printf "%-10s  %s%s\n" "$$size" "$$base" "$$link"; \
-		done
-	@echo ""
-	@TOTAL_SIZE=$$(du -sh $(COMMANDS_DIR) 2>/dev/null | awk '{print $$1}'); \
-	TOTAL_FILES=$$(ls -1 $(COMMANDS_DIR) 2>/dev/null | wc -l); \
-	REAL_FILES=$$(find $(COMMANDS_DIR) -maxdepth 1 -type f 2>/dev/null | wc -l); \
-	SYMLINKS=$$(find $(COMMANDS_DIR) -maxdepth 1 -type l 2>/dev/null | wc -l); \
-	echo "Total:     $$TOTAL_SIZE ($$TOTAL_FILES entries: $$REAL_FILES binaries, $$SYMLINKS symlinks)"
-	@echo ""
-	@echo "=== Per-Crate Size Contribution (rlib, top 30) ==="
-	@echo "Note: rlib sizes are pre-LTO; actual contribution after LTO/DCE may differ."
-	@echo ""
-	@printf "%-10s  %s\n" "SIZE" "CRATE"
-	@printf "%-10s  %s\n" "----" "-----"
-	@ls -lhS $(RELEASE_DIR)/deps/*.rlib 2>/dev/null | \
-		awk '{split($$NF, a, "/"); name=a[length(a)]; gsub(/^lib/, "", name); gsub(/-[0-9a-f]+\.rlib$$/, "", name); printf "%-10s  %s\n", $$5, name}' | \
-		awk '!seen[$$2]++' | \
-		head -30
-	@echo ""
-	@echo "=== Dependency Count ==="
-	@TOTAL=$$(ls $(RELEASE_DIR)/deps/*.rlib 2>/dev/null | \
-		sed 's/.*\/lib//' | sed 's/-[0-9a-f]*\.rlib//' | sort -u | wc -l); \
-	echo "Unique crates: $$TOTAL"
-
-# Install standalone binaries to a custom directory
-
-# Build C programs to WASM (downloads wasi-sdk if needed)
-
-
-test:
-	cargo test --workspace
-
-clean:
-	cargo clean
-	rm -rf host/dist
-
-clean-vendor:
-	rm -rf vendor .cargo/config.toml
-
-patch-check:
-ifneq ($(PATCHES),)
-	@if [ -x "$(PATCH_SCRIPT)" ]; then \
-		./$(PATCH_SCRIPT) --check; \
-	else \
-		echo "Warning: $(PATCH_SCRIPT) not found or not executable"; \
-	fi
-else
-	@echo "No patches found"
-endif
diff --git a/registry/native/c/Makefile b/registry/native/c/Makefile
deleted file mode 100644
index 21f1ccc1b..000000000
--- a/registry/native/c/Makefile
+++ /dev/null
@@ -1,699 +0,0 @@
-# wasmvm/c/Makefile — Build C programs to standalone WASM binaries
-#
-# Targets:
-#   wasi-sdk    Download and cache wasi-sdk toolchain
-#   programs    Compile all .c files in programs/ to WASM binaries
-#   sysroot     Build patched wasi-libc sysroot (invokes patch-wasi-libc.sh)
-#   install     Copy opted-in real commands to COMMANDS_DIR
-#   native      Compile all .c files to native binaries (for parity testing)
-#   clean       Remove build output
-#
-# The vanilla (unpatched) wasi-sdk sysroot is used by default.
-# After US-025 adds patch-wasi-libc.sh, `make sysroot` builds a patched one.
-
-# wasi-sdk version and platform detection
-WASI_SDK_VERSION := 25
-WASI_SDK_MAJOR   := 25.0
-
-UNAME_S := $(shell uname -s)
-UNAME_M := $(shell uname -m)
-
-ifeq ($(UNAME_S),Linux)
-  WASI_SDK_PLATFORM := linux
-else ifeq ($(UNAME_S),Darwin)
-  WASI_SDK_PLATFORM := macos
-else
-  WASI_SDK_PLATFORM := linux
-endif
-
-ifeq ($(UNAME_M),arm64)
-  WASI_SDK_ARCH := arm64
-else ifeq ($(UNAME_M),aarch64)
-  WASI_SDK_ARCH := arm64
-else
-  WASI_SDK_ARCH := x86_64
-endif
-
-WASI_SDK_TARBALL := wasi-sdk-$(WASI_SDK_MAJOR)-$(WASI_SDK_ARCH)-$(WASI_SDK_PLATFORM).tar.gz
-WASI_SDK_URL     := https://github.com/WebAssembly/wasi-sdk/releases/download/wasi-sdk-$(WASI_SDK_VERSION)/$(WASI_SDK_TARBALL)
-
-# Directories
-VENDOR_DIR   := vendor
-WASI_SDK_DIR := $(VENDOR_DIR)/wasi-sdk
-BUILD_DIR    := build
-NATIVE_DIR   := build/native
-
-# Toolchain
-CC           := $(WASI_SDK_DIR)/bin/clang
-NATIVE_CC    := $(shell command -v cc 2>/dev/null || command -v gcc 2>/dev/null || command -v clang 2>/dev/null)
-
-# Sysroot: use patched sysroot if built, otherwise use wasi-sdk's vanilla sysroot
-PATCHED_SYSROOT := sysroot
-ifeq ($(wildcard $(PATCHED_SYSROOT)/lib/wasm32-wasi/libc.a),)
-  SYSROOT := $(WASI_SDK_DIR)/share/wasi-sysroot
-else
-  SYSROOT := $(PATCHED_SYSROOT)
-endif
-
-# Compile flags
-WASM_CFLAGS  := --target=wasm32-wasip1 --sysroot=$(SYSROOT) -O2 -flto -I include/
-NATIVE_CFLAGS := -O0 -g -D_LARGEFILE64_SOURCE -I include/
-
-# COMMANDS_DIR for install target (configurable, matches Rust binary output)
-COMMANDS_DIR ?= ../target/wasm32-wasip1/release/commands
-
-# Real commands to install (add command names as they are opted in)
-COMMANDS := zip unzip envsubst sqlite3 curl wget duckdb http_get vim
-
-# Programs requiring patched sysroot (Tier 2+ custom host imports)
-PATCHED_PROGRAMS := isatty_test getpid_test getppid_test getppid_verify userinfo pipe_test dup_test spawn_child spawn_exit_code pipeline kill_child waitpid_return waitpid_edge syscall_coverage getpwuid_test signal_tests sigaction_self sigaction_behavior delayed_tcp_echo delayed_kill pipe_edge tcp_accept_spawn tcp_echo tcp_server http_server udp_echo unix_socket signal_handler http_get dns_lookup sqlite3_cli curl wget fs_probe
-
-# Discover all .c source files in programs/
-ALL_SOURCES := $(wildcard programs/*.c)
-
-# Exclude patched-sysroot programs when only vanilla sysroot is available
-ifeq ($(wildcard $(PATCHED_SYSROOT)/lib/wasm32-wasi/libc.a),)
-  EXCLUDED := $(addsuffix .c,$(addprefix programs/,$(PATCHED_PROGRAMS)))
-  SOURCES := $(filter-out $(EXCLUDED),$(ALL_SOURCES))
-else
-  SOURCES := $(ALL_SOURCES)
-endif
-
-# Program names (without .c extension)
-ifeq ($(wildcard $(PATCHED_SYSROOT)/lib/wasm32-wasi/libc.a),)
-  CUSTOM_WASM_PROG_NAMES :=
-else
-  CUSTOM_WASM_PROG_NAMES := curl
-endif
-
-WASM_PROG_NAMES := $(sort $(basename $(notdir $(SOURCES))) $(CUSTOM_WASM_PROG_NAMES))
-NATIVE_PROG_NAMES := $(basename $(notdir $(SOURCES)))
-PROGRAM_REPORT_NAMES := $(WASM_PROG_NAMES) duckdb
-
-# Default WASM output targets
-EXTRA_WASM_OUTPUTS := $(BUILD_DIR)/duckdb
-WASM_OUTPUTS := $(addprefix $(BUILD_DIR)/,$(WASM_PROG_NAMES)) $(EXTRA_WASM_OUTPUTS)
-# Native output targets
-NATIVE_OUTPUTS := $(addprefix $(NATIVE_DIR)/,$(NATIVE_PROG_NAMES))
-
-.PHONY: all wasi-sdk programs sysroot install native clean wasm-opt-check os-test os-test-native
-
-HAS_WASM_OPT := $(shell command -v wasm-opt >/dev/null 2>&1 && echo 1 || echo 0)
-
-all: programs
-
-# --- wasi-sdk download and cache ---
-
-wasi-sdk: $(WASI_SDK_DIR)/bin/clang
-
-$(WASI_SDK_DIR)/bin/clang:
-	@echo "=== Downloading wasi-sdk $(WASI_SDK_MAJOR) ==="
-	@mkdir -p $(VENDOR_DIR)
-	@if command -v curl >/dev/null 2>&1; then \
-		curl -fSL "$(WASI_SDK_URL)" -o "$(VENDOR_DIR)/$(WASI_SDK_TARBALL)"; \
-	elif command -v wget >/dev/null 2>&1; then \
-		wget -q "$(WASI_SDK_URL)" -O "$(VENDOR_DIR)/$(WASI_SDK_TARBALL)"; \
-	else \
-		echo "Error: neither curl nor wget found"; exit 1; \
-	fi
-	@echo "Extracting..."
-	@tar -xzf "$(VENDOR_DIR)/$(WASI_SDK_TARBALL)" -C "$(VENDOR_DIR)"
-	@mv "$(VENDOR_DIR)/wasi-sdk-$(WASI_SDK_MAJOR)-$(WASI_SDK_ARCH)-$(WASI_SDK_PLATFORM)" "$(WASI_SDK_DIR)"
-	@rm -f "$(VENDOR_DIR)/$(WASI_SDK_TARBALL)"
-	@echo "wasi-sdk $(WASI_SDK_MAJOR) installed to $(WASI_SDK_DIR)"
-
-# --- C library dependencies (downloaded at build time) ---
-# Unmodified upstream libs are fetched from their official sources.
-# Modified libs (curl with WASI patches) are fetched from rivet-dev forks.
-# All downloads cached in libs/ — add libs/ to .gitignore.
-
-SQLITE3_URL := https://www.sqlite.org/2024/sqlite-amalgamation-3470200.zip
-ZLIB_URL    := https://github.com/madler/zlib/archive/refs/tags/v1.3.1.zip
-CJSON_URL   := https://github.com/DaveGamble/cJSON/archive/refs/tags/v1.7.18.zip
-CURL_COMMIT := main
-CURL_FORK_REPO_PREFIX := secure
-CURL_FORK_REPO_SUFFIX := exec-curl
-CURL_FORK_REPO := $(CURL_FORK_REPO_PREFIX)-$(CURL_FORK_REPO_SUFFIX)
-CURL_URL    := https://github.com/rivet-dev/$(CURL_FORK_REPO)/archive/refs/heads/$(CURL_COMMIT).zip
-CURL_TOOL_VERSION := 8_11_1
-CURL_TOOL_URL := https://github.com/curl/curl/archive/refs/tags/curl-$(CURL_TOOL_VERSION).tar.gz
-CURL_RELEASE_VERSION := 8.11.1
-CURL_RELEASE_TAG := 8_11_1
-CURL_RELEASE_URL := https://github.com/curl/curl/releases/download/curl-$(CURL_RELEASE_TAG)/curl-$(CURL_RELEASE_VERSION).tar.xz
-CURL_UPSTREAM_BUILD_DIR := $(BUILD_DIR)/curl-upstream
-CURL_UPSTREAM_OVERLAY_DIR := curl-upstream-overlay
-CURL_UPSTREAM_OVERLAY_FILES := $(wildcard $(CURL_UPSTREAM_OVERLAY_DIR)/lib/*.c $(CURL_UPSTREAM_OVERLAY_DIR)/lib/*.h $(CURL_UPSTREAM_OVERLAY_DIR)/lib/vtls/*.c $(CURL_UPSTREAM_OVERLAY_DIR)/lib/vtls/*.h)
-MINIZIP_URL := https://github.com/madler/zlib/archive/refs/tags/v1.3.1.zip
-# duckdb-wasm currently documents DuckDB v1.5.0 in its README. We build the
-# matching upstream DuckDB tag ourselves with our patched WASI/POSIX sysroot.
-DUCKDB_VERSION := v1.5.0
-DUCKDB_GIT_DESCRIBE := $(DUCKDB_VERSION)-0-g0123456789
-DUCKDB_URL := https://github.com/duckdb/duckdb/archive/refs/tags/$(DUCKDB_VERSION).tar.gz
-
-LIBS_DIR    := libs
-LIBS_CACHE  := .cache/libs
-
-libs/sqlite3/sqlite3.c:
-	@echo "Fetching sqlite3..."
-	@mkdir -p $(LIBS_CACHE) $(LIBS_DIR)/sqlite3
-	@curl -fSL "$(SQLITE3_URL)" -o "$(LIBS_CACHE)/sqlite3.zip"
-	@cd $(LIBS_CACHE) && unzip -qo sqlite3.zip
-	@cp $(LIBS_CACHE)/sqlite-amalgamation-*/sqlite3.c $(LIBS_CACHE)/sqlite-amalgamation-*/sqlite3.h $(LIBS_DIR)/sqlite3/
-
-libs/zlib/zutil.c:
-	@echo "Fetching zlib..."
-	@mkdir -p $(LIBS_CACHE) $(LIBS_DIR)/zlib
-	@curl -fSL "$(ZLIB_URL)" -o "$(LIBS_CACHE)/zlib.zip"
-	@cd $(LIBS_CACHE) && unzip -qo zlib.zip
-	@cp $(LIBS_CACHE)/zlib-*/*.c $(LIBS_CACHE)/zlib-*/*.h $(LIBS_DIR)/zlib/
-
-libs/minizip/ioapi.c:
-	@echo "Fetching minizip (from zlib contrib)..."
-	@mkdir -p $(LIBS_CACHE) $(LIBS_DIR)/minizip
-	@if [ ! -f "$(LIBS_CACHE)/zlib.zip" ]; then \
-		curl -fSL "$(MINIZIP_URL)" -o "$(LIBS_CACHE)/zlib.zip"; \
-		cd $(LIBS_CACHE) && unzip -qo zlib.zip; \
-	fi
-	@cp $(LIBS_CACHE)/zlib-*/contrib/minizip/ioapi.c $(LIBS_CACHE)/zlib-*/contrib/minizip/ioapi.h \
-	    $(LIBS_CACHE)/zlib-*/contrib/minizip/zip.c $(LIBS_CACHE)/zlib-*/contrib/minizip/zip.h \
-	    $(LIBS_CACHE)/zlib-*/contrib/minizip/unzip.c $(LIBS_CACHE)/zlib-*/contrib/minizip/unzip.h \
-	    $(LIBS_CACHE)/zlib-*/contrib/minizip/crypt.h \
-	    $(LIBS_DIR)/minizip/
-
-libs/cjson/cJSON.c:
-	@echo "Fetching cJSON..."
-	@mkdir -p $(LIBS_CACHE) $(LIBS_DIR)/cjson
-	@curl -fSL "$(CJSON_URL)" -o "$(LIBS_CACHE)/cjson.zip"
-	@cd $(LIBS_CACHE) && unzip -qo cjson.zip
-	@cp $(LIBS_CACHE)/cJSON-*/cJSON.c $(LIBS_CACHE)/cJSON-*/cJSON.h $(LIBS_DIR)/cjson/
-
-libs/curl/lib/easy.c:
-	@echo "Fetching curl (rivet-dev/$(CURL_FORK_REPO))..."
-	@mkdir -p $(LIBS_CACHE)
-	@curl -fSL "$(CURL_URL)" -o "$(LIBS_CACHE)/curl.zip"
-	@cd $(LIBS_CACHE) && unzip -qo curl.zip
-	@rm -rf $(LIBS_DIR)/curl
-	@mv $(LIBS_CACHE)/$(CURL_FORK_REPO)-* $(LIBS_DIR)/curl
-
-libs/duckdb/CMakeLists.txt:
-	@echo "Fetching DuckDB ($(DUCKDB_VERSION))..."
-	@mkdir -p $(LIBS_CACHE)
-	@curl -fSL "$(DUCKDB_URL)" -o "$(LIBS_CACHE)/duckdb.tar.gz"
-	@rm -rf $(LIBS_DIR)/duckdb
-	@mkdir -p $(LIBS_DIR)/duckdb
-	@tar -xzf "$(LIBS_CACHE)/duckdb.tar.gz" --strip-components=1 -C $(LIBS_DIR)/duckdb
-
-.PHONY: fetch-libs clean-libs
-fetch-libs: libs/sqlite3/sqlite3.c libs/zlib/zutil.c libs/minizip/ioapi.c libs/cjson/cJSON.c libs/curl/lib/easy.c libs/duckdb/CMakeLists.txt
-
-clean-libs:
-	rm -rf $(LIBS_DIR) $(LIBS_CACHE)
-
-# --- os-test POSIX conformance suite (downloaded at build time) ---
-# ISC-licensed test suite from the Sortix project (https://sortix.org/os-test/)
-
-OS_TEST_VERSION := main
-OS_TEST_URL     := https://gitlab.com/sortix/os-test/-/archive/$(OS_TEST_VERSION)/os-test-$(OS_TEST_VERSION).tar.gz
-OS_TEST_DIR     := os-test
-
-.PHONY: fetch-os-test clean-os-test
-
-fetch-os-test: $(OS_TEST_DIR)/include
-$(OS_TEST_DIR)/include:
-	@echo "Fetching os-test $(OS_TEST_VERSION)..."
-	@mkdir -p $(LIBS_CACHE)
-	@curl -fSL "$(OS_TEST_URL)" -o "$(LIBS_CACHE)/os-test.tar.gz"
-	@mkdir -p $(OS_TEST_DIR)
-	@tar -xzf "$(LIBS_CACHE)/os-test.tar.gz" --strip-components=1 -C $(OS_TEST_DIR)
-	@echo "os-test $(OS_TEST_VERSION) extracted to $(OS_TEST_DIR)/"
-	@echo "  include/ : $$(find $(OS_TEST_DIR)/include -name '*.h' 2>/dev/null | wc -l) headers"
-	@echo "  src/     : $$(find $(OS_TEST_DIR)/src -name '*.c' 2>/dev/null | wc -l) test programs"
-
-clean-os-test:
-	rm -rf $(OS_TEST_DIR) $(LIBS_CACHE)/os-test.tar.gz
-
-# --- os-test POSIX conformance build targets ---
-# Compile every os-test C file to WASM and native binaries.
-# Individual compile failures are expected (missing headers, unsupported features)
-# and do not abort the build.
-
-OS_TEST_BUILD        := $(BUILD_DIR)/os-test
-OS_TEST_NATIVE_BUILD := $(NATIVE_DIR)/os-test
-OS_TEST_WASM_CFLAGS  := --target=wasm32-wasip1 --sysroot=$(SYSROOT) -O0 \
-                         -D_GNU_SOURCE -D_BSD_SOURCE -D_ALL_SOURCE -D_DEFAULT_SOURCE
-OS_TEST_WASM_LDFLAGS := -lc-printscan-long-double
-# Stub main() for namespace/ tests (compile-only header conformance checks)
-OS_TEST_NS_MAIN := os-test-overrides/namespace_main.c
-OS_TEST_NATIVE_CFLAGS := -O0 -g \
-                          -D_GNU_SOURCE -D_BSD_SOURCE -D_ALL_SOURCE -D_DEFAULT_SOURCE
-OS_TEST_NATIVE_LDFLAGS := -lm
-ifeq ($(UNAME_S),Linux)
-  OS_TEST_NATIVE_LDFLAGS += -lpthread -lrt
-endif
-ifeq ($(UNAME_S),Darwin)
-  OS_TEST_NATIVE_LDFLAGS += -lpthread
-endif
-
-.PHONY: os-test os-test-native
-
-os-test: wasi-sdk fetch-os-test
-	@total=0; pass=0; fail=0; \
-	for src in $$(find $(OS_TEST_DIR) -name '*.c' -not -path '*/.expect/*' -not -path '*/misc/*' | sort); do \
-		rel=$${src#$(OS_TEST_DIR)/}; \
-		name=$${rel%.c}; \
-		out=$(OS_TEST_BUILD)/$$name; \
-		mkdir -p "$$(dirname "$$out")"; \
-		total=$$((total + 1)); \
-		extras=""; \
-		case "$$rel" in namespace/*) extras="$(OS_TEST_NS_MAIN)";; esac; \
-		if $(CC) $(OS_TEST_WASM_CFLAGS) -o "$$out" "$$src" $$extras $(OS_TEST_WASM_LDFLAGS) 2>/dev/null; then \
-			pass=$$((pass + 1)); \
-		else \
-			echo "COMPILE FAILED: $$name"; \
-			rm -f "$$out"; \
-			fail=$$((fail + 1)); \
-		fi; \
-	done; \
-	echo ""; \
-	echo "=== os-test WASM Build Report ==="; \
-	echo "Total:    $$total"; \
-	echo "Compiled: $$pass"; \
-	echo "Failed:   $$fail"; \
-	echo "Output:   $(OS_TEST_BUILD)/"; \
-	echo "=== Build complete ==="; \
-	if [ $$fail -gt 0 ]; then echo "ERROR: $$fail tests failed to compile" >&2; exit 1; fi
-
-os-test-native: fetch-os-test
-	@total=0; pass=0; fail=0; \
-	for src in $$(find $(OS_TEST_DIR) -name '*.c' -not -path '*/.expect/*' -not -path '*/misc/*' | sort); do \
-		rel=$${src#$(OS_TEST_DIR)/}; \
-		out=$(OS_TEST_NATIVE_BUILD)/$${rel%.c}; \
-		mkdir -p "$$(dirname "$$out")"; \
-		total=$$((total + 1)); \
-		extras=""; \
-		case "$$rel" in namespace/*) extras="$(OS_TEST_NS_MAIN)";; esac; \
-		if $(NATIVE_CC) $(OS_TEST_NATIVE_CFLAGS) -o "$$out" "$$src" $$extras $(OS_TEST_NATIVE_LDFLAGS) 2>/dev/null; then \
-			pass=$$((pass + 1)); \
-		else \
-			rm -f "$$out"; \
-			fail=$$((fail + 1)); \
-		fi; \
-	done; \
-	echo ""; \
-	echo "=== os-test Native Build Report ==="; \
-	echo "Total:    $$total"; \
-	echo "Compiled: $$pass"; \
-	echo "Failed:   $$fail"; \
-	echo "Output:   $(OS_TEST_NATIVE_BUILD)/"; \
-	echo "=== Build complete ==="
-
-# --- musl libc-test conformance suite (downloaded at build time) ---
-# MIT-licensed test suite from musl (Bytecode Alliance mirror)
-
-LIBC_TEST_VERSION := master
-LIBC_TEST_URL     := https://github.com/bytecodealliance/libc-test/archive/refs/heads/$(LIBC_TEST_VERSION).tar.gz
-LIBC_TEST_DIR     := libc-test
-
-.PHONY: fetch-libc-test clean-libc-test
-
-fetch-libc-test: $(LIBC_TEST_DIR)/src
-$(LIBC_TEST_DIR)/src:
-	@echo "Fetching musl libc-test $(LIBC_TEST_VERSION)..."
-	@mkdir -p $(LIBS_CACHE)
-	@curl -fSL "$(LIBC_TEST_URL)" -o "$(LIBS_CACHE)/libc-test.tar.gz"
-	@mkdir -p $(LIBC_TEST_DIR)
-	@tar -xzf "$(LIBS_CACHE)/libc-test.tar.gz" --strip-components=1 -C $(LIBC_TEST_DIR)
-	@echo "libc-test $(LIBC_TEST_VERSION) extracted to $(LIBC_TEST_DIR)/"
-	@echo "  src/ : $$(find $(LIBC_TEST_DIR)/src -name '*.c' 2>/dev/null | wc -l) test programs"
-
-clean-libc-test:
-	rm -rf $(LIBC_TEST_DIR) $(LIBS_CACHE)/libc-test.tar.gz
-
-# --- musl libc-test build targets ---
-# Compile functional/ and regression/ tests to WASM and native binaries.
-# Tests requiring fork/exec/signals/pthreads will fail to compile for WASM — that's expected.
-# The test.h framework (src/common/) is compiled into a static library first.
-
-LIBC_TEST_BUILD        := $(BUILD_DIR)/libc-test
-LIBC_TEST_NATIVE_BUILD := $(NATIVE_DIR)/libc-test
-LIBC_TEST_WASM_CFLAGS  := --target=wasm32-wasip1 --sysroot=$(SYSROOT) -O0 \
-                           -D_GNU_SOURCE -D_BSD_SOURCE -D_ALL_SOURCE -D_DEFAULT_SOURCE \
-                           -I$(LIBC_TEST_DIR)/src/common
-LIBC_TEST_WASM_LDFLAGS := -lc-printscan-long-double -lm
-LIBC_TEST_NATIVE_CFLAGS := -O0 -g \
-                            -D_GNU_SOURCE -D_BSD_SOURCE -D_ALL_SOURCE -D_DEFAULT_SOURCE \
-                            -I$(LIBC_TEST_DIR)/src/common
-LIBC_TEST_NATIVE_LDFLAGS := -lm
-ifeq ($(UNAME_S),Linux)
-  LIBC_TEST_NATIVE_LDFLAGS += -lpthread -lrt -lcrypt -lresolv -lutil -ldl
-endif
-ifeq ($(UNAME_S),Darwin)
-  LIBC_TEST_NATIVE_LDFLAGS += -lpthread
-endif
-
-# Test framework sources compiled alongside each test
-LIBC_TEST_COMMON_SRCS := $(LIBC_TEST_DIR)/src/common/print.c
-
-.PHONY: libc-test libc-test-native
-
-libc-test: wasi-sdk fetch-libc-test
-	@total=0; pass=0; fail=0; \
-	for src in $$(find $(LIBC_TEST_DIR)/src/functional $(LIBC_TEST_DIR)/src/regression -name '*.c' 2>/dev/null | sort); do \
-		rel=$${src#$(LIBC_TEST_DIR)/src/}; \
-		name=$${rel%.c}; \
-		out=$(LIBC_TEST_BUILD)/$$name; \
-		mkdir -p "$$(dirname "$$out")"; \
-		total=$$((total + 1)); \
-		if $(CC) $(LIBC_TEST_WASM_CFLAGS) -o "$$out" "$$src" $(LIBC_TEST_COMMON_SRCS) $(LIBC_TEST_WASM_LDFLAGS) 2>/dev/null; then \
-			pass=$$((pass + 1)); \
-		else \
-			rm -f "$$out"; \
-			fail=$$((fail + 1)); \
-		fi; \
-	done; \
-	echo ""; \
-	echo "=== libc-test WASM Build Report ==="; \
-	echo "Total:    $$total"; \
-	echo "Compiled: $$pass"; \
-	echo "Failed:   $$fail"; \
-	echo "Output:   $(LIBC_TEST_BUILD)/"; \
-	echo "=== Build complete ==="
-
-libc-test-native: fetch-libc-test
-	@total=0; pass=0; fail=0; \
-	for src in $$(find $(LIBC_TEST_DIR)/src/functional $(LIBC_TEST_DIR)/src/regression -name '*.c' 2>/dev/null | sort); do \
-		rel=$${src#$(LIBC_TEST_DIR)/src/}; \
-		out=$(LIBC_TEST_NATIVE_BUILD)/$${rel%.c}; \
-		mkdir -p "$$(dirname "$$out")"; \
-		total=$$((total + 1)); \
-		if $(NATIVE_CC) $(LIBC_TEST_NATIVE_CFLAGS) -o "$$out" "$$src" $(LIBC_TEST_COMMON_SRCS) $(LIBC_TEST_NATIVE_LDFLAGS) 2>/dev/null; then \
-			pass=$$((pass + 1)); \
-		else \
-			rm -f "$$out"; \
-			fail=$$((fail + 1)); \
-		fi; \
-	done; \
-	echo ""; \
-	echo "=== libc-test Native Build Report ==="; \
-	echo "Total:    $$total"; \
-	echo "Compiled: $$pass"; \
-	echo "Failed:   $$fail"; \
-	echo "Output:   $(LIBC_TEST_NATIVE_BUILD)/"; \
-	echo "=== Build complete ==="
-
-# --- Patched sysroot (delegates to patch-wasi-libc.sh) ---
-
-WASI_LIBC_PATCHES := $(wildcard ../patches/wasi-libc/*.patch)
-WASI_LIBC_OVERRIDES := $(wildcard ../patches/wasi-libc-overrides/*.c)
-LLVM_RUNTIME_PATCHES := $(wildcard patches/llvm-project/*.patch)
-
-$(PATCHED_SYSROOT)/lib/wasm32-wasi/libc.a: wasi-sdk ../scripts/patch-wasi-libc.sh scripts/build-llvm-runtimes.sh $(WASI_LIBC_PATCHES) $(WASI_LIBC_OVERRIDES) $(LLVM_RUNTIME_PATCHES)
-	../scripts/patch-wasi-libc.sh
-
-sysroot: $(PATCHED_SYSROOT)/lib/wasm32-wasi/libc.a
-
-# --- wasm-opt check ---
-
-wasm-opt-check:
-	@if [ "$(HAS_WASM_OPT)" = "1" ]; then \
-		echo "wasm-opt found: $$(wasm-opt --version | head -1)"; \
-	else \
-		echo "Warning: wasm-opt (binaryen) is not installed; skipping WASM optimization."; \
-	fi
-
-# --- Compile all C programs to WASM ---
-
-programs: wasi-sdk fetch-libs wasm-opt-check $(WASM_OUTPUTS)
-	@echo ""
-	@echo "=== C WASM Build Report ==="
-	@echo "Programs: $(words $(PROGRAM_REPORT_NAMES)) compiled"
-	@echo "Sysroot:  $(SYSROOT)"
-	@echo "Output:   $(BUILD_DIR)/"
-	@echo "=== Build complete ==="
-
-# Default rule: single-file programs
-$(BUILD_DIR)/%: programs/%.c $(WASI_SDK_DIR)/bin/clang
-	@mkdir -p $(BUILD_DIR)
-	$(CC) $(WASM_CFLAGS) -o $@.wasm $<
-	@if [ "$(HAS_WASM_OPT)" = "1" ]; then \
-		wasm-opt -O3 --strip-debug $@.wasm -o $@; \
-	else \
-		cp $@.wasm $@; \
-	fi
-	@rm -f $@.wasm
-
-# --- Per-program override rules for multi-file compilation ---
-# Add overrides here for programs that link vendored libraries.
-
-# json_parse: links cJSON library
-$(BUILD_DIR)/json_parse: programs/json_parse.c libs/cjson/cJSON.c $(WASI_SDK_DIR)/bin/clang
-	@mkdir -p $(BUILD_DIR)
-	$(CC) $(WASM_CFLAGS) -Ilibs/cjson -o $@.wasm programs/json_parse.c libs/cjson/cJSON.c
-	@if [ "$(HAS_WASM_OPT)" = "1" ]; then \
-		wasm-opt -O3 --strip-debug $@.wasm -o $@; \
-	else \
-		cp $@.wasm $@; \
-	fi
-	@rm -f $@.wasm
-
-$(NATIVE_DIR)/json_parse: programs/json_parse.c libs/cjson/cJSON.c
-	@mkdir -p $(NATIVE_DIR)
-	$(NATIVE_CC) $(NATIVE_CFLAGS) -Ilibs/cjson -o $@ programs/json_parse.c libs/cjson/cJSON.c
-
-# sqlite3_mem: links SQLite amalgamation
-SQLITE_COMMON  := -DSQLITE_OMIT_WAL -DSQLITE_OMIT_LOAD_EXTENSION -DSQLITE_THREADSAFE=0 \
-                  -DSQLITE_OMIT_LOCALTIME
-SQLITE_WASM    := -DSQLITE_OS_OTHER $(SQLITE_COMMON) -lwasi-emulated-signal -lwasi-emulated-mman
-SQLITE_NATIVE  := $(SQLITE_COMMON)
-
-$(BUILD_DIR)/sqlite3_mem: programs/sqlite3_mem.c libs/sqlite3/sqlite3.c $(WASI_SDK_DIR)/bin/clang
-	@mkdir -p $(BUILD_DIR)
-	$(CC) --target=wasm32-wasip1 --sysroot=$(SYSROOT) -Os -I include/ \
-	    $(SQLITE_WASM) -Ilibs/sqlite3 -Wl,--initial-memory=16777216 -o $@ \
-	    programs/sqlite3_mem.c libs/sqlite3/sqlite3.c
-
-$(NATIVE_DIR)/sqlite3_mem: programs/sqlite3_mem.c libs/sqlite3/sqlite3.c
-	@mkdir -p $(NATIVE_DIR)
-	$(NATIVE_CC) $(NATIVE_CFLAGS) $(SQLITE_NATIVE) -Ilibs/sqlite3 -o $@ \
-	    programs/sqlite3_mem.c libs/sqlite3/sqlite3.c -lm -lpthread
-
-# sqlite3_cli: full CLI, links SQLite amalgamation (installed as sqlite3)
-# Uses -Os (not -O2) + no wasm-opt — higher optimization breaks SQLite's
-# internal function pointer tables in WASM indirect call table.
-# Uses --initial-memory=16777216 (16MB) for SQLite's malloc requirements.
-$(BUILD_DIR)/sqlite3_cli: programs/sqlite3_cli.c libs/sqlite3/sqlite3.c $(WASI_SDK_DIR)/bin/clang
-	@mkdir -p $(BUILD_DIR)
-	$(CC) --target=wasm32-wasip1 --sysroot=$(SYSROOT) -Os -I include/ \
-	    $(SQLITE_WASM) -Ilibs/sqlite3 -Wl,--initial-memory=16777216 \
-	    -o $@ programs/sqlite3_cli.c libs/sqlite3/sqlite3.c
-
-$(NATIVE_DIR)/sqlite3_cli: programs/sqlite3_cli.c libs/sqlite3/sqlite3.c
-	@mkdir -p $(NATIVE_DIR)
-	$(NATIVE_CC) $(NATIVE_CFLAGS) $(SQLITE_NATIVE) -Ilibs/sqlite3 -o $@ \
-	    programs/sqlite3_cli.c libs/sqlite3/sqlite3.c -lm -lpthread
-
-# zip: links zlib + minizip
-ZLIB_SRCS   := libs/zlib/adler32.c libs/zlib/compress.c libs/zlib/crc32.c libs/zlib/deflate.c \
-               libs/zlib/infback.c libs/zlib/inffast.c libs/zlib/inflate.c libs/zlib/inftrees.c \
-               libs/zlib/trees.c libs/zlib/uncompr.c libs/zlib/zutil.c
-MINIZIP_SRCS := libs/minizip/ioapi.c libs/minizip/zip.c
-ZIP_INCLUDES := -Ilibs/zlib -Ilibs/minizip
-
-$(BUILD_DIR)/zip: programs/zip.c $(ZLIB_SRCS) $(MINIZIP_SRCS) $(WASI_SDK_DIR)/bin/clang
-	@mkdir -p $(BUILD_DIR)
-	$(CC) $(WASM_CFLAGS) $(ZIP_INCLUDES) -o $@.wasm programs/zip.c $(ZLIB_SRCS) $(MINIZIP_SRCS)
-	@if [ "$(HAS_WASM_OPT)" = "1" ]; then \
-		wasm-opt -O3 --strip-debug $@.wasm -o $@; \
-	else \
-		cp $@.wasm $@; \
-	fi
-	@rm -f $@.wasm
-
-$(NATIVE_DIR)/zip: programs/zip.c $(ZLIB_SRCS) $(MINIZIP_SRCS)
-	@mkdir -p $(NATIVE_DIR)
-	$(NATIVE_CC) $(NATIVE_CFLAGS) $(ZIP_INCLUDES) -o $@ programs/zip.c $(ZLIB_SRCS) $(MINIZIP_SRCS)
-
-# unzip: links zlib + minizip (unzip side)
-MINIZIP_UNZIP_SRCS := libs/minizip/ioapi.c libs/minizip/unzip.c
-
-$(BUILD_DIR)/unzip: programs/unzip.c $(ZLIB_SRCS) $(MINIZIP_UNZIP_SRCS) $(WASI_SDK_DIR)/bin/clang
-	@mkdir -p $(BUILD_DIR)
-	$(CC) $(WASM_CFLAGS) $(ZIP_INCLUDES) -o $@.wasm programs/unzip.c $(ZLIB_SRCS) $(MINIZIP_UNZIP_SRCS)
-	@if [ "$(HAS_WASM_OPT)" = "1" ]; then \
-		wasm-opt -O3 --strip-debug $@.wasm -o $@; \
-	else \
-		cp $@.wasm $@; \
-	fi
-	@rm -f $@.wasm
-
-$(NATIVE_DIR)/unzip: programs/unzip.c $(ZLIB_SRCS) $(MINIZIP_UNZIP_SRCS)
-	@mkdir -p $(NATIVE_DIR)
-	$(NATIVE_CC) $(NATIVE_CFLAGS) $(ZIP_INCLUDES) -o $@ programs/unzip.c $(ZLIB_SRCS) $(MINIZIP_UNZIP_SRCS)
-
-# curl_test: links libcurl (HTTP/HTTPS build for WASM via host_net + host_tls)
-CURL_SRCS := $(wildcard libs/curl/lib/*.c) $(wildcard libs/curl/lib/vauth/*.c) \
-             $(wildcard libs/curl/lib/vtls/*.c) $(wildcard libs/curl/lib/vquic/*.c) \
-             $(wildcard libs/curl/lib/vssh/*.c)
-CURL_INCLUDES := -Ilibs/curl/include -Ilibs/curl/lib -include libs/curl/lib/curl_setup.h -include libs/curl/lib/curl_printf.h
-CURL_LIB_DEFS := -DHAVE_CONFIG_H -DBUILDING_LIBCURL -D_WASI_EMULATED_SIGNAL -DHAVE_BASENAME -DHAVE_LIBGEN_H
-
-$(BUILD_DIR)/curl: scripts/build-curl-upstream.sh $(CURL_UPSTREAM_OVERLAY_FILES) $(WASI_SDK_DIR)/bin/clang
-	@mkdir -p $(BUILD_DIR)
-	bash scripts/build-curl-upstream.sh \
-		--version "$(CURL_RELEASE_VERSION)" \
-		--tag "$(CURL_RELEASE_TAG)" \
-		--url "$(CURL_RELEASE_URL)" \
-		--cache-dir "$(abspath $(LIBS_CACHE))" \
-		--build-dir "$(abspath $(CURL_UPSTREAM_BUILD_DIR))" \
-		--overlay-dir "$(abspath $(CURL_UPSTREAM_OVERLAY_DIR))" \
-		--cc "$(abspath $(CC)) --target=wasm32-wasip1 --sysroot=$(abspath $(SYSROOT))" \
-		--ar "$(abspath $(WASI_SDK_DIR)/bin/llvm-ar)" \
-		--ranlib "$(abspath $(WASI_SDK_DIR)/bin/llvm-ranlib)" \
-		--output "$(abspath $@)"
-
-# wget: minimal wget built on libcurl
-$(BUILD_DIR)/wget: programs/wget.c $(CURL_SRCS) $(WASI_SDK_DIR)/bin/clang
-	@mkdir -p $(BUILD_DIR)
-	$(CC) $(WASM_CFLAGS) $(CURL_LIB_DEFS) $(CURL_INCLUDES) \
-	    -lwasi-emulated-signal \
-	    -o $@.wasm programs/wget.c $(CURL_SRCS)
-	@if [ "$(HAS_WASM_OPT)" = "1" ]; then \
-		wasm-opt -O3 --strip-debug --all-features $@.wasm -o $@; \
-	else \
-		cp $@.wasm $@; \
-	fi
-	@rm -f $@.wasm
-
-$(NATIVE_DIR)/wget: programs/wget.c
-	@mkdir -p $(NATIVE_DIR)
-	$(NATIVE_CC) $(NATIVE_CFLAGS) -o $@ programs/wget.c -lcurl
-
-# duckdb: upstream DuckDB CLI built from source with our patched WASI/POSIX sysroot
-$(BUILD_DIR)/duckdb: libs/duckdb/CMakeLists.txt $(PATCHED_SYSROOT)/lib/wasm32-wasi/libc.a $(WASI_SDK_DIR)/bin/clang $(WASI_SDK_DIR)/bin/clang++ cmake/FindThreads.cmake scripts/build-duckdb.sh include/fcntl.h include/ifaddrs.h include/net/if.h include/sys/ioctl.h
-	@mkdir -p $(BUILD_DIR)
-	DUCKDB_SRC_DIR="$(abspath $(LIBS_DIR)/duckdb)" \
-	DUCKDB_BUILD_DIR="$(abspath $(BUILD_DIR)/duckdb-cmake)" \
-	DUCKDB_OUTPUT="$(abspath $(BUILD_DIR)/duckdb)" \
-	WASI_SDK_DIR="$(abspath $(WASI_SDK_DIR))" \
-	SYSROOT_DIR="$(abspath $(PATCHED_SYSROOT))" \
-	MODULE_PATH="$(abspath cmake)" \
-	OVERLAY_INCLUDE_DIR="$(abspath include)" \
-	DUCKDB_GIT_DESCRIBE="$(DUCKDB_GIT_DESCRIBE)" \
-	bash scripts/build-duckdb.sh
-
-# --- Compile all C programs to native binaries (for parity testing) ---
-
-native: $(NATIVE_OUTPUTS)
-	@echo ""
-	@echo "=== Native Build Report ==="
-	@echo "Programs: $(words $(NATIVE_PROG_NAMES)) compiled"
-	@echo "Output:   $(NATIVE_DIR)/"
-	@echo "=== Build complete ==="
-
-$(NATIVE_DIR)/%: programs/%.c
-	@mkdir -p $(NATIVE_DIR)
-	$(NATIVE_CC) $(NATIVE_CFLAGS) -o $@ $<
-
-# --- Install opted-in commands to COMMANDS_DIR ---
-
-install:
-	@if [ -z "$(COMMANDS)" ]; then \
-		echo "No C commands opted in for install (COMMANDS is empty)"; \
-		exit 0; \
-	fi
-	@if [ ! -d "$(BUILD_DIR)" ]; then \
-		echo "Error: $(BUILD_DIR) not found. Run 'make programs' first."; \
-		exit 1; \
-	fi
-	@mkdir -p $(COMMANDS_DIR)
-	@INSTALLED=0; \
-	for cmd in $(COMMANDS); do \
-		src="$$cmd"; \
-		case "$$cmd" in \
-			sqlite3) src="sqlite3_cli" ;; \
-		esac; \
-		if [ -f "$(BUILD_DIR)/$$src" ]; then \
-			cp "$(BUILD_DIR)/$$src" "$(COMMANDS_DIR)/$$cmd"; \
-			INSTALLED=$$((INSTALLED + 1)); \
-		else \
-			echo "Warning: $(BUILD_DIR)/$$src not found — skipping"; \
-		fi; \
-	done; \
-	echo "Installed $$INSTALLED C command(s) to $(COMMANDS_DIR)"
-	@# Create symlinks for git remote helpers
-	@if [ -f "$(COMMANDS_DIR)/git" ]; then \
-		ln -sf git "$(COMMANDS_DIR)/git-remote-http"; \
-		ln -sf git "$(COMMANDS_DIR)/git-remote-https"; \
-	fi
-
-# --- Clean ---
-
-clean:
-	rm -rf $(BUILD_DIR)
-
-# --- vim: real vim 9.2 -> wasm32-wasip1 against the full-OS libc ---
-#
-# vim compiles as a normal terminal program against the PATCHED sysroot plus a
-# small bridge library (vim/): termios via host_tty (raw-mode + winsize),
-# a termcap stub (builtin termcaps), and POSIX stubs the full-OS libc lacks.
-# Recipe recovered from the original hand build (see vim/ headers). The result
-# lands in $(BUILD_DIR)/vim; `make -C .. cmd/vim` installs it into the shared
-# commands dir. NOTE: run as `vim -n <file>` docs-wise is no longer needed —
-# swap files work; kept here for archaeology.
-VIM_VERSION ?= v9.2.0780
-VIM_SRC := libs/vim
-VIM_BRIDGE_SRC := vim
-VIM_BRIDGE_BUILD := $(BUILD_DIR)/vim-bridge
-VIM_BRIDGE_OBJS := $(VIM_BRIDGE_BUILD)/termios_bridge.o $(VIM_BRIDGE_BUILD)/termcap_stub.o $(VIM_BRIDGE_BUILD)/posix_stubs.o
-VIM_WCC := $(VIM_BRIDGE_BUILD)/wcc
-
-.PHONY: fetch-vim
-fetch-vim: $(VIM_SRC)/src/vim.h
-$(VIM_SRC)/src/vim.h:
-	git clone --depth 1 --branch $(VIM_VERSION) https://github.com/vim/vim $(VIM_SRC)
-
-$(VIM_BRIDGE_BUILD)/%.o: $(VIM_BRIDGE_SRC)/%.c $(WASI_SDK_DIR)/bin/clang sysroot
-	@mkdir -p $(VIM_BRIDGE_BUILD)
-	$(CC) --target=wasm32-wasip1 --sysroot=$(PATCHED_SYSROOT) -O2 -I $(VIM_BRIDGE_SRC) -c -o $@ $<
-
-$(VIM_BRIDGE_BUILD)/libtermcap.a: $(VIM_BRIDGE_OBJS)
-	$(WASI_SDK_DIR)/bin/llvm-ar rcs $@ $(VIM_BRIDGE_OBJS)
-
-# Wrapper compiler: every vim TU gets the sysroot, the bridge headers, and the
-# forced compat include, so vim's own Makefile needs no flag surgery.
-$(VIM_WCC): $(WASI_SDK_DIR)/bin/clang
-	@mkdir -p $(VIM_BRIDGE_BUILD)
-	@printf '#!/bin/sh\nexec %s --target=wasm32-wasip1 --sysroot=%s -O2 -I %s -include %s "$$@"\n' \
-		"$(abspath $(WASI_SDK_DIR)/bin/clang)" \
-		"$(abspath $(PATCHED_SYSROOT))" \
-		"$(abspath $(VIM_BRIDGE_SRC))" \
-		"$(abspath $(VIM_BRIDGE_SRC)/compat.h)" > $@
-	@chmod +x $@
-
-$(BUILD_DIR)/vim: fetch-vim $(VIM_BRIDGE_BUILD)/libtermcap.a $(VIM_WCC) wasm-opt-check
-	cd $(VIM_SRC)/src && \
-	CC="$(abspath $(VIM_WCC))" \
-	LDFLAGS="$(abspath $(VIM_BRIDGE_BUILD)/termios_bridge.o) -L$(abspath $(VIM_BRIDGE_BUILD))" \
-	vim_cv_toupper_broken=no \
-	vim_cv_terminfo=no \
-	vim_cv_tgetent=zero \
-	vim_cv_getcwd_broken=no \
-	vim_cv_stat_ignores_slash=no \
-	vim_cv_memmove_handles_overlap=yes \
-	vim_cv_bcopy_handles_overlap=yes \
-	vim_cv_memcpy_handles_overlap=yes \
-	vim_cv_tty_group=world \
-	vim_cv_tty_mode=0620 \
-	./configure --host=wasm32-wasip1 --build=$$(cc -dumpmachine 2>/dev/null || echo x86_64-pc-linux-gnu) \
-		--with-features=normal --with-tlib=termcap \
-		--disable-gui --without-x --disable-nls --disable-channel \
-		--disable-netbeans --disable-selinux --disable-gpm --disable-sysmouse \
-		--disable-icon-cache-update --disable-desktop-database-update
-	$(MAKE) -C $(VIM_SRC)/src vim
-	@mkdir -p $(BUILD_DIR)
-	@if [ "$(HAS_WASM_OPT)" = "1" ]; then \
-		wasm-opt -O3 --strip-debug --all-features $(VIM_SRC)/src/vim -o $(BUILD_DIR)/vim; \
-	else \
-		cp $(VIM_SRC)/src/vim $(BUILD_DIR)/vim; \
-	fi
-	@echo "Built $(BUILD_DIR)/vim"
diff --git a/registry/native/c/cmake/FindThreads.cmake b/registry/native/c/cmake/FindThreads.cmake
deleted file mode 100644
index 992033a66..000000000
--- a/registry/native/c/cmake/FindThreads.cmake
+++ /dev/null
@@ -1,15 +0,0 @@
-if(NOT TARGET Threads::Threads)
-  add_library(Threads::Threads INTERFACE IMPORTED)
-  set_target_properties(
-    Threads::Threads
-    PROPERTIES
-      INTERFACE_COMPILE_DEFINITIONS "_WASI_EMULATED_PTHREAD"
-      INTERFACE_LINK_LIBRARIES "wasi-emulated-pthread"
-  )
-endif()
-
-set(CMAKE_THREAD_LIBS_INIT "wasi-emulated-pthread" CACHE STRING "" FORCE)
-set(CMAKE_USE_PTHREADS_INIT 0 CACHE BOOL "" FORCE)
-set(CMAKE_USE_WIN32_THREADS_INIT 0 CACHE BOOL "" FORCE)
-set(Threads_FOUND TRUE)
-set(THREADS_FOUND TRUE)
diff --git a/registry/native/c/curl-upstream-overlay/lib/curl_setup.h b/registry/native/c/curl-upstream-overlay/lib/curl_setup.h
deleted file mode 100644
index 8edcf809e..000000000
--- a/registry/native/c/curl-upstream-overlay/lib/curl_setup.h
+++ /dev/null
@@ -1,1008 +0,0 @@
-#ifndef HEADER_CURL_SETUP_H
-#define HEADER_CURL_SETUP_H
-/***************************************************************************
- *                                  _   _ ____  _
- *  Project                     ___| | | |  _ \| |
- *                             / __| | | | |_) | |
- *                            | (__| |_| |  _ <| |___
- *                             \___|\___/|_| \_\_____|
- *
- * Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
- *
- * This software is licensed as described in the file COPYING, which
- * you should have received as part of this distribution. The terms
- * are also available at https://curl.se/docs/copyright.html.
- *
- * You may opt to use, copy, modify, merge, publish, distribute and/or sell
- * copies of the Software, and permit persons to whom the Software is
- * furnished to do so, under the terms of the COPYING file.
- *
- * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
- * KIND, either express or implied.
- *
- * SPDX-License-Identifier: curl
- *
- ***************************************************************************/
-
-#if defined(BUILDING_LIBCURL) && !defined(CURL_NO_OLDIES)
-#define CURL_NO_OLDIES
-#endif
-
-/* Tell "curl/curl.h" not to include "curl/mprintf.h" */
-#define CURL_SKIP_INCLUDE_MPRINTF
-
-/* FIXME: Delete this once the warnings have been fixed. */
-#if !defined(CURL_WARN_SIGN_CONVERSION)
-#if defined(__GNUC__) || defined(__clang__)
-#pragma GCC diagnostic ignored "-Wsign-conversion"
-#endif
-#endif
-
-/* Set default _WIN32_WINNT */
-#ifdef __MINGW32__
-#include <_mingw.h>
-#endif
-
-/* Workaround for Homebrew gcc 12.4.0, 13.3.0, 14.1.0, 14.2.0 (initial build)
-   that started advertising the `availability` attribute, which then gets used
-   by Apple SDK, but, in a way incompatible with gcc, resulting in misc errors
-   inside SDK headers, e.g.:
-     error: attributes should be specified before the declarator in a function
-            definition
-     error: expected ',' or '}' before
-   Followed by missing declarations.
-   Work it around by overriding the built-in feature-check macro used by the
-   headers to enable the problematic attributes. This makes the feature check
-   fail. Fixed in 14.2.0_1. Disable the workaround if the fix is detected. */
-#if defined(__APPLE__) && !defined(__clang__) && defined(__GNUC__) && \
-  defined(__has_attribute)
-#  if !defined(__has_feature)
-#    define availability curl_pp_attribute_disabled
-#  elif !__has_feature(attribute_availability)
-#    define availability curl_pp_attribute_disabled
-#  endif
-#endif
-
-#if defined(__APPLE__)
-#include <sys/types.h>
-#include <TargetConditionals.h>
-/* Fixup faulty target macro initialization in macOS SDK since v14.4 (as of
-   15.0 beta). The SDK target detection in `TargetConditionals.h` correctly
-   detects macOS, but fails to set the macro's old name `TARGET_OS_OSX`, then
-   continues to set it to a default value of 0. Other parts of the SDK still
-   rely on the old name, and with this inconsistency our builds fail due to
-   missing declarations. It happens when using mainline llvm older than v18.
-   Later versions fixed it by predefining these target macros, avoiding the
-   faulty dynamic detection. gcc is not affected (for now) because it lacks
-   the necessary dynamic detection features, so the SDK falls back to
-   a codepath that sets both the old and new macro to 1. */
-#if defined(TARGET_OS_MAC) && TARGET_OS_MAC && \
-  defined(TARGET_OS_OSX) && !TARGET_OS_OSX && \
-  (!defined(TARGET_OS_IPHONE) || !TARGET_OS_IPHONE) && \
-  (!defined(TARGET_OS_SIMULATOR) || !TARGET_OS_SIMULATOR)
-#undef TARGET_OS_OSX
-#define TARGET_OS_OSX TARGET_OS_MAC
-#endif
-#endif
-
-/*
- * Disable Visual Studio warnings:
- * 4127 "conditional expression is constant"
- */
-#ifdef _MSC_VER
-#pragma warning(disable:4127)
-#endif
-
-#ifdef _WIN32
-/*
- * Do not include unneeded stuff in Windows headers to avoid compiler
- * warnings and macro clashes.
- * Make sure to define this macro before including any Windows headers.
- */
-#  ifndef WIN32_LEAN_AND_MEAN
-#    define WIN32_LEAN_AND_MEAN
-#  endif
-#  ifndef NOGDI
-#    define NOGDI
-#  endif
-/* Detect Windows App environment which has a restricted access
- * to the Win32 APIs. */
-# if (defined(_WIN32_WINNT) && (_WIN32_WINNT >= 0x0602)) || \
-  defined(WINAPI_FAMILY)
-#  include <winapifamily.h>
-#  if WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_APP) &&  \
-     !WINAPI_FAMILY_PARTITION(WINAPI_PARTITION_DESKTOP)
-#    define CURL_WINDOWS_UWP
-#  endif
-# endif
-#endif
-
-/* Compatibility */
-#if defined(ENABLE_IPV6)
-#  define USE_IPV6 1
-#endif
-
-/*
- * Include configuration script results or hand-crafted
- * configuration file for platforms which lack config tool.
- */
-
-#ifdef HAVE_CONFIG_H
-
-#include "curl_config.h"
-
-#else /* HAVE_CONFIG_H */
-
-#ifdef _WIN32_WCE
-#  include "config-win32ce.h"
-#else
-#  ifdef _WIN32
-#    include "config-win32.h"
-#  endif
-#endif
-
-#ifdef macintosh
-#  include "config-mac.h"
-#endif
-
-#ifdef __riscos__
-#  include "config-riscos.h"
-#endif
-
-#ifdef __AMIGA__
-#  include "config-amigaos.h"
-#endif
-
-#ifdef __OS400__
-#  include "config-os400.h"
-#endif
-
-#ifdef __PLAN9__
-#  include "config-plan9.h"
-#endif
-
-#ifdef MSDOS
-#  include "config-dos.h"
-#endif
-
-#endif /* HAVE_CONFIG_H */
-
-/* ================================================================ */
-/* Definition of preprocessor macros/symbols which modify compiler  */
-/* behavior or generated code characteristics must be done here,   */
-/* as appropriate, before any system header file is included. It is */
-/* also possible to have them defined in the config file included   */
-/* before this point. As a result of all this we frown inclusion of */
-/* system header files in our config files, avoid this at any cost. */
-/* ================================================================ */
-
-/*
- * AIX 4.3 and newer needs _THREAD_SAFE defined to build
- * proper reentrant code. Others may also need it.
- */
-
-#ifdef NEED_THREAD_SAFE
-#  ifndef _THREAD_SAFE
-#    define _THREAD_SAFE
-#  endif
-#endif
-
-/*
- * Tru64 needs _REENTRANT set for a few function prototypes and
- * things to appear in the system header files. Unixware needs it
- * to build proper reentrant code. Others may also need it.
- */
-
-#ifdef NEED_REENTRANT
-#  ifndef _REENTRANT
-#    define _REENTRANT
-#  endif
-#endif
-
-/* Solaris needs this to get a POSIX-conformant getpwuid_r */
-#if defined(sun) || defined(__sun)
-#  ifndef _POSIX_PTHREAD_SEMANTICS
-#    define _POSIX_PTHREAD_SEMANTICS 1
-#  endif
-#endif
-
-/* ================================================================ */
-/*  If you need to include a system header file for your platform,  */
-/*  please, do it beyond the point further indicated in this file.  */
-/* ================================================================ */
-
-/* Give calloc a chance to be dragging in early, so we do not redefine */
-#if defined(USE_THREADS_POSIX) && defined(HAVE_PTHREAD_H)
-#  include <pthread.h>
-#endif
-
-/*
- * Disable other protocols when http is the only one desired.
- */
-
-#ifdef HTTP_ONLY
-#  ifndef CURL_DISABLE_DICT
-#    define CURL_DISABLE_DICT
-#  endif
-#  ifndef CURL_DISABLE_FILE
-#    define CURL_DISABLE_FILE
-#  endif
-#  ifndef CURL_DISABLE_FTP
-#    define CURL_DISABLE_FTP
-#  endif
-#  ifndef CURL_DISABLE_GOPHER
-#    define CURL_DISABLE_GOPHER
-#  endif
-#  ifndef CURL_DISABLE_IMAP
-#    define CURL_DISABLE_IMAP
-#  endif
-#  ifndef CURL_DISABLE_LDAP
-#    define CURL_DISABLE_LDAP
-#  endif
-#  ifndef CURL_DISABLE_LDAPS
-#    define CURL_DISABLE_LDAPS
-#  endif
-#  ifndef CURL_DISABLE_MQTT
-#    define CURL_DISABLE_MQTT
-#  endif
-#  ifndef CURL_DISABLE_POP3
-#    define CURL_DISABLE_POP3
-#  endif
-#  ifndef CURL_DISABLE_RTSP
-#    define CURL_DISABLE_RTSP
-#  endif
-#  ifndef CURL_DISABLE_SMB
-#    define CURL_DISABLE_SMB
-#  endif
-#  ifndef CURL_DISABLE_SMTP
-#    define CURL_DISABLE_SMTP
-#  endif
-#  ifndef CURL_DISABLE_TELNET
-#    define CURL_DISABLE_TELNET
-#  endif
-#  ifndef CURL_DISABLE_TFTP
-#    define CURL_DISABLE_TFTP
-#  endif
-#endif
-
-/*
- * When http is disabled rtsp is not supported.
- */
-
-#if defined(CURL_DISABLE_HTTP) && !defined(CURL_DISABLE_RTSP)
-#  define CURL_DISABLE_RTSP
-#endif
-
-/*
- * When HTTP is disabled, disable HTTP-only features
- */
-
-#if defined(CURL_DISABLE_HTTP)
-#  define CURL_DISABLE_ALTSVC 1
-#  define CURL_DISABLE_COOKIES 1
-#  define CURL_DISABLE_BASIC_AUTH 1
-#  define CURL_DISABLE_BEARER_AUTH 1
-#  define CURL_DISABLE_AWS 1
-#  define CURL_DISABLE_DOH 1
-#  define CURL_DISABLE_FORM_API 1
-#  define CURL_DISABLE_HEADERS_API 1
-#  define CURL_DISABLE_HSTS 1
-#  define CURL_DISABLE_HTTP_AUTH 1
-#endif
-
-/*
- * ECH requires HTTPSRR.
- */
-
-#if defined(USE_ECH) && !defined(USE_HTTPSRR)
-#  define USE_HTTPSRR
-#endif
-
-/* ================================================================ */
-/* No system header file shall be included in this file before this */
-/* point.                                                           */
-/* ================================================================ */
-
-/*
- * OS/400 setup file includes some system headers.
- */
-
-#ifdef __OS400__
-#  include "setup-os400.h"
-#endif
-
-/*
- * VMS setup file includes some system headers.
- */
-
-#ifdef __VMS
-#  include "setup-vms.h"
-#endif
-
-/*
- * Windows setup file includes some system headers.
- */
-
-#ifdef _WIN32
-#  include "setup-win32.h"
-#endif
-
-#include <curl/system.h>
-
-/* Helper macro to expand and concatenate two macros.
- * Direct macros concatenation does not work because macros
- * are not expanded before direct concatenation.
- */
-#define CURL_CONC_MACROS_(A,B) A ## B
-#define CURL_CONC_MACROS(A,B) CURL_CONC_MACROS_(A,B)
-
-/* curl uses its own printf() function internally. It understands the GNU
- * format. Use this format, so that is matches the GNU format attribute we
- * use with the MinGW compiler, allowing it to verify them at compile-time.
- */
-#ifdef  __MINGW32__
-#  undef CURL_FORMAT_CURL_OFF_T
-#  undef CURL_FORMAT_CURL_OFF_TU
-#  define CURL_FORMAT_CURL_OFF_T   "lld"
-#  define CURL_FORMAT_CURL_OFF_TU  "llu"
-#endif
-
-/* based on logic in "curl/mprintf.h" */
-
-#if (defined(__GNUC__) || defined(__clang__) ||                         \
-  defined(__IAR_SYSTEMS_ICC__)) &&                                      \
-  defined(__STDC_VERSION__) && (__STDC_VERSION__ >= 199901L) &&         \
-  !defined(CURL_NO_FMT_CHECKS)
-#if defined(__MINGW32__) && !defined(__clang__)
-#define CURL_PRINTF(fmt, arg) \
-  __attribute__((format(gnu_printf, fmt, arg)))
-#else
-#define CURL_PRINTF(fmt, arg) \
-  __attribute__((format(__printf__, fmt, arg)))
-#endif
-#else
-#define CURL_PRINTF(fmt, arg)
-#endif
-
-/* Override default printf mask check rules in "curl/mprintf.h" */
-#define CURL_TEMP_PRINTF CURL_PRINTF
-
-/* Workaround for mainline llvm v16 and earlier missing a built-in macro
-   expected by macOS SDK v14 / Xcode v15 (2023) and newer.
-   gcc (as of v14) is also missing it. */
-#if defined(__APPLE__) &&                                   \
-  ((!defined(__apple_build_version__) &&                    \
-    defined(__clang__) && __clang_major__ < 17) ||          \
-   (defined(__GNUC__) && __GNUC__ <= 14)) &&                \
-  defined(__ENVIRONMENT_MAC_OS_X_VERSION_MIN_REQUIRED__) && \
-  !defined(__ENVIRONMENT_OS_VERSION_MIN_REQUIRED__)
-#define __ENVIRONMENT_OS_VERSION_MIN_REQUIRED__             \
-  __ENVIRONMENT_MAC_OS_X_VERSION_MIN_REQUIRED__
-#endif
-
-/*
- * Use getaddrinfo to resolve the IPv4 address literal. If the current network
- * interface does not support IPv4, but supports IPv6, NAT64, and DNS64,
- * performing this task will result in a synthesized IPv6 address.
- */
-#if defined(__APPLE__) && !defined(USE_ARES)
-#define USE_RESOLVE_ON_IPS 1
-#  if TARGET_OS_MAC && !(defined(TARGET_OS_IPHONE) && TARGET_OS_IPHONE) && \
-     defined(USE_IPV6)
-#    define CURL_MACOS_CALL_COPYPROXIES 1
-#  endif
-#endif
-
-#ifdef USE_LWIPSOCK
-#  include <lwip/init.h>
-#  include <lwip/sockets.h>
-#  include <lwip/netdb.h>
-#endif
-
-#ifdef HAVE_EXTRA_STRICMP_H
-#  include <extra/stricmp.h>
-#endif
-
-#ifdef HAVE_EXTRA_STRDUP_H
-#  include <extra/strdup.h>
-#endif
-
-#ifdef __AMIGA__
-#  ifdef __amigaos4__
-#    define __USE_INLINE__
-     /* use our own resolver which uses runtime feature detection */
-#    define CURLRES_AMIGA
-     /* getaddrinfo() currently crashes bsdsocket.library, so disable */
-#    undef HAVE_GETADDRINFO
-#    if !(defined(__NEWLIB__) || \
-          (defined(__CLIB2__) && defined(__THREAD_SAFE)))
-       /* disable threaded resolver with clib2 - requires newlib or clib-ts */
-#      undef USE_THREADS_POSIX
-#    endif
-#  endif
-#  include <exec/types.h>
-#  include <exec/execbase.h>
-#  include <proto/exec.h>
-#  include <proto/dos.h>
-#  include <unistd.h>
-#  if defined(HAVE_PROTO_BSDSOCKET_H) && \
-    (!defined(__amigaos4__) || defined(USE_AMISSL))
-     /* use bsdsocket.library directly, instead of libc networking functions */
-#    define _SYS_MBUF_H /* m_len define clashes with curl */
-#    include <proto/bsdsocket.h>
-#    ifdef __amigaos4__
-       int Curl_amiga_select(int nfds, fd_set *readfds, fd_set *writefds,
-                             fd_set *errorfds, struct timeval *timeout);
-#      define select(a,b,c,d,e) Curl_amiga_select(a,b,c,d,e)
-#    else
-#      define select(a,b,c,d,e) WaitSelect(a,b,c,d,e,0)
-#    endif
-     /* must not use libc's fcntl() on bsdsocket.library sockfds! */
-#    undef HAVE_FCNTL
-#    undef HAVE_FCNTL_O_NONBLOCK
-#  else
-     /* use libc networking and hence close() and fnctl() */
-#    undef HAVE_CLOSESOCKET_CAMEL
-#    undef HAVE_IOCTLSOCKET_CAMEL
-#  endif
-/*
- * In clib2 arpa/inet.h warns that some prototypes may clash
- * with bsdsocket.library. This avoids the definition of those.
- */
-#  define __NO_NET_API
-#endif
-
-#include <stdio.h>
-#include <assert.h>
-
-#ifdef __TANDEM /* for ns*-tandem-nsk systems */
-# if ! defined __LP64
-#  include <floss.h> /* FLOSS is only used for 32-bit builds. */
-# endif
-#endif
-
-#ifndef STDC_HEADERS /* no standard C headers! */
-#include <curl/stdcheaders.h>
-#endif
-
-#ifdef _WIN32
-#define Curl_getpid() GetCurrentProcessId()
-#else
-#define Curl_getpid() getpid()
-#endif
-
-/*
- * Large file (>2Gb) support using Win32 functions.
- */
-
-#ifdef USE_WIN32_LARGE_FILES
-#  include <io.h>
-#  include <sys/types.h>
-#  include <sys/stat.h>
-#  undef  lseek
-#  define lseek(fdes,offset,whence)  _lseeki64(fdes, offset, whence)
-#  undef  fstat
-#  define fstat(fdes,stp)            _fstati64(fdes, stp)
-#  undef  stat
-#  define stat(fname,stp)            curlx_win32_stat(fname, stp)
-#  define struct_stat                struct _stati64
-#  define LSEEK_ERROR                (__int64)-1
-#  define open                       curlx_win32_open
-#  define fopen(fname,mode)          curlx_win32_fopen(fname, mode)
-   int curlx_win32_open(const char *filename, int oflag, ...);
-   int curlx_win32_stat(const char *path, struct_stat *buffer);
-   FILE *curlx_win32_fopen(const char *filename, const char *mode);
-#endif
-
-/*
- * Small file (<2Gb) support using Win32 functions.
- */
-
-#ifdef USE_WIN32_SMALL_FILES
-#  include <io.h>
-#  include <sys/types.h>
-#  include <sys/stat.h>
-#  ifndef _WIN32_WCE
-#    undef  lseek
-#    define lseek(fdes,offset,whence)  _lseek(fdes, (long)offset, whence)
-#    define fstat(fdes,stp)            _fstat(fdes, stp)
-#    define stat(fname,stp)            curlx_win32_stat(fname, stp)
-#    define struct_stat                struct _stat
-#    define open                       curlx_win32_open
-#    define fopen(fname,mode)          curlx_win32_fopen(fname, mode)
-     int curlx_win32_stat(const char *path, struct_stat *buffer);
-     int curlx_win32_open(const char *filename, int oflag, ...);
-     FILE *curlx_win32_fopen(const char *filename, const char *mode);
-#  endif
-#  define LSEEK_ERROR                (long)-1
-#endif
-
-#ifndef struct_stat
-#  define struct_stat struct stat
-#endif
-
-#ifndef LSEEK_ERROR
-#  define LSEEK_ERROR (off_t)-1
-#endif
-
-#ifndef SIZEOF_TIME_T
-/* assume default size of time_t to be 32 bits */
-#define SIZEOF_TIME_T 4
-#endif
-
-#ifndef SIZEOF_CURL_SOCKET_T
-/* configure and cmake check and set the define */
-#  ifdef _WIN64
-#    define SIZEOF_CURL_SOCKET_T 8
-#  else
-/* default guess */
-#    define SIZEOF_CURL_SOCKET_T 4
-#  endif
-#endif
-
-#if SIZEOF_CURL_SOCKET_T < 8
-#  define FMT_SOCKET_T "d"
-#elif defined(__MINGW32__)
-#  define FMT_SOCKET_T "zd"
-#else
-#  define FMT_SOCKET_T "qd"
-#endif
-
-/*
- * Default sizeof(off_t) in case it has not been defined in config file.
- */
-
-#ifndef SIZEOF_OFF_T
-#  if defined(__VMS) && !defined(__VAX)
-#    if defined(_LARGEFILE)
-#      define SIZEOF_OFF_T 8
-#    endif
-#  elif defined(__OS400__) && defined(__ILEC400__)
-#    if defined(_LARGE_FILES)
-#      define SIZEOF_OFF_T 8
-#    endif
-#  elif defined(__MVS__) && defined(__IBMC__)
-#    if defined(_LP64) || defined(_LARGE_FILES)
-#      define SIZEOF_OFF_T 8
-#    endif
-#  elif defined(__370__) && defined(__IBMC__)
-#    if defined(_LP64) || defined(_LARGE_FILES)
-#      define SIZEOF_OFF_T 8
-#    endif
-#  endif
-#  ifndef SIZEOF_OFF_T
-#    define SIZEOF_OFF_T 4
-#  endif
-#endif
-
-#if (SIZEOF_CURL_OFF_T < 8)
-#error "too small curl_off_t"
-#else
-   /* assume SIZEOF_CURL_OFF_T == 8 */
-#  define CURL_OFF_T_MAX CURL_OFF_T_C(0x7FFFFFFFFFFFFFFF)
-#endif
-#define CURL_OFF_T_MIN (-CURL_OFF_T_MAX - CURL_OFF_T_C(1))
-
-#if (SIZEOF_CURL_OFF_T != 8)
-#  error "curl_off_t must be exactly 64 bits"
-#else
-  typedef unsigned CURL_TYPEOF_CURL_OFF_T curl_uint64_t;
-  typedef CURL_TYPEOF_CURL_OFF_T  curl_int64_t;
-#  ifndef CURL_SUFFIX_CURL_OFF_TU
-#    error "CURL_SUFFIX_CURL_OFF_TU must be defined"
-#  endif
-#  define CURL_UINT64_SUFFIX  CURL_SUFFIX_CURL_OFF_TU
-#  define CURL_UINT64_C(val)  CURL_CONC_MACROS(val,CURL_UINT64_SUFFIX)
-# define FMT_PRId64  CURL_FORMAT_CURL_OFF_T
-# define FMT_PRIu64  CURL_FORMAT_CURL_OFF_TU
-#endif
-
-#define FMT_OFF_T CURL_FORMAT_CURL_OFF_T
-#define FMT_OFF_TU CURL_FORMAT_CURL_OFF_TU
-
-#if (SIZEOF_TIME_T == 4)
-#  ifdef HAVE_TIME_T_UNSIGNED
-#  define TIME_T_MAX UINT_MAX
-#  define TIME_T_MIN 0
-#  else
-#  define TIME_T_MAX INT_MAX
-#  define TIME_T_MIN INT_MIN
-#  endif
-#else
-#  ifdef HAVE_TIME_T_UNSIGNED
-#  define TIME_T_MAX 0xFFFFFFFFFFFFFFFF
-#  define TIME_T_MIN 0
-#  else
-#  define TIME_T_MAX 0x7FFFFFFFFFFFFFFF
-#  define TIME_T_MIN (-TIME_T_MAX - 1)
-#  endif
-#endif
-
-#ifndef SIZE_T_MAX
-/* some limits.h headers have this defined, some do not */
-#if defined(SIZEOF_SIZE_T) && (SIZEOF_SIZE_T > 4)
-#define SIZE_T_MAX 18446744073709551615U
-#else
-#define SIZE_T_MAX 4294967295U
-#endif
-#endif
-
-#ifndef SSIZE_T_MAX
-/* some limits.h headers have this defined, some do not */
-#if defined(SIZEOF_SIZE_T) && (SIZEOF_SIZE_T > 4)
-#define SSIZE_T_MAX 9223372036854775807
-#else
-#define SSIZE_T_MAX 2147483647
-#endif
-#endif
-
-/*
- * Arg 2 type for gethostname in case it has not been defined in config file.
- */
-
-#ifndef GETHOSTNAME_TYPE_ARG2
-#  ifdef USE_WINSOCK
-#    define GETHOSTNAME_TYPE_ARG2 int
-#  else
-#    define GETHOSTNAME_TYPE_ARG2 size_t
-#  endif
-#endif
-
-/* Below we define some functions. They should
-
-   4. set the SIGALRM signal timeout
-   5. set dir/file naming defines
-   */
-
-#ifdef _WIN32
-
-#  define DIR_CHAR      "\\"
-
-#else /* _WIN32 */
-
-#  ifdef MSDOS  /* Watt-32 */
-
-#    include <sys/ioctl.h>
-#    define select(n,r,w,x,t) select_s(n,r,w,x,t)
-#    define ioctl(x,y,z) ioctlsocket(x,y,(char *)(z))
-#    include <tcp.h>
-#    ifdef word
-#      undef word
-#    endif
-#    ifdef byte
-#      undef byte
-#    endif
-
-#  endif /* MSDOS */
-
-#  ifdef __minix
-     /* Minix 3 versions up to at least 3.1.3 are missing these prototypes */
-     extern char *strtok_r(char *s, const char *delim, char **last);
-     extern struct tm *gmtime_r(const time_t * const timep, struct tm *tmp);
-#  endif
-
-#  define DIR_CHAR      "/"
-
-#endif /* _WIN32 */
-
-/* ---------------------------------------------------------------- */
-/*             resolver specialty compile-time defines              */
-/*         CURLRES_* defines to use in the host*.c sources          */
-/* ---------------------------------------------------------------- */
-
-/*
- * MSVC threads support requires a multi-threaded runtime library.
- * _beginthreadex() is not available in single-threaded ones.
- */
-
-#if defined(_MSC_VER) && !defined(_MT)
-#  undef USE_THREADS_POSIX
-#  undef USE_THREADS_WIN32
-#endif
-
-/*
- * Mutually exclusive CURLRES_* definitions.
- */
-
-#if defined(USE_IPV6) && defined(HAVE_GETADDRINFO)
-#  define CURLRES_IPV6
-#elif defined(USE_IPV6) && (defined(_WIN32) || defined(__CYGWIN__))
-/* assume on Windows that IPv6 without getaddrinfo is a broken build */
-#  error "Unexpected build: IPv6 is enabled but getaddrinfo was not found."
-#else
-#  define CURLRES_IPV4
-#endif
-
-#ifdef USE_ARES
-#  define CURLRES_ASYNCH
-#  define CURLRES_ARES
-/* now undef the stock libc functions just to avoid them being used */
-#  undef HAVE_GETADDRINFO
-#  undef HAVE_FREEADDRINFO
-#elif defined(USE_THREADS_POSIX) || defined(USE_THREADS_WIN32)
-#  define CURLRES_ASYNCH
-#  define CURLRES_THREADED
-#else
-#  define CURLRES_SYNCH
-#endif
-
-/* ---------------------------------------------------------------- */
-
-#if defined(HAVE_LIBIDN2) && defined(HAVE_IDN2_H) && \
-  !defined(USE_WIN32_IDN) && !defined(USE_APPLE_IDN)
-/* The lib and header are present */
-#define USE_LIBIDN2
-#endif
-
-#if defined(USE_LIBIDN2) && (defined(USE_WIN32_IDN) || defined(USE_APPLE_IDN))
-#error "libidn2 cannot be enabled with WinIDN or AppleIDN, choose one."
-#endif
-
-#define LIBIDN_REQUIRED_VERSION "0.4.1"
-
-#if defined(USE_GNUTLS) || defined(USE_OPENSSL) || defined(USE_MBEDTLS) || \
-  defined(USE_WOLFSSL) || defined(USE_SCHANNEL) || defined(USE_SECTRANSP) || \
-  defined(USE_BEARSSL) || defined(USE_RUSTLS) || defined(USE_WASI_TLS)
-#define USE_SSL    /* SSL support has been enabled */
-#endif
-
-#if defined(USE_WOLFSSL) && defined(USE_GNUTLS)
-/* Avoid defining unprefixed wolfSSL SHA macros colliding with nettle ones */
-#define NO_OLD_WC_NAMES
-#endif
-
-/* Single point where USE_SPNEGO definition might be defined */
-#if !defined(CURL_DISABLE_NEGOTIATE_AUTH) && \
-    (defined(HAVE_GSSAPI) || defined(USE_WINDOWS_SSPI))
-#define USE_SPNEGO
-#endif
-
-/* Single point where USE_KERBEROS5 definition might be defined */
-#if !defined(CURL_DISABLE_KERBEROS_AUTH) && \
-    (defined(HAVE_GSSAPI) || defined(USE_WINDOWS_SSPI))
-#define USE_KERBEROS5
-#endif
-
-/* Single point where USE_NTLM definition might be defined */
-#if !defined(CURL_DISABLE_NTLM)
-#  if defined(USE_OPENSSL) || defined(USE_MBEDTLS) ||                   \
-  defined(USE_GNUTLS) || defined(USE_SECTRANSP) ||                      \
-  defined(USE_OS400CRYPTO) || defined(USE_WIN32_CRYPTO) ||              \
-  (defined(USE_WOLFSSL) && defined(HAVE_WOLFSSL_DES_ECB_ENCRYPT))
-#    define USE_CURL_NTLM_CORE
-#  endif
-#  if defined(USE_CURL_NTLM_CORE) || defined(USE_WINDOWS_SSPI)
-#    define USE_NTLM
-#  endif
-#endif
-
-#ifdef CURL_WANTS_CA_BUNDLE_ENV
-#error "No longer supported. Set CURLOPT_CAINFO at runtime instead."
-#endif
-
-#if defined(USE_LIBSSH2) || defined(USE_LIBSSH) || defined(USE_WOLFSSH)
-#define USE_SSH
-#endif
-
-/*
- * Provide a mechanism to silence picky compilers, such as gcc 4.6+.
- * Parameters should of course normally not be unused, but for example when
- * we have multiple implementations of the same interface it may happen.
- */
-
-#if defined(__GNUC__) && ((__GNUC__ >= 3) || \
-  ((__GNUC__ == 2) && defined(__GNUC_MINOR__) && (__GNUC_MINOR__ >= 7)))
-#  define UNUSED_PARAM __attribute__((__unused__))
-#  define WARN_UNUSED_RESULT __attribute__((warn_unused_result))
-#elif defined(__IAR_SYSTEMS_ICC__)
-#  define UNUSED_PARAM __attribute__((__unused__))
-#  if (__VER__ >= 9040001)
-#    define WARN_UNUSED_RESULT __attribute__((warn_unused_result))
-#  else
-#    define WARN_UNUSED_RESULT
-#  endif
-#else
-#  define UNUSED_PARAM /* NOTHING */
-#  define WARN_UNUSED_RESULT
-#endif
-
-/* noreturn attribute */
-
-#if !defined(CURL_NORETURN)
-#if (defined(__GNUC__) && (__GNUC__ >= 3)) || defined(__clang__) || \
-  defined(__IAR_SYSTEMS_ICC__)
-#  define CURL_NORETURN  __attribute__((__noreturn__))
-#elif defined(_MSC_VER) && (_MSC_VER >= 1200)
-#  define CURL_NORETURN  __declspec(noreturn)
-#else
-#  define CURL_NORETURN
-#endif
-#endif
-
-/* fallthrough attribute */
-
-#if !defined(FALLTHROUGH)
-#if (defined(__GNUC__) && __GNUC__ >= 7) || \
-    (defined(__clang__) && __clang_major__ >= 10)
-#  define FALLTHROUGH()  __attribute__((fallthrough))
-#else
-#  define FALLTHROUGH()  do {} while (0)
-#endif
-#endif
-
-/*
- * Include macros and defines that should only be processed once.
- */
-
-#ifndef HEADER_CURL_SETUP_ONCE_H
-#include "curl_setup_once.h"
-#endif
-
-/*
- * Definition of our NOP statement Object-like macro
- */
-
-#ifndef Curl_nop_stmt
-#  define Curl_nop_stmt do { } while(0)
-#endif
-
-/*
- * Ensure that Winsock and lwIP TCP/IP stacks are not mixed.
- */
-
-#if defined(__LWIP_OPT_H__) || defined(LWIP_HDR_OPT_H)
-#  if defined(SOCKET) || defined(USE_WINSOCK)
-#    error "Winsock and lwIP TCP/IP stack definitions shall not coexist!"
-#  endif
-#endif
-
-/*
- * shutdown() flags for systems that do not define them
- */
-
-#ifndef SHUT_RD
-#define SHUT_RD 0x00
-#endif
-
-#ifndef SHUT_WR
-#define SHUT_WR 0x01
-#endif
-
-#ifndef SHUT_RDWR
-#define SHUT_RDWR 0x02
-#endif
-
-/* Define S_ISREG if not defined by system headers, e.g. MSVC */
-#if !defined(S_ISREG) && defined(S_IFMT) && defined(S_IFREG)
-#define S_ISREG(m) (((m) & S_IFMT) == S_IFREG)
-#endif
-
-/* Define S_ISDIR if not defined by system headers, e.g. MSVC */
-#if !defined(S_ISDIR) && defined(S_IFMT) && defined(S_IFDIR)
-#define S_ISDIR(m) (((m) & S_IFMT) == S_IFDIR)
-#endif
-
-/* In Windows the default file mode is text but an application can override it.
-Therefore we specify it explicitly. https://github.com/curl/curl/pull/258
-*/
-#if defined(_WIN32) || defined(MSDOS)
-#define FOPEN_READTEXT "rt"
-#define FOPEN_WRITETEXT "wt"
-#define FOPEN_APPENDTEXT "at"
-#elif defined(__CYGWIN__)
-/* Cygwin has specific behavior we need to address when _WIN32 is not defined.
-https://cygwin.com/cygwin-ug-net/using-textbinary.html
-For write we want our output to have line endings of LF and be compatible with
-other Cygwin utilities. For read we want to handle input that may have line
-endings either CRLF or LF so 't' is appropriate.
-*/
-#define FOPEN_READTEXT "rt"
-#define FOPEN_WRITETEXT "w"
-#define FOPEN_APPENDTEXT "a"
-#else
-#define FOPEN_READTEXT "r"
-#define FOPEN_WRITETEXT "w"
-#define FOPEN_APPENDTEXT "a"
-#endif
-
-/* for systems that do not detect this in configure */
-#ifndef CURL_SA_FAMILY_T
-#  if defined(HAVE_SA_FAMILY_T)
-#    define CURL_SA_FAMILY_T sa_family_t
-#  elif defined(HAVE_ADDRESS_FAMILY)
-#    define CURL_SA_FAMILY_T ADDRESS_FAMILY
-#  else
-/* use a sensible default */
-#    define CURL_SA_FAMILY_T unsigned short
-#  endif
-#endif
-
-/* Some convenience macros to get the larger/smaller value out of two given.
-   We prefix with CURL to prevent name collisions. */
-#define CURLMAX(x,y) ((x)>(y)?(x):(y))
-#define CURLMIN(x,y) ((x)<(y)?(x):(y))
-
-/* A convenience macro to provide both the string literal and the length of
-   the string literal in one go, useful for functions that take "string,len"
-   as their argument */
-#define STRCONST(x) x,sizeof(x)-1
-
-/* Some versions of the Android SDK is missing the declaration */
-#if defined(HAVE_GETPWUID_R) && defined(HAVE_DECL_GETPWUID_R_MISSING)
-struct passwd;
-int getpwuid_r(uid_t uid, struct passwd *pwd, char *buf,
-               size_t buflen, struct passwd **result);
-#endif
-
-#ifdef UNITTESTS
-#define UNITTEST
-#else
-#define UNITTEST static
-#endif
-
-/* Hyper supports HTTP2 also, but Curl's integration with Hyper does not */
-#if defined(USE_NGHTTP2)
-#define USE_HTTP2
-#endif
-
-#if (defined(USE_NGTCP2) && defined(USE_NGHTTP3)) || \
-    (defined(USE_OPENSSL_QUIC) && defined(USE_NGHTTP3)) || \
-    defined(USE_QUICHE) || defined(USE_MSH3)
-
-#ifdef CURL_WITH_MULTI_SSL
-#error "Multi-SSL combined with QUIC is not supported"
-#endif
-
-#define USE_HTTP3
-#endif
-
-/* Certain Windows implementations are not aligned with what curl expects,
-   so always use the local one on this platform. E.g. the mingw-w64
-   implementation can return wrong results for non-ASCII inputs. */
-#if defined(HAVE_BASENAME) && defined(_WIN32)
-#undef HAVE_BASENAME
-#endif
-
-#if defined(USE_UNIX_SOCKETS) && defined(_WIN32)
-#  if !defined(UNIX_PATH_MAX)
-     /* Replicating logic present in afunix.h
-        (distributed with newer Windows 10 SDK versions only) */
-#    define UNIX_PATH_MAX 108
-     /* !checksrc! disable TYPEDEFSTRUCT 1 */
-     typedef struct sockaddr_un {
-       ADDRESS_FAMILY sun_family;
-       char sun_path[UNIX_PATH_MAX];
-     } SOCKADDR_UN, *PSOCKADDR_UN;
-#    define WIN32_SOCKADDR_UN
-#  endif
-#endif
-
-/* OpenSSLv3 marks DES, MD5 and ENGINE functions deprecated but we have no
-   replacements (yet) so tell the compiler to not warn for them. */
-#ifdef USE_OPENSSL
-#define OPENSSL_SUPPRESS_DEPRECATED
-#endif
-
-#if defined(inline)
-  /* 'inline' is defined as macro and assumed to be correct */
-  /* No need for 'inline' replacement */
-#elif defined(__cplusplus)
-  /* The code is compiled with C++ compiler.
-     C++ always supports 'inline'. */
-  /* No need for 'inline' replacement */
-#elif defined(__STDC_VERSION__) && __STDC_VERSION__ >= 199901
-  /* C99 (and later) supports 'inline' keyword */
-  /* No need for 'inline' replacement */
-#elif defined(__GNUC__) && __GNUC__ >= 3
-  /* GCC supports '__inline__' as an extension */
-#  define inline __inline__
-#elif defined(_MSC_VER) && _MSC_VER >= 1400
-  /* MSC supports '__inline' from VS 2005 (or even earlier) */
-#  define inline __inline
-#else
-  /* Probably 'inline' is not supported by compiler.
-     Define to the empty string to be on the safe side. */
-#  define inline /* empty */
-#endif
-
-#endif /* HEADER_CURL_SETUP_H */
diff --git a/registry/native/c/curl-upstream-overlay/lib/hostip.c b/registry/native/c/curl-upstream-overlay/lib/hostip.c
deleted file mode 100644
index f858d5023..000000000
--- a/registry/native/c/curl-upstream-overlay/lib/hostip.c
+++ /dev/null
@@ -1,1490 +0,0 @@
-/***************************************************************************
- *                                  _   _ ____  _
- *  Project                     ___| | | |  _ \| |
- *                             / __| | | | |_) | |
- *                            | (__| |_| |  _ <| |___
- *                             \___|\___/|_| \_\_____|
- *
- * Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
- *
- * This software is licensed as described in the file COPYING, which
- * you should have received as part of this distribution. The terms
- * are also available at https://curl.se/docs/copyright.html.
- *
- * You may opt to use, copy, modify, merge, publish, distribute and/or sell
- * copies of the Software, and permit persons to whom the Software is
- * furnished to do so, under the terms of the COPYING file.
- *
- * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
- * KIND, either express or implied.
- *
- * SPDX-License-Identifier: curl
- *
- ***************************************************************************/
-
-#include "curl_setup.h"
-
-#ifdef HAVE_NETINET_IN_H
-#include <netinet/in.h>
-#endif
-#ifdef HAVE_NETINET_IN6_H
-#include <netinet/in6.h>
-#endif
-#ifdef HAVE_NETDB_H
-#include <netdb.h>
-#endif
-#ifdef HAVE_ARPA_INET_H
-#include <arpa/inet.h>
-#endif
-#ifdef __VMS
-#include <in.h>
-#include <inet.h>
-#endif
-
-#ifndef __wasi__
-#include <setjmp.h>
-#include <signal.h>
-#endif
-
-#include "urldata.h"
-#include "sendf.h"
-#include "hostip.h"
-#include "hash.h"
-#include "rand.h"
-#include "share.h"
-#include "url.h"
-#include "inet_ntop.h"
-#include "inet_pton.h"
-#include "multiif.h"
-#include "doh.h"
-#include "warnless.h"
-#include "strcase.h"
-#include "easy_lock.h"
-/* The last 3 #include files should be in this order */
-#include "curl_printf.h"
-#include "curl_memory.h"
-#include "memdebug.h"
-
-#if defined(CURLRES_SYNCH) &&                   \
-  defined(HAVE_ALARM) &&                        \
-  defined(SIGALRM) &&                           \
-  defined(HAVE_SIGSETJMP) &&                    \
-  defined(GLOBAL_INIT_IS_THREADSAFE)
-/* alarm-based timeouts can only be used with all the dependencies satisfied */
-#define USE_ALARM_TIMEOUT
-#endif
-
-#define MAX_HOSTCACHE_LEN (255 + 7) /* max FQDN + colon + port number + zero */
-
-#define MAX_DNS_CACHE_SIZE 29999
-
-/*
- * hostip.c explained
- * ==================
- *
- * The main COMPILE-TIME DEFINES to keep in mind when reading the host*.c
- * source file are these:
- *
- * CURLRES_IPV6 - this host has getaddrinfo() and family, and thus we use
- * that. The host may not be able to resolve IPv6, but we do not really have to
- * take that into account. Hosts that are not IPv6-enabled have CURLRES_IPV4
- * defined.
- *
- * CURLRES_ARES - is defined if libcurl is built to use c-ares for
- * asynchronous name resolves. This can be Windows or *nix.
- *
- * CURLRES_THREADED - is defined if libcurl is built to run under (native)
- * Windows, and then the name resolve will be done in a new thread, and the
- * supported API will be the same as for ares-builds.
- *
- * If any of the two previous are defined, CURLRES_ASYNCH is defined too. If
- * libcurl is not built to use an asynchronous resolver, CURLRES_SYNCH is
- * defined.
- *
- * The host*.c sources files are split up like this:
- *
- * hostip.c   - method-independent resolver functions and utility functions
- * hostasyn.c - functions for asynchronous name resolves
- * hostsyn.c  - functions for synchronous name resolves
- * hostip4.c  - IPv4 specific functions
- * hostip6.c  - IPv6 specific functions
- *
- * The two asynchronous name resolver backends are implemented in:
- * asyn-ares.c   - functions for ares-using name resolves
- * asyn-thread.c - functions for threaded name resolves
-
- * The hostip.h is the united header file for all this. It defines the
- * CURLRES_* defines based on the config*.h and curl_setup.h defines.
- */
-
-static void hostcache_unlink_entry(void *entry);
-
-#ifndef CURL_DISABLE_VERBOSE_STRINGS
-static void show_resolve_info(struct Curl_easy *data,
-                              struct Curl_dns_entry *dns);
-#else
-#define show_resolve_info(x,y) Curl_nop_stmt
-#endif
-
-/*
- * Curl_printable_address() stores a printable version of the 1st address
- * given in the 'ai' argument. The result will be stored in the buf that is
- * bufsize bytes big.
- *
- * If the conversion fails, the target buffer is empty.
- */
-void Curl_printable_address(const struct Curl_addrinfo *ai, char *buf,
-                            size_t bufsize)
-{
-  DEBUGASSERT(bufsize);
-  buf[0] = 0;
-
-  switch(ai->ai_family) {
-  case AF_INET: {
-    const struct sockaddr_in *sa4 = (const void *)ai->ai_addr;
-    const struct in_addr *ipaddr4 = &sa4->sin_addr;
-    (void)Curl_inet_ntop(ai->ai_family, (const void *)ipaddr4, buf, bufsize);
-    break;
-  }
-#ifdef USE_IPV6
-  case AF_INET6: {
-    const struct sockaddr_in6 *sa6 = (const void *)ai->ai_addr;
-    const struct in6_addr *ipaddr6 = &sa6->sin6_addr;
-    (void)Curl_inet_ntop(ai->ai_family, (const void *)ipaddr6, buf, bufsize);
-    break;
-  }
-#endif
-  default:
-    break;
-  }
-}
-
-/*
- * Create a hostcache id string for the provided host + port, to be used by
- * the DNS caching. Without alloc. Return length of the id string.
- */
-static size_t
-create_hostcache_id(const char *name,
-                    size_t nlen, /* 0 or actual name length */
-                    int port, char *ptr, size_t buflen)
-{
-  size_t len = nlen ? nlen : strlen(name);
-  DEBUGASSERT(buflen >= MAX_HOSTCACHE_LEN);
-  if(len > (buflen - 7))
-    len = buflen - 7;
-  /* store and lower case the name */
-  Curl_strntolower(ptr, name, len);
-  return msnprintf(&ptr[len], 7, ":%u", port) + len;
-}
-
-struct hostcache_prune_data {
-  time_t now;
-  time_t oldest; /* oldest time in cache not pruned. */
-  int max_age_sec;
-};
-
-/*
- * This function is set as a callback to be called for every entry in the DNS
- * cache when we want to prune old unused entries.
- *
- * Returning non-zero means remove the entry, return 0 to keep it in the
- * cache.
- */
-static int
-hostcache_entry_is_stale(void *datap, void *hc)
-{
-  struct hostcache_prune_data *prune =
-    (struct hostcache_prune_data *) datap;
-  struct Curl_dns_entry *dns = (struct Curl_dns_entry *) hc;
-
-  if(dns->timestamp) {
-    /* age in seconds */
-    time_t age = prune->now - dns->timestamp;
-    if(age >= prune->max_age_sec)
-      return TRUE;
-    if(age > prune->oldest)
-      prune->oldest = age;
-  }
-  return FALSE;
-}
-
-/*
- * Prune the DNS cache. This assumes that a lock has already been taken.
- * Returns the 'age' of the oldest still kept entry.
- */
-static time_t
-hostcache_prune(struct Curl_hash *hostcache, int cache_timeout,
-                time_t now)
-{
-  struct hostcache_prune_data user;
-
-  user.max_age_sec = cache_timeout;
-  user.now = now;
-  user.oldest = 0;
-
-  Curl_hash_clean_with_criterium(hostcache,
-                                 (void *) &user,
-                                 hostcache_entry_is_stale);
-
-  return user.oldest;
-}
-
-/*
- * Library-wide function for pruning the DNS cache. This function takes and
- * returns the appropriate locks.
- */
-void Curl_hostcache_prune(struct Curl_easy *data)
-{
-  time_t now;
-  /* the timeout may be set -1 (forever) */
-  int timeout = data->set.dns_cache_timeout;
-
-  if(!data->dns.hostcache)
-    /* NULL hostcache means we cannot do it */
-    return;
-
-  if(data->share)
-    Curl_share_lock(data, CURL_LOCK_DATA_DNS, CURL_LOCK_ACCESS_SINGLE);
-
-  now = time(NULL);
-
-  do {
-    /* Remove outdated and unused entries from the hostcache */
-    time_t oldest = hostcache_prune(data->dns.hostcache, timeout, now);
-
-    if(oldest < INT_MAX)
-      timeout = (int)oldest; /* we know it fits */
-    else
-      timeout = INT_MAX - 1;
-
-    /* if the cache size is still too big, use the oldest age as new
-       prune limit */
-  } while(timeout &&
-          (Curl_hash_count(data->dns.hostcache) > MAX_DNS_CACHE_SIZE));
-
-  if(data->share)
-    Curl_share_unlock(data, CURL_LOCK_DATA_DNS);
-}
-
-#ifdef USE_ALARM_TIMEOUT
-/* Beware this is a global and unique instance. This is used to store the
-   return address that we can jump back to from inside a signal handler. This
-   is not thread-safe stuff. */
-static sigjmp_buf curl_jmpenv;
-static curl_simple_lock curl_jmpenv_lock;
-#endif
-
-/* lookup address, returns entry if found and not stale */
-static struct Curl_dns_entry *fetch_addr(struct Curl_easy *data,
-                                         const char *hostname,
-                                         int port)
-{
-  struct Curl_dns_entry *dns = NULL;
-  char entry_id[MAX_HOSTCACHE_LEN];
-
-  /* Create an entry id, based upon the hostname and port */
-  size_t entry_len = create_hostcache_id(hostname, 0, port,
-                                         entry_id, sizeof(entry_id));
-
-  /* See if it is already in our dns cache */
-  dns = Curl_hash_pick(data->dns.hostcache, entry_id, entry_len + 1);
-
-  /* No entry found in cache, check if we might have a wildcard entry */
-  if(!dns && data->state.wildcard_resolve) {
-    entry_len = create_hostcache_id("*", 1, port, entry_id, sizeof(entry_id));
-
-    /* See if it is already in our dns cache */
-    dns = Curl_hash_pick(data->dns.hostcache, entry_id, entry_len + 1);
-  }
-
-  if(dns && (data->set.dns_cache_timeout != -1)) {
-    /* See whether the returned entry is stale. Done before we release lock */
-    struct hostcache_prune_data user;
-
-    user.now = time(NULL);
-    user.max_age_sec = data->set.dns_cache_timeout;
-    user.oldest = 0;
-
-    if(hostcache_entry_is_stale(&user, dns)) {
-      infof(data, "Hostname in DNS cache was stale, zapped");
-      dns = NULL; /* the memory deallocation is being handled by the hash */
-      Curl_hash_delete(data->dns.hostcache, entry_id, entry_len + 1);
-    }
-  }
-
-  /* See if the returned entry matches the required resolve mode */
-  if(dns && data->conn->ip_version != CURL_IPRESOLVE_WHATEVER) {
-    int pf = PF_INET;
-    bool found = FALSE;
-    struct Curl_addrinfo *addr = dns->addr;
-
-#ifdef PF_INET6
-    if(data->conn->ip_version == CURL_IPRESOLVE_V6)
-      pf = PF_INET6;
-#endif
-
-    while(addr) {
-      if(addr->ai_family == pf) {
-        found = TRUE;
-        break;
-      }
-      addr = addr->ai_next;
-    }
-
-    if(!found) {
-      infof(data, "Hostname in DNS cache does not have needed family, zapped");
-      dns = NULL; /* the memory deallocation is being handled by the hash */
-      Curl_hash_delete(data->dns.hostcache, entry_id, entry_len + 1);
-    }
-  }
-  return dns;
-}
-
-/*
- * Curl_fetch_addr() fetches a 'Curl_dns_entry' already in the DNS cache.
- *
- * Curl_resolv() checks initially and multi_runsingle() checks each time
- * it discovers the handle in the state WAITRESOLVE whether the hostname
- * has already been resolved and the address has already been stored in
- * the DNS cache. This short circuits waiting for a lot of pending
- * lookups for the same hostname requested by different handles.
- *
- * Returns the Curl_dns_entry entry pointer or NULL if not in the cache.
- *
- * The returned data *MUST* be "released" with Curl_resolv_unlink() after
- * use, or we will leak memory!
- */
-struct Curl_dns_entry *
-Curl_fetch_addr(struct Curl_easy *data,
-                const char *hostname,
-                int port)
-{
-  struct Curl_dns_entry *dns = NULL;
-
-  if(data->share)
-    Curl_share_lock(data, CURL_LOCK_DATA_DNS, CURL_LOCK_ACCESS_SINGLE);
-
-  dns = fetch_addr(data, hostname, port);
-
-  if(dns)
-    dns->refcount++; /* we use it! */
-
-  if(data->share)
-    Curl_share_unlock(data, CURL_LOCK_DATA_DNS);
-
-  return dns;
-}
-
-#ifndef CURL_DISABLE_SHUFFLE_DNS
-/*
- * Return # of addresses in a Curl_addrinfo struct
- */
-static int num_addresses(const struct Curl_addrinfo *addr)
-{
-  int i = 0;
-  while(addr) {
-    addr = addr->ai_next;
-    i++;
-  }
-  return i;
-}
-
-UNITTEST CURLcode Curl_shuffle_addr(struct Curl_easy *data,
-                                    struct Curl_addrinfo **addr);
-/*
- * Curl_shuffle_addr() shuffles the order of addresses in a 'Curl_addrinfo'
- * struct by re-linking its linked list.
- *
- * The addr argument should be the address of a pointer to the head node of a
- * `Curl_addrinfo` list and it will be modified to point to the new head after
- * shuffling.
- *
- * Not declared static only to make it easy to use in a unit test!
- *
- * @unittest: 1608
- */
-UNITTEST CURLcode Curl_shuffle_addr(struct Curl_easy *data,
-                                    struct Curl_addrinfo **addr)
-{
-  CURLcode result = CURLE_OK;
-  const int num_addrs = num_addresses(*addr);
-
-  if(num_addrs > 1) {
-    struct Curl_addrinfo **nodes;
-    infof(data, "Shuffling %i addresses", num_addrs);
-
-    nodes = malloc(num_addrs*sizeof(*nodes));
-    if(nodes) {
-      int i;
-      unsigned int *rnd;
-      const size_t rnd_size = num_addrs * sizeof(*rnd);
-
-      /* build a plain array of Curl_addrinfo pointers */
-      nodes[0] = *addr;
-      for(i = 1; i < num_addrs; i++) {
-        nodes[i] = nodes[i-1]->ai_next;
-      }
-
-      rnd = malloc(rnd_size);
-      if(rnd) {
-        /* Fisher-Yates shuffle */
-        if(Curl_rand(data, (unsigned char *)rnd, rnd_size) == CURLE_OK) {
-          struct Curl_addrinfo *swap_tmp;
-          for(i = num_addrs - 1; i > 0; i--) {
-            swap_tmp = nodes[rnd[i] % (unsigned int)(i + 1)];
-            nodes[rnd[i] % (unsigned int)(i + 1)] = nodes[i];
-            nodes[i] = swap_tmp;
-          }
-
-          /* relink list in the new order */
-          for(i = 1; i < num_addrs; i++) {
-            nodes[i-1]->ai_next = nodes[i];
-          }
-
-          nodes[num_addrs-1]->ai_next = NULL;
-          *addr = nodes[0];
-        }
-        free(rnd);
-      }
-      else
-        result = CURLE_OUT_OF_MEMORY;
-      free(nodes);
-    }
-    else
-      result = CURLE_OUT_OF_MEMORY;
-  }
-  return result;
-}
-#endif
-
-/*
- * Curl_cache_addr() stores a 'Curl_addrinfo' struct in the DNS cache.
- *
- * When calling Curl_resolv() has resulted in a response with a returned
- * address, we call this function to store the information in the dns
- * cache etc
- *
- * Returns the Curl_dns_entry entry pointer or NULL if the storage failed.
- */
-struct Curl_dns_entry *
-Curl_cache_addr(struct Curl_easy *data,
-                struct Curl_addrinfo *addr,
-                const char *hostname,
-                size_t hostlen, /* length or zero */
-                int port,
-                bool permanent)
-{
-  char entry_id[MAX_HOSTCACHE_LEN];
-  size_t entry_len;
-  struct Curl_dns_entry *dns;
-  struct Curl_dns_entry *dns2;
-
-#ifndef CURL_DISABLE_SHUFFLE_DNS
-  /* shuffle addresses if requested */
-  if(data->set.dns_shuffle_addresses) {
-    CURLcode result = Curl_shuffle_addr(data, &addr);
-    if(result)
-      return NULL;
-  }
-#endif
-  if(!hostlen)
-    hostlen = strlen(hostname);
-
-  /* Create a new cache entry */
-  dns = calloc(1, sizeof(struct Curl_dns_entry) + hostlen);
-  if(!dns) {
-    return NULL;
-  }
-
-  /* Create an entry id, based upon the hostname and port */
-  entry_len = create_hostcache_id(hostname, hostlen, port,
-                                  entry_id, sizeof(entry_id));
-
-  dns->refcount = 1; /* the cache has the first reference */
-  dns->addr = addr; /* this is the address(es) */
-  if(permanent)
-    dns->timestamp = 0; /* an entry that never goes stale */
-  else {
-    dns->timestamp = time(NULL);
-    if(dns->timestamp == 0)
-      dns->timestamp = 1;
-  }
-  dns->hostport = port;
-  if(hostlen)
-    memcpy(dns->hostname, hostname, hostlen);
-
-  /* Store the resolved data in our DNS cache. */
-  dns2 = Curl_hash_add(data->dns.hostcache, entry_id, entry_len + 1,
-                       (void *)dns);
-  if(!dns2) {
-    free(dns);
-    return NULL;
-  }
-
-  dns = dns2;
-  dns->refcount++;         /* mark entry as in-use */
-  return dns;
-}
-
-#ifdef USE_IPV6
-/* return a static IPv6 ::1 for the name */
-static struct Curl_addrinfo *get_localhost6(int port, const char *name)
-{
-  struct Curl_addrinfo *ca;
-  const size_t ss_size = sizeof(struct sockaddr_in6);
-  const size_t hostlen = strlen(name);
-  struct sockaddr_in6 sa6;
-  unsigned char ipv6[16];
-  unsigned short port16 = (unsigned short)(port & 0xffff);
-  ca = calloc(1, sizeof(struct Curl_addrinfo) + ss_size + hostlen + 1);
-  if(!ca)
-    return NULL;
-
-  sa6.sin6_family = AF_INET6;
-  sa6.sin6_port = htons(port16);
-  sa6.sin6_flowinfo = 0;
-  sa6.sin6_scope_id = 0;
-
-  (void)Curl_inet_pton(AF_INET6, "::1", ipv6);
-  memcpy(&sa6.sin6_addr, ipv6, sizeof(ipv6));
-
-  ca->ai_flags     = 0;
-  ca->ai_family    = AF_INET6;
-  ca->ai_socktype  = SOCK_STREAM;
-  ca->ai_protocol  = IPPROTO_TCP;
-  ca->ai_addrlen   = (curl_socklen_t)ss_size;
-  ca->ai_next      = NULL;
-  ca->ai_addr = (void *)((char *)ca + sizeof(struct Curl_addrinfo));
-  memcpy(ca->ai_addr, &sa6, ss_size);
-  ca->ai_canonname = (char *)ca->ai_addr + ss_size;
-  strcpy(ca->ai_canonname, name);
-  return ca;
-}
-#else
-#define get_localhost6(x,y) NULL
-#endif
-
-/* return a static IPv4 127.0.0.1 for the given name */
-static struct Curl_addrinfo *get_localhost(int port, const char *name)
-{
-  struct Curl_addrinfo *ca;
-  struct Curl_addrinfo *ca6;
-  const size_t ss_size = sizeof(struct sockaddr_in);
-  const size_t hostlen = strlen(name);
-  struct sockaddr_in sa;
-  unsigned int ipv4;
-  unsigned short port16 = (unsigned short)(port & 0xffff);
-
-  /* memset to clear the sa.sin_zero field */
-  memset(&sa, 0, sizeof(sa));
-  sa.sin_family = AF_INET;
-  sa.sin_port = htons(port16);
-  if(Curl_inet_pton(AF_INET, "127.0.0.1", (char *)&ipv4) < 1)
-    return NULL;
-  memcpy(&sa.sin_addr, &ipv4, sizeof(ipv4));
-
-  ca = calloc(1, sizeof(struct Curl_addrinfo) + ss_size + hostlen + 1);
-  if(!ca)
-    return NULL;
-  ca->ai_flags     = 0;
-  ca->ai_family    = AF_INET;
-  ca->ai_socktype  = SOCK_STREAM;
-  ca->ai_protocol  = IPPROTO_TCP;
-  ca->ai_addrlen   = (curl_socklen_t)ss_size;
-  ca->ai_addr = (void *)((char *)ca + sizeof(struct Curl_addrinfo));
-  memcpy(ca->ai_addr, &sa, ss_size);
-  ca->ai_canonname = (char *)ca->ai_addr + ss_size;
-  strcpy(ca->ai_canonname, name);
-
-  ca6 = get_localhost6(port, name);
-  if(!ca6)
-    return ca;
-  ca6->ai_next = ca;
-  return ca6;
-}
-
-#ifdef USE_IPV6
-/*
- * Curl_ipv6works() returns TRUE if IPv6 seems to work.
- */
-bool Curl_ipv6works(struct Curl_easy *data)
-{
-  if(data) {
-    /* the nature of most system is that IPv6 status does not come and go
-       during a program's lifetime so we only probe the first time and then we
-       have the info kept for fast reuse */
-    DEBUGASSERT(data);
-    DEBUGASSERT(data->multi);
-    if(data->multi->ipv6_up == IPV6_UNKNOWN) {
-      bool works = Curl_ipv6works(NULL);
-      data->multi->ipv6_up = works ? IPV6_WORKS : IPV6_DEAD;
-    }
-    return data->multi->ipv6_up == IPV6_WORKS;
-  }
-  else {
-    int ipv6_works = -1;
-    /* probe to see if we have a working IPv6 stack */
-    curl_socket_t s = socket(PF_INET6, SOCK_DGRAM, 0);
-    if(s == CURL_SOCKET_BAD)
-      /* an IPv6 address was requested but we cannot get/use one */
-      ipv6_works = 0;
-    else {
-      ipv6_works = 1;
-      sclose(s);
-    }
-    return (ipv6_works > 0);
-  }
-}
-#endif /* USE_IPV6 */
-
-/*
- * Curl_host_is_ipnum() returns TRUE if the given string is a numerical IPv4
- * (or IPv6 if supported) address.
- */
-bool Curl_host_is_ipnum(const char *hostname)
-{
-  struct in_addr in;
-#ifdef USE_IPV6
-  struct in6_addr in6;
-#endif
-  if(Curl_inet_pton(AF_INET, hostname, &in) > 0
-#ifdef USE_IPV6
-     || Curl_inet_pton(AF_INET6, hostname, &in6) > 0
-#endif
-    )
-    return TRUE;
-  return FALSE;
-}
-
-
-/* return TRUE if 'part' is a case insensitive tail of 'full' */
-static bool tailmatch(const char *full, const char *part)
-{
-  size_t plen = strlen(part);
-  size_t flen = strlen(full);
-  if(plen > flen)
-    return FALSE;
-  return strncasecompare(part, &full[flen - plen], plen);
-}
-
-/*
- * Curl_resolv() is the main name resolve function within libcurl. It resolves
- * a name and returns a pointer to the entry in the 'entry' argument (if one
- * is provided). This function might return immediately if we are using asynch
- * resolves. See the return codes.
- *
- * The cache entry we return will get its 'inuse' counter increased when this
- * function is used. You MUST call Curl_resolv_unlink() later (when you are
- * done using this struct) to decrease the reference counter again.
- *
- * Return codes:
- *
- * CURLRESOLV_ERROR   (-1) = error, no pointer
- * CURLRESOLV_RESOLVED (0) = OK, pointer provided
- * CURLRESOLV_PENDING  (1) = waiting for response, no pointer
- */
-
-enum resolve_t Curl_resolv(struct Curl_easy *data,
-                           const char *hostname,
-                           int port,
-                           bool allowDOH,
-                           struct Curl_dns_entry **entry)
-{
-  struct Curl_dns_entry *dns = NULL;
-  CURLcode result;
-  enum resolve_t rc = CURLRESOLV_ERROR; /* default to failure */
-  struct connectdata *conn = data->conn;
-  /* We should intentionally error and not resolve .onion TLDs */
-  size_t hostname_len = strlen(hostname);
-  if(hostname_len >= 7 &&
-     (curl_strequal(&hostname[hostname_len - 6], ".onion") ||
-      curl_strequal(&hostname[hostname_len - 7], ".onion."))) {
-    failf(data, "Not resolving .onion address (RFC 7686)");
-    return CURLRESOLV_ERROR;
-  }
-  *entry = NULL;
-#ifndef CURL_DISABLE_DOH
-  conn->bits.doh = FALSE; /* default is not */
-#else
-  (void)allowDOH;
-#endif
-
-  if(data->share)
-    Curl_share_lock(data, CURL_LOCK_DATA_DNS, CURL_LOCK_ACCESS_SINGLE);
-
-  dns = fetch_addr(data, hostname, port);
-
-  if(dns) {
-    infof(data, "Hostname %s was found in DNS cache", hostname);
-    dns->refcount++; /* we use it! */
-    rc = CURLRESOLV_RESOLVED;
-  }
-
-  if(data->share)
-    Curl_share_unlock(data, CURL_LOCK_DATA_DNS);
-
-  if(!dns) {
-    /* The entry was not in the cache. Resolve it to IP address */
-
-    struct Curl_addrinfo *addr = NULL;
-    int respwait = 0;
-#if !defined(CURL_DISABLE_DOH) || !defined(USE_RESOLVE_ON_IPS)
-    struct in_addr in;
-#endif
-#ifndef CURL_DISABLE_DOH
-#ifndef USE_RESOLVE_ON_IPS
-    const
-#endif
-      bool ipnum = FALSE;
-#endif
-
-    /* notify the resolver start callback */
-    if(data->set.resolver_start) {
-      int st;
-      Curl_set_in_callback(data, TRUE);
-      st = data->set.resolver_start(
-#ifdef USE_CURL_ASYNC
-        data->state.async.resolver,
-#else
-        NULL,
-#endif
-        NULL,
-        data->set.resolver_start_client);
-      Curl_set_in_callback(data, FALSE);
-      if(st)
-        return CURLRESOLV_ERROR;
-    }
-
-#ifndef USE_RESOLVE_ON_IPS
-    /* First check if this is an IPv4 address string */
-    if(Curl_inet_pton(AF_INET, hostname, &in) > 0) {
-      /* This is a dotted IP address 123.123.123.123-style */
-      addr = Curl_ip2addr(AF_INET, &in, hostname, port);
-      if(!addr)
-        return CURLRESOLV_ERROR;
-    }
-#ifdef USE_IPV6
-    else {
-      struct in6_addr in6;
-      /* check if this is an IPv6 address string */
-      if(Curl_inet_pton(AF_INET6, hostname, &in6) > 0) {
-        /* This is an IPv6 address literal */
-        addr = Curl_ip2addr(AF_INET6, &in6, hostname, port);
-        if(!addr)
-          return CURLRESOLV_ERROR;
-      }
-    }
-#endif /* USE_IPV6 */
-
-#else /* if USE_RESOLVE_ON_IPS */
-#ifndef CURL_DISABLE_DOH
-    /* First check if this is an IPv4 address string */
-    if(Curl_inet_pton(AF_INET, hostname, &in) > 0)
-      /* This is a dotted IP address 123.123.123.123-style */
-      ipnum = TRUE;
-#ifdef USE_IPV6
-    else {
-      struct in6_addr in6;
-      /* check if this is an IPv6 address string */
-      if(Curl_inet_pton(AF_INET6, hostname, &in6) > 0)
-        /* This is an IPv6 address literal */
-        ipnum = TRUE;
-    }
-#endif /* USE_IPV6 */
-#endif /* CURL_DISABLE_DOH */
-
-#endif /* !USE_RESOLVE_ON_IPS */
-
-    if(!addr) {
-      if(conn->ip_version == CURL_IPRESOLVE_V6 && !Curl_ipv6works(data))
-        return CURLRESOLV_ERROR;
-
-      if(strcasecompare(hostname, "localhost") ||
-         strcasecompare(hostname, "localhost.") ||
-         tailmatch(hostname, ".localhost") ||
-         tailmatch(hostname, ".localhost."))
-        addr = get_localhost(port, hostname);
-#ifndef CURL_DISABLE_DOH
-      else if(allowDOH && data->set.doh && !ipnum)
-        addr = Curl_doh(data, hostname, port, &respwait);
-#endif
-      else {
-        /* Check what IP specifics the app has requested and if we can provide
-         * it. If not, bail out. */
-        if(!Curl_ipvalid(data, conn))
-          return CURLRESOLV_ERROR;
-        /* If Curl_getaddrinfo() returns NULL, 'respwait' might be set to a
-           non-zero value indicating that we need to wait for the response to
-           the resolve call */
-        addr = Curl_getaddrinfo(data, hostname, port, &respwait);
-      }
-    }
-    if(!addr) {
-      if(respwait) {
-        /* the response to our resolve call will come asynchronously at
-           a later time, good or bad */
-        /* First, check that we have not received the info by now */
-        result = Curl_resolv_check(data, &dns);
-        if(result) /* error detected */
-          return CURLRESOLV_ERROR;
-        if(dns)
-          rc = CURLRESOLV_RESOLVED; /* pointer provided */
-        else
-          rc = CURLRESOLV_PENDING; /* no info yet */
-      }
-    }
-    else {
-      if(data->share)
-        Curl_share_lock(data, CURL_LOCK_DATA_DNS, CURL_LOCK_ACCESS_SINGLE);
-
-      /* we got a response, store it in the cache */
-      dns = Curl_cache_addr(data, addr, hostname, 0, port, FALSE);
-
-      if(data->share)
-        Curl_share_unlock(data, CURL_LOCK_DATA_DNS);
-
-      if(!dns)
-        /* returned failure, bail out nicely */
-        Curl_freeaddrinfo(addr);
-      else {
-        rc = CURLRESOLV_RESOLVED;
-        show_resolve_info(data, dns);
-      }
-    }
-  }
-
-  *entry = dns;
-
-  return rc;
-}
-
-#ifdef USE_ALARM_TIMEOUT
-/*
- * This signal handler jumps back into the main libcurl code and continues
- * execution. This effectively causes the remainder of the application to run
- * within a signal handler which is nonportable and could lead to problems.
- */
-CURL_NORETURN static
-void alarmfunc(int sig)
-{
-  (void)sig;
-  siglongjmp(curl_jmpenv, 1);
-}
-#endif /* USE_ALARM_TIMEOUT */
-
-/*
- * Curl_resolv_timeout() is the same as Curl_resolv() but specifies a
- * timeout. This function might return immediately if we are using asynch
- * resolves. See the return codes.
- *
- * The cache entry we return will get its 'inuse' counter increased when this
- * function is used. You MUST call Curl_resolv_unlink() later (when you are
- * done using this struct) to decrease the reference counter again.
- *
- * If built with a synchronous resolver and use of signals is not
- * disabled by the application, then a nonzero timeout will cause a
- * timeout after the specified number of milliseconds. Otherwise, timeout
- * is ignored.
- *
- * Return codes:
- *
- * CURLRESOLV_TIMEDOUT(-2) = warning, time too short or previous alarm expired
- * CURLRESOLV_ERROR   (-1) = error, no pointer
- * CURLRESOLV_RESOLVED (0) = OK, pointer provided
- * CURLRESOLV_PENDING  (1) = waiting for response, no pointer
- */
-
-enum resolve_t Curl_resolv_timeout(struct Curl_easy *data,
-                                   const char *hostname,
-                                   int port,
-                                   struct Curl_dns_entry **entry,
-                                   timediff_t timeoutms)
-{
-#ifdef USE_ALARM_TIMEOUT
-#ifdef HAVE_SIGACTION
-  struct sigaction keep_sigact;   /* store the old struct here */
-  volatile bool keep_copysig = FALSE; /* whether old sigact has been saved */
-  struct sigaction sigact;
-#else
-#ifdef HAVE_SIGNAL
-  void (*keep_sigact)(int);       /* store the old handler here */
-#endif /* HAVE_SIGNAL */
-#endif /* HAVE_SIGACTION */
-  volatile long timeout;
-  volatile unsigned int prev_alarm = 0;
-#endif /* USE_ALARM_TIMEOUT */
-  enum resolve_t rc;
-
-  *entry = NULL;
-
-  if(timeoutms < 0)
-    /* got an already expired timeout */
-    return CURLRESOLV_TIMEDOUT;
-
-#ifdef USE_ALARM_TIMEOUT
-  if(data->set.no_signal)
-    /* Ignore the timeout when signals are disabled */
-    timeout = 0;
-  else
-    timeout = (timeoutms > LONG_MAX) ? LONG_MAX : (long)timeoutms;
-
-  if(!timeout)
-    /* USE_ALARM_TIMEOUT defined, but no timeout actually requested */
-    return Curl_resolv(data, hostname, port, TRUE, entry);
-
-  if(timeout < 1000) {
-    /* The alarm() function only provides integer second resolution, so if
-       we want to wait less than one second we must bail out already now. */
-    failf(data,
-        "remaining timeout of %ld too small to resolve via SIGALRM method",
-        timeout);
-    return CURLRESOLV_TIMEDOUT;
-  }
-  /* This allows us to time-out from the name resolver, as the timeout
-     will generate a signal and we will siglongjmp() from that here.
-     This technique has problems (see alarmfunc).
-     This should be the last thing we do before calling Curl_resolv(),
-     as otherwise we would have to worry about variables that get modified
-     before we invoke Curl_resolv() (and thus use "volatile"). */
-  curl_simple_lock_lock(&curl_jmpenv_lock);
-
-  if(sigsetjmp(curl_jmpenv, 1)) {
-    /* this is coming from a siglongjmp() after an alarm signal */
-    failf(data, "name lookup timed out");
-    rc = CURLRESOLV_ERROR;
-    goto clean_up;
-  }
-  else {
-    /*************************************************************
-     * Set signal handler to catch SIGALRM
-     * Store the old value to be able to set it back later!
-     *************************************************************/
-#ifdef HAVE_SIGACTION
-    sigaction(SIGALRM, NULL, &sigact);
-    keep_sigact = sigact;
-    keep_copysig = TRUE; /* yes, we have a copy */
-    sigact.sa_handler = alarmfunc;
-#ifdef SA_RESTART
-    /* HP-UX does not have SA_RESTART but defaults to that behavior! */
-    sigact.sa_flags &= ~SA_RESTART;
-#endif
-    /* now set the new struct */
-    sigaction(SIGALRM, &sigact, NULL);
-#else /* HAVE_SIGACTION */
-    /* no sigaction(), revert to the much lamer signal() */
-#ifdef HAVE_SIGNAL
-    keep_sigact = signal(SIGALRM, alarmfunc);
-#endif
-#endif /* HAVE_SIGACTION */
-
-    /* alarm() makes a signal get sent when the timeout fires off, and that
-       will abort system calls */
-    prev_alarm = alarm(curlx_sltoui(timeout/1000L));
-  }
-
-#else
-#ifndef CURLRES_ASYNCH
-  if(timeoutms)
-    infof(data, "timeout on name lookup is not supported");
-#else
-  (void)timeoutms; /* timeoutms not used with an async resolver */
-#endif
-#endif /* USE_ALARM_TIMEOUT */
-
-  /* Perform the actual name resolution. This might be interrupted by an
-   * alarm if it takes too long.
-   */
-  rc = Curl_resolv(data, hostname, port, TRUE, entry);
-
-#ifdef USE_ALARM_TIMEOUT
-clean_up:
-
-  if(!prev_alarm)
-    /* deactivate a possibly active alarm before uninstalling the handler */
-    alarm(0);
-
-#ifdef HAVE_SIGACTION
-  if(keep_copysig) {
-    /* we got a struct as it looked before, now put that one back nice
-       and clean */
-    sigaction(SIGALRM, &keep_sigact, NULL); /* put it back */
-  }
-#else
-#ifdef HAVE_SIGNAL
-  /* restore the previous SIGALRM handler */
-  signal(SIGALRM, keep_sigact);
-#endif
-#endif /* HAVE_SIGACTION */
-
-  curl_simple_lock_unlock(&curl_jmpenv_lock);
-
-  /* switch back the alarm() to either zero or to what it was before minus
-     the time we spent until now! */
-  if(prev_alarm) {
-    /* there was an alarm() set before us, now put it back */
-    timediff_t elapsed_secs = Curl_timediff(Curl_now(),
-                                            data->conn->created) / 1000;
-
-    /* the alarm period is counted in even number of seconds */
-    unsigned long alarm_set = (unsigned long)(prev_alarm - elapsed_secs);
-
-    if(!alarm_set ||
-       ((alarm_set >= 0x80000000) && (prev_alarm < 0x80000000)) ) {
-      /* if the alarm time-left reached zero or turned "negative" (counted
-         with unsigned values), we should fire off a SIGALRM here, but we
-         will not, and zero would be to switch it off so we never set it to
-         less than 1! */
-      alarm(1);
-      rc = CURLRESOLV_TIMEDOUT;
-      failf(data, "Previous alarm fired off");
-    }
-    else
-      alarm((unsigned int)alarm_set);
-  }
-#endif /* USE_ALARM_TIMEOUT */
-
-  return rc;
-}
-
-/*
- * Curl_resolv_unlink() releases a reference to the given cached DNS entry.
- * When the reference count reaches 0, the entry is destroyed. It is important
- * that only one unlink is made for each Curl_resolv() call.
- *
- * May be called with 'data' == NULL for global cache.
- */
-void Curl_resolv_unlink(struct Curl_easy *data, struct Curl_dns_entry **pdns)
-{
-  struct Curl_dns_entry *dns = *pdns;
-  *pdns = NULL;
-  if(data && data->share)
-    Curl_share_lock(data, CURL_LOCK_DATA_DNS, CURL_LOCK_ACCESS_SINGLE);
-
-  hostcache_unlink_entry(dns);
-
-  if(data && data->share)
-    Curl_share_unlock(data, CURL_LOCK_DATA_DNS);
-}
-
-/*
- * File-internal: release cache dns entry reference, free if inuse drops to 0
- */
-static void hostcache_unlink_entry(void *entry)
-{
-  struct Curl_dns_entry *dns = (struct Curl_dns_entry *) entry;
-  DEBUGASSERT(dns && (dns->refcount > 0));
-
-  dns->refcount--;
-  if(dns->refcount == 0) {
-    Curl_freeaddrinfo(dns->addr);
-#ifdef USE_HTTPSRR
-    if(dns->hinfo) {
-      if(dns->hinfo->target)
-        free(dns->hinfo->target);
-      if(dns->hinfo->alpns)
-        free(dns->hinfo->alpns);
-      if(dns->hinfo->ipv4hints)
-        free(dns->hinfo->ipv4hints);
-      if(dns->hinfo->echconfiglist)
-        free(dns->hinfo->echconfiglist);
-      if(dns->hinfo->ipv6hints)
-        free(dns->hinfo->ipv6hints);
-      if(dns->hinfo->val)
-        free(dns->hinfo->val);
-      free(dns->hinfo);
-    }
-#endif
-    free(dns);
-  }
-}
-
-/*
- * Curl_init_dnscache() inits a new DNS cache.
- */
-void Curl_init_dnscache(struct Curl_hash *hash, size_t size)
-{
-  Curl_hash_init(hash, size, Curl_hash_str, Curl_str_key_compare,
-                 hostcache_unlink_entry);
-}
-
-/*
- * Curl_hostcache_clean()
- *
- * This _can_ be called with 'data' == NULL but then of course no locking
- * can be done!
- */
-
-void Curl_hostcache_clean(struct Curl_easy *data,
-                          struct Curl_hash *hash)
-{
-  if(data && data->share)
-    Curl_share_lock(data, CURL_LOCK_DATA_DNS, CURL_LOCK_ACCESS_SINGLE);
-
-  Curl_hash_clean(hash);
-
-  if(data && data->share)
-    Curl_share_unlock(data, CURL_LOCK_DATA_DNS);
-}
-
-
-CURLcode Curl_loadhostpairs(struct Curl_easy *data)
-{
-  struct curl_slist *hostp;
-  char *host_end;
-
-  /* Default is no wildcard found */
-  data->state.wildcard_resolve = FALSE;
-
-  for(hostp = data->state.resolve; hostp; hostp = hostp->next) {
-    char entry_id[MAX_HOSTCACHE_LEN];
-    if(!hostp->data)
-      continue;
-    if(hostp->data[0] == '-') {
-      unsigned long num = 0;
-      size_t entry_len;
-      size_t hlen = 0;
-      host_end = strchr(&hostp->data[1], ':');
-
-      if(host_end) {
-        hlen = host_end - &hostp->data[1];
-        num = strtoul(++host_end, NULL, 10);
-        if(!hlen || (num > 0xffff))
-          host_end = NULL;
-      }
-      if(!host_end) {
-        infof(data, "Bad syntax CURLOPT_RESOLVE removal entry '%s'",
-              hostp->data);
-        continue;
-      }
-      /* Create an entry id, based upon the hostname and port */
-      entry_len = create_hostcache_id(&hostp->data[1], hlen, (int)num,
-                                      entry_id, sizeof(entry_id));
-      if(data->share)
-        Curl_share_lock(data, CURL_LOCK_DATA_DNS, CURL_LOCK_ACCESS_SINGLE);
-
-      /* delete entry, ignore if it did not exist */
-      Curl_hash_delete(data->dns.hostcache, entry_id, entry_len + 1);
-
-      if(data->share)
-        Curl_share_unlock(data, CURL_LOCK_DATA_DNS);
-    }
-    else {
-      struct Curl_dns_entry *dns;
-      struct Curl_addrinfo *head = NULL, *tail = NULL;
-      size_t entry_len;
-      char address[64];
-#if !defined(CURL_DISABLE_VERBOSE_STRINGS)
-      char *addresses = NULL;
-#endif
-      char *addr_begin;
-      char *addr_end;
-      char *port_ptr;
-      int port = 0;
-      char *end_ptr;
-      bool permanent = TRUE;
-      unsigned long tmp_port;
-      bool error = TRUE;
-      char *host_begin = hostp->data;
-      size_t hlen = 0;
-
-      if(host_begin[0] == '+') {
-        host_begin++;
-        permanent = FALSE;
-      }
-      host_end = strchr(host_begin, ':');
-      if(!host_end)
-        goto err;
-      hlen = host_end - host_begin;
-
-      port_ptr = host_end + 1;
-      tmp_port = strtoul(port_ptr, &end_ptr, 10);
-      if(tmp_port > USHRT_MAX || end_ptr == port_ptr || *end_ptr != ':')
-        goto err;
-
-      port = (int)tmp_port;
-#if !defined(CURL_DISABLE_VERBOSE_STRINGS)
-      addresses = end_ptr + 1;
-#endif
-
-      while(*end_ptr) {
-        size_t alen;
-        struct Curl_addrinfo *ai;
-
-        addr_begin = end_ptr + 1;
-        addr_end = strchr(addr_begin, ',');
-        if(!addr_end)
-          addr_end = addr_begin + strlen(addr_begin);
-        end_ptr = addr_end;
-
-        /* allow IP(v6) address within [brackets] */
-        if(*addr_begin == '[') {
-          if(addr_end == addr_begin || *(addr_end - 1) != ']')
-            goto err;
-          ++addr_begin;
-          --addr_end;
-        }
-
-        alen = addr_end - addr_begin;
-        if(!alen)
-          continue;
-
-        if(alen >= sizeof(address))
-          goto err;
-
-        memcpy(address, addr_begin, alen);
-        address[alen] = '\0';
-
-#ifndef USE_IPV6
-        if(strchr(address, ':')) {
-          infof(data, "Ignoring resolve address '%s', missing IPv6 support.",
-                address);
-          continue;
-        }
-#endif
-
-        ai = Curl_str2addr(address, port);
-        if(!ai) {
-          infof(data, "Resolve address '%s' found illegal", address);
-          goto err;
-        }
-
-        if(tail) {
-          tail->ai_next = ai;
-          tail = tail->ai_next;
-        }
-        else {
-          head = tail = ai;
-        }
-      }
-
-      if(!head)
-        goto err;
-
-      error = FALSE;
-err:
-      if(error) {
-        failf(data, "Couldn't parse CURLOPT_RESOLVE entry '%s'",
-              hostp->data);
-        Curl_freeaddrinfo(head);
-        return CURLE_SETOPT_OPTION_SYNTAX;
-      }
-
-      /* Create an entry id, based upon the hostname and port */
-      entry_len = create_hostcache_id(host_begin, hlen, port,
-                                      entry_id, sizeof(entry_id));
-
-      if(data->share)
-        Curl_share_lock(data, CURL_LOCK_DATA_DNS, CURL_LOCK_ACCESS_SINGLE);
-
-      /* See if it is already in our dns cache */
-      dns = Curl_hash_pick(data->dns.hostcache, entry_id, entry_len + 1);
-
-      if(dns) {
-        infof(data, "RESOLVE %.*s:%d - old addresses discarded",
-              (int)hlen, host_begin, port);
-        /* delete old entry, there are two reasons for this
-         1. old entry may have different addresses.
-         2. even if entry with correct addresses is already in the cache,
-            but if it is close to expire, then by the time next http
-            request is made, it can get expired and pruned because old
-            entry is not necessarily marked as permanent.
-         3. when adding a non-permanent entry, we want it to remove and
-            replace an existing permanent entry.
-         4. when adding a non-permanent entry, we want it to get a "fresh"
-            timeout that starts _now_. */
-
-        Curl_hash_delete(data->dns.hostcache, entry_id, entry_len + 1);
-      }
-
-      /* put this new host in the cache */
-      dns = Curl_cache_addr(data, head, host_begin, hlen, port, permanent);
-      if(dns) {
-        /* release the returned reference; the cache itself will keep the
-         * entry alive: */
-        dns->refcount--;
-      }
-
-      if(data->share)
-        Curl_share_unlock(data, CURL_LOCK_DATA_DNS);
-
-      if(!dns) {
-        Curl_freeaddrinfo(head);
-        return CURLE_OUT_OF_MEMORY;
-      }
-#ifndef CURL_DISABLE_VERBOSE_STRINGS
-      infof(data, "Added %.*s:%d:%s to DNS cache%s",
-            (int)hlen, host_begin, port, addresses,
-            permanent ? "" : " (non-permanent)");
-#endif
-
-      /* Wildcard hostname */
-      if((hlen == 1) && (host_begin[0] == '*')) {
-        infof(data, "RESOLVE *:%d using wildcard", port);
-        data->state.wildcard_resolve = TRUE;
-      }
-    }
-  }
-  data->state.resolve = NULL; /* dealt with now */
-
-  return CURLE_OK;
-}
-
-#ifndef CURL_DISABLE_VERBOSE_STRINGS
-static void show_resolve_info(struct Curl_easy *data,
-                              struct Curl_dns_entry *dns)
-{
-  struct Curl_addrinfo *a;
-  CURLcode result = CURLE_OK;
-#ifdef CURLRES_IPV6
-  struct dynbuf out[2];
-#else
-  struct dynbuf out[1];
-#endif
-  DEBUGASSERT(data);
-  DEBUGASSERT(dns);
-
-  if(!data->set.verbose ||
-     /* ignore no name or numerical IP addresses */
-     !dns->hostname[0] || Curl_host_is_ipnum(dns->hostname))
-    return;
-
-  a = dns->addr;
-
-  infof(data, "Host %s:%d was resolved.",
-        (dns->hostname[0] ? dns->hostname : "(none)"), dns->hostport);
-
-  Curl_dyn_init(&out[0], 1024);
-#ifdef CURLRES_IPV6
-  Curl_dyn_init(&out[1], 1024);
-#endif
-
-  while(a) {
-    if(
-#ifdef CURLRES_IPV6
-       a->ai_family == PF_INET6 ||
-#endif
-       a->ai_family == PF_INET) {
-      char buf[MAX_IPADR_LEN];
-      struct dynbuf *d = &out[(a->ai_family != PF_INET)];
-      Curl_printable_address(a, buf, sizeof(buf));
-      if(Curl_dyn_len(d))
-        result = Curl_dyn_addn(d, ", ", 2);
-      if(!result)
-        result = Curl_dyn_add(d, buf);
-      if(result) {
-        infof(data, "too many IP, cannot show");
-        goto fail;
-      }
-    }
-    a = a->ai_next;
-  }
-
-#ifdef CURLRES_IPV6
-  infof(data, "IPv6: %s",
-        (Curl_dyn_len(&out[1]) ? Curl_dyn_ptr(&out[1]) : "(none)"));
-#endif
-  infof(data, "IPv4: %s",
-        (Curl_dyn_len(&out[0]) ? Curl_dyn_ptr(&out[0]) : "(none)"));
-
-fail:
-  Curl_dyn_free(&out[0]);
-#ifdef CURLRES_IPV6
-  Curl_dyn_free(&out[1]);
-#endif
-}
-#endif
-
-CURLcode Curl_resolv_check(struct Curl_easy *data,
-                           struct Curl_dns_entry **dns)
-{
-  CURLcode result;
-#if defined(CURL_DISABLE_DOH) && !defined(CURLRES_ASYNCH)
-  (void)data;
-  (void)dns;
-#endif
-#ifndef CURL_DISABLE_DOH
-  if(data->conn->bits.doh) {
-    result = Curl_doh_is_resolved(data, dns);
-  }
-  else
-#endif
-  result = Curl_resolver_is_resolved(data, dns);
-  if(*dns)
-    show_resolve_info(data, *dns);
-  return result;
-}
-
-int Curl_resolv_getsock(struct Curl_easy *data,
-                        curl_socket_t *socks)
-{
-#ifdef CURLRES_ASYNCH
-#ifndef CURL_DISABLE_DOH
-  if(data->conn->bits.doh)
-    /* nothing to wait for during DoH resolve, those handles have their own
-       sockets */
-    return GETSOCK_BLANK;
-#endif
-  return Curl_resolver_getsock(data, socks);
-#else
-  (void)data;
-  (void)socks;
-  return GETSOCK_BLANK;
-#endif
-}
-
-/* Call this function after Curl_connect() has returned async=TRUE and
-   then a successful name resolve has been received.
-
-   Note: this function disconnects and frees the conn data in case of
-   resolve failure */
-CURLcode Curl_once_resolved(struct Curl_easy *data, bool *protocol_done)
-{
-  CURLcode result;
-  struct connectdata *conn = data->conn;
-
-#ifdef USE_CURL_ASYNC
-  if(data->state.async.dns) {
-    conn->dns_entry = data->state.async.dns;
-    data->state.async.dns = NULL;
-  }
-#endif
-
-  result = Curl_setup_conn(data, protocol_done);
-
-  if(result) {
-    Curl_detach_connection(data);
-    Curl_cpool_disconnect(data, conn, TRUE);
-  }
-  return result;
-}
-
-/*
- * Curl_resolver_error() calls failf() with the appropriate message after a
- * resolve error
- */
-
-#ifdef USE_CURL_ASYNC
-CURLcode Curl_resolver_error(struct Curl_easy *data)
-{
-  const char *host_or_proxy;
-  CURLcode result;
-
-#ifndef CURL_DISABLE_PROXY
-  struct connectdata *conn = data->conn;
-  if(conn->bits.httpproxy) {
-    host_or_proxy = "proxy";
-    result = CURLE_COULDNT_RESOLVE_PROXY;
-  }
-  else
-#endif
-  {
-    host_or_proxy = "host";
-    result = CURLE_COULDNT_RESOLVE_HOST;
-  }
-
-  failf(data, "Could not resolve %s: %s", host_or_proxy,
-        data->state.async.hostname);
-
-  return result;
-}
-#endif /* USE_CURL_ASYNC */
diff --git a/registry/native/c/curl-upstream-overlay/lib/hostip.h b/registry/native/c/curl-upstream-overlay/lib/hostip.h
deleted file mode 100644
index c6a49718d..000000000
--- a/registry/native/c/curl-upstream-overlay/lib/hostip.h
+++ /dev/null
@@ -1,270 +0,0 @@
-#ifndef HEADER_CURL_HOSTIP_H
-#define HEADER_CURL_HOSTIP_H
-/***************************************************************************
- *                                  _   _ ____  _
- *  Project                     ___| | | |  _ \| |
- *                             / __| | | | |_) | |
- *                            | (__| |_| |  _ <| |___
- *                             \___|\___/|_| \_\_____|
- *
- * Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
- *
- * This software is licensed as described in the file COPYING, which
- * you should have received as part of this distribution. The terms
- * are also available at https://curl.se/docs/copyright.html.
- *
- * You may opt to use, copy, modify, merge, publish, distribute and/or sell
- * copies of the Software, and permit persons to whom the Software is
- * furnished to do so, under the terms of the COPYING file.
- *
- * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
- * KIND, either express or implied.
- *
- * SPDX-License-Identifier: curl
- *
- ***************************************************************************/
-
-#include "curl_setup.h"
-#include "hash.h"
-#include "curl_addrinfo.h"
-#include "timeval.h" /* for timediff_t */
-#include "asyn.h"
-
-/* setjmp.h requires WASM exception handling — not available on WASI */
-#ifndef __wasi__
-#include <setjmp.h>
-#endif
-
-#ifdef USE_HTTPSRR
-# include <stdint.h>
-#endif
-
-/* Allocate enough memory to hold the full name information structs and
- * everything. OSF1 is known to require at least 8872 bytes. The buffer
- * required for storing all possible aliases and IP numbers is according to
- * Stevens' Unix Network Programming 2nd edition, p. 304: 8192 bytes!
- */
-#define CURL_HOSTENT_SIZE 9000
-
-#define CURL_TIMEOUT_RESOLVE 300 /* when using asynch methods, we allow this
-                                    many seconds for a name resolve */
-
-#define CURL_ASYNC_SUCCESS CURLE_OK
-
-struct addrinfo;
-struct hostent;
-struct Curl_easy;
-struct connectdata;
-
-/*
- * Curl_global_host_cache_init() initializes and sets up a global DNS cache.
- * Global DNS cache is general badness. Do not use. This will be removed in
- * a future version. Use the share interface instead!
- *
- * Returns a struct Curl_hash pointer on success, NULL on failure.
- */
-struct Curl_hash *Curl_global_host_cache_init(void);
-
-#ifdef USE_HTTPSRR
-
-#define CURL_MAXLEN_host_name 253
-
-struct Curl_https_rrinfo {
-  size_t len; /* raw encoded length */
-  unsigned char *val; /* raw encoded octets */
-  /*
-   * fields from HTTPS RR, with the mandatory fields
-   * first (priority, target), then the others in the
-   * order of the keytag numbers defined at
-   * https://datatracker.ietf.org/doc/html/rfc9460#section-14.3.2
-   */
-  uint16_t priority;
-  char *target;
-  char *alpns; /* keytag = 1 */
-  bool no_def_alpn; /* keytag = 2 */
-  /*
-   * we do not support ports (keytag = 3) as we do not support
-   * port-switching yet
-   */
-  unsigned char *ipv4hints; /* keytag = 4 */
-  size_t ipv4hints_len;
-  unsigned char *echconfiglist; /* keytag = 5 */
-  size_t echconfiglist_len;
-  unsigned char *ipv6hints; /* keytag = 6 */
-  size_t ipv6hints_len;
-};
-#endif
-
-struct Curl_dns_entry {
-  struct Curl_addrinfo *addr;
-#ifdef USE_HTTPSRR
-  struct Curl_https_rrinfo *hinfo;
-#endif
-  /* timestamp == 0 -- permanent CURLOPT_RESOLVE entry (does not time out) */
-  time_t timestamp;
-  /* reference counter, entry is freed on reaching 0 */
-  size_t refcount;
-  /* hostname port number that resolved to addr. */
-  int hostport;
-  /* hostname that resolved to addr. may be NULL (Unix domain sockets). */
-  char hostname[1];
-};
-
-bool Curl_host_is_ipnum(const char *hostname);
-
-/*
- * Curl_resolv() returns an entry with the info for the specified host
- * and port.
- *
- * The returned data *MUST* be "released" with Curl_resolv_unlink() after
- * use, or we will leak memory!
- */
-/* return codes */
-enum resolve_t {
-  CURLRESOLV_TIMEDOUT = -2,
-  CURLRESOLV_ERROR    = -1,
-  CURLRESOLV_RESOLVED =  0,
-  CURLRESOLV_PENDING  =  1
-};
-enum resolve_t Curl_resolv(struct Curl_easy *data,
-                           const char *hostname,
-                           int port,
-                           bool allowDOH,
-                           struct Curl_dns_entry **dnsentry);
-enum resolve_t Curl_resolv_timeout(struct Curl_easy *data,
-                                   const char *hostname, int port,
-                                   struct Curl_dns_entry **dnsentry,
-                                   timediff_t timeoutms);
-
-#ifdef USE_IPV6
-/*
- * Curl_ipv6works() returns TRUE if IPv6 seems to work.
- */
-bool Curl_ipv6works(struct Curl_easy *data);
-#else
-#define Curl_ipv6works(x) FALSE
-#endif
-
-/*
- * Curl_ipvalid() checks what CURL_IPRESOLVE_* requirements that might've
- * been set and returns TRUE if they are OK.
- */
-bool Curl_ipvalid(struct Curl_easy *data, struct connectdata *conn);
-
-
-/*
- * Curl_getaddrinfo() is the generic low-level name resolve API within this
- * source file. There are several versions of this function - for different
- * name resolve layers (selected at build-time). They all take this same set
- * of arguments
- */
-struct Curl_addrinfo *Curl_getaddrinfo(struct Curl_easy *data,
-                                       const char *hostname,
-                                       int port,
-                                       int *waitp);
-
-
-/* unlink a dns entry, potentially shared with a cache */
-void Curl_resolv_unlink(struct Curl_easy *data,
-                        struct Curl_dns_entry **pdns);
-
-/* init a new dns cache */
-void Curl_init_dnscache(struct Curl_hash *hash, size_t hashsize);
-
-/* prune old entries from the DNS cache */
-void Curl_hostcache_prune(struct Curl_easy *data);
-
-/* IPv4 threadsafe resolve function used for synch and asynch builds */
-struct Curl_addrinfo *Curl_ipv4_resolve_r(const char *hostname, int port);
-
-CURLcode Curl_once_resolved(struct Curl_easy *data, bool *protocol_connect);
-
-/*
- * Curl_addrinfo_callback() is used when we build with any asynch specialty.
- * Handles end of async request processing. Inserts ai into hostcache when
- * status is CURL_ASYNC_SUCCESS. Twiddles fields in conn to indicate async
- * request completed whether successful or failed.
- */
-CURLcode Curl_addrinfo_callback(struct Curl_easy *data,
-                                int status,
-                                struct Curl_addrinfo *ai);
-
-/*
- * Curl_printable_address() returns a printable version of the 1st address
- * given in the 'ip' argument. The result will be stored in the buf that is
- * bufsize bytes big.
- */
-void Curl_printable_address(const struct Curl_addrinfo *ip,
-                            char *buf, size_t bufsize);
-
-/*
- * Curl_fetch_addr() fetches a 'Curl_dns_entry' already in the DNS cache.
- *
- * Returns the Curl_dns_entry entry pointer or NULL if not in the cache.
- *
- * The returned data *MUST* be "released" with Curl_resolv_unlink() after
- * use, or we will leak memory!
- */
-struct Curl_dns_entry *
-Curl_fetch_addr(struct Curl_easy *data,
-                const char *hostname,
-                int port);
-
-/*
- * Curl_cache_addr() stores a 'Curl_addrinfo' struct in the DNS cache.
- * @param permanent   iff TRUE, entry will never become stale
- * Returns the Curl_dns_entry entry pointer or NULL if the storage failed.
- */
-struct Curl_dns_entry *
-Curl_cache_addr(struct Curl_easy *data, struct Curl_addrinfo *addr,
-                const char *hostname, size_t hostlen, int port,
-                bool permanent);
-
-#ifndef INADDR_NONE
-#define CURL_INADDR_NONE (in_addr_t) ~0
-#else
-#define CURL_INADDR_NONE INADDR_NONE
-#endif
-
-/*
- * Function provided by the resolver backend to set DNS servers to use.
- */
-CURLcode Curl_set_dns_servers(struct Curl_easy *data, char *servers);
-
-/*
- * Function provided by the resolver backend to set
- * outgoing interface to use for DNS requests
- */
-CURLcode Curl_set_dns_interface(struct Curl_easy *data,
-                                const char *interf);
-
-/*
- * Function provided by the resolver backend to set
- * local IPv4 address to use as source address for DNS requests
- */
-CURLcode Curl_set_dns_local_ip4(struct Curl_easy *data,
-                                const char *local_ip4);
-
-/*
- * Function provided by the resolver backend to set
- * local IPv6 address to use as source address for DNS requests
- */
-CURLcode Curl_set_dns_local_ip6(struct Curl_easy *data,
-                                const char *local_ip6);
-
-/*
- * Clean off entries from the cache
- */
-void Curl_hostcache_clean(struct Curl_easy *data, struct Curl_hash *hash);
-
-/*
- * Populate the cache with specified entries from CURLOPT_RESOLVE.
- */
-CURLcode Curl_loadhostpairs(struct Curl_easy *data);
-CURLcode Curl_resolv_check(struct Curl_easy *data,
-                           struct Curl_dns_entry **dns);
-int Curl_resolv_getsock(struct Curl_easy *data,
-                        curl_socket_t *socks);
-
-CURLcode Curl_resolver_error(struct Curl_easy *data);
-#endif /* HEADER_CURL_HOSTIP_H */
diff --git a/registry/native/c/curl-upstream-overlay/lib/vtls/vtls.c b/registry/native/c/curl-upstream-overlay/lib/vtls/vtls.c
deleted file mode 100644
index 21b758f2e..000000000
--- a/registry/native/c/curl-upstream-overlay/lib/vtls/vtls.c
+++ /dev/null
@@ -1,2368 +0,0 @@
-/***************************************************************************
- *                                  _   _ ____  _
- *  Project                     ___| | | |  _ \| |
- *                             / __| | | | |_) | |
- *                            | (__| |_| |  _ <| |___
- *                             \___|\___/|_| \_\_____|
- *
- * Copyright (C) Daniel Stenberg, <daniel@haxx.se>, et al.
- *
- * This software is licensed as described in the file COPYING, which
- * you should have received as part of this distribution. The terms
- * are also available at https://curl.se/docs/copyright.html.
- *
- * You may opt to use, copy, modify, merge, publish, distribute and/or sell
- * copies of the Software, and permit persons to whom the Software is
- * furnished to do so, under the terms of the COPYING file.
- *
- * This software is distributed on an "AS IS" basis, WITHOUT WARRANTY OF ANY
- * KIND, either express or implied.
- *
- * SPDX-License-Identifier: curl
- *
- ***************************************************************************/
-
-/* This file is for implementing all "generic" SSL functions that all libcurl
-   internals should use. It is then responsible for calling the proper
-   "backend" function.
-
-   SSL-functions in libcurl should call functions in this source file, and not
-   to any specific SSL-layer.
-
-   Curl_ssl_ - prefix for generic ones
-
-   Note that this source code uses the functions of the configured SSL
-   backend via the global Curl_ssl instance.
-
-   "SSL/TLS Strong Encryption: An Introduction"
-   https://httpd.apache.org/docs/2.0/ssl/ssl_intro.html
-*/
-
-#include "curl_setup.h"
-
-#ifdef HAVE_SYS_TYPES_H
-#include <sys/types.h>
-#endif
-#ifdef HAVE_SYS_STAT_H
-#include <sys/stat.h>
-#endif
-#ifdef HAVE_FCNTL_H
-#include <fcntl.h>
-#endif
-
-#include "urldata.h"
-#include "cfilters.h"
-
-#include "vtls.h" /* generic SSL protos etc */
-#include "vtls_int.h"
-
-#include "openssl.h"        /* OpenSSL versions */
-#include "gtls.h"           /* GnuTLS versions */
-#include "wolfssl.h"        /* wolfSSL versions */
-#include "schannel.h"       /* Schannel SSPI version */
-#include "sectransp.h"      /* Secure Transport (Darwin) version */
-#include "mbedtls.h"        /* mbedTLS versions */
-#include "bearssl.h"        /* BearSSL versions */
-#include "rustls.h"         /* Rustls versions */
-#include "wasi_tls.h"       /* WASI host TLS */
-
-#include "slist.h"
-#include "sendf.h"
-#include "strcase.h"
-#include "url.h"
-#include "progress.h"
-#include "share.h"
-#include "multiif.h"
-#include "timeval.h"
-#include "curl_md5.h"
-#include "warnless.h"
-#include "curl_base64.h"
-#include "curl_printf.h"
-#include "inet_pton.h"
-#include "connect.h"
-#include "select.h"
-#include "strdup.h"
-#include "rand.h"
-
-/* The last #include files should be: */
-#include "curl_memory.h"
-#include "memdebug.h"
-
-
-/* convenience macro to check if this handle is using a shared SSL session */
-#define SSLSESSION_SHARED(data) (data->share &&                        \
-                                 (data->share->specifier &             \
-                                  (1<<CURL_LOCK_DATA_SSL_SESSION)))
-
-#define CLONE_STRING(var)                    \
-  do {                                       \
-    if(source->var) {                        \
-      dest->var = strdup(source->var);       \
-      if(!dest->var)                         \
-        return FALSE;                        \
-    }                                        \
-    else                                     \
-      dest->var = NULL;                      \
-  } while(0)
-
-#define CLONE_BLOB(var)                        \
-  do {                                         \
-    if(blobdup(&dest->var, source->var))       \
-      return FALSE;                            \
-  } while(0)
-
-static CURLcode blobdup(struct curl_blob **dest,
-                        struct curl_blob *src)
-{
-  DEBUGASSERT(dest);
-  DEBUGASSERT(!*dest);
-  if(src) {
-    /* only if there is data to dupe! */
-    struct curl_blob *d;
-    d = malloc(sizeof(struct curl_blob) + src->len);
-    if(!d)
-      return CURLE_OUT_OF_MEMORY;
-    d->len = src->len;
-    /* Always duplicate because the connection may survive longer than the
-       handle that passed in the blob. */
-    d->flags = CURL_BLOB_COPY;
-    d->data = (void *)((char *)d + sizeof(struct curl_blob));
-    memcpy(d->data, src->data, src->len);
-    *dest = d;
-  }
-  return CURLE_OK;
-}
-
-/* returns TRUE if the blobs are identical */
-static bool blobcmp(struct curl_blob *first, struct curl_blob *second)
-{
-  if(!first && !second) /* both are NULL */
-    return TRUE;
-  if(!first || !second) /* one is NULL */
-    return FALSE;
-  if(first->len != second->len) /* different sizes */
-    return FALSE;
-  return !memcmp(first->data, second->data, first->len); /* same data */
-}
-
-#ifdef USE_SSL
-static const struct alpn_spec ALPN_SPEC_H11 = {
-  { ALPN_HTTP_1_1 }, 1
-};
-#ifdef USE_HTTP2
-static const struct alpn_spec ALPN_SPEC_H2 = {
-  { ALPN_H2 }, 1
-};
-static const struct alpn_spec ALPN_SPEC_H2_H11 = {
-  { ALPN_H2, ALPN_HTTP_1_1 }, 2
-};
-#endif
-
-static const struct alpn_spec *alpn_get_spec(int httpwant, bool use_alpn)
-{
-  if(!use_alpn)
-    return NULL;
-#ifdef USE_HTTP2
-  if(httpwant == CURL_HTTP_VERSION_2_PRIOR_KNOWLEDGE)
-    return &ALPN_SPEC_H2;
-  if(httpwant >= CURL_HTTP_VERSION_2)
-    return &ALPN_SPEC_H2_H11;
-#else
-  (void)httpwant;
-#endif
-  /* Use the ALPN protocol "http/1.1" for HTTP/1.x.
-     Avoid "http/1.0" because some servers do not support it. */
-  return &ALPN_SPEC_H11;
-}
-#endif /* USE_SSL */
-
-
-void Curl_ssl_easy_config_init(struct Curl_easy *data)
-{
-  /*
-   * libcurl 7.10 introduced SSL verification *by default*! This needs to be
-   * switched off unless wanted.
-   */
-  data->set.ssl.primary.verifypeer = TRUE;
-  data->set.ssl.primary.verifyhost = TRUE;
-  data->set.ssl.primary.cache_session = TRUE; /* caching by default */
-#ifndef CURL_DISABLE_PROXY
-  data->set.proxy_ssl = data->set.ssl;
-#endif
-}
-
-static bool
-match_ssl_primary_config(struct Curl_easy *data,
-                         struct ssl_primary_config *c1,
-                         struct ssl_primary_config *c2)
-{
-  (void)data;
-  if((c1->version == c2->version) &&
-     (c1->version_max == c2->version_max) &&
-     (c1->ssl_options == c2->ssl_options) &&
-     (c1->verifypeer == c2->verifypeer) &&
-     (c1->verifyhost == c2->verifyhost) &&
-     (c1->verifystatus == c2->verifystatus) &&
-     blobcmp(c1->cert_blob, c2->cert_blob) &&
-     blobcmp(c1->ca_info_blob, c2->ca_info_blob) &&
-     blobcmp(c1->issuercert_blob, c2->issuercert_blob) &&
-     Curl_safecmp(c1->CApath, c2->CApath) &&
-     Curl_safecmp(c1->CAfile, c2->CAfile) &&
-     Curl_safecmp(c1->issuercert, c2->issuercert) &&
-     Curl_safecmp(c1->clientcert, c2->clientcert) &&
-#ifdef USE_TLS_SRP
-     !Curl_timestrcmp(c1->username, c2->username) &&
-     !Curl_timestrcmp(c1->password, c2->password) &&
-#endif
-     strcasecompare(c1->cipher_list, c2->cipher_list) &&
-     strcasecompare(c1->cipher_list13, c2->cipher_list13) &&
-     strcasecompare(c1->curves, c2->curves) &&
-     strcasecompare(c1->CRLfile, c2->CRLfile) &&
-     strcasecompare(c1->pinned_key, c2->pinned_key))
-    return TRUE;
-
-  return FALSE;
-}
-
-bool Curl_ssl_conn_config_match(struct Curl_easy *data,
-                                struct connectdata *candidate,
-                                bool proxy)
-{
-#ifndef CURL_DISABLE_PROXY
-  if(proxy)
-    return match_ssl_primary_config(data, &data->set.proxy_ssl.primary,
-                                    &candidate->proxy_ssl_config);
-#else
-  (void)proxy;
-#endif
-  return match_ssl_primary_config(data, &data->set.ssl.primary,
-                                  &candidate->ssl_config);
-}
-
-static bool clone_ssl_primary_config(struct ssl_primary_config *source,
-                                     struct ssl_primary_config *dest)
-{
-  dest->version = source->version;
-  dest->version_max = source->version_max;
-  dest->verifypeer = source->verifypeer;
-  dest->verifyhost = source->verifyhost;
-  dest->verifystatus = source->verifystatus;
-  dest->cache_session = source->cache_session;
-  dest->ssl_options = source->ssl_options;
-
-  CLONE_BLOB(cert_blob);
-  CLONE_BLOB(ca_info_blob);
-  CLONE_BLOB(issuercert_blob);
-  CLONE_STRING(CApath);
-  CLONE_STRING(CAfile);
-  CLONE_STRING(issuercert);
-  CLONE_STRING(clientcert);
-  CLONE_STRING(cipher_list);
-  CLONE_STRING(cipher_list13);
-  CLONE_STRING(pinned_key);
-  CLONE_STRING(curves);
-  CLONE_STRING(CRLfile);
-#ifdef USE_TLS_SRP
-  CLONE_STRING(username);
-  CLONE_STRING(password);
-#endif
-
-  return TRUE;
-}
-
-static void free_primary_ssl_config(struct ssl_primary_config *sslc)
-{
-  Curl_safefree(sslc->CApath);
-  Curl_safefree(sslc->CAfile);
-  Curl_safefree(sslc->issuercert);
-  Curl_safefree(sslc->clientcert);
-  Curl_safefree(sslc->cipher_list);
-  Curl_safefree(sslc->cipher_list13);
-  Curl_safefree(sslc->pinned_key);
-  Curl_safefree(sslc->cert_blob);
-  Curl_safefree(sslc->ca_info_blob);
-  Curl_safefree(sslc->issuercert_blob);
-  Curl_safefree(sslc->curves);
-  Curl_safefree(sslc->CRLfile);
-#ifdef USE_TLS_SRP
-  Curl_safefree(sslc->username);
-  Curl_safefree(sslc->password);
-#endif
-}
-
-CURLcode Curl_ssl_easy_config_complete(struct Curl_easy *data)
-{
-  data->set.ssl.primary.CApath = data->set.str[STRING_SSL_CAPATH];
-  data->set.ssl.primary.CAfile = data->set.str[STRING_SSL_CAFILE];
-  data->set.ssl.primary.CRLfile = data->set.str[STRING_SSL_CRLFILE];
-  data->set.ssl.primary.issuercert = data->set.str[STRING_SSL_ISSUERCERT];
-  data->set.ssl.primary.issuercert_blob = data->set.blobs[BLOB_SSL_ISSUERCERT];
-  data->set.ssl.primary.cipher_list =
-    data->set.str[STRING_SSL_CIPHER_LIST];
-  data->set.ssl.primary.cipher_list13 =
-    data->set.str[STRING_SSL_CIPHER13_LIST];
-  data->set.ssl.primary.pinned_key =
-    data->set.str[STRING_SSL_PINNEDPUBLICKEY];
-  data->set.ssl.primary.cert_blob = data->set.blobs[BLOB_CERT];
-  data->set.ssl.primary.ca_info_blob = data->set.blobs[BLOB_CAINFO];
-  data->set.ssl.primary.curves = data->set.str[STRING_SSL_EC_CURVES];
-#ifdef USE_TLS_SRP
-  data->set.ssl.primary.username = data->set.str[STRING_TLSAUTH_USERNAME];
-  data->set.ssl.primary.password = data->set.str[STRING_TLSAUTH_PASSWORD];
-#endif
-  data->set.ssl.cert_type = data->set.str[STRING_CERT_TYPE];
-  data->set.ssl.key = data->set.str[STRING_KEY];
-  data->set.ssl.key_type = data->set.str[STRING_KEY_TYPE];
-  data->set.ssl.key_passwd = data->set.str[STRING_KEY_PASSWD];
-  data->set.ssl.primary.clientcert = data->set.str[STRING_CERT];
-  data->set.ssl.key_blob = data->set.blobs[BLOB_KEY];
-
-#ifndef CURL_DISABLE_PROXY
-  data->set.proxy_ssl.primary.CApath = data->set.str[STRING_SSL_CAPATH_PROXY];
-  data->set.proxy_ssl.primary.CAfile = data->set.str[STRING_SSL_CAFILE_PROXY];
-  data->set.proxy_ssl.primary.cipher_list =
-    data->set.str[STRING_SSL_CIPHER_LIST_PROXY];
-  data->set.proxy_ssl.primary.cipher_list13 =
-    data->set.str[STRING_SSL_CIPHER13_LIST_PROXY];
-  data->set.proxy_ssl.primary.pinned_key =
-    data->set.str[STRING_SSL_PINNEDPUBLICKEY_PROXY];
-  data->set.proxy_ssl.primary.cert_blob = data->set.blobs[BLOB_CERT_PROXY];
-  data->set.proxy_ssl.primary.ca_info_blob =
-    data->set.blobs[BLOB_CAINFO_PROXY];
-  data->set.proxy_ssl.primary.issuercert =
-    data->set.str[STRING_SSL_ISSUERCERT_PROXY];
-  data->set.proxy_ssl.primary.issuercert_blob =
-    data->set.blobs[BLOB_SSL_ISSUERCERT_PROXY];
-  data->set.proxy_ssl.primary.CRLfile =
-    data->set.str[STRING_SSL_CRLFILE_PROXY];
-  data->set.proxy_ssl.cert_type = data->set.str[STRING_CERT_TYPE_PROXY];
-  data->set.proxy_ssl.key = data->set.str[STRING_KEY_PROXY];
-  data->set.proxy_ssl.key_type = data->set.str[STRING_KEY_TYPE_PROXY];
-  data->set.proxy_ssl.key_passwd = data->set.str[STRING_KEY_PASSWD_PROXY];
-  data->set.proxy_ssl.primary.clientcert = data->set.str[STRING_CERT_PROXY];
-  data->set.proxy_ssl.key_blob = data->set.blobs[BLOB_KEY_PROXY];
-#ifdef USE_TLS_SRP
-  data->set.proxy_ssl.primary.username =
-    data->set.str[STRING_TLSAUTH_USERNAME_PROXY];
-  data->set.proxy_ssl.primary.password =
-    data->set.str[STRING_TLSAUTH_PASSWORD_PROXY];
-#endif
-#endif /* CURL_DISABLE_PROXY */
-
-  return CURLE_OK;
-}
-
-CURLcode Curl_ssl_conn_config_init(struct Curl_easy *data,
-                                   struct connectdata *conn)
-{
-  /* Clone "primary" SSL configurations from the esay handle to
-   * the connection. They are used for connection cache matching and
-   * probably outlive the easy handle */
-  if(!clone_ssl_primary_config(&data->set.ssl.primary, &conn->ssl_config))
-    return CURLE_OUT_OF_MEMORY;
-#ifndef CURL_DISABLE_PROXY
-  if(!clone_ssl_primary_config(&data->set.proxy_ssl.primary,
-                               &conn->proxy_ssl_config))
-    return CURLE_OUT_OF_MEMORY;
-#endif
-  return CURLE_OK;
-}
-
-void Curl_ssl_conn_config_cleanup(struct connectdata *conn)
-{
-  free_primary_ssl_config(&conn->ssl_config);
-#ifndef CURL_DISABLE_PROXY
-  free_primary_ssl_config(&conn->proxy_ssl_config);
-#endif
-}
-
-void Curl_ssl_conn_config_update(struct Curl_easy *data, bool for_proxy)
-{
-  /* May be called on an easy that has no connection yet */
-  if(data->conn) {
-    struct ssl_primary_config *src, *dest;
-#ifndef CURL_DISABLE_PROXY
-    src = for_proxy ? &data->set.proxy_ssl.primary : &data->set.ssl.primary;
-    dest = for_proxy ? &data->conn->proxy_ssl_config : &data->conn->ssl_config;
-#else
-    (void)for_proxy;
-    src = &data->set.ssl.primary;
-    dest = &data->conn->ssl_config;
-#endif
-    dest->verifyhost = src->verifyhost;
-    dest->verifypeer = src->verifypeer;
-    dest->verifystatus = src->verifystatus;
-  }
-}
-
-#ifdef USE_SSL
-static int multissl_setup(const struct Curl_ssl *backend);
-#endif
-
-curl_sslbackend Curl_ssl_backend(void)
-{
-#ifdef USE_SSL
-  multissl_setup(NULL);
-  return Curl_ssl->info.id;
-#else
-  return CURLSSLBACKEND_NONE;
-#endif
-}
-
-#ifdef USE_SSL
-
-/* "global" init done? */
-static bool init_ssl = FALSE;
-
-/**
- * Global SSL init
- *
- * @retval 0 error initializing SSL
- * @retval 1 SSL initialized successfully
- */
-int Curl_ssl_init(void)
-{
-  /* make sure this is only done once */
-  if(init_ssl)
-    return 1;
-  init_ssl = TRUE; /* never again */
-
-  return Curl_ssl->init();
-}
-
-static bool ssl_prefs_check(struct Curl_easy *data)
-{
-  /* check for CURLOPT_SSLVERSION invalid parameter value */
-  const unsigned char sslver = data->set.ssl.primary.version;
-  if(sslver >= CURL_SSLVERSION_LAST) {
-    failf(data, "Unrecognized parameter value passed via CURLOPT_SSLVERSION");
-    return FALSE;
-  }
-
-  switch(data->set.ssl.primary.version_max) {
-  case CURL_SSLVERSION_MAX_NONE:
-  case CURL_SSLVERSION_MAX_DEFAULT:
-    break;
-
-  default:
-    if((data->set.ssl.primary.version_max >> 16) < sslver) {
-      failf(data, "CURL_SSLVERSION_MAX incompatible with CURL_SSLVERSION");
-      return FALSE;
-    }
-  }
-
-  return TRUE;
-}
-
-static struct ssl_connect_data *cf_ctx_new(struct Curl_easy *data,
-                                           const struct alpn_spec *alpn)
-{
-  struct ssl_connect_data *ctx;
-
-  (void)data;
-  ctx = calloc(1, sizeof(*ctx));
-  if(!ctx)
-    return NULL;
-
-  ctx->alpn = alpn;
-  Curl_bufq_init2(&ctx->earlydata, CURL_SSL_EARLY_MAX, 1, BUFQ_OPT_NO_SPARES);
-  ctx->backend = calloc(1, Curl_ssl->sizeof_ssl_backend_data);
-  if(!ctx->backend) {
-    free(ctx);
-    return NULL;
-  }
-  return ctx;
-}
-
-static void cf_ctx_free(struct ssl_connect_data *ctx)
-{
-  if(ctx) {
-    Curl_safefree(ctx->alpn_negotiated);
-    Curl_bufq_free(&ctx->earlydata);
-    free(ctx->backend);
-    free(ctx);
-  }
-}
-
-static CURLcode ssl_connect(struct Curl_cfilter *cf, struct Curl_easy *data)
-{
-  struct ssl_connect_data *connssl = cf->ctx;
-  CURLcode result;
-
-  if(!ssl_prefs_check(data))
-    return CURLE_SSL_CONNECT_ERROR;
-
-  /* mark this is being ssl-enabled from here on. */
-  connssl->state = ssl_connection_negotiating;
-
-  result = Curl_ssl->connect_blocking(cf, data);
-
-  if(!result) {
-    DEBUGASSERT(connssl->state == ssl_connection_complete);
-  }
-
-  return result;
-}
-
-static CURLcode
-ssl_connect_nonblocking(struct Curl_cfilter *cf, struct Curl_easy *data,
-                        bool *done)
-{
-  if(!ssl_prefs_check(data))
-    return CURLE_SSL_CONNECT_ERROR;
-
-  /* mark this is being ssl requested from here on. */
-  return Curl_ssl->connect_nonblocking(cf, data, done);
-}
-
-/*
- * Lock shared SSL session data
- */
-void Curl_ssl_sessionid_lock(struct Curl_easy *data)
-{
-  if(SSLSESSION_SHARED(data))
-    Curl_share_lock(data, CURL_LOCK_DATA_SSL_SESSION, CURL_LOCK_ACCESS_SINGLE);
-}
-
-/*
- * Unlock shared SSL session data
- */
-void Curl_ssl_sessionid_unlock(struct Curl_easy *data)
-{
-  if(SSLSESSION_SHARED(data))
-    Curl_share_unlock(data, CURL_LOCK_DATA_SSL_SESSION);
-}
-
-/*
- * Check if there is a session ID for the given connection in the cache, and if
- * there is one suitable, it is provided. Returns TRUE when no entry matched.
- */
-bool Curl_ssl_getsessionid(struct Curl_cfilter *cf,
-                           struct Curl_easy *data,
-                           const struct ssl_peer *peer,
-                           void **ssl_sessionid,
-                           size_t *idsize, /* set 0 if unknown */
-                           char **palpn)
-{
-  struct ssl_primary_config *conn_config = Curl_ssl_cf_get_primary_config(cf);
-  struct ssl_config_data *ssl_config = Curl_ssl_cf_get_config(cf, data);
-  struct Curl_ssl_session *check;
-  size_t i;
-  long *general_age;
-  bool no_match = TRUE;
-
-  *ssl_sessionid = NULL;
-  if(palpn)
-    *palpn = NULL;
-  if(!ssl_config)
-    return TRUE;
-
-  DEBUGASSERT(ssl_config->primary.cache_session);
-
-  if(!ssl_config->primary.cache_session || !data->state.session)
-    /* session ID reuse is disabled or the session cache has not been
-       setup */
-    return TRUE;
-
-  /* Lock if shared */
-  if(SSLSESSION_SHARED(data))
-    general_age = &data->share->sessionage;
-  else
-    general_age = &data->state.sessionage;
-
-  for(i = 0; i < data->set.general_ssl.max_ssl_sessions; i++) {
-    check = &data->state.session[i];
-    if(!check->sessionid)
-      /* not session ID means blank entry */
-      continue;
-    if(strcasecompare(peer->hostname, check->name) &&
-       ((!cf->conn->bits.conn_to_host && !check->conn_to_host) ||
-        (cf->conn->bits.conn_to_host && check->conn_to_host &&
-         strcasecompare(cf->conn->conn_to_host.name, check->conn_to_host))) &&
-       ((!cf->conn->bits.conn_to_port && check->conn_to_port == -1) ||
-        (cf->conn->bits.conn_to_port && check->conn_to_port != -1 &&
-         cf->conn->conn_to_port == check->conn_to_port)) &&
-       (peer->port == check->remote_port) &&
-       (peer->transport == check->transport) &&
-       strcasecompare(cf->conn->handler->scheme, check->scheme) &&
-       match_ssl_primary_config(data, conn_config, &check->ssl_config)) {
-      /* yes, we have a session ID! */
-      (*general_age)++;          /* increase general age */
-      check->age = *general_age; /* set this as used in this age */
-      *ssl_sessionid = check->sessionid;
-      if(idsize)
-        *idsize = check->idsize;
-      if(palpn)
-        *palpn = check->alpn;
-      no_match = FALSE;
-      break;
-    }
-  }
-
-  CURL_TRC_CF(data, cf, "%s cached session ID for %s://%s:%d",
-              no_match ? "No" : "Found",
-              cf->conn->handler->scheme, peer->hostname, peer->port);
-  return no_match;
-}
-
-/*
- * Kill a single session ID entry in the cache.
- */
-void Curl_ssl_kill_session(struct Curl_ssl_session *session)
-{
-  if(session->sessionid) {
-    /* defensive check */
-
-    /* free the ID the SSL-layer specific way */
-    session->sessionid_free(session->sessionid, session->idsize);
-
-    session->sessionid = NULL;
-    session->sessionid_free = NULL;
-    session->age = 0; /* fresh */
-
-    free_primary_ssl_config(&session->ssl_config);
-
-    Curl_safefree(session->name);
-    Curl_safefree(session->conn_to_host);
-    Curl_safefree(session->alpn);
-  }
-}
-
-/*
- * Delete the given session ID from the cache.
- */
-void Curl_ssl_delsessionid(struct Curl_easy *data, void *ssl_sessionid)
-{
-  size_t i;
-
-  for(i = 0; i < data->set.general_ssl.max_ssl_sessions; i++) {
-    struct Curl_ssl_session *check = &data->state.session[i];
-
-    if(check->sessionid == ssl_sessionid) {
-      Curl_ssl_kill_session(check);
-      break;
-    }
-  }
-}
-
-CURLcode Curl_ssl_set_sessionid(struct Curl_cfilter *cf,
-                                struct Curl_easy *data,
-                                const struct ssl_peer *peer,
-                                const char *alpn,
-                                void *ssl_sessionid,
-                                size_t idsize,
-                                Curl_ssl_sessionid_dtor *sessionid_free_cb)
-{
-  struct ssl_config_data *ssl_config = Curl_ssl_cf_get_config(cf, data);
-  struct ssl_primary_config *conn_config = Curl_ssl_cf_get_primary_config(cf);
-  size_t i;
-  struct Curl_ssl_session *store;
-  long oldest_age;
-  char *clone_host = NULL;
-  char *clone_conn_to_host = NULL;
-  char *clone_alpn = NULL;
-  int conn_to_port;
-  long *general_age;
-  void *old_sessionid;
-  size_t old_size;
-  CURLcode result = CURLE_OUT_OF_MEMORY;
-
-  DEBUGASSERT(ssl_sessionid);
-  DEBUGASSERT(sessionid_free_cb);
-
-  if(!data->state.session) {
-    sessionid_free_cb(ssl_sessionid, idsize);
-    return CURLE_OK;
-  }
-
-  if(!Curl_ssl_getsessionid(cf, data, peer, &old_sessionid, &old_size, NULL)) {
-    if((old_size == idsize) &&
-       ((old_sessionid == ssl_sessionid) ||
-        (idsize && !memcmp(old_sessionid, ssl_sessionid, idsize)))) {
-      /* the very same */
-      sessionid_free_cb(ssl_sessionid, idsize);
-      return CURLE_OK;
-    }
-    Curl_ssl_delsessionid(data, old_sessionid);
-  }
-
-  store = &data->state.session[0];
-  oldest_age = data->state.session[0].age; /* zero if unused */
-  DEBUGASSERT(ssl_config->primary.cache_session);
-  (void)ssl_config;
-
-  clone_host = strdup(peer->hostname);
-  if(!clone_host)
-    goto out;
-
-  if(cf->conn->bits.conn_to_host) {
-    clone_conn_to_host = strdup(cf->conn->conn_to_host.name);
-    if(!clone_conn_to_host)
-      goto out;
-  }
-
-  clone_alpn = alpn ? strdup(alpn) : NULL;
-  if(alpn && !clone_alpn)
-    goto out;
-
-  if(cf->conn->bits.conn_to_port)
-    conn_to_port = cf->conn->conn_to_port;
-  else
-    conn_to_port = -1;
-
-  /* Now we should add the session ID and the hostname to the cache, (remove
-     the oldest if necessary) */
-
-  /* If using shared SSL session, lock! */
-  if(SSLSESSION_SHARED(data)) {
-    general_age = &data->share->sessionage;
-  }
-  else {
-    general_age = &data->state.sessionage;
-  }
-
-  /* find an empty slot for us, or find the oldest */
-  for(i = 1; (i < data->set.general_ssl.max_ssl_sessions) &&
-        data->state.session[i].sessionid; i++) {
-    if(data->state.session[i].age < oldest_age) {
-      oldest_age = data->state.session[i].age;
-      store = &data->state.session[i];
-    }
-  }
-  if(i == data->set.general_ssl.max_ssl_sessions)
-    /* cache is full, we must "kill" the oldest entry! */
-    Curl_ssl_kill_session(store);
-  else
-    store = &data->state.session[i]; /* use this slot */
-
-  /* now init the session struct wisely */
-  if(!clone_ssl_primary_config(conn_config, &store->ssl_config)) {
-    free_primary_ssl_config(&store->ssl_config);
-    store->sessionid = NULL; /* let caller free sessionid */
-    goto out;
-  }
-  store->sessionid = ssl_sessionid;
-  store->idsize = idsize;
-  store->sessionid_free = sessionid_free_cb;
-  store->age = *general_age;    /* set current age */
-  /* free it if there is one already present */
-  free(store->name);
-  free(store->conn_to_host);
-  store->name = clone_host;               /* clone hostname */
-  clone_host = NULL;
-  store->conn_to_host = clone_conn_to_host; /* clone connect to hostname */
-  clone_conn_to_host = NULL;
-  store->conn_to_port = conn_to_port; /* connect to port number */
-  store->alpn = clone_alpn;
-  clone_alpn = NULL;
-  /* port number */
-  store->remote_port = peer->port;
-  store->scheme = cf->conn->handler->scheme;
-  store->transport = peer->transport;
-
-  result = CURLE_OK;
-
-out:
-  free(clone_host);
-  free(clone_conn_to_host);
-  free(clone_alpn);
-  if(result) {
-    failf(data, "Failed to add Session ID to cache for %s://%s:%d [%s]",
-          store->scheme, store->name, store->remote_port,
-          Curl_ssl_cf_is_proxy(cf) ? "PROXY" : "server");
-    sessionid_free_cb(ssl_sessionid, idsize);
-    return result;
-  }
-  CURL_TRC_CF(data, cf, "Added Session ID to cache for %s://%s:%d [%s]",
-              store->scheme, store->name, store->remote_port,
-              Curl_ssl_cf_is_proxy(cf) ? "PROXY" : "server");
-  return CURLE_OK;
-}
-
-CURLcode Curl_ssl_get_channel_binding(struct Curl_easy *data, int sockindex,
-                                       struct dynbuf *binding)
-{
-  if(Curl_ssl->get_channel_binding)
-    return Curl_ssl->get_channel_binding(data, sockindex, binding);
-  return CURLE_OK;
-}
-
-void Curl_ssl_close_all(struct Curl_easy *data)
-{
-  /* kill the session ID cache if not shared */
-  if(data->state.session && !SSLSESSION_SHARED(data)) {
-    size_t i;
-    for(i = 0; i < data->set.general_ssl.max_ssl_sessions; i++)
-      /* the single-killer function handles empty table slots */
-      Curl_ssl_kill_session(&data->state.session[i]);
-
-    /* free the cache data */
-    Curl_safefree(data->state.session);
-  }
-
-  Curl_ssl->close_all(data);
-}
-
-void Curl_ssl_adjust_pollset(struct Curl_cfilter *cf, struct Curl_easy *data,
-                              struct easy_pollset *ps)
-{
-  struct ssl_connect_data *connssl = cf->ctx;
-
-  if(connssl->io_need) {
-    curl_socket_t sock = Curl_conn_cf_get_socket(cf->next, data);
-    if(sock != CURL_SOCKET_BAD) {
-      if(connssl->io_need & CURL_SSL_IO_NEED_SEND) {
-        Curl_pollset_set_out_only(data, ps, sock);
-        CURL_TRC_CF(data, cf, "adjust_pollset, POLLOUT fd=%" FMT_SOCKET_T,
-                    sock);
-      }
-      else {
-        Curl_pollset_set_in_only(data, ps, sock);
-        CURL_TRC_CF(data, cf, "adjust_pollset, POLLIN fd=%" FMT_SOCKET_T,
-                    sock);
-      }
-    }
-  }
-}
-
-/* Selects an SSL crypto engine
- */
-CURLcode Curl_ssl_set_engine(struct Curl_easy *data, const char *engine)
-{
-  return Curl_ssl->set_engine(data, engine);
-}
-
-/* Selects the default SSL crypto engine
- */
-CURLcode Curl_ssl_set_engine_default(struct Curl_easy *data)
-{
-  return Curl_ssl->set_engine_default(data);
-}
-
-/* Return list of OpenSSL crypto engine names. */
-struct curl_slist *Curl_ssl_engines_list(struct Curl_easy *data)
-{
-  return Curl_ssl->engines_list(data);
-}
-
-/*
- * This sets up a session ID cache to the specified size. Make sure this code
- * is agnostic to what underlying SSL technology we use.
- */
-CURLcode Curl_ssl_initsessions(struct Curl_easy *data, size_t amount)
-{
-  struct Curl_ssl_session *session;
-
-  if(data->state.session)
-    /* this is just a precaution to prevent multiple inits */
-    return CURLE_OK;
-
-  session = calloc(amount, sizeof(struct Curl_ssl_session));
-  if(!session)
-    return CURLE_OUT_OF_MEMORY;
-
-  /* store the info in the SSL section */
-  data->set.general_ssl.max_ssl_sessions = amount;
-  data->state.session = session;
-  data->state.sessionage = 1; /* this is brand new */
-  return CURLE_OK;
-}
-
-static size_t multissl_version(char *buffer, size_t size);
-
-void Curl_ssl_version(char *buffer, size_t size)
-{
-#ifdef CURL_WITH_MULTI_SSL
-  (void)multissl_version(buffer, size);
-#else
-  (void)Curl_ssl->version(buffer, size);
-#endif
-}
-
-void Curl_ssl_free_certinfo(struct Curl_easy *data)
-{
-  struct curl_certinfo *ci = &data->info.certs;
-
-  if(ci->num_of_certs) {
-    /* free all individual lists used */
-    int i;
-    for(i = 0; i < ci->num_of_certs; i++) {
-      curl_slist_free_all(ci->certinfo[i]);
-      ci->certinfo[i] = NULL;
-    }
-
-    free(ci->certinfo); /* free the actual array too */
-    ci->certinfo = NULL;
-    ci->num_of_certs = 0;
-  }
-}
-
-CURLcode Curl_ssl_init_certinfo(struct Curl_easy *data, int num)
-{
-  struct curl_certinfo *ci = &data->info.certs;
-  struct curl_slist **table;
-
-  /* Free any previous certificate information structures */
-  Curl_ssl_free_certinfo(data);
-
-  /* Allocate the required certificate information structures */
-  table = calloc((size_t) num, sizeof(struct curl_slist *));
-  if(!table)
-    return CURLE_OUT_OF_MEMORY;
-
-  ci->num_of_certs = num;
-  ci->certinfo = table;
-
-  return CURLE_OK;
-}
-
-/*
- * 'value' is NOT a null-terminated string
- */
-CURLcode Curl_ssl_push_certinfo_len(struct Curl_easy *data,
-                                    int certnum,
-                                    const char *label,
-                                    const char *value,
-                                    size_t valuelen)
-{
-  struct curl_certinfo *ci = &data->info.certs;
-  struct curl_slist *nl;
-  CURLcode result = CURLE_OK;
-  struct dynbuf build;
-
-  DEBUGASSERT(certnum < ci->num_of_certs);
-
-  Curl_dyn_init(&build, CURL_X509_STR_MAX);
-
-  if(Curl_dyn_add(&build, label) ||
-     Curl_dyn_addn(&build, ":", 1) ||
-     Curl_dyn_addn(&build, value, valuelen))
-    return CURLE_OUT_OF_MEMORY;
-
-  nl = Curl_slist_append_nodup(ci->certinfo[certnum],
-                               Curl_dyn_ptr(&build));
-  if(!nl) {
-    Curl_dyn_free(&build);
-    curl_slist_free_all(ci->certinfo[certnum]);
-    result = CURLE_OUT_OF_MEMORY;
-  }
-
-  ci->certinfo[certnum] = nl;
-  return result;
-}
-
-/* get 32 bits of random */
-CURLcode Curl_ssl_random(struct Curl_easy *data,
-                         unsigned char *entropy,
-                         size_t length)
-{
-  DEBUGASSERT(length == sizeof(int));
-  if(Curl_ssl->random)
-    return Curl_ssl->random(data, entropy, length);
-  else
-    return CURLE_NOT_BUILT_IN;
-}
-
-/*
- * Public key pem to der conversion
- */
-
-static CURLcode pubkey_pem_to_der(const char *pem,
-                                  unsigned char **der, size_t *der_len)
-{
-  char *begin_pos, *end_pos;
-  size_t pem_count, pem_len;
-  CURLcode result;
-  struct dynbuf pbuf;
-
-  /* if no pem, exit. */
-  if(!pem)
-    return CURLE_BAD_CONTENT_ENCODING;
-
-  Curl_dyn_init(&pbuf, MAX_PINNED_PUBKEY_SIZE);
-
-  begin_pos = strstr(pem, "-----BEGIN PUBLIC KEY-----");
-  if(!begin_pos)
-    return CURLE_BAD_CONTENT_ENCODING;
-
-  pem_count = begin_pos - pem;
-  /* Invalid if not at beginning AND not directly following \n */
-  if(0 != pem_count && '\n' != pem[pem_count - 1])
-    return CURLE_BAD_CONTENT_ENCODING;
-
-  /* 26 is length of "-----BEGIN PUBLIC KEY-----" */
-  pem_count += 26;
-
-  /* Invalid if not directly following \n */
-  end_pos = strstr(pem + pem_count, "\n-----END PUBLIC KEY-----");
-  if(!end_pos)
-    return CURLE_BAD_CONTENT_ENCODING;
-
-  pem_len = end_pos - pem;
-
-  /*
-   * Here we loop through the pem array one character at a time between the
-   * correct indices, and place each character that is not '\n' or '\r'
-   * into the stripped_pem array, which should represent the raw base64 string
-   */
-  while(pem_count < pem_len) {
-    if('\n' != pem[pem_count] && '\r' != pem[pem_count]) {
-      result = Curl_dyn_addn(&pbuf, &pem[pem_count], 1);
-      if(result)
-        return result;
-    }
-    ++pem_count;
-  }
-
-  result = Curl_base64_decode(Curl_dyn_ptr(&pbuf), der, der_len);
-
-  Curl_dyn_free(&pbuf);
-
-  return result;
-}
-
-/*
- * Generic pinned public key check.
- */
-
-CURLcode Curl_pin_peer_pubkey(struct Curl_easy *data,
-                              const char *pinnedpubkey,
-                              const unsigned char *pubkey, size_t pubkeylen)
-{
-  CURLcode result = CURLE_SSL_PINNEDPUBKEYNOTMATCH;
-#ifdef CURL_DISABLE_VERBOSE_STRINGS
-  (void)data;
-#endif
-
-  /* if a path was not specified, do not pin */
-  if(!pinnedpubkey)
-    return CURLE_OK;
-  if(!pubkey || !pubkeylen)
-    return result;
-
-  /* only do this if pinnedpubkey starts with "sha256//", length 8 */
-  if(!strncmp(pinnedpubkey, "sha256//", 8)) {
-    CURLcode encode;
-    size_t encodedlen = 0;
-    char *encoded = NULL, *pinkeycopy, *begin_pos, *end_pos;
-    unsigned char *sha256sumdigest;
-
-    if(!Curl_ssl->sha256sum) {
-      /* without sha256 support, this cannot match */
-      return result;
-    }
-
-    /* compute sha256sum of public key */
-    sha256sumdigest = malloc(CURL_SHA256_DIGEST_LENGTH);
-    if(!sha256sumdigest)
-      return CURLE_OUT_OF_MEMORY;
-    encode = Curl_ssl->sha256sum(pubkey, pubkeylen,
-                                 sha256sumdigest, CURL_SHA256_DIGEST_LENGTH);
-
-    if(!encode)
-      encode = Curl_base64_encode((char *)sha256sumdigest,
-                                  CURL_SHA256_DIGEST_LENGTH, &encoded,
-                                  &encodedlen);
-    Curl_safefree(sha256sumdigest);
-
-    if(encode)
-      return encode;
-
-    infof(data, " public key hash: sha256//%s", encoded);
-
-    /* it starts with sha256//, copy so we can modify it */
-    pinkeycopy = strdup(pinnedpubkey);
-    if(!pinkeycopy) {
-      Curl_safefree(encoded);
-      return CURLE_OUT_OF_MEMORY;
-    }
-    /* point begin_pos to the copy, and start extracting keys */
-    begin_pos = pinkeycopy;
-    do {
-      end_pos = strstr(begin_pos, ";sha256//");
-      /*
-       * if there is an end_pos, null terminate,
-       * otherwise it will go to the end of the original string
-       */
-      if(end_pos)
-        end_pos[0] = '\0';
-
-      /* compare base64 sha256 digests, 8 is the length of "sha256//" */
-      if(encodedlen == strlen(begin_pos + 8) &&
-         !memcmp(encoded, begin_pos + 8, encodedlen)) {
-        result = CURLE_OK;
-        break;
-      }
-
-      /*
-       * change back the null-terminator we changed earlier,
-       * and look for next begin
-       */
-      if(end_pos) {
-        end_pos[0] = ';';
-        begin_pos = strstr(end_pos, "sha256//");
-      }
-    } while(end_pos && begin_pos);
-    Curl_safefree(encoded);
-    Curl_safefree(pinkeycopy);
-  }
-  else {
-    long filesize;
-    size_t size, pem_len;
-    CURLcode pem_read;
-    struct dynbuf buf;
-    char unsigned *pem_ptr = NULL;
-    size_t left;
-    FILE *fp = fopen(pinnedpubkey, "rb");
-    if(!fp)
-      return result;
-
-    Curl_dyn_init(&buf, MAX_PINNED_PUBKEY_SIZE);
-
-    /* Determine the file's size */
-    if(fseek(fp, 0, SEEK_END))
-      goto end;
-    filesize = ftell(fp);
-    if(fseek(fp, 0, SEEK_SET))
-      goto end;
-    if(filesize < 0 || filesize > MAX_PINNED_PUBKEY_SIZE)
-      goto end;
-
-    /*
-     * if the size of our certificate is bigger than the file
-     * size then it cannot match
-     */
-    size = curlx_sotouz((curl_off_t) filesize);
-    if(pubkeylen > size)
-      goto end;
-
-    /*
-     * Read the file into the dynbuf
-     */
-    left = size;
-    do {
-      char buffer[1024];
-      size_t want = left > sizeof(buffer) ? sizeof(buffer) : left;
-      if(want != fread(buffer, 1, want, fp))
-        goto end;
-      if(Curl_dyn_addn(&buf, buffer, want))
-        goto end;
-      left -= want;
-    } while(left);
-
-    /* If the sizes are the same, it cannot be base64 encoded, must be der */
-    if(pubkeylen == size) {
-      if(!memcmp(pubkey, Curl_dyn_ptr(&buf), pubkeylen))
-        result = CURLE_OK;
-      goto end;
-    }
-
-    /*
-     * Otherwise we will assume it is PEM and try to decode it
-     * after placing null terminator
-     */
-    pem_read = pubkey_pem_to_der(Curl_dyn_ptr(&buf), &pem_ptr, &pem_len);
-    /* if it was not read successfully, exit */
-    if(pem_read)
-      goto end;
-
-    /*
-     * if the size of our certificate does not match the size of
-     * the decoded file, they cannot be the same, otherwise compare
-     */
-    if(pubkeylen == pem_len && !memcmp(pubkey, pem_ptr, pubkeylen))
-      result = CURLE_OK;
-end:
-    Curl_dyn_free(&buf);
-    Curl_safefree(pem_ptr);
-    fclose(fp);
-  }
-
-  return result;
-}
-
-/*
- * Check whether the SSL backend supports the status_request extension.
- */
-bool Curl_ssl_cert_status_request(void)
-{
-  return Curl_ssl->cert_status_request();
-}
-
-/*
- * Check whether the SSL backend supports false start.
- */
-bool Curl_ssl_false_start(struct Curl_easy *data)
-{
-  (void)data;
-  return Curl_ssl->false_start();
-}
-
-/*
- * Default implementations for unsupported functions.
- */
-
-int Curl_none_init(void)
-{
-  return 1;
-}
-
-void Curl_none_cleanup(void)
-{ }
-
-CURLcode Curl_none_shutdown(struct Curl_cfilter *cf UNUSED_PARAM,
-                            struct Curl_easy *data UNUSED_PARAM,
-                            bool send_shutdown UNUSED_PARAM,
-                            bool *done)
-{
-  (void)data;
-  (void)cf;
-  (void)send_shutdown;
-  /* Every SSL backend should have a shutdown implementation. Until we
-   * have implemented that, we put this fake in place. */
-  *done = TRUE;
-  return CURLE_OK;
-}
-
-int Curl_none_check_cxn(struct Curl_cfilter *cf, struct Curl_easy *data)
-{
-  (void)cf;
-  (void)data;
-  return -1;
-}
-
-void Curl_none_close_all(struct Curl_easy *data UNUSED_PARAM)
-{
-  (void)data;
-}
-
-void Curl_none_session_free(void *ptr UNUSED_PARAM)
-{
-  (void)ptr;
-}
-
-bool Curl_none_data_pending(struct Curl_cfilter *cf UNUSED_PARAM,
-                            const struct Curl_easy *data UNUSED_PARAM)
-{
-  (void)cf;
-  (void)data;
-  return 0;
-}
-
-bool Curl_none_cert_status_request(void)
-{
-  return FALSE;
-}
-
-CURLcode Curl_none_set_engine(struct Curl_easy *data UNUSED_PARAM,
-                              const char *engine UNUSED_PARAM)
-{
-  (void)data;
-  (void)engine;
-  return CURLE_NOT_BUILT_IN;
-}
-
-CURLcode Curl_none_set_engine_default(struct Curl_easy *data UNUSED_PARAM)
-{
-  (void)data;
-  return CURLE_NOT_BUILT_IN;
-}
-
-struct curl_slist *Curl_none_engines_list(struct Curl_easy *data UNUSED_PARAM)
-{
-  (void)data;
-  return (struct curl_slist *)NULL;
-}
-
-bool Curl_none_false_start(void)
-{
-  return FALSE;
-}
-
-static int multissl_init(void)
-{
-  if(multissl_setup(NULL))
-    return 1;
-  return Curl_ssl->init();
-}
-
-static CURLcode multissl_connect(struct Curl_cfilter *cf,
-                                 struct Curl_easy *data)
-{
-  if(multissl_setup(NULL))
-    return CURLE_FAILED_INIT;
-  return Curl_ssl->connect_blocking(cf, data);
-}
-
-static CURLcode multissl_connect_nonblocking(struct Curl_cfilter *cf,
-                                             struct Curl_easy *data,
-                                             bool *done)
-{
-  if(multissl_setup(NULL))
-    return CURLE_FAILED_INIT;
-  return Curl_ssl->connect_nonblocking(cf, data, done);
-}
-
-static void multissl_adjust_pollset(struct Curl_cfilter *cf,
-                                     struct Curl_easy *data,
-                                     struct easy_pollset *ps)
-{
-  if(multissl_setup(NULL))
-    return;
-  Curl_ssl->adjust_pollset(cf, data, ps);
-}
-
-static void *multissl_get_internals(struct ssl_connect_data *connssl,
-                                    CURLINFO info)
-{
-  if(multissl_setup(NULL))
-    return NULL;
-  return Curl_ssl->get_internals(connssl, info);
-}
-
-static void multissl_close(struct Curl_cfilter *cf, struct Curl_easy *data)
-{
-  if(multissl_setup(NULL))
-    return;
-  Curl_ssl->close(cf, data);
-}
-
-static ssize_t multissl_recv_plain(struct Curl_cfilter *cf,
-                                   struct Curl_easy *data,
-                                   char *buf, size_t len, CURLcode *code)
-{
-  if(multissl_setup(NULL))
-    return CURLE_FAILED_INIT;
-  return Curl_ssl->recv_plain(cf, data, buf, len, code);
-}
-
-static ssize_t multissl_send_plain(struct Curl_cfilter *cf,
-                                   struct Curl_easy *data,
-                                   const void *mem, size_t len,
-                                   CURLcode *code)
-{
-  if(multissl_setup(NULL))
-    return CURLE_FAILED_INIT;
-  return Curl_ssl->send_plain(cf, data, mem, len, code);
-}
-
-static const struct Curl_ssl Curl_ssl_multi = {
-  { CURLSSLBACKEND_NONE, "multi" },  /* info */
-  0, /* supports nothing */
-  (size_t)-1, /* something insanely large to be on the safe side */
-
-  multissl_init,                     /* init */
-  Curl_none_cleanup,                 /* cleanup */
-  multissl_version,                  /* version */
-  Curl_none_check_cxn,               /* check_cxn */
-  Curl_none_shutdown,                /* shutdown */
-  Curl_none_data_pending,            /* data_pending */
-  NULL,                              /* random */
-  Curl_none_cert_status_request,     /* cert_status_request */
-  multissl_connect,                  /* connect */
-  multissl_connect_nonblocking,      /* connect_nonblocking */
-  multissl_adjust_pollset,          /* adjust_pollset */
-  multissl_get_internals,            /* get_internals */
-  multissl_close,                    /* close_one */
-  Curl_none_close_all,               /* close_all */
-  Curl_none_set_engine,              /* set_engine */
-  Curl_none_set_engine_default,      /* set_engine_default */
-  Curl_none_engines_list,            /* engines_list */
-  Curl_none_false_start,             /* false_start */
-  NULL,                              /* sha256sum */
-  NULL,                              /* associate_connection */
-  NULL,                              /* disassociate_connection */
-  multissl_recv_plain,               /* recv decrypted data */
-  multissl_send_plain,               /* send data to encrypt */
-  NULL,                              /* get_channel_binding */
-};
-
-const struct Curl_ssl *Curl_ssl =
-#if defined(CURL_WITH_MULTI_SSL)
-  &Curl_ssl_multi;
-#elif defined(USE_WASI_TLS)
-  &Curl_ssl_wasi_tls;
-#elif defined(USE_WOLFSSL)
-  &Curl_ssl_wolfssl;
-#elif defined(USE_GNUTLS)
-  &Curl_ssl_gnutls;
-#elif defined(USE_MBEDTLS)
-  &Curl_ssl_mbedtls;
-#elif defined(USE_RUSTLS)
-  &Curl_ssl_rustls;
-#elif defined(USE_OPENSSL)
-  &Curl_ssl_openssl;
-#elif defined(USE_SECTRANSP)
-  &Curl_ssl_sectransp;
-#elif defined(USE_SCHANNEL)
-  &Curl_ssl_schannel;
-#elif defined(USE_BEARSSL)
-  &Curl_ssl_bearssl;
-#else
-#error "Missing struct Curl_ssl for selected SSL backend"
-#endif
-
-static const struct Curl_ssl *available_backends[] = {
-#if defined(USE_WOLFSSL)
-  &Curl_ssl_wolfssl,
-#endif
-#if defined(USE_GNUTLS)
-  &Curl_ssl_gnutls,
-#endif
-#if defined(USE_MBEDTLS)
-  &Curl_ssl_mbedtls,
-#endif
-#if defined(USE_OPENSSL)
-  &Curl_ssl_openssl,
-#endif
-#if defined(USE_SECTRANSP)
-  &Curl_ssl_sectransp,
-#endif
-#if defined(USE_SCHANNEL)
-  &Curl_ssl_schannel,
-#endif
-#if defined(USE_BEARSSL)
-  &Curl_ssl_bearssl,
-#endif
-#if defined(USE_RUSTLS)
-  &Curl_ssl_rustls,
-#endif
-#if defined(USE_WASI_TLS)
-  &Curl_ssl_wasi_tls,
-#endif
-  NULL
-};
-
-/* Global cleanup */
-void Curl_ssl_cleanup(void)
-{
-  if(init_ssl) {
-    /* only cleanup if we did a previous init */
-    Curl_ssl->cleanup();
-#if defined(CURL_WITH_MULTI_SSL)
-    Curl_ssl = &Curl_ssl_multi;
-#endif
-    init_ssl = FALSE;
-  }
-}
-
-static size_t multissl_version(char *buffer, size_t size)
-{
-  static const struct Curl_ssl *selected;
-  static char backends[200];
-  static size_t backends_len;
-  const struct Curl_ssl *current;
-
-  current = Curl_ssl == &Curl_ssl_multi ? available_backends[0] : Curl_ssl;
-
-  if(current != selected) {
-    char *p = backends;
-    char *end = backends + sizeof(backends);
-    int i;
-
-    selected = current;
-
-    backends[0] = '\0';
-
-    for(i = 0; available_backends[i]; ++i) {
-      char vb[200];
-      bool paren = (selected != available_backends[i]);
-
-      if(available_backends[i]->version(vb, sizeof(vb))) {
-        p += msnprintf(p, end - p, "%s%s%s%s", (p != backends ? " " : ""),
-                       (paren ? "(" : ""), vb, (paren ? ")" : ""));
-      }
-    }
-
-    backends_len = p - backends;
-  }
-
-  if(size) {
-    if(backends_len < size)
-      strcpy(buffer, backends);
-    else
-      *buffer = 0; /* did not fit */
-  }
-  return 0;
-}
-
-static int multissl_setup(const struct Curl_ssl *backend)
-{
-  const char *env;
-  char *env_tmp;
-
-  if(Curl_ssl != &Curl_ssl_multi)
-    return 1;
-
-  if(backend) {
-    Curl_ssl = backend;
-    return 0;
-  }
-
-  if(!available_backends[0])
-    return 1;
-
-  env = env_tmp = curl_getenv("CURL_SSL_BACKEND");
-#ifdef CURL_DEFAULT_SSL_BACKEND
-  if(!env)
-    env = CURL_DEFAULT_SSL_BACKEND;
-#endif
-  if(env) {
-    int i;
-    for(i = 0; available_backends[i]; i++) {
-      if(strcasecompare(env, available_backends[i]->info.name)) {
-        Curl_ssl = available_backends[i];
-        free(env_tmp);
-        return 0;
-      }
-    }
-  }
-
-  /* Fall back to first available backend */
-  Curl_ssl = available_backends[0];
-  free(env_tmp);
-  return 0;
-}
-
-/* This function is used to select the SSL backend to use. It is called by
-   curl_global_sslset (easy.c) which uses the global init lock. */
-CURLsslset Curl_init_sslset_nolock(curl_sslbackend id, const char *name,
-                                   const curl_ssl_backend ***avail)
-{
-  int i;
-
-  if(avail)
-    *avail = (const curl_ssl_backend **)&available_backends;
-
-  if(Curl_ssl != &Curl_ssl_multi)
-    return id == Curl_ssl->info.id ||
-           (name && strcasecompare(name, Curl_ssl->info.name)) ?
-           CURLSSLSET_OK :
-#if defined(CURL_WITH_MULTI_SSL)
-           CURLSSLSET_TOO_LATE;
-#else
-           CURLSSLSET_UNKNOWN_BACKEND;
-#endif
-
-  for(i = 0; available_backends[i]; i++) {
-    if(available_backends[i]->info.id == id ||
-       (name && strcasecompare(available_backends[i]->info.name, name))) {
-      multissl_setup(available_backends[i]);
-      return CURLSSLSET_OK;
-    }
-  }
-
-  return CURLSSLSET_UNKNOWN_BACKEND;
-}
-
-#else /* USE_SSL */
-CURLsslset Curl_init_sslset_nolock(curl_sslbackend id, const char *name,
-                                   const curl_ssl_backend ***avail)
-{
-  (void)id;
-  (void)name;
-  (void)avail;
-  return CURLSSLSET_NO_BACKENDS;
-}
-
-#endif /* !USE_SSL */
-
-#ifdef USE_SSL
-
-void Curl_ssl_peer_cleanup(struct ssl_peer *peer)
-{
-  if(peer->dispname != peer->hostname)
-    free(peer->dispname);
-  free(peer->sni);
-  free(peer->hostname);
-  peer->hostname = peer->sni = peer->dispname = NULL;
-  peer->type = CURL_SSL_PEER_DNS;
-}
-
-static void cf_close(struct Curl_cfilter *cf, struct Curl_easy *data)
-{
-  struct ssl_connect_data *connssl = cf->ctx;
-  if(connssl) {
-    Curl_ssl->close(cf, data);
-    connssl->state = ssl_connection_none;
-    Curl_ssl_peer_cleanup(&connssl->peer);
-  }
-  cf->connected = FALSE;
-}
-
-static ssl_peer_type get_peer_type(const char *hostname)
-{
-  if(hostname && hostname[0]) {
-#ifdef USE_IPV6
-    struct in6_addr addr;
-#else
-    struct in_addr addr;
-#endif
-    if(Curl_inet_pton(AF_INET, hostname, &addr))
-      return CURL_SSL_PEER_IPV4;
-#ifdef USE_IPV6
-    else if(Curl_inet_pton(AF_INET6, hostname, &addr)) {
-      return CURL_SSL_PEER_IPV6;
-    }
-#endif
-  }
-  return CURL_SSL_PEER_DNS;
-}
-
-CURLcode Curl_ssl_peer_init(struct ssl_peer *peer, struct Curl_cfilter *cf,
-                            int transport)
-{
-  const char *ehostname, *edispname;
-  CURLcode result = CURLE_OUT_OF_MEMORY;
-
-  /* We expect a clean struct, e.g. called only ONCE */
-  DEBUGASSERT(peer);
-  DEBUGASSERT(!peer->hostname);
-  DEBUGASSERT(!peer->dispname);
-  DEBUGASSERT(!peer->sni);
-  /* We need the hostname for SNI negotiation. Once handshaked, this remains
-   * the SNI hostname for the TLS connection. When the connection is reused,
-   * the settings in cf->conn might change. We keep a copy of the hostname we
-   * use for SNI.
-   */
-  peer->transport = transport;
-#ifndef CURL_DISABLE_PROXY
-  if(Curl_ssl_cf_is_proxy(cf)) {
-    ehostname = cf->conn->http_proxy.host.name;
-    edispname = cf->conn->http_proxy.host.dispname;
-    peer->port = cf->conn->http_proxy.port;
-  }
-  else
-#endif
-  {
-    ehostname = cf->conn->host.name;
-    edispname = cf->conn->host.dispname;
-    peer->port = cf->conn->remote_port;
-  }
-
-  /* hostname MUST exist and not be empty */
-  if(!ehostname || !ehostname[0]) {
-    result = CURLE_FAILED_INIT;
-    goto out;
-  }
-
-  peer->hostname = strdup(ehostname);
-  if(!peer->hostname)
-    goto out;
-  if(!edispname || !strcmp(ehostname, edispname))
-    peer->dispname = peer->hostname;
-  else {
-    peer->dispname = strdup(edispname);
-    if(!peer->dispname)
-      goto out;
-  }
-  peer->type = get_peer_type(peer->hostname);
-  if(peer->type == CURL_SSL_PEER_DNS) {
-    /* not an IP address, normalize according to RCC 6066 ch. 3,
-     * max len of SNI is 2^16-1, no trailing dot */
-    size_t len = strlen(peer->hostname);
-    if(len && (peer->hostname[len-1] == '.'))
-      len--;
-    if(len < USHRT_MAX) {
-      peer->sni = calloc(1, len + 1);
-      if(!peer->sni)
-        goto out;
-      Curl_strntolower(peer->sni, peer->hostname, len);
-      peer->sni[len] = 0;
-    }
-  }
-  result = CURLE_OK;
-
-out:
-  if(result)
-    Curl_ssl_peer_cleanup(peer);
-  return result;
-}
-
-static void ssl_cf_destroy(struct Curl_cfilter *cf, struct Curl_easy *data)
-{
-  struct cf_call_data save;
-
-  CF_DATA_SAVE(save, cf, data);
-  cf_close(cf, data);
-  CF_DATA_RESTORE(cf, save);
-  cf_ctx_free(cf->ctx);
-  cf->ctx = NULL;
-}
-
-static void ssl_cf_close(struct Curl_cfilter *cf,
-                         struct Curl_easy *data)
-{
-  struct cf_call_data save;
-
-  CF_DATA_SAVE(save, cf, data);
-  cf_close(cf, data);
-  if(cf->next)
-    cf->next->cft->do_close(cf->next, data);
-  CF_DATA_RESTORE(cf, save);
-}
-
-static CURLcode ssl_cf_connect(struct Curl_cfilter *cf,
-                               struct Curl_easy *data,
-                               bool blocking, bool *done)
-{
-  struct ssl_connect_data *connssl = cf->ctx;
-  struct cf_call_data save;
-  CURLcode result;
-
-  if(cf->connected) {
-    *done = TRUE;
-    return CURLE_OK;
-  }
-
-  if(!cf->next) {
-    *done = FALSE;
-    return CURLE_FAILED_INIT;
-  }
-
-  if(!cf->next->connected) {
-    result = cf->next->cft->do_connect(cf->next, data, blocking, done);
-    if(result || !*done)
-      return result;
-  }
-
-  CF_DATA_SAVE(save, cf, data);
-  CURL_TRC_CF(data, cf, "cf_connect()");
-  DEBUGASSERT(data->conn);
-  DEBUGASSERT(data->conn == cf->conn);
-  DEBUGASSERT(connssl);
-
-  *done = FALSE;
-  if(!connssl->peer.hostname) {
-    result = Curl_ssl_peer_init(&connssl->peer, cf, TRNSPRT_TCP);
-    if(result)
-      goto out;
-  }
-
-  if(blocking) {
-    result = ssl_connect(cf, data);
-    *done = (result == CURLE_OK);
-  }
-  else {
-    result = ssl_connect_nonblocking(cf, data, done);
-  }
-
-  if(!result && *done) {
-    cf->connected = TRUE;
-    connssl->handshake_done = Curl_now();
-    /* Connection can be deferred when sending early data */
-    DEBUGASSERT(connssl->state == ssl_connection_complete ||
-                connssl->state == ssl_connection_deferred);
-  }
-out:
-  CURL_TRC_CF(data, cf, "cf_connect() -> %d, done=%d", result, *done);
-  CF_DATA_RESTORE(cf, save);
-  return result;
-}
-
-static bool ssl_cf_data_pending(struct Curl_cfilter *cf,
-                                const struct Curl_easy *data)
-{
-  struct cf_call_data save;
-  bool result;
-
-  CF_DATA_SAVE(save, cf, data);
-  if(Curl_ssl->data_pending(cf, data))
-    result = TRUE;
-  else
-    result = cf->next->cft->has_data_pending(cf->next, data);
-  CF_DATA_RESTORE(cf, save);
-  return result;
-}
-
-static ssize_t ssl_cf_send(struct Curl_cfilter *cf,
-                           struct Curl_easy *data, const void *buf, size_t len,
-                           bool eos, CURLcode *err)
-{
-  struct cf_call_data save;
-  ssize_t nwritten = 0;
-
-  (void)eos;
-  /* OpenSSL and maybe other TLS libs do not like 0-length writes. Skip. */
-  *err = CURLE_OK;
-  if(len > 0) {
-    CF_DATA_SAVE(save, cf, data);
-    nwritten = Curl_ssl->send_plain(cf, data, buf, len, err);
-    CF_DATA_RESTORE(cf, save);
-  }
-  return nwritten;
-}
-
-static ssize_t ssl_cf_recv(struct Curl_cfilter *cf,
-                           struct Curl_easy *data, char *buf, size_t len,
-                           CURLcode *err)
-{
-  struct cf_call_data save;
-  ssize_t nread;
-
-  CF_DATA_SAVE(save, cf, data);
-  *err = CURLE_OK;
-  nread = Curl_ssl->recv_plain(cf, data, buf, len, err);
-  if(nread > 0) {
-    DEBUGASSERT((size_t)nread <= len);
-  }
-  else if(nread == 0) {
-    /* eof */
-    *err = CURLE_OK;
-  }
-  CURL_TRC_CF(data, cf, "cf_recv(len=%zu) -> %zd, %d", len,
-              nread, *err);
-  CF_DATA_RESTORE(cf, save);
-  return nread;
-}
-
-static CURLcode ssl_cf_shutdown(struct Curl_cfilter *cf,
-                                struct Curl_easy *data,
-                                bool *done)
-{
-  CURLcode result = CURLE_OK;
-
-  *done = TRUE;
-  if(!cf->shutdown) {
-    struct cf_call_data save;
-
-    CF_DATA_SAVE(save, cf, data);
-    result = Curl_ssl->shut_down(cf, data, TRUE, done);
-    CURL_TRC_CF(data, cf, "cf_shutdown -> %d, done=%d", result, *done);
-    CF_DATA_RESTORE(cf, save);
-    cf->shutdown = (result || *done);
-  }
-  return result;
-}
-
-static void ssl_cf_adjust_pollset(struct Curl_cfilter *cf,
-                                  struct Curl_easy *data,
-                                  struct easy_pollset *ps)
-{
-  struct cf_call_data save;
-
-  CF_DATA_SAVE(save, cf, data);
-  Curl_ssl->adjust_pollset(cf, data, ps);
-  CF_DATA_RESTORE(cf, save);
-}
-
-static CURLcode ssl_cf_cntrl(struct Curl_cfilter *cf,
-                             struct Curl_easy *data,
-                             int event, int arg1, void *arg2)
-{
-  struct cf_call_data save;
-
-  (void)arg1;
-  (void)arg2;
-  switch(event) {
-  case CF_CTRL_DATA_ATTACH:
-    if(Curl_ssl->attach_data) {
-      CF_DATA_SAVE(save, cf, data);
-      Curl_ssl->attach_data(cf, data);
-      CF_DATA_RESTORE(cf, save);
-    }
-    break;
-  case CF_CTRL_DATA_DETACH:
-    if(Curl_ssl->detach_data) {
-      CF_DATA_SAVE(save, cf, data);
-      Curl_ssl->detach_data(cf, data);
-      CF_DATA_RESTORE(cf, save);
-    }
-    break;
-  default:
-    break;
-  }
-  return CURLE_OK;
-}
-
-static CURLcode ssl_cf_query(struct Curl_cfilter *cf,
-                             struct Curl_easy *data,
-                             int query, int *pres1, void *pres2)
-{
-  struct ssl_connect_data *connssl = cf->ctx;
-
-  switch(query) {
-  case CF_QUERY_TIMER_APPCONNECT: {
-    struct curltime *when = pres2;
-    if(cf->connected && !Curl_ssl_cf_is_proxy(cf))
-      *when = connssl->handshake_done;
-    return CURLE_OK;
-  }
-  default:
-    break;
-  }
-  return cf->next ?
-    cf->next->cft->query(cf->next, data, query, pres1, pres2) :
-    CURLE_UNKNOWN_OPTION;
-}
-
-static bool cf_ssl_is_alive(struct Curl_cfilter *cf, struct Curl_easy *data,
-                            bool *input_pending)
-{
-  struct cf_call_data save;
-  int result;
-  /*
-   * This function tries to determine connection status.
-   *
-   * Return codes:
-   *     1 means the connection is still in place
-   *     0 means the connection has been closed
-   *    -1 means the connection status is unknown
-   */
-  CF_DATA_SAVE(save, cf, data);
-  result = Curl_ssl->check_cxn(cf, data);
-  CF_DATA_RESTORE(cf, save);
-  if(result > 0) {
-    *input_pending = TRUE;
-    return TRUE;
-  }
-  if(result == 0) {
-    *input_pending = FALSE;
-    return FALSE;
-  }
-  /* ssl backend does not know */
-  return cf->next ?
-    cf->next->cft->is_alive(cf->next, data, input_pending) :
-    FALSE; /* pessimistic in absence of data */
-}
-
-struct Curl_cftype Curl_cft_ssl = {
-  "SSL",
-  CF_TYPE_SSL,
-  CURL_LOG_LVL_NONE,
-  ssl_cf_destroy,
-  ssl_cf_connect,
-  ssl_cf_close,
-  ssl_cf_shutdown,
-  Curl_cf_def_get_host,
-  ssl_cf_adjust_pollset,
-  ssl_cf_data_pending,
-  ssl_cf_send,
-  ssl_cf_recv,
-  ssl_cf_cntrl,
-  cf_ssl_is_alive,
-  Curl_cf_def_conn_keep_alive,
-  ssl_cf_query,
-};
-
-#ifndef CURL_DISABLE_PROXY
-
-struct Curl_cftype Curl_cft_ssl_proxy = {
-  "SSL-PROXY",
-  CF_TYPE_SSL|CF_TYPE_PROXY,
-  CURL_LOG_LVL_NONE,
-  ssl_cf_destroy,
-  ssl_cf_connect,
-  ssl_cf_close,
-  ssl_cf_shutdown,
-  Curl_cf_def_get_host,
-  ssl_cf_adjust_pollset,
-  ssl_cf_data_pending,
-  ssl_cf_send,
-  ssl_cf_recv,
-  ssl_cf_cntrl,
-  cf_ssl_is_alive,
-  Curl_cf_def_conn_keep_alive,
-  Curl_cf_def_query,
-};
-
-#endif /* !CURL_DISABLE_PROXY */
-
-static CURLcode cf_ssl_create(struct Curl_cfilter **pcf,
-                              struct Curl_easy *data,
-                              struct connectdata *conn)
-{
-  struct Curl_cfilter *cf = NULL;
-  struct ssl_connect_data *ctx;
-  CURLcode result;
-
-  DEBUGASSERT(data->conn);
-
-  ctx = cf_ctx_new(data, alpn_get_spec(data->state.httpwant,
-                                       conn->bits.tls_enable_alpn));
-  if(!ctx) {
-    result = CURLE_OUT_OF_MEMORY;
-    goto out;
-  }
-
-  result = Curl_cf_create(&cf, &Curl_cft_ssl, ctx);
-
-out:
-  if(result)
-    cf_ctx_free(ctx);
-  *pcf = result ? NULL : cf;
-  return result;
-}
-
-CURLcode Curl_ssl_cfilter_add(struct Curl_easy *data,
-                              struct connectdata *conn,
-                              int sockindex)
-{
-  struct Curl_cfilter *cf;
-  CURLcode result;
-
-  result = cf_ssl_create(&cf, data, conn);
-  if(!result)
-    Curl_conn_cf_add(data, conn, sockindex, cf);
-  return result;
-}
-
-CURLcode Curl_cf_ssl_insert_after(struct Curl_cfilter *cf_at,
-                                  struct Curl_easy *data)
-{
-  struct Curl_cfilter *cf;
-  CURLcode result;
-
-  result = cf_ssl_create(&cf, data, cf_at->conn);
-  if(!result)
-    Curl_conn_cf_insert_after(cf_at, cf);
-  return result;
-}
-
-#ifndef CURL_DISABLE_PROXY
-
-static CURLcode cf_ssl_proxy_create(struct Curl_cfilter **pcf,
-                                    struct Curl_easy *data,
-                                    struct connectdata *conn)
-{
-  struct Curl_cfilter *cf = NULL;
-  struct ssl_connect_data *ctx;
-  CURLcode result;
-  bool use_alpn = conn->bits.tls_enable_alpn;
-  int httpwant = CURL_HTTP_VERSION_1_1;
-
-#ifdef USE_HTTP2
-  if(conn->http_proxy.proxytype == CURLPROXY_HTTPS2) {
-    use_alpn = TRUE;
-    httpwant = CURL_HTTP_VERSION_2;
-  }
-#endif
-
-  ctx = cf_ctx_new(data, alpn_get_spec(httpwant, use_alpn));
-  if(!ctx) {
-    result = CURLE_OUT_OF_MEMORY;
-    goto out;
-  }
-  result = Curl_cf_create(&cf, &Curl_cft_ssl_proxy, ctx);
-
-out:
-  if(result)
-    cf_ctx_free(ctx);
-  *pcf = result ? NULL : cf;
-  return result;
-}
-
-CURLcode Curl_cf_ssl_proxy_insert_after(struct Curl_cfilter *cf_at,
-                                        struct Curl_easy *data)
-{
-  struct Curl_cfilter *cf;
-  CURLcode result;
-
-  result = cf_ssl_proxy_create(&cf, data, cf_at->conn);
-  if(!result)
-    Curl_conn_cf_insert_after(cf_at, cf);
-  return result;
-}
-
-#endif /* !CURL_DISABLE_PROXY */
-
-bool Curl_ssl_supports(struct Curl_easy *data, unsigned int ssl_option)
-{
-  (void)data;
-  return (Curl_ssl->supports & ssl_option);
-}
-
-static struct Curl_cfilter *get_ssl_filter(struct Curl_cfilter *cf)
-{
-  for(; cf; cf = cf->next) {
-    if(cf->cft == &Curl_cft_ssl)
-      return cf;
-#ifndef CURL_DISABLE_PROXY
-    if(cf->cft == &Curl_cft_ssl_proxy)
-      return cf;
-#endif
-  }
-  return NULL;
-}
-
-
-void *Curl_ssl_get_internals(struct Curl_easy *data, int sockindex,
-                             CURLINFO info, int n)
-{
-  void *result = NULL;
-  (void)n;
-  if(data->conn) {
-    struct Curl_cfilter *cf;
-    /* get first SSL filter in chain, if any is present */
-    cf = get_ssl_filter(data->conn->cfilter[sockindex]);
-    if(cf) {
-      struct cf_call_data save;
-      CF_DATA_SAVE(save, cf, data);
-      result = Curl_ssl->get_internals(cf->ctx, info);
-      CF_DATA_RESTORE(cf, save);
-    }
-  }
-  return result;
-}
-
-static CURLcode vtls_shutdown_blocking(struct Curl_cfilter *cf,
-                                       struct Curl_easy *data,
-                                       bool send_shutdown, bool *done)
-{
-  struct ssl_connect_data *connssl = cf->ctx;
-  struct cf_call_data save;
-  CURLcode result = CURLE_OK;
-  timediff_t timeout_ms;
-  int what, loop = 10;
-
-  if(cf->shutdown) {
-    *done = TRUE;
-    return CURLE_OK;
-  }
-  CF_DATA_SAVE(save, cf, data);
-
-  *done = FALSE;
-  while(!result && !*done && loop--) {
-    timeout_ms = Curl_shutdown_timeleft(cf->conn, cf->sockindex, NULL);
-
-    if(timeout_ms < 0) {
-      /* no need to continue if time is already up */
-      failf(data, "SSL shutdown timeout");
-      return CURLE_OPERATION_TIMEDOUT;
-    }
-
-    result = Curl_ssl->shut_down(cf, data, send_shutdown, done);
-    if(result ||*done)
-      goto out;
-
-    if(connssl->io_need) {
-      what = Curl_conn_cf_poll(cf, data, timeout_ms);
-      if(what < 0) {
-        /* fatal error */
-        failf(data, "select/poll on SSL socket, errno: %d", SOCKERRNO);
-        result = CURLE_RECV_ERROR;
-        goto out;
-      }
-      else if(0 == what) {
-        /* timeout */
-        failf(data, "SSL shutdown timeout");
-        result = CURLE_OPERATION_TIMEDOUT;
-        goto out;
-      }
-      /* socket is readable or writable */
-    }
-  }
-out:
-  CF_DATA_RESTORE(cf, save);
-  cf->shutdown = (result || *done);
-  return result;
-}
-
-CURLcode Curl_ssl_cfilter_remove(struct Curl_easy *data,
-                                 int sockindex, bool send_shutdown)
-{
-  struct Curl_cfilter *cf, *head;
-  CURLcode result = CURLE_OK;
-
-  head = data->conn ? data->conn->cfilter[sockindex] : NULL;
-  for(cf = head; cf; cf = cf->next) {
-    if(cf->cft == &Curl_cft_ssl) {
-      bool done;
-      CURL_TRC_CF(data, cf, "shutdown and remove SSL, start");
-      Curl_shutdown_start(data, sockindex, NULL);
-      result = vtls_shutdown_blocking(cf, data, send_shutdown, &done);
-      Curl_shutdown_clear(data, sockindex);
-      if(!result && !done) /* blocking failed? */
-        result = CURLE_SSL_SHUTDOWN_FAILED;
-      Curl_conn_cf_discard_sub(head, cf, data, FALSE);
-      CURL_TRC_CF(data, cf, "shutdown and remove SSL, done -> %d", result);
-      break;
-    }
-  }
-  return result;
-}
-
-bool Curl_ssl_cf_is_proxy(struct Curl_cfilter *cf)
-{
-  return (cf->cft->flags & CF_TYPE_SSL) && (cf->cft->flags & CF_TYPE_PROXY);
-}
-
-struct ssl_config_data *
-Curl_ssl_cf_get_config(struct Curl_cfilter *cf, struct Curl_easy *data)
-{
-#ifdef CURL_DISABLE_PROXY
-  (void)cf;
-  return &data->set.ssl;
-#else
-  return Curl_ssl_cf_is_proxy(cf) ? &data->set.proxy_ssl : &data->set.ssl;
-#endif
-}
-
-struct ssl_primary_config *
-Curl_ssl_cf_get_primary_config(struct Curl_cfilter *cf)
-{
-#ifdef CURL_DISABLE_PROXY
-  return &cf->conn->ssl_config;
-#else
-  return Curl_ssl_cf_is_proxy(cf) ?
-    &cf->conn->proxy_ssl_config : &cf->conn->ssl_config;
-#endif
-}
-
-CURLcode Curl_alpn_to_proto_buf(struct alpn_proto_buf *buf,
-                                const struct alpn_spec *spec)
-{
-  size_t i, len;
-  int off = 0;
-  unsigned char blen;
-
-  memset(buf, 0, sizeof(*buf));
-  for(i = 0; spec && i < spec->count; ++i) {
-    len = strlen(spec->entries[i]);
-    if(len >= ALPN_NAME_MAX)
-      return CURLE_FAILED_INIT;
-    blen = (unsigned  char)len;
-    if(off + blen + 1 >= (int)sizeof(buf->data))
-      return CURLE_FAILED_INIT;
-    buf->data[off++] = blen;
-    memcpy(buf->data + off, spec->entries[i], blen);
-    off += blen;
-  }
-  buf->len = off;
-  return CURLE_OK;
-}
-
-CURLcode Curl_alpn_to_proto_str(struct alpn_proto_buf *buf,
-                                const struct alpn_spec *spec)
-{
-  size_t i, len;
-  size_t off = 0;
-
-  memset(buf, 0, sizeof(*buf));
-  for(i = 0; spec && i < spec->count; ++i) {
-    len = strlen(spec->entries[i]);
-    if(len >= ALPN_NAME_MAX)
-      return CURLE_FAILED_INIT;
-    if(off + len + 2 >= sizeof(buf->data))
-      return CURLE_FAILED_INIT;
-    if(off)
-      buf->data[off++] = ',';
-    memcpy(buf->data + off, spec->entries[i], len);
-    off += len;
-  }
-  buf->data[off] = '\0';
-  buf->len = (int)off;
-  return CURLE_OK;
-}
-
-bool Curl_alpn_contains_proto(const struct alpn_spec *spec,
-                              const char *proto)
-{
-  size_t i, plen = proto ? strlen(proto) : 0;
-  for(i = 0; spec && plen && i < spec->count; ++i) {
-    size_t slen = strlen(spec->entries[i]);
-    if((slen == plen) && !memcmp(proto, spec->entries[i], plen))
-      return TRUE;
-  }
-  return FALSE;
-}
-
-CURLcode Curl_alpn_set_negotiated(struct Curl_cfilter *cf,
-                                  struct Curl_easy *data,
-                                  struct ssl_connect_data *connssl,
-                                  const unsigned char *proto,
-                                  size_t proto_len)
-{
-  CURLcode result = CURLE_OK;
-  unsigned char *palpn =
-#ifndef CURL_DISABLE_PROXY
-    (cf->conn->bits.tunnel_proxy && Curl_ssl_cf_is_proxy(cf)) ?
-    &cf->conn->proxy_alpn : &cf->conn->alpn
-#else
-    &cf->conn->alpn
-#endif
-    ;
-
-  if(connssl->alpn_negotiated) {
-    /* When we ask for a specific ALPN protocol, we need the confirmation
-     * of it by the server, as we have installed protocol handler and
-     * connection filter chain for exactly this protocol. */
-    if(!proto_len) {
-      failf(data, "ALPN: asked for '%s' from previous session, "
-            "but server did not confirm it. Refusing to continue.",
-            connssl->alpn_negotiated);
-      result = CURLE_SSL_CONNECT_ERROR;
-      goto out;
-    }
-    else if((strlen(connssl->alpn_negotiated) != proto_len) ||
-            memcmp(connssl->alpn_negotiated, proto, proto_len)) {
-      failf(data, "ALPN: asked for '%s' from previous session, but server "
-            "selected '%.*s'. Refusing to continue.",
-            connssl->alpn_negotiated, (int)proto_len, proto);
-      result = CURLE_SSL_CONNECT_ERROR;
-      goto out;
-    }
-    /* ALPN is exactly what we asked for, done. */
-    infof(data, "ALPN: server confirmed to use '%s'",
-          connssl->alpn_negotiated);
-    goto out;
-  }
-
-  if(proto && proto_len) {
-    if(memchr(proto, '\0', proto_len)) {
-      failf(data, "ALPN: server selected protocol contains NUL. "
-            "Refusing to continue.");
-      result = CURLE_SSL_CONNECT_ERROR;
-      goto out;
-    }
-    connssl->alpn_negotiated = malloc(proto_len + 1);
-    if(!connssl->alpn_negotiated)
-      return CURLE_OUT_OF_MEMORY;
-    memcpy(connssl->alpn_negotiated, proto, proto_len);
-    connssl->alpn_negotiated[proto_len] = 0;
-  }
-
-  if(proto && proto_len) {
-    if(proto_len == ALPN_HTTP_1_1_LENGTH &&
-       !memcmp(ALPN_HTTP_1_1, proto, ALPN_HTTP_1_1_LENGTH)) {
-      *palpn = CURL_HTTP_VERSION_1_1;
-    }
-#ifdef USE_HTTP2
-    else if(proto_len == ALPN_H2_LENGTH &&
-            !memcmp(ALPN_H2, proto, ALPN_H2_LENGTH)) {
-      *palpn = CURL_HTTP_VERSION_2;
-    }
-#endif
-#ifdef USE_HTTP3
-    else if(proto_len == ALPN_H3_LENGTH &&
-            !memcmp(ALPN_H3, proto, ALPN_H3_LENGTH)) {
-      *palpn = CURL_HTTP_VERSION_3;
-    }
-#endif
-    else {
-      *palpn = CURL_HTTP_VERSION_NONE;
-      failf(data, "unsupported ALPN protocol: '%.*s'", (int)proto_len, proto);
-      /* TODO: do we want to fail this? Previous code just ignored it and
-       * some vtls backends even ignore the return code of this function. */
-      /* return CURLE_NOT_BUILT_IN; */
-      goto out;
-    }
-
-    if(connssl->state == ssl_connection_deferred)
-      infof(data, VTLS_INFOF_ALPN_DEFERRED, (int)proto_len, proto);
-    else
-      infof(data, VTLS_INFOF_ALPN_ACCEPTED, (int)proto_len, proto);
-  }
-  else {
-    *palpn = CURL_HTTP_VERSION_NONE;
-    if(connssl->state == ssl_connection_deferred)
-      infof(data, VTLS_INFOF_NO_ALPN_DEFERRED);
-    else
-      infof(data, VTLS_INFOF_NO_ALPN);
-  }
-
-out:
-  return result;
-}
-
-#endif /* USE_SSL */
diff --git a/registry/native/c/curl-upstream-overlay/lib/vtls/wasi_tls.c b/registry/native/c/curl-upstream-overlay/lib/vtls/wasi_tls.c
deleted file mode 100644
index a6a59e1ee..000000000
--- a/registry/native/c/curl-upstream-overlay/lib/vtls/wasi_tls.c
+++ /dev/null
@@ -1,187 +0,0 @@
-/*
- * WASI TLS backend for libcurl
- *
- * Uses the host_net WASM import net_tls_connect() to upgrade a TCP
- * socket to TLS. The host runtime (Node.js tls.connect()) handles all
- * cryptographic operations transparently — after the upgrade, regular
- * send()/recv() carry encrypted traffic. This backend therefore just
- * calls the host import during connect and passes data through to the
- * socket layer for send/recv.
- */
-
-#include "curl_setup.h"
-
-#ifdef USE_WASI_TLS
-
-#include <unistd.h>
-
-#include "urldata.h"
-#include "sendf.h"
-#include "vtls.h"
-#include "vtls_int.h"
-#include "connect.h"
-#include "select.h"
-#include "curl_printf.h"
-
-/* The last #include files should be: */
-#include "curl_memory.h"
-#include "memdebug.h"
-
-/* WASM import: upgrade a TCP socket FD to TLS.
- * flags: 0 = verify peer certificate (default)
- *        1 = skip peer certificate verification (-k / --insecure)
- * Returns 0 on success, errno on failure. */
-__attribute__((import_module("host_net"), import_name("net_tls_connect")))
-extern int __wasi_net_tls_connect(int fd, const char *hostname_ptr,
-                                  int hostname_len, int flags);
-
-/* Per-connection backend data (minimal — host handles all TLS state) */
-struct wasi_tls_backend_data {
-  int dummy; /* struct must be non-empty */
-};
-
-static size_t wasi_tls_version(char *buffer, size_t size)
-{
-  return msnprintf(buffer, size, "WASI-TLS/host");
-}
-
-static CURLcode wasi_tls_connect_blocking(struct Curl_cfilter *cf,
-                                          struct Curl_easy *data)
-{
-  struct ssl_connect_data *connssl = cf->ctx;
-  curl_socket_t sockfd = Curl_conn_cf_get_socket(cf, data);
-  const char *hostname = connssl->peer.hostname;
-  int flags = 0;
-
-  /* Check if peer verification is disabled (curl -k / --insecure) */
-  struct ssl_primary_config *conn_config = Curl_ssl_cf_get_primary_config(cf);
-  if(conn_config && !conn_config->verifypeer) {
-    flags = 1;
-  }
-
-  int ret = __wasi_net_tls_connect((int)sockfd, hostname,
-                                   (int)strlen(hostname), flags);
-  if(ret != 0) {
-    failf(data, "WASI TLS: host TLS connect failed (errno %d)", ret);
-    return CURLE_SSL_CONNECT_ERROR;
-  }
-
-  connssl->state = ssl_connection_complete;
-  return CURLE_OK;
-}
-
-static CURLcode wasi_tls_connect_nonblocking(struct Curl_cfilter *cf,
-                                             struct Curl_easy *data,
-                                             bool *done)
-{
-  /* Our host TLS connect is synchronous — just call blocking version */
-  CURLcode result = wasi_tls_connect_blocking(cf, data);
-  *done = (result == CURLE_OK);
-  return result;
-}
-
-/* recv: pass through to the socket layer — host handles decryption */
-static ssize_t wasi_tls_recv(struct Curl_cfilter *cf,
-                             struct Curl_easy *data,
-                             char *buf, size_t len, CURLcode *err)
-{
-  return Curl_conn_cf_recv(cf->next, data, buf, len, err);
-}
-
-/* send: pass through to the socket layer — host handles encryption */
-static ssize_t wasi_tls_send(struct Curl_cfilter *cf,
-                             struct Curl_easy *data,
-                             const void *buf, size_t len, CURLcode *err)
-{
-  return Curl_conn_cf_send(cf->next, data, buf, len, FALSE, err);
-}
-
-static CURLcode wasi_tls_shutdown(struct Curl_cfilter *cf,
-                                  struct Curl_easy *data,
-                                  bool send_shutdown, bool *done)
-{
-  (void)cf;
-  (void)data;
-  (void)send_shutdown;
-  *done = TRUE;
-  return CURLE_OK;
-}
-
-static bool wasi_tls_data_pending(struct Curl_cfilter *cf,
-                                  const struct Curl_easy *data)
-{
-  (void)cf;
-  (void)data;
-  return FALSE;
-}
-
-/* data may be NULL */
-static CURLcode wasi_tls_random(struct Curl_easy *data,
-                                unsigned char *entropy, size_t length)
-{
-  size_t offset = 0;
-  (void)data;
-
-  while(offset < length) {
-    size_t chunk = length - offset;
-    if(chunk > 256)
-      chunk = 256;
-
-    if(getentropy(entropy + offset, chunk) != 0)
-      return CURLE_FAILED_INIT;
-
-    offset += chunk;
-  }
-
-  return CURLE_OK;
-}
-
-static void wasi_tls_close(struct Curl_cfilter *cf, struct Curl_easy *data)
-{
-  (void)cf;
-  (void)data;
-  /* Host-side TLS is cleaned up when the socket is closed */
-}
-
-static void *wasi_tls_get_internals(struct ssl_connect_data *connssl,
-                                    CURLINFO info)
-{
-  (void)connssl;
-  (void)info;
-  return NULL;
-}
-
-const struct Curl_ssl Curl_ssl_wasi_tls = {
-  { CURLSSLBACKEND_NONE, "wasi-tls" },  /* info */
-
-  0,  /* supports — no special features */
-
-  sizeof(struct wasi_tls_backend_data),
-
-  Curl_none_init,                    /* init */
-  Curl_none_cleanup,                 /* cleanup */
-  wasi_tls_version,                  /* version */
-  Curl_none_check_cxn,              /* check_cxn */
-  wasi_tls_shutdown,                 /* shutdown */
-  wasi_tls_data_pending,             /* data_pending */
-  wasi_tls_random,                   /* random */
-  Curl_none_cert_status_request,     /* cert_status_request */
-  wasi_tls_connect_blocking,         /* connect */
-  wasi_tls_connect_nonblocking,      /* connect_nonblocking */
-  Curl_ssl_adjust_pollset,           /* adjust_pollset */
-  wasi_tls_get_internals,            /* get_internals */
-  wasi_tls_close,                    /* close */
-  Curl_none_close_all,               /* close_all */
-  Curl_none_set_engine,              /* set_engine */
-  Curl_none_set_engine_default,      /* set_engine_default */
-  Curl_none_engines_list,            /* engines_list */
-  Curl_none_false_start,             /* false_start */
-  NULL,                              /* sha256sum */
-  NULL,                              /* associate_connection */
-  NULL,                              /* disassociate_connection */
-  wasi_tls_recv,                     /* recv decrypted data */
-  wasi_tls_send,                     /* send data to encrypt */
-  NULL,                              /* get_channel_binding */
-};
-
-#endif /* USE_WASI_TLS */
diff --git a/registry/native/c/curl-upstream-overlay/lib/vtls/wasi_tls.h b/registry/native/c/curl-upstream-overlay/lib/vtls/wasi_tls.h
deleted file mode 100644
index d75fdf1d9..000000000
--- a/registry/native/c/curl-upstream-overlay/lib/vtls/wasi_tls.h
+++ /dev/null
@@ -1,18 +0,0 @@
-#ifndef HEADER_CURL_WASI_TLS_H
-#define HEADER_CURL_WASI_TLS_H
-/*
- * WASI TLS backend for libcurl
- *
- * Delegates TLS to the host runtime via the host_net WASM import
- * net_tls_connect(). After the host upgrades the socket, regular
- * send()/recv() transparently carry encrypted traffic, so the
- * backend's recv_plain/send_plain are simple pass-throughs.
- */
-
-#include "curl_setup.h"
-
-#ifdef USE_WASI_TLS
-extern const struct Curl_ssl Curl_ssl_wasi_tls;
-#endif
-
-#endif /* HEADER_CURL_WASI_TLS_H */
diff --git a/registry/native/c/include/fcntl.h b/registry/native/c/include/fcntl.h
deleted file mode 100644
index cb426954d..000000000
--- a/registry/native/c/include/fcntl.h
+++ /dev/null
@@ -1,38 +0,0 @@
-#ifndef REGISTRY_NATIVE_C_INCLUDE_FCNTL_H
-#define REGISTRY_NATIVE_C_INCLUDE_FCNTL_H
-
-#include_next <fcntl.h>
-
-#ifndef F_DUPFD_CLOEXEC
-#define F_DUPFD_CLOEXEC 1030
-#endif
-
-#ifndef F_RDLCK
-#define F_RDLCK 0
-#endif
-#ifndef F_WRLCK
-#define F_WRLCK 1
-#endif
-#ifndef F_UNLCK
-#define F_UNLCK 2
-#endif
-
-#ifndef F_GETLK
-#if __LONG_MAX == 0x7fffffffL
-#define F_GETLK 12
-#define F_SETLK 13
-#define F_SETLKW 14
-#else
-#define F_GETLK 5
-#define F_SETLK 6
-#define F_SETLKW 7
-#endif
-#endif
-
-#ifndef F_GETLK64
-#define F_GETLK64 F_GETLK
-#define F_SETLK64 F_SETLK
-#define F_SETLKW64 F_SETLKW
-#endif
-
-#endif
diff --git a/registry/native/c/include/ifaddrs.h b/registry/native/c/include/ifaddrs.h
deleted file mode 100644
index 0c1b7320c..000000000
--- a/registry/native/c/include/ifaddrs.h
+++ /dev/null
@@ -1,33 +0,0 @@
-#ifndef REGISTRY_NATIVE_C_INCLUDE_IFADDRS_H
-#define REGISTRY_NATIVE_C_INCLUDE_IFADDRS_H
-
-#include <sys/socket.h>
-
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-struct ifaddrs {
-	struct ifaddrs *ifa_next;
-	char *ifa_name;
-	unsigned int ifa_flags;
-	struct sockaddr *ifa_addr;
-	struct sockaddr *ifa_netmask;
-	union {
-		struct sockaddr *ifu_broadaddr;
-		struct sockaddr *ifu_dstaddr;
-	} ifa_ifu;
-	void *ifa_data;
-};
-
-#define ifa_broadaddr ifa_ifu.ifu_broadaddr
-#define ifa_dstaddr ifa_ifu.ifu_dstaddr
-
-int getifaddrs(struct ifaddrs **ifap);
-void freeifaddrs(struct ifaddrs *ifa);
-
-#ifdef __cplusplus
-}
-#endif
-
-#endif
diff --git a/registry/native/c/include/net/if.h b/registry/native/c/include/net/if.h
deleted file mode 100644
index 0a03c72f2..000000000
--- a/registry/native/c/include/net/if.h
+++ /dev/null
@@ -1,12 +0,0 @@
-#ifndef REGISTRY_NATIVE_C_INCLUDE_NET_IF_H
-#define REGISTRY_NATIVE_C_INCLUDE_NET_IF_H
-
-#ifndef IFNAMSIZ
-#define IFNAMSIZ 16
-#endif
-
-#ifndef IF_NAMESIZE
-#define IF_NAMESIZE IFNAMSIZ
-#endif
-
-#endif
diff --git a/registry/native/c/include/posix_spawn_compat.h b/registry/native/c/include/posix_spawn_compat.h
deleted file mode 100644
index 618653530..000000000
--- a/registry/native/c/include/posix_spawn_compat.h
+++ /dev/null
@@ -1,69 +0,0 @@
-/* posix_spawn_compat.h -- shared posix_spawn types and declarations for WASI
- *
- * wasi-libc does not ship spawn.h or sys/wait.h, so programs that use
- * posix_spawn need forward declarations.  This header consolidates them
- * in one place so every C test program can #include it instead of
- * duplicating the typedefs inline.
- *
- * On non-WASI targets the real <spawn.h>, <sys/wait.h>, and <signal.h>
- * are included instead.
- */
-#ifndef POSIX_SPAWN_COMPAT_H
-#define POSIX_SPAWN_COMPAT_H
-
-#ifdef __wasi__
-
-#include <unistd.h>  /* pid_t */
-
-/* --- Types ------------------------------------------------------------ */
-
-/* Layout MUST match the patched wasi-libc posix_spawn implementation. */
-typedef struct { int __pad0[2]; void *__actions; int __pad[16]; } posix_spawn_file_actions_t;
-typedef struct { int __dummy; } posix_spawnattr_t;
-
-/* --- posix_spawn ------------------------------------------------------ */
-
-int posix_spawnp(pid_t *restrict, const char *restrict,
-    const posix_spawn_file_actions_t *,
-    const posix_spawnattr_t *restrict,
-    char *const[restrict], char *const[restrict]);
-
-/* --- file_actions API ------------------------------------------------- */
-
-int posix_spawn_file_actions_init(posix_spawn_file_actions_t *);
-int posix_spawn_file_actions_destroy(posix_spawn_file_actions_t *);
-int posix_spawn_file_actions_adddup2(posix_spawn_file_actions_t *, int, int);
-int posix_spawn_file_actions_addclose(posix_spawn_file_actions_t *, int);
-
-/* --- waitpid / wait --------------------------------------------------- */
-
-pid_t waitpid(pid_t, int *, int);
-pid_t wait(int *);
-
-/* --- wait status macros ----------------------------------------------- */
-
-#define WEXITSTATUS(s) (((s) & 0xff00) >> 8)
-#define WIFEXITED(s)   (!((s) & 0x7f))
-#define WIFSIGNALED(s) (((s) & 0x7f) != 0 && ((s) & 0x7f) != 0x7f)
-#define WTERMSIG(s)    ((s) & 0x7f)
-
-/* --- signals ---------------------------------------------------------- */
-
-int kill(pid_t, int);
-
-#ifndef SIGKILL
-#define SIGKILL 9
-#endif
-#ifndef SIGTERM
-#define SIGTERM 15
-#endif
-
-#else /* !__wasi__ */
-
-#include <spawn.h>
-#include <sys/wait.h>
-#include <signal.h>
-
-#endif /* __wasi__ */
-
-#endif /* POSIX_SPAWN_COMPAT_H */
diff --git a/registry/native/c/include/sched.h b/registry/native/c/include/sched.h
deleted file mode 100644
index 81722bc01..000000000
--- a/registry/native/c/include/sched.h
+++ /dev/null
@@ -1,10 +0,0 @@
-#ifndef REGISTRY_NATIVE_C_INCLUDE_SCHED_H
-#define REGISTRY_NATIVE_C_INCLUDE_SCHED_H
-
-#include_next <sched.h>
-
-#ifdef _GNU_SOURCE
-int sched_getcpu(void);
-#endif
-
-#endif
diff --git a/registry/native/c/include/sys/ioctl.h b/registry/native/c/include/sys/ioctl.h
deleted file mode 100644
index ba28aa492..000000000
--- a/registry/native/c/include/sys/ioctl.h
+++ /dev/null
@@ -1,20 +0,0 @@
-#ifndef REGISTRY_NATIVE_C_INCLUDE_SYS_IOCTL_H
-#define REGISTRY_NATIVE_C_INCLUDE_SYS_IOCTL_H
-
-#include_next <sys/ioctl.h>
-
-#if defined(__wasi__) && !defined(__DEFINED_struct_winsize)
-struct winsize {
-	unsigned short ws_row;
-	unsigned short ws_col;
-	unsigned short ws_xpixel;
-	unsigned short ws_ypixel;
-};
-#define __DEFINED_struct_winsize
-#endif
-
-#ifndef TIOCGWINSZ
-#define TIOCGWINSZ 0x5413
-#endif
-
-#endif
diff --git a/registry/native/c/patches/duckdb/0001-skip-http-object-when-extension-loading-is-disabled.patch b/registry/native/c/patches/duckdb/0001-skip-http-object-when-extension-loading-is-disabled.patch
deleted file mode 100644
index ee844d1e0..000000000
--- a/registry/native/c/patches/duckdb/0001-skip-http-object-when-extension-loading-is-disabled.patch
+++ /dev/null
@@ -1,14 +0,0 @@
-diff --git a/src/main/http/CMakeLists.txt b/src/main/http/CMakeLists.txt
-index 2dccc81..a58bd58 100644
---- a/src/main/http/CMakeLists.txt
-+++ b/src/main/http/CMakeLists.txt
-@@ -1,3 +1,4 @@
-+if(NOT DISABLE_EXTENSION_LOAD)
- include_directories(../../../third_party/httplib)
- 
- # work-around for httplib
-@@ -10,3 +11,4 @@ add_library_unity(duckdb_common_http OBJECT http_util.cpp)
- set(ALL_OBJECT_FILES
-     ${ALL_OBJECT_FILES} $<TARGET_OBJECTS:duckdb_common_http>
-     PARENT_SCOPE)
-+endif()
diff --git a/registry/native/c/patches/duckdb/0002-disable-linenoise-on-wasi.patch b/registry/native/c/patches/duckdb/0002-disable-linenoise-on-wasi.patch
deleted file mode 100644
index 25eb94ab2..000000000
--- a/registry/native/c/patches/duckdb/0002-disable-linenoise-on-wasi.patch
+++ /dev/null
@@ -1,18 +0,0 @@
-diff --git a/tools/shell/CMakeLists.txt b/tools/shell/CMakeLists.txt
-index 2cc7e13..37853f9 100644
---- a/tools/shell/CMakeLists.txt
-+++ b/tools/shell/CMakeLists.txt
-@@ -1,8 +1,10 @@
- include_directories(include)
--add_subdirectory(linenoise)
--add_definitions(-DHAVE_LINENOISE=1)
-+if(NOT CMAKE_SYSTEM_NAME STREQUAL "WASI")
-+  add_subdirectory(linenoise)
-+  add_definitions(-DHAVE_LINENOISE=1)
-+  include_directories(linenoise/include)
-+endif()
- include_directories(../../third_party/utf8proc/include)
--include_directories(linenoise/include)
- add_definitions(-DSQLITE_SHELL_IS_UTF8)
- add_definitions(-DUSE_DUCKDB_SHELL_WRAPPER)
- 
diff --git a/registry/native/c/patches/duckdb/0003-disable-shell-system-command-on-wasi.patch b/registry/native/c/patches/duckdb/0003-disable-shell-system-command-on-wasi.patch
deleted file mode 100644
index d1cef0868..000000000
--- a/registry/native/c/patches/duckdb/0003-disable-shell-system-command-on-wasi.patch
+++ /dev/null
@@ -1,24 +0,0 @@
-diff --git a/tools/shell/shell_metadata_command.cpp b/tools/shell/shell_metadata_command.cpp
-index 09d81cf..53c5357 100644
---- a/tools/shell/shell_metadata_command.cpp
-+++ b/tools/shell/shell_metadata_command.cpp
-@@ -406,6 +406,11 @@ MetadataResult DisplaySchemas(ShellState &state, const vector<string> &args) {
- }
- 
- MetadataResult RunShellCommand(ShellState &state, const vector<string> &args) {
-+#ifdef SQLITE_NOHAVE_SYSTEM
-+	(void)args;
-+	state.Print(PrintOutput::STDERR, ".sh/.system is not supported in this WASI DuckDB build\n");
-+	return MetadataResult::FAIL;
-+#else
- 	if (state.safe_mode) {
- 		state.Print(PrintOutput::STDERR, ".sh/.system cannot be used in -safe mode\n");
- 		return MetadataResult::FAIL;
-@@ -422,6 +427,7 @@ MetadataResult RunShellCommand(ShellState &state, const vector<string> &args) {
- 		state.PrintF(PrintOutput::STDERR, "System command returns %d\n", x);
- 	}
- 	return MetadataResult::SUCCESS;
-+#endif
- }
- 
- MetadataResult ShowConfiguration(ShellState &state, const vector<string> &args) {
diff --git a/registry/native/c/patches/duckdb/0004-skip-http-util-init-when-extension-loading-is-disabled.patch b/registry/native/c/patches/duckdb/0004-skip-http-util-init-when-extension-loading-is-disabled.patch
deleted file mode 100644
index 5e20ff3a8..000000000
--- a/registry/native/c/patches/duckdb/0004-skip-http-util-init-when-extension-loading-is-disabled.patch
+++ /dev/null
@@ -1,15 +0,0 @@
-diff --git a/src/main/database.cpp b/src/main/database.cpp
-index a2aab0d..7c6ea97 100644
---- a/src/main/database.cpp
-+++ b/src/main/database.cpp
-@@ -54,7 +54,9 @@ DBConfig::DBConfig() {
- 	collation_bindings = make_uniq<CollationBinding>();
- 	index_types = make_uniq<IndexTypeSet>();
- 	error_manager = make_uniq<ErrorManager>();
- 	secret_manager = make_uniq<SecretManager>();
-+#ifndef DUCKDB_DISABLE_EXTENSION_LOAD
- 	http_util = make_shared_ptr<HTTPUtil>();
-+#endif
- 	callback_manager = make_uniq<ExtensionCallbackManager>();
- 	callback_manager->Register("__open_file__", OpenFileStorageExtension::Create());
- }
diff --git a/registry/native/c/patches/duckdb/0005-disable-shell-pager-popen-on-wasi.patch b/registry/native/c/patches/duckdb/0005-disable-shell-pager-popen-on-wasi.patch
deleted file mode 100644
index d50a6cbd7..000000000
--- a/registry/native/c/patches/duckdb/0005-disable-shell-pager-popen-on-wasi.patch
+++ /dev/null
@@ -1,13 +0,0 @@
-diff --git a/tools/shell/shell.cpp b/tools/shell/shell.cpp
---- a/tools/shell/shell.cpp
-+++ b/tools/shell/shell.cpp
-@@ -1416,6 +1416,10 @@ unique_ptr<PagerState> ShellState::SetupPager() {
- 		SetConsoleCP(CP_UTF8);
- 	}
- #endif
-+#ifdef SQLITE_OMIT_POPEN
-+	Print(PrintOutput::STDERR, "Pager pipes are not supported in this WASI DuckDB build.\n");
-+	return nullptr;
-+#endif
- 	StartPagerDisplay();
- 	auto pager_out = popen(pager_command.c_str(), "w");
diff --git a/registry/native/c/patches/llvm-project/0001-libunwind-wasm-exception-support.patch b/registry/native/c/patches/llvm-project/0001-libunwind-wasm-exception-support.patch
deleted file mode 100644
index 767f47a84..000000000
--- a/registry/native/c/patches/llvm-project/0001-libunwind-wasm-exception-support.patch
+++ /dev/null
@@ -1,196 +0,0 @@
-diff --git a/libunwind/include/libunwind.h b/libunwind/include/libunwind.h
-index b2dae8f..63e147a 100644
---- a/libunwind/include/libunwind.h
-+++ b/libunwind/include/libunwind.h
-@@ -15,6 +15,7 @@
- 
- #include <__libunwind_config.h>
- 
-+#ifndef __wasm__
- #include <stdint.h>
- #include <stddef.h>
- 
-@@ -1299,5 +1300,6 @@ enum {
-   UNW_LOONGARCH_F30 = 62,
-   UNW_LOONGARCH_F31 = 63,
- };
-+#endif
- 
- #endif
-diff --git a/libunwind/src/Unwind-wasm.c b/libunwind/src/Unwind-wasm.c
-index b18b32c..d2f61a3 100644
---- a/libunwind/src/Unwind-wasm.c
-+++ b/libunwind/src/Unwind-wasm.c
-@@ -11,14 +11,10 @@
- //===----------------------------------------------------------------------===//
- 
- #include <stdbool.h>
--
- #include "config.h"
--
--#ifdef __WASM_EXCEPTIONS__
--
- #include "unwind.h"
--#include <threads.h>
- 
-+#ifdef __wasm__
- _Unwind_Reason_Code __gxx_personality_wasm0(int version, _Unwind_Action actions,
-                                             uint64_t exceptionClass,
-                                             _Unwind_Exception *unwind_exception,
-@@ -35,7 +31,7 @@ struct _Unwind_LandingPadContext {
- 
- // Communication channel between compiler-generated user code and personality
- // function
--thread_local struct _Unwind_LandingPadContext __wasm_lpad_context;
-+_Thread_local struct _Unwind_LandingPadContext __wasm_lpad_context;
- 
- /// Calls to this function is in landing pads in compiler-generated user code.
- /// In other EH schemes, stack unwinding is done by libunwind library, which
-@@ -120,4 +116,4 @@ _Unwind_GetRegionStart(struct _Unwind_Context *context) {
-   return 0;
- }
- 
--#endif // defined(__WASM_EXCEPTIONS__)
-+#endif
-diff --git a/libunwind/src/UnwindRegistersRestore.S b/libunwind/src/UnwindRegistersRestore.S
-index 9d34c79..91b3691 100644
---- a/libunwind/src/UnwindRegistersRestore.S
-+++ b/libunwind/src/UnwindRegistersRestore.S
-@@ -6,6 +6,7 @@
- //
- //===----------------------------------------------------------------------===//
- 
-+#if !defined(__wasm__)
- #include "assembly.h"
- 
- #define FROM_0_TO_15 0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
-@@ -1249,4 +1250,4 @@ DEFINE_LIBUNWIND_FUNCTION(_ZN9libunwind19Registers_loongarch6jumptoEv)
- #endif /* !defined(__USING_SJLJ_EXCEPTIONS__) && !defined(__wasm__) */
- 
- NO_EXEC_STACK_DIRECTIVE
--
-+#endif
-diff --git a/libunwind/src/UnwindRegistersSave.S b/libunwind/src/UnwindRegistersSave.S
-index 5bf6055..4397295 100644
---- a/libunwind/src/UnwindRegistersSave.S
-+++ b/libunwind/src/UnwindRegistersSave.S
-@@ -6,6 +6,7 @@
- //
- //===----------------------------------------------------------------------===//
- 
-+#ifndef __wasm__
- #include "assembly.h"
- 
- #define FROM_0_TO_15 0,1,2,3,4,5,6,7,8,9,10,11,12,13,14,15
-@@ -1180,3 +1181,5 @@ DEFINE_LIBUNWIND_FUNCTION(__unw_getcontext)
- #endif /* !defined(__USING_SJLJ_EXCEPTIONS__) && !defined(__wasm__) */
- 
- NO_EXEC_STACK_DIRECTIVE
-+
-+#endif
-diff --git a/libunwind/src/assembly.h b/libunwind/src/assembly.h
-index f8e83e1..21b20a8 100644
---- a/libunwind/src/assembly.h
-+++ b/libunwind/src/assembly.h
-@@ -15,6 +15,7 @@
- #ifndef UNWIND_ASSEMBLY_H
- #define UNWIND_ASSEMBLY_H
- 
-+#ifndef __wasm__
- #if defined(__linux__) && defined(__CET__)
- #include <cet.h>
- #define _LIBUNWIND_CET_ENDBR _CET_ENDBR
-@@ -299,5 +300,6 @@ aliasname:                                                                     \
- #if defined(__powerpc__)
- #define PPC_LEFT_SHIFT(index) << (index)
- #endif
-+#endif
- 
- #endif /* UNWIND_ASSEMBLY_H */
-diff --git a/libunwind/src/cet_unwind.h b/libunwind/src/cet_unwind.h
-index 47d7616..dd9bfec 100644
---- a/libunwind/src/cet_unwind.h
-+++ b/libunwind/src/cet_unwind.h
-@@ -10,6 +10,7 @@
- #ifndef LIBUNWIND_CET_UNWIND_H
- #define LIBUNWIND_CET_UNWIND_H
- 
-+#ifndef __wasm__
- #include "libunwind.h"
- 
- // Currently, CET is implemented on Linux x86 platforms.
-@@ -61,3 +62,4 @@ extern void *__libunwind_cet_get_registers(unw_cursor_t *);
- extern void *__libunwind_cet_get_jump_target(void);
- 
- #endif
-+#endif
-diff --git a/libunwind/src/config.h b/libunwind/src/config.h
-index deb5a4d..2a13969 100644
---- a/libunwind/src/config.h
-+++ b/libunwind/src/config.h
-@@ -66,13 +66,14 @@
-   #define _LIBUNWIND_EXPORT
-   #define _LIBUNWIND_HIDDEN
- #else
--  #if !defined(__ELF__) && !defined(__MACH__) && !defined(_AIX)
--    #define _LIBUNWIND_EXPORT __declspec(dllexport)
--    #define _LIBUNWIND_HIDDEN
--  #else
--    #define _LIBUNWIND_EXPORT __attribute__((visibility("default")))
--    #define _LIBUNWIND_HIDDEN __attribute__((visibility("hidden")))
--  #endif
-+#if !defined(__ELF__) && !defined(__MACH__) && !defined(_AIX) && \
-+    !defined(__wasm__)
-+#define _LIBUNWIND_EXPORT __declspec(dllexport)
-+#define _LIBUNWIND_HIDDEN
-+#else
-+#define _LIBUNWIND_EXPORT __attribute__((visibility("default")))
-+#define _LIBUNWIND_HIDDEN __attribute__((visibility("hidden")))
-+#endif
- #endif
- 
- #define STR(a) #a
-diff --git a/libunwind/src/libunwind.cpp b/libunwind/src/libunwind.cpp
-index cf39ec5..efade46 100644
---- a/libunwind/src/libunwind.cpp
-+++ b/libunwind/src/libunwind.cpp
-@@ -12,6 +12,7 @@
- #include <libunwind.h>
- 
- #include "config.h"
-+#ifndef __wasm__
- #include "libunwind_ext.h"
- 
- #include <stdlib.h>
-@@ -430,6 +431,7 @@ int __unw_remove_find_dynamic_unwind_sections(
- }
- 
- #endif // __APPLE__
-+#endif
- 
- // Add logging hooks in Debug builds only
- #ifndef NDEBUG
-@@ -472,4 +474,3 @@ bool logDWARF() {
- }
- 
- #endif // NDEBUG
--
-diff --git a/libunwind/src/libunwind_ext.h b/libunwind/src/libunwind_ext.h
-index 28db43a..3a7ca7c 100644
---- a/libunwind/src/libunwind_ext.h
-+++ b/libunwind/src/libunwind_ext.h
-@@ -12,6 +12,7 @@
- #ifndef __LIBUNWIND_EXT__
- #define __LIBUNWIND_EXT__
- 
-+#ifndef __wasm__
- #include "config.h"
- #include <libunwind.h>
- #include <unwind.h>
-@@ -133,5 +134,6 @@ extern _Unwind_Reason_Code _Unwind_VRS_Interpret(_Unwind_Context *context,
- #ifdef __cplusplus
- }
- #endif
-+#endif
- 
- #endif // __LIBUNWIND_EXT__
diff --git a/registry/native/c/programs/.gitkeep b/registry/native/c/programs/.gitkeep
deleted file mode 100644
index e69de29bb..000000000
diff --git a/registry/native/c/programs/args.c b/registry/native/c/programs/args.c
deleted file mode 100644
index 085e1747d..000000000
--- a/registry/native/c/programs/args.c
+++ /dev/null
@@ -1,10 +0,0 @@
-/* args.c — prints argc and each argv entry */
-#include <stdio.h>
-
-int main(int argc, char *argv[]) {
-    printf("argc=%d\n", argc);
-    for (int i = 0; i < argc; i++) {
-        printf("argv[%d]=%s\n", i, argv[i]);
-    }
-    return 0;
-}
diff --git a/registry/native/c/programs/c-cp.c b/registry/native/c/programs/c-cp.c
deleted file mode 100644
index 3617aac93..000000000
--- a/registry/native/c/programs/c-cp.c
+++ /dev/null
@@ -1,33 +0,0 @@
-/* c-cp.c — copy a file (open + read + write + close) */
-#include <stdio.h>
-
-int main(int argc, char *argv[]) {
-    if (argc < 3) {
-        fprintf(stderr, "usage: c-cp <source> <dest>\n");
-        return 1;
-    }
-
-    FILE *src = fopen(argv[1], "rb");
-    if (!src) {
-        perror(argv[1]);
-        return 1;
-    }
-
-    FILE *dst = fopen(argv[2], "wb");
-    if (!dst) {
-        perror(argv[2]);
-        fclose(src);
-        return 1;
-    }
-
-    char buf[4096];
-    size_t n;
-    while ((n = fread(buf, 1, sizeof(buf), src)) > 0) {
-        fwrite(buf, 1, n, dst);
-    }
-
-    fclose(src);
-    fclose(dst);
-    printf("copied: %s -> %s\n", argv[1], argv[2]);
-    return 0;
-}
diff --git a/registry/native/c/programs/c-find.c b/registry/native/c/programs/c-find.c
deleted file mode 100644
index ebb7a4bfa..000000000
--- a/registry/native/c/programs/c-find.c
+++ /dev/null
@@ -1,73 +0,0 @@
-/* c-find.c — find files matching a pattern (recursive + string matching) */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <dirent.h>
-#include <sys/stat.h>
-
-static int cmpstr(const void *a, const void *b) {
-    return strcmp(*(const char **)a, *(const char **)b);
-}
-
-/* Simple glob matching: * matches any sequence, ? matches one char */
-static int glob_match(const char *pat, const char *str) {
-    while (*pat) {
-        if (*pat == '*') {
-            pat++;
-            if (!*pat) return 1;
-            while (*str) {
-                if (glob_match(pat, str)) return 1;
-                str++;
-            }
-            return 0;
-        }
-        if (*pat == '?' || *pat == *str) {
-            pat++;
-            str++;
-        } else {
-            return 0;
-        }
-    }
-    return *str == 0;
-}
-
-static void find_in(const char *path, const char *pattern) {
-    DIR *dir = opendir(path);
-    if (!dir) return;
-
-    char *names[1024];
-    int count = 0;
-    struct dirent *ent;
-    while ((ent = readdir(dir)) != NULL && count < 1024) {
-        if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0)
-            continue;
-        names[count++] = strdup(ent->d_name);
-    }
-    closedir(dir);
-
-    qsort(names, count, sizeof(char *), cmpstr);
-
-    for (int i = 0; i < count; i++) {
-        char full[4096];
-        snprintf(full, sizeof(full), "%s/%s", path, names[i]);
-
-        if (glob_match(pattern, names[i])) {
-            printf("%s\n", full);
-        }
-
-        struct stat st;
-        if (stat(full, &st) == 0 && S_ISDIR(st.st_mode)) {
-            find_in(full, pattern);
-        }
-        free(names[i]);
-    }
-}
-
-int main(int argc, char *argv[]) {
-    if (argc < 3) {
-        fprintf(stderr, "usage: c-find <dir> <pattern>\n");
-        return 1;
-    }
-    find_in(argv[1], argv[2]);
-    return 0;
-}
diff --git a/registry/native/c/programs/c-ls.c b/registry/native/c/programs/c-ls.c
deleted file mode 100644
index cc9916f45..000000000
--- a/registry/native/c/programs/c-ls.c
+++ /dev/null
@@ -1,49 +0,0 @@
-/* c-ls.c — list directory contents with file sizes */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <dirent.h>
-#include <sys/stat.h>
-
-static int cmpstr(const void *a, const void *b) {
-    return strcmp(*(const char **)a, *(const char **)b);
-}
-
-int main(int argc, char *argv[]) {
-    const char *path = argc > 1 ? argv[1] : ".";
-
-    DIR *dir = opendir(path);
-    if (!dir) {
-        perror(path);
-        return 1;
-    }
-
-    /* Collect entry names */
-    char *names[1024];
-    int count = 0;
-    struct dirent *ent;
-    while ((ent = readdir(dir)) != NULL && count < 1024) {
-        if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0)
-            continue;
-        names[count++] = strdup(ent->d_name);
-    }
-    closedir(dir);
-
-    /* Sort for deterministic output */
-    qsort(names, count, sizeof(char *), cmpstr);
-
-    for (int i = 0; i < count; i++) {
-        char full[4096];
-        snprintf(full, sizeof(full), "%s/%s", path, names[i]);
-        struct stat st;
-        if (stat(full, &st) == 0) {
-            if (S_ISDIR(st.st_mode)) {
-                printf("d %s\n", names[i]);
-            } else {
-                printf("- %lld %s\n", (long long)st.st_size, names[i]);
-            }
-        }
-        free(names[i]);
-    }
-    return 0;
-}
diff --git a/registry/native/c/programs/c-tree.c b/registry/native/c/programs/c-tree.c
deleted file mode 100644
index 8df7c2eb0..000000000
--- a/registry/native/c/programs/c-tree.c
+++ /dev/null
@@ -1,57 +0,0 @@
-/* c-tree.c — recursive directory listing */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <dirent.h>
-#include <sys/stat.h>
-
-struct entry {
-    char *name;
-    int isdir;
-};
-
-static int cmp_entry(const void *a, const void *b) {
-    return strcmp(((const struct entry *)a)->name, ((const struct entry *)b)->name);
-}
-
-static void tree(const char *path, const char *prefix) {
-    DIR *dir = opendir(path);
-    if (!dir) return;
-
-    struct entry entries[1024];
-    int count = 0;
-    struct dirent *ent;
-    while ((ent = readdir(dir)) != NULL && count < 1024) {
-        if (strcmp(ent->d_name, ".") == 0 || strcmp(ent->d_name, "..") == 0)
-            continue;
-        entries[count].name = strdup(ent->d_name);
-        char full[4096];
-        snprintf(full, sizeof(full), "%s/%s", path, ent->d_name);
-        struct stat st;
-        entries[count].isdir = (stat(full, &st) == 0 && S_ISDIR(st.st_mode));
-        count++;
-    }
-    closedir(dir);
-
-    qsort(entries, count, sizeof(struct entry), cmp_entry);
-
-    for (int i = 0; i < count; i++) {
-        int last = (i == count - 1);
-        printf("%s%s %s\n", prefix, last ? "`--" : "|--", entries[i].name);
-        if (entries[i].isdir) {
-            char newpfx[4096];
-            snprintf(newpfx, sizeof(newpfx), "%s%s", prefix, last ? "    " : "|   ");
-            char full[4096];
-            snprintf(full, sizeof(full), "%s/%s", path, entries[i].name);
-            tree(full, newpfx);
-        }
-        free(entries[i].name);
-    }
-}
-
-int main(int argc, char *argv[]) {
-    const char *path = argc > 1 ? argv[1] : ".";
-    printf("%s\n", path);
-    tree(path, "");
-    return 0;
-}
diff --git a/registry/native/c/programs/cat.c b/registry/native/c/programs/cat.c
deleted file mode 100644
index a28c41b35..000000000
--- a/registry/native/c/programs/cat.c
+++ /dev/null
@@ -1,11 +0,0 @@
-/* cat.c — reads stdin and writes to stdout */
-#include <stdio.h>
-
-int main(void) {
-    char buf[4096];
-    size_t n;
-    while ((n = fread(buf, 1, sizeof(buf), stdin)) > 0) {
-        fwrite(buf, 1, n, stdout);
-    }
-    return 0;
-}
diff --git a/registry/native/c/programs/delayed_kill.c b/registry/native/c/programs/delayed_kill.c
deleted file mode 100644
index 23fd88915..000000000
--- a/registry/native/c/programs/delayed_kill.c
+++ /dev/null
@@ -1,22 +0,0 @@
-/* delayed_kill.c -- sleep briefly, then send a signal to the target pid */
-#include <signal.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <unistd.h>
-
-int main(int argc, char *argv[]) {
-    if (argc < 4) {
-        fprintf(stderr, "usage: delayed_kill <delay_ms> <pid> <signal>\n");
-        return 1;
-    }
-
-    int delay_ms = atoi(argv[1]);
-    pid_t pid = (pid_t)atoi(argv[2]);
-    int signal_number = atoi(argv[3]);
-
-    if (delay_ms > 0) {
-        usleep((useconds_t)delay_ms * 1000u);
-    }
-
-    return kill(pid, signal_number) == 0 ? 0 : 1;
-}
diff --git a/registry/native/c/programs/delayed_tcp_echo.c b/registry/native/c/programs/delayed_tcp_echo.c
deleted file mode 100644
index 5e3457971..000000000
--- a/registry/native/c/programs/delayed_tcp_echo.c
+++ /dev/null
@@ -1,56 +0,0 @@
-/* delayed_tcp_echo.c -- sleep briefly, connect to loopback, send hello, read pong */
-#include <arpa/inet.h>
-#include <netinet/in.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/socket.h>
-#include <unistd.h>
-
-int main(int argc, char *argv[]) {
-    if (argc < 3) {
-        fprintf(stderr, "usage: delayed_tcp_echo <delay_ms> <port>\n");
-        return 1;
-    }
-
-    int delay_ms = atoi(argv[1]);
-    int port = atoi(argv[2]);
-    if (delay_ms > 0) {
-        usleep((useconds_t)delay_ms * 1000u);
-    }
-
-    int fd = socket(AF_INET, SOCK_STREAM, 0);
-    if (fd < 0) {
-        perror("socket");
-        return 1;
-    }
-
-    struct sockaddr_in addr;
-    memset(&addr, 0, sizeof(addr));
-    addr.sin_family = AF_INET;
-    addr.sin_port = htons((uint16_t)port);
-    inet_pton(AF_INET, "127.0.0.1", &addr.sin_addr);
-
-    if (connect(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0) {
-        perror("connect");
-        close(fd);
-        return 1;
-    }
-
-    if (send(fd, "hello", 5, 0) != 5) {
-        perror("send");
-        close(fd);
-        return 1;
-    }
-
-    char buf[8] = {0};
-    ssize_t n = recv(fd, buf, sizeof(buf) - 1, 0);
-    if (n < 0) {
-        perror("recv");
-        close(fd);
-        return 1;
-    }
-
-    close(fd);
-    return strcmp(buf, "pong") == 0 ? 0 : 1;
-}
diff --git a/registry/native/c/programs/dns_lookup.c b/registry/native/c/programs/dns_lookup.c
deleted file mode 100644
index 6a607e1f8..000000000
--- a/registry/native/c/programs/dns_lookup.c
+++ /dev/null
@@ -1,56 +0,0 @@
-/* dns_lookup.c — resolve hostnames via getaddrinfo, print IP addresses */
-#include <stdio.h>
-#include <string.h>
-#include <sys/socket.h>
-#include <netdb.h>
-#include <arpa/inet.h>
-
-static int print_lookup(const char *label, const char *host, int family) {
-    struct addrinfo hints;
-    memset(&hints, 0, sizeof(hints));
-    hints.ai_family = family;
-    hints.ai_socktype = SOCK_STREAM;
-
-    struct addrinfo *res = NULL;
-    int err = getaddrinfo(host, NULL, &hints, &res);
-    if (err != 0) {
-        fprintf(stderr, "%s getaddrinfo: %s\n", label, gai_strerror(err));
-        return 1;
-    }
-
-    char ip[INET6_ADDRSTRLEN];
-    const char *family_name = "unknown";
-    if (res->ai_family == AF_INET) {
-        struct sockaddr_in *sin = (struct sockaddr_in *)res->ai_addr;
-        inet_ntop(AF_INET, &sin->sin_addr, ip, sizeof(ip));
-        family_name = "AF_INET";
-    } else if (res->ai_family == AF_INET6) {
-        struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)res->ai_addr;
-        inet_ntop(AF_INET6, &sin6->sin6_addr, ip, sizeof(ip));
-        family_name = "AF_INET6";
-    } else {
-        snprintf(ip, sizeof(ip), "unsupported");
-    }
-
-    printf("%s host: %s\n", label, host);
-    printf("%s family: %s\n", label, family_name);
-    printf("%s ip: %s\n", label, ip);
-
-    freeaddrinfo(res);
-    return 0;
-}
-
-int main(int argc, char *argv[]) {
-    const char *host = "localhost";
-    if (argc >= 2)
-        host = argv[1];
-
-    if (print_lookup("inet4", host, AF_INET) != 0)
-        return 1;
-    if (print_lookup("inet6", "::1", AF_INET6) != 0)
-        return 1;
-    if (print_lookup("unspec", "127.0.0.1", AF_UNSPEC) != 0)
-        return 1;
-
-    return 0;
-}
diff --git a/registry/native/c/programs/dup_test.c b/registry/native/c/programs/dup_test.c
deleted file mode 100644
index f34f60f16..000000000
--- a/registry/native/c/programs/dup_test.c
+++ /dev/null
@@ -1,301 +0,0 @@
-/* dup_test.c — duplicate stdout FD, write through duplicate */
-#include <stdio.h>
-#include <unistd.h>
-#include <string.h>
-#include <errno.h>
-#include <sys/stat.h>
-#include <fcntl.h>
-#if defined(__wasi__)
-#include <wasi/api.h>
-#endif
-
-int main(void) {
-    int saved_stdout = dup(STDOUT_FILENO);
-    if (saved_stdout < 0) {
-        perror("dup saved stdout");
-        return 1;
-    }
-
-    int saved_stderr = dup(STDERR_FILENO);
-    if (saved_stderr < 0) {
-        perror("dup saved stderr");
-        return 1;
-    }
-
-    if (dup2(saved_stdout, saved_stdout) != saved_stdout) {
-        perror("dup2 same stdout fd");
-        return 1;
-    }
-
-    if (dup2(saved_stderr, saved_stderr) != saved_stderr) {
-        perror("dup2 same stderr fd");
-        return 1;
-    }
-
-#if defined(__wasi__)
-    FILE *preopen_file = fopen("dup-preopen-check.txt", "w");
-    if (!preopen_file) {
-        perror("create preopen relative file");
-        return 1;
-    }
-    fputs("preopen ok\n", preopen_file);
-    fclose(preopen_file);
-
-    int throwaway_preopen = dup(3);
-    if (throwaway_preopen < 0) {
-        perror("dup throwaway preopen");
-        return 1;
-    }
-
-    if (close(throwaway_preopen) != 0) {
-        perror("close throwaway preopen");
-        return 1;
-    }
-
-    FILE *canonical_preopen_file = fopen("dup-preopen-check.txt", "r");
-    if (!canonical_preopen_file) {
-        perror("canonical preopen closed by duplicate close");
-        return 1;
-    }
-    fclose(canonical_preopen_file);
-
-    int saved_preopen = dup(3);
-    if (saved_preopen < 0) {
-        perror("dup preopen");
-        return 1;
-    }
-
-    if (close(3) != 0) {
-        perror("close preopen");
-        return 1;
-    }
-
-	    errno = 0;
-	    struct stat closed_preopen_stat;
-	    if (fstat(3, &closed_preopen_stat) != -1 || errno != EBADF) {
-	        dprintf(saved_stderr, "fstat resurrected closed preopen\n");
-	        return 1;
-	    }
-
-	    __wasi_prestat_t closed_preopen_prestat;
-	    __wasi_fdstat_t closed_preopen_fdstat;
-	    uint8_t closed_preopen_name[16];
-	    if (__wasi_fd_prestat_get((__wasi_fd_t)3, &closed_preopen_prestat) != __WASI_ERRNO_BADF) {
-	        dprintf(saved_stderr, "prestat resurrected closed preopen\n");
-	        return 1;
-	    }
-	    if (__wasi_fd_prestat_dir_name((__wasi_fd_t)3, closed_preopen_name, sizeof(closed_preopen_name)) != __WASI_ERRNO_BADF) {
-	        dprintf(saved_stderr, "prestat dir name resurrected closed preopen\n");
-	        return 1;
-	    }
-	    if (__wasi_fd_fdstat_get((__wasi_fd_t)3, &closed_preopen_fdstat) != __WASI_ERRNO_BADF) {
-	        dprintf(saved_stderr, "fdstat resurrected closed preopen\n");
-	        return 1;
-	    }
-
-	    if (fstat(saved_preopen, &closed_preopen_stat) != 0) {
-	        dprintf(saved_stderr, "preopen duplicate closed too early\n");
-	        return 1;
-    }
-
-    int pipefd[2];
-    if (pipe(pipefd) != 0) {
-        dprintf(saved_stderr, "pipe for preopen overlay failed\n");
-        return 1;
-    }
-
-	    if (dup2(pipefd[0], 3) != 3) {
-	        dprintf(saved_stderr, "dup2 pipe over preopen failed\n");
-	        return 1;
-	    }
-
-	    if (__wasi_fd_prestat_get((__wasi_fd_t)3, &closed_preopen_prestat) != __WASI_ERRNO_BADF) {
-	        dprintf(saved_stderr, "pipe overlay exposed preopen prestat\n");
-	        return 1;
-	    }
-	    if (__wasi_fd_fdstat_get((__wasi_fd_t)3, &closed_preopen_fdstat) != __WASI_ERRNO_SUCCESS) {
-	        dprintf(saved_stderr, "pipe overlay fdstat failed\n");
-	        return 1;
-	    }
-
-	    int pipe_overlay_fd = openat(3, "dup-preopen-check.txt", O_RDONLY);
-	    if (pipe_overlay_fd >= 0) {
-	        close(pipe_overlay_fd);
-	        dprintf(saved_stderr, "pipe overlay resurrected closed preopen\n");
-        return 1;
-    }
-
-    close(pipefd[0]);
-    close(pipefd[1]);
-
-    if (dup2(saved_preopen, 3) != 3) {
-        dprintf(saved_stderr, "dup2 failed to restore preopen\n");
-        return 1;
-    }
-
-    int restored_preopen_fd = openat(3, "dup-preopen-check.txt", O_RDONLY);
-    if (restored_preopen_fd < 0) {
-        dprintf(saved_stderr, "restored preopen path_open failed\n");
-        return 1;
-    }
-    close(restored_preopen_fd);
-
-    if (close(saved_preopen) != 0) {
-        dprintf(saved_stderr, "close preopen duplicate failed\n");
-        return 1;
-    }
-
-    if (close(3) != 0) {
-        dprintf(saved_stderr, "close restored preopen failed\n");
-        return 1;
-    }
-
-    errno = 0;
-	    if (fstat(3, &closed_preopen_stat) != -1 || errno != EBADF) {
-	        dprintf(saved_stderr, "restored preopen resurrected after close\n");
-	        return 1;
-	    }
-#endif
-
-	    FILE *rewind_file = fopen("dup-rewind-clearerr.txt", "w+");
-	    if (!rewind_file) {
-	        perror("create rewind file");
-	        return 1;
-	    }
-	    if (fputs("rewind-ok", rewind_file) < 0) {
-	        perror("write rewind file");
-	        fclose(rewind_file);
-	        return 1;
-	    }
-	    fflush(rewind_file);
-	    rewind(rewind_file);
-	    while (fgetc(rewind_file) != EOF) {
-	    }
-	    if (!feof(rewind_file) || ferror(rewind_file)) {
-	        dprintf(saved_stderr, "rewind file did not reach clean eof\n");
-	        fclose(rewind_file);
-	        return 1;
-	    }
-	    clearerr(rewind_file);
-	    if (feof(rewind_file) || ferror(rewind_file)) {
-	        dprintf(saved_stderr, "clearerr did not clear eof/error state\n");
-	        fclose(rewind_file);
-	        return 1;
-	    }
-	    rewind(rewind_file);
-	    if (feof(rewind_file) || ferror(rewind_file) || fgetc(rewind_file) != 'r') {
-	        dprintf(saved_stderr, "rewind did not reset stream state and position\n");
-	        fclose(rewind_file);
-	        return 1;
-	    }
-	    fclose(rewind_file);
-	    unlink("dup-rewind-clearerr.txt");
-
-	    /* Test dup: duplicate stdout */
-	    int new_fd = dup(STDOUT_FILENO);
-    if (new_fd < 0) {
-        perror("dup");
-        return 1;
-    }
-
-    const char *msg1 = "hello from dup\n";
-    write(new_fd, msg1, strlen(msg1));
-    close(new_fd);
-
-    /* Test dup2: duplicate stdout to fd 10 */
-    int fd2 = dup2(STDOUT_FILENO, 10);
-    if (fd2 != 10) {
-        fprintf(stderr, "dup2 returned %d, expected 10\n", fd2);
-        return 1;
-    }
-
-    const char *msg2 = "hello from dup2\n";
-    write(fd2, msg2, strlen(msg2));
-    close(fd2);
-
-    if (close(STDOUT_FILENO) != 0) {
-        perror("close stdout");
-        return 1;
-    }
-
-    errno = 0;
-    const char *closed_stdout_msg = "closed stdout leak\n";
-    if (write(STDOUT_FILENO, closed_stdout_msg, strlen(closed_stdout_msg)) != -1 || errno != EBADF) {
-        dprintf(saved_stderr, "write to closed stdout did not fail with EBADF\n");
-        return 1;
-    }
-
-    if (dup2(saved_stdout, STDOUT_FILENO) != STDOUT_FILENO) {
-        dprintf(saved_stderr, "dup2 failed to restore stdout\n");
-        return 1;
-    }
-
-    const char *restored_stdout_msg = "stdout restored\n";
-    if (write(STDOUT_FILENO, restored_stdout_msg, strlen(restored_stdout_msg)) != (ssize_t)strlen(restored_stdout_msg)) {
-        dprintf(saved_stderr, "write to restored stdout failed\n");
-        return 1;
-    }
-
-    if (close(STDOUT_FILENO) != 0) {
-        dprintf(saved_stderr, "close restored stdout failed\n");
-        return 1;
-    }
-
-    errno = 0;
-    if (write(STDOUT_FILENO, closed_stdout_msg, strlen(closed_stdout_msg)) != -1 || errno != EBADF) {
-        dprintf(saved_stderr, "write resurrected closed stdout\n");
-        return 1;
-    }
-
-    if (dup2(saved_stdout, STDOUT_FILENO) != STDOUT_FILENO) {
-        dprintf(saved_stderr, "second dup2 failed to restore stdout\n");
-        return 1;
-    }
-
-    if (close(STDERR_FILENO) != 0) {
-        dprintf(saved_stdout, "close stderr failed\n");
-        return 1;
-    }
-
-    errno = 0;
-    const char *closed_stderr_msg = "closed stderr leak\n";
-    if (write(STDERR_FILENO, closed_stderr_msg, strlen(closed_stderr_msg)) != -1 || errno != EBADF) {
-        dprintf(saved_stdout, "write to closed stderr did not fail with EBADF\n");
-        return 1;
-    }
-
-    if (dup2(saved_stderr, STDERR_FILENO) != STDERR_FILENO) {
-        dprintf(saved_stdout, "dup2 failed to restore stderr\n");
-        return 1;
-    }
-
-    const char *restored_stderr_msg = "stderr restored\n";
-    if (write(STDERR_FILENO, restored_stderr_msg, strlen(restored_stderr_msg)) != (ssize_t)strlen(restored_stderr_msg)) {
-        dprintf(saved_stdout, "write to restored stderr failed\n");
-        return 1;
-    }
-
-    if (close(STDERR_FILENO) != 0) {
-        dprintf(saved_stdout, "close restored stderr failed\n");
-        return 1;
-    }
-
-    errno = 0;
-    if (write(STDERR_FILENO, closed_stderr_msg, strlen(closed_stderr_msg)) != -1 || errno != EBADF) {
-        dprintf(saved_stdout, "write resurrected closed stderr\n");
-        return 1;
-    }
-
-    if (dup2(saved_stderr, STDERR_FILENO) != STDERR_FILENO) {
-        dprintf(saved_stdout, "second dup2 failed to restore stderr\n");
-        return 1;
-    }
-
-    close(saved_stdout);
-    close(saved_stderr);
-
-    /* Final output via original stdout */
-    fflush(stdout);
-    printf("done\n");
-    return 0;
-}
diff --git a/registry/native/c/programs/env.c b/registry/native/c/programs/env.c
deleted file mode 100644
index 527037938..000000000
--- a/registry/native/c/programs/env.c
+++ /dev/null
@@ -1,11 +0,0 @@
-/* env.c — prints all environment variables */
-#include <stdio.h>
-
-extern char **environ;
-
-int main(void) {
-    for (char **ep = environ; *ep != NULL; ep++) {
-        printf("%s\n", *ep);
-    }
-    return 0;
-}
diff --git a/registry/native/c/programs/envsubst.c b/registry/native/c/programs/envsubst.c
deleted file mode 100644
index 8f1690806..000000000
--- a/registry/native/c/programs/envsubst.c
+++ /dev/null
@@ -1,105 +0,0 @@
-/*
- * envsubst - substitute environment variables in stdin
- *
- * Reads stdin, replaces $VAR and ${VAR} references with their
- * environment variable values. Undefined variables become empty string.
- * Supports ${VAR:-default} for default values and \$VAR for literal $.
- */
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <ctype.h>
-
-/* Valid variable name character: [A-Za-z0-9_] */
-static int is_varchar(int c) {
-    return isalnum(c) || c == '_';
-}
-
-/* Read a variable name from src into buf (max bufsize-1 chars).
- * Returns number of chars consumed from src. */
-static int read_varname(const char *src, char *buf, int bufsize) {
-    int i = 0;
-    while (src[i] && is_varchar((unsigned char)src[i]) && i < bufsize - 1) {
-        buf[i] = src[i];
-        i++;
-    }
-    buf[i] = '\0';
-    return i;
-}
-
-int main(void) {
-    char line[8192];
-
-    while (fgets(line, sizeof(line), stdin)) {
-        const char *p = line;
-
-        while (*p) {
-            /* Escaped dollar sign */
-            if (*p == '\\' && *(p + 1) == '$') {
-                putchar('$');
-                p += 2;
-                continue;
-            }
-
-            if (*p != '$') {
-                putchar(*p);
-                p++;
-                continue;
-            }
-
-            /* $ found */
-            p++; /* skip '$' */
-
-            if (*p == '{') {
-                /* ${VAR} or ${VAR:-default} */
-                p++; /* skip '{' */
-                char varname[256];
-                int n = read_varname(p, varname, sizeof(varname));
-                p += n;
-
-                char *defval = NULL;
-
-                /* Check for :-default */
-                if (p[0] == ':' && p[1] == '-') {
-                    p += 2; /* skip ':-' */
-                    /* Read default value until '}' */
-                    char defbuf[4096];
-                    int di = 0;
-                    while (*p && *p != '}' && di < (int)sizeof(defbuf) - 1) {
-                        defbuf[di++] = *p++;
-                    }
-                    defbuf[di] = '\0';
-                    defval = defbuf;
-                }
-
-                /* Skip closing '}' */
-                if (*p == '}') p++;
-
-                const char *val = getenv(varname);
-                if (val) {
-                    fputs(val, stdout);
-                } else if (defval) {
-                    fputs(defval, stdout);
-                }
-                /* else: undefined with no default → empty string */
-            } else if (is_varchar((unsigned char)*p)) {
-                /* $VAR */
-                char varname[256];
-                int n = read_varname(p, varname, sizeof(varname));
-                p += n;
-
-                const char *val = getenv(varname);
-                if (val) {
-                    fputs(val, stdout);
-                }
-                /* else: undefined → empty string */
-            } else {
-                /* Lone $ followed by non-varchar — output literally */
-                putchar('$');
-            }
-        }
-    }
-
-    return 0;
-}
diff --git a/registry/native/c/programs/exitcode.c b/registry/native/c/programs/exitcode.c
deleted file mode 100644
index 0a6a60a9d..000000000
--- a/registry/native/c/programs/exitcode.c
+++ /dev/null
@@ -1,11 +0,0 @@
-/* exitcode.c — exits with code from argv[1] */
-#include <stdio.h>
-#include <stdlib.h>
-
-int main(int argc, char *argv[]) {
-    if (argc < 2) {
-        fprintf(stderr, "usage: exitcode <code>\n");
-        return 1;
-    }
-    return atoi(argv[1]);
-}
diff --git a/registry/native/c/programs/fread.c b/registry/native/c/programs/fread.c
deleted file mode 100644
index 638d025d8..000000000
--- a/registry/native/c/programs/fread.c
+++ /dev/null
@@ -1,25 +0,0 @@
-/* fread.c — read file by path from argv[1], print contents */
-#include <stdio.h>
-#include <stdlib.h>
-
-int main(int argc, char *argv[]) {
-    if (argc < 2) {
-        fprintf(stderr, "usage: fread <file>\n");
-        return 1;
-    }
-
-    FILE *f = fopen(argv[1], "r");
-    if (!f) {
-        perror(argv[1]);
-        return 1;
-    }
-
-    char buf[4096];
-    size_t n;
-    while ((n = fread(buf, 1, sizeof(buf), f)) > 0) {
-        fwrite(buf, 1, n, stdout);
-    }
-
-    fclose(f);
-    return 0;
-}
diff --git a/registry/native/c/programs/fs_probe.c b/registry/native/c/programs/fs_probe.c
deleted file mode 100644
index 8194b6d96..000000000
--- a/registry/native/c/programs/fs_probe.c
+++ /dev/null
@@ -1,443 +0,0 @@
-/* fs_probe.c - deterministic native-vs-VM filesystem parity probe.
- *
- * argv[1] is a scratch directory. Run this once as a native Linux binary and
- * once inside the VM, then diff stdout. The output intentionally avoids file
- * descriptor numbers, absolute paths, uid/gid, and locale-dependent strings.
- */
-#define _GNU_SOURCE
-
-#include <errno.h>
-#include <fcntl.h>
-#include <stdint.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/stat.h>
-#include <sys/types.h>
-#include <time.h>
-#include <unistd.h>
-
-static const char *scratch_dir;
-static char path_buffers[6][1024];
-static unsigned path_index;
-static unsigned failures;
-
-static const char *path_for(const char *name) {
-  char *buffer = path_buffers[path_index++ % 6];
-  snprintf(buffer, 1024, "%s/%s", scratch_dir, name);
-  return buffer;
-}
-
-static void cleanup(void) {
-  unlink(path_for("mode.txt"));
-  unlink(path_for("append.txt"));
-  unlink(path_for("excl.txt"));
-  unlink(path_for("rw.txt"));
-  unlink(path_for("rename_src.txt"));
-  unlink(path_for("rename_dst.txt"));
-  unlink(path_for("link.txt"));
-  unlink(path_for("trunc.txt"));
-  unlink(path_for("large.bin"));
-  rmdir(path_for("dir"));
-}
-
-static void report(const char *label, int ok) {
-  printf("%-32s %s\n", label, ok ? "ok" : "FAIL");
-  if (!ok) {
-    failures++;
-  }
-}
-
-static void expect_ok(const char *label, long ret) {
-  int err = errno;
-  int ok = ret >= 0;
-  printf("%-32s %s errno=%d\n", label, ok ? "ok" : "FAIL", ok ? 0 : err);
-  if (!ok) {
-    failures++;
-  }
-}
-
-static const char *expected_errno_name(int err) {
-  if (err == EACCES) {
-    return "EACCES";
-  }
-  if (err == EEXIST) {
-    return "EEXIST";
-  }
-  return NULL;
-}
-
-static void expect_errno(const char *label, long ret, int expected_errno) {
-  int err = errno;
-  int ok = ret < 0 && err == expected_errno;
-  const char *name = ret < 0 ? expected_errno_name(err) : NULL;
-  if (name) {
-    printf("%-32s %s errno=%s\n", label, ok ? "ok" : "FAIL", name);
-  } else {
-    printf("%-32s %s errno=%d\n", label, ok ? "ok" : "FAIL", ret < 0 ? err : 0);
-  }
-  if (!ok) {
-    failures++;
-  }
-}
-
-static int write_all(int fd, const void *data, size_t len) {
-  const char *cursor = (const char *)data;
-  while (len > 0) {
-    ssize_t written = write(fd, cursor, len);
-    if (written < 0) {
-      return -1;
-    }
-    if (written == 0) {
-      errno = EIO;
-      return -1;
-    }
-    cursor += written;
-    len -= (size_t)written;
-  }
-  return 0;
-}
-
-static int read_exact_file(const char *path, char *buffer, size_t len) {
-  int fd = open(path, O_RDONLY);
-  if (fd < 0) {
-    return -1;
-  }
-  size_t offset = 0;
-  while (offset < len) {
-    ssize_t n = read(fd, buffer + offset, len - offset);
-    if (n < 0) {
-      int err = errno;
-      close(fd);
-      errno = err;
-      return -1;
-    }
-    if (n == 0) {
-      close(fd);
-      errno = EIO;
-      return -1;
-    }
-    offset += (size_t)n;
-  }
-  close(fd);
-  return 0;
-}
-
-static void write_text_file(const char *path, const char *text, mode_t mode) {
-  int fd = open(path, O_WRONLY | O_CREAT | O_TRUNC, mode);
-  if (fd < 0) {
-    return;
-  }
-  (void)write_all(fd, text, strlen(text));
-  close(fd);
-}
-
-static void mode_line(const char *label, const char *path, mode_t expected_mode,
-                      off_t expected_size, int expected_type) {
-  struct stat st;
-  errno = 0;
-  if (stat(path, &st) != 0) {
-    printf("%-32s FAIL errno=%d\n", label, errno);
-    failures++;
-    return;
-  }
-  int ok = ((st.st_mode & 07777) == expected_mode) &&
-           (st.st_size == expected_size) &&
-           ((st.st_mode & S_IFMT) == expected_type);
-  printf("%-32s %s mode=%04o size=%lld type=%o\n", label,
-         ok ? "ok" : "FAIL", (unsigned)(st.st_mode & 07777),
-         (long long)st.st_size, (unsigned)(st.st_mode & S_IFMT));
-  if (!ok) {
-    failures++;
-  }
-}
-
-static void fmode_line(const char *label, int fd, mode_t expected_mode,
-                       off_t expected_size, int expected_type) {
-  struct stat st;
-  errno = 0;
-  if (fstat(fd, &st) != 0) {
-    printf("%-32s FAIL errno=%d\n", label, errno);
-    failures++;
-    return;
-  }
-  int ok = ((st.st_mode & 07777) == expected_mode) &&
-           (st.st_size == expected_size) &&
-           ((st.st_mode & S_IFMT) == expected_type);
-  printf("%-32s %s mode=%04o size=%lld type=%o\n", label,
-         ok ? "ok" : "FAIL", (unsigned)(st.st_mode & 07777),
-         (long long)st.st_size, (unsigned)(st.st_mode & S_IFMT));
-  if (!ok) {
-    failures++;
-  }
-}
-
-static void stat_and_access_cases(void) {
-  const char *mode_path = path_for("mode.txt");
-  int fd;
-
-  errno = 0;
-  fd = open(mode_path, O_RDWR | O_CREAT | O_TRUNC, 0644);
-  expect_ok("open_create_0644", fd);
-  if (fd >= 0) {
-    errno = 0;
-    expect_ok("fchmod_initial_0644", fchmod(fd, 0644));
-    errno = 0;
-    expect_ok("write_initial", write_all(fd, "hello", 5));
-    fmode_line("fstat_initial_mode", fd, 0644, 5, S_IFREG);
-    close(fd);
-  }
-  mode_line("stat_initial_mode", mode_path, 0644, 5, S_IFREG);
-
-  errno = 0;
-  expect_ok("access_F_OK", access(mode_path, F_OK));
-  errno = 0;
-  expect_ok("access_R_OK", access(mode_path, R_OK));
-  errno = 0;
-  expect_ok("access_W_OK", access(mode_path, W_OK));
-  errno = 0;
-  expect_errno("access_X_OK_no_exec", access(mode_path, X_OK), EACCES);
-
-  errno = 0;
-  expect_ok("chmod_0600", chmod(mode_path, 0600));
-  mode_line("stat_after_chmod_0600", mode_path, 0600, 5, S_IFREG);
-
-  errno = 0;
-  fd = open(mode_path, O_RDWR);
-  expect_ok("open_existing_RDWR", fd);
-  if (fd >= 0) {
-    errno = 0;
-    expect_ok("fchmod_0640", fchmod(fd, 0640));
-    fmode_line("fstat_after_fchmod_0640", fd, 0640, 5, S_IFREG);
-    close(fd);
-  }
-  mode_line("stat_after_fchmod_0640", mode_path, 0640, 5, S_IFREG);
-
-  errno = 0;
-  expect_ok("chmod_0755", chmod(mode_path, 0755));
-  errno = 0;
-  expect_ok("access_X_OK_exec", access(mode_path, X_OK));
-}
-
-static void create_write_cases(void) {
-  const char *append_path = path_for("append.txt");
-  const char *excl_path = path_for("excl.txt");
-  const char *rw_path = path_for("rw.txt");
-  char buffer[16] = {0};
-  int fd;
-
-  errno = 0;
-  fd = open(append_path, O_WRONLY | O_CREAT | O_TRUNC, 0644);
-  expect_ok("open_WRONLY_CREAT_TRUNC", fd);
-  if (fd >= 0) {
-    errno = 0;
-    expect_ok("write_append_first", write_all(fd, "abc", 3));
-    errno = 0;
-    expect_ok("fsync_append_file", fsync(fd));
-    close(fd);
-  }
-
-  errno = 0;
-  fd = open(append_path, O_WRONLY | O_APPEND);
-  expect_ok("open_append", fd);
-  if (fd >= 0) {
-    errno = 0;
-    expect_ok("write_append_second", write_all(fd, "XYZ", 3));
-    close(fd);
-  }
-  errno = 0;
-  report("readback_append_exact",
-         read_exact_file(append_path, buffer, 6) == 0 &&
-             memcmp(buffer, "abcXYZ", 6) == 0);
-
-  errno = 0;
-  fd = open(excl_path, O_WRONLY | O_CREAT | O_EXCL, 0644);
-  expect_ok("open_CREAT_EXCL_new", fd);
-  if (fd >= 0) {
-    close(fd);
-  }
-  errno = 0;
-  fd = open(excl_path, O_WRONLY | O_CREAT | O_EXCL, 0644);
-  expect_errno("open_CREAT_EXCL_existing", fd, EEXIST);
-  if (fd >= 0) {
-    close(fd);
-  }
-
-  errno = 0;
-  fd = open(rw_path, O_RDWR | O_CREAT | O_TRUNC, 0644);
-  expect_ok("open_RDWR_create", fd);
-  if (fd >= 0) {
-    errno = 0;
-    expect_ok("write_read_file", write_all(fd, "native", 6));
-    errno = 0;
-    expect_ok("seek_start", lseek(fd, 0, SEEK_SET));
-    memset(buffer, 0, sizeof(buffer));
-    errno = 0;
-    report("read_same_fd_exact", read(fd, buffer, 6) == 6 &&
-                                      memcmp(buffer, "native", 6) == 0);
-    close(fd);
-  }
-}
-
-static void directory_and_link_cases(void) {
-  struct stat st;
-  char link_buffer[256] = {0};
-  ssize_t link_len;
-
-  errno = 0;
-  expect_ok("mkdir_dir", mkdir(path_for("dir"), 0755));
-  errno = 0;
-  expect_errno("mkdir_dir_EEXIST", mkdir(path_for("dir"), 0755), EEXIST);
-  errno = 0;
-  expect_ok("rmdir_dir", rmdir(path_for("dir")));
-
-  write_text_file(path_for("rename_src.txt"), "src", 0644);
-  write_text_file(path_for("rename_dst.txt"), "dst", 0644);
-  errno = 0;
-  expect_ok("rename_overwrite", rename(path_for("rename_src.txt"),
-                                       path_for("rename_dst.txt")));
-  memset(link_buffer, 0, sizeof(link_buffer));
-  report("rename_readback_exact",
-         read_exact_file(path_for("rename_dst.txt"), link_buffer, 3) == 0 &&
-             memcmp(link_buffer, "src", 3) == 0);
-
-  errno = 0;
-  expect_ok("symlink_relative", symlink("rename_dst.txt", path_for("link.txt")));
-  errno = 0;
-  expect_ok("lstat_symlink", lstat(path_for("link.txt"), &st));
-  report("lstat_symlink_type", (st.st_mode & S_IFMT) == S_IFLNK);
-  errno = 0;
-  link_len = readlink(path_for("link.txt"), link_buffer, sizeof(link_buffer) - 1);
-  if (link_len >= 0) {
-    link_buffer[link_len] = '\0';
-  }
-  report("readlink_relative_exact",
-         link_len == (ssize_t)strlen("rename_dst.txt") &&
-             strcmp(link_buffer, "rename_dst.txt") == 0);
-}
-
-static void fd_and_metadata_cases(void) {
-  const char *trunc_path = path_for("trunc.txt");
-  struct timespec ts[2] = {
-      {.tv_sec = 1700000000, .tv_nsec = 123000000},
-      {.tv_sec = 1700000001, .tv_nsec = 456000000},
-  };
-  int fd;
-  int fd2;
-
-  write_text_file(trunc_path, "truncate-me", 0644);
-  errno = 0;
-  expect_ok("truncate_4", truncate(trunc_path, 4));
-  mode_line("stat_after_truncate_4", trunc_path, 0644, 4, S_IFREG);
-
-  errno = 0;
-  fd = open(trunc_path, O_RDWR);
-  expect_ok("open_trunc_RDWR", fd);
-  if (fd >= 0) {
-    errno = 0;
-    expect_ok("ftruncate_2", ftruncate(fd, 2));
-    fmode_line("fstat_after_ftruncate_2", fd, 0644, 2, S_IFREG);
-
-    errno = 0;
-    fd2 = dup(fd);
-    expect_ok("dup_fd", fd2);
-    if (fd2 >= 0) {
-      close(fd2);
-    }
-
-    errno = 0;
-    fd2 = dup2(fd, 42);
-    expect_ok("dup2_fd_42", fd2);
-    if (fd2 >= 0) {
-      close(fd2);
-    }
-
-    errno = 0;
-    int flags = fcntl(fd, F_GETFL);
-    expect_ok("fcntl_GETFL", flags);
-    if (flags >= 0) {
-      errno = 0;
-      expect_ok("fcntl_SETFL_APPEND", fcntl(fd, F_SETFL, flags | O_APPEND));
-      errno = 0;
-      flags = fcntl(fd, F_GETFL);
-      report("fcntl_APPEND_visible", flags >= 0 && (flags & O_APPEND) != 0);
-    }
-    close(fd);
-  }
-
-  errno = 0;
-  expect_ok("utimensat_set", utimensat(AT_FDCWD, trunc_path, ts, 0));
-}
-
-static void memory_growth_write_case(void) {
-  const size_t chunk_size = 64 * 1024;
-  const size_t chunks = 100;
-  const size_t allocation_size = 24 * 1024 * 1024;
-  const char *large_path = path_for("large.bin");
-  unsigned char *allocation = (unsigned char *)malloc(allocation_size);
-  int fd;
-  struct stat st;
-
-  report("malloc_memory_growth_buffer", allocation != NULL);
-  if (allocation == NULL) {
-    return;
-  }
-  for (size_t i = 0; i < allocation_size; i++) {
-    allocation[i] = (unsigned char)(i * 31u + 7u);
-  }
-  unsigned char *chunk = allocation + allocation_size - chunk_size;
-
-  errno = 0;
-  fd = open(large_path, O_WRONLY | O_CREAT | O_TRUNC, 0644);
-  expect_ok("large_open_create", fd);
-  if (fd >= 0) {
-    int ok = 1;
-    for (size_t i = 0; i < chunks; i++) {
-      if (write_all(fd, chunk, chunk_size) != 0) {
-        ok = 0;
-        break;
-      }
-    }
-    printf("%-32s %s errno=%d bytes=%llu\n", "large_write_after_growth",
-           ok ? "ok" : "FAIL", ok ? 0 : errno,
-           (unsigned long long)(ok ? chunk_size * chunks : 0));
-    if (!ok) {
-      failures++;
-    }
-    close(fd);
-  }
-
-  errno = 0;
-  if (stat(large_path, &st) == 0) {
-    report("large_stat_size", st.st_size == (off_t)(chunk_size * chunks));
-  } else {
-    printf("%-32s FAIL errno=%d\n", "large_stat_size", errno);
-    failures++;
-  }
-
-  char verify[64];
-  errno = 0;
-  report("large_readback_prefix",
-         read_exact_file(large_path, verify, sizeof(verify)) == 0 &&
-             memcmp(verify, chunk, sizeof(verify)) == 0);
-  free(allocation);
-}
-
-int main(int argc, char **argv) {
-  scratch_dir = argc > 1 ? argv[1] : "/tmp/fs-probe";
-#if !defined(__wasi__) && !defined(__wasm32__)
-  umask(0);
-#endif
-  mkdir(scratch_dir, 0777);
-  cleanup();
-
-  stat_and_access_cases();
-  create_write_cases();
-  directory_and_link_cases();
-  fd_and_metadata_cases();
-  memory_growth_write_case();
-
-  cleanup();
-  printf("SUMMARY failures=%u\n", failures);
-  return failures == 0 ? 0 : 1;
-}
diff --git a/registry/native/c/programs/fwrite.c b/registry/native/c/programs/fwrite.c
deleted file mode 100644
index 691b5101d..000000000
--- a/registry/native/c/programs/fwrite.c
+++ /dev/null
@@ -1,21 +0,0 @@
-/* fwrite.c — write argv[2] content to file at argv[1] */
-#include <stdio.h>
-#include <string.h>
-
-int main(int argc, char *argv[]) {
-    if (argc < 3) {
-        fprintf(stderr, "usage: fwrite <file> <content>\n");
-        return 1;
-    }
-
-    FILE *f = fopen(argv[1], "w");
-    if (!f) {
-        perror(argv[1]);
-        return 1;
-    }
-
-    fwrite(argv[2], 1, strlen(argv[2]), f);
-    fwrite("\n", 1, 1, f);
-    fclose(f);
-    return 0;
-}
diff --git a/registry/native/c/programs/getpid_test.c b/registry/native/c/programs/getpid_test.c
deleted file mode 100644
index d2dcf72f2..000000000
--- a/registry/native/c/programs/getpid_test.c
+++ /dev/null
@@ -1,15 +0,0 @@
-/* getpid_test.c — print PID (must NOT be hardcoded 42 in WASM) */
-#include <stdio.h>
-#include <unistd.h>
-
-int main(void) {
-    pid_t pid1 = getpid();
-    pid_t pid2 = getpid();
-    printf("pid=%d\n", pid1);
-    /* Vanilla wasi-libc returns hardcoded 42; patched returns real PID */
-    printf("pid_positive=%s\n", pid1 > 0 ? "yes" : "no");
-    printf("pid_not_42=%s\n", pid1 != 42 ? "yes" : "no");
-    /* Two calls must return the same PID */
-    printf("pid_consistent=%s\n", pid1 == pid2 ? "yes" : "no");
-    return 0;
-}
diff --git a/registry/native/c/programs/getppid_test.c b/registry/native/c/programs/getppid_test.c
deleted file mode 100644
index 27f16c09e..000000000
--- a/registry/native/c/programs/getppid_test.c
+++ /dev/null
@@ -1,10 +0,0 @@
-/* getppid_test.c — print parent PID (must not trap in WASM) */
-#include <stdio.h>
-#include <unistd.h>
-
-int main(void) {
-    pid_t ppid = getppid();
-    printf("ppid=%d\n", ppid);
-    printf("ppid_nonnegative=%s\n", ppid >= 0 ? "yes" : "no");
-    return 0;
-}
diff --git a/registry/native/c/programs/getppid_verify.c b/registry/native/c/programs/getppid_verify.c
deleted file mode 100644
index fe2110713..000000000
--- a/registry/native/c/programs/getppid_verify.c
+++ /dev/null
@@ -1,93 +0,0 @@
-/* getppid_verify.c -- verify child's getppid() matches parent's getpid()
- *
- * Parent calls getpid(), spawns getppid_test with piped stdout, captures
- * child output, verifies child's ppid matches parent's pid.
- *
- * Note: first piped spawn in a WASM process has a pipe-capture quirk,
- * so we do a warmup piped spawn of 'true' first. */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-
-#include "posix_spawn_compat.h"
-
-extern char **environ;
-
-/* Spawn a command with piped stdout, capture output into buf. */
-static ssize_t spawn_capture(const char *cmd, char *const argv[],
-                              char *buf, size_t bufsize, int *exit_code) {
-    int pipefd[2];
-    if (pipe(pipefd) != 0)
-        return -1;
-
-    posix_spawn_file_actions_t fa;
-    posix_spawn_file_actions_init(&fa);
-    posix_spawn_file_actions_adddup2(&fa, pipefd[1], STDOUT_FILENO);
-    posix_spawn_file_actions_addclose(&fa, pipefd[0]);
-    posix_spawn_file_actions_addclose(&fa, pipefd[1]);
-
-    pid_t child;
-    int err = posix_spawnp(&child, cmd, &fa, NULL, argv, environ);
-    posix_spawn_file_actions_destroy(&fa);
-
-    if (err != 0) {
-        close(pipefd[0]);
-        close(pipefd[1]);
-        return -1;
-    }
-
-    close(pipefd[1]);
-
-    ssize_t total = 0;
-    ssize_t n;
-    while ((n = read(pipefd[0], buf + total, bufsize - 1 - total)) > 0)
-        total += n;
-    close(pipefd[0]);
-    buf[total] = '\0';
-
-    int status;
-    waitpid(child, &status, 0);
-    *exit_code = WIFEXITED(status) ? WEXITSTATUS(status) : -1;
-
-    return total;
-}
-
-int main(void) {
-    pid_t my_pid = getpid();
-    printf("parent_pid=%d\n", my_pid);
-
-    /* Warmup piped spawn — works around first-pipe-capture WASM quirk */
-    {
-        char buf[64];
-        int ec;
-        char *argv[] = {"true", NULL};
-        spawn_capture("true", argv, buf, sizeof(buf), &ec);
-    }
-
-    /* Spawn getppid_test with piped stdout to capture child's ppid output */
-    char buf[512];
-    int child_exit;
-    char *child_argv[] = {"getppid_test", NULL};
-    ssize_t captured = spawn_capture("getppid_test", child_argv,
-                                      buf, sizeof(buf), &child_exit);
-
-    printf("child_exit=%d\n", child_exit);
-
-    if (captured <= 0) {
-        printf("child_output=none\n");
-        printf("match=no\n");
-        return 1;
-    }
-
-    /* Parse child's ppid=N from getppid_test output */
-    int child_ppid = -1;
-    char *line = strstr(buf, "ppid=");
-    if (line)
-        child_ppid = atoi(line + 5);
-
-    printf("child_reported_ppid=%d\n", child_ppid);
-    printf("match=%s\n", (child_ppid == (int)my_pid) ? "yes" : "no");
-
-    return 0;
-}
diff --git a/registry/native/c/programs/getpwuid_test.c b/registry/native/c/programs/getpwuid_test.c
deleted file mode 100644
index da3f768c2..000000000
--- a/registry/native/c/programs/getpwuid_test.c
+++ /dev/null
@@ -1,57 +0,0 @@
-/* getpwuid_test.c — validate getpwuid() returns correct passwd entry */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <pwd.h>
-#include <unistd.h>
-
-int main(void) {
-    int failures = 0;
-
-    struct passwd *pw = getpwuid(1000);
-    if (!pw) {
-        printf("getpwuid: NULL\n");
-        printf("pw_name_nonempty: no\n");
-        printf("pw_uid_match: no\n");
-        printf("pw_gid_valid: no\n");
-        printf("pw_dir_nonempty: no\n");
-        printf("pw_shell_nonempty: no\n");
-        return 1;
-    }
-
-    printf("getpwuid: ok\n");
-
-    /* pw_name is non-empty */
-    int name_ok = pw->pw_name != NULL && strlen(pw->pw_name) > 0;
-    printf("pw_name_nonempty: %s\n", name_ok ? "yes" : "no");
-    if (!name_ok) failures++;
-
-    /* pw_uid matches requested uid */
-    int uid_ok = pw->pw_uid == 1000;
-    printf("pw_uid_match: %s\n", uid_ok ? "yes" : "no");
-    if (!uid_ok) failures++;
-
-    /* pw_gid is valid (positive) */
-    int gid_ok = pw->pw_gid > 0;
-    printf("pw_gid_valid: %s\n", gid_ok ? "yes" : "no");
-    if (!gid_ok) failures++;
-
-    /* pw_dir is non-empty */
-    int dir_ok = pw->pw_dir != NULL && strlen(pw->pw_dir) > 0;
-    printf("pw_dir_nonempty: %s\n", dir_ok ? "yes" : "no");
-    if (!dir_ok) failures++;
-
-    /* pw_shell is non-empty */
-    int shell_ok = pw->pw_shell != NULL && strlen(pw->pw_shell) > 0;
-    printf("pw_shell_nonempty: %s\n", shell_ok ? "yes" : "no");
-    if (!shell_ok) failures++;
-
-    /* Print actual values for debugging */
-    printf("pw_name=%s\n", pw->pw_name);
-    printf("pw_uid=%u\n", (unsigned)pw->pw_uid);
-    printf("pw_gid=%u\n", (unsigned)pw->pw_gid);
-    printf("pw_dir=%s\n", pw->pw_dir);
-    printf("pw_shell=%s\n", pw->pw_shell);
-
-    return failures > 0 ? 1 : 0;
-}
diff --git a/registry/native/c/programs/hello.c b/registry/native/c/programs/hello.c
deleted file mode 100644
index 701580272..000000000
--- a/registry/native/c/programs/hello.c
+++ /dev/null
@@ -1,7 +0,0 @@
-/* hello.c — prints "Hello, World!" to stdout */
-#include <stdio.h>
-
-int main(void) {
-    printf("Hello, World!\n");
-    return 0;
-}
diff --git a/registry/native/c/programs/http_get.c b/registry/native/c/programs/http_get.c
deleted file mode 100644
index 0e7dc466e..000000000
--- a/registry/native/c/programs/http_get.c
+++ /dev/null
@@ -1,95 +0,0 @@
-/* http_get.c — connect to an HTTP server, send GET request, print response body */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
-
-int main(int argc, char *argv[]) {
-    if (argc < 2) {
-        fprintf(stderr, "usage: http_get <port> [path] [output_file]\n");
-        return 1;
-    }
-
-    int port = atoi(argv[1]);
-    const char *path = argc >= 3 ? argv[2] : "/";
-    const char *output_file = argc >= 4 ? argv[3] : NULL;
-
-    int fd = socket(AF_INET, SOCK_STREAM, 0);
-    if (fd < 0) {
-        perror("socket");
-        return 1;
-    }
-
-    struct sockaddr_in addr;
-    memset(&addr, 0, sizeof(addr));
-    addr.sin_family = AF_INET;
-    addr.sin_port = htons((uint16_t)port);
-    inet_pton(AF_INET, "127.0.0.1", &addr.sin_addr);
-
-    if (connect(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0) {
-        perror("connect");
-        close(fd);
-        return 1;
-    }
-
-    char request[1024];
-    int request_len = snprintf(
-        request,
-        sizeof(request),
-        "GET %s HTTP/1.0\r\nHost: localhost\r\n\r\n",
-        path
-    );
-    if (request_len < 0 || (size_t)request_len >= sizeof(request)) {
-        fprintf(stderr, "request path too long\n");
-        close(fd);
-        return 1;
-    }
-
-    ssize_t sent = send(fd, request, (size_t)request_len, 0);
-    if (sent < 0) {
-        perror("send");
-        close(fd);
-        return 1;
-    }
-
-    /* Read full response */
-    char response[4096];
-    size_t total = 0;
-    ssize_t n;
-    while ((n = recv(fd, response + total, sizeof(response) - total - 1, 0)) > 0) {
-        total += (size_t)n;
-    }
-    response[total] = '\0';
-
-    close(fd);
-
-    /* Find body after \r\n\r\n */
-    const char *body = strstr(response, "\r\n\r\n");
-    if (body) {
-        body += 4;
-        if (output_file) {
-            FILE *out = fopen(output_file, "wb");
-            if (!out) {
-                perror("fopen");
-                return 1;
-            }
-            size_t body_len = total - (size_t)(body - response);
-            if (fwrite(body, 1, body_len, out) != body_len) {
-                perror("fwrite");
-                fclose(out);
-                return 1;
-            }
-            fclose(out);
-        } else {
-            printf("body: %s\n", body);
-        }
-    } else {
-        printf("body: (no separator found)\n");
-        return 1;
-    }
-
-    return 0;
-}
diff --git a/registry/native/c/programs/http_get_test.c b/registry/native/c/programs/http_get_test.c
deleted file mode 100644
index e0e0f49f0..000000000
--- a/registry/native/c/programs/http_get_test.c
+++ /dev/null
@@ -1,77 +0,0 @@
-#include <stdio.h>
-#include <string.h>
-#include <stdlib.h>
-#include <sys/socket.h>
-#include <netdb.h>
-#include <poll.h>
-#include <unistd.h>
-#include <fcntl.h>
-#include <errno.h>
-#include <netinet/in.h>
-
-int main(int argc, char *argv[]) {
-    const char *host = argc > 1 ? argv[1] : "httpbin.org";
-    const char *port = argc > 2 ? argv[2] : "80";
-    const char *path = argc > 3 ? argv[3] : "/get";
-
-    struct addrinfo hints = {0};
-    hints.ai_family = AF_INET;
-    hints.ai_socktype = SOCK_STREAM;
-    struct addrinfo *res;
-    int err = getaddrinfo(host, port, &hints, &res);
-    if (err != 0) { fprintf(stderr, "getaddrinfo: %s\n", gai_strerror(err)); return 1; }
-
-    int fd = socket(res->ai_family, res->ai_socktype, res->ai_protocol);
-    if (fd < 0) { fprintf(stderr, "socket: %s\n", strerror(errno)); return 1; }
-    fprintf(stderr, "socket fd=%d\n", fd);
-
-    /* Set non-blocking like curl does */
-    int flags = fcntl(fd, F_GETFL, 0);
-    fprintf(stderr, "fcntl F_GETFL=%d\n", flags);
-    int r = fcntl(fd, F_SETFL, flags | O_NONBLOCK);
-    fprintf(stderr, "fcntl F_SETFL(NONBLOCK)=%d errno=%d\n", r, errno);
-
-    /* TCP_NODELAY */
-    int nodelay = 1;
-    setsockopt(fd, 6/*IPPROTO_TCP*/, 1/*TCP_NODELAY*/, &nodelay, sizeof(nodelay));
-
-    /* Connect */
-    int cr = connect(fd, res->ai_addr, res->ai_addrlen);
-    fprintf(stderr, "connect=%d errno=%d\n", cr, errno);
-    freeaddrinfo(res);
-
-    /* getsockopt SO_ERROR */
-    int so_err = -1;
-    socklen_t so_len = sizeof(so_err);
-    int gso = getsockopt(fd, SOL_SOCKET, 4/*SO_ERROR*/, &so_err, &so_len);
-    fprintf(stderr, "getsockopt(SO_ERROR)=%d value=%d\n", gso, so_err);
-
-    /* getpeername */
-    struct sockaddr_in peer = {0};
-    socklen_t peerlen = sizeof(peer);
-    int gpn = getpeername(fd, (struct sockaddr*)&peer, &peerlen);
-    fprintf(stderr, "getpeername=%d errno=%d family=%d\n", gpn, errno, peer.sin_family);
-
-    /* Poll for writability */
-    struct pollfd pfd = { .fd = fd, .events = POLLOUT };
-    int pr = poll(&pfd, 1, 5000);
-    fprintf(stderr, "poll(POLLOUT)=%d revents=0x%x\n", pr, pfd.revents);
-
-    /* Send HTTP request */
-    char req[512];
-    int reqlen = snprintf(req, sizeof(req),
-        "GET %s HTTP/1.1\r\nHost: %s\r\nConnection: close\r\n\r\n", path, host);
-    ssize_t sent = send(fd, req, reqlen, 0);
-    fprintf(stderr, "send=%zd\n", sent);
-
-    /* Receive response */
-    pfd.events = POLLIN;
-    poll(&pfd, 1, 10000);
-    char buf[4096];
-    ssize_t recvd = recv(fd, buf, sizeof(buf) - 1, 0);
-    fprintf(stderr, "recv=%zd\n", recvd);
-    if (recvd > 0) { buf[recvd] = '\0'; printf("%s", buf); }
-
-    close(fd);
-    return 0;
-}
diff --git a/registry/native/c/programs/http_server.c b/registry/native/c/programs/http_server.c
deleted file mode 100644
index 246d15a8a..000000000
--- a/registry/native/c/programs/http_server.c
+++ /dev/null
@@ -1,132 +0,0 @@
-/* http_server.c - bind, listen, accept one HTTP request, reply, close */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
-
-static const char *status_text(int status) {
-    return status == 200 ? "OK" : "Internal Server Error";
-}
-
-int main(int argc, char *argv[]) {
-    if (argc < 2) {
-        fprintf(stderr, "usage: http_server <port>\n");
-        return 1;
-    }
-
-    int port = atoi(argv[1]);
-
-    int fd = socket(AF_INET, SOCK_STREAM, 0);
-    if (fd < 0) {
-        perror("socket");
-        return 1;
-    }
-
-    int reuse = 1;
-    setsockopt(fd, SOL_SOCKET, SO_REUSEADDR, &reuse, sizeof(reuse));
-
-    struct sockaddr_in addr;
-    memset(&addr, 0, sizeof(addr));
-    addr.sin_family = AF_INET;
-    addr.sin_port = htons((uint16_t)port);
-    addr.sin_addr.s_addr = htonl(INADDR_ANY);
-
-    if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0) {
-        perror("bind");
-        close(fd);
-        return 1;
-    }
-
-    if (listen(fd, 1) < 0) {
-        perror("listen");
-        close(fd);
-        return 1;
-    }
-
-    printf("http listening on port %d\n", port);
-    fflush(stdout);
-
-    struct sockaddr_in client_addr;
-    socklen_t client_len = sizeof(client_addr);
-    int client_fd = accept(fd, (struct sockaddr *)&client_addr, &client_len);
-    if (client_fd < 0) {
-        perror("accept");
-        close(fd);
-        return 1;
-    }
-
-    char request[2048];
-    ssize_t total = 0;
-    while (total < (ssize_t)sizeof(request) - 1) {
-        ssize_t n = recv(client_fd, request + total, sizeof(request) - 1 - (size_t)total, 0);
-        if (n < 0) {
-            perror("recv");
-            close(client_fd);
-            close(fd);
-            return 1;
-        }
-        if (n == 0) {
-            break;
-        }
-        total += n;
-        request[total] = '\0';
-        if (strstr(request, "\r\n\r\n") != NULL) {
-            break;
-        }
-    }
-    request[total] = '\0';
-
-    char method[16] = "";
-    char path[512] = "";
-    sscanf(request, "%15s %511s", method, path);
-    printf("received request: %s %s\n", method, path);
-    fflush(stdout);
-
-    int status = 200;
-    char body[768];
-    int body_len = snprintf(body, sizeof(body), "wasm:%s:%s", method, path);
-    if (body_len < 0 || (size_t)body_len >= sizeof(body)) {
-        status = 500;
-        body_len = snprintf(body, sizeof(body), "wasm:error");
-    }
-
-    char response[1400];
-    int response_len = snprintf(
-        response,
-        sizeof(response),
-        "HTTP/1.1 %d %s\r\n"
-        "Content-Type: text/plain\r\n"
-        "Content-Length: %d\r\n"
-        "Connection: close\r\n"
-        "\r\n"
-        "%s",
-        status,
-        status_text(status),
-        body_len,
-        body
-    );
-
-    if (response_len < 0 || (size_t)response_len >= sizeof(response)) {
-        fprintf(stderr, "response too large\n");
-        close(client_fd);
-        close(fd);
-        return 1;
-    }
-
-    ssize_t sent = send(client_fd, response, (size_t)response_len, 0);
-    if (sent < 0) {
-        perror("send");
-        close(client_fd);
-        close(fd);
-        return 1;
-    }
-
-    printf("sent response: %zd\n", sent);
-
-    close(client_fd);
-    close(fd);
-    return 0;
-}
diff --git a/registry/native/c/programs/isatty_test.c b/registry/native/c/programs/isatty_test.c
deleted file mode 100644
index 68ad57a6a..000000000
--- a/registry/native/c/programs/isatty_test.c
+++ /dev/null
@@ -1,10 +0,0 @@
-/* isatty_test.c — detect if stdout/stderr/stdin are terminals */
-#include <stdio.h>
-#include <unistd.h>
-
-int main(void) {
-    printf("stdin isatty: %d\n", isatty(STDIN_FILENO));
-    printf("stdout isatty: %d\n", isatty(STDOUT_FILENO));
-    printf("stderr isatty: %d\n", isatty(STDERR_FILENO));
-    return 0;
-}
diff --git a/registry/native/c/programs/json_parse.c b/registry/native/c/programs/json_parse.c
deleted file mode 100644
index 347c55d74..000000000
--- a/registry/native/c/programs/json_parse.c
+++ /dev/null
@@ -1,107 +0,0 @@
-/* json_parse.c — Read JSON from stdin, parse with cJSON, print formatted output */
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include "cJSON.h"
-
-/* Read all of stdin into a dynamically allocated buffer */
-static char *read_stdin(void) {
-    size_t cap = 4096, len = 0;
-    char *buf = malloc(cap);
-    if (!buf) return NULL;
-
-    size_t n;
-    while ((n = fread(buf + len, 1, cap - len, stdin)) > 0) {
-        len += n;
-        if (len == cap) {
-            cap *= 2;
-            char *tmp = realloc(buf, cap);
-            if (!tmp) { free(buf); return NULL; }
-            buf = tmp;
-        }
-    }
-    buf[len] = '\0';
-    return buf;
-}
-
-/* Print a cJSON value with indentation for readable output */
-static void print_value(const cJSON *item, int depth);
-
-static void print_indent(int depth) {
-    for (int i = 0; i < depth; i++) printf("  ");
-}
-
-static void print_value(const cJSON *item, int depth) {
-    if (cJSON_IsNull(item)) {
-        printf("null");
-    } else if (cJSON_IsFalse(item)) {
-        printf("false");
-    } else if (cJSON_IsTrue(item)) {
-        printf("true");
-    } else if (cJSON_IsNumber(item)) {
-        double d = item->valuedouble;
-        if (d == (int)d && d >= -1e9 && d <= 1e9)
-            printf("%d", (int)d);
-        else
-            printf("%g", d);
-    } else if (cJSON_IsString(item)) {
-        printf("\"%s\"", item->valuestring);
-    } else if (cJSON_IsArray(item)) {
-        int size = cJSON_GetArraySize(item);
-        if (size == 0) {
-            printf("[]");
-            return;
-        }
-        printf("[\n");
-        cJSON *child = item->child;
-        for (int i = 0; child; child = child->next, i++) {
-            print_indent(depth + 1);
-            print_value(child, depth + 1);
-            if (child->next) printf(",");
-            printf("\n");
-        }
-        print_indent(depth);
-        printf("]");
-    } else if (cJSON_IsObject(item)) {
-        int size = cJSON_GetArraySize(item);
-        if (size == 0) {
-            printf("{}");
-            return;
-        }
-        printf("{\n");
-        cJSON *child = item->child;
-        for (int i = 0; child; child = child->next, i++) {
-            print_indent(depth + 1);
-            printf("\"%s\": ", child->string);
-            print_value(child, depth + 1);
-            if (child->next) printf(",");
-            printf("\n");
-        }
-        print_indent(depth);
-        printf("}");
-    }
-}
-
-int main(void) {
-    char *input = read_stdin();
-    if (!input) {
-        fprintf(stderr, "Error: failed to read stdin\n");
-        return 1;
-    }
-
-    cJSON *root = cJSON_Parse(input);
-    free(input);
-
-    if (!root) {
-        const char *err = cJSON_GetErrorPtr();
-        fprintf(stderr, "Parse error near: %.20s\n", err ? err : "(unknown)");
-        return 1;
-    }
-
-    print_value(root, 0);
-    printf("\n");
-
-    cJSON_Delete(root);
-    return 0;
-}
diff --git a/registry/native/c/programs/kill_child.c b/registry/native/c/programs/kill_child.c
deleted file mode 100644
index af8f10c22..000000000
--- a/registry/native/c/programs/kill_child.c
+++ /dev/null
@@ -1,47 +0,0 @@
-/* kill_child.c -- spawn long-running child, kill it, verify it terminated */
-#include <stdio.h>
-#include <stdlib.h>
-#include <unistd.h>
-#include <time.h>
-
-#include "posix_spawn_compat.h"
-
-extern char **environ;
-
-int main(void) {
-    /* Spawn 'sleep 999' -- long-running child we'll kill */
-    char *argv[] = {"sleep", "999", NULL};
-    pid_t child;
-    int err = posix_spawnp(&child, "sleep", NULL, NULL, argv, environ);
-    if (err != 0) {
-        fprintf(stderr, "posix_spawn failed: %d\n", err);
-        return 1;
-    }
-    printf("spawned: yes\n");
-
-    /* Brief pause to let child start */
-    struct timespec ts = {0, 50000000}; /* 50ms */
-    nanosleep(&ts, NULL);
-
-    /* Kill the child */
-    if (kill(child, SIGTERM) != 0) {
-        perror("kill");
-        return 1;
-    }
-    printf("kill: ok\n");
-
-    /* Wait for child to terminate */
-    int status;
-    pid_t w = waitpid(child, &status, 0);
-    if (w < 0) {
-        perror("waitpid");
-        return 1;
-    }
-    printf("terminated: yes\n");
-    printf("signaled=%s\n", WIFSIGNALED(status) ? "yes" : "no");
-    if (WIFSIGNALED(status)) {
-        printf("termsig=%d\n", WTERMSIG(status));
-    }
-
-    return 0;
-}
diff --git a/registry/native/c/programs/pipe_edge.c b/registry/native/c/programs/pipe_edge.c
deleted file mode 100644
index 22cf02ba5..000000000
--- a/registry/native/c/programs/pipe_edge.c
+++ /dev/null
@@ -1,164 +0,0 @@
-/* pipe_edge.c -- pipe edge cases: large write, broken pipe, EOF, close-both */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-#include <errno.h>
-
-#ifndef __wasi__
-#include <signal.h>
-#endif
-
-#define LARGE_SIZE  (128 * 1024)  /* 128KB > 64KB pipe buffer */
-#define CHUNK_SIZE  32768         /* 32KB per chunk — fits in pipe buffer */
-
-int main(void) {
-    /* Test 1: large pipe write — 128KB through pipe via chunked write/read
-     * Alternates write/read in 32KB chunks so total throughput exceeds
-     * the 64KB pipe buffer without requiring a concurrent reader process. */
-    {
-        int p[2];
-        if (pipe(p) != 0) {
-            printf("large_write: FAIL (pipe creation failed)\n");
-            return 1;
-        }
-
-        char *wbuf = (char *)malloc(CHUNK_SIZE);
-        char *rbuf = (char *)malloc(LARGE_SIZE);
-        if (!wbuf || !rbuf) {
-            printf("large_write: FAIL (malloc failed)\n");
-            return 1;
-        }
-        memset(wbuf, 'A', CHUNK_SIZE);
-
-        size_t total_written = 0;
-        size_t total_read = 0;
-        int ok = 1;
-
-        /* Write and read in alternating chunks */
-        while (total_written < (size_t)LARGE_SIZE) {
-            /* Write one chunk */
-            size_t to_write = CHUNK_SIZE;
-            if (total_written + to_write > (size_t)LARGE_SIZE)
-                to_write = (size_t)LARGE_SIZE - total_written;
-
-            ssize_t w = write(p[1], wbuf, to_write);
-            if (w <= 0) {
-                fprintf(stderr, "large_write: write failed at %zu errno=%d\n",
-                        total_written, errno);
-                ok = 0;
-                break;
-            }
-            total_written += (size_t)w;
-
-            /* Read back what was written */
-            while (total_read < total_written) {
-                ssize_t r = read(p[0], rbuf + total_read,
-                                 total_written - total_read);
-                if (r <= 0) {
-                    fprintf(stderr, "large_write: read failed at %zu errno=%d\n",
-                            total_read, errno);
-                    ok = 0;
-                    break;
-                }
-                total_read += (size_t)r;
-            }
-            if (!ok) break;
-        }
-
-        /* Close write end so read gets EOF */
-        close(p[1]);
-
-        /* Drain any remaining bytes (should be none) */
-        if (ok) {
-            ssize_t r;
-            while ((r = read(p[0], rbuf + total_read,
-                             (size_t)LARGE_SIZE - total_read)) > 0)
-                total_read += (size_t)r;
-        }
-        close(p[0]);
-
-        /* Verify all data transferred */
-        if (ok && total_written == (size_t)LARGE_SIZE
-              && total_read == (size_t)LARGE_SIZE) {
-            /* Verify data integrity — all bytes should be 'A' */
-            int corrupt = 0;
-            for (size_t i = 0; i < total_read; i++) {
-                if (rbuf[i] != 'A') { corrupt = 1; break; }
-            }
-            if (!corrupt) {
-                printf("large_write: ok\n");
-            } else {
-                printf("large_write: FAIL (data corruption detected)\n");
-            }
-        } else {
-            printf("large_write: FAIL (written=%zu, read=%zu, expected=%d)\n",
-                   total_written, total_read, LARGE_SIZE);
-        }
-        printf("large_write_bytes=%zu\n", total_read);
-
-        free(wbuf);
-        free(rbuf);
-    }
-
-    /* Test 2: broken pipe — close read end, write to write end -> EPIPE */
-    {
-#ifndef __wasi__
-        signal(SIGPIPE, SIG_IGN);
-#endif
-        int p[2];
-        if (pipe(p) != 0) {
-            printf("broken_pipe: FAIL (pipe creation failed)\n");
-            return 1;
-        }
-        close(p[0]); /* close read end */
-
-        errno = 0;
-        ssize_t n = write(p[1], "x", 1);
-        int saved_errno = errno;
-        close(p[1]);
-
-        if (n == -1 && saved_errno == EPIPE) {
-            printf("broken_pipe: ok\n");
-        } else {
-            printf("broken_pipe: FAIL (write returned %zd, errno=%d, expected -1/EPIPE=%d)\n",
-                   n, saved_errno, EPIPE);
-        }
-        printf("broken_pipe_errno=%d\n", saved_errno);
-    }
-
-    /* Test 3: EOF — close write end, read from read end -> 0 */
-    {
-        int p[2];
-        if (pipe(p) != 0) {
-            printf("eof_read: FAIL (pipe creation failed)\n");
-            return 1;
-        }
-        close(p[1]); /* close write end */
-
-        char buf[16];
-        ssize_t n = read(p[0], buf, sizeof(buf));
-        close(p[0]);
-
-        if (n == 0) {
-            printf("eof_read: ok\n");
-        } else {
-            printf("eof_read: FAIL (read returned %zd, expected 0)\n", n);
-        }
-        printf("eof_read_result=%zd\n", n);
-    }
-
-    /* Test 4: close both ends — no crash or leak */
-    {
-        int p[2];
-        if (pipe(p) != 0) {
-            printf("close_both: FAIL (pipe creation failed)\n");
-            return 1;
-        }
-        close(p[0]);
-        close(p[1]);
-        printf("close_both: ok\n");
-    }
-
-    return 0;
-}
diff --git a/registry/native/c/programs/pipe_test.c b/registry/native/c/programs/pipe_test.c
deleted file mode 100644
index 1fc8fd883..000000000
--- a/registry/native/c/programs/pipe_test.c
+++ /dev/null
@@ -1,32 +0,0 @@
-/* pipe_test.c — create pipe, write then read through it */
-#include <stdio.h>
-#include <unistd.h>
-#include <string.h>
-
-int main(void) {
-    int fds[2];
-    if (pipe(fds) != 0) {
-        perror("pipe");
-        return 1;
-    }
-
-    const char *msg = "hello through pipe";
-    ssize_t written = write(fds[1], msg, strlen(msg));
-    close(fds[1]);
-
-    char buf[256];
-    ssize_t n = read(fds[0], buf, sizeof(buf));
-    close(fds[0]);
-
-    if (n > 0) {
-        buf[n] = '\0';
-        printf("read: %s\n", buf);
-        printf("bytes: %zd\n", n);
-    } else {
-        printf("read failed\n");
-        return 1;
-    }
-
-    printf("written: %zd\n", written);
-    return 0;
-}
diff --git a/registry/native/c/programs/pipeline.c b/registry/native/c/programs/pipeline.c
deleted file mode 100644
index c656a88dc..000000000
--- a/registry/native/c/programs/pipeline.c
+++ /dev/null
@@ -1,82 +0,0 @@
-/* pipeline.c -- pipe + spawn: 'echo hello | cat' via posix_spawn + fd_pipe */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-
-#include "posix_spawn_compat.h"
-
-extern char **environ;
-
-int main(void) {
-    /* p: echo stdout -> cat stdin */
-    int p[2];
-    if (pipe(p) != 0) { perror("pipe1"); return 1; }
-
-    /* rp: cat stdout -> parent */
-    int rp[2];
-    if (pipe(rp) != 0) { perror("pipe2"); return 1; }
-
-    /* Spawn echo with stdout -> p[1] */
-    posix_spawn_file_actions_t fa1;
-    posix_spawn_file_actions_init(&fa1);
-    posix_spawn_file_actions_adddup2(&fa1, p[1], STDOUT_FILENO);
-    posix_spawn_file_actions_addclose(&fa1, p[0]);
-    posix_spawn_file_actions_addclose(&fa1, p[1]);
-    posix_spawn_file_actions_addclose(&fa1, rp[0]);
-    posix_spawn_file_actions_addclose(&fa1, rp[1]);
-
-    char *echo_argv[] = {"echo", "hello", NULL};
-    pid_t echo_pid;
-    int err = posix_spawnp(&echo_pid, "echo", &fa1, NULL, echo_argv, environ);
-    posix_spawn_file_actions_destroy(&fa1);
-    if (err != 0) {
-        fprintf(stderr, "spawn echo failed: %d\n", err);
-        return 1;
-    }
-
-    /* Spawn cat with stdin <- p[0], stdout -> rp[1] */
-    posix_spawn_file_actions_t fa2;
-    posix_spawn_file_actions_init(&fa2);
-    posix_spawn_file_actions_adddup2(&fa2, p[0], STDIN_FILENO);
-    posix_spawn_file_actions_adddup2(&fa2, rp[1], STDOUT_FILENO);
-    posix_spawn_file_actions_addclose(&fa2, p[0]);
-    posix_spawn_file_actions_addclose(&fa2, p[1]);
-    posix_spawn_file_actions_addclose(&fa2, rp[0]);
-    posix_spawn_file_actions_addclose(&fa2, rp[1]);
-
-    char *cat_argv[] = {"cat", NULL};
-    pid_t cat_pid;
-    err = posix_spawnp(&cat_pid, "cat", &fa2, NULL, cat_argv, environ);
-    posix_spawn_file_actions_destroy(&fa2);
-    if (err != 0) {
-        fprintf(stderr, "spawn cat failed: %d\n", err);
-        return 1;
-    }
-
-    /* Close pipe ends in parent */
-    close(p[0]);
-    close(p[1]);
-    close(rp[1]);
-
-    /* Read cat's output */
-    char buf[256];
-    ssize_t n = read(rp[0], buf, sizeof(buf) - 1);
-    close(rp[0]);
-
-    /* Wait for both children */
-    int st1, st2;
-    waitpid(echo_pid, &st1, 0);
-    waitpid(cat_pid, &st2, 0);
-
-    if (n > 0) {
-        buf[n] = '\0';
-        printf("pipeline_output: %s", buf);
-    } else {
-        printf("pipeline_output: (empty)\n");
-    }
-    printf("echo_exit: %d\n", WIFEXITED(st1) ? WEXITSTATUS(st1) : -1);
-    printf("cat_exit: %d\n", WIFEXITED(st2) ? WEXITSTATUS(st2) : -1);
-
-    return 0;
-}
diff --git a/registry/native/c/programs/pread_pwrite_access.c b/registry/native/c/programs/pread_pwrite_access.c
deleted file mode 100644
index a51903a84..000000000
--- a/registry/native/c/programs/pread_pwrite_access.c
+++ /dev/null
@@ -1,128 +0,0 @@
-/* pread_pwrite_access.c — test pread, pwrite, and access syscalls */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-#include <fcntl.h>
-#include <errno.h>
-#include <sys/stat.h>
-
-static int failures = 0;
-
-#define OK(name) printf(name ": ok\n")
-#define FAIL(name, reason) do { \
-    printf(name ": FAIL (%s)\n", reason); failures++; \
-} while(0)
-#define TEST(name, cond, reason) do { \
-    if (cond) OK(name); else FAIL(name, reason); \
-} while(0)
-
-int main(void) {
-    const char *dir = "/tmp/ppa";
-    const char *path = "/tmp/ppa/test.dat";
-    const char *noent = "/tmp/ppa/nonexistent";
-
-    mkdir(dir, 0755);
-
-    /* Write initial content: "0123456789abcdef" (16 bytes) */
-    int fd = open(path, O_WRONLY | O_CREAT | O_TRUNC, 0644);
-    TEST("create", fd >= 0, strerror(errno));
-    if (fd < 0) {
-        printf("total: 1 failures\n");
-        return 1;
-    }
-    const char *init = "0123456789abcdef";
-    write(fd, init, 16);
-    close(fd);
-
-    /* --- pread tests --- */
-    fd = open(path, O_RDONLY);
-    TEST("open_rdonly", fd >= 0, strerror(errno));
-    if (fd < 0) {
-        FAIL("pread_offset5", "skipped");
-        FAIL("pread_cursor", "skipped");
-        goto after_pread;
-    }
-
-    /* Seek to offset 3 first, so we can verify cursor is unchanged after pread */
-    lseek(fd, 3, SEEK_SET);
-
-    /* pread at offset 5 should read "56789" */
-    {
-        char buf[16] = {0};
-        ssize_t n = pread(fd, buf, 5, 5);
-        TEST("pread_offset5", n == 5 && memcmp(buf, "56789", 5) == 0,
-             n < 0 ? strerror(errno) : "content mismatch");
-    }
-
-    /* Cursor should still be at 3 after pread */
-    {
-        off_t pos = lseek(fd, 0, SEEK_CUR);
-        char msg[64];
-        snprintf(msg, sizeof(msg), "cursor moved to %ld (expected 3)", (long)pos);
-        TEST("pread_cursor", pos == 3, msg);
-    }
-    close(fd);
-
-after_pread:
-
-    /* --- pwrite tests --- */
-    fd = open(path, O_RDWR);
-    TEST("open_rdwr", fd >= 0, strerror(errno));
-    if (fd < 0) {
-        FAIL("pwrite_offset10", "skipped");
-        FAIL("pwrite_cursor", "skipped");
-        FAIL("pwrite_verify", "skipped");
-        goto after_pwrite;
-    }
-
-    /* Seek to offset 2 so we can verify cursor is unchanged */
-    lseek(fd, 2, SEEK_SET);
-
-    /* pwrite "HELLO" at offset 10 */
-    {
-        ssize_t n = pwrite(fd, "HELLO", 5, 10);
-        TEST("pwrite_offset10", n == 5,
-             n < 0 ? strerror(errno) : "wrong byte count");
-    }
-
-    /* Cursor should still be at 2 */
-    {
-        off_t pos = lseek(fd, 0, SEEK_CUR);
-        char msg[64];
-        snprintf(msg, sizeof(msg), "cursor moved to %ld (expected 2)", (long)pos);
-        TEST("pwrite_cursor", pos == 2, msg);
-    }
-
-    /* Read full file from offset 0 — should be "0123456789HELLOf" */
-    {
-        char buf[32] = {0};
-        lseek(fd, 0, SEEK_SET);
-        ssize_t n = read(fd, buf, sizeof(buf));
-        TEST("pwrite_verify", n == 16 && memcmp(buf, "0123456789HELLOf", 16) == 0,
-             "content mismatch");
-    }
-    close(fd);
-
-after_pwrite:
-
-    /* --- access tests --- */
-    TEST("access_exists", access(path, F_OK) == 0, strerror(errno));
-
-    {
-        int r = access(noent, F_OK);
-        int e = errno;
-        TEST("access_noent", r == -1 && e == ENOENT,
-             r == 0 ? "should fail" : strerror(e));
-    }
-
-    TEST("access_read", access(path, R_OK) == 0, strerror(errno));
-    TEST("access_write", access(path, W_OK) == 0, strerror(errno));
-
-    /* Cleanup */
-    unlink(path);
-    rmdir(dir);
-
-    printf("total: %d failures\n", failures);
-    return failures > 0 ? 1 : 0;
-}
diff --git a/registry/native/c/programs/pty_probe.c b/registry/native/c/programs/pty_probe.c
deleted file mode 100644
index 62aa6b82d..000000000
--- a/registry/native/c/programs/pty_probe.c
+++ /dev/null
@@ -1,230 +0,0 @@
-// pty_probe.c — deterministic PTY/stdio probe for AgentOS shell tests.
-//
-// The program intentionally speaks a tiny line-oriented protocol over stdio so
-// integration tests can snapshot terminal state after each PTY operation:
-// TTY detection, raw-mode toggling, cursor-position request/response, raw byte
-// delivery, cooked Enter behavior, resize notification, and EOF.
-
-#include <errno.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/ioctl.h>
-#include <unistd.h>
-
-#if defined(__wasm__)
-__attribute__((import_module("host_tty"), import_name("isatty"))) extern unsigned int
-host_tty_isatty(unsigned int fd);
-__attribute__((import_module("host_tty"), import_name("get_size"))) extern unsigned int
-host_tty_get_size(unsigned int fd, unsigned short *cols, unsigned short *rows);
-__attribute__((import_module("host_tty"), import_name("set_raw_mode"))) extern unsigned int
-host_tty_set_raw_mode(unsigned int enabled);
-#else
-#include <termios.h>
-static struct termios saved_termios;
-static int saved_termios_valid = 0;
-
-static unsigned int host_tty_isatty(unsigned int fd) {
-    return isatty((int)fd) ? 1u : 0u;
-}
-
-static unsigned int host_tty_get_size(unsigned int fd, unsigned short *cols, unsigned short *rows) {
-    struct winsize ws;
-    memset(&ws, 0, sizeof(ws));
-    if (ioctl((int)fd, TIOCGWINSZ, &ws) != 0) {
-        return (unsigned int)errno;
-    }
-    *cols = ws.ws_col;
-    *rows = ws.ws_row;
-    return 0;
-}
-
-static unsigned int host_tty_set_raw_mode(unsigned int enabled) {
-    if (enabled) {
-        struct termios raw;
-        if (tcgetattr(STDIN_FILENO, &saved_termios) != 0) {
-            return (unsigned int)errno;
-        }
-        saved_termios_valid = 1;
-        raw = saved_termios;
-        cfmakeraw(&raw);
-        if (tcsetattr(STDIN_FILENO, TCSANOW, &raw) != 0) {
-            return (unsigned int)errno;
-        }
-        return 0;
-    }
-
-    if (saved_termios_valid && tcsetattr(STDIN_FILENO, TCSANOW, &saved_termios) != 0) {
-        return (unsigned int)errno;
-    }
-    return 0;
-}
-#endif
-
-static void print_hex(const unsigned char *bytes, int len) {
-    for (int i = 0; i < len; i++) {
-        if (i > 0) {
-            fputc(' ', stdout);
-        }
-        printf("%02X", bytes[i]);
-    }
-}
-
-static void print_text(const unsigned char *bytes, int len) {
-    for (int i = 0; i < len; i++) {
-        unsigned char c = bytes[i];
-        if (c == '\r') {
-            fputs("\\r", stdout);
-        } else if (c == '\n') {
-            fputs("\\n", stdout);
-        } else if (c == '\t') {
-            fputs("\\t", stdout);
-        } else if (c == 0x1b) {
-            fputs("\\e", stdout);
-        } else if (c < 0x20 || c == 0x7f) {
-            printf("\\x%02X", c);
-        } else {
-            fputc((int)c, stdout);
-        }
-    }
-}
-
-static int read_until(unsigned char *buf, int cap, unsigned char terminator) {
-    int len = 0;
-    while (len < cap) {
-        unsigned char c = 0;
-        ssize_t n = read(STDIN_FILENO, &c, 1);
-        if (n == 0) {
-            return len == 0 ? 0 : len;
-        }
-        if (n < 0) {
-            if (errno == EINTR) {
-                continue;
-            }
-            printf("READ_ERROR errno=%d\r\n", errno);
-            fflush(stdout);
-            return -1;
-        }
-        buf[len++] = c;
-        if (c == terminator) {
-            return len;
-        }
-    }
-    return len;
-}
-
-static void print_size(const char *label) {
-    const char *cols_env = getenv("COLUMNS");
-    const char *rows_env = getenv("LINES");
-    unsigned short host_cols = 0;
-    unsigned short host_rows = 0;
-    unsigned int host_rc = host_tty_get_size(STDOUT_FILENO, &host_cols, &host_rows);
-    struct winsize ws;
-    memset(&ws, 0, sizeof(ws));
-    errno = 0;
-    int rc = ioctl(STDOUT_FILENO, TIOCGWINSZ, &ws);
-    printf(
-        "%s env_cols=%s env_rows=%s host_rc=%u host_cols=%u host_rows=%u ioctl_rc=%d ioctl_errno=%d ioctl_cols=%u ioctl_rows=%u\r\n",
-        label,
-        cols_env ? cols_env : "<unset>",
-        rows_env ? rows_env : "<unset>",
-        host_rc,
-        (unsigned int)host_cols,
-        (unsigned int)host_rows,
-        rc,
-        errno,
-        (unsigned int)ws.ws_col,
-        (unsigned int)ws.ws_row);
-    fflush(stdout);
-}
-
-int main(void) {
-    setvbuf(stdout, NULL, _IONBF, 0);
-    setvbuf(stderr, NULL, _IONBF, 0);
-
-    printf("PTY_PROBE start\r\n");
-    printf(
-        "TTY_HOST stdin=%u stdout=%u stderr=%u\r\n",
-        host_tty_isatty(STDIN_FILENO),
-        host_tty_isatty(STDOUT_FILENO),
-        host_tty_isatty(STDERR_FILENO));
-    printf(
-        "TTY_LIBC stdin=%d stdout=%d stderr=%d\r\n",
-        isatty(STDIN_FILENO),
-        isatty(STDOUT_FILENO),
-        isatty(STDERR_FILENO));
-    print_size("SIZE_START");
-
-    unsigned int raw_rc = host_tty_set_raw_mode(1);
-    printf("RAW_ON rc=%u\r\n", raw_rc);
-
-    printf("CPR_REQUEST ");
-    fflush(stdout);
-    write(STDOUT_FILENO, "\x1b[6n", 4);
-
-    unsigned char buf[128];
-    int cpr_len = read_until(buf, (int)sizeof(buf), 'R');
-    printf("\r\nCPR_REPLY bytes=%d hex=", cpr_len);
-    if (cpr_len > 0) {
-        print_hex(buf, cpr_len);
-    }
-    printf(" text=");
-    if (cpr_len > 0) {
-        print_text(buf, cpr_len);
-    }
-    printf("\r\n");
-
-    printf("RAW_INPUT> ");
-    fflush(stdout);
-    int raw_len = read_until(buf, (int)sizeof(buf), '!');
-    printf("\r\nRAW_BYTES bytes=%d hex=", raw_len);
-    if (raw_len > 0) {
-        print_hex(buf, raw_len);
-    }
-    printf(" text=");
-    if (raw_len > 0) {
-        print_text(buf, raw_len);
-    }
-    printf("\r\n");
-
-    unsigned int cooked_rc = host_tty_set_raw_mode(0);
-    printf("RAW_OFF rc=%u\r\n", cooked_rc);
-
-    printf("COOKED_INPUT> ");
-    fflush(stdout);
-    int cooked_len = read_until(buf, (int)sizeof(buf), '\n');
-    printf("COOKED_BYTES bytes=%d hex=", cooked_len);
-    if (cooked_len > 0) {
-        print_hex(buf, cooked_len);
-    }
-    printf(" text=");
-    if (cooked_len > 0) {
-        print_text(buf, cooked_len);
-    }
-    printf("\r\n");
-
-    printf("RESIZE_READY> ");
-    fflush(stdout);
-    int resize_len = read_until(buf, (int)sizeof(buf), '\n');
-    printf("RESIZE_TRIGGER bytes=%d hex=", resize_len);
-    if (resize_len > 0) {
-        print_hex(buf, resize_len);
-    }
-    printf(" text=");
-    if (resize_len > 0) {
-        print_text(buf, resize_len);
-    }
-    printf("\r\n");
-    print_size("SIZE_AFTER_RESIZE");
-
-    printf("EOF_READY> ");
-    fflush(stdout);
-    unsigned char eof_byte = 0;
-    ssize_t eof_read = read(STDIN_FILENO, &eof_byte, 1);
-    printf("EOF_READ n=%zd", eof_read);
-    if (eof_read > 0) {
-        printf(" byte=%02X", eof_byte);
-    }
-    printf("\r\nPTY_PROBE done\r\n");
-    return 0;
-}
diff --git a/registry/native/c/programs/sha256.c b/registry/native/c/programs/sha256.c
deleted file mode 100644
index 23aa9e9ed..000000000
--- a/registry/native/c/programs/sha256.c
+++ /dev/null
@@ -1,96 +0,0 @@
-/* sha256.c — compute SHA-256 of stdin, print hex digest */
-#include <stdio.h>
-#include <stdint.h>
-#include <string.h>
-
-static const uint32_t K[64] = {
-    0x428a2f98,0x71374491,0xb5c0fbcf,0xe9b5dba5,0x3956c25b,0x59f111f1,0x923f82a4,0xab1c5ed5,
-    0xd807aa98,0x12835b01,0x243185be,0x550c7dc3,0x72be5d74,0x80deb1fe,0x9bdc06a7,0xc19bf174,
-    0xe49b69c1,0xefbe4786,0x0fc19dc6,0x240ca1cc,0x2de92c6f,0x4a7484aa,0x5cb0a9dc,0x76f988da,
-    0x983e5152,0xa831c66d,0xb00327c8,0xbf597fc7,0xc6e00bf3,0xd5a79147,0x06ca6351,0x14292967,
-    0x27b70a85,0x2e1b2138,0x4d2c6dfc,0x53380d13,0x650a7354,0x766a0abb,0x81c2c92e,0x92722c85,
-    0xa2bfe8a1,0xa81a664b,0xc24b8b70,0xc76c51a3,0xd192e819,0xd6990624,0xf40e3585,0x106aa070,
-    0x19a4c116,0x1e376c08,0x2748774c,0x34b0bcb5,0x391c0cb3,0x4ed8aa4a,0x5b9cca4f,0x682e6ff3,
-    0x748f82ee,0x78a5636f,0x84c87814,0x8cc70208,0x90befffa,0xa4506ceb,0xbef9a3f7,0xc67178f2
-};
-
-#define ROTR(x,n) (((x)>>(n))|((x)<<(32-(n))))
-#define CH(x,y,z)  (((x)&(y))^((~(x))&(z)))
-#define MAJ(x,y,z) (((x)&(y))^((x)&(z))^((y)&(z)))
-#define EP0(x) (ROTR(x,2)^ROTR(x,13)^ROTR(x,22))
-#define EP1(x) (ROTR(x,6)^ROTR(x,11)^ROTR(x,25))
-#define SIG0(x) (ROTR(x,7)^ROTR(x,18)^((x)>>3))
-#define SIG1(x) (ROTR(x,17)^ROTR(x,19)^((x)>>10))
-
-typedef struct {
-    uint32_t state[8];
-    uint8_t buf[64];
-    uint64_t total;
-    size_t buflen;
-} SHA256;
-
-static void sha256_transform(SHA256 *ctx) {
-    uint32_t w[64], a, b, c, d, e, f, g, h, t1, t2;
-    for (int i = 0; i < 16; i++)
-        w[i] = (uint32_t)ctx->buf[i*4]<<24 | (uint32_t)ctx->buf[i*4+1]<<16 |
-               (uint32_t)ctx->buf[i*4+2]<<8 | ctx->buf[i*4+3];
-    for (int i = 16; i < 64; i++)
-        w[i] = SIG1(w[i-2]) + w[i-7] + SIG0(w[i-15]) + w[i-16];
-    a=ctx->state[0]; b=ctx->state[1]; c=ctx->state[2]; d=ctx->state[3];
-    e=ctx->state[4]; f=ctx->state[5]; g=ctx->state[6]; h=ctx->state[7];
-    for (int i = 0; i < 64; i++) {
-        t1 = h + EP1(e) + CH(e,f,g) + K[i] + w[i];
-        t2 = EP0(a) + MAJ(a,b,c);
-        h=g; g=f; f=e; e=d+t1; d=c; c=b; b=a; a=t1+t2;
-    }
-    ctx->state[0]+=a; ctx->state[1]+=b; ctx->state[2]+=c; ctx->state[3]+=d;
-    ctx->state[4]+=e; ctx->state[5]+=f; ctx->state[6]+=g; ctx->state[7]+=h;
-}
-
-static void sha256_init(SHA256 *ctx) {
-    ctx->state[0]=0x6a09e667; ctx->state[1]=0xbb67ae85;
-    ctx->state[2]=0x3c6ef372; ctx->state[3]=0xa54ff53a;
-    ctx->state[4]=0x510e527f; ctx->state[5]=0x9b05688c;
-    ctx->state[6]=0x1f83d9ab; ctx->state[7]=0x5be0cd19;
-    ctx->total = 0; ctx->buflen = 0;
-}
-
-static void sha256_update(SHA256 *ctx, const uint8_t *data, size_t len) {
-    for (size_t i = 0; i < len; i++) {
-        ctx->buf[ctx->buflen++] = data[i];
-        ctx->total++;
-        if (ctx->buflen == 64) { sha256_transform(ctx); ctx->buflen = 0; }
-    }
-}
-
-static void sha256_final(SHA256 *ctx, uint8_t hash[32]) {
-    ctx->buf[ctx->buflen++] = 0x80;
-    if (ctx->buflen > 56) {
-        while (ctx->buflen < 64) ctx->buf[ctx->buflen++] = 0;
-        sha256_transform(ctx); ctx->buflen = 0;
-    }
-    while (ctx->buflen < 56) ctx->buf[ctx->buflen++] = 0;
-    uint64_t bits = ctx->total * 8;
-    for (int i = 7; i >= 0; i--) ctx->buf[56 + (7-i)] = (uint8_t)(bits >> (i*8));
-    sha256_transform(ctx);
-    for (int i = 0; i < 8; i++) {
-        hash[i*4]   = (uint8_t)(ctx->state[i]>>24);
-        hash[i*4+1] = (uint8_t)(ctx->state[i]>>16);
-        hash[i*4+2] = (uint8_t)(ctx->state[i]>>8);
-        hash[i*4+3] = (uint8_t)(ctx->state[i]);
-    }
-}
-
-int main(void) {
-    SHA256 ctx;
-    sha256_init(&ctx);
-    uint8_t buf[4096];
-    size_t n;
-    while ((n = fread(buf, 1, sizeof(buf), stdin)) > 0)
-        sha256_update(&ctx, buf, n);
-    uint8_t hash[32];
-    sha256_final(&ctx, hash);
-    for (int i = 0; i < 32; i++) printf("%02x", hash[i]);
-    printf("  -\n");
-    return 0;
-}
diff --git a/registry/native/c/programs/sigaction_behavior.c b/registry/native/c/programs/sigaction_behavior.c
deleted file mode 100644
index 967c09ae1..000000000
--- a/registry/native/c/programs/sigaction_behavior.c
+++ /dev/null
@@ -1,199 +0,0 @@
-/* sigaction_behavior.c -- verify sigaction query, SA_RESETHAND, and SA_RESTART */
-#include <arpa/inet.h>
-#include <errno.h>
-#include <netinet/in.h>
-#include <signal.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/socket.h>
-#include <unistd.h>
-
-#include "posix_spawn_compat.h"
-
-extern char **environ;
-
-static volatile sig_atomic_t reset_handler_calls = 0;
-static volatile sig_atomic_t restart_handler_calls = 0;
-
-static void reset_handler(int sig) {
-    (void)sig;
-    reset_handler_calls++;
-}
-
-static void restart_handler(int sig) {
-    (void)sig;
-    restart_handler_calls++;
-}
-
-static int install_action(int sig, void (*handler)(int), int flags, int masked_sig) {
-    struct sigaction action;
-    memset(&action, 0, sizeof(action));
-    sigemptyset(&action.sa_mask);
-    if (masked_sig > 0) {
-        sigaddset(&action.sa_mask, masked_sig);
-    }
-    action.sa_flags = flags;
-    action.sa_handler = handler;
-    action.sa_restorer = NULL;
-    return sigaction(sig, &action, NULL);
-}
-
-int main(void) {
-    struct sigaction current;
-
-    /* Query round-trip: handler, mask, and flags survive the libc-facing API. */
-    if (install_action(SIGINT, restart_handler, SA_RESTART | SA_RESETHAND, SIGTERM) != 0) {
-        perror("sigaction query install");
-        return 1;
-    }
-    memset(&current, 0, sizeof(current));
-    if (sigaction(SIGINT, NULL, &current) != 0) {
-        perror("sigaction query read");
-        return 1;
-    }
-    printf("sigaction_query_mask_sigterm=%s\n", sigismember(&current.sa_mask, SIGTERM) == 1 ? "yes" : "no");
-    printf("sigaction_query_flags=%s\n",
-        (current.sa_flags & (SA_RESTART | SA_RESETHAND)) == (SA_RESTART | SA_RESETHAND) ? "yes" : "no");
-
-    /* SA_RESETHAND: first delivery runs the handler and resets to SIG_DFL. */
-    if (install_action(SIGUSR1, reset_handler, SA_RESETHAND, 0) != 0) {
-        perror("sigaction SA_RESETHAND install");
-        return 1;
-    }
-    if (kill(getpid(), SIGUSR1) != 0) {
-        perror("kill SIGUSR1");
-        return 1;
-    }
-    memset(&current, 0, sizeof(current));
-    if (sigaction(SIGUSR1, NULL, &current) != 0) {
-        perror("sigaction SA_RESETHAND read");
-        return 1;
-    }
-    printf("sa_resethand_handler_calls=%d\n", (int)reset_handler_calls);
-    printf("sa_resethand_reset=%s\n", current.sa_handler == SIG_DFL ? "yes" : "no");
-
-    /* SA_RESTART: accept() should resume after SIGALRM and still take the child connection. */
-    int listener_fd = socket(AF_INET, SOCK_STREAM, 0);
-    if (listener_fd < 0) {
-        perror("socket");
-        return 1;
-    }
-
-    struct sockaddr_in addr;
-    memset(&addr, 0, sizeof(addr));
-    addr.sin_family = AF_INET;
-    int port = 30000 + (getpid() % 10000);
-    addr.sin_port = htons((uint16_t)port);
-    addr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
-
-    if (bind(listener_fd, (struct sockaddr *)&addr, sizeof(addr)) != 0) {
-        perror("bind");
-        close(listener_fd);
-        return 1;
-    }
-    if (listen(listener_fd, 1) != 0) {
-        perror("listen");
-        close(listener_fd);
-        return 1;
-    }
-
-    char delay_arg[16];
-    char port_arg[16];
-    snprintf(delay_arg, sizeof(delay_arg), "%d", 1500);
-    snprintf(port_arg, sizeof(port_arg), "%d", port);
-
-    char *echo_argv[] = {"delayed_tcp_echo", delay_arg, port_arg, NULL};
-    pid_t child;
-    int spawn_err = posix_spawnp(&child, "delayed_tcp_echo", NULL, NULL, echo_argv, environ);
-    if (spawn_err != 0) {
-        fprintf(stderr, "posix_spawn delayed_tcp_echo failed: %d\n", spawn_err);
-        close(listener_fd);
-        return 1;
-    }
-
-    if (install_action(SIGALRM, restart_handler, SA_RESTART, 0) != 0) {
-        perror("sigaction SA_RESTART install");
-        close(listener_fd);
-        return 1;
-    }
-
-    char signal_delay_arg[16];
-    char self_pid_arg[16];
-    char signal_arg[16];
-    snprintf(signal_delay_arg, sizeof(signal_delay_arg), "%d", 1000);
-    snprintf(self_pid_arg, sizeof(self_pid_arg), "%d", (int)getpid());
-    snprintf(signal_arg, sizeof(signal_arg), "%d", SIGALRM);
-
-    char *signal_argv[] = {"delayed_kill", signal_delay_arg, self_pid_arg, signal_arg, NULL};
-    pid_t signaler;
-    spawn_err = posix_spawnp(&signaler, "delayed_kill", NULL, NULL, signal_argv, environ);
-    if (spawn_err != 0) {
-        fprintf(stderr, "posix_spawn delayed_kill failed: %d\n", spawn_err);
-        close(listener_fd);
-        return 1;
-    }
-
-    int client_fd = accept(listener_fd, NULL, NULL);
-    if (client_fd < 0) {
-        perror("accept");
-        close(listener_fd);
-        return 1;
-    }
-
-    char buf[16] = {0};
-    ssize_t n = recv(client_fd, buf, sizeof(buf) - 1, 0);
-    if (n < 0) {
-        perror("recv");
-        close(client_fd);
-        close(listener_fd);
-        return 1;
-    }
-    buf[n] = '\0';
-
-    if (send(client_fd, "pong", 4, 0) != 4) {
-        perror("send");
-        close(client_fd);
-        close(listener_fd);
-        return 1;
-    }
-
-    int status = 0;
-    if (waitpid(child, &status, 0) < 0) {
-        perror("waitpid");
-        close(client_fd);
-        close(listener_fd);
-        return 1;
-    }
-    int signal_status = 0;
-    if (waitpid(signaler, &signal_status, 0) < 0) {
-        perror("waitpid signaler");
-        close(client_fd);
-        close(listener_fd);
-        return 1;
-    }
-
-    close(client_fd);
-    close(listener_fd);
-
-    printf("sa_restart_handler_calls=%d\n", (int)restart_handler_calls);
-    printf("sa_restart_accept=%s\n", strcmp(buf, "hello") == 0 ? "yes" : "no");
-    printf("sa_restart_child_exit=%d\n",
-        WIFEXITED(status) ? WEXITSTATUS(status) : 128 + WTERMSIG(status));
-    printf("sa_restart_signal_exit=%d\n",
-        WIFEXITED(signal_status) ? WEXITSTATUS(signal_status) : 128 + WTERMSIG(signal_status));
-
-    if (strcmp(buf, "hello") != 0) {
-        return 1;
-    }
-    if (reset_handler_calls != 1 || current.sa_handler != SIG_DFL) {
-        return 1;
-    }
-    if (restart_handler_calls < 1) {
-        return 1;
-    }
-    if (!WIFEXITED(signal_status) || WEXITSTATUS(signal_status) != 0) {
-        return 1;
-    }
-    return WIFEXITED(status) && WEXITSTATUS(status) == 0 ? 0 : 1;
-}
diff --git a/registry/native/c/programs/sigaction_self.c b/registry/native/c/programs/sigaction_self.c
deleted file mode 100644
index 4b9fe75c7..000000000
--- a/registry/native/c/programs/sigaction_self.c
+++ /dev/null
@@ -1,39 +0,0 @@
-#include <signal.h>
-#include <stdio.h>
-#include <string.h>
-#include <unistd.h>
-
-static volatile sig_atomic_t handler_calls = 0;
-
-static void handler(int sig) {
-    (void)sig;
-    handler_calls++;
-}
-
-int main(void) {
-    struct sigaction action;
-    struct sigaction current;
-    memset(&action, 0, sizeof(action));
-    sigemptyset(&action.sa_mask);
-    action.sa_flags = SA_RESETHAND;
-    action.sa_handler = handler;
-
-    if (sigaction(SIGUSR1, &action, NULL) != 0) {
-        perror("sigaction install");
-        return 1;
-    }
-    if (kill(getpid(), SIGUSR1) != 0) {
-        perror("kill self");
-        return 1;
-    }
-    memset(&current, 0, sizeof(current));
-    if (sigaction(SIGUSR1, NULL, &current) != 0) {
-        perror("sigaction query");
-        return 1;
-    }
-
-    printf("self_signal_handler_calls=%d\n", (int)handler_calls);
-    printf("self_signal_reset=%s\n", current.sa_handler == SIG_DFL ? "yes" : "no");
-
-    return handler_calls == 1 && current.sa_handler == SIG_DFL ? 0 : 1;
-}
diff --git a/registry/native/c/programs/signal_handler.c b/registry/native/c/programs/signal_handler.c
deleted file mode 100644
index 1881ac4c0..000000000
--- a/registry/native/c/programs/signal_handler.c
+++ /dev/null
@@ -1,56 +0,0 @@
-/* signal_handler.c — cooperative sigaction handling test for WasmVM.
- *
- * Registers a SIGINT handler via sigaction() with sa_mask + SA_RESTART +
- * SA_RESETHAND, then busy-loops with sleep syscalls (each sleep is a syscall
- * boundary where pending signals are delivered). The test runner inspects the
- * kernel registration and verifies the handler fires.
- *
- * Usage: signal_handler
- * Output:
- *   handler_registered
- *   waiting
- *   caught_signal=2
- */
-#include <signal.h>
-#include <stdio.h>
-#include <unistd.h>
-
-static volatile int got_signal = 0;
-
-static void handler(int sig) {
-    got_signal = sig;
-}
-
-int main(void) {
-    struct sigaction action;
-    sigemptyset(&action.sa_mask);
-    sigaddset(&action.sa_mask, SIGTERM);
-    action.sa_flags = SA_RESTART | SA_RESETHAND;
-    action.sa_handler = handler;
-    action.sa_restorer = NULL;
-
-    if (sigaction(SIGINT, &action, NULL) != 0) {
-        perror("sigaction");
-        return 1;
-    }
-
-    printf("handler_registered\n");
-    fflush(stdout);
-
-    printf("waiting\n");
-    fflush(stdout);
-
-    /* Busy-loop with sleep — each usleep is a syscall boundary where
-     * the JS worker checks for pending signals and invokes the trampoline. */
-    for (int i = 0; i < 1000 && !got_signal; i++) {
-        usleep(10000);  /* 10ms */
-    }
-
-    if (got_signal) {
-        printf("caught_signal=%d\n", got_signal);
-    } else {
-        printf("timeout_no_signal\n");
-    }
-
-    return got_signal ? 0 : 1;
-}
diff --git a/registry/native/c/programs/signal_tests.c b/registry/native/c/programs/signal_tests.c
deleted file mode 100644
index ec1ddd46b..000000000
--- a/registry/native/c/programs/signal_tests.c
+++ /dev/null
@@ -1,92 +0,0 @@
-/* signal_tests.c -- signal delivery edge cases: SIGKILL, exited PID, invalid PID */
-#include <stdio.h>
-#include <stdlib.h>
-#include <unistd.h>
-#include <errno.h>
-#include <time.h>
-
-#include "posix_spawn_compat.h"
-
-extern char **environ;
-
-int main(void) {
-    /* Test 1: SIGKILL (9) — spawn sleep, kill with SIGKILL, verify WIFSIGNALED + WTERMSIG==9 */
-    {
-        char *argv[] = {"sleep", "999", NULL};
-        pid_t child;
-        int err = posix_spawnp(&child, "sleep", NULL, NULL, argv, environ);
-        if (err != 0) {
-            printf("test_sigkill: FAIL (spawn failed: %d)\n", err);
-            return 1;
-        }
-
-        struct timespec ts = {0, 50000000}; /* 50ms */
-        nanosleep(&ts, NULL);
-
-        int kr = kill(child, SIGKILL);
-        if (kr != 0) {
-            printf("test_sigkill: FAIL (kill returned %d, errno %d)\n", kr, errno);
-            return 1;
-        }
-
-        int status;
-        pid_t w = waitpid(child, &status, 0);
-        if (w < 0) {
-            printf("test_sigkill: FAIL (waitpid failed)\n");
-            return 1;
-        }
-
-        int signaled = WIFSIGNALED(status);
-        int termsig = WTERMSIG(status);
-        if (signaled && termsig == 9) {
-            printf("test_sigkill: ok\n");
-        } else {
-            printf("test_sigkill: FAIL (signaled=%d termsig=%d)\n", signaled, termsig);
-        }
-        printf("sigkill_signaled=%s\n", signaled ? "yes" : "no");
-        printf("sigkill_termsig=%d\n", termsig);
-    }
-
-    /* Test 2: kill() on exited process — should return -1/ESRCH or 0 */
-    {
-        char *argv[] = {"true", NULL};
-        pid_t child;
-        int err = posix_spawnp(&child, "true", NULL, NULL, argv, environ);
-        if (err != 0) {
-            printf("test_kill_exited: FAIL (spawn failed: %d)\n", err);
-            return 1;
-        }
-
-        int status;
-        waitpid(child, &status, 0);
-
-        /* After reaping, the PID slot is freed — kill should fail with ESRCH
-         * or return 0 if the kernel still has the entry (POSIX allows either
-         * for recently-exited processes). */
-        errno = 0;
-        int kr = kill(child, 0);
-        if (kr == 0) {
-            printf("test_kill_exited: ok\n");
-            printf("kill_exited_ret=0\n");
-        } else if (kr == -1 && errno == ESRCH) {
-            printf("test_kill_exited: ok\n");
-            printf("kill_exited_ret=-1_ESRCH\n");
-        } else {
-            printf("test_kill_exited: FAIL (ret=%d errno=%d)\n", kr, errno);
-        }
-    }
-
-    /* Test 3: kill() with invalid PID — should return -1 */
-    {
-        errno = 0;
-        int kr = kill(99999, 0);
-        if (kr == -1) {
-            printf("test_kill_invalid: ok\n");
-            printf("kill_invalid_errno=%d\n", errno);
-        } else {
-            printf("test_kill_invalid: FAIL (ret=%d, expected -1)\n", kr);
-        }
-    }
-
-    return 0;
-}
diff --git a/registry/native/c/programs/sleep_test.c b/registry/native/c/programs/sleep_test.c
deleted file mode 100644
index 5a17afc67..000000000
--- a/registry/native/c/programs/sleep_test.c
+++ /dev/null
@@ -1,29 +0,0 @@
-/* sleep_test.c — sleep N ms using nanosleep(), verify elapsed time */
-#include <stdio.h>
-#include <stdlib.h>
-#include <time.h>
-
-int main(int argc, char *argv[]) {
-    int ms = 100; /* default 100ms */
-    if (argc > 1) ms = atoi(argv[1]);
-
-    struct timespec req;
-    req.tv_sec = ms / 1000;
-    req.tv_nsec = (long)(ms % 1000) * 1000000L;
-
-    struct timespec before, after;
-    clock_gettime(CLOCK_MONOTONIC, &before);
-
-    nanosleep(&req, NULL);
-
-    clock_gettime(CLOCK_MONOTONIC, &after);
-
-    long elapsed_ms = (after.tv_sec - before.tv_sec) * 1000 +
-                      (after.tv_nsec - before.tv_nsec) / 1000000;
-
-    printf("requested=%dms\n", ms);
-    printf("elapsed=%ldms\n", elapsed_ms);
-    /* Allow 80% tolerance for timing jitter */
-    printf("ok=%s\n", (elapsed_ms >= ms * 80 / 100) ? "yes" : "no");
-    return 0;
-}
diff --git a/registry/native/c/programs/sort.c b/registry/native/c/programs/sort.c
deleted file mode 100644
index a56060e9d..000000000
--- a/registry/native/c/programs/sort.c
+++ /dev/null
@@ -1,31 +0,0 @@
-/* sort.c — sort lines from stdin alphabetically */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-
-static int cmp(const void *a, const void *b) {
-    return strcmp(*(const char **)a, *(const char **)b);
-}
-
-int main(void) {
-    char **lines = NULL;
-    size_t count = 0, cap = 0;
-    char buf[4096];
-
-    while (fgets(buf, sizeof(buf), stdin)) {
-        if (count >= cap) {
-            cap = cap ? cap * 2 : 64;
-            lines = realloc(lines, cap * sizeof(char *));
-        }
-        lines[count++] = strdup(buf);
-    }
-
-    qsort(lines, count, sizeof(char *), cmp);
-
-    for (size_t i = 0; i < count; i++) {
-        fputs(lines[i], stdout);
-        free(lines[i]);
-    }
-    free(lines);
-    return 0;
-}
diff --git a/registry/native/c/programs/spawn_child.c b/registry/native/c/programs/spawn_child.c
deleted file mode 100644
index b174aad1b..000000000
--- a/registry/native/c/programs/spawn_child.c
+++ /dev/null
@@ -1,53 +0,0 @@
-/* spawn_child.c -- posix_spawn 'echo hello', waitpid, print child stdout */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-
-#include "posix_spawn_compat.h"
-
-extern char **environ;
-
-int main(void) {
-    int pipefd[2];
-    if (pipe(pipefd) != 0) {
-        perror("pipe");
-        return 1;
-    }
-
-    /* Redirect child stdout to pipe write end */
-    posix_spawn_file_actions_t fa;
-    posix_spawn_file_actions_init(&fa);
-    posix_spawn_file_actions_adddup2(&fa, pipefd[1], STDOUT_FILENO);
-    posix_spawn_file_actions_addclose(&fa, pipefd[0]);
-    posix_spawn_file_actions_addclose(&fa, pipefd[1]);
-
-    char *argv[] = {"echo", "hello", NULL};
-    pid_t child;
-    int err = posix_spawnp(&child, "echo", &fa, NULL, argv, environ);
-    posix_spawn_file_actions_destroy(&fa);
-
-    if (err != 0) {
-        fprintf(stderr, "posix_spawn failed: %d\n", err);
-        return 1;
-    }
-
-    close(pipefd[1]);
-
-    char buf[256];
-    ssize_t n = read(pipefd[0], buf, sizeof(buf) - 1);
-    close(pipefd[0]);
-
-    int status;
-    waitpid(child, &status, 0);
-
-    if (n > 0) {
-        buf[n] = '\0';
-        printf("child_stdout: %s", buf);
-    } else {
-        printf("child_stdout: (empty)\n");
-    }
-    printf("child_exit: %d\n", WIFEXITED(status) ? WEXITSTATUS(status) : -1);
-
-    return 0;
-}
diff --git a/registry/native/c/programs/spawn_exit_code.c b/registry/native/c/programs/spawn_exit_code.c
deleted file mode 100644
index 3cab4b859..000000000
--- a/registry/native/c/programs/spawn_exit_code.c
+++ /dev/null
@@ -1,32 +0,0 @@
-/* spawn_exit_code.c -- spawn child that exits non-zero, verify exit code */
-#include <stdio.h>
-#include <stdlib.h>
-#include <unistd.h>
-
-#include "posix_spawn_compat.h"
-
-extern char **environ;
-
-int main(void) {
-    /* Spawn: sh -c 'exit 7' */
-    char *argv[] = {"sh", "-c", "exit 7", NULL};
-    pid_t child;
-    int err = posix_spawnp(&child, "sh", NULL, NULL, argv, environ);
-    if (err != 0) {
-        fprintf(stderr, "posix_spawn failed: %d\n", err);
-        return 1;
-    }
-
-    int status;
-    waitpid(child, &status, 0);
-
-    int exited = WIFEXITED(status);
-    int code = exited ? WEXITSTATUS(status) : -1;
-
-    printf("child_exited: %s\n", exited ? "yes" : "no");
-    printf("child_exit_code: %d\n", code);
-    printf("expected: 7\n");
-    printf("match: %s\n", (exited && code == 7) ? "yes" : "no");
-
-    return 0;
-}
diff --git a/registry/native/c/programs/sqlite3_cli.c b/registry/native/c/programs/sqlite3_cli.c
deleted file mode 100644
index ba878b956..000000000
--- a/registry/native/c/programs/sqlite3_cli.c
+++ /dev/null
@@ -1,558 +0,0 @@
-/* sqlite3_cli — SQLite CLI for WasmVM
- *
- * Full sqlite3 CLI supporting:
- *   sqlite3 :memory:              — interactive/piped in-memory DB
- *   sqlite3 /path/to/db.sqlite    — file-based DB via WASI VFS
- *   echo 'SELECT 1;' | sqlite3    — stdin pipe mode (defaults to :memory:)
- *   sqlite3 :memory: "SELECT 1;"  — SQL from command line argument
- *
- * Meta-commands: .dump, .schema, .tables, .quit, .help, .headers, .mode
- *
- * Compiled with -DSQLITE_OS_OTHER — uses a custom VFS wrapping WASI file I/O.
- */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <errno.h>
-#include <fcntl.h>
-#include <unistd.h>
-#include <sys/stat.h>
-#include "sqlite3.h"
-
-/* ── WASI VFS ────────────────────────────────────────────────────────── */
-
-/* Minimal VFS implementation using POSIX file I/O (supported by WASI) */
-
-typedef struct WasiFile {
-    sqlite3_file base;
-    int fd;
-} WasiFile;
-
-static int wasiClose(sqlite3_file *pFile) {
-    WasiFile *p = (WasiFile *)pFile;
-    if (p->fd >= 0) close(p->fd);
-    p->fd = -1;
-    return SQLITE_OK;
-}
-
-static int wasiRead(sqlite3_file *pFile, void *zBuf, int iAmt, sqlite3_int64 iOfst) {
-    WasiFile *p = (WasiFile *)pFile;
-    if (lseek(p->fd, (off_t)iOfst, SEEK_SET) != (off_t)iOfst)
-        return SQLITE_IOERR_READ;
-    ssize_t got = read(p->fd, zBuf, iAmt);
-    if (got == iAmt) return SQLITE_OK;
-    if (got >= 0) {
-        memset((char *)zBuf + got, 0, iAmt - got);
-        return SQLITE_IOERR_SHORT_READ;
-    }
-    return SQLITE_IOERR_READ;
-}
-
-static int wasiWrite(sqlite3_file *pFile, const void *zBuf, int iAmt, sqlite3_int64 iOfst) {
-    WasiFile *p = (WasiFile *)pFile;
-    if (lseek(p->fd, (off_t)iOfst, SEEK_SET) != (off_t)iOfst)
-        return SQLITE_IOERR_WRITE;
-    ssize_t wrote = write(p->fd, zBuf, iAmt);
-    if (wrote == iAmt) return SQLITE_OK;
-    return SQLITE_IOERR_WRITE;
-}
-
-static int wasiTruncate(sqlite3_file *pFile, sqlite3_int64 size) {
-    WasiFile *p = (WasiFile *)pFile;
-    if (ftruncate(p->fd, (off_t)size) != 0) return SQLITE_IOERR_TRUNCATE;
-    return SQLITE_OK;
-}
-
-static int wasiSync(sqlite3_file *pFile, int flags) {
-    (void)flags;
-    WasiFile *p = (WasiFile *)pFile;
-    if (fsync(p->fd) != 0) return SQLITE_IOERR_FSYNC;
-    return SQLITE_OK;
-}
-
-static int wasiFileSize(sqlite3_file *pFile, sqlite3_int64 *pSize) {
-    WasiFile *p = (WasiFile *)pFile;
-    struct stat st;
-    if (fstat(p->fd, &st) != 0) return SQLITE_IOERR_FSTAT;
-    *pSize = (sqlite3_int64)st.st_size;
-    return SQLITE_OK;
-}
-
-/* No locking in WASM — single process */
-static int wasiLock(sqlite3_file *f, int l) { (void)f; (void)l; return SQLITE_OK; }
-static int wasiUnlock(sqlite3_file *f, int l) { (void)f; (void)l; return SQLITE_OK; }
-static int wasiCheckReservedLock(sqlite3_file *f, int *pResOut) {
-    (void)f; *pResOut = 0; return SQLITE_OK;
-}
-static int wasiFileControl(sqlite3_file *f, int op, void *pArg) {
-    (void)f; (void)op; (void)pArg; return SQLITE_NOTFOUND;
-}
-static int wasiSectorSize(sqlite3_file *f) { (void)f; return 512; }
-static int wasiDeviceCharacteristics(sqlite3_file *f) { (void)f; return 0; }
-
-static const sqlite3_io_methods wasiIoMethods __attribute__((used)) = {
-    1,                          /* iVersion */
-    wasiClose,
-    wasiRead,
-    wasiWrite,
-    wasiTruncate,
-    wasiSync,
-    wasiFileSize,
-    wasiLock,
-    wasiUnlock,
-    wasiCheckReservedLock,
-    wasiFileControl,
-    wasiSectorSize,
-    wasiDeviceCharacteristics,
-    /* v2+ methods */
-    0, 0, 0, 0
-};
-
-static int wasiOpen(sqlite3_vfs *pVfs, sqlite3_filename zName, sqlite3_file *pFile,
-                    int flags, int *pOutFlags) {
-    (void)pVfs;
-    WasiFile *p = (WasiFile *)pFile;
-    p->fd = -1;
-
-    if (!zName) {
-        /* Temp file — use in-memory only */
-        return SQLITE_IOERR;
-    }
-
-    int oflags = 0;
-    if (flags & SQLITE_OPEN_CREATE) oflags |= O_CREAT;
-    if (flags & SQLITE_OPEN_READWRITE) oflags |= O_RDWR;
-    else oflags |= O_RDONLY;
-
-    p->fd = open(zName, oflags, 0644);
-    if (p->fd < 0) return SQLITE_CANTOPEN;
-
-    if (pOutFlags) *pOutFlags = flags;
-    p->base.pMethods = &wasiIoMethods;
-    return SQLITE_OK;
-}
-
-static int wasiDelete(sqlite3_vfs *pVfs, const char *zName, int syncDir) {
-    (void)pVfs; (void)syncDir;
-    if (unlink(zName) != 0 && errno != ENOENT) return SQLITE_IOERR_DELETE;
-    return SQLITE_OK;
-}
-
-static int wasiAccess(sqlite3_vfs *pVfs, const char *zName, int flags, int *pResOut) {
-    (void)pVfs;
-    struct stat st;
-    *pResOut = (stat(zName, &st) == 0) ? 1 : 0;
-    (void)flags;
-    return SQLITE_OK;
-}
-
-static int wasiFullPathname(sqlite3_vfs *pVfs, const char *zName, int nOut, char *zOut) {
-    (void)pVfs;
-    if (zName[0] == '/') {
-        snprintf(zOut, nOut, "%s", zName);
-    } else {
-        /* Relative path — prefix with / since VFS root is / */
-        snprintf(zOut, nOut, "/%s", zName);
-    }
-    return SQLITE_OK;
-}
-
-static int wasiRandomness(sqlite3_vfs *pVfs, int nByte, char *zOut) {
-    (void)pVfs;
-    int fd = open("/dev/urandom", O_RDONLY);
-    if (fd >= 0) {
-        int total = 0;
-        while (total < nByte) {
-            ssize_t read_len = read(fd, zOut + total, (size_t)(nByte - total));
-            if (read_len <= 0) {
-                break;
-            }
-            total += (int)read_len;
-        }
-        close(fd);
-        if (total == nByte) {
-            return nByte;
-        }
-        nByte = total;
-    }
-
-    /* Fallback only if urandom is unexpectedly unavailable in the runtime. */
-    for (int i = 0; i < nByte; i++) zOut[i] = (char)(i * 37 + 17);
-    return nByte;
-}
-
-static int wasiSleep(sqlite3_vfs *pVfs, int microseconds) {
-    (void)pVfs; (void)microseconds;
-    return 0;
-}
-
-static int wasiCurrentTime(sqlite3_vfs *pVfs, double *pTime) {
-    (void)pVfs;
-    /* Julian day for Unix epoch 0 */
-    *pTime = 2440587.5;
-    return SQLITE_OK;
-}
-
-static int wasiGetLastError(sqlite3_vfs *pVfs, int nBuf, char *zBuf) {
-    (void)pVfs;
-    if (nBuf > 0) zBuf[0] = 0;
-    return 0;
-}
-
-static sqlite3_vfs wasiVfs __attribute__((used)) = {
-    1,                    /* iVersion */
-    sizeof(WasiFile),     /* szOsFile */
-    512,                  /* mxPathname */
-    0,                    /* pNext */
-    "wasi",               /* zName */
-    0,                    /* pAppData */
-    wasiOpen,
-    wasiDelete,
-    wasiAccess,
-    wasiFullPathname,
-    0, 0, 0, 0,          /* xDlOpen, xDlError, xDlSym, xDlClose */
-    wasiRandomness,
-    wasiSleep,
-    wasiCurrentTime,
-    wasiGetLastError,
-    /* v2+ */
-    0, 0, 0, 0
-};
-
-#ifdef SQLITE_OS_OTHER
-int sqlite3_os_init(void) {
-    return sqlite3_vfs_register(&wasiVfs, 1);
-}
-
-int sqlite3_os_end(void) {
-    return SQLITE_OK;
-}
-#endif /* SQLITE_OS_OTHER */
-
-/* ── CLI ─────────────────────────────────────────────────────────────── */
-
-static int headers_enabled = 0;
-static int headers_printed = 0;
-static char output_sep_buf[8];
-static char *output_separator = output_sep_buf;
-
-/* Callback for sqlite3_exec — prints rows in column format */
-static int print_row(void *unused, int ncols, char **values, char **names) {
-    (void)unused;
-    if (headers_enabled && !headers_printed) {
-        for (int i = 0; i < ncols; i++) {
-            if (i > 0) printf("%s", output_separator);
-            printf("%s", names[i]);
-        }
-        printf("\n");
-        headers_printed = 1;
-    }
-    for (int i = 0; i < ncols; i++) {
-        if (i > 0) printf("%s", output_separator);
-        printf("%s", values[i] ? values[i] : "");
-    }
-    printf("\n");
-    return 0;
-}
-
-/* Execute SQL and report errors */
-static int exec_sql(sqlite3 *db, const char *sql) {
-    char *err = NULL;
-    headers_printed = 0; /* Reset per query */
-    int rc = sqlite3_exec(db, sql, print_row, NULL, &err);
-    if (rc != SQLITE_OK) {
-        fprintf(stderr, "Error: %s\n", err ? err : sqlite3_errmsg(db));
-        sqlite3_free(err);
-        return 1;
-    }
-    return 0;
-}
-
-/* Handle dot-commands */
-static int handle_meta(sqlite3 *db, const char *line) {
-    while (*line == ' ' || *line == '\t') line++;
-
-    if (strcmp(line, ".quit") == 0 || strcmp(line, ".exit") == 0) {
-        return -1; /* Signal exit */
-    }
-    if (strcmp(line, ".help") == 0) {
-        printf(".dump              Dump database as SQL\n");
-        printf(".headers on|off    Toggle column headers\n");
-        printf(".help              Show this help\n");
-        printf(".mode MODE         Set output mode (list, csv)\n");
-        printf(".quit              Exit\n");
-        printf(".schema            Show CREATE statements\n");
-        printf(".tables            List tables\n");
-        return 0;
-    }
-    if (strcmp(line, ".tables") == 0) {
-        return exec_sql(db,
-            "SELECT name FROM sqlite_master WHERE type='table' ORDER BY 1;");
-    }
-    if (strcmp(line, ".schema") == 0) {
-        return exec_sql(db,
-            "SELECT sql||';' FROM sqlite_master WHERE sql IS NOT NULL ORDER BY 1;");
-    }
-    if (strcmp(line, ".dump") == 0) {
-        printf("BEGIN TRANSACTION;\n");
-        /* Schema */
-        exec_sql(db,
-            "SELECT sql||';' FROM sqlite_master WHERE sql IS NOT NULL "
-            "ORDER BY CASE WHEN type='table' THEN 0 ELSE 1 END, name;");
-        /* Data — generate INSERT statements for each table */
-        sqlite3_stmt *stmt;
-        int rc = sqlite3_prepare_v2(db,
-            "SELECT name FROM sqlite_master WHERE type='table' ORDER BY 1;",
-            -1, &stmt, NULL);
-        if (rc == SQLITE_OK) {
-            while (sqlite3_step(stmt) == SQLITE_ROW) {
-                const char *table = (const char *)sqlite3_column_text(stmt, 0);
-                char query[1024];
-                snprintf(query, sizeof(query), "SELECT * FROM \"%s\"", table);
-
-                sqlite3_stmt *data_stmt;
-                rc = sqlite3_prepare_v2(db, query, -1, &data_stmt, NULL);
-                if (rc == SQLITE_OK) {
-                    int ncols = sqlite3_column_count(data_stmt);
-                    while (sqlite3_step(data_stmt) == SQLITE_ROW) {
-                        printf("INSERT INTO \"%s\" VALUES(", table);
-                        for (int i = 0; i < ncols; i++) {
-                            if (i > 0) printf(",");
-                            int type = sqlite3_column_type(data_stmt, i);
-                            if (type == SQLITE_NULL) {
-                                printf("NULL");
-                            } else if (type == SQLITE_INTEGER) {
-                                printf("%lld", sqlite3_column_int64(data_stmt, i));
-                            } else if (type == SQLITE_FLOAT) {
-                                printf("%g", sqlite3_column_double(data_stmt, i));
-                            } else {
-                                const char *text = (const char *)sqlite3_column_text(data_stmt, i);
-                                printf("'");
-                                for (const char *c = text; *c; c++) {
-                                    if (*c == '\'') printf("''");
-                                    else putchar(*c);
-                                }
-                                printf("'");
-                            }
-                        }
-                        printf(");\n");
-                    }
-                    sqlite3_finalize(data_stmt);
-                }
-            }
-            sqlite3_finalize(stmt);
-        }
-        printf("COMMIT;\n");
-        return 0;
-    }
-    if (strncmp(line, ".headers ", 9) == 0) {
-        const char *arg = line + 9;
-        while (*arg == ' ') arg++;
-        if (strcmp(arg, "on") == 0) headers_enabled = 1;
-        else headers_enabled = 0;
-        return 0;
-    }
-    if (strncmp(line, ".mode ", 6) == 0) {
-        const char *arg = line + 6;
-        while (*arg == ' ') arg++;
-        if (strcmp(arg, "csv") == 0) strcpy(output_sep_buf, ",");
-        else strcpy(output_sep_buf, "|");
-        return 0;
-    }
-
-    fprintf(stderr, "Error: unknown command or invalid arguments: \"%s\"\n", line);
-    return 0;
-}
-
-/* Read all data from stream into a buffer */
-static char *read_all(FILE *in, size_t *out_len) {
-    size_t cap = 65536;
-    size_t len = 0;
-    char *buf = (char *)malloc(cap);
-    if (!buf) return NULL;
-
-    int c;
-    while ((c = fgetc(in)) != EOF) {
-        if (len + 1 >= cap) {
-            cap *= 2;
-            char *nb = (char *)realloc(buf, cap);
-            if (!nb) { free(buf); return NULL; }
-            buf = nb;
-        }
-        buf[len++] = (char)c;
-    }
-    buf[len] = '\0';
-    if (out_len) *out_len = len;
-    return buf;
-}
-
-/* Process a line of input — either meta-command or SQL accumulation */
-static int process_line(sqlite3 *db, const char *line, size_t len,
-                        char *sql_buf, int *sql_len, int sql_cap) {
-    /* Meta-commands start with . */
-    if (line[0] == '.' && *sql_len == 0) {
-        /* Need a mutable copy for handle_meta */
-        char meta_buf[1024];
-        size_t ml = len < sizeof(meta_buf) - 1 ? len : sizeof(meta_buf) - 1;
-        memcpy(meta_buf, line, ml);
-        meta_buf[ml] = '\0';
-        int rc = handle_meta(db, meta_buf);
-        if (rc < 0) return -1; /* .quit */
-        return rc;
-    }
-
-    /* Accumulate SQL */
-    if (*sql_len + (int)len + 2 < sql_cap) {
-        if (*sql_len > 0) sql_buf[(*sql_len)++] = '\n';
-        memcpy(sql_buf + *sql_len, line, len);
-        *sql_len += (int)len;
-        sql_buf[*sql_len] = '\0';
-    }
-
-    /* Check if statement is complete */
-    if (sqlite3_complete(sql_buf)) {
-        int rc = exec_sql(db, sql_buf);
-        *sql_len = 0;
-        return rc;
-    }
-    return 0;
-}
-
-/* Read and execute SQL from stdin */
-static int process_input(sqlite3 *db, FILE *in) {
-    size_t total = 0;
-    char *data = read_all(in, &total);
-    if (!data || total == 0) {
-        free(data);
-        return 0;
-    }
-
-    char sql_buf[65536];
-    int sql_len = 0;
-    int had_error = 0;
-
-    /* Process input line by line */
-    const char *p = data;
-    const char *end = data + total;
-    while (p < end) {
-        /* Find end of line */
-        const char *eol = p;
-        while (eol < end && *eol != '\n' && *eol != '\r') eol++;
-        size_t len = eol - p;
-
-        /* Skip empty lines */
-        if (len > 0) {
-            int rc = process_line(db, p, len, sql_buf, &sql_len, (int)sizeof(sql_buf));
-            if (rc < 0) break; /* .quit */
-            if (rc > 0) had_error = 1;
-        }
-
-        /* Skip past newline */
-        p = eol;
-        if (p < end && *p == '\r') p++;
-        if (p < end && *p == '\n') p++;
-    }
-
-    /* Execute any remaining SQL */
-    if (sql_len > 0) {
-        if (exec_sql(db, sql_buf) != 0)
-            had_error = 1;
-    }
-
-    free(data);
-    return had_error;
-}
-
-static void print_usage(void) {
-    fprintf(stderr, "Usage: sqlite3 [OPTIONS] [FILENAME] [SQL]\n");
-    fprintf(stderr, "  FILENAME is the name of an SQLite database. A new database is\n");
-    fprintf(stderr, "  created if the file does not exist. Use \":memory:\" for in-memory.\n");
-    fprintf(stderr, "  SQL is an optional SQL statement to execute.\n");
-    fprintf(stderr, "Options:\n");
-    fprintf(stderr, "  -header       Turn headers on\n");
-    fprintf(stderr, "  -csv          Set output mode to CSV\n");
-    fprintf(stderr, "  -separator S  Set output separator (default \"|\")\n");
-    fprintf(stderr, "  -help         Show this help\n");
-    fprintf(stderr, "  -version      Show SQLite version\n");
-}
-
-int main(int argc, char **argv) {
-    const char *db_path = ":memory:";
-    const char *sql_arg = NULL;
-    int positional = 0;
-    int i;
-
-    /* Initialize separator at runtime — static initializers for arrays
-     * may not work correctly in optimized WASM builds. */
-    output_sep_buf[0] = '|';
-    output_sep_buf[1] = '\0';
-
-    /* Parse options */
-    for (i = 1; i < argc; i++) {
-        if (argv[i][0] == '-') {
-            if (strcmp(argv[i], "-help") == 0 || strcmp(argv[i], "--help") == 0) {
-                print_usage();
-                return 0;
-            }
-            if (strcmp(argv[i], "-version") == 0 || strcmp(argv[i], "--version") == 0) {
-                printf("%s\n", sqlite3_libversion());
-                return 0;
-            }
-            if (strcmp(argv[i], "-header") == 0 || strcmp(argv[i], "-headers") == 0) {
-                headers_enabled = 1;
-                continue;
-            }
-            if (strcmp(argv[i], "-csv") == 0) {
-                strcpy(output_sep_buf, ",");
-                continue;
-            }
-            if (strcmp(argv[i], "-separator") == 0 && i + 1 < argc) {
-                strncpy(output_sep_buf, argv[++i], sizeof(output_sep_buf) - 1);
-                output_sep_buf[sizeof(output_sep_buf) - 1] = '\0';
-                continue;
-            }
-            fprintf(stderr, "Error: unknown option: %s\n", argv[i]);
-            print_usage();
-            return 1;
-        }
-        /* Positional args: [FILENAME] [SQL] */
-        if (positional == 0) {
-            db_path = argv[i];
-            positional++;
-        } else if (positional == 1) {
-            sql_arg = argv[i];
-            positional++;
-        } else {
-            fprintf(stderr, "Error: too many arguments\n");
-            print_usage();
-            return 1;
-        }
-    }
-
-    /* Open database */
-    sqlite3 *db;
-    int rc = sqlite3_open(db_path, &db);
-    if (rc != SQLITE_OK) {
-        fprintf(stderr, "Error: unable to open database \"%s\": %s\n",
-                db_path, sqlite3_errmsg(db));
-        sqlite3_close(db);
-        return 1;
-    }
-
-    int exit_code = 0;
-
-    if (sql_arg) {
-        /* Execute SQL from command line */
-        exit_code = exec_sql(db, sql_arg);
-    } else {
-        /* Read from stdin */
-        exit_code = process_input(db, stdin);
-    }
-
-    /* Flush output */
-    fflush(stdout);
-    fflush(stderr);
-    /* Skip sqlite3_close + atexit handlers — use _Exit to avoid WASM indirect
-     * call table traps during wasi-libc/SQLite cleanup with wasm-opt. */
-    _Exit(exit_code);
-}
diff --git a/registry/native/c/programs/sqlite3_mem.c b/registry/native/c/programs/sqlite3_mem.c
deleted file mode 100644
index 9d7eef32f..000000000
--- a/registry/native/c/programs/sqlite3_mem.c
+++ /dev/null
@@ -1,188 +0,0 @@
-/* sqlite3_mem — in-memory SQLite operations (Tier 5 test fixture)
- *
- * Creates an in-memory database, creates a table, inserts rows,
- * queries them, and prints the results. Validates the full libc surface
- * (malloc, string formatting, math) exercised by SQLite.
- */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include "sqlite3.h"
-
-#ifdef SQLITE_OS_OTHER
-/* SQLite still requires a default VFS for :memory: databases. */
-typedef struct MemFile {
-    sqlite3_file base;
-} MemFile;
-
-static int memClose(sqlite3_file *pFile) { (void)pFile; return SQLITE_OK; }
-static int memRead(sqlite3_file *pFile, void *zBuf, int iAmt, sqlite3_int64 iOfst) {
-    (void)pFile; (void)zBuf; (void)iAmt; (void)iOfst; return SQLITE_IOERR_READ;
-}
-static int memWrite(sqlite3_file *pFile, const void *zBuf, int iAmt, sqlite3_int64 iOfst) {
-    (void)pFile; (void)zBuf; (void)iAmt; (void)iOfst; return SQLITE_IOERR_WRITE;
-}
-static int memTruncate(sqlite3_file *pFile, sqlite3_int64 size) {
-    (void)pFile; (void)size; return SQLITE_IOERR_TRUNCATE;
-}
-static int memSync(sqlite3_file *pFile, int flags) {
-    (void)pFile; (void)flags; return SQLITE_OK;
-}
-static int memFileSize(sqlite3_file *pFile, sqlite3_int64 *pSize) {
-    (void)pFile; *pSize = 0; return SQLITE_OK;
-}
-static int memLock(sqlite3_file *pFile, int lock) {
-    (void)pFile; (void)lock; return SQLITE_OK;
-}
-static int memUnlock(sqlite3_file *pFile, int lock) {
-    (void)pFile; (void)lock; return SQLITE_OK;
-}
-static int memCheckReservedLock(sqlite3_file *pFile, int *pResOut) {
-    (void)pFile; *pResOut = 0; return SQLITE_OK;
-}
-static int memFileControl(sqlite3_file *pFile, int op, void *pArg) {
-    (void)pFile; (void)op; (void)pArg; return SQLITE_NOTFOUND;
-}
-static int memSectorSize(sqlite3_file *pFile) { (void)pFile; return 512; }
-static int memDeviceCharacteristics(sqlite3_file *pFile) { (void)pFile; return 0; }
-
-static const sqlite3_io_methods memIoMethods __attribute__((used)) = {
-    1,
-    memClose,
-    memRead,
-    memWrite,
-    memTruncate,
-    memSync,
-    memFileSize,
-    memLock,
-    memUnlock,
-    memCheckReservedLock,
-    memFileControl,
-    memSectorSize,
-    memDeviceCharacteristics,
-    0, 0, 0, 0
-};
-
-static int memOpen(sqlite3_vfs *pVfs, sqlite3_filename zName, sqlite3_file *pFile,
-                   int flags, int *pOutFlags) {
-    (void)pVfs; (void)zName; (void)flags;
-    pFile->pMethods = 0;
-    if (pOutFlags) *pOutFlags = flags;
-    return SQLITE_CANTOPEN;
-}
-static int memDelete(sqlite3_vfs *pVfs, const char *zName, int syncDir) {
-    (void)pVfs; (void)zName; (void)syncDir; return SQLITE_OK;
-}
-static int memAccess(sqlite3_vfs *pVfs, const char *zName, int flags, int *pResOut) {
-    (void)pVfs; (void)zName; (void)flags; *pResOut = 0; return SQLITE_OK;
-}
-static int memFullPathname(sqlite3_vfs *pVfs, const char *zName, int nOut, char *zOut) {
-    (void)pVfs;
-    snprintf(zOut, (size_t)nOut, "%s", zName ? zName : ":memory:");
-    return SQLITE_OK;
-}
-static int memRandomness(sqlite3_vfs *pVfs, int nByte, char *zOut) {
-    (void)pVfs;
-    for (int i = 0; i < nByte; i++) zOut[i] = (char)(i * 37 + 17);
-    return nByte;
-}
-static int memSleep(sqlite3_vfs *pVfs, int microseconds) {
-    (void)pVfs; (void)microseconds; return 0;
-}
-static int memCurrentTime(sqlite3_vfs *pVfs, double *pTime) {
-    (void)pVfs; *pTime = 2440587.5; return SQLITE_OK;
-}
-static int memGetLastError(sqlite3_vfs *pVfs, int nBuf, char *zBuf) {
-    (void)pVfs;
-    if (nBuf > 0) zBuf[0] = 0;
-    return 0;
-}
-
-static sqlite3_vfs memVfs __attribute__((used)) = {
-    1,
-    sizeof(MemFile),
-    512,
-    0,
-    "secure-exec-mem",
-    0,
-    memOpen,
-    memDelete,
-    memAccess,
-    memFullPathname,
-    0, 0, 0, 0,
-    memRandomness,
-    memSleep,
-    memCurrentTime,
-    memGetLastError,
-    0, 0, 0, 0
-};
-
-int sqlite3_os_init(void) { return sqlite3_vfs_register(&memVfs, 1); }
-int sqlite3_os_end(void)  { return SQLITE_OK; }
-#endif
-
-static int print_row(void *unused, int ncols, char **values, char **names) {
-    (void)unused;
-    for (int i = 0; i < ncols; i++) {
-        if (i > 0) printf("|");
-        printf("%s=%s", names[i], values[i] ? values[i] : "NULL");
-    }
-    printf("\n");
-    return 0;
-}
-
-static void exec_sql(sqlite3 *db, const char *sql, const char *label) {
-    char *err = NULL;
-    int rc = sqlite3_exec(db, sql, print_row, NULL, &err);
-    if (rc != SQLITE_OK) {
-        fprintf(stderr, "%s error: %s\n", label, err);
-        sqlite3_free(err);
-        sqlite3_close(db);
-        exit(1);
-    }
-}
-
-int main(void) {
-    sqlite3 *db;
-    int rc;
-
-    rc = sqlite3_open(":memory:", &db);
-    if (rc != SQLITE_OK) {
-        fprintf(stderr, "open error: %s\n", sqlite3_errmsg(db));
-        return 1;
-    }
-    printf("db: open\n");
-
-    exec_sql(db,
-        "CREATE TABLE users ("
-        "  id INTEGER PRIMARY KEY,"
-        "  name TEXT NOT NULL,"
-        "  score REAL"
-        ");",
-        "create");
-    printf("table: created\n");
-
-    exec_sql(db,
-        "INSERT INTO users VALUES (1, 'Alice', 95.5);"
-        "INSERT INTO users VALUES (2, 'Bob', 87.3);"
-        "INSERT INTO users VALUES (3, 'Charlie', NULL);"
-        "INSERT INTO users VALUES (4, 'Diana', 92.1);",
-        "insert");
-    printf("rows: 4\n");
-
-    printf("--- query: all ---\n");
-    exec_sql(db, "SELECT id, name, score FROM users ORDER BY id;", "select");
-
-    printf("--- query: avg ---\n");
-    exec_sql(db, "SELECT COUNT(*) as total, AVG(score) as avg_score FROM users WHERE score IS NOT NULL;", "avg");
-
-    printf("--- query: top ---\n");
-    exec_sql(db, "SELECT name, score FROM users WHERE score IS NOT NULL ORDER BY score DESC LIMIT 2;", "top");
-
-    printf("version: %s\n", sqlite3_libversion());
-
-    sqlite3_close(db);
-    printf("db: closed\n");
-
-    return 0;
-}
diff --git a/registry/native/c/programs/syscall_coverage.c b/registry/native/c/programs/syscall_coverage.c
deleted file mode 100644
index 22fee5fdf..000000000
--- a/registry/native/c/programs/syscall_coverage.c
+++ /dev/null
@@ -1,481 +0,0 @@
-/* syscall_coverage.c — comprehensive test exercising every libc-to-WASI
- * and libc-to-host-import syscall path.
- *
- * Output: structured "name: ok" or "name: FAIL (reason)" lines
- * Exit:   0 if ALL pass, 1 if any FAIL
- * Requires: patched sysroot (host_process + host_user imports)
- */
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-#include <fcntl.h>
-#include <sys/stat.h>
-#include <dirent.h>
-#include <time.h>
-#include <errno.h>
-#include <pwd.h>
-#include <signal.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
-
-#include "posix_spawn_compat.h"
-
-extern char **environ;
-
-static int failures = 0;
-static volatile sig_atomic_t sigaction_hits = 0;
-
-#define OK(name) printf(name ": ok\n")
-#define FAIL(name, reason) do { \
-    printf(name ": FAIL (%s)\n", reason); failures++; \
-} while(0)
-#define TEST(name, cond, reason) do { \
-    if (cond) OK(name); else FAIL(name, reason); \
-} while(0)
-
-static void syscall_coverage_sigaction_handler(int sig) {
-    sigaction_hits = sig;
-}
-
-/* ========== WASI FD operations ========== */
-
-static void test_fd_ops(const char *base) {
-    char path[512];
-    snprintf(path, sizeof(path), "%s/fd_test.txt", base);
-
-    const char *data = "hello fd ops\n";
-    size_t len = strlen(data);
-
-    /* open + write */
-    int fd = open(path, O_WRONLY | O_CREAT | O_TRUNC, 0644);
-    TEST("open", fd >= 0, strerror(errno));
-    if (fd < 0) {
-        FAIL("write", "skipped"); FAIL("read", "skipped");
-        FAIL("pread", "skipped"); FAIL("pwrite", "skipped");
-        FAIL("seek", "skipped"); FAIL("fstat", "skipped");
-        FAIL("ftruncate", "skipped"); FAIL("close", "skipped");
-        return;
-    }
-
-    ssize_t w = write(fd, data, len);
-    TEST("write", w == (ssize_t)len, "wrong byte count");
-    close(fd);
-
-    /* read */
-    fd = open(path, O_RDONLY);
-    if (fd < 0) {
-        FAIL("read", strerror(errno));
-        FAIL("seek", "skipped"); FAIL("pread", "skipped");
-        goto after_read;
-    }
-    {
-        char buf[256] = {0};
-        ssize_t r = read(fd, buf, sizeof(buf));
-        if (r < 0) {
-            fprintf(stderr, "DBG read: errno=%d (%s)\n", errno, strerror(errno));
-        } else if (r != (ssize_t)len || memcmp(buf, data, len) != 0) {
-            fprintf(stderr, "DBG read: r=%zd expected=%zu buf='%.*s'\n", r, len, (int)r, buf);
-        }
-        TEST("read", r == (ssize_t)len && memcmp(buf, data, len) == 0, "content mismatch");
-
-        /* seek */
-        off_t pos = lseek(fd, 0, SEEK_SET);
-        TEST("seek", pos == 0, "not zero");
-
-        /* pread */
-        char pbuf[16] = {0};
-        ssize_t pr = pread(fd, pbuf, 5, 0);
-        TEST("pread", pr == 5 && memcmp(pbuf, "hello", 5) == 0, "content mismatch");
-        close(fd);
-    }
-
-after_read:
-    /* pwrite */
-    fd = open(path, O_WRONLY);
-    if (fd >= 0) {
-        ssize_t pw = pwrite(fd, "HELLO", 5, 0);
-        TEST("pwrite", pw == 5, "wrong byte count");
-        close(fd);
-    } else {
-        FAIL("pwrite", strerror(errno));
-    }
-
-    /* fstat */
-    fd = open(path, O_RDONLY);
-    if (fd >= 0) {
-        struct stat st;
-        int sr = fstat(fd, &st);
-        TEST("fstat", sr == 0 && st.st_size > 0, "failed or zero size");
-        close(fd);
-    } else {
-        FAIL("fstat", strerror(errno));
-    }
-
-    /* ftruncate */
-    fd = open(path, O_WRONLY);
-    if (fd >= 0) {
-        int tr = ftruncate(fd, 5);
-        TEST("ftruncate", tr == 0, strerror(errno));
-        close(fd);
-    } else {
-        FAIL("ftruncate", strerror(errno));
-    }
-
-    /* close — explicit test */
-    fd = open(path, O_RDONLY);
-    TEST("close", fd >= 0 && close(fd) == 0, "failed");
-
-    unlink(path);
-}
-
-/* ========== WASI path operations ========== */
-
-static void test_path_ops(const char *base) {
-    char dir[512], file[512], file2[512], link[512];
-    snprintf(dir, sizeof(dir), "%s/pdir", base);
-    snprintf(file, sizeof(file), "%s/pdir/f.txt", base);
-    snprintf(file2, sizeof(file2), "%s/pdir/r.txt", base);
-    snprintf(link, sizeof(link), "%s/pdir/lnk", base);
-
-    /* mkdir */
-    TEST("mkdir", mkdir(dir, 0755) == 0, strerror(errno));
-
-    /* stat */
-    struct stat st;
-    TEST("stat", stat(dir, &st) == 0 && S_ISDIR(st.st_mode), "not a directory");
-
-    /* create file for further tests */
-    FILE *f = fopen(file, "w");
-    if (f) { fprintf(f, "test\n"); fclose(f); }
-
-    /* rename */
-    TEST("rename", rename(file, file2) == 0, strerror(errno));
-
-    /* opendir + readdir + closedir */
-    DIR *d = opendir(dir);
-    TEST("opendir", d != NULL, strerror(errno));
-    if (d) {
-        int found = 0;
-        struct dirent *ent;
-        while ((ent = readdir(d)) != NULL) {
-            if (strcmp(ent->d_name, "r.txt") == 0) found = 1;
-        }
-        TEST("readdir", found, "r.txt not found");
-        TEST("closedir", closedir(d) == 0, "failed");
-    } else {
-        FAIL("readdir", "skipped"); FAIL("closedir", "skipped");
-    }
-
-    /* symlink */
-    TEST("symlink", symlink(file2, link) == 0, strerror(errno));
-
-    /* readlink */
-    char rl[512] = {0};
-    ssize_t rl_len = readlink(link, rl, sizeof(rl) - 1);
-    TEST("readlink", rl_len > 0 && strcmp(rl, file2) == 0, "target mismatch");
-
-    /* cleanup before unlink/rmdir */
-    unlink(link);
-
-    /* unlink */
-    TEST("unlink", unlink(file2) == 0, strerror(errno));
-
-    /* rmdir */
-    TEST("rmdir", rmdir(dir) == 0, strerror(errno));
-}
-
-/* ========== Args/Env/Clock ========== */
-
-static void test_args_env_clock(int argc, char *argv[]) {
-    TEST("argc", argc >= 1, "< 1");
-    TEST("argv", argv[0] != NULL && strlen(argv[0]) > 0, "argv[0] empty");
-
-    /* Check for TEST_SC=1 env var (set by test harness) */
-    int found = 0;
-    if (environ)
-        for (int i = 0; environ[i]; i++)
-            if (strncmp(environ[i], "TEST_SC=1", 9) == 0) { found = 1; break; }
-    TEST("environ", found, "TEST_SC=1 not found");
-
-    /* clock_gettime CLOCK_REALTIME */
-    struct timespec ts;
-    int cr = clock_gettime(CLOCK_REALTIME, &ts);
-    TEST("clock_realtime", cr == 0 && (ts.tv_sec > 0 || ts.tv_nsec > 0),
-         "returned zero or failed");
-
-    /* clock_gettime CLOCK_MONOTONIC */
-    cr = clock_gettime(CLOCK_MONOTONIC, &ts);
-    TEST("clock_monotonic", cr == 0 && (ts.tv_sec > 0 || ts.tv_nsec > 0),
-         "returned zero or failed");
-}
-
-/* ========== host_process imports ========== */
-
-static void test_host_process(void) {
-    /* pipe */
-    int pfd[2];
-    int pr = pipe(pfd);
-    TEST("pipe", pr == 0, strerror(errno));
-    if (pr == 0) {
-        /* verify data round-trip */
-        write(pfd[1], "ok", 2);
-        close(pfd[1]);
-        char b[8] = {0};
-        read(pfd[0], b, sizeof(b));
-        close(pfd[0]);
-    }
-
-    /* dup */
-    int nd = dup(STDOUT_FILENO);
-    TEST("dup", nd >= 0, strerror(errno));
-    if (nd >= 0) close(nd);
-
-    /* dup2 */
-    int d2 = dup2(STDOUT_FILENO, 20);
-    TEST("dup2", d2 == 20, strerror(errno));
-    if (d2 == 20) close(20);
-
-    /* getpid */
-    pid_t pid = getpid();
-    pid_t pid2 = getpid();
-    TEST("getpid", pid > 0 && pid != 42 && pid == pid2, "invalid or inconsistent");
-
-    /* getppid */
-    pid_t ppid = getppid();
-    TEST("getppid", ppid >= 0, "negative");
-
-    /* sigaction */
-    struct sigaction action;
-    memset(&action, 0, sizeof(action));
-    sigemptyset(&action.sa_mask);
-    sigaddset(&action.sa_mask, SIGTERM);
-    action.sa_flags = SA_RESTART | SA_RESETHAND;
-    action.sa_handler = syscall_coverage_sigaction_handler;
-    int sar = sigaction(SIGINT, &action, NULL);
-    TEST("sigaction_register", sar == 0, strerror(errno));
-    if (sar == 0) {
-        struct sigaction current;
-        memset(&current, 0, sizeof(current));
-        kill(getpid(), SIGINT);
-        int sq = sigaction(SIGINT, NULL, &current);
-        TEST("sigaction_query", sq == 0
-            && sigaction_hits == SIGINT
-            && current.sa_handler == SIG_DFL,
-            "handler did not fire or reset");
-    } else {
-        FAIL("sigaction_query", "skipped");
-    }
-
-    /* posix_spawn + waitpid */
-    int spfd[2];
-    if (pipe(spfd) == 0) {
-        posix_spawn_file_actions_t fa;
-        posix_spawn_file_actions_init(&fa);
-        posix_spawn_file_actions_adddup2(&fa, spfd[1], STDOUT_FILENO);
-        posix_spawn_file_actions_addclose(&fa, spfd[0]);
-        posix_spawn_file_actions_addclose(&fa, spfd[1]);
-
-        char *a[] = {"echo", "spawn_ok", NULL};
-        pid_t ch;
-        int err = posix_spawnp(&ch, "echo", &fa, NULL, a, environ);
-        posix_spawn_file_actions_destroy(&fa);
-        close(spfd[1]);
-
-        if (err == 0) {
-            char sb[128] = {0};
-            read(spfd[0], sb, sizeof(sb));
-            close(spfd[0]);
-            int st;
-            pid_t w = waitpid(ch, &st, 0);
-            TEST("spawn_waitpid", w > 0 && WIFEXITED(st) && WEXITSTATUS(st) == 0 &&
-                 strstr(sb, "spawn_ok") != NULL, "failed");
-        } else {
-            close(spfd[0]);
-            FAIL("spawn_waitpid", "posix_spawn error");
-        }
-    } else {
-        FAIL("spawn_waitpid", "pipe error");
-    }
-
-    /* kill — test import by sending signal 0 to a recently-exited child.
-     * Avoids spawning long-lived processes that hang if signal delivery
-     * or waitpid has issues (covered separately by kill_child.c). */
-    {
-        char *a[] = {"true", NULL};
-        pid_t ch;
-        int err = posix_spawnp(&ch, "true", NULL, NULL, a, environ);
-        if (err == 0) {
-            int st;
-            waitpid(ch, &st, 0);
-            /* After collecting, kill(child, 0) should return -1/ESRCH or 0.
-             * Either result proves the host import works end-to-end. */
-            int kr = kill(ch, 0);
-            TEST("kill", kr == 0 || kr == -1, "unexpected return");
-        } else {
-            FAIL("kill", "could not spawn child");
-        }
-    }
-}
-
-/* ========== host_user imports ========== */
-
-static void test_host_user(void) {
-    /* Validate actual return values, not just linkage */
-    uid_t u = getuid();
-    TEST("getuid", u > 0, "expected positive uid");
-
-    gid_t g = getgid();
-    TEST("getgid", g > 0, "expected positive gid");
-
-    uid_t eu = geteuid();
-    TEST("geteuid", eu > 0, "expected positive euid");
-
-    gid_t eg = getegid();
-    TEST("getegid", eg > 0, "expected positive egid");
-
-    /* When piped (not PTY), isatty returns 0 */
-    TEST("isatty_stdin", isatty(STDIN_FILENO) == 0, "stdin should not be tty when piped");
-
-    /* getpwuid — verify passwd entry for uid 1000 */
-    struct passwd *pw = getpwuid(1000);
-    if (pw != NULL && pw->pw_name != NULL && strlen(pw->pw_name) > 0 &&
-        pw->pw_uid == 1000) {
-        OK("getpwuid");
-    } else {
-        FAIL("getpwuid", pw ? "bad fields" : "returned NULL");
-    }
-}
-
-/* ========== host_net imports exercised through libc ========== */
-
-static void test_host_net(void) {
-    int listener_fd = socket(AF_INET, SOCK_STREAM, 0);
-    if (listener_fd < 0) {
-        FAIL("getsockname", strerror(errno));
-        FAIL("getpeername", "skipped");
-        return;
-    }
-
-    struct sockaddr_in listener_addr;
-    memset(&listener_addr, 0, sizeof(listener_addr));
-    listener_addr.sin_family = AF_INET;
-    listener_addr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
-    listener_addr.sin_port = htons(0);
-
-    if (bind(listener_fd, (struct sockaddr *)&listener_addr, sizeof(listener_addr)) != 0 ||
-        listen(listener_fd, 1) != 0) {
-        FAIL("getsockname", strerror(errno));
-        FAIL("getpeername", "skipped");
-        close(listener_fd);
-        return;
-    }
-
-    struct sockaddr_in bound_listener_addr;
-    socklen_t bound_listener_len = sizeof(bound_listener_addr);
-    if (getsockname(listener_fd, (struct sockaddr *)&bound_listener_addr, &bound_listener_len) != 0) {
-        FAIL("getsockname", strerror(errno));
-        FAIL("getpeername", "skipped");
-        close(listener_fd);
-        return;
-    }
-
-    int client_fd = socket(AF_INET, SOCK_STREAM, 0);
-    if (client_fd < 0) {
-        FAIL("getsockname", strerror(errno));
-        FAIL("getpeername", "skipped");
-        close(listener_fd);
-        return;
-    }
-
-    struct sockaddr_in client_bind_addr;
-    memset(&client_bind_addr, 0, sizeof(client_bind_addr));
-    client_bind_addr.sin_family = AF_INET;
-    client_bind_addr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
-    client_bind_addr.sin_port = htons(0);
-    if (bind(client_fd, (struct sockaddr *)&client_bind_addr, sizeof(client_bind_addr)) != 0) {
-        FAIL("getsockname", strerror(errno));
-        FAIL("getpeername", "skipped");
-        close(client_fd);
-        close(listener_fd);
-        return;
-    }
-
-    struct sockaddr_in bound_client_addr;
-    socklen_t bound_client_len = sizeof(bound_client_addr);
-    if (getsockname(client_fd, (struct sockaddr *)&bound_client_addr, &bound_client_len) != 0) {
-        FAIL("getsockname", strerror(errno));
-        FAIL("getpeername", "skipped");
-        close(client_fd);
-        close(listener_fd);
-        return;
-    }
-
-    if (connect(client_fd, (struct sockaddr *)&bound_listener_addr, sizeof(bound_listener_addr)) != 0) {
-        FAIL("getsockname", strerror(errno));
-        FAIL("getpeername", "skipped");
-        close(client_fd);
-        close(listener_fd);
-        return;
-    }
-
-    int server_fd = accept(listener_fd, NULL, NULL);
-    if (server_fd < 0) {
-        FAIL("getsockname", strerror(errno));
-        FAIL("getpeername", "skipped");
-        close(client_fd);
-        close(listener_fd);
-        return;
-    }
-
-    struct sockaddr_in accepted_local_addr;
-    socklen_t accepted_local_len = sizeof(accepted_local_addr);
-    struct sockaddr_in client_peer_addr;
-    socklen_t client_peer_len = sizeof(client_peer_addr);
-    struct sockaddr_in server_peer_addr;
-    socklen_t server_peer_len = sizeof(server_peer_addr);
-
-    int getsockname_ok =
-        getsockname(server_fd, (struct sockaddr *)&accepted_local_addr, &accepted_local_len) == 0 &&
-        ntohs(bound_listener_addr.sin_port) != 0 &&
-        ntohs(bound_client_addr.sin_port) != 0 &&
-        ntohs(accepted_local_addr.sin_port) == ntohs(bound_listener_addr.sin_port) &&
-        bound_listener_addr.sin_addr.s_addr == htonl(INADDR_LOOPBACK) &&
-        bound_client_addr.sin_addr.s_addr == htonl(INADDR_LOOPBACK) &&
-        accepted_local_addr.sin_addr.s_addr == htonl(INADDR_LOOPBACK);
-    TEST("getsockname", getsockname_ok, getsockname_ok ? "" : "address mismatch");
-
-    int getpeername_ok =
-        getpeername(client_fd, (struct sockaddr *)&client_peer_addr, &client_peer_len) == 0 &&
-        getpeername(server_fd, (struct sockaddr *)&server_peer_addr, &server_peer_len) == 0 &&
-        ntohs(client_peer_addr.sin_port) == ntohs(bound_listener_addr.sin_port) &&
-        ntohs(server_peer_addr.sin_port) == ntohs(bound_client_addr.sin_port) &&
-        client_peer_addr.sin_addr.s_addr == htonl(INADDR_LOOPBACK) &&
-        server_peer_addr.sin_addr.s_addr == htonl(INADDR_LOOPBACK);
-    TEST("getpeername", getpeername_ok, getpeername_ok ? "" : "peer address mismatch");
-
-    close(server_fd);
-    close(client_fd);
-    close(listener_fd);
-}
-
-int main(int argc, char *argv[]) {
-    /* Use /tmp/sc as working directory for file tests */
-    const char *base = "/tmp/sc";
-    mkdir("/tmp", 0755);   /* ensure /tmp exists (may already) */
-    mkdir(base, 0755);
-
-    test_fd_ops(base);
-    test_path_ops(base);
-    test_args_env_clock(argc, argv);
-    test_host_process();
-    test_host_user();
-    test_host_net();
-
-    rmdir(base);
-
-    printf("total: %d failures\n", failures);
-    return failures > 0 ? 1 : 0;
-}
diff --git a/registry/native/c/programs/tcp_accept_spawn.c b/registry/native/c/programs/tcp_accept_spawn.c
deleted file mode 100644
index be106e17e..000000000
--- a/registry/native/c/programs/tcp_accept_spawn.c
+++ /dev/null
@@ -1,92 +0,0 @@
-#include <arpa/inet.h>
-#include <netinet/in.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/socket.h>
-#include <unistd.h>
-
-#include "posix_spawn_compat.h"
-
-extern char **environ;
-
-int main(void) {
-    int listener_fd = socket(AF_INET, SOCK_STREAM, 0);
-    if (listener_fd < 0) {
-        perror("socket");
-        return 1;
-    }
-
-    struct sockaddr_in addr;
-    memset(&addr, 0, sizeof(addr));
-    addr.sin_family = AF_INET;
-    int port = 31000 + (getpid() % 10000);
-    addr.sin_port = htons((uint16_t)port);
-    addr.sin_addr.s_addr = htonl(INADDR_LOOPBACK);
-
-    if (bind(listener_fd, (struct sockaddr *)&addr, sizeof(addr)) != 0) {
-        perror("bind");
-        close(listener_fd);
-        return 1;
-    }
-    if (listen(listener_fd, 1) != 0) {
-        perror("listen");
-        close(listener_fd);
-        return 1;
-    }
-
-    char delay_arg[16];
-    char port_arg[16];
-    snprintf(delay_arg, sizeof(delay_arg), "%d", 100);
-    snprintf(port_arg, sizeof(port_arg), "%d", port);
-
-    char *argv[] = {"delayed_tcp_echo", delay_arg, port_arg, NULL};
-    pid_t child;
-    int spawn_err = posix_spawnp(&child, "delayed_tcp_echo", NULL, NULL, argv, environ);
-    if (spawn_err != 0) {
-        fprintf(stderr, "posix_spawn delayed_tcp_echo failed: %d\n", spawn_err);
-        close(listener_fd);
-        return 1;
-    }
-
-    struct sockaddr_in client_addr;
-    socklen_t client_len = sizeof(client_addr);
-    int client_fd = accept(listener_fd, (struct sockaddr *)&client_addr, &client_len);
-    if (client_fd < 0) {
-        perror("accept");
-        close(listener_fd);
-        return 1;
-    }
-
-    char buf[16] = {0};
-    ssize_t n = recv(client_fd, buf, sizeof(buf) - 1, 0);
-    if (n < 0) {
-        perror("recv");
-        close(client_fd);
-        close(listener_fd);
-        return 1;
-    }
-    buf[n] = '\0';
-    if (send(client_fd, "pong", 4, 0) != 4) {
-        perror("send");
-        close(client_fd);
-        close(listener_fd);
-        return 1;
-    }
-
-    int status = 0;
-    if (waitpid(child, &status, 0) < 0) {
-        perror("waitpid");
-        close(client_fd);
-        close(listener_fd);
-        return 1;
-    }
-
-    close(client_fd);
-    close(listener_fd);
-
-    printf("accept_child_message=%s\n", strcmp(buf, "hello") == 0 ? "yes" : "no");
-    printf("accept_child_exit=%d\n", WIFEXITED(status) ? WEXITSTATUS(status) : 128 + WTERMSIG(status));
-
-    return strcmp(buf, "hello") == 0 && WIFEXITED(status) && WEXITSTATUS(status) == 0 ? 0 : 1;
-}
diff --git a/registry/native/c/programs/tcp_echo.c b/registry/native/c/programs/tcp_echo.c
deleted file mode 100644
index eab51da8a..000000000
--- a/registry/native/c/programs/tcp_echo.c
+++ /dev/null
@@ -1,58 +0,0 @@
-/* tcp_echo.c — connect to a TCP echo server, send "hello", receive response */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
-
-int main(int argc, char *argv[]) {
-    if (argc < 2) {
-        fprintf(stderr, "usage: tcp_echo <port>\n");
-        return 1;
-    }
-
-    int port = atoi(argv[1]);
-
-    int fd = socket(AF_INET, SOCK_STREAM, 0);
-    if (fd < 0) {
-        perror("socket");
-        return 1;
-    }
-
-    struct sockaddr_in addr;
-    memset(&addr, 0, sizeof(addr));
-    addr.sin_family = AF_INET;
-    addr.sin_port = htons((uint16_t)port);
-    inet_pton(AF_INET, "127.0.0.1", &addr.sin_addr);
-
-    if (connect(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0) {
-        perror("connect");
-        close(fd);
-        return 1;
-    }
-
-    const char *msg = "hello";
-    ssize_t sent = send(fd, msg, strlen(msg), 0);
-    if (sent < 0) {
-        perror("send");
-        close(fd);
-        return 1;
-    }
-
-    char buf[256];
-    ssize_t n = recv(fd, buf, sizeof(buf) - 1, 0);
-    if (n < 0) {
-        perror("recv");
-        close(fd);
-        return 1;
-    }
-    buf[n] = '\0';
-
-    printf("sent: %zd\n", sent);
-    printf("received: %s\n", buf);
-
-    close(fd);
-    return 0;
-}
diff --git a/registry/native/c/programs/tcp_server.c b/registry/native/c/programs/tcp_server.c
deleted file mode 100644
index 75fc94e37..000000000
--- a/registry/native/c/programs/tcp_server.c
+++ /dev/null
@@ -1,80 +0,0 @@
-/* tcp_server.c — bind, listen, accept one connection, recv, send "pong", close */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
-
-int main(int argc, char *argv[]) {
-    if (argc < 2) {
-        fprintf(stderr, "usage: tcp_server <port>\n");
-        return 1;
-    }
-
-    int port = atoi(argv[1]);
-
-    int fd = socket(AF_INET, SOCK_STREAM, 0);
-    if (fd < 0) {
-        perror("socket");
-        return 1;
-    }
-
-    struct sockaddr_in addr;
-    memset(&addr, 0, sizeof(addr));
-    addr.sin_family = AF_INET;
-    addr.sin_port = htons((uint16_t)port);
-    addr.sin_addr.s_addr = htonl(INADDR_ANY);
-
-    if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0) {
-        perror("bind");
-        close(fd);
-        return 1;
-    }
-
-    if (listen(fd, 1) < 0) {
-        perror("listen");
-        close(fd);
-        return 1;
-    }
-
-    printf("listening on port %d\n", port);
-    fflush(stdout);
-
-    struct sockaddr_in client_addr;
-    socklen_t client_len = sizeof(client_addr);
-    int client_fd = accept(fd, (struct sockaddr *)&client_addr, &client_len);
-    if (client_fd < 0) {
-        perror("accept");
-        close(fd);
-        return 1;
-    }
-
-    char buf[256];
-    ssize_t n = recv(client_fd, buf, sizeof(buf) - 1, 0);
-    if (n < 0) {
-        perror("recv");
-        close(client_fd);
-        close(fd);
-        return 1;
-    }
-    buf[n] = '\0';
-
-    printf("received: %s\n", buf);
-
-    const char *reply = "pong";
-    ssize_t sent = send(client_fd, reply, strlen(reply), 0);
-    if (sent < 0) {
-        perror("send");
-        close(client_fd);
-        close(fd);
-        return 1;
-    }
-
-    printf("sent: %zd\n", sent);
-
-    close(client_fd);
-    close(fd);
-    return 0;
-}
diff --git a/registry/native/c/programs/udp_echo.c b/registry/native/c/programs/udp_echo.c
deleted file mode 100644
index cafd7d436..000000000
--- a/registry/native/c/programs/udp_echo.c
+++ /dev/null
@@ -1,67 +0,0 @@
-/* udp_echo.c — bind UDP socket, recv datagram, echo it back, then exit */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-#include <sys/socket.h>
-#include <netinet/in.h>
-#include <arpa/inet.h>
-
-int main(int argc, char *argv[]) {
-    if (argc < 2) {
-        fprintf(stderr, "usage: udp_echo <port>\n");
-        return 1;
-    }
-
-    int port = atoi(argv[1]);
-
-    int fd = socket(AF_INET, SOCK_DGRAM, 0);
-    if (fd < 0) {
-        perror("socket");
-        return 1;
-    }
-
-    struct sockaddr_in addr;
-    memset(&addr, 0, sizeof(addr));
-    addr.sin_family = AF_INET;
-    addr.sin_port = htons((uint16_t)port);
-    addr.sin_addr.s_addr = htonl(INADDR_ANY);
-
-    if (bind(fd, (struct sockaddr *)&addr, sizeof(addr)) < 0) {
-        perror("bind");
-        close(fd);
-        return 1;
-    }
-
-    printf("listening on port %d\n", port);
-    fflush(stdout);
-
-    /* Echo one datagram and exit */
-    char buf[1024];
-    struct sockaddr_in src_addr;
-    socklen_t src_len = sizeof(src_addr);
-
-    ssize_t n = recvfrom(fd, buf, sizeof(buf) - 1, 0,
-                         (struct sockaddr *)&src_addr, &src_len);
-    if (n < 0) {
-        perror("recvfrom");
-        close(fd);
-        return 1;
-    }
-    buf[n] = '\0';
-
-    printf("received: %s\n", buf);
-
-    ssize_t sent = sendto(fd, buf, (size_t)n, 0,
-                          (struct sockaddr *)&src_addr, src_len);
-    if (sent < 0) {
-        perror("sendto");
-        close(fd);
-        return 1;
-    }
-
-    printf("echoed: %zd\n", sent);
-
-    close(fd);
-    return 0;
-}
diff --git a/registry/native/c/programs/unix_socket.c b/registry/native/c/programs/unix_socket.c
deleted file mode 100644
index 40080cc11..000000000
--- a/registry/native/c/programs/unix_socket.c
+++ /dev/null
@@ -1,102 +0,0 @@
-/* unix_socket.c — AF_UNIX server: bind, listen, accept one connection, recv, send "pong", close */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-#include <sys/socket.h>
-
-#ifdef __has_include
-#  if __has_include(<sys/un.h>)
-#    include <sys/un.h>
-#  endif
-#endif
-
-#ifndef AF_UNIX
-#  define AF_UNIX 1
-#endif
-
-#ifndef AF_LOCAL
-#  define AF_LOCAL AF_UNIX
-#endif
-
-#ifndef offsetof
-#  define offsetof(type, member) __builtin_offsetof(type, member)
-#endif
-
-/* Fallback if sys/un.h was not available */
-#ifndef SUN_LEN
-struct sockaddr_un {
-    sa_family_t sun_family;
-    char sun_path[108];
-};
-#define SUN_LEN(su) (offsetof(struct sockaddr_un, sun_path) + strlen((su)->sun_path))
-#endif
-
-int main(int argc, char *argv[]) {
-    const char *path = "/tmp/test.sock";
-    if (argc >= 2) {
-        path = argv[1];
-    }
-
-    int fd = socket(AF_UNIX, SOCK_STREAM, 0);
-    if (fd < 0) {
-        perror("socket");
-        return 1;
-    }
-
-    struct sockaddr_un addr;
-    memset(&addr, 0, sizeof(addr));
-    addr.sun_family = AF_UNIX;
-    strncpy(addr.sun_path, path, sizeof(addr.sun_path) - 1);
-
-    if (bind(fd, (struct sockaddr *)&addr, SUN_LEN(&addr)) < 0) {
-        perror("bind");
-        close(fd);
-        return 1;
-    }
-
-    if (listen(fd, 1) < 0) {
-        perror("listen");
-        close(fd);
-        return 1;
-    }
-
-    printf("listening on %s\n", path);
-    fflush(stdout);
-
-    struct sockaddr_un client_addr;
-    socklen_t client_len = sizeof(client_addr);
-    int client_fd = accept(fd, (struct sockaddr *)&client_addr, &client_len);
-    if (client_fd < 0) {
-        perror("accept");
-        close(fd);
-        return 1;
-    }
-
-    char buf[256];
-    ssize_t n = recv(client_fd, buf, sizeof(buf) - 1, 0);
-    if (n < 0) {
-        perror("recv");
-        close(client_fd);
-        close(fd);
-        return 1;
-    }
-    buf[n] = '\0';
-
-    printf("received: %s\n", buf);
-
-    const char *reply = "pong";
-    ssize_t sent = send(client_fd, reply, strlen(reply), 0);
-    if (sent < 0) {
-        perror("send");
-        close(client_fd);
-        close(fd);
-        return 1;
-    }
-
-    printf("sent: %zd\n", sent);
-
-    close(client_fd);
-    close(fd);
-    return 0;
-}
diff --git a/registry/native/c/programs/unzip.c b/registry/native/c/programs/unzip.c
deleted file mode 100644
index 383e71420..000000000
--- a/registry/native/c/programs/unzip.c
+++ /dev/null
@@ -1,669 +0,0 @@
-/* unzip.c — Extract ZIP archives using zlib/minizip
- *
- * Usage: unzip archive.zip                 (extract all to cwd)
- *        unzip -d outdir archive.zip       (extract to directory)
- *        unzip -l archive.zip              (list contents)
- */
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/stat.h>
-#include <errno.h>
-#include <stdint.h>
-#include <fcntl.h>
-#include <unistd.h>
-#include "ioapi.h"
-#include "unzip.h"
-
-#define MAX_PATH_LEN 4096
-#define WRITE_BUF_SIZE 8192
-
-/* Cap per-entry allocation in the fallback parser. Hostile central directory
- * records can claim sizes up to 4 GiB; refuse anything above this bound. */
-#define MAX_UNCOMPRESSED_SIZE (256u * 1024u * 1024u)
-
-typedef struct {
-    FILE *file;
-    char *filename;
-    char mode[4];
-    long position;
-    long size;
-} unzip_file_stream;
-
-static voidpf ZCALLBACK unzip_open_file(voidpf opaque, const char *filename, int mode) {
-    unzip_file_stream *stream = NULL;
-    const char *mode_fopen = NULL;
-    (void)opaque;
-
-    if ((mode & ZLIB_FILEFUNC_MODE_READWRITEFILTER) == ZLIB_FILEFUNC_MODE_READ)
-        mode_fopen = "rb";
-    else if (mode & ZLIB_FILEFUNC_MODE_EXISTING)
-        mode_fopen = "r+b";
-    else if (mode & ZLIB_FILEFUNC_MODE_CREATE)
-        mode_fopen = "wb";
-
-    if (filename == NULL || mode_fopen == NULL)
-        return NULL;
-
-    stream = (unzip_file_stream *)calloc(1, sizeof(unzip_file_stream));
-    if (!stream)
-        return NULL;
-
-    stream->filename = (char *)malloc(strlen(filename) + 1);
-    if (!stream->filename) {
-        free(stream);
-        return NULL;
-    }
-    strcpy(stream->filename, filename);
-    strncpy(stream->mode, mode_fopen, sizeof(stream->mode) - 1);
-    stream->mode[sizeof(stream->mode) - 1] = '\0';
-
-    stream->file = fopen(filename, mode_fopen);
-    if (!stream->file) {
-        free(stream->filename);
-        free(stream);
-        return NULL;
-    }
-    struct stat st;
-    stream->size = stat(filename, &st) == 0 ? (long)st.st_size : 0;
-    stream->position = 0;
-    return stream;
-}
-
-static uLong ZCALLBACK unzip_read_file(voidpf opaque, voidpf stream, void *buf, uLong size) {
-    unzip_file_stream *file_stream = (unzip_file_stream *)stream;
-    uLong got;
-    (void)opaque;
-    got = (uLong)fread(buf, 1, (size_t)size, file_stream->file);
-    file_stream->position += (long)got;
-    return got;
-}
-
-static uLong ZCALLBACK unzip_write_file(voidpf opaque, voidpf stream, const void *buf, uLong size) {
-    unzip_file_stream *file_stream = (unzip_file_stream *)stream;
-    uLong wrote;
-    (void)opaque;
-    wrote = (uLong)fwrite(buf, 1, (size_t)size, file_stream->file);
-    file_stream->position += (long)wrote;
-    if (file_stream->position > file_stream->size)
-        file_stream->size = file_stream->position;
-    return wrote;
-}
-
-static long ZCALLBACK unzip_tell_file(voidpf opaque, voidpf stream) {
-    unzip_file_stream *file_stream = (unzip_file_stream *)stream;
-    (void)opaque;
-    return file_stream->position;
-}
-
-static long ZCALLBACK unzip_seek_file(voidpf opaque, voidpf stream, uLong offset, int origin) {
-    int fseek_origin = 0;
-    long seek_offset = (long)offset;
-    unzip_file_stream *file_stream = (unzip_file_stream *)stream;
-    (void)opaque;
-
-    switch (origin) {
-    case ZLIB_FILEFUNC_SEEK_CUR:
-        seek_offset = file_stream->position + (long)offset;
-        fseek_origin = SEEK_SET;
-        break;
-    case ZLIB_FILEFUNC_SEEK_END:
-        seek_offset = file_stream->size + (long)offset;
-        fseek_origin = SEEK_SET;
-        break;
-    case ZLIB_FILEFUNC_SEEK_SET:
-        fseek_origin = SEEK_SET;
-        break;
-    default:
-        return -1;
-    }
-
-    fclose(file_stream->file);
-    file_stream->file = fopen(file_stream->filename, file_stream->mode);
-    if (!file_stream->file)
-        return -1;
-
-    if (fseek(file_stream->file, seek_offset, fseek_origin) != 0)
-        return -1;
-    clearerr(file_stream->file);
-    file_stream->position = seek_offset;
-    return 0;
-}
-
-static int ZCALLBACK unzip_close_file(voidpf opaque, voidpf stream) {
-    unzip_file_stream *file_stream = (unzip_file_stream *)stream;
-    int ret;
-    (void)opaque;
-    ret = fclose(file_stream->file);
-    free(file_stream->filename);
-    free(file_stream);
-    return ret;
-}
-
-static int ZCALLBACK unzip_error_file(voidpf opaque, voidpf stream) {
-    unzip_file_stream *file_stream = (unzip_file_stream *)stream;
-    (void)opaque;
-    return ferror(file_stream->file);
-}
-
-static unzFile open_archive(const char *archive) {
-    zlib_filefunc_def filefunc = {
-        .zopen_file = unzip_open_file,
-        .zread_file = unzip_read_file,
-        .zwrite_file = unzip_write_file,
-        .ztell_file = unzip_tell_file,
-        .zseek_file = unzip_seek_file,
-        .zclose_file = unzip_close_file,
-        .zerror_file = unzip_error_file,
-        .opaque = NULL,
-    };
-    return unzOpen2(archive, &filefunc);
-}
-
-/* Ensure all parent directories of path exist */
-static int mkdirs(const char *path) {
-    char tmp[MAX_PATH_LEN];
-    size_t len = strlen(path);
-    if (len >= sizeof(tmp)) return -1;
-    memcpy(tmp, path, len + 1);
-
-    for (size_t i = 1; i < len; i++) {
-        if (tmp[i] == '/') {
-            tmp[i] = '\0';
-            if (mkdir(tmp, 0755) != 0 && errno != EEXIST)
-                return -1;
-            tmp[i] = '/';
-        }
-    }
-    return 0;
-}
-
-static uint16_t read_le16(const unsigned char *p) {
-    return (uint16_t)p[0] | ((uint16_t)p[1] << 8);
-}
-
-static uint32_t read_le32(const unsigned char *p) {
-    return (uint32_t)p[0] | ((uint32_t)p[1] << 8) |
-           ((uint32_t)p[2] << 16) | ((uint32_t)p[3] << 24);
-}
-
-static int read_archive_bytes(const char *archive, unsigned char **out, size_t *out_len) {
-    FILE *f = fopen(archive, "rb");
-    long size;
-    unsigned char *data;
-    if (!f)
-        return -1;
-    if (fseek(f, 0, SEEK_END) != 0) {
-        fclose(f);
-        return -1;
-    }
-    size = ftell(f);
-    if (size < 0 || fseek(f, 0, SEEK_SET) != 0) {
-        fclose(f);
-        return -1;
-    }
-    data = (unsigned char *)malloc((size_t)size);
-    if (!data) {
-        fclose(f);
-        return -1;
-    }
-    if (fread(data, 1, (size_t)size, f) != (size_t)size) {
-        free(data);
-        fclose(f);
-        return -1;
-    }
-    fclose(f);
-    *out = data;
-    *out_len = (size_t)size;
-    return 0;
-}
-
-static int find_eocd(const unsigned char *data, size_t len, size_t *eocd_offset) {
-    size_t min = len > 0xffff + 22 ? len - (0xffff + 22) : 0;
-    if (len < 22)
-        return -1;
-    for (size_t pos = len - 22; pos + 4 <= len && pos >= min; pos--) {
-        if (read_le32(data + pos) == 0x06054b50) {
-            *eocd_offset = pos;
-            return 0;
-        }
-        if (pos == 0)
-            break;
-    }
-    return -1;
-}
-
-static const char *entry_output_name(const char *name, size_t name_len) {
-    const char *end = name + name_len;
-    while (name < end && *name == '/')
-        name++;
-    return name;
-}
-
-static int inflate_raw_entry(const unsigned char *src, size_t src_len, unsigned char *dst, size_t dst_len) {
-    z_stream stream;
-    memset(&stream, 0, sizeof(stream));
-    stream.next_in = (Bytef *)src;
-    stream.avail_in = (uInt)src_len;
-    stream.next_out = dst;
-    stream.avail_out = (uInt)dst_len;
-    if (inflateInit2(&stream, -MAX_WBITS) != Z_OK)
-        return -1;
-    int result = inflate(&stream, Z_FINISH);
-    inflateEnd(&stream);
-    return result == Z_STREAM_END && stream.total_out == dst_len ? 0 : -1;
-}
-
-static int simple_archive_entries(const unsigned char *data, size_t len, size_t *cd_offset, uint16_t *entry_count) {
-    size_t eocd;
-    if (len < 22 || find_eocd(data, len, &eocd) != 0 || eocd > len - 22)
-        return -1;
-    *entry_count = read_le16(data + eocd + 10);
-    *cd_offset = read_le32(data + eocd + 16);
-    return *cd_offset < len ? 0 : -1;
-}
-
-static int simple_list_archive(const char *archive) {
-    unsigned char *data = NULL;
-    size_t len = 0;
-    size_t pos;
-    uint16_t entries;
-    unsigned long total_size = 0;
-    if (read_archive_bytes(archive, &data, &len) != 0 ||
-        simple_archive_entries(data, len, &pos, &entries) != 0) {
-        free(data);
-        return 1;
-    }
-
-    printf("  Length      Name\n");
-    printf("---------  ----\n");
-    for (uint16_t i = 0; i < entries; i++) {
-        uint16_t name_len;
-        uint16_t extra_len;
-        uint16_t comment_len;
-        uint32_t uncompressed_size;
-        if (len < 46 || pos > len - 46 || read_le32(data + pos) != 0x02014b50) {
-            free(data);
-            return 1;
-        }
-        uncompressed_size = read_le32(data + pos + 24);
-        name_len = read_le16(data + pos + 28);
-        extra_len = read_le16(data + pos + 30);
-        comment_len = read_le16(data + pos + 32);
-        size_t header_len = 46 + (size_t)name_len + (size_t)extra_len + (size_t)comment_len;
-        if (header_len > len - pos) {
-            free(data);
-            return 1;
-        }
-        printf("%9lu  %.*s\n", (unsigned long)uncompressed_size, name_len, data + pos + 46);
-        total_size += uncompressed_size;
-        pos += header_len;
-    }
-    printf("---------  ----\n");
-    printf("%9lu  %u file(s)\n", total_size, entries);
-    free(data);
-    return 0;
-}
-
-static int simple_extract_archive(const char *archive, const char *outdir) {
-    unsigned char *data = NULL;
-    size_t len = 0;
-    size_t pos;
-    uint16_t entries;
-    int errors = 0;
-    if (read_archive_bytes(archive, &data, &len) != 0 ||
-        simple_archive_entries(data, len, &pos, &entries) != 0) {
-        free(data);
-        return 1;
-    }
-
-    if (outdir && mkdir(outdir, 0755) != 0 && errno != EEXIST) {
-        fprintf(stderr, "unzip: cannot create directory '%s': %s\n", outdir, strerror(errno));
-        free(data);
-        return 1;
-    }
-
-    for (uint16_t i = 0; i < entries; i++) {
-        uint16_t method;
-        uint16_t name_len;
-        uint16_t extra_len;
-        uint16_t comment_len;
-        uint16_t local_name_len;
-        uint16_t local_extra_len;
-        uint32_t compressed_size;
-        uint32_t uncompressed_size;
-        uint32_t local_offset;
-        size_t file_data_offset;
-        const char *name;
-        const char *safe_name;
-        char outpath[MAX_PATH_LEN];
-        unsigned char *out = NULL;
-
-        if (len < 46 || pos > len - 46 || read_le32(data + pos) != 0x02014b50) {
-            errors++;
-            break;
-        }
-        method = read_le16(data + pos + 10);
-        compressed_size = read_le32(data + pos + 20);
-        uncompressed_size = read_le32(data + pos + 24);
-        name_len = read_le16(data + pos + 28);
-        extra_len = read_le16(data + pos + 30);
-        comment_len = read_le16(data + pos + 32);
-        local_offset = read_le32(data + pos + 42);
-        size_t header_len = 46 + (size_t)name_len + (size_t)extra_len + (size_t)comment_len;
-        if (header_len > len - pos || (size_t)local_offset > len - 30) {
-            errors++;
-            break;
-        }
-
-        name = (const char *)(data + pos + 46);
-        safe_name = entry_output_name(name, name_len);
-        size_t safe_len = (size_t)name_len - (size_t)(safe_name - name);
-        pos += header_len;
-        if (safe_len == 0)
-            continue;
-        snprintf(outpath, sizeof(outpath), "%s%s%.*s",
-                 outdir ? outdir : "", outdir ? "/" : "", (int)safe_len, safe_name);
-
-        size_t out_len = strlen(outpath);
-        if (out_len > 0 && outpath[out_len - 1] == '/') {
-            if (mkdir(outpath, 0755) != 0 && errno != EEXIST)
-                errors++;
-            continue;
-        }
-        if (mkdirs(outpath) != 0) {
-            errors++;
-            continue;
-        }
-
-        if (read_le32(data + local_offset) != 0x04034b50) {
-            errors++;
-            continue;
-        }
-        local_name_len = read_le16(data + local_offset + 26);
-        local_extra_len = read_le16(data + local_offset + 28);
-        size_t local_header_len = 30 + (size_t)local_name_len + (size_t)local_extra_len;
-        if (local_header_len > len - (size_t)local_offset) {
-            errors++;
-            continue;
-        }
-        file_data_offset = (size_t)local_offset + local_header_len;
-        if ((size_t)compressed_size > len - file_data_offset) {
-            errors++;
-            continue;
-        }
-
-        if (uncompressed_size > MAX_UNCOMPRESSED_SIZE) {
-            fprintf(stderr, "unzip: entry '%.*s' too large (%lu bytes)\n",
-                    (int)safe_len, safe_name, (unsigned long)uncompressed_size);
-            errors++;
-            continue;
-        }
-        out = (unsigned char *)malloc(uncompressed_size > 0 ? uncompressed_size : 1);
-        if (!out) {
-            errors++;
-            continue;
-        }
-        if (method == 0) {
-            if (compressed_size != uncompressed_size) {
-                errors++;
-                free(out);
-                continue;
-            }
-            memcpy(out, data + file_data_offset, uncompressed_size);
-        } else if (method == Z_DEFLATED) {
-            if (inflate_raw_entry(data + file_data_offset, compressed_size, out, uncompressed_size) != 0) {
-                errors++;
-                free(out);
-                continue;
-            }
-        } else {
-            fprintf(stderr, "unzip: unsupported compression method %u for '%.*s'\n", method, name_len, name);
-            errors++;
-            free(out);
-            continue;
-        }
-
-        int fd = open(outpath, O_WRONLY | O_CREAT | O_TRUNC, 0644);
-        if (fd < 0) {
-            fprintf(stderr, "unzip: cannot create '%s': %s\n", outpath, strerror(errno));
-            errors++;
-            free(out);
-            continue;
-        }
-        size_t written = 0;
-        while (written < uncompressed_size) {
-            ssize_t n = write(fd, out + written, uncompressed_size - written);
-            if (n <= 0) {
-                errors++;
-                break;
-            }
-            written += (size_t)n;
-        }
-        close(fd);
-        free(out);
-    }
-
-    free(data);
-    if (errors > 0) {
-        fprintf(stderr, "unzip: completed with %d error(s)\n", errors);
-        return 1;
-    }
-    return 0;
-}
-
-/* List archive contents */
-static int list_archive(const char *archive) {
-    unzFile uf = open_archive(archive);
-    if (!uf) {
-        return simple_list_archive(archive);
-    }
-
-    unz_global_info gi;
-    if (unzGetGlobalInfo(uf, &gi) != UNZ_OK) {
-        fprintf(stderr, "unzip: cannot read archive info\n");
-        unzClose(uf);
-        return 1;
-    }
-
-    printf("  Length      Name\n");
-    printf("---------  ----\n");
-
-    unsigned long total_size = 0;
-    for (uLong i = 0; i < gi.number_entry; i++) {
-        char filename[MAX_PATH_LEN];
-        unz_file_info fi;
-        if (unzGetCurrentFileInfo(uf, &fi, filename, sizeof(filename),
-                                  NULL, 0, NULL, 0) != UNZ_OK) {
-            fprintf(stderr, "unzip: error reading file info\n");
-            unzClose(uf);
-            return 1;
-        }
-
-        printf("%9lu  %s\n", fi.uncompressed_size, filename);
-        total_size += fi.uncompressed_size;
-
-        if (i + 1 < gi.number_entry) {
-            if (unzGoToNextFile(uf) != UNZ_OK) {
-                fprintf(stderr, "unzip: error iterating archive\n");
-                unzClose(uf);
-                return 1;
-            }
-        }
-    }
-
-    printf("---------  ----\n");
-    printf("%9lu  %lu file(s)\n", total_size, gi.number_entry);
-
-    unzClose(uf);
-    return 0;
-}
-
-/* Extract a single file from the archive */
-static int extract_current_file(unzFile uf, const char *outdir) {
-    char filename[MAX_PATH_LEN];
-    unz_file_info fi;
-    if (unzGetCurrentFileInfo(uf, &fi, filename, sizeof(filename),
-                              NULL, 0, NULL, 0) != UNZ_OK) {
-        fprintf(stderr, "unzip: error reading file info\n");
-        return -1;
-    }
-
-    /* Build output path */
-    char outpath[MAX_PATH_LEN];
-    if (outdir) {
-        snprintf(outpath, sizeof(outpath), "%s/%s", outdir, filename);
-    } else {
-        snprintf(outpath, sizeof(outpath), "%s", filename);
-    }
-
-    /* Directory entry (trailing slash) */
-    size_t namelen = strlen(outpath);
-    if (namelen > 0 && outpath[namelen - 1] == '/') {
-        if (mkdir(outpath, 0755) != 0 && errno != EEXIST) {
-            fprintf(stderr, "unzip: cannot create directory '%s': %s\n",
-                    outpath, strerror(errno));
-            return -1;
-        }
-        return 0;
-    }
-
-    /* Ensure parent directory exists */
-    if (mkdirs(outpath) != 0) {
-        fprintf(stderr, "unzip: cannot create parent directories for '%s'\n", outpath);
-        return -1;
-    }
-
-    if (unzOpenCurrentFile(uf) != UNZ_OK) {
-        fprintf(stderr, "unzip: cannot open '%s' in archive\n", filename);
-        return -1;
-    }
-
-    FILE *fout = fopen(outpath, "wb");
-    if (!fout) {
-        fprintf(stderr, "unzip: cannot create '%s': %s\n", outpath, strerror(errno));
-        unzCloseCurrentFile(uf);
-        return -1;
-    }
-
-    unsigned char buf[WRITE_BUF_SIZE];
-    int err = UNZ_OK;
-    int bytes;
-    while ((bytes = unzReadCurrentFile(uf, buf, sizeof(buf))) > 0) {
-        if (fwrite(buf, 1, (size_t)bytes, fout) != (size_t)bytes) {
-            fprintf(stderr, "unzip: error writing '%s'\n", outpath);
-            err = -1;
-            break;
-        }
-    }
-    if (bytes < 0) {
-        fprintf(stderr, "unzip: error reading '%s' from archive\n", filename);
-        err = -1;
-    }
-
-    fclose(fout);
-    unzCloseCurrentFile(uf);
-    return err;
-}
-
-/* Extract all files from the archive */
-static int extract_archive(const char *archive, const char *outdir) {
-    unzFile uf = open_archive(archive);
-    if (!uf) {
-        return simple_extract_archive(archive, outdir);
-    }
-
-    /* Create output directory if specified */
-    if (outdir) {
-        if (mkdir(outdir, 0755) != 0 && errno != EEXIST) {
-            fprintf(stderr, "unzip: cannot create directory '%s': %s\n",
-                    outdir, strerror(errno));
-            unzClose(uf);
-            return 1;
-        }
-    }
-
-    unz_global_info gi;
-    if (unzGetGlobalInfo(uf, &gi) != UNZ_OK) {
-        fprintf(stderr, "unzip: cannot read archive info\n");
-        unzClose(uf);
-        return 1;
-    }
-
-    int errors = 0;
-    for (uLong i = 0; i < gi.number_entry; i++) {
-        if (extract_current_file(uf, outdir) != 0)
-            errors++;
-
-        if (i + 1 < gi.number_entry) {
-            if (unzGoToNextFile(uf) != UNZ_OK) {
-                fprintf(stderr, "unzip: error iterating archive\n");
-                unzClose(uf);
-                return 1;
-            }
-        }
-    }
-
-    unzClose(uf);
-
-    if (errors > 0) {
-        fprintf(stderr, "unzip: completed with %d error(s)\n", errors);
-        return 1;
-    }
-    return 0;
-}
-
-static void print_usage(void) {
-    fprintf(stderr, "Usage: unzip [-l] [-d dir] archive.zip\n");
-    fprintf(stderr, "  -l       List archive contents\n");
-    fprintf(stderr, "  -d dir   Extract to directory\n");
-}
-
-int main(int argc, char *argv[]) {
-    if (argc < 2) {
-        print_usage();
-        return 1;
-    }
-
-    int list_mode = 0;
-    const char *outdir = NULL;
-    const char *archive = NULL;
-    int i = 1;
-
-    /* Parse flags */
-    while (i < argc && argv[i][0] == '-') {
-        if (strcmp(argv[i], "-l") == 0) {
-            list_mode = 1;
-            i++;
-        } else if (strcmp(argv[i], "-d") == 0) {
-            if (i + 1 >= argc) {
-                fprintf(stderr, "unzip: -d requires a directory argument\n");
-                return 1;
-            }
-            outdir = argv[i + 1];
-            i += 2;
-        } else if (strcmp(argv[i], "--") == 0) {
-            i++;
-            break;
-        } else {
-            fprintf(stderr, "unzip: unknown option '%s'\n", argv[i]);
-            print_usage();
-            return 1;
-        }
-    }
-
-    if (i >= argc) {
-        fprintf(stderr, "unzip: no archive specified\n");
-        print_usage();
-        return 1;
-    }
-
-    archive = argv[i];
-
-    if (list_mode) {
-        return list_archive(archive);
-    } else {
-        return extract_archive(archive, outdir);
-    }
-}
diff --git a/registry/native/c/programs/userinfo.c b/registry/native/c/programs/userinfo.c
deleted file mode 100644
index 431f76016..000000000
--- a/registry/native/c/programs/userinfo.c
+++ /dev/null
@@ -1,12 +0,0 @@
-/* userinfo.c — print uid, gid, euid, egid */
-#include <stdio.h>
-#include <sys/types.h>
-#include <unistd.h>
-
-int main(void) {
-    printf("uid=%u\n", (unsigned)getuid());
-    printf("gid=%u\n", (unsigned)getgid());
-    printf("euid=%u\n", (unsigned)geteuid());
-    printf("egid=%u\n", (unsigned)getegid());
-    return 0;
-}
diff --git a/registry/native/c/programs/waitpid_edge.c b/registry/native/c/programs/waitpid_edge.c
deleted file mode 100644
index fbfbe68b9..000000000
--- a/registry/native/c/programs/waitpid_edge.c
+++ /dev/null
@@ -1,101 +0,0 @@
-/* waitpid_edge.c -- edge case tests for waitpid with concurrent children and invalid PIDs */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-#include <errno.h>
-
-#include "posix_spawn_compat.h"
-
-extern char **environ;
-
-int main(void) {
-    /* Warmup piped spawn (first piped spawn has a capture quirk) */
-    {
-        pid_t wp;
-        char *wargv[] = {"true", NULL};
-        posix_spawnp(&wp, "true", NULL, NULL, wargv, environ);
-        waitpid(wp, NULL, 0);
-    }
-
-    /* Test 1: spawn 3 children with different exit codes, waitpid each by specific PID */
-    {
-        pid_t c1, c2, c3;
-        char *a1[] = {"sh", "-c", "exit 1", NULL};
-        char *a2[] = {"sh", "-c", "exit 2", NULL};
-        char *a3[] = {"sh", "-c", "exit 3", NULL};
-        int err;
-
-        err = posix_spawnp(&c1, "sh", NULL, NULL, a1, environ);
-        if (err != 0) { printf("test1: FAIL (spawn c1 err=%d)\n", err); return 1; }
-
-        err = posix_spawnp(&c2, "sh", NULL, NULL, a2, environ);
-        if (err != 0) { printf("test1: FAIL (spawn c2 err=%d)\n", err); return 1; }
-
-        err = posix_spawnp(&c3, "sh", NULL, NULL, a3, environ);
-        if (err != 0) { printf("test1: FAIL (spawn c3 err=%d)\n", err); return 1; }
-
-        int s1, s2, s3;
-        pid_t r1 = waitpid(c1, &s1, 0);
-        pid_t r2 = waitpid(c2, &s2, 0);
-        pid_t r3 = waitpid(c3, &s3, 0);
-
-        int e1 = WIFEXITED(s1) ? WEXITSTATUS(s1) : -1;
-        int e2 = WIFEXITED(s2) ? WEXITSTATUS(s2) : -1;
-        int e3 = WIFEXITED(s3) ? WEXITSTATUS(s3) : -1;
-
-        int ok = (r1 == c1 && e1 == 1 &&
-                  r2 == c2 && e2 == 2 &&
-                  r3 == c3 && e3 == 3);
-        printf("test1_c1_exit: %d\n", e1);
-        printf("test1_c2_exit: %d\n", e2);
-        printf("test1_c3_exit: %d\n", e3);
-        printf("test1: %s\n", ok ? "ok" : "FAIL");
-    }
-
-    /* Test 2: spawn 2 children, use wait() (waitpid -1) twice, verify both reaped */
-    {
-        pid_t c1, c2;
-        char *a1[] = {"true", NULL};
-        char *a2[] = {"true", NULL};
-        int err;
-
-        err = posix_spawnp(&c1, "true", NULL, NULL, a1, environ);
-        if (err != 0) { printf("test2: FAIL (spawn c1 err=%d)\n", err); return 1; }
-
-        err = posix_spawnp(&c2, "true", NULL, NULL, a2, environ);
-        if (err != 0) { printf("test2: FAIL (spawn c2 err=%d)\n", err); return 1; }
-
-        int s1, s2;
-        pid_t r1 = wait(&s1);
-        pid_t r2 = wait(&s2);
-
-        /* Both returned PIDs must be valid (> 0) and distinct */
-        int valid = (r1 > 0 && r2 > 0 && r1 != r2);
-        /* Both must be one of c1 or c2 */
-        int known = ((r1 == c1 || r1 == c2) && (r2 == c1 || r2 == c2));
-        /* Both must have exited successfully */
-        int exited = (WIFEXITED(s1) && WEXITSTATUS(s1) == 0 &&
-                      WIFEXITED(s2) && WEXITSTATUS(s2) == 0);
-
-        printf("test2_r1_valid: %s\n", (r1 > 0) ? "yes" : "no");
-        printf("test2_r2_valid: %s\n", (r2 > 0) ? "yes" : "no");
-        printf("test2_distinct: %s\n", (r1 != r2) ? "yes" : "no");
-        printf("test2: %s\n", (valid && known && exited) ? "ok" : "FAIL");
-    }
-
-    /* Test 3: waitpid with PID that was never spawned, verify returns -1 */
-    {
-        errno = 0;
-        int status;
-        pid_t ret = waitpid(99999, &status, 0);
-        int err = errno;
-        /* POSIX: returns -1, errno = ECHILD (or ESRCH in some implementations) */
-        int failed = (ret == -1 && err != 0);
-        printf("test3_ret: %d\n", (int)ret);
-        printf("test3_failed: %s\n", failed ? "yes" : "no");
-        printf("test3: %s\n", failed ? "ok" : "FAIL");
-    }
-
-    return 0;
-}
diff --git a/registry/native/c/programs/waitpid_return.c b/registry/native/c/programs/waitpid_return.c
deleted file mode 100644
index 914250afa..000000000
--- a/registry/native/c/programs/waitpid_return.c
+++ /dev/null
@@ -1,49 +0,0 @@
-/* waitpid_return.c -- verify waitpid returns the correct child PID */
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <unistd.h>
-
-#include "posix_spawn_compat.h"
-
-extern char **environ;
-
-int main(void) {
-    /* Test 1: waitpid with specific PID returns that PID */
-    pid_t child1;
-    char *argv1[] = {"true", NULL};
-    int err = posix_spawnp(&child1, "true", NULL, NULL, argv1, environ);
-    if (err != 0) {
-        fprintf(stderr, "spawn child1 failed: %d\n", err);
-        return 1;
-    }
-
-    int status1;
-    pid_t ret1 = waitpid(child1, &status1, 0);
-    printf("test1_spawn_pid: %d\n", (int)child1);
-    printf("test1_waitpid_ret: %d\n", (int)ret1);
-    printf("test1_match: %s\n", (ret1 == child1) ? "yes" : "no");
-    printf("test1_exit: %d\n", WIFEXITED(status1) ? WEXITSTATUS(status1) : -1);
-
-    /* Test 2: wait() (waitpid(-1)) returns the actual child PID */
-    pid_t child2;
-    char *argv2[] = {"true", NULL};
-    err = posix_spawnp(&child2, "true", NULL, NULL, argv2, environ);
-    if (err != 0) {
-        fprintf(stderr, "spawn child2 failed: %d\n", err);
-        return 1;
-    }
-
-    int status2;
-    pid_t ret2 = wait(&status2);
-    printf("test2_spawn_pid: %d\n", (int)child2);
-    printf("test2_wait_ret: %d\n", (int)ret2);
-    printf("test2_match: %s\n", (ret2 == child2) ? "yes" : "no");
-    printf("test2_exit: %d\n", WIFEXITED(status2) ? WEXITSTATUS(status2) : -1);
-
-    /* Test 3: waitpid returns > 0 (not -1 or 0) */
-    printf("test3_ret1_positive: %s\n", (ret1 > 0) ? "yes" : "no");
-    printf("test3_ret2_positive: %s\n", (ret2 > 0) ? "yes" : "no");
-
-    return 0;
-}
diff --git a/registry/native/c/programs/wc.c b/registry/native/c/programs/wc.c
deleted file mode 100644
index b5fcf7e83..000000000
--- a/registry/native/c/programs/wc.c
+++ /dev/null
@@ -1,23 +0,0 @@
-/* wc.c — word/line/byte count from stdin */
-#include <stdio.h>
-#include <ctype.h>
-
-int main(void) {
-    int c;
-    long lines = 0, words = 0, bytes = 0;
-    int in_word = 0;
-
-    while ((c = getchar()) != EOF) {
-        bytes++;
-        if (c == '\n') lines++;
-        if (isspace(c)) {
-            in_word = 0;
-        } else if (!in_word) {
-            in_word = 1;
-            words++;
-        }
-    }
-
-    printf("%ld %ld %ld\n", lines, words, bytes);
-    return 0;
-}
diff --git a/registry/native/c/programs/wget.c b/registry/native/c/programs/wget.c
deleted file mode 100644
index e0e0ca02f..000000000
--- a/registry/native/c/programs/wget.c
+++ /dev/null
@@ -1,174 +0,0 @@
-/*
- * wget.c - minimal wget implementation built on libcurl
- *
- * Supports common wget options for HTTP/HTTPS downloads:
- *   URL                Download file to current directory (basename from URL)
- *   -O FILE            Write output to specific file ("-" for stdout)
- *   -q                 Quiet mode (suppress progress/messages)
- *   -L                 Follow redirects (enabled by default, like real wget)
- *   --no-check-certificate  Skip TLS certificate verification
- */
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <curl/curl.h>
-
-/* Write callback: write to FILE* */
-static size_t write_callback(char *ptr, size_t size, size_t nmemb,
-                             void *userdata) {
-    FILE *out = (FILE *)userdata;
-    return fwrite(ptr, size, nmemb, out);
-}
-
-/* Extract filename from URL path, fallback to "index.html" */
-static const char *basename_from_url(const char *url) {
-    /* Skip scheme */
-    const char *p = strstr(url, "://");
-    if (p) p += 3; else p = url;
-
-    /* Find last '/' in path (before query string) */
-    const char *last_slash = NULL;
-    const char *q = p;
-    while (*q && *q != '?' && *q != '#') {
-        if (*q == '/') last_slash = q;
-        q++;
-    }
-
-    if (last_slash && last_slash[1] && last_slash[1] != '?' && last_slash[1] != '#') {
-        /* Extract filename between last slash and query/end */
-        const char *start = last_slash + 1;
-        size_t len = 0;
-        while (start[len] && start[len] != '?' && start[len] != '#') len++;
-        if (len > 0) {
-            static char buf[256];
-            if (len >= sizeof(buf)) len = sizeof(buf) - 1;
-            memcpy(buf, start, len);
-            buf[len] = '\0';
-            return buf;
-        }
-    }
-
-    return "index.html";
-}
-
-int main(int argc, char *argv[]) {
-    const char *url = NULL;
-    const char *output_file = NULL;
-    int quiet = 0;
-    int no_check_cert = 0;
-    int output_to_stdout = 0;
-
-    /* Parse arguments */
-    for (int i = 1; i < argc; i++) {
-        if (strcmp(argv[i], "-O") == 0 && i + 1 < argc) {
-            output_file = argv[++i];
-            if (strcmp(output_file, "-") == 0) {
-                output_to_stdout = 1;
-                output_file = NULL;
-            }
-        } else if (strcmp(argv[i], "-q") == 0) {
-            quiet = 1;
-        } else if (strcmp(argv[i], "-L") == 0) {
-            /* Follow redirects — already default, accept silently */
-        } else if (strcmp(argv[i], "--no-check-certificate") == 0) {
-            no_check_cert = 1;
-        } else if (argv[i][0] != '-') {
-            url = argv[i];
-        } else {
-            /* Unknown option — skip silently for forward compat */
-        }
-    }
-
-    if (!url) {
-        fprintf(stderr, "wget: missing URL\nUsage: wget [OPTION]... [URL]...\n");
-        return 1;
-    }
-
-    CURLcode res;
-    curl_global_init(CURL_GLOBAL_DEFAULT);
-
-    CURL *curl = curl_easy_init();
-    if (!curl) {
-        fprintf(stderr, "wget: failed to initialize\n");
-        curl_global_cleanup();
-        return 1;
-    }
-
-    /* Determine output destination */
-    FILE *out = NULL;
-    const char *dest_name = NULL;
-
-    if (output_to_stdout) {
-        out = stdout;
-    } else {
-        dest_name = output_file ? output_file : basename_from_url(url);
-        out = fopen(dest_name, "wb");
-        if (!out) {
-            fprintf(stderr, "wget: cannot open '%s' for writing\n", dest_name);
-            curl_easy_cleanup(curl);
-            curl_global_cleanup();
-            return 1;
-        }
-    }
-
-    curl_easy_setopt(curl, CURLOPT_URL, url);
-    curl_easy_setopt(curl, CURLOPT_WRITEFUNCTION, write_callback);
-    curl_easy_setopt(curl, CURLOPT_WRITEDATA, out);
-
-    /* wget follows redirects by default */
-    curl_easy_setopt(curl, CURLOPT_FOLLOWLOCATION, 1L);
-    curl_easy_setopt(curl, CURLOPT_MAXREDIRS, 20L);
-
-    /* Suppress progress meter */
-    curl_easy_setopt(curl, CURLOPT_NOPROGRESS, 1L);
-
-    /* TLS: skip certificate verification */
-    if (no_check_cert) {
-        curl_easy_setopt(curl, CURLOPT_SSL_VERIFYPEER, 0L);
-        curl_easy_setopt(curl, CURLOPT_SSL_VERIFYHOST, 0L);
-    }
-
-    /* Perform request */
-    res = curl_easy_perform(curl);
-
-    int exit_code = 0;
-
-    if (res != CURLE_OK) {
-        if (!quiet) {
-            fprintf(stderr, "wget: failed: %s\n", curl_easy_strerror(res));
-        }
-        exit_code = 1;
-        /* Remove partial download on failure (unless stdout) */
-        if (!output_to_stdout && dest_name) {
-            fclose(out);
-            out = NULL;
-            remove(dest_name);
-        }
-    } else {
-        /* Check HTTP response code */
-        long http_code = 0;
-        curl_easy_getinfo(curl, CURLINFO_RESPONSE_CODE, &http_code);
-        if (http_code >= 400) {
-            if (!quiet) {
-                fprintf(stderr, "wget: server returned HTTP %ld\n", http_code);
-            }
-            exit_code = 8; /* wget uses exit code 8 for server errors */
-            /* Remove error response file (unless stdout) */
-            if (!output_to_stdout && dest_name) {
-                fclose(out);
-                out = NULL;
-                remove(dest_name);
-            }
-        }
-    }
-
-    /* Cleanup */
-    curl_easy_cleanup(curl);
-    if (out && out != stdout) {
-        fclose(out);
-    }
-    curl_global_cleanup();
-
-    return exit_code;
-}
diff --git a/registry/native/c/programs/zip.c b/registry/native/c/programs/zip.c
deleted file mode 100644
index d8eca7a5b..000000000
--- a/registry/native/c/programs/zip.c
+++ /dev/null
@@ -1,203 +0,0 @@
-/* zip.c — Create ZIP archives using zlib/minizip
- *
- * Usage: zip [-r] archive.zip file1 [file2 ...]
- *   -r   Recurse into directories
- */
-
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <sys/stat.h>
-#include <dirent.h>
-#include <time.h>
-#include "zip.h"
-
-#define MAX_PATH_LEN 4096
-#define READ_BUF_SIZE 8192
-
-/* Add a single file to the zip archive */
-static int add_file_to_zip(zipFile zf, const char *filepath, const char *archivepath) {
-    FILE *fin = fopen(filepath, "rb");
-    if (!fin) {
-        fprintf(stderr, "zip: cannot open '%s': ", filepath);
-        perror("");
-        return -1;
-    }
-
-    zip_fileinfo zi;
-    memset(&zi, 0, sizeof(zi));
-
-    /* Get file modification time */
-    struct stat st;
-    if (stat(filepath, &st) == 0) {
-        struct tm *lt = localtime(&st.st_mtime);
-        if (lt) {
-            zi.tmz_date.tm_sec  = lt->tm_sec;
-            zi.tmz_date.tm_min  = lt->tm_min;
-            zi.tmz_date.tm_hour = lt->tm_hour;
-            zi.tmz_date.tm_mday = lt->tm_mday;
-            zi.tmz_date.tm_mon  = lt->tm_mon;
-            zi.tmz_date.tm_year = lt->tm_year;
-        }
-    }
-
-    int err = zipOpenNewFileInZip(zf, archivepath, &zi,
-        NULL, 0, NULL, 0, NULL,
-        Z_DEFLATED, Z_DEFAULT_COMPRESSION);
-    if (err != ZIP_OK) {
-        fprintf(stderr, "zip: error opening '%s' in archive\n", archivepath);
-        fclose(fin);
-        return -1;
-    }
-
-    unsigned char buf[READ_BUF_SIZE];
-    size_t n;
-    while ((n = fread(buf, 1, sizeof(buf), fin)) > 0) {
-        if (zipWriteInFileInZip(zf, buf, (unsigned int)n) != ZIP_OK) {
-            fprintf(stderr, "zip: error writing '%s' to archive\n", archivepath);
-            fclose(fin);
-            zipCloseFileInZip(zf);
-            return -1;
-        }
-    }
-
-    fclose(fin);
-    zipCloseFileInZip(zf);
-    return 0;
-}
-
-/* Recursively add directory contents to zip */
-static int add_dir_to_zip(zipFile zf, const char *dirpath, const char *archivebase) {
-    DIR *d = opendir(dirpath);
-    if (!d) {
-        fprintf(stderr, "zip: cannot open directory '%s': ", dirpath);
-        perror("");
-        return -1;
-    }
-
-    /* Add directory entry (trailing slash) */
-    char direntry[MAX_PATH_LEN];
-    snprintf(direntry, sizeof(direntry), "%s/", archivebase);
-    zip_fileinfo zi;
-    memset(&zi, 0, sizeof(zi));
-    zipOpenNewFileInZip(zf, direntry, &zi, NULL, 0, NULL, 0, NULL, 0, 0);
-    zipCloseFileInZip(zf);
-
-    struct dirent *entry;
-    int err = 0;
-    while ((entry = readdir(d)) != NULL) {
-        if (strcmp(entry->d_name, ".") == 0 || strcmp(entry->d_name, "..") == 0)
-            continue;
-
-        char fullpath[MAX_PATH_LEN];
-        char arcpath[MAX_PATH_LEN];
-        snprintf(fullpath, sizeof(fullpath), "%s/%s", dirpath, entry->d_name);
-        snprintf(arcpath, sizeof(arcpath), "%s/%s", archivebase, entry->d_name);
-
-        struct stat st;
-        if (stat(fullpath, &st) != 0) {
-            fprintf(stderr, "zip: cannot stat '%s': ", fullpath);
-            perror("");
-            err = -1;
-            continue;
-        }
-
-        if (S_ISDIR(st.st_mode)) {
-            if (add_dir_to_zip(zf, fullpath, arcpath) != 0)
-                err = -1;
-        } else {
-            if (add_file_to_zip(zf, fullpath, arcpath) != 0)
-                err = -1;
-        }
-    }
-
-    closedir(d);
-    return err;
-}
-
-static void print_usage(void) {
-    fprintf(stderr, "Usage: zip [-r] archive.zip file1 [file2 ...]\n");
-    fprintf(stderr, "  -r   Recurse into directories\n");
-}
-
-int main(int argc, char *argv[]) {
-    if (argc < 3) {
-        print_usage();
-        return 1;
-    }
-
-    int recursive = 0;
-    int arg_start = 1;
-
-    /* Parse flags */
-    while (arg_start < argc && argv[arg_start][0] == '-') {
-        if (strcmp(argv[arg_start], "-r") == 0) {
-            recursive = 1;
-            arg_start++;
-        } else if (strcmp(argv[arg_start], "--") == 0) {
-            arg_start++;
-            break;
-        } else {
-            fprintf(stderr, "zip: unknown option '%s'\n", argv[arg_start]);
-            print_usage();
-            return 1;
-        }
-    }
-
-    if (argc - arg_start < 2) {
-        print_usage();
-        return 1;
-    }
-
-    const char *archive = argv[arg_start];
-    arg_start++;
-
-    zipFile zf = zipOpen(archive, APPEND_STATUS_CREATE);
-    if (!zf) {
-        fprintf(stderr, "zip: cannot create '%s'\n", archive);
-        return 1;
-    }
-
-    int errors = 0;
-    for (int i = arg_start; i < argc; i++) {
-        const char *path = argv[i];
-
-        /* Strip trailing slashes for consistent archive paths */
-        char cleanpath[MAX_PATH_LEN];
-        strncpy(cleanpath, path, sizeof(cleanpath) - 1);
-        cleanpath[sizeof(cleanpath) - 1] = '\0';
-        size_t len = strlen(cleanpath);
-        while (len > 1 && cleanpath[len - 1] == '/')
-            cleanpath[--len] = '\0';
-
-        struct stat st;
-        if (stat(cleanpath, &st) != 0) {
-            fprintf(stderr, "zip: cannot stat '%s': ", cleanpath);
-            perror("");
-            errors++;
-            continue;
-        }
-
-        if (S_ISDIR(st.st_mode)) {
-            if (!recursive) {
-                fprintf(stderr, "zip: '%s' is a directory (use -r to recurse)\n", cleanpath);
-                errors++;
-                continue;
-            }
-            if (add_dir_to_zip(zf, cleanpath, cleanpath) != 0)
-                errors++;
-        } else {
-            if (add_file_to_zip(zf, cleanpath, cleanpath) != 0)
-                errors++;
-        }
-    }
-
-    zipClose(zf, NULL);
-
-    if (errors > 0) {
-        fprintf(stderr, "zip: completed with %d error(s)\n", errors);
-        return 1;
-    }
-
-    return 0;
-}
diff --git a/registry/native/c/scripts/build-curl-upstream.sh b/registry/native/c/scripts/build-curl-upstream.sh
deleted file mode 100644
index d2ffe82c2..000000000
--- a/registry/native/c/scripts/build-curl-upstream.sh
+++ /dev/null
@@ -1,251 +0,0 @@
-#!/usr/bin/env bash
-set -euo pipefail
-
-usage() {
-  cat <<'EOF'
-Usage: build-curl-upstream.sh \
-  --version <curl-version> \
-  --tag <curl-tag> \
-  --url <release-url> \
-  --cache-dir <cache-dir> \
-  --build-dir <build-dir> \
-  --overlay-dir <overlay-dir> \
-  --cc <cc> \
-  --ar <ar> \
-  --ranlib <ranlib> \
-  --output <output>
-EOF
-}
-
-VERSION=""
-TAG=""
-URL=""
-CACHE_DIR=""
-BUILD_DIR=""
-OVERLAY_DIR=""
-CC_CMD=""
-AR_CMD=""
-RANLIB_CMD=""
-OUTPUT=""
-
-while [[ $# -gt 0 ]]; do
-  case "$1" in
-    --version)
-      VERSION="$2"
-      shift 2
-      ;;
-    --tag)
-      TAG="$2"
-      shift 2
-      ;;
-    --url)
-      URL="$2"
-      shift 2
-      ;;
-    --cache-dir)
-      CACHE_DIR="$2"
-      shift 2
-      ;;
-    --build-dir)
-      BUILD_DIR="$2"
-      shift 2
-      ;;
-    --overlay-dir)
-      OVERLAY_DIR="$2"
-      shift 2
-      ;;
-    --cc)
-      CC_CMD="$2"
-      shift 2
-      ;;
-    --ar)
-      AR_CMD="$2"
-      shift 2
-      ;;
-    --ranlib)
-      RANLIB_CMD="$2"
-      shift 2
-      ;;
-    --output)
-      OUTPUT="$2"
-      shift 2
-      ;;
-    *)
-      echo "Unknown argument: $1" >&2
-      usage >&2
-      exit 1
-      ;;
-  esac
-done
-
-if [[ -z "$VERSION" || -z "$TAG" || -z "$URL" || -z "$CACHE_DIR" || -z "$BUILD_DIR" || -z "$OVERLAY_DIR" || -z "$CC_CMD" || -z "$AR_CMD" || -z "$RANLIB_CMD" || -z "$OUTPUT" ]]; then
-  usage >&2
-  exit 1
-fi
-
-fetch() {
-  local url="$1"
-  local out="$2"
-  if command -v curl >/dev/null 2>&1; then
-    curl -fSL "$url" -o "$out"
-  elif command -v wget >/dev/null 2>&1; then
-    wget -q "$url" -O "$out"
-  else
-    echo "Neither curl nor wget is available to fetch $url" >&2
-    exit 1
-  fi
-}
-
-mkdir -p "$CACHE_DIR"
-rm -rf "$BUILD_DIR"
-mkdir -p "$BUILD_DIR"
-
-TARBALL="$CACHE_DIR/curl-${VERSION}.tar.xz"
-if [[ ! -f "$TARBALL" ]]; then
-  echo "Fetching upstream curl ${VERSION} release tarball..."
-  fetch "$URL" "$TARBALL"
-fi
-
-echo "Extracting upstream curl ${VERSION}..."
-tar -xf "$TARBALL" -C "$BUILD_DIR"
-
-SRC_DIR="$BUILD_DIR/curl-${VERSION}"
-if [[ ! -d "$SRC_DIR" ]]; then
-  echo "Expected extracted source at $SRC_DIR" >&2
-  exit 1
-fi
-
-echo "Applying secure-exec overlay..."
-while IFS= read -r -d '' file; do
-  rel="${file#$OVERLAY_DIR/}"
-  mkdir -p "$SRC_DIR/$(dirname "$rel")"
-  cp "$file" "$SRC_DIR/$rel"
-done < <(find "$OVERLAY_DIR" -type f -print0)
-
-pushd "$SRC_DIR" >/dev/null
-
-echo "Patching WASI-incompatible signal/setjmp includes..."
-python3 - <<'PY'
-from pathlib import Path
-
-replacements = {
-    "lib/hostip.h": [
-        (
-            '#include <setjmp.h>\n',
-            '#ifndef __wasi__\n#include <setjmp.h>\n#endif\n',
-        ),
-    ],
-    "lib/hostip.c": [
-        (
-            '#include <setjmp.h>\n#include <signal.h>\n',
-            '#ifndef __wasi__\n#include <setjmp.h>\n#include <signal.h>\n#endif\n',
-        ),
-    ],
-    "lib/transfer.c": [
-        (
-            '#include <signal.h>\n',
-            '#ifndef __wasi__\n#include <signal.h>\n#endif\n',
-        ),
-    ],
-    "src/tool_main.c": [
-        (
-            '#include <signal.h>\n',
-            '#ifndef __wasi__\n#include <signal.h>\n#endif\n',
-        ),
-    ],
-}
-
-for rel_path, edits in replacements.items():
-    path = Path(rel_path)
-    updated = path.read_text()
-    for old, new in edits:
-        text = updated
-        if new in text:
-            continue
-        if old not in text:
-            raise SystemExit(f"Expected to patch {rel_path}, but no replacement matched")
-        updated = text.replace(old, new)
-    path.write_text(updated)
-PY
-
-echo "Configuring upstream curl for wasm32-wasip1..."
-CC="$CC_CMD" \
-AR="$AR_CMD" \
-RANLIB="$RANLIB_CMD" \
-CFLAGS="-O2 -flto" \
-./configure \
-  --host=wasm32-unknown-wasi \
-  --disable-shared \
-  --disable-threaded-resolver \
-  --disable-ldap \
-  --without-zlib \
-  --without-brotli \
-  --without-zstd \
-  --without-libpsl \
-  --without-ca-bundle \
-  --without-ca-path \
-  --without-ssl
-
-echo "Enabling the secure-exec WASI TLS backend in generated curl config..."
-python3 - <<'PY'
-from pathlib import Path
-
-config = Path("lib/curl_config.h")
-text = config.read_text()
-
-updates = {
-    "#define CURL_DISABLE_HSTS 1": "/* #undef CURL_DISABLE_HSTS */",
-}
-for old, new in updates.items():
-    text = text.replace(old, new)
-
-if "#define USE_WASI_TLS 1" not in text:
-    text += "\n#define USE_WASI_TLS 1\n"
-if "#define CURL_DISABLE_OPENSSL_AUTO_LOAD_CONFIG 1" not in text:
-    text += "#define CURL_DISABLE_OPENSSL_AUTO_LOAD_CONFIG 1\n"
-
-config.write_text(text)
-PY
-
-echo "Patching generated lib/Makefile to compile wasi_tls.c..."
-cat >> lib/Makefile <<'EOF'
-
-am_libcurl_la_OBJECTS += vtls/libcurl_la-wasi_tls.lo
-libcurl_la_LIBADD += vtls/libcurl_la-wasi_tls.lo
-libcurl.la: vtls/libcurl_la-wasi_tls.lo
-
-vtls/libcurl_la-wasi_tls.lo: vtls/$(am__dirstamp) vtls/$(DEPDIR)/$(am__dirstamp) vtls/wasi_tls.c
-	$(AM_V_CC)$(LIBTOOL) $(AM_V_lt) --tag=CC $(AM_LIBTOOLFLAGS) $(LIBTOOLFLAGS) --mode=compile $(CC) $(DEFS) $(DEFAULT_INCLUDES) $(INCLUDES) $(libcurl_la_CPPFLAGS) $(CPPFLAGS) $(libcurl_la_CFLAGS) $(CFLAGS) -MT vtls/libcurl_la-wasi_tls.lo -MD -MP -MF vtls/$(DEPDIR)/libcurl_la-wasi_tls.Tpo -c -o vtls/libcurl_la-wasi_tls.lo `test -f 'vtls/wasi_tls.c' || echo '$(srcdir)/'`vtls/wasi_tls.c
-	$(AM_V_at)$(am__mv) vtls/$(DEPDIR)/libcurl_la-wasi_tls.Tpo vtls/$(DEPDIR)/libcurl_la-wasi_tls.Plo
-EOF
-
-echo "Building upstream libcurl..."
-make -C lib libcurl.la
-
-echo "Building upstream curl tool..."
-make -C src curl
-
-BIN=""
-for candidate in "src/.libs/curl" "src/curl" "src/curl.wasm"; do
-  if [[ -f "$candidate" ]]; then
-    BIN="$candidate"
-    break
-  fi
-done
-
-if [[ -z "$BIN" ]]; then
-  echo "Unable to locate built curl binary in src/" >&2
-  exit 1
-fi
-
-mkdir -p "$(dirname "$OUTPUT")"
-if command -v wasm-opt >/dev/null 2>&1; then
-  echo "Optimizing curl WASM binary..."
-  wasm-opt -O3 --strip-debug --all-features "$BIN" -o "$OUTPUT"
-else
-  cp "$BIN" "$OUTPUT"
-fi
-
-popd >/dev/null
-
-echo "Built upstream curl at $OUTPUT"
diff --git a/registry/native/c/scripts/build-duckdb.sh b/registry/native/c/scripts/build-duckdb.sh
deleted file mode 100644
index 76320f861..000000000
--- a/registry/native/c/scripts/build-duckdb.sh
+++ /dev/null
@@ -1,109 +0,0 @@
-#!/bin/bash
-set -euo pipefail
-
-# Reference only:
-# - https://github.com/duckdb/duckdb-wasm#readme
-# - https://github.com/duckdb/duckdb-wasm/blob/main/Makefile
-# - https://github.com/duckdb/duckdb-wasm/blob/main/extension_config_wasm.cmake
-#
-# Unlike duckdb-wasm, we do not use their prebuilt WebAssembly bundles or
-# Emscripten runtime shims. This script builds upstream DuckDB directly against
-# our patched WASI/POSIX sysroot so file and network operations flow through the
-# existing registry host bindings.
-
-: "${DUCKDB_SRC_DIR:?DUCKDB_SRC_DIR is required}"
-: "${DUCKDB_BUILD_DIR:?DUCKDB_BUILD_DIR is required}"
-: "${DUCKDB_OUTPUT:?DUCKDB_OUTPUT is required}"
-: "${WASI_SDK_DIR:?WASI_SDK_DIR is required}"
-: "${SYSROOT_DIR:?SYSROOT_DIR is required}"
-: "${MODULE_PATH:?MODULE_PATH is required}"
-: "${OVERLAY_INCLUDE_DIR:?OVERLAY_INCLUDE_DIR is required}"
-: "${DUCKDB_GIT_DESCRIBE:?DUCKDB_GIT_DESCRIBE is required}"
-
-TOOLCHAIN_FILE="$WASI_SDK_DIR/share/cmake/wasi-sdk.cmake"
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-PATCH_DIR="$SCRIPT_DIR/../patches/duckdb"
-COMMON_FLAGS="-I$OVERLAY_INCLUDE_DIR -D_WASI_EMULATED_PTHREAD -D_WASI_EMULATED_MMAN -D_WASI_EMULATED_SIGNAL -D_WASI_EMULATED_PROCESS_CLOCKS"
-COMMON_CXX_FLAGS="$COMMON_FLAGS -DDUCKDB_DISABLE_EXTENSION_LOAD -DSQLITE_NOHAVE_SYSTEM -DSQLITE_OMIT_POPEN -fwasm-exceptions -DWEBDB_FAST_EXCEPTIONS=1"
-CXX_STDLIB_INCLUDE="$SYSROOT_DIR/include/wasm32-wasi/c++/v1"
-RUNTIME_LIB_DIR="$(cd "$(dirname "$SYSROOT_DIR")" && pwd)/build/llvm-runtimes-install/lib"
-SHIM_BUILD_DIR="$DUCKDB_BUILD_DIR/agentos-shims"
-SHIM_CFLAGS="--target=wasm32-wasip1 --sysroot=$SYSROOT_DIR -isystem $SYSROOT_DIR/include/wasm32-wasi -I$OVERLAY_INCLUDE_DIR -D_GNU_SOURCE"
-SHIM_OBJECTS="$SHIM_BUILD_DIR/fcntl.o $SHIM_BUILD_DIR/mlock.o $SHIM_BUILD_DIR/sched.o"
-
-if [ ! -d "$CXX_STDLIB_INCLUDE" ]; then
-  echo "missing libc++ headers at $CXX_STDLIB_INCLUDE" >&2
-  exit 1
-fi
-if [ ! -d "$RUNTIME_LIB_DIR" ]; then
-  echo "missing rebuilt C++ runtime libraries at $RUNTIME_LIB_DIR" >&2
-  exit 1
-fi
-
-if [ -d "$PATCH_DIR" ]; then
-  while IFS= read -r patch_file; do
-    if patch --dry-run -p1 -d "$DUCKDB_SRC_DIR" < "$patch_file" >/dev/null 2>&1; then
-      patch --no-backup-if-mismatch -p1 -d "$DUCKDB_SRC_DIR" < "$patch_file" >/dev/null
-    elif patch --dry-run -R -p1 -d "$DUCKDB_SRC_DIR" < "$patch_file" >/dev/null 2>&1; then
-      :
-    else
-      echo "failed to apply DuckDB patch: $patch_file" >&2
-      exit 1
-    fi
-  done < <(find "$PATCH_DIR" -name '*.patch' -type f | sort)
-fi
-
-if [ -f "$DUCKDB_BUILD_DIR/CMakeCache.txt" ]; then
-  if ! grep -Fx "CMAKE_HOME_DIRECTORY:INTERNAL=$DUCKDB_SRC_DIR" "$DUCKDB_BUILD_DIR/CMakeCache.txt" >/dev/null; then
-    echo "removing stale DuckDB CMake cache at $DUCKDB_BUILD_DIR" >&2
-    rm -rf "$DUCKDB_BUILD_DIR"
-  elif grep -E '^CMAKE_(C|CXX)_COMPILER_LAUNCHER:.*=.+$' "$DUCKDB_BUILD_DIR/CMakeCache.txt" >/dev/null; then
-    echo "removing DuckDB CMake cache with compiler launcher at $DUCKDB_BUILD_DIR" >&2
-    rm -rf "$DUCKDB_BUILD_DIR"
-  fi
-fi
-
-mkdir -p "$DUCKDB_BUILD_DIR"
-mkdir -p "$SHIM_BUILD_DIR"
-
-"$WASI_SDK_DIR/bin/clang" $SHIM_CFLAGS \
-  -c "$SCRIPT_DIR/../../patches/wasi-libc-overrides/fcntl.c" \
-  -o "$SHIM_BUILD_DIR/fcntl.o"
-"$WASI_SDK_DIR/bin/clang" $SHIM_CFLAGS \
-  -c "$SCRIPT_DIR/../../patches/wasi-libc-overrides/mlock.c" \
-  -o "$SHIM_BUILD_DIR/mlock.o"
-"$WASI_SDK_DIR/bin/clang" $SHIM_CFLAGS \
-  -c "$SCRIPT_DIR/../../patches/wasi-libc-overrides/sched.c" \
-  -o "$SHIM_BUILD_DIR/sched.o"
-
-cmake \
-  -S "$DUCKDB_SRC_DIR" \
-  -B "$DUCKDB_BUILD_DIR" \
-  -G "Unix Makefiles" \
-  -DCMAKE_TOOLCHAIN_FILE="$TOOLCHAIN_FILE" \
-  -DWASI_SDK_PREFIX="$WASI_SDK_DIR" \
-  -DCMAKE_SYSROOT="$SYSROOT_DIR" \
-  -DCMAKE_MODULE_PATH="$MODULE_PATH" \
-  -DCMAKE_BUILD_TYPE=Release \
-  -DCMAKE_C_FLAGS="$COMMON_FLAGS" \
-  -DCMAKE_CXX_FLAGS="$COMMON_CXX_FLAGS -isystem $CXX_STDLIB_INCLUDE" \
-  -DCMAKE_C_COMPILER_LAUNCHER="" \
-  -DCMAKE_CXX_COMPILER_LAUNCHER="" \
-  -DCMAKE_EXE_LINKER_FLAGS="$SHIM_OBJECTS -L$RUNTIME_LIB_DIR -fwasm-exceptions -lwasi-emulated-mman -lwasi-emulated-signal -lwasi-emulated-process-clocks" \
-  -DCMAKE_SHARED_LINKER_FLAGS="-L$RUNTIME_LIB_DIR -fwasm-exceptions" \
-  -DCMAKE_CXX_STANDARD_LIBRARIES="-lc++ -lc++abi -lunwind -lc" \
-  -DBUILD_UNITTESTS=0 \
-  -DENABLE_UNITTEST_CPP_TESTS=0 \
-  -DBUILD_BENCHMARKS=0 \
-  -DENABLE_SANITIZER=0 \
-  -DENABLE_UBSAN=0 \
-  -DDISABLE_THREADS=1 \
-  -DSMALLER_BINARY=1 \
-  -DDISABLE_EXTENSION_LOAD=1 \
-  -DBUILD_EXTENSIONS=core_functions \
-  -DSKIP_EXTENSIONS="parquet;jemalloc" \
-  -DDUCKDB_EXPLICIT_PLATFORM=wasm32-wasip1-posix \
-  -DOVERRIDE_GIT_DESCRIBE="$DUCKDB_GIT_DESCRIBE"
-
-cmake --build "$DUCKDB_BUILD_DIR" --target shell -j"$(nproc 2>/dev/null || echo 4)"
-cp "$DUCKDB_BUILD_DIR/duckdb" "$DUCKDB_OUTPUT"
diff --git a/registry/native/c/scripts/build-llvm-runtimes.sh b/registry/native/c/scripts/build-llvm-runtimes.sh
deleted file mode 100644
index 918b26d55..000000000
--- a/registry/native/c/scripts/build-llvm-runtimes.sh
+++ /dev/null
@@ -1,114 +0,0 @@
-#!/bin/bash
-set -euo pipefail
-
-# Build the libc++/libc++abi/libunwind runtime set ourselves so C++ exception
-# handling matches the same patched WASI/POSIX sysroot DuckDB uses.
-#
-# Reference:
-# - https://github.com/llvm/llvm-project/pull/79667
-
-: "${LLVM_PROJECT_SRC_DIR:?LLVM_PROJECT_SRC_DIR is required}"
-: "${LLVM_RUNTIME_BUILD_DIR:?LLVM_RUNTIME_BUILD_DIR is required}"
-: "${LLVM_RUNTIME_INSTALL_DIR:?LLVM_RUNTIME_INSTALL_DIR is required}"
-: "${WASI_SDK_DIR:?WASI_SDK_DIR is required}"
-: "${SYSROOT_DIR:?SYSROOT_DIR is required}"
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-PATCH_DIR="$SCRIPT_DIR/../patches/llvm-project"
-WASI_NM="$WASI_SDK_DIR/bin/llvm-nm"
-
-if [ -d "$PATCH_DIR" ]; then
-  while IFS= read -r patch_file; do
-    if patch --dry-run -p1 -d "$LLVM_PROJECT_SRC_DIR" < "$patch_file" >/dev/null 2>&1; then
-      patch --no-backup-if-mismatch -p1 -d "$LLVM_PROJECT_SRC_DIR" < "$patch_file" >/dev/null
-    elif patch --dry-run -R -p1 -d "$LLVM_PROJECT_SRC_DIR" < "$patch_file" >/dev/null 2>&1; then
-      :
-    else
-      echo "failed to apply llvm-project patch: $patch_file" >&2
-      exit 1
-    fi
-  done < <(find "$PATCH_DIR" -name '*.patch' -type f | sort)
-fi
-
-rm -rf "$LLVM_RUNTIME_BUILD_DIR" "$LLVM_RUNTIME_INSTALL_DIR"
-
-cmake \
-  -S "$LLVM_PROJECT_SRC_DIR/runtimes" \
-  -B "$LLVM_RUNTIME_BUILD_DIR" \
-  -G "Unix Makefiles" \
-  -DUNIX=1 \
-  -DCMAKE_TOOLCHAIN_FILE="$WASI_SDK_DIR/share/cmake/wasi-sdk.cmake" \
-  -DCMAKE_MODULE_PATH="$SCRIPT_DIR/../cmake" \
-  -DWASI_SDK_PREFIX="$WASI_SDK_DIR" \
-  -DCMAKE_SYSROOT="$SYSROOT_DIR" \
-  -DCMAKE_BUILD_TYPE=Release \
-  -DCMAKE_C_FLAGS="-fwasm-exceptions -D_WASI_EMULATED_PTHREAD" \
-  -DCMAKE_CXX_FLAGS="-fwasm-exceptions -D_WASI_EMULATED_PTHREAD" \
-  -DCMAKE_EXE_LINKER_FLAGS="-lwasi-emulated-pthread" \
-  -DCMAKE_SHARED_LINKER_FLAGS="-lwasi-emulated-pthread" \
-  -DCMAKE_REQUIRED_FLAGS="-D_WASI_EMULATED_PTHREAD" \
-  -DCMAKE_REQUIRED_LIBRARIES="wasi-emulated-pthread" \
-  -DLLVM_ENABLE_RUNTIMES="libunwind;libcxxabi;libcxx" \
-  -DLLVM_INCLUDE_TESTS=OFF \
-  -DLLVM_INCLUDE_DOCS=OFF \
-  -DLIBUNWIND_INCLUDE_TESTS=OFF \
-  -DLIBCXXABI_INCLUDE_TESTS=OFF \
-  -DLIBCXX_INCLUDE_TESTS=OFF \
-  -DLIBCXX_INCLUDE_BENCHMARKS=OFF \
-  -DLIBUNWIND_ENABLE_SHARED=OFF \
-  -DLIBCXXABI_ENABLE_SHARED=OFF \
-  -DLIBCXX_ENABLE_SHARED=OFF \
-  -DLIBUNWIND_ENABLE_THREADS=OFF \
-  -DLIBCXXABI_ENABLE_THREADS=ON \
-  -DLIBCXX_ENABLE_THREADS=ON \
-  -DLIBCXX_USE_COMPILER_RT=ON \
-  -DLIBCXXABI_USE_COMPILER_RT=ON \
-  -DLIBCXXABI_USE_LLVM_UNWINDER=ON \
-  -DLIBCXXABI_ENABLE_STATIC_UNWINDER=ON \
-  -DLIBCXX_ENABLE_STATIC_ABI_LIBRARY=ON \
-  -DLIBCXX_CXX_ABI=libcxxabi \
-  -DLIBCXX_ENABLE_STATIC=ON \
-  -DLIBCXXABI_ENABLE_STATIC=ON \
-  -DLIBUNWIND_ENABLE_STATIC=ON \
-  -DCMAKE_INSTALL_PREFIX="$LLVM_RUNTIME_INSTALL_DIR"
-
-cmake --build "$LLVM_RUNTIME_BUILD_DIR" --target install -j"$(nproc 2>/dev/null || echo 4)"
-
-# llvm-nm returns a non-zero status for archive members with no symbols, which
-# is expected here for several libunwind objects. Capture output explicitly so
-# pipefail does not turn a valid archive into a false negative.
-libcxxabi_symbols="$("$WASI_NM" "$LLVM_RUNTIME_INSTALL_DIR/lib/libc++abi.a" 2>/dev/null || true)"
-
-if ! grep -q ' T __cxa_throw$' <<<"$libcxxabi_symbols"; then
-  echo "rebuilt libc++abi.a does not export __cxa_throw" >&2
-  exit 1
-fi
-if ! grep -q ' T __cxa_allocate_exception$' <<<"$libcxxabi_symbols"; then
-  echo "rebuilt libc++abi.a does not export __cxa_allocate_exception" >&2
-  exit 1
-fi
-
-SYSROOT_LIB="$SYSROOT_DIR/lib/wasm32-wasi"
-SYSROOT_INCLUDE="$SYSROOT_DIR/include"
-SYSROOT_CXX_INCLUDE="$SYSROOT_DIR/include/wasm32-wasi/c++/v1"
-LLVM_CXX_INCLUDE="$LLVM_RUNTIME_INSTALL_DIR/include/c++/v1"
-
-mkdir -p "$SYSROOT_LIB" "$SYSROOT_INCLUDE" "$SYSROOT_CXX_INCLUDE"
-
-for header in __libunwind_config.h libunwind.h libunwind.modulemap unwind.h unwind_itanium.h unwind_arm_ehabi.h; do
-  if [ -f "$LLVM_RUNTIME_INSTALL_DIR/include/$header" ]; then
-    cp "$LLVM_RUNTIME_INSTALL_DIR/include/$header" "$SYSROOT_INCLUDE/$header"
-  fi
-done
-
-if [ -d "$LLVM_CXX_INCLUDE" ]; then
-  rm -rf "$SYSROOT_CXX_INCLUDE"
-  mkdir -p "$SYSROOT_CXX_INCLUDE"
-  cp -R "$LLVM_CXX_INCLUDE/." "$SYSROOT_CXX_INCLUDE/"
-fi
-
-for runtime in libunwind.a libc++abi.a libc++.a libc++experimental.a; do
-  if [ -f "$LLVM_RUNTIME_INSTALL_DIR/lib/$runtime" ]; then
-    cp "$LLVM_RUNTIME_INSTALL_DIR/lib/$runtime" "$SYSROOT_LIB/$runtime"
-  fi
-done
diff --git a/registry/native/c/vim/compat.h b/registry/native/c/vim/compat.h
deleted file mode 100644
index 05477f040..000000000
--- a/registry/native/c/vim/compat.h
+++ /dev/null
@@ -1,42 +0,0 @@
-/* compat.h — forced-include shim filling full-OS libc gaps for porting
- * Linux C programs (vim) to the secure-exec wasm runtime. */
-#ifndef _SECUREEXEC_WASM_COMPAT_H
-#define _SECUREEXEC_WASM_COMPAT_H
-#include <sys/types.h>
-#include <poll.h>
-#include <sys/time.h>
-#include <signal.h>
-/* Force termios everywhere so TIOCGWINSZ + struct winsize are visible in EVERY
- * translation unit (os_unix.c's window-size query is gated on TIOCGWINSZ, which
- * is only defined where <termios.h> is included). */
-#include <termios.h>
-
-/* wasi-libc declares no sigprocmask (no signals), but our posix_stubs.c
- * implements it and configure detects it (HAVE_SIGPROCMASK) — declare it so
- * os_unix.c's calls compile instead of failing with implicit-declaration. */
-int sigprocmask(int how, const sigset_t *set, sigset_t *oldset);
-
-/* waitpid flags (no sys/wait.h with these on wasi) */
-#ifndef WNOHANG
-#define WNOHANG 1
-#endif
-#ifndef WUNTRACED
-#define WUNTRACED 2
-#endif
-#ifndef WCONTINUED
-#define WCONTINUED 8
-#endif
-
-/* interval timers — wasi-libc guards these out; we expose + stub them */
-#ifndef ITIMER_REAL
-#define ITIMER_REAL 0
-#define ITIMER_VIRTUAL 1
-#define ITIMER_PROF 2
-struct itimerval { struct timeval it_interval; struct timeval it_value; };
-int setitimer(int, const struct itimerval *, struct itimerval *);
-int getitimer(int, struct itimerval *);
-#endif
-
-mode_t umask(mode_t);
-
-#endif
diff --git a/registry/native/c/vim/grp.h b/registry/native/c/vim/grp.h
deleted file mode 100644
index 3db0e1252..000000000
--- a/registry/native/c/vim/grp.h
+++ /dev/null
@@ -1,23 +0,0 @@
-#ifndef _GRP_H
-#define _GRP_H
-#ifdef __cplusplus
-extern "C" {
-#endif
-#define __NEED_gid_t
-#define __NEED_size_t
-#include <bits/alltypes.h>
-struct group {
-	char *gr_name;
-	char *gr_passwd;
-	gid_t gr_gid;
-	char **gr_mem;
-};
-struct group *getgrgid(gid_t);
-struct group *getgrnam(const char *);
-struct group *getgrent(void);
-void setgrent(void);
-void endgrent(void);
-#ifdef __cplusplus
-}
-#endif
-#endif
diff --git a/registry/native/c/vim/posix_stubs.c b/registry/native/c/vim/posix_stubs.c
deleted file mode 100644
index f669d17bc..000000000
--- a/registry/native/c/vim/posix_stubs.c
+++ /dev/null
@@ -1,30 +0,0 @@
-/* posix_stubs.c — stubs for full-OS libc gaps vim references but that the VM
- * does not implement (group database, etc.). Safe no-op behavior. */
-#include <grp.h>
-#include <stddef.h>
-struct group *getgrgid(gid_t g) { (void)g; return NULL; }
-struct group *getgrnam(const char *n) { (void)n; return NULL; }
-struct group *getgrent(void) { return NULL; }
-void setgrent(void) {}
-void endgrent(void) {}
-
-/* --- additional full-OS libc gaps --- */
-#include <sys/types.h>
-mode_t umask(mode_t mask) { (void)mask; return 0; }
-
-#include <sys/time.h>
-struct itimerval;
-int setitimer(int w, const struct itimerval *n, struct itimerval *o) { (void)w; (void)n; (void)o; return 0; }
-int getitimer(int w, struct itimerval *o) { (void)w; (void)o; return 0; }
-
-/* --- process/signal stubs (not used by core editing) --- */
-#include <errno.h>
-pid_t fork(void) { errno = ENOSYS; return -1; }
-int execvp(const char *f, char *const a[]) { (void)f; (void)a; errno = ENOSYS; return -1; }
-int raise(int s) { (void)s; return -1; }
-/* signal sentinel symbols (this libc takes their address for SIG_IGN/SIG_ERR) */
-void __SIG_IGN(int s) { (void)s; }
-void __SIG_ERR(int s) { (void)s; }
-void __SIG_DFL(int s) { (void)s; }
-int sigprocmask(int how, const void *set, void *old) { (void)how; (void)set; (void)old; return 0; }
-int sigpending(void *set) { (void)set; return 0; }
diff --git a/registry/native/c/vim/termcap_stub.c b/registry/native/c/vim/termcap_stub.c
deleted file mode 100644
index 18c894d4f..000000000
--- a/registry/native/c/vim/termcap_stub.c
+++ /dev/null
@@ -1,101 +0,0 @@
-/* termcap_stub.c — minimal termcap API so vim links and falls back to its
- * builtin terminal entries. tgetent() returns 0 ("no entry") which makes vim
- * use its compiled-in builtin termcap for $TERM. tputs writes capability
- * strings straight to the output fn (vim passes its own putc). */
-#include <stddef.h>
-#include <unistd.h>
-
-char PC = '\0';
-char *UP = (char *)0;
-char *BC = (char *)0;
-short ospeed = 0;
-
-int tgetent(char *bp, const char *name) {
-	(void)bp;
-	(void)name;
-	return 0; /* no external entry -> vim uses builtin termcap */
-}
-
-int tgetflag(const char *id) {
-	(void)id;
-	return 0;
-}
-
-int tgetnum(const char *id) {
-	(void)id;
-	return -1;
-}
-
-char *tgetstr(const char *id, char **area) {
-	(void)id;
-	(void)area;
-	return (char *)0;
-}
-
-/* tgoto — expand a parameterized termcap capability (cursor motion T_CM,
- * scroll region T_CS, etc.). With HAVE_TGETENT defined, vim routes ALL
- * parameterized caps through this external tgoto; a NULL/stub return silently
- * drops the escape (so t_cm/t_cs are set but never emitted → linear draw, no
- * scroll region, status line on the wrong row). This is vim's own minimal
- * tgoto (src/term.c, the #ifndef HAVE_TGETENT branch): parse %i, %d, %+char,
- * %%; termcap convention is tgoto(cap, destcol, destline) with %d emitting the
- * LINE first, then swapping to the column. */
-char *tgoto(const char *cap, int col, int line) {
-	static char buf[64];
-	char *s = buf;
-	char *e = buf + sizeof(buf) - 1;
-	int x = col;
-	int y = line;
-
-	if (!cap) {
-		return "OOPS";
-	}
-	for (; s < e && *cap; cap++) {
-		if (*cap != '%') {
-			*s++ = *cap;
-			continue;
-		}
-		switch (*++cap) {
-		case 'd': {
-			/* emit y as decimal, then swap so the next %d emits x */
-			char num[16];
-			int n = 0;
-			unsigned v = (unsigned)(y < 0 ? 0 : y);
-			do {
-				num[n++] = (char)('0' + v % 10);
-				v /= 10;
-			} while (v && n < (int)sizeof(num));
-			while (n > 0 && s < e) {
-				*s++ = num[--n];
-			}
-			y = x;
-			break;
-		}
-		case 'i':
-			x++;
-			y++;
-			break;
-		case '+':
-			*s++ = (char)(*++cap + y);
-			y = x;
-			break;
-		case '%':
-			*s++ = '%';
-			break;
-		default:
-			return "OOPS";
-		}
-	}
-	*s = '\0';
-	return buf;
-}
-
-int tputs(const char *str, int affcnt, int (*putc_fn)(int)) {
-	(void)affcnt;
-	if (str && putc_fn) {
-		for (const char *p = str; *p; p++) {
-			putc_fn((int)(unsigned char)*p);
-		}
-	}
-	return 0;
-}
diff --git a/registry/native/c/vim/termios.h b/registry/native/c/vim/termios.h
deleted file mode 100644
index e7f777081..000000000
--- a/registry/native/c/vim/termios.h
+++ /dev/null
@@ -1,221 +0,0 @@
-/* termios.h — POSIX termios for the secure-exec full-OS libc (musl layout).
- *
- * wasi-libc ships no termios; this header pairs with termios_bridge.c, which
- * implements the functions on top of the `host_tty` kernel imports (raw-mode
- * toggle + winsize) with a shadow struct for round-tripping. Layout and
- * constants follow musl (generic arch) so code written against Linux termios
- * compiles unchanged.
- */
-#ifndef _TERMIOS_H
-#define _TERMIOS_H
-
-#ifdef __cplusplus
-extern "C" {
-#endif
-
-#include <sys/types.h>
-
-/* wasi-libc's sys/ioctl.h requests __NEED_struct_winsize but its alltypes
- * never provides it — supply the definition here (bridge + vim both include
- * this header ahead of the sysroot). */
-#ifndef __agentos_winsize_defined
-#define __agentos_winsize_defined
-struct winsize {
-	unsigned short ws_row;
-	unsigned short ws_col;
-	unsigned short ws_xpixel;
-	unsigned short ws_ypixel;
-};
-#endif
-
-#ifndef TIOCGWINSZ
-#define TIOCGWINSZ 0x5413
-#endif
-
-typedef unsigned char cc_t;
-typedef unsigned int speed_t;
-typedef unsigned int tcflag_t;
-
-#define NCCS 32
-
-struct termios {
-	tcflag_t c_iflag;
-	tcflag_t c_oflag;
-	tcflag_t c_cflag;
-	tcflag_t c_lflag;
-	cc_t c_line;
-	cc_t c_cc[NCCS];
-	speed_t __c_ispeed;
-	speed_t __c_ospeed;
-};
-
-/* c_cc indices */
-#define VINTR     0
-#define VQUIT     1
-#define VERASE    2
-#define VKILL     3
-#define VEOF      4
-#define VTIME     5
-#define VMIN      6
-#define VSWTC     7
-#define VSTART    8
-#define VSTOP     9
-#define VSUSP    10
-#define VEOL     11
-#define VREPRINT 12
-#define VDISCARD 13
-#define VWERASE  14
-#define VLNEXT   15
-#define VEOL2    16
-
-/* c_iflag */
-#define IGNBRK  0000001
-#define BRKINT  0000002
-#define IGNPAR  0000004
-#define PARMRK  0000010
-#define INPCK   0000020
-#define ISTRIP  0000040
-#define INLCR   0000100
-#define IGNCR   0000200
-#define ICRNL   0000400
-#define IUCLC   0001000
-#define IXON    0002000
-#define IXANY   0004000
-#define IXOFF   0010000
-#define IMAXBEL 0020000
-#define IUTF8   0040000
-
-/* c_oflag */
-#define OPOST  0000001
-#define OLCUC  0000002
-#define ONLCR  0000004
-#define OCRNL  0000010
-#define ONOCR  0000020
-#define ONLRET 0000040
-#define OFILL  0000100
-#define OFDEL  0000200
-#define NLDLY  0000400
-#define NL0    0000000
-#define NL1    0000400
-#define CRDLY  0003000
-#define CR0    0000000
-#define CR1    0001000
-#define CR2    0002000
-#define CR3    0003000
-#define TABDLY 0014000
-#define TAB0   0000000
-#define TAB1   0004000
-#define TAB2   0010000
-#define TAB3   0014000
-#define XTABS  0014000
-#define BSDLY  0020000
-#define BS0    0000000
-#define BS1    0020000
-#define VTDLY  0040000
-#define VT0    0000000
-#define VT1    0040000
-#define FFDLY  0100000
-#define FF0    0000000
-#define FF1    0100000
-
-/* c_cflag: baud + char size */
-#define B0       0000000
-#define B50      0000001
-#define B75      0000002
-#define B110     0000003
-#define B134     0000004
-#define B150     0000005
-#define B200     0000006
-#define B300     0000007
-#define B600     0000010
-#define B1200    0000011
-#define B1800    0000012
-#define B2400    0000013
-#define B4800    0000014
-#define B9600    0000015
-#define B19200   0000016
-#define B38400   0000017
-#define B57600   0010001
-#define B115200  0010002
-#define B230400  0010003
-#define B460800  0010004
-#define B500000  0010005
-#define B576000  0010006
-#define B921600  0010007
-#define B1000000 0010010
-#define B1152000 0010011
-#define B1500000 0010012
-#define B2000000 0010013
-#define B2500000 0010014
-#define B3000000 0010015
-#define B3500000 0010016
-#define B4000000 0010017
-
-#define CBAUD   0010017
-#define CSIZE   0000060
-#define CS5     0000000
-#define CS6     0000020
-#define CS7     0000040
-#define CS8     0000060
-#define CSTOPB  0000100
-#define CREAD   0000200
-#define PARENB  0000400
-#define PARODD  0001000
-#define HUPCL   0002000
-#define CLOCAL  0004000
-
-/* c_lflag */
-#define ISIG    0000001
-#define ICANON  0000002
-#define XCASE   0000004
-#define ECHO    0000010
-#define ECHOE   0000020
-#define ECHOK   0000040
-#define ECHONL  0000100
-#define NOFLSH  0000200
-#define TOSTOP  0000400
-#define ECHOCTL 0001000
-#define ECHOPRT 0002000
-#define ECHOKE  0004000
-#define FLUSHO  0010000
-#define PENDIN  0040000
-#define IEXTEN  0100000
-#define EXTPROC 0200000
-
-/* tcsetattr actions */
-#define TCSANOW   0
-#define TCSADRAIN 1
-#define TCSAFLUSH 2
-
-/* tcflush queue selectors */
-#define TCIFLUSH  0
-#define TCOFLUSH  1
-#define TCIOFLUSH 2
-
-/* tcflow actions */
-#define TCOOFF 0
-#define TCOON  1
-#define TCIOFF 2
-#define TCION  3
-
-int tcgetattr(int, struct termios *);
-int tcsetattr(int, int, const struct termios *);
-int tcsendbreak(int, int);
-int tcdrain(int);
-int tcflush(int, int);
-int tcflow(int, int);
-void cfmakeraw(struct termios *);
-speed_t cfgetispeed(const struct termios *);
-speed_t cfgetospeed(const struct termios *);
-int cfsetispeed(struct termios *, speed_t);
-int cfsetospeed(struct termios *, speed_t);
-int cfsetspeed(struct termios *, speed_t);
-pid_t tcgetpgrp(int);
-int tcsetpgrp(int, pid_t);
-pid_t tcgetsid(int);
-
-#ifdef __cplusplus
-}
-#endif
-
-#endif
diff --git a/registry/native/c/vim/termios_bridge.c b/registry/native/c/vim/termios_bridge.c
deleted file mode 100644
index 987fa1a05..000000000
--- a/registry/native/c/vim/termios_bridge.c
+++ /dev/null
@@ -1,146 +0,0 @@
-/* termios_bridge.c — termios for the secure-exec full-OS libc.
- *
- * The kernel owns the PTY line discipline (canonical/echo/signals) and exposes
- * a raw-mode toggle + window size to guests via the `host_tty` WASM imports.
- * We bridge POSIX termios onto that: tcsetattr maps the requested mode to
- * host_tty.set_raw_mode (raw when ICANON|ECHO are cleared, cooked otherwise),
- * and we keep a shadow `struct termios` so tcgetattr/tcsetattr round-trip the
- * way applications (vim) expect. Window size comes from host_tty.get_size.
- */
-#include <termios.h>
-#include <sys/ioctl.h>
-#include <errno.h>
-#include <string.h>
-#include <stdarg.h>
-#include <unistd.h>
-
-__attribute__((import_module("host_tty"), import_name("isatty"))) extern unsigned int
-__host_tty_isatty(unsigned int fd);
-__attribute__((import_module("host_tty"), import_name("get_size"))) extern unsigned int
-__host_tty_get_size(unsigned int fd, unsigned short *cols, unsigned short *rows);
-__attribute__((import_module("host_tty"), import_name("set_raw_mode"))) extern unsigned int
-__host_tty_set_raw_mode(unsigned int enabled);
-
-static struct termios g_shadow;
-static int g_shadow_valid = 0;
-
-static void cooked_defaults(struct termios *t) {
-	memset(t, 0, sizeof(*t));
-	t->c_iflag = ICRNL | IXON | IMAXBEL | IUTF8;
-	t->c_oflag = OPOST | ONLCR;
-	t->c_cflag = CS8 | CREAD | CLOCAL | B38400;
-	t->c_lflag = ISIG | ICANON | ECHO | ECHOE | ECHOK | ECHOCTL | ECHOKE | IEXTEN;
-	t->c_cc[VINTR] = 003;   /* ^C */
-	t->c_cc[VQUIT] = 034;   /* ^\ */
-	t->c_cc[VERASE] = 0177; /* DEL */
-	t->c_cc[VKILL] = 025;   /* ^U */
-	t->c_cc[VEOF] = 004;    /* ^D */
-	t->c_cc[VTIME] = 0;
-	t->c_cc[VMIN] = 1;
-	t->c_cc[VSTART] = 021;  /* ^Q */
-	t->c_cc[VSTOP] = 023;   /* ^S */
-	t->c_cc[VSUSP] = 032;   /* ^Z */
-	t->c_cc[VREPRINT] = 022;/* ^R */
-	t->c_cc[VWERASE] = 027; /* ^W */
-	t->c_cc[VLNEXT] = 026;  /* ^V */
-	t->c_cc[VDISCARD] = 017;/* ^O */
-	t->__c_ispeed = B38400;
-	t->__c_ospeed = B38400;
-}
-
-static void ensure_shadow(void) {
-	if (!g_shadow_valid) {
-		cooked_defaults(&g_shadow);
-		g_shadow_valid = 1;
-	}
-}
-
-/* isatty: delegate to the kernel's host_tty view. wasi-libc's isatty inspects
- * WASI fdstat (must be CHARACTER_DEVICE with NO seek/tell rights); a PTY fd
- * that carries seek/tell rights is wrongly reported as not-a-tty, so terminal
- * apps (vim) print "Output is not to a terminal" and refuse full-screen mode.
- * host_tty.isatty is the authoritative PTY check the kernel exposes (a strong
- * symbol overriding the weak libc alias). */
-static int bridge_isatty(int fd) {
-	return __host_tty_isatty((unsigned int)fd) ? 1 : 0;
-}
-
-int __isatty(int fd) {
-	return bridge_isatty(fd);
-}
-
-int isatty(int fd) {
-	return bridge_isatty(fd);
-}
-
-int tcgetattr(int fd, struct termios *t) {
-	(void)fd;
-	if (!t) { errno = EFAULT; return -1; }
-	if (!__host_tty_isatty((unsigned int)fd)) { errno = ENOTTY; return -1; }
-	ensure_shadow();
-	*t = g_shadow;
-	return 0;
-}
-
-int tcsetattr(int fd, int act, const struct termios *t) {
-	(void)act;
-	if (!t) { errno = EFAULT; return -1; }
-	if (!__host_tty_isatty((unsigned int)fd)) { errno = ENOTTY; return -1; }
-	g_shadow = *t;
-	g_shadow_valid = 1;
-	/* Raw when the line editor is disabled (no canonical input, no echo). */
-	unsigned int raw = ((t->c_lflag & ICANON) && (t->c_lflag & ECHO)) ? 0u : 1u;
-	unsigned int rc = __host_tty_set_raw_mode(raw);
-	if (rc != 0) { errno = (int)rc; return -1; }
-	return 0;
-}
-
-void cfmakeraw(struct termios *t) {
-	if (!t) return;
-	t->c_iflag &= ~(IGNBRK | BRKINT | PARMRK | ISTRIP | INLCR | IGNCR | ICRNL | IXON);
-	t->c_oflag &= ~OPOST;
-	t->c_lflag &= ~(ECHO | ECHONL | ICANON | ISIG | IEXTEN);
-	t->c_cflag &= ~(CSIZE | PARENB);
-	t->c_cflag |= CS8;
-	t->c_cc[VMIN] = 1;
-	t->c_cc[VTIME] = 0;
-}
-
-int tcflush(int fd, int q) { (void)fd; (void)q; return 0; }
-int tcdrain(int fd) { (void)fd; return 0; }
-int tcsendbreak(int fd, int d) { (void)fd; (void)d; return 0; }
-int tcflow(int fd, int a) { (void)fd; (void)a; return 0; }
-
-speed_t cfgetospeed(const struct termios *t) { return t ? t->__c_ospeed : 0; }
-speed_t cfgetispeed(const struct termios *t) { return t ? t->__c_ispeed : 0; }
-int cfsetospeed(struct termios *t, speed_t s) { if (t) t->__c_ospeed = s; return 0; }
-int cfsetispeed(struct termios *t, speed_t s) { if (t) t->__c_ispeed = s; return 0; }
-int cfsetspeed(struct termios *t, speed_t s) { if (t) { t->__c_ispeed = s; t->__c_ospeed = s; } return 0; }
-
-pid_t tcgetpgrp(int fd) { (void)fd; return 1; }
-int tcsetpgrp(int fd, pid_t p) { (void)fd; (void)p; return 0; }
-pid_t tcgetsid(int fd) { (void)fd; return 1; }
-
-/* Provide a TIOCGWINSZ-capable ioctl bridging to host_tty.get_size. The base
- * libc's ioctl is weak/stubbed for TTY ops on wasm, so we override it. Any
- * non-TTY request falls through to ENOTTY (sufficient for terminal apps). */
-int ioctl(int fd, int request, ...) {
-	va_list ap;
-	va_start(ap, request);
-	void *arg = va_arg(ap, void *);
-	va_end(ap);
-	if (request == TIOCGWINSZ) {
-		struct winsize *ws = (struct winsize *)arg;
-		if (!ws) { errno = EFAULT; return -1; }
-		unsigned short cols = 0, rows = 0;
-		unsigned int rc = __host_tty_get_size((unsigned int)fd, &cols, &rows);
-		if (rc != 0) { errno = (int)rc; return -1; }
-		ws->ws_col = cols;
-		ws->ws_row = rows;
-		ws->ws_xpixel = 0;
-		ws->ws_ypixel = 0;
-		return 0;
-	}
-	errno = ENOTTY;
-	return -1;
-}
diff --git a/registry/native/crates/commands/_stubs/Cargo.toml b/registry/native/crates/commands/_stubs/Cargo.toml
deleted file mode 100644
index 36c2fee92..000000000
--- a/registry/native/crates/commands/_stubs/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-stubs"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "_stubs mini-multicall binary for unsupported commands in secure-exec VM"
-
-[[bin]]
-name = "_stubs"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-stubs = { path = "../../libs/stubs" }
diff --git a/registry/native/crates/commands/_stubs/src/main.rs b/registry/native/crates/commands/_stubs/src/main.rs
deleted file mode 100644
index c4367e507..000000000
--- a/registry/native/crates/commands/_stubs/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<String> = std::env::args().collect();
-    std::process::exit(secureexec_stubs::run(&args));
-}
diff --git a/registry/native/crates/commands/arch/Cargo.toml b/registry/native/crates/commands/arch/Cargo.toml
deleted file mode 100644
index 92f2e7757..000000000
--- a/registry/native/crates/commands/arch/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-arch"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "arch standalone binary for secure-exec VM"
-
-[[bin]]
-name = "arch"
-path = "src/main.rs"
-
-[dependencies]
-uu_arch = "0.7.0"
diff --git a/registry/native/crates/commands/arch/src/main.rs b/registry/native/crates/commands/arch/src/main.rs
deleted file mode 100644
index d6e434f0f..000000000
--- a/registry/native/crates/commands/arch/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_arch::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/awk/Cargo.toml b/registry/native/crates/commands/awk/Cargo.toml
deleted file mode 100644
index 31ccd2a2b..000000000
--- a/registry/native/crates/commands/awk/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-awk"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "awk standalone binary for secure-exec VM"
-
-[[bin]]
-name = "awk"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-awk = { path = "../../libs/awk" }
diff --git a/registry/native/crates/commands/awk/src/main.rs b/registry/native/crates/commands/awk/src/main.rs
deleted file mode 100644
index a80b7ea9a..000000000
--- a/registry/native/crates/commands/awk/src/main.rs
+++ /dev/null
@@ -1,13 +0,0 @@
-fn main() {
-    use std::io::Write;
-
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    let mut code = secureexec_awk::main(args);
-    if let Err(error) = std::io::stdout().flush() {
-        eprintln!("Error flushing stdout: {error}");
-        if code == 0 {
-            code = 1;
-        }
-    }
-    std::process::exit(code);
-}
diff --git a/registry/native/crates/commands/b2sum/Cargo.toml b/registry/native/crates/commands/b2sum/Cargo.toml
deleted file mode 100644
index 8219c1fd4..000000000
--- a/registry/native/crates/commands/b2sum/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-b2sum"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "b2sum standalone binary for secure-exec VM"
-
-[[bin]]
-name = "b2sum"
-path = "src/main.rs"
-
-[dependencies]
-uu_b2sum = "0.7.0"
diff --git a/registry/native/crates/commands/b2sum/src/main.rs b/registry/native/crates/commands/b2sum/src/main.rs
deleted file mode 100644
index a5a9aec90..000000000
--- a/registry/native/crates/commands/b2sum/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_b2sum::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/base32/Cargo.toml b/registry/native/crates/commands/base32/Cargo.toml
deleted file mode 100644
index 3e719bf18..000000000
--- a/registry/native/crates/commands/base32/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-base32"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "base32 standalone binary for secure-exec VM"
-
-[[bin]]
-name = "base32"
-path = "src/main.rs"
-
-[dependencies]
-uu_base32 = "0.7.0"
diff --git a/registry/native/crates/commands/base32/src/main.rs b/registry/native/crates/commands/base32/src/main.rs
deleted file mode 100644
index d386164dd..000000000
--- a/registry/native/crates/commands/base32/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_base32::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/base64/Cargo.toml b/registry/native/crates/commands/base64/Cargo.toml
deleted file mode 100644
index bad7a503e..000000000
--- a/registry/native/crates/commands/base64/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-base64"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "base64 standalone binary for secure-exec VM"
-
-[[bin]]
-name = "base64"
-path = "src/main.rs"
-
-[dependencies]
-uu_base64 = "0.7.0"
diff --git a/registry/native/crates/commands/base64/src/main.rs b/registry/native/crates/commands/base64/src/main.rs
deleted file mode 100644
index 5eaa558af..000000000
--- a/registry/native/crates/commands/base64/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_base64::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/basename/Cargo.toml b/registry/native/crates/commands/basename/Cargo.toml
deleted file mode 100644
index 8511991cd..000000000
--- a/registry/native/crates/commands/basename/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-basename"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "basename standalone binary for secure-exec VM"
-
-[[bin]]
-name = "basename"
-path = "src/main.rs"
-
-[dependencies]
-uu_basename = "0.7.0"
diff --git a/registry/native/crates/commands/basename/src/main.rs b/registry/native/crates/commands/basename/src/main.rs
deleted file mode 100644
index f91072cf2..000000000
--- a/registry/native/crates/commands/basename/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_basename::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/basenc/Cargo.toml b/registry/native/crates/commands/basenc/Cargo.toml
deleted file mode 100644
index ad2c8e5a9..000000000
--- a/registry/native/crates/commands/basenc/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-basenc"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "basenc standalone binary for secure-exec VM"
-
-[[bin]]
-name = "basenc"
-path = "src/main.rs"
-
-[dependencies]
-uu_basenc = "0.7.0"
diff --git a/registry/native/crates/commands/basenc/src/main.rs b/registry/native/crates/commands/basenc/src/main.rs
deleted file mode 100644
index 17208a1c9..000000000
--- a/registry/native/crates/commands/basenc/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_basenc::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/cat/Cargo.toml b/registry/native/crates/commands/cat/Cargo.toml
deleted file mode 100644
index 16a9d7218..000000000
--- a/registry/native/crates/commands/cat/Cargo.toml
+++ /dev/null
@@ -1,16 +0,0 @@
-[package]
-name = "cmd-cat"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "cat standalone binary for secure-exec VM"
-
-[[bin]]
-name = "cat"
-path = "src/main.rs"
-
-[dependencies]
-uu_cat = "0.7.0"
-
-[target.'cfg(any(target_os = "linux", target_os = "android"))'.dev-dependencies]
-uucore = { version = "0.7.0", features = ["pipes"] }
diff --git a/registry/native/crates/commands/cat/src/main.rs b/registry/native/crates/commands/cat/src/main.rs
deleted file mode 100644
index 9340bc5ba..000000000
--- a/registry/native/crates/commands/cat/src/main.rs
+++ /dev/null
@@ -1,13 +0,0 @@
-fn main() {
-    use std::io::Write;
-
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    let mut code = uu_cat::uumain(args.into_iter());
-    if let Err(error) = std::io::stdout().flush() {
-        eprintln!("Error flushing stdout: {error}");
-        if code == 0 {
-            code = 1;
-        }
-    }
-    std::process::exit(code);
-}
diff --git a/registry/native/crates/commands/cat/tests/uucore_pipes.rs b/registry/native/crates/commands/cat/tests/uucore_pipes.rs
deleted file mode 100644
index bd7d431d3..000000000
--- a/registry/native/crates/commands/cat/tests/uucore_pipes.rs
+++ /dev/null
@@ -1,15 +0,0 @@
-#![cfg(any(target_os = "linux", target_os = "android"))]
-
-use std::fs::OpenOptions;
-
-use uucore::pipes::{Error, pipe, splice_exact};
-
-#[test]
-fn splice_exact_returns_error_on_unexpected_eof() {
-    let (pipe_rd, pipe_wr) = pipe().unwrap();
-    drop(pipe_wr);
-
-    let dest = OpenOptions::new().write(true).open("/dev/null").unwrap();
-
-    assert_eq!(splice_exact(&pipe_rd, &dest, 1), Err(Error::EPIPE));
-}
diff --git a/registry/native/crates/commands/chmod/Cargo.toml b/registry/native/crates/commands/chmod/Cargo.toml
deleted file mode 100644
index 3a1da3b8c..000000000
--- a/registry/native/crates/commands/chmod/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-chmod"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "chmod standalone binary for secure-exec VM"
-
-[[bin]]
-name = "chmod"
-path = "src/main.rs"
-
-[dependencies]
-uu_chmod = "0.7.0"
diff --git a/registry/native/crates/commands/chmod/src/main.rs b/registry/native/crates/commands/chmod/src/main.rs
deleted file mode 100644
index 813643625..000000000
--- a/registry/native/crates/commands/chmod/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_chmod::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/cksum/Cargo.toml b/registry/native/crates/commands/cksum/Cargo.toml
deleted file mode 100644
index 1beec6b3a..000000000
--- a/registry/native/crates/commands/cksum/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-cksum"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "cksum standalone binary for secure-exec VM"
-
-[[bin]]
-name = "cksum"
-path = "src/main.rs"
-
-[dependencies]
-uu_cksum = "0.7.0"
diff --git a/registry/native/crates/commands/cksum/src/main.rs b/registry/native/crates/commands/cksum/src/main.rs
deleted file mode 100644
index 4dfc2b978..000000000
--- a/registry/native/crates/commands/cksum/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_cksum::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/codex-exec/Cargo.toml b/registry/native/crates/commands/codex-exec/Cargo.toml
deleted file mode 100644
index c2859ea27..000000000
--- a/registry/native/crates/commands/codex-exec/Cargo.toml
+++ /dev/null
@@ -1,17 +0,0 @@
-[package]
-name = "cmd-codex-exec"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "codex-exec command binary for secure-exec VM"
-
-[[bin]]
-name = "codex-exec"
-path = "src/main.rs"
-
-[dependencies]
-wasi-http = { package = "secureexec-wasi-http", path = "../../libs/wasi-http" }
-
-# WASI stub crates for future codex-core dependencies that don't support wasm32-wasip1.
-codex-network-proxy = "0.0.0"
-codex-otel = "0.0.0"
diff --git a/registry/native/crates/commands/codex-exec/src/main.rs b/registry/native/crates/commands/codex-exec/src/main.rs
deleted file mode 100644
index 47c22f67f..000000000
--- a/registry/native/crates/commands/codex-exec/src/main.rs
+++ /dev/null
@@ -1,146 +0,0 @@
-/// Codex headless command for secure-exec VM.
-///
-/// The prompt mode remains a placeholder command. The ACP session-turn path is
-/// disabled until it can delegate to the real Codex agent package instead of a
-/// bespoke provider loop.
-use std::collections::HashMap;
-use std::io::{self, Read};
-
-const VERSION: &str = env!("CARGO_PKG_VERSION");
-const SESSION_TURN_DISABLED: &str =
-    "codex-exec --session-turn is disabled until the real Codex agent package is wired";
-const MAX_PROMPT_BYTES: usize = 64 * 1024;
-
-use codex_network_proxy::NetworkProxy;
-use codex_otel::SessionTelemetry;
-
-fn main() {
-    let args: Vec<String> = std::env::args().collect();
-
-    if args.iter().any(|a| a == "--help" || a == "-h") {
-        print_help();
-        return;
-    }
-
-    if args.iter().any(|a| a == "--version" || a == "-V") {
-        println!("codex-exec {}", VERSION);
-        return;
-    }
-
-    if args.get(1).map(|s| s.as_str()) == Some("--http-test") {
-        return http_test(&args[2..]);
-    }
-
-    if args.get(1).map(|s| s.as_str()) == Some("--stub-test") {
-        return stub_test();
-    }
-
-    if args.get(1).map(|s| s.as_str()) == Some("--session-turn") {
-        emit_session_turn_disabled();
-        std::process::exit(1);
-    }
-
-    let prompt = if args.len() > 1 {
-        let prompt = args[1..].join(" ");
-        if prompt.len() > MAX_PROMPT_BYTES {
-            eprintln!("codex-exec: prompt exceeds {} byte limit", MAX_PROMPT_BYTES);
-            std::process::exit(1);
-        }
-        prompt
-    } else {
-        let mut input = Vec::new();
-        let mut stdin = io::stdin().take((MAX_PROMPT_BYTES + 1) as u64);
-        match stdin.read_to_end(&mut input) {
-            Ok(_) if input.len() > MAX_PROMPT_BYTES => {
-                eprintln!(
-                    "codex-exec: stdin prompt exceeds {} byte limit",
-                    MAX_PROMPT_BYTES
-                );
-                std::process::exit(1);
-            }
-            Ok(_) => match String::from_utf8(input) {
-                Ok(input) => input.trim().to_string(),
-                Err(error) => {
-                    eprintln!("codex-exec: stdin prompt is not valid UTF-8: {}", error);
-                    std::process::exit(1);
-                }
-            },
-            Err(error) => {
-                eprintln!("codex-exec: failed to read stdin: {}", error);
-                std::process::exit(1);
-            }
-        }
-    };
-
-    if prompt.is_empty() {
-        eprintln!("codex-exec: no prompt provided");
-        eprintln!("usage: codex-exec <prompt>  or  echo '<prompt>' | codex-exec");
-        std::process::exit(1);
-    }
-
-    eprintln!("codex-exec: headless prompt mode is not wired to the provider yet");
-    eprintln!("prompt received ({} bytes)", prompt.len());
-    std::process::exit(0);
-}
-
-fn emit_session_turn_disabled() {
-    println!(
-        "{{\"type\":\"error\",\"message\":\"{}\"}}",
-        SESSION_TURN_DISABLED
-    );
-}
-
-fn print_help() {
-    println!("codex-exec {} - headless Codex command", VERSION);
-    println!();
-    println!("USAGE:");
-    println!("    codex-exec [OPTIONS] [PROMPT]");
-    println!("    echo '<prompt>' | codex-exec");
-    println!();
-    println!("OPTIONS:");
-    println!("    -h, --help          Print this help message");
-    println!("    -V, --version       Print version information");
-    println!("    --http-test URL     Test HTTP client via host_net");
-    println!("    --stub-test         Validate WASI stub crates");
-    println!("    --session-turn      Fail fast until the real Codex agent package is wired");
-}
-
-fn stub_test() {
-    let proxy = NetworkProxy;
-    let mut env = HashMap::new();
-    proxy.apply_to_env(&mut env);
-    println!("network-proxy: NetworkProxy is zero-size, apply_to_env is no-op");
-
-    let telemetry = SessionTelemetry::new();
-    telemetry.counter("test.counter", 1, &[]);
-    telemetry.histogram("test.histogram", 42, &[]);
-    println!("otel: SessionTelemetry metrics are no-ops");
-
-    let global = codex_otel::metrics::global();
-    assert!(global.is_none(), "global metrics should be None on WASI");
-    println!("otel: global() returns None (no exporter on WASI)");
-
-    println!("stub-test: all stubs validated successfully");
-}
-
-fn http_test(args: &[String]) {
-    if args.is_empty() {
-        eprintln!("usage: codex-exec --http-test <url>");
-        std::process::exit(1);
-    }
-
-    let url = &args[0];
-    match wasi_http::get(url) {
-        Ok(resp) => {
-            println!("status: {}", resp.status);
-            match resp.text() {
-                Ok(body) => println!("body: {}", body),
-                Err(error) => eprintln!("body decode error: {}", error),
-            }
-        }
-        Err(error) => {
-            eprintln!("http error: {}", error);
-            std::process::exit(1);
-        }
-    }
-}
diff --git a/registry/native/crates/commands/codex/Cargo.toml b/registry/native/crates/commands/codex/Cargo.toml
deleted file mode 100644
index 41f610902..000000000
--- a/registry/native/crates/commands/codex/Cargo.toml
+++ /dev/null
@@ -1,33 +0,0 @@
-[package]
-name = "cmd-codex"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "codex standalone binary for secure-exec VM"
-
-[[bin]]
-name = "codex"
-path = "src/main.rs"
-
-# The full codex-exec dependency from rivet-dev/codex (wasi-support branch)
-# will be wired in when the vendoring blocker is resolved.
-#
-# The fork at github.com/rivet-dev/codex already has cfg(target_os = "wasi")
-# gates on codex-core (portable-pty, network-proxy, sandbox deps) and
-# codex-exec (all platform deps gated behind non-WASI).
-#
-# wasi-spawn provides the WasiChild abstraction that will replace
-# tokio::process::Command in codex-core when compiled for WASI.
-
-[dependencies]
-wasi-spawn = { package = "secureexec-wasi-spawn", path = "../../libs/wasi-spawn" }
-wasi-http = { package = "secureexec-wasi-http", path = "../../libs/wasi-http" }
-
-# TUI dependencies — ratatui for rendering, crossterm for terminal backend
-# crossterm is patched for WASI support (see patches/crates/crossterm/)
-ratatui = { version = "0.29", default-features = false, features = ["crossterm"] }
-
-# WASI stub crates for codex-core dependencies that don't support wasm32-wasip1.
-# These provide zero-size/no-op implementations so codex-core compiles for WASI.
-codex-network-proxy = "0.0.0"
-codex-otel = "0.0.0"
diff --git a/registry/native/crates/commands/codex/src/main.rs b/registry/native/crates/commands/codex/src/main.rs
deleted file mode 100644
index 5375dfa82..000000000
--- a/registry/native/crates/commands/codex/src/main.rs
+++ /dev/null
@@ -1,337 +0,0 @@
-/// Codex TUI for secure-exec VM.
-///
-/// Full terminal UI using ratatui + crossterm backend, rendering through
-/// the WasmVM PTY. This is the interactive entry point — for headless
-/// (scriptable) usage, see codex-exec.
-///
-/// Uses wasi-spawn for process spawning via host_process FFI and
-/// wasi-http for HTTP/HTTPS requests via host_net TCP/TLS imports.
-///
-/// crossterm is patched for WASI support (see patches/crates/crossterm/):
-///   - Terminal raw mode tracked in-process (host PTY handles discipline)
-///   - Terminal size from COLUMNS/LINES env vars
-///   - Event source reads stdin directly and parses ANSI escape sequences
-///   - IsTty returns true (PTY slave FDs are terminals)
-use std::io;
-
-use ratatui::{
-    backend::CrosstermBackend,
-    crossterm::{
-        event::{self, Event, KeyCode, KeyEvent, KeyModifiers},
-        execute,
-        terminal::{self, EnterAlternateScreen, LeaveAlternateScreen},
-    },
-    layout::{Constraint, Layout},
-    style::{Color, Modifier, Style},
-    text::{Line, Span, Text},
-    widgets::{Block, Borders, Paragraph, Wrap},
-    Frame, Terminal,
-};
-
-// Validate WASI stub crates compile by referencing key types
-use codex_network_proxy::NetworkProxy;
-use codex_otel::SessionTelemetry;
-
-const VERSION: &str = env!("CARGO_PKG_VERSION");
-const MAX_INPUT_CHARS: usize = 8192;
-const MAX_MESSAGES: usize = 200;
-
-fn main() {
-    let args: Vec<String> = std::env::args().collect();
-
-    // Handle --help
-    if args.iter().any(|a| a == "--help" || a == "-h") {
-        print_help();
-        return;
-    }
-
-    // Handle --version
-    if args.iter().any(|a| a == "--version" || a == "-V") {
-        println!("codex {}", VERSION);
-        return;
-    }
-
-    // Handle --model flag (accept but note it's stored for future use)
-    let model = args
-        .windows(2)
-        .find(|w| w[0] == "--model")
-        .map(|w| w[1].clone());
-
-    // Built-in HTTP test subcommand (validates wasi-http integration)
-    if args.get(1).map(|s| s.as_str()) == Some("--http-test") {
-        return http_test(&args[2..]);
-    }
-
-    // Stub validation subcommand (validates WASI stub crates)
-    if args.get(1).map(|s| s.as_str()) == Some("--stub-test") {
-        return stub_test();
-    }
-
-    // Run the TUI
-    if let Err(e) = run_tui(model.as_deref()) {
-        eprintln!("codex: TUI error: {}", e);
-        std::process::exit(1);
-    }
-}
-
-/// Main TUI event loop using ratatui + crossterm.
-fn run_tui(model: Option<&str>) -> io::Result<()> {
-    let _terminal_guard = TerminalGuard::enter()?;
-
-    let stdout = io::stdout();
-    let backend = CrosstermBackend::new(stdout);
-    let mut terminal = Terminal::new(backend)?;
-
-    // App state
-    let mut input = String::new();
-    let mut messages: Vec<String> = Vec::new();
-    let mut should_quit = false;
-
-    // Draw initial frame
-    terminal.draw(|f| draw_ui(f, &input, &messages, model))?;
-
-    // Event loop
-    while !should_quit {
-        match event::read()? {
-            Event::Key(key) => {
-                handle_key_event(key, &mut input, &mut messages, &mut should_quit);
-                terminal.draw(|f| draw_ui(f, &input, &messages, model))?;
-            }
-            Event::Resize(_, _) => {
-                terminal.draw(|f| draw_ui(f, &input, &messages, model))?;
-            }
-            _ => {}
-        }
-    }
-
-    Ok(())
-}
-
-/// Handle a key event, updating app state.
-fn handle_key_event(
-    key: KeyEvent,
-    input: &mut String,
-    messages: &mut Vec<String>,
-    should_quit: &mut bool,
-) {
-    match (key.code, key.modifiers) {
-        // Ctrl+C quits
-        (KeyCode::Char('c'), m) if m.contains(KeyModifiers::CONTROL) => {
-            *should_quit = true;
-        }
-        // 'q' on empty input quits
-        (KeyCode::Char('q'), KeyModifiers::NONE) if input.is_empty() => {
-            *should_quit = true;
-        }
-        // Enter submits the input
-        (KeyCode::Enter, _) => {
-            if !input.is_empty() {
-                let prompt = input.clone();
-                push_message(messages, format!("> {}", prompt));
-                push_message(
-                    messages,
-                    "codex: agent loop is under development".to_string(),
-                );
-                push_message(
-                    messages,
-                    format!("codex: prompt received ({} chars)", prompt.len()),
-                );
-                input.clear();
-            }
-        }
-        // Backspace deletes last char
-        (KeyCode::Backspace, _) => {
-            input.pop();
-        }
-        // Esc clears input
-        (KeyCode::Esc, _) => {
-            input.clear();
-        }
-        // Regular character input
-        (KeyCode::Char(c), _) => {
-            if input.chars().count() < MAX_INPUT_CHARS {
-                input.push(c);
-            }
-        }
-        _ => {}
-    }
-}
-
-fn push_message(messages: &mut Vec<String>, message: String) {
-    messages.push(message);
-    if messages.len() > MAX_MESSAGES {
-        messages.drain(..messages.len() - MAX_MESSAGES);
-    }
-}
-
-struct TerminalGuard {
-    raw_mode_enabled: bool,
-    alternate_screen_enabled: bool,
-}
-
-impl TerminalGuard {
-    fn enter() -> io::Result<Self> {
-        terminal::enable_raw_mode()?;
-
-        if let Err(error) = execute!(io::stdout(), EnterAlternateScreen) {
-            let _ = terminal::disable_raw_mode();
-            return Err(error);
-        }
-
-        Ok(Self {
-            raw_mode_enabled: true,
-            alternate_screen_enabled: true,
-        })
-    }
-}
-
-impl Drop for TerminalGuard {
-    fn drop(&mut self) {
-        if self.alternate_screen_enabled {
-            let _ = execute!(io::stdout(), LeaveAlternateScreen);
-            self.alternate_screen_enabled = false;
-        }
-
-        if self.raw_mode_enabled {
-            let _ = terminal::disable_raw_mode();
-            self.raw_mode_enabled = false;
-        }
-    }
-}
-
-/// Draw the TUI layout.
-fn draw_ui(f: &mut Frame, input: &str, messages: &[String], model: Option<&str>) {
-    let area = f.area();
-
-    let chunks = Layout::vertical([
-        Constraint::Length(3), // Header
-        Constraint::Min(5),    // Messages
-        Constraint::Length(3), // Input
-    ])
-    .split(area);
-
-    // Header
-    let model_text = model.unwrap_or("default");
-    let header = Paragraph::new(Line::from(vec![
-        Span::styled(
-            "Codex ",
-            Style::default()
-                .fg(Color::Cyan)
-                .add_modifier(Modifier::BOLD),
-        ),
-        Span::styled(VERSION, Style::default().fg(Color::DarkGray)),
-        Span::raw("  "),
-        Span::styled(
-            format!("model: {}", model_text),
-            Style::default().fg(Color::Yellow),
-        ),
-        Span::raw("  "),
-        Span::styled("WasmVM", Style::default().fg(Color::Green)),
-    ]))
-    .block(Block::default().borders(Borders::ALL).title(" codex "));
-    f.render_widget(header, chunks[0]);
-
-    // Messages area
-    let msg_lines: Vec<Line> = messages
-        .iter()
-        .map(|m| {
-            if m.starts_with("> ") {
-                Line::from(Span::styled(m.as_str(), Style::default().fg(Color::Cyan)))
-            } else {
-                Line::from(Span::raw(m.as_str()))
-            }
-        })
-        .collect();
-
-    let welcome = if messages.is_empty() {
-        vec![
-            Line::from(""),
-            Line::from(Span::styled(
-                "Welcome to Codex on WasmVM!",
-                Style::default()
-                    .fg(Color::Cyan)
-                    .add_modifier(Modifier::BOLD),
-            )),
-            Line::from(""),
-            Line::from("Type a prompt and press Enter to submit."),
-            Line::from("Press 'q' (on empty input) or Ctrl+C to exit."),
-        ]
-    } else {
-        msg_lines
-    };
-
-    let messages_widget = Paragraph::new(Text::from(welcome))
-        .block(Block::default().borders(Borders::ALL).title(" messages "))
-        .wrap(Wrap { trim: false });
-    f.render_widget(messages_widget, chunks[1]);
-
-    // Input area
-    let input_widget = Paragraph::new(Line::from(vec![
-        Span::styled("❯ ", Style::default().fg(Color::Green)),
-        Span::raw(input),
-    ]))
-    .block(Block::default().borders(Borders::ALL).title(" input "));
-    f.render_widget(input_widget, chunks[2]);
-}
-
-fn print_help() {
-    println!(
-        "codex {} — interactive Codex TUI for secure-exec VM",
-        VERSION
-    );
-    println!();
-    println!("USAGE:");
-    println!("    codex [OPTIONS]");
-    println!();
-    println!("OPTIONS:");
-    println!("    -h, --help         Print this help message");
-    println!("    -V, --version      Print version information");
-    println!("    --model MODEL      Select model for completions");
-    println!("    --http-test URL    Test HTTP client via host_net");
-    println!("    --stub-test        Validate WASI stub crates");
-    println!();
-    println!("DESCRIPTION:");
-    println!("    Interactive TUI for the Codex agent, rendered through");
-    println!("    the WasmVM PTY using ratatui + crossterm backend.");
-    println!("    For headless mode, use codex-exec instead.");
-}
-
-fn stub_test() {
-    let proxy = NetworkProxy;
-    let mut env = std::collections::HashMap::new();
-    proxy.apply_to_env(&mut env);
-    println!("network-proxy: NetworkProxy is zero-size, apply_to_env is no-op");
-
-    let telemetry = SessionTelemetry::new();
-    telemetry.counter("test.counter", 1, &[]);
-    telemetry.histogram("test.histogram", 42, &[]);
-    println!("otel: SessionTelemetry metrics are no-ops");
-
-    let global = codex_otel::metrics::global();
-    assert!(global.is_none(), "global metrics should be None on WASI");
-    println!("otel: global() returns None (no exporter on WASI)");
-
-    println!("stub-test: all stubs validated successfully");
-}
-
-fn http_test(args: &[String]) {
-    if args.is_empty() {
-        eprintln!("usage: codex --http-test <url>");
-        std::process::exit(1);
-    }
-
-    let url = &args[0];
-    match wasi_http::get(url) {
-        Ok(resp) => {
-            println!("status: {}", resp.status);
-            match resp.text() {
-                Ok(body) => println!("body: {}", body),
-                Err(e) => eprintln!("body decode error: {}", e),
-            }
-        }
-        Err(e) => {
-            eprintln!("http error: {}", e);
-            std::process::exit(1);
-        }
-    }
-}
diff --git a/registry/native/crates/commands/column/Cargo.toml b/registry/native/crates/commands/column/Cargo.toml
deleted file mode 100644
index bca846e4d..000000000
--- a/registry/native/crates/commands/column/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-column"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "column standalone binary for secure-exec VM"
-
-[[bin]]
-name = "column"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-column = { path = "../../libs/column" }
diff --git a/registry/native/crates/commands/column/src/main.rs b/registry/native/crates/commands/column/src/main.rs
deleted file mode 100644
index d954d4ce4..000000000
--- a/registry/native/crates/commands/column/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_column::main(args));
-}
diff --git a/registry/native/crates/commands/comm/Cargo.toml b/registry/native/crates/commands/comm/Cargo.toml
deleted file mode 100644
index c748f132f..000000000
--- a/registry/native/crates/commands/comm/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-comm"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "comm standalone binary for secure-exec VM"
-
-[[bin]]
-name = "comm"
-path = "src/main.rs"
-
-[dependencies]
-uu_comm = "0.7.0"
diff --git a/registry/native/crates/commands/comm/src/main.rs b/registry/native/crates/commands/comm/src/main.rs
deleted file mode 100644
index 1c1bad1a7..000000000
--- a/registry/native/crates/commands/comm/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_comm::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/cp/Cargo.toml b/registry/native/crates/commands/cp/Cargo.toml
deleted file mode 100644
index 851012ce6..000000000
--- a/registry/native/crates/commands/cp/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-cp"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "cp standalone binary for secure-exec VM"
-
-[[bin]]
-name = "cp"
-path = "src/main.rs"
-
-[dependencies]
-uu_cp = "0.7.0"
diff --git a/registry/native/crates/commands/cp/src/main.rs b/registry/native/crates/commands/cp/src/main.rs
deleted file mode 100644
index 2bb21247d..000000000
--- a/registry/native/crates/commands/cp/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_cp::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/curl/Cargo.toml b/registry/native/crates/commands/curl/Cargo.toml
deleted file mode 100644
index 5d5a8a876..000000000
--- a/registry/native/crates/commands/curl/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-curl"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "Minimal curl-compatible HTTP client for secure-exec"
-
-[[bin]]
-name = "curl"
-path = "src/main.rs"
-
-[dependencies]
-wasi-http = { package = "secureexec-wasi-http", path = "../../libs/wasi-http" }
diff --git a/registry/native/crates/commands/curl/src/main.rs b/registry/native/crates/commands/curl/src/main.rs
deleted file mode 100644
index 025bb4902..000000000
--- a/registry/native/crates/commands/curl/src/main.rs
+++ /dev/null
@@ -1,210 +0,0 @@
-use std::{
-    fs,
-    io::{self, Write},
-};
-
-use wasi_http::{HttpClient, Method, Request};
-
-fn main() {
-    match run() {
-        Ok(ExitKind::Success) => {}
-        Ok(ExitKind::PrintedHelp) => {}
-        Err(message) => {
-            eprintln!("curl: {message}");
-            std::process::exit(1);
-        }
-    }
-}
-
-enum ExitKind {
-    Success,
-    PrintedHelp,
-}
-
-struct Config {
-    method: Method,
-    url: String,
-    body: Option<Vec<u8>>,
-    headers: Vec<(String, String)>,
-    output_path: Option<String>,
-}
-
-fn run() -> Result<ExitKind, String> {
-    let Some(config) = parse_args(std::env::args().skip(1))? else {
-        print_help();
-        return Ok(ExitKind::PrintedHelp);
-    };
-
-    let client = HttpClient::new();
-    let mut request =
-        Request::new(config.method, &config.url).map_err(|error| error.to_string())?;
-
-    for (name, value) in config.headers {
-        request = request.header(&name, &value);
-    }
-
-    if let Some(body) = config.body {
-        request = request.body(body);
-    }
-
-    let response = client.send(&request).map_err(|error| error.to_string())?;
-
-    if let Some(path) = config.output_path {
-        fs::write(&path, &response.body).map_err(|error| format!("{path}: {error}"))?;
-    } else {
-        io::stdout()
-            .write_all(&response.body)
-            .and_then(|()| io::stdout().flush())
-            .map_err(|error| error.to_string())?;
-    }
-
-    Ok(ExitKind::Success)
-}
-
-fn parse_args(args: impl IntoIterator<Item = String>) -> Result<Option<Config>, String> {
-    let mut url = None;
-    let mut method = None;
-    let mut body = None;
-    let mut headers = Vec::new();
-    let mut output_path = None;
-
-    let mut args = args.into_iter();
-    while let Some(arg) = args.next() {
-        match arg.as_str() {
-            "-h" | "--help" => return Ok(None),
-            "-s" | "--silent" => {}
-            "-X" | "--request" => {
-                let value = args
-                    .next()
-                    .ok_or_else(|| format!("{arg} requires an argument"))?;
-                method = Some(parse_method(&value)?);
-            }
-            "-d" | "--data" | "--data-raw" => {
-                let value = args
-                    .next()
-                    .ok_or_else(|| format!("{arg} requires an argument"))?;
-                body = Some(value.into_bytes());
-            }
-            "-H" | "--header" => {
-                let value = args
-                    .next()
-                    .ok_or_else(|| format!("{arg} requires an argument"))?;
-                headers.push(parse_header(&value)?);
-            }
-            "-o" | "--output" => {
-                output_path = Some(
-                    args.next()
-                        .ok_or_else(|| format!("{arg} requires an argument"))?,
-                );
-            }
-            _ if arg.starts_with("http://") || arg.starts_with("https://") => {
-                if url.is_some() {
-                    return Err("only one URL is supported".into());
-                }
-                url = Some(arg);
-            }
-            _ => return Err(format!("unsupported argument `{arg}`")),
-        }
-    }
-
-    let url = url.ok_or_else(|| "missing URL".to_string())?;
-    let method = method.unwrap_or_else(|| {
-        if body.is_some() {
-            Method::Post
-        } else {
-            Method::Get
-        }
-    });
-
-    Ok(Some(Config {
-        method,
-        url,
-        body,
-        headers,
-        output_path,
-    }))
-}
-
-fn parse_method(raw: &str) -> Result<Method, String> {
-    match raw.to_ascii_uppercase().as_str() {
-        "GET" => Ok(Method::Get),
-        "POST" => Ok(Method::Post),
-        "PUT" => Ok(Method::Put),
-        "DELETE" => Ok(Method::Delete),
-        "PATCH" => Ok(Method::Patch),
-        "HEAD" => Ok(Method::Head),
-        _ => Err(format!("unsupported HTTP method `{raw}`")),
-    }
-}
-
-fn parse_header(raw: &str) -> Result<(String, String), String> {
-    let Some((name, value)) = raw.split_once(':') else {
-        return Err(format!("invalid header `{raw}`"));
-    };
-
-    let value = trim_header_value_ows(value);
-    if !is_valid_header_name(name) || !is_valid_header_value(value) {
-        return Err(format!("invalid header `{raw}`"));
-    }
-
-    Ok((name.to_string(), value.to_string()))
-}
-
-fn is_valid_header_name(name: &str) -> bool {
-    !name.is_empty()
-        && name
-            .bytes()
-            .all(|byte| matches!(byte, b'!' | b'#'..=b'\'' | b'*' | b'+' | b'-' | b'.' | b'0'..=b'9' | b'A'..=b'Z' | b'^'..=b'z' | b'|' | b'~'))
-}
-
-fn is_valid_header_value(value: &str) -> bool {
-    value
-        .bytes()
-        .all(|byte| matches!(byte, b'\t' | b' '..=b'~') || byte >= 0x80)
-}
-
-fn trim_header_value_ows(value: &str) -> &str {
-    value.trim_matches(|ch| matches!(ch, ' ' | '\t'))
-}
-
-fn print_help() {
-    println!("Usage: curl [options...] <url>");
-    println!();
-    println!("Supported options:");
-    println!("  -s, --silent           Ignore progress output (no-op)");
-    println!("  -X, --request METHOD   Set the HTTP method");
-    println!("  -d, --data DATA        Send request body data");
-    println!("  -H, --header HEADER    Add a request header");
-    println!("  -o, --output PATH      Write the response body to a file");
-    println!("  -h, --help             Show this help text");
-}
-
-#[cfg(test)]
-mod tests {
-    use super::parse_header;
-
-    #[test]
-    fn parse_header_accepts_valid_header() {
-        assert_eq!(
-            parse_header("X-Test: hello world"),
-            Ok(("X-Test".to_string(), "hello world".to_string()))
-        );
-    }
-
-    #[test]
-    fn parse_header_rejects_empty_or_invalid_names() {
-        assert!(parse_header(": value").is_err());
-        assert!(parse_header(" X-Test: value").is_err());
-        assert!(parse_header("Bad Name: value").is_err());
-        assert!(parse_header("Bad@Name: value").is_err());
-        assert!(parse_header("X-Test\r\n: value").is_err());
-        assert!(parse_header("X-Test\t: value").is_err());
-    }
-
-    #[test]
-    fn parse_header_rejects_control_bytes_in_values() {
-        assert!(parse_header("X-Test: hello\r\nInjected: value").is_err());
-        assert!(parse_header("X-Test: hello\r\n").is_err());
-        assert!(parse_header("X-Test: hello\u{7f}").is_err());
-    }
-}
diff --git a/registry/native/crates/commands/cut/Cargo.toml b/registry/native/crates/commands/cut/Cargo.toml
deleted file mode 100644
index 75e38c3ad..000000000
--- a/registry/native/crates/commands/cut/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-cut"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "cut standalone binary for secure-exec VM"
-
-[[bin]]
-name = "cut"
-path = "src/main.rs"
-
-[dependencies]
-uu_cut = "0.7.0"
diff --git a/registry/native/crates/commands/cut/src/main.rs b/registry/native/crates/commands/cut/src/main.rs
deleted file mode 100644
index a31e679ee..000000000
--- a/registry/native/crates/commands/cut/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_cut::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/date/Cargo.toml b/registry/native/crates/commands/date/Cargo.toml
deleted file mode 100644
index 54f324a98..000000000
--- a/registry/native/crates/commands/date/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-date"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "date standalone binary for secure-exec VM"
-
-[[bin]]
-name = "date"
-path = "src/main.rs"
-
-[dependencies]
-uu_date = "0.7.0"
diff --git a/registry/native/crates/commands/date/src/main.rs b/registry/native/crates/commands/date/src/main.rs
deleted file mode 100644
index 4284d22b8..000000000
--- a/registry/native/crates/commands/date/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_date::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/dd/Cargo.toml b/registry/native/crates/commands/dd/Cargo.toml
deleted file mode 100644
index 9f31bd6ea..000000000
--- a/registry/native/crates/commands/dd/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-dd"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "dd standalone binary for secure-exec VM"
-
-[[bin]]
-name = "dd"
-path = "src/main.rs"
-
-[dependencies]
-uu_dd = "0.7.0"
diff --git a/registry/native/crates/commands/dd/src/main.rs b/registry/native/crates/commands/dd/src/main.rs
deleted file mode 100644
index 75e9761c1..000000000
--- a/registry/native/crates/commands/dd/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_dd::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/diff/Cargo.toml b/registry/native/crates/commands/diff/Cargo.toml
deleted file mode 100644
index ea9f00c8a..000000000
--- a/registry/native/crates/commands/diff/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-diff"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "diff standalone binary for secure-exec VM"
-
-[[bin]]
-name = "diff"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-diff = { path = "../../libs/diff" }
diff --git a/registry/native/crates/commands/diff/src/main.rs b/registry/native/crates/commands/diff/src/main.rs
deleted file mode 100644
index d892591ad..000000000
--- a/registry/native/crates/commands/diff/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_diff::main(args));
-}
diff --git a/registry/native/crates/commands/dircolors/Cargo.toml b/registry/native/crates/commands/dircolors/Cargo.toml
deleted file mode 100644
index 2fb6f1a59..000000000
--- a/registry/native/crates/commands/dircolors/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-dircolors"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "dircolors standalone binary for secure-exec VM"
-
-[[bin]]
-name = "dircolors"
-path = "src/main.rs"
-
-[dependencies]
-uu_dircolors = "0.7.0"
diff --git a/registry/native/crates/commands/dircolors/src/main.rs b/registry/native/crates/commands/dircolors/src/main.rs
deleted file mode 100644
index dc985c1f8..000000000
--- a/registry/native/crates/commands/dircolors/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_dircolors::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/dirname/Cargo.toml b/registry/native/crates/commands/dirname/Cargo.toml
deleted file mode 100644
index 26e18d7de..000000000
--- a/registry/native/crates/commands/dirname/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-dirname"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "dirname standalone binary for secure-exec VM"
-
-[[bin]]
-name = "dirname"
-path = "src/main.rs"
-
-[dependencies]
-uu_dirname = "0.7.0"
diff --git a/registry/native/crates/commands/dirname/src/main.rs b/registry/native/crates/commands/dirname/src/main.rs
deleted file mode 100644
index fb02bc5e7..000000000
--- a/registry/native/crates/commands/dirname/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_dirname::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/du/Cargo.toml b/registry/native/crates/commands/du/Cargo.toml
deleted file mode 100644
index b2101f344..000000000
--- a/registry/native/crates/commands/du/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-du"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "du standalone binary for secure-exec VM"
-
-[[bin]]
-name = "du"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-du = { path = "../../libs/du" }
diff --git a/registry/native/crates/commands/du/src/main.rs b/registry/native/crates/commands/du/src/main.rs
deleted file mode 100644
index f76d032ac..000000000
--- a/registry/native/crates/commands/du/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_du::main(args));
-}
diff --git a/registry/native/crates/commands/echo/Cargo.toml b/registry/native/crates/commands/echo/Cargo.toml
deleted file mode 100644
index 09e32de69..000000000
--- a/registry/native/crates/commands/echo/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-echo"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "echo standalone binary for secure-exec VM"
-
-[[bin]]
-name = "echo"
-path = "src/main.rs"
-
-[dependencies]
-uu_echo = "0.7.0"
diff --git a/registry/native/crates/commands/echo/src/main.rs b/registry/native/crates/commands/echo/src/main.rs
deleted file mode 100644
index c95ce13b9..000000000
--- a/registry/native/crates/commands/echo/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_echo::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/env/Cargo.toml b/registry/native/crates/commands/env/Cargo.toml
deleted file mode 100644
index f214d9ac4..000000000
--- a/registry/native/crates/commands/env/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-env"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "env standalone binary for secure-exec VM"
-
-[[bin]]
-name = "env"
-path = "src/main.rs"
-
-[dependencies]
-shims = { package = "secureexec-shims", path = "../../libs/shims" }
diff --git a/registry/native/crates/commands/env/src/main.rs b/registry/native/crates/commands/env/src/main.rs
deleted file mode 100644
index a66102a90..000000000
--- a/registry/native/crates/commands/env/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(shims::env::env(args));
-}
diff --git a/registry/native/crates/commands/expand/Cargo.toml b/registry/native/crates/commands/expand/Cargo.toml
deleted file mode 100644
index 9440c6bb9..000000000
--- a/registry/native/crates/commands/expand/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-expand"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "expand standalone binary for secure-exec VM"
-
-[[bin]]
-name = "expand"
-path = "src/main.rs"
-
-[dependencies]
-uu_expand = "0.7.0"
diff --git a/registry/native/crates/commands/expand/src/main.rs b/registry/native/crates/commands/expand/src/main.rs
deleted file mode 100644
index 1a2bdbdd4..000000000
--- a/registry/native/crates/commands/expand/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_expand::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/expr/Cargo.toml b/registry/native/crates/commands/expr/Cargo.toml
deleted file mode 100644
index 68acb9073..000000000
--- a/registry/native/crates/commands/expr/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-expr"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "expr standalone binary for secure-exec VM"
-
-[[bin]]
-name = "expr"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-expr = { path = "../../libs/expr" }
diff --git a/registry/native/crates/commands/expr/src/main.rs b/registry/native/crates/commands/expr/src/main.rs
deleted file mode 100644
index 59edddd0f..000000000
--- a/registry/native/crates/commands/expr/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_expr::main(args));
-}
diff --git a/registry/native/crates/commands/factor/Cargo.toml b/registry/native/crates/commands/factor/Cargo.toml
deleted file mode 100644
index 3ded9a0c2..000000000
--- a/registry/native/crates/commands/factor/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-factor"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "factor standalone binary for secure-exec VM"
-
-[[bin]]
-name = "factor"
-path = "src/main.rs"
-
-[dependencies]
-uu_factor = "0.7.0"
diff --git a/registry/native/crates/commands/factor/src/main.rs b/registry/native/crates/commands/factor/src/main.rs
deleted file mode 100644
index f25f4a2b6..000000000
--- a/registry/native/crates/commands/factor/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_factor::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/false/Cargo.toml b/registry/native/crates/commands/false/Cargo.toml
deleted file mode 100644
index f30511a36..000000000
--- a/registry/native/crates/commands/false/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-false"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "false standalone binary for secure-exec VM"
-
-[[bin]]
-name = "false"
-path = "src/main.rs"
-
-[dependencies]
-uu_false = "0.7.0"
diff --git a/registry/native/crates/commands/false/src/main.rs b/registry/native/crates/commands/false/src/main.rs
deleted file mode 100644
index 204efcbe4..000000000
--- a/registry/native/crates/commands/false/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_false::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/fd/Cargo.toml b/registry/native/crates/commands/fd/Cargo.toml
deleted file mode 100644
index 12f78cdd3..000000000
--- a/registry/native/crates/commands/fd/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-fd"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "fd standalone binary for secure-exec VM"
-
-[[bin]]
-name = "fd"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-fd = { path = "../../libs/fd" }
diff --git a/registry/native/crates/commands/fd/src/main.rs b/registry/native/crates/commands/fd/src/main.rs
deleted file mode 100644
index e74e129d8..000000000
--- a/registry/native/crates/commands/fd/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_fd::main(args));
-}
diff --git a/registry/native/crates/commands/file/Cargo.toml b/registry/native/crates/commands/file/Cargo.toml
deleted file mode 100644
index cabc72322..000000000
--- a/registry/native/crates/commands/file/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-file"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "file standalone binary for secure-exec VM"
-
-[[bin]]
-name = "file"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-file-cmd = { path = "../../libs/file-cmd" }
diff --git a/registry/native/crates/commands/file/src/main.rs b/registry/native/crates/commands/file/src/main.rs
deleted file mode 100644
index 75ed52c6c..000000000
--- a/registry/native/crates/commands/file/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_file_cmd::main(args));
-}
diff --git a/registry/native/crates/commands/find/Cargo.toml b/registry/native/crates/commands/find/Cargo.toml
deleted file mode 100644
index 1b670a6fc..000000000
--- a/registry/native/crates/commands/find/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-find"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "find standalone binary for secure-exec VM"
-
-[[bin]]
-name = "find"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-find = { path = "../../libs/find" }
diff --git a/registry/native/crates/commands/find/src/main.rs b/registry/native/crates/commands/find/src/main.rs
deleted file mode 100644
index 5887b1a7a..000000000
--- a/registry/native/crates/commands/find/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_find::main(args));
-}
diff --git a/registry/native/crates/commands/fmt/Cargo.toml b/registry/native/crates/commands/fmt/Cargo.toml
deleted file mode 100644
index cb2e5ae67..000000000
--- a/registry/native/crates/commands/fmt/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-fmt"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "fmt standalone binary for secure-exec VM"
-
-[[bin]]
-name = "fmt"
-path = "src/main.rs"
-
-[dependencies]
-uu_fmt = "0.7.0"
diff --git a/registry/native/crates/commands/fmt/src/main.rs b/registry/native/crates/commands/fmt/src/main.rs
deleted file mode 100644
index 727d70cb5..000000000
--- a/registry/native/crates/commands/fmt/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_fmt::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/fold/Cargo.toml b/registry/native/crates/commands/fold/Cargo.toml
deleted file mode 100644
index a8b067be4..000000000
--- a/registry/native/crates/commands/fold/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-fold"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "fold standalone binary for secure-exec VM"
-
-[[bin]]
-name = "fold"
-path = "src/main.rs"
-
-[dependencies]
-uu_fold = "0.7.0"
diff --git a/registry/native/crates/commands/fold/src/main.rs b/registry/native/crates/commands/fold/src/main.rs
deleted file mode 100644
index 7565b3264..000000000
--- a/registry/native/crates/commands/fold/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_fold::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/git/Cargo.toml b/registry/native/crates/commands/git/Cargo.toml
deleted file mode 100644
index 3ae142717..000000000
--- a/registry/native/crates/commands/git/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-git"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "git standalone binary for secure-exec VM"
-
-[[bin]]
-name = "git"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-git = { path = "../../libs/git" }
diff --git a/registry/native/crates/commands/git/src/main.rs b/registry/native/crates/commands/git/src/main.rs
deleted file mode 100644
index 83886647f..000000000
--- a/registry/native/crates/commands/git/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_git::main(args));
-}
diff --git a/registry/native/crates/commands/grep/Cargo.toml b/registry/native/crates/commands/grep/Cargo.toml
deleted file mode 100644
index fc3189a8d..000000000
--- a/registry/native/crates/commands/grep/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-grep"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "grep standalone binary for secure-exec VM"
-
-[[bin]]
-name = "grep"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-grep = { path = "../../libs/grep" }
diff --git a/registry/native/crates/commands/grep/src/main.rs b/registry/native/crates/commands/grep/src/main.rs
deleted file mode 100644
index ef8a789bd..000000000
--- a/registry/native/crates/commands/grep/src/main.rs
+++ /dev/null
@@ -1,13 +0,0 @@
-fn main() {
-    use std::io::Write;
-
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    let mut code = secureexec_grep::main(args);
-    if let Err(error) = std::io::stdout().flush() {
-        eprintln!("Error flushing stdout: {error}");
-        if code == 0 {
-            code = 2;
-        }
-    }
-    std::process::exit(code);
-}
diff --git a/registry/native/crates/commands/gzip/Cargo.toml b/registry/native/crates/commands/gzip/Cargo.toml
deleted file mode 100644
index c6f1842eb..000000000
--- a/registry/native/crates/commands/gzip/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-gzip"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "gzip standalone binary for secure-exec VM"
-
-[[bin]]
-name = "gzip"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-gzip = { path = "../../libs/gzip" }
diff --git a/registry/native/crates/commands/gzip/src/main.rs b/registry/native/crates/commands/gzip/src/main.rs
deleted file mode 100644
index 59581509a..000000000
--- a/registry/native/crates/commands/gzip/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_gzip::main(args));
-}
diff --git a/registry/native/crates/commands/head/Cargo.toml b/registry/native/crates/commands/head/Cargo.toml
deleted file mode 100644
index 49d35a6e1..000000000
--- a/registry/native/crates/commands/head/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-head"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "head standalone binary for secure-exec VM"
-
-[[bin]]
-name = "head"
-path = "src/main.rs"
-
-[dependencies]
-uu_head = "0.7.0"
diff --git a/registry/native/crates/commands/head/src/main.rs b/registry/native/crates/commands/head/src/main.rs
deleted file mode 100644
index aa3a2b805..000000000
--- a/registry/native/crates/commands/head/src/main.rs
+++ /dev/null
@@ -1,13 +0,0 @@
-fn main() {
-    use std::io::Write;
-
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    let mut code = uu_head::uumain(args.into_iter());
-    if let Err(error) = std::io::stdout().flush() {
-        eprintln!("Error flushing stdout: {error}");
-        if code == 0 {
-            code = 1;
-        }
-    }
-    std::process::exit(code);
-}
diff --git a/registry/native/crates/commands/http-test/Cargo.toml b/registry/native/crates/commands/http-test/Cargo.toml
deleted file mode 100644
index f6aae5bde..000000000
--- a/registry/native/crates/commands/http-test/Cargo.toml
+++ /dev/null
@@ -1,19 +0,0 @@
-[package]
-name = "cmd-http-test"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "HTTP client test binary for validating wasi-http through host_net"
-
-[features]
-default = ["bin"]
-bin = []
-
-[[bin]]
-name = "http-test"
-path = "src/main.rs"
-test = false
-required-features = ["bin"]
-
-[dependencies]
-wasi-http = { package = "secureexec-wasi-http", path = "../../libs/wasi-http" }
diff --git a/registry/native/crates/commands/http-test/src/lib.rs b/registry/native/crates/commands/http-test/src/lib.rs
deleted file mode 100644
index 45b8b912a..000000000
--- a/registry/native/crates/commands/http-test/src/lib.rs
+++ /dev/null
@@ -1,29 +0,0 @@
-pub fn parse_header(raw: &str) -> Result<(String, String), String> {
-    let Some((name, value)) = raw.split_once(':') else {
-        return Err("invalid header".to_string());
-    };
-
-    let value = trim_header_value_ows(value);
-    if !is_valid_header_name(name) || !is_valid_header_value(value) {
-        return Err("invalid header".to_string());
-    }
-
-    Ok((name.to_string(), value.to_string()))
-}
-
-fn is_valid_header_name(name: &str) -> bool {
-    !name.is_empty()
-        && name
-            .bytes()
-            .all(|byte| matches!(byte, b'!' | b'#'..=b'\'' | b'*' | b'+' | b'-' | b'.' | b'0'..=b'9' | b'A'..=b'Z' | b'^'..=b'z' | b'|' | b'~'))
-}
-
-fn is_valid_header_value(value: &str) -> bool {
-    value
-        .bytes()
-        .all(|byte| matches!(byte, b'\t' | b' '..=b'~') || byte >= 0x80)
-}
-
-fn trim_header_value_ows(value: &str) -> &str {
-    value.trim_matches(|ch| matches!(ch, ' ' | '\t'))
-}
diff --git a/registry/native/crates/commands/http-test/src/main.rs b/registry/native/crates/commands/http-test/src/main.rs
deleted file mode 100644
index 1a33c48f3..000000000
--- a/registry/native/crates/commands/http-test/src/main.rs
+++ /dev/null
@@ -1,111 +0,0 @@
-//! HTTP client test binary for validating wasi-http through host_net.
-//!
-//! Usage:
-//!   http-test get <url>
-//!   http-test post <url> <json-body>
-//!   http-test headers <url> <name:value> [<name:value> ...]
-//!   http-test sse <url>
-//!
-//! Prints status code and body to stdout. Errors go to stderr.
-use cmd_http_test::parse_header;
-
-const MAX_SSE_EVENTS: usize = 100;
-
-fn main() {
-    let args: Vec<String> = std::env::args().collect();
-
-    if args.len() < 3 {
-        eprintln!("usage: http-test <command> <url> [args...]");
-        eprintln!("  get <url>              — GET request, print body");
-        eprintln!("  post <url> <json>      — POST with JSON body");
-        eprintln!("  headers <url> <h:v>... — GET with custom headers");
-        eprintln!("  sse <url>              — Stream SSE events");
-        std::process::exit(1);
-    }
-
-    let command = &args[1];
-    let url = &args[2];
-
-    let result = match command.as_str() {
-        "get" => do_get(url),
-        "post" => {
-            let body = args.get(3).map(|s| s.as_str()).unwrap_or("{}");
-            do_post(url, body)
-        }
-        "headers" => {
-            let header_args: Vec<&str> = args[3..].iter().map(|s| s.as_str()).collect();
-            do_get_with_headers(url, &header_args)
-        }
-        "sse" => do_sse(url),
-        _ => {
-            eprintln!("unknown command: {}", command);
-            std::process::exit(1);
-        }
-    };
-
-    if let Err(e) = result {
-        eprintln!("error: {}", e);
-        std::process::exit(1);
-    }
-}
-
-fn do_get(url: &str) -> Result<(), wasi_http::HttpError> {
-    let resp = wasi_http::get(url)?;
-    println!("status: {}", resp.status);
-    println!("body: {}", resp.text()?);
-    Ok(())
-}
-
-fn do_post(url: &str, json: &str) -> Result<(), wasi_http::HttpError> {
-    let resp = wasi_http::post_json(url, json)?;
-    println!("status: {}", resp.status);
-    println!("body: {}", resp.text()?);
-    Ok(())
-}
-
-fn do_get_with_headers(url: &str, headers: &[&str]) -> Result<(), wasi_http::HttpError> {
-    let client = wasi_http::HttpClient::new();
-    let mut req = wasi_http::Request::new(wasi_http::Method::Get, url)?;
-    for h in headers {
-        let (name, value) = parse_header(h).map_err(wasi_http::HttpError::Protocol)?;
-        req.headers.push((name, value));
-    }
-    let resp = client.send(&req)?;
-    println!("status: {}", resp.status);
-    println!("body: {}", resp.text()?);
-    Ok(())
-}
-
-fn do_sse(url: &str) -> Result<(), wasi_http::HttpError> {
-    let client = wasi_http::HttpClient::new();
-    let req =
-        wasi_http::Request::new(wasi_http::Method::Get, url)?.header("Accept", "text/event-stream");
-    let (resp, mut reader) = client.send_sse(&req)?;
-    println!("status: {}", resp.status);
-
-    for _ in 0..MAX_SSE_EVENTS {
-        let event = match reader.next_event() {
-            Ok(Some(event)) => event,
-            Ok(None) => {
-                reader.close();
-                return Ok(());
-            }
-            Err(error) => {
-                reader.close();
-                return Err(error);
-            }
-        };
-
-        if let Some(ref ev_type) = event.event {
-            println!("event: {}", ev_type);
-        }
-        println!("data: {}", event.data);
-        if let Some(ref id) = event.id {
-            println!("id: {}", id);
-        }
-        println!();
-    }
-
-    reader.close();
-    Ok(())
-}
diff --git a/registry/native/crates/commands/http-test/tests/header_validation.rs b/registry/native/crates/commands/http-test/tests/header_validation.rs
deleted file mode 100644
index 2fea09e45..000000000
--- a/registry/native/crates/commands/http-test/tests/header_validation.rs
+++ /dev/null
@@ -1,19 +0,0 @@
-use cmd_http_test::parse_header;
-
-#[test]
-fn rejects_header_without_colon() {
-    assert!(parse_header("X-Test").is_err());
-}
-
-#[test]
-fn rejects_header_injection() {
-    assert!(parse_header("X-Test: ok\r\nInjected: value").is_err());
-}
-
-#[test]
-fn accepts_valid_header() {
-    assert_eq!(
-        parse_header("X-Test:  ok\t"),
-        Ok(("X-Test".to_string(), "ok".to_string()))
-    );
-}
diff --git a/registry/native/crates/commands/join/Cargo.toml b/registry/native/crates/commands/join/Cargo.toml
deleted file mode 100644
index 408d1ceb4..000000000
--- a/registry/native/crates/commands/join/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-join"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "join standalone binary for secure-exec VM"
-
-[[bin]]
-name = "join"
-path = "src/main.rs"
-
-[dependencies]
-uu_join = "0.7.0"
diff --git a/registry/native/crates/commands/join/src/main.rs b/registry/native/crates/commands/join/src/main.rs
deleted file mode 100644
index d24d57295..000000000
--- a/registry/native/crates/commands/join/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_join::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/jq/Cargo.toml b/registry/native/crates/commands/jq/Cargo.toml
deleted file mode 100644
index 31e46ae09..000000000
--- a/registry/native/crates/commands/jq/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-jq"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "jq standalone binary for secure-exec VM"
-
-[[bin]]
-name = "jq"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-jq = { path = "../../libs/jq" }
diff --git a/registry/native/crates/commands/jq/src/main.rs b/registry/native/crates/commands/jq/src/main.rs
deleted file mode 100644
index b99f91eb3..000000000
--- a/registry/native/crates/commands/jq/src/main.rs
+++ /dev/null
@@ -1,13 +0,0 @@
-fn main() {
-    use std::io::Write;
-
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    let mut code = secureexec_jq::main(args);
-    if let Err(error) = std::io::stdout().flush() {
-        eprintln!("Error flushing stdout: {error}");
-        if code == 0 {
-            code = 1;
-        }
-    }
-    std::process::exit(code);
-}
diff --git a/registry/native/crates/commands/link/Cargo.toml b/registry/native/crates/commands/link/Cargo.toml
deleted file mode 100644
index 79d909136..000000000
--- a/registry/native/crates/commands/link/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-link"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "link standalone binary for secure-exec VM"
-
-[[bin]]
-name = "link"
-path = "src/main.rs"
-
-[dependencies]
-uu_link = "0.7.0"
diff --git a/registry/native/crates/commands/link/src/main.rs b/registry/native/crates/commands/link/src/main.rs
deleted file mode 100644
index e85d7e65c..000000000
--- a/registry/native/crates/commands/link/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_link::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/ln/Cargo.toml b/registry/native/crates/commands/ln/Cargo.toml
deleted file mode 100644
index ebb02bfe6..000000000
--- a/registry/native/crates/commands/ln/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-ln"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "ln standalone binary for secure-exec VM"
-
-[[bin]]
-name = "ln"
-path = "src/main.rs"
-
-[dependencies]
-uu_ln = "0.7.0"
diff --git a/registry/native/crates/commands/ln/src/main.rs b/registry/native/crates/commands/ln/src/main.rs
deleted file mode 100644
index 1c65cdf1a..000000000
--- a/registry/native/crates/commands/ln/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_ln::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/logname/Cargo.toml b/registry/native/crates/commands/logname/Cargo.toml
deleted file mode 100644
index 6f7bbf5b7..000000000
--- a/registry/native/crates/commands/logname/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-logname"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "logname standalone binary for secure-exec VM"
-
-[[bin]]
-name = "logname"
-path = "src/main.rs"
-
-[dependencies]
-uu_logname = "0.7.0"
diff --git a/registry/native/crates/commands/logname/src/main.rs b/registry/native/crates/commands/logname/src/main.rs
deleted file mode 100644
index a370bb7c8..000000000
--- a/registry/native/crates/commands/logname/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_logname::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/ls/Cargo.toml b/registry/native/crates/commands/ls/Cargo.toml
deleted file mode 100644
index 025bfdfa0..000000000
--- a/registry/native/crates/commands/ls/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-ls"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "ls standalone binary for secure-exec VM"
-
-[[bin]]
-name = "ls"
-path = "src/main.rs"
-
-[dependencies]
-uu_ls = "0.7.0"
diff --git a/registry/native/crates/commands/ls/src/main.rs b/registry/native/crates/commands/ls/src/main.rs
deleted file mode 100644
index 6f7f935ca..000000000
--- a/registry/native/crates/commands/ls/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_ls::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/md5sum/Cargo.toml b/registry/native/crates/commands/md5sum/Cargo.toml
deleted file mode 100644
index bd499cdc5..000000000
--- a/registry/native/crates/commands/md5sum/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-md5sum"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "md5sum standalone binary for secure-exec VM"
-
-[[bin]]
-name = "md5sum"
-path = "src/main.rs"
-
-[dependencies]
-uu_md5sum = "0.7.0"
diff --git a/registry/native/crates/commands/md5sum/src/main.rs b/registry/native/crates/commands/md5sum/src/main.rs
deleted file mode 100644
index 32dee14c5..000000000
--- a/registry/native/crates/commands/md5sum/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_md5sum::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/mkdir/Cargo.toml b/registry/native/crates/commands/mkdir/Cargo.toml
deleted file mode 100644
index 2e2cc2de9..000000000
--- a/registry/native/crates/commands/mkdir/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-mkdir"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "mkdir standalone binary for secure-exec VM"
-
-[[bin]]
-name = "mkdir"
-path = "src/main.rs"
-
-[dependencies]
-uu_mkdir = "0.7.0"
diff --git a/registry/native/crates/commands/mkdir/src/main.rs b/registry/native/crates/commands/mkdir/src/main.rs
deleted file mode 100644
index 8e11b578f..000000000
--- a/registry/native/crates/commands/mkdir/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_mkdir::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/mktemp/Cargo.toml b/registry/native/crates/commands/mktemp/Cargo.toml
deleted file mode 100644
index faa0c2881..000000000
--- a/registry/native/crates/commands/mktemp/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-mktemp"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "mktemp standalone binary for secure-exec VM"
-
-[[bin]]
-name = "mktemp"
-path = "src/main.rs"
-
-[dependencies]
-uu_mktemp = "0.7.0"
diff --git a/registry/native/crates/commands/mktemp/src/main.rs b/registry/native/crates/commands/mktemp/src/main.rs
deleted file mode 100644
index 398b45153..000000000
--- a/registry/native/crates/commands/mktemp/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_mktemp::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/mv/Cargo.toml b/registry/native/crates/commands/mv/Cargo.toml
deleted file mode 100644
index 3e52df17b..000000000
--- a/registry/native/crates/commands/mv/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-mv"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "mv standalone binary for secure-exec VM"
-
-[[bin]]
-name = "mv"
-path = "src/main.rs"
-
-[dependencies]
-uu_mv = "0.7.0"
diff --git a/registry/native/crates/commands/mv/src/main.rs b/registry/native/crates/commands/mv/src/main.rs
deleted file mode 100644
index 1ff732419..000000000
--- a/registry/native/crates/commands/mv/src/main.rs
+++ /dev/null
@@ -1,241 +0,0 @@
-use std::ffi::{OsStr, OsString};
-use std::fs;
-use std::io;
-use std::path::{Path, PathBuf};
-
-fn main() {
-    let args: Vec<OsString> = std::env::args_os().collect();
-
-    if let Some(exit_code) = try_simple_mv(&args) {
-        std::process::exit(exit_code);
-    }
-
-    std::process::exit(uu_mv::uumain(args.into_iter()));
-}
-
-fn try_simple_mv(args: &[OsString]) -> Option<i32> {
-    let operands = parse_plain_operands(args)?;
-    if operands.len() < 2 {
-        return None;
-    }
-
-    match run_simple_mv(&operands) {
-        Ok(()) => Some(0),
-        Err(err) => {
-            eprintln!("mv: {}", err);
-            Some(1)
-        }
-    }
-}
-
-fn parse_plain_operands(args: &[OsString]) -> Option<Vec<PathBuf>> {
-    let mut operands = Vec::new();
-    let mut literal = false;
-
-    for arg in args.iter().skip(1) {
-        let text = arg.to_string_lossy();
-        if !literal && text == "--" {
-            literal = true;
-            continue;
-        }
-        if !literal && text.starts_with('-') && text != "-" {
-            return None;
-        }
-        operands.push(PathBuf::from(arg));
-    }
-
-    Some(operands)
-}
-
-fn run_simple_mv(operands: &[PathBuf]) -> io::Result<()> {
-    let (target, sources) = operands
-        .split_last()
-        .ok_or_else(|| io::Error::new(io::ErrorKind::InvalidInput, "missing destination"))?;
-    let target_meta = metadata_if_exists(target)?;
-    let dest_is_dir = sources.len() > 1 || target_meta.as_ref().is_some_and(fs::Metadata::is_dir);
-
-    if sources.len() > 1 && !dest_is_dir {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            format!("target '{}' is not a directory", target.display()),
-        ));
-    }
-
-    for source in sources {
-        let destination = if dest_is_dir {
-            target.join(file_name(source)?)
-        } else {
-            target.to_path_buf()
-        };
-        move_path(source, &destination)?;
-    }
-
-    Ok(())
-}
-
-fn move_path(source: &Path, destination: &Path) -> io::Result<()> {
-    if paths_are_same_existing_file(source, destination)? {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            format!(
-                "'{}' and '{}' are the same file",
-                source.display(),
-                destination.display()
-            ),
-        ));
-    }
-
-    let metadata = fs::symlink_metadata(source)?;
-    let file_type = metadata.file_type();
-
-    if file_type.is_symlink() {
-        move_symlink(source, destination)
-    } else if metadata.is_dir() {
-        move_dir(source, destination)
-    } else {
-        move_file(source, destination, &metadata.permissions())
-    }
-}
-
-fn move_file(source: &Path, destination: &Path, permissions: &fs::Permissions) -> io::Result<()> {
-    remove_existing_non_dir(destination)?;
-    fs::copy(source, destination)?;
-    if let Err(error) = fs::set_permissions(destination, permissions.clone()) {
-        if !is_ignorable_permission_copy_error(&error) {
-            return Err(error);
-        }
-    }
-    fs::remove_file(source)
-}
-
-fn move_symlink(source: &Path, destination: &Path) -> io::Result<()> {
-    remove_existing_non_dir(destination)?;
-    let target = fs::read_link(source)?;
-    #[allow(deprecated)]
-    std::fs::soft_link(&target, destination)?;
-    fs::remove_file(source)
-}
-
-fn move_dir(source: &Path, destination: &Path) -> io::Result<()> {
-    if destination_resolves_inside_source(source, destination)? {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            format!(
-                "cannot move '{}' to a subdirectory of itself, '{}'",
-                source.display(),
-                destination.display()
-            ),
-        ));
-    }
-    if metadata_if_exists(destination)?.is_some() {
-        return Err(io::Error::new(
-            io::ErrorKind::AlreadyExists,
-            format!(
-                "cannot overwrite '{}': directory already exists",
-                destination.display()
-            ),
-        ));
-    }
-
-    fs::create_dir(destination)?;
-
-    for entry in fs::read_dir(source)? {
-        let entry = entry?;
-        let child_source = entry.path();
-        let child_destination = destination.join(entry.file_name());
-        move_path(&child_source, &child_destination)?;
-    }
-
-    fs::remove_dir(source)
-}
-
-fn remove_existing_non_dir(path: &Path) -> io::Result<()> {
-    if let Some(metadata) = metadata_if_exists(path)? {
-        if metadata.is_dir() {
-            return Err(io::Error::new(
-                io::ErrorKind::AlreadyExists,
-                format!("cannot overwrite directory '{}'", path.display()),
-            ));
-        }
-        fs::remove_file(path)?;
-    }
-    Ok(())
-}
-
-fn paths_are_same_existing_file(source: &Path, destination: &Path) -> io::Result<bool> {
-    if metadata_if_exists(destination)?.is_none() {
-        return Ok(false);
-    }
-
-    let Some(source) = canonicalize_existing_path(source)? else {
-        return Ok(false);
-    };
-    let Some(destination) = canonicalize_existing_path(destination)? else {
-        return Ok(false);
-    };
-
-    Ok(source == destination)
-}
-
-fn canonicalize_existing_path(path: &Path) -> io::Result<Option<PathBuf>> {
-    match fs::canonicalize(path) {
-        Ok(path) => Ok(Some(path)),
-        Err(_) if fs::symlink_metadata(path)?.file_type().is_symlink() => Ok(None),
-        Err(error) => Err(error),
-    }
-}
-
-fn destination_resolves_inside_source(source: &Path, destination: &Path) -> io::Result<bool> {
-    let source = fs::canonicalize(source)?;
-    let Some(parent) = destination.parent() else {
-        return Ok(false);
-    };
-    let parent = if parent.as_os_str().is_empty() {
-        Path::new(".")
-    } else {
-        parent
-    };
-    let Some(parent) = canonical_existing_ancestor(parent)? else {
-        return Ok(false);
-    };
-
-    Ok(parent.starts_with(source))
-}
-
-fn canonical_existing_ancestor(path: &Path) -> io::Result<Option<PathBuf>> {
-    for ancestor in path.ancestors() {
-        let ancestor = if ancestor.as_os_str().is_empty() {
-            Path::new(".")
-        } else {
-            ancestor
-        };
-        match fs::canonicalize(ancestor) {
-            Ok(path) => return Ok(Some(path)),
-            Err(error) if error.kind() == io::ErrorKind::NotFound => {}
-            Err(error) => return Err(error),
-        }
-    }
-
-    Ok(None)
-}
-
-fn metadata_if_exists(path: &Path) -> io::Result<Option<fs::Metadata>> {
-    match fs::symlink_metadata(path) {
-        Ok(metadata) => Ok(Some(metadata)),
-        Err(err) if err.kind() == io::ErrorKind::NotFound => Ok(None),
-        Err(err) => Err(err),
-    }
-}
-
-fn file_name(path: &Path) -> io::Result<&OsStr> {
-    path.file_name().ok_or_else(|| {
-        io::Error::new(
-            io::ErrorKind::InvalidInput,
-            format!("cannot determine file name for '{}'", path.display()),
-        )
-    })
-}
-
-fn is_ignorable_permission_copy_error(error: &io::Error) -> bool {
-    error.kind() == io::ErrorKind::Unsupported || matches!(error.raw_os_error(), Some(52 | 95))
-}
diff --git a/registry/native/crates/commands/mv/tests/simple_mv.rs b/registry/native/crates/commands/mv/tests/simple_mv.rs
deleted file mode 100644
index 6129f6f5c..000000000
--- a/registry/native/crates/commands/mv/tests/simple_mv.rs
+++ /dev/null
@@ -1,161 +0,0 @@
-use std::fs;
-use std::path::{Path, PathBuf};
-use std::process::Command;
-use std::time::{SystemTime, UNIX_EPOCH};
-
-struct TestDir {
-    path: PathBuf,
-}
-
-impl TestDir {
-    fn new(name: &str) -> Self {
-        let nonce = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("system time should be after epoch")
-            .as_nanos();
-        let path = std::env::temp_dir().join(format!("cmd-mv-{name}-{nonce}"));
-        fs::create_dir(&path).expect("test dir should be created");
-        Self { path }
-    }
-
-    fn path(&self) -> &Path {
-        &self.path
-    }
-}
-
-impl Drop for TestDir {
-    fn drop(&mut self) {
-        let _ = fs::remove_dir_all(&self.path);
-    }
-}
-
-fn run_mv(args: &[&Path]) -> std::process::Output {
-    let mut command = Command::new(env!("CARGO_BIN_EXE_mv"));
-    for arg in args {
-        command.arg(arg);
-    }
-    command.output().expect("mv should run")
-}
-
-#[test]
-fn same_source_and_destination_does_not_delete_file() {
-    let dir = TestDir::new("same-file");
-    let file = dir.path().join("file.txt");
-    fs::write(&file, "still here").expect("file should be written");
-
-    let output = run_mv(&[&file, &file]);
-
-    assert!(!output.status.success());
-    assert_eq!(
-        fs::read_to_string(&file).expect("source should still exist"),
-        "still here"
-    );
-}
-
-#[cfg(unix)]
-#[test]
-fn rejects_destination_inside_source_through_symlink() {
-    use std::os::unix::fs::symlink;
-
-    let dir = TestDir::new("symlink-child");
-    let source = dir.path().join("source");
-    let link = dir.path().join("link");
-    fs::create_dir(&source).expect("source dir should be created");
-    fs::write(source.join("file.txt"), "payload").expect("source file should be written");
-    symlink(&source, &link).expect("symlink should be created");
-
-    let output = run_mv(&[&source, &link.join("child")]);
-
-    assert!(!output.status.success());
-    assert!(source.join("file.txt").exists());
-    assert!(!source.join("child").exists());
-}
-
-#[cfg(unix)]
-#[test]
-fn moves_dangling_symlink() {
-    use std::os::unix::fs::symlink;
-
-    let dir = TestDir::new("dangling-symlink");
-    let source = dir.path().join("source-link");
-    let destination = dir.path().join("destination-link");
-    symlink("missing-target", &source).expect("dangling symlink should be created");
-
-    let output = run_mv(&[&source, &destination]);
-
-    assert!(output.status.success());
-    assert!(!source.exists());
-    assert_eq!(
-        fs::read_link(&destination).expect("destination should be a symlink"),
-        PathBuf::from("missing-target")
-    );
-}
-
-#[cfg(unix)]
-#[test]
-fn allows_lexically_same_path_that_crosses_symlink_parent() {
-    use std::os::unix::fs::symlink;
-
-    let dir = TestDir::new("symlink-parent");
-    let base = dir.path().join("base");
-    let target = dir.path().join("target");
-    let inner = target.join("inner");
-    fs::create_dir(&base).expect("base dir should be created");
-    fs::create_dir_all(&inner).expect("target inner dir should be created");
-    fs::write(base.join("src"), "base").expect("base file should be written");
-    fs::write(target.join("src"), "target").expect("target file should be written");
-    symlink(&inner, base.join("link")).expect("symlink should be created");
-
-    let output = run_mv(&[&base.join("link").join("..").join("src"), &base.join("src")]);
-
-    assert!(output.status.success());
-    assert_eq!(
-        fs::read_to_string(base.join("src")).expect("destination should exist"),
-        "target"
-    );
-    assert!(!target.join("src").exists());
-}
-
-#[test]
-fn allows_destination_sibling_via_parent_component() {
-    let dir = TestDir::new("parent-component");
-    let base = dir.path().join("base");
-    let source = base.join("src");
-    fs::create_dir(&base).expect("base dir should be created");
-    fs::create_dir(&source).expect("source dir should be created");
-    fs::write(source.join("file.txt"), "payload").expect("source file should be written");
-
-    let output = run_mv(&[&source, &source.join("..").join("dst")]);
-
-    assert!(output.status.success());
-    assert!(!source.exists());
-    assert_eq!(
-        fs::read_to_string(base.join("dst").join("file.txt"))
-            .expect("destination file should exist"),
-        "payload"
-    );
-}
-
-#[cfg(unix)]
-#[test]
-fn allows_destination_under_symlink_that_points_outside_source() {
-    use std::os::unix::fs::symlink;
-
-    let dir = TestDir::new("outside-link");
-    let source = dir.path().join("source");
-    let outside = dir.path().join("outside");
-    fs::create_dir(&source).expect("source dir should be created");
-    fs::create_dir(&outside).expect("outside dir should be created");
-    fs::write(source.join("file.txt"), "payload").expect("source file should be written");
-    symlink(&outside, source.join("link")).expect("symlink should be created");
-
-    let output = run_mv(&[&source, &source.join("link").join("dst")]);
-
-    assert!(output.status.success());
-    assert!(!source.exists());
-    assert_eq!(
-        fs::read_to_string(outside.join("dst").join("file.txt"))
-            .expect("destination file should exist"),
-        "payload"
-    );
-}
diff --git a/registry/native/crates/commands/nice/Cargo.toml b/registry/native/crates/commands/nice/Cargo.toml
deleted file mode 100644
index 5f00ac9f4..000000000
--- a/registry/native/crates/commands/nice/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-nice"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "nice standalone binary for secure-exec VM"
-
-[[bin]]
-name = "nice"
-path = "src/main.rs"
-
-[dependencies]
-shims = { package = "secureexec-shims", path = "../../libs/shims" }
diff --git a/registry/native/crates/commands/nice/src/main.rs b/registry/native/crates/commands/nice/src/main.rs
deleted file mode 100644
index ab5a2b7e1..000000000
--- a/registry/native/crates/commands/nice/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(shims::nice::nice(args));
-}
diff --git a/registry/native/crates/commands/nl/Cargo.toml b/registry/native/crates/commands/nl/Cargo.toml
deleted file mode 100644
index d1858d3be..000000000
--- a/registry/native/crates/commands/nl/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-nl"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "nl standalone binary for secure-exec VM"
-
-[[bin]]
-name = "nl"
-path = "src/main.rs"
-
-[dependencies]
-uu_nl = "0.7.0"
diff --git a/registry/native/crates/commands/nl/src/main.rs b/registry/native/crates/commands/nl/src/main.rs
deleted file mode 100644
index c8b90dc43..000000000
--- a/registry/native/crates/commands/nl/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_nl::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/nohup/Cargo.toml b/registry/native/crates/commands/nohup/Cargo.toml
deleted file mode 100644
index ee2b24fa3..000000000
--- a/registry/native/crates/commands/nohup/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-nohup"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "nohup standalone binary for secure-exec VM"
-
-[[bin]]
-name = "nohup"
-path = "src/main.rs"
-
-[dependencies]
-shims = { package = "secureexec-shims", path = "../../libs/shims" }
diff --git a/registry/native/crates/commands/nohup/src/main.rs b/registry/native/crates/commands/nohup/src/main.rs
deleted file mode 100644
index 7b9103d70..000000000
--- a/registry/native/crates/commands/nohup/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(shims::nohup::nohup(args));
-}
diff --git a/registry/native/crates/commands/nohup/tests/streaming.rs b/registry/native/crates/commands/nohup/tests/streaming.rs
deleted file mode 100644
index 846540ca9..000000000
--- a/registry/native/crates/commands/nohup/tests/streaming.rs
+++ /dev/null
@@ -1,109 +0,0 @@
-use std::io::Read;
-use std::process::{Child, ChildStdout, Command, Stdio};
-use std::sync::mpsc::{self, Receiver};
-use std::thread;
-use std::time::Duration;
-
-struct ChildGuard(Child);
-
-impl ChildGuard {
-    fn new(child: Child) -> Self {
-        Self(child)
-    }
-
-    fn child_mut(&mut self) -> &mut Child {
-        &mut self.0
-    }
-
-    fn wait(mut self) -> std::io::Result<std::process::ExitStatus> {
-        self.0.wait()
-    }
-}
-
-impl Drop for ChildGuard {
-    fn drop(&mut self) {
-        if matches!(self.0.try_wait(), Ok(None)) {
-            let _ = self.0.kill();
-            let _ = self.0.wait();
-        }
-    }
-}
-
-fn spawn_stdout_reader(stdout: ChildStdout) -> Receiver<Option<Vec<u8>>> {
-    let (tx, rx) = mpsc::channel();
-    thread::spawn(move || {
-        let mut reader = stdout;
-        let mut buf = [0_u8; 16 * 1024];
-        loop {
-            match reader.read(&mut buf) {
-                Ok(0) => break,
-                Ok(n) => {
-                    if tx.send(Some(buf[..n].to_vec())).is_err() {
-                        return;
-                    }
-                }
-                Err(error) => panic!("failed to read nohup stdout: {error}"),
-            }
-        }
-        let _ = tx.send(None);
-    });
-    rx
-}
-
-fn spawn_nohup(script: &str) -> Child {
-    Command::new(env!("CARGO_BIN_EXE_nohup"))
-        .args(["sh", "-c", script])
-        .stdin(Stdio::null())
-        .stdout(Stdio::piped())
-        .stderr(Stdio::inherit())
-        .spawn()
-        .expect("failed to spawn nohup test command")
-}
-
-#[test]
-fn nohup_streams_stdout_before_child_exit() {
-    let script = r#"
-i=0
-while [ "$i" -lt 128 ]; do
-  head -c 8192 /dev/zero | tr '\000' x
-  i=$((i + 1))
-  sleep 0.015625
-done
-"#;
-
-    let mut child = ChildGuard::new(spawn_nohup(script));
-    let stdout = child
-        .child_mut()
-        .stdout
-        .take()
-        .expect("missing nohup stdout");
-    let rx = spawn_stdout_reader(stdout);
-
-    let first_chunk = rx
-        .recv_timeout(Duration::from_millis(750))
-        .expect("expected nohup to stream stdout before exit")
-        .expect("nohup stdout closed before first chunk");
-    assert!(!first_chunk.is_empty());
-    assert_eq!(
-        child
-            .child_mut()
-            .try_wait()
-            .expect("failed to poll nohup child"),
-        None,
-        "nohup child exited before the first chunk was observed"
-    );
-
-    let status = child.wait().expect("failed to wait for nohup child");
-    assert!(status.success(), "nohup exited with {status:?}");
-
-    let mut total = first_chunk.len();
-    loop {
-        match rx.recv_timeout(Duration::from_secs(1)) {
-            Ok(Some(chunk)) => total += chunk.len(),
-            Ok(None) => break,
-            Err(error) => panic!("timed out draining nohup stdout: {error}"),
-        }
-    }
-
-    assert_eq!(total, 128 * 8192);
-}
diff --git a/registry/native/crates/commands/nproc/Cargo.toml b/registry/native/crates/commands/nproc/Cargo.toml
deleted file mode 100644
index 9f05c612c..000000000
--- a/registry/native/crates/commands/nproc/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-nproc"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "nproc standalone binary for secure-exec VM"
-
-[[bin]]
-name = "nproc"
-path = "src/main.rs"
-
-[dependencies]
-uu_nproc = "0.7.0"
diff --git a/registry/native/crates/commands/nproc/src/main.rs b/registry/native/crates/commands/nproc/src/main.rs
deleted file mode 100644
index b1f7f5ea2..000000000
--- a/registry/native/crates/commands/nproc/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_nproc::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/numfmt/Cargo.toml b/registry/native/crates/commands/numfmt/Cargo.toml
deleted file mode 100644
index 18fae1f3a..000000000
--- a/registry/native/crates/commands/numfmt/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-numfmt"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "numfmt standalone binary for secure-exec VM"
-
-[[bin]]
-name = "numfmt"
-path = "src/main.rs"
-
-[dependencies]
-uu_numfmt = "0.7.0"
diff --git a/registry/native/crates/commands/numfmt/src/main.rs b/registry/native/crates/commands/numfmt/src/main.rs
deleted file mode 100644
index 438c8b7ee..000000000
--- a/registry/native/crates/commands/numfmt/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_numfmt::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/od/Cargo.toml b/registry/native/crates/commands/od/Cargo.toml
deleted file mode 100644
index 6e28c2db6..000000000
--- a/registry/native/crates/commands/od/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-od"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "od standalone binary for secure-exec VM"
-
-[[bin]]
-name = "od"
-path = "src/main.rs"
-
-[dependencies]
-uu_od = "0.7.0"
diff --git a/registry/native/crates/commands/od/src/main.rs b/registry/native/crates/commands/od/src/main.rs
deleted file mode 100644
index 3c3c7902d..000000000
--- a/registry/native/crates/commands/od/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_od::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/paste/Cargo.toml b/registry/native/crates/commands/paste/Cargo.toml
deleted file mode 100644
index 87fb6f9c8..000000000
--- a/registry/native/crates/commands/paste/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-paste"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "paste standalone binary for secure-exec VM"
-
-[[bin]]
-name = "paste"
-path = "src/main.rs"
-
-[dependencies]
-uu_paste = "0.7.0"
diff --git a/registry/native/crates/commands/paste/src/main.rs b/registry/native/crates/commands/paste/src/main.rs
deleted file mode 100644
index d04c94e65..000000000
--- a/registry/native/crates/commands/paste/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_paste::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/pathchk/Cargo.toml b/registry/native/crates/commands/pathchk/Cargo.toml
deleted file mode 100644
index a5bd0d8c9..000000000
--- a/registry/native/crates/commands/pathchk/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-pathchk"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "pathchk standalone binary for secure-exec VM"
-
-[[bin]]
-name = "pathchk"
-path = "src/main.rs"
-
-[dependencies]
-uu_pathchk = "0.7.0"
diff --git a/registry/native/crates/commands/pathchk/src/main.rs b/registry/native/crates/commands/pathchk/src/main.rs
deleted file mode 100644
index f8a02043f..000000000
--- a/registry/native/crates/commands/pathchk/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_pathchk::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/printenv/Cargo.toml b/registry/native/crates/commands/printenv/Cargo.toml
deleted file mode 100644
index 463418444..000000000
--- a/registry/native/crates/commands/printenv/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-printenv"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "printenv standalone binary for secure-exec VM"
-
-[[bin]]
-name = "printenv"
-path = "src/main.rs"
-
-[dependencies]
-uu_printenv = "0.7.0"
diff --git a/registry/native/crates/commands/printenv/src/main.rs b/registry/native/crates/commands/printenv/src/main.rs
deleted file mode 100644
index 0b64849c5..000000000
--- a/registry/native/crates/commands/printenv/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_printenv::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/printf/Cargo.toml b/registry/native/crates/commands/printf/Cargo.toml
deleted file mode 100644
index 3ffe7fe58..000000000
--- a/registry/native/crates/commands/printf/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-printf"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "printf standalone binary for secure-exec VM"
-
-[[bin]]
-name = "printf"
-path = "src/main.rs"
-
-[dependencies]
-uu_printf = "0.7.0"
diff --git a/registry/native/crates/commands/printf/src/main.rs b/registry/native/crates/commands/printf/src/main.rs
deleted file mode 100644
index 9b4495bd8..000000000
--- a/registry/native/crates/commands/printf/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_printf::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/ptx/Cargo.toml b/registry/native/crates/commands/ptx/Cargo.toml
deleted file mode 100644
index 7176a63af..000000000
--- a/registry/native/crates/commands/ptx/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-ptx"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "ptx standalone binary for secure-exec VM"
-
-[[bin]]
-name = "ptx"
-path = "src/main.rs"
-
-[dependencies]
-uu_ptx = "0.7.0"
diff --git a/registry/native/crates/commands/ptx/src/main.rs b/registry/native/crates/commands/ptx/src/main.rs
deleted file mode 100644
index 7b778477f..000000000
--- a/registry/native/crates/commands/ptx/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_ptx::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/pwd/Cargo.toml b/registry/native/crates/commands/pwd/Cargo.toml
deleted file mode 100644
index d61413509..000000000
--- a/registry/native/crates/commands/pwd/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-pwd"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "pwd standalone binary for secure-exec VM"
-
-[[bin]]
-name = "pwd"
-path = "src/main.rs"
-
-[dependencies]
-uu_pwd = "0.7.0"
diff --git a/registry/native/crates/commands/pwd/src/main.rs b/registry/native/crates/commands/pwd/src/main.rs
deleted file mode 100644
index 40298a15a..000000000
--- a/registry/native/crates/commands/pwd/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_pwd::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/readlink/Cargo.toml b/registry/native/crates/commands/readlink/Cargo.toml
deleted file mode 100644
index e8c96fc77..000000000
--- a/registry/native/crates/commands/readlink/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-readlink"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "readlink standalone binary for secure-exec VM"
-
-[[bin]]
-name = "readlink"
-path = "src/main.rs"
-
-[dependencies]
-uu_readlink = "0.7.0"
diff --git a/registry/native/crates/commands/readlink/src/main.rs b/registry/native/crates/commands/readlink/src/main.rs
deleted file mode 100644
index 87ff13604..000000000
--- a/registry/native/crates/commands/readlink/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_readlink::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/realpath/Cargo.toml b/registry/native/crates/commands/realpath/Cargo.toml
deleted file mode 100644
index ad8fa957c..000000000
--- a/registry/native/crates/commands/realpath/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-realpath"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "realpath standalone binary for secure-exec VM"
-
-[[bin]]
-name = "realpath"
-path = "src/main.rs"
-
-[dependencies]
-uu_realpath = "0.7.0"
diff --git a/registry/native/crates/commands/realpath/src/main.rs b/registry/native/crates/commands/realpath/src/main.rs
deleted file mode 100644
index cb89bf1c4..000000000
--- a/registry/native/crates/commands/realpath/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_realpath::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/rev/Cargo.toml b/registry/native/crates/commands/rev/Cargo.toml
deleted file mode 100644
index d08020ac8..000000000
--- a/registry/native/crates/commands/rev/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-rev"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "rev standalone binary for secure-exec VM"
-
-[[bin]]
-name = "rev"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-rev = { path = "../../libs/rev" }
diff --git a/registry/native/crates/commands/rev/src/main.rs b/registry/native/crates/commands/rev/src/main.rs
deleted file mode 100644
index 6841e7d15..000000000
--- a/registry/native/crates/commands/rev/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_rev::main(args));
-}
diff --git a/registry/native/crates/commands/rg/Cargo.toml b/registry/native/crates/commands/rg/Cargo.toml
deleted file mode 100644
index cd1ff4690..000000000
--- a/registry/native/crates/commands/rg/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-rg"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "rg (ripgrep) standalone binary for secure-exec VM"
-
-[[bin]]
-name = "rg"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-grep = { path = "../../libs/grep" }
diff --git a/registry/native/crates/commands/rg/src/main.rs b/registry/native/crates/commands/rg/src/main.rs
deleted file mode 100644
index e44c45f02..000000000
--- a/registry/native/crates/commands/rg/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_grep::rg(args));
-}
diff --git a/registry/native/crates/commands/rm/Cargo.toml b/registry/native/crates/commands/rm/Cargo.toml
deleted file mode 100644
index eb69989f9..000000000
--- a/registry/native/crates/commands/rm/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-rm"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "rm standalone binary for secure-exec VM"
-
-[[bin]]
-name = "rm"
-path = "src/main.rs"
-
-[dependencies]
-uu_rm = "0.7.0"
diff --git a/registry/native/crates/commands/rm/src/main.rs b/registry/native/crates/commands/rm/src/main.rs
deleted file mode 100644
index ee956da11..000000000
--- a/registry/native/crates/commands/rm/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_rm::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/rmdir/Cargo.toml b/registry/native/crates/commands/rmdir/Cargo.toml
deleted file mode 100644
index 8773c2ec4..000000000
--- a/registry/native/crates/commands/rmdir/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-rmdir"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "rmdir standalone binary for secure-exec VM"
-
-[[bin]]
-name = "rmdir"
-path = "src/main.rs"
-
-[dependencies]
-uu_rmdir = "0.7.0"
diff --git a/registry/native/crates/commands/rmdir/src/main.rs b/registry/native/crates/commands/rmdir/src/main.rs
deleted file mode 100644
index 4a6bd0d7f..000000000
--- a/registry/native/crates/commands/rmdir/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_rmdir::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/sed/Cargo.toml b/registry/native/crates/commands/sed/Cargo.toml
deleted file mode 100644
index 9e006c3ba..000000000
--- a/registry/native/crates/commands/sed/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-sed"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "sed standalone binary for secure-exec VM"
-
-[[bin]]
-name = "sed"
-path = "src/main.rs"
-
-[dependencies]
-sed = "0.1.1"
diff --git a/registry/native/crates/commands/sed/src/main.rs b/registry/native/crates/commands/sed/src/main.rs
deleted file mode 100644
index dbd873547..000000000
--- a/registry/native/crates/commands/sed/src/main.rs
+++ /dev/null
@@ -1,13 +0,0 @@
-fn main() {
-    use std::io::Write;
-
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    let mut code = sed::sed::uumain(args.into_iter());
-    if let Err(error) = std::io::stdout().flush() {
-        eprintln!("Error flushing stdout: {error}");
-        if code == 0 {
-            code = 1;
-        }
-    }
-    std::process::exit(code);
-}
diff --git a/registry/native/crates/commands/seq/Cargo.toml b/registry/native/crates/commands/seq/Cargo.toml
deleted file mode 100644
index 83762f6eb..000000000
--- a/registry/native/crates/commands/seq/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-seq"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "seq standalone binary for secure-exec VM"
-
-[[bin]]
-name = "seq"
-path = "src/main.rs"
-
-[dependencies]
-uu_seq = "0.7.0"
diff --git a/registry/native/crates/commands/seq/src/main.rs b/registry/native/crates/commands/seq/src/main.rs
deleted file mode 100644
index fb0c27970..000000000
--- a/registry/native/crates/commands/seq/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_seq::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/sh/Cargo.toml b/registry/native/crates/commands/sh/Cargo.toml
deleted file mode 100644
index 3034c9597..000000000
--- a/registry/native/crates/commands/sh/Cargo.toml
+++ /dev/null
@@ -1,18 +0,0 @@
-[package]
-name = "cmd-sh"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "sh standalone binary for secure-exec VM"
-
-[[bin]]
-name = "sh"
-path = "src/main.rs"
-
-# `reedline` is enabled on ALL targets, including wasm: the vendored wasi
-# patches supply what it needs (crossterm wasi backend, fd-lock, and
-# brush-interactive's cfg(target_os = "wasi") alternatives to the
-# tokio block_in_place paths), per the "behave like native Linux" rule.
-# `minimal` stays available as an explicit opt-out backend.
-[dependencies]
-brush-shell = { version = "0.3.0", default-features = false, features = ["reedline", "minimal"] }
diff --git a/registry/native/crates/commands/sh/src/main.rs b/registry/native/crates/commands/sh/src/main.rs
deleted file mode 100644
index 4cf80eb1e..000000000
--- a/registry/native/crates/commands/sh/src/main.rs
+++ /dev/null
@@ -1,3 +0,0 @@
-fn main() {
-    brush_shell::entry::run();
-}
diff --git a/registry/native/crates/commands/sha1sum/Cargo.toml b/registry/native/crates/commands/sha1sum/Cargo.toml
deleted file mode 100644
index 8247916e8..000000000
--- a/registry/native/crates/commands/sha1sum/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-sha1sum"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "sha1sum standalone binary for secure-exec VM"
-
-[[bin]]
-name = "sha1sum"
-path = "src/main.rs"
-
-[dependencies]
-uu_sha1sum = "0.7.0"
diff --git a/registry/native/crates/commands/sha1sum/src/main.rs b/registry/native/crates/commands/sha1sum/src/main.rs
deleted file mode 100644
index ccb80c970..000000000
--- a/registry/native/crates/commands/sha1sum/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_sha1sum::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/sha224sum/Cargo.toml b/registry/native/crates/commands/sha224sum/Cargo.toml
deleted file mode 100644
index 8f34c4db7..000000000
--- a/registry/native/crates/commands/sha224sum/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-sha224sum"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "sha224sum standalone binary for secure-exec VM"
-
-[[bin]]
-name = "sha224sum"
-path = "src/main.rs"
-
-[dependencies]
-uu_sha224sum = "0.7.0"
diff --git a/registry/native/crates/commands/sha224sum/src/main.rs b/registry/native/crates/commands/sha224sum/src/main.rs
deleted file mode 100644
index fe4fb791c..000000000
--- a/registry/native/crates/commands/sha224sum/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_sha224sum::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/sha256sum/Cargo.toml b/registry/native/crates/commands/sha256sum/Cargo.toml
deleted file mode 100644
index 8d4edba46..000000000
--- a/registry/native/crates/commands/sha256sum/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-sha256sum"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "sha256sum standalone binary for secure-exec VM"
-
-[[bin]]
-name = "sha256sum"
-path = "src/main.rs"
-
-[dependencies]
-uu_sha256sum = "0.7.0"
diff --git a/registry/native/crates/commands/sha256sum/src/main.rs b/registry/native/crates/commands/sha256sum/src/main.rs
deleted file mode 100644
index 07dda7e97..000000000
--- a/registry/native/crates/commands/sha256sum/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_sha256sum::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/sha384sum/Cargo.toml b/registry/native/crates/commands/sha384sum/Cargo.toml
deleted file mode 100644
index dc9fc1b53..000000000
--- a/registry/native/crates/commands/sha384sum/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-sha384sum"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "sha384sum standalone binary for secure-exec VM"
-
-[[bin]]
-name = "sha384sum"
-path = "src/main.rs"
-
-[dependencies]
-uu_sha384sum = "0.7.0"
diff --git a/registry/native/crates/commands/sha384sum/src/main.rs b/registry/native/crates/commands/sha384sum/src/main.rs
deleted file mode 100644
index 5bc53c310..000000000
--- a/registry/native/crates/commands/sha384sum/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_sha384sum::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/sha512sum/Cargo.toml b/registry/native/crates/commands/sha512sum/Cargo.toml
deleted file mode 100644
index 6df430334..000000000
--- a/registry/native/crates/commands/sha512sum/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-sha512sum"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "sha512sum standalone binary for secure-exec VM"
-
-[[bin]]
-name = "sha512sum"
-path = "src/main.rs"
-
-[dependencies]
-uu_sha512sum = "0.7.0"
diff --git a/registry/native/crates/commands/sha512sum/src/main.rs b/registry/native/crates/commands/sha512sum/src/main.rs
deleted file mode 100644
index 4d4aa74a0..000000000
--- a/registry/native/crates/commands/sha512sum/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_sha512sum::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/shred/Cargo.toml b/registry/native/crates/commands/shred/Cargo.toml
deleted file mode 100644
index 841e6f305..000000000
--- a/registry/native/crates/commands/shred/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-shred"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "shred standalone binary for secure-exec VM"
-
-[[bin]]
-name = "shred"
-path = "src/main.rs"
-
-[dependencies]
-uu_shred = "0.7.0"
diff --git a/registry/native/crates/commands/shred/src/main.rs b/registry/native/crates/commands/shred/src/main.rs
deleted file mode 100644
index 1cfebede1..000000000
--- a/registry/native/crates/commands/shred/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_shred::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/shuf/Cargo.toml b/registry/native/crates/commands/shuf/Cargo.toml
deleted file mode 100644
index 0b9b499b1..000000000
--- a/registry/native/crates/commands/shuf/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-shuf"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "shuf standalone binary for secure-exec VM"
-
-[[bin]]
-name = "shuf"
-path = "src/main.rs"
-
-[dependencies]
-uu_shuf = "0.7.0"
diff --git a/registry/native/crates/commands/shuf/src/main.rs b/registry/native/crates/commands/shuf/src/main.rs
deleted file mode 100644
index 57e8662ac..000000000
--- a/registry/native/crates/commands/shuf/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_shuf::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/sleep/Cargo.toml b/registry/native/crates/commands/sleep/Cargo.toml
deleted file mode 100644
index 9e87d2649..000000000
--- a/registry/native/crates/commands/sleep/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-sleep"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "sleep standalone binary for secure-exec VM"
-
-[[bin]]
-name = "sleep"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-builtins = { path = "../../libs/builtins" }
diff --git a/registry/native/crates/commands/sleep/src/main.rs b/registry/native/crates/commands/sleep/src/main.rs
deleted file mode 100644
index 87f399d99..000000000
--- a/registry/native/crates/commands/sleep/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_builtins::sleep(args));
-}
diff --git a/registry/native/crates/commands/sort/Cargo.toml b/registry/native/crates/commands/sort/Cargo.toml
deleted file mode 100644
index 3ed6e1157..000000000
--- a/registry/native/crates/commands/sort/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-sort"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "sort standalone binary for secure-exec VM"
-
-[[bin]]
-name = "sort"
-path = "src/main.rs"
-
-[dependencies]
-uu_sort = "0.7.0"
diff --git a/registry/native/crates/commands/sort/src/main.rs b/registry/native/crates/commands/sort/src/main.rs
deleted file mode 100644
index 1a4fdb6e0..000000000
--- a/registry/native/crates/commands/sort/src/main.rs
+++ /dev/null
@@ -1,13 +0,0 @@
-fn main() {
-    use std::io::Write;
-
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    let mut code = uu_sort::uumain(args.into_iter());
-    if let Err(error) = std::io::stdout().flush() {
-        eprintln!("Error flushing stdout: {error}");
-        if code == 0 {
-            code = 1;
-        }
-    }
-    std::process::exit(code);
-}
diff --git a/registry/native/crates/commands/sort/tests/external_sort.rs b/registry/native/crates/commands/sort/tests/external_sort.rs
deleted file mode 100644
index 50a9fe326..000000000
--- a/registry/native/crates/commands/sort/tests/external_sort.rs
+++ /dev/null
@@ -1,77 +0,0 @@
-use std::fs;
-use std::path::{Path, PathBuf};
-use std::process::Command;
-use std::time::{SystemTime, UNIX_EPOCH};
-
-struct TestDir {
-    path: PathBuf,
-}
-
-impl TestDir {
-    fn new(name: &str) -> Self {
-        let nonce = SystemTime::now()
-            .duration_since(UNIX_EPOCH)
-            .expect("system time should be after epoch")
-            .as_nanos();
-        let path = std::env::temp_dir().join(format!("cmd-sort-{name}-{nonce}"));
-        fs::create_dir(&path).expect("test dir should be created");
-        Self { path }
-    }
-
-    fn path(&self) -> &Path {
-        &self.path
-    }
-}
-
-impl Drop for TestDir {
-    fn drop(&mut self) {
-        let _ = fs::remove_dir_all(&self.path);
-    }
-}
-
-// The workspace patches ctrlc to the secure-exec stub, which reports
-// ErrorKind::Unsupported for signal registration on every target. Forcing an
-// external-sort spill into a temp directory exercises uu_sort's
-// ensure_signal_handler_installed soft-skip path. Before the soft skip this
-// invocation failed with exit code 2 and "failed to set up signal handler".
-#[test]
-fn external_sort_succeeds_without_signal_handler_support() {
-    let dir = TestDir::new("spill");
-    let input_path = dir.path().join("input.txt");
-    let mut input = String::new();
-    for i in (0..20_000u32).rev() {
-        input.push_str(&format!("{i:08}\n"));
-    }
-    fs::write(&input_path, &input).expect("input should be written");
-
-    let output = Command::new(env!("CARGO_BIN_EXE_sort"))
-        .arg("-S")
-        .arg("32K")
-        .arg("-T")
-        .arg(dir.path())
-        .arg(&input_path)
-        .output()
-        .expect("sort should run");
-
-    assert!(
-        output.status.success(),
-        "sort failed: {}",
-        String::from_utf8_lossy(&output.stderr)
-    );
-
-    let stdout = String::from_utf8(output.stdout).expect("output should be UTF-8");
-    let lines: Vec<&str> = stdout.lines().collect();
-    assert_eq!(lines.len(), 20_000);
-    assert_eq!(lines.first(), Some(&"00000000"));
-    assert_eq!(lines.last(), Some(&"00019999"));
-    assert!(lines.windows(2).all(|pair| pair[0] <= pair[1]));
-
-    // The uutils_sort temp directory must be cleaned up by TempDir's Drop even
-    // though no signal handler was installed.
-    let leftovers: Vec<_> = fs::read_dir(dir.path())
-        .expect("test dir should be readable")
-        .flatten()
-        .filter(|entry| entry.file_name().to_string_lossy().starts_with("uutils_sort"))
-        .collect();
-    assert!(leftovers.is_empty(), "temp sort directory leaked: {leftovers:?}");
-}
diff --git a/registry/native/crates/commands/spawn-test-host/Cargo.toml b/registry/native/crates/commands/spawn-test-host/Cargo.toml
deleted file mode 100644
index 60a5e26a2..000000000
--- a/registry/native/crates/commands/spawn-test-host/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-spawn-test-host"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "Test binary for WasiChild spawn via host_process FFI"
-
-[[bin]]
-name = "spawn-test-host"
-path = "src/main.rs"
-
-[dependencies]
-wasi-spawn = { package = "secureexec-wasi-spawn", path = "../../libs/wasi-spawn" }
diff --git a/registry/native/crates/commands/spawn-test-host/src/main.rs b/registry/native/crates/commands/spawn-test-host/src/main.rs
deleted file mode 100644
index bd23c953d..000000000
--- a/registry/native/crates/commands/spawn-test-host/src/main.rs
+++ /dev/null
@@ -1,157 +0,0 @@
-/// Test binary for WasiChild: exercises host_process spawn with pipe capture.
-///
-/// Subcommands:
-///   echo       — spawn "echo hello" and print captured stdout
-///   fail       — spawn a command that exits non-zero and print exit code
-///   kill-test  — spawn "sleep 60", kill it, verify termination
-///   env-test   — spawn "env" with custom env vars and print captured stdout
-
-fn main() {
-    let args: Vec<String> = std::env::args().collect();
-    let subcommand = args.get(1).map(|s| s.as_str()).unwrap_or("echo");
-
-    let code = match subcommand {
-        "echo" => test_echo(),
-        "fail" => test_fail(),
-        "kill-test" => test_kill(),
-        "env-test" => test_env(),
-        _ => {
-            eprintln!("spawn-test-host: unknown subcommand '{}'", subcommand);
-            1
-        }
-    };
-
-    std::process::exit(code);
-}
-
-/// Test 1: spawn "echo hello", capture stdout, verify content
-fn test_echo() -> i32 {
-    let mut child = match wasi_spawn::spawn_child(&["echo", "hello"], &[], "/") {
-        Ok(c) => c,
-        Err(e) => {
-            eprintln!("FAIL spawn: {}", e);
-            return 1;
-        }
-    };
-
-    match child.consume_output() {
-        Ok(output) => {
-            let stdout = String::from_utf8_lossy(&output.stdout);
-            print!("stdout:{}", stdout);
-            println!("exit:{}", output.exit_code);
-            if stdout.trim() == "hello" && output.exit_code == 0 {
-                println!("PASS");
-                0
-            } else {
-                println!("FAIL");
-                1
-            }
-        }
-        Err(e) => {
-            eprintln!("FAIL consume: {}", e);
-            1
-        }
-    }
-}
-
-/// Test 2: spawn a command that exits non-zero, verify exit code
-fn test_fail() -> i32 {
-    let mut child = match wasi_spawn::spawn_child(&["sh", "-c", "exit 42"], &[], "/") {
-        Ok(c) => c,
-        Err(e) => {
-            eprintln!("FAIL spawn: {}", e);
-            return 1;
-        }
-    };
-
-    match child.consume_output() {
-        Ok(output) => {
-            println!("exit:{}", output.exit_code);
-            if output.exit_code == 42 {
-                println!("PASS");
-                0
-            } else {
-                println!("FAIL expected 42 got {}", output.exit_code);
-                1
-            }
-        }
-        Err(e) => {
-            eprintln!("FAIL consume: {}", e);
-            1
-        }
-    }
-}
-
-/// Test 3: spawn sleep, kill it, verify termination
-fn test_kill() -> i32 {
-    let mut child = match wasi_spawn::spawn_child(&["sleep", "60"], &[], "/") {
-        Ok(c) => c,
-        Err(e) => {
-            eprintln!("FAIL spawn: {}", e);
-            return 1;
-        }
-    };
-
-    // Kill the child with SIGTERM
-    if let Err(e) = child.terminate() {
-        eprintln!("FAIL kill: {}", e);
-        return 1;
-    }
-
-    match child.wait() {
-        Ok(status) => {
-            println!("exit:{}", status);
-            // 128 + 15 (SIGTERM) = 143
-            if status >= 128 {
-                println!("PASS");
-                0
-            } else {
-                println!("FAIL expected signal exit, got {}", status);
-                1
-            }
-        }
-        Err(e) => {
-            eprintln!("FAIL wait: {}", e);
-            1
-        }
-    }
-}
-
-/// Test 4: spawn env with custom variables, verify they appear
-fn test_env() -> i32 {
-    let mut child = match wasi_spawn::spawn_child(
-        &["env"],
-        &[("TEST_VAR", "hello_world"), ("FOO", "bar")],
-        "/",
-    ) {
-        Ok(c) => c,
-        Err(e) => {
-            eprintln!("FAIL spawn: {}", e);
-            return 1;
-        }
-    };
-
-    match child.consume_output() {
-        Ok(output) => {
-            let stdout = String::from_utf8_lossy(&output.stdout);
-            let has_test = stdout.contains("TEST_VAR=hello_world");
-            let has_foo = stdout.contains("FOO=bar");
-            println!("exit:{}", output.exit_code);
-            if has_test && has_foo {
-                println!("PASS");
-                0
-            } else {
-                print!("{}", stdout);
-                println!(
-                    "FAIL missing env vars (TEST_VAR={}, FOO={})",
-                    has_test, has_foo
-                );
-                1
-            }
-        }
-        Err(e) => {
-            eprintln!("FAIL consume: {}", e);
-            1
-        }
-    }
-}
diff --git a/registry/native/crates/commands/split/Cargo.toml b/registry/native/crates/commands/split/Cargo.toml
deleted file mode 100644
index 76ca0362c..000000000
--- a/registry/native/crates/commands/split/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-split"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "split standalone binary for secure-exec VM"
-
-[[bin]]
-name = "split"
-path = "src/main.rs"
-
-[dependencies]
-uu_split = "0.7.0"
diff --git a/registry/native/crates/commands/split/src/main.rs b/registry/native/crates/commands/split/src/main.rs
deleted file mode 100644
index 1d77813a4..000000000
--- a/registry/native/crates/commands/split/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_split::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/stat/Cargo.toml b/registry/native/crates/commands/stat/Cargo.toml
deleted file mode 100644
index d0587c9e3..000000000
--- a/registry/native/crates/commands/stat/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-stat"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "stat standalone binary for secure-exec VM"
-
-[[bin]]
-name = "stat"
-path = "src/main.rs"
-
-[dependencies]
-uu_stat = "0.7.0"
diff --git a/registry/native/crates/commands/stat/src/main.rs b/registry/native/crates/commands/stat/src/main.rs
deleted file mode 100644
index 3ad7c9b5b..000000000
--- a/registry/native/crates/commands/stat/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_stat::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/stdbuf/Cargo.toml b/registry/native/crates/commands/stdbuf/Cargo.toml
deleted file mode 100644
index 96ecbb0a3..000000000
--- a/registry/native/crates/commands/stdbuf/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-stdbuf"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "stdbuf standalone binary for secure-exec VM"
-
-[[bin]]
-name = "stdbuf"
-path = "src/main.rs"
-
-[dependencies]
-shims = { package = "secureexec-shims", path = "../../libs/shims" }
diff --git a/registry/native/crates/commands/stdbuf/src/main.rs b/registry/native/crates/commands/stdbuf/src/main.rs
deleted file mode 100644
index bc58cfc3a..000000000
--- a/registry/native/crates/commands/stdbuf/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(shims::stdbuf::stdbuf(args));
-}
diff --git a/registry/native/crates/commands/stdbuf/tests/streaming.rs b/registry/native/crates/commands/stdbuf/tests/streaming.rs
deleted file mode 100644
index 6db1e6fff..000000000
--- a/registry/native/crates/commands/stdbuf/tests/streaming.rs
+++ /dev/null
@@ -1,106 +0,0 @@
-use std::io::{BufRead, BufReader};
-use std::process::{Child, ChildStdout, Command, Stdio};
-use std::sync::mpsc::{self, Receiver};
-use std::thread;
-use std::time::Duration;
-
-struct ChildGuard(Child);
-
-impl ChildGuard {
-    fn new(child: Child) -> Self {
-        Self(child)
-    }
-
-    fn child_mut(&mut self) -> &mut Child {
-        &mut self.0
-    }
-
-    fn wait(mut self) -> std::io::Result<std::process::ExitStatus> {
-        self.0.wait()
-    }
-}
-
-impl Drop for ChildGuard {
-    fn drop(&mut self) {
-        if matches!(self.0.try_wait(), Ok(None)) {
-            let _ = self.0.kill();
-            let _ = self.0.wait();
-        }
-    }
-}
-
-fn spawn_line_reader(stdout: ChildStdout) -> Receiver<Option<String>> {
-    let (tx, rx) = mpsc::channel();
-    thread::spawn(move || {
-        let mut reader = BufReader::new(stdout);
-        loop {
-            let mut line = String::new();
-            match reader.read_line(&mut line) {
-                Ok(0) => break,
-                Ok(_) => {
-                    if tx.send(Some(line)).is_err() {
-                        return;
-                    }
-                }
-                Err(error) => panic!("failed to read stdbuf stdout: {error}"),
-            }
-        }
-        let _ = tx.send(None);
-    });
-    rx
-}
-
-fn spawn_stdbuf(script: &str) -> Child {
-    Command::new(env!("CARGO_BIN_EXE_stdbuf"))
-        .args(["-oL", "sh", "-c", script])
-        .stdin(Stdio::null())
-        .stdout(Stdio::piped())
-        .stderr(Stdio::inherit())
-        .spawn()
-        .expect("failed to spawn stdbuf test command")
-}
-
-#[test]
-fn stdbuf_preserves_line_streaming_for_child_output() {
-    let script = r#"
-printf 'line-1\n'
-sleep 1
-printf 'line-2\n'
-"#;
-
-    let mut child = ChildGuard::new(spawn_stdbuf(script));
-    let stdout = child
-        .child_mut()
-        .stdout
-        .take()
-        .expect("missing stdbuf stdout");
-    let rx = spawn_line_reader(stdout);
-
-    let first_line = rx
-        .recv_timeout(Duration::from_millis(500))
-        .expect("expected stdbuf child to emit the first line before exit")
-        .expect("stdbuf stdout closed before the first line");
-    assert_eq!(first_line, "line-1\n");
-    assert_eq!(
-        child
-            .child_mut()
-            .try_wait()
-            .expect("failed to poll stdbuf child"),
-        None,
-        "stdbuf child exited before the first line was observed"
-    );
-
-    let second_line = rx
-        .recv_timeout(Duration::from_secs(2))
-        .expect("expected stdbuf child to emit the second line")
-        .expect("stdbuf stdout closed before the second line");
-    assert_eq!(second_line, "line-2\n");
-
-    let status = child.wait().expect("failed to wait for stdbuf child");
-    assert!(status.success(), "stdbuf exited with {status:?}");
-    assert_eq!(
-        rx.recv_timeout(Duration::from_secs(1))
-            .expect("expected stdbuf reader shutdown marker"),
-        None
-    );
-}
diff --git a/registry/native/crates/commands/strings/Cargo.toml b/registry/native/crates/commands/strings/Cargo.toml
deleted file mode 100644
index 7ce5f58a3..000000000
--- a/registry/native/crates/commands/strings/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-strings"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "strings standalone binary for secure-exec VM"
-
-[[bin]]
-name = "strings"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-strings-cmd = { path = "../../libs/strings-cmd" }
diff --git a/registry/native/crates/commands/strings/src/main.rs b/registry/native/crates/commands/strings/src/main.rs
deleted file mode 100644
index 0af588fac..000000000
--- a/registry/native/crates/commands/strings/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_strings_cmd::main(args));
-}
diff --git a/registry/native/crates/commands/sum/Cargo.toml b/registry/native/crates/commands/sum/Cargo.toml
deleted file mode 100644
index 5fc71bfcd..000000000
--- a/registry/native/crates/commands/sum/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-sum"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "sum standalone binary for secure-exec VM"
-
-[[bin]]
-name = "sum"
-path = "src/main.rs"
-
-[dependencies]
-uu_sum = "0.7.0"
diff --git a/registry/native/crates/commands/sum/src/main.rs b/registry/native/crates/commands/sum/src/main.rs
deleted file mode 100644
index 012602623..000000000
--- a/registry/native/crates/commands/sum/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_sum::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/tac/Cargo.toml b/registry/native/crates/commands/tac/Cargo.toml
deleted file mode 100644
index c55250d7b..000000000
--- a/registry/native/crates/commands/tac/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-tac"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "tac standalone binary for secure-exec VM"
-
-[[bin]]
-name = "tac"
-path = "src/main.rs"
-
-[dependencies]
-uu_tac = "0.7.0"
diff --git a/registry/native/crates/commands/tac/src/main.rs b/registry/native/crates/commands/tac/src/main.rs
deleted file mode 100644
index 82de28d10..000000000
--- a/registry/native/crates/commands/tac/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_tac::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/tail/Cargo.toml b/registry/native/crates/commands/tail/Cargo.toml
deleted file mode 100644
index e47b9737b..000000000
--- a/registry/native/crates/commands/tail/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-tail"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "tail standalone binary for secure-exec VM"
-
-[[bin]]
-name = "tail"
-path = "src/main.rs"
-
-[dependencies]
-uu_tail = "0.7.0"
diff --git a/registry/native/crates/commands/tail/src/main.rs b/registry/native/crates/commands/tail/src/main.rs
deleted file mode 100644
index b018e1745..000000000
--- a/registry/native/crates/commands/tail/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_tail::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/tar/Cargo.toml b/registry/native/crates/commands/tar/Cargo.toml
deleted file mode 100644
index d711b7020..000000000
--- a/registry/native/crates/commands/tar/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-tar"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "tar standalone binary for secure-exec VM"
-
-[[bin]]
-name = "tar"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-tar = { path = "../../libs/tar" }
diff --git a/registry/native/crates/commands/tar/src/main.rs b/registry/native/crates/commands/tar/src/main.rs
deleted file mode 100644
index 304ba1271..000000000
--- a/registry/native/crates/commands/tar/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_tar::main(args));
-}
diff --git a/registry/native/crates/commands/tee/Cargo.toml b/registry/native/crates/commands/tee/Cargo.toml
deleted file mode 100644
index 94185e3cd..000000000
--- a/registry/native/crates/commands/tee/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-tee"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "tee standalone binary for secure-exec VM"
-
-[[bin]]
-name = "tee"
-path = "src/main.rs"
-
-[dependencies]
-uu_tee = "0.7.0"
diff --git a/registry/native/crates/commands/tee/src/main.rs b/registry/native/crates/commands/tee/src/main.rs
deleted file mode 100644
index c48076cc9..000000000
--- a/registry/native/crates/commands/tee/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_tee::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/test/Cargo.toml b/registry/native/crates/commands/test/Cargo.toml
deleted file mode 100644
index 9fe4f0f63..000000000
--- a/registry/native/crates/commands/test/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-test"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "test/[ standalone binary for secure-exec VM"
-
-[[bin]]
-name = "test"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-builtins = { path = "../../libs/builtins" }
diff --git a/registry/native/crates/commands/test/src/main.rs b/registry/native/crates/commands/test/src/main.rs
deleted file mode 100644
index 4d6acd26f..000000000
--- a/registry/native/crates/commands/test/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_builtins::test_cmd(args));
-}
diff --git a/registry/native/crates/commands/timeout/Cargo.toml b/registry/native/crates/commands/timeout/Cargo.toml
deleted file mode 100644
index f872586c9..000000000
--- a/registry/native/crates/commands/timeout/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-timeout"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "timeout standalone binary for secure-exec VM"
-
-[[bin]]
-name = "timeout"
-path = "src/main.rs"
-
-[dependencies]
-shims = { package = "secureexec-shims", path = "../../libs/shims" }
diff --git a/registry/native/crates/commands/timeout/src/main.rs b/registry/native/crates/commands/timeout/src/main.rs
deleted file mode 100644
index c9b770779..000000000
--- a/registry/native/crates/commands/timeout/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(shims::timeout::timeout(args));
-}
diff --git a/registry/native/crates/commands/touch/Cargo.toml b/registry/native/crates/commands/touch/Cargo.toml
deleted file mode 100644
index e88d117a9..000000000
--- a/registry/native/crates/commands/touch/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-touch"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "touch standalone binary for secure-exec VM"
-
-[[bin]]
-name = "touch"
-path = "src/main.rs"
-
-[dependencies]
-uu_touch = "0.7.0"
diff --git a/registry/native/crates/commands/touch/src/main.rs b/registry/native/crates/commands/touch/src/main.rs
deleted file mode 100644
index 3a5409feb..000000000
--- a/registry/native/crates/commands/touch/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_touch::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/tr/Cargo.toml b/registry/native/crates/commands/tr/Cargo.toml
deleted file mode 100644
index fcaa590eb..000000000
--- a/registry/native/crates/commands/tr/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-tr"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "tr standalone binary for secure-exec VM"
-
-[[bin]]
-name = "tr"
-path = "src/main.rs"
-
-[dependencies]
-uu_tr = "0.7.0"
diff --git a/registry/native/crates/commands/tr/src/main.rs b/registry/native/crates/commands/tr/src/main.rs
deleted file mode 100644
index 9556f5953..000000000
--- a/registry/native/crates/commands/tr/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_tr::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/tree/Cargo.toml b/registry/native/crates/commands/tree/Cargo.toml
deleted file mode 100644
index 73e0df78d..000000000
--- a/registry/native/crates/commands/tree/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-tree"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "tree standalone binary for secure-exec VM"
-
-[[bin]]
-name = "tree"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-tree = { path = "../../libs/tree" }
diff --git a/registry/native/crates/commands/tree/src/main.rs b/registry/native/crates/commands/tree/src/main.rs
deleted file mode 100644
index ee799a428..000000000
--- a/registry/native/crates/commands/tree/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_tree::main(args));
-}
diff --git a/registry/native/crates/commands/true/Cargo.toml b/registry/native/crates/commands/true/Cargo.toml
deleted file mode 100644
index 95faf9708..000000000
--- a/registry/native/crates/commands/true/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-true"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "true standalone binary for secure-exec VM"
-
-[[bin]]
-name = "true"
-path = "src/main.rs"
-
-[dependencies]
-uu_true = "0.7.0"
diff --git a/registry/native/crates/commands/true/src/main.rs b/registry/native/crates/commands/true/src/main.rs
deleted file mode 100644
index 775cb63ef..000000000
--- a/registry/native/crates/commands/true/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_true::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/truncate/Cargo.toml b/registry/native/crates/commands/truncate/Cargo.toml
deleted file mode 100644
index 8a2ea8eef..000000000
--- a/registry/native/crates/commands/truncate/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-truncate"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "truncate standalone binary for secure-exec VM"
-
-[[bin]]
-name = "truncate"
-path = "src/main.rs"
-
-[dependencies]
-uu_truncate = "0.7.0"
diff --git a/registry/native/crates/commands/truncate/src/main.rs b/registry/native/crates/commands/truncate/src/main.rs
deleted file mode 100644
index 72f1c72e3..000000000
--- a/registry/native/crates/commands/truncate/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_truncate::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/tsort/Cargo.toml b/registry/native/crates/commands/tsort/Cargo.toml
deleted file mode 100644
index 9e17b0c29..000000000
--- a/registry/native/crates/commands/tsort/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-tsort"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "tsort standalone binary for secure-exec VM"
-
-[[bin]]
-name = "tsort"
-path = "src/main.rs"
-
-[dependencies]
-uu_tsort = "0.7.0"
diff --git a/registry/native/crates/commands/tsort/src/main.rs b/registry/native/crates/commands/tsort/src/main.rs
deleted file mode 100644
index de5818841..000000000
--- a/registry/native/crates/commands/tsort/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_tsort::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/uname/Cargo.toml b/registry/native/crates/commands/uname/Cargo.toml
deleted file mode 100644
index 4b3d810d0..000000000
--- a/registry/native/crates/commands/uname/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-uname"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "uname standalone binary for secure-exec VM"
-
-[[bin]]
-name = "uname"
-path = "src/main.rs"
-
-[dependencies]
-uu_uname = "0.7.0"
diff --git a/registry/native/crates/commands/uname/src/main.rs b/registry/native/crates/commands/uname/src/main.rs
deleted file mode 100644
index 9d5d162da..000000000
--- a/registry/native/crates/commands/uname/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_uname::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/unexpand/Cargo.toml b/registry/native/crates/commands/unexpand/Cargo.toml
deleted file mode 100644
index 539079e2c..000000000
--- a/registry/native/crates/commands/unexpand/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-unexpand"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "unexpand standalone binary for secure-exec VM"
-
-[[bin]]
-name = "unexpand"
-path = "src/main.rs"
-
-[dependencies]
-uu_unexpand = "0.7.0"
diff --git a/registry/native/crates/commands/unexpand/src/main.rs b/registry/native/crates/commands/unexpand/src/main.rs
deleted file mode 100644
index a236d1543..000000000
--- a/registry/native/crates/commands/unexpand/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_unexpand::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/uniq/Cargo.toml b/registry/native/crates/commands/uniq/Cargo.toml
deleted file mode 100644
index 39cef76b9..000000000
--- a/registry/native/crates/commands/uniq/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-uniq"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "uniq standalone binary for secure-exec VM"
-
-[[bin]]
-name = "uniq"
-path = "src/main.rs"
-
-[dependencies]
-uu_uniq = "0.7.0"
diff --git a/registry/native/crates/commands/uniq/src/main.rs b/registry/native/crates/commands/uniq/src/main.rs
deleted file mode 100644
index 4f05d1db5..000000000
--- a/registry/native/crates/commands/uniq/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_uniq::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/unlink/Cargo.toml b/registry/native/crates/commands/unlink/Cargo.toml
deleted file mode 100644
index e1a449875..000000000
--- a/registry/native/crates/commands/unlink/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-unlink"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "unlink standalone binary for secure-exec VM"
-
-[[bin]]
-name = "unlink"
-path = "src/main.rs"
-
-[dependencies]
-uu_unlink = "0.7.0"
diff --git a/registry/native/crates/commands/unlink/src/main.rs b/registry/native/crates/commands/unlink/src/main.rs
deleted file mode 100644
index a16e65b8d..000000000
--- a/registry/native/crates/commands/unlink/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_unlink::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/wc/Cargo.toml b/registry/native/crates/commands/wc/Cargo.toml
deleted file mode 100644
index d2d3a0a73..000000000
--- a/registry/native/crates/commands/wc/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-wc"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "wc standalone binary for secure-exec VM"
-
-[[bin]]
-name = "wc"
-path = "src/main.rs"
-
-[dependencies]
-uu_wc = "0.7.0"
diff --git a/registry/native/crates/commands/wc/src/main.rs b/registry/native/crates/commands/wc/src/main.rs
deleted file mode 100644
index 6f11342b0..000000000
--- a/registry/native/crates/commands/wc/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_wc::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/which/Cargo.toml b/registry/native/crates/commands/which/Cargo.toml
deleted file mode 100644
index 0a6ae7d23..000000000
--- a/registry/native/crates/commands/which/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-which"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "which standalone binary for secure-exec VM"
-
-[[bin]]
-name = "which"
-path = "src/main.rs"
-
-[dependencies]
-shims = { package = "secureexec-shims", path = "../../libs/shims" }
diff --git a/registry/native/crates/commands/which/src/main.rs b/registry/native/crates/commands/which/src/main.rs
deleted file mode 100644
index d87902fcf..000000000
--- a/registry/native/crates/commands/which/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(shims::which::which(args));
-}
diff --git a/registry/native/crates/commands/which/tests/executable_mode.rs b/registry/native/crates/commands/which/tests/executable_mode.rs
deleted file mode 100644
index 8a51e070e..000000000
--- a/registry/native/crates/commands/which/tests/executable_mode.rs
+++ /dev/null
@@ -1,75 +0,0 @@
-#![cfg(unix)]
-
-use std::fs;
-use std::os::unix::fs::PermissionsExt;
-use std::path::{Path, PathBuf};
-use std::process::Command;
-use std::time::{SystemTime, UNIX_EPOCH};
-
-struct TempDir {
-    path: PathBuf,
-}
-
-impl TempDir {
-    fn new() -> Self {
-        let unique = format!(
-            "secure-exec-which-test-{}-{}",
-            std::process::id(),
-            SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("system time before unix epoch")
-                .as_nanos()
-        );
-        let path = std::env::temp_dir().join(unique);
-        fs::create_dir(&path).expect("create temp dir");
-        Self { path }
-    }
-
-    fn path(&self) -> &Path {
-        &self.path
-    }
-}
-
-impl Drop for TempDir {
-    fn drop(&mut self) {
-        let _ = fs::remove_dir_all(&self.path);
-    }
-}
-
-fn write_fixture(path: &Path, mode: u32) {
-    fs::write(path, b"#!/bin/sh\nexit 0\n").expect("write fixture");
-    let permissions = fs::Permissions::from_mode(mode);
-    fs::set_permissions(path, permissions).expect("set fixture permissions");
-}
-
-#[test]
-fn which_skips_non_executable_path_entries() {
-    let temp = TempDir::new();
-    let fakebin = temp.path().join("fakebin");
-    write_fixture(&fakebin, 0o644);
-
-    let output = Command::new(env!("CARGO_BIN_EXE_which"))
-        .arg("fakebin")
-        .env("PATH", temp.path())
-        .output()
-        .expect("run which");
-
-    assert_eq!(output.status.code(), Some(1));
-    assert!(output.stdout.is_empty(), "unexpected stdout: {:?}", output.stdout);
-}
-
-#[test]
-fn which_reports_executable_path_entries() {
-    let temp = TempDir::new();
-    let realbin = temp.path().join("realbin");
-    write_fixture(&realbin, 0o755);
-
-    let output = Command::new(env!("CARGO_BIN_EXE_which"))
-        .arg("realbin")
-        .env("PATH", temp.path())
-        .output()
-        .expect("run which");
-
-    assert_eq!(output.status.code(), Some(0));
-    assert_eq!(String::from_utf8(output.stdout).expect("utf8 stdout"), format!("{realbin}\n", realbin = realbin.display()));
-}
diff --git a/registry/native/crates/commands/whoami/Cargo.toml b/registry/native/crates/commands/whoami/Cargo.toml
deleted file mode 100644
index 5aaf67d17..000000000
--- a/registry/native/crates/commands/whoami/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-whoami"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "whoami standalone binary for secure-exec VM"
-
-[[bin]]
-name = "whoami"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-builtins = { path = "../../libs/builtins" }
diff --git a/registry/native/crates/commands/whoami/src/main.rs b/registry/native/crates/commands/whoami/src/main.rs
deleted file mode 100644
index 6d399bd1b..000000000
--- a/registry/native/crates/commands/whoami/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_builtins::whoami(args));
-}
diff --git a/registry/native/crates/commands/xargs/Cargo.toml b/registry/native/crates/commands/xargs/Cargo.toml
deleted file mode 100644
index 71a8b8cd6..000000000
--- a/registry/native/crates/commands/xargs/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-xargs"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "xargs standalone binary for secure-exec VM"
-
-[[bin]]
-name = "xargs"
-path = "src/main.rs"
-
-[dependencies]
-shims = { package = "secureexec-shims", path = "../../libs/shims" }
diff --git a/registry/native/crates/commands/xargs/src/main.rs b/registry/native/crates/commands/xargs/src/main.rs
deleted file mode 100644
index 0ef454769..000000000
--- a/registry/native/crates/commands/xargs/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(shims::xargs::xargs(args));
-}
diff --git a/registry/native/crates/commands/xu/Cargo.toml b/registry/native/crates/commands/xu/Cargo.toml
deleted file mode 100644
index 4ed41c9f3..000000000
--- a/registry/native/crates/commands/xu/Cargo.toml
+++ /dev/null
@@ -1,10 +0,0 @@
-[package]
-name = "cmd-xu"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "xu standalone binary for secure-exec VM tests"
-
-[[bin]]
-name = "xu"
-path = "src/main.rs"
diff --git a/registry/native/crates/commands/xu/src/main.rs b/registry/native/crates/commands/xu/src/main.rs
deleted file mode 100644
index 91cb4d1be..000000000
--- a/registry/native/crates/commands/xu/src/main.rs
+++ /dev/null
@@ -1,17 +0,0 @@
-fn main() {
-    let args: Vec<String> = std::env::args().skip(1).collect();
-
-    match args.first().map(String::as_str) {
-        Some("--help") => {
-            println!("Usage: xu [ARG ...]");
-            return;
-        }
-        Some("--version") => {
-            println!("xu 0.1.0");
-            return;
-        }
-        _ => {}
-    }
-
-    println!("xu-ok:{}", args.join(" "));
-}
diff --git a/registry/native/crates/commands/yes/Cargo.toml b/registry/native/crates/commands/yes/Cargo.toml
deleted file mode 100644
index 4e6da247b..000000000
--- a/registry/native/crates/commands/yes/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-yes"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "yes standalone binary for secure-exec VM"
-
-[[bin]]
-name = "yes"
-path = "src/main.rs"
-
-[dependencies]
-uu_yes = "0.7.0"
diff --git a/registry/native/crates/commands/yes/src/main.rs b/registry/native/crates/commands/yes/src/main.rs
deleted file mode 100644
index 25d3e29dd..000000000
--- a/registry/native/crates/commands/yes/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(uu_yes::uumain(args.into_iter()));
-}
diff --git a/registry/native/crates/commands/yq/Cargo.toml b/registry/native/crates/commands/yq/Cargo.toml
deleted file mode 100644
index 77dadef52..000000000
--- a/registry/native/crates/commands/yq/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "cmd-yq"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "yq standalone binary for secure-exec VM"
-
-[[bin]]
-name = "yq"
-path = "src/main.rs"
-
-[dependencies]
-secureexec-yq = { path = "../../libs/yq" }
diff --git a/registry/native/crates/commands/yq/src/main.rs b/registry/native/crates/commands/yq/src/main.rs
deleted file mode 100644
index b2e37359d..000000000
--- a/registry/native/crates/commands/yq/src/main.rs
+++ /dev/null
@@ -1,4 +0,0 @@
-fn main() {
-    let args: Vec<std::ffi::OsString> = std::env::args_os().collect();
-    std::process::exit(secureexec_yq::main(args));
-}
diff --git a/registry/native/crates/libs/awk/Cargo.toml b/registry/native/crates/libs/awk/Cargo.toml
deleted file mode 100644
index 6de5ebc66..000000000
--- a/registry/native/crates/libs/awk/Cargo.toml
+++ /dev/null
@@ -1,9 +0,0 @@
-[package]
-name = "secureexec-awk"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "awk implementation for secure-exec standalone binaries"
-
-[dependencies]
-awk-rs = "0.1.0"
diff --git a/registry/native/crates/libs/awk/src/lib.rs b/registry/native/crates/libs/awk/src/lib.rs
deleted file mode 100644
index 9d4f54ff0..000000000
--- a/registry/native/crates/libs/awk/src/lib.rs
+++ /dev/null
@@ -1,138 +0,0 @@
-//! awk implementation using the awk-rs crate (pure Rust, POSIX-compatible).
-//!
-//! Wraps the awk-rs library to provide a standard awk CLI interface.
-
-use std::ffi::OsString;
-use std::io::{self, BufReader};
-
-use awk_rs::{Interpreter, Lexer, Parser};
-
-/// Entry point for awk command.
-pub fn main(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1) // skip argv[0]
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    match run_awk(&str_args) {
-        Ok(code) => code,
-        Err(msg) => {
-            eprintln!("awk: {}", msg);
-            2
-        }
-    }
-}
-
-fn run_awk(args: &[String]) -> Result<i32, String> {
-    let mut field_separator = " ".to_string();
-    let mut program_source: Option<String> = None;
-    let mut input_files: Vec<String> = Vec::new();
-    let mut variables: Vec<(String, String)> = Vec::new();
-
-    let mut i = 0;
-    while i < args.len() {
-        let arg = &args[i];
-
-        if arg == "--" {
-            i += 1;
-            input_files.extend(args[i..].iter().cloned());
-            break;
-        }
-
-        if arg == "-F" {
-            i += 1;
-            if i >= args.len() {
-                return Err("option -F requires an argument".to_string());
-            }
-            field_separator = args[i].clone();
-        } else if let Some(fs) = arg.strip_prefix("-F") {
-            field_separator = fs.to_string();
-        } else if arg == "-v" {
-            i += 1;
-            if i >= args.len() {
-                return Err("option -v requires an argument".to_string());
-            }
-            let var_assign = &args[i];
-            if let Some((name, value)) = var_assign.split_once('=') {
-                variables.push((name.to_string(), value.to_string()));
-            } else {
-                return Err(format!("invalid variable assignment: {}", var_assign));
-            }
-        } else if arg == "-f" {
-            i += 1;
-            if i >= args.len() {
-                return Err("option -f requires an argument".to_string());
-            }
-            let content =
-                std::fs::read_to_string(&args[i]).map_err(|e| format!("{}: {}", args[i], e))?;
-            program_source = Some(content);
-        } else if arg.starts_with('-') && arg != "-" {
-            // Skip unknown options gracefully
-        } else if program_source.is_none() {
-            program_source = Some(arg.clone());
-        } else {
-            input_files.push(arg.clone());
-        }
-
-        i += 1;
-    }
-
-    let source = program_source.ok_or("no program provided")?;
-
-    // Parse the program
-    let mut lexer = Lexer::new(&source);
-    let tokens = lexer.tokenize().map_err(|e| format!("{}", e))?;
-    let mut parser = Parser::new(tokens);
-    let program = parser.parse().map_err(|e| format!("{}", e))?;
-
-    // Create interpreter
-    let mut interpreter = Interpreter::new(&program);
-    interpreter.set_fs(&field_separator);
-
-    // Set ARGC/ARGV
-    let mut argv = vec!["awk".to_string()];
-    argv.extend(input_files.iter().cloned());
-    interpreter.set_args(argv);
-
-    // Set variables
-    for (name, value) in &variables {
-        interpreter.set_variable(name, value);
-    }
-
-    // Execute
-    let stdout = io::stdout();
-    let mut output = stdout.lock();
-
-    let exit_code = if input_files.is_empty() {
-        // Read from stdin
-        let stdin = io::stdin();
-        let inputs = vec![BufReader::new(stdin.lock())];
-        interpreter
-            .run(inputs, &mut output)
-            .map_err(|e| format!("{}", e))?
-    } else {
-        let mut exit_code = 0;
-        for filename in &input_files {
-            if filename == "-" {
-                interpreter.set_filename("");
-                let stdin = io::stdin();
-                let inputs = vec![BufReader::new(stdin.lock())];
-                exit_code = interpreter
-                    .run(inputs, &mut output)
-                    .map_err(|e| format!("{}", e))?;
-            } else {
-                interpreter.set_filename(filename);
-                let file =
-                    std::fs::File::open(filename).map_err(|e| format!("{}: {}", filename, e))?;
-                let inputs = vec![BufReader::new(file)];
-                exit_code = interpreter
-                    .run(inputs, &mut output)
-                    .map_err(|e| format!("{}", e))?;
-            }
-        }
-        exit_code
-    };
-
-    Ok(exit_code)
-}
diff --git a/registry/native/crates/libs/builtins/Cargo.toml b/registry/native/crates/libs/builtins/Cargo.toml
deleted file mode 100644
index daac258bf..000000000
--- a/registry/native/crates/libs/builtins/Cargo.toml
+++ /dev/null
@@ -1,10 +0,0 @@
-[package]
-name = "secureexec-builtins"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "Built-in command implementations (sleep, test/[, whoami) for secure-exec VM"
-
-[dependencies]
-libc = "0.2"
-wasi-ext = { path = "../../wasi-ext" }
diff --git a/registry/native/crates/libs/builtins/src/lib.rs b/registry/native/crates/libs/builtins/src/lib.rs
deleted file mode 100644
index dee2b00af..000000000
--- a/registry/native/crates/libs/builtins/src/lib.rs
+++ /dev/null
@@ -1,698 +0,0 @@
-//! Built-in implementations of commands that don't have
-//! practical uutils replacements for wasm32-wasip1.
-//!
-//! - sleep: uses host_process.sleep_ms (Atomics.wait on host side)
-//! - test/[: conditional expressions (uu_test has 17 unix errors)
-//! - whoami: reads USER/LOGNAME env vars (uu_whoami needs unix)
-use std::ffi::OsString;
-use std::fs::Metadata;
-use std::time::{Duration, SystemTime};
-
-#[cfg(unix)]
-use std::os::unix::fs::MetadataExt;
-
-#[cfg(target_os = "wasi")]
-mod host_fs {
-    #[link(wasm_import_module = "host_fs")]
-    unsafe extern "C" {
-        // Signature must match the sidecar host_fs.path_mode
-        // (dir_fd, path_ptr, path_len, follow_symlinks).
-        pub fn path_mode(
-            dir_fd: u32,
-            path_ptr: *const u8,
-            path_len: u32,
-            follow_symlinks: u32,
-        ) -> u32;
-    }
-}
-
-/// Sleep: pause for N seconds via host_process.sleep_ms callback.
-/// Uses Atomics.wait on the host side — no busy-waiting.
-pub fn sleep(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    if str_args.is_empty() {
-        eprintln!("sleep: missing operand");
-        return 1;
-    }
-
-    let duration = match parse_sleep_duration(&str_args[0]) {
-        Ok(duration) => duration,
-        Err(()) => {
-            eprintln!("sleep: invalid time interval '{}'", str_args[0]);
-            return 1;
-        }
-    };
-
-    if let Err(error) = sleep_for_duration(duration) {
-        eprintln!("sleep: failed to sleep: {error}");
-        return 1;
-    }
-
-    0
-}
-
-fn parse_sleep_duration(raw: &str) -> Result<Duration, ()> {
-    let secs: f64 = raw.parse().map_err(|_| ())?;
-    if !secs.is_finite() || secs < 0.0 {
-        return Err(());
-    }
-
-    Duration::try_from_secs_f64(secs).map_err(|_| ())
-}
-
-#[cfg_attr(not(target_arch = "wasm32"), allow(dead_code))]
-fn ceil_duration_to_millis(duration: Duration) -> u32 {
-    let millis = duration.as_millis();
-    if millis == 0 && !duration.is_zero() {
-        return 1;
-    }
-
-    millis.try_into().unwrap_or(u32::MAX)
-}
-
-fn sleep_for_duration(duration: Duration) -> Result<(), String> {
-    #[cfg(target_arch = "wasm32")]
-    {
-        let mut remaining = duration;
-        while !remaining.is_zero() {
-            let millis = ceil_duration_to_millis(remaining);
-            wasi_ext::host_sleep_ms(millis).map_err(|errno| format!("wasi errno {errno}"))?;
-            remaining = remaining.saturating_sub(Duration::from_millis(u64::from(millis)));
-        }
-        Ok(())
-    }
-
-    #[cfg(not(target_arch = "wasm32"))]
-    {
-        std::thread::sleep(duration);
-        Ok(())
-    }
-}
-
-/// Minimal test / [ command: evaluate conditional expressions.
-/// Dispatches on argv[0] basename for standalone binary usage.
-pub fn test_cmd(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    // Remove trailing ']' if invoked as '['
-    let args: Vec<&str> =
-        if !str_args.is_empty() && str_args.last().map(|s| s.as_str()) == Some("]") {
-            str_args[..str_args.len() - 1]
-                .iter()
-                .map(|s| s.as_str())
-                .collect()
-        } else {
-            str_args.iter().map(|s| s.as_str()).collect()
-        };
-
-    if args.is_empty() {
-        return 1; // empty test is false
-    }
-
-    let result = eval_test(&args);
-    if result {
-        0
-    } else {
-        1
-    }
-}
-
-fn eval_test(args: &[&str]) -> bool {
-    let mut parser = TestParser::new(args);
-    let result = parser.parse_or_expression();
-    result && parser.is_complete()
-}
-
-struct TestParser<'a> {
-    args: &'a [&'a str],
-    position: usize,
-    invalid: bool,
-}
-
-impl<'a> TestParser<'a> {
-    fn new(args: &'a [&'a str]) -> Self {
-        Self {
-            args,
-            position: 0,
-            invalid: false,
-        }
-    }
-
-    fn parse_or_expression(&mut self) -> bool {
-        let mut result = self.parse_and_expression();
-        while self.consume("-o") {
-            let rhs = self.parse_and_expression();
-            result = result || rhs;
-        }
-        result
-    }
-
-    fn parse_and_expression(&mut self) -> bool {
-        let mut result = self.parse_not_expression();
-        while self.consume("-a") {
-            let rhs = self.parse_not_expression();
-            result = result && rhs;
-        }
-        result
-    }
-
-    fn parse_not_expression(&mut self) -> bool {
-        if self.consume("!") {
-            return !self.parse_not_expression();
-        }
-        self.parse_primary_expression()
-    }
-
-    fn parse_primary_expression(&mut self) -> bool {
-        if self.consume("(") {
-            let result = self.parse_or_expression();
-            if !self.consume(")") {
-                self.invalid = true;
-                return false;
-            }
-            return result;
-        }
-
-        self.parse_simple_expression()
-    }
-
-    fn parse_simple_expression(&mut self) -> bool {
-        let Some(first) = self.peek() else {
-            self.invalid = true;
-            return false;
-        };
-
-        if is_unary_operator(first) {
-            let Some(second) = self.peek_nth(1) else {
-                self.invalid = true;
-                return false;
-            };
-            self.position += 2;
-            return eval_simple(&[first, second]);
-        }
-
-        if let (Some(operator), Some(third)) = (self.peek_nth(1), self.peek_nth(2)) {
-            if is_binary_operator(operator) {
-                self.position += 3;
-                return eval_simple(&[first, operator, third]);
-            }
-        }
-
-        self.position += 1;
-        eval_simple(&[first])
-    }
-
-    fn consume(&mut self, expected: &str) -> bool {
-        if self.peek() == Some(expected) {
-            self.position += 1;
-            true
-        } else {
-            false
-        }
-    }
-
-    fn peek(&self) -> Option<&'a str> {
-        self.peek_nth(0)
-    }
-
-    fn peek_nth(&self, offset: usize) -> Option<&'a str> {
-        self.args.get(self.position + offset).copied()
-    }
-
-    fn is_complete(&self) -> bool {
-        !self.invalid && self.position == self.args.len()
-    }
-}
-
-fn eval_simple(args: &[&str]) -> bool {
-    match args.len() {
-        0 => false,
-        1 => !args[0].is_empty(),
-        2 => match args[0] {
-            "-n" => !args[1].is_empty(),
-            "-z" => args[1].is_empty(),
-            "-f" => std::fs::metadata(args[1])
-                .map(|m| m.is_file())
-                .unwrap_or(false),
-            "-d" => std::fs::metadata(args[1])
-                .map(|m| m.is_dir())
-                .unwrap_or(false),
-            "-e" => std::fs::metadata(args[1]).is_ok(),
-            "-s" => std::fs::metadata(args[1])
-                .map(|m| m.len() > 0)
-                .unwrap_or(false),
-            "-r" | "-w" | "-x" => has_access_mode(args[1], args[0]),
-            _ => false,
-        },
-        3 => match args[1] {
-            "=" | "==" => args[0] == args[2],
-            "!=" => args[0] != args[2],
-            "-eq" => args[0].parse::<i64>().ok() == args[2].parse::<i64>().ok(),
-            "-ne" => args[0].parse::<i64>().ok() != args[2].parse::<i64>().ok(),
-            "-lt" => args[0].parse::<i64>().unwrap_or(0) < args[2].parse::<i64>().unwrap_or(0),
-            "-le" => args[0].parse::<i64>().unwrap_or(0) <= args[2].parse::<i64>().unwrap_or(0),
-            "-gt" => args[0].parse::<i64>().unwrap_or(0) > args[2].parse::<i64>().unwrap_or(0),
-            "-ge" => args[0].parse::<i64>().unwrap_or(0) >= args[2].parse::<i64>().unwrap_or(0),
-            "-nt" => compare_mtime(args[0], args[2], |lhs, rhs| lhs > rhs),
-            "-ot" => compare_mtime(args[0], args[2], |lhs, rhs| lhs < rhs),
-            _ => false,
-        },
-        _ => false,
-    }
-}
-
-fn compare_mtime(
-    left: &str,
-    right: &str,
-    predicate: impl FnOnce(SystemTime, SystemTime) -> bool,
-) -> bool {
-    let Some(left_mtime) = file_mtime(left) else {
-        return false;
-    };
-    let Some(right_mtime) = file_mtime(right) else {
-        return false;
-    };
-
-    predicate(left_mtime, right_mtime)
-}
-
-fn file_mtime(path: &str) -> Option<SystemTime> {
-    std::fs::metadata(path).ok()?.modified().ok()
-}
-
-fn is_unary_operator(token: &str) -> bool {
-    matches!(
-        token,
-        "-n" | "-z" | "-f" | "-d" | "-e" | "-s" | "-r" | "-w" | "-x"
-    )
-}
-
-fn is_binary_operator(token: &str) -> bool {
-    matches!(
-        token,
-        "=" | "==" | "!=" | "-eq" | "-ne" | "-lt" | "-le" | "-gt" | "-ge" | "-nt" | "-ot"
-    )
-}
-
-fn has_access_mode(path: &str, flag: &str) -> bool {
-    match requested_mode_bit(flag) {
-        Some(bit) => access_mode_allowed(path, bit),
-        None => false,
-    }
-}
-
-fn requested_mode_bit(flag: &str) -> Option<u32> {
-    match flag {
-        "-r" => Some(0o4),
-        "-w" => Some(0o2),
-        "-x" => Some(0o1),
-        _ => None,
-    }
-}
-
-#[cfg(any(unix, target_os = "wasi"))]
-fn access_mode_allowed(path: &str, requested_bit: u32) -> bool {
-    let Ok(metadata) = std::fs::metadata(path) else {
-        return false;
-    };
-
-    permission_allows(path, &metadata, requested_bit)
-}
-
-#[cfg(not(any(unix, target_os = "wasi")))]
-fn access_mode_allowed(path: &str, requested_bit: u32) -> bool {
-    let Ok(metadata) = std::fs::metadata(path) else {
-        return false;
-    };
-
-    permission_allows(path, &metadata, requested_bit)
-}
-
-#[cfg(unix)]
-fn permission_allows(_path: &str, metadata: &Metadata, requested_bit: u32) -> bool {
-    let mode = metadata.mode();
-    let identity = current_identity();
-
-    if identity.uid == 0 {
-        if requested_bit == 0o1 {
-            return metadata.is_dir() || (mode & 0o111) != 0;
-        }
-        return true;
-    }
-
-    let permission_bits = if identity.uid == metadata.uid() {
-        (mode >> 6) & 0o7
-    } else if identity.gids.iter().any(|gid| *gid == metadata.gid()) {
-        (mode >> 3) & 0o7
-    } else {
-        mode & 0o7
-    };
-
-    (permission_bits & requested_bit) != 0
-}
-
-#[cfg(target_os = "wasi")]
-fn permission_allows(_path: &str, metadata: &Metadata, requested_bit: u32) -> bool {
-    let mode = wasi_path_mode(_path).unwrap_or_default();
-    let identity = current_identity();
-
-    if identity.uid == 0 {
-        if requested_bit == 0o1 {
-            return metadata.is_dir() || (mode & 0o111) != 0;
-        }
-        return true;
-    }
-
-    let owner = (mode >> 6) & 0o7;
-    let group = (mode >> 3) & 0o7;
-    let other = mode & 0o7;
-
-    (owner & requested_bit) != 0 || (group & requested_bit) != 0 || (other & requested_bit) != 0
-}
-
-#[cfg(not(any(unix, target_os = "wasi")))]
-fn permission_allows(_path: &str, metadata: &Metadata, requested_bit: u32) -> bool {
-    requested_bit != 0o2 || !metadata.permissions().readonly()
-}
-
-#[cfg(target_os = "wasi")]
-fn wasi_path_mode(path: &str) -> Option<u32> {
-    let bytes = path.as_bytes();
-    // dir_fd 3 = cwd preopen; absolute paths ignore it.
-    let mode = unsafe { host_fs::path_mode(3, bytes.as_ptr(), bytes.len() as u32, 1) };
-    if mode == 0 {
-        None
-    } else {
-        Some(mode)
-    }
-}
-
-struct ProcessIdentity {
-    uid: u32,
-    #[cfg(unix)]
-    gids: Vec<u32>,
-}
-
-#[cfg(target_os = "wasi")]
-fn current_identity() -> ProcessIdentity {
-    let uid = wasi_ext::get_euid()
-        .or_else(|_| wasi_ext::get_uid())
-        .unwrap_or(0);
-
-    ProcessIdentity { uid }
-}
-
-#[cfg(unix)]
-fn current_identity() -> ProcessIdentity {
-    let uid = unsafe { libc::geteuid() } as u32;
-    let gid = unsafe { libc::getegid() } as u32;
-
-    let supplementary_count = unsafe { libc::getgroups(0, std::ptr::null_mut()) };
-    let mut gids = vec![gid];
-
-    if supplementary_count > 0 {
-        let mut extra_gids = vec![0; supplementary_count as usize];
-        let written = unsafe { libc::getgroups(supplementary_count, extra_gids.as_mut_ptr()) };
-        if written > 0 {
-            gids.extend(
-                extra_gids
-                    .into_iter()
-                    .take(written as usize)
-                    .map(|group| group as u32),
-            );
-        }
-    }
-
-    ProcessIdentity { uid, gids }
-}
-
-#[cfg(not(any(unix, target_os = "wasi")))]
-fn current_identity() -> ProcessIdentity {
-    ProcessIdentity { uid: 0 }
-}
-
-/// Minimal whoami: print the current user name.
-pub fn whoami(_args: Vec<OsString>) -> i32 {
-    // Try USER env var first, fall back to LOGNAME, then "user"
-    let name = std::env::var("USER")
-        .or_else(|_| std::env::var("LOGNAME"))
-        .unwrap_or_else(|_| "user".to_string());
-    println!("{}", name);
-    0
-}
-
-#[cfg(test)]
-mod tests {
-    use super::{ceil_duration_to_millis, parse_sleep_duration, test_cmd};
-    use std::ffi::OsString;
-    use std::fs;
-    use std::path::PathBuf;
-    use std::time::{Duration, SystemTime, UNIX_EPOCH};
-
-    #[cfg(any(unix, target_os = "wasi"))]
-    use std::os::unix::fs::PermissionsExt;
-
-    #[test]
-    fn sleep_duration_rejects_invalid_intervals() {
-        assert!(parse_sleep_duration("-1").is_err());
-        assert!(parse_sleep_duration("inf").is_err());
-        assert!(parse_sleep_duration("NaN").is_err());
-        assert!(parse_sleep_duration("not-a-number").is_err());
-    }
-
-    #[test]
-    fn sleep_duration_rounds_submillisecond_intervals_up() {
-        let duration = parse_sleep_duration("0.0001").expect("parse tiny sleep");
-        assert_eq!(ceil_duration_to_millis(duration), 1);
-    }
-
-    #[test]
-    fn test_access_checks_follow_mode_bits() {
-        let fixture = TempFixture::new();
-
-        fixture.write_file("read-write.txt", 0o644);
-        fixture.write_file("read-only.txt", 0o444);
-        fixture.write_file("executable.sh", 0o755);
-        fixture.write_file("blocked.bin", 0o000);
-
-        let read_write = fixture.path("read-write.txt");
-        assert_eq!(run_test("-r", &read_write), 0);
-        assert_eq!(run_test("-w", &read_write), 0);
-        assert_eq!(run_test("-x", &read_write), 1);
-
-        let read_only = fixture.path("read-only.txt");
-        assert_eq!(run_test("-r", &read_only), 0);
-        assert_eq!(run_test("-w", &read_only), 1);
-        assert_eq!(run_test("-x", &read_only), 1);
-
-        let executable = fixture.path("executable.sh");
-        assert_eq!(run_test("-r", &executable), 0);
-        assert_eq!(run_test("-w", &executable), 0);
-        assert_eq!(run_test("-x", &executable), 0);
-
-        let blocked = fixture.path("blocked.bin");
-        assert_eq!(run_test("-r", &blocked), 1);
-        assert_eq!(run_test("-w", &blocked), 1);
-        assert_eq!(run_test("-x", &blocked), 1);
-    }
-
-    #[test]
-    fn test_compound_expressions_follow_posix_precedence_and_grouping() {
-        let cases = [
-            (vec!["a"], true),
-            (vec!["-n", "value"], true),
-            (vec!["-z", ""], true),
-            (vec!["1", "-eq", "1"], true),
-            (vec!["1", "-eq", "2"], false),
-            (vec!["1", "-eq", "1", "-a", "2", "-eq", "2"], true),
-            (vec!["1", "-eq", "1", "-o", "2", "-eq", "3"], true),
-            (
-                vec![
-                    "1", "-eq", "1", "-o", "2", "-eq", "3", "-a", "4", "-eq", "5",
-                ],
-                true,
-            ),
-            (
-                vec![
-                    "1", "-eq", "2", "-o", "2", "-eq", "2", "-a", "3", "-eq", "3",
-                ],
-                true,
-            ),
-            (
-                vec![
-                    "(", "1", "-eq", "2", "-o", "2", "-eq", "2", ")", "-a", "3", "-eq", "3",
-                ],
-                true,
-            ),
-            (
-                vec![
-                    "(", "1", "-eq", "2", "-o", "2", "-eq", "3", ")", "-a", "3", "-eq", "3",
-                ],
-                false,
-            ),
-            (
-                vec![
-                    "!", "(", "1", "-eq", "2", "-o", "2", "-eq", "3", ")", "-a", "4", "-eq", "4",
-                ],
-                true,
-            ),
-            (
-                vec!["!", "(", "1", "-eq", "1", "-a", "2", "-eq", "2", ")"],
-                false,
-            ),
-            (vec!["!", "1", "-eq", "2", "-o", "3", "-eq", "4"], true),
-            (
-                vec![
-                    "(", "1", "-eq", "1", "-o", "2", "-eq", "3", ")", "-a", "!", "(", "4", "-eq",
-                    "5", ")",
-                ],
-                true,
-            ),
-        ];
-
-        for (expr, expected) in cases {
-            assert_result("test", &expr, expected);
-            assert_result("[", &expr, expected);
-        }
-    }
-
-    #[test]
-    fn test_compound_expressions_reject_unbalanced_grouping() {
-        assert_result("[", &["(", "1", "-eq", "1"], false);
-        assert_result("test", &["1", "-eq", "1", ")"], false);
-    }
-
-    #[test]
-    fn test_file_time_comparisons_use_mtime_and_ignore_missing_paths() {
-        let fixture = TempFixture::new();
-
-        fixture.write_file("old.txt", 0o644);
-        fixture.write_file("mid.txt", 0o644);
-        fixture.write_file("new.txt", 0o644);
-
-        let old = fixture.path("old.txt");
-        let mid = fixture.path("mid.txt");
-        let new = fixture.path("new.txt");
-        let missing = fixture.path("missing.txt");
-
-        let base = SystemTime::UNIX_EPOCH + Duration::from_secs(1_700_000_000);
-        set_mtime(&old, base);
-        set_mtime(&mid, base + Duration::from_secs(10));
-        set_mtime(&new, base + Duration::from_secs(20));
-
-        assert_result("test", &[new.as_str(), "-nt", mid.as_str()], true);
-        assert_result("test", &[mid.as_str(), "-nt", new.as_str()], false);
-        assert_result("test", &[old.as_str(), "-ot", mid.as_str()], true);
-        assert_result("test", &[mid.as_str(), "-ot", old.as_str()], false);
-        assert_result("test", &[mid.as_str(), "-nt", mid.as_str()], false);
-        assert_result("test", &[mid.as_str(), "-ot", mid.as_str()], false);
-        assert_result("test", &[mid.as_str(), "-nt", missing.as_str()], false);
-        assert_result("test", &[missing.as_str(), "-ot", mid.as_str()], false);
-        assert_result("[", &[new.as_str(), "-nt", old.as_str()], true);
-        assert_result("[", &[old.as_str(), "-ot", new.as_str()], true);
-    }
-
-    fn run_test(flag: &str, path: &str) -> i32 {
-        let mut argv = vec![OsString::from("test")];
-        argv.push(OsString::from(flag));
-        argv.push(OsString::from(path));
-        test_cmd(argv)
-    }
-
-    fn assert_result(program: &str, expr: &[&str], expected: bool) {
-        let status = run_expression(program, expr);
-        assert_eq!(
-            status == 0,
-            expected,
-            "program={program} expr={expr:?} expected={expected} got_status={status}"
-        );
-    }
-
-    fn run_expression(program: &str, expr: &[&str]) -> i32 {
-        let mut argv = vec![OsString::from(program)];
-        argv.extend(expr.iter().map(OsString::from));
-        if program == "[" {
-            argv.push(OsString::from("]"));
-        }
-        test_cmd(argv)
-    }
-
-    struct TempFixture {
-        root: PathBuf,
-    }
-
-    impl TempFixture {
-        fn new() -> Self {
-            let unique = SystemTime::now()
-                .duration_since(UNIX_EPOCH)
-                .expect("system time")
-                .as_nanos();
-            let root = std::env::temp_dir().join(format!(
-                "secureexec-builtins-test-{}-{}",
-                std::process::id(),
-                unique
-            ));
-            fs::create_dir(&root).expect("create temp fixture");
-            Self { root }
-        }
-
-        fn path(&self, name: &str) -> String {
-            self.root
-                .join(name)
-                .to_str()
-                .expect("fixture path utf-8")
-                .to_string()
-        }
-
-        fn write_file(&self, name: &str, mode: u32) {
-            let path = self.root.join(name);
-            fs::write(&path, b"fixture").expect("write fixture file");
-            let permissions = fs::Permissions::from_mode(mode);
-            fs::set_permissions(&path, permissions).expect("set fixture permissions");
-        }
-    }
-
-    #[cfg(unix)]
-    fn set_mtime(path: &str, time: SystemTime) {
-        use std::ffi::CString;
-        use std::os::unix::ffi::OsStrExt;
-
-        let duration = time
-            .duration_since(SystemTime::UNIX_EPOCH)
-            .expect("mtime after unix epoch");
-        let path = CString::new(std::path::Path::new(path).as_os_str().as_bytes()).expect("c path");
-        let times = [
-            libc::timespec {
-                tv_sec: duration.as_secs() as libc::time_t,
-                tv_nsec: duration.subsec_nanos() as libc::c_long,
-            },
-            libc::timespec {
-                tv_sec: duration.as_secs() as libc::time_t,
-                tv_nsec: duration.subsec_nanos() as libc::c_long,
-            },
-        ];
-
-        let result = unsafe { libc::utimensat(libc::AT_FDCWD, path.as_ptr(), times.as_ptr(), 0) };
-        assert_eq!(result, 0, "set mtime for {path:?}");
-    }
-
-    #[cfg(not(unix))]
-    fn set_mtime(_path: &str, _time: SystemTime) {
-        panic!("mtime test fixture requires unix host support");
-    }
-
-    impl Drop for TempFixture {
-        fn drop(&mut self) {
-            let _ = fs::remove_dir_all(&self.root);
-        }
-    }
-}
diff --git a/registry/native/crates/libs/column/Cargo.toml b/registry/native/crates/libs/column/Cargo.toml
deleted file mode 100644
index 0215159ee..000000000
--- a/registry/native/crates/libs/column/Cargo.toml
+++ /dev/null
@@ -1,8 +0,0 @@
-[package]
-name = "secureexec-column"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "column implementation for secure-exec standalone binaries"
-
-[dependencies]
diff --git a/registry/native/crates/libs/column/src/lib.rs b/registry/native/crates/libs/column/src/lib.rs
deleted file mode 100644
index 264783a5f..000000000
--- a/registry/native/crates/libs/column/src/lib.rs
+++ /dev/null
@@ -1,188 +0,0 @@
-//! column -- format stdin/files into columns
-
-use std::ffi::OsString;
-use std::io::{self, BufRead, BufReader, Write};
-
-pub fn main(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    let mut table_mode = false;
-    let mut separator = String::new(); // empty = default whitespace splitting
-    let mut filenames: Vec<String> = Vec::new();
-
-    let mut i = 0;
-    while i < str_args.len() {
-        match str_args[i].as_str() {
-            "-t" => table_mode = true,
-            "-s" => {
-                i += 1;
-                if i >= str_args.len() {
-                    eprintln!("column: option '-s' requires an argument");
-                    return 1;
-                }
-                separator = str_args[i].clone();
-            }
-            s if s.starts_with("-s") && s.len() > 2 => {
-                separator = s[2..].to_string();
-            }
-            s if s.starts_with('-') && s.len() > 1 => {
-                eprintln!("column: unknown option '{}'", s);
-                return 1;
-            }
-            _ => filenames.push(str_args[i].clone()),
-        }
-        i += 1;
-    }
-
-    // Collect all input lines
-    let mut lines: Vec<String> = Vec::new();
-    if filenames.is_empty() {
-        let stdin = io::stdin();
-        for line in stdin.lock().lines() {
-            match line {
-                Ok(l) => lines.push(l),
-                Err(e) => {
-                    eprintln!("column: {}", e);
-                    return 1;
-                }
-            }
-        }
-    } else {
-        for filename in &filenames {
-            match std::fs::File::open(filename) {
-                Ok(f) => {
-                    for line in BufReader::new(f).lines() {
-                        match line {
-                            Ok(l) => lines.push(l),
-                            Err(e) => {
-                                eprintln!("column: {}: {}", filename, e);
-                                return 1;
-                            }
-                        }
-                    }
-                }
-                Err(e) => {
-                    eprintln!("column: {}: {}", filename, e);
-                    return 1;
-                }
-            }
-        }
-    }
-
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-
-    let result = if table_mode {
-        format_table(&lines, &separator, &mut out)
-    } else {
-        format_columns(&lines, &mut out)
-    }
-    .and_then(|()| out.flush());
-
-    if let Err(error) = result {
-        eprintln!("column: failed to write output: {error}");
-        return 1;
-    }
-
-    0
-}
-
-/// Table mode (-t): split each line into fields and pad to column widths.
-fn format_table<W: Write>(lines: &[String], separator: &str, out: &mut W) -> io::Result<()> {
-    // Split lines into rows of fields
-    let rows: Vec<Vec<&str>> = lines
-        .iter()
-        .map(|line| {
-            if separator.is_empty() {
-                line.split_whitespace().collect()
-            } else {
-                line.split(&separator[..]).collect()
-            }
-        })
-        .collect();
-
-    if rows.is_empty() {
-        return Ok(());
-    }
-
-    // Find max width for each column
-    let max_cols = rows.iter().map(|r| r.len()).max().unwrap_or(0);
-    let mut col_widths = vec![0usize; max_cols];
-    for row in &rows {
-        for (j, field) in row.iter().enumerate() {
-            let width = field.chars().count();
-            if width > col_widths[j] {
-                col_widths[j] = width;
-            }
-        }
-    }
-
-    // Print padded rows
-    for row in &rows {
-        for (j, field) in row.iter().enumerate() {
-            if j > 0 {
-                write!(out, "  ")?;
-            }
-            if j + 1 < row.len() {
-                // Pad all columns except the last
-                let width = field.chars().count();
-                write!(out, "{}", field)?;
-                for _ in width..col_widths[j] {
-                    write!(out, " ")?;
-                }
-            } else {
-                write!(out, "{}", field)?;
-            }
-        }
-        writeln!(out)?;
-    }
-
-    Ok(())
-}
-
-/// Default mode: fill columns across the terminal width (simplified: 80 chars).
-fn format_columns<W: Write>(lines: &[String], out: &mut W) -> io::Result<()> {
-    // Filter out empty lines
-    let entries: Vec<&str> = lines
-        .iter()
-        .map(|s| s.as_str())
-        .filter(|s| !s.is_empty())
-        .collect();
-    if entries.is_empty() {
-        return Ok(());
-    }
-
-    let term_width: usize = 80;
-    let max_entry_width = entries.iter().map(|e| e.chars().count()).max().unwrap_or(0);
-    let col_width = max_entry_width + 2; // 2-char padding
-
-    if col_width == 0 || col_width > term_width {
-        // One per line
-        for entry in &entries {
-            writeln!(out, "{}", entry)?;
-        }
-        return Ok(());
-    }
-
-    let num_cols = term_width / col_width;
-    let num_cols = if num_cols == 0 { 1 } else { num_cols };
-
-    for (i, entry) in entries.iter().enumerate() {
-        let is_last_in_row = (i + 1) % num_cols == 0 || i + 1 == entries.len();
-        if is_last_in_row {
-            writeln!(out, "{}", entry)?;
-        } else {
-            let width = entry.chars().count();
-            write!(out, "{}", entry)?;
-            for _ in width..col_width {
-                write!(out, " ")?;
-            }
-        }
-    }
-
-    Ok(())
-}
diff --git a/registry/native/crates/libs/diff/Cargo.toml b/registry/native/crates/libs/diff/Cargo.toml
deleted file mode 100644
index 614324b8e..000000000
--- a/registry/native/crates/libs/diff/Cargo.toml
+++ /dev/null
@@ -1,9 +0,0 @@
-[package]
-name = "secureexec-diff"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "diff implementation for secure-exec standalone binaries"
-
-[dependencies]
-similar = "2"
diff --git a/registry/native/crates/libs/diff/src/lib.rs b/registry/native/crates/libs/diff/src/lib.rs
deleted file mode 100644
index 04dbde97d..000000000
--- a/registry/native/crates/libs/diff/src/lib.rs
+++ /dev/null
@@ -1,468 +0,0 @@
-//! diff -- compare files line by line using the `similar` crate
-
-use std::collections::HashSet;
-use std::ffi::OsString;
-use std::fs;
-use std::io::{self, Write};
-use std::path::Path;
-
-use similar::{ChangeTag, TextDiff};
-
-struct Options {
-    unified: bool,
-    context_fmt: bool,
-    context_lines: usize,
-    recursive: bool,
-    brief: bool,
-    ignore_case: bool,
-    ignore_whitespace: bool,
-    ignore_blank_lines: bool,
-}
-
-impl Default for Options {
-    fn default() -> Self {
-        Self {
-            unified: false,
-            context_fmt: false,
-            context_lines: 3,
-            recursive: false,
-            brief: false,
-            ignore_case: false,
-            ignore_whitespace: false,
-            ignore_blank_lines: false,
-        }
-    }
-}
-
-pub fn main(args: Vec<OsString>) -> i32 {
-    let args: Vec<String> = args
-        .iter()
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-    let mut opts = Options::default();
-    let mut files: Vec<String> = Vec::new();
-    let mut i = 1;
-
-    while i < args.len() {
-        let arg = &args[i];
-        match arg.as_str() {
-            "-u" | "--unified" => opts.unified = true,
-            "-c" | "--context" => opts.context_fmt = true,
-            "-r" | "-R" | "--recursive" => opts.recursive = true,
-            "-q" | "--brief" => opts.brief = true,
-            "-i" | "--ignore-case" => opts.ignore_case = true,
-            "-w" | "--ignore-all-space" => opts.ignore_whitespace = true,
-            "-B" | "--ignore-blank-lines" => opts.ignore_blank_lines = true,
-            s if s.starts_with("-U") => {
-                if let Ok(n) = s[2..].parse::<usize>() {
-                    opts.unified = true;
-                    opts.context_lines = n;
-                }
-            }
-            s if s.starts_with("-C") => {
-                if let Ok(n) = s[2..].parse::<usize>() {
-                    opts.context_fmt = true;
-                    opts.context_lines = n;
-                }
-            }
-            _ if !arg.starts_with('-') || arg == "-" => {
-                files.push(arg.clone());
-            }
-            _ => {
-                eprintln!("diff: unknown option: {}", arg);
-                return 2;
-            }
-        }
-        i += 1;
-    }
-
-    if files.len() != 2 {
-        eprintln!("diff: requires exactly two file or directory arguments");
-        return 2;
-    }
-
-    let path_a = Path::new(&files[0]);
-    let path_b = Path::new(&files[1]);
-
-    let mut visited_dirs = HashSet::new();
-    match diff_paths(path_a, path_b, &opts, &mut visited_dirs) {
-        Ok(has_diff) => {
-            if has_diff {
-                1
-            } else {
-                0
-            }
-        }
-        Err(e) => {
-            eprintln!("diff: {}", e);
-            2
-        }
-    }
-}
-
-fn diff_paths(
-    path_a: &Path,
-    path_b: &Path,
-    opts: &Options,
-    visited_dirs: &mut HashSet<(std::path::PathBuf, std::path::PathBuf)>,
-) -> Result<bool, String> {
-    let a_is_dir = path_a.is_dir();
-    let b_is_dir = path_b.is_dir();
-
-    if a_is_dir && b_is_dir {
-        if opts.recursive {
-            diff_dirs(path_a, path_b, opts, visited_dirs)
-        } else {
-            Err(format!("{} is a directory", path_a.display()))
-        }
-    } else if a_is_dir || b_is_dir {
-        if a_is_dir {
-            let name = path_b.file_name().ok_or("invalid filename")?;
-            diff_files(&path_a.join(name), path_b, opts)
-        } else {
-            let name = path_a.file_name().ok_or("invalid filename")?;
-            diff_files(path_a, &path_b.join(name), opts)
-        }
-    } else {
-        diff_files(path_a, path_b, opts)
-    }
-}
-
-fn diff_dirs(
-    dir_a: &Path,
-    dir_b: &Path,
-    opts: &Options,
-    visited_dirs: &mut HashSet<(std::path::PathBuf, std::path::PathBuf)>,
-) -> Result<bool, String> {
-    let key = (
-        fs::canonicalize(dir_a).map_err(|e| format!("{}: {}", dir_a.display(), e))?,
-        fs::canonicalize(dir_b).map_err(|e| format!("{}: {}", dir_b.display(), e))?,
-    );
-    if !visited_dirs.insert(key) {
-        return Ok(false);
-    }
-
-    let mut entries_a = list_dir(dir_a)?;
-    let mut entries_b = list_dir(dir_b)?;
-    entries_a.sort();
-    entries_b.sort();
-
-    let mut all_names: Vec<String> = Vec::new();
-    for name in &entries_a {
-        all_names.push(name.clone());
-    }
-    for name in &entries_b {
-        if !entries_a.contains(name) {
-            all_names.push(name.clone());
-        }
-    }
-    all_names.sort();
-
-    let mut has_diff = false;
-
-    for name in &all_names {
-        let pa = dir_a.join(name);
-        let pb = dir_b.join(name);
-        let a_exists = entries_a.contains(name);
-        let b_exists = entries_b.contains(name);
-
-        if a_exists && !b_exists {
-            print_stdout_line(format_args!("Only in {}: {}", dir_a.display(), name))?;
-            has_diff = true;
-        } else if !a_exists && b_exists {
-            print_stdout_line(format_args!("Only in {}: {}", dir_b.display(), name))?;
-            has_diff = true;
-        } else {
-            match diff_paths(&pa, &pb, opts, visited_dirs) {
-                Ok(d) => {
-                    if d {
-                        has_diff = true;
-                    }
-                }
-                Err(e) => {
-                    return Err(e);
-                }
-            }
-        }
-    }
-
-    Ok(has_diff)
-}
-
-fn list_dir(dir: &Path) -> Result<Vec<String>, String> {
-    let entries = fs::read_dir(dir).map_err(|e| format!("{}: {}", dir.display(), e))?;
-    let mut names = Vec::new();
-    for entry in entries {
-        let entry = entry.map_err(|e| format!("{}: {}", dir.display(), e))?;
-        if let Some(name) = entry.file_name().to_str() {
-            names.push(name.to_string());
-        }
-    }
-    Ok(names)
-}
-
-fn preprocess(text: &str, opts: &Options) -> String {
-    let mut s = text.to_string();
-    if opts.ignore_blank_lines {
-        let trailing = s.ends_with('\n');
-        s = s
-            .lines()
-            .filter(|line| !line.trim().is_empty())
-            .collect::<Vec<_>>()
-            .join("\n");
-        if trailing {
-            s.push('\n');
-        }
-    }
-    if opts.ignore_case {
-        s = s.to_lowercase();
-    }
-    if opts.ignore_whitespace {
-        let trailing = s.ends_with('\n');
-        s = s
-            .lines()
-            .map(|line| {
-                let mut result = String::new();
-                let mut in_ws = false;
-                for ch in line.chars() {
-                    if ch.is_whitespace() {
-                        if !in_ws {
-                            result.push(' ');
-                            in_ws = true;
-                        }
-                    } else {
-                        result.push(ch);
-                        in_ws = false;
-                    }
-                }
-                let trimmed = result.trim();
-                trimmed.to_string()
-            })
-            .collect::<Vec<_>>()
-            .join("\n");
-        if trailing {
-            s.push('\n');
-        }
-    }
-    s
-}
-
-fn diff_files(path_a: &Path, path_b: &Path, opts: &Options) -> Result<bool, String> {
-    let text_a = read_file(path_a)?;
-    let text_b = read_file(path_b)?;
-
-    // Check for differences (possibly with preprocessing)
-    let needs_pp = opts.ignore_case || opts.ignore_whitespace || opts.ignore_blank_lines;
-    let has_changes = if needs_pp {
-        preprocess(&text_a, opts) != preprocess(&text_b, opts)
-    } else {
-        text_a != text_b
-    };
-
-    if !has_changes {
-        return Ok(false);
-    }
-
-    if opts.brief {
-        print_stdout_line(format_args!(
-            "Files {} and {} differ",
-            path_a.display(),
-            path_b.display()
-        ))?;
-        return Ok(true);
-    }
-
-    // Diff the original text for output (all output logic inline to avoid lifetime issues)
-    let diff = TextDiff::from_lines(&text_a, &text_b);
-    let label_a = format!("{}", path_a.display());
-    let label_b = format!("{}", path_b.display());
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-
-    if opts.unified {
-        writeln!(out, "--- {}", label_a).map_err(|e| format!("failed to write output: {e}"))?;
-        writeln!(out, "+++ {}", label_b).map_err(|e| format!("failed to write output: {e}"))?;
-        for hunk in diff
-            .unified_diff()
-            .context_radius(opts.context_lines)
-            .iter_hunks()
-        {
-            write!(out, "{}", hunk).map_err(|e| format!("failed to write output: {e}"))?;
-        }
-    } else if opts.context_fmt {
-        writeln!(out, "*** {}", label_a).map_err(|e| format!("failed to write output: {e}"))?;
-        writeln!(out, "--- {}", label_b).map_err(|e| format!("failed to write output: {e}"))?;
-        for hunk in diff
-            .unified_diff()
-            .context_radius(opts.context_lines)
-            .iter_hunks()
-        {
-            let mut old_lines: Vec<(ChangeTag, String)> = Vec::new();
-            let mut new_lines: Vec<(ChangeTag, String)> = Vec::new();
-            let mut old_start = 0usize;
-            let mut new_start = 0usize;
-            let mut first = true;
-            for change in hunk.iter_changes() {
-                if first {
-                    old_start = change.old_index().unwrap_or(0) + 1;
-                    new_start = change.new_index().unwrap_or(0) + 1;
-                    first = false;
-                }
-                match change.tag() {
-                    ChangeTag::Equal => {
-                        old_lines.push((ChangeTag::Equal, change.value().to_string()));
-                        new_lines.push((ChangeTag::Equal, change.value().to_string()));
-                    }
-                    ChangeTag::Delete => {
-                        old_lines.push((ChangeTag::Delete, change.value().to_string()));
-                    }
-                    ChangeTag::Insert => {
-                        new_lines.push((ChangeTag::Insert, change.value().to_string()));
-                    }
-                }
-            }
-            let old_end = old_start + old_lines.len().saturating_sub(1);
-            let new_end = new_start + new_lines.len().saturating_sub(1);
-            writeln!(out, "***************").map_err(|e| format!("failed to write output: {e}"))?;
-            writeln!(out, "*** {},{} ****", old_start, old_end)
-                .map_err(|e| format!("failed to write output: {e}"))?;
-            for (tag, line) in &old_lines {
-                let prefix = match tag {
-                    ChangeTag::Delete => "- ",
-                    ChangeTag::Equal => "  ",
-                    _ => continue,
-                };
-                write!(out, "{}{}", prefix, line)
-                    .map_err(|e| format!("failed to write output: {e}"))?;
-                if !line.ends_with('\n') {
-                    writeln!(out).map_err(|e| format!("failed to write output: {e}"))?;
-                }
-            }
-            writeln!(out, "--- {},{} ----", new_start, new_end)
-                .map_err(|e| format!("failed to write output: {e}"))?;
-            for (tag, line) in &new_lines {
-                let prefix = match tag {
-                    ChangeTag::Insert => "+ ",
-                    ChangeTag::Equal => "  ",
-                    _ => continue,
-                };
-                write!(out, "{}{}", prefix, line)
-                    .map_err(|e| format!("failed to write output: {e}"))?;
-                if !line.ends_with('\n') {
-                    writeln!(out).map_err(|e| format!("failed to write output: {e}"))?;
-                }
-            }
-        }
-    } else {
-        // Normal diff format
-        let old_text: String = diff.old_slices().concat();
-        let new_text: String = diff.new_slices().concat();
-        let old_lines: Vec<&str> = old_text.lines().collect();
-        let new_lines: Vec<&str> = new_text.lines().collect();
-
-        for op in diff.ops() {
-            match op {
-                similar::DiffOp::Equal { .. } => {}
-                similar::DiffOp::Delete {
-                    old_index,
-                    old_len,
-                    new_index,
-                } => {
-                    writeln!(
-                        out,
-                        "{}d{}",
-                        format_range(*old_index + 1, *old_len),
-                        new_index
-                    )
-                    .map_err(|e| format!("failed to write output: {e}"))?;
-                    for i in *old_index..*old_index + old_len {
-                        if i < old_lines.len() {
-                            writeln!(out, "< {}", old_lines[i])
-                                .map_err(|e| format!("failed to write output: {e}"))?;
-                        }
-                    }
-                }
-                similar::DiffOp::Insert {
-                    old_index,
-                    new_index,
-                    new_len,
-                } => {
-                    writeln!(
-                        out,
-                        "{}a{}",
-                        old_index,
-                        format_range(*new_index + 1, *new_len)
-                    )
-                    .map_err(|e| format!("failed to write output: {e}"))?;
-                    for i in *new_index..*new_index + new_len {
-                        if i < new_lines.len() {
-                            writeln!(out, "> {}", new_lines[i])
-                                .map_err(|e| format!("failed to write output: {e}"))?;
-                        }
-                    }
-                }
-                similar::DiffOp::Replace {
-                    old_index,
-                    old_len,
-                    new_index,
-                    new_len,
-                } => {
-                    writeln!(
-                        out,
-                        "{}c{}",
-                        format_range(*old_index + 1, *old_len),
-                        format_range(*new_index + 1, *new_len)
-                    )
-                    .map_err(|e| format!("failed to write output: {e}"))?;
-                    for i in *old_index..*old_index + old_len {
-                        if i < old_lines.len() {
-                            writeln!(out, "< {}", old_lines[i])
-                                .map_err(|e| format!("failed to write output: {e}"))?;
-                        }
-                    }
-                    writeln!(out, "---").map_err(|e| format!("failed to write output: {e}"))?;
-                    for i in *new_index..*new_index + new_len {
-                        if i < new_lines.len() {
-                            writeln!(out, "> {}", new_lines[i])
-                                .map_err(|e| format!("failed to write output: {e}"))?;
-                        }
-                    }
-                }
-            }
-        }
-    }
-
-    out.flush()
-        .map_err(|e| format!("failed to write output: {e}"))?;
-
-    Ok(true)
-}
-
-fn print_stdout_line(args: std::fmt::Arguments<'_>) -> Result<(), String> {
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-    writeln!(out, "{args}").map_err(|e| format!("failed to write output: {e}"))?;
-    out.flush()
-        .map_err(|e| format!("failed to write output: {e}"))
-}
-
-fn read_file(path: &Path) -> Result<String, String> {
-    if path.to_str() == Some("-") {
-        use std::io::Read;
-        let mut buf = String::new();
-        io::stdin()
-            .read_to_string(&mut buf)
-            .map_err(|e| format!("stdin: {}", e))?;
-        Ok(buf)
-    } else {
-        fs::read_to_string(path).map_err(|e| format!("{}: {}", path.display(), e))
-    }
-}
-
-fn format_range(start: usize, len: usize) -> String {
-    if len == 1 {
-        format!("{}", start)
-    } else {
-        format!("{},{}", start, start + len - 1)
-    }
-}
diff --git a/registry/native/crates/libs/du/Cargo.toml b/registry/native/crates/libs/du/Cargo.toml
deleted file mode 100644
index ad08de95a..000000000
--- a/registry/native/crates/libs/du/Cargo.toml
+++ /dev/null
@@ -1,8 +0,0 @@
-[package]
-name = "secureexec-du"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "du implementation for secure-exec standalone binaries"
-
-[dependencies]
diff --git a/registry/native/crates/libs/du/src/lib.rs b/registry/native/crates/libs/du/src/lib.rs
deleted file mode 100644
index 7474d2dff..000000000
--- a/registry/native/crates/libs/du/src/lib.rs
+++ /dev/null
@@ -1,234 +0,0 @@
-//! du -- estimate file space usage
-//!
-//! Recursive directory walk summing file sizes via std::fs::metadata.
-//! Supports -s (summary), -h (human-readable), -a (all files), -c (grand total),
-//! -d N (max depth).
-
-use std::collections::HashSet;
-use std::ffi::OsString;
-use std::fs;
-use std::io::{self, Write};
-use std::path::{Path, PathBuf};
-
-pub fn main(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    let mut summary = false;
-    let mut human = false;
-    let mut all_files = false;
-    let mut grand_total = false;
-    let mut max_depth: Option<usize> = None;
-    let mut paths: Vec<String> = Vec::new();
-
-    let mut i = 0;
-    while i < str_args.len() {
-        match str_args[i].as_str() {
-            "-s" | "--summarize" => summary = true,
-            "-h" | "--human-readable" => human = true,
-            "-a" | "--all" => all_files = true,
-            "-c" | "--total" => grand_total = true,
-            "-d" | "--max-depth" => {
-                i += 1;
-                if i >= str_args.len() {
-                    eprintln!("du: option '-d' requires an argument");
-                    return 1;
-                }
-                match str_args[i].parse::<usize>() {
-                    Ok(d) => max_depth = Some(d),
-                    Err(_) => {
-                        eprintln!("du: invalid maximum depth '{}'", str_args[i]);
-                        return 1;
-                    }
-                }
-            }
-            s if s.starts_with("-d") && s.len() > 2 => match s[2..].parse::<usize>() {
-                Ok(d) => max_depth = Some(d),
-                Err(_) => {
-                    eprintln!("du: invalid maximum depth '{}'", &s[2..]);
-                    return 1;
-                }
-            },
-            // Combined short flags like -sh, -shc
-            s if s.starts_with('-') && s.len() > 1 && !s.starts_with("--") => {
-                for ch in s[1..].chars() {
-                    match ch {
-                        's' => summary = true,
-                        'h' => human = true,
-                        'a' => all_files = true,
-                        'c' => grand_total = true,
-                        _ => {
-                            eprintln!("du: unknown option '{}'", s);
-                            return 1;
-                        }
-                    }
-                }
-            }
-            _ => paths.push(str_args[i].clone()),
-        }
-        i += 1;
-    }
-
-    if paths.is_empty() {
-        paths.push(".".to_string());
-    }
-
-    // -s implies max_depth=0
-    if summary {
-        max_depth = Some(0);
-    }
-
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-    let mut total: u64 = 0;
-    let mut exit_code = 0;
-
-    for path in &paths {
-        let mut visited_dirs = HashSet::new();
-        match walk_du(
-            Path::new(path),
-            0,
-            max_depth,
-            all_files,
-            human,
-            &mut out,
-            &mut visited_dirs,
-        ) {
-            Ok(size) => {
-                total += size;
-            }
-            Err(e) => {
-                eprintln!("du: {}: {}", path, e);
-                exit_code = 1;
-            }
-        }
-    }
-
-    if grand_total {
-        if let Err(error) = print_size(&mut out, total, human, "total") {
-            eprintln!("du: failed to write output: {error}");
-            return 1;
-        }
-    }
-
-    if let Err(error) = out.flush() {
-        eprintln!("du: failed to write output: {error}");
-        return 1;
-    }
-
-    exit_code
-}
-
-fn walk_du<W: Write>(
-    path: &Path,
-    depth: usize,
-    max_depth: Option<usize>,
-    all_files: bool,
-    human: bool,
-    out: &mut W,
-    visited_dirs: &mut HashSet<PathBuf>,
-) -> io::Result<u64> {
-    let meta = fs::metadata(path)?;
-
-    if meta.is_file() {
-        let size = meta.len();
-        // Convert to 1K blocks (like du default)
-        let blocks = (size + 1023) / 1024;
-        if all_files || depth == 0 {
-            print_size(out, blocks, human, &path.to_string_lossy())?;
-        }
-        return Ok(blocks);
-    }
-
-    if meta.is_dir() {
-        let canonical_path = fs::canonicalize(path)?;
-        if !visited_dirs.insert(canonical_path) {
-            return Ok(0);
-        }
-
-        let mut dir_total: u64 = 0;
-        let entries = fs::read_dir(path)?;
-        for entry in entries {
-            let entry = entry?;
-            let child_path = entry.path();
-            let child_meta = fs::metadata(&child_path)?;
-
-            if child_meta.is_dir() {
-                let sub = walk_du(
-                    &child_path,
-                    depth + 1,
-                    max_depth,
-                    all_files,
-                    human,
-                    out,
-                    visited_dirs,
-                )?;
-                dir_total += sub;
-            } else {
-                let size = child_meta.len();
-                let blocks = (size + 1023) / 1024;
-                dir_total += blocks;
-                if all_files {
-                    if let Some(md) = max_depth {
-                        if depth + 1 <= md {
-                            print_size(out, blocks, human, &child_path.to_string_lossy())?;
-                        }
-                    } else {
-                        print_size(out, blocks, human, &child_path.to_string_lossy())?;
-                    }
-                }
-            }
-        }
-
-        // Print this directory's total if within depth limit
-        if let Some(md) = max_depth {
-            if depth <= md {
-                print_size(out, dir_total, human, &path.to_string_lossy())?;
-            }
-        } else {
-            print_size(out, dir_total, human, &path.to_string_lossy())?;
-        }
-
-        return Ok(dir_total);
-    }
-
-    // Symlinks, special files -- just report their metadata size
-    let size = meta.len();
-    let blocks = (size + 1023) / 1024;
-    if all_files || depth == 0 {
-        print_size(out, blocks, human, &path.to_string_lossy())?;
-    }
-    Ok(blocks)
-}
-
-fn print_size<W: Write>(out: &mut W, blocks: u64, human: bool, name: &str) -> io::Result<()> {
-    if human {
-        writeln!(out, "{}\t{}", format_human(blocks), name)
-    } else {
-        writeln!(out, "{}\t{}", blocks, name)
-    }
-}
-
-fn format_human(blocks: u64) -> String {
-    let kb = blocks as f64;
-    if kb < 1024.0 {
-        format!("{}K", blocks)
-    } else if kb < 1024.0 * 1024.0 {
-        let mb = kb / 1024.0;
-        if mb >= 10.0 {
-            format!("{:.0}M", mb)
-        } else {
-            format!("{:.1}M", mb)
-        }
-    } else {
-        let gb = kb / (1024.0 * 1024.0);
-        if gb >= 10.0 {
-            format!("{:.0}G", gb)
-        } else {
-            format!("{:.1}G", gb)
-        }
-    }
-}
diff --git a/registry/native/crates/libs/expr/Cargo.toml b/registry/native/crates/libs/expr/Cargo.toml
deleted file mode 100644
index 8bd1f300f..000000000
--- a/registry/native/crates/libs/expr/Cargo.toml
+++ /dev/null
@@ -1,9 +0,0 @@
-[package]
-name = "secureexec-expr"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "expr implementation for secure-exec standalone binaries"
-
-[dependencies]
-regex = "1"
diff --git a/registry/native/crates/libs/expr/src/lib.rs b/registry/native/crates/libs/expr/src/lib.rs
deleted file mode 100644
index 67f4c476f..000000000
--- a/registry/native/crates/libs/expr/src/lib.rs
+++ /dev/null
@@ -1,323 +0,0 @@
-//! expr -- evaluate expressions (POSIX)
-//!
-//! Recursive-descent parser for POSIX expr grammar.
-//! Operators: | & = != < > <= >= + - * / % : (regex match)
-//! Uses the `regex` crate for the `:` operator (anchored match).
-
-use std::ffi::OsString;
-use std::io::{self, Write};
-
-const MAX_EXPR_DEPTH: usize = 1024;
-
-pub fn main(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    if str_args.is_empty() {
-        eprintln!("expr: missing operand");
-        return 2;
-    }
-
-    let mut parser = Parser {
-        tokens: str_args,
-        pos: 0,
-        depth: 0,
-    };
-
-    match parser.parse_or() {
-        Ok(val) => {
-            if parser.pos < parser.tokens.len() {
-                eprintln!(
-                    "expr: syntax error: unexpected argument '{}'",
-                    parser.tokens[parser.pos]
-                );
-                return 2;
-            }
-            if let Err(msg) = write_value(&val) {
-                eprintln!("expr: {}", msg);
-                return 2;
-            }
-            if val.is_null() {
-                1
-            } else {
-                0
-            }
-        }
-        Err(msg) => {
-            eprintln!("expr: {}", msg);
-            2
-        }
-    }
-}
-
-/// Represents an expr value -- either an integer or a string.
-#[derive(Clone, Debug)]
-enum Value {
-    Int(i64),
-    Str(String),
-}
-
-impl Value {
-    fn is_null(&self) -> bool {
-        match self {
-            Value::Int(n) => *n == 0,
-            Value::Str(s) => s.is_empty(),
-        }
-    }
-
-    fn as_int(&self) -> Option<i64> {
-        match self {
-            Value::Int(n) => Some(*n),
-            Value::Str(s) => s.parse::<i64>().ok(),
-        }
-    }
-
-    fn as_str(&self) -> String {
-        match self {
-            Value::Int(n) => n.to_string(),
-            Value::Str(s) => s.clone(),
-        }
-    }
-}
-
-impl std::fmt::Display for Value {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        match self {
-            Value::Int(n) => write!(f, "{}", n),
-            Value::Str(s) => write!(f, "{}", s),
-        }
-    }
-}
-
-struct Parser {
-    tokens: Vec<String>,
-    pos: usize,
-    depth: usize,
-}
-
-impl Parser {
-    fn peek(&self) -> Option<&str> {
-        self.tokens.get(self.pos).map(|s| &s[..])
-    }
-
-    fn next(&mut self) -> Option<&str> {
-        if self.pos < self.tokens.len() {
-            let tok = &self.tokens[self.pos];
-            self.pos += 1;
-            Some(&tok[..])
-        } else {
-            None
-        }
-    }
-
-    fn expect(&mut self, expected: &str) -> Result<(), String> {
-        match self.next() {
-            Some(tok) if tok == expected => Ok(()),
-            Some(tok) => Err(format!(
-                "syntax error: expected '{}', got '{}'",
-                expected, tok
-            )),
-            None => Err(format!("syntax error: expected '{}'", expected)),
-        }
-    }
-
-    /// expr : or_expr
-    /// or_expr : and_expr ( '|' and_expr )*
-    fn parse_or(&mut self) -> Result<Value, String> {
-        let mut left = self.parse_and()?;
-        while self.peek() == Some("|") {
-            self.next();
-            let right = self.parse_and()?;
-            left = if !left.is_null() { left } else { right };
-        }
-        Ok(left)
-    }
-
-    /// and_expr : compare_expr ( '&' compare_expr )*
-    fn parse_and(&mut self) -> Result<Value, String> {
-        let mut left = self.parse_compare()?;
-        while self.peek() == Some("&") {
-            self.next();
-            let right = self.parse_compare()?;
-            left = if !left.is_null() && !right.is_null() {
-                left
-            } else {
-                Value::Int(0)
-            };
-        }
-        Ok(left)
-    }
-
-    /// compare_expr : add_expr ( ( '=' | '!=' | '<' | '>' | '<=' | '>=' ) add_expr )?
-    fn parse_compare(&mut self) -> Result<Value, String> {
-        let left = self.parse_add()?;
-        match self.peek() {
-            Some("=" | "!=" | "<" | ">" | "<=" | ">=") => {
-                let op = self.next().unwrap().to_string();
-                let right = self.parse_add()?;
-                let result = compare_values(&left, &right, &op);
-                Ok(Value::Int(if result { 1 } else { 0 }))
-            }
-            _ => Ok(left),
-        }
-    }
-
-    /// add_expr : mul_expr ( ( '+' | '-' ) mul_expr )*
-    fn parse_add(&mut self) -> Result<Value, String> {
-        let mut left = self.parse_mul()?;
-        loop {
-            match self.peek() {
-                Some("+") | Some("-") => {
-                    let op = self.next().unwrap().to_string();
-                    let right = self.parse_mul()?;
-                    let a = left.as_int().ok_or("non-integer argument")?;
-                    let b = right.as_int().ok_or("non-integer argument")?;
-                    let value = if op == "+" {
-                        a.checked_add(b)
-                    } else {
-                        a.checked_sub(b)
-                    };
-                    left = Value::Int(value.ok_or("integer overflow")?);
-                }
-                _ => break,
-            }
-        }
-        Ok(left)
-    }
-
-    /// mul_expr : match_expr ( ( '*' | '/' | '%' ) match_expr )*
-    fn parse_mul(&mut self) -> Result<Value, String> {
-        let mut left = self.parse_match()?;
-        loop {
-            match self.peek() {
-                Some("*") | Some("/") | Some("%") => {
-                    let op = self.next().unwrap().to_string();
-                    let right = self.parse_match()?;
-                    let a = left.as_int().ok_or("non-integer argument")?;
-                    let b = right.as_int().ok_or("non-integer argument")?;
-                    if (op == "/" || op == "%") && b == 0 {
-                        return Err("division by zero".to_string());
-                    }
-                    let value = match &op[..] {
-                        "*" => a.checked_mul(b),
-                        "/" => a.checked_div(b),
-                        "%" => a.checked_rem(b),
-                        _ => unreachable!(),
-                    };
-                    left = Value::Int(value.ok_or("integer overflow")?);
-                }
-                _ => break,
-            }
-        }
-        Ok(left)
-    }
-
-    /// match_expr : primary ( ':' primary )?
-    fn parse_match(&mut self) -> Result<Value, String> {
-        let left = self.parse_primary()?;
-        if self.peek() == Some(":") {
-            self.next();
-            let right = self.parse_primary()?;
-            let string = left.as_str();
-            let pattern = right.as_str();
-            return regex_match(&string, &pattern);
-        }
-        Ok(left)
-    }
-
-    /// primary : '(' expr ')' | TOKEN
-    fn parse_primary(&mut self) -> Result<Value, String> {
-        if self.peek() == Some("(") {
-            if self.depth >= MAX_EXPR_DEPTH {
-                return Err("expression nesting too deep".to_string());
-            }
-            self.next();
-            self.depth += 1;
-            let val = self.parse_or();
-            self.depth -= 1;
-            let val = val?;
-            self.expect(")")?;
-            return Ok(val);
-        }
-
-        match self.next() {
-            Some(tok) => {
-                // Try to parse as integer
-                if let Ok(n) = tok.parse::<i64>() {
-                    Ok(Value::Int(n))
-                } else {
-                    Ok(Value::Str(tok.to_string()))
-                }
-            }
-            None => Err("syntax error: missing argument".to_string()),
-        }
-    }
-}
-
-fn write_value(value: &Value) -> Result<(), String> {
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-    writeln!(out, "{value}").map_err(|e| format!("failed to write output: {e}"))?;
-    out.flush()
-        .map_err(|e| format!("failed to write output: {e}"))
-}
-
-fn compare_values(left: &Value, right: &Value, op: &str) -> bool {
-    // If both are integers, compare numerically
-    if let (Some(a), Some(b)) = (left.as_int(), right.as_int()) {
-        return match op {
-            "=" => a == b,
-            "!=" => a != b,
-            "<" => a < b,
-            ">" => a > b,
-            "<=" => a <= b,
-            ">=" => a >= b,
-            _ => false,
-        };
-    }
-    // Otherwise compare as strings
-    let a = left.as_str();
-    let b = right.as_str();
-    match op {
-        "=" => a == b,
-        "!=" => a != b,
-        "<" => a < b,
-        ">" => a > b,
-        "<=" => a <= b,
-        ">=" => a >= b,
-        _ => false,
-    }
-}
-
-/// POSIX expr regex match: anchored at start of string.
-/// Returns the captured group \1 if present, else the match length.
-fn regex_match(string: &str, pattern: &str) -> Result<Value, String> {
-    // POSIX expr : always anchors pattern at start
-    let anchored = format!("^(?:{})", pattern);
-    let re = regex::Regex::new(&anchored).map_err(|e| format!("invalid regex: {}", e))?;
-
-    match re.captures(string) {
-        Some(caps) => {
-            // If there's a capture group, return it
-            if caps.len() > 1 {
-                let m = caps.get(1).map_or("", |m| m.as_str());
-                Ok(Value::Str(m.to_string()))
-            } else {
-                // Return length of match
-                let m = caps.get(0).unwrap();
-                Ok(Value::Int(m.as_str().len() as i64))
-            }
-        }
-        None => {
-            // No match: return "" if pattern has group, else 0
-            if pattern.contains('(') {
-                Ok(Value::Str(String::new()))
-            } else {
-                Ok(Value::Int(0))
-            }
-        }
-    }
-}
diff --git a/registry/native/crates/libs/fd/Cargo.toml b/registry/native/crates/libs/fd/Cargo.toml
deleted file mode 100644
index 2be330866..000000000
--- a/registry/native/crates/libs/fd/Cargo.toml
+++ /dev/null
@@ -1,9 +0,0 @@
-[package]
-name = "secureexec-fd"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "fd-find compatible file finder for secure-exec standalone binaries"
-
-[dependencies]
-regex = "1"
diff --git a/registry/native/crates/libs/fd/src/lib.rs b/registry/native/crates/libs/fd/src/lib.rs
deleted file mode 100644
index 8ab845214..000000000
--- a/registry/native/crates/libs/fd/src/lib.rs
+++ /dev/null
@@ -1,353 +0,0 @@
-//! Minimal fd-find compatible file finder for WASM.
-//!
-//! Uses std::fs for directory traversal (no walkdir/rayon dependency)
-//! and regex for pattern matching. Covers common fd patterns:
-//! fd PATTERN, fd -e EXT, fd -t f/d, fd -H (hidden), fd -I (no-ignore).
-
-use std::collections::HashSet;
-use std::ffi::OsString;
-use std::fs;
-use std::io::{self, Write};
-use std::path::{Path, PathBuf};
-
-use regex::Regex;
-
-/// Entry point for fd command.
-pub fn main(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1) // skip argv[0]
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    match run(&str_args) {
-        Ok(code) => code,
-        Err(msg) => {
-            eprintln!("[fd error]: {}", msg);
-            1
-        }
-    }
-}
-
-#[derive(Debug, Clone, Copy, PartialEq)]
-enum TypeFilter {
-    File,
-    Directory,
-    Symlink,
-}
-
-enum ParsedArgs {
-    Search(Options),
-    Help,
-    Version,
-}
-
-struct Options {
-    pattern: Option<Regex>,
-    extensions: Vec<String>,
-    type_filter: Option<TypeFilter>,
-    max_depth: Option<usize>,
-    search_paths: Vec<String>,
-    show_hidden: bool,
-    _case_insensitive: bool,
-    full_path: bool,
-    absolute_path: bool,
-}
-
-fn run(args: &[String]) -> Result<i32, String> {
-    let parsed = parse_args(args)?;
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-
-    let ParsedArgs::Search(opts) = parsed else {
-        match parsed {
-            ParsedArgs::Help => print_help(&mut out),
-            ParsedArgs::Version => writeln!(out, "fd 0.1.0 (secure-exec)"),
-            ParsedArgs::Search(_) => unreachable!(),
-        }
-        .map_err(|e| format!("failed to write output: {e}"))?;
-        out.flush()
-            .map_err(|e| format!("failed to write output: {e}"))?;
-        return Ok(0);
-    };
-
-    let mut found = false;
-
-    for search_path in &opts.search_paths {
-        let base = PathBuf::from(search_path);
-        let mut visited_dirs = HashSet::new();
-        walk(
-            &base,
-            search_path,
-            0,
-            &opts,
-            &mut found,
-            &mut out,
-            &mut visited_dirs,
-        )?;
-    }
-
-    out.flush()
-        .map_err(|e| format!("failed to write output: {e}"))?;
-
-    Ok(if found { 0 } else { 1 })
-}
-
-fn walk<W: Write>(
-    full_path: &Path,
-    base_path: &str,
-    depth: usize,
-    opts: &Options,
-    found: &mut bool,
-    out: &mut W,
-    visited_dirs: &mut HashSet<PathBuf>,
-) -> Result<(), String> {
-    if let Some(max) = opts.max_depth {
-        if depth > max {
-            return Ok(());
-        }
-    }
-
-    // fd skips the root search directory itself (depth 0); only matches children
-    if depth > 0 {
-        if matches_entry(full_path, base_path, opts) {
-            *found = true;
-            let display = if opts.absolute_path {
-                match fs::canonicalize(full_path) {
-                    Ok(abs) => abs.to_string_lossy().to_string(),
-                    Err(_) => full_path.to_string_lossy().to_string(),
-                }
-            } else {
-                full_path.to_string_lossy().to_string()
-            };
-            writeln!(out, "{}", display).map_err(|e| format!("failed to write output: {e}"))?;
-        }
-    }
-
-    // Recurse into directories
-    if full_path.is_dir() {
-        let canonical_path =
-            fs::canonicalize(full_path).map_err(|e| format!("{}: {}", full_path.display(), e))?;
-        if !visited_dirs.insert(canonical_path) {
-            return Ok(());
-        }
-
-        if let Some(max) = opts.max_depth {
-            if depth >= max {
-                return Ok(());
-            }
-        }
-
-        let entries =
-            fs::read_dir(full_path).map_err(|e| format!("{}: {}", full_path.display(), e))?;
-
-        let mut sorted: Vec<_> = entries
-            .collect::<Result<Vec<_>, _>>()
-            .map_err(|e| format!("{}: {}", full_path.display(), e))?;
-        sorted.sort_by_key(|e| e.file_name());
-
-        for entry in sorted {
-            let name = entry.file_name().to_string_lossy().to_string();
-
-            // Skip hidden files/directories unless -H is set
-            if !opts.show_hidden && name.starts_with('.') {
-                continue;
-            }
-
-            let child = entry.path();
-            walk(&child, base_path, depth + 1, opts, found, out, visited_dirs)?;
-        }
-    }
-
-    Ok(())
-}
-
-fn matches_entry(path: &Path, _base_path: &str, opts: &Options) -> bool {
-    // Type filter
-    if let Some(ref tf) = opts.type_filter {
-        let ok = match tf {
-            TypeFilter::File => path.is_file(),
-            TypeFilter::Directory => path.is_dir(),
-            TypeFilter::Symlink => path
-                .symlink_metadata()
-                .map(|m| m.file_type().is_symlink())
-                .unwrap_or(false),
-        };
-        if !ok {
-            return false;
-        }
-    }
-
-    // Extension filter
-    if !opts.extensions.is_empty() {
-        let ext = path
-            .extension()
-            .map(|e| e.to_string_lossy().to_string())
-            .unwrap_or_default();
-        let ext_lower = ext.to_lowercase();
-        if !opts
-            .extensions
-            .iter()
-            .any(|e| e.to_lowercase() == ext_lower)
-        {
-            return false;
-        }
-    }
-
-    // Pattern match
-    if let Some(ref re) = opts.pattern {
-        let target = if opts.full_path {
-            path.to_string_lossy().to_string()
-        } else {
-            path.file_name()
-                .map(|n| n.to_string_lossy().to_string())
-                .unwrap_or_default()
-        };
-        if !re.is_match(&target) {
-            return false;
-        }
-    }
-
-    true
-}
-
-fn parse_args(args: &[String]) -> Result<ParsedArgs, String> {
-    let mut pattern: Option<String> = None;
-    let mut extensions: Vec<String> = Vec::new();
-    let mut type_filter: Option<TypeFilter> = None;
-    let mut max_depth: Option<usize> = None;
-    let mut search_paths: Vec<String> = Vec::new();
-    let mut show_hidden = false;
-    let mut case_insensitive = false;
-    let mut full_path = false;
-    let mut absolute_path = false;
-    let mut i = 0;
-
-    while i < args.len() {
-        let arg = &args[i];
-        match arg.as_str() {
-            "-h" | "--help" => {
-                return Ok(ParsedArgs::Help);
-            }
-            "-V" | "--version" => {
-                return Ok(ParsedArgs::Version);
-            }
-            "-H" | "--hidden" => {
-                show_hidden = true;
-            }
-            "-I" | "--no-ignore" => {
-                // No .gitignore support in WASM VFS — this is a no-op
-            }
-            "-i" | "--ignore-case" => {
-                case_insensitive = true;
-            }
-            "-s" | "--case-sensitive" => {
-                case_insensitive = false;
-            }
-            "-p" | "--full-path" => {
-                full_path = true;
-            }
-            "-a" | "--absolute-path" => {
-                absolute_path = true;
-            }
-            "-e" | "--extension" => {
-                i += 1;
-                if i >= args.len() {
-                    return Err("-e/--extension requires an argument".to_string());
-                }
-                extensions.push(args[i].clone());
-            }
-            "-t" | "--type" => {
-                i += 1;
-                if i >= args.len() {
-                    return Err("-t/--type requires an argument".to_string());
-                }
-                type_filter = Some(match args[i].as_str() {
-                    "f" | "file" => TypeFilter::File,
-                    "d" | "directory" => TypeFilter::Directory,
-                    "l" | "symlink" => TypeFilter::Symlink,
-                    other => return Err(format!("unknown type filter: {}", other)),
-                });
-            }
-            "-d" | "--max-depth" => {
-                i += 1;
-                if i >= args.len() {
-                    return Err("-d/--max-depth requires an argument".to_string());
-                }
-                max_depth = Some(
-                    args[i]
-                        .parse()
-                        .map_err(|_| format!("invalid max-depth: {}", args[i]))?,
-                );
-            }
-            arg if arg.starts_with('-') => {
-                return Err(format!("unknown option: {}", arg));
-            }
-            _ => {
-                // First positional arg is pattern, rest are search paths
-                if pattern.is_none() {
-                    pattern = Some(arg.clone());
-                } else {
-                    search_paths.push(arg.clone());
-                }
-            }
-        }
-        i += 1;
-    }
-
-    if search_paths.is_empty() {
-        search_paths.push(".".to_string());
-    }
-
-    // Compile pattern regex
-    let compiled_pattern = match pattern {
-        Some(pat) => {
-            let re_str = if case_insensitive {
-                format!("(?i){}", pat)
-            } else {
-                pat
-            };
-            Some(Regex::new(&re_str).map_err(|e| format!("invalid pattern: {}", e))?)
-        }
-        None => None,
-    };
-
-    Ok(ParsedArgs::Search(Options {
-        pattern: compiled_pattern,
-        extensions,
-        type_filter,
-        max_depth,
-        search_paths,
-        show_hidden,
-        _case_insensitive: case_insensitive,
-        full_path,
-        absolute_path,
-    }))
-}
-
-fn print_help<W: Write>(out: &mut W) -> io::Result<()> {
-    writeln!(
-        out,
-        "fd - a simple, fast file finder
-
-USAGE:
-    fd [OPTIONS] [PATTERN] [PATH...]
-
-ARGS:
-    <PATTERN>    Regex search pattern
-    <PATH>...    Search paths (default: current directory)
-
-OPTIONS:
-    -H, --hidden          Include hidden files/directories
-    -I, --no-ignore       Do not respect .gitignore (no-op in sandbox)
-    -i, --ignore-case     Case-insensitive search
-    -s, --case-sensitive  Case-sensitive search (default)
-    -p, --full-path       Match pattern against full path
-    -a, --absolute-path   Show absolute paths
-    -e, --extension EXT   Filter by file extension
-    -t, --type TYPE       Filter by type: f(ile), d(irectory), l(ink)
-    -d, --max-depth N     Maximum search depth
-    -h, --help            Print help
-    -V, --version         Print version"
-    )
-}
diff --git a/registry/native/crates/libs/file-cmd/Cargo.toml b/registry/native/crates/libs/file-cmd/Cargo.toml
deleted file mode 100644
index 7f14225fd..000000000
--- a/registry/native/crates/libs/file-cmd/Cargo.toml
+++ /dev/null
@@ -1,9 +0,0 @@
-[package]
-name = "secureexec-file-cmd"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "file command implementation for secure-exec standalone binaries"
-
-[dependencies]
-infer = "0.16"
diff --git a/registry/native/crates/libs/file-cmd/src/lib.rs b/registry/native/crates/libs/file-cmd/src/lib.rs
deleted file mode 100644
index 92a9faa64..000000000
--- a/registry/native/crates/libs/file-cmd/src/lib.rs
+++ /dev/null
@@ -1,336 +0,0 @@
-//! file -- determine file type
-//!
-//! Magic byte detection using the `infer` crate, plus text/binary heuristic.
-//! Supports -b (brief, no filename prefix), -i (output MIME type).
-
-use std::ffi::OsString;
-use std::fs;
-use std::io::{self, Read, Write};
-
-const DETECTION_BYTES: usize = 8192;
-
-pub fn main(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    let mut brief = false;
-    let mut mime = false;
-    let mut filenames: Vec<String> = Vec::new();
-
-    let mut i = 0;
-    while i < str_args.len() {
-        match str_args[i].as_str() {
-            "-b" | "--brief" => brief = true,
-            "-i" | "--mime-type" | "--mime" => mime = true,
-            // Combined short flags
-            s if s.starts_with('-') && s.len() > 1 && !s.starts_with("--") => {
-                for ch in s[1..].chars() {
-                    match ch {
-                        'b' => brief = true,
-                        'i' => mime = true,
-                        _ => {
-                            eprintln!("file: unknown option '{}'", s);
-                            return 1;
-                        }
-                    }
-                }
-            }
-            "-" => {
-                // Read from stdin
-                filenames.push("-".to_string());
-            }
-            s if s.starts_with('-') && s.len() > 1 => {
-                eprintln!("file: unknown option '{}'", s);
-                return 1;
-            }
-            _ => filenames.push(str_args[i].clone()),
-        }
-        i += 1;
-    }
-
-    if filenames.is_empty() {
-        eprintln!("Usage: file [-bi] FILE...");
-        return 1;
-    }
-
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-    let mut exit_code = 0;
-
-    for filename in &filenames {
-        let data = if filename == "-" {
-            match read_head_from_reader(io::stdin().lock(), DETECTION_BYTES) {
-                Ok(data) => data,
-                Err(e) => {
-                    eprintln!("file: stdin: {}", e);
-                    exit_code = 1;
-                    continue;
-                }
-            }
-        } else {
-            // Check if path exists and what kind it is
-            match fs::metadata(filename) {
-                Ok(meta) => {
-                    if meta.is_dir() {
-                        if let Err(error) = print_result(
-                            &mut out,
-                            filename,
-                            brief,
-                            "directory",
-                            if mime { "inode/directory" } else { "" },
-                            mime,
-                        ) {
-                            return output_error(error);
-                        }
-                        continue;
-                    }
-                    if meta.is_symlink() {
-                        if let Err(error) = print_result(
-                            &mut out,
-                            filename,
-                            brief,
-                            "symbolic link",
-                            if mime { "inode/symlink" } else { "" },
-                            mime,
-                        ) {
-                            return output_error(error);
-                        }
-                        continue;
-                    }
-                    if meta.len() == 0 {
-                        if let Err(error) = print_result(
-                            &mut out,
-                            filename,
-                            brief,
-                            "empty",
-                            if mime { "inode/x-empty" } else { "" },
-                            mime,
-                        ) {
-                            return output_error(error);
-                        }
-                        continue;
-                    }
-                    // Read file data (up to 8KB for detection)
-                    match read_head(filename, DETECTION_BYTES) {
-                        Ok(data) => data,
-                        Err(e) => {
-                            eprintln!("file: {}: {}", filename, e);
-                            exit_code = 1;
-                            continue;
-                        }
-                    }
-                }
-                Err(e) => {
-                    eprintln!("file: {}: {}", filename, e);
-                    exit_code = 1;
-                    continue;
-                }
-            }
-        };
-
-        let (desc, mime_type) = identify(&data);
-
-        if mime {
-            if let Err(error) = print_result(&mut out, filename, brief, &desc, &mime_type, true) {
-                return output_error(error);
-            }
-        } else {
-            if let Err(error) = print_result(&mut out, filename, brief, &desc, &mime_type, false) {
-                return output_error(error);
-            }
-        }
-    }
-
-    if let Err(error) = out.flush() {
-        return output_error(error);
-    }
-
-    exit_code
-}
-
-fn output_error(error: io::Error) -> i32 {
-    eprintln!("file: failed to write output: {error}");
-    1
-}
-
-fn read_head(path: &str, max: usize) -> io::Result<Vec<u8>> {
-    let mut f = fs::File::open(path)?;
-    read_head_from_reader(&mut f, max)
-}
-
-fn read_head_from_reader(mut reader: impl Read, max: usize) -> io::Result<Vec<u8>> {
-    let mut buf = vec![0u8; max];
-    let n = reader.read(&mut buf)?;
-    buf.truncate(n);
-    Ok(buf)
-}
-
-fn print_result<W: Write>(
-    out: &mut W,
-    filename: &str,
-    brief: bool,
-    desc: &str,
-    mime_type: &str,
-    use_mime: bool,
-) -> io::Result<()> {
-    if use_mime && !mime_type.is_empty() {
-        if brief {
-            writeln!(out, "{}", mime_type)
-        } else {
-            writeln!(out, "{}: {}", filename, mime_type)
-        }
-    } else if brief {
-        writeln!(out, "{}", desc)
-    } else {
-        writeln!(out, "{}: {}", filename, desc)
-    }
-}
-
-fn identify(data: &[u8]) -> (String, String) {
-    if data.is_empty() {
-        return ("empty".to_string(), "inode/x-empty".to_string());
-    }
-
-    // Try infer crate for magic byte detection
-    if let Some(kind) = infer::get(data) {
-        let desc = match kind.mime_type() {
-            "image/png" => "PNG image data",
-            "image/jpeg" => "JPEG image data",
-            "image/gif" => "GIF image data",
-            "image/webp" => "WebP image data",
-            "image/bmp" => "BMP image data",
-            "image/tiff" => "TIFF image data",
-            "image/svg+xml" => "SVG image data",
-            "image/x-icon" => "ICO image data",
-            "application/pdf" => "PDF document",
-            "application/zip" => "Zip archive data",
-            "application/gzip" => "gzip compressed data",
-            "application/x-bzip2" => "bzip2 compressed data",
-            "application/x-xz" => "XZ compressed data",
-            "application/x-tar" => "POSIX tar archive",
-            "application/x-rar-compressed" => "RAR archive data",
-            "application/x-7z-compressed" => "7-zip archive data",
-            "application/x-executable" | "application/x-elf" => "ELF executable",
-            "application/wasm" => "WebAssembly (wasm) binary module",
-            "application/x-mach-binary" => "Mach-O binary",
-            "audio/mpeg" => "MPEG audio",
-            "audio/ogg" => "Ogg audio",
-            "audio/flac" => "FLAC audio",
-            "audio/wav" | "audio/x-wav" => "RIFF WAVE audio",
-            "video/mp4" => "MPEG-4 video",
-            "video/webm" => "WebM video",
-            "video/x-matroska" => "Matroska video",
-            "application/x-sqlite3" => "SQLite 3.x database",
-            "font/woff" => "Web Open Font Format",
-            "font/woff2" => "Web Open Font Format 2",
-            _ => kind.mime_type(),
-        };
-        return (desc.to_string(), kind.mime_type().to_string());
-    }
-
-    // Check for shebang scripts
-    if data.len() >= 2 && data[0] == b'#' && data[1] == b'!' {
-        let first_line = data
-            .iter()
-            .take(128)
-            .take_while(|&&b| b != b'\n')
-            .copied()
-            .collect::<Vec<u8>>();
-        if let Ok(line) = std::str::from_utf8(&first_line) {
-            let interp = line.trim_start_matches("#!");
-            let interp = interp.trim();
-            // Extract interpreter name
-            let name = interp.split_whitespace().next().unwrap_or(interp);
-            let basename = match name.rfind('/') {
-                Some(pos) => &name[pos + 1..],
-                None => name,
-            };
-            // Handle "env <prog>" pattern
-            if basename == "env" {
-                let prog = interp.split_whitespace().nth(1).unwrap_or("script");
-                return (
-                    format!("{} script, ASCII text executable", prog),
-                    "text/x-script".to_string(),
-                );
-            }
-            return (
-                format!("{} script, ASCII text executable", basename),
-                "text/x-script".to_string(),
-            );
-        }
-    }
-
-    // Check for known text patterns
-    if is_json(data) {
-        return ("JSON text data".to_string(), "application/json".to_string());
-    }
-    if is_xml(data) {
-        return ("XML document".to_string(), "text/xml".to_string());
-    }
-    if is_html(data) {
-        return ("HTML document".to_string(), "text/html".to_string());
-    }
-
-    // Text vs binary heuristic
-    if is_text(data) {
-        return ("ASCII text".to_string(), "text/plain".to_string());
-    }
-
-    ("data".to_string(), "application/octet-stream".to_string())
-}
-
-fn is_text(data: &[u8]) -> bool {
-    // Check first 8KB for non-text bytes
-    let check_len = data.len().min(8192);
-    let mut null_count = 0;
-    for &b in &data[..check_len] {
-        if b == 0 {
-            null_count += 1;
-            if null_count > 0 {
-                return false;
-            }
-        }
-        // Allow common control chars: tab, newline, carriage return, form feed, backspace, escape
-        if b < 0x08 || (b > 0x0D && b < 0x20 && b != 0x1B) {
-            if b != 0x00 {
-                // already counted nulls
-                return false;
-            }
-        }
-    }
-    true
-}
-
-fn is_json(data: &[u8]) -> bool {
-    // Quick check: starts with { or [, ignoring leading whitespace
-    let trimmed = skip_whitespace(data);
-    !trimmed.is_empty() && (trimmed[0] == b'{' || trimmed[0] == b'[')
-}
-
-fn is_xml(data: &[u8]) -> bool {
-    let trimmed = skip_whitespace(data);
-    trimmed.starts_with(b"<?xml") || trimmed.starts_with(b"<!DOCTYPE")
-}
-
-fn is_html(data: &[u8]) -> bool {
-    let trimmed = skip_whitespace(data);
-    let lower: Vec<u8> = trimmed
-        .iter()
-        .take(64)
-        .map(|b| b.to_ascii_lowercase())
-        .collect();
-    lower.starts_with(b"<!doctype html") || lower.starts_with(b"<html")
-}
-
-fn skip_whitespace(data: &[u8]) -> &[u8] {
-    let mut i = 0;
-    while i < data.len()
-        && (data[i] == b' ' || data[i] == b'\t' || data[i] == b'\n' || data[i] == b'\r')
-    {
-        i += 1;
-    }
-    &data[i..]
-}
diff --git a/registry/native/crates/libs/find/Cargo.toml b/registry/native/crates/libs/find/Cargo.toml
deleted file mode 100644
index 1790edb5e..000000000
--- a/registry/native/crates/libs/find/Cargo.toml
+++ /dev/null
@@ -1,9 +0,0 @@
-[package]
-name = "secureexec-find"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "find implementation for secure-exec standalone binaries"
-
-[dependencies]
-regex = "1"
diff --git a/registry/native/crates/libs/find/src/lib.rs b/registry/native/crates/libs/find/src/lib.rs
deleted file mode 100644
index 059e80fa5..000000000
--- a/registry/native/crates/libs/find/src/lib.rs
+++ /dev/null
@@ -1,593 +0,0 @@
-//! POSIX find implementation for WASM.
-//!
-//! Custom implementation using std::fs (WASI) for directory traversal
-//! and glob-to-regex conversion for pattern matching. fd-find crate
-//! cannot be used directly as it's a binary crate with platform-specific
-//! dependencies incompatible with wasm32-wasip1.
-
-use std::collections::HashSet;
-use std::ffi::OsString;
-use std::fs;
-use std::io::{self, Write};
-use std::path::{Path, PathBuf};
-
-use regex::Regex;
-
-/// Entry point for find command.
-pub fn main(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1) // skip argv[0]
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    match run_find(&str_args) {
-        Ok(found) => {
-            if found {
-                0
-            } else {
-                0
-            } // find returns 0 even if no matches
-        }
-        Err(msg) => {
-            eprintln!("find: {}", msg);
-            1
-        }
-    }
-}
-
-/// Parsed find expression node.
-#[derive(Debug)]
-enum Expr {
-    /// -name PATTERN (glob match on filename only)
-    Name(Regex),
-    /// -iname PATTERN (case-insensitive glob match on filename)
-    IName(Regex),
-    /// -path PATTERN (glob match on full path)
-    PathMatch(Regex),
-    /// -ipath PATTERN (case-insensitive glob match on full path)
-    IPathMatch(Regex),
-    /// -type TYPE (d, f, l)
-    Type(FileType),
-    /// -empty (file size 0 or empty directory)
-    Empty,
-    /// -maxdepth N (handled specially during traversal)
-    MaxDepth(usize),
-    /// -mindepth N (handled specially during traversal)
-    MinDepth(usize),
-    /// -print (explicit print action)
-    Print,
-    /// -not EXPR / ! EXPR
-    Not(Box<Expr>),
-    /// EXPR -a EXPR / EXPR -and EXPR / implicit AND
-    And(Box<Expr>, Box<Expr>),
-    /// EXPR -o EXPR / EXPR -or EXPR
-    Or(Box<Expr>, Box<Expr>),
-}
-
-#[derive(Debug, Clone, Copy, PartialEq)]
-enum FileType {
-    Directory,
-    File,
-    Symlink,
-}
-
-struct FindOptions {
-    paths: Vec<String>,
-    expr: Option<Expr>,
-    max_depth: Option<usize>,
-    min_depth: usize,
-}
-
-fn run_find(args: &[String]) -> Result<bool, String> {
-    let opts = parse_args(args)?;
-    let mut found_any = false;
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-
-    for path in &opts.paths {
-        let mut visited_dirs = HashSet::new();
-        walk(
-            &PathBuf::from(path),
-            path,
-            0,
-            &opts,
-            &mut found_any,
-            &mut out,
-            &mut visited_dirs,
-        )?;
-    }
-
-    out.flush()
-        .map_err(|e| format!("failed to write output: {e}"))?;
-
-    Ok(found_any)
-}
-
-/// Recursive directory walk.
-fn walk<W: Write>(
-    full_path: &Path,
-    display_path: &str,
-    depth: usize,
-    opts: &FindOptions,
-    found_any: &mut bool,
-    out: &mut W,
-    visited_dirs: &mut HashSet<PathBuf>,
-) -> Result<(), String> {
-    // Check max depth before processing
-    if let Some(max) = opts.max_depth {
-        if depth > max {
-            return Ok(());
-        }
-    }
-
-    // Evaluate expression against this entry (if at or below min_depth)
-    if depth >= opts.min_depth {
-        let matches = match &opts.expr {
-            Some(expr) => eval_expr(expr, full_path, display_path),
-            None => true, // no expression means match everything
-        };
-
-        if matches {
-            *found_any = true;
-            // Default action is print
-            writeln!(out, "{}", display_path)
-                .map_err(|e| format!("failed to write output: {e}"))?;
-        }
-    }
-
-    // Recurse into directories
-    if full_path.is_dir() {
-        // Check max depth for children
-        if let Some(max) = opts.max_depth {
-            if depth >= max {
-                return Ok(());
-            }
-        }
-
-        let canonical_path =
-            fs::canonicalize(full_path).map_err(|e| format!("{}: {}", display_path, e))?;
-        if !visited_dirs.insert(canonical_path.clone()) {
-            return Ok(());
-        }
-
-        let entries = fs::read_dir(full_path).map_err(|e| format!("{}: {}", display_path, e))?;
-
-        let mut sorted_entries: Vec<_> = entries
-            .collect::<Result<Vec<_>, _>>()
-            .map_err(|e| format!("{}: {}", display_path, e))?;
-        sorted_entries.sort_by_key(|e| e.file_name());
-
-        for entry in sorted_entries {
-            let child_name = entry.file_name().to_string_lossy().to_string();
-            let child_display = if display_path == "/" {
-                format!("/{}", child_name)
-            } else {
-                format!("{}/{}", display_path, child_name)
-            };
-            let child_full = entry.path();
-
-            walk(
-                &child_full,
-                &child_display,
-                depth + 1,
-                opts,
-                found_any,
-                out,
-                visited_dirs,
-            )?;
-        }
-        visited_dirs.remove(&canonical_path);
-    }
-
-    Ok(())
-}
-
-/// Evaluate an expression against a path.
-fn eval_expr(expr: &Expr, full_path: &Path, display_path: &str) -> bool {
-    match expr {
-        Expr::Name(re) => {
-            let name = full_path
-                .file_name()
-                .map(|n| n.to_string_lossy().to_string())
-                .unwrap_or_default();
-            re.is_match(&name)
-        }
-        Expr::IName(re) => {
-            let name = full_path
-                .file_name()
-                .map(|n| n.to_string_lossy().to_string())
-                .unwrap_or_default();
-            re.is_match(&name)
-        }
-        Expr::PathMatch(re) => re.is_match(display_path),
-        Expr::IPathMatch(re) => re.is_match(display_path),
-        Expr::Type(ft) => match ft {
-            FileType::Directory => full_path.is_dir(),
-            FileType::File => full_path.is_file(),
-            FileType::Symlink => full_path
-                .symlink_metadata()
-                .map(|m| m.file_type().is_symlink())
-                .unwrap_or(false),
-        },
-        Expr::Empty => {
-            if full_path.is_dir() {
-                fs::read_dir(full_path)
-                    .map(|mut d| d.next().is_none())
-                    .unwrap_or(false)
-            } else if full_path.is_file() {
-                full_path.metadata().map(|m| m.len() == 0).unwrap_or(false)
-            } else {
-                false
-            }
-        }
-        Expr::MaxDepth(_) | Expr::MinDepth(_) => true, // handled in walk()
-        Expr::Print => true,                           // print is an action, always "matches"
-        Expr::Not(inner) => !eval_expr(inner, full_path, display_path),
-        Expr::And(left, right) => {
-            eval_expr(left, full_path, display_path) && eval_expr(right, full_path, display_path)
-        }
-        Expr::Or(left, right) => {
-            eval_expr(left, full_path, display_path) || eval_expr(right, full_path, display_path)
-        }
-    }
-}
-
-/// Convert a shell glob pattern to a regex pattern.
-/// Supports *, ?, [charset], and ** (for path matching).
-fn glob_to_regex(glob: &str, case_insensitive: bool) -> Result<Regex, String> {
-    let mut re = String::from("^");
-    let chars: Vec<char> = glob.chars().collect();
-    let mut i = 0;
-
-    while i < chars.len() {
-        match chars[i] {
-            '*' => {
-                if i + 1 < chars.len() && chars[i + 1] == '*' {
-                    // ** matches everything including /
-                    re.push_str(".*");
-                    i += 1;
-                } else {
-                    // * matches everything except /
-                    re.push_str("[^/]*");
-                }
-            }
-            '?' => re.push_str("[^/]"),
-            '[' => {
-                re.push('[');
-                i += 1;
-                if i < chars.len() && chars[i] == '!' {
-                    re.push('^');
-                    i += 1;
-                } else if i < chars.len() && chars[i] == '^' {
-                    re.push('^');
-                    i += 1;
-                }
-                while i < chars.len() && chars[i] != ']' {
-                    if chars[i] == '\\' && i + 1 < chars.len() {
-                        re.push('\\');
-                        i += 1;
-                        re.push(chars[i]);
-                    } else {
-                        re.push(chars[i]);
-                    }
-                    i += 1;
-                }
-                re.push(']');
-            }
-            '.' | '+' | '(' | ')' | '{' | '}' | '|' | '^' | '$' | '\\' => {
-                re.push('\\');
-                re.push(chars[i]);
-            }
-            _ => re.push(chars[i]),
-        }
-        i += 1;
-    }
-
-    re.push('$');
-
-    let pattern = if case_insensitive {
-        format!("(?i){}", re)
-    } else {
-        re
-    };
-
-    Regex::new(&pattern).map_err(|e| format!("invalid pattern: {}", e))
-}
-
-/// Parse find command arguments.
-fn parse_args(args: &[String]) -> Result<FindOptions, String> {
-    let mut paths: Vec<String> = Vec::new();
-    let mut exprs: Vec<Expr> = Vec::new();
-    let mut max_depth: Option<usize> = None;
-    let mut min_depth: usize = 0;
-    let mut i = 0;
-
-    // First, collect paths (arguments before any expression)
-    while i < args.len() {
-        let arg = &args[i];
-        if arg.starts_with('-') || arg == "!" || arg == "(" {
-            break;
-        }
-        paths.push(arg.clone());
-        i += 1;
-    }
-
-    if paths.is_empty() {
-        paths.push(".".to_string());
-    }
-
-    // Parse expressions
-    while i < args.len() {
-        let arg = &args[i];
-
-        match arg.as_str() {
-            "-name" => {
-                i += 1;
-                if i >= args.len() {
-                    return Err("-name requires an argument".to_string());
-                }
-                let re = glob_to_regex(&args[i], false)?;
-                exprs.push(Expr::Name(re));
-            }
-            "-iname" => {
-                i += 1;
-                if i >= args.len() {
-                    return Err("-iname requires an argument".to_string());
-                }
-                let re = glob_to_regex(&args[i], true)?;
-                exprs.push(Expr::IName(re));
-            }
-            "-path" | "-wholename" => {
-                i += 1;
-                if i >= args.len() {
-                    return Err(format!("{} requires an argument", arg));
-                }
-                let re = glob_to_regex(&args[i], false)?;
-                exprs.push(Expr::PathMatch(re));
-            }
-            "-ipath" | "-iwholename" => {
-                i += 1;
-                if i >= args.len() {
-                    return Err(format!("{} requires an argument", arg));
-                }
-                let re = glob_to_regex(&args[i], true)?;
-                exprs.push(Expr::IPathMatch(re));
-            }
-            "-type" => {
-                i += 1;
-                if i >= args.len() {
-                    return Err("-type requires an argument".to_string());
-                }
-                let ft = match args[i].as_str() {
-                    "d" => FileType::Directory,
-                    "f" => FileType::File,
-                    "l" => FileType::Symlink,
-                    other => return Err(format!("unknown file type: {}", other)),
-                };
-                exprs.push(Expr::Type(ft));
-            }
-            "-empty" => {
-                exprs.push(Expr::Empty);
-            }
-            "-maxdepth" => {
-                i += 1;
-                if i >= args.len() {
-                    return Err("-maxdepth requires an argument".to_string());
-                }
-                let n: usize = args[i]
-                    .parse()
-                    .map_err(|_| format!("-maxdepth: {}: not a number", args[i]))?;
-                max_depth = Some(n);
-            }
-            "-mindepth" => {
-                i += 1;
-                if i >= args.len() {
-                    return Err("-mindepth requires an argument".to_string());
-                }
-                let n: usize = args[i]
-                    .parse()
-                    .map_err(|_| format!("-mindepth: {}: not a number", args[i]))?;
-                min_depth = n;
-            }
-            "-print" => {
-                exprs.push(Expr::Print);
-            }
-            "!" | "-not" => {
-                i += 1;
-                if i >= args.len() {
-                    return Err("! requires an expression".to_string());
-                }
-                // Parse the next single expression
-                let (next_expr, next_i) = parse_single_expr(&args, i)?;
-                if let Some((md, mi)) = extract_depth(&next_expr) {
-                    if let Some(d) = md {
-                        max_depth = Some(d);
-                    }
-                    min_depth = mi.unwrap_or(min_depth);
-                }
-                exprs.push(Expr::Not(Box::new(next_expr)));
-                i = next_i;
-                continue; // skip the i += 1 at end
-            }
-            "-a" | "-and" => {
-                // Implicit AND between consecutive expressions, -a is explicit
-                // Just skip it; AND is applied when combining exprs
-            }
-            "-o" | "-or" => {
-                // Combine everything so far as left side of OR
-                if exprs.is_empty() {
-                    return Err("-or requires a preceding expression".to_string());
-                }
-                let left = combine_and(exprs);
-
-                // Parse remaining as right side
-                i += 1;
-                let mut right_exprs = Vec::new();
-                while i < args.len() {
-                    let (e, ni) = parse_single_expr(args, i)?;
-                    if let Some((md, mi)) = extract_depth(&e) {
-                        if let Some(d) = md {
-                            max_depth = Some(d);
-                        }
-                        min_depth = mi.unwrap_or(min_depth);
-                    }
-                    right_exprs.push(e);
-                    i = ni;
-                }
-                let right = combine_and(right_exprs);
-                exprs = vec![Expr::Or(Box::new(left), Box::new(right))];
-                break;
-            }
-            "(" => {
-                // Grouped expression - find matching )
-                i += 1;
-                let mut depth = 1;
-                let start = i;
-                while i < args.len() && depth > 0 {
-                    if args[i] == "(" {
-                        depth += 1;
-                    }
-                    if args[i] == ")" {
-                        depth -= 1;
-                    }
-                    if depth > 0 {
-                        i += 1;
-                    }
-                }
-                if depth != 0 {
-                    return Err("unmatched '('".to_string());
-                }
-                let sub_args: Vec<String> = args[start..i].to_vec();
-                let sub_opts = parse_args_exprs(&sub_args)?;
-                if let Some(e) = sub_opts {
-                    exprs.push(e);
-                }
-            }
-            other if other.starts_with('-') => {
-                return Err(format!("unknown option: {}", other));
-            }
-            _ => {
-                // Treat as path if no expressions yet, otherwise error
-                return Err(format!("unexpected argument: {}", arg));
-            }
-        }
-        i += 1;
-    }
-
-    let expr = if exprs.is_empty() {
-        None
-    } else {
-        Some(combine_and(exprs))
-    };
-
-    Ok(FindOptions {
-        paths,
-        expr,
-        max_depth,
-        min_depth,
-    })
-}
-
-/// Parse a single expression at position i, returning the expression and the next position.
-fn parse_single_expr(args: &[String], i: usize) -> Result<(Expr, usize), String> {
-    if i >= args.len() {
-        return Err("unexpected end of expression".to_string());
-    }
-
-    let arg = &args[i];
-    match arg.as_str() {
-        "-name" => {
-            if i + 1 >= args.len() {
-                return Err("-name requires an argument".to_string());
-            }
-            let re = glob_to_regex(&args[i + 1], false)?;
-            Ok((Expr::Name(re), i + 2))
-        }
-        "-iname" => {
-            if i + 1 >= args.len() {
-                return Err("-iname requires an argument".to_string());
-            }
-            let re = glob_to_regex(&args[i + 1], true)?;
-            Ok((Expr::IName(re), i + 2))
-        }
-        "-path" | "-wholename" => {
-            if i + 1 >= args.len() {
-                return Err(format!("{} requires an argument", arg));
-            }
-            let re = glob_to_regex(&args[i + 1], false)?;
-            Ok((Expr::PathMatch(re), i + 2))
-        }
-        "-type" => {
-            if i + 1 >= args.len() {
-                return Err("-type requires an argument".to_string());
-            }
-            let ft = match args[i + 1].as_str() {
-                "d" => FileType::Directory,
-                "f" => FileType::File,
-                "l" => FileType::Symlink,
-                other => return Err(format!("unknown file type: {}", other)),
-            };
-            Ok((Expr::Type(ft), i + 2))
-        }
-        "-empty" => Ok((Expr::Empty, i + 1)),
-        "-maxdepth" => {
-            if i + 1 >= args.len() {
-                return Err("-maxdepth requires an argument".to_string());
-            }
-            let n: usize = args[i + 1]
-                .parse()
-                .map_err(|_| format!("-maxdepth: {}: not a number", args[i + 1]))?;
-            Ok((Expr::MaxDepth(n), i + 2))
-        }
-        "-mindepth" => {
-            if i + 1 >= args.len() {
-                return Err("-mindepth requires an argument".to_string());
-            }
-            let n: usize = args[i + 1]
-                .parse()
-                .map_err(|_| format!("-mindepth: {}: not a number", args[i + 1]))?;
-            Ok((Expr::MinDepth(n), i + 2))
-        }
-        "-print" => Ok((Expr::Print, i + 1)),
-        _ => Err(format!("unknown expression: {}", arg)),
-    }
-}
-
-/// Parse expression-only args (for grouped expressions).
-fn parse_args_exprs(args: &[String]) -> Result<Option<Expr>, String> {
-    let mut exprs = Vec::new();
-    let mut i = 0;
-
-    while i < args.len() {
-        let (expr, next_i) = parse_single_expr(args, i)?;
-        exprs.push(expr);
-        i = next_i;
-    }
-
-    if exprs.is_empty() {
-        Ok(None)
-    } else {
-        Ok(Some(combine_and(exprs)))
-    }
-}
-
-/// Extract depth settings from an expression.
-fn extract_depth(expr: &Expr) -> Option<(Option<usize>, Option<usize>)> {
-    match expr {
-        Expr::MaxDepth(n) => Some((Some(*n), None)),
-        Expr::MinDepth(n) => Some((None, Some(*n))),
-        _ => None,
-    }
-}
-
-/// Combine a list of expressions with AND.
-fn combine_and(mut exprs: Vec<Expr>) -> Expr {
-    if exprs.len() == 1 {
-        return exprs.remove(0);
-    }
-    let first = exprs.remove(0);
-    exprs
-        .into_iter()
-        .fold(first, |acc, e| Expr::And(Box::new(acc), Box::new(e)))
-}
diff --git a/registry/native/crates/libs/git/Cargo.toml b/registry/native/crates/libs/git/Cargo.toml
deleted file mode 100644
index 59d150be5..000000000
--- a/registry/native/crates/libs/git/Cargo.toml
+++ /dev/null
@@ -1,15 +0,0 @@
-[package]
-name = "secureexec-git"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "Minimal git implementation for secure-exec VM"
-
-[lib]
-name = "secureexec_git"
-path = "src/lib.rs"
-
-[dependencies]
-sha1 = "0.10.6"
-flate2 = "1.1"
-wasi-http = { package = "secureexec-wasi-http", path = "../wasi-http" }
diff --git a/registry/native/crates/libs/git/README.md b/registry/native/crates/libs/git/README.md
deleted file mode 100644
index 26fcb3704..000000000
--- a/registry/native/crates/libs/git/README.md
+++ /dev/null
@@ -1,36 +0,0 @@
-# secure-exec VM git compatibility
-
-The `git` command in secure-exec is a clean-room, Apache-2.0 reimplementation of a
-small git subset for WasmVM guests.
-
-## Supported commands
-
-- `git init`
-- `git add`
-- `git commit -m ...`
-- `git rev-parse <ref>`
-- `git branch`
-- `git checkout`
-- `git clone <local-path>`
-- `git clone http://...`
-- `git clone https://...`
-
-Remote clone support is limited to unauthenticated smart-HTTP fetches. The
-implementation can read from `http://` and `https://` remotes, but it does not
-support credentials, push, or SSH transport.
-
-## Unsupported commands and transports
-
-The guest command exits with a typed `GitSubcommandUnsupported` error for:
-
-- `git push`
-- `git fetch`
-- `git pull`
-- `git remote`
-- SSH-style clone URLs such as `git@host:owner/repo.git` and `ssh://...`
-- `git://...` clone URLs
-- Authenticated HTTP(S) remotes such as `https://user@host/repo.git`
-- Submodules, hooks, GPG signing, and other advanced porcelain workflows
-
-If you need behavior outside this subset, keep using host git or extend the
-clean-room implementation deliberately.
diff --git a/registry/native/crates/libs/git/src/lib.rs b/registry/native/crates/libs/git/src/lib.rs
deleted file mode 100644
index bd32b5520..000000000
--- a/registry/native/crates/libs/git/src/lib.rs
+++ /dev/null
@@ -1,2127 +0,0 @@
-//! Minimal clean-room git implementation (Apache-2.0).
-//!
-//! Supports: init, add, commit, branch, checkout (with DWIM), local clone,
-//! and smart-HTTP clone over http:// and https://.
-
-use flate2::bufread::ZlibDecoder as BufZlibDecoder;
-use flate2::read::ZlibDecoder;
-use flate2::write::ZlibEncoder;
-use flate2::Compression;
-use sha1::{Digest, Sha1};
-use std::collections::{BTreeMap, HashMap, HashSet};
-use std::ffi::{OsStr, OsString};
-use std::fmt;
-use std::fs;
-use std::io::{self, Cursor, Read, Write};
-use std::path::{Component, Path, PathBuf};
-use wasi_http::{HttpClient, Method, Request};
-
-// ─── Hex utilities ──────────────────────────────────────────────────────────
-
-fn hex(bytes: &[u8]) -> String {
-    bytes.iter().map(|b| format!("{:02x}", b)).collect()
-}
-
-fn unhex(s: &str) -> io::Result<[u8; 20]> {
-    if s.len() != 40 {
-        return Err(err(&format!("invalid hash length: {}", s.len())));
-    }
-    let bytes: Vec<u8> = (0..s.len())
-        .step_by(2)
-        .map(|i| {
-            u8::from_str_radix(&s[i..i + 2], 16).map_err(|e| err(&format!("invalid hex: {}", e)))
-        })
-        .collect::<io::Result<Vec<u8>>>()?;
-    let mut hash = [0u8; 20];
-    hash.copy_from_slice(&bytes);
-    Ok(hash)
-}
-
-fn err(msg: &str) -> io::Error {
-    io::Error::new(io::ErrorKind::Other, msg.to_string())
-}
-
-fn print_stdout_line(args: fmt::Arguments<'_>) -> io::Result<()> {
-    let mut stdout = io::stdout().lock();
-    stdout.write_fmt(args)?;
-    stdout.write_all(b"\n")?;
-    stdout.flush()
-}
-
-const SUPPORT_DOC_PATH: &str = "registry/native/crates/libs/git/README.md";
-const MAX_GIT_OBJECT_BYTES: usize = 128 * 1024 * 1024;
-const MAX_GIT_OBJECT_HEADER_BYTES: usize = 128;
-const MAX_INDEX_ENTRIES: usize = 1_000_000;
-const MAX_INDEX_BYTES: usize = 256 * 1024 * 1024;
-const MAX_ADVERTISED_REFS: usize = 100_000;
-const MAX_HTTP_ERROR_BODY_BYTES: usize = 8192;
-const MAX_PKT_LINES: usize = 100_000;
-const MAX_PKT_LINE_PAYLOAD_BYTES: usize = 16 * 1024 * 1024;
-const MAX_REF_ADVERTISEMENT_BYTES: usize = 16 * 1024 * 1024;
-const MAX_PACK_INFLATED_BYTES: usize = 256 * 1024 * 1024;
-const MAX_PACK_BYTES: usize = 256 * 1024 * 1024;
-const MAX_PACK_OBJECTS: usize = 1_000_000;
-const MAX_PACK_RESOLVED_BYTES: usize = 256 * 1024 * 1024;
-
-fn unsupported(subcommand: &str, detail: &str) -> io::Error {
-    err(&format!(
-        "GitSubcommandUnsupported: git {} {} See {} for supported transports and commands.",
-        subcommand, detail, SUPPORT_DOC_PATH
-    ))
-}
-
-/// WASI-safe mkdir -p: create_dir_all has issues with WASI permission checks
-/// on already-existing directories, so we create one level at a time.
-/// We also treat PermissionDenied as "already exists" because some WASI runtimes
-/// return EACCES instead of EEXIST for existing directories.
-fn mkdirs(path: &Path) -> io::Result<()> {
-    let mut ancestors: Vec<&Path> = path.ancestors().collect();
-    ancestors.reverse(); // root first
-    for dir in ancestors {
-        if dir == Path::new("/") || dir == Path::new("") {
-            continue;
-        }
-        match fs::create_dir(dir) {
-            Ok(()) => {}
-            Err(e) if e.kind() == io::ErrorKind::AlreadyExists => {}
-            // WASI kernels may return EACCES for existing directories
-            Err(e) if e.kind() == io::ErrorKind::PermissionDenied => {
-                // Verify it actually exists; propagate if it truly doesn't
-                if !dir.exists() {
-                    return Err(e);
-                }
-            }
-            Err(e) => return Err(e),
-        }
-    }
-    Ok(())
-}
-
-fn dir_is_empty(path: &Path) -> io::Result<bool> {
-    if !path.exists() {
-        return Ok(true);
-    }
-    if !path.is_dir() {
-        return Ok(false);
-    }
-    Ok(fs::read_dir(path)?.next().is_none())
-}
-
-fn read_to_end_limited<R: Read>(reader: R, limit: usize, context: &str) -> io::Result<Vec<u8>> {
-    let limit_plus_one = limit
-        .checked_add(1)
-        .ok_or_else(|| err(&format!("{} size limit is too large", context)))?;
-    let mut out = Vec::new();
-    reader.take(limit_plus_one as u64).read_to_end(&mut out)?;
-    if out.len() > limit {
-        return Err(err(&format!("{} exceeds size limit", context)));
-    }
-    Ok(out)
-}
-
-fn read_file_limited(path: &Path, limit: usize, context: &str) -> io::Result<Vec<u8>> {
-    let metadata = fs::metadata(path).map_err(|e| {
-        err(&format!(
-            "cannot stat {} '{}': {}",
-            context,
-            path.display(),
-            e
-        ))
-    })?;
-    if metadata.len() > limit as u64 {
-        return Err(err(&format!(
-            "{} '{}' exceeds size limit",
-            context,
-            path.display()
-        )));
-    }
-    fs::read(path).map_err(|e| {
-        err(&format!(
-            "cannot read {} '{}': {}",
-            context,
-            path.display(),
-            e
-        ))
-    })
-}
-
-fn try_reserve_exact<T>(vec: &mut Vec<T>, additional: usize, context: &str) -> io::Result<()> {
-    vec.try_reserve_exact(additional)
-        .map_err(|_| err(&format!("{} allocation failed", context)))
-}
-
-fn append_pack_bytes(pack: &mut Vec<u8>, bytes: &[u8]) -> io::Result<()> {
-    let new_len = pack
-        .len()
-        .checked_add(bytes.len())
-        .ok_or_else(|| err("packfile size overflow"))?;
-    if new_len > MAX_PACK_BYTES {
-        return Err(err("packfile exceeds size limit"));
-    }
-    try_reserve_exact(pack, bytes.len(), "packfile")?;
-    pack.extend_from_slice(bytes);
-    Ok(())
-}
-
-fn add_pack_inflated_bytes(total: &mut usize, bytes: usize) -> io::Result<()> {
-    *total = total
-        .checked_add(bytes)
-        .ok_or_else(|| err("inflated pack size overflow"))?;
-    if *total > MAX_PACK_INFLATED_BYTES {
-        return Err(err("inflated pack data exceeds size limit"));
-    }
-    Ok(())
-}
-
-fn add_pack_resolved_bytes(total: &mut usize, bytes: usize) -> io::Result<()> {
-    *total = total
-        .checked_add(bytes)
-        .ok_or_else(|| err("resolved pack size overflow"))?;
-    if *total > MAX_PACK_RESOLVED_BYTES {
-        return Err(err("resolved pack data exceeds size limit"));
-    }
-    Ok(())
-}
-
-fn add_pkt_payload_bytes(total: &mut usize, bytes: usize) -> io::Result<()> {
-    *total = total
-        .checked_add(bytes)
-        .ok_or_else(|| err("pkt-line payload size overflow"))?;
-    if *total > MAX_PKT_LINE_PAYLOAD_BYTES {
-        return Err(err("pkt-line payload exceeds size limit"));
-    }
-    Ok(())
-}
-
-fn add_advertised_ref_count(total: usize) -> io::Result<()> {
-    if total > MAX_ADVERTISED_REFS {
-        return Err(err("remote advertised too many refs"));
-    }
-    Ok(())
-}
-
-fn response_body_preview(body: &[u8]) -> String {
-    let limit = body.len().min(MAX_HTTP_ERROR_BODY_BYTES);
-    let mut preview = String::from_utf8_lossy(&body[..limit]).trim().to_string();
-    if body.len() > limit {
-        preview.push_str("...");
-    }
-    preview
-}
-
-fn normalize_repo_path(path: &str) -> io::Result<String> {
-    if path.is_empty() || path.as_bytes().contains(&0) {
-        return Err(err("invalid empty or nul-containing repository path"));
-    }
-
-    let mut parts = Vec::new();
-    for component in Path::new(path).components() {
-        match component {
-            Component::Normal(part) if part == OsStr::new(".git") => {
-                return Err(err("repository path must not enter .git"));
-            }
-            Component::Normal(part) => {
-                let part = part
-                    .to_str()
-                    .ok_or_else(|| err("repository path must be utf-8"))?;
-                if part.is_empty() {
-                    return Err(err("repository path contains an empty component"));
-                }
-                parts.push(part);
-            }
-            Component::CurDir
-            | Component::ParentDir
-            | Component::RootDir
-            | Component::Prefix(_) => {
-                return Err(err("repository path must be relative and normalized"));
-            }
-        }
-    }
-
-    if parts.is_empty() {
-        return Err(err("repository path must name a file"));
-    }
-
-    Ok(parts.join("/"))
-}
-
-fn worktree_path(workdir: &Path, repo_path: &str) -> io::Result<PathBuf> {
-    Ok(workdir.join(normalize_repo_path(repo_path)?))
-}
-
-fn validate_ref_tail(name: &str) -> io::Result<&str> {
-    if name.is_empty()
-        || name.as_bytes().contains(&0)
-        || name.starts_with('/')
-        || name.ends_with('/')
-        || name.contains('\\')
-    {
-        return Err(err("invalid git ref name"));
-    }
-
-    for part in name.split('/') {
-        if part.is_empty() || part == "." || part == ".." {
-            return Err(err("invalid git ref name"));
-        }
-    }
-
-    Ok(name)
-}
-
-fn validate_branch_name(name: &str) -> io::Result<&str> {
-    validate_ref_tail(name)
-}
-
-fn validate_refname(refname: &str) -> io::Result<&str> {
-    if refname == "HEAD" {
-        return Ok(refname);
-    }
-
-    for prefix in ["refs/heads/", "refs/remotes/", "refs/tags/"] {
-        if let Some(tail) = refname.strip_prefix(prefix) {
-            validate_ref_tail(tail)?;
-            return Ok(refname);
-        }
-    }
-
-    Err(err("unsupported git ref name"))
-}
-
-fn hash_bytes(obj_type: &str, data: &[u8]) -> [u8; 20] {
-    let header = format!("{} {}\0", obj_type, data.len());
-    let mut hasher = Sha1::new();
-    hasher.update(header.as_bytes());
-    hasher.update(data);
-    hasher.finalize().into()
-}
-
-fn is_zero_oid(hash: &[u8; 20]) -> bool {
-    hash.iter().all(|b| *b == 0)
-}
-
-fn is_remote_source(source: &str) -> bool {
-    source.starts_with("http://") || source.starts_with("https://")
-}
-
-fn is_ssh_clone_source(source: &str) -> bool {
-    source.starts_with("git@")
-        || source.starts_with("ssh://")
-        || source.starts_with("git://")
-        || source.starts_with("ssh+git://")
-}
-
-fn has_http_auth(source: &str) -> bool {
-    if !is_remote_source(source) {
-        return false;
-    }
-
-    let Some(scheme_sep) = source.find("://") else {
-        return false;
-    };
-    let authority = &source[scheme_sep + 3..]
-        .split_once('/')
-        .map(|(authority, _)| authority)
-        .unwrap_or(&source[scheme_sep + 3..]);
-
-    authority.contains('@')
-}
-
-fn infer_clone_destination(source: &str) -> io::Result<String> {
-    let basename = if is_remote_source(source) || is_ssh_clone_source(source) {
-        let trimmed = source.trim_end_matches('/');
-        let leaf = if let Some((_, scp_path)) = trimmed.rsplit_once(':') {
-            if is_ssh_clone_source(source) && !scp_path.contains('/') {
-                scp_path
-            } else {
-                trimmed
-                    .rsplit('/')
-                    .next()
-                    .filter(|segment| !segment.is_empty())
-                    .ok_or_else(|| err("could not determine destination path from source"))?
-            }
-        } else {
-            trimmed
-                .rsplit('/')
-                .next()
-                .filter(|segment| !segment.is_empty())
-                .ok_or_else(|| err("could not determine destination path from source"))?
-        };
-        leaf.to_string()
-    } else {
-        Path::new(source)
-            .file_name()
-            .map(|name| name.to_string_lossy().to_string())
-            .filter(|name| !name.is_empty())
-            .ok_or_else(|| err("could not determine destination path from source"))?
-    };
-
-    Ok(basename
-        .strip_suffix(".git")
-        .unwrap_or(&basename)
-        .to_string())
-}
-
-fn prepare_clone_destination(
-    dest: &Path,
-    source_label: &str,
-    default_branch: &str,
-) -> io::Result<PathBuf> {
-    validate_branch_name(default_branch)?;
-    mkdirs(dest)?;
-
-    let dst_git = dest.join(".git");
-    mkdirs(&dst_git.join("objects"))?;
-    mkdirs(&dst_git.join("refs/heads"))?;
-    mkdirs(&dst_git.join("refs/tags"))?;
-    mkdirs(&dst_git.join("refs/remotes/origin"))?;
-
-    fs::write(
-        dst_git.join("HEAD"),
-        format!("ref: refs/heads/{}\n", default_branch),
-    )?;
-    fs::write(
-        dst_git.join("config"),
-        format!(
-            "[core]\n\trepositoryformatversion = 0\n\tfilemode = true\n\tbare = false\n\
-             [remote \"origin\"]\n\turl = {}\n\tfetch = +refs/heads/*:refs/remotes/origin/*\n",
-            source_label
-        ),
-    )?;
-
-    Ok(dst_git)
-}
-
-#[derive(Debug)]
-enum PktLine {
-    Data(Vec<u8>),
-    Flush,
-}
-
-fn parse_pkt_lines(data: &[u8]) -> io::Result<Vec<PktLine>> {
-    let mut pos = 0usize;
-    let mut lines = Vec::new();
-    let mut payload_bytes = 0usize;
-
-    while pos + 4 <= data.len() {
-        if lines.len() >= MAX_PKT_LINES {
-            return Err(err("too many pkt-lines"));
-        }
-        let len_str =
-            std::str::from_utf8(&data[pos..pos + 4]).map_err(|_| err("invalid pkt-line"))?;
-        let len = usize::from_str_radix(len_str, 16).map_err(|_| err("invalid pkt-line length"))?;
-        pos += 4;
-
-        if len == 0 {
-            lines.push(PktLine::Flush);
-            continue;
-        }
-        if len < 4 || pos + len - 4 > data.len() {
-            return Err(err("truncated pkt-line"));
-        }
-
-        let payload_len = len - 4;
-        add_pkt_payload_bytes(&mut payload_bytes, payload_len)?;
-        lines.push(PktLine::Data(data[pos..pos + payload_len].to_vec()));
-        pos += len - 4;
-    }
-
-    if pos != data.len() {
-        return Err(err("trailing bytes after pkt-lines"));
-    }
-
-    Ok(lines)
-}
-
-#[derive(Debug, Default)]
-struct RemoteAdvertisement {
-    head_hash: Option<[u8; 20]>,
-    head_target: Option<String>,
-    branches: BTreeMap<String, [u8; 20]>,
-    tags: BTreeMap<String, [u8; 20]>,
-}
-
-fn parse_advertised_ref(line: &[u8], adv: &mut RemoteAdvertisement) -> io::Result<()> {
-    let (ref_part, capability_part) = if let Some(nul) = line.iter().position(|b| *b == 0) {
-        (&line[..nul], Some(&line[nul + 1..]))
-    } else {
-        (line, None)
-    };
-
-    let ref_text = std::str::from_utf8(ref_part)
-        .map_err(|_| err("invalid advertised ref"))?
-        .trim_end_matches('\n');
-    if ref_text.is_empty() {
-        return Ok(());
-    }
-
-    let (hash_hex, refname) = ref_text
-        .split_once(' ')
-        .ok_or_else(|| err("malformed advertised ref"))?;
-    let hash = unhex(hash_hex)?;
-
-    if refname == "HEAD" {
-        adv.head_hash = Some(hash);
-    } else if refname.starts_with("refs/heads/") {
-        validate_refname(refname)?;
-        adv.branches.insert(refname.to_string(), hash);
-        add_advertised_ref_count(adv.branches.len() + adv.tags.len())?;
-    } else if refname.starts_with("refs/tags/") {
-        validate_refname(refname)?;
-        adv.tags.insert(refname.to_string(), hash);
-        add_advertised_ref_count(adv.branches.len() + adv.tags.len())?;
-    }
-
-    if let Some(capabilities) = capability_part {
-        let caps = std::str::from_utf8(capabilities).map_err(|_| err("invalid capability list"))?;
-        for cap in caps.split_whitespace() {
-            if let Some(target) = cap.strip_prefix("symref=HEAD:") {
-                validate_refname(target)?;
-                adv.head_target = Some(target.to_string());
-            }
-        }
-    }
-
-    Ok(())
-}
-
-fn fetch_remote_advertisement(url: &str) -> io::Result<RemoteAdvertisement> {
-    let info_refs_url = format!(
-        "{}/info/refs?service=git-upload-pack",
-        url.trim_end_matches('/')
-    );
-    let req = Request::new(Method::Get, &info_refs_url)
-        .map_err(|e| err(&format!("bad info/refs URL: {}", e)))?
-        .header("Accept", "application/x-git-upload-pack-advertisement")
-        .header("Git-Protocol", "version=0");
-
-    let resp = HttpClient::new()
-        .send(&req)
-        .map_err(|e| err(&format!("fetch info/refs failed: {}", e)))?;
-    if resp.status != 200 {
-        let body = response_body_preview(&resp.body);
-        return Err(err(&format!(
-            "remote advertised refs request failed (HTTP {}): {}",
-            resp.status, body
-        )));
-    }
-    if resp.body.len() > MAX_REF_ADVERTISEMENT_BYTES {
-        return Err(err("remote advertised refs response exceeds size limit"));
-    }
-
-    let lines = parse_pkt_lines(&resp.body)?;
-    let mut adv = RemoteAdvertisement::default();
-    let mut saw_service = false;
-    let mut in_refs = false;
-
-    for line in lines {
-        match line {
-            PktLine::Flush => {
-                if saw_service {
-                    in_refs = true;
-                }
-            }
-            PktLine::Data(data) => {
-                if !saw_service {
-                    let service = std::str::from_utf8(&data)
-                        .map_err(|_| err("invalid git service header"))?;
-                    if service.trim_end_matches('\n') != "# service=git-upload-pack" {
-                        return Err(err("unexpected git service advertisement"));
-                    }
-                    saw_service = true;
-                    continue;
-                }
-                if !in_refs {
-                    continue;
-                }
-                parse_advertised_ref(&data, &mut adv)?;
-            }
-        }
-    }
-
-    if !saw_service {
-        return Err(err("missing git-upload-pack service header"));
-    }
-
-    Ok(adv)
-}
-
-fn branch_name_from_ref(refname: &str) -> io::Result<String> {
-    refname
-        .strip_prefix("refs/heads/")
-        .map(validate_branch_name)
-        .transpose()?
-        .map(|name| name.to_string())
-        .ok_or_else(|| err("expected refs/heads/* ref"))
-}
-
-fn default_branch_ref(adv: &RemoteAdvertisement) -> Option<(String, [u8; 20])> {
-    if let Some(target) = adv.head_target.as_ref() {
-        if let Some(hash) = adv.branches.get(target) {
-            return Some((target.clone(), *hash));
-        }
-    }
-
-    if let Some(head_hash) = adv.head_hash {
-        if let Some((name, hash)) = adv.branches.iter().find(|(_, hash)| **hash == head_hash) {
-            return Some((name.clone(), *hash));
-        }
-    }
-
-    adv.branches
-        .iter()
-        .next()
-        .map(|(name, hash)| (name.clone(), *hash))
-}
-
-fn pkt_line_bytes(payload: &[u8]) -> Vec<u8> {
-    let mut out = format!("{:04x}", payload.len() + 4).into_bytes();
-    out.extend_from_slice(payload);
-    out
-}
-
-fn fetch_remote_pack(url: &str, wants: &[String]) -> io::Result<Vec<u8>> {
-    if wants.is_empty() {
-        return Ok(Vec::new());
-    }
-
-    let upload_pack_url = format!("{}/git-upload-pack", url.trim_end_matches('/'));
-    let mut body = Vec::new();
-    for (i, want) in wants.iter().enumerate() {
-        let line = if i == 0 {
-            format!(
-                "want {} side-band-64k ofs-delta no-progress include-tag agent=agentos/1.0\n",
-                want
-            )
-        } else {
-            format!("want {}\n", want)
-        };
-        body.extend_from_slice(&pkt_line_bytes(line.as_bytes()));
-    }
-    body.extend_from_slice(b"0000");
-    body.extend_from_slice(&pkt_line_bytes(b"done\n"));
-
-    let req = Request::new(Method::Post, &upload_pack_url)
-        .map_err(|e| err(&format!("bad upload-pack URL: {}", e)))?
-        .header("Content-Type", "application/x-git-upload-pack-request")
-        .header("Accept", "application/x-git-upload-pack-result")
-        .header("Git-Protocol", "version=0")
-        .body(body);
-
-    let resp = HttpClient::new()
-        .send(&req)
-        .map_err(|e| err(&format!("git-upload-pack failed: {}", e)))?;
-    if resp.status != 200 {
-        let body = response_body_preview(&resp.body);
-        return Err(err(&format!(
-            "git-upload-pack returned HTTP {}: {}",
-            resp.status, body
-        )));
-    }
-
-    if resp.body.len() > MAX_PACK_BYTES {
-        return Err(err("packfile exceeds size limit"));
-    }
-    if resp.body.starts_with(b"PACK") {
-        return Ok(resp.body);
-    }
-
-    let mut pack = Vec::new();
-    for line in parse_pkt_lines(&resp.body)? {
-        match line {
-            PktLine::Flush => {}
-            PktLine::Data(payload) => {
-                if payload == b"NAK\n" || payload.starts_with(b"ACK ") {
-                    continue;
-                }
-                if payload.starts_with(b"ERR ") {
-                    let msg = String::from_utf8_lossy(&payload[4..]);
-                    return Err(err(&format!("remote upload-pack error: {}", msg.trim())));
-                }
-                if payload.starts_with(b"PACK") {
-                    append_pack_bytes(&mut pack, &payload)?;
-                    continue;
-                }
-                if payload.is_empty() {
-                    continue;
-                }
-                match payload[0] {
-                    1 => append_pack_bytes(&mut pack, &payload[1..])?,
-                    2 => {}
-                    3 => {
-                        let msg = String::from_utf8_lossy(&payload[1..]);
-                        return Err(err(&format!("remote upload-pack error: {}", msg.trim())));
-                    }
-                    _ => return Err(err("unexpected upload-pack response payload")),
-                }
-            }
-        }
-    }
-
-    if pack.is_empty() {
-        return Err(err("git-upload-pack response did not include a packfile"));
-    }
-    Ok(pack)
-}
-
-#[derive(Clone, Debug)]
-enum PackedObjectKind {
-    Full { obj_type: String, data: Vec<u8> },
-    OfsDelta { base_offset: usize, delta: Vec<u8> },
-    RefDelta { base_hash: [u8; 20], delta: Vec<u8> },
-}
-
-#[derive(Clone, Debug)]
-struct PackedObject {
-    offset: usize,
-    kind: PackedObjectKind,
-}
-
-#[derive(Clone, Debug)]
-struct ResolvedObject {
-    obj_type: String,
-    data: Vec<u8>,
-    hash: [u8; 20],
-}
-
-fn parse_pack_object_header(pack: &[u8], offset: &mut usize) -> io::Result<(u8, usize)> {
-    if *offset >= pack.len() {
-        return Err(err("truncated pack object header"));
-    }
-
-    let mut byte = pack[*offset];
-    *offset += 1;
-
-    let obj_type = (byte >> 4) & 0x7;
-    let mut size = (byte & 0x0f) as usize;
-    let mut shift = 4usize;
-
-    while byte & 0x80 != 0 {
-        if *offset >= pack.len() {
-            return Err(err("truncated pack object size"));
-        }
-        byte = pack[*offset];
-        *offset += 1;
-        if shift >= usize::BITS as usize {
-            return Err(err("pack object size is too large"));
-        }
-        size |= ((byte & 0x7f) as usize)
-            .checked_shl(shift as u32)
-            .ok_or_else(|| err("pack object size is too large"))?;
-        shift += 7;
-    }
-
-    Ok((obj_type, size))
-}
-
-fn parse_ofs_delta_base(
-    pack: &[u8],
-    offset: &mut usize,
-    object_offset: usize,
-) -> io::Result<usize> {
-    if *offset >= pack.len() {
-        return Err(err("truncated ofs-delta base"));
-    }
-
-    let mut byte = pack[*offset];
-    *offset += 1;
-    let mut distance = (byte & 0x7f) as usize;
-
-    while byte & 0x80 != 0 {
-        if *offset >= pack.len() {
-            return Err(err("truncated ofs-delta base"));
-        }
-        byte = pack[*offset];
-        *offset += 1;
-        distance = distance
-            .checked_add(1)
-            .and_then(|value| value.checked_shl(7))
-            .map(|value| value | ((byte & 0x7f) as usize))
-            .ok_or_else(|| err("ofs-delta base distance is too large"))?;
-    }
-
-    object_offset
-        .checked_sub(distance)
-        .ok_or_else(|| err("invalid ofs-delta base distance"))
-}
-
-fn inflate_pack_stream(data: &[u8], expected_size: usize) -> io::Result<(Vec<u8>, usize)> {
-    if expected_size > MAX_GIT_OBJECT_BYTES {
-        return Err(err("pack object exceeds size limit"));
-    }
-    let cursor = Cursor::new(data);
-    let mut decoder = BufZlibDecoder::new(cursor);
-    let out = read_to_end_limited(&mut decoder, expected_size, "pack object")?;
-    if out.len() != expected_size {
-        return Err(err("pack object size mismatch"));
-    }
-    let consumed = decoder.get_ref().position() as usize;
-    Ok((out, consumed))
-}
-
-fn parse_packfile(pack: &[u8]) -> io::Result<Vec<PackedObject>> {
-    if pack.len() < 12 + 20 {
-        return Err(err("packfile too small"));
-    }
-    if &pack[..4] != b"PACK" {
-        return Err(err("invalid packfile signature"));
-    }
-
-    let version = u32::from_be_bytes(pack[4..8].try_into().unwrap());
-    if version != 2 && version != 3 {
-        return Err(err(&format!("unsupported packfile version {}", version)));
-    }
-    let object_count = u32::from_be_bytes(pack[8..12].try_into().unwrap()) as usize;
-    let pack_end = pack.len() - 20;
-    let mut offset = 12usize;
-    let max_count_by_bytes = pack_end.saturating_sub(offset);
-    if object_count > MAX_PACK_OBJECTS || object_count > max_count_by_bytes {
-        return Err(err("packfile object count is too large"));
-    }
-    let mut objects = Vec::new();
-    try_reserve_exact(&mut objects, object_count, "pack object table")?;
-    let mut inflated_bytes = 0usize;
-
-    for _ in 0..object_count {
-        if offset >= pack_end {
-            return Err(err("truncated packfile"));
-        }
-
-        let object_offset = offset;
-        let (obj_type, object_size) = parse_pack_object_header(pack, &mut offset)?;
-
-        let kind = match obj_type {
-            1 | 2 | 3 | 4 => {
-                let obj_type = match obj_type {
-                    1 => "commit",
-                    2 => "tree",
-                    3 => "blob",
-                    4 => "tag",
-                    _ => unreachable!(),
-                };
-                let (data, consumed) = inflate_pack_stream(&pack[offset..pack_end], object_size)?;
-                offset += consumed;
-                add_pack_inflated_bytes(&mut inflated_bytes, data.len())?;
-                PackedObjectKind::Full {
-                    obj_type: obj_type.to_string(),
-                    data,
-                }
-            }
-            6 => {
-                let base_offset = parse_ofs_delta_base(pack, &mut offset, object_offset)?;
-                let (delta, consumed) = inflate_pack_stream(&pack[offset..pack_end], object_size)?;
-                offset += consumed;
-                add_pack_inflated_bytes(&mut inflated_bytes, delta.len())?;
-                PackedObjectKind::OfsDelta { base_offset, delta }
-            }
-            7 => {
-                if offset + 20 > pack_end {
-                    return Err(err("truncated ref-delta base"));
-                }
-                let mut base_hash = [0u8; 20];
-                base_hash.copy_from_slice(&pack[offset..offset + 20]);
-                offset += 20;
-                let (delta, consumed) = inflate_pack_stream(&pack[offset..pack_end], object_size)?;
-                offset += consumed;
-                add_pack_inflated_bytes(&mut inflated_bytes, delta.len())?;
-                PackedObjectKind::RefDelta { base_hash, delta }
-            }
-            _ => return Err(err(&format!("unsupported pack object type {}", obj_type))),
-        };
-
-        objects.push(PackedObject {
-            offset: object_offset,
-            kind,
-        });
-    }
-
-    Ok(objects)
-}
-
-fn read_delta_varint(data: &[u8], pos: &mut usize) -> io::Result<usize> {
-    let mut value = 0usize;
-    let mut shift = 0usize;
-
-    loop {
-        if *pos >= data.len() {
-            return Err(err("truncated delta header"));
-        }
-        let byte = data[*pos];
-        *pos += 1;
-
-        if shift >= usize::BITS as usize {
-            return Err(err("delta varint is too large"));
-        }
-        value |= ((byte & 0x7f) as usize)
-            .checked_shl(shift as u32)
-            .ok_or_else(|| err("delta varint is too large"))?;
-        if byte & 0x80 == 0 {
-            return Ok(value);
-        }
-        shift += 7;
-    }
-}
-
-fn ensure_delta_output_room(
-    current_len: usize,
-    additional_len: usize,
-    result_size: usize,
-) -> io::Result<()> {
-    let next_len = current_len
-        .checked_add(additional_len)
-        .ok_or_else(|| err("delta result size overflow"))?;
-    if next_len > result_size {
-        return Err(err("delta result exceeds declared size"));
-    }
-    Ok(())
-}
-
-fn apply_delta(base: &[u8], delta: &[u8]) -> io::Result<Vec<u8>> {
-    let mut pos = 0usize;
-    let base_size = read_delta_varint(delta, &mut pos)?;
-    if base_size != base.len() {
-        return Err(err("delta base size mismatch"));
-    }
-    let result_size = read_delta_varint(delta, &mut pos)?;
-    if result_size > MAX_GIT_OBJECT_BYTES {
-        return Err(err("delta result exceeds size limit"));
-    }
-    let mut out = Vec::new();
-    try_reserve_exact(&mut out, result_size, "delta result")?;
-
-    while pos < delta.len() {
-        let opcode = delta[pos];
-        pos += 1;
-
-        if opcode & 0x80 != 0 {
-            let mut copy_offset = 0usize;
-            let mut copy_size = 0usize;
-
-            if opcode & 0x01 != 0 {
-                copy_offset |= delta
-                    .get(pos)
-                    .copied()
-                    .ok_or_else(|| err("truncated delta copy"))?
-                    as usize;
-                pos += 1;
-            }
-            if opcode & 0x02 != 0 {
-                copy_offset |= (delta
-                    .get(pos)
-                    .copied()
-                    .ok_or_else(|| err("truncated delta copy"))?
-                    as usize)
-                    << 8;
-                pos += 1;
-            }
-            if opcode & 0x04 != 0 {
-                copy_offset |= (delta
-                    .get(pos)
-                    .copied()
-                    .ok_or_else(|| err("truncated delta copy"))?
-                    as usize)
-                    << 16;
-                pos += 1;
-            }
-            if opcode & 0x08 != 0 {
-                copy_offset |= (delta
-                    .get(pos)
-                    .copied()
-                    .ok_or_else(|| err("truncated delta copy"))?
-                    as usize)
-                    << 24;
-                pos += 1;
-            }
-
-            if opcode & 0x10 != 0 {
-                copy_size |= delta
-                    .get(pos)
-                    .copied()
-                    .ok_or_else(|| err("truncated delta copy"))?
-                    as usize;
-                pos += 1;
-            }
-            if opcode & 0x20 != 0 {
-                copy_size |= (delta
-                    .get(pos)
-                    .copied()
-                    .ok_or_else(|| err("truncated delta copy"))?
-                    as usize)
-                    << 8;
-                pos += 1;
-            }
-            if opcode & 0x40 != 0 {
-                copy_size |= (delta
-                    .get(pos)
-                    .copied()
-                    .ok_or_else(|| err("truncated delta copy"))?
-                    as usize)
-                    << 16;
-                pos += 1;
-            }
-            if copy_size == 0 {
-                copy_size = 0x10000;
-            }
-
-            let end = copy_offset
-                .checked_add(copy_size)
-                .ok_or_else(|| err("delta copy overflow"))?;
-            if end > base.len() {
-                return Err(err("delta copy exceeds base object"));
-            }
-            ensure_delta_output_room(out.len(), copy_size, result_size)?;
-            out.extend_from_slice(&base[copy_offset..end]);
-        } else if opcode != 0 {
-            let insert_len = opcode as usize;
-            let end = pos
-                .checked_add(insert_len)
-                .ok_or_else(|| err("delta insert overflow"))?;
-            if end > delta.len() {
-                return Err(err("truncated delta insert"));
-            }
-            ensure_delta_output_room(out.len(), insert_len, result_size)?;
-            out.extend_from_slice(&delta[pos..end]);
-            pos = end;
-        } else {
-            return Err(err("invalid delta opcode"));
-        }
-    }
-
-    if out.len() != result_size {
-        return Err(err("delta result size mismatch"));
-    }
-
-    Ok(out)
-}
-
-fn maybe_read_local_object(git_dir: &Path, hash: &[u8; 20]) -> io::Result<Option<ResolvedObject>> {
-    let h = hex(hash);
-    let path = git_dir.join("objects").join(&h[..2]).join(&h[2..]);
-    if !path.exists() {
-        return Ok(None);
-    }
-    let (obj_type, data) = read_object(git_dir, hash)?;
-    Ok(Some(ResolvedObject {
-        obj_type,
-        data,
-        hash: *hash,
-    }))
-}
-
-fn find_entry_by_hash(
-    target: &[u8; 20],
-    git_dir: &Path,
-    objects: &[PackedObject],
-    offset_to_index: &HashMap<usize, usize>,
-    memo: &mut [Option<ResolvedObject>],
-    visiting: &mut [bool],
-    resolved_bytes: &mut usize,
-) -> io::Result<Option<usize>> {
-    for idx in 0..objects.len() {
-        if visiting[idx] {
-            continue;
-        }
-        let resolved = resolve_packed_object(
-            idx,
-            git_dir,
-            objects,
-            offset_to_index,
-            memo,
-            visiting,
-            resolved_bytes,
-        )?;
-        if resolved.hash == *target {
-            return Ok(Some(idx));
-        }
-    }
-
-    Ok(None)
-}
-
-fn resolve_packed_object(
-    idx: usize,
-    git_dir: &Path,
-    objects: &[PackedObject],
-    offset_to_index: &HashMap<usize, usize>,
-    memo: &mut [Option<ResolvedObject>],
-    visiting: &mut [bool],
-    resolved_bytes: &mut usize,
-) -> io::Result<ResolvedObject> {
-    if let Some(resolved) = memo[idx].as_ref() {
-        return Ok(resolved.clone());
-    }
-    if visiting[idx] {
-        return Err(err("cyclic pack delta dependency"));
-    }
-    visiting[idx] = true;
-
-    let resolved = match &objects[idx].kind {
-        PackedObjectKind::Full { obj_type, data } => ResolvedObject {
-            obj_type: obj_type.clone(),
-            data: data.clone(),
-            hash: hash_bytes(obj_type, data),
-        },
-        PackedObjectKind::OfsDelta { base_offset, delta } => {
-            let base_idx = *offset_to_index
-                .get(base_offset)
-                .ok_or_else(|| err("missing ofs-delta base object"))?;
-            let base = resolve_packed_object(
-                base_idx,
-                git_dir,
-                objects,
-                offset_to_index,
-                memo,
-                visiting,
-                resolved_bytes,
-            )?;
-            let data = apply_delta(&base.data, delta)?;
-            let hash = hash_bytes(&base.obj_type, &data);
-            ResolvedObject {
-                obj_type: base.obj_type,
-                data,
-                hash,
-            }
-        }
-        PackedObjectKind::RefDelta { base_hash, delta } => {
-            let base = if let Some(local) = maybe_read_local_object(git_dir, base_hash)? {
-                local
-            } else if let Some(base_idx) = find_entry_by_hash(
-                base_hash,
-                git_dir,
-                objects,
-                offset_to_index,
-                memo,
-                visiting,
-                resolved_bytes,
-            )? {
-                resolve_packed_object(
-                    base_idx,
-                    git_dir,
-                    objects,
-                    offset_to_index,
-                    memo,
-                    visiting,
-                    resolved_bytes,
-                )?
-            } else {
-                return Err(err("missing ref-delta base object"));
-            };
-
-            let data = apply_delta(&base.data, delta)?;
-            let hash = hash_bytes(&base.obj_type, &data);
-            ResolvedObject {
-                obj_type: base.obj_type,
-                data,
-                hash,
-            }
-        }
-    };
-
-    visiting[idx] = false;
-    add_pack_resolved_bytes(resolved_bytes, resolved.data.len())?;
-    memo[idx] = Some(resolved.clone());
-    Ok(resolved)
-}
-
-fn store_pack_objects(git_dir: &Path, pack: &[u8]) -> io::Result<()> {
-    if pack.is_empty() {
-        return Ok(());
-    }
-
-    let objects = parse_packfile(pack)?;
-    let offset_to_index: HashMap<usize, usize> = objects
-        .iter()
-        .enumerate()
-        .map(|(idx, obj)| (obj.offset, idx))
-        .collect();
-    let mut memo: Vec<Option<ResolvedObject>> = vec![None; objects.len()];
-    let mut visiting = vec![false; objects.len()];
-    let mut resolved_bytes = 0usize;
-
-    for idx in 0..objects.len() {
-        let resolved = resolve_packed_object(
-            idx,
-            git_dir,
-            &objects,
-            &offset_to_index,
-            &mut memo,
-            &mut visiting,
-            &mut resolved_bytes,
-        )?;
-        let stored = hash_object(git_dir, &resolved.obj_type, &resolved.data)?;
-        if stored != resolved.hash {
-            return Err(err("pack object hash mismatch"));
-        }
-    }
-    Ok(())
-}
-
-fn cmd_clone_remote(source: &str, dest: &Path) -> io::Result<()> {
-    if dest.exists() && !dir_is_empty(dest)? {
-        return Err(err(&format!(
-            "destination path '{}' already exists and is not an empty directory",
-            dest.display()
-        )));
-    }
-
-    let advertisement = fetch_remote_advertisement(source)?;
-    let mut wants: Vec<String> = Vec::new();
-    let mut seen = HashSet::new();
-    for hash in advertisement.branches.values() {
-        if !is_zero_oid(hash) {
-            let hash_hex = hex(hash);
-            if seen.insert(hash_hex.clone()) {
-                wants.push(hash_hex);
-            }
-        }
-    }
-    if wants.is_empty() {
-        if let Some(head_hash) = advertisement.head_hash {
-            if !is_zero_oid(&head_hash) {
-                wants.push(hex(&head_hash));
-            }
-        }
-    }
-
-    let default_ref = if let Some((refname, hash)) = default_branch_ref(&advertisement) {
-        Some((refname.clone(), branch_name_from_ref(&refname)?, hash))
-    } else {
-        None
-    };
-    let default_branch = default_ref
-        .as_ref()
-        .map(|(_, branch, _)| branch.clone())
-        .or_else(|| {
-            advertisement
-                .head_target
-                .as_ref()
-                .and_then(|target| branch_name_from_ref(target).ok())
-        })
-        .unwrap_or_else(|| "main".to_string());
-
-    let pack = fetch_remote_pack(source, &wants)?;
-
-    let dst_git = prepare_clone_destination(dest, source, &default_branch)?;
-    store_pack_objects(&dst_git, &pack)?;
-
-    for (refname, hash) in &advertisement.branches {
-        if is_zero_oid(hash) {
-            continue;
-        }
-        let branch = branch_name_from_ref(refname)?;
-        update_ref(&dst_git, &format!("refs/remotes/origin/{}", branch), hash)?;
-    }
-
-    for (refname, hash) in &advertisement.tags {
-        if is_zero_oid(hash) {
-            continue;
-        }
-        update_ref(&dst_git, refname, hash)?;
-    }
-
-    let default_hash = default_ref
-        .as_ref()
-        .map(|(_, _, hash)| *hash)
-        .or(advertisement.head_hash)
-        .filter(|hash| !is_zero_oid(hash));
-
-    if let Some(hash) = default_hash {
-        update_ref(&dst_git, &format!("refs/heads/{}", default_branch), &hash)?;
-        cmd_checkout(dest, &default_branch, false)?;
-    }
-
-    Ok(())
-}
-
-// ─── Object store ───────────────────────────────────────────────────────────
-
-fn hash_object(git_dir: &Path, obj_type: &str, data: &[u8]) -> io::Result<[u8; 20]> {
-    if data.len() > MAX_GIT_OBJECT_BYTES {
-        return Err(err("git object exceeds size limit"));
-    }
-    let header = format!("{} {}\0", obj_type, data.len());
-    let mut hasher = Sha1::new();
-    hasher.update(header.as_bytes());
-    hasher.update(data);
-    let hash: [u8; 20] = hasher.finalize().into();
-
-    let h = hex(&hash);
-    let dir = git_dir.join("objects").join(&h[..2]);
-    let path = dir.join(&h[2..]);
-    if !path.exists() {
-        mkdirs(&dir)?;
-        let mut enc = ZlibEncoder::new(Vec::new(), Compression::default());
-        enc.write_all(header.as_bytes())?;
-        enc.write_all(data)?;
-        fs::write(&path, enc.finish()?)?;
-    }
-    Ok(hash)
-}
-
-fn read_object(git_dir: &Path, hash: &[u8; 20]) -> io::Result<(String, Vec<u8>)> {
-    let h = hex(hash);
-    let path = git_dir.join("objects").join(&h[..2]).join(&h[2..]);
-    let read_limit = MAX_GIT_OBJECT_BYTES
-        .checked_add(MAX_GIT_OBJECT_HEADER_BYTES)
-        .ok_or_else(|| err("git object size limit is too large"))?;
-    let compressed = read_file_limited(&path, read_limit, "git object")?;
-    let mut dec = ZlibDecoder::new(&compressed[..]);
-    let buf = read_to_end_limited(&mut dec, read_limit, "git object")?;
-
-    let nul = buf
-        .iter()
-        .position(|&b| b == 0)
-        .ok_or_else(|| err("no nul in object"))?;
-    let header =
-        std::str::from_utf8(&buf[..nul]).map_err(|_| err("invalid object header encoding"))?;
-    let (typ, size) = header
-        .split_once(' ')
-        .ok_or_else(|| err("malformed object header"))?;
-    let size: usize = size.parse().map_err(|_| err("invalid object size"))?;
-    if size > MAX_GIT_OBJECT_BYTES {
-        return Err(err("git object exceeds size limit"));
-    }
-    if buf.len() - nul - 1 != size {
-        return Err(err("git object size mismatch"));
-    }
-    Ok((typ.to_string(), buf[nul + 1..].to_vec()))
-}
-
-// ─── Index ──────────────────────────────────────────────────────────────────
-
-#[derive(Clone, Debug)]
-struct IndexEntry {
-    mode: u32,
-    sha1: [u8; 20],
-    name: String,
-}
-
-fn read_index(git_dir: &Path) -> io::Result<Vec<IndexEntry>> {
-    let path = git_dir.join("index");
-    if !path.exists() {
-        return Ok(Vec::new());
-    }
-    let data = read_file_limited(&path, MAX_INDEX_BYTES, "git index")?;
-    if data.len() < 12 || &data[0..4] != b"DIRC" {
-        return Err(err("invalid index file"));
-    }
-    let version = u32::from_be_bytes(data[4..8].try_into().unwrap());
-    if version != 2 {
-        return Err(err(&format!("unsupported index version {}", version)));
-    }
-    let count = u32::from_be_bytes(data[8..12].try_into().unwrap()) as usize;
-    let max_count_by_bytes = data.len().saturating_sub(12) / 62;
-    if count > MAX_INDEX_ENTRIES || count > max_count_by_bytes {
-        return Err(err("index entry count is too large"));
-    }
-
-    let mut entries = Vec::new();
-    try_reserve_exact(&mut entries, count, "index entry table")?;
-    let mut pos = 12;
-
-    for _ in 0..count {
-        if pos + 62 > data.len() {
-            return Err(err("truncated index"));
-        }
-        // Stat fields at pos+0..pos+24 (ctime, mtime, dev, ino) - skip
-        let mode = u32::from_be_bytes(data[pos + 24..pos + 28].try_into().unwrap());
-        // Skip uid(4), gid(4), size(4) at pos+28..pos+40
-        let mut sha1 = [0u8; 20];
-        sha1.copy_from_slice(&data[pos + 40..pos + 60]);
-        // Flags at pos+60..pos+62
-        // Find name (NUL-terminated after fixed 62 bytes)
-        let name_start = pos + 62;
-        let nul_offset = data[name_start..]
-            .iter()
-            .position(|&b| b == 0)
-            .ok_or_else(|| err("unterminated index entry name"))?;
-        let name = String::from_utf8(data[name_start..name_start + nul_offset].to_vec())
-            .map_err(|_| err("invalid entry name"))?;
-        let name = normalize_repo_path(&name)?;
-
-        entries.push(IndexEntry { mode, sha1, name });
-
-        // Advance past padding: entry padded to 8-byte boundary
-        let entry_len = 62 + nul_offset;
-        pos += (entry_len + 8) & !7;
-    }
-
-    Ok(entries)
-}
-
-fn write_index(git_dir: &Path, entries: &[IndexEntry]) -> io::Result<()> {
-    let entry_count = u32::try_from(entries.len()).map_err(|_| err("too many index entries"))?;
-    let mut buf = Vec::new();
-    buf.extend_from_slice(b"DIRC");
-    buf.extend_from_slice(&2u32.to_be_bytes());
-    buf.extend_from_slice(&entry_count.to_be_bytes());
-
-    for entry in entries {
-        let name = normalize_repo_path(&entry.name)?;
-        if name.len() > 0xFFF {
-            return Err(err("index entry name is too long"));
-        }
-        let entry_start = buf.len();
-        // ctime(8) + mtime(8) + dev(4) + ino(4) = 24 bytes of zeros
-        buf.extend_from_slice(&[0u8; 24]);
-        buf.extend_from_slice(&entry.mode.to_be_bytes());
-        // uid(4) + gid(4) + size(4) = 12 bytes of zeros
-        buf.extend_from_slice(&[0u8; 12]);
-        buf.extend_from_slice(&entry.sha1);
-        // Flags: name length in lower 12 bits
-        buf.extend_from_slice(&(name.len() as u16).to_be_bytes());
-        buf.extend_from_slice(name.as_bytes());
-        // Pad to 8-byte boundary (1-8 NUL bytes)
-        let entry_len = buf.len() - entry_start;
-        let padded = (entry_len + 8) & !7;
-        buf.resize(entry_start + padded, 0);
-    }
-
-    // SHA-1 checksum of entire index
-    let checksum: [u8; 20] = Sha1::digest(&buf).into();
-    buf.extend_from_slice(&checksum);
-
-    fs::write(git_dir.join("index"), &buf)
-}
-
-// ─── Refs ───────────────────────────────────────────────────────────────────
-
-fn resolve_ref(git_dir: &Path, refname: &str) -> io::Result<Option<[u8; 20]>> {
-    let refname = validate_refname(refname)?;
-    let ref_path = git_dir.join(refname);
-    if !ref_path.exists() {
-        return Ok(None);
-    }
-    let content = fs::read_to_string(&ref_path)?;
-    let content = content.trim();
-    if let Some(target) = content.strip_prefix("ref: ") {
-        resolve_ref(git_dir, target)
-    } else {
-        Ok(Some(unhex(content)?))
-    }
-}
-
-fn resolve_head(git_dir: &Path) -> io::Result<Option<[u8; 20]>> {
-    resolve_ref(git_dir, "HEAD")
-}
-
-fn head_branch(git_dir: &Path) -> io::Result<Option<String>> {
-    let head = fs::read_to_string(git_dir.join("HEAD"))?;
-    let head = head.trim();
-    Ok(head.strip_prefix("ref: refs/heads/").map(|s| s.to_string()))
-}
-
-fn update_ref(git_dir: &Path, refname: &str, hash: &[u8; 20]) -> io::Result<()> {
-    let refname = validate_refname(refname)?;
-    let ref_path = git_dir.join(refname);
-    if let Some(parent) = ref_path.parent() {
-        mkdirs(parent)?;
-    }
-    fs::write(&ref_path, format!("{}\n", hex(hash)))
-}
-
-// ─── Tree operations ────────────────────────────────────────────────────────
-
-fn build_tree(git_dir: &Path, entries: &[IndexEntry]) -> io::Result<[u8; 20]> {
-    build_tree_at(git_dir, entries, "")
-}
-
-fn build_tree_at(git_dir: &Path, entries: &[IndexEntry], prefix: &str) -> io::Result<[u8; 20]> {
-    struct TreeEntry {
-        mode: String,
-        name: String,
-        hash: [u8; 20],
-    }
-
-    let mut tree_entries: Vec<TreeEntry> = Vec::new();
-    let mut subdirs: BTreeMap<String, Vec<IndexEntry>> = BTreeMap::new();
-
-    for entry in entries {
-        let relative = if prefix.is_empty() {
-            &entry.name[..]
-        } else if let Some(rest) = entry.name.strip_prefix(prefix) {
-            rest
-        } else {
-            continue;
-        };
-
-        if let Some(slash) = relative.find('/') {
-            let dir = &relative[..slash];
-            subdirs
-                .entry(dir.to_string())
-                .or_default()
-                .push(entry.clone());
-        } else {
-            tree_entries.push(TreeEntry {
-                mode: format!("{:o}", entry.mode),
-                name: relative.to_string(),
-                hash: entry.sha1,
-            });
-        }
-    }
-
-    for (dir, sub_entries) in &subdirs {
-        let sub_prefix = if prefix.is_empty() {
-            format!("{}/", dir)
-        } else {
-            format!("{}{}/", prefix, dir)
-        };
-        let subtree_hash = build_tree_at(git_dir, sub_entries, &sub_prefix)?;
-        tree_entries.push(TreeEntry {
-            mode: "40000".to_string(),
-            name: dir.clone(),
-            hash: subtree_hash,
-        });
-    }
-
-    // Sort: directories get trailing / for comparison
-    tree_entries.sort_by(|a, b| {
-        let ak = if a.mode == "40000" {
-            format!("{}/", a.name)
-        } else {
-            a.name.clone()
-        };
-        let bk = if b.mode == "40000" {
-            format!("{}/", b.name)
-        } else {
-            b.name.clone()
-        };
-        ak.cmp(&bk)
-    });
-
-    let mut data = Vec::new();
-    for te in &tree_entries {
-        data.extend_from_slice(te.mode.as_bytes());
-        data.push(b' ');
-        data.extend_from_slice(te.name.as_bytes());
-        data.push(0);
-        data.extend_from_slice(&te.hash);
-    }
-
-    hash_object(git_dir, "tree", &data)
-}
-
-/// Read a tree recursively into flat (path, mode, hash) entries.
-fn read_tree_entries(git_dir: &Path, hash: &[u8; 20], prefix: &str) -> io::Result<Vec<IndexEntry>> {
-    let (typ, data) = read_object(git_dir, hash)?;
-    if typ != "tree" {
-        return Err(err("expected tree object"));
-    }
-
-    let mut entries = Vec::new();
-    let mut pos = 0;
-
-    while pos < data.len() {
-        let space = data[pos..]
-            .iter()
-            .position(|&b| b == b' ')
-            .ok_or_else(|| err("bad tree entry"))?;
-        let mode_str =
-            std::str::from_utf8(&data[pos..pos + space]).map_err(|_| err("bad tree mode"))?;
-        let mode = u32::from_str_radix(mode_str, 8).map_err(|_| err("bad tree mode number"))?;
-        pos += space + 1;
-
-        let nul = data[pos..]
-            .iter()
-            .position(|&b| b == 0)
-            .ok_or_else(|| err("bad tree entry name"))?;
-        let name = std::str::from_utf8(&data[pos..pos + nul]).map_err(|_| err("bad name"))?;
-        if name.contains('/') {
-            return Err(err("tree entry name must not contain '/'"));
-        }
-        if normalize_repo_path(name)? != name {
-            return Err(err("tree entry name must be normalized"));
-        }
-        pos += nul + 1;
-
-        if pos + 20 > data.len() {
-            return Err(err("truncated tree hash"));
-        }
-        let mut hash_buf = [0u8; 20];
-        hash_buf.copy_from_slice(&data[pos..pos + 20]);
-        pos += 20;
-
-        let full_name = if prefix.is_empty() {
-            name.to_string()
-        } else {
-            format!("{}{}", prefix, name)
-        };
-
-        if mode == 0o40000 {
-            let sub = read_tree_entries(git_dir, &hash_buf, &format!("{}/", full_name))?;
-            entries.extend(sub);
-        } else {
-            let full_name = normalize_repo_path(&full_name)?;
-            entries.push(IndexEntry {
-                mode,
-                sha1: hash_buf,
-                name: full_name,
-            });
-        }
-    }
-
-    Ok(entries)
-}
-
-/// Extract the tree hash from a commit object.
-fn commit_tree(git_dir: &Path, commit_hash: &[u8; 20]) -> io::Result<[u8; 20]> {
-    let (typ, data) = read_object(git_dir, commit_hash)?;
-    if typ != "commit" {
-        return Err(err("not a commit object"));
-    }
-    let text = String::from_utf8_lossy(&data);
-    let tree_hex = text
-        .lines()
-        .find_map(|l| l.strip_prefix("tree "))
-        .ok_or_else(|| err("no tree line in commit"))?;
-    unhex(tree_hex)
-}
-
-// ─── Commands ───────────────────────────────────────────────────────────────
-
-fn cmd_init(path: &Path, quiet: bool) -> io::Result<()> {
-    let git_dir = path.join(".git");
-    // Create directories one at a time to avoid create_dir_all issues on WASI
-    for dir in &[
-        path.to_path_buf(),
-        git_dir.clone(),
-        git_dir.join("objects"),
-        git_dir.join("refs"),
-        git_dir.join("refs/heads"),
-        git_dir.join("refs/tags"),
-    ] {
-        match fs::create_dir(dir) {
-            Ok(()) => {}
-            Err(e) if e.kind() == io::ErrorKind::AlreadyExists => {}
-            Err(e) => return Err(err(&format!("mkdir {}: {}", dir.display(), e))),
-        }
-    }
-    fs::write(git_dir.join("HEAD"), "ref: refs/heads/main\n")
-        .map_err(|e| err(&format!("write HEAD: {}", e)))?;
-    fs::write(
-        git_dir.join("config"),
-        "[core]\n\trepositoryformatversion = 0\n\tfilemode = true\n\tbare = false\n",
-    )
-    .map_err(|e| err(&format!("write config: {}", e)))?;
-    if !quiet {
-        print_stdout_line(format_args!(
-            "Initialized empty Git repository in {}/.git/",
-            path.display()
-        ))?;
-    }
-    Ok(())
-}
-
-fn collect_add_paths(workdir: &Path, rel_path: &str, out: &mut Vec<String>) -> io::Result<()> {
-    if rel_path == ".git" || rel_path.starts_with(".git/") || rel_path.ends_with("/.git") {
-        return Ok(());
-    }
-
-    if rel_path == "." {
-        for entry in fs::read_dir(workdir)? {
-            let entry = entry?;
-            let name = entry
-                .file_name()
-                .to_str()
-                .ok_or_else(|| err("repository path must be utf-8"))?
-                .to_owned();
-            if name == ".git" {
-                continue;
-            }
-            collect_add_paths(workdir, &name, out)?;
-        }
-        return Ok(());
-    }
-
-    let repo_path = normalize_repo_path(rel_path)?;
-    let file_path = workdir.join(&repo_path);
-    if file_path.is_dir() {
-        for entry in fs::read_dir(&file_path)? {
-            let entry = entry?;
-            let name = entry
-                .file_name()
-                .to_str()
-                .ok_or_else(|| err("repository path must be utf-8"))?
-                .to_owned();
-            if name == ".git" {
-                continue;
-            }
-            collect_add_paths(workdir, &format!("{repo_path}/{name}"), out)?;
-        }
-        return Ok(());
-    }
-
-    if file_path.exists() {
-        out.push(repo_path);
-    }
-    Ok(())
-}
-
-fn cmd_add(workdir: &Path, paths: &[String]) -> io::Result<()> {
-    let git_dir = workdir.join(".git");
-    let mut entries = read_index(&git_dir).map_err(|e| {
-        err(&format!(
-            "cannot read index at {}: {}",
-            git_dir.display(),
-            e
-        ))
-    })?;
-
-    for rel_path in paths {
-        let mut repo_paths = Vec::new();
-        collect_add_paths(workdir, rel_path, &mut repo_paths)?;
-        if repo_paths.is_empty() {
-            return Err(err(&format!(
-                "pathspec '{}' did not match any files",
-                rel_path
-            )));
-        }
-        for repo_path in repo_paths {
-            let file_path = workdir.join(&repo_path);
-            if !file_path.exists() {
-                return Err(err(&format!(
-                    "pathspec '{}' did not match any files (looked at {})",
-                    rel_path,
-                    file_path.display()
-                )));
-            }
-            let content = read_file_limited(&file_path, MAX_GIT_OBJECT_BYTES, "file")?;
-            let hash = hash_object(&git_dir, "blob", &content)?;
-
-            entries.retain(|e| e.name != repo_path);
-            entries.push(IndexEntry {
-                mode: 0o100644,
-                sha1: hash,
-                name: repo_path,
-            });
-        }
-    }
-
-    entries.sort_by(|a, b| a.name.cmp(&b.name));
-    write_index(&git_dir, &entries)
-}
-
-fn cmd_commit(workdir: &Path, message: &str) -> io::Result<()> {
-    let git_dir = workdir.join(".git");
-    let entries = read_index(&git_dir)?;
-    if entries.is_empty() {
-        return Err(err("nothing to commit"));
-    }
-
-    let tree_hash = build_tree(&git_dir, &entries)?;
-    let parent = resolve_head(&git_dir)?;
-
-    let name = std::env::var("GIT_AUTHOR_NAME")
-        .or_else(|_| std::env::var("GIT_COMMITTER_NAME"))
-        .unwrap_or_else(|_| "secure-exec".to_string());
-    let email = std::env::var("GIT_AUTHOR_EMAIL")
-        .or_else(|_| std::env::var("GIT_COMMITTER_EMAIL"))
-        .unwrap_or_else(|_| "agent@os".to_string());
-    let timestamp = std::time::SystemTime::now()
-        .duration_since(std::time::UNIX_EPOCH)
-        .map(|d| d.as_secs())
-        .unwrap_or(1700000000);
-
-    let mut commit = String::new();
-    commit.push_str(&format!("tree {}\n", hex(&tree_hash)));
-    if let Some(p) = parent {
-        commit.push_str(&format!("parent {}\n", hex(&p)));
-    }
-    commit.push_str(&format!(
-        "author {} <{}> {} +0000\n",
-        name, email, timestamp
-    ));
-    commit.push_str(&format!(
-        "committer {} <{}> {} +0000\n",
-        name, email, timestamp
-    ));
-    commit.push_str(&format!("\n{}\n", message));
-
-    let commit_hash = hash_object(&git_dir, "commit", commit.as_bytes())?;
-
-    // Update the ref that HEAD points to
-    let head_content = fs::read_to_string(git_dir.join("HEAD"))?;
-    let head_content = head_content.trim();
-    if let Some(refname) = head_content.strip_prefix("ref: ") {
-        update_ref(&git_dir, refname, &commit_hash)?;
-    } else {
-        fs::write(git_dir.join("HEAD"), format!("{}\n", hex(&commit_hash)))?;
-    }
-
-    Ok(())
-}
-
-fn cmd_rev_parse(workdir: &Path, args: &[String]) -> io::Result<()> {
-    let git_dir = workdir.join(".git");
-    if args.len() != 1 {
-        return Err(err("usage: git rev-parse <ref>"));
-    }
-
-    let hash = resolve_ref(&git_dir, &args[0])?.ok_or_else(|| {
-        err(&format!(
-            "unknown revision or path not in the working tree: {}",
-            args[0]
-        ))
-    })?;
-    print_stdout_line(format_args!("{}", hex(&hash)))
-}
-
-fn cmd_branch(workdir: &Path) -> io::Result<()> {
-    let git_dir = workdir.join(".git");
-    let heads_dir = git_dir.join("refs/heads");
-    let current = head_branch(&git_dir)?;
-
-    let mut branches: Vec<String> = Vec::new();
-    if heads_dir.exists() {
-        for entry in fs::read_dir(&heads_dir)? {
-            let entry = entry?;
-            let name = entry.file_name().to_string_lossy().to_string();
-            if name == "." || name == ".." {
-                continue;
-            }
-            if entry.file_type()?.is_file() {
-                branches.push(name);
-            }
-        }
-    }
-    branches.sort();
-
-    for branch in &branches {
-        if Some(branch.as_str()) == current.as_deref() {
-            print_stdout_line(format_args!("* {}", branch))?;
-        } else {
-            print_stdout_line(format_args!("  {}", branch))?;
-        }
-    }
-
-    Ok(())
-}
-
-fn cmd_checkout(workdir: &Path, target: &str, create_branch: bool) -> io::Result<()> {
-    let git_dir = workdir.join(".git");
-
-    if create_branch {
-        validate_branch_name(target)?;
-        let head = resolve_head(&git_dir)?.ok_or_else(|| err("HEAD not found for new branch"))?;
-        update_ref(&git_dir, &format!("refs/heads/{}", target), &head)?;
-        fs::write(
-            git_dir.join("HEAD"),
-            format!("ref: refs/heads/{}\n", target),
-        )?;
-        return Ok(());
-    }
-
-    // Resolve target: local branch first, then DWIM remote tracking
-    validate_branch_name(target)?;
-    let branch_ref = format!("refs/heads/{}", target);
-    let commit_hash = if let Some(h) = resolve_ref(&git_dir, &branch_ref)? {
-        fs::write(git_dir.join("HEAD"), format!("ref: {}\n", branch_ref))?;
-        h
-    } else {
-        let remote_ref = format!("refs/remotes/origin/{}", target);
-        if let Some(h) = resolve_ref(&git_dir, &remote_ref)? {
-            update_ref(&git_dir, &branch_ref, &h)?;
-            fs::write(git_dir.join("HEAD"), format!("ref: {}\n", branch_ref))?;
-            h
-        } else {
-            return Err(err(&format!(
-                "pathspec '{}' did not match any branch",
-                target
-            )));
-        }
-    };
-
-    // Read target tree
-    let tree_hash = commit_tree(&git_dir, &commit_hash)?;
-    let new_entries = read_tree_entries(&git_dir, &tree_hash, "")?;
-
-    // Clean up files from current index that aren't in target
-    let old_entries = read_index(&git_dir)?;
-    let new_names: HashSet<&str> = new_entries.iter().map(|e| e.name.as_str()).collect();
-    for old in &old_entries {
-        if !new_names.contains(old.name.as_str()) {
-            let p = worktree_path(workdir, &old.name)?;
-            if p.exists() {
-                fs::remove_file(&p).map_err(|e| err(&format!("remove {}: {}", p.display(), e)))?;
-            }
-        }
-    }
-
-    // Write files from target tree
-    for entry in &new_entries {
-        let p = worktree_path(workdir, &entry.name)?;
-        if let Some(parent) = p.parent() {
-            mkdirs(parent)?;
-        }
-        let (_, blob) = read_object(&git_dir, &entry.sha1)?;
-        fs::write(&p, &blob)?;
-    }
-
-    // Update index
-    write_index(&git_dir, &new_entries)?;
-
-    Ok(())
-}
-
-fn cmd_clone_local(source: &Path, dest: &Path) -> io::Result<()> {
-    let src_git = source.join(".git");
-    if !src_git.is_dir() {
-        return Err(err(&format!(
-            "'{}' does not appear to be a git repository",
-            source.display()
-        )));
-    }
-
-    if dest.exists() && !dir_is_empty(dest)? {
-        return Err(err(&format!(
-            "destination path '{}' already exists and is not an empty directory",
-            dest.display()
-        )));
-    }
-
-    mkdirs(dest)?;
-
-    let dst_git = dest.join(".git");
-
-    // Init destination
-    mkdirs(&dst_git.join("objects"))?;
-    mkdirs(&dst_git.join("refs/heads"))?;
-    mkdirs(&dst_git.join("refs/tags"))?;
-    mkdirs(&dst_git.join("refs/remotes/origin"))?;
-
-    // Copy all objects
-    copy_dir_recursive(&src_git.join("objects"), &dst_git.join("objects"))?;
-
-    // Create remote tracking branches from source heads
-    let src_heads = src_git.join("refs/heads");
-    if src_heads.exists() {
-        copy_dir_recursive(&src_heads, &dst_git.join("refs/remotes/origin"))?;
-    }
-
-    // Determine default branch from source HEAD
-    let src_head = fs::read_to_string(src_git.join("HEAD"))?;
-    let src_head = src_head.trim();
-    let default_branch = src_head
-        .strip_prefix("ref: refs/heads/")
-        .unwrap_or("main")
-        .to_string();
-    validate_branch_name(&default_branch)?;
-
-    // Create local branch for default
-    let remote_ref = format!("refs/remotes/origin/{}", default_branch);
-    let mut has_default_branch = false;
-    if let Some(hash) = resolve_ref(&dst_git, &remote_ref)? {
-        update_ref(&dst_git, &format!("refs/heads/{}", default_branch), &hash)?;
-        has_default_branch = true;
-    }
-
-    // Set HEAD and write config
-    fs::write(
-        dst_git.join("HEAD"),
-        format!("ref: refs/heads/{}\n", default_branch),
-    )?;
-    fs::write(
-        dst_git.join("config"),
-        format!(
-            "[core]\n\trepositoryformatversion = 0\n\tfilemode = true\n\tbare = false\n\
-             [remote \"origin\"]\n\turl = {}\n\tfetch = +refs/heads/*:refs/remotes/origin/*\n",
-            source.display()
-        ),
-    )?;
-
-    // Checkout working tree
-    if has_default_branch {
-        cmd_checkout(dest, &default_branch, false)?;
-    }
-
-    Ok(())
-}
-
-fn copy_dir_recursive(src: &Path, dst: &Path) -> io::Result<()> {
-    mkdirs(dst)?;
-    if !src.exists() {
-        return Ok(());
-    }
-    for entry in fs::read_dir(src)? {
-        let entry = entry?;
-        let name = entry.file_name().to_string_lossy().to_string();
-        if name == "." || name == ".." {
-            continue;
-        }
-        let dst_path = dst.join(entry.file_name());
-        if entry.file_type()?.is_dir() {
-            copy_dir_recursive(&entry.path(), &dst_path)?;
-        } else {
-            let content = read_file_limited(
-                &entry.path(),
-                MAX_GIT_OBJECT_BYTES + MAX_GIT_OBJECT_HEADER_BYTES,
-                "git repository file",
-            )?;
-            fs::write(&dst_path, content)?;
-        }
-    }
-    Ok(())
-}
-
-// ─── Entry point ────────────────────────────────────────────────────────────
-
-pub fn main(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-    match run(&str_args) {
-        Ok(()) => 0,
-        Err(e) => {
-            eprintln!("fatal: {}", e);
-            128
-        }
-    }
-}
-
-fn run(args: &[String]) -> io::Result<()> {
-    let mut i = 1; // skip argv[0]
-    let mut workdir = std::env::current_dir().unwrap_or_else(|_| PathBuf::from("/"));
-
-    // Parse global options
-    while i < args.len() {
-        if args[i] == "-C" {
-            i += 1;
-            if i >= args.len() {
-                return Err(err("-C requires a directory argument"));
-            }
-            let p = PathBuf::from(&args[i]);
-            workdir = if p.is_absolute() { p } else { workdir.join(p) };
-            i += 1;
-        } else if args[i] == "-c" {
-            i += 1;
-            if i >= args.len() {
-                return Err(err("-c requires a config assignment"));
-            }
-            i += 1;
-        } else {
-            break;
-        }
-    }
-
-    if i >= args.len() {
-        eprintln!("usage: git <command> [<args>]");
-        return Err(err("no subcommand"));
-    }
-
-    let subcmd = &args[i];
-    let sub_args = &args[i + 1..];
-
-    match subcmd.as_str() {
-        "init" => {
-            let mut path_arg = None;
-            let mut quiet = false;
-            for arg in sub_args {
-                if arg == "-q" || arg == "--quiet" {
-                    quiet = true;
-                    continue;
-                }
-                if arg.starts_with('-') {
-                    return Err(unsupported("init", &format!("does not support `{}`.", arg)));
-                }
-                if path_arg.replace(arg).is_some() {
-                    return Err(err("usage: git init [<path>]"));
-                }
-            }
-            let path = if let Some(path_arg) = path_arg {
-                let p = PathBuf::from(path_arg);
-                if p.is_absolute() {
-                    p
-                } else {
-                    workdir.join(p)
-                }
-            } else {
-                workdir
-            };
-            cmd_init(&path, quiet)
-        }
-        "add" => {
-            if sub_args.is_empty() {
-                return Err(err("nothing specified, nothing added"));
-            }
-            let paths: Vec<String> = sub_args.iter().map(|s| s.to_string()).collect();
-            cmd_add(&workdir, &paths)
-        }
-        "commit" => {
-            let mut message = None;
-            let mut j = 0;
-            while j < sub_args.len() {
-                if sub_args[j] == "-m" && j + 1 < sub_args.len() {
-                    message = Some(sub_args[j + 1].clone());
-                    j += 2;
-                } else {
-                    j += 1;
-                }
-            }
-            let msg = message.ok_or_else(|| err("no commit message (-m)"))?;
-            cmd_commit(&workdir, &msg)
-        }
-        "branch" => cmd_branch(&workdir),
-        "rev-parse" => cmd_rev_parse(&workdir, sub_args),
-        "checkout" => {
-            let mut create = false;
-            let mut target = None;
-            for arg in sub_args {
-                if arg == "-b" {
-                    create = true;
-                } else if !arg.starts_with('-') {
-                    target = Some(arg.clone());
-                }
-            }
-            let t = target.ok_or_else(|| err("no branch name specified"))?;
-            cmd_checkout(&workdir, &t, create)
-        }
-        "clone" => {
-            if sub_args.is_empty() || sub_args.len() > 2 {
-                return Err(err("usage: git clone <source> [<destination>]"));
-            }
-            let src_arg = &sub_args[0];
-            if is_ssh_clone_source(src_arg) {
-                return Err(unsupported(
-                    "clone",
-                    &format!("does not support SSH or git:// remotes (`{}`).", src_arg),
-                ));
-            }
-            if has_http_auth(src_arg) {
-                return Err(unsupported(
-                    "clone",
-                    &format!(
-                        "does not support authenticated HTTP(S) remotes (`{}`).",
-                        src_arg
-                    ),
-                ));
-            }
-            let dst_arg = if sub_args.len() == 2 {
-                sub_args[1].clone()
-            } else {
-                infer_clone_destination(src_arg)?
-            };
-            let dst = PathBuf::from(&dst_arg);
-            let dst = if dst.is_absolute() {
-                dst
-            } else {
-                workdir.join(dst)
-            };
-            print_stdout_line(format_args!("Cloning into '{}'...", dst.display()))?;
-            if is_remote_source(src_arg) {
-                cmd_clone_remote(src_arg, &dst)
-            } else {
-                let src = PathBuf::from(src_arg);
-                let src = if src.is_absolute() {
-                    src
-                } else {
-                    workdir.join(src)
-                };
-                cmd_clone_local(&src, &dst)
-            }
-        }
-        other => Err(unsupported(
-            other,
-            "is not implemented in the secure-exec VM git command.",
-        )),
-    }
-}
diff --git a/registry/native/crates/libs/grep/Cargo.toml b/registry/native/crates/libs/grep/Cargo.toml
deleted file mode 100644
index 3cf619a9c..000000000
--- a/registry/native/crates/libs/grep/Cargo.toml
+++ /dev/null
@@ -1,9 +0,0 @@
-[package]
-name = "secureexec-grep"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "grep/egrep/fgrep/rg implementations for secure-exec standalone binaries"
-
-[dependencies]
-regex = "1"
diff --git a/registry/native/crates/libs/grep/src/lib.rs b/registry/native/crates/libs/grep/src/lib.rs
deleted file mode 100644
index c42db0e8a..000000000
--- a/registry/native/crates/libs/grep/src/lib.rs
+++ /dev/null
@@ -1,623 +0,0 @@
-//! grep implementation using the regex crate (ripgrep's pure Rust regex engine).
-//!
-//! Supports grep, egrep (grep -E), and fgrep (grep -F) modes.
-//! Dispatches on argv[0] basename for standalone binary usage.
-
-mod rg_cmd;
-
-use std::ffi::OsString;
-use std::io::{self, BufRead, Read, Write};
-use std::path::Path;
-
-use regex::Regex;
-
-const MAX_INPUT_LINE_BYTES: usize = 16 * 1024 * 1024;
-const MAX_PATTERN_BYTES: usize = 16 * 1024 * 1024;
-const MAX_PATTERNS: usize = 100_000;
-
-/// Unified grep entry point. Dispatches on argv[0]:
-/// - "egrep" -> Extended mode
-/// - "fgrep" -> Fixed mode
-/// - default -> Basic mode
-pub fn main(args: Vec<OsString>) -> i32 {
-    let mode = match args.first().and_then(|a| Path::new(a).file_name()) {
-        Some(name) if name == "egrep" => GrepMode::Extended,
-        Some(name) if name == "fgrep" => GrepMode::Fixed,
-        _ => GrepMode::Basic,
-    };
-    run_grep(args, mode)
-}
-
-/// Entry point for grep command (Basic mode).
-pub fn grep(args: Vec<OsString>) -> i32 {
-    run_grep(args, GrepMode::Basic)
-}
-
-/// Entry point for egrep command (Extended regex).
-pub fn egrep(args: Vec<OsString>) -> i32 {
-    run_grep(args, GrepMode::Extended)
-}
-
-/// Entry point for fgrep command (Fixed strings).
-pub fn fgrep(args: Vec<OsString>) -> i32 {
-    run_grep(args, GrepMode::Fixed)
-}
-
-/// Entry point for rg command.
-pub fn rg(args: Vec<OsString>) -> i32 {
-    rg_cmd::rg(args)
-}
-
-/// grep mode determines how patterns are interpreted.
-#[derive(Clone, Copy, PartialEq)]
-enum GrepMode {
-    /// Basic regular expressions (default grep)
-    Basic,
-    /// Extended regular expressions (egrep / grep -E)
-    Extended,
-    /// Fixed strings (fgrep / grep -F)
-    Fixed,
-}
-
-struct GrepOptions {
-    mode: GrepMode,
-    ignore_case: bool,
-    invert_match: bool,
-    count_only: bool,
-    files_with_matches: bool,
-    files_without_matches: bool,
-    line_numbers: bool,
-    word_regexp: bool,
-    line_regexp: bool,
-    max_count: Option<usize>,
-    quiet: bool,
-    patterns: Vec<String>,
-    pattern_bytes: usize,
-    files: Vec<String>,
-}
-
-impl GrepOptions {
-    fn new(mode: GrepMode) -> Self {
-        Self {
-            mode,
-            ignore_case: false,
-            invert_match: false,
-            count_only: false,
-            files_with_matches: false,
-            files_without_matches: false,
-            line_numbers: false,
-            word_regexp: false,
-            line_regexp: false,
-            max_count: None,
-            quiet: false,
-            patterns: Vec::new(),
-            pattern_bytes: 0,
-            files: Vec::new(),
-        }
-    }
-}
-
-fn run_grep(args: Vec<OsString>, default_mode: GrepMode) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1) // skip argv[0]
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    let opts = match parse_args(&str_args, default_mode) {
-        Ok(opts) => opts,
-        Err(msg) => {
-            eprintln!("grep: {}", msg);
-            return 2;
-        }
-    };
-
-    if opts.patterns.is_empty() {
-        eprintln!("grep: no pattern specified");
-        return 2;
-    }
-
-    let regex = match build_regex(&opts) {
-        Ok(r) => r,
-        Err(msg) => {
-            eprintln!("grep: {}", msg);
-            return 2;
-        }
-    };
-
-    let multiple_files = opts.files.len() > 1;
-    let mut any_match = false;
-    let mut had_error = false;
-
-    if opts.files.is_empty() {
-        // Read from stdin
-        let stdin = io::stdin();
-        let reader = stdin.lock();
-        match search_reader(reader, None, &regex, &opts, multiple_files) {
-            Ok(found) => any_match |= found,
-            Err(e) => {
-                eprintln!("grep: {}", e);
-                had_error = true;
-            }
-        }
-    } else {
-        for file in &opts.files {
-            if file == "-" {
-                let stdin = io::stdin();
-                let reader = stdin.lock();
-                let label = if multiple_files {
-                    Some("(standard input)")
-                } else {
-                    None
-                };
-                match search_reader(reader, label, &regex, &opts, multiple_files) {
-                    Ok(found) => any_match |= found,
-                    Err(e) => {
-                        eprintln!("grep: {}: {}", file, e);
-                        had_error = true;
-                    }
-                }
-            } else {
-                match std::fs::File::open(file) {
-                    Ok(f) => {
-                        let reader = io::BufReader::new(f);
-                        let label = if multiple_files {
-                            Some(file.as_str())
-                        } else {
-                            None
-                        };
-                        match search_reader(reader, label, &regex, &opts, multiple_files) {
-                            Ok(found) => any_match |= found,
-                            Err(e) => {
-                                eprintln!("grep: {}: {}", file, e);
-                                had_error = true;
-                            }
-                        }
-                    }
-                    Err(e) => {
-                        eprintln!("grep: {}: {}", file, e);
-                        had_error = true;
-                    }
-                }
-            }
-        }
-    }
-
-    if had_error {
-        2
-    } else if any_match {
-        0
-    } else {
-        1
-    }
-}
-
-fn parse_args(args: &[String], default_mode: GrepMode) -> Result<GrepOptions, String> {
-    let mut opts = GrepOptions::new(default_mode);
-    let mut i = 0;
-    let mut pattern_from_args = false;
-
-    while i < args.len() {
-        let arg = &args[i];
-
-        if arg == "--" {
-            i += 1;
-            // Remaining args are files (or first is pattern if none yet)
-            break;
-        }
-
-        if arg.starts_with('-') && arg.len() > 1 && !arg.starts_with("--") {
-            let chars: Vec<char> = arg[1..].chars().collect();
-            let mut j = 0;
-            while j < chars.len() {
-                match chars[j] {
-                    'E' => opts.mode = GrepMode::Extended,
-                    'F' => opts.mode = GrepMode::Fixed,
-                    'G' => opts.mode = GrepMode::Basic,
-                    'i' | 'y' => opts.ignore_case = true,
-                    'v' => opts.invert_match = true,
-                    'c' => opts.count_only = true,
-                    'l' => opts.files_with_matches = true,
-                    'L' => opts.files_without_matches = true,
-                    'n' => opts.line_numbers = true,
-                    'w' => opts.word_regexp = true,
-                    'x' => opts.line_regexp = true,
-                    'q' | 's' => opts.quiet = true,
-                    'h' => {} // suppress filename (handled by multiple_files logic)
-                    'H' => {} // force filename
-                    'e' => {
-                        // -e PATTERN (rest of this flag group or next arg)
-                        let rest: String = chars[j + 1..].iter().collect();
-                        if !rest.is_empty() {
-                            push_pattern(&mut opts, rest)?;
-                            pattern_from_args = true;
-                            j = chars.len(); // consumed rest
-                            continue;
-                        } else {
-                            i += 1;
-                            if i >= args.len() {
-                                return Err("option requires an argument -- 'e'".to_string());
-                            }
-                            push_pattern(&mut opts, args[i].clone())?;
-                            pattern_from_args = true;
-                            j = chars.len();
-                            continue;
-                        }
-                    }
-                    'f' => {
-                        i += 1;
-                        if i >= args.len() {
-                            return Err("option requires an argument -- 'f'".to_string());
-                        }
-                        read_patterns_from_file(&mut opts, &args[i])?;
-                        pattern_from_args = true;
-                        j = chars.len();
-                        continue;
-                    }
-                    'm' => {
-                        i += 1;
-                        if i >= args.len() {
-                            return Err("option requires an argument -- 'm'".to_string());
-                        }
-                        opts.max_count = Some(
-                            args[i]
-                                .parse()
-                                .map_err(|_| format!("invalid max count '{}'", args[i]))?,
-                        );
-                        j = chars.len();
-                        continue;
-                    }
-                    _ => {
-                        return Err(format!("invalid option -- '{}'", chars[j]));
-                    }
-                }
-                j += 1;
-            }
-        } else if arg.starts_with("--") {
-            match arg.as_str() {
-                "--extended-regexp" => opts.mode = GrepMode::Extended,
-                "--fixed-strings" => opts.mode = GrepMode::Fixed,
-                "--basic-regexp" => opts.mode = GrepMode::Basic,
-                "--ignore-case" => opts.ignore_case = true,
-                "--invert-match" => opts.invert_match = true,
-                "--count" => opts.count_only = true,
-                "--files-with-matches" => opts.files_with_matches = true,
-                "--files-without-match" => opts.files_without_matches = true,
-                "--line-number" => opts.line_numbers = true,
-                "--word-regexp" => opts.word_regexp = true,
-                "--line-regexp" => opts.line_regexp = true,
-                "--quiet" | "--silent" => opts.quiet = true,
-                _ if arg.starts_with("--regexp=") => {
-                    push_pattern(&mut opts, arg[9..].to_string())?;
-                    pattern_from_args = true;
-                }
-                _ if arg.starts_with("--max-count=") => {
-                    opts.max_count = Some(
-                        arg[12..]
-                            .parse()
-                            .map_err(|_| format!("invalid max count '{}'", &arg[12..]))?,
-                    );
-                }
-                _ => {
-                    return Err(format!("unrecognized option '{}'", arg));
-                }
-            }
-        } else {
-            // Positional argument: first is pattern (if no -e), rest are files
-            if !pattern_from_args && opts.patterns.is_empty() {
-                push_pattern(&mut opts, arg.clone())?;
-                pattern_from_args = true;
-            } else {
-                opts.files.push(arg.clone());
-            }
-        }
-        i += 1;
-    }
-
-    // Remaining args after --
-    while i < args.len() {
-        if !pattern_from_args && opts.patterns.is_empty() {
-            push_pattern(&mut opts, args[i].clone())?;
-            pattern_from_args = true;
-        } else {
-            opts.files.push(args[i].clone());
-        }
-        i += 1;
-    }
-
-    Ok(opts)
-}
-
-fn push_pattern(opts: &mut GrepOptions, pattern: String) -> Result<(), String> {
-    if opts.patterns.len() >= MAX_PATTERNS {
-        return Err("too many patterns".to_string());
-    }
-    let next_bytes = opts
-        .pattern_bytes
-        .checked_add(pattern.len())
-        .ok_or_else(|| "pattern data too large".to_string())?;
-    if next_bytes > MAX_PATTERN_BYTES {
-        return Err("pattern data exceeds size limit".to_string());
-    }
-    opts.pattern_bytes = next_bytes;
-    opts.patterns.push(pattern);
-    Ok(())
-}
-
-fn read_patterns_from_file(opts: &mut GrepOptions, path: &str) -> Result<(), String> {
-    let metadata = std::fs::metadata(path).map_err(|e| format!("{}: {}", path, e))?;
-    if metadata.len() > MAX_PATTERN_BYTES as u64 {
-        return Err(format!("{}: pattern file exceeds size limit", path));
-    }
-    let file = std::fs::File::open(path).map_err(|e| format!("{}: {}", path, e))?;
-    let limit = MAX_PATTERN_BYTES
-        .checked_add(1)
-        .ok_or_else(|| "pattern file size limit is too large".to_string())?;
-    let mut content = String::new();
-    file.take(limit as u64)
-        .read_to_string(&mut content)
-        .map_err(|e| format!("{}: {}", path, e))?;
-    if content.len() > MAX_PATTERN_BYTES {
-        return Err(format!("{}: pattern file exceeds size limit", path));
-    }
-    for line in content.lines() {
-        if !line.is_empty() {
-            push_pattern(opts, line.to_string())?;
-        }
-    }
-    Ok(())
-}
-
-/// Build a compiled regex from the grep options.
-fn build_regex(opts: &GrepOptions) -> Result<Regex, String> {
-    let pattern = if opts.patterns.len() == 1 {
-        build_single_pattern(&opts.patterns[0], opts)
-    } else {
-        // Multiple patterns: combine with alternation
-        let parts: Vec<String> = opts
-            .patterns
-            .iter()
-            .map(|p| format!("(?:{})", build_single_pattern(p, opts)))
-            .collect();
-        parts.join("|")
-    };
-
-    let mut builder = regex::RegexBuilder::new(&pattern);
-    builder.case_insensitive(opts.ignore_case);
-
-    builder
-        .build()
-        .map_err(|e| format!("invalid pattern: {}", e))
-}
-
-/// Convert a single pattern string to a regex pattern based on mode.
-fn build_single_pattern(pattern: &str, opts: &GrepOptions) -> String {
-    let base = match opts.mode {
-        GrepMode::Fixed => regex::escape(pattern),
-        GrepMode::Basic => convert_bre_to_ere(pattern),
-        GrepMode::Extended => pattern.to_string(),
-    };
-
-    let wrapped = if opts.word_regexp {
-        format!(r"\b(?:{})\b", base)
-    } else if opts.line_regexp {
-        format!("^(?:{})$", base)
-    } else {
-        base
-    };
-
-    wrapped
-}
-
-/// Convert POSIX Basic Regular Expression to Extended (Rust regex syntax).
-/// In BRE: \(, \), \{, \}, \+, \?, \| are special; unescaped versions are literal.
-/// In ERE (and Rust regex): (, ), {, }, +, ?, | are special without backslash.
-fn convert_bre_to_ere(bre: &str) -> String {
-    let mut result = String::with_capacity(bre.len());
-    let chars: Vec<char> = bre.chars().collect();
-    let mut i = 0;
-
-    while i < chars.len() {
-        if chars[i] == '\\' && i + 1 < chars.len() {
-            match chars[i + 1] {
-                '(' => {
-                    result.push('(');
-                    i += 2;
-                }
-                ')' => {
-                    result.push(')');
-                    i += 2;
-                }
-                '{' => {
-                    result.push('{');
-                    i += 2;
-                }
-                '}' => {
-                    result.push('}');
-                    i += 2;
-                }
-                '+' => {
-                    result.push('+');
-                    i += 2;
-                }
-                '?' => {
-                    result.push('?');
-                    i += 2;
-                }
-                '|' => {
-                    result.push('|');
-                    i += 2;
-                }
-                '1'..='9' => {
-                    // Backreference - not supported in Rust regex, pass through
-                    result.push('\\');
-                    result.push(chars[i + 1]);
-                    i += 2;
-                }
-                _ => {
-                    result.push('\\');
-                    result.push(chars[i + 1]);
-                    i += 2;
-                }
-            }
-        } else {
-            match chars[i] {
-                // In BRE, unescaped (, ), {, }, +, ? are literal
-                '(' => {
-                    result.push_str("\\(");
-                    i += 1;
-                }
-                ')' => {
-                    result.push_str("\\)");
-                    i += 1;
-                }
-                '{' => {
-                    result.push_str("\\{");
-                    i += 1;
-                }
-                '}' => {
-                    result.push_str("\\}");
-                    i += 1;
-                }
-                _ => {
-                    result.push(chars[i]);
-                    i += 1;
-                }
-            }
-        }
-    }
-
-    result
-}
-
-/// Search a reader for matching lines. Returns true if any match was found.
-fn search_reader<R: Read>(
-    reader: R,
-    filename: Option<&str>,
-    regex: &Regex,
-    opts: &GrepOptions,
-    show_filename: bool,
-) -> io::Result<bool> {
-    let mut buf_reader = io::BufReader::new(reader);
-    let mut match_count: usize = 0;
-    let mut line_num: usize = 0;
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-    let mut line_buf = Vec::new();
-
-    while let Some(line) = read_line_bounded(&mut buf_reader, &mut line_buf)? {
-        line_num += 1;
-
-        let is_match = regex.is_match(&line);
-        let is_match = if opts.invert_match {
-            !is_match
-        } else {
-            is_match
-        };
-
-        if is_match {
-            match_count += 1;
-
-            if opts.quiet {
-                return Ok(true);
-            }
-
-            if opts.files_with_matches {
-                if let Some(name) = filename {
-                    writeln!(out, "{}", name)?;
-                } else {
-                    writeln!(out, "(standard input)")?;
-                }
-                out.flush()?;
-                return Ok(true);
-            }
-
-            if !opts.count_only && !opts.files_without_matches {
-                let prefix = match (show_filename, filename, opts.line_numbers) {
-                    (true, Some(name), true) => format!("{}:{}:", name, line_num),
-                    (true, Some(name), false) => format!("{}:", name),
-                    (_, _, true) => format!("{}:", line_num),
-                    _ => String::new(),
-                };
-                writeln!(out, "{}{}", prefix, line)?;
-            }
-
-            if let Some(max) = opts.max_count {
-                if match_count >= max {
-                    break;
-                }
-            }
-        }
-    }
-
-    if opts.count_only && !opts.quiet {
-        if show_filename {
-            if let Some(name) = filename {
-                writeln!(out, "{}:{}", name, match_count)?;
-            } else {
-                writeln!(out, "{}", match_count)?;
-            }
-        } else {
-            writeln!(out, "{}", match_count)?;
-        }
-    }
-
-    if opts.files_without_matches && match_count == 0 {
-        if let Some(name) = filename {
-            writeln!(out, "{}", name)?;
-        } else {
-            writeln!(out, "(standard input)")?;
-        }
-    }
-
-    out.flush()?;
-
-    Ok(match_count > 0)
-}
-
-fn read_line_bounded<R: BufRead>(
-    reader: &mut R,
-    line_buf: &mut Vec<u8>,
-) -> io::Result<Option<String>> {
-    line_buf.clear();
-
-    loop {
-        let available = reader.fill_buf()?;
-        if available.is_empty() {
-            if line_buf.is_empty() {
-                return Ok(None);
-            }
-            break;
-        }
-
-        let newline = available.iter().position(|&b| b == b'\n');
-        let take = newline.map_or(available.len(), |pos| pos + 1);
-        let next_len = line_buf
-            .len()
-            .checked_add(take)
-            .ok_or_else(|| io::Error::new(io::ErrorKind::InvalidData, "input line too long"))?;
-        if next_len > MAX_INPUT_LINE_BYTES {
-            return Err(io::Error::new(
-                io::ErrorKind::InvalidData,
-                "input line exceeds size limit",
-            ));
-        }
-
-        line_buf.extend_from_slice(&available[..take]);
-        reader.consume(take);
-        if newline.is_some() {
-            break;
-        }
-    }
-
-    if line_buf.ends_with(b"\n") {
-        line_buf.pop();
-        if line_buf.ends_with(b"\r") {
-            line_buf.pop();
-        }
-    }
-
-    String::from_utf8(line_buf.clone())
-        .map(Some)
-        .map_err(|e| io::Error::new(io::ErrorKind::InvalidData, e))
-}
diff --git a/registry/native/crates/libs/grep/src/rg_cmd.rs b/registry/native/crates/libs/grep/src/rg_cmd.rs
deleted file mode 100644
index 9449f3c67..000000000
--- a/registry/native/crates/libs/grep/src/rg_cmd.rs
+++ /dev/null
@@ -1,1142 +0,0 @@
-//! rg (ripgrep) implementation using the regex crate (ripgrep's pure Rust regex engine).
-//!
-//! Provides ripgrep-compatible search. Uses the same regex engine as ripgrep.
-//! POSIX grep/egrep/fgrep remain in lib.rs for BRE/ERE/fixed string compatibility.
-
-use std::collections::{HashSet, VecDeque};
-use std::ffi::OsString;
-use std::io::{self, BufRead, Read, Write};
-use std::path::{Path, PathBuf};
-
-use regex::{Regex, RegexBuilder};
-
-const MAX_CONTEXT_LINES: usize = 100_000;
-const MAX_CONTEXT_BYTES: usize = 16 * 1024 * 1024;
-const MAX_FILE_RESULTS: usize = 1_000_000;
-const MAX_INPUT_LINE_BYTES: usize = 16 * 1024 * 1024;
-const MAX_PATTERN_BYTES: usize = 16 * 1024 * 1024;
-const MAX_PATTERNS: usize = 100_000;
-
-/// Entry point for rg command.
-pub fn rg(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    match run(&str_args) {
-        Ok(code) => code,
-        Err(msg) => {
-            eprintln!("rg: {}", msg);
-            2
-        }
-    }
-}
-
-struct Options {
-    patterns: Vec<String>,
-    paths: Vec<String>,
-    files_mode: bool,
-    ignore_case: bool,
-    smart_case: bool,
-    invert_match: bool,
-    count_only: bool,
-    files_with_matches: bool,
-    files_without_matches: bool,
-    line_numbers: Option<bool>,
-    word_regexp: bool,
-    line_regexp: bool,
-    fixed_strings: bool,
-    max_count: Option<usize>,
-    quiet: bool,
-    only_matching: bool,
-    after_context: usize,
-    before_context: usize,
-    show_filename: Option<bool>,
-    hidden: bool,
-    max_depth: Option<usize>,
-    sort_modified: bool,
-    glob_patterns: Vec<String>,
-    pattern_bytes: usize,
-    type_include: Vec<String>,
-    type_exclude: Vec<String>,
-}
-
-impl Options {
-    fn new() -> Self {
-        Self {
-            patterns: Vec::new(),
-            paths: Vec::new(),
-            files_mode: false,
-            ignore_case: false,
-            smart_case: true,
-            invert_match: false,
-            count_only: false,
-            files_with_matches: false,
-            files_without_matches: false,
-            line_numbers: None,
-            word_regexp: false,
-            line_regexp: false,
-            fixed_strings: false,
-            max_count: None,
-            quiet: false,
-            only_matching: false,
-            after_context: 0,
-            before_context: 0,
-            show_filename: None,
-            hidden: false,
-            max_depth: None,
-            sort_modified: false,
-            glob_patterns: Vec::new(),
-            pattern_bytes: 0,
-            type_include: Vec::new(),
-            type_exclude: Vec::new(),
-        }
-    }
-
-    fn show_line_numbers(&self) -> bool {
-        self.line_numbers.unwrap_or(true)
-    }
-
-    fn resolve_show_filename(&self, multi: bool) -> bool {
-        self.show_filename.unwrap_or(multi)
-    }
-
-    fn has_context(&self) -> bool {
-        self.before_context > 0 || self.after_context > 0
-    }
-}
-
-fn run(args: &[String]) -> Result<i32, String> {
-    if args.len() == 1 && (args[0] == "--version" || args[0] == "-V") {
-        let stdout = io::stdout();
-        let mut out = stdout.lock();
-        writeln!(out, "ripgrep 14.1.0 (secure-exec)").map_err(|e| e.to_string())?;
-        out.flush().map_err(|e| e.to_string())?;
-        return Ok(0);
-    }
-
-    let opts = parse_args(args)?;
-
-    if opts.files_mode {
-        let paths = if opts.paths.is_empty() {
-            vec![".".to_string()]
-        } else {
-            opts.paths.clone()
-        };
-
-        let files = collect_files_from_paths(&paths, &opts).map_err(|e| e.to_string())?;
-        let stdout = io::stdout();
-        let mut out = stdout.lock();
-        for path in files {
-            writeln!(out, "{}", path.to_string_lossy()).map_err(|e| e.to_string())?;
-        }
-        out.flush().map_err(|e| e.to_string())?;
-        return Ok(0);
-    }
-
-    if opts.patterns.is_empty() {
-        return Err("no pattern provided".to_string());
-    }
-
-    let regex = build_regex(&opts)?;
-
-    if opts.paths.is_empty() {
-        // No paths: read from stdin
-        let stdin = io::stdin();
-        let stdout = io::stdout();
-        let mut out = stdout.lock();
-        let result = search_stream(stdin.lock(), &regex, &opts, None, false, &mut out)
-            .map_err(|e| e.to_string())?;
-        if opts.quiet {
-            return Ok(if result.matches > 0 { 0 } else { 1 });
-        }
-        print_file_result(None, &result, &opts, &mut out).map_err(|e| e.to_string())?;
-        out.flush().map_err(|e| e.to_string())?;
-        return Ok(if result.matches > 0 { 0 } else { 1 });
-    }
-
-    let files = collect_files_from_paths(&opts.paths, &opts).map_err(|e| e.to_string())?;
-    let multi = files.len() > 1;
-    let show_fn = opts.resolve_show_filename(multi);
-    let mut any_match = false;
-    let mut had_error = false;
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-
-    for path in &files {
-        match std::fs::File::open(path) {
-            Ok(f) => {
-                let reader = io::BufReader::new(f);
-                let fname = if show_fn {
-                    Some(path.to_string_lossy().to_string())
-                } else {
-                    None
-                };
-                let result =
-                    match search_stream(reader, &regex, &opts, fname.as_deref(), show_fn, &mut out)
-                    {
-                        Ok(result) => result,
-                        Err(e) => {
-                            eprintln!("rg: {}: {}", path.display(), e);
-                            had_error = true;
-                            continue;
-                        }
-                    };
-                if result.matches > 0 {
-                    any_match = true;
-                }
-                if opts.quiet && any_match {
-                    return Ok(0);
-                }
-                if !opts.quiet {
-                    print_file_result(fname.as_deref(), &result, &opts, &mut out)
-                        .map_err(|e| e.to_string())?;
-                }
-            }
-            Err(e) => {
-                eprintln!("rg: {}: {}", path.display(), e);
-                had_error = true;
-            }
-        }
-    }
-    out.flush().map_err(|e| e.to_string())?;
-
-    if had_error {
-        Ok(2)
-    } else if any_match {
-        Ok(0)
-    } else {
-        Ok(1)
-    }
-}
-
-// --- Argument parsing ---
-
-fn parse_args(args: &[String]) -> Result<Options, String> {
-    let mut opts = Options::new();
-    let mut i = 0;
-    let mut explicit_pattern = false;
-
-    while i < args.len() {
-        let arg = &args[i];
-
-        if arg == "--" {
-            i += 1;
-            break;
-        }
-
-        // Long options
-        if arg.starts_with("--") {
-            match arg.as_str() {
-                "--ignore-case" => opts.ignore_case = true,
-                "--case-sensitive" => {
-                    opts.ignore_case = false;
-                    opts.smart_case = false;
-                }
-                "--smart-case" => opts.smart_case = true,
-                "--invert-match" => opts.invert_match = true,
-                "--count" => opts.count_only = true,
-                "--files" => opts.files_mode = true,
-                "--files-with-matches" => opts.files_with_matches = true,
-                "--files-without-match" => opts.files_without_matches = true,
-                "--line-number" => opts.line_numbers = Some(true),
-                "--no-line-number" => opts.line_numbers = Some(false),
-                "--word-regexp" => opts.word_regexp = true,
-                "--line-regexp" => opts.line_regexp = true,
-                "--fixed-strings" => opts.fixed_strings = true,
-                "--quiet" | "--silent" => opts.quiet = true,
-                "--only-matching" => opts.only_matching = true,
-                "--hidden" | "--no-ignore" => opts.hidden = true,
-                "--follow" | "--no-ignore-vcs" | "--no-ignore-parent" => {}
-                "--with-filename" => opts.show_filename = Some(true),
-                "--no-filename" => opts.show_filename = Some(false),
-                "--no-heading" | "--heading" => {} // no-op (we always use inline format)
-                "--color=auto" | "--color=always" | "--color=never" => {} // no-op in WASI
-                "--no-color" => {}
-                _ if arg.starts_with("--color=") => {}
-                _ if arg.starts_with("--max-depth=") => {
-                    opts.max_depth = Some(
-                        arg[12..]
-                            .parse()
-                            .map_err(|_| format!("invalid number: '{}'", &arg[12..]))?,
-                    );
-                }
-                _ if arg.starts_with("--sort=") => match &arg[7..] {
-                    "modified" => opts.sort_modified = true,
-                    value => return Err(format!("unsupported sort: '{}'", value)),
-                },
-                _ if arg.starts_with("--threads=") => {}
-                _ if arg.starts_with("--regexp=") => {
-                    push_pattern(&mut opts, arg[9..].to_string())?;
-                    explicit_pattern = true;
-                }
-                _ if arg.starts_with("--max-count=") => {
-                    opts.max_count = Some(
-                        arg[12..]
-                            .parse()
-                            .map_err(|_| format!("invalid number: '{}'", &arg[12..]))?,
-                    );
-                }
-                _ if arg.starts_with("--after-context=") => {
-                    opts.after_context = parse_context_count(&arg[16..])?;
-                }
-                _ if arg.starts_with("--before-context=") => {
-                    opts.before_context = parse_context_count(&arg[17..])?;
-                }
-                _ if arg.starts_with("--context=") => {
-                    let n = parse_context_count(&arg[10..])?;
-                    opts.before_context = n;
-                    opts.after_context = n;
-                }
-                _ if arg.starts_with("--glob=") => {
-                    opts.glob_patterns.push(arg[7..].to_string());
-                }
-                _ if arg.starts_with("--type=") => {
-                    opts.type_include.push(arg[7..].to_string());
-                }
-                _ if arg.starts_with("--type-not=") => {
-                    opts.type_exclude.push(arg[11..].to_string());
-                }
-                "--regexp" | "--max-count" | "--after-context" | "--before-context"
-                | "--context" | "--glob" | "--type" | "--type-not" | "--file" | "--color"
-                | "--max-depth" | "--threads" => {
-                    i += 1;
-                    if i >= args.len() {
-                        return Err(format!("{} requires an argument", arg));
-                    }
-                    match arg.as_str() {
-                        "--regexp" => {
-                            push_pattern(&mut opts, args[i].clone())?;
-                            explicit_pattern = true;
-                        }
-                        "--max-count" => {
-                            opts.max_count = Some(
-                                args[i]
-                                    .parse()
-                                    .map_err(|_| format!("invalid number: '{}'", args[i]))?,
-                            );
-                        }
-                        "--after-context" => {
-                            opts.after_context = parse_context_count(&args[i])?;
-                        }
-                        "--before-context" => {
-                            opts.before_context = parse_context_count(&args[i])?;
-                        }
-                        "--context" => {
-                            let n = parse_context_count(&args[i])?;
-                            opts.before_context = n;
-                            opts.after_context = n;
-                        }
-                        "--glob" => opts.glob_patterns.push(args[i].clone()),
-                        "--type" => opts.type_include.push(args[i].clone()),
-                        "--type-not" => opts.type_exclude.push(args[i].clone()),
-                        "--file" => {
-                            read_patterns_from_file(&mut opts, &args[i])?;
-                            explicit_pattern = true;
-                        }
-                        "--color" => {} // no-op
-                        "--max-depth" => {
-                            opts.max_depth = Some(
-                                args[i]
-                                    .parse()
-                                    .map_err(|_| format!("invalid number: '{}'", args[i]))?,
-                            );
-                        }
-                        "--threads" => {} // no-op
-                        _ => unreachable!(),
-                    }
-                }
-                _ => return Err(format!("unrecognized option '{}'", arg)),
-            }
-            i += 1;
-            continue;
-        }
-
-        // Short options
-        if arg.starts_with('-') && arg.len() > 1 {
-            let chars: Vec<char> = arg[1..].chars().collect();
-            let mut j = 0;
-            while j < chars.len() {
-                match chars[j] {
-                    'i' => opts.ignore_case = true,
-                    's' => {
-                        opts.ignore_case = false;
-                        opts.smart_case = false;
-                    }
-                    'S' => opts.smart_case = true,
-                    'v' => opts.invert_match = true,
-                    'c' => opts.count_only = true,
-                    'l' => opts.files_with_matches = true,
-                    'n' => opts.line_numbers = Some(true),
-                    'N' => opts.line_numbers = Some(false),
-                    'w' => opts.word_regexp = true,
-                    'x' => opts.line_regexp = true,
-                    'F' => opts.fixed_strings = true,
-                    'q' => opts.quiet = true,
-                    'o' => opts.only_matching = true,
-                    'H' => opts.show_filename = Some(true),
-                    '.' => opts.hidden = true,
-                    'e' => {
-                        let rest: String = chars[j + 1..].iter().collect();
-                        if !rest.is_empty() {
-                            push_pattern(&mut opts, rest)?;
-                        } else {
-                            i += 1;
-                            if i >= args.len() {
-                                return Err("option requires an argument -- 'e'".to_string());
-                            }
-                            push_pattern(&mut opts, args[i].clone())?;
-                        }
-                        explicit_pattern = true;
-                        j = chars.len();
-                        continue;
-                    }
-                    'f' => {
-                        i += 1;
-                        if i >= args.len() {
-                            return Err("option requires an argument -- 'f'".to_string());
-                        }
-                        read_patterns_from_file(&mut opts, &args[i])?;
-                        explicit_pattern = true;
-                        j = chars.len();
-                        continue;
-                    }
-                    'm' => {
-                        i += 1;
-                        if i >= args.len() {
-                            return Err("option requires an argument -- 'm'".to_string());
-                        }
-                        opts.max_count = Some(
-                            args[i]
-                                .parse()
-                                .map_err(|_| format!("invalid number: '{}'", args[i]))?,
-                        );
-                        j = chars.len();
-                        continue;
-                    }
-                    'j' => {
-                        i += 1;
-                        if i >= args.len() {
-                            return Err("option requires an argument -- 'j'".to_string());
-                        }
-                        j = chars.len();
-                        continue;
-                    }
-                    'A' => {
-                        i += 1;
-                        if i >= args.len() {
-                            return Err("option requires an argument -- 'A'".to_string());
-                        }
-                        opts.after_context = parse_context_count(&args[i])?;
-                        j = chars.len();
-                        continue;
-                    }
-                    'B' => {
-                        i += 1;
-                        if i >= args.len() {
-                            return Err("option requires an argument -- 'B'".to_string());
-                        }
-                        opts.before_context = parse_context_count(&args[i])?;
-                        j = chars.len();
-                        continue;
-                    }
-                    'C' => {
-                        i += 1;
-                        if i >= args.len() {
-                            return Err("option requires an argument -- 'C'".to_string());
-                        }
-                        let n = parse_context_count(&args[i])?;
-                        opts.before_context = n;
-                        opts.after_context = n;
-                        j = chars.len();
-                        continue;
-                    }
-                    'g' => {
-                        i += 1;
-                        if i >= args.len() {
-                            return Err("option requires an argument -- 'g'".to_string());
-                        }
-                        opts.glob_patterns.push(args[i].clone());
-                        j = chars.len();
-                        continue;
-                    }
-                    't' => {
-                        i += 1;
-                        if i >= args.len() {
-                            return Err("option requires an argument -- 't'".to_string());
-                        }
-                        opts.type_include.push(args[i].clone());
-                        j = chars.len();
-                        continue;
-                    }
-                    'T' => {
-                        i += 1;
-                        if i >= args.len() {
-                            return Err("option requires an argument -- 'T'".to_string());
-                        }
-                        opts.type_exclude.push(args[i].clone());
-                        j = chars.len();
-                        continue;
-                    }
-                    _ => return Err(format!("invalid option -- '{}'", chars[j])),
-                }
-                j += 1;
-            }
-            i += 1;
-            continue;
-        }
-
-        // Positional argument
-        if opts.files_mode {
-            opts.paths.push(arg.clone());
-        } else if !explicit_pattern && opts.patterns.is_empty() {
-            push_pattern(&mut opts, arg.clone())?;
-            explicit_pattern = true;
-        } else {
-            opts.paths.push(arg.clone());
-        }
-        i += 1;
-    }
-
-    // Remaining args after --
-    while i < args.len() {
-        if opts.files_mode {
-            opts.paths.push(args[i].clone());
-        } else if !explicit_pattern && opts.patterns.is_empty() {
-            push_pattern(&mut opts, args[i].clone())?;
-            explicit_pattern = true;
-        } else {
-            opts.paths.push(args[i].clone());
-        }
-        i += 1;
-    }
-
-    Ok(opts)
-}
-
-fn parse_context_count(value: &str) -> Result<usize, String> {
-    let count: usize = value
-        .parse()
-        .map_err(|_| format!("invalid number: '{}'", value))?;
-    if count > MAX_CONTEXT_LINES {
-        return Err(format!("context count '{}' exceeds size limit", value));
-    }
-    Ok(count)
-}
-
-fn push_pattern(opts: &mut Options, pattern: String) -> Result<(), String> {
-    if opts.patterns.len() >= MAX_PATTERNS {
-        return Err("too many patterns".to_string());
-    }
-    let next_bytes = opts
-        .pattern_bytes
-        .checked_add(pattern.len())
-        .ok_or_else(|| "pattern data too large".to_string())?;
-    if next_bytes > MAX_PATTERN_BYTES {
-        return Err("pattern data exceeds size limit".to_string());
-    }
-    opts.pattern_bytes = next_bytes;
-    opts.patterns.push(pattern);
-    Ok(())
-}
-
-fn read_patterns_from_file(opts: &mut Options, path: &str) -> Result<(), String> {
-    let metadata = std::fs::metadata(path).map_err(|e| format!("{}: {}", path, e))?;
-    if metadata.len() > MAX_PATTERN_BYTES as u64 {
-        return Err(format!("{}: pattern file exceeds size limit", path));
-    }
-    let file = std::fs::File::open(path).map_err(|e| format!("{}: {}", path, e))?;
-    let limit = MAX_PATTERN_BYTES
-        .checked_add(1)
-        .ok_or_else(|| "pattern file size limit is too large".to_string())?;
-    let mut content = String::new();
-    file.take(limit as u64)
-        .read_to_string(&mut content)
-        .map_err(|e| format!("{}: {}", path, e))?;
-    if content.len() > MAX_PATTERN_BYTES {
-        return Err(format!("{}: pattern file exceeds size limit", path));
-    }
-    for line in content.lines() {
-        if !line.is_empty() {
-            push_pattern(opts, line.to_string())?;
-        }
-    }
-    Ok(())
-}
-
-// --- Pattern building ---
-
-fn build_regex(opts: &Options) -> Result<Regex, String> {
-    let combined = if opts.patterns.len() == 1 {
-        prepare_pattern(&opts.patterns[0], opts)
-    } else {
-        let parts: Vec<String> = opts
-            .patterns
-            .iter()
-            .map(|p| format!("(?:{})", prepare_pattern(p, opts)))
-            .collect();
-        parts.join("|")
-    };
-
-    let case_insensitive = if opts.ignore_case {
-        true
-    } else if opts.smart_case {
-        // Smart case: insensitive unless pattern has uppercase
-        !combined.chars().any(|c| c.is_uppercase())
-    } else {
-        false
-    };
-
-    RegexBuilder::new(&combined)
-        .case_insensitive(case_insensitive)
-        .build()
-        .map_err(|e| format!("regex error: {}", e))
-}
-
-fn prepare_pattern(pattern: &str, opts: &Options) -> String {
-    let base = if opts.fixed_strings {
-        regex::escape(pattern)
-    } else {
-        pattern.to_string()
-    };
-
-    if opts.word_regexp {
-        format!(r"\b(?:{})\b", base)
-    } else if opts.line_regexp {
-        format!("^(?:{})$", base)
-    } else {
-        base
-    }
-}
-
-// --- File collection ---
-
-fn collect_files_from_paths(paths: &[String], opts: &Options) -> io::Result<Vec<PathBuf>> {
-    let mut files = Vec::new();
-    for path_str in paths {
-        let path = Path::new(path_str);
-        let metadata = std::fs::symlink_metadata(path)?;
-        let file_type = metadata.file_type();
-        if file_type.is_dir() {
-            let mut active_dirs = HashSet::new();
-            walk_dir(path, path, opts, &mut files, 0, &mut active_dirs)?;
-        } else if file_type.is_file() {
-            if should_include(path, path, false, opts) {
-                push_collected_file(&mut files, path.to_path_buf())?;
-            }
-        } else {
-            continue;
-        }
-    }
-    if opts.sort_modified {
-        files.sort_by_key(|path| {
-            std::fs::metadata(path)
-                .and_then(|meta| meta.modified())
-                .ok()
-        });
-    } else {
-        files.sort();
-    }
-    Ok(files)
-}
-
-fn push_collected_file(out: &mut Vec<PathBuf>, path: PathBuf) -> io::Result<()> {
-    if out.len() >= MAX_FILE_RESULTS {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            "file result count exceeds size limit",
-        ));
-    }
-    out.push(path);
-    Ok(())
-}
-
-fn walk_dir(
-    root: &Path,
-    dir: &Path,
-    opts: &Options,
-    out: &mut Vec<PathBuf>,
-    depth: usize,
-    active_dirs: &mut HashSet<PathBuf>,
-) -> io::Result<()> {
-    let canonical = std::fs::canonicalize(dir)?;
-    if !active_dirs.insert(canonical.clone()) {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            format!("recursive directory cycle at {}", dir.display()),
-        ));
-    }
-
-    let result = (|| {
-        for entry in std::fs::read_dir(dir)? {
-            let entry = entry?;
-            let path = entry.path();
-            let name = entry.file_name();
-            let name_str = name.to_string_lossy();
-            let file_type = entry.file_type()?;
-            let is_dir = file_type.is_dir();
-
-            // Skip hidden files/dirs unless --hidden
-            if !opts.hidden && name_str.starts_with('.') {
-                continue;
-            }
-
-            if !should_include(root, &path, is_dir, opts) {
-                continue;
-            }
-
-            if is_dir {
-                if opts.max_depth.map(|max| depth < max).unwrap_or(true) {
-                    walk_dir(root, &path, opts, out, depth + 1, active_dirs)?;
-                }
-            } else if file_type.is_file() {
-                push_collected_file(out, path)?;
-            }
-        }
-        Ok(())
-    })();
-
-    active_dirs.remove(&canonical);
-    result
-}
-
-fn should_include(root: &Path, path: &Path, is_dir: bool, opts: &Options) -> bool {
-    let ext = path
-        .extension()
-        .map(|e| e.to_string_lossy().to_string())
-        .unwrap_or_default();
-    let relative_path = path
-        .strip_prefix(root)
-        .unwrap_or(path)
-        .to_string_lossy()
-        .replace('\\', "/");
-    let file_name = path
-        .file_name()
-        .map(|n| n.to_string_lossy().to_string())
-        .unwrap_or_default();
-
-    // Type include filters
-    if !opts.type_include.is_empty() {
-        let included = opts.type_include.iter().any(|t| {
-            type_extensions(t)
-                .map(|exts| exts.iter().any(|e| ext == *e))
-                .unwrap_or(false)
-        });
-        if !included {
-            return false;
-        }
-    }
-
-    // Type exclude filters
-    if !opts.type_exclude.is_empty() {
-        let excluded = opts.type_exclude.iter().any(|t| {
-            type_extensions(t)
-                .map(|exts| exts.iter().any(|e| ext == *e))
-                .unwrap_or(false)
-        });
-        if excluded {
-            return false;
-        }
-    }
-
-    // Glob filters
-    if !opts.glob_patterns.is_empty() {
-        for pattern in &opts.glob_patterns {
-            let (negated, pat) = if let Some(rest) = pattern.strip_prefix('!') {
-                (true, rest)
-            } else {
-                (false, pattern.as_str())
-            };
-            let matches = glob_matches(pat, &relative_path, &file_name, is_dir);
-            if negated && matches {
-                return false;
-            }
-            if !negated && !matches {
-                return false;
-            }
-        }
-    }
-
-    true
-}
-
-fn type_extensions(type_name: &str) -> Option<&'static [&'static str]> {
-    match type_name {
-        "rust" | "rs" => Some(&["rs"]),
-        "py" | "python" => Some(&["py", "pyi"]),
-        "js" | "javascript" => Some(&["js", "jsx", "mjs"]),
-        "ts" | "typescript" => Some(&["ts", "tsx", "mts"]),
-        "c" => Some(&["c", "h"]),
-        "cpp" | "c++" => Some(&["cpp", "cxx", "cc", "hpp", "hxx", "h"]),
-        "java" => Some(&["java"]),
-        "go" => Some(&["go"]),
-        "html" => Some(&["html", "htm"]),
-        "css" => Some(&["css"]),
-        "json" => Some(&["json"]),
-        "yaml" | "yml" => Some(&["yml", "yaml"]),
-        "toml" => Some(&["toml"]),
-        "md" | "markdown" => Some(&["md", "markdown"]),
-        "txt" | "text" => Some(&["txt"]),
-        "sh" | "shell" | "bash" => Some(&["sh", "bash"]),
-        "xml" => Some(&["xml"]),
-        "sql" => Some(&["sql"]),
-        "lua" => Some(&["lua"]),
-        "ruby" | "rb" => Some(&["rb"]),
-        "php" => Some(&["php"]),
-        "swift" => Some(&["swift"]),
-        "kotlin" | "kt" => Some(&["kt", "kts"]),
-        _ => None,
-    }
-}
-
-fn glob_matches(pattern: &str, relative_path: &str, file_name: &str, is_dir: bool) -> bool {
-    let normalized = pattern.trim_end_matches('/');
-    if pattern.ends_with('/') {
-        return is_dir
-            && relative_path
-                .split('/')
-                .any(|segment| segment == normalized || segment == file_name);
-    }
-
-    let target = if pattern.contains('/') {
-        relative_path
-    } else {
-        file_name
-    };
-
-    let mut regex_pattern = String::from("^");
-    let chars: Vec<char> = normalized.chars().collect();
-    let mut i = 0;
-    while i < chars.len() {
-        match chars[i] {
-            '*' => {
-                if i + 1 < chars.len() && chars[i + 1] == '*' {
-                    regex_pattern.push_str(".*");
-                    i += 2;
-                } else {
-                    regex_pattern.push_str("[^/]*");
-                    i += 1;
-                }
-            }
-            '?' => {
-                regex_pattern.push_str("[^/]");
-                i += 1;
-            }
-            '{' => {
-                if let Some(end) = chars[i + 1..].iter().position(|c| *c == '}') {
-                    let group: String = chars[i + 1..i + 1 + end].iter().collect();
-                    regex_pattern.push('(');
-                    regex_pattern.push_str(
-                        &group
-                            .split(',')
-                            .map(regex::escape)
-                            .collect::<Vec<_>>()
-                            .join("|"),
-                    );
-                    regex_pattern.push(')');
-                    i += end + 2;
-                } else {
-                    regex_pattern.push_str("\\{");
-                    i += 1;
-                }
-            }
-            '.' | '+' | '(' | ')' | '|' | '^' | '$' | '[' | ']' | '\\' => {
-                regex_pattern.push('\\');
-                regex_pattern.push(chars[i]);
-                i += 1;
-            }
-            other => {
-                regex_pattern.push(other);
-                i += 1;
-            }
-        }
-    }
-    regex_pattern.push('$');
-
-    Regex::new(&regex_pattern)
-        .map(|regex| regex.is_match(target))
-        .unwrap_or(false)
-}
-
-// --- Search ---
-
-struct FileResult {
-    matches: usize,
-    is_binary: bool,
-}
-
-enum ResultLine {
-    Match(usize, String),
-    Context(usize, String),
-    Separator,
-}
-
-fn search_stream<R: BufRead, W: Write>(
-    mut reader: R,
-    regex: &Regex,
-    opts: &Options,
-    filename: Option<&str>,
-    show_filename: bool,
-    out: &mut W,
-) -> io::Result<FileResult> {
-    let mut result = FileResult {
-        matches: 0,
-        is_binary: false,
-    };
-
-    let collect_lines =
-        !opts.quiet && !opts.files_with_matches && !opts.files_without_matches && !opts.count_only;
-
-    let mut before_buf: VecDeque<(usize, String)> = VecDeque::new();
-    let mut before_buf_bytes: usize = 0;
-    let mut after_remaining: usize = 0;
-    let mut last_printed: usize = 0;
-    let mut line_buf = Vec::new();
-    let mut lineno: usize = 0;
-
-    while let Some(line) = read_line_bounded(&mut reader, &mut line_buf)? {
-        lineno = lineno
-            .checked_add(1)
-            .ok_or_else(|| io::Error::new(io::ErrorKind::InvalidData, "line number overflow"))?;
-
-        // Binary detection: null bytes in line data
-        if line.as_bytes().contains(&0) {
-            result.is_binary = true;
-            break;
-        }
-
-        let is_match = regex.is_match(&line) != opts.invert_match;
-
-        if is_match {
-            result.matches += 1;
-
-            if opts.quiet || opts.files_with_matches {
-                break;
-            }
-
-            if collect_lines {
-                // Separator for non-contiguous match groups
-                if opts.has_context() && last_printed > 0 {
-                    let first_before = before_buf.front().map(|(n, _)| *n).unwrap_or(lineno);
-                    if first_before > last_printed + 1 {
-                        print_result_line(
-                            out,
-                            filename,
-                            opts,
-                            show_filename,
-                            &ResultLine::Separator,
-                        )?;
-                    }
-                }
-
-                // Flush before-context buffer
-                for (bno, btext) in before_buf.drain(..) {
-                    if bno > last_printed {
-                        print_result_line(
-                            out,
-                            filename,
-                            opts,
-                            show_filename,
-                            &ResultLine::Context(bno, btext),
-                        )?;
-                        last_printed = bno;
-                    }
-                }
-                before_buf_bytes = 0;
-
-                // Emit match
-                if opts.only_matching && !opts.invert_match {
-                    for mat in regex.find_iter(&line) {
-                        print_result_line(
-                            out,
-                            filename,
-                            opts,
-                            show_filename,
-                            &ResultLine::Match(lineno, mat.as_str().to_string()),
-                        )?;
-                    }
-                } else {
-                    print_result_line(
-                        out,
-                        filename,
-                        opts,
-                        show_filename,
-                        &ResultLine::Match(lineno, line),
-                    )?;
-                }
-                last_printed = lineno;
-                after_remaining = opts.after_context;
-            }
-
-            if let Some(max) = opts.max_count {
-                if result.matches >= max {
-                    break;
-                }
-            }
-        } else if collect_lines {
-            if after_remaining > 0 {
-                print_result_line(
-                    out,
-                    filename,
-                    opts,
-                    show_filename,
-                    &ResultLine::Context(lineno, line),
-                )?;
-                last_printed = lineno;
-                after_remaining -= 1;
-            } else if opts.before_context > 0 {
-                before_buf_bytes = before_buf_bytes.checked_add(line.len()).ok_or_else(|| {
-                    io::Error::new(io::ErrorKind::InvalidData, "context buffer too large")
-                })?;
-                if before_buf_bytes > MAX_CONTEXT_BYTES {
-                    return Err(io::Error::new(
-                        io::ErrorKind::InvalidData,
-                        "context buffer exceeds size limit",
-                    ));
-                }
-                before_buf.push_back((lineno, line));
-                if before_buf.len() > opts.before_context {
-                    if let Some((_, removed)) = before_buf.pop_front() {
-                        before_buf_bytes = before_buf_bytes.saturating_sub(removed.len());
-                    }
-                }
-            }
-        }
-    }
-
-    Ok(result)
-}
-
-// --- Output ---
-
-fn print_file_result<W: Write>(
-    filename: Option<&str>,
-    result: &FileResult,
-    opts: &Options,
-    out: &mut W,
-) -> io::Result<()> {
-    if result.is_binary {
-        if result.matches > 0 {
-            if let Some(name) = filename {
-                writeln!(out, "Binary file {} matches.", name)?;
-            }
-        }
-        return Ok(());
-    }
-
-    if opts.files_with_matches {
-        if result.matches > 0 {
-            let name = filename.unwrap_or("(standard input)");
-            writeln!(out, "{}", name)?;
-        }
-        return Ok(());
-    }
-
-    if opts.files_without_matches {
-        if result.matches == 0 {
-            let name = filename.unwrap_or("(standard input)");
-            writeln!(out, "{}", name)?;
-        }
-        return Ok(());
-    }
-
-    if opts.count_only {
-        if let Some(name) = filename {
-            writeln!(out, "{}:{}", name, result.matches)?;
-        } else {
-            writeln!(out, "{}", result.matches)?;
-        }
-        return Ok(());
-    }
-
-    Ok(())
-}
-
-fn print_result_line<W: Write>(
-    out: &mut W,
-    filename: Option<&str>,
-    opts: &Options,
-    show_filename: bool,
-    line: &ResultLine,
-) -> io::Result<()> {
-    match line {
-        ResultLine::Match(lineno, text) => {
-            let mut prefix = String::new();
-            if show_filename {
-                if let Some(name) = filename {
-                    prefix.push_str(name);
-                    prefix.push(':');
-                }
-            }
-            if opts.show_line_numbers() {
-                prefix.push_str(&lineno.to_string());
-                prefix.push(':');
-            }
-            writeln!(out, "{}{}", prefix, text)
-        }
-        ResultLine::Context(lineno, text) => {
-            let mut prefix = String::new();
-            if show_filename {
-                if let Some(name) = filename {
-                    prefix.push_str(name);
-                    prefix.push('-');
-                }
-            }
-            if opts.show_line_numbers() {
-                prefix.push_str(&lineno.to_string());
-                prefix.push('-');
-            }
-            writeln!(out, "{}{}", prefix, text)
-        }
-        ResultLine::Separator => writeln!(out, "--"),
-    }
-}
-
-fn read_line_bounded<R: BufRead>(
-    reader: &mut R,
-    line_buf: &mut Vec<u8>,
-) -> io::Result<Option<String>> {
-    line_buf.clear();
-
-    loop {
-        let available = reader.fill_buf()?;
-        if available.is_empty() {
-            if line_buf.is_empty() {
-                return Ok(None);
-            }
-            break;
-        }
-
-        let newline = available.iter().position(|&b| b == b'\n');
-        let take = newline.map_or(available.len(), |pos| pos + 1);
-        let next_len = line_buf
-            .len()
-            .checked_add(take)
-            .ok_or_else(|| io::Error::new(io::ErrorKind::InvalidData, "input line too long"))?;
-        if next_len > MAX_INPUT_LINE_BYTES {
-            return Err(io::Error::new(
-                io::ErrorKind::InvalidData,
-                "input line exceeds size limit",
-            ));
-        }
-
-        line_buf.extend_from_slice(&available[..take]);
-        reader.consume(take);
-        if newline.is_some() {
-            break;
-        }
-    }
-
-    if line_buf.ends_with(b"\n") {
-        line_buf.pop();
-        if line_buf.ends_with(b"\r") {
-            line_buf.pop();
-        }
-    }
-
-    String::from_utf8(line_buf.clone())
-        .map(Some)
-        .map_err(|e| io::Error::new(io::ErrorKind::InvalidData, e))
-}
diff --git a/registry/native/crates/libs/gzip/Cargo.toml b/registry/native/crates/libs/gzip/Cargo.toml
deleted file mode 100644
index eed27c5c2..000000000
--- a/registry/native/crates/libs/gzip/Cargo.toml
+++ /dev/null
@@ -1,9 +0,0 @@
-[package]
-name = "secureexec-gzip"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "gzip/gunzip/zcat implementations for secure-exec standalone binaries"
-
-[dependencies]
-flate2 = { version = "1.0", default-features = false, features = ["rust_backend"] }
diff --git a/registry/native/crates/libs/gzip/src/lib.rs b/registry/native/crates/libs/gzip/src/lib.rs
deleted file mode 100644
index 991c82cf7..000000000
--- a/registry/native/crates/libs/gzip/src/lib.rs
+++ /dev/null
@@ -1,226 +0,0 @@
-//! gzip/gunzip/zcat implementation using flate2.
-//!
-//! Dispatches on argv[0] basename for standalone binary usage:
-//! - "gunzip" -> decompress mode
-//! - "zcat" -> decompress + stdout mode
-//! - default -> compress mode
-
-use std::ffi::OsString;
-use std::fs::File;
-use std::io::{self, BufReader, BufWriter, Read, Write};
-
-use flate2::read::GzDecoder;
-use flate2::write::GzEncoder;
-use flate2::Compression;
-
-/// Unified gzip entry point. Dispatches on argv[0]:
-/// - "gunzip" -> decompress mode
-/// - "zcat" -> decompress + stdout mode
-/// - default -> compress mode
-pub fn main(args: Vec<OsString>) -> i32 {
-    let argv0 = args
-        .first()
-        .map(|a| a.to_string_lossy().to_string())
-        .unwrap_or_default();
-    let progname = match argv0.rfind('/') {
-        Some(pos) => &argv0[pos + 1..],
-        None => &argv0[..],
-    };
-
-    // Defaults based on invocation name
-    let mut decompress = matches!(progname, "gunzip" | "zcat");
-    let mut to_stdout = progname == "zcat";
-    let mut keep = false;
-    let mut force = false;
-    let mut level: u32 = 6; // default compression level
-    let mut files: Vec<String> = Vec::new();
-
-    // Parse arguments
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-    let mut i = 0;
-    while i < str_args.len() {
-        let arg = &str_args[i];
-        if arg == "--" {
-            files.extend(str_args[i + 1..].iter().cloned());
-            break;
-        }
-        if arg.starts_with('-') && arg.len() > 1 && !arg.starts_with("--") {
-            // Parse combined short flags: -dcfk9
-            for ch in arg[1..].chars() {
-                match ch {
-                    'd' => decompress = true,
-                    'c' => to_stdout = true,
-                    'k' => keep = true,
-                    'f' => force = true,
-                    '1'..='9' => level = ch.to_digit(10).unwrap(),
-                    'h' => {
-                        print_usage(progname);
-                        return 0;
-                    }
-                    _ => {
-                        eprintln!("{}: invalid option -- '{}'", progname, ch);
-                        return 1;
-                    }
-                }
-            }
-        } else if arg == "--decompress" || arg == "--uncompress" {
-            decompress = true;
-        } else if arg == "--stdout" || arg == "--to-stdout" {
-            to_stdout = true;
-        } else if arg == "--keep" {
-            keep = true;
-        } else if arg == "--force" {
-            force = true;
-        } else if arg == "--fast" {
-            level = 1;
-        } else if arg == "--best" {
-            level = 9;
-        } else if arg == "--help" {
-            print_usage(progname);
-            return 0;
-        } else {
-            files.push(arg.clone());
-        }
-        i += 1;
-    }
-
-    let compression = Compression::new(level);
-    let mut exit_code = 0;
-
-    if files.is_empty() {
-        // stdin/stdout mode
-        if decompress {
-            if let Err(e) = decompress_stream(io::stdin(), io::stdout()) {
-                eprintln!("{}: {}", progname, e);
-                exit_code = 1;
-            }
-        } else {
-            if let Err(e) = compress_stream(io::stdin(), io::stdout(), compression) {
-                eprintln!("{}: {}", progname, e);
-                exit_code = 1;
-            }
-        }
-    } else {
-        for filename in &files {
-            if decompress {
-                if let Err(e) = decompress_file(progname, filename, to_stdout, keep, force) {
-                    eprintln!("{}: {}", progname, e);
-                    exit_code = 1;
-                }
-            } else {
-                if let Err(e) =
-                    compress_file(progname, filename, to_stdout, keep, force, compression)
-                {
-                    eprintln!("{}: {}", progname, e);
-                    exit_code = 1;
-                }
-            }
-        }
-    }
-
-    exit_code
-}
-
-fn compress_stream<R: Read, W: Write>(input: R, output: W, level: Compression) -> io::Result<()> {
-    let mut reader = BufReader::new(input);
-    let mut encoder = GzEncoder::new(BufWriter::new(output), level);
-    io::copy(&mut reader, &mut encoder)?;
-    let mut writer = encoder.finish()?;
-    writer.flush()?;
-    Ok(())
-}
-
-fn decompress_stream<R: Read, W: Write>(input: R, output: W) -> io::Result<()> {
-    let mut decoder = GzDecoder::new(BufReader::new(input));
-    let mut writer = BufWriter::new(output);
-    io::copy(&mut decoder, &mut writer)?;
-    writer.flush()?;
-    Ok(())
-}
-
-fn compress_file(
-    progname: &str,
-    path: &str,
-    to_stdout: bool,
-    keep: bool,
-    force: bool,
-    level: Compression,
-) -> io::Result<()> {
-    let out_path = format!("{}.gz", path);
-
-    if !to_stdout && !force && std::fs::metadata(&out_path).is_ok() {
-        return Err(io::Error::new(
-            io::ErrorKind::AlreadyExists,
-            format!("{}: {} already exists; not overwritten", progname, out_path),
-        ));
-    }
-
-    let input = File::open(path)?;
-
-    if to_stdout {
-        compress_stream(input, io::stdout(), level)?;
-    } else {
-        let output = File::create(&out_path)?;
-        compress_stream(input, output, level)?;
-        if !keep {
-            std::fs::remove_file(path)?;
-        }
-    }
-
-    Ok(())
-}
-
-fn decompress_file(
-    progname: &str,
-    path: &str,
-    to_stdout: bool,
-    keep: bool,
-    force: bool,
-) -> io::Result<()> {
-    // Determine output filename by stripping .gz / .z / .tgz suffix
-    let out_path = if path.ends_with(".gz") {
-        path[..path.len() - 3].to_string()
-    } else if path.ends_with(".tgz") {
-        format!("{}.tar", &path[..path.len() - 4])
-    } else if path.ends_with(".z") {
-        path[..path.len() - 2].to_string()
-    } else {
-        // No recognized suffix — append .out
-        format!("{}.out", path)
-    };
-
-    if !to_stdout && !force && std::fs::metadata(&out_path).is_ok() {
-        return Err(io::Error::new(
-            io::ErrorKind::AlreadyExists,
-            format!("{}: {} already exists; not overwritten", progname, out_path),
-        ));
-    }
-
-    let input = File::open(path)?;
-
-    if to_stdout {
-        decompress_stream(input, io::stdout())?;
-    } else {
-        let output = File::create(&out_path)?;
-        decompress_stream(input, output)?;
-        if !keep {
-            std::fs::remove_file(path)?;
-        }
-    }
-
-    Ok(())
-}
-
-fn print_usage(progname: &str) {
-    eprintln!("Usage: {} [-dcfk123456789] [file ...]", progname);
-    eprintln!("  -d, --decompress   decompress");
-    eprintln!("  -c, --stdout       write to stdout, keep original files");
-    eprintln!("  -k, --keep         keep input files");
-    eprintln!("  -f, --force        force overwrite of output file");
-    eprintln!("  -1..9              compression level (fast..best, default 6)");
-    eprintln!("  -h, --help         display this help");
-}
diff --git a/registry/native/crates/libs/jq/Cargo.toml b/registry/native/crates/libs/jq/Cargo.toml
deleted file mode 100644
index a258274ae..000000000
--- a/registry/native/crates/libs/jq/Cargo.toml
+++ /dev/null
@@ -1,12 +0,0 @@
-[package]
-name = "secureexec-jq"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "jq implementation for secure-exec standalone binaries"
-
-[dependencies]
-jaq-core = "2.2"
-jaq-std = "2.1"
-jaq-json = { version = "1.1", features = ["serde_json"] }
-serde_json = "1"
diff --git a/registry/native/crates/libs/jq/src/lib.rs b/registry/native/crates/libs/jq/src/lib.rs
deleted file mode 100644
index 9fe36c854..000000000
--- a/registry/native/crates/libs/jq/src/lib.rs
+++ /dev/null
@@ -1,293 +0,0 @@
-//! jq implementation using the jaq crate (pure Rust, jq-compatible).
-//!
-//! Wraps jaq-core/jaq-std/jaq-json to provide a standard jq CLI interface.
-
-use std::ffi::OsString;
-use std::io::{self, Read, Write};
-
-use jaq_core::load::{Arena, File, Loader};
-use jaq_core::{Compiler, Ctx, RcIter};
-use jaq_json::Val;
-
-const MAX_INPUT_BYTES: usize = 16 * 1024 * 1024;
-const MAX_INPUT_VALUES: usize = 100_000;
-
-/// Entry point for jq command.
-pub fn main(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1) // skip argv[0]
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    match run_jq(&str_args) {
-        Ok(code) => code,
-        Err(msg) => {
-            eprintln!("jq: {}", msg);
-            2
-        }
-    }
-}
-
-struct JqOptions {
-    filter: String,
-    raw_output: bool,
-    raw_input: bool,
-    slurp: bool,
-    compact: bool,
-    null_input: bool,
-    exit_status: bool,
-    join_output: bool,
-    args: Vec<(String, String)>,
-    jsonargs: Vec<(String, Val)>,
-}
-
-fn parse_args(args: &[String]) -> Result<JqOptions, String> {
-    let mut opts = JqOptions {
-        filter: String::new(),
-        raw_output: false,
-        raw_input: false,
-        slurp: false,
-        compact: false,
-        null_input: false,
-        exit_status: false,
-        join_output: false,
-        args: Vec::new(),
-        jsonargs: Vec::new(),
-    };
-
-    let mut filter_set = false;
-    let mut i = 0;
-
-    while i < args.len() {
-        let arg = &args[i];
-
-        if arg == "--" {
-            break;
-        }
-
-        if arg.starts_with('-') && arg.len() > 1 && !arg.starts_with("--") {
-            // Handle combined short flags like -rn, -crS, etc.
-            let flags = &arg[1..];
-            for c in flags.chars() {
-                match c {
-                    'r' => opts.raw_output = true,
-                    'R' => opts.raw_input = true,
-                    's' => opts.slurp = true,
-                    'c' => opts.compact = true,
-                    'n' => opts.null_input = true,
-                    'e' => opts.exit_status = true,
-                    'j' => opts.join_output = true,
-                    'S' => {} // sort keys - jaq sorts by default
-                    _ => return Err(format!("unknown option: -{}", c)),
-                }
-            }
-        } else if arg == "--raw-output" || arg == "--raw-output0" {
-            opts.raw_output = true;
-        } else if arg == "--raw-input" {
-            opts.raw_input = true;
-        } else if arg == "--slurp" {
-            opts.slurp = true;
-        } else if arg == "--compact-output" {
-            opts.compact = true;
-        } else if arg == "--null-input" {
-            opts.null_input = true;
-        } else if arg == "--exit-status" {
-            opts.exit_status = true;
-        } else if arg == "--join-output" {
-            opts.join_output = true;
-        } else if arg == "--arg" {
-            if i + 2 >= args.len() {
-                return Err("--arg requires name and value".to_string());
-            }
-            let name = args[i + 1].clone();
-            let value = args[i + 2].clone();
-            opts.args.push((name, value));
-            i += 2;
-        } else if arg == "--argjson" {
-            if i + 2 >= args.len() {
-                return Err("--argjson requires name and value".to_string());
-            }
-            let name = args[i + 1].clone();
-            let json_str = &args[i + 2];
-            let value: serde_json::Value = serde_json::from_str(json_str)
-                .map_err(|e| format!("invalid JSON for --argjson: {}", e))?;
-            opts.jsonargs.push((name, Val::from(value)));
-            i += 2;
-        } else if !filter_set {
-            opts.filter = arg.clone();
-            filter_set = true;
-        } else {
-            return Err(format!("unexpected argument: {}", arg));
-        }
-
-        i += 1;
-    }
-
-    if !filter_set {
-        return Err("no filter provided".to_string());
-    }
-
-    Ok(opts)
-}
-
-fn read_inputs(opts: &JqOptions) -> Result<Vec<Val>, String> {
-    if opts.null_input {
-        return Ok(vec![Val::from(serde_json::Value::Null)]);
-    }
-
-    let mut stdin_data = String::new();
-    io::stdin()
-        .take((MAX_INPUT_BYTES + 1) as u64)
-        .read_to_string(&mut stdin_data)
-        .map_err(|e| format!("failed to read stdin: {}", e))?;
-    if stdin_data.len() > MAX_INPUT_BYTES {
-        return Err("stdin exceeds size limit".to_string());
-    }
-
-    if opts.raw_input {
-        if opts.slurp {
-            let mut arr = Vec::new();
-            for line in stdin_data.lines() {
-                push_input_value(&mut arr, serde_json::Value::String(line.to_string()))?;
-            }
-            Ok(vec![Val::from(serde_json::Value::Array(arr))])
-        } else {
-            let mut lines = Vec::new();
-            for line in stdin_data.lines() {
-                push_input_value(
-                    &mut lines,
-                    Val::from(serde_json::Value::String(line.to_string())),
-                )?;
-            }
-            Ok(lines)
-        }
-    } else {
-        let trimmed = stdin_data.trim();
-        if trimmed.is_empty() {
-            return Ok(vec![Val::from(serde_json::Value::Null)]);
-        }
-
-        let mut values = Vec::new();
-        let decoder = serde_json::Deserializer::from_str(trimmed).into_iter::<serde_json::Value>();
-        for result in decoder {
-            let value = result.map_err(|e| format!("invalid JSON input: {}", e))?;
-            push_input_value(&mut values, value)?;
-        }
-
-        if opts.slurp {
-            Ok(vec![Val::from(serde_json::Value::Array(values))])
-        } else {
-            Ok(values.into_iter().map(Val::from).collect())
-        }
-    }
-}
-
-fn push_input_value<T>(values: &mut Vec<T>, value: T) -> Result<(), String> {
-    if values.len() >= MAX_INPUT_VALUES {
-        return Err("too many input values".to_string());
-    }
-    values.push(value);
-    Ok(())
-}
-
-/// Format a jaq Val as a string for output.
-fn format_output(val: &Val, opts: &JqOptions) -> Result<String, String> {
-    let compact_str = format!("{}", val);
-
-    // For raw output, unquote strings
-    if opts.raw_output {
-        if compact_str.starts_with('"') && compact_str.ends_with('"') && compact_str.len() >= 2 {
-            if let Ok(unescaped) = serde_json::from_str::<String>(&compact_str) {
-                return Ok(unescaped);
-            }
-        }
-    }
-
-    if opts.compact {
-        Ok(compact_str)
-    } else {
-        // Pretty print via serde_json
-        if let Ok(v) = serde_json::from_str::<serde_json::Value>(&compact_str) {
-            serde_json::to_string_pretty(&v).map_err(|e| format!("output format error: {}", e))
-        } else {
-            Ok(compact_str)
-        }
-    }
-}
-
-fn run_jq(args: &[String]) -> Result<i32, String> {
-    let opts = parse_args(args)?;
-    let inputs = read_inputs(&opts)?;
-
-    // Set up variable bindings for --arg and --argjson
-    let mut var_vals: Vec<Val> = Vec::new();
-
-    for (_name, value) in &opts.args {
-        var_vals.push(Val::from(serde_json::Value::String(value.clone())));
-    }
-    for (_name, value) in &opts.jsonargs {
-        var_vals.push(value.clone());
-    }
-
-    // Load and compile filter
-    let loader = Loader::new(jaq_std::defs().chain(jaq_json::defs()));
-    let arena = Arena::default();
-    let program = File {
-        code: opts.filter.as_str(),
-        path: (),
-    };
-    let modules = loader
-        .load(&arena, program)
-        .map_err(|errs| format!("parse error: {:?}", errs))?;
-
-    let filter = Compiler::default()
-        .with_funs(jaq_std::funs().chain(jaq_json::funs()))
-        .compile(modules)
-        .map_err(|errs| format!("compile error: {:?}", errs))?;
-
-    let empty_inputs = RcIter::new(core::iter::empty());
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-    let mut had_false_or_null = false;
-
-    for input in inputs {
-        let ctx = Ctx::new(var_vals.iter().cloned(), &empty_inputs);
-        let results = filter.run((ctx, input));
-
-        for result in results {
-            match result {
-                Ok(val) => {
-                    let s = format_output(&val, &opts)?;
-
-                    // Track for --exit-status
-                    let compact = format!("{}", val);
-                    if compact == "null" || compact == "false" {
-                        had_false_or_null = true;
-                    }
-
-                    if opts.join_output {
-                        write!(out, "{}", s)
-                            .map_err(|e| format!("failed to write stdout: {}", e))?;
-                    } else {
-                        writeln!(out, "{}", s)
-                            .map_err(|e| format!("failed to write stdout: {}", e))?;
-                    }
-                }
-                Err(e) => {
-                    eprintln!("jq: error: {}", e);
-                    return Ok(5);
-                }
-            }
-        }
-    }
-
-    if opts.exit_status && had_false_or_null {
-        return Ok(1);
-    }
-
-    out.flush()
-        .map_err(|e| format!("failed to flush stdout: {}", e))?;
-
-    Ok(0)
-}
diff --git a/registry/native/crates/libs/rev/Cargo.toml b/registry/native/crates/libs/rev/Cargo.toml
deleted file mode 100644
index dda6c9d74..000000000
--- a/registry/native/crates/libs/rev/Cargo.toml
+++ /dev/null
@@ -1,8 +0,0 @@
-[package]
-name = "secureexec-rev"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "rev implementation for secure-exec standalone binaries"
-
-[dependencies]
diff --git a/registry/native/crates/libs/rev/src/lib.rs b/registry/native/crates/libs/rev/src/lib.rs
deleted file mode 100644
index 19777be0a..000000000
--- a/registry/native/crates/libs/rev/src/lib.rs
+++ /dev/null
@@ -1,95 +0,0 @@
-//! rev -- reverse characters in each line (UTF-8 aware)
-
-use std::ffi::OsString;
-use std::fs::File;
-use std::io::{self, BufRead, BufReader, ErrorKind, Write};
-
-const MAX_INPUT_LINE_BYTES: usize = 16 * 1024 * 1024;
-
-pub fn main(args: Vec<OsString>) -> i32 {
-    let filenames: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-
-    if filenames.is_empty() {
-        // Read from stdin
-        if let Err(e) = process_reader(io::stdin().lock(), &mut out) {
-            eprintln!("rev: {}", e);
-            return 1;
-        }
-    } else {
-        for filename in &filenames {
-            match File::open(filename) {
-                Ok(f) => {
-                    if let Err(e) = process_reader(BufReader::new(f), &mut out) {
-                        eprintln!("rev: {}: {}", filename, e);
-                        return 1;
-                    }
-                }
-                Err(e) => {
-                    eprintln!("rev: {}: {}", filename, e);
-                    return 1;
-                }
-            }
-        }
-    }
-
-    0
-}
-
-fn process_reader<R: BufRead, W: Write>(mut reader: R, out: &mut W) -> io::Result<()> {
-    let mut line = Vec::new();
-
-    while read_line_limited(&mut reader, &mut line)? != 0 {
-        trim_line_ending(&mut line);
-        let line =
-            std::str::from_utf8(&line).map_err(|e| io::Error::new(ErrorKind::InvalidData, e))?;
-        let reversed: String = line.chars().rev().collect();
-        writeln!(out, "{}", reversed)?;
-    }
-    Ok(())
-}
-
-fn read_line_limited<R: BufRead>(reader: &mut R, line: &mut Vec<u8>) -> io::Result<usize> {
-    line.clear();
-    let mut bytes_read = 0;
-
-    loop {
-        let available = reader.fill_buf()?;
-        if available.is_empty() {
-            return Ok(bytes_read);
-        }
-
-        let newline = available.iter().position(|&b| b == b'\n');
-        let chunk_len = newline.map_or(available.len(), |pos| pos + 1);
-        let content_len = line.len() + chunk_len - usize::from(newline.is_some());
-        if content_len > MAX_INPUT_LINE_BYTES {
-            return Err(io::Error::new(
-                ErrorKind::InvalidData,
-                "input line exceeds size limit",
-            ));
-        }
-
-        line.extend_from_slice(&available[..chunk_len]);
-        reader.consume(chunk_len);
-        bytes_read += chunk_len;
-
-        if newline.is_some() {
-            return Ok(bytes_read);
-        }
-    }
-}
-
-fn trim_line_ending(line: &mut Vec<u8>) {
-    if line.ends_with(b"\n") {
-        line.pop();
-        if line.ends_with(b"\r") {
-            line.pop();
-        }
-    }
-}
diff --git a/registry/native/crates/libs/shims/Cargo.toml b/registry/native/crates/libs/shims/Cargo.toml
deleted file mode 100644
index 0d4b05ce1..000000000
--- a/registry/native/crates/libs/shims/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "secureexec-shims"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "Shim implementations for commands requiring subprocess support"
-
-[lib]
-name = "shims"
-path = "src/lib.rs"
-
-[dependencies]
-wasi-ext = { path = "../../wasi-ext" }
diff --git a/registry/native/crates/libs/shims/src/env.rs b/registry/native/crates/libs/shims/src/env.rs
deleted file mode 100644
index 78ce94a4d..000000000
--- a/registry/native/crates/libs/shims/src/env.rs
+++ /dev/null
@@ -1,114 +0,0 @@
-//! Shim implementation of the `env` command.
-//!
-//! Sets environment variables and spawns a child process via
-//! std::process::Command (which delegates to wasi-ext proc_spawn).
-//!
-//! Usage:
-//!   env [OPTION]... [VAR=VALUE]... [COMMAND [ARG]...]
-//!
-//! Options:
-//!   -i, --ignore-environment  Start with an empty environment
-//!   -u, --unset VAR           Remove VAR from the environment
-
-use std::ffi::OsString;
-use std::io::{self, Write};
-
-pub fn env(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1) // skip argv[0] ("env")
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    let mut ignore_env = false;
-    let mut unset_vars: Vec<String> = Vec::new();
-    let mut set_vars: Vec<(String, String)> = Vec::new();
-    let mut cmd_start = None;
-
-    let mut i = 0;
-    while i < str_args.len() {
-        let arg = &str_args[i];
-        if arg == "-i" || arg == "--ignore-environment" {
-            ignore_env = true;
-            i += 1;
-        } else if arg == "-u" || arg == "--unset" {
-            i += 1;
-            if i < str_args.len() {
-                unset_vars.push(str_args[i].clone());
-                i += 1;
-            } else {
-                eprintln!("env: option requires an argument -- 'u'");
-                return 125;
-            }
-        } else if let Some(eq_pos) = arg.find('=') {
-            set_vars.push((arg[..eq_pos].to_string(), arg[eq_pos + 1..].to_string()));
-            i += 1;
-        } else {
-            // First non-option, non-VAR=VALUE argument is the command
-            cmd_start = Some(i);
-            break;
-        }
-    }
-
-    if cmd_start.is_none() {
-        if let Err(e) = print_env(ignore_env, &unset_vars, &set_vars) {
-            eprintln!("env: {}", e);
-            return 1;
-        }
-        return 0;
-    }
-
-    // Build child command
-    let cmd_idx = cmd_start.unwrap();
-    let program = &str_args[cmd_idx];
-    let child_args = &str_args[cmd_idx + 1..];
-
-    let mut cmd = std::process::Command::new(program);
-    cmd.args(child_args);
-
-    if ignore_env {
-        cmd.env_clear();
-    }
-    for var in &unset_vars {
-        cmd.env_remove(var);
-    }
-    for (key, value) in &set_vars {
-        cmd.env(key, value);
-    }
-
-    match cmd.status() {
-        Ok(status) => status.code().unwrap_or(1),
-        Err(e) => {
-            eprintln!("env: '{}': {}", program, e);
-            127
-        }
-    }
-}
-
-fn print_env(
-    ignore_env: bool,
-    unset_vars: &[String],
-    set_vars: &[(String, String)],
-) -> io::Result<()> {
-    let stdout = std::io::stdout();
-    let mut out = stdout.lock();
-
-    if ignore_env {
-        // Only print explicitly set vars.
-        for (key, value) in set_vars {
-            writeln!(out, "{}={}", key, value)?;
-        }
-    } else {
-        // Print inherited env (minus unset vars) plus set vars.
-        for (key, value) in std::env::vars() {
-            if !unset_vars.contains(&key) {
-                writeln!(out, "{}={}", key, value)?;
-            }
-        }
-        for (key, value) in set_vars {
-            writeln!(out, "{}={}", key, value)?;
-        }
-    }
-
-    out.flush()
-}
diff --git a/registry/native/crates/libs/shims/src/lib.rs b/registry/native/crates/libs/shims/src/lib.rs
deleted file mode 100644
index 9e2358b3e..000000000
--- a/registry/native/crates/libs/shims/src/lib.rs
+++ /dev/null
@@ -1,13 +0,0 @@
-//! Shim implementations for commands that require subprocess support.
-//!
-//! Commands like `env` and `timeout` need to spawn child processes
-//! via wasi-ext syscalls (through std::process::Command patches)
-//! rather than using uutils versions.
-
-pub mod env;
-pub mod nice;
-pub mod nohup;
-pub mod stdbuf;
-pub mod timeout;
-pub mod which;
-pub mod xargs;
diff --git a/registry/native/crates/libs/shims/src/nice.rs b/registry/native/crates/libs/shims/src/nice.rs
deleted file mode 100644
index da6f59a3b..000000000
--- a/registry/native/crates/libs/shims/src/nice.rs
+++ /dev/null
@@ -1,58 +0,0 @@
-//! Shim implementation of the `nice` command.
-//!
-//! In WASI, process priority has no effect, so we just pass through
-//! to spawn the child command.
-//!
-//! Usage: nice [-n ADJUSTMENT] COMMAND [ARG]...
-
-use std::ffi::OsString;
-use std::io::Write;
-use std::process::Stdio;
-
-pub fn nice(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    let mut cmd_start = 0;
-
-    // Skip -n ADJUSTMENT if present
-    if str_args.len() >= 2 && str_args[0] == "-n" {
-        cmd_start = 2;
-    } else if !str_args.is_empty() && str_args[0].starts_with('-') {
-        // Handle -N form
-        if str_args[0][1..].parse::<i32>().is_ok() {
-            cmd_start = 1;
-        }
-    }
-
-    if cmd_start >= str_args.len() {
-        // No command. Just print 0 (the nice value).
-        let stdout = std::io::stdout();
-        let mut out = stdout.lock();
-        if let Err(e) = writeln!(out, "0").and_then(|_| out.flush()) {
-            eprintln!("nice: {}", e);
-            return 1;
-        }
-        return 0;
-    }
-
-    let program = &str_args[cmd_start];
-    let child_args = &str_args[cmd_start + 1..];
-
-    let mut cmd = std::process::Command::new(program);
-    cmd.args(child_args)
-        .stdin(Stdio::inherit())
-        .stdout(Stdio::inherit())
-        .stderr(Stdio::inherit());
-
-    match cmd.status() {
-        Ok(status) => status.code().unwrap_or(1),
-        Err(e) => {
-            eprintln!("nice: '{}': {}", program, e);
-            127
-        }
-    }
-}
diff --git a/registry/native/crates/libs/shims/src/nohup.rs b/registry/native/crates/libs/shims/src/nohup.rs
deleted file mode 100644
index c8e2ccc68..000000000
--- a/registry/native/crates/libs/shims/src/nohup.rs
+++ /dev/null
@@ -1,38 +0,0 @@
-//! Shim implementation of the `nohup` command.
-//!
-//! In WASI, there are no signals, so nohup just runs the command directly.
-//!
-//! Usage: nohup COMMAND [ARG]...
-
-use std::ffi::OsString;
-use std::process::Stdio;
-
-pub fn nohup(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    if str_args.is_empty() {
-        eprintln!("nohup: missing operand");
-        return 127;
-    }
-
-    let program = &str_args[0];
-    let child_args = &str_args[1..];
-
-    let mut cmd = std::process::Command::new(program);
-    cmd.args(child_args)
-        .stdin(Stdio::inherit())
-        .stdout(Stdio::inherit())
-        .stderr(Stdio::inherit());
-
-    match cmd.status() {
-        Ok(status) => status.code().unwrap_or(1),
-        Err(e) => {
-            eprintln!("nohup: failed to run command '{}': {}", program, e);
-            127
-        }
-    }
-}
diff --git a/registry/native/crates/libs/shims/src/stdbuf.rs b/registry/native/crates/libs/shims/src/stdbuf.rs
deleted file mode 100644
index 4e0f8f8dd..000000000
--- a/registry/native/crates/libs/shims/src/stdbuf.rs
+++ /dev/null
@@ -1,61 +0,0 @@
-//! Shim implementation of the `stdbuf` command.
-//!
-//! In WASI, buffering modes cannot be set externally, so stdbuf
-//! just runs the command directly.
-//!
-//! Usage: stdbuf [-i MODE] [-o MODE] [-e MODE] COMMAND [ARG]...
-
-use std::ffi::OsString;
-use std::process::Stdio;
-
-pub fn stdbuf(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    // Skip buffering options, find the command
-    let mut cmd_start = 0;
-    let mut i = 0;
-    while i < str_args.len() {
-        let arg = &str_args[i];
-        if (arg == "-i"
-            || arg == "-o"
-            || arg == "-e"
-            || arg == "--input"
-            || arg == "--output"
-            || arg == "--error")
-            && i + 1 < str_args.len()
-        {
-            i += 2;
-        } else if arg.starts_with('-') {
-            i += 1;
-        } else {
-            cmd_start = i;
-            break;
-        }
-    }
-
-    if cmd_start >= str_args.len() {
-        eprintln!("stdbuf: missing operand");
-        return 125;
-    }
-
-    let program = &str_args[cmd_start];
-    let child_args = &str_args[cmd_start + 1..];
-
-    let mut cmd = std::process::Command::new(program);
-    cmd.args(child_args)
-        .stdin(Stdio::inherit())
-        .stdout(Stdio::inherit())
-        .stderr(Stdio::inherit());
-
-    match cmd.status() {
-        Ok(status) => status.code().unwrap_or(1),
-        Err(e) => {
-            eprintln!("stdbuf: failed to run command '{}': {}", program, e);
-            127
-        }
-    }
-}
diff --git a/registry/native/crates/libs/shims/src/timeout.rs b/registry/native/crates/libs/shims/src/timeout.rs
deleted file mode 100644
index 3efabda1e..000000000
--- a/registry/native/crates/libs/shims/src/timeout.rs
+++ /dev/null
@@ -1,194 +0,0 @@
-//! Shim implementation of the `timeout` command.
-//!
-//! Spawns a child process and kills it if it exceeds the timeout duration.
-//! Uses std::process::Command (which delegates to wasi-ext proc_spawn)
-//! with try_wait() for non-blocking wait and kill() for termination.
-//! On WASI, poll sleeps must go through `wasi_ext::host_sleep_ms()` because
-//! `std::thread::sleep()` returns immediately and turns the timeout loop into
-//! a hot busy-wait.
-//!
-//! Usage:
-//!   timeout DURATION COMMAND [ARG]...
-//!
-//! DURATION is in seconds (fractional allowed, e.g. 0.5).
-//! Exit codes:
-//!   124 - command timed out
-//!   125 - timeout itself failed
-//!   126 - command found but not executable
-//!   127 - command not found
-
-use std::ffi::OsString;
-use std::time::Duration;
-
-const INITIAL_POLL_SLEEP_MS: u32 = 1;
-const MAX_POLL_SLEEP_MS: u32 = 128;
-
-pub fn timeout(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1) // skip argv[0] ("timeout")
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    if str_args.is_empty() {
-        eprintln!("timeout: missing operand");
-        return 125;
-    }
-
-    if str_args.len() < 2 {
-        eprintln!("timeout: missing operand after '{}'", str_args[0]);
-        return 125;
-    }
-
-    let timeout_duration = match parse_timeout_duration(&str_args[0]) {
-        Some(duration) => duration,
-        None => {
-            eprintln!("timeout: invalid time interval '{}'", str_args[0]);
-            return 125;
-        }
-    };
-
-    let program = &str_args[1];
-    let child_args = &str_args[2..];
-
-    let mut child = match std::process::Command::new(program).args(child_args).spawn() {
-        Ok(c) => c,
-        Err(e) => {
-            eprintln!("timeout: failed to run command '{}': {}", program, e);
-            return 127;
-        }
-    };
-
-    let start = std::time::Instant::now();
-    let mut poll_sleep_ms = INITIAL_POLL_SLEEP_MS;
-
-    loop {
-        match child.try_wait() {
-            Ok(Some(status)) => {
-                // Child exited on its own
-                return status.code().unwrap_or(1);
-            }
-            Ok(None) => {
-                // Still running — check timeout
-                if start.elapsed() >= timeout_duration {
-                    // Timeout exceeded. Kill the child and reap it.
-                    return match kill_and_reap_child(&mut child) {
-                        Ok(Some(status)) => status.code().unwrap_or(1),
-                        Ok(None) => 124,
-                        Err(error) => {
-                            eprintln!("timeout: {error}");
-                            125
-                        }
-                    };
-                }
-                let remaining = timeout_duration.saturating_sub(start.elapsed());
-                let sleep_ms = next_poll_sleep_ms(poll_sleep_ms, remaining);
-                if let Err(error) = sleep_for_poll(Duration::from_millis(u64::from(sleep_ms))) {
-                    let _ = kill_and_reap_child(&mut child);
-                    eprintln!("timeout: failed to sleep while waiting for command: {error}");
-                    return 125;
-                }
-                poll_sleep_ms = poll_sleep_ms.saturating_mul(2).min(MAX_POLL_SLEEP_MS);
-            }
-            Err(e) => {
-                let _ = kill_and_reap_child(&mut child);
-                eprintln!("timeout: error waiting for command: {}", e);
-                return 125;
-            }
-        }
-    }
-}
-
-fn parse_timeout_duration(raw: &str) -> Option<Duration> {
-    let seconds = raw.parse::<f64>().ok()?;
-    Duration::try_from_secs_f64(seconds).ok()
-}
-
-fn kill_and_reap_child(
-    child: &mut std::process::Child,
-) -> Result<Option<std::process::ExitStatus>, String> {
-    match child.kill() {
-        Ok(()) => child
-            .wait()
-            .map(|_| None)
-            .map_err(|error| format!("failed to wait for killed command: {error}")),
-        Err(kill_error) => match child.try_wait() {
-            Ok(Some(status)) => Ok(Some(status)),
-            Ok(None) => Err(format!("failed to kill command: {kill_error}")),
-            Err(wait_error) => Err(format!(
-                "failed to kill command: {kill_error}; failed to inspect command: {wait_error}"
-            )),
-        },
-    }
-}
-
-fn next_poll_sleep_ms(requested_ms: u32, remaining: Duration) -> u32 {
-    let remaining_ms = ceil_duration_to_millis(remaining);
-    requested_ms.max(1).min(remaining_ms.max(1))
-}
-
-fn ceil_duration_to_millis(duration: Duration) -> u32 {
-    let millis = duration.as_millis();
-    if millis == 0 && !duration.is_zero() {
-        return 1;
-    }
-
-    millis.try_into().unwrap_or(u32::MAX)
-}
-
-fn sleep_for_poll(duration: Duration) -> Result<(), String> {
-    #[cfg(target_arch = "wasm32")]
-    {
-        let millis = ceil_duration_to_millis(duration);
-        wasi_ext::host_sleep_ms(millis).map_err(|errno| format!("wasi errno {errno}"))
-    }
-
-    #[cfg(not(target_arch = "wasm32"))]
-    {
-        std::thread::sleep(duration);
-        Ok(())
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::{
-        ceil_duration_to_millis, next_poll_sleep_ms, parse_timeout_duration, MAX_POLL_SLEEP_MS,
-    };
-    use std::time::Duration;
-
-    #[test]
-    fn poll_sleep_is_capped_by_remaining_time() {
-        assert_eq!(
-            next_poll_sleep_ms(MAX_POLL_SLEEP_MS, Duration::from_millis(40)),
-            40
-        );
-    }
-
-    #[test]
-    fn poll_sleep_uses_one_millisecond_floor_for_submillisecond_remaining_time() {
-        assert_eq!(next_poll_sleep_ms(8, Duration::from_micros(250)), 1);
-        assert_eq!(ceil_duration_to_millis(Duration::from_micros(250)), 1);
-    }
-
-    #[test]
-    fn poll_sleep_preserves_requested_delay_when_deadline_allows_it() {
-        assert_eq!(next_poll_sleep_ms(32, Duration::from_secs(2)), 32);
-    }
-
-    #[test]
-    fn timeout_duration_rejects_non_finite_or_negative_values() {
-        assert_eq!(parse_timeout_duration("-1"), None);
-        assert_eq!(parse_timeout_duration("NaN"), None);
-        assert_eq!(parse_timeout_duration("inf"), None);
-        assert_eq!(parse_timeout_duration("1e1000000000"), None);
-    }
-
-    #[test]
-    fn timeout_duration_accepts_fractional_values() {
-        assert_eq!(
-            parse_timeout_duration("0.5"),
-            Some(Duration::from_millis(500))
-        );
-    }
-}
diff --git a/registry/native/crates/libs/shims/src/which.rs b/registry/native/crates/libs/shims/src/which.rs
deleted file mode 100644
index c12871463..000000000
--- a/registry/native/crates/libs/shims/src/which.rs
+++ /dev/null
@@ -1,168 +0,0 @@
-//! Minimal `which` implementation for the secure-exec VM.
-//!
-//! Searches the current PATH for one or more command names and prints the first
-//! matching executable path for each command. This is primarily needed for
-//! agent CLIs such as Claude Code, which probe for available shells with
-//! commands like `which zsh` / `which bash`.
-
-use std::ffi::OsString;
-use std::fs;
-use std::io::{self, Write};
-use std::path::{Path, PathBuf};
-
-#[cfg(unix)]
-use std::os::unix::fs::MetadataExt;
-
-#[cfg(target_os = "wasi")]
-mod host_fs {
-    #[link(wasm_import_module = "host_fs")]
-    unsafe extern "C" {
-        // Signature must match the sidecar host_fs.path_mode
-        // (dir_fd, path_ptr, path_len, follow_symlinks).
-        pub fn path_mode(
-            dir_fd: u32,
-            path_ptr: *const u8,
-            path_len: u32,
-            follow_symlinks: u32,
-        ) -> u32;
-    }
-}
-
-fn print_usage<W: Write>(out: &mut W) -> io::Result<()> {
-    writeln!(out, "Usage: which [-a] name [...]")
-}
-
-fn is_executable_path(path: &Path) -> bool {
-    let Ok(metadata) = fs::metadata(path) else {
-        return false;
-    };
-
-    metadata.is_file() && executable_mode_bits(path, &metadata)
-}
-
-#[cfg(unix)]
-fn executable_mode_bits(_path: &Path, metadata: &fs::Metadata) -> bool {
-    (metadata.mode() & 0o111) != 0
-}
-
-#[cfg(target_os = "wasi")]
-fn executable_mode_bits(path: &Path, _metadata: &fs::Metadata) -> bool {
-    let path_string = path.to_string_lossy();
-    let bytes = path_string.as_bytes();
-    let Ok(path_len) = u32::try_from(bytes.len()) else {
-        return false;
-    };
-    // dir_fd 3 = cwd preopen; absolute paths ignore it.
-    let mode = unsafe { host_fs::path_mode(3, bytes.as_ptr(), path_len, 1) };
-    (mode & 0o111) != 0
-}
-
-#[cfg(not(any(unix, target_os = "wasi")))]
-fn executable_mode_bits(_path: &Path, metadata: &fs::Metadata) -> bool {
-    !metadata.permissions().readonly()
-}
-
-fn search_path<F>(command: &str, all: bool, mut on_match: F) -> io::Result<bool>
-where
-    F: FnMut(&Path) -> io::Result<()>,
-{
-    if command.contains('/') {
-        let path = PathBuf::from(command);
-        if is_executable_path(&path) {
-            on_match(&path)?;
-            return Ok(true);
-        }
-        return Ok(false);
-    }
-
-    let mut found = false;
-    let path_var = std::env::var("PATH").unwrap_or_default();
-    for dir in path_var.split(':').filter(|segment| !segment.is_empty()) {
-        let candidate = Path::new(dir).join(command);
-        if is_executable_path(&candidate) {
-            on_match(&candidate)?;
-            found = true;
-            if !all {
-                break;
-            }
-        }
-    }
-
-    Ok(found)
-}
-
-pub fn which(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    let mut all = false;
-    let mut commands = Vec::new();
-    let stdout = std::io::stdout();
-    let mut out = stdout.lock();
-
-    for arg in str_args {
-        match arg.as_str() {
-            "-a" => all = true,
-            "--help" => {
-                return match print_usage(&mut out).and_then(|_| out.flush()) {
-                    Ok(()) => 0,
-                    Err(e) => {
-                        eprintln!("which: {}", e);
-                        2
-                    }
-                };
-            }
-            "--version" => {
-                return match writeln!(out, "which 0.1.0").and_then(|_| out.flush()) {
-                    Ok(()) => 0,
-                    Err(e) => {
-                        eprintln!("which: {}", e);
-                        2
-                    }
-                };
-            }
-            _ if arg.starts_with('-') => {
-                eprintln!("which: unsupported option '{}'", arg);
-                return 2;
-            }
-            _ => commands.push(arg),
-        }
-    }
-
-    if commands.is_empty() {
-        return match print_usage(&mut out).and_then(|_| out.flush()) {
-            Ok(()) => 2,
-            Err(e) => {
-                eprintln!("which: {}", e);
-                2
-            }
-        };
-    }
-
-    let mut found_all = true;
-
-    for command in commands {
-        match search_path(&command, all, |path| writeln!(out, "{}", path.display())) {
-            Ok(true) => {}
-            Ok(false) => found_all = false,
-            Err(e) => {
-                eprintln!("which: {}", e);
-                return 2;
-            }
-        }
-    }
-
-    if let Err(e) = out.flush() {
-        eprintln!("which: {}", e);
-        return 2;
-    }
-
-    if found_all {
-        0
-    } else {
-        1
-    }
-}
diff --git a/registry/native/crates/libs/shims/src/xargs.rs b/registry/native/crates/libs/shims/src/xargs.rs
deleted file mode 100644
index 217d5221d..000000000
--- a/registry/native/crates/libs/shims/src/xargs.rs
+++ /dev/null
@@ -1,379 +0,0 @@
-//! Shim implementation of the `xargs` command.
-//!
-//! Reads items from stdin and executes a command with those items as arguments.
-//! Uses std::process::Command (which delegates to wasi-ext proc_spawn).
-//!
-//! Usage:
-//!   xargs [OPTION]... [COMMAND [INITIAL-ARGS]...]
-//!
-//! Options:
-//!   -0, --null           Input items terminated by NUL, not whitespace
-//!   -n N, --max-args=N   Use at most N arguments per invocation
-//!   -I REPLSTR           Replace REPLSTR in COMMAND with input line
-//!   -t, --verbose        Print command to stderr before executing
-//!   -r, --no-run-if-empty  Do not run command if stdin is empty
-
-use std::ffi::OsString;
-use std::fs::File;
-use std::io::{self, Read, Write};
-use std::process::Stdio;
-
-const MAX_INPUT_BYTES: usize = 16 * 1024 * 1024;
-const MAX_INPUT_ITEMS: usize = 100_000;
-const MAX_INPUT_ITEM_BYTES: usize = 1024 * 1024;
-
-pub fn xargs(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1) // skip argv[0] ("xargs")
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    let mut null_delim = false;
-    let mut max_args: Option<usize> = None;
-    let mut replace_str: Option<String> = None;
-    let mut trace = false;
-    let mut no_run_if_empty = false;
-    let mut arg_file: Option<String> = None;
-    let mut cmd_start = None;
-
-    let mut i = 0;
-    while i < str_args.len() {
-        let arg = &str_args[i];
-        match arg.as_str() {
-            "-0" | "--null" => {
-                null_delim = true;
-                i += 1;
-            }
-            "-t" | "--verbose" => {
-                trace = true;
-                i += 1;
-            }
-            "-r" | "--no-run-if-empty" => {
-                no_run_if_empty = true;
-                i += 1;
-            }
-            "-a" | "--arg-file" => {
-                i += 1;
-                if i < str_args.len() {
-                    arg_file = Some(str_args[i].clone());
-                    i += 1;
-                } else {
-                    eprintln!("xargs: option requires an argument -- 'a'");
-                    return 1;
-                }
-            }
-            "-n" | "--max-args" => {
-                i += 1;
-                if i < str_args.len() {
-                    match str_args[i].parse::<usize>() {
-                        Ok(n) if n > 0 => max_args = Some(n),
-                        _ => {
-                            eprintln!("xargs: invalid number for -n: '{}'", str_args[i]);
-                            return 1;
-                        }
-                    }
-                    i += 1;
-                } else {
-                    eprintln!("xargs: option requires an argument -- 'n'");
-                    return 1;
-                }
-            }
-            "-I" => {
-                i += 1;
-                if i < str_args.len() {
-                    replace_str = Some(str_args[i].clone());
-                    i += 1;
-                } else {
-                    eprintln!("xargs: option requires an argument -- 'I'");
-                    return 1;
-                }
-            }
-            _ => {
-                // Check for --max-args=N form
-                if let Some(rest) = arg.strip_prefix("--max-args=") {
-                    match rest.parse::<usize>() {
-                        Ok(n) if n > 0 => max_args = Some(n),
-                        _ => {
-                            eprintln!("xargs: invalid number for --max-args: '{}'", rest);
-                            return 1;
-                        }
-                    }
-                    i += 1;
-                } else if let Some(rest) = arg.strip_prefix("--arg-file=") {
-                    if rest.is_empty() {
-                        eprintln!("xargs: option requires an argument -- 'a'");
-                        return 1;
-                    }
-                    arg_file = Some(rest.to_string());
-                    i += 1;
-                } else if arg.starts_with('-') && !arg.starts_with("--") && arg.len() > 2 {
-                    // Handle -nN combined form
-                    if let Some(rest) = arg.strip_prefix("-n") {
-                        match rest.parse::<usize>() {
-                            Ok(n) if n > 0 => max_args = Some(n),
-                            _ => {
-                                eprintln!("xargs: invalid number for -n: '{}'", rest);
-                                return 1;
-                            }
-                        }
-                        i += 1;
-                    } else if let Some(rest) = arg.strip_prefix("-I") {
-                        replace_str = Some(rest.to_string());
-                        i += 1;
-                    } else {
-                        cmd_start = Some(i);
-                        break;
-                    }
-                } else {
-                    cmd_start = Some(i);
-                    break;
-                }
-            }
-        }
-    }
-
-    // Command and initial args
-    let (program, initial_args) = if let Some(idx) = cmd_start {
-        (str_args[idx].clone(), str_args[idx + 1..].to_vec())
-    } else {
-        ("echo".to_string(), Vec::new())
-    };
-
-    // Read all input from stdin
-    let input_items = if null_delim {
-        read_null_delimited(arg_file.as_deref())
-    } else {
-        read_whitespace_delimited(arg_file.as_deref())
-    };
-
-    let items = match input_items {
-        Ok(items) => items,
-        Err(e) => {
-            eprintln!("xargs: {}", e);
-            return 1;
-        }
-    };
-
-    if items.is_empty() && no_run_if_empty {
-        return 0;
-    }
-
-    // -I mode: one invocation per input item, replace occurrences
-    if let Some(ref repl) = replace_str {
-        let mut exit_code = 0;
-        for item in &items {
-            let replaced_args: Vec<String> = initial_args
-                .iter()
-                .map(|a| a.replace(repl.as_str(), item))
-                .collect();
-
-            let code = run_command(&program, &replaced_args, trace);
-            if code != 0 {
-                exit_code = code;
-            }
-        }
-        return exit_code;
-    }
-
-    // Normal mode: batch items into invocations
-    let batch_size = max_args.unwrap_or(items.len().max(1));
-    let mut exit_code = 0;
-
-    for chunk in items.chunks(batch_size) {
-        let mut all_args = initial_args.clone();
-        all_args.extend(chunk.iter().cloned());
-
-        let code = run_command(&program, &all_args, trace);
-        if code != 0 {
-            exit_code = code;
-        }
-    }
-
-    // If no items and no -r flag, run command once with just initial args
-    if items.is_empty() && !no_run_if_empty {
-        exit_code = run_command(&program, &initial_args, trace);
-    }
-
-    exit_code
-}
-
-/// Run a command with given arguments, optionally printing it to stderr.
-fn run_command(program: &str, args: &[String], trace: bool) -> i32 {
-    if trace {
-        let mut cmd_line = program.to_string();
-        for a in args {
-            cmd_line.push(' ');
-            cmd_line.push_str(a);
-        }
-        eprintln!("{}", cmd_line);
-    }
-
-    if program == "echo" {
-        let stdout = std::io::stdout();
-        let mut out = stdout.lock();
-        if let Err(e) = writeln!(out, "{}", args.join(" ")).and_then(|_| out.flush()) {
-            eprintln!("xargs: {}", e);
-            return 1;
-        }
-        return 0;
-    }
-
-    let mut cmd = std::process::Command::new(program);
-    cmd.args(args)
-        .stdin(Stdio::null())
-        .stdout(Stdio::inherit())
-        .stderr(Stdio::inherit());
-
-    match cmd.status() {
-        Ok(status) => status.code().unwrap_or(1),
-        Err(e) => {
-            eprintln!("xargs: {}: {}", program, e);
-            127
-        }
-    }
-}
-
-/// Read NUL-delimited items from stdin.
-fn read_null_delimited(arg_file: Option<&str>) -> io::Result<Vec<String>> {
-    let input = match arg_file {
-        Some(path) => read_limited_bytes(File::open(path)?)?,
-        None => read_limited_bytes(io::stdin().lock())?,
-    };
-
-    let mut items = Vec::new();
-    for segment in input.split(|&b| b == 0).filter(|s| !s.is_empty()) {
-        push_item(&mut items, String::from_utf8_lossy(segment).to_string())?;
-    }
-    Ok(items)
-}
-
-/// Read whitespace-delimited items from stdin, respecting shell quoting.
-fn read_whitespace_delimited(arg_file: Option<&str>) -> io::Result<Vec<String>> {
-    let input = match arg_file {
-        Some(path) => read_limited_string(File::open(path)?)?,
-        None => read_limited_string(io::stdin().lock())?,
-    };
-
-    let mut items = Vec::new();
-    for line in input.lines() {
-        for item in parse_quoted_args(line) {
-            push_item(&mut items, item)?;
-        }
-    }
-    Ok(items)
-}
-
-fn read_limited_bytes<R: Read>(reader: R) -> io::Result<Vec<u8>> {
-    let mut input = Vec::new();
-    let mut limited = reader.take((MAX_INPUT_BYTES + 1) as u64);
-    limited.read_to_end(&mut input)?;
-    if input.len() > MAX_INPUT_BYTES {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            "input exceeds size limit",
-        ));
-    }
-    Ok(input)
-}
-
-fn read_limited_string<R: Read>(mut reader: R) -> io::Result<String> {
-    let mut input = String::new();
-    let mut limited = reader.by_ref().take((MAX_INPUT_BYTES + 1) as u64);
-    limited.read_to_string(&mut input)?;
-    if input.len() > MAX_INPUT_BYTES {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            "input exceeds size limit",
-        ));
-    }
-    Ok(input)
-}
-
-fn push_item(items: &mut Vec<String>, item: String) -> io::Result<()> {
-    if item.len() > MAX_INPUT_ITEM_BYTES {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            "input item exceeds size limit",
-        ));
-    }
-    if items.len() >= MAX_INPUT_ITEMS {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            "too many input items",
-        ));
-    }
-    items.push(item);
-    Ok(())
-}
-
-/// Parse a line respecting single quotes, double quotes, and backslash escapes.
-fn parse_quoted_args(input: &str) -> Vec<String> {
-    let mut items = Vec::new();
-    let mut current = String::new();
-    let mut in_single = false;
-    let mut in_double = false;
-    let mut escape = false;
-    let mut has_content = false;
-
-    for ch in input.chars() {
-        if escape {
-            current.push(ch);
-            escape = false;
-            has_content = true;
-            continue;
-        }
-
-        if in_single {
-            if ch == '\'' {
-                in_single = false;
-            } else {
-                current.push(ch);
-            }
-            continue;
-        }
-
-        if in_double {
-            if ch == '\\' {
-                escape = true;
-            } else if ch == '"' {
-                in_double = false;
-            } else {
-                current.push(ch);
-            }
-            continue;
-        }
-
-        match ch {
-            '\\' => {
-                escape = true;
-                has_content = true;
-            }
-            '\'' => {
-                in_single = true;
-                has_content = true;
-            }
-            '"' => {
-                in_double = true;
-                has_content = true;
-            }
-            ' ' | '\t' => {
-                if has_content {
-                    items.push(current.clone());
-                    current.clear();
-                    has_content = false;
-                }
-            }
-            _ => {
-                current.push(ch);
-                has_content = true;
-            }
-        }
-    }
-
-    if has_content {
-        items.push(current);
-    }
-
-    items
-}
diff --git a/registry/native/crates/libs/strings-cmd/Cargo.toml b/registry/native/crates/libs/strings-cmd/Cargo.toml
deleted file mode 100644
index 30e9834b6..000000000
--- a/registry/native/crates/libs/strings-cmd/Cargo.toml
+++ /dev/null
@@ -1,8 +0,0 @@
-[package]
-name = "secureexec-strings-cmd"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "strings command implementation for secure-exec standalone binaries"
-
-[dependencies]
diff --git a/registry/native/crates/libs/strings-cmd/src/lib.rs b/registry/native/crates/libs/strings-cmd/src/lib.rs
deleted file mode 100644
index 910673f12..000000000
--- a/registry/native/crates/libs/strings-cmd/src/lib.rs
+++ /dev/null
@@ -1,185 +0,0 @@
-//! strings -- find printable ASCII strings in binary data
-
-use std::ffi::OsString;
-use std::fs::File;
-use std::io::{self, Read, Write};
-
-const READ_BUFFER_BYTES: usize = 8 * 1024;
-const MAX_MIN_LENGTH: usize = 1024 * 1024;
-
-pub fn main(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    let mut min_len: usize = 4;
-    let mut offset_format: Option<char> = None; // 'd', 'o', or 'x'
-    let mut filenames: Vec<String> = Vec::new();
-
-    let mut i = 0;
-    while i < str_args.len() {
-        match str_args[i].as_str() {
-            "-n" => {
-                i += 1;
-                if i >= str_args.len() {
-                    eprintln!("strings: option '-n' requires an argument");
-                    return 1;
-                }
-                match str_args[i].parse::<usize>() {
-                    Ok(n) if (1..=MAX_MIN_LENGTH).contains(&n) => min_len = n,
-                    _ => {
-                        eprintln!("strings: invalid minimum string length '{}'", str_args[i]);
-                        return 1;
-                    }
-                }
-            }
-            s if s.starts_with("-n") => {
-                let val = &s[2..];
-                match val.parse::<usize>() {
-                    Ok(n) if (1..=MAX_MIN_LENGTH).contains(&n) => min_len = n,
-                    _ => {
-                        eprintln!("strings: invalid minimum string length '{}'", val);
-                        return 1;
-                    }
-                }
-            }
-            "-t" => {
-                i += 1;
-                if i >= str_args.len() {
-                    eprintln!("strings: option '-t' requires an argument");
-                    return 1;
-                }
-                match str_args[i].as_str() {
-                    "d" | "o" | "x" => offset_format = Some(str_args[i].chars().next().unwrap()),
-                    _ => {
-                        eprintln!("strings: invalid radix for -t: '{}'", str_args[i]);
-                        return 1;
-                    }
-                }
-            }
-            s if s.starts_with('-') && s.len() > 1 => {
-                // Try parsing as -N (numeric min length, GNU extension)
-                if let Ok(n) = s[1..].parse::<usize>() {
-                    if (1..=MAX_MIN_LENGTH).contains(&n) {
-                        min_len = n;
-                    } else {
-                        eprintln!("strings: invalid minimum string length '{}'", &s[1..]);
-                        return 1;
-                    }
-                } else {
-                    eprintln!("strings: unknown option '{}'", s);
-                    return 1;
-                }
-            }
-            _ => filenames.push(str_args[i].clone()),
-        }
-        i += 1;
-    }
-
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-
-    if filenames.is_empty() {
-        if let Err(e) = extract_strings(io::stdin().lock(), min_len, offset_format, &mut out) {
-            eprintln!("strings: stdin: {}", e);
-            return 1;
-        }
-    } else {
-        for filename in &filenames {
-            match File::open(filename)
-                .and_then(|f| extract_strings(f, min_len, offset_format, &mut out))
-            {
-                Ok(()) => {}
-                Err(e) => {
-                    eprintln!("strings: {}: {}", filename, e);
-                    return 1;
-                }
-            };
-        }
-    }
-
-    match out.flush() {
-        Ok(()) => 0,
-        Err(e) => {
-            eprintln!("strings: stdout: {}", e);
-            1
-        }
-    }
-}
-
-fn extract_strings<R: Read, W: Write>(
-    mut reader: R,
-    min_len: usize,
-    offset_fmt: Option<char>,
-    out: &mut W,
-) -> io::Result<()> {
-    let mut run_start: Option<usize> = None;
-    let mut run = Vec::new();
-    let mut emitted = false;
-    let mut offset = 0;
-    let mut buffer = [0; READ_BUFFER_BYTES];
-
-    loop {
-        let bytes_read = reader.read(&mut buffer)?;
-        if bytes_read == 0 {
-            break;
-        }
-
-        for &b in &buffer[..bytes_read] {
-            if is_printable_ascii(b) {
-                if run_start.is_none() {
-                    run_start = Some(offset);
-                }
-                if emitted {
-                    out.write_all(&[b])?;
-                } else {
-                    run.push(b);
-                    if run.len() == min_len {
-                        emit_prefix(out, run_start.unwrap_or(0), offset_fmt)?;
-                        out.write_all(&run)?;
-                        run.clear();
-                        emitted = true;
-                    }
-                }
-            } else {
-                if emitted {
-                    writeln!(out)?;
-                }
-                run.clear();
-                run_start = None;
-                emitted = false;
-            }
-            offset += 1;
-        }
-    }
-
-    if emitted {
-        writeln!(out)?;
-    }
-    Ok(())
-}
-
-fn emit_prefix<W: Write>(out: &mut W, offset: usize, offset_fmt: Option<char>) -> io::Result<()> {
-    if let Some(fmt) = offset_fmt {
-        match fmt {
-            'd' => {
-                write!(out, "{:7} ", offset)?;
-            }
-            'o' => {
-                write!(out, "{:7o} ", offset)?;
-            }
-            'x' => {
-                write!(out, "{:7x} ", offset)?;
-            }
-            _ => {}
-        }
-    }
-    Ok(())
-}
-
-fn is_printable_ascii(b: u8) -> bool {
-    // Printable ASCII: space (0x20) through tilde (0x7E), plus tab (0x09)
-    b == b'\t' || (b >= 0x20 && b <= 0x7E)
-}
diff --git a/registry/native/crates/libs/stubs/Cargo.toml b/registry/native/crates/libs/stubs/Cargo.toml
deleted file mode 100644
index ca054d68e..000000000
--- a/registry/native/crates/libs/stubs/Cargo.toml
+++ /dev/null
@@ -1,6 +0,0 @@
-[package]
-name = "secureexec-stubs"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "Stub implementations for commands not supported in WASM"
diff --git a/registry/native/crates/libs/stubs/src/lib.rs b/registry/native/crates/libs/stubs/src/lib.rs
deleted file mode 100644
index 01df8f62d..000000000
--- a/registry/native/crates/libs/stubs/src/lib.rs
+++ /dev/null
@@ -1,93 +0,0 @@
-//! Stub implementations for commands that are impossible or impractical in WASM.
-//!
-//! Each stub prints an appropriate error message and exits with code 1,
-//! except for commands that can provide a reasonable default (hostname,
-//! hostid, sync).
-//!
-//! Used by the _stubs mini-multicall binary, which dispatches on argv[0].
-
-use std::path::Path;
-
-/// Run a stub command based on argv[0] basename.
-/// Returns exit code (0 for no-ops/defaults, 1 for unsupported).
-pub fn run(args: &[String]) -> i32 {
-    let cmd = args
-        .first()
-        .and_then(|a| Path::new(a).file_name())
-        .and_then(|n| n.to_str())
-        .unwrap_or("_stubs");
-
-    match cmd {
-        "chcon" | "runcon" => {
-            eprintln!("{}: SELinux is not supported in WASM", cmd);
-            1
-        }
-        "chgrp" | "chown" => {
-            eprintln!(
-                "{}: user/group ownership changes are not supported in WASM",
-                cmd
-            );
-            1
-        }
-        "chroot" => {
-            eprintln!("chroot: not supported in WASM (no filesystem root change)");
-            1
-        }
-        "df" => {
-            eprintln!("df: filesystem stats are not available in WASM");
-            1
-        }
-        "groups" | "id" => {
-            eprintln!("{}: user database queries are not supported in WASM", cmd);
-            1
-        }
-        "hostname" => print_line("wasm-host"),
-        "hostid" => print_line("00000000"),
-        "install" => {
-            eprintln!("install: file permission management not fully supported in WASM");
-            1
-        }
-        "kill" => {
-            eprintln!("kill: process signals are not supported in WASM");
-            1
-        }
-        "mkfifo" | "mknod" => {
-            eprintln!("{}: special file creation is not supported in WASM", cmd);
-            1
-        }
-        "pinky" | "who" | "users" | "uptime" => {
-            eprintln!("{}: login records (utmp) are not available in WASM", cmd);
-            1
-        }
-        "stty" => {
-            eprintln!("stty: terminal control is not supported in WASM");
-            1
-        }
-        "sync" => {
-            // No-op in WASM (VFS is in-memory)
-            0
-        }
-        "tty" => {
-            eprintln!("not a tty");
-            1
-        }
-        _ => {
-            eprintln!("{}: command not supported in sandbox", cmd);
-            1
-        }
-    }
-}
-
-fn print_line(value: &str) -> i32 {
-    use std::io::Write;
-
-    let stdout = std::io::stdout();
-    let mut out = stdout.lock();
-    match writeln!(out, "{}", value).and_then(|_| out.flush()) {
-        Ok(()) => 0,
-        Err(error) => {
-            eprintln!("_stubs: {}", error);
-            1
-        }
-    }
-}
diff --git a/registry/native/crates/libs/tar/Cargo.toml b/registry/native/crates/libs/tar/Cargo.toml
deleted file mode 100644
index 6e42ed60f..000000000
--- a/registry/native/crates/libs/tar/Cargo.toml
+++ /dev/null
@@ -1,10 +0,0 @@
-[package]
-name = "secureexec-tar"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "tar implementation for secure-exec standalone binaries"
-
-[dependencies]
-flate2 = { version = "1.0", default-features = false, features = ["rust_backend"] }
-tar = "0.4"
diff --git a/registry/native/crates/libs/tar/src/lib.rs b/registry/native/crates/libs/tar/src/lib.rs
deleted file mode 100644
index d20f009a3..000000000
--- a/registry/native/crates/libs/tar/src/lib.rs
+++ /dev/null
@@ -1,748 +0,0 @@
-//! tar implementation — create, extract, and list tape archives.
-//!
-//! Supports -c create, -x extract, -t list.
-//! Options: -f archive, -z gzip, -v verbose, -C directory, --strip-components=N.
-
-use std::collections::HashSet;
-use std::ffi::OsString;
-use std::fs::{self, File, OpenOptions};
-use std::io::{self, Read, Write};
-use std::path::{Component, Path, PathBuf};
-
-use flate2::read::GzDecoder;
-use flate2::write::GzEncoder;
-use flate2::Compression;
-
-const MAX_ARCHIVE_ENTRIES: usize = 100_000;
-const MAX_CREATE_DEPTH: usize = 256;
-const MAX_DIRECTORY_ENTRIES: usize = 100_000;
-
-#[derive(PartialEq)]
-enum Mode {
-    None,
-    Create,
-    Extract,
-    List,
-}
-
-/// Unified tar entry point.
-pub fn main(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    if str_args.is_empty() {
-        eprintln!("tar: must specify one of -c, -x, -t");
-        return 1;
-    }
-
-    let mut mode = Mode::None;
-    let mut archive_file: Option<String> = None;
-    let mut gzip = false;
-    let mut verbose = false;
-    let mut directory: Option<String> = None;
-    let mut strip_components: usize = 0;
-    let mut paths: Vec<String> = Vec::new();
-
-    let mut i = 0;
-    let mut first_arg = true;
-
-    while i < str_args.len() {
-        let arg = &str_args[i];
-
-        if arg.starts_with("--strip-components=") {
-            if let Ok(n) = arg["--strip-components=".len()..].parse() {
-                strip_components = n;
-            }
-            first_arg = false;
-        } else if arg == "--strip-components" {
-            i += 1;
-            if i < str_args.len() {
-                strip_components = str_args[i].parse().unwrap_or(0);
-            }
-            first_arg = false;
-        } else if arg == "-C" || arg == "--directory" {
-            i += 1;
-            if i < str_args.len() {
-                directory = Some(str_args[i].clone());
-            }
-            first_arg = false;
-        } else if arg == "--help" {
-            print_usage();
-            return 0;
-        } else if arg.starts_with('-') || first_arg {
-            // tar's first argument can omit the leading dash (e.g., `tar czf`)
-            let flags = if arg.starts_with('-') {
-                &arg[1..]
-            } else {
-                &arg[..]
-            };
-            let mut chars = flags.chars().peekable();
-            while let Some(ch) = chars.next() {
-                match ch {
-                    'c' => mode = Mode::Create,
-                    'x' => mode = Mode::Extract,
-                    't' => mode = Mode::List,
-                    'z' => gzip = true,
-                    'v' => verbose = true,
-                    'f' => {
-                        let rest: String = chars.collect();
-                        if !rest.is_empty() {
-                            archive_file = Some(rest);
-                        } else {
-                            i += 1;
-                            if i < str_args.len() {
-                                archive_file = Some(str_args[i].clone());
-                            }
-                        }
-                        break;
-                    }
-                    'C' => {
-                        let rest: String = chars.collect();
-                        if !rest.is_empty() {
-                            directory = Some(rest);
-                        } else {
-                            i += 1;
-                            if i < str_args.len() {
-                                directory = Some(str_args[i].clone());
-                            }
-                        }
-                        break;
-                    }
-                    _ => {
-                        eprintln!("tar: unknown option: {}", ch);
-                        return 1;
-                    }
-                }
-            }
-            first_arg = false;
-        } else {
-            paths.push(arg.clone());
-            first_arg = false;
-        }
-
-        i += 1;
-    }
-
-    // Auto-detect gzip from filename
-    if !gzip {
-        if let Some(ref f) = archive_file {
-            if f.ends_with(".tar.gz") || f.ends_with(".tgz") {
-                gzip = true;
-            }
-        }
-    }
-
-    let result = match mode {
-        Mode::Create => do_create(
-            archive_file.as_deref(),
-            gzip,
-            verbose,
-            directory.as_deref(),
-            &paths,
-        ),
-        Mode::Extract => do_extract(
-            archive_file.as_deref(),
-            gzip,
-            verbose,
-            directory.as_deref(),
-            strip_components,
-        ),
-        Mode::List => do_list(archive_file.as_deref(), gzip, verbose),
-        Mode::None => {
-            eprintln!("tar: must specify one of -c, -x, -t");
-            return 1;
-        }
-    };
-
-    match result {
-        Ok(()) => 0,
-        Err(e) => {
-            eprintln!("tar: {}", e);
-            1
-        }
-    }
-}
-
-fn do_create(
-    archive_file: Option<&str>,
-    gzip: bool,
-    verbose: bool,
-    directory: Option<&str>,
-    paths: &[String],
-) -> io::Result<()> {
-    if paths.is_empty() {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            "cowardly refusing to create an empty archive",
-        ));
-    }
-
-    match archive_file {
-        Some("-") | None => create_to_writer(io::stdout(), gzip, verbose, directory, paths),
-        Some(path) => {
-            let mut archive = BoundedVecWriter::new(512 * 1024 * 1024);
-            create_to_writer(&mut archive, gzip, verbose, directory, paths)?;
-            fs::write(path, archive.into_inner())
-        }
-    }
-}
-
-struct BoundedVecWriter {
-    bytes: Vec<u8>,
-    capacity: usize,
-}
-
-impl BoundedVecWriter {
-    fn new(capacity: usize) -> Self {
-        Self {
-            bytes: Vec::new(),
-            capacity,
-        }
-    }
-
-    fn into_inner(self) -> Vec<u8> {
-        self.bytes
-    }
-}
-
-impl Write for BoundedVecWriter {
-    fn write(&mut self, buf: &[u8]) -> io::Result<usize> {
-        let Some(new_len) = self.bytes.len().checked_add(buf.len()) else {
-            return Err(io::Error::new(
-                io::ErrorKind::InvalidInput,
-                "archive is too large to buffer",
-            ));
-        };
-        if new_len > self.capacity {
-            return Err(io::Error::new(
-                io::ErrorKind::InvalidInput,
-                "archive is too large to buffer",
-            ));
-        }
-        self.bytes.extend_from_slice(buf);
-        Ok(buf.len())
-    }
-
-    fn flush(&mut self) -> io::Result<()> {
-        Ok(())
-    }
-}
-
-fn create_to_writer<W: Write>(
-    writer: W,
-    gzip: bool,
-    verbose: bool,
-    directory: Option<&str>,
-    paths: &[String],
-) -> io::Result<()> {
-    if gzip {
-        let encoder = GzEncoder::new(writer, Compression::default());
-        let mut builder = tar::Builder::new(encoder);
-        append_paths(&mut builder, directory, paths, verbose)?;
-        let encoder = builder.into_inner()?;
-        let mut writer = encoder.finish()?;
-        writer.flush()
-    } else {
-        let mut builder = tar::Builder::new(writer);
-        append_paths(&mut builder, directory, paths, verbose)?;
-        let mut writer = builder.into_inner()?;
-        writer.flush()
-    }
-}
-
-fn append_paths<W: Write>(
-    builder: &mut tar::Builder<W>,
-    directory: Option<&str>,
-    paths: &[String],
-    verbose: bool,
-) -> io::Result<()> {
-    let mut entry_count = 0;
-    for path in paths {
-        append_path(
-            builder,
-            resolve_disk_path(directory, Path::new(path)),
-            Path::new(path),
-            verbose,
-            0,
-            &mut entry_count,
-        )?;
-    }
-    Ok(())
-}
-
-fn append_path<W: Write>(
-    builder: &mut tar::Builder<W>,
-    disk_path: PathBuf,
-    archive_path: &Path,
-    verbose: bool,
-    depth: usize,
-    entry_count: &mut usize,
-) -> io::Result<()> {
-    if depth > MAX_CREATE_DEPTH {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            format!(
-                "maximum directory depth exceeded at {}",
-                disk_path.display()
-            ),
-        ));
-    }
-    increment_entry_count(entry_count)?;
-
-    let meta = fs::symlink_metadata(&disk_path)?;
-
-    if meta.is_dir() {
-        append_dir(
-            builder,
-            &disk_path,
-            archive_path,
-            verbose,
-            depth,
-            entry_count,
-        )?;
-    } else if meta.is_file() {
-        if verbose {
-            eprintln!("{}", archive_path.display());
-        }
-        let mut header = tar::Header::new_gnu();
-        header.set_entry_type(tar::EntryType::Regular);
-        header.set_size(meta.len());
-        header.set_mode(0o644);
-        header.set_cksum();
-        let mut file = File::open(&disk_path)?;
-        builder.append_data(&mut header, archive_path, &mut file)?;
-    } else if meta.file_type().is_symlink() {
-        if verbose {
-            eprintln!("{}", archive_path.display());
-        }
-        let target = fs::read_link(&disk_path)?;
-        let mut header = tar::Header::new_gnu();
-        header.set_entry_type(tar::EntryType::Symlink);
-        header.set_size(0);
-        header.set_mode(0o777);
-        header.set_cksum();
-        builder.append_link(&mut header, archive_path, &target)?;
-    }
-
-    Ok(())
-}
-
-fn append_dir<W: Write>(
-    builder: &mut tar::Builder<W>,
-    disk_dir: &Path,
-    archive_dir: &Path,
-    verbose: bool,
-    depth: usize,
-    entry_count: &mut usize,
-) -> io::Result<()> {
-    if verbose {
-        eprintln!("{}/", archive_dir.display());
-    }
-
-    let mut header = tar::Header::new_gnu();
-    header.set_entry_type(tar::EntryType::Directory);
-    header.set_size(0);
-    header.set_mode(0o755);
-    header.set_cksum();
-    builder.append_data(&mut header, archive_dir, io::empty())?;
-
-    let mut dir_entries = 0;
-    for entry_result in fs::read_dir(disk_dir)? {
-        let entry = entry_result?;
-        dir_entries += 1;
-        if dir_entries > MAX_DIRECTORY_ENTRIES {
-            return Err(io::Error::new(
-                io::ErrorKind::InvalidInput,
-                format!("too many entries in {}", disk_dir.display()),
-            ));
-        }
-        let archive_child = archive_dir.join(entry.file_name());
-        append_path(
-            builder,
-            entry.path(),
-            &archive_child,
-            verbose,
-            depth + 1,
-            entry_count,
-        )?;
-    }
-
-    Ok(())
-}
-
-fn do_extract(
-    archive_file: Option<&str>,
-    gzip: bool,
-    verbose: bool,
-    directory: Option<&str>,
-    strip_components: usize,
-) -> io::Result<()> {
-    let reader = open_read(archive_file, gzip)?;
-    let mut archive = tar::Archive::new(reader);
-    let mut known_dirs = HashSet::new();
-    if let Some(base) = directory {
-        validate_extract_base(Path::new(base))?;
-        known_dirs.insert(PathBuf::from(base));
-    }
-
-    let mut entry_count = 0;
-    for entry_result in archive.entries()? {
-        increment_entry_count(&mut entry_count)?;
-        let mut entry = entry_result?;
-        let orig_path = entry.path()?.into_owned();
-        validate_archive_input_path(&orig_path)?;
-
-        let relative_dest = match strip_path_components(&orig_path, strip_components) {
-            Some(p) if !p.as_os_str().is_empty() => p,
-            _ => continue,
-        };
-        validate_relative_output_path(&relative_dest)?;
-        validate_extract_depth(&relative_dest)?;
-        let dest = resolve_output_path(directory, &relative_dest);
-
-        if verbose {
-            eprintln!("{}", orig_path.display());
-        }
-
-        match entry.header().entry_type() {
-            tar::EntryType::Directory => {
-                ensure_relative_dir_exists(directory, &relative_dest, &mut known_dirs)?;
-            }
-            tar::EntryType::Regular | tar::EntryType::GNUSparse => {
-                if let Some(parent) = dest.parent() {
-                    if !parent.as_os_str().is_empty() {
-                        let relative_parent =
-                            relative_dest.parent().unwrap_or_else(|| Path::new(""));
-                        ensure_relative_dir_exists(directory, relative_parent, &mut known_dirs)?;
-                    }
-                }
-                reject_existing_symlink(&dest)?;
-                let mut output = OpenOptions::new()
-                    .create(true)
-                    .write(true)
-                    .truncate(true)
-                    .open(&dest)
-                    .map_err(|e| {
-                        io::Error::new(e.kind(), format!("open {}: {}", dest.display(), e))
-                    })?;
-                io::copy(&mut entry, &mut output).map_err(|e| {
-                    io::Error::new(e.kind(), format!("write {}: {}", dest.display(), e))
-                })?;
-                output.flush().map_err(|e| {
-                    io::Error::new(e.kind(), format!("write {}: {}", dest.display(), e))
-                })?;
-            }
-            tar::EntryType::Symlink => {
-                if let Some(target) = entry.link_name()? {
-                    validate_symlink_target(target.as_ref())?;
-                    if let Some(parent) = dest.parent() {
-                        if !parent.as_os_str().is_empty() {
-                            let relative_parent =
-                                relative_dest.parent().unwrap_or_else(|| Path::new(""));
-                            ensure_relative_dir_exists(
-                                directory,
-                                relative_parent,
-                                &mut known_dirs,
-                            )?;
-                        }
-                    }
-                    reject_existing_symlink(&dest)?;
-                    #[allow(deprecated)]
-                    std::fs::soft_link(target.as_ref(), &dest).map_err(|e| {
-                        io::Error::new(e.kind(), format!("symlink {}: {}", dest.display(), e))
-                    })?;
-                }
-            }
-            _ => {
-                // Skip hard links, char/block devices, etc.
-            }
-        }
-    }
-
-    Ok(())
-}
-
-fn resolve_disk_path(directory: Option<&str>, path: &Path) -> PathBuf {
-    match directory {
-        Some(base) if !path.is_absolute() => Path::new(base).join(path),
-        _ => path.to_path_buf(),
-    }
-}
-
-fn resolve_output_path(directory: Option<&str>, path: &Path) -> PathBuf {
-    match directory {
-        Some(base) if path.is_relative() => Path::new(base).join(path),
-        _ => path.to_path_buf(),
-    }
-}
-
-fn ensure_relative_dir_exists(
-    directory: Option<&str>,
-    relative_path: &Path,
-    known_dirs: &mut HashSet<PathBuf>,
-) -> io::Result<()> {
-    let mut current = match directory {
-        Some(base) => PathBuf::from(base),
-        None => PathBuf::new(),
-    };
-
-    for component in relative_path.components() {
-        match component {
-            Component::CurDir => {}
-            Component::Normal(part) => {
-                current.push(part);
-                if known_dirs.contains(&current) {
-                    continue;
-                }
-                match fs::create_dir(&current) {
-                    Ok(()) => {
-                        known_dirs.insert(current.clone());
-                    }
-                    Err(err) if err.kind() == io::ErrorKind::AlreadyExists => {
-                        let metadata = fs::symlink_metadata(&current).map_err(|metadata_err| {
-                            io::Error::new(
-                                metadata_err.kind(),
-                                format!("metadata {}: {}", current.display(), metadata_err),
-                            )
-                        })?;
-                        if metadata.file_type().is_symlink() || !metadata.is_dir() {
-                            return Err(io::Error::new(
-                                io::ErrorKind::InvalidInput,
-                                format!("refusing to extract through {}", current.display()),
-                            ));
-                        }
-                        known_dirs.insert(current.clone());
-                    }
-                    Err(err) => {
-                        return Err(io::Error::new(
-                            err.kind(),
-                            format!("create_dir {}: {}", current.display(), err),
-                        ));
-                    }
-                }
-            }
-            Component::Prefix(_) | Component::RootDir | Component::ParentDir => {
-                return Err(io::Error::new(
-                    io::ErrorKind::InvalidInput,
-                    format!("unsupported path component in {}", relative_path.display()),
-                ));
-            }
-        }
-    }
-
-    Ok(())
-}
-
-fn do_list(archive_file: Option<&str>, gzip: bool, verbose: bool) -> io::Result<()> {
-    let reader = open_read(archive_file, gzip)?;
-    let mut archive = tar::Archive::new(reader);
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-
-    let mut entry_count = 0;
-    for entry_result in archive.entries()? {
-        increment_entry_count(&mut entry_count)?;
-        let entry = entry_result?;
-        let path = entry.path()?;
-
-        if verbose {
-            let h = entry.header();
-            let size = h.size().unwrap_or(0);
-            let mode = h.mode().unwrap_or(0o644);
-            let type_ch = match h.entry_type() {
-                tar::EntryType::Directory => 'd',
-                tar::EntryType::Symlink => 'l',
-                _ => '-',
-            };
-            writeln!(
-                out,
-                "{}{} {:>8} {}",
-                type_ch,
-                format_mode(mode),
-                size,
-                path.display()
-            )?;
-        } else {
-            writeln!(out, "{}", path.display())?;
-        }
-    }
-
-    out.flush()
-}
-
-fn open_read(archive_file: Option<&str>, gzip: bool) -> io::Result<Box<dyn Read>> {
-    let reader: Box<dyn Read> = match archive_file {
-        Some("-") | None => Box::new(io::stdin()),
-        Some(path) => Box::new(File::open(path)?),
-    };
-
-    if gzip {
-        Ok(Box::new(GzDecoder::new(reader)))
-    } else {
-        Ok(reader)
-    }
-}
-
-fn strip_path_components(path: &Path, n: usize) -> Option<PathBuf> {
-    let mut remaining = n;
-    let mut stripped = PathBuf::new();
-
-    for component in path.components() {
-        match component {
-            Component::Prefix(_) | Component::RootDir | Component::CurDir => {}
-            Component::ParentDir => {
-                if remaining == 0 {
-                    stripped.push(component.as_os_str());
-                }
-            }
-            Component::Normal(part) => {
-                if remaining > 0 {
-                    remaining -= 1;
-                } else {
-                    stripped.push(part);
-                }
-            }
-        }
-    }
-
-    if stripped.as_os_str().is_empty() {
-        None
-    } else {
-        Some(stripped)
-    }
-}
-
-fn increment_entry_count(count: &mut usize) -> io::Result<()> {
-    *count += 1;
-    if *count > MAX_ARCHIVE_ENTRIES {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            "too many archive entries",
-        ));
-    }
-    Ok(())
-}
-
-fn validate_relative_output_path(path: &Path) -> io::Result<()> {
-    for component in path.components() {
-        match component {
-            Component::Normal(_) | Component::CurDir => {}
-            Component::Prefix(_) | Component::RootDir | Component::ParentDir => {
-                return Err(io::Error::new(
-                    io::ErrorKind::InvalidInput,
-                    format!("refusing to extract unsafe path {}", path.display()),
-                ));
-            }
-        }
-    }
-    Ok(())
-}
-
-fn validate_archive_input_path(path: &Path) -> io::Result<()> {
-    for component in path.components() {
-        match component {
-            Component::Normal(_) | Component::CurDir => {}
-            Component::Prefix(_) | Component::RootDir | Component::ParentDir => {
-                return Err(io::Error::new(
-                    io::ErrorKind::InvalidInput,
-                    format!("refusing to extract unsafe path {}", path.display()),
-                ));
-            }
-        }
-    }
-    Ok(())
-}
-
-fn validate_extract_depth(path: &Path) -> io::Result<()> {
-    let depth = path
-        .components()
-        .filter(|component| matches!(component, Component::Normal(_)))
-        .count();
-    if depth > MAX_CREATE_DEPTH {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            format!("maximum extraction depth exceeded at {}", path.display()),
-        ));
-    }
-    Ok(())
-}
-
-fn validate_extract_base(path: &Path) -> io::Result<()> {
-    let metadata = fs::symlink_metadata(path).map_err(|err| {
-        io::Error::new(err.kind(), format!("metadata {}: {}", path.display(), err))
-    })?;
-    if metadata.file_type().is_symlink() || !metadata.is_dir() {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            format!("refusing to extract through {}", path.display()),
-        ));
-    }
-    Ok(())
-}
-
-fn validate_symlink_target(target: &Path) -> io::Result<()> {
-    for component in target.components() {
-        match component {
-            Component::Normal(_) | Component::CurDir => {}
-            Component::Prefix(_) | Component::RootDir | Component::ParentDir => {
-                return Err(io::Error::new(
-                    io::ErrorKind::InvalidInput,
-                    format!(
-                        "refusing to extract unsafe symlink target {}",
-                        target.display()
-                    ),
-                ));
-            }
-        }
-    }
-    Ok(())
-}
-
-fn reject_existing_symlink(path: &Path) -> io::Result<()> {
-    match fs::symlink_metadata(path) {
-        Ok(metadata) if metadata.file_type().is_symlink() => Err(io::Error::new(
-            io::ErrorKind::InvalidInput,
-            format!("refusing to overwrite symlink {}", path.display()),
-        )),
-        Ok(_) => Ok(()),
-        Err(err) if err.kind() == io::ErrorKind::NotFound => Ok(()),
-        Err(err) => Err(io::Error::new(
-            err.kind(),
-            format!("metadata {}: {}", path.display(), err),
-        )),
-    }
-}
-
-fn format_mode(mode: u32) -> String {
-    let mut s = String::with_capacity(9);
-    for &(bit, ch) in &[
-        (0o400, 'r'),
-        (0o200, 'w'),
-        (0o100, 'x'),
-        (0o040, 'r'),
-        (0o020, 'w'),
-        (0o010, 'x'),
-        (0o004, 'r'),
-        (0o002, 'w'),
-        (0o001, 'x'),
-    ] {
-        s.push(if mode & bit != 0 { ch } else { '-' });
-    }
-    s
-}
-
-fn print_usage() {
-    eprintln!("Usage: tar [options] [files...]");
-    eprintln!("  -c              create archive");
-    eprintln!("  -x              extract archive");
-    eprintln!("  -t              list archive contents");
-    eprintln!("  -f FILE         archive filename (- for stdin/stdout)");
-    eprintln!("  -z              gzip compress/decompress");
-    eprintln!("  -v              verbose");
-    eprintln!("  -C DIR          change directory");
-    eprintln!("  --strip-components=N");
-    eprintln!("                  strip N leading components on extract");
-}
diff --git a/registry/native/crates/libs/tree/Cargo.toml b/registry/native/crates/libs/tree/Cargo.toml
deleted file mode 100644
index adac0490e..000000000
--- a/registry/native/crates/libs/tree/Cargo.toml
+++ /dev/null
@@ -1,8 +0,0 @@
-[package]
-name = "secureexec-tree"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "tree implementation for secure-exec standalone binaries"
-
-[dependencies]
diff --git a/registry/native/crates/libs/tree/src/lib.rs b/registry/native/crates/libs/tree/src/lib.rs
deleted file mode 100644
index 71cfb7044..000000000
--- a/registry/native/crates/libs/tree/src/lib.rs
+++ /dev/null
@@ -1,268 +0,0 @@
-//! tree -- list directory contents in a tree-like format
-//!
-//! Recursive directory walk with box-drawing characters.
-//! Supports -a (show hidden), -d (dirs only), -L depth, -I exclude pattern.
-
-use std::ffi::OsString;
-use std::fs;
-use std::io::{self, Write};
-use std::path::Path;
-
-const DEFAULT_MAX_DEPTH: usize = 256;
-const MAX_TOTAL_ENTRIES: usize = 100_000;
-const MAX_DIRECTORY_ENTRIES: usize = 100_000;
-
-pub fn main(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    let mut show_hidden = false;
-    let mut dirs_only = false;
-    let mut max_depth: Option<usize> = None;
-    let mut exclude_pattern: Option<String> = None;
-    let mut paths: Vec<String> = Vec::new();
-
-    let mut i = 0;
-    while i < str_args.len() {
-        match str_args[i].as_str() {
-            "-a" => show_hidden = true,
-            "-d" => dirs_only = true,
-            "-L" => {
-                i += 1;
-                if i >= str_args.len() {
-                    eprintln!("tree: option '-L' requires an argument");
-                    return 1;
-                }
-                match str_args[i].parse::<usize>() {
-                    Ok(d) => max_depth = Some(d),
-                    Err(_) => {
-                        eprintln!("tree: invalid level '{}'", str_args[i]);
-                        return 1;
-                    }
-                }
-            }
-            "-I" => {
-                i += 1;
-                if i >= str_args.len() {
-                    eprintln!("tree: option '-I' requires an argument");
-                    return 1;
-                }
-                exclude_pattern = Some(str_args[i].clone());
-            }
-            s if s.starts_with('-') => {
-                eprintln!("tree: unknown option '{}'", s);
-                return 1;
-            }
-            _ => paths.push(str_args[i].clone()),
-        }
-        i += 1;
-    }
-
-    if paths.is_empty() {
-        paths.push(".".to_string());
-    }
-
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-    let mut dir_count: usize = 0;
-    let mut file_count: usize = 0;
-
-    for (idx, path) in paths.iter().enumerate() {
-        if let Err(e) = writeln!(out, "{}", path).and_then(|_| {
-            walk_tree(
-                Path::new(path),
-                "",
-                1,
-                max_depth,
-                show_hidden,
-                dirs_only,
-                exclude_pattern.as_deref(),
-                &mut dir_count,
-                &mut file_count,
-                &mut out,
-            )
-        }) {
-            eprintln!("tree: {}", e);
-            return 1;
-        }
-        if idx + 1 < paths.len() {
-            if let Err(e) = writeln!(out) {
-                eprintln!("tree: {}", e);
-                return 1;
-            }
-        }
-    }
-
-    if let Err(e) = writeln!(out) {
-        eprintln!("tree: {}", e);
-        return 1;
-    }
-    if dirs_only {
-        if let Err(e) = writeln!(
-            out,
-            "{} director{}",
-            dir_count,
-            if dir_count == 1 { "y" } else { "ies" }
-        ) {
-            eprintln!("tree: {}", e);
-            return 1;
-        }
-    } else {
-        if let Err(e) = writeln!(
-            out,
-            "{} director{}, {} file{}",
-            dir_count,
-            if dir_count == 1 { "y" } else { "ies" },
-            file_count,
-            if file_count == 1 { "" } else { "s" }
-        ) {
-            eprintln!("tree: {}", e);
-            return 1;
-        }
-    }
-
-    match out.flush() {
-        Ok(()) => 0,
-        Err(e) => {
-            eprintln!("tree: {}", e);
-            1
-        }
-    }
-}
-
-fn matches_exclude(name: &str, pattern: &str) -> bool {
-    // Simple glob matching: supports * as wildcard
-    if pattern.contains('*') {
-        let parts: Vec<&str> = pattern.split('*').collect();
-        if parts.len() == 2 {
-            let (prefix, suffix) = (parts[0], parts[1]);
-            return name.starts_with(prefix) && name.ends_with(suffix);
-        }
-        // Fallback: check if any non-wildcard part matches
-        parts.iter().all(|p| p.is_empty() || name.contains(p))
-    } else {
-        name == pattern
-    }
-}
-
-fn walk_tree<W: Write>(
-    dir: &Path,
-    prefix: &str,
-    depth: usize,
-    max_depth: Option<usize>,
-    show_hidden: bool,
-    dirs_only: bool,
-    exclude: Option<&str>,
-    dir_count: &mut usize,
-    file_count: &mut usize,
-    out: &mut W,
-) -> io::Result<()> {
-    if let Some(max) = max_depth {
-        if depth > max {
-            return Ok(());
-        }
-    } else if depth > DEFAULT_MAX_DEPTH {
-        return Ok(());
-    }
-
-    let mut entries: Vec<fs::DirEntry> = match fs::read_dir(dir) {
-        Ok(rd) => {
-            let mut entries = Vec::new();
-            for entry_result in rd {
-                let entry = entry_result?;
-                if entries.len() >= MAX_DIRECTORY_ENTRIES {
-                    return Err(io::Error::new(
-                        io::ErrorKind::InvalidInput,
-                        format!("too many entries in {}", dir.display()),
-                    ));
-                }
-                entries.push(entry);
-            }
-            entries
-        }
-        Err(e) => {
-            writeln!(out, "{}[error opening dir: {}]", prefix, e)?;
-            return Ok(());
-        }
-    };
-
-    // Sort entries alphabetically
-    entries.sort_by(|a, b| a.file_name().cmp(&b.file_name()));
-
-    // Filter entries
-    entries.retain(|e| {
-        let name = e.file_name().to_string_lossy().to_string();
-        // Skip hidden unless -a
-        if !show_hidden && name.starts_with('.') {
-            return false;
-        }
-        // Skip excluded patterns
-        if let Some(pat) = exclude {
-            if matches_exclude(&name, pat) {
-                return false;
-            }
-        }
-        // Skip files if -d
-        if dirs_only {
-            if let Ok(ft) = e.file_type() {
-                if !ft.is_dir() {
-                    return false;
-                }
-            }
-        }
-        true
-    });
-
-    let count = entries.len();
-
-    for (idx, entry) in entries.iter().enumerate() {
-        if *dir_count + *file_count >= MAX_TOTAL_ENTRIES {
-            return Err(io::Error::new(
-                io::ErrorKind::InvalidInput,
-                "too many tree entries",
-            ));
-        }
-
-        let is_last = idx + 1 == count;
-        let connector = if is_last {
-            "\u{2514}\u{2500}\u{2500} " // └──
-        } else {
-            "\u{251c}\u{2500}\u{2500} " // ├──
-        };
-
-        let name = entry.file_name().to_string_lossy().to_string();
-        let file_type = entry.file_type()?;
-        let is_dir = file_type.is_dir() && !file_type.is_symlink();
-
-        write!(out, "{}{}", prefix, connector)?;
-        writeln!(out, "{}", name)?;
-
-        if is_dir {
-            *dir_count += 1;
-            let child_prefix = if is_last {
-                format!("{}    ", prefix)
-            } else {
-                format!("{}\u{2502}   ", prefix) // │
-            };
-            walk_tree(
-                &dir.join(&name),
-                &child_prefix,
-                depth + 1,
-                max_depth,
-                show_hidden,
-                dirs_only,
-                exclude,
-                dir_count,
-                file_count,
-                out,
-            )?;
-        } else {
-            *file_count += 1;
-        }
-    }
-
-    Ok(())
-}
diff --git a/registry/native/crates/libs/wasi-http/Cargo.toml b/registry/native/crates/libs/wasi-http/Cargo.toml
deleted file mode 100644
index af90f82ce..000000000
--- a/registry/native/crates/libs/wasi-http/Cargo.toml
+++ /dev/null
@@ -1,9 +0,0 @@
-[package]
-name = "secureexec-wasi-http"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "Minimal HTTP/1.1 client for WASI using host_net TCP/TLS imports"
-
-[dependencies]
-wasi-ext = { path = "../../wasi-ext" }
diff --git a/registry/native/crates/libs/wasi-http/src/lib.rs b/registry/native/crates/libs/wasi-http/src/lib.rs
deleted file mode 100644
index 5abd6444e..000000000
--- a/registry/native/crates/libs/wasi-http/src/lib.rs
+++ /dev/null
@@ -1,1132 +0,0 @@
-//! Minimal HTTP/1.1 client for WASI using host_net TCP/TLS imports.
-//!
-//! Provides `HttpClient` for making HTTP and HTTPS requests through the
-//! host_net import module (socket, connect, send, recv, tls_connect).
-//! TLS certificate verification is handled by the host runtime.
-//!
-//! Supports:
-//! - GET, POST, PUT, DELETE, PATCH, HEAD methods
-//! - Custom headers
-//! - JSON request bodies
-//! - Streaming SSE (Server-Sent Events) responses
-//! - Chunked transfer encoding
-//! - Automatic DNS resolution via host_net
-
-use std::fmt;
-use std::io;
-
-// AF_INET, SOCK_STREAM for TCP
-const AF_INET: u32 = 2;
-const SOCK_STREAM: u32 = 1;
-const MAX_URL_BYTES: usize = 8 * 1024;
-const MAX_HEADER_BYTES: usize = 64 * 1024;
-const MAX_HEADER_COUNT: usize = 1_024;
-const MAX_REQUEST_BODY_BYTES: usize = 16 * 1024 * 1024;
-const MAX_RESPONSE_BODY_BYTES: usize = 16 * 1024 * 1024;
-const MAX_SSE_BUFFER_BYTES: usize = 1024 * 1024;
-/// Small, non-zero recv timeout (milliseconds) applied to every HTTP socket so
-/// the host polls briefly then returns EAGAIN instead of blocking the single
-/// guest thread. Must be non-zero — a zero timeval means "blocking" to the host.
-const HTTP_RECV_TIMEOUT_MS: u32 = 2;
-
-/// HTTP method.
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum Method {
-    Get,
-    Post,
-    Put,
-    Delete,
-    Patch,
-    Head,
-}
-
-impl fmt::Display for Method {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Method::Get => write!(f, "GET"),
-            Method::Post => write!(f, "POST"),
-            Method::Put => write!(f, "PUT"),
-            Method::Delete => write!(f, "DELETE"),
-            Method::Patch => write!(f, "PATCH"),
-            Method::Head => write!(f, "HEAD"),
-        }
-    }
-}
-
-/// Parsed URL components.
-#[derive(Debug, Clone)]
-pub struct Url {
-    pub scheme: String,
-    pub host: String,
-    pub port: u16,
-    pub path: String,
-}
-
-impl Url {
-    /// Parse a URL string into components.
-    ///
-    /// Supports http:// and https:// schemes.
-    pub fn parse(url: &str) -> Result<Self, HttpError> {
-        if url.len() > MAX_URL_BYTES || contains_http_ctl(url) {
-            return Err(HttpError::InvalidUrl(
-                "invalid URL characters or length".into(),
-            ));
-        }
-
-        let (scheme, rest) = if let Some(rest) = url.strip_prefix("https://") {
-            ("https".to_string(), rest)
-        } else if let Some(rest) = url.strip_prefix("http://") {
-            ("http".to_string(), rest)
-        } else {
-            return Err(HttpError::InvalidUrl(format!(
-                "unsupported scheme in: {}",
-                url
-            )));
-        };
-
-        let default_port: u16 = if scheme == "https" { 443 } else { 80 };
-
-        // Split host+port from request target. Query-only URLs use "/" as
-        // the path prefix so the request target remains origin-form.
-        let split_at = rest.find(['/', '?', '#']).unwrap_or(rest.len());
-        let authority = &rest[..split_at];
-        let suffix = &rest[split_at..];
-        let path = if suffix.is_empty() {
-            "/".to_string()
-        } else if suffix.starts_with('/') {
-            suffix.to_string()
-        } else {
-            format!("/{suffix}")
-        };
-        if authority.is_empty()
-            || authority.contains('@')
-            || contains_authority_separator(authority)
-            || !is_valid_request_target(&path)
-        {
-            return Err(HttpError::InvalidUrl("invalid authority or path".into()));
-        }
-
-        // Parse host:port
-        let (host, port) = if let Some(bracket_end) = authority.find(']') {
-            // IPv6: [::1]:port
-            if !authority.starts_with('[') {
-                return Err(HttpError::InvalidUrl("bad IPv6 host".into()));
-            }
-            let host = &authority[..=bracket_end];
-            let port = if authority.len() > bracket_end + 1
-                && authority.as_bytes()[bracket_end + 1] == b':'
-            {
-                authority[bracket_end + 2..]
-                    .parse::<u16>()
-                    .map_err(|_| HttpError::InvalidUrl("bad port".into()))?
-            } else if authority.len() > bracket_end + 1 {
-                return Err(HttpError::InvalidUrl("bad IPv6 authority".into()));
-            } else {
-                default_port
-            };
-            (host.to_string(), port)
-        } else if let Some(colon) = authority.rfind(':') {
-            let host = &authority[..colon];
-            let port = authority[colon + 1..]
-                .parse::<u16>()
-                .map_err(|_| HttpError::InvalidUrl("bad port".into()))?;
-            (host.to_string(), port)
-        } else {
-            (authority.to_string(), default_port)
-        };
-        if host.is_empty()
-            || contains_http_ctl(&host)
-            || contains_authority_separator(&host)
-            || contains_http_ctl(&path)
-        {
-            return Err(HttpError::InvalidUrl("invalid host or path".into()));
-        }
-
-        Ok(Url {
-            scheme,
-            host,
-            port,
-            path,
-        })
-    }
-
-    /// Whether this URL uses TLS (https).
-    pub fn is_tls(&self) -> bool {
-        self.scheme == "https"
-    }
-
-    /// The host:port string for the Host header.
-    pub fn host_header(&self) -> String {
-        let default_port = if self.is_tls() { 443 } else { 80 };
-        if self.port == default_port {
-            self.host.clone()
-        } else {
-            format!("{}:{}", self.host, self.port)
-        }
-    }
-}
-
-/// HTTP request builder.
-pub struct Request {
-    pub method: Method,
-    pub url: Url,
-    pub headers: Vec<(String, String)>,
-    pub body: Option<Vec<u8>>,
-}
-
-impl Request {
-    pub fn new(method: Method, url: &str) -> Result<Self, HttpError> {
-        Ok(Request {
-            method,
-            url: Url::parse(url)?,
-            headers: Vec::new(),
-            body: None,
-        })
-    }
-
-    /// Add a header.
-    pub fn header(mut self, name: &str, value: &str) -> Self {
-        self.headers.push((name.to_string(), value.to_string()));
-        self
-    }
-
-    /// Set a JSON body (also sets Content-Type header).
-    pub fn json_body(mut self, json: &str) -> Self {
-        self.headers
-            .push(("Content-Type".to_string(), "application/json".to_string()));
-        self.body = Some(json.as_bytes().to_vec());
-        self
-    }
-
-    /// Set a raw body.
-    pub fn body(mut self, data: Vec<u8>) -> Self {
-        self.body = Some(data);
-        self
-    }
-
-    /// Format the HTTP/1.1 request bytes.
-    fn to_bytes(&self) -> Result<Vec<u8>, HttpError> {
-        validate_request_headers(&self.headers)?;
-        if let Some(ref body) = self.body {
-            if body.len() > MAX_REQUEST_BODY_BYTES {
-                return Err(HttpError::Protocol("request body too large".into()));
-            }
-        }
-
-        let mut buf = Vec::with_capacity(512);
-        // Request line
-        buf.extend_from_slice(format!("{} {} HTTP/1.1\r\n", self.method, self.url.path).as_bytes());
-
-        // Host header (always first)
-        buf.extend_from_slice(format!("Host: {}\r\n", self.url.host_header()).as_bytes());
-
-        // User headers
-        for (name, value) in &self.headers {
-            buf.extend_from_slice(format!("{}: {}\r\n", name, value).as_bytes());
-        }
-
-        // Content-Length for bodies
-        if let Some(ref body) = self.body {
-            // Only add Content-Length if not already set
-            let has_cl = self
-                .headers
-                .iter()
-                .any(|(n, _)| n.eq_ignore_ascii_case("content-length"));
-            if !has_cl {
-                buf.extend_from_slice(format!("Content-Length: {}\r\n", body.len()).as_bytes());
-            }
-        }
-
-        // Connection close for simplicity
-        let has_connection = self
-            .headers
-            .iter()
-            .any(|(n, _)| n.eq_ignore_ascii_case("connection"));
-        if !has_connection {
-            buf.extend_from_slice(b"Connection: close\r\n");
-        }
-
-        buf.extend_from_slice(b"\r\n");
-
-        // Body
-        if let Some(ref body) = self.body {
-            buf.extend_from_slice(body);
-        }
-
-        Ok(buf)
-    }
-}
-
-/// HTTP response.
-#[derive(Debug)]
-pub struct Response {
-    pub status: u16,
-    pub status_text: String,
-    pub headers: Vec<(String, String)>,
-    pub body: Vec<u8>,
-}
-
-impl Response {
-    /// Get the body as a UTF-8 string.
-    pub fn text(&self) -> Result<String, HttpError> {
-        String::from_utf8(self.body.clone())
-            .map_err(|e| HttpError::Protocol(format!("invalid UTF-8 body: {}", e)))
-    }
-
-    /// Get a header value (case-insensitive lookup).
-    pub fn header(&self, name: &str) -> Option<&str> {
-        self.headers
-            .iter()
-            .find(|(n, _)| n.eq_ignore_ascii_case(name))
-            .map(|(_, v)| v.as_str())
-    }
-
-    /// Check if the response indicates a chunked transfer encoding.
-    fn is_chunked(headers: &[(String, String)]) -> bool {
-        headers
-            .iter()
-            .any(|(n, v)| n.eq_ignore_ascii_case("transfer-encoding") && v.contains("chunked"))
-    }
-
-    /// Get content-length from headers.
-    fn content_length(headers: &[(String, String)]) -> Option<usize> {
-        headers
-            .iter()
-            .find(|(n, _)| n.eq_ignore_ascii_case("content-length"))
-            .and_then(|(_, v)| v.trim().parse().ok())
-    }
-}
-
-/// Result of a single non-blocking read step on a streaming body/SSE reader.
-///
-/// `WouldBlock` means no data was available this instant (the socket has a small
-/// recv timeout and the host returned EAGAIN); the async caller should yield to
-/// the runtime and re-poll rather than spinning.
-#[derive(Debug)]
-pub enum ChunkPoll<T> {
-    /// A unit of data is ready.
-    Ready(T),
-    /// End of body/stream.
-    Eof,
-    /// No data available yet; yield and retry.
-    WouldBlock,
-}
-
-/// SSE (Server-Sent Events) event.
-#[derive(Debug, Clone)]
-pub struct SseEvent {
-    pub event: Option<String>,
-    pub data: String,
-    pub id: Option<String>,
-}
-
-/// Streaming SSE reader over an HTTP connection.
-pub struct SseReader {
-    socket_fd: u32,
-    buf: Vec<u8>,
-    offset: usize,
-    done: bool,
-}
-
-impl SseReader {
-    fn new(socket_fd: u32) -> Self {
-        SseReader {
-            socket_fd,
-            buf: Vec::new(),
-            offset: 0,
-            done: false,
-        }
-    }
-
-    /// Read the next SSE event from the stream.
-    ///
-    /// Returns `None` when the connection closes or the stream ends.
-    pub fn next_event(&mut self) -> Result<Option<SseEvent>, HttpError> {
-        if self.done {
-            return Ok(None);
-        }
-
-        let mut recv_buf = [0u8; 4096];
-
-        loop {
-            // Check if we have a complete event in the buffer
-            if let Some(end) = find_double_newline(&self.buf[self.offset..]) {
-                // Copy event text out before mutating buffer
-                let event_start = self.offset;
-                let event_end = self.offset + end;
-                let event_text = String::from_utf8(self.buf[event_start..event_end].to_vec())
-                    .map_err(|e| HttpError::Protocol(e.to_string()))?;
-                self.offset = event_end + 2; // skip the \n\n
-
-                // Compact buffer periodically
-                if self.offset > 8192 {
-                    self.buf = self.buf[self.offset..].to_vec();
-                    self.offset = 0;
-                }
-
-                return Ok(Some(parse_sse_event(&event_text)));
-            }
-
-            // Read more data. `recv_blocking` transparently retries on the
-            // cooperative WouldBlock (this synchronous SSE reader, used only by the
-            // `http-test` CLI, cannot yield to a runtime), so EOF still surfaces as
-            // `Ok(0)`.
-            match recv_blocking(self.socket_fd, &mut recv_buf) {
-                Ok(0) => {
-                    self.done = true;
-                    // Parse any remaining buffered data as a final event
-                    let tail = self.buf[self.offset..].to_vec();
-                    if !tail.is_empty() {
-                        if let Ok(s) = std::str::from_utf8(&tail) {
-                            let s = s.trim();
-                            if !s.is_empty() {
-                                return Ok(Some(parse_sse_event(s)));
-                            }
-                        }
-                    }
-                    return Ok(None);
-                }
-                Ok(n) => {
-                    self.buf.extend_from_slice(&recv_buf[..n as usize]);
-                    if self.buf.len().saturating_sub(self.offset) > MAX_SSE_BUFFER_BYTES {
-                        self.done = true;
-                        return Err(HttpError::Protocol("SSE event too large".into()));
-                    }
-                }
-                Err(e) => {
-                    self.done = true;
-                    return Err(e);
-                }
-            }
-        }
-    }
-
-    /// Close the underlying socket connection.
-    pub fn close(self) {
-        let _ = wasi_ext::net_close_socket(self.socket_fd);
-    }
-}
-
-/// HTTP errors.
-#[derive(Debug)]
-pub enum HttpError {
-    InvalidUrl(String),
-    Dns(String),
-    Socket(String),
-    Tls(String),
-    Protocol(String),
-    Io(io::Error),
-}
-
-impl fmt::Display for HttpError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            HttpError::InvalidUrl(msg) => write!(f, "invalid URL: {}", msg),
-            HttpError::Dns(msg) => write!(f, "DNS error: {}", msg),
-            HttpError::Socket(msg) => write!(f, "socket error: {}", msg),
-            HttpError::Tls(msg) => write!(f, "TLS error: {}", msg),
-            HttpError::Protocol(msg) => write!(f, "protocol error: {}", msg),
-            HttpError::Io(e) => write!(f, "I/O error: {}", e),
-        }
-    }
-}
-
-impl std::error::Error for HttpError {}
-
-impl From<io::Error> for HttpError {
-    fn from(e: io::Error) -> Self {
-        HttpError::Io(e)
-    }
-}
-
-/// HTTP client using host_net imports for TCP/TLS.
-///
-/// TLS certificate verification is delegated to the host runtime
-/// (Node.js tls.connect with system CA certificates).
-pub struct HttpClient;
-
-impl HttpClient {
-    pub fn new() -> Self {
-        HttpClient
-    }
-
-    /// Send a request and return the full response.
-    pub fn send(&self, req: &Request) -> Result<Response, HttpError> {
-        let request_bytes = req.to_bytes()?;
-        let fd = self.connect(&req.url)?;
-
-        // Send request
-        if let Err(error) = send_all(fd, &request_bytes) {
-            let _ = wasi_ext::net_close_socket(fd);
-            return Err(error);
-        }
-
-        // Read response
-        let result = read_response(fd);
-
-        // Close socket
-        let _ = wasi_ext::net_close_socket(fd);
-
-        result
-    }
-
-    /// Send a request and return an SSE reader for streaming.
-    ///
-    /// The caller must call `close()` on the returned reader when done.
-    pub fn send_sse(&self, req: &Request) -> Result<(Response, SseReader), HttpError> {
-        let request_bytes = req.to_bytes()?;
-        let fd = self.connect(&req.url)?;
-
-        // Send request
-        if let Err(error) = send_all(fd, &request_bytes) {
-            let _ = wasi_ext::net_close_socket(fd);
-            return Err(error);
-        }
-
-        // Read headers only
-        let (status, status_text, headers, remaining) = match read_headers(fd) {
-            Ok(headers) => headers,
-            Err(error) => {
-                let _ = wasi_ext::net_close_socket(fd);
-                return Err(error);
-            }
-        };
-
-        // Create SSE reader with any remaining body data
-        let mut reader = SseReader::new(fd);
-        if !remaining.is_empty() {
-            reader.buf = remaining;
-        }
-
-        let response = Response {
-            status,
-            status_text,
-            headers,
-            body: Vec::new(), // Body will be read via SseReader
-        };
-
-        Ok((response, reader))
-    }
-
-    /// Send a request and return a reader that yields RAW (de-framed) body bytes
-    /// incrementally. Unlike `send_sse`, this does NOT parse SSE framing, so callers
-    /// that run their own SSE parser over a raw byte stream (e.g. the reqwest shim's
-    /// `bytes_stream`, which codex's `transport.rs` SSE-parses) receive the
-    /// unmodified body. Transfer-Encoding/Content-Length are de-framed; the reader
-    /// owns the socket and closes it on drop.
-    pub fn send_raw_stream(
-        &self,
-        req: &Request,
-    ) -> Result<(Response, RawBodyReader), HttpError> {
-        let request_bytes = req.to_bytes()?;
-        let fd = self.connect(&req.url)?;
-        if let Err(error) = send_all(fd, &request_bytes) {
-            let _ = wasi_ext::net_close_socket(fd);
-            return Err(error);
-        }
-        let (status, status_text, headers, remaining) = match read_headers(fd) {
-            Ok(h) => h,
-            Err(error) => {
-                let _ = wasi_ext::net_close_socket(fd);
-                return Err(error);
-            }
-        };
-        let mode = if Response::is_chunked(&headers) {
-            BodyMode::Chunked
-        } else if let Some(len) = Response::content_length(&headers) {
-            BodyMode::Fixed { remaining: len }
-        } else {
-            BodyMode::Close
-        };
-        let reader = RawBodyReader {
-            fd,
-            buf: remaining,
-            mode,
-            done: false,
-        };
-        let response = Response {
-            status,
-            status_text,
-            headers,
-            body: Vec::new(),
-        };
-        Ok((response, reader))
-    }
-
-    /// Establish a TCP connection (with optional TLS upgrade) to the URL's host.
-    fn connect(&self, url: &Url) -> Result<u32, HttpError> {
-        // Create TCP socket
-        let fd = wasi_ext::socket(AF_INET, SOCK_STREAM, 0)
-            .map_err(|e| HttpError::Socket(format!("socket() failed: errno {}", e)))?;
-
-        // Connect using host:port format (host_net does DNS resolution internally)
-        let addr = format!("{}:{}", url.host, url.port);
-        if let Err(e) = wasi_ext::connect(fd, addr.as_bytes()) {
-            let _ = wasi_ext::net_close_socket(fd);
-            return Err(HttpError::Socket(format!(
-                "connect({}) failed: errno {}",
-                addr, e
-            )));
-        }
-
-        // Upgrade to TLS if HTTPS
-        if url.is_tls() {
-            if let Err(e) = wasi_ext::tls_connect(fd, url.host.as_bytes()) {
-                let _ = wasi_ext::net_close_socket(fd);
-                return Err(HttpError::Tls(format!(
-                    "TLS handshake failed for {}: errno {}",
-                    url.host, e
-                )));
-            }
-        }
-
-        // Opt this socket into cooperative non-blocking recv: with a small,
-        // non-zero recv timeout the host polls briefly then returns EAGAIN
-        // (surfaced as `RecvOutcome::WouldBlock`) instead of monopolizing the
-        // single guest thread while a body is in flight. The async layers
-        // (reqwest-shim) yield on WouldBlock so other runtime tasks make
-        // progress. Best-effort: if the host rejects the option we fall back to
-        // the previous blocking behavior rather than failing the request.
-        let _ = wasi_ext::set_recv_timeout_ms(fd, HTTP_RECV_TIMEOUT_MS);
-
-        Ok(fd)
-    }
-}
-
-impl Default for HttpClient {
-    fn default() -> Self {
-        Self::new()
-    }
-}
-
-/// Body framing for an in-progress streamed response.
-enum BodyMode {
-    /// Content-Length: `remaining` bytes of body still to deliver.
-    Fixed { remaining: usize },
-    /// Transfer-Encoding: chunked.
-    Chunked,
-    /// No framing — deliver bytes until the connection closes.
-    Close,
-}
-
-/// Incremental raw-body reader returned by [`HttpClient::send_raw_stream`].
-///
-/// `read_chunk` yields the next piece of de-framed body bytes (one HTTP chunk for
-/// chunked encoding, one `recv` worth otherwise), or `None` at end of body. It does
-/// NOT parse SSE — callers that need SSE events parse the raw bytes themselves.
-/// Owns the socket fd and closes it on drop.
-pub struct RawBodyReader {
-    fd: u32,
-    buf: Vec<u8>,
-    mode: BodyMode,
-    done: bool,
-}
-
-impl RawBodyReader {
-    /// Read the next piece of body cooperatively.
-    ///
-    /// Returns [`ChunkPoll::Ready`] with body bytes, [`ChunkPoll::Eof`] at end of
-    /// body, or [`ChunkPoll::WouldBlock`] when no data is available yet (the async
-    /// caller should yield and re-poll). Partial framing state is retained across
-    /// `WouldBlock` returns, so resuming continues where it left off.
-    pub fn read_chunk(&mut self) -> Result<ChunkPoll<Vec<u8>>, HttpError> {
-        if self.done {
-            return Ok(ChunkPoll::Eof);
-        }
-        match &mut self.mode {
-            BodyMode::Fixed { remaining } => {
-                if *remaining == 0 {
-                    self.done = true;
-                    return Ok(ChunkPoll::Eof);
-                }
-                if !self.buf.is_empty() {
-                    let take = self.buf.len().min(*remaining);
-                    let out: Vec<u8> = self.buf.drain(..take).collect();
-                    *remaining -= take;
-                    if *remaining == 0 {
-                        self.done = true;
-                    }
-                    return Ok(ChunkPoll::Ready(out));
-                }
-                let mut recv_buf = [0u8; 8192];
-                let n = match recv_cooperative_http(self.fd, &mut recv_buf)? {
-                    ChunkPoll::Ready(n) => n,
-                    ChunkPoll::Eof => {
-                        self.done = true;
-                        return Ok(ChunkPoll::Eof);
-                    }
-                    ChunkPoll::WouldBlock => return Ok(ChunkPoll::WouldBlock),
-                };
-                let take = (n as usize).min(*remaining);
-                *remaining -= take;
-                if *remaining == 0 {
-                    self.done = true;
-                }
-                Ok(ChunkPoll::Ready(recv_buf[..take].to_vec()))
-            }
-            BodyMode::Chunked => {
-                let mut recv_buf = [0u8; 8192];
-                loop {
-                    if let Some(pos) = find_crlf(&self.buf) {
-                        let size_str = std::str::from_utf8(&self.buf[..pos]).map_err(|e| {
-                            HttpError::Protocol(format!("invalid chunk size: {}", e))
-                        })?;
-                        let chunk_size = usize::from_str_radix(size_str.trim(), 16)
-                            .map_err(|e| {
-                                HttpError::Protocol(format!("invalid chunk size: {}", e))
-                            })?;
-                        self.buf.drain(..pos + 2); // skip size line + CRLF
-                        if chunk_size == 0 {
-                            self.done = true;
-                            return Ok(ChunkPoll::Eof);
-                        }
-                        if chunk_size > MAX_RESPONSE_BODY_BYTES {
-                            return Err(HttpError::Protocol("response body too large".into()));
-                        }
-                        while self.buf.len() < chunk_size + 2 {
-                            match recv_cooperative_http(self.fd, &mut recv_buf)? {
-                                ChunkPoll::Ready(n) => {
-                                    self.buf.extend_from_slice(&recv_buf[..n as usize]);
-                                }
-                                ChunkPoll::Eof => {
-                                    return Err(HttpError::Protocol(
-                                        "connection closed in chunk".into(),
-                                    ));
-                                }
-                                ChunkPoll::WouldBlock => return Ok(ChunkPoll::WouldBlock),
-                            }
-                        }
-                        if &self.buf[chunk_size..chunk_size + 2] != b"\r\n" {
-                            return Err(HttpError::Protocol("missing chunk terminator".into()));
-                        }
-                        let out: Vec<u8> = self.buf[..chunk_size].to_vec();
-                        self.buf.drain(..chunk_size + 2); // skip chunk + CRLF
-                        return Ok(ChunkPoll::Ready(out));
-                    }
-                    match recv_cooperative_http(self.fd, &mut recv_buf)? {
-                        ChunkPoll::Ready(n) => {
-                            self.buf.extend_from_slice(&recv_buf[..n as usize]);
-                        }
-                        ChunkPoll::Eof => {
-                            return Err(HttpError::Protocol(
-                                "connection closed reading chunk size".into(),
-                            ));
-                        }
-                        ChunkPoll::WouldBlock => return Ok(ChunkPoll::WouldBlock),
-                    }
-                }
-            }
-            BodyMode::Close => {
-                if !self.buf.is_empty() {
-                    return Ok(ChunkPoll::Ready(std::mem::take(&mut self.buf)));
-                }
-                let mut recv_buf = [0u8; 8192];
-                match recv_cooperative_http(self.fd, &mut recv_buf)? {
-                    ChunkPoll::Ready(n) => Ok(ChunkPoll::Ready(recv_buf[..n as usize].to_vec())),
-                    ChunkPoll::Eof => {
-                        self.done = true;
-                        Ok(ChunkPoll::Eof)
-                    }
-                    ChunkPoll::WouldBlock => Ok(ChunkPoll::WouldBlock),
-                }
-            }
-        }
-    }
-}
-
-impl Drop for RawBodyReader {
-    fn drop(&mut self) {
-        let _ = wasi_ext::net_close_socket(self.fd);
-    }
-}
-
-// ============================================================
-// Internal helpers
-// ============================================================
-
-/// Blocking recv that transparently retries on cooperative `WouldBlock`.
-///
-/// HTTP sockets carry a small recv timeout so the host returns EAGAIN instead of
-/// blocking the thread. Synchronous readers (header parsing, the buffered `send`
-/// path) cannot yield to the runtime mid-call, so they simply re-poll: behavior
-/// is byte-identical to the previous always-blocking recv, just split across
-/// short host polls. The streaming readers below DO surface `WouldBlock` so the
-/// async layer can yield.
-fn recv_blocking(fd: u32, buf: &mut [u8]) -> Result<u32, HttpError> {
-    loop {
-        match wasi_ext::recv_cooperative(fd, buf, 0) {
-            Ok(wasi_ext::RecvOutcome::Read(n)) => return Ok(n as u32),
-            Ok(wasi_ext::RecvOutcome::Eof) => return Ok(0),
-            Ok(wasi_ext::RecvOutcome::WouldBlock) => continue,
-            Err(e) => return Err(HttpError::Socket(format!("recv failed: errno {}", e))),
-        }
-    }
-}
-
-/// Cooperative recv for the streaming readers: maps the host's EAGAIN to
-/// [`ChunkPoll::WouldBlock`] so the async layer can yield instead of blocking.
-fn recv_cooperative_http(fd: u32, buf: &mut [u8]) -> Result<ChunkPoll<u32>, HttpError> {
-    match wasi_ext::recv_cooperative(fd, buf, 0) {
-        Ok(wasi_ext::RecvOutcome::Read(n)) => Ok(ChunkPoll::Ready(n as u32)),
-        Ok(wasi_ext::RecvOutcome::Eof) => Ok(ChunkPoll::Eof),
-        Ok(wasi_ext::RecvOutcome::WouldBlock) => Ok(ChunkPoll::WouldBlock),
-        Err(e) => Err(HttpError::Socket(format!("recv failed: errno {}", e))),
-    }
-}
-
-/// Send all bytes on a socket, handling partial sends.
-fn send_all(fd: u32, data: &[u8]) -> Result<(), HttpError> {
-    let mut offset = 0;
-    while offset < data.len() {
-        let n = wasi_ext::send(fd, &data[offset..], 0)
-            .map_err(|e| HttpError::Socket(format!("send failed: errno {}", e)))?;
-        if n == 0 {
-            return Err(HttpError::Socket("send returned zero bytes".into()));
-        }
-        offset += n as usize;
-    }
-    Ok(())
-}
-
-/// Read response headers and return (status, status_text, headers, remaining_body_bytes).
-fn read_headers(fd: u32) -> Result<(u16, String, Vec<(String, String)>, Vec<u8>), HttpError> {
-    let mut buf = Vec::with_capacity(4096);
-    let mut recv_buf = [0u8; 4096];
-
-    loop {
-        let n = recv_blocking(fd, &mut recv_buf)?;
-        if n == 0 {
-            return Err(HttpError::Protocol(
-                "connection closed before headers complete".into(),
-            ));
-        }
-        buf.extend_from_slice(&recv_buf[..n as usize]);
-
-        // Look for end of headers
-        if let Some(header_end) = find_header_end(&buf) {
-            let header_bytes = &buf[..header_end];
-            let header_str = std::str::from_utf8(header_bytes)
-                .map_err(|e| HttpError::Protocol(format!("invalid header encoding: {}", e)))?;
-
-            let (status, status_text, headers) = parse_response_headers(header_str)?;
-            let remaining = buf[header_end + 4..].to_vec(); // skip \r\n\r\n
-
-            return Ok((status, status_text, headers, remaining));
-        }
-
-        // Safety limit on header size
-        if buf.len() > MAX_HEADER_BYTES {
-            return Err(HttpError::Protocol("headers too large (>64KB)".into()));
-        }
-    }
-}
-
-/// Read a complete HTTP response (headers + body).
-fn read_response(fd: u32) -> Result<Response, HttpError> {
-    let (status, status_text, headers, remaining) = read_headers(fd)?;
-
-    let body = if Response::is_chunked(&headers) {
-        read_chunked_body(fd, remaining)?
-    } else if let Some(len) = Response::content_length(&headers) {
-        read_fixed_body(fd, remaining, len)?
-    } else {
-        // Read until connection close
-        read_until_close(fd, remaining)?
-    };
-
-    Ok(Response {
-        status,
-        status_text,
-        headers,
-        body,
-    })
-}
-
-/// Read body with known Content-Length.
-fn read_fixed_body(fd: u32, initial: Vec<u8>, length: usize) -> Result<Vec<u8>, HttpError> {
-    if length > MAX_RESPONSE_BODY_BYTES {
-        return Err(HttpError::Protocol("response body too large".into()));
-    }
-    if initial.len() > MAX_RESPONSE_BODY_BYTES {
-        return Err(HttpError::Protocol("response body too large".into()));
-    }
-    let mut body = initial;
-    let mut recv_buf = [0u8; 8192];
-
-    while body.len() < length {
-        let n = recv_blocking(fd, &mut recv_buf)?;
-        if n == 0 {
-            break;
-        }
-        if body.len() + n as usize > MAX_RESPONSE_BODY_BYTES {
-            return Err(HttpError::Protocol("response body too large".into()));
-        }
-        body.extend_from_slice(&recv_buf[..n as usize]);
-    }
-
-    body.truncate(length);
-    Ok(body)
-}
-
-/// Read chunked transfer-encoded body.
-fn read_chunked_body(fd: u32, initial: Vec<u8>) -> Result<Vec<u8>, HttpError> {
-    let mut buf = initial;
-    let mut body = Vec::new();
-    let mut recv_buf = [0u8; 8192];
-    enforce_body_limit(buf.len())?;
-
-    loop {
-        // Find chunk size line
-        loop {
-            if let Some(pos) = find_crlf(&buf) {
-                let size_str = std::str::from_utf8(&buf[..pos])
-                    .map_err(|e| HttpError::Protocol(format!("invalid chunk size: {}", e)))?;
-                let chunk_size = usize::from_str_radix(size_str.trim(), 16)
-                    .map_err(|e| HttpError::Protocol(format!("invalid chunk size: {}", e)))?;
-
-                buf = buf[pos + 2..].to_vec(); // skip \r\n
-
-                if chunk_size == 0 {
-                    return Ok(body);
-                }
-                if chunk_size > MAX_RESPONSE_BODY_BYTES
-                    || body.len() + chunk_size > MAX_RESPONSE_BODY_BYTES
-                {
-                    return Err(HttpError::Protocol("response body too large".into()));
-                }
-
-                // Read chunk_size bytes + trailing \r\n
-                while buf.len() < chunk_size + 2 {
-                    let n = recv_blocking(fd, &mut recv_buf)?;
-                    if n == 0 {
-                        return Err(HttpError::Protocol("connection closed in chunk".into()));
-                    }
-                    buf.extend_from_slice(&recv_buf[..n as usize]);
-                    enforce_body_limit(buf.len() + body.len())?;
-                }
-                if &buf[chunk_size..chunk_size + 2] != b"\r\n" {
-                    return Err(HttpError::Protocol("missing chunk terminator".into()));
-                }
-
-                body.extend_from_slice(&buf[..chunk_size]);
-                buf = buf[chunk_size + 2..].to_vec(); // skip chunk data + \r\n
-                break;
-            }
-
-            // Need more data for chunk size line
-            let n = recv_blocking(fd, &mut recv_buf)?;
-            if n == 0 {
-                return Err(HttpError::Protocol(
-                    "connection closed reading chunk size".into(),
-                ));
-            }
-            buf.extend_from_slice(&recv_buf[..n as usize]);
-            enforce_body_limit(buf.len() + body.len())?;
-        }
-    }
-}
-
-/// Read until connection closes.
-fn read_until_close(fd: u32, initial: Vec<u8>) -> Result<Vec<u8>, HttpError> {
-    let mut body = initial;
-    let mut recv_buf = [0u8; 8192];
-    enforce_body_limit(body.len())?;
-
-    loop {
-        let n = recv_blocking(fd, &mut recv_buf)?;
-        if n == 0 {
-            break;
-        }
-        enforce_body_limit(body.len() + n as usize)?;
-        body.extend_from_slice(&recv_buf[..n as usize]);
-    }
-
-    Ok(body)
-}
-
-/// Parse the status line and headers from the header block.
-fn parse_response_headers(
-    header_str: &str,
-) -> Result<(u16, String, Vec<(String, String)>), HttpError> {
-    let mut lines = header_str.split("\r\n");
-
-    // Status line: HTTP/1.1 200 OK
-    let status_line = lines
-        .next()
-        .ok_or_else(|| HttpError::Protocol("empty response".into()))?;
-    let mut parts = status_line.splitn(3, ' ');
-    let _version = parts
-        .next()
-        .ok_or_else(|| HttpError::Protocol("missing HTTP version".into()))?;
-    let status_str = parts
-        .next()
-        .ok_or_else(|| HttpError::Protocol("missing status code".into()))?;
-    let status: u16 = status_str
-        .parse()
-        .map_err(|_| HttpError::Protocol(format!("invalid status code: {}", status_str)))?;
-    let status_text = parts.next().unwrap_or("").to_string();
-
-    // Headers
-    let mut headers = Vec::new();
-    for line in lines {
-        if line.is_empty() {
-            break;
-        }
-        if let Some(colon) = line.find(':') {
-            if headers.len() >= MAX_HEADER_COUNT {
-                return Err(HttpError::Protocol("too many headers".into()));
-            }
-            let name = line[..colon].trim().to_string();
-            let value = line[colon + 1..].trim().to_string();
-            validate_header_name(&name)
-                .map_err(|msg| HttpError::Protocol(format!("invalid header name: {}", msg)))?;
-            if contains_http_ctl(&value) {
-                return Err(HttpError::Protocol("invalid header value".into()));
-            }
-            headers.push((name, value));
-        }
-    }
-
-    Ok((status, status_text, headers))
-}
-
-/// Find \r\n\r\n in a byte slice (end of HTTP headers).
-fn find_header_end(buf: &[u8]) -> Option<usize> {
-    buf.windows(4).position(|w| w == b"\r\n\r\n")
-}
-
-/// Find \r\n in a byte slice.
-fn find_crlf(buf: &[u8]) -> Option<usize> {
-    buf.windows(2).position(|w| w == b"\r\n")
-}
-
-/// Find \n\n in a byte slice (SSE event separator).
-fn find_double_newline(buf: &[u8]) -> Option<usize> {
-    buf.windows(2).position(|w| w == b"\n\n")
-}
-
-/// Parse an SSE event block.
-fn parse_sse_event(block: &str) -> SseEvent {
-    let mut event = None;
-    let mut data_lines = Vec::new();
-    let mut id = None;
-
-    for line in block.lines() {
-        if let Some(rest) = line.strip_prefix("event:") {
-            event = Some(rest.trim().to_string());
-        } else if let Some(rest) = line.strip_prefix("data:") {
-            data_lines.push(rest.trim_start_matches(' ').to_string());
-        } else if let Some(rest) = line.strip_prefix("id:") {
-            id = Some(rest.trim().to_string());
-        }
-    }
-
-    SseEvent {
-        event,
-        data: data_lines.join("\n"),
-        id,
-    }
-}
-
-fn validate_request_headers(headers: &[(String, String)]) -> Result<(), HttpError> {
-    if headers.len() > MAX_HEADER_COUNT {
-        return Err(HttpError::Protocol("too many request headers".into()));
-    }
-    for (name, value) in headers {
-        validate_header_name(name)
-            .map_err(|msg| HttpError::Protocol(format!("invalid header name: {}", msg)))?;
-        if contains_http_ctl(value) {
-            return Err(HttpError::Protocol("invalid header value".into()));
-        }
-    }
-    Ok(())
-}
-
-fn validate_header_name(name: &str) -> Result<(), &'static str> {
-    if name.is_empty()
-        || !name.bytes().all(|b| {
-            b.is_ascii_alphanumeric()
-                || matches!(
-                    b,
-                    b'!' | b'#'
-                        | b'$'
-                        | b'%'
-                        | b'&'
-                        | b'\''
-                        | b'*'
-                        | b'+'
-                        | b'-'
-                        | b'.'
-                        | b'^'
-                        | b'_'
-                        | b'`'
-                        | b'|'
-                        | b'~'
-                )
-        })
-    {
-        return Err("bad token");
-    }
-    Ok(())
-}
-
-fn contains_http_ctl(value: &str) -> bool {
-    value.bytes().any(|b| b < 0x20 || b == 0x7f)
-}
-
-fn contains_authority_separator(value: &str) -> bool {
-    value
-        .bytes()
-        .any(|b| matches!(b, b' ' | b'\t' | b'/' | b'?' | b'#'))
-}
-
-fn is_valid_request_target(value: &str) -> bool {
-    value.bytes().all(|b| !matches!(b, 0x00..=0x20 | 0x7f))
-}
-
-fn enforce_body_limit(len: usize) -> Result<(), HttpError> {
-    if len > MAX_RESPONSE_BODY_BYTES {
-        return Err(HttpError::Protocol("response body too large".into()));
-    }
-    Ok(())
-}
-
-/// Convenience function: GET request.
-pub fn get(url: &str) -> Result<Response, HttpError> {
-    let client = HttpClient::new();
-    let req = Request::new(Method::Get, url)?;
-    client.send(&req)
-}
-
-/// Convenience function: POST request with JSON body.
-pub fn post_json(url: &str, json: &str) -> Result<Response, HttpError> {
-    let client = HttpClient::new();
-    let req = Request::new(Method::Post, url)?.json_body(json);
-    client.send(&req)
-}
-
-#[cfg(test)]
-mod tests {
-    use super::{Method, Request, Url};
-
-    #[test]
-    fn url_parse_preserves_query_and_fragment_in_request_target() {
-        let url = Url::parse("http://example.com?x=1#frag").expect("parse url");
-        assert_eq!(url.host, "example.com");
-        assert_eq!(url.path, "/?x=1#frag");
-    }
-
-    #[test]
-    fn url_parse_rejects_spaces_in_authority_or_request_target() {
-        assert!(Url::parse("http://exa mple.com/").is_err());
-        assert!(Url::parse("http://example.com/a b").is_err());
-    }
-
-    #[test]
-    fn request_rejects_header_injection_before_serializing() {
-        let request = Request::new(Method::Get, "http://example.com/")
-            .expect("request")
-            .header("X-Test", "ok\r\nInjected: value");
-        assert!(request.to_bytes().is_err());
-    }
-}
diff --git a/registry/native/crates/libs/wasi-pty/Cargo.toml b/registry/native/crates/libs/wasi-pty/Cargo.toml
deleted file mode 100644
index 06ccd7e58..000000000
--- a/registry/native/crates/libs/wasi-pty/Cargo.toml
+++ /dev/null
@@ -1,10 +0,0 @@
-[package]
-name = "secureexec-wasi-pty"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "WASI PTY-based process management via host_process FFI for interactive sessions"
-
-[dependencies]
-wasi-ext = { path = "../../wasi-ext" }
-wasi-spawn = { package = "secureexec-wasi-spawn", path = "../wasi-spawn" }
diff --git a/registry/native/crates/libs/wasi-pty/src/lib.rs b/registry/native/crates/libs/wasi-pty/src/lib.rs
deleted file mode 100644
index af94b6ef7..000000000
--- a/registry/native/crates/libs/wasi-pty/src/lib.rs
+++ /dev/null
@@ -1,503 +0,0 @@
-//! WASI PTY-based process management via host_process FFI.
-//!
-//! Provides [`WasiPtyChild`] — an interactive process handle using a pseudo-terminal
-//! instead of pipes. This is the WASI equivalent of `ExecCommandSession` from
-//! `codex-utils-pty` (which wraps `portable-pty` on native platforms).
-//!
-//! Key difference from [`wasi_spawn::WasiChild`]:
-//! - Uses a PTY master/slave pair instead of separate stdout/stderr pipes
-//! - All child output (stdout + stderr) is multiplexed through the PTY master
-//! - Supports interactive programs that require a terminal (e.g., editors, shells)
-//! - The PTY provides terminal emulation (line discipline, echo, signals)
-
-use std::io::{self, Read, Write};
-use std::mem::ManuallyDrop;
-
-const MAX_ARG_COUNT: usize = 4096;
-const MAX_ENV_COUNT: usize = 4096;
-const MAX_SERIALIZED_BYTES: usize = 1024 * 1024;
-const MAX_CWD_BYTES: usize = 4096;
-const MAX_CAPTURED_OUTPUT_BYTES: usize = 16 * 1024 * 1024;
-
-/// Handle to a spawned process connected via a pseudo-terminal.
-///
-/// Created by [`spawn_pty`]. The child process has the PTY slave as its
-/// stdin/stdout/stderr. The parent reads and writes via the PTY master FD.
-///
-/// This is the WASI equivalent of `SpawnedPty` from `codex-utils-pty`.
-pub struct WasiSpawnedPty {
-    master_fd: RawFd,
-}
-
-/// Interactive process session using a PTY.
-///
-/// Created by [`spawn_session`]. Wraps a [`WasiSpawnedPty`] and the child
-/// process handle, providing a unified API for interactive process management.
-///
-/// This is the WASI equivalent of `ExecCommandSession` from `codex-utils-pty`.
-pub struct WasiPtyChild {
-    pid: u32,
-    master_fd: RawFd,
-    exited: bool,
-}
-
-type RawFd = u32;
-
-fn errno_to_io_error(errno: wasi_ext::Errno) -> io::Error {
-    io::Error::new(io::ErrorKind::Other, format!("wasi errno {}", errno))
-}
-
-fn invalid_input(message: impl Into<String>) -> io::Error {
-    io::Error::new(io::ErrorKind::InvalidInput, message.into())
-}
-
-fn invalid_data(message: impl Into<String>) -> io::Error {
-    io::Error::new(io::ErrorKind::InvalidData, message.into())
-}
-
-/// Read from a raw WASI file descriptor into a buffer.
-fn fd_read(fd: RawFd, buf: &mut [u8]) -> io::Result<usize> {
-    use std::os::fd::FromRawFd;
-    // The caller owns this fd. This temporary File only routes through WASI fd_read.
-    let file = unsafe { ManuallyDrop::new(std::fs::File::from_raw_fd(fd as i32)) };
-    (&*file).read(buf)
-}
-
-/// Write to a raw WASI file descriptor from a buffer.
-fn fd_write(fd: RawFd, buf: &[u8]) -> io::Result<usize> {
-    use std::os::fd::FromRawFd;
-    // The caller owns this fd. This temporary File only routes through WASI fd_write.
-    let file = unsafe { ManuallyDrop::new(std::fs::File::from_raw_fd(fd as i32)) };
-    (&*file).write(buf)
-}
-
-/// Close a raw WASI file descriptor.
-fn fd_close(fd: RawFd) {
-    use std::os::fd::FromRawFd;
-    drop(unsafe { std::fs::File::from_raw_fd(fd as i32) });
-}
-
-/// Serialize strings as null-separated byte buffer for proc_spawn.
-fn serialize_null_separated(items: &[&str]) -> io::Result<Vec<u8>> {
-    if items.len() > MAX_ARG_COUNT {
-        return Err(invalid_input(format!(
-            "argument count exceeds limit of {MAX_ARG_COUNT}"
-        )));
-    }
-
-    let mut buf = Vec::new();
-    for (i, item) in items.iter().enumerate() {
-        validate_no_nul("argument", item)?;
-        if i > 0 {
-            push_serialized_byte(&mut buf, 0)?;
-        }
-        append_serialized(&mut buf, item.as_bytes())?;
-    }
-    Ok(buf)
-}
-
-/// Serialize environment as KEY=VALUE null-separated pairs for proc_spawn.
-fn serialize_env(env: &[(&str, &str)]) -> io::Result<Vec<u8>> {
-    if env.len() > MAX_ENV_COUNT {
-        return Err(invalid_input(format!(
-            "environment count exceeds limit of {MAX_ENV_COUNT}"
-        )));
-    }
-
-    let mut buf = Vec::new();
-    for (i, (key, value)) in env.iter().enumerate() {
-        validate_env_key(key)?;
-        validate_no_nul("environment value", value)?;
-        if i > 0 {
-            push_serialized_byte(&mut buf, 0)?;
-        }
-        append_serialized(&mut buf, key.as_bytes())?;
-        push_serialized_byte(&mut buf, b'=')?;
-        append_serialized(&mut buf, value.as_bytes())?;
-    }
-    Ok(buf)
-}
-
-fn validate_env_key(key: &str) -> io::Result<()> {
-    if key.is_empty() {
-        return Err(invalid_input("environment key must not be empty"));
-    }
-    validate_no_nul("environment key", key)?;
-    if key.as_bytes().contains(&b'=') {
-        return Err(invalid_input("environment key must not contain '='"));
-    }
-    Ok(())
-}
-
-fn validate_no_nul(label: &str, value: &str) -> io::Result<()> {
-    if value.as_bytes().contains(&0) {
-        return Err(invalid_input(format!("{label} must not contain NUL")));
-    }
-    Ok(())
-}
-
-fn validate_cwd(cwd: &str) -> io::Result<()> {
-    validate_no_nul("cwd", cwd)?;
-    if cwd.len() > MAX_CWD_BYTES {
-        return Err(invalid_input(format!(
-            "cwd exceeds limit of {MAX_CWD_BYTES} bytes"
-        )));
-    }
-    Ok(())
-}
-
-fn push_serialized_byte(buf: &mut Vec<u8>, byte: u8) -> io::Result<()> {
-    reserve_serialized(buf.len(), 1)?;
-    buf.push(byte);
-    Ok(())
-}
-
-fn append_serialized(buf: &mut Vec<u8>, bytes: &[u8]) -> io::Result<()> {
-    reserve_serialized(buf.len(), bytes.len())?;
-    buf.extend_from_slice(bytes);
-    Ok(())
-}
-
-fn reserve_serialized(current_len: usize, additional_len: usize) -> io::Result<()> {
-    let next_len = current_len
-        .checked_add(additional_len)
-        .ok_or_else(|| invalid_input("serialized spawn data length overflowed"))?;
-    if next_len > MAX_SERIALIZED_BYTES {
-        return Err(invalid_input(format!(
-            "serialized spawn data exceeds limit of {MAX_SERIALIZED_BYTES} bytes"
-        )));
-    }
-    Ok(())
-}
-
-fn append_captured_output_with_limit(
-    stdout: &mut Vec<u8>,
-    chunk: &[u8],
-    limit: usize,
-) -> io::Result<()> {
-    let next_len = stdout
-        .len()
-        .checked_add(chunk.len())
-        .ok_or_else(|| invalid_data("captured PTY output length overflowed"))?;
-    if next_len > limit {
-        return Err(invalid_data(format!(
-            "captured PTY output exceeds limit of {limit} bytes"
-        )));
-    }
-    stdout.extend_from_slice(chunk);
-    Ok(())
-}
-
-fn read_captured_output<R, C>(read_output: R, cleanup: C) -> io::Result<Vec<u8>>
-where
-    R: FnMut(&mut [u8]) -> io::Result<usize>,
-    C: FnMut(),
-{
-    read_captured_output_with_limit(read_output, cleanup, MAX_CAPTURED_OUTPUT_BYTES)
-}
-
-fn read_captured_output_with_limit<R, C>(
-    mut read_output: R,
-    mut cleanup: C,
-    limit: usize,
-) -> io::Result<Vec<u8>>
-where
-    R: FnMut(&mut [u8]) -> io::Result<usize>,
-    C: FnMut(),
-{
-    let mut stdout = Vec::new();
-    let mut buf = [0u8; 4096];
-    loop {
-        match read_output(&mut buf) {
-            Ok(0) => break,
-            Ok(n) => {
-                if let Err(e) = append_captured_output_with_limit(&mut stdout, &buf[..n], limit) {
-                    cleanup();
-                    return Err(e);
-                }
-            }
-            Err(e) if e.kind() == io::ErrorKind::BrokenPipe => break,
-            Err(e) => {
-                cleanup();
-                return Err(e);
-            }
-        }
-    }
-    Ok(stdout)
-}
-
-fn wait_or_cleanup<C>(result: io::Result<i32>, cleanup: C) -> io::Result<i32>
-where
-    C: FnOnce(),
-{
-    match result {
-        Ok(exit_code) => Ok(exit_code),
-        Err(e) => {
-            cleanup();
-            Err(e)
-        }
-    }
-}
-
-/// Spawn a child process connected via a PTY.
-///
-/// Allocates a PTY master/slave pair, spawns the child with the slave FD as
-/// stdin/stdout/stderr, and returns a [`WasiPtyChild`] handle. The slave FD
-/// is closed in the parent after spawn (POSIX close-after-fork).
-///
-/// # Arguments
-/// * `argv` - Command and arguments (argv[0] is the program name)
-/// * `env` - Environment variable pairs (empty inherits parent env via host)
-/// * `cwd` - Working directory for the child
-pub fn spawn_session(argv: &[&str], env: &[(&str, &str)], cwd: &str) -> io::Result<WasiPtyChild> {
-    if argv.is_empty() {
-        return Err(io::Error::new(io::ErrorKind::InvalidInput, "empty argv"));
-    }
-
-    validate_cwd(cwd)?;
-    let argv_buf = serialize_null_separated(argv)?;
-    let envp_buf = serialize_env(env)?;
-
-    // Allocate PTY master/slave pair via kernel
-    let (master_fd, slave_fd) = wasi_ext::openpty().map_err(errno_to_io_error)?;
-
-    // Spawn child with PTY slave as all stdio
-    let result = wasi_ext::spawn(
-        &argv_buf,
-        &envp_buf,
-        slave_fd,
-        slave_fd,
-        slave_fd,
-        cwd.as_bytes(),
-    );
-
-    // Close slave FD in parent (POSIX close-after-fork) — child has its own ref
-    fd_close(slave_fd);
-
-    match result {
-        Ok(pid) => Ok(WasiPtyChild {
-            pid,
-            master_fd,
-            exited: false,
-        }),
-        Err(errno) => {
-            fd_close(master_fd);
-            Err(errno_to_io_error(errno))
-        }
-    }
-}
-
-/// Allocate a PTY pair without spawning a process.
-///
-/// Returns a [`WasiSpawnedPty`] for the master end. The slave FD is returned
-/// separately so the caller can pass it to [`wasi_spawn::spawn_child`] or
-/// use it directly.
-pub fn open_pty() -> io::Result<(WasiSpawnedPty, RawFd)> {
-    let (master_fd, slave_fd) = wasi_ext::openpty().map_err(errno_to_io_error)?;
-
-    Ok((WasiSpawnedPty { master_fd }, slave_fd))
-}
-
-impl WasiSpawnedPty {
-    /// Get the master FD for direct I/O.
-    pub fn master_fd(&self) -> RawFd {
-        self.master_fd
-    }
-
-    /// Read output from the PTY master (data written by the child).
-    pub fn read(&self, buf: &mut [u8]) -> io::Result<usize> {
-        fd_read(self.master_fd, buf)
-    }
-
-    /// Write input to the PTY master (delivered to the child's stdin).
-    pub fn write(&self, buf: &[u8]) -> io::Result<usize> {
-        fd_write(self.master_fd, buf)
-    }
-}
-
-impl Drop for WasiSpawnedPty {
-    fn drop(&mut self) {
-        fd_close(self.master_fd);
-    }
-}
-
-impl WasiPtyChild {
-    /// Get the child's virtual PID.
-    pub fn pid(&self) -> u32 {
-        self.pid
-    }
-
-    /// Get the PTY master FD for direct I/O if needed.
-    pub fn master_fd(&self) -> RawFd {
-        self.master_fd
-    }
-
-    /// Read output from the child via the PTY master.
-    ///
-    /// All child output (stdout and stderr) is multiplexed through the PTY.
-    /// Returns 0 bytes when the PTY slave is closed (child exited).
-    pub fn read_output(&self, buf: &mut [u8]) -> io::Result<usize> {
-        fd_read(self.master_fd, buf)
-    }
-
-    /// Write input to the child via the PTY master.
-    ///
-    /// Data is delivered to the child's stdin through the PTY line discipline.
-    pub fn write_stdin(&self, buf: &[u8]) -> io::Result<usize> {
-        fd_write(self.master_fd, buf)
-    }
-
-    /// Wait for the child to exit. Returns the exit code.
-    ///
-    /// Blocks via host_process_waitpid (Atomics.wait on host side).
-    pub fn wait(&mut self) -> io::Result<i32> {
-        if self.exited {
-            return Err(io::Error::new(io::ErrorKind::Other, "already waited"));
-        }
-
-        let (status, _actual_pid) = wasi_ext::waitpid(self.pid, 0).map_err(errno_to_io_error)?;
-
-        self.exited = true;
-        Ok(status as i32)
-    }
-
-    /// Send a signal to the child process.
-    pub fn kill(&mut self, signal: u32) -> io::Result<()> {
-        wasi_ext::kill(self.pid, signal).map_err(errno_to_io_error)
-    }
-
-    /// Send SIGTERM to the child process.
-    pub fn terminate(&mut self) -> io::Result<()> {
-        self.kill(15)
-    }
-
-    fn kill_and_reap(&mut self) {
-        if self.exited {
-            return;
-        }
-
-        let _ = wasi_ext::kill(self.pid, 9);
-        if wasi_ext::waitpid(self.pid, 0).is_ok() {
-            self.exited = true;
-        }
-    }
-
-    /// Read all output from the PTY, then wait for exit.
-    ///
-    /// Reads output until the PTY master gets EOF (child closed slave),
-    /// then waits for the child to exit.
-    pub fn consume_output(&mut self) -> io::Result<wasi_spawn::WasiOutput> {
-        let master_fd = self.master_fd;
-        let stdout = read_captured_output(|buf| fd_read(master_fd, buf), || self.kill_and_reap())?;
-
-        let wait_result = self.wait();
-        let exit_code = wait_or_cleanup(wait_result, || self.kill_and_reap())?;
-
-        // PTY multiplexes stdout+stderr, so stderr is empty
-        Ok(wasi_spawn::WasiOutput {
-            stdout,
-            stderr: Vec::new(),
-            exit_code,
-        })
-    }
-}
-
-impl Drop for WasiPtyChild {
-    fn drop(&mut self) {
-        self.kill_and_reap();
-        fd_close(self.master_fd);
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn rejects_interior_nul_in_arguments() {
-        let err = serialize_null_separated(&["echo", "a\0b"]).unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::InvalidInput);
-    }
-
-    #[test]
-    fn rejects_invalid_environment_keys() {
-        let err = serialize_env(&[("A=B", "value")]).unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::InvalidInput);
-    }
-
-    #[test]
-    fn rejects_oversized_serialized_data() {
-        let oversized = "x".repeat(MAX_SERIALIZED_BYTES + 1);
-        let err = serialize_null_separated(&[&oversized]).unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::InvalidInput);
-    }
-
-    #[test]
-    fn appends_captured_output_until_limit() {
-        let mut output = vec![b'x'; MAX_CAPTURED_OUTPUT_BYTES - 1];
-
-        append_captured_output_with_limit(&mut output, b"y", MAX_CAPTURED_OUTPUT_BYTES).unwrap();
-
-        assert_eq!(output.len(), MAX_CAPTURED_OUTPUT_BYTES);
-    }
-
-    #[test]
-    fn rejects_oversized_captured_output() {
-        let mut output = vec![b'x'; MAX_CAPTURED_OUTPUT_BYTES];
-        let err = append_captured_output_with_limit(&mut output, b"y", MAX_CAPTURED_OUTPUT_BYTES)
-            .unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::InvalidData);
-        assert_eq!(output.len(), MAX_CAPTURED_OUTPUT_BYTES);
-    }
-
-    #[test]
-    fn consume_helper_cleans_up_on_output_limit() {
-        let mut reads = 0;
-        let mut cleanup_calls = 0;
-        let err = read_captured_output_with_limit(
-            |buf| {
-                reads += 1;
-                buf[..4].copy_from_slice(b"xxxx");
-                Ok(4)
-            },
-            || cleanup_calls += 1,
-            8,
-        )
-        .unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::InvalidData);
-        assert_eq!(reads, 3);
-        assert_eq!(cleanup_calls, 1);
-    }
-
-    #[test]
-    fn consume_helper_cleans_up_on_read_error() {
-        let mut cleanup_calls = 0;
-        let err = read_captured_output_with_limit(
-            |_buf| Err(io::Error::new(io::ErrorKind::PermissionDenied, "boom")),
-            || cleanup_calls += 1,
-            8,
-        )
-        .unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::PermissionDenied);
-        assert_eq!(cleanup_calls, 1);
-    }
-
-    #[test]
-    fn wait_error_runs_cleanup() {
-        let mut cleanup_calls = 0;
-        let err = wait_or_cleanup(
-            Err(io::Error::new(io::ErrorKind::NotFound, "missing")),
-            || cleanup_calls += 1,
-        )
-        .unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::NotFound);
-        assert_eq!(cleanup_calls, 1);
-    }
-}
diff --git a/registry/native/crates/libs/wasi-spawn/Cargo.toml b/registry/native/crates/libs/wasi-spawn/Cargo.toml
deleted file mode 100644
index bc2ec7ebf..000000000
--- a/registry/native/crates/libs/wasi-spawn/Cargo.toml
+++ /dev/null
@@ -1,12 +0,0 @@
-[package]
-name = "secureexec-wasi-spawn"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "WASI process spawning via host_process FFI with pipe-based stdout/stderr capture"
-
-[dependencies]
-wasi-ext = { path = "../../wasi-ext" }
-
-[target.'cfg(target_os = "wasi")'.dependencies]
-wasi = "0.11.1"
diff --git a/registry/native/crates/libs/wasi-spawn/src/lib.rs b/registry/native/crates/libs/wasi-spawn/src/lib.rs
deleted file mode 100644
index b2b1b8be6..000000000
--- a/registry/native/crates/libs/wasi-spawn/src/lib.rs
+++ /dev/null
@@ -1,756 +0,0 @@
-//! WASI process spawning via host_process FFI.
-//!
-//! Provides `WasiChild` — a synchronous child process handle with pipe-based
-//! stdout/stderr capture, wait, and kill. Uses wasi-ext FFI directly instead
-//! of std::process::Command for explicit control over pipe lifecycle.
-//!
-//! Designed for codex-rs WASI integration: replaces tokio::process::Command
-//! on wasm32-wasip1 where tokio process/signal features are unavailable.
-
-use std::io::{self, Read};
-use std::mem::ManuallyDrop;
-
-const MAX_ARG_COUNT: usize = 4096;
-const MAX_ENV_COUNT: usize = 4096;
-const MAX_SERIALIZED_BYTES: usize = 1024 * 1024;
-const MAX_CWD_BYTES: usize = 4096;
-const MAX_CAPTURED_STREAM_BYTES: usize = 16 * 1024 * 1024;
-#[cfg(target_os = "wasi")]
-const READY_STDOUT: u64 = 0;
-#[cfg(target_os = "wasi")]
-const READY_STDERR: u64 = 1;
-
-/// Captured output from a child process.
-pub struct WasiOutput {
-    pub stdout: Vec<u8>,
-    pub stderr: Vec<u8>,
-    pub exit_code: i32,
-}
-
-/// Handle to a spawned child process with pipe-based I/O capture.
-///
-/// Created by [`spawn_child`]. Owns the read ends of stdout/stderr pipes.
-/// The write ends are closed in the parent after spawn (POSIX close-after-fork).
-pub struct WasiChild {
-    pid: u32,
-    stdout_fd: Option<RawFd>,
-    stderr_fd: Option<RawFd>,
-    exited: bool,
-}
-
-/// Raw file descriptor type matching WASI u32 FDs.
-type RawFd = u32;
-
-#[derive(Clone, Copy, Debug, Eq, PartialEq)]
-enum CapturedStream {
-    Stdout,
-    Stderr,
-}
-
-fn errno_to_io_error(errno: wasi_ext::Errno) -> io::Error {
-    io::Error::new(io::ErrorKind::Other, format!("wasi errno {}", errno))
-}
-
-#[cfg(target_os = "wasi")]
-fn wasi_errno_to_io_error(errno: wasi::Errno) -> io::Error {
-    io::Error::new(io::ErrorKind::Other, format!("wasi errno {}", errno.raw()))
-}
-
-fn invalid_input(message: impl Into<String>) -> io::Error {
-    io::Error::new(io::ErrorKind::InvalidInput, message.into())
-}
-
-fn invalid_data(message: impl Into<String>) -> io::Error {
-    io::Error::new(io::ErrorKind::InvalidData, message.into())
-}
-
-/// Read from a raw WASI file descriptor into a buffer.
-///
-/// Uses std::fs::File::from_raw_fd for WASI fd_read dispatch.
-fn fd_read(fd: RawFd, buf: &mut [u8]) -> io::Result<usize> {
-    use std::os::fd::FromRawFd;
-    // The caller owns this fd. This temporary File only routes through WASI fd_read.
-    let file = unsafe { ManuallyDrop::new(std::fs::File::from_raw_fd(fd as i32)) };
-    (&*file).read(buf)
-}
-
-/// Close a raw WASI file descriptor.
-fn fd_close(fd: RawFd) {
-    use std::os::fd::FromRawFd;
-    // Safety: fd is a valid local FD. Drop closes it via WASI fd_close.
-    drop(unsafe { std::fs::File::from_raw_fd(fd as i32) });
-}
-
-/// Serialize strings as null-separated byte buffer for proc_spawn.
-fn serialize_null_separated(items: &[&str]) -> io::Result<Vec<u8>> {
-    if items.len() > MAX_ARG_COUNT {
-        return Err(invalid_input(format!(
-            "argument count exceeds limit of {MAX_ARG_COUNT}"
-        )));
-    }
-
-    let mut buf = Vec::new();
-    for (i, item) in items.iter().enumerate() {
-        validate_no_nul("argument", item)?;
-        if i > 0 {
-            push_serialized_byte(&mut buf, 0)?;
-        }
-        append_serialized(&mut buf, item.as_bytes())?;
-    }
-    Ok(buf)
-}
-
-/// Serialize environment as KEY=VALUE null-separated pairs for proc_spawn.
-fn serialize_env(env: &[(&str, &str)]) -> io::Result<Vec<u8>> {
-    if env.len() > MAX_ENV_COUNT {
-        return Err(invalid_input(format!(
-            "environment count exceeds limit of {MAX_ENV_COUNT}"
-        )));
-    }
-
-    let mut buf = Vec::new();
-    for (i, (key, value)) in env.iter().enumerate() {
-        validate_env_key(key)?;
-        validate_no_nul("environment value", value)?;
-        if i > 0 {
-            push_serialized_byte(&mut buf, 0)?;
-        }
-        append_serialized(&mut buf, key.as_bytes())?;
-        push_serialized_byte(&mut buf, b'=')?;
-        append_serialized(&mut buf, value.as_bytes())?;
-    }
-    Ok(buf)
-}
-
-fn validate_env_key(key: &str) -> io::Result<()> {
-    if key.is_empty() {
-        return Err(invalid_input("environment key must not be empty"));
-    }
-    validate_no_nul("environment key", key)?;
-    if key.as_bytes().contains(&b'=') {
-        return Err(invalid_input("environment key must not contain '='"));
-    }
-    Ok(())
-}
-
-fn validate_no_nul(label: &str, value: &str) -> io::Result<()> {
-    if value.as_bytes().contains(&0) {
-        return Err(invalid_input(format!("{label} must not contain NUL")));
-    }
-    Ok(())
-}
-
-fn validate_cwd(cwd: &str) -> io::Result<()> {
-    validate_no_nul("cwd", cwd)?;
-    if cwd.len() > MAX_CWD_BYTES {
-        return Err(invalid_input(format!(
-            "cwd exceeds limit of {MAX_CWD_BYTES} bytes"
-        )));
-    }
-    Ok(())
-}
-
-fn push_serialized_byte(buf: &mut Vec<u8>, byte: u8) -> io::Result<()> {
-    reserve_serialized(buf.len(), 1)?;
-    buf.push(byte);
-    Ok(())
-}
-
-fn append_serialized(buf: &mut Vec<u8>, bytes: &[u8]) -> io::Result<()> {
-    reserve_serialized(buf.len(), bytes.len())?;
-    buf.extend_from_slice(bytes);
-    Ok(())
-}
-
-fn reserve_serialized(current_len: usize, additional_len: usize) -> io::Result<()> {
-    let next_len = current_len
-        .checked_add(additional_len)
-        .ok_or_else(|| invalid_input("serialized spawn data length overflowed"))?;
-    if next_len > MAX_SERIALIZED_BYTES {
-        return Err(invalid_input(format!(
-            "serialized spawn data exceeds limit of {MAX_SERIALIZED_BYTES} bytes"
-        )));
-    }
-    Ok(())
-}
-
-fn append_captured_stream_with_limit(
-    output: &mut Vec<u8>,
-    chunk: &[u8],
-    limit: usize,
-) -> io::Result<()> {
-    let next_len = output
-        .len()
-        .checked_add(chunk.len())
-        .ok_or_else(|| invalid_data("captured stream length overflowed"))?;
-    if next_len > limit {
-        return Err(invalid_data(format!(
-            "captured stream exceeds limit of {limit} bytes"
-        )));
-    }
-    output.extend_from_slice(chunk);
-    Ok(())
-}
-
-fn read_captured_streams<R, W, C>(
-    stdout_fd: Option<RawFd>,
-    stderr_fd: Option<RawFd>,
-    read_fd: R,
-    wait_readable: W,
-    cleanup: C,
-) -> io::Result<(Vec<u8>, Vec<u8>)>
-where
-    R: FnMut(RawFd, &mut [u8]) -> io::Result<usize>,
-    W: FnMut(Option<RawFd>, Option<RawFd>) -> io::Result<[Option<CapturedStream>; 2]>,
-    C: FnMut(),
-{
-    read_captured_streams_with_limit(
-        stdout_fd,
-        stderr_fd,
-        read_fd,
-        wait_readable,
-        cleanup,
-        MAX_CAPTURED_STREAM_BYTES,
-    )
-}
-
-fn read_captured_streams_with_limit<R, W, C>(
-    stdout_fd: Option<RawFd>,
-    stderr_fd: Option<RawFd>,
-    mut read_fd: R,
-    mut wait_readable: W,
-    mut cleanup: C,
-    limit: usize,
-) -> io::Result<(Vec<u8>, Vec<u8>)>
-where
-    R: FnMut(RawFd, &mut [u8]) -> io::Result<usize>,
-    W: FnMut(Option<RawFd>, Option<RawFd>) -> io::Result<[Option<CapturedStream>; 2]>,
-    C: FnMut(),
-{
-    let mut stdout = Vec::new();
-    let mut stderr = Vec::new();
-    let mut stdout_done = stdout_fd.is_none();
-    let mut stderr_done = stderr_fd.is_none();
-    let mut buf = [0u8; 4096];
-
-    while !stdout_done || !stderr_done {
-        let active_stdout = if stdout_done { None } else { stdout_fd };
-        let active_stderr = if stderr_done { None } else { stderr_fd };
-        let ready = match wait_readable(active_stdout, active_stderr) {
-            Ok(ready) => ready,
-            Err(e) => {
-                cleanup();
-                return Err(e);
-            }
-        };
-
-        let mut progressed = false;
-        for stream in ready.into_iter().flatten() {
-            let (fd, output, done) = match stream {
-                CapturedStream::Stdout if !stdout_done => (
-                    stdout_fd.expect("stdout fd is present while active"),
-                    &mut stdout,
-                    &mut stdout_done,
-                ),
-                CapturedStream::Stderr if !stderr_done => (
-                    stderr_fd.expect("stderr fd is present while active"),
-                    &mut stderr,
-                    &mut stderr_done,
-                ),
-                CapturedStream::Stdout => continue,
-                CapturedStream::Stderr => continue,
-            };
-
-            progressed = true;
-            match read_fd(fd, &mut buf) {
-                Ok(0) => {
-                    *done = true;
-                }
-                Ok(n) => {
-                    if let Err(e) = append_captured_stream_with_limit(output, &buf[..n], limit) {
-                        cleanup();
-                        return Err(e);
-                    }
-                }
-                Err(e) if e.kind() == io::ErrorKind::BrokenPipe => {
-                    *done = true;
-                }
-                Err(e) => {
-                    cleanup();
-                    return Err(e);
-                }
-            }
-        }
-
-        if !progressed {
-            cleanup();
-            return Err(io::Error::new(
-                io::ErrorKind::WouldBlock,
-                "no captured stream became readable",
-            ));
-        }
-    }
-    Ok((stdout, stderr))
-}
-
-#[cfg(target_os = "wasi")]
-fn wait_readable_streams(
-    stdout_fd: Option<RawFd>,
-    stderr_fd: Option<RawFd>,
-) -> io::Result<[Option<CapturedStream>; 2]> {
-    let mut subscriptions = Vec::with_capacity(2);
-    if let Some(fd) = stdout_fd {
-        subscriptions.push(wasi::Subscription {
-            userdata: READY_STDOUT,
-            u: wasi::SubscriptionU {
-                tag: wasi::EVENTTYPE_FD_READ.raw(),
-                u: wasi::SubscriptionUU {
-                    fd_read: wasi::SubscriptionFdReadwrite {
-                        file_descriptor: fd,
-                    },
-                },
-            },
-        });
-    }
-    if let Some(fd) = stderr_fd {
-        subscriptions.push(wasi::Subscription {
-            userdata: READY_STDERR,
-            u: wasi::SubscriptionU {
-                tag: wasi::EVENTTYPE_FD_READ.raw(),
-                u: wasi::SubscriptionUU {
-                    fd_read: wasi::SubscriptionFdReadwrite {
-                        file_descriptor: fd,
-                    },
-                },
-            },
-        });
-    }
-
-    if subscriptions.is_empty() {
-        return Ok([None, None]);
-    }
-
-    let mut events = vec![unsafe { std::mem::zeroed::<wasi::Event>() }; subscriptions.len()];
-    let ready_count = unsafe {
-        wasi::poll_oneoff(
-            subscriptions.as_ptr(),
-            events.as_mut_ptr(),
-            subscriptions.len(),
-        )
-    }
-    .map_err(wasi_errno_to_io_error)?;
-    if ready_count > events.len() {
-        return Err(io::Error::new(
-            io::ErrorKind::InvalidData,
-            "poll returned too many events",
-        ));
-    }
-
-    let mut ready = [None, None];
-    for (i, event) in events.into_iter().take(ready_count).enumerate() {
-        if event.error != wasi::ERRNO_SUCCESS {
-            return Err(wasi_errno_to_io_error(event.error));
-        }
-        ready[i] = match event.userdata {
-            READY_STDOUT => Some(CapturedStream::Stdout),
-            READY_STDERR => Some(CapturedStream::Stderr),
-            _ => {
-                return Err(io::Error::new(
-                    io::ErrorKind::InvalidData,
-                    "poll returned unknown stream",
-                ));
-            }
-        };
-    }
-    Ok(ready)
-}
-
-#[cfg(not(target_os = "wasi"))]
-fn wait_readable_streams(
-    stdout_fd: Option<RawFd>,
-    stderr_fd: Option<RawFd>,
-) -> io::Result<[Option<CapturedStream>; 2]> {
-    Ok([
-        stdout_fd.map(|_| CapturedStream::Stdout),
-        stderr_fd.map(|_| CapturedStream::Stderr),
-    ])
-}
-
-fn wait_or_cleanup<C>(result: io::Result<i32>, cleanup: C) -> io::Result<i32>
-where
-    C: FnOnce(),
-{
-    match result {
-        Ok(exit_code) => Ok(exit_code),
-        Err(e) => {
-            cleanup();
-            Err(e)
-        }
-    }
-}
-
-fn spawn_child_with_stdin_fd(
-    argv: &[&str],
-    env: &[(&str, &str)],
-    cwd: &str,
-    stdin_fd: u32,
-) -> io::Result<WasiChild> {
-    if argv.is_empty() {
-        return Err(io::Error::new(io::ErrorKind::InvalidInput, "empty argv"));
-    }
-
-    validate_cwd(cwd)?;
-    let argv_buf = serialize_null_separated(argv)?;
-    let envp_buf = serialize_env(env)?;
-
-    // Create stdout pipe
-    let (stdout_read, stdout_write) = wasi_ext::pipe().map_err(errno_to_io_error)?;
-
-    // Create stderr pipe
-    let (stderr_read, stderr_write) = wasi_ext::pipe().map_err(|e| {
-        fd_close(stdout_read);
-        fd_close(stdout_write);
-        errno_to_io_error(e)
-    })?;
-
-    // Spawn child with pipe-captured stdout/stderr and caller-selected stdin.
-    let result = wasi_ext::spawn(
-        &argv_buf,
-        &envp_buf,
-        stdin_fd,
-        stdout_write,
-        stderr_write,
-        cwd.as_bytes(),
-    );
-
-    // Close write ends in parent (POSIX close-after-fork)
-    fd_close(stdout_write);
-    fd_close(stderr_write);
-
-    match result {
-        Ok(pid) => Ok(WasiChild {
-            pid,
-            stdout_fd: Some(stdout_read),
-            stderr_fd: Some(stderr_read),
-            exited: false,
-        }),
-        Err(errno) => {
-            fd_close(stdout_read);
-            fd_close(stderr_read);
-            Err(errno_to_io_error(errno))
-        }
-    }
-}
-
-/// Spawn a child process with pipe-captured stdout and stderr.
-///
-/// Creates pipes for stdout/stderr, spawns the child via host_process FFI,
-/// and returns a `WasiChild` handle. The parent's stdin is inherited.
-///
-/// # Arguments
-/// * `argv` - Command and arguments (argv[0] is the program name)
-/// * `env` - Environment variable pairs (empty inherits parent env via host)
-/// * `cwd` - Working directory for the child
-pub fn spawn_child(argv: &[&str], env: &[(&str, &str)], cwd: &str) -> io::Result<WasiChild> {
-    spawn_child_with_stdin_fd(argv, env, cwd, 0)
-}
-
-/// Spawn a child process with stdin ignored and stdout/stderr captured.
-///
-/// This is appropriate for agent tool calls or other subprocesses that must not
-/// inherit an interactive control stream from the parent process.
-pub fn spawn_child_ignore_stdin(
-    argv: &[&str],
-    env: &[(&str, &str)],
-    cwd: &str,
-) -> io::Result<WasiChild> {
-    spawn_child_with_stdin_fd(argv, env, cwd, u32::MAX)
-}
-
-/// Spawn a child process inheriting all stdio (no pipe capture).
-///
-/// Useful for interactive commands where output should go directly to
-/// the parent's terminal.
-pub fn spawn_child_inherit(
-    argv: &[&str],
-    env: &[(&str, &str)],
-    cwd: &str,
-) -> io::Result<WasiChild> {
-    if argv.is_empty() {
-        return Err(io::Error::new(io::ErrorKind::InvalidInput, "empty argv"));
-    }
-
-    validate_cwd(cwd)?;
-    let argv_buf = serialize_null_separated(argv)?;
-    let envp_buf = serialize_env(env)?;
-
-    let pid = wasi_ext::spawn(
-        &argv_buf,
-        &envp_buf,
-        0,
-        1,
-        2, // inherit all stdio
-        cwd.as_bytes(),
-    )
-    .map_err(errno_to_io_error)?;
-
-    Ok(WasiChild {
-        pid,
-        stdout_fd: None,
-        stderr_fd: None,
-        exited: false,
-    })
-}
-
-impl WasiChild {
-    /// Get the child's virtual PID.
-    pub fn pid(&self) -> u32 {
-        self.pid
-    }
-
-    /// Read from the child's stdout pipe.
-    ///
-    /// Returns 0 bytes when the pipe is closed (child exited or closed stdout).
-    pub fn read_stdout(&self, buf: &mut [u8]) -> io::Result<usize> {
-        match self.stdout_fd {
-            Some(fd) => fd_read(fd, buf),
-            None => Ok(0),
-        }
-    }
-
-    /// Read from the child's stderr pipe.
-    ///
-    /// Returns 0 bytes when the pipe is closed (child exited or closed stderr).
-    pub fn read_stderr(&self, buf: &mut [u8]) -> io::Result<usize> {
-        match self.stderr_fd {
-            Some(fd) => fd_read(fd, buf),
-            None => Ok(0),
-        }
-    }
-
-    /// Wait for the child to exit. Returns the exit code.
-    ///
-    /// Blocks via host_process_waitpid (Atomics.wait on host side).
-    pub fn wait(&mut self) -> io::Result<i32> {
-        if self.exited {
-            return Err(io::Error::new(io::ErrorKind::Other, "already waited"));
-        }
-
-        let (status, _actual_pid) = wasi_ext::waitpid(self.pid, 0).map_err(errno_to_io_error)?;
-
-        self.exited = true;
-
-        // Decode exit status using bash 128+signal convention
-        // Normal exit: status is the exit code directly
-        // Signal kill: status is 128 + signal number
-        Ok(status as i32)
-    }
-
-    /// Send a signal to the child process.
-    ///
-    /// Common signals: SIGTERM (15), SIGKILL (9).
-    pub fn kill(&mut self, signal: u32) -> io::Result<()> {
-        wasi_ext::kill(self.pid, signal).map_err(errno_to_io_error)
-    }
-
-    /// Send SIGTERM to the child process.
-    pub fn terminate(&mut self) -> io::Result<()> {
-        self.kill(15)
-    }
-
-    fn kill_and_reap(&mut self) {
-        if self.exited {
-            return;
-        }
-
-        let _ = wasi_ext::kill(self.pid, 9);
-        if wasi_ext::waitpid(self.pid, 0).is_ok() {
-            self.exited = true;
-        }
-    }
-
-    fn close_output_fds(&mut self) {
-        if let Some(fd) = self.stdout_fd.take() {
-            fd_close(fd);
-        }
-        if let Some(fd) = self.stderr_fd.take() {
-            fd_close(fd);
-        }
-    }
-
-    /// Read all stdout and stderr, then wait for exit.
-    ///
-    /// Drains readable stdout and stderr events until both streams close, then waits.
-    pub fn consume_output(&mut self) -> io::Result<WasiOutput> {
-        let stdout_fd = self.stdout_fd;
-        let stderr_fd = self.stderr_fd;
-        let (stdout, stderr) =
-            read_captured_streams(stdout_fd, stderr_fd, fd_read, wait_readable_streams, || {
-                self.kill_and_reap()
-            })?;
-
-        let wait_result = self.wait();
-        let exit_code = wait_or_cleanup(wait_result, || self.kill_and_reap())?;
-
-        Ok(WasiOutput {
-            stdout,
-            stderr,
-            exit_code,
-        })
-    }
-}
-
-impl Drop for WasiChild {
-    fn drop(&mut self) {
-        self.kill_and_reap();
-        self.close_output_fds();
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn rejects_interior_nul_in_arguments() {
-        let err = serialize_null_separated(&["echo", "a\0b"]).unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::InvalidInput);
-    }
-
-    #[test]
-    fn rejects_invalid_environment_keys() {
-        let err = serialize_env(&[("A=B", "value")]).unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::InvalidInput);
-    }
-
-    #[test]
-    fn rejects_oversized_serialized_data() {
-        let oversized = "x".repeat(MAX_SERIALIZED_BYTES + 1);
-        let err = serialize_null_separated(&[&oversized]).unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::InvalidInput);
-    }
-
-    #[test]
-    fn rejects_oversized_captured_stream() {
-        let mut output = vec![b'x'; 8];
-        let err = append_captured_stream_with_limit(&mut output, b"y", 8).unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::InvalidData);
-        assert_eq!(output.len(), 8);
-    }
-
-    #[test]
-    fn capture_helper_cleans_up_on_output_limit() {
-        let mut reads = 0;
-        let mut cleanup_calls = 0;
-        let err = read_captured_streams_with_limit(
-            Some(7),
-            None,
-            |_fd, buf| {
-                reads += 1;
-                buf[..4].copy_from_slice(b"xxxx");
-                Ok(4)
-            },
-            |stdout_fd, stderr_fd| {
-                assert_eq!(stdout_fd, Some(7));
-                assert_eq!(stderr_fd, None);
-                Ok([Some(CapturedStream::Stdout), None])
-            },
-            || cleanup_calls += 1,
-            8,
-        )
-        .unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::InvalidData);
-        assert_eq!(reads, 3);
-        assert_eq!(cleanup_calls, 1);
-    }
-
-    #[test]
-    fn capture_helper_cleans_up_on_read_error() {
-        let mut cleanup_calls = 0;
-        let err = read_captured_streams_with_limit(
-            Some(7),
-            None,
-            |_fd, _buf| Err(io::Error::new(io::ErrorKind::PermissionDenied, "boom")),
-            |_stdout_fd, _stderr_fd| Ok([Some(CapturedStream::Stdout), None]),
-            || cleanup_calls += 1,
-            8,
-        )
-        .unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::PermissionDenied);
-        assert_eq!(cleanup_calls, 1);
-    }
-
-    #[test]
-    fn capture_helper_interleaves_stdout_and_stderr() {
-        let mut ready_calls = 0;
-        let mut stdout_reads = 0;
-        let mut stderr_reads = 0;
-        let (stdout, stderr) = read_captured_streams_with_limit(
-            Some(1),
-            Some(2),
-            |fd, buf| match fd {
-                1 => {
-                    stdout_reads += 1;
-                    if stdout_reads > 1 {
-                        return Ok(0);
-                    }
-                    buf[..3].copy_from_slice(b"out");
-                    Ok(3)
-                }
-                2 => {
-                    stderr_reads += 1;
-                    if stderr_reads > 1 {
-                        return Ok(0);
-                    }
-                    buf[..3].copy_from_slice(b"err");
-                    Ok(3)
-                }
-                _ => unreachable!(),
-            },
-            |stdout_fd, stderr_fd| {
-                ready_calls += 1;
-                match ready_calls {
-                    1 => {
-                        assert_eq!(stdout_fd, Some(1));
-                        assert_eq!(stderr_fd, Some(2));
-                        Ok([Some(CapturedStream::Stderr), None])
-                    }
-                    2 => {
-                        assert_eq!(stdout_fd, Some(1));
-                        assert_eq!(stderr_fd, Some(2));
-                        Ok([Some(CapturedStream::Stdout), None])
-                    }
-                    3 => Ok([Some(CapturedStream::Stderr), None]),
-                    4 => Ok([Some(CapturedStream::Stdout), None]),
-                    _ => unreachable!(),
-                }
-            },
-            || unreachable!(),
-            16,
-        )
-        .unwrap();
-
-        assert_eq!(stdout, b"out");
-        assert_eq!(stderr, b"err");
-        assert_eq!(ready_calls, 4);
-    }
-
-    #[test]
-    fn wait_error_runs_cleanup() {
-        let mut cleanup_calls = 0;
-        let err = wait_or_cleanup(
-            Err(io::Error::new(io::ErrorKind::NotFound, "missing")),
-            || cleanup_calls += 1,
-        )
-        .unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::NotFound);
-        assert_eq!(cleanup_calls, 1);
-    }
-}
diff --git a/registry/native/crates/libs/yq/Cargo.toml b/registry/native/crates/libs/yq/Cargo.toml
deleted file mode 100644
index ec7336b20..000000000
--- a/registry/native/crates/libs/yq/Cargo.toml
+++ /dev/null
@@ -1,15 +0,0 @@
-[package]
-name = "secureexec-yq"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "yq (YAML/XML/TOML/JSON processor) implementation for secure-exec standalone binaries"
-
-[dependencies]
-jaq-core = "2.2"
-jaq-std = "2.1"
-jaq-json = { version = "1.1", features = ["serde_json"] }
-serde_json = "1"
-serde_yaml = "0.9"
-toml = "0.8"
-quick-xml = "0.37"
diff --git a/registry/native/crates/libs/yq/src/lib.rs b/registry/native/crates/libs/yq/src/lib.rs
deleted file mode 100644
index 871e3d7b8..000000000
--- a/registry/native/crates/libs/yq/src/lib.rs
+++ /dev/null
@@ -1,1004 +0,0 @@
-//! yq — YAML/XML/TOML/JSON processor using jaq filter engine.
-//!
-//! Converts input to JSON, runs jaq filter, converts output to requested format.
-//! Reuses jaq-core/jaq-std/jaq-json (same engine as jq command).
-
-use std::ffi::OsString;
-use std::fmt;
-use std::io::{self, Read, Write};
-
-use jaq_core::load::{Arena, File, Loader};
-use jaq_core::{Compiler, Ctx, RcIter};
-use jaq_json::Val;
-
-const MAX_INPUT_BYTES: usize = 16 * 1024 * 1024;
-const MAX_FORMATTED_OUTPUT_BYTES: usize = 16 * 1024 * 1024;
-const MAX_OUTPUT_VALUES: usize = 100_000;
-const MAX_XML_DEPTH: usize = 256;
-const MAX_XML_NODES: usize = 100_000;
-const MAX_XML_ATTRIBUTES_PER_ELEMENT: usize = 4096;
-const MAX_XML_TEXT_BYTES: usize = 16 * 1024 * 1024;
-
-#[derive(Clone, Copy, PartialEq)]
-enum Format {
-    Yaml,
-    Json,
-    Toml,
-    Xml,
-}
-
-struct YqOptions {
-    filter: String,
-    input_format: Option<Format>,
-    output_format: Option<Format>,
-    raw_output: bool,
-    compact: bool,
-    null_input: bool,
-    slurp: bool,
-}
-
-/// Entry point for yq command.
-pub fn main(args: Vec<OsString>) -> i32 {
-    let str_args: Vec<String> = args
-        .iter()
-        .skip(1)
-        .map(|a| a.to_string_lossy().to_string())
-        .collect();
-
-    match run_yq(&str_args) {
-        Ok(code) => code,
-        Err(msg) => {
-            eprintln!("yq: {}", msg);
-            2
-        }
-    }
-}
-
-fn parse_format(s: &str) -> Result<Format, String> {
-    match s {
-        "yaml" | "y" => Ok(Format::Yaml),
-        "json" | "j" => Ok(Format::Json),
-        "toml" | "t" => Ok(Format::Toml),
-        "xml" | "x" => Ok(Format::Xml),
-        _ => Err(format!(
-            "unknown format: {} (expected yaml, json, toml, xml)",
-            s
-        )),
-    }
-}
-
-fn parse_args(args: &[String]) -> Result<YqOptions, String> {
-    let mut opts = YqOptions {
-        filter: String::new(),
-        input_format: None,
-        output_format: None,
-        raw_output: false,
-        compact: false,
-        null_input: false,
-        slurp: false,
-    };
-
-    let mut filter_set = false;
-    let mut i = 0;
-
-    while i < args.len() {
-        let arg = &args[i];
-
-        if arg == "--" {
-            break;
-        }
-
-        if arg == "-p" || arg == "--input-format" {
-            i += 1;
-            if i >= args.len() {
-                return Err("-p requires a format argument".to_string());
-            }
-            opts.input_format = Some(parse_format(&args[i])?);
-        } else if arg == "-o" || arg == "--output-format" {
-            i += 1;
-            if i >= args.len() {
-                return Err("-o requires a format argument".to_string());
-            }
-            opts.output_format = Some(parse_format(&args[i])?);
-        } else if arg == "-r" || arg == "--raw-output" {
-            opts.raw_output = true;
-        } else if arg == "-c" || arg == "--compact-output" {
-            opts.compact = true;
-        } else if arg == "-n" || arg == "--null-input" {
-            opts.null_input = true;
-        } else if arg == "-s" || arg == "--slurp" {
-            opts.slurp = true;
-        } else if arg.starts_with('-') && arg.len() > 1 && !arg.starts_with("--") {
-            // Combined short flags like -rc
-            let flags = &arg[1..];
-            let mut chars = flags.chars().peekable();
-            while let Some(c) = chars.next() {
-                match c {
-                    'r' => opts.raw_output = true,
-                    'c' => opts.compact = true,
-                    'n' => opts.null_input = true,
-                    's' => opts.slurp = true,
-                    'p' => {
-                        let rest: String = chars.collect();
-                        if !rest.is_empty() {
-                            opts.input_format = Some(parse_format(&rest)?);
-                        } else {
-                            i += 1;
-                            if i >= args.len() {
-                                return Err("-p requires a format argument".to_string());
-                            }
-                            opts.input_format = Some(parse_format(&args[i])?);
-                        }
-                        break;
-                    }
-                    'o' => {
-                        let rest: String = chars.collect();
-                        if !rest.is_empty() {
-                            opts.output_format = Some(parse_format(&rest)?);
-                        } else {
-                            i += 1;
-                            if i >= args.len() {
-                                return Err("-o requires a format argument".to_string());
-                            }
-                            opts.output_format = Some(parse_format(&args[i])?);
-                        }
-                        break;
-                    }
-                    _ => return Err(format!("unknown option: -{}", c)),
-                }
-            }
-        } else if !filter_set {
-            opts.filter = arg.clone();
-            filter_set = true;
-        } else {
-            return Err(format!("unexpected argument: {}", arg));
-        }
-
-        i += 1;
-    }
-
-    if !filter_set {
-        opts.filter = ".".to_string();
-    }
-
-    Ok(opts)
-}
-
-fn detect_format(input: &str) -> Format {
-    let trimmed = input.trim_start();
-
-    // JSON: starts with { or [
-    if trimmed.starts_with('{') || trimmed.starts_with('[') {
-        if serde_json::from_str::<serde_json::Value>(trimmed).is_ok() {
-            return Format::Json;
-        }
-    }
-
-    // XML: starts with < (including <?xml declaration)
-    if trimmed.starts_with('<') {
-        return Format::Xml;
-    }
-
-    // TOML: has key = value syntax or [section] headers, but not YAML's key: value
-    if !trimmed.contains(": ") && !trimmed.starts_with("---") {
-        if (trimmed.contains(" = ") || trimmed.contains("= \"") || trimmed.starts_with('['))
-            && toml::from_str::<toml::Value>(trimmed).is_ok()
-        {
-            return Format::Toml;
-        }
-    }
-
-    // Default: YAML
-    Format::Yaml
-}
-
-fn parse_input(input: &str, format: Format) -> Result<serde_json::Value, String> {
-    match format {
-        Format::Json => serde_json::from_str(input).map_err(|e| format!("invalid JSON: {}", e)),
-        Format::Yaml => serde_yaml::from_str(input).map_err(|e| format!("invalid YAML: {}", e)),
-        Format::Toml => {
-            let toml_val: toml::Value =
-                toml::from_str(input).map_err(|e| format!("invalid TOML: {}", e))?;
-            toml_to_json(toml_val)
-        }
-        Format::Xml => xml_to_json(input),
-    }
-}
-
-fn toml_to_json(val: toml::Value) -> Result<serde_json::Value, String> {
-    Ok(match val {
-        toml::Value::String(s) => serde_json::Value::String(s),
-        toml::Value::Integer(i) => serde_json::Value::Number(serde_json::Number::from(i)),
-        toml::Value::Float(f) => serde_json::Number::from_f64(f)
-            .map(serde_json::Value::Number)
-            .unwrap_or(serde_json::Value::Null),
-        toml::Value::Boolean(b) => serde_json::Value::Bool(b),
-        toml::Value::Datetime(dt) => serde_json::Value::String(dt.to_string()),
-        toml::Value::Array(arr) => {
-            let items: Result<Vec<_>, _> = arr.into_iter().map(toml_to_json).collect();
-            serde_json::Value::Array(items?)
-        }
-        toml::Value::Table(table) => {
-            let mut map = serde_json::Map::new();
-            for (k, v) in table {
-                map.insert(k, toml_to_json(v)?);
-            }
-            serde_json::Value::Object(map)
-        }
-    })
-}
-
-fn json_to_toml(val: &serde_json::Value) -> Result<toml::Value, String> {
-    Ok(match val {
-        serde_json::Value::Null => return Err("TOML does not support null values".to_string()),
-        serde_json::Value::Bool(b) => toml::Value::Boolean(*b),
-        serde_json::Value::Number(n) => {
-            if let Some(i) = n.as_i64() {
-                toml::Value::Integer(i)
-            } else if let Some(f) = n.as_f64() {
-                toml::Value::Float(f)
-            } else {
-                return Err("unsupported number for TOML".to_string());
-            }
-        }
-        serde_json::Value::String(s) => toml::Value::String(s.clone()),
-        serde_json::Value::Array(arr) => {
-            let items: Result<Vec<_>, _> = arr.iter().map(json_to_toml).collect();
-            toml::Value::Array(items?)
-        }
-        serde_json::Value::Object(map) => {
-            let mut table = toml::map::Map::new();
-            for (k, v) in map {
-                table.insert(k.clone(), json_to_toml(v)?);
-            }
-            toml::Value::Table(table)
-        }
-    })
-}
-
-// --- XML parsing ---
-
-fn xml_to_json(input: &str) -> Result<serde_json::Value, String> {
-    use quick_xml::events::Event;
-    use quick_xml::Reader;
-
-    struct StackEntry {
-        name: String,
-        children: serde_json::Map<String, serde_json::Value>,
-        text: String,
-    }
-
-    let mut reader = Reader::from_str(input);
-    let mut stack: Vec<StackEntry> = Vec::new();
-    let mut root = serde_json::Map::new();
-    let mut nodes = 0usize;
-
-    loop {
-        match reader.read_event() {
-            Ok(Event::Start(ref e)) => {
-                count_xml_node(&mut nodes)?;
-                if stack.len() >= MAX_XML_DEPTH {
-                    return Err("XML exceeds maximum nesting depth".to_string());
-                }
-                let name = String::from_utf8_lossy(e.name().as_ref()).to_string();
-                let mut children = serde_json::Map::new();
-                let mut attr_count = 0usize;
-                for attr in e.attributes() {
-                    let attr = attr.map_err(|e| format!("invalid XML attribute: {}", e))?;
-                    attr_count += 1;
-                    if attr_count > MAX_XML_ATTRIBUTES_PER_ELEMENT {
-                        return Err("XML element has too many attributes".to_string());
-                    }
-                    let key = format!("@{}", String::from_utf8_lossy(attr.key.as_ref()));
-                    let val = String::from_utf8_lossy(&attr.value).to_string();
-                    children.insert(key, serde_json::Value::String(val));
-                }
-                stack.push(StackEntry {
-                    name,
-                    children,
-                    text: String::new(),
-                });
-            }
-            Ok(Event::End(_)) => {
-                let entry = stack.pop().ok_or("unexpected closing tag")?;
-                let text = entry.text.trim().to_string();
-
-                let value = if entry.children.is_empty() && text.is_empty() {
-                    serde_json::Value::Null
-                } else if entry.children.is_empty() {
-                    serde_json::Value::String(text)
-                } else {
-                    let mut obj = entry.children;
-                    if !text.is_empty() {
-                        obj.insert("#text".to_string(), serde_json::Value::String(text));
-                    }
-                    serde_json::Value::Object(obj)
-                };
-
-                let target = if let Some(parent) = stack.last_mut() {
-                    &mut parent.children
-                } else {
-                    &mut root
-                };
-
-                insert_or_array(target, entry.name, value);
-            }
-            Ok(Event::Empty(ref e)) => {
-                count_xml_node(&mut nodes)?;
-                if stack.len() >= MAX_XML_DEPTH {
-                    return Err("XML exceeds maximum nesting depth".to_string());
-                }
-                let name = String::from_utf8_lossy(e.name().as_ref()).to_string();
-                let mut attrs = serde_json::Map::new();
-                let mut attr_count = 0usize;
-                for attr in e.attributes() {
-                    let attr = attr.map_err(|e| format!("invalid XML attribute: {}", e))?;
-                    attr_count += 1;
-                    if attr_count > MAX_XML_ATTRIBUTES_PER_ELEMENT {
-                        return Err("XML element has too many attributes".to_string());
-                    }
-                    let key = format!("@{}", String::from_utf8_lossy(attr.key.as_ref()));
-                    let val = String::from_utf8_lossy(&attr.value).to_string();
-                    attrs.insert(key, serde_json::Value::String(val));
-                }
-
-                let value = if attrs.is_empty() {
-                    serde_json::Value::Null
-                } else {
-                    serde_json::Value::Object(attrs)
-                };
-
-                let target = if let Some(parent) = stack.last_mut() {
-                    &mut parent.children
-                } else {
-                    &mut root
-                };
-
-                insert_or_array(target, name, value);
-            }
-            Ok(Event::Text(ref e)) => {
-                if let Some(entry) = stack.last_mut() {
-                    let text = e
-                        .unescape()
-                        .map_err(|e| format!("invalid XML text: {}", e))?;
-                    let next_len = entry
-                        .text
-                        .len()
-                        .checked_add(text.len())
-                        .ok_or("XML text length overflowed")?;
-                    if next_len > MAX_XML_TEXT_BYTES {
-                        return Err("XML text exceeds size limit".to_string());
-                    }
-                    entry.text.push_str(&text);
-                }
-            }
-            Ok(Event::Eof) => break,
-            Ok(_) => {} // Skip PI, Comment, Decl, DocType, CData
-            Err(e) => return Err(format!("invalid XML: {}", e)),
-        }
-    }
-
-    if !stack.is_empty() {
-        return Err("unexpected end of XML input".to_string());
-    }
-
-    Ok(serde_json::Value::Object(root))
-}
-
-fn count_xml_node(nodes: &mut usize) -> Result<(), String> {
-    *nodes = nodes.checked_add(1).ok_or("XML node count overflowed")?;
-    if *nodes > MAX_XML_NODES {
-        return Err("XML contains too many nodes".to_string());
-    }
-    Ok(())
-}
-
-fn record_output_value(output_count: &mut usize) -> Result<(), String> {
-    *output_count = output_count
-        .checked_add(1)
-        .ok_or("output count overflowed")?;
-    if *output_count > MAX_OUTPUT_VALUES {
-        return Err("too many output values".to_string());
-    }
-    Ok(())
-}
-
-fn read_limited_string<R: Read>(reader: R) -> Result<String, String> {
-    let mut input = String::new();
-    reader
-        .take((MAX_INPUT_BYTES + 1) as u64)
-        .read_to_string(&mut input)
-        .map_err(|e| format!("failed to read stdin: {}", e))?;
-    if input.len() > MAX_INPUT_BYTES {
-        return Err("stdin exceeds size limit".to_string());
-    }
-    Ok(input)
-}
-
-fn insert_or_array(
-    map: &mut serde_json::Map<String, serde_json::Value>,
-    key: String,
-    value: serde_json::Value,
-) {
-    if let Some(existing) = map.get_mut(&key) {
-        match existing {
-            serde_json::Value::Array(arr) => arr.push(value),
-            _ => {
-                let prev = existing.clone();
-                *existing = serde_json::Value::Array(vec![prev, value]);
-            }
-        }
-    } else {
-        map.insert(key, value);
-    }
-}
-
-// --- XML output ---
-
-fn json_to_xml(val: &serde_json::Value) -> Result<String, String> {
-    use quick_xml::Writer;
-
-    let mut writer = Writer::new(LimitedBytes::new(MAX_FORMATTED_OUTPUT_BYTES));
-
-    match val {
-        serde_json::Value::Object(map) => {
-            for (key, value) in map {
-                write_xml_element(&mut writer, key, value)
-                    .map_err(|e| format!("XML write error: {}", e))?;
-            }
-        }
-        _ => {
-            write_xml_element(&mut writer, "root", val)
-                .map_err(|e| format!("XML write error: {}", e))?;
-        }
-    }
-
-    writer
-        .into_inner()
-        .into_string()
-        .map_err(|e| format!("XML encoding error: {}", e))
-}
-
-fn write_xml_element<W: io::Write>(
-    writer: &mut quick_xml::Writer<W>,
-    name: &str,
-    val: &serde_json::Value,
-) -> Result<(), quick_xml::Error> {
-    use quick_xml::events::{BytesEnd, BytesStart, BytesText, Event};
-
-    match val {
-        serde_json::Value::Object(map) => {
-            let mut elem = BytesStart::new(name);
-            for (k, v) in map {
-                if let Some(attr_name) = k.strip_prefix('@') {
-                    if let serde_json::Value::String(s) = v {
-                        elem.push_attribute((attr_name, s.as_str()));
-                    }
-                }
-            }
-            writer.write_event(Event::Start(elem))?;
-
-            if let Some(serde_json::Value::String(text)) = map.get("#text") {
-                writer.write_event(Event::Text(BytesText::new(text)))?;
-            }
-
-            for (k, v) in map {
-                if k.starts_with('@') || k == "#text" {
-                    continue;
-                }
-                match v {
-                    serde_json::Value::Array(arr) => {
-                        for item in arr {
-                            write_xml_element(writer, k, item)?;
-                        }
-                    }
-                    _ => write_xml_element(writer, k, v)?,
-                }
-            }
-
-            writer.write_event(Event::End(BytesEnd::new(name)))?;
-        }
-        serde_json::Value::Array(arr) => {
-            for item in arr {
-                write_xml_element(writer, name, item)?;
-            }
-        }
-        serde_json::Value::String(s) => {
-            writer.write_event(Event::Start(BytesStart::new(name)))?;
-            writer.write_event(Event::Text(BytesText::new(s)))?;
-            writer.write_event(Event::End(BytesEnd::new(name)))?;
-        }
-        serde_json::Value::Number(n) => {
-            let s = n.to_string();
-            writer.write_event(Event::Start(BytesStart::new(name)))?;
-            writer.write_event(Event::Text(BytesText::new(&s)))?;
-            writer.write_event(Event::End(BytesEnd::new(name)))?;
-        }
-        serde_json::Value::Bool(b) => {
-            let s = if *b { "true" } else { "false" };
-            writer.write_event(Event::Start(BytesStart::new(name)))?;
-            writer.write_event(Event::Text(BytesText::new(s)))?;
-            writer.write_event(Event::End(BytesEnd::new(name)))?;
-        }
-        serde_json::Value::Null => {
-            writer.write_event(Event::Empty(BytesStart::new(name)))?;
-        }
-    }
-    Ok(())
-}
-
-// --- Output formatting ---
-
-fn format_val_output(val: &Val, opts: &YqOptions, out_format: Format) -> Result<String, String> {
-    let mut compact = LimitedString::new(MAX_FORMATTED_OUTPUT_BYTES);
-    fmt::write(&mut compact, format_args!("{}", val))
-        .map_err(|_| "formatted output exceeds size limit".to_string())?;
-    let compact_str = compact.into_string();
-
-    // Raw output: unquote strings
-    if opts.raw_output {
-        if compact_str.starts_with('"') && compact_str.ends_with('"') && compact_str.len() >= 2 {
-            if let Ok(unescaped) = serde_json::from_str::<String>(&compact_str) {
-                ensure_formatted_output_limit(unescaped.len())?;
-                return Ok(unescaped);
-            }
-        }
-    }
-
-    let json_val: serde_json::Value =
-        serde_json::from_str(&compact_str).unwrap_or(serde_json::Value::String(compact_str));
-
-    let output = format_json_as(out_format, &json_val, opts.compact)?;
-    ensure_formatted_output_limit(output.len())?;
-    Ok(output)
-}
-
-fn ensure_formatted_output_limit(len: usize) -> Result<(), String> {
-    if len > MAX_FORMATTED_OUTPUT_BYTES {
-        return Err("formatted output exceeds size limit".to_string());
-    }
-    Ok(())
-}
-
-struct LimitedString {
-    inner: String,
-    limit: usize,
-}
-
-impl LimitedString {
-    fn new(limit: usize) -> Self {
-        Self {
-            inner: String::new(),
-            limit,
-        }
-    }
-
-    fn into_string(self) -> String {
-        self.inner
-    }
-
-    fn write_str(&mut self, s: &str) -> Result<(), String> {
-        let next_len = self
-            .inner
-            .len()
-            .checked_add(s.len())
-            .ok_or("formatted output length overflowed")?;
-        if next_len > self.limit {
-            return Err("formatted output exceeds size limit".to_string());
-        }
-        self.inner.push_str(s);
-        Ok(())
-    }
-
-    fn write_char(&mut self, ch: char) -> Result<(), String> {
-        let mut buf = [0u8; 4];
-        self.write_str(ch.encode_utf8(&mut buf))
-    }
-}
-
-impl fmt::Write for LimitedString {
-    fn write_str(&mut self, s: &str) -> fmt::Result {
-        LimitedString::write_str(self, s).map_err(|_| fmt::Error)
-    }
-}
-
-struct LimitedBytes {
-    inner: Vec<u8>,
-    limit: usize,
-}
-
-impl LimitedBytes {
-    fn new(limit: usize) -> Self {
-        Self {
-            inner: Vec::new(),
-            limit,
-        }
-    }
-
-    fn into_string(self) -> Result<String, std::string::FromUtf8Error> {
-        String::from_utf8(self.inner)
-    }
-}
-
-impl io::Write for LimitedBytes {
-    fn write(&mut self, buf: &[u8]) -> io::Result<usize> {
-        let next_len = self
-            .inner
-            .len()
-            .checked_add(buf.len())
-            .ok_or_else(|| io::Error::other("formatted output length overflowed"))?;
-        if next_len > self.limit {
-            return Err(io::Error::other("formatted output exceeds size limit"));
-        }
-        self.inner.extend_from_slice(buf);
-        Ok(buf.len())
-    }
-
-    fn flush(&mut self) -> io::Result<()> {
-        Ok(())
-    }
-}
-
-fn format_json_as(
-    format: Format,
-    val: &serde_json::Value,
-    compact: bool,
-) -> Result<String, String> {
-    match format {
-        Format::Json => {
-            let mut out = LimitedBytes::new(MAX_FORMATTED_OUTPUT_BYTES);
-            if compact {
-                serde_json::to_writer(&mut out, val)
-                    .map_err(|e| format!("JSON output error: {}", e))?;
-            } else {
-                serde_json::to_writer_pretty(&mut out, val)
-                    .map_err(|e| format!("JSON output error: {}", e))?;
-            }
-            out.into_string()
-                .map_err(|e| format!("JSON encoding error: {}", e))
-        }
-        Format::Yaml => {
-            let mut out = LimitedBytes::new(MAX_FORMATTED_OUTPUT_BYTES);
-            serde_yaml::to_writer(&mut out, val)
-                .map_err(|e| format!("YAML output error: {}", e))?;
-            let s = out
-                .into_string()
-                .map_err(|e| format!("YAML encoding error: {}", e))?;
-            // Strip leading "---\n" and trailing newline for cleaner output
-            let s = s.strip_prefix("---\n").unwrap_or(&s);
-            let s = s.strip_suffix('\n').unwrap_or(s);
-            Ok(s.to_string())
-        }
-        Format::Toml => json_to_toml_bounded(val),
-        Format::Xml => json_to_xml(val),
-    }
-}
-
-fn json_to_toml_bounded(val: &serde_json::Value) -> Result<String, String> {
-    let toml_val = json_to_toml(val)?;
-    let mut out = LimitedString::new(MAX_FORMATTED_OUTPUT_BYTES);
-    write_toml_document(&mut out, &toml_val)?;
-    let s = out.into_string();
-    Ok(s.strip_suffix('\n').unwrap_or(&s).to_string())
-}
-
-fn write_toml_document(out: &mut LimitedString, val: &toml::Value) -> Result<(), String> {
-    match val {
-        toml::Value::Table(table) => write_toml_table(out, &mut Vec::new(), table),
-        other => write_toml_inline(out, other),
-    }
-}
-
-fn write_toml_table(
-    out: &mut LimitedString,
-    path: &mut Vec<String>,
-    table: &toml::map::Map<String, toml::Value>,
-) -> Result<(), String> {
-    for (key, value) in table {
-        if matches!(value, toml::Value::Table(_)) {
-            continue;
-        }
-        write_toml_key(out, key)?;
-        out.write_str(" = ")?;
-        write_toml_inline(out, value)?;
-        out.write_char('\n')?;
-    }
-
-    for (key, value) in table {
-        let toml::Value::Table(child) = value else {
-            continue;
-        };
-        if !path.is_empty() || table_has_scalar_entries(child) {
-            out.write_char('\n')?;
-            path.push(key.clone());
-            out.write_char('[')?;
-            write_toml_path(out, path)?;
-            out.write_str("]\n")?;
-            write_toml_table(out, path, child)?;
-            path.pop();
-        } else {
-            path.push(key.clone());
-            write_toml_table(out, path, child)?;
-            path.pop();
-        }
-    }
-
-    Ok(())
-}
-
-fn table_has_scalar_entries(table: &toml::map::Map<String, toml::Value>) -> bool {
-    table
-        .values()
-        .any(|value| !matches!(value, toml::Value::Table(_)))
-}
-
-fn write_toml_path(out: &mut LimitedString, path: &[String]) -> Result<(), String> {
-    for (i, key) in path.iter().enumerate() {
-        if i > 0 {
-            out.write_char('.')?;
-        }
-        write_toml_key(out, key)?;
-    }
-    Ok(())
-}
-
-fn write_toml_key(out: &mut LimitedString, key: &str) -> Result<(), String> {
-    if !key.is_empty()
-        && key
-            .bytes()
-            .all(|b| b.is_ascii_alphanumeric() || b == b'_' || b == b'-')
-    {
-        out.write_str(key)?;
-    } else {
-        write_toml_string(out, key)?;
-    }
-    Ok(())
-}
-
-fn write_toml_inline(out: &mut LimitedString, val: &toml::Value) -> Result<(), String> {
-    match val {
-        toml::Value::String(s) => write_toml_string(out, s),
-        toml::Value::Integer(i) => out.write_str(&i.to_string()),
-        toml::Value::Float(f) => out.write_str(&f.to_string()),
-        toml::Value::Boolean(b) => out.write_str(if *b { "true" } else { "false" }),
-        toml::Value::Datetime(dt) => out.write_str(&dt.to_string()),
-        toml::Value::Array(arr) => {
-            out.write_char('[')?;
-            for (i, item) in arr.iter().enumerate() {
-                if i > 0 {
-                    out.write_str(", ")?;
-                }
-                write_toml_inline(out, item)?;
-            }
-            out.write_char(']')
-        }
-        toml::Value::Table(table) => {
-            out.write_str("{ ")?;
-            for (i, (key, value)) in table.iter().enumerate() {
-                if i > 0 {
-                    out.write_str(", ")?;
-                }
-                write_toml_key(out, key)?;
-                out.write_str(" = ")?;
-                write_toml_inline(out, value)?;
-            }
-            out.write_str(" }")
-        }
-    }
-}
-
-fn write_toml_string(out: &mut LimitedString, s: &str) -> Result<(), String> {
-    out.write_char('"')?;
-    for ch in s.chars() {
-        match ch {
-            '"' => out.write_str("\\\"")?,
-            '\\' => out.write_str("\\\\")?,
-            '\n' => out.write_str("\\n")?,
-            '\r' => out.write_str("\\r")?,
-            '\t' => out.write_str("\\t")?,
-            '\u{08}' => out.write_str("\\b")?,
-            '\u{0c}' => out.write_str("\\f")?,
-            ch if ch.is_control() => out.write_str(&format!("\\u{:04X}", ch as u32))?,
-            ch => out.write_char(ch)?,
-        }
-    }
-    out.write_char('"')
-}
-
-// --- Main logic ---
-
-fn run_yq(args: &[String]) -> Result<i32, String> {
-    let opts = parse_args(args)?;
-
-    // Read input
-    let stdin_data = if opts.null_input {
-        String::new()
-    } else {
-        read_limited_string(io::stdin())?
-    };
-
-    // Determine input format
-    let in_format = opts.input_format.unwrap_or_else(|| {
-        if opts.null_input {
-            Format::Yaml
-        } else {
-            detect_format(&stdin_data)
-        }
-    });
-
-    // Default output format: YAML for YAML input, otherwise matches input
-    let out_format = opts.output_format.unwrap_or(in_format);
-
-    // Parse input to JSON, then convert to jaq Val
-    let inputs = if opts.null_input {
-        vec![Val::from(serde_json::Value::Null)]
-    } else {
-        let json_val = parse_input(&stdin_data, in_format)?;
-        if opts.slurp {
-            match json_val {
-                serde_json::Value::Array(_) => vec![Val::from(json_val)],
-                _ => vec![Val::from(serde_json::Value::Array(vec![json_val]))],
-            }
-        } else {
-            vec![Val::from(json_val)]
-        }
-    };
-
-    // Compile jaq filter (same engine as jq)
-    let loader = Loader::new(jaq_std::defs().chain(jaq_json::defs()));
-    let arena = Arena::default();
-    let program = File {
-        code: opts.filter.as_str(),
-        path: (),
-    };
-    let modules = loader
-        .load(&arena, program)
-        .map_err(|errs| format!("parse error: {:?}", errs))?;
-
-    let filter = Compiler::default()
-        .with_funs(jaq_std::funs().chain(jaq_json::funs()))
-        .compile(modules)
-        .map_err(|errs| format!("compile error: {:?}", errs))?;
-
-    // Execute filter and output
-    let empty_inputs = RcIter::new(core::iter::empty());
-    let stdout = io::stdout();
-    let mut out = stdout.lock();
-    let mut output_count = 0usize;
-
-    for input in inputs {
-        let ctx = Ctx::new(core::iter::empty(), &empty_inputs);
-        let results = filter.run((ctx, input));
-
-        for result in results {
-            match result {
-                Ok(val) => {
-                    record_output_value(&mut output_count)?;
-                    let s = format_val_output(&val, &opts, out_format)?;
-                    writeln!(out, "{}", s).map_err(|e| format!("failed to write stdout: {}", e))?;
-                }
-                Err(e) => {
-                    eprintln!("yq: error: {}", e);
-                    return Ok(5);
-                }
-            }
-        }
-    }
-
-    out.flush()
-        .map_err(|e| format!("failed to flush stdout: {}", e))?;
-
-    Ok(0)
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn xml_depth_limit_rejects_deep_input() {
-        let mut input = String::new();
-        for i in 0..=MAX_XML_DEPTH {
-            input.push_str(&format!("<n{i}>"));
-        }
-        for i in (0..=MAX_XML_DEPTH).rev() {
-            input.push_str(&format!("</n{i}>"));
-        }
-
-        let err = xml_to_json(&input).unwrap_err();
-
-        assert!(err.contains("nesting depth"));
-    }
-
-    #[test]
-    fn xml_depth_limit_rejects_deep_empty_input() {
-        let mut input = String::new();
-        for i in 0..MAX_XML_DEPTH {
-            input.push_str(&format!("<n{i}>"));
-        }
-        input.push_str("<leaf />");
-        for i in (0..MAX_XML_DEPTH).rev() {
-            input.push_str(&format!("</n{i}>"));
-        }
-
-        let err = xml_to_json(&input).unwrap_err();
-
-        assert!(err.contains("nesting depth"));
-    }
-
-    #[test]
-    fn xml_node_limit_rejects_many_elements() {
-        let mut nodes = MAX_XML_NODES;
-
-        let err = count_xml_node(&mut nodes).unwrap_err();
-
-        assert!(err.contains("too many nodes"));
-    }
-
-    #[test]
-    fn xml_text_limit_rejects_large_text() {
-        let input = format!("<root>{}</root>", "x".repeat(MAX_XML_TEXT_BYTES + 1));
-
-        let err = xml_to_json(&input).unwrap_err();
-
-        assert!(err.contains("text exceeds"));
-    }
-
-    #[test]
-    fn output_limit_rejects_too_many_values() {
-        let mut count = MAX_OUTPUT_VALUES;
-
-        let err = record_output_value(&mut count).unwrap_err();
-
-        assert!(err.contains("too many output values"));
-    }
-
-    #[test]
-    fn formatted_output_limit_rejects_large_output() {
-        let err = ensure_formatted_output_limit(MAX_FORMATTED_OUTPUT_BYTES + 1).unwrap_err();
-
-        assert!(err.contains("formatted output"));
-    }
-
-    #[test]
-    fn limited_bytes_rejects_large_serializer_write() {
-        let mut output = LimitedBytes::new(4);
-
-        let err = output.write_all(b"hello").unwrap_err();
-
-        assert!(err.to_string().contains("formatted output"));
-    }
-
-    #[test]
-    fn limited_toml_writer_rejects_large_value() {
-        let mut output = LimitedString::new(4);
-        let value = toml::Value::String("hello".to_string());
-
-        let err = write_toml_inline(&mut output, &value).unwrap_err();
-
-        assert!(err.contains("formatted output"));
-    }
-
-    #[test]
-    fn input_limit_rejects_oversized_reader() {
-        let input = vec![b'x'; MAX_INPUT_BYTES + 1];
-
-        let err = read_limited_string(&input[..]).unwrap_err();
-
-        assert!(err.contains("stdin exceeds"));
-    }
-
-    #[test]
-    fn xml_rejects_unclosed_elements() {
-        let err = xml_to_json("<root>").unwrap_err();
-
-        assert!(err.contains("unexpected end"));
-    }
-
-    #[test]
-    fn xml_rejects_invalid_text_escape() {
-        let err = xml_to_json("<root>&bogus;</root>").unwrap_err();
-
-        assert!(err.contains("invalid XML text"));
-    }
-}
diff --git a/registry/native/crates/wasi-ext/Cargo.toml b/registry/native/crates/wasi-ext/Cargo.toml
deleted file mode 100644
index 769d9ead3..000000000
--- a/registry/native/crates/wasi-ext/Cargo.toml
+++ /dev/null
@@ -1,10 +0,0 @@
-[package]
-name = "wasi-ext"
-version.workspace = true
-edition.workspace = true
-license.workspace = true
-description = "Custom WASM import bindings for wasmVM host syscalls"
-
-[lib]
-name = "wasi_ext"
-path = "src/lib.rs"
diff --git a/registry/native/crates/wasi-ext/src/lib.rs b/registry/native/crates/wasi-ext/src/lib.rs
deleted file mode 100644
index 89c404f26..000000000
--- a/registry/native/crates/wasi-ext/src/lib.rs
+++ /dev/null
@@ -1,973 +0,0 @@
-//! Custom WASM import bindings for wasmVM host syscalls.
-//!
-//! Declares extern functions for `host_process`, `host_user`, and `host_net`
-//! modules that the JS host runtime provides. These extend standard WASI with
-//! process management, user/group identity, and TCP socket capabilities.
-//!
-//! Signatures match spec section 4.3.
-
-#![no_std]
-
-/// WASI-style errno type. 0 = success.
-pub type Errno = u32;
-
-// WASI errno constants
-pub const ERRNO_SUCCESS: Errno = 0;
-pub const ERRNO_BADF: Errno = 8;
-pub const ERRNO_INVAL: Errno = 28;
-pub const ERRNO_NOSYS: Errno = 52;
-pub const ERRNO_NOENT: Errno = 44;
-pub const ERRNO_SRCH: Errno = 71; // No such process
-pub const ERRNO_CHILD: Errno = 10; // No child processes
-/// WASI `errno::again` (EAGAIN/EWOULDBLOCK). Returned by a non-blocking `recv`
-/// when no data is currently available.
-pub const ERRNO_AGAIN: Errno = 6;
-const POLLFD_BYTES: usize = 8;
-
-/// `SOL_SOCKET` socket option level (matches the host_net shim's accepted level).
-pub const SOL_SOCKET: u32 = 1;
-/// `SO_RCVTIMEO` recv-timeout socket option name (64-bit timeval layout, which the
-/// host_net shim parses as two little-endian `i64`s: seconds + microseconds).
-pub const SO_RCVTIMEO: u32 = 20;
-/// Size of the `timeval` struct the host_net shim expects for `SO_RCVTIMEO`
-/// (two 64-bit fields: `tv_sec` + `tv_usec`).
-const TIMEVAL_BYTES: usize = 16;
-
-fn checked_u32_len(len: usize) -> Result<u32, Errno> {
-    u32::try_from(len).map_err(|_| ERRNO_INVAL)
-}
-
-fn validate_returned_len(len: u32, capacity: usize) -> Result<u32, Errno> {
-    match usize::try_from(len) {
-        Ok(len) if len <= capacity => Ok(len as u32),
-        _ => Err(ERRNO_INVAL),
-    }
-}
-
-fn validate_poll_buffer_len(buffer_len: usize, nfds: u32) -> Result<(), Errno> {
-    let nfds = usize::try_from(nfds).map_err(|_| ERRNO_INVAL)?;
-    let expected = nfds.checked_mul(POLLFD_BYTES).ok_or(ERRNO_INVAL)?;
-    if buffer_len == expected {
-        Ok(())
-    } else {
-        Err(ERRNO_INVAL)
-    }
-}
-
-fn validate_poll_ready_count(ready: u32, nfds: u32) -> Result<u32, Errno> {
-    if ready <= nfds {
-        Ok(ready)
-    } else {
-        Err(ERRNO_INVAL)
-    }
-}
-
-// ============================================================
-// host_process module — process management and FD operations
-// ============================================================
-
-#[link(wasm_import_module = "host_process")]
-extern "C" {
-    /// Spawn a child process.
-    ///
-    /// Arguments are serialized as a byte buffer pointed to by `argv_ptr`/`argv_len`.
-    /// Environment is serialized similarly via `envp_ptr`/`envp_len`.
-    /// File descriptors `stdin_fd`, `stdout_fd`, `stderr_fd` are inherited.
-    /// Current working directory is passed as `cwd_ptr`/`cwd_len`.
-    /// On success, the child's virtual PID is written to `ret_pid`.
-    /// Returns errno.
-    fn proc_spawn(
-        argv_ptr: *const u8,
-        argv_len: u32,
-        envp_ptr: *const u8,
-        envp_len: u32,
-        stdin_fd: u32,
-        stdout_fd: u32,
-        stderr_fd: u32,
-        cwd_ptr: *const u8,
-        cwd_len: u32,
-        ret_pid: *mut u32,
-    ) -> Errno;
-
-    /// Wait for a child process to exit.
-    ///
-    /// Blocks (via Atomics.wait on the host side) until the child exits.
-    /// `options` is reserved (pass 0). Exit status is written to `ret_status`.
-    /// The actual waited-for PID is written to `ret_pid` (important for pid=-1).
-    /// Returns errno.
-    fn proc_waitpid(pid: u32, options: u32, ret_status: *mut u32, ret_pid: *mut u32) -> Errno;
-
-    /// Send a signal to a process.
-    ///
-    /// Only SIGTERM (15) and SIGKILL (9) are meaningful.
-    /// Returns errno.
-    fn proc_kill(pid: u32, signal: u32) -> Errno;
-
-    /// Get the current process's virtual PID.
-    ///
-    /// Writes PID to `ret_pid`. Returns errno.
-    fn proc_getpid(ret_pid: *mut u32) -> Errno;
-
-    /// Get the parent process's virtual PID.
-    ///
-    /// Writes parent PID to `ret_pid`. Returns errno.
-    fn proc_getppid(ret_pid: *mut u32) -> Errno;
-
-    /// Create an anonymous pipe.
-    ///
-    /// Writes the read-end FD to `ret_read_fd` and write-end FD to `ret_write_fd`.
-    /// Returns errno.
-    fn fd_pipe(ret_read_fd: *mut u32, ret_write_fd: *mut u32) -> Errno;
-
-    /// Duplicate a file descriptor.
-    ///
-    /// The new FD number is written to `ret_new_fd`. Returns errno.
-    fn fd_dup(fd: u32, ret_new_fd: *mut u32) -> Errno;
-
-    /// Duplicate a file descriptor to a specific number.
-    ///
-    /// `old_fd` is duplicated to `new_fd`. If `new_fd` is already open, it is closed first.
-    /// Returns errno.
-    fn fd_dup2(old_fd: u32, new_fd: u32) -> Errno;
-
-    /// Sleep for the specified number of milliseconds.
-    ///
-    /// Blocks via Atomics.wait on the host side. Returns errno.
-    fn sleep_ms(milliseconds: u32) -> Errno;
-
-    /// Allocate a pseudo-terminal (PTY) master/slave pair.
-    ///
-    /// On success, the master FD is written to `ret_master_fd` and the slave FD
-    /// to `ret_slave_fd`. Both ends are installed in the process's kernel FD table.
-    /// Returns errno.
-    fn pty_open(ret_master_fd: *mut u32, ret_slave_fd: *mut u32) -> Errno;
-
-    /// Register a signal handler disposition (POSIX sigaction).
-    ///
-    /// `signal` is the signal number (1-64).
-    /// `action` encodes the disposition: 0=SIG_DFL, 1=SIG_IGN, 2=user handler.
-    /// `mask_lo` / `mask_hi` encode the low/high 32 bits of sa_mask, and `flags`
-    /// carries the raw POSIX sa_flags bitmask.
-    /// When action=2, the C sysroot still holds the actual function pointer; the
-    /// kernel only needs the metadata that affects delivery semantics.
-    /// Returns errno.
-    fn proc_sigaction(signal: u32, action: u32, mask_lo: u32, mask_hi: u32, flags: u32) -> Errno;
-}
-
-// ============================================================
-// host_user module — user/group identity and terminal detection
-// ============================================================
-
-#[link(wasm_import_module = "host_user")]
-extern "C" {
-    /// Get the real user ID. Writes to `ret_uid`. Returns errno.
-    fn getuid(ret_uid: *mut u32) -> Errno;
-
-    /// Get the real group ID. Writes to `ret_gid`. Returns errno.
-    fn getgid(ret_gid: *mut u32) -> Errno;
-
-    /// Get the effective user ID. Writes to `ret_uid`. Returns errno.
-    fn geteuid(ret_uid: *mut u32) -> Errno;
-
-    /// Get the effective group ID. Writes to `ret_gid`. Returns errno.
-    fn getegid(ret_gid: *mut u32) -> Errno;
-
-    /// Check if a file descriptor refers to a terminal.
-    ///
-    /// Writes 1 (true) or 0 (false) to `ret_bool`. Returns errno.
-    fn isatty(fd: u32, ret_bool: *mut u32) -> Errno;
-
-    /// Get passwd entry for a user ID.
-    ///
-    /// Serialized passwd string (username:x:uid:gid:gecos:home:shell) is written
-    /// to `buf_ptr` with max length `buf_len`. Actual length written to `ret_len`.
-    /// Returns errno.
-    fn getpwuid(uid: u32, buf_ptr: *mut u8, buf_len: u32, ret_len: *mut u32) -> Errno;
-}
-
-// ============================================================
-// Safe Rust wrappers — host_process
-// ============================================================
-
-/// Spawn a child process with the given arguments, environment, stdio FDs, and working directory.
-///
-/// Returns `Ok(pid)` on success, `Err(errno)` on failure.
-pub fn spawn(
-    argv: &[u8],
-    envp: &[u8],
-    stdin_fd: u32,
-    stdout_fd: u32,
-    stderr_fd: u32,
-    cwd: &[u8],
-) -> Result<u32, Errno> {
-    let mut pid: u32 = 0;
-    let argv_len = checked_u32_len(argv.len())?;
-    let envp_len = checked_u32_len(envp.len())?;
-    let cwd_len = checked_u32_len(cwd.len())?;
-    let errno = unsafe {
-        proc_spawn(
-            argv.as_ptr(),
-            argv_len,
-            envp.as_ptr(),
-            envp_len,
-            stdin_fd,
-            stdout_fd,
-            stderr_fd,
-            cwd.as_ptr(),
-            cwd_len,
-            &mut pid,
-        )
-    };
-    if errno == ERRNO_SUCCESS {
-        Ok(pid)
-    } else {
-        Err(errno)
-    }
-}
-
-/// Wait for a child process to exit.
-///
-/// Returns `Ok((exit_status, actual_pid))` on success, `Err(errno)` on failure.
-/// The actual_pid is the PID of the child that exited (relevant for pid=0xFFFFFFFF / -1).
-pub fn waitpid(pid: u32, options: u32) -> Result<(u32, u32), Errno> {
-    let mut status: u32 = 0;
-    let mut actual_pid: u32 = 0;
-    let errno = unsafe { proc_waitpid(pid, options, &mut status, &mut actual_pid) };
-    if errno == ERRNO_SUCCESS {
-        Ok((status, actual_pid))
-    } else {
-        Err(errno)
-    }
-}
-
-/// Send a signal to a process.
-///
-/// Returns `Ok(())` on success, `Err(errno)` on failure.
-pub fn kill(pid: u32, signal: u32) -> Result<(), Errno> {
-    let errno = unsafe { proc_kill(pid, signal) };
-    if errno == ERRNO_SUCCESS {
-        Ok(())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Get the current process's virtual PID.
-///
-/// Returns `Ok(pid)` on success, `Err(errno)` on failure.
-pub fn getpid() -> Result<u32, Errno> {
-    let mut pid: u32 = 0;
-    let errno = unsafe { proc_getpid(&mut pid) };
-    if errno == ERRNO_SUCCESS {
-        Ok(pid)
-    } else {
-        Err(errno)
-    }
-}
-
-/// Get the parent process's virtual PID.
-///
-/// Returns `Ok(pid)` on success, `Err(errno)` on failure.
-pub fn getppid() -> Result<u32, Errno> {
-    let mut pid: u32 = 0;
-    let errno = unsafe { proc_getppid(&mut pid) };
-    if errno == ERRNO_SUCCESS {
-        Ok(pid)
-    } else {
-        Err(errno)
-    }
-}
-
-/// Create an anonymous pipe.
-///
-/// Returns `Ok((read_fd, write_fd))` on success, `Err(errno)` on failure.
-pub fn pipe() -> Result<(u32, u32), Errno> {
-    let mut read_fd: u32 = 0;
-    let mut write_fd: u32 = 0;
-    let errno = unsafe { fd_pipe(&mut read_fd, &mut write_fd) };
-    if errno == ERRNO_SUCCESS {
-        Ok((read_fd, write_fd))
-    } else {
-        Err(errno)
-    }
-}
-
-/// Duplicate a file descriptor.
-///
-/// Returns `Ok(new_fd)` on success, `Err(errno)` on failure.
-pub fn dup(fd: u32) -> Result<u32, Errno> {
-    let mut new_fd: u32 = 0;
-    let errno = unsafe { fd_dup(fd, &mut new_fd) };
-    if errno == ERRNO_SUCCESS {
-        Ok(new_fd)
-    } else {
-        Err(errno)
-    }
-}
-
-/// Duplicate a file descriptor to a specific number.
-///
-/// Returns `Ok(())` on success, `Err(errno)` on failure.
-pub fn dup2(old_fd: u32, new_fd: u32) -> Result<(), Errno> {
-    let errno = unsafe { fd_dup2(old_fd, new_fd) };
-    if errno == ERRNO_SUCCESS {
-        Ok(())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Sleep for the specified number of milliseconds.
-///
-/// Blocks via Atomics.wait on the host side instead of busy-waiting.
-/// Returns `Ok(())` on success, `Err(errno)` on failure.
-pub fn host_sleep_ms(milliseconds: u32) -> Result<(), Errno> {
-    let errno = unsafe { sleep_ms(milliseconds) };
-    if errno == ERRNO_SUCCESS {
-        Ok(())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Allocate a pseudo-terminal (PTY) master/slave pair.
-///
-/// Returns `Ok((master_fd, slave_fd))` on success, `Err(errno)` on failure.
-/// The master FD is used to read output and write input.
-/// The slave FD is passed to a child process as its stdin/stdout/stderr.
-pub fn openpty() -> Result<(u32, u32), Errno> {
-    let mut master_fd: u32 = 0;
-    let mut slave_fd: u32 = 0;
-    let errno = unsafe { pty_open(&mut master_fd, &mut slave_fd) };
-    if errno == ERRNO_SUCCESS {
-        Ok((master_fd, slave_fd))
-    } else {
-        Err(errno)
-    }
-}
-
-/// Register a signal handler disposition (POSIX sigaction).
-///
-/// `signal` is the signal number (1-64).
-/// `action` encodes the disposition: 0=SIG_DFL, 1=SIG_IGN, 2=user handler (C-side holds pointer).
-/// `mask_lo` / `mask_hi` encode the low/high 32 bits of sa_mask, and `flags`
-/// carries the raw POSIX sa_flags bitmask.
-/// Returns `Ok(())` on success, `Err(errno)` on failure.
-pub fn sigaction_set(
-    signal: u32,
-    action: u32,
-    mask_lo: u32,
-    mask_hi: u32,
-    flags: u32,
-) -> Result<(), Errno> {
-    let errno = unsafe { proc_sigaction(signal, action, mask_lo, mask_hi, flags) };
-    if errno == ERRNO_SUCCESS {
-        Ok(())
-    } else {
-        Err(errno)
-    }
-}
-
-// ============================================================
-// host_net module — TCP socket operations
-// ============================================================
-
-#[link(wasm_import_module = "host_net")]
-extern "C" {
-    /// Create a socket.
-    ///
-    /// `domain` is the address family (e.g. AF_INET=2).
-    /// `sock_type` is the socket type (e.g. SOCK_STREAM=1).
-    /// `protocol` is the protocol (0 for default).
-    /// On success, the socket FD is written to `ret_fd`.
-    /// Returns errno.
-    fn net_socket(domain: u32, sock_type: u32, protocol: u32, ret_fd: *mut u32) -> Errno;
-
-    /// Connect a socket to a remote address.
-    ///
-    /// `addr_ptr`/`addr_len` point to a serialized address string (host:port).
-    /// Returns errno.
-    fn net_connect(fd: u32, addr_ptr: *const u8, addr_len: u32) -> Errno;
-
-    /// Send data on a connected socket.
-    ///
-    /// `buf_ptr`/`buf_len` point to the data to send.
-    /// `flags` are send flags (0 for default).
-    /// Number of bytes sent is written to `ret_sent`.
-    /// Returns errno.
-    fn net_send(fd: u32, buf_ptr: *const u8, buf_len: u32, flags: u32, ret_sent: *mut u32)
-        -> Errno;
-
-    /// Receive data from a connected socket.
-    ///
-    /// `buf_ptr`/`buf_len` point to the receive buffer.
-    /// `flags` are recv flags (0 for default).
-    /// Number of bytes received is written to `ret_received`.
-    /// Returns errno.
-    fn net_recv(
-        fd: u32,
-        buf_ptr: *mut u8,
-        buf_len: u32,
-        flags: u32,
-        ret_received: *mut u32,
-    ) -> Errno;
-
-    /// Close a socket.
-    ///
-    /// Returns errno.
-    fn net_close(fd: u32) -> Errno;
-
-    /// Resolve a hostname to an address.
-    ///
-    /// `host_ptr`/`host_len` point to the hostname string.
-    /// `port_ptr`/`port_len` point to the port/service string.
-    /// `family` is 0 for any address family, 4 for IPv4, and 6 for IPv6.
-    /// Resolved address is written to `ret_addr` buffer with max length from `ret_addr_len`.
-    /// Actual length is written back to `ret_addr_len`.
-    /// Returns errno.
-    fn net_getaddrinfo(
-        host_ptr: *const u8,
-        host_len: u32,
-        port_ptr: *const u8,
-        port_len: u32,
-        family: u32,
-        ret_addr: *mut u8,
-        ret_addr_len: *mut u32,
-    ) -> Errno;
-
-    /// Upgrade a connected TCP socket to TLS.
-    ///
-    /// `hostname_ptr`/`hostname_len` point to the SNI hostname string.
-    /// After success, net_send/net_recv on this fd use the encrypted TLS stream.
-    /// Returns errno.
-    fn net_tls_connect(fd: u32, hostname_ptr: *const u8, hostname_len: u32) -> Errno;
-
-    /// Set a socket option.
-    ///
-    /// `level` is the protocol level (e.g. SOL_SOCKET=1).
-    /// `optname` is the option name.
-    /// `optval_ptr`/`optval_len` point to the option value.
-    /// Returns errno.
-    fn net_setsockopt(
-        fd: u32,
-        level: u32,
-        optname: u32,
-        optval_ptr: *const u8,
-        optval_len: u32,
-    ) -> Errno;
-
-    /// Get the local address of a socket.
-    ///
-    /// The serialized address string is written to `ret_addr` with maximum
-    /// length from `ret_addr_len`. The actual length is written back.
-    /// Returns errno.
-    fn net_getsockname(fd: u32, ret_addr: *mut u8, ret_addr_len: *mut u32) -> Errno;
-
-    /// Get the peer address of a connected socket.
-    ///
-    /// The serialized address string is written to `ret_addr` with maximum
-    /// length from `ret_addr_len`. The actual length is written back.
-    /// Returns errno.
-    fn net_getpeername(fd: u32, ret_addr: *mut u8, ret_addr_len: *mut u32) -> Errno;
-
-    /// Poll socket FDs for readiness.
-    ///
-    /// `fds_ptr` points to a packed array of poll entries (8 bytes each):
-    ///   [fd: i32, events: i16, revents: i16] per entry.
-    /// `nfds` is the number of entries.
-    /// `timeout_ms` is the timeout: 0=non-blocking, -1=block forever, >0=milliseconds.
-    /// On return, revents fields are updated in-place and `ret_ready` receives
-    /// the number of FDs with non-zero revents.
-    /// Returns errno.
-    fn net_poll(fds_ptr: *mut u8, nfds: u32, timeout_ms: i32, ret_ready: *mut u32) -> Errno;
-
-    /// Bind a socket to a local address.
-    ///
-    /// `addr_ptr`/`addr_len` point to a serialized address string (host:port or unix path).
-    /// Returns errno.
-    fn net_bind(fd: u32, addr_ptr: *const u8, addr_len: u32) -> Errno;
-
-    /// Mark a bound socket as listening for incoming connections.
-    ///
-    /// `backlog` is the maximum pending connection queue length.
-    /// Returns errno.
-    fn net_listen(fd: u32, backlog: u32) -> Errno;
-
-    /// Accept an incoming connection on a listening socket.
-    ///
-    /// On success, the new connected socket FD is written to `ret_fd`,
-    /// and the remote address string is written to `ret_addr` with its
-    /// length in `ret_addr_len`.
-    /// Returns errno.
-    fn net_accept(fd: u32, ret_fd: *mut u32, ret_addr: *mut u8, ret_addr_len: *mut u32) -> Errno;
-
-    /// Send a datagram to a specific destination address (UDP).
-    ///
-    /// `buf_ptr`/`buf_len` point to the data to send.
-    /// `flags` are send flags (0 for default).
-    /// `addr_ptr`/`addr_len` point to the destination address string (host:port).
-    /// Number of bytes sent is written to `ret_sent`.
-    /// Returns errno.
-    fn net_sendto(
-        fd: u32,
-        buf_ptr: *const u8,
-        buf_len: u32,
-        flags: u32,
-        addr_ptr: *const u8,
-        addr_len: u32,
-        ret_sent: *mut u32,
-    ) -> Errno;
-
-    /// Receive a datagram from a UDP socket with source address.
-    ///
-    /// `buf_ptr`/`buf_len` point to the receive buffer.
-    /// `flags` are recv flags (0 for default).
-    /// Number of bytes received is written to `ret_received`.
-    /// Source address string is written to `ret_addr` with length in `ret_addr_len`.
-    /// Returns errno.
-    fn net_recvfrom(
-        fd: u32,
-        buf_ptr: *mut u8,
-        buf_len: u32,
-        flags: u32,
-        ret_received: *mut u32,
-        ret_addr: *mut u8,
-        ret_addr_len: *mut u32,
-    ) -> Errno;
-}
-
-// ============================================================
-// Safe Rust wrappers — host_net
-// ============================================================
-
-/// Create a socket.
-///
-/// Returns `Ok(fd)` on success, `Err(errno)` on failure.
-pub fn socket(domain: u32, sock_type: u32, protocol: u32) -> Result<u32, Errno> {
-    let mut fd: u32 = 0;
-    let errno = unsafe { net_socket(domain, sock_type, protocol, &mut fd) };
-    if errno == ERRNO_SUCCESS {
-        Ok(fd)
-    } else {
-        Err(errno)
-    }
-}
-
-/// Connect a socket to a remote address.
-///
-/// `addr` is a serialized address string (e.g. "host:port").
-/// Returns `Ok(())` on success, `Err(errno)` on failure.
-pub fn connect(fd: u32, addr: &[u8]) -> Result<(), Errno> {
-    let addr_len = checked_u32_len(addr.len())?;
-    let errno = unsafe { net_connect(fd, addr.as_ptr(), addr_len) };
-    if errno == ERRNO_SUCCESS {
-        Ok(())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Send data on a connected socket.
-///
-/// Returns `Ok(bytes_sent)` on success, `Err(errno)` on failure.
-pub fn send(fd: u32, buf: &[u8], flags: u32) -> Result<u32, Errno> {
-    let buf_len = checked_u32_len(buf.len())?;
-    let mut sent: u32 = 0;
-    let errno = unsafe { net_send(fd, buf.as_ptr(), buf_len, flags, &mut sent) };
-    if errno == ERRNO_SUCCESS {
-        validate_returned_len(sent, buf.len())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Receive data from a connected socket.
-///
-/// Returns `Ok(bytes_received)` on success, `Err(errno)` on failure.
-pub fn recv(fd: u32, buf: &mut [u8], flags: u32) -> Result<u32, Errno> {
-    let buf_len = checked_u32_len(buf.len())?;
-    let mut received: u32 = 0;
-    let errno = unsafe { net_recv(fd, buf.as_mut_ptr(), buf_len, flags, &mut received) };
-    if errno == ERRNO_SUCCESS {
-        validate_returned_len(received, buf.len())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Outcome of a cooperative (non-blocking) `recv`.
-///
-/// Distinguishes "no data right now, try again later" (`WouldBlock`) from real
-/// data, EOF, and hard errors so callers can yield to the runtime instead of
-/// blocking the single guest thread.
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum RecvOutcome {
-    /// Read `usize` bytes into the buffer.
-    Read(usize),
-    /// Peer closed the connection (orderly EOF).
-    Eof,
-    /// No data available yet; the socket has a non-zero `SO_RCVTIMEO` set and the
-    /// host returned `EAGAIN`. Caller should yield and re-poll.
-    WouldBlock,
-}
-
-/// Receive data, mapping the host's `EAGAIN` to [`RecvOutcome::WouldBlock`].
-///
-/// Use this on sockets that have opted into non-blocking behavior via
-/// [`set_recv_timeout_ms`]. On such sockets the host polls briefly then returns
-/// `EAGAIN` instead of blocking the thread, letting the caller cooperatively
-/// yield. Sockets with no recv timeout still block (this returns `Read`/`Eof`).
-pub fn recv_cooperative(fd: u32, buf: &mut [u8], flags: u32) -> Result<RecvOutcome, Errno> {
-    match recv(fd, buf, flags) {
-        Ok(0) => Ok(RecvOutcome::Eof),
-        Ok(n) => Ok(RecvOutcome::Read(n as usize)),
-        Err(ERRNO_AGAIN) => Ok(RecvOutcome::WouldBlock),
-        Err(e) => Err(e),
-    }
-}
-
-/// Mark a socket non-blocking for recv by setting a small, non-zero
-/// `SO_RCVTIMEO`.
-///
-/// The host_net shim polls up to this timeout then returns `EAGAIN` when no data
-/// arrived. A zero timeout is rejected by the host (it would mean "blocking"),
-/// so callers should pass a small non-zero value (e.g. 2ms). Leaving a socket
-/// without ever calling this keeps the default blocking recv behavior, so other
-/// guests are unaffected.
-pub fn set_recv_timeout_ms(fd: u32, millis: u32) -> Result<(), Errno> {
-    let micros: u64 = (millis as u64).saturating_mul(1000);
-    let secs = micros / 1_000_000;
-    let usec = micros % 1_000_000;
-    let mut timeval = [0u8; TIMEVAL_BYTES];
-    timeval[0..8].copy_from_slice(&secs.to_le_bytes());
-    timeval[8..16].copy_from_slice(&usec.to_le_bytes());
-    setsockopt(fd, SOL_SOCKET, SO_RCVTIMEO, &timeval)
-}
-
-/// Close a socket.
-///
-/// Returns `Ok(())` on success, `Err(errno)` on failure.
-pub fn net_close_socket(fd: u32) -> Result<(), Errno> {
-    let errno = unsafe { net_close(fd) };
-    if errno == ERRNO_SUCCESS {
-        Ok(())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Resolve a hostname to an address.
-///
-/// Writes the resolved address into `buf` and returns the number of bytes written.
-/// Returns `Ok(len)` on success, `Err(errno)` on failure.
-pub fn getaddrinfo(host: &[u8], port: &[u8], buf: &mut [u8]) -> Result<u32, Errno> {
-    let host_len = checked_u32_len(host.len())?;
-    let port_len = checked_u32_len(port.len())?;
-    let mut len = checked_u32_len(buf.len())?;
-    let errno = unsafe {
-        net_getaddrinfo(
-            host.as_ptr(),
-            host_len,
-            port.as_ptr(),
-            port_len,
-            0,
-            buf.as_mut_ptr(),
-            &mut len,
-        )
-    };
-    if errno == ERRNO_SUCCESS {
-        validate_returned_len(len, buf.len())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Set a socket option.
-///
-/// Returns `Ok(())` on success, `Err(errno)` on failure.
-pub fn setsockopt(fd: u32, level: u32, optname: u32, optval: &[u8]) -> Result<(), Errno> {
-    let optval_len = checked_u32_len(optval.len())?;
-    let errno = unsafe { net_setsockopt(fd, level, optname, optval.as_ptr(), optval_len) };
-    if errno == ERRNO_SUCCESS {
-        Ok(())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Get the local address of a socket.
-///
-/// Writes the serialized address into `buf` and returns the number of bytes written.
-/// Returns `Ok(len)` on success, `Err(errno)` on failure.
-pub fn getsockname(fd: u32, buf: &mut [u8]) -> Result<u32, Errno> {
-    let mut len = checked_u32_len(buf.len())?;
-    let errno = unsafe { net_getsockname(fd, buf.as_mut_ptr(), &mut len) };
-    if errno == ERRNO_SUCCESS {
-        validate_returned_len(len, buf.len())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Get the peer address of a connected socket.
-///
-/// Writes the serialized address into `buf` and returns the number of bytes written.
-/// Returns `Ok(len)` on success, `Err(errno)` on failure.
-pub fn getpeername(fd: u32, buf: &mut [u8]) -> Result<u32, Errno> {
-    let mut len = checked_u32_len(buf.len())?;
-    let errno = unsafe { net_getpeername(fd, buf.as_mut_ptr(), &mut len) };
-    if errno == ERRNO_SUCCESS {
-        validate_returned_len(len, buf.len())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Upgrade a connected TCP socket to TLS.
-///
-/// `hostname` is used for SNI (Server Name Indication).
-/// After success, `send`/`recv` on this fd use the encrypted TLS stream.
-/// Returns `Ok(())` on success, `Err(errno)` on failure.
-pub fn tls_connect(fd: u32, hostname: &[u8]) -> Result<(), Errno> {
-    let hostname_len = checked_u32_len(hostname.len())?;
-    let errno = unsafe { net_tls_connect(fd, hostname.as_ptr(), hostname_len) };
-    if errno == ERRNO_SUCCESS {
-        Ok(())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Poll socket FDs for readiness.
-///
-/// `fds` is a mutable slice of pollfd-like entries (8 bytes each: fd i32, events i16, revents i16).
-/// `timeout_ms` is the timeout: 0=non-blocking, -1=block forever, >0=milliseconds.
-/// Returns `Ok(ready_count)` on success, `Err(errno)` on failure.
-pub fn poll(fds: &mut [u8], nfds: u32, timeout_ms: i32) -> Result<u32, Errno> {
-    validate_poll_buffer_len(fds.len(), nfds)?;
-    let mut ready: u32 = 0;
-    let errno = unsafe { net_poll(fds.as_mut_ptr(), nfds, timeout_ms, &mut ready) };
-    if errno == ERRNO_SUCCESS {
-        validate_poll_ready_count(ready, nfds)
-    } else {
-        Err(errno)
-    }
-}
-
-/// Bind a socket to a local address.
-///
-/// `addr` is a serialized address string (e.g. "host:port" or "/path/to/socket").
-/// Returns `Ok(())` on success, `Err(errno)` on failure.
-pub fn bind(fd: u32, addr: &[u8]) -> Result<(), Errno> {
-    let addr_len = checked_u32_len(addr.len())?;
-    let errno = unsafe { net_bind(fd, addr.as_ptr(), addr_len) };
-    if errno == ERRNO_SUCCESS {
-        Ok(())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Mark a bound socket as listening for incoming connections.
-///
-/// `backlog` is the maximum pending connection queue length.
-/// Returns `Ok(())` on success, `Err(errno)` on failure.
-pub fn listen(fd: u32, backlog: u32) -> Result<(), Errno> {
-    let errno = unsafe { net_listen(fd, backlog) };
-    if errno == ERRNO_SUCCESS {
-        Ok(())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Accept an incoming connection on a listening socket.
-///
-/// Returns `Ok((fd, addr_len))` on success, where the remote address string
-/// has been written into `addr_buf` with length `addr_len`.
-/// Returns `Err(errno)` on failure.
-pub fn accept(fd: u32, addr_buf: &mut [u8]) -> Result<(u32, u32), Errno> {
-    let mut new_fd: u32 = 0;
-    let mut addr_len = checked_u32_len(addr_buf.len())?;
-    let errno = unsafe { net_accept(fd, &mut new_fd, addr_buf.as_mut_ptr(), &mut addr_len) };
-    if errno == ERRNO_SUCCESS {
-        Ok((new_fd, validate_returned_len(addr_len, addr_buf.len())?))
-    } else {
-        Err(errno)
-    }
-}
-
-/// Send a datagram to a specific destination address (UDP).
-///
-/// `addr` is the destination address string (e.g. "host:port").
-/// Returns `Ok(bytes_sent)` on success, `Err(errno)` on failure.
-pub fn sendto(fd: u32, buf: &[u8], flags: u32, addr: &[u8]) -> Result<u32, Errno> {
-    let buf_len = checked_u32_len(buf.len())?;
-    let addr_len = checked_u32_len(addr.len())?;
-    let mut sent: u32 = 0;
-    let errno = unsafe {
-        net_sendto(
-            fd,
-            buf.as_ptr(),
-            buf_len,
-            flags,
-            addr.as_ptr(),
-            addr_len,
-            &mut sent,
-        )
-    };
-    if errno == ERRNO_SUCCESS {
-        validate_returned_len(sent, buf.len())
-    } else {
-        Err(errno)
-    }
-}
-
-/// Receive a datagram from a UDP socket with source address.
-///
-/// Writes received data into `buf` and the source address string into `addr_buf`.
-/// Returns `Ok((bytes_received, addr_len))` on success, `Err(errno)` on failure.
-pub fn recvfrom(
-    fd: u32,
-    buf: &mut [u8],
-    flags: u32,
-    addr_buf: &mut [u8],
-) -> Result<(u32, u32), Errno> {
-    let buf_len = checked_u32_len(buf.len())?;
-    let mut received: u32 = 0;
-    let mut addr_len = checked_u32_len(addr_buf.len())?;
-    let errno = unsafe {
-        net_recvfrom(
-            fd,
-            buf.as_mut_ptr(),
-            buf_len,
-            flags,
-            &mut received,
-            addr_buf.as_mut_ptr(),
-            &mut addr_len,
-        )
-    };
-    if errno == ERRNO_SUCCESS {
-        Ok((
-            validate_returned_len(received, buf.len())?,
-            validate_returned_len(addr_len, addr_buf.len())?,
-        ))
-    } else {
-        Err(errno)
-    }
-}
-
-// ============================================================
-// Safe Rust wrappers — host_user
-// ============================================================
-
-/// Get the real user ID.
-///
-/// Returns `Ok(uid)` on success, `Err(errno)` on failure.
-pub fn get_uid() -> Result<u32, Errno> {
-    let mut uid: u32 = 0;
-    let errno = unsafe { getuid(&mut uid) };
-    if errno == ERRNO_SUCCESS {
-        Ok(uid)
-    } else {
-        Err(errno)
-    }
-}
-
-/// Get the real group ID.
-///
-/// Returns `Ok(gid)` on success, `Err(errno)` on failure.
-pub fn get_gid() -> Result<u32, Errno> {
-    let mut gid: u32 = 0;
-    let errno = unsafe { getgid(&mut gid) };
-    if errno == ERRNO_SUCCESS {
-        Ok(gid)
-    } else {
-        Err(errno)
-    }
-}
-
-/// Get the effective user ID.
-///
-/// Returns `Ok(uid)` on success, `Err(errno)` on failure.
-pub fn get_euid() -> Result<u32, Errno> {
-    let mut uid: u32 = 0;
-    let errno = unsafe { geteuid(&mut uid) };
-    if errno == ERRNO_SUCCESS {
-        Ok(uid)
-    } else {
-        Err(errno)
-    }
-}
-
-/// Get the effective group ID.
-///
-/// Returns `Ok(gid)` on success, `Err(errno)` on failure.
-pub fn get_egid() -> Result<u32, Errno> {
-    let mut gid: u32 = 0;
-    let errno = unsafe { getegid(&mut gid) };
-    if errno == ERRNO_SUCCESS {
-        Ok(gid)
-    } else {
-        Err(errno)
-    }
-}
-
-/// Check if a file descriptor is a terminal.
-///
-/// Returns `Ok(true)` if it's a terminal, `Ok(false)` otherwise, `Err(errno)` on failure.
-pub fn is_atty(fd: u32) -> Result<bool, Errno> {
-    let mut result: u32 = 0;
-    let errno = unsafe { isatty(fd, &mut result) };
-    if errno == ERRNO_SUCCESS {
-        Ok(result != 0)
-    } else {
-        Err(errno)
-    }
-}
-
-/// Get the passwd entry for a user ID.
-///
-/// Writes the serialized passwd entry into `buf` and returns the number of bytes written.
-/// Returns `Ok(len)` on success, `Err(errno)` on failure.
-pub fn get_pwuid(uid: u32, buf: &mut [u8]) -> Result<u32, Errno> {
-    let mut len: u32 = 0;
-    let buf_len = checked_u32_len(buf.len())?;
-    let errno = unsafe { getpwuid(uid, buf.as_mut_ptr(), buf_len, &mut len) };
-    if errno == ERRNO_SUCCESS {
-        validate_returned_len(len, buf.len())
-    } else {
-        Err(errno)
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn poll_buffer_validation_requires_exact_pollfd_capacity() {
-        assert_eq!(validate_poll_buffer_len(POLLFD_BYTES, 1), Ok(()));
-        assert_eq!(
-            validate_poll_buffer_len(POLLFD_BYTES - 1, 1),
-            Err(ERRNO_INVAL)
-        );
-        assert_eq!(
-            validate_poll_buffer_len(POLLFD_BYTES + 1, 1),
-            Err(ERRNO_INVAL)
-        );
-    }
-
-    #[test]
-    fn returned_lengths_must_fit_in_the_supplied_buffer() {
-        assert_eq!(validate_returned_len(4, 4), Ok(4));
-        assert_eq!(validate_returned_len(5, 4), Err(ERRNO_INVAL));
-    }
-
-    #[test]
-    fn poll_ready_count_must_not_exceed_nfds() {
-        assert_eq!(validate_poll_ready_count(0, 0), Ok(0));
-        assert_eq!(validate_poll_ready_count(2, 2), Ok(2));
-        assert_eq!(validate_poll_ready_count(3, 2), Err(ERRNO_INVAL));
-    }
-}
diff --git a/registry/native/patches/0001-wasi-process-spawn.patch b/registry/native/patches/0001-wasi-process-spawn.patch
deleted file mode 100644
index f9f05189f..000000000
--- a/registry/native/patches/0001-wasi-process-spawn.patch
+++ /dev/null
@@ -1,674 +0,0 @@
---- a/library/std/src/sys/process/mod.rs	2026-03-15 17:30:05.751603873 -0700
-+++ b/library/std/src/sys/process/mod.rs	2026-03-15 17:22:41.475211510 -0700
-@@ -15,6 +15,10 @@
-         mod motor;
-         use motor as imp;
-     }
-+    target_os = "wasi" => {
-+        mod wasi;
-+        use wasi as imp;
-+    }
-     _ => {
-         mod unsupported;
-         use unsupported as imp;
-
---- /dev/null
-+++ b/library/std/src/sys/process/wasi.rs
-@@ -0,0 +1,657 @@
-+// WASI process implementation using wasmVM host_process syscalls.
-+//
-+// Replaces the unsupported() stubs with real process management
-+// via custom WASM imports provided by the JS host runtime.
-+
-+use super::env::{CommandEnv, CommandEnvs};
-+pub use crate::ffi::OsString as EnvKey;
-+use crate::ffi::{OsStr, OsString};
-+use crate::num::NonZero;
-+use crate::os::fd::{AsRawFd, FromRawFd, OwnedFd, RawFd};
-+use crate::os::wasi::ffi::OsStrExt;
-+use crate::path::Path;
-+use crate::process::StdioPipes;
-+use crate::sys::fd::FileDesc;
-+use crate::sys::fs::File;
-+use crate::sys::FromInner;
-+use crate::io::{BorrowedCursor, IoSlice, IoSliceMut};
-+use crate::{fmt, io};
-+
-+// ============================================================
-+// host_process FFI bindings
-+// ============================================================
-+
-+#[link(wasm_import_module = "host_process")]
-+unsafe extern "C" {
-+    fn proc_spawn(
-+        argv_ptr: *const u8,
-+        argv_len: u32,
-+        envp_ptr: *const u8,
-+        envp_len: u32,
-+        stdin_fd: u32,
-+        stdout_fd: u32,
-+        stderr_fd: u32,
-+        cwd_ptr: *const u8,
-+        cwd_len: u32,
-+        ret_pid: *mut u32,
-+    ) -> u32;
-+
-+    fn proc_waitpid(pid: u32, options: u32, ret_status: *mut u32, ret_pid: *mut u32) -> u32;
-+
-+    fn proc_kill(pid: u32, signal: u32) -> u32;
-+
-+    fn fd_pipe(ret_read_fd: *mut u32, ret_write_fd: *mut u32) -> u32;
-+}
-+
-+/// Convert a WASI errno to an io::Error.
-+fn wasi_err(errno: u32) -> io::Error {
-+    io::Error::from_raw_os_error(errno as i32)
-+}
-+
-+/// Encode host raw exit status into POSIX wait-status bits expected by ExitStatus.
-+fn encode_wait_status(raw_status: u32) -> i32 {
-+    if raw_status > 128 && raw_status < 256 {
-+        (raw_status - 128) as i32
-+    } else {
-+        ((raw_status & 0xff) << 8) as i32
-+    }
-+}
-+
-+/// Create a pipe, returning (read_fd, write_fd) as raw fd numbers.
-+fn create_pipe() -> io::Result<(u32, u32)> {
-+    let mut read_fd: u32 = 0;
-+    let mut write_fd: u32 = 0;
-+    let errno = unsafe { fd_pipe(&mut read_fd, &mut write_fd) };
-+    if errno != 0 {
-+        return Err(wasi_err(errno));
-+    }
-+    Ok((read_fd, write_fd))
-+}
-+
-+/// Wrap a raw fd number into a ChildPipe.
-+fn child_pipe_from_raw(raw: u32) -> ChildPipe {
-+    ChildPipe(FileDesc::from_inner(unsafe { OwnedFd::from_raw_fd(raw as RawFd) }))
-+}
-+
-+// ============================================================
-+// ChildPipe — wraps an owned fd for parent-side pipe ends
-+// ============================================================
-+
-+pub struct ChildPipe(FileDesc);
-+
-+impl ChildPipe {
-+    pub fn read(&self, buf: &mut [u8]) -> io::Result<usize> {
-+        self.0.read(buf)
-+    }
-+
-+    pub fn read_buf(&self, buf: BorrowedCursor<'_>) -> io::Result<()> {
-+        self.0.read_buf(buf)
-+    }
-+
-+    pub fn read_vectored(&self, bufs: &mut [IoSliceMut<'_>]) -> io::Result<usize> {
-+        self.0.read_vectored(bufs)
-+    }
-+
-+    #[inline]
-+    pub fn is_read_vectored(&self) -> bool {
-+        self.0.is_read_vectored()
-+    }
-+
-+    pub fn read_to_end(&self, buf: &mut Vec<u8>) -> io::Result<usize> {
-+        self.0.read_to_end(buf)
-+    }
-+
-+    pub fn write(&self, buf: &[u8]) -> io::Result<usize> {
-+        self.0.write(buf)
-+    }
-+
-+    pub fn write_vectored(&self, bufs: &[IoSlice<'_>]) -> io::Result<usize> {
-+        self.0.write_vectored(bufs)
-+    }
-+
-+    #[inline]
-+    pub fn is_write_vectored(&self) -> bool {
-+        self.0.is_write_vectored()
-+    }
-+
-+    pub fn diverge(&self) -> ! {
-+        panic!("ChildPipe::diverge called on a valid pipe")
-+    }
-+}
-+
-+impl fmt::Debug for ChildPipe {
-+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-+        f.debug_tuple("ChildPipe").field(&self.0.as_raw_fd()).finish()
-+    }
-+}
-+
-+// ============================================================
-+// Stdio
-+// ============================================================
-+
-+#[derive(Debug)]
-+pub enum Stdio {
-+    Inherit,
-+    Null,
-+    MakePipe,
-+    ParentStdout,
-+    ParentStderr,
-+    InheritFile(File),
-+}
-+
-+impl From<ChildPipe> for Stdio {
-+    fn from(pipe: ChildPipe) -> Stdio {
-+        Stdio::InheritFile(File::from_inner(pipe.0))
-+    }
-+}
-+
-+impl From<io::Stdout> for Stdio {
-+    fn from(_: io::Stdout) -> Stdio {
-+        Stdio::ParentStdout
-+    }
-+}
-+
-+impl From<io::Stderr> for Stdio {
-+    fn from(_: io::Stderr) -> Stdio {
-+        Stdio::ParentStderr
-+    }
-+}
-+
-+impl From<File> for Stdio {
-+    fn from(file: File) -> Stdio {
-+        Stdio::InheritFile(file)
-+    }
-+}
-+
-+impl From<crate::sys::pipe::Pipe> for Stdio {
-+    fn from(pipe: crate::sys::pipe::Pipe) -> Stdio {
-+        Stdio::InheritFile(File::from_inner(pipe))
-+    }
-+}
-+
-+// ============================================================
-+// Command
-+// ============================================================
-+
-+pub struct Command {
-+    program: OsString,
-+    args: Vec<OsString>,
-+    env: CommandEnv,
-+    cwd: Option<OsString>,
-+    stdin: Option<Stdio>,
-+    stdout: Option<Stdio>,
-+    stderr: Option<Stdio>,
-+}
-+
-+impl Command {
-+    pub fn new(program: &OsStr) -> Command {
-+        Command {
-+            program: program.to_owned(),
-+            args: vec![program.to_owned()],
-+            env: Default::default(),
-+            cwd: None,
-+            stdin: None,
-+            stdout: None,
-+            stderr: None,
-+        }
-+    }
-+
-+    pub fn arg(&mut self, arg: &OsStr) {
-+        self.args.push(arg.to_owned());
-+    }
-+
-+    pub fn env_mut(&mut self) -> &mut CommandEnv {
-+        &mut self.env
-+    }
-+
-+    pub fn cwd(&mut self, dir: &OsStr) {
-+        self.cwd = Some(dir.to_owned());
-+    }
-+
-+    pub fn stdin(&mut self, stdin: Stdio) {
-+        self.stdin = Some(stdin);
-+    }
-+
-+    pub fn stdout(&mut self, stdout: Stdio) {
-+        self.stdout = Some(stdout);
-+    }
-+
-+    pub fn stderr(&mut self, stderr: Stdio) {
-+        self.stderr = Some(stderr);
-+    }
-+
-+    pub fn get_program(&self) -> &OsStr {
-+        &self.program
-+    }
-+
-+    pub fn get_args(&self) -> CommandArgs<'_> {
-+        let mut iter = self.args.iter();
-+        iter.next();
-+        CommandArgs { iter }
-+    }
-+
-+    pub fn get_envs(&self) -> CommandEnvs<'_> {
-+        self.env.iter()
-+    }
-+
-+    pub fn get_env_clear(&self) -> bool {
-+        self.env.does_clear()
-+    }
-+
-+    pub fn get_current_dir(&self) -> Option<&Path> {
-+        self.cwd.as_ref().map(|cs| Path::new(cs))
-+    }
-+
-+    /// Serialize args as null-separated byte buffer.
-+    fn serialize_argv(&self) -> Vec<u8> {
-+        let mut buf = Vec::new();
-+        for arg in &self.args {
-+            buf.extend_from_slice(arg.as_bytes());
-+            buf.push(0);
-+        }
-+        buf
-+    }
-+
-+    /// Serialize environment as KEY=VALUE\0 byte buffer.
-+    fn serialize_envp(&self) -> Vec<u8> {
-+        let mut buf = Vec::new();
-+        if self.env.does_clear() {
-+            // Only include explicitly set vars
-+            for (key, value) in self.env.iter() {
-+                if let Some(val) = value {
-+                    buf.extend_from_slice(key.as_bytes());
-+                    buf.push(b'=');
-+                    buf.extend_from_slice(val.as_bytes());
-+                    buf.push(0);
-+                }
-+            }
-+        } else {
-+            // Inherit current environment
-+            for (key, value) in crate::env::vars_os() {
-+                buf.extend_from_slice(key.as_bytes());
-+                buf.push(b'=');
-+                buf.extend_from_slice(value.as_bytes());
-+                buf.push(0);
-+            }
-+            // Apply overrides (host uses last value for duplicate keys)
-+            for (key, value_opt) in self.env.iter() {
-+                if let Some(value) = value_opt {
-+                    buf.extend_from_slice(key.as_bytes());
-+                    buf.push(b'=');
-+                    buf.extend_from_slice(value.as_bytes());
-+                    buf.push(0);
-+                }
-+            }
-+        }
-+        buf
-+    }
-+
-+    /// Resolve a Stdio option into (child_fd, optional_parent_pipe).
-+    /// If `use_pipe_default` is true and `stdio` is None, creates a pipe.
-+    fn setup_one_stdio(
-+        stdio: &Option<Stdio>,
-+        default_fd: u32,
-+        is_input: bool,
-+        use_pipe_default: bool,
-+    ) -> io::Result<(u32, Option<ChildPipe>)> {
-+        let make_pipe = || -> io::Result<(u32, Option<ChildPipe>)> {
-+            let (read_fd, write_fd) = create_pipe()?;
-+            if is_input {
-+                Ok((read_fd, Some(child_pipe_from_raw(write_fd))))
-+            } else {
-+                Ok((write_fd, Some(child_pipe_from_raw(read_fd))))
-+            }
-+        };
-+
-+        match stdio {
-+            None if use_pipe_default => make_pipe(),
-+            None | Some(Stdio::Inherit) => Ok((default_fd, None)),
-+            Some(Stdio::Null) => {
-+                // Sentinel fd that the host interprets as /dev/null
-+                Ok((u32::MAX, None))
-+            }
-+            Some(Stdio::MakePipe) => make_pipe(),
-+            Some(Stdio::ParentStdout) => Ok((1, None)),
-+            Some(Stdio::ParentStderr) => Ok((2, None)),
-+            Some(Stdio::InheritFile(file)) => {
-+                Ok((file.as_raw_fd() as u32, None))
-+            }
-+        }
-+    }
-+
-+    pub fn spawn(
-+        &mut self,
-+        default: Stdio,
-+        _needs_stdin: bool,
-+    ) -> io::Result<(Process, StdioPipes)> {
-+        let argv = self.serialize_argv();
-+        let envp = self.serialize_envp();
-+
-+        // Get working directory bytes
-+        let cwd_bytes = match &self.cwd {
-+            Some(dir) => dir.as_bytes().to_vec(),
-+            None => {
-+                let cwd = crate::env::current_dir()?;
-+                cwd.as_os_str().as_bytes().to_vec()
-+            }
-+        };
-+
-+        let use_pipes = matches!(default, Stdio::MakePipe);
-+
-+        let (child_stdin_fd, parent_stdin) =
-+            Self::setup_one_stdio(&self.stdin, 0, true, use_pipes)?;
-+        let (child_stdout_fd, parent_stdout) =
-+            Self::setup_one_stdio(&self.stdout, 1, false, use_pipes)?;
-+        let (child_stderr_fd, parent_stderr) =
-+            Self::setup_one_stdio(&self.stderr, 2, false, use_pipes)?;
-+
-+        // Spawn the child process
-+        let mut pid: u32 = 0;
-+        let errno = unsafe {
-+            proc_spawn(
-+                argv.as_ptr(),
-+                argv.len() as u32,
-+                envp.as_ptr(),
-+                envp.len() as u32,
-+                child_stdin_fd,
-+                child_stdout_fd,
-+                child_stderr_fd,
-+                cwd_bytes.as_ptr(),
-+                cwd_bytes.len() as u32,
-+                &mut pid,
-+            )
-+        };
-+
-+        if errno != 0 {
-+            return Err(wasi_err(errno));
-+        }
-+
-+        let pipes = StdioPipes {
-+            stdin: parent_stdin,
-+            stdout: parent_stdout,
-+            stderr: parent_stderr,
-+        };
-+
-+        Ok((Process { pid, status: None }, pipes))
-+    }
-+}
-+
-+impl fmt::Debug for Command {
-+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-+        if f.alternate() {
-+            let mut debug_command = f.debug_struct("Command");
-+            debug_command.field("program", &self.program).field("args", &self.args);
-+            if !self.env.is_unchanged() {
-+                debug_command.field("env", &self.env);
-+            }
-+            if self.cwd.is_some() {
-+                debug_command.field("cwd", &self.cwd);
-+            }
-+            if self.stdin.is_some() {
-+                debug_command.field("stdin", &self.stdin);
-+            }
-+            if self.stdout.is_some() {
-+                debug_command.field("stdout", &self.stdout);
-+            }
-+            if self.stderr.is_some() {
-+                debug_command.field("stderr", &self.stderr);
-+            }
-+            debug_command.finish()
-+        } else {
-+            if let Some(ref cwd) = self.cwd {
-+                write!(f, "cd {cwd:?} && ")?;
-+            }
-+            if self.env.does_clear() {
-+                write!(f, "env -i ")?;
-+            } else {
-+                let mut any_removed = false;
-+                for (key, value_opt) in self.get_envs() {
-+                    if value_opt.is_none() {
-+                        if !any_removed {
-+                            write!(f, "env ")?;
-+                            any_removed = true;
-+                        }
-+                        write!(f, "-u {} ", key.to_string_lossy())?;
-+                    }
-+                }
-+            }
-+            for (key, value_opt) in self.get_envs() {
-+                if let Some(value) = value_opt {
-+                    write!(f, "{}={value:?} ", key.to_string_lossy())?;
-+                }
-+            }
-+            if self.program != self.args[0] {
-+                write!(f, "[{:?}] ", self.program)?;
-+            }
-+            write!(f, "{:?}", self.args[0])?;
-+            for arg in &self.args[1..] {
-+                write!(f, " {:?}", arg)?;
-+            }
-+            Ok(())
-+        }
-+    }
-+}
-+
-+// ============================================================
-+// ExitStatus
-+// ============================================================
-+
-+#[derive(PartialEq, Eq, Clone, Copy, Debug)]
-+pub struct ExitStatus(i32);
-+
-+impl ExitStatus {
-+    pub fn exit_ok(&self) -> Result<(), ExitStatusError> {
-+        if self.0 == 0 {
-+            Ok(())
-+        } else {
-+            Err(ExitStatusError(unsafe { NonZero::new_unchecked(self.0) }))
-+        }
-+    }
-+
-+    pub fn code(&self) -> Option<i32> {
-+        // Decode POSIX wstatus: normal exit has bits 0-6 = 0, exit code in bits 8-15.
-+        // Signal death has bits 0-6 = signal number (no exit code).
-+        if (self.0 & 0x7f) == 0 {
-+            Some((self.0 >> 8) & 0xff)
-+        } else {
-+            None
-+        }
-+    }
-+}
-+
-+impl Default for ExitStatus {
-+    fn default() -> ExitStatus {
-+        ExitStatus(0)
-+    }
-+}
-+
-+impl fmt::Display for ExitStatus {
-+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-+        if (self.0 & 0x7f) == 0 {
-+            write!(f, "exit status: {}", (self.0 >> 8) & 0xff)
-+        } else {
-+            write!(f, "signal: {}", self.0 & 0x7f)
-+        }
-+    }
-+}
-+
-+// ============================================================
-+// ExitStatusError
-+// ============================================================
-+
-+#[derive(PartialEq, Eq, Clone, Copy, Debug)]
-+pub struct ExitStatusError(NonZero<i32>);
-+
-+impl Into<ExitStatus> for ExitStatusError {
-+    fn into(self) -> ExitStatus {
-+        ExitStatus(self.0.get())
-+    }
-+}
-+
-+impl ExitStatusError {
-+    pub fn code(self) -> Option<NonZero<i32>> {
-+        // Decode POSIX wstatus: return exit code only for normal exits.
-+        let raw = self.0.get();
-+        if (raw & 0x7f) == 0 {
-+            NonZero::new((raw >> 8) & 0xff)
-+        } else {
-+            None
-+        }
-+    }
-+}
-+
-+// ============================================================
-+// ExitCode
-+// ============================================================
-+
-+#[derive(PartialEq, Eq, Clone, Copy, Debug)]
-+pub struct ExitCode(u8);
-+
-+impl ExitCode {
-+    pub const SUCCESS: ExitCode = ExitCode(0);
-+    pub const FAILURE: ExitCode = ExitCode(1);
-+
-+    pub fn as_i32(&self) -> i32 {
-+        self.0 as i32
-+    }
-+}
-+
-+impl From<u8> for ExitCode {
-+    fn from(code: u8) -> Self {
-+        Self(code)
-+    }
-+}
-+
-+// ============================================================
-+// Process
-+// ============================================================
-+
-+pub struct Process {
-+    pid: u32,
-+    status: Option<ExitStatus>,
-+}
-+
-+impl Process {
-+    pub fn id(&self) -> u32 {
-+        self.pid
-+    }
-+
-+    pub fn kill(&mut self) -> io::Result<()> {
-+        const SIGKILL: u32 = 9;
-+        let errno = unsafe { proc_kill(self.pid, SIGKILL) };
-+        if errno != 0 {
-+            Err(wasi_err(errno))
-+        } else {
-+            Ok(())
-+        }
-+    }
-+
-+    pub fn wait(&mut self) -> io::Result<ExitStatus> {
-+        if let Some(status) = self.status {
-+            return Ok(status);
-+        }
-+        let mut exit_code: u32 = 0;
-+        let mut ret_pid: u32 = 0;
-+        let errno = unsafe { proc_waitpid(self.pid, 0, &mut exit_code, &mut ret_pid) };
-+        if errno != 0 {
-+            return Err(wasi_err(errno));
-+        }
-+        let status = ExitStatus(encode_wait_status(exit_code));
-+        self.status = Some(status);
-+        Ok(status)
-+    }
-+
-+    pub fn try_wait(&mut self) -> io::Result<Option<ExitStatus>> {
-+        if let Some(status) = self.status {
-+            return Ok(Some(status));
-+        }
-+        // Non-blocking wait: options=1 is WNOHANG equivalent
-+        let mut exit_code: u32 = 0;
-+        let mut ret_pid: u32 = 0;
-+        let errno = unsafe { proc_waitpid(self.pid, 1, &mut exit_code, &mut ret_pid) };
-+        if errno == 0 {
-+            if ret_pid == 0 {
-+                return Ok(None);
-+            }
-+            let status = ExitStatus(encode_wait_status(exit_code));
-+            self.status = Some(status);
-+            Ok(Some(status))
-+        } else if errno == 10 {
-+            // ECHILD — child not yet exited
-+            Ok(None)
-+        } else {
-+            Err(wasi_err(errno))
-+        }
-+    }
-+}
-+
-+// ============================================================
-+// CommandArgs
-+// ============================================================
-+
-+pub struct CommandArgs<'a> {
-+    iter: crate::slice::Iter<'a, OsString>,
-+}
-+
-+impl<'a> Iterator for CommandArgs<'a> {
-+    type Item = &'a OsStr;
-+    fn next(&mut self) -> Option<&'a OsStr> {
-+        self.iter.next().map(|os| &**os)
-+    }
-+    fn size_hint(&self) -> (usize, Option<usize>) {
-+        self.iter.size_hint()
-+    }
-+}
-+
-+impl<'a> ExactSizeIterator for CommandArgs<'a> {
-+    fn len(&self) -> usize {
-+        self.iter.len()
-+    }
-+    fn is_empty(&self) -> bool {
-+        self.iter.is_empty()
-+    }
-+}
-+
-+impl<'a> fmt::Debug for CommandArgs<'a> {
-+    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-+        f.debug_list().entries(self.iter.clone()).finish()
-+    }
-+}
-+
-+// ============================================================
-+// output — collect stdout/stderr from a child process
-+// ============================================================
-+
-+pub fn output(cmd: &mut Command) -> io::Result<(ExitStatus, Vec<u8>, Vec<u8>)> {
-+    let (mut process, mut pipes) = cmd.spawn(Stdio::MakePipe, false)?;
-+
-+    drop(pipes.stdin.take());
-+    let (mut stdout, mut stderr) = (Vec::new(), Vec::new());
-+    match (pipes.stdout.take(), pipes.stderr.take()) {
-+        (None, None) => {}
-+        (Some(out), None) => {
-+            out.read_to_end(&mut stdout)?;
-+        }
-+        (None, Some(err)) => {
-+            err.read_to_end(&mut stderr)?;
-+        }
-+        (Some(out), Some(err)) => {
-+            read_output(out, &mut stdout, err, &mut stderr)?;
-+        }
-+    }
-+
-+    let status = process.wait()?;
-+    Ok((status, stdout, stderr))
-+}
-+
-+pub fn read_output(
-+    out: ChildPipe,
-+    stdout: &mut Vec<u8>,
-+    err: ChildPipe,
-+    stderr: &mut Vec<u8>,
-+) -> io::Result<()> {
-+    // In WASI single-threaded context, read sequentially
-+    out.read_to_end(stdout)?;
-+    err.read_to_end(stderr)?;
-+    Ok(())
-+}
diff --git a/registry/native/patches/0002-wasi-fd-dup.patch b/registry/native/patches/0002-wasi-fd-dup.patch
deleted file mode 100644
index dadb7b29a..000000000
--- a/registry/native/patches/0002-wasi-fd-dup.patch
+++ /dev/null
@@ -1,40 +0,0 @@
---- a/library/std/src/os/fd/owned.rs
-+++ b/library/std/src/os/fd/owned.rs
-@@ -132,7 +132,11 @@
- 
-     /// Creates a new `OwnedFd` instance that shares the same underlying file
-     /// description as the existing `BorrowedFd` instance.
--    #[cfg(any(target_arch = "wasm32", target_os = "hermit", target_os = "trusty"))]
-+    #[cfg(any(
-+        all(target_arch = "wasm32", not(target_os = "wasi")),
-+        target_os = "hermit",
-+        target_os = "trusty"
-+    ))]
-     #[stable(feature = "io_safety", since = "1.63.0")]
-     pub fn try_clone_to_owned(&self) -> io::Result<OwnedFd> {
-         Err(io::Error::UNSUPPORTED_PLATFORM)
-@@ -139,6 +143,24 @@
-         Err(io::Error::UNSUPPORTED_PLATFORM)
-     }
- 
-+    /// Creates a new `OwnedFd` instance that shares the same underlying file
-+    /// description as the existing `BorrowedFd` instance.
-+    /// WASI implementation using wasmVM host_process.fd_dup.
-+    #[cfg(target_os = "wasi")]
-+    #[stable(feature = "io_safety", since = "1.63.0")]
-+    pub fn try_clone_to_owned(&self) -> io::Result<OwnedFd> {
-+        #[link(wasm_import_module = "host_process")]
-+        unsafe extern "C" {
-+            fn fd_dup(fd: u32, ret_new_fd: *mut u32) -> u32;
-+        }
-+        let mut new_fd: u32 = 0;
-+        let errno = unsafe { fd_dup(self.as_raw_fd() as u32, &mut new_fd) };
-+        if errno != 0 {
-+            return Err(io::Error::from_raw_os_error(errno as i32));
-+        }
-+        Ok(unsafe { OwnedFd::from_raw_fd(new_fd as RawFd) })
-+    }
-+
-     /// Creates a new `OwnedFd` instance that shares the same underlying file
-     /// description as the existing `BorrowedFd` instance.
-     #[cfg(target_os = "motor")]
diff --git a/registry/native/patches/0002a-wasi-pipe-module-routing.patch b/registry/native/patches/0002a-wasi-pipe-module-routing.patch
deleted file mode 100644
index 04f9dfd7c..000000000
--- a/registry/native/patches/0002a-wasi-pipe-module-routing.patch
+++ /dev/null
@@ -1,43 +0,0 @@
---- a/library/std/src/sys/pipe/mod.rs
-+++ b/library/std/src/sys/pipe/mod.rs
-@@ -10,6 +10,10 @@ cfg_select! {
-     target_os = "motor" => {
-         mod motor;
-         pub use motor::{Pipe, pipe};
-+    }
-+    target_os = "wasi" => {
-+        mod wasi;
-+        pub use wasi::{Pipe, pipe};
-     }
-     _ => {
-         mod unsupported;
---- /dev/null
-+++ b/library/std/src/sys/pipe/wasi.rs
-@@ -0,0 +1,27 @@
-+// WASI pipe implementation using wasmVM host_process.fd_pipe.
-+
-+use crate::io;
-+use crate::os::fd::FromRawFd;
-+use crate::sys::fd::FileDesc;
-+
-+pub type Pipe = FileDesc;
-+
-+#[link(wasm_import_module = "host_process")]
-+unsafe extern "C" {
-+    fn fd_pipe(ret_read_fd: *mut u32, ret_write_fd: *mut u32) -> u32;
-+}
-+
-+pub fn pipe() -> io::Result<(Pipe, Pipe)> {
-+    let mut read_fd: u32 = 0;
-+    let mut write_fd: u32 = 0;
-+    let errno = unsafe { fd_pipe(&mut read_fd, &mut write_fd) };
-+    if errno != 0 {
-+        return Err(io::Error::from_raw_os_error(errno as i32));
-+    }
-+    unsafe {
-+        Ok((
-+            Pipe::from_raw_fd(read_fd as i32),
-+            Pipe::from_raw_fd(write_fd as i32),
-+        ))
-+    }
-+}
diff --git a/registry/native/patches/0003-wasi-user-group.patch b/registry/native/patches/0003-wasi-user-group.patch
deleted file mode 100644
index 8d1a50f43..000000000
--- a/registry/native/patches/0003-wasi-user-group.patch
+++ /dev/null
@@ -1,67 +0,0 @@
---- a/library/std/src/sys/pal/wasi/os.rs	2026-03-15 17:39:48.943743477 -0700
-+++ b/library/std/src/sys/pal/wasi/os.rs	2026-03-15 17:40:04.603751504 -0700
-@@ -8,6 +8,23 @@
- use crate::sys::unsupported;
- use crate::{fmt, io};
- 
-+// wasmVM host FFI bindings for process and user identity syscalls.
-+mod host_ffi {
-+    #[link(wasm_import_module = "host_process")]
-+    unsafe extern "C" {
-+        pub fn proc_getpid(ret_pid: *mut u32) -> u32;
-+        pub fn proc_getppid(ret_pid: *mut u32) -> u32;
-+    }
-+
-+    #[link(wasm_import_module = "host_user")]
-+    unsafe extern "C" {
-+        pub fn getuid(ret_uid: *mut u32) -> u32;
-+        pub fn getgid(ret_gid: *mut u32) -> u32;
-+        pub fn geteuid(ret_uid: *mut u32) -> u32;
-+        pub fn getegid(ret_gid: *mut u32) -> u32;
-+    }
-+}
-+
- // Add a few symbols not in upstream `libc` just yet.
- pub mod libc {
-     pub use libc::*;
-@@ -103,7 +120,39 @@
- }
- 
- pub fn getpid() -> u32 {
--    panic!("unsupported");
-+    let mut pid: u32 = 0;
-+    let errno = unsafe { host_ffi::proc_getpid(&mut pid) };
-+    if errno != 0 { 1 } else { pid }
-+}
-+
-+pub fn getppid() -> u32 {
-+    let mut pid: u32 = 0;
-+    let errno = unsafe { host_ffi::proc_getppid(&mut pid) };
-+    if errno != 0 { 0 } else { pid }
-+}
-+
-+pub fn getuid() -> u32 {
-+    let mut uid: u32 = 0;
-+    let errno = unsafe { host_ffi::getuid(&mut uid) };
-+    if errno != 0 { 1000 } else { uid }
-+}
-+
-+pub fn getgid() -> u32 {
-+    let mut gid: u32 = 0;
-+    let errno = unsafe { host_ffi::getgid(&mut gid) };
-+    if errno != 0 { 1000 } else { gid }
-+}
-+
-+pub fn geteuid() -> u32 {
-+    let mut uid: u32 = 0;
-+    let errno = unsafe { host_ffi::geteuid(&mut uid) };
-+    if errno != 0 { 1000 } else { uid }
-+}
-+
-+pub fn getegid() -> u32 {
-+    let mut gid: u32 = 0;
-+    let errno = unsafe { host_ffi::getegid(&mut gid) };
-+    if errno != 0 { 1000 } else { gid }
- }
- 
- #[doc(hidden)]
diff --git a/registry/native/patches/0004-wasi-isatty.patch b/registry/native/patches/0004-wasi-isatty.patch
deleted file mode 100644
index b047645f9..000000000
--- a/registry/native/patches/0004-wasi-isatty.patch
+++ /dev/null
@@ -1,34 +0,0 @@
---- a/library/std/src/sys/io/mod.rs
-+++ b/library/std/src/sys/io/mod.rs
-@@ -25,7 +25,11 @@
-
- mod is_terminal {
-     cfg_select! {
--        any(target_family = "unix", target_os = "wasi") => {
-+        target_os = "wasi" => {
-+            mod wasi;
-+            pub use wasi::*;
-+        }
-+        target_family = "unix" => {
-             mod isatty;
-             pub use isatty::*;
-         }
-
---- /dev/null
-+++ b/library/std/src/sys/io/is_terminal/wasi.rs
-@@ -0,0 +1,14 @@
-+// WASI is_terminal implementation using wasmVM host_user.isatty.
-+
-+use crate::os::fd::AsRawFd;
-+
-+#[link(wasm_import_module = "host_user")]
-+unsafe extern "C" {
-+    fn isatty(fd: u32, ret_bool: *mut u32) -> u32;
-+}
-+
-+pub fn is_terminal(fd: &impl AsRawFd) -> bool {
-+    let mut result: u32 = 0;
-+    let errno = unsafe { isatty(fd.as_raw_fd() as u32, &mut result) };
-+    errno == 0 && result != 0
-+}
-
diff --git a/registry/native/patches/0005-wasi-temp-dir.patch b/registry/native/patches/0005-wasi-temp-dir.patch
deleted file mode 100644
index 9c8d08cb5..000000000
--- a/registry/native/patches/0005-wasi-temp-dir.patch
+++ /dev/null
@@ -1,11 +0,0 @@
---- a/library/std/src/sys/pal/wasi/os.rs
-+++ b/library/std/src/sys/pal/wasi/os.rs
-@@ -111,7 +111,7 @@
- }
-
- pub fn temp_dir() -> PathBuf {
--    panic!("no filesystem on wasm")
-+    PathBuf::from("/tmp")
- }
-
- pub fn home_dir() -> Option<PathBuf> {
diff --git a/registry/native/patches/0006-wasi-file-mode.patch b/registry/native/patches/0006-wasi-file-mode.patch
deleted file mode 100644
index 69e1d7435..000000000
--- a/registry/native/patches/0006-wasi-file-mode.patch
+++ /dev/null
@@ -1,62 +0,0 @@
---- a/library/std/src/sys/fs/unix.rs
-+++ b/library/std/src/sys/fs/unix.rs
-@@ -85,6 +85,21 @@
- use crate::os::fd::{AsFd, AsRawFd, BorrowedFd, FromRawFd, IntoRawFd};
- #[cfg(target_family = "unix")]
- use crate::os::unix::prelude::*;
-+
-+// host_fs FFI — provides real POSIX mode from the wasmVM host runtime.
-+// WASI filestat does not include permission bits, so Rust std's stat()
-+// returns a synthesized default (0555). These imports let us fetch the
-+// actual mode stored in the virtual filesystem.
-+#[cfg(target_os = "wasi")]
-+mod host_fs {
-+    #[link(wasm_import_module = "host_fs")]
-+    unsafe extern "C" {
-+        pub fn path_mode(dir_fd: u32, path_ptr: *const u8, path_len: u32, follow_symlinks: u32) -> u32;
-+        pub fn fd_mode(fd: i32) -> u32;
-+        pub fn chmod(dir_fd: u32, path_ptr: *const u8, path_len: u32, mode: u32) -> u32;
-+    }
-+}
-+
- #[cfg(target_os = "wasi")]
- use crate::os::wasi::prelude::*;
- use crate::path::{Path, PathBuf};
-@@ -1375,6 +1390,11 @@
- 
-         let mut stat: stat64 = unsafe { mem::zeroed() };
-         cvt(unsafe { fstat64(fd, &mut stat) })?;
-+        #[cfg(target_os = "wasi")]
-+        {
-+            let mode = unsafe { host_fs::fd_mode(fd as i32) };
-+            if mode != 0 { stat.st_mode = mode as libc::mode_t; }
-+        }
-         Ok(FileAttr::from_stat64(stat))
-     }
- 
-@@ -2162,6 +2182,12 @@
- 
-     let mut stat: stat64 = unsafe { mem::zeroed() };
-     cvt(unsafe { stat64(p.as_ptr(), &mut stat) })?;
-+    #[cfg(target_os = "wasi")]
-+    {
-+        let bytes = p.to_bytes();
-+        let mode = unsafe { host_fs::path_mode(3, bytes.as_ptr(), bytes.len() as u32, 1) };
-+        if mode != 0 { stat.st_mode = mode as libc::mode_t; }
-+    }
-     Ok(FileAttr::from_stat64(stat))
- }
- 
-@@ -2179,6 +2205,12 @@
- 
-     let mut stat: stat64 = unsafe { mem::zeroed() };
-     cvt(unsafe { lstat64(p.as_ptr(), &mut stat) })?;
-+    #[cfg(target_os = "wasi")]
-+    {
-+        let bytes = p.to_bytes();
-+        let mode = unsafe { host_fs::path_mode(3, bytes.as_ptr(), bytes.len() as u32, 0) };
-+        if mode != 0 { stat.st_mode = mode as libc::mode_t; }
-+    }
-     Ok(FileAttr::from_stat64(stat))
- }
- 
diff --git a/registry/native/patches/0007-wasi-childpipe-fd.patch b/registry/native/patches/0007-wasi-childpipe-fd.patch
deleted file mode 100644
index 4dff84111..000000000
--- a/registry/native/patches/0007-wasi-childpipe-fd.patch
+++ /dev/null
@@ -1,46 +0,0 @@
---- a/library/std/src/os/wasi/mod.rs
-+++ b/library/std/src/os/wasi/mod.rs
-@@ -39,6 +39,7 @@
- 
- #[cfg(all(target_os = "wasi", target_env = "p1"))]
- pub mod net;
-+pub mod process;
- 
- /// A prelude for conveniently writing platform-specific code.
- ///
---- a/library/std/src/sys/process/wasi.rs
-+++ b/library/std/src/sys/process/wasi.rs
-@@ -125,6 +125,22 @@
-     }
- }
- 
-+// Inner-fd plumbing so the public `os/wasi/process.rs` can expose the
-+// ChildStdin/out/err fd traits (mirrors the unix anonymous-pipe path).
-+impl crate::os::fd::AsFd for ChildPipe {
-+    #[inline]
-+    fn as_fd(&self) -> crate::os::fd::BorrowedFd<'_> {
-+        self.0.as_fd()
-+    }
-+}
-+
-+impl crate::sys::IntoInner<crate::os::fd::OwnedFd> for ChildPipe {
-+    #[inline]
-+    fn into_inner(self) -> crate::os::fd::OwnedFd {
-+        self.0.into_inner()
-+    }
-+}
-+
- // ============================================================
- // Stdio
- // ============================================================
-@@ -439,6 +455,10 @@
- #[derive(PartialEq, Eq, Clone, Copy, Debug)]
- pub struct ExitStatus(i32);
- 
-+impl From<i32> for ExitStatus {
-+    fn from(c: i32) -> ExitStatus { ExitStatus(c) }
-+}
-+
- impl ExitStatus {
-     pub fn exit_ok(&self) -> Result<(), ExitStatusError> {
-         if self.0 == 0 {
diff --git a/registry/native/patches/0008-wasi-exit-status-ext.md b/registry/native/patches/0008-wasi-exit-status-ext.md
deleted file mode 100644
index 5f0424d32..000000000
--- a/registry/native/patches/0008-wasi-exit-status-ext.md
+++ /dev/null
@@ -1,26 +0,0 @@
-# std patch: ExitStatusExt for wasm32-wasip1
-
-codex-core's `synthetic_exit_status` constructs an `ExitStatus` from a raw code via
-`std::os::wasi::process::ExitStatusExt::from_raw`, which wasi std lacks. Add it
-(mirrors os/unix/process.rs). Two edits to the -Z build-std sysroot source:
-
-1. library/std/src/sys/process/wasi.rs — after `pub struct ExitStatus(i32);`:
-       impl From<i32> for ExitStatus {
-           fn from(c: i32) -> ExitStatus { ExitStatus(c) }
-       }
-
-2. library/std/src/os/wasi/process.rs — add `FromInner` to the sys import, then:
-       #[stable(feature = "rust1", since = "1.0.0")]
-       pub trait ExitStatusExt {
-           #[stable(feature = "exit_status_from", since = "1.12.0")]
-           fn from_raw(raw: i32) -> Self;
-       }
-       #[stable(feature = "exit_status_from", since = "1.12.0")]
-       impl ExitStatusExt for process::ExitStatus {
-           fn from_raw(raw: i32) -> Self {
-               process::ExitStatus::from_inner(crate::sys::process::ExitStatus::from(raw))
-           }
-       }
-
-NOTE: -Z build-std caches std by version, not sysroot-src mtime; after editing the
-sysroot src, remove target/<target>/*/deps/libstd-* + .fingerprint/std-* to force a rebuild.
diff --git a/registry/native/patches/0009-wasi-split-paths.md b/registry/native/patches/0009-wasi-split-paths.md
deleted file mode 100644
index 12f0e74d0..000000000
--- a/registry/native/patches/0009-wasi-split-paths.md
+++ /dev/null
@@ -1,5 +0,0 @@
-# std patch: implement env::split_paths for wasm32-wasip1
-std's wasi os.rs has `split_paths` → panic!("unsupported"); codex parses PATH via
-env::split_paths during session setup and aborts ("RuntimeError: unreachable").
-wasi uses ':'-separated lists like Unix — implement SplitPaths to split on ':' and
-yield PathBufs (see library/std/src/sys/pal/wasi/os.rs). Apply to the -Z build-std sysroot.
diff --git a/registry/native/patches/0009-wasi-split-paths.patch b/registry/native/patches/0009-wasi-split-paths.patch
deleted file mode 100644
index 2ff1aefe1..000000000
--- a/registry/native/patches/0009-wasi-split-paths.patch
+++ /dev/null
@@ -1,33 +0,0 @@
---- a/library/std/src/sys/pal/wasi/os.rs
-+++ b/library/std/src/sys/pal/wasi/os.rs
-@@ -70,17 +70,28 @@
-     }
- }
-
--pub struct SplitPaths<'a>(!, PhantomData<&'a ()>);
-+pub struct SplitPaths<'a> {
-+    inner: crate::vec::IntoIter<PathBuf>,
-+    _marker: PhantomData<&'a ()>,
-+}
-
--pub fn split_paths(_unparsed: &OsStr) -> SplitPaths<'_> {
--    panic!("unsupported")
-+pub fn split_paths(unparsed: &OsStr) -> SplitPaths<'_> {
-+    // wasm32-wasip1 uses ':'-separated PATH-like lists, like Unix. (secure-exec
-+    // pipeline-only codex port — codex parses PATH via env::split_paths.)
-+    use crate::os::wasi::ffi::OsStrExt;
-+    let bytes = unparsed.as_bytes();
-+    let paths: crate::vec::Vec<PathBuf> = bytes
-+        .split(|b| *b == b':')
-+        .map(|seg| PathBuf::from(OsStr::from_bytes(seg)))
-+        .collect();
-+    SplitPaths { inner: paths.into_iter(), _marker: PhantomData }
- }
-
- impl<'a> Iterator for SplitPaths<'a> {
-     type Item = PathBuf;
-     fn next(&mut self) -> Option<PathBuf> {
--        self.0
-+        self.inner.next()
-     }
- }
diff --git a/registry/native/patches/codex-source/README.md b/registry/native/patches/codex-source/README.md
deleted file mode 100644
index 8b1aee01d..000000000
--- a/registry/native/patches/codex-source/README.md
+++ /dev/null
@@ -1,271 +0,0 @@
-# Required codex SOURCE patches for wasm32-wasip1
-
-These are minimal, upstreamable additions to codex's own source where it has a
-hard `compile_error!`/missing-platform arm that NO toolchain patch can bypass
-(first-party compile-time gates). Each adds REAL wasi support (wasi has the API),
-not a hack. Applied to the vendored codex source during the secure-exec build.
-
-1. utils/git/src/platform.rs — add `#[cfg(target_os = "wasi")] create_symlink`
-   using `std::os::wasi::fs::symlink_path`, and widen the fallback
-   `compile_error!` cfg to `not(any(unix, windows, target_os = "wasi"))`.
-   wasi supports symlinks via the VM's `path_symlink` host call.
-
-2. rmcp-client/src/program_resolver.rs:26 — widen `#[cfg(unix)]` on `resolve()` to
-   `any(unix, target_os = "wasi")` (the unix impl returns the program unchanged,
-   correct for wasi).
-3. rmcp-client/src/utils.rs:91 — widen `#[cfg(unix)]` on `DEFAULT_ENV_VARS` to
-   `any(unix, target_os = "wasi")`.
-
-4. core/Cargo.toml — add `[target.'cfg(target_os = "wasi")'.dependencies] codex-utils-pty`
-   (it compiles via the portable-pty wasi backend). codex-network-proxy stays excluded
-   (real crate pulls the rama proxy-server stack + tokio "full"); satisfied by stub.
-
-## codex-core OWN-code remaining (69 errors, characterized — this session got dep graph to 0)
-The codex authors gated codex-network-proxy + codex-utils-pty OFF wasi as DEPS but did
-NOT gate the SOURCE usage — an incomplete author wasi port. Breakdown:
-- ~50: codex-core uses codex-network-proxy's FULL API (NetworkProxyConfig, NetworkDecision,
-  NetworkPolicyDecider/BlockedRequestObserver traits, NetworkProxyHandle, ConfigReloader,
-  build_config_state, host_and_port_from_network_addr, normalize_host,
-  validate_policy_against_constraints, NetworkProxyConstraints/Error, NetworkProtocol,
-  NetworkProxyState, NetworkProxyAuditMetadata, NetworkPolicyRequest, …). The real crate
-  can't compile on wasi (rama proxy stack); EXPAND the secure-exec codex-network-proxy
-  stub to this full API (no-op/inert — the VM kernel brokers network policy host-side).
-- ~6: codex_otel SessionTelemetry methods the stub lacks → expand codex-otel stub.
-- tokio::signal (no signals on wasi) → gate/stub codex-core's signal usage.
-- ~4 platform fns (ensure_owner_only_permissions, synthetic_exit_status,
-  system_config_toml_file, system_requirements_toml_file) → add wasi arms.
-- ~5 type mismatches (E0308) → case-by-case.
-Then codex-exec compiles → un-stub --session-turn (real codex-core + EE protocol) → matrix.
-
-## network-proxy / otel: MUST be in-place wasi-gating of the REAL codex crates
-Attempted an external stub crate (stubs/codex-network-proxy-wasi) — does NOT work:
-codex workspace crates (codex-utils-absolute-path, etc.) use `workspace = true`, which
-can't resolve from a path crate OUTSIDE codex's workspace. So the network-proxy/otel
-stubbing must be done IN-PLACE in codex-rs/{network-proxy,otel} (workspace members):
-- network-proxy/Cargo.toml: move `rama-*` + `tokio "full"` + rustls-provider to
-  `[target.'cfg(not(target_os="wasi"))'.dependencies]`; reduce wasi tokio features.
-- network-proxy/src: gate the 6 rama files (certs,http_proxy,mitm,responses,socks5,
-  upstream) to `#[cfg(not(wasi))]` and add `#[cfg(wasi)]` stub versions. The 6 stub
-  bodies are already written in stubs/codex-network-proxy-wasi/src/{http_proxy,socks5,
-  mitm,certs,responses,upstream}.rs (run_http_proxy/run_socks5 → Ok(()); MitmState → unit).
-  Only 5 symbols are referenced by pure code: http_proxy::run_http_proxy{,_with_std_listener},
-  socks5::run_socks5{,_with_std_listener}, mitm::MitmState. lib.rs mod decls stay (pure
-  modules config/network_policy/policy/proxy/reasons/runtime/state compile as-is).
-- core/Cargo.toml: add codex-network-proxy to `[target.'cfg(target_os="wasi")'.dependencies]`.
-- otel: same pattern — gate opentelemetry-otlp (grpc/tonic/reqwest exporter) off wasi,
-  stub the exporter init; keep the SessionTelemetry API (codex-core uses ~6 methods).
-This is completing the codex authors' OWN incomplete wasi port (they gated the DEPS off
-wasi but not the source). It is codex SOURCE modification, unavoidable (workspace constraint).
-
-## DONE this iteration: network-proxy in-place wasi-gating WORKS (codex-core 69→49)
-Applied to REAL codex-rs/network-proxy (workspace member, so workspace=true resolves):
-- network-proxy/Cargo.toml: rama-* + rustls-provider + tokio "full" → moved to
-  [target.'cfg(not(target_os="wasi"))'.dependencies]; base tokio reduced to
-  ["macros","rt","sync","time","io-util"].
-- network-proxy/src/lib.rs: the 6 rama modules (certs/http_proxy/mitm/responses/
-  socks5/upstream) cfg-selected: #[cfg(not(wasi))] real vs #[cfg(wasi)] #[path="*_wasi.rs"].
-- network-proxy/src/{certs,http_proxy,mitm,responses,socks5,upstream}_wasi.rs: stub bodies
-  (run_http_proxy/run_socks5 → Ok(()); MitmState → unit). VERIFIED: codex_network_proxy
-  refs now resolve (0 unresolved). Restored workspace redirect to path="network-proxy"
-  + re-added as member + codex-core wasi dep.
-
-## NEXT: otel in-place gating (same pattern; ~6 SessionTelemetry method errors remain)
-otel's opentelemetry-otlp exporter is spread across provider.rs(63)/client.rs(40)/
-otlp.rs(11)/config.rs(24). Gate those off wasi (cfg-select stub modules), keep
-events/session_telemetry.rs (the SessionTelemetry API codex-core calls:
-record_api_request, record_websocket_request, record_auth_recovery, log_sse_event,
-tool_decision, tool_result_with_tags, on_request — these use codex-protocol types, so
-MUST stay in-crate, not an external stub). Then: tokio::signal gate, ~4 platform fns
-(synthetic_exit_status, system_*_toml_file, ensure_owner_only_permissions), ~5 E0308.
-Then codex-exec → session-turn engine → matrix.
-
-## ✅ MILESTONE: codex-core AND codex-exec COMPILE for wasm32-wasip1
-All in-crate wasi-gating done (committed to the rivet codex fork, branch
-wasi-port-codex-core, commit 0c3f4eb73, 25 files): network-proxy + otel in-place
-gating, core platform fns (tokio::signal/synthetic_exit_status/toml/permissions),
-git symlink, rmcp-client resolver. Plus std ExitStatusExt patch (patches/
-0008-wasi-exit-status-ext.md). `cargo build -p codex-core -p codex-exec
---target wasm32-wasip1 -Z build-std` → Finished, EXIT 0.
-
-REMAINING to e2e: (1) the secure-exec command crate crates/commands/codex-exec
-un-stub --session-turn to delegate to the real codex-core/codex-exec engine and emit
-the EE newline-JSON protocol (start/text_delta/tool_call_update/permission_request/
-done) — the real functional integration; (2) build via `make -C registry/native wasm`
-(vendoring the codex fork + these patches); (3) wire the EE codex descriptor into the
-agent-os matrix + un-skip the codex session test.
-
-## FINAL PIECE: session-turn engine (replace codex-exec wasi_stub_main)
-codex-exec/src/lib.rs `wasi_stub_main()` is a placeholder ("WASI runtime support is
-under development"). codex-core compiles now, so replace it with the real engine
-(mirror lib_native.rs::run_exec_session, ~200-300 lines, in codex's workspace so it has
-codex-core access). The built codex-exec.wasm IS the secure-exec `codex-exec` command.
-
-PROTOCOL (newline-JSON, the EE adapter @rivet-ee/agent-os-codex-agent drives it):
-- stdin: first line {type:"start", cwd, mode, model, thought_level,
-  developer_instructions, history, prompt}; then {type:"permission_response", id, decision}.
-- stdout events to EMIT (one JSON/line):
-  - {type:"start"} on boot
-  - {type:"text_delta", delta}          ← EventMsg::AgentMessageDelta
-  - {type:"tool_call_update", tool_call_id, status, content}
-                                         ← EventMsg::ExecCommandBegin / ExecCommandEnd
-  - {type:"permission_request", tool_call_id, command}
-                                         ← EventMsg::ExecApprovalRequest /
-                                            ApplyPatchApprovalRequest; then read
-                                            permission_response from stdin → submit Op approval
-  - {type:"done"}                        ← EventMsg::TurnComplete
-  - {type:"error", message}             ← EventMsg::Error
-
-ENGINE (codex-core API, verified):
-1. parse start JSON → build codex_core Config (cwd/model/instructions; sandbox+network
-   proxy already gated off on wasi; approval policy = OnRequest so approvals surface).
-2. ConversationManager::new_conversation(config) → Codex (or new_conversation_with_auth).
-3. tokio current_thread runtime (rt feature works on wasi). seed history, then
-   submit(Op::UserInput{ items:[InputItem::Text{prompt}] }).
-4. loop next_event() → match EventMsg → emit per table above; on approval requests,
-   block reading stdin for permission_response → submit(Op::ExecApproval/PatchApproval).
-5. TurnComplete → emit done, exit 0.
-Then: `make -C registry/native wasm` (vendor the codex fork wasi-port-codex-core branch +
-all patches) → copies codex/codex-exec into software/codex/wasm → wire EE descriptor into
-the agent-os matrix (registry/agent/codex already exists) → un-skip the codex session test.
-
-### session-turn engine — Config is loadable (tractable)
-core/src/config/mod.rs has `Config::load_with_cli_overrides(cli_overrides, harness)`
-(811) — build Config from {model, cwd, approval_policy=OnRequest, ...} overrides rather
-than manual field construction. Op/InputItem: protocol.rs Op::UserInput{ items:
-Vec<UserInput> } (235). The Codex client (core/src/codex.rs submit/next_event) is created
-via the conversation/thread entry (codex_thread.rs / conversation flow) — confirm the
-exact constructor (ConversationManager or Codex::spawn) when implementing. Engine ≈
-200-300 lines in codex-exec wasi_stub_main; tokio current_thread runtime (works on wasi).
-
-## ✅ DONE: session-turn engine compiles (the final FUNCTIONAL piece)
-codex-exec/src/session_turn_wasi.rs (fork commit b86a5dfc0) drives the REAL codex-core
-agent and emits the EE protocol. `cargo build -p codex-exec --target wasm32-wasip1
--Z build-std` → EXIT 0. So codex-core + codex-exec + the session-turn engine ALL compile.
-
-## Remaining = build pipeline + ACP wiring + test run (integration, not functional)
-1. Produce optimized wasm artifacts from the fork (branch wasi-port-codex-core):
-   `cargo build -p codex-exec -p codex --release --target wasm32-wasip1 -Z build-std`
-   (+ wasm-opt) → copy to registry/software/codex/wasm/{codex-exec,codex}. NOTE: the
-   secure-exec `make wasm` currently builds the STUB crates/commands/{codex,codex-exec};
-   to ship the real engine, either build from the fork directly (above) or vendor the
-   fork into registry/native and point cmd-codex-exec at the real codex-exec.
-2. ACP adapter: the codex ACP bridge (spawns `codex-exec --session-turn`, newline-JSON↔ACP)
-   lives in EE (@rivet-ee/agent-os-codex-agent, agent-os-ee/packages/codex/src/adapter.ts).
-   The open-source registry/agent/codex only re-exports the wasm software package. To test
-   codex e2e in the agent-os matrix, either bring that adapter into agent-os or run the
-   EE codex-session.test.ts (describe.skipIf gated on wasm presence — un-skips once the
-   wasm artifacts above exist).
-3. e2e: with codex-exec.wasm present, the EE adapter spawns it in the VM (wasi-spawn/http
-   host bridges), the engine talks to the (mock) model via wasi-http, streams text_delta/
-   tool_call_update, emits done. Run codex-session.test.ts to verify.
-
-## ✅ ARTIFACT BUILT + SPAWNS IN VM; last blocker = 1 host import
-Built the real codex-exec from the fork (release, wasm-opt'd to 28MB) and placed it in
-registry/software/codex/wasm/{codex-exec,codex}. Smoke test (vm.exec("... | codex-exec
---session-turn")) shows it SPAWNS and attempts WebAssembly instantiation in the VM —
-44 imports, of which 43 (wasi_snapshot_preview1×30, host_net×6, host_process×5,
-host_fs×2) are provided by the secure-exec runtime. The ONLY unprovided one was
-`env.sqlite3_load_extension` (sqlx's sqlite). Fixed by defining a #[no_mangle] no-op
-stub in the engine (fork commit). Rebuild + re-place → instantiation should succeed.
-Then the smoke test ({"type":"start"} before the model call) and the full EE
-codex-session.test.ts (with the responses mock) verify the e2e turn.
-
-## ✅✅ VERIFIED: codex-exec RUNS IN THE VM and emits the EE protocol
-Smoke test (packages/core/tests/codex-smoke.test.ts) PASSES:
-  vm.exec("printf '<start json>' | codex-exec --session-turn")  →  stdout: {"type":"start"}
-The real codex agent (codex-rs → wasip1, session-turn engine driving codex-core) BOOTS
-in the secure-exec VM, instantiates all 44 imports (after adding host
-path_filestat_set_times), runs the engine, and emits the EE protocol's start event.
-(exit 1 only because the smoke test provides no model mock/auth, so the turn errors
-AFTER start — proving the boot + protocol path works.)
-
-FULL turn (text_delta→done): run the EE codex-session.test.ts with startResponsesMock
-(OpenAI Responses mock) + OPENAI_API_KEY/base_url pointed at it. That exercises a
-complete agent turn. The boot+protocol path is now VERIFIED end-to-end in the VM.
-
-## ✅✅✅ codex runs the FULL session event loop in the VM
-DBG markers (engine) confirm the real codex agent runs the entire lifecycle in the VM:
-load config → AuthManager::shared → ThreadManager::new → start_thread → submit
-Op::UserInput → LIVE next_event loop (received a Warning event, processing). 8 runtime
-blockers fixed and committed (host imports, secure-exec host wasi shim
-path_filestat_set_times, tokio fs-asyncify + spawn_blocking inline on wasi, std
-split_paths, now_local→UTC). FINAL GAP: the model HTTP POST to the OpenAI Responses
-mock does not reach it (mock requests=0, then hang). codex honors OPENAI_BASE_URL
-(deprecated warning), so base_url=mock; the codex-exec wasi-http/host_net connect to the
-HOST loopback mock blocks. Resolve: confirm host_net egress to the test's 127.0.0.1:PORT
-is permitted for wasi commands (loopbackExemptPorts is for the kernel adapter; host_net
-may need its own allow), and that the Responses path matches (/v1/responses). Then the
-turn streams text_delta→done. The agent itself runs e2e in the VM today.
-
-## CORRECTED final diagnosis (via sidecar instrumentation): NOT a network issue
-Added file-logging to the sidecar net.connect handler ENTRY + require_network_access +
-resolve_tcp_connect_addr, ran the full-turn test. RESULT: the log stays EMPTY — codex's
-connect NEVER reaches the sidecar. So codex is NOT making the model HTTP call; it HANGS
-in its OWN agent loop after the first event (a config Warning), before any network call.
-Root cause: codex's agent loop uses tokio concurrency that assumes OS threads
-(spawn_blocking on a dedicated blocking pool, background tasks). wasm32-wasip1 is
-single-threaded (no OS threads); the spawn_blocking-as-current-thread-task workaround
-(0003) can DEADLOCK — a blocking task occupies the only thread while waiting on another
-task that can't run. This is an architectural mismatch (codex's threading model vs
-single-thread wasi), the genuinely hard core of running codex on wasi. Resolving it needs
-codex-internal tracing to find the exact blocking construct and make it cooperative, or a
-different runtime strategy. (Sidecar instrumentation reverted; secure-exec is clean.)
-STATUS: codex compiles + runs the full session lifecycle in the VM (boot → EE protocol →
-config → auth → ThreadManager → start_thread → submit → live event loop) but hangs in the
-agent loop before the model call on the single-threaded runtime.
-
-## ✅✅✅ RESOLVED: codex completes a full model turn end-to-end on wasm32-wasip1
-
-The "agent loop hangs" diagnosis above was *close but mislabeled* — it is NOT a tokio
-concurrency/threading-model mismatch. The current-thread runtime drives codex's spawned
-submission_loop correctly. The real root cause, found by instrumenting tokio's
-current-thread scheduler (Handle::spawn / schedule / the block_on for-loop / per-task
-spawn-location), was a **single blocking task that pins the only executor thread**:
-
-- `codex-core` spawns a shell-snapshot task (`core/src/shell_snapshot.rs`) during session
-  init that launches a **shell subprocess** to capture the environment and blocks on its
-  exit. On wasm32-wasip1 the VM's child-process bridge cannot deliver that wait on the
-  single-threaded runtime (the "could not retrieve pid for child process" warnings), so the
-  task blocks the executor thread **forever**. The scheduler then never drains the rest of
-  the local run queue — including the submission_loop — so the agent turn never advances and
-  no model HTTP call is ever made. (Hence the sidecar net.connect handler stayed empty.)
-
-Fixes (all in the codex fork, branch `wasi-port-codex-core`, all `#[cfg(target_os="wasi")]`):
-1. `core/src/shell_snapshot.rs` — skip the snapshot on wasi (send `None`, return). A shell
-   environment snapshot is meaningless in the VM and the subprocess wait deadlocks the runtime.
-2. `core/src/state_db.rs` — `init` / `get_state_db` / `open_if_present` return `None` on wasi.
-   sqlx-sqlite's blocking worker can't run on the thread-less runtime (open fails ENOTSUP,
-   os error 58); skipping it also avoids perturbing session init.
-3. `exec/src/session_turn_wasi.rs` — runtime is `new_current_thread().enable_time()` (no I/O
-   reactor needed; network I/O is host-brokered/synchronous) and a plain
-   `block_on(session_turn())`. The earlier yield-pump / `global_queue_interval(1)`
-   experiments were chasing the wrong theory and are NOT needed once the blocking task is gone.
-
-Test (`packages/core/tests/codex-fullturn.test.ts`): codex-exec --session-turn runs the real
-codex-core agent in the VM, calls the mock OpenAI Responses API over wasi-http, streams the
-SSE response, and emits `{"type":"start"}` … `{"type":"done"}` on a clean protocol channel
-(stdout carries ONLY the EE protocol JSON). The mock (`tests/helpers/openai-responses-mock.ts`)
-emits a faithful Responses SSE stream (`response.created` → `response.output_text.delta` →
-`response.output_item.done` → `response.completed`); `OPENAI_BASE_URL` includes `/v1` to match
-codex's URL convention (`{base}/responses`).
-
-Build (reproducible): the wasi build uses `-Z build-std` with a patched rust-src sysroot.
-Because `-Z build-std` injects `panic_unwind` via `--extern` while the wasm target needs
-`panic_abort` resolved from the sysroot, the build:
-  - stashes the prebuilt `wasm32-wasip1` `*.rlib`/`*.rmeta` out of the toolchain lib dir
-    (keeping `self-contained/` crt) so build-std's own `libcore` is the only one (avoids the
-    `E0152 duplicate lang item core` at the bin link), and
-  - copies build-std's freshly-built `libpanic_abort-*.rlib` into that sysroot lib dir (so the
-    bin's `-Cpanic=abort` resolves a `panic_abort` that is ABI-matched to build-std's core),
-  - builds with `--config 'profile.release.panic="abort"'`.
-See `/tmp/relink-codex.sh` for the exact invocation. (This sysroot massaging should be folded
-into the secure-exec wasm toolchain so it is not a manual step.)
-
-KNOWN REMAINING (non-blocking; turn works e2e):
-- Rollout recorder logs `failed to queue rollout items: channel closed` (the writer task exits
-  early on wasi — likely the git-info subprocess in `write_session_meta`, same blocking-child
-  class as shell_snapshot). Non-fatal: the turn completes; agent-os resume uses adapter-passed
-  history, not codex's on-disk rollout. Gating git-info on wasi would silence it.
-- The session-turn engine reads `prompt` but not `history`; multi-turn resume via the EE ACP
-  adapter needs history replay wired in.
-- ACP-level integration into the unified agent-matrix lives in the EE codex adapter.
diff --git a/registry/native/patches/codex-source/build-codex-wasip1.sh b/registry/native/patches/codex-source/build-codex-wasip1.sh
deleted file mode 100755
index 35a6e39cd..000000000
--- a/registry/native/patches/codex-source/build-codex-wasip1.sh
+++ /dev/null
@@ -1,83 +0,0 @@
-#!/bin/bash
-# build-codex-wasip1.sh — reproduce the codex-core wasm32-wasip1 build frontier.
-#
-# Captures every fix discovered while driving `cargo build -p codex-core
-# --target wasm32-wasip1` to its current frontier. Run from the codex-rs checkout.
-# This is the DIAGNOSTIC harness (builds codex IN its own workspace to find the
-# frontier). The SHIPPING build vendors codex into secure-exec and swaps the same
-# crates via [patch.crates-io]; the fixes are identical.
-#
-# Usage: CODEX=/path/to/codex-rs SECEXEC=/path/to/secure-exec ./build-codex-wasip1.sh
-set -uo pipefail
-CODEX="${CODEX:-/home/nathan/agent-e2e/codex-rs/codex-rs}"
-SECEXEC="${SECEXEC:-/home/nathan/agent-e2e/secure-exec}"
-STUBS="$SECEXEC/registry/native/stubs"
-WSDK="$SECEXEC/registry/native/c/vendor/wasi-sdk"
-TOOLCHAIN="nightly-2026-03-01"
-CARGO_CACHE="$(ls -d $HOME/.cargo/registry/src/index.crates.io-*/ | head -1)"
-
-echo "== 1. C toolchain (wasi-sdk clang) for libz-sys/ring/etc. =="
-export CC_wasm32_wasip1="$WSDK/bin/clang"
-export AR_wasm32_wasip1="$WSDK/bin/llvm-ar"
-export CFLAGS_wasm32_wasip1="--sysroot=$WSDK/share/wasi-sysroot -D_WASI_EMULATED_SIGNAL -D_WASI_EMULATED_PTHREAD -D_WASI_EMULATED_MMAN -D_WASI_EMULATED_PROCESS_CLOCKS"
-
-echo "== 2. crate-cache patches (become patches/crates/* artifacts when vendored) =="
-# path-dedot + path-absolutize: route target_family=wasm to the unix-paths impl.
-for c in path-dedot-3.1.1 path-absolutize-3.1.1; do
-  for f in "$CARGO_CACHE$c/src/"*.rs; do
-    [ -f "$f" ] && sed -i 's/all(target_family = "wasm", feature = "use_unix_paths_on_wasm")/target_family = "wasm"/g' "$f"
-  done
-done
-# rustls-native-certs: add a wasi arm returning empty certs (TLS is host-brokered).
-RNC="${CARGO_CACHE}rustls-native-certs-0.8.3/src/lib.rs"
-if [ -f "$RNC" ] && ! grep -q 'target_os = "wasi"' "$RNC"; then
-  python3 - "$RNC" <<'PY'
-import sys
-p=sys.argv[1]; s=open(p).read()
-a='#[cfg(target_os = "macos")]\nuse macos as platform;\n'
-s=s.replace(a, a+'\n#[cfg(target_os = "wasi")]\nmod platform {\n    use super::CertificateResult;\n    pub fn load_native_certs() -> CertificateResult { CertificateResult::default() }\n}\n',1)
-open(p,"w").write(s)
-PY
-fi
-# TODO(next frontier): fd-lock-4.0.4 — its sys/unsupported module is broken on wasi
-# (`pub use unsupported;` name collision; read/write/rw guards `use std::os::unix`).
-# Needs a wasi sys arm (advisory locks are no-ops in the single-process VM).
-
-echo "== 3. codex workspace patches (Cargo.toml) — build config, not agent logic =="
-# Applied by hand in this session (see git diff of codex-rs/Cargo.toml):
-#  - [patch.crates-io]: reqwest = stubs/reqwest-shim, tokio = /tmp/tokio-dev (1.52.3),
-#                       ctrlc = stubs/ctrlc
-#  - codex-network-proxy / codex-otel workspace deps repointed to stubs/*
-#  - removed "network-proxy","otel" from [workspace].members (collision)
-#  - zip = { default-features=false, features=["deflate","time"] }  (drops xz/lzma)
-#  - cargo update -p tokio --precise 1.52.3  (unify onto the patched tokio)
-
-echo "== 4. codex SOURCE patch (unavoidable compile_error) =="
-#  - utils/git/src/platform.rs: add #[cfg(target_os="wasi")] create_symlink stub +
-#    widen the fallback compile_error cfg. (see patches/codex-source/README.md)
-
-echo "== 5. build =="
-cd "$CODEX"
-RUSTFLAGS="--cfg tokio_unstable" cargo +$TOOLCHAIN build -p codex-core \
-  --target wasm32-wasip1 -Z build-std=std,panic_abort "$@"
-fd-lock-4.0.4: sys/mod.rs unsupported branch (pub use unsupported::* + AsOpenFile=std::os::fd::AsFd); unsupported guards std::os::unix::io -> std::os::fd. Advisory locks are no-ops in single-process VM.
-
-# == portable-pty subtree (codex-utils-pty → portable-pty → filedescriptor) ==
-# PTY is NOT on the headless session-turn path (compile-only). Applied:
-#  - portable-pty-0.9.0: add src/wasi.rs (WasiPtySystem/Master/Slave/Child stubs
-#    impl'ing PtySystem/MasterPty/SlavePty/Child/ChildKiller); lib.rs gate
-#    `pub mod serial` to not(wasi) + add `#[cfg(target_os="wasi")] pub mod wasi` +
-#    `#[cfg(target_os="wasi")] pub type NativePtySystem = wasi::WasiPtySystem`;
-#    Cargo.toml: make serial2 a `cfg(not(target_os="wasi"))` target dep.
-#  - reqwest shim expanded: Client::{put,patch,delete,head,execute}, Request type +
-#    TryFrom<http::Request<Vec<u8>>>, RequestBuilder::{bearer_auth,basic_auth,query,
-#    form}, IntoUrl for &String/url::Url, all reqwest 0.12 features as no-op flags,
-#    deps url/base64/serde_urlencoded. reqwest unified to 0.12.28 (kills the
-#    wasm-bindgen-futures browser-backend leak from fragmented 0.12.27).
-#  - tokio /tmp/tokio-dev stream.rs: add #[cfg(target_os="wasi")] TcpStream::connect
-#    stub (compile-only; tungstenite references it, runtime uses HTTP fallback).
-# TODO(final dep wall): filedescriptor-0.8.3 has no wasi arm (RawFileDescriptor/
-#   SocketDescriptor/HandleType undefined on wasi). Either add a filedescriptor wasi
-#   module (RawFileDescriptor=std::os::fd::RawFd + minimal FileDescriptor/OwnedHandle)
-#   OR replace portable-pty wholesale with a [patch.crates-io] stub (the src/wasi.rs
-#   impls already written are the basis). After that, codex-core's OWN code compiles.
diff --git a/registry/native/patches/copy.manifest b/registry/native/patches/copy.manifest
deleted file mode 100644
index c34280640..000000000
--- a/registry/native/patches/copy.manifest
+++ /dev/null
@@ -1,11 +0,0 @@
-# Companion source files for std patches (installed by scripts/patch-std.sh).
-# Format: <src-relative-to-this-patches-dir> <dest-relative-to-std-src-root>
-#
-# A `patch`/`diff` cannot reliably create a brand-new std source file from a
-# `/dev/null` hunk (it is silently skipped across patch versions), so the actual
-# module body for any `pub mod <name>;` a patch declares is installed here.
-#
-# os/wasi/process.rs — public wasi child-pipe fd traits (AsRawFd/IntoRawFd/AsFd/
-# From<_> for OwnedFd on ChildStdin/out/err) + ExitStatusExt::from_raw, wired via
-# `pub mod process;` from 0007-wasi-childpipe-fd.patch. Mirrors os/unix/process.rs.
-std/os/wasi/process.rs library/std/src/os/wasi/process.rs
diff --git a/registry/native/patches/crates/.gitkeep b/registry/native/patches/crates/.gitkeep
deleted file mode 100644
index e69de29bb..000000000
diff --git a/registry/native/patches/crates/brush-core/0001-wasi-command-substitution.patch b/registry/native/patches/crates/brush-core/0001-wasi-command-substitution.patch
deleted file mode 100644
index 2c182d688..000000000
--- a/registry/native/patches/crates/brush-core/0001-wasi-command-substitution.patch
+++ /dev/null
@@ -1,51 +0,0 @@
-a/src/commands.rs	2006-07-23 18:21:28.000000000 -0700
-+++ b/src/commands.rs	2026-03-16 12:24:49.697003581 -0700
-@@ -554,24 +554,31 @@
-     let (reader, writer) = std::io::pipe()?;
-     params.set_fd(OpenFiles::STDOUT_FD, writer.into());
- 
--    // Start the execution of the command, but don't wait for it to
--    // complete. In case the command generates lots of output, we
--    // need to start reading in parallel so the command doesn't block
--    // when the pipe's buffer fills up. We pass ownership of the
--    // subshell and params to run_substitution_command; we must
--    // ensure that they're both dropped by the time this call
--    // returns (so they're not holding onto the write end of the pipe).
--    let cmd_join_handle = tokio::task::spawn_blocking(move || {
--        let rt = tokio::runtime::Handle::current();
--        rt.block_on(run_substitution_command(subshell, params, s))
--    });
-+    // On WASI, spawn_blocking is not available (no thread support).
-+    // Run the command synchronously first, then read from the pipe.
-+    // This works because WASI pipe buffers are growable (no deadlock risk).
-+    #[cfg(target_os = "wasi")]
-+    let (cmd_result, output_str) = {
-+        let run_result = run_substitution_command(subshell, params, s).await;
-+        let cmd_result = run_result?;
-+        let output_str = std::io::read_to_string(reader)?;
-+        (cmd_result, output_str)
-+    };
- 
--    // Extract output.
--    let output_str = std::io::read_to_string(reader)?;
--
--    // Now observe the command's completion.
--    let run_result = cmd_join_handle.await?;
--    let cmd_result = run_result?;
-+    // On platforms with thread support, run the command in a blocking
-+    // thread so we can read from the pipe in parallel (avoiding deadlock
-+    // if the pipe buffer fills up).
-+    #[cfg(not(target_os = "wasi"))]
-+    let (cmd_result, output_str) = {
-+        let cmd_join_handle = tokio::task::spawn_blocking(move || {
-+            let rt = tokio::runtime::Handle::current();
-+            rt.block_on(run_substitution_command(subshell, params, s))
-+        });
-+        let output_str = std::io::read_to_string(reader)?;
-+        let run_result = cmd_join_handle.await?;
-+        let cmd_result = run_result?;
-+        (cmd_result, output_str)
-+    };
- 
-     // Store the status.
-     *shell.last_exit_status_mut() = cmd_result.exit_code.into();
diff --git a/registry/native/patches/crates/brush-core/0003-wasi-path-resolution.patch b/registry/native/patches/crates/brush-core/0003-wasi-path-resolution.patch
deleted file mode 100644
index 174efe39c..000000000
--- a/registry/native/patches/crates/brush-core/0003-wasi-path-resolution.patch
+++ /dev/null
@@ -1,11 +0,0 @@
---- a/src/shell.rs
-+++ b/src/shell.rs
-@@ -1324,7 +1324,7 @@
-     ) -> Option<PathBuf> {
-         for dir_str in self.env_str("PATH").unwrap_or_default().split(':') {
-             let candidate_path = Path::new(dir_str).join(candidate_name.as_ref());
--            if candidate_path.executable() {
-+            if candidate_path.is_file() && candidate_path.executable() {
-                 return Some(candidate_path);
-             }
-         }
diff --git a/registry/native/patches/crates/brush-interactive/0001-wasi-support.patch b/registry/native/patches/crates/brush-interactive/0001-wasi-support.patch
deleted file mode 100644
index bd64fe387..000000000
--- a/registry/native/patches/crates/brush-interactive/0001-wasi-support.patch
+++ /dev/null
@@ -1,141 +0,0 @@
-diff -ruN '--exclude=*.orig' a/src/basic/basic_shell.rs b/src/basic/basic_shell.rs
---- a/src/basic/basic_shell.rs	2026-06-27 14:11:52.527433629 -0700
-+++ b/src/basic/basic_shell.rs	2026-06-27 14:11:52.527433629 -0700
-@@ -104,6 +104,25 @@
-         line: &str,
-         cursor: usize,
-     ) -> Result<brush_core::completion::Completions, ShellError> {
-+        #[cfg(target_os = "wasi")]
-+        {
-+            // Single-threaded wasi has no tokio runtime to block_on. The
-+            // completion future only does synchronous VFS walks and
-+            // uncontended lock acquisition, so drive it inline with a
-+            // noop-waker poll loop (bounded: a future that parks on a waker
-+            // can never be woken on one thread — bail to no completions).
-+            let mut future = std::pin::pin!(self.generate_completions_async(line, cursor));
-+            let mut context = std::task::Context::from_waker(std::task::Waker::noop());
-+            for _ in 0..100_000 {
-+                match std::future::Future::poll(future.as_mut(), &mut context) {
-+                    std::task::Poll::Ready(result) => return result,
-+                    std::task::Poll::Pending => std::hint::spin_loop(),
-+                }
-+            }
-+            return Ok(brush_core::completion::Completions::default());
-+        }
-+
-+        #[cfg(not(target_os = "wasi"))]
-         tokio::task::block_in_place(|| {
-             tokio::runtime::Handle::current()
-                 .block_on(self.generate_completions_async(line, cursor))
-diff -ruN '--exclude=*.orig' a/src/completion.rs b/src/completion.rs
---- a/src/completion.rs	2026-06-27 14:11:52.527433629 -0700
-+++ b/src/completion.rs	2026-06-27 14:11:52.527433629 -0700
-@@ -17,6 +17,10 @@
-     tokio::pin!(completion_future);
- 
-     // Wait for the completions to come back or interruption, whichever happens first.
-+    #[cfg(target_os = "wasi")]
-+    let result = completion_future.await;
-+
-+    #[cfg(not(target_os = "wasi"))]
-     let result = tokio::select! {
-         result = &mut completion_future => {
-             result
-diff -ruN '--exclude=*.orig' a/src/reedline/completer.rs b/src/reedline/completer.rs
---- a/src/reedline/completer.rs	2026-06-27 14:11:52.527433629 -0700
-+++ b/src/reedline/completer.rs	2026-06-27 14:11:52.527433629 -0700
-@@ -10,6 +10,25 @@
- 
- impl reedline::Completer for ReedlineCompleter {
-     fn complete(&mut self, line: &str, pos: usize) -> Vec<reedline::Suggestion> {
-+        #[cfg(target_os = "wasi")]
-+        {
-+            // Single-threaded wasi has no tokio runtime to block_on. The
-+            // completion future only does synchronous VFS walks and
-+            // uncontended lock acquisition, so drive it inline with a
-+            // noop-waker poll loop (bounded: a future that parks on a waker
-+            // can never be woken on one thread — bail to no completions).
-+            let mut future = std::pin::pin!(self.complete_async(line, pos));
-+            let mut context = std::task::Context::from_waker(std::task::Waker::noop());
-+            for _ in 0..100_000 {
-+                match std::future::Future::poll(future.as_mut(), &mut context) {
-+                    std::task::Poll::Ready(result) => return result,
-+                    std::task::Poll::Pending => std::hint::spin_loop(),
-+                }
-+            }
-+            return Vec::new();
-+        }
-+
-+        #[cfg(not(target_os = "wasi"))]
-         tokio::task::block_in_place(|| {
-             tokio::runtime::Handle::current().block_on(self.complete_async(line, pos))
-         })
-diff -ruN '--exclude=*.orig' a/src/reedline/edit_mode.rs b/src/reedline/edit_mode.rs
---- a/src/reedline/edit_mode.rs	2026-06-27 14:11:52.527433629 -0700
-+++ b/src/reedline/edit_mode.rs	2026-06-27 14:11:52.527433629 -0700
-@@ -31,6 +31,10 @@
- 
- impl reedline::EditMode for MutableEditMode {
-     fn parse_event(&mut self, event: reedline::ReedlineRawEvent) -> reedline::ReedlineEvent {
-+        #[cfg(target_os = "wasi")]
-+        let mut inner = self.inner.try_lock().expect("edit mode lock is not reentrant");
-+
-+        #[cfg(not(target_os = "wasi"))]
-         let mut inner = tokio::task::block_in_place(|| {
-             tokio::runtime::Handle::current().block_on(self.inner.lock())
-         });
-@@ -39,6 +43,10 @@
-     }
- 
-     fn edit_mode(&self) -> reedline::PromptEditMode {
-+        #[cfg(target_os = "wasi")]
-+        let inner = self.inner.try_lock().expect("edit mode lock is not reentrant");
-+
-+        #[cfg(not(target_os = "wasi"))]
-         let inner = tokio::task::block_in_place(|| {
-             tokio::runtime::Handle::current().block_on(self.inner.lock())
-         });
-diff -ruN '--exclude=*.orig' a/src/reedline/highlighter.rs b/src/reedline/highlighter.rs
---- a/src/reedline/highlighter.rs	2026-06-27 14:11:52.527433629 -0700
-+++ b/src/reedline/highlighter.rs	2026-06-27 14:11:52.527433629 -0700
-@@ -78,6 +78,10 @@
- impl reedline::Highlighter for ReedlineHighlighter {
-     #[expect(clippy::significant_drop_tightening)]
-     fn highlight(&self, line: &str, cursor: usize) -> reedline::StyledText {
-+        #[cfg(target_os = "wasi")]
-+        let shell = self.shell.try_lock().expect("shell lock is not reentrant");
-+
-+        #[cfg(not(target_os = "wasi"))]
-         let shell = tokio::task::block_in_place(|| {
-             tokio::runtime::Handle::current().block_on(self.shell.lock())
-         });
-diff -ruN '--exclude=*.orig' a/src/reedline/history.rs b/src/reedline/history.rs
---- a/src/reedline/history.rs	2026-06-27 14:11:52.527433629 -0700
-+++ b/src/reedline/history.rs	2026-06-27 14:11:52.527433629 -0700
-@@ -6,6 +6,12 @@
- 
- impl ReedlineHistory {
-     fn lock_shell(&self) -> tokio::sync::MutexGuard<'_, brush_core::Shell> {
-+        #[cfg(target_os = "wasi")]
-+        {
-+            return self.shell.try_lock().expect("shell lock is not reentrant");
-+        }
-+
-+        #[cfg(not(target_os = "wasi"))]
-         tokio::task::block_in_place(|| {
-             tokio::runtime::Handle::current().block_on(self.shell.lock())
-         })
-diff -ruN '--exclude=*.orig' a/src/reedline/validator.rs b/src/reedline/validator.rs
---- a/src/reedline/validator.rs	2026-06-27 14:11:52.527433629 -0700
-+++ b/src/reedline/validator.rs	2026-06-27 14:11:52.527433629 -0700
-@@ -6,6 +6,10 @@
- 
- impl reedline::Validator for ReedlineValidator {
-     fn validate(&self, line: &str) -> reedline::ValidationResult {
-+        #[cfg(target_os = "wasi")]
-+        let shell = self.shell.try_lock().expect("shell lock is not reentrant");
-+
-+        #[cfg(not(target_os = "wasi"))]
-         let shell = tokio::task::block_in_place(|| {
-             tokio::runtime::Handle::current().block_on(self.shell.lock())
-         });
diff --git a/registry/native/patches/crates/brush-interactive/0002-wasi-tokio-dep.patch b/registry/native/patches/crates/brush-interactive/0002-wasi-tokio-dep.patch
deleted file mode 100644
index af5bc43c4..000000000
--- a/registry/native/patches/crates/brush-interactive/0002-wasi-tokio-dep.patch
+++ /dev/null
@@ -1,20 +0,0 @@
---- a/Cargo.toml	2026-07-01 21:43:37.964197973 -0700
-+++ b/Cargo.toml	2026-07-01 21:43:37.964197973 -0700
-@@ -91,6 +91,17 @@
-     "signal",
- ]
- 
-+# wasi: the reedline/completion modules use tokio's runtime-agnostic pieces
-+# (sync::Mutex, pin!) unconditionally; upstream only declares tokio for
-+# unix/windows because it never compiled reedline for wasi. `signal` is
-+# excluded (not available on wasi); `sync` + `macros` are all that's used.
-+[target."cfg(target_os = \"wasi\")".dependencies.tokio]
-+version = "1.48.0"
-+features = [
-+    "macros",
-+    "sync",
-+]
-+
- [target."cfg(unix)".dependencies.nix]
- version = "0.30.1"
- features = ["term"]
diff --git a/registry/native/patches/crates/brush-shell/0001-wasi-support.patch b/registry/native/patches/crates/brush-shell/0001-wasi-support.patch
deleted file mode 100644
index 1fe40915f..000000000
--- a/registry/native/patches/crates/brush-shell/0001-wasi-support.patch
+++ /dev/null
@@ -1,48 +0,0 @@
-diff -ruN '--exclude=*.orig' a/src/entry.rs b/src/entry.rs
---- a/src/entry.rs	2026-06-27 14:11:52.543433624 -0700
-+++ b/src/entry.rs	2026-06-27 14:11:52.551433620 -0700
-@@ -354,7 +354,15 @@
-             InputBackend::Minimal
-         }
-     }
--    #[cfg(not(any(unix, windows)))]
-+    #[cfg(all(not(any(unix, windows)), target_os = "wasi"))]
-+    {
-+        if std::io::stdin().is_terminal() {
-+            InputBackend::Reedline
-+        } else {
-+            InputBackend::Minimal
-+        }
-+    }
-+    #[cfg(all(not(any(unix, windows)), not(target_os = "wasi")))]
-     {
-         InputBackend::Minimal
-     }
-diff -ruN '--exclude=*.orig' a/src/shell_factory.rs b/src/shell_factory.rs
---- a/src/shell_factory.rs	2026-06-27 14:11:52.543433624 -0700
-+++ b/src/shell_factory.rs	2026-06-27 14:11:52.551433620 -0700
-@@ -50,20 +50,20 @@
- 
- #[allow(unused_variables, reason = "options are not used on all platforms")]
- impl ShellFactory for ReedlineShellFactory {
--    #[cfg(all(feature = "reedline", any(unix, windows)))]
-+    #[cfg(all(feature = "reedline", any(unix, windows, target_os = "wasi")))]
-     type ShellType = brush_interactive::ReedlineShell;
--    #[cfg(any(not(feature = "reedline"), not(any(unix, windows))))]
-+    #[cfg(any(not(feature = "reedline"), not(any(unix, windows, target_os = "wasi"))))]
-     type ShellType = StubShell;
- 
-     async fn create(
-         &self,
-         options: brush_interactive::Options,
-     ) -> Result<Self::ShellType, brush_interactive::ShellError> {
--        #[cfg(all(feature = "reedline", any(unix, windows)))]
-+        #[cfg(all(feature = "reedline", any(unix, windows, target_os = "wasi")))]
-         {
-             brush_interactive::ReedlineShell::new(options).await
-         }
--        #[cfg(any(not(feature = "reedline"), not(any(unix, windows))))]
-+        #[cfg(any(not(feature = "reedline"), not(any(unix, windows, target_os = "wasi"))))]
-         {
-             Err(brush_interactive::ShellError::InputBackendNotSupported)
-         }
diff --git a/registry/native/patches/crates/crossterm-0.28.1/0001-wasi-support.patch b/registry/native/patches/crates/crossterm-0.28.1/0001-wasi-support.patch
deleted file mode 100644
index d8f0a4e6e..000000000
--- a/registry/native/patches/crates/crossterm-0.28.1/0001-wasi-support.patch
+++ /dev/null
@@ -1,460 +0,0 @@
-diff -ruN '--exclude=*.orig' a/src/cursor/sys/wasi.rs b/src/cursor/sys/wasi.rs
---- a/src/cursor/sys/wasi.rs	1969-12-31 16:00:00.000000000 -0800
-+++ b/src/cursor/sys/wasi.rs	2026-06-27 12:35:25.293090904 -0700
-@@ -0,0 +1,62 @@
-+//! WASI-specific cursor functions.
-+//!
-+//! The WasmVM PTY answers a DSR (`ESC[6n`) request with a real CPR reply, so
-+//! the cursor position is read exactly like the Unix backend instead of being
-+//! stubbed to `(0, 0)`. A correct cursor row is required by line editors such
-+//! as reedline: it anchors the prompt's `prompt_start_row`, and a wrong anchor
-+//! makes every repaint `MoveTo(0, 0)` + `Clear(FromCursorDown)`, wiping the
-+//! whole screen on each keystroke and after every accepted line.
-+
-+use std::io::{self, Error, ErrorKind, Write};
-+use std::time::Duration;
-+
-+use crate::event::{filter::CursorPositionFilter, poll_internal, read_internal, InternalEvent};
-+use crate::terminal::sys::is_raw_mode_enabled;
-+
-+/// Returns the cursor position (column, row).
-+///
-+/// The top left cell is represented as `(0, 0)`.
-+pub fn position() -> io::Result<(u16, u16)> {
-+    if is_raw_mode_enabled() {
-+        read_position_raw()
-+    } else {
-+        read_position()
-+    }
-+}
-+
-+fn read_position() -> io::Result<(u16, u16)> {
-+    use crate::terminal::{disable_raw_mode, enable_raw_mode};
-+
-+    enable_raw_mode()?;
-+    let pos = read_position_raw();
-+    disable_raw_mode()?;
-+    pos
-+}
-+
-+fn read_position_raw() -> io::Result<(u16, u16)> {
-+    // Request the cursor position with `ESC [ 6 n`. The reply (`ESC [ row ; col R`)
-+    // arrives on stdin and is decoded by the shared event parser as
-+    // `InternalEvent::CursorPosition`, exactly as on Unix.
-+    let mut stdout = io::stdout();
-+    stdout.write_all(b"\x1b[6n")?;
-+    stdout.flush()?;
-+
-+    loop {
-+        match poll_internal(Some(Duration::from_millis(2000)), &CursorPositionFilter) {
-+            Ok(true) => {
-+                if let Ok(InternalEvent::CursorPosition(x, y)) =
-+                    read_internal(&CursorPositionFilter)
-+                {
-+                    return Ok((x, y));
-+                }
-+            }
-+            Ok(false) => {
-+                return Err(Error::new(
-+                    ErrorKind::Other,
-+                    "The cursor position could not be read within a normal duration",
-+                ));
-+            }
-+            Err(_) => {}
-+        }
-+    }
-+}
-diff -ruN '--exclude=*.orig' a/src/cursor/sys.rs b/src/cursor/sys.rs
---- a/src/cursor/sys.rs	2026-06-27 12:35:25.289090903 -0700
-+++ b/src/cursor/sys.rs	2026-06-27 12:35:25.293090904 -0700
-@@ -6,6 +6,9 @@
- #[cfg(windows)]
- #[cfg(feature = "events")]
- pub use self::windows::position;
-+#[cfg(target_os = "wasi")]
-+#[cfg(feature = "events")]
-+pub use self::wasi::position;
- #[cfg(windows)]
- pub(crate) use self::windows::{
-     move_down, move_left, move_right, move_to, move_to_column, move_to_next_line,
-@@ -18,3 +21,7 @@
- #[cfg(unix)]
- #[cfg(feature = "events")]
- pub(crate) mod unix;
-+
-+#[cfg(target_os = "wasi")]
-+#[cfg(feature = "events")]
-+pub(crate) mod wasi;
-diff -ruN '--exclude=*.orig' a/src/event/filter.rs b/src/event/filter.rs
---- a/src/event/filter.rs	2026-06-27 12:35:25.289090903 -0700
-+++ b/src/event/filter.rs	2026-06-27 12:35:25.293090904 -0700
-@@ -6,11 +6,11 @@
-     fn eval(&self, event: &InternalEvent) -> bool;
- }
- 
--#[cfg(unix)]
-+#[cfg(any(unix, target_os = "wasi"))]
- #[derive(Debug, Clone)]
- pub(crate) struct CursorPositionFilter;
- 
--#[cfg(unix)]
-+#[cfg(any(unix, target_os = "wasi"))]
- impl Filter for CursorPositionFilter {
-     fn eval(&self, event: &InternalEvent) -> bool {
-         matches!(*event, InternalEvent::CursorPosition(_, _))
-@@ -54,6 +54,11 @@
-     fn eval(&self, event: &InternalEvent) -> bool {
-         matches!(*event, InternalEvent::Event(_))
-     }
-+
-+    #[cfg(target_os = "wasi")]
-+    fn eval(&self, event: &InternalEvent) -> bool {
-+        matches!(*event, InternalEvent::Event(_))
-+    }
- 
-     #[cfg(windows)]
-     fn eval(&self, _: &InternalEvent) -> bool {
-diff -ruN '--exclude=*.orig' a/src/event/read.rs b/src/event/read.rs
---- a/src/event/read.rs	2026-06-27 12:35:25.289090903 -0700
-+++ b/src/event/read.rs	2026-06-27 12:35:25.293090904 -0700
-@@ -2,6 +2,8 @@
- 
- #[cfg(unix)]
- use crate::event::source::unix::UnixInternalEventSource;
-+#[cfg(target_os = "wasi")]
-+use crate::event::source::wasi::WasiEventSource;
- #[cfg(windows)]
- use crate::event::source::windows::WindowsEventSource;
- #[cfg(feature = "event-stream")]
-@@ -21,6 +23,8 @@
-         let source = WindowsEventSource::new();
-         #[cfg(unix)]
-         let source = UnixInternalEventSource::new();
-+        #[cfg(target_os = "wasi")]
-+        let source = WasiEventSource::new();
- 
-         let source = source.ok().map(|x| Box::new(x) as Box<dyn EventSource>);
- 
-diff -ruN '--exclude=*.orig' a/src/event/source/wasi.rs b/src/event/source/wasi.rs
---- a/src/event/source/wasi.rs	1969-12-31 16:00:00.000000000 -0800
-+++ b/src/event/source/wasi.rs	2026-06-27 12:35:25.293090904 -0700
-@@ -0,0 +1,137 @@
-+//! WASI event source — reads raw bytes from stdin and parses ANSI escape sequences.
-+
-+use std::collections::VecDeque;
-+use std::io;
-+use std::time::Duration;
-+
-+#[cfg(feature = "event-stream")]
-+use super::super::sys::Waker;
-+use super::{EventSource, InternalEvent};
-+use crate::event::sys::unix::parse::parse_event;
-+
-+#[link(wasm_import_module = "host_tty")]
-+unsafe extern "C" {
-+    fn read(ptr: *mut u8, len: usize, timeout_ms: usize) -> usize;
-+}
-+
-+const BLOCKING_TIMEOUT_MS: usize = usize::MAX;
-+const CONTINUATION_TIMEOUT_MS: usize = 10;
-+
-+fn timeout_to_ms(timeout: Option<Duration>) -> usize {
-+    match timeout {
-+        None => BLOCKING_TIMEOUT_MS,
-+        Some(timeout) => timeout.as_millis().min((BLOCKING_TIMEOUT_MS - 1) as u128) as usize,
-+    }
-+}
-+
-+/// WASI event source that reads from stdin and parses terminal input.
-+pub(crate) struct WasiEventSource {
-+    parser: Parser,
-+}
-+
-+impl WasiEventSource {
-+    pub fn new() -> io::Result<Self> {
-+        Ok(Self {
-+            parser: Parser::default(),
-+        })
-+    }
-+}
-+
-+impl EventSource for WasiEventSource {
-+    fn try_read(&mut self, timeout: Option<Duration>) -> io::Result<Option<InternalEvent>> {
-+        if let Some(event) = self.parser.next() {
-+            return Ok(Some(event));
-+        }
-+
-+        let mut buf = [0u8; 1];
-+        let n = unsafe { read(buf.as_mut_ptr(), buf.len(), timeout_to_ms(timeout)) };
-+        if n == 0 {
-+            return Ok(None);
-+        }
-+
-+        self.parser.advance(&buf[..n], true);
-+        while self.parser.has_pending_prefix() {
-+            if let Some(event) = self.parser.next() {
-+                return Ok(Some(event));
-+            }
-+
-+            let n = unsafe { read(buf.as_mut_ptr(), buf.len(), CONTINUATION_TIMEOUT_MS) };
-+            if n == 0 {
-+                self.parser.finish();
-+                break;
-+            }
-+            self.parser.advance(&buf[..n], true);
-+        }
-+
-+        Ok(self.parser.next())
-+    }
-+
-+    #[cfg(feature = "event-stream")]
-+    fn waker(&self) -> Waker {
-+        unimplemented!("event-stream not supported on WASI")
-+    }
-+}
-+
-+#[derive(Debug)]
-+struct Parser {
-+    buffer: Vec<u8>,
-+    internal_events: VecDeque<InternalEvent>,
-+}
-+
-+impl Default for Parser {
-+    fn default() -> Self {
-+        Self {
-+            buffer: Vec::with_capacity(256),
-+            internal_events: VecDeque::with_capacity(128),
-+        }
-+    }
-+}
-+
-+impl Parser {
-+    fn has_pending_prefix(&self) -> bool {
-+        !self.buffer.is_empty()
-+    }
-+
-+    fn finish(&mut self) {
-+        if self.buffer.is_empty() {
-+            return;
-+        }
-+
-+        match parse_event(&self.buffer, false) {
-+            Ok(Some(event)) => {
-+                self.internal_events.push_back(event);
-+                self.buffer.clear();
-+            }
-+            Ok(None) | Err(_) => {
-+                self.buffer.clear();
-+            }
-+        }
-+    }
-+
-+    fn advance(&mut self, buffer: &[u8], more: bool) {
-+        for (idx, byte) in buffer.iter().enumerate() {
-+            let more = idx + 1 < buffer.len() || more;
-+
-+            self.buffer.push(*byte);
-+
-+            match parse_event(&self.buffer, more) {
-+                Ok(Some(event)) => {
-+                    self.internal_events.push_back(event);
-+                    self.buffer.clear();
-+                }
-+                Ok(None) => {}
-+                Err(_) => {
-+                    self.buffer.clear();
-+                }
-+            }
-+        }
-+    }
-+}
-+
-+impl Iterator for Parser {
-+    type Item = InternalEvent;
-+
-+    fn next(&mut self) -> Option<Self::Item> {
-+        self.internal_events.pop_front()
-+    }
-+}
-diff -ruN '--exclude=*.orig' a/src/event/source.rs b/src/event/source.rs
---- a/src/event/source.rs	2026-06-27 12:35:25.289090903 -0700
-+++ b/src/event/source.rs	2026-06-27 12:35:25.293090904 -0700
-@@ -6,6 +6,8 @@
- 
- #[cfg(unix)]
- pub(crate) mod unix;
-+#[cfg(target_os = "wasi")]
-+pub(crate) mod wasi;
- #[cfg(windows)]
- pub(crate) mod windows;
- 
-diff -ruN '--exclude=*.orig' a/src/event/sys.rs b/src/event/sys.rs
---- a/src/event/sys.rs	2026-06-27 12:35:25.293090904 -0700
-+++ b/src/event/sys.rs	2026-06-27 12:35:25.293090904 -0700
-@@ -3,7 +3,7 @@
- #[cfg(all(windows, feature = "event-stream"))]
- pub(crate) use windows::waker::Waker;
- 
--#[cfg(unix)]
-+#[cfg(any(unix, target_os = "wasi"))]
- pub(crate) mod unix;
- #[cfg(windows)]
- pub(crate) mod windows;
-diff -ruN '--exclude=*.orig' a/src/event.rs b/src/event.rs
---- a/src/event.rs	2026-06-27 12:35:25.293090904 -0700
-+++ b/src/event.rs	2026-06-27 12:35:25.293090904 -0700
-@@ -247,7 +247,7 @@
- pub fn read() -> std::io::Result<Event> {
-     match read_internal(&EventFilter)? {
-         InternalEvent::Event(event) => Ok(event),
--        #[cfg(unix)]
-+        #[cfg(any(unix, target_os = "wasi"))]
-         _ => unreachable!(),
-     }
- }
-@@ -677,7 +677,7 @@
-             }
-             match modifier {
-                 KeyModifiers::SHIFT => f.write_str("Shift")?,
--                #[cfg(unix)]
-+                #[cfg(any(unix, target_os = "wasi"))]
-                 KeyModifiers::CONTROL => f.write_str("Control")?,
-                 #[cfg(windows)]
-                 KeyModifiers::CONTROL => f.write_str("Ctrl")?,
-@@ -1175,13 +1175,13 @@
-     /// An event.
-     Event(Event),
-     /// A cursor position (`col`, `row`).
--    #[cfg(unix)]
-+    #[cfg(any(unix, target_os = "wasi"))]
-     CursorPosition(u16, u16),
-     /// The progressive keyboard enhancement flags enabled by the terminal.
--    #[cfg(unix)]
-+    #[cfg(any(unix, target_os = "wasi"))]
-     KeyboardEnhancementFlags(KeyboardEnhancementFlags),
-     /// Attributes and architectural class of the terminal.
--    #[cfg(unix)]
-+    #[cfg(any(unix, target_os = "wasi"))]
-     PrimaryDeviceAttributes,
- }
- 
-diff -ruN '--exclude=*.orig' a/src/terminal/sys/wasi.rs b/src/terminal/sys/wasi.rs
---- a/src/terminal/sys/wasi.rs	1969-12-31 16:00:00.000000000 -0800
-+++ b/src/terminal/sys/wasi.rs	2026-06-27 12:35:25.293090904 -0700
-@@ -0,0 +1,62 @@
-+//! WASI-specific terminal functions.
-+
-+use std::io;
-+use std::sync::atomic::{AtomicBool, Ordering};
-+
-+use crate::terminal::WindowSize;
-+
-+static RAW_MODE_ENABLED: AtomicBool = AtomicBool::new(false);
-+
-+#[link(wasm_import_module = "host_tty")]
-+unsafe extern "C" {
-+    fn set_raw_mode(enabled: u32) -> u32;
-+}
-+
-+pub(crate) fn is_raw_mode_enabled() -> bool {
-+    RAW_MODE_ENABLED.load(Ordering::SeqCst)
-+}
-+
-+pub(crate) fn enable_raw_mode() -> io::Result<()> {
-+    let errno = unsafe { set_raw_mode(1) };
-+    if errno != 0 {
-+        return Err(io::Error::from_raw_os_error(errno as i32));
-+    }
-+    RAW_MODE_ENABLED.store(true, Ordering::SeqCst);
-+    Ok(())
-+}
-+
-+pub(crate) fn disable_raw_mode() -> io::Result<()> {
-+    let errno = unsafe { set_raw_mode(0) };
-+    if errno != 0 {
-+        return Err(io::Error::from_raw_os_error(errno as i32));
-+    }
-+    RAW_MODE_ENABLED.store(false, Ordering::SeqCst);
-+    Ok(())
-+}
-+
-+pub(crate) fn size() -> io::Result<(u16, u16)> {
-+    let cols = std::env::var("COLUMNS")
-+        .ok()
-+        .and_then(|s| s.parse().ok())
-+        .unwrap_or(80u16);
-+    let rows = std::env::var("LINES")
-+        .ok()
-+        .and_then(|s| s.parse().ok())
-+        .unwrap_or(24u16);
-+    Ok((cols, rows))
-+}
-+
-+pub(crate) fn window_size() -> io::Result<WindowSize> {
-+    let (cols, rows) = size()?;
-+    Ok(WindowSize {
-+        columns: cols,
-+        rows,
-+        width: cols.saturating_mul(8),
-+        height: rows.saturating_mul(16),
-+    })
-+}
-+
-+#[cfg(feature = "events")]
-+pub fn supports_keyboard_enhancement() -> io::Result<bool> {
-+    Ok(false)
-+}
-diff -ruN '--exclude=*.orig' a/src/terminal/sys.rs b/src/terminal/sys.rs
---- a/src/terminal/sys.rs	2026-06-27 12:35:25.293090904 -0700
-+++ b/src/terminal/sys.rs	2026-06-27 12:35:25.293090904 -0700
-@@ -18,6 +18,14 @@
-     set_size, set_window_title, size, window_size,
- };
- 
-+#[cfg(target_os = "wasi")]
-+#[cfg(feature = "events")]
-+pub use self::wasi::supports_keyboard_enhancement;
-+#[cfg(target_os = "wasi")]
-+pub(crate) use self::wasi::{
-+    disable_raw_mode, enable_raw_mode, is_raw_mode_enabled, size, window_size,
-+};
-+
- #[cfg(windows)]
- mod windows;
- 
-@@ -25,3 +33,6 @@
- pub mod file_descriptor;
- #[cfg(unix)]
- mod unix;
-+
-+#[cfg(target_os = "wasi")]
-+mod wasi;
-diff -ruN '--exclude=*.orig' a/src/terminal.rs b/src/terminal.rs
---- a/src/terminal.rs	2026-06-27 12:35:25.293090904 -0700
-+++ b/src/terminal.rs	2026-06-27 12:35:25.293090904 -0700
-@@ -114,6 +114,11 @@
-     {
-         sys::is_raw_mode_enabled()
-     }
-+
-+    #[cfg(target_os = "wasi")]
-+    {
-+        Ok(sys::is_raw_mode_enabled())
-+    }
- }
- 
- /// Enables raw mode.
-diff -ruN '--exclude=*.orig' a/src/tty.rs b/src/tty.rs
---- a/src/tty.rs	2026-06-27 12:35:25.293090904 -0700
-+++ b/src/tty.rs	2026-06-27 12:35:25.293090904 -0700
-@@ -52,3 +52,10 @@
-         ok == 1
-     }
- }
-+
-+#[cfg(target_os = "wasi")]
-+impl<S> IsTty for S {
-+    fn is_tty(&self) -> bool {
-+        true
-+    }
-+}
diff --git a/registry/native/patches/crates/crossterm/0001-wasi-support.patch b/registry/native/patches/crates/crossterm/0001-wasi-support.patch
deleted file mode 100644
index f6db66749..000000000
--- a/registry/native/patches/crates/crossterm/0001-wasi-support.patch
+++ /dev/null
@@ -1,403 +0,0 @@
-diff -ruN '--exclude=*.orig' src/cursor/sys/wasi.rs src/cursor/sys/wasi.rs
---- a/src/cursor/sys/wasi.rs	1969-12-31 16:00:00.000000000 -0800
-+++ b/src/cursor/sys/wasi.rs	2026-03-20 11:47:50.140876109 -0700
-@@ -0,0 +1,10 @@
-+//! WASI-specific cursor functions.
-+
-+use std::io;
-+
-+/// Returns the cursor position (column, row).
-+/// On WASI, returns (0, 0) as a stub — cursor position queries via DSR
-+/// are not supported without full terminal emulation.
-+pub fn position() -> io::Result<(u16, u16)> {
-+    Ok((0, 0))
-+}
-diff -ruN '--exclude=*.orig' src/cursor/sys.rs src/cursor/sys.rs
---- a/src/cursor/sys.rs	1973-11-29 13:33:09.000000000 -0800
-+++ b/src/cursor/sys.rs	2026-03-20 11:47:57.676888146 -0700
-@@ -6,6 +6,9 @@
- #[cfg(windows)]
- #[cfg(feature = "events")]
- pub use self::windows::position;
-+#[cfg(target_os = "wasi")]
-+#[cfg(feature = "events")]
-+pub use self::wasi::position;
- #[cfg(windows)]
- pub(crate) use self::windows::{
-     move_down, move_left, move_right, move_to, move_to_column, move_to_next_line,
-@@ -18,3 +21,7 @@
- #[cfg(unix)]
- #[cfg(feature = "events")]
- pub(crate) mod unix;
-+
-+#[cfg(target_os = "wasi")]
-+#[cfg(feature = "events")]
-+pub(crate) mod wasi;
-diff -ruN '--exclude=*.orig' src/event/filter.rs src/event/filter.rs
---- a/src/event/filter.rs	1973-11-29 13:33:09.000000000 -0800
-+++ b/src/event/filter.rs	2026-03-20 11:49:15.561010721 -0700
-@@ -55,6 +55,11 @@
-         matches!(*event, InternalEvent::Event(_))
-     }
- 
-+    #[cfg(target_os = "wasi")]
-+    fn eval(&self, event: &InternalEvent) -> bool {
-+        matches!(*event, InternalEvent::Event(_))
-+    }
-+
-     #[cfg(windows)]
-     fn eval(&self, _: &InternalEvent) -> bool {
-         true
-diff -ruN '--exclude=*.orig' src/event/read.rs src/event/read.rs
---- a/src/event/read.rs	1973-11-29 13:33:09.000000000 -0800
-+++ b/src/event/read.rs	2026-03-20 11:48:37.492951213 -0700
-@@ -2,6 +2,8 @@
- 
- #[cfg(unix)]
- use crate::event::source::unix::UnixInternalEventSource;
-+#[cfg(target_os = "wasi")]
-+use crate::event::source::wasi::WasiEventSource;
- #[cfg(windows)]
- use crate::event::source::windows::WindowsEventSource;
- #[cfg(feature = "event-stream")]
-@@ -21,6 +23,8 @@
-         let source = WindowsEventSource::new();
-         #[cfg(unix)]
-         let source = UnixInternalEventSource::new();
-+        #[cfg(target_os = "wasi")]
-+        let source = WasiEventSource::new();
- 
-         let source = source.ok().map(|x| Box::new(x) as Box<dyn EventSource>);
- 
-diff -ruN '--exclude=*.orig' src/event/source/wasi.rs src/event/source/wasi.rs
---- a/src/event/source/wasi.rs	1969-12-31 16:00:00.000000000 -0800
-+++ b/src/event/source/wasi.rs	2026-03-20 11:48:21.468925937 -0700
-@@ -0,0 +1,139 @@
-+//! WASI event source — reads raw bytes from stdin and parses ANSI escape sequences.
-+
-+use std::collections::VecDeque;
-+use std::io;
-+use std::time::Duration;
-+
-+#[cfg(feature = "event-stream")]
-+use super::super::sys::Waker;
-+use super::{EventSource, InternalEvent};
-+use crate::event::sys::unix::parse::parse_event;
-+
-+#[link(wasm_import_module = "host_tty")]
-+unsafe extern "C" {
-+    fn read(ptr: *mut u8, len: usize, timeout_ms: usize) -> usize;
-+}
-+
-+const BLOCKING_TIMEOUT_MS: usize = usize::MAX;
-+const CONTINUATION_TIMEOUT_MS: usize = 10;
-+
-+fn timeout_to_ms(timeout: Option<Duration>) -> usize {
-+    match timeout {
-+        None => BLOCKING_TIMEOUT_MS,
-+        Some(timeout) => timeout
-+            .as_millis()
-+            .min((BLOCKING_TIMEOUT_MS - 1) as u128) as usize,
-+    }
-+}
-+
-+/// WASI event source that reads from stdin and parses terminal input.
-+pub(crate) struct WasiEventSource {
-+    parser: Parser,
-+}
-+
-+impl WasiEventSource {
-+    pub fn new() -> io::Result<Self> {
-+        Ok(Self {
-+            parser: Parser::default(),
-+        })
-+    }
-+}
-+
-+impl EventSource for WasiEventSource {
-+    fn try_read(&mut self, timeout: Option<Duration>) -> io::Result<Option<InternalEvent>> {
-+        if let Some(event) = self.parser.next() {
-+            return Ok(Some(event));
-+        }
-+
-+        let mut buf = [0u8; 1];
-+        let n = unsafe { read(buf.as_mut_ptr(), buf.len(), timeout_to_ms(timeout)) };
-+        if n == 0 {
-+            return Ok(None);
-+        }
-+
-+        self.parser.advance(&buf[..n], true);
-+        while self.parser.has_pending_prefix() {
-+            if let Some(event) = self.parser.next() {
-+                return Ok(Some(event));
-+            }
-+
-+            let n = unsafe { read(buf.as_mut_ptr(), buf.len(), CONTINUATION_TIMEOUT_MS) };
-+            if n == 0 {
-+                self.parser.finish();
-+                break;
-+            }
-+            self.parser.advance(&buf[..n], true);
-+        }
-+
-+        Ok(self.parser.next())
-+    }
-+
-+    #[cfg(feature = "event-stream")]
-+    fn waker(&self) -> Waker {
-+        unimplemented!("event-stream not supported on WASI")
-+    }
-+}
-+
-+#[derive(Debug)]
-+struct Parser {
-+    buffer: Vec<u8>,
-+    internal_events: VecDeque<InternalEvent>,
-+}
-+
-+impl Default for Parser {
-+    fn default() -> Self {
-+        Self {
-+            buffer: Vec::with_capacity(256),
-+            internal_events: VecDeque::with_capacity(128),
-+        }
-+    }
-+}
-+
-+impl Parser {
-+    fn has_pending_prefix(&self) -> bool {
-+        !self.buffer.is_empty()
-+    }
-+
-+    fn finish(&mut self) {
-+        if self.buffer.is_empty() {
-+            return;
-+        }
-+
-+        match parse_event(&self.buffer, false) {
-+            Ok(Some(event)) => {
-+                self.internal_events.push_back(event);
-+                self.buffer.clear();
-+            }
-+            Ok(None) | Err(_) => {
-+                self.buffer.clear();
-+            }
-+        }
-+    }
-+
-+    fn advance(&mut self, buffer: &[u8], more: bool) {
-+        for (idx, byte) in buffer.iter().enumerate() {
-+            let more = idx + 1 < buffer.len() || more;
-+
-+            self.buffer.push(*byte);
-+
-+            match parse_event(&self.buffer, more) {
-+                Ok(Some(event)) => {
-+                    self.internal_events.push_back(event);
-+                    self.buffer.clear();
-+                }
-+                Ok(None) => {}
-+                Err(_) => {
-+                    self.buffer.clear();
-+                }
-+            }
-+        }
-+    }
-+}
-+
-+impl Iterator for Parser {
-+    type Item = InternalEvent;
-+
-+    fn next(&mut self) -> Option<Self::Item> {
-+        self.internal_events.pop_front()
-+    }
-+}
-diff -ruN '--exclude=*.orig' src/event/source.rs src/event/source.rs
---- a/src/event/source.rs	1973-11-29 13:33:09.000000000 -0800
-+++ b/src/event/source.rs	2026-03-20 11:48:26.148933334 -0700
-@@ -6,6 +6,8 @@
- 
- #[cfg(unix)]
- pub(crate) mod unix;
-+#[cfg(target_os = "wasi")]
-+pub(crate) mod wasi;
- #[cfg(windows)]
- pub(crate) mod windows;
- 
-diff -ruN '--exclude=*.orig' src/event/sys.rs src/event/sys.rs
---- a/src/event/sys.rs	1973-11-29 13:33:09.000000000 -0800
-+++ b/src/event/sys.rs	2026-03-20 11:48:04.948899731 -0700
-@@ -3,7 +3,7 @@
- #[cfg(all(windows, feature = "event-stream"))]
- pub(crate) use windows::waker::Waker;
- 
--#[cfg(unix)]
-+#[cfg(any(unix, target_os = "wasi"))]
- pub(crate) mod unix;
- #[cfg(windows)]
- pub(crate) mod windows;
-diff -ruN '--exclude=*.orig' src/event.rs src/event.rs
---- a/src/event.rs	1973-11-29 13:33:09.000000000 -0800
-+++ b/src/event.rs	2026-03-20 11:50:25.121117643 -0700
-@@ -247,7 +247,7 @@
- pub fn read() -> std::io::Result<Event> {
-     match read_internal(&EventFilter)? {
-         InternalEvent::Event(event) => Ok(event),
--        #[cfg(unix)]
-+        #[cfg(any(unix, target_os = "wasi"))]
-         _ => unreachable!(),
-     }
- }
-@@ -677,7 +677,7 @@
-             }
-             match modifier {
-                 KeyModifiers::SHIFT => f.write_str("Shift")?,
--                #[cfg(unix)]
-+                #[cfg(any(unix, target_os = "wasi"))]
-                 KeyModifiers::CONTROL => f.write_str("Control")?,
-                 #[cfg(windows)]
-                 KeyModifiers::CONTROL => f.write_str("Ctrl")?,
-@@ -1175,13 +1175,13 @@
-     /// An event.
-     Event(Event),
-     /// A cursor position (`col`, `row`).
--    #[cfg(unix)]
-+    #[cfg(any(unix, target_os = "wasi"))]
-     CursorPosition(u16, u16),
-     /// The progressive keyboard enhancement flags enabled by the terminal.
--    #[cfg(unix)]
-+    #[cfg(any(unix, target_os = "wasi"))]
-     KeyboardEnhancementFlags(KeyboardEnhancementFlags),
-     /// Attributes and architectural class of the terminal.
--    #[cfg(unix)]
-+    #[cfg(any(unix, target_os = "wasi"))]
-     PrimaryDeviceAttributes,
- }
- 
-diff -ruN '--exclude=*.orig' src/terminal/sys/wasi.rs src/terminal/sys/wasi.rs
---- a/src/terminal/sys/wasi.rs	1969-12-31 16:00:00.000000000 -0800
-+++ b/src/terminal/sys/wasi.rs	2026-03-20 11:47:29.268842595 -0700
-@@ -0,0 +1,66 @@
-+//! WASI-specific terminal functions.
-+//!
-+//! On WASI, the terminal is accessed through the WasmVM PTY.
-+//! Raw mode is tracked locally (the host PTY handles actual terminal discipline).
-+//! Terminal size is read from COLUMNS/LINES environment variables.
-+
-+use std::io;
-+use std::sync::atomic::{AtomicBool, Ordering};
-+
-+use crate::terminal::WindowSize;
-+
-+static RAW_MODE_ENABLED: AtomicBool = AtomicBool::new(false);
-+
-+#[link(wasm_import_module = "host_tty")]
-+unsafe extern "C" {
-+    fn set_raw_mode(enabled: u32) -> u32;
-+}
-+
-+pub(crate) fn is_raw_mode_enabled() -> bool {
-+    RAW_MODE_ENABLED.load(Ordering::SeqCst)
-+}
-+
-+pub(crate) fn enable_raw_mode() -> io::Result<()> {
-+    let errno = unsafe { set_raw_mode(1) };
-+    if errno != 0 {
-+        return Err(io::Error::from_raw_os_error(errno as i32));
-+    }
-+    RAW_MODE_ENABLED.store(true, Ordering::SeqCst);
-+    Ok(())
-+}
-+
-+pub(crate) fn disable_raw_mode() -> io::Result<()> {
-+    let errno = unsafe { set_raw_mode(0) };
-+    if errno != 0 {
-+        return Err(io::Error::from_raw_os_error(errno as i32));
-+    }
-+    RAW_MODE_ENABLED.store(false, Ordering::SeqCst);
-+    Ok(())
-+}
-+
-+pub(crate) fn size() -> io::Result<(u16, u16)> {
-+    let cols = std::env::var("COLUMNS")
-+        .ok()
-+        .and_then(|s| s.parse().ok())
-+        .unwrap_or(80u16);
-+    let rows = std::env::var("LINES")
-+        .ok()
-+        .and_then(|s| s.parse().ok())
-+        .unwrap_or(24u16);
-+    Ok((cols, rows))
-+}
-+
-+pub(crate) fn window_size() -> io::Result<WindowSize> {
-+    let (cols, rows) = size()?;
-+    Ok(WindowSize {
-+        columns: cols,
-+        rows,
-+        width: cols.saturating_mul(8),
-+        height: rows.saturating_mul(16),
-+    })
-+}
-+
-+#[cfg(feature = "events")]
-+pub fn supports_keyboard_enhancement() -> io::Result<bool> {
-+    Ok(false)
-+}
-diff -ruN '--exclude=*.orig' src/terminal/sys.rs src/terminal/sys.rs
---- a/src/terminal/sys.rs	1973-11-29 13:33:09.000000000 -0800
-+++ b/src/terminal/sys.rs	2026-03-20 11:47:39.788859519 -0700
-@@ -18,6 +18,14 @@
-     set_size, set_window_title, size, window_size,
- };
- 
-+#[cfg(target_os = "wasi")]
-+#[cfg(feature = "events")]
-+pub use self::wasi::supports_keyboard_enhancement;
-+#[cfg(target_os = "wasi")]
-+pub(crate) use self::wasi::{
-+    disable_raw_mode, enable_raw_mode, is_raw_mode_enabled, size, window_size,
-+};
-+
- #[cfg(windows)]
- mod windows;
- 
-@@ -25,3 +33,6 @@
- pub mod file_descriptor;
- #[cfg(unix)]
- mod unix;
-+
-+#[cfg(target_os = "wasi")]
-+mod wasi;
-diff -ruN '--exclude=*.orig' src/terminal.rs src/terminal.rs
---- a/src/terminal.rs	1973-11-29 13:33:09.000000000 -0800
-+++ b/src/terminal.rs	2026-03-20 11:47:45.304868367 -0700
-@@ -114,6 +114,11 @@
-     {
-         sys::is_raw_mode_enabled()
-     }
-+
-+    #[cfg(target_os = "wasi")]
-+    {
-+        Ok(sys::is_raw_mode_enabled())
-+    }
- }
- 
- /// Enables raw mode.
-diff -ruN '--exclude=*.orig' src/tty.rs src/tty.rs
---- a/src/tty.rs	1973-11-29 13:33:09.000000000 -0800
-+++ b/src/tty.rs	2026-03-20 11:48:47.536966986 -0700
-@@ -52,3 +52,13 @@
-         ok == 1
-     }
- }
-+
-+/// On WASI, the WasmVM PTY provides terminal semantics.
-+/// stdin/stdout/stderr are always connected to the PTY slave,
-+/// so we report them as TTYs.
-+#[cfg(target_os = "wasi")]
-+impl<S> IsTty for S {
-+    fn is_tty(&self) -> bool {
-+        true
-+    }
-+}
diff --git a/registry/native/patches/crates/fd-lock/0001-wasi-support.patch b/registry/native/patches/crates/fd-lock/0001-wasi-support.patch
deleted file mode 100644
index d94893b1e..000000000
--- a/registry/native/patches/crates/fd-lock/0001-wasi-support.patch
+++ /dev/null
@@ -1,38 +0,0 @@
---- a/src/sys/mod.rs
-+++ b/src/sys/mod.rs
-@@ -12,6 +12,7 @@
-         pub(crate) use std::os::windows::io::AsHandle as AsOpenFile;
-     } else {
-         mod unsupported;
--        pub use unsupported;
-+        pub use unsupported::*;
-+        pub(crate) use std::os::fd::AsRawFd as AsOpenFile;
-     }
- }
---- a/src/sys/unsupported/read_guard.rs
-+++ b/src/sys/unsupported/read_guard.rs
-@@ -1,5 +1,5 @@
- use std::ops;
--use std::os::unix::io::AsRawFd;
-+use std::os::fd::AsRawFd;
- 
- use super::RwLock;
- 
---- a/src/sys/unsupported/rw_lock.rs
-+++ b/src/sys/unsupported/rw_lock.rs
-@@ -1,5 +1,5 @@
- use std::io::{self, Error, ErrorKind};
--use std::os::unix::io::AsRawFd;
-+use std::os::fd::AsRawFd;
- 
- use super::{RwLockReadGuard, RwLockWriteGuard};
- 
---- a/src/sys/unsupported/write_guard.rs
-+++ b/src/sys/unsupported/write_guard.rs
-@@ -1,5 +1,5 @@
- use std::ops;
--use std::os::unix::io::AsRawFd;
-+use std::os::fd::AsRawFd;
- 
- use super::RwLock;
- 
diff --git a/registry/native/patches/crates/path-dedot/wasi.md b/registry/native/patches/crates/path-dedot/wasi.md
deleted file mode 100644
index 84e7a3afb..000000000
--- a/registry/native/patches/crates/path-dedot/wasi.md
+++ /dev/null
@@ -1,10 +0,0 @@
-# path-dedot wasip1 fix
-path-dedot 3.1.1 gates its unix `parse_dot`/`parse_dot_from` impl on
-`any(unix, all(target_family = "wasm", feature = "use_unix_paths_on_wasm"))`
-(src/lib.rs:290, src/macros.rs:1). On wasm32-wasip1 without that feature the
-methods vanish → codex-core fails. Fix: route all `target_family = "wasm"` to the
-unix-paths impl (the VM uses unix-style absolute paths). Apply by either enabling
-path-dedot's `use_unix_paths_on_wasm` feature in the vendored build, or replacing
-`all(target_family = "wasm", feature = "use_unix_paths_on_wasm")` with
-`target_family = "wasm"` in src/lib.rs + src/macros.rs.
-Same fix applies to path-absolutize (same author/pattern).
diff --git a/registry/native/patches/crates/sed/0001-wasi-compat.patch b/registry/native/patches/crates/sed/0001-wasi-compat.patch
deleted file mode 100644
index ca0715dd5..000000000
--- a/registry/native/patches/crates/sed/0001-wasi-compat.patch
+++ /dev/null
@@ -1,106 +0,0 @@
---- a/Cargo.toml	2026-03-16 14:04:42.858897799 -0700
-+++ Cargo.toml	2026-03-16 14:04:58.166883109 -0700
-@@ -58,8 +58,9 @@
- path = "benches/sed_bench.rs"
- harness = false
- 
--[dependencies.assert_fs]
--version = "1.1.3"
-+# wasmVM: removed assert_fs, predicates (test-only, not WASI compatible)
-+# wasmVM: removed sysinfo, ctor, clap_complete, clap_mangen, textwrap (unused in source)
-+# wasmVM: removed terminal_size (stubbed in compiler.rs for WASI)
- 
- [dependencies.clap]
- version = "4.4"
-@@ -68,15 +69,6 @@
-     "cargo",
- ]
- 
--[dependencies.clap_complete]
--version = "4.5"
--
--[dependencies.clap_mangen]
--version = "0.2"
--
--[dependencies.ctor]
--version = "0.6.0"
--
- [dependencies.fancy-regex]
- version = "0.17.0"
- 
-@@ -92,27 +84,14 @@
- [dependencies.phf]
- version = "0.13.0"
- 
--[dependencies.predicates]
--version = "3.1.3"
--
- [dependencies.regex]
- version = "1.10.4"
- 
--[dependencies.sysinfo]
--version = "0.37"
--
- [dependencies.tempfile]
- version = "3.10.1"
- 
--[dependencies.terminal_size]
--version = "0.4.2"
--
--[dependencies.textwrap]
--version = "0.16.1"
--features = ["terminal_size"]
--
- [dependencies.uucore]
--version = "0.5.0"
-+version = "0.7.0"
- features = ["libc"]
- 
- [dev-dependencies.chrono]
-@@ -141,18 +120,14 @@
- version = "3.10.1"
- 
- [dev-dependencies.uucore]
--version = "0.5.0"
-+version = "0.7.0"
- features = [
-     "libc",
-     "entries",
-     "process",
-     "signals",
--    "benchmark",
- ]
- 
--[dev-dependencies.uutests]
--version = "0.5.0"
--
- [build-dependencies.phf_codegen]
- version = "0.13.0"
- 
-
---- a/src/sed/compiler.rs	2026-03-16 14:04:42.858897799 -0700
-+++ src/sed/compiler.rs	2026-03-16 14:05:09.882873178 -0700
-@@ -24,7 +24,7 @@
- use std::path::PathBuf;
- use std::rc::Rc;
- 
--use terminal_size::{Width, terminal_size};
-+// wasmVM: terminal_size removed for WASI — no TTY in WASM
- use uucore::error::{UResult, USimpleError};
- 
- const DEFAULT_OUTPUT_WIDTH: usize = 60;
-@@ -996,12 +996,9 @@
- }
- 
- /// Return the width of the command's terminal or a default.
-+// wasmVM: terminal_size stubbed — WASI has no TTY, always return default
- fn output_width() -> usize {
--    if let Some((Width(w), _)) = terminal_size() {
--        w as usize
--    } else {
--        DEFAULT_OUTPUT_WIDTH
--    }
-+    DEFAULT_OUTPUT_WIDTH
- }
- 
- /// Compile commands that take a number as an argument.
diff --git a/registry/native/patches/crates/socket2/0001-wasip1.patch b/registry/native/patches/crates/socket2/0001-wasip1.patch
deleted file mode 100644
index d518cd635..000000000
--- a/registry/native/patches/crates/socket2/0001-wasip1.patch
+++ /dev/null
@@ -1,20 +0,0 @@
-# socket2 0.6.x excludes wasm32-wasip1 (`not(target_env = "p1")`) → "doesn't support
-# the compile target". Include p1 so it routes to sys/unix.rs (the patched wasi-libc
-# host_net provides the socket fns; codex's HTTP uses wasi-http, so socket2 only needs
-# to COMPILE as a transitive dep of tokio::net/mio/reqwest). Pipeline-only codex port.
---- a/src/lib.rs
-+++ b/src/lib.rs
-@@
--#[cfg_attr(
--    any(unix, all(target_os = "wasi", not(target_env = "p1"))),
--    path = "sys/unix.rs"
--)]
-+#[cfg_attr(any(unix, target_os = "wasi"), path = "sys/unix.rs")]
- #[cfg_attr(windows, path = "sys/windows.rs")]
- mod sys;
- 
--#[cfg(not(any(windows, unix, all(target_os = "wasi", not(target_env = "p1")))))]
-+#[cfg(not(any(windows, unix, target_os = "wasi")))]
- compile_error!("Socket2 doesn't support the compile target");
-# NOTE: verify sys/unix.rs compiles on wasip1 (some fns may need stubbing if wasi-libc
-# lacks them); if so, add a sys/wasi.rs stub instead. socket2 is compile-only for codex.
diff --git a/registry/native/patches/crates/tokio/0001-tokio-wasi-process.patch b/registry/native/patches/crates/tokio/0001-tokio-wasi-process.patch
deleted file mode 100644
index 581e22a91..000000000
--- a/registry/native/patches/crates/tokio/0001-tokio-wasi-process.patch
+++ /dev/null
@@ -1,23 +0,0 @@
---- a/src/macros/cfg.rs
-+++ b/src/macros/cfg.rs
-@@ -385,7 +385,6 @@
-             #[cfg(feature = "process")]
-             #[cfg_attr(docsrs, doc(cfg(feature = "process")))]
-             #[cfg(not(loom))]
--            #[cfg(not(target_os = "wasi"))]
-             $item
-         )*
-     }
---- a/src/process/mod.rs
-+++ b/src/process/mod.rs
-@@ -239,6 +239,10 @@
- #[cfg(windows)]
- mod imp;
- 
-+#[path = "wasi.rs"]
-+#[cfg(target_os = "wasi")]
-+mod imp;
-+
- mod kill;
- 
- use crate::io::{AsyncRead, AsyncWrite, ReadBuf};
diff --git a/registry/native/patches/crates/tokio/0002-wasi-fs-asyncify-inline.md b/registry/native/patches/crates/tokio/0002-wasi-fs-asyncify-inline.md
deleted file mode 100644
index 730282ee9..000000000
--- a/registry/native/patches/crates/tokio/0002-wasi-fs-asyncify-inline.md
+++ /dev/null
@@ -1,7 +0,0 @@
-# tokio fs asyncify inline on wasi
-tokio::fs::* uses asyncify() → spawn_blocking, which panics on single-threaded
-wasm32-wasip1 (no blocking thread pool): "RuntimeError: unreachable" at fs/mod.rs.
-codex reads config via tokio::fs and hits this after emitting {"type":"start"}.
-Fix (src/fs/mod.rs asyncify): on #[cfg(target_os="wasi")] run the closure inline
-(`return f();`) instead of spawn_blocking. NOTE: sqlx/other spawn_blocking callers may
-need a broader fix (make spawn_blocking itself run inline on wasi) if they panic at runtime.
diff --git a/registry/native/patches/crates/tokio/0003-wasi-spawn-blocking-inline.md b/registry/native/patches/crates/tokio/0003-wasi-spawn-blocking-inline.md
deleted file mode 100644
index f6db7b3f8..000000000
--- a/registry/native/patches/crates/tokio/0003-wasi-spawn-blocking-inline.md
+++ /dev/null
@@ -1,16 +0,0 @@
-# tokio spawn_blocking inline on wasi
-wasm32-wasip1 has no OS threads, so tokio's blocking thread pool never spawns
-workers — queued spawn_blocking tasks hang forever. codex (sqlx/sqlite, rollout
-writes, etc.) calls spawn_blocking during a turn and HUNG (no panic). Fix
-(runtime/blocking/pool.rs spawn_blocking): on #[cfg(target_os="wasi")] run the work
-as an ordinary current-thread task — `crate::task::spawn(async move { func() })` —
-instead of the pool. codex's blocking ops are short + cooperative on the single-threaded VM.
-(Complements 0002 fs asyncify, which runs fs ops inline.)
-
-## UPDATE: run inline synchronously (not deferred) to avoid single-thread deadlock
-The first version `crate::task::spawn(async move { func() })` defers func() to a task,
-which can DEADLOCK on the single thread (a deferred blocking task waits on a task that
-can't run because the thread is busy). Corrected: run `let result = func();` INLINE
-(synchronously, completing before any other task interleaves), then return a ready
-JoinHandle via `crate::task::spawn(async move { result })`. Matches the fs-asyncify
-inline approach. spawn_blocking work is synchronous (FnOnce()->R) so inline is safe.
diff --git a/registry/native/patches/crates/tokio/VERIFIED-tokio-process-wasi.md b/registry/native/patches/crates/tokio/VERIFIED-tokio-process-wasi.md
deleted file mode 100644
index aa417a80d..000000000
--- a/registry/native/patches/crates/tokio/VERIFIED-tokio-process-wasi.md
+++ /dev/null
@@ -1,45 +0,0 @@
-# VERIFIED: tokio::process compiles+works on wasm32-wasip1 (2026-06-23)
-
-Proven in isolation (/tmp/tokio-dev + [patch], --cfg tokio_unstable, -Z build-std):
-`Command::new("echo").arg("hi").output().await` COMPILES for wasm32-wasip1.
-This de-risks codex's entire exec path under the pipeline-only approach.
-
-## The exact changes (to capture as secure-exec patches):
-
-### A. tokio crate patch (patches/crates/tokio/):
-1. src/macros/cfg.rs — in `macro_rules! cfg_process`, remove `#[cfg(not(target_os = "wasi"))]`.
-2. src/process/mod.rs — after the windows imp block, add:
-       #[path = "wasi.rs"]
-       #[cfg(target_os = "wasi")]
-       mod imp;
-3. src/process/wasi.rs — NEW file = ./wasi-process-imp.rs (this dir). Routes to std::process.
-
-### B. std patch (patches/*.patch — also fixes the stale 0001 patch):
-1. library/std/src/sys/process/wasi.rs — add to ChildPipe:
-       impl crate::os::fd::AsFd for ChildPipe { fn as_fd(&self)->BorrowedFd<'_>{ self.0.as_fd() } }
-       impl crate::sys::IntoInner<crate::os::fd::OwnedFd> for ChildPipe {
-           fn into_inner(self)->OwnedFd { self.0.into_inner() } }
-2. library/std/src/os/wasi/process.rs — NEW file (public ChildStdin/out/err fd impls:
-   AsRawFd/IntoRawFd/AsFd/From<_> for OwnedFd via as_inner().as_fd() / into_inner().into_inner()).
-3. library/std/src/os/wasi/mod.rs — add `pub mod process;` after `pub mod net;`.
-
-### C. Makefile: add `--cfg tokio_unstable` to the wasm-target RUSTFLAGS.
-
-## NEXT (remaining pipeline-only): same pattern for tokio::net (host_net sockets) → unblocks
-reqwest/tungstenite/rmcp → vendor codex into registry/native (resolve version conflicts) →
-make wasm builds codex-core UNCHANGED → un-stub codex-exec --session-turn → EE adapter + a5 test → matrix.
-
-## UPDATE — VERIFIED 2026-06-23 (compile): full hard stack compiles on wasm32-wasip1
-`tokio` (features process+net+rt+macros+io-util+time) + `reqwest` (rustls-tls) COMPILE TOGETHER
-for wasm32-wasip1 with the tokio patch + `--cfg tokio_unstable` (mio compiles as a limited impl).
-=> codex-core's hardest deps (tokio::process, tokio::net, reqwest, rmcp) compile pipeline-only with
-NO codex source changes. tokio::process is verified to also RUN. tokio::net/reqwest COMPILE; RUNTIME
-HTTP needs routing to wasi-http (reqwest connector patch) because wasi preview1 has no outbound connect.
-
-## Remaining for codex-core to COMPILE pipeline-only (toolchain-level, codex source unchanged):
-- C-dep crates: `zip` (xz/lzma) → `[patch.crates-io] zip` defeatured (deflate only); `sqlx`/sqlite
-  (codex-state) → stub or [patch] (no wasi sqlite). These are [patch]/vendoring, not codex edits.
-- stub crates codex-network-proxy/codex-otel 0.0.0 already exist.
-Then: vendor codex into registry/native → make wasm builds codex-core unchanged.
-## Remaining for codex to WORK: reqwest→wasi-http connector patch (runtime HTTP) → un-stub
-codex-exec --session-turn → EE adapter + a5 test → matrix.
diff --git a/registry/native/patches/crates/tokio/copy.manifest b/registry/native/patches/crates/tokio/copy.manifest
deleted file mode 100644
index d7d5bc813..000000000
--- a/registry/native/patches/crates/tokio/copy.manifest
+++ /dev/null
@@ -1,7 +0,0 @@
-# Companion source files installed into vendored tokio after the .patch applies.
-# Format: <src (relative to this patch dir)> <dest (relative to vendor/tokio-*)>
-# The 0001-tokio-wasi-process.patch wires `#[path = "wasi.rs"] mod imp;` for
-# target_os = "wasi"; this installs that module (the cooperative single-thread
-# process impl: Child::poll does WNOHANG try_wait + yield, never blocking the
-# executor). Without it the patched tokio fails to compile (missing wasi.rs).
-wasi-process-imp.rs src/process/wasi.rs
diff --git a/registry/native/patches/crates/tokio/std-wasi-childpipe-fd.rs b/registry/native/patches/crates/tokio/std-wasi-childpipe-fd.rs
deleted file mode 100644
index 6a5f3d230..000000000
--- a/registry/native/patches/crates/tokio/std-wasi-childpipe-fd.rs
+++ /dev/null
@@ -1,81 +0,0 @@
-//! std patch artifact (pipeline-only codex port) — wasi public child-pipe fd traits.
-//!
-//! PROBLEM (real secure-exec bug, found 2026-06-23): the patched wasi std provides
-//! the SEOS process impl (`sys/process/wasi.rs`, `ChildPipe(FileDesc)`) but NOT the
-//! public `process::{ChildStdin,ChildStdout,ChildStderr}` fd traits — `os/unix/process.rs`
-//! has them (AsRawFd/IntoRawFd/AsFd/From<_> for OwnedFd) but there is no `os/wasi`
-//! equivalent. Without them, `tokio::process`'s wasi imp (and any fd-extracting code)
-//! cannot get the child pipe fds. Also: `patches/0001-wasi-process-spawn.patch` is
-//! STALE vs nightly-2026-03-01 (leaves sys/process/{mod.rs,wasi.rs}.rej) and should be
-//! refreshed.
-//!
-//! FIX, two parts:
-//!
-//! (1) In `library/std/src/sys/process/wasi.rs`, add the inner-fd plumbing on ChildPipe
-//!     (FileDesc already impls AsRawFd / IntoInner<OwnedFd>):
-//!
-//!     impl crate::os::fd::AsRawFd for ChildPipe {
-//!         fn as_raw_fd(&self) -> crate::os::fd::RawFd { self.0.as_raw_fd() }
-//!     }
-//!     impl crate::os::fd::AsFd for ChildPipe {
-//!         fn as_fd(&self) -> crate::os::fd::BorrowedFd<'_> { self.0.as_fd() }
-//!     }
-//!     impl crate::sys::IntoInner<FileDesc> for ChildPipe {
-//!         fn into_inner(self) -> FileDesc { self.0 }
-//!     }
-//!
-//! (2) New `library/std/src/os/wasi/process.rs` (mirrors os/unix/process.rs:455-560),
-//!     wired via `pub mod process;` in `os/wasi/mod.rs`:
-
-#![allow(unused)]
-
-use crate::os::wasi::io::{AsFd, AsRawFd, BorrowedFd, FromRawFd, IntoRawFd, OwnedFd, RawFd};
-use crate::process;
-use crate::sys::{AsInner, IntoInner};
-
-macro_rules! impl_child_pipe_fd {
-    ($t:ty) => {
-        #[stable(feature = "process_extensions", since = "1.2.0")]
-        impl AsRawFd for $t {
-            #[inline]
-            fn as_raw_fd(&self) -> RawFd {
-                self.as_inner().as_raw_fd()
-            }
-        }
-
-        #[stable(feature = "into_raw_os", since = "1.4.0")]
-        impl IntoRawFd for $t {
-            #[inline]
-            fn into_raw_fd(self) -> RawFd {
-                // ChildStd* -> imp::ChildPipe -> FileDesc -> raw fd
-                self.into_inner().into_inner().into_inner().into_raw_fd()
-            }
-        }
-
-        #[stable(feature = "io_safety", since = "1.63.0")]
-        impl AsFd for $t {
-            #[inline]
-            fn as_fd(&self) -> BorrowedFd<'_> {
-                self.as_inner().as_fd()
-            }
-        }
-
-        #[stable(feature = "io_safety", since = "1.63.0")]
-        impl From<$t> for OwnedFd {
-            #[inline]
-            fn from(child: $t) -> OwnedFd {
-                child.into_inner().into_inner().into_inner()
-            }
-        }
-    };
-}
-
-impl_child_pipe_fd!(process::ChildStdin);
-impl_child_pipe_fd!(process::ChildStdout);
-impl_child_pipe_fd!(process::ChildStderr);
-
-// NOTE: exact `into_inner()` chain depth (ChildStd* → ChildPipe → FileDesc → OwnedFd)
-// must be confirmed against the wasi sys impl during application; adjust the macro
-// body to match (unix uses `self.into_inner().into_inner().into_raw_fd()`).
-// Once these land, the tokio wasi process imp (`wasi-process-imp.rs`) `stdio`
-// (Into<OwnedFd>) + `convert_to_stdio` (via File) compile, and tokio::process works.
diff --git a/registry/native/patches/crates/tokio/wasi-process-imp.rs b/registry/native/patches/crates/tokio/wasi-process-imp.rs
deleted file mode 100644
index 48aeba3d8..000000000
--- a/registry/native/patches/crates/tokio/wasi-process-imp.rs
+++ /dev/null
@@ -1,193 +0,0 @@
-//! wasm32-wasip1 process `imp` for tokio (DRAFT — pipeline-only codex port).
-//!
-//! Status: starting artifact for `patches/crates/tokio/`. Needs compile-test
-//! iteration against tokio 1.52.x internals (trait/type exactness) before being
-//! captured as the actual .patch. See ~/tmp/agent-e2e-checklist.md.
-//!
-//! Approach: route to the PATCHED `std::process` (host_process bridge). The VM is
-//! single-threaded, so `Child::poll` must NOT block on the synchronous `wait()`:
-//! that pins the only executor thread for the child's whole lifetime, starving
-//! every other task (the agent submission loop, the concurrent stdout/stderr
-//! drains `output()`/`wait_with_output()` rely on) and deadlocking the runtime.
-//! Instead `Child::poll` polls the child non-blockingly via std `try_wait()`
-//! (host_process `proc_waitpid` with WNOHANG) and yields until it exits, exactly
-//! like a normal Linux async runtime — the child runs for real in the host, we
-//! just cooperatively await its exit. `ChildStdio` reads/writes the blocking OS
-//! fd and resolves on first poll (a guest pipe read returns available bytes or
-//! EOF; the cooperative `wait` is what keeps the executor live).
-//! No SIGCHLD / orphan reaping / mio / pidfd on wasi.
-//!
-//! Wiring: in `src/process/mod.rs`, add alongside the unix/windows imp selection:
-//!   #[path = "wasi.rs"] #[cfg(target_os = "wasi")] mod imp;
-//! and add `#[cfg(target_os = "wasi")] use imp::*;` to the imp re-export block.
-//! Also remove `#[cfg(not(target_os = "wasi"))]` from `cfg_process!` (macros/cfg.rs)
-//! and build the wasm target with `RUSTFLAGS="--cfg tokio_unstable"`.
-
-use crate::io::AsyncRead;
-use crate::io::AsyncWrite;
-use crate::io::ReadBuf;
-use crate::process::kill::Kill;
-use crate::process::SpawnedChild;
-
-use std::fmt;
-use std::future::Future;
-use std::io;
-use std::io::Read;
-use std::io::Write;
-use std::os::fd::AsRawFd;
-use std::os::fd::FromRawFd;
-use std::os::fd::IntoRawFd;
-use std::os::fd::OwnedFd;
-use std::os::fd::RawFd;
-use std::pin::Pin;
-use std::process::Child as StdChild;
-use std::process::ExitStatus;
-use std::process::Stdio;
-use std::task::Context;
-use std::task::Poll;
-
-/// No-op orphan queue: wasm32-wasip1 has no SIGCHLD, and the host reaps the
-/// child when `wait()` returns. Kept to satisfy the imp surface.
-#[derive(Debug)]
-pub(crate) struct GlobalOrphanQueue;
-
-impl GlobalOrphanQueue {
-    pub(crate) fn reap_orphans() {}
-}
-
-pub(crate) struct Child {
-    inner: StdChild,
-}
-
-impl fmt::Debug for Child {
-    fn fmt(&self, fmt: &mut fmt::Formatter<'_>) -> fmt::Result {
-        fmt.debug_struct("Child").field("pid", &self.id()).finish()
-    }
-}
-
-pub(crate) fn build_child(mut child: StdChild) -> io::Result<SpawnedChild> {
-    let stdin = child.stdin.take().map(stdio).transpose()?;
-    let stdout = child.stdout.take().map(stdio).transpose()?;
-    let stderr = child.stderr.take().map(stdio).transpose()?;
-    Ok(SpawnedChild {
-        child: Child { inner: child },
-        stdin,
-        stdout,
-        stderr,
-    })
-}
-
-impl Child {
-    pub(crate) fn id(&self) -> u32 {
-        self.inner.id()
-    }
-
-    pub(crate) fn try_wait(&mut self) -> io::Result<Option<ExitStatus>> {
-        self.inner.try_wait()
-    }
-}
-
-impl Kill for Child {
-    fn kill(&mut self) -> io::Result<()> {
-        self.inner.kill()
-    }
-}
-
-impl Future for Child {
-    type Output = io::Result<ExitStatus>;
-
-    fn poll(self: Pin<&mut Self>, cx: &mut Context<'_>) -> Poll<Self::Output> {
-        // Single-threaded VM: the child runs for real in the host. Do NOT block
-        // the only executor thread on the synchronous `wait()` — that starves the
-        // rest of the runtime (the agent submission loop, the concurrent
-        // stdout/stderr drains that `output()` polls alongside this future) and
-        // deadlocks the agent turn. Poll non-blockingly (host_process WNOHANG via
-        // std `try_wait`) and yield until the child exits, like a normal async
-        // runtime reaping a child.
-        match self.get_mut().inner.try_wait() {
-            Ok(Some(status)) => Poll::Ready(Ok(status)),
-            Ok(None) => {
-                // Still running: re-poll on the next runtime tick so other tasks
-                // (and this child's output drains) get to run in between.
-                cx.waker().wake_by_ref();
-                Poll::Pending
-            }
-            Err(e) => Poll::Ready(Err(e)),
-        }
-    }
-}
-
-/// Async-shaped child pipe backed by a blocking OS fd. `poll_*` resolve on the
-/// first poll (single-threaded VM).
-#[derive(Debug)]
-pub(crate) struct ChildStdio {
-    fd: OwnedFd,
-}
-
-impl AsRawFd for ChildStdio {
-    fn as_raw_fd(&self) -> RawFd {
-        self.fd.as_raw_fd()
-    }
-}
-
-impl AsyncRead for ChildStdio {
-    fn poll_read(
-        self: Pin<&mut Self>,
-        cx: &mut Context<'_>,
-        buf: &mut ReadBuf<'_>,
-    ) -> Poll<io::Result<()>> {
-        let me = self.get_mut();
-        let mut file = unsafe { std::fs::File::from_raw_fd(me.fd.as_raw_fd()) };
-        let res = file.read(buf.initialize_unfilled());
-        let _ = file.into_raw_fd(); // don't close the borrowed fd
-        match res {
-            Ok(n) => {
-                buf.advance(n);
-                Poll::Ready(Ok(()))
-            }
-            Err(e) if e.kind() == io::ErrorKind::WouldBlock => {
-                cx.waker().wake_by_ref();
-                Poll::Pending
-            }
-            Err(e) => Poll::Ready(Err(e)),
-        }
-    }
-}
-
-impl AsyncWrite for ChildStdio {
-    fn poll_write(
-        self: Pin<&mut Self>,
-        _cx: &mut Context<'_>,
-        buf: &[u8],
-    ) -> Poll<io::Result<usize>> {
-        let me = self.get_mut();
-        let mut file = unsafe { std::fs::File::from_raw_fd(me.fd.as_raw_fd()) };
-        let res = file.write(buf);
-        let _ = file.into_raw_fd();
-        Poll::Ready(res)
-    }
-
-    fn poll_flush(self: Pin<&mut Self>, _cx: &mut Context<'_>) -> Poll<io::Result<()>> {
-        Poll::Ready(Ok(()))
-    }
-
-    fn poll_shutdown(self: Pin<&mut Self>, _cx: &mut Context<'_>) -> Poll<io::Result<()>> {
-        Poll::Ready(Ok(()))
-    }
-}
-
-pub(crate) fn stdio<T: Into<OwnedFd>>(io: T) -> io::Result<ChildStdio> {
-    let fd = io.into();
-    let file = std::fs::File::from(fd);
-    {
-        use std::os::wasi::fs::FileExt;
-        const FDFLAGS_NONBLOCK: u16 = 1 << 2;
-        file.fdstat_set_flags(FDFLAGS_NONBLOCK)?;
-    }
-    Ok(ChildStdio { fd: file.into() })
-}
-
-pub(crate) fn convert_to_stdio(io: ChildStdio) -> io::Result<Stdio> {
-    // wasi `Stdio` is `From<File>` (not `From<OwnedFd>`); `File` is `From<OwnedFd>`.
-    Ok(Stdio::from(std::fs::File::from(io.fd)))
-}
diff --git a/registry/native/patches/crates/uu_cat/0001-wasi-platform-stub.patch b/registry/native/patches/crates/uu_cat/0001-wasi-platform-stub.patch
deleted file mode 100644
index 9df580c8c..000000000
--- a/registry/native/patches/crates/uu_cat/0001-wasi-platform-stub.patch
+++ /dev/null
@@ -1,12 +0,0 @@
---- a/src/platform/mod.rs
-+++ b/src/platform/mod.rs
-@@ -4,6 +4,9 @@
-
- #[cfg(unix)]
- pub use self::unix::is_unsafe_overwrite;
-+// wasmVM: WASI has no fcntl/lseek — overwrite detection is not possible
-+#[cfg(target_os = "wasi")]
-+pub fn is_unsafe_overwrite<I, O>(_input: &I, _output: &O) -> bool { false }
-
- #[cfg(windows)]
- pub use self::windows::is_unsafe_overwrite;
diff --git a/registry/native/patches/crates/uu_chmod/0001-wasi-compat.patch b/registry/native/patches/crates/uu_chmod/0001-wasi-compat.patch
deleted file mode 100644
index 8e41964b6..000000000
--- a/registry/native/patches/crates/uu_chmod/0001-wasi-compat.patch
+++ /dev/null
@@ -1,140 +0,0 @@
---- a/src/chmod.rs
-+++ b/src/chmod.rs
-@@ -8,16 +8,87 @@
- use clap::{Arg, ArgAction, Command};
- use std::ffi::OsString;
- use std::fs;
-+#[cfg(unix)]
- use std::os::unix::fs::{MetadataExt, PermissionsExt};
- use std::path::{Path, PathBuf};
- use thiserror::Error;
- use uucore::display::Quotable;
- use uucore::error::{ExitCode, UError, UResult, USimpleError, UUsageError, set_exit_code};
- use uucore::fs::display_permissions_unix;
-+#[cfg(unix)]
- use uucore::libc::mode_t;
-+#[cfg(target_os = "wasi")]
-+use uucore::fs::mode_t;
- use uucore::mode;
- use uucore::perms::{TraverseSymlinks, configure_symlink_and_recursion};
- 
-+// wasmVM: WASI compatibility — MetadataExt lacks mode(), Permissions lacks from_mode()
-+#[cfg(target_os = "wasi")]
-+mod wasi_compat {
-+    use std::fs;
-+    use std::path::Path;
-+
-+    mod host_fs {
-+        #[link(wasm_import_module = "host_fs")]
-+        unsafe extern "C" {
-+            pub fn chmod(fd: u32, path_ptr: *const u8, path_len: u32, mode: u32) -> u32;
-+            pub fn path_mode(
-+                fd: u32,
-+                path_ptr: *const u8,
-+                path_len: u32,
-+                follow_symlinks: u32,
-+            ) -> u32;
-+        }
-+    }
-+
-+    fn fallback_mode(meta: &fs::Metadata) -> u32 {
-+        let ft = meta.file_type();
-+        let base = if ft.is_dir() { 0o755 } else { 0o644 };
-+        if meta.permissions().readonly() {
-+            base & !0o222
-+        } else {
-+            base
-+        }
-+    }
-+
-+    pub fn mode_for_path(path: &Path, meta: &fs::Metadata, follow_symlinks: bool) -> u32 {
-+        let Some(path_str) = path.to_str() else {
-+            return fallback_mode(meta);
-+        };
-+        let mode = unsafe {
-+            host_fs::path_mode(
-+                3,
-+                path_str.as_ptr(),
-+                path_str.len() as u32,
-+                if follow_symlinks { 1 } else { 0 },
-+            )
-+        };
-+        if mode == 0 {
-+            fallback_mode(meta)
-+        } else {
-+            mode & 0o7777
-+        }
-+    }
-+
-+    /// Set POSIX-style permissions on a file (best-effort on WASI).
-+    pub fn set_permissions_from_mode(path: &Path, mode: u32) -> std::io::Result<()> {
-+        use std::io::{Error, ErrorKind};
-+
-+        let bytes = path
-+            .to_str()
-+            .ok_or_else(|| Error::new(ErrorKind::InvalidInput, "path is not valid UTF-8"))?
-+            .as_bytes();
-+        let status = unsafe { host_fs::chmod(3, bytes.as_ptr(), bytes.len() as u32, mode) };
-+        if status == 0 {
-+            return Ok(());
-+        }
-+
-+        let mut perms = fs::metadata(path)?.permissions();
-+        perms.set_readonly(mode & 0o222 == 0);
-+        fs::set_permissions(path, perms)
-+    }
-+}
-+
- #[cfg(all(unix, not(target_os = "redox")))]
- use uucore::safe_traversal::{DirFd, SymlinkBehavior};
- use uucore::{format_usage, show, show_error};
-@@ -121,7 +192,16 @@
-     let preserve_root = matches.get_flag(options::PRESERVE_ROOT);
-     let fmode = match matches.get_one::<OsString>(options::REFERENCE) {
-         Some(fref) => match fs::metadata(fref) {
--            Ok(meta) => Some(meta.mode() & 0o7777),
-+            Ok(meta) => {
-+                #[cfg(target_os = "wasi")]
-+                {
-+                    Some(wasi_compat::mode_for_path(Path::new(fref), &meta, true))
-+                }
-+                #[cfg(not(target_os = "wasi"))]
-+                {
-+                    Some(meta.mode() & 0o7777)
-+                }
-+            }
-             Err(_) => {
-                 return Err(ChmodError::CannotStat(fref.into()).into());
-             }
-@@ -623,7 +703,16 @@
-         let metadata = get_metadata(file, dereference);
- 
-         let fperm = match metadata {
--            Ok(meta) => meta.mode() & 0o7777,
-+            Ok(meta) => {
-+                #[cfg(target_os = "wasi")]
-+                {
-+                    wasi_compat::mode_for_path(file, &meta, dereference)
-+                }
-+                #[cfg(not(target_os = "wasi"))]
-+                {
-+                    meta.mode() & 0o7777
-+                }
-+            }
-             Err(err) => {
-                 // Handle dangling symlinks or other errors
-                 return if file.is_symlink() && !dereference {
-@@ -683,7 +772,12 @@
-             // Use the helper method for consistent reporting
-             self.report_permission_change(file, fperm, mode);
-             Ok(())
--        } else if let Err(err) = fs::set_permissions(file, fs::Permissions::from_mode(mode)) {
-+        } else if let Err(err) = {
-+            #[cfg(unix)]
-+            { fs::set_permissions(file, fs::Permissions::from_mode(mode)) }
-+            #[cfg(target_os = "wasi")]
-+            { wasi_compat::set_permissions_from_mode(file, mode) }
-+        } {
-             if !self.quiet {
-                 show_error!("{err}");
-             }
diff --git a/registry/native/patches/crates/uu_cp/0001-wasi-symlink.patch b/registry/native/patches/crates/uu_cp/0001-wasi-symlink.patch
deleted file mode 100644
index 5b9c97043..000000000
--- a/registry/native/patches/crates/uu_cp/0001-wasi-symlink.patch
+++ /dev/null
@@ -1,30 +0,0 @@
---- a/src/cp.rs
-+++ b/src/cp.rs
-@@ -1898,7 +1898,7 @@
-     dest: &Path,
-     symlinked_files: &mut HashSet<FileInformation>,
- ) -> CopyResult<()> {
--    #[cfg(not(windows))]
-+    #[cfg(unix)]
-     {
-         std::os::unix::fs::symlink(source, dest).map_err(|e| {
-             CpError::IoErrContext(
-@@ -1915,6 +1915,18 @@
-             CpError::IoErrContext(
-                 e,
-                 translate!("cp-error-cannot-create-symlink",
-+                           "dest" => get_filename(dest).unwrap_or("?").quote(),
-+                           "source" => get_filename(source).unwrap_or("?").quote()),
-+            )
-+        })?;
-+    }
-+    // wasmVM: WASI symlink support via std::fs::soft_link (WASI API)
-+    #[cfg(target_os = "wasi")]
-+    {
-+        std::fs::soft_link(source, dest).map_err(|e| {
-+            CpError::IoErrContext(
-+                e,
-+                translate!("cp-error-cannot-create-symlink",
-                            "dest" => get_filename(dest).unwrap_or("?").quote(),
-                            "source" => get_filename(source).unwrap_or("?").quote()),
-             )
diff --git a/registry/native/patches/crates/uu_dd/0001-wasi-compat.patch b/registry/native/patches/crates/uu_dd/0001-wasi-compat.patch
deleted file mode 100644
index e178582bf..000000000
--- a/registry/native/patches/crates/uu_dd/0001-wasi-compat.patch
+++ /dev/null
@@ -1,20 +0,0 @@
---- a/src/dd.rs
-+++ b/src/dd.rs
-@@ -358,7 +358,7 @@
- impl<'a> Input<'a> {
-     /// Instantiate this struct with stdin as a source.
-     fn new_stdin(settings: &'a Settings) -> UResult<Self> {
--        #[cfg(not(unix))]
-+        #[cfg(windows)]
-         let mut src = {
-             let f = File::from(io::stdin().as_handle().try_clone_to_owned()?);
-             let is_file = if let Ok(metadata) = f.metadata() {
-@@ -379,6 +379,8 @@
-         };
-         #[cfg(unix)]
-         let mut src = Source::stdin_as_file();
-+        #[cfg(target_os = "wasi")]
-+        let mut src = Source::Stdin(io::stdin());
-         #[cfg(unix)]
-         if let Source::StdinFile(f) = &src {
-             if settings.iflags.directory && !f.metadata()?.is_dir() {
diff --git a/registry/native/patches/crates/uu_ln/0001-wasi-symlink.patch b/registry/native/patches/crates/uu_ln/0001-wasi-symlink.patch
deleted file mode 100644
index 56bf77b5a..000000000
--- a/registry/native/patches/crates/uu_ln/0001-wasi-symlink.patch
+++ /dev/null
@@ -1,13 +0,0 @@
---- a/src/ln.rs
-+++ b/src/ln.rs
-@@ -22,6 +22,9 @@
- #[cfg(any(unix, target_os = "redox"))]
- use std::os::unix::fs::symlink;
- #[cfg(windows)]
- use std::os::windows::fs::{symlink_dir, symlink_file};
-+#[cfg(target_os = "wasi")]
-+#[allow(deprecated)]
-+use std::fs::soft_link as symlink;
- use std::path::{Path, PathBuf};
- use uucore::backup_control::{self, BackupMode};
- use uucore::fs::{MissingHandling, ResolveMode, canonicalize};
diff --git a/registry/native/patches/crates/uu_logname/0001-wasi-compat.patch b/registry/native/patches/crates/uu_logname/0001-wasi-compat.patch
deleted file mode 100644
index 1fb1ad55b..000000000
--- a/registry/native/patches/crates/uu_logname/0001-wasi-compat.patch
+++ /dev/null
@@ -1,33 +0,0 @@
---- a/src/logname.rs
-+++ b/src/logname.rs
-@@ -6,11 +6,14 @@
- // spell-checker:ignore (ToDO) getlogin userlogin
-
- use clap::Command;
--use std::ffi::CStr;
- use std::io::{Write, stdout};
- use uucore::translate;
- use uucore::{error::UResult, show_error};
-
-+#[cfg(not(target_os = "wasi"))]
-+use std::ffi::CStr;
-+
-+#[cfg(not(target_os = "wasi"))]
- fn get_userlogin() -> Option<String> {
-     unsafe {
-         let login: *const libc::c_char = libc::getlogin();
-@@ -22,6 +25,14 @@
-     }
- }
-
-+#[cfg(target_os = "wasi")]
-+fn get_userlogin() -> Option<String> {
-+    std::env::var("LOGNAME")
-+        .or_else(|_| std::env::var("USER"))
-+        .ok()
-+        .filter(|s| !s.is_empty())
-+}
-+
- #[uucore::main(no_signals)]
- pub fn uumain(args: impl uucore::Args) -> UResult<()> {
-     let _ = uucore::clap_localization::handle_clap_result(uu_app(), args)?;
diff --git a/registry/native/patches/crates/uu_ls/0001-wasi-host-fs-mode-display.patch b/registry/native/patches/crates/uu_ls/0001-wasi-host-fs-mode-display.patch
deleted file mode 100644
index ff68f349e..000000000
--- a/registry/native/patches/crates/uu_ls/0001-wasi-host-fs-mode-display.patch
+++ /dev/null
@@ -1,89 +0,0 @@
---- a/src/ls.rs
-+++ b/src/ls.rs
-@@ -64,7 +64,7 @@
-     format::human::{SizeFormat, human_readable},
-     format_usage,
-     fs::FileInformation,
--    fs::display_permissions,
-+    fs::{display_permissions, display_permissions_unix},
-     fsext::{MetadataTimeField, metadata_get_time},
-     line_ending::LineEnding,
-     os_str_as_bytes_lossy,
-@@ -77,6 +77,60 @@
-     translate,
-     version_cmp::version_cmp,
- };
-+#[cfg(target_os = "wasi")]
-+use uucore::fs::mode_t;
-+
-+#[cfg(target_os = "wasi")]
-+mod wasi_host_fs {
-+    use std::env;
-+
-+    use super::{Metadata, Path};
-+
-+    mod host_fs {
-+        #[link(wasm_import_module = "host_fs")]
-+        unsafe extern "C" {
-+            pub fn path_mode(
-+                fd: u32,
-+                path_ptr: *const u8,
-+                path_len: u32,
-+                follow_symlinks: u32,
-+            ) -> u32;
-+        }
-+    }
-+
-+    fn fallback_mode(metadata: &Metadata) -> u32 {
-+        if metadata.is_dir() { 0o040755 } else { 0o100644 }
-+    }
-+
-+    fn raw_mode_for_path(path: &Path, follow_symlinks: bool) -> u32 {
-+        let Some(path_str) = path.to_str() else {
-+            return 0;
-+        };
-+        unsafe {
-+            host_fs::path_mode(
-+                3,
-+                path_str.as_ptr(),
-+                path_str.len() as u32,
-+                if follow_symlinks { 1 } else { 0 },
-+            )
-+        }
-+    }
-+
-+    pub fn mode_for_path(path: &Path, metadata: &Metadata, follow_symlinks: bool) -> u32 {
-+        let mode = raw_mode_for_path(path, follow_symlinks);
-+        if mode != 0 {
-+            mode
-+        } else if path.is_relative() {
-+            env::current_dir()
-+                .ok()
-+                .map(|cwd| raw_mode_for_path(&cwd.join(path), follow_symlinks))
-+                .filter(|mode| *mode != 0)
-+                .unwrap_or_else(|| fallback_mode(metadata))
-+        } else {
-+            fallback_mode(metadata)
-+        }
-+    }
-+}
- 
- mod dired;
- use dired::{DiredOutput, is_dired_arg_present};
-@@ -2982,7 +3036,15 @@
-         let is_acl_set = false;
-         #[cfg(all(unix, not(any(target_os = "android", target_os = "macos"))))]
-         let is_acl_set = has_acl(item.path());
--        output_display.extend(display_permissions(md, true).as_bytes());
-+        #[cfg(target_os = "wasi")]
-+        {
-+            let mode = wasi_host_fs::mode_for_path(item.path(), md, item.must_dereference);
-+            output_display.extend(display_permissions_unix(mode as mode_t, true).as_bytes());
-+        }
-+        #[cfg(not(target_os = "wasi"))]
-+        {
-+            output_display.extend(display_permissions(md, true).as_bytes());
-+        }
-         if item.security_context(config).len() > 1 {
-             // GNU `ls` uses a "." character to indicate a file with a security context,
-             // but not other alternate access method.
diff --git a/registry/native/patches/crates/uu_mktemp/0001-wasi-compat.patch b/registry/native/patches/crates/uu_mktemp/0001-wasi-compat.patch
deleted file mode 100644
index b566e0730..000000000
--- a/registry/native/patches/crates/uu_mktemp/0001-wasi-compat.patch
+++ /dev/null
@@ -1,11 +0,0 @@
---- a/src/mktemp.rs
-+++ b/src/mktemp.rs
-@@ -550,7 +550,7 @@
-     // The directory is created with these permission at creation time, using mkdir(3) syscall.
-     // This is not relevant on Windows systems. See: https://docs.rs/tempfile/latest/tempfile/#security
-     // `fs` is not imported on Windows anyways.
--    #[cfg(not(windows))]
-+    #[cfg(unix)]
-     builder.permissions(fs::Permissions::from_mode(0o700));
-
-     match builder.tempdir_in(dir) {
diff --git a/registry/native/patches/crates/uu_pathchk/0001-wasi-compat.patch b/registry/native/patches/crates/uu_pathchk/0001-wasi-compat.patch
deleted file mode 100644
index 7da5b53c7..000000000
--- a/registry/native/patches/crates/uu_pathchk/0001-wasi-compat.patch
+++ /dev/null
@@ -1,16 +0,0 @@
---- a/src/pathchk.rs
-+++ b/src/pathchk.rs
-@@ -14,6 +14,13 @@
- use uucore::format_usage;
- use uucore::translate;
-
-+// WASI libc does not define PATH_MAX or FILENAME_MAX.
-+// Provide reasonable defaults matching common POSIX values.
-+#[cfg(target_os = "wasi")]
-+mod libc {
-+    pub const PATH_MAX: usize = 4096;
-+    pub const FILENAME_MAX: usize = 255;
-+}
- // operating mode
- enum Mode {
-     Default, // use filesystem to determine information and limits
diff --git a/registry/native/patches/crates/uu_sort/0001-wasi-serial-sort.patch b/registry/native/patches/crates/uu_sort/0001-wasi-serial-sort.patch
deleted file mode 100644
index 6621fb0c3..000000000
--- a/registry/native/patches/crates/uu_sort/0001-wasi-serial-sort.patch
+++ /dev/null
@@ -1,114 +0,0 @@
---- a/src/sort.rs
-+++ b/src/sort.rs
-@@ -2112,10 +2112,13 @@
-             .get_one::<String>(options::PARALLEL)
-             .map_or_else(|| "0".to_string(), String::from);
--        let num_threads = match settings.threads.parse::<usize>() {
--            Ok(0) | Err(_) => std::thread::available_parallelism().map_or(1, NonZero::get),
--            Ok(n) => n,
--        };
--        let _ = rayon::ThreadPoolBuilder::new()
--            .num_threads(num_threads)
--            .build_global();
-+        #[cfg(not(target_os = "wasi"))]
-+        {
-+            let num_threads = match settings.threads.parse::<usize>() {
-+                Ok(0) | Err(_) => std::thread::available_parallelism().map_or(1, NonZero::get),
-+                Ok(n) => n,
-+            };
-+            let _ = rayon::ThreadPoolBuilder::new()
-+                .num_threads(num_threads)
-+                .build_global();
-+        }
-     }
-@@ -2591,10 +2591,22 @@
- }
- 
- fn sort_by<'a>(unsorted: &mut Vec<Line<'a>>, settings: &GlobalSettings, line_data: &LineData<'a>) {
--    if settings.stable || settings.unique {
--        unsorted.par_sort_by(|a, b| compare_by(a, b, settings, line_data, line_data));
--    } else {
--        unsorted.par_sort_unstable_by(|a, b| compare_by(a, b, settings, line_data, line_data));
-+    #[cfg(target_os = "wasi")]
-+    {
-+        if settings.stable || settings.unique {
-+            unsorted.sort_by(|a, b| compare_by(a, b, settings, line_data, line_data));
-+        } else {
-+            unsorted.sort_unstable_by(|a, b| compare_by(a, b, settings, line_data, line_data));
-+        }
-+    }
-+
-+    #[cfg(not(target_os = "wasi"))]
-+    {
-+        if settings.stable || settings.unique {
-+            unsorted.par_sort_by(|a, b| compare_by(a, b, settings, line_data, line_data));
-+        } else {
-+            unsorted.par_sort_unstable_by(|a, b| compare_by(a, b, settings, line_data, line_data));
-+        }
-     }
- }
- 
---- a/src/ext_sort.rs
-+++ b/src/ext_sort.rs
-@@ -50,9 +50,17 @@ pub fn ext_sort(
-+    #[cfg(target_os = "wasi")]
-+    let (sorted_sender, sorted_receiver) = std::sync::mpsc::sync_channel(2);
-+
-+    #[cfg(not(target_os = "wasi"))]
-     let (sorted_sender, sorted_receiver) = std::sync::mpsc::sync_channel(1);
-+    #[cfg(not(target_os = "wasi"))]
-     let (recycled_sender, recycled_receiver) = std::sync::mpsc::sync_channel(1);
-+    #[cfg(not(target_os = "wasi"))]
-     thread::spawn({
-         let settings = settings.clone();
-         move || sorter(&recycled_receiver, &sorted_sender, &settings)
-     });
-+    #[cfg(target_os = "wasi")]
-+    let recycled_sender = sorted_sender;
- 
-     // Test if compression program exists and works, disable if not
-     let mut effective_settings = settings.clone();
-@@ -213,9 +222,9 @@ fn read_write_loop<I: WriteableTmpFile>(
-             drop(sender);
-             // We have already read the whole input. Since we are in our first two reads,
-             // this means that we can fit the whole input into memory. Bypass writing below and
-             // handle this case in a more straightforward way.
--            return Ok(if let Ok(first_chunk) = receiver.recv() {
--                if let Ok(second_chunk) = receiver.recv() {
-+            return Ok(if let Some(first_chunk) = receive_sorted_chunk(receiver, settings) {
-+                if let Some(second_chunk) = receive_sorted_chunk(receiver, settings) {
-                     ReadResult::SortedTwoChunks([first_chunk, second_chunk])
-                 } else {
-                     ReadResult::SortedSingleChunk(first_chunk)
-@@ -232,7 +241,7 @@ fn read_write_loop<I: WriteableTmpFile>(
- 
-     let mut tmp_files = vec![];
-     loop {
--        let Ok(chunk) = receiver.recv() else {
-+        let Some(chunk) = receive_sorted_chunk(receiver, settings) else {
-             return Ok(ReadResult::WroteChunksToFile { tmp_files });
-         };
- 
-@@ -262,6 +271,22 @@ fn read_write_loop<I: WriteableTmpFile>(
-     }
- }
- 
-+#[cfg(target_os = "wasi")]
-+fn receive_sorted_chunk(receiver: &Receiver<Chunk>, settings: &GlobalSettings) -> Option<Chunk> {
-+    let Ok(mut chunk) = receiver.recv() else {
-+        return None;
-+    };
-+    chunk.with_dependent_mut(|_, contents| {
-+        sort_by(&mut contents.lines, settings, &contents.line_data);
-+    });
-+    Some(chunk)
-+}
-+
-+#[cfg(not(target_os = "wasi"))]
-+fn receive_sorted_chunk(receiver: &Receiver<Chunk>, _settings: &GlobalSettings) -> Option<Chunk> {
-+    receiver.recv().ok()
-+}
-+
- /// Write the lines in `chunk` to `file`, separated by `separator`.
- /// `compress_prog` is used to optionally compress file contents.
- fn write<I: WriteableTmpFile>(
diff --git a/registry/native/patches/crates/uu_sort/0002-soft-skip-unsupported-signal-registration.patch b/registry/native/patches/crates/uu_sort/0002-soft-skip-unsupported-signal-registration.patch
deleted file mode 100644
index e2a28c5db..000000000
--- a/registry/native/patches/crates/uu_sort/0002-soft-skip-unsupported-signal-registration.patch
+++ /dev/null
@@ -1,28 +0,0 @@
---- a/src/tmp_dir.rs
-+++ b/src/tmp_dir.rs
-@@ -5,6 +5,7 @@
- use std::sync::atomic::{AtomicBool, Ordering};
- use std::{
-     fs::File,
-+    io::ErrorKind,
-     path::{Path, PathBuf},
-     sync::{Arc, LazyLock, Mutex},
- };
-@@ -91,6 +92,17 @@
- 
-         std::process::exit(2)
-     }) {
-+        // Platforms without signal delivery report ErrorKind::Unsupported from the
-+        // ctrlc backend. The handler only provides best-effort temp directory cleanup
-+        // on SIGINT, which can never be delivered on such platforms, so skip
-+        // installation instead of failing the sort. TempDir's Drop still removes the
-+        // directory on normal exit. HANDLER_INSTALLED stays true so later spills do
-+        // not retry a registration that cannot succeed.
-+        if let ctrlc::Error::System(error) = &e {
-+            if error.kind() == ErrorKind::Unsupported {
-+                return Ok(());
-+            }
-+        }
-         HANDLER_INSTALLED.store(false, Ordering::Release);
-         return Err(USimpleError::new(
-             2,
diff --git a/registry/native/patches/crates/uu_split/0001-wasi-compat.patch b/registry/native/patches/crates/uu_split/0001-wasi-compat.patch
deleted file mode 100644
index 2a87890d5..000000000
--- a/registry/native/patches/crates/uu_split/0001-wasi-compat.patch
+++ /dev/null
@@ -1,90 +0,0 @@
---- a/src/platform/mod.rs
-+++ b/src/platform/mod.rs
-@@ -1,19 +1,27 @@
- // This file is part of the uutils coreutils package.
- //
- // For the full copyright and license information, please view the LICENSE
- // file that was distributed with this source code.
- #[cfg(unix)]
- pub use self::unix::instantiate_current_writer;
- #[cfg(unix)]
- pub use self::unix::paths_refer_to_same_file;
-
- #[cfg(windows)]
- pub use self::windows::instantiate_current_writer;
- #[cfg(windows)]
- pub use self::windows::paths_refer_to_same_file;
-
-+#[cfg(target_os = "wasi")]
-+pub use self::wasi::instantiate_current_writer;
-+#[cfg(target_os = "wasi")]
-+pub use self::wasi::paths_refer_to_same_file;
-+
- #[cfg(unix)]
- mod unix;
-
- #[cfg(windows)]
- mod windows;
-+
-+#[cfg(target_os = "wasi")]
-+mod wasi;
---- /dev/null
-+++ b/src/platform/wasi.rs
-@@ -0,0 +1,57 @@
-+// WASI platform support for uu_split.
-+// File writing works natively. --filter (shell process spawning) is not supported.
-+
-+use std::ffi::OsStr;
-+use std::io::{BufWriter, Error, ErrorKind, Result, Write};
-+use std::path::Path;
-+use uucore::fs;
-+use uucore::fs::FileInformation;
-+use uucore::translate;
-+
-+pub fn instantiate_current_writer(
-+    filter: Option<&str>,
-+    filename: &str,
-+    is_new: bool,
-+) -> Result<BufWriter<Box<dyn Write>>> {
-+    if filter.is_some() {
-+        return Err(Error::new(
-+            ErrorKind::Unsupported,
-+            "split: --filter is not supported on this platform",
-+        ));
-+    }
-+
-+    let file = if is_new {
-+        std::fs::OpenOptions::new()
-+            .write(true)
-+            .create(true)
-+            .truncate(true)
-+            .open(Path::new(&filename))
-+            .map_err(|e| match e.kind() {
-+                ErrorKind::IsADirectory => Error::other(
-+                    translate!("split-error-is-a-directory", "dir" => filename),
-+                ),
-+                _ => Error::other(
-+                    translate!("split-error-unable-to-open-file", "file" => filename),
-+                ),
-+            })?
-+    } else {
-+        std::fs::OpenOptions::new()
-+            .append(true)
-+            .open(Path::new(&filename))
-+            .map_err(|_| {
-+                Error::other(
-+                    translate!("split-error-unable-to-reopen-file", "file" => filename),
-+                )
-+            })?
-+    };
-+    Ok(BufWriter::new(Box::new(file) as Box<dyn Write>))
-+}
-+
-+pub fn paths_refer_to_same_file(p1: &OsStr, p2: &OsStr) -> bool {
-+    let p1 = if p1 == "-" {
-+        FileInformation::from_file(&std::io::stdin())
-+    } else {
-+        FileInformation::from_path(Path::new(p1), true)
-+    };
-+    fs::infos_refer_to_same_file(p1, FileInformation::from_path(Path::new(p2), true))
-+}
diff --git a/registry/native/patches/crates/uu_stat/0001-wasi-metadata-compat.patch b/registry/native/patches/crates/uu_stat/0001-wasi-metadata-compat.patch
deleted file mode 100644
index fc4a10e43..000000000
--- a/registry/native/patches/crates/uu_stat/0001-wasi-metadata-compat.patch
+++ /dev/null
@@ -1,165 +0,0 @@
---- a/src/stat.rs
-+++ b/src/stat.rs
-@@ -4,17 +4,23 @@
- // file that was distributed with this source code.
- // spell-checker:ignore datetime
- 
-+// wasmVM: Enable wasi_ext for MetadataExt/FileTypeExt on WASI
-+#![cfg_attr(target_os = "wasi", feature(wasi_ext))]
-+
- use uucore::error::{UError, UResult, USimpleError};
- use uucore::translate;
- 
- use clap::builder::ValueParser;
- use uucore::display::Quotable;
--use uucore::fs::{display_permissions, major, minor};
-+use uucore::fs::{display_permissions_unix, major, minor};
- use uucore::fsext::{
-     FsMeta, MetadataTimeField, StatFs, metadata_get_time, pretty_filetype, pretty_fstype,
-     read_fs_list, statfs,
- };
-+#[cfg(unix)]
- use uucore::libc::mode_t;
-+#[cfg(target_os = "wasi")]
-+use uucore::fs::mode_t;
- use uucore::{entries, format_usage, show_error, show_warning};
- 
- use clap::{Arg, ArgAction, ArgMatches, Command};
-@@ -23,10 +29,85 @@
- use std::ffi::{OsStr, OsString};
- use std::fs::{FileType, Metadata};
- use std::io::Write;
-+#[cfg(unix)]
- use std::os::unix::fs::{FileTypeExt, MetadataExt};
-+#[cfg(target_os = "wasi")]
-+use std::os::wasi::fs::{FileTypeExt, MetadataExt as WasiMetadataExt};
- use std::path::Path;
- use std::{env, fs};
- 
-+// wasmVM: WASI compatibility — provide missing MetadataExt methods
-+#[cfg(target_os = "wasi")]
-+mod wasi_stat_compat {
-+    use std::fs::{FileType, Metadata};
-+
-+    pub trait MetadataExt {
-+        fn mode(&self) -> u32;
-+        fn uid(&self) -> u32;
-+        fn gid(&self) -> u32;
-+        fn blocks(&self) -> u64;
-+        fn blksize(&self) -> u64;
-+        fn rdev(&self) -> u64;
-+    }
-+    impl MetadataExt for Metadata {
-+        fn mode(&self) -> u32 {
-+            let ft = self.file_type();
-+            let base = if ft.is_dir() { 0o40755 } else if ft.is_symlink() { 0o120777 } else { 0o100644 };
-+            if self.permissions().readonly() { base & !0o222 } else { base }
-+        }
-+        fn uid(&self) -> u32 { 0 }
-+        fn gid(&self) -> u32 { 0 }
-+        fn blocks(&self) -> u64 { (self.len() + 511) / 512 }
-+        fn blksize(&self) -> u64 { 4096 }
-+        fn rdev(&self) -> u64 { 0 }
-+    }
-+
-+    pub trait FileTypeIsExt {
-+        fn is_fifo(&self) -> bool;
-+    }
-+    impl FileTypeIsExt for FileType {
-+        fn is_fifo(&self) -> bool { false }
-+    }
-+}
-+#[cfg(target_os = "wasi")]
-+use wasi_stat_compat::{MetadataExt, FileTypeIsExt};
-+
-+#[cfg(target_os = "wasi")]
-+mod wasi_host_fs {
-+    use super::{Metadata, MetadataExt, Path};
-+
-+    mod host_fs {
-+        #[link(wasm_import_module = "host_fs")]
-+        unsafe extern "C" {
-+            pub fn path_mode(
-+                fd: u32,
-+                path_ptr: *const u8,
-+                path_len: u32,
-+                follow_symlinks: u32,
-+            ) -> u32;
-+        }
-+    }
-+
-+    pub fn mode_for_path(path: &Path, meta: &Metadata, follow_symlinks: bool) -> u32 {
-+        let Some(path_str) = path.to_str() else {
-+            return meta.mode();
-+        };
-+        let mode = unsafe {
-+            host_fs::path_mode(
-+                3,
-+                path_str.as_ptr(),
-+                path_str.len() as u32,
-+                if follow_symlinks { 1 } else { 0 },
-+            )
-+        };
-+        if mode == 0 {
-+            meta.mode()
-+        } else {
-+            mode
-+        }
-+    }
-+}
-+
- use thiserror::Error;
- use uucore::time::{FormatSystemTimeFallback, format_system_time, system_time_to_sec};
- 
-@@ -1032,6 +1113,7 @@
-         display_name: &str,
-         file: &OsString,
-         file_type: FileType,
-+        effective_mode: u32,
-         from_user: bool,
-         #[cfg(all(feature = "selinux", any(target_os = "linux", target_os = "android")))]
-         follow_symbolic_links: bool,
-@@ -1050,9 +1132,9 @@
-             } => {
-                 let output = match format {
-                     // access rights in octal
--                    'a' => OutputType::UnsignedOct(0o7777 & meta.mode()),
-+                    'a' => OutputType::UnsignedOct(0o7777 & effective_mode),
-                     // access rights in human readable form
--                    'A' => OutputType::Str(display_permissions(meta, true)),
-+                    'A' => OutputType::Str(display_permissions_unix(effective_mode as mode_t, true)),
-                     // number of blocks allocated (see %B)
-                     'b' => OutputType::Unsigned(meta.blocks()),
- 
-@@ -1096,9 +1178,9 @@
-                     // device number in hex
-                     'D' => OutputType::UnsignedHex(meta.dev()),
-                     // raw mode in hex
--                    'f' => OutputType::UnsignedHex(meta.mode() as u64),
-+                    'f' => OutputType::UnsignedHex(effective_mode as u64),
-                     // file type
--                    'F' => OutputType::Str(pretty_filetype(meta.mode() as mode_t, meta.len())),
-+                    'F' => OutputType::Str(pretty_filetype(effective_mode as mode_t, meta.len())),
-                     // group ID of owner
-                     'g' => OutputType::Unsigned(meta.gid() as u64),
-                     // group name of owner
-@@ -1234,6 +1316,11 @@
-             match result {
-                 Ok(meta) => {
-                     let file_type = meta.file_type();
-+                    #[cfg(target_os = "wasi")]
-+                    let effective_mode =
-+                        wasi_host_fs::mode_for_path(Path::new(&file), &meta, follow_symbolic_links);
-+                    #[cfg(not(target_os = "wasi"))]
-+                    let effective_mode = meta.mode();
-                     let tokens = if self.from_user
-                         || !(file_type.is_char_device() || file_type.is_block_device())
-                     {
-@@ -1249,6 +1336,7 @@
-                             &display_name,
-                             &file,
-                             file_type,
-+                            effective_mode,
-                             self.from_user,
-                             follow_symbolic_links,
-                         ) {
diff --git a/registry/native/patches/crates/uu_tac/0001-wasi-compat.patch b/registry/native/patches/crates/uu_tac/0001-wasi-compat.patch
deleted file mode 100644
index 7653c41b0..000000000
--- a/registry/native/patches/crates/uu_tac/0001-wasi-compat.patch
+++ /dev/null
@@ -1,28 +0,0 @@
---- a/src/tac.rs
-+++ b/src/tac.rs
-@@ -418,10 +418,18 @@
-
- fn try_mmap_stdin() -> Option<Mmap> {
--    // SAFETY: If the file is truncated while we map it, SIGBUS will be raised
--    // and our process will be terminated, thus preventing access of invalid memory.
--    let mmap = unsafe { Mmap::map(&stdin()).ok()? };
--    // On Windows, mmap on a pipe handle can "succeed" but return 0 bytes
--    // (the file size of a pipe is reported as 0). When that happens, return
--    // None so we fall through to buffer_stdin() which reads the pipe properly.
--    if mmap.is_empty() { None } else { Some(mmap) }
-+    // WASI: stdin is not mmap-able — fall through to buffer_stdin().
-+    #[cfg(target_os = "wasi")]
-+    {
-+        None
-+    }
-+    #[cfg(not(target_os = "wasi"))]
-+    {
-+        // SAFETY: If the file is truncated while we map it, SIGBUS will be raised
-+        // and our process will be terminated, thus preventing access of invalid memory.
-+        let mmap = unsafe { Mmap::map(&stdin()).ok()? };
-+        // On Windows, mmap on a pipe handle can "succeed" but return 0 bytes
-+        // (the file size of a pipe is reported as 0). When that happens, return
-+        // None so we fall through to buffer_stdin() which reads the pipe properly.
-+        if mmap.is_empty() { None } else { Some(mmap) }
-+    }
- }
diff --git a/registry/native/patches/crates/uu_tail/0001-wasi-compat.patch b/registry/native/patches/crates/uu_tail/0001-wasi-compat.patch
deleted file mode 100644
index 7264250f5..000000000
--- a/registry/native/patches/crates/uu_tail/0001-wasi-compat.patch
+++ /dev/null
@@ -1,61 +0,0 @@
---- a/src/platform/mod.rs
-+++ b/src/platform/mod.rs
-@@ -19,3 +19,25 @@
-
- #[cfg(windows)]
- mod windows;
-+
-+// wasmVM: WASI stubs — no process signals or PID checks available
-+#[cfg(target_os = "wasi")]
-+pub type Pid = i32;
-+
-+#[cfg(target_os = "wasi")]
-+pub struct ProcessChecker {
-+    _pid: Pid,
-+}
-+
-+#[cfg(target_os = "wasi")]
-+impl ProcessChecker {
-+    pub fn new(pid: Pid) -> Self {
-+        Self { _pid: pid }
-+    }
-+    pub fn is_dead(&self) -> bool {
-+        false
-+    }
-+}
-+
-+#[cfg(target_os = "wasi")]
-+pub fn supports_pid_checks(_pid: Pid) -> bool { false }
---- a/src/text.rs
-+++ b/src/text.rs
-@@ -18,3 +18,5 @@
- pub const BACKEND: &str = "kqueue";
- #[cfg(target_os = "windows")]
- pub const BACKEND: &str = "ReadDirectoryChanges";
-+#[cfg(target_os = "wasi")]
-+pub const BACKEND: &str = "polling";
---- a/src/args.rs
-+++ b/src/args.rs
-@@ -447,6 +447,8 @@
-     let polling_help = translate!("tail-help-polling-unix");
-     #[cfg(target_os = "windows")]
-     let polling_help = translate!("tail-help-polling-windows");
-+    #[cfg(target_os = "wasi")]
-+    let polling_help = translate!("tail-help-polling-unix");
-
-     Command::new(uucore::util_name())
-         .version(uucore::crate_version!())
---- a/src/paths.rs
-+++ b/src/paths.rs
-@@ -195,6 +195,11 @@
-             //     }
-             // }
-             false
-+        }
-+        #[cfg(not(any(unix, windows)))]
-+        {
-+            // wasmVM: WASI fallback — no file identity comparison
-+            false
-         }
-     }
- }
diff --git a/registry/native/patches/crates/uu_touch/0001-wasi-compat.patch b/registry/native/patches/crates/uu_touch/0001-wasi-compat.patch
deleted file mode 100644
index b1e0d67ba..000000000
--- a/registry/native/patches/crates/uu_touch/0001-wasi-compat.patch
+++ /dev/null
@@ -1,13 +0,0 @@
---- a/src/touch.rs
-+++ b/src/touch.rs
-@@ -826,6 +826,10 @@
-     #[cfg(target_os = "android")]
-     {
-         Ok(PathBuf::from("/proc/self/fd/1"))
-+    }
-+    #[cfg(target_os = "wasi")]
-+    {
-+        Ok(PathBuf::from("/dev/stdout"))
-     }
-     #[cfg(windows)]
-     {
diff --git a/registry/native/patches/crates/uu_tsort/0001-wasi-compat.patch b/registry/native/patches/crates/uu_tsort/0001-wasi-compat.patch
deleted file mode 100644
index 175a7f78e..000000000
--- a/registry/native/patches/crates/uu_tsort/0001-wasi-compat.patch
+++ /dev/null
@@ -1,11 +0,0 @@
---- a/src/tsort.rs
-+++ b/src/tsort.rs
-@@ -81,7 +81,6 @@
-             #[cfg(any(
-                 target_os = "linux",
-                 target_os = "android",
-                 target_os = "fuchsia",
--                target_os = "wasi",
-                 target_env = "uclibc",
-                 target_os = "freebsd",
-             ))]
diff --git a/registry/native/patches/git/README.md b/registry/native/patches/git/README.md
deleted file mode 100644
index b8a55dffa..000000000
--- a/registry/native/patches/git/README.md
+++ /dev/null
@@ -1,28 +0,0 @@
-# Git WASM Compatibility
-
-Git (GPL-2.0) cannot be vendored due to license restrictions.
-This project uses a clean-room, Apache-2.0 licensed reimplementation
-of git plumbing commands.
-
-## WASM-Incompatible Patterns in Git Source
-
-The following patterns in upstream git are incompatible with WASM/WASI
-and were avoided in our clean-room implementation:
-
-### 1. fork+exec in run_command.c
-Git's `run_command()` uses `fork()`+`exec()` extensively for spawning
-child processes (hooks, filters, remotes). WASI has no `fork()`.
-**Our approach:** Use `posix_spawn()` via `host_process` imports when
-process spawning is needed in future commands.
-
-### 2. mmap in wrapper.c
-Git uses `mmap()` for memory-mapped file I/O (packfiles, index).
-WASI has limited `mmap()` support.
-**Our approach:** Use standard `malloc()`+`read()` for all file I/O.
-Git upstream supports this via `NO_MMAP=1`.
-
-### 3. Signal handlers (sigaction for SIGPIPE, SIGCHLD)
-Git registers signal handlers for `SIGPIPE` (ignore broken pipe) and
-`SIGCHLD` (reap child processes). WASI has no signal support.
-**Our approach:** No signal handlers needed — WASI processes don't
-receive signals, and our process model handles cleanup via the kernel.
diff --git a/registry/native/patches/std/os/wasi/process.rs b/registry/native/patches/std/os/wasi/process.rs
deleted file mode 100644
index 223daafd1..000000000
--- a/registry/native/patches/std/os/wasi/process.rs
+++ /dev/null
@@ -1,70 +0,0 @@
-//! WASI-specific extensions to primitives in the [`std::process`] module.
-//!
-//! Mirrors `os/unix/process.rs`' child-pipe fd traits for wasm32-wasip1 so that
-//! `tokio::process` (and other fd-extracting code) can reach the parent-side
-//! pipe ends of a spawned child. (secure-exec pipeline-only codex port.)
-//!
-//! [`std::process`]: crate::process
-
-#![stable(feature = "rust1", since = "1.0.0")]
-
-use crate::os::wasi::io::{AsFd, AsRawFd, BorrowedFd, IntoRawFd, OwnedFd, RawFd};
-use crate::process;
-use crate::sys::{AsInner, FromInner, IntoInner};
-
-macro_rules! impl_child_pipe_fd {
-    ($t:ty) => {
-        #[stable(feature = "process_extensions", since = "1.2.0")]
-        impl AsRawFd for $t {
-            #[inline]
-            fn as_raw_fd(&self) -> RawFd {
-                self.as_inner().as_fd().as_raw_fd()
-            }
-        }
-
-        #[stable(feature = "into_raw_os", since = "1.4.0")]
-        impl IntoRawFd for $t {
-            #[inline]
-            fn into_raw_fd(self) -> RawFd {
-                self.into_inner().into_inner().into_raw_fd()
-            }
-        }
-
-        #[stable(feature = "io_safety", since = "1.63.0")]
-        impl AsFd for $t {
-            #[inline]
-            fn as_fd(&self) -> BorrowedFd<'_> {
-                self.as_inner().as_fd()
-            }
-        }
-
-        #[stable(feature = "io_safety", since = "1.63.0")]
-        impl From<$t> for OwnedFd {
-            #[inline]
-            fn from(child: $t) -> OwnedFd {
-                child.into_inner().into_inner()
-            }
-        }
-    };
-}
-
-impl_child_pipe_fd!(process::ChildStdin);
-impl_child_pipe_fd!(process::ChildStdout);
-impl_child_pipe_fd!(process::ChildStderr);
-
-/// WASI-specific extension to construct an [`ExitStatus`] from a raw code,
-/// mirroring `std::os::unix::process::ExitStatusExt::from_raw`. (secure-exec
-/// pipeline-only codex port — codex's synthetic exit statuses need this.)
-#[stable(feature = "rust1", since = "1.0.0")]
-pub trait ExitStatusExt {
-    /// Construct an `ExitStatus` from the given raw code.
-    #[stable(feature = "exit_status_from", since = "1.12.0")]
-    fn from_raw(raw: i32) -> Self;
-}
-
-#[stable(feature = "exit_status_from", since = "1.12.0")]
-impl ExitStatusExt for process::ExitStatus {
-    fn from_raw(raw: i32) -> Self {
-        process::ExitStatus::from_inner(crate::sys::process::ExitStatus::from(raw))
-    }
-}
diff --git a/registry/native/patches/wasi-libc-overrides/fcntl.c b/registry/native/patches/wasi-libc-overrides/fcntl.c
deleted file mode 100644
index ad938ca65..000000000
--- a/registry/native/patches/wasi-libc-overrides/fcntl.c
+++ /dev/null
@@ -1,175 +0,0 @@
-/**
- * Fix for wasi-libc's broken fcntl implementation.
- *
- * wasi-libc always returns FD_CLOEXEC(1) for F_GETFD and ignores F_SETFD
- * because WASI has no exec(). It also returns EINVAL for F_DUPFD and
- * F_DUPFD_CLOEXEC. This fix properly tracks per-fd cloexec flags,
- * delegates F_GETFL/F_SETFL to the original WASI fd_fdstat interface,
- * and routes F_DUPFD/F_DUPFD_CLOEXEC through the host_process bridge.
- *
- * Installed into the patched sysroot so ALL WASM programs get correct
- * fcntl behavior, not just test binaries.
- */
-
-#include <stdarg.h>
-#include <errno.h>
-#include <fcntl.h>
-#include <wasi/api.h>
-
-/* WASI headers omit F_DUPFD and F_DUPFD_CLOEXEC — define with Linux values */
-#ifndef F_DUPFD
-#define F_DUPFD 0
-#endif
-#ifndef F_DUPFD_CLOEXEC
-#define F_DUPFD_CLOEXEC 1030
-#endif
-
-/* Host import for dup with minimum fd (F_DUPFD semantics) */
-__attribute__((import_module("host_process"), import_name("fd_dup_min")))
-int __host_fd_dup_min(int fd, int min_fd, int *ret_new_fd);
-
-/* Per-fd cloexec tracking (up to 256 FDs) */
-#define MAX_FDS 256
-static unsigned char _fd_cloexec[MAX_FDS];
-
-int fcntl(int fd, int cmd, ...) {
-    va_list ap;
-    va_start(ap, cmd);
-
-    int result;
-
-    switch (cmd) {
-    case F_DUPFD: {
-        int min_fd = va_arg(ap, int);
-        if (fd < 0 || fd >= MAX_FDS) {
-            errno = EBADF;
-            result = -1;
-        } else if (min_fd < 0) {
-            errno = EINVAL;
-            result = -1;
-        } else {
-            int new_fd;
-            int err = __host_fd_dup_min(fd, min_fd, &new_fd);
-            if (err != 0) {
-                errno = err;
-                result = -1;
-            } else {
-                if (new_fd >= 0 && new_fd < MAX_FDS)
-                    _fd_cloexec[new_fd] = 0;
-                result = new_fd;
-            }
-        }
-        break;
-    }
-
-    case F_DUPFD_CLOEXEC: {
-        int min_fd = va_arg(ap, int);
-        if (fd < 0 || fd >= MAX_FDS) {
-            errno = EBADF;
-            result = -1;
-        } else if (min_fd < 0) {
-            errno = EINVAL;
-            result = -1;
-        } else {
-            int new_fd;
-            int err = __host_fd_dup_min(fd, min_fd, &new_fd);
-            if (err != 0) {
-                errno = err;
-                result = -1;
-            } else {
-                if (new_fd >= 0 && new_fd < MAX_FDS)
-                    _fd_cloexec[new_fd] = 1;
-                result = new_fd;
-            }
-        }
-        break;
-    }
-
-    case F_GETFD:
-        if (fd < 0 || fd >= MAX_FDS) {
-            errno = EBADF;
-            result = -1;
-        } else {
-            result = _fd_cloexec[fd] ? FD_CLOEXEC : 0;
-        }
-        break;
-
-    case F_SETFD: {
-        int arg = va_arg(ap, int);
-        if (fd < 0 || fd >= MAX_FDS) {
-            errno = EBADF;
-            result = -1;
-        } else {
-            _fd_cloexec[fd] = (arg & FD_CLOEXEC) ? 1 : 0;
-            result = 0;
-        }
-        break;
-    }
-
-    case F_GETFL: {
-        __wasi_fdstat_t stat;
-        __wasi_errno_t err = __wasi_fd_fdstat_get((__wasi_fd_t)fd, &stat);
-        if (err != 0) {
-            errno = err;
-            result = -1;
-        } else {
-            int flags = stat.fs_flags;
-            /* Derive read/write mode from rights */
-            __wasi_rights_t r = stat.fs_rights_base;
-            int can_read  = (r & __WASI_RIGHTS_FD_READ) != 0;
-            int can_write = (r & __WASI_RIGHTS_FD_WRITE) != 0;
-            if (can_read && can_write)
-                flags |= O_RDWR;
-            else if (can_read)
-                flags |= O_RDONLY;
-            else if (can_write)
-                flags |= O_WRONLY;
-            result = flags;
-        }
-        break;
-    }
-
-    case F_SETFL: {
-        int arg = va_arg(ap, int);
-        __wasi_errno_t err = __wasi_fd_fdstat_set_flags(
-            (__wasi_fd_t)fd,
-            (__wasi_fdflags_t)(arg & 0xfff));
-        if (err != 0) {
-            errno = err;
-            result = -1;
-        } else {
-            result = 0;
-        }
-        break;
-    }
-
-    case F_GETLK: {
-        struct flock *lock = va_arg(ap, struct flock *);
-        if (!lock) {
-            errno = EINVAL;
-            result = -1;
-        } else {
-            lock->l_type = F_UNLCK;
-            lock->l_pid = 0;
-            result = 0;
-        }
-        break;
-    }
-
-    case F_SETLK:
-    case F_SETLKW:
-        // WASI has no kernel-level advisory locking. Treat locks as a
-        // successful no-op so single-process workloads like DuckDB can open
-        // writable database files on the VFS-backed filesystem.
-        result = 0;
-        break;
-
-    default:
-        errno = EINVAL;
-        result = -1;
-        break;
-    }
-
-    va_end(ap);
-    return result;
-}
diff --git a/registry/native/patches/wasi-libc-overrides/fcntl.o b/registry/native/patches/wasi-libc-overrides/fcntl.o
deleted file mode 100644
index 81c3b82dd..000000000
Binary files a/registry/native/patches/wasi-libc-overrides/fcntl.o and /dev/null differ
diff --git a/registry/native/patches/wasi-libc-overrides/fmtmsg.c b/registry/native/patches/wasi-libc-overrides/fmtmsg.c
deleted file mode 100644
index 1e97a46c0..000000000
--- a/registry/native/patches/wasi-libc-overrides/fmtmsg.c
+++ /dev/null
@@ -1,96 +0,0 @@
-/**
- * fmtmsg() override for wasi-libc.
- *
- * musl's fmtmsg() is a no-op stub (returns 0 without writing).
- * This provides a POSIX-conformant implementation that writes
- * formatted messages to stderr (MM_PRINT) per POSIX.1-2024.
- *
- * Format: "label: severity: text\nTO FIX: action tag\n"
- *
- * Classification flags (MM_HARD/SOFT/FIRM, MM_APPL/UTIL/OPSYS,
- * MM_RECOVER/MM_NRECOV) are accepted per POSIX. MM_PRINT and
- * MM_CONSOLE control output destination; the remaining flags are
- * classification metadata that does not alter the output format.
- */
-
-#include <fmtmsg.h>
-#include <stdio.h>
-#include <string.h>
-#include <stdlib.h>
-
-int fmtmsg(long classification, const char *label, int severity,
-           const char *text, const char *action, const char *tag)
-{
-    int print = (classification & MM_PRINT);
-    int console = (classification & MM_CONSOLE);
-
-    /* Validate classification: at most one recoverability flag */
-    if ((classification & MM_RECOVER) && (classification & MM_NRECOV))
-        return MM_NOTOK;
-
-    /* Determine severity string */
-    const char *sev;
-    switch (severity) {
-    case MM_HALT:    sev = "HALT";    break;
-    case MM_ERROR:   sev = "ERROR";   break;
-    case MM_WARNING: sev = "WARNING"; break;
-    case MM_INFO:    sev = "INFO";    break;
-    default:         sev = "UNKNOWN"; break;
-    }
-
-    /* Calculate buffer size proportional to inputs */
-    size_t need = 64; /* overhead for "label: severity: text\nTO FIX: action tag\n" framing */
-    if (label && label != MM_NULLLBL)
-        need += strlen(label);
-    need += strlen(sev);
-    if (text && text != MM_NULLTXT)
-        need += strlen(text);
-    if (action && action != MM_NULLACT)
-        need += strlen(action);
-    if (tag && tag != MM_NULLTAG)
-        need += strlen(tag);
-
-    char *buf = (char *)malloc(need);
-    if (!buf)
-        return MM_NOTOK;
-
-    int len = 0;
-
-    /* Line 1: label: severity: text */
-    if (label && label != MM_NULLLBL)
-        len += snprintf(buf + len, need - len, "%s: ", label);
-    len += snprintf(buf + len, need - len, "%s: ", sev);
-    if (text && text != MM_NULLTXT)
-        len += snprintf(buf + len, need - len, "%s", text);
-    len += snprintf(buf + len, need - len, "\n");
-
-    /* Line 2: TO FIX: action tag */
-    if ((action && action != MM_NULLACT) || (tag && tag != MM_NULLTAG)) {
-        len += snprintf(buf + len, need - len, "TO FIX: ");
-        if (action && action != MM_NULLACT)
-            len += snprintf(buf + len, need - len, "%s", action);
-        if (tag && tag != MM_NULLTAG)
-            len += snprintf(buf + len, need - len, " %s", tag);
-        len += snprintf(buf + len, need - len, "\n");
-    }
-
-    int result = MM_OK;
-
-    if (print) {
-        if (fputs(buf, stderr) == EOF || fflush(stderr) == EOF)
-            result = MM_NOMSG;
-    }
-
-    /* MM_CONSOLE: on real Linux writes to /dev/console.
-       In WASM sandbox we just write to stderr as well. */
-    if (console && result == MM_OK) {
-        /* Already written above if MM_PRINT was also set */
-        if (!print) {
-            if (fputs(buf, stderr) == EOF || fflush(stderr) == EOF)
-                result = MM_NOCON;
-        }
-    }
-
-    free(buf);
-    return result;
-}
diff --git a/registry/native/patches/wasi-libc-overrides/fmtmsg.o b/registry/native/patches/wasi-libc-overrides/fmtmsg.o
deleted file mode 100644
index 4caa9d328..000000000
Binary files a/registry/native/patches/wasi-libc-overrides/fmtmsg.o and /dev/null differ
diff --git a/registry/native/patches/wasi-libc-overrides/ifaddrs.c b/registry/native/patches/wasi-libc-overrides/ifaddrs.c
deleted file mode 100644
index 2f1abe78b..000000000
--- a/registry/native/patches/wasi-libc-overrides/ifaddrs.c
+++ /dev/null
@@ -1,25 +0,0 @@
-/**
- * Minimal getifaddrs/freeifaddrs shim for runtimes without host network
- * interface enumeration.
- *
- * cpp-httplib includes ifaddrs support on POSIX targets, but DuckDB's embedded
- * HTTP client only uses it when callers opt into binding a request to a named
- * interface. Our WASI runtime does not expose interface enumeration today, so
- * return an empty list instead of failing the build or forcing DuckDB-specific
- * source patches.
- */
-
-#include <errno.h>
-#include <ifaddrs.h>
-
-int getifaddrs(struct ifaddrs **ifap) {
-	if (ifap) {
-		*ifap = 0;
-	}
-	errno = ENOSYS;
-	return -1;
-}
-
-void freeifaddrs(struct ifaddrs *ifa) {
-	(void)ifa;
-}
diff --git a/registry/native/patches/wasi-libc-overrides/inet_ntop.c b/registry/native/patches/wasi-libc-overrides/inet_ntop.c
deleted file mode 100644
index 68818c18a..000000000
--- a/registry/native/patches/wasi-libc-overrides/inet_ntop.c
+++ /dev/null
@@ -1,110 +0,0 @@
-/**
- * Fix for musl's inet_ntop() IPv6 formatting.
- *
- * musl does not fully comply with RFC 5952:
- * - When two zero-runs have equal length, musl may pick the wrong one
- *   (RFC 5952 requires the leftmost run)
- * - Single zero fields should not be compressed with ::
- *
- * This fix provides RFC 5952 compliant IPv6 formatting.
- *
- * Installed into the patched sysroot so ALL WASM programs get correct
- * inet_ntop behavior, not just test binaries.
- */
-
-#include <stdio.h>
-#include <string.h>
-#include <errno.h>
-#include <arpa/inet.h>
-
-static const char *inet_ntop4(const unsigned char *src, char *dst, socklen_t size) {
-    int n = snprintf(dst, size, "%d.%d.%d.%d", src[0], src[1], src[2], src[3]);
-    if (n < 0 || (socklen_t)n >= size) {
-        errno = ENOSPC;
-        return NULL;
-    }
-    return dst;
-}
-
-static const char *inet_ntop6(const unsigned char *src, char *dst, socklen_t size) {
-    /* Parse 16 bytes into 8 groups */
-    unsigned short groups[8];
-    for (int i = 0; i < 8; i++) {
-        groups[i] = ((unsigned short)src[i*2] << 8) | src[i*2+1];
-    }
-
-    /* Check for IPv4-mapped address (::ffff:x.x.x.x) */
-    int is_v4mapped = (groups[0] == 0 && groups[1] == 0 && groups[2] == 0 &&
-                       groups[3] == 0 && groups[4] == 0 && groups[5] == 0xffff);
-
-    /* Find the longest run of consecutive zeros (RFC 5952 Section 4.2.3)
-     * - Must be at least 2 groups long
-     * - If tied, use the leftmost run (RFC 5952 Section 4.2.3 #1) */
-    int best_start = -1, best_len = 0;
-    int cur_start = -1, cur_len = 0;
-
-    int limit = is_v4mapped ? 6 : 8;
-    for (int i = 0; i < limit; i++) {
-        if (groups[i] == 0) {
-            if (cur_start < 0) cur_start = i;
-            cur_len++;
-        } else {
-            if (cur_len > best_len && cur_len >= 2) {
-                best_start = cur_start;
-                best_len = cur_len;
-            }
-            cur_start = -1;
-            cur_len = 0;
-        }
-    }
-    if (cur_len > best_len && cur_len >= 2) {
-        best_start = cur_start;
-        best_len = cur_len;
-    }
-
-    /* Format the address */
-    char buf[64];
-    char *p = buf;
-
-    if (is_v4mapped) {
-        /* ::ffff:a.b.c.d */
-        p += sprintf(p, "::ffff:");
-        p += sprintf(p, "%d.%d.%d.%d", src[12], src[13], src[14], src[15]);
-    } else {
-        int after_gap = 0;
-        for (int i = 0; i < 8; i++) {
-            if (i == best_start) {
-                p += sprintf(p, "::");
-                i += best_len - 1;
-                after_gap = 1;
-                continue;
-            }
-            if (i > 0 && !after_gap) *p++ = ':';
-            after_gap = 0;
-            p += sprintf(p, "%x", groups[i]);
-        }
-    }
-    *p = '\0';
-
-    size_t len = p - buf + 1;
-    if (len > size) {
-        errno = ENOSPC;
-        return NULL;
-    }
-    memcpy(dst, buf, len);
-    return dst;
-}
-
-const char *inet_ntop(int af, const void *restrict src,
-                      char *restrict dst, socklen_t size) {
-    if (af == AF_INET) {
-        return inet_ntop4((const unsigned char *)src, dst, size);
-    }
-#ifdef AF_INET6
-    if (af == AF_INET6) {
-        return inet_ntop6((const unsigned char *)src, dst, size);
-    }
-#endif
-    errno = EAFNOSUPPORT;
-    return NULL;
-}
diff --git a/registry/native/patches/wasi-libc-overrides/inet_ntop.o b/registry/native/patches/wasi-libc-overrides/inet_ntop.o
deleted file mode 100644
index 7f38fb4bb..000000000
Binary files a/registry/native/patches/wasi-libc-overrides/inet_ntop.o and /dev/null differ
diff --git a/registry/native/patches/wasi-libc-overrides/mlock.c b/registry/native/patches/wasi-libc-overrides/mlock.c
deleted file mode 100644
index a9a445713..000000000
--- a/registry/native/patches/wasi-libc-overrides/mlock.c
+++ /dev/null
@@ -1,40 +0,0 @@
-/**
- * Minimal mlock/munlock shim for WASI/POSIX builds without page pinning.
- *
- * DuckDB uses mlock/munlock as a best-effort hardening step for encryption
- * keys. Our runtime does not currently expose memory locking primitives, so
- * treat these calls as successful no-ops instead of failing the link.
- *
- * Installed into the patched sysroot so upstream code can keep its existing
- * POSIX calls without carrying a WASI-specific source patch.
- */
-
-#include <stddef.h>
-
-int mlock(const void *addr, size_t len) {
-	(void)addr;
-	(void)len;
-	return 0;
-}
-
-int munlock(const void *addr, size_t len) {
-	(void)addr;
-	(void)len;
-	return 0;
-}
-
-int mlockall(int flags) {
-	(void)flags;
-	return 0;
-}
-
-int munlockall(void) {
-	return 0;
-}
-
-int madvise(void *addr, size_t len, int advice) {
-	(void)addr;
-	(void)len;
-	(void)advice;
-	return 0;
-}
diff --git a/registry/native/patches/wasi-libc-overrides/open_wmemstream.c b/registry/native/patches/wasi-libc-overrides/open_wmemstream.c
deleted file mode 100644
index 7ad2b35fc..000000000
--- a/registry/native/patches/wasi-libc-overrides/open_wmemstream.c
+++ /dev/null
@@ -1,146 +0,0 @@
-/**
- * Fix for wasi-libc's open_wmemstream size reporting.
- *
- * musl's open_wmemstream reports size in bytes instead of wide characters.
- * This fix uses fopencookie to maintain a wchar_t buffer directly,
- * reporting size as wchar_t count per POSIX.
- *
- * Installed into the patched sysroot so ALL WASM programs get correct
- * open_wmemstream behavior, not just test binaries.
- */
-
-#ifndef _GNU_SOURCE
-#define _GNU_SOURCE
-#endif
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <wchar.h>
-#include <errno.h>
-
-struct wmem_cookie {
-    wchar_t **bufp;     /* user's buffer pointer */
-    size_t  *sizep;     /* user's size pointer (wide char count) */
-    wchar_t *buf;       /* internal buffer */
-    size_t  cap;        /* capacity in wchar_t units */
-    size_t  len;        /* current length in wchar_t units */
-    size_t  pos;        /* current position in wchar_t units */
-};
-
-static ssize_t wmem_write(void *cookie, const char *data, size_t nbytes) {
-    struct wmem_cookie *wm = (struct wmem_cookie *)cookie;
-
-    /* fwprintf writes multibyte (UTF-8) through the FILE.  We need to
-       convert back to wide chars and store in our wchar_t buffer.
-       For ASCII (which covers most use cases), each byte = one wchar_t. */
-    size_t nchars = 0;
-    const char *src = data;
-    const char *end = data + nbytes;
-    mbstate_t mbs;
-    memset(&mbs, 0, sizeof(mbs));
-
-    /* First pass: count wide chars needed */
-    const char *tmp = src;
-    mbstate_t tmps;
-    memset(&tmps, 0, sizeof(tmps));
-    while (tmp < end) {
-        wchar_t wc;
-        size_t r = mbrtowc(&wc, tmp, end - tmp, &tmps);
-        if (r == (size_t)-1 || r == (size_t)-2) {
-            /* Invalid or incomplete sequence -- treat remaining as individual bytes */
-            nchars += end - tmp;
-            break;
-        }
-        if (r == 0) r = 1; /* null byte */
-        nchars++;
-        tmp += r;
-    }
-
-    /* Ensure buffer capacity */
-    size_t needed = wm->pos + nchars + 1; /* +1 for null terminator */
-    if (needed > wm->cap) {
-        size_t newcap = wm->cap ? wm->cap * 2 : 64;
-        while (newcap < needed) newcap *= 2;
-        wchar_t *newbuf = realloc(wm->buf, newcap * sizeof(wchar_t));
-        if (!newbuf) return -1;
-        wm->buf = newbuf;
-        wm->cap = newcap;
-    }
-
-    /* Second pass: convert and store */
-    src = data;
-    memset(&mbs, 0, sizeof(mbs));
-    while (src < end) {
-        wchar_t wc;
-        size_t r = mbrtowc(&wc, src, end - src, &mbs);
-        if (r == (size_t)-1 || r == (size_t)-2) {
-            /* Fallback: store raw bytes as wchar_t */
-            while (src < end) {
-                wm->buf[wm->pos++] = (wchar_t)(unsigned char)*src++;
-            }
-            break;
-        }
-        if (r == 0) { wc = L'\0'; r = 1; }
-        wm->buf[wm->pos++] = wc;
-        src += r;
-    }
-
-    /* Update length */
-    if (wm->pos > wm->len) wm->len = wm->pos;
-
-    /* Null terminate and update user pointers */
-    wm->buf[wm->len] = L'\0';
-    *wm->bufp = wm->buf;
-    *wm->sizep = wm->len;
-
-    return nbytes;
-}
-
-static int wmem_close(void *cookie) {
-    struct wmem_cookie *wm = (struct wmem_cookie *)cookie;
-    /* Null terminate final buffer */
-    if (wm->buf) {
-        if (wm->len >= wm->cap) {
-            wchar_t *newbuf = realloc(wm->buf, (wm->len + 1) * sizeof(wchar_t));
-            if (newbuf) wm->buf = newbuf;
-        }
-        wm->buf[wm->len] = L'\0';
-    }
-    *wm->bufp = wm->buf;
-    *wm->sizep = wm->len;
-    free(wm);
-    return 0;
-}
-
-FILE *open_wmemstream(wchar_t **bufp, size_t *sizep) {
-    struct wmem_cookie *wm = calloc(1, sizeof(*wm));
-    if (!wm) return NULL;
-
-    wm->bufp = bufp;
-    wm->sizep = sizep;
-    wm->cap = 64;
-    wm->buf = calloc(wm->cap, sizeof(wchar_t));
-    if (!wm->buf) { free(wm); return NULL; }
-
-    *bufp = wm->buf;
-    *sizep = 0;
-
-    cookie_io_functions_t funcs = {
-        .read = NULL,
-        .write = wmem_write,
-        .seek = NULL,
-        .close = wmem_close,
-    };
-
-    FILE *fp = fopencookie(wm, "w", funcs);
-    if (!fp) {
-        free(wm->buf);
-        free(wm);
-        return NULL;
-    }
-
-    /* Set wide orientation */
-    fwide(fp, 1);
-
-    return fp;
-}
diff --git a/registry/native/patches/wasi-libc-overrides/open_wmemstream.o b/registry/native/patches/wasi-libc-overrides/open_wmemstream.o
deleted file mode 100644
index bfe607600..000000000
Binary files a/registry/native/patches/wasi-libc-overrides/open_wmemstream.o and /dev/null differ
diff --git a/registry/native/patches/wasi-libc-overrides/pthread_attr.c b/registry/native/patches/wasi-libc-overrides/pthread_attr.c
deleted file mode 100644
index 346c3cede..000000000
--- a/registry/native/patches/wasi-libc-overrides/pthread_attr.c
+++ /dev/null
@@ -1,50 +0,0 @@
-/*
- * pthread_attr.c — sysroot override for pthread attr roundtrip functions
- *
- * wasi-libc (WASI branch) rejects non-zero values in:
- *   - pthread_attr_setguardsize: returns EINVAL for size > 0
- *   - pthread_mutexattr_setrobust: returns EINVAL for robust != 0
- *
- * The os-test tests only check set/get roundtrip, not actual guard page
- * enforcement or owner-died detection. Fix: store the values as musl
- * upstream does, without the WASI-specific rejection.
- *
- * pthread_attr_getguardsize and pthread_mutexattr_getrobust already
- * work correctly (they just read the stored values).
- */
-
-#include <pthread.h>
-#include <errno.h>
-#include <stdint.h>
-
-/*
- * pthread_attr_setguardsize: store the value (upstream musl behavior)
- * instead of rejecting all non-zero values (WASI modification).
- *
- * _a_guardsize = __u.__s[1] (size_t at index 1 in union, per pthread_impl.h)
- */
-int pthread_attr_setguardsize(pthread_attr_t *a, size_t size)
-{
-	if (size > SIZE_MAX / 8)
-		return EINVAL;
-	a->__u.__s[1] = size;
-	return 0;
-}
-
-/*
- * pthread_mutexattr_setrobust: set/clear bit 2 of __attr (upstream musl
- * behavior) instead of rejecting robust=1 (WASI modification).
- *
- * Bit 2 of __attr is the robustness flag, read by pthread_mutexattr_getrobust
- * via: *robust = a->__attr / 4U % 2
- */
-int pthread_mutexattr_setrobust(pthread_mutexattr_t *a, int robust)
-{
-	if ((unsigned)robust > 1U)
-		return EINVAL;
-	if (robust)
-		a->__attr |= 4;
-	else
-		a->__attr &= ~4;
-	return 0;
-}
diff --git a/registry/native/patches/wasi-libc-overrides/pthread_attr.o b/registry/native/patches/wasi-libc-overrides/pthread_attr.o
deleted file mode 100644
index 7c6ae1e11..000000000
Binary files a/registry/native/patches/wasi-libc-overrides/pthread_attr.o and /dev/null differ
diff --git a/registry/native/patches/wasi-libc-overrides/pthread_key.c b/registry/native/patches/wasi-libc-overrides/pthread_key.c
deleted file mode 100644
index 44b2bb498..000000000
--- a/registry/native/patches/wasi-libc-overrides/pthread_key.c
+++ /dev/null
@@ -1,114 +0,0 @@
-/**
- * Fix for wasi-libc's broken pthread_key_delete in single-threaded WASM.
- *
- * Root cause: pthread_key_delete walks the thread list via a circular
- * linked list (td->next), but __wasilibc_pthread_self is zero-initialized
- * so self->next == NULL. The loop:
- *   do td->tsd[k] = 0; while ((td=td->next)!=self);
- * dereferences NULL on the second iteration, causing an infinite loop
- * or trap in WASM linear memory.
- *
- * Fix: In single-threaded WASM there's only one thread, so we just clear
- * self->tsd[k] directly — no thread list walk needed.
- *
- * This override replaces the entire pthread_key compilation unit (create,
- * delete, tsd_run_dtors) because they share a static keys[] array.
- * Uses musl internal headers (via -I flags) for struct __pthread access.
- */
-
-#define hidden __attribute__((__visibility__("hidden")))
-#include "pthread_impl.h"
-
-volatile size_t __pthread_tsd_size = sizeof(void *) * PTHREAD_KEYS_MAX;
-void *__pthread_tsd_main[PTHREAD_KEYS_MAX] = { 0 };
-
-static void (*keys[PTHREAD_KEYS_MAX])(void *);
-
-static pthread_rwlock_t key_lock = PTHREAD_RWLOCK_INITIALIZER;
-
-static pthread_key_t next_key;
-
-static void nodtor(void *dummy)
-{
-}
-
-int __pthread_key_create(pthread_key_t *k, void (*dtor)(void *))
-{
-	pthread_t self = __pthread_self();
-
-	/* This can only happen in the main thread before
-	 * pthread_create has been called. */
-	if (!self->tsd) self->tsd = __pthread_tsd_main;
-
-	/* Purely a sentinel value since null means slot is free. */
-	if (!dtor) dtor = nodtor;
-
-	pthread_rwlock_wrlock(&key_lock);
-	pthread_key_t j = next_key;
-	do {
-		if (!keys[j]) {
-			keys[next_key = *k = j] = dtor;
-			pthread_rwlock_unlock(&key_lock);
-			return 0;
-		}
-	} while ((j=(j+1)%PTHREAD_KEYS_MAX) != next_key);
-
-	pthread_rwlock_unlock(&key_lock);
-	return EAGAIN;
-}
-
-int __pthread_key_delete(pthread_key_t k)
-{
-	/* POSIX: return EINVAL for out-of-range or unallocated keys */
-	if (k >= PTHREAD_KEYS_MAX)
-		return EINVAL;
-
-	pthread_rwlock_wrlock(&key_lock);
-
-	if (!keys[k]) {
-		pthread_rwlock_unlock(&key_lock);
-		return EINVAL;
-	}
-
-	pthread_t self = __pthread_self();
-
-	/* Single-threaded WASM: only one thread exists, clear its TSD directly.
-	 * Upstream musl walks td->next in a circular list, but
-	 * __wasilibc_pthread_self.next is never initialized (zero = NULL),
-	 * causing an infinite loop when dereferencing the NULL pointer. */
-	if (self->tsd)
-		self->tsd[k] = 0;
-
-	keys[k] = 0;
-
-	pthread_rwlock_unlock(&key_lock);
-
-	return 0;
-}
-
-void __pthread_tsd_run_dtors(void)
-{
-	pthread_t self = __pthread_self();
-	int i, j;
-	for (j=0; self->tsd_used && j<PTHREAD_DESTRUCTOR_ITERATIONS; j++) {
-		pthread_rwlock_rdlock(&key_lock);
-		self->tsd_used = 0;
-		for (i=0; i<PTHREAD_KEYS_MAX; i++) {
-			void *val = self->tsd[i];
-			void (*dtor)(void *) = keys[i];
-			self->tsd[i] = 0;
-			if (val && dtor && dtor != nodtor) {
-				pthread_rwlock_unlock(&key_lock);
-				dtor(val);
-				pthread_rwlock_rdlock(&key_lock);
-			}
-		}
-		pthread_rwlock_unlock(&key_lock);
-	}
-}
-
-__attribute__((__weak__, __alias__("__pthread_key_create")))
-int pthread_key_create(pthread_key_t *, void (*)(void *));
-
-__attribute__((__weak__, __alias__("__pthread_key_delete")))
-int pthread_key_delete(pthread_key_t);
diff --git a/registry/native/patches/wasi-libc-overrides/pthread_key.o b/registry/native/patches/wasi-libc-overrides/pthread_key.o
deleted file mode 100644
index f2186cb68..000000000
Binary files a/registry/native/patches/wasi-libc-overrides/pthread_key.o and /dev/null differ
diff --git a/registry/native/patches/wasi-libc-overrides/pthread_mutex.c b/registry/native/patches/wasi-libc-overrides/pthread_mutex.c
deleted file mode 100644
index ff8edb722..000000000
--- a/registry/native/patches/wasi-libc-overrides/pthread_mutex.c
+++ /dev/null
@@ -1,98 +0,0 @@
-/**
- * Fix for wasi-libc's broken pthread mutex stub in single-threaded WASM.
- *
- * The wasi-libc stub-pthreads/mutex.c has a C operator precedence bug:
- *   if (m->_m_type&3 != PTHREAD_MUTEX_RECURSIVE)
- * parses as:
- *   if (m->_m_type & (3 != 1))   →   if (m->_m_type & 1)
- * which inverts NORMAL (type=0) and RECURSIVE (type=1) behavior:
- *   - NORMAL mutexes act as RECURSIVE (double-lock succeeds)
- *   - RECURSIVE mutexes act as NORMAL (double-lock returns EDEADLK)
- *
- * This override fixes the precedence and adds proper timedlock timeout
- * handling. Uses _m_count for lock tracking (matching the stub condvar's
- * expectation that _m_count != 0 means "mutex is held").
- *
- * Internal fields used:
- *   _m_type  = __u.__i[0]  (lower 2 bits = mutex type)
- *   _m_count = __u.__i[5]  (lock count: 0=unlocked, >0=locked)
- */
-
-#include <pthread.h>
-#include <errno.h>
-#include <time.h>
-#include <limits.h>
-
-/* Field accessors matching musl's pthread_impl.h macros */
-#define M_TYPE(m)    ((m)->__u.__i[0])
-#define M_COUNT(m)   ((m)->__u.__i[5])
-
-#define TYPE_MASK 3
-
-int __pthread_mutex_trylock(pthread_mutex_t *m)
-{
-	int type = M_TYPE(m) & TYPE_MASK;
-
-	if (type == PTHREAD_MUTEX_RECURSIVE) {
-		if ((unsigned)M_COUNT(m) >= INT_MAX) return EAGAIN;
-		M_COUNT(m)++;
-		return 0;
-	}
-
-	/* NORMAL or ERRORCHECK */
-	if (M_COUNT(m)) return EBUSY;
-	M_COUNT(m) = 1;
-	return 0;
-}
-
-int __pthread_mutex_timedlock(pthread_mutex_t *restrict m,
-                              const struct timespec *restrict at)
-{
-	int type = M_TYPE(m) & TYPE_MASK;
-
-	if (type == PTHREAD_MUTEX_RECURSIVE) {
-		if ((unsigned)M_COUNT(m) >= INT_MAX) return EAGAIN;
-		M_COUNT(m)++;
-		return 0;
-	}
-
-	/* NORMAL or ERRORCHECK — single-threaded deadlock detection */
-	if (M_COUNT(m))
-		return at ? ETIMEDOUT : EDEADLK;
-
-	M_COUNT(m) = 1;
-	return 0;
-}
-
-int __pthread_mutex_lock(pthread_mutex_t *m)
-{
-	return __pthread_mutex_timedlock(m, 0);
-}
-
-int __pthread_mutex_unlock(pthread_mutex_t *m)
-{
-	if (!M_COUNT(m))
-		return EPERM;
-	M_COUNT(m)--;
-	return 0;
-}
-
-int pthread_mutex_consistent(pthread_mutex_t *m)
-{
-	/* Robust mutexes not supported in single-threaded WASI */
-	return EINVAL;
-}
-
-/* Weak aliases so both __pthread_mutex_* and pthread_mutex_* resolve */
-__attribute__((__weak__, __alias__("__pthread_mutex_trylock")))
-int pthread_mutex_trylock(pthread_mutex_t *);
-
-__attribute__((__weak__, __alias__("__pthread_mutex_timedlock")))
-int pthread_mutex_timedlock(pthread_mutex_t *restrict,
-                            const struct timespec *restrict);
-
-__attribute__((__weak__, __alias__("__pthread_mutex_lock")))
-int pthread_mutex_lock(pthread_mutex_t *);
-
-__attribute__((__weak__, __alias__("__pthread_mutex_unlock")))
-int pthread_mutex_unlock(pthread_mutex_t *);
diff --git a/registry/native/patches/wasi-libc-overrides/pthread_mutex.o b/registry/native/patches/wasi-libc-overrides/pthread_mutex.o
deleted file mode 100644
index cca3b4a12..000000000
Binary files a/registry/native/patches/wasi-libc-overrides/pthread_mutex.o and /dev/null differ
diff --git a/registry/native/patches/wasi-libc-overrides/sched.c b/registry/native/patches/wasi-libc-overrides/sched.c
deleted file mode 100644
index b87e4dacb..000000000
--- a/registry/native/patches/wasi-libc-overrides/sched.c
+++ /dev/null
@@ -1,7 +0,0 @@
-#include <errno.h>
-#include <sched.h>
-
-int sched_getcpu(void) {
-    errno = ENOSYS;
-    return -1;
-}
diff --git a/registry/native/patches/wasi-libc-overrides/strfmon.c b/registry/native/patches/wasi-libc-overrides/strfmon.c
deleted file mode 100644
index ac1ec0a48..000000000
--- a/registry/native/patches/wasi-libc-overrides/strfmon.c
+++ /dev/null
@@ -1,223 +0,0 @@
-/**
- * Fix for wasi-libc's strfmon/strfmon_l for the POSIX locale.
- *
- * wasi-libc (musl) strfmon uses "." as mon_decimal_point even when
- * localeconv()->mon_decimal_point is "" (the POSIX locale value).
- * This fix implements strfmon per POSIX for the POSIX locale:
- *   - mon_decimal_point = "" (no decimal separator in output)
- *   - negative_sign = "-" when sign position is CHAR_MAX
- *   - No currency symbols
- *
- * Format: %[flags][width][#left_prec][.right_prec]{i|n}
- * Flags: =f (fill char), ^ (no grouping), + ( - ! (suppress currency)
- *
- * Installed into the patched sysroot so ALL WASM programs get correct
- * strfmon behavior, not just test binaries.
- */
-
-#include <stdarg.h>
-#include <stdio.h>
-#include <stdlib.h>
-#include <string.h>
-#include <errno.h>
-#include <locale.h>
-
-static ssize_t vstrfmon_posix(char *s, size_t maxsize, const char *fmt, va_list ap) {
-    char *out = s;
-    char *end = s + maxsize;
-
-    while (*fmt && out < end) {
-        if (*fmt != '%') {
-            *out++ = *fmt++;
-            continue;
-        }
-        fmt++; /* skip '%' */
-
-        /* %% -> literal % */
-        if (*fmt == '%') {
-            *out++ = '%';
-            fmt++;
-            continue;
-        }
-
-        /* Parse flags */
-        char fill = ' ';
-        int left_justify = 0;
-        int no_grouping = 0;
-        int paren_negative = 0;
-        int plus_sign = 0;
-        int suppress_currency = 0;
-
-        for (;;) {
-            if (*fmt == '=') {
-                fmt++;
-                fill = *fmt++;
-            } else if (*fmt == '-') {
-                left_justify = 1;
-                fmt++;
-            } else if (*fmt == '^') {
-                no_grouping = 1;
-                fmt++;
-            } else if (*fmt == '(') {
-                paren_negative = 1;
-                fmt++;
-            } else if (*fmt == '+') {
-                plus_sign = 1;
-                fmt++;
-            } else if (*fmt == '!') {
-                suppress_currency = 1;
-                fmt++;
-            } else {
-                break;
-            }
-        }
-
-        /* Parse field width */
-        int width = 0;
-        int has_width = 0;
-        while (*fmt >= '0' && *fmt <= '9') {
-            width = width * 10 + (*fmt - '0');
-            has_width = 1;
-            fmt++;
-        }
-
-        /* Parse left precision (#n) -- minimum digits to left of decimal */
-        int left_prec = -1;
-        if (*fmt == '#') {
-            fmt++;
-            left_prec = 0;
-            while (*fmt >= '0' && *fmt <= '9') {
-                left_prec = left_prec * 10 + (*fmt - '0');
-                fmt++;
-            }
-        }
-
-        /* Parse right precision (.n) -- digits to right of decimal */
-        int right_prec = -1;
-        if (*fmt == '.') {
-            fmt++;
-            right_prec = 0;
-            while (*fmt >= '0' && *fmt <= '9') {
-                right_prec = right_prec * 10 + (*fmt - '0');
-                fmt++;
-            }
-        }
-
-        /* Conversion character: 'i' (international) or 'n' (national) */
-        char conv = *fmt++;
-        if (conv != 'i' && conv != 'n') {
-            errno = EINVAL;
-            return -1;
-        }
-
-        (void)no_grouping;
-        (void)suppress_currency;
-
-        double val = va_arg(ap, double);
-        int negative = val < 0;
-        if (negative) val = -val;
-
-        /* Default right precision: 2 for POSIX locale when not specified.
-         * POSIX says use frac_digits/int_frac_digits from locale, but when
-         * those are CHAR_MAX, the implementation chooses (we use 2). */
-        if (right_prec < 0) right_prec = 2;
-
-        /* Format the number without decimal point (POSIX locale: mon_decimal_point = "") */
-        /* Multiply by 10^right_prec and round to get integer representation */
-        double scale = 1.0;
-        for (int i = 0; i < right_prec; i++) scale *= 10.0;
-        long long ival = (long long)(val * scale + 0.5);
-
-        /* Convert to digit string */
-        char digits[64];
-        int dlen = snprintf(digits, sizeof(digits), "%lld", ival);
-
-        /* Apply left precision: pad with fill chars if needed */
-        /* left_prec specifies minimum digits to the LEFT of where decimal would be */
-        int left_digits = dlen - right_prec;
-        if (left_digits < 0) left_digits = 0;
-        int pad_count = 0;
-        if (left_prec > 0 && left_digits < left_prec) {
-            pad_count = left_prec - left_digits;
-        }
-
-        /* Build the formatted value into a temp buffer */
-        char tmp[256];
-        int tpos = 0;
-
-        /* Sign handling: POSIX locale sign_posn = CHAR_MAX -> use "-" prefix */
-        if (negative) {
-            if (paren_negative) {
-                tmp[tpos++] = '(';
-            } else {
-                tmp[tpos++] = '-';
-            }
-        } else if (plus_sign) {
-            /* no positive sign in POSIX locale */
-        }
-
-        /* Fill chars for left precision padding */
-        for (int i = 0; i < pad_count; i++) {
-            tmp[tpos++] = fill;
-        }
-
-        /* The digits (includes both left and right parts, no decimal) */
-        /* If total digits < right_prec, we need leading zeros */
-        if (dlen <= right_prec) {
-            /* Need leading zeros: e.g., val=0.01, right_prec=2, ival=1, dlen=1 */
-            int need_zeros = right_prec - dlen + 1; /* +1 for at least one left digit */
-            if (left_prec > 1) need_zeros = left_prec + right_prec - dlen;
-            for (int i = 0; i < need_zeros && i < (int)sizeof(tmp) - tpos - dlen - 2; i++) {
-                tmp[tpos++] = '0';
-            }
-        }
-        memcpy(tmp + tpos, digits, dlen);
-        tpos += dlen;
-
-        if (negative && paren_negative) {
-            tmp[tpos++] = ')';
-        }
-
-        tmp[tpos] = '\0';
-
-        /* Apply field width */
-        int vlen = tpos;
-        if (has_width && width > vlen) {
-            int padding = width - vlen;
-            if (left_justify) {
-                /* Value then spaces */
-                for (int i = 0; i < vlen && out < end; i++) *out++ = tmp[i];
-                for (int i = 0; i < padding && out < end; i++) *out++ = ' ';
-            } else {
-                /* Spaces then value */
-                for (int i = 0; i < padding && out < end; i++) *out++ = ' ';
-                for (int i = 0; i < vlen && out < end; i++) *out++ = tmp[i];
-            }
-        } else {
-            for (int i = 0; i < vlen && out < end; i++) *out++ = tmp[i];
-        }
-    }
-
-    if (out < end) *out = '\0';
-    else if (maxsize > 0) s[maxsize - 1] = '\0';
-
-    return (ssize_t)(out - s);
-}
-
-ssize_t strfmon(char *restrict s, size_t maxsize, const char *restrict fmt, ...) {
-    va_list ap;
-    va_start(ap, fmt);
-    ssize_t ret = vstrfmon_posix(s, maxsize, fmt, ap);
-    va_end(ap);
-    return ret;
-}
-
-ssize_t strfmon_l(char *restrict s, size_t maxsize, locale_t loc,
-                  const char *restrict fmt, ...) {
-    (void)loc; /* WASI only has the POSIX locale */
-    va_list ap;
-    va_start(ap, fmt);
-    ssize_t ret = vstrfmon_posix(s, maxsize, fmt, ap);
-    va_end(ap);
-    return ret;
-}
diff --git a/registry/native/patches/wasi-libc-overrides/strfmon.o b/registry/native/patches/wasi-libc-overrides/strfmon.o
deleted file mode 100644
index 52ba0d4df..000000000
Binary files a/registry/native/patches/wasi-libc-overrides/strfmon.o and /dev/null differ
diff --git a/registry/native/patches/wasi-libc-overrides/swprintf.c b/registry/native/patches/wasi-libc-overrides/swprintf.c
deleted file mode 100644
index 5233954ca..000000000
--- a/registry/native/patches/wasi-libc-overrides/swprintf.c
+++ /dev/null
@@ -1,26 +0,0 @@
-/**
- * Fix for wasi-libc's swprintf errno handling.
- *
- * musl's swprintf returns -1 when the buffer is too small but doesn't
- * set errno to EOVERFLOW as POSIX requires. This fix wraps vswprintf
- * to set errno correctly.
- *
- * Installed into the patched sysroot so ALL WASM programs get correct
- * swprintf behavior, not just test binaries.
- */
-
-#include <wchar.h>
-#include <errno.h>
-#include <stdarg.h>
-
-int swprintf(wchar_t *restrict s, size_t n,
-             const wchar_t *restrict fmt, ...) {
-    va_list ap;
-    va_start(ap, fmt);
-    int ret = vswprintf(s, n, fmt, ap);
-    va_end(ap);
-    if (ret < 0) {
-        errno = EOVERFLOW;
-    }
-    return ret;
-}
diff --git a/registry/native/patches/wasi-libc-overrides/swprintf.o b/registry/native/patches/wasi-libc-overrides/swprintf.o
deleted file mode 100644
index e73848c70..000000000
Binary files a/registry/native/patches/wasi-libc-overrides/swprintf.o and /dev/null differ
diff --git a/registry/native/patches/wasi-libc/.gitkeep b/registry/native/patches/wasi-libc/.gitkeep
deleted file mode 100644
index e69de29bb..000000000
diff --git a/registry/native/patches/wasi-libc/0001-pipe-dup.patch b/registry/native/patches/wasi-libc/0001-pipe-dup.patch
deleted file mode 100644
index eeae84b06..000000000
--- a/registry/native/patches/wasi-libc/0001-pipe-dup.patch
+++ /dev/null
@@ -1,92 +0,0 @@
-Implement pipe(), dup(), dup2() via host_process WASM imports.
-
-Replaces the wasi-libc stubs (which return -ENOSYS or are #ifdef'd out)
-with implementations that call our host_process.fd_pipe, host_process.fd_dup,
-and host_process.fd_dup2 WASM imports.
-
-Import signatures match wasmvm/crates/wasi-ext/src/lib.rs exactly.
-
-diff --git a/libc-bottom-half/sources/host_pipe_dup.c b/libc-bottom-half/sources/host_pipe_dup.c
-new file mode 100644
-index 0000000..08a1b92
---- /dev/null
-+++ b/libc-bottom-half/sources/host_pipe_dup.c
-@@ -0,0 +1,55 @@
-+// Pipe and FD duplication via wasmVM host_process imports.
-+//
-+// Replaces wasi-libc's ENOSYS stubs with calls to our custom WASM imports:
-+//   host_process.fd_pipe  -> pipe()
-+//   host_process.fd_dup   -> dup()
-+//   host_process.fd_dup2  -> dup2()
-+//
-+// Import signatures match wasmvm/crates/wasi-ext/src/lib.rs exactly.
-+
-+#include <__errno.h>
-+#include <stdint.h>
-+#include <unistd.h>
-+
-+#define WASM_IMPORT(mod, fn) \
-+    __attribute__((__import_module__(mod), __import_name__(fn)))
-+
-+WASM_IMPORT("host_process", "fd_pipe")
-+uint32_t __host_fd_pipe(uint32_t *ret_read_fd, uint32_t *ret_write_fd);
-+
-+WASM_IMPORT("host_process", "fd_dup")
-+uint32_t __host_fd_dup(uint32_t fd, uint32_t *ret_new_fd);
-+
-+WASM_IMPORT("host_process", "fd_dup2")
-+uint32_t __host_fd_dup2(uint32_t old_fd, uint32_t new_fd);
-+
-+int pipe(int fd[2]) {
-+    uint32_t r, w;
-+    uint32_t err = __host_fd_pipe(&r, &w);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    fd[0] = (int)r;
-+    fd[1] = (int)w;
-+    return 0;
-+}
-+
-+int dup(int fd) {
-+    uint32_t new_fd;
-+    uint32_t err = __host_fd_dup((uint32_t)fd, &new_fd);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    return (int)new_fd;
-+}
-+
-+int dup2(int old, int new) {
-+    uint32_t err = __host_fd_dup2((uint32_t)old, (uint32_t)new);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    return new;
-+}
-diff --git a/libc-top-half/musl/include/unistd.h b/libc-top-half/musl/include/unistd.h
-index f78b730..bf66cc5 100644
---- a/libc-top-half/musl/include/unistd.h
-+++ b/libc-top-half/musl/include/unistd.h
-@@ -45,15 +45,15 @@ extern "C" {
- 
- #include <bits/alltypes.h>
- 
--#ifdef __wasilibc_unmodified_upstream /* WASI has no pipe */
--int pipe(int [2]);
-+#ifdef __wasilibc_unmodified_upstream /* WASI has no pipe2 */
- int pipe2(int [2], int);
- #endif
-+int pipe(int [2]);
- int close(int);
- int posix_close(int, int);
--#ifdef __wasilibc_unmodified_upstream /* WASI has no dup */
- int dup(int);
- int dup2(int, int);
-+#ifdef __wasilibc_unmodified_upstream /* WASI has no dup3 */
- int dup3(int, int, int);
- #endif
- off_t lseek(int, off_t, int);
diff --git a/registry/native/patches/wasi-libc/0002-spawn-wait.patch b/registry/native/patches/wasi-libc/0002-spawn-wait.patch
deleted file mode 100644
index 809a0fe93..000000000
--- a/registry/native/patches/wasi-libc/0002-spawn-wait.patch
+++ /dev/null
@@ -1,336 +0,0 @@
-Implement posix_spawn(), posix_spawnp(), waitpid(), wait() via host_process WASM imports.
-
-Replaces musl's posix_spawn (which uses fork/clone, unavailable in WASI)
-and waitpid (which uses SYS_wait4) with implementations that call our
-host_process.proc_spawn and host_process.proc_waitpid WASM imports.
-
-Also provides posix_spawn_file_actions and posix_spawnattr helpers since
-musl's versions (in process/) are not compiled for WASI.
-
-file_actions are processed in order: dup2 maps stdio FDs, close is no-op
-(child doesn't inherit parent FDs), open maps files to stdio overrides.
-
-waitpid returns the actual waited-for PID from the host via ret_pid,
-fixing waitpid(-1, ...) which previously returned -1 (error convention).
-
-Import signatures match wasmvm/crates/wasi-ext/src/lib.rs exactly.
-
---- /dev/null	2026-03-16 11:59:07.564000026 -0700
-+++ b/libc-bottom-half/sources/host_spawn_wait.c	2026-03-19 20:51:08.698271081 -0700
-@@ -0,0 +1,316 @@
-+// Process spawning and waiting via wasmVM host_process imports.
-+//
-+// Replaces musl's posix_spawn (which uses fork/clone, unavailable in WASI)
-+// and waitpid (which uses SYS_wait4) with our custom WASM imports:
-+//   host_process.proc_spawn   -> posix_spawn(), posix_spawnp()
-+//   host_process.proc_waitpid -> waitpid(), wait()
-+//
-+// Also provides posix_spawn_file_actions and posix_spawnattr helpers
-+// (musl's process/ directory is not compiled for WASI).
-+//
-+// Import signatures match wasmvm/crates/wasi-ext/src/lib.rs exactly.
-+
-+#include <__errno.h>
-+#include <__errno_values.h>
-+#include <fcntl.h>
-+#include <stdint.h>
-+#include <stdlib.h>
-+#include <string.h>
-+#include <unistd.h>
-+#include <sys/types.h>
-+#include <wasi/api.h>
-+
-+// spawn.h and sys/wait.h are not installed in the wasi sysroot.
-+// Define the needed types inline (matching musl's spawn.h layout).
-+
-+#define __NEED_sigset_t
-+#include <bits/alltypes.h>
-+
-+typedef struct {
-+    int __flags;
-+    pid_t __pgrp;
-+    sigset_t __def, __mask;
-+    int __prio, __pol;
-+    void *__fn;
-+    char __pad[64-sizeof(void *)];
-+} posix_spawnattr_t;
-+
-+typedef struct {
-+    int __pad0[2];
-+    void *__actions;
-+    int __pad[16];
-+} posix_spawn_file_actions_t;
-+
-+struct sched_param { int sched_priority; };
-+
-+#define WASM_IMPORT(mod, fn) \
-+    __attribute__((__import_module__(mod), __import_name__(fn)))
-+
-+// host_process.proc_spawn(argv_ptr, argv_len, envp_ptr, envp_len,
-+//   stdin_fd, stdout_fd, stderr_fd, cwd_ptr, cwd_len, ret_pid) -> errno
-+WASM_IMPORT("host_process", "proc_spawn")
-+uint32_t __host_proc_spawn(
-+    const uint8_t *argv_ptr, uint32_t argv_len,
-+    const uint8_t *envp_ptr, uint32_t envp_len,
-+    uint32_t stdin_fd, uint32_t stdout_fd, uint32_t stderr_fd,
-+    const uint8_t *cwd_ptr, uint32_t cwd_len,
-+    uint32_t *ret_pid);
-+
-+// host_process.proc_waitpid(pid, options, ret_status, ret_pid) -> errno
-+WASM_IMPORT("host_process", "proc_waitpid")
-+uint32_t __host_proc_waitpid(uint32_t pid, uint32_t options,
-+    uint32_t *ret_status, uint32_t *ret_pid);
-+
-+// Internal file operation descriptor (matches musl's fdop.h layout)
-+#define FDOP_CLOSE 1
-+#define FDOP_DUP2  2
-+#define FDOP_OPEN  3
-+#define FDOP_CHDIR 4
-+#define FDOP_FCHDIR 5
-+
-+struct __fdop {
-+    struct __fdop *next, *prev;
-+    int cmd, fd, srcfd, oflag;
-+    mode_t mode;
-+    char path[];
-+};
-+
-+// --- posix_spawn_file_actions helpers ---
-+
-+int posix_spawn_file_actions_init(posix_spawn_file_actions_t *fa) {
-+    memset(fa, 0, sizeof(*fa));
-+    return 0;
-+}
-+
-+int posix_spawn_file_actions_destroy(posix_spawn_file_actions_t *fa) {
-+    struct __fdop *op = fa->__actions;
-+    while (op) {
-+        struct __fdop *next = op->next;
-+        free(op);
-+        op = next;
-+    }
-+    fa->__actions = 0;
-+    return 0;
-+}
-+
-+// Append to file_actions list (preserves POSIX-required execution order)
-+static int __addfdop(posix_spawn_file_actions_t *fa, struct __fdop *op) {
-+    op->next = 0;
-+    if (!fa->__actions) {
-+        op->prev = 0;
-+        fa->__actions = op;
-+    } else {
-+        struct __fdop *tail = fa->__actions;
-+        while (tail->next) tail = tail->next;
-+        tail->next = op;
-+        op->prev = tail;
-+    }
-+    return 0;
-+}
-+
-+int posix_spawn_file_actions_adddup2(posix_spawn_file_actions_t *fa, int srcfd, int fd) {
-+    if (srcfd < 0 || fd < 0) return EBADF;
-+    struct __fdop *op = malloc(sizeof(*op));
-+    if (!op) return ENOMEM;
-+    op->cmd = FDOP_DUP2;
-+    op->srcfd = srcfd;
-+    op->fd = fd;
-+    return __addfdop(fa, op);
-+}
-+
-+int posix_spawn_file_actions_addclose(posix_spawn_file_actions_t *fa, int fd) {
-+    if (fd < 0) return EBADF;
-+    struct __fdop *op = malloc(sizeof(*op));
-+    if (!op) return ENOMEM;
-+    op->cmd = FDOP_CLOSE;
-+    op->fd = fd;
-+    return __addfdop(fa, op);
-+}
-+
-+int posix_spawn_file_actions_addopen(posix_spawn_file_actions_t *fa, int fd,
-+    const char *path, int oflag, mode_t mode) {
-+    if (fd < 0) return EBADF;
-+    size_t l = strlen(path);
-+    struct __fdop *op = malloc(sizeof(*op) + l + 1);
-+    if (!op) return ENOMEM;
-+    op->cmd = FDOP_OPEN;
-+    op->fd = fd;
-+    op->oflag = oflag;
-+    op->mode = mode;
-+    memcpy(op->path, path, l + 1);
-+    return __addfdop(fa, op);
-+}
-+
-+#if defined(_BSD_SOURCE) || defined(_GNU_SOURCE)
-+int posix_spawn_file_actions_addchdir_np(posix_spawn_file_actions_t *restrict fa,
-+    const char *restrict path) {
-+    size_t l = strlen(path);
-+    struct __fdop *op = malloc(sizeof(*op) + l + 1);
-+    if (!op) return ENOMEM;
-+    op->cmd = FDOP_CHDIR;
-+    op->fd = 0;
-+    memcpy(op->path, path, l + 1);
-+    return __addfdop(fa, op);
-+}
-+
-+int posix_spawn_file_actions_addfchdir_np(posix_spawn_file_actions_t *fa, int fd) {
-+    if (fd < 0) return EBADF;
-+    struct __fdop *op = malloc(sizeof(*op));
-+    if (!op) return ENOMEM;
-+    op->cmd = FDOP_FCHDIR;
-+    op->fd = fd;
-+    return __addfdop(fa, op);
-+}
-+#endif
-+
-+// --- posix_spawnattr helpers (silently ignored by posix_spawn) ---
-+
-+int posix_spawnattr_init(posix_spawnattr_t *attr) { memset(attr, 0, sizeof(*attr)); return 0; }
-+int posix_spawnattr_destroy(posix_spawnattr_t *attr) { (void)attr; return 0; }
-+int posix_spawnattr_setflags(posix_spawnattr_t *a, short f) { a->__flags = f; return 0; }
-+int posix_spawnattr_getflags(const posix_spawnattr_t *restrict a, short *restrict f) { *f = (short)a->__flags; return 0; }
-+int posix_spawnattr_setpgroup(posix_spawnattr_t *a, pid_t g) { a->__pgrp = g; return 0; }
-+int posix_spawnattr_getpgroup(const posix_spawnattr_t *restrict a, pid_t *restrict g) { *g = a->__pgrp; return 0; }
-+int posix_spawnattr_setsigmask(posix_spawnattr_t *restrict a, const sigset_t *restrict m) { a->__mask = *m; return 0; }
-+int posix_spawnattr_getsigmask(const posix_spawnattr_t *restrict a, sigset_t *restrict m) { *m = a->__mask; return 0; }
-+int posix_spawnattr_setsigdefault(posix_spawnattr_t *restrict a, const sigset_t *restrict d) { a->__def = *d; return 0; }
-+int posix_spawnattr_getsigdefault(const posix_spawnattr_t *restrict a, sigset_t *restrict d) { *d = a->__def; return 0; }
-+
-+// Scheduling attributes — store values but not enforced in sandbox
-+int posix_spawnattr_setschedparam(posix_spawnattr_t *restrict a, const struct sched_param *restrict p) { a->__prio = p->sched_priority; return 0; }
-+int posix_spawnattr_getschedparam(const posix_spawnattr_t *restrict a, struct sched_param *restrict p) { p->sched_priority = a->__prio; return 0; }
-+int posix_spawnattr_setschedpolicy(posix_spawnattr_t *a, int pol) { a->__pol = pol; return 0; }
-+int posix_spawnattr_getschedpolicy(const posix_spawnattr_t *restrict a, int *restrict pol) { *pol = a->__pol; return 0; }
-+
-+// --- posix_spawn ---
-+
-+int posix_spawn(pid_t *restrict res, const char *restrict path,
-+    const posix_spawn_file_actions_t *fa,
-+    const posix_spawnattr_t *restrict attr,
-+    char *const argv[restrict], char *const envp[restrict]) {
-+    (void)attr;
-+
-+    // Serialize argv: path as first entry (the command), then argv[1:]
-+    size_t argv_buf_len = strlen(path) + 1;
-+    if (argv) {
-+        for (int i = 1; argv[i]; i++)
-+            argv_buf_len += strlen(argv[i]) + 1;
-+    }
-+
-+    uint8_t *argv_buf = malloc(argv_buf_len);
-+    if (!argv_buf) return ENOMEM;
-+
-+    uint8_t *p = argv_buf;
-+    size_t len = strlen(path) + 1;
-+    memcpy(p, path, len); p += len;
-+    if (argv) {
-+        for (int i = 1; argv[i]; i++) {
-+            len = strlen(argv[i]) + 1;
-+            memcpy(p, argv[i], len); p += len;
-+        }
-+    }
-+
-+    // Serialize envp — if NULL, use current environment
-+    extern char **environ;
-+    char *const *env = envp ? envp : environ;
-+
-+    size_t envp_buf_len = 0;
-+    if (env) {
-+        for (int i = 0; env[i]; i++)
-+            envp_buf_len += strlen(env[i]) + 1;
-+    }
-+
-+    uint8_t *envp_buf = NULL;
-+    if (envp_buf_len > 0) {
-+        envp_buf = malloc(envp_buf_len);
-+        if (!envp_buf) { free(argv_buf); return ENOMEM; }
-+        p = envp_buf;
-+        for (int i = 0; env[i]; i++) {
-+            len = strlen(env[i]) + 1;
-+            memcpy(p, env[i], len); p += len;
-+        }
-+    }
-+
-+    // Process file_actions in order: extract stdio overrides and handle close/open
-+    uint32_t stdin_fd = 0, stdout_fd = 1, stderr_fd = 2;
-+    if (fa && fa->__actions) {
-+        for (struct __fdop *op = fa->__actions; op; op = op->next) {
-+            switch (op->cmd) {
-+            case FDOP_DUP2:
-+                if (op->fd == 0) stdin_fd = (uint32_t)op->srcfd;
-+                else if (op->fd == 1) stdout_fd = (uint32_t)op->srcfd;
-+                else if (op->fd == 2) stderr_fd = (uint32_t)op->srcfd;
-+                break;
-+            case FDOP_CLOSE:
-+                // No-op: child doesn't inherit parent FDs in our model.
-+                // POSIX close-in-child semantics are handled by the host:
-+                // proc_spawn closes stdio override FDs after fork.
-+                break;
-+            case FDOP_OPEN: {
-+                int opened = open(op->path, op->oflag, op->mode);
-+                if (opened < 0) {
-+                    free(argv_buf);
-+                    free(envp_buf);
-+                    return errno;
-+                }
-+                if (op->fd == 0) stdin_fd = (uint32_t)opened;
-+                else if (op->fd == 1) stdout_fd = (uint32_t)opened;
-+                else if (op->fd == 2) stderr_fd = (uint32_t)opened;
-+                else close(opened);
-+                break;
-+            }
-+            }
-+        }
-+    }
-+
-+    uint32_t child_pid;
-+    uint32_t err = __host_proc_spawn(
-+        argv_buf, (uint32_t)argv_buf_len,
-+        envp_buf ? envp_buf : (const uint8_t *)"", (uint32_t)envp_buf_len,
-+        stdin_fd, stdout_fd, stderr_fd,
-+        (const uint8_t *)"", 0,
-+        &child_pid);
-+
-+    free(argv_buf);
-+    free(envp_buf);
-+
-+    if (err != 0) return (int)err;
-+    if (res) *res = (pid_t)child_pid;
-+    return 0;
-+}
-+
-+int posix_spawnp(pid_t *restrict res, const char *restrict file,
-+    const posix_spawn_file_actions_t *fa,
-+    const posix_spawnattr_t *restrict attr,
-+    char *const argv[restrict], char *const envp[restrict]) {
-+    return posix_spawn(res, file, fa, attr, argv, envp);
-+}
-+
-+// --- waitpid / wait ---
-+
-+pid_t waitpid(pid_t pid, int *status, int options) {
-+    uint32_t raw_status;
-+    uint32_t actual_pid;
-+    uint32_t err = __host_proc_waitpid((uint32_t)pid, (uint32_t)options,
-+        &raw_status, &actual_pid);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    // Encode POSIX wait status: signal kills come as 128+signal (bash
-+    // convention), normal exits as raw exit code
-+    if (status) {
-+        if (raw_status > 128 && raw_status < 256) {
-+            // Signal kill: POSIX encoding = signal in low 7 bits
-+            *status = (int)(raw_status - 128);
-+        } else {
-+            // Normal exit: POSIX encoding = exit code in bits 15..8
-+            *status = (int)(raw_status << 8);
-+        }
-+    }
-+    return (pid_t)actual_pid;
-+}
-+
-+pid_t wait(int *status) {
-+    return waitpid(-1, status, 0);
-+}
diff --git a/registry/native/patches/wasi-libc/0003-kill.patch b/registry/native/patches/wasi-libc/0003-kill.patch
deleted file mode 100644
index 150b1fc4e..000000000
--- a/registry/native/patches/wasi-libc/0003-kill.patch
+++ /dev/null
@@ -1,74 +0,0 @@
-Implement kill() via host_process WASM import.
-
-Un-ifdefs kill() declaration from signal.h (was hidden behind
-__wasilibc_unmodified_upstream) and provides an implementation
-that calls host_process.proc_kill. Other signal functions
-(sigemptyset, sigaction, etc.) remain hidden.
-
-Also ensures pid_t is defined before the kill() declaration by
-adding __NEED_pid_t + bits/alltypes.h outside the upstream-only block.
-
-Import signature matches wasmvm/crates/wasi-ext/src/lib.rs exactly.
-
-diff --git a/libc-bottom-half/sources/host_kill.c b/libc-bottom-half/sources/host_kill.c
-new file mode 100644
-index 0000000..cbf9211
---- /dev/null
-+++ b/libc-bottom-half/sources/host_kill.c
-@@ -0,0 +1,25 @@
-+// kill() via wasmVM host_process import.
-+//
-+// Replaces wasi-libc's hidden kill() declaration with an implementation
-+// that calls our custom host_process.proc_kill WASM import.
-+//
-+// Import signature matches wasmvm/crates/wasi-ext/src/lib.rs exactly.
-+
-+#include <__errno.h>
-+#include <stdint.h>
-+#include <sys/types.h>
-+
-+#define WASM_IMPORT(mod, fn) \
-+    __attribute__((__import_module__(mod), __import_name__(fn)))
-+
-+WASM_IMPORT("host_process", "proc_kill")
-+uint32_t __host_proc_kill(uint32_t pid, uint32_t signal);
-+
-+int kill(pid_t pid, int sig) {
-+    uint32_t err = __host_proc_kill((uint32_t)pid, (uint32_t)sig);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    return 0;
-+}
-diff --git a/libc-top-half/musl/include/signal.h b/libc-top-half/musl/include/signal.h
-index 75b5e55..9bf8833 100644
---- a/libc-top-half/musl/include/signal.h
-+++ b/libc-top-half/musl/include/signal.h
-@@ -15,7 +15,14 @@ extern "C" {
-  || defined(_XOPEN_SOURCE) || defined(_GNU_SOURCE) \
-  || defined(_BSD_SOURCE)
- 
--#ifdef __wasilibc_unmodified_upstream /* WASI has no ucontext support */
-+#ifndef __wasilibc_unmodified_upstream
-+// Ensure pid_t is available for kill() declaration below.
-+// The upstream __NEED_pid_t is inside the ifdef'd-out block.
-+#define __NEED_pid_t
-+#include <bits/alltypes.h>
-+#endif
-+
-+#ifdef __wasilibc_unmodified_upstream /* WASI has no ucontext/sigaction */
- #ifdef _GNU_SOURCE
- #define __ucontext ucontext
- #endif
-@@ -220,9 +227,9 @@ int __libc_current_sigrtmax(void);
- #define SIGRTMAX  (__libc_current_sigrtmax())
- #endif
- 
--#ifdef __wasilibc_unmodified_upstream /* WASI has no signals */
- int kill(pid_t, int);
- 
-+#ifdef __wasilibc_unmodified_upstream /* WASI has no signal sets */
- int sigemptyset(sigset_t *);
- int sigfillset(sigset_t *);
- int sigaddset(sigset_t *, int);
diff --git a/registry/native/patches/wasi-libc/0004-getpid.patch b/registry/native/patches/wasi-libc/0004-getpid.patch
deleted file mode 100644
index a9168a01f..000000000
--- a/registry/native/patches/wasi-libc/0004-getpid.patch
+++ /dev/null
@@ -1,96 +0,0 @@
-Implement getpid() and getppid() via host_process WASM imports.
-
-Replaces wasi-libc's hardcoded getpid (returns 42) with a real
-implementation that calls host_process.proc_getpid. Un-ifdefs
-getppid() from unistd.h and provides implementation via
-host_process.proc_getppid.
-
-Header changes:
-- getpid(): remove _WASI_EMULATED_GETPID conditional and deprecation
-  warning - always available without special flags
-- getppid(): un-ifdef from the __wasilibc_unmodified_upstream block
-
-The old getpid/getpid.c (libwasi-emulated-getpid.a) is replaced with
-a redirect to avoid duplicate symbols.
-
-Import signatures match wasmvm/crates/wasi-ext/src/lib.rs exactly.
-
-diff --git a/libc-bottom-half/getpid/getpid.c b/libc-bottom-half/getpid/getpid.c
-index d2920ac..c8de71d 100644
---- a/libc-bottom-half/getpid/getpid.c
-+++ b/libc-bottom-half/getpid/getpid.c
-@@ -1,6 +1,3 @@
--#include <unistd.h>
--
--pid_t getpid(void) {
--    // Return an arbitrary value, greater than 1 which is special.
--    return 42;
--}
-+// getpid() is now provided by host_getpid.c in libc-bottom-half/sources/
-+// via the host_process.proc_getpid WASM import (returns real virtual PID).
-+// This file is kept empty to avoid duplicate symbols.
-diff --git a/libc-bottom-half/sources/host_getpid.c b/libc-bottom-half/sources/host_getpid.c
-new file mode 100644
-index 0000000..b20aeb0
---- /dev/null
-+++ b/libc-bottom-half/sources/host_getpid.c
-@@ -0,0 +1,34 @@
-+// getpid() and getppid() via wasmVM host_process imports.
-+//
-+// Replaces wasi-libc's hardcoded getpid (which returns 42) and
-+// adds getppid (which was #ifdef'd out) with implementations that
-+// call our host_process.proc_getpid and host_process.proc_getppid.
-+//
-+// Import signatures match wasmvm/crates/wasi-ext/src/lib.rs exactly.
-+
-+#include <__errno.h>
-+#include <stdint.h>
-+#include <unistd.h>
-+
-+#define WASM_IMPORT(mod, fn) \
-+    __attribute__((__import_module__(mod), __import_name__(fn)))
-+
-+WASM_IMPORT("host_process", "proc_getpid")
-+uint32_t __host_proc_getpid(uint32_t *ret_pid);
-+
-+WASM_IMPORT("host_process", "proc_getppid")
-+uint32_t __host_proc_getppid(uint32_t *ret_pid);
-+
-+pid_t getpid(void) {
-+    uint32_t pid;
-+    uint32_t err = __host_proc_getpid(&pid);
-+    if (err != 0) return -1;
-+    return (pid_t)pid;
-+}
-+
-+pid_t getppid(void) {
-+    uint32_t ppid;
-+    uint32_t err = __host_proc_getppid(&ppid);
-+    if (err != 0) return -1;
-+    return (pid_t)ppid;
-+}
-diff --git a/libc-top-half/musl/include/unistd.h b/libc-top-half/musl/include/unistd.h
-index bf66cc5..7f56f0d 100644
---- a/libc-top-half/musl/include/unistd.h
-+++ b/libc-top-half/musl/include/unistd.h
-@@ -149,18 +149,10 @@ int fexecve(int, char *const [], char *const []);
- #endif
- _Noreturn void _exit(int);
- 
--#if defined(__wasilibc_unmodified_upstream) || defined(_WASI_EMULATED_GETPID)
- pid_t getpid(void);
--#else
--__attribute__((__deprecated__(
--"WASI lacks process identifiers; to enable emulation of the `getpid` function using "
--"a placeholder value, which doesn't reflect the host PID of the program, "
--"compile with -D_WASI_EMULATED_GETPID and link with -lwasi-emulated-getpid"
--)))
--pid_t getpid(void);
--#endif
--#ifdef __wasilibc_unmodified_upstream /* WASI has no getpid etc. */
- pid_t getppid(void);
-+
-+#ifdef __wasilibc_unmodified_upstream /* WASI has no process groups */
- pid_t getpgrp(void);
- pid_t getpgid(pid_t);
- int setpgid(pid_t, pid_t);
diff --git a/registry/native/patches/wasi-libc/0005-user-identity.patch b/registry/native/patches/wasi-libc/0005-user-identity.patch
deleted file mode 100644
index 7d1ac9e88..000000000
--- a/registry/native/patches/wasi-libc/0005-user-identity.patch
+++ /dev/null
@@ -1,93 +0,0 @@
-Implement getuid(), geteuid(), getgid(), getegid() via host_user WASM imports.
-
-Un-ifdefs the four user identity functions from unistd.h (they were
-hidden behind __wasilibc_unmodified_upstream). Keeps getgroups, setuid,
-seteuid, setgid, setegid hidden since we don't implement those.
-
-Adds a new source file with implementations that call our
-host_user.getuid, host_user.getgid, host_user.geteuid, host_user.getegid
-WASM imports.
-
-Import signatures match wasmvm/crates/wasi-ext/src/lib.rs exactly.
-
-diff --git a/libc-bottom-half/sources/host_user_identity.c b/libc-bottom-half/sources/host_user_identity.c
-new file mode 100644
-index 0000000..dea8001
---- /dev/null
-+++ b/libc-bottom-half/sources/host_user_identity.c
-@@ -0,0 +1,57 @@
-+// User/group identity via wasmVM host_user imports.
-+//
-+// Replaces wasi-libc's #ifdef'd out stubs with implementations that
-+// call our custom WASM imports:
-+//   host_user.getuid   -> getuid()
-+//   host_user.getgid   -> getgid()
-+//   host_user.geteuid  -> geteuid()
-+//   host_user.getegid  -> getegid()
-+//
-+// Import signatures match wasmvm/crates/wasi-ext/src/lib.rs exactly.
-+
-+#include <__errno.h>
-+#include <stdint.h>
-+#include <unistd.h>
-+
-+#define WASM_IMPORT(mod, fn) \
-+    __attribute__((__import_module__(mod), __import_name__(fn)))
-+
-+WASM_IMPORT("host_user", "getuid")
-+uint32_t __host_getuid(uint32_t *ret_uid);
-+
-+WASM_IMPORT("host_user", "getgid")
-+uint32_t __host_getgid(uint32_t *ret_gid);
-+
-+WASM_IMPORT("host_user", "geteuid")
-+uint32_t __host_geteuid(uint32_t *ret_uid);
-+
-+WASM_IMPORT("host_user", "getegid")
-+uint32_t __host_getegid(uint32_t *ret_gid);
-+
-+uid_t getuid(void) {
-+    uint32_t uid;
-+    uint32_t err = __host_getuid(&uid);
-+    if (err != 0) return (uid_t)-1;
-+    return (uid_t)uid;
-+}
-+
-+uid_t geteuid(void) {
-+    uint32_t uid;
-+    uint32_t err = __host_geteuid(&uid);
-+    if (err != 0) return (uid_t)-1;
-+    return (uid_t)uid;
-+}
-+
-+gid_t getgid(void) {
-+    uint32_t gid;
-+    uint32_t err = __host_getgid(&gid);
-+    if (err != 0) return (gid_t)-1;
-+    return (gid_t)gid;
-+}
-+
-+gid_t getegid(void) {
-+    uint32_t gid;
-+    uint32_t err = __host_getegid(&gid);
-+    if (err != 0) return (gid_t)-1;
-+    return (gid_t)gid;
-+}
-diff --git a/libc-top-half/musl/include/unistd.h b/libc-top-half/musl/include/unistd.h
-index 7f56f0d..cb62f56 100644
---- a/libc-top-half/musl/include/unistd.h
-+++ b/libc-top-half/musl/include/unistd.h
-@@ -169,11 +169,12 @@ pid_t tcgetpgrp(int);
- int tcsetpgrp(int, pid_t);
- #endif
- 
--#ifdef __wasilibc_unmodified_upstream /* WASI has no getuid etc. */
- uid_t getuid(void);
- uid_t geteuid(void);
- gid_t getgid(void);
- gid_t getegid(void);
-+
-+#ifdef __wasilibc_unmodified_upstream /* WASI has no setuid etc. */
- int getgroups(int, gid_t []);
- int setuid(uid_t);
- int seteuid(uid_t);
diff --git a/registry/native/patches/wasi-libc/0006-isatty.patch b/registry/native/patches/wasi-libc/0006-isatty.patch
deleted file mode 100644
index dcbc03efa..000000000
--- a/registry/native/patches/wasi-libc/0006-isatty.patch
+++ /dev/null
@@ -1,57 +0,0 @@
-Implement isatty() via host_user WASM import.
-
-Replaces wasi-libc's basic filetype heuristic (fd_fdstat_get check
-for CHARACTER_DEVICE without SEEK/TELL rights) with a call to our
-host_user.isatty import, which checks actual PTY state on the host.
-
-Preserves the __isatty / isatty weak alias pattern used by musl's
-__stdout_write.c and __fdopen.c.
-
-Import signature matches wasmvm/crates/wasi-ext/src/lib.rs exactly.
-
---- a/libc-bottom-half/sources/isatty.c
-+++ b/libc-bottom-half/sources/isatty.c
-@@ -1,22 +1,28 @@
--#include <wasi/api.h>
--#include <__errno.h>
-+// isatty() via wasmVM host_user import.
-+//
-+// Replaces wasi-libc's fdstat-based heuristic with a call to our
-+// host_user.isatty import which checks actual PTY state on the host.
-+//
-+// Import signature matches wasmvm/crates/wasi-ext/src/lib.rs exactly.
-+
-+#include <__errno.h>
-+#include <stdint.h>
- #include <__function___isatty.h>
-
-+#define WASM_IMPORT(mod, fn) \
-+    __attribute__((__import_module__(mod), __import_name__(fn)))
-+
-+// host_user.isatty(fd: u32, ret_bool: *mut u32) -> errno
-+WASM_IMPORT("host_user", "isatty")
-+uint32_t __host_isatty(uint32_t fd, uint32_t *ret_bool);
-+
- int __isatty(int fd) {
--    __wasi_fdstat_t statbuf;
--    int r = __wasi_fd_fdstat_get(fd, &statbuf);
--    if (r != 0) {
--        errno = r;
-+    uint32_t result;
-+    uint32_t err = __host_isatty((uint32_t)fd, &result);
-+    if (err != 0) {
-+        errno = (int)err;
-         return 0;
-     }
--
--    // A tty is a character device that we can't seek or tell on.
--    if (statbuf.fs_filetype != __WASI_FILETYPE_CHARACTER_DEVICE ||
--        (statbuf.fs_rights_base & (__WASI_RIGHTS_FD_SEEK | __WASI_RIGHTS_FD_TELL)) != 0) {
--        errno = __WASI_ERRNO_NOTTY;
--        return 0;
--    }
--
--    return 1;
-+    return result != 0 ? 1 : 0;
- }
- extern __typeof(__isatty) isatty __attribute__((weak, alias("__isatty")));
diff --git a/registry/native/patches/wasi-libc/0007-getpwuid.patch b/registry/native/patches/wasi-libc/0007-getpwuid.patch
deleted file mode 100644
index 04845b058..000000000
--- a/registry/native/patches/wasi-libc/0007-getpwuid.patch
+++ /dev/null
@@ -1,107 +0,0 @@
-Implement getpwuid() via host_user.getpwuid WASM import.
-
-Replaces musl's /etc/passwd-based getpwuid() with an implementation
-that calls our host_user.getpwuid custom WASM import and parses the
-returned serialized passwd string (name:x:uid:gid:gecos:home:shell)
-into a struct passwd.
-
-Un-omits pwd.h from the sysroot headers so C programs can use
-struct passwd and getpwuid().
-
-Import signature matches wasmvm/crates/wasi-ext/src/lib.rs exactly.
-
-diff --git a/libc-bottom-half/sources/host_user_getpwuid.c b/libc-bottom-half/sources/host_user_getpwuid.c
-new file mode 100644
-index 0000000..c80a680
---- /dev/null
-+++ b/libc-bottom-half/sources/host_user_getpwuid.c
-@@ -0,0 +1,57 @@
-+// getpwuid() via wasmVM host_user.getpwuid import.
-+//
-+// Replaces musl's /etc/passwd-based implementation with a call to our
-+// custom WASM import. The host returns a serialized passwd string:
-+//   name:x:uid:gid:gecos:home:shell
-+// which we parse into struct passwd fields.
-+//
-+// Import signature matches wasmvm/crates/wasi-ext/src/lib.rs exactly.
-+
-+#include <pwd.h>
-+#include <stdint.h>
-+#include <string.h>
-+#include <stdlib.h>
-+
-+#define WASM_IMPORT(mod, fn) \
-+    __attribute__((__import_module__(mod), __import_name__(fn)))
-+
-+WASM_IMPORT("host_user", "getpwuid")
-+uint32_t __host_getpwuid(uint32_t uid, uint8_t *buf_ptr, uint32_t buf_len, uint32_t *ret_len);
-+
-+static struct passwd pw_entry;
-+static char pw_buf[512];
-+
-+struct passwd *getpwuid(uid_t uid) {
-+    uint32_t ret_len = 0;
-+    uint32_t err = __host_getpwuid(
-+        (uint32_t)uid,
-+        (uint8_t *)pw_buf,
-+        (uint32_t)(sizeof(pw_buf) - 1),
-+        &ret_len
-+    );
-+    if (err != 0) return NULL;
-+    if (ret_len >= sizeof(pw_buf)) return NULL;
-+
-+    pw_buf[ret_len] = '\0';
-+
-+    char *fields[7];
-+    int fi = 0;
-+    fields[0] = pw_buf;
-+    for (uint32_t i = 0; i < ret_len && fi < 6; i++) {
-+        if (pw_buf[i] == ':') {
-+            pw_buf[i] = '\0';
-+            fields[++fi] = &pw_buf[i + 1];
-+        }
-+    }
-+    if (fi != 6) return NULL;
-+
-+    pw_entry.pw_name   = fields[0];
-+    pw_entry.pw_passwd = fields[1];
-+    pw_entry.pw_uid    = (uid_t)atoi(fields[2]);
-+    pw_entry.pw_gid    = (gid_t)atoi(fields[3]);
-+    pw_entry.pw_gecos  = fields[4];
-+    pw_entry.pw_dir    = fields[5];
-+    pw_entry.pw_shell  = fields[6];
-+
-+    return &pw_entry;
-+}
-diff --git a/libc-top-half/musl/src/passwd/getpwent.c b/libc-top-half/musl/src/passwd/getpwent.c
-index f2bd516..6ca7e67 100644
---- a/libc-top-half/musl/src/passwd/getpwent.c
-+++ b/libc-top-half/musl/src/passwd/getpwent.c
-@@ -22,12 +22,14 @@ struct passwd *getpwent()
- 	return res;
- }
- 
-+#ifdef __wasilibc_unmodified_upstream /* getpwuid via /etc/passwd - replaced by host_user import */
- struct passwd *getpwuid(uid_t uid)
- {
- 	struct passwd *res;
- 	__getpw_a(0, uid, &pw, &line, &size, &res);
- 	return res;
- }
-+#endif
- 
- struct passwd *getpwnam(const char *name)
- {
-diff --git a/scripts/install-include-headers.sh b/scripts/install-include-headers.sh
-index efa48aa..30b2da5 100755
---- a/scripts/install-include-headers.sh
-+++ b/scripts/install-include-headers.sh
-@@ -62,7 +62,7 @@ MUSL_OMIT_HEADERS+=("sys/procfs.h" "sys/user.h" "sys/kd.h" "sys/vt.h" \
-     "sys/swap.h" "sys/sendfile.h" "sys/inotify.h" "sys/quota.h" "sys/klog.h" \
-     "sys/fsuid.h" "sys/io.h" "sys/prctl.h" "sys/mtio.h" "sys/mount.h" \
-     "sys/fanotify.h" "sys/personality.h" "elf.h" "link.h" "bits/link.h" \
--    "scsi/scsi.h" "scsi/scsi_ioctl.h" "scsi/sg.h" "sys/auxv.h" "pwd.h" \
-+    "scsi/scsi.h" "scsi/scsi_ioctl.h" "scsi/sg.h" "sys/auxv.h" \
-     "shadow.h" "grp.h" "mntent.h" "resolv.h" "pty.h" "ulimit.h" "sys/xattr.h" \
-     "wordexp.h" "spawn.h" "sys/membarrier.h" "sys/signalfd.h" "termios.h" \
-     "sys/termios.h" "bits/termios.h" "net/if.h" "net/if_arp.h" \
diff --git a/registry/native/patches/wasi-libc/0008-sockets.patch b/registry/native/patches/wasi-libc/0008-sockets.patch
deleted file mode 100644
index b7900a2c8..000000000
--- a/registry/native/patches/wasi-libc/0008-sockets.patch
+++ /dev/null
@@ -1,833 +0,0 @@
-Implement socket(), connect(), bind(), listen(), accept(), send(),
-recv(), sendto(), recvfrom(), getaddrinfo(), freeaddrinfo(),
-gai_strerror(), gethostname(), setsockopt(), poll(), and select()
-via host_net WASM imports.
-
-Replaces the wasi-libc stubs (which return -ENOSYS or are #ifdef'd out)
-with implementations that call our host_net.net_socket, net_connect,
-net_bind, net_listen, net_accept, net_send, net_recv, net_sendto,
-net_recvfrom, net_getaddrinfo, net_close, net_setsockopt, and net_poll
-WASM imports.
-
-Un-omits netdb.h from the sysroot headers so C programs can use
-getaddrinfo/freeaddrinfo/gai_strerror. Un-gates bind() and listen()
-declarations from the wasip2-only guard.
-
-Supports AF_INET, AF_INET6, and AF_UNIX address families in
-sockaddr serialization (sockaddr_to_string / string_to_sockaddr).
-
-Import signatures match wasmvm/crates/wasi-ext/src/lib.rs exactly.
-
---- a/scripts/install-include-headers.sh	2026-03-20 04:05:48.609869966 -0700
-+++ b/scripts/install-include-headers.sh	2026-03-20 04:05:57.781880813 -0700
-@@ -69,10 +69,11 @@
-     "net/ethernet.h" "net/route.h" "netinet/if_ether.h" "netinet/ether.h" \
-     "sys/timerfd.h" "libintl.h" "sys/sysmacros.h" "aio.h")
- # Exclude `netdb.h` from all of the p1 targets.
--if [[ $TARGET_TRIPLE == *"wasi" || $TARGET_TRIPLE == *"wasi-threads" || \
--      $TARGET_TRIPLE == *"wasip1" || $TARGET_TRIPLE == *"wasip1-threads" ]]; then
--    MUSL_OMIT_HEADERS+=("netdb.h")
--fi
-+# NOTE: commented out by the secure-exec 0008-sockets patch — we provide getaddrinfo via host_net
-+#if [[ $TARGET_TRIPLE == *"wasi" || $TARGET_TRIPLE == *"wasi-threads" || \
-+#      $TARGET_TRIPLE == *"wasip1" || $TARGET_TRIPLE == *"wasip1-threads" ]]; then
-+#    MUSL_OMIT_HEADERS+=("netdb.h")
-+#fi
-
- # Remove all the `MUSL_OMIT_HEADERS` previously copied over.
- for OMIT_HEADER in "${MUSL_OMIT_HEADERS[@]}"; do
-
---- a/libc-top-half/musl/include/sys/socket.h
-+++ b/libc-top-half/musl/include/sys/socket.h
-@@ -398,9 +398,7 @@
- #include <__struct_sockaddr_storage.h>
- #endif
-
--#if (defined __wasilibc_unmodified_upstream) || (defined __wasilibc_use_wasip2)
- int socket (int, int, int);
--#endif
-
- #ifdef __wasilibc_unmodified_upstream /* WASI has no socketpair */
- int socketpair (int, int, int, int [2]);
-@@ -408,35 +406,27 @@
-
- int shutdown (int, int);
-
--#if (defined __wasilibc_unmodified_upstream) || (defined __wasilibc_use_wasip2)
- int connect (int, const struct sockaddr *, socklen_t);
- int bind (int, const struct sockaddr *, socklen_t);
- int listen (int, int);
--#endif
-
- int accept (int, struct sockaddr *__restrict, socklen_t *__restrict);
- int accept4(int, struct sockaddr *__restrict, socklen_t *__restrict, int);
-
--#if (defined __wasilibc_unmodified_upstream) || (defined __wasilibc_use_wasip2)
- int getsockname (int, struct sockaddr *__restrict, socklen_t *__restrict);
- int getpeername (int, struct sockaddr *__restrict, socklen_t *__restrict);
--#endif
-
- ssize_t send (int, const void *, size_t, int);
- ssize_t recv (int, void *, size_t, int);
--#if (defined __wasilibc_unmodified_upstream) || (defined __wasilibc_use_wasip2)
- ssize_t sendto (int, const void *, size_t, int, const struct sockaddr *, socklen_t);
- ssize_t recvfrom (int, void *__restrict, size_t, int, struct sockaddr *__restrict, socklen_t *__restrict);
--#endif
- #ifdef __wasilibc_unmodified_upstream /* WASI has no sendmsg/recvmsg */
- ssize_t sendmsg (int, const struct msghdr *, int);
- ssize_t recvmsg (int, struct msghdr *, int);
- #endif
-
- int getsockopt (int, int, int, void *__restrict, socklen_t *__restrict);
--#if (defined __wasilibc_unmodified_upstream) || (defined __wasilibc_use_wasip2)
- int setsockopt (int, int, int, const void *, socklen_t);
--#endif
-
- #ifdef __wasilibc_unmodified_upstream /* WASI has no sockatmark */
- int sockatmark (int);
-
---- a/libc-bottom-half/headers/public/__struct_sockaddr_un.h
-+++ b/libc-bottom-half/headers/public/__struct_sockaddr_un.h
-@@ -5,6 +5,7 @@
-
- struct sockaddr_un {
-     __attribute__((aligned(__BIGGEST_ALIGNMENT__))) sa_family_t sun_family;
-+    char sun_path[108];
- };
-
- #endif
-diff --git a/libc-bottom-half/sources/host_socket.c b/libc-bottom-half/sources/host_socket.c
-new file mode 100644
-index 0000000..975e62a
---- /dev/null
-+++ b/libc-bottom-half/sources/host_socket.c
-@@ -0,0 +1,729 @@
-+// Socket API via wasmVM host_net imports.
-+//
-+// Replaces wasi-libc's ENOSYS stubs with calls to our custom WASM imports:
-+//   host_net.net_socket       -> socket()
-+//   host_net.net_connect      -> connect()
-+//   host_net.net_bind         -> bind()
-+//   host_net.net_listen       -> listen()
-+//   host_net.net_accept       -> accept()
-+//   host_net.net_send         -> send()
-+//   host_net.net_recv         -> recv()
-+//   host_net.net_sendto       -> sendto()
-+//   host_net.net_recvfrom     -> recvfrom()
-+//   host_net.net_close        -> (used internally)
-+//   host_net.net_getaddrinfo  -> getaddrinfo()
-+//   host_net.net_setsockopt   -> setsockopt()
-+//   host_net.net_getsockname  -> getsockname()
-+//   host_net.net_getpeername  -> getpeername()
-+//   host_net.net_poll         -> poll()
-+//
-+// Supports AF_INET, AF_INET6, and AF_UNIX address families.
-+// Import signatures match wasmvm/crates/wasi-ext/src/lib.rs exactly.
-+
-+#include <sys/socket.h>
-+#include <sys/select.h>
-+#include <netinet/in.h>
-+#include <netdb.h>
-+#include <poll.h>
-+#include <errno.h>
-+#include <stdint.h>
-+#include <string.h>
-+#include <stdlib.h>
-+#include <stdio.h>
-+#include <arpa/inet.h>
-+#include <unistd.h>
-+
-+// AF_UNIX support — define sockaddr_un if sys/un.h is not available
-+#ifdef __has_include
-+#  if __has_include(<sys/un.h>)
-+#    include <sys/un.h>
-+#    define HAVE_SYS_UN_H 1
-+#  endif
-+#endif
-+#ifndef HAVE_SYS_UN_H
-+#  ifndef AF_UNIX
-+#    define AF_UNIX 1
-+#  endif
-+#  ifndef AF_LOCAL
-+#    define AF_LOCAL AF_UNIX
-+#  endif
-+struct sockaddr_un {
-+    sa_family_t sun_family;
-+    char sun_path[108];
-+};
-+#endif
-+
-+#define WASM_IMPORT(mod, fn) \
-+    __attribute__((__import_module__(mod), __import_name__(fn)))
-+
-+// host_net.net_socket(domain: u32, type: u32, protocol: u32, ret_fd: *mut u32) -> errno
-+WASM_IMPORT("host_net", "net_socket")
-+uint32_t __host_net_socket(uint32_t domain, uint32_t type, uint32_t protocol, uint32_t *ret_fd);
-+
-+// host_net.net_connect(fd: u32, addr_ptr: *const u8, addr_len: u32) -> errno
-+WASM_IMPORT("host_net", "net_connect")
-+uint32_t __host_net_connect(uint32_t fd, const uint8_t *addr_ptr, uint32_t addr_len);
-+
-+// host_net.net_send(fd: u32, buf_ptr: *const u8, buf_len: u32, flags: u32, ret_sent: *mut u32) -> errno
-+WASM_IMPORT("host_net", "net_send")
-+uint32_t __host_net_send(uint32_t fd, const uint8_t *buf_ptr, uint32_t buf_len, uint32_t flags, uint32_t *ret_sent);
-+
-+// host_net.net_recv(fd: u32, buf_ptr: *mut u8, buf_len: u32, flags: u32, ret_received: *mut u32) -> errno
-+WASM_IMPORT("host_net", "net_recv")
-+uint32_t __host_net_recv(uint32_t fd, uint8_t *buf_ptr, uint32_t buf_len, uint32_t flags, uint32_t *ret_received);
-+
-+// host_net.net_close(fd: u32) -> errno
-+WASM_IMPORT("host_net", "net_close")
-+uint32_t __host_net_close(uint32_t fd);
-+
-+// host_net.net_getaddrinfo(host_ptr, host_len, port_ptr, port_len, family, ret_addr, ret_addr_len) -> errno
-+WASM_IMPORT("host_net", "net_getaddrinfo")
-+uint32_t __host_net_getaddrinfo(
-+    const uint8_t *host_ptr, uint32_t host_len,
-+    const uint8_t *port_ptr, uint32_t port_len,
-+    uint32_t family,
-+    uint8_t *ret_addr, uint32_t *ret_addr_len);
-+
-+// host_net.net_setsockopt(fd, level, optname, optval_ptr, optval_len) -> errno
-+WASM_IMPORT("host_net", "net_setsockopt")
-+uint32_t __host_net_setsockopt(uint32_t fd, uint32_t level, uint32_t optname,
-+    const uint8_t *optval_ptr, uint32_t optval_len);
-+
-+// host_net.net_getsockname(fd, ret_addr, ret_addr_len) -> errno
-+WASM_IMPORT("host_net", "net_getsockname")
-+uint32_t __host_net_getsockname(uint32_t fd, uint8_t *ret_addr, uint32_t *ret_addr_len);
-+
-+// host_net.net_getpeername(fd, ret_addr, ret_addr_len) -> errno
-+WASM_IMPORT("host_net", "net_getpeername")
-+uint32_t __host_net_getpeername(uint32_t fd, uint8_t *ret_addr, uint32_t *ret_addr_len);
-+
-+// host_net.net_bind(fd, addr_ptr, addr_len) -> errno
-+WASM_IMPORT("host_net", "net_bind")
-+uint32_t __host_net_bind(uint32_t fd, const uint8_t *addr_ptr, uint32_t addr_len);
-+
-+// host_net.net_listen(fd, backlog) -> errno
-+WASM_IMPORT("host_net", "net_listen")
-+uint32_t __host_net_listen(uint32_t fd, uint32_t backlog);
-+
-+// host_net.net_accept(fd, ret_fd, ret_addr, ret_addr_len) -> errno
-+WASM_IMPORT("host_net", "net_accept")
-+uint32_t __host_net_accept(uint32_t fd, uint32_t *ret_fd, uint8_t *ret_addr, uint32_t *ret_addr_len);
-+
-+// host_net.net_poll(fds_ptr, nfds, timeout_ms, ret_ready) -> errno
-+WASM_IMPORT("host_net", "net_poll")
-+uint32_t __host_net_poll(uint8_t *fds_ptr, uint32_t nfds, int32_t timeout_ms,
-+    uint32_t *ret_ready);
-+
-+// host_net.net_sendto(fd, buf_ptr, buf_len, flags, addr_ptr, addr_len, ret_sent) -> errno
-+WASM_IMPORT("host_net", "net_sendto")
-+uint32_t __host_net_sendto(uint32_t fd, const uint8_t *buf_ptr, uint32_t buf_len,
-+    uint32_t flags, const uint8_t *addr_ptr, uint32_t addr_len, uint32_t *ret_sent);
-+
-+// host_net.net_recvfrom(fd, buf_ptr, buf_len, flags, ret_received, ret_addr, ret_addr_len) -> errno
-+WASM_IMPORT("host_net", "net_recvfrom")
-+uint32_t __host_net_recvfrom(uint32_t fd, uint8_t *buf_ptr, uint32_t buf_len,
-+    uint32_t flags, uint32_t *ret_received, uint8_t *ret_addr, uint32_t *ret_addr_len);
-+
-+// ---------------------------------------------------------------------------
-+// Address serialization helpers (AF_INET, AF_INET6, AF_UNIX)
-+// ---------------------------------------------------------------------------
-+
-+// Serialize a sockaddr to a string: "host:port" for inet, path for unix.
-+// Returns length written (not counting NUL), or -1 on error.
-+static int sockaddr_to_string(const struct sockaddr *addr, socklen_t addrlen,
-+                              char *buf, size_t buflen) {
-+    if (addr->sa_family == AF_INET) {
-+        const struct sockaddr_in *sin = (const struct sockaddr_in *)addr;
-+        char ip[INET_ADDRSTRLEN];
-+        inet_ntop(AF_INET, &sin->sin_addr, ip, sizeof(ip));
-+        unsigned int port = ntohs(sin->sin_port);
-+        return snprintf(buf, buflen, "%s:%u", ip, port);
-+    } else if (addr->sa_family == AF_INET6) {
-+        const struct sockaddr_in6 *sin6 = (const struct sockaddr_in6 *)addr;
-+        char ip[INET6_ADDRSTRLEN];
-+        inet_ntop(AF_INET6, &sin6->sin6_addr, ip, sizeof(ip));
-+        unsigned int port = ntohs(sin6->sin6_port);
-+        return snprintf(buf, buflen, "%s:%u", ip, port);
-+    } else if (addr->sa_family == AF_UNIX) {
-+        const struct sockaddr_un *sun = (const struct sockaddr_un *)addr;
-+        // Path length: addrlen - offsetof(sockaddr_un, sun_path), or strlen
-+        size_t pathlen = addrlen > (socklen_t)__builtin_offsetof(struct sockaddr_un, sun_path)
-+            ? (size_t)(addrlen - __builtin_offsetof(struct sockaddr_un, sun_path))
-+            : strlen(sun->sun_path);
-+        // Trim trailing NUL if present
-+        if (pathlen > 0 && sun->sun_path[pathlen - 1] == '\0') pathlen--;
-+        if (pathlen >= buflen) return -1;
-+        memcpy(buf, sun->sun_path, pathlen);
-+        buf[pathlen] = '\0';
-+        return (int)pathlen;
-+    }
-+    return -1; // unsupported family
-+}
-+
-+// Deserialize an address string into a sockaddr.
-+// For "host:port" → sockaddr_in or sockaddr_in6; for paths → sockaddr_un.
-+// Returns the actual sockaddr size, or 0 on error.
-+static socklen_t string_to_sockaddr(const char *str, struct sockaddr *addr,
-+                                    socklen_t addrlen) {
-+    // Find last colon to distinguish inet from unix
-+    const char *last_colon = strrchr(str, ':');
-+    if (last_colon == NULL) {
-+        // No colon → Unix domain socket path
-+        struct sockaddr_un sun;
-+        memset(&sun, 0, sizeof(sun));
-+        sun.sun_family = AF_UNIX;
-+        size_t pathlen = strlen(str);
-+        if (pathlen >= sizeof(sun.sun_path)) pathlen = sizeof(sun.sun_path) - 1;
-+        memcpy(sun.sun_path, str, pathlen);
-+        sun.sun_path[pathlen] = '\0';
-+        socklen_t copy_len = addrlen < (socklen_t)sizeof(sun) ? addrlen : (socklen_t)sizeof(sun);
-+        memcpy(addr, &sun, copy_len);
-+        return (socklen_t)sizeof(sun);
-+    }
-+
-+    // Parse host and port
-+    char ip[INET6_ADDRSTRLEN];
-+    size_t ip_len = (size_t)(last_colon - str);
-+    if (ip_len >= sizeof(ip)) ip_len = sizeof(ip) - 1;
-+    memcpy(ip, str, ip_len);
-+    ip[ip_len] = '\0';
-+    unsigned int port = 0;
-+    for (const char *p = last_colon + 1; *p >= '0' && *p <= '9'; p++)
-+        port = port * 10 + (unsigned int)(*p - '0');
-+
-+    // Try IPv4 first
-+    struct sockaddr_in sin;
-+    memset(&sin, 0, sizeof(sin));
-+    if (inet_pton(AF_INET, ip, &sin.sin_addr) == 1) {
-+        sin.sin_family = AF_INET;
-+        sin.sin_port = htons((uint16_t)port);
-+        socklen_t copy_len = addrlen < (socklen_t)sizeof(sin) ? addrlen : (socklen_t)sizeof(sin);
-+        memcpy(addr, &sin, copy_len);
-+        return (socklen_t)sizeof(sin);
-+    }
-+
-+    // Try IPv6
-+    struct sockaddr_in6 sin6;
-+    memset(&sin6, 0, sizeof(sin6));
-+    if (inet_pton(AF_INET6, ip, &sin6.sin6_addr) == 1) {
-+        sin6.sin6_family = AF_INET6;
-+        sin6.sin6_port = htons((uint16_t)port);
-+        socklen_t copy_len = addrlen < (socklen_t)sizeof(sin6) ? addrlen : (socklen_t)sizeof(sin6);
-+        memcpy(addr, &sin6, copy_len);
-+        return (socklen_t)sizeof(sin6);
-+    }
-+
-+    return 0; // parse failed
-+}
-+
-+int socket(int domain, int type, int protocol) {
-+    uint32_t fd;
-+    uint32_t err = __host_net_socket((uint32_t)domain, (uint32_t)type, (uint32_t)protocol, &fd);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    return (int)fd;
-+}
-+
-+int connect(int sockfd, const struct sockaddr *addr, socklen_t addrlen) {
-+    char buf[256];
-+    int len = sockaddr_to_string(addr, addrlen, buf, sizeof(buf));
-+    if (len < 0 || (size_t)len >= sizeof(buf)) {
-+        errno = (len < 0) ? EAFNOSUPPORT : EINVAL;
-+        return -1;
-+    }
-+
-+    uint32_t err = __host_net_connect((uint32_t)sockfd, (const uint8_t *)buf, (uint32_t)len);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    return 0;
-+}
-+
-+int bind(int sockfd, const struct sockaddr *addr, socklen_t addrlen) {
-+    char buf[256];
-+    int len = sockaddr_to_string(addr, addrlen, buf, sizeof(buf));
-+    if (len < 0 || (size_t)len >= sizeof(buf)) {
-+        errno = (len < 0) ? EAFNOSUPPORT : EINVAL;
-+        return -1;
-+    }
-+
-+    uint32_t err = __host_net_bind((uint32_t)sockfd, (const uint8_t *)buf, (uint32_t)len);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    return 0;
-+}
-+
-+int listen(int sockfd, int backlog) {
-+    uint32_t err = __host_net_listen((uint32_t)sockfd, (uint32_t)(backlog > 0 ? backlog : 0));
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    return 0;
-+}
-+
-+int accept(int sockfd, struct sockaddr *restrict addr, socklen_t *restrict addrlen) {
-+    uint32_t new_fd;
-+    uint8_t addr_buf[256];
-+    uint32_t addr_buf_len = sizeof(addr_buf) - 1;
-+
-+    uint32_t err = __host_net_accept((uint32_t)sockfd, &new_fd, addr_buf, &addr_buf_len);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+
-+    // Parse remote address string into sockaddr
-+    if (addr != NULL && addrlen != NULL) {
-+        addr_buf[addr_buf_len] = '\0';
-+        socklen_t actual = string_to_sockaddr((const char *)addr_buf, addr, *addrlen);
-+        if (actual > 0) *addrlen = actual;
-+    }
-+
-+    return (int)new_fd;
-+}
-+
-+int accept4(int sockfd, struct sockaddr *restrict addr, socklen_t *restrict addrlen, int flags) {
-+    if (flags & ~(SOCK_NONBLOCK | SOCK_CLOEXEC)) {
-+        errno = EINVAL;
-+        return -1;
-+    }
-+
-+    // CLOEXEC is ignored by wasi-libc today; preserve NONBLOCK validation parity.
-+    return accept(sockfd, addr, addrlen);
-+}
-+
-+ssize_t send(int sockfd, const void *buf, size_t len, int flags) {
-+    uint32_t sent;
-+    uint32_t err = __host_net_send((uint32_t)sockfd, (const uint8_t *)buf, (uint32_t)len, (uint32_t)flags, &sent);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    return (ssize_t)sent;
-+}
-+
-+ssize_t recv(int sockfd, void *buf, size_t len, int flags) {
-+    uint32_t received;
-+    uint32_t err = __host_net_recv((uint32_t)sockfd, (uint8_t *)buf, (uint32_t)len, (uint32_t)flags, &received);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    return (ssize_t)received;
-+}
-+
-+ssize_t sendto(int sockfd, const void *buf, size_t len, int flags,
-+               const struct sockaddr *dest_addr, socklen_t addrlen) {
-+    // If dest_addr is NULL, behave like send() (connected socket)
-+    if (dest_addr == NULL) {
-+        return send(sockfd, buf, len, flags);
-+    }
-+
-+    char addr_str[256];
-+    int slen = sockaddr_to_string(dest_addr, addrlen, addr_str, sizeof(addr_str));
-+    if (slen < 0 || (size_t)slen >= sizeof(addr_str)) {
-+        errno = (slen < 0) ? EAFNOSUPPORT : EINVAL;
-+        return -1;
-+    }
-+
-+    uint32_t sent;
-+    uint32_t err = __host_net_sendto((uint32_t)sockfd, (const uint8_t *)buf, (uint32_t)len,
-+        (uint32_t)flags, (const uint8_t *)addr_str, (uint32_t)slen, &sent);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    return (ssize_t)sent;
-+}
-+
-+ssize_t recvfrom(int sockfd, void *restrict buf, size_t len, int flags,
-+                 struct sockaddr *restrict src_addr, socklen_t *restrict addrlen) {
-+    // If src_addr is NULL, behave like recv()
-+    if (src_addr == NULL) {
-+        return recv(sockfd, buf, len, flags);
-+    }
-+
-+    uint32_t received;
-+    uint8_t ret_addr[256];
-+    uint32_t ret_addr_len = sizeof(ret_addr) - 1;
-+
-+    uint32_t err = __host_net_recvfrom((uint32_t)sockfd, (uint8_t *)buf, (uint32_t)len,
-+        (uint32_t)flags, &received, ret_addr, &ret_addr_len);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+
-+    // Parse source address string into sockaddr
-+    if (addrlen != NULL) {
-+        ret_addr[ret_addr_len] = '\0';
-+        socklen_t actual = string_to_sockaddr((const char *)ret_addr, src_addr, *addrlen);
-+        if (actual > 0) *addrlen = actual;
-+    }
-+
-+    return (ssize_t)received;
-+}
-+
-+int setsockopt(int sockfd, int level, int optname, const void *optval, socklen_t optlen) {
-+    uint32_t err = __host_net_setsockopt(
-+        (uint32_t)sockfd, (uint32_t)level, (uint32_t)optname,
-+        (const uint8_t *)optval, (uint32_t)optlen);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    return 0;
-+}
-+
-+int getsockname(int sockfd, struct sockaddr *restrict addr, socklen_t *restrict addrlen) {
-+    if (addr == NULL || addrlen == NULL) {
-+        errno = EINVAL;
-+        return -1;
-+    }
-+
-+    uint8_t addr_buf[256];
-+    uint32_t addr_buf_len = sizeof(addr_buf) - 1;
-+    uint32_t err = __host_net_getsockname((uint32_t)sockfd, addr_buf, &addr_buf_len);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+
-+    addr_buf[addr_buf_len] = '\0';
-+    socklen_t actual = string_to_sockaddr((const char *)addr_buf, addr, *addrlen);
-+    if (actual == 0) {
-+        errno = EINVAL;
-+        return -1;
-+    }
-+    *addrlen = actual;
-+    return 0;
-+}
-+
-+int getpeername(int sockfd, struct sockaddr *restrict addr, socklen_t *restrict addrlen) {
-+    if (addr == NULL || addrlen == NULL) {
-+        errno = EINVAL;
-+        return -1;
-+    }
-+
-+    uint8_t addr_buf[256];
-+    uint32_t addr_buf_len = sizeof(addr_buf) - 1;
-+    uint32_t err = __host_net_getpeername((uint32_t)sockfd, addr_buf, &addr_buf_len);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+
-+    addr_buf[addr_buf_len] = '\0';
-+    socklen_t actual = string_to_sockaddr((const char *)addr_buf, addr, *addrlen);
-+    if (actual == 0) {
-+        errno = EINVAL;
-+        return -1;
-+    }
-+    *addrlen = actual;
-+    return 0;
-+}
-+
-+int gethostname(char *name, size_t len) {
-+    const char *hostname = "sandbox";
-+    size_t hlen = strlen(hostname);
-+    if (hlen >= len) {
-+        errno = ENAMETOOLONG;
-+        return -1;
-+    }
-+    memcpy(name, hostname, hlen + 1);
-+    return 0;
-+}
-+
-+// Parse a port number from a string, return -1 on failure
-+static int parse_port(const char *s) {
-+    if (!s || !*s) return 0;
-+    int port = 0;
-+    for (; *s; s++) {
-+        if (*s < '0' || *s > '9') return -1;
-+        port = port * 10 + (*s - '0');
-+        if (port > 65535) return -1;
-+    }
-+    return port;
-+}
-+
-+// Skip whitespace in JSON parsing
-+static const char *skip_ws(const char *p) {
-+    while (*p == ' ' || *p == '\t' || *p == '\n' || *p == '\r') p++;
-+    return p;
-+}
-+
-+// Parse a JSON string value (expects p pointing at opening quote)
-+// Writes into dst (up to dst_len-1 chars), returns pointer past closing quote
-+static const char *parse_json_str(const char *p, char *dst, size_t dst_len) {
-+    if (*p != '"') return NULL;
-+    p++;
-+    size_t i = 0;
-+    while (*p && *p != '"') {
-+        if (i < dst_len - 1) dst[i++] = *p;
-+        p++;
-+    }
-+    if (i < dst_len) dst[i] = '\0';
-+    if (*p == '"') p++;
-+    return p;
-+}
-+
-+// Allocate and populate one addrinfo entry
-+static struct addrinfo *make_addrinfo(const char *addr_str, int family, int port, int socktype) {
-+    size_t sa_len;
-+    if (family == AF_INET)
-+        sa_len = sizeof(struct sockaddr_in);
-+    else if (family == AF_INET6)
-+        sa_len = sizeof(struct sockaddr_in6);
-+    else
-+        return NULL;
-+
-+    struct addrinfo *ai = calloc(1, sizeof(struct addrinfo) + sa_len);
-+    if (!ai) return NULL;
-+
-+    ai->ai_family = family;
-+    ai->ai_socktype = socktype ? socktype : SOCK_STREAM;
-+    ai->ai_protocol = (ai->ai_socktype == SOCK_STREAM) ? IPPROTO_TCP : IPPROTO_UDP;
-+    ai->ai_addrlen = sa_len;
-+    ai->ai_addr = (struct sockaddr *)((char *)ai + sizeof(struct addrinfo));
-+
-+    if (family == AF_INET) {
-+        struct sockaddr_in *sin = (struct sockaddr_in *)ai->ai_addr;
-+        sin->sin_family = AF_INET;
-+        sin->sin_port = htons((uint16_t)port);
-+        inet_pton(AF_INET, addr_str, &sin->sin_addr);
-+    } else {
-+        struct sockaddr_in6 *sin6 = (struct sockaddr_in6 *)ai->ai_addr;
-+        sin6->sin6_family = AF_INET6;
-+        sin6->sin6_port = htons((uint16_t)port);
-+        inet_pton(AF_INET6, addr_str, &sin6->sin6_addr);
-+    }
-+    return ai;
-+}
-+
-+int getaddrinfo(const char *restrict host, const char *restrict serv,
-+                const struct addrinfo *restrict hints, struct addrinfo **restrict res) {
-+    if (!host && !serv) return EAI_NONAME;
-+
-+    const char *host_str = host ? host : "";
-+    const char *port_str = serv ? serv : "0";
-+
-+    int port = parse_port(port_str);
-+    int socktype = hints ? hints->ai_socktype : 0;
-+    int family = hints ? hints->ai_family : AF_UNSPEC;
-+    uint32_t query_family = 0;
-+    if (family == AF_INET) query_family = 4;
-+    else if (family == AF_INET6) query_family = 6;
-+    else if (family != AF_UNSPEC) return EAI_FAMILY;
-+
-+    // Call host bridge for DNS resolution
-+    uint8_t buf[4096];
-+    uint32_t buf_len = sizeof(buf) - 1;
-+    uint32_t err = __host_net_getaddrinfo(
-+        (const uint8_t *)host_str, (uint32_t)strlen(host_str),
-+        (const uint8_t *)port_str, (uint32_t)strlen(port_str),
-+        query_family,
-+        buf, &buf_len);
-+    if (err != 0) return EAI_NONAME;
-+
-+    buf[buf_len] = '\0';
-+    const char *json = (const char *)buf;
-+
-+    // Parse JSON array: [{"addr":"...","family":N}, ...]
-+    struct addrinfo *head = NULL;
-+    struct addrinfo *tail = NULL;
-+    int count = 0;
-+
-+    const char *p = skip_ws(json);
-+    if (*p != '[') return EAI_FAIL;
-+    p++;
-+
-+    while (*p) {
-+        p = skip_ws(p);
-+        if (*p == ']') break;
-+        if (*p == ',') { p++; continue; }
-+        if (*p != '{') break;
-+        p++;
-+
-+        char addr_str[64] = {0};
-+        int family = 0;
-+
-+        // Parse object fields
-+        while (*p && *p != '}') {
-+            p = skip_ws(p);
-+            if (*p == ',') { p++; continue; }
-+
-+            char key[16] = {0};
-+            p = parse_json_str(p, key, sizeof(key));
-+            if (!p) goto parse_error;
-+
-+            p = skip_ws(p);
-+            if (*p != ':') goto parse_error;
-+            p++;
-+            p = skip_ws(p);
-+
-+            if (strcmp(key, "addr") == 0) {
-+                p = parse_json_str(p, addr_str, sizeof(addr_str));
-+                if (!p) goto parse_error;
-+            } else if (strcmp(key, "family") == 0) {
-+                family = 0;
-+                while (*p >= '0' && *p <= '9') {
-+                    family = family * 10 + (*p - '0');
-+                    p++;
-+                }
-+                // Map Node.js family (4/6) to AF_INET/AF_INET6
-+                if (family == 4) family = AF_INET;
-+                else if (family == 6) family = AF_INET6;
-+            } else {
-+                // Skip unknown value
-+                if (*p == '"') {
-+                    char tmp[64];
-+                    p = parse_json_str(p, tmp, sizeof(tmp));
-+                    if (!p) goto parse_error;
-+                } else {
-+                    while (*p && *p != ',' && *p != '}') p++;
-+                }
-+            }
-+        }
-+        if (*p == '}') p++;
-+
-+        // Filter by requested family
-+        if (hints && hints->ai_family != AF_UNSPEC && hints->ai_family != family)
-+            continue;
-+
-+        struct addrinfo *ai = make_addrinfo(addr_str, family, port, socktype);
-+        if (!ai) { freeaddrinfo(head); return EAI_MEMORY; }
-+
-+        if (tail) { tail->ai_next = ai; tail = ai; }
-+        else { head = tail = ai; }
-+        count++;
-+    }
-+
-+    if (count == 0) return EAI_NONAME;
-+    *res = head;
-+    return 0;
-+
-+parse_error:
-+    freeaddrinfo(head);
-+    return EAI_FAIL;
-+}
-+
-+void freeaddrinfo(struct addrinfo *res) {
-+    while (res) {
-+        struct addrinfo *next = res->ai_next;
-+        free(res);
-+        res = next;
-+    }
-+}
-+
-+const char *gai_strerror(int ecode) {
-+    switch (ecode) {
-+        case 0:            return "Success";
-+        case EAI_BADFLAGS: return "Invalid flags";
-+        case EAI_NONAME:   return "Name or service not known";
-+        case EAI_AGAIN:    return "Temporary failure in name resolution";
-+        case EAI_FAIL:     return "Non-recoverable failure in name resolution";
-+        case EAI_FAMILY:   return "Address family not supported";
-+        case EAI_SOCKTYPE: return "Socket type not supported";
-+        case EAI_SERVICE:  return "Servname not supported for ai_socktype";
-+        case EAI_MEMORY:   return "Memory allocation failure";
-+        case EAI_SYSTEM:   return "System error";
-+        case EAI_OVERFLOW: return "Argument buffer overflow";
-+        default:           return "Unknown error";
-+    }
-+}
-+
-+int poll(struct pollfd fds[], nfds_t nfds, int timeout) {
-+    // Pass pollfd array directly to host — layout matches (fd:i32, events:i16, revents:i16)
-+    uint32_t ready = 0;
-+    uint32_t err = __host_net_poll((uint8_t *)fds, (uint32_t)nfds, (int32_t)timeout, &ready);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+    if (ready > (uint32_t)nfds) {
-+        errno = EINVAL;
-+        return -1;
-+    }
-+    return (int)ready;
-+}
-+
-+static int host_fd_isset(int fd, const fd_set *set) {
-+    if (!set) return 0;
-+    for (size_t i = 0; i < set->__nfds; i++) {
-+        if (set->__fds[i] == fd) return 1;
-+    }
-+    return 0;
-+}
-+
-+static void host_fd_zero(fd_set *set) {
-+    if (set) set->__nfds = 0;
-+}
-+
-+static void host_fd_set(int fd, fd_set *set) {
-+    if (!set) return;
-+    for (size_t i = 0; i < set->__nfds; i++) {
-+        if (set->__fds[i] == fd) return;
-+    }
-+    if (set->__nfds < FD_SETSIZE) {
-+        set->__fds[set->__nfds++] = fd;
-+    }
-+}
-+
-+int select(int nfds, fd_set *restrict readfds, fd_set *restrict writefds,
-+           fd_set *restrict exceptfds, struct timeval *restrict timeout) {
-+    // Convert fd_sets to pollfd array, call poll(), then scatter results back
-+    struct pollfd pfds[FD_SETSIZE];
-+    int count = 0;
-+    int fd_map[FD_SETSIZE]; // maps pfds index -> original fd
-+
-+    for (int fd = 0; fd < nfds && count < FD_SETSIZE; fd++) {
-+        short events = 0;
-+        if (host_fd_isset(fd, readfds)) events |= POLLIN;
-+        if (host_fd_isset(fd, writefds)) events |= POLLOUT;
-+        if (events == 0 && !host_fd_isset(fd, exceptfds)) continue;
-+        pfds[count].fd = fd;
-+        pfds[count].events = events;
-+        pfds[count].revents = 0;
-+        fd_map[count] = fd;
-+        count++;
-+    }
-+
-+    int timeout_ms = -1;
-+    if (timeout) {
-+        timeout_ms = (int)(timeout->tv_sec * 1000 + timeout->tv_usec / 1000);
-+    }
-+
-+    int ret = poll(pfds, (nfds_t)count, timeout_ms);
-+    if (ret < 0) return -1;
-+
-+    // Clear fd_sets and scatter results
-+    host_fd_zero(readfds);
-+    host_fd_zero(writefds);
-+    host_fd_zero(exceptfds);
-+
-+    int ready = 0;
-+    for (int i = 0; i < count; i++) {
-+        int fd = fd_map[i];
-+        int any = 0;
-+        if (readfds && (pfds[i].revents & (POLLIN | POLLHUP | POLLERR))) {
-+            host_fd_set(fd, readfds);
-+            any = 1;
-+        }
-+        if (writefds && (pfds[i].revents & POLLOUT)) {
-+            host_fd_set(fd, writefds);
-+            any = 1;
-+        }
-+        if (exceptfds && (pfds[i].revents & (POLLERR | POLLNVAL))) {
-+            host_fd_set(fd, exceptfds);
-+            any = 1;
-+        }
-+        if (any) ready++;
-+    }
-+    return ready;
-+}
diff --git a/registry/native/patches/wasi-libc/0009-realloc-glibc-semantics.patch b/registry/native/patches/wasi-libc/0009-realloc-glibc-semantics.patch
deleted file mode 100644
index 3ebaedd3c..000000000
--- a/registry/native/patches/wasi-libc/0009-realloc-glibc-semantics.patch
+++ /dev/null
@@ -1,21 +0,0 @@
-Fix realloc(ptr, 0) to match glibc/POSIX semantics.
-
-WASI's dlmalloc returns a minimum-size allocation for realloc(ptr, 0).
-glibc/POSIX treats realloc(non-NULL, 0) as free(ptr) and returns NULL.
-glibc treats realloc(NULL, 0) as malloc(0) and returns non-NULL.
-
-dlmalloc already has REALLOC_ZERO_BYTES_FREES support — just enable it.
-
---- a/dlmalloc/src/dlmalloc.c
-+++ b/dlmalloc/src/dlmalloc.c
-@@ -30,6 +30,10 @@
- // Align malloc regions to 16, to avoid unaligned SIMD accesses.
- #define MALLOC_ALIGNMENT 16
-
-+// Match glibc/POSIX semantics: realloc(non-NULL, 0) frees and returns NULL.
-+// dlmalloc already has this behavior behind a flag — enable it.
-+#define REALLOC_ZERO_BYTES_FREES 1
-+
- // Declare errno values used by dlmalloc. We define them like this to avoid
- // putting specific errno values in the ABI.
- extern const int __ENOMEM;
diff --git a/registry/native/patches/wasi-libc/0010-pthread-condattr-getclock.patch b/registry/native/patches/wasi-libc/0010-pthread-condattr-getclock.patch
deleted file mode 100644
index 513e9ac9b..000000000
--- a/registry/native/patches/wasi-libc/0010-pthread-condattr-getclock.patch
+++ /dev/null
@@ -1,29 +0,0 @@
-Fix pthread_condattr_getclock operator precedence bug.
-
-The WASI-specific path in pthread_condattr_getclock uses:
-  if (a->__attr & 0x7fffffff == __WASI_CLOCKID_REALTIME)
-But == has higher precedence than &, so this evaluates as:
-  if (a->__attr & (0x7fffffff == 0))  =>  if (a->__attr & 0)  =>  always false
-The *clk output is never set, causing getclock to return uninitialized data.
-
-Fix by extracting the masked value first, then comparing.
-
---- a/libc-top-half/musl/src/thread/pthread_attr_get.c
-+++ b/libc-top-half/musl/src/thread/pthread_attr_get.c
-@@ -77,9 +77,12 @@
- #else
- int pthread_condattr_getclock(const pthread_condattr_t *restrict a, clockid_t *restrict clk)
- {
--	if (a->__attr & 0x7fffffff == __WASI_CLOCKID_REALTIME)
--		*clk = CLOCK_REALTIME;
--	if (a->__attr & 0x7fffffff == __WASI_CLOCKID_MONOTONIC)
--		*clk = CLOCK_MONOTONIC;
-+	unsigned id = a->__attr & 0x7fffffff;
-+	if (id == __WASI_CLOCKID_REALTIME)
-+		*clk = CLOCK_REALTIME;
-+	else if (id == __WASI_CLOCKID_MONOTONIC)
-+		*clk = CLOCK_MONOTONIC;
-+	else
-+		*clk = CLOCK_REALTIME;
- 	return 0;
- }
diff --git a/registry/native/patches/wasi-libc/0011-sigaction.patch b/registry/native/patches/wasi-libc/0011-sigaction.patch
deleted file mode 100644
index e1346d4e6..000000000
--- a/registry/native/patches/wasi-libc/0011-sigaction.patch
+++ /dev/null
@@ -1,331 +0,0 @@
-Implement sigaction() and __wasi_signal_trampoline for cooperative signal handling.
-
-Adds host_sigaction.c with:
-- signal-set helpers needed by sigaction()
-- sigaction(): stores local disposition/mask/flags and notifies the kernel
-- signal(): thin wrapper over sigaction()
-- __wasi_signal_trampoline: exported entry point invoked by the JS worker
-
-Also exposes the sigaction declarations and SA_* constants needed by the
-patched sysroot instead of only surfacing signal().
-
-Import signature matches wasmvm/crates/wasi-ext/src/lib.rs proc_sigaction exactly.
-
-diff --git a/libc-bottom-half/headers/public/__typedef_sigset_t.h b/libc-bottom-half/headers/public/__typedef_sigset_t.h
-index f7e4867..1bbd7dc 100644
---- a/libc-bottom-half/headers/public/__typedef_sigset_t.h
-+++ b/libc-bottom-half/headers/public/__typedef_sigset_t.h
-@@ -1,7 +1,7 @@
- #ifndef __wasilibc___typedef_sigset_t_h
- #define __wasilibc___typedef_sigset_t_h
- 
--/* TODO: This is just a placeholder for now. Keep this in sync with musl. */
--typedef unsigned char sigset_t;
-+/* Keep this in sync with musl so sigaction() can preserve real signal masks. */
-+typedef struct __sigset_t { unsigned long __bits[128/sizeof(long)]; } sigset_t;
- 
- #endif
-diff --git a/libc-bottom-half/sources/host_sigaction.c b/libc-bottom-half/sources/host_sigaction.c
-new file mode 100644
-index 0000000..303734f
---- /dev/null
-+++ b/libc-bottom-half/sources/host_sigaction.c
-@@ -0,0 +1,196 @@
-+// sigaction() / signal() / __wasi_signal_trampoline via wasmVM host_process import.
-+//
-+// Cooperative signal handling for WasmVM:
-+// 1. C program registers a disposition with sigaction()
-+// 2. Local tables keep the handler pointer, sa_mask, and sa_flags
-+// 3. proc_sigaction notifies the kernel of the delivery semantics
-+// 4. At syscall boundaries, JS invokes __wasi_signal_trampoline(signum)
-+// 5. The trampoline dispatches to the registered C handler
-+//
-+// Import signature matches wasmvm/crates/wasi-ext/src/lib.rs exactly.
-+
-+#include <errno.h>
-+#include <signal.h>
-+#include <stdint.h>
-+#include <string.h>
-+
-+#define WASM_SIG_DFL ((void (*)(int))0)
-+#define WASM_SIG_IGN ((void (*)(int))1)
-+#define WASM_SIG_ERR ((void (*)(int))-1)
-+
-+#define WASM_IMPORT(mod, fn) \
-+    __attribute__((__import_module__(mod), __import_name__(fn)))
-+
-+WASM_IMPORT("host_process", "proc_sigaction")
-+uint32_t __host_proc_sigaction(
-+    uint32_t signal,
-+    uint32_t action,
-+    uint32_t mask_lo,
-+    uint32_t mask_hi,
-+    uint32_t flags);
-+
-+#define MAX_SIGNALS 65
-+#define SIGSET_WORD_BITS ((int)(8 * sizeof(unsigned long)))
-+
-+static void (*_handlers[MAX_SIGNALS])(int);
-+static sigset_t _masks[MAX_SIGNALS];
-+static int _flags[MAX_SIGNALS];
-+
-+static int validate_signal_number(int signum) {
-+    if (signum < 1 || signum >= MAX_SIGNALS) {
-+        errno = EINVAL;
-+        return 0;
-+    }
-+    return 1;
-+}
-+
-+static int validate_mutable_sigset(sigset_t *set) {
-+    if (set == NULL) {
-+        errno = EINVAL;
-+        return 0;
-+    }
-+    return 1;
-+}
-+
-+static int sigset_word_index(int signum) {
-+    return (signum - 1) / SIGSET_WORD_BITS;
-+}
-+
-+static unsigned long sigset_word_mask(int signum) {
-+    return 1ul << ((signum - 1) % SIGSET_WORD_BITS);
-+}
-+
-+static void encode_sigset64(const sigset_t *set, uint32_t *mask_lo, uint32_t *mask_hi) {
-+    *mask_lo = 0;
-+    *mask_hi = 0;
-+
-+    for (int signum = 1; signum < MAX_SIGNALS; signum++) {
-+        if (sigismember(set, signum) != 1) {
-+            continue;
-+        }
-+        if (signum <= 32) {
-+            *mask_lo |= 1u << (signum - 1);
-+        } else {
-+            *mask_hi |= 1u << (signum - 33);
-+        }
-+    }
-+}
-+
-+static void load_local_action(int signum, struct sigaction *act) {
-+    memset(act, 0, sizeof(*act));
-+    act->sa_handler = _handlers[signum];
-+    act->sa_mask = _masks[signum];
-+    act->sa_flags = _flags[signum];
-+}
-+
-+int sigemptyset(sigset_t *set) {
-+    if (!validate_mutable_sigset(set)) {
-+        return -1;
-+    }
-+    memset(set, 0, sizeof(*set));
-+    return 0;
-+}
-+
-+int sigfillset(sigset_t *set) {
-+    if (!validate_mutable_sigset(set)) {
-+        return -1;
-+    }
-+    memset(set, 0xff, sizeof(*set));
-+    return 0;
-+}
-+
-+int sigaddset(sigset_t *set, int signum) {
-+    if (!validate_mutable_sigset(set) || !validate_signal_number(signum)) {
-+        return -1;
-+    }
-+    ((unsigned long *)(void *)set)[sigset_word_index(signum)] |= sigset_word_mask(signum);
-+    return 0;
-+}
-+
-+int sigdelset(sigset_t *set, int signum) {
-+    if (!validate_mutable_sigset(set) || !validate_signal_number(signum)) {
-+        return -1;
-+    }
-+    ((unsigned long *)(void *)set)[sigset_word_index(signum)] &= ~sigset_word_mask(signum);
-+    return 0;
-+}
-+
-+int sigismember(const sigset_t *set, int signum) {
-+    if (set == NULL || !validate_signal_number(signum)) {
-+        return -1;
-+    }
-+    return ((((const unsigned long *)(const void *)set)[sigset_word_index(signum)] & sigset_word_mask(signum)) != 0)
-+        ? 1
-+        : 0;
-+}
-+
-+int sigaction(int sig, const struct sigaction *act, struct sigaction *oldact) {
-+    if (!validate_signal_number(sig)) {
-+        return -1;
-+    }
-+    if (sig == SIGKILL || sig == SIGSTOP) {
-+        errno = EINVAL;
-+        return -1;
-+    }
-+
-+    if (oldact != NULL) {
-+        load_local_action(sig, oldact);
-+    }
-+    if (act == NULL) {
-+        return 0;
-+    }
-+
-+    uint32_t action = 2;
-+    if (act->sa_handler == WASM_SIG_DFL) action = 0;
-+    else if (act->sa_handler == WASM_SIG_IGN) action = 1;
-+
-+    uint32_t mask_lo = 0;
-+    uint32_t mask_hi = 0;
-+    encode_sigset64(&act->sa_mask, &mask_lo, &mask_hi);
-+
-+    uint32_t err = __host_proc_sigaction((uint32_t)sig, action, mask_lo, mask_hi, (uint32_t)act->sa_flags);
-+    if (err != 0) {
-+        errno = (int)err;
-+        return -1;
-+    }
-+
-+    _handlers[sig] = act->sa_handler;
-+    _masks[sig] = act->sa_mask;
-+    _flags[sig] = act->sa_flags;
-+    return 0;
-+}
-+
-+void (*signal(int sig, void (*handler)(int)))(int) {
-+    struct sigaction act;
-+    struct sigaction oldact;
-+
-+    memset(&act, 0, sizeof(act));
-+    sigemptyset(&act.sa_mask);
-+    act.sa_handler = handler;
-+    act.sa_flags = 0;
-+
-+    if (sigaction(sig, &act, &oldact) != 0) {
-+        return WASM_SIG_ERR;
-+    }
-+    return oldact.sa_handler;
-+}
-+
-+__attribute__((export_name("__wasi_signal_trampoline")))
-+void __wasi_signal_trampoline(int signum) {
-+    if (signum < 1 || signum >= MAX_SIGNALS) {
-+        return;
-+    }
-+
-+    void (*handler)(int) = _handlers[signum];
-+    if (handler == WASM_SIG_DFL || handler == WASM_SIG_IGN || handler == WASM_SIG_ERR) {
-+        return;
-+    }
-+
-+    if ((_flags[signum] & SA_RESETHAND) != 0) {
-+        _handlers[signum] = WASM_SIG_DFL;
-+        sigemptyset(&_masks[signum]);
-+        _flags[signum] = 0;
-+    }
-+
-+    handler(signum);
-+}
-diff --git a/libc-top-half/musl/include/signal.h b/libc-top-half/musl/include/signal.h
-index 9bf8833..6830b5b 100644
---- a/libc-top-half/musl/include/signal.h
-+++ b/libc-top-half/musl/include/signal.h
-@@ -1,10 +1,10 @@
--#ifndef _WASI_EMULATED_SIGNAL
--#error "wasm lacks signal support; to enable minimal signal emulation, \
--compile with -D_WASI_EMULATED_SIGNAL and link with -lwasi-emulated-signal"
--#else
- #ifndef _SIGNAL_H
- #define _SIGNAL_H
- 
-+#ifndef _WASI_EMULATED_SIGNAL
-+#define _WASI_EMULATED_SIGNAL 1
-+#endif
-+
- #ifdef __cplusplus
- extern "C" {
- #endif
-@@ -16,10 +16,12 @@ extern "C" {
-  || defined(_BSD_SOURCE)
- 
- #ifndef __wasilibc_unmodified_upstream
--// Ensure pid_t is available for kill() declaration below.
--// The upstream __NEED_pid_t is inside the ifdef'd-out block.
- #define __NEED_pid_t
-+#define __NEED_sigset_t
- #include <bits/alltypes.h>
-+#define SIG_BLOCK     0
-+#define SIG_UNBLOCK   1
-+#define SIG_SETMASK   2
- #endif
- 
- #ifdef __wasilibc_unmodified_upstream /* WASI has no ucontext/sigaction */
-@@ -60,6 +62,33 @@ typedef struct sigaltstack stack_t;
- 
- #include <bits/signal.h>
- 
-+#ifndef __wasilibc_unmodified_upstream
-+struct sigaction {
-+	union {
-+		void (*sa_handler)(int);
-+		void (*sa_sigaction)(int, void *, void *);
-+	} __sa_handler;
-+	sigset_t sa_mask;
-+	int sa_flags;
-+	void (*sa_restorer)(void);
-+};
-+#define sa_handler   __sa_handler.sa_handler
-+#define sa_sigaction __sa_handler.sa_sigaction
-+
-+#ifndef SA_NOCLDSTOP
-+#define SA_NOCLDSTOP 0x00000001
-+#endif
-+#ifndef SA_RESTART
-+#define SA_RESTART 0x10000000
-+#endif
-+#ifndef SA_RESETHAND
-+#define SA_RESETHAND 0x80000000
-+#endif
-+#ifndef SA_ONESHOT
-+#define SA_ONESHOT SA_RESETHAND
-+#endif
-+#endif
-+
- #if defined(_POSIX_SOURCE) || defined(_POSIX_C_SOURCE) \
-  || defined(_XOPEN_SOURCE) || defined(_GNU_SOURCE) \
-  || defined(_BSD_SOURCE)
-@@ -228,17 +257,18 @@ int __libc_current_sigrtmax(void);
- #endif
- 
- int kill(pid_t, int);
-+void (*signal(int, void (*)(int)))(int);
- 
--#ifdef __wasilibc_unmodified_upstream /* WASI has no signal sets */
- int sigemptyset(sigset_t *);
- int sigfillset(sigset_t *);
- int sigaddset(sigset_t *, int);
- int sigdelset(sigset_t *, int);
- int sigismember(const sigset_t *, int);
-+int sigaction(int, const struct sigaction *__restrict, struct sigaction *__restrict);
- 
-+#ifdef __wasilibc_unmodified_upstream /* WASI has no signal sets */
- int sigprocmask(int, const sigset_t *__restrict, sigset_t *__restrict);
- int sigsuspend(const sigset_t *);
--int sigaction(int, const struct sigaction *__restrict, struct sigaction *__restrict);
- int sigpending(sigset_t *);
- int sigwait(const sigset_t *__restrict, int *__restrict);
- int sigwaitinfo(const sigset_t *__restrict, siginfo_t *__restrict);
-@@ -325,7 +355,6 @@ typedef int sig_atomic_t;
- typedef long sig_atomic_t;
- #endif
- 
--void (*signal(int, void (*)(int)))(int);
- int raise(int);
- 
- #ifdef __wasilibc_unmodified_upstream /* WASI has no sigtimedwait */
-@@ -343,4 +372,3 @@ __REDIR(sigtimedwait, __sigtimedwait_time64);
- #endif
- 
- #endif
--#endif
diff --git a/registry/native/patches/wasi-libc/0012-posix-spawn-cwd.patch b/registry/native/patches/wasi-libc/0012-posix-spawn-cwd.patch
deleted file mode 100644
index bce70048b..000000000
--- a/registry/native/patches/wasi-libc/0012-posix-spawn-cwd.patch
+++ /dev/null
@@ -1,57 +0,0 @@
---- a/libc-bottom-half/sources/host_spawn_wait.c
-+++ b/libc-bottom-half/sources/host_spawn_wait.c
-@@ -108,6 +108,17 @@
-     return 0;
- }
-
-+static const char *find_pwd_in_env(char *const envp[]) {
-+    if (!envp) return NULL;
-+    for (int i = 0; envp[i]; i++) {
-+        const char *entry = envp[i];
-+        if (strncmp(entry, "PWD=", 4) == 0 && entry[4] == '/') {
-+            return entry + 4;
-+        }
-+    }
-+    return NULL;
-+}
-+
- int posix_spawn_file_actions_adddup2(posix_spawn_file_actions_t *fa, int srcfd, int fd) {
-     if (srcfd < 0 || fd < 0) return EBADF;
-     struct __fdop *op = malloc(sizeof(*op));
-@@ -232,6 +243,7 @@
-     }
-
-     // Process file_actions in order: extract stdio overrides and handle close/open
-+    const char *spawn_cwd = NULL;
-     uint32_t stdin_fd = 0, stdout_fd = 1, stderr_fd = 2;
-     if (fa && fa->__actions) {
-         for (struct __fdop *op = fa->__actions; op; op = op->next) {
-@@ -259,16 +271,27 @@
-                 else close(opened);
-                 break;
-             }
-+            case FDOP_CHDIR:
-+                if (op->path[0] == '/') spawn_cwd = op->path;
-+                break;
-             }
-         }
-     }
-
-+    // Resolve cwd: explicit chdir action > inherited PWD > getcwd() > empty
-+    char cwd_buf[1024];
-+    const char *cwd_str = spawn_cwd;
-+    if (!cwd_str) cwd_str = find_pwd_in_env(env);
-+    if (!cwd_str && getcwd(cwd_buf, sizeof(cwd_buf))) {
-+        cwd_str = cwd_buf;
-+    }
-+
-     uint32_t child_pid;
-     uint32_t err = __host_proc_spawn(
-         argv_buf, (uint32_t)argv_buf_len,
-         envp_buf ? envp_buf : (const uint8_t *)"", (uint32_t)envp_buf_len,
-         stdin_fd, stdout_fd, stderr_fd,
--        (const uint8_t *)"", 0,
-+        cwd_str ? (const uint8_t *)cwd_str : (const uint8_t *)"", cwd_str ? (uint32_t)strlen(cwd_str) : 0,
-         &child_pid);
-
-     free(argv_buf);
diff --git a/registry/native/patches/wasi-libc/0013-posix-socket-header-surface.patch b/registry/native/patches/wasi-libc/0013-posix-socket-header-surface.patch
deleted file mode 100644
index d367851b8..000000000
--- a/registry/native/patches/wasi-libc/0013-posix-socket-header-surface.patch
+++ /dev/null
@@ -1,106 +0,0 @@
-Expose the socket option and poll constants needed by POSIX networking
-applications when secure-exec routes sockets through host_net on WASI p1.
-
-This keeps the WASI-native AF_/SOCK_ values, but publishes the common
-socket-level constants and non-conflicting extra poll bits that upstream
-software such as curl expects to find in <sys/socket.h> and <poll.h>.
-
---- a/libc-bottom-half/headers/public/__header_poll.h
-+++ b/libc-bottom-half/headers/public/__header_poll.h
-@@ -6,6 +6,11 @@
- 
- #define POLLRDNORM 0x1
- #define POLLWRNORM 0x2
-+#define POLLPRI    0x0008
-+#define POLLRDBAND 0x0010
-+#define POLLWRBAND 0x0020
-+#define POLLMSG    0x0040
-+#define POLLRDHUP  0x0080
- 
- #define POLLIN POLLRDNORM
- #define POLLOUT POLLWRNORM
---- a/libc-bottom-half/headers/public/__header_sys_socket.h
-+++ b/libc-bottom-half/headers/public/__header_sys_socket.h
-@@ -49,6 +49,82 @@
- #define MSG_TRUNC __WASI_ROFLAGS_RECV_DATA_TRUNCATED
- #endif // __wasilibc_use_wasip2
- 
-+/*
-+ * secure-exec exposes a POSIX-style socket layer over host_net for WASI p1.
-+ * Keep the WASI-native domain/type values below, but expose the common
-+ * socket option and message flag constants that networking applications
-+ * expect to find in <sys/socket.h>.
-+ */
-+#ifndef MSG_DONTWAIT
-+#define MSG_DONTWAIT  0x0040
-+#endif
-+
-+#ifndef MSG_NOSIGNAL
-+#define MSG_NOSIGNAL  0x4000
-+#endif
-+
-+#ifndef SOL_IP
-+#define SOL_IP     0
-+#endif
-+
-+#ifndef SOL_TCP
-+#define SOL_TCP    6
-+#endif
-+
-+#ifndef SOL_UDP
-+#define SOL_UDP    17
-+#endif
-+
-+#ifndef SOL_IPV6
-+#define SOL_IPV6   41
-+#endif
-+
-+#ifndef SOMAXCONN
-+#define SOMAXCONN 128
-+#endif
-+
-+#ifndef SO_REUSEADDR
-+#define SO_REUSEADDR 2
-+#endif
-+
-+#ifndef SO_ERROR
-+#define SO_ERROR 4
-+#endif
-+
-+#ifndef SO_SNDBUF
-+#define SO_SNDBUF 7
-+#endif
-+
-+#ifndef SO_RCVBUF
-+#define SO_RCVBUF 8
-+#endif
-+
-+#ifndef SO_KEEPALIVE
-+#define SO_KEEPALIVE 9
-+#endif
-+
-+#ifndef SO_ACCEPTCONN
-+#define SO_ACCEPTCONN 30
-+#endif
-+
-+#ifndef SO_PROTOCOL
-+#define SO_PROTOCOL 38
-+#endif
-+
-+#ifndef SO_DOMAIN
-+#define SO_DOMAIN 39
-+#endif
-+
-+#ifndef SO_RCVTIMEO
-+#if __LONG_MAX == 0x7fffffff
-+#define SO_RCVTIMEO     66
-+#define SO_SNDTIMEO     67
-+#else
-+#define SO_RCVTIMEO     20
-+#define SO_SNDTIMEO     21
-+#endif
-+#endif
-+
- #define SOCK_DGRAM __WASI_FILETYPE_SOCKET_DGRAM
- #define SOCK_STREAM __WASI_FILETYPE_SOCKET_STREAM
- 
diff --git a/registry/native/patches/wasi-libc/0014-initialize-cwd-from-pwd.patch b/registry/native/patches/wasi-libc/0014-initialize-cwd-from-pwd.patch
deleted file mode 100644
index adb80f2b4..000000000
--- a/registry/native/patches/wasi-libc/0014-initialize-cwd-from-pwd.patch
+++ /dev/null
@@ -1,105 +0,0 @@
-Initialize wasi-libc cwd from the process PWD environment lazily.
-
-The earlier constructor-based approach was unreliable for archive-linked WASI
-programs. The constructor object was often omitted entirely, so child
-processes still started with `__wasilibc_cwd = "/"` even though the runtime
-passed `PWD=/some/path`.
-
-Move cwd initialization into `getcwd.c`, which already owns the cwd storage,
-and expose `__wasilibc_ensure_cwd()` so `chdir()` and other cwd-sensitive
-paths can force initialization before touching `__wasilibc_cwd`.
-
---- a/libc-bottom-half/sources/chdir.c
-+++ b/libc-bottom-half/sources/chdir.c
-@@ -15,14 +15,17 @@ void __wasilibc_cwd_unlock(void);
- #define __wasilibc_cwd_lock() (void)0
- #define __wasilibc_cwd_unlock() (void)0
- #endif
-+void __wasilibc_ensure_cwd(void);
- extern char *__wasilibc_cwd;
--static int __wasilibc_cwd_mallocd = 0;
-+extern int __wasilibc_cwd_mallocd;
- 
- int chdir(const char *path)
- {
-     static char *relative_buf = NULL;
-     static size_t relative_buf_len = 0;
- 
-+    __wasilibc_ensure_cwd();
-+
-     // Find a preopen'd directory as well as a relative path we're anchored
-     // from which we're changing directories to.
-     const char *abs;
-@@ -77,6 +80,8 @@ static const char *make_absolute(const char *path) {
-     static char *make_absolute_buf = NULL;
-     static size_t make_absolute_len = 0;
- 
-+    __wasilibc_ensure_cwd();
-+
-     // If this path is absolute, then we return it as-is.
-     if (path[0] == '/') {
-         return path;
-@@ -100,7 +105,6 @@ static const char *make_absolute(const char *path) {
-     __wasilibc_cwd_lock();
-     size_t cwd_len = strlen(__wasilibc_cwd);
-     size_t path_len = path ? strlen(path) : 0;
--    __wasilibc_cwd_unlock();
-     int need_slash = __wasilibc_cwd[cwd_len - 1] == '/' ? 0 : 1;
-     size_t alloc_len = cwd_len + path_len + 1 + need_slash;
-     if (alloc_len > make_absolute_len) {
---- a/libc-bottom-half/sources/getcwd.c
-+++ b/libc-bottom-half/sources/getcwd.c
-@@ -1,9 +1,11 @@
- #include <unistd.h>
- #include <errno.h>
- #include <string.h>
-+#include <stdlib.h>
- #include "lock.h"
- 
- char *__wasilibc_cwd = "/";
-+int __wasilibc_cwd_mallocd = 0;
- 
- #ifdef _REENTRANT
- static volatile int lock[1];
-@@ -14,9 +16,36 @@ void __wasilibc_cwd_unlock(void) { UNLOCK(lock); }
- #define __wasilibc_cwd_unlock() (void)0
- #endif
- 
-+static void __wasilibc_init_cwd_from_pwd_locked(void)
-+{
-+    if (__wasilibc_cwd_mallocd)
-+        return;
-+    if (__wasilibc_cwd[0] != '/' || __wasilibc_cwd[1] != '\0')
-+        return;
-+
-+    const char *pwd = getenv("PWD");
-+    if (pwd == NULL || pwd[0] != '/')
-+        return;
-+
-+    char *dup = strdup(pwd);
-+    if (dup == NULL)
-+        return;
-+
-+    __wasilibc_cwd = dup;
-+    __wasilibc_cwd_mallocd = 1;
-+}
-+
-+void __wasilibc_ensure_cwd(void)
-+{
-+    __wasilibc_cwd_lock();
-+    __wasilibc_init_cwd_from_pwd_locked();
-+    __wasilibc_cwd_unlock();
-+}
-+
- char *getcwd(char *buf, size_t size)
- {
-     __wasilibc_cwd_lock();
-+    __wasilibc_init_cwd_from_pwd_locked();
-     if (!buf) {
-         buf = strdup(__wasilibc_cwd);
-         if (!buf) {
-@@ -36,4 +65,3 @@ char *getcwd(char *buf, size_t size)
-     __wasilibc_cwd_unlock();
-     return buf;
- }
--
diff --git a/registry/native/patches/wasi-libc/0015-always-link-cwd-relative-path-resolution.patch b/registry/native/patches/wasi-libc/0015-always-link-cwd-relative-path-resolution.patch
deleted file mode 100644
index 1bb8b257f..000000000
--- a/registry/native/patches/wasi-libc/0015-always-link-cwd-relative-path-resolution.patch
+++ /dev/null
@@ -1,165 +0,0 @@
-Add a cwd-aware fallback for POSIX path resolution without forcing `chdir.o`.
-
-Upstream wasi-libc keeps cwd-aware path resolution behind the weak
-`__wasilibc_find_relpath_alloc()` symbol from `chdir.c`. Programs that never
-call `chdir()` do not link that object, so relative paths fall back to the root
-preopen. Making the call unconditional fixes the semantics but introduces a new
-problem on WASM: direct calls to a missing weak symbol trap.
-
-Keep the weak-symbol fast path, but add an always-linked fallback in
-`preopens.c` that resolves relative paths against `getcwd()` and reuses
-`__wasilibc_find_abspath()`. `posix.c` uses that fallback whenever the weak
-helper is absent. This makes `curl -o local.txt` and `curl -O` work correctly
-for ordinary programs without dragging `chdir.o` into every binary.
-
---- a/libc-bottom-half/sources/posix.c
-+++ b/libc-bottom-half/sources/posix.c
-@@ -13,16 +13,23 @@
- #include <wasi/libc-find-relpath.h>
- #include <wasi/libc-nocwd.h>
- 
-+int __wasilibc_find_relpath_fallback(
-+    const char *path,
-+    const char **abs_prefix,
-+    char **relative_buf,
-+    size_t *relative_buf_len,
-+    int can_realloc);
-+
- static int find_relpath2(
-     const char *path,
-     char **relative,
-     size_t *relative_len
- ) {
--    // See comments in `preopens.c` for what this trick is doing.
-     const char *abs;
--    if (__wasilibc_find_relpath_alloc)
-+    if (__wasilibc_find_relpath_alloc) {
-         return __wasilibc_find_relpath_alloc(path, &abs, relative, relative_len, 1);
--    return __wasilibc_find_relpath(path, &abs, relative, *relative_len);
-+    }
-+    return __wasilibc_find_relpath_fallback(path, &abs, relative, relative_len, 1);
- }
- 
- // Helper to call `__wasilibc_find_relpath` and return an already-managed
---- a/libc-bottom-half/sources/preopens.c
-+++ b/libc-bottom-half/sources/preopens.c
-@@ -11,6 +11,7 @@
- #include <stdlib.h>
- #include <string.h>
- #include <sysexits.h>
-+#include <unistd.h>
- #include <wasi/api.h>
- #include <wasi/libc-find-relpath.h>
- #include <wasi/libc.h>
-@@ -98,6 +99,91 @@ static const char *strip_prefixes(const char *path) {
-     return path;
- }
- 
-+static const char *strip_relative_prefixes(const char *path) {
-+    while (1) {
-+        if (path[0] == '.' && path[1] == '/') {
-+            path += 2;
-+        } else if (path[0] == '.' && path[1] == 0) {
-+            path++;
-+        } else {
-+            break;
-+        }
-+    }
-+
-+    return path;
-+}
-+
-+static int build_abspath_from_cwd(const char *path, char **abspath_out) {
-+    const char *suffix = strip_relative_prefixes(path);
-+    char *cwd = getcwd(NULL, 0);
-+    if (cwd == NULL)
-+        return -1;
-+
-+    size_t cwd_len = strlen(cwd);
-+    size_t suffix_len = strlen(suffix);
-+    int need_slash = suffix_len > 0 && cwd_len > 0 && cwd[cwd_len - 1] != '/';
-+    char *buf = malloc(cwd_len + need_slash + suffix_len + 1);
-+    if (buf == NULL) {
-+        free(cwd);
-+        errno = ENOMEM;
-+        return -1;
-+    }
-+
-+    memcpy(buf, cwd, cwd_len);
-+    size_t off = cwd_len;
-+    if (need_slash)
-+        buf[off++] = '/';
-+    memcpy(buf + off, suffix, suffix_len);
-+    buf[off + suffix_len] = '\0';
-+
-+    free(cwd);
-+    *abspath_out = buf;
-+    return 0;
-+}
-+
-+int __wasilibc_find_relpath_fallback(
-+    const char *path,
-+    const char **abs_prefix,
-+    char **relative_buf,
-+    size_t *relative_buf_len,
-+    int can_realloc
-+) {
-+    char *owned_abspath = NULL;
-+    const char *abspath = path;
-+    if (path[0] != '/') {
-+        if (build_abspath_from_cwd(path, &owned_abspath) != 0)
-+            return -1;
-+        abspath = owned_abspath;
-+    }
-+
-+    const char *rel;
-+    int fd = __wasilibc_find_abspath(abspath, abs_prefix, &rel);
-+    if (fd == -1) {
-+        free(owned_abspath);
-+        return -1;
-+    }
-+
-+    size_t rel_len = strlen(rel);
-+    if (*relative_buf_len < rel_len + 1) {
-+        if (!can_realloc) {
-+            free(owned_abspath);
-+            errno = ERANGE;
-+            return -1;
-+        }
-+        char *tmp = realloc(*relative_buf, rel_len + 1);
-+        if (tmp == NULL) {
-+            free(owned_abspath);
-+            errno = ENOMEM;
-+            return -1;
-+        }
-+        *relative_buf = tmp;
-+        *relative_buf_len = rel_len + 1;
-+    }
-+    strcpy(*relative_buf, rel);
-+    free(owned_abspath);
-+    return fd;
-+}
-+
- /// Similar to `internal_register_preopened_fd` but does not take a lock.
- static int internal_register_preopened_fd_unlocked(__wasi_fd_t fd, const char *relprefix) {
-     // Check preconditions.
-@@ -166,12 +252,13 @@ int __wasilibc_find_relpath(const char *path,
-                             const char **abs_prefix,
-                             char **relative_path,
-                             size_t relative_path_len) {
--    // If `chdir` is linked, whose object file defines this symbol, then we
--    // call that. Otherwise if the program can't `chdir` then `path` is
--    // absolute (or relative to the root dir), so we delegate to `find_abspath`
--    if (__wasilibc_find_relpath_alloc)
--        return __wasilibc_find_relpath_alloc(path, abs_prefix, relative_path, &relative_path_len, 0);
--    return __wasilibc_find_abspath(path, abs_prefix, (const char**) relative_path);
-+    if (__wasilibc_find_relpath_alloc) {
-+        return __wasilibc_find_relpath_alloc(
-+            path, abs_prefix, relative_path, &relative_path_len, 0);
-+    }
-+
-+    return __wasilibc_find_relpath_fallback(
-+        path, abs_prefix, relative_path, &relative_path_len, 0);
- }
- 
- // See the documentation in libc-find-relpath.h.
diff --git a/registry/native/patches/wasi-libc/0016-host-fs-mode-and-chmod.patch b/registry/native/patches/wasi-libc/0016-host-fs-mode-and-chmod.patch
deleted file mode 100644
index d21785e91..000000000
--- a/registry/native/patches/wasi-libc/0016-host-fs-mode-and-chmod.patch
+++ /dev/null
@@ -1,263 +0,0 @@
-Teach WASI libc about host filesystem mode bits and chmod.
-
-WASI preview1 filestat exposes file type but not POSIX permission bits. Agent OS
-provides those bits through the shared host_fs import so native C tools can use
-ordinary stat/access/chmod semantics without per-program patches.
-
---- a/libc-bottom-half/cloudlibc/src/libc/sys/stat/stat_impl.h
-+++ b/libc-bottom-half/cloudlibc/src/libc/sys/stat/stat_impl.h
-@@ -8,6 +8,7 @@
- #include <assert.h>
- #include <wasi/api.h>
- #include <stdbool.h>
-+#include <stdint.h>
- 
- static_assert(S_ISBLK(S_IFBLK), "Value mismatch");
- static_assert(S_ISCHR(S_IFCHR), "Value mismatch");
-@@ -20,7 +21,44 @@ static_assert(S_ISREG(S_IFREG), "Value mismatch");
- static_assert(S_ISSOCK(S_IFSOCK), "Value mismatch");
- 
--static inline void to_public_stat(const __wasi_filestat_t *in,
--                                  struct stat *out) {
-+uint32_t __agentos_host_fd_mode(uint32_t fd) __attribute__((
-+  __import_module__("host_fs"),
-+  __import_name__("fd_mode")
-+));
-+
-+uint32_t __agentos_host_path_mode(uint32_t fd, const char *path, size_t path_len,
-+                                  uint32_t follow_symlinks) __attribute__((
-+  __import_module__("host_fs"),
-+  __import_name__("path_mode")
-+));
-+
-+uint64_t __agentos_host_fd_size(uint32_t fd) __attribute__((
-+  __import_module__("host_fs"),
-+  __import_name__("fd_size")
-+));
-+
-+uint64_t __agentos_host_path_size(uint32_t fd, const char *path, size_t path_len,
-+                                  uint32_t follow_symlinks) __attribute__((
-+  __import_module__("host_fs"),
-+  __import_name__("path_size")
-+));
-+
-+static inline mode_t host_permissions(uint32_t mode) {
-+  return mode & 07777;
-+}
-+
-+static inline void apply_host_stat_metadata(struct stat *out,
-+                                            uint32_t host_mode,
-+                                            uint64_t host_size) {
-+  out->st_mode |= host_permissions(host_mode);
-+  if (host_size != UINT64_MAX) {
-+    out->st_size = (off_t)host_size;
-+  }
-+}
-+
-+static inline void to_public_stat_with_mode(const __wasi_filestat_t *in,
-+                                            struct stat *out,
-+                                            uint32_t host_mode,
-+                                            uint64_t host_size) {
-   // Ensure that we don't truncate any values.
-   static_assert(sizeof(in->dev) == sizeof(out->st_dev), "Size mismatch");
-   static_assert(sizeof(in->ino) == sizeof(out->st_ino), "Size mismatch");
-@@ -43,6 +80,7 @@ static inline void to_public_stat_with_mode(const __wasi_filestat_t *in,
-       .st_ctim = timestamp_to_timespec(in->ctim),
-   };
- 
-+  apply_host_stat_metadata(out, host_mode, host_size);
-   // Convert file type to legacy types encoded in st_mode.
-   switch (in->filetype) {
-     case __WASI_FILETYPE_BLOCK_DEVICE:
-@@ -67,6 +105,11 @@ static inline void to_public_stat_with_mode(const __wasi_filestat_t *in,
-       break;
-   }
- }
-+
-+static inline void to_public_stat(const __wasi_filestat_t *in,
-+                                  struct stat *out) {
-+  to_public_stat_with_mode(in, out, 0, UINT64_MAX);
-+}
- 
- static inline bool utimens_get_timestamps(const struct timespec *times,
-                                           __wasi_timestamp_t *st_atim,
---- a/libc-bottom-half/cloudlibc/src/libc/sys/stat/fstat.c
-+++ b/libc-bottom-half/cloudlibc/src/libc/sys/stat/fstat.c
-@@ -15,6 +15,7 @@ int fstat(int fildes, struct stat *buf) {
-     errno = error;
-     return -1;
-   }
--  to_public_stat(&internal_stat, buf);
-+  to_public_stat_with_mode(&internal_stat, buf, __agentos_host_fd_mode(fildes),
-+                           __agentos_host_fd_size(fildes));
-   return 0;
- }
---- a/libc-bottom-half/cloudlibc/src/libc/sys/stat/fstatat.c
-+++ b/libc-bottom-half/cloudlibc/src/libc/sys/stat/fstatat.c
-@@ -27,6 +27,13 @@ int __wasilibc_nocwd_fstatat(int fd, const char *restrict path, struct stat *res
-     errno = error;
-     return -1;
-   }
--  to_public_stat(&internal_stat, buf);
-+  uint32_t follow_symlinks =
-+      (lookup_flags & __WASI_LOOKUPFLAGS_SYMLINK_FOLLOW) != 0;
-+  size_t path_len = strlen(path);
-+  to_public_stat_with_mode(&internal_stat, buf,
-+                           __agentos_host_path_mode(fd, path, path_len,
-+                                                    follow_symlinks),
-+                           __agentos_host_path_size(fd, path, path_len,
-+                                                    follow_symlinks));
-   return 0;
- }
---- a/libc-bottom-half/cloudlibc/src/libc/unistd/ftruncate.c
-+++ b/libc-bottom-half/cloudlibc/src/libc/unistd/ftruncate.c
-@@ -5,6 +5,12 @@
- #include <errno.h>
-+#include <stdint.h>
- #include <unistd.h>
- 
-+uint32_t __agentos_host_ftruncate(uint32_t fd, uint64_t length) __attribute__((
-+  __import_module__("host_fs"),
-+  __import_name__("ftruncate")
-+));
-+
- int ftruncate(int fildes, off_t length) {
-   if (length < 0) {
-     errno = EINVAL;
-@@ -12,8 +18,12 @@ int ftruncate(int fildes, off_t length) {
-   }
-   __wasi_filesize_t st_size = length;
-   __wasi_errno_t error =
-+      __agentos_host_ftruncate((uint32_t)fildes, (uint64_t)st_size);
-+  if (error != 0) {
-+    error =
-       __wasi_fd_filestat_set_size(fildes, st_size);
-+  }
-   if (error != 0) {
-     errno = error;
-     return -1;
-   }
---- a/libc-bottom-half/cloudlibc/src/libc/unistd/faccessat.c
-+++ b/libc-bottom-half/cloudlibc/src/libc/unistd/faccessat.c
-@@ -6,8 +6,16 @@
- #include <errno.h>
- #include <fcntl.h>
-+#include <stdint.h>
- #include <string.h>
-+#include <sys/stat.h>
- #include <unistd.h>
- 
-+uint32_t __agentos_host_path_mode(uint32_t fd, const char *path, size_t path_len,
-+                                  uint32_t follow_symlinks) __attribute__((
-+  __import_module__("host_fs"),
-+  __import_name__("path_mode")
-+));
-+
- int __wasilibc_nocwd_faccessat(int fd, const char *path, int amode, int flag) {
-   // Validate function parameters.
-   if ((amode & ~(F_OK | R_OK | W_OK | X_OK)) != 0 ||
-@@ -26,6 +35,22 @@ int __wasilibc_nocwd_faccessat(int fd, const char *path, int amode, int flag) {
-     return -1;
-   }
- 
-+  uint32_t mode = __agentos_host_path_mode(fd, path, strlen(path), 1);
-+  if ((amode & R_OK) != 0 && (mode & 0444) == 0) {
-+    errno = EACCES;
-+    return -1;
-+  }
-+  if ((amode & W_OK) != 0 && (mode & 0222) == 0) {
-+    errno = EACCES;
-+    return -1;
-+  }
-+  // Match Linux access(2): execute for non-directories requires at least one
-+  // execute bit. This is true even for root.
-+  if ((amode & X_OK) != 0 && (mode & 0111) == 0) {
-+    errno = EACCES;
-+    return -1;
-+  }
-+
-   // Test whether the requested access rights are present on the
-   // directory file descriptor.
-   if (amode != 0) {
---- a/libc-bottom-half/sources/posix.c
-+++ b/libc-bottom-half/sources/posix.c
-@@ -13,6 +13,25 @@
- #include <wasi/libc-find-relpath.h>
- #include <wasi/libc-nocwd.h>
- 
-+#include <stdint.h>
-+#include <string.h>
-+
-+uint32_t __agentos_host_chmod(uint32_t fd, const char *path, size_t path_len,
-+                              uint32_t mode) __attribute__((
-+    __import_module__("host_fs"),
-+    __import_name__("chmod")
-+));
-+
-+uint32_t __agentos_host_fchmod(uint32_t fd, uint32_t mode) __attribute__((
-+    __import_module__("host_fs"),
-+    __import_name__("fchmod")
-+));
-+
-+static int chmod_errno_from_host_result(uint32_t result) {
-+    errno = result == 0 ? 0 : EIO;
-+    return result == 0 ? 0 : -1;
-+}
-+
- int __wasilibc_find_relpath_fallback(
-     const char *path,
-     const char **abs_prefix,
-@@ -321,24 +340,38 @@ int chmod(const char *path, mode_t mode) {
--    // TODO: We plan to support this eventually in WASI, but not yet.
--    // Meanwhile, we provide a stub so that libc++'s `<filesystem>`
--    // implementation will build unmodified.
--    errno = ENOSYS;
--    return -1;
-+    char *relative_path;
-+    int dirfd = find_relpath(path, &relative_path);
-+    if (dirfd == -1) {
-+        errno = ENOENT;
-+        return -1;
-+    }
-+
-+    return chmod_errno_from_host_result(__agentos_host_chmod(
-+        (uint32_t)dirfd,
-+        relative_path,
-+        strlen(relative_path),
-+        (uint32_t)(mode & 07777)));
- }
- 
- int fchmod(int fd, mode_t mode) {
--    // TODO: We plan to support this eventually in WASI, but not yet.
--    // Meanwhile, we provide a stub so that libc++'s `<filesystem>`
--    // implementation will build unmodified.
--    errno = ENOSYS;
--    return -1;
-+    return chmod_errno_from_host_result(__agentos_host_fchmod(
-+        (uint32_t)fd,
-+        (uint32_t)(mode & 07777)));
- }
- 
- int fchmodat(int fd, const char *path, mode_t mode, int flag) {
--    // TODO: We plan to support this eventually in WASI, but not yet.
--    // Meanwhile, we provide a stub so that libc++'s `<filesystem>`
--    // implementation will build unmodified.
--    errno = ENOSYS;
--    return -1;
-+    if ((flag & ~AT_SYMLINK_NOFOLLOW) != 0) {
-+        errno = EINVAL;
-+        return -1;
-+    }
-+    if ((flag & AT_SYMLINK_NOFOLLOW) != 0) {
-+        errno = EOPNOTSUPP;
-+        return -1;
-+    }
-+
-+    return chmod_errno_from_host_result(__agentos_host_chmod(
-+        (uint32_t)fd,
-+        path,
-+        strlen(path),
-+        (uint32_t)(mode & 07777)));
- }
- 
- int statvfs(const char *__restrict path, struct statvfs *__restrict buf) {
diff --git a/registry/native/rust-toolchain.toml b/registry/native/rust-toolchain.toml
deleted file mode 100644
index 85ec1c5e3..000000000
--- a/registry/native/rust-toolchain.toml
+++ /dev/null
@@ -1,4 +0,0 @@
-[toolchain]
-channel = "nightly-2026-03-01"
-components = ["rust-src"]
-targets = ["wasm32-wasip1"]
diff --git a/registry/native/scripts/patch-std.sh b/registry/native/scripts/patch-std.sh
deleted file mode 100755
index db74b8f2b..000000000
--- a/registry/native/scripts/patch-std.sh
+++ /dev/null
@@ -1,194 +0,0 @@
-#!/bin/bash
-# patch-std.sh — Apply wasmVM patches to the Rust std source tree
-#
-# Patches modify the WASI platform implementation in std to support
-# process spawning, pipes, user/group IDs, and terminal detection
-# via custom host_process/host_user WASM imports.
-#
-# Usage:
-#   ./scripts/patch-std.sh [--check] [--reverse]
-#
-# Options:
-#   --check    Dry-run: verify patches apply cleanly without modifying files
-#   --reverse  Reverse (unapply) previously applied patches
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-WASMCORE_DIR="$(dirname "$SCRIPT_DIR")"
-PATCHES_DIR="$WASMCORE_DIR/patches"
-
-# Get the sysroot for the toolchain specified in rust-toolchain.toml
-SYSROOT="$(rustc --print sysroot)"
-STD_SRC="$SYSROOT/lib/rustlib/src/rust"
-
-if [ ! -d "$STD_SRC/library/std" ]; then
-    echo "ERROR: Rust source not found at $STD_SRC"
-    echo "Ensure rust-src component is installed: rustup component add rust-src"
-    exit 1
-fi
-
-# Parse arguments
-MODE="apply"
-PATCH_FLAGS="-p1"
-for arg in "$@"; do
-    case "$arg" in
-        --check)
-            MODE="check"
-            ;;
-        --reverse)
-            MODE="reverse"
-            ;;
-        *)
-            echo "Unknown argument: $arg"
-            echo "Usage: $0 [--check] [--reverse]"
-            exit 1
-            ;;
-    esac
-done
-
-# `patch-std` mutates rustup's installed rust-src tree. CI runners and local
-# machines can therefore inherit a partially patched std from a prior failed
-# build, and `patch --forward` will skip instead of repairing mismatched hunks.
-# Start apply mode from a pristine rust-src component when rustup owns this
-# sysroot; non-rustup toolchains keep the historical behavior.
-if [ "$MODE" = "apply" ] && command -v rustup >/dev/null 2>&1; then
-    TOOLCHAIN="$(basename "$SYSROOT")"
-    case "$SYSROOT" in
-        */.rustup/toolchains/*)
-            echo "Refreshing rust-src for toolchain $TOOLCHAIN before applying std patches..."
-            rm -rf "$SYSROOT"
-            rustup toolchain install "$TOOLCHAIN" \
-                --profile minimal \
-                --component rust-src \
-                --target wasm32-wasip1 \
-                --force >/dev/null
-            ;;
-    esac
-fi
-
-# Find std patch files in order (reversed for --reverse mode).
-# Only top-level patches/*.patch are std-source patches; subdirectories
-# (patches/crates/*, patches/wasi-libc/*) target vendored crates and wasi-libc
-# and must NOT be applied to the Rust std source tree, so use -maxdepth 1.
-if [ "$MODE" = "reverse" ]; then
-    PATCH_FILES=$(find "$PATCHES_DIR" -maxdepth 1 -name '*.patch' -type f 2>/dev/null | sort -r)
-else
-    PATCH_FILES=$(find "$PATCHES_DIR" -maxdepth 1 -name '*.patch' -type f 2>/dev/null | sort)
-fi
-
-if [ -z "$PATCH_FILES" ]; then
-    echo "No patch files found in $PATCHES_DIR"
-    exit 0
-fi
-
-PATCH_COUNT=$(echo "$PATCH_FILES" | wc -l)
-echo "Found $PATCH_COUNT patch(es) in $PATCHES_DIR"
-echo "Rust std source: $STD_SRC"
-echo ""
-
-FAILED=0
-
-for PATCH in $PATCH_FILES; do
-    PATCH_NAME="$(basename "$PATCH")"
-
-    case "$MODE" in
-        check)
-            echo -n "Checking $PATCH_NAME ... "
-            if patch --batch --dry-run $PATCH_FLAGS -d "$STD_SRC" < "$PATCH" > /dev/null 2>&1; then
-                echo "OK (applies cleanly)"
-            elif patch --batch --dry-run -R $PATCH_FLAGS -d "$STD_SRC" < "$PATCH" > /dev/null 2>&1; then
-                echo "OK (already applied)"
-            else
-                # When layered patches modify files created by earlier patches,
-                # neither forward nor reverse will match exactly. Check if any
-                # new files from this patch exist as a secondary heuristic.
-                NEW_FILES=$(grep '^+++ b/' "$PATCH" | sed 's|^+++ b/||' | while read -r f; do
-                    [ -f "$STD_SRC/$f" ] && echo "$f"
-                done)
-                if [ -n "$NEW_FILES" ]; then
-                    echo "OK (applied, modified by later patch)"
-                else
-                    echo "FAIL (does not apply)"
-                    FAILED=1
-                fi
-            fi
-            ;;
-        apply)
-            echo -n "Applying $PATCH_NAME ... "
-            # Use `--forward` (-N) for idempotency: it applies hunks that are not
-            # yet present and SKIPS hunks already applied (reversed) instead of
-            # applying them a second time. Without this, additive (insert-only)
-            # patches stay forward-applicable after they are applied — their
-            # anchor context is still present — and a naive forward apply inserts
-            # a duplicate copy, producing E0119 conflicting-implementation errors
-            # on a re-run. `--forward` makes a second `make wasm` a no-op.
-            if patch --batch --forward --dry-run $PATCH_FLAGS -d "$STD_SRC" < "$PATCH" > /dev/null 2>&1; then
-                patch --batch --forward $PATCH_FLAGS -d "$STD_SRC" < "$PATCH" > /dev/null 2>&1
-                echo "applied"
-            else
-                echo "already applied (skipping)"
-            fi
-            ;;
-        reverse)
-            echo -n "Reversing $PATCH_NAME ... "
-            if patch --batch -R $PATCH_FLAGS -d "$STD_SRC" < "$PATCH" > /dev/null 2>&1; then
-                echo "reversed"
-            else
-                echo "not applied (skipping)"
-            fi
-            ;;
-    esac
-done
-
-# Install companion source files that a patch declares (e.g. `pub mod process;`)
-# but cannot reliably carry inline: a `diff`/`patch` cannot create a brand-new
-# file in the std source from a `/dev/null` hunk reliably across patch versions
-# (the hunk is silently skipped, leaving the declared module with no source file
-# and a `file not found for module` E0583 build error). Convention mirrors the
-# vendored-crate mechanism in patch-vendor.sh: `patches/copy.manifest` with lines
-# "<src-relative-to-PATCHES_DIR> <dest-relative-to-STD_SRC>". Example:
-# `std/os/wasi/process.rs library/std/src/os/wasi/process.rs` installs the public
-# wasi child-pipe fd traits that 0007-wasi-childpipe-fd.patch's `pub mod process;`
-# references. Without this the patched std fails to compile (missing module).
-MANIFEST="$PATCHES_DIR/copy.manifest"
-if [ -f "$MANIFEST" ]; then
-    while read -r SRC DEST; do
-        # Skip blank lines and comments.
-        case "$SRC" in ""|\#*) continue ;; esac
-        case "$MODE" in
-            apply)
-                if [ ! -f "$PATCHES_DIR/$SRC" ]; then
-                    echo "copy.manifest source missing: $SRC"
-                    FAILED=1
-                    continue
-                fi
-                mkdir -p "$(dirname "$STD_SRC/$DEST")"
-                cp "$PATCHES_DIR/$SRC" "$STD_SRC/$DEST"
-                echo "Installed companion: $SRC -> $DEST"
-                ;;
-            reverse)
-                rm -f "$STD_SRC/$DEST"
-                echo "Removed companion: $DEST"
-                ;;
-            check)
-                if [ ! -f "$PATCHES_DIR/$SRC" ]; then
-                    echo "copy.manifest source missing: $SRC"
-                    FAILED=1
-                fi
-                ;;
-        esac
-    done < "$MANIFEST"
-fi
-
-echo ""
-if [ "$FAILED" -ne 0 ]; then
-    echo "Some patches failed to apply. Check patch compatibility with current nightly."
-    exit 1
-else
-    case "$MODE" in
-        check)   echo "All patches verified." ;;
-        apply)   echo "All patches applied successfully." ;;
-        reverse) echo "All patches reversed." ;;
-    esac
-fi
diff --git a/registry/native/scripts/patch-vendor.sh b/registry/native/scripts/patch-vendor.sh
deleted file mode 100755
index 7a9b4f2aa..000000000
--- a/registry/native/scripts/patch-vendor.sh
+++ /dev/null
@@ -1,208 +0,0 @@
-#!/bin/bash
-# patch-vendor.sh — Apply crate-level patches to vendored dependencies
-#
-# Iterates patches/crates/<crate-name>/*.patch, finds the matching
-# vendor/<crate-name> directory, applies each patch, and nulls out
-# .cargo-checksum.json file hashes so Cargo accepts the modified source.
-#
-# Usage:
-#   ./scripts/patch-vendor.sh [--check] [--reverse]
-#
-# Options:
-#   --check    Dry-run: verify patches apply cleanly without modifying files
-#   --reverse  Reverse (unapply) previously applied patches
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-WASMCORE_DIR="$(dirname "$SCRIPT_DIR")"
-PATCHES_DIR="$WASMCORE_DIR/patches/crates"
-VENDOR_DIR="$WASMCORE_DIR/vendor"
-
-# Parse arguments
-MODE="apply"
-for arg in "$@"; do
-    case "$arg" in
-        --check)
-            MODE="check"
-            ;;
-        --reverse)
-            MODE="reverse"
-            ;;
-        *)
-            echo "Unknown argument: $arg"
-            echo "Usage: $0 [--check] [--reverse]"
-            exit 1
-            ;;
-    esac
-done
-
-if [ ! -d "$PATCHES_DIR" ]; then
-    echo "No patches/crates/ directory found — nothing to patch"
-    exit 0
-fi
-
-if [ ! -d "$VENDOR_DIR" ]; then
-    echo "ERROR: vendor/ directory not found. Run 'cargo vendor' first."
-    exit 1
-fi
-
-# Find all crate patch directories
-CRATE_DIRS=$(find "$PATCHES_DIR" -mindepth 1 -maxdepth 1 -type d 2>/dev/null | sort)
-
-if [ -z "$CRATE_DIRS" ]; then
-    echo "No crate patch directories found in $PATCHES_DIR — nothing to patch"
-    exit 0
-fi
-
-TOTAL_PATCHES=0
-FAILED=0
-
-for CRATE_DIR in $CRATE_DIRS; do
-    CRATE_NAME="$(basename "$CRATE_DIR")"
-
-    # Find the matching vendor directory (crate-name or crate-name-version)
-    VENDOR_CRATE=""
-    if [ -d "$VENDOR_DIR/$CRATE_NAME" ]; then
-        VENDOR_CRATE="$VENDOR_DIR/$CRATE_NAME"
-    else
-        # Try matching crate-name-* (versioned directory)
-        MATCHES=$(find "$VENDOR_DIR" -maxdepth 1 -type d -name "${CRATE_NAME}-*" 2>/dev/null | sort -V | tail -1)
-        if [ -n "$MATCHES" ]; then
-            VENDOR_CRATE="$MATCHES"
-        fi
-    fi
-
-    if [ -z "$VENDOR_CRATE" ]; then
-        echo "WARNING: No vendor directory found for crate '$CRATE_NAME' — skipping"
-        continue
-    fi
-
-    # Find patch files for this crate
-    if [ "$MODE" = "reverse" ]; then
-        PATCH_FILES=$(find "$CRATE_DIR" -name '*.patch' -type f 2>/dev/null | sort -r)
-    else
-        PATCH_FILES=$(find "$CRATE_DIR" -name '*.patch' -type f 2>/dev/null | sort)
-    fi
-
-    if [ -z "$PATCH_FILES" ]; then
-        continue
-    fi
-
-    echo "=== $CRATE_NAME ($(basename "$VENDOR_CRATE")) ==="
-
-    for PATCH in $PATCH_FILES; do
-        PATCH_NAME="$(basename "$PATCH")"
-        TOTAL_PATCHES=$((TOTAL_PATCHES + 1))
-
-        case "$MODE" in
-            check)
-                echo -n "  Checking $PATCH_NAME ... "
-                if patch --dry-run -p1 -d "$VENDOR_CRATE" < "$PATCH" > /dev/null 2>&1; then
-                    echo "OK (applies cleanly)"
-                elif patch --dry-run -R -p1 -d "$VENDOR_CRATE" < "$PATCH" > /dev/null 2>&1; then
-                    echo "OK (already applied)"
-                else
-                    echo "FAIL (does not apply)"
-                    FAILED=$((FAILED + 1))
-                fi
-                ;;
-            apply)
-                echo -n "  Applying $PATCH_NAME ... "
-                if patch --dry-run -p1 -d "$VENDOR_CRATE" < "$PATCH" > /dev/null 2>&1; then
-                    patch -p1 -d "$VENDOR_CRATE" < "$PATCH" > /dev/null 2>&1
-                    echo "applied"
-                elif patch --dry-run -R -p1 -d "$VENDOR_CRATE" < "$PATCH" > /dev/null 2>&1; then
-                    echo "already applied"
-                else
-                    # Mixed state (e.g. an interrupted earlier run left some
-                    # hunks applied): apply the remaining hunks, tolerating
-                    # already-applied ones; fail only on genuine rejects.
-                    set +e
-                    OUT=$(patch -p1 -N -r /dev/null -d "$VENDOR_CRATE" < "$PATCH" 2>&1)
-                    RC=$?
-                    set -e
-                    if [ $RC -le 1 ] && ! echo "$OUT" | grep -q "FAILED"; then
-                        echo "converged (mixed state)"
-                    else
-                        echo "FAIL (does not apply)"
-                        FAILED=$((FAILED + 1))
-                    fi
-                fi
-                ;;
-            reverse)
-                echo -n "  Reversing $PATCH_NAME ... "
-                if patch -R --dry-run -p1 -d "$VENDOR_CRATE" < "$PATCH" > /dev/null 2>&1; then
-                    patch -R -p1 -d "$VENDOR_CRATE" < "$PATCH" > /dev/null 2>&1
-                    echo "reversed"
-                else
-                    echo "not applied (skipping)"
-                fi
-                ;;
-        esac
-    done
-
-    # Install companion source files that a patch needs but cannot carry inline
-    # (a `diff`/`patch` cannot create a brand-new file in vendored sources whose
-    # parent doesn't exist as a tracked /dev/null hunk reliably across patch
-    # versions). Convention: `patches/crates/<crate>/copy.manifest` with lines
-    # "<src-relative-to-crate-patch-dir> <dest-relative-to-vendor-crate>".
-    # Example (tokio): `wasi-process-imp.rs src/process/wasi.rs` installs the
-    # cooperative wasm32-wasip1 process impl that the .patch's `#[path]` wiring
-    # references. Without this the patched tokio fails to compile (missing module).
-    MANIFEST="$CRATE_DIR/copy.manifest"
-    if [ "$MODE" = "apply" ] && [ -f "$MANIFEST" ]; then
-        while read -r SRC DEST; do
-            # Skip blank lines and comments.
-            case "$SRC" in ""|\#*) continue ;; esac
-            if [ ! -f "$CRATE_DIR/$SRC" ]; then
-                echo "  ERROR: copy.manifest source missing: $SRC"
-                FAILED=$((FAILED + 1))
-                continue
-            fi
-            mkdir -p "$(dirname "$VENDOR_CRATE/$DEST")"
-            cp "$CRATE_DIR/$SRC" "$VENDOR_CRATE/$DEST"
-            echo "  Installed companion: $SRC -> $DEST"
-        done < "$MANIFEST"
-    elif [ "$MODE" = "reverse" ] && [ -f "$MANIFEST" ]; then
-        while read -r SRC DEST; do
-            case "$SRC" in ""|\#*) continue ;; esac
-            rm -f "$VENDOR_CRATE/$DEST"
-        done < "$MANIFEST"
-    fi
-
-    # Null out .cargo-checksum.json hashes so Cargo accepts patched sources
-    if [ "$MODE" = "apply" ]; then
-        CHECKSUM_FILE="$VENDOR_CRATE/.cargo-checksum.json"
-        if [ -f "$CHECKSUM_FILE" ]; then
-            # Replace the "files" object with an empty object to skip checksum verification
-            python3 -c "
-import json, sys
-path = sys.argv[1]
-with open(path) as f:
-    data = json.load(f)
-data['files'] = {}
-with open(path, 'w') as f:
-    json.dump(data, f)
-" "$CHECKSUM_FILE" 2>/dev/null || \
-            # Fallback: use sed if python3 is not available
-            sed -i 's/"files":{[^}]*}/"files":{}/' "$CHECKSUM_FILE"
-        fi
-    fi
-
-    echo ""
-done
-
-echo "=== Summary ==="
-echo "Total patches processed: $TOTAL_PATCHES"
-
-if [ "$FAILED" -ne 0 ]; then
-    echo "FAILED: $FAILED patch(es) did not apply"
-    exit 1
-else
-    case "$MODE" in
-        check)   echo "All vendor patches verified." ;;
-        apply)   echo "All vendor patches applied successfully." ;;
-        reverse) echo "All vendor patches reversed." ;;
-    esac
-fi
diff --git a/registry/native/scripts/patch-wasi-libc.sh b/registry/native/scripts/patch-wasi-libc.sh
deleted file mode 100755
index f31d3031d..000000000
--- a/registry/native/scripts/patch-wasi-libc.sh
+++ /dev/null
@@ -1,384 +0,0 @@
-#!/bin/bash
-# patch-wasi-libc.sh — Vendor, patch, and build wasi-libc as a custom sysroot
-#
-# Clones wasi-libc at the commit pinned by wasi-sdk-25, applies patches from
-# patches/wasi-libc/ that route POSIX functions through our host_process and
-# host_user WASM imports, and builds the patched sysroot.
-#
-# Usage:
-#   ./scripts/patch-wasi-libc.sh [--check] [--reverse]
-#
-# Options:
-#   --check    Dry-run: verify patches apply cleanly without building
-#   --reverse  Reverse (unapply) previously applied patches
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-WASMCORE_DIR="$(dirname "$SCRIPT_DIR")"
-PATCHES_DIR="$WASMCORE_DIR/patches/wasi-libc"
-
-# wasi-libc commit pinned by wasi-sdk-25's git submodule
-WASI_LIBC_COMMIT="574b88da481569b65a237cb80daf9a2d5aeaf82d"
-WASI_LIBC_REPO="https://github.com/WebAssembly/wasi-libc.git"
-LLVM_PROJECT_TAG="llvmorg-19.1.5"
-LLVM_PROJECT_URL="https://github.com/llvm/llvm-project/archive/refs/tags/${LLVM_PROJECT_TAG}.tar.gz"
-
-# Directories
-VENDOR_DIR="$WASMCORE_DIR/c/vendor"
-WASI_LIBC_DIR="$VENDOR_DIR/wasi-libc"
-LLVM_PROJECT_DIR="$VENDOR_DIR/llvm-project"
-WASI_SDK_DIR="$VENDOR_DIR/wasi-sdk"
-SYSROOT_DIR="$WASMCORE_DIR/c/sysroot"
-WASI_LIBC_SRC_DIR="$WASI_LIBC_DIR"
-WORKTREE_DIR=""
-
-# Parse arguments
-MODE="apply"
-for arg in "$@"; do
-    case "$arg" in
-        --check)
-            MODE="check"
-            ;;
-        --reverse)
-            MODE="reverse"
-            ;;
-        *)
-            echo "Unknown argument: $arg"
-            echo "Usage: $0 [--check] [--reverse]"
-            exit 1
-            ;;
-    esac
-done
-
-# Ensure wasi-sdk is available (needed for building the sysroot)
-if [ "$MODE" = "apply" ] && [ ! -d "$WASI_SDK_DIR" ]; then
-    echo "ERROR: wasi-sdk not found at $WASI_SDK_DIR"
-    echo "Run 'make -C $WASMCORE_DIR/c wasi-sdk' first."
-    exit 1
-fi
-
-# Clone or verify wasi-libc at pinned commit
-if [ ! -d "$WASI_LIBC_DIR" ]; then
-    if [ "$MODE" = "check" ]; then
-        echo "ERROR: wasi-libc not vendored at $WASI_LIBC_DIR"
-        echo "Run '$0' (without --check) to clone and build."
-        exit 1
-    fi
-
-    echo "=== Cloning wasi-libc at $WASI_LIBC_COMMIT ==="
-    mkdir -p "$VENDOR_DIR"
-    git clone "$WASI_LIBC_REPO" "$WASI_LIBC_DIR"
-    git -C "$WASI_LIBC_DIR" checkout "$WASI_LIBC_COMMIT"
-    echo ""
-else
-    # Verify we're at the expected commit
-    CURRENT_COMMIT="$(git -C "$WASI_LIBC_DIR" rev-parse HEAD 2>/dev/null || echo "unknown")"
-    if [ "$CURRENT_COMMIT" != "$WASI_LIBC_COMMIT" ]; then
-        echo "WARNING: wasi-libc is at $CURRENT_COMMIT, expected $WASI_LIBC_COMMIT"
-        if [ "$MODE" != "check" ]; then
-            echo "Resetting to pinned commit..."
-            git -C "$WASI_LIBC_DIR" checkout "$WASI_LIBC_COMMIT"
-        fi
-    fi
-fi
-
-# Fetch llvm-project sources used to rebuild the exception-capable C++ runtime.
-if [ ! -d "$LLVM_PROJECT_DIR/runtimes" ]; then
-    if [ "$MODE" = "check" ]; then
-        echo "ERROR: llvm-project not vendored at $LLVM_PROJECT_DIR"
-        echo "Run '$0' (without --check) to fetch the runtime sources."
-        exit 1
-    fi
-
-    echo "=== Fetching llvm-project at $LLVM_PROJECT_TAG ==="
-    mkdir -p "$VENDOR_DIR"
-    LLVM_TARBALL="$VENDOR_DIR/${LLVM_PROJECT_TAG}.tar.gz"
-    if command -v curl >/dev/null 2>&1; then
-        curl -fSL "$LLVM_PROJECT_URL" -o "$LLVM_TARBALL"
-    elif command -v wget >/dev/null 2>&1; then
-        wget -q "$LLVM_PROJECT_URL" -O "$LLVM_TARBALL"
-    else
-        echo "ERROR: neither curl nor wget found"
-        exit 1
-    fi
-    rm -rf "$LLVM_PROJECT_DIR"
-    mkdir -p "$LLVM_PROJECT_DIR"
-    tar -xzf "$LLVM_TARBALL" --strip-components=1 -C "$LLVM_PROJECT_DIR"
-    echo ""
-fi
-
-cleanup() {
-    if [ -n "$WORKTREE_DIR" ] && [ -d "$WORKTREE_DIR" ]; then
-        git -C "$WASI_LIBC_DIR" worktree remove --force "$WORKTREE_DIR" >/dev/null 2>&1 || true
-    fi
-}
-
-trap cleanup EXIT
-
-if [ "$MODE" = "apply" ] || [ "$MODE" = "check" ]; then
-    WORKTREE_DIR="$(mktemp -d "${TMPDIR:-/tmp}/wasi-libc-worktree.XXXXXX")"
-    rm -rf "$WORKTREE_DIR"
-    git -C "$WASI_LIBC_DIR" worktree add --detach "$WORKTREE_DIR" "$WASI_LIBC_COMMIT" >/dev/null 2>&1
-    WASI_LIBC_SRC_DIR="$WORKTREE_DIR"
-fi
-
-# Find patch files
-if [ "$MODE" = "reverse" ]; then
-    mapfile -t PATCH_FILES < <(find "$PATCHES_DIR" -name '*.patch' -type f 2>/dev/null | sort -r)
-else
-    mapfile -t PATCH_FILES < <(find "$PATCHES_DIR" -name '*.patch' -type f 2>/dev/null | sort)
-fi
-
-if [ "${#PATCH_FILES[@]}" -eq 0 ]; then
-    echo "No patch files found in $PATCHES_DIR"
-    if [ "$MODE" = "apply" ]; then
-        echo "Building vanilla (unpatched) sysroot..."
-    else
-        exit 0
-    fi
-else
-    PATCH_COUNT="${#PATCH_FILES[@]}"
-    echo "Found $PATCH_COUNT patch(es) in $PATCHES_DIR"
-    echo "wasi-libc source: $WASI_LIBC_SRC_DIR"
-    echo ""
-
-    apply_patch_series_entry() {
-        local patch="$1"
-        local success_message="$2"
-
-        if git -C "$WASI_LIBC_SRC_DIR" apply --check "$patch" >/dev/null 2>&1; then
-            git -C "$WASI_LIBC_SRC_DIR" apply "$patch"
-            echo "$success_message"
-            return 0
-        fi
-
-        if git -C "$WASI_LIBC_SRC_DIR" apply --reverse --check "$patch" >/dev/null 2>&1; then
-            echo "OK (already applied)"
-            return 0
-        fi
-
-        echo "FAIL (does not apply)"
-        return 1
-    }
-
-    reverse_patch_series_entry() {
-        local patch="$1"
-
-        if git -C "$WASI_LIBC_SRC_DIR" apply --reverse --check "$patch" >/dev/null 2>&1; then
-            git -C "$WASI_LIBC_SRC_DIR" apply --reverse "$patch"
-            echo "reversed"
-            return 0
-        fi
-
-        if git -C "$WASI_LIBC_SRC_DIR" apply --check "$patch" >/dev/null 2>&1; then
-            echo "not applied (skipping)"
-            return 0
-        fi
-
-        echo "FAIL (cannot reverse cleanly)"
-        return 1
-    }
-
-    for PATCH in "${PATCH_FILES[@]}"; do
-        PATCH_NAME="$(basename "$PATCH")"
-
-        case "$MODE" in
-            check)
-                echo -n "Checking $PATCH_NAME ... "
-                apply_patch_series_entry "$PATCH" "OK (applies cleanly)" || exit 1
-                ;;
-            apply)
-                echo -n "Applying $PATCH_NAME ... "
-                apply_patch_series_entry "$PATCH" "applied" || exit 1
-                ;;
-            reverse)
-                echo -n "Reversing $PATCH_NAME ... "
-                reverse_patch_series_entry "$PATCH" || exit 1
-                ;;
-        esac
-    done
-
-    echo ""
-    case "$MODE" in
-        check)   echo "All patches verified."; exit 0 ;;
-        reverse) echo "All patches reversed."; exit 0 ;;
-    esac
-fi
-
-# Build the sysroot (only in apply mode)
-echo ""
-echo "=== Building patched wasi-libc sysroot ==="
-
-# wasi-sdk tools
-WASI_CC="$WASI_SDK_DIR/bin/clang"
-WASI_AR="$WASI_SDK_DIR/bin/llvm-ar"
-WASI_NM="$WASI_SDK_DIR/bin/llvm-nm"
-
-if [ ! -x "$WASI_CC" ]; then
-    echo "ERROR: wasi-sdk clang not found at $WASI_CC"
-    exit 1
-fi
-
-# Clean previous build artifacts and sysroot for a reproducible build
-make -C "$WASI_LIBC_SRC_DIR" clean 2>/dev/null || true
-rm -rf "$SYSROOT_DIR"
-
-# Build wasi-libc with wasi-sdk's tools, output to our sysroot directory.
-# Build the `libc` target (headers + static libraries) but NOT `finish`, which
-# runs check-symbols and fails because our patches add custom undefined symbols
-# (__host_*) not in the upstream expected-symbols list.
-make -C "$WASI_LIBC_SRC_DIR" \
-    CC="$WASI_CC" \
-    AR="$WASI_AR" \
-    NM="$WASI_NM" \
-    SYSROOT="$SYSROOT_DIR" \
-    libc \
-    -j"$(nproc 2>/dev/null || echo 4)"
-
-# Install CRT startup files (crt1.o etc.) from the vanilla wasi-sdk sysroot.
-# CRT objects are standard startup routines that don't need our patches.
-SYSROOT_LIB="$SYSROOT_DIR/lib/wasm32-wasi"
-VANILLA_LIB="$WASI_SDK_DIR/share/wasi-sysroot/lib/wasm32-wasi"
-for crt in "$VANILLA_LIB"/crt*.o; do
-    [ -f "$crt" ] && cp "$crt" "$SYSROOT_LIB/"
-done
-
-# Install the wasi-sdk libc++ runtime into the patched sysroot so upstream C++
-# projects can target the same sysroot we use for libc. We overlay the
-# thread-capable headers/libs from wasm32-wasi-threads because libc++'s mutex
-# support expects those definitions even when we satisfy pthread calls through
-# wasi-emulated-pthread.
-VANILLA_INCLUDE="$WASI_SDK_DIR/share/wasi-sysroot/include/wasm32-wasi"
-THREADS_INCLUDE="$WASI_SDK_DIR/share/wasi-sysroot/include/wasm32-wasi-threads"
-SYSROOT_INCLUDE="$SYSROOT_DIR/include/wasm32-wasi"
-mkdir -p "$SYSROOT_INCLUDE/c++/v1"
-if [ -d "$VANILLA_INCLUDE/c++/v1" ]; then
-    cp -R "$VANILLA_INCLUDE/c++/v1/." "$SYSROOT_INCLUDE/c++/v1/"
-fi
-if [ -d "$THREADS_INCLUDE/c++/v1" ]; then
-    cp -R "$THREADS_INCLUDE/c++/v1/." "$SYSROOT_INCLUDE/c++/v1/"
-fi
-
-for runtime in libc++.a libc++.modules.json libc++.so libc++abi.a libc++abi.so libc++experimental.a; do
-    [ -f "$VANILLA_LIB/$runtime" ] && cp "$VANILLA_LIB/$runtime" "$SYSROOT_LIB/"
-done
-THREADS_LIB="$WASI_SDK_DIR/share/wasi-sysroot/lib/wasm32-wasi-threads"
-for runtime in libc++.a libc++abi.a libc++experimental.a; do
-    [ -f "$THREADS_LIB/$runtime" ] && cp "$THREADS_LIB/$runtime" "$SYSROOT_LIB/"
-done
-
-# Rebuild the C++ runtime with Wasm EH enabled so upstream C++ projects can use
-# exceptions against the same patched WASI/POSIX sysroot. We also replace the
-# libc++ headers with the rebuilt install so the header ABI namespace matches
-# the custom libc++/libc++abi archives we overlay into the sysroot.
-LLVM_RUNTIME_BUILD_SCRIPT="$WASMCORE_DIR/c/scripts/build-llvm-runtimes.sh"
-LLVM_RUNTIME_BUILD_DIR="$WASMCORE_DIR/c/build/llvm-runtimes"
-LLVM_RUNTIME_INSTALL_DIR="$WASMCORE_DIR/c/build/llvm-runtimes-install"
-echo "Rebuilding libc++/libc++abi/libunwind with -fwasm-exceptions..."
-LLVM_PROJECT_SRC_DIR="$LLVM_PROJECT_DIR" \
-LLVM_RUNTIME_BUILD_DIR="$LLVM_RUNTIME_BUILD_DIR" \
-LLVM_RUNTIME_INSTALL_DIR="$LLVM_RUNTIME_INSTALL_DIR" \
-WASI_SDK_DIR="$WASI_SDK_DIR" \
-SYSROOT_DIR="$SYSROOT_DIR" \
-bash "$LLVM_RUNTIME_BUILD_SCRIPT"
-
-# Create empty dummy libraries (libm, librt, libpthread, etc.)
-for lib in m rt pthread crypt util xnet resolv; do
-    "$WASI_AR" crs "$SYSROOT_LIB/lib${lib}.a" 2>/dev/null || true
-done
-
-echo ""
-echo "=== Sysroot build complete ==="
-
-# Verify the build output
-if [ -f "$SYSROOT_DIR/lib/wasm32-wasi/libc.a" ]; then
-    echo "OK: $SYSROOT_DIR/lib/wasm32-wasi/libc.a exists"
-else
-    echo "ERROR: libc.a not found in sysroot — build may have failed"
-    exit 1
-fi
-
-# Remove libc objects that conflict with host_socket.o.
-# Our socket patch replaces these entry points with host_net-backed versions.
-"$WASI_AR" d "$SYSROOT_LIB/libc.a" accept-wasip1.o send.o recv.o select.o poll.o 2>/dev/null || true
-echo "Removed conflicting accept-wasip1.o/send.o/recv.o/select.o/poll.o from libc.a"
-
-# Remove musl's original signal entry points so host_sigaction.o is the only
-# resolver for sigaction()/signal() in the patched sysroot.
-"$WASI_AR" d "$SYSROOT_LIB/libc.a" sigaction.o signal.o 2>/dev/null || true
-echo "Removed conflicting sigaction.o/signal.o from libc.a"
-
-# wasi-libc builds under wasm32-wasi, but clang --target=wasm32-wasip1 expects
-# wasm32-wasip1 subdirectories. Create symlinks so both targets work.
-for subdir in include lib; do
-    if [ -d "$SYSROOT_DIR/$subdir/wasm32-wasi" ] && [ ! -e "$SYSROOT_DIR/$subdir/wasm32-wasip1" ]; then
-        ln -s wasm32-wasi "$SYSROOT_DIR/$subdir/wasm32-wasip1"
-        echo "Symlink: $subdir/wasm32-wasip1 -> wasm32-wasi"
-    fi
-done
-
-# === Install sysroot overrides ===
-# Override files in patches/wasi-libc-overrides/ fix broken libc behavior
-# (fcntl, sched_getcpu, strfmon, open_wmemstream, swprintf, inet_ntop,
-# pthread_attr, pthread_mutex, pthread_key, fmtmsg).
-# The patched sysroot also provides host_sigaction.o, which must replace musl's
-# original sigaction.o / signal.o so cooperative signal registration flows
-# through the host_process import instead of the upstream rt_sigaction stub.
-# realloc is handled by 0009-realloc-glibc-semantics.patch directly.
-# Overrides are compiled and added to libc.a so ALL WASM programs get the fixes.
-OVERRIDES_DIR="$WASMCORE_DIR/patches/wasi-libc-overrides"
-OVERRIDE_INCLUDE_DIR="$WASMCORE_DIR/c/include"
-OVERRIDE_CFLAGS="--target=wasm32-wasip1 --sysroot=$SYSROOT_DIR -O2 -D_GNU_SOURCE -I$OVERRIDE_INCLUDE_DIR"
-
-# Extra flags for overrides that need musl internal headers (struct __pthread, etc.)
-MUSL_INTERNAL_DIR="$WASI_LIBC_SRC_DIR/libc-top-half/musl/src/internal"
-MUSL_ARCH_DIR="$WASI_LIBC_SRC_DIR/libc-top-half/musl/arch/wasm32"
-OVERRIDE_INTERNAL_CFLAGS="-I$MUSL_INTERNAL_DIR -I$MUSL_ARCH_DIR"
-
-if [ -d "$OVERRIDES_DIR" ] && ls "$OVERRIDES_DIR"/*.c >/dev/null 2>&1; then
-    echo ""
-    echo "=== Installing sysroot overrides ==="
-
-    # Helper: extract .o member name from llvm-nm --print-file-name output.
-    # Format: "/path/to/libc.a:member.o: 00000000 T symbol"
-    extract_obj() {
-        sed 's/.*:\([^:]*\.o\):.*/\1/'
-    }
-
-    # Remove original .o files for symbols we're replacing outright.
-    # These functions live in their own .o files (one function per file in musl).
-    # Note: strfmon.o contains both strfmon and strfmon_l — only need to remove once.
-    # pthread_mutex: all 5 functions (lock, trylock, timedlock, unlock, consistent)
-    # are in a single mutex.o — remove it so our override replaces them all.
-    # pthread_key: create, delete, and tsd_run_dtors are in a single .o — remove
-    # via __pthread_key_create to replace the whole TSD compilation unit.
-    for sym in fcntl strfmon open_wmemstream swprintf inet_ntop __pthread_mutex_lock pthread_attr_setguardsize pthread_mutexattr_setrobust __pthread_key_create fmtmsg; do
-        OBJ_LINE=$("$WASI_NM" --print-file-name "$SYSROOT_LIB/libc.a" 2>/dev/null | { grep " [TW] ${sym}\$" || true; } | head -1)
-        if [ -n "$OBJ_LINE" ]; then
-            OBJ=$(echo "$OBJ_LINE" | extract_obj)
-            if [ -n "$OBJ" ]; then
-                echo "  Removing original $OBJ (provides $sym)"
-                "$WASI_AR" d "$SYSROOT_LIB/libc.a" "$OBJ" 2>/dev/null || true
-            fi
-        fi
-    done
-
-    # Compile each override and add to libc.a
-    for src in "$OVERRIDES_DIR"/*.c; do
-        name="$(basename "${src%.c}")"
-        EXTRA_FLAGS=""
-        # pthread_key needs musl internal headers for struct __pthread
-        case "$name" in
-            pthread_key) EXTRA_FLAGS="$OVERRIDE_INTERNAL_CFLAGS" ;;
-        esac
-        echo "  Compiling override: $name"
-        "$WASI_CC" $OVERRIDE_CFLAGS $EXTRA_FLAGS -c "$src" -o "$SYSROOT_LIB/override_${name}.o"
-        "$WASI_AR" r "$SYSROOT_LIB/libc.a" "$SYSROOT_LIB/override_${name}.o"
-        rm -f "$SYSROOT_LIB/override_${name}.o"
-    done
-
-    echo "Sysroot overrides installed"
-fi
-
-echo "Patched sysroot installed to: $SYSROOT_DIR"
diff --git a/registry/native/scripts/test-gnu.sh b/registry/native/scripts/test-gnu.sh
deleted file mode 100755
index 4268a39f3..000000000
--- a/registry/native/scripts/test-gnu.sh
+++ /dev/null
@@ -1,33 +0,0 @@
-#!/usr/bin/env bash
-#
-# Native C Command Build/Install Validation
-#
-# Builds and installs the maintained C command set against the WASI toolchain.
-# This legacy script name is kept for existing callers; it is not a broad GNU
-# runtime conformance suite.
-#
-# Usage:
-#   ./scripts/test-gnu.sh
-#
-
-set -euo pipefail
-
-SCRIPT_DIR="$(cd "$(dirname "$0")" && pwd)"
-PROJECT_DIR="$(cd "$SCRIPT_DIR/.." && pwd)"
-COMMANDS_DIR="$PROJECT_DIR/target/wasm32-wasip1/release/commands"
-
-# Check standalone binaries exist
-if [ ! -d "$COMMANDS_DIR" ]; then
-    echo "Error: Commands directory not found at $COMMANDS_DIR"
-    echo "Run 'make wasm' first."
-    exit 1
-fi
-
-echo "=== Native C Command Build/Install Validation ==="
-echo "Commands dir: $COMMANDS_DIR ($( ls -1 "$COMMANDS_DIR" | wc -l ) binaries)"
-echo ""
-
-make -C "$PROJECT_DIR/c" programs install
-
-echo ""
-echo "=== Native C command build/install validation PASSED ==="
diff --git a/registry/native/stubs/codex-network-proxy-wasi/Cargo.toml b/registry/native/stubs/codex-network-proxy-wasi/Cargo.toml
deleted file mode 100644
index c3cb60b3f..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/Cargo.toml
+++ /dev/null
@@ -1,34 +0,0 @@
-[package]
-name = "codex-network-proxy"
-edition = "2024"
-version = { workspace = true }
-license.workspace = true
-
-[lib]
-name = "codex_network_proxy"
-path = "src/lib.rs"
-
-[lints]
-workspace = true
-
-[dependencies]
-anyhow = { workspace = true }
-async-trait = { workspace = true }
-clap = { workspace = true, features = ["derive"] }
-chrono = { workspace = true }
-codex-utils-absolute-path = { workspace = true }
-codex-utils-home-dir = { workspace = true }
-globset = { workspace = true }
-serde = { workspace = true, features = ["derive"] }
-serde_json = { workspace = true }
-thiserror = { workspace = true }
-time = { workspace = true }
-tokio = { workspace = true, features = ["macros", "rt", "sync", "time", "io-util"] }
-tracing = { workspace = true }
-url = { workspace = true }
-
-[dev-dependencies]
-pretty_assertions = { workspace = true }
-tempfile = { workspace = true }
-
-[target.'cfg(target_family = "unix")'.dependencies]
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/certs.rs b/registry/native/stubs/codex-network-proxy-wasi/src/certs.rs
deleted file mode 100644
index 2df096e24..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/certs.rs
+++ /dev/null
@@ -1 +0,0 @@
-//! wasm32-wasip1 stub (inert on wasi).
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/config.rs b/registry/native/stubs/codex-network-proxy-wasi/src/config.rs
deleted file mode 100644
index f3f0e06c3..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/config.rs
+++ /dev/null
@@ -1,605 +0,0 @@
-use anyhow::Context;
-use anyhow::Result;
-use anyhow::bail;
-use codex_utils_absolute_path::AbsolutePathBuf;
-use serde::Deserialize;
-use serde::Serialize;
-use std::net::IpAddr;
-use std::net::SocketAddr;
-use std::path::Path;
-use tracing::warn;
-use url::Url;
-
-#[derive(Debug, Clone, Serialize, Deserialize, Default, PartialEq, Eq)]
-pub struct NetworkProxyConfig {
-    #[serde(default)]
-    pub network: NetworkProxySettings,
-}
-
-#[derive(Debug, Clone, Serialize, Deserialize, PartialEq, Eq)]
-#[serde(default)]
-pub struct NetworkProxySettings {
-    #[serde(default)]
-    pub enabled: bool,
-    #[serde(default = "default_proxy_url")]
-    pub proxy_url: String,
-    pub enable_socks5: bool,
-    #[serde(default = "default_socks_url")]
-    pub socks_url: String,
-    pub enable_socks5_udp: bool,
-    pub allow_upstream_proxy: bool,
-    #[serde(default)]
-    pub dangerously_allow_non_loopback_proxy: bool,
-    #[serde(default)]
-    pub dangerously_allow_all_unix_sockets: bool,
-    #[serde(default)]
-    pub mode: NetworkMode,
-    #[serde(default)]
-    pub allowed_domains: Vec<String>,
-    #[serde(default)]
-    pub denied_domains: Vec<String>,
-    #[serde(default)]
-    pub allow_unix_sockets: Vec<String>,
-    pub allow_local_binding: bool,
-    #[serde(default)]
-    pub mitm: bool,
-}
-
-impl Default for NetworkProxySettings {
-    fn default() -> Self {
-        Self {
-            enabled: false,
-            proxy_url: default_proxy_url(),
-            enable_socks5: true,
-            socks_url: default_socks_url(),
-            enable_socks5_udp: true,
-            allow_upstream_proxy: true,
-            dangerously_allow_non_loopback_proxy: false,
-            dangerously_allow_all_unix_sockets: false,
-            mode: NetworkMode::default(),
-            allowed_domains: Vec::new(),
-            denied_domains: Vec::new(),
-            allow_unix_sockets: Vec::new(),
-            allow_local_binding: false,
-            mitm: false,
-        }
-    }
-}
-
-#[derive(Debug, Clone, Copy, Serialize, Deserialize, PartialEq, Eq, Default)]
-#[serde(rename_all = "lowercase")]
-pub enum NetworkMode {
-    /// Limited (read-only) access: only GET/HEAD/OPTIONS are allowed for HTTP. HTTPS CONNECT is
-    /// blocked unless MITM is enabled so the proxy can enforce method policy on inner requests.
-    /// SOCKS5 remains blocked in limited mode.
-    Limited,
-    /// Full network access: all HTTP methods are allowed, and HTTPS CONNECTs are tunneled without
-    /// MITM interception.
-    #[default]
-    Full,
-}
-
-impl NetworkMode {
-    pub fn allows_method(self, method: &str) -> bool {
-        match self {
-            Self::Full => true,
-            Self::Limited => matches!(method, "GET" | "HEAD" | "OPTIONS"),
-        }
-    }
-}
-
-fn default_proxy_url() -> String {
-    "http://127.0.0.1:3128".to_string()
-}
-
-fn default_socks_url() -> String {
-    "http://127.0.0.1:8081".to_string()
-}
-
-/// Clamp non-loopback bind addresses to loopback unless explicitly allowed.
-fn clamp_non_loopback(
-    addr: SocketAddr,
-    allow_non_loopback: bool,
-    name: &str,
-    override_setting_name: &str,
-) -> SocketAddr {
-    if addr.ip().is_loopback() {
-        return addr;
-    }
-
-    if allow_non_loopback {
-        warn!("DANGEROUS: {name} listening on non-loopback address {addr}");
-        return addr;
-    }
-
-    warn!(
-        "{name} requested non-loopback bind ({addr}); clamping to 127.0.0.1:{port} (set {override_setting_name} to override)",
-        port = addr.port()
-    );
-    SocketAddr::from(([127, 0, 0, 1], addr.port()))
-}
-
-pub(crate) fn clamp_bind_addrs(
-    http_addr: SocketAddr,
-    socks_addr: SocketAddr,
-    cfg: &NetworkProxySettings,
-) -> (SocketAddr, SocketAddr) {
-    let http_addr = clamp_non_loopback(
-        http_addr,
-        cfg.dangerously_allow_non_loopback_proxy,
-        "HTTP proxy",
-        "dangerously_allow_non_loopback_proxy",
-    );
-    let socks_addr = clamp_non_loopback(
-        socks_addr,
-        cfg.dangerously_allow_non_loopback_proxy,
-        "SOCKS5 proxy",
-        "dangerously_allow_non_loopback_proxy",
-    );
-    if cfg.allow_unix_sockets.is_empty() && !cfg.dangerously_allow_all_unix_sockets {
-        return (http_addr, socks_addr);
-    }
-
-    // `x-unix-socket` is intentionally a local escape hatch. If the proxy is reachable from
-    // outside the machine, it can become a remote bridge into local daemons
-    // (e.g. docker.sock). To avoid footguns, enforce loopback binding whenever unix sockets
-    // are enabled.
-    if cfg.dangerously_allow_non_loopback_proxy && !http_addr.ip().is_loopback() {
-        warn!(
-            "unix socket proxying is enabled; ignoring dangerously_allow_non_loopback_proxy and clamping HTTP proxy to loopback"
-        );
-    }
-    if cfg.dangerously_allow_non_loopback_proxy && !socks_addr.ip().is_loopback() {
-        warn!(
-            "unix socket proxying is enabled; ignoring dangerously_allow_non_loopback_proxy and clamping SOCKS5 proxy to loopback"
-        );
-    }
-    (
-        SocketAddr::from(([127, 0, 0, 1], http_addr.port())),
-        SocketAddr::from(([127, 0, 0, 1], socks_addr.port())),
-    )
-}
-
-pub struct RuntimeConfig {
-    pub http_addr: SocketAddr,
-    pub socks_addr: SocketAddr,
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub(crate) struct UnixStyleAbsolutePath(String);
-
-impl UnixStyleAbsolutePath {
-    fn parse(value: &str) -> Option<Self> {
-        value.starts_with('/').then(|| Self(value.to_string()))
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-pub(crate) enum ValidatedUnixSocketPath {
-    Native(AbsolutePathBuf),
-    UnixStyleAbsolute(UnixStyleAbsolutePath),
-}
-
-impl ValidatedUnixSocketPath {
-    pub(crate) fn parse(socket_path: &str) -> Result<Self> {
-        let path = Path::new(socket_path);
-        if path.is_absolute() {
-            let path = AbsolutePathBuf::from_absolute_path(path)
-                .with_context(|| format!("failed to normalize unix socket path {socket_path:?}"))?;
-            return Ok(Self::Native(path));
-        }
-
-        if let Some(path) = UnixStyleAbsolutePath::parse(socket_path) {
-            return Ok(Self::UnixStyleAbsolute(path));
-        }
-
-        bail!("expected an absolute path, got {socket_path:?}");
-    }
-}
-
-pub(crate) fn validate_unix_socket_allowlist_paths(cfg: &NetworkProxyConfig) -> Result<()> {
-    for (index, socket_path) in cfg.network.allow_unix_sockets.iter().enumerate() {
-        ValidatedUnixSocketPath::parse(socket_path)
-            .with_context(|| format!("invalid network.allow_unix_sockets[{index}]"))?;
-    }
-    Ok(())
-}
-
-pub fn resolve_runtime(cfg: &NetworkProxyConfig) -> Result<RuntimeConfig> {
-    validate_unix_socket_allowlist_paths(cfg)?;
-
-    let http_addr = resolve_addr(&cfg.network.proxy_url, /*default_port*/ 3128)
-        .with_context(|| format!("invalid network.proxy_url: {}", cfg.network.proxy_url))?;
-    let socks_addr = resolve_addr(&cfg.network.socks_url, /*default_port*/ 8081)
-        .with_context(|| format!("invalid network.socks_url: {}", cfg.network.socks_url))?;
-    let (http_addr, socks_addr) = clamp_bind_addrs(http_addr, socks_addr, &cfg.network);
-
-    Ok(RuntimeConfig {
-        http_addr,
-        socks_addr,
-    })
-}
-
-fn resolve_addr(url: &str, default_port: u16) -> Result<SocketAddr> {
-    let addr_parts = parse_host_port(url, default_port)?;
-    let host = if addr_parts.host.eq_ignore_ascii_case("localhost") {
-        "127.0.0.1".to_string()
-    } else {
-        addr_parts.host
-    };
-    match host.parse::<IpAddr>() {
-        Ok(ip) => Ok(SocketAddr::new(ip, addr_parts.port)),
-        Err(_) => Ok(SocketAddr::from(([127, 0, 0, 1], addr_parts.port))),
-    }
-}
-
-pub fn host_and_port_from_network_addr(value: &str, default_port: u16) -> String {
-    let trimmed = value.trim();
-    if trimmed.is_empty() {
-        return "<missing>".to_string();
-    }
-
-    let parts = match parse_host_port(trimmed, default_port) {
-        Ok(parts) => parts,
-        Err(_) => {
-            return format_host_and_port(trimmed, default_port);
-        }
-    };
-
-    format_host_and_port(&parts.host, parts.port)
-}
-
-fn format_host_and_port(host: &str, port: u16) -> String {
-    if host.contains(':') {
-        format!("[{host}]:{port}")
-    } else {
-        format!("{host}:{port}")
-    }
-}
-
-#[derive(Debug, Clone, PartialEq, Eq)]
-struct SocketAddressParts {
-    host: String,
-    port: u16,
-}
-
-fn parse_host_port(url: &str, default_port: u16) -> Result<SocketAddressParts> {
-    let trimmed = url.trim();
-    if trimmed.is_empty() {
-        bail!("missing host in network proxy address: {url}");
-    }
-
-    // Avoid treating unbracketed IPv6 literals like "2001:db8::1" as scheme-prefixed URLs.
-    if matches!(trimmed.parse::<IpAddr>(), Ok(IpAddr::V6(_))) && !trimmed.starts_with('[') {
-        return Ok(SocketAddressParts {
-            host: trimmed.to_string(),
-            port: default_port,
-        });
-    }
-
-    // Prefer the standard URL parser when the input is URL-like. Prefix a scheme when absent so
-    // we still accept loose host:port inputs.
-    let candidate = if trimmed.contains("://") {
-        trimmed.to_string()
-    } else {
-        format!("http://{trimmed}")
-    };
-    if let Ok(parsed) = Url::parse(&candidate)
-        && let Some(host) = parsed.host_str()
-    {
-        let host = host.trim_matches(|c| c == '[' || c == ']');
-        if host.is_empty() {
-            bail!("missing host in network proxy address: {url}");
-        }
-        return Ok(SocketAddressParts {
-            host: host.to_string(),
-            port: parsed.port().unwrap_or(default_port),
-        });
-    }
-
-    parse_host_port_fallback(trimmed, default_port)
-}
-
-fn parse_host_port_fallback(input: &str, default_port: u16) -> Result<SocketAddressParts> {
-    let without_scheme = input
-        .split_once("://")
-        .map(|(_, rest)| rest)
-        .unwrap_or(input);
-    let host_port = without_scheme.split('/').next().unwrap_or(without_scheme);
-    let host_port = host_port
-        .rsplit_once('@')
-        .map(|(_, rest)| rest)
-        .unwrap_or(host_port);
-
-    if host_port.starts_with('[')
-        && let Some(end) = host_port.find(']')
-    {
-        let host = &host_port[1..end];
-        let port = host_port[end + 1..]
-            .strip_prefix(':')
-            .and_then(|port| port.parse::<u16>().ok())
-            .unwrap_or(default_port);
-        if host.is_empty() {
-            bail!("missing host in network proxy address: {input}");
-        }
-        return Ok(SocketAddressParts {
-            host: host.to_string(),
-            port,
-        });
-    }
-
-    // Only treat `host:port` as such when there's a single `:`. This avoids
-    // accidentally interpreting unbracketed IPv6 addresses as `host:port`.
-    if host_port.bytes().filter(|b| *b == b':').count() == 1
-        && let Some((host, port)) = host_port.rsplit_once(':')
-    {
-        if host.is_empty() {
-            bail!("missing host in network proxy address: {input}");
-        }
-        return Ok(SocketAddressParts {
-            host: host.to_string(),
-            port: port.parse::<u16>().ok().unwrap_or(default_port),
-        });
-    }
-
-    if host_port.is_empty() {
-        bail!("missing host in network proxy address: {input}");
-    }
-    Ok(SocketAddressParts {
-        host: host_port.to_string(),
-        port: default_port,
-    })
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    use pretty_assertions::assert_eq;
-
-    #[test]
-    fn network_proxy_settings_default_matches_local_use_baseline() {
-        assert_eq!(
-            NetworkProxySettings::default(),
-            NetworkProxySettings {
-                enabled: false,
-                proxy_url: "http://127.0.0.1:3128".to_string(),
-                enable_socks5: true,
-                socks_url: "http://127.0.0.1:8081".to_string(),
-                enable_socks5_udp: true,
-                allow_upstream_proxy: true,
-                dangerously_allow_non_loopback_proxy: false,
-                dangerously_allow_all_unix_sockets: false,
-                mode: NetworkMode::Full,
-                allowed_domains: Vec::new(),
-                denied_domains: Vec::new(),
-                allow_unix_sockets: Vec::new(),
-                allow_local_binding: false,
-                mitm: false,
-            }
-        );
-    }
-
-    #[test]
-    fn partial_network_config_uses_struct_defaults_for_missing_fields() {
-        let config: NetworkProxyConfig = serde_json::from_str(
-            r#"{
-                "network": {
-                    "enabled": true
-                }
-            }"#,
-        )
-        .unwrap();
-        let expected = NetworkProxySettings {
-            enabled: true,
-            ..NetworkProxySettings::default()
-        };
-
-        assert_eq!(config.network, expected);
-    }
-
-    #[test]
-    fn parse_host_port_defaults_for_empty_string() {
-        assert!(parse_host_port("", 1234).is_err());
-    }
-
-    #[test]
-    fn parse_host_port_defaults_for_whitespace() {
-        assert!(parse_host_port("   ", 5555).is_err());
-    }
-
-    #[test]
-    fn parse_host_port_parses_host_port_without_scheme() {
-        assert_eq!(
-            parse_host_port("127.0.0.1:8080", 3128).unwrap(),
-            SocketAddressParts {
-                host: "127.0.0.1".to_string(),
-                port: 8080,
-            }
-        );
-    }
-
-    #[test]
-    fn parse_host_port_parses_host_port_with_scheme_and_path() {
-        assert_eq!(
-            parse_host_port("http://example.com:8080/some/path", 3128).unwrap(),
-            SocketAddressParts {
-                host: "example.com".to_string(),
-                port: 8080,
-            }
-        );
-    }
-
-    #[test]
-    fn parse_host_port_strips_userinfo() {
-        assert_eq!(
-            parse_host_port("http://user:pass@host.example:5555", 3128).unwrap(),
-            SocketAddressParts {
-                host: "host.example".to_string(),
-                port: 5555,
-            }
-        );
-    }
-
-    #[test]
-    fn parse_host_port_parses_ipv6_with_brackets() {
-        assert_eq!(
-            parse_host_port("http://[::1]:9999", 3128).unwrap(),
-            SocketAddressParts {
-                host: "::1".to_string(),
-                port: 9999,
-            }
-        );
-    }
-
-    #[test]
-    fn parse_host_port_does_not_treat_unbracketed_ipv6_as_host_port() {
-        assert_eq!(
-            parse_host_port("2001:db8::1", 3128).unwrap(),
-            SocketAddressParts {
-                host: "2001:db8::1".to_string(),
-                port: 3128,
-            }
-        );
-    }
-
-    #[test]
-    fn parse_host_port_falls_back_to_default_port_when_port_is_invalid() {
-        assert_eq!(
-            parse_host_port("example.com:notaport", 3128).unwrap(),
-            SocketAddressParts {
-                host: "example.com".to_string(),
-                port: 3128,
-            }
-        );
-    }
-
-    #[test]
-    fn host_and_port_from_network_addr_defaults_for_empty_string() {
-        assert_eq!(host_and_port_from_network_addr("", 1234), "<missing>");
-    }
-
-    #[test]
-    fn host_and_port_from_network_addr_formats_ipv6() {
-        assert_eq!(
-            host_and_port_from_network_addr("http://[::1]:8080", 3128),
-            "[::1]:8080"
-        );
-    }
-
-    #[test]
-    fn resolve_addr_maps_localhost_to_loopback() {
-        assert_eq!(
-            resolve_addr("localhost", 3128).unwrap(),
-            "127.0.0.1:3128".parse::<SocketAddr>().unwrap()
-        );
-    }
-
-    #[test]
-    fn resolve_addr_parses_ip_literals() {
-        assert_eq!(
-            resolve_addr("1.2.3.4", 80).unwrap(),
-            "1.2.3.4:80".parse::<SocketAddr>().unwrap()
-        );
-    }
-
-    #[test]
-    fn resolve_addr_parses_ipv6_literals() {
-        assert_eq!(
-            resolve_addr("http://[::1]:8080", 3128).unwrap(),
-            "[::1]:8080".parse::<SocketAddr>().unwrap()
-        );
-    }
-
-    #[test]
-    fn resolve_addr_falls_back_to_loopback_for_hostnames() {
-        assert_eq!(
-            resolve_addr("http://example.com:5555", 3128).unwrap(),
-            "127.0.0.1:5555".parse::<SocketAddr>().unwrap()
-        );
-    }
-
-    #[test]
-    fn clamp_bind_addrs_allows_non_loopback_when_enabled() {
-        let cfg = NetworkProxySettings {
-            dangerously_allow_non_loopback_proxy: true,
-            ..Default::default()
-        };
-        let http_addr = "0.0.0.0:3128".parse::<SocketAddr>().unwrap();
-        let socks_addr = "0.0.0.0:8081".parse::<SocketAddr>().unwrap();
-
-        let (http_addr, socks_addr) = clamp_bind_addrs(http_addr, socks_addr, &cfg);
-
-        assert_eq!(http_addr, "0.0.0.0:3128".parse::<SocketAddr>().unwrap());
-        assert_eq!(socks_addr, "0.0.0.0:8081".parse::<SocketAddr>().unwrap());
-    }
-
-    #[test]
-    fn clamp_bind_addrs_forces_loopback_when_unix_sockets_enabled() {
-        let cfg = NetworkProxySettings {
-            dangerously_allow_non_loopback_proxy: true,
-            allow_unix_sockets: vec!["/tmp/docker.sock".to_string()],
-            ..Default::default()
-        };
-        let http_addr = "0.0.0.0:3128".parse::<SocketAddr>().unwrap();
-        let socks_addr = "0.0.0.0:8081".parse::<SocketAddr>().unwrap();
-
-        let (http_addr, socks_addr) = clamp_bind_addrs(http_addr, socks_addr, &cfg);
-
-        assert_eq!(http_addr, "127.0.0.1:3128".parse::<SocketAddr>().unwrap());
-        assert_eq!(socks_addr, "127.0.0.1:8081".parse::<SocketAddr>().unwrap());
-    }
-
-    #[test]
-    fn clamp_bind_addrs_forces_loopback_when_all_unix_sockets_enabled() {
-        let cfg = NetworkProxySettings {
-            dangerously_allow_non_loopback_proxy: true,
-            dangerously_allow_all_unix_sockets: true,
-            ..Default::default()
-        };
-        let http_addr = "0.0.0.0:3128".parse::<SocketAddr>().unwrap();
-        let socks_addr = "0.0.0.0:8081".parse::<SocketAddr>().unwrap();
-
-        let (http_addr, socks_addr) = clamp_bind_addrs(http_addr, socks_addr, &cfg);
-
-        assert_eq!(http_addr, "127.0.0.1:3128".parse::<SocketAddr>().unwrap());
-        assert_eq!(socks_addr, "127.0.0.1:8081".parse::<SocketAddr>().unwrap());
-    }
-
-    #[test]
-    fn resolve_runtime_rejects_relative_allow_unix_sockets_entries() {
-        let cfg = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                allow_unix_sockets: vec!["relative.sock".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        let err = match resolve_runtime(&cfg) {
-            Ok(runtime) => panic!(
-                "relative allow_unix_sockets should fail, but resolve_runtime succeeded: {:?}",
-                runtime.http_addr
-            ),
-            Err(err) => err,
-        };
-        assert!(
-            err.to_string().contains("network.allow_unix_sockets[0]"),
-            "error should point at the invalid allow_unix_sockets entry: {err:#}"
-        );
-    }
-
-    #[test]
-    fn resolve_runtime_accepts_unix_style_absolute_allow_unix_sockets_entries() {
-        let cfg = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                allow_unix_sockets: vec!["/private/tmp/example.sock".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(
-            resolve_runtime(&cfg).is_ok(),
-            "unix-style absolute allow_unix_sockets entry should be accepted"
-        );
-    }
-}
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/http_proxy.rs b/registry/native/stubs/codex-network-proxy-wasi/src/http_proxy.rs
deleted file mode 100644
index 95f511c4d..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/http_proxy.rs
+++ /dev/null
@@ -1,26 +0,0 @@
-//! wasm32-wasip1 stub: the in-guest HTTP proxy server is inert on wasi (the VM kernel
-//! brokers network policy host-side). Signatures match the real crate; bodies no-op.
-use std::net::SocketAddr;
-use std::net::TcpListener as StdTcpListener;
-use std::sync::Arc;
-
-use anyhow::Result;
-
-use crate::network_policy::NetworkPolicyDecider;
-use crate::state::NetworkProxyState;
-
-pub async fn run_http_proxy(
-    _state: Arc<NetworkProxyState>,
-    _addr: SocketAddr,
-    _policy_decider: Option<Arc<dyn NetworkPolicyDecider>>,
-) -> Result<()> {
-    Ok(())
-}
-
-pub async fn run_http_proxy_with_std_listener(
-    _state: Arc<NetworkProxyState>,
-    _listener: StdTcpListener,
-    _policy_decider: Option<Arc<dyn NetworkPolicyDecider>>,
-) -> Result<()> {
-    Ok(())
-}
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/lib.rs b/registry/native/stubs/codex-network-proxy-wasi/src/lib.rs
deleted file mode 100644
index 1093a14aa..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/lib.rs
+++ /dev/null
@@ -1,51 +0,0 @@
-#![deny(clippy::print_stdout, clippy::print_stderr)]
-
-mod certs;
-mod config;
-mod http_proxy;
-mod mitm;
-mod network_policy;
-mod policy;
-mod proxy;
-mod reasons;
-mod responses;
-mod runtime;
-mod socks5;
-mod state;
-mod upstream;
-
-pub use config::NetworkMode;
-pub use config::NetworkProxyConfig;
-pub use config::host_and_port_from_network_addr;
-pub use network_policy::NetworkDecision;
-pub use network_policy::NetworkDecisionSource;
-pub use network_policy::NetworkPolicyDecider;
-pub use network_policy::NetworkPolicyDecision;
-pub use network_policy::NetworkPolicyRequest;
-pub use network_policy::NetworkPolicyRequestArgs;
-pub use network_policy::NetworkProtocol;
-pub use policy::normalize_host;
-pub use proxy::ALL_PROXY_ENV_KEYS;
-pub use proxy::ALLOW_LOCAL_BINDING_ENV_KEY;
-pub use proxy::Args;
-pub use proxy::DEFAULT_NO_PROXY_VALUE;
-pub use proxy::NO_PROXY_ENV_KEYS;
-pub use proxy::NetworkProxy;
-pub use proxy::NetworkProxyBuilder;
-pub use proxy::NetworkProxyHandle;
-pub use proxy::PROXY_URL_ENV_KEYS;
-pub use proxy::has_proxy_url_env_vars;
-pub use proxy::proxy_url_env_value;
-pub use runtime::BlockedRequest;
-pub use runtime::BlockedRequestArgs;
-pub use runtime::BlockedRequestObserver;
-pub use runtime::ConfigReloader;
-pub use runtime::ConfigState;
-pub use runtime::NetworkProxyState;
-pub use state::NetworkProxyAuditMetadata;
-pub use state::NetworkProxyConstraintError;
-pub use state::NetworkProxyConstraints;
-pub use state::PartialNetworkConfig;
-pub use state::PartialNetworkProxyConfig;
-pub use state::build_config_state;
-pub use state::validate_policy_against_constraints;
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/mitm.rs b/registry/native/stubs/codex-network-proxy-wasi/src/mitm.rs
deleted file mode 100644
index 91aeba266..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/mitm.rs
+++ /dev/null
@@ -1,11 +0,0 @@
-//! wasm32-wasip1 stub: MITM TLS interception is inert on wasi (host brokers TLS).
-use anyhow::Result;
-
-#[derive(Debug)]
-pub struct MitmState;
-
-impl MitmState {
-    pub(crate) fn new(_allow_upstream_proxy: bool) -> Result<Self> {
-        Ok(MitmState)
-    }
-}
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/network_policy.rs b/registry/native/stubs/codex-network-proxy-wasi/src/network_policy.rs
deleted file mode 100644
index e759e75c0..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/network_policy.rs
+++ /dev/null
@@ -1,890 +0,0 @@
-use crate::reasons::REASON_POLICY_DENIED;
-use crate::runtime::HostBlockDecision;
-use crate::runtime::HostBlockReason;
-use crate::state::NetworkProxyState;
-use anyhow::Result;
-use async_trait::async_trait;
-use chrono::SecondsFormat;
-use chrono::Utc;
-use std::future::Future;
-use std::sync::Arc;
-
-const AUDIT_TARGET: &str = "codex_otel.network_proxy";
-const POLICY_DECISION_EVENT_NAME: &str = "codex.network_proxy.policy_decision";
-const POLICY_SCOPE_DOMAIN: &str = "domain";
-const POLICY_SCOPE_NON_DOMAIN: &str = "non_domain";
-const POLICY_DECISION_ALLOW: &str = "allow";
-const POLICY_DECISION_DENY: &str = "deny";
-const POLICY_REASON_ALLOW: &str = "allow";
-const DEFAULT_METHOD: &str = "none";
-const DEFAULT_CLIENT_ADDRESS: &str = "unknown";
-
-#[derive(Clone, Copy, Debug, PartialEq, Eq)]
-pub enum NetworkProtocol {
-    Http,
-    HttpsConnect,
-    Socks5Tcp,
-    Socks5Udp,
-}
-
-impl NetworkProtocol {
-    pub const fn as_policy_protocol(self) -> &'static str {
-        match self {
-            Self::Http => "http",
-            Self::HttpsConnect => "https_connect",
-            Self::Socks5Tcp => "socks5_tcp",
-            Self::Socks5Udp => "socks5_udp",
-        }
-    }
-}
-
-#[derive(Clone, Copy, Debug, serde::Deserialize, serde::Serialize, PartialEq, Eq)]
-#[serde(rename_all = "lowercase")]
-pub enum NetworkPolicyDecision {
-    Deny,
-    Ask,
-}
-
-impl NetworkPolicyDecision {
-    pub const fn as_str(self) -> &'static str {
-        match self {
-            Self::Deny => "deny",
-            Self::Ask => "ask",
-        }
-    }
-}
-
-#[derive(Clone, Copy, Debug, serde::Deserialize, serde::Serialize, PartialEq, Eq)]
-#[serde(rename_all = "snake_case")]
-pub enum NetworkDecisionSource {
-    BaselinePolicy,
-    ModeGuard,
-    ProxyState,
-    Decider,
-}
-
-impl NetworkDecisionSource {
-    pub const fn as_str(self) -> &'static str {
-        match self {
-            Self::BaselinePolicy => "baseline_policy",
-            Self::ModeGuard => "mode_guard",
-            Self::ProxyState => "proxy_state",
-            Self::Decider => "decider",
-        }
-    }
-}
-
-#[derive(Clone, Debug)]
-pub struct NetworkPolicyRequest {
-    pub protocol: NetworkProtocol,
-    pub host: String,
-    pub port: u16,
-    pub client_addr: Option<String>,
-    pub method: Option<String>,
-    pub command: Option<String>,
-    pub exec_policy_hint: Option<String>,
-}
-
-pub struct NetworkPolicyRequestArgs {
-    pub protocol: NetworkProtocol,
-    pub host: String,
-    pub port: u16,
-    pub client_addr: Option<String>,
-    pub method: Option<String>,
-    pub command: Option<String>,
-    pub exec_policy_hint: Option<String>,
-}
-
-impl NetworkPolicyRequest {
-    pub fn new(args: NetworkPolicyRequestArgs) -> Self {
-        let NetworkPolicyRequestArgs {
-            protocol,
-            host,
-            port,
-            client_addr,
-            method,
-            command,
-            exec_policy_hint,
-        } = args;
-        Self {
-            protocol,
-            host,
-            port,
-            client_addr,
-            method,
-            command,
-            exec_policy_hint,
-        }
-    }
-}
-
-#[derive(Clone, Debug, PartialEq, Eq)]
-pub enum NetworkDecision {
-    Allow,
-    Deny {
-        reason: String,
-        source: NetworkDecisionSource,
-        decision: NetworkPolicyDecision,
-    },
-}
-
-impl NetworkDecision {
-    pub fn deny(reason: impl Into<String>) -> Self {
-        Self::deny_with_source(reason, NetworkDecisionSource::Decider)
-    }
-
-    pub fn ask(reason: impl Into<String>) -> Self {
-        Self::ask_with_source(reason, NetworkDecisionSource::Decider)
-    }
-
-    pub fn deny_with_source(reason: impl Into<String>, source: NetworkDecisionSource) -> Self {
-        let reason = reason.into();
-        let reason = if reason.is_empty() {
-            REASON_POLICY_DENIED.to_string()
-        } else {
-            reason
-        };
-        Self::Deny {
-            reason,
-            source,
-            decision: NetworkPolicyDecision::Deny,
-        }
-    }
-
-    pub fn ask_with_source(reason: impl Into<String>, source: NetworkDecisionSource) -> Self {
-        let reason = reason.into();
-        let reason = if reason.is_empty() {
-            REASON_POLICY_DENIED.to_string()
-        } else {
-            reason
-        };
-        Self::Deny {
-            reason,
-            source,
-            decision: NetworkPolicyDecision::Ask,
-        }
-    }
-}
-
-pub(crate) struct BlockDecisionAuditEventArgs<'a> {
-    pub source: NetworkDecisionSource,
-    pub reason: &'a str,
-    pub protocol: NetworkProtocol,
-    pub server_address: &'a str,
-    pub server_port: u16,
-    pub method: Option<&'a str>,
-    pub client_addr: Option<&'a str>,
-}
-
-pub(crate) fn emit_block_decision_audit_event(
-    state: &NetworkProxyState,
-    args: BlockDecisionAuditEventArgs<'_>,
-) {
-    emit_non_domain_policy_decision_audit_event(state, args, POLICY_DECISION_DENY);
-}
-
-pub(crate) fn emit_allow_decision_audit_event(
-    state: &NetworkProxyState,
-    args: BlockDecisionAuditEventArgs<'_>,
-) {
-    emit_non_domain_policy_decision_audit_event(state, args, POLICY_DECISION_ALLOW);
-}
-
-fn emit_non_domain_policy_decision_audit_event(
-    state: &NetworkProxyState,
-    args: BlockDecisionAuditEventArgs<'_>,
-    decision: &'static str,
-) {
-    emit_policy_audit_event(
-        state,
-        PolicyAuditEventArgs {
-            scope: POLICY_SCOPE_NON_DOMAIN,
-            decision,
-            source: args.source.as_str(),
-            reason: args.reason,
-            protocol: args.protocol,
-            server_address: args.server_address,
-            server_port: args.server_port,
-            method: args.method,
-            client_addr: args.client_addr,
-            policy_override: false,
-        },
-    );
-}
-
-struct PolicyAuditEventArgs<'a> {
-    scope: &'static str,
-    decision: &'a str,
-    source: &'a str,
-    reason: &'a str,
-    protocol: NetworkProtocol,
-    server_address: &'a str,
-    server_port: u16,
-    method: Option<&'a str>,
-    client_addr: Option<&'a str>,
-    policy_override: bool,
-}
-
-fn emit_policy_audit_event(state: &NetworkProxyState, args: PolicyAuditEventArgs<'_>) {
-    let metadata = state.audit_metadata();
-    tracing::event!(
-        target: AUDIT_TARGET,
-        tracing::Level::INFO,
-        event.name = POLICY_DECISION_EVENT_NAME,
-        event.timestamp = %audit_timestamp(),
-        conversation.id = metadata.conversation_id.as_deref(),
-        app.version = metadata.app_version.as_deref(),
-        auth_mode = metadata.auth_mode.as_deref(),
-        originator = metadata.originator.as_deref(),
-        user.account_id = metadata.user_account_id.as_deref(),
-        user.email = metadata.user_email.as_deref(),
-        terminal.type = metadata.terminal_type.as_deref(),
-        model = metadata.model.as_deref(),
-        slug = metadata.slug.as_deref(),
-        network.policy.scope = args.scope,
-        network.policy.decision = args.decision,
-        network.policy.source = args.source,
-        network.policy.reason = args.reason,
-        network.transport.protocol = args.protocol.as_policy_protocol(),
-        server.address = args.server_address,
-        server.port = args.server_port,
-        http.request.method = args.method.unwrap_or(DEFAULT_METHOD),
-        client.address = args.client_addr.unwrap_or(DEFAULT_CLIENT_ADDRESS),
-        network.policy.override = args.policy_override,
-    );
-}
-
-fn audit_timestamp() -> String {
-    Utc::now().to_rfc3339_opts(SecondsFormat::Millis, true)
-}
-
-/// Decide whether a network request should be allowed.
-///
-/// If `command` or `exec_policy_hint` is provided, callers can map exec-policy
-/// approvals to network access (e.g., allow all requests for commands matching
-/// approved prefixes like `curl *`).
-#[async_trait]
-pub trait NetworkPolicyDecider: Send + Sync + 'static {
-    async fn decide(&self, req: NetworkPolicyRequest) -> NetworkDecision;
-}
-
-#[async_trait]
-impl<D: NetworkPolicyDecider + ?Sized> NetworkPolicyDecider for Arc<D> {
-    async fn decide(&self, req: NetworkPolicyRequest) -> NetworkDecision {
-        (**self).decide(req).await
-    }
-}
-
-#[async_trait]
-impl<F, Fut> NetworkPolicyDecider for F
-where
-    F: Fn(NetworkPolicyRequest) -> Fut + Send + Sync + 'static,
-    Fut: Future<Output = NetworkDecision> + Send,
-{
-    async fn decide(&self, req: NetworkPolicyRequest) -> NetworkDecision {
-        (self)(req).await
-    }
-}
-
-pub(crate) async fn evaluate_host_policy(
-    state: &NetworkProxyState,
-    decider: Option<&Arc<dyn NetworkPolicyDecider>>,
-    request: &NetworkPolicyRequest,
-) -> Result<NetworkDecision> {
-    let host_decision = state.host_blocked(&request.host, request.port).await?;
-    let (decision, policy_override) = match host_decision {
-        HostBlockDecision::Allowed => (NetworkDecision::Allow, false),
-        HostBlockDecision::Blocked(HostBlockReason::NotAllowed) => {
-            if let Some(decider) = decider {
-                let decider_decision = map_decider_decision(decider.decide(request.clone()).await);
-                let policy_override = matches!(decider_decision, NetworkDecision::Allow);
-                (decider_decision, policy_override)
-            } else {
-                (
-                    NetworkDecision::deny_with_source(
-                        HostBlockReason::NotAllowed.as_str(),
-                        NetworkDecisionSource::BaselinePolicy,
-                    ),
-                    false,
-                )
-            }
-        }
-        HostBlockDecision::Blocked(reason) => (
-            NetworkDecision::deny_with_source(
-                reason.as_str(),
-                NetworkDecisionSource::BaselinePolicy,
-            ),
-            false,
-        ),
-    };
-
-    let (policy_decision, source, reason) = match &decision {
-        NetworkDecision::Allow => (
-            POLICY_DECISION_ALLOW,
-            if policy_override {
-                NetworkDecisionSource::Decider
-            } else {
-                NetworkDecisionSource::BaselinePolicy
-            },
-            if policy_override {
-                HostBlockReason::NotAllowed.as_str()
-            } else {
-                POLICY_REASON_ALLOW
-            },
-        ),
-        NetworkDecision::Deny {
-            reason,
-            source,
-            decision,
-        } => (decision.as_str(), *source, reason.as_str()),
-    };
-
-    emit_policy_audit_event(
-        state,
-        PolicyAuditEventArgs {
-            scope: POLICY_SCOPE_DOMAIN,
-            decision: policy_decision,
-            source: source.as_str(),
-            reason,
-            protocol: request.protocol,
-            server_address: request.host.as_str(),
-            server_port: request.port,
-            method: request.method.as_deref(),
-            client_addr: request.client_addr.as_deref(),
-            policy_override,
-        },
-    );
-
-    Ok(decision)
-}
-
-fn map_decider_decision(decision: NetworkDecision) -> NetworkDecision {
-    match decision {
-        NetworkDecision::Allow => NetworkDecision::Allow,
-        NetworkDecision::Deny {
-            reason, decision, ..
-        } => NetworkDecision::Deny {
-            reason,
-            source: NetworkDecisionSource::Decider,
-            decision,
-        },
-    }
-}
-
-#[cfg(test)]
-pub(crate) mod test_support {
-    pub(crate) const POLICY_DECISION_EVENT_NAME: &str = super::POLICY_DECISION_EVENT_NAME;
-
-    use std::collections::BTreeMap;
-    use std::fmt;
-    use std::future::Future;
-    use std::sync::Arc;
-    use std::sync::Mutex;
-    use std::sync::atomic::AtomicU64;
-    use std::sync::atomic::Ordering;
-    use tracing::Event;
-    use tracing::Id;
-    use tracing::Metadata;
-    use tracing::Subscriber;
-    use tracing::field::Field;
-    use tracing::field::Visit;
-    use tracing::span::Attributes;
-    use tracing::span::Record;
-    use tracing::subscriber::Interest;
-
-    #[derive(Clone, Debug, PartialEq, Eq)]
-    pub(crate) struct CapturedEvent {
-        pub target: String,
-        pub fields: BTreeMap<String, String>,
-    }
-
-    impl CapturedEvent {
-        pub fn field(&self, name: &str) -> Option<&str> {
-            self.fields.get(name).map(String::as_str)
-        }
-    }
-
-    #[derive(Clone, Default)]
-    struct EventCollector {
-        events: Arc<Mutex<Vec<CapturedEvent>>>,
-        next_span_id: Arc<AtomicU64>,
-    }
-
-    impl EventCollector {
-        fn events(&self) -> Vec<CapturedEvent> {
-            self.events
-                .lock()
-                .unwrap_or_else(std::sync::PoisonError::into_inner)
-                .clone()
-        }
-    }
-
-    impl Subscriber for EventCollector {
-        fn enabled(&self, _metadata: &Metadata<'_>) -> bool {
-            true
-        }
-
-        fn register_callsite(&self, _metadata: &'static Metadata<'static>) -> Interest {
-            Interest::always()
-        }
-
-        fn max_level_hint(&self) -> Option<tracing::level_filters::LevelFilter> {
-            Some(tracing::level_filters::LevelFilter::TRACE)
-        }
-
-        fn new_span(&self, _span: &Attributes<'_>) -> Id {
-            Id::from_u64(self.next_span_id.fetch_add(1, Ordering::Relaxed) + 1)
-        }
-
-        fn record(&self, _span: &Id, _values: &Record<'_>) {}
-
-        fn record_follows_from(&self, _span: &Id, _follows: &Id) {}
-
-        fn event(&self, event: &Event<'_>) {
-            let mut visitor = FieldVisitor::default();
-            event.record(&mut visitor);
-            self.events
-                .lock()
-                .unwrap_or_else(std::sync::PoisonError::into_inner)
-                .push(CapturedEvent {
-                    target: event.metadata().target().to_string(),
-                    fields: visitor.fields,
-                });
-        }
-
-        fn enter(&self, _span: &Id) {}
-
-        fn exit(&self, _span: &Id) {}
-    }
-
-    #[derive(Default)]
-    struct FieldVisitor {
-        fields: BTreeMap<String, String>,
-    }
-
-    impl FieldVisitor {
-        fn insert(&mut self, field: &Field, value: impl Into<String>) {
-            self.fields.insert(field.name().to_string(), value.into());
-        }
-    }
-
-    impl Visit for FieldVisitor {
-        fn record_str(&mut self, field: &Field, value: &str) {
-            self.insert(field, value);
-        }
-
-        fn record_bool(&mut self, field: &Field, value: bool) {
-            self.insert(field, value.to_string());
-        }
-
-        fn record_i64(&mut self, field: &Field, value: i64) {
-            self.insert(field, value.to_string());
-        }
-
-        fn record_u64(&mut self, field: &Field, value: u64) {
-            self.insert(field, value.to_string());
-        }
-
-        fn record_i128(&mut self, field: &Field, value: i128) {
-            self.insert(field, value.to_string());
-        }
-
-        fn record_u128(&mut self, field: &Field, value: u128) {
-            self.insert(field, value.to_string());
-        }
-
-        fn record_f64(&mut self, field: &Field, value: f64) {
-            self.insert(field, value.to_string());
-        }
-
-        fn record_error(&mut self, field: &Field, value: &(dyn std::error::Error + 'static)) {
-            self.insert(field, value.to_string());
-        }
-
-        fn record_debug(&mut self, field: &Field, value: &dyn fmt::Debug) {
-            self.insert(field, format!("{value:?}"));
-        }
-    }
-
-    pub(crate) async fn capture_events<F, Fut, T>(f: F) -> (T, Vec<CapturedEvent>)
-    where
-        F: FnOnce() -> Fut,
-        Fut: Future<Output = T>,
-    {
-        let collector = EventCollector::default();
-        let _guard = tracing::subscriber::set_default(collector.clone());
-        let output = f().await;
-        let events = collector.events();
-        (output, events)
-    }
-
-    pub(crate) fn find_event_by_name<'a>(
-        events: &'a [CapturedEvent],
-        event_name: &str,
-    ) -> Option<&'a CapturedEvent> {
-        events
-            .iter()
-            .find(|event| event.field("event.name") == Some(event_name))
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::test_support::capture_events;
-    use super::test_support::find_event_by_name;
-    use super::*;
-    use crate::config::NetworkMode;
-    use crate::config::NetworkProxyConfig;
-    use crate::config::NetworkProxySettings;
-    use crate::reasons::REASON_DENIED;
-    use crate::reasons::REASON_METHOD_NOT_ALLOWED;
-    use crate::reasons::REASON_NOT_ALLOWED;
-    use crate::reasons::REASON_NOT_ALLOWED_LOCAL;
-    use crate::runtime::ConfigReloader;
-    use crate::runtime::ConfigState;
-    use crate::runtime::NetworkProxyAuditMetadata;
-    use crate::state::NetworkProxyConstraints;
-    use crate::state::build_config_state;
-    use crate::state::network_proxy_state_for_policy;
-    use pretty_assertions::assert_eq;
-    use std::sync::Arc;
-    use std::sync::atomic::AtomicUsize;
-    use std::sync::atomic::Ordering;
-
-    const LEGACY_DOMAIN_POLICY_DECISION_EVENT_NAME: &str =
-        "codex.network_proxy.domain_policy_decision";
-    const LEGACY_BLOCK_DECISION_EVENT_NAME: &str = "codex.network_proxy.block_decision";
-
-    #[derive(Clone)]
-    struct StaticReloader {
-        state: ConfigState,
-    }
-
-    #[async_trait]
-    impl ConfigReloader for StaticReloader {
-        async fn maybe_reload(&self) -> anyhow::Result<Option<ConfigState>> {
-            Ok(None)
-        }
-
-        async fn reload_now(&self) -> anyhow::Result<ConfigState> {
-            Ok(self.state.clone())
-        }
-
-        fn source_label(&self) -> String {
-            "static test reloader".to_string()
-        }
-    }
-
-    fn state_with_metadata(metadata: NetworkProxyAuditMetadata) -> NetworkProxyState {
-        let network = NetworkProxySettings {
-            enabled: true,
-            mode: NetworkMode::Full,
-            ..NetworkProxySettings::default()
-        };
-        let config = NetworkProxyConfig { network };
-        let state = build_config_state(config, NetworkProxyConstraints::default()).unwrap();
-        let reloader = Arc::new(StaticReloader {
-            state: state.clone(),
-        });
-        NetworkProxyState::with_reloader_and_audit_metadata(state, reloader, metadata)
-    }
-
-    fn is_rfc3339_utc_millis(timestamp: &str) -> bool {
-        let bytes = timestamp.as_bytes();
-        if bytes.len() != 24 {
-            return false;
-        }
-        bytes[4] == b'-'
-            && bytes[7] == b'-'
-            && bytes[10] == b'T'
-            && bytes[13] == b':'
-            && bytes[16] == b':'
-            && bytes[19] == b'.'
-            && bytes[23] == b'Z'
-            && bytes.iter().enumerate().all(|(idx, value)| match idx {
-                4 | 7 | 10 | 13 | 16 | 19 | 23 => true,
-                _ => value.is_ascii_digit(),
-            })
-    }
-
-    #[tokio::test(flavor = "current_thread")]
-    async fn evaluate_host_policy_emits_domain_event_for_decider_allow_override() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings::default());
-        let calls = Arc::new(AtomicUsize::new(0));
-        let decider: Arc<dyn NetworkPolicyDecider> = Arc::new({
-            let calls = calls.clone();
-            move |_req| {
-                calls.fetch_add(1, Ordering::SeqCst);
-                // The default policy denies all; the decider is consulted for not_allowed
-                // requests and can override that decision.
-                async { NetworkDecision::Allow }
-            }
-        });
-
-        let request = NetworkPolicyRequest::new(NetworkPolicyRequestArgs {
-            protocol: NetworkProtocol::Http,
-            host: "example.com".to_string(),
-            port: 80,
-            client_addr: None,
-            method: None,
-            command: None,
-            exec_policy_hint: None,
-        });
-
-        let (decision, events) = capture_events(|| async {
-            evaluate_host_policy(&state, Some(&decider), &request)
-                .await
-                .unwrap()
-        })
-        .await;
-        assert_eq!(decision, NetworkDecision::Allow);
-        assert_eq!(calls.load(Ordering::SeqCst), 1);
-
-        let event = find_event_by_name(&events, POLICY_DECISION_EVENT_NAME)
-            .expect("expected policy decision audit event");
-        assert_eq!(event.target, AUDIT_TARGET);
-        assert!(event.target.starts_with("codex_otel."));
-        assert_eq!(
-            event.field("network.policy.scope"),
-            Some(POLICY_SCOPE_DOMAIN)
-        );
-        assert_eq!(event.field("network.policy.decision"), Some("allow"));
-        assert_eq!(event.field("network.policy.source"), Some("decider"));
-        assert_eq!(
-            event.field("network.policy.reason"),
-            Some(REASON_NOT_ALLOWED)
-        );
-        assert_eq!(event.field("network.transport.protocol"), Some("http"));
-        assert_eq!(event.field("server.address"), Some("example.com"));
-        assert_eq!(event.field("server.port"), Some("80"));
-        assert_eq!(event.field("http.request.method"), Some(DEFAULT_METHOD));
-        assert_eq!(event.field("client.address"), Some(DEFAULT_CLIENT_ADDRESS));
-        assert_eq!(event.field("network.policy.override"), Some("true"));
-        let timestamp = event
-            .field("event.timestamp")
-            .expect("event timestamp should be present");
-        assert!(is_rfc3339_utc_millis(timestamp));
-        assert_eq!(
-            find_event_by_name(&events, LEGACY_DOMAIN_POLICY_DECISION_EVENT_NAME),
-            None
-        );
-        assert_eq!(
-            find_event_by_name(&events, LEGACY_BLOCK_DECISION_EVENT_NAME),
-            None
-        );
-    }
-
-    #[tokio::test(flavor = "current_thread")]
-    async fn evaluate_host_policy_emits_domain_event_for_baseline_deny() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["example.com".to_string()],
-            denied_domains: vec!["blocked.com".to_string()],
-            ..NetworkProxySettings::default()
-        });
-        let request = NetworkPolicyRequest::new(NetworkPolicyRequestArgs {
-            protocol: NetworkProtocol::Http,
-            host: "blocked.com".to_string(),
-            port: 80,
-            client_addr: Some("127.0.0.1:1234".to_string()),
-            method: Some("GET".to_string()),
-            command: None,
-            exec_policy_hint: None,
-        });
-
-        let (decision, events) = capture_events(|| async {
-            evaluate_host_policy(&state, None, &request).await.unwrap()
-        })
-        .await;
-        assert_eq!(
-            decision,
-            NetworkDecision::Deny {
-                reason: REASON_DENIED.to_string(),
-                source: NetworkDecisionSource::BaselinePolicy,
-                decision: NetworkPolicyDecision::Deny,
-            }
-        );
-
-        let event = find_event_by_name(&events, POLICY_DECISION_EVENT_NAME)
-            .expect("expected policy decision audit event");
-        assert_eq!(event.field("network.policy.decision"), Some("deny"));
-        assert_eq!(
-            event.field("network.policy.source"),
-            Some("baseline_policy")
-        );
-        assert_eq!(event.field("network.policy.reason"), Some(REASON_DENIED));
-        assert_eq!(event.field("network.policy.override"), Some("false"));
-        assert_eq!(event.field("http.request.method"), Some("GET"));
-        assert_eq!(event.field("client.address"), Some("127.0.0.1:1234"));
-    }
-
-    #[tokio::test(flavor = "current_thread")]
-    async fn evaluate_host_policy_emits_domain_event_for_decider_ask() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings::default());
-        let decider: Arc<dyn NetworkPolicyDecider> =
-            Arc::new(|_req| async { NetworkDecision::ask(REASON_NOT_ALLOWED) });
-        let request = NetworkPolicyRequest::new(NetworkPolicyRequestArgs {
-            protocol: NetworkProtocol::Http,
-            host: "example.com".to_string(),
-            port: 80,
-            client_addr: None,
-            method: Some("GET".to_string()),
-            command: None,
-            exec_policy_hint: None,
-        });
-
-        let (decision, events) = capture_events(|| async {
-            evaluate_host_policy(&state, Some(&decider), &request)
-                .await
-                .unwrap()
-        })
-        .await;
-        assert_eq!(
-            decision,
-            NetworkDecision::Deny {
-                reason: REASON_NOT_ALLOWED.to_string(),
-                source: NetworkDecisionSource::Decider,
-                decision: NetworkPolicyDecision::Ask,
-            }
-        );
-
-        let event = find_event_by_name(&events, POLICY_DECISION_EVENT_NAME)
-            .expect("expected policy decision audit event");
-        assert_eq!(event.field("network.policy.decision"), Some("ask"));
-        assert_eq!(event.field("network.policy.source"), Some("decider"));
-        assert_eq!(
-            event.field("network.policy.reason"),
-            Some(REASON_NOT_ALLOWED)
-        );
-        assert_eq!(event.field("network.policy.override"), Some("false"));
-    }
-
-    #[tokio::test(flavor = "current_thread")]
-    async fn evaluate_host_policy_emits_metadata_fields() {
-        let metadata = NetworkProxyAuditMetadata {
-            conversation_id: Some("conversation-1".to_string()),
-            app_version: Some("1.2.3".to_string()),
-            user_account_id: Some("acct-1".to_string()),
-            auth_mode: Some("Chatgpt".to_string()),
-            originator: Some("codex_cli_rs".to_string()),
-            user_email: Some("test@example.com".to_string()),
-            terminal_type: Some("iTerm.app/3.6.5".to_string()),
-            model: Some("gpt-5.3-codex".to_string()),
-            slug: Some("gpt-5.3-codex".to_string()),
-        };
-        let state = state_with_metadata(metadata);
-        let request = NetworkPolicyRequest::new(NetworkPolicyRequestArgs {
-            protocol: NetworkProtocol::Http,
-            host: "example.com".to_string(),
-            port: 80,
-            client_addr: None,
-            method: Some("GET".to_string()),
-            command: None,
-            exec_policy_hint: None,
-        });
-
-        let (_decision, events) = capture_events(|| async {
-            evaluate_host_policy(&state, None, &request).await.unwrap()
-        })
-        .await;
-
-        let event = find_event_by_name(&events, POLICY_DECISION_EVENT_NAME)
-            .expect("expected policy decision audit event");
-        assert_eq!(event.field("conversation.id"), Some("conversation-1"));
-        assert_eq!(event.field("app.version"), Some("1.2.3"));
-        assert_eq!(event.field("auth_mode"), Some("Chatgpt"));
-        assert_eq!(event.field("originator"), Some("codex_cli_rs"));
-        assert_eq!(event.field("user.account_id"), Some("acct-1"));
-        assert_eq!(event.field("user.email"), Some("test@example.com"));
-        assert_eq!(event.field("terminal.type"), Some("iTerm.app/3.6.5"));
-        assert_eq!(event.field("model"), Some("gpt-5.3-codex"));
-        assert_eq!(event.field("slug"), Some("gpt-5.3-codex"));
-    }
-
-    #[tokio::test(flavor = "current_thread")]
-    async fn emit_block_decision_audit_event_emits_non_domain_event() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings::default());
-
-        let (_, events) = capture_events(|| async {
-            emit_block_decision_audit_event(
-                &state,
-                BlockDecisionAuditEventArgs {
-                    source: NetworkDecisionSource::ModeGuard,
-                    reason: REASON_METHOD_NOT_ALLOWED,
-                    protocol: NetworkProtocol::Http,
-                    server_address: "unix-socket",
-                    server_port: 0,
-                    method: Some("POST"),
-                    client_addr: None,
-                },
-            );
-        })
-        .await;
-
-        let event = find_event_by_name(&events, POLICY_DECISION_EVENT_NAME)
-            .expect("expected policy decision audit event");
-        assert_eq!(event.target, AUDIT_TARGET);
-        assert_eq!(
-            event.field("network.policy.scope"),
-            Some(POLICY_SCOPE_NON_DOMAIN)
-        );
-        assert_eq!(
-            event.field("network.policy.decision"),
-            Some(POLICY_DECISION_DENY)
-        );
-        assert_eq!(event.field("network.policy.source"), Some("mode_guard"));
-        assert_eq!(
-            event.field("network.policy.reason"),
-            Some(REASON_METHOD_NOT_ALLOWED)
-        );
-        assert_eq!(event.field("network.transport.protocol"), Some("http"));
-        assert_eq!(event.field("server.address"), Some("unix-socket"));
-        assert_eq!(event.field("server.port"), Some("0"));
-        assert_eq!(event.field("http.request.method"), Some("POST"));
-        assert_eq!(event.field("client.address"), Some(DEFAULT_CLIENT_ADDRESS));
-        assert_eq!(event.field("network.policy.override"), Some("false"));
-        assert_eq!(
-            find_event_by_name(&events, LEGACY_BLOCK_DECISION_EVENT_NAME),
-            None
-        );
-    }
-
-    #[tokio::test(flavor = "current_thread")]
-    async fn evaluate_host_policy_still_denies_not_allowed_local_without_decider_override() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["example.com".to_string()],
-            allow_local_binding: false,
-            ..NetworkProxySettings::default()
-        });
-        let request = NetworkPolicyRequest::new(NetworkPolicyRequestArgs {
-            protocol: NetworkProtocol::Http,
-            host: "127.0.0.1".to_string(),
-            port: 80,
-            client_addr: None,
-            method: Some("GET".to_string()),
-            command: None,
-            exec_policy_hint: None,
-        });
-
-        let decision = evaluate_host_policy(&state, None, &request).await.unwrap();
-        assert_eq!(
-            decision,
-            NetworkDecision::Deny {
-                reason: REASON_NOT_ALLOWED_LOCAL.to_string(),
-                source: NetworkDecisionSource::BaselinePolicy,
-                decision: NetworkPolicyDecision::Deny,
-            }
-        );
-    }
-
-    #[test]
-    fn ask_uses_decider_source_and_ask_decision() {
-        assert_eq!(
-            NetworkDecision::ask(REASON_NOT_ALLOWED),
-            NetworkDecision::Deny {
-                reason: REASON_NOT_ALLOWED.to_string(),
-                source: NetworkDecisionSource::Decider,
-                decision: NetworkPolicyDecision::Ask,
-            }
-        );
-    }
-}
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/policy.rs b/registry/native/stubs/codex-network-proxy-wasi/src/policy.rs
deleted file mode 100644
index 17927767f..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/policy.rs
+++ /dev/null
@@ -1,435 +0,0 @@
-#[cfg(test)]
-use crate::config::NetworkMode;
-use anyhow::Context;
-use anyhow::Result;
-use anyhow::ensure;
-use globset::GlobBuilder;
-use globset::GlobSet;
-use globset::GlobSetBuilder;
-use std::collections::HashSet;
-use std::net::IpAddr;
-use std::net::Ipv4Addr;
-use std::net::Ipv6Addr;
-use url::Host as UrlHost;
-
-/// A normalized host string for policy evaluation.
-#[derive(Clone, Debug, PartialEq, Eq, Hash)]
-pub struct Host(String);
-
-impl Host {
-    pub fn parse(input: &str) -> Result<Self> {
-        let normalized = normalize_host(input);
-        ensure!(!normalized.is_empty(), "host is empty");
-        Ok(Self(normalized))
-    }
-
-    pub fn as_str(&self) -> &str {
-        &self.0
-    }
-}
-
-/// Returns true if the host is a loopback hostname or IP literal.
-pub fn is_loopback_host(host: &Host) -> bool {
-    let host = host.as_str();
-    let host = host.split_once('%').map(|(ip, _)| ip).unwrap_or(host);
-    if host == "localhost" {
-        return true;
-    }
-    if let Ok(ip) = host.parse::<IpAddr>() {
-        return ip.is_loopback();
-    }
-    false
-}
-
-pub fn is_non_public_ip(ip: IpAddr) -> bool {
-    match ip {
-        IpAddr::V4(ip) => is_non_public_ipv4(ip),
-        IpAddr::V6(ip) => is_non_public_ipv6(ip),
-    }
-}
-
-fn is_non_public_ipv4(ip: Ipv4Addr) -> bool {
-    // Use the standard library classification helpers where possible; they encode the intent more
-    // clearly than hand-rolled range checks. Some non-public ranges (e.g., CGNAT and TEST-NET
-    // blocks) are not covered by stable stdlib helpers yet, so we fall back to CIDR checks.
-    ip.is_loopback()
-        || ip.is_private()
-        || ip.is_link_local()
-        || ip.is_unspecified()
-        || ip.is_multicast()
-        || ip.is_broadcast()
-        || ipv4_in_cidr(ip, [0, 0, 0, 0], /*prefix*/ 8) // "this network" (RFC 1122)
-        || ipv4_in_cidr(ip, [100, 64, 0, 0], /*prefix*/ 10) // CGNAT (RFC 6598)
-        || ipv4_in_cidr(ip, [192, 0, 0, 0], /*prefix*/ 24) // IETF Protocol Assignments (RFC 6890)
-        || ipv4_in_cidr(ip, [192, 0, 2, 0], /*prefix*/ 24) // TEST-NET-1 (RFC 5737)
-        || ipv4_in_cidr(ip, [198, 18, 0, 0], /*prefix*/ 15) // Benchmarking (RFC 2544)
-        || ipv4_in_cidr(ip, [198, 51, 100, 0], /*prefix*/ 24) // TEST-NET-2 (RFC 5737)
-        || ipv4_in_cidr(ip, [203, 0, 113, 0], /*prefix*/ 24) // TEST-NET-3 (RFC 5737)
-        || ipv4_in_cidr(ip, [240, 0, 0, 0], /*prefix*/ 4) // Reserved (RFC 6890)
-}
-
-fn ipv4_in_cidr(ip: Ipv4Addr, base: [u8; 4], prefix: u8) -> bool {
-    let ip = u32::from(ip);
-    let base = u32::from(Ipv4Addr::from(base));
-    let mask = if prefix == 0 {
-        0
-    } else {
-        u32::MAX << (32 - prefix)
-    };
-    (ip & mask) == (base & mask)
-}
-
-fn is_non_public_ipv6(ip: Ipv6Addr) -> bool {
-    if let Some(v4) = ip.to_ipv4() {
-        return is_non_public_ipv4(v4) || ip.is_loopback();
-    }
-    // Treat anything that isn't globally routable as "local" for SSRF prevention. In particular:
-    //  - `::1` loopback
-    //  - `fc00::/7` unique-local (RFC 4193)
-    //  - `fe80::/10` link-local
-    //  - `::` unspecified
-    //  - multicast ranges
-    ip.is_loopback()
-        || ip.is_unspecified()
-        || ip.is_multicast()
-        || ip.is_unique_local()
-        || ip.is_unicast_link_local()
-}
-
-/// Normalize host fragments for policy matching (trim whitespace, strip ports/brackets, lowercase).
-pub fn normalize_host(host: &str) -> String {
-    let host = host.trim();
-    if host.starts_with('[')
-        && let Some(end) = host.find(']')
-    {
-        return normalize_dns_host(&host[1..end]);
-    }
-
-    // The proxy stack should typically hand us a host without a port, but be
-    // defensive and strip `:port` when there is exactly one `:`.
-    if host.bytes().filter(|b| *b == b':').count() == 1 {
-        let host = host.split(':').next().unwrap_or_default();
-        return normalize_dns_host(host);
-    }
-
-    // Avoid mangling unbracketed IPv6 literals, but strip trailing dots so fully qualified domain
-    // names are treated the same as their dotless variants.
-    normalize_dns_host(host)
-}
-
-fn normalize_dns_host(host: &str) -> String {
-    let host = host.to_ascii_lowercase();
-    host.trim_end_matches('.').to_string()
-}
-
-fn normalize_pattern(pattern: &str) -> String {
-    let pattern = pattern.trim();
-    if pattern == "*" {
-        return "*".to_string();
-    }
-
-    let (prefix, remainder) = if let Some(domain) = pattern.strip_prefix("**.") {
-        ("**.", domain)
-    } else if let Some(domain) = pattern.strip_prefix("*.") {
-        ("*.", domain)
-    } else {
-        ("", pattern)
-    };
-
-    let remainder = normalize_host(remainder);
-    if prefix.is_empty() {
-        remainder
-    } else {
-        format!("{prefix}{remainder}")
-    }
-}
-
-pub(crate) fn is_global_wildcard_domain_pattern(pattern: &str) -> bool {
-    let normalized = normalize_pattern(pattern);
-    expand_domain_pattern(&normalized)
-        .iter()
-        .any(|candidate| candidate == "*")
-}
-
-pub(crate) fn compile_globset(patterns: &[String]) -> Result<GlobSet> {
-    let mut builder = GlobSetBuilder::new();
-    let mut seen = HashSet::new();
-    for pattern in patterns {
-        ensure!(
-            !is_global_wildcard_domain_pattern(pattern),
-            "unsupported global wildcard domain pattern \"*\"; use exact hosts or scoped wildcards like *.example.com or **.example.com"
-        );
-        let pattern = normalize_pattern(pattern);
-        // Supported domain patterns:
-        // - "example.com": match the exact host
-        // - "*.example.com": match any subdomain (not the apex)
-        // - "**.example.com": match the apex and any subdomain
-        for candidate in expand_domain_pattern(&pattern) {
-            if !seen.insert(candidate.clone()) {
-                continue;
-            }
-            let glob = GlobBuilder::new(&candidate)
-                .case_insensitive(true)
-                .build()
-                .with_context(|| format!("invalid glob pattern: {candidate}"))?;
-            builder.add(glob);
-        }
-    }
-    Ok(builder.build()?)
-}
-
-#[derive(Debug, Clone)]
-pub(crate) enum DomainPattern {
-    ApexAndSubdomains(String),
-    SubdomainsOnly(String),
-    Exact(String),
-}
-
-impl DomainPattern {
-    /// Parse a policy pattern for constraint comparisons.
-    ///
-    /// Validation of glob syntax happens when building the globset; here we only
-    /// decode the wildcard prefixes to keep constraint checks lightweight.
-    pub(crate) fn parse(input: &str) -> Self {
-        let input = input.trim();
-        if input.is_empty() {
-            return Self::Exact(String::new());
-        }
-        if let Some(domain) = input.strip_prefix("**.") {
-            Self::parse_domain(domain, Self::ApexAndSubdomains)
-        } else if let Some(domain) = input.strip_prefix("*.") {
-            Self::parse_domain(domain, Self::SubdomainsOnly)
-        } else {
-            Self::Exact(input.to_string())
-        }
-    }
-
-    /// Parse a policy pattern for constraint comparisons, validating domain parts with `url`.
-    pub(crate) fn parse_for_constraints(input: &str) -> Self {
-        let input = input.trim();
-        if input.is_empty() {
-            return Self::Exact(String::new());
-        }
-        if let Some(domain) = input.strip_prefix("**.") {
-            return Self::ApexAndSubdomains(parse_domain_for_constraints(domain));
-        }
-        if let Some(domain) = input.strip_prefix("*.") {
-            return Self::SubdomainsOnly(parse_domain_for_constraints(domain));
-        }
-        Self::Exact(parse_domain_for_constraints(input))
-    }
-
-    fn parse_domain(domain: &str, build: impl FnOnce(String) -> Self) -> Self {
-        let domain = domain.trim();
-        if domain.is_empty() {
-            return Self::Exact(String::new());
-        }
-        build(domain.to_string())
-    }
-
-    pub(crate) fn allows(&self, candidate: &DomainPattern) -> bool {
-        match self {
-            DomainPattern::Exact(domain) => match candidate {
-                DomainPattern::Exact(candidate) => domain_eq(candidate, domain),
-                _ => false,
-            },
-            DomainPattern::SubdomainsOnly(domain) => match candidate {
-                DomainPattern::Exact(candidate) => is_strict_subdomain(candidate, domain),
-                DomainPattern::SubdomainsOnly(candidate) => {
-                    is_subdomain_or_equal(candidate, domain)
-                }
-                DomainPattern::ApexAndSubdomains(candidate) => {
-                    is_strict_subdomain(candidate, domain)
-                }
-            },
-            DomainPattern::ApexAndSubdomains(domain) => match candidate {
-                DomainPattern::Exact(candidate) => is_subdomain_or_equal(candidate, domain),
-                DomainPattern::SubdomainsOnly(candidate) => {
-                    is_subdomain_or_equal(candidate, domain)
-                }
-                DomainPattern::ApexAndSubdomains(candidate) => {
-                    is_subdomain_or_equal(candidate, domain)
-                }
-            },
-        }
-    }
-}
-
-fn parse_domain_for_constraints(domain: &str) -> String {
-    let domain = domain.trim().trim_end_matches('.');
-    if domain.is_empty() {
-        return String::new();
-    }
-    let host = if domain.starts_with('[') && domain.ends_with(']') {
-        &domain[1..domain.len().saturating_sub(1)]
-    } else {
-        domain
-    };
-    if host.contains('*') || host.contains('?') || host.contains('%') {
-        return domain.to_string();
-    }
-    match UrlHost::parse(host) {
-        Ok(host) => host.to_string(),
-        Err(_) => String::new(),
-    }
-}
-
-fn expand_domain_pattern(pattern: &str) -> Vec<String> {
-    match DomainPattern::parse(pattern) {
-        DomainPattern::Exact(domain) => vec![domain],
-        DomainPattern::SubdomainsOnly(domain) => {
-            vec![format!("?*.{domain}")]
-        }
-        DomainPattern::ApexAndSubdomains(domain) => {
-            vec![domain.clone(), format!("?*.{domain}")]
-        }
-    }
-}
-
-fn normalize_domain(domain: &str) -> String {
-    domain.trim_end_matches('.').to_ascii_lowercase()
-}
-
-fn domain_eq(left: &str, right: &str) -> bool {
-    normalize_domain(left) == normalize_domain(right)
-}
-
-fn is_subdomain_or_equal(child: &str, parent: &str) -> bool {
-    let child = normalize_domain(child);
-    let parent = normalize_domain(parent);
-    if child == parent {
-        return true;
-    }
-    child.ends_with(&format!(".{parent}"))
-}
-
-fn is_strict_subdomain(child: &str, parent: &str) -> bool {
-    let child = normalize_domain(child);
-    let parent = normalize_domain(parent);
-    child != parent && child.ends_with(&format!(".{parent}"))
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    use pretty_assertions::assert_eq;
-
-    #[test]
-    fn method_allowed_full_allows_everything() {
-        assert!(NetworkMode::Full.allows_method("GET"));
-        assert!(NetworkMode::Full.allows_method("POST"));
-        assert!(NetworkMode::Full.allows_method("CONNECT"));
-    }
-
-    #[test]
-    fn method_allowed_limited_allows_only_safe_methods() {
-        assert!(NetworkMode::Limited.allows_method("GET"));
-        assert!(NetworkMode::Limited.allows_method("HEAD"));
-        assert!(NetworkMode::Limited.allows_method("OPTIONS"));
-        assert!(!NetworkMode::Limited.allows_method("POST"));
-        assert!(!NetworkMode::Limited.allows_method("CONNECT"));
-    }
-
-    #[test]
-    fn compile_globset_normalizes_trailing_dots() {
-        let set = compile_globset(&["Example.COM.".to_string()]).unwrap();
-
-        assert_eq!(true, set.is_match("example.com"));
-        assert_eq!(false, set.is_match("api.example.com"));
-    }
-
-    #[test]
-    fn compile_globset_normalizes_wildcards() {
-        let set = compile_globset(&["*.Example.COM.".to_string()]).unwrap();
-
-        assert_eq!(true, set.is_match("api.example.com"));
-        assert_eq!(false, set.is_match("example.com"));
-    }
-
-    #[test]
-    fn compile_globset_normalizes_apex_and_subdomains() {
-        let set = compile_globset(&["**.Example.COM.".to_string()]).unwrap();
-
-        assert_eq!(true, set.is_match("example.com"));
-        assert_eq!(true, set.is_match("api.example.com"));
-    }
-
-    #[test]
-    fn compile_globset_normalizes_bracketed_ipv6_literals() {
-        let set = compile_globset(&["[::1]".to_string()]).unwrap();
-
-        assert_eq!(true, set.is_match("::1"));
-    }
-
-    #[test]
-    fn is_loopback_host_handles_localhost_variants() {
-        assert!(is_loopback_host(&Host::parse("localhost").unwrap()));
-        assert!(is_loopback_host(&Host::parse("localhost.").unwrap()));
-        assert!(is_loopback_host(&Host::parse("LOCALHOST").unwrap()));
-        assert!(!is_loopback_host(&Host::parse("notlocalhost").unwrap()));
-    }
-
-    #[test]
-    fn is_loopback_host_handles_ip_literals() {
-        assert!(is_loopback_host(&Host::parse("127.0.0.1").unwrap()));
-        assert!(is_loopback_host(&Host::parse("::1").unwrap()));
-        assert!(!is_loopback_host(&Host::parse("1.2.3.4").unwrap()));
-    }
-
-    #[test]
-    fn is_non_public_ip_rejects_private_and_loopback_ranges() {
-        assert!(is_non_public_ip("127.0.0.1".parse().unwrap()));
-        assert!(is_non_public_ip("10.0.0.1".parse().unwrap()));
-        assert!(is_non_public_ip("192.168.0.1".parse().unwrap()));
-        assert!(is_non_public_ip("100.64.0.1".parse().unwrap()));
-        assert!(is_non_public_ip("192.0.0.1".parse().unwrap()));
-        assert!(is_non_public_ip("192.0.2.1".parse().unwrap()));
-        assert!(is_non_public_ip("198.18.0.1".parse().unwrap()));
-        assert!(is_non_public_ip("198.51.100.1".parse().unwrap()));
-        assert!(is_non_public_ip("203.0.113.1".parse().unwrap()));
-        assert!(is_non_public_ip("240.0.0.1".parse().unwrap()));
-        assert!(is_non_public_ip("0.1.2.3".parse().unwrap()));
-        assert!(!is_non_public_ip("8.8.8.8".parse().unwrap()));
-
-        assert!(is_non_public_ip("::ffff:127.0.0.1".parse().unwrap()));
-        assert!(is_non_public_ip("::ffff:10.0.0.1".parse().unwrap()));
-        assert!(!is_non_public_ip("::ffff:8.8.8.8".parse().unwrap()));
-
-        assert!(is_non_public_ip("::1".parse().unwrap()));
-        assert!(is_non_public_ip("fe80::1".parse().unwrap()));
-        assert!(is_non_public_ip("fc00::1".parse().unwrap()));
-    }
-
-    #[test]
-    fn normalize_host_lowercases_and_trims() {
-        assert_eq!(normalize_host("  ExAmPlE.CoM  "), "example.com");
-    }
-
-    #[test]
-    fn normalize_host_strips_port_for_host_port() {
-        assert_eq!(normalize_host("example.com:1234"), "example.com");
-    }
-
-    #[test]
-    fn normalize_host_preserves_unbracketed_ipv6() {
-        assert_eq!(normalize_host("2001:db8::1"), "2001:db8::1");
-    }
-
-    #[test]
-    fn normalize_host_strips_trailing_dot() {
-        assert_eq!(normalize_host("example.com."), "example.com");
-        assert_eq!(normalize_host("ExAmPlE.CoM."), "example.com");
-    }
-
-    #[test]
-    fn normalize_host_strips_trailing_dot_with_port() {
-        assert_eq!(normalize_host("example.com.:443"), "example.com");
-    }
-
-    #[test]
-    fn normalize_host_strips_brackets_for_ipv6() {
-        assert_eq!(normalize_host("[::1]"), "::1");
-        assert_eq!(normalize_host("[::1]:443"), "::1");
-    }
-}
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/proxy.rs b/registry/native/stubs/codex-network-proxy-wasi/src/proxy.rs
deleted file mode 100644
index 8f596f684..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/proxy.rs
+++ /dev/null
@@ -1,819 +0,0 @@
-use crate::config;
-use crate::http_proxy;
-use crate::network_policy::NetworkPolicyDecider;
-use crate::runtime::BlockedRequestObserver;
-use crate::runtime::unix_socket_permissions_supported;
-use crate::socks5;
-use crate::state::NetworkProxyState;
-use anyhow::Context;
-use anyhow::Result;
-use clap::Parser;
-use std::collections::HashMap;
-use std::net::SocketAddr;
-use std::net::TcpListener as StdTcpListener;
-use std::sync::Arc;
-use std::sync::Mutex;
-use tokio::task::JoinHandle;
-use tracing::warn;
-
-#[derive(Debug, Clone, Parser)]
-#[command(name = "codex-network-proxy", about = "Codex network sandbox proxy")]
-pub struct Args {}
-
-#[derive(Debug)]
-struct ReservedListeners {
-    http: Mutex<Option<StdTcpListener>>,
-    socks: Mutex<Option<StdTcpListener>>,
-}
-
-impl ReservedListeners {
-    fn new(http: StdTcpListener, socks: Option<StdTcpListener>) -> Self {
-        Self {
-            http: Mutex::new(Some(http)),
-            socks: Mutex::new(socks),
-        }
-    }
-
-    fn take_http(&self) -> Option<StdTcpListener> {
-        let mut guard = self
-            .http
-            .lock()
-            .unwrap_or_else(std::sync::PoisonError::into_inner);
-        guard.take()
-    }
-
-    fn take_socks(&self) -> Option<StdTcpListener> {
-        let mut guard = self
-            .socks
-            .lock()
-            .unwrap_or_else(std::sync::PoisonError::into_inner);
-        guard.take()
-    }
-}
-
-#[derive(Clone)]
-pub struct NetworkProxyBuilder {
-    state: Option<Arc<NetworkProxyState>>,
-    http_addr: Option<SocketAddr>,
-    socks_addr: Option<SocketAddr>,
-    managed_by_codex: bool,
-    policy_decider: Option<Arc<dyn NetworkPolicyDecider>>,
-    blocked_request_observer: Option<Arc<dyn BlockedRequestObserver>>,
-}
-
-impl Default for NetworkProxyBuilder {
-    fn default() -> Self {
-        Self {
-            state: None,
-            http_addr: None,
-            socks_addr: None,
-            managed_by_codex: true,
-            policy_decider: None,
-            blocked_request_observer: None,
-        }
-    }
-}
-
-impl NetworkProxyBuilder {
-    pub fn state(mut self, state: Arc<NetworkProxyState>) -> Self {
-        self.state = Some(state);
-        self
-    }
-
-    pub fn http_addr(mut self, addr: SocketAddr) -> Self {
-        self.http_addr = Some(addr);
-        self
-    }
-
-    pub fn socks_addr(mut self, addr: SocketAddr) -> Self {
-        self.socks_addr = Some(addr);
-        self
-    }
-
-    pub fn managed_by_codex(mut self, managed_by_codex: bool) -> Self {
-        self.managed_by_codex = managed_by_codex;
-        self
-    }
-
-    pub fn policy_decider<D>(mut self, decider: D) -> Self
-    where
-        D: NetworkPolicyDecider,
-    {
-        self.policy_decider = Some(Arc::new(decider));
-        self
-    }
-
-    pub fn policy_decider_arc(mut self, decider: Arc<dyn NetworkPolicyDecider>) -> Self {
-        self.policy_decider = Some(decider);
-        self
-    }
-
-    pub fn blocked_request_observer<O>(mut self, observer: O) -> Self
-    where
-        O: BlockedRequestObserver,
-    {
-        self.blocked_request_observer = Some(Arc::new(observer));
-        self
-    }
-
-    pub fn blocked_request_observer_arc(
-        mut self,
-        observer: Arc<dyn BlockedRequestObserver>,
-    ) -> Self {
-        self.blocked_request_observer = Some(observer);
-        self
-    }
-
-    pub async fn build(self) -> Result<NetworkProxy> {
-        let state = self.state.ok_or_else(|| {
-            anyhow::anyhow!(
-                "NetworkProxyBuilder requires a state; supply one via builder.state(...)"
-            )
-        })?;
-        state
-            .set_blocked_request_observer(self.blocked_request_observer.clone())
-            .await;
-        let current_cfg = state.current_cfg().await?;
-        let (requested_http_addr, requested_socks_addr, reserved_listeners) =
-            if self.managed_by_codex {
-                let runtime = config::resolve_runtime(&current_cfg)?;
-                let (http_listener, socks_listener) =
-                    reserve_loopback_ephemeral_listeners(current_cfg.network.enable_socks5)
-                        .context("reserve managed loopback proxy listeners")?;
-                let http_addr = http_listener
-                    .local_addr()
-                    .context("failed to read reserved HTTP proxy address")?;
-                let socks_addr = if let Some(socks_listener) = socks_listener.as_ref() {
-                    socks_listener
-                        .local_addr()
-                        .context("failed to read reserved SOCKS5 proxy address")?
-                } else {
-                    runtime.socks_addr
-                };
-                (
-                    http_addr,
-                    socks_addr,
-                    Some(Arc::new(ReservedListeners::new(
-                        http_listener,
-                        socks_listener,
-                    ))),
-                )
-            } else {
-                let runtime = config::resolve_runtime(&current_cfg)?;
-                (
-                    self.http_addr.unwrap_or(runtime.http_addr),
-                    self.socks_addr.unwrap_or(runtime.socks_addr),
-                    None,
-                )
-            };
-
-        // Reapply bind clamping for caller overrides so unix-socket proxying stays loopback-only.
-        let (http_addr, socks_addr) = config::clamp_bind_addrs(
-            requested_http_addr,
-            requested_socks_addr,
-            &current_cfg.network,
-        );
-
-        Ok(NetworkProxy {
-            state,
-            http_addr,
-            socks_addr,
-            socks_enabled: current_cfg.network.enable_socks5,
-            allow_local_binding: current_cfg.network.allow_local_binding,
-            allow_unix_sockets: current_cfg.network.allow_unix_sockets.clone(),
-            dangerously_allow_all_unix_sockets: current_cfg
-                .network
-                .dangerously_allow_all_unix_sockets,
-            reserved_listeners,
-            policy_decider: self.policy_decider,
-        })
-    }
-}
-
-fn reserve_loopback_ephemeral_listeners(
-    reserve_socks_listener: bool,
-) -> Result<(StdTcpListener, Option<StdTcpListener>)> {
-    let http_listener =
-        reserve_loopback_ephemeral_listener().context("reserve HTTP proxy listener")?;
-    let socks_listener = if reserve_socks_listener {
-        Some(reserve_loopback_ephemeral_listener().context("reserve SOCKS5 proxy listener")?)
-    } else {
-        None
-    };
-    Ok((http_listener, socks_listener))
-}
-
-fn reserve_loopback_ephemeral_listener() -> Result<StdTcpListener> {
-    StdTcpListener::bind(SocketAddr::from(([127, 0, 0, 1], 0)))
-        .context("bind loopback ephemeral port")
-}
-
-#[derive(Clone)]
-pub struct NetworkProxy {
-    state: Arc<NetworkProxyState>,
-    http_addr: SocketAddr,
-    socks_addr: SocketAddr,
-    socks_enabled: bool,
-    allow_local_binding: bool,
-    allow_unix_sockets: Vec<String>,
-    dangerously_allow_all_unix_sockets: bool,
-    reserved_listeners: Option<Arc<ReservedListeners>>,
-    policy_decider: Option<Arc<dyn NetworkPolicyDecider>>,
-}
-
-impl std::fmt::Debug for NetworkProxy {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        // Avoid logging internal state (config contents, derived globsets, etc.) which can be noisy
-        // and may contain sensitive paths.
-        f.debug_struct("NetworkProxy")
-            .field("http_addr", &self.http_addr)
-            .field("socks_addr", &self.socks_addr)
-            .finish_non_exhaustive()
-    }
-}
-
-impl PartialEq for NetworkProxy {
-    fn eq(&self, other: &Self) -> bool {
-        self.http_addr == other.http_addr
-            && self.socks_addr == other.socks_addr
-            && self.allow_local_binding == other.allow_local_binding
-    }
-}
-
-impl Eq for NetworkProxy {}
-
-pub const PROXY_URL_ENV_KEYS: &[&str] = &[
-    "HTTP_PROXY",
-    "HTTPS_PROXY",
-    "WS_PROXY",
-    "WSS_PROXY",
-    "ALL_PROXY",
-    "FTP_PROXY",
-    "YARN_HTTP_PROXY",
-    "YARN_HTTPS_PROXY",
-    "NPM_CONFIG_HTTP_PROXY",
-    "NPM_CONFIG_HTTPS_PROXY",
-    "NPM_CONFIG_PROXY",
-    "BUNDLE_HTTP_PROXY",
-    "BUNDLE_HTTPS_PROXY",
-    "PIP_PROXY",
-    "DOCKER_HTTP_PROXY",
-    "DOCKER_HTTPS_PROXY",
-];
-
-pub const ALL_PROXY_ENV_KEYS: &[&str] = &["ALL_PROXY", "all_proxy"];
-pub const ALLOW_LOCAL_BINDING_ENV_KEY: &str = "CODEX_NETWORK_ALLOW_LOCAL_BINDING";
-
-const FTP_PROXY_ENV_KEYS: &[&str] = &["FTP_PROXY", "ftp_proxy"];
-const WEBSOCKET_PROXY_ENV_KEYS: &[&str] = &["WS_PROXY", "WSS_PROXY", "ws_proxy", "wss_proxy"];
-
-pub const NO_PROXY_ENV_KEYS: &[&str] = &[
-    "NO_PROXY",
-    "no_proxy",
-    "npm_config_noproxy",
-    "NPM_CONFIG_NOPROXY",
-    "YARN_NO_PROXY",
-    "BUNDLE_NO_PROXY",
-];
-
-pub const DEFAULT_NO_PROXY_VALUE: &str = concat!(
-    "localhost,127.0.0.1,::1,",
-    "*.local,.local,",
-    "169.254.0.0/16,10.0.0.0/8,172.16.0.0/12,192.168.0.0/16"
-);
-
-pub fn proxy_url_env_value<'a>(
-    env: &'a HashMap<String, String>,
-    canonical_key: &str,
-) -> Option<&'a str> {
-    if let Some(value) = env.get(canonical_key) {
-        return Some(value.as_str());
-    }
-    let lower_key = canonical_key.to_ascii_lowercase();
-    env.get(lower_key.as_str()).map(String::as_str)
-}
-
-pub fn has_proxy_url_env_vars(env: &HashMap<String, String>) -> bool {
-    PROXY_URL_ENV_KEYS
-        .iter()
-        .any(|key| proxy_url_env_value(env, key).is_some_and(|value| !value.trim().is_empty()))
-}
-
-fn set_env_keys(env: &mut HashMap<String, String>, keys: &[&str], value: &str) {
-    for key in keys {
-        env.insert((*key).to_string(), value.to_string());
-    }
-}
-
-fn apply_proxy_env_overrides(
-    env: &mut HashMap<String, String>,
-    http_addr: SocketAddr,
-    socks_addr: SocketAddr,
-    socks_enabled: bool,
-    allow_local_binding: bool,
-) {
-    let http_proxy_url = format!("http://{http_addr}");
-    let socks_proxy_url = format!("socks5h://{socks_addr}");
-    env.insert(
-        ALLOW_LOCAL_BINDING_ENV_KEY.to_string(),
-        if allow_local_binding {
-            "1".to_string()
-        } else {
-            "0".to_string()
-        },
-    );
-
-    // HTTP-based clients are best served by explicit HTTP proxy URLs.
-    set_env_keys(
-        env,
-        &[
-            "HTTP_PROXY",
-            "HTTPS_PROXY",
-            "http_proxy",
-            "https_proxy",
-            "YARN_HTTP_PROXY",
-            "YARN_HTTPS_PROXY",
-            "npm_config_http_proxy",
-            "npm_config_https_proxy",
-            "npm_config_proxy",
-            "NPM_CONFIG_HTTP_PROXY",
-            "NPM_CONFIG_HTTPS_PROXY",
-            "NPM_CONFIG_PROXY",
-            "BUNDLE_HTTP_PROXY",
-            "BUNDLE_HTTPS_PROXY",
-            "PIP_PROXY",
-            "DOCKER_HTTP_PROXY",
-            "DOCKER_HTTPS_PROXY",
-        ],
-        &http_proxy_url,
-    );
-    // Some websocket clients look for dedicated WS/WSS proxy environment variables instead of
-    // HTTP(S)_PROXY. Keep them aligned with the managed HTTP proxy endpoint.
-    set_env_keys(env, WEBSOCKET_PROXY_ENV_KEYS, &http_proxy_url);
-
-    // Keep local/private targets direct so local IPC and metadata endpoints avoid the proxy.
-    set_env_keys(env, NO_PROXY_ENV_KEYS, DEFAULT_NO_PROXY_VALUE);
-
-    env.insert("ELECTRON_GET_USE_PROXY".to_string(), "true".to_string());
-
-    // Keep HTTP_PROXY/HTTPS_PROXY as HTTP endpoints. A lot of clients break if
-    // those vars contain SOCKS URLs. We only switch ALL_PROXY here.
-    //
-    if socks_enabled {
-        set_env_keys(env, ALL_PROXY_ENV_KEYS, &socks_proxy_url);
-        set_env_keys(env, FTP_PROXY_ENV_KEYS, &socks_proxy_url);
-    } else {
-        set_env_keys(env, ALL_PROXY_ENV_KEYS, &http_proxy_url);
-        set_env_keys(env, FTP_PROXY_ENV_KEYS, &http_proxy_url);
-    }
-
-    #[cfg(target_os = "macos")]
-    if socks_enabled {
-        // Preserve existing SSH wrappers (for example: Secretive/Teleport setups)
-        // and only provide a SOCKS ProxyCommand fallback when one is not present.
-        env.entry("GIT_SSH_COMMAND".to_string())
-            .or_insert_with(|| format!("ssh -o ProxyCommand='nc -X 5 -x {socks_addr} %h %p'"));
-    }
-}
-
-impl NetworkProxy {
-    pub fn builder() -> NetworkProxyBuilder {
-        NetworkProxyBuilder::default()
-    }
-
-    pub fn http_addr(&self) -> SocketAddr {
-        self.http_addr
-    }
-
-    pub fn socks_addr(&self) -> SocketAddr {
-        self.socks_addr
-    }
-
-    pub async fn current_cfg(&self) -> Result<config::NetworkProxyConfig> {
-        self.state.current_cfg().await
-    }
-
-    pub async fn add_allowed_domain(&self, host: &str) -> Result<()> {
-        self.state.add_allowed_domain(host).await
-    }
-
-    pub async fn add_denied_domain(&self, host: &str) -> Result<()> {
-        self.state.add_denied_domain(host).await
-    }
-
-    pub fn allow_local_binding(&self) -> bool {
-        self.allow_local_binding
-    }
-
-    pub fn allow_unix_sockets(&self) -> &[String] {
-        &self.allow_unix_sockets
-    }
-
-    pub fn dangerously_allow_all_unix_sockets(&self) -> bool {
-        self.dangerously_allow_all_unix_sockets
-    }
-
-    pub fn apply_to_env(&self, env: &mut HashMap<String, String>) {
-        // Enforce proxying for child processes. We intentionally override existing values so
-        // command-level environment cannot bypass the managed proxy endpoint.
-        apply_proxy_env_overrides(
-            env,
-            self.http_addr,
-            self.socks_addr,
-            self.socks_enabled,
-            self.allow_local_binding,
-        );
-    }
-
-    pub async fn run(&self) -> Result<NetworkProxyHandle> {
-        let current_cfg = self.state.current_cfg().await?;
-        if !current_cfg.network.enabled {
-            warn!("network.enabled is false; skipping proxy listeners");
-            return Ok(NetworkProxyHandle::noop());
-        }
-
-        if !unix_socket_permissions_supported() {
-            warn!(
-                "allowUnixSockets and dangerouslyAllowAllUnixSockets are macOS-only; requests will be rejected on this platform"
-            );
-        }
-
-        let reserved_listeners = self.reserved_listeners.as_ref();
-        let http_listener = reserved_listeners.and_then(|listeners| listeners.take_http());
-        let socks_listener = reserved_listeners.and_then(|listeners| listeners.take_socks());
-
-        let http_state = self.state.clone();
-        let http_decider = self.policy_decider.clone();
-        let http_addr = self.http_addr;
-        let http_task = tokio::spawn(async move {
-            match http_listener {
-                Some(listener) => {
-                    http_proxy::run_http_proxy_with_std_listener(http_state, listener, http_decider)
-                        .await
-                }
-                None => http_proxy::run_http_proxy(http_state, http_addr, http_decider).await,
-            }
-        });
-
-        let socks_task = if current_cfg.network.enable_socks5 {
-            let socks_state = self.state.clone();
-            let socks_decider = self.policy_decider.clone();
-            let socks_addr = self.socks_addr;
-            let enable_socks5_udp = current_cfg.network.enable_socks5_udp;
-            Some(tokio::spawn(async move {
-                match socks_listener {
-                    Some(listener) => {
-                        socks5::run_socks5_with_std_listener(
-                            socks_state,
-                            listener,
-                            socks_decider,
-                            enable_socks5_udp,
-                        )
-                        .await
-                    }
-                    None => {
-                        socks5::run_socks5(
-                            socks_state,
-                            socks_addr,
-                            socks_decider,
-                            enable_socks5_udp,
-                        )
-                        .await
-                    }
-                }
-            }))
-        } else {
-            None
-        };
-
-        Ok(NetworkProxyHandle {
-            http_task: Some(http_task),
-            socks_task,
-            completed: false,
-        })
-    }
-}
-
-pub struct NetworkProxyHandle {
-    http_task: Option<JoinHandle<Result<()>>>,
-    socks_task: Option<JoinHandle<Result<()>>>,
-    completed: bool,
-}
-
-impl NetworkProxyHandle {
-    fn noop() -> Self {
-        Self {
-            http_task: Some(tokio::spawn(async { Ok(()) })),
-            socks_task: None,
-            completed: true,
-        }
-    }
-
-    pub async fn wait(mut self) -> Result<()> {
-        let http_task = self.http_task.take().context("missing http proxy task")?;
-        let socks_task = self.socks_task.take();
-        let http_result = http_task.await;
-        let socks_result = match socks_task {
-            Some(task) => Some(task.await),
-            None => None,
-        };
-        self.completed = true;
-        http_result??;
-        if let Some(socks_result) = socks_result {
-            socks_result??;
-        }
-        Ok(())
-    }
-
-    pub async fn shutdown(mut self) -> Result<()> {
-        abort_tasks(self.http_task.take(), self.socks_task.take()).await;
-        self.completed = true;
-        Ok(())
-    }
-}
-
-async fn abort_task(task: Option<JoinHandle<Result<()>>>) {
-    if let Some(task) = task {
-        task.abort();
-        let _ = task.await;
-    }
-}
-
-async fn abort_tasks(
-    http_task: Option<JoinHandle<Result<()>>>,
-    socks_task: Option<JoinHandle<Result<()>>>,
-) {
-    abort_task(http_task).await;
-    abort_task(socks_task).await;
-}
-
-impl Drop for NetworkProxyHandle {
-    fn drop(&mut self) {
-        if self.completed {
-            return;
-        }
-        let http_task = self.http_task.take();
-        let socks_task = self.socks_task.take();
-        tokio::spawn(async move {
-            abort_tasks(http_task, socks_task).await;
-        });
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use crate::config::NetworkProxySettings;
-    use crate::state::network_proxy_state_for_policy;
-    use pretty_assertions::assert_eq;
-    use std::net::IpAddr;
-    use std::net::Ipv4Addr;
-
-    #[tokio::test]
-    async fn managed_proxy_builder_uses_loopback_ephemeral_ports() {
-        let state = Arc::new(network_proxy_state_for_policy(
-            NetworkProxySettings::default(),
-        ));
-        let proxy = match NetworkProxy::builder().state(state).build().await {
-            Ok(proxy) => proxy,
-            Err(err) => {
-                if err
-                    .chain()
-                    .any(|cause| cause.to_string().contains("Operation not permitted"))
-                {
-                    return;
-                }
-                panic!("failed to build managed proxy: {err:#}");
-            }
-        };
-
-        assert!(proxy.http_addr.ip().is_loopback());
-        assert!(proxy.socks_addr.ip().is_loopback());
-        assert_ne!(proxy.http_addr.port(), 0);
-        assert_ne!(proxy.socks_addr.port(), 0);
-    }
-
-    #[tokio::test]
-    async fn non_codex_managed_proxy_builder_uses_configured_ports() {
-        let settings = NetworkProxySettings {
-            proxy_url: "http://127.0.0.1:43128".to_string(),
-            socks_url: "http://127.0.0.1:48081".to_string(),
-            ..NetworkProxySettings::default()
-        };
-        let state = Arc::new(network_proxy_state_for_policy(settings));
-        let proxy = NetworkProxy::builder()
-            .state(state)
-            .managed_by_codex(false)
-            .build()
-            .await
-            .unwrap();
-
-        assert_eq!(
-            proxy.http_addr,
-            "127.0.0.1:43128".parse::<SocketAddr>().unwrap()
-        );
-        assert_eq!(
-            proxy.socks_addr,
-            "127.0.0.1:48081".parse::<SocketAddr>().unwrap()
-        );
-    }
-
-    #[tokio::test]
-    async fn managed_proxy_builder_does_not_reserve_socks_listener_when_disabled() {
-        let settings = NetworkProxySettings {
-            enable_socks5: false,
-            socks_url: "http://127.0.0.1:43129".to_string(),
-            ..NetworkProxySettings::default()
-        };
-        let state = Arc::new(network_proxy_state_for_policy(settings));
-        let proxy = match NetworkProxy::builder().state(state).build().await {
-            Ok(proxy) => proxy,
-            Err(err) => {
-                if err
-                    .chain()
-                    .any(|cause| cause.to_string().contains("Operation not permitted"))
-                {
-                    return;
-                }
-                panic!("failed to build managed proxy: {err:#}");
-            }
-        };
-
-        assert!(proxy.http_addr.ip().is_loopback());
-        assert_eq!(
-            proxy.socks_addr,
-            "127.0.0.1:43129".parse::<SocketAddr>().unwrap()
-        );
-        assert!(
-            proxy
-                .reserved_listeners
-                .as_ref()
-                .expect("managed builder should reserve listeners")
-                .take_socks()
-                .is_none()
-        );
-    }
-
-    #[test]
-    fn proxy_url_env_value_resolves_lowercase_aliases() {
-        let mut env = HashMap::new();
-        env.insert(
-            "http_proxy".to_string(),
-            "http://127.0.0.1:3128".to_string(),
-        );
-
-        assert_eq!(
-            proxy_url_env_value(&env, "HTTP_PROXY"),
-            Some("http://127.0.0.1:3128")
-        );
-    }
-
-    #[test]
-    fn has_proxy_url_env_vars_detects_lowercase_aliases() {
-        let mut env = HashMap::new();
-        env.insert(
-            "all_proxy".to_string(),
-            "socks5h://127.0.0.1:8081".to_string(),
-        );
-
-        assert_eq!(has_proxy_url_env_vars(&env), true);
-    }
-
-    #[test]
-    fn has_proxy_url_env_vars_detects_websocket_proxy_keys() {
-        let mut env = HashMap::new();
-        env.insert("wss_proxy".to_string(), "http://127.0.0.1:3128".to_string());
-
-        assert_eq!(has_proxy_url_env_vars(&env), true);
-    }
-
-    #[test]
-    fn apply_proxy_env_overrides_sets_common_tool_vars() {
-        let mut env = HashMap::new();
-        apply_proxy_env_overrides(
-            &mut env,
-            SocketAddr::new(IpAddr::V4(Ipv4Addr::LOCALHOST), 3128),
-            SocketAddr::new(IpAddr::V4(Ipv4Addr::LOCALHOST), 8081),
-            true,
-            false,
-        );
-
-        assert_eq!(
-            env.get("HTTP_PROXY"),
-            Some(&"http://127.0.0.1:3128".to_string())
-        );
-        assert_eq!(
-            env.get("WS_PROXY"),
-            Some(&"http://127.0.0.1:3128".to_string())
-        );
-        assert_eq!(
-            env.get("WSS_PROXY"),
-            Some(&"http://127.0.0.1:3128".to_string())
-        );
-        assert_eq!(
-            env.get("npm_config_proxy"),
-            Some(&"http://127.0.0.1:3128".to_string())
-        );
-        assert_eq!(
-            env.get("ALL_PROXY"),
-            Some(&"socks5h://127.0.0.1:8081".to_string())
-        );
-        assert_eq!(
-            env.get("FTP_PROXY"),
-            Some(&"socks5h://127.0.0.1:8081".to_string())
-        );
-        assert_eq!(
-            env.get("NO_PROXY"),
-            Some(&DEFAULT_NO_PROXY_VALUE.to_string())
-        );
-        assert_eq!(env.get(ALLOW_LOCAL_BINDING_ENV_KEY), Some(&"0".to_string()));
-        assert_eq!(env.get("ELECTRON_GET_USE_PROXY"), Some(&"true".to_string()));
-        #[cfg(target_os = "macos")]
-        assert_eq!(
-            env.get("GIT_SSH_COMMAND"),
-            Some(&"ssh -o ProxyCommand='nc -X 5 -x 127.0.0.1:8081 %h %p'".to_string())
-        );
-        #[cfg(not(target_os = "macos"))]
-        assert_eq!(env.get("GIT_SSH_COMMAND"), None);
-    }
-
-    #[test]
-    fn apply_proxy_env_overrides_uses_http_for_all_proxy_without_socks() {
-        let mut env = HashMap::new();
-        apply_proxy_env_overrides(
-            &mut env,
-            SocketAddr::new(IpAddr::V4(Ipv4Addr::LOCALHOST), 3128),
-            SocketAddr::new(IpAddr::V4(Ipv4Addr::LOCALHOST), 8081),
-            false,
-            true,
-        );
-
-        assert_eq!(
-            env.get("ALL_PROXY"),
-            Some(&"http://127.0.0.1:3128".to_string())
-        );
-        assert_eq!(env.get(ALLOW_LOCAL_BINDING_ENV_KEY), Some(&"1".to_string()));
-    }
-
-    #[test]
-    fn apply_proxy_env_overrides_uses_plain_http_proxy_url() {
-        let mut env = HashMap::new();
-        apply_proxy_env_overrides(
-            &mut env,
-            SocketAddr::new(IpAddr::V4(Ipv4Addr::LOCALHOST), 3128),
-            SocketAddr::new(IpAddr::V4(Ipv4Addr::LOCALHOST), 8081),
-            true,
-            false,
-        );
-
-        assert_eq!(
-            env.get("HTTP_PROXY"),
-            Some(&"http://127.0.0.1:3128".to_string())
-        );
-        assert_eq!(
-            env.get("HTTPS_PROXY"),
-            Some(&"http://127.0.0.1:3128".to_string())
-        );
-        assert_eq!(
-            env.get("WS_PROXY"),
-            Some(&"http://127.0.0.1:3128".to_string())
-        );
-        assert_eq!(
-            env.get("WSS_PROXY"),
-            Some(&"http://127.0.0.1:3128".to_string())
-        );
-        assert_eq!(
-            env.get("ALL_PROXY"),
-            Some(&"socks5h://127.0.0.1:8081".to_string())
-        );
-        #[cfg(target_os = "macos")]
-        assert_eq!(
-            env.get("GIT_SSH_COMMAND"),
-            Some(&"ssh -o ProxyCommand='nc -X 5 -x 127.0.0.1:8081 %h %p'".to_string())
-        );
-        #[cfg(not(target_os = "macos"))]
-        assert_eq!(env.get("GIT_SSH_COMMAND"), None);
-    }
-
-    #[cfg(target_os = "macos")]
-    #[test]
-    fn apply_proxy_env_overrides_preserves_existing_git_ssh_command() {
-        let mut env = HashMap::new();
-        env.insert(
-            "GIT_SSH_COMMAND".to_string(),
-            "ssh -o ProxyCommand='tsh proxy ssh --cluster=dev %r@%h:%p'".to_string(),
-        );
-        apply_proxy_env_overrides(
-            &mut env,
-            SocketAddr::new(IpAddr::V4(Ipv4Addr::LOCALHOST), 3128),
-            SocketAddr::new(IpAddr::V4(Ipv4Addr::LOCALHOST), 8081),
-            true,
-            false,
-        );
-
-        assert_eq!(
-            env.get("GIT_SSH_COMMAND"),
-            Some(&"ssh -o ProxyCommand='tsh proxy ssh --cluster=dev %r@%h:%p'".to_string())
-        );
-    }
-}
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/reasons.rs b/registry/native/stubs/codex-network-proxy-wasi/src/reasons.rs
deleted file mode 100644
index b844eadf3..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/reasons.rs
+++ /dev/null
@@ -1,8 +0,0 @@
-pub(crate) const REASON_DENIED: &str = "denied";
-pub(crate) const REASON_METHOD_NOT_ALLOWED: &str = "method_not_allowed";
-pub(crate) const REASON_MITM_REQUIRED: &str = "mitm_required";
-pub(crate) const REASON_NOT_ALLOWED: &str = "not_allowed";
-pub(crate) const REASON_NOT_ALLOWED_LOCAL: &str = "not_allowed_local";
-pub(crate) const REASON_POLICY_DENIED: &str = "policy_denied";
-pub(crate) const REASON_PROXY_DISABLED: &str = "proxy_disabled";
-pub(crate) const REASON_UNIX_SOCKET_UNSUPPORTED: &str = "unix_socket_unsupported";
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/responses.rs b/registry/native/stubs/codex-network-proxy-wasi/src/responses.rs
deleted file mode 100644
index 2df096e24..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/responses.rs
+++ /dev/null
@@ -1 +0,0 @@
-//! wasm32-wasip1 stub (inert on wasi).
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/runtime.rs b/registry/native/stubs/codex-network-proxy-wasi/src/runtime.rs
deleted file mode 100644
index b634a8630..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/runtime.rs
+++ /dev/null
@@ -1,1671 +0,0 @@
-use crate::config::NetworkMode;
-use crate::config::NetworkProxyConfig;
-use crate::config::ValidatedUnixSocketPath;
-use crate::mitm::MitmState;
-use crate::policy::Host;
-use crate::policy::is_loopback_host;
-use crate::policy::is_non_public_ip;
-use crate::policy::normalize_host;
-use crate::reasons::REASON_DENIED;
-use crate::reasons::REASON_NOT_ALLOWED;
-use crate::reasons::REASON_NOT_ALLOWED_LOCAL;
-use crate::state::NetworkProxyConstraintError;
-use crate::state::NetworkProxyConstraints;
-use crate::state::build_config_state;
-use crate::state::validate_policy_against_constraints;
-use anyhow::Context;
-use anyhow::Result;
-use async_trait::async_trait;
-use codex_utils_absolute_path::AbsolutePathBuf;
-use globset::GlobSet;
-use serde::Serialize;
-use std::collections::HashSet;
-use std::collections::VecDeque;
-use std::future::Future;
-use std::net::IpAddr;
-use std::path::Path;
-use std::sync::Arc;
-use std::time::Duration;
-use time::OffsetDateTime;
-use tokio::net::lookup_host;
-use tokio::sync::RwLock;
-use tokio::time::timeout;
-use tracing::debug;
-use tracing::info;
-use tracing::warn;
-
-const MAX_BLOCKED_EVENTS: usize = 200;
-const DNS_LOOKUP_TIMEOUT: Duration = Duration::from_secs(2);
-const NETWORK_POLICY_VIOLATION_PREFIX: &str = "CODEX_NETWORK_POLICY_VIOLATION";
-
-#[derive(Clone, Debug, Default, PartialEq, Eq)]
-pub struct NetworkProxyAuditMetadata {
-    pub conversation_id: Option<String>,
-    pub app_version: Option<String>,
-    pub user_account_id: Option<String>,
-    pub auth_mode: Option<String>,
-    pub originator: Option<String>,
-    pub user_email: Option<String>,
-    pub terminal_type: Option<String>,
-    pub model: Option<String>,
-    pub slug: Option<String>,
-}
-
-#[derive(Clone, Copy, Debug, PartialEq, Eq)]
-pub enum HostBlockReason {
-    Denied,
-    NotAllowed,
-    NotAllowedLocal,
-}
-
-impl HostBlockReason {
-    pub const fn as_str(self) -> &'static str {
-        match self {
-            Self::Denied => REASON_DENIED,
-            Self::NotAllowed => REASON_NOT_ALLOWED,
-            Self::NotAllowedLocal => REASON_NOT_ALLOWED_LOCAL,
-        }
-    }
-}
-
-impl std::fmt::Display for HostBlockReason {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        f.write_str(self.as_str())
-    }
-}
-
-#[derive(Clone, Copy, Debug, PartialEq, Eq)]
-pub enum HostBlockDecision {
-    Allowed,
-    Blocked(HostBlockReason),
-}
-
-#[derive(Clone, Debug, Serialize)]
-pub struct BlockedRequest {
-    pub host: String,
-    pub reason: String,
-    pub client: Option<String>,
-    pub method: Option<String>,
-    pub mode: Option<NetworkMode>,
-    pub protocol: String,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub decision: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub source: Option<String>,
-    #[serde(skip_serializing_if = "Option::is_none")]
-    pub port: Option<u16>,
-    pub timestamp: i64,
-}
-
-pub struct BlockedRequestArgs {
-    pub host: String,
-    pub reason: String,
-    pub client: Option<String>,
-    pub method: Option<String>,
-    pub mode: Option<NetworkMode>,
-    pub protocol: String,
-    pub decision: Option<String>,
-    pub source: Option<String>,
-    pub port: Option<u16>,
-}
-
-impl BlockedRequest {
-    pub fn new(args: BlockedRequestArgs) -> Self {
-        let BlockedRequestArgs {
-            host,
-            reason,
-            client,
-            method,
-            mode,
-            protocol,
-            decision,
-            source,
-            port,
-        } = args;
-        Self {
-            host,
-            reason,
-            client,
-            method,
-            mode,
-            protocol,
-            decision,
-            source,
-            port,
-            timestamp: unix_timestamp(),
-        }
-    }
-}
-
-fn blocked_request_violation_log_line(entry: &BlockedRequest) -> String {
-    match serde_json::to_string(entry) {
-        Ok(json) => format!("{NETWORK_POLICY_VIOLATION_PREFIX} {json}"),
-        Err(err) => {
-            debug!("failed to serialize blocked request for violation log: {err}");
-            format!(
-                "{NETWORK_POLICY_VIOLATION_PREFIX} host={} reason={}",
-                entry.host, entry.reason
-            )
-        }
-    }
-}
-
-#[derive(Clone)]
-pub struct ConfigState {
-    pub config: NetworkProxyConfig,
-    pub allow_set: GlobSet,
-    pub deny_set: GlobSet,
-    pub mitm: Option<Arc<MitmState>>,
-    pub constraints: NetworkProxyConstraints,
-    pub blocked: VecDeque<BlockedRequest>,
-    pub blocked_total: u64,
-}
-
-#[async_trait]
-pub trait ConfigReloader: Send + Sync {
-    /// Human-readable description of where config is loaded from, for logs.
-    fn source_label(&self) -> String;
-
-    /// Return a freshly loaded state if a reload is needed; otherwise, return `None`.
-    async fn maybe_reload(&self) -> Result<Option<ConfigState>>;
-
-    /// Force a reload, regardless of whether a change was detected.
-    async fn reload_now(&self) -> Result<ConfigState>;
-}
-
-#[async_trait]
-pub trait BlockedRequestObserver: Send + Sync + 'static {
-    async fn on_blocked_request(&self, request: BlockedRequest);
-}
-
-#[async_trait]
-impl<O: BlockedRequestObserver + ?Sized> BlockedRequestObserver for Arc<O> {
-    async fn on_blocked_request(&self, request: BlockedRequest) {
-        (**self).on_blocked_request(request).await
-    }
-}
-
-#[async_trait]
-impl<F, Fut> BlockedRequestObserver for F
-where
-    F: Fn(BlockedRequest) -> Fut + Send + Sync + 'static,
-    Fut: Future<Output = ()> + Send,
-{
-    async fn on_blocked_request(&self, request: BlockedRequest) {
-        (self)(request).await
-    }
-}
-
-pub struct NetworkProxyState {
-    state: Arc<RwLock<ConfigState>>,
-    reloader: Arc<dyn ConfigReloader>,
-    blocked_request_observer: Arc<RwLock<Option<Arc<dyn BlockedRequestObserver>>>>,
-    audit_metadata: NetworkProxyAuditMetadata,
-}
-
-impl std::fmt::Debug for NetworkProxyState {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        // Avoid logging internal state (config contents, derived globsets, etc.) which can be noisy
-        // and may contain sensitive paths.
-        f.debug_struct("NetworkProxyState").finish_non_exhaustive()
-    }
-}
-
-impl Clone for NetworkProxyState {
-    fn clone(&self) -> Self {
-        Self {
-            state: self.state.clone(),
-            reloader: self.reloader.clone(),
-            blocked_request_observer: self.blocked_request_observer.clone(),
-            audit_metadata: self.audit_metadata.clone(),
-        }
-    }
-}
-
-impl NetworkProxyState {
-    pub fn with_reloader(state: ConfigState, reloader: Arc<dyn ConfigReloader>) -> Self {
-        Self::with_reloader_and_audit_metadata(
-            state,
-            reloader,
-            NetworkProxyAuditMetadata::default(),
-        )
-    }
-
-    pub fn with_reloader_and_blocked_observer(
-        state: ConfigState,
-        reloader: Arc<dyn ConfigReloader>,
-        blocked_request_observer: Option<Arc<dyn BlockedRequestObserver>>,
-    ) -> Self {
-        Self::with_reloader_and_audit_metadata_and_blocked_observer(
-            state,
-            reloader,
-            NetworkProxyAuditMetadata::default(),
-            blocked_request_observer,
-        )
-    }
-
-    pub fn with_reloader_and_audit_metadata(
-        state: ConfigState,
-        reloader: Arc<dyn ConfigReloader>,
-        audit_metadata: NetworkProxyAuditMetadata,
-    ) -> Self {
-        Self::with_reloader_and_audit_metadata_and_blocked_observer(
-            state,
-            reloader,
-            audit_metadata,
-            /*blocked_request_observer*/ None,
-        )
-    }
-
-    pub fn with_reloader_and_audit_metadata_and_blocked_observer(
-        state: ConfigState,
-        reloader: Arc<dyn ConfigReloader>,
-        audit_metadata: NetworkProxyAuditMetadata,
-        blocked_request_observer: Option<Arc<dyn BlockedRequestObserver>>,
-    ) -> Self {
-        Self {
-            state: Arc::new(RwLock::new(state)),
-            reloader,
-            blocked_request_observer: Arc::new(RwLock::new(blocked_request_observer)),
-            audit_metadata,
-        }
-    }
-
-    pub async fn set_blocked_request_observer(
-        &self,
-        blocked_request_observer: Option<Arc<dyn BlockedRequestObserver>>,
-    ) {
-        let mut observer = self.blocked_request_observer.write().await;
-        *observer = blocked_request_observer;
-    }
-
-    pub fn audit_metadata(&self) -> &NetworkProxyAuditMetadata {
-        &self.audit_metadata
-    }
-
-    pub async fn current_cfg(&self) -> Result<NetworkProxyConfig> {
-        // Callers treat `NetworkProxyState` as a live view of policy. We reload-on-demand so edits to
-        // `config.toml` (including Codex-managed writes) take effect without a restart.
-        self.reload_if_needed().await?;
-        let guard = self.state.read().await;
-        Ok(guard.config.clone())
-    }
-
-    pub async fn current_patterns(&self) -> Result<(Vec<String>, Vec<String>)> {
-        self.reload_if_needed().await?;
-        let guard = self.state.read().await;
-        Ok((
-            guard.config.network.allowed_domains.clone(),
-            guard.config.network.denied_domains.clone(),
-        ))
-    }
-
-    pub async fn enabled(&self) -> Result<bool> {
-        self.reload_if_needed().await?;
-        let guard = self.state.read().await;
-        Ok(guard.config.network.enabled)
-    }
-
-    pub async fn force_reload(&self) -> Result<()> {
-        let previous_cfg = {
-            let guard = self.state.read().await;
-            guard.config.clone()
-        };
-
-        match self.reloader.reload_now().await {
-            Ok(mut new_state) => {
-                // Policy changes are operationally sensitive; logging diffs makes changes traceable
-                // without needing to dump full config blobs (which can include unrelated settings).
-                log_policy_changes(&previous_cfg, &new_state.config);
-                {
-                    let mut guard = self.state.write().await;
-                    new_state.blocked = guard.blocked.clone();
-                    *guard = new_state;
-                }
-                let source = self.reloader.source_label();
-                info!("reloaded config from {source}");
-                Ok(())
-            }
-            Err(err) => {
-                let source = self.reloader.source_label();
-                warn!("failed to reload config from {source}: {err}; keeping previous config");
-                Err(err)
-            }
-        }
-    }
-
-    pub async fn host_blocked(&self, host: &str, port: u16) -> Result<HostBlockDecision> {
-        self.reload_if_needed().await?;
-        let host = match Host::parse(host) {
-            Ok(host) => host,
-            Err(_) => return Ok(HostBlockDecision::Blocked(HostBlockReason::NotAllowed)),
-        };
-        let (deny_set, allow_set, allow_local_binding, allowed_domains_empty, allowed_domains) = {
-            let guard = self.state.read().await;
-            (
-                guard.deny_set.clone(),
-                guard.allow_set.clone(),
-                guard.config.network.allow_local_binding,
-                guard.config.network.allowed_domains.is_empty(),
-                guard.config.network.allowed_domains.clone(),
-            )
-        };
-
-        let host_str = host.as_str();
-
-        // Decision order matters:
-        //  1) explicit deny always wins
-        //  2) local/private networking is opt-in (defense-in-depth)
-        //  3) allowlist is enforced when configured
-        if deny_set.is_match(host_str) {
-            return Ok(HostBlockDecision::Blocked(HostBlockReason::Denied));
-        }
-
-        let is_allowlisted = allow_set.is_match(host_str);
-        if !allow_local_binding {
-            // If the intent is "prevent access to local/internal networks", we must not rely solely
-            // on string checks like `localhost` / `127.0.0.1`. Attackers can use DNS rebinding or
-            // public suffix services that map hostnames onto private IPs.
-            //
-            // We therefore do a best-effort DNS + IP classification check before allowing the
-            // request. Explicit local/loopback literals are allowed only when explicitly
-            // allowlisted; hostnames that resolve to local/private IPs are blocked even if
-            // allowlisted.
-            let local_literal = {
-                let host_no_scope = host_str
-                    .split_once('%')
-                    .map(|(ip, _)| ip)
-                    .unwrap_or(host_str);
-                if is_loopback_host(&host) {
-                    true
-                } else if let Ok(ip) = host_no_scope.parse::<IpAddr>() {
-                    is_non_public_ip(ip)
-                } else {
-                    false
-                }
-            };
-
-            if local_literal {
-                if !is_explicit_local_allowlisted(&allowed_domains, &host) {
-                    return Ok(HostBlockDecision::Blocked(HostBlockReason::NotAllowedLocal));
-                }
-            } else if host_resolves_to_non_public_ip(host_str, port).await {
-                return Ok(HostBlockDecision::Blocked(HostBlockReason::NotAllowedLocal));
-            }
-        }
-
-        if allowed_domains_empty || !is_allowlisted {
-            Ok(HostBlockDecision::Blocked(HostBlockReason::NotAllowed))
-        } else {
-            Ok(HostBlockDecision::Allowed)
-        }
-    }
-
-    pub async fn record_blocked(&self, entry: BlockedRequest) -> Result<()> {
-        self.reload_if_needed().await?;
-        let blocked_for_observer = entry.clone();
-        let blocked_request_observer = self.blocked_request_observer.read().await.clone();
-        let violation_line = blocked_request_violation_log_line(&entry);
-        let mut guard = self.state.write().await;
-        let host = entry.host.clone();
-        let reason = entry.reason.clone();
-        let decision = entry.decision.clone();
-        let source = entry.source.clone();
-        let protocol = entry.protocol.clone();
-        let port = entry.port;
-        guard.blocked.push_back(entry);
-        guard.blocked_total = guard.blocked_total.saturating_add(1);
-        let total = guard.blocked_total;
-        while guard.blocked.len() > MAX_BLOCKED_EVENTS {
-            guard.blocked.pop_front();
-        }
-        debug!(
-            "recorded blocked request telemetry (total={}, host={}, reason={}, decision={:?}, source={:?}, protocol={}, port={:?}, buffered={})",
-            total,
-            host,
-            reason,
-            decision,
-            source,
-            protocol,
-            port,
-            guard.blocked.len()
-        );
-        debug!("{violation_line}");
-        drop(guard);
-
-        if let Some(observer) = blocked_request_observer {
-            observer.on_blocked_request(blocked_for_observer).await;
-        }
-        Ok(())
-    }
-
-    /// Returns a snapshot of buffered blocked-request entries without consuming
-    /// them.
-    pub async fn blocked_snapshot(&self) -> Result<Vec<BlockedRequest>> {
-        self.reload_if_needed().await?;
-        let guard = self.state.read().await;
-        Ok(guard.blocked.iter().cloned().collect())
-    }
-
-    /// Drain and return the buffered blocked-request entries in FIFO order.
-    pub async fn drain_blocked(&self) -> Result<Vec<BlockedRequest>> {
-        self.reload_if_needed().await?;
-        let blocked = {
-            let mut guard = self.state.write().await;
-            std::mem::take(&mut guard.blocked)
-        };
-        Ok(blocked.into_iter().collect())
-    }
-
-    pub async fn is_unix_socket_allowed(&self, path: &str) -> Result<bool> {
-        self.reload_if_needed().await?;
-        if !unix_socket_permissions_supported() {
-            return Ok(false);
-        }
-
-        // We only support absolute unix socket paths (a relative path would be ambiguous with
-        // respect to the proxy process's CWD and can lead to confusing allowlist behavior).
-        let requested_path = Path::new(path);
-        if !requested_path.is_absolute() {
-            return Ok(false);
-        }
-
-        let guard = self.state.read().await;
-        if guard.config.network.dangerously_allow_all_unix_sockets {
-            return Ok(true);
-        }
-
-        // Normalize the path while keeping the absolute-path requirement explicit.
-        let requested_abs = match AbsolutePathBuf::from_absolute_path(requested_path) {
-            Ok(path) => path,
-            Err(_) => return Ok(false),
-        };
-        let requested_canonical = std::fs::canonicalize(requested_abs.as_path()).ok();
-        for allowed in &guard.config.network.allow_unix_sockets {
-            let allowed_path = match ValidatedUnixSocketPath::parse(allowed) {
-                Ok(ValidatedUnixSocketPath::Native(path)) => path,
-                Ok(ValidatedUnixSocketPath::UnixStyleAbsolute(_)) => continue,
-                Err(err) => {
-                    warn!("ignoring invalid network.allow_unix_sockets entry at runtime: {err:#}");
-                    continue;
-                }
-            };
-
-            if allowed_path.as_path() == requested_abs.as_path() {
-                return Ok(true);
-            }
-
-            // Best-effort canonicalization to reduce surprises with symlinks.
-            // If canonicalization fails (e.g., socket not created yet), fall back to raw comparison.
-            let Some(requested_canonical) = &requested_canonical else {
-                continue;
-            };
-            if let Ok(allowed_canonical) = std::fs::canonicalize(allowed_path.as_path())
-                && &allowed_canonical == requested_canonical
-            {
-                return Ok(true);
-            }
-        }
-        Ok(false)
-    }
-
-    pub async fn method_allowed(&self, method: &str) -> Result<bool> {
-        self.reload_if_needed().await?;
-        let guard = self.state.read().await;
-        Ok(guard.config.network.mode.allows_method(method))
-    }
-
-    pub async fn allow_upstream_proxy(&self) -> Result<bool> {
-        self.reload_if_needed().await?;
-        let guard = self.state.read().await;
-        Ok(guard.config.network.allow_upstream_proxy)
-    }
-
-    pub async fn network_mode(&self) -> Result<NetworkMode> {
-        self.reload_if_needed().await?;
-        let guard = self.state.read().await;
-        Ok(guard.config.network.mode)
-    }
-
-    pub async fn set_network_mode(&self, mode: NetworkMode) -> Result<()> {
-        loop {
-            self.reload_if_needed().await?;
-            let (candidate, constraints) = {
-                let guard = self.state.read().await;
-                let mut candidate = guard.config.clone();
-                candidate.network.mode = mode;
-                (candidate, guard.constraints.clone())
-            };
-
-            validate_policy_against_constraints(&candidate, &constraints)
-                .map_err(NetworkProxyConstraintError::into_anyhow)
-                .context("network.mode constrained by managed config")?;
-
-            let mut guard = self.state.write().await;
-            if guard.constraints != constraints {
-                drop(guard);
-                continue;
-            }
-            guard.config.network.mode = mode;
-            info!("updated network mode to {mode:?}");
-            return Ok(());
-        }
-    }
-
-    pub async fn mitm_state(&self) -> Result<Option<Arc<MitmState>>> {
-        self.reload_if_needed().await?;
-        let guard = self.state.read().await;
-        Ok(guard.mitm.clone())
-    }
-
-    pub async fn add_allowed_domain(&self, host: &str) -> Result<()> {
-        self.update_domain_list(host, DomainListKind::Allow).await
-    }
-
-    pub async fn add_denied_domain(&self, host: &str) -> Result<()> {
-        self.update_domain_list(host, DomainListKind::Deny).await
-    }
-
-    async fn update_domain_list(&self, host: &str, target: DomainListKind) -> Result<()> {
-        let host = Host::parse(host).context("invalid network host")?;
-        let normalized_host = host.as_str().to_string();
-        let list_name = target.list_name();
-        let constraint_field = target.constraint_field();
-
-        loop {
-            self.reload_if_needed().await?;
-            let (previous_cfg, constraints, blocked, blocked_total) = {
-                let guard = self.state.read().await;
-                (
-                    guard.config.clone(),
-                    guard.constraints.clone(),
-                    guard.blocked.clone(),
-                    guard.blocked_total,
-                )
-            };
-
-            let mut candidate = previous_cfg.clone();
-            let (target_entries, opposite_entries) = candidate.split_domain_lists_mut(target);
-            let target_contains = target_entries
-                .iter()
-                .any(|entry| normalize_host(entry) == normalized_host);
-            let opposite_contains = opposite_entries
-                .iter()
-                .any(|entry| normalize_host(entry) == normalized_host);
-            if target_contains && !opposite_contains {
-                return Ok(());
-            }
-
-            target_entries.retain(|entry| normalize_host(entry) != normalized_host);
-            target_entries.push(normalized_host.clone());
-            opposite_entries.retain(|entry| normalize_host(entry) != normalized_host);
-
-            validate_policy_against_constraints(&candidate, &constraints)
-                .map_err(NetworkProxyConstraintError::into_anyhow)
-                .with_context(|| format!("{constraint_field} constrained by managed config"))?;
-
-            let mut new_state = build_config_state(candidate.clone(), constraints.clone())
-                .with_context(|| format!("failed to compile updated network {list_name}"))?;
-            new_state.blocked = blocked;
-            new_state.blocked_total = blocked_total;
-
-            let mut guard = self.state.write().await;
-            if guard.constraints != constraints || guard.config != previous_cfg {
-                drop(guard);
-                continue;
-            }
-
-            log_policy_changes(&guard.config, &candidate);
-            *guard = new_state;
-            info!("updated network {list_name} with {normalized_host}");
-            return Ok(());
-        }
-    }
-
-    async fn reload_if_needed(&self) -> Result<()> {
-        match self.reloader.maybe_reload().await? {
-            None => Ok(()),
-            Some(mut new_state) => {
-                let (previous_cfg, blocked, blocked_total) = {
-                    let guard = self.state.read().await;
-                    (
-                        guard.config.clone(),
-                        guard.blocked.clone(),
-                        guard.blocked_total,
-                    )
-                };
-                log_policy_changes(&previous_cfg, &new_state.config);
-                new_state.blocked = blocked;
-                new_state.blocked_total = blocked_total;
-                {
-                    let mut guard = self.state.write().await;
-                    *guard = new_state;
-                }
-                let source = self.reloader.source_label();
-                info!("reloaded config from {source}");
-                Ok(())
-            }
-        }
-    }
-}
-
-#[derive(Clone, Copy)]
-enum DomainListKind {
-    Allow,
-    Deny,
-}
-
-impl DomainListKind {
-    fn list_name(self) -> &'static str {
-        match self {
-            Self::Allow => "allowlist",
-            Self::Deny => "denylist",
-        }
-    }
-
-    fn constraint_field(self) -> &'static str {
-        match self {
-            Self::Allow => "network.allowed_domains",
-            Self::Deny => "network.denied_domains",
-        }
-    }
-}
-
-impl NetworkProxyConfig {
-    fn split_domain_lists_mut(
-        &mut self,
-        target: DomainListKind,
-    ) -> (&mut Vec<String>, &mut Vec<String>) {
-        match target {
-            DomainListKind::Allow => (
-                &mut self.network.allowed_domains,
-                &mut self.network.denied_domains,
-            ),
-            DomainListKind::Deny => (
-                &mut self.network.denied_domains,
-                &mut self.network.allowed_domains,
-            ),
-        }
-    }
-}
-
-pub(crate) fn unix_socket_permissions_supported() -> bool {
-    cfg!(target_os = "macos")
-}
-
-async fn host_resolves_to_non_public_ip(host: &str, port: u16) -> bool {
-    if let Ok(ip) = host.parse::<IpAddr>() {
-        return is_non_public_ip(ip);
-    }
-
-    // If DNS lookup fails, default to "not local/private" rather than blocking. In practice, the
-    // subsequent connect attempt will fail anyway, and blocking on transient resolver issues would
-    // make the proxy fragile. The allowlist/denylist remains the primary control plane.
-    let addrs = match timeout(DNS_LOOKUP_TIMEOUT, lookup_host((host, port))).await {
-        Ok(Ok(addrs)) => addrs,
-        Ok(Err(_)) | Err(_) => return false,
-    };
-
-    for addr in addrs {
-        if is_non_public_ip(addr.ip()) {
-            return true;
-        }
-    }
-
-    false
-}
-
-fn log_policy_changes(previous: &NetworkProxyConfig, next: &NetworkProxyConfig) {
-    log_domain_list_changes(
-        "allowlist",
-        &previous.network.allowed_domains,
-        &next.network.allowed_domains,
-    );
-    log_domain_list_changes(
-        "denylist",
-        &previous.network.denied_domains,
-        &next.network.denied_domains,
-    );
-}
-
-fn log_domain_list_changes(list_name: &str, previous: &[String], next: &[String]) {
-    let previous_set: HashSet<String> = previous
-        .iter()
-        .map(|entry| entry.to_ascii_lowercase())
-        .collect();
-    let next_set: HashSet<String> = next
-        .iter()
-        .map(|entry| entry.to_ascii_lowercase())
-        .collect();
-
-    let added = next_set
-        .difference(&previous_set)
-        .cloned()
-        .collect::<HashSet<_>>();
-    let removed = previous_set
-        .difference(&next_set)
-        .cloned()
-        .collect::<HashSet<_>>();
-
-    let mut seen_next = HashSet::new();
-    for entry in next {
-        let key = entry.to_ascii_lowercase();
-        if seen_next.insert(key.clone()) && added.contains(&key) {
-            info!("config entry added to {list_name}: {entry}");
-        }
-    }
-
-    let mut seen_previous = HashSet::new();
-    for entry in previous {
-        let key = entry.to_ascii_lowercase();
-        if seen_previous.insert(key.clone()) && removed.contains(&key) {
-            info!("config entry removed from {list_name}: {entry}");
-        }
-    }
-}
-
-fn is_explicit_local_allowlisted(allowed_domains: &[String], host: &Host) -> bool {
-    let normalized_host = host.as_str();
-    allowed_domains.iter().any(|pattern| {
-        let pattern = pattern.trim();
-        if pattern == "*" || pattern.starts_with("*.") || pattern.starts_with("**.") {
-            return false;
-        }
-        if pattern.contains('*') || pattern.contains('?') {
-            return false;
-        }
-        normalize_host(pattern) == normalized_host
-    })
-}
-
-fn unix_timestamp() -> i64 {
-    OffsetDateTime::now_utc().unix_timestamp()
-}
-
-#[cfg(test)]
-pub(crate) fn network_proxy_state_for_policy(
-    mut network: crate::config::NetworkProxySettings,
-) -> NetworkProxyState {
-    network.enabled = true;
-    network.mode = NetworkMode::Full;
-    let config = NetworkProxyConfig { network };
-    let state = build_config_state(config, NetworkProxyConstraints::default()).unwrap();
-
-    NetworkProxyState::with_reloader(state, Arc::new(NoopReloader))
-}
-
-#[cfg(test)]
-struct NoopReloader;
-
-#[cfg(test)]
-#[async_trait]
-impl ConfigReloader for NoopReloader {
-    fn source_label(&self) -> String {
-        "test config state".to_string()
-    }
-
-    async fn maybe_reload(&self) -> Result<Option<ConfigState>> {
-        Ok(None)
-    }
-
-    async fn reload_now(&self) -> Result<ConfigState> {
-        Err(anyhow::anyhow!("force reload is not supported in tests"))
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    use crate::config::NetworkProxyConfig;
-    use crate::config::NetworkProxySettings;
-    use crate::policy::compile_globset;
-    use crate::state::NetworkProxyConstraints;
-    use crate::state::build_config_state;
-    use crate::state::validate_policy_against_constraints;
-    use pretty_assertions::assert_eq;
-
-    #[tokio::test]
-    async fn host_blocked_denied_wins_over_allowed() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["example.com".to_string()],
-            denied_domains: vec!["example.com".to_string()],
-            ..NetworkProxySettings::default()
-        });
-
-        assert_eq!(
-            state.host_blocked("example.com", 80).await.unwrap(),
-            HostBlockDecision::Blocked(HostBlockReason::Denied)
-        );
-    }
-
-    #[tokio::test]
-    async fn host_blocked_requires_allowlist_match() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["example.com".to_string()],
-            ..NetworkProxySettings::default()
-        });
-
-        assert_eq!(
-            state.host_blocked("example.com", 80).await.unwrap(),
-            HostBlockDecision::Allowed
-        );
-        assert_eq!(
-            // Use a public IP literal to avoid relying on ambient DNS behavior (some networks
-            // resolve unknown hostnames to private IPs, which would trigger `not_allowed_local`).
-            state.host_blocked("8.8.8.8", 80).await.unwrap(),
-            HostBlockDecision::Blocked(HostBlockReason::NotAllowed)
-        );
-    }
-
-    #[tokio::test]
-    async fn add_allowed_domain_removes_matching_deny_entry() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            denied_domains: vec!["example.com".to_string()],
-            ..NetworkProxySettings::default()
-        });
-
-        state.add_allowed_domain("ExAmPlE.CoM").await.unwrap();
-
-        let (allowed, denied) = state.current_patterns().await.unwrap();
-        assert_eq!(allowed, vec!["example.com".to_string()]);
-        assert!(denied.is_empty());
-        assert_eq!(
-            state.host_blocked("example.com", 80).await.unwrap(),
-            HostBlockDecision::Allowed
-        );
-    }
-
-    #[tokio::test]
-    async fn add_denied_domain_removes_matching_allow_entry() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["example.com".to_string()],
-            ..NetworkProxySettings::default()
-        });
-
-        state.add_denied_domain("EXAMPLE.COM").await.unwrap();
-
-        let (allowed, denied) = state.current_patterns().await.unwrap();
-        assert!(allowed.is_empty());
-        assert_eq!(denied, vec!["example.com".to_string()]);
-        assert_eq!(
-            state.host_blocked("example.com", 80).await.unwrap(),
-            HostBlockDecision::Blocked(HostBlockReason::Denied)
-        );
-    }
-
-    #[tokio::test]
-    async fn add_allowed_domain_succeeds_when_managed_baseline_allows_expansion() {
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allowed_domains: vec!["managed.example.com".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-        let constraints = NetworkProxyConstraints {
-            allowed_domains: Some(vec!["managed.example.com".to_string()]),
-            allowlist_expansion_enabled: Some(true),
-            ..NetworkProxyConstraints::default()
-        };
-        let state = NetworkProxyState::with_reloader(
-            build_config_state(config, constraints).unwrap(),
-            Arc::new(NoopReloader),
-        );
-
-        state.add_allowed_domain("user.example.com").await.unwrap();
-
-        let (allowed, denied) = state.current_patterns().await.unwrap();
-        assert_eq!(
-            allowed,
-            vec![
-                "managed.example.com".to_string(),
-                "user.example.com".to_string()
-            ]
-        );
-        assert!(denied.is_empty());
-    }
-
-    #[tokio::test]
-    async fn add_allowed_domain_rejects_expansion_when_managed_baseline_is_fixed() {
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allowed_domains: vec!["managed.example.com".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-        let constraints = NetworkProxyConstraints {
-            allowed_domains: Some(vec!["managed.example.com".to_string()]),
-            allowlist_expansion_enabled: Some(false),
-            ..NetworkProxyConstraints::default()
-        };
-        let state = NetworkProxyState::with_reloader(
-            build_config_state(config, constraints).unwrap(),
-            Arc::new(NoopReloader),
-        );
-
-        let err = state
-            .add_allowed_domain("user.example.com")
-            .await
-            .expect_err("managed baseline should reject allowlist expansion");
-
-        assert!(
-            format!("{err:#}").contains("network.allowed_domains constrained by managed config"),
-            "unexpected error: {err:#}"
-        );
-    }
-
-    #[tokio::test]
-    async fn add_denied_domain_rejects_expansion_when_managed_baseline_is_fixed() {
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                denied_domains: vec!["managed.example.com".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-        let constraints = NetworkProxyConstraints {
-            denied_domains: Some(vec!["managed.example.com".to_string()]),
-            denylist_expansion_enabled: Some(false),
-            ..NetworkProxyConstraints::default()
-        };
-        let state = NetworkProxyState::with_reloader(
-            build_config_state(config, constraints).unwrap(),
-            Arc::new(NoopReloader),
-        );
-
-        let err = state
-            .add_denied_domain("user.example.com")
-            .await
-            .expect_err("managed baseline should reject denylist expansion");
-
-        assert!(
-            format!("{err:#}").contains("network.denied_domains constrained by managed config"),
-            "unexpected error: {err:#}"
-        );
-    }
-
-    #[tokio::test]
-    async fn blocked_snapshot_does_not_consume_entries() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings::default());
-
-        state
-            .record_blocked(BlockedRequest::new(BlockedRequestArgs {
-                host: "google.com".to_string(),
-                reason: "not_allowed".to_string(),
-                client: None,
-                method: Some("GET".to_string()),
-                mode: None,
-                protocol: "http".to_string(),
-                decision: Some("ask".to_string()),
-                source: Some("decider".to_string()),
-                port: Some(80),
-            }))
-            .await
-            .expect("entry should be recorded");
-
-        let snapshot = state
-            .blocked_snapshot()
-            .await
-            .expect("snapshot should succeed");
-        assert_eq!(snapshot.len(), 1);
-        assert_eq!(snapshot[0].host, "google.com");
-        assert_eq!(snapshot[0].decision.as_deref(), Some("ask"));
-
-        let drained = state
-            .drain_blocked()
-            .await
-            .expect("drain should include snapshot entry");
-        assert_eq!(drained.len(), 1);
-        assert_eq!(drained[0].host, snapshot[0].host);
-        assert_eq!(drained[0].reason, snapshot[0].reason);
-        assert_eq!(drained[0].decision, snapshot[0].decision);
-        assert_eq!(drained[0].source, snapshot[0].source);
-        assert_eq!(drained[0].port, snapshot[0].port);
-    }
-
-    #[tokio::test]
-    async fn drain_blocked_returns_buffered_window() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings::default());
-
-        for idx in 0..(MAX_BLOCKED_EVENTS + 5) {
-            state
-                .record_blocked(BlockedRequest::new(BlockedRequestArgs {
-                    host: format!("example{idx}.com"),
-                    reason: "not_allowed".to_string(),
-                    client: None,
-                    method: Some("GET".to_string()),
-                    mode: None,
-                    protocol: "http".to_string(),
-                    decision: Some("ask".to_string()),
-                    source: Some("decider".to_string()),
-                    port: Some(80),
-                }))
-                .await
-                .expect("entry should be recorded");
-        }
-
-        let blocked = state.drain_blocked().await.expect("drain should succeed");
-        assert_eq!(blocked.len(), MAX_BLOCKED_EVENTS);
-        assert_eq!(blocked[0].host, "example5.com");
-    }
-
-    #[test]
-    fn blocked_request_violation_log_line_serializes_payload() {
-        let entry = BlockedRequest {
-            host: "google.com".to_string(),
-            reason: "not_allowed".to_string(),
-            client: Some("127.0.0.1".to_string()),
-            method: Some("GET".to_string()),
-            mode: Some(NetworkMode::Full),
-            protocol: "http".to_string(),
-            decision: Some("ask".to_string()),
-            source: Some("decider".to_string()),
-            port: Some(80),
-            timestamp: 1_735_689_600,
-        };
-
-        assert_eq!(
-            blocked_request_violation_log_line(&entry),
-            r#"CODEX_NETWORK_POLICY_VIOLATION {"host":"google.com","reason":"not_allowed","client":"127.0.0.1","method":"GET","mode":"full","protocol":"http","decision":"ask","source":"decider","port":80,"timestamp":1735689600}"#
-        );
-    }
-
-    #[tokio::test]
-    async fn host_blocked_subdomain_wildcards_exclude_apex() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["*.openai.com".to_string()],
-            ..NetworkProxySettings::default()
-        });
-
-        assert_eq!(
-            state.host_blocked("api.openai.com", 80).await.unwrap(),
-            HostBlockDecision::Allowed
-        );
-        assert_eq!(
-            state.host_blocked("openai.com", 80).await.unwrap(),
-            HostBlockDecision::Blocked(HostBlockReason::NotAllowed)
-        );
-    }
-
-    #[tokio::test]
-    async fn host_blocked_rejects_loopback_when_local_binding_disabled() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["example.com".to_string()],
-            allow_local_binding: false,
-            ..NetworkProxySettings::default()
-        });
-
-        assert_eq!(
-            state.host_blocked("127.0.0.1", 80).await.unwrap(),
-            HostBlockDecision::Blocked(HostBlockReason::NotAllowedLocal)
-        );
-        assert_eq!(
-            state.host_blocked("localhost", 80).await.unwrap(),
-            HostBlockDecision::Blocked(HostBlockReason::NotAllowedLocal)
-        );
-    }
-
-    #[tokio::test]
-    async fn host_blocked_allows_loopback_when_explicitly_allowlisted_and_local_binding_disabled() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["localhost".to_string()],
-            allow_local_binding: false,
-            ..NetworkProxySettings::default()
-        });
-
-        assert_eq!(
-            state.host_blocked("localhost", 80).await.unwrap(),
-            HostBlockDecision::Allowed
-        );
-    }
-
-    #[tokio::test]
-    async fn host_blocked_allows_private_ip_literal_when_explicitly_allowlisted() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["10.0.0.1".to_string()],
-            allow_local_binding: false,
-            ..NetworkProxySettings::default()
-        });
-
-        assert_eq!(
-            state.host_blocked("10.0.0.1", 80).await.unwrap(),
-            HostBlockDecision::Allowed
-        );
-    }
-
-    #[tokio::test]
-    async fn host_blocked_rejects_scoped_ipv6_literal_when_not_allowlisted() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["example.com".to_string()],
-            allow_local_binding: false,
-            ..NetworkProxySettings::default()
-        });
-
-        assert_eq!(
-            state.host_blocked("fe80::1%lo0", 80).await.unwrap(),
-            HostBlockDecision::Blocked(HostBlockReason::NotAllowedLocal)
-        );
-    }
-
-    #[tokio::test]
-    async fn host_blocked_allows_scoped_ipv6_literal_when_explicitly_allowlisted() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["fe80::1%lo0".to_string()],
-            allow_local_binding: false,
-            ..NetworkProxySettings::default()
-        });
-
-        assert_eq!(
-            state.host_blocked("fe80::1%lo0", 80).await.unwrap(),
-            HostBlockDecision::Allowed
-        );
-    }
-
-    #[tokio::test]
-    async fn host_blocked_rejects_private_ip_literals_when_local_binding_disabled() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["example.com".to_string()],
-            allow_local_binding: false,
-            ..NetworkProxySettings::default()
-        });
-
-        assert_eq!(
-            state.host_blocked("10.0.0.1", 80).await.unwrap(),
-            HostBlockDecision::Blocked(HostBlockReason::NotAllowedLocal)
-        );
-    }
-
-    #[tokio::test]
-    async fn host_blocked_rejects_loopback_when_allowlist_empty() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec![],
-            allow_local_binding: false,
-            ..NetworkProxySettings::default()
-        });
-
-        assert_eq!(
-            state.host_blocked("127.0.0.1", 80).await.unwrap(),
-            HostBlockDecision::Blocked(HostBlockReason::NotAllowedLocal)
-        );
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_disallows_widening_allowed_domains() {
-        let constraints = NetworkProxyConstraints {
-            allowed_domains: Some(vec!["example.com".to_string()]),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allowed_domains: vec!["example.com".to_string(), "evil.com".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_err());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_allows_expanding_allowed_domains_when_enabled() {
-        let constraints = NetworkProxyConstraints {
-            allowed_domains: Some(vec!["example.com".to_string()]),
-            allowlist_expansion_enabled: Some(true),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allowed_domains: vec!["example.com".to_string(), "api.openai.com".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_ok());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_disallows_widening_mode() {
-        let constraints = NetworkProxyConstraints {
-            mode: Some(NetworkMode::Limited),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                mode: NetworkMode::Full,
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_err());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_allows_narrowing_wildcard_allowlist() {
-        let constraints = NetworkProxyConstraints {
-            allowed_domains: Some(vec!["*.example.com".to_string()]),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allowed_domains: vec!["api.example.com".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_ok());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_rejects_widening_wildcard_allowlist() {
-        let constraints = NetworkProxyConstraints {
-            allowed_domains: Some(vec!["*.example.com".to_string()]),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allowed_domains: vec!["**.example.com".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_err());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_rejects_global_wildcard_in_managed_allowlist() {
-        let constraints = NetworkProxyConstraints {
-            allowed_domains: Some(vec!["*".to_string()]),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allowed_domains: vec!["api.example.com".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_err());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_rejects_bracketed_global_wildcard_in_managed_allowlist()
-    {
-        let constraints = NetworkProxyConstraints {
-            allowed_domains: Some(vec!["[*]".to_string()]),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allowed_domains: vec!["api.example.com".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_err());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_rejects_double_wildcard_bracketed_global_wildcard_in_managed_allowlist()
-     {
-        let constraints = NetworkProxyConstraints {
-            allowed_domains: Some(vec!["**.[*]".to_string()]),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allowed_domains: vec!["api.example.com".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_err());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_requires_managed_denied_domains_entries() {
-        let constraints = NetworkProxyConstraints {
-            denied_domains: Some(vec!["evil.com".to_string()]),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                denied_domains: vec![],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_err());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_disallows_expanding_denied_domains_when_fixed() {
-        let constraints = NetworkProxyConstraints {
-            denied_domains: Some(vec!["evil.com".to_string()]),
-            denylist_expansion_enabled: Some(false),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                denied_domains: vec!["evil.com".to_string(), "more-evil.com".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_err());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_disallows_enabling_when_managed_disabled() {
-        let constraints = NetworkProxyConstraints {
-            enabled: Some(false),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_err());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_disallows_allow_local_binding_when_managed_disabled() {
-        let constraints = NetworkProxyConstraints {
-            allow_local_binding: Some(false),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allow_local_binding: true,
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_err());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_disallows_allow_all_unix_sockets_without_managed_opt_in()
-    {
-        let constraints = NetworkProxyConstraints {
-            dangerously_allow_all_unix_sockets: Some(false),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                dangerously_allow_all_unix_sockets: true,
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_err());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_disallows_allow_all_unix_sockets_when_allowlist_is_managed()
-     {
-        let constraints = NetworkProxyConstraints {
-            allow_unix_sockets: Some(vec!["/tmp/allowed.sock".to_string()]),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                dangerously_allow_all_unix_sockets: true,
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_err());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_allows_allow_all_unix_sockets_with_managed_opt_in() {
-        let constraints = NetworkProxyConstraints {
-            dangerously_allow_all_unix_sockets: Some(true),
-            ..NetworkProxyConstraints::default()
-        };
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                dangerously_allow_all_unix_sockets: true,
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_ok());
-    }
-
-    #[test]
-    fn validate_policy_against_constraints_allows_allow_all_unix_sockets_when_unmanaged() {
-        let constraints = NetworkProxyConstraints::default();
-
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                dangerously_allow_all_unix_sockets: true,
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(validate_policy_against_constraints(&config, &constraints).is_ok());
-    }
-
-    #[test]
-    fn compile_globset_is_case_insensitive() {
-        let patterns = vec!["ExAmPle.CoM".to_string()];
-        let set = compile_globset(&patterns).unwrap();
-        assert!(set.is_match("example.com"));
-        assert!(set.is_match("EXAMPLE.COM"));
-    }
-
-    #[test]
-    fn compile_globset_excludes_apex_for_subdomain_patterns() {
-        let patterns = vec!["*.openai.com".to_string()];
-        let set = compile_globset(&patterns).unwrap();
-        assert!(set.is_match("api.openai.com"));
-        assert!(!set.is_match("openai.com"));
-        assert!(!set.is_match("evilopenai.com"));
-    }
-
-    #[test]
-    fn compile_globset_includes_apex_for_double_wildcard_patterns() {
-        let patterns = vec!["**.openai.com".to_string()];
-        let set = compile_globset(&patterns).unwrap();
-        assert!(set.is_match("openai.com"));
-        assert!(set.is_match("api.openai.com"));
-        assert!(!set.is_match("evilopenai.com"));
-    }
-
-    #[test]
-    fn compile_globset_rejects_global_wildcard() {
-        let patterns = vec!["*".to_string()];
-        assert!(compile_globset(&patterns).is_err());
-    }
-
-    #[test]
-    fn compile_globset_rejects_bracketed_global_wildcard() {
-        let patterns = vec!["[*]".to_string()];
-        assert!(compile_globset(&patterns).is_err());
-    }
-
-    #[test]
-    fn compile_globset_rejects_double_wildcard_bracketed_global_wildcard() {
-        let patterns = vec!["**.[*]".to_string()];
-        assert!(compile_globset(&patterns).is_err());
-    }
-
-    #[test]
-    fn compile_globset_dedupes_patterns_without_changing_behavior() {
-        let patterns = vec!["example.com".to_string(), "example.com".to_string()];
-        let set = compile_globset(&patterns).unwrap();
-        assert!(set.is_match("example.com"));
-        assert!(set.is_match("EXAMPLE.COM"));
-        assert!(!set.is_match("not-example.com"));
-    }
-
-    #[test]
-    fn compile_globset_rejects_invalid_patterns() {
-        let patterns = vec!["[".to_string()];
-        assert!(compile_globset(&patterns).is_err());
-    }
-
-    #[test]
-    fn build_config_state_rejects_global_wildcard_allowed_domains() {
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allowed_domains: vec!["*".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(build_config_state(config, NetworkProxyConstraints::default()).is_err());
-    }
-
-    #[test]
-    fn build_config_state_rejects_bracketed_global_wildcard_allowed_domains() {
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allowed_domains: vec!["[*]".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(build_config_state(config, NetworkProxyConstraints::default()).is_err());
-    }
-
-    #[test]
-    fn build_config_state_rejects_global_wildcard_denied_domains() {
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allowed_domains: vec!["example.com".to_string()],
-                denied_domains: vec!["*".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(build_config_state(config, NetworkProxyConstraints::default()).is_err());
-    }
-
-    #[test]
-    fn build_config_state_rejects_bracketed_global_wildcard_denied_domains() {
-        let config = NetworkProxyConfig {
-            network: NetworkProxySettings {
-                enabled: true,
-                allowed_domains: vec!["example.com".to_string()],
-                denied_domains: vec!["[*]".to_string()],
-                ..NetworkProxySettings::default()
-            },
-        };
-
-        assert!(build_config_state(config, NetworkProxyConstraints::default()).is_err());
-    }
-
-    #[cfg(target_os = "macos")]
-    #[tokio::test]
-    async fn unix_socket_allowlist_is_respected_on_macos() {
-        let socket_path = "/tmp/example.sock".to_string();
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["example.com".to_string()],
-            allow_unix_sockets: vec![socket_path.clone()],
-            ..NetworkProxySettings::default()
-        });
-
-        assert!(state.is_unix_socket_allowed(&socket_path).await.unwrap());
-        assert!(
-            !state
-                .is_unix_socket_allowed("/tmp/not-allowed.sock")
-                .await
-                .unwrap()
-        );
-    }
-
-    #[cfg(target_os = "macos")]
-    #[tokio::test]
-    async fn unix_socket_allowlist_resolves_symlinks() {
-        use std::os::unix::fs::symlink;
-        use tempfile::tempdir;
-
-        let temp_dir = tempdir().unwrap();
-        let dir = temp_dir.path();
-
-        let real = dir.join("real.sock");
-        let link = dir.join("link.sock");
-
-        // The allowlist mechanism is path-based; for test purposes we don't need an actual unix
-        // domain socket. Any filesystem entry works for canonicalization.
-        std::fs::write(&real, b"not a socket").unwrap();
-        symlink(&real, &link).unwrap();
-
-        let real_s = real.to_str().unwrap().to_string();
-        let link_s = link.to_str().unwrap().to_string();
-
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["example.com".to_string()],
-            allow_unix_sockets: vec![real_s],
-            ..NetworkProxySettings::default()
-        });
-
-        assert!(state.is_unix_socket_allowed(&link_s).await.unwrap());
-    }
-
-    #[cfg(target_os = "macos")]
-    #[tokio::test]
-    async fn unix_socket_allow_all_flag_bypasses_allowlist() {
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["example.com".to_string()],
-            dangerously_allow_all_unix_sockets: true,
-            ..NetworkProxySettings::default()
-        });
-
-        assert!(state.is_unix_socket_allowed("/tmp/any.sock").await.unwrap());
-        assert!(!state.is_unix_socket_allowed("relative.sock").await.unwrap());
-    }
-
-    #[cfg(not(target_os = "macos"))]
-    #[tokio::test]
-    async fn unix_socket_allowlist_is_rejected_on_non_macos() {
-        let socket_path = "/tmp/example.sock".to_string();
-        let state = network_proxy_state_for_policy(NetworkProxySettings {
-            allowed_domains: vec!["example.com".to_string()],
-            allow_unix_sockets: vec![socket_path.clone()],
-            dangerously_allow_all_unix_sockets: true,
-            ..NetworkProxySettings::default()
-        });
-
-        assert!(!state.is_unix_socket_allowed(&socket_path).await.unwrap());
-    }
-}
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/socks5.rs b/registry/native/stubs/codex-network-proxy-wasi/src/socks5.rs
deleted file mode 100644
index dce38acf7..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/socks5.rs
+++ /dev/null
@@ -1,27 +0,0 @@
-//! wasm32-wasip1 stub: SOCKS5 proxy server inert on wasi (host-brokered policy).
-use std::net::SocketAddr;
-use std::net::TcpListener as StdTcpListener;
-use std::sync::Arc;
-
-use anyhow::Result;
-
-use crate::network_policy::NetworkPolicyDecider;
-use crate::state::NetworkProxyState;
-
-pub async fn run_socks5(
-    _state: Arc<NetworkProxyState>,
-    _addr: SocketAddr,
-    _policy_decider: Option<Arc<dyn NetworkPolicyDecider>>,
-    _enable_socks5_udp: bool,
-) -> Result<()> {
-    Ok(())
-}
-
-pub async fn run_socks5_with_std_listener(
-    _state: Arc<NetworkProxyState>,
-    _listener: StdTcpListener,
-    _policy_decider: Option<Arc<dyn NetworkPolicyDecider>>,
-    _enable_socks5_udp: bool,
-) -> Result<()> {
-    Ok(())
-}
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/state.rs b/registry/native/stubs/codex-network-proxy-wasi/src/state.rs
deleted file mode 100644
index 612e6c5b5..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/state.rs
+++ /dev/null
@@ -1,406 +0,0 @@
-use crate::config::NetworkMode;
-use crate::config::NetworkProxyConfig;
-use crate::mitm::MitmState;
-use crate::policy::DomainPattern;
-use crate::policy::compile_globset;
-use crate::policy::is_global_wildcard_domain_pattern;
-use crate::runtime::ConfigState;
-use serde::Deserialize;
-use std::collections::HashSet;
-use std::sync::Arc;
-
-pub use crate::runtime::BlockedRequest;
-pub use crate::runtime::BlockedRequestArgs;
-pub use crate::runtime::NetworkProxyAuditMetadata;
-pub use crate::runtime::NetworkProxyState;
-#[cfg(test)]
-pub(crate) use crate::runtime::network_proxy_state_for_policy;
-
-#[derive(Debug, Default, Clone, PartialEq, Eq)]
-pub struct NetworkProxyConstraints {
-    pub enabled: Option<bool>,
-    pub mode: Option<NetworkMode>,
-    pub allow_upstream_proxy: Option<bool>,
-    pub dangerously_allow_non_loopback_proxy: Option<bool>,
-    pub dangerously_allow_all_unix_sockets: Option<bool>,
-    pub allowed_domains: Option<Vec<String>>,
-    pub allowlist_expansion_enabled: Option<bool>,
-    pub denied_domains: Option<Vec<String>>,
-    pub denylist_expansion_enabled: Option<bool>,
-    pub allow_unix_sockets: Option<Vec<String>>,
-    pub allow_local_binding: Option<bool>,
-}
-
-#[derive(Debug, Clone, Deserialize)]
-pub struct PartialNetworkProxyConfig {
-    #[serde(default)]
-    pub network: PartialNetworkConfig,
-}
-
-#[derive(Debug, Default, Clone, Deserialize)]
-pub struct PartialNetworkConfig {
-    pub enabled: Option<bool>,
-    pub mode: Option<NetworkMode>,
-    pub allow_upstream_proxy: Option<bool>,
-    pub dangerously_allow_non_loopback_proxy: Option<bool>,
-    pub dangerously_allow_all_unix_sockets: Option<bool>,
-    #[serde(default)]
-    pub allowed_domains: Option<Vec<String>>,
-    #[serde(default)]
-    pub denied_domains: Option<Vec<String>>,
-    #[serde(default)]
-    pub allow_unix_sockets: Option<Vec<String>>,
-    #[serde(default)]
-    pub allow_local_binding: Option<bool>,
-}
-
-pub fn build_config_state(
-    config: NetworkProxyConfig,
-    constraints: NetworkProxyConstraints,
-) -> anyhow::Result<ConfigState> {
-    crate::config::validate_unix_socket_allowlist_paths(&config)?;
-    validate_domain_patterns("network.allowed_domains", &config.network.allowed_domains)
-        .map_err(NetworkProxyConstraintError::into_anyhow)?;
-    validate_domain_patterns("network.denied_domains", &config.network.denied_domains)
-        .map_err(NetworkProxyConstraintError::into_anyhow)?;
-    let deny_set = compile_globset(&config.network.denied_domains)?;
-    let allow_set = compile_globset(&config.network.allowed_domains)?;
-    let mitm = if config.network.mitm {
-        Some(Arc::new(MitmState::new(
-            config.network.allow_upstream_proxy,
-        )?))
-    } else {
-        None
-    };
-    Ok(ConfigState {
-        config,
-        allow_set,
-        deny_set,
-        mitm,
-        constraints,
-        blocked: std::collections::VecDeque::new(),
-        blocked_total: 0,
-    })
-}
-
-pub fn validate_policy_against_constraints(
-    config: &NetworkProxyConfig,
-    constraints: &NetworkProxyConstraints,
-) -> Result<(), NetworkProxyConstraintError> {
-    fn invalid_value(
-        field_name: &'static str,
-        candidate: impl Into<String>,
-        allowed: impl Into<String>,
-    ) -> NetworkProxyConstraintError {
-        NetworkProxyConstraintError::InvalidValue {
-            field_name,
-            candidate: candidate.into(),
-            allowed: allowed.into(),
-        }
-    }
-
-    fn validate<T>(
-        candidate: T,
-        validator: impl FnOnce(&T) -> Result<(), NetworkProxyConstraintError>,
-    ) -> Result<(), NetworkProxyConstraintError> {
-        validator(&candidate)
-    }
-
-    let enabled = config.network.enabled;
-    validate_domain_patterns("network.allowed_domains", &config.network.allowed_domains)?;
-    validate_domain_patterns("network.denied_domains", &config.network.denied_domains)?;
-    if let Some(max_enabled) = constraints.enabled {
-        validate(enabled, move |candidate| {
-            if *candidate && !max_enabled {
-                Err(invalid_value(
-                    "network.enabled",
-                    "true",
-                    "false (disabled by managed config)",
-                ))
-            } else {
-                Ok(())
-            }
-        })?;
-    }
-
-    if let Some(max_mode) = constraints.mode {
-        validate(config.network.mode, move |candidate| {
-            if network_mode_rank(*candidate) > network_mode_rank(max_mode) {
-                Err(invalid_value(
-                    "network.mode",
-                    format!("{candidate:?}"),
-                    format!("{max_mode:?} or more restrictive"),
-                ))
-            } else {
-                Ok(())
-            }
-        })?;
-    }
-
-    let allow_upstream_proxy = constraints.allow_upstream_proxy;
-    validate(
-        config.network.allow_upstream_proxy,
-        move |candidate| match allow_upstream_proxy {
-            Some(true) | None => Ok(()),
-            Some(false) => {
-                if *candidate {
-                    Err(invalid_value(
-                        "network.allow_upstream_proxy",
-                        "true",
-                        "false (disabled by managed config)",
-                    ))
-                } else {
-                    Ok(())
-                }
-            }
-        },
-    )?;
-
-    let allow_non_loopback_proxy = constraints.dangerously_allow_non_loopback_proxy;
-    validate(
-        config.network.dangerously_allow_non_loopback_proxy,
-        move |candidate| match allow_non_loopback_proxy {
-            Some(true) | None => Ok(()),
-            Some(false) => {
-                if *candidate {
-                    Err(invalid_value(
-                        "network.dangerously_allow_non_loopback_proxy",
-                        "true",
-                        "false (disabled by managed config)",
-                    ))
-                } else {
-                    Ok(())
-                }
-            }
-        },
-    )?;
-
-    let allow_all_unix_sockets = constraints
-        .dangerously_allow_all_unix_sockets
-        .unwrap_or(constraints.allow_unix_sockets.is_none());
-    validate(
-        config.network.dangerously_allow_all_unix_sockets,
-        move |candidate| {
-            if *candidate && !allow_all_unix_sockets {
-                Err(invalid_value(
-                    "network.dangerously_allow_all_unix_sockets",
-                    "true",
-                    "false (disabled by managed config)",
-                ))
-            } else {
-                Ok(())
-            }
-        },
-    )?;
-
-    if let Some(allow_local_binding) = constraints.allow_local_binding {
-        validate(config.network.allow_local_binding, move |candidate| {
-            if *candidate && !allow_local_binding {
-                Err(invalid_value(
-                    "network.allow_local_binding",
-                    "true",
-                    "false (disabled by managed config)",
-                ))
-            } else {
-                Ok(())
-            }
-        })?;
-    }
-
-    if let Some(allowed_domains) = &constraints.allowed_domains {
-        validate_domain_patterns("network.allowed_domains", allowed_domains)?;
-        match constraints.allowlist_expansion_enabled {
-            Some(true) => {
-                let required_set: HashSet<String> = allowed_domains
-                    .iter()
-                    .map(|entry| entry.to_ascii_lowercase())
-                    .collect();
-                validate(config.network.allowed_domains.clone(), move |candidate| {
-                    let candidate_set: HashSet<String> = candidate
-                        .iter()
-                        .map(|entry| entry.to_ascii_lowercase())
-                        .collect();
-                    let missing: Vec<String> = required_set
-                        .iter()
-                        .filter(|entry| !candidate_set.contains(*entry))
-                        .cloned()
-                        .collect();
-                    if missing.is_empty() {
-                        Ok(())
-                    } else {
-                        Err(invalid_value(
-                            "network.allowed_domains",
-                            "missing managed allowed_domains entries",
-                            format!("{missing:?}"),
-                        ))
-                    }
-                })?;
-            }
-            Some(false) => {
-                let required_set: HashSet<String> = allowed_domains
-                    .iter()
-                    .map(|entry| entry.to_ascii_lowercase())
-                    .collect();
-                validate(config.network.allowed_domains.clone(), move |candidate| {
-                    let candidate_set: HashSet<String> = candidate
-                        .iter()
-                        .map(|entry| entry.to_ascii_lowercase())
-                        .collect();
-                    if candidate_set == required_set {
-                        Ok(())
-                    } else {
-                        Err(invalid_value(
-                            "network.allowed_domains",
-                            format!("{candidate:?}"),
-                            "must match managed allowed_domains",
-                        ))
-                    }
-                })?;
-            }
-            None => {
-                let managed_patterns: Vec<DomainPattern> = allowed_domains
-                    .iter()
-                    .map(|entry| DomainPattern::parse_for_constraints(entry))
-                    .collect();
-                validate(config.network.allowed_domains.clone(), move |candidate| {
-                    let mut invalid = Vec::new();
-                    for entry in candidate {
-                        let candidate_pattern = DomainPattern::parse_for_constraints(entry);
-                        if !managed_patterns
-                            .iter()
-                            .any(|managed| managed.allows(&candidate_pattern))
-                        {
-                            invalid.push(entry.clone());
-                        }
-                    }
-                    if invalid.is_empty() {
-                        Ok(())
-                    } else {
-                        Err(invalid_value(
-                            "network.allowed_domains",
-                            format!("{invalid:?}"),
-                            "subset of managed allowed_domains",
-                        ))
-                    }
-                })?;
-            }
-        }
-    }
-
-    if let Some(denied_domains) = &constraints.denied_domains {
-        validate_domain_patterns("network.denied_domains", denied_domains)?;
-        let required_set: HashSet<String> = denied_domains
-            .iter()
-            .map(|s| s.to_ascii_lowercase())
-            .collect();
-        match constraints.denylist_expansion_enabled {
-            Some(false) => {
-                validate(config.network.denied_domains.clone(), move |candidate| {
-                    let candidate_set: HashSet<String> = candidate
-                        .iter()
-                        .map(|entry| entry.to_ascii_lowercase())
-                        .collect();
-                    if candidate_set == required_set {
-                        Ok(())
-                    } else {
-                        Err(invalid_value(
-                            "network.denied_domains",
-                            format!("{candidate:?}"),
-                            "must match managed denied_domains",
-                        ))
-                    }
-                })?;
-            }
-            Some(true) | None => {
-                validate(config.network.denied_domains.clone(), move |candidate| {
-                    let candidate_set: HashSet<String> =
-                        candidate.iter().map(|s| s.to_ascii_lowercase()).collect();
-                    let missing: Vec<String> = required_set
-                        .iter()
-                        .filter(|entry| !candidate_set.contains(*entry))
-                        .cloned()
-                        .collect();
-                    if missing.is_empty() {
-                        Ok(())
-                    } else {
-                        Err(invalid_value(
-                            "network.denied_domains",
-                            "missing managed denied_domains entries",
-                            format!("{missing:?}"),
-                        ))
-                    }
-                })?;
-            }
-        }
-    }
-
-    if let Some(allow_unix_sockets) = &constraints.allow_unix_sockets {
-        let allowed_set: HashSet<String> = allow_unix_sockets
-            .iter()
-            .map(|s| s.to_ascii_lowercase())
-            .collect();
-        validate(
-            config.network.allow_unix_sockets.clone(),
-            move |candidate| {
-                let mut invalid = Vec::new();
-                for entry in candidate {
-                    if !allowed_set.contains(&entry.to_ascii_lowercase()) {
-                        invalid.push(entry.clone());
-                    }
-                }
-                if invalid.is_empty() {
-                    Ok(())
-                } else {
-                    Err(invalid_value(
-                        "network.allow_unix_sockets",
-                        format!("{invalid:?}"),
-                        "subset of managed allow_unix_sockets",
-                    ))
-                }
-            },
-        )?;
-    }
-
-    Ok(())
-}
-
-fn validate_domain_patterns(
-    field_name: &'static str,
-    patterns: &[String],
-) -> Result<(), NetworkProxyConstraintError> {
-    if let Some(pattern) = patterns
-        .iter()
-        .find(|pattern| is_global_wildcard_domain_pattern(pattern))
-    {
-        return Err(NetworkProxyConstraintError::InvalidValue {
-            field_name,
-            candidate: pattern.trim().to_string(),
-            allowed: "exact hosts or scoped wildcards like *.example.com or **.example.com"
-                .to_string(),
-        });
-    }
-    Ok(())
-}
-
-#[derive(Debug, Clone, PartialEq, Eq, thiserror::Error)]
-pub enum NetworkProxyConstraintError {
-    #[error("invalid value for {field_name}: {candidate} (allowed {allowed})")]
-    InvalidValue {
-        field_name: &'static str,
-        candidate: String,
-        allowed: String,
-    },
-}
-
-impl NetworkProxyConstraintError {
-    pub fn into_anyhow(self) -> anyhow::Error {
-        anyhow::anyhow!(self)
-    }
-}
-
-fn network_mode_rank(mode: NetworkMode) -> u8 {
-    match mode {
-        NetworkMode::Limited => 0,
-        NetworkMode::Full => 1,
-    }
-}
diff --git a/registry/native/stubs/codex-network-proxy-wasi/src/upstream.rs b/registry/native/stubs/codex-network-proxy-wasi/src/upstream.rs
deleted file mode 100644
index 2df096e24..000000000
--- a/registry/native/stubs/codex-network-proxy-wasi/src/upstream.rs
+++ /dev/null
@@ -1 +0,0 @@
-//! wasm32-wasip1 stub (inert on wasi).
diff --git a/registry/native/stubs/codex-network-proxy/Cargo.toml b/registry/native/stubs/codex-network-proxy/Cargo.toml
deleted file mode 100644
index 4d2db9069..000000000
--- a/registry/native/stubs/codex-network-proxy/Cargo.toml
+++ /dev/null
@@ -1,10 +0,0 @@
-[package]
-name = "codex-network-proxy"
-version = "0.0.0"
-edition = "2021"
-license = "Apache-2.0"
-description = "WASM-compatible stub for codex-network-proxy (no-op network proxy)"
-
-[lib]
-name = "codex_network_proxy"
-path = "src/lib.rs"
diff --git a/registry/native/stubs/codex-network-proxy/src/lib.rs b/registry/native/stubs/codex-network-proxy/src/lib.rs
deleted file mode 100644
index bd6259b22..000000000
--- a/registry/native/stubs/codex-network-proxy/src/lib.rs
+++ /dev/null
@@ -1,428 +0,0 @@
-//! WASM-compatible stub for codex-network-proxy.
-//!
-//! On WASI the host manages networking, so the network proxy is unnecessary.
-//! All types are zero-size structs with no-op methods. This stub is not a
-//! policy enforcement layer; guest egress must remain mediated by the VM kernel.
-
-use std::collections::HashMap;
-use std::fmt;
-use std::net::SocketAddr;
-use std::sync::Arc;
-
-// ---- ProxyError ----
-
-/// Error type for proxy operations (stub — replaces anyhow::Error).
-#[derive(Debug)]
-pub struct ProxyError(String);
-
-impl fmt::Display for ProxyError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "{}", self.0)
-    }
-}
-
-impl std::error::Error for ProxyError {}
-
-impl ProxyError {
-    /// Create a new proxy error.
-    pub fn new(msg: impl Into<String>) -> Self {
-        Self(msg.into())
-    }
-}
-
-// ---- NetworkMode ----
-
-/// Network operating mode (stub).
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum NetworkMode {
-    /// Full network access.
-    Full,
-}
-
-impl Default for NetworkMode {
-    fn default() -> Self {
-        Self::Full
-    }
-}
-
-// ---- NetworkProxyConfig ----
-
-/// Proxy configuration (stub).
-#[derive(Debug, Clone, Default)]
-pub struct NetworkProxyConfig;
-
-/// Extract host and port from a network address string (stub).
-pub fn host_and_port_from_network_addr(_addr: &str) -> Option<(String, u16)> {
-    None
-}
-
-// ---- NetworkPolicy types ----
-
-/// Decision for a network request (stub).
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum NetworkDecision {
-    /// Allow the request.
-    Allow,
-    /// Deny the request.
-    Deny,
-}
-
-/// Source of a network decision (stub).
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum NetworkDecisionSource {
-    /// Policy-based.
-    Policy,
-}
-
-/// Network protocol (stub).
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum NetworkProtocol {
-    /// TCP.
-    Tcp,
-}
-
-/// Policy request arguments (stub).
-#[derive(Debug, Clone)]
-pub struct NetworkPolicyRequestArgs {
-    /// Host.
-    pub host: String,
-    /// Port.
-    pub port: u16,
-}
-
-/// Policy request (stub).
-#[derive(Debug, Clone)]
-pub struct NetworkPolicyRequest;
-
-/// Policy decision (stub).
-#[derive(Debug, Clone)]
-pub struct NetworkPolicyDecision {
-    /// Decision.
-    pub decision: NetworkDecision,
-    /// Source.
-    pub source: NetworkDecisionSource,
-}
-
-/// Trait for deciding network policy (stub).
-pub trait NetworkPolicyDecider: Send + Sync + 'static {
-    /// Decide whether to allow a request.
-    fn decide(&self, request: &NetworkPolicyRequest) -> NetworkPolicyDecision;
-}
-
-// ---- Policy helpers ----
-
-/// Normalize a hostname (stub — returns input unchanged).
-pub fn normalize_host(host: &str) -> String {
-    host.to_string()
-}
-
-// ---- Proxy env helpers ----
-
-/// All proxy-related environment variable keys.
-pub const ALL_PROXY_ENV_KEYS: &[&str] = &[
-    "HTTP_PROXY",
-    "http_proxy",
-    "HTTPS_PROXY",
-    "https_proxy",
-    "ALL_PROXY",
-    "all_proxy",
-];
-
-/// Environment variable key for allowing local binding.
-pub const ALLOW_LOCAL_BINDING_ENV_KEY: &str = "CODEX_ALLOW_LOCAL_BINDING";
-
-/// Default NO_PROXY value.
-pub const DEFAULT_NO_PROXY_VALUE: &str = "";
-
-/// NO_PROXY environment variable keys.
-pub const NO_PROXY_ENV_KEYS: &[&str] = &["NO_PROXY", "no_proxy"];
-
-/// Proxy URL environment variable keys.
-pub const PROXY_URL_ENV_KEYS: &[&str] = &[
-    "HTTP_PROXY",
-    "http_proxy",
-    "HTTPS_PROXY",
-    "https_proxy",
-    "ALL_PROXY",
-    "all_proxy",
-];
-
-/// CLI arguments (stub).
-#[derive(Debug, Clone, Default)]
-pub struct Args;
-
-/// Check whether proxy-URL env vars are present (stub — always false).
-pub fn has_proxy_url_env_vars(_env: &HashMap<String, String>) -> bool {
-    false
-}
-
-/// Get the proxy URL from env (stub — always None).
-pub fn proxy_url_env_value<'a>(_env: &'a HashMap<String, String>) -> Option<&'a str> {
-    None
-}
-
-// ---- NetworkProxy ----
-
-/// Network proxy (zero-size stub for WASI).
-#[derive(Clone)]
-pub struct NetworkProxy;
-
-impl fmt::Debug for NetworkProxy {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        f.debug_struct("NetworkProxy").finish()
-    }
-}
-
-impl PartialEq for NetworkProxy {
-    fn eq(&self, _other: &Self) -> bool {
-        true
-    }
-}
-
-impl NetworkProxy {
-    /// Create a new builder (stub).
-    pub fn builder() -> NetworkProxyBuilder {
-        NetworkProxyBuilder
-    }
-
-    /// HTTP proxy address (stub — returns 127.0.0.1:0).
-    pub fn http_addr(&self) -> SocketAddr {
-        SocketAddr::from(([127, 0, 0, 1], 0))
-    }
-
-    /// SOCKS proxy address (stub — returns 127.0.0.1:0).
-    pub fn socks_addr(&self) -> SocketAddr {
-        SocketAddr::from(([127, 0, 0, 1], 0))
-    }
-
-    /// Get current config (stub).
-    pub async fn current_cfg(&self) -> Result<NetworkProxyConfig, ProxyError> {
-        Ok(NetworkProxyConfig)
-    }
-
-    /// Add allowed domain (stub — no-op).
-    pub async fn add_allowed_domain(&self, _host: &str) -> Result<(), ProxyError> {
-        Ok(())
-    }
-
-    /// Add denied domain (stub — no-op).
-    pub async fn add_denied_domain(&self, _host: &str) -> Result<(), ProxyError> {
-        Ok(())
-    }
-
-    /// Whether local binding is allowed (stub — always false).
-    pub fn allow_local_binding(&self) -> bool {
-        false
-    }
-
-    /// Allowed Unix sockets (stub — empty).
-    pub fn allow_unix_sockets(&self) -> &[String] {
-        &[]
-    }
-
-    /// Whether all Unix sockets are allowed (stub — false).
-    pub fn dangerously_allow_all_unix_sockets(&self) -> bool {
-        false
-    }
-
-    /// Apply proxy settings to environment (no-op on WASI).
-    pub fn apply_to_env(&self, _env: &mut HashMap<String, String>) {}
-
-    /// Run the proxy (stub — returns handle immediately).
-    pub async fn run(&self) -> Result<NetworkProxyHandle, ProxyError> {
-        Ok(NetworkProxyHandle)
-    }
-}
-
-// ---- NetworkProxyBuilder ----
-
-/// Builder for NetworkProxy (stub).
-#[derive(Clone, Default)]
-pub struct NetworkProxyBuilder;
-
-impl NetworkProxyBuilder {
-    /// Set state (stub — no-op).
-    pub fn state(self, _state: Arc<NetworkProxyState>) -> Self {
-        self
-    }
-
-    /// Set HTTP address (stub — no-op).
-    pub fn http_addr(self, _addr: SocketAddr) -> Self {
-        self
-    }
-
-    /// Set SOCKS address (stub — no-op).
-    pub fn socks_addr(self, _addr: SocketAddr) -> Self {
-        self
-    }
-
-    /// Set managed by codex flag (stub — no-op).
-    pub fn managed_by_codex(self, _managed: bool) -> Self {
-        self
-    }
-
-    /// Set policy decider (stub — no-op).
-    pub fn policy_decider<D: NetworkPolicyDecider>(self, _decider: D) -> Self {
-        self
-    }
-
-    /// Set policy decider from Arc (stub — no-op).
-    pub fn policy_decider_arc(self, _decider: Arc<dyn NetworkPolicyDecider>) -> Self {
-        self
-    }
-
-    /// Set blocked request observer (stub — no-op).
-    pub fn blocked_request_observer<O: BlockedRequestObserver>(self, _observer: O) -> Self {
-        self
-    }
-
-    /// Set blocked request observer from Arc (stub — no-op).
-    pub fn blocked_request_observer_arc(self, _observer: Arc<dyn BlockedRequestObserver>) -> Self {
-        self
-    }
-
-    /// Build the proxy (stub — returns immediately).
-    pub async fn build(self) -> Result<NetworkProxy, ProxyError> {
-        Ok(NetworkProxy)
-    }
-}
-
-// ---- NetworkProxyHandle ----
-
-/// Handle to a running proxy (stub).
-#[derive(Debug)]
-pub struct NetworkProxyHandle;
-
-impl NetworkProxyHandle {
-    /// Wait for the proxy to finish (stub — returns immediately).
-    pub async fn wait(self) -> Result<(), ProxyError> {
-        Ok(())
-    }
-
-    /// Shut down the proxy (stub — no-op).
-    pub async fn shutdown(self) -> Result<(), ProxyError> {
-        Ok(())
-    }
-}
-
-// ---- Runtime types ----
-
-/// Blocked request info (stub).
-#[derive(Debug, Clone)]
-pub struct BlockedRequest;
-
-/// Blocked request arguments (stub).
-#[derive(Debug, Clone)]
-pub struct BlockedRequestArgs;
-
-/// Observer for blocked requests (stub trait).
-pub trait BlockedRequestObserver: Send + Sync + 'static {
-    /// Called when a request is blocked.
-    fn on_blocked(&self, request: &BlockedRequest);
-}
-
-/// Config reloader (stub).
-#[derive(Debug)]
-pub struct ConfigReloader;
-
-/// Config state (stub).
-#[derive(Debug, Clone, Default)]
-pub struct ConfigState;
-
-/// Network proxy state (stub).
-#[derive(Debug, Clone, Default)]
-pub struct NetworkProxyState;
-
-// ---- State / audit types ----
-
-/// Audit metadata for proxy decisions (stub).
-#[derive(Debug, Clone, Default)]
-pub struct NetworkProxyAuditMetadata {
-    /// Session ID.
-    pub session_id: Option<String>,
-    /// Config source.
-    pub config_source: Option<String>,
-}
-
-/// Error for proxy constraints (stub).
-#[derive(Debug, Clone)]
-pub struct NetworkProxyConstraintError;
-
-impl fmt::Display for NetworkProxyConstraintError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        write!(f, "network proxy constraint error (stub)")
-    }
-}
-
-impl std::error::Error for NetworkProxyConstraintError {}
-
-/// Proxy constraints (stub).
-#[derive(Debug, Clone, Default)]
-pub struct NetworkProxyConstraints;
-
-/// Partial network config (stub).
-#[derive(Debug, Clone, Default)]
-pub struct PartialNetworkConfig;
-
-/// Partial proxy config (stub).
-#[derive(Debug, Clone, Default)]
-pub struct PartialNetworkProxyConfig;
-
-/// Build config state (stub — returns default).
-pub fn build_config_state() -> ConfigState {
-    ConfigState
-}
-
-/// Validate policy against constraints (stub — always Ok).
-pub fn validate_policy_against_constraints(
-    _policy: &NetworkProxyConstraints,
-    _config: &ConfigState,
-) -> Result<(), NetworkProxyConstraintError> {
-    Ok(())
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn proxy_env_helpers_do_not_expose_host_proxy_settings() {
-        let mut env = HashMap::from([
-            (
-                "HTTP_PROXY".to_string(),
-                "http://example.invalid:8080".to_string(),
-            ),
-            ("NO_PROXY".to_string(), "localhost".to_string()),
-        ]);
-
-        assert!(!has_proxy_url_env_vars(&env));
-        assert_eq!(proxy_url_env_value(&env), None);
-
-        NetworkProxy.apply_to_env(&mut env);
-
-        assert_eq!(
-            env.get("HTTP_PROXY").map(String::as_str),
-            Some("http://example.invalid:8080")
-        );
-        assert_eq!(env.get("NO_PROXY").map(String::as_str), Some("localhost"));
-    }
-
-    #[test]
-    fn proxy_stub_does_not_open_listening_ports() {
-        let proxy = NetworkProxy;
-
-        assert_eq!(proxy.http_addr(), SocketAddr::from(([127, 0, 0, 1], 0)));
-        assert_eq!(proxy.socks_addr(), SocketAddr::from(([127, 0, 0, 1], 0)));
-        assert!(!proxy.allow_local_binding());
-        assert!(proxy.allow_unix_sockets().is_empty());
-        assert!(!proxy.dangerously_allow_all_unix_sockets());
-    }
-
-    #[test]
-    fn policy_helpers_remain_non_enforcing_stubs() {
-        assert_eq!(normalize_host("Example.COM"), "Example.COM");
-        assert!(
-            validate_policy_against_constraints(&NetworkProxyConstraints, &ConfigState).is_ok()
-        );
-    }
-}
diff --git a/registry/native/stubs/codex-otel/Cargo.toml b/registry/native/stubs/codex-otel/Cargo.toml
deleted file mode 100644
index 3108f1f24..000000000
--- a/registry/native/stubs/codex-otel/Cargo.toml
+++ /dev/null
@@ -1,13 +0,0 @@
-[package]
-name = "codex-otel"
-version = "0.0.0"
-edition = "2021"
-license = "Apache-2.0"
-description = "WASM-compatible stub for codex-otel (no-op telemetry/metrics)"
-
-[lib]
-name = "codex_otel"
-path = "src/lib.rs"
-
-[features]
-disable-default-metrics-exporter = []
diff --git a/registry/native/stubs/codex-otel/src/config.rs b/registry/native/stubs/codex-otel/src/config.rs
deleted file mode 100644
index 9ab96e524..000000000
--- a/registry/native/stubs/codex-otel/src/config.rs
+++ /dev/null
@@ -1,74 +0,0 @@
-//! OTel configuration types (stub).
-
-use std::collections::HashMap;
-use std::path::PathBuf;
-
-/// OTel settings (stub).
-#[derive(Clone, Debug)]
-pub struct OtelSettings {
-    /// Environment name.
-    pub environment: String,
-    /// Service name.
-    pub service_name: String,
-    /// Service version.
-    pub service_version: String,
-    /// Codex home directory.
-    pub codex_home: PathBuf,
-    /// Primary exporter.
-    pub exporter: OtelExporter,
-    /// Trace exporter.
-    pub trace_exporter: OtelExporter,
-    /// Metrics exporter.
-    pub metrics_exporter: OtelExporter,
-    /// Enable runtime metrics.
-    pub runtime_metrics: bool,
-}
-
-/// HTTP protocol for OTLP (stub).
-#[derive(Clone, Debug)]
-pub enum OtelHttpProtocol {
-    /// Binary protobuf.
-    Binary,
-    /// JSON.
-    Json,
-}
-
-/// TLS configuration (stub).
-#[derive(Clone, Debug, Default)]
-pub struct OtelTlsConfig {
-    /// CA certificate path.
-    pub ca_certificate: Option<PathBuf>,
-    /// Client certificate path.
-    pub client_certificate: Option<PathBuf>,
-    /// Client private key path.
-    pub client_private_key: Option<PathBuf>,
-}
-
-/// Exporter configuration (stub).
-#[derive(Clone, Debug)]
-pub enum OtelExporter {
-    /// Disabled.
-    None,
-    /// Statsig (no-op on WASI).
-    Statsig,
-    /// gRPC OTLP (no-op on WASI).
-    OtlpGrpc {
-        /// Endpoint URL.
-        endpoint: String,
-        /// Headers.
-        headers: HashMap<String, String>,
-        /// TLS config.
-        tls: Option<OtelTlsConfig>,
-    },
-    /// HTTP OTLP (no-op on WASI).
-    OtlpHttp {
-        /// Endpoint URL.
-        endpoint: String,
-        /// Headers.
-        headers: HashMap<String, String>,
-        /// Protocol.
-        protocol: OtelHttpProtocol,
-        /// TLS config.
-        tls: Option<OtelTlsConfig>,
-    },
-}
diff --git a/registry/native/stubs/codex-otel/src/lib.rs b/registry/native/stubs/codex-otel/src/lib.rs
deleted file mode 100644
index fd319d343..000000000
--- a/registry/native/stubs/codex-otel/src/lib.rs
+++ /dev/null
@@ -1,169 +0,0 @@
-//! WASM-compatible stub for codex-otel.
-//!
-//! On WASI, telemetry and metrics export over the network is unnecessary.
-//! All initialization is a no-op, all metrics are silently dropped, and
-//! all tracing/context functions return None or no-op.
-
-pub mod config;
-pub mod metrics;
-pub mod provider;
-pub mod trace_context;
-
-use std::fmt;
-use std::time::Duration;
-
-pub use crate::metrics::MetricsError;
-pub use crate::metrics::Result as MetricsResult;
-pub use crate::metrics::runtime_metrics::RuntimeMetricTotals;
-pub use crate::metrics::runtime_metrics::RuntimeMetricsSummary;
-pub use crate::metrics::timer::Timer;
-pub use crate::provider::OtelProvider;
-pub use crate::trace_context::context_from_w3c_trace_context;
-pub use crate::trace_context::current_span_trace_id;
-pub use crate::trace_context::current_span_w3c_trace_context;
-pub use crate::trace_context::set_parent_from_context;
-pub use crate::trace_context::set_parent_from_w3c_trace_context;
-pub use crate::trace_context::span_w3c_trace_context;
-pub use crate::trace_context::traceparent_context_from_env;
-
-/// Sanitize a metric tag value (stub — returns input unchanged).
-pub fn sanitize_metric_tag_value(value: &str) -> String {
-    value.to_string()
-}
-
-/// Tool decision source (stub).
-#[derive(Debug, Clone)]
-pub enum ToolDecisionSource {
-    /// Automated reviewer.
-    AutomatedReviewer,
-    /// Config.
-    Config,
-    /// User.
-    User,
-}
-
-impl fmt::Display for ToolDecisionSource {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::AutomatedReviewer => write!(f, "automated_reviewer"),
-            Self::Config => write!(f, "config"),
-            Self::User => write!(f, "user"),
-        }
-    }
-}
-
-/// Telemetry auth mode (stub).
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum TelemetryAuthMode {
-    /// API key authentication.
-    ApiKey,
-    /// ChatGPT authentication.
-    Chatgpt,
-}
-
-impl fmt::Display for TelemetryAuthMode {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::ApiKey => write!(f, "ApiKey"),
-            Self::Chatgpt => write!(f, "Chatgpt"),
-        }
-    }
-}
-
-/// Start a metrics timer using the globally installed metrics client (stub — always errors).
-pub fn start_global_timer(_name: &str, _tags: &[(&str, &str)]) -> MetricsResult<Timer> {
-    Err(MetricsError::ExporterDisabled)
-}
-
-// ---- AuthEnvTelemetryMetadata ----
-
-/// Auth environment telemetry metadata (stub).
-#[derive(Debug, Clone, Default)]
-pub struct AuthEnvTelemetryMetadata {
-    /// Auth mode.
-    pub auth_mode: Option<String>,
-}
-
-// ---- SessionTelemetryMetadata ----
-
-/// Session telemetry metadata (stub).
-#[derive(Debug, Clone, Default)]
-pub struct SessionTelemetryMetadata;
-
-// ---- SessionTelemetry ----
-
-/// Session telemetry (stub — all operations are no-ops).
-#[derive(Debug, Clone, Default)]
-pub struct SessionTelemetry;
-
-impl SessionTelemetry {
-    /// Create a new SessionTelemetry (stub).
-    pub fn new() -> Self {
-        Self
-    }
-
-    /// Set auth env metadata (stub — no-op).
-    pub fn with_auth_env(self, _auth_env: AuthEnvTelemetryMetadata) -> Self {
-        self
-    }
-
-    /// Set model info (stub — no-op).
-    pub fn with_model(self, _model: &str, _slug: &str) -> Self {
-        self
-    }
-
-    /// Set metrics service name (stub — no-op).
-    pub fn with_metrics_service_name(self, _service_name: &str) -> Self {
-        self
-    }
-
-    /// Set metrics client (stub — no-op).
-    pub fn with_metrics(self, _metrics: crate::metrics::MetricsClient) -> Self {
-        self
-    }
-
-    /// Set metrics client without metadata tags (stub — no-op).
-    pub fn with_metrics_without_metadata_tags(
-        self,
-        _metrics: crate::metrics::MetricsClient,
-    ) -> Self {
-        self
-    }
-
-    /// Set metrics config (stub — no-op).
-    pub fn with_metrics_config(self, _config: crate::metrics::MetricsConfig) -> MetricsResult<Self> {
-        Ok(self)
-    }
-
-    /// Set provider metrics (stub — no-op).
-    pub fn with_provider_metrics(self, _provider: &OtelProvider) -> Self {
-        self
-    }
-
-    /// Record a counter (stub — no-op).
-    pub fn counter(&self, _name: &str, _inc: i64, _tags: &[(&str, &str)]) {}
-
-    /// Record a histogram (stub — no-op).
-    pub fn histogram(&self, _name: &str, _value: i64, _tags: &[(&str, &str)]) {}
-
-    /// Record a duration (stub — no-op).
-    pub fn record_duration(&self, _name: &str, _duration: Duration, _tags: &[(&str, &str)]) {}
-
-    /// Start a timer (stub — always errors).
-    pub fn start_timer(&self, _name: &str, _tags: &[(&str, &str)]) -> Result<Timer, MetricsError> {
-        Err(MetricsError::ExporterDisabled)
-    }
-
-    /// Shut down metrics (stub — no-op).
-    pub fn shutdown_metrics(&self) -> MetricsResult<()> {
-        Ok(())
-    }
-
-    /// Reset runtime metrics (stub — no-op).
-    pub fn reset_runtime_metrics(&self) {}
-
-    /// Get runtime metrics summary (stub — always None).
-    pub fn runtime_metrics_summary(&self) -> Option<RuntimeMetricsSummary> {
-        None
-    }
-}
diff --git a/registry/native/stubs/codex-otel/src/metrics/mod.rs b/registry/native/stubs/codex-otel/src/metrics/mod.rs
deleted file mode 100644
index e1deb3de2..000000000
--- a/registry/native/stubs/codex-otel/src/metrics/mod.rs
+++ /dev/null
@@ -1,152 +0,0 @@
-//! Metrics subsystem (stub — all operations are no-ops).
-
-pub mod names;
-pub mod runtime_metrics;
-pub mod tags;
-pub mod timer;
-
-pub use self::timer::Timer;
-
-use std::fmt;
-use std::time::Duration;
-
-/// Metrics error (stub).
-#[derive(Debug)]
-pub enum MetricsError {
-    /// Metric name cannot be empty.
-    EmptyMetricName,
-    /// Metric name contains invalid characters.
-    InvalidMetricName { name: String },
-    /// Tag component is empty.
-    EmptyTagComponent { label: String },
-    /// Tag component contains invalid characters.
-    InvalidTagComponent { label: String, value: String },
-    /// Exporter is disabled.
-    ExporterDisabled,
-    /// Counter increment must be non-negative.
-    NegativeCounterIncrement { name: String, inc: i64 },
-    /// Invalid config.
-    InvalidConfig { message: String },
-}
-
-impl fmt::Display for MetricsError {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match self {
-            Self::EmptyMetricName => write!(f, "metric name cannot be empty"),
-            Self::InvalidMetricName { name } => {
-                write!(f, "metric name contains invalid characters: {name}")
-            }
-            Self::EmptyTagComponent { label } => write!(f, "{label} cannot be empty"),
-            Self::InvalidTagComponent { label, value } => {
-                write!(f, "{label} contains invalid characters: {value}")
-            }
-            Self::ExporterDisabled => write!(f, "metrics exporter is disabled"),
-            Self::NegativeCounterIncrement { name, inc } => {
-                write!(f, "counter increment must be non-negative for {name}: {inc}")
-            }
-            Self::InvalidConfig { message } => {
-                write!(f, "invalid metrics configuration: {message}")
-            }
-        }
-    }
-}
-
-impl std::error::Error for MetricsError {}
-
-/// Result type for metrics operations.
-pub type Result<T> = std::result::Result<T, MetricsError>;
-
-/// Metrics exporter variant (stub).
-#[derive(Clone, Debug)]
-pub enum MetricsExporter {
-    /// OTLP exporter (no-op on WASI).
-    Otlp(crate::config::OtelExporter),
-}
-
-/// Metrics config (stub).
-#[derive(Clone, Debug)]
-pub struct MetricsConfig {
-    /// Environment name.
-    pub environment: String,
-    /// Service name.
-    pub service_name: String,
-    /// Service version.
-    pub service_version: String,
-}
-
-impl MetricsConfig {
-    /// Create an OTLP config (stub).
-    pub fn otlp(
-        environment: impl Into<String>,
-        service_name: impl Into<String>,
-        service_version: impl Into<String>,
-        _exporter: crate::config::OtelExporter,
-    ) -> Self {
-        Self {
-            environment: environment.into(),
-            service_name: service_name.into(),
-            service_version: service_version.into(),
-        }
-    }
-
-    /// Set export interval (stub — no-op).
-    pub fn with_export_interval(self, _interval: Duration) -> Self {
-        self
-    }
-
-    /// Enable runtime reader (stub — no-op).
-    pub fn with_runtime_reader(self) -> Self {
-        self
-    }
-
-    /// Add a default tag (stub — no-op).
-    pub fn with_tag(self, _key: impl Into<String>, _value: impl Into<String>) -> Result<Self> {
-        Ok(self)
-    }
-}
-
-/// Metrics client (stub — all operations are no-ops).
-#[derive(Clone, Debug)]
-pub struct MetricsClient;
-
-impl MetricsClient {
-    /// Create a new metrics client (stub — returns immediately).
-    pub fn new(_config: MetricsConfig) -> Result<Self> {
-        Ok(Self)
-    }
-
-    /// Record a counter (stub — no-op).
-    pub fn counter(&self, _name: &str, _inc: i64, _tags: &[(&str, &str)]) -> Result<()> {
-        Ok(())
-    }
-
-    /// Record a histogram (stub — no-op).
-    pub fn histogram(&self, _name: &str, _value: i64, _tags: &[(&str, &str)]) -> Result<()> {
-        Ok(())
-    }
-
-    /// Record a duration (stub — no-op).
-    pub fn record_duration(
-        &self,
-        _name: &str,
-        _duration: Duration,
-        _tags: &[(&str, &str)],
-    ) -> Result<()> {
-        Ok(())
-    }
-
-    /// Start a timer (stub — always errors).
-    pub fn start_timer(&self, _name: &str, _tags: &[(&str, &str)]) -> Result<Timer> {
-        Err(MetricsError::ExporterDisabled)
-    }
-
-    /// Shut down (stub — no-op).
-    pub fn shutdown(&self) -> Result<()> {
-        Ok(())
-    }
-}
-
-/// Get the global metrics client (stub — always None).
-pub fn global() -> Option<MetricsClient> {
-    None
-}
diff --git a/registry/native/stubs/codex-otel/src/metrics/names.rs b/registry/native/stubs/codex-otel/src/metrics/names.rs
deleted file mode 100644
index 483227e4e..000000000
--- a/registry/native/stubs/codex-otel/src/metrics/names.rs
+++ /dev/null
@@ -1,34 +0,0 @@
-//! Metric name constants (stub — matches real codex-otel names).
-
-pub const TOOL_CALL_COUNT_METRIC: &str = "codex.tool.call";
-pub const TOOL_CALL_DURATION_METRIC: &str = "codex.tool.call.duration_ms";
-pub const API_CALL_COUNT_METRIC: &str = "codex.api_request";
-pub const API_CALL_DURATION_METRIC: &str = "codex.api_request.duration_ms";
-pub const SSE_EVENT_COUNT_METRIC: &str = "codex.sse_event";
-pub const SSE_EVENT_DURATION_METRIC: &str = "codex.sse_event.duration_ms";
-pub const WEBSOCKET_REQUEST_COUNT_METRIC: &str = "codex.websocket.request";
-pub const WEBSOCKET_REQUEST_DURATION_METRIC: &str = "codex.websocket.request.duration_ms";
-pub const WEBSOCKET_EVENT_COUNT_METRIC: &str = "codex.websocket.event";
-pub const WEBSOCKET_EVENT_DURATION_METRIC: &str = "codex.websocket.event.duration_ms";
-pub const RESPONSES_API_OVERHEAD_DURATION_METRIC: &str = "codex.responses_api_overhead.duration_ms";
-pub const RESPONSES_API_INFERENCE_TIME_DURATION_METRIC: &str =
-    "codex.responses_api_inference_time.duration_ms";
-pub const RESPONSES_API_ENGINE_IAPI_TTFT_DURATION_METRIC: &str =
-    "codex.responses_api_engine_iapi_ttft.duration_ms";
-pub const RESPONSES_API_ENGINE_SERVICE_TTFT_DURATION_METRIC: &str =
-    "codex.responses_api_engine_service_ttft.duration_ms";
-pub const RESPONSES_API_ENGINE_IAPI_TBT_DURATION_METRIC: &str =
-    "codex.responses_api_engine_iapi_tbt.duration_ms";
-pub const RESPONSES_API_ENGINE_SERVICE_TBT_DURATION_METRIC: &str =
-    "codex.responses_api_engine_service_tbt.duration_ms";
-pub const TURN_E2E_DURATION_METRIC: &str = "codex.turn.e2e_duration_ms";
-pub const TURN_TTFT_DURATION_METRIC: &str = "codex.turn.ttft.duration_ms";
-pub const TURN_TTFM_DURATION_METRIC: &str = "codex.turn.ttfm.duration_ms";
-pub const TURN_NETWORK_PROXY_METRIC: &str = "codex.turn.network_proxy";
-pub const TURN_TOOL_CALL_METRIC: &str = "codex.turn.tool.call";
-pub const TURN_TOKEN_USAGE_METRIC: &str = "codex.turn.token_usage";
-pub const PROFILE_USAGE_METRIC: &str = "codex.profile.usage";
-pub const STARTUP_PREWARM_DURATION_METRIC: &str = "codex.startup_prewarm.duration_ms";
-pub const STARTUP_PREWARM_AGE_AT_FIRST_TURN_METRIC: &str =
-    "codex.startup_prewarm.age_at_first_turn_ms";
-pub const THREAD_STARTED_METRIC: &str = "codex.thread.started";
diff --git a/registry/native/stubs/codex-otel/src/metrics/runtime_metrics.rs b/registry/native/stubs/codex-otel/src/metrics/runtime_metrics.rs
deleted file mode 100644
index d76058958..000000000
--- a/registry/native/stubs/codex-otel/src/metrics/runtime_metrics.rs
+++ /dev/null
@@ -1,45 +0,0 @@
-//! Runtime metrics (stub).
-
-/// Cumulative metric totals (stub).
-#[derive(Debug, Clone, Copy, Default)]
-pub struct RuntimeMetricTotals {
-    /// Input tokens.
-    pub input_tokens: u64,
-    /// Output tokens.
-    pub output_tokens: u64,
-}
-
-impl RuntimeMetricTotals {
-    /// Check if empty.
-    pub fn is_empty(self) -> bool {
-        self.input_tokens == 0 && self.output_tokens == 0
-    }
-
-    /// Merge another totals into this one.
-    pub fn merge(&mut self, other: Self) {
-        self.input_tokens = self.input_tokens.saturating_add(other.input_tokens);
-        self.output_tokens = self.output_tokens.saturating_add(other.output_tokens);
-    }
-}
-
-/// Runtime metrics summary (stub).
-#[derive(Debug, Clone, Copy, Default)]
-pub struct RuntimeMetricsSummary {
-    /// Input tokens.
-    pub input_tokens: u64,
-    /// Output tokens.
-    pub output_tokens: u64,
-}
-
-impl RuntimeMetricsSummary {
-    /// Check if empty.
-    pub fn is_empty(self) -> bool {
-        self.input_tokens == 0 && self.output_tokens == 0
-    }
-
-    /// Merge another summary into this one.
-    pub fn merge(&mut self, other: Self) {
-        self.input_tokens = self.input_tokens.saturating_add(other.input_tokens);
-        self.output_tokens = self.output_tokens.saturating_add(other.output_tokens);
-    }
-}
diff --git a/registry/native/stubs/codex-otel/src/metrics/tags.rs b/registry/native/stubs/codex-otel/src/metrics/tags.rs
deleted file mode 100644
index 303125f58..000000000
--- a/registry/native/stubs/codex-otel/src/metrics/tags.rs
+++ /dev/null
@@ -1 +0,0 @@
-//! Metric tag constants (stub).
diff --git a/registry/native/stubs/codex-otel/src/metrics/timer.rs b/registry/native/stubs/codex-otel/src/metrics/timer.rs
deleted file mode 100644
index ae65fec4a..000000000
--- a/registry/native/stubs/codex-otel/src/metrics/timer.rs
+++ /dev/null
@@ -1,22 +0,0 @@
-//! Metrics timer (stub).
-
-use crate::metrics::{MetricsError, Result};
-
-/// Timer that records duration on drop.
-#[derive(Debug)]
-pub struct Timer {
-    _private: (),
-}
-
-impl Timer {
-    /// Record the elapsed duration with additional tags.
-    pub fn record(&self, _additional_tags: &[(&str, &str)]) -> Result<()> {
-        Err(MetricsError::ExporterDisabled)
-    }
-}
-
-impl Drop for Timer {
-    fn drop(&mut self) {
-        // Metrics export is disabled in the WASI stub.
-    }
-}
diff --git a/registry/native/stubs/codex-otel/src/provider.rs b/registry/native/stubs/codex-otel/src/provider.rs
deleted file mode 100644
index e4a6adc6a..000000000
--- a/registry/native/stubs/codex-otel/src/provider.rs
+++ /dev/null
@@ -1,24 +0,0 @@
-//! OTel provider (stub — initialization is a no-op).
-
-use crate::config::OtelSettings;
-use crate::metrics::MetricsClient;
-use std::error::Error;
-
-/// OpenTelemetry provider (stub — all operations are no-ops on WASI).
-#[derive(Debug, Clone)]
-pub struct OtelProvider;
-
-impl OtelProvider {
-    /// Create from settings (stub — always returns None, no provider needed on WASI).
-    pub fn from(_settings: &OtelSettings) -> Result<Option<Self>, Box<dyn Error>> {
-        Ok(None)
-    }
-
-    /// Shut down the provider (stub — no-op).
-    pub fn shutdown(&self) {}
-
-    /// Get metrics client (stub — always None).
-    pub fn metrics(&self) -> Option<&MetricsClient> {
-        None
-    }
-}
diff --git a/registry/native/stubs/codex-otel/src/trace_context.rs b/registry/native/stubs/codex-otel/src/trace_context.rs
deleted file mode 100644
index c62336c28..000000000
--- a/registry/native/stubs/codex-otel/src/trace_context.rs
+++ /dev/null
@@ -1,56 +0,0 @@
-//! Trace context helpers (stub — all functions return None or no-op).
-//!
-//! The real implementation uses opentelemetry Context/Span types.
-//! This stub defines local placeholder types since opentelemetry
-//! cannot compile for WASI.
-
-
-/// W3C trace context (stub — matches codex-protocol W3cTraceContext shape).
-#[derive(Debug, Clone, Default)]
-pub struct W3cTraceContext {
-    /// The traceparent header value.
-    pub traceparent: Option<String>,
-    /// The tracestate header value.
-    pub tracestate: Option<String>,
-}
-
-/// Opaque trace context (stub for opentelemetry::Context).
-#[derive(Debug, Clone)]
-pub struct Context;
-
-/// Opaque span (stub for tracing::Span).
-#[derive(Debug)]
-pub struct Span;
-
-/// Get the W3C trace context for the current span (stub — always None).
-pub fn current_span_w3c_trace_context() -> Option<W3cTraceContext> {
-    None
-}
-
-/// Get the W3C trace context for a given span (stub — always None).
-pub fn span_w3c_trace_context(_span: &Span) -> Option<W3cTraceContext> {
-    None
-}
-
-/// Get the trace ID for the current span (stub — always None).
-pub fn current_span_trace_id() -> Option<String> {
-    None
-}
-
-/// Parse a W3C trace context into an opentelemetry Context (stub — always None).
-pub fn context_from_w3c_trace_context(_trace: &W3cTraceContext) -> Option<Context> {
-    None
-}
-
-/// Set a span's parent from a W3C trace context (stub — always false).
-pub fn set_parent_from_w3c_trace_context(_span: &Span, _trace: &W3cTraceContext) -> bool {
-    false
-}
-
-/// Set a span's parent from a Context (stub — no-op).
-pub fn set_parent_from_context(_span: &Span, _context: Context) {}
-
-/// Get a trace context from environment variables (stub — always None).
-pub fn traceparent_context_from_env() -> Option<Context> {
-    None
-}
diff --git a/registry/native/stubs/codex-otel/tests/metric_names.rs b/registry/native/stubs/codex-otel/tests/metric_names.rs
deleted file mode 100644
index f5aa68dd0..000000000
--- a/registry/native/stubs/codex-otel/tests/metric_names.rs
+++ /dev/null
@@ -1,59 +0,0 @@
-use codex_otel::metrics::names::{
-    API_CALL_COUNT_METRIC, API_CALL_DURATION_METRIC, PROFILE_USAGE_METRIC,
-    RESPONSES_API_ENGINE_IAPI_TBT_DURATION_METRIC, RESPONSES_API_ENGINE_IAPI_TTFT_DURATION_METRIC,
-    RESPONSES_API_ENGINE_SERVICE_TBT_DURATION_METRIC,
-    RESPONSES_API_ENGINE_SERVICE_TTFT_DURATION_METRIC,
-    RESPONSES_API_INFERENCE_TIME_DURATION_METRIC, RESPONSES_API_OVERHEAD_DURATION_METRIC,
-    SSE_EVENT_COUNT_METRIC, SSE_EVENT_DURATION_METRIC, STARTUP_PREWARM_AGE_AT_FIRST_TURN_METRIC,
-    STARTUP_PREWARM_DURATION_METRIC, THREAD_STARTED_METRIC, TOOL_CALL_COUNT_METRIC,
-    TOOL_CALL_DURATION_METRIC, TURN_E2E_DURATION_METRIC, TURN_NETWORK_PROXY_METRIC,
-    TURN_TOKEN_USAGE_METRIC, TURN_TOOL_CALL_METRIC, TURN_TTFM_DURATION_METRIC,
-    TURN_TTFT_DURATION_METRIC, WEBSOCKET_EVENT_COUNT_METRIC, WEBSOCKET_EVENT_DURATION_METRIC,
-    WEBSOCKET_REQUEST_COUNT_METRIC, WEBSOCKET_REQUEST_DURATION_METRIC,
-};
-
-const METRIC_NAMES: &[&str] = &[
-    TOOL_CALL_COUNT_METRIC,
-    TOOL_CALL_DURATION_METRIC,
-    API_CALL_COUNT_METRIC,
-    API_CALL_DURATION_METRIC,
-    SSE_EVENT_COUNT_METRIC,
-    SSE_EVENT_DURATION_METRIC,
-    WEBSOCKET_REQUEST_COUNT_METRIC,
-    WEBSOCKET_REQUEST_DURATION_METRIC,
-    WEBSOCKET_EVENT_COUNT_METRIC,
-    WEBSOCKET_EVENT_DURATION_METRIC,
-    RESPONSES_API_OVERHEAD_DURATION_METRIC,
-    RESPONSES_API_INFERENCE_TIME_DURATION_METRIC,
-    RESPONSES_API_ENGINE_IAPI_TTFT_DURATION_METRIC,
-    RESPONSES_API_ENGINE_SERVICE_TTFT_DURATION_METRIC,
-    RESPONSES_API_ENGINE_IAPI_TBT_DURATION_METRIC,
-    RESPONSES_API_ENGINE_SERVICE_TBT_DURATION_METRIC,
-    TURN_E2E_DURATION_METRIC,
-    TURN_TTFT_DURATION_METRIC,
-    TURN_TTFM_DURATION_METRIC,
-    TURN_NETWORK_PROXY_METRIC,
-    TURN_TOOL_CALL_METRIC,
-    TURN_TOKEN_USAGE_METRIC,
-    PROFILE_USAGE_METRIC,
-    STARTUP_PREWARM_DURATION_METRIC,
-    STARTUP_PREWARM_AGE_AT_FIRST_TURN_METRIC,
-    THREAD_STARTED_METRIC,
-];
-
-#[test]
-fn metric_names_are_static_codex_names() {
-    for name in METRIC_NAMES {
-        assert!(name.starts_with("codex."), "{name}");
-        assert!(
-            name.bytes().all(|byte| byte.is_ascii_lowercase()
-                || byte.is_ascii_digit()
-                || b"._".contains(&byte)),
-            "{name}"
-        );
-
-        for forbidden in ["secret", "password", "authorization", "api_key", "bearer"] {
-            assert!(!name.contains(forbidden), "{name}");
-        }
-    }
-}
diff --git a/registry/native/stubs/codex-otel/tests/metrics_client.rs b/registry/native/stubs/codex-otel/tests/metrics_client.rs
deleted file mode 100644
index 3051bddd0..000000000
--- a/registry/native/stubs/codex-otel/tests/metrics_client.rs
+++ /dev/null
@@ -1,74 +0,0 @@
-use std::collections::HashMap;
-use std::time::Duration;
-
-use codex_otel::config::{OtelExporter, OtelHttpProtocol};
-use codex_otel::metrics::{global, MetricsClient, MetricsConfig};
-
-fn config() -> MetricsConfig {
-    MetricsConfig::otlp("env", "service", "version", OtelExporter::None)
-}
-
-fn configured_exporter_config() -> MetricsConfig {
-    let mut headers = HashMap::new();
-    headers.insert(
-        "authorization".to_string(),
-        "Bearer secret-token".to_string(),
-    );
-
-    MetricsConfig::otlp(
-        "prod",
-        "secret-service",
-        "version",
-        OtelExporter::OtlpHttp {
-            endpoint: "https://telemetry.example.invalid/v1/metrics?token=secret".to_string(),
-            headers,
-            protocol: OtelHttpProtocol::Json,
-            tls: None,
-        },
-    )
-}
-
-#[test]
-fn metrics_client_remains_inert() {
-    assert_eq!(std::mem::size_of::<MetricsClient>(), 0);
-    assert!(global().is_none());
-
-    let client = MetricsClient::new(config()).expect("stub metrics client should initialize");
-
-    assert!(client.counter("", -1, &[("", "bad tag")]).is_ok());
-    assert!(client.histogram("", i64::MIN, &[("tag", "")]).is_ok());
-    assert!(client
-        .record_duration("", Duration::MAX, &[("tag with space", "value")])
-        .is_ok());
-    assert!(client.shutdown().is_ok());
-    assert!(global().is_none());
-}
-
-#[test]
-fn configured_exporter_is_ignored_by_metrics_client() {
-    assert!(global().is_none());
-
-    let client =
-        MetricsClient::new(configured_exporter_config()).expect("configured exporter is inert");
-
-    assert_eq!(std::mem::size_of_val(&client), 0);
-    assert!(client
-        .counter("requests", 1, &[("route", "/secret")])
-        .is_ok());
-    assert!(client.shutdown().is_ok());
-    assert!(global().is_none());
-}
-
-#[test]
-fn metrics_config_tag_and_runtime_options_are_no_ops() {
-    let config = config()
-        .with_export_interval(Duration::MAX)
-        .with_runtime_reader()
-        .with_tag("", "secret-token")
-        .expect("stub tag validation should be disabled");
-
-    assert_eq!(config.environment, "env");
-    assert_eq!(config.service_name, "service");
-    assert_eq!(config.service_version, "version");
-    assert!(global().is_none());
-}
diff --git a/registry/native/stubs/codex-otel/tests/provider.rs b/registry/native/stubs/codex-otel/tests/provider.rs
deleted file mode 100644
index 1ce6f3ad5..000000000
--- a/registry/native/stubs/codex-otel/tests/provider.rs
+++ /dev/null
@@ -1,41 +0,0 @@
-use std::collections::HashMap;
-use std::path::PathBuf;
-
-use codex_otel::config::{OtelExporter, OtelHttpProtocol, OtelSettings, OtelTlsConfig};
-use codex_otel::OtelProvider;
-
-#[test]
-fn configured_exporters_remain_disabled() {
-    let mut headers = HashMap::new();
-    headers.insert("authorization".to_string(), "bearer test-token".to_string());
-
-    let tls = Some(OtelTlsConfig {
-        ca_certificate: Some(PathBuf::from("/certs/ca.pem")),
-        client_certificate: Some(PathBuf::from("/certs/client.pem")),
-        client_private_key: Some(PathBuf::from("/certs/client.key")),
-    });
-
-    let settings = OtelSettings {
-        environment: "test".to_string(),
-        service_name: "codex-otel-stub".to_string(),
-        service_version: "0.0.0".to_string(),
-        codex_home: PathBuf::from("/codex-home"),
-        exporter: OtelExporter::OtlpHttp {
-            endpoint: "https://otel.example.invalid/v1/traces".to_string(),
-            headers: headers.clone(),
-            protocol: OtelHttpProtocol::Json,
-            tls: tls.clone(),
-        },
-        trace_exporter: OtelExporter::OtlpGrpc {
-            endpoint: "https://otel.example.invalid:4317".to_string(),
-            headers: headers.clone(),
-            tls: tls.clone(),
-        },
-        metrics_exporter: OtelExporter::Statsig,
-        runtime_metrics: true,
-    };
-
-    let provider = OtelProvider::from(&settings).expect("stub provider should not fail");
-
-    assert!(provider.is_none());
-}
diff --git a/registry/native/stubs/codex-otel/tests/runtime_metrics.rs b/registry/native/stubs/codex-otel/tests/runtime_metrics.rs
deleted file mode 100644
index e1a1bc28e..000000000
--- a/registry/native/stubs/codex-otel/tests/runtime_metrics.rs
+++ /dev/null
@@ -1,33 +0,0 @@
-use codex_otel::{RuntimeMetricTotals, RuntimeMetricsSummary};
-
-#[test]
-fn runtime_metric_totals_merge_saturates() {
-    let mut totals = RuntimeMetricTotals {
-        input_tokens: u64::MAX - 1,
-        output_tokens: 7,
-    };
-
-    totals.merge(RuntimeMetricTotals {
-        input_tokens: 10,
-        output_tokens: u64::MAX,
-    });
-
-    assert_eq!(totals.input_tokens, u64::MAX);
-    assert_eq!(totals.output_tokens, u64::MAX);
-}
-
-#[test]
-fn runtime_metrics_summary_merge_saturates() {
-    let mut summary = RuntimeMetricsSummary {
-        input_tokens: 12,
-        output_tokens: u64::MAX - 2,
-    };
-
-    summary.merge(RuntimeMetricsSummary {
-        input_tokens: u64::MAX,
-        output_tokens: 10,
-    });
-
-    assert_eq!(summary.input_tokens, u64::MAX);
-    assert_eq!(summary.output_tokens, u64::MAX);
-}
diff --git a/registry/native/stubs/codex-otel/tests/session_telemetry.rs b/registry/native/stubs/codex-otel/tests/session_telemetry.rs
deleted file mode 100644
index 66e7e10a2..000000000
--- a/registry/native/stubs/codex-otel/tests/session_telemetry.rs
+++ /dev/null
@@ -1,42 +0,0 @@
-use std::time::Duration;
-
-use codex_otel::{
-    sanitize_metric_tag_value, AuthEnvTelemetryMetadata, SessionTelemetry, SessionTelemetryMetadata,
-};
-
-#[test]
-fn metric_tag_sanitizer_is_explicit_no_op() {
-    let value = "user/input with spaces and symbols !@#$";
-
-    assert_eq!(sanitize_metric_tag_value(value), value);
-}
-
-#[test]
-fn session_telemetry_drops_invalid_metric_inputs() {
-    let telemetry = SessionTelemetry::new()
-        .with_auth_env(AuthEnvTelemetryMetadata {
-            auth_mode: Some("api-key".to_string()),
-        })
-        .with_model("model/name", "slug")
-        .with_metrics_service_name("service/name");
-
-    telemetry.counter("", -1, &[("", "bad tag")]);
-    telemetry.histogram("", i64::MIN, &[("tag", "")]);
-    telemetry.record_duration("", Duration::MAX, &[("tag with space", "value")]);
-
-    assert!(telemetry.shutdown_metrics().is_ok());
-    assert!(telemetry.runtime_metrics_summary().is_none());
-}
-
-#[test]
-fn session_telemetry_metadata_remains_zero_state() {
-    assert_eq!(std::mem::size_of::<SessionTelemetry>(), 0);
-    assert_eq!(std::mem::size_of::<SessionTelemetryMetadata>(), 0);
-
-    let _metadata = SessionTelemetryMetadata;
-
-    let telemetry = SessionTelemetry::new();
-    telemetry.reset_runtime_metrics();
-
-    assert!(telemetry.runtime_metrics_summary().is_none());
-}
diff --git a/registry/native/stubs/codex-otel/tests/timer.rs b/registry/native/stubs/codex-otel/tests/timer.rs
deleted file mode 100644
index fc80091c0..000000000
--- a/registry/native/stubs/codex-otel/tests/timer.rs
+++ /dev/null
@@ -1,30 +0,0 @@
-use codex_otel::config::OtelExporter;
-use codex_otel::metrics::{MetricsClient, MetricsConfig, MetricsError};
-use codex_otel::{start_global_timer, SessionTelemetry};
-
-fn assert_exporter_disabled(result: Result<codex_otel::Timer, MetricsError>) {
-    assert!(matches!(result, Err(MetricsError::ExporterDisabled)));
-}
-
-#[test]
-fn metrics_client_start_timer_reports_disabled_exporter() {
-    let config = MetricsConfig::otlp(
-        "test",
-        "codex-otel-stub",
-        "0.0.0",
-        OtelExporter::None,
-    );
-    let client = MetricsClient::new(config).expect("stub metrics client should initialize");
-
-    assert_exporter_disabled(client.start_timer("duration", &[]));
-}
-
-#[test]
-fn session_telemetry_start_timer_reports_disabled_exporter() {
-    assert_exporter_disabled(SessionTelemetry::new().start_timer("duration", &[]));
-}
-
-#[test]
-fn global_timer_reports_disabled_exporter() {
-    assert_exporter_disabled(start_global_timer("duration", &[]));
-}
diff --git a/registry/native/stubs/codex-otel/tests/trace_context.rs b/registry/native/stubs/codex-otel/tests/trace_context.rs
deleted file mode 100644
index ce6748138..000000000
--- a/registry/native/stubs/codex-otel/tests/trace_context.rs
+++ /dev/null
@@ -1,57 +0,0 @@
-use codex_otel::trace_context::{
-    context_from_w3c_trace_context, current_span_trace_id, current_span_w3c_trace_context,
-    set_parent_from_context, set_parent_from_w3c_trace_context, span_w3c_trace_context, Span,
-    Context, W3cTraceContext,
-};
-use codex_otel::traceparent_context_from_env;
-
-#[test]
-fn trace_context_strings_are_not_propagated() {
-    let trace = W3cTraceContext {
-        traceparent: Some(format!("00-{}-{}-01", "a".repeat(32), "b".repeat(16))),
-        tracestate: Some("vendor=value,".repeat(4096)),
-    };
-    let span = Span;
-
-    assert!(context_from_w3c_trace_context(&trace).is_none());
-    assert!(!set_parent_from_w3c_trace_context(&span, &trace));
-    assert!(current_span_w3c_trace_context().is_none());
-    assert!(span_w3c_trace_context(&span).is_none());
-    assert!(current_span_trace_id().is_none());
-}
-
-#[test]
-fn environment_trace_context_is_not_observed() {
-    let output = std::process::Command::new(std::env::current_exe().expect("test path"))
-        .arg("--exact")
-        .arg("environment_trace_context_child_probe")
-        .arg("--ignored")
-        .env(
-            "TRACEPARENT",
-            "00-aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa-bbbbbbbbbbbbbbbb-01",
-        )
-        .env("TRACESTATE", "vendor=value")
-        .output()
-        .expect("run child test process");
-
-    assert!(
-        output.status.success(),
-        "child test failed: stdout={}, stderr={}",
-        String::from_utf8_lossy(&output.stdout),
-        String::from_utf8_lossy(&output.stderr)
-    );
-}
-
-#[test]
-fn setting_parent_from_context_is_a_no_op() {
-    set_parent_from_context(&Span, Context);
-
-    assert!(current_span_w3c_trace_context().is_none());
-    assert!(current_span_trace_id().is_none());
-}
-
-#[test]
-#[ignore]
-fn environment_trace_context_child_probe() {
-    assert!(traceparent_context_from_env().is_none());
-}
diff --git a/registry/native/stubs/ctrlc/Cargo.toml b/registry/native/stubs/ctrlc/Cargo.toml
deleted file mode 100644
index 13e83ddf0..000000000
--- a/registry/native/stubs/ctrlc/Cargo.toml
+++ /dev/null
@@ -1,9 +0,0 @@
-[package]
-name = "ctrlc"
-version = "3.5.2"
-edition = "2021"
-license = "Apache-2.0"
-description = "WASM-compatible stub for ctrlc crate (no-op signal handling)"
-
-[features]
-termination = []
diff --git a/registry/native/stubs/ctrlc/src/lib.rs b/registry/native/stubs/ctrlc/src/lib.rs
deleted file mode 100644
index af8ef685d..000000000
--- a/registry/native/stubs/ctrlc/src/lib.rs
+++ /dev/null
@@ -1,62 +0,0 @@
-//! WASM-compatible stub for the ctrlc crate.
-//! Signal handling is not available in WASM.
-
-use std::fmt;
-use std::io;
-
-/// Ctrl-C error.
-#[derive(Debug)]
-pub enum Error {
-    /// Ctrl-C signal handler already registered.
-    MultipleHandlers,
-    /// Unexpected system error.
-    System(std::io::Error),
-}
-
-impl fmt::Display for Error {
-    fn fmt(&self, f: &mut fmt::Formatter) -> fmt::Result {
-        match self {
-            Error::MultipleHandlers => write!(f, "Ctrl-C signal handler already registered"),
-            Error::System(e) => write!(f, "Ctrl-C system error: {}", e),
-        }
-    }
-}
-
-impl std::error::Error for Error {}
-
-/// Platform-specific signal type (stub for WASM).
-pub type Signal = i32;
-
-/// Signal type enum.
-#[derive(Debug)]
-pub enum SignalType {
-    /// Ctrl-C
-    Ctrlc,
-    /// Program termination
-    Termination,
-    /// Other signal
-    Other(Signal),
-}
-
-fn unsupported_signal_registration() -> Error {
-    Error::System(io::Error::new(
-        io::ErrorKind::Unsupported,
-        "signal handlers are not supported on WASI",
-    ))
-}
-
-/// Register signal handler for Ctrl-C.
-pub fn set_handler<F>(_user_handler: F) -> Result<(), Error>
-where
-    F: FnMut() + 'static + Send,
-{
-    Err(unsupported_signal_registration())
-}
-
-/// Register signal handler, erroring if one already exists.
-pub fn try_set_handler<F>(_user_handler: F) -> Result<(), Error>
-where
-    F: FnMut() + 'static + Send,
-{
-    Err(unsupported_signal_registration())
-}
diff --git a/registry/native/stubs/ctrlc/tests/registration.rs b/registry/native/stubs/ctrlc/tests/registration.rs
deleted file mode 100644
index 51a1e7b15..000000000
--- a/registry/native/stubs/ctrlc/tests/registration.rs
+++ /dev/null
@@ -1,19 +0,0 @@
-use std::io::ErrorKind;
-
-fn assert_unsupported(result: Result<(), ctrlc::Error>) {
-    match result {
-        Err(ctrlc::Error::System(error)) => assert_eq!(error.kind(), ErrorKind::Unsupported),
-        Err(ctrlc::Error::MultipleHandlers) => panic!("unexpected multiple handlers error"),
-        Ok(()) => panic!("signal registration unexpectedly succeeded"),
-    }
-}
-
-#[test]
-fn set_handler_reports_unsupported() {
-    assert_unsupported(ctrlc::set_handler(|| {}));
-}
-
-#[test]
-fn try_set_handler_reports_unsupported() {
-    assert_unsupported(ctrlc::try_set_handler(|| {}));
-}
diff --git a/registry/native/stubs/hostname/Cargo.toml b/registry/native/stubs/hostname/Cargo.toml
deleted file mode 100644
index 8f26927f6..000000000
--- a/registry/native/stubs/hostname/Cargo.toml
+++ /dev/null
@@ -1,6 +0,0 @@
-[package]
-name = "hostname"
-version = "0.4.2"
-edition = "2021"
-license = "Apache-2.0"
-description = "WASM-compatible stub for hostname crate (returns 'wasm-host')"
diff --git a/registry/native/stubs/hostname/src/lib.rs b/registry/native/stubs/hostname/src/lib.rs
deleted file mode 100644
index 4e479e0d5..000000000
--- a/registry/native/stubs/hostname/src/lib.rs
+++ /dev/null
@@ -1,11 +0,0 @@
-//! WASM-compatible stub for the hostname crate.
-//! Returns a fixed hostname since WASI has no hostname syscall.
-
-use std::ffi::OsString;
-use std::io;
-
-/// Return the system hostname.
-/// On WASI, always returns "wasm-host".
-pub fn get() -> io::Result<OsString> {
-    Ok(OsString::from("wasm-host"))
-}
diff --git a/registry/native/stubs/hostname/tests/get.rs b/registry/native/stubs/hostname/tests/get.rs
deleted file mode 100644
index 5fa8f6590..000000000
--- a/registry/native/stubs/hostname/tests/get.rs
+++ /dev/null
@@ -1,8 +0,0 @@
-use std::ffi::OsString;
-
-#[test]
-fn get_returns_fixed_guest_safe_hostname() {
-    let hostname = hostname::get().expect("stub hostname should be available");
-
-    assert_eq!(hostname, OsString::from("wasm-host"));
-}
diff --git a/registry/native/stubs/portable-pty-wasi/Cargo.toml b/registry/native/stubs/portable-pty-wasi/Cargo.toml
deleted file mode 100644
index 20280e983..000000000
--- a/registry/native/stubs/portable-pty-wasi/Cargo.toml
+++ /dev/null
@@ -1,120 +0,0 @@
-# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
-#
-# When uploading crates to the registry Cargo will automatically
-# "normalize" Cargo.toml files for maximal compatibility
-# with all versions of Cargo and also rewrite `path` dependencies
-# to registry (e.g., crates.io) dependencies.
-#
-# If you are reading this file be aware that the original Cargo.toml
-# will likely look very different (and much more reasonable).
-# See Cargo.toml.orig for the original contents.
-
-[package]
-edition = "2018"
-name = "portable-pty"
-version = "0.9.0"
-authors = ["Wez Furlong"]
-build = false
-autolib = false
-autobins = false
-autoexamples = false
-autotests = false
-autobenches = false
-description = "Cross platform pty interface"
-documentation = "https://docs.rs/portable-pty"
-readme = false
-license = "MIT"
-repository = "https://github.com/wezterm/wezterm"
-resolver = "2"
-
-[lib]
-name = "portable_pty"
-path = "src/lib.rs"
-
-[[example]]
-name = "bash"
-path = "examples/bash.rs"
-
-[[example]]
-name = "narrow"
-path = "examples/narrow.rs"
-
-[[example]]
-name = "whoami"
-path = "examples/whoami.rs"
-
-[[example]]
-name = "whoami_async"
-path = "examples/whoami_async.rs"
-
-[dependencies.anyhow]
-version = "1.0"
-
-[dependencies.downcast-rs]
-version = "1.0"
-
-[target.'cfg(not(target_os = "wasi"))'.dependencies.filedescriptor]
-version = "0.8.3"
-
-[dependencies.libc]
-version = "0.2"
-
-[dependencies.log]
-version = "0.4"
-
-[dependencies.nix]
-version = "0.28"
-features = [
-    "term",
-    "fs",
-]
-
-[dependencies.serde]
-version = "1.0"
-optional = true
-
-[dependencies.serde_derive]
-version = "1.0"
-optional = true
-
-[target.'cfg(not(target_os = "wasi"))'.dependencies.serial2]
-version = "0.2"
-
-[dependencies.shell-words]
-version = "1.1"
-
-[dev-dependencies.futures]
-version = "0.3"
-
-[dev-dependencies.smol]
-version = "2.0"
-
-[features]
-default = []
-serde_support = [
-    "serde",
-    "serde_derive",
-]
-
-[target."cfg(windows)".dependencies.bitflags]
-version = "1.3"
-
-[target."cfg(windows)".dependencies.lazy_static]
-version = "1.4"
-
-[target."cfg(windows)".dependencies.shared_library]
-version = "0.1"
-
-[target."cfg(windows)".dependencies.winapi]
-version = "0.3"
-features = [
-    "winuser",
-    "consoleapi",
-    "handleapi",
-    "fileapi",
-    "namedpipeapi",
-    "synchapi",
-]
-
-[target."cfg(windows)".dependencies.winreg]
-version = "0.10"
diff --git a/registry/native/stubs/portable-pty-wasi/src/cmdbuilder.rs b/registry/native/stubs/portable-pty-wasi/src/cmdbuilder.rs
deleted file mode 100644
index b4ce50a85..000000000
--- a/registry/native/stubs/portable-pty-wasi/src/cmdbuilder.rs
+++ /dev/null
@@ -1,823 +0,0 @@
-#[cfg(unix)]
-use anyhow::Context;
-#[cfg(feature = "serde_support")]
-use serde_derive::*;
-use std::collections::BTreeMap;
-use std::ffi::{OsStr, OsString};
-#[cfg(windows)]
-use std::os::windows::ffi::OsStrExt;
-#[cfg(unix)]
-use std::path::Component;
-use std::path::Path;
-
-/// Used to deal with Windows having case-insensitive environment variables.
-#[derive(Clone, Debug, PartialEq, PartialOrd)]
-#[cfg_attr(feature = "serde_support", derive(Serialize, Deserialize))]
-struct EnvEntry {
-    /// Whether or not this environment variable came from the base environment,
-    /// as opposed to having been explicitly set by the caller.
-    is_from_base_env: bool,
-
-    /// For case-insensitive platforms, the environment variable key in its preferred casing.
-    preferred_key: OsString,
-
-    /// The environment variable value.
-    value: OsString,
-}
-
-impl EnvEntry {
-    fn map_key(k: OsString) -> OsString {
-        if cfg!(windows) {
-            // Best-effort lowercase transformation of an os string
-            match k.to_str() {
-                Some(s) => s.to_lowercase().into(),
-                None => k,
-            }
-        } else {
-            k
-        }
-    }
-}
-
-#[cfg(unix)]
-fn get_shell() -> String {
-    use nix::unistd::{access, AccessFlags};
-    use std::ffi::CStr;
-    use std::str;
-
-    let ent = unsafe { libc::getpwuid(libc::getuid()) };
-    if !ent.is_null() {
-        let shell = unsafe { CStr::from_ptr((*ent).pw_shell) };
-        match shell.to_str().map(str::to_owned) {
-            Err(err) => {
-                log::warn!(
-                    "passwd database shell could not be \
-                     represented as utf-8: {err:#}, \
-                     falling back to /bin/sh"
-                );
-            }
-            Ok(shell) => {
-                if let Err(err) = access(Path::new(&shell), AccessFlags::X_OK) {
-                    log::warn!(
-                        "passwd database shell={shell:?} which is \
-                         not executable ({err:#}), falling back to /bin/sh"
-                    );
-                } else {
-                    return shell;
-                }
-            }
-        }
-    }
-    "/bin/sh".into()
-}
-
-fn get_base_env() -> BTreeMap<OsString, EnvEntry> {
-    let mut env: BTreeMap<OsString, EnvEntry> = std::env::vars_os()
-        .map(|(key, value)| {
-            (
-                EnvEntry::map_key(key.clone()),
-                EnvEntry {
-                    is_from_base_env: true,
-                    preferred_key: key,
-                    value,
-                },
-            )
-        })
-        .collect();
-
-    #[cfg(unix)]
-    {
-        let key = EnvEntry::map_key("SHELL".into());
-        // Only set the value of SHELL if it isn't already set
-        if !env.contains_key(&key) {
-            env.insert(
-                EnvEntry::map_key("SHELL".into()),
-                EnvEntry {
-                    is_from_base_env: true,
-                    preferred_key: "SHELL".into(),
-                    value: get_shell().into(),
-                },
-            );
-        }
-    }
-
-    #[cfg(windows)]
-    {
-        use std::os::windows::ffi::OsStringExt;
-        use winapi::um::processenv::ExpandEnvironmentStringsW;
-        use winreg::enums::{RegType, HKEY_CURRENT_USER, HKEY_LOCAL_MACHINE};
-        use winreg::types::FromRegValue;
-        use winreg::{RegKey, RegValue};
-
-        fn reg_value_to_string(value: &RegValue) -> anyhow::Result<OsString> {
-            match value.vtype {
-                RegType::REG_EXPAND_SZ => {
-                    let src = unsafe {
-                        std::slice::from_raw_parts(
-                            value.bytes.as_ptr() as *const u16,
-                            value.bytes.len() / 2,
-                        )
-                    };
-                    let size =
-                        unsafe { ExpandEnvironmentStringsW(src.as_ptr(), std::ptr::null_mut(), 0) };
-                    let mut buf = vec![0u16; size as usize + 1];
-                    unsafe {
-                        ExpandEnvironmentStringsW(src.as_ptr(), buf.as_mut_ptr(), buf.len() as u32)
-                    };
-
-                    let mut buf = buf.as_slice();
-                    while let Some(0) = buf.last() {
-                        buf = &buf[0..buf.len() - 1];
-                    }
-                    Ok(OsString::from_wide(buf))
-                }
-                _ => Ok(OsString::from_reg_value(value)?),
-            }
-        }
-
-        if let Ok(sys_env) = RegKey::predef(HKEY_LOCAL_MACHINE)
-            .open_subkey("System\\CurrentControlSet\\Control\\Session Manager\\Environment")
-        {
-            for res in sys_env.enum_values() {
-                if let Ok((name, value)) = res {
-                    if name.to_ascii_lowercase() == "username" {
-                        continue;
-                    }
-                    if let Ok(value) = reg_value_to_string(&value) {
-                        log::trace!("adding SYS env: {:?} {:?}", name, value);
-                        env.insert(
-                            EnvEntry::map_key(name.clone().into()),
-                            EnvEntry {
-                                is_from_base_env: true,
-                                preferred_key: name.into(),
-                                value,
-                            },
-                        );
-                    }
-                }
-            }
-        }
-
-        if let Ok(sys_env) = RegKey::predef(HKEY_CURRENT_USER).open_subkey("Environment") {
-            for res in sys_env.enum_values() {
-                if let Ok((name, value)) = res {
-                    if let Ok(value) = reg_value_to_string(&value) {
-                        // Merge the system and user paths together
-                        let value = if name.to_ascii_lowercase() == "path" {
-                            match env.get(&EnvEntry::map_key(name.clone().into())) {
-                                Some(entry) => {
-                                    let mut result = OsString::new();
-                                    result.push(&entry.value);
-                                    result.push(";");
-                                    result.push(&value);
-                                    result
-                                }
-                                None => value,
-                            }
-                        } else {
-                            value
-                        };
-
-                        log::trace!("adding USER env: {:?} {:?}", name, value);
-                        env.insert(
-                            EnvEntry::map_key(name.clone().into()),
-                            EnvEntry {
-                                is_from_base_env: true,
-                                preferred_key: name.into(),
-                                value,
-                            },
-                        );
-                    }
-                }
-            }
-        }
-    }
-
-    env
-}
-
-/// `CommandBuilder` is used to prepare a command to be spawned into a pty.
-/// The interface is intentionally similar to that of `std::process::Command`.
-#[derive(Clone, Debug, PartialEq)]
-#[cfg_attr(feature = "serde_support", derive(Serialize, Deserialize))]
-pub struct CommandBuilder {
-    args: Vec<OsString>,
-    envs: BTreeMap<OsString, EnvEntry>,
-    cwd: Option<OsString>,
-    #[cfg(unix)]
-    pub(crate) umask: Option<libc::mode_t>,
-    controlling_tty: bool,
-}
-
-impl CommandBuilder {
-    /// Create a new builder instance with argv\[0\] set to the specified
-    /// program.
-    pub fn new<S: AsRef<OsStr>>(program: S) -> Self {
-        Self {
-            args: vec![program.as_ref().to_owned()],
-            envs: get_base_env(),
-            cwd: None,
-            #[cfg(unix)]
-            umask: None,
-            controlling_tty: true,
-        }
-    }
-
-    /// Create a new builder instance from a pre-built argument vector
-    pub fn from_argv(args: Vec<OsString>) -> Self {
-        Self {
-            args,
-            envs: get_base_env(),
-            cwd: None,
-            #[cfg(unix)]
-            umask: None,
-            controlling_tty: true,
-        }
-    }
-
-    /// Set whether we should set the pty as the controlling terminal.
-    /// The default is true, which is usually what you want, but you
-    /// may need to set this to false if you are crossing container
-    /// boundaries (eg: flatpak) to workaround issues like:
-    /// <https://github.com/flatpak/flatpak/issues/3697>
-    /// <https://github.com/flatpak/flatpak/issues/3285>
-    pub fn set_controlling_tty(&mut self, controlling_tty: bool) {
-        self.controlling_tty = controlling_tty;
-    }
-
-    pub fn get_controlling_tty(&self) -> bool {
-        self.controlling_tty
-    }
-
-    /// Create a new builder instance that will run some idea of a default
-    /// program.  Such a builder will panic if `arg` is called on it.
-    pub fn new_default_prog() -> Self {
-        Self {
-            args: vec![],
-            envs: get_base_env(),
-            cwd: None,
-            #[cfg(unix)]
-            umask: None,
-            controlling_tty: true,
-        }
-    }
-
-    /// Returns true if this builder was created via `new_default_prog`
-    pub fn is_default_prog(&self) -> bool {
-        self.args.is_empty()
-    }
-
-    /// Append an argument to the current command line.
-    /// Will panic if called on a builder created via `new_default_prog`.
-    pub fn arg<S: AsRef<OsStr>>(&mut self, arg: S) {
-        if self.is_default_prog() {
-            panic!("attempted to add args to a default_prog builder");
-        }
-        self.args.push(arg.as_ref().to_owned());
-    }
-
-    /// Append a sequence of arguments to the current command line
-    pub fn args<I, S>(&mut self, args: I)
-    where
-        I: IntoIterator<Item = S>,
-        S: AsRef<OsStr>,
-    {
-        for arg in args {
-            self.arg(arg);
-        }
-    }
-
-    pub fn get_argv(&self) -> &Vec<OsString> {
-        &self.args
-    }
-
-    pub fn get_argv_mut(&mut self) -> &mut Vec<OsString> {
-        &mut self.args
-    }
-
-    /// Override the value of an environmental variable
-    pub fn env<K, V>(&mut self, key: K, value: V)
-    where
-        K: AsRef<OsStr>,
-        V: AsRef<OsStr>,
-    {
-        let key: OsString = key.as_ref().into();
-        let value: OsString = value.as_ref().into();
-        self.envs.insert(
-            EnvEntry::map_key(key.clone()),
-            EnvEntry {
-                is_from_base_env: false,
-                preferred_key: key,
-                value: value,
-            },
-        );
-    }
-
-    pub fn env_remove<K>(&mut self, key: K)
-    where
-        K: AsRef<OsStr>,
-    {
-        let key = key.as_ref().into();
-        self.envs.remove(&EnvEntry::map_key(key));
-    }
-
-    pub fn env_clear(&mut self) {
-        self.envs.clear();
-    }
-
-    pub fn get_env<K>(&self, key: K) -> Option<&OsStr>
-    where
-        K: AsRef<OsStr>,
-    {
-        let key = key.as_ref().into();
-        self.envs.get(&EnvEntry::map_key(key)).map(
-            |EnvEntry {
-                 is_from_base_env: _,
-                 preferred_key: _,
-                 value,
-             }| value.as_os_str(),
-        )
-    }
-
-    pub fn cwd<D>(&mut self, dir: D)
-    where
-        D: AsRef<OsStr>,
-    {
-        self.cwd = Some(dir.as_ref().to_owned());
-    }
-
-    pub fn clear_cwd(&mut self) {
-        self.cwd.take();
-    }
-
-    pub fn get_cwd(&self) -> Option<&OsString> {
-        self.cwd.as_ref()
-    }
-
-    /// Iterate over the configured environment. Only includes environment
-    /// variables set by the caller via `env`, not variables set in the base
-    /// environment.
-    pub fn iter_extra_env_as_str(&self) -> impl Iterator<Item = (&str, &str)> {
-        self.envs.values().filter_map(
-            |EnvEntry {
-                 is_from_base_env,
-                 preferred_key,
-                 value,
-             }| {
-                if *is_from_base_env {
-                    None
-                } else {
-                    let key = preferred_key.to_str()?;
-                    let value = value.to_str()?;
-                    Some((key, value))
-                }
-            },
-        )
-    }
-
-    pub fn iter_full_env_as_str(&self) -> impl Iterator<Item = (&str, &str)> {
-        self.envs.values().filter_map(
-            |EnvEntry {
-                 preferred_key,
-                 value,
-                 ..
-             }| {
-                let key = preferred_key.to_str()?;
-                let value = value.to_str()?;
-                Some((key, value))
-            },
-        )
-    }
-
-    /// Return the configured command and arguments as a single string,
-    /// quoted per the unix shell conventions.
-    pub fn as_unix_command_line(&self) -> anyhow::Result<String> {
-        let mut strs = vec![];
-        for arg in &self.args {
-            let s = arg
-                .to_str()
-                .ok_or_else(|| anyhow::anyhow!("argument cannot be represented as utf8"))?;
-            strs.push(s);
-        }
-        Ok(shell_words::join(strs))
-    }
-}
-
-#[cfg(unix)]
-impl CommandBuilder {
-    pub fn umask(&mut self, mask: Option<libc::mode_t>) {
-        self.umask = mask;
-    }
-
-    fn resolve_path(&self) -> Option<&OsStr> {
-        self.get_env("PATH")
-    }
-
-    fn search_path(&self, exe: &OsStr, cwd: &OsStr) -> anyhow::Result<OsString> {
-        use nix::unistd::{access, AccessFlags};
-
-        let exe_path: &Path = exe.as_ref();
-        if exe_path.is_relative() {
-            let cwd: &Path = cwd.as_ref();
-            let mut errors = vec![];
-
-            // If the requested executable is explicitly relative to cwd,
-            // then check only there.
-            if is_cwd_relative_path(exe_path) {
-                let abs_path = cwd.join(exe_path);
-
-                if abs_path.is_dir() {
-                    anyhow::bail!(
-                        "Unable to spawn {} because it is a directory",
-                        abs_path.display()
-                    );
-                } else if access(&abs_path, AccessFlags::X_OK).is_ok() {
-                    return Ok(abs_path.into_os_string());
-                } else if access(&abs_path, AccessFlags::F_OK).is_ok() {
-                    anyhow::bail!(
-                        "Unable to spawn {} because it is not executable",
-                        abs_path.display()
-                    );
-                }
-
-                anyhow::bail!(
-                    "Unable to spawn {} because it does not exist",
-                    abs_path.display()
-                );
-            }
-
-            if let Some(path) = self.resolve_path() {
-                for path in std::env::split_paths(&path) {
-                    let candidate = cwd.join(&path).join(&exe);
-
-                    if candidate.is_dir() {
-                        errors.push(format!("{} exists but is a directory", candidate.display()));
-                    } else if access(&candidate, AccessFlags::X_OK).is_ok() {
-                        return Ok(candidate.into_os_string());
-                    } else if access(&candidate, AccessFlags::F_OK).is_ok() {
-                        errors.push(format!(
-                            "{} exists but is not executable",
-                            candidate.display()
-                        ));
-                    }
-                }
-                errors.push(format!("No viable candidates found in PATH {path:?}"));
-            } else {
-                errors.push("Unable to resolve the PATH".to_string());
-            }
-            anyhow::bail!(
-                "Unable to spawn {} because:\n{}",
-                exe_path.display(),
-                errors.join(".\n")
-            );
-        } else if exe_path.is_dir() {
-            anyhow::bail!(
-                "Unable to spawn {} because it is a directory",
-                exe_path.display()
-            );
-        } else {
-            if let Err(err) = access(exe_path, AccessFlags::X_OK) {
-                if access(exe_path, AccessFlags::F_OK).is_ok() {
-                    anyhow::bail!(
-                        "Unable to spawn {} because it is not executable ({err:#})",
-                        exe_path.display()
-                    );
-                } else {
-                    anyhow::bail!(
-                        "Unable to spawn {} because it doesn't exist on the filesystem ({err:#})",
-                        exe_path.display()
-                    );
-                }
-            }
-
-            Ok(exe.to_owned())
-        }
-    }
-
-    /// Convert the CommandBuilder to a `std::process::Command` instance.
-    pub(crate) fn as_command(&self) -> anyhow::Result<std::process::Command> {
-        use std::os::unix::process::CommandExt;
-
-        let home = self.get_home_dir()?;
-        let dir: &OsStr = self
-            .cwd
-            .as_ref()
-            .map(|dir| dir.as_os_str())
-            .filter(|dir| std::path::Path::new(dir).is_dir())
-            .unwrap_or(home.as_ref());
-        let shell = self.get_shell();
-
-        let mut cmd = if self.is_default_prog() {
-            let mut cmd = std::process::Command::new(&shell);
-
-            // Run the shell as a login shell by prefixing the shell's
-            // basename with `-` and setting that as argv0
-            let basename = shell.rsplit('/').next().unwrap_or(&shell);
-            cmd.arg0(&format!("-{}", basename));
-            cmd
-        } else {
-            let resolved = self.search_path(&self.args[0], dir)?;
-            let mut cmd = std::process::Command::new(&resolved);
-            cmd.arg0(&self.args[0]);
-            cmd.args(&self.args[1..]);
-            cmd
-        };
-
-        cmd.current_dir(dir);
-
-        cmd.env_clear();
-        cmd.env("SHELL", shell);
-        cmd.envs(self.envs.values().map(
-            |EnvEntry {
-                 is_from_base_env: _,
-                 preferred_key,
-                 value,
-             }| (preferred_key.as_os_str(), value.as_os_str()),
-        ));
-
-        Ok(cmd)
-    }
-
-    /// Determine which shell to run.
-    /// We take the contents of the $SHELL env var first, then
-    /// fall back to looking it up from the password database.
-    pub fn get_shell(&self) -> String {
-        use nix::unistd::{access, AccessFlags};
-
-        if let Some(shell) = self.get_env("SHELL").and_then(OsStr::to_str) {
-            match access(shell, AccessFlags::X_OK) {
-                Ok(()) => return shell.into(),
-                Err(err) => log::warn!(
-                    "$SHELL -> {shell:?} which is \
-                     not executable ({err:#}), falling back to password db lookup"
-                ),
-            }
-        }
-
-        get_shell().into()
-    }
-
-    fn get_home_dir(&self) -> anyhow::Result<String> {
-        if let Some(home_dir) = self.get_env("HOME").and_then(OsStr::to_str) {
-            return Ok(home_dir.into());
-        }
-
-        let ent = unsafe { libc::getpwuid(libc::getuid()) };
-        if ent.is_null() {
-            Ok("/".into())
-        } else {
-            use std::ffi::CStr;
-            use std::str;
-            let home = unsafe { CStr::from_ptr((*ent).pw_dir) };
-            home.to_str()
-                .map(str::to_owned)
-                .context("failed to resolve home dir")
-        }
-    }
-}
-
-#[cfg(windows)]
-impl CommandBuilder {
-    fn search_path(&self, exe: &OsStr) -> OsString {
-        if let Some(path) = self.get_env("PATH") {
-            let extensions = self.get_env("PATHEXT").unwrap_or(OsStr::new(".EXE"));
-            for path in std::env::split_paths(&path) {
-                // Check for exactly the user's string in this path dir
-                let candidate = path.join(&exe);
-                if candidate.exists() {
-                    return candidate.into_os_string();
-                }
-
-                // otherwise try tacking on some extensions.
-                // Note that this really replaces the extension in the
-                // user specified path, so this is potentially wrong.
-                for ext in std::env::split_paths(&extensions) {
-                    // PATHEXT includes the leading `.`, but `with_extension`
-                    // doesn't want that
-                    let ext = ext.to_str().expect("PATHEXT entries must be utf8");
-                    let path = path.join(&exe).with_extension(&ext[1..]);
-                    if path.exists() {
-                        return path.into_os_string();
-                    }
-                }
-            }
-        }
-
-        exe.to_owned()
-    }
-
-    pub(crate) fn current_directory(&self) -> Option<Vec<u16>> {
-        let home: Option<&OsStr> = self
-            .get_env("USERPROFILE")
-            .filter(|path| Path::new(path).is_dir());
-        let cwd: Option<&OsStr> = self.cwd.as_deref().filter(|path| Path::new(path).is_dir());
-        let dir: Option<&OsStr> = cwd.or(home);
-
-        dir.map(|dir| {
-            let mut wide = vec![];
-
-            if Path::new(dir).is_relative() {
-                if let Ok(ccwd) = std::env::current_dir() {
-                    wide.extend(ccwd.join(dir).as_os_str().encode_wide());
-                } else {
-                    wide.extend(dir.encode_wide());
-                }
-            } else {
-                wide.extend(dir.encode_wide());
-            }
-
-            wide.push(0);
-            wide
-        })
-    }
-
-    /// Constructs an environment block for this spawn attempt.
-    /// Uses the current process environment as the base and then
-    /// adds/replaces the environment that was specified via the
-    /// `env` methods.
-    pub(crate) fn environment_block(&self) -> Vec<u16> {
-        // encode the environment as wide characters
-        let mut block = vec![];
-
-        for EnvEntry {
-            is_from_base_env: _,
-            preferred_key,
-            value,
-        } in self.envs.values()
-        {
-            block.extend(preferred_key.encode_wide());
-            block.push(b'=' as u16);
-            block.extend(value.encode_wide());
-            block.push(0);
-        }
-        // and a final terminator for CreateProcessW
-        block.push(0);
-
-        block
-    }
-
-    pub fn get_shell(&self) -> String {
-        let exe: OsString = self
-            .get_env("ComSpec")
-            .unwrap_or(OsStr::new("cmd.exe"))
-            .into();
-        exe.into_string()
-            .unwrap_or_else(|_| "%CompSpec%".to_string())
-    }
-
-    pub(crate) fn cmdline(&self) -> anyhow::Result<(Vec<u16>, Vec<u16>)> {
-        let mut cmdline = Vec::<u16>::new();
-
-        let exe: OsString = if self.is_default_prog() {
-            self.get_env("ComSpec")
-                .unwrap_or(OsStr::new("cmd.exe"))
-                .into()
-        } else {
-            self.search_path(&self.args[0])
-        };
-
-        Self::append_quoted(&exe, &mut cmdline);
-
-        // Ensure that we nul terminate the module name, otherwise we'll
-        // ask CreateProcessW to start something random!
-        let mut exe: Vec<u16> = exe.encode_wide().collect();
-        exe.push(0);
-
-        for arg in self.args.iter().skip(1) {
-            cmdline.push(' ' as u16);
-            anyhow::ensure!(
-                !arg.encode_wide().any(|c| c == 0),
-                "invalid encoding for command line argument {:?}",
-                arg
-            );
-            Self::append_quoted(arg, &mut cmdline);
-        }
-        // Ensure that the command line is nul terminated too!
-        cmdline.push(0);
-        Ok((exe, cmdline))
-    }
-
-    // Borrowed from https://github.com/hniksic/rust-subprocess/blob/873dfed165173e52907beb87118b2c0c05d8b8a1/src/popen.rs#L1117
-    // which in turn was translated from ArgvQuote at http://tinyurl.com/zmgtnls
-    fn append_quoted(arg: &OsStr, cmdline: &mut Vec<u16>) {
-        if !arg.is_empty()
-            && !arg.encode_wide().any(|c| {
-                c == ' ' as u16
-                    || c == '\t' as u16
-                    || c == '\n' as u16
-                    || c == '\x0b' as u16
-                    || c == '\"' as u16
-            })
-        {
-            cmdline.extend(arg.encode_wide());
-            return;
-        }
-        cmdline.push('"' as u16);
-
-        let arg: Vec<_> = arg.encode_wide().collect();
-        let mut i = 0;
-        while i < arg.len() {
-            let mut num_backslashes = 0;
-            while i < arg.len() && arg[i] == '\\' as u16 {
-                i += 1;
-                num_backslashes += 1;
-            }
-
-            if i == arg.len() {
-                for _ in 0..num_backslashes * 2 {
-                    cmdline.push('\\' as u16);
-                }
-                break;
-            } else if arg[i] == b'"' as u16 {
-                for _ in 0..num_backslashes * 2 + 1 {
-                    cmdline.push('\\' as u16);
-                }
-                cmdline.push(arg[i]);
-            } else {
-                for _ in 0..num_backslashes {
-                    cmdline.push('\\' as u16);
-                }
-                cmdline.push(arg[i]);
-            }
-            i += 1;
-        }
-        cmdline.push('"' as u16);
-    }
-}
-
-#[cfg(unix)]
-/// Returns true if the path begins with `./` or `../`
-fn is_cwd_relative_path<P: AsRef<Path>>(p: P) -> bool {
-    matches!(
-        p.as_ref().components().next(),
-        Some(Component::CurDir | Component::ParentDir)
-    )
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[cfg(unix)]
-    #[test]
-    fn test_cwd_relative() {
-        assert!(is_cwd_relative_path("."));
-        assert!(is_cwd_relative_path("./foo"));
-        assert!(is_cwd_relative_path("../foo"));
-        assert!(!is_cwd_relative_path("foo"));
-        assert!(!is_cwd_relative_path("/foo"));
-    }
-
-    #[test]
-    fn test_env() {
-        let mut cmd = CommandBuilder::new("dummy");
-        let package_authors = cmd.get_env("CARGO_PKG_AUTHORS");
-        println!("package_authors: {:?}", package_authors);
-        assert!(package_authors == Some(OsStr::new("Wez Furlong")));
-
-        cmd.env("foo key", "foo value");
-        cmd.env("bar key", "bar value");
-
-        let iterated_envs = cmd.iter_extra_env_as_str().collect::<Vec<_>>();
-        println!("iterated_envs: {:?}", iterated_envs);
-        assert!(iterated_envs == vec![("bar key", "bar value"), ("foo key", "foo value")]);
-
-        {
-            let mut cmd = cmd.clone();
-            cmd.env_remove("foo key");
-
-            let iterated_envs = cmd.iter_extra_env_as_str().collect::<Vec<_>>();
-            println!("iterated_envs: {:?}", iterated_envs);
-            assert!(iterated_envs == vec![("bar key", "bar value")]);
-        }
-
-        {
-            let mut cmd = cmd.clone();
-            cmd.env_remove("bar key");
-
-            let iterated_envs = cmd.iter_extra_env_as_str().collect::<Vec<_>>();
-            println!("iterated_envs: {:?}", iterated_envs);
-            assert!(iterated_envs == vec![("foo key", "foo value")]);
-        }
-
-        {
-            let mut cmd = cmd.clone();
-            cmd.env_clear();
-
-            let iterated_envs = cmd.iter_extra_env_as_str().collect::<Vec<_>>();
-            println!("iterated_envs: {:?}", iterated_envs);
-            assert!(iterated_envs.is_empty());
-        }
-    }
-
-    #[cfg(windows)]
-    #[test]
-    fn test_env_case_insensitive_override() {
-        let mut cmd = CommandBuilder::new("dummy");
-        cmd.env("Cargo_Pkg_Authors", "Not Wez");
-        assert!(cmd.get_env("cargo_pkg_authors") == Some(OsStr::new("Not Wez")));
-
-        cmd.env_remove("cARGO_pKG_aUTHORS");
-        assert!(cmd.get_env("CARGO_PKG_AUTHORS").is_none());
-    }
-}
diff --git a/registry/native/stubs/portable-pty-wasi/src/lib.rs b/registry/native/stubs/portable-pty-wasi/src/lib.rs
deleted file mode 100644
index 24e32aa49..000000000
--- a/registry/native/stubs/portable-pty-wasi/src/lib.rs
+++ /dev/null
@@ -1,417 +0,0 @@
-//! This crate provides a cross platform API for working with the
-//! psuedo terminal (pty) interfaces provided by the system.
-//! Unlike other crates in this space, this crate provides a set
-//! of traits that allow selecting from different implementations
-//! at runtime.
-//! This crate is part of [wezterm](https://github.com/wezterm/wezterm).
-//!
-//! ```no_run
-//! use portable_pty::{CommandBuilder, PtySize, native_pty_system, PtySystem};
-//! use anyhow::Error;
-//!
-//! // Use the native pty implementation for the system
-//! let pty_system = native_pty_system();
-//!
-//! // Create a new pty
-//! let mut pair = pty_system.openpty(PtySize {
-//!     rows: 24,
-//!     cols: 80,
-//!     // Not all systems support pixel_width, pixel_height,
-//!     // but it is good practice to set it to something
-//!     // that matches the size of the selected font.  That
-//!     // is more complex than can be shown here in this
-//!     // brief example though!
-//!     pixel_width: 0,
-//!     pixel_height: 0,
-//! })?;
-//!
-//! // Spawn a shell into the pty
-//! let cmd = CommandBuilder::new("bash");
-//! let child = pair.slave.spawn_command(cmd)?;
-//!
-//! // Read and parse output from the pty with reader
-//! let mut reader = pair.master.try_clone_reader()?;
-//!
-//! // Send data to the pty by writing to the master
-//! writeln!(pair.master.take_writer()?, "ls -l\r\n")?;
-//! # Ok::<(), Error>(())
-//! ```
-//!
-use anyhow::Error;
-use downcast_rs::{impl_downcast, Downcast};
-#[cfg(unix)]
-use libc;
-#[cfg(feature = "serde_support")]
-use serde_derive::*;
-use std::io::Result as IoResult;
-#[cfg(windows)]
-use std::os::windows::prelude::{AsRawHandle, RawHandle};
-
-pub mod cmdbuilder;
-pub use cmdbuilder::CommandBuilder;
-
-#[cfg(unix)]
-pub mod unix;
-#[cfg(windows)]
-pub mod win;
-
-#[cfg(not(target_os = "wasi"))]
-pub mod serial;
-#[cfg(target_os = "wasi")]
-pub mod wasi;
-
-/// Represents the size of the visible display area in the pty
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-#[cfg_attr(feature = "serde_support", derive(Serialize, Deserialize))]
-pub struct PtySize {
-    /// The number of lines of text
-    pub rows: u16,
-    /// The number of columns of text
-    pub cols: u16,
-    /// The width of a cell in pixels.  Note that some systems never
-    /// fill this value and ignore it.
-    pub pixel_width: u16,
-    /// The height of a cell in pixels.  Note that some systems never
-    /// fill this value and ignore it.
-    pub pixel_height: u16,
-}
-
-impl Default for PtySize {
-    fn default() -> Self {
-        PtySize {
-            rows: 24,
-            cols: 80,
-            pixel_width: 0,
-            pixel_height: 0,
-        }
-    }
-}
-
-/// Represents the master/control end of the pty
-pub trait MasterPty: Downcast + Send {
-    /// Inform the kernel and thus the child process that the window resized.
-    /// It will update the winsize information maintained by the kernel,
-    /// and generate a signal for the child to notice and update its state.
-    fn resize(&self, size: PtySize) -> Result<(), Error>;
-    /// Retrieves the size of the pty as known by the kernel
-    fn get_size(&self) -> Result<PtySize, Error>;
-    /// Obtain a readable handle; output from the slave(s) is readable
-    /// via this stream.
-    fn try_clone_reader(&self) -> Result<Box<dyn std::io::Read + Send>, Error>;
-    /// Obtain a writable handle; writing to it will send data to the
-    /// slave end.
-    /// Dropping the writer will send EOF to the slave end.
-    /// It is invalid to take the writer more than once.
-    fn take_writer(&self) -> Result<Box<dyn std::io::Write + Send>, Error>;
-
-    /// If applicable to the type of the tty, return the local process id
-    /// of the process group or session leader
-    #[cfg(unix)]
-    fn process_group_leader(&self) -> Option<libc::pid_t>;
-
-    /// If get_termios() and process_group_leader() are both implemented and
-    /// return Some, then as_raw_fd() should return the same underlying fd
-    /// associated with the stream. This is to enable applications that
-    /// "know things" to query similar information for themselves.
-    #[cfg(unix)]
-    fn as_raw_fd(&self) -> Option<unix::RawFd>;
-
-    #[cfg(unix)]
-    fn tty_name(&self) -> Option<std::path::PathBuf>;
-
-    /// If applicable to the type of the tty, return the termios
-    /// associated with the stream
-    #[cfg(unix)]
-    fn get_termios(&self) -> Option<nix::sys::termios::Termios> {
-        None
-    }
-}
-impl_downcast!(MasterPty);
-
-/// Represents a child process spawned into the pty.
-/// This handle can be used to wait for or terminate that child process.
-pub trait Child: std::fmt::Debug + ChildKiller + Downcast + Send {
-    /// Poll the child to see if it has completed.
-    /// Does not block.
-    /// Returns None if the child has not yet terminated,
-    /// else returns its exit status.
-    fn try_wait(&mut self) -> IoResult<Option<ExitStatus>>;
-    /// Blocks execution until the child process has completed,
-    /// yielding its exit status.
-    fn wait(&mut self) -> IoResult<ExitStatus>;
-    /// Returns the process identifier of the child process,
-    /// if applicable
-    fn process_id(&self) -> Option<u32>;
-    /// Returns the process handle of the child process, if applicable.
-    /// Only available on Windows.
-    #[cfg(windows)]
-    fn as_raw_handle(&self) -> Option<std::os::windows::io::RawHandle>;
-}
-impl_downcast!(Child);
-
-/// Represents the ability to signal a Child to terminate
-pub trait ChildKiller: std::fmt::Debug + Downcast + Send {
-    /// Terminate the child process
-    fn kill(&mut self) -> IoResult<()>;
-
-    /// Clone an object that can be split out from the Child in order
-    /// to send it signals independently from a thread that may be
-    /// blocked in `.wait`.
-    fn clone_killer(&self) -> Box<dyn ChildKiller + Send + Sync>;
-}
-impl_downcast!(ChildKiller);
-
-/// Represents the slave side of a pty.
-/// Can be used to spawn processes into the pty.
-pub trait SlavePty {
-    /// Spawns the command specified by the provided CommandBuilder
-    fn spawn_command(&self, cmd: CommandBuilder) -> Result<Box<dyn Child + Send + Sync>, Error>;
-}
-
-/// Represents the exit status of a child process.
-#[derive(Debug, Clone)]
-pub struct ExitStatus {
-    code: u32,
-    signal: Option<String>,
-}
-
-impl ExitStatus {
-    /// Construct an ExitStatus from a process return code
-    pub fn with_exit_code(code: u32) -> Self {
-        Self { code, signal: None }
-    }
-
-    /// Construct an ExitStatus from a signal name
-    pub fn with_signal(signal: &str) -> Self {
-        Self {
-            code: 1,
-            signal: Some(signal.to_string()),
-        }
-    }
-
-    /// Returns true if the status indicates successful completion
-    pub fn success(&self) -> bool {
-        match self.signal {
-            None => self.code == 0,
-            Some(_) => false,
-        }
-    }
-
-    /// Returns the exit code that this ExitStatus was constructed with
-    pub fn exit_code(&self) -> u32 {
-        self.code
-    }
-
-    /// Returns the signal if present that this ExitStatus was constructed with
-    pub fn signal(&self) -> Option<&str> {
-        self.signal.as_deref()
-    }
-}
-
-impl From<std::process::ExitStatus> for ExitStatus {
-    fn from(status: std::process::ExitStatus) -> ExitStatus {
-        #[cfg(unix)]
-        {
-            use std::os::unix::process::ExitStatusExt;
-
-            if let Some(signal) = status.signal() {
-                let signame = unsafe { libc::strsignal(signal) };
-                let signal = if signame.is_null() {
-                    format!("Signal {}", signal)
-                } else {
-                    let signame = unsafe { std::ffi::CStr::from_ptr(signame) };
-                    signame.to_string_lossy().to_string()
-                };
-
-                return ExitStatus {
-                    code: status.code().map(|c| c as u32).unwrap_or(1),
-                    signal: Some(signal),
-                };
-            }
-        }
-
-        let code =
-            status
-                .code()
-                .map(|c| c as u32)
-                .unwrap_or_else(|| if status.success() { 0 } else { 1 });
-
-        ExitStatus { code, signal: None }
-    }
-}
-
-impl std::fmt::Display for ExitStatus {
-    fn fmt(&self, fmt: &mut std::fmt::Formatter) -> std::fmt::Result {
-        if self.success() {
-            write!(fmt, "Success")
-        } else {
-            match &self.signal {
-                Some(sig) => write!(fmt, "Terminated by {}", sig),
-                None => write!(fmt, "Exited with code {}", self.code),
-            }
-        }
-    }
-}
-
-pub struct PtyPair {
-    // slave is listed first so that it is dropped first.
-    // The drop order is stable and specified by rust rfc 1857
-    pub slave: Box<dyn SlavePty + Send>,
-    pub master: Box<dyn MasterPty + Send>,
-}
-
-/// The `PtySystem` trait allows an application to work with multiple
-/// possible Pty implementations at runtime.  This is important on
-/// Windows systems which have a variety of implementations.
-pub trait PtySystem: Downcast {
-    /// Create a new Pty instance with the window size set to the specified
-    /// dimensions.  Returns a (master, slave) Pty pair.  The master side
-    /// is used to drive the slave side.
-    fn openpty(&self, size: PtySize) -> anyhow::Result<PtyPair>;
-}
-impl_downcast!(PtySystem);
-
-impl Child for std::process::Child {
-    fn try_wait(&mut self) -> IoResult<Option<ExitStatus>> {
-        std::process::Child::try_wait(self).map(|s| match s {
-            Some(s) => Some(s.into()),
-            None => None,
-        })
-    }
-
-    fn wait(&mut self) -> IoResult<ExitStatus> {
-        std::process::Child::wait(self).map(Into::into)
-    }
-
-    fn process_id(&self) -> Option<u32> {
-        Some(self.id())
-    }
-
-    #[cfg(windows)]
-    fn as_raw_handle(&self) -> Option<std::os::windows::io::RawHandle> {
-        Some(std::os::windows::io::AsRawHandle::as_raw_handle(self))
-    }
-}
-
-#[derive(Debug)]
-struct ProcessSignaller {
-    pid: Option<u32>,
-
-    #[cfg(windows)]
-    handle: Option<filedescriptor::OwnedHandle>,
-}
-
-#[cfg(windows)]
-impl ChildKiller for ProcessSignaller {
-    fn kill(&mut self) -> IoResult<()> {
-        if let Some(handle) = &self.handle {
-            unsafe {
-                if winapi::um::processthreadsapi::TerminateProcess(handle.as_raw_handle() as _, 127)
-                    == 0
-                {
-                    return Err(std::io::Error::last_os_error());
-                }
-            }
-        }
-        Ok(())
-    }
-    fn clone_killer(&self) -> Box<dyn ChildKiller + Send + Sync> {
-        Box::new(Self {
-            pid: self.pid,
-            handle: self.handle.as_ref().and_then(|h| h.try_clone().ok()),
-        })
-    }
-}
-
-#[cfg(unix)]
-impl ChildKiller for ProcessSignaller {
-    fn kill(&mut self) -> IoResult<()> {
-        if let Some(pid) = self.pid {
-            let result = unsafe { libc::kill(pid as i32, libc::SIGHUP) };
-            if result != 0 {
-                return Err(std::io::Error::last_os_error());
-            }
-        }
-        Ok(())
-    }
-
-    fn clone_killer(&self) -> Box<dyn ChildKiller + Send + Sync> {
-        Box::new(Self { pid: self.pid })
-    }
-}
-
-impl ChildKiller for std::process::Child {
-    fn kill(&mut self) -> IoResult<()> {
-        #[cfg(unix)]
-        {
-            // On unix, we send the SIGHUP signal instead of trying to kill
-            // the process. The default behavior of a process receiving this
-            // signal is to be killed unless it configured a signal handler.
-            let result = unsafe { libc::kill(self.id() as i32, libc::SIGHUP) };
-            if result != 0 {
-                return Err(std::io::Error::last_os_error());
-            }
-
-            // We successfully delivered SIGHUP, but the semantics of Child::kill
-            // are that on success the process is dead or shortly about to
-            // terminate.  Since SIGUP doesn't guarantee termination, we
-            // give the process a bit of a grace period to shutdown or do whatever
-            // it is doing in its signal handler befre we proceed with the
-            // full on kill.
-            for attempt in 0..5 {
-                if attempt > 0 {
-                    std::thread::sleep(std::time::Duration::from_millis(50));
-                }
-
-                if let Ok(Some(_)) = self.try_wait() {
-                    // It completed, so report success!
-                    return Ok(());
-                }
-            }
-
-            // it's still alive after a grace period, so proceed with a kill
-        }
-
-        std::process::Child::kill(self)
-    }
-
-    #[cfg(windows)]
-    fn clone_killer(&self) -> Box<dyn ChildKiller + Send + Sync> {
-        struct RawDup(RawHandle);
-        impl AsRawHandle for RawDup {
-            fn as_raw_handle(&self) -> RawHandle {
-                self.0
-            }
-        }
-
-        Box::new(ProcessSignaller {
-            pid: self.process_id(),
-            handle: Child::as_raw_handle(self)
-                .as_ref()
-                .and_then(|h| filedescriptor::OwnedHandle::dup(&RawDup(*h)).ok()),
-        })
-    }
-
-    #[cfg(unix)]
-    fn clone_killer(&self) -> Box<dyn ChildKiller + Send + Sync> {
-        Box::new(ProcessSignaller {
-            pid: self.process_id(),
-        })
-    }
-
-    #[cfg(target_os = "wasi")]
-    fn clone_killer(&self) -> Box<dyn ChildKiller + Send + Sync> {
-        Box::new(crate::wasi::WasiChild)
-    }
-}
-
-pub fn native_pty_system() -> Box<dyn PtySystem + Send> {
-    Box::new(NativePtySystem::default())
-}
-
-#[cfg(unix)]
-pub type NativePtySystem = unix::UnixPtySystem;
-#[cfg(windows)]
-pub type NativePtySystem = win::conpty::ConPtySystem;
-#[cfg(target_os = "wasi")]
-pub type NativePtySystem = wasi::WasiPtySystem;
diff --git a/registry/native/stubs/portable-pty-wasi/src/serial.rs b/registry/native/stubs/portable-pty-wasi/src/serial.rs
deleted file mode 100644
index 948ba108d..000000000
--- a/registry/native/stubs/portable-pty-wasi/src/serial.rs
+++ /dev/null
@@ -1,305 +0,0 @@
-//! This module implements a serial port based tty.
-//! This is a bit different from the other implementations in that
-//! we cannot explicitly spawn a process into the serial connection,
-//! so we can only use a `CommandBuilder::new_default_prog` with the
-//! `openpty` method.
-//! On most (all?) systems, attempting to open multiple instances of
-//! the same serial port will fail.
-use crate::{
-    Child, ChildKiller, CommandBuilder, ExitStatus, MasterPty, PtyPair, PtySize, PtySystem,
-    SlavePty,
-};
-use anyhow::{ensure, Context};
-use filedescriptor::FileDescriptor;
-use serial2::{CharSize, FlowControl, Parity, SerialPort, StopBits};
-use std::cell::RefCell;
-use std::ffi::{OsStr, OsString};
-use std::io::{Read, Result as IoResult, Write};
-#[cfg(unix)]
-use std::path::PathBuf;
-use std::sync::Arc;
-use std::time::Duration;
-
-type Handle = Arc<SerialPort>;
-
-pub struct SerialTty {
-    port: OsString,
-    baud: u32,
-    char_size: CharSize,
-    parity: Parity,
-    stop_bits: StopBits,
-    flow_control: FlowControl,
-}
-
-impl SerialTty {
-    pub fn new<T: AsRef<OsStr> + ?Sized>(port: &T) -> Self {
-        Self {
-            port: port.as_ref().to_owned(),
-            baud: 9600,
-            char_size: CharSize::Bits8,
-            parity: Parity::None,
-            stop_bits: StopBits::One,
-            flow_control: FlowControl::XonXoff,
-        }
-    }
-
-    pub fn set_baud_rate(&mut self, baud: u32) {
-        self.baud = baud;
-    }
-
-    pub fn set_char_size(&mut self, char_size: CharSize) {
-        self.char_size = char_size;
-    }
-
-    pub fn set_parity(&mut self, parity: Parity) {
-        self.parity = parity;
-    }
-
-    pub fn set_stop_bits(&mut self, stop_bits: StopBits) {
-        self.stop_bits = stop_bits;
-    }
-
-    pub fn set_flow_control(&mut self, flow_control: FlowControl) {
-        self.flow_control = flow_control;
-    }
-}
-
-impl PtySystem for SerialTty {
-    fn openpty(&self, _size: PtySize) -> anyhow::Result<PtyPair> {
-        let mut port = SerialPort::open(&self.port, self.baud)
-            .with_context(|| format!("openpty on serial port {:?}", self.port))?;
-
-        let mut settings = port.get_configuration()?;
-        settings.set_raw();
-        settings.set_baud_rate(self.baud)?;
-        settings.set_char_size(self.char_size);
-        settings.set_flow_control(self.flow_control);
-        settings.set_parity(self.parity);
-        settings.set_stop_bits(self.stop_bits);
-        log::debug!("serial settings: {:#?}", port.get_configuration());
-        port.set_configuration(&settings)?;
-
-        // The timeout needs to be rather short because, at least on Windows,
-        // a read with a long timeout will block a concurrent write from
-        // happening.  In wezterm we tend to have a thread looping on read
-        // while writes happen occasionally from the gui thread, and if we
-        // make this timeout too long we can block the gui thread.
-        port.set_read_timeout(Duration::from_millis(50))?;
-        port.set_write_timeout(Duration::from_millis(50))?;
-
-        let port: Handle = Arc::new(port);
-
-        Ok(PtyPair {
-            slave: Box::new(Slave {
-                port: Arc::clone(&port),
-            }),
-            master: Box::new(Master {
-                port,
-                took_writer: RefCell::new(false),
-            }),
-        })
-    }
-}
-
-struct Slave {
-    port: Handle,
-}
-
-impl SlavePty for Slave {
-    fn spawn_command(&self, cmd: CommandBuilder) -> anyhow::Result<Box<dyn Child + Send + Sync>> {
-        ensure!(
-            cmd.is_default_prog(),
-            "can only use default prog commands with serial tty implementations"
-        );
-        Ok(Box::new(SerialChild {
-            port: Arc::clone(&self.port),
-        }))
-    }
-}
-
-/// There isn't really a child process on the end of the serial connection,
-/// so all of the Child trait impls are NOP
-struct SerialChild {
-    port: Handle,
-}
-
-// An anemic impl of Debug to satisfy some indirect trait bounds
-impl std::fmt::Debug for SerialChild {
-    fn fmt(&self, fmt: &mut std::fmt::Formatter) -> Result<(), std::fmt::Error> {
-        fmt.debug_struct("SerialChild").finish()
-    }
-}
-
-impl Child for SerialChild {
-    fn try_wait(&mut self) -> IoResult<Option<ExitStatus>> {
-        Ok(None)
-    }
-
-    fn wait(&mut self) -> IoResult<ExitStatus> {
-        // There isn't really a child process to wait for,
-        // as the serial connection never really "dies",
-        // however, for something like a USB serial port,
-        // if it is unplugged then it logically is terminated.
-        // We read the CD (carrier detect) signal periodically
-        // to see if the device has gone away: we actually discard
-        // the CD value itself and just look for an error state.
-        // We could potentially also decide to call CD==false the
-        // same thing as the "child" completing.
-        loop {
-            std::thread::sleep(Duration::from_secs(5));
-
-            let port = &self.port;
-            if let Err(err) = port.read_cd() {
-                log::error!("Error reading carrier detect: {:#}", err);
-                return Ok(ExitStatus::with_exit_code(1));
-            }
-        }
-    }
-
-    fn process_id(&self) -> Option<u32> {
-        None
-    }
-
-    #[cfg(windows)]
-    fn as_raw_handle(&self) -> Option<std::os::windows::io::RawHandle> {
-        None
-    }
-}
-
-impl ChildKiller for SerialChild {
-    fn kill(&mut self) -> IoResult<()> {
-        Ok(())
-    }
-
-    fn clone_killer(&self) -> Box<dyn ChildKiller + Send + Sync> {
-        Box::new(SerialChildKiller)
-    }
-}
-
-#[derive(Debug)]
-struct SerialChildKiller;
-
-impl ChildKiller for SerialChildKiller {
-    fn kill(&mut self) -> IoResult<()> {
-        Ok(())
-    }
-
-    fn clone_killer(&self) -> Box<dyn ChildKiller + Send + Sync> {
-        Box::new(SerialChildKiller)
-    }
-}
-
-struct Master {
-    port: Handle,
-    took_writer: RefCell<bool>,
-}
-
-struct MasterWriter {
-    port: Handle,
-}
-
-impl Write for MasterWriter {
-    fn write(&mut self, buf: &[u8]) -> Result<usize, std::io::Error> {
-        self.port.write(buf)
-    }
-
-    fn flush(&mut self) -> Result<(), std::io::Error> {
-        self.port.flush()
-    }
-}
-
-impl MasterPty for Master {
-    fn resize(&self, _size: PtySize) -> anyhow::Result<()> {
-        // Serial ports have no concept of size
-        Ok(())
-    }
-
-    fn get_size(&self) -> anyhow::Result<PtySize> {
-        // Serial ports have no concept of size
-        Ok(PtySize::default())
-    }
-
-    fn try_clone_reader(&self) -> anyhow::Result<Box<dyn std::io::Read + Send>> {
-        // We rely on the fact that SystemPort implements the traits
-        // that expose the underlying file descriptor, and that direct
-        // reads from that return the raw data that we want
-        let fd = FileDescriptor::dup(&*self.port)?;
-        Ok(Box::new(Reader { fd }))
-    }
-
-    fn take_writer(&self) -> anyhow::Result<Box<dyn std::io::Write + Send>> {
-        if *self.took_writer.borrow() {
-            anyhow::bail!("cannot take writer more than once");
-        }
-        *self.took_writer.borrow_mut() = true;
-        let port = Arc::clone(&self.port);
-        Ok(Box::new(MasterWriter { port }))
-    }
-
-    #[cfg(unix)]
-    fn process_group_leader(&self) -> Option<libc::pid_t> {
-        // N/A: there is no local process
-        None
-    }
-
-    #[cfg(unix)]
-    fn as_raw_fd(&self) -> Option<crate::unix::RawFd> {
-        None
-    }
-
-    #[cfg(unix)]
-    fn tty_name(&self) -> Option<PathBuf> {
-        None
-    }
-}
-
-struct Reader {
-    fd: FileDescriptor,
-}
-
-impl Read for Reader {
-    fn read(&mut self, buf: &mut [u8]) -> Result<usize, std::io::Error> {
-        // On windows, this self.fd.read will block for up to the time we set
-        // as the timeout when we set up the port, but on unix it will
-        // never block.
-        loop {
-            #[cfg(unix)]
-            {
-                use filedescriptor::{poll, pollfd, AsRawSocketDescriptor, POLLIN};
-                // The serial crate puts the serial port in non-blocking mode,
-                // so we must explicitly poll for ourselves here to avoid a
-                // busy loop.
-                let mut poll_array = [pollfd {
-                    fd: self.fd.as_socket_descriptor(),
-                    events: POLLIN,
-                    revents: 0,
-                }];
-                let _ = poll(&mut poll_array, None);
-            }
-
-            match self.fd.read(buf) {
-                Ok(0) => {
-                    if cfg!(windows) {
-                        // Read timeout with no data available yet;
-                        // loop and try again.
-                        continue;
-                    }
-                    return Err(std::io::Error::new(
-                        std::io::ErrorKind::UnexpectedEof,
-                        "EOF on serial port",
-                    ));
-                }
-                Ok(size) => {
-                    return Ok(size);
-                }
-                Err(e) => {
-                    if e.kind() == std::io::ErrorKind::WouldBlock {
-                        continue;
-                    }
-                    log::error!("serial read error: {}", e);
-                    return Err(e);
-                }
-            }
-        }
-    }
-}
diff --git a/registry/native/stubs/portable-pty-wasi/src/unix.rs b/registry/native/stubs/portable-pty-wasi/src/unix.rs
deleted file mode 100644
index cc458ce97..000000000
--- a/registry/native/stubs/portable-pty-wasi/src/unix.rs
+++ /dev/null
@@ -1,414 +0,0 @@
-//! Working with pseudo-terminals
-
-use crate::{Child, CommandBuilder, MasterPty, PtyPair, PtySize, PtySystem, SlavePty};
-use anyhow::{bail, Error};
-use filedescriptor::FileDescriptor;
-use libc::{self, winsize};
-use std::cell::RefCell;
-use std::ffi::OsStr;
-use std::io::{Read, Write};
-use std::os::fd::AsFd;
-use std::os::unix::ffi::OsStrExt;
-use std::os::unix::io::{AsRawFd, FromRawFd};
-use std::os::unix::process::CommandExt;
-use std::path::PathBuf;
-use std::{io, mem, ptr};
-
-pub use std::os::unix::io::RawFd;
-
-#[derive(Default)]
-pub struct UnixPtySystem {}
-
-fn openpty(size: PtySize) -> anyhow::Result<(UnixMasterPty, UnixSlavePty)> {
-    let mut master: RawFd = -1;
-    let mut slave: RawFd = -1;
-
-    let mut size = winsize {
-        ws_row: size.rows,
-        ws_col: size.cols,
-        ws_xpixel: size.pixel_width,
-        ws_ypixel: size.pixel_height,
-    };
-
-    let result = unsafe {
-        // BSDish systems may require mut pointers to some args
-        #[allow(clippy::unnecessary_mut_passed)]
-        libc::openpty(
-            &mut master,
-            &mut slave,
-            ptr::null_mut(),
-            ptr::null_mut(),
-            &mut size,
-        )
-    };
-
-    if result != 0 {
-        bail!("failed to openpty: {:?}", io::Error::last_os_error());
-    }
-
-    let tty_name = tty_name(slave);
-
-    let master = UnixMasterPty {
-        fd: PtyFd(unsafe { FileDescriptor::from_raw_fd(master) }),
-        took_writer: RefCell::new(false),
-        tty_name,
-    };
-    let slave = UnixSlavePty {
-        fd: PtyFd(unsafe { FileDescriptor::from_raw_fd(slave) }),
-    };
-
-    // Ensure that these descriptors will get closed when we execute
-    // the child process.  This is done after constructing the Pty
-    // instances so that we ensure that the Ptys get drop()'d if
-    // the cloexec() functions fail (unlikely!).
-    cloexec(master.fd.as_raw_fd())?;
-    cloexec(slave.fd.as_raw_fd())?;
-
-    Ok((master, slave))
-}
-
-impl PtySystem for UnixPtySystem {
-    fn openpty(&self, size: PtySize) -> anyhow::Result<PtyPair> {
-        let (master, slave) = openpty(size)?;
-        Ok(PtyPair {
-            master: Box::new(master),
-            slave: Box::new(slave),
-        })
-    }
-}
-
-struct PtyFd(pub FileDescriptor);
-impl std::ops::Deref for PtyFd {
-    type Target = FileDescriptor;
-    fn deref(&self) -> &FileDescriptor {
-        &self.0
-    }
-}
-impl std::ops::DerefMut for PtyFd {
-    fn deref_mut(&mut self) -> &mut FileDescriptor {
-        &mut self.0
-    }
-}
-
-impl Read for PtyFd {
-    fn read(&mut self, buf: &mut [u8]) -> Result<usize, io::Error> {
-        match self.0.read(buf) {
-            Err(ref e) if e.raw_os_error() == Some(libc::EIO) => {
-                // EIO indicates that the slave pty has been closed.
-                // Treat this as EOF so that std::io::Read::read_to_string
-                // and similar functions gracefully terminate when they
-                // encounter this condition
-                Ok(0)
-            }
-            x => x,
-        }
-    }
-}
-
-fn tty_name(fd: RawFd) -> Option<PathBuf> {
-    let mut buf = vec![0 as std::ffi::c_char; 128];
-
-    loop {
-        let res = unsafe { libc::ttyname_r(fd, buf.as_mut_ptr(), buf.len()) };
-
-        if res == libc::ERANGE {
-            if buf.len() > 64 * 1024 {
-                // on macOS, if the buf is "too big", ttyname_r can
-                // return ERANGE, even though that is supposed to
-                // indicate buf is "too small".
-                return None;
-            }
-            buf.resize(buf.len() * 2, 0 as std::ffi::c_char);
-            continue;
-        }
-
-        return if res == 0 {
-            let cstr = unsafe { std::ffi::CStr::from_ptr(buf.as_ptr()) };
-            let osstr = OsStr::from_bytes(cstr.to_bytes());
-            Some(PathBuf::from(osstr))
-        } else {
-            None
-        };
-    }
-}
-
-/// On Big Sur, Cocoa leaks various file descriptors to child processes,
-/// so we need to make a pass through the open descriptors beyond just the
-/// stdio descriptors and close them all out.
-/// This is approximately equivalent to the darwin `posix_spawnattr_setflags`
-/// option POSIX_SPAWN_CLOEXEC_DEFAULT which is used as a bit of a cheat
-/// on macOS.
-/// On Linux, gnome/mutter leak shell extension fds to wezterm too, so we
-/// also need to make an effort to clean up the mess.
-///
-/// This function enumerates the open filedescriptors in the current process
-/// and then will forcibly call close(2) on each open fd that is numbered
-/// 3 or higher, effectively closing all descriptors except for the stdio
-/// streams.
-///
-/// The implementation of this function relies on `/dev/fd` being available
-/// to provide the list of open fds.  Any errors in enumerating or closing
-/// the fds are silently ignored.
-pub fn close_random_fds() {
-    // FreeBSD, macOS and presumably other BSDish systems have /dev/fd as
-    // a directory listing the current fd numbers for the process.
-    //
-    // On Linux, /dev/fd is a symlink to /proc/self/fd
-    if let Ok(dir) = std::fs::read_dir("/dev/fd") {
-        let mut fds = vec![];
-        for entry in dir {
-            if let Some(num) = entry
-                .ok()
-                .map(|e| e.file_name())
-                .and_then(|s| s.into_string().ok())
-                .and_then(|n| n.parse::<libc::c_int>().ok())
-            {
-                if num > 2 {
-                    fds.push(num);
-                }
-            }
-        }
-        for fd in fds {
-            unsafe {
-                libc::close(fd);
-            }
-        }
-    }
-}
-
-impl PtyFd {
-    fn resize(&self, size: PtySize) -> Result<(), Error> {
-        let ws_size = winsize {
-            ws_row: size.rows,
-            ws_col: size.cols,
-            ws_xpixel: size.pixel_width,
-            ws_ypixel: size.pixel_height,
-        };
-
-        if unsafe {
-            libc::ioctl(
-                self.0.as_raw_fd(),
-                libc::TIOCSWINSZ as _,
-                &ws_size as *const _,
-            )
-        } != 0
-        {
-            bail!(
-                "failed to ioctl(TIOCSWINSZ): {:?}",
-                io::Error::last_os_error()
-            );
-        }
-
-        Ok(())
-    }
-
-    fn get_size(&self) -> Result<PtySize, Error> {
-        let mut size: winsize = unsafe { mem::zeroed() };
-        if unsafe {
-            libc::ioctl(
-                self.0.as_raw_fd(),
-                libc::TIOCGWINSZ as _,
-                &mut size as *mut _,
-            )
-        } != 0
-        {
-            bail!(
-                "failed to ioctl(TIOCGWINSZ): {:?}",
-                io::Error::last_os_error()
-            );
-        }
-        Ok(PtySize {
-            rows: size.ws_row,
-            cols: size.ws_col,
-            pixel_width: size.ws_xpixel,
-            pixel_height: size.ws_ypixel,
-        })
-    }
-
-    fn spawn_command(&self, builder: CommandBuilder) -> anyhow::Result<std::process::Child> {
-        let configured_umask = builder.umask;
-
-        let mut cmd = builder.as_command()?;
-        let controlling_tty = builder.get_controlling_tty();
-
-        unsafe {
-            cmd.stdin(self.as_stdio()?)
-                .stdout(self.as_stdio()?)
-                .stderr(self.as_stdio()?)
-                .pre_exec(move || {
-                    // Clean up a few things before we exec the program
-                    // Clear out any potentially problematic signal
-                    // dispositions that we might have inherited
-                    for signo in &[
-                        libc::SIGCHLD,
-                        libc::SIGHUP,
-                        libc::SIGINT,
-                        libc::SIGQUIT,
-                        libc::SIGTERM,
-                        libc::SIGALRM,
-                    ] {
-                        libc::signal(*signo, libc::SIG_DFL);
-                    }
-
-                    let empty_set: libc::sigset_t = std::mem::zeroed();
-                    libc::sigprocmask(libc::SIG_SETMASK, &empty_set, std::ptr::null_mut());
-
-                    // Establish ourselves as a session leader.
-                    if libc::setsid() == -1 {
-                        return Err(io::Error::last_os_error());
-                    }
-
-                    // Clippy wants us to explicitly cast TIOCSCTTY using
-                    // type::from(), but the size and potentially signedness
-                    // are system dependent, which is why we're using `as _`.
-                    // Suppress this lint for this section of code.
-                    #[allow(clippy::cast_lossless)]
-                    if controlling_tty {
-                        // Set the pty as the controlling terminal.
-                        // Failure to do this means that delivery of
-                        // SIGWINCH won't happen when we resize the
-                        // terminal, among other undesirable effects.
-                        if libc::ioctl(0, libc::TIOCSCTTY as _, 0) == -1 {
-                            return Err(io::Error::last_os_error());
-                        }
-                    }
-
-                    close_random_fds();
-
-                    if let Some(mask) = configured_umask {
-                        libc::umask(mask);
-                    }
-
-                    Ok(())
-                })
-        };
-
-        let mut child = cmd.spawn()?;
-
-        // Ensure that we close out the slave fds that Child retains;
-        // they are not what we need (we need the master side to reference
-        // them) and won't work in the usual way anyway.
-        // In practice these are None, but it seems best to be move them
-        // out in case the behavior of Command changes in the future.
-        child.stdin.take();
-        child.stdout.take();
-        child.stderr.take();
-
-        Ok(child)
-    }
-}
-
-/// Represents the master end of a pty.
-/// The file descriptor will be closed when the Pty is dropped.
-struct UnixMasterPty {
-    fd: PtyFd,
-    took_writer: RefCell<bool>,
-    tty_name: Option<PathBuf>,
-}
-
-/// Represents the slave end of a pty.
-/// The file descriptor will be closed when the Pty is dropped.
-struct UnixSlavePty {
-    fd: PtyFd,
-}
-
-/// Helper function to set the close-on-exec flag for a raw descriptor
-fn cloexec(fd: RawFd) -> Result<(), Error> {
-    let flags = unsafe { libc::fcntl(fd, libc::F_GETFD) };
-    if flags == -1 {
-        bail!(
-            "fcntl to read flags failed: {:?}",
-            io::Error::last_os_error()
-        );
-    }
-    let result = unsafe { libc::fcntl(fd, libc::F_SETFD, flags | libc::FD_CLOEXEC) };
-    if result == -1 {
-        bail!(
-            "fcntl to set CLOEXEC failed: {:?}",
-            io::Error::last_os_error()
-        );
-    }
-    Ok(())
-}
-
-impl SlavePty for UnixSlavePty {
-    fn spawn_command(
-        &self,
-        builder: CommandBuilder,
-    ) -> Result<Box<dyn Child + Send + Sync>, Error> {
-        Ok(Box::new(self.fd.spawn_command(builder)?))
-    }
-}
-
-impl MasterPty for UnixMasterPty {
-    fn resize(&self, size: PtySize) -> Result<(), Error> {
-        self.fd.resize(size)
-    }
-
-    fn get_size(&self) -> Result<PtySize, Error> {
-        self.fd.get_size()
-    }
-
-    fn try_clone_reader(&self) -> Result<Box<dyn Read + Send>, Error> {
-        let fd = PtyFd(self.fd.try_clone()?);
-        Ok(Box::new(fd))
-    }
-
-    fn take_writer(&self) -> Result<Box<dyn Write + Send>, Error> {
-        if *self.took_writer.borrow() {
-            anyhow::bail!("cannot take writer more than once");
-        }
-        *self.took_writer.borrow_mut() = true;
-        let fd = PtyFd(self.fd.try_clone()?);
-        Ok(Box::new(UnixMasterWriter { fd }))
-    }
-
-    fn as_raw_fd(&self) -> Option<RawFd> {
-        Some(self.fd.0.as_raw_fd())
-    }
-
-    fn tty_name(&self) -> Option<PathBuf> {
-        self.tty_name.clone()
-    }
-
-    fn process_group_leader(&self) -> Option<libc::pid_t> {
-        match unsafe { libc::tcgetpgrp(self.fd.0.as_raw_fd()) } {
-            pid if pid > 0 => Some(pid),
-            _ => None,
-        }
-    }
-
-    fn get_termios(&self) -> Option<nix::sys::termios::Termios> {
-        nix::sys::termios::tcgetattr(self.fd.0.as_fd()).ok()
-    }
-}
-
-/// Represents the master end of a pty.
-/// EOT will be sent, and then the file descriptor will be closed when
-/// the Pty is dropped.
-struct UnixMasterWriter {
-    fd: PtyFd,
-}
-
-impl Drop for UnixMasterWriter {
-    fn drop(&mut self) {
-        let mut t: libc::termios = unsafe { std::mem::MaybeUninit::zeroed().assume_init() };
-        if unsafe { libc::tcgetattr(self.fd.0.as_raw_fd(), &mut t) } == 0 {
-            // EOF is only interpreted after a newline, so if it is set,
-            // we send a newline followed by EOF.
-            let eot = t.c_cc[libc::VEOF];
-            if eot != 0 {
-                let _ = self.fd.0.write_all(&[b'\n', eot]);
-            }
-        }
-    }
-}
-
-impl Write for UnixMasterWriter {
-    fn write(&mut self, buf: &[u8]) -> Result<usize, io::Error> {
-        self.fd.write(buf)
-    }
-    fn flush(&mut self) -> Result<(), io::Error> {
-        self.fd.flush()
-    }
-}
diff --git a/registry/native/stubs/portable-pty-wasi/src/wasi.rs b/registry/native/stubs/portable-pty-wasi/src/wasi.rs
deleted file mode 100644
index f6c5f0798..000000000
--- a/registry/native/stubs/portable-pty-wasi/src/wasi.rs
+++ /dev/null
@@ -1,75 +0,0 @@
-//! wasm32-wasip1 backend stub for portable-pty.
-//!
-//! The secure-exec VM brokers process execution via wasi-spawn/wasi-pty; a full
-//! PTY bridge is future work. This backend lets portable-pty (and thus
-//! codex-utils-pty / codex-core) COMPILE for wasip1. PTY operations return an
-//! Unsupported error at runtime (codex's exec falls back to non-PTY execution).
-use std::io::{Read, Result as IoResult, Write};
-
-use anyhow::{bail, Error};
-
-use crate::{Child, ChildKiller, ExitStatus, MasterPty, PtyPair, PtySize, PtySystem, SlavePty};
-
-#[derive(Default)]
-pub struct WasiPtySystem;
-
-impl PtySystem for WasiPtySystem {
-    fn openpty(&self, _size: PtySize) -> anyhow::Result<PtyPair> {
-        Ok(PtyPair {
-            slave: Box::new(WasiSlave),
-            master: Box::new(WasiMaster),
-        })
-    }
-}
-
-struct WasiMaster;
-
-impl MasterPty for WasiMaster {
-    fn resize(&self, _size: PtySize) -> Result<(), Error> {
-        Ok(())
-    }
-    fn get_size(&self) -> Result<PtySize, Error> {
-        Ok(PtySize::default())
-    }
-    fn try_clone_reader(&self) -> Result<Box<dyn Read + Send>, Error> {
-        bail!("PTY reader unsupported on wasm32-wasip1")
-    }
-    fn take_writer(&self) -> Result<Box<dyn Write + Send>, Error> {
-        bail!("PTY writer unsupported on wasm32-wasip1")
-    }
-}
-
-struct WasiSlave;
-
-impl SlavePty for WasiSlave {
-    fn spawn_command(
-        &self,
-        _cmd: crate::CommandBuilder,
-    ) -> Result<Box<dyn Child + Send + Sync>, Error> {
-        bail!("PTY spawn unsupported on wasm32-wasip1 (use non-PTY exec)")
-    }
-}
-
-#[derive(Debug)]
-pub struct WasiChild;
-
-impl Child for WasiChild {
-    fn try_wait(&mut self) -> IoResult<Option<ExitStatus>> {
-        Ok(None)
-    }
-    fn wait(&mut self) -> IoResult<ExitStatus> {
-        Ok(ExitStatus::with_exit_code(1))
-    }
-    fn process_id(&self) -> Option<u32> {
-        None
-    }
-}
-
-impl ChildKiller for WasiChild {
-    fn kill(&mut self) -> IoResult<()> {
-        Ok(())
-    }
-    fn clone_killer(&self) -> Box<dyn ChildKiller + Send + Sync> {
-        Box::new(WasiChild)
-    }
-}
diff --git a/registry/native/stubs/portable-pty-wasi/src/win/conpty.rs b/registry/native/stubs/portable-pty-wasi/src/win/conpty.rs
deleted file mode 100644
index 0e9a18c67..000000000
--- a/registry/native/stubs/portable-pty-wasi/src/win/conpty.rs
+++ /dev/null
@@ -1,117 +0,0 @@
-use crate::cmdbuilder::CommandBuilder;
-use crate::win::psuedocon::PsuedoCon;
-use crate::{Child, MasterPty, PtyPair, PtySize, PtySystem, SlavePty};
-use anyhow::Error;
-use filedescriptor::{FileDescriptor, Pipe};
-use std::sync::{Arc, Mutex};
-use winapi::um::wincon::COORD;
-
-#[derive(Default)]
-pub struct ConPtySystem {}
-
-impl PtySystem for ConPtySystem {
-    fn openpty(&self, size: PtySize) -> anyhow::Result<PtyPair> {
-        let stdin = Pipe::new()?;
-        let stdout = Pipe::new()?;
-
-        let con = PsuedoCon::new(
-            COORD {
-                X: size.cols as i16,
-                Y: size.rows as i16,
-            },
-            stdin.read,
-            stdout.write,
-        )?;
-
-        let master = ConPtyMasterPty {
-            inner: Arc::new(Mutex::new(Inner {
-                con,
-                readable: stdout.read,
-                writable: Some(stdin.write),
-                size,
-            })),
-        };
-
-        let slave = ConPtySlavePty {
-            inner: master.inner.clone(),
-        };
-
-        Ok(PtyPair {
-            master: Box::new(master),
-            slave: Box::new(slave),
-        })
-    }
-}
-
-struct Inner {
-    con: PsuedoCon,
-    readable: FileDescriptor,
-    writable: Option<FileDescriptor>,
-    size: PtySize,
-}
-
-impl Inner {
-    pub fn resize(
-        &mut self,
-        num_rows: u16,
-        num_cols: u16,
-        pixel_width: u16,
-        pixel_height: u16,
-    ) -> Result<(), Error> {
-        self.con.resize(COORD {
-            X: num_cols as i16,
-            Y: num_rows as i16,
-        })?;
-        self.size = PtySize {
-            rows: num_rows,
-            cols: num_cols,
-            pixel_width,
-            pixel_height,
-        };
-        Ok(())
-    }
-}
-
-#[derive(Clone)]
-pub struct ConPtyMasterPty {
-    inner: Arc<Mutex<Inner>>,
-}
-
-pub struct ConPtySlavePty {
-    inner: Arc<Mutex<Inner>>,
-}
-
-impl MasterPty for ConPtyMasterPty {
-    fn resize(&self, size: PtySize) -> anyhow::Result<()> {
-        let mut inner = self.inner.lock().unwrap();
-        inner.resize(size.rows, size.cols, size.pixel_width, size.pixel_height)
-    }
-
-    fn get_size(&self) -> Result<PtySize, Error> {
-        let inner = self.inner.lock().unwrap();
-        Ok(inner.size.clone())
-    }
-
-    fn try_clone_reader(&self) -> anyhow::Result<Box<dyn std::io::Read + Send>> {
-        Ok(Box::new(self.inner.lock().unwrap().readable.try_clone()?))
-    }
-
-    fn take_writer(&self) -> anyhow::Result<Box<dyn std::io::Write + Send>> {
-        Ok(Box::new(
-            self.inner
-                .lock()
-                .unwrap()
-                .writable
-                .take()
-                .ok_or_else(|| anyhow::anyhow!("writer already taken"))?,
-        ))
-    }
-}
-
-impl SlavePty for ConPtySlavePty {
-    fn spawn_command(&self, cmd: CommandBuilder) -> anyhow::Result<Box<dyn Child + Send + Sync>> {
-        let inner = self.inner.lock().unwrap();
-        let child = inner.con.spawn_command(cmd)?;
-        Ok(Box::new(child))
-    }
-}
diff --git a/registry/native/stubs/portable-pty-wasi/src/win/mod.rs b/registry/native/stubs/portable-pty-wasi/src/win/mod.rs
deleted file mode 100644
index 24f8f5369..000000000
--- a/registry/native/stubs/portable-pty-wasi/src/win/mod.rs
+++ /dev/null
@@ -1,149 +0,0 @@
-use crate::{Child, ChildKiller, ExitStatus};
-use anyhow::Context as _;
-use std::io::{Error as IoError, Result as IoResult};
-use std::os::windows::io::{AsRawHandle, RawHandle};
-use std::pin::Pin;
-use std::sync::Mutex;
-use std::task::{Context, Poll};
-use winapi::shared::minwindef::DWORD;
-use winapi::um::minwinbase::STILL_ACTIVE;
-use winapi::um::processthreadsapi::*;
-use winapi::um::synchapi::WaitForSingleObject;
-use winapi::um::winbase::INFINITE;
-
-pub mod conpty;
-mod procthreadattr;
-mod psuedocon;
-
-use filedescriptor::OwnedHandle;
-
-#[derive(Debug)]
-pub struct WinChild {
-    proc: Mutex<OwnedHandle>,
-}
-
-impl WinChild {
-    fn is_complete(&mut self) -> IoResult<Option<ExitStatus>> {
-        let mut status: DWORD = 0;
-        let proc = self.proc.lock().unwrap().try_clone().unwrap();
-        let res = unsafe { GetExitCodeProcess(proc.as_raw_handle() as _, &mut status) };
-        if res != 0 {
-            if status == STILL_ACTIVE {
-                Ok(None)
-            } else {
-                Ok(Some(ExitStatus::with_exit_code(status)))
-            }
-        } else {
-            Ok(None)
-        }
-    }
-
-    fn do_kill(&mut self) -> IoResult<()> {
-        let proc = self.proc.lock().unwrap().try_clone().unwrap();
-        let res = unsafe { TerminateProcess(proc.as_raw_handle() as _, 1) };
-        let err = IoError::last_os_error();
-        if res != 0 {
-            Err(err)
-        } else {
-            Ok(())
-        }
-    }
-}
-
-impl ChildKiller for WinChild {
-    fn kill(&mut self) -> IoResult<()> {
-        self.do_kill().ok();
-        Ok(())
-    }
-
-    fn clone_killer(&self) -> Box<dyn ChildKiller + Send + Sync> {
-        let proc = self.proc.lock().unwrap().try_clone().unwrap();
-        Box::new(WinChildKiller { proc })
-    }
-}
-
-#[derive(Debug)]
-pub struct WinChildKiller {
-    proc: OwnedHandle,
-}
-
-impl ChildKiller for WinChildKiller {
-    fn kill(&mut self) -> IoResult<()> {
-        let res = unsafe { TerminateProcess(self.proc.as_raw_handle() as _, 1) };
-        let err = IoError::last_os_error();
-        if res != 0 {
-            Err(err)
-        } else {
-            Ok(())
-        }
-    }
-
-    fn clone_killer(&self) -> Box<dyn ChildKiller + Send + Sync> {
-        let proc = self.proc.try_clone().unwrap();
-        Box::new(WinChildKiller { proc })
-    }
-}
-
-impl Child for WinChild {
-    fn try_wait(&mut self) -> IoResult<Option<ExitStatus>> {
-        self.is_complete()
-    }
-
-    fn wait(&mut self) -> IoResult<ExitStatus> {
-        if let Ok(Some(status)) = self.try_wait() {
-            return Ok(status);
-        }
-        let proc = self.proc.lock().unwrap().try_clone().unwrap();
-        unsafe {
-            WaitForSingleObject(proc.as_raw_handle() as _, INFINITE);
-        }
-        let mut status: DWORD = 0;
-        let res = unsafe { GetExitCodeProcess(proc.as_raw_handle() as _, &mut status) };
-        if res != 0 {
-            Ok(ExitStatus::with_exit_code(status))
-        } else {
-            Err(IoError::last_os_error())
-        }
-    }
-
-    fn process_id(&self) -> Option<u32> {
-        let res = unsafe { GetProcessId(self.proc.lock().unwrap().as_raw_handle() as _) };
-        if res == 0 {
-            None
-        } else {
-            Some(res)
-        }
-    }
-
-    fn as_raw_handle(&self) -> Option<std::os::windows::io::RawHandle> {
-        let proc = self.proc.lock().unwrap();
-        Some(proc.as_raw_handle())
-    }
-}
-
-impl std::future::Future for WinChild {
-    type Output = anyhow::Result<ExitStatus>;
-
-    fn poll(mut self: Pin<&mut Self>, cx: &mut Context) -> Poll<anyhow::Result<ExitStatus>> {
-        match self.is_complete() {
-            Ok(Some(status)) => Poll::Ready(Ok(status)),
-            Err(err) => Poll::Ready(Err(err).context("Failed to retrieve process exit status")),
-            Ok(None) => {
-                struct PassRawHandleToWaiterThread(pub RawHandle);
-                unsafe impl Send for PassRawHandleToWaiterThread {}
-
-                let proc = self.proc.lock().unwrap().try_clone()?;
-                let handle = PassRawHandleToWaiterThread(proc.as_raw_handle());
-
-                let waker = cx.waker().clone();
-                std::thread::spawn(move || {
-                    unsafe {
-                        WaitForSingleObject(handle.0 as _, INFINITE);
-                    }
-                    waker.wake();
-                });
-                Poll::Pending
-            }
-        }
-    }
-}
diff --git a/registry/native/stubs/portable-pty-wasi/src/win/procthreadattr.rs b/registry/native/stubs/portable-pty-wasi/src/win/procthreadattr.rs
deleted file mode 100644
index ad97d5825..000000000
--- a/registry/native/stubs/portable-pty-wasi/src/win/procthreadattr.rs
+++ /dev/null
@@ -1,72 +0,0 @@
-use crate::win::psuedocon::HPCON;
-use anyhow::{ensure, Error};
-use std::io::Error as IoError;
-use std::{mem, ptr};
-use winapi::shared::minwindef::DWORD;
-use winapi::um::processthreadsapi::*;
-
-const PROC_THREAD_ATTRIBUTE_PSEUDOCONSOLE: usize = 0x00020016;
-
-pub struct ProcThreadAttributeList {
-    data: Vec<u8>,
-}
-
-impl ProcThreadAttributeList {
-    pub fn with_capacity(num_attributes: DWORD) -> Result<Self, Error> {
-        let mut bytes_required: usize = 0;
-        unsafe {
-            InitializeProcThreadAttributeList(
-                ptr::null_mut(),
-                num_attributes,
-                0,
-                &mut bytes_required,
-            )
-        };
-        let mut data = Vec::with_capacity(bytes_required);
-        // We have the right capacity, so force the vec to consider itself
-        // that length.  The contents of those bytes will be maintained
-        // by the win32 apis used in this impl.
-        unsafe { data.set_len(bytes_required) };
-
-        let attr_ptr = data.as_mut_slice().as_mut_ptr() as *mut _;
-        let res = unsafe {
-            InitializeProcThreadAttributeList(attr_ptr, num_attributes, 0, &mut bytes_required)
-        };
-        ensure!(
-            res != 0,
-            "InitializeProcThreadAttributeList failed: {}",
-            IoError::last_os_error()
-        );
-        Ok(Self { data })
-    }
-
-    pub fn as_mut_ptr(&mut self) -> LPPROC_THREAD_ATTRIBUTE_LIST {
-        self.data.as_mut_slice().as_mut_ptr() as *mut _
-    }
-
-    pub fn set_pty(&mut self, con: HPCON) -> Result<(), Error> {
-        let res = unsafe {
-            UpdateProcThreadAttribute(
-                self.as_mut_ptr(),
-                0,
-                PROC_THREAD_ATTRIBUTE_PSEUDOCONSOLE,
-                con,
-                mem::size_of::<HPCON>(),
-                ptr::null_mut(),
-                ptr::null_mut(),
-            )
-        };
-        ensure!(
-            res != 0,
-            "UpdateProcThreadAttribute failed: {}",
-            IoError::last_os_error()
-        );
-        Ok(())
-    }
-}
-
-impl Drop for ProcThreadAttributeList {
-    fn drop(&mut self) {
-        unsafe { DeleteProcThreadAttributeList(self.as_mut_ptr()) };
-    }
-}
diff --git a/registry/native/stubs/portable-pty-wasi/src/win/psuedocon.rs b/registry/native/stubs/portable-pty-wasi/src/win/psuedocon.rs
deleted file mode 100644
index 13c7c5dba..000000000
--- a/registry/native/stubs/portable-pty-wasi/src/win/psuedocon.rs
+++ /dev/null
@@ -1,175 +0,0 @@
-use super::WinChild;
-use crate::cmdbuilder::CommandBuilder;
-use crate::win::procthreadattr::ProcThreadAttributeList;
-use anyhow::{bail, ensure, Error};
-use filedescriptor::{FileDescriptor, OwnedHandle};
-use lazy_static::lazy_static;
-use shared_library::shared_library;
-use std::ffi::OsString;
-use std::io::Error as IoError;
-use std::os::windows::ffi::OsStringExt;
-use std::os::windows::io::{AsRawHandle, FromRawHandle};
-use std::path::Path;
-use std::sync::Mutex;
-use std::{mem, ptr};
-use winapi::shared::minwindef::DWORD;
-use winapi::shared::winerror::{HRESULT, S_OK};
-use winapi::um::handleapi::*;
-use winapi::um::processthreadsapi::*;
-use winapi::um::winbase::{
-    CREATE_UNICODE_ENVIRONMENT, EXTENDED_STARTUPINFO_PRESENT, STARTF_USESTDHANDLES, STARTUPINFOEXW,
-};
-use winapi::um::wincon::COORD;
-use winapi::um::winnt::HANDLE;
-
-pub type HPCON = HANDLE;
-
-pub const PSUEDOCONSOLE_INHERIT_CURSOR: DWORD = 0x1;
-pub const PSEUDOCONSOLE_RESIZE_QUIRK: DWORD = 0x2;
-pub const PSEUDOCONSOLE_WIN32_INPUT_MODE: DWORD = 0x4;
-#[allow(dead_code)]
-pub const PSEUDOCONSOLE_PASSTHROUGH_MODE: DWORD = 0x8;
-
-shared_library!(ConPtyFuncs,
-    pub fn CreatePseudoConsole(
-        size: COORD,
-        hInput: HANDLE,
-        hOutput: HANDLE,
-        flags: DWORD,
-        hpc: *mut HPCON
-    ) -> HRESULT,
-    pub fn ResizePseudoConsole(hpc: HPCON, size: COORD) -> HRESULT,
-    pub fn ClosePseudoConsole(hpc: HPCON),
-);
-
-fn load_conpty() -> ConPtyFuncs {
-    // If the kernel doesn't export these functions then their system is
-    // too old and we cannot run.
-    let kernel = ConPtyFuncs::open(Path::new("kernel32.dll")).expect(
-        "this system does not support conpty.  Windows 10 October 2018 or newer is required",
-    );
-
-    // We prefer to use a sideloaded conpty.dll and openconsole.exe host deployed
-    // alongside the application.  We check for this after checking for kernel
-    // support so that we don't try to proceed and do something crazy.
-    if let Ok(sideloaded) = ConPtyFuncs::open(Path::new("conpty.dll")) {
-        sideloaded
-    } else {
-        kernel
-    }
-}
-
-lazy_static! {
-    static ref CONPTY: ConPtyFuncs = load_conpty();
-}
-
-pub struct PsuedoCon {
-    con: HPCON,
-}
-
-unsafe impl Send for PsuedoCon {}
-unsafe impl Sync for PsuedoCon {}
-
-impl Drop for PsuedoCon {
-    fn drop(&mut self) {
-        unsafe { (CONPTY.ClosePseudoConsole)(self.con) };
-    }
-}
-
-impl PsuedoCon {
-    pub fn new(size: COORD, input: FileDescriptor, output: FileDescriptor) -> Result<Self, Error> {
-        let mut con: HPCON = INVALID_HANDLE_VALUE;
-        let result = unsafe {
-            (CONPTY.CreatePseudoConsole)(
-                size,
-                input.as_raw_handle() as _,
-                output.as_raw_handle() as _,
-                PSUEDOCONSOLE_INHERIT_CURSOR
-                    | PSEUDOCONSOLE_RESIZE_QUIRK
-                    | PSEUDOCONSOLE_WIN32_INPUT_MODE,
-                &mut con,
-            )
-        };
-        ensure!(
-            result == S_OK,
-            "failed to create psuedo console: HRESULT {}",
-            result
-        );
-        Ok(Self { con })
-    }
-
-    pub fn resize(&self, size: COORD) -> Result<(), Error> {
-        let result = unsafe { (CONPTY.ResizePseudoConsole)(self.con, size) };
-        ensure!(
-            result == S_OK,
-            "failed to resize console to {}x{}: HRESULT: {}",
-            size.X,
-            size.Y,
-            result
-        );
-        Ok(())
-    }
-
-    pub fn spawn_command(&self, cmd: CommandBuilder) -> anyhow::Result<WinChild> {
-        let mut si: STARTUPINFOEXW = unsafe { mem::zeroed() };
-        si.StartupInfo.cb = mem::size_of::<STARTUPINFOEXW>() as u32;
-        // Explicitly set the stdio handles as invalid handles otherwise
-        // we can end up with a weird state where the spawned process can
-        // inherit the explicitly redirected output handles from its parent.
-        // For example, when daemonizing wezterm-mux-server, the stdio handles
-        // are redirected to a log file and the spawned process would end up
-        // writing its output there instead of to the pty we just created.
-        si.StartupInfo.dwFlags = STARTF_USESTDHANDLES;
-        si.StartupInfo.hStdInput = INVALID_HANDLE_VALUE;
-        si.StartupInfo.hStdOutput = INVALID_HANDLE_VALUE;
-        si.StartupInfo.hStdError = INVALID_HANDLE_VALUE;
-
-        let mut attrs = ProcThreadAttributeList::with_capacity(1)?;
-        attrs.set_pty(self.con)?;
-        si.lpAttributeList = attrs.as_mut_ptr();
-
-        let mut pi: PROCESS_INFORMATION = unsafe { mem::zeroed() };
-
-        let (mut exe, mut cmdline) = cmd.cmdline()?;
-        let cmd_os = OsString::from_wide(&cmdline);
-
-        let cwd = cmd.current_directory();
-
-        let res = unsafe {
-            CreateProcessW(
-                exe.as_mut_slice().as_mut_ptr(),
-                cmdline.as_mut_slice().as_mut_ptr(),
-                ptr::null_mut(),
-                ptr::null_mut(),
-                0,
-                EXTENDED_STARTUPINFO_PRESENT | CREATE_UNICODE_ENVIRONMENT,
-                cmd.environment_block().as_mut_slice().as_mut_ptr() as *mut _,
-                cwd.as_ref()
-                    .map(|c| c.as_slice().as_ptr())
-                    .unwrap_or(ptr::null()),
-                &mut si.StartupInfo,
-                &mut pi,
-            )
-        };
-        if res == 0 {
-            let err = IoError::last_os_error();
-            let msg = format!(
-                "CreateProcessW `{:?}` in cwd `{:?}` failed: {}",
-                cmd_os,
-                cwd.as_ref().map(|c| OsString::from_wide(c)),
-                err
-            );
-            log::error!("{}", msg);
-            bail!("{}", msg);
-        }
-
-        // Make sure we close out the thread handle so we don't leak it;
-        // we do this simply by making it owned
-        let _main_thread = unsafe { OwnedHandle::from_raw_handle(pi.hThread as _) };
-        let proc = unsafe { OwnedHandle::from_raw_handle(pi.hProcess as _) };
-
-        Ok(WinChild {
-            proc: Mutex::new(proc),
-        })
-    }
-}
diff --git a/registry/native/stubs/reqwest-shim/Cargo.toml b/registry/native/stubs/reqwest-shim/Cargo.toml
deleted file mode 100644
index f597af2fe..000000000
--- a/registry/native/stubs/reqwest-shim/Cargo.toml
+++ /dev/null
@@ -1,64 +0,0 @@
-# reqwest-shim: a wasm32-wasip1 drop-in for `reqwest` 0.12, backed by secure-exec
-# `wasi-http` (host_net TCP/TLS). Wired in via `[patch.crates-io] reqwest = { path }`
-# ONLY once it compiles against codex-exec's whole subtree — patching it in early
-# would break every command's `make wasm` build.
-#
-# Scope (from codex-client usage, verified): Client/ClientBuilder/RequestBuilder/
-# Response/Body/Method/header/StatusCode/IntoUrl/Error/Certificate; methods
-# request/get/post, headers/header/json/body/timeout/build/send, status/json/text/
-# bytes/bytes_stream. SSE streaming maps to wasi-http SseReader.
-[package]
-name = "reqwest"
-version = "0.12.28"
-edition = "2021"
-license = "MIT OR Apache-2.0"
-description = "WASI (wasm32-wasip1) shim for reqwest 0.12 backed by wasi-http"
-
-[lib]
-name = "reqwest"
-path = "src/lib.rs"
-
-[dependencies]
-wasi-http = { package = "secureexec-wasi-http", path = "../../crates/libs/wasi-http" }
-http = "1"
-bytes = "1"
-serde = "1"
-serde_json = "1"
-serde_urlencoded = "0.7"
-futures-core = "0.3"
-url = "2"
-base64 = "0.22"
-
-# All reqwest 0.12 features declared as no-ops so this [patch] satisfies every
-# consumer's feature request (TLS is host-brokered; compression/dns are inert in
-# the shim). Without these, cargo refuses the patch (e.g. sentry wants default-tls).
-[features]
-default = ["default-tls"]
-default-tls = []
-native-tls = []
-native-tls-vendored = []
-native-tls-alpn = []
-rustls-tls = []
-rustls-tls-manual-roots = []
-rustls-tls-manual-roots-no-provider = []
-rustls-tls-webpki-roots = []
-rustls-tls-webpki-roots-no-provider = []
-rustls-tls-native-roots = []
-rustls-tls-native-roots-no-provider = []
-rustls-tls-no-provider = []
-blocking = []
-charset = []
-cookies = []
-gzip = []
-brotli = []
-zstd = []
-deflate = []
-json = []
-multipart = []
-stream = []
-socks = []
-hickory-dns = []
-trust-dns = []
-http2 = []
-http3 = []
-macos-system-configuration = []
diff --git a/registry/native/stubs/reqwest-shim/src/lib.rs b/registry/native/stubs/reqwest-shim/src/lib.rs
deleted file mode 100644
index aee774f00..000000000
--- a/registry/native/stubs/reqwest-shim/src/lib.rs
+++ /dev/null
@@ -1,698 +0,0 @@
-//! `reqwest` 0.12 API shim for wasm32-wasip1, backed by secure-exec `wasi-http`
-//! (host_net TCP/TLS). Drop-in target for `[patch.crates-io] reqwest`.
-//!
-//! STATUS: scaffold. The buffered request/response path is implemented against
-//! `wasi_http::HttpClient::send`. The streaming path (`Response::bytes_stream`)
-//! currently yields the fully-buffered body as a single chunk — see the TODO on
-//! `bytes_stream`. True incremental streaming needs a RAW chunk reader added to
-//! `wasi-http` (its `SseReader` SSE-parses, but codex's `transport.rs` does its
-//! own SSE parsing over `bytes_stream`, so the shim must surface raw bytes).
-//!
-//! Not yet wired into `[patch.crates-io]` — doing so before it compiles against
-//! codex-exec's whole subtree would break every command's `make wasm` build.
-
-use std::time::Duration;
-
-use bytes::Bytes;
-pub use http::Method;
-pub use http::StatusCode;
-
-/// `reqwest::header` — reqwest re-exports the `http` crate's header types.
-pub mod header {
-    pub use http::header::*;
-    pub use http::HeaderMap;
-    pub use http::HeaderName;
-    pub use http::HeaderValue;
-}
-
-pub use header::HeaderMap;
-
-/// `reqwest::redirect` — redirect policy. Redirects are followed (or not) host-side
-/// by wasi-http; this surface exists so codex/rmcp's builder calls compile.
-pub mod redirect {
-    #[derive(Clone, Debug)]
-    pub struct Policy;
-    impl Policy {
-        pub fn none() -> Self {
-            Policy
-        }
-        pub fn limited(_max: usize) -> Self {
-            Policy
-        }
-        pub fn default() -> Self {
-            Policy
-        }
-    }
-    impl Default for Policy {
-        fn default() -> Self {
-            Policy
-        }
-    }
-}
-
-/// `reqwest::Url` IS the `url` crate's `Url` (reqwest re-exports it), so all of
-/// `host_str`/`join`/`path`/`scheme`/`set_path`/… come for free.
-pub use url::Url;
-
-fn parse_url(input: &str) -> Result<Url, Error> {
-    Url::parse(input).map_err(|e| Error::new(e.to_string()))
-}
-
-/// Yield control to the runtime exactly once.
-///
-/// Returns `Pending` on the first poll (after registering an immediate wakeup so
-/// the task is re-polled right away) and `Ready` on the second. On the
-/// single-threaded VM this is a cooperative yield point: while a body recv would
-/// block, the runtime gets to drive other tasks before we retry. Same shape as
-/// the non-blocking pipe-I/O fix.
-fn yield_now() -> YieldNow {
-    YieldNow { yielded: false }
-}
-
-struct YieldNow {
-    yielded: bool,
-}
-
-impl std::future::Future for YieldNow {
-    type Output = ();
-    fn poll(
-        mut self: std::pin::Pin<&mut Self>,
-        cx: &mut std::task::Context<'_>,
-    ) -> std::task::Poll<()> {
-        if self.yielded {
-            std::task::Poll::Ready(())
-        } else {
-            self.yielded = true;
-            cx.waker().wake_by_ref();
-            std::task::Poll::Pending
-        }
-    }
-}
-
-/// `reqwest::IntoUrl` — codex/rmcp pass &str/String/Url.
-pub trait IntoUrl {
-    fn into_url(self) -> Result<Url, Error>;
-    fn as_str(&self) -> &str;
-}
-
-impl IntoUrl for &str {
-    fn into_url(self) -> Result<Url, Error> {
-        parse_url(self)
-    }
-    fn as_str(&self) -> &str {
-        self
-    }
-}
-
-impl IntoUrl for String {
-    fn into_url(self) -> Result<Url, Error> {
-        parse_url(&self)
-    }
-    fn as_str(&self) -> &str {
-        String::as_str(self)
-    }
-}
-
-impl IntoUrl for &String {
-    fn into_url(self) -> Result<Url, Error> {
-        parse_url(self)
-    }
-    fn as_str(&self) -> &str {
-        String::as_str(self)
-    }
-}
-
-impl IntoUrl for Url {
-    fn into_url(self) -> Result<Url, Error> {
-        Ok(self)
-    }
-    fn as_str(&self) -> &str {
-        Url::as_str(self)
-    }
-}
-
-impl IntoUrl for &Url {
-    fn into_url(self) -> Result<Url, Error> {
-        Ok(self.clone())
-    }
-    fn as_str(&self) -> &str {
-        Url::as_str(self)
-    }
-}
-
-/// `reqwest::Error`.
-#[derive(Debug)]
-pub struct Error {
-    msg: String,
-    status: Option<StatusCode>,
-    url: Option<Url>,
-}
-
-impl Error {
-    fn new(msg: impl Into<String>) -> Self {
-        Error {
-            msg: msg.into(),
-            status: None,
-            url: None,
-        }
-    }
-    pub fn status(&self) -> Option<StatusCode> {
-        self.status
-    }
-    pub fn is_timeout(&self) -> bool {
-        false
-    }
-    pub fn is_connect(&self) -> bool {
-        false
-    }
-    pub fn is_request(&self) -> bool {
-        false
-    }
-    pub fn is_body(&self) -> bool {
-        false
-    }
-    pub fn is_decode(&self) -> bool {
-        false
-    }
-    pub fn is_status(&self) -> bool {
-        self.status.is_some()
-    }
-    pub fn url(&self) -> Option<&Url> {
-        self.url.as_ref()
-    }
-    pub fn url_mut(&mut self) -> Option<&mut Url> {
-        self.url.as_mut()
-    }
-    pub fn with_url(mut self, url: Url) -> Self {
-        self.url = Some(url);
-        self
-    }
-}
-
-impl std::fmt::Display for Error {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        f.write_str(&self.msg)
-    }
-}
-
-impl std::error::Error for Error {}
-
-impl From<wasi_http::HttpError> for Error {
-    fn from(e: wasi_http::HttpError) -> Self {
-        Error::new(e.to_string())
-    }
-}
-
-/// `reqwest::Body`.
-pub struct Body(Vec<u8>);
-
-impl From<Vec<u8>> for Body {
-    fn from(v: Vec<u8>) -> Self {
-        Body(v)
-    }
-}
-impl From<String> for Body {
-    fn from(s: String) -> Self {
-        Body(s.into_bytes())
-    }
-}
-impl From<&'static str> for Body {
-    fn from(s: &'static str) -> Self {
-        Body(s.as_bytes().to_vec())
-    }
-}
-
-/// `reqwest::Certificate` — TLS is delegated to the host runtime in wasi-http, so
-/// custom roots are accepted and ignored on this target.
-#[derive(Clone, Debug)]
-pub struct Certificate;
-
-impl Certificate {
-    pub fn from_der(_der: &[u8]) -> Result<Self, Error> {
-        Ok(Certificate)
-    }
-    pub fn from_pem(_pem: &[u8]) -> Result<Self, Error> {
-        Ok(Certificate)
-    }
-}
-
-/// `reqwest::Identity` — client TLS identity. TLS is host-brokered, so this is a
-/// compile-only placeholder.
-#[derive(Clone)]
-pub struct Identity;
-
-impl Identity {
-    pub fn from_pem(_pem: &[u8]) -> Result<Self, Error> {
-        Ok(Identity)
-    }
-    pub fn from_pkcs12_der(_der: &[u8], _pass: &str) -> Result<Self, Error> {
-        Ok(Identity)
-    }
-}
-
-/// `reqwest::ClientBuilder`.
-#[derive(Default)]
-pub struct ClientBuilder {
-    default_headers: Option<HeaderMap>,
-    timeout: Option<Duration>,
-}
-
-impl ClientBuilder {
-    pub fn new() -> Self {
-        ClientBuilder::default()
-    }
-    pub fn default_headers(mut self, headers: HeaderMap) -> Self {
-        self.default_headers = Some(headers);
-        self
-    }
-    pub fn timeout(mut self, timeout: Duration) -> Self {
-        self.timeout = Some(timeout);
-        self
-    }
-    pub fn add_root_certificate(self, _cert: Certificate) -> Self {
-        self
-    }
-    pub fn danger_accept_invalid_certs(self, _v: bool) -> Self {
-        self
-    }
-    pub fn user_agent<V>(self, _v: V) -> Self {
-        self
-    }
-    pub fn redirect(self, _policy: redirect::Policy) -> Self {
-        self
-    }
-    pub fn connect_timeout(self, _timeout: Duration) -> Self {
-        self
-    }
-    pub fn pool_idle_timeout<D: Into<Option<Duration>>>(self, _d: D) -> Self {
-        self
-    }
-    pub fn pool_max_idle_per_host(self, _n: usize) -> Self {
-        self
-    }
-    pub fn http1_only(self) -> Self {
-        self
-    }
-    pub fn no_proxy(self) -> Self {
-        self
-    }
-    pub fn tcp_keepalive<D: Into<Option<Duration>>>(self, _d: D) -> Self {
-        self
-    }
-    pub fn use_rustls_tls(self) -> Self {
-        self
-    }
-    pub fn identity(self, _id: Identity) -> Self {
-        self
-    }
-    pub fn build(self) -> Result<Client, Error> {
-        Ok(Client {
-            default_headers: self.default_headers.unwrap_or_default(),
-            _timeout: self.timeout,
-        })
-    }
-}
-
-/// `reqwest::Client`.
-#[derive(Clone, Debug)]
-pub struct Client {
-    default_headers: HeaderMap,
-    _timeout: Option<Duration>,
-}
-
-impl Default for Client {
-    fn default() -> Self {
-        Client {
-            default_headers: HeaderMap::new(),
-            _timeout: None,
-        }
-    }
-}
-
-impl Client {
-    pub fn new() -> Self {
-        Client::default()
-    }
-    pub fn builder() -> ClientBuilder {
-        ClientBuilder::new()
-    }
-    pub fn get<U: IntoUrl>(&self, url: U) -> RequestBuilder {
-        self.request(Method::GET, url)
-    }
-    pub fn post<U: IntoUrl>(&self, url: U) -> RequestBuilder {
-        self.request(Method::POST, url)
-    }
-    pub fn put<U: IntoUrl>(&self, url: U) -> RequestBuilder {
-        self.request(Method::PUT, url)
-    }
-    pub fn patch<U: IntoUrl>(&self, url: U) -> RequestBuilder {
-        self.request(Method::PATCH, url)
-    }
-    pub fn delete<U: IntoUrl>(&self, url: U) -> RequestBuilder {
-        self.request(Method::DELETE, url)
-    }
-    pub fn head<U: IntoUrl>(&self, url: U) -> RequestBuilder {
-        self.request(Method::HEAD, url)
-    }
-    pub fn request<U: IntoUrl>(&self, method: Method, url: U) -> RequestBuilder {
-        let url = url.as_str().to_string();
-        RequestBuilder {
-            method,
-            url,
-            headers: self.default_headers.clone(),
-            body: None,
-            err: None,
-        }
-    }
-    /// `Client::execute(Request)` — send a pre-built request (used by oauth2).
-    pub async fn execute(&self, req: Request) -> Result<Response, Error> {
-        RequestBuilder {
-            method: req.method,
-            url: req.url,
-            headers: req.headers,
-            body: req.body,
-            err: None,
-        }
-        .send()
-        .await
-    }
-}
-
-/// `reqwest::Request` — a built request (produced by `RequestBuilder::build`-style
-/// flows and consumed by `Client::execute`).
-pub struct Request {
-    method: Method,
-    url: String,
-    headers: HeaderMap,
-    body: Option<Vec<u8>>,
-}
-
-impl Request {
-    pub fn new(method: Method, url: Url) -> Self {
-        Request {
-            method,
-            url: url.as_str().to_string(),
-            headers: HeaderMap::new(),
-            body: None,
-        }
-    }
-    pub fn headers_mut(&mut self) -> &mut HeaderMap {
-        &mut self.headers
-    }
-    pub fn body_mut(&mut self) -> &mut Option<Vec<u8>> {
-        &mut self.body
-    }
-    pub fn url(&self) -> Url {
-        parse_url(&self.url).unwrap_or_else(|_| {
-            Url::parse("http://invalid.localhost/").expect("static url parses")
-        })
-    }
-    pub fn method(&self) -> &Method {
-        &self.method
-    }
-}
-
-/// oauth2 builds an `http::Request<Vec<u8>>` and converts it into a
-/// `reqwest::Request` to feed `Client::execute`.
-impl TryFrom<http::Request<Vec<u8>>> for Request {
-    type Error = Error;
-    fn try_from(req: http::Request<Vec<u8>>) -> Result<Self, Error> {
-        let (parts, body) = req.into_parts();
-        Ok(Request {
-            method: parts.method,
-            url: parts.uri.to_string(),
-            headers: parts.headers,
-            body: if body.is_empty() { None } else { Some(body) },
-        })
-    }
-}
-
-/// `reqwest::RequestBuilder`.
-#[derive(Debug)]
-pub struct RequestBuilder {
-    method: Method,
-    url: String,
-    headers: HeaderMap,
-    body: Option<Vec<u8>>,
-    err: Option<String>,
-}
-
-impl RequestBuilder {
-    pub fn headers(mut self, headers: HeaderMap) -> Self {
-        self.headers.extend(headers);
-        self
-    }
-    pub fn header<K, V>(mut self, key: K, value: V) -> Self
-    where
-        http::HeaderName: TryFrom<K>,
-        http::HeaderValue: TryFrom<V>,
-    {
-        match (http::HeaderName::try_from(key), http::HeaderValue::try_from(value)) {
-            (Ok(k), Ok(v)) => {
-                self.headers.insert(k, v);
-            }
-            _ => self.err = Some("invalid header".into()),
-        }
-        self
-    }
-    pub fn body<B: Into<Body>>(mut self, body: B) -> Self {
-        self.body = Some(body.into().0);
-        self
-    }
-    pub fn json<T: serde::Serialize + ?Sized>(mut self, json: &T) -> Self {
-        match serde_json::to_vec(json) {
-            Ok(v) => {
-                self.headers.insert(
-                    http::header::CONTENT_TYPE,
-                    http::HeaderValue::from_static("application/json"),
-                );
-                self.body = Some(v);
-            }
-            Err(e) => self.err = Some(e.to_string()),
-        }
-        self
-    }
-    pub fn timeout(self, _timeout: Duration) -> Self {
-        self
-    }
-    pub fn bearer_auth<T: std::fmt::Display>(self, token: T) -> Self {
-        self.header(http::header::AUTHORIZATION, format!("Bearer {token}"))
-    }
-    pub fn basic_auth<U: std::fmt::Display, P: std::fmt::Display>(
-        self,
-        username: U,
-        password: Option<P>,
-    ) -> Self {
-        use base64::Engine;
-        let raw = match password {
-            Some(p) => format!("{username}:{p}"),
-            None => format!("{username}:"),
-        };
-        let encoded = base64::engine::general_purpose::STANDARD.encode(raw);
-        self.header(http::header::AUTHORIZATION, format!("Basic {encoded}"))
-    }
-    pub fn query<T: serde::Serialize + ?Sized>(mut self, query: &T) -> Self {
-        match serde_urlencoded::to_string(query) {
-            Ok(q) if !q.is_empty() => {
-                let sep = if self.url.contains('?') { '&' } else { '?' };
-                self.url = format!("{}{}{}", self.url, sep, q);
-            }
-            Ok(_) => {}
-            Err(e) => self.err = Some(e.to_string()),
-        }
-        self
-    }
-    pub fn form<T: serde::Serialize + ?Sized>(mut self, form: &T) -> Self {
-        match serde_urlencoded::to_string(form) {
-            Ok(body) => {
-                self.headers.insert(
-                    http::header::CONTENT_TYPE,
-                    http::HeaderValue::from_static("application/x-www-form-urlencoded"),
-                );
-                self.body = Some(body.into_bytes());
-            }
-            Err(e) => self.err = Some(e.to_string()),
-        }
-        self
-    }
-    pub fn build(self) -> Result<RequestBuilder, Error> {
-        if let Some(e) = &self.err {
-            return Err(Error::new(e.clone()));
-        }
-        Ok(self)
-    }
-
-    /// Perform the request via wasi-http (blocking under the hood; resolves on
-    /// first poll on the single-threaded VM).
-    pub async fn send(self) -> Result<Response, Error> {
-        if let Some(e) = self.err {
-            return Err(Error::new(e));
-        }
-        let method = match self.method {
-            Method::GET => wasi_http::Method::Get,
-            Method::POST => wasi_http::Method::Post,
-            Method::PUT => wasi_http::Method::Put,
-            Method::DELETE => wasi_http::Method::Delete,
-            Method::PATCH => wasi_http::Method::Patch,
-            Method::HEAD => wasi_http::Method::Head,
-            _ => wasi_http::Method::Get,
-        };
-        let mut req = wasi_http::Request::new(method, &self.url)?;
-        for (name, value) in self.headers.iter() {
-            if let Ok(v) = value.to_str() {
-                req = req.header(name.as_str(), v);
-            }
-        }
-        if let Some(body) = self.body {
-            req = req.body(body);
-        }
-        // Always stream under the hood: headers arrive immediately and the body is
-        // pulled incrementally. Buffered accessors (`json`/`text`/`bytes`) drain the
-        // reader; `bytes_stream` yields raw chunks as they arrive.
-        let (resp, reader) = wasi_http::HttpClient::new().send_raw_stream(&req)?;
-        Ok(Response::from_wasi(resp, reader))
-    }
-}
-
-/// `reqwest::Response`.
-pub struct Response {
-    status: StatusCode,
-    headers: HeaderMap,
-    reader: Option<wasi_http::RawBodyReader>,
-}
-
-impl std::fmt::Debug for Response {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        f.debug_struct("Response")
-            .field("status", &self.status)
-            .field("headers", &self.headers)
-            .finish()
-    }
-}
-
-impl Response {
-    fn from_wasi(resp: wasi_http::Response, reader: wasi_http::RawBodyReader) -> Self {
-        let status = StatusCode::from_u16(resp.status).unwrap_or(StatusCode::OK);
-        let mut headers = HeaderMap::new();
-        for (name, value) in &resp.headers {
-            if let (Ok(n), Ok(v)) = (
-                http::HeaderName::try_from(name.as_str()),
-                http::HeaderValue::try_from(value.as_str()),
-            ) {
-                headers.insert(n, v);
-            }
-        }
-        Response {
-            status,
-            headers,
-            reader: Some(reader),
-        }
-    }
-
-    /// Drain the raw reader fully into a buffer (for the buffered accessors).
-    ///
-    /// Cooperative: when the underlying socket has no data ready yet
-    /// (`ChunkPoll::WouldBlock`), this yields to the runtime via [`yield_now`]
-    /// instead of blocking the single guest thread, so other tasks make progress
-    /// while the body streams in.
-    async fn drain(&mut self) -> Result<Vec<u8>, Error> {
-        let mut body = Vec::new();
-        if let Some(reader) = self.reader.as_mut() {
-            loop {
-                match reader.read_chunk()? {
-                    wasi_http::ChunkPoll::Ready(chunk) => body.extend_from_slice(&chunk),
-                    wasi_http::ChunkPoll::Eof => break,
-                    wasi_http::ChunkPoll::WouldBlock => yield_now().await,
-                }
-            }
-        }
-        self.reader = None;
-        Ok(body)
-    }
-    pub fn status(&self) -> StatusCode {
-        self.status
-    }
-    pub fn headers(&self) -> &HeaderMap {
-        &self.headers
-    }
-    pub fn version(&self) -> http::Version {
-        http::Version::HTTP_11
-    }
-    pub fn content_length(&self) -> Option<u64> {
-        self.headers
-            .get(http::header::CONTENT_LENGTH)
-            .and_then(|v| v.to_str().ok())
-            .and_then(|s| s.parse().ok())
-    }
-    pub fn error_for_status(self) -> Result<Self, Error> {
-        if self.status.is_client_error() || self.status.is_server_error() {
-            Err(Error {
-                msg: format!("HTTP status {}", self.status),
-                status: Some(self.status),
-                url: None,
-            })
-        } else {
-            Ok(self)
-        }
-    }
-    pub async fn text(mut self) -> Result<String, Error> {
-        let body = self.drain().await?;
-        String::from_utf8(body).map_err(|e| Error::new(e.to_string()))
-    }
-    pub async fn bytes(mut self) -> Result<Bytes, Error> {
-        Ok(Bytes::from(self.drain().await?))
-    }
-    pub async fn json<T: serde::de::DeserializeOwned>(mut self) -> Result<T, Error> {
-        let body = self.drain().await?;
-        serde_json::from_slice(&body).map_err(|e| Error::new(e.to_string()))
-    }
-    /// Incremental raw byte stream backed by `wasi_http::RawBodyReader`. Yields
-    /// de-framed body chunks as they arrive (codex's `transport.rs` runs its own
-    /// SSE parser over these raw bytes). Single-threaded VM: each `recv` resolves
-    /// the poll immediately.
-    pub fn bytes_stream(self) -> BytesStream {
-        BytesStream {
-            reader: self.reader,
-        }
-    }
-}
-
-/// `Stream<Item = Result<Bytes, Error>>` over a `RawBodyReader`.
-pub struct BytesStream {
-    reader: Option<wasi_http::RawBodyReader>,
-}
-
-impl futures_core::Stream for BytesStream {
-    type Item = Result<Bytes, Error>;
-    fn poll_next(
-        mut self: std::pin::Pin<&mut Self>,
-        cx: &mut std::task::Context<'_>,
-    ) -> std::task::Poll<Option<Self::Item>> {
-        let reader = match self.reader.as_mut() {
-            Some(r) => r,
-            None => return std::task::Poll::Ready(None),
-        };
-        match reader.read_chunk() {
-            Ok(wasi_http::ChunkPoll::Ready(chunk)) => {
-                std::task::Poll::Ready(Some(Ok(Bytes::from(chunk))))
-            }
-            Ok(wasi_http::ChunkPoll::Eof) => {
-                self.reader = None;
-                std::task::Poll::Ready(None)
-            }
-            // No data ready yet: yield to the runtime and ask to be re-polled
-            // immediately. On the single-threaded VM this is a cooperative spin
-            // that lets other tasks (e.g. the turn loop) run between polls.
-            Ok(wasi_http::ChunkPoll::WouldBlock) => {
-                cx.waker().wake_by_ref();
-                std::task::Poll::Pending
-            }
-            Err(e) => {
-                self.reader = None;
-                std::task::Poll::Ready(Some(Err(Error::new(e.to_string()))))
-            }
-        }
-    }
-}
-
-pub type Result<T, E = Error> = std::result::Result<T, E>;
diff --git a/registry/native/stubs/uucore/.cargo-ok b/registry/native/stubs/uucore/.cargo-ok
deleted file mode 100644
index 5f8b79583..000000000
--- a/registry/native/stubs/uucore/.cargo-ok
+++ /dev/null
@@ -1 +0,0 @@
-{"v":1}
\ No newline at end of file
diff --git a/registry/native/stubs/uucore/.cargo_vcs_info.json b/registry/native/stubs/uucore/.cargo_vcs_info.json
deleted file mode 100644
index de07ac11e..000000000
--- a/registry/native/stubs/uucore/.cargo_vcs_info.json
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-  "git": {
-    "sha1": "04a385bed6d066a1586b64d26061e4f6eaf59a2f"
-  },
-  "path_in_vcs": "src/uucore"
-}
\ No newline at end of file
diff --git a/registry/native/stubs/uucore/Cargo.lock b/registry/native/stubs/uucore/Cargo.lock
deleted file mode 100644
index 7b6f2cbc8..000000000
--- a/registry/native/stubs/uucore/Cargo.lock
+++ /dev/null
@@ -1,2469 +0,0 @@
-# This file is automatically @generated by Cargo.
-# It is not intended for manual editing.
-version = 4
-
-[[package]]
-name = "adler2"
-version = "2.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "320119579fcad9c21884f5c4861d16174d0e06250625266f50fe6898340abefa"
-
-[[package]]
-name = "aho-corasick"
-version = "1.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ddd31a130427c27518df266943a5308ed92d4b226cc639f5a8f1002816174301"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "android_system_properties"
-version = "0.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "819e7219dbd41043ac279b19830f2efc897156490d7fd6ea916720117ee66311"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "anstream"
-version = "0.6.21"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "43d5b281e737544384e969a5ccad3f1cdd24b48086a0fc1b2a5262a26b8f4f4a"
-dependencies = [
- "anstyle",
- "anstyle-parse",
- "anstyle-query",
- "anstyle-wincon",
- "colorchoice",
- "is_terminal_polyfill",
- "utf8parse",
-]
-
-[[package]]
-name = "anstyle"
-version = "1.0.13"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5192cca8006f1fd4f7237516f40fa183bb07f8fbdfedaa0036de5ea9b0b45e78"
-
-[[package]]
-name = "anstyle-parse"
-version = "0.2.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4e7644824f0aa2c7b9384579234ef10eb7efb6a0deb83f9630a49594dd9c15c2"
-dependencies = [
- "utf8parse",
-]
-
-[[package]]
-name = "anstyle-query"
-version = "1.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "40c48f72fd53cd289104fc64099abca73db4166ad86ea0b4341abe65af83dadc"
-dependencies = [
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "anstyle-wincon"
-version = "3.0.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "291e6a250ff86cd4a820112fb8898808a366d8f9f58ce16d1f538353ad55747d"
-dependencies = [
- "anstyle",
- "once_cell_polyfill",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "anyhow"
-version = "1.0.101"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f0e0fee31ef5ed1ba1316088939cea399010ed7731dba877ed44aeb407a75ea"
-
-[[package]]
-name = "approx"
-version = "0.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cab112f0a86d568ea0e627cc1d6be74a1e9cd55214684db5561995f6dad897c6"
-dependencies = [
- "num-traits",
-]
-
-[[package]]
-name = "arrayref"
-version = "0.3.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "76a2e8124351fda1ef8aaaa3bbd7ebbcb486bbcd4225aca0aa0d84bb2db8fecb"
-
-[[package]]
-name = "arrayvec"
-version = "0.7.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7c02d123df017efcdfbd739ef81735b36c5ba83ec3c59c80a9d7ecc718f92e50"
-
-[[package]]
-name = "autocfg"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c08606f8c3cbf4ce6ec8e28fb0014a2c086708fe954eaa885384a6165172e7e8"
-
-[[package]]
-name = "base64-simd"
-version = "0.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "339abbe78e73178762e23bea9dfd08e697eb3f3301cd4be981c0f78ba5859195"
-dependencies = [
- "outref",
- "vsimd",
-]
-
-[[package]]
-name = "bigdecimal"
-version = "0.4.10"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4d6867f1565b3aad85681f1015055b087fcfd840d6aeee6eee7f2da317603695"
-dependencies = [
- "autocfg",
- "libm",
- "num-bigint",
- "num-integer",
- "num-traits",
-]
-
-[[package]]
-name = "bindgen"
-version = "0.72.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "993776b509cfb49c750f11b8f07a46fa23e0a1386ffc01fb1e7d343efc387895"
-dependencies = [
- "bitflags",
- "cexpr",
- "clang-sys",
- "itertools 0.13.0",
- "log",
- "prettyplease",
- "proc-macro2",
- "quote",
- "regex",
- "rustc-hash",
- "shlex",
- "syn",
-]
-
-[[package]]
-name = "bitflags"
-version = "2.10.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "812e12b5285cc515a9c72a5c1d3b6d46a19dac5acfef5265968c166106e31dd3"
-
-[[package]]
-name = "blake2b_simd"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b79834656f71332577234b50bfc009996f7449e0c056884e6a02492ded0ca2f3"
-dependencies = [
- "arrayref",
- "arrayvec",
- "constant_time_eq",
-]
-
-[[package]]
-name = "blake3"
-version = "1.8.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2468ef7d57b3fb7e16b576e8377cdbde2320c60e1491e961d11da40fc4f02a2d"
-dependencies = [
- "arrayref",
- "arrayvec",
- "cc",
- "cfg-if",
- "constant_time_eq",
- "cpufeatures",
-]
-
-[[package]]
-name = "block-buffer"
-version = "0.10.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3078c7629b62d3f0439517fa394996acacc5cbc91c5a20d8c658e77abd503a71"
-dependencies = [
- "generic-array",
-]
-
-[[package]]
-name = "bstr"
-version = "1.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "63044e1ae8e69f3b5a92c736ca6269b8d12fa7efe39bf34ddb06d102cf0e2cab"
-dependencies = [
- "memchr",
- "regex-automata",
- "serde",
-]
-
-[[package]]
-name = "bumpalo"
-version = "3.19.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5dd9dc738b7a8311c7ade152424974d8115f2cdad61e8dab8dac9f2362298510"
-
-[[package]]
-name = "byteorder"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fd0f2584146f6f2ef48085050886acf353beff7305ebd1ae69500e27c67f64b"
-
-[[package]]
-name = "calendrical_calculations"
-version = "0.2.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3a0b39595c6ee54a8d0900204ba4c401d0ab4eb45adaf07178e8d017541529e7"
-dependencies = [
- "core_maths",
- "displaydoc",
-]
-
-[[package]]
-name = "cc"
-version = "1.2.55"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "47b26a0954ae34af09b50f0de26458fa95369a0d478d8236d3f93082b219bd29"
-dependencies = [
- "find-msvc-tools",
- "shlex",
-]
-
-[[package]]
-name = "cexpr"
-version = "0.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6fac387a98bb7c37292057cffc56d62ecb629900026402633ae9160df93a8766"
-dependencies = [
- "nom",
-]
-
-[[package]]
-name = "cfg-if"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9330f8b2ff13f34540b44e946ef35111825727b38d33286ef986142615121801"
-
-[[package]]
-name = "cfg_aliases"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "613afe47fcd5fac7ccf1db93babcb082c5994d996f20b8b159f2ad1658eb5724"
-
-[[package]]
-name = "chrono"
-version = "0.4.43"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fac4744fb15ae8337dc853fee7fb3f4e48c0fbaa23d0afe49c447b4fab126118"
-dependencies = [
- "iana-time-zone",
- "num-traits",
- "windows-link",
-]
-
-[[package]]
-name = "clang-sys"
-version = "1.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0b023947811758c97c59bf9d1c188fd619ad4718dcaa767947df1cadb14f39f4"
-dependencies = [
- "glob",
- "libc",
- "libloading",
-]
-
-[[package]]
-name = "clap"
-version = "4.5.60"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2797f34da339ce31042b27d23607e051786132987f595b02ba4f6a6dffb7030a"
-dependencies = [
- "clap_builder",
-]
-
-[[package]]
-name = "clap_builder"
-version = "4.5.60"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "24a241312cea5059b13574bb9b3861cabf758b879c15190b37b6d6fd63ab6876"
-dependencies = [
- "anstream",
- "anstyle",
- "clap_lex",
- "strsim",
- "terminal_size",
-]
-
-[[package]]
-name = "clap_lex"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3a822ea5bc7590f9d40f1ba12c0dc3c2760f3482c6984db1573ad11031420831"
-
-[[package]]
-name = "codspeed"
-version = "4.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "38c2eb3388ebe26b5a0ab6bf4969d9c4840143d7f6df07caa3cc851b0606cef6"
-dependencies = [
- "anyhow",
- "cc",
- "colored",
- "getrandom 0.2.17",
- "glob",
- "libc",
- "nix",
- "serde",
- "serde_json",
- "statrs",
-]
-
-[[package]]
-name = "codspeed-divan-compat"
-version = "4.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b2de65b7489a59709724d489070c6d05b7744039e4bf751d0a2006b90bb5593d"
-dependencies = [
- "clap",
- "codspeed",
- "codspeed-divan-compat-macros",
- "codspeed-divan-compat-walltime",
- "regex",
-]
-
-[[package]]
-name = "codspeed-divan-compat-macros"
-version = "4.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "56ca01ce4fd22b8dcc6c770dcd6b74343642e842482b94e8920d14e10c57638d"
-dependencies = [
- "divan-macros",
- "itertools 0.14.0",
- "proc-macro-crate",
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "codspeed-divan-compat-walltime"
-version = "4.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "720ab9d0714718afe5f5832be6e5f5eb5ce97836e24ca7bf7042eea4308b9fb8"
-dependencies = [
- "cfg-if",
- "clap",
- "codspeed",
- "condtype",
- "divan-macros",
- "libc",
- "regex-lite",
-]
-
-[[package]]
-name = "colorchoice"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b05b61dc5112cbb17e4b6cd61790d9845d13888356391624cbe7e41efeac1e75"
-
-[[package]]
-name = "colored"
-version = "2.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "117725a109d387c937a1533ce01b450cbde6b88abceea8473c4d7a85853cda3c"
-dependencies = [
- "lazy_static",
- "windows-sys 0.59.0",
-]
-
-[[package]]
-name = "condtype"
-version = "1.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "baf0a07a401f374238ab8e2f11a104d2851bf9ce711ec69804834de8af45c7af"
-
-[[package]]
-name = "constant_time_eq"
-version = "0.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3d52eff69cd5e647efe296129160853a42795992097e8af39800e1060caeea9b"
-
-[[package]]
-name = "core-foundation-sys"
-version = "0.8.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "773648b94d0e5d620f64f280777445740e61fe701025087ec8b57f45c791888b"
-
-[[package]]
-name = "core_maths"
-version = "0.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "77745e017f5edba1a9c1d854f6f3a52dac8a12dd5af5d2f54aecf61e43d80d30"
-dependencies = [
- "libm",
-]
-
-[[package]]
-name = "cpufeatures"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "59ed5838eebb26a2bb2e58f6d5b5316989ae9d08bab10e0e6d103e656d1b0280"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "crc"
-version = "3.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9710d3b3739c2e349eb44fe848ad0b7c8cb1e42bd87ee49371df2f7acaf3e675"
-dependencies = [
- "crc-catalog",
-]
-
-[[package]]
-name = "crc-catalog"
-version = "2.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "19d374276b40fb8bbdee95aef7c7fa6b5316ec764510eb64b8dd0e2ed0d7e7f5"
-
-[[package]]
-name = "crc-fast"
-version = "1.9.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2fd92aca2c6001b1bf5ba0ff84ee74ec8501b52bbef0cac80bf25a6c1d87a83d"
-dependencies = [
- "crc",
- "digest",
- "rustversion",
- "spin",
-]
-
-[[package]]
-name = "crc32fast"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9481c1c90cbf2ac953f07c8d4a58aa3945c425b7185c9154d67a65e4230da511"
-dependencies = [
- "cfg-if",
-]
-
-[[package]]
-name = "crypto-common"
-version = "0.1.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "78c8292055d1c1df0cce5d180393dc8cce0abec0a7102adb6c7b1eef6016d60a"
-dependencies = [
- "generic-array",
- "typenum",
-]
-
-[[package]]
-name = "data-encoding"
-version = "2.10.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7a1e2f27636f116493b8b860f5546edb47c8d8f8ea73e1d2a20be88e28d1fea"
-
-[[package]]
-name = "data-encoding-macro"
-version = "0.1.19"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8142a83c17aa9461d637e649271eae18bf2edd00e91f2e105df36c3c16355bdb"
-dependencies = [
- "data-encoding",
- "data-encoding-macro-internal",
-]
-
-[[package]]
-name = "data-encoding-macro-internal"
-version = "0.1.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7ab67060fc6b8ef687992d439ca0fa36e7ed17e9a0b16b25b601e8757df720de"
-dependencies = [
- "data-encoding",
- "syn",
-]
-
-[[package]]
-name = "deranged"
-version = "0.5.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ececcb659e7ba858fb4f10388c250a7252eb0a27373f1a72b8748afdd248e587"
-dependencies = [
- "powerfmt",
-]
-
-[[package]]
-name = "digest"
-version = "0.10.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9ed9a281f7bc9b7576e61468ba615a66a5c8cfdff42420a70aa82701a3b1e292"
-dependencies = [
- "block-buffer",
- "crypto-common",
-]
-
-[[package]]
-name = "displaydoc"
-version = "0.2.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "97369cbbc041bc366949bc74d34658d6cda5621039731c6310521892a3a20ae0"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "divan-macros"
-version = "0.1.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8dc51d98e636f5e3b0759a39257458b22619cac7e96d932da6eeb052891bb67c"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "dns-lookup"
-version = "3.0.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e39034cee21a2f5bbb66ba0e3689819c4bb5d00382a282006e802a7ffa6c41d"
-dependencies = [
- "cfg-if",
- "libc",
- "socket2",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "dunce"
-version = "1.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "92773504d58c093f6de2459af4af33faa518c13451eb8f2b5698ed3d36e7c813"
-
-[[package]]
-name = "either"
-version = "1.15.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "48c757948c5ede0e46177b7add2e67155f70e33c07fea8284df6576da70b3719"
-
-[[package]]
-name = "equivalent"
-version = "1.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "877a4ace8713b0bcf2a4e7eec82529c029f1d0619886d18145fea96c3ffe5c0f"
-
-[[package]]
-name = "errno"
-version = "0.3.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "39cab71617ae0d63f51a36d69f866391735b51691dbda63cf6f96d042b63efeb"
-dependencies = [
- "libc",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "fastrand"
-version = "2.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "37909eebbb50d72f9059c3b6d82c0463f2ff062c9e95845c43a6c9c0355411be"
-
-[[package]]
-name = "find-msvc-tools"
-version = "0.1.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5baebc0774151f905a1a2cc41989300b1e6fbb29aff0ceffa1064fdd3088d582"
-
-[[package]]
-name = "fixed_decimal"
-version = "0.7.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "35eabf480f94d69182677e37571d3be065822acfafd12f2f085db44fbbcc8e57"
-dependencies = [
- "displaydoc",
- "smallvec",
- "writeable",
-]
-
-[[package]]
-name = "flate2"
-version = "1.1.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "843fba2746e448b37e26a819579957415c8cef339bf08564fe8b7ddbd959573c"
-dependencies = [
- "crc32fast",
- "miniz_oxide",
-]
-
-[[package]]
-name = "fluent"
-version = "0.17.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8137a6d5a2c50d6b0ebfcb9aaa91a28154e0a70605f112d30cb0cd4a78670477"
-dependencies = [
- "fluent-bundle",
- "unic-langid",
-]
-
-[[package]]
-name = "fluent-bundle"
-version = "0.16.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "01203cb8918f5711e73891b347816d932046f95f54207710bda99beaeb423bf4"
-dependencies = [
- "fluent-langneg",
- "fluent-syntax",
- "intl-memoizer",
- "intl_pluralrules",
- "rustc-hash",
- "self_cell",
- "smallvec",
- "unic-langid",
-]
-
-[[package]]
-name = "fluent-langneg"
-version = "0.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7eebbe59450baee8282d71676f3bfed5689aeab00b27545e83e5f14b1195e8b0"
-dependencies = [
- "unic-langid",
-]
-
-[[package]]
-name = "fluent-syntax"
-version = "0.12.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "54f0d287c53ffd184d04d8677f590f4ac5379785529e5e08b1c8083acdd5c198"
-dependencies = [
- "memchr",
- "thiserror 2.0.18",
-]
-
-[[package]]
-name = "generic-array"
-version = "0.14.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85649ca51fd72272d7821adaf274ad91c288277713d9c18820d8499a7ff69e9a"
-dependencies = [
- "typenum",
- "version_check",
-]
-
-[[package]]
-name = "getrandom"
-version = "0.2.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ff2abc00be7fca6ebc474524697ae276ad847ad0a6b3faa4bcb027e9a4614ad0"
-dependencies = [
- "cfg-if",
- "libc",
- "wasi",
-]
-
-[[package]]
-name = "getrandom"
-version = "0.3.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "899def5c37c4fd7b2664648c28120ecec138e4d395b459e5ca34f9cce2dd77fd"
-dependencies = [
- "cfg-if",
- "libc",
- "r-efi",
- "wasip2",
-]
-
-[[package]]
-name = "glob"
-version = "0.3.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0cc23270f6e1808e30a928bdc84dea0b9b4136a8bc82338574f23baf47bbd280"
-
-[[package]]
-name = "hashbrown"
-version = "0.16.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "841d1cc9bed7f9236f321df977030373f4a4163ae1a7dbfe1a51a2c1a51d9100"
-
-[[package]]
-name = "hex"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f24254aa9a54b5c858eaee2f5bccdb46aaf0e486a595ed5fd8f86ba55232a70"
-
-[[package]]
-name = "iana-time-zone"
-version = "0.1.65"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e31bc9ad994ba00e440a8aa5c9ef0ec67d5cb5e5cb0cc7f8b744a35b389cc470"
-dependencies = [
- "android_system_properties",
- "core-foundation-sys",
- "iana-time-zone-haiku",
- "js-sys",
- "log",
- "wasm-bindgen",
- "windows-core",
-]
-
-[[package]]
-name = "iana-time-zone-haiku"
-version = "0.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f31827a206f56af32e590ba56d5d2d085f558508192593743f16b2306495269f"
-dependencies = [
- "cc",
-]
-
-[[package]]
-name = "icu_calendar"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d6f0e52e009b6b16ba9c0693578796f2dd4aaa59a7f8f920423706714a89ac4e"
-dependencies = [
- "calendrical_calculations",
- "displaydoc",
- "icu_calendar_data",
- "icu_locale",
- "icu_locale_core",
- "icu_provider",
- "ixdtf",
- "serde",
- "tinystr",
- "zerovec",
-]
-
-[[package]]
-name = "icu_calendar_data"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "527f04223b17edfe0bd43baf14a0cb1b017830db65f3950dc00224860a9a446d"
-
-[[package]]
-name = "icu_collator"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32eed11a5572f1088b63fa21dc2e70d4a865e5739fc2d10abc05be93bae97019"
-dependencies = [
- "icu_collator_data",
- "icu_collections",
- "icu_locale",
- "icu_locale_core",
- "icu_normalizer",
- "icu_properties",
- "icu_provider",
- "smallvec",
- "utf16_iter",
- "utf8_iter",
- "zerovec",
-]
-
-[[package]]
-name = "icu_collator_data"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5ab06f0e83a613efddba3e4913e00e43ed4001fae651cb7d40fc7e66b83b6fb9"
-
-[[package]]
-name = "icu_collections"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4c6b649701667bbe825c3b7e6388cb521c23d88644678e83c0c4d0a621a34b43"
-dependencies = [
- "displaydoc",
- "potential_utf",
- "yoke",
- "zerofrom",
- "zerovec",
-]
-
-[[package]]
-name = "icu_datetime"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b9d49f41ded8e63761b6b4c3120dfdc289415a1ed10107db6198eb311057ca5"
-dependencies = [
- "displaydoc",
- "fixed_decimal",
- "icu_calendar",
- "icu_datetime_data",
- "icu_decimal",
- "icu_locale",
- "icu_locale_core",
- "icu_pattern",
- "icu_plurals",
- "icu_provider",
- "icu_time",
- "potential_utf",
- "tinystr",
- "writeable",
- "zerovec",
-]
-
-[[package]]
-name = "icu_datetime_data"
-version = "2.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "46597233625417b7c8052a63d916e4fdc73df21614ac0b679492a5d6e3b01aeb"
-
-[[package]]
-name = "icu_decimal"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a38c52231bc348f9b982c1868a2af3195199623007ba2c7650f432038f5b3e8e"
-dependencies = [
- "fixed_decimal",
- "icu_decimal_data",
- "icu_locale",
- "icu_locale_core",
- "icu_provider",
- "writeable",
- "zerovec",
-]
-
-[[package]]
-name = "icu_decimal_data"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2905b4044eab2dd848fe84199f9195567b63ab3a93094711501363f63546fef7"
-
-[[package]]
-name = "icu_locale"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "532b11722e350ab6bf916ba6eb0efe3ee54b932666afec989465f9243fe6dd60"
-dependencies = [
- "icu_collections",
- "icu_locale_core",
- "icu_locale_data",
- "icu_provider",
- "potential_utf",
- "tinystr",
- "zerovec",
-]
-
-[[package]]
-name = "icu_locale_core"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "edba7861004dd3714265b4db54a3c390e880ab658fec5f7db895fae2046b5bb6"
-dependencies = [
- "displaydoc",
- "litemap",
- "serde",
- "tinystr",
- "writeable",
- "zerovec",
-]
-
-[[package]]
-name = "icu_locale_data"
-version = "2.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1c5f1d16b4c3a2642d3a719f18f6b06070ab0aef246a6418130c955ae08aa831"
-
-[[package]]
-name = "icu_normalizer"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5f6c8828b67bf8908d82127b2054ea1b4427ff0230ee9141c54251934ab1b599"
-dependencies = [
- "icu_collections",
- "icu_normalizer_data",
- "icu_properties",
- "icu_provider",
- "smallvec",
- "utf16_iter",
- "utf8_iter",
- "write16",
- "zerovec",
-]
-
-[[package]]
-name = "icu_normalizer_data"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7aedcccd01fc5fe81e6b489c15b247b8b0690feb23304303a9e560f37efc560a"
-
-[[package]]
-name = "icu_pattern"
-version = "0.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7a7ff8c0ff6f61cdce299dcb54f557b0a251adbc78f6f0c35a21332c452b4a1b"
-dependencies = [
- "displaydoc",
- "either",
- "serde",
- "writeable",
- "zerovec",
-]
-
-[[package]]
-name = "icu_plurals"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4f9cfe49f5b1d1163cc58db451562339916a9ca5cbcaae83924d41a0bf839474"
-dependencies = [
- "fixed_decimal",
- "icu_locale",
- "icu_plurals_data",
- "icu_provider",
- "zerovec",
-]
-
-[[package]]
-name = "icu_plurals_data"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f018a98dccf7f0eb02ba06ac0ff67d102d8ded80734724305e924de304e12ff0"
-
-[[package]]
-name = "icu_properties"
-version = "2.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "020bfc02fe870ec3a66d93e677ccca0562506e5872c650f893269e08615d74ec"
-dependencies = [
- "icu_collections",
- "icu_locale_core",
- "icu_properties_data",
- "icu_provider",
- "zerotrie",
- "zerovec",
-]
-
-[[package]]
-name = "icu_properties_data"
-version = "2.1.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "616c294cf8d725c6afcd8f55abc17c56464ef6211f9ed59cccffe534129c77af"
-
-[[package]]
-name = "icu_provider"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "85962cf0ce02e1e0a629cc34e7ca3e373ce20dda4c4d7294bbd0bf1fdb59e614"
-dependencies = [
- "displaydoc",
- "icu_locale_core",
- "serde",
- "stable_deref_trait",
- "writeable",
- "yoke",
- "zerofrom",
- "zerotrie",
- "zerovec",
-]
-
-[[package]]
-name = "icu_time"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8242b00da3b3b6678f731437a11c8833a43c821ae081eca60ba1b7579d45b6d8"
-dependencies = [
- "calendrical_calculations",
- "displaydoc",
- "icu_calendar",
- "icu_locale_core",
- "icu_provider",
- "icu_time_data",
- "ixdtf",
- "serde",
- "zerotrie",
- "zerovec",
-]
-
-[[package]]
-name = "icu_time_data"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3e10b0e5e87a2c84bd5fa407705732052edebe69291d347d0c3033785470edbf"
-
-[[package]]
-name = "indexmap"
-version = "2.13.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7714e70437a7dc3ac8eb7e6f8df75fd8eb422675fc7678aff7364301092b1017"
-dependencies = [
- "equivalent",
- "hashbrown",
-]
-
-[[package]]
-name = "intl-memoizer"
-version = "0.5.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "310da2e345f5eb861e7a07ee182262e94975051db9e4223e909ba90f392f163f"
-dependencies = [
- "type-map",
- "unic-langid",
-]
-
-[[package]]
-name = "intl_pluralrules"
-version = "7.0.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "078ea7b7c29a2b4df841a7f6ac8775ff6074020c6776d48491ce2268e068f972"
-dependencies = [
- "unic-langid",
-]
-
-[[package]]
-name = "is_terminal_polyfill"
-version = "1.70.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a6cb138bb79a146c1bd460005623e142ef0181e3d0219cb493e02f7d08a35695"
-
-[[package]]
-name = "itertools"
-version = "0.13.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "413ee7dfc52ee1a4949ceeb7dbc8a33f2d6c088194d9f922fb8318faf1f01186"
-dependencies = [
- "either",
-]
-
-[[package]]
-name = "itertools"
-version = "0.14.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2b192c782037fadd9cfa75548310488aabdbf3d2da73885b31bd0abd03351285"
-dependencies = [
- "either",
-]
-
-[[package]]
-name = "itoa"
-version = "1.0.17"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "92ecc6618181def0457392ccd0ee51198e065e016d1d527a7ac1b6dc7c1f09d2"
-
-[[package]]
-name = "ixdtf"
-version = "0.6.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "84de9d95a6d2547d9b77ee3f25fa0ee32e3c3a6484d47a55adebc0439c077992"
-
-[[package]]
-name = "jiff"
-version = "0.2.23"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1a3546dc96b6d42c5f24902af9e2538e82e39ad350b0c766eb3fbf2d8f3d8359"
-dependencies = [
- "jiff-static",
- "jiff-tzdb-platform",
- "log",
- "portable-atomic",
- "portable-atomic-util",
- "serde_core",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "jiff-icu"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0e67c2beaae8b10a82d849b9aabb698a43a682f32b17bcdc035d5ecadb44d646"
-dependencies = [
- "icu_calendar",
- "icu_time",
- "jiff",
-]
-
-[[package]]
-name = "jiff-static"
-version = "0.2.23"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a8c8b344124222efd714b73bb41f8b5120b27a7cc1c75593a6ff768d9d05aa4"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "jiff-tzdb"
-version = "0.1.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "68971ebff725b9e2ca27a601c5eb38a4c5d64422c4cbab0c535f248087eda5c2"
-
-[[package]]
-name = "jiff-tzdb-platform"
-version = "0.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "875a5a69ac2bab1a891711cf5eccbec1ce0341ea805560dcd90b7a2e925132e8"
-dependencies = [
- "jiff-tzdb",
-]
-
-[[package]]
-name = "js-sys"
-version = "0.3.85"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8c942ebf8e95485ca0d52d97da7c5a2c387d0e7f0ba4c35e93bfcaee045955b3"
-dependencies = [
- "once_cell",
- "wasm-bindgen",
-]
-
-[[package]]
-name = "keccak"
-version = "0.1.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cb26cec98cce3a3d96cbb7bced3c4b16e3d13f27ec56dbd62cbc8f39cfb9d653"
-dependencies = [
- "cpufeatures",
-]
-
-[[package]]
-name = "lazy_static"
-version = "1.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "bbd2bcb4c963f2ddae06a2efc7e9f3591312473c50c6685e1f298068316e66fe"
-
-[[package]]
-name = "libc"
-version = "0.2.182"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6800badb6cb2082ffd7b6a67e6125bb39f18782f793520caee8cb8846be06112"
-
-[[package]]
-name = "libloading"
-version = "0.8.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7c4b02199fee7c5d21a5ae7d8cfa79a6ef5bb2fc834d6e9058e89c825efdc55"
-dependencies = [
- "cfg-if",
- "windows-link",
-]
-
-[[package]]
-name = "libm"
-version = "0.2.16"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6d2cec3eae94f9f509c767b45932f1ada8350c4bdb85af2fcab4a3c14807981"
-
-[[package]]
-name = "linux-raw-sys"
-version = "0.12.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32a66949e030da00e8c7d4434b251670a91556f4144941d37452769c25d58a53"
-
-[[package]]
-name = "litemap"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6373607a59f0be73a39b6fe456b8192fcc3585f602af20751600e974dd455e77"
-
-[[package]]
-name = "lock_api"
-version = "0.4.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "224399e74b87b5f3557511d98dff8b14089b3dadafcab6bb93eab67d3aace965"
-dependencies = [
- "scopeguard",
-]
-
-[[package]]
-name = "log"
-version = "0.4.29"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5e5032e24019045c762d3c0f28f5b6b8bbf38563a65908389bf7978758920897"
-
-[[package]]
-name = "md-5"
-version = "0.10.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d89e7ee0cfbedfc4da3340218492196241d89eefb6dab27de5df917a6d2e78cf"
-dependencies = [
- "cfg-if",
- "digest",
-]
-
-[[package]]
-name = "memchr"
-version = "2.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f8ca58f447f06ed17d5fc4043ce1b10dd205e060fb3ce5b979b8ed8e59ff3f79"
-
-[[package]]
-name = "minimal-lexical"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "68354c5c6bd36d73ff3feceb05efa59b6acb7626617f4962be322a825e61f79a"
-
-[[package]]
-name = "miniz_oxide"
-version = "0.8.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1fa76a2c86f704bdb222d66965fb3d63269ce38518b83cb0575fca855ebb6316"
-dependencies = [
- "adler2",
- "simd-adler32",
-]
-
-[[package]]
-name = "nix"
-version = "0.30.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "74523f3a35e05aba87a1d978330aef40f67b0304ac79c1c00b294c9830543db6"
-dependencies = [
- "bitflags",
- "cfg-if",
- "cfg_aliases",
- "libc",
-]
-
-[[package]]
-name = "nom"
-version = "7.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d273983c5a657a70a3e8f2a01329822f3b8c8172b73826411a55751e404a0a4a"
-dependencies = [
- "memchr",
- "minimal-lexical",
-]
-
-[[package]]
-name = "num-bigint"
-version = "0.4.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a5e44f723f1133c9deac646763579fdb3ac745e418f2a7af9cd0c431da1f20b9"
-dependencies = [
- "num-integer",
- "num-traits",
-]
-
-[[package]]
-name = "num-conv"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cf97ec579c3c42f953ef76dbf8d55ac91fb219dde70e49aa4a6b7d74e9919050"
-
-[[package]]
-name = "num-integer"
-version = "0.1.46"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7969661fd2958a5cb096e56c8e1ad0444ac2bbcd0061bd28660485a44879858f"
-dependencies = [
- "num-traits",
-]
-
-[[package]]
-name = "num-traits"
-version = "0.2.19"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "071dfc062690e90b734c0b2273ce72ad0ffa95f0c74596bc250dcfd960262841"
-dependencies = [
- "autocfg",
-]
-
-[[package]]
-name = "num_threads"
-version = "0.1.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c7398b9c8b70908f6371f47ed36737907c87c52af34c268fed0bf0ceb92ead9"
-dependencies = [
- "libc",
-]
-
-[[package]]
-name = "once_cell"
-version = "1.21.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "42f5e15c9953c5e4ccceeb2e7382a716482c34515315f7b03532b8b4e8393d2d"
-
-[[package]]
-name = "once_cell_polyfill"
-version = "1.70.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "384b8ab6d37215f3c5301a95a4accb5d64aa607f1fcb26a11b5303878451b4fe"
-
-[[package]]
-name = "os_display"
-version = "0.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ad5fd71b79026fb918650dde6d125000a233764f1c2f1659a1c71118e33ea08f"
-dependencies = [
- "unicode-width",
-]
-
-[[package]]
-name = "outref"
-version = "0.5.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1a80800c0488c3a21695ea981a54918fbb37abf04f4d0720c453632255e2ff0e"
-
-[[package]]
-name = "parking_lot"
-version = "0.12.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "93857453250e3077bd71ff98b6a65ea6621a19bb0f559a85248955ac12c45a1a"
-dependencies = [
- "lock_api",
- "parking_lot_core",
-]
-
-[[package]]
-name = "parking_lot_core"
-version = "0.9.12"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2621685985a2ebf1c516881c026032ac7deafcda1a2c9b7850dc81e3dfcb64c1"
-dependencies = [
- "cfg-if",
- "libc",
- "redox_syscall",
- "smallvec",
- "windows-link",
-]
-
-[[package]]
-name = "portable-atomic"
-version = "1.13.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c33a9471896f1c69cecef8d20cbe2f7accd12527ce60845ff44c153bb2a21b49"
-
-[[package]]
-name = "portable-atomic-util"
-version = "0.2.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7a9db96d7fa8782dd8c15ce32ffe8680bbd1e978a43bf51a34d39483540495f5"
-dependencies = [
- "portable-atomic",
-]
-
-[[package]]
-name = "potential_utf"
-version = "0.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b73949432f5e2a09657003c25bca5e19a0e9c84f8058ca374f49e0ebe605af77"
-dependencies = [
- "serde_core",
- "writeable",
- "zerovec",
-]
-
-[[package]]
-name = "powerfmt"
-version = "0.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "439ee305def115ba05938db6eb1644ff94165c5ab5e9420d1c1bcedbba909391"
-
-[[package]]
-name = "prettyplease"
-version = "0.2.37"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "479ca8adacdd7ce8f1fb39ce9ecccbfe93a3f1344b3d0d97f20bc0196208f62b"
-dependencies = [
- "proc-macro2",
- "syn",
-]
-
-[[package]]
-name = "proc-macro-crate"
-version = "3.4.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "219cb19e96be00ab2e37d6e299658a0cfa83e52429179969b0f0121b4ac46983"
-dependencies = [
- "toml_edit",
-]
-
-[[package]]
-name = "proc-macro2"
-version = "1.0.106"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8fd00f0bb2e90d81d1044c2b32617f68fcb9fa3bb7640c23e9c748e53fb30934"
-dependencies = [
- "unicode-ident",
-]
-
-[[package]]
-name = "procfs"
-version = "0.18.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "25485360a54d6861439d60facef26de713b1e126bf015ec8f98239467a2b82f7"
-dependencies = [
- "bitflags",
- "chrono",
- "flate2",
- "procfs-core",
- "rustix",
-]
-
-[[package]]
-name = "procfs-core"
-version = "0.18.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e6401bf7b6af22f78b563665d15a22e9aef27775b79b149a66ca022468a4e405"
-dependencies = [
- "bitflags",
- "chrono",
- "hex",
-]
-
-[[package]]
-name = "quote"
-version = "1.0.45"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41f2619966050689382d2b44f664f4bc593e129785a36d6ee376ddf37259b924"
-dependencies = [
- "proc-macro2",
-]
-
-[[package]]
-name = "r-efi"
-version = "5.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "69cdb34c158ceb288df11e18b4bd39de994f6657d83847bdffdbd7f346754b0f"
-
-[[package]]
-name = "redox_syscall"
-version = "0.5.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ed2bf2547551a7053d6fdfafda3f938979645c44812fbfcda098faae3f1a362d"
-dependencies = [
- "bitflags",
-]
-
-[[package]]
-name = "regex"
-version = "1.12.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e10754a14b9137dd7b1e3e5b0493cc9171fdd105e0ab477f51b72e7f3ac0e276"
-dependencies = [
- "aho-corasick",
- "memchr",
- "regex-automata",
- "regex-syntax",
-]
-
-[[package]]
-name = "regex-automata"
-version = "0.4.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6e1dd4122fc1595e8162618945476892eefca7b88c52820e74af6262213cae8f"
-dependencies = [
- "aho-corasick",
- "memchr",
- "regex-syntax",
-]
-
-[[package]]
-name = "regex-lite"
-version = "0.1.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cab834c73d247e67f4fae452806d17d3c7501756d98c8808d7c9c7aa7d18f973"
-
-[[package]]
-name = "regex-syntax"
-version = "0.8.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a96887878f22d7bad8a3b6dc5b7440e0ada9a245242924394987b21cf2210a4c"
-
-[[package]]
-name = "rustc-hash"
-version = "2.1.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "357703d41365b4b27c590e3ed91eabb1b663f07c4c084095e60cbed4362dff0d"
-
-[[package]]
-name = "rustix"
-version = "1.1.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6fe4565b9518b83ef4f91bb47ce29620ca828bd32cb7e408f0062e9930ba190"
-dependencies = [
- "bitflags",
- "errno",
- "libc",
- "linux-raw-sys",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "rustversion"
-version = "1.0.22"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b39cdef0fa800fc44525c84ccb54a029961a8215f9619753635a9c0d2538d46d"
-
-[[package]]
-name = "same-file"
-version = "1.0.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "93fc1dc3aaa9bfed95e02e6eadabb4baf7e3078b0bd1b4d7b6b0b68378900502"
-dependencies = [
- "winapi-util",
-]
-
-[[package]]
-name = "scopeguard"
-version = "1.2.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "94143f37725109f92c262ed2cf5e59bce7498c01bcc1502d7b9afe439a4e9f49"
-
-[[package]]
-name = "self_cell"
-version = "1.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b12e76d157a900eb52e81bc6e9f3069344290341720e9178cde2407113ac8d89"
-
-[[package]]
-name = "selinux"
-version = "0.6.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7f4d7a0c34b924081f7fbdcb93121399f0d4182c0ec4bf9c01bfe4e7e21fcf16"
-dependencies = [
- "bitflags",
- "errno",
- "libc",
- "once_cell",
- "parking_lot",
- "selinux-sys",
- "thiserror 2.0.18",
-]
-
-[[package]]
-name = "selinux-sys"
-version = "0.6.15"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "debaba5832b4831ffe0ba9118b526c752c960f41c46c4ef197d9a15f5179d6fd"
-dependencies = [
- "bindgen",
- "cc",
- "dunce",
- "walkdir",
-]
-
-[[package]]
-name = "serde"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9a8e94ea7f378bd32cbbd37198a4a91436180c5bb472411e48b5ec2e2124ae9e"
-dependencies = [
- "serde_core",
- "serde_derive",
-]
-
-[[package]]
-name = "serde_core"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "41d385c7d4ca58e59fc732af25c3983b67ac852c1a25000afe1175de458b67ad"
-dependencies = [
- "serde_derive",
-]
-
-[[package]]
-name = "serde_derive"
-version = "1.0.228"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d540f220d3187173da220f885ab66608367b6574e925011a9353e4badda91d79"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "serde_json"
-version = "1.0.149"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "83fc039473c5595ace860d8c4fafa220ff474b3fc6bfdb4293327f1a37e94d86"
-dependencies = [
- "itoa",
- "memchr",
- "serde",
- "serde_core",
- "zmij",
-]
-
-[[package]]
-name = "sha1"
-version = "0.10.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e3bf829a2d51ab4a5ddf1352d8470c140cadc8301b2ae1789db023f01cedd6ba"
-dependencies = [
- "cfg-if",
- "cpufeatures",
- "digest",
-]
-
-[[package]]
-name = "sha2"
-version = "0.10.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a7507d819769d01a365ab707794a4084392c824f54a7a6a7862f8c3d0892b283"
-dependencies = [
- "cfg-if",
- "cpufeatures",
- "digest",
-]
-
-[[package]]
-name = "sha3"
-version = "0.10.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "75872d278a8f37ef87fa0ddbda7802605cb18344497949862c0d4dcb291eba60"
-dependencies = [
- "digest",
- "keccak",
-]
-
-[[package]]
-name = "shlex"
-version = "1.3.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0fda2ff0d084019ba4d7c6f371c95d8fd75ce3524c3cb8fb653a3023f6323e64"
-
-[[package]]
-name = "simd-adler32"
-version = "0.3.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e320a6c5ad31d271ad523dcf3ad13e2767ad8b1cb8f047f75a8aeaf8da139da2"
-
-[[package]]
-name = "sm3"
-version = "0.4.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebb9a3b702d0a7e33bc4d85a14456633d2b165c2ad839c5fd9a8417c1ab15860"
-dependencies = [
- "digest",
-]
-
-[[package]]
-name = "smallvec"
-version = "1.15.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "67b1b7a3b5fe4f1376887184045fcf45c69e92af734b7aaddc05fb777b6fbd03"
-
-[[package]]
-name = "socket2"
-version = "0.6.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "86f4aa3ad99f2088c990dfa82d367e19cb29268ed67c574d10d0a4bfe71f07e0"
-dependencies = [
- "libc",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "spin"
-version = "0.10.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d5fe4ccb98d9c292d56fec89a5e07da7fc4cf0dc11e156b41793132775d3e591"
-
-[[package]]
-name = "stable_deref_trait"
-version = "1.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6ce2be8dc25455e1f91df71bfa12ad37d7af1092ae736f3a6cd0e37bc7810596"
-
-[[package]]
-name = "statrs"
-version = "0.18.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a3fe7c28c6512e766b0874335db33c94ad7b8f9054228ae1c2abd47ce7d335e"
-dependencies = [
- "approx",
- "num-traits",
-]
-
-[[package]]
-name = "strsim"
-version = "0.11.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7da8b5736845d9f2fcb837ea5d9e2628564b3b043a70948a3f0b778838c5fb4f"
-
-[[package]]
-name = "syn"
-version = "2.0.114"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d4d107df263a3013ef9b1879b0df87d706ff80f65a86ea879bd9c31f9b307c2a"
-dependencies = [
- "proc-macro2",
- "quote",
- "unicode-ident",
-]
-
-[[package]]
-name = "synstructure"
-version = "0.13.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "728a70f3dbaf5bab7f0c4b1ac8d7ae5ea60a4b5549c8a5914361c99147a709d2"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "tempfile"
-version = "3.26.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "82a72c767771b47409d2345987fda8628641887d5466101319899796367354a0"
-dependencies = [
- "fastrand",
- "getrandom 0.3.4",
- "once_cell",
- "rustix",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "terminal_size"
-version = "0.4.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "60b8cb979cb11c32ce1603f8137b22262a9d131aaa5c37b5678025f22b8becd0"
-dependencies = [
- "rustix",
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "thiserror"
-version = "1.0.69"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6aaf5339b578ea85b50e080feb250a3e8ae8cfcdff9a461c9ec2904bc923f52"
-dependencies = [
- "thiserror-impl 1.0.69",
-]
-
-[[package]]
-name = "thiserror"
-version = "2.0.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4288b5bcbc7920c07a1149a35cf9590a2aa808e0bc1eafaade0b80947865fbc4"
-dependencies = [
- "thiserror-impl 2.0.18",
-]
-
-[[package]]
-name = "thiserror-impl"
-version = "1.0.69"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4fee6c4efc90059e10f81e6d42c60a18f76588c3d74cb83a0b242a2b6c7504c1"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "thiserror-impl"
-version = "2.0.18"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ebc4ee7f67670e9b64d05fa4253e753e016c6c95ff35b89b7941d6b856dec1d5"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "time"
-version = "0.3.47"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "743bd48c283afc0388f9b8827b976905fb217ad9e647fae3a379a9283c4def2c"
-dependencies = [
- "deranged",
- "itoa",
- "libc",
- "num-conv",
- "num_threads",
- "powerfmt",
- "serde_core",
- "time-core",
- "time-macros",
-]
-
-[[package]]
-name = "time-core"
-version = "0.1.8"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7694e1cfe791f8d31026952abf09c69ca6f6fa4e1a1229e18988f06a04a12dca"
-
-[[package]]
-name = "time-macros"
-version = "0.2.27"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2e70e4c5a0e0a8a4823ad65dfe1a6930e4f4d756dcd9dd7939022b5e8c501215"
-dependencies = [
- "num-conv",
- "time-core",
-]
-
-[[package]]
-name = "tinystr"
-version = "0.8.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "42d3e9c45c09de15d06dd8acf5f4e0e399e85927b7f00711024eb7ae10fa4869"
-dependencies = [
- "displaydoc",
- "serde_core",
- "zerovec",
-]
-
-[[package]]
-name = "toml_datetime"
-version = "0.7.5+spec-1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "92e1cfed4a3038bc5a127e35a2d360f145e1f4b971b551a2ba5fd7aedf7e1347"
-dependencies = [
- "serde_core",
-]
-
-[[package]]
-name = "toml_edit"
-version = "0.23.10+spec-1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "84c8b9f757e028cee9fa244aea147aab2a9ec09d5325a9b01e0a49730c2b5269"
-dependencies = [
- "indexmap",
- "toml_datetime",
- "toml_parser",
- "winnow",
-]
-
-[[package]]
-name = "toml_parser"
-version = "1.0.6+spec-1.1.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a3198b4b0a8e11f09dd03e133c0280504d0801269e9afa46362ffde1cbeebf44"
-dependencies = [
- "winnow",
-]
-
-[[package]]
-name = "type-map"
-version = "0.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "cb30dbbd9036155e74adad6812e9898d03ec374946234fbcebd5dfc7b9187b90"
-dependencies = [
- "rustc-hash",
-]
-
-[[package]]
-name = "typenum"
-version = "1.19.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "562d481066bde0658276a35467c4af00bdc6ee726305698a55b86e61d7ad82bb"
-
-[[package]]
-name = "unic-langid"
-version = "0.9.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a28ba52c9b05311f4f6e62d5d9d46f094bd6e84cb8df7b3ef952748d752a7d05"
-dependencies = [
- "unic-langid-impl",
-]
-
-[[package]]
-name = "unic-langid-impl"
-version = "0.9.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "dce1bf08044d4b7a94028c93786f8566047edc11110595914de93362559bc658"
-dependencies = [
- "tinystr",
-]
-
-[[package]]
-name = "unicode-ident"
-version = "1.0.22"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9312f7c4f6ff9069b165498234ce8be658059c6728633667c526e27dc2cf1df5"
-
-[[package]]
-name = "unicode-width"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b4ac048d71ede7ee76d585517add45da530660ef4390e49b098733c6e897f254"
-
-[[package]]
-name = "unit-prefix"
-version = "0.5.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "81e544489bf3d8ef66c953931f56617f423cd4b5494be343d9b9d3dda037b9a3"
-
-[[package]]
-name = "utf16_iter"
-version = "1.0.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c8232dd3cdaed5356e0f716d285e4b40b932ac434100fe9b7e0e8e935b9e6246"
-
-[[package]]
-name = "utf8_iter"
-version = "1.0.4"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b6c140620e7ffbb22c2dee59cafe6084a59b5ffc27a8859a5f0d494b5d52b6be"
-
-[[package]]
-name = "utf8parse"
-version = "0.2.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "06abde3611657adf66d383f00b093d7faecc7fa57071cce2578660c9f1010821"
-
-[[package]]
-name = "utmp-classic"
-version = "0.1.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "e24c654e19afaa6b8f3877ece5d3bed849c2719c56f6752b18ca7da4fcc6e85a"
-dependencies = [
- "cfg-if",
- "libc",
- "thiserror 1.0.69",
- "time",
- "utmp-classic-raw",
- "zerocopy",
-]
-
-[[package]]
-name = "utmp-classic-raw"
-version = "0.1.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "22c226537a3d6e01c440c1926ca0256dbee2d19b2229ede6fc4863a6493dd831"
-dependencies = [
- "cfg-if",
- "zerocopy",
-]
-
-[[package]]
-name = "uucore"
-version = "0.7.0"
-dependencies = [
- "base64-simd",
- "bigdecimal",
- "blake2b_simd",
- "blake3",
- "bstr",
- "clap",
- "codspeed-divan-compat",
- "crc-fast",
- "data-encoding",
- "data-encoding-macro",
- "digest",
- "dns-lookup",
- "dunce",
- "fluent",
- "fluent-bundle",
- "fluent-syntax",
- "glob",
- "hex",
- "icu_calendar",
- "icu_collator",
- "icu_datetime",
- "icu_decimal",
- "icu_locale",
- "icu_provider",
- "itertools 0.14.0",
- "jiff",
- "jiff-icu",
- "libc",
- "md-5",
- "memchr",
- "nix",
- "num-traits",
- "os_display",
- "procfs",
- "rustc-hash",
- "selinux",
- "sha1",
- "sha2",
- "sha3",
- "sm3",
- "tempfile",
- "thiserror 2.0.18",
- "time",
- "unic-langid",
- "unit-prefix",
- "utmp-classic",
- "uucore_procs",
- "walkdir",
- "wild",
- "winapi-util",
- "windows-sys 0.61.2",
- "xattr",
- "z85",
-]
-
-[[package]]
-name = "uucore_procs"
-version = "0.7.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0f63e2d5083ff0983193a33e2d57fd271c7e3e3e7df8e46e8f471865647b2cbc"
-dependencies = [
- "proc-macro2",
- "quote",
-]
-
-[[package]]
-name = "version_check"
-version = "0.9.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0b928f33d975fc6ad9f86c8f283853ad26bdd5b10b7f1542aa2fa15e2289105a"
-
-[[package]]
-name = "vsimd"
-version = "0.8.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5c3082ca00d5a5ef149bb8b555a72ae84c9c59f7250f013ac822ac2e49b19c64"
-
-[[package]]
-name = "walkdir"
-version = "2.5.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "29790946404f91d9c5d06f9874efddea1dc06c5efe94541a7d6863108e3a5e4b"
-dependencies = [
- "same-file",
- "winapi-util",
-]
-
-[[package]]
-name = "wasi"
-version = "0.11.1+wasi-snapshot-preview1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ccf3ec651a847eb01de73ccad15eb7d99f80485de043efb2f370cd654f4ea44b"
-
-[[package]]
-name = "wasip2"
-version = "1.0.2+wasi-0.2.9"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9517f9239f02c069db75e65f174b3da828fe5f5b945c4dd26bd25d89c03ebcf5"
-dependencies = [
- "wit-bindgen",
-]
-
-[[package]]
-name = "wasm-bindgen"
-version = "0.2.108"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "64024a30ec1e37399cf85a7ffefebdb72205ca1c972291c51512360d90bd8566"
-dependencies = [
- "cfg-if",
- "once_cell",
- "rustversion",
- "wasm-bindgen-macro",
- "wasm-bindgen-shared",
-]
-
-[[package]]
-name = "wasm-bindgen-macro"
-version = "0.2.108"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "008b239d9c740232e71bd39e8ef6429d27097518b6b30bdf9086833bd5b6d608"
-dependencies = [
- "quote",
- "wasm-bindgen-macro-support",
-]
-
-[[package]]
-name = "wasm-bindgen-macro-support"
-version = "0.2.108"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5256bae2d58f54820e6490f9839c49780dff84c65aeab9e772f15d5f0e913a55"
-dependencies = [
- "bumpalo",
- "proc-macro2",
- "quote",
- "syn",
- "wasm-bindgen-shared",
-]
-
-[[package]]
-name = "wasm-bindgen-shared"
-version = "0.2.108"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1f01b580c9ac74c8d8f0c0e4afb04eeef2acf145458e52c03845ee9cd23e3d12"
-dependencies = [
- "unicode-ident",
-]
-
-[[package]]
-name = "wild"
-version = "2.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a3131afc8c575281e1e80f36ed6a092aa502c08b18ed7524e86fbbb12bb410e1"
-dependencies = [
- "glob",
-]
-
-[[package]]
-name = "winapi-util"
-version = "0.1.11"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c2a7b1c03c876122aa43f3020e6c3c3ee5c05081c9a00739faf7503aeba10d22"
-dependencies = [
- "windows-sys 0.60.2",
-]
-
-[[package]]
-name = "windows-core"
-version = "0.62.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b8e83a14d34d0623b51dce9581199302a221863196a1dde71a7663a4c2be9deb"
-dependencies = [
- "windows-implement",
- "windows-interface",
- "windows-link",
- "windows-result",
- "windows-strings",
-]
-
-[[package]]
-name = "windows-implement"
-version = "0.60.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "053e2e040ab57b9dc951b72c264860db7eb3b0200ba345b4e4c3b14f67855ddf"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "windows-interface"
-version = "0.59.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3f316c4a2570ba26bbec722032c4099d8c8bc095efccdc15688708623367e358"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "windows-link"
-version = "0.2.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f0805222e57f7521d6a62e36fa9163bc891acd422f971defe97d64e70d0a4fe5"
-
-[[package]]
-name = "windows-result"
-version = "0.4.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7781fa89eaf60850ac3d2da7af8e5242a5ea78d1a11c49bf2910bb5a73853eb5"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "windows-strings"
-version = "0.5.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "7837d08f69c77cf6b07689544538e017c1bfcf57e34b4c0ff58e6c2cd3b37091"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.59.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e38bc4d79ed67fd075bcc251a1c39b32a1776bbe92e5bef1f0bf1f8c531853b"
-dependencies = [
- "windows-targets 0.52.6",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.60.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "f2f500e4d28234f72040990ec9d39e3a6b950f9f22d3dba18416c35882612bcb"
-dependencies = [
- "windows-targets 0.53.5",
-]
-
-[[package]]
-name = "windows-sys"
-version = "0.61.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "ae137229bcbd6cdf0f7b80a31df61766145077ddf49416a728b02cb3921ff3fc"
-dependencies = [
- "windows-link",
-]
-
-[[package]]
-name = "windows-targets"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9b724f72796e036ab90c1021d4780d4d3d648aca59e491e6b98e725b84e99973"
-dependencies = [
- "windows_aarch64_gnullvm 0.52.6",
- "windows_aarch64_msvc 0.52.6",
- "windows_i686_gnu 0.52.6",
- "windows_i686_gnullvm 0.52.6",
- "windows_i686_msvc 0.52.6",
- "windows_x86_64_gnu 0.52.6",
- "windows_x86_64_gnullvm 0.52.6",
- "windows_x86_64_msvc 0.52.6",
-]
-
-[[package]]
-name = "windows-targets"
-version = "0.53.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "4945f9f551b88e0d65f3db0bc25c33b8acea4d9e41163edf90dcd0b19f9069f3"
-dependencies = [
- "windows-link",
- "windows_aarch64_gnullvm 0.53.1",
- "windows_aarch64_msvc 0.53.1",
- "windows_i686_gnu 0.53.1",
- "windows_i686_gnullvm 0.53.1",
- "windows_i686_msvc 0.53.1",
- "windows_x86_64_gnu 0.53.1",
- "windows_x86_64_gnullvm 0.53.1",
- "windows_x86_64_msvc 0.53.1",
-]
-
-[[package]]
-name = "windows_aarch64_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32a4622180e7a0ec044bb555404c800bc9fd9ec262ec147edd5989ccd0c02cd3"
-
-[[package]]
-name = "windows_aarch64_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "a9d8416fa8b42f5c947f8482c43e7d89e73a173cead56d044f6a56104a6d1b53"
-
-[[package]]
-name = "windows_aarch64_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "09ec2a7bb152e2252b53fa7803150007879548bc709c039df7627cabbd05d469"
-
-[[package]]
-name = "windows_aarch64_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b9d782e804c2f632e395708e99a94275910eb9100b2114651e04744e9b125006"
-
-[[package]]
-name = "windows_i686_gnu"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "8e9b5ad5ab802e97eb8e295ac6720e509ee4c243f69d781394014ebfe8bbfa0b"
-
-[[package]]
-name = "windows_i686_gnu"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "960e6da069d81e09becb0ca57a65220ddff016ff2d6af6a223cf372a506593a3"
-
-[[package]]
-name = "windows_i686_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0eee52d38c090b3caa76c563b86c3a4bd71ef1a819287c19d586d7334ae8ed66"
-
-[[package]]
-name = "windows_i686_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fa7359d10048f68ab8b09fa71c3daccfb0e9b559aed648a8f95469c27057180c"
-
-[[package]]
-name = "windows_i686_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "240948bc05c5e7c6dabba28bf89d89ffce3e303022809e73deaefe4f6ec56c66"
-
-[[package]]
-name = "windows_i686_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1e7ac75179f18232fe9c285163565a57ef8d3c89254a30685b57d83a38d326c2"
-
-[[package]]
-name = "windows_x86_64_gnu"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "147a5c80aabfbf0c7d901cb5895d1de30ef2907eb21fbbab29ca94c5b08b1a78"
-
-[[package]]
-name = "windows_x86_64_gnu"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9c3842cdd74a865a8066ab39c8a7a473c0778a3f29370b5fd6b4b9aa7df4a499"
-
-[[package]]
-name = "windows_x86_64_gnullvm"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "24d5b23dc417412679681396f2b49f3de8c1473deb516bd34410872eff51ed0d"
-
-[[package]]
-name = "windows_x86_64_gnullvm"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "0ffa179e2d07eee8ad8f57493436566c7cc30ac536a3379fdf008f47f6bb7ae1"
-
-[[package]]
-name = "windows_x86_64_msvc"
-version = "0.52.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "589f6da84c646204747d1270a2a5661ea66ed1cced2631d546fdfb155959f9ec"
-
-[[package]]
-name = "windows_x86_64_msvc"
-version = "0.53.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d6bbff5f0aada427a1e5a6da5f1f98158182f26556f345ac9e04d36d0ebed650"
-
-[[package]]
-name = "winnow"
-version = "0.7.14"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "5a5364e9d77fcdeeaa6062ced926ee3381faa2ee02d3eb83a5c27a8825540829"
-dependencies = [
- "memchr",
-]
-
-[[package]]
-name = "wit-bindgen"
-version = "0.51.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d7249219f66ced02969388cf2bb044a09756a083d0fab1e566056b04d9fbcaa5"
-
-[[package]]
-name = "write16"
-version = "1.0.0"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d1890f4022759daae28ed4fe62859b1236caebfc61ede2f63ed4e695f3f6d936"
-
-[[package]]
-name = "writeable"
-version = "0.6.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "9edde0db4769d2dc68579893f2306b26c6ecfbe0ef499b013d731b7b9247e0b9"
-dependencies = [
- "either",
-]
-
-[[package]]
-name = "xattr"
-version = "1.6.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "32e45ad4206f6d2479085147f02bc2ef834ac85886624a23575ae137c8aa8156"
-dependencies = [
- "libc",
- "rustix",
-]
-
-[[package]]
-name = "yoke"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "72d6e5c6afb84d73944e5cedb052c4680d5657337201555f9f2a16b7406d4954"
-dependencies = [
- "stable_deref_trait",
- "yoke-derive",
- "zerofrom",
-]
-
-[[package]]
-name = "yoke-derive"
-version = "0.8.1"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "b659052874eb698efe5b9e8cf382204678a0086ebf46982b79d6ca3182927e5d"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
- "synstructure",
-]
-
-[[package]]
-name = "z85"
-version = "3.0.7"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "c6e61e59a957b7ccee15d2049f86e8bfd6f66968fcd88f018950662d9b86e675"
-
-[[package]]
-name = "zerocopy"
-version = "0.7.35"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "1b9b4fd18abc82b8136838da5d50bae7bdea537c574d8dc1a34ed098d6c166f0"
-dependencies = [
- "byteorder",
- "zerocopy-derive",
-]
-
-[[package]]
-name = "zerocopy-derive"
-version = "0.7.35"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "fa4f8080344d4671fb4e831a13ad1e68092748387dfc4f55e356242fae12ce3e"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "zerofrom"
-version = "0.1.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "50cc42e0333e05660c3587f3bf9d0478688e15d870fab3346451ce7f8c9fbea5"
-dependencies = [
- "zerofrom-derive",
-]
-
-[[package]]
-name = "zerofrom-derive"
-version = "0.1.6"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "d71e5d6e06ab090c67b5e44993ec16b72dcbaabc526db883a360057678b48502"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
- "synstructure",
-]
-
-[[package]]
-name = "zerotrie"
-version = "0.2.3"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "2a59c17a5562d507e4b54960e8569ebee33bee890c70aa3fe7b97e85a9fd7851"
-dependencies = [
- "displaydoc",
- "yoke",
- "zerofrom",
-]
-
-[[package]]
-name = "zerovec"
-version = "0.11.5"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "6c28719294829477f525be0186d13efa9a3c602f7ec202ca9e353d310fb9a002"
-dependencies = [
- "serde",
- "yoke",
- "zerofrom",
- "zerovec-derive",
-]
-
-[[package]]
-name = "zerovec-derive"
-version = "0.11.2"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "eadce39539ca5cb3985590102671f2567e659fca9666581ad3411d59207951f3"
-dependencies = [
- "proc-macro2",
- "quote",
- "syn",
-]
-
-[[package]]
-name = "zmij"
-version = "1.0.19"
-source = "registry+https://github.com/rust-lang/crates.io-index"
-checksum = "3ff05f8caa9038894637571ae6b9e29466c1f4f829d26c9b28f869a29cbe3445"
diff --git a/registry/native/stubs/uucore/Cargo.toml b/registry/native/stubs/uucore/Cargo.toml
deleted file mode 100644
index 2ee5189d3..000000000
--- a/registry/native/stubs/uucore/Cargo.toml
+++ /dev/null
@@ -1,500 +0,0 @@
-# THIS FILE IS AUTOMATICALLY GENERATED BY CARGO
-#
-# When uploading crates to the registry Cargo will automatically
-# "normalize" Cargo.toml files for maximal compatibility
-# with all versions of Cargo and also rewrite `path` dependencies
-# to registry (e.g., crates.io) dependencies.
-#
-# If you are reading this file be aware that the original Cargo.toml
-# will likely look very different (and much more reasonable).
-# See Cargo.toml.orig for the original contents.
-
-[package]
-edition = "2024"
-rust-version = "1.88.0"
-name = "uucore"
-version = "0.7.0"
-authors = ["uutils developers"]
-build = "build.rs"
-autolib = false
-autobins = false
-autoexamples = false
-autotests = false
-autobenches = false
-description = "uutils ~ 'core' uutils code library (cross-platform)"
-homepage = "https://github.com/uutils/coreutils"
-readme = false
-keywords = [
-    "coreutils",
-    "uutils",
-    "cross-platform",
-    "cli",
-    "utility",
-]
-categories = ["command-line-utilities"]
-license = "MIT"
-repository = "https://github.com/uutils/coreutils/tree/main/src/uucore"
-
-[package.metadata.docs.rs]
-all-features = true
-
-[features]
-backup-control = []
-benchmark = [
-    "divan",
-    "itertools",
-    "tempfile",
-]
-buf-copy = []
-checksum = [
-    "quoting-style",
-    "sum",
-    "base64-simd",
-]
-colors = []
-default = ["signals"]
-encoding = [
-    "data-encoding",
-    "data-encoding-macro",
-    "z85",
-    "base64-simd",
-]
-entries = ["libc"]
-extendedbigdecimal = [
-    "bigdecimal",
-    "num-traits",
-]
-fast-inc = []
-feat_systemd_logind = [
-    "utmpx",
-    "libc",
-]
-format = [
-    "bigdecimal",
-    "extendedbigdecimal",
-    "itertools",
-    "parser-num",
-    "num-traits",
-    "quoting-style",
-    "unit-prefix",
-]
-fs = [
-    "dunce",
-    "libc",
-    "winapi-util",
-    "windows-sys",
-]
-fsext = [
-    "libc",
-    "windows-sys",
-    "bstr",
-]
-fsxattr = [
-    "xattr",
-    "itertools",
-]
-hardware = []
-i18n-all = [
-    "i18n-charmap",
-    "i18n-collator",
-    "i18n-decimal",
-    "i18n-datetime",
-]
-i18n-charmap = ["i18n-common"]
-i18n-collator = [
-    "i18n-common",
-    "icu_collator",
-]
-i18n-common = ["icu_locale"]
-i18n-datetime = [
-    "i18n-common",
-    "icu_calendar",
-    "icu_datetime",
-    "jiff-icu",
-    "jiff",
-]
-i18n-decimal = [
-    "i18n-common",
-    "icu_decimal",
-    "icu_provider",
-]
-lines = []
-mode = ["libc"]
-parser = [
-    "parser-num",
-    "parser-size",
-    "parser-glob",
-]
-parser-glob = ["glob"]
-parser-num = [
-    "extendedbigdecimal",
-    "num-traits",
-]
-parser-size = [
-    "parser-num",
-    "procfs",
-]
-perms = [
-    "entries",
-    "libc",
-    "walkdir",
-]
-pipes = []
-proc-info = [
-    "tty",
-    "walkdir",
-]
-process = ["libc"]
-quoting-style = ["i18n-common"]
-ranges = []
-ringbuffer = []
-safe-traversal = ["libc"]
-selinux = ["dep:selinux"]
-signals = []
-smack = ["xattr"]
-sum = [
-    "digest",
-    "hex",
-    "memchr",
-    "md-5",
-    "sha1",
-    "sha2",
-    "sha3",
-    "blake2b_simd",
-    "blake3",
-    "sm3",
-    "crc-fast",
-    "data-encoding",
-]
-time = ["jiff"]
-tty = []
-update-control = ["parser"]
-uptime = [
-    "jiff",
-    "libc",
-    "windows-sys",
-    "utmpx",
-    "utmp-classic",
-]
-utf8 = []
-utmpx = [
-    "time",
-    "time/macros",
-    "libc",
-    "dns-lookup",
-]
-version-cmp = []
-wide = []
-
-[lib]
-name = "uucore"
-path = "src/lib/lib.rs"
-
-[dependencies.base64-simd]
-version = "0.8"
-optional = true
-
-[dependencies.bigdecimal]
-version = "0.4"
-optional = true
-
-[dependencies.blake2b_simd]
-version = "1.0.2"
-optional = true
-
-[dependencies.blake3]
-version = "1.5.1"
-optional = true
-
-[dependencies.bstr]
-version = "1.9.1"
-optional = true
-
-[dependencies.clap]
-version = "4.5"
-features = [
-    "wrap_help",
-    "cargo",
-    "color",
-]
-
-[dependencies.crc-fast]
-version = "1.5.0"
-optional = true
-
-[dependencies.data-encoding]
-version = "2.6"
-optional = true
-
-[dependencies.data-encoding-macro]
-version = "0.1.15"
-optional = true
-
-[dependencies.digest]
-version = "0.10.7"
-optional = true
-
-[dependencies.divan]
-version = "4.0.5"
-optional = true
-package = "codspeed-divan-compat"
-
-[dependencies.dns-lookup]
-version = "3.0.0"
-optional = true
-
-[dependencies.dunce]
-version = "1.0.4"
-optional = true
-
-[dependencies.fluent]
-version = "0.17.0"
-
-[dependencies.fluent-bundle]
-version = "0.16.0"
-
-[dependencies.fluent-syntax]
-version = "0.12.0"
-
-[dependencies.glob]
-version = "0.3.1"
-optional = true
-
-[dependencies.hex]
-version = "0.4.3"
-optional = true
-
-[dependencies.icu_calendar]
-version = "2.0.0"
-features = ["compiled_data"]
-optional = true
-
-[dependencies.icu_collator]
-version = "2.0.0"
-features = ["compiled_data"]
-optional = true
-
-[dependencies.icu_datetime]
-version = "2.0.0"
-features = ["compiled_data"]
-optional = true
-
-[dependencies.icu_decimal]
-version = "2.0.0"
-features = ["compiled_data"]
-optional = true
-
-[dependencies.icu_locale]
-version = "2.0.0"
-features = ["compiled_data"]
-optional = true
-
-[dependencies.icu_provider]
-version = "2.0.0"
-optional = true
-
-[dependencies.itertools]
-version = "0.14.0"
-optional = true
-
-[dependencies.jiff]
-version = "0.2.18"
-features = [
-    "tzdb-bundle-platform",
-    "tzdb-zoneinfo",
-    "tzdb-concatenated",
-]
-optional = true
-
-[dependencies.jiff-icu]
-version = "0.2.2"
-optional = true
-
-[dependencies.libc]
-version = "0.2.172"
-optional = true
-
-[dependencies.md-5]
-version = "0.10.6"
-optional = true
-
-[dependencies.memchr]
-version = "2.7.2"
-optional = true
-
-[dependencies.num-traits]
-version = "0.2.19"
-optional = true
-
-[dependencies.os_display]
-version = "0.1.3"
-
-[dependencies.rustc-hash]
-version = "2.1.1"
-
-[dependencies.selinux]
-version = "=0.6.0"
-optional = true
-
-[dependencies.sha1]
-version = "0.10.6"
-optional = true
-
-[dependencies.sha2]
-version = "0.10.8"
-optional = true
-
-[dependencies.sha3]
-version = "0.10.8"
-optional = true
-
-[dependencies.sm3]
-version = "0.4.2"
-optional = true
-
-[dependencies.tempfile]
-version = "3.15.0"
-optional = true
-
-[dependencies.thiserror]
-version = "2.0.3"
-
-[dependencies.time]
-version = "0.3.36"
-features = [
-    "formatting",
-    "local-offset",
-    "macros",
-]
-optional = true
-
-[dependencies.unic-langid]
-version = "0.9.6"
-
-[dependencies.unit-prefix]
-version = "0.5"
-optional = true
-
-[dependencies.uucore_procs]
-version = "0.7.0"
-package = "uucore_procs"
-
-[dependencies.z85]
-version = "3.0.5"
-optional = true
-
-[dev-dependencies.tempfile]
-version = "3.15.0"
-
-[target.'cfg(target_os = "linux")'.dependencies.procfs]
-version = "0.18"
-optional = true
-
-[target.'cfg(target_os = "openbsd")'.dependencies.utmp-classic]
-version = "0.1.6"
-optional = true
-
-[target.'cfg(target_os = "windows")'.dependencies.wild]
-version = "2.2.1"
-
-[target.'cfg(target_os = "windows")'.dependencies.winapi-util]
-version = "0.1.8"
-optional = true
-
-[target.'cfg(target_os = "windows")'.dependencies.windows-sys]
-version = "0.61.0"
-features = [
-    "Wdk_System_SystemInformation",
-    "Win32_Storage_FileSystem",
-    "Win32_Foundation",
-    "Win32_System_RemoteDesktop",
-    "Win32_System_SystemInformation",
-    "Win32_System_WindowsProgramming",
-]
-optional = true
-default-features = false
-
-[target."cfg(unix)".dependencies.nix]
-version = "0.30"
-features = [
-    "dir",
-    "fs",
-    "poll",
-    "signal",
-    "uio",
-    "user",
-    "zerocopy",
-]
-default-features = false
-
-[target."cfg(unix)".dependencies.walkdir]
-version = "2.5"
-optional = true
-
-[target."cfg(unix)".dependencies.xattr]
-version = "1.3.1"
-optional = true
-
-[lints.clippy]
-cargo_common_metadata = "allow"
-cast_lossless = "allow"
-cast_possible_truncation = "allow"
-cast_possible_wrap = "allow"
-cast_precision_loss = "allow"
-cast_sign_loss = "allow"
-doc_link_with_quotes = "allow"
-doc_markdown = "allow"
-enum_glob_use = "allow"
-flat_map_option = "allow"
-float_cmp = "allow"
-fn_params_excessive_bools = "allow"
-format_push_string = "allow"
-from_iter_instead_of_collect = "allow"
-ignored_unit_patterns = "allow"
-implicit_hasher = "allow"
-inline_always = "allow"
-items_after_statements = "allow"
-large_stack_arrays = "allow"
-large_types_passed_by_value = "allow"
-match_same_arms = "allow"
-missing_errors_doc = "allow"
-missing_panics_doc = "allow"
-multiple_crate_versions = "allow"
-must_use_candidate = "allow"
-needless_pass_by_value = "allow"
-return_self_not_must_use = "allow"
-should_panic_without_expect = "allow"
-similar_names = "allow"
-struct_excessive_bools = "allow"
-too_many_lines = "allow"
-unnested_or_patterns = "allow"
-unused_self = "allow"
-use_self = "warn"
-used_underscore_items = "allow"
-
-[lints.clippy.all]
-level = "warn"
-priority = -1
-
-[lints.clippy.cargo]
-level = "warn"
-priority = -1
-
-[lints.clippy.collapsible_if]
-level = "allow"
-priority = 127
-
-[lints.clippy.pedantic]
-level = "warn"
-priority = -1
-
-[lints.rust]
-unused_qualifications = "warn"
-
-[lints.rust.unexpected_cfgs]
-level = "warn"
-priority = 0
-check-cfg = [
-    "cfg(fuzzing)",
-    'cfg(target_os, values("cygwin"))',
-]
diff --git a/registry/native/stubs/uucore/Cargo.toml.orig b/registry/native/stubs/uucore/Cargo.toml.orig
deleted file mode 100644
index 187634d36..000000000
--- a/registry/native/stubs/uucore/Cargo.toml.orig
+++ /dev/null
@@ -1,206 +0,0 @@
-# spell-checker:ignore (features) bigdecimal zerocopy extendedbigdecimal tzdb zoneinfo logind
-
-[package]
-name = "uucore"
-description = "uutils ~ 'core' uutils code library (cross-platform)"
-repository = "https://github.com/uutils/coreutils/tree/main/src/uucore"
-authors.workspace = true
-categories.workspace = true
-edition.workspace = true
-rust-version.workspace = true
-homepage.workspace = true
-keywords.workspace = true
-license.workspace = true
-version.workspace = true
-
-[package.metadata.docs.rs]
-all-features = true
-
-[lints]
-workspace = true
-
-[lib]
-path = "src/lib/lib.rs"
-
-[dependencies]
-bstr = { workspace = true, optional = true }
-clap = { workspace = true }
-uucore_procs = { workspace = true }
-unit-prefix = { workspace = true, optional = true }
-dns-lookup = { workspace = true, optional = true }
-dunce = { version = "1.0.4", optional = true }
-glob = { workspace = true, optional = true }
-itertools = { workspace = true, optional = true }
-jiff = { workspace = true, optional = true, features = [
-  "tzdb-bundle-platform",
-  "tzdb-zoneinfo",
-  "tzdb-concatenated",
-] }
-rustc-hash = { workspace = true }
-time = { workspace = true, optional = true, features = [
-  "formatting",
-  "local-offset",
-  "macros",
-] }
-# * "problem" dependencies (pinned)
-data-encoding = { version = "2.6", optional = true }
-data-encoding-macro = { version = "0.1.15", optional = true }
-z85 = { version = "3.0.5", optional = true }
-base64-simd = { version = "0.8", optional = true }
-libc = { workspace = true, optional = true }
-os_display = "0.1.3"
-
-# Benchmark dependencies (optional)
-divan = { workspace = true, optional = true }
-tempfile = { workspace = true, optional = true }
-
-digest = { workspace = true, optional = true }
-hex = { workspace = true, optional = true }
-memchr = { workspace = true, optional = true }
-md-5 = { workspace = true, optional = true }
-sha1 = { workspace = true, optional = true }
-sha2 = { workspace = true, optional = true }
-sha3 = { workspace = true, optional = true }
-blake2b_simd = { workspace = true, optional = true }
-blake3 = { workspace = true, optional = true }
-sm3 = { workspace = true, optional = true }
-crc-fast = { workspace = true, optional = true }
-bigdecimal = { workspace = true, optional = true }
-num-traits = { workspace = true, optional = true }
-selinux = { workspace = true, optional = true }
-
-# icu stuff
-icu_calendar = { workspace = true, optional = true, features = [
-  "compiled_data",
-] }
-icu_collator = { workspace = true, optional = true, features = [
-  "compiled_data",
-] }
-icu_datetime = { workspace = true, optional = true, features = [
-  "compiled_data",
-] }
-icu_decimal = { workspace = true, optional = true, features = [
-  "compiled_data",
-] }
-icu_locale = { workspace = true, optional = true, features = ["compiled_data"] }
-icu_provider = { workspace = true, optional = true }
-jiff-icu = { workspace = true, optional = true }
-
-# Fluent dependencies (always available for localization)
-fluent = { workspace = true }
-fluent-syntax = { workspace = true }
-unic-langid = { workspace = true }
-fluent-bundle = { workspace = true }
-thiserror = { workspace = true }
-
-[target.'cfg(unix)'.dependencies]
-nix = { workspace = true, features = [
-  "dir",
-  "fs",
-  "poll",
-  "signal",
-  "uio",
-  "user",
-  "zerocopy",
-] }
-walkdir = { workspace = true, optional = true }
-xattr = { workspace = true, optional = true }
-
-[dev-dependencies]
-tempfile = { workspace = true }
-
-[target.'cfg(target_os = "linux")'.dependencies]
-procfs = { workspace = true, optional = true }
-
-[target.'cfg(target_os = "windows")'.dependencies]
-wild = "2.2.1"
-winapi-util = { workspace = true, optional = true }
-windows-sys = { workspace = true, optional = true, default-features = false, features = [
-  "Wdk_System_SystemInformation",
-  "Win32_Storage_FileSystem",
-  "Win32_Foundation",
-  "Win32_System_RemoteDesktop",
-  "Win32_System_SystemInformation",
-  "Win32_System_WindowsProgramming",
-] }
-
-[target.'cfg(target_os = "openbsd")'.dependencies]
-utmp-classic = { workspace = true, optional = true }
-
-[features]
-default = ["signals"]
-# * non-default features
-backup-control = []
-colors = []
-checksum = ["quoting-style", "sum", "base64-simd"]
-encoding = ["data-encoding", "data-encoding-macro", "z85", "base64-simd"]
-entries = ["libc"]
-extendedbigdecimal = ["bigdecimal", "num-traits"]
-fast-inc = []
-fs = ["dunce", "libc", "winapi-util", "windows-sys"]
-fsext = ["libc", "windows-sys", "bstr"]
-fsxattr = ["xattr", "itertools"]
-hardware = []
-lines = []
-feat_systemd_logind = ["utmpx", "libc"]
-format = [
-  "bigdecimal",
-  "extendedbigdecimal",
-  "itertools",
-  "parser-num",
-  "num-traits",
-  "quoting-style",
-  "unit-prefix",
-]
-i18n-all = ["i18n-charmap", "i18n-collator", "i18n-decimal", "i18n-datetime"]
-i18n-charmap = ["i18n-common"]
-i18n-common = ["icu_locale"]
-i18n-collator = ["i18n-common", "icu_collator"]
-i18n-decimal = ["i18n-common", "icu_decimal", "icu_provider"]
-i18n-datetime = [
-  "i18n-common",
-  "icu_calendar",
-  "icu_datetime",
-  "jiff-icu",
-  "jiff",
-]
-mode = ["libc"]
-perms = ["entries", "libc", "walkdir"]
-buf-copy = []
-parser-num = ["extendedbigdecimal", "num-traits"]
-parser-size = ["parser-num", "procfs"]
-parser-glob = ["glob"]
-parser = ["parser-num", "parser-size", "parser-glob"]
-pipes = []
-process = ["libc"]
-proc-info = ["tty", "walkdir"]
-quoting-style = ["i18n-common"]
-ranges = []
-ringbuffer = []
-safe-traversal = ["libc"]
-selinux = ["dep:selinux"]
-smack = ["xattr"]
-signals = []
-sum = [
-  "digest",
-  "hex",
-  "memchr",
-  "md-5",
-  "sha1",
-  "sha2",
-  "sha3",
-  "blake2b_simd",
-  "blake3",
-  "sm3",
-  "crc-fast",
-  "data-encoding",
-]
-update-control = ["parser"]
-utf8 = []
-utmpx = ["time", "time/macros", "libc", "dns-lookup"]
-version-cmp = []
-wide = []
-tty = []
-time = ["jiff"]
-uptime = ["jiff", "libc", "windows-sys", "utmpx", "utmp-classic"]
-benchmark = ["divan", "itertools", "tempfile"]
diff --git a/registry/native/stubs/uucore/LICENSE b/registry/native/stubs/uucore/LICENSE
deleted file mode 100644
index 21bd44404..000000000
--- a/registry/native/stubs/uucore/LICENSE
+++ /dev/null
@@ -1,18 +0,0 @@
-Copyright (c) uutils developers
-
-Permission is hereby granted, free of charge, to any person obtaining a copy of
-this software and associated documentation files (the "Software"), to deal in
-the Software without restriction, including without limitation the rights to
-use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of
-the Software, and to permit persons to whom the Software is furnished to do so,
-subject to the following conditions:
-
-The above copyright notice and this permission notice shall be included in all
-copies or substantial portions of the Software.
-
-THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
-IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS
-FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR
-COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER
-IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN
-CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
diff --git a/registry/native/stubs/uucore/build.rs b/registry/native/stubs/uucore/build.rs
deleted file mode 100644
index 2af31f6f2..000000000
--- a/registry/native/stubs/uucore/build.rs
+++ /dev/null
@@ -1,640 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-use std::env;
-use std::fs::File;
-use std::io::Write;
-use std::path::{Path, PathBuf};
-
-pub fn main() -> Result<(), Box<dyn std::error::Error>> {
-    let out_dir = env::var("OUT_DIR")?;
-
-    let mut embedded_file = File::create(Path::new(&out_dir).join("embedded_locales.rs"))?;
-    writeln!(embedded_file, "// Generated at compile time - do not edit")?;
-    writeln!(
-        embedded_file,
-        "// This file contains embedded English locale files"
-    )?;
-    writeln!(embedded_file)?;
-    // No imports needed for match-based lookup
-    writeln!(embedded_file)?;
-
-    // Generate optimized lookup function instead of HashMap
-    writeln!(
-        embedded_file,
-        "pub fn get_embedded_locale(key: &str) -> Option<&'static str> {{"
-    )?;
-    writeln!(embedded_file, "    match key {{")?;
-
-    // Try to detect if we're building for a specific utility by checking build configuration
-    // This attempts to identify individual utility builds vs multicall binary builds
-    let target_utility = detect_target_utility()?;
-    let locales_to_embed = get_locales_to_embed();
-
-    match target_utility {
-        Some(util_name) => {
-            // Embed only the specific utility's locale (cat.ftl for cat for example)
-            embed_single_utility_locale(
-                &mut embedded_file,
-                &project_root()?,
-                &util_name,
-                &locales_to_embed,
-            )?;
-        }
-        None => {
-            // Embed all utility locales (multicall binary or fallback)
-            embed_all_utility_locales(&mut embedded_file, &project_root()?, &locales_to_embed)?;
-        }
-    }
-
-    writeln!(embedded_file, "        _ => None,")?;
-    writeln!(embedded_file, "    }}")?;
-    writeln!(embedded_file, "}}")?;
-
-    embedded_file.flush()?;
-    Ok(())
-}
-
-/// Get the project root directory
-///
-/// # Errors
-///
-/// Returns an error if the `CARGO_MANIFEST_DIR` environment variable is not set
-/// or if the current directory structure does not allow determining the project root.
-fn project_root() -> Result<PathBuf, Box<dyn std::error::Error>> {
-    let manifest_dir = env::var("CARGO_MANIFEST_DIR")?;
-    let uucore_path = Path::new(&manifest_dir);
-
-    // Navigate from src/uucore to project root
-    let project_root = uucore_path
-        .parent() // src/
-        .and_then(|p| p.parent()) // project root
-        .ok_or("Could not determine project root")?;
-
-    Ok(project_root.to_path_buf())
-}
-
-/// Attempt to detect which specific utility is being built
-fn detect_target_utility() -> Result<Option<String>, Box<dyn std::error::Error>> {
-    use std::fs;
-
-    // Tell Cargo to rerun if this environment variable changes
-    println!("cargo:rerun-if-env-changed=UUCORE_TARGET_UTIL");
-
-    // First check if an explicit environment variable was set
-    if let Ok(target_util) = env::var("UUCORE_TARGET_UTIL") {
-        if !target_util.is_empty() {
-            validate_component_name(&target_util)?;
-            return Ok(Some(target_util));
-        }
-    }
-
-    // Auto-detect utility name from CARGO_PKG_NAME if it's a uu_* package
-    if let Ok(pkg_name) = env::var("CARGO_PKG_NAME") {
-        if let Some(util_name) = pkg_name.strip_prefix("uu_") {
-            validate_component_name(util_name)?;
-            println!("cargo:warning=Auto-detected utility name: {util_name}");
-            return Ok(Some(util_name.to_string()));
-        }
-    }
-
-    // Check for a build configuration file in the target directory
-    if let Ok(target_dir) = env::var("CARGO_TARGET_DIR") {
-        let config_path = Path::new(&target_dir).join("uucore_target_util.txt");
-        if let Ok(content) = fs::read_to_string(&config_path) {
-            let util_name = content.trim();
-            if !util_name.is_empty() && util_name != "multicall" {
-                validate_component_name(util_name)?;
-                return Ok(Some(util_name.to_string()));
-            }
-        }
-    }
-
-    // Fallback: Check the default target directory
-    if let Ok(project_root) = project_root() {
-        let config_path = project_root.join("target/uucore_target_util.txt");
-        if let Ok(content) = fs::read_to_string(&config_path) {
-            let util_name = content.trim();
-            if !util_name.is_empty() && util_name != "multicall" {
-                validate_component_name(util_name)?;
-                return Ok(Some(util_name.to_string()));
-            }
-        }
-    }
-
-    // If no configuration found, assume multicall build
-    Ok(None)
-}
-
-/// Embed locale for a single specific utility
-///
-/// # Errors
-///
-/// Returns an error if the locales for `util_name` or `uucore` cannot be found
-/// or if writing to the `embedded_file` fails.
-fn embed_single_utility_locale(
-    embedded_file: &mut File,
-    project_root: &Path,
-    util_name: &str,
-    locales_to_embed: &(String, Option<String>),
-) -> Result<(), Box<dyn std::error::Error>> {
-    // Embed utility-specific locales
-    embed_component_locales(embedded_file, locales_to_embed, util_name, |locale| {
-        project_root
-            .join("src/uu")
-            .join(util_name)
-            .join(format!("locales/{locale}.ftl"))
-    })?;
-
-    if util_name.ends_with("sum") {
-        embed_component_locales(
-            embedded_file,
-            locales_to_embed,
-            "checksum_common",
-            |locale| project_root.join(format!("src/uu/checksum_common/locales/{locale}.ftl")),
-        )?;
-    }
-
-    // Always embed uucore locale file if it exists
-    embed_component_locales(embedded_file, locales_to_embed, "uucore", |locale| {
-        project_root.join(format!("src/uucore/locales/{locale}.ftl"))
-    })?;
-
-    Ok(())
-}
-
-/// Embed locale files for all utilities (multicall binary).
-///
-/// # Errors
-///
-/// Returns an error if the `src/uu` directory cannot be read, if any utility
-/// locales cannot be embedded, or if flushing the `embedded_file` fails.
-fn embed_all_utility_locales(
-    embedded_file: &mut File,
-    project_root: &Path,
-    locales_to_embed: &(String, Option<String>),
-) -> Result<(), Box<dyn std::error::Error>> {
-    use std::fs;
-
-    // Discover all uu_* directories
-    let src_uu_dir = project_root.join("src/uu");
-    if !src_uu_dir.exists() {
-        // When src/uu doesn't exist (e.g., standalone uucore from crates.io),
-        // embed a static list of utility locales that are commonly used
-        embed_static_utility_locales(embedded_file, locales_to_embed)?;
-        return Ok(());
-    }
-
-    let mut util_dirs = Vec::new();
-    for entry in fs::read_dir(&src_uu_dir)? {
-        let entry = entry?;
-        if entry.file_type()?.is_dir() {
-            if let Some(dir_name) = entry.file_name().to_str() {
-                util_dirs.push(dir_name.to_string());
-            }
-        }
-    }
-    util_dirs.sort();
-
-    // Embed locale files for each utility
-    for util_name in &util_dirs {
-        embed_component_locales(embedded_file, locales_to_embed, util_name, |locale| {
-            src_uu_dir
-                .join(util_name)
-                .join(format!("locales/{locale}.ftl"))
-        })?;
-    }
-
-    // Also embed uucore locale file if it exists
-    embed_component_locales(embedded_file, locales_to_embed, "uucore", |locale| {
-        project_root.join(format!("src/uucore/locales/{locale}.ftl"))
-    })?;
-
-    embedded_file.flush()?;
-    Ok(())
-}
-
-/// Embed static utility locales for crates.io builds.
-///
-/// # Errors
-///
-/// Returns an error if the directory containing the crate cannot be read or
-/// if writing to the `embedded_file` fails.
-fn embed_static_utility_locales(
-    embedded_file: &mut File,
-    locales_to_embed: &(String, Option<String>),
-) -> Result<(), Box<dyn std::error::Error>> {
-    use std::env;
-
-    writeln!(
-        embedded_file,
-        "        // Static utility locales for crates.io builds"
-    )?;
-
-    let manifest_dir = env::var("CARGO_MANIFEST_DIR").unwrap_or_default();
-    let Some(native_dir) = Path::new(&manifest_dir)
-        .parent()
-        .and_then(Path::parent)
-    else {
-        return Ok(()); // nothing to scan
-    };
-    let vendor_dir = native_dir.join("vendor");
-    let registry_dir = if vendor_dir.exists() {
-        vendor_dir.as_path()
-    } else {
-        native_dir
-    };
-
-    // First, try to embed uucore locales - critical for common translations like "Usage:"
-    embed_component_locales(embedded_file, locales_to_embed, "uucore", |locale| {
-        Path::new(&manifest_dir).join(format!("locales/{locale}.ftl"))
-    })?;
-
-    // Collect and sort for deterministic builds
-    let mut entries: Vec<_> = std::fs::read_dir(registry_dir)?
-        .filter_map(Result::ok)
-        .collect();
-    entries.sort_by_key(std::fs::DirEntry::file_name);
-
-    for entry in entries {
-        let file_name = entry.file_name();
-        if let Some(dir_name) = file_name.to_str() {
-            // Match cargo-vendor's uu_<util> directories and registry uu_<util>-<version> names.
-            let util_part = dir_name.split_once('-').map_or(dir_name, |(name, _)| name);
-            if let Some(util_name) = util_part.strip_prefix("uu_") {
-                embed_component_locales(
-                    embedded_file,
-                    locales_to_embed,
-                    util_name,
-                    |locale| entry.path().join(format!("locales/{locale}.ftl")),
-                )?;
-            }
-        }
-    }
-
-    Ok(())
-}
-
-/// Determines which locales to embed into the binary.
-///
-/// To support localized messages in installed binaries (e.g., via `cargo install`),
-/// this function identifies the user's current locale from the `LANG` environment
-/// variable.
-///
-/// It always includes "en-US" to ensure that a fallback is available if the
-/// system locale's translation file is missing or if `LANG` is not set.
-fn get_locales_to_embed() -> (String, Option<String>) {
-    let system_locale = env::var("LANG").ok().and_then(|lang| {
-        let locale = lang.split('.').next()?.replace('_', "-");
-        if locale != "en-US" && is_valid_locale_name(&locale) {
-            Some(locale)
-        } else {
-            None
-        }
-    });
-    ("en-US".to_string(), system_locale)
-}
-
-/// Helper function to iterate over the locales to embed.
-///
-/// # Errors
-///
-/// Returns an error if the provided closure `f` returns an error when called
-/// on either the primary or system locale.
-fn for_each_locale<F>(
-    locales: &(String, Option<String>),
-    mut f: F,
-) -> Result<(), Box<dyn std::error::Error>>
-where
-    F: FnMut(&str) -> Result<(), Box<dyn std::error::Error>>,
-{
-    f(&locales.0)?;
-    if let Some(ref system_locale) = locales.1 {
-        f(system_locale)?;
-    }
-    Ok(())
-}
-
-/// Helper function to embed a single locale file.
-///
-/// # Errors
-///
-/// Returns an error if the file at `locale_path` cannot be read or if
-/// writing to `embedded_file` fails.
-fn embed_locale_file(
-    embedded_file: &mut File,
-    locale_path: &Path,
-    locale_key: &str,
-    locale: &str,
-    component: &str,
-) -> Result<(), Box<dyn std::error::Error>> {
-    use std::fs;
-
-    if locale_path.exists() || locale_path.is_file() {
-        let content = fs::read_to_string(locale_path)?;
-        writeln!(
-            embedded_file,
-            "        // Locale for {component} ({locale})"
-        )?;
-        // Determine if we need a hash. If content contains ", we need r#""#
-        let delimiter = if content.contains('"') { "#" } else { "" };
-        writeln!(
-            embedded_file,
-            "        \"{locale_key}\" => Some(r{delimiter}\"{content}\"{delimiter}),"
-        )?;
-
-        // Tell Cargo to rerun if this file changes
-        println!("cargo:rerun-if-changed={}", locale_path.display());
-    }
-    Ok(())
-}
-
-/// Higher-level helper to embed locale files for a component with a path pattern.
-///
-/// This eliminates the repetitive `for_each_locale` + `embed_locale_file` pattern.
-///
-/// # Errors
-///
-/// Returns an error if `for_each_locale` fails, which typically happens if
-/// reading a locale file or writing to the `embedded_file` fails.
-fn embed_component_locales<F>(
-    embedded_file: &mut File,
-    locales: &(String, Option<String>),
-    component_name: &str,
-    path_builder: F,
-) -> Result<(), Box<dyn std::error::Error>>
-where
-    F: Fn(&str) -> PathBuf,
-{
-    validate_component_name(component_name)?;
-    for_each_locale(locales, |locale| {
-        validate_locale_name(locale)?;
-        let locale_path = path_builder(locale);
-        embed_locale_file(
-            embedded_file,
-            &locale_path,
-            &format!("{component_name}/{locale}.ftl"),
-            locale,
-            component_name,
-        )
-    })
-}
-
-fn validate_component_name(component_name: &str) -> Result<(), Box<dyn std::error::Error>> {
-    if is_valid_component_name(component_name) {
-        Ok(())
-    } else {
-        Err(format!("invalid uucore component name: {component_name:?}").into())
-    }
-}
-
-fn validate_locale_name(locale: &str) -> Result<(), Box<dyn std::error::Error>> {
-    if is_valid_locale_name(locale) {
-        Ok(())
-    } else {
-        Err(format!("invalid locale name: {locale:?}").into())
-    }
-}
-
-fn is_valid_component_name(component_name: &str) -> bool {
-    !component_name.is_empty()
-        && component_name.len() <= 128
-        && component_name
-            .bytes()
-            .all(|byte| byte.is_ascii_alphanumeric() || byte == b'_' || byte == b'-')
-        && !component_name.starts_with('-')
-        && !component_name.ends_with('-')
-        && !component_name.contains("..")
-}
-
-fn is_valid_locale_name(locale: &str) -> bool {
-    !locale.is_empty()
-        && locale.len() <= 64
-        && locale
-            .bytes()
-            .all(|byte| byte.is_ascii_alphanumeric() || byte == b'-')
-        && !locale.starts_with('-')
-        && !locale.ends_with('-')
-        && !locale.contains("--")
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::ffi::{OsStr, OsString};
-    use std::sync::Mutex;
-
-    static ENV_LOCK: Mutex<()> = Mutex::new(());
-
-    struct EnvVarGuard {
-        key: &'static str,
-        previous: Option<OsString>,
-    }
-
-    impl EnvVarGuard {
-        fn set(key: &'static str, value: Option<&OsStr>) -> Self {
-            let previous = env::var_os(key);
-            unsafe {
-                match value {
-                    Some(value) => env::set_var(key, value),
-                    None => env::remove_var(key),
-                }
-            }
-            Self { key, previous }
-        }
-    }
-
-    impl Drop for EnvVarGuard {
-        fn drop(&mut self) {
-            unsafe {
-                match &self.previous {
-                    Some(previous) => env::set_var(self.key, previous),
-                    None => env::remove_var(self.key),
-                }
-            }
-        }
-    }
-
-    fn with_lang<T>(value: Option<&str>, f: impl FnOnce() -> T) -> T {
-        let _guard = ENV_LOCK.lock().expect("env test lock poisoned");
-        let _lang = EnvVarGuard::set("LANG", value.map(OsStr::new));
-        f()
-    }
-
-    fn with_env_vars<T>(vars: &[(&'static str, Option<&str>)], f: impl FnOnce() -> T) -> T {
-        let _guard = ENV_LOCK.lock().expect("env test lock poisoned");
-        let _vars: Vec<_> = vars
-            .iter()
-            .map(|(key, value)| EnvVarGuard::set(key, value.map(OsStr::new)))
-            .collect();
-        f()
-    }
-
-    #[test]
-    fn get_locales_to_embed_no_lang() {
-        with_lang(None, || {
-            let (en_locale, system_locale) = get_locales_to_embed();
-            assert_eq!(en_locale, "en-US");
-            assert_eq!(system_locale, None);
-        });
-
-        with_lang(Some(""), || {
-            let (en_locale, system_locale) = get_locales_to_embed();
-            assert_eq!(en_locale, "en-US");
-            assert_eq!(system_locale, None);
-        });
-
-        with_lang(Some("en_US.UTF-8"), || {
-            let (en_locale, system_locale) = get_locales_to_embed();
-            assert_eq!(en_locale, "en-US");
-            assert_eq!(system_locale, None);
-        });
-    }
-
-    #[test]
-    fn get_locales_to_embed_with_lang() {
-        with_lang(Some("fr_FR.UTF-8"), || {
-            let (en_locale, system_locale) = get_locales_to_embed();
-            assert_eq!(en_locale, "en-US");
-            assert_eq!(system_locale, Some("fr-FR".to_string()));
-        });
-
-        with_lang(Some("zh_CN.UTF-8"), || {
-            let (en_locale, system_locale) = get_locales_to_embed();
-            assert_eq!(en_locale, "en-US");
-            assert_eq!(system_locale, Some("zh-CN".to_string()));
-        });
-
-        with_lang(Some("de"), || {
-            let (en_locale, system_locale) = get_locales_to_embed();
-            assert_eq!(en_locale, "en-US");
-            assert_eq!(system_locale, Some("de".to_string()));
-        });
-    }
-
-    #[test]
-    fn get_locales_to_embed_invalid_lang() {
-        for lang in [
-            "../en_US.UTF-8",
-            "en/US.UTF-8",
-            "@@@@",
-            "-en",
-            "en-",
-            "en--US",
-        ] {
-            with_lang(Some(lang), || {
-                let (en_locale, system_locale) = get_locales_to_embed();
-                assert_eq!(en_locale, "en-US");
-                assert_eq!(system_locale, None);
-            });
-        }
-
-        with_lang(Some("XX_YY.UTF-8"), || {
-            let (en_locale, system_locale) = get_locales_to_embed();
-            assert_eq!(en_locale, "en-US");
-            assert_eq!(system_locale, Some("XX-YY".to_string()));
-        });
-    }
-
-    #[test]
-    fn for_each_locale_basic() {
-        let locales = ("en-US".to_string(), Some("fr-FR".to_string()));
-        let mut collected = Vec::new();
-
-        for_each_locale(&locales, |locale| {
-            collected.push(locale.to_string());
-            Ok(())
-        })
-        .unwrap();
-
-        assert_eq!(collected, vec!["en-US", "fr-FR"]);
-    }
-
-    #[test]
-    fn for_each_locale_no_system_locale() {
-        let locales = ("en-US".to_string(), None);
-        let mut collected = Vec::new();
-
-        for_each_locale(&locales, |locale| {
-            collected.push(locale.to_string());
-            Ok(())
-        })
-        .unwrap();
-
-        assert_eq!(collected, vec!["en-US"]);
-    }
-
-    #[test]
-    fn for_each_locale_error_handling() {
-        let locales = ("en-US".to_string(), Some("fr-FR".to_string()));
-
-        let result = for_each_locale(&locales, |_locale| Err("test error".into()));
-
-        assert!(result.is_err());
-    }
-
-    #[test]
-    fn validates_component_names() {
-        for component in ["uucore", "checksum_common", "sha256sum", "base32"] {
-            assert!(is_valid_component_name(component));
-        }
-
-        for component in ["", "../cat", "cat/../../x", "-cat", "cat-", "cat.name"] {
-            assert!(!is_valid_component_name(component));
-        }
-    }
-
-    #[test]
-    fn validates_locale_names() {
-        for locale in ["en-US", "fr-FR", "zh-Hans-CN", "de"] {
-            assert!(is_valid_locale_name(locale));
-        }
-
-        for locale in ["", "../en-US", "en/US", "-en", "en-", "en--US", "en_US"] {
-            assert!(!is_valid_locale_name(locale));
-        }
-    }
-
-    #[test]
-    fn detect_target_utility_rejects_invalid_env_value() {
-        with_env_vars(
-            &[
-                ("UUCORE_TARGET_UTIL", Some("../cat")),
-                ("CARGO_PKG_NAME", None),
-                ("CARGO_TARGET_DIR", None),
-            ],
-            || assert!(detect_target_utility().is_err()),
-        );
-    }
-
-    #[test]
-    fn detect_target_utility_rejects_invalid_package_name() {
-        with_env_vars(
-            &[
-                ("UUCORE_TARGET_UTIL", None),
-                ("CARGO_PKG_NAME", Some("uu_cat/../../sh")),
-                ("CARGO_TARGET_DIR", None),
-            ],
-            || assert!(detect_target_utility().is_err()),
-        );
-    }
-
-    #[test]
-    fn detect_target_utility_accepts_valid_package_name() {
-        with_env_vars(
-            &[
-                ("UUCORE_TARGET_UTIL", None),
-                ("CARGO_PKG_NAME", Some("uu_sha256sum")),
-                ("CARGO_TARGET_DIR", None),
-            ],
-            || {
-                assert_eq!(
-                    detect_target_utility().unwrap(),
-                    Some("sha256sum".to_string())
-                )
-            },
-        );
-    }
-}
diff --git a/registry/native/stubs/uucore/locales/en-US.ftl b/registry/native/stubs/uucore/locales/en-US.ftl
deleted file mode 100644
index 158962095..000000000
--- a/registry/native/stubs/uucore/locales/en-US.ftl
+++ /dev/null
@@ -1,82 +0,0 @@
-# Common strings shared across all uutils commands
-# Mostly clap
-
-# Generic words
-common-error = error
-common-tip = tip
-common-usage = Usage
-common-help = help
-common-version = version
-
-# Common clap error messages
-clap-error-unexpected-argument = { $error_word }: unexpected argument '{ $arg }' found
-clap-error-unexpected-argument-simple = unexpected argument
-clap-error-similar-argument = { $tip_word }: a similar argument exists: '{ $suggestion }'
-clap-error-pass-as-value = { $tip_word }: to pass '{ $arg }' as a value, use '{ $tip_command }'
-clap-error-invalid-value = { $error_word }: invalid value '{ $value }' for '{ $option }'
-clap-error-value-required = { $error_word }: a value is required for '{ $option }' but none was supplied
-clap-error-missing-required-arguments = { $error_word }: the following required arguments were not provided:
-clap-error-possible-values = possible values
-clap-error-help-suggestion = For more information, try '{ $command } --help'.
-common-help-suggestion = For more information, try '--help'.
-
-# Common help text patterns
-help-flag-help = Print help information
-help-flag-version = Print version information
-
-# Common error contexts
-error-io = I/O error
-error-permission-denied = Permission denied
-error-file-not-found = No such file or directory
-error-invalid-argument = Invalid argument
-error-is-a-directory = { $file }: Is a directory
-
-# Common actions
-action-copying = copying
-action-moving = moving
-action-removing = removing
-action-creating = creating
-action-reading = reading
-action-writing = writing
-
-# SELinux error messages
-selinux-error-not-enabled = SELinux is not enabled on this system
-selinux-error-file-open-failure = failed to open the file: { $error }
-selinux-error-context-retrieval-failure = failed to retrieve the security context: { $error }
-selinux-error-context-set-failure = failed to set default file creation context to '{ $context }': { $error }
-selinux-error-context-conversion-failure = failed to set default file creation context to '{ $context }': { $error }
-selinux-error-operation-not-supported = operation not supported
-
-# SMACK error messages
-smack-error-not-enabled = SMACK is not enabled on this system
-smack-error-label-retrieval-failure = failed to get security context: { $error }
-smack-error-label-set-failure = failed to set default file creation context to '{ $context }': { $error }
-smack-error-no-label-set = no security context set
-
-# Safe traversal error messages
-safe-traversal-error-path-contains-null = path contains null byte
-safe-traversal-error-open-failed = failed to open { $path }: { $source }
-safe-traversal-error-stat-failed = failed to stat { $path }: { $source }
-safe-traversal-error-read-dir-failed = failed to read directory { $path }: { $source }
-safe-traversal-error-unlink-failed = failed to unlink { $path }: { $source }
-safe-traversal-error-invalid-fd = invalid file descriptor
-safe-traversal-current-directory = <current directory>
-safe-traversal-directory = <directory>
-
-# checksum-related messages
-checksum-no-properly-formatted = { $checksum_file }: no properly formatted checksum lines found
-checksum-no-file-verified = { $checksum_file }: no file was verified
-checksum-error-failed-to-read-input = failed to read input
-checksum-bad-format = { $count ->
-    [1] { $count } line is improperly formatted
-   *[other] { $count } lines are improperly formatted
-}
-checksum-failed-cksum = { $count ->
-    [1] { $count } computed checksum did NOT match
-   *[other] { $count } computed checksums did NOT match
-}
-checksum-failed-open-file = { $count ->
-    [1] { $count } listed file could not be read
-   *[other] { $count } listed files could not be read
-}
-checksum-error-algo-bad-format = { $file }: { $line }: improperly formatted { $algo } checksum line
diff --git a/registry/native/stubs/uucore/locales/fr-FR.ftl b/registry/native/stubs/uucore/locales/fr-FR.ftl
deleted file mode 100644
index e9ff4abe4..000000000
--- a/registry/native/stubs/uucore/locales/fr-FR.ftl
+++ /dev/null
@@ -1,76 +0,0 @@
-# Chaînes communes partagées entre toutes les commandes uutils
-# Principalement pour clap
-
-# Mots génériques
-common-error = erreur
-common-tip = conseil
-common-usage = Utilisation
-common-help = aide
-common-version = version
-
-# Messages d'erreur clap communs
-clap-error-unexpected-argument = { $error_word } : argument inattendu '{ $arg }' trouvé
-clap-error-unexpected-argument-simple = argument inattendu
-clap-error-similar-argument = { $tip_word } : un argument similaire existe : '{ $suggestion }'
-clap-error-pass-as-value = { $tip_word } : pour passer '{ $arg }' comme valeur, utilisez '{ $tip_command }'
-clap-error-invalid-value = { $error_word } : valeur invalide '{ $value }' pour '{ $option }'
-clap-error-value-required = { $error_word } : une valeur est requise pour '{ $option }' mais aucune n'a été fournie
-clap-error-missing-required-arguments = { $error_word } : les arguments requis suivants n'ont pas été fournis :
-clap-error-possible-values = valeurs possibles
-clap-error-help-suggestion = Pour plus d'informations, essayez '{ $command } --help'.
-common-help-suggestion = Pour plus d'informations, essayez '--help'.
-
-# Modèles de texte d'aide communs
-help-flag-help = Afficher les informations d'aide
-help-flag-version = Afficher les informations de version
-
-# Contextes d'erreur communs
-error-io = Erreur E/S
-error-permission-denied = Permission refusée
-error-file-not-found = Aucun fichier ou répertoire de ce type
-error-invalid-argument = Argument invalide
-error-is-a-directory = { $file }: Est un répertoire
-
-# Actions communes
-action-copying = copie
-action-moving = déplacement
-action-removing = suppression
-action-creating = création
-action-reading = lecture
-action-writing = écriture
-
-# Messages d'erreur SELinux
-selinux-error-not-enabled = SELinux n'est pas activé sur ce système
-selinux-error-file-open-failure = échec de l'ouverture du fichier : { $error }
-selinux-error-context-retrieval-failure = échec de la récupération du contexte de sécurité : { $error }
-selinux-error-context-set-failure = échec de la définition du contexte de création de fichier par défaut à '{ $context }' : { $error }
-selinux-error-context-conversion-failure = échec de la définition du contexte de création de fichier par défaut à '{ $context }' : { $error }
-selinux-error-operation-not-supported = opération non prise en charge
-
-# Messages d'erreur de traversée sécurisée
-safe-traversal-error-path-contains-null = le chemin contient un octet null
-safe-traversal-error-open-failed = échec de l'ouverture de { $path } : { $source }
-safe-traversal-error-stat-failed = échec de l'analyse de { $path } : { $source }
-safe-traversal-error-read-dir-failed = échec de la lecture du répertoire { $path } : { $source }
-safe-traversal-error-unlink-failed = échec de la suppression de { $path } : { $source }
-safe-traversal-error-invalid-fd = descripteur de fichier invalide
-safe-traversal-current-directory = <répertoire courant>
-safe-traversal-directory = <répertoire>
-
-# Messages relatifs au module checksum
-checksum-no-properly-formatted = { $checksum_file }: aucune ligne correctement formattée n'a été trouvée
-checksum-no-file-verified = { $checksum_file }: aucun fichier n'a été vérifié
-checksum-error-failed-to-read-input = échec de la lecture de l'entrée
-checksum-bad-format = { $count ->
-    [1] { $count } ligne invalide
-   *[other] { $count } lignes invalides
-}
-checksum-failed-cksum = { $count ->
-    [1] { $count } somme de hachage ne correspond PAS
-   *[other] { $count } sommes de hachage ne correspondent PAS
-}
-checksum-failed-open-file = { $count ->
-    [1] { $count } fichier passé n'a pas pu être lu
-   *[other] { $count } fichiers passés n'ont pas pu être lu
-}
-checksum-error-algo-bad-format = { $file }: { $line }: ligne invalide pour { $algo }
diff --git a/registry/native/stubs/uucore/src/lib/features.rs b/registry/native/stubs/uucore/src/lib/features.rs
deleted file mode 100644
index 5c92205df..000000000
--- a/registry/native/stubs/uucore/src/lib/features.rs
+++ /dev/null
@@ -1,103 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// features ~ feature-gated modules (core/bundler file)
-//
-// spell-checker:ignore (features) extendedbigdecimal logind
-
-#[cfg(feature = "backup-control")]
-pub mod backup_control;
-#[cfg(feature = "benchmark")]
-pub mod benchmark;
-#[cfg(feature = "buf-copy")]
-pub mod buf_copy;
-#[cfg(feature = "checksum")]
-pub mod checksum;
-#[cfg(feature = "colors")]
-pub mod colors;
-#[cfg(feature = "encoding")]
-pub mod encoding;
-#[cfg(feature = "extendedbigdecimal")]
-pub mod extendedbigdecimal;
-#[cfg(feature = "fast-inc")]
-pub mod fast_inc;
-#[cfg(feature = "format")]
-pub mod format;
-#[cfg(feature = "fs")]
-pub mod fs;
-#[cfg(feature = "fsext")]
-pub mod fsext;
-#[cfg(feature = "i18n-common")]
-pub mod i18n;
-#[cfg(feature = "lines")]
-pub mod lines;
-#[cfg(any(
-    feature = "parser",
-    feature = "parser-num",
-    feature = "parser-size",
-    feature = "parser-glob"
-))]
-pub mod parser;
-#[cfg(feature = "quoting-style")]
-pub mod quoting_style;
-#[cfg(feature = "ranges")]
-pub mod ranges;
-#[cfg(feature = "ringbuffer")]
-pub mod ringbuffer;
-#[cfg(feature = "sum")]
-pub mod sum;
-#[cfg(feature = "time")]
-pub mod time;
-#[cfg(feature = "update-control")]
-pub mod update_control;
-#[cfg(feature = "uptime")]
-pub mod uptime;
-#[cfg(feature = "version-cmp")]
-pub mod version_cmp;
-
-// * (platform-specific) feature-gated modules
-// ** non-windows (i.e. Unix + Fuchsia)
-#[cfg(all(not(windows), feature = "mode"))]
-pub mod mode;
-
-// ** unix + WASI (wasmVM: entries/perms extended to WASI via host_user FFI)
-#[cfg(all(any(unix, target_os = "wasi"), feature = "entries"))]
-pub mod entries;
-#[cfg(all(any(unix, target_os = "wasi"), feature = "perms"))]
-pub mod perms;
-#[cfg(all(unix, any(feature = "pipes", feature = "buf-copy")))]
-pub mod pipes;
-#[cfg(all(target_os = "linux", feature = "proc-info"))]
-pub mod proc_info;
-#[cfg(all(unix, feature = "process"))]
-pub mod process;
-#[cfg(all(unix, not(target_os = "redox")))]
-pub mod safe_traversal;
-#[cfg(all(target_os = "linux", feature = "tty"))]
-pub mod tty;
-
-#[cfg(all(unix, feature = "fsxattr"))]
-pub mod fsxattr;
-#[cfg(feature = "hardware")]
-pub mod hardware;
-#[cfg(all(feature = "selinux", any(target_os = "linux", target_os = "android")))]
-pub mod selinux;
-#[cfg(all(unix, not(target_os = "fuchsia"), feature = "signals"))]
-pub mod signals;
-#[cfg(all(target_os = "linux", feature = "smack"))]
-pub mod smack;
-#[cfg(feature = "feat_systemd_logind")]
-pub mod systemd_logind;
-#[cfg(all(
-    unix,
-    not(target_os = "android"),
-    not(target_os = "fuchsia"),
-    not(target_os = "openbsd"),
-    not(target_os = "redox"),
-    feature = "utmpx"
-))]
-pub mod utmpx;
-// ** windows-only
-#[cfg(all(windows, feature = "wide"))]
-pub mod wide;
diff --git a/registry/native/stubs/uucore/src/lib/features/backup_control.rs b/registry/native/stubs/uucore/src/lib/features/backup_control.rs
deleted file mode 100644
index f56d131c7..000000000
--- a/registry/native/stubs/uucore/src/lib/features/backup_control.rs
+++ /dev/null
@@ -1,768 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-//! Implement GNU-style backup functionality.
-//!
-//! This module implements the backup functionality as described in the [GNU
-//! manual][1]. It provides
-//!
-//! - pre-defined [`clap`-Arguments][2] for inclusion in utilities that
-//!   implement backups
-//! - determination of the [backup mode][3]
-//! - determination of the [backup suffix][4]
-//! - [backup target path construction][5]
-//! - [Error types][6] for backup-related errors
-//! - GNU-compliant [help texts][7] for backup-related errors
-//!
-//! Backup-functionality is implemented by the following utilities:
-//!
-//! - `cp`
-//! - `install`
-//! - `ln`
-//! - `mv`
-//!
-//!
-//! [1]: https://www.gnu.org/software/coreutils/manual/html_node/Backup-options.html
-//! [2]: arguments
-//! [3]: `determine_backup_mode()`
-//! [4]: `determine_backup_suffix()`
-//! [5]: `get_backup_path()`
-//! [6]: `BackupError`
-//! [7]: `BACKUP_CONTROL_LONG_HELP`
-//!
-//!
-//! # Usage example
-//!
-//! ```
-//! #[macro_use]
-//! extern crate uucore;
-//!
-//! use clap::{Command, Arg, ArgMatches};
-//! use std::path::{Path, PathBuf};
-//! use uucore::backup_control::{self, BackupMode};
-//! use uucore::error::{UError, UResult};
-//!
-//! fn main() {
-//!     let usage = String::from("command [OPTION]... ARG");
-//!     let long_usage = String::from("And here's a detailed explanation");
-//!
-//!     let matches = Command::new("command")
-//!         .arg(backup_control::arguments::backup())
-//!         .arg(backup_control::arguments::backup_no_args())
-//!         .arg(backup_control::arguments::suffix())
-//!         .override_usage(usage)
-//!         .after_help(format!(
-//!             "{long_usage}\n{}",
-//!             backup_control::BACKUP_CONTROL_LONG_HELP
-//!         ))
-//!         .get_matches_from(vec![
-//!             "command", "--backup=t", "--suffix=bak~"
-//!         ]);
-//!
-//!     let backup_mode = match backup_control::determine_backup_mode(&matches) {
-//!         Err(e) => {
-//!             show!(e);
-//!             return;
-//!         },
-//!         Ok(mode) => mode,
-//!     };
-//!     let backup_suffix = backup_control::determine_backup_suffix(&matches);
-//!     let target_path = Path::new("/tmp/example");
-//!
-//!     let backup_path = backup_control::get_backup_path(
-//!         backup_mode, target_path, &backup_suffix
-//!     );
-//!
-//!     // Perform your backups here.
-//!
-//! }
-//! ```
-
-// spell-checker:ignore backupopt
-
-use crate::{
-    display::Quotable,
-    error::{UError, UResult},
-};
-use clap::ArgMatches;
-use std::{
-    env,
-    error::Error,
-    ffi::{OsStr, OsString},
-    fmt::{Debug, Display},
-    path::{Path, PathBuf},
-};
-
-pub static BACKUP_CONTROL_VALUES: &[&str] = &[
-    "simple", "never", "numbered", "t", "existing", "nil", "none", "off",
-];
-
-pub const BACKUP_CONTROL_LONG_HELP: &str =
-    "The backup suffix is '~', unless set with --suffix or SIMPLE_BACKUP_SUFFIX.
-The version control method may be selected via the --backup option or through
-the VERSION_CONTROL environment variable.  Here are the values:
-
-  none, off       never make backups (even if --backup is given)
-  numbered, t     make numbered backups
-  existing, nil   numbered if numbered backups exist, simple otherwise
-  simple, never   always make simple backups";
-
-static VALID_ARGS_HELP: &str = "Valid arguments are:
-  - 'none', 'off'
-  - 'simple', 'never'
-  - 'existing', 'nil'
-  - 'numbered', 't'";
-
-pub const DEFAULT_BACKUP_SUFFIX: &str = "~";
-
-/// Available backup modes.
-///
-/// The mapping of the backup modes to the CLI arguments is annotated on the
-/// enum variants.
-#[derive(Debug, Clone, Copy, Eq, PartialEq, Default)]
-pub enum BackupMode {
-    /// Argument 'none', 'off'
-    #[default]
-    None,
-    /// Argument 'simple', 'never'
-    Simple,
-    /// Argument 'numbered', 't'
-    Numbered,
-    /// Argument 'existing', 'nil'
-    Existing,
-}
-
-/// Backup error types.
-///
-/// Errors are currently raised by [`determine_backup_mode`] only. All errors
-/// are implemented as [`UError`] for uniform handling across utilities.
-#[derive(Debug, Eq, PartialEq)]
-pub enum BackupError {
-    /// An invalid argument (e.g. 'foo') was given as backup type. First
-    /// parameter is the argument, second is the arguments origin (CLI or
-    /// ENV-var)
-    InvalidArgument(String, String),
-    /// An ambiguous argument (e.g. 'n') was given as backup type. First
-    /// parameter is the argument, second is the arguments origin (CLI or
-    /// ENV-var)
-    AmbiguousArgument(String, String),
-    /// Currently unused
-    BackupImpossible(),
-    // BackupFailed(PathBuf, PathBuf, std::io::Error),
-}
-
-impl UError for BackupError {
-    fn code(&self) -> i32 {
-        match self {
-            Self::BackupImpossible() => 2,
-            _ => 1,
-        }
-    }
-
-    fn usage(&self) -> bool {
-        // Suggested by clippy.
-        matches!(
-            self,
-            Self::InvalidArgument(_, _) | Self::AmbiguousArgument(_, _)
-        )
-    }
-}
-
-impl Error for BackupError {}
-
-impl Display for BackupError {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        match self {
-            Self::InvalidArgument(arg, origin) => write!(
-                f,
-                "invalid argument {} for '{origin}'\n{VALID_ARGS_HELP}",
-                arg.quote(),
-            ),
-            Self::AmbiguousArgument(arg, origin) => write!(
-                f,
-                "ambiguous argument {} for '{origin}'\n{VALID_ARGS_HELP}",
-                arg.quote(),
-            ),
-            Self::BackupImpossible() => write!(f, "cannot create backup"),
-            // Placeholder for later
-            // Self::BackupFailed(from, to, e) => Display::fmt(
-            //     &uio_error!(e, "failed to backup {} to {}", from.quote(), to.quote()),
-            //     f
-            // ),
-        }
-    }
-}
-
-/// Arguments for backup-related functionality.
-///
-/// Rather than implementing the `clap`-Arguments for every utility, it is
-/// recommended to include the `clap` arguments via the functions provided here.
-/// This way the backup-specific arguments are handled uniformly across
-/// utilities and can be maintained in one central place.
-pub mod arguments {
-    use clap::ArgAction;
-
-    pub static OPT_BACKUP: &str = "backupopt_backup";
-    pub static OPT_BACKUP_NO_ARG: &str = "backupopt_b";
-    pub static OPT_SUFFIX: &str = "backupopt_suffix";
-
-    /// '--backup' argument
-    pub fn backup() -> clap::Arg {
-        clap::Arg::new(OPT_BACKUP)
-            .long("backup")
-            .help("make a backup of each existing destination file")
-            .action(ArgAction::Set)
-            .require_equals(true)
-            .num_args(0..=1)
-            .value_name("CONTROL")
-    }
-
-    /// '-b' argument
-    pub fn backup_no_args() -> clap::Arg {
-        clap::Arg::new(OPT_BACKUP_NO_ARG)
-            .short('b')
-            .help("like --backup but does not accept an argument")
-            .action(ArgAction::SetTrue)
-    }
-
-    /// '-S, --suffix' argument
-    pub fn suffix() -> clap::Arg {
-        clap::Arg::new(OPT_SUFFIX)
-            .short('S')
-            .long("suffix")
-            .help("override the usual backup suffix")
-            .action(ArgAction::Set)
-            .value_name("SUFFIX")
-            .allow_hyphen_values(true)
-    }
-}
-
-/// Obtain the suffix to use for a backup.
-///
-/// In order of precedence, this function obtains the backup suffix
-///
-/// 1. From the '-S' or '--suffix' CLI argument, if present
-/// 2. From the "SIMPLE_BACKUP_SUFFIX" environment variable, if present
-/// 3. By using the default '~' if none of the others apply, or if they contained slashes
-///
-/// This function directly takes [`ArgMatches`] as argument and looks for
-/// the '-S' and '--suffix' arguments itself.
-pub fn determine_backup_suffix(matches: &ArgMatches) -> String {
-    let supplied_suffix = matches.get_one::<String>(arguments::OPT_SUFFIX);
-    let suffix = if let Some(suffix) = supplied_suffix {
-        String::from(suffix)
-    } else {
-        env::var("SIMPLE_BACKUP_SUFFIX").unwrap_or_else(|_| DEFAULT_BACKUP_SUFFIX.to_owned())
-    };
-    if suffix.contains('/') {
-        DEFAULT_BACKUP_SUFFIX.to_owned()
-    } else {
-        suffix
-    }
-}
-
-/// Determine the "mode" for the backup operation to perform, if any.
-///
-/// Parses the backup options according to the [GNU manual][1], and converts
-/// them to an instance of `BackupMode` for further processing.
-///
-/// Takes [`ArgMatches`] as argument which **must** contain the options
-/// from [`arguments::backup()`] and [`arguments::backup_no_args()`]. Otherwise
-/// the `NoBackup` mode is returned unconditionally.
-///
-/// It is recommended for anyone who would like to implement the
-/// backup-functionality to use the arguments prepared in the `arguments`
-/// submodule (see examples)
-///
-/// [1]: https://www.gnu.org/software/coreutils/manual/html_node/Backup-options.html
-///
-///
-/// # Errors
-///
-/// If an argument supplied directly to the long `backup` option, or read in
-/// through the `VERSION CONTROL` env var is ambiguous (i.e. may resolve to
-/// multiple backup modes) or invalid, an [`InvalidArgument`][10] or
-/// [`AmbiguousArgument`][11] error is returned, respectively.
-///
-/// [10]: BackupError::InvalidArgument
-/// [11]: BackupError::AmbiguousArgument
-///
-///
-/// # Examples
-///
-/// Here's how one would integrate the backup mode determination into an
-/// application.
-///
-/// ```
-/// #[macro_use]
-/// extern crate uucore;
-/// use uucore::backup_control::{self, BackupMode};
-/// use clap::{Command, Arg, ArgMatches};
-///
-/// fn main() {
-///     let matches = Command::new("command")
-///         .arg(backup_control::arguments::backup())
-///         .arg(backup_control::arguments::backup_no_args())
-///         .get_matches_from(vec![
-///             "command", "-b", "--backup=t"
-///         ]);
-///
-///     let backup_mode = backup_control::determine_backup_mode(&matches).unwrap();
-///     assert_eq!(backup_mode, BackupMode::Numbered)
-/// }
-/// ```
-///
-/// This example shows an ambiguous input, as 'n' may resolve to 4 different
-/// backup modes.
-///
-///
-/// ```
-/// #[macro_use]
-/// extern crate uucore;
-/// use uucore::backup_control::{self, BackupMode, BackupError};
-/// use clap::{Command, Arg, ArgMatches};
-///
-/// fn main() {
-///     let matches = Command::new("command")
-///         .arg(backup_control::arguments::backup())
-///         .arg(backup_control::arguments::backup_no_args())
-///         .get_matches_from(vec![
-///             "command", "-b", "--backup=n"
-///         ]);
-///
-///     let backup_mode = backup_control::determine_backup_mode(&matches);
-///
-///     assert!(backup_mode.is_err());
-///     let err = backup_mode.unwrap_err();
-///     // assert_eq!(err, BackupError::AmbiguousArgument);
-///     // Use uucore functionality to show the error to the user
-///     show!(err);
-/// }
-/// ```
-pub fn determine_backup_mode(matches: &ArgMatches) -> UResult<BackupMode> {
-    if matches.contains_id(arguments::OPT_BACKUP) {
-        // Use method to determine the type of backups to make. When this option
-        // is used but method is not specified, then the value of the
-        // VERSION_CONTROL environment variable is used. And if VERSION_CONTROL
-        // is not set, the default backup type is 'existing'.
-        if let Some(method) = matches.get_one::<String>(arguments::OPT_BACKUP) {
-            // Second argument is for the error string that is returned.
-            match_method(method, "backup type")
-        } else if let Ok(method) = env::var("VERSION_CONTROL") {
-            // Second argument is for the error string that is returned.
-            match_method(&method, "$VERSION_CONTROL")
-        } else {
-            // Default if no argument is provided to '--backup'
-            Ok(BackupMode::Existing)
-        }
-    } else if matches.get_flag(arguments::OPT_BACKUP_NO_ARG) {
-        // the short form of this option, -b does not accept any argument.
-        // if VERSION_CONTROL is not set then using -b is equivalent to
-        // using --backup=existing.
-        if let Ok(method) = env::var("VERSION_CONTROL") {
-            match_method(&method, "$VERSION_CONTROL")
-        } else {
-            Ok(BackupMode::Existing)
-        }
-    } else if matches.contains_id(arguments::OPT_SUFFIX) {
-        // Suffix option is enough to determine mode even if --backup is not set.
-        // If VERSION_CONTROL is not set, the default backup type is 'existing'.
-        if let Ok(method) = env::var("VERSION_CONTROL") {
-            match_method(&method, "$VERSION_CONTROL")
-        } else {
-            Ok(BackupMode::Existing)
-        }
-    } else {
-        // No option was present at all
-        Ok(BackupMode::None)
-    }
-}
-
-/// Match a backup option string to a `BackupMode`.
-///
-/// The GNU manual specifies that abbreviations to options are valid as long as
-/// they aren't ambiguous. This function matches the given `method` argument
-/// against all valid backup options (via `starts_with`), and returns a valid
-/// [`BackupMode`] if exactly one backup option matches the `method` given.
-///
-/// `origin` is required in order to format the generated error message
-/// properly, when an error occurs.
-///
-///
-/// # Errors
-///
-/// If `method` is invalid or ambiguous (i.e. may resolve to multiple backup
-/// modes), an [`InvalidArgument`][10] or [`AmbiguousArgument`][11] error is
-/// returned, respectively.
-///
-/// [10]: BackupError::InvalidArgument
-/// [11]: BackupError::AmbiguousArgument
-fn match_method(method: &str, origin: &str) -> UResult<BackupMode> {
-    let matches: Vec<&&str> = BACKUP_CONTROL_VALUES
-        .iter()
-        .filter(|val| val.starts_with(method))
-        .collect();
-    if matches.len() == 1 {
-        match *matches[0] {
-            "simple" | "never" => Ok(BackupMode::Simple),
-            "numbered" | "t" => Ok(BackupMode::Numbered),
-            "existing" | "nil" => Ok(BackupMode::Existing),
-            "none" | "off" => Ok(BackupMode::None),
-            _ => unreachable!(), // cannot happen as we must have exactly one match
-                                 // from the list above.
-        }
-    } else if matches.is_empty() {
-        Err(BackupError::InvalidArgument(method.to_string(), origin.to_string()).into())
-    } else {
-        Err(BackupError::AmbiguousArgument(method.to_string(), origin.to_string()).into())
-    }
-}
-
-pub fn get_backup_path<S: AsRef<OsStr>>(
-    backup_mode: BackupMode,
-    backup_path: &Path,
-    suffix: S,
-) -> Option<PathBuf> {
-    match backup_mode {
-        BackupMode::None => None,
-        BackupMode::Simple => Some(simple_backup_path(backup_path, suffix.as_ref())),
-        BackupMode::Numbered => Some(numbered_backup_path(backup_path)),
-        BackupMode::Existing => Some(existing_backup_path(backup_path, suffix.as_ref())),
-    }
-}
-
-fn simple_backup_path<S: AsRef<OsStr>>(path: &Path, suffix: S) -> PathBuf {
-    let mut file_name = path.file_name().unwrap_or_default().to_os_string();
-    file_name.push(suffix.as_ref());
-    path.with_file_name(file_name)
-}
-
-fn numbered_backup_path(path: &Path) -> PathBuf {
-    let mut i: u64 = 1;
-    loop {
-        let new_path = simple_backup_path(path, OsString::from(format!(".~{i}~")));
-        if !new_path.exists() {
-            return new_path;
-        }
-        i += 1;
-    }
-}
-
-fn existing_backup_path<S: AsRef<OsStr>>(path: &Path, suffix: S) -> PathBuf {
-    let test_path = simple_backup_path(path, OsString::from(".~1~"));
-    if test_path.exists() {
-        return numbered_backup_path(path);
-    }
-    simple_backup_path(path, suffix.as_ref())
-}
-
-/// Returns true if the source file is likely to be the simple backup file for the target file.
-///
-/// # Arguments
-///
-/// * `source` - A Path reference that holds the source (backup) file path.
-/// * `target` - A Path reference that holds the target file path.
-/// * `suffix` - Str that holds the backup suffix.
-///
-/// # Examples
-///
-/// ```
-/// use std::path::Path;
-/// use uucore::backup_control::source_is_target_backup;
-/// let source = Path::new("data.txt~");
-/// let target = Path::new("data.txt");
-/// let suffix = String::from("~");
-///
-/// assert_eq!(source_is_target_backup(&source, &target, &suffix), true);
-/// ```
-///
-pub fn source_is_target_backup(source: &Path, target: &Path, suffix: &str) -> bool {
-    let source_filename = source.as_os_str();
-    let mut target_backup_filename = target.as_os_str().to_owned();
-    target_backup_filename.push(suffix);
-    source_filename == target_backup_filename
-}
-
-//
-// Tests for this module
-//
-#[cfg(test)]
-mod tests {
-    use super::*;
-    // Required to instantiate mutex in shared context
-    use clap::Command;
-    use std::sync::Mutex;
-
-    // The mutex is required here as by default all tests are run as separate
-    // threads under the same parent process. As environment variables are
-    // specific to processes (and thus shared among threads), data races *will*
-    // occur if no precautions are taken. Thus we have all tests that rely on
-    // environment variables lock this empty mutex to ensure they don't access
-    // it concurrently.
-    static TEST_MUTEX: Mutex<()> = Mutex::new(());
-
-    // Environment variable for "VERSION_CONTROL"
-    static ENV_VERSION_CONTROL: &str = "VERSION_CONTROL";
-
-    fn make_app() -> Command {
-        Command::new("command")
-            .arg(arguments::backup())
-            .arg(arguments::backup_no_args())
-            .arg(arguments::suffix())
-    }
-
-    // Defaults to --backup=existing
-    #[test]
-    fn test_backup_mode_short_only() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        let matches = make_app().get_matches_from(vec!["command", "-b"]);
-
-        let result = determine_backup_mode(&matches).unwrap();
-
-        assert_eq!(result, BackupMode::Existing);
-    }
-
-    // --backup takes precedence over -b
-    #[test]
-    fn test_backup_mode_long_preferred_over_short() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        let matches = make_app().get_matches_from(vec!["command", "-b", "--backup=none"]);
-
-        let result = determine_backup_mode(&matches).unwrap();
-
-        assert_eq!(result, BackupMode::None);
-    }
-
-    // --backup can be passed without an argument
-    #[test]
-    fn test_backup_mode_long_without_args_no_env() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        let matches = make_app().get_matches_from(vec!["command", "--backup"]);
-
-        let result = determine_backup_mode(&matches).unwrap();
-
-        assert_eq!(result, BackupMode::Existing);
-    }
-
-    // --backup can be passed with an argument only
-    #[test]
-    fn test_backup_mode_long_with_args() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        let matches = make_app().get_matches_from(vec!["command", "--backup=simple"]);
-
-        let result = determine_backup_mode(&matches).unwrap();
-
-        assert_eq!(result, BackupMode::Simple);
-    }
-
-    // --backup errors on invalid argument
-    #[test]
-    fn test_backup_mode_long_with_args_invalid() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        let matches = make_app().get_matches_from(vec!["command", "--backup=foobar"]);
-
-        let result = determine_backup_mode(&matches);
-
-        assert!(result.is_err());
-        let text = format!("{}", result.unwrap_err());
-        assert!(text.contains("invalid argument 'foobar' for 'backup type'"));
-    }
-
-    // --backup errors on ambiguous argument
-    #[test]
-    fn test_backup_mode_long_with_args_ambiguous() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        let matches = make_app().get_matches_from(vec!["command", "--backup=n"]);
-
-        let result = determine_backup_mode(&matches);
-
-        assert!(result.is_err());
-        let text = format!("{}", result.unwrap_err());
-        assert!(text.contains("ambiguous argument 'n' for 'backup type'"));
-    }
-
-    // --backup accepts shortened arguments (si for simple)
-    #[test]
-    fn test_backup_mode_long_with_arg_shortened() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        let matches = make_app().get_matches_from(vec!["command", "--backup=si"]);
-
-        let result = determine_backup_mode(&matches).unwrap();
-
-        assert_eq!(result, BackupMode::Simple);
-    }
-
-    // -b doesn't ignores the "VERSION_CONTROL" environment variable
-    #[test]
-    fn test_backup_mode_short_does_not_ignore_env() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        unsafe { env::set_var(ENV_VERSION_CONTROL, "numbered") };
-        let matches = make_app().get_matches_from(vec!["command", "-b"]);
-
-        let result = determine_backup_mode(&matches).unwrap();
-
-        assert_eq!(result, BackupMode::Numbered);
-        unsafe { env::remove_var(ENV_VERSION_CONTROL) };
-    }
-
-    // --backup can be passed without an argument, but reads env var if existent
-    #[test]
-    fn test_backup_mode_long_without_args_with_env() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        unsafe { env::set_var(ENV_VERSION_CONTROL, "none") };
-        let matches = make_app().get_matches_from(vec!["command", "--backup"]);
-
-        let result = determine_backup_mode(&matches).unwrap();
-
-        assert_eq!(result, BackupMode::None);
-        unsafe { env::remove_var(ENV_VERSION_CONTROL) };
-    }
-
-    // --backup errors on invalid VERSION_CONTROL env var
-    #[test]
-    fn test_backup_mode_long_with_env_var_invalid() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        unsafe { env::set_var(ENV_VERSION_CONTROL, "foobar") };
-        let matches = make_app().get_matches_from(vec!["command", "--backup"]);
-
-        let result = determine_backup_mode(&matches);
-
-        assert!(result.is_err());
-        let text = format!("{}", result.unwrap_err());
-        assert!(text.contains("invalid argument 'foobar' for '$VERSION_CONTROL'"));
-        unsafe { env::remove_var(ENV_VERSION_CONTROL) };
-    }
-
-    // --backup errors on ambiguous VERSION_CONTROL env var
-    #[test]
-    fn test_backup_mode_long_with_env_var_ambiguous() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        unsafe { env::set_var(ENV_VERSION_CONTROL, "n") };
-        let matches = make_app().get_matches_from(vec!["command", "--backup"]);
-
-        let result = determine_backup_mode(&matches);
-
-        assert!(result.is_err());
-        let text = format!("{}", result.unwrap_err());
-        assert!(text.contains("ambiguous argument 'n' for '$VERSION_CONTROL'"));
-        unsafe { env::remove_var(ENV_VERSION_CONTROL) };
-    }
-
-    // --backup accepts shortened env vars (si for simple)
-    #[test]
-    fn test_backup_mode_long_with_env_var_shortened() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        unsafe { env::set_var(ENV_VERSION_CONTROL, "si") };
-        let matches = make_app().get_matches_from(vec!["command", "--backup"]);
-
-        let result = determine_backup_mode(&matches).unwrap();
-
-        assert_eq!(result, BackupMode::Simple);
-        unsafe { env::remove_var(ENV_VERSION_CONTROL) };
-    }
-
-    // Using --suffix without --backup defaults to --backup=existing
-    #[test]
-    fn test_backup_mode_suffix_without_backup_option() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        let matches = make_app().get_matches_from(vec!["command", "--suffix", ".bak"]);
-
-        let result = determine_backup_mode(&matches).unwrap();
-
-        assert_eq!(result, BackupMode::Existing);
-    }
-
-    // Using --suffix without --backup uses env var if existing
-    #[test]
-    fn test_backup_mode_suffix_without_backup_option_with_env_var() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        unsafe { env::set_var(ENV_VERSION_CONTROL, "numbered") };
-        let matches = make_app().get_matches_from(vec!["command", "--suffix", ".bak"]);
-
-        let result = determine_backup_mode(&matches).unwrap();
-
-        assert_eq!(result, BackupMode::Numbered);
-        unsafe { env::remove_var(ENV_VERSION_CONTROL) };
-    }
-
-    #[test]
-    fn test_suffix_takes_hyphen_value() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        let matches = make_app().get_matches_from(vec!["command", "-b", "--suffix", "-v"]);
-
-        let result = determine_backup_suffix(&matches);
-        assert_eq!(result, "-v");
-    }
-
-    #[test]
-    fn test_suffix_rejects_path_traversal() {
-        let _dummy = TEST_MUTEX.lock().unwrap();
-        let matches =
-            make_app().get_matches_from(vec!["command", "-b", "--suffix", "_/../../dest"]);
-
-        let result = determine_backup_suffix(&matches);
-        assert_eq!(result, DEFAULT_BACKUP_SUFFIX);
-    }
-
-    #[test]
-    fn test_numbered_backup_path() {
-        assert_eq!(numbered_backup_path(Path::new("")), PathBuf::from(".~1~"));
-        assert_eq!(numbered_backup_path(Path::new("/")), PathBuf::from("/.~1~"));
-        assert_eq!(
-            numbered_backup_path(Path::new("/hello/world")),
-            PathBuf::from("/hello/world.~1~")
-        );
-        assert_eq!(
-            numbered_backup_path(Path::new("/hello/world/")),
-            PathBuf::from("/hello/world.~1~")
-        );
-    }
-
-    #[test]
-    fn test_simple_backup_path() {
-        assert_eq!(
-            simple_backup_path(Path::new(""), ".bak"),
-            PathBuf::from(".bak")
-        );
-        assert_eq!(
-            simple_backup_path(Path::new("/"), ".bak"),
-            PathBuf::from("/.bak")
-        );
-        assert_eq!(
-            simple_backup_path(Path::new("/hello/world"), ".bak"),
-            PathBuf::from("/hello/world.bak")
-        );
-        assert_eq!(
-            simple_backup_path(Path::new("/hello/world/"), ".bak"),
-            PathBuf::from("/hello/world.bak")
-        );
-    }
-
-    #[test]
-    fn test_source_is_target_backup() {
-        let source = Path::new("data.txt.bak");
-        let target = Path::new("data.txt");
-        let suffix = String::from(".bak");
-
-        assert!(source_is_target_backup(source, target, &suffix));
-    }
-
-    #[test]
-    fn test_source_is_not_target_backup() {
-        let source = Path::new("data.txt");
-        let target = Path::new("backup.txt");
-        let suffix = String::from(".bak");
-
-        assert!(!source_is_target_backup(source, target, &suffix));
-    }
-
-    #[test]
-    fn test_source_is_target_backup_with_tilde_suffix() {
-        let source = Path::new("example~");
-        let target = Path::new("example");
-        let suffix = String::from("~");
-
-        assert!(source_is_target_backup(source, target, &suffix));
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/benchmark.rs b/registry/native/stubs/uucore/src/lib/features/benchmark.rs
deleted file mode 100644
index e2dfac1e7..000000000
--- a/registry/native/stubs/uucore/src/lib/features/benchmark.rs
+++ /dev/null
@@ -1,457 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Common benchmark utilities for uutils coreutils
-//!
-//! This module provides shared functionality for benchmarking utilities,
-//! including test data generation and binary execution helpers.
-
-use std::fs::File;
-use std::io::{BufWriter, Write};
-use std::path::{Path, PathBuf};
-
-use itertools::Itertools as _;
-
-/// Create a temporary file with test data
-pub fn create_test_file(data: &[u8], temp_dir: &Path) -> PathBuf {
-    let file_path = temp_dir.join("test_data.txt");
-    let file = File::create(&file_path).unwrap();
-    let mut writer = BufWriter::new(file);
-    writer.write_all(data).unwrap();
-    writer.flush().unwrap();
-    // Ensure data is fully written to disk before returning
-    drop(writer);
-    File::open(&file_path).unwrap().sync_all().unwrap();
-    file_path
-}
-
-/// Run a utility function directly with given arguments
-/// This calls the uumain function that returns i32 (like the fuzzing approach)
-pub fn run_util_function<F>(util_func: F, args: &[&str]) -> i32
-where
-    F: FnOnce(std::vec::IntoIter<std::ffi::OsString>) -> i32,
-{
-    // Prepend a dummy program name as argv[0] since clap expects it
-    let os_args = std::iter::once("benchmark".into())
-        .chain(args.iter().map(Into::into))
-        .collect_vec();
-    util_func(os_args.into_iter())
-}
-
-/// Helper function to set up a temporary test file and leak the temporary directory
-/// so it persists for the duration of the benchmark
-pub fn setup_test_file(data: &[u8]) -> PathBuf {
-    let temp_dir = tempfile::tempdir().unwrap();
-    let file_path = create_test_file(data, temp_dir.path());
-    // Keep temp_dir alive by leaking it - the OS will clean it up
-    std::mem::forget(temp_dir);
-    file_path
-}
-
-/// Generate test data with different characteristics for text processing utilities
-pub mod text_data {
-    /// Generate test data with a specific size in MB and average line length
-    pub fn generate_by_size(size_mb: usize, avg_line_length: usize) -> Vec<u8> {
-        let total_size = size_mb * 1024 * 1024;
-        let mut data = Vec::with_capacity(total_size);
-
-        let mut current_size = 0;
-        let mut line_chars = 0;
-
-        while current_size < total_size {
-            if line_chars >= avg_line_length {
-                data.push(b'\n');
-                line_chars = 0;
-            } else {
-                // Use various ASCII characters to make it realistic
-                data.push(b'a' + (current_size % 26) as u8);
-                line_chars += 1;
-            }
-            current_size += 1;
-        }
-
-        // Ensure we end with a newline
-        if data.last() != Some(&b'\n') {
-            data.push(b'\n');
-        }
-
-        data
-    }
-
-    /// Generate test data by line count instead of size
-    pub fn generate_by_lines(num_lines: usize, avg_line_length: usize) -> Vec<u8> {
-        let mut data = Vec::new();
-
-        for line_num in 0..num_lines {
-            // Vary line length slightly for realism
-            let line_length = avg_line_length + (line_num % 40).saturating_sub(20);
-
-            for char_pos in 0..line_length {
-                // Create more realistic text with spaces
-                if char_pos > 0 && char_pos % 8 == 0 {
-                    data.push(b' '); // Add spaces every 8 characters
-                } else {
-                    // Cycle through letters with some variation
-                    let char_offset = (line_num + char_pos) % 26;
-                    data.push(b'a' + char_offset as u8);
-                }
-            }
-            data.push(b'\n');
-        }
-
-        data
-    }
-
-    /// Helper function to generate test data from a list of words
-    pub fn generate_data_from_words(words: &[&str], num_lines: usize) -> Vec<u8> {
-        let mut data = Vec::new();
-        for i in 0..num_lines {
-            let word = words[i % words.len()];
-            let number = i % 1000;
-            data.extend_from_slice(format!("{word}_{number:03}\n").as_bytes());
-        }
-        data
-    }
-
-    /// Helper function to generate test data from a list of words without number suffix
-    pub fn generate_data_from_words_simple(words: &[&str], num_lines: usize) -> Vec<u8> {
-        let mut data = Vec::new();
-        for i in 0..num_lines {
-            let word = words[i % words.len()];
-            data.extend_from_slice(format!("{word}\n").as_bytes());
-        }
-        data
-    }
-
-    /// Helper function to generate test data from a list of words with counter
-    pub fn generate_data_from_words_with_counter(words: &[&str], num_lines: usize) -> Vec<u8> {
-        let mut data = Vec::new();
-        for i in 0..num_lines {
-            let word = words[i % words.len()];
-            let line = format!("{word}{i:04}\n");
-            data.extend_from_slice(line.as_bytes());
-        }
-        data
-    }
-
-    /// Generate test data with ASCII-only text
-    pub fn generate_ascii_data(num_lines: usize) -> Vec<u8> {
-        let words = [
-            "apple",
-            "banana",
-            "cherry",
-            "date",
-            "elderberry",
-            "fig",
-            "grape",
-            "honeydew",
-            "kiwi",
-            "lemon",
-            "mango",
-            "nectarine",
-            "orange",
-            "papaya",
-            "quince",
-            "raspberry",
-            "strawberry",
-            "tangerine",
-            "ugli",
-            "vanilla",
-            "watermelon",
-            "xigua",
-            "yellow",
-            "zucchini",
-            "avocado",
-        ];
-
-        generate_data_from_words(&words, num_lines)
-    }
-
-    /// Generate simple ASCII data with line numbers
-    pub fn generate_ascii_data_simple(num_lines: usize) -> Vec<u8> {
-        let mut data = Vec::new();
-        for i in 0..num_lines {
-            let line = format!("line_{:06}\n", num_lines - i - 1);
-            data.extend_from_slice(line.as_bytes());
-        }
-        data
-    }
-
-    /// Generate test data with accented characters that require locale-aware sorting
-    pub fn generate_accented_data(num_lines: usize) -> Vec<u8> {
-        let words = [
-            // French words with accents
-            "café",
-            "naïve",
-            "résumé",
-            "fiancé",
-            "crème",
-            "déjà",
-            "façade",
-            "château",
-            "élève",
-            "côte",
-            // German words with umlauts
-            "über",
-            "Müller",
-            "schön",
-            "Köln",
-            "Düsseldorf",
-            "Österreich",
-            "Zürich",
-            "Mädchen",
-            "Bär",
-            "größer",
-            // Spanish words with tildes and accents
-            "niño",
-            "señor",
-            "año",
-            "mañana",
-            "español",
-            "corazón",
-            "María",
-            "José",
-            "más",
-            "también",
-        ];
-
-        generate_data_from_words(&words, num_lines)
-    }
-
-    /// Generate test data with mixed ASCII and non-ASCII characters
-    pub fn generate_mixed_data(num_lines: usize) -> Vec<u8> {
-        let words = [
-            // Mix of ASCII and accented words
-            "apple",
-            "café",
-            "banana",
-            "naïve",
-            "cherry",
-            "résumé",
-            "date",
-            "fiancé",
-            "elderberry",
-            "crème",
-            "über",
-            "grape",
-            "Müller",
-            "honeydew",
-            "schön",
-            "niño",
-            "kiwi",
-            "señor",
-            "lemon",
-            "año",
-            "mango",
-            "María",
-            "orange",
-            "José",
-            "papaya",
-        ];
-
-        generate_data_from_words(&words, num_lines)
-    }
-
-    /// Generate mixed locale data with counter
-    pub fn generate_mixed_locale_data(num_lines: usize) -> Vec<u8> {
-        let mixed_strings = [
-            "zebra", "äpfel", "banana", "öl", "cat", "über", "dog", "zürich", "elephant", "café",
-            "fish", "naïve", "grape", "résumé", "house", "piñata",
-        ];
-        generate_data_from_words_with_counter(&mixed_strings, num_lines)
-    }
-
-    /// Generate German locale-specific data
-    pub fn generate_german_locale_data(num_lines: usize) -> Vec<u8> {
-        let german_words = [
-            "Ärger", "Öffnung", "Über", "Zucker", "Bär", "Föhn", "Größe", "Höhe", "Käse", "Löwe",
-            "Mädchen", "Nüsse", "Röntgen", "Schäfer", "Tür", "Würfel", "ä", "ö", "ü", "ß", "a",
-            "o", "u", "s",
-        ];
-        generate_data_from_words_with_counter(&german_words, num_lines)
-    }
-
-    /// Generate test data with uppercase/lowercase variations
-    pub fn generate_case_sensitive_data(num_lines: usize) -> Vec<u8> {
-        let base_words = [
-            "apple", "Apple", "APPLE", "banana", "Banana", "BANANA", "café", "Café", "CAFÉ",
-            "über", "Über", "ÜBER",
-        ];
-
-        generate_data_from_words_simple(&base_words, num_lines)
-    }
-
-    /// Generate numeric data for benchmarking (simple sequential numbers)
-    pub fn generate_numbers(count: usize) -> String {
-        (1..=count)
-            .map(|n| n.to_string())
-            .collect::<Vec<_>>()
-            .join("\n")
-    }
-}
-
-/// Binary data generation utilities for benchmarking
-pub mod binary_data {
-    use std::fs::File;
-    use std::io::Write;
-    use std::path::Path;
-
-    /// Create a binary file filled with a repeated pattern
-    ///
-    /// Creates a file of the specified size (in MB) filled with the given byte pattern.
-    /// This is useful for benchmarking utilities that work with large binary files like dd, cp, etc.
-    pub fn create_file(path: &Path, size_mb: usize, pattern: u8) {
-        let buffer = vec![pattern; size_mb * 1024 * 1024];
-        let mut file = File::create(path).unwrap();
-        file.write_all(&buffer).unwrap();
-        file.sync_all().unwrap();
-    }
-}
-
-/// Filesystem utilities for benchmarking
-pub mod fs_utils {
-    use std::fs;
-    use std::path::Path;
-
-    /// Remove a file or directory if it exists
-    ///
-    /// This is a convenience function for cleaning up between benchmark iterations.
-    /// It handles both files and directories, and is a no-op if the path doesn't exist.
-    pub fn remove_path(path: &Path) {
-        if !path.exists() {
-            return;
-        }
-
-        if path.is_dir() {
-            fs::remove_dir_all(path).unwrap();
-        } else {
-            fs::remove_file(path).unwrap();
-        }
-    }
-}
-
-/// Filesystem tree generation utilities for benchmarking
-pub mod fs_tree {
-    use std::fs::{self, File};
-    use std::io::Write;
-    use std::path::Path;
-
-    /// Create a balanced directory tree for benchmarking
-    ///
-    /// Creates a tree with specified depth, number of directories per level, and files per directory.
-    /// This creates a realistic filesystem structure for testing recursive operations.
-    pub fn create_balanced_tree(
-        base_dir: &Path,
-        depth: usize,
-        dirs_per_level: usize,
-        files_per_dir: usize,
-    ) {
-        if depth == 0 {
-            return;
-        }
-
-        // Create files in current directory
-        for file_idx in 0..files_per_dir {
-            let file_path = base_dir.join(format!("f{file_idx}"));
-            File::create(&file_path).unwrap();
-        }
-
-        // Create subdirectories and recurse
-        for dir_idx in 0..dirs_per_level {
-            let dir_path = base_dir.join(format!("d{dir_idx}"));
-            fs::create_dir(&dir_path).unwrap();
-            create_balanced_tree(&dir_path, depth - 1, dirs_per_level, files_per_dir);
-        }
-    }
-
-    /// Create a wide directory tree (many files/dirs at shallow depth)
-    ///
-    /// This creates a flat structure with many files and directories at a shallow depth,
-    /// useful for benchmarking operations that need to traverse many entries quickly.
-    pub fn create_wide_tree(base_dir: &Path, total_files: usize, total_dirs: usize) {
-        // Create many files in root
-        for file_idx in 0..total_files {
-            let file_path = base_dir.join(format!("f{file_idx}"));
-            File::create(&file_path).unwrap();
-        }
-
-        // Create many directories with few files each
-        for dir_idx in 0..total_dirs {
-            let dir_path = base_dir.join(format!("d{dir_idx}"));
-            fs::create_dir(&dir_path).unwrap();
-            for file_idx in 0..5 {
-                File::create(dir_path.join(format!("f{file_idx}"))).unwrap();
-            }
-        }
-    }
-
-    /// Create a deep directory tree (deep nesting)
-    ///
-    /// This creates a linear chain of deeply nested directories, useful for testing
-    /// recursion depth handling and stack usage.
-    pub fn create_deep_tree(base_dir: &Path, depth: usize, files_per_level: usize) {
-        let mut current_dir = base_dir.to_path_buf();
-
-        for level in 0..depth {
-            // Create files at this level
-            for file_idx in 0..files_per_level {
-                File::create(current_dir.join(format!("f{file_idx}"))).unwrap();
-            }
-
-            // Create next level directory
-            if level < depth - 1 {
-                let next_dir = current_dir.join("d");
-                fs::create_dir(&next_dir).unwrap();
-                current_dir = next_dir;
-            }
-        }
-    }
-
-    /// Create a tree with mixed file types and permissions for comprehensive testing
-    ///
-    /// Creates files with different extensions, sizes, and permissions (on Unix).
-    /// Useful for testing file type detection, permission handling, and formatting.
-    pub fn create_mixed_tree(base_dir: &Path) {
-        let extensions = ["txt", "log", "dat", "tmp", "bak", "cfg"];
-        let sizes = [0, 100, 1024, 10240];
-
-        for (i, ext) in extensions.iter().enumerate() {
-            for (j, &size) in sizes.iter().enumerate() {
-                let file_path = base_dir.join(format!("mixed_file_{i}_{j}.{ext}"));
-                let mut file = File::create(&file_path).unwrap();
-
-                if size > 0 {
-                    let content = "x".repeat(size);
-                    file.write_all(content.as_bytes()).unwrap();
-                }
-
-                // Set permissions only on Unix platforms
-                #[cfg(unix)]
-                {
-                    use std::os::unix::fs::PermissionsExt;
-                    let perms = fs::Permissions::from_mode(match (i + j) % 4 {
-                        0 => 0o644,
-                        1 => 0o755,
-                        2 => 0o600,
-                        _ => 0o444,
-                    });
-                    fs::set_permissions(&file_path, perms).unwrap();
-                }
-            }
-        }
-
-        // Create some subdirectories
-        for i in 0..5 {
-            let dir_path = base_dir.join(format!("mixed_subdir_{i}"));
-            fs::create_dir(&dir_path).unwrap();
-
-            for j in 0..3 {
-                let file_path = dir_path.join(format!("sub_file_{j}.txt"));
-                let mut file = File::create(&file_path).unwrap();
-                writeln!(file, "File {j} in subdir {i}").unwrap();
-            }
-        }
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/buf_copy.rs b/registry/native/stubs/uucore/src/lib/features/buf_copy.rs
deleted file mode 100644
index d1e765c96..000000000
--- a/registry/native/stubs/uucore/src/lib/features/buf_copy.rs
+++ /dev/null
@@ -1,142 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! This module provides several buffer-based copy/write functions that leverage
-//! the `splice` system call in Linux systems, thus increasing the I/O
-//! performance of copying between two file descriptors. This module is mostly
-//! used by utilities to work around the limitations of Rust's `fs::copy` which
-//! does not handle copying special files (e.g pipes, character/block devices).
-
-pub mod common;
-
-#[cfg(any(target_os = "linux", target_os = "android"))]
-pub mod linux;
-#[cfg(any(target_os = "linux", target_os = "android"))]
-pub use linux::*;
-
-#[cfg(not(any(target_os = "linux", target_os = "android")))]
-pub mod other;
-#[cfg(not(any(target_os = "linux", target_os = "android")))]
-pub use other::copy_stream;
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::fs::File;
-    use tempfile::tempdir;
-
-    #[cfg(unix)]
-    use {
-        crate::pipes,
-        std::fs::OpenOptions,
-        std::{
-            io::{Seek, SeekFrom},
-            thread,
-        },
-    };
-
-    use std::io::{Read, Write};
-
-    #[cfg(unix)]
-    fn new_temp_file() -> File {
-        let temp_dir = tempdir().unwrap();
-        OpenOptions::new()
-            .read(true)
-            .write(true)
-            .create(true)
-            .truncate(true)
-            .open(temp_dir.path().join("file.txt"))
-            .unwrap()
-    }
-
-    #[cfg(any(target_os = "linux", target_os = "android"))]
-    #[test]
-    fn test_copy_exact() {
-        let (mut pipe_read, mut pipe_write) = pipes::pipe().unwrap();
-        let data = b"Hello, world!";
-        let n = pipe_write.write(data).unwrap();
-        assert_eq!(n, data.len());
-        let mut buf = [0; 1024];
-        let n = copy_exact(&pipe_read, &pipe_write, data.len()).unwrap();
-        let n2 = pipe_read.read(&mut buf).unwrap();
-        assert_eq!(n, n2);
-        assert_eq!(&buf[..n], data);
-    }
-
-    #[cfg(any(target_os = "linux", target_os = "android"))]
-    #[test]
-    fn test_copy_exact_multiple_chunks() {
-        let (mut pipe_read, mut pipe_write) = pipes::pipe().unwrap();
-        let data = vec![b'x'; 1024 * 16 + 1];
-        let writer = thread::spawn(move || {
-            pipe_write.write_all(&data).unwrap();
-        });
-
-        let temp_dir = tempdir().unwrap();
-        let dest_path = temp_dir.path().join("dest.txt");
-        let dest_file = OpenOptions::new()
-            .read(true)
-            .write(true)
-            .create(true)
-            .truncate(true)
-            .open(&dest_path)
-            .unwrap();
-
-        let copied = copy_exact(&pipe_read, &dest_file, 1024 * 16 + 1).unwrap();
-        writer.join().unwrap();
-
-        assert_eq!(copied, 1024 * 16 + 1);
-        assert_eq!(std::fs::read(dest_path).unwrap(), vec![b'x'; 1024 * 16 + 1]);
-    }
-
-    #[test]
-    #[cfg(unix)]
-    fn test_copy_stream() {
-        let mut dest_file = new_temp_file();
-
-        let (mut pipe_read, mut pipe_write) = pipes::pipe().unwrap();
-        let data = b"Hello, world!";
-        let thread = thread::spawn(move || {
-            pipe_write.write_all(data).unwrap();
-        });
-        let result = copy_stream(&mut pipe_read, &mut dest_file).unwrap();
-        thread.join().unwrap();
-        assert_eq!(result, data.len() as u64);
-
-        // We would have been at the end already, so seek again to the start.
-        dest_file.seek(SeekFrom::Start(0)).unwrap();
-
-        let mut buf = Vec::new();
-        dest_file.read_to_end(&mut buf).unwrap();
-
-        assert_eq!(buf, data);
-    }
-
-    #[test]
-    #[cfg(not(unix))]
-    // Test for non-unix platforms. We use regular files instead.
-    fn test_copy_stream() {
-        let temp_dir = tempdir().unwrap();
-        let src_path = temp_dir.path().join("src.txt");
-        let dest_path = temp_dir.path().join("dest.txt");
-
-        let mut src_file = File::create(&src_path).unwrap();
-        let mut dest_file = File::create(&dest_path).unwrap();
-
-        let data = b"Hello, world!";
-        src_file.write_all(data).unwrap();
-        src_file.sync_all().unwrap();
-
-        let mut src_file = File::open(&src_path).unwrap();
-        let bytes_copied = copy_stream(&mut src_file, &mut dest_file).unwrap();
-
-        let mut dest_file = File::open(&dest_path).unwrap();
-        let mut buf = Vec::new();
-        dest_file.read_to_end(&mut buf).unwrap();
-
-        assert_eq!(bytes_copied as usize, data.len());
-        assert_eq!(buf, data);
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/buf_copy/common.rs b/registry/native/stubs/uucore/src/lib/features/buf_copy/common.rs
deleted file mode 100644
index d771ff6be..000000000
--- a/registry/native/stubs/uucore/src/lib/features/buf_copy/common.rs
+++ /dev/null
@@ -1,34 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-use crate::error::UError;
-
-/// Error types used by buffer-copying functions from the `buf_copy` module.
-#[derive(Debug)]
-pub enum Error {
-    Io(std::io::Error),
-    WriteError(String),
-}
-
-impl std::fmt::Display for Error {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        match self {
-            Self::WriteError(msg) => write!(f, "splice() write error: {msg}"),
-            Self::Io(err) => write!(f, "I/O error: {err}"),
-        }
-    }
-}
-
-impl std::error::Error for Error {}
-
-impl UError for Error {
-    fn code(&self) -> i32 {
-        1
-    }
-
-    fn usage(&self) -> bool {
-        false
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/buf_copy/linux.rs b/registry/native/stubs/uucore/src/lib/features/buf_copy/linux.rs
deleted file mode 100644
index 6046109d4..000000000
--- a/registry/native/stubs/uucore/src/lib/features/buf_copy/linux.rs
+++ /dev/null
@@ -1,153 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Buffer-based copying implementation for Linux and Android.
-
-use crate::{
-    error::UResult,
-    pipes::{pipe, splice, splice_exact},
-};
-
-/// Buffer-based copying utilities for unix (excluding Linux).
-use std::{
-    io::{ErrorKind, Read, Write},
-    os::fd::{AsFd, AsRawFd},
-};
-
-use super::common::Error;
-
-/// A readable file descriptor.
-pub trait FdReadable: Read + AsRawFd + AsFd {}
-
-impl<T> FdReadable for T where T: Read + AsFd + AsRawFd {}
-
-/// A writable file descriptor.
-pub trait FdWritable: Write + AsFd + AsRawFd {}
-
-impl<T> FdWritable for T where T: Write + AsFd + AsRawFd {}
-
-const SPLICE_SIZE: usize = 1024 * 128;
-const BUF_SIZE: usize = 1024 * 16;
-
-/// Conversion from a `nix::Error` into our `Error` which implements `UError`.
-impl From<nix::Error> for Error {
-    fn from(error: nix::Error) -> Self {
-        Self::Io(std::io::Error::from_raw_os_error(error as i32))
-    }
-}
-
-/// Copy data from `Read` implementor `source` into a `Write` implementor
-/// `dest`. This works by reading a chunk of data from `source` and writing the
-/// data to `dest` in a loop.
-///
-/// This function uses the Linux-specific `splice` call when possible which does
-/// not use any intermediate user-space buffer. It falls backs to
-/// `std::io::copy` when the call fails and is still recoverable.
-///
-/// # Arguments
-/// * `source` - `Read` implementor to copy data from.
-/// * `dest` - `Write` implementor to copy data to.
-///
-/// # Returns
-///
-/// Result of operation and bytes successfully written (as a `u64`) when
-/// operation is successful.
-pub fn copy_stream<R, S>(src: &mut R, dest: &mut S) -> UResult<u64>
-where
-    R: Read + AsFd + AsRawFd,
-    S: Write + AsFd + AsRawFd,
-{
-    // If we're on Linux or Android, try to use the splice() system call
-    // for faster writing. If it works, we're done.
-    let result = splice_write(src, &dest.as_fd())?;
-    if !result.1 {
-        return Ok(result.0);
-    }
-
-    // If the splice() call failed, fall back on slower writing.
-    let result = std::io::copy(src, dest)?;
-
-    // If the splice() call failed and there has been some data written to
-    // stdout via while loop above AND there will be second splice() call
-    // that will succeed, data pushed through splice will be output before
-    // the data buffered in stdout.lock. Therefore additional explicit flush
-    // is required here.
-    dest.flush()?;
-    Ok(result)
-}
-
-/// Write from source `handle` into destination `write_fd` using Linux-specific
-/// `splice` system call.
-///
-/// # Arguments
-/// - `source` - source handle
-/// - `dest` - destination handle
-#[inline]
-pub(crate) fn splice_write<R, S>(source: &R, dest: &S) -> UResult<(u64, bool)>
-where
-    R: Read + AsFd + AsRawFd,
-    S: AsRawFd + AsFd,
-{
-    let (pipe_rd, pipe_wr) = pipe()?;
-    let mut bytes: u64 = 0;
-
-    loop {
-        match splice(&source, &pipe_wr, SPLICE_SIZE) {
-            Ok(n) => {
-                if n == 0 {
-                    return Ok((bytes, false));
-                }
-                if splice_exact(&pipe_rd, dest, n).is_err() {
-                    // If the first splice manages to copy to the intermediate
-                    // pipe, but the second splice to stdout fails for some reason
-                    // we can recover by copying the data that we have from the
-                    // intermediate pipe to stdout using normal read/write. Then
-                    // we tell the caller to fall back.
-                    copy_exact(&pipe_rd, dest, n)?;
-                    return Ok((bytes, true));
-                }
-
-                bytes += n as u64;
-            }
-            Err(_) => {
-                return Ok((bytes, true));
-            }
-        }
-    }
-}
-
-/// Move exactly `num_bytes` bytes from `read_fd` to `write_fd` using the `read`
-/// and `write` calls.
-#[cfg(any(target_os = "linux", target_os = "android"))]
-pub(crate) fn copy_exact(
-    read_fd: &impl AsFd,
-    write_fd: &impl AsFd,
-    num_bytes: usize,
-) -> std::io::Result<usize> {
-    use nix::unistd;
-
-    let mut left = num_bytes;
-    let mut buf = [0; BUF_SIZE];
-    let mut total_written = 0;
-    while left > 0 {
-        let read = unistd::read(read_fd, &mut buf[..left.min(BUF_SIZE)])?;
-        if read == 0 {
-            return Err(std::io::Error::new(
-                ErrorKind::UnexpectedEof,
-                "unexpected end of pipe",
-            ));
-        }
-
-        let mut chunk_written = 0;
-        while chunk_written < read {
-            let n = unistd::write(write_fd, &buf[chunk_written..read])?;
-            chunk_written += n;
-        }
-
-        left -= read;
-        total_written += chunk_written;
-    }
-    Ok(total_written)
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/buf_copy/other.rs b/registry/native/stubs/uucore/src/lib/features/buf_copy/other.rs
deleted file mode 100644
index 61dd13e6c..000000000
--- a/registry/native/stubs/uucore/src/lib/features/buf_copy/other.rs
+++ /dev/null
@@ -1,32 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-//!
-//! Buffer-based copying implementation for other platforms.
-
-use std::io::{Read, Write};
-
-use crate::error::UResult;
-
-/// Copy data from `Read` implementor `source` into a `Write` implementor
-/// `dest`. This works by reading a chunk of data from `source` and writing the
-/// data to `dest` in a loop, using std::io::copy. This is implemented for
-/// non-Linux platforms.
-///
-/// # Arguments
-/// * `source` - `Read` implementor to copy data from.
-/// * `dest` - `Write` implementor to copy data to.
-///
-/// # Returns
-///
-/// Result of operation and bytes successfully written (as a `u64`) when
-/// operation is successful.
-pub fn copy_stream<R, S>(src: &mut R, dest: &mut S) -> UResult<u64>
-where
-    R: Read,
-    S: Write,
-{
-    let result = std::io::copy(src, dest)?;
-    Ok(result)
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/checksum/compute.rs b/registry/native/stubs/uucore/src/lib/features/checksum/compute.rs
deleted file mode 100644
index 522c6242b..000000000
--- a/registry/native/stubs/uucore/src/lib/features/checksum/compute.rs
+++ /dev/null
@@ -1,311 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore bitlen
-
-use std::ffi::OsStr;
-use std::fs::File;
-use std::io::{self, BufReader, Read, Write};
-use std::path::Path;
-
-use crate::checksum::{
-    digest_reader, escape_filename, AlgoKind, ChecksumError, ReadingMode, SizedAlgoKind,
-};
-use crate::error::{FromIo, UResult, USimpleError};
-use crate::line_ending::LineEnding;
-use crate::sum::DigestOutput;
-use crate::{show, translate};
-
-/// Use the same buffer size as GNU when reading a file to create a checksum
-/// from it: 32 KiB.
-const READ_BUFFER_SIZE: usize = 32 * 1024;
-
-/// Necessary options when computing a checksum. Historically, these options
-/// included a `binary` field to differentiate `--binary` and `--text` modes on
-/// windows. Since the support for this feature is approximate in GNU, and it's
-/// deprecated anyway, it was decided in #9168 to ignore the difference when
-/// computing the checksum.
-pub struct ChecksumComputeOptions {
-    /// Which algorithm to use to compute the digest.
-    pub algo_kind: SizedAlgoKind,
-
-    /// Printing format to use for each checksum.
-    pub output_format: OutputFormat,
-
-    /// Whether to finish lines with '\n' or '\0'.
-    pub line_ending: LineEnding,
-}
-
-/// Whether to write the digest as hexadecimal or encoded in base64.
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum DigestFormat {
-    Hexadecimal,
-    Base64,
-}
-
-impl DigestFormat {
-    #[inline]
-    fn is_base64(self) -> bool {
-        self == Self::Base64
-    }
-}
-
-/// Holds the representation that shall be used for printing a checksum line
-#[derive(Debug, PartialEq, Eq)]
-pub enum OutputFormat {
-    /// Raw digest
-    Raw,
-
-    /// Selected for older algorithms which had their custom formatting
-    ///
-    /// Default for crc, sysv, bsd
-    Legacy,
-
-    /// `$ALGO_NAME ($FILENAME) = $DIGEST`
-    Tagged(DigestFormat),
-
-    /// '$DIGEST $FLAG$FILENAME'
-    /// where 'flag' depends on the reading mode
-    ///
-    /// Default for standalone checksum utilities
-    Untagged(DigestFormat, ReadingMode),
-}
-
-impl OutputFormat {
-    #[inline]
-    fn is_raw(&self) -> bool {
-        *self == Self::Raw
-    }
-
-    /// Find the correct output format for cksum.
-    pub fn from_cksum(algo: AlgoKind, tag: bool, binary: bool, raw: bool, base64: bool) -> Self {
-        // Raw output format takes precedence over anything else.
-        if raw {
-            return Self::Raw;
-        }
-
-        // Then, if the algo is legacy, takes precedence over the rest
-        if algo.is_legacy() {
-            return Self::Legacy;
-        }
-
-        let digest_format = if base64 {
-            DigestFormat::Base64
-        } else {
-            DigestFormat::Hexadecimal
-        };
-
-        // After that, decide between tagged and untagged output
-        if tag {
-            Self::Tagged(digest_format)
-        } else {
-            let reading_mode = if binary {
-                ReadingMode::Binary
-            } else {
-                ReadingMode::Text
-            };
-            Self::Untagged(digest_format, reading_mode)
-        }
-    }
-
-    /// Find the correct output format for a standalone checksum util (b2sum,
-    /// md5sum, etc)
-    ///
-    /// Since standalone utils can't use the Raw or Legacy output format, it is
-    /// decided only using the --tag, --binary and --text arguments.
-    pub fn from_standalone(text: bool, tag: bool) -> Self {
-        if tag {
-            Self::Tagged(DigestFormat::Hexadecimal)
-        } else {
-            Self::Untagged(
-                DigestFormat::Hexadecimal,
-                if text {
-                    ReadingMode::Text
-                } else {
-                    ReadingMode::Binary
-                },
-            )
-        }
-    }
-}
-
-fn print_legacy_checksum(
-    options: &ChecksumComputeOptions,
-    filename: &OsStr,
-    sum: &DigestOutput,
-    size: usize,
-) -> UResult<()> {
-    debug_assert!(options.algo_kind.is_legacy());
-    debug_assert!(matches!(sum, DigestOutput::U16(_) | DigestOutput::Crc(_)));
-
-    let (escaped_filename, prefix) = if options.line_ending == LineEnding::Nul {
-        (filename.to_string_lossy().to_string(), "")
-    } else {
-        escape_filename(filename)
-    };
-
-    // Print the sum
-    match (options.algo_kind, sum) {
-        (SizedAlgoKind::Sysv, DigestOutput::U16(sum)) => print!(
-            "{prefix}{sum} {}",
-            size.div_ceil(options.algo_kind.bitlen()),
-        ),
-        (SizedAlgoKind::Bsd, DigestOutput::U16(sum)) => {
-            // The BSD checksum output is 5 digit integer
-            let bsd_width = 5;
-            print!(
-                "{prefix}{sum:0bsd_width$} {:bsd_width$}",
-                size.div_ceil(options.algo_kind.bitlen()),
-            );
-        }
-        (SizedAlgoKind::Crc | SizedAlgoKind::Crc32b, DigestOutput::Crc(sum)) => {
-            print!("{prefix}{sum} {size}");
-        }
-        (algo, output) => unreachable!("Bug: Invalid legacy checksum ({algo:?}, {output:?})"),
-    }
-
-    // Print the filename after a space if not stdin
-    if escaped_filename != "-" {
-        print!(" ");
-        io::stdout().write_all(escaped_filename.as_bytes())?;
-    }
-    Ok(())
-}
-
-fn print_tagged_checksum(
-    options: &ChecksumComputeOptions,
-    filename: &OsStr,
-    sum: &String,
-) -> UResult<()> {
-    let (escaped_filename, prefix) = if options.line_ending == LineEnding::Nul {
-        (filename.to_string_lossy().to_string(), "")
-    } else {
-        escape_filename(filename)
-    };
-
-    // Print algo name and opening parenthesis.
-    print!("{prefix}{} (", options.algo_kind.to_tag());
-
-    // Print filename
-    io::stdout().write_all(escaped_filename.as_bytes())?;
-
-    // Print closing parenthesis and sum
-    print!(") = {sum}");
-    Ok(())
-}
-
-fn print_untagged_checksum(
-    options: &ChecksumComputeOptions,
-    filename: &OsStr,
-    sum: &String,
-    reading_mode: ReadingMode,
-) -> UResult<()> {
-    let (escaped_filename, prefix) = if options.line_ending == LineEnding::Nul {
-        (filename.to_string_lossy().to_string(), "")
-    } else {
-        escape_filename(filename)
-    };
-
-    // Print checksum and reading mode flag
-    print!("{prefix}{sum} {}", reading_mode.as_char());
-
-    // Print filename
-    io::stdout().write_all(escaped_filename.as_bytes())?;
-    Ok(())
-}
-
-/// Calculate checksum
-///
-/// # Arguments
-///
-/// * `options` - CLI options for the assigning checksum algorithm
-/// * `files` - A iterator of [`OsStr`] which is a bunch of files that are using for calculating checksum
-pub fn perform_checksum_computation<'a, I>(options: ChecksumComputeOptions, files: I) -> UResult<()>
-where
-    I: Iterator<Item = &'a OsStr>,
-{
-    let mut files = files.peekable();
-
-    while let Some(filename) = files.next() {
-        // Check that in raw mode, we are not provided with several files.
-        if options.output_format.is_raw() && files.peek().is_some() {
-            return Err(Box::new(ChecksumError::RawMultipleFiles));
-        }
-
-        let filepath = Path::new(filename);
-        let stdin_buf;
-        let file_buf;
-        if filepath.is_dir() {
-            show!(USimpleError::new(
-                1,
-                translate!("error-is-a-directory", "file" => filepath.display())
-            ));
-            continue;
-        }
-
-        // Handle the file input
-        let mut file = BufReader::with_capacity(
-            READ_BUFFER_SIZE,
-            if filename == "-" {
-                stdin_buf = io::stdin();
-                Box::new(stdin_buf) as Box<dyn Read>
-            } else {
-                file_buf = match File::open(filepath) {
-                    Ok(file) => file,
-                    Err(err) => {
-                        show!(err.map_err_context(|| filepath.to_string_lossy().into()));
-                        continue;
-                    }
-                };
-                Box::new(file_buf) as Box<dyn Read>
-            },
-        );
-
-        let mut digest = options.algo_kind.create_digest();
-
-        // Always compute the "binary" version of the digest, i.e. on Windows,
-        // never handle CRLFs specifically.
-        let (digest_output, sz) = digest_reader(&mut digest, &mut file, ReadingMode::Binary)
-            .map_err_context(|| translate!("checksum-error-failed-to-read-input"))?;
-
-        // Encodes the sum if df is Base64, leaves as-is otherwise.
-        let encode_sum = |sum: DigestOutput, df: DigestFormat| {
-            if df.is_base64() {
-                sum.to_base64()
-            } else {
-                sum.to_hex()
-            }
-        };
-
-        match options.output_format {
-            OutputFormat::Raw => {
-                // Cannot handle multiple files anyway, output immediately.
-                digest_output.write_raw(io::stdout())?;
-                return Ok(());
-            }
-            OutputFormat::Legacy => {
-                print_legacy_checksum(&options, filename, &digest_output, sz)?;
-            }
-            OutputFormat::Tagged(digest_format) => {
-                print_tagged_checksum(
-                    &options,
-                    filename,
-                    &encode_sum(digest_output, digest_format)?,
-                )?;
-            }
-            OutputFormat::Untagged(digest_format, reading_mode) => {
-                print_untagged_checksum(
-                    &options,
-                    filename,
-                    &encode_sum(digest_output, digest_format)?,
-                    reading_mode,
-                )?;
-            }
-        }
-
-        print!("{}", options.line_ending);
-    }
-    Ok(())
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/checksum/mod.rs b/registry/native/stubs/uucore/src/lib/features/checksum/mod.rs
deleted file mode 100644
index f73977e0d..000000000
--- a/registry/native/stubs/uucore/src/lib/features/checksum/mod.rs
+++ /dev/null
@@ -1,674 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore bitlen
-
-use std::ffi::OsStr;
-use std::io::{self, Read};
-use std::num::IntErrorKind;
-
-use os_display::Quotable;
-use thiserror::Error;
-
-use crate::error::{UError, UResult};
-use crate::show_error;
-use crate::sum::{
-    Blake2b, Blake3, Bsd, CRC32B, Crc, Digest, DigestOutput, DigestWriter, Md5, Sha1, Sha3_224,
-    Sha3_256, Sha3_384, Sha3_512, Sha224, Sha256, Sha384, Sha512, Shake128, Shake256, Sm3, SysV,
-};
-
-pub mod compute;
-pub mod validate;
-
-pub const ALGORITHM_OPTIONS_SYSV: &str = "sysv";
-pub const ALGORITHM_OPTIONS_BSD: &str = "bsd";
-pub const ALGORITHM_OPTIONS_CRC: &str = "crc";
-pub const ALGORITHM_OPTIONS_CRC32B: &str = "crc32b";
-pub const ALGORITHM_OPTIONS_MD5: &str = "md5";
-pub const ALGORITHM_OPTIONS_SHA1: &str = "sha1";
-pub const ALGORITHM_OPTIONS_SHA2: &str = "sha2";
-pub const ALGORITHM_OPTIONS_SHA3: &str = "sha3";
-
-pub const ALGORITHM_OPTIONS_SHA224: &str = "sha224";
-pub const ALGORITHM_OPTIONS_SHA256: &str = "sha256";
-pub const ALGORITHM_OPTIONS_SHA384: &str = "sha384";
-pub const ALGORITHM_OPTIONS_SHA512: &str = "sha512";
-pub const ALGORITHM_OPTIONS_BLAKE2B: &str = "blake2b";
-pub const ALGORITHM_OPTIONS_BLAKE3: &str = "blake3";
-pub const ALGORITHM_OPTIONS_SM3: &str = "sm3";
-pub const ALGORITHM_OPTIONS_SHAKE128: &str = "shake128";
-pub const ALGORITHM_OPTIONS_SHAKE256: &str = "shake256";
-pub const MAX_SHAKE_OUTPUT_BITS: usize = 8 * 1024 * 1024;
-
-pub const SUPPORTED_ALGORITHMS: [&str; 17] = [
-    ALGORITHM_OPTIONS_SYSV,
-    ALGORITHM_OPTIONS_BSD,
-    ALGORITHM_OPTIONS_CRC,
-    ALGORITHM_OPTIONS_CRC32B,
-    ALGORITHM_OPTIONS_MD5,
-    ALGORITHM_OPTIONS_SHA1,
-    ALGORITHM_OPTIONS_SHA2,
-    ALGORITHM_OPTIONS_SHA3,
-    ALGORITHM_OPTIONS_BLAKE2B,
-    ALGORITHM_OPTIONS_SM3,
-    // Legacy aliases for -a sha2 -l xxx
-    ALGORITHM_OPTIONS_SHA224,
-    ALGORITHM_OPTIONS_SHA256,
-    ALGORITHM_OPTIONS_SHA384,
-    ALGORITHM_OPTIONS_SHA512,
-    // Extra algorithms that are not valid `cksum --algorithm` as per GNU.
-    // TODO: Should we keep them or drop them to align our support with GNU ?
-    ALGORITHM_OPTIONS_BLAKE3,
-    ALGORITHM_OPTIONS_SHAKE128,
-    ALGORITHM_OPTIONS_SHAKE256,
-];
-
-/// Represents an algorithm kind. In some cases, it is not sufficient by itself
-/// to know which algorithm to use exactly, because it lacks a digest length,
-/// which is why [`SizedAlgoKind`] exists.
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum AlgoKind {
-    Sysv,
-    Bsd,
-    Crc,
-    Crc32b,
-    Md5,
-    Sm3,
-    Sha1,
-    Sha2,
-    Sha3,
-    Blake2b,
-
-    // Available in cksum for backward compatibility
-    Sha224,
-    Sha256,
-    Sha384,
-    Sha512,
-
-    // Not available in cksum
-    Shake128,
-    Shake256,
-    Blake3,
-}
-
-impl AlgoKind {
-    /// Parses an [`AlgoKind`] from a string, only accepting valid cksum
-    /// `--algorithm` values.
-    pub fn from_cksum(algo: impl AsRef<str>) -> UResult<Self> {
-        use AlgoKind::*;
-        Ok(match algo.as_ref() {
-            ALGORITHM_OPTIONS_SYSV => Sysv,
-            ALGORITHM_OPTIONS_BSD => Bsd,
-            ALGORITHM_OPTIONS_CRC => Crc,
-            ALGORITHM_OPTIONS_CRC32B => Crc32b,
-            ALGORITHM_OPTIONS_MD5 => Md5,
-            ALGORITHM_OPTIONS_SHA1 => Sha1,
-            ALGORITHM_OPTIONS_SHA2 => Sha2,
-            ALGORITHM_OPTIONS_SHA3 => Sha3,
-            ALGORITHM_OPTIONS_BLAKE2B => Blake2b,
-            ALGORITHM_OPTIONS_SM3 => Sm3,
-
-            // For backward compatibility
-            ALGORITHM_OPTIONS_SHA224 => Sha224,
-            ALGORITHM_OPTIONS_SHA256 => Sha256,
-            ALGORITHM_OPTIONS_SHA384 => Sha384,
-            ALGORITHM_OPTIONS_SHA512 => Sha512,
-
-            ALGORITHM_OPTIONS_SHAKE128 => Shake128,
-            ALGORITHM_OPTIONS_SHAKE256 => Shake256,
-            _ => return Err(ChecksumError::UnknownAlgorithm(algo.as_ref().to_string()).into()),
-        })
-    }
-
-    /// Parses an algo kind from a string, accepting standalone binary names.
-    pub fn from_bin_name(algo: impl AsRef<str>) -> UResult<Self> {
-        use AlgoKind::*;
-        Ok(match algo.as_ref() {
-            "md5sum" => Md5,
-            "sha1sum" => Sha1,
-            "sha224sum" => Sha224,
-            "sha256sum" => Sha256,
-            "sha384sum" => Sha384,
-            "sha512sum" => Sha512,
-            "sha3sum" => Sha3,
-            "b2sum" => Blake2b,
-
-            _ => return Err(ChecksumError::UnknownAlgorithm(algo.as_ref().to_string()).into()),
-        })
-    }
-
-    /// Returns a string corresponding to the algorithm kind.
-    pub fn to_uppercase(self) -> &'static str {
-        use AlgoKind::*;
-        match self {
-            // Legacy algorithms
-            Sysv => "SYSV",
-            Bsd => "BSD",
-            Crc => "CRC",
-            Crc32b => "CRC32B",
-
-            Md5 => "MD5",
-            Sm3 => "SM3",
-            Sha1 => "SHA1",
-            Sha2 => "SHA2",
-            Sha3 => "SHA3",
-            Blake2b => "BLAKE2b", // Note the lowercase b in the end here.
-
-            // For backward compatibility
-            Sha224 => "SHA224",
-            Sha256 => "SHA256",
-            Sha384 => "SHA384",
-            Sha512 => "SHA512",
-
-            Shake128 => "SHAKE128",
-            Shake256 => "SHAKE256",
-            Blake3 => "BLAKE3",
-        }
-    }
-
-    /// Returns a string corresponding to the algorithm option in cksum `-a`
-    pub fn to_lowercase(self) -> &'static str {
-        use AlgoKind::*;
-        match self {
-            Sysv => "sysv",
-            Bsd => "bsd",
-            Crc => "crc",
-            Crc32b => "crc32b",
-            Md5 => "md5",
-            Sm3 => "sm3",
-            Sha1 => "sha1",
-            Sha2 => "sha2",
-            Sha3 => "sha3",
-            Blake2b => "blake2b",
-
-            // For backward compatibility
-            Sha224 => "sha224",
-            Sha256 => "sha256",
-            Sha384 => "sha384",
-            Sha512 => "sha512",
-
-            Shake128 => "shake128",
-            Shake256 => "shake256",
-            Blake3 => "blake3",
-        }
-    }
-
-    pub fn is_legacy(self) -> bool {
-        use AlgoKind::*;
-        matches!(self, Sysv | Bsd | Crc | Crc32b)
-    }
-}
-
-/// Holds a length for a SHA2 of SHA3 algorithm kind.
-#[derive(Debug, Clone, Copy)]
-pub enum ShaLength {
-    Len224,
-    Len256,
-    Len384,
-    Len512,
-}
-
-impl ShaLength {
-    pub fn as_usize(self) -> usize {
-        match self {
-            Self::Len224 => 224,
-            Self::Len256 => 256,
-            Self::Len384 => 384,
-            Self::Len512 => 512,
-        }
-    }
-}
-
-impl TryFrom<usize> for ShaLength {
-    type Error = ChecksumError;
-
-    fn try_from(value: usize) -> Result<Self, Self::Error> {
-        use ShaLength::*;
-        match value {
-            224 => Ok(Len224),
-            256 => Ok(Len256),
-            384 => Ok(Len384),
-            512 => Ok(Len512),
-            _ => Err(ChecksumError::InvalidLengthForSha(value.to_string())),
-        }
-    }
-}
-
-/// Represents an actual determined algorithm.
-#[derive(Debug, Clone, Copy)]
-pub enum SizedAlgoKind {
-    Sysv,
-    Bsd,
-    Crc,
-    Crc32b,
-    Md5,
-    Sm3,
-    Sha1,
-    Blake3,
-    Sha2(ShaLength),
-    Sha3(ShaLength),
-    // Note: we store Blake2b's length as BYTES.
-    Blake2b(Option<usize>),
-    Shake128(Option<usize>),
-    Shake256(Option<usize>),
-}
-
-impl SizedAlgoKind {
-    pub fn from_unsized(kind: AlgoKind, byte_length: Option<usize>) -> UResult<Self> {
-        use AlgoKind as ak;
-        match (kind, byte_length) {
-            (
-                ak::Sysv
-                | ak::Bsd
-                | ak::Crc
-                | ak::Crc32b
-                | ak::Md5
-                | ak::Sm3
-                | ak::Sha1
-                | ak::Blake3
-                | ak::Sha224
-                | ak::Sha256
-                | ak::Sha384
-                | ak::Sha512,
-                Some(_),
-            ) => Err(ChecksumError::LengthOnlyForBlake2bSha2Sha3.into()),
-
-            (ak::Sysv, _) => Ok(Self::Sysv),
-            (ak::Bsd, _) => Ok(Self::Bsd),
-            (ak::Crc, _) => Ok(Self::Crc),
-            (ak::Crc32b, _) => Ok(Self::Crc32b),
-            (ak::Md5, _) => Ok(Self::Md5),
-            (ak::Sm3, _) => Ok(Self::Sm3),
-            (ak::Sha1, _) => Ok(Self::Sha1),
-            (ak::Blake3, _) => Ok(Self::Blake3),
-
-            (ak::Shake128, Some(l)) if l > MAX_SHAKE_OUTPUT_BITS => {
-                show_error!("{}", ChecksumError::InvalidLength(l.to_string()));
-                Err(
-                    ChecksumError::LengthTooBigForShake("SHAKE128".into(), MAX_SHAKE_OUTPUT_BITS)
-                        .into(),
-                )
-            }
-            (ak::Shake256, Some(l)) if l > MAX_SHAKE_OUTPUT_BITS => {
-                show_error!("{}", ChecksumError::InvalidLength(l.to_string()));
-                Err(
-                    ChecksumError::LengthTooBigForShake("SHAKE256".into(), MAX_SHAKE_OUTPUT_BITS)
-                        .into(),
-                )
-            }
-            (ak::Shake128, l) => Ok(Self::Shake128(l)),
-            (ak::Shake256, l) => Ok(Self::Shake256(l)),
-            (ak::Sha2, Some(l)) => Ok(Self::Sha2(ShaLength::try_from(l)?)),
-            (ak::Sha3, Some(l)) => Ok(Self::Sha3(ShaLength::try_from(l)?)),
-            (algo @ (ak::Sha2 | ak::Sha3), None) => {
-                Err(ChecksumError::LengthRequiredForSha(algo.to_lowercase().into()).into())
-            }
-            // [`calculate_blake2b_length`] expects a length in bits but we
-            // have a length in bytes.
-            (ak::Blake2b, Some(l)) => {
-                let bit_length = l.checked_mul(8).ok_or_else(|| {
-                    show_error!("{}", ChecksumError::InvalidLength(l.to_string()));
-                    ChecksumError::LengthTooBigForBlake("BLAKE2b".into())
-                })?;
-                Ok(Self::Blake2b(calculate_blake2b_length_str(
-                    &bit_length.to_string(),
-                )?))
-            }
-            (ak::Blake2b, None) => Ok(Self::Blake2b(None)),
-
-            (ak::Sha224, None) => Ok(Self::Sha2(ShaLength::Len224)),
-            (ak::Sha256, None) => Ok(Self::Sha2(ShaLength::Len256)),
-            (ak::Sha384, None) => Ok(Self::Sha2(ShaLength::Len384)),
-            (ak::Sha512, None) => Ok(Self::Sha2(ShaLength::Len512)),
-        }
-    }
-
-    pub fn to_tag(self) -> String {
-        use SizedAlgoKind::*;
-        match self {
-            Md5 => "MD5".into(),
-            Sm3 => "SM3".into(),
-            Sha1 => "SHA1".into(),
-            Blake3 => "BLAKE3".into(),
-            Sha2(len) => format!("SHA{}", len.as_usize()),
-            Sha3(len) => format!("SHA3-{}", len.as_usize()),
-            Blake2b(Some(byte_len)) => format!("BLAKE2b-{}", byte_len * 8),
-            Blake2b(None) => "BLAKE2b".into(),
-            Shake128(_) => "SHAKE128".into(),
-            Shake256(_) => "SHAKE256".into(),
-            Sysv | Bsd | Crc | Crc32b => panic!("Should not be used for tagging"),
-        }
-    }
-
-    pub fn create_digest(&self) -> Box<dyn Digest + 'static> {
-        use ShaLength::*;
-        match self {
-            Self::Sysv => Box::new(SysV::default()),
-            Self::Bsd => Box::new(Bsd::default()),
-            Self::Crc => Box::new(Crc::default()),
-            Self::Crc32b => Box::new(CRC32B::default()),
-            Self::Md5 => Box::new(Md5::default()),
-            Self::Sm3 => Box::new(Sm3::default()),
-            Self::Sha1 => Box::new(Sha1::default()),
-            Self::Blake3 => Box::new(Blake3::default()),
-            Self::Sha2(Len224) => Box::new(Sha224::default()),
-            Self::Sha2(Len256) => Box::new(Sha256::default()),
-            Self::Sha2(Len384) => Box::new(Sha384::default()),
-            Self::Sha2(Len512) => Box::new(Sha512::default()),
-            Self::Sha3(Len224) => Box::new(Sha3_224::default()),
-            Self::Sha3(Len256) => Box::new(Sha3_256::default()),
-            Self::Sha3(Len384) => Box::new(Sha3_384::default()),
-            Self::Sha3(Len512) => Box::new(Sha3_512::default()),
-            Self::Blake2b(len_opt) => {
-                Box::new(len_opt.map(Blake2b::with_output_bytes).unwrap_or_default())
-            }
-            Self::Shake128(len_opt) => {
-                Box::new(len_opt.map(Shake128::with_output_bits).unwrap_or_default())
-            }
-            Self::Shake256(len_opt) => {
-                Box::new(len_opt.map(Shake256::with_output_bits).unwrap_or_default())
-            }
-        }
-    }
-
-    pub fn bitlen(&self) -> usize {
-        match self {
-            Self::Sysv => 512,
-            Self::Bsd => 1024,
-            Self::Crc => 256,
-            Self::Crc32b => 32,
-            Self::Md5 => 128,
-            Self::Sm3 => 512,
-            Self::Sha1 => 160,
-            Self::Blake3 => 256,
-            Self::Sha2(len) => len.as_usize(),
-            Self::Sha3(len) => len.as_usize(),
-            Self::Blake2b(len) => len.unwrap_or(Blake2b::DEFAULT_BYTE_SIZE * 8),
-            Self::Shake128(len) => len.unwrap_or(Shake128::DEFAULT_BIT_SIZE),
-            Self::Shake256(len) => len.unwrap_or(Shake256::DEFAULT_BIT_SIZE),
-        }
-    }
-    pub fn is_legacy(&self) -> bool {
-        use SizedAlgoKind::*;
-        matches!(self, Sysv | Bsd | Crc | Crc32b)
-    }
-}
-
-#[derive(Debug, Error)]
-pub enum ChecksumError {
-    #[error("the --raw option is not supported with multiple files")]
-    RawMultipleFiles,
-
-    #[error("the --{0} option is meaningful only when verifying checksums")]
-    CheckOnlyFlag(String),
-
-    // --length sanitization errors
-    #[error("--length required for {}", .0.quote())]
-    LengthRequired(String),
-    #[error("invalid length: {}", .0.quote())]
-    InvalidLength(String),
-    #[error("maximum digest length for {} is 512 bits", .0.quote())]
-    LengthTooBigForBlake(String),
-    #[error("maximum digest length for {} is {} bits", .0.quote(), .1)]
-    LengthTooBigForShake(String, usize),
-    #[error("length is not a multiple of 8")]
-    LengthNotMultipleOf8,
-    #[error("digest length for {} must be 224, 256, 384, or 512", .0.quote())]
-    InvalidLengthForSha(String),
-    #[error("--algorithm={0} requires specifying --length 224, 256, 384, or 512")]
-    LengthRequiredForSha(String),
-    #[error("--length is only supported with --algorithm blake2b, sha2, or sha3")]
-    LengthOnlyForBlake2bSha2Sha3,
-
-    #[error("the --binary and --text options are meaningless when verifying checksums")]
-    BinaryTextConflict,
-    #[error("--text mode is only supported with --untagged")]
-    TextWithoutUntagged,
-    #[error("the --tag option is meaningless when verifying checksums")]
-    TagCheck,
-    #[error("--tag does not support --text mode")]
-    TextAfterTag,
-    #[error("--check is not supported with --algorithm={{bsd,sysv,crc,crc32b}}")]
-    AlgorithmNotSupportedWithCheck,
-    #[error("You cannot combine multiple hash algorithms!")]
-    CombineMultipleAlgorithms,
-    #[error("Needs an algorithm to hash with.\nUse --help for more information.")]
-    NeedAlgorithmToHash,
-    #[error("unknown algorithm: {0}: clap should have prevented this case")]
-    UnknownAlgorithm(String),
-    #[error("")]
-    Io(#[from] io::Error),
-}
-
-impl UError for ChecksumError {
-    fn code(&self) -> i32 {
-        1
-    }
-}
-
-/// Reading mode used to compute digest.
-///
-/// On most linux systems, this is irrelevant, as there is no distinction
-/// between text and binary files. Refer to GNU's cksum documentation for more
-/// information.
-///
-/// As discussed in #9168, we decide to ignore the reading mode to compute the
-/// digest, both on Windows and UNIX. The reason for that is that this is a
-/// legacy feature that is poorly documented and used. This enum is kept
-/// nonetheless to still take into account the flags passed to cksum when
-/// generating untagged lines.
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum ReadingMode {
-    Binary,
-    Text,
-}
-
-impl ReadingMode {
-    #[inline]
-    fn as_char(self) -> char {
-        match self {
-            Self::Binary => '*',
-            Self::Text => ' ',
-        }
-    }
-}
-
-pub fn digest_reader<T: Read>(
-    digest: &mut Box<dyn Digest>,
-    reader: &mut T,
-    mode: ReadingMode,
-) -> io::Result<(DigestOutput, usize)> {
-    digest.reset();
-
-    // Read bytes from `reader` and write those bytes to `digest`.
-    //
-    // If `binary` is `false` and the operating system is Windows, then
-    // `DigestWriter` replaces "\r\n" with "\n" before it writes the
-    // bytes into `digest`. Otherwise, it just inserts the bytes as-is.
-    //
-    // In order to support replacing "\r\n", we must call `finalize()`
-    // in order to support the possibility that the last character read
-    // from the reader was "\r". (This character gets buffered by
-    // `DigestWriter` and only written if the following character is
-    // "\n". But when "\r" is the last character read, we need to force
-    // it to be written.)
-    let mut digest_writer = DigestWriter::new(digest, mode == ReadingMode::Binary);
-    let output_size = io::copy(reader, &mut digest_writer)? as usize;
-    digest_writer.finalize();
-
-    Ok((digest.result(), output_size))
-}
-
-/// Calculates the length of the digest.
-pub fn calculate_blake2b_length_str(bit_length: &str) -> UResult<Option<usize>> {
-    // Blake2b's length is parsed in an u64.
-    match bit_length.parse::<usize>() {
-        Ok(0) => Ok(None),
-
-        // Error cases
-        Ok(n) if n > 512 => {
-            show_error!("{}", ChecksumError::InvalidLength(bit_length.into()));
-            Err(ChecksumError::LengthTooBigForBlake("BLAKE2b".into()).into())
-        }
-        Err(e) if *e.kind() == IntErrorKind::PosOverflow => {
-            show_error!("{}", ChecksumError::InvalidLength(bit_length.into()));
-            Err(ChecksumError::LengthTooBigForBlake("BLAKE2b".into()).into())
-        }
-        Err(_) => Err(ChecksumError::InvalidLength(bit_length.into()).into()),
-
-        Ok(n) if n % 8 != 0 => {
-            show_error!("{}", ChecksumError::InvalidLength(bit_length.into()));
-            Err(ChecksumError::LengthNotMultipleOf8.into())
-        }
-
-        // Valid cases
-
-        // When length is 512, it is blake2b's default. So, don't show it
-        Ok(512) => Ok(None),
-        // Divide by 8, as our blake2b implementation expects bytes instead of bits.
-        Ok(n) => Ok(Some(n / 8)),
-    }
-}
-
-pub fn validate_sha2_sha3_length(algo_name: AlgoKind, length: Option<usize>) -> UResult<ShaLength> {
-    match length {
-        Some(224) => Ok(ShaLength::Len224),
-        Some(256) => Ok(ShaLength::Len256),
-        Some(384) => Ok(ShaLength::Len384),
-        Some(512) => Ok(ShaLength::Len512),
-        Some(len) => {
-            show_error!("{}", ChecksumError::InvalidLength(len.to_string()));
-            Err(ChecksumError::InvalidLengthForSha(algo_name.to_uppercase().into()).into())
-        }
-        None => Err(ChecksumError::LengthRequiredForSha(algo_name.to_lowercase().into()).into()),
-    }
-}
-
-pub fn sanitize_sha2_sha3_length_str(algo_kind: AlgoKind, length: &str) -> UResult<usize> {
-    // There is a difference in the errors sent when the length is not a number
-    // vs. its an invalid number.
-    //
-    // When inputting an invalid number, an extra error message it printed to
-    // remind of the accepted inputs.
-    let len = match length.parse::<usize>() {
-        Ok(l) => l,
-        // Note: Positive overflow while parsing counts as an invalid number,
-        // but a number still.
-        Err(e) if *e.kind() == IntErrorKind::PosOverflow => {
-            show_error!("{}", ChecksumError::InvalidLength(length.into()));
-            return Err(ChecksumError::InvalidLengthForSha(algo_kind.to_uppercase().into()).into());
-        }
-        Err(_) => return Err(ChecksumError::InvalidLength(length.into()).into()),
-    };
-
-    if [224, 256, 384, 512].contains(&len) {
-        Ok(len)
-    } else {
-        show_error!("{}", ChecksumError::InvalidLength(length.into()));
-        Err(ChecksumError::InvalidLengthForSha(algo_kind.to_uppercase().into()).into())
-    }
-}
-
-pub fn unescape_filename(filename: &[u8]) -> (Vec<u8>, &'static str) {
-    let mut unescaped = Vec::with_capacity(filename.len());
-    let mut byte_iter = filename.iter().peekable();
-    while let Some(byte) = byte_iter.next() {
-        if *byte == b'\\' {
-            match byte_iter.next() {
-                Some(b'\\') => unescaped.push(b'\\'),
-                Some(b'n') => unescaped.push(b'\n'),
-                Some(b'r') => unescaped.push(b'\r'),
-                Some(x) => {
-                    unescaped.push(b'\\');
-                    unescaped.push(*x);
-                }
-                _ => {}
-            }
-        } else {
-            unescaped.push(*byte);
-        }
-    }
-    let prefix = if unescaped == filename { "" } else { "\\" };
-    (unescaped, prefix)
-}
-
-pub fn escape_filename(filename: &OsStr) -> (String, &'static str) {
-    let original = filename.to_string_lossy();
-    let escaped = original
-        .replace('\\', "\\\\")
-        .replace('\n', "\\n")
-        .replace('\r', "\\r");
-    let prefix = if escaped == original { "" } else { "\\" };
-    (escaped, prefix)
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn test_unescape_filename() {
-        let (unescaped, prefix) = unescape_filename(b"test\\nfile.txt");
-        assert_eq!(unescaped, b"test\nfile.txt");
-        assert_eq!(prefix, "\\");
-        let (unescaped, prefix) = unescape_filename(b"test\\nfile.txt");
-        assert_eq!(unescaped, b"test\nfile.txt");
-        assert_eq!(prefix, "\\");
-
-        let (unescaped, prefix) = unescape_filename(b"test\\rfile.txt");
-        assert_eq!(unescaped, b"test\rfile.txt");
-        assert_eq!(prefix, "\\");
-
-        let (unescaped, prefix) = unescape_filename(b"test\\\\file.txt");
-        assert_eq!(unescaped, b"test\\file.txt");
-        assert_eq!(prefix, "\\");
-    }
-
-    #[test]
-    fn test_escape_filename() {
-        let (escaped, prefix) = escape_filename(OsStr::new("testfile.txt"));
-        assert_eq!(escaped, "testfile.txt");
-        assert_eq!(prefix, "");
-
-        let (escaped, prefix) = escape_filename(OsStr::new("test\nfile.txt"));
-        assert_eq!(escaped, "test\\nfile.txt");
-        assert_eq!(prefix, "\\");
-
-        let (escaped, prefix) = escape_filename(OsStr::new("test\rfile.txt"));
-        assert_eq!(escaped, "test\\rfile.txt");
-        assert_eq!(prefix, "\\");
-
-        let (escaped, prefix) = escape_filename(OsStr::new("test\\file.txt"));
-        assert_eq!(escaped, "test\\\\file.txt");
-        assert_eq!(prefix, "\\");
-    }
-
-    #[test]
-    fn test_calculate_blake2b_length() {
-        assert_eq!(calculate_blake2b_length_str("0").unwrap(), None);
-        assert!(calculate_blake2b_length_str("10").is_err());
-        assert!(calculate_blake2b_length_str("520").is_err());
-        assert_eq!(calculate_blake2b_length_str("512").unwrap(), None);
-        assert_eq!(calculate_blake2b_length_str("256").unwrap(), Some(32));
-    }
-
-    #[test]
-    fn test_blake2b_byte_length_overflow_is_rejected() {
-        let overflowing_length = usize::MAX / 8 + 1;
-        let err = SizedAlgoKind::from_unsized(AlgoKind::Blake2b, Some(overflowing_length))
-            .expect_err("overflowing byte length should be rejected");
-        assert!(err.to_string().contains("BLAKE2b"));
-    }
-
-    #[test]
-    fn test_shake_output_length_is_bounded() {
-        assert!(
-            SizedAlgoKind::from_unsized(AlgoKind::Shake128, Some(MAX_SHAKE_OUTPUT_BITS)).is_ok()
-        );
-        let err = SizedAlgoKind::from_unsized(AlgoKind::Shake256, Some(MAX_SHAKE_OUTPUT_BITS + 1))
-            .expect_err("oversized SHAKE output length should be rejected");
-        assert!(err.to_string().contains("SHAKE256"));
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/checksum/validate.rs b/registry/native/stubs/uucore/src/lib/features/checksum/validate.rs
deleted file mode 100644
index a642536b6..000000000
--- a/registry/native/stubs/uucore/src/lib/features/checksum/validate.rs
+++ /dev/null
@@ -1,1315 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore rsplit hexdigit bitlen invalidchecksum inva idchecksum xffname
-
-use crate::util_name;
-
-use std::ffi::OsStr;
-use std::fmt::Display;
-use std::fs::File;
-use std::io::{self, stderr, stdin, BufReader, Read, Write};
-
-use os_display::Quotable;
-
-use crate::checksum::{
-    digest_reader, unescape_filename, AlgoKind, ChecksumError, ReadingMode, SizedAlgoKind,
-};
-use crate::error::{FromIo, UError, UIoError, UResult, USimpleError};
-use crate::quoting_style::{locale_aware_escape_name, QuotingStyle};
-use crate::sum::DigestOutput;
-use crate::{
-    os_str_as_bytes, os_str_from_bytes, read_os_string_lines, show, show_warning_caps, translate,
-};
-
-/// To what level should checksum validation print logging info.
-#[derive(Debug, PartialEq, Eq, PartialOrd, Clone, Copy, Default)]
-pub enum ChecksumVerbose {
-    Status,
-    Quiet,
-    #[default]
-    Normal,
-    Warning,
-}
-
-impl ChecksumVerbose {
-    pub fn new(status: bool, quiet: bool, warn: bool) -> Self {
-        use ChecksumVerbose::*;
-
-        // Assume only one of the three booleans will be enabled at once.
-        // This is ensured by clap's overriding arguments.
-        match (status, quiet, warn) {
-            (true, _, _) => Status,
-            (_, true, _) => Quiet,
-            (_, _, true) => Warning,
-            _ => Normal,
-        }
-    }
-
-    #[inline]
-    pub fn over_status(self) -> bool {
-        self > Self::Status
-    }
-
-    #[inline]
-    pub fn over_quiet(self) -> bool {
-        self > Self::Quiet
-    }
-
-    #[inline]
-    pub fn at_least_warning(self) -> bool {
-        self >= Self::Warning
-    }
-}
-
-/// This struct regroups CLI flags.
-#[derive(Debug, Default, Clone, Copy)]
-pub struct ChecksumValidateOptions {
-    pub ignore_missing: bool,
-    pub strict: bool,
-    pub verbose: ChecksumVerbose,
-}
-
-/// This structure holds the count of checksum test lines' outcomes.
-#[derive(Default)]
-struct ChecksumResult {
-    /// Number of lines in the file where the computed checksum MATCHES
-    /// the expectation.
-    pub correct: u32,
-    /// Number of lines in the file where the computed checksum DIFFERS
-    /// from the expectation.
-    pub failed_cksum: u32,
-    pub failed_open_file: u32,
-    /// Number of improperly formatted lines.
-    pub bad_format: u32,
-    /// Total number of non-empty, non-comment lines.
-    pub total: u32,
-}
-
-impl ChecksumResult {
-    #[inline]
-    fn total_properly_formatted(&self) -> u32 {
-        self.total - self.bad_format
-    }
-}
-
-/// Represents a reason for which the processing of a checksum line
-/// could not proceed to digest comparison.
-enum LineCheckError {
-    /// a generic UError was encountered in sub-functions
-    UError(Box<dyn UError>),
-    /// the computed checksum digest differs from the expected one
-    DigestMismatch,
-    /// the line is empty or is a comment
-    Skipped,
-    /// the line has a formatting error
-    ImproperlyFormatted,
-    /// file exists but is impossible to read
-    CantOpenFile,
-    /// there is nothing at the given path
-    FileNotFound,
-    /// the given path leads to a directory
-    FileIsDirectory,
-}
-
-impl From<Box<dyn UError>> for LineCheckError {
-    fn from(value: Box<dyn UError>) -> Self {
-        Self::UError(value)
-    }
-}
-
-impl From<ChecksumError> for LineCheckError {
-    fn from(value: ChecksumError) -> Self {
-        Self::UError(Box::new(value))
-    }
-}
-
-/// Represents an error that was encountered when processing a checksum file.
-enum FileCheckError {
-    /// a generic UError was encountered in sub-functions
-    UError(Box<dyn UError>),
-    /// reading of the checksum file failed
-    CantOpenChecksumFile,
-    /// processing of the file is considered as a failure regarding the
-    /// provided flags. This however does not stop the processing of
-    /// further files.
-    Failed,
-}
-
-impl From<Box<dyn UError>> for FileCheckError {
-    fn from(value: Box<dyn UError>) -> Self {
-        Self::UError(value)
-    }
-}
-
-impl From<ChecksumError> for FileCheckError {
-    fn from(value: ChecksumError) -> Self {
-        Self::UError(Box::new(value))
-    }
-}
-
-fn print_cksum_report(res: &ChecksumResult) {
-    if res.bad_format > 0 {
-        show_warning_caps!(
-            "{}",
-            translate!("checksum-bad-format", "count" => res.bad_format)
-        );
-    }
-
-    if res.failed_cksum > 0 {
-        show_warning_caps!(
-            "{}",
-            translate!("checksum-failed-cksum", "count" => res.failed_cksum)
-        );
-    }
-
-    if res.failed_open_file > 0 {
-        show_warning_caps!(
-            "{}",
-            translate!("checksum-failed-open-file", "count" => res.failed_open_file)
-        );
-    }
-}
-
-/// Print a "no properly formatted lines" message in stderr
-#[inline]
-fn log_no_properly_formatted(filename: impl Display) {
-    let _ = writeln!(
-        stderr(),
-        "{}: {}",
-        util_name(),
-        translate!("checksum-no-properly-formatted", "checksum_file" => filename)
-    );
-}
-
-/// Print a "no file was verified" message in stderr
-#[inline]
-fn log_no_file_verified(filename: impl Display) {
-    let _ = writeln!(
-        stderr(),
-        "{}: {}",
-        util_name(),
-        translate!("checksum-no-file-verified", "checksum_file" => filename)
-    );
-}
-
-/// Represents the different outcomes that can happen to a file
-/// that is being checked.
-#[derive(Debug, Clone, Copy)]
-enum FileChecksumResult {
-    Ok,
-    Failed,
-    CantOpen,
-}
-
-impl FileChecksumResult {
-    /// Creates a `FileChecksumResult` from a digest comparison that
-    /// either succeeded or failed.
-    fn from_bool(checksum_correct: bool) -> Self {
-        if checksum_correct {
-            Self::Ok
-        } else {
-            Self::Failed
-        }
-    }
-
-    /// The cli options might prevent to display on the outcome of the
-    /// comparison on STDOUT.
-    fn can_display(self, verbose: ChecksumVerbose) -> bool {
-        match self {
-            Self::Ok => verbose.over_quiet(),
-            Self::Failed => verbose.over_status(),
-            Self::CantOpen => true,
-        }
-    }
-}
-
-impl Display for FileChecksumResult {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        match self {
-            Self::Ok => write!(f, "OK"),
-            Self::Failed => write!(f, "FAILED"),
-            Self::CantOpen => write!(f, "FAILED open or read"),
-        }
-    }
-}
-
-/// Write to the given buffer the checksum validation status of a file which
-/// name might contain non-utf-8 characters.
-fn write_file_report<W: Write>(
-    mut w: W,
-    filename: &[u8],
-    result: FileChecksumResult,
-    prefix: &str,
-    verbose: ChecksumVerbose,
-) -> io::Result<()> {
-    if result.can_display(verbose) {
-        write!(w, "{prefix}")?;
-        w.write_all(filename)?;
-        writeln!(w, ": {result}")?;
-    }
-    Ok(())
-}
-
-#[derive(Debug, PartialEq, Eq, Clone, Copy)]
-enum LineFormat {
-    AlgoBased,
-    SingleSpace,
-    Untagged,
-}
-
-impl LineFormat {
-    /// parse [tagged output format]
-    /// Normally the format is simply space separated but openssl does not
-    /// respect the gnu definition.
-    ///
-    /// [tagged output format]: https://www.gnu.org/software/coreutils/manual/html_node/cksum-output-modes.html#cksum-output-modes-1
-    fn parse_algo_based(line: &[u8]) -> Option<LineInfo> {
-        //   r"\MD5 (a\\ b) = abc123",
-        //   BLAKE2b(44)= a45a4c4883cce4b50d844fab460414cc2080ca83690e74d850a9253e757384366382625b218c8585daee80f34dc9eb2f2fde5fb959db81cd48837f9216e7b0fa
-        let trimmed = line.trim_ascii_start();
-        let algo_start = usize::from(trimmed.starts_with(b"\\"));
-        let rest = &trimmed[algo_start..];
-
-        enum SubCase {
-            Posix,
-            OpenSSL,
-        }
-        // find the next parenthesis  using byte search (not next whitespace) because openssl's
-        // tagged format does not put a space before (filename)
-
-        let par_idx = rest.iter().position(|&b| b == b'(')?;
-        let sub_case = if rest[par_idx - 1] == b' ' {
-            SubCase::Posix
-        } else {
-            SubCase::OpenSSL
-        };
-
-        let algo_substring = match sub_case {
-            SubCase::Posix => &rest[..par_idx - 1],
-            SubCase::OpenSSL => &rest[..par_idx],
-        };
-        let mut algo_parts = algo_substring.splitn(2, |&b| b == b'-');
-        let algo = algo_parts.next()?;
-
-        // Parse algo_bits if present
-        let algo_bits = algo_parts
-            .next()
-            .and_then(|s| std::str::from_utf8(s).ok()?.parse::<usize>().ok());
-
-        // Check algo format: uppercase ASCII or digits or "BLAKE2b"
-        let is_valid_algo = algo == b"BLAKE2b"
-            || algo
-                .iter()
-                .all(|&b| b.is_ascii_uppercase() || b.is_ascii_digit());
-        if !is_valid_algo {
-            return None;
-        }
-        // SAFETY: we just validated the contents of algo, we can unsafely make a
-        // String from it
-        let algo_utf8 = unsafe { String::from_utf8_unchecked(algo.to_vec()) };
-        // stripping '(' not ' (' since we matched on ( not whitespace because of openssl.
-        let after_paren = rest.get(par_idx + 1..)?;
-        let (filename, checksum) = match sub_case {
-            SubCase::Posix => ByteSliceExt::rsplit_once(after_paren, b") = ")?,
-            SubCase::OpenSSL => ByteSliceExt::rsplit_once(after_paren, b")= ")?,
-        };
-
-        let checksum_utf8 = Self::validate_checksum_format(checksum)?;
-
-        Some(LineInfo {
-            algo_name: Some(algo_utf8),
-            algo_bit_len: algo_bits,
-            checksum: checksum_utf8,
-            filename: filename.to_vec(),
-            format: Self::AlgoBased,
-        })
-    }
-
-    #[allow(rustdoc::invalid_html_tags)]
-    /// parse [untagged output format]
-    /// The format is simple, either "<checksum>  <filename>" or
-    /// "<checksum> *<filename>"
-    ///
-    /// [untagged output format]: https://www.gnu.org/software/coreutils/manual/html_node/cksum-output-modes.html#cksum-output-modes-1
-    fn parse_untagged(line: &[u8]) -> Option<LineInfo> {
-        let space_idx = line.iter().position(|&b| b == b' ')?;
-        let checksum = &line[..space_idx];
-
-        let checksum_utf8 = Self::validate_checksum_format(checksum)?;
-
-        let rest = &line[space_idx..];
-        let filename = rest
-            .strip_prefix(b"  ")
-            .or_else(|| rest.strip_prefix(b" *"))?;
-
-        Some(LineInfo {
-            algo_name: None,
-            algo_bit_len: None,
-            checksum: checksum_utf8,
-            filename: filename.to_vec(),
-            format: Self::Untagged,
-        })
-    }
-
-    #[allow(rustdoc::invalid_html_tags)]
-    /// parse [untagged output format]
-    /// Normally the format is simple, either "<checksum>  <filename>" or
-    /// "<checksum> *<filename>"
-    /// But the bsd tests expect special single space behavior where
-    /// checksum and filename are separated only by a space, meaning the second
-    /// space or asterisk is part of the file name.
-    /// This parser accounts for this variation
-    ///
-    /// [untagged output format]: https://www.gnu.org/software/coreutils/manual/html_node/cksum-output-modes.html#cksum-output-modes-1
-    fn parse_single_space(line: &[u8]) -> Option<LineInfo> {
-        // Find first space
-        let space_idx = line.iter().position(|&b| b == b' ')?;
-        let checksum = &line[..space_idx];
-        if !checksum.iter().all(|&b| b.is_ascii_hexdigit()) || checksum.is_empty() {
-            return None;
-        }
-        // SAFETY: we just validated the contents of checksum, we can unsafely make a
-        // String from it
-        let checksum_utf8 = unsafe { String::from_utf8_unchecked(checksum.to_vec()) };
-
-        let filename = line.get(space_idx + 1..)?; // Skip single space
-
-        Some(LineInfo {
-            algo_name: None,
-            algo_bit_len: None,
-            checksum: checksum_utf8,
-            filename: filename.to_vec(),
-            format: Self::SingleSpace,
-        })
-    }
-
-    /// Ensure that the given checksum is syntactically valid (that it is either
-    /// hexadecimal or base64 encoded).
-    fn validate_checksum_format(checksum: &[u8]) -> Option<String> {
-        if checksum.is_empty() {
-            return None;
-        }
-
-        let mut is_base64 = false;
-
-        for index in 0..checksum.len() {
-            match checksum[index..] {
-                // ASCII alphanumeric
-                [b'A'..=b'Z' | b'a'..=b'z' | b'0'..=b'9', ..] => (),
-                // Base64 special character
-                [b'+' | b'/', ..] => is_base64 = true,
-                // Base64 end of string padding
-                [b'='] | [b'=', b'='] | [b'=', b'=', b'='] => {
-                    is_base64 = true;
-                    break;
-                }
-                // Any other character means the checksum is wrong
-                _ => return None,
-            }
-        }
-
-        // If base64 characters were encountered, make sure the checksum has a
-        // length multiple of 4.
-        //
-        // This check is not enough because it may allow base64-encoded
-        // checksums that are fully alphanumeric. Another check happens later
-        // when we are provided with a length hint to detect ambiguous
-        // base64-encoded checksums.
-        if is_base64 && !checksum.len().is_multiple_of(4) {
-            return None;
-        }
-
-        // SAFETY: we just validated the contents of checksum, we can unsafely make a
-        // String from it
-        Some(unsafe { String::from_utf8_unchecked(checksum.to_vec()) })
-    }
-}
-
-// Helper trait for byte slice operations
-trait ByteSliceExt {
-    /// Look for a pattern from right to left, return surrounding parts if found.
-    fn rsplit_once(&self, pattern: &[u8]) -> Option<(&Self, &Self)>;
-}
-
-impl ByteSliceExt for [u8] {
-    fn rsplit_once(&self, pattern: &[u8]) -> Option<(&Self, &Self)> {
-        let pos = self
-            .windows(pattern.len())
-            .rev()
-            .position(|w| w == pattern)?;
-        Some((
-            &self[..self.len() - pattern.len() - pos],
-            &self[self.len() - pos..],
-        ))
-    }
-}
-
-/// Hold the data extracted from a checksum line.
-struct LineInfo {
-    algo_name: Option<String>,
-    algo_bit_len: Option<usize>,
-    checksum: String,
-    filename: Vec<u8>,
-    format: LineFormat,
-}
-
-impl LineInfo {
-    /// Returns a `LineInfo` parsed from a checksum line.
-    /// The function will run 3 parsers against the line and select the first one that matches
-    /// to populate the fields of the struct.
-    /// However, there is a catch to handle regarding the handling of `cached_line_format`.
-    /// In case of non-algo-based format, if `cached_line_format` is Some, it must take the priority
-    /// over the detected format. Otherwise, we must set it the the detected format.
-    /// This specific behavior is emphasized by the test
-    /// `test_md5sum::test_check_md5sum_only_one_space`.
-    fn parse(s: impl AsRef<OsStr>, cached_line_format: &mut Option<LineFormat>) -> Option<Self> {
-        let line_bytes = os_str_as_bytes(s.as_ref()).ok()?;
-
-        if let Some(info) = LineFormat::parse_algo_based(line_bytes) {
-            return Some(info);
-        }
-        if let Some(cached_format) = cached_line_format {
-            match cached_format {
-                LineFormat::Untagged => LineFormat::parse_untagged(line_bytes),
-                LineFormat::SingleSpace => LineFormat::parse_single_space(line_bytes),
-                LineFormat::AlgoBased => unreachable!("we never catch the algo based format"),
-            }
-        } else if let Some(info) = LineFormat::parse_untagged(line_bytes) {
-            *cached_line_format = Some(LineFormat::Untagged);
-            Some(info)
-        } else if let Some(info) = LineFormat::parse_single_space(line_bytes) {
-            *cached_line_format = Some(LineFormat::SingleSpace);
-            Some(info)
-        } else {
-            None
-        }
-    }
-}
-
-/// Extract the expected digest from the checksum string and decode it
-fn get_raw_expected_digest(checksum: &str, byte_len_hint: Option<usize>) -> Option<Vec<u8>> {
-    // If the length of the digest is not a multiple of 2, then it must be
-    // improperly formatted (1 byte is 2 hex digits, and base64 strings should
-    // always be a multiple of 4).
-    if !checksum.len().is_multiple_of(2) {
-        return None;
-    }
-
-    let checks_hint = |len| byte_len_hint.is_none_or(|hint| hint == len);
-
-    // If the length of the string matches the one to be expected (in case it's
-    // given) AND the digest can be decoded as hexadecimal, just go with it.
-    if checks_hint(checksum.len() / 2) {
-        if let Ok(raw_ck) = hex::decode(checksum) {
-            return Some(raw_ck);
-        }
-    }
-
-    // If the checksum cannot be decoded as hexadecimal, interpret it as Base64
-    // instead.
-
-    // But first, verify the encoded checksum length, which should be a
-    // multiple of 4.
-    //
-    // It is important to check it before trying to decode, because the
-    // forgiving mode of decoding will ignore if padding characters '=' are
-    // MISSING, but to match GNU's behavior, we must reject it.
-    if !checksum.len().is_multiple_of(4) {
-        return None;
-    }
-
-    // Perform the decoding and be FORGIVING about it, to allow for checksums
-    // with INVALID padding to still be decoded. This is enforced by
-    // `test_untagged_base64_matching_tag` in `test_cksum.rs`
-
-    base64_simd::forgiving_decode_to_vec(checksum.as_bytes())
-        .ok()
-        .filter(|raw| checks_hint(raw.len()))
-}
-
-/// Returns a reader that reads from the specified file, or from stdin if `filename_to_check` is "-".
-fn get_file_to_check(
-    filename: &OsStr,
-    opts: ChecksumValidateOptions,
-) -> Result<Box<dyn Read>, LineCheckError> {
-    let filename_bytes = os_str_as_bytes(filename).map_err(|e| LineCheckError::UError(e.into()))?;
-
-    if filename == "-" {
-        Ok(Box::new(stdin())) // Use stdin if "-" is specified in the checksum file
-    } else {
-        let failed_open = || {
-            write_file_report(
-                io::stdout(),
-                filename_bytes,
-                FileChecksumResult::CantOpen,
-                "",
-                opts.verbose,
-            )
-            .map_err(|e| LineCheckError::UError(e.into()))
-        };
-        let print_error = |err: io::Error| {
-            show!(err.map_err_context(|| {
-                locale_aware_escape_name(filename, QuotingStyle::SHELL_ESCAPE)
-                    // This is non destructive thanks to the escaping
-                    .to_string_lossy()
-                    .to_string()
-            }));
-        };
-        match File::open(filename) {
-            Ok(f) => {
-                if f.metadata()
-                    .map_err(|_| LineCheckError::CantOpenFile)?
-                    .is_dir()
-                {
-                    print_error(io::Error::new(
-                        io::ErrorKind::IsADirectory,
-                        "Is a directory",
-                    ));
-                    // also regarded as a failed open
-                    failed_open()?;
-                    Err(LineCheckError::FileIsDirectory)
-                } else {
-                    Ok(Box::new(f))
-                }
-            }
-            Err(err) => {
-                if !opts.ignore_missing {
-                    // yes, we have both stderr and stdout here
-                    print_error(err);
-                    failed_open()?;
-                }
-                // we could not open the file but we want to continue
-                Err(LineCheckError::FileNotFound)
-            }
-        }
-    }
-}
-
-/// Returns a reader to the list of checksums
-fn get_input_file(filename: &OsStr) -> UResult<Box<dyn Read>> {
-    match File::open(filename) {
-        Ok(f) => {
-            if f.metadata()?.is_dir() {
-                Err(io::Error::other(
-                    translate!("error-is-a-directory", "file" => filename.maybe_quote()),
-                )
-                .into())
-            } else {
-                Ok(Box::new(f))
-            }
-        }
-        Err(_) => Err(io::Error::other(format!(
-            "{}: {}",
-            filename.maybe_quote(),
-            translate!("error-file-not-found")
-        ))
-        .into()),
-    }
-}
-
-/// Gets the algorithm name and length from the `LineInfo` if the algo-based format is matched.
-fn identify_algo_name_and_length(
-    line_info: &LineInfo,
-    algo_name_input: Option<AlgoKind>,
-    last_algo: &mut Option<String>,
-) -> Result<(AlgoKind, Option<usize>), LineCheckError> {
-    let algo_from_line = line_info.algo_name.clone().unwrap_or_default();
-    let Ok(line_algo) = AlgoKind::from_cksum(algo_from_line.to_lowercase()) else {
-        // Unknown algorithm
-        return Err(LineCheckError::ImproperlyFormatted);
-    };
-    *last_algo = Some(algo_from_line);
-
-    // check if we are called with XXXsum (example: md5sum) but we detected a
-    // different algo parsing the file (for example SHA1 (f) = d...)
-    //
-    // Also handle the case cksum -s sm3 but the file contains other formats
-    if let Some(algo_name_input) = algo_name_input {
-        match (algo_name_input, line_algo) {
-            (l, r) if l == r => (),
-            // Edge case for SHA2, which matches SHA(224|256|384|512)
-            (
-                AlgoKind::Sha2,
-                AlgoKind::Sha224 | AlgoKind::Sha256 | AlgoKind::Sha384 | AlgoKind::Sha512,
-            ) => (),
-            _ => return Err(LineCheckError::ImproperlyFormatted),
-        }
-    }
-
-    let bytes = if let Some(bitlen) = line_info.algo_bit_len {
-        match line_algo {
-            AlgoKind::Blake2b if bitlen % 8 == 0 => Some(bitlen / 8),
-            AlgoKind::Sha2 | AlgoKind::Sha3 if [224, 256, 384, 512].contains(&bitlen) => {
-                Some(bitlen)
-            }
-            // Either
-            //  the algo based line is provided with a bit length
-            //  with an algorithm that does not support it (only Blake2B does).
-            //
-            //  eg: MD5-128 (foo.txt) = fffffffff
-            //          ^ This is illegal
-            // OR
-            //  the given length is wrong because it's not a multiple of 8.
-            _ => return Err(LineCheckError::ImproperlyFormatted),
-        }
-    } else if line_algo == AlgoKind::Blake2b {
-        // Default length with BLAKE2b,
-        Some(64)
-    } else {
-        None
-    };
-
-    Ok((line_algo, bytes))
-}
-
-/// Given a filename and an algorithm, compute the digest and compare it with
-/// the expected one.
-fn compute_and_check_digest_from_file(
-    filename: &[u8],
-    expected_checksum: &[u8],
-    algo: SizedAlgoKind,
-    opts: ChecksumValidateOptions,
-) -> Result<(), LineCheckError> {
-    let (filename_to_check_unescaped, prefix) = unescape_filename(filename);
-    let real_filename_to_check = os_str_from_bytes(&filename_to_check_unescaped)?;
-
-    // Open the input file
-    let file_to_check = get_file_to_check(&real_filename_to_check, opts)?;
-    let mut file_reader = BufReader::new(file_to_check);
-
-    // Read the file and calculate the checksum
-    let mut digest = algo.create_digest();
-
-    // Set binary to false because --binary is not supported with --check
-
-    let (calculated_checksum, _) =
-        match digest_reader(&mut digest, &mut file_reader, ReadingMode::Text) {
-            Ok(result) => result,
-            Err(err) => {
-                show!(err.map_err_context(|| {
-                    locale_aware_escape_name(&real_filename_to_check, QuotingStyle::SHELL_ESCAPE)
-                        .to_string_lossy()
-                        .to_string()
-                }));
-
-                write_file_report(
-                    io::stdout(),
-                    filename,
-                    FileChecksumResult::CantOpen,
-                    prefix,
-                    opts.verbose,
-                )
-                .map_err(|e| LineCheckError::UError(e.into()))?;
-                return Err(LineCheckError::CantOpenFile);
-            }
-        };
-
-    // Do the checksum validation
-    let checksum_correct = match calculated_checksum {
-        DigestOutput::Vec(data) => data == expected_checksum,
-        DigestOutput::Crc(n) => n.to_be_bytes() == expected_checksum,
-        DigestOutput::U16(n) => n.to_be_bytes() == expected_checksum,
-    };
-    write_file_report(
-        io::stdout(),
-        filename,
-        FileChecksumResult::from_bool(checksum_correct),
-        prefix,
-        opts.verbose,
-    )
-    .map_err(|e| LineCheckError::UError(e.into()))?;
-
-    if checksum_correct {
-        Ok(())
-    } else {
-        Err(LineCheckError::DigestMismatch)
-    }
-}
-
-/// Check a digest checksum with non-algo based pre-treatment.
-fn process_algo_based_line(
-    line_info: &LineInfo,
-    cli_algo_kind: Option<AlgoKind>,
-    opts: ChecksumValidateOptions,
-    last_algo: &mut Option<String>,
-) -> Result<(), LineCheckError> {
-    let filename_to_check = line_info.filename.as_slice();
-
-    let (algo_kind, algo_byte_len) =
-        identify_algo_name_and_length(line_info, cli_algo_kind, last_algo)?;
-
-    // If the digest bitlen is known, we can check the format of the expected
-    // checksum with it.
-    let digest_char_length_hint = match (algo_kind, algo_byte_len) {
-        (AlgoKind::Blake2b, Some(byte_len)) => Some(byte_len),
-        _ => None,
-    };
-
-    let expected_checksum = get_raw_expected_digest(&line_info.checksum, digest_char_length_hint)
-        .ok_or(LineCheckError::ImproperlyFormatted)?;
-
-    let algo = SizedAlgoKind::from_unsized(algo_kind, algo_byte_len)?;
-
-    compute_and_check_digest_from_file(filename_to_check, &expected_checksum, algo, opts)
-}
-
-/// Check a digest checksum with non-algo based pre-treatment.
-fn process_non_algo_based_line(
-    line_number: usize,
-    line_info: &LineInfo,
-    cli_algo_kind: AlgoKind,
-    cli_algo_length: Option<usize>,
-    opts: ChecksumValidateOptions,
-) -> Result<(), LineCheckError> {
-    let mut filename_to_check = line_info.filename.as_slice();
-    if filename_to_check.starts_with(b"*")
-        && line_number == 0
-        && line_info.format == LineFormat::SingleSpace
-    {
-        // Remove the leading asterisk if present - only for the first line
-        filename_to_check = &filename_to_check[1..];
-    }
-    let expected_checksum = get_raw_expected_digest(&line_info.checksum, None)
-        .ok_or(LineCheckError::ImproperlyFormatted)?;
-
-    // When a specific algorithm name is input, use it and use the provided
-    // bits except when dealing with blake2b, sha2 and sha3, where we will
-    // detect the length.
-    let (algo_kind, algo_byte_len) = match cli_algo_kind {
-        AlgoKind::Blake2b => (AlgoKind::Blake2b, Some(expected_checksum.len())),
-        algo @ (AlgoKind::Sha2 | AlgoKind::Sha3) => {
-            // multiplication by 8 to get the number of bits
-            (algo, Some(expected_checksum.len() * 8))
-        }
-        _ => (cli_algo_kind, cli_algo_length),
-    };
-
-    let algo = SizedAlgoKind::from_unsized(algo_kind, algo_byte_len)?;
-
-    compute_and_check_digest_from_file(filename_to_check, &expected_checksum, algo, opts)
-}
-
-/// Parses a checksum line, detect the algorithm to use, read the file and produce
-/// its digest, and compare it to the expected value.
-///
-/// Returns `Ok(bool)` if the comparison happened, bool indicates if the digest
-/// matched the expected.
-/// If the comparison didn't happen, return a `LineChecksumError`.
-fn process_checksum_line(
-    line: &OsStr,
-    i: usize,
-    cli_algo_name: Option<AlgoKind>,
-    cli_algo_length: Option<usize>,
-    opts: ChecksumValidateOptions,
-    cached_line_format: &mut Option<LineFormat>,
-    last_algo: &mut Option<String>,
-) -> Result<(), LineCheckError> {
-    let line_bytes = os_str_as_bytes(line).map_err(|e| LineCheckError::UError(Box::new(e)))?;
-
-    // Early return on empty or commented lines.
-    if line.is_empty() || line_bytes.starts_with(b"#") {
-        return Err(LineCheckError::Skipped);
-    }
-
-    // Use `LineInfo` to extract the data of a line.
-    // Then, depending on its format, apply a different pre-treatment.
-    let Some(line_info) = LineInfo::parse(line, cached_line_format) else {
-        return Err(LineCheckError::ImproperlyFormatted);
-    };
-
-    if line_info.format == LineFormat::AlgoBased {
-        process_algo_based_line(&line_info, cli_algo_name, opts, last_algo)
-    } else if let Some(cli_algo) = cli_algo_name {
-        // If we match a non-algo based parser, we expect a cli argument
-        // to give us the algorithm to use
-        process_non_algo_based_line(i, &line_info, cli_algo, cli_algo_length, opts)
-    } else {
-        // We have no clue of what algorithm to use
-        Err(LineCheckError::ImproperlyFormatted)
-    }
-}
-
-fn process_checksum_file(
-    filename_input: &OsStr,
-    cli_algo_kind: Option<AlgoKind>,
-    cli_algo_length: Option<usize>,
-    opts: ChecksumValidateOptions,
-) -> Result<(), FileCheckError> {
-    let mut res = ChecksumResult::default();
-
-    let input_is_stdin = filename_input == OsStr::new("-");
-
-    let file: Box<dyn Read> = if input_is_stdin {
-        // Use stdin if "-" is specified
-        Box::new(stdin())
-    } else {
-        match get_input_file(filename_input) {
-            Ok(f) => f,
-            Err(e) => {
-                // Could not read the file, show the error and continue to the next file
-                let _ = writeln!(stderr(), "{}: {e}", util_name());
-                return Err(FileCheckError::CantOpenChecksumFile);
-            }
-        }
-    };
-
-    let reader = BufReader::new(file);
-
-    // cached_line_format is used to ensure that several non algo-based checksum line
-    // will use the same parser.
-    let mut cached_line_format = None;
-    // last_algo caches the algorithm used in the last line to print a warning
-    // message for the current line if improperly formatted.
-    // Behavior tested in gnu_cksum_c::test_warn
-    let mut last_algo = None;
-
-    for (i, line_res) in read_os_string_lines(reader).enumerate() {
-        let line = line_res.map_err(|e| {
-            USimpleError::new(
-                UIoError::from(e).code(),
-                format!("{}: read error", filename_input.maybe_quote()),
-            )
-        })?;
-
-        let line_result = process_checksum_line(
-            &line,
-            i,
-            cli_algo_kind,
-            cli_algo_length,
-            opts,
-            &mut cached_line_format,
-            &mut last_algo,
-        );
-
-        // Match a first time to elude critical UErrors, and increment the total
-        // in all cases except on skipped.
-        use LineCheckError::*;
-        match line_result {
-            Err(UError(e)) => return Err(e.into()),
-            Err(Skipped) => (),
-            _ => res.total += 1,
-        }
-
-        // Match a second time to update the right field of `res`.
-        match line_result {
-            Ok(()) => res.correct += 1,
-            Err(DigestMismatch) => res.failed_cksum += 1,
-            Err(ImproperlyFormatted) => {
-                res.bad_format += 1;
-
-                if opts.verbose.at_least_warning() {
-                    let algo = if let Some(algo_name_input) = cli_algo_kind {
-                        algo_name_input.to_uppercase()
-                    } else if let Some(algo) = &last_algo {
-                        algo.as_str()
-                    } else {
-                        "Unknown algorithm"
-                    };
-                    let _ = writeln!(
-                        stderr(),
-                        "{}: {}",
-                        util_name(),
-                        translate!("checksum-error-algo-bad-format", "file" => filename_input.maybe_quote(), "line" => i + 1, "algo" => algo)
-                    );
-                }
-            }
-            Err(CantOpenFile | FileIsDirectory) => res.failed_open_file += 1,
-            Err(FileNotFound) if !opts.ignore_missing => res.failed_open_file += 1,
-            _ => (),
-        }
-    }
-
-    let filename_display = || {
-        if input_is_stdin {
-            "standard input".maybe_quote()
-        } else {
-            filename_input.maybe_quote()
-        }
-    };
-
-    // not a single line correctly formatted found
-    // return an error
-    if res.total_properly_formatted() == 0 {
-        if opts.verbose.over_status() {
-            log_no_properly_formatted(filename_display());
-        }
-        return Err(FileCheckError::Failed);
-    }
-
-    // if any incorrectly formatted line, show it
-    if opts.verbose.over_status() {
-        print_cksum_report(&res);
-    }
-
-    if opts.ignore_missing && res.correct == 0 {
-        // we have only bad format
-        // and we had ignore-missing
-        if opts.verbose.over_status() {
-            log_no_file_verified(filename_display());
-        }
-        return Err(FileCheckError::Failed);
-    }
-
-    // strict means that we should have an exit code.
-    if opts.strict && res.bad_format > 0 {
-        return Err(FileCheckError::Failed);
-    }
-
-    // If a file was missing, return an error unless we explicitly ignore it.
-    if res.failed_open_file > 0 && !opts.ignore_missing {
-        return Err(FileCheckError::Failed);
-    }
-
-    // Obviously, if a checksum failed at some point, report the error.
-    if res.failed_cksum > 0 {
-        return Err(FileCheckError::Failed);
-    }
-
-    Ok(())
-}
-
-/// Do the checksum validation (can be strict or not)
-pub fn perform_checksum_validation<'a, I>(
-    files: I,
-    algo_kind: Option<AlgoKind>,
-    length_input: Option<usize>,
-    opts: ChecksumValidateOptions,
-) -> UResult<()>
-where
-    I: Iterator<Item = &'a OsStr>,
-{
-    let mut failed = false;
-
-    // if cksum has several input files, it will print the result for each file
-    for filename_input in files {
-        use FileCheckError::*;
-        match process_checksum_file(filename_input, algo_kind, length_input, opts) {
-            Err(UError(e)) => return Err(e),
-            Err(Failed | CantOpenChecksumFile) => failed = true,
-            Ok(_) => (),
-        }
-    }
-
-    if failed {
-        Err(USimpleError::new(1, ""))
-    } else {
-        Ok(())
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use std::ffi::OsString;
-
-    use super::*;
-
-    #[test]
-    fn test_algo_based_parser() {
-        #[allow(clippy::type_complexity)]
-        let test_cases: &[(&[u8], Option<(&[u8], Option<&[u8]>, &[u8], &[u8])>)] = &[
-            (b"SHA256 (example.txt) = d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2", Some((b"SHA256", None, b"example.txt", b"d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2d2"))),
-            // cspell:disable
-            (b"BLAKE2b-512 (file) = abcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdef", Some((b"BLAKE2b", Some(b"512"), b"file", b"abcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdefabcdef"))),
-            (b" MD5 (test) = 9e107d9d372bb6826bd81d3542a419d6", Some((b"MD5", None, b"test", b"9e107d9d372bb6826bd81d3542a419d6"))),
-            (b"SHA-1 (anotherfile) = a9993e364706816aba3e25717850c26c9cd0d89d", Some((b"SHA", Some(b"1"), b"anotherfile", b"a9993e364706816aba3e25717850c26c9cd0d89d"))),
-            (b" MD5 (anothertest) = fds65dsf46as5df4d6f54asds5d7f7g9", Some((b"MD5", None, b"anothertest", b"fds65dsf46as5df4d6f54asds5d7f7g9"))),
-            (b" MD5(anothertest2) = fds65dsf46as5df4d6f54asds5d7f7g9", None),
-            (b" MD5(weirdfilename0)= stillfilename)= fds65dsf46as5df4d6f54asds5d7f7g9", Some((b"MD5", None, b"weirdfilename0)= stillfilename", b"fds65dsf46as5df4d6f54asds5d7f7g9"))),
-            (b" MD5(weirdfilename1)= )= fds65dsf46as5df4d6f54asds5d7f7g9", Some((b"MD5", None, b"weirdfilename1)= ", b"fds65dsf46as5df4d6f54asds5d7f7g9"))),
-            (b" MD5(weirdfilename2) = )= fds65dsf46as5df4d6f54asds5d7f7g9", Some((b"MD5", None, b"weirdfilename2) = ", b"fds65dsf46as5df4d6f54asds5d7f7g9"))),
-            (b" MD5 (weirdfilename3)= ) = fds65dsf46as5df4d6f54asds5d7f7g9", Some((b"MD5", None, b"weirdfilename3)= ", b"fds65dsf46as5df4d6f54asds5d7f7g9"))),
-            (b" MD5 (weirdfilename4) = ) = fds65dsf46as5df4d6f54asds5d7f7g9", Some((b"MD5", None, b"weirdfilename4) = ", b"fds65dsf46as5df4d6f54asds5d7f7g9"))),
-            (b" MD5(weirdfilename5)= ) = fds65dsf46as5df4d6f54asds5d7f7g9", None),
-            (b" MD5(weirdfilename6) = ) = fds65dsf46as5df4d6f54asds5d7f7g9", None),
-            (b" MD5 (weirdfilename7)= )= fds65dsf46as5df4d6f54asds5d7f7g9", None),
-            (b" MD5 (weirdfilename8) = )= fds65dsf46as5df4d6f54asds5d7f7g9", None),
-        ];
-
-        // cspell:enable
-        for (input, expected) in test_cases {
-            let line_info = LineFormat::parse_algo_based(input);
-            match expected {
-                Some((algo, bits, filename, checksum)) => {
-                    assert!(
-                        line_info.is_some(),
-                        "expected Some, got None for {}",
-                        String::from_utf8_lossy(filename)
-                    );
-                    let line_info = line_info.unwrap();
-                    assert_eq!(
-                        &line_info.algo_name.unwrap().as_bytes(),
-                        algo,
-                        "failed for {}",
-                        String::from_utf8_lossy(filename)
-                    );
-                    assert_eq!(
-                        line_info
-                            .algo_bit_len
-                            .map(|m| m.to_string().as_bytes().to_owned()),
-                        bits.map(ToOwned::to_owned),
-                        "failed for {}",
-                        String::from_utf8_lossy(filename)
-                    );
-                    assert_eq!(
-                        &line_info.filename,
-                        filename,
-                        "failed for {}",
-                        String::from_utf8_lossy(filename)
-                    );
-                    assert_eq!(
-                        &line_info.checksum.as_bytes(),
-                        checksum,
-                        "failed for {}",
-                        String::from_utf8_lossy(filename)
-                    );
-                }
-                None => {
-                    assert!(
-                        line_info.is_none(),
-                        "failed for {}",
-                        String::from_utf8_lossy(input)
-                    );
-                }
-            }
-        }
-    }
-
-    #[test]
-    fn test_double_space_parser() {
-        #[allow(clippy::type_complexity)]
-        let test_cases: &[(&[u8], Option<(&[u8], &[u8])>)] = &[
-            (
-                b"60b725f10c9c85c70d97880dfe8191b3  a",
-                Some((b"60b725f10c9c85c70d97880dfe8191b3", b"a")),
-            ),
-            (
-                b"bf35d7536c785cf06730d5a40301eba2   b",
-                Some((b"bf35d7536c785cf06730d5a40301eba2", b" b")),
-            ),
-            (
-                b"f5b61709718c1ecf8db1aea8547d4698  *c",
-                Some((b"f5b61709718c1ecf8db1aea8547d4698", b"*c")),
-            ),
-            (
-                b"b064a020db8018f18ff5ae367d01b212  dd",
-                Some((b"b064a020db8018f18ff5ae367d01b212", b"dd")),
-            ),
-            (
-                b"b064a020db8018f18ff5ae367d01b212   ",
-                Some((b"b064a020db8018f18ff5ae367d01b212", b" ")),
-            ),
-            // base64 checksums are accepted
-            (
-                b"b21lbGV0dGUgZHUgZnJvbWFnZQ==   ",
-                Some((b"b21lbGV0dGUgZHUgZnJvbWFnZQ==", b" ")),
-            ),
-            // Invalid checksums fail
-            (b"inva|idchecksum  test", None),
-        ];
-
-        for (input, expected) in test_cases {
-            let line_info = LineFormat::parse_untagged(input);
-            match expected {
-                Some((checksum, filename)) => {
-                    assert!(line_info.is_some());
-                    let line_info = line_info.unwrap();
-                    assert_eq!(&line_info.filename, filename);
-                    assert_eq!(&line_info.checksum.as_bytes(), checksum);
-                }
-                None => {
-                    assert!(line_info.is_none());
-                }
-            }
-        }
-    }
-
-    #[test]
-    fn test_single_space_parser() {
-        #[allow(clippy::type_complexity)]
-        let test_cases: &[(&[u8], Option<(&[u8], &[u8])>)] = &[
-            (
-                b"60b725f10c9c85c70d97880dfe8191b3 a",
-                Some((b"60b725f10c9c85c70d97880dfe8191b3", b"a")),
-            ),
-            (
-                b"bf35d7536c785cf06730d5a40301eba2 b",
-                Some((b"bf35d7536c785cf06730d5a40301eba2", b"b")),
-            ),
-            (
-                b"f5b61709718c1ecf8db1aea8547d4698 *c",
-                Some((b"f5b61709718c1ecf8db1aea8547d4698", b"*c")),
-            ),
-            (
-                b"b064a020db8018f18ff5ae367d01b212 dd",
-                Some((b"b064a020db8018f18ff5ae367d01b212", b"dd")),
-            ),
-            (b"invalidchecksum test", None),
-        ];
-
-        for (input, expected) in test_cases {
-            let line_info = LineFormat::parse_single_space(input);
-            match expected {
-                Some((checksum, filename)) => {
-                    assert!(line_info.is_some());
-                    let line_info = line_info.unwrap();
-                    assert_eq!(&line_info.filename, filename);
-                    assert_eq!(&line_info.checksum.as_bytes(), checksum);
-                }
-                None => {
-                    assert!(line_info.is_none());
-                }
-            }
-        }
-    }
-
-    #[test]
-    fn test_line_info() {
-        let mut cached_line_format = None;
-
-        // Test algo-based parser
-        let line_algo_based =
-            OsString::from("MD5 (example.txt) = d41d8cd98f00b204e9800998ecf8427e");
-        let line_info = LineInfo::parse(&line_algo_based, &mut cached_line_format).unwrap();
-        assert_eq!(line_info.algo_name.as_deref(), Some("MD5"));
-        assert!(line_info.algo_bit_len.is_none());
-        assert_eq!(line_info.filename, b"example.txt");
-        assert_eq!(line_info.checksum, "d41d8cd98f00b204e9800998ecf8427e");
-        assert_eq!(line_info.format, LineFormat::AlgoBased);
-        assert!(cached_line_format.is_none());
-
-        // Test double-space parser
-        let line_double_space = OsString::from("d41d8cd98f00b204e9800998ecf8427e  example.txt");
-        let line_info = LineInfo::parse(&line_double_space, &mut cached_line_format).unwrap();
-        assert!(line_info.algo_name.is_none());
-        assert!(line_info.algo_bit_len.is_none());
-        assert_eq!(line_info.filename, b"example.txt");
-        assert_eq!(line_info.checksum, "d41d8cd98f00b204e9800998ecf8427e");
-        assert_eq!(line_info.format, LineFormat::Untagged);
-        assert!(cached_line_format.is_some());
-
-        cached_line_format = None;
-
-        // Test single-space parser
-        let line_single_space = OsString::from("d41d8cd98f00b204e9800998ecf8427e example.txt");
-        let line_info = LineInfo::parse(&line_single_space, &mut cached_line_format).unwrap();
-        assert!(line_info.algo_name.is_none());
-        assert!(line_info.algo_bit_len.is_none());
-        assert_eq!(line_info.filename, b"example.txt");
-        assert_eq!(line_info.checksum, "d41d8cd98f00b204e9800998ecf8427e");
-        assert_eq!(line_info.format, LineFormat::SingleSpace);
-        assert!(cached_line_format.is_some());
-
-        cached_line_format = None;
-
-        // Test invalid checksum line
-        let line_invalid = OsString::from("invalid checksum line");
-        assert!(LineInfo::parse(&line_invalid, &mut cached_line_format).is_none());
-        assert!(cached_line_format.is_none());
-
-        // Test leading space before checksum line
-        let line_algo_based_leading_space =
-            OsString::from("   MD5 (example.txt) = d41d8cd98f00b204e9800998ecf8427e");
-        let line_info =
-            LineInfo::parse(&line_algo_based_leading_space, &mut cached_line_format).unwrap();
-        assert_eq!(line_info.format, LineFormat::AlgoBased);
-        assert!(cached_line_format.is_none());
-
-        // Test trailing space after checksum line (should fail)
-        let line_algo_based_leading_space =
-            OsString::from("MD5 (example.txt) = d41d8cd98f00b204e9800998ecf8427e ");
-        let res = LineInfo::parse(&line_algo_based_leading_space, &mut cached_line_format);
-        assert!(res.is_none());
-        assert!(cached_line_format.is_none());
-    }
-
-    #[test]
-    fn test_get_expected_digest() {
-        let ck = "47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU=".to_owned();
-
-        let result = get_raw_expected_digest(&ck, None);
-
-        assert_eq!(
-            result.unwrap(),
-            hex::decode(b"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855")
-                .unwrap()
-        );
-    }
-
-    #[test]
-    fn test_get_expected_checksum_invalid() {
-        // The line misses a '=' at the end to be valid base64
-        let ck = "47DEQpj8HBSa+/TImW+5JCeuQeRkm5NMpJWZG3hSuFU".to_owned();
-
-        let result = get_raw_expected_digest(&ck, None);
-
-        assert!(result.is_none());
-    }
-
-    #[test]
-    fn test_write_file_report() {
-        let opts = ChecksumValidateOptions::default();
-
-        let cases: &[(&[u8], FileChecksumResult, &str, &[u8])] = &[
-            (b"filename", FileChecksumResult::Ok, "", b"filename: OK\n"),
-            (
-                b"filename",
-                FileChecksumResult::Failed,
-                "",
-                b"filename: FAILED\n",
-            ),
-            (
-                b"filename",
-                FileChecksumResult::CantOpen,
-                "",
-                b"filename: FAILED open or read\n",
-            ),
-            (
-                b"filename",
-                FileChecksumResult::Ok,
-                "prefix",
-                b"prefixfilename: OK\n",
-            ),
-            (
-                b"funky\xffname",
-                FileChecksumResult::Ok,
-                "",
-                b"funky\xffname: OK\n",
-            ),
-        ];
-
-        for (filename, result, prefix, expected) in cases {
-            let mut buffer: Vec<u8> = vec![];
-            write_file_report(&mut buffer, filename, *result, prefix, opts.verbose).unwrap();
-            assert_eq!(&buffer, expected);
-        }
-    }
-
-    struct FailingWriter;
-
-    impl Write for FailingWriter {
-        fn write(&mut self, _buf: &[u8]) -> io::Result<usize> {
-            Err(io::Error::new(io::ErrorKind::BrokenPipe, "closed"))
-        }
-
-        fn flush(&mut self) -> io::Result<()> {
-            Ok(())
-        }
-    }
-
-    #[test]
-    fn test_write_file_report_returns_write_errors() {
-        let err = write_file_report(
-            FailingWriter,
-            b"filename",
-            FileChecksumResult::Ok,
-            "",
-            ChecksumVerbose::Normal,
-        )
-        .unwrap_err();
-
-        assert_eq!(err.kind(), io::ErrorKind::BrokenPipe);
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/colors.rs b/registry/native/stubs/uucore/src/lib/features/colors.rs
deleted file mode 100644
index 2792de7c5..000000000
--- a/registry/native/stubs/uucore/src/lib/features/colors.rs
+++ /dev/null
@@ -1,270 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// cSpell:disable
-
-//! Provides color handling for `ls` and other utilities.
-
-/// The keywords COLOR, OPTIONS, and EIGHTBIT (honored by the
-/// slackware version of dircolors) are recognized but ignored.
-/// Global config options can be specified before TERM or COLORTERM entries
-/// below are TERM or COLORTERM entries, which can be glob patterns, which
-/// restrict following config to systems with matching environment variables.
-pub static TERMS: &[&str] = &[
-    "Eterm",
-    "alacritty*",
-    "ansi",
-    "*color*",
-    "con[0-9]*x[0-9]*",
-    "cons25",
-    "console",
-    "cygwin",
-    "*direct*",
-    "dtterm",
-    "foot",
-    "gnome",
-    "hurd",
-    "jfbterm",
-    "konsole",
-    "kterm",
-    "linux",
-    "linux-c",
-    "mlterm",
-    "putty",
-    "rxvt*",
-    "screen*",
-    "st",
-    "terminator",
-    "tmux*",
-    "vt100",
-    "wezterm*",
-    "xterm*",
-];
-
-/// Below are the color init strings for the basic file types.
-/// One can use codes for 256 or more colors supported by modern terminals.
-/// The default color codes use the capabilities of an 8 color terminal
-/// with some additional attributes as per the following codes:
-/// Attribute codes:
-/// 00=none 01=bold 04=underscore 05=blink 07=reverse 08=concealed
-/// Text color codes:
-/// 30=black 31=red 32=green 33=yellow 34=blue 35=magenta 36=cyan 37=white
-/// Background color codes:
-/// 40=black 41=red 42=green 43=yellow 44=blue 45=magenta 46=cyan 47=white
-/// #NORMAL 00 /// no color code at all
-/// #FILE 00 /// regular file: use no color at all
-pub static FILE_TYPES: &[(&str, &str, &str)] = &[
-    ("RESET", "rs", "0"),                     // reset to "normal" color
-    ("DIR", "di", "01;34"),                   // directory
-    ("LINK", "ln", "01;36"),                  // symbolic link
-    ("MULTIHARDLINK", "mh", "00"),            // regular file with more than one link
-    ("FIFO", "pi", "40;33"),                  // pipe
-    ("SOCK", "so", "01;35"),                  // socket
-    ("DOOR", "do", "01;35"),                  // door
-    ("BLK", "bd", "40;33;01"),                // block device driver
-    ("CHR", "cd", "40;33;01"),                // character device driver
-    ("ORPHAN", "or", "40;31;01"),             // symlink to nonexistent file, or non-stat'able file
-    ("MISSING", "mi", "00"),                  // ... and the files they point to
-    ("SETUID", "su", "37;41"),                // file that is setuid (u+s)
-    ("SETGID", "sg", "30;43"),                // file that is setgid (g+s)
-    ("CAPABILITY", "ca", "00"),               // file with capability
-    ("STICKY_OTHER_WRITABLE", "tw", "30;42"), // dir that is sticky and other-writable (+t,o+w)
-    ("OTHER_WRITABLE", "ow", "34;42"),        // dir that is other-writable (o+w) and not sticky
-    ("STICKY", "st", "37;44"), // dir with the sticky bit set (+t) and not other-writable
-    ("EXEC", "ex", "01;32"),   // files with execute permission
-];
-
-/// Colors for file types
-///
-/// List any file extensions like '.gz' or '.tar' that you would like ls
-/// to color below. Put the extension, a space, and the color init string.
-/// (and any comments you want to add after a '#')
-pub static FILE_COLORS: &[(&str, &str)] = &[
-    /*
-    // Executables (Windows)
-    (".cmd", "01;32"),
-    (".exe", "01;32"),
-    (".com", "01;32"),
-    (".btm", "01;32"),
-    (".bat", "01;32"),
-    (".sh", "01;32"),
-    (".csh", "01;32"),*/
-    // Archives or compressed
-    (".tar", "01;31"),
-    (".tgz", "01;31"),
-    (".arc", "01;31"),
-    (".arj", "01;31"),
-    (".taz", "01;31"),
-    (".lha", "01;31"),
-    (".lz4", "01;31"),
-    (".lzh", "01;31"),
-    (".lzma", "01;31"),
-    (".tlz", "01;31"),
-    (".txz", "01;31"),
-    (".tzo", "01;31"),
-    (".t7z", "01;31"),
-    (".zip", "01;31"),
-    (".z", "01;31"),
-    (".dz", "01;31"),
-    (".gz", "01;31"),
-    (".lrz", "01;31"),
-    (".lz", "01;31"),
-    (".lzo", "01;31"),
-    (".xz", "01;31"),
-    (".zst", "01;31"),
-    (".tzst", "01;31"),
-    (".bz2", "01;31"),
-    (".bz", "01;31"),
-    (".tbz", "01;31"),
-    (".tbz2", "01;31"),
-    (".tz", "01;31"),
-    (".deb", "01;31"),
-    (".rpm", "01;31"),
-    (".jar", "01;31"),
-    (".war", "01;31"),
-    (".ear", "01;31"),
-    (".sar", "01;31"),
-    (".rar", "01;31"),
-    (".alz", "01;31"),
-    (".ace", "01;31"),
-    (".zoo", "01;31"),
-    (".cpio", "01;31"),
-    (".7z", "01;31"),
-    (".rz", "01;31"),
-    (".cab", "01;31"),
-    (".wim", "01;31"),
-    (".swm", "01;31"),
-    (".dwm", "01;31"),
-    (".esd", "01;31"),
-    // Image formats
-    (".avif", "01;35"),
-    (".jpg", "01;35"),
-    (".jpeg", "01;35"),
-    (".mjpg", "01;35"),
-    (".mjpeg", "01;35"),
-    (".gif", "01;35"),
-    (".bmp", "01;35"),
-    (".pbm", "01;35"),
-    (".pgm", "01;35"),
-    (".ppm", "01;35"),
-    (".tga", "01;35"),
-    (".xbm", "01;35"),
-    (".xpm", "01;35"),
-    (".tif", "01;35"),
-    (".tiff", "01;35"),
-    (".png", "01;35"),
-    (".svg", "01;35"),
-    (".svgz", "01;35"),
-    (".mng", "01;35"),
-    (".pcx", "01;35"),
-    (".mov", "01;35"),
-    (".mpg", "01;35"),
-    (".mpeg", "01;35"),
-    (".m2v", "01;35"),
-    (".mkv", "01;35"),
-    (".webm", "01;35"),
-    (".webp", "01;35"),
-    (".ogm", "01;35"),
-    (".mp4", "01;35"),
-    (".m4v", "01;35"),
-    (".mp4v", "01;35"),
-    (".vob", "01;35"),
-    (".qt", "01;35"),
-    (".nuv", "01;35"),
-    (".wmv", "01;35"),
-    (".asf", "01;35"),
-    (".rm", "01;35"),
-    (".rmvb", "01;35"),
-    (".flc", "01;35"),
-    (".avi", "01;35"),
-    (".fli", "01;35"),
-    (".flv", "01;35"),
-    (".gl", "01;35"),
-    (".dl", "01;35"),
-    (".xcf", "01;35"),
-    (".xwd", "01;35"),
-    (".yuv", "01;35"),
-    (".cgm", "01;35"),
-    (".emf", "01;35"),
-    // https://wiki.xiph.org/MIME_Types_and_File_Extensions
-    (".ogv", "01;35"),
-    (".ogx", "01;35"),
-    // Audio formats
-    (".aac", "00;36"),
-    (".au", "00;36"),
-    (".flac", "00;36"),
-    (".m4a", "00;36"),
-    (".mid", "00;36"),
-    (".midi", "00;36"),
-    (".mka", "00;36"),
-    (".mp3", "00;36"),
-    (".mpc", "00;36"),
-    (".ogg", "00;36"),
-    (".ra", "00;36"),
-    (".wav", "00;36"),
-    // https://wiki.xiph.org/MIME_Types_and_File_Extensions
-    (".oga", "00;36"),
-    (".opus", "00;36"),
-    (".spx", "00;36"),
-    (".xspf", "00;36"),
-    // Backup files
-    ("*~", "00;90"),
-    ("*#", "00;90"),
-    (".bak", "00;90"),
-    (".old", "00;90"),
-    (".orig", "00;90"),
-    (".part", "00;90"),
-    (".rej", "00;90"),
-    (".swp", "00;90"),
-    (".tmp", "00;90"),
-    (".dpkg-dist", "00;90"),
-    (".dpkg-old", "00;90"),
-    (".ucf-dist", "00;90"),
-    (".ucf-new", "00;90"),
-    (".ucf-old", "00;90"),
-    (".rpmnew", "00;90"),
-    (".rpmorig", "00;90"),
-    (".rpmsave", "00;90"),
-];
-
-/// Below are the terminal color capabilities
-pub static FILE_ATTRIBUTE_CODES: &[(&str, &str)] = &[
-    ("normal", "no"),
-    ("norm", "no"),
-    ("file", "fi"),
-    ("reset", "rs"),
-    ("dir", "di"),
-    ("lnk", "ln"),
-    ("link", "ln"),
-    ("symlink", "ln"),
-    ("orphan", "or"),
-    ("missing", "mi"),
-    ("fifo", "pi"),
-    ("pipe", "pi"),
-    ("sock", "so"),
-    ("blk", "bd"),
-    ("block", "bd"),
-    ("chr", "cd"),
-    ("char", "cd"),
-    ("door", "do"),
-    ("exec", "ex"),
-    ("left", "lc"),
-    ("leftcode", "lc"),
-    ("right", "rc"),
-    ("rightcode", "rc"),
-    ("end", "ec"),
-    ("endcode", "ec"),
-    ("suid", "su"),
-    ("setuid", "su"),
-    ("sgid", "sg"),
-    ("setgid", "sg"),
-    ("sticky", "st"),
-    ("other_writable", "ow"),
-    ("owr", "ow"),
-    ("sticky_other_writable", "tw"),
-    ("owt", "tw"),
-    ("capability", "ca"),
-    ("multihardlink", "mh"),
-    ("clrtoeol", "cl"),
-];
diff --git a/registry/native/stubs/uucore/src/lib/features/encoding.rs b/registry/native/stubs/uucore/src/lib/features/encoding.rs
deleted file mode 100644
index 795343f54..000000000
--- a/registry/native/stubs/uucore/src/lib/features/encoding.rs
+++ /dev/null
@@ -1,637 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore (encodings) lsbf msbf
-// spell-checker:ignore unpadded
-// spell-checker:ignore ABCDEFGHJKLMNPQRSTUVWXY Zabcdefghijkmnopqrstuvwxyz
-
-use crate::error::{UResult, USimpleError};
-use base64_simd;
-use data_encoding::Encoding;
-use data_encoding_macro::new_encoding;
-use std::collections::VecDeque;
-
-// SIMD base64 wrapper
-pub struct Base64SimdWrapper {
-    pub alphabet: &'static [u8],
-    pub use_padding: bool,
-    pub unpadded_multiple: usize,
-    pub valid_decoding_multiple: usize,
-}
-
-impl Base64SimdWrapper {
-    fn decode_with_standard(input: &[u8], output: &mut Vec<u8>) -> Result<(), ()> {
-        match base64_simd::STANDARD.decode_to_vec(input) {
-            Ok(decoded_bytes) => {
-                output.extend_from_slice(&decoded_bytes);
-                Ok(())
-            }
-            Err(_) => Err(()),
-        }
-    }
-
-    fn decode_with_no_pad(input: &[u8], output: &mut Vec<u8>) -> Result<(), ()> {
-        match base64_simd::STANDARD_NO_PAD.decode_to_vec(input) {
-            Ok(decoded_bytes) => {
-                output.extend_from_slice(&decoded_bytes);
-                Ok(())
-            }
-            Err(_) => Err(()),
-        }
-    }
-
-    pub fn new(
-        use_padding: bool,
-        valid_decoding_multiple: usize,
-        unpadded_multiple: usize,
-        alphabet: &'static [u8],
-    ) -> Self {
-        assert!(valid_decoding_multiple > 0);
-        assert!(unpadded_multiple > 0);
-        assert!(!alphabet.is_empty());
-
-        Self {
-            alphabet,
-            use_padding,
-            unpadded_multiple,
-            valid_decoding_multiple,
-        }
-    }
-}
-
-impl SupportsFastDecodeAndEncode for Base64SimdWrapper {
-    fn alphabet(&self) -> &'static [u8] {
-        self.alphabet
-    }
-
-    fn decode_into_vec(&self, input: &[u8], output: &mut Vec<u8>) -> UResult<()> {
-        let original_len = output.len();
-
-        let decode_result = if self.use_padding {
-            // GNU coreutils keeps decoding even when '=' appears before the true end
-            // of the stream (e.g. concatenated padded chunks). Mirror that logic
-            // by splitting at each '='-containing quantum, decoding those 4-byte
-            // groups with the padded variant, then letting the remainder fall back
-            // to whichever alphabet fits.
-            (|| {
-                let mut start = 0usize;
-                while start < input.len() {
-                    let remaining = &input[start..];
-
-                    if remaining.is_empty() {
-                        break;
-                    }
-
-                    if let Some(eq_rel_idx) = remaining.iter().position(|&b| b == b'=') {
-                        let blocks = (eq_rel_idx / 4) + 1;
-                        let segment_len = blocks * 4;
-
-                        if segment_len > remaining.len() {
-                            return Err(USimpleError::new(1, "error: invalid input"));
-                        }
-
-                        if Self::decode_with_standard(&remaining[..segment_len], output).is_err() {
-                            return Err(USimpleError::new(1, "error: invalid input"));
-                        }
-
-                        start += segment_len;
-                    } else {
-                        // If there are no more '=' bytes the tail might still be padded
-                        // (len % 4 == 0) or purposely unpadded (GNU --ignore-garbage or
-                        // concatenated streams), so select the matching alphabet.
-                        let decoder = if remaining.len().is_multiple_of(4) {
-                            Self::decode_with_standard
-                        } else {
-                            Self::decode_with_no_pad
-                        };
-
-                        if decoder(remaining, output).is_err() {
-                            return Err(USimpleError::new(1, "error: invalid input"));
-                        }
-
-                        break;
-                    }
-                }
-
-                Ok(())
-            })()
-        } else {
-            Self::decode_with_no_pad(input, output)
-                .map_err(|_| USimpleError::new(1, "error: invalid input"))
-        };
-
-        if let Err(err) = decode_result {
-            output.truncate(original_len);
-            Err(err)
-        } else {
-            Ok(())
-        }
-    }
-
-    fn encode_to_vec_deque(&self, input: &[u8], output: &mut VecDeque<u8>) -> UResult<()> {
-        let encoded = if self.use_padding {
-            base64_simd::STANDARD.encode_to_string(input)
-        } else {
-            base64_simd::STANDARD_NO_PAD.encode_to_string(input)
-        };
-
-        output.extend(encoded.as_bytes());
-
-        Ok(())
-    }
-
-    fn unpadded_multiple(&self) -> usize {
-        self.unpadded_multiple
-    }
-
-    fn valid_decoding_multiple(&self) -> usize {
-        self.valid_decoding_multiple
-    }
-}
-
-// Re-export for the faster decoding/encoding logic
-pub mod for_base_common {
-    pub use data_encoding::*;
-}
-
-pub mod for_cksum {
-    pub use data_encoding::BASE64;
-}
-
-#[derive(Clone, Copy, Debug)]
-pub enum Format {
-    Base64,
-    Base64Url,
-    Base32,
-    Base32Hex,
-    Base16,
-    Base2Lsbf,
-    Base2Msbf,
-    Z85,
-    Base58,
-}
-
-pub const BASE2LSBF: Encoding = new_encoding! {
-    symbols: "01",
-    bit_order: LeastSignificantFirst,
-};
-
-pub const BASE2MSBF: Encoding = new_encoding! {
-    symbols: "01",
-    bit_order: MostSignificantFirst,
-};
-
-pub struct Z85Wrapper {}
-
-pub struct Base58Wrapper {}
-
-pub struct EncodingWrapper {
-    pub alphabet: &'static [u8],
-    pub encoding: Encoding,
-    pub unpadded_multiple: usize,
-    pub valid_decoding_multiple: usize,
-}
-
-impl EncodingWrapper {
-    pub fn new(
-        encoding: Encoding,
-        valid_decoding_multiple: usize,
-        unpadded_multiple: usize,
-        alphabet: &'static [u8],
-    ) -> Self {
-        assert!(valid_decoding_multiple > 0);
-
-        assert!(unpadded_multiple > 0);
-
-        assert!(!alphabet.is_empty());
-
-        Self {
-            alphabet,
-            encoding,
-            unpadded_multiple,
-            valid_decoding_multiple,
-        }
-    }
-}
-
-pub struct PadResult {
-    pub chunk: Vec<u8>,
-    pub had_invalid_tail: bool,
-}
-
-pub trait SupportsFastDecodeAndEncode {
-    /// Returns the list of characters used by this encoding
-    fn alphabet(&self) -> &'static [u8];
-
-    fn decode_into_vec(&self, input: &[u8], output: &mut Vec<u8>) -> UResult<()>;
-
-    fn encode_to_vec_deque(&self, input: &[u8], output: &mut VecDeque<u8>) -> UResult<()>;
-
-    /// Inputs with a length that is a multiple of this number do not have padding when encoded. For instance:
-    ///
-    /// "The quick brown"
-    ///
-    /// is 15 characters (divisible by 3), so it is encoded in Base64 without padding:
-    ///
-    /// "VGhlIHF1aWNrIGJyb3du"
-    ///
-    /// While:
-    ///
-    /// "The quick brown fox"
-    ///
-    /// is 19 characters, which is not divisible by 3, so its Base64 representation has padding:
-    ///
-    /// "VGhlIHF1aWNrIGJyb3duIGZveA=="
-    ///
-    /// The encoding performed by `fast_encode` depends on this number being correct.
-    fn unpadded_multiple(&self) -> usize;
-
-    /// Data to decode must be a length that is multiple of this number
-    ///
-    /// The decoding performed by `fast_decode` depends on this number being correct.
-    fn valid_decoding_multiple(&self) -> usize;
-
-    /// Whether the decoder can flush partial chunks (multiples of `valid_decoding_multiple`)
-    /// before seeing the full input. Defaults to `false` for encodings that must consume the
-    /// entire input (e.g. base58).
-    fn supports_partial_decode(&self) -> bool {
-        false
-    }
-
-    /// Gives encoding-specific logic a chance to pad a trailing, non-empty remainder
-    /// before the final decode attempt. The default implementation opts out.
-    fn pad_remainder(&self, _remainder: &[u8]) -> Option<PadResult> {
-        None
-    }
-}
-
-impl SupportsFastDecodeAndEncode for Base58Wrapper {
-    fn alphabet(&self) -> &'static [u8] {
-        // Base58 alphabet
-        b"123456789ABCDEFGHJKLMNPQRSTUVWXYZabcdefghijkmnopqrstuvwxyz"
-    }
-
-    fn decode_into_vec(&self, input: &[u8], output: &mut Vec<u8>) -> UResult<()> {
-        if input.is_empty() {
-            return Ok(());
-        }
-
-        // Count leading zeros (will become leading 1s in base58)
-        let leading_ones = input.iter().take_while(|&&b| b == b'1').count();
-
-        // Skip leading 1s for conversion
-        let input_trimmed = &input[leading_ones..];
-        if input_trimmed.is_empty() {
-            output.resize(output.len() + leading_ones, 0);
-            return Ok(());
-        }
-
-        // Convert base58 to big integer
-        let mut num: Vec<u32> = vec![0];
-        let alphabet = self.alphabet();
-
-        for &byte in input_trimmed {
-            // Find position in alphabet
-            let digit = alphabet
-                .iter()
-                .position(|&b| b == byte)
-                .ok_or_else(|| USimpleError::new(1, "error: invalid input"))?;
-
-            // Multiply by 58 and add digit
-            let mut carry = digit as u32;
-            for n in &mut num {
-                let tmp = (*n as u64) * 58 + carry as u64;
-                *n = tmp as u32;
-                carry = (tmp >> 32) as u32;
-            }
-            if carry > 0 {
-                num.push(carry);
-            }
-        }
-
-        // Convert to bytes (little endian, then reverse)
-        let mut result = Vec::new();
-        for &n in &num {
-            result.extend_from_slice(&n.to_le_bytes());
-        }
-
-        // Remove trailing zeros and reverse to get big endian
-        while result.last() == Some(&0) && result.len() > 1 {
-            result.pop();
-        }
-        result.reverse();
-
-        // Add leading zeros for leading 1s in input
-        let mut final_result = vec![0; leading_ones];
-        final_result.extend_from_slice(&result);
-
-        output.extend_from_slice(&final_result);
-        Ok(())
-    }
-
-    fn encode_to_vec_deque(&self, input: &[u8], output: &mut VecDeque<u8>) -> UResult<()> {
-        if input.is_empty() {
-            return Ok(());
-        }
-
-        // Count leading zeros
-        let leading_zeros = input.iter().take_while(|&&b| b == 0).count();
-
-        // Skip leading zeros
-        let input_trimmed = &input[leading_zeros..];
-        if input_trimmed.is_empty() {
-            for _ in 0..leading_zeros {
-                output.push_back(b'1');
-            }
-            return Ok(());
-        }
-
-        // Convert bytes to big integer (Vec<u32> in little-endian format)
-        let mut num = Vec::with_capacity(input_trimmed.len().div_ceil(4) + 1);
-        for &byte in input_trimmed {
-            let mut carry = byte as u64;
-            for n in &mut num {
-                let tmp = (*n as u64) * 256 + carry;
-                *n = tmp as u32;
-                carry = tmp >> 32;
-            }
-            if carry > 0 {
-                num.push(carry as u32);
-            }
-        }
-
-        // Convert to base58
-        let mut result = Vec::with_capacity((input_trimmed.len() * 138 / 100) + 1);
-        let alphabet = self.alphabet();
-
-        // Optimized check: stop when all elements are zero
-        while !num.is_empty() {
-            // Check if we're done (all zeros)
-            let mut all_zero = true;
-            let mut carry = 0u64;
-
-            for n in num.iter_mut().rev() {
-                let tmp = carry * (1u64 << 32) + *n as u64;
-                *n = (tmp / 58) as u32;
-                carry = tmp % 58;
-                if *n != 0 {
-                    all_zero = false;
-                }
-            }
-
-            result.push(alphabet[carry as usize]);
-
-            if all_zero {
-                break;
-            }
-
-            // Trim trailing zeros less frequently
-            if num.len() > 1 && result.len() % 8 == 0 {
-                while num.last() == Some(&0) && num.len() > 1 {
-                    num.pop();
-                }
-            }
-        }
-
-        // Add leading 1s for leading zeros in input
-        for _ in 0..leading_zeros {
-            output.push_back(b'1');
-        }
-
-        // Add result (reversed because we built it backwards)
-        for &byte in result.iter().rev() {
-            output.push_back(byte);
-        }
-
-        Ok(())
-    }
-
-    fn unpadded_multiple(&self) -> usize {
-        // Base58 must encode the entire input as one big integer, not in chunks
-        // Use a very large value to effectively disable chunking, but avoid overflow
-        // when multiplied by ENCODE_IN_CHUNKS_OF_SIZE_MULTIPLE (1024) in base_common
-        usize::MAX / 2048
-    }
-
-    fn valid_decoding_multiple(&self) -> usize {
-        1 // Any length is valid for Base58
-    }
-}
-
-impl SupportsFastDecodeAndEncode for Z85Wrapper {
-    fn alphabet(&self) -> &'static [u8] {
-        // Z85 alphabet
-        b"0123456789abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ.-:+=^!/*?&<>()[]{}@%$#"
-    }
-
-    fn decode_into_vec(&self, input: &[u8], output: &mut Vec<u8>) -> UResult<()> {
-        if input.first() == Some(&b'#') {
-            return Err(USimpleError::new(1, "error: invalid input"));
-        }
-
-        let decode_result = match z85::decode(input) {
-            Ok(ve) => ve,
-            Err(_de) => {
-                return Err(USimpleError::new(1, "error: invalid input"));
-            }
-        };
-
-        output.extend_from_slice(&decode_result);
-
-        Ok(())
-    }
-
-    fn valid_decoding_multiple(&self) -> usize {
-        5
-    }
-
-    fn encode_to_vec_deque(&self, input: &[u8], output: &mut VecDeque<u8>) -> UResult<()> {
-        // According to the spec we should not accept inputs whose len is not a multiple of 4.
-        // However, the z85 crate implements a padded encoding and accepts such inputs. We have to manually check for them.
-        if !input.len().is_multiple_of(4) {
-            return Err(USimpleError::new(
-                1,
-                "error: invalid input (length must be multiple of 4 characters)",
-            ));
-        }
-
-        let string = z85::encode(input);
-
-        output.extend(string.as_bytes());
-
-        Ok(())
-    }
-
-    fn unpadded_multiple(&self) -> usize {
-        4
-    }
-}
-
-impl SupportsFastDecodeAndEncode for EncodingWrapper {
-    fn alphabet(&self) -> &'static [u8] {
-        self.alphabet
-    }
-
-    // Adapted from `decode` in the "data-encoding" crate
-    fn decode_into_vec(&self, input: &[u8], output: &mut Vec<u8>) -> UResult<()> {
-        let decode_len_result = match self.encoding.decode_len(input.len()) {
-            Ok(us) => us,
-            Err(_de) => {
-                return Err(USimpleError::new(1, "error: invalid input"));
-            }
-        };
-
-        let output_len = output.len();
-
-        output.resize(output_len + decode_len_result, 0);
-
-        match self.encoding.decode_mut(input, &mut (output[output_len..])) {
-            Ok(us) => {
-                // See:
-                // https://docs.rs/data-encoding/latest/data_encoding/struct.Encoding.html#method.decode_mut
-                // "Returns the length of the decoded output. This length may be smaller than the output length if the input contained padding or ignored characters. The output bytes after the returned length are not initialized and should not be read."
-                output.truncate(output_len + us);
-            }
-            Err(_de) => {
-                output.truncate(output_len);
-                return Err(USimpleError::new(1, "error: invalid input"));
-            }
-        }
-
-        Ok(())
-    }
-
-    fn valid_decoding_multiple(&self) -> usize {
-        self.valid_decoding_multiple
-    }
-
-    // Adapted from `encode_append` in the "data-encoding" crate
-    fn encode_to_vec_deque(&self, input: &[u8], output: &mut VecDeque<u8>) -> UResult<()> {
-        let output_len = output.len();
-
-        output.resize(output_len + self.encoding.encode_len(input.len()), 0);
-
-        let make_contiguous_result = output.make_contiguous();
-
-        self.encoding
-            .encode_mut(input, &mut (make_contiguous_result[output_len..]));
-
-        Ok(())
-    }
-
-    fn unpadded_multiple(&self) -> usize {
-        self.unpadded_multiple
-    }
-}
-
-pub struct Base32Wrapper {
-    inner: EncodingWrapper,
-}
-
-impl Base32Wrapper {
-    pub fn new(
-        encoding: Encoding,
-        valid_decoding_multiple: usize,
-        unpadded_multiple: usize,
-        alphabet: &'static [u8],
-    ) -> Self {
-        Self {
-            inner: EncodingWrapper::new(
-                encoding,
-                valid_decoding_multiple,
-                unpadded_multiple,
-                alphabet,
-            ),
-        }
-    }
-}
-
-impl SupportsFastDecodeAndEncode for Base32Wrapper {
-    fn alphabet(&self) -> &'static [u8] {
-        self.inner.alphabet()
-    }
-
-    fn decode_into_vec(&self, input: &[u8], output: &mut Vec<u8>) -> UResult<()> {
-        self.inner.decode_into_vec(input, output)
-    }
-
-    fn encode_to_vec_deque(&self, input: &[u8], output: &mut VecDeque<u8>) -> UResult<()> {
-        self.inner.encode_to_vec_deque(input, output)
-    }
-
-    fn unpadded_multiple(&self) -> usize {
-        self.inner.unpadded_multiple()
-    }
-
-    fn valid_decoding_multiple(&self) -> usize {
-        self.inner.valid_decoding_multiple()
-    }
-
-    fn pad_remainder(&self, remainder: &[u8]) -> Option<PadResult> {
-        if remainder.is_empty() || remainder.contains(&b'=') {
-            return None;
-        }
-
-        const VALID_REMAINDERS: [usize; 4] = [2, 4, 5, 7];
-
-        let mut len = remainder.len();
-        let mut trimmed = false;
-
-        while len > 0 && !VALID_REMAINDERS.contains(&len) {
-            len -= 1;
-            trimmed = true;
-        }
-
-        if len == 0 {
-            return None;
-        }
-
-        let mut padded = remainder[..len].to_vec();
-        let missing = self.valid_decoding_multiple() - padded.len();
-        padded.extend(std::iter::repeat_n(b'=', missing));
-
-        Some(PadResult {
-            chunk: padded,
-            had_invalid_tail: trimmed,
-        })
-    }
-
-    fn supports_partial_decode(&self) -> bool {
-        true
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use data_encoding::BASE32;
-
-    #[test]
-    fn encoding_wrapper_decode_error_preserves_existing_output() {
-        let wrapper = EncodingWrapper::new(BASE32, 8, 5, b"ABCDEFGHIJKLMNOPQRSTUVWXYZ234567");
-        let mut output = vec![b'x'];
-
-        let result = wrapper.decode_into_vec(b"!!!!", &mut output);
-
-        assert!(result.is_err());
-        assert_eq!(output, b"x");
-    }
-
-    #[test]
-    fn padded_base64_decode_error_truncates_partial_output() {
-        let wrapper = Base64SimdWrapper::new(
-            true,
-            4,
-            4,
-            b"ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",
-        );
-        let mut output = b"seed".to_vec();
-
-        let result = wrapper.decode_into_vec(b"eA==!!!!", &mut output);
-
-        assert!(result.is_err());
-        assert_eq!(output, b"seed");
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/entries.rs b/registry/native/stubs/uucore/src/lib/features/entries.rs
deleted file mode 100644
index ba7b3f58b..000000000
--- a/registry/native/stubs/uucore/src/lib/features/entries.rs
+++ /dev/null
@@ -1,536 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore (vars) Passwd cstr fnam gecos ngroups egid
-
-//! Get password/group file entry
-//!
-//! wasmVM: This module has two implementations — the original libc-based one
-//! for unix, and a WASI-compatible one using host_user FFI.
-
-// ============================================================
-// Unix implementation (original)
-// ============================================================
-#[cfg(unix)]
-mod unix_impl {
-    #[cfg(any(target_os = "freebsd", target_vendor = "apple"))]
-    use libc::time_t;
-    use libc::{c_char, c_int, gid_t, uid_t};
-    use libc::{getgrgid, getgrnam, getgroups};
-    use libc::{getpwnam, getpwuid, group, passwd};
-
-    use std::ffi::{CStr, CString};
-    use std::io::Error as IOError;
-    use std::io::ErrorKind;
-    use std::io::Result as IOResult;
-    use std::ptr;
-    use std::sync::Mutex;
-
-    unsafe extern "C" {
-        fn getgrouplist(
-            name: *const c_char,
-            gid: gid_t,
-            groups: *mut gid_t,
-            ngroups: *mut c_int,
-        ) -> c_int;
-    }
-
-    pub fn get_groups() -> IOResult<Vec<gid_t>> {
-        let mut groups = Vec::new();
-        loop {
-            let ngroups = match unsafe { getgroups(0, ptr::null_mut()) } {
-                -1 => return Err(IOError::last_os_error()),
-                0 => return Ok(Vec::new()),
-                n => n,
-            };
-            groups.resize(ngroups.try_into().unwrap(), 0);
-            let res = unsafe { getgroups(ngroups, groups.as_mut_ptr()) };
-            if res == -1 {
-                let err = IOError::last_os_error();
-                if err.raw_os_error() == Some(libc::EINVAL) {
-                    // Number of groups has increased, retry
-                } else {
-                    return Err(err);
-                }
-            } else {
-                groups.truncate(res.try_into().unwrap());
-                return Ok(groups);
-            }
-        }
-    }
-
-    #[cfg(all(unix, not(target_os = "redox"), feature = "process"))]
-    pub fn get_groups_gnu(arg_id: Option<u32>) -> IOResult<Vec<gid_t>> {
-        let groups = get_groups()?;
-        let egid = arg_id.unwrap_or_else(crate::features::process::getegid);
-        Ok(sort_groups(groups, egid))
-    }
-
-    #[cfg(all(unix, not(target_os = "redox"), feature = "process"))]
-    pub(crate) fn sort_groups(mut groups: Vec<gid_t>, egid: gid_t) -> Vec<gid_t> {
-        if let Some(index) = groups.iter().position(|&x| x == egid) {
-            groups[..=index].rotate_right(1);
-        } else {
-            groups.insert(0, egid);
-        }
-        groups
-    }
-
-    #[derive(Clone, Debug)]
-    pub struct Passwd {
-        pub name: String,
-        pub uid: uid_t,
-        pub gid: gid_t,
-        pub user_info: Option<String>,
-        pub user_shell: Option<String>,
-        pub user_dir: Option<String>,
-        #[expect(clippy::struct_field_names)]
-        pub user_passwd: Option<String>,
-        #[cfg(any(target_os = "freebsd", target_vendor = "apple"))]
-        pub user_access_class: Option<String>,
-        #[cfg(any(target_os = "freebsd", target_vendor = "apple"))]
-        #[expect(clippy::struct_field_names)]
-        pub passwd_change_time: time_t,
-        #[cfg(any(target_os = "freebsd", target_vendor = "apple"))]
-        pub expiration: time_t,
-    }
-
-    fn cstr2string(ptr: *const c_char) -> Option<String> {
-        if ptr.is_null() {
-            None
-        } else {
-            Some(unsafe { CStr::from_ptr(ptr).to_string_lossy().into_owned() })
-        }
-    }
-
-    impl Passwd {
-        unsafe fn from_raw(raw: passwd) -> Self {
-            Self {
-                name: cstr2string(raw.pw_name).expect("passwd without name"),
-                uid: raw.pw_uid,
-                gid: raw.pw_gid,
-                #[cfg(not(all(
-                    target_os = "android",
-                    any(target_arch = "x86", target_arch = "arm")
-                )))]
-                user_info: cstr2string(raw.pw_gecos),
-                #[cfg(all(target_os = "android", any(target_arch = "x86", target_arch = "arm")))]
-                user_info: None,
-                user_shell: cstr2string(raw.pw_shell),
-                user_dir: cstr2string(raw.pw_dir),
-                user_passwd: cstr2string(raw.pw_passwd),
-                #[cfg(any(target_os = "freebsd", target_vendor = "apple"))]
-                user_access_class: cstr2string(raw.pw_class),
-                #[cfg(any(target_os = "freebsd", target_vendor = "apple"))]
-                passwd_change_time: raw.pw_change,
-                #[cfg(any(target_os = "freebsd", target_vendor = "apple"))]
-                expiration: raw.pw_expire,
-            }
-        }
-
-        pub fn belongs_to(&self) -> Vec<gid_t> {
-            let mut ngroups: c_int = 8;
-            let mut ngroups_old: c_int;
-            let mut groups = vec![0; ngroups.try_into().unwrap()];
-            let name = CString::new(self.name.as_bytes()).unwrap();
-            loop {
-                ngroups_old = ngroups;
-                if unsafe {
-                    getgrouplist(
-                        name.as_ptr(),
-                        self.gid,
-                        groups.as_mut_ptr(),
-                        &raw mut ngroups,
-                    )
-                } == -1
-                {
-                    if ngroups == ngroups_old {
-                        ngroups *= 2;
-                    }
-                    groups.resize(ngroups.try_into().unwrap(), 0);
-                } else {
-                    break;
-                }
-            }
-            let ngroups = ngroups.try_into().unwrap();
-            assert!(ngroups <= groups.len());
-            groups.truncate(ngroups);
-            groups
-        }
-    }
-
-    #[derive(Clone, Debug)]
-    pub struct Group {
-        pub name: String,
-        pub gid: gid_t,
-    }
-
-    impl Group {
-        unsafe fn from_raw(raw: group) -> Self {
-            Self {
-                name: cstr2string(raw.gr_name).expect("group without name"),
-                gid: raw.gr_gid,
-            }
-        }
-    }
-
-    pub trait Locate<K> {
-        fn locate(key: K) -> IOResult<Self>
-        where
-            Self: ::std::marker::Sized;
-    }
-
-    static PW_LOCK: Mutex<()> = Mutex::new(());
-
-    macro_rules! f {
-        ($fnam:ident, $fid:ident, $t:ident, $st:ident) => {
-            impl Locate<$t> for $st {
-                fn locate(k: $t) -> IOResult<Self> {
-                    let _guard = PW_LOCK.lock();
-                    unsafe {
-                        let data = $fid(k);
-                        if !data.is_null() {
-                            Ok($st::from_raw(ptr::read(data.cast_const())))
-                        } else {
-                            Err(IOError::new(
-                                ErrorKind::NotFound,
-                                format!("No such id: {k}"),
-                            ))
-                        }
-                    }
-                }
-            }
-
-            impl<'a> Locate<&'a str> for $st {
-                fn locate(k: &'a str) -> IOResult<Self> {
-                    let _guard = PW_LOCK.lock();
-                    unsafe {
-                        let cstring = CString::new(k)?;
-                        let data = $fnam(cstring.as_ptr());
-                        if !data.is_null() {
-                            return Ok($st::from_raw(ptr::read(data.cast_const())));
-                        }
-                        if let Ok(id) = k.parse::<$t>() {
-                            let data = $fid(id);
-                            if !data.is_null() {
-                                Ok($st::from_raw(ptr::read(data.cast_const())))
-                            } else {
-                                Err(IOError::new(
-                                    ErrorKind::NotFound,
-                                    format!("No such id: {id}"),
-                                ))
-                            }
-                        } else {
-                            Err(IOError::new(ErrorKind::NotFound, format!("Not found: {k}")))
-                        }
-                    }
-                }
-            }
-        };
-    }
-
-    f!(getpwnam, getpwuid, uid_t, Passwd);
-    f!(getgrnam, getgrgid, gid_t, Group);
-
-    #[inline]
-    pub fn uid2usr(id: uid_t) -> IOResult<String> {
-        Passwd::locate(id).map(|p| p.name)
-    }
-
-    #[inline]
-    pub fn gid2grp(id: gid_t) -> IOResult<String> {
-        Group::locate(id).map(|p| p.name)
-    }
-
-    #[inline]
-    pub fn usr2uid(name: &str) -> IOResult<uid_t> {
-        Passwd::locate(name).map(|p| p.uid)
-    }
-
-    #[inline]
-    pub fn usr2gid(name: &str) -> IOResult<gid_t> {
-        Passwd::locate(name).map(|p| p.gid)
-    }
-
-    #[inline]
-    pub fn grp2gid(name: &str) -> IOResult<gid_t> {
-        Group::locate(name).map(|p| p.gid)
-    }
-}
-
-// ============================================================
-// WASI implementation (wasmVM: uses host_user FFI)
-// ============================================================
-#[cfg(target_os = "wasi")]
-mod wasi_impl {
-    use std::io::Error as IOError;
-    use std::io::ErrorKind;
-    use std::io::Result as IOResult;
-
-    /// WASI doesn't have libc uid_t/gid_t — use u32 directly.
-    #[allow(non_camel_case_types)]
-    pub type uid_t = u32;
-    #[allow(non_camel_case_types)]
-    pub type gid_t = u32;
-
-    // FFI bindings for host_user WASM import module
-    #[link(wasm_import_module = "host_user")]
-    unsafe extern "C" {
-        fn getuid(ret_uid: *mut u32) -> u32;
-        fn getgid(ret_gid: *mut u32) -> u32;
-        fn getpwuid(uid: u32, buf_ptr: *mut u8, buf_len: u32, ret_len: *mut u32) -> u32;
-    }
-
-    /// Parse a passwd string "name:passwd:uid:gid:gecos:home:shell" into fields.
-    fn parse_passwd_string(s: &str) -> Option<(String, String, u32, u32, String, String, String)> {
-        let fields: Vec<&str> = s.splitn(7, ':').collect();
-        if fields.len() < 7 {
-            return None;
-        }
-        let uid = fields[2].parse::<u32>().ok()?;
-        let gid = fields[3].parse::<u32>().ok()?;
-        Some((
-            fields[0].to_string(), // name
-            fields[1].to_string(), // passwd
-            uid,
-            gid,
-            fields[4].to_string(), // gecos
-            fields[5].to_string(), // home
-            fields[6].to_string(), // shell
-        ))
-    }
-
-    fn host_user_id(
-        op: &str,
-        read: unsafe extern "C" fn(ret_value: *mut u32) -> u32,
-    ) -> IOResult<u32> {
-        let mut value: u32 = 0;
-        let errno = unsafe { read(&mut value) };
-        if errno == 0 {
-            Ok(value)
-        } else {
-            Err(IOError::other(format!(
-                "host_user.{op} failed with errno {errno}"
-            )))
-        }
-    }
-
-    /// Call host_user.getpwuid and parse the response.
-    fn lookup_pwuid(uid: u32) -> Option<Passwd> {
-        let mut buf = [0u8; 512];
-        let mut len: u32 = 0;
-        let errno = unsafe { getpwuid(uid, buf.as_mut_ptr(), buf.len() as u32, &mut len) };
-        if errno != 0 || len == 0 {
-            return None;
-        }
-        let len = usize::try_from(len).ok()?;
-        if len > buf.len() {
-            return None;
-        }
-        let s = core::str::from_utf8(&buf[..len]).ok()?;
-        let (name, passwd, pw_uid, pw_gid, gecos, home, shell) = parse_passwd_string(s)?;
-        Some(Passwd {
-            name,
-            uid: pw_uid,
-            gid: pw_gid,
-            user_info: Some(gecos),
-            user_shell: Some(shell),
-            user_dir: Some(home),
-            user_passwd: Some(passwd),
-        })
-    }
-
-    /// Get the current real UID via host_user.
-    fn current_uid() -> IOResult<u32> {
-        host_user_id("getuid", getuid)
-    }
-
-    /// Get the current real GID via host_user.
-    fn current_gid() -> IOResult<u32> {
-        host_user_id("getgid", getgid)
-    }
-
-    pub fn get_groups() -> IOResult<Vec<gid_t>> {
-        // WASI: return just the primary group
-        Ok(vec![current_gid()?])
-    }
-
-    #[derive(Clone, Debug)]
-    pub struct Passwd {
-        pub name: String,
-        pub uid: uid_t,
-        pub gid: gid_t,
-        pub user_info: Option<String>,
-        pub user_shell: Option<String>,
-        pub user_dir: Option<String>,
-        pub user_passwd: Option<String>,
-    }
-
-    impl Passwd {
-        pub fn belongs_to(&self) -> Vec<gid_t> {
-            vec![self.gid]
-        }
-    }
-
-    #[derive(Clone, Debug)]
-    pub struct Group {
-        pub name: String,
-        pub gid: gid_t,
-    }
-
-    /// Fetch desired entry.
-    pub trait Locate<K> {
-        fn locate(key: K) -> IOResult<Self>
-        where
-            Self: ::std::marker::Sized;
-    }
-
-    // Locate by uid_t for Passwd
-    impl Locate<uid_t> for Passwd {
-        fn locate(uid: uid_t) -> IOResult<Self> {
-            lookup_pwuid(uid).ok_or_else(|| {
-                IOError::new(ErrorKind::NotFound, format!("No such id: {uid}"))
-            })
-        }
-    }
-
-    // Locate by name (str) for Passwd
-    impl<'a> Locate<&'a str> for Passwd {
-        fn locate(name: &'a str) -> IOResult<Self> {
-            // Try parsing as numeric UID first
-            if let Ok(uid) = name.parse::<u32>() {
-                return Passwd::locate(uid);
-            }
-            // Try known UIDs: 0 (root) and current uid
-            if let Some(pw) = lookup_pwuid(0) {
-                if pw.name == name {
-                    return Ok(pw);
-                }
-            }
-
-            if let Some(pw) = lookup_pwuid(current_uid()?) {
-                if pw.name == name {
-                    return Ok(pw);
-                }
-            }
-            Err(IOError::new(ErrorKind::NotFound, format!("Not found: {name}")))
-        }
-    }
-
-    // Locate by gid_t for Group
-    impl Locate<gid_t> for Group {
-        fn locate(gid: gid_t) -> IOResult<Self> {
-            // Synthetic group entries: try to derive from passwd if gid matches
-            let name = match gid {
-                0 => "root".to_string(),
-                _ => {
-                    // Try current user's passwd entry
-                    let cur_uid = current_uid()?;
-                    if let Some(pw) = lookup_pwuid(cur_uid) {
-                        if pw.gid == gid {
-                            pw.name.clone()
-                        } else {
-                            format!("group{gid}")
-                        }
-                    } else {
-                        format!("group{gid}")
-                    }
-                }
-            };
-            Ok(Group { name, gid })
-        }
-    }
-
-    // Locate by name (str) for Group
-    impl<'a> Locate<&'a str> for Group {
-        fn locate(name: &'a str) -> IOResult<Self> {
-            // Try parsing as numeric GID first
-            if let Ok(gid) = name.parse::<u32>() {
-                return Group::locate(gid);
-            }
-            // Well-known group names
-            if name == "root" || name == "wheel" {
-                return Ok(Group {
-                    name: name.to_string(),
-                    gid: 0,
-                });
-            }
-            // Try to match current user's primary group
-            let cur_uid = current_uid()?;
-            if let Some(pw) = lookup_pwuid(cur_uid) {
-                if pw.name == name {
-                    return Ok(Group {
-                        name: name.to_string(),
-                        gid: pw.gid,
-                    });
-                }
-            }
-            Err(IOError::new(
-                ErrorKind::NotFound,
-                format!("Not found: {name}"),
-            ))
-        }
-    }
-
-    #[inline]
-    pub fn uid2usr(id: uid_t) -> IOResult<String> {
-        Passwd::locate(id).map(|p| p.name)
-    }
-
-    #[inline]
-    pub fn gid2grp(id: gid_t) -> IOResult<String> {
-        Group::locate(id).map(|p| p.name)
-    }
-
-    #[inline]
-    pub fn usr2uid(name: &str) -> IOResult<uid_t> {
-        Passwd::locate(name).map(|p| p.uid)
-    }
-
-    #[inline]
-    pub fn usr2gid(name: &str) -> IOResult<gid_t> {
-        Passwd::locate(name).map(|p| p.gid)
-    }
-
-    #[inline]
-    pub fn grp2gid(name: &str) -> IOResult<gid_t> {
-        Group::locate(name).map(|p| p.gid)
-    }
-}
-
-// ============================================================
-// Re-export the appropriate implementation
-// ============================================================
-#[cfg(unix)]
-pub use unix_impl::*;
-
-#[cfg(target_os = "wasi")]
-pub use wasi_impl::*;
-
-#[cfg(test)]
-mod test {
-    use super::*;
-
-    #[cfg(unix)]
-    #[test]
-    fn test_sort_groups() {
-        assert_eq!(unix_impl::sort_groups(vec![1, 2, 3], 4), vec![4, 1, 2, 3]);
-        assert_eq!(unix_impl::sort_groups(vec![1, 2, 3], 3), vec![3, 1, 2]);
-        assert_eq!(unix_impl::sort_groups(vec![1, 2, 3], 2), vec![2, 1, 3]);
-        assert_eq!(unix_impl::sort_groups(vec![1, 2, 3], 1), vec![1, 2, 3]);
-        assert_eq!(unix_impl::sort_groups(vec![1, 2, 3], 0), vec![0, 1, 2, 3]);
-    }
-
-    #[cfg(all(unix, not(target_os = "redox"), feature = "process"))]
-    #[test]
-    fn test_entries_get_groups_gnu() {
-        if let Ok(mut groups) = get_groups() {
-            if let Some(last) = groups.pop() {
-                groups.insert(0, last);
-                assert_eq!(unix_impl::get_groups_gnu(Some(last)).unwrap(), groups);
-            }
-        }
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/extendedbigdecimal.rs b/registry/native/stubs/uucore/src/lib/features/extendedbigdecimal.rs
deleted file mode 100644
index d119da4f7..000000000
--- a/registry/native/stubs/uucore/src/lib/features/extendedbigdecimal.rs
+++ /dev/null
@@ -1,292 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// spell-checker:ignore bigdecimal extendedbigdecimal biguint
-//! An arbitrary precision float that can also represent infinity, NaN, etc.
-//!
-//! The finite values are stored as [`BigDecimal`] instances. Because
-//! the `bigdecimal` library does not represent infinity, NaN, etc., we
-//! need to represent them explicitly ourselves. The
-//! [`ExtendedBigDecimal`] enumeration does that.
-//!
-//! # Examples
-//!
-//! Addition works for [`ExtendedBigDecimal`] as it does for floats. For
-//! example, adding infinity to any finite value results in infinity:
-//!
-//! ```rust,ignore
-//! let summand1 = ExtendedBigDecimal::BigDecimal(BigDecimal::zero());
-//! let summand2 = ExtendedBigDecimal::Infinity;
-//! assert_eq!(summand1 + summand2, ExtendedBigDecimal::Infinity);
-//! ```
-use std::cmp::Ordering;
-use std::ops::Add;
-use std::ops::Neg;
-
-use bigdecimal::BigDecimal;
-use bigdecimal::num_bigint::BigUint;
-use num_traits::FromPrimitive;
-use num_traits::Signed;
-use num_traits::Zero;
-
-#[derive(Debug, Clone)]
-pub enum ExtendedBigDecimal {
-    /// Arbitrary precision floating point number.
-    BigDecimal(BigDecimal),
-
-    /// Floating point positive infinity.
-    ///
-    /// This is represented as its own enumeration member instead of as
-    /// a [`BigDecimal`] because the `bigdecimal` library does not
-    /// support infinity, see [here][0].
-    ///
-    /// [0]: https://github.com/akubera/bigdecimal-rs/issues/67
-    Infinity,
-
-    /// Floating point negative infinity.
-    ///
-    /// This is represented as its own enumeration member instead of as
-    /// a [`BigDecimal`] because the `bigdecimal` library does not
-    /// support infinity, see [here][0].
-    ///
-    /// [0]: https://github.com/akubera/bigdecimal-rs/issues/67
-    MinusInfinity,
-
-    /// Floating point negative zero.
-    ///
-    /// This is represented as its own enumeration member instead of as
-    /// a [`BigDecimal`] because the `bigdecimal` library does not
-    /// support negative zero.
-    MinusZero,
-
-    /// Floating point NaN.
-    ///
-    /// This is represented as its own enumeration member instead of as
-    /// a [`BigDecimal`] because the `bigdecimal` library does not
-    /// support NaN, see [here][0].
-    ///
-    /// [0]: https://github.com/akubera/bigdecimal-rs/issues/67
-    Nan,
-
-    /// Floating point negative NaN.
-    ///
-    /// This is represented as its own enumeration member instead of as
-    /// a [`BigDecimal`] because the `bigdecimal` library does not
-    /// support NaN, see [here][0].
-    ///
-    /// [0]: https://github.com/akubera/bigdecimal-rs/issues/67
-    MinusNan,
-}
-
-impl From<f64> for ExtendedBigDecimal {
-    fn from(val: f64) -> Self {
-        if val.is_nan() {
-            if val.is_sign_negative() {
-                Self::MinusNan
-            } else {
-                Self::Nan
-            }
-        } else if val.is_infinite() {
-            if val.is_sign_negative() {
-                Self::MinusInfinity
-            } else {
-                Self::Infinity
-            }
-        } else if val.is_zero() && val.is_sign_negative() {
-            Self::MinusZero
-        } else {
-            Self::BigDecimal(BigDecimal::from_f64(val).unwrap())
-        }
-    }
-}
-
-impl From<u8> for ExtendedBigDecimal {
-    fn from(val: u8) -> Self {
-        Self::BigDecimal(val.into())
-    }
-}
-
-impl From<u32> for ExtendedBigDecimal {
-    fn from(val: u32) -> Self {
-        Self::BigDecimal(val.into())
-    }
-}
-
-impl ExtendedBigDecimal {
-    pub fn zero() -> Self {
-        Self::BigDecimal(0.into())
-    }
-
-    pub fn one() -> Self {
-        Self::BigDecimal(1.into())
-    }
-
-    pub fn to_biguint(&self) -> Option<BigUint> {
-        match self {
-            Self::BigDecimal(big_decimal) => {
-                let (bi, scale) = big_decimal.as_bigint_and_scale();
-                if bi.is_negative() || scale > 0 || scale < -(u32::MAX as i64) {
-                    return None;
-                }
-                bi.to_biguint()
-                    .map(|bi| bi * BigUint::from(10u32).pow(-scale as u32))
-            }
-            _ => None,
-        }
-    }
-}
-
-impl Zero for ExtendedBigDecimal {
-    fn zero() -> Self {
-        Self::BigDecimal(BigDecimal::zero())
-    }
-    fn is_zero(&self) -> bool {
-        match self {
-            Self::BigDecimal(n) => n.is_zero(),
-            Self::MinusZero => true,
-            _ => false,
-        }
-    }
-}
-
-impl Default for ExtendedBigDecimal {
-    fn default() -> Self {
-        Self::zero()
-    }
-}
-
-impl Add for ExtendedBigDecimal {
-    type Output = Self;
-
-    fn add(self, other: Self) -> Self {
-        match (self, other) {
-            (Self::BigDecimal(m), Self::BigDecimal(n)) => Self::BigDecimal(m.add(n)),
-            (Self::BigDecimal(_), Self::MinusInfinity) => Self::MinusInfinity,
-            (Self::BigDecimal(_), Self::Infinity) => Self::Infinity,
-            (Self::BigDecimal(m), Self::MinusZero) => Self::BigDecimal(m),
-            (Self::Infinity, Self::BigDecimal(_)) => Self::Infinity,
-            (Self::Infinity, Self::Infinity) => Self::Infinity,
-            (Self::Infinity, Self::MinusZero) => Self::Infinity,
-            (Self::Infinity, Self::MinusInfinity) => Self::Nan,
-            (Self::MinusInfinity, Self::BigDecimal(_)) => Self::MinusInfinity,
-            (Self::MinusInfinity, Self::MinusInfinity) => Self::MinusInfinity,
-            (Self::MinusInfinity, Self::MinusZero) => Self::MinusInfinity,
-            (Self::MinusInfinity, Self::Infinity) => Self::Nan,
-            (Self::Nan, _) => Self::Nan,
-            (_, Self::Nan) => Self::Nan,
-            (Self::MinusNan, _) => Self::MinusNan,
-            (_, Self::MinusNan) => Self::MinusNan,
-            (Self::MinusZero, other) => other,
-        }
-    }
-}
-
-impl PartialEq for ExtendedBigDecimal {
-    fn eq(&self, other: &Self) -> bool {
-        match (self, other) {
-            (Self::BigDecimal(m), Self::BigDecimal(n)) => m.eq(n),
-            (Self::BigDecimal(_), Self::MinusInfinity) => false,
-            (Self::BigDecimal(_), Self::Infinity) => false,
-            (Self::BigDecimal(_), Self::MinusZero) => false,
-            (Self::Infinity, Self::BigDecimal(_)) => false,
-            (Self::Infinity, Self::Infinity) => true,
-            (Self::Infinity, Self::MinusZero) => false,
-            (Self::Infinity, Self::MinusInfinity) => false,
-            (Self::MinusInfinity, Self::BigDecimal(_)) => false,
-            (Self::MinusInfinity, Self::Infinity) => false,
-            (Self::MinusInfinity, Self::MinusZero) => false,
-            (Self::MinusInfinity, Self::MinusInfinity) => true,
-            (Self::MinusZero, Self::BigDecimal(_)) => false,
-            (Self::MinusZero, Self::Infinity) => false,
-            (Self::MinusZero, Self::MinusZero) => true,
-            (Self::MinusZero, Self::MinusInfinity) => false,
-            (Self::Nan, _) => false,
-            (Self::MinusNan, _) => false,
-            (_, Self::Nan) => false,
-            (_, Self::MinusNan) => false,
-        }
-    }
-}
-
-impl PartialOrd for ExtendedBigDecimal {
-    fn partial_cmp(&self, other: &Self) -> Option<Ordering> {
-        match (self, other) {
-            (Self::BigDecimal(m), Self::BigDecimal(n)) => m.partial_cmp(n),
-            (Self::BigDecimal(_), Self::MinusInfinity) => Some(Ordering::Greater),
-            (Self::BigDecimal(_), Self::Infinity) => Some(Ordering::Less),
-            (Self::BigDecimal(m), Self::MinusZero) => m.partial_cmp(&BigDecimal::zero()),
-            (Self::Infinity, Self::BigDecimal(_)) => Some(Ordering::Greater),
-            (Self::Infinity, Self::Infinity) => Some(Ordering::Equal),
-            (Self::Infinity, Self::MinusZero) => Some(Ordering::Greater),
-            (Self::Infinity, Self::MinusInfinity) => Some(Ordering::Greater),
-            (Self::MinusInfinity, Self::BigDecimal(_)) => Some(Ordering::Less),
-            (Self::MinusInfinity, Self::Infinity) => Some(Ordering::Less),
-            (Self::MinusInfinity, Self::MinusZero) => Some(Ordering::Less),
-            (Self::MinusInfinity, Self::MinusInfinity) => Some(Ordering::Equal),
-            (Self::MinusZero, Self::BigDecimal(n)) => BigDecimal::zero().partial_cmp(n),
-            (Self::MinusZero, Self::Infinity) => Some(Ordering::Less),
-            (Self::MinusZero, Self::MinusZero) => Some(Ordering::Equal),
-            (Self::MinusZero, Self::MinusInfinity) => Some(Ordering::Greater),
-            (Self::Nan, _) => None,
-            (Self::MinusNan, _) => None,
-            (_, Self::Nan) => None,
-            (_, Self::MinusNan) => None,
-        }
-    }
-}
-
-impl Neg for ExtendedBigDecimal {
-    type Output = Self;
-
-    fn neg(self) -> Self::Output {
-        match self {
-            Self::BigDecimal(bd) => {
-                if bd.is_zero() {
-                    Self::MinusZero
-                } else {
-                    Self::BigDecimal(bd.neg())
-                }
-            }
-            Self::MinusZero => Self::BigDecimal(BigDecimal::zero()),
-            Self::Infinity => Self::MinusInfinity,
-            Self::MinusInfinity => Self::Infinity,
-            Self::Nan => Self::MinusNan,
-            Self::MinusNan => Self::Nan,
-        }
-    }
-}
-
-#[cfg(test)]
-mod tests {
-
-    use bigdecimal::BigDecimal;
-    use num_traits::Zero;
-
-    use crate::extendedbigdecimal::ExtendedBigDecimal;
-
-    #[test]
-    fn test_addition_infinity() {
-        let summand1 = ExtendedBigDecimal::BigDecimal(BigDecimal::zero());
-        let summand2 = ExtendedBigDecimal::Infinity;
-        assert_eq!(summand1 + summand2, ExtendedBigDecimal::Infinity);
-    }
-
-    #[test]
-    fn test_addition_minus_infinity() {
-        let summand1 = ExtendedBigDecimal::BigDecimal(BigDecimal::zero());
-        let summand2 = ExtendedBigDecimal::MinusInfinity;
-        assert_eq!(summand1 + summand2, ExtendedBigDecimal::MinusInfinity);
-    }
-
-    #[test]
-    fn test_addition_nan() {
-        let summand1 = ExtendedBigDecimal::BigDecimal(BigDecimal::zero());
-        let summand2 = ExtendedBigDecimal::Nan;
-        let sum = summand1 + summand2;
-        match sum {
-            ExtendedBigDecimal::Nan => (),
-            _ => unreachable!(),
-        }
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/fast_inc.rs b/registry/native/stubs/uucore/src/lib/features/fast_inc.rs
deleted file mode 100644
index 48474344a..000000000
--- a/registry/native/stubs/uucore/src/lib/features/fast_inc.rs
+++ /dev/null
@@ -1,209 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-/// Fast increment function, operating on ASCII strings.
-///
-/// Add inc to the string val[start..end]. This operates on ASCII digits, assuming
-/// val and inc are well formed.
-///
-/// Updates `start` if we have a carry, or if inc > start.
-///
-/// We also assume that there is enough space in val to expand if start needs
-/// to be updated.
-/// ```
-/// use uucore::fast_inc::fast_inc;
-///
-/// // Start with a buffer containing "0", with one byte of head space
-/// let mut val = Vec::from(".0".as_bytes());
-/// let mut start = val.len()-1;
-/// let end = val.len();
-/// let inc = "6".as_bytes();
-/// assert_eq!(&val[start..end], "0".as_bytes());
-/// fast_inc(val.as_mut(), &mut start, end, inc);
-/// assert_eq!(&val[start..end], "6".as_bytes());
-/// fast_inc(val.as_mut(), &mut start, end, inc);
-/// assert_eq!(&val[start..end], "12".as_bytes());
-/// ```
-#[inline]
-pub fn fast_inc(val: &mut [u8], start: &mut usize, end: usize, inc: &[u8]) {
-    // To avoid a lot of casts to signed integers, we make sure to decrement pos
-    // as late as possible, so that it does not ever go negative.
-    let mut pos = end;
-    let mut carry = 0u8;
-
-    // First loop, add all digits of inc into val.
-    for inc_pos in (0..inc.len()).rev() {
-        // The decrement operation would also panic in debug mode, print a message for developer convenience.
-        debug_assert!(
-            pos > 0,
-            "Buffer overflowed, make sure you allocate val with enough headroom."
-        );
-        pos -= 1;
-
-        let mut new_val = inc[inc_pos] + carry;
-        // Be careful here, only add existing digit of val.
-        if pos >= *start {
-            new_val += val[pos] - b'0';
-        }
-        if new_val > b'9' {
-            carry = 1;
-            new_val -= 10;
-        } else {
-            carry = 0;
-        }
-        val[pos] = new_val;
-    }
-
-    // Done, now, if we have a carry, add that to the upper digits of val.
-    if carry == 0 {
-        *start = (*start).min(pos);
-        return;
-    }
-
-    fast_inc_one(val, start, pos);
-}
-
-/// Fast increment by one function, operating on ASCII strings.
-///
-/// Add 1 to the string val[start..end]. This operates on ASCII digits, assuming
-/// val is well formed.
-///
-/// Updates `start` if we have a carry, or if inc > start.
-///
-/// We also assume that there is enough space in val to expand if start needs
-/// to be updated.
-/// ```
-/// use uucore::fast_inc::fast_inc_one;
-///
-/// // Start with a buffer containing "8", with one byte of head space
-/// let mut val = Vec::from(".8".as_bytes());
-/// let mut start = val.len()-1;
-/// let end = val.len();
-/// assert_eq!(&val[start..end], "8".as_bytes());
-/// fast_inc_one(val.as_mut(), &mut start, end);
-/// assert_eq!(&val[start..end], "9".as_bytes());
-/// fast_inc_one(val.as_mut(), &mut start, end);
-/// assert_eq!(&val[start..end], "10".as_bytes());
-/// ```
-#[inline]
-pub fn fast_inc_one(val: &mut [u8], start: &mut usize, end: usize) {
-    let mut pos = end;
-
-    while pos > *start {
-        pos -= 1;
-
-        if val[pos] == b'9' {
-            // 9+1 = 10. Carry propagating, keep going.
-            val[pos] = b'0';
-        } else {
-            // Carry stopped propagating, return unchanged start.
-            val[pos] += 1;
-            return;
-        }
-    }
-
-    // The following decrement operation would also panic in debug mode, print a message for developer convenience.
-    debug_assert!(
-        *start > 0,
-        "Buffer overflowed, make sure you allocate val with enough headroom."
-    );
-    // The carry propagated so far that a new digit was added.
-    val[*start - 1] = b'1';
-    *start -= 1;
-}
-
-#[cfg(test)]
-mod tests {
-    use crate::fast_inc::fast_inc;
-    use crate::fast_inc::fast_inc_one;
-
-    #[test]
-    fn test_fast_inc_simple() {
-        let mut val = Vec::from("...0_".as_bytes());
-        let mut start: usize = 3;
-        let inc = "4".as_bytes();
-        fast_inc(val.as_mut(), &mut start, 4, inc);
-        assert_eq!(start, 3);
-        assert_eq!(val, "...4_".as_bytes());
-        fast_inc(val.as_mut(), &mut start, 4, inc);
-        assert_eq!(start, 3);
-        assert_eq!(val, "...8_".as_bytes());
-        fast_inc(val.as_mut(), &mut start, 4, inc);
-        assert_eq!(start, 2); // carried 1 more digit
-        assert_eq!(val, "..12_".as_bytes());
-
-        let mut val = Vec::from("0_".as_bytes());
-        let mut start: usize = 0;
-        let inc = "2".as_bytes();
-        fast_inc(val.as_mut(), &mut start, 1, inc);
-        assert_eq!(start, 0);
-        assert_eq!(val, "2_".as_bytes());
-        fast_inc(val.as_mut(), &mut start, 1, inc);
-        assert_eq!(start, 0);
-        assert_eq!(val, "4_".as_bytes());
-        fast_inc(val.as_mut(), &mut start, 1, inc);
-        assert_eq!(start, 0);
-        assert_eq!(val, "6_".as_bytes());
-    }
-
-    // Check that we handle increment > val correctly.
-    #[test]
-    fn test_fast_inc_large_inc() {
-        let mut val = Vec::from("...7_".as_bytes());
-        let mut start: usize = 3;
-        let inc = "543".as_bytes();
-        fast_inc(val.as_mut(), &mut start, 4, inc);
-        assert_eq!(start, 1); // carried 2 more digits
-        assert_eq!(val, ".550_".as_bytes());
-        fast_inc(val.as_mut(), &mut start, 4, inc);
-        assert_eq!(start, 0); // carried 1 more digit
-        assert_eq!(val, "1093_".as_bytes());
-    }
-
-    // Check that we handle longer carries
-    #[test]
-    fn test_fast_inc_carry() {
-        let mut val = Vec::from(".999_".as_bytes());
-        let mut start: usize = 1;
-        let inc = "1".as_bytes();
-        fast_inc(val.as_mut(), &mut start, 4, inc);
-        assert_eq!(start, 0);
-        assert_eq!(val, "1000_".as_bytes());
-
-        let mut val = Vec::from(".999_".as_bytes());
-        let mut start: usize = 1;
-        let inc = "11".as_bytes();
-        fast_inc(val.as_mut(), &mut start, 4, inc);
-        assert_eq!(start, 0);
-        assert_eq!(val, "1010_".as_bytes());
-    }
-
-    #[test]
-    fn test_fast_inc_one_simple() {
-        let mut val = Vec::from("...8_".as_bytes());
-        let mut start: usize = 3;
-        fast_inc_one(val.as_mut(), &mut start, 4);
-        assert_eq!(start, 3);
-        assert_eq!(val, "...9_".as_bytes());
-        fast_inc_one(val.as_mut(), &mut start, 4);
-        assert_eq!(start, 2); // carried 1 more digit
-        assert_eq!(val, "..10_".as_bytes());
-        fast_inc_one(val.as_mut(), &mut start, 4);
-        assert_eq!(start, 2);
-        assert_eq!(val, "..11_".as_bytes());
-
-        let mut val = Vec::from("0_".as_bytes());
-        let mut start: usize = 0;
-        fast_inc_one(val.as_mut(), &mut start, 1);
-        assert_eq!(start, 0);
-        assert_eq!(val, "1_".as_bytes());
-        fast_inc_one(val.as_mut(), &mut start, 1);
-        assert_eq!(start, 0);
-        assert_eq!(val, "2_".as_bytes());
-        fast_inc_one(val.as_mut(), &mut start, 1);
-        assert_eq!(start, 0);
-        assert_eq!(val, "3_".as_bytes());
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/format/argument.rs b/registry/native/stubs/uucore/src/lib/features/format/argument.rs
deleted file mode 100644
index b4eea0313..000000000
--- a/registry/native/stubs/uucore/src/lib/features/format/argument.rs
+++ /dev/null
@@ -1,516 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-use super::ExtendedBigDecimal;
-use crate::format::spec::ArgumentLocation;
-use crate::{
-    error::set_exit_code,
-    os_str_as_bytes,
-    parser::num_parser::{ExtendedParser, ExtendedParserError},
-    quoting_style::{QuotingStyle, locale_aware_escape_name},
-    show_error, show_warning,
-};
-use os_display::Quotable;
-use std::{
-    ffi::{OsStr, OsString},
-    num::NonZero,
-};
-
-/// An argument for formatting
-///
-/// Each of these variants is only accepted by their respective directives. For
-/// example, [`FormatArgument::Char`] requires a `%c` directive.
-///
-/// The [`FormatArgument::Unparsed`] variant contains a string that can be
-/// parsed into other types. This is used by the `printf` utility.
-#[derive(Clone, Debug, PartialEq)]
-pub enum FormatArgument {
-    Char(char),
-    String(OsString),
-    UnsignedInt(u64),
-    SignedInt(i64),
-    Float(ExtendedBigDecimal),
-    /// Special argument that gets coerced into the other variants
-    Unparsed(OsString),
-}
-
-/// A struct that holds a slice of format arguments and provides methods to access them
-#[derive(Debug, PartialEq)]
-pub struct FormatArguments<'a> {
-    args: &'a [FormatArgument],
-    next_arg_position: usize,
-    highest_arg_position: Option<usize>,
-    current_offset: usize,
-}
-
-impl<'a> FormatArguments<'a> {
-    /// Create a new FormatArguments from a slice of FormatArgument
-    pub fn new(args: &'a [FormatArgument]) -> Self {
-        Self {
-            args,
-            next_arg_position: 0,
-            highest_arg_position: None,
-            current_offset: 0,
-        }
-    }
-
-    /// Get the next argument that would be used
-    pub fn peek_arg(&self) -> Option<&'a FormatArgument> {
-        self.args.get(self.next_arg_position)
-    }
-
-    /// Check if all arguments have been consumed
-    pub fn is_exhausted(&self) -> bool {
-        self.current_offset >= self.args.len()
-    }
-
-    pub fn start_next_batch(&mut self) {
-        self.current_offset = self
-            .next_arg_position
-            .max(self.highest_arg_position.map_or(0, |x| x.saturating_add(1)));
-        self.next_arg_position = self.current_offset;
-    }
-
-    pub fn next_char(&mut self, position: ArgumentLocation) -> u8 {
-        match self.next_arg(position) {
-            Some(FormatArgument::Char(c)) => *c as u8,
-            Some(FormatArgument::Unparsed(os)) => match os_str_as_bytes(os) {
-                Ok(bytes) => bytes.first().copied().unwrap_or(b'\0'),
-                Err(_) => b'\0',
-            },
-            _ => b'\0',
-        }
-    }
-
-    pub fn next_string(&mut self, position: ArgumentLocation) -> &'a OsStr {
-        match self.next_arg(position) {
-            Some(FormatArgument::Unparsed(os) | FormatArgument::String(os)) => os,
-            _ => "".as_ref(),
-        }
-    }
-
-    pub fn next_i64(&mut self, position: ArgumentLocation) -> i64 {
-        match self.next_arg(position) {
-            Some(FormatArgument::SignedInt(n)) => *n,
-            Some(FormatArgument::Unparsed(os)) => Self::get_num::<i64>(os),
-            _ => 0,
-        }
-    }
-
-    pub fn next_u64(&mut self, position: ArgumentLocation) -> u64 {
-        match self.next_arg(position) {
-            Some(FormatArgument::UnsignedInt(n)) => *n,
-            Some(FormatArgument::Unparsed(os)) => Self::get_num::<u64>(os),
-            _ => 0,
-        }
-    }
-
-    pub fn next_extended_big_decimal(&mut self, position: ArgumentLocation) -> ExtendedBigDecimal {
-        match self.next_arg(position) {
-            Some(FormatArgument::Float(n)) => n.clone(),
-            Some(FormatArgument::Unparsed(os)) => Self::get_num::<ExtendedBigDecimal>(os),
-            _ => ExtendedBigDecimal::zero(),
-        }
-    }
-
-    // Parse an OsStr that we know to start with a '/"
-    fn parse_quote_start<T>(os: &OsStr) -> Result<T, ExtendedParserError<T>>
-    where
-        T: ExtendedParser + From<u8> + From<u32> + Default,
-    {
-        // If this fails (this can only happens on Windows), then just
-        // return NotNumeric.
-        let Ok(s) = os_str_as_bytes(os) else {
-            return Err(ExtendedParserError::NotNumeric);
-        };
-
-        let (Some((b'"', bytes)) | Some((b'\'', bytes))) = s.split_first() else {
-            // This really can't happen, the string we are given must start with '/".
-            debug_assert!(false);
-            return Err(ExtendedParserError::NotNumeric);
-        };
-
-        if bytes.is_empty() {
-            return Err(ExtendedParserError::NotNumeric);
-        }
-
-        let (val, len) = if let Some(c) = bytes
-            .utf8_chunks()
-            .next()
-            .expect("bytes should not be empty")
-            .valid()
-            .chars()
-            .next()
-        {
-            // Valid UTF-8 character, cast the codepoint to u32 then T
-            // (largest unicode codepoint is only 3 bytes, so this is safe)
-            ((c as u32).into(), c.len_utf8())
-        } else {
-            // Not a valid UTF-8 character, use the first byte
-            (bytes[0].into(), 1)
-        };
-        // Emit a warning if there are additional characters
-        if bytes.len() > len {
-            return Err(ExtendedParserError::PartialMatch(
-                val,
-                String::from_utf8_lossy(&bytes[len..]).into_owned(),
-            ));
-        }
-
-        Ok(val)
-    }
-
-    fn get_num<T>(os: &OsStr) -> T
-    where
-        T: ExtendedParser + From<u8> + From<u32> + Default,
-    {
-        let s = os.to_string_lossy();
-        let first = s.as_bytes().first().copied();
-
-        let quote_start = first == Some(b'"') || first == Some(b'\'');
-        let parsed = if quote_start {
-            // The string begins with a quote
-            Self::parse_quote_start(os)
-        } else {
-            T::extended_parse(&s)
-        };
-
-        // Get the best possible value, even if parsed was an error.
-        extract_value(parsed, &s, quote_start)
-    }
-
-    fn get_at_relative_position(&mut self, pos: NonZero<usize>) -> Option<&'a FormatArgument> {
-        let pos: usize = pos.into();
-        let pos = (pos - 1).saturating_add(self.current_offset);
-        self.highest_arg_position = Some(self.highest_arg_position.map_or(pos, |x| x.max(pos)));
-        self.args.get(pos)
-    }
-
-    fn next_arg(&mut self, position: ArgumentLocation) -> Option<&'a FormatArgument> {
-        match position {
-            ArgumentLocation::NextArgument => {
-                let arg = self.args.get(self.next_arg_position);
-                self.next_arg_position += 1;
-                arg
-            }
-            ArgumentLocation::Position(pos) => self.get_at_relative_position(pos),
-        }
-    }
-}
-
-fn extract_value<T: Default>(
-    p: Result<T, ExtendedParserError<T>>,
-    input: &str,
-    quote_start: bool,
-) -> T {
-    match p {
-        Ok(v) => v,
-        Err(e) => {
-            set_exit_code(1);
-            let input = locale_aware_escape_name(OsStr::new(input), QuotingStyle::C_NO_QUOTES);
-            match e {
-                ExtendedParserError::Overflow(v) => {
-                    show_error!("{}: Numerical result out of range", input.quote());
-                    v
-                }
-                ExtendedParserError::Underflow(v) => {
-                    show_error!("{}: Numerical result out of range", input.quote());
-                    v
-                }
-                ExtendedParserError::NotNumeric => {
-                    show_error!("{}: expected a numeric value", input.quote());
-                    Default::default()
-                }
-                ExtendedParserError::PartialMatch(v, rest) => {
-                    if quote_start {
-                        set_exit_code(0);
-                        show_warning!(
-                            "{rest}: character(s) following character constant have been ignored"
-                        );
-                    } else {
-                        show_error!("{}: value not completely converted", input.quote());
-                    }
-
-                    v
-                }
-            }
-        }
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn test_format_arguments_empty() {
-        let args = FormatArguments::new(&[]);
-        assert_eq!(None, args.peek_arg());
-        assert!(args.is_exhausted());
-    }
-
-    #[test]
-    fn test_format_arguments_single_element() {
-        let mut args = FormatArguments::new(&[FormatArgument::Char('a')]);
-        assert!(!args.is_exhausted());
-        assert_eq!(Some(&FormatArgument::Char('a')), args.peek_arg());
-        assert!(!args.is_exhausted()); // Peek shouldn't consume
-        assert_eq!(b'a', args.next_char(ArgumentLocation::NextArgument));
-        args.start_next_batch();
-        assert!(args.is_exhausted()); // After batch, exhausted with a single arg
-        assert_eq!(None, args.peek_arg());
-    }
-
-    #[test]
-    fn test_sequential_next_char() {
-        // Test with consistent sequential next_char calls
-        let mut args = FormatArguments::new(&[
-            FormatArgument::Char('z'),
-            FormatArgument::Char('y'),
-            FormatArgument::Char('x'),
-            FormatArgument::Char('w'),
-            FormatArgument::Char('v'),
-            FormatArgument::Char('u'),
-            FormatArgument::Char('t'),
-            FormatArgument::Char('s'),
-        ]);
-
-        // First batch - two sequential calls
-        assert_eq!(b'z', args.next_char(ArgumentLocation::NextArgument));
-        assert_eq!(b'y', args.next_char(ArgumentLocation::NextArgument));
-        args.start_next_batch();
-        assert!(!args.is_exhausted());
-
-        // Second batch - same pattern
-        assert_eq!(b'x', args.next_char(ArgumentLocation::NextArgument));
-        assert_eq!(b'w', args.next_char(ArgumentLocation::NextArgument));
-        args.start_next_batch();
-        assert!(!args.is_exhausted());
-
-        // Third batch - same pattern
-        assert_eq!(b'v', args.next_char(ArgumentLocation::NextArgument));
-        assert_eq!(b'u', args.next_char(ArgumentLocation::NextArgument));
-        args.start_next_batch();
-        assert!(!args.is_exhausted());
-
-        // Fourth batch - same pattern (last batch)
-        assert_eq!(b't', args.next_char(ArgumentLocation::NextArgument));
-        assert_eq!(b's', args.next_char(ArgumentLocation::NextArgument));
-        args.start_next_batch();
-        assert!(args.is_exhausted());
-    }
-
-    #[test]
-    fn test_sequential_different_methods() {
-        // Test with different method types in sequence
-        let args = [
-            FormatArgument::Char('a'),
-            FormatArgument::String("hello".into()),
-            FormatArgument::Unparsed("123".into()),
-            FormatArgument::String("world".into()),
-            FormatArgument::Char('z'),
-            FormatArgument::String("test".into()),
-        ];
-        let mut args = FormatArguments::new(&args);
-
-        // First batch - next_char followed by next_string
-        assert_eq!(b'a', args.next_char(ArgumentLocation::NextArgument));
-        assert_eq!("hello", args.next_string(ArgumentLocation::NextArgument));
-        args.start_next_batch();
-        assert!(!args.is_exhausted());
-
-        // Second batch - same pattern
-        assert_eq!(b'1', args.next_char(ArgumentLocation::NextArgument)); // First byte of 123
-        assert_eq!("world", args.next_string(ArgumentLocation::NextArgument));
-        args.start_next_batch();
-        assert!(!args.is_exhausted());
-
-        // Third batch - same pattern (last batch)
-        assert_eq!(b'z', args.next_char(ArgumentLocation::NextArgument));
-        assert_eq!("test", args.next_string(ArgumentLocation::NextArgument));
-        args.start_next_batch();
-        assert!(args.is_exhausted());
-    }
-
-    fn non_zero_pos(n: usize) -> ArgumentLocation {
-        ArgumentLocation::Position(NonZero::new(n).unwrap())
-    }
-
-    #[test]
-    fn test_position_access_pattern() {
-        // Test with consistent positional access patterns
-        let mut args = FormatArguments::new(&[
-            FormatArgument::Char('a'),
-            FormatArgument::Char('b'),
-            FormatArgument::Char('c'),
-            FormatArgument::Char('d'),
-            FormatArgument::Char('e'),
-            FormatArgument::Char('f'),
-            FormatArgument::Char('g'),
-            FormatArgument::Char('h'),
-            FormatArgument::Char('i'),
-        ]);
-
-        // First batch - positional access
-        assert_eq!(b'b', args.next_char(non_zero_pos(2))); // Position 2
-        assert_eq!(b'a', args.next_char(non_zero_pos(1))); // Position 1
-        assert_eq!(b'c', args.next_char(non_zero_pos(3))); // Position 3
-        args.start_next_batch();
-        assert!(!args.is_exhausted());
-
-        // Second batch - same positional pattern
-        assert_eq!(b'e', args.next_char(non_zero_pos(2))); // Position 2
-        assert_eq!(b'd', args.next_char(non_zero_pos(1))); // Position 1
-        assert_eq!(b'f', args.next_char(non_zero_pos(3))); // Position 3
-        args.start_next_batch();
-        assert!(!args.is_exhausted());
-
-        // Third batch - same positional pattern (last batch)
-        assert_eq!(b'h', args.next_char(non_zero_pos(2))); // Position 2
-        assert_eq!(b'g', args.next_char(non_zero_pos(1))); // Position 1
-        assert_eq!(b'i', args.next_char(non_zero_pos(3))); // Position 3
-        args.start_next_batch();
-        assert!(args.is_exhausted());
-    }
-
-    #[test]
-    fn test_mixed_access_pattern() {
-        // Test with mixed sequential and positional access
-        let mut args = FormatArguments::new(&[
-            FormatArgument::Char('a'),
-            FormatArgument::Char('b'),
-            FormatArgument::Char('c'),
-            FormatArgument::Char('d'),
-            FormatArgument::Char('e'),
-            FormatArgument::Char('f'),
-            FormatArgument::Char('g'),
-            FormatArgument::Char('h'),
-        ]);
-
-        // First batch - mix of sequential and positional
-        assert_eq!(b'a', args.next_char(ArgumentLocation::NextArgument)); // Sequential
-        assert_eq!(b'c', args.next_char(non_zero_pos(3))); // Positional
-        args.start_next_batch();
-        assert!(!args.is_exhausted());
-
-        // Second batch - same mixed pattern
-        assert_eq!(b'd', args.next_char(ArgumentLocation::NextArgument)); // Sequential
-        assert_eq!(b'f', args.next_char(non_zero_pos(3))); // Positional
-        args.start_next_batch();
-        assert!(!args.is_exhausted());
-
-        // Last batch - same mixed pattern
-        assert_eq!(b'g', args.next_char(ArgumentLocation::NextArgument)); // Sequential
-        assert_eq!(b'\0', args.next_char(non_zero_pos(3))); // Out of bounds
-        args.start_next_batch();
-        assert!(args.is_exhausted());
-    }
-
-    #[test]
-    fn test_numeric_argument_types() {
-        // Test with numeric argument types
-        let args = [
-            FormatArgument::SignedInt(10),
-            FormatArgument::UnsignedInt(20),
-            FormatArgument::Float(ExtendedBigDecimal::zero()),
-            FormatArgument::SignedInt(30),
-            FormatArgument::UnsignedInt(40),
-            FormatArgument::Float(ExtendedBigDecimal::zero()),
-        ];
-        let mut args = FormatArguments::new(&args);
-
-        // First batch - i64, u64, decimal
-        assert_eq!(10, args.next_i64(ArgumentLocation::NextArgument));
-        assert_eq!(20, args.next_u64(ArgumentLocation::NextArgument));
-        let result = args.next_extended_big_decimal(ArgumentLocation::NextArgument);
-        assert_eq!(ExtendedBigDecimal::zero(), result);
-        args.start_next_batch();
-        assert!(!args.is_exhausted());
-
-        // Second batch - same pattern
-        assert_eq!(30, args.next_i64(ArgumentLocation::NextArgument));
-        assert_eq!(40, args.next_u64(ArgumentLocation::NextArgument));
-        let result = args.next_extended_big_decimal(ArgumentLocation::NextArgument);
-        assert_eq!(ExtendedBigDecimal::zero(), result);
-        args.start_next_batch();
-        assert!(args.is_exhausted());
-    }
-
-    #[test]
-    fn test_unparsed_arguments() {
-        // Test with unparsed arguments that get coerced
-        let args = [
-            FormatArgument::Unparsed("hello".into()),
-            FormatArgument::Unparsed("123".into()),
-            FormatArgument::Unparsed("hello".into()),
-            FormatArgument::Unparsed("456".into()),
-        ];
-        let mut args = FormatArguments::new(&args);
-
-        // First batch - string, number
-        assert_eq!("hello", args.next_string(ArgumentLocation::NextArgument));
-        assert_eq!(123, args.next_i64(ArgumentLocation::NextArgument));
-        args.start_next_batch();
-        assert!(!args.is_exhausted());
-
-        // Second batch - same pattern
-        assert_eq!("hello", args.next_string(ArgumentLocation::NextArgument));
-        assert_eq!(456, args.next_i64(ArgumentLocation::NextArgument));
-        args.start_next_batch();
-        assert!(args.is_exhausted());
-    }
-
-    #[test]
-    fn test_mixed_types_with_positions() {
-        // Test with mixed types and positional access
-        let args = [
-            FormatArgument::Char('a'),
-            FormatArgument::String("test".into()),
-            FormatArgument::UnsignedInt(42),
-            FormatArgument::Char('b'),
-            FormatArgument::String("more".into()),
-            FormatArgument::UnsignedInt(99),
-        ];
-        let mut args = FormatArguments::new(&args);
-
-        // First batch - positional access of different types
-        assert_eq!(b'a', args.next_char(non_zero_pos(1)));
-        assert_eq!("test", args.next_string(non_zero_pos(2)));
-        assert_eq!(42, args.next_u64(non_zero_pos(3)));
-        args.start_next_batch();
-        assert!(!args.is_exhausted());
-
-        // Second batch - same pattern
-        assert_eq!(b'b', args.next_char(non_zero_pos(1)));
-        assert_eq!("more", args.next_string(non_zero_pos(2)));
-        assert_eq!(99, args.next_u64(non_zero_pos(3)));
-        args.start_next_batch();
-        assert!(args.is_exhausted());
-    }
-
-    #[test]
-    fn test_partial_last_batch() {
-        // Test with a partial last batch (fewer elements than batch size)
-        let mut args = FormatArguments::new(&[
-            FormatArgument::Char('a'),
-            FormatArgument::Char('b'),
-            FormatArgument::Char('c'),
-            FormatArgument::Char('d'),
-            FormatArgument::Char('e'), // Last batch has fewer elements
-        ]);
-
-        // First batch
-        assert_eq!(b'a', args.next_char(ArgumentLocation::NextArgument));
-        assert_eq!(b'c', args.next_char(non_zero_pos(3)));
-        args.start_next_batch();
-        assert!(!args.is_exhausted());
-
-        // Second batch (partial)
-        assert_eq!(b'd', args.next_char(ArgumentLocation::NextArgument));
-        assert_eq!(b'\0', args.next_char(non_zero_pos(3))); // Out of bounds
-        args.start_next_batch();
-        assert!(args.is_exhausted());
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/format/escape.rs b/registry/native/stubs/uucore/src/lib/features/format/escape.rs
deleted file mode 100644
index 2c6a0283a..000000000
--- a/registry/native/stubs/uucore/src/lib/features/format/escape.rs
+++ /dev/null
@@ -1,237 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Parsing of escape sequences
-
-use crate::format::FormatError;
-
-#[derive(Debug)]
-pub enum EscapedChar {
-    /// A single byte
-    Byte(u8),
-    /// A unicode character
-    Char(char),
-    /// A character prefixed with a backslash (i.e. an invalid escape sequence)
-    Backslash(u8),
-    /// Specifies that the string should stop (`\c`)
-    End,
-}
-
-#[derive(Clone, Copy, Default)]
-pub enum OctalParsing {
-    #[default]
-    TwoDigits = 2,
-    ThreeDigits = 3,
-}
-
-#[derive(Clone, Copy)]
-enum Base {
-    Oct(OctalParsing),
-    Hex,
-}
-
-impl Base {
-    fn as_base(self) -> u8 {
-        match self {
-            Self::Oct(_) => 8,
-            Self::Hex => 16,
-        }
-    }
-
-    fn max_digits(self) -> u8 {
-        match self {
-            Self::Oct(parsing) => parsing as u8,
-            Self::Hex => 2,
-        }
-    }
-
-    fn convert_digit(self, c: u8) -> Option<u8> {
-        match self {
-            Self::Oct(_) => {
-                if matches!(c, b'0'..=b'7') {
-                    Some(c - b'0')
-                } else {
-                    None
-                }
-            }
-            Self::Hex => match c {
-                b'0'..=b'9' => Some(c - b'0'),
-                b'A'..=b'F' => Some(c - b'A' + 10),
-                b'a'..=b'f' => Some(c - b'a' + 10),
-                _ => None,
-            },
-        }
-    }
-}
-
-/// Parse the numeric part of the `\xHHH` and `\0NNN` escape sequences
-fn parse_code(input: &mut &[u8], base: Base) -> Option<u8> {
-    // All arithmetic on `ret` needs to be wrapping, because octal input can
-    // take 3 digits, which is 9 bits, and therefore more than what fits in a
-    // `u8`. GNU just seems to wrap these values.
-    // Note that if we instead make `ret` a `u32` and use `char::from_u32` will
-    // yield incorrect results because it will interpret values larger than
-    // `u8::MAX` as unicode.
-    let [c, rest @ ..] = input else { return None };
-    let mut ret = base.convert_digit(*c)?;
-    *input = rest;
-
-    for _ in 1..base.max_digits() {
-        let [c, rest @ ..] = input else { break };
-        let Some(n) = base.convert_digit(*c) else {
-            break;
-        };
-        ret = ret.wrapping_mul(base.as_base()).wrapping_add(n);
-        *input = rest;
-    }
-
-    Some(ret)
-}
-
-// spell-checker:disable-next
-/// Parse `\uHHHH` and `\UHHHHHHHH`
-fn parse_unicode(input: &mut &[u8], digits: u8) -> Result<char, EscapeError> {
-    if let Some((new_digits, rest)) = input.split_at_checked(digits as usize) {
-        *input = rest;
-        let ret = new_digits
-            .iter()
-            .map(|c| Base::Hex.convert_digit(*c))
-            .collect::<Option<Vec<u8>>>()
-            .ok_or(EscapeError::MissingHexadecimalNumber)?
-            .iter()
-            .map(|n| *n as u32)
-            .reduce(|ret, n| ret.wrapping_mul(Base::Hex.as_base() as u32).wrapping_add(n))
-            .expect("must have multiple digits in unicode string");
-        char::from_u32(ret).ok_or_else(|| EscapeError::InvalidCharacters(new_digits.to_vec()))
-    } else {
-        Err(EscapeError::MissingHexadecimalNumber)
-    }
-}
-
-/// Represents an invalid escape sequence.
-#[derive(Debug, PartialEq)]
-pub enum EscapeError {
-    InvalidCharacters(Vec<u8>),
-    MissingHexadecimalNumber,
-}
-
-/// Parse an escape sequence, like `\n` or `\xff`, etc.
-pub fn parse_escape_code(
-    rest: &mut &[u8],
-    zero_octal_parsing: OctalParsing,
-) -> Result<EscapedChar, FormatError> {
-    if let [c, new_rest @ ..] = rest {
-        // This is for the \NNN syntax for octal sequences.
-        // Note that '0' is intentionally omitted because that
-        // would be the \0NNN syntax.
-        if let b'1'..=b'7' = c {
-            if let Some(parsed) = parse_code(rest, Base::Oct(OctalParsing::ThreeDigits)) {
-                return Ok(EscapedChar::Byte(parsed));
-            }
-        }
-
-        *rest = new_rest;
-        match c {
-            b'\\' => Ok(EscapedChar::Byte(b'\\')),
-            b'"' => Ok(EscapedChar::Byte(b'"')),
-            b'a' => Ok(EscapedChar::Byte(b'\x07')),
-            b'b' => Ok(EscapedChar::Byte(b'\x08')),
-            b'c' => Ok(EscapedChar::End),
-            b'e' => Ok(EscapedChar::Byte(b'\x1b')),
-            b'f' => Ok(EscapedChar::Byte(b'\x0c')),
-            b'n' => Ok(EscapedChar::Byte(b'\n')),
-            b'r' => Ok(EscapedChar::Byte(b'\r')),
-            b't' => Ok(EscapedChar::Byte(b'\t')),
-            b'v' => Ok(EscapedChar::Byte(b'\x0b')),
-            b'x' => {
-                if let Some(c) = parse_code(rest, Base::Hex) {
-                    Ok(EscapedChar::Byte(c))
-                } else {
-                    Err(FormatError::MissingHex)
-                }
-            }
-            b'0' => Ok(EscapedChar::Byte(
-                parse_code(rest, Base::Oct(zero_octal_parsing)).unwrap_or(b'\0'),
-            )),
-            b'u' => match parse_unicode(rest, 4) {
-                Ok(c) => Ok(EscapedChar::Char(c)),
-                Err(EscapeError::MissingHexadecimalNumber) => Err(FormatError::MissingHex),
-                Err(EscapeError::InvalidCharacters(chars)) => {
-                    Err(FormatError::InvalidCharacter('u', chars))
-                }
-            },
-            b'U' => match parse_unicode(rest, 8) {
-                Ok(c) => Ok(EscapedChar::Char(c)),
-                Err(EscapeError::MissingHexadecimalNumber) => Err(FormatError::MissingHex),
-                Err(EscapeError::InvalidCharacters(chars)) => {
-                    Err(FormatError::InvalidCharacter('U', chars))
-                }
-            },
-            c => Ok(EscapedChar::Backslash(*c)),
-        }
-    } else {
-        Ok(EscapedChar::Byte(b'\\'))
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    mod parse_unicode {
-        use super::*;
-
-        #[test]
-        fn parse_ascii() {
-            let input = b"2a";
-            assert_eq!(parse_unicode(&mut &input[..], 2), Ok('*'));
-
-            let input = b"002A";
-            assert_eq!(parse_unicode(&mut &input[..], 4), Ok('*'));
-        }
-
-        #[test]
-        fn parse_emoji_codepoint() {
-            let input = b"0001F60A";
-            assert_eq!(parse_unicode(&mut &input[..], 8), Ok('😊'));
-        }
-
-        #[test]
-        fn no_characters() {
-            let input = b"";
-            assert_eq!(
-                parse_unicode(&mut &input[..], 8),
-                Err(EscapeError::MissingHexadecimalNumber)
-            );
-        }
-
-        #[test]
-        fn incomplete_hexadecimal_number() {
-            let input = b"123";
-            assert_eq!(
-                parse_unicode(&mut &input[..], 4),
-                Err(EscapeError::MissingHexadecimalNumber)
-            );
-        }
-
-        #[test]
-        fn invalid_hex() {
-            let input = b"duck";
-            assert_eq!(
-                parse_unicode(&mut &input[..], 4),
-                Err(EscapeError::MissingHexadecimalNumber)
-            );
-        }
-
-        #[test]
-        fn surrogate_code_point() {
-            let input = b"d800";
-            assert_eq!(
-                parse_unicode(&mut &input[..], 4),
-                Err(EscapeError::InvalidCharacters(Vec::from(b"d800")))
-            );
-        }
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/format/human.rs b/registry/native/stubs/uucore/src/lib/features/format/human.rs
deleted file mode 100644
index 7777103b9..000000000
--- a/registry/native/stubs/uucore/src/lib/features/format/human.rs
+++ /dev/null
@@ -1,65 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore gnulibs sfmt
-
-//! `human`-size formatting
-//!
-//! Format sizes like gnulibs human_readable() would
-
-use unit_prefix::NumberPrefix;
-
-#[derive(Copy, Clone, PartialEq)]
-pub enum SizeFormat {
-    Bytes,
-    Binary,  // Powers of 1024, --human-readable, -h
-    Decimal, // Powers of 1000, --si
-}
-
-/// There are a few peculiarities to how GNU formats the sizes:
-/// 1. One decimal place is given if and only if the size is smaller than 10
-/// 2. It rounds sizes up.
-/// 3. The human-readable format uses powers for 1024, but does not display the "i"
-///    that is commonly used to denote Kibi, Mebi, etc.
-/// 4. Kibi and Kilo are denoted differently ("k" and "K", respectively)
-fn format_prefixed(prefixed: &NumberPrefix<f64>) -> String {
-    match prefixed {
-        NumberPrefix::Standalone(bytes) => bytes.to_string(),
-        NumberPrefix::Prefixed(prefix, bytes) => {
-            // Remove the "i" from "Ki", "Mi", etc. if present
-            let prefix_str = prefix.symbol().trim_end_matches('i');
-
-            // Check whether we get more than 10 if we round up to the first decimal
-            // because we want do display 9.81 as "9.9", not as "10".
-            if (10.0 * bytes).ceil() >= 100.0 {
-                format!("{:.0}{prefix_str}", bytes.ceil())
-            } else {
-                format!("{:.1}{prefix_str}", (10.0 * bytes).ceil() / 10.0)
-            }
-        }
-    }
-}
-
-pub fn human_readable(size: u64, sfmt: SizeFormat) -> String {
-    match sfmt {
-        SizeFormat::Binary => format_prefixed(&NumberPrefix::binary(size as f64)),
-        SizeFormat::Decimal => format_prefixed(&NumberPrefix::decimal(size as f64)),
-        SizeFormat::Bytes => size.to_string(),
-    }
-}
-
-#[cfg(test)]
-#[test]
-fn test_human_readable() {
-    let test_cases = [
-        (133_456_345, SizeFormat::Binary, "128M"),
-        (12 * 1024 * 1024, SizeFormat::Binary, "12M"),
-        (8500, SizeFormat::Binary, "8.4K"),
-    ];
-
-    for &(size, sfmt, expected_str) in &test_cases {
-        assert_eq!(human_readable(size, sfmt), expected_str);
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/format/mod.rs b/registry/native/stubs/uucore/src/lib/features/format/mod.rs
deleted file mode 100644
index 66e4d8bde..000000000
--- a/registry/native/stubs/uucore/src/lib/features/format/mod.rs
+++ /dev/null
@@ -1,415 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// spell-checker:ignore extendedbigdecimal
-
-//! `printf`-style formatting
-//!
-//! Rust has excellent formatting capabilities, but the coreutils require very
-//! specific formatting that needs to work exactly like the GNU utilities.
-//! Naturally, the GNU behavior is based on the C `printf` functionality.
-//!
-//! Additionally, we need support for escape sequences for the `printf` utility.
-//!
-//! The [`printf`] and [`sprintf`] functions closely match the behavior of the
-//! corresponding C functions: the former renders a formatted string
-//! to stdout, the latter renders to a new [`String`] object.
-//!
-//! There are three kinds of parsing that we might want to do:
-//!
-//!  1. Parse only `printf` directives (for e.g. `seq`, `dd`)
-//!  2. Parse only escape sequences (for e.g. `echo`)
-//!  3. Parse both `printf` specifiers and escape sequences (for e.g. `printf`)
-//!
-//! This module aims to combine all three use cases. An iterator parsing each
-//! of these cases is provided by [`parse_spec_only`], [`parse_escape_only`]
-//! and [`parse_spec_and_escape`], respectively.
-//!
-//! There is a special [`Format`] type, which can be used to parse a format
-//! string containing exactly one directive and does not use any `*` in that
-//! directive. This format can be printed in a type-safe manner without failing
-//! (modulo IO errors).
-
-mod argument;
-mod escape;
-pub mod human;
-pub mod num_format;
-mod spec;
-
-pub use self::escape::{EscapedChar, OctalParsing};
-use crate::extendedbigdecimal::ExtendedBigDecimal;
-pub use argument::{FormatArgument, FormatArguments};
-
-use self::{escape::parse_escape_code, num_format::Formatter};
-use crate::{NonUtf8OsStrError, error::UError};
-pub use spec::Spec;
-use std::{
-    error::Error,
-    fmt::Display,
-    io::{Write, stdout},
-    marker::PhantomData,
-    ops::ControlFlow,
-};
-
-use os_display::Quotable;
-
-#[derive(Debug)]
-pub enum FormatError {
-    SpecError(Vec<u8>),
-    IoError(std::io::Error),
-    NoMoreArguments,
-    InvalidArgument(FormatArgument),
-    TooManySpecs(Vec<u8>),
-    NeedAtLeastOneSpec(Vec<u8>),
-    WrongSpecType,
-    InvalidPrecision(String),
-    /// The format specifier ends with a %, as in `%f%`.
-    EndsWithPercent(Vec<u8>),
-    /// The escape sequence `\x` appears without a literal hexadecimal value.
-    MissingHex,
-    /// The hexadecimal characters represent a code point that cannot represent a
-    /// Unicode character (e.g., a surrogate code point)
-    InvalidCharacter(char, Vec<u8>),
-    InvalidEncoding(NonUtf8OsStrError),
-}
-
-impl Error for FormatError {}
-impl UError for FormatError {}
-
-impl From<std::io::Error> for FormatError {
-    fn from(value: std::io::Error) -> Self {
-        Self::IoError(value)
-    }
-}
-
-impl From<NonUtf8OsStrError> for FormatError {
-    fn from(value: NonUtf8OsStrError) -> Self {
-        Self::InvalidEncoding(value)
-    }
-}
-
-impl Display for FormatError {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        match self {
-            Self::SpecError(s) => write!(
-                f,
-                "%{}: invalid conversion specification",
-                String::from_utf8_lossy(s)
-            ),
-            Self::TooManySpecs(s) => write!(
-                f,
-                "format '{}' has too many % directives",
-                String::from_utf8_lossy(s)
-            ),
-            Self::NeedAtLeastOneSpec(s) => write!(
-                f,
-                "format '{}' has no % directive",
-                String::from_utf8_lossy(s)
-            ),
-            Self::EndsWithPercent(s) => {
-                write!(f, "format {} ends in %", String::from_utf8_lossy(s).quote())
-            }
-            Self::InvalidPrecision(precision) => write!(f, "invalid precision: '{precision}'"),
-            // TODO: Error message below needs some work
-            Self::WrongSpecType => write!(f, "wrong % directive type was given"),
-            Self::IoError(e) => write!(f, "write error: {e}"),
-            Self::NoMoreArguments => write!(f, "no more arguments"),
-            Self::InvalidArgument(_) => write!(f, "invalid argument"),
-            Self::MissingHex => write!(f, "missing hexadecimal number in escape"),
-            Self::InvalidCharacter(escape_char, digits) => write!(
-                f,
-                "invalid universal character name \\{escape_char}{}",
-                String::from_utf8_lossy(digits)
-            ),
-            Self::InvalidEncoding(no) => no.fmt(f),
-        }
-    }
-}
-
-/// Maximum width for formatting to prevent memory allocation panics.
-/// Rust's formatter will panic when trying to allocate memory for very large widths.
-/// This limit is somewhat arbitrary but should be well above any practical use case
-/// while still preventing formatter panics.
-const MAX_FORMAT_WIDTH: usize = 1_000_000;
-
-/// Check if a width is too large for formatting.
-/// Returns an error if the width exceeds MAX_FORMAT_WIDTH.
-fn check_width(width: usize) -> std::io::Result<()> {
-    if width > MAX_FORMAT_WIDTH {
-        Err(std::io::Error::new(
-            std::io::ErrorKind::OutOfMemory,
-            "formatting width too large",
-        ))
-    } else {
-        Ok(())
-    }
-}
-
-/// A single item to format
-pub enum FormatItem<C: FormatChar> {
-    /// A format specifier
-    Spec(Spec),
-    /// A single character
-    Char(C),
-}
-
-pub trait FormatChar {
-    fn write(&self, writer: impl Write) -> std::io::Result<ControlFlow<()>>;
-}
-
-impl FormatChar for u8 {
-    fn write(&self, mut writer: impl Write) -> std::io::Result<ControlFlow<()>> {
-        writer.write_all(&[*self])?;
-        Ok(ControlFlow::Continue(()))
-    }
-}
-
-impl FormatChar for EscapedChar {
-    fn write(&self, mut writer: impl Write) -> std::io::Result<ControlFlow<()>> {
-        match self {
-            Self::Byte(c) => {
-                writer.write_all(&[*c])?;
-            }
-            Self::Char(c) => {
-                write!(writer, "{c}")?;
-            }
-            Self::Backslash(c) => {
-                writer.write_all(&[b'\\', *c])?;
-            }
-            Self::End => return Ok(ControlFlow::Break(())),
-        }
-        Ok(ControlFlow::Continue(()))
-    }
-}
-
-impl<C: FormatChar> FormatItem<C> {
-    pub fn write(
-        &self,
-        writer: impl Write,
-        args: &mut FormatArguments,
-    ) -> Result<ControlFlow<()>, FormatError> {
-        match self {
-            Self::Spec(spec) => spec.write(writer, args)?,
-            Self::Char(c) => return c.write(writer).map_err(FormatError::IoError),
-        }
-        Ok(ControlFlow::Continue(()))
-    }
-}
-
-/// Parse a format string containing % directives and escape sequences
-pub fn parse_spec_and_escape(
-    fmt: &[u8],
-) -> impl Iterator<Item = Result<FormatItem<EscapedChar>, FormatError>> + '_ {
-    let mut current = fmt;
-    std::iter::from_fn(move || match current {
-        [] => None,
-        [b'%', b'%', rest @ ..] => {
-            current = rest;
-            Some(Ok(FormatItem::Char(EscapedChar::Byte(b'%'))))
-        }
-        [b'%', rest @ ..] => {
-            current = rest;
-            let spec = match Spec::parse(&mut current) {
-                Ok(spec) => spec,
-                Err(slice) => return Some(Err(FormatError::SpecError(slice.to_vec()))),
-            };
-            Some(Ok(FormatItem::Spec(spec)))
-        }
-        [b'\\', rest @ ..] => {
-            current = rest;
-            Some(parse_escape_code(&mut current, OctalParsing::default()).map(FormatItem::Char))
-        }
-        [c, rest @ ..] => {
-            current = rest;
-            Some(Ok(FormatItem::Char(EscapedChar::Byte(*c))))
-        }
-    })
-}
-
-/// Parse a format string containing % directives
-pub fn parse_spec_only(
-    fmt: &[u8],
-) -> impl Iterator<Item = Result<FormatItem<u8>, FormatError>> + '_ {
-    let mut current = fmt;
-    std::iter::from_fn(move || match current {
-        [] => None,
-        [b'%'] => Some(Err(FormatError::EndsWithPercent(fmt.to_vec()))),
-        [b'%', b'%', rest @ ..] => {
-            current = rest;
-            Some(Ok(FormatItem::Char(b'%')))
-        }
-        [b'%', rest @ ..] => {
-            current = rest;
-            let spec = match Spec::parse(&mut current) {
-                Ok(spec) => spec,
-                Err(slice) => return Some(Err(FormatError::SpecError(slice.to_vec()))),
-            };
-            Some(Ok(FormatItem::Spec(spec)))
-        }
-        [c, rest @ ..] => {
-            current = rest;
-            Some(Ok(FormatItem::Char(*c)))
-        }
-    })
-}
-
-/// Parse a format string containing escape sequences
-pub fn parse_escape_only(
-    fmt: &[u8],
-    zero_octal_parsing: OctalParsing,
-) -> impl Iterator<Item = EscapedChar> + '_ {
-    let mut current = fmt;
-    std::iter::from_fn(move || match current {
-        [] => None,
-        [b'\\', rest @ ..] => {
-            current = rest;
-            Some(
-                parse_escape_code(&mut current, zero_octal_parsing)
-                    .unwrap_or(EscapedChar::Backslash(b'x')),
-            )
-        }
-        [c, rest @ ..] => {
-            current = rest;
-            Some(EscapedChar::Byte(*c))
-        }
-    })
-}
-
-/// Write a formatted string to stdout.
-///
-/// `format_string` contains the template and `args` contains the
-/// arguments to render into the template.
-///
-/// See also [`sprintf`], which creates a new formatted [`String`].
-///
-/// # Examples
-///
-/// ```rust
-/// use uucore::format::{printf, FormatArgument};
-///
-/// printf("hello %s", &[FormatArgument::String("world".into())]).unwrap();
-/// // prints "hello world"
-/// ```
-pub fn printf<'a>(
-    format_string: impl AsRef<[u8]>,
-    arguments: impl IntoIterator<Item = &'a FormatArgument>,
-) -> Result<(), FormatError> {
-    printf_writer(stdout(), format_string, arguments)
-}
-
-fn printf_writer<'a>(
-    mut writer: impl Write,
-    format_string: impl AsRef<[u8]>,
-    args: impl IntoIterator<Item = &'a FormatArgument>,
-) -> Result<(), FormatError> {
-    let args = args.into_iter().cloned().collect::<Vec<_>>();
-    let mut args = FormatArguments::new(&args);
-    for item in parse_spec_only(format_string.as_ref()) {
-        if item?.write(&mut writer, &mut args)?.is_break() {
-            break;
-        }
-    }
-    Ok(())
-}
-
-/// Create a new formatted string.
-///
-/// `format_string` contains the template and `args` contains the
-/// arguments to render into the template.
-///
-/// See also [`printf`], which prints to stdout.
-///
-/// # Examples
-///
-/// ```rust
-/// use uucore::format::{sprintf, FormatArgument};
-///
-/// let s = sprintf("hello %s", &[FormatArgument::String("world".into())]).unwrap();
-/// let s = std::str::from_utf8(&s).unwrap();
-/// assert_eq!(s, "hello world");
-/// ```
-pub fn sprintf<'a>(
-    format_string: impl AsRef<[u8]>,
-    arguments: impl IntoIterator<Item = &'a FormatArgument>,
-) -> Result<Vec<u8>, FormatError> {
-    let mut writer = Vec::new();
-    printf_writer(&mut writer, format_string, arguments)?;
-    Ok(writer)
-}
-
-/// A format for a single numerical value of type T
-///
-/// This is used by `seq` and `csplit`. It can be constructed with [`Format::from_formatter`]
-/// or [`Format::parse`] and can write a value with [`Format::fmt`].
-///
-/// [`Format::parse`] can only accept a single specification without any asterisk parameters.
-/// If it does get more specifications, it will return an error.
-pub struct Format<F: Formatter<T>, T> {
-    prefix: Vec<u8>,
-    suffix: Vec<u8>,
-    formatter: F,
-    _marker: PhantomData<T>,
-}
-
-impl<F: Formatter<T>, T> Format<F, T> {
-    pub fn from_formatter(formatter: F) -> Self {
-        Self {
-            prefix: Vec::<u8>::new(),
-            suffix: Vec::<u8>::new(),
-            formatter,
-            _marker: PhantomData,
-        }
-    }
-
-    pub fn parse(format_string: impl AsRef<[u8]>) -> Result<Self, FormatError> {
-        let mut iter = parse_spec_only(format_string.as_ref());
-
-        let mut prefix = Vec::new();
-        let mut spec = None;
-        for item in &mut iter {
-            match item? {
-                FormatItem::Spec(s) => {
-                    spec = Some(s);
-                    break;
-                }
-                FormatItem::Char(c) => prefix.push(c),
-            }
-        }
-
-        let Some(spec) = spec else {
-            return Err(FormatError::NeedAtLeastOneSpec(
-                format_string.as_ref().to_vec(),
-            ));
-        };
-
-        let formatter = F::try_from_spec(spec)?;
-
-        let mut suffix = Vec::new();
-        for item in &mut iter {
-            match item {
-                // If the `format_string` is of the form `%f%f` or
-                // `%f%`, then return an error.
-                Ok(FormatItem::Spec(_)) | Err(FormatError::EndsWithPercent(_)) => {
-                    return Err(FormatError::TooManySpecs(format_string.as_ref().to_vec()));
-                }
-                Ok(FormatItem::Char(c)) => suffix.push(c),
-                Err(e) => return Err(e),
-            }
-        }
-
-        Ok(Self {
-            prefix,
-            suffix,
-            formatter,
-            _marker: PhantomData,
-        })
-    }
-
-    pub fn fmt(&self, mut w: impl Write, f: T) -> std::io::Result<()> {
-        w.write_all(&self.prefix)?;
-        self.formatter.fmt(&mut w, f)?;
-        w.write_all(&self.suffix)?;
-        Ok(())
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/format/num_format.rs b/registry/native/stubs/uucore/src/lib/features/format/num_format.rs
deleted file mode 100644
index acbe06340..000000000
--- a/registry/native/stubs/uucore/src/lib/features/format/num_format.rs
+++ /dev/null
@@ -1,1814 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// spell-checker:ignore bigdecimal prec cppreference
-//! Utilities for formatting numbers in various formats
-
-use bigdecimal::num_bigint::ToBigInt;
-use bigdecimal::BigDecimal;
-use num_traits::Signed;
-use num_traits::Zero;
-use std::cmp::min;
-use std::io::Write;
-
-use super::{
-    spec::{CanAsterisk, Spec},
-    ExtendedBigDecimal, FormatError,
-};
-
-pub trait Formatter<T> {
-    fn fmt(&self, writer: impl Write, x: T) -> std::io::Result<()>;
-    fn try_from_spec(s: Spec) -> Result<Self, FormatError>
-    where
-        Self: Sized;
-}
-
-#[derive(Clone, Copy, Debug)]
-pub enum UnsignedIntVariant {
-    Decimal,
-    Octal(Prefix),
-    Hexadecimal(Case, Prefix),
-}
-
-#[derive(Clone, Copy, Debug)]
-pub enum FloatVariant {
-    Decimal,
-    Scientific,
-    Shortest,
-    Hexadecimal,
-}
-
-#[derive(Clone, Copy, Debug, PartialEq, Eq)]
-pub enum Case {
-    Lowercase,
-    Uppercase,
-}
-
-#[derive(Clone, Copy, Debug, PartialEq, Eq)]
-pub enum Prefix {
-    No,
-    Yes,
-}
-
-#[derive(Clone, Copy, Debug, PartialEq, Eq)]
-pub enum ForceDecimal {
-    No,
-    Yes,
-}
-
-#[derive(Clone, Copy, Debug)]
-pub enum PositiveSign {
-    None,
-    Plus,
-    Space,
-}
-
-#[derive(Clone, Copy, Debug, PartialEq, Eq)]
-pub enum NumberAlignment {
-    Left,
-    RightSpace,
-    RightZero,
-}
-
-pub struct SignedInt {
-    pub width: usize,
-    pub precision: usize,
-    pub positive_sign: PositiveSign,
-    pub alignment: NumberAlignment,
-}
-
-impl Formatter<i64> for SignedInt {
-    fn fmt(&self, writer: impl Write, x: i64) -> std::io::Result<()> {
-        // -i64::MIN is actually 1 larger than i64::MAX, so we need to cast to i128 first.
-        let abs = (x as i128).abs();
-        let raw = abs.to_string();
-        let sign_indicator = get_sign_indicator(self.positive_sign, x.is_negative());
-        checked_format_size(
-            self.precision
-                .max(raw.len())
-                .checked_add(sign_indicator.len()),
-        )?;
-
-        let s = if self.precision > 0 {
-            format!("{abs:0>width$}", width = self.precision)
-        } else {
-            raw
-        };
-
-        write_output(writer, sign_indicator, s, self.width, self.alignment)
-    }
-
-    fn try_from_spec(s: Spec) -> Result<Self, FormatError> {
-        let Spec::SignedInt {
-            width,
-            precision,
-            positive_sign,
-            alignment,
-            position: _position,
-        } = s
-        else {
-            return Err(FormatError::WrongSpecType);
-        };
-
-        let width = match width {
-            Some(CanAsterisk::Fixed(x)) => x,
-            None => 0,
-            Some(CanAsterisk::Asterisk(_)) => return Err(FormatError::WrongSpecType),
-        };
-
-        let precision = match precision {
-            Some(CanAsterisk::Fixed(x)) => x,
-            None => 0,
-            Some(CanAsterisk::Asterisk(_)) => return Err(FormatError::WrongSpecType),
-        };
-
-        Ok(Self {
-            width,
-            precision,
-            positive_sign,
-            alignment,
-        })
-    }
-}
-
-pub struct UnsignedInt {
-    pub variant: UnsignedIntVariant,
-    pub width: usize,
-    pub precision: usize,
-    pub alignment: NumberAlignment,
-}
-
-impl Formatter<u64> for UnsignedInt {
-    fn fmt(&self, writer: impl Write, x: u64) -> std::io::Result<()> {
-        let mut s = match self.variant {
-            UnsignedIntVariant::Decimal => format!("{x}"),
-            UnsignedIntVariant::Octal(_) => format!("{x:o}"),
-            UnsignedIntVariant::Hexadecimal(case, _) => match case {
-                Case::Lowercase => format!("{x:x}"),
-                Case::Uppercase => format!("{x:X}"),
-            },
-        };
-
-        // Zeroes do not get a prefix. An octal value does also not get a
-        // prefix if the padded value does not start with a zero.
-        let prefix = match (x, self.variant) {
-            (1.., UnsignedIntVariant::Hexadecimal(Case::Lowercase, Prefix::Yes)) => "0x",
-            (1.., UnsignedIntVariant::Hexadecimal(Case::Uppercase, Prefix::Yes)) => "0X",
-            (1.., UnsignedIntVariant::Octal(Prefix::Yes)) if s.len() >= self.precision => "0",
-            _ => "",
-        };
-
-        checked_format_size(self.precision.max(s.len()).checked_add(prefix.len()))?;
-        s = format!("{prefix}{s:0>width$}", width = self.precision);
-        write_output(writer, String::new(), s, self.width, self.alignment)
-    }
-
-    fn try_from_spec(s: Spec) -> Result<Self, FormatError> {
-        // A signed int spec might be mapped to an unsigned int spec if no sign is specified
-        let s = if let Spec::SignedInt {
-            width,
-            precision,
-            positive_sign: PositiveSign::None,
-            alignment,
-            position,
-        } = s
-        {
-            Spec::UnsignedInt {
-                variant: UnsignedIntVariant::Decimal,
-                width,
-                precision,
-                alignment,
-                position,
-            }
-        } else {
-            s
-        };
-
-        let Spec::UnsignedInt {
-            variant,
-            width,
-            precision,
-            alignment,
-            position: _position,
-        } = s
-        else {
-            return Err(FormatError::WrongSpecType);
-        };
-
-        let width = match width {
-            Some(CanAsterisk::Fixed(x)) => x,
-            None => 0,
-            Some(CanAsterisk::Asterisk(_)) => return Err(FormatError::WrongSpecType),
-        };
-
-        let precision = match precision {
-            Some(CanAsterisk::Fixed(x)) => x,
-            None => 0,
-            Some(CanAsterisk::Asterisk(_)) => return Err(FormatError::WrongSpecType),
-        };
-
-        Ok(Self {
-            variant,
-            width,
-            precision,
-            alignment,
-        })
-    }
-}
-
-pub struct Float {
-    pub variant: FloatVariant,
-    pub case: Case,
-    pub force_decimal: ForceDecimal,
-    pub width: usize,
-    pub positive_sign: PositiveSign,
-    pub alignment: NumberAlignment,
-    // For float, the default precision depends on the format, usually 6,
-    // but something architecture-specific for %a. Set this to None to
-    // use the default.
-    pub precision: Option<usize>,
-}
-
-impl Default for Float {
-    fn default() -> Self {
-        Self {
-            variant: FloatVariant::Decimal,
-            case: Case::Lowercase,
-            force_decimal: ForceDecimal::No,
-            width: 0,
-            positive_sign: PositiveSign::None,
-            alignment: NumberAlignment::Left,
-            precision: None,
-        }
-    }
-}
-
-impl Formatter<&ExtendedBigDecimal> for Float {
-    fn fmt(&self, writer: impl Write, e: &ExtendedBigDecimal) -> std::io::Result<()> {
-        check_float_bounds(e, self.variant, self.precision, self.force_decimal)?;
-
-        /* TODO: Might be nice to implement Signed trait for ExtendedBigDecimal (for abs)
-         * at some point, but that requires implementing a _lot_ of traits.
-         * Note that "negative" would be the output of "is_sign_negative" on a f64:
-         * it returns true on `-0.0`.
-         */
-        let (abs, negative) = match e {
-            ExtendedBigDecimal::BigDecimal(bd) => {
-                (ExtendedBigDecimal::BigDecimal(bd.abs()), bd.is_negative())
-            }
-            ExtendedBigDecimal::MinusZero => (ExtendedBigDecimal::zero(), true),
-            ExtendedBigDecimal::Infinity => (ExtendedBigDecimal::Infinity, false),
-            ExtendedBigDecimal::MinusInfinity => (ExtendedBigDecimal::Infinity, true),
-            ExtendedBigDecimal::Nan => (ExtendedBigDecimal::Nan, false),
-            ExtendedBigDecimal::MinusNan => (ExtendedBigDecimal::Nan, true),
-        };
-
-        let mut alignment = self.alignment;
-
-        let s = if let ExtendedBigDecimal::BigDecimal(bd) = abs {
-            match self.variant {
-                FloatVariant::Decimal => {
-                    format_float_decimal(&bd, self.precision, self.force_decimal)
-                }
-                FloatVariant::Scientific => {
-                    format_float_scientific(&bd, self.precision, self.case, self.force_decimal)
-                }
-                FloatVariant::Shortest => {
-                    format_float_shortest(&bd, self.precision, self.case, self.force_decimal)
-                }
-                FloatVariant::Hexadecimal => {
-                    format_float_hexadecimal(&bd, self.precision, self.case, self.force_decimal)
-                }
-            }
-        } else {
-            // Pad non-finite numbers with spaces, not zeros.
-            if alignment == NumberAlignment::RightZero {
-                alignment = NumberAlignment::RightSpace;
-            }
-            format_float_non_finite(&abs, self.case)
-        };
-        let sign_indicator = get_sign_indicator(self.positive_sign, negative);
-
-        write_output(writer, sign_indicator, s, self.width, alignment)
-    }
-
-    fn try_from_spec(s: Spec) -> Result<Self, FormatError>
-    where
-        Self: Sized,
-    {
-        let Spec::Float {
-            variant,
-            case,
-            force_decimal,
-            width,
-            positive_sign,
-            alignment,
-            precision,
-            position: _position,
-        } = s
-        else {
-            return Err(FormatError::WrongSpecType);
-        };
-
-        let width = match width {
-            Some(CanAsterisk::Fixed(x)) => x,
-            None => 0,
-            Some(CanAsterisk::Asterisk(_)) => return Err(FormatError::WrongSpecType),
-        };
-
-        let precision = match precision {
-            Some(CanAsterisk::Fixed(x)) => Some(x),
-            None => None,
-            Some(CanAsterisk::Asterisk(_)) => return Err(FormatError::WrongSpecType),
-        };
-
-        Ok(Self {
-            variant,
-            case,
-            force_decimal,
-            width,
-            positive_sign,
-            alignment,
-            precision,
-        })
-    }
-}
-
-fn check_precision(precision: usize) -> std::io::Result<()> {
-    super::check_width(precision)
-}
-
-fn checked_format_size(size: Option<usize>) -> std::io::Result<()> {
-    super::check_width(size.unwrap_or(usize::MAX))
-}
-
-fn check_float_bounds(
-    e: &ExtendedBigDecimal,
-    variant: FloatVariant,
-    precision: Option<usize>,
-    force_decimal: ForceDecimal,
-) -> std::io::Result<()> {
-    let ExtendedBigDecimal::BigDecimal(bd) = e else {
-        return Ok(());
-    };
-
-    let Some(precision) = precision else {
-        return match variant {
-            FloatVariant::Decimal => check_decimal_float_size(bd, 6, force_decimal),
-            FloatVariant::Hexadecimal => check_hexadecimal_float_size(bd, 15),
-            FloatVariant::Scientific => check_scientific_float_size(bd, 6, force_decimal),
-            FloatVariant::Shortest => check_shortest_float_size(bd, 6, force_decimal),
-        };
-    };
-
-    if bd.is_zero()
-        && matches!(variant, FloatVariant::Shortest)
-        && force_decimal == ForceDecimal::No
-    {
-        return Ok(());
-    }
-
-    check_precision(precision)?;
-    match variant {
-        FloatVariant::Decimal => {
-            check_decimal_float_size(bd, precision, force_decimal)?;
-        }
-        FloatVariant::Scientific => {
-            check_scientific_float_size(bd, precision, force_decimal)?;
-        }
-        FloatVariant::Shortest => {
-            check_shortest_float_size(bd, precision.max(1), force_decimal)?;
-        }
-        FloatVariant::Hexadecimal => {
-            check_hexadecimal_float_size(bd, precision)?;
-        }
-    }
-
-    Ok(())
-}
-
-fn checked_add(left: usize, right: usize) -> Option<usize> {
-    left.checked_add(right)
-}
-
-fn decimal_digit_count(mut value: usize) -> usize {
-    let mut count = 1;
-    while value >= 10 {
-        value /= 10;
-        count += 1;
-    }
-    count
-}
-
-fn exponent_suffix_bound(bd: &BigDecimal, min_exponent_digits: usize) -> Option<usize> {
-    let (digits, scale) = bd.as_bigint_and_scale();
-    if digits.is_zero() {
-        return 2usize.checked_add(min_exponent_digits);
-    }
-
-    let digit_count = digits.abs().to_str_radix(10).len();
-    let scale_magnitude = usize::try_from(scale.unsigned_abs()).ok()?;
-    let exponent_magnitude = digit_count.checked_add(scale_magnitude)?.checked_add(1)?;
-    2usize.checked_add(decimal_digit_count(exponent_magnitude).max(min_exponent_digits))
-}
-
-fn decimal_exponent_estimate(bd: &BigDecimal) -> Option<i128> {
-    let (digits, scale) = bd.as_bigint_and_scale();
-    if digits.is_zero() {
-        return Some(0);
-    }
-
-    let digit_count = i128::try_from(digits.abs().to_str_radix(10).len()).ok()?;
-    Some(digit_count - i128::from(scale) - 1)
-}
-
-fn rounded_digit_bound(bd: &BigDecimal, precision: usize) -> Option<usize> {
-    let (digits, scale) = bd.as_bigint_and_scale();
-    let digit_count = if scale < 0 {
-        let extra_digits = usize::try_from(scale.unsigned_abs()).ok()?;
-        digits
-            .abs()
-            .to_str_radix(10)
-            .len()
-            .checked_add(extra_digits)?
-    } else {
-        digits.abs().to_str_radix(10).len()
-    };
-    Some(precision.min(digit_count.checked_add(1)?))
-}
-
-fn checked_i128_to_usize(value: i128) -> Option<usize> {
-    usize::try_from(value).ok()
-}
-
-fn check_scientific_float_size(
-    bd: &BigDecimal,
-    precision: usize,
-    force_decimal: ForceDecimal,
-) -> std::io::Result<()> {
-    let dot_len = if precision > 0 || force_decimal == ForceDecimal::Yes {
-        1
-    } else {
-        0
-    };
-    if bd.is_zero() {
-        let size = checked_add(1, precision)
-            .and_then(|size| checked_add(size, dot_len))
-            .and_then(|size| checked_add(size, 4));
-        return checked_format_size(size);
-    }
-
-    check_scale_magnitude(bd)?;
-
-    let suffix_len = exponent_suffix_bound(bd, 2);
-    let size = checked_add(1, precision)
-        .and_then(|size| checked_add(size, dot_len))
-        .and_then(|size| checked_add(size, suffix_len?));
-    checked_format_size(size)
-}
-
-fn check_shortest_float_size(
-    bd: &BigDecimal,
-    precision: usize,
-    force_decimal: ForceDecimal,
-) -> std::io::Result<()> {
-    if bd.is_zero() {
-        return if force_decimal == ForceDecimal::Yes {
-            checked_format_size(precision.checked_add(1))
-        } else {
-            Ok(())
-        };
-    }
-
-    check_scale_magnitude(bd)?;
-
-    if let Some(exponent) = decimal_exponent_estimate(bd) {
-        let precision_i128 = i128::try_from(precision).ok();
-        let digit_bound = if force_decimal == ForceDecimal::Yes {
-            Some(precision)
-        } else {
-            rounded_digit_bound(bd, precision)
-        };
-        let split = checked_i128_to_usize(exponent.saturating_add(1));
-        let decimal_form = exponent >= -4
-            && precision_i128.is_some_and(|precision| exponent < precision)
-            && (precision_i128.is_some_and(|precision| exponent.saturating_add(1) < precision)
-                || (force_decimal == ForceDecimal::No
-                    && digit_bound
-                        .zip(split)
-                        .is_some_and(|(digit_bound, split)| digit_bound <= split)));
-
-        if decimal_form {
-            let size = if exponent < 0 {
-                checked_i128_to_usize(-exponent)
-                    .and_then(|zero_count| checked_add(1, zero_count))
-                    .and_then(|size| checked_add(size, digit_bound?))
-            } else {
-                digit_bound.and_then(|digit_bound| {
-                    if force_decimal == ForceDecimal::No
-                        && split.is_some_and(|split| digit_bound <= split)
-                    {
-                        Some(digit_bound)
-                    } else {
-                        digit_bound.checked_add(1)
-                    }
-                })
-            };
-            return checked_format_size(size);
-        }
-    }
-
-    let suffix_len = exponent_suffix_bound(bd, 2);
-    let size = checked_add(precision, 1).and_then(|size| checked_add(size, suffix_len?));
-    checked_format_size(size)
-}
-
-fn check_decimal_float_size(
-    bd: &BigDecimal,
-    precision: usize,
-    force_decimal: ForceDecimal,
-) -> std::io::Result<()> {
-    let (digits, scale) = bd.as_bigint_and_scale();
-    if digits.is_zero() {
-        return checked_format_size(checked_add(
-            1,
-            if precision > 0 || force_decimal == ForceDecimal::Yes {
-                precision.checked_add(1).unwrap_or(usize::MAX)
-            } else {
-                0
-            },
-        ));
-    }
-
-    let digit_count = digits.abs().to_str_radix(10).len();
-    let integral_digits = if scale < 0 {
-        let extra_digits = usize::try_from(scale.unsigned_abs()).unwrap_or(usize::MAX);
-        digit_count.checked_add(extra_digits).unwrap_or(usize::MAX)
-    } else {
-        let fractional_digits = usize::try_from(scale).unwrap_or(usize::MAX);
-        digit_count.saturating_sub(fractional_digits).max(1)
-    };
-
-    let fractional_output = if precision > 0 || force_decimal == ForceDecimal::Yes {
-        precision.checked_add(1).unwrap_or(usize::MAX)
-    } else {
-        0
-    };
-    checked_format_size(integral_digits.checked_add(fractional_output))
-}
-
-fn check_hexadecimal_float_size(bd: &BigDecimal, precision: usize) -> std::io::Result<()> {
-    if bd.is_zero() {
-        return checked_format_size(precision.checked_add(7));
-    }
-
-    check_scale_magnitude(bd)?;
-
-    let suffix_len = hexadecimal_exponent_suffix_bound(bd);
-    let size = checked_add(precision, 4).and_then(|size| checked_add(size, suffix_len?));
-    checked_format_size(size)
-}
-
-fn check_scale_magnitude(bd: &BigDecimal) -> std::io::Result<()> {
-    let (_digits, scale) = bd.as_bigint_and_scale();
-    let scale_magnitude = usize::try_from(scale.unsigned_abs()).unwrap_or(usize::MAX);
-    checked_format_size(Some(scale_magnitude))
-}
-
-fn hexadecimal_exponent_suffix_bound(bd: &BigDecimal) -> Option<usize> {
-    let (digits, scale) = bd.as_bigint_and_scale();
-    if digits.is_zero() {
-        return Some(3);
-    }
-
-    let digit_count = digits.abs().to_str_radix(10).len();
-    let scale_magnitude = usize::try_from(scale.unsigned_abs()).ok()?;
-    let binary_exponent_magnitude = digit_count
-        .checked_add(scale_magnitude)?
-        .checked_add(1)?
-        .checked_mul(4)?;
-    2usize.checked_add(decimal_digit_count(binary_exponent_magnitude).max(1))
-}
-
-fn get_sign_indicator(sign: PositiveSign, negative: bool) -> String {
-    if negative {
-        String::from("-")
-    } else {
-        match sign {
-            PositiveSign::None => String::new(),
-            PositiveSign::Plus => String::from("+"),
-            PositiveSign::Space => String::from(" "),
-        }
-    }
-}
-
-fn format_float_non_finite(e: &ExtendedBigDecimal, case: Case) -> String {
-    let mut s = match e {
-        ExtendedBigDecimal::Infinity => String::from("inf"),
-        ExtendedBigDecimal::Nan => String::from("nan"),
-        _ => {
-            debug_assert!(false);
-            String::from("INVALID")
-        }
-    };
-
-    if case == Case::Uppercase {
-        s.make_ascii_uppercase();
-    }
-    s
-}
-
-fn format_float_decimal(
-    bd: &BigDecimal,
-    precision: Option<usize>,
-    force_decimal: ForceDecimal,
-) -> String {
-    debug_assert!(!bd.is_negative());
-    let precision = precision.unwrap_or(6); // Default %f precision (C standard)
-    if precision == 0 {
-        let (bi, scale) = bd.as_bigint_and_scale();
-        if scale == 0 && force_decimal != ForceDecimal::Yes {
-            // Optimization when printing integers.
-            return bi.to_str_radix(10);
-        } else if force_decimal == ForceDecimal::Yes {
-            return format!("{bd:.0}.");
-        }
-    }
-    format!("{bd:.precision$}")
-}
-
-/// Converts a `&BigDecimal` to a scientific-like `X.XX * 10^e`.
-/// - The returned `String` contains the digits `XXX`, _without_ the separating
-///   `.` (the caller must add that to get a valid scientific format number).
-/// - `e` is an integer exponent.
-fn bd_to_string_exp_with_prec(bd: &BigDecimal, precision: usize) -> (String, i64) {
-    // TODO: A lot of time is spent in `with_prec` computing the exact number
-    // of digits, it might be possible to save computation time by doing a rough
-    // division followed by arithmetics on `digits` to round if necessary (using
-    // `fast_inc`).
-
-    // Round bd to precision digits (including the leading digit)
-    // Note that `with_prec` will produce an extra digit if rounding overflows
-    // (e.g. 9995.with_prec(3) => 1000 * 10^1, but we want 100 * 10^2), we compensate
-    // for that later.
-    let bd_round = bd.with_prec(precision as u64);
-
-    // Convert to the form XXX * 10^-p (XXX is precision digit long)
-    let (frac, mut p) = bd_round.as_bigint_and_exponent();
-
-    let mut digits = frac.to_str_radix(10);
-
-    // In the unlikely case we had an overflow, correct for that.
-    if digits.len() == precision + 1 {
-        debug_assert!(&digits[precision..] == "0");
-        digits.truncate(precision);
-        p -= 1;
-    }
-
-    // If we end up with scientific formatting, we would convert XXX to X.XX:
-    // that divides by 10^(precision-1), so add that to the exponent.
-    let exponent = -p + precision as i64 - 1;
-
-    (digits, exponent)
-}
-
-fn format_float_scientific(
-    bd: &BigDecimal,
-    precision: Option<usize>,
-    case: Case,
-    force_decimal: ForceDecimal,
-) -> String {
-    debug_assert!(!bd.is_negative());
-    let precision = precision.unwrap_or(6); // Default %e precision (C standard)
-    let exp_char = match case {
-        Case::Lowercase => 'e',
-        Case::Uppercase => 'E',
-    };
-
-    if BigDecimal::zero().eq(bd) {
-        return if force_decimal == ForceDecimal::Yes && precision == 0 {
-            format!("0.{exp_char}+00")
-        } else {
-            format!("{:.precision$}{exp_char}+00", 0.0)
-        };
-    }
-
-    let (digits, exponent) = bd_to_string_exp_with_prec(bd, precision + 1);
-
-    // TODO: Optimizations in format_float_shortest can be made here as well
-    let (first_digit, remaining_digits) = digits.split_at(1);
-
-    let dot =
-        if !remaining_digits.is_empty() || (precision == 0 && ForceDecimal::Yes == force_decimal) {
-            "."
-        } else {
-            ""
-        };
-
-    format!("{first_digit}{dot}{remaining_digits}{exp_char}{exponent:+03}")
-}
-
-fn format_float_shortest(
-    bd: &BigDecimal,
-    precision: Option<usize>,
-    case: Case,
-    force_decimal: ForceDecimal,
-) -> String {
-    debug_assert!(!bd.is_negative());
-    let precision = precision.unwrap_or(6); // Default %g precision (C standard)
-
-    // Note: Precision here is how many digits should be displayed in total,
-    // instead of how many digits in the fractional part.
-
-    // Precision 0 is equivalent to precision 1.
-    let precision = precision.max(1);
-
-    if BigDecimal::zero().eq(bd) {
-        return match (force_decimal, precision) {
-            (ForceDecimal::Yes, 1) => "0.".into(),
-            (ForceDecimal::Yes, _) => {
-                format!("{:.*}", precision - 1, 0.0)
-            }
-            (ForceDecimal::No, _) => "0".into(),
-        };
-    }
-
-    let mut output = String::with_capacity(precision);
-    let (digits, exponent) = bd_to_string_exp_with_prec(bd, precision);
-
-    if exponent < -4 || exponent >= precision as i64 {
-        // Scientific-ish notation (with a few differences)
-
-        // Scale down "XXX" to "X.XX"
-        let (first_digit, remaining_digits) = digits.split_at(1);
-
-        // Always add the dot, we might trim it later.
-        output.push_str(first_digit);
-        output.push('.');
-        output.push_str(remaining_digits);
-
-        if force_decimal == ForceDecimal::No {
-            strip_fractional_zeroes_and_dot(&mut output);
-        }
-
-        output.push(match case {
-            Case::Lowercase => 'e',
-            Case::Uppercase => 'E',
-        });
-
-        // Format the exponent
-        let exponent_abs = exponent.abs();
-        output.push(if exponent < 0 { '-' } else { '+' });
-        if exponent_abs < 10 {
-            output.push('0');
-        }
-        output.push_str(&exponent_abs.to_string());
-    } else {
-        // Decimal-ish notation with a few differences:
-        //  - The precision works differently and specifies the total number
-        //    of digits instead of the digits in the fractional part.
-        //  - If we don't force the decimal, `.` and trailing `0` in the fractional part
-        //    are trimmed.
-        if exponent < 0 {
-            // Small number, prepend some "0.00" string
-            output.push_str("0.");
-            output.extend(std::iter::repeat_n('0', -exponent as usize - 1));
-            output.push_str(&digits);
-        } else {
-            // exponent >= 0, slot in a dot at the right spot
-            let (first_digits, remaining_digits) = digits.split_at(exponent as usize + 1);
-
-            // Always add `.` even if it's trailing, we might trim it later
-            output.push_str(first_digits);
-            output.push('.');
-            output.push_str(remaining_digits);
-        }
-
-        if force_decimal == ForceDecimal::No {
-            strip_fractional_zeroes_and_dot(&mut output);
-        }
-    }
-
-    output
-}
-
-fn format_float_hexadecimal(
-    bd: &BigDecimal,
-    precision: Option<usize>,
-    case: Case,
-    force_decimal: ForceDecimal,
-) -> String {
-    debug_assert!(!bd.is_negative());
-    // Default precision for %a is supposed to be sufficient to represent the
-    // exact value. This is platform specific, GNU coreutils uses a `long double`,
-    // which can be equivalent to a f64, f128, or an x86(-64) specific "f80".
-    // We have arbitrary precision in base 10, so we can't always represent
-    // the value exactly (e.g. 0.1 is c.ccccc...).
-    //
-    // Note that this is the maximum precision, trailing 0's are trimmed when
-    // printing.
-    //
-    // Emulate x86(-64) behavior, where 64 bits at _most_ are printed in total,
-    // that's 16 hex digits, including 1 before the decimal point (so 15 after).
-    //
-    // TODO: Make this configurable? e.g. arm64 value would be 28 (f128),
-    // arm value 13 (f64).
-    let max_precision = precision.unwrap_or(15);
-
-    let (prefix, exp_char) = match case {
-        Case::Lowercase => ("0x", 'p'),
-        Case::Uppercase => ("0X", 'P'),
-    };
-
-    if BigDecimal::zero().eq(bd) {
-        // To print 0, we don't ever need any digits after the decimal point, so default to
-        // that if precision is not specified.
-        return if force_decimal == ForceDecimal::Yes && precision.unwrap_or(0) == 0 {
-            format!("0x0.{exp_char}+0")
-        } else {
-            format!("0x{:.*}{exp_char}+0", precision.unwrap_or(0), 0.0)
-        };
-    }
-
-    // Convert to the form frac10 * 10^exp
-    let (frac10, p) = bd.as_bigint_and_exponent();
-    // We cast this to u32 below, but we probably do not care about exponents
-    // that would overflow u32. We should probably detect this and fail
-    // gracefully though.
-    let exp10 = -p;
-
-    // We want something that looks like this: frac2 * 2^exp2,
-    // without losing precision.
-    // frac10 * 10^exp10 = (frac10 * 5^exp10) * 2^exp10 = frac2 * 2^exp2
-
-    // TODO: this is most accurate, but frac2 will grow a lot for large
-    // precision or exponent, and formatting will get very slow.
-    // The precision can't technically be a very large number (up to 32-bit int),
-    // but we can trim some of the lower digits, if we want to only keep what a
-    // `long double` (80-bit or 128-bit at most) implementation would be able to
-    // display.
-    // The exponent is less of a problem if we matched `long double` implementation,
-    // as a 80/128-bit floats only covers a 15-bit exponent.
-
-    let (mut frac2, mut exp2) = if exp10 >= 0 {
-        // Positive exponent. 5^exp10 is an integer, so we can just multiply.
-        (frac10 * 5.to_bigint().unwrap().pow(exp10 as u32), exp10)
-    } else {
-        // Negative exponent: We're going to need to divide by 5^-exp10,
-        // so we first shift left by some margin to make sure we do not lose digits.
-
-        // We want to make sure we have at least precision+1 hex digits to start with.
-        // Then, dividing by 5^-exp10 loses at most -exp10*3 binary digits
-        // (since 5^-exp10 < 8^-exp10), so we add that, and another bit for
-        // rounding.
-        let margin =
-            ((max_precision + 1) as i64 * 4 - frac10.bits() as i64).max(0) + -exp10 * 3 + 1;
-
-        // frac10 * 10^exp10 = frac10 * 2^margin * 10^exp10 * 2^-margin =
-        // (frac10 * 2^margin * 5^exp10) * 2^exp10 * 2^-margin =
-        // (frac10 * 2^margin / 5^-exp10) * 2^(exp10-margin)
-        (
-            (frac10 << margin) / 5.to_bigint().unwrap().pow(-exp10 as u32),
-            exp10 - margin,
-        )
-    };
-
-    // Emulate x86(-64) behavior, we display 4 binary digits before the decimal point,
-    // so the value will always be between 0x8 and 0xf.
-    // TODO: Make this configurable? e.g. arm64 only displays 1 digit.
-    const BEFORE_BITS: usize = 4;
-    let wanted_bits = (BEFORE_BITS + max_precision * 4) as u64;
-    let bits = frac2.bits();
-
-    exp2 += bits as i64 - wanted_bits as i64;
-    if bits > wanted_bits {
-        // Shift almost all the way, round up if needed, then finish shifting.
-        frac2 >>= bits - wanted_bits - 1;
-        let add = frac2.bit(0);
-        frac2 >>= 1;
-
-        if add {
-            frac2 += 0x1;
-            if frac2.bits() > wanted_bits {
-                // We overflowed, drop one more hex digit.
-                // Note: Yes, the leading hex digit will now contain only 1 binary digit,
-                // but that emulates coreutils behavior on x86(-64).
-                frac2 >>= 4;
-                exp2 += 4;
-            }
-        }
-    } else {
-        frac2 <<= wanted_bits - bits;
-    }
-
-    // Convert "XXX" to "X.XX": that divides by 16^precision = 2^(4*precision), so add that to the exponent.
-    let mut digits = frac2.to_str_radix(16);
-    if case == Case::Uppercase {
-        digits.make_ascii_uppercase();
-    }
-    let (first_digit, remaining_digits) = digits.split_at(1);
-    let exponent = exp2 + (4 * max_precision) as i64;
-
-    let mut remaining_digits = remaining_digits.to_string();
-    if precision.is_none() {
-        // Trim trailing zeros
-        strip_fractional_zeroes(&mut remaining_digits);
-    }
-
-    let dot = if !remaining_digits.is_empty()
-        || (precision.unwrap_or(0) == 0 && ForceDecimal::Yes == force_decimal)
-    {
-        "."
-    } else {
-        ""
-    };
-
-    format!("{prefix}{first_digit}{dot}{remaining_digits}{exp_char}{exponent:+}")
-}
-
-fn strip_fractional_zeroes(s: &mut String) {
-    let mut trim_to = s.len();
-    for (pos, c) in s.char_indices().rev() {
-        if pos + c.len_utf8() == trim_to {
-            if c == '0' {
-                trim_to = pos;
-            } else {
-                break;
-            }
-        }
-    }
-    s.truncate(trim_to);
-}
-
-fn strip_fractional_zeroes_and_dot(s: &mut String) {
-    let mut trim_to = s.len();
-    for (pos, c) in s.char_indices().rev() {
-        if pos + c.len_utf8() == trim_to && (c == '0' || c == '.') {
-            trim_to = pos;
-        }
-        if c == '.' {
-            s.truncate(trim_to);
-            break;
-        }
-    }
-}
-
-fn write_output(
-    mut writer: impl Write,
-    sign_indicator: String,
-    s: String,
-    width: usize,
-    alignment: NumberAlignment,
-) -> std::io::Result<()> {
-    if width == 0 {
-        writer.write_all(sign_indicator.as_bytes())?;
-        writer.write_all(s.as_bytes())?;
-        return Ok(());
-    }
-    // Take length of `sign_indicator`, which could be 0 or 1, into consideration when padding
-    // by storing remaining_width indicating the actual width needed.
-    // Using min() because self.width could be 0, 0usize - 1usize should be avoided
-    let remaining_width = width - min(width, sign_indicator.len());
-
-    // Check if the width is too large for formatting
-    super::check_width(remaining_width)?;
-
-    match alignment {
-        NumberAlignment::Left => write!(writer, "{sign_indicator}{s:<remaining_width$}"),
-        NumberAlignment::RightSpace => {
-            let is_sign = sign_indicator.starts_with('-') || sign_indicator.starts_with('+'); // When sign_indicator is in ['-', '+']
-            if is_sign && remaining_width > 0 {
-                // Make sure sign_indicator is just next to number, e.g. "% +5.1f" 1 ==> $ +1.0
-                let s = sign_indicator + s.as_str();
-                write!(writer, "{s:>width$}", width = remaining_width + 1) // Since we now add sign_indicator and s together, plus 1
-            } else {
-                write!(writer, "{sign_indicator}{s:>remaining_width$}")
-            }
-        }
-        NumberAlignment::RightZero => {
-            // Add the padding after "0x" for hexadecimals
-            let (prefix, rest) = if s.len() >= 2 && s[..2].eq_ignore_ascii_case("0x") {
-                (&s[..2], &s[2..])
-            } else {
-                ("", s.as_str())
-            };
-            let remaining_width = remaining_width.saturating_sub(prefix.len());
-            write!(writer, "{sign_indicator}{prefix}{rest:0>remaining_width$}")
-        }
-    }
-}
-
-#[cfg(test)]
-mod test {
-    use bigdecimal::BigDecimal;
-    use num_traits::FromPrimitive;
-    use std::str::FromStr;
-
-    use crate::format::{
-        num_format::{Case, Float, ForceDecimal, UnsignedInt},
-        ExtendedBigDecimal, Format,
-    };
-
-    use super::{Formatter, SignedInt};
-
-    #[test]
-    fn unsigned_octal() {
-        use super::{Formatter, NumberAlignment, Prefix, UnsignedInt, UnsignedIntVariant};
-        let f = |x| {
-            let mut s = Vec::new();
-            UnsignedInt {
-                variant: UnsignedIntVariant::Octal(Prefix::Yes),
-                width: 0,
-                precision: 0,
-                alignment: NumberAlignment::Left,
-            }
-            .fmt(&mut s, x)
-            .unwrap();
-            String::from_utf8(s).unwrap()
-        };
-
-        assert_eq!(f(0), "0");
-        assert_eq!(f(5), "05");
-        assert_eq!(f(8), "010");
-    }
-
-    #[test]
-    fn numeric_formatters_reject_oversized_precision() {
-        use std::io::ErrorKind;
-
-        use super::{FloatVariant, NumberAlignment, Prefix, UnsignedInt, UnsignedIntVariant};
-
-        let oversized_precision = 1_000_001;
-        let assert_out_of_memory = |result: std::io::Result<()>| {
-            assert_eq!(ErrorKind::OutOfMemory, result.unwrap_err().kind());
-        };
-
-        let mut output = Vec::new();
-        assert_out_of_memory(
-            SignedInt {
-                width: 0,
-                precision: oversized_precision,
-                positive_sign: super::PositiveSign::None,
-                alignment: NumberAlignment::Left,
-            }
-            .fmt(&mut output, 1),
-        );
-
-        output.clear();
-        assert_out_of_memory(
-            SignedInt {
-                width: 0,
-                precision: 1_000_000,
-                positive_sign: super::PositiveSign::None,
-                alignment: NumberAlignment::Left,
-            }
-            .fmt(&mut output, -1),
-        );
-
-        output.clear();
-        assert_out_of_memory(
-            UnsignedInt {
-                variant: UnsignedIntVariant::Octal(Prefix::No),
-                width: 0,
-                precision: oversized_precision,
-                alignment: NumberAlignment::Left,
-            }
-            .fmt(&mut output, 1),
-        );
-
-        output.clear();
-        assert_out_of_memory(
-            UnsignedInt {
-                variant: UnsignedIntVariant::Hexadecimal(Case::Lowercase, Prefix::Yes),
-                width: 0,
-                precision: 999_999,
-                alignment: NumberAlignment::Left,
-            }
-            .fmt(&mut output, 1),
-        );
-
-        output.clear();
-        assert_out_of_memory(
-            Float {
-                variant: FloatVariant::Decimal,
-                precision: Some(oversized_precision),
-                ..Float::default()
-            }
-            .fmt(&mut output, &ExtendedBigDecimal::one()),
-        );
-
-        output.clear();
-        assert_out_of_memory(
-            Float {
-                variant: FloatVariant::Hexadecimal,
-                precision: Some(oversized_precision),
-                ..Float::default()
-            }
-            .fmt(&mut output, &ExtendedBigDecimal::one()),
-        );
-    }
-
-    #[test]
-    fn float_bounds_allow_non_finite_values_with_oversized_precision() {
-        use super::FloatVariant;
-
-        let mut output = Vec::new();
-        Float {
-            variant: FloatVariant::Decimal,
-            precision: Some(1_000_001),
-            ..Float::default()
-        }
-        .fmt(&mut output, &ExtendedBigDecimal::Infinity)
-        .unwrap();
-
-        assert_eq!("inf", String::from_utf8(output).unwrap());
-    }
-
-    #[test]
-    fn shortest_zero_allows_ignored_oversized_precision() {
-        use super::FloatVariant;
-
-        let mut output = Vec::new();
-        Float {
-            variant: FloatVariant::Shortest,
-            precision: Some(1_000_001),
-            ..Float::default()
-        }
-        .fmt(&mut output, &ExtendedBigDecimal::zero())
-        .unwrap();
-
-        assert_eq!(b"0", output.as_slice());
-    }
-
-    #[test]
-    fn float_bounds_include_exponent_overhead() {
-        use std::io::ErrorKind;
-
-        use super::FloatVariant;
-
-        let mut output = Vec::new();
-        let assert_out_of_memory = |result: std::io::Result<()>| {
-            assert_eq!(ErrorKind::OutOfMemory, result.unwrap_err().kind());
-        };
-
-        Float {
-            variant: FloatVariant::Scientific,
-            precision: Some(999_980),
-            ..Float::default()
-        }
-        .fmt(&mut output, &ExtendedBigDecimal::one())
-        .unwrap();
-        assert!(output.len() < 1_000_000);
-
-        output.clear();
-        assert_out_of_memory(
-            Float {
-                variant: FloatVariant::Scientific,
-                precision: Some(999_995),
-                ..Float::default()
-            }
-            .fmt(&mut output, &ExtendedBigDecimal::one()),
-        );
-
-        output.clear();
-        Float {
-            variant: FloatVariant::Shortest,
-            precision: Some(999_996),
-            ..Float::default()
-        }
-        .fmt(&mut output, &ExtendedBigDecimal::one())
-        .unwrap();
-        assert_eq!(b"1", output.as_slice());
-
-        output.clear();
-        let exact_cap_integral =
-            ExtendedBigDecimal::BigDecimal(BigDecimal::from_bigint(1.into(), -999_999));
-        Float {
-            variant: FloatVariant::Shortest,
-            precision: Some(1_000_000),
-            ..Float::default()
-        }
-        .fmt(&mut output, &exact_cap_integral)
-        .unwrap();
-        assert_eq!(1_000_000, output.len());
-
-        output.clear();
-        assert_out_of_memory(
-            Float {
-                variant: FloatVariant::Shortest,
-                precision: Some(1_000_000),
-                force_decimal: ForceDecimal::Yes,
-                ..Float::default()
-            }
-            .fmt(&mut output, &ExtendedBigDecimal::one()),
-        );
-    }
-
-    #[test]
-    fn hexadecimal_float_precision_uses_output_width_bound() {
-        use super::FloatVariant;
-
-        let mut output = Vec::new();
-        Float {
-            variant: FloatVariant::Hexadecimal,
-            precision: Some(999_990),
-            ..Float::default()
-        }
-        .fmt(&mut output, &ExtendedBigDecimal::one())
-        .unwrap();
-
-        assert!(output.len() < 1_000_000);
-
-        output.clear();
-        assert_eq!(
-            std::io::ErrorKind::OutOfMemory,
-            Float {
-                variant: FloatVariant::Hexadecimal,
-                precision: Some(999_994),
-                ..Float::default()
-            }
-            .fmt(&mut output, &ExtendedBigDecimal::zero())
-            .unwrap_err()
-            .kind()
-        );
-    }
-
-    #[test]
-    fn exponent_float_variants_reject_extreme_scale() {
-        use std::io::ErrorKind;
-
-        use super::FloatVariant;
-
-        let huge_scale_zero =
-            ExtendedBigDecimal::BigDecimal(BigDecimal::from_bigint(0.into(), 1_000_001));
-        let mut output = Vec::new();
-        Float {
-            variant: FloatVariant::Scientific,
-            ..Float::default()
-        }
-        .fmt(&mut output, &huge_scale_zero)
-        .unwrap();
-        assert_eq!(b"0.000000e+00", output.as_slice());
-
-        let huge_scale =
-            ExtendedBigDecimal::BigDecimal(BigDecimal::from_bigint(1.into(), 1_000_001));
-        output.clear();
-        let assert_out_of_memory = |result: std::io::Result<()>| {
-            assert_eq!(ErrorKind::OutOfMemory, result.unwrap_err().kind());
-        };
-
-        assert_out_of_memory(
-            Float {
-                variant: FloatVariant::Scientific,
-                ..Float::default()
-            }
-            .fmt(&mut output, &huge_scale),
-        );
-
-        output.clear();
-        assert_out_of_memory(
-            Float {
-                variant: FloatVariant::Shortest,
-                ..Float::default()
-            }
-            .fmt(&mut output, &huge_scale),
-        );
-    }
-
-    #[test]
-    fn non_finite_float() {
-        use super::format_float_non_finite;
-        let f = |x| format_float_non_finite(x, Case::Lowercase);
-        assert_eq!(f(&ExtendedBigDecimal::Nan), "nan");
-        assert_eq!(f(&ExtendedBigDecimal::Infinity), "inf");
-
-        let f = |x| format_float_non_finite(x, Case::Uppercase);
-        assert_eq!(f(&ExtendedBigDecimal::Nan), "NAN");
-        assert_eq!(f(&ExtendedBigDecimal::Infinity), "INF");
-    }
-
-    #[test]
-    fn decimal_float() {
-        use super::format_float_decimal;
-        let f =
-            |x| format_float_decimal(&BigDecimal::from_f64(x).unwrap(), Some(6), ForceDecimal::No);
-        assert_eq!(f(0.0), "0.000000");
-        assert_eq!(f(1.0), "1.000000");
-        assert_eq!(f(100.0), "100.000000");
-        assert_eq!(f(123_456.789), "123456.789000");
-        assert_eq!(f(12.345_678_9), "12.345679");
-        assert_eq!(f(1_000_000.0), "1000000.000000");
-        assert_eq!(f(99_999_999.0), "99999999.000000");
-        assert_eq!(f(1.999_999_5), "1.999999");
-        assert_eq!(f(1.999_999_6), "2.000000");
-
-        let f = |x| {
-            format_float_decimal(
-                &BigDecimal::from_f64(x).unwrap(),
-                Some(0),
-                ForceDecimal::Yes,
-            )
-        };
-        assert_eq!(f(100.0), "100.");
-
-        // Test arbitrary precision: long inputs that would not fit in a f64, print 24 digits after decimal point.
-        let f = |x| {
-            format_float_decimal(
-                &BigDecimal::from_str(x).unwrap(),
-                Some(24),
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f("0.12345678901234567890"), "0.123456789012345678900000");
-        assert_eq!(
-            f("1234567890.12345678901234567890"),
-            "1234567890.123456789012345678900000"
-        );
-    }
-
-    #[test]
-    fn decimal_float_zero() {
-        use super::format_float_decimal;
-        let f = |digits, scale| {
-            format_float_decimal(
-                &BigDecimal::from_bigint(digits, scale),
-                Some(6),
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f(0.into(), 0), "0.000000");
-        assert_eq!(f(0.into(), -10), "0.000000");
-        assert_eq!(f(0.into(), 10), "0.000000");
-    }
-
-    #[test]
-    fn scientific_float() {
-        use super::format_float_scientific;
-        let f = |x| {
-            format_float_scientific(
-                &BigDecimal::from_f64(x).unwrap(),
-                None,
-                Case::Lowercase,
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f(0.0), "0.000000e+00");
-        assert_eq!(f(1.0), "1.000000e+00");
-        assert_eq!(f(100.0), "1.000000e+02");
-        assert_eq!(f(123_456.789), "1.234568e+05");
-        assert_eq!(f(12.345_678_9), "1.234568e+01");
-        assert_eq!(f(1_000_000.0), "1.000000e+06");
-        assert_eq!(f(99_999_999.0), "1.000000e+08");
-
-        let f = |x| {
-            format_float_scientific(
-                &BigDecimal::from_f64(x).unwrap(),
-                Some(6),
-                Case::Uppercase,
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f(0.0), "0.000000E+00");
-        assert_eq!(f(123_456.789), "1.234568E+05");
-
-        // Test "0e10"/"0e-10". From cppreference.com: "If the value is ​0​, the exponent is also ​0​."
-        let f = |digits, scale| {
-            format_float_scientific(
-                &BigDecimal::from_bigint(digits, scale),
-                Some(6),
-                Case::Lowercase,
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f(0.into(), 0), "0.000000e+00");
-        assert_eq!(f(0.into(), -10), "0.000000e+00");
-        assert_eq!(f(0.into(), 10), "0.000000e+00");
-    }
-
-    #[test]
-    fn scientific_float_zero_precision() {
-        use super::format_float_scientific;
-
-        let f = |x| {
-            format_float_scientific(
-                &BigDecimal::from_f64(x).unwrap(),
-                Some(0),
-                Case::Lowercase,
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f(0.0), "0e+00");
-        assert_eq!(f(1.0), "1e+00");
-        assert_eq!(f(100.0), "1e+02");
-        assert_eq!(f(123_456.789), "1e+05");
-        assert_eq!(f(12.345_678_9), "1e+01");
-        assert_eq!(f(1_000_000.0), "1e+06");
-        assert_eq!(f(99_999_999.0), "1e+08");
-
-        let f = |x| {
-            format_float_scientific(
-                &BigDecimal::from_f64(x).unwrap(),
-                Some(0),
-                Case::Lowercase,
-                ForceDecimal::Yes,
-            )
-        };
-        assert_eq!(f(0.0), "0.e+00");
-        assert_eq!(f(1.0), "1.e+00");
-        assert_eq!(f(100.0), "1.e+02");
-        assert_eq!(f(123_456.789), "1.e+05");
-        assert_eq!(f(12.345_678_9), "1.e+01");
-        assert_eq!(f(1_000_000.0), "1.e+06");
-        assert_eq!(f(99_999_999.0), "1.e+08");
-    }
-
-    #[test]
-    fn shortest_float() {
-        use super::format_float_shortest;
-        let f = |x| {
-            format_float_shortest(
-                &BigDecimal::from_f64(x).unwrap(),
-                None,
-                Case::Lowercase,
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f(0.0), "0");
-        assert_eq!(f(0.00001), "1e-05");
-        assert_eq!(f(0.0001), "0.0001");
-        assert_eq!(f(1.0), "1");
-        assert_eq!(f(100.0), "100");
-        assert_eq!(f(123_456.789), "123457");
-        assert_eq!(f(12.345_678_9), "12.3457");
-        assert_eq!(f(1_000_000.0), "1e+06");
-        assert_eq!(f(99_999_999.0), "1e+08");
-    }
-
-    #[test]
-    fn shortest_float_force_decimal() {
-        use super::format_float_shortest;
-        let f = |x| {
-            format_float_shortest(
-                &BigDecimal::from_f64(x).unwrap(),
-                None,
-                Case::Lowercase,
-                ForceDecimal::Yes,
-            )
-        };
-        assert_eq!(f(0.0), "0.00000");
-        assert_eq!(f(0.00001), "1.00000e-05");
-        assert_eq!(f(0.0001), "0.000100000");
-        assert_eq!(f(1.0), "1.00000");
-        assert_eq!(f(100.0), "100.000");
-        assert_eq!(f(123_456.789), "123457.");
-        assert_eq!(f(12.345_678_9), "12.3457");
-        assert_eq!(f(1_000_000.0), "1.00000e+06");
-        assert_eq!(f(99_999_999.0), "1.00000e+08");
-    }
-
-    #[test]
-    fn shortest_float_force_decimal_zero_precision() {
-        use super::format_float_shortest;
-        let f = |x| {
-            format_float_shortest(
-                &BigDecimal::from_f64(x).unwrap(),
-                Some(0),
-                Case::Lowercase,
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f(0.0), "0");
-        assert_eq!(f(0.00001), "1e-05");
-        assert_eq!(f(0.0001), "0.0001");
-        assert_eq!(f(1.0), "1");
-        assert_eq!(f(10.0), "1e+01");
-        assert_eq!(f(100.0), "1e+02");
-        assert_eq!(f(123_456.789), "1e+05");
-        assert_eq!(f(12.345_678_9), "1e+01");
-        assert_eq!(f(1_000_000.0), "1e+06");
-        assert_eq!(f(99_999_999.0), "1e+08");
-
-        let f = |x| {
-            format_float_shortest(
-                &BigDecimal::from_f64(x).unwrap(),
-                Some(0),
-                Case::Lowercase,
-                ForceDecimal::Yes,
-            )
-        };
-        assert_eq!(f(0.0), "0.");
-        assert_eq!(f(0.00001), "1.e-05");
-        assert_eq!(f(0.0001), "0.0001");
-        assert_eq!(f(1.0), "1.");
-        assert_eq!(f(10.0), "1.e+01");
-        assert_eq!(f(100.0), "1.e+02");
-        assert_eq!(f(123_456.789), "1.e+05");
-        assert_eq!(f(12.345_678_9), "1.e+01");
-        assert_eq!(f(1_000_000.0), "1.e+06");
-        assert_eq!(f(99_999_999.0), "1.e+08");
-    }
-
-    #[test]
-    fn hexadecimal_float() {
-        // It's important to create the BigDecimal from a string: going through a f64
-        // will lose some precision.
-
-        use super::format_float_hexadecimal;
-        let f = |x| {
-            format_float_hexadecimal(
-                &BigDecimal::from_str(x).unwrap(),
-                Some(6),
-                Case::Lowercase,
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f("0"), "0x0.000000p+0");
-        assert_eq!(f("0.00001"), "0xa.7c5ac4p-20");
-        assert_eq!(f("0.125"), "0x8.000000p-6");
-        assert_eq!(f("256.0"), "0x8.000000p+5");
-        assert_eq!(f("65536.0"), "0x8.000000p+13");
-        assert_eq!(f("1.9999999999"), "0x1.000000p+1"); // Corner case: leading hex digit only contains 1 binary digit
-
-        let f = |x| {
-            format_float_hexadecimal(
-                &BigDecimal::from_str(x).unwrap(),
-                Some(0),
-                Case::Lowercase,
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f("0"), "0x0p+0");
-        assert_eq!(f("0.125"), "0x8p-6");
-        assert_eq!(f("256.0"), "0x8p+5");
-
-        let f = |x| {
-            format_float_hexadecimal(
-                &BigDecimal::from_str(x).unwrap(),
-                Some(0),
-                Case::Lowercase,
-                ForceDecimal::Yes,
-            )
-        };
-        assert_eq!(f("0"), "0x0.p+0");
-        assert_eq!(f("0.125"), "0x8.p-6");
-        assert_eq!(f("256.0"), "0x8.p+5");
-
-        // Default precision, maximum 13 digits (x86-64 behavior)
-        let f = |x| {
-            format_float_hexadecimal(
-                &BigDecimal::from_str(x).unwrap(),
-                None,
-                Case::Lowercase,
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f("0"), "0x0p+0");
-        assert_eq!(f("0.00001"), "0xa.7c5ac471b478423p-20");
-        assert_eq!(f("0.125"), "0x8p-6");
-        assert_eq!(f("4.25"), "0x8.8p-1");
-        assert_eq!(f("17.203125"), "0x8.9ap+1");
-        assert_eq!(f("256.0"), "0x8p+5");
-        assert_eq!(f("1000.01"), "0xf.a00a3d70a3d70a4p+6");
-        assert_eq!(f("65536.0"), "0x8p+13");
-
-        let f = |x| {
-            format_float_hexadecimal(
-                &BigDecimal::from_str(x).unwrap(),
-                None,
-                Case::Lowercase,
-                ForceDecimal::Yes,
-            )
-        };
-        assert_eq!(f("0"), "0x0.p+0");
-        assert_eq!(f("0.125"), "0x8.p-6");
-        assert_eq!(f("4.25"), "0x8.8p-1");
-        assert_eq!(f("256.0"), "0x8.p+5");
-
-        let f = |x| {
-            format_float_hexadecimal(
-                &BigDecimal::from_str(x).unwrap(),
-                Some(6),
-                Case::Uppercase,
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f("0.00001"), "0XA.7C5AC4P-20");
-        assert_eq!(f("0.125"), "0X8.000000P-6");
-
-        // Test "0e10"/"0e-10". From cppreference.com: "If the value is ​0​, the exponent is also ​0​."
-        let f = |digits, scale| {
-            format_float_hexadecimal(
-                &BigDecimal::from_bigint(digits, scale),
-                Some(6),
-                Case::Lowercase,
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f(0.into(), 0), "0x0.000000p+0");
-        assert_eq!(f(0.into(), -10), "0x0.000000p+0");
-        assert_eq!(f(0.into(), 10), "0x0.000000p+0");
-    }
-
-    #[test]
-    fn strip_insignificant_end() {
-        use super::strip_fractional_zeroes_and_dot;
-        let f = |s| {
-            let mut s = String::from(s);
-            strip_fractional_zeroes_and_dot(&mut s);
-            s
-        };
-        assert_eq!(&f("1000"), "1000");
-        assert_eq!(&f("1000."), "1000");
-        assert_eq!(&f("1000.02030"), "1000.0203");
-        assert_eq!(&f("1000.00000"), "1000");
-    }
-
-    #[test]
-    fn shortest_float_abs_value_less_than_one() {
-        use super::format_float_shortest;
-        let f = |x| {
-            format_float_shortest(
-                &BigDecimal::from_f64(x).unwrap(),
-                None,
-                Case::Lowercase,
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f(0.117_187_5), "0.117188");
-        assert_eq!(f(0.011_718_75), "0.0117188");
-        assert_eq!(f(0.001_171_875), "0.00117187");
-        assert_eq!(f(0.000_117_187_5), "0.000117187");
-        assert_eq!(f(0.001_171_875_001), "0.00117188");
-    }
-
-    #[test]
-    fn shortest_float_switch_decimal_scientific() {
-        use super::format_float_shortest;
-        let f = |x| {
-            format_float_shortest(
-                &BigDecimal::from_f64(x).unwrap(),
-                None,
-                Case::Lowercase,
-                ForceDecimal::No,
-            )
-        };
-        assert_eq!(f(0.001), "0.001");
-        assert_eq!(f(0.0001), "0.0001");
-        assert_eq!(f(0.00001), "1e-05");
-        assert_eq!(f(0.000_001), "1e-06");
-    }
-
-    /// Wrapper function to get a string out of Format.fmt()
-    fn fmt<U, T>(format: &Format<U, T>, n: T) -> String
-    where
-        U: Formatter<T>,
-    {
-        let mut v = Vec::<u8>::new();
-        format.fmt(&mut v, n).unwrap();
-        String::from_utf8_lossy(&v).to_string()
-    }
-
-    // Some end-to-end tests, `printf` will also test some of those but it's easier to add more
-    // tests here. We mostly focus on padding, negative numbers, and format specifiers that are not
-    // covered above.
-    #[test]
-    fn format_signed_int() {
-        let format = Format::<SignedInt, i64>::parse("%d").unwrap();
-        assert_eq!(fmt(&format, 123i64), "123");
-        assert_eq!(fmt(&format, -123i64), "-123");
-        assert_eq!(fmt(&format, i64::MAX), "9223372036854775807");
-        assert_eq!(fmt(&format, i64::MIN), "-9223372036854775808");
-
-        let format = Format::<SignedInt, i64>::parse("%i").unwrap();
-        assert_eq!(fmt(&format, 123i64), "123");
-        assert_eq!(fmt(&format, -123i64), "-123");
-
-        let format = Format::<SignedInt, i64>::parse("%6d").unwrap();
-        assert_eq!(fmt(&format, 123i64), "   123");
-        assert_eq!(fmt(&format, -123i64), "  -123");
-
-        let format = Format::<SignedInt, i64>::parse("%06d").unwrap();
-        assert_eq!(fmt(&format, 123i64), "000123");
-        assert_eq!(fmt(&format, -123i64), "-00123");
-
-        let format = Format::<SignedInt, i64>::parse("%+6d").unwrap();
-        assert_eq!(fmt(&format, 123i64), "  +123");
-        assert_eq!(fmt(&format, -123i64), "  -123");
-
-        let format = Format::<SignedInt, i64>::parse("% d").unwrap();
-        assert_eq!(fmt(&format, 123i64), " 123");
-        assert_eq!(fmt(&format, -123i64), "-123");
-    }
-
-    #[test]
-    #[ignore = "Need issue #7509 to be fixed"]
-    fn format_signed_int_precision_zero() {
-        let format = Format::<SignedInt, i64>::parse("%.0d").unwrap();
-        assert_eq!(fmt(&format, 123i64), "123");
-        // From cppreference.com: "If both the converted value and the precision are ​0​ the conversion results in no characters."
-        assert_eq!(fmt(&format, 0i64), "");
-    }
-
-    #[test]
-    fn format_unsigned_int() {
-        let f = |fmt_str: &str, n: u64| {
-            let format = Format::<UnsignedInt, u64>::parse(fmt_str).unwrap();
-            fmt(&format, n)
-        };
-
-        assert_eq!(f("%u", 123u64), "123");
-        assert_eq!(f("%o", 123u64), "173");
-        assert_eq!(f("%#o", 123u64), "0173");
-        assert_eq!(f("%6x", 123u64), "    7b");
-        assert_eq!(f("%#6x", 123u64), "  0x7b");
-        assert_eq!(f("%06X", 123u64), "00007B");
-        assert_eq!(f("%+6u", 123u64), "   123"); // '+' is ignored for unsigned numbers.
-        assert_eq!(f("% u", 123u64), "123"); // ' ' is ignored for unsigned numbers.
-        assert_eq!(f("%#x", 0), "0"); // No prefix for 0
-    }
-
-    #[test]
-    #[ignore = "Need issues #7509 and #7510 to be fixed"]
-    fn format_unsigned_int_broken() {
-        // TODO: Merge this back into format_unsigned_int.
-        let f = |fmt_str: &str, n: u64| {
-            let format = Format::<UnsignedInt, u64>::parse(fmt_str).unwrap();
-            fmt(&format, n)
-        };
-
-        // #7509
-        assert_eq!(f("%.0o", 0), "");
-        assert_eq!(f("%#0o", 0), "0"); // Already correct, but probably an accident.
-        assert_eq!(f("%.0x", 0), "");
-        // #7510
-        assert_eq!(f("%#06x", 123u64), "0x007b");
-    }
-
-    #[test]
-    fn format_float_decimal() {
-        let format = Format::<Float, &ExtendedBigDecimal>::parse("%f").unwrap();
-        assert_eq!(fmt(&format, &123.0.into()), "123.000000");
-        assert_eq!(fmt(&format, &(-123.0).into()), "-123.000000");
-        assert_eq!(fmt(&format, &123.15e-8.into()), "0.000001");
-        assert_eq!(fmt(&format, &(-123.15e8).into()), "-12315000000.000000");
-        let zero_exp = |exp| ExtendedBigDecimal::BigDecimal(BigDecimal::from_bigint(0.into(), exp));
-        // We've had issues with "0e10"/"0e-10" formatting, and our current workaround is in Format.fmt function.
-        assert_eq!(fmt(&format, &zero_exp(0)), "0.000000");
-        assert_eq!(fmt(&format, &zero_exp(10)), "0.000000");
-        assert_eq!(fmt(&format, &zero_exp(-10)), "0.000000");
-
-        let format = Format::<Float, &ExtendedBigDecimal>::parse("%12f").unwrap();
-        assert_eq!(fmt(&format, &123.0.into()), "  123.000000");
-        assert_eq!(fmt(&format, &(-123.0).into()), " -123.000000");
-        assert_eq!(fmt(&format, &123.15e-8.into()), "    0.000001");
-        assert_eq!(fmt(&format, &(-123.15e8).into()), "-12315000000.000000");
-        assert_eq!(
-            fmt(&format, &(ExtendedBigDecimal::Infinity)),
-            "         inf"
-        );
-        assert_eq!(
-            fmt(&format, &(ExtendedBigDecimal::MinusInfinity)),
-            "        -inf"
-        );
-        assert_eq!(fmt(&format, &(ExtendedBigDecimal::Nan)), "         nan");
-        assert_eq!(
-            fmt(&format, &(ExtendedBigDecimal::MinusNan)),
-            "        -nan"
-        );
-
-        let format = Format::<Float, &ExtendedBigDecimal>::parse("%+#.0f").unwrap();
-        assert_eq!(fmt(&format, &123.0.into()), "+123.");
-        assert_eq!(fmt(&format, &(-123.0).into()), "-123.");
-        assert_eq!(fmt(&format, &123.15e-8.into()), "+0.");
-        assert_eq!(fmt(&format, &(-123.15e8).into()), "-12315000000.");
-        assert_eq!(fmt(&format, &(ExtendedBigDecimal::Infinity)), "+inf");
-        assert_eq!(fmt(&format, &(ExtendedBigDecimal::Nan)), "+nan");
-        assert_eq!(fmt(&format, &(ExtendedBigDecimal::MinusZero)), "-0.");
-
-        let format = Format::<Float, &ExtendedBigDecimal>::parse("%#06.0f").unwrap();
-        assert_eq!(fmt(&format, &123.0.into()), "00123.");
-        assert_eq!(fmt(&format, &(-123.0).into()), "-0123.");
-        assert_eq!(fmt(&format, &123.15e-8.into()), "00000.");
-        assert_eq!(fmt(&format, &(-123.15e8).into()), "-12315000000.");
-        assert_eq!(fmt(&format, &(ExtendedBigDecimal::Infinity)), "   inf");
-        assert_eq!(fmt(&format, &(ExtendedBigDecimal::MinusInfinity)), "  -inf");
-        assert_eq!(fmt(&format, &(ExtendedBigDecimal::Nan)), "   nan");
-        assert_eq!(fmt(&format, &(ExtendedBigDecimal::MinusNan)), "  -nan");
-    }
-
-    #[test]
-    fn format_float_others() {
-        let f = |fmt_str: &str, n: &ExtendedBigDecimal| {
-            let format = Format::<Float, &ExtendedBigDecimal>::parse(fmt_str).unwrap();
-            fmt(&format, n)
-        };
-
-        assert_eq!(f("%e", &(-123.0).into()), "-1.230000e+02");
-        assert_eq!(f("%#09.e", &(-100.0).into()), "-001.e+02");
-        assert_eq!(f("%# 9.E", &100.0.into()), "   1.E+02");
-        assert_eq!(f("% 12.2A", &(-100.0).into()), "  -0XC.80P+3");
-        assert_eq!(f("%012.2a", &(-100.0).into()), "-0x00c.80p+3");
-        assert_eq!(f("%012.2A", &(-100.0).into()), "-0X00C.80P+3");
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/format/spec.rs b/registry/native/stubs/uucore/src/lib/features/format/spec.rs
deleted file mode 100644
index dc628343c..000000000
--- a/registry/native/stubs/uucore/src/lib/features/format/spec.rs
+++ /dev/null
@@ -1,761 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore (vars) intmax ptrdiff padlen
-
-use super::{
-    num_format::{
-        self, Case, FloatVariant, ForceDecimal, Formatter, NumberAlignment, PositiveSign, Prefix,
-        UnsignedIntVariant,
-    },
-    parse_escape_only, ExtendedBigDecimal, FormatChar, FormatError, OctalParsing,
-};
-use crate::{
-    format::FormatArguments,
-    os_str_as_bytes,
-    quoting_style::{locale_aware_escape_name, QuotingStyle},
-};
-use std::{io::Write, num::NonZero, ops::ControlFlow};
-
-/// A parsed specification for formatting a value
-///
-/// This might require more than one argument to resolve width or precision
-/// values that are given as `*`.
-#[derive(Debug)]
-pub enum Spec {
-    Char {
-        position: ArgumentLocation,
-        width: Option<CanAsterisk<usize>>,
-        align_left: bool,
-    },
-    String {
-        position: ArgumentLocation,
-        precision: Option<CanAsterisk<usize>>,
-        width: Option<CanAsterisk<usize>>,
-        align_left: bool,
-    },
-    EscapedString {
-        position: ArgumentLocation,
-    },
-    QuotedString {
-        position: ArgumentLocation,
-    },
-    SignedInt {
-        position: ArgumentLocation,
-        width: Option<CanAsterisk<usize>>,
-        precision: Option<CanAsterisk<usize>>,
-        positive_sign: PositiveSign,
-        alignment: NumberAlignment,
-    },
-    UnsignedInt {
-        position: ArgumentLocation,
-        variant: UnsignedIntVariant,
-        width: Option<CanAsterisk<usize>>,
-        precision: Option<CanAsterisk<usize>>,
-        alignment: NumberAlignment,
-    },
-    Float {
-        position: ArgumentLocation,
-        variant: FloatVariant,
-        case: Case,
-        force_decimal: ForceDecimal,
-        width: Option<CanAsterisk<usize>>,
-        positive_sign: PositiveSign,
-        alignment: NumberAlignment,
-        precision: Option<CanAsterisk<usize>>,
-    },
-}
-
-#[derive(Clone, Copy, Debug)]
-pub enum ArgumentLocation {
-    NextArgument,
-    Position(NonZero<usize>),
-}
-
-/// Precision and width specified might use an asterisk to indicate that they are
-/// determined by an argument.
-#[derive(Clone, Copy, Debug)]
-pub enum CanAsterisk<T> {
-    Fixed(T),
-    Asterisk(ArgumentLocation),
-}
-
-/// Size of the expected type (ignored)
-///
-/// We ignore this parameter entirely, but we do parse it.
-/// It could be used in the future if the need arises.
-enum Length {
-    /// signed/unsigned char ("hh")
-    Char,
-    /// signed/unsigned short int ("h")
-    Short,
-    /// signed/unsigned long int ("l")
-    Long,
-    /// signed/unsigned long long int ("ll")
-    LongLong,
-    /// intmax_t ("j")
-    IntMaxT,
-    /// size_t ("z")
-    SizeT,
-    /// ptrdiff_t ("t")
-    PtfDiffT,
-    /// long double ("L")
-    LongDouble,
-}
-
-#[derive(Default, PartialEq, Eq)]
-struct Flags {
-    minus: bool,
-    plus: bool,
-    space: bool,
-    hash: bool,
-    zero: bool,
-    quote: bool,
-}
-
-impl Flags {
-    pub fn parse(rest: &mut &[u8], index: &mut usize) -> Self {
-        let mut flags = Self::default();
-
-        while let Some(x) = rest.get(*index) {
-            match x {
-                b'-' => flags.minus = true,
-                b'+' => flags.plus = true,
-                b' ' => flags.space = true,
-                b'#' => flags.hash = true,
-                b'0' => flags.zero = true,
-                b'\'' => {
-                    // the thousands separator is printed with numbers using the ' flag, but
-                    // this is a no-op in the "C" locale. We only save this flag for reporting errors
-                    flags.quote = true;
-                }
-                _ => break,
-            }
-            *index += 1;
-        }
-
-        flags
-    }
-
-    /// Whether any of the flags is set to true
-    fn any(&self) -> bool {
-        self != &Self::default()
-    }
-}
-
-impl Spec {
-    pub fn parse<'a>(rest: &mut &'a [u8]) -> Result<Self, &'a [u8]> {
-        // Based on the C++ reference and the Single UNIX Specification,
-        // the spec format looks like:
-        //
-        //   %[argumentNum$][flags][width][.precision][length]specifier
-        //
-        // However, we have already parsed the '%'.
-        let mut index = 0;
-        let start = *rest;
-
-        // Check for a positional specifier (%m$)
-        let Some(position) = eat_argument_position(rest, &mut index) else {
-            return Err(&start[..index]);
-        };
-
-        let flags = Flags::parse(rest, &mut index);
-
-        let positive_sign = match flags {
-            Flags { plus: true, .. } => PositiveSign::Plus,
-            Flags { space: true, .. } => PositiveSign::Space,
-            _ => PositiveSign::None,
-        };
-
-        let width = eat_asterisk_or_number(rest, &mut index);
-
-        let precision = if let Some(b'.') = rest.get(index) {
-            index += 1;
-            Some(eat_asterisk_or_number(rest, &mut index).unwrap_or(CanAsterisk::Fixed(0)))
-        } else {
-            None
-        };
-
-        // The `0` flag is ignored if `-` is given or a precision is specified.
-        // So the only case for RightZero, is when `-` is not given and the
-        // precision is none.
-        let alignment = if flags.minus {
-            NumberAlignment::Left
-        } else if flags.zero && precision.is_none() {
-            NumberAlignment::RightZero
-        } else {
-            NumberAlignment::RightSpace
-        };
-
-        // We ignore the length. It's not really relevant to printf
-        let _ = Self::parse_length(rest, &mut index);
-
-        let Some(type_spec) = rest.get(index) else {
-            return Err(&start[..index]);
-        };
-        index += 1;
-        *rest = &start[index..];
-
-        Ok(match type_spec {
-            // GNU accepts minus, plus and space even though they are not used
-            b'c' => {
-                if flags.zero || flags.hash || precision.is_some() {
-                    return Err(&start[..index]);
-                }
-                Self::Char {
-                    position,
-                    width,
-                    align_left: flags.minus,
-                }
-            }
-            b's' => {
-                if flags.zero || flags.hash || flags.quote {
-                    return Err(&start[..index]);
-                }
-                Self::String {
-                    position,
-                    precision,
-                    width,
-                    align_left: flags.minus,
-                }
-            }
-            b'b' => {
-                if flags.any() || width.is_some() || precision.is_some() {
-                    return Err(&start[..index]);
-                }
-                Self::EscapedString { position }
-            }
-            b'q' => {
-                if flags.any() || width.is_some() || precision.is_some() {
-                    return Err(&start[..index]);
-                }
-                Self::QuotedString { position }
-            }
-            b'd' | b'i' => {
-                if flags.hash {
-                    return Err(&start[..index]);
-                }
-                Self::SignedInt {
-                    position,
-                    width,
-                    precision,
-                    alignment,
-                    positive_sign,
-                }
-            }
-            c @ (b'u' | b'o' | b'x' | b'X') => {
-                // Normal unsigned integer cannot have a prefix
-                if *c == b'u' && flags.hash {
-                    return Err(&start[..index]);
-                }
-                let prefix = if flags.hash { Prefix::Yes } else { Prefix::No };
-                let variant = match c {
-                    b'u' => UnsignedIntVariant::Decimal,
-                    b'o' => UnsignedIntVariant::Octal(prefix),
-                    b'x' => UnsignedIntVariant::Hexadecimal(Case::Lowercase, prefix),
-                    b'X' => UnsignedIntVariant::Hexadecimal(Case::Uppercase, prefix),
-                    _ => unreachable!(),
-                };
-                Self::UnsignedInt {
-                    position,
-                    variant,
-                    precision,
-                    width,
-                    alignment,
-                }
-            }
-            c @ (b'f' | b'F' | b'e' | b'E' | b'g' | b'G' | b'a' | b'A') => Self::Float {
-                position,
-                width,
-                precision,
-                variant: match c {
-                    b'f' | b'F' => FloatVariant::Decimal,
-                    b'e' | b'E' => FloatVariant::Scientific,
-                    b'g' | b'G' => FloatVariant::Shortest,
-                    b'a' | b'A' => FloatVariant::Hexadecimal,
-                    _ => unreachable!(),
-                },
-                force_decimal: if flags.hash {
-                    ForceDecimal::Yes
-                } else {
-                    ForceDecimal::No
-                },
-                case: if c.is_ascii_uppercase() {
-                    Case::Uppercase
-                } else {
-                    Case::Lowercase
-                },
-                alignment: if flags.zero && !flags.minus {
-                    NumberAlignment::RightZero // float should always try to zero pad despite the precision
-                } else {
-                    alignment
-                },
-                positive_sign,
-            },
-            _ => return Err(&start[..index]),
-        })
-    }
-
-    fn parse_length(rest: &mut &[u8], index: &mut usize) -> Option<Length> {
-        // Parse 0..N length options, keep the last one
-        // Even though it is just ignored. We might want to use it later and we
-        // should parse those characters.
-        //
-        // TODO: This needs to be configurable: `seq` accepts only one length
-        //       param
-        let mut length = None;
-        loop {
-            let new_length = rest.get(*index).and_then(|c| {
-                Some(match c {
-                    b'h' => {
-                        if let Some(b'h') = rest.get(*index + 1) {
-                            *index += 1;
-                            Length::Char
-                        } else {
-                            Length::Short
-                        }
-                    }
-                    b'l' => {
-                        if let Some(b'l') = rest.get(*index + 1) {
-                            *index += 1;
-                            Length::Long
-                        } else {
-                            Length::LongLong
-                        }
-                    }
-                    b'j' => Length::IntMaxT,
-                    b'z' => Length::SizeT,
-                    b't' => Length::PtfDiffT,
-                    b'L' => Length::LongDouble,
-                    _ => return None,
-                })
-            });
-            if new_length.is_some() {
-                *index += 1;
-                length = new_length;
-            } else {
-                break;
-            }
-        }
-        length
-    }
-
-    pub fn write(
-        &self,
-        mut writer: impl Write,
-        args: &mut FormatArguments,
-    ) -> Result<(), FormatError> {
-        match self {
-            Self::Char {
-                width,
-                align_left,
-                position,
-            } => {
-                let (width, neg_width) = resolve_asterisk_width(*width, args).unwrap_or_default();
-                write_padded(
-                    writer,
-                    &[args.next_char(*position)],
-                    width,
-                    *align_left || neg_width,
-                )
-            }
-            Self::String {
-                width,
-                align_left,
-                precision,
-                position,
-            } => {
-                let (width, neg_width) = resolve_asterisk_width(*width, args).unwrap_or_default();
-
-                // GNU does do this truncation on a byte level, see for instance:
-                //     printf "%.1s" 🙃
-                //     > �
-                // For now, we let printf panic when we truncate within a code point.
-                // TODO: We need to not use Rust's formatting for aligning the output,
-                // so that we can just write bytes to stdout without panicking.
-                let precision = resolve_asterisk_precision(*precision, args);
-                let os_str = args.next_string(*position);
-                let bytes = os_str_as_bytes(os_str)?;
-
-                let truncated = match precision {
-                    Some(p) if p < os_str.len() => &bytes[..p],
-                    _ => bytes,
-                };
-                write_padded(writer, truncated, width, *align_left || neg_width)
-            }
-            Self::EscapedString { position } => {
-                let os_str = args.next_string(*position);
-                let bytes = os_str_as_bytes(os_str)?;
-                let mut parsed = Vec::<u8>::new();
-
-                for c in parse_escape_only(bytes, OctalParsing::ThreeDigits) {
-                    match c.write(&mut parsed)? {
-                        ControlFlow::Continue(()) => {}
-                        ControlFlow::Break(()) => {
-                            // TODO: This should break the _entire execution_ of printf
-                            break;
-                        }
-                    }
-                }
-                writer.write_all(&parsed).map_err(FormatError::IoError)
-            }
-            Self::QuotedString { position } => {
-                let s = locale_aware_escape_name(
-                    args.next_string(*position),
-                    QuotingStyle::SHELL_ESCAPE,
-                );
-                let bytes = os_str_as_bytes(&s)?;
-                writer.write_all(bytes).map_err(FormatError::IoError)
-            }
-            Self::SignedInt {
-                width,
-                precision,
-                positive_sign,
-                alignment,
-                position,
-            } => {
-                let (width, neg_width) = resolve_asterisk_width(*width, args).unwrap_or((0, false));
-                let precision = resolve_asterisk_precision(*precision, args).unwrap_or_default();
-                let i = args.next_i64(*position);
-
-                if precision as u64 > i32::MAX as u64 {
-                    return Err(FormatError::InvalidPrecision(precision.to_string()));
-                }
-
-                num_format::SignedInt {
-                    width,
-                    precision,
-                    positive_sign: *positive_sign,
-                    alignment: if neg_width {
-                        NumberAlignment::Left
-                    } else {
-                        *alignment
-                    },
-                }
-                .fmt(writer, i)
-                .map_err(FormatError::IoError)
-            }
-            Self::UnsignedInt {
-                variant,
-                width,
-                precision,
-                alignment,
-                position,
-            } => {
-                let (width, neg_width) = resolve_asterisk_width(*width, args).unwrap_or((0, false));
-                let precision = resolve_asterisk_precision(*precision, args).unwrap_or_default();
-                let i = args.next_u64(*position);
-
-                if precision as u64 > i32::MAX as u64 {
-                    return Err(FormatError::InvalidPrecision(precision.to_string()));
-                }
-
-                num_format::UnsignedInt {
-                    variant: *variant,
-                    precision,
-                    width,
-                    alignment: if neg_width {
-                        NumberAlignment::Left
-                    } else {
-                        *alignment
-                    },
-                }
-                .fmt(writer, i)
-                .map_err(FormatError::IoError)
-            }
-            Self::Float {
-                variant,
-                case,
-                force_decimal,
-                width,
-                positive_sign,
-                alignment,
-                precision,
-                position,
-            } => {
-                let (width, neg_width) = resolve_asterisk_width(*width, args).unwrap_or((0, false));
-                let precision = resolve_asterisk_precision(*precision, args);
-                let f: ExtendedBigDecimal = args.next_extended_big_decimal(*position);
-
-                if precision.is_some_and(|p| p as u64 > i32::MAX as u64) {
-                    return Err(FormatError::InvalidPrecision(
-                        precision.unwrap().to_string(),
-                    ));
-                }
-
-                num_format::Float {
-                    width,
-                    precision,
-                    variant: *variant,
-                    case: *case,
-                    force_decimal: *force_decimal,
-                    positive_sign: *positive_sign,
-                    alignment: if neg_width {
-                        NumberAlignment::Left
-                    } else {
-                        *alignment
-                    },
-                }
-                .fmt(writer, &f)
-                .map_err(FormatError::IoError)
-            }
-        }
-    }
-}
-
-/// Determine the width, potentially getting a value from args
-/// Returns the non-negative width and whether the value should be left-aligned.
-fn resolve_asterisk_width(
-    option: Option<CanAsterisk<usize>>,
-    args: &mut FormatArguments,
-) -> Option<(usize, bool)> {
-    match option {
-        None => None,
-        Some(CanAsterisk::Asterisk(loc)) => {
-            let nb = args.next_i64(loc);
-            if nb < 0 {
-                Some((
-                    nb.checked_abs()
-                        .and_then(|nb| usize::try_from(nb).ok())
-                        .unwrap_or(0),
-                    true,
-                ))
-            } else {
-                Some((usize::try_from(nb).ok().unwrap_or(0), false))
-            }
-        }
-        Some(CanAsterisk::Fixed(w)) => Some((w, false)),
-    }
-}
-
-/// Determines the precision, which should (if defined)
-/// be a non-negative number.
-fn resolve_asterisk_precision(
-    option: Option<CanAsterisk<usize>>,
-    args: &mut FormatArguments,
-) -> Option<usize> {
-    match option {
-        None => None,
-        Some(CanAsterisk::Asterisk(loc)) => match args.next_i64(loc) {
-            v if v >= 0 => usize::try_from(v).ok(),
-            v if v < 0 => Some(0usize),
-            _ => None,
-        },
-        Some(CanAsterisk::Fixed(w)) => Some(w),
-    }
-}
-
-fn write_padded(
-    mut writer: impl Write,
-    text: &[u8],
-    width: usize,
-    left: bool,
-) -> Result<(), FormatError> {
-    let padlen = width.saturating_sub(text.len());
-
-    // Check if the padding length is too large for formatting
-    super::check_width(padlen).map_err(FormatError::IoError)?;
-
-    if left {
-        writer.write_all(text)?;
-        write!(writer, "{: <padlen$}", "")
-    } else {
-        write!(writer, "{: >padlen$}", "")?;
-        writer.write_all(text)
-    }
-    .map_err(FormatError::IoError)
-}
-
-/// Check for a number ending with a '$'
-fn eat_argument_position(rest: &mut &[u8], index: &mut usize) -> Option<ArgumentLocation> {
-    let original_index = *index;
-    if let Some(pos) = eat_number(rest, index) {
-        if let Some(&b'$') = rest.get(*index) {
-            *index += 1;
-            Some(ArgumentLocation::Position(NonZero::new(pos)?))
-        } else {
-            *index = original_index;
-            Some(ArgumentLocation::NextArgument)
-        }
-    } else {
-        *index = original_index;
-        Some(ArgumentLocation::NextArgument)
-    }
-}
-
-fn eat_asterisk_or_number(rest: &mut &[u8], index: &mut usize) -> Option<CanAsterisk<usize>> {
-    if let Some(b'*') = rest.get(*index) {
-        *index += 1;
-        // Check for a positional specifier (*m$)
-        Some(CanAsterisk::Asterisk(eat_argument_position(rest, index)?))
-    } else {
-        eat_number(rest, index).map(CanAsterisk::Fixed)
-    }
-}
-
-fn eat_number(rest: &mut &[u8], index: &mut usize) -> Option<usize> {
-    match rest[*index..].iter().position(|b| !b.is_ascii_digit()) {
-        None | Some(0) => None,
-        Some(i) => {
-            // Handle large numbers that would cause overflow
-            let num_str = std::str::from_utf8(&rest[*index..(*index + i)]).unwrap();
-            *index += i;
-            Some(num_str.parse().unwrap_or(usize::MAX))
-        }
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    mod resolve_asterisk_width {
-        use super::*;
-        use crate::format::FormatArgument;
-
-        #[test]
-        fn no_width() {
-            assert_eq!(
-                None,
-                resolve_asterisk_width(None, &mut FormatArguments::new(&[]))
-            );
-        }
-
-        #[test]
-        fn fixed_width() {
-            assert_eq!(
-                Some((42, false)),
-                resolve_asterisk_width(
-                    Some(CanAsterisk::Fixed(42)),
-                    &mut FormatArguments::new(&[])
-                )
-            );
-        }
-
-        #[test]
-        fn asterisks_with_numbers() {
-            assert_eq!(
-                Some((42, false)),
-                resolve_asterisk_width(
-                    Some(CanAsterisk::Asterisk(ArgumentLocation::NextArgument)),
-                    &mut FormatArguments::new(&[FormatArgument::SignedInt(42)]),
-                )
-            );
-            assert_eq!(
-                Some((42, false)),
-                resolve_asterisk_width(
-                    Some(CanAsterisk::Asterisk(ArgumentLocation::NextArgument)),
-                    &mut FormatArguments::new(&[FormatArgument::Unparsed("42".into())]),
-                )
-            );
-
-            assert_eq!(
-                Some((42, true)),
-                resolve_asterisk_width(
-                    Some(CanAsterisk::Asterisk(ArgumentLocation::NextArgument)),
-                    &mut FormatArguments::new(&[FormatArgument::SignedInt(-42)]),
-                )
-            );
-            assert_eq!(
-                Some((42, true)),
-                resolve_asterisk_width(
-                    Some(CanAsterisk::Asterisk(ArgumentLocation::NextArgument)),
-                    &mut FormatArguments::new(&[FormatArgument::Unparsed("-42".into())]),
-                )
-            );
-            assert_eq!(
-                Some((0, true)),
-                resolve_asterisk_width(
-                    Some(CanAsterisk::Asterisk(ArgumentLocation::NextArgument)),
-                    &mut FormatArguments::new(&[FormatArgument::SignedInt(i64::MIN)]),
-                )
-            );
-
-            assert_eq!(
-                Some((2, false)),
-                resolve_asterisk_width(
-                    Some(CanAsterisk::Asterisk(ArgumentLocation::Position(
-                        NonZero::new(2).unwrap()
-                    ))),
-                    &mut FormatArguments::new(&[
-                        FormatArgument::Unparsed("1".into()),
-                        FormatArgument::Unparsed("2".into()),
-                        FormatArgument::Unparsed("3".into())
-                    ]),
-                )
-            );
-        }
-    }
-
-    mod resolve_asterisk_precision {
-        use super::*;
-        use crate::format::FormatArgument;
-
-        #[test]
-        fn no_width() {
-            assert_eq!(
-                None,
-                resolve_asterisk_precision(None, &mut FormatArguments::new(&[]))
-            );
-        }
-
-        #[test]
-        fn fixed_width() {
-            assert_eq!(
-                Some(42),
-                resolve_asterisk_precision(
-                    Some(CanAsterisk::Fixed(42)),
-                    &mut FormatArguments::new(&[])
-                )
-            );
-        }
-
-        #[test]
-        fn asterisks_with_numbers() {
-            assert_eq!(
-                Some(42),
-                resolve_asterisk_precision(
-                    Some(CanAsterisk::Asterisk(ArgumentLocation::NextArgument)),
-                    &mut FormatArguments::new(&[FormatArgument::SignedInt(42)]),
-                )
-            );
-            assert_eq!(
-                Some(42),
-                resolve_asterisk_precision(
-                    Some(CanAsterisk::Asterisk(ArgumentLocation::NextArgument)),
-                    &mut FormatArguments::new(&[FormatArgument::Unparsed("42".into())]),
-                )
-            );
-
-            assert_eq!(
-                Some(0),
-                resolve_asterisk_precision(
-                    Some(CanAsterisk::Asterisk(ArgumentLocation::NextArgument)),
-                    &mut FormatArguments::new(&[FormatArgument::SignedInt(-42)]),
-                )
-            );
-            assert_eq!(
-                Some(0),
-                resolve_asterisk_precision(
-                    Some(CanAsterisk::Asterisk(ArgumentLocation::NextArgument)),
-                    &mut FormatArguments::new(&[FormatArgument::Unparsed("-42".into())]),
-                )
-            );
-            assert_eq!(
-                Some(2),
-                resolve_asterisk_precision(
-                    Some(CanAsterisk::Asterisk(ArgumentLocation::Position(
-                        NonZero::new(2).unwrap()
-                    ))),
-                    &mut FormatArguments::new(&[
-                        FormatArgument::Unparsed("1".into()),
-                        FormatArgument::Unparsed("2".into()),
-                        FormatArgument::Unparsed("3".into())
-                    ]),
-                )
-            );
-        }
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/fs.rs b/registry/native/stubs/uucore/src/lib/features/fs.rs
deleted file mode 100644
index 9c8565c6e..000000000
--- a/registry/native/stubs/uucore/src/lib/features/fs.rs
+++ /dev/null
@@ -1,1353 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Set of functions to manage regular files, special files, and links.
-
-// spell-checker:ignore backport
-
-#[cfg(unix)]
-use libc::{
-    S_IFBLK, S_IFCHR, S_IFDIR, S_IFIFO, S_IFLNK, S_IFMT, S_IFREG, S_IFSOCK, S_IRGRP, S_IROTH,
-    S_IRUSR, S_ISGID, S_ISUID, S_ISVTX, S_IWGRP, S_IWOTH, S_IWUSR, S_IXGRP, S_IXOTH, S_IXUSR,
-    mkfifo, mode_t,
-};
-#[cfg(all(unix, not(target_os = "redox")))]
-pub use libc::{major, makedev, minor};
-
-// wasmVM: WASI mode_t and permission constants (mirrors POSIX values)
-#[cfg(target_os = "wasi")]
-#[allow(non_camel_case_types)]
-pub type mode_t = u32;
-
-#[cfg(target_os = "wasi")]
-pub mod wasi_mode_consts {
-    pub const S_IFMT: u32 = 0o170000;
-    pub const S_IFSOCK: u32 = 0o140000;
-    pub const S_IFLNK: u32 = 0o120000;
-    pub const S_IFREG: u32 = 0o100000;
-    pub const S_IFBLK: u32 = 0o060000;
-    pub const S_IFDIR: u32 = 0o040000;
-    pub const S_IFCHR: u32 = 0o020000;
-    pub const S_IFIFO: u32 = 0o010000;
-    pub const S_ISUID: u32 = 0o004000;
-    pub const S_ISGID: u32 = 0o002000;
-    pub const S_ISVTX: u32 = 0o001000;
-    pub const S_IRUSR: u32 = 0o000400;
-    pub const S_IWUSR: u32 = 0o000200;
-    pub const S_IXUSR: u32 = 0o000100;
-    pub const S_IRGRP: u32 = 0o000040;
-    pub const S_IWGRP: u32 = 0o000020;
-    pub const S_IXGRP: u32 = 0o000010;
-    pub const S_IROTH: u32 = 0o000004;
-    pub const S_IWOTH: u32 = 0o000002;
-    pub const S_IXOTH: u32 = 0o000001;
-}
-#[cfg(target_os = "wasi")]
-use wasi_mode_consts::*;
-
-// wasmVM: WASI stubs for major/minor (device numbers not meaningful on VFS)
-#[cfg(target_os = "wasi")]
-pub fn major(_dev: u64) -> u32 { 0 }
-#[cfg(target_os = "wasi")]
-pub fn minor(_dev: u64) -> u32 { 0 }
-#[cfg(target_os = "wasi")]
-pub fn makedev(_major: u32, _minor: u32) -> u64 { 0 }
-use std::collections::HashSet;
-use std::collections::VecDeque;
-use std::env;
-#[cfg(unix)]
-use std::ffi::CString;
-use std::ffi::{OsStr, OsString};
-use std::fs;
-use std::fs::read_dir;
-use std::hash::Hash;
-use std::io::Stdin;
-use std::io::{Error, ErrorKind, Result as IOResult};
-#[cfg(any(unix, target_os = "wasi"))]
-use std::os::fd::AsFd;
-#[cfg(unix)]
-use std::os::unix::ffi::OsStrExt;
-#[cfg(unix)]
-use std::os::unix::fs::MetadataExt;
-use std::path::{Component, MAIN_SEPARATOR, Path, PathBuf};
-#[cfg(target_os = "windows")]
-use winapi_util::AsHandleRef;
-
-/// Used to check if the `mode` has its `perm` bit set.
-///
-/// This macro expands to `mode & perm != 0`.
-#[cfg(unix)]
-#[macro_export]
-macro_rules! has {
-    ($mode:expr, $perm:expr) => {
-        $mode & $perm != 0
-    };
-}
-
-/// Information to uniquely identify a file
-pub struct FileInformation(
-    #[cfg(unix)] nix::sys::stat::FileStat,
-    #[cfg(windows)] winapi_util::file::Information,
-    #[cfg(target_os = "wasi")] std::fs::Metadata,
-);
-
-impl FileInformation {
-    /// Get information from a currently open file
-    #[cfg(unix)]
-    pub fn from_file(file: &impl AsFd) -> IOResult<Self> {
-        let stat = nix::sys::stat::fstat(file)?;
-        Ok(Self(stat))
-    }
-
-    /// Get information from a currently open file
-    #[cfg(target_os = "windows")]
-    pub fn from_file(file: &impl AsHandleRef) -> IOResult<Self> {
-        let info = winapi_util::file::information(file.as_handle_ref())?;
-        Ok(Self(info))
-    }
-
-    /// Get information from a currently open file (WASI stub)
-    #[cfg(target_os = "wasi")]
-    pub fn from_file(_file: &impl AsFd) -> IOResult<Self> {
-        Err(Error::new(ErrorKind::Unsupported, "from_file not yet supported on WASI"))
-    }
-
-    /// Get information for a given path.
-    ///
-    /// If `path` points to a symlink and `dereference` is true, information about
-    /// the link's target will be returned.
-    pub fn from_path(path: impl AsRef<Path>, dereference: bool) -> IOResult<Self> {
-        #[cfg(unix)]
-        {
-            let stat = if dereference {
-                nix::sys::stat::stat(path.as_ref())
-            } else {
-                nix::sys::stat::lstat(path.as_ref())
-            };
-            Ok(Self(stat?))
-        }
-        #[cfg(target_os = "windows")]
-        {
-            use std::fs::OpenOptions;
-            use std::os::windows::prelude::*;
-            let mut open_options = OpenOptions::new();
-            let mut custom_flags = 0;
-            if !dereference {
-                custom_flags |=
-                    windows_sys::Win32::Storage::FileSystem::FILE_FLAG_OPEN_REPARSE_POINT;
-            }
-            custom_flags |= windows_sys::Win32::Storage::FileSystem::FILE_FLAG_BACKUP_SEMANTICS;
-            open_options.custom_flags(custom_flags);
-            let file = open_options.read(true).open(path.as_ref())?;
-            Self::from_file(&file)
-        }
-        #[cfg(target_os = "wasi")]
-        {
-            let meta = if dereference {
-                fs::metadata(path.as_ref())?
-            } else {
-                fs::symlink_metadata(path.as_ref())?
-            };
-            Ok(Self(meta))
-        }
-    }
-
-    pub fn file_size(&self) -> u64 {
-        #[cfg(unix)]
-        {
-            assert!(self.0.st_size >= 0, "File size is negative");
-            self.0.st_size.try_into().unwrap()
-        }
-        #[cfg(target_os = "windows")]
-        {
-            self.0.file_size()
-        }
-        #[cfg(target_os = "wasi")]
-        {
-            self.0.len()
-        }
-    }
-
-    #[cfg(windows)]
-    pub fn file_index(&self) -> u64 {
-        self.0.file_index()
-    }
-
-    pub fn number_of_links(&self) -> u64 {
-        #[cfg(all(
-            unix,
-            not(target_vendor = "apple"),
-            not(target_os = "aix"),
-            not(target_os = "android"),
-            not(target_os = "freebsd"),
-            not(target_os = "netbsd"),
-            not(target_os = "openbsd"),
-            not(target_os = "illumos"),
-            not(target_os = "solaris"),
-            not(target_os = "cygwin"),
-            not(target_arch = "aarch64"),
-            not(target_arch = "riscv64"),
-            not(target_arch = "loongarch64"),
-            not(target_arch = "sparc64"),
-            target_pointer_width = "64"
-        ))]
-        return self.0.st_nlink;
-        #[cfg(all(
-            unix,
-            any(
-                target_vendor = "apple",
-                target_os = "android",
-                target_os = "netbsd",
-                target_os = "openbsd",
-                target_os = "illumos",
-                target_os = "solaris",
-                target_os = "cygwin",
-                target_arch = "aarch64",
-                target_arch = "riscv64",
-                target_arch = "loongarch64",
-                target_arch = "sparc64",
-                not(target_pointer_width = "64")
-            )
-        ))]
-        return self.0.st_nlink.into();
-        #[cfg(target_os = "freebsd")]
-        return self.0.st_nlink;
-        #[cfg(target_os = "aix")]
-        return self.0.st_nlink.try_into().unwrap();
-        #[cfg(windows)]
-        return self.0.number_of_links();
-        #[cfg(target_os = "wasi")]
-        {
-            use std::os::wasi::fs::MetadataExt;
-            return self.0.nlink();
-        }
-    }
-
-    #[cfg(unix)]
-    pub fn inode(&self) -> u64 {
-        #[cfg(all(not(any(target_os = "netbsd")), target_pointer_width = "64"))]
-        return self.0.st_ino;
-        #[cfg(any(target_os = "netbsd", not(target_pointer_width = "64")))]
-        return self.0.st_ino.into();
-    }
-
-    #[cfg(target_os = "wasi")]
-    pub fn inode(&self) -> u64 {
-        use std::os::wasi::fs::MetadataExt;
-        self.0.ino()
-    }
-}
-
-#[cfg(unix)]
-impl PartialEq for FileInformation {
-    fn eq(&self, other: &Self) -> bool {
-        self.0.st_dev == other.0.st_dev && self.0.st_ino == other.0.st_ino
-    }
-}
-
-#[cfg(target_os = "windows")]
-impl PartialEq for FileInformation {
-    fn eq(&self, other: &Self) -> bool {
-        self.0.volume_serial_number() == other.0.volume_serial_number()
-            && self.0.file_index() == other.0.file_index()
-    }
-}
-
-#[cfg(target_os = "wasi")]
-impl PartialEq for FileInformation {
-    fn eq(&self, other: &Self) -> bool {
-        use std::os::wasi::fs::MetadataExt;
-        self.0.dev() == other.0.dev() && self.0.ino() == other.0.ino()
-    }
-}
-
-impl Eq for FileInformation {}
-
-impl Hash for FileInformation {
-    fn hash<H: std::hash::Hasher>(&self, state: &mut H) {
-        #[cfg(unix)]
-        {
-            self.0.st_dev.hash(state);
-            self.0.st_ino.hash(state);
-        }
-        #[cfg(target_os = "windows")]
-        {
-            self.0.volume_serial_number().hash(state);
-            self.0.file_index().hash(state);
-        }
-        #[cfg(target_os = "wasi")]
-        {
-            use std::os::wasi::fs::MetadataExt;
-            self.0.dev().hash(state);
-            self.0.ino().hash(state);
-        }
-    }
-}
-
-/// Controls how symbolic links should be handled when canonicalizing a path.
-#[derive(Clone, Copy, Debug, Eq, PartialEq)]
-pub enum MissingHandling {
-    /// Return an error if any part of the path is missing.
-    Normal,
-
-    /// Resolve symbolic links, ignoring errors on the final component.
-    Existing,
-
-    /// Resolve symbolic links, ignoring errors on the non-final components.
-    Missing,
-}
-
-/// Controls when symbolic links are resolved
-#[derive(Clone, Copy, Debug, Eq, PartialEq)]
-pub enum ResolveMode {
-    /// Do not resolve any symbolic links.
-    None,
-
-    /// Resolve symlinks as encountered when processing the path
-    Physical,
-
-    /// Resolve '..' elements before symlinks
-    Logical,
-}
-
-/// Normalize a path by removing relative information
-/// For example, convert 'bar/../foo/bar.txt' => 'foo/bar.txt'
-/// copied from `<https://github.com/rust-lang/cargo/blob/2e4cfc2b7d43328b207879228a2ca7d427d188bb/src/cargo/util/paths.rs#L65-L90>`
-/// both projects are MIT `<https://github.com/rust-lang/cargo/blob/master/LICENSE-MIT>`
-/// for std impl progress see rfc `<https://github.com/rust-lang/rfcs/issues/2208>`
-/// replace this once that lands
-pub fn normalize_path(path: &Path) -> PathBuf {
-    let mut components = path.components().peekable();
-    let mut ret = if let Some(c @ Component::Prefix(..)) = components.peek().copied() {
-        components.next();
-        PathBuf::from(c.as_os_str())
-    } else {
-        PathBuf::new()
-    };
-
-    for component in components {
-        match component {
-            Component::Prefix(..) => unreachable!(),
-            Component::RootDir => {
-                ret.push(component.as_os_str());
-            }
-            Component::CurDir => {}
-            Component::ParentDir => {
-                if ret.as_os_str().is_empty()
-                    || matches!(ret.components().next_back(), Some(Component::ParentDir))
-                {
-                    ret.push("..");
-                } else {
-                    ret.pop();
-                }
-            }
-            Component::Normal(c) => {
-                ret.push(c);
-            }
-        }
-    }
-
-    if ret.as_os_str().is_empty() {
-        ret.push(".");
-    }
-
-    ret
-}
-
-fn resolve_symlink<P: AsRef<Path>>(path: P) -> IOResult<Option<PathBuf>> {
-    #[cfg(target_os = "wasi")]
-    {
-        let path = path.as_ref();
-        match fs::read_link(path) {
-            Ok(target) => Ok(Some(target)),
-            Err(err)
-                if err.kind() == ErrorKind::InvalidInput
-                    || (err.raw_os_error() == Some(2) && fs::metadata(path).is_ok()) =>
-            {
-                Ok(None)
-            }
-            Err(err) => {
-                let meta = fs::symlink_metadata(path)?;
-                if meta.file_type().is_symlink() {
-                    Err(err)
-                } else {
-                    Ok(None)
-                }
-            }
-        }
-    }
-    #[cfg(not(target_os = "wasi"))]
-    {
-        let result = if fs::symlink_metadata(&path)?.file_type().is_symlink() {
-            Some(fs::read_link(&path)?)
-        } else {
-            None
-        };
-        Ok(result)
-    }
-}
-
-enum OwningComponent {
-    Prefix(OsString),
-    RootDir,
-    CurDir,
-    ParentDir,
-    Normal(OsString),
-}
-
-impl OwningComponent {
-    fn as_os_str(&self) -> &OsStr {
-        match self {
-            Self::Prefix(s) => s.as_os_str(),
-            Self::RootDir => Component::RootDir.as_os_str(),
-            Self::CurDir => Component::CurDir.as_os_str(),
-            Self::ParentDir => Component::ParentDir.as_os_str(),
-            Self::Normal(s) => s.as_os_str(),
-        }
-    }
-}
-
-impl<'a> From<Component<'a>> for OwningComponent {
-    fn from(comp: Component<'a>) -> Self {
-        match comp {
-            Component::Prefix(_) => Self::Prefix(comp.as_os_str().to_os_string()),
-            Component::RootDir => Self::RootDir,
-            Component::CurDir => Self::CurDir,
-            Component::ParentDir => Self::ParentDir,
-            Component::Normal(s) => Self::Normal(s.to_os_string()),
-        }
-    }
-}
-
-/// Return the canonical, absolute form of a path.
-///
-/// This function is a generalization of [`std::fs::canonicalize`] that
-/// allows controlling how symbolic links are resolved and how to deal
-/// with missing components. It returns the canonical, absolute form of
-/// a path.
-/// The `miss_mode` parameter controls how missing path elements are handled
-///
-/// * [`MissingHandling::Normal`] makes this function behave like
-///   [`std::fs::canonicalize`], resolving symbolic links and returning
-///   an error if the path does not exist.
-/// * [`MissingHandling::Missing`] makes this function ignore non-final
-///   components of the path that could not be resolved.
-/// * [`MissingHandling::Existing`] makes this function return an error
-///   if the final component of the path does not exist.
-///
-/// The `res_mode` parameter controls how symbolic links are
-/// resolved:
-///
-/// * [`ResolveMode::None`] makes this function not try to resolve
-///   any symbolic links.
-/// * [`ResolveMode::Physical`] makes this function resolve symlinks as they
-///   are encountered
-/// * [`ResolveMode::Logical`] makes this function resolve '..' components
-///   before symlinks
-///
-#[allow(clippy::cognitive_complexity)]
-pub fn canonicalize<P: AsRef<Path>>(
-    original: P,
-    miss_mode: MissingHandling,
-    res_mode: ResolveMode,
-) -> IOResult<PathBuf> {
-    const SYMLINKS_TO_LOOK_FOR_LOOPS: i32 = 20;
-    let original = original.as_ref();
-    let has_to_be_directory =
-        (miss_mode == MissingHandling::Normal || miss_mode == MissingHandling::Existing) && {
-            let path_str = original.to_string_lossy();
-            path_str.ends_with(MAIN_SEPARATOR) || path_str.ends_with('/')
-        };
-    let original = if original.is_absolute() {
-        original.to_path_buf()
-    } else {
-        let current_dir = env::current_dir()?;
-        dunce::canonicalize(current_dir)?.join(original)
-    };
-    let path = if res_mode == ResolveMode::Logical {
-        normalize_path(&original)
-    } else {
-        original
-    };
-    let mut parts: VecDeque<OwningComponent> = path.components().map(Into::into).collect();
-    let mut result = PathBuf::new();
-    let mut followed_symlinks = 0;
-    let mut visited_files = HashSet::new();
-    while let Some(part) = parts.pop_front() {
-        match part {
-            OwningComponent::Prefix(s) => {
-                result.push(s);
-                continue;
-            }
-            OwningComponent::RootDir | OwningComponent::Normal(..) => {
-                result.push(part.as_os_str());
-            }
-            OwningComponent::CurDir => {}
-            OwningComponent::ParentDir => {
-                result.pop();
-            }
-        }
-        if res_mode == ResolveMode::None {
-            continue;
-        }
-        match resolve_symlink(&result) {
-            Ok(Some(link_path)) => {
-                for link_part in link_path.components().rev() {
-                    parts.push_front(link_part.into());
-                }
-                if followed_symlinks < SYMLINKS_TO_LOOK_FOR_LOOPS {
-                    followed_symlinks += 1;
-                } else {
-                    let parent = result.parent().ok_or_else(|| {
-                        Error::new(ErrorKind::InvalidInput, "Too many levels of symbolic links")
-                    })?;
-                    let file_info = FileInformation::from_path(parent, false)?;
-                    let mut path_to_follow = PathBuf::new();
-                    for part in &parts {
-                        path_to_follow.push(part.as_os_str());
-                    }
-                    if !visited_files.insert((file_info, path_to_follow)) {
-                        return Err(Error::new(
-                            ErrorKind::InvalidInput,
-                            "Too many levels of symbolic links",
-                        )); // TODO use ErrorKind::FilesystemLoop when stable
-                    }
-                }
-                result.pop();
-            }
-            Err(e) => {
-                if miss_mode == MissingHandling::Existing
-                    || (miss_mode == MissingHandling::Normal && !parts.is_empty())
-                {
-                    return Err(e);
-                }
-            }
-            _ => {}
-        }
-    }
-    // raise Not a directory if required
-    match miss_mode {
-        MissingHandling::Existing => {
-            if has_to_be_directory {
-                read_dir(&result)?;
-            }
-        }
-        MissingHandling::Normal => {
-            if result.exists() {
-                if has_to_be_directory {
-                    read_dir(&result)?;
-                }
-            } else if let Some(parent) = result.parent() {
-                read_dir(parent)?;
-            }
-        }
-        MissingHandling::Missing => {}
-    }
-    Ok(result)
-}
-
-#[cfg(not(unix))]
-/// Display the permissions of a file
-pub fn display_permissions(metadata: &fs::Metadata, display_file_type: bool) -> String {
-    let write = if metadata.permissions().readonly() {
-        '-'
-    } else {
-        'w'
-    };
-
-    if display_file_type {
-        let file_type = if metadata.is_symlink() {
-            'l'
-        } else if metadata.is_dir() {
-            'd'
-        } else {
-            '-'
-        };
-
-        format!("{file_type}r{write}xr{write}xr{write}x")
-    } else {
-        format!("r{write}xr{write}xr{write}x")
-    }
-}
-
-#[cfg(unix)]
-/// Display the permissions of a file
-pub fn display_permissions(metadata: &fs::Metadata, display_file_type: bool) -> String {
-    let mode: mode_t = metadata.mode() as mode_t;
-    display_permissions_unix(mode, display_file_type)
-}
-
-/// Returns a character representation of the file type based on its mode.
-/// This function is specific to Unix-like systems.
-///
-/// - `mode`: The mode of the file, typically obtained from file metadata.
-///
-/// # Returns
-/// - 'd' for directories
-/// - 'c' for character devices
-/// - 'b' for block devices
-/// - '-' for regular files
-/// - 'p' for FIFOs (named pipes)
-/// - 'l' for symbolic links
-/// - 's' for sockets
-/// - '?' for any other unrecognized file types
-#[cfg(unix)]
-fn get_file_display(mode: mode_t) -> char {
-    match mode & S_IFMT {
-        S_IFDIR => 'd',
-        S_IFCHR => 'c',
-        S_IFBLK => 'b',
-        S_IFREG => '-',
-        S_IFIFO => 'p',
-        S_IFLNK => 'l',
-        S_IFSOCK => 's',
-        // TODO: Other file types
-        _ => '?',
-    }
-}
-
-// The logic below is more readable written this way.
-#[allow(clippy::if_not_else)]
-#[allow(clippy::cognitive_complexity)]
-#[cfg(unix)]
-/// Display the permissions of a file on a unix like system
-pub fn display_permissions_unix(mode: mode_t, display_file_type: bool) -> String {
-    let mut result;
-    if display_file_type {
-        result = String::with_capacity(10);
-        result.push(get_file_display(mode));
-    } else {
-        result = String::with_capacity(9);
-    }
-
-    result.push(if has!(mode, S_IRUSR) { 'r' } else { '-' });
-    result.push(if has!(mode, S_IWUSR) { 'w' } else { '-' });
-    result.push(if has!(mode, S_ISUID as mode_t) {
-        if has!(mode, S_IXUSR) { 's' } else { 'S' }
-    } else if has!(mode, S_IXUSR) {
-        'x'
-    } else {
-        '-'
-    });
-
-    result.push(if has!(mode, S_IRGRP) { 'r' } else { '-' });
-    result.push(if has!(mode, S_IWGRP) { 'w' } else { '-' });
-    result.push(if has!(mode, S_ISGID as mode_t) {
-        if has!(mode, S_IXGRP) { 's' } else { 'S' }
-    } else if has!(mode, S_IXGRP) {
-        'x'
-    } else {
-        '-'
-    });
-
-    result.push(if has!(mode, S_IROTH) { 'r' } else { '-' });
-    result.push(if has!(mode, S_IWOTH) { 'w' } else { '-' });
-    result.push(if has!(mode, S_ISVTX as mode_t) {
-        if has!(mode, S_IXOTH) { 't' } else { 'T' }
-    } else if has!(mode, S_IXOTH) {
-        'x'
-    } else {
-        '-'
-    });
-
-    result
-}
-
-// wasmVM: WASI version of display_permissions_unix (same logic, uses our constants)
-#[cfg(target_os = "wasi")]
-pub fn display_permissions_unix(mode: mode_t, display_file_type: bool) -> String {
-    let mut result;
-    if display_file_type {
-        result = String::with_capacity(10);
-        result.push(match mode & S_IFMT {
-            v if v == S_IFDIR => 'd',
-            v if v == S_IFCHR => 'c',
-            v if v == S_IFBLK => 'b',
-            v if v == S_IFREG => '-',
-            v if v == S_IFIFO => 'p',
-            v if v == S_IFLNK => 'l',
-            v if v == S_IFSOCK => 's',
-            _ => '?',
-        });
-    } else {
-        result = String::with_capacity(9);
-    }
-    result.push(if mode & S_IRUSR != 0 { 'r' } else { '-' });
-    result.push(if mode & S_IWUSR != 0 { 'w' } else { '-' });
-    result.push(if mode & S_ISUID != 0 {
-        if mode & S_IXUSR != 0 { 's' } else { 'S' }
-    } else if mode & S_IXUSR != 0 { 'x' } else { '-' });
-    result.push(if mode & S_IRGRP != 0 { 'r' } else { '-' });
-    result.push(if mode & S_IWGRP != 0 { 'w' } else { '-' });
-    result.push(if mode & S_ISGID != 0 {
-        if mode & S_IXGRP != 0 { 's' } else { 'S' }
-    } else if mode & S_IXGRP != 0 { 'x' } else { '-' });
-    result.push(if mode & S_IROTH != 0 { 'r' } else { '-' });
-    result.push(if mode & S_IWOTH != 0 { 'w' } else { '-' });
-    result.push(if mode & S_ISVTX != 0 {
-        if mode & S_IXOTH != 0 { 't' } else { 'T' }
-    } else if mode & S_IXOTH != 0 { 'x' } else { '-' });
-    result
-}
-
-/// For some programs like install or mkdir, dir/. or dir/./ can be provided
-/// Special case to match GNU's behavior:
-/// install -d foo/. (and foo/./) should work and just create foo/
-/// std::fs::create_dir("foo/."); fails in pure Rust
-pub fn dir_strip_dot_for_creation(path: &Path) -> PathBuf {
-    let path_str = path.to_string_lossy();
-
-    if path_str.ends_with("/.") || path_str.ends_with("/./") {
-        // Do a simple dance to strip the "/."
-        Path::new(&path).components().collect()
-    } else {
-        path.to_path_buf()
-    }
-}
-
-/// Checks if `p1` and `p2` are the same file.
-/// If error happens when trying to get files' metadata, returns false
-pub fn paths_refer_to_same_file<P: AsRef<Path>>(p1: P, p2: P, dereference: bool) -> bool {
-    infos_refer_to_same_file(
-        FileInformation::from_path(p1, dereference),
-        FileInformation::from_path(p2, dereference),
-    )
-}
-
-/// Checks if `p1` and `p2` are the same file information.
-/// If error happens when trying to get files' metadata, returns false
-pub fn infos_refer_to_same_file(
-    info1: IOResult<FileInformation>,
-    info2: IOResult<FileInformation>,
-) -> bool {
-    if let Ok(info1) = info1 {
-        if let Ok(info2) = info2 {
-            return info1 == info2;
-        }
-    }
-    false
-}
-
-/// Converts absolute `path` to be relative to absolute `to` path.
-pub fn make_path_relative_to<P1: AsRef<Path>, P2: AsRef<Path>>(path: P1, to: P2) -> PathBuf {
-    let path = path.as_ref();
-    let to = to.as_ref();
-    let common_prefix_size = path
-        .components()
-        .zip(to.components())
-        .take_while(|(first, second)| first == second)
-        .count();
-    let path_suffix = path
-        .components()
-        .skip(common_prefix_size)
-        .map(Component::as_os_str);
-    let mut components: Vec<_> = to
-        .components()
-        .skip(common_prefix_size)
-        .map(|_| Component::ParentDir.as_os_str())
-        .chain(path_suffix)
-        .collect();
-    if components.is_empty() {
-        components.push(Component::CurDir.as_os_str());
-    }
-    components.iter().collect()
-}
-
-/// Checks if there is a symlink loop in the given path.
-///
-/// A symlink loop is a chain of symlinks where the last symlink points back to one of the previous symlinks in the chain.
-///
-/// # Arguments
-///
-/// * `path` - A reference to a `Path` representing the starting path to check for symlink loops.
-///
-/// # Returns
-///
-/// * `bool` - Returns `true` if a symlink loop is detected, `false` otherwise.
-pub fn is_symlink_loop(path: &Path) -> bool {
-    let mut visited_symlinks = HashSet::new();
-    let mut current_path = path.to_path_buf();
-
-    while let (Ok(metadata), Ok(link)) = (
-        current_path.symlink_metadata(),
-        fs::read_link(&current_path),
-    ) {
-        if !metadata.file_type().is_symlink() {
-            return false;
-        }
-        if !visited_symlinks.insert(current_path.clone()) {
-            return true;
-        }
-        current_path = link;
-    }
-
-    false
-}
-
-#[cfg(not(unix))]
-// Hard link comparison is not supported on non-Unix platforms
-pub fn are_hardlinks_to_same_file(_source: &Path, _target: &Path) -> bool {
-    false
-}
-
-/// Checks if two paths are hard links to the same file.
-///
-/// # Arguments
-///
-/// * `source` - A reference to a `Path` representing the source path.
-/// * `target` - A reference to a `Path` representing the target path.
-///
-/// # Returns
-///
-/// * `bool` - Returns `true` if the paths are hard links to the same file, and `false` otherwise.
-#[cfg(unix)]
-pub fn are_hardlinks_to_same_file(source: &Path, target: &Path) -> bool {
-    let (Ok(source_metadata), Ok(target_metadata)) =
-        (fs::symlink_metadata(source), fs::symlink_metadata(target))
-    else {
-        return false;
-    };
-
-    source_metadata.ino() == target_metadata.ino() && source_metadata.dev() == target_metadata.dev()
-}
-
-#[cfg(not(unix))]
-pub fn are_hardlinks_or_one_way_symlink_to_same_file(_source: &Path, _target: &Path) -> bool {
-    false
-}
-
-/// Checks if either two paths are hard links to the same file or if the source path is a symbolic link which when fully resolved points to target path
-///
-/// # Arguments
-///
-/// * `source` - A reference to a `Path` representing the source path.
-/// * `target` - A reference to a `Path` representing the target path.
-///
-/// # Returns
-///
-/// * `bool` - Returns `true` if either of above conditions are true, and `false` otherwise.
-#[cfg(unix)]
-pub fn are_hardlinks_or_one_way_symlink_to_same_file(source: &Path, target: &Path) -> bool {
-    let (Ok(source_metadata), Ok(target_metadata)) =
-        (fs::metadata(source), fs::symlink_metadata(target))
-    else {
-        return false;
-    };
-
-    source_metadata.ino() == target_metadata.ino() && source_metadata.dev() == target_metadata.dev()
-}
-
-/// Returns true if the passed `path` ends with a path terminator.
-///
-/// This function examines the last character of the path to determine
-/// if it is a directory separator. It supports both Unix-style (`/`)
-/// and Windows-style (`\`) separators.
-///
-/// # Arguments
-///
-/// * `path` - A reference to the path to be checked.
-#[cfg(unix)]
-pub fn path_ends_with_terminator(path: &Path) -> bool {
-    use std::os::unix::prelude::OsStrExt;
-    path.as_os_str()
-        .as_bytes()
-        .last()
-        .is_some_and(|&byte| byte == b'/')
-}
-
-#[cfg(windows)]
-pub fn path_ends_with_terminator(path: &Path) -> bool {
-    use std::os::windows::prelude::OsStrExt;
-    path.as_os_str()
-        .encode_wide()
-        .last()
-        .is_some_and(|wide| wide == b'/'.into() || wide == b'\\'.into())
-}
-
-// wasmVM: WASI paths are UTF-8 strings, check for trailing '/'
-#[cfg(target_os = "wasi")]
-pub fn path_ends_with_terminator(path: &Path) -> bool {
-    path.as_os_str()
-        .as_encoded_bytes()
-        .last()
-        .is_some_and(|&byte| byte == b'/')
-}
-
-/// Checks if the standard input (stdin) is a directory.
-///
-/// # Arguments
-///
-/// * `stdin` - A reference to the standard input handle.
-///
-/// # Returns
-///
-/// * `bool` - Returns `true` if stdin is a directory, `false` otherwise.
-pub fn is_stdin_directory(stdin: &Stdin) -> bool {
-    #[cfg(unix)]
-    {
-        use nix::sys::stat::fstat;
-        let mode = fstat(stdin.as_fd()).unwrap().st_mode as mode_t;
-        // We use the S_IFMT mask ala S_ISDIR() to avoid mistaking
-        // sockets for directories.
-        mode & S_IFMT == S_IFDIR
-    }
-
-    #[cfg(windows)]
-    {
-        use std::os::windows::io::AsRawHandle;
-        let handle = stdin.as_raw_handle();
-        if let Ok(metadata) = fs::metadata(format!("{}", handle as usize)) {
-            return metadata.is_dir();
-        }
-        false
-    }
-
-    #[cfg(target_os = "wasi")]
-    {
-        let _ = stdin;
-        false
-    }
-}
-
-pub mod sane_blksize {
-
-    #[cfg(unix)]
-    use std::os::unix::fs::MetadataExt;
-    use std::{fs::metadata, path::Path};
-
-    pub const DEFAULT: u64 = 512;
-    pub const MAX: u64 = (u32::MAX / 8 + 1) as u64;
-
-    /// Provides sanity checked blksize value from the provided value.
-    ///
-    /// If the provided value is a invalid values a meaningful adaption
-    /// of that value is done.
-    pub fn sane_blksize(st_blksize: u64) -> u64 {
-        match st_blksize {
-            0 => DEFAULT,
-            1..=MAX => st_blksize,
-            _ => DEFAULT,
-        }
-    }
-
-    /// Provides the blksize information from the provided metadata.
-    ///
-    /// If the metadata contain invalid values a meaningful adaption
-    /// of that value is done.
-    pub fn sane_blksize_from_metadata(
-        #[cfg(unix)] metadata: &std::fs::Metadata,
-        #[cfg(not(unix))] _: &std::fs::Metadata,
-    ) -> u64 {
-        #[cfg(unix)]
-        {
-            sane_blksize(metadata.blksize())
-        }
-
-        #[cfg(not(unix))]
-        {
-            DEFAULT
-        }
-    }
-
-    /// Provides the blksize information from given file path's filesystem.
-    ///
-    /// If the metadata can't be fetched or contain invalid values a
-    /// meaningful adaption of that value is done.
-    pub fn sane_blksize_from_path(path: &Path) -> u64 {
-        match metadata(path) {
-            Ok(metadata) => sane_blksize_from_metadata(&metadata),
-            Err(_) => DEFAULT,
-        }
-    }
-}
-
-/// Extracts the filename component from the given `file` path and returns it as an `Option<&str>`.
-///
-/// If the `file` path contains a filename, this function returns `Some(filename)` where `filename` is
-/// the extracted filename as a string slice (`&str`). If the `file` path does not have a filename
-/// component or if the filename is not valid UTF-8, it returns `None`.
-///
-/// # Arguments
-///
-/// * `file`: A reference to a `Path` representing the file path from which to extract the filename.
-///
-/// # Returns
-///
-/// * `Some(filename)`: If a valid filename exists in the `file` path, where `filename` is the
-///   extracted filename as a string slice (`&str`).
-/// * `None`: If the `file` path does not contain a valid filename or if the filename is not valid UTF-8.
-pub fn get_filename(file: &Path) -> Option<&str> {
-    file.file_name().and_then(|filename| filename.to_str())
-}
-
-/// Make a FIFO, also known as a named pipe.
-///
-/// This is a safe wrapper for the unsafe [`libc::mkfifo`] function,
-/// which makes a [named
-/// pipe](https://en.wikipedia.org/wiki/Named_pipe) on Unix systems.
-///
-/// # Errors
-///
-/// If the named pipe cannot be created.
-///
-/// # Examples
-///
-/// ```ignore
-/// use uucore::fs::make_fifo;
-///
-/// make_fifo("my-pipe").expect("failed to create the named pipe");
-///
-/// std::thread::spawn(|| { std::fs::write("my-pipe", b"hello").unwrap(); });
-/// assert_eq!(std::fs::read("my-pipe").unwrap(), b"hello");
-/// ```
-#[cfg(unix)]
-pub fn make_fifo(path: &Path) -> std::io::Result<()> {
-    let name = CString::new(path.as_os_str().as_bytes())
-        .map_err(|err| Error::new(ErrorKind::InvalidInput, err))?;
-    let err = unsafe { mkfifo(name.as_ptr(), 0o666) };
-    if err == -1 {
-        Err(Error::last_os_error())
-    } else {
-        Ok(())
-    }
-}
-
-// Redox's libc appears not to include the following utilities
-
-#[cfg(target_os = "redox")]
-pub fn major(dev: libc::dev_t) -> libc::c_uint {
-    (((dev >> 8) & 0xFFF) | ((dev >> 32) & 0xFFFFF000)) as _
-}
-
-#[cfg(target_os = "redox")]
-pub fn minor(dev: libc::dev_t) -> libc::c_uint {
-    ((dev & 0xFF) | ((dev >> 12) & 0xFFFFF00)) as _
-}
-
-#[cfg(target_os = "redox")]
-pub fn makedev(maj: libc::c_uint, min: libc::c_uint) -> libc::dev_t {
-    let [maj, min] = [maj as libc::dev_t, min as libc::dev_t];
-    (min & 0xff) | ((maj & 0xfff) << 8) | ((min & !0xff) << 12) | ((maj & !0xfff) << 32)
-}
-
-#[cfg(test)]
-mod tests {
-    // Note this useful idiom: importing names from outer (for mod tests) scope.
-    use super::*;
-    #[cfg(unix)]
-    use std::io::Write;
-    #[cfg(unix)]
-    use std::os::unix;
-    #[cfg(unix)]
-    use std::os::unix::ffi::OsStrExt;
-    #[cfg(unix)]
-    use std::os::unix::fs::FileTypeExt;
-    #[cfg(unix)]
-    use tempfile::{NamedTempFile, tempdir};
-
-    struct NormalizePathTestCase<'a> {
-        path: &'a str,
-        test: &'a str,
-    }
-
-    const NORMALIZE_PATH_TESTS: [NormalizePathTestCase; 15] = [
-        NormalizePathTestCase {
-            path: "foo/bar/../..",
-            test: ".",
-        },
-        NormalizePathTestCase {
-            path: ".",
-            test: ".",
-        },
-        // Should not try to eliminate leading .. components,
-        // as it may point to a sibling of the current dir
-        NormalizePathTestCase {
-            path: "../foo",
-            test: "../foo",
-        },
-        // Try to go down, then escape above current dir and back down again
-        NormalizePathTestCase {
-            path: "foo/../../../bar/baz",
-            test: "../../bar/baz",
-        },
-        NormalizePathTestCase {
-            path: "../../foo/..",
-            test: "../..",
-        },
-        NormalizePathTestCase {
-            path: "foo/../../..",
-            test: "../..",
-        },
-        NormalizePathTestCase {
-            path: "foo/bar/../../..",
-            test: "..",
-        },
-        NormalizePathTestCase {
-            path: "./foo/bar.txt",
-            test: "foo/bar.txt",
-        },
-        NormalizePathTestCase {
-            path: "bar/../foo/bar.txt",
-            test: "foo/bar.txt",
-        },
-        NormalizePathTestCase {
-            path: "foo///bar.txt",
-            test: "foo/bar.txt",
-        },
-        NormalizePathTestCase {
-            path: "foo///bar",
-            test: "foo/bar",
-        },
-        NormalizePathTestCase {
-            path: "foo//./bar",
-            test: "foo/bar",
-        },
-        NormalizePathTestCase {
-            path: "/foo//./bar",
-            test: "/foo/bar",
-        },
-        NormalizePathTestCase {
-            path: r"C:/you/later/",
-            test: "C:/you/later",
-        },
-        NormalizePathTestCase {
-            path: "\\networkShare/a//foo//./bar",
-            test: "\\networkShare/a/foo/bar",
-        },
-    ];
-
-    #[test]
-    fn test_normalize_path() {
-        for test in &NORMALIZE_PATH_TESTS {
-            let path = Path::new(test.path);
-            let normalized = normalize_path(path);
-            assert_eq!(
-                test.test.replace('/', MAIN_SEPARATOR.to_string().as_str()),
-                normalized.to_str().expect("Path is not valid utf-8!")
-            );
-        }
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn test_display_permissions() {
-        // spell-checker:ignore (perms) brwsr drwxr rwxr
-        assert_eq!(
-            "drwxr-xr-x",
-            display_permissions_unix(S_IFDIR | 0o755, true)
-        );
-        assert_eq!(
-            "rwxr-xr-x",
-            display_permissions_unix(S_IFDIR | 0o755, false)
-        );
-        assert_eq!(
-            "-rw-r--r--",
-            display_permissions_unix(S_IFREG | 0o644, true)
-        );
-        assert_eq!(
-            "srw-r-----",
-            display_permissions_unix(S_IFSOCK | 0o640, true)
-        );
-        assert_eq!(
-            "lrw-r-xr-x",
-            display_permissions_unix(S_IFLNK | 0o655, true)
-        );
-        assert_eq!("?rw-r-xr-x", display_permissions_unix(0o655, true));
-
-        assert_eq!(
-            "brwSr-xr-x",
-            display_permissions_unix(S_IFBLK | S_ISUID as mode_t | 0o655, true)
-        );
-        assert_eq!(
-            "brwsr-xr-x",
-            display_permissions_unix(S_IFBLK | S_ISUID as mode_t | 0o755, true)
-        );
-
-        assert_eq!(
-            "prw---sr--",
-            display_permissions_unix(S_IFIFO | S_ISGID as mode_t | 0o614, true)
-        );
-        assert_eq!(
-            "prw---Sr--",
-            display_permissions_unix(S_IFIFO | S_ISGID as mode_t | 0o604, true)
-        );
-
-        assert_eq!(
-            "c---r-xr-t",
-            display_permissions_unix(S_IFCHR | S_ISVTX as mode_t | 0o055, true)
-        );
-        assert_eq!(
-            "c---r-xr-T",
-            display_permissions_unix(S_IFCHR | S_ISVTX as mode_t | 0o054, true)
-        );
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn test_is_symlink_loop_no_loop() {
-        let temp_dir = tempdir().unwrap();
-        let file_path = temp_dir.path().join("file.txt");
-        let symlink_path = temp_dir.path().join("symlink");
-
-        fs::write(&file_path, "test content").unwrap();
-        unix::fs::symlink(&file_path, &symlink_path).unwrap();
-
-        assert!(!is_symlink_loop(&symlink_path));
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn test_is_symlink_loop_direct_loop() {
-        let temp_dir = tempdir().unwrap();
-        let symlink_path = temp_dir.path().join("loop");
-
-        unix::fs::symlink(&symlink_path, &symlink_path).unwrap();
-
-        assert!(is_symlink_loop(&symlink_path));
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn test_is_symlink_loop_indirect_loop() {
-        let temp_dir = tempdir().unwrap();
-        let symlink1_path = temp_dir.path().join("symlink1");
-        let symlink2_path = temp_dir.path().join("symlink2");
-
-        unix::fs::symlink(&symlink1_path, &symlink2_path).unwrap();
-        unix::fs::symlink(&symlink2_path, &symlink1_path).unwrap();
-
-        assert!(is_symlink_loop(&symlink1_path));
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn test_are_hardlinks_to_same_file_same_file() {
-        let mut temp_file = NamedTempFile::new().unwrap();
-        writeln!(temp_file, "Test content").unwrap();
-
-        let path1 = temp_file.path();
-        let path2 = temp_file.path();
-
-        assert!(are_hardlinks_to_same_file(path1, path2));
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn test_are_hardlinks_to_same_file_different_files() {
-        let mut temp_file1 = NamedTempFile::new().unwrap();
-        writeln!(temp_file1, "Test content 1").unwrap();
-
-        let mut temp_file2 = NamedTempFile::new().unwrap();
-        writeln!(temp_file2, "Test content 2").unwrap();
-
-        let path1 = temp_file1.path();
-        let path2 = temp_file2.path();
-
-        assert!(!are_hardlinks_to_same_file(path1, path2));
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn test_are_hardlinks_to_same_file_hard_link() {
-        let mut temp_file = NamedTempFile::new().unwrap();
-        writeln!(temp_file, "Test content").unwrap();
-        let path1 = temp_file.path();
-
-        let path2 = temp_file.path().with_extension("hardlink");
-        fs::hard_link(path1, &path2).unwrap();
-
-        assert!(are_hardlinks_to_same_file(path1, &path2));
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn test_get_file_display() {
-        assert_eq!(get_file_display(S_IFDIR | 0o755), 'd');
-        assert_eq!(get_file_display(S_IFCHR | 0o644), 'c');
-        assert_eq!(get_file_display(S_IFBLK | 0o600), 'b');
-        assert_eq!(get_file_display(S_IFREG | 0o777), '-');
-        assert_eq!(get_file_display(S_IFIFO | 0o666), 'p');
-        assert_eq!(get_file_display(S_IFLNK | 0o777), 'l');
-        assert_eq!(get_file_display(S_IFSOCK | 0o600), 's');
-        assert_eq!(get_file_display(0o777), '?');
-    }
-
-    #[test]
-    fn test_path_ends_with_terminator() {
-        // Path ends with a forward slash
-        assert!(path_ends_with_terminator(Path::new("/some/path/")));
-
-        // Path ends with a backslash
-        #[cfg(windows)]
-        assert!(path_ends_with_terminator(Path::new("C:\\some\\path\\")));
-
-        // Path does not end with a terminator
-        assert!(!path_ends_with_terminator(Path::new("/some/path")));
-        assert!(!path_ends_with_terminator(Path::new("C:\\some\\path")));
-
-        // Empty path
-        assert!(!path_ends_with_terminator(Path::new("")));
-
-        // Root path
-        assert!(path_ends_with_terminator(Path::new("/")));
-        #[cfg(windows)]
-        assert!(path_ends_with_terminator(Path::new("C:\\")));
-    }
-
-    #[test]
-    fn test_sane_blksize() {
-        assert_eq!(512, sane_blksize::sane_blksize(0));
-        assert_eq!(512, sane_blksize::sane_blksize(512));
-        assert_eq!(4096, sane_blksize::sane_blksize(4096));
-        assert_eq!(0x2000_0000, sane_blksize::sane_blksize(0x2000_0000));
-        assert_eq!(512, sane_blksize::sane_blksize(0x2000_0001));
-    }
-    #[test]
-    fn test_get_file_name() {
-        let file_path = PathBuf::from("~/foo.txt");
-        assert!(matches!(get_filename(&file_path), Some("foo.txt")));
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn test_make_fifo() {
-        // Create the FIFO in a temporary directory.
-        let tempdir = tempdir().unwrap();
-        let path = tempdir.path().join("f");
-        assert!(make_fifo(&path).is_ok());
-
-        // Check that it is indeed a FIFO.
-        assert!(fs::metadata(&path).unwrap().file_type().is_fifo());
-
-        // Check that we can write to it and read from it.
-        //
-        // Write and read need to happen in different threads,
-        // otherwise `write` would block indefinitely while waiting
-        // for the `read`.
-        let path2 = path.clone();
-        std::thread::spawn(move || assert!(fs::write(&path2, b"foo").is_ok()));
-        assert_eq!(fs::read(&path).unwrap(), b"foo");
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn test_make_fifo_non_utf8_path() {
-        let tempdir = tempdir().unwrap();
-        let path = tempdir.path().join(OsStr::from_bytes(b"fifo-\xff"));
-
-        make_fifo(&path).unwrap();
-
-        assert!(fs::metadata(&path).unwrap().file_type().is_fifo());
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn test_make_fifo_interior_nul_path() {
-        let path = Path::new(OsStr::from_bytes(b"bad\0path"));
-        let err = make_fifo(path).unwrap_err();
-
-        assert_eq!(ErrorKind::InvalidInput, err.kind());
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/fsext.rs b/registry/native/stubs/uucore/src/lib/features/fsext.rs
deleted file mode 100644
index 61dc1fa1e..000000000
--- a/registry/native/stubs/uucore/src/lib/features/fsext.rs
+++ /dev/null
@@ -1,1311 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Set of functions to manage file systems
-
-// spell-checker:ignore DATETIME getmntinfo subsecond (fs) cifs smbfs
-
-#[cfg(any(target_os = "linux", target_os = "android", target_os = "cygwin"))]
-const LINUX_MTAB: &str = "/etc/mtab";
-#[cfg(any(target_os = "linux", target_os = "android", target_os = "cygwin"))]
-const LINUX_MOUNTINFO: &str = "/proc/self/mountinfo";
-#[cfg(all(unix, not(any(target_os = "aix", target_os = "redox"))))]
-static MOUNT_OPT_BIND: &str = "bind";
-#[cfg(windows)]
-const MAX_PATH: usize = 266;
-#[cfg(windows)]
-static EXIT_ERR: i32 = 1;
-
-#[cfg(any(
-    target_os = "freebsd",
-    target_vendor = "apple",
-    target_os = "netbsd",
-    target_os = "openbsd"
-))]
-use crate::os_str_from_bytes;
-#[cfg(windows)]
-use crate::show_warning;
-
-use std::ffi::OsStr;
-#[cfg(unix)]
-use std::os::unix::ffi::OsStrExt;
-#[cfg(windows)]
-use std::os::windows::ffi::OsStrExt;
-#[cfg(windows)]
-use windows_sys::Win32::{
-    Foundation::{ERROR_NO_MORE_FILES, INVALID_HANDLE_VALUE},
-    Storage::FileSystem::{
-        FindFirstVolumeW, FindNextVolumeW, FindVolumeClose, GetDiskFreeSpaceW, GetDriveTypeW,
-        GetVolumeInformationW, GetVolumePathNamesForVolumeNameW, QueryDosDeviceW,
-    },
-    System::WindowsProgramming::DRIVE_REMOTE,
-};
-
-#[cfg(windows)]
-#[allow(non_snake_case)]
-fn LPWSTR2String(buf: &[u16]) -> String {
-    let len = buf.iter().position(|&n| n == 0).unwrap();
-    String::from_utf16(&buf[..len]).unwrap()
-}
-
-#[cfg(windows)]
-fn to_nul_terminated_wide_string(s: impl AsRef<OsStr>) -> Vec<u16> {
-    s.as_ref()
-        .encode_wide()
-        .chain(Some(0))
-        .collect::<Vec<u16>>()
-}
-
-#[cfg(unix)]
-use libc::{
-    S_IFBLK, S_IFCHR, S_IFDIR, S_IFIFO, S_IFLNK, S_IFMT, S_IFREG, S_IFSOCK, mode_t, strerror,
-};
-#[cfg(unix)]
-use std::ffi::{CStr, CString};
-use std::io::Error as IOError;
-#[cfg(unix)]
-use std::mem;
-#[cfg(windows)]
-use std::path::Path;
-use std::time::SystemTime;
-#[cfg(not(windows))]
-use std::time::UNIX_EPOCH;
-use std::{borrow::Cow, ffi::OsString};
-
-use std::fs::Metadata;
-#[cfg(unix)]
-use std::os::unix::fs::MetadataExt;
-#[cfg(unix)]
-use std::time::Duration;
-
-#[cfg(any(
-    target_os = "linux",
-    target_os = "android",
-    target_vendor = "apple",
-    target_os = "freebsd",
-    target_os = "openbsd"
-))]
-pub use libc::statfs as StatFs;
-#[cfg(any(
-    target_os = "aix",
-    target_os = "netbsd",
-    target_os = "dragonfly",
-    target_os = "illumos",
-    target_os = "solaris",
-    target_os = "redox",
-    target_os = "cygwin",
-))]
-pub use libc::statvfs as StatFs;
-
-#[cfg(any(
-    target_os = "linux",
-    target_os = "android",
-    target_vendor = "apple",
-    target_os = "freebsd",
-    target_os = "openbsd",
-))]
-pub use libc::statfs as statfs_fn;
-#[cfg(any(
-    target_os = "aix",
-    target_os = "netbsd",
-    target_os = "illumos",
-    target_os = "solaris",
-    target_os = "dragonfly",
-    target_os = "redox",
-    target_os = "cygwin",
-))]
-pub use libc::statvfs as statfs_fn;
-
-#[derive(Debug, Copy, Clone)]
-pub enum MetadataTimeField {
-    Modification,
-    Access,
-    Change,
-    Birth,
-}
-
-impl From<&str> for MetadataTimeField {
-    /// Get a `MetadataTimeField` from a string, we expect the value
-    /// to come from clap, and be constrained there (e.g. if Modification is
-    /// not supported), and the default branch should not be reached.
-    fn from(value: &str) -> Self {
-        match value {
-            "ctime" | "status" => Self::Change,
-            "access" | "atime" | "use" => Self::Access,
-            "mtime" | "modification" => Self::Modification,
-            "birth" | "creation" => Self::Birth,
-            // below should never happen as clap already restricts the values.
-            _ => unreachable!("Invalid metadata time field."),
-        }
-    }
-}
-
-#[cfg(unix)]
-#[expect(
-    clippy::unnecessary_wraps,
-    reason = "fn sig must match on all platforms"
-)]
-fn metadata_get_change_time(md: &Metadata) -> Option<SystemTime> {
-    let mut st = UNIX_EPOCH;
-    let (secs, nsecs) = (md.ctime(), md.ctime_nsec());
-    if secs >= 0 {
-        st += Duration::from_secs(secs as u64);
-    } else {
-        st -= Duration::from_secs(-secs as u64);
-    }
-    if nsecs >= 0 {
-        st += Duration::from_nanos(nsecs as u64);
-    } else {
-        // Probably never the case, but cover just in case.
-        st -= Duration::from_nanos(-nsecs as u64);
-    }
-    Some(st)
-}
-
-#[cfg(not(unix))]
-fn metadata_get_change_time(_md: &Metadata) -> Option<SystemTime> {
-    // Not available.
-    None
-}
-
-pub fn metadata_get_time(md: &Metadata, md_time: MetadataTimeField) -> Option<SystemTime> {
-    match md_time {
-        MetadataTimeField::Change => metadata_get_change_time(md),
-        MetadataTimeField::Modification => md.modified().ok(),
-        MetadataTimeField::Access => md.accessed().ok(),
-        MetadataTimeField::Birth => md.created().ok(),
-    }
-}
-
-// TODO: Types for this struct are probably mostly wrong. Possibly, most of them
-// should be OsString.
-#[derive(Debug, Clone)]
-pub struct MountInfo {
-    /// Stores `volume_name` in windows platform and `dev_id` in unix platform
-    pub dev_id: String,
-    pub dev_name: String,
-    pub fs_type: String,
-    pub mount_root: OsString,
-    pub mount_dir: OsString,
-    /// We only care whether this field contains "bind"
-    pub mount_option: String,
-    pub remote: bool,
-    pub dummy: bool,
-}
-
-#[cfg(any(target_os = "linux", target_os = "android", target_os = "cygwin"))]
-fn replace_special_chars(s: &[u8]) -> Vec<u8> {
-    use bstr::ByteSlice;
-
-    // Replace
-    //
-    // * ASCII space with a regular space character,
-    // * \011 ASCII horizontal tab with a tab character,
-    // * ASCII backslash with an actual backslash character.
-    //
-    s.replace(r"\040", " ")
-        .replace(r"\011", "	")
-        .replace(r"\134", r"\")
-}
-
-impl MountInfo {
-    #[cfg(any(target_os = "linux", target_os = "android", target_os = "cygwin"))]
-    fn new(file_name: &str, raw: &[&[u8]]) -> Option<Self> {
-        use std::ffi::OsStr;
-        use std::os::unix::ffi::OsStrExt;
-        use std::os::unix::ffi::OsStringExt;
-
-        let dev_name;
-        let fs_type;
-        let mount_root;
-        let mount_dir;
-        let mount_option;
-
-        match file_name {
-            // spell-checker:ignore (word) noatime
-            // Format: 36 35 98:0 /mnt1 /mnt2 rw,noatime master:1 - ext3 /dev/root rw,errors=continue
-            // "man proc" for more details
-            LINUX_MOUNTINFO => {
-                const FIELDS_OFFSET: usize = 6;
-                let optional_fields = raw.get(FIELDS_OFFSET..)?;
-                let after_fields = optional_fields
-                    .iter()
-                    .position(|c| *c == b"-")
-                    .and_then(|pos| pos.checked_add(FIELDS_OFFSET + 1))?;
-                dev_name = String::from_utf8_lossy(raw.get(after_fields + 1)?).to_string();
-                fs_type = String::from_utf8_lossy(raw.get(after_fields)?).to_string();
-                mount_root = OsStr::from_bytes(raw.get(3)?).to_owned();
-                mount_dir = OsString::from_vec(replace_special_chars(raw.get(4)?));
-                mount_option = String::from_utf8_lossy(raw.get(5)?).to_string();
-            }
-            LINUX_MTAB => {
-                dev_name = String::from_utf8_lossy(raw.first()?).to_string();
-                fs_type = String::from_utf8_lossy(raw.get(2)?).to_string();
-                mount_root = OsString::new();
-                mount_dir = OsString::from_vec(replace_special_chars(raw.get(1)?));
-                mount_option = String::from_utf8_lossy(raw.get(3)?).to_string();
-            }
-            _ => return None,
-        }
-
-        let dev_id = mount_dev_id(&mount_dir);
-        let dummy = is_dummy_filesystem(&fs_type, &mount_option);
-        let remote = is_remote_filesystem(&dev_name, &fs_type);
-
-        Some(Self {
-            dev_id,
-            dev_name,
-            fs_type,
-            mount_root,
-            mount_dir,
-            mount_option,
-            remote,
-            dummy,
-        })
-    }
-
-    #[cfg(windows)]
-    fn new(mut volume_name: String) -> Option<Self> {
-        let mut dev_name_buf = [0u16; MAX_PATH];
-        volume_name.pop();
-        unsafe {
-            QueryDosDeviceW(
-                OsStr::new(&volume_name)
-                    .encode_wide()
-                    .chain(Some(0))
-                    .skip(4)
-                    .collect::<Vec<u16>>()
-                    .as_ptr(),
-                dev_name_buf.as_mut_ptr(),
-                dev_name_buf.len() as u32,
-            )
-        };
-        volume_name.push('\\');
-        let dev_name = LPWSTR2String(&dev_name_buf);
-
-        let mut mount_root_buf = [0u16; MAX_PATH];
-        let success = unsafe {
-            let volume_name = to_nul_terminated_wide_string(&volume_name);
-            GetVolumePathNamesForVolumeNameW(
-                volume_name.as_ptr(),
-                mount_root_buf.as_mut_ptr(),
-                mount_root_buf.len() as u32,
-                ptr::null_mut(),
-            )
-        };
-        if 0 == success {
-            // TODO: support the case when `GetLastError()` returns `ERROR_MORE_DATA`
-            return None;
-        }
-        // TODO: This should probably call `OsString::from_wide`, but unclear if
-        // terminating zeros need to be striped first.
-        let mount_root = LPWSTR2String(&mount_root_buf);
-
-        let mut fs_type_buf = [0u16; MAX_PATH];
-        let success = unsafe {
-            let mount_root = to_nul_terminated_wide_string(&mount_root);
-            GetVolumeInformationW(
-                mount_root.as_ptr(),
-                ptr::null_mut(),
-                0,
-                ptr::null_mut(),
-                ptr::null_mut(),
-                ptr::null_mut(),
-                fs_type_buf.as_mut_ptr(),
-                fs_type_buf.len() as u32,
-            )
-        };
-        let fs_type = if 0 == success {
-            None
-        } else {
-            Some(LPWSTR2String(&fs_type_buf))
-        };
-        let remote = DRIVE_REMOTE
-            == unsafe {
-                let mount_root = to_nul_terminated_wide_string(&mount_root);
-                GetDriveTypeW(mount_root.as_ptr())
-            };
-        Some(Self {
-            dev_id: volume_name,
-            dev_name,
-            fs_type: fs_type.unwrap_or_default(),
-            mount_root: mount_root.into(), // TODO: We should figure out how to keep an OsString here.
-            mount_dir: OsString::new(),
-            mount_option: String::new(),
-            remote,
-            dummy: false,
-        })
-    }
-}
-
-#[cfg(any(
-    target_os = "freebsd",
-    target_vendor = "apple",
-    target_os = "netbsd",
-    target_os = "openbsd",
-))]
-impl From<StatFs> for MountInfo {
-    fn from(statfs: StatFs) -> Self {
-        let dev_name = unsafe {
-            // spell-checker:disable-next-line
-            CStr::from_ptr(statfs.f_mntfromname.as_ptr())
-                .to_string_lossy()
-                .into_owned()
-        };
-        let fs_type = unsafe {
-            // spell-checker:disable-next-line
-            CStr::from_ptr(statfs.f_fstypename.as_ptr())
-                .to_string_lossy()
-                .into_owned()
-        };
-        let mount_dir_bytes = unsafe {
-            // spell-checker:disable-next-line
-            CStr::from_ptr(statfs.f_mntonname.as_ptr()).to_bytes()
-        };
-        let mount_dir = os_str_from_bytes(mount_dir_bytes).unwrap().into_owned();
-
-        let dev_id = mount_dev_id(&mount_dir);
-        let dummy = is_dummy_filesystem(&fs_type, "");
-        let remote = is_remote_filesystem(&dev_name, &fs_type);
-
-        Self {
-            dev_id,
-            dev_name,
-            fs_type,
-            mount_dir,
-            mount_root: OsString::new(),
-            mount_option: String::new(),
-            remote,
-            dummy,
-        }
-    }
-}
-
-#[cfg(all(unix, not(target_os = "redox")))]
-fn is_dummy_filesystem(fs_type: &str, mount_option: &str) -> bool {
-    // spell-checker:disable
-    match fs_type {
-        "autofs" | "proc" | "subfs"
-        // for Linux 2.6/3.x
-        | "debugfs" | "devpts" | "fusectl" | "mqueue" | "rpc_pipefs" | "sysfs"
-        // FreeBSD, Linux 2.4
-        | "devfs"
-        // for NetBSD 3.0
-        | "kernfs"
-        // for Irix 6.5
-        | "ignore"
-        // Linux initial root filesystem
-        | "rootfs"
-        // Binary format support pseudo-filesystem
-        | "binfmt_misc" => true,
-        _ => fs_type == "none"
-            && !mount_option.contains(MOUNT_OPT_BIND)
-    }
-    // spell-checker:enable
-}
-
-#[cfg(all(unix, not(any(target_os = "aix", target_os = "redox"))))]
-fn is_remote_filesystem(dev_name: &str, fs_type: &str) -> bool {
-    dev_name.find(':').is_some()
-        || (dev_name.starts_with("//") && fs_type == "smbfs" || fs_type == "cifs")
-        || dev_name == "-hosts"
-}
-
-#[cfg(all(unix, not(any(target_os = "aix", target_os = "redox"))))]
-fn mount_dev_id(mount_dir: &OsStr) -> String {
-    use std::os::unix::fs::MetadataExt;
-
-    if let Ok(stat) = std::fs::metadata(mount_dir) {
-        // Why do we cast this to i32?
-        (stat.dev() as i32).to_string()
-    } else {
-        String::new()
-    }
-}
-
-use crate::error::UResult;
-#[cfg(any(
-    target_os = "freebsd",
-    target_vendor = "apple",
-    target_os = "netbsd",
-    target_os = "openbsd",
-    target_os = "windows"
-))]
-use crate::error::USimpleError;
-#[cfg(any(target_os = "linux", target_os = "android", target_os = "cygwin"))]
-use std::fs::File;
-#[cfg(any(target_os = "linux", target_os = "android", target_os = "cygwin"))]
-use std::io::{BufRead, BufReader};
-#[cfg(any(
-    target_vendor = "apple",
-    target_os = "freebsd",
-    target_os = "windows",
-    target_os = "netbsd",
-    target_os = "openbsd"
-))]
-use std::ptr;
-#[cfg(any(
-    target_vendor = "apple",
-    target_os = "freebsd",
-    target_os = "netbsd",
-    target_os = "openbsd"
-))]
-use std::slice;
-
-/// Read file system list.
-pub fn read_fs_list() -> UResult<Vec<MountInfo>> {
-    #[cfg(any(target_os = "linux", target_os = "android", target_os = "cygwin"))]
-    {
-        let (file_name, f) = File::open(LINUX_MOUNTINFO)
-            .map(|f| (LINUX_MOUNTINFO, f))
-            .or_else(|_| File::open(LINUX_MTAB).map(|f| (LINUX_MTAB, f)))?;
-        let reader = BufReader::new(f);
-        Ok(reader
-            .split(b'\n')
-            .map_while(Result::ok)
-            .filter_map(|line| {
-                let raw_data = line.split(|c| *c == b' ').collect::<Vec<&[u8]>>();
-                MountInfo::new(file_name, &raw_data)
-            })
-            .collect::<Vec<_>>())
-    }
-    #[cfg(any(
-        target_os = "freebsd",
-        target_vendor = "apple",
-        target_os = "netbsd",
-        target_os = "openbsd"
-    ))]
-    {
-        let mut mount_buffer_ptr: *mut StatFs = ptr::null_mut();
-        let len = unsafe { libc::getmntinfo(&raw mut mount_buffer_ptr, 1_i32) };
-        if len < 0 {
-            return Err(USimpleError::new(1, "getmntinfo() failed"));
-        }
-        let mounts = unsafe { slice::from_raw_parts(mount_buffer_ptr, len as usize) };
-        Ok(mounts
-            .iter()
-            .map(|m| MountInfo::from(*m))
-            .collect::<Vec<_>>())
-    }
-    #[cfg(windows)]
-    {
-        let mut volume_name_buf = [0u16; MAX_PATH];
-        // As recommended in the MS documentation, retrieve the first volume before the others
-        let find_handle =
-            unsafe { FindFirstVolumeW(volume_name_buf.as_mut_ptr(), volume_name_buf.len() as u32) };
-        if INVALID_HANDLE_VALUE == find_handle {
-            let os_err = IOError::last_os_error();
-            let msg = format!("FindFirstVolumeW failed: {os_err}");
-            return Err(USimpleError::new(EXIT_ERR, msg));
-        }
-        let mut mounts = Vec::<MountInfo>::new();
-        loop {
-            let volume_name = LPWSTR2String(&volume_name_buf);
-            if !volume_name.starts_with("\\\\?\\") || !volume_name.ends_with('\\') {
-                show_warning!("A bad path was skipped: {volume_name}");
-                continue;
-            }
-            if let Some(m) = MountInfo::new(volume_name) {
-                mounts.push(m);
-            }
-            if 0 == unsafe {
-                FindNextVolumeW(
-                    find_handle,
-                    volume_name_buf.as_mut_ptr(),
-                    volume_name_buf.len() as u32,
-                )
-            } {
-                let err = IOError::last_os_error();
-                if err.raw_os_error() != Some(ERROR_NO_MORE_FILES as i32) {
-                    let msg = format!("FindNextVolumeW failed: {err}");
-                    return Err(USimpleError::new(EXIT_ERR, msg));
-                }
-                break;
-            }
-        }
-        unsafe {
-            FindVolumeClose(find_handle);
-        }
-        Ok(mounts)
-    }
-    #[cfg(any(
-        target_os = "aix",
-        target_os = "redox",
-        target_os = "illumos",
-        target_os = "solaris",
-        target_os = "wasi"
-    ))]
-    {
-        // No method to read mounts on this platform
-        Ok(Vec::new())
-    }
-}
-
-#[derive(Debug, Clone)]
-pub struct FsUsage {
-    pub blocksize: u64,
-    pub blocks: u64,
-    pub bfree: u64,
-    pub bavail: u64,
-    pub bavail_top_bit_set: bool,
-    pub files: u64,
-    pub ffree: u64,
-}
-
-impl FsUsage {
-    #[cfg(unix)]
-    pub fn new(statvfs: StatFs) -> Self {
-        {
-            #[cfg(all(
-                not(any(target_os = "freebsd", target_os = "openbsd")),
-                target_pointer_width = "64"
-            ))]
-            return Self {
-                blocksize: statvfs.f_bsize as u64, // or `statvfs.f_frsize` ?
-                blocks: statvfs.f_blocks,
-                bfree: statvfs.f_bfree,
-                bavail: statvfs.f_bavail,
-                bavail_top_bit_set: ((statvfs.f_bavail) & (1u64.rotate_right(1))) != 0,
-                files: statvfs.f_files,
-                ffree: statvfs.f_ffree,
-            };
-            #[cfg(all(
-                not(any(target_os = "freebsd", target_os = "openbsd")),
-                not(target_pointer_width = "64")
-            ))]
-            return Self {
-                blocksize: statvfs.f_bsize as u64, // or `statvfs.f_frsize` ?
-                blocks: statvfs.f_blocks.into(),
-                bfree: statvfs.f_bfree.into(),
-                bavail: statvfs.f_bavail.into(),
-                bavail_top_bit_set: ((statvfs.f_bavail as u64) & (1u64.rotate_right(1))) != 0,
-                files: statvfs.f_files.into(),
-                ffree: statvfs.f_ffree.into(),
-            };
-            #[cfg(target_os = "freebsd")]
-            return Self {
-                blocksize: statvfs.f_bsize, // or `statvfs.f_frsize` ?
-                blocks: statvfs.f_blocks,
-                bfree: statvfs.f_bfree,
-                bavail: statvfs.f_bavail.try_into().unwrap(),
-                bavail_top_bit_set: ((TryInto::<u64>::try_into(statvfs.f_bavail).unwrap())
-                    & (1u64.rotate_right(1)))
-                    != 0,
-                files: statvfs.f_files,
-                ffree: statvfs.f_ffree.try_into().unwrap(),
-            };
-            #[cfg(target_os = "openbsd")]
-            return Self {
-                blocksize: statvfs.f_bsize.into(),
-                blocks: statvfs.f_blocks,
-                bfree: statvfs.f_bfree,
-                bavail: statvfs.f_bavail.try_into().unwrap(),
-                bavail_top_bit_set: ((TryInto::<u64>::try_into(statvfs.f_bavail).unwrap())
-                    & (1u64.rotate_right(1)))
-                    != 0,
-                files: statvfs.f_files,
-                ffree: statvfs.f_ffree,
-            };
-        }
-    }
-    #[cfg(windows)]
-    pub fn new(path: &Path) -> UResult<Self> {
-        let mut root_path = [0u16; MAX_PATH];
-        let success = unsafe {
-            let path = to_nul_terminated_wide_string(path);
-            GetVolumePathNamesForVolumeNameW(
-                //path_utf8.as_ptr(),
-                path.as_ptr(),
-                root_path.as_mut_ptr(),
-                root_path.len() as u32,
-                ptr::null_mut(),
-            )
-        };
-        if 0 == success {
-            let msg = format!(
-                "GetVolumePathNamesForVolumeNameW failed: {}",
-                IOError::last_os_error()
-            );
-            return Err(USimpleError::new(EXIT_ERR, msg));
-        }
-
-        let mut sectors_per_cluster = 0;
-        let mut bytes_per_sector = 0;
-        let mut number_of_free_clusters = 0;
-        let mut total_number_of_clusters = 0;
-
-        unsafe {
-            let path = to_nul_terminated_wide_string(path);
-            GetDiskFreeSpaceW(
-                path.as_ptr(),
-                &raw mut sectors_per_cluster,
-                &raw mut bytes_per_sector,
-                &raw mut number_of_free_clusters,
-                &raw mut total_number_of_clusters,
-            );
-        }
-
-        let bytes_per_cluster = sectors_per_cluster as u64 * bytes_per_sector as u64;
-        Ok(Self {
-            // f_bsize      File system block size.
-            blocksize: bytes_per_cluster,
-            // f_blocks - Total number of blocks on the file system, in units of f_frsize.
-            // frsize =     Fundamental file system block size (fragment size).
-            blocks: total_number_of_clusters as u64,
-            //  Total number of free blocks.
-            bfree: number_of_free_clusters as u64,
-            //  Total number of free blocks available to non-privileged processes.
-            bavail: 0,
-            bavail_top_bit_set: ((bytes_per_sector as u64) & (1u64.rotate_right(1))) != 0,
-            // Total number of file nodes (inodes) on the file system.
-            files: 0, // Not available on windows
-            // Total number of free file nodes (inodes).
-            ffree: 0, // Meaningless on Windows
-        })
-    }
-}
-
-#[cfg(unix)]
-pub trait FsMeta {
-    fn fs_type(&self) -> i64;
-    fn io_size(&self) -> u64;
-    fn block_size(&self) -> i64;
-    fn total_blocks(&self) -> u64;
-    fn free_blocks(&self) -> u64;
-    fn avail_blocks(&self) -> u64;
-    fn total_file_nodes(&self) -> u64;
-    fn free_file_nodes(&self) -> u64;
-    fn fsid(&self) -> u64;
-    fn namelen(&self) -> u64;
-}
-
-#[cfg(unix)]
-impl FsMeta for StatFs {
-    fn block_size(&self) -> i64 {
-        #[cfg(all(
-            not(target_env = "musl"),
-            not(target_vendor = "apple"),
-            not(target_os = "aix"),
-            not(target_os = "android"),
-            not(target_os = "freebsd"),
-            not(target_os = "netbsd"),
-            not(target_os = "openbsd"),
-            not(target_os = "illumos"),
-            not(target_os = "solaris"),
-            not(target_os = "redox"),
-            not(target_arch = "s390x"),
-            not(target_os = "cygwin"),
-            target_pointer_width = "64"
-        ))]
-        return self.f_bsize;
-        #[cfg(all(
-            not(target_env = "musl"),
-            not(target_os = "freebsd"),
-            not(target_os = "netbsd"),
-            not(target_os = "redox"),
-            not(target_os = "cygwin"),
-            any(
-                target_arch = "s390x",
-                target_vendor = "apple",
-                all(target_os = "android", target_pointer_width = "32"),
-                target_os = "openbsd",
-                not(target_pointer_width = "64")
-            )
-        ))]
-        return self.f_bsize.into();
-        #[cfg(any(
-            target_env = "musl",
-            target_os = "aix",
-            target_os = "freebsd",
-            target_os = "netbsd",
-            target_os = "illumos",
-            target_os = "solaris",
-            target_os = "redox",
-            target_os = "cygwin",
-            all(target_os = "android", target_pointer_width = "64"),
-        ))]
-        return self.f_bsize.try_into().unwrap();
-    }
-    fn total_blocks(&self) -> u64 {
-        #[cfg(target_pointer_width = "64")]
-        return self.f_blocks;
-        #[cfg(not(target_pointer_width = "64"))]
-        return self.f_blocks.into();
-    }
-    fn free_blocks(&self) -> u64 {
-        #[cfg(target_pointer_width = "64")]
-        return self.f_bfree;
-        #[cfg(not(target_pointer_width = "64"))]
-        return self.f_bfree.into();
-    }
-    fn avail_blocks(&self) -> u64 {
-        #[cfg(all(
-            not(target_os = "freebsd"),
-            not(target_os = "openbsd"),
-            target_pointer_width = "64"
-        ))]
-        return self.f_bavail;
-        #[cfg(all(
-            not(target_os = "freebsd"),
-            not(target_os = "openbsd"),
-            not(target_pointer_width = "64")
-        ))]
-        return self.f_bavail.into();
-        #[cfg(any(target_os = "freebsd", target_os = "openbsd"))]
-        return self.f_bavail.try_into().unwrap();
-    }
-    fn total_file_nodes(&self) -> u64 {
-        #[cfg(target_pointer_width = "64")]
-        return self.f_files;
-        #[cfg(not(target_pointer_width = "64"))]
-        return self.f_files.into();
-    }
-    fn free_file_nodes(&self) -> u64 {
-        #[cfg(all(not(target_os = "freebsd"), target_pointer_width = "64"))]
-        return self.f_ffree;
-        #[cfg(all(not(target_os = "freebsd"), not(target_pointer_width = "64")))]
-        return self.f_ffree.into();
-        #[cfg(target_os = "freebsd")]
-        return self.f_ffree.try_into().unwrap();
-    }
-    #[cfg(any(
-        target_os = "linux",
-        target_os = "android",
-        target_vendor = "apple",
-        target_os = "freebsd"
-    ))]
-    fn fs_type(&self) -> i64 {
-        #[cfg(all(
-            not(target_env = "musl"),
-            not(target_vendor = "apple"),
-            not(target_os = "android"),
-            not(target_os = "freebsd"),
-            not(target_arch = "s390x"),
-            target_pointer_width = "64"
-        ))]
-        return self.f_type;
-        #[cfg(all(
-            not(target_env = "musl"),
-            any(
-                target_vendor = "apple",
-                all(target_os = "android", target_pointer_width = "32"),
-                target_os = "freebsd",
-                target_arch = "s390x",
-                not(target_pointer_width = "64")
-            )
-        ))]
-        return self.f_type.into();
-        #[cfg(any(
-            target_env = "musl",
-            all(target_os = "android", target_pointer_width = "64"),
-        ))]
-        return self.f_type.try_into().unwrap();
-    }
-    #[cfg(not(any(
-        target_os = "linux",
-        target_os = "android",
-        target_vendor = "apple",
-        target_os = "freebsd"
-    )))]
-    fn fs_type(&self) -> i64 {
-        // FIXME: statvfs doesn't have an equivalent, so we need to do something else
-        unimplemented!()
-    }
-
-    #[cfg(any(target_os = "linux", target_os = "android"))]
-    fn io_size(&self) -> u64 {
-        self.f_frsize as u64
-    }
-    #[cfg(any(target_vendor = "apple", target_os = "freebsd", target_os = "netbsd"))]
-    fn io_size(&self) -> u64 {
-        #[cfg(target_os = "freebsd")]
-        return self.f_iosize;
-        #[cfg(not(target_os = "freebsd"))]
-        return self.f_iosize as u64;
-    }
-    // XXX: dunno if this is right
-    #[cfg(not(any(
-        target_vendor = "apple",
-        target_os = "freebsd",
-        target_os = "linux",
-        target_os = "android",
-        target_os = "netbsd"
-    )))]
-    fn io_size(&self) -> u64 {
-        self.f_bsize as u64
-    }
-
-    // Linux, SunOS, HP-UX, 4.4BSD, FreeBSD have a system call statfs() that returns
-    // a struct statfs, containing a fsid_t f_fsid, where fsid_t is defined
-    // as struct { int val[2];  }
-    //
-    // Solaris, Irix and POSIX have a system call statvfs(2) that returns a
-    // struct statvfs, containing an  unsigned  long  f_fsid
-    #[cfg(any(
-        target_vendor = "apple",
-        target_os = "freebsd",
-        target_os = "linux",
-        target_os = "android",
-        target_os = "openbsd"
-    ))]
-    fn fsid(&self) -> u64 {
-        // Use type inference to determine the type of f_fsid
-        // (libc::__fsid_t on Android, libc::fsid_t on other platforms)
-        let f_fsid = self.f_fsid;
-        let f_fsid: [u32; 2] = unsafe { mem::transmute(f_fsid) };
-        ((u64::from(f_fsid[0])) << 32) | u64::from(f_fsid[1])
-    }
-    #[cfg(not(any(
-        target_vendor = "apple",
-        target_os = "freebsd",
-        target_os = "linux",
-        target_os = "android",
-        target_os = "openbsd"
-    )))]
-    fn fsid(&self) -> u64 {
-        self.f_fsid as u64
-    }
-
-    #[cfg(any(target_os = "linux", target_os = "android"))]
-    fn namelen(&self) -> u64 {
-        self.f_namelen as u64
-    }
-    #[cfg(target_vendor = "apple")]
-    fn namelen(&self) -> u64 {
-        1024
-    }
-    #[cfg(any(target_os = "freebsd", target_os = "netbsd", target_os = "openbsd"))]
-    fn namelen(&self) -> u64 {
-        self.f_namemax as u64 // spell-checker:disable-line
-    }
-    // XXX: should everything just use statvfs?
-    #[cfg(not(any(
-        target_vendor = "apple",
-        target_os = "freebsd",
-        target_os = "linux",
-        target_os = "android",
-        target_os = "netbsd",
-        target_os = "openbsd"
-    )))]
-    fn namelen(&self) -> u64 {
-        self.f_namemax as u64 // spell-checker:disable-line
-    }
-}
-
-#[cfg(unix)]
-pub fn statfs(path: &OsStr) -> Result<StatFs, String> {
-    #[cfg(unix)]
-    let p = path.as_bytes();
-    #[cfg(not(unix))]
-    let p = path.into_string().unwrap();
-
-    match CString::new(p) {
-        Ok(p) => {
-            let mut buffer: StatFs = unsafe { mem::zeroed() };
-            unsafe {
-                if statfs_fn(p.as_ptr(), &raw mut buffer) == 0 {
-                    Ok(buffer)
-                } else {
-                    let errno = IOError::last_os_error().raw_os_error().unwrap_or(0);
-                    Err(CStr::from_ptr(strerror(errno))
-                        .to_str()
-                        .map_err(|_| "Error message contains invalid UTF-8".to_owned())?
-                        .to_owned())
-                }
-            }
-        }
-        Err(e) => Err(e.to_string()),
-    }
-}
-
-#[cfg(unix)]
-pub fn pretty_filetype(mode: mode_t, size: u64) -> String {
-    match mode & S_IFMT {
-        S_IFREG => {
-            if size == 0 {
-                "regular empty file"
-            } else {
-                "regular file"
-            }
-        }
-        S_IFDIR => "directory",
-        S_IFLNK => "symbolic link",
-        S_IFCHR => "character special file",
-        S_IFBLK => "block special file",
-        S_IFIFO => "fifo",
-        S_IFSOCK => "socket",
-        // TODO: Other file types
-        _ => return format!("weird file ({:07o})", mode & S_IFMT),
-    }
-    .to_owned()
-}
-
-// ============================================================
-// wasmVM: WASI stubs for filesystem metadata types
-// ============================================================
-
-/// WASI StatFs placeholder — WASI VFS doesn't have statfs
-#[cfg(target_os = "wasi")]
-#[derive(Debug, Clone, Default)]
-pub struct StatFs {
-    pub f_type: i64,
-    pub f_bsize: u64,
-    pub f_blocks: u64,
-    pub f_bfree: u64,
-    pub f_bavail: u64,
-    pub f_files: u64,
-    pub f_ffree: u64,
-    pub f_fsid: u64,
-    pub f_namelen: u64,
-}
-
-#[cfg(target_os = "wasi")]
-pub trait FsMeta {
-    fn fs_type(&self) -> i64;
-    fn io_size(&self) -> u64;
-    fn block_size(&self) -> i64;
-    fn total_blocks(&self) -> u64;
-    fn free_blocks(&self) -> u64;
-    fn avail_blocks(&self) -> u64;
-    fn total_file_nodes(&self) -> u64;
-    fn free_file_nodes(&self) -> u64;
-    fn fsid(&self) -> u64;
-    fn namelen(&self) -> u64;
-}
-
-#[cfg(target_os = "wasi")]
-impl FsMeta for StatFs {
-    fn fs_type(&self) -> i64 { self.f_type }
-    fn io_size(&self) -> u64 { self.f_bsize }
-    fn block_size(&self) -> i64 { self.f_bsize as i64 }
-    fn total_blocks(&self) -> u64 { self.f_blocks }
-    fn free_blocks(&self) -> u64 { self.f_bfree }
-    fn avail_blocks(&self) -> u64 { self.f_bavail }
-    fn total_file_nodes(&self) -> u64 { self.f_files }
-    fn free_file_nodes(&self) -> u64 { self.f_ffree }
-    fn fsid(&self) -> u64 { self.f_fsid }
-    fn namelen(&self) -> u64 { self.f_namelen }
-}
-
-#[cfg(target_os = "wasi")]
-pub fn statfs(_path: &std::ffi::OsStr) -> Result<StatFs, String> {
-    // WASI VFS: return synthetic data
-    Ok(StatFs {
-        f_type: 0x5345_4F53, // "wasmVM"
-        f_bsize: 4096,
-        f_blocks: 1024 * 1024,
-        f_bfree: 512 * 1024,
-        f_bavail: 512 * 1024,
-        f_files: 65536,
-        f_ffree: 32768,
-        f_fsid: 0,
-        f_namelen: 255,
-    })
-}
-
-#[cfg(target_os = "wasi")]
-pub fn pretty_filetype(mode: u32, size: u64) -> String {
-    use crate::features::fs::wasi_mode_consts::*;
-    match mode & S_IFMT {
-        v if v == S_IFREG => {
-            if size == 0 { "regular empty file" } else { "regular file" }
-        }
-        v if v == S_IFDIR => "directory",
-        v if v == S_IFLNK => "symbolic link",
-        v if v == S_IFCHR => "character special file",
-        v if v == S_IFBLK => "block special file",
-        v if v == S_IFIFO => "fifo",
-        v if v == S_IFSOCK => "socket",
-        _ => return format!("weird file ({:07o})", mode & S_IFMT),
-    }
-    .to_owned()
-}
-
-pub fn pretty_fstype<'a>(fstype: i64) -> Cow<'a, str> {
-    // spell-checker:disable
-    match fstype {
-        0x6163_6673 => "acfs".into(),
-        0xADF5 => "adfs".into(),
-        0xADFF => "affs".into(),
-        0x5346_414F => "afs".into(),
-        0x0904_1934 => "anon-inode FS".into(),
-        0x6175_6673 => "aufs".into(),
-        0x0187 => "autofs".into(),
-        0x4246_5331 => "befs".into(),
-        0x6264_6576 => "bdevfs".into(),
-        0xCA45_1A4E => "bcachefs".into(),
-        0x1BAD_FACE => "bfs".into(),
-        0xCAFE_4A11 => "bpf_fs".into(),
-        0x4249_4E4D => "binfmt_misc".into(),
-        0x9123_683E => "btrfs".into(),
-        0x7372_7279 => "btrfs_test".into(),
-        0x00C3_6400 => "ceph".into(),
-        0x0027_E0EB => "cgroupfs".into(),
-        0x6367_7270 => "cgroup2fs".into(),
-        0xFF53_4D42 => "cifs".into(),
-        0x7375_7245 => "coda".into(),
-        0x012F_F7B7 => "coh".into(),
-        0x6265_6570 => "configfs".into(),
-        0x28CD_3D45 => "cramfs".into(),
-        0x453D_CD28 => "cramfs-wend".into(),
-        0x6462_6720 => "debugfs".into(),
-        0x1373 => "devfs".into(),
-        0x1CD1 => "devpts".into(),
-        0xF15F => "ecryptfs".into(),
-        0xDE5E_81E4 => "efivarfs".into(),
-        0x0041_4A53 => "efs".into(),
-        0x5DF5 => "exofs".into(),
-        0x137D => "ext".into(),
-        0xEF53 => "ext2/ext3".into(),
-        0xEF51 => "ext2".into(),
-        0xF2F5_2010 => "f2fs".into(),
-        0x4006 => "fat".into(),
-        0x1983_0326 => "fhgfs".into(),
-        0x6573_5546 => "fuseblk".into(),
-        0x6573_5543 => "fusectl".into(),
-        0x0BAD_1DEA => "futexfs".into(),
-        0x0116_1970 => "gfs/gfs2".into(),
-        0x4750_4653 => "gpfs".into(),
-        0x4244 => "hfs".into(),
-        0x482B => "hfs+".into(),
-        0x4858 => "hfsx".into(),
-        0x00C0_FFEE => "hostfs".into(),
-        0xF995_E849 => "hpfs".into(),
-        0x9584_58F6 => "hugetlbfs".into(),
-        0x1130_7854 => "inodefs".into(),
-        0x0131_11A8 => "ibrix".into(),
-        0x2BAD_1DEA => "inotifyfs".into(),
-        0x9660 => "isofs".into(),
-        0x4004 => "isofs".into(),
-        0x4000 => "isofs".into(),
-        0x07C0 => "jffs".into(),
-        0x72B6 => "jffs2".into(),
-        0x3153_464A => "jfs".into(),
-        0x6B41_4653 => "k-afs".into(),
-        0xC97E_8168 => "logfs".into(),
-        0x0BD0_0BD0 => "lustre".into(),
-        0x5346_314D => "m1fs".into(),
-        0x137F => "minix".into(),
-        0x138F => "minix (30 char.)".into(),
-        0x2468 => "minix v2".into(),
-        0x2478 => "minix v2 (30 char.)".into(),
-        0x4D5A => "minix3".into(),
-        0x1980_0202 => "mqueue".into(),
-        0x4D44 => "msdos".into(),
-        0x564C => "novell".into(),
-        0x6969 => "nfs".into(),
-        0x6E66_7364 => "nfsd".into(),
-        0x3434 => "nilfs".into(),
-        0x6E73_6673 => "nsfs".into(),
-        0x5346_544E => "ntfs".into(),
-        0x9FA1 => "openprom".into(),
-        0x7461_636F => "ocfs2".into(),
-        0x794C_7630 => "overlayfs".into(),
-        0xAAD7_AAEA => "panfs".into(),
-        0x5049_5045 => "pipefs".into(),
-        0x7C7C_6673 => "prl_fs".into(),
-        0x9FA0 => "proc".into(),
-        0x6165_676C => "pstorefs".into(),
-        0x002F => "qnx4".into(),
-        0x6819_1122 => "qnx6".into(),
-        0x8584_58F6 => "ramfs".into(),
-        0x5265_4973 => "reiserfs".into(),
-        0x7275 => "romfs".into(),
-        0x6759_6969 => "rpc_pipefs".into(),
-        0x7363_6673 => "securityfs".into(),
-        0xF97C_FF8C => "selinux".into(),
-        0x4341_5D53 => "smackfs".into(),
-        0x517B => "smb".into(),
-        0xFE53_4D42 => "smb2".into(),
-        0xBEEF_DEAD => "snfs".into(),
-        0x534F_434B => "sockfs".into(),
-        0x7371_7368 => "squashfs".into(),
-        0x6265_6572 => "sysfs".into(),
-        0x012F_F7B6 => "sysv2".into(),
-        0x012F_F7B5 => "sysv4".into(),
-        0x0102_1994 => "tmpfs".into(),
-        0x7472_6163 => "tracefs".into(),
-        0x2405_1905 => "ubifs".into(),
-        0x1501_3346 => "udf".into(),
-        0x0001_1954 => "ufs".into(),
-        0x5419_0100 => "ufs".into(),
-        0x9FA2 => "usbdevfs".into(),
-        0x0102_1997 => "v9fs".into(),
-        0xBACB_ACBC => "vmhgfs".into(),
-        0xA501_FCF5 => "vxfs".into(),
-        0x565A_4653 => "vzfs".into(),
-        0x5346_4846 => "wslfs".into(),
-        0xABBA_1974 => "xenfs".into(),
-        0x012F_F7B4 => "xenix".into(),
-        0x5846_5342 => "xfs".into(),
-        0x012F_D16D => "xia".into(),
-        0x2FC1_2FC1 => "zfs".into(),
-        0xDE => "zfs".into(),
-        other => format!("UNKNOWN ({other:#x})").into(),
-    }
-    // spell-checker:enable
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    #[cfg(unix)]
-    fn test_file_type() {
-        assert_eq!("block special file", pretty_filetype(S_IFBLK, 0));
-        assert_eq!("character special file", pretty_filetype(S_IFCHR, 0));
-        assert_eq!("regular file", pretty_filetype(S_IFREG, 1));
-        assert_eq!("regular empty file", pretty_filetype(S_IFREG, 0));
-        assert_eq!("weird file (0000000)", pretty_filetype(0, 0));
-    }
-
-    #[test]
-    fn test_fs_type() {
-        // spell-checker:disable
-        assert_eq!("ext2/ext3", pretty_fstype(0xEF53));
-        assert_eq!("tmpfs", pretty_fstype(0x0102_1994));
-        assert_eq!("nfs", pretty_fstype(0x6969));
-        assert_eq!("btrfs", pretty_fstype(0x9123_683e));
-        assert_eq!("xfs", pretty_fstype(0x5846_5342));
-        assert_eq!("zfs", pretty_fstype(0x2FC1_2FC1));
-        assert_eq!("ntfs", pretty_fstype(0x5346_544e));
-        assert_eq!("fat", pretty_fstype(0x4006));
-        assert_eq!("UNKNOWN (0x1234)", pretty_fstype(0x1234));
-        // spell-checker:enable
-    }
-
-    #[test]
-    #[cfg(any(target_os = "linux", target_os = "android"))]
-    fn test_mountinfo() {
-        // spell-checker:ignore (word) relatime
-        let info = MountInfo::new(
-            LINUX_MOUNTINFO,
-            &b"106 109 253:6 / /mnt rw,relatime - xfs /dev/fs0 rw"
-                .split(|c| *c == b' ')
-                .collect::<Vec<_>>(),
-        )
-        .unwrap();
-
-        assert_eq!(info.mount_root, "/");
-        assert_eq!(info.mount_dir, "/mnt");
-        assert_eq!(info.mount_option, "rw,relatime");
-        assert_eq!(info.fs_type, "xfs");
-        assert_eq!(info.dev_name, "/dev/fs0");
-
-        // Test parsing with different amounts of optional fields.
-        let info = MountInfo::new(
-            LINUX_MOUNTINFO,
-            &b"106 109 253:6 / /mnt rw,relatime master:1 - xfs /dev/fs0 rw"
-                .split(|c| *c == b' ')
-                .collect::<Vec<_>>(),
-        )
-        .unwrap();
-
-        assert_eq!(info.fs_type, "xfs");
-        assert_eq!(info.dev_name, "/dev/fs0");
-
-        let info = MountInfo::new(
-            LINUX_MOUNTINFO,
-            &b"106 109 253:6 / /mnt rw,relatime master:1 shared:2 - xfs /dev/fs0 rw"
-                .split(|c| *c == b' ')
-                .collect::<Vec<_>>(),
-        )
-        .unwrap();
-
-        assert_eq!(info.fs_type, "xfs");
-        assert_eq!(info.dev_name, "/dev/fs0");
-    }
-
-    #[test]
-    #[cfg(any(target_os = "linux", target_os = "android"))]
-    fn test_mountinfo_dir_special_chars() {
-        let info = MountInfo::new(
-            LINUX_MOUNTINFO,
-            &br"317 61 7:0 / /mnt/f\134\040\011oo rw,relatime shared:641 - ext4 /dev/loop0 rw"
-                .split(|c| *c == b' ')
-                .collect::<Vec<_>>(),
-        )
-        .unwrap();
-
-        assert_eq!(info.mount_dir, r"/mnt/f\ 	oo");
-
-        let info = MountInfo::new(
-            LINUX_MTAB,
-            &br"/dev/loop0 /mnt/f\134\040\011oo ext4 rw,relatime 0 0"
-                .split(|c| *c == b' ')
-                .collect::<Vec<_>>(),
-        )
-        .unwrap();
-
-        assert_eq!(info.mount_dir, r"/mnt/f\ 	oo");
-    }
-
-    #[test]
-    #[cfg(any(target_os = "linux", target_os = "android"))]
-    fn test_mountinfo_dir_non_unicode() {
-        let info = MountInfo::new(
-            LINUX_MOUNTINFO,
-            &b"317 61 7:0 / /mnt/some-\xc0-dir-\xf3 rw,relatime shared:641 - ext4 /dev/loop0 rw"
-                .split(|c| *c == b' ')
-                .collect::<Vec<_>>(),
-        )
-        .unwrap();
-
-        assert_eq!(
-            info.mount_dir,
-            crate::os_str_from_bytes(b"/mnt/some-\xc0-dir-\xf3").unwrap()
-        );
-
-        let info = MountInfo::new(
-            LINUX_MOUNTINFO,
-            &b"317 61 7:0 / /mnt/some-\\040-dir-\xf3 rw,relatime shared:641 - ext4 /dev/loop0 rw"
-                .split(|c| *c == b' ')
-                .collect::<Vec<_>>(),
-        )
-        .unwrap();
-
-        // Note that the \040 above will have been substituted by a space.
-        assert_eq!(
-            info.mount_dir,
-            crate::os_str_from_bytes(b"/mnt/some- -dir-\xf3").unwrap()
-        );
-    }
-
-    #[test]
-    #[cfg(any(target_os = "linux", target_os = "android"))]
-    fn test_mountinfo_malformed_rows_are_skipped() {
-        assert!(MountInfo::new(LINUX_MOUNTINFO, &[]).is_none());
-        assert!(MountInfo::new(
-            LINUX_MOUNTINFO,
-            &b"106 109 253:6 / /mnt rw,relatime"
-                .split(|c| *c == b' ')
-                .collect::<Vec<_>>(),
-        )
-        .is_none());
-        assert!(MountInfo::new(
-            LINUX_MOUNTINFO,
-            &b"106 109 253:6 / /mnt rw,relatime - ext4"
-                .split(|c| *c == b' ')
-                .collect::<Vec<_>>(),
-        )
-        .is_none());
-        assert!(MountInfo::new(
-            LINUX_MTAB,
-            &b"/dev/root / ext4"
-                .split(|c| *c == b' ')
-                .collect::<Vec<_>>(),
-        )
-        .is_none());
-    }
-
-    #[test]
-    #[cfg(all(unix, not(target_os = "redox")))]
-    // spell-checker:ignore (word) binfmt
-    fn test_binfmt_misc_is_dummy() {
-        use super::is_dummy_filesystem;
-        assert!(is_dummy_filesystem("binfmt_misc", ""));
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/fsxattr.rs b/registry/native/stubs/uucore/src/lib/features/fsxattr.rs
deleted file mode 100644
index d42b05c4a..000000000
--- a/registry/native/stubs/uucore/src/lib/features/fsxattr.rs
+++ /dev/null
@@ -1,333 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore getxattr posix_acl_default
-
-//! Set of functions to manage xattr on files and dirs
-use itertools::Itertools;
-use rustc_hash::FxHashMap;
-use std::ffi::{OsStr, OsString};
-#[cfg(unix)]
-use std::os::unix::ffi::OsStrExt;
-use std::path::Path;
-
-const POSIX_ACL_XATTR_VERSION: u32 = 2;
-const POSIX_ACL_XATTR_HEADER_LEN: usize = 4;
-const POSIX_ACL_XATTR_ENTRY_LEN: usize = 8;
-
-/// Copies extended attributes (xattrs) from one file or directory to another.
-///
-/// # Arguments
-///
-/// * `source` - A reference to the source path.
-/// * `dest` - A reference to the destination path.
-///
-/// # Returns
-///
-/// A result indicating success or failure.
-pub fn copy_xattrs<P: AsRef<Path>>(source: P, dest: P) -> std::io::Result<()> {
-    for attr_name in xattr::list(&source)? {
-        if let Some(value) = xattr::get(&source, &attr_name)? {
-            xattr::set(&dest, &attr_name, &value)?;
-        }
-    }
-    Ok(())
-}
-
-/// Like `copy_xattrs`, but skips the security.selinux attribute.
-#[cfg(unix)]
-pub fn copy_xattrs_skip_selinux<P: AsRef<Path>>(source: P, dest: P) -> std::io::Result<()> {
-    for attr_name in xattr::list(&source)? {
-        if attr_name.to_string_lossy() != "security.selinux" {
-            if let Some(value) = xattr::get(&source, &attr_name)? {
-                xattr::set(&dest, &attr_name, &value)?;
-            }
-        }
-    }
-    Ok(())
-}
-
-/// Retrieves the extended attributes (xattrs) of a given file or directory.
-///
-/// # Arguments
-///
-/// * `source` - A reference to the path of the file or directory.
-///
-/// # Returns
-///
-/// A result containing a HashMap of attributes names and values, or an error.
-pub fn retrieve_xattrs<P: AsRef<Path>>(source: P) -> std::io::Result<FxHashMap<OsString, Vec<u8>>> {
-    let mut attrs = FxHashMap::default();
-    for attr_name in xattr::list(&source)? {
-        if let Some(value) = xattr::get(&source, &attr_name)? {
-            attrs.insert(attr_name, value);
-        }
-    }
-    Ok(attrs)
-}
-
-/// Applies extended attributes (xattrs) to a given file or directory.
-///
-/// # Arguments
-///
-/// * `dest` - A reference to the path of the file or directory.
-/// * `xattrs` - A HashMap containing attribute names and their corresponding values.
-///
-/// # Returns
-///
-/// A result indicating success or failure.
-pub fn apply_xattrs<P: AsRef<Path>>(
-    dest: P,
-    xattrs: FxHashMap<OsString, Vec<u8>>,
-) -> std::io::Result<()> {
-    for (attr, value) in xattrs {
-        xattr::set(&dest, &attr, &value)?;
-    }
-    Ok(())
-}
-
-/// Checks if a file has an Access Control List (ACL) based on its extended attributes.
-///
-/// # Arguments
-///
-/// * `file` - A reference to the path of the file.
-///
-/// # Returns
-///
-/// `true` if the file has extended attributes (indicating an ACL), `false` otherwise.
-pub fn has_acl<P: AsRef<Path>>(file: P) -> bool {
-    // don't use exacl here, it is doing more getxattr call then needed
-    xattr::list_deref(file).is_ok_and(|acl| {
-        // if we have extra attributes, we have an acl
-        acl.count() > 0
-    })
-}
-
-/// Checks if a file has an Access Control List (ACL) named "security.capability" based on its extended attributes.
-///
-/// # Arguments
-///
-/// * `file` - A reference to the path of the file.
-///
-/// # Returns
-///
-/// `true` if the file has an extended attribute named "security.capability", `false` otherwise.
-pub fn has_security_cap_acl<P: AsRef<Path>>(file: P) -> bool {
-    // don't use exacl here, it is doing more getxattr call then needed
-    xattr::list_deref(file).is_ok_and(|mut acl| {
-        #[cfg(unix)]
-        return acl.contains(OsStr::from_bytes(b"security.capability"));
-
-        #[cfg(not(unix))]
-        return false;
-    })
-}
-
-/// Returns the permissions bits of a file or directory which has Access Control List (ACL) entries based on its
-/// extended attributes (Only works for linux)
-///
-/// # Arguments
-///
-/// * `source` - A reference to the path of the file.
-///
-/// # Returns
-///
-/// `u32`  the perm bits of a file having extended attributes of type 'system.posix_acl_default' with permissions
-/// otherwise returns a 0 if perm bits are 0 or the file has no extended attributes
-pub fn get_acl_perm_bits_from_xattr<P: AsRef<Path>>(source: P) -> u32 {
-    // TODO: Modify this to work on non linux unix systems.
-
-    // Only default acl entries get inherited by objects under the path i.e. if child directories
-    // will have their permissions modified.
-    if let Ok(entries) = retrieve_xattrs(source) {
-        if let Some(value) = entries.get(&OsString::from("system.posix_acl_default")) {
-            return acl_perm_bits_from_xattr_value(value);
-        }
-    }
-    0
-}
-
-fn acl_perm_bits_from_xattr_value(value: &[u8]) -> u32 {
-    let Some(header) = value.get(..POSIX_ACL_XATTR_HEADER_LEN) else {
-        return 0;
-    };
-
-    let version = u32::from_le_bytes([header[0], header[1], header[2], header[3]]);
-    if version != POSIX_ACL_XATTR_VERSION {
-        return 0;
-    }
-
-    let entries = &value[POSIX_ACL_XATTR_HEADER_LEN..];
-    if entries.len() % POSIX_ACL_XATTR_ENTRY_LEN != 0 {
-        return 0;
-    }
-
-    let mut perm: u32 = 0;
-    for entry in entries.chunks_exact(POSIX_ACL_XATTR_ENTRY_LEN) {
-        let entry_perm = u16::from_le_bytes([entry[2], entry[3]]);
-        if entry_perm > 0o7 {
-            return 0;
-        }
-
-        perm = (perm << 3) | u32::from(entry_perm);
-    }
-
-    perm
-}
-
-// FIXME: 3 tests failed on OpenBSD
-#[cfg(not(target_os = "openbsd"))]
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::fs::File;
-    use tempfile::tempdir;
-
-    #[test]
-    fn test_copy_xattrs() {
-        let temp_dir = tempdir().unwrap();
-        let source_path = temp_dir.path().join("source.txt");
-        let dest_path = temp_dir.path().join("dest.txt");
-
-        File::create(&source_path).unwrap();
-        File::create(&dest_path).unwrap();
-
-        let test_attr = "user.test";
-        let test_value = b"test value";
-        xattr::set(&source_path, test_attr, test_value).unwrap();
-
-        copy_xattrs(&source_path, &dest_path).unwrap();
-
-        let copied_value = xattr::get(&dest_path, test_attr).unwrap().unwrap();
-        assert_eq!(copied_value, test_value);
-    }
-
-    #[test]
-    fn test_apply_and_retrieve_xattrs() {
-        let temp_dir = tempdir().unwrap();
-        let file_path = temp_dir.path().join("test_file.txt");
-
-        File::create(&file_path).unwrap();
-
-        let mut test_xattrs = FxHashMap::default();
-        let test_attr = "user.test_attr";
-        let test_value = b"test value";
-        test_xattrs.insert(OsString::from(test_attr), test_value.to_vec());
-        apply_xattrs(&file_path, test_xattrs).unwrap();
-
-        let retrieved_xattrs = retrieve_xattrs(&file_path).unwrap();
-        assert!(retrieved_xattrs.contains_key(OsString::from(test_attr).as_os_str()));
-        assert_eq!(
-            retrieved_xattrs
-                .get(OsString::from(test_attr).as_os_str())
-                .unwrap(),
-            test_value
-        );
-    }
-
-    #[test]
-    #[cfg(target_os = "linux")]
-    fn test_get_perm_bits_from_xattr_value() {
-        let test_value = vec![
-            2, 0, 0, 0, 1, 0, 7, 0, 255, 255, 255, 255, 4, 0, 0, 0, 255, 255, 255, 255, 32, 0, 0,
-            0, 255, 255, 255, 255,
-        ];
-
-        assert_eq!(0o700, acl_perm_bits_from_xattr_value(&test_value));
-    }
-
-    #[test]
-    #[cfg(target_os = "linux")]
-    fn test_get_perm_bits_from_xattr_value_rejects_malformed_entries() {
-        assert_eq!(0, acl_perm_bits_from_xattr_value(&[]));
-        assert_eq!(0, acl_perm_bits_from_xattr_value(&[2, 0, 0]));
-        assert_eq!(
-            0,
-            acl_perm_bits_from_xattr_value(&[3, 0, 0, 0, 1, 0, 7, 0, 255, 255, 255, 255])
-        );
-        assert_eq!(0, acl_perm_bits_from_xattr_value(&[2, 0, 0, 0, 1, 0, 7, 0]));
-        assert_eq!(
-            0,
-            acl_perm_bits_from_xattr_value(&[2, 0, 0, 0, 1, 0, 8, 0, 255, 255, 255, 255])
-        );
-    }
-
-    #[test]
-    #[cfg(target_os = "linux")]
-    fn test_get_perm_bits_from_xattrs() {
-        let temp_dir = tempdir().unwrap();
-        let source_path = temp_dir.path().join("source_dir");
-
-        std::fs::create_dir(&source_path).unwrap();
-
-        let test_attr = "system.posix_acl_default";
-        // posix_acl entries are in the form of
-        // struct posix_acl_entry{
-        //  tag: u16,
-        //  perm: u16,
-        //  id: u32,
-        // }
-        // the fields are serialized in little endian.
-        // The entries are preceded by a header of value of 0x0002
-        // Reference: `<https://github.com/torvalds/linux/blob/master/include/uapi/linux/posix_acl_xattr.h>`
-        // The id is undefined i.e. -1 which in u32 is 0xFFFFFFFF and tag and perm bits as given in the
-        // header file.
-        // Reference: `<https://github.com/torvalds/linux/blob/master/include/uapi/linux/posix_acl.h>`
-        //
-        //
-        // There is a bindgen bug which generates the ACL_OTHER constant whose value is 0x20 into 32.
-        // which when the bug is fixed will need to be changed back to 20 from 32 in the vec 'test_value'.
-        //
-        // Reference `<https://github.com/rust-lang/rust-bindgen/issues/2926>`
-        //
-        // The test_value vector is the header 0x0002 followed by tag and permissions for user_obj , tag
-        // and permissions and for group_obj and finally the tag and permissions for ACL_OTHER. Each
-        // entry has undefined id as mentioned above.
-        //
-        //
-
-        let test_value = vec![
-            2, 0, 0, 0, 1, 0, 7, 0, 255, 255, 255, 255, 4, 0, 0, 0, 255, 255, 255, 255, 32, 0, 0,
-            0, 255, 255, 255, 255,
-        ];
-
-        xattr::set(&source_path, test_attr, test_value.as_slice()).unwrap();
-
-        let perm_bits = get_acl_perm_bits_from_xattr(source_path);
-
-        assert_eq!(0o700, perm_bits);
-    }
-
-    #[test]
-    fn test_file_has_acl() {
-        let temp_dir = tempdir().unwrap();
-        let file_path = temp_dir.path().join("test_file.txt");
-
-        File::create(&file_path).unwrap();
-
-        // FIXME: this fails on a system that uses SELinux
-        assert!(!has_acl(&file_path));
-
-        let test_attr = "user.test_acl";
-        let test_value = b"test value";
-        xattr::set(&file_path, test_attr, test_value).unwrap();
-
-        assert!(has_acl(&file_path));
-        assert!(!has_security_cap_acl(&file_path));
-
-        // FreeBSD/NetBSD's xattr library does not support the "security" namespace
-        // (https://github.com/Stebalien/xattr/blob/master/src/sys/bsd.rs#L148).
-        // However, individual file systems might still implement additional namespaces according to
-        // https://man.freebsd.org/cgi/man.cgi?query=extattr&sektion=9&manpath=FreeBSD+14.3-RELEASE+and+Ports
-        #[cfg(not(any(target_os = "freebsd", target_os = "netbsd")))]
-        {
-            let test_attr = "security.capability";
-            let test_value = b"";
-            xattr::set(&file_path, test_attr, test_value).unwrap();
-
-            assert!(has_security_cap_acl(&file_path));
-        }
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/hardware.rs b/registry/native/stubs/uucore/src/lib/features/hardware.rs
deleted file mode 100644
index 474990343..000000000
--- a/registry/native/stubs/uucore/src/lib/features/hardware.rs
+++ /dev/null
@@ -1,453 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! CPU hardware capability detection for performance-sensitive utilities
-//!
-//! This module provides a unified interface for detecting CPU features and
-//! respecting environment-based SIMD policies (e.g., GLIBC_TUNABLES).
-//!
-//! It provides 2 structures, from which we can get capabilities:
-//! - [`CpuFeatures`], which contains the raw available CPU features;
-//! - [`SimdPolicy`], which relies on [`CpuFeatures`] and the `GLIBC_TUNABLES`
-//!   environment variable to get the *enabled* CPU features
-//!
-//! # Use Cases
-//!
-//! - `cksum --debug`: Report hardware acceleration capabilities
-//! - `wc --debug`: Report SIMD usage and GLIBC_TUNABLES restrictions
-//! - Runtime decisions: Enable/disable SIMD paths based on environment
-//!
-//! # Examples
-//!
-//! ```no_run
-//! use uucore::hardware::{CpuFeatures, SimdPolicy, HasHardwareFeatures as _};
-//!
-//! // Simple hardware detection
-//! let features = CpuFeatures::detect();
-//! if features.has_avx2() {
-//!     println!("CPU has AVX2 support");
-//! }
-//!
-//! // Check SIMD policy (respects GLIBC_TUNABLES)
-//! let policy = SimdPolicy::detect();
-//! if policy.has_avx2() {
-//!     println!("CPU has AVX2 support and it is not disabled by env");
-//! }
-//! if policy.allows_simd() {
-//!     // Use SIMD-accelerated path
-//! } else {
-//!     // Fall back to scalar implementation
-//! }
-//! ```
-
-use std::collections::BTreeSet;
-use std::env;
-use std::sync::OnceLock;
-
-#[derive(Debug, PartialEq, Eq, PartialOrd, Ord, Clone, Copy)]
-pub enum HardwareFeature {
-    /// AVX-512 support (x86/x86_64 only)
-    Avx512,
-    /// AVX2 support (x86/x86_64 only)
-    Avx2,
-    /// PCLMULQDQ support for CRC acceleration (x86/x86_64 only)
-    PclMul,
-    /// VMULL support for CRC acceleration (ARM only)
-    Vmull,
-    /// SSE2 support (x86/x86_64 only)
-    Sse2,
-    /// ARM ASIMD/NEON support (aarch64 only)
-    Asimd,
-}
-
-pub struct InvalidHardwareFeature;
-
-impl TryFrom<&str> for HardwareFeature {
-    type Error = InvalidHardwareFeature;
-
-    fn try_from(value: &str) -> Result<Self, Self::Error> {
-        use HardwareFeature::*;
-        match value {
-            "AVX512" | "AVX512F" => Ok(Avx512),
-            "AVX2" => Ok(Avx2),
-            "PCLMUL" | "PMULL" => Ok(PclMul),
-            "VMULL" => Ok(Vmull),
-            "SSE2" => Ok(Sse2),
-            "ASIMD" => Ok(Asimd),
-            _ => Err(InvalidHardwareFeature),
-        }
-    }
-}
-
-/// Trait for implementing common hardware feature checks.
-///
-/// This is used for the `CpuFeatures` struct, that holds the CPU capabilities,
-/// and for the `SimdPolicy` type that computes the enabled features with the
-/// environment variables.
-pub trait HasHardwareFeatures {
-    fn has_feature(&self, feat: HardwareFeature) -> bool;
-
-    fn iter_features(&self) -> impl Iterator<Item = HardwareFeature>;
-
-    /// Check if AVX-512 is available (x86/x86_64 only)
-    #[inline]
-    fn has_avx512(&self) -> bool {
-        self.has_feature(HardwareFeature::Avx512)
-    }
-
-    /// Check if AVX2 is available (x86/x86_64 only)
-    #[inline]
-    fn has_avx2(&self) -> bool {
-        self.has_feature(HardwareFeature::Avx2)
-    }
-
-    /// Check if PCLMULQDQ is available (x86/x86_64 only)
-    #[inline]
-    fn has_pclmul(&self) -> bool {
-        self.has_feature(HardwareFeature::PclMul)
-    }
-
-    /// Check if VMULL is available (ARM only)
-    #[inline]
-    fn has_vmull(&self) -> bool {
-        self.has_feature(HardwareFeature::Vmull)
-    }
-
-    /// Check if SSE2 is available (x86/x86_64 only)
-    #[inline]
-    fn has_sse2(&self) -> bool {
-        self.has_feature(HardwareFeature::Sse2)
-    }
-
-    /// Check if ARM ASIMD/NEON is available (aarch64 only)
-    #[inline]
-    fn has_asimd(&self) -> bool {
-        self.has_feature(HardwareFeature::Asimd)
-    }
-}
-
-/// CPU hardware features that affect performance
-///
-/// Provides platform-specific CPU feature detection with caching.
-/// Detection is performed once and cached for the lifetime of the process.
-#[derive(Debug, PartialEq, Eq, Clone)]
-pub struct CpuFeatures {
-    set: BTreeSet<HardwareFeature>,
-}
-impl CpuFeatures {
-    pub fn detect() -> &'static Self {
-        static FEATURES: OnceLock<CpuFeatures> = OnceLock::new();
-        FEATURES.get_or_init(Self::detect_impl)
-    }
-
-    fn detect_impl() -> Self {
-        let set = [
-            (HardwareFeature::Avx512, detect_avx512 as fn() -> bool),
-            (HardwareFeature::Avx2, detect_avx2),
-            (HardwareFeature::PclMul, detect_pclmul),
-            (HardwareFeature::Vmull, detect_vmull),
-            (HardwareFeature::Sse2, detect_sse2),
-            (HardwareFeature::Asimd, detect_asimd),
-        ]
-        .into_iter()
-        .filter_map(|(feat, detect)| detect().then_some(feat))
-        .collect();
-
-        Self { set }
-    }
-}
-
-impl HasHardwareFeatures for CpuFeatures {
-    fn has_feature(&self, feat: HardwareFeature) -> bool {
-        self.set.contains(&feat)
-    }
-
-    fn iter_features(&self) -> impl Iterator<Item = HardwareFeature> {
-        self.set.iter().copied()
-    }
-}
-
-/// SIMD policy based on environment variables
-///
-/// Respects GLIBC_TUNABLES environment variable to disable specific CPU features.
-/// This is used by GNU utilities to allow users to disable hardware acceleration.
-#[derive(Debug, Clone)]
-pub struct SimdPolicy {
-    /// Features disabled via GLIBC_TUNABLES (e.g., ["AVX2", "AVX512F"])
-    disabled_by_env: BTreeSet<HardwareFeature>,
-    hardware_features: &'static CpuFeatures,
-}
-
-impl SimdPolicy {
-    /// Get the global SIMD policy (cached)
-    ///
-    /// This checks both hardware capabilities and the GLIBC_TUNABLES environment
-    /// variable. The result is cached for the lifetime of the process.
-    ///
-    /// # Examples
-    ///
-    /// ```no_run
-    /// use uucore::hardware::SimdPolicy;
-    ///
-    /// let policy = SimdPolicy::detect();
-    /// if policy.allows_simd() {
-    ///     println!("SIMD is enabled");
-    /// } else {
-    ///     println!("SIMD disabled by: {:?}", policy.disabled_features());
-    /// }
-    /// ```
-    pub fn detect() -> &'static Self {
-        static POLICY: OnceLock<SimdPolicy> = OnceLock::new();
-        POLICY.get_or_init(Self::detect_impl)
-    }
-
-    fn detect_impl() -> Self {
-        let tunables = env::var("GLIBC_TUNABLES").unwrap_or_default();
-        let disabled_by_env = parse_disabled_features(&tunables);
-        let hardware_features = CpuFeatures::detect();
-
-        Self {
-            disabled_by_env,
-            hardware_features,
-        }
-    }
-
-    /// Returns true if any SIMD feature remains enabled after applying GLIBC_TUNABLES.
-    pub fn allows_simd(&self) -> bool {
-        self.iter_features().next().is_some()
-    }
-
-    pub fn disabled_features(&self) -> Vec<HardwareFeature> {
-        self.disabled_by_env.iter().copied().collect()
-    }
-}
-
-impl HasHardwareFeatures for SimdPolicy {
-    fn has_feature(&self, feat: HardwareFeature) -> bool {
-        self.hardware_features.has_feature(feat) && !self.disabled_by_env.contains(&feat)
-    }
-
-    fn iter_features(&self) -> impl Iterator<Item = HardwareFeature> {
-        self.hardware_features
-            .set
-            .difference(&self.disabled_by_env)
-            .copied()
-    }
-}
-
-// Platform-specific feature detection
-
-#[cfg(any(target_arch = "x86", target_arch = "x86_64"))]
-fn detect_avx512() -> bool {
-    if cfg!(target_os = "android") {
-        false
-    } else {
-        std::arch::is_x86_feature_detected!("avx512f")
-            && std::arch::is_x86_feature_detected!("avx512bw")
-    }
-}
-
-#[cfg(not(any(target_arch = "x86", target_arch = "x86_64")))]
-fn detect_avx512() -> bool {
-    false
-}
-
-#[cfg(any(target_arch = "x86", target_arch = "x86_64"))]
-fn detect_avx2() -> bool {
-    if cfg!(target_os = "android") {
-        false
-    } else {
-        std::arch::is_x86_feature_detected!("avx2")
-    }
-}
-
-#[cfg(not(any(target_arch = "x86", target_arch = "x86_64")))]
-fn detect_avx2() -> bool {
-    false
-}
-
-#[cfg(any(target_arch = "x86", target_arch = "x86_64"))]
-fn detect_pclmul() -> bool {
-    if cfg!(target_os = "android") {
-        false
-    } else {
-        std::arch::is_x86_feature_detected!("pclmulqdq")
-    }
-}
-
-#[cfg(not(any(target_arch = "x86", target_arch = "x86_64")))]
-fn detect_pclmul() -> bool {
-    false
-}
-
-#[cfg(any(target_arch = "x86", target_arch = "x86_64"))]
-fn detect_sse2() -> bool {
-    if cfg!(target_os = "android") {
-        false
-    } else {
-        std::arch::is_x86_feature_detected!("sse2")
-    }
-}
-
-#[cfg(not(any(target_arch = "x86", target_arch = "x86_64")))]
-fn detect_sse2() -> bool {
-    false
-}
-
-#[cfg(all(target_arch = "aarch64", target_endian = "little"))]
-fn detect_asimd() -> bool {
-    if cfg!(target_os = "android") {
-        false
-    } else {
-        std::arch::is_aarch64_feature_detected!("asimd")
-    }
-}
-
-#[cfg(not(all(target_arch = "aarch64", target_endian = "little")))]
-fn detect_asimd() -> bool {
-    false
-}
-
-#[cfg(target_arch = "aarch64")]
-fn detect_vmull() -> bool {
-    // VMULL is part of ARM NEON/ASIMD
-    // For now, we use ASIMD as a proxy
-    detect_asimd()
-}
-
-#[cfg(not(target_arch = "aarch64"))]
-fn detect_vmull() -> bool {
-    false
-}
-
-// GLIBC_TUNABLES parsing
-
-/// Parse GLIBC_TUNABLES environment variable for disabled features
-///
-/// Format: `glibc.cpu.hwcaps=-AVX2,-AVX512F`
-/// Multiple tunable sections can be separated by colons.
-fn parse_disabled_features(tunables: &str) -> BTreeSet<HardwareFeature> {
-    if tunables.is_empty() {
-        return BTreeSet::new();
-    }
-
-    let mut disabled = BTreeSet::new();
-
-    // GLIBC_TUNABLES format: "tunable1=value1:tunable2=value2"
-    for entry in tunables.split(':') {
-        let entry = entry.trim();
-        let Some((name, raw_value)) = entry.split_once('=') else {
-            continue;
-        };
-
-        // We only care about glibc.cpu.hwcaps
-        if name.trim() != "glibc.cpu.hwcaps" {
-            continue;
-        }
-
-        // Parse comma-separated features, disabled ones start with '-'
-        for token in raw_value.split(',') {
-            let token = token.trim();
-            if let Some(feature) = token.strip_prefix('-') {
-                let feature =
-                    HardwareFeature::try_from(feature.trim().to_ascii_uppercase().as_str());
-                if let Ok(feature) = feature {
-                    disabled.insert(feature);
-                }
-            }
-        }
-    }
-
-    disabled
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn test_cpu_features_detection() {
-        let features = CpuFeatures::detect();
-        // Just verify it doesn't panic and returns consistent results
-        let features2 = CpuFeatures::detect();
-        assert_eq!(features, features2);
-    }
-
-    #[test]
-    fn test_parse_disabled_features_empty() {
-        assert_eq!(parse_disabled_features(""), BTreeSet::new());
-    }
-
-    #[test]
-    fn test_parse_disabled_features_single() {
-        let result = parse_disabled_features("glibc.cpu.hwcaps=-AVX2");
-        let mut expected = BTreeSet::new();
-
-        expected.insert(HardwareFeature::Avx2);
-
-        assert_eq!(result, expected);
-    }
-
-    #[test]
-    fn test_parse_disabled_features_multiple() {
-        let result = parse_disabled_features("glibc.cpu.hwcaps=-AVX2,-AVX512F");
-        let mut expected = BTreeSet::new();
-
-        expected.insert(HardwareFeature::Avx2);
-        expected.insert(HardwareFeature::Avx512);
-
-        assert_eq!(result, expected);
-    }
-
-    #[test]
-    fn test_parse_disabled_features_mixed() {
-        let result = parse_disabled_features("glibc.cpu.hwcaps=-AVX2,SSE2,-AVX512F");
-        let mut expected = BTreeSet::new();
-
-        expected.insert(HardwareFeature::Avx2);
-        expected.insert(HardwareFeature::Avx512);
-
-        // Only features with '-' prefix are disabled
-        assert_eq!(result, expected);
-    }
-
-    #[test]
-    fn test_parse_disabled_features_with_other_tunables() {
-        let result =
-            parse_disabled_features("glibc.malloc.check=1:glibc.cpu.hwcaps=-AVX2:other=value");
-        let mut expected = BTreeSet::new();
-
-        expected.insert(HardwareFeature::Avx2);
-
-        assert_eq!(result, expected);
-    }
-
-    #[test]
-    fn test_parse_disabled_features_case_insensitive() {
-        let result = parse_disabled_features("glibc.cpu.hwcaps=-avx2,-Avx512f");
-        let mut expected = BTreeSet::new();
-
-        expected.insert(HardwareFeature::Avx2);
-        expected.insert(HardwareFeature::Avx512);
-
-        // Only features with '-' prefix are disabled
-        assert_eq!(result, expected);
-    }
-
-    #[test]
-    fn test_simd_policy() {
-        let policy = SimdPolicy::detect();
-        // Just verify it works
-        let _ = policy.allows_simd();
-    }
-
-    #[test]
-    fn test_simd_policy_caching() {
-        let policy1 = SimdPolicy::detect();
-        let policy2 = SimdPolicy::detect();
-        // Should be same instance (pointer equality)
-        assert!(std::ptr::eq(policy1, policy2));
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/i18n/charmap.rs b/registry/native/stubs/uucore/src/lib/features/i18n/charmap.rs
deleted file mode 100644
index 724fcecb6..000000000
--- a/registry/native/stubs/uucore/src/lib/features/i18n/charmap.rs
+++ /dev/null
@@ -1,176 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore langinfo charmap eucjp euckr euctw CTYPE HKSCS hkscs localedata
-
-//! Locale-aware multi-byte character length detection via `LC_CTYPE`.
-
-use std::sync::OnceLock;
-
-enum MbEncoding {
-    Utf8,
-    Gb18030,
-    EucJp,
-    EucKr,
-    Big5,
-}
-
-fn encoding_from_name(enc: &str) -> MbEncoding {
-    match enc {
-        "gb18030" | "gbk" | "gb2312" => MbEncoding::Gb18030,
-        "euc-jp" | "eucjp" => MbEncoding::EucJp,
-        "euc-kr" | "euckr" => MbEncoding::EucKr,
-        "big5" | "big5-hkscs" | "big5hkscs" | "euc-tw" | "euctw" => MbEncoding::Big5,
-        _ => MbEncoding::Utf8,
-    }
-}
-
-fn get_encoding() -> &'static MbEncoding {
-    static ENCODING: OnceLock<MbEncoding> = OnceLock::new();
-    ENCODING.get_or_init(|| {
-        let val = ["LC_ALL", "LC_CTYPE", "LANG"]
-            .iter()
-            .find_map(|&k| std::env::var(k).ok().filter(|v| !v.is_empty()));
-        let s = match val.as_deref() {
-            Some(s) if s != "C" && s != "POSIX" => s,
-            _ => return MbEncoding::Utf8,
-        };
-        if let Some(enc) = s.split('.').nth(1) {
-            let enc = enc.split('@').next().unwrap_or(enc);
-            encoding_from_name(&enc.to_ascii_lowercase())
-        } else {
-            // Bare locale defaults from glibc localedata/SUPPORTED
-            match s.split('@').next().unwrap_or(s) {
-                "zh_CN" | "zh_SG" => MbEncoding::Gb18030,
-                "zh_TW" | "zh_HK" => MbEncoding::Big5,
-                _ => MbEncoding::Utf8,
-            }
-        }
-    })
-}
-
-/// Byte length of the first character in `bytes` under the current locale encoding.
-pub fn mb_char_len(bytes: &[u8]) -> usize {
-    if bytes.is_empty() {
-        return 0;
-    }
-
-    let b0 = bytes[0];
-    if b0 <= 0x7F {
-        return 1;
-    }
-    match get_encoding() {
-        MbEncoding::Utf8 => utf8_len(bytes, b0),
-        MbEncoding::Gb18030 => gb18030_len(bytes, b0),
-        MbEncoding::EucJp => eucjp_len(bytes, b0),
-        MbEncoding::EucKr => euckr_len(bytes, b0),
-        MbEncoding::Big5 => big5_len(bytes, b0),
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn test_mb_char_len_empty() {
-        assert_eq!(0, mb_char_len(&[]));
-    }
-
-    #[test]
-    fn test_mb_char_len_ascii() {
-        assert_eq!(1, mb_char_len(b"a"));
-    }
-
-    #[test]
-    fn test_truncated_multibyte_sequences_fall_back_to_one_byte() {
-        assert_eq!(1, utf8_len(&[0xE2], 0xE2));
-        assert_eq!(1, gb18030_len(&[0x81, 0x30, 0x81], 0x81));
-        assert_eq!(1, eucjp_len(&[0x8F, 0xA1], 0x8F));
-        assert_eq!(1, euckr_len(&[0xA1], 0xA1));
-        assert_eq!(1, big5_len(&[0x81], 0x81));
-    }
-
-    #[test]
-    fn test_valid_multibyte_sequences_report_full_length() {
-        assert_eq!(3, utf8_len(&[0xE2, 0x82, 0xAC], 0xE2));
-        assert_eq!(4, gb18030_len(&[0x81, 0x30, 0x81, 0x30], 0x81));
-        assert_eq!(3, eucjp_len(&[0x8F, 0xA1, 0xA1], 0x8F));
-        assert_eq!(2, euckr_len(&[0xA1, 0xA1], 0xA1));
-        assert_eq!(2, big5_len(&[0x81, 0x40], 0x81));
-    }
-}
-
-// All helpers below assume b0 > 0x7F (ASCII already handled by caller).
-
-fn utf8_len(b: &[u8], b0: u8) -> usize {
-    let n = match b0 {
-        0xC2..=0xDF => 2,
-        0xE0..=0xEF => 3,
-        0xF0..=0xF4 => 4,
-        _ => return 1,
-    };
-    if b.len() >= n && b[1..n].iter().all(|&c| c & 0xC0 == 0x80) {
-        n
-    } else {
-        1
-    }
-}
-
-// 2-byte: [81-FE][40-7E,80-FE]  4-byte: [81-FE][30-39][81-FE][30-39]
-fn gb18030_len(b: &[u8], b0: u8) -> usize {
-    if !(0x81..=0xFE).contains(&b0) {
-        return 1;
-    }
-    if b.len() >= 4
-        && (0x30..=0x39).contains(&b[1])
-        && (0x81..=0xFE).contains(&b[2])
-        && (0x30..=0x39).contains(&b[3])
-    {
-        return 4;
-    }
-    if b.len() >= 2 && ((0x40..=0x7E).contains(&b[1]) || (0x80..=0xFE).contains(&b[1])) {
-        return 2;
-    }
-    1
-}
-
-// 3-byte: [8F][A1-FE][A1-FE]  2-byte: [8E][A1-DF] or [A1-FE][A1-FE]
-fn eucjp_len(b: &[u8], b0: u8) -> usize {
-    if b0 == 0x8F && b.len() >= 3 && (0xA1..=0xFE).contains(&b[1]) && (0xA1..=0xFE).contains(&b[2])
-    {
-        return 3;
-    }
-    if b.len() >= 2 {
-        if b0 == 0x8E && (0xA1..=0xDF).contains(&b[1]) {
-            return 2;
-        }
-        if (0xA1..=0xFE).contains(&b0) && (0xA1..=0xFE).contains(&b[1]) {
-            return 2;
-        }
-    }
-    1
-}
-
-// 2-byte: [A1-FE][A1-FE]
-fn euckr_len(b: &[u8], b0: u8) -> usize {
-    if (0xA1..=0xFE).contains(&b0) && b.len() >= 2 && (0xA1..=0xFE).contains(&b[1]) {
-        2
-    } else {
-        1
-    }
-}
-
-// 2-byte: [81-FE][40-7E,A1-FE]
-fn big5_len(b: &[u8], b0: u8) -> usize {
-    if (0x81..=0xFE).contains(&b0)
-        && b.len() >= 2
-        && ((0x40..=0x7E).contains(&b[1]) || (0xA1..=0xFE).contains(&b[1]))
-    {
-        2
-    } else {
-        1
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/i18n/collator.rs b/registry/native/stubs/uucore/src/lib/features/i18n/collator.rs
deleted file mode 100644
index 4d1ee86d2..000000000
--- a/registry/native/stubs/uucore/src/lib/features/i18n/collator.rs
+++ /dev/null
@@ -1,94 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-use std::{cmp::Ordering, sync::OnceLock};
-
-use icu_collator::{self, CollatorBorrowed};
-
-use crate::i18n::{DEFAULT_LOCALE, get_collating_locale};
-
-pub use icu_collator::options::{
-    AlternateHandling, CaseLevel, CollatorOptions, MaxVariable, Strength,
-};
-
-static COLLATOR: OnceLock<CollatorBorrowed> = OnceLock::new();
-
-/// Will initialize the collator if not already initialized.
-/// returns `true` if initialization happened
-pub fn try_init_collator(opts: CollatorOptions) -> bool {
-    let Ok(collator) = CollatorBorrowed::try_new(get_collating_locale().0.clone().into(), opts)
-    else {
-        return false;
-    };
-
-    COLLATOR.set(collator).is_ok()
-}
-
-/// Will initialize the collator and panic if already initialized.
-pub fn init_collator(opts: CollatorOptions) {
-    COLLATOR
-        .set(
-            CollatorBorrowed::try_new(get_collating_locale().0.clone().into(), opts)
-                .expect("failed to initialize collator"),
-        )
-        .expect("Collator already initialized");
-}
-
-/// Check if locale collation should be used.
-pub fn should_use_locale_collation() -> bool {
-    get_collating_locale().0 != DEFAULT_LOCALE
-}
-
-/// Initialize the collator for locale-aware string comparison if needed.
-///
-/// This function checks if the current locale requires locale-aware collation
-/// (UTF-8 encoding) and initializes the ICU collator with appropriate settings
-/// if necessary. For C/POSIX locales, no initialization is needed as byte
-/// comparison is sufficient.
-///
-/// # Returns
-///
-/// `true` if the collator was initialized for a UTF-8 locale, `false` if
-/// using C/POSIX locale (no initialization needed).
-///
-/// # Example
-///
-/// ```
-/// use uucore::i18n::collator::init_locale_collation;
-///
-/// if init_locale_collation() {
-///     // Using locale-aware collation
-/// } else {
-///     // Using byte comparison (C/POSIX locale)
-/// }
-/// ```
-pub fn init_locale_collation() -> bool {
-    use crate::i18n::{UEncoding, get_locale_encoding};
-
-    // Check if we need locale-aware collation
-    if get_locale_encoding() != UEncoding::Utf8 {
-        // C/POSIX locale - no collator needed
-        return false;
-    }
-
-    // UTF-8 locale - initialize collator with Shifted mode to match GNU behavior
-    let mut opts = CollatorOptions::default();
-    opts.alternate_handling = Some(AlternateHandling::Shifted);
-
-    try_init_collator(opts)
-}
-
-/// Compare both strings with regard to the current locale.
-pub fn locale_cmp(left: &[u8], right: &[u8]) -> Ordering {
-    // If the detected locale is 'C', just do byte-wise comparison
-    if get_collating_locale().0 == DEFAULT_LOCALE {
-        left.cmp(right)
-    } else {
-        // Fall back to byte comparison if collator is not available
-        COLLATOR
-            .get()
-            .map_or_else(|| left.cmp(right), |c| c.compare_utf8(left, right))
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/i18n/datetime.rs b/registry/native/stubs/uucore/src/lib/features/i18n/datetime.rs
deleted file mode 100644
index c28e6746a..000000000
--- a/registry/native/stubs/uucore/src/lib/features/i18n/datetime.rs
+++ /dev/null
@@ -1,282 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore fieldsets prefs febr
-
-//! Locale-aware datetime formatting utilities using ICU and jiff-icu
-
-use icu_calendar::Date;
-use icu_calendar::cal::{Buddhist, Ethiopian, Iso, Persian};
-use icu_datetime::DateTimeFormatter;
-use icu_datetime::fieldsets;
-use icu_locale::Locale;
-use jiff::civil::Date as JiffDate;
-use jiff_icu::ConvertFrom;
-use std::sync::OnceLock;
-
-use crate::i18n::get_locale_from_env;
-
-#[derive(Default)]
-struct StrftimeReplacements {
-    year: Option<String>,
-    month: Option<String>,
-    day_zero_padded: Option<String>,
-    day_space_padded: Option<String>,
-    month_long: Option<String>,
-    month_abbrev: Option<String>,
-    weekday_long: Option<String>,
-    weekday_short: Option<String>,
-}
-
-/// Get the locale for time/date formatting from LC_TIME environment variable
-pub fn get_time_locale() -> &'static (Locale, super::UEncoding) {
-    static TIME_LOCALE: OnceLock<(Locale, super::UEncoding)> = OnceLock::new();
-
-    TIME_LOCALE.get_or_init(|| get_locale_from_env("LC_TIME"))
-}
-
-/// Check if we should use ICU for locale-aware time/date formatting
-///
-/// Returns true for non-C/POSIX locales, false otherwise
-pub fn should_use_icu_locale() -> bool {
-    use icu_locale::locale;
-
-    let (locale, _encoding) = get_time_locale();
-
-    // Use ICU for non-default locales (anything other than C/POSIX)
-    // The default locale is "und" (undefined) representing C/POSIX
-    *locale != locale!("und")
-}
-
-/// Determine the appropriate calendar system for a given locale
-pub fn get_locale_calendar_type(locale: &Locale) -> CalendarType {
-    let locale_str = locale.to_string();
-
-    match locale_str.as_str() {
-        // Thai locales use Buddhist calendar
-        s if s.starts_with("th") => CalendarType::Buddhist,
-        // Persian/Farsi locales use Persian calendar (Solar Hijri)
-        s if s.starts_with("fa") => CalendarType::Persian,
-        // Amharic (Ethiopian) locales use Ethiopian calendar
-        s if s.starts_with("am") => CalendarType::Ethiopian,
-        // Default to Gregorian for all other locales
-        _ => CalendarType::Gregorian,
-    }
-}
-
-/// Calendar types supported for locale-aware formatting
-#[derive(Debug, Clone, PartialEq)]
-pub enum CalendarType {
-    /// Gregorian calendar (used by most locales)
-    Gregorian,
-    /// Buddhist calendar (Thai locales) - adds 543 years to Gregorian year
-    Buddhist,
-    /// Persian Solar Hijri calendar (Persian/Farsi locales) - subtracts 621/622 years
-    Persian,
-    /// Ethiopian calendar (Amharic locales) - subtracts 7/8 years
-    Ethiopian,
-}
-
-/// Transform a strftime format string to use locale-specific calendar values
-pub fn localize_format_string(format: &str, date: JiffDate) -> String {
-    let (locale, _) = get_time_locale();
-    let iso_date = Date::<Iso>::convert_from(date);
-
-    let mut replacements = StrftimeReplacements::default();
-
-    // For non-Gregorian calendars, replace date components with converted values
-    let calendar_type = get_locale_calendar_type(locale);
-    if calendar_type != CalendarType::Gregorian {
-        let (cal_year, cal_month, cal_day) = match calendar_type {
-            CalendarType::Buddhist => {
-                let d = iso_date.to_calendar(Buddhist);
-                (d.extended_year(), d.month().ordinal, d.day_of_month().0)
-            }
-            CalendarType::Persian => {
-                let d = iso_date.to_calendar(Persian);
-                (d.extended_year(), d.month().ordinal, d.day_of_month().0)
-            }
-            CalendarType::Ethiopian => {
-                let d = iso_date.to_calendar(Ethiopian::new());
-                (d.extended_year(), d.month().ordinal, d.day_of_month().0)
-            }
-            CalendarType::Gregorian => unreachable!(),
-        };
-        replacements.year = Some(cal_year.to_string());
-        replacements.month = Some(format!("{cal_month:02}"));
-        replacements.day_zero_padded = Some(format!("{cal_day:02}"));
-        replacements.day_space_padded = Some(format!("{cal_day:2}"));
-    }
-
-    // Format localized names using ICU DateTimeFormatter
-    let locale_prefs = locale.clone().into();
-
-    if format.contains("%B") {
-        if let Ok(f) = DateTimeFormatter::try_new(locale_prefs, fieldsets::M::long()) {
-            replacements.month_long = Some(f.format(&iso_date).to_string());
-        }
-    }
-    if format.contains("%b") || format.contains("%h") {
-        if let Ok(f) = DateTimeFormatter::try_new(locale_prefs, fieldsets::M::medium()) {
-            // ICU's medium format may include trailing periods (e.g., "febr." for Hungarian),
-            // which when combined with locale format strings that also add periods after
-            // %b (e.g., "%Y. %b. %d") results in double periods ("febr..").
-            // The standard C/POSIX locale via nl_langinfo returns abbreviations
-            // WITHOUT trailing periods, so we strip them here for consistency.
-            let month_abbrev = f.format(&iso_date).to_string();
-            let month_abbrev = month_abbrev.trim_end_matches('.').to_string();
-            replacements.month_abbrev = Some(month_abbrev);
-        }
-    }
-    if format.contains("%A") {
-        if let Ok(f) = DateTimeFormatter::try_new(locale_prefs, fieldsets::E::long()) {
-            replacements.weekday_long = Some(f.format(&iso_date).to_string());
-        }
-    }
-    if format.contains("%a") {
-        if let Ok(f) = DateTimeFormatter::try_new(locale_prefs, fieldsets::E::short()) {
-            replacements.weekday_short = Some(f.format(&iso_date).to_string());
-        }
-    }
-
-    replace_strftime_components(format, &replacements)
-}
-
-fn replace_strftime_components(format: &str, replacements: &StrftimeReplacements) -> String {
-    let mut replaced = String::with_capacity(format.len());
-    let mut chars = format.chars();
-
-    while let Some(ch) = chars.next() {
-        if ch != '%' {
-            replaced.push(ch);
-            continue;
-        }
-
-        let Some(next) = chars.next() else {
-            replaced.push('%');
-            break;
-        };
-
-        match next {
-            '%' => replaced.push_str("%%"),
-            'Y' => push_replacement_or_directive(&mut replaced, next, replacements.year.as_deref()),
-            'm' => {
-                push_replacement_or_directive(&mut replaced, next, replacements.month.as_deref())
-            }
-            'd' => push_replacement_or_directive(
-                &mut replaced,
-                next,
-                replacements.day_zero_padded.as_deref(),
-            ),
-            'e' => push_replacement_or_directive(
-                &mut replaced,
-                next,
-                replacements.day_space_padded.as_deref(),
-            ),
-            'B' => {
-                push_replacement_or_directive(
-                    &mut replaced,
-                    next,
-                    replacements.month_long.as_deref(),
-                );
-            }
-            'b' | 'h' => {
-                push_replacement_or_directive(
-                    &mut replaced,
-                    next,
-                    replacements.month_abbrev.as_deref(),
-                );
-            }
-            'A' => {
-                push_replacement_or_directive(
-                    &mut replaced,
-                    next,
-                    replacements.weekday_long.as_deref(),
-                );
-            }
-            'a' => {
-                push_replacement_or_directive(
-                    &mut replaced,
-                    next,
-                    replacements.weekday_short.as_deref(),
-                );
-            }
-            _ => push_replacement_or_directive(&mut replaced, next, None),
-        }
-    }
-
-    replaced
-}
-
-fn push_replacement_or_directive(
-    replaced: &mut String,
-    directive: char,
-    replacement: Option<&str>,
-) {
-    if let Some(replacement) = replacement {
-        replaced.push_str(replacement);
-    } else {
-        replaced.push('%');
-        replaced.push(directive);
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn test_calendar_type_detection() {
-        use icu_locale::locale;
-        assert_eq!(
-            get_locale_calendar_type(&locale!("th-TH")),
-            CalendarType::Buddhist
-        );
-        assert_eq!(
-            get_locale_calendar_type(&locale!("fa-IR")),
-            CalendarType::Persian
-        );
-        assert_eq!(
-            get_locale_calendar_type(&locale!("am-ET")),
-            CalendarType::Ethiopian
-        );
-        assert_eq!(
-            get_locale_calendar_type(&locale!("en-US")),
-            CalendarType::Gregorian
-        );
-    }
-
-    #[test]
-    fn test_replace_strftime_components_preserves_escaped_percent() {
-        let replacements = StrftimeReplacements {
-            year: Some("2026".to_string()),
-            month: Some("06".to_string()),
-            day_zero_padded: Some("07".to_string()),
-            month_long: Some("June".to_string()),
-            month_abbrev: Some("Jun".to_string()),
-            weekday_long: Some("Sunday".to_string()),
-            weekday_short: Some("Sun".to_string()),
-            ..Default::default()
-        };
-
-        assert_eq!(
-            "2026-%%m-07-June-Jun-Jun-Sunday-Sun %% %q % %%B %%a",
-            replace_strftime_components("%Y-%%m-%d-%B-%b-%h-%A-%a %% %q % %%B %%a", &replacements,)
-        );
-    }
-
-    #[test]
-    fn test_replace_strftime_components_preserves_literal_nuls() {
-        let replacements = StrftimeReplacements {
-            year: Some("2026".to_string()),
-            ..Default::default()
-        };
-
-        assert_eq!(
-            "\0\02026",
-            replace_strftime_components("\0\0%Y", &replacements)
-        );
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/i18n/decimal.rs b/registry/native/stubs/uucore/src/lib/features/i18n/decimal.rs
deleted file mode 100644
index 08a36fba9..000000000
--- a/registry/native/stubs/uucore/src/lib/features/i18n/decimal.rs
+++ /dev/null
@@ -1,96 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-use std::sync::OnceLock;
-
-use icu_decimal::provider::DecimalSymbolsV1;
-use icu_locale::{Locale, locale};
-use icu_provider::prelude::*;
-
-use crate::i18n::get_numeric_locale;
-
-fn load_decimal_symbols(loc: Locale) -> Option<DataResponse<DecimalSymbolsV1>> {
-    let data_locale = DataLocale::from(loc);
-
-    let request = DataRequest {
-        id: DataIdentifierBorrowed::for_locale(&data_locale),
-        metadata: DataRequestMetadata::default(),
-    };
-
-    icu_decimal::provider::Baked.load(request).ok()
-}
-
-/// Return the decimal separator for the given locale
-fn get_decimal_separator(loc: Locale) -> String {
-    load_decimal_symbols(loc)
-        .map(|response| response.payload.get().decimal_separator().to_string())
-        .unwrap_or_else(|| ".".to_string())
-}
-
-/// Return the decimal separator from the language we're working with.
-/// Example:
-///  Say we need to format 1000.5
-///     en_US: 1,000.5 -> decimal separator is '.'
-///     fr_FR: 1 000,5 -> decimal separator is ','
-pub fn locale_decimal_separator() -> &'static str {
-    static DECIMAL_SEP: OnceLock<String> = OnceLock::new();
-
-    DECIMAL_SEP.get_or_init(|| get_decimal_separator(get_numeric_locale().0.clone()))
-}
-
-/// Return the grouping separator for the given locale
-fn get_grouping_separator(loc: Locale) -> String {
-    if loc == locale!("und") {
-        return String::new();
-    }
-
-    load_decimal_symbols(loc)
-        .map(|response| response.payload.get().grouping_separator().to_string())
-        .unwrap_or_default()
-}
-
-/// Return the grouping separator from the language we're working with.
-/// Example:
-///  Say we need to format 1,000
-///     en_US: 1,000 -> grouping separator is ','
-///     fr_FR: 1 000 -> grouping separator is '\u{202f}'
-pub fn locale_grouping_separator() -> &'static str {
-    static GROUPING_SEP: OnceLock<String> = OnceLock::new();
-
-    GROUPING_SEP.get_or_init(|| {
-        let loc = get_numeric_locale().0.clone();
-        // C/POSIX locale (represented as "und") has no grouping separator.
-        if loc == locale!("und") {
-            String::new()
-        } else {
-            get_grouping_separator(loc)
-        }
-    })
-}
-
-#[cfg(test)]
-mod tests {
-    use icu_locale::locale;
-
-    use super::{get_decimal_separator, get_grouping_separator};
-
-    #[test]
-    fn test_simple_decimal_separator() {
-        assert_eq!(get_decimal_separator(locale!("en")), ".");
-        assert_eq!(get_decimal_separator(locale!("fr")), ",");
-    }
-
-    #[test]
-    fn test_simple_grouping_separator() {
-        assert_eq!(get_grouping_separator(locale!("en")), ",");
-        assert_eq!(get_grouping_separator(locale!("fr")), "\u{202f}");
-    }
-
-    #[test]
-    fn test_default_locale_separators_do_not_panic() {
-        assert_eq!(get_decimal_separator(locale!("und")), ".");
-        assert_eq!(get_grouping_separator(locale!("und")), "");
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/i18n/mod.rs b/registry/native/stubs/uucore/src/lib/features/i18n/mod.rs
deleted file mode 100644
index 282baf2e7..000000000
--- a/registry/native/stubs/uucore/src/lib/features/i18n/mod.rs
+++ /dev/null
@@ -1,94 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-use std::sync::OnceLock;
-
-use icu_locale::{Locale, locale};
-
-#[cfg(feature = "i18n-charmap")]
-pub mod charmap;
-#[cfg(feature = "i18n-collator")]
-pub mod collator;
-#[cfg(feature = "i18n-datetime")]
-pub mod datetime;
-#[cfg(feature = "i18n-decimal")]
-pub mod decimal;
-
-/// The encoding specified by the locale, if specified
-/// Currently only supports ASCII and UTF-8 for the sake of simplicity.
-#[derive(Debug, PartialEq, Eq, Clone, Copy)]
-pub enum UEncoding {
-    Ascii,
-    Utf8,
-}
-
-// Use "und" (undefined) as the marker for C/POSIX locale
-// This ensures real locales like "en-US" won't match
-const DEFAULT_LOCALE: Locale = locale!("und");
-
-/// Look at 3 environment variables in the following order
-///
-/// 1. LC_ALL
-/// 2. `locale_name`
-/// 3. LANG
-///
-/// Or fallback on Posix locale, with ASCII encoding.
-pub fn get_locale_from_env(locale_name: &str) -> (Locale, UEncoding) {
-    let locale_var = ["LC_ALL", locale_name, "LANG"]
-        .iter()
-        .find_map(|&key| std::env::var(key).ok());
-
-    if let Some(locale_var_str) = locale_var {
-        let mut split = locale_var_str.split(&['.', '@']);
-
-        if let Some(simple) = split.next() {
-            // Handle explicit C and POSIX locales - these should always use byte comparison
-            if simple == "C" || simple == "POSIX" {
-                return (DEFAULT_LOCALE, UEncoding::Ascii);
-            }
-
-            // Naively convert the locale name to BCP47 tag format.
-            //
-            // See https://en.wikipedia.org/wiki/IETF_language_tag
-            let bcp47 = simple.replace('_', "-");
-            let locale = Locale::try_from_str(&bcp47).unwrap_or(DEFAULT_LOCALE);
-
-            // If locale parsing failed, parse the encoding part of the
-            // locale. Treat the special case of the given locale being "C"
-            // which becomes the default locale.
-            let encoding = if (locale != DEFAULT_LOCALE || bcp47 == "C")
-                && split.next().is_some_and(|enc| {
-                    let lower = enc.to_lowercase();
-                    lower == "utf-8" || lower == "utf8"
-                }) {
-                UEncoding::Utf8
-            } else {
-                UEncoding::Ascii
-            };
-            return (locale, encoding);
-        }
-    }
-    // Default POSIX locale representing LC_ALL=C
-    (DEFAULT_LOCALE, UEncoding::Ascii)
-}
-
-/// Get the collating locale from the environment
-pub fn get_collating_locale() -> &'static (Locale, UEncoding) {
-    static COLLATING_LOCALE: OnceLock<(Locale, UEncoding)> = OnceLock::new();
-
-    COLLATING_LOCALE.get_or_init(|| get_locale_from_env("LC_COLLATE"))
-}
-
-/// Get the numeric locale from the environment
-pub fn get_numeric_locale() -> &'static (Locale, UEncoding) {
-    static NUMERIC_LOCALE: OnceLock<(Locale, UEncoding)> = OnceLock::new();
-
-    NUMERIC_LOCALE.get_or_init(|| get_locale_from_env("LC_NUMERIC"))
-}
-
-/// Return the encoding deduced from the locale environment variable.
-pub fn get_locale_encoding() -> UEncoding {
-    get_collating_locale().1
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/lines.rs b/registry/native/stubs/uucore/src/lib/features/lines.rs
deleted file mode 100644
index 3e3c82b3a..000000000
--- a/registry/native/stubs/uucore/src/lib/features/lines.rs
+++ /dev/null
@@ -1,113 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// spell-checker:ignore (vars)
-//! Iterate over lines, including the line ending character(s).
-//!
-//! This module provides the [`lines`] function, similar to the
-//! [`BufRead::lines`] method. While the [`BufRead::lines`] method
-//! yields [`String`] instances that do not include the line ending
-//! characters (`"\n"` or `"\r\n"`), our functions yield
-//! [`Vec`]<['u8']> instances that include the line ending
-//! characters. This is useful if the input data does not end with a
-//! newline character and you want to preserve the exact form of the
-//! input data.
-use std::io::BufRead;
-
-/// Returns an iterator over the lines, including line ending characters.
-///
-/// This function is just like [`BufRead::lines`], but it includes the
-/// line ending characters in each yielded [`String`] if the input
-/// data has them. Set the `sep` parameter to the line ending
-/// character; for Unix line endings, use `b'\n'`.
-///
-/// # Examples
-///
-/// Use `sep` to specify an alternate character for line endings. For
-/// example, if lines are terminated by the null character `b'\0'`:
-///
-/// ```rust,ignore
-/// use std::io::BufRead;
-/// use std::io::Cursor;
-///
-/// let cursor = Cursor::new(b"x\0y\0z\0");
-/// let mut it = lines(cursor, b'\0').map(|l| l.unwrap());
-///
-/// assert_eq!(it.next(), Some(Vec::from("x\0")));
-/// assert_eq!(it.next(), Some(Vec::from("y\0")));
-/// assert_eq!(it.next(), Some(Vec::from("z\0")));
-/// assert_eq!(it.next(), None);
-/// ```
-///
-/// If the input data does not end with a newline character (`'\n'`),
-/// then the last [`String`] yielded by this iterator also does not
-/// end with a newline:
-///
-/// ```rust,ignore
-/// let cursor = Cursor::new(b"x\ny\nz");
-/// let mut it = lines(cursor, b'\n').map(|l| l.unwrap());
-///
-/// assert_eq!(it.next(), Some(Vec::from("x\n")));
-/// assert_eq!(it.next(), Some(Vec::from("y\n")));
-/// assert_eq!(it.next(), Some(Vec::from("z")));
-/// assert_eq!(it.next(), None);
-/// ```
-pub fn lines<B>(reader: B, sep: u8) -> Lines<B>
-where
-    B: BufRead,
-{
-    Lines { buf: reader, sep }
-}
-
-/// An iterator over the lines of an instance of `BufRead`.
-///
-/// This struct is generally created by calling [`lines`] on a `BufRead`.
-/// Please see the documentation of [`lines`] for more details.
-pub struct Lines<B> {
-    buf: B,
-    sep: u8,
-}
-
-impl<B: BufRead> Iterator for Lines<B> {
-    type Item = std::io::Result<Vec<u8>>;
-
-    fn next(&mut self) -> Option<std::io::Result<Vec<u8>>> {
-        let mut buf = Vec::new();
-        match self.buf.read_until(self.sep, &mut buf) {
-            Ok(0) => None,
-            Ok(_n) => Some(Ok(buf)),
-            Err(e) => Some(Err(e)),
-        }
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use crate::lines::lines;
-    use std::io::Cursor;
-
-    #[test]
-    fn test_lines() {
-        let cursor = Cursor::new(b"x\ny\nz");
-        let mut it = lines(cursor, b'\n').map(|l| l.unwrap());
-
-        assert_eq!(it.next(), Some(Vec::from("x\n")));
-        assert_eq!(it.next(), Some(Vec::from("y\n")));
-        assert_eq!(it.next(), Some(Vec::from("z")));
-        assert_eq!(it.next(), None);
-    }
-
-    #[test]
-    fn test_lines_zero_terminated() {
-        use std::io::Cursor;
-
-        let cursor = Cursor::new(b"x\0y\0z\0");
-        let mut it = lines(cursor, b'\0').map(|l| l.unwrap());
-
-        assert_eq!(it.next(), Some(Vec::from("x\0")));
-        assert_eq!(it.next(), Some(Vec::from("y\0")));
-        assert_eq!(it.next(), Some(Vec::from("z\0")));
-        assert_eq!(it.next(), None);
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/mode.rs b/registry/native/stubs/uucore/src/lib/features/mode.rs
deleted file mode 100644
index 9465f8c29..000000000
--- a/registry/native/stubs/uucore/src/lib/features/mode.rs
+++ /dev/null
@@ -1,379 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Set of functions to parse modes
-
-// spell-checker:ignore (vars) fperm srwx
-
-// wasmVM: On non-unix, non-WASI platforms, use libc umask.
-// WASI has no umask syscall so we stub it below.
-#[cfg(not(any(unix, target_os = "wasi")))]
-use libc::umask;
-#[cfg(any(target_os = "linux", target_os = "android"))]
-use std::fs;
-
-pub fn parse_numeric(fperm: u32, mut mode: &str, considering_dir: bool) -> Result<u32, String> {
-    let (op, pos) = parse_op(mode).map_or_else(|_| (None, 0), |(op, pos)| (Some(op), pos));
-    mode = mode[pos..].trim();
-    let change = if mode.is_empty() {
-        0
-    } else {
-        u32::from_str_radix(mode, 8).map_err(|e| e.to_string())?
-    };
-    if change > 0o7777 {
-        Err(format!("mode is too large ({change:o} > 7777)"))
-    } else {
-        Ok(match op {
-            Some('+') => fperm | change,
-            Some('-') => fperm & !change,
-            // If this is a directory, we keep the setgid and setuid bits,
-            // unless the mode contains 5 or more octal digits or the mode is "="
-            None if considering_dir && mode.len() < 5 => change | (fperm & (0o4000 | 0o2000)),
-            None | Some('=') => change,
-            Some(_) => unreachable!(),
-        })
-    }
-}
-
-pub fn parse_symbolic(
-    mut fperm: u32,
-    mut mode: &str,
-    umask: u32,
-    considering_dir: bool,
-) -> Result<u32, String> {
-    let (mask, pos) = parse_levels(mode);
-    if pos == mode.len() {
-        return Err(format!("invalid mode ({mode})"));
-    }
-    let respect_umask = pos == 0;
-    mode = &mode[pos..];
-    while !mode.is_empty() {
-        let (op, pos) = parse_op(mode)?;
-        mode = &mode[pos..];
-        let (mut srwx, pos) = parse_change(mode, fperm, considering_dir);
-        if respect_umask {
-            srwx &= !umask;
-        }
-        mode = &mode[pos..];
-        match op {
-            '+' => fperm |= srwx & mask,
-            '-' => fperm &= !(srwx & mask),
-            '=' => {
-                if considering_dir {
-                    // keep the setgid and setuid bits for directories
-                    srwx |= fperm & (0o4000 | 0o2000);
-                }
-                fperm = (fperm & !mask) | (srwx & mask);
-            }
-            _ => unreachable!(),
-        }
-    }
-    Ok(fperm)
-}
-
-fn parse_levels(mode: &str) -> (u32, usize) {
-    let mut mask = 0;
-    let mut pos = 0;
-    for ch in mode.chars() {
-        mask |= match ch {
-            'u' => 0o4700,
-            'g' => 0o2070,
-            'o' => 0o1007,
-            'a' => 0o7777,
-            _ => break,
-        };
-        pos += 1;
-    }
-    if pos == 0 {
-        mask = 0o7777; // default to 'a'
-    }
-    (mask, pos)
-}
-
-fn parse_op(mode: &str) -> Result<(char, usize), String> {
-    let ch = mode
-        .chars()
-        .next()
-        .ok_or_else(|| "unexpected end of mode".to_owned())?;
-    match ch {
-        '+' | '-' | '=' => Ok((ch, 1)),
-        _ => Err(format!(
-            "invalid operator (expected +, -, or =, but found {ch})"
-        )),
-    }
-}
-
-fn parse_change(mode: &str, fperm: u32, considering_dir: bool) -> (u32, usize) {
-    let mut srwx = 0;
-    let mut pos = 0;
-    for ch in mode.chars() {
-        match ch {
-            'r' => srwx |= 0o444,
-            'w' => srwx |= 0o222,
-            'x' => srwx |= 0o111,
-            'X' => {
-                if considering_dir || (fperm & 0o0111) != 0 {
-                    srwx |= 0o111;
-                }
-            }
-            's' => srwx |= 0o4000 | 0o2000,
-            't' => srwx |= 0o1000,
-            'u' => srwx = (fperm & 0o700) | ((fperm >> 3) & 0o070) | ((fperm >> 6) & 0o007),
-            'g' => srwx = ((fperm << 3) & 0o700) | (fperm & 0o070) | ((fperm >> 3) & 0o007),
-            'o' => srwx = ((fperm << 6) & 0o700) | ((fperm << 3) & 0o070) | (fperm & 0o007),
-            _ => break,
-        }
-        if ch == 'u' || ch == 'g' || ch == 'o' {
-            // symbolic modes only allows perms to be a single letter of 'ugo'
-            // therefore this must either be the first char or it is unexpected
-            if pos != 0 {
-                break;
-            }
-            pos = 1;
-            break;
-        }
-        pos += 1;
-    }
-    if pos == 0 {
-        srwx = 0;
-    }
-    (srwx, pos)
-}
-
-/// Modify a file mode based on a user-supplied string.
-/// Supports comma-separated mode strings like "ug+rwX,o+rX" (same as chmod).
-pub fn parse_chmod(
-    current_mode: u32,
-    mode_string: &str,
-    considering_dir: bool,
-    umask: u32,
-) -> Result<u32, String> {
-    let mut new_mode: u32 = current_mode;
-
-    // Split by commas and process each mode part sequentially
-    for mode_part in mode_string.split(',') {
-        let mode_part = mode_part.trim();
-        if mode_part.is_empty() {
-            continue;
-        }
-
-        new_mode = if mode_part.chars().any(|c| c.is_ascii_digit()) {
-            parse_numeric(new_mode, mode_part, considering_dir)?
-        } else {
-            parse_symbolic(new_mode, mode_part, umask, considering_dir)?
-        };
-    }
-
-    Ok(new_mode)
-}
-
-/// Takes a user-supplied string and tries to parse to u32 mode bitmask.
-pub fn parse(mode_string: &str, considering_dir: bool, umask: u32) -> Result<u32, String> {
-    parse_chmod(0, mode_string, considering_dir, umask)
-}
-
-#[cfg(any(target_os = "linux", target_os = "android"))]
-fn parse_proc_status_umask(status: &str) -> Option<u32> {
-    status.lines().find_map(|line| {
-        let raw_umask = line.strip_prefix("Umask:")?.trim();
-        u32::from_str_radix(raw_umask, 8)
-            .ok()
-            .filter(|mask| *mask <= 0o777)
-    })
-}
-
-pub fn get_umask() -> u32 {
-    // There's no portable way to read the umask without changing it.
-    // On Linux, read /proc/self/status first to avoid changing process state.
-    #[cfg(unix)]
-    {
-        use nix::sys::stat::{Mode, umask};
-
-        #[cfg(any(target_os = "linux", target_os = "android"))]
-        if let Ok(status) = fs::read_to_string("/proc/self/status") {
-            if let Some(mask) = parse_proc_status_umask(&status) {
-                return mask;
-            }
-        }
-
-        let mask = umask(Mode::empty());
-        let _ = umask(mask);
-        mask.bits() as u32
-    }
-
-    // wasmVM: WASI has no umask syscall — return standard default 022
-    #[cfg(target_os = "wasi")]
-    {
-        0o022
-    }
-
-    #[cfg(not(any(unix, target_os = "wasi")))]
-    {
-        // SAFETY: umask always succeeds and doesn't operate on memory. Races are
-        // possible but it can't violate Rust's guarantees.
-        let mask = unsafe { umask(0) };
-        unsafe { umask(mask) };
-        mask as u32
-    }
-}
-
-#[cfg(test)]
-mod tests {
-
-    use super::parse;
-    use super::parse_chmod;
-
-    #[test]
-    fn test_chmod_symbolic_modes() {
-        assert_eq!(parse_chmod(0o666, "u+x", false, 0).unwrap(), 0o766);
-        assert_eq!(parse_chmod(0o666, "+x", false, 0).unwrap(), 0o777);
-        assert_eq!(parse_chmod(0o666, "a-w", false, 0).unwrap(), 0o444);
-        assert_eq!(parse_chmod(0o666, "g-r", false, 0).unwrap(), 0o626);
-    }
-
-    #[test]
-    fn test_chmod_numeric_modes() {
-        assert_eq!(parse_chmod(0o666, "644", false, 0).unwrap(), 0o644);
-        assert_eq!(parse_chmod(0o666, "+100", false, 0).unwrap(), 0o766);
-        assert_eq!(parse_chmod(0o666, "-4", false, 0).unwrap(), 0o662);
-    }
-
-    #[test]
-    fn test_parse_numeric_mode() {
-        // Simple numeric mode
-        assert_eq!(parse("644", false, 0).unwrap(), 0o644);
-        assert_eq!(parse("755", false, 0).unwrap(), 0o755);
-        assert_eq!(parse("777", false, 0).unwrap(), 0o777);
-        assert_eq!(parse("600", false, 0).unwrap(), 0o600);
-    }
-
-    #[test]
-    fn test_parse_numeric_mode_with_operator() {
-        // Numeric mode with + operator
-        assert_eq!(parse("+100", false, 0).unwrap(), 0o100);
-        assert_eq!(parse("+644", false, 0).unwrap(), 0o644);
-
-        // Numeric mode with - operator (starting from 0, so nothing to remove)
-        assert_eq!(parse("-4", false, 0).unwrap(), 0);
-        // But if we first set a mode, then remove bits
-        assert_eq!(parse("644,-4", false, 0).unwrap(), 0o640);
-    }
-
-    #[test]
-    fn test_parse_symbolic_mode() {
-        // Simple symbolic modes
-        assert_eq!(parse("u+x", false, 0).unwrap(), 0o100);
-        assert_eq!(parse("g+w", false, 0).unwrap(), 0o020);
-        assert_eq!(parse("o+r", false, 0).unwrap(), 0o004);
-        assert_eq!(parse("a+x", false, 0).unwrap(), 0o111);
-    }
-
-    #[test]
-    fn test_parse_symbolic_mode_multiple_permissions() {
-        // Multiple permissions in one mode
-        assert_eq!(parse("u+rw", false, 0).unwrap(), 0o600);
-        assert_eq!(parse("ug+rwx", false, 0).unwrap(), 0o770);
-        assert_eq!(parse("a+rwx", false, 0).unwrap(), 0o777);
-    }
-
-    #[test]
-    fn test_parse_comma_separated_modes() {
-        // Comma-separated mode strings (as mentioned in the doc comment)
-        assert_eq!(parse("ug+rwX,o+rX", false, 0).unwrap(), 0o664);
-        assert_eq!(parse("u+rwx,g+rx,o+r", false, 0).unwrap(), 0o754);
-        assert_eq!(parse("u+w,g+w,o+w", false, 0).unwrap(), 0o222);
-    }
-
-    #[test]
-    fn test_parse_comma_separated_with_spaces() {
-        // Comma-separated with spaces (should be trimmed)
-        assert_eq!(parse("u+rw, g+rw, o+r", false, 0).unwrap(), 0o664);
-        assert_eq!(parse(" u+x , g+x ", false, 0).unwrap(), 0o110);
-    }
-
-    #[test]
-    fn test_parse_mixed_numeric_and_symbolic() {
-        // Mix of numeric and symbolic modes
-        assert_eq!(parse("644,u+x", false, 0).unwrap(), 0o744);
-        assert_eq!(parse("u+rw,755", false, 0).unwrap(), 0o755);
-    }
-
-    #[test]
-    fn test_parse_empty_string() {
-        // Empty string should return 0
-        assert_eq!(parse("", false, 0).unwrap(), 0);
-        assert_eq!(parse("   ", false, 0).unwrap(), 0);
-        assert_eq!(parse(",,", false, 0).unwrap(), 0);
-    }
-
-    #[test]
-    fn test_parse_with_umask() {
-        // Test with umask (affects symbolic modes when no level is specified)
-        let umask = 0o022;
-        assert_eq!(parse("+w", false, umask).unwrap(), 0o200);
-        // The umask should be respected for symbolic modes without explicit level
-    }
-
-    #[test]
-    fn test_parse_considering_dir() {
-        // Test directory vs file mode differences
-        // For directories, X (capital X) should add execute permission
-        assert_eq!(parse("a+X", true, 0).unwrap(), 0o111);
-        // For files without execute, X should not add execute
-        assert_eq!(parse("a+X", false, 0).unwrap(), 0o000);
-
-        // Numeric modes for directories preserve setuid/setgid bits
-        assert_eq!(parse("755", true, 0).unwrap(), 0o755);
-    }
-
-    #[test]
-    fn test_parse_invalid_modes() {
-        // Invalid numeric mode (too large)
-        assert!(parse("10000", false, 0).is_err());
-
-        // Invalid operator
-        assert!(parse("u*rw", false, 0).is_err());
-
-        // Invalid symbolic mode
-        assert!(parse("invalid", false, 0).is_err());
-    }
-
-    #[test]
-    fn test_parse_complex_combinations() {
-        // Complex real-world examples
-        assert_eq!(parse("u=rwx,g=rx,o=r", false, 0).unwrap(), 0o754);
-        // To test removal, we need to first set permissions, then remove them
-        assert_eq!(parse("644,a-w", false, 0).unwrap(), 0o444);
-        assert_eq!(parse("644,g-r", false, 0).unwrap(), 0o604);
-    }
-
-    #[test]
-    fn test_parse_sequential_application() {
-        // Test that comma-separated modes are applied sequentially
-        // First set to 644, then add execute for user
-        assert_eq!(parse("644,u+x", false, 0).unwrap(), 0o744);
-
-        // First add user write, then set to 755 (should override)
-        assert_eq!(parse("u+w,755", false, 0).unwrap(), 0o755);
-    }
-
-    #[test]
-    #[cfg(any(target_os = "linux", target_os = "android"))]
-    fn test_parse_proc_status_umask() {
-        assert_eq!(
-            super::parse_proc_status_umask("Name:\ttest\nUmask:\t0022\nState:\tR\n"),
-            Some(0o022)
-        );
-        assert_eq!(
-            super::parse_proc_status_umask("Name:\ttest\nUmask:\tbad\n"),
-            None
-        );
-        assert_eq!(
-            super::parse_proc_status_umask("Name:\ttest\nUmask:\t1000\n"),
-            None
-        );
-        assert_eq!(super::parse_proc_status_umask("Name:\ttest\n"), None);
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/parser/mod.rs b/registry/native/stubs/uucore/src/lib/features/parser/mod.rs
deleted file mode 100644
index d9a6ffb43..000000000
--- a/registry/native/stubs/uucore/src/lib/features/parser/mod.rs
+++ /dev/null
@@ -1,18 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// spell-checker:ignore extendedbigdecimal
-
-#[cfg(any(feature = "parser", feature = "parser-num"))]
-pub mod num_parser;
-#[cfg(any(feature = "parser", feature = "parser-glob"))]
-pub mod parse_glob;
-#[cfg(any(feature = "parser", feature = "parser-size"))]
-pub mod parse_signed_num;
-#[cfg(any(feature = "parser", feature = "parser-size"))]
-pub mod parse_size;
-#[cfg(any(feature = "parser", feature = "parser-num"))]
-pub mod parse_time;
-#[cfg(any(feature = "parser", feature = "parser-num"))]
-pub mod shortcut_value_parser;
diff --git a/registry/native/stubs/uucore/src/lib/features/parser/num_parser.rs b/registry/native/stubs/uucore/src/lib/features/parser/num_parser.rs
deleted file mode 100644
index 0e0cf8053..000000000
--- a/registry/native/stubs/uucore/src/lib/features/parser/num_parser.rs
+++ /dev/null
@@ -1,1257 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Utilities for parsing numbers in various formats
-
-// spell-checker:ignore powf copysign prec ilog inity infinit infs bigdecimal extendedbigdecimal biguint underflowed muls
-
-use bigdecimal::{
-    BigDecimal,
-    num_bigint::{BigInt, BigUint, Sign},
-};
-use num_traits::Signed;
-use num_traits::ToPrimitive;
-use num_traits::Zero;
-
-use crate::extendedbigdecimal::ExtendedBigDecimal;
-
-const MAX_PARSED_DIGITS: i64 = 8192;
-
-/// Base for number parsing
-#[derive(Clone, Copy, PartialEq)]
-enum Base {
-    /// Binary base
-    Binary = 2,
-
-    /// Octal base
-    Octal = 8,
-
-    /// Decimal base
-    Decimal = 10,
-
-    /// Hexadecimal base
-    Hexadecimal = 16,
-}
-
-impl Base {
-    /// Return the digit value of a character in the given base
-    fn digit(self, c: char) -> Option<u64> {
-        fn from_decimal(c: char) -> u64 {
-            u64::from(c) - u64::from('0')
-        }
-        match self {
-            Self::Binary => ('0'..='1').contains(&c).then(|| from_decimal(c)),
-            Self::Octal => ('0'..='7').contains(&c).then(|| from_decimal(c)),
-            Self::Decimal => c.is_ascii_digit().then(|| from_decimal(c)),
-            Self::Hexadecimal => match c.to_ascii_lowercase() {
-                '0'..='9' => Some(from_decimal(c)),
-                c @ 'a'..='f' => Some(u64::from(c) - u64::from('a') + 10),
-                _ => None,
-            },
-        }
-    }
-
-    /// Greedily parse as many digits as possible from the string
-    /// Returns parsed digits (if any), and the rest of the string.
-    fn parse_digits(self, str: &str) -> (Option<BigUint>, &str) {
-        let (digits, _, rest) = self.parse_digits_count(str, None);
-        (digits, rest)
-    }
-
-    /// Greedily parse as many digits as possible from the string, adding to already parsed digits.
-    /// This is meant to be used (directly) for the part after a decimal point.
-    /// Returns parsed digits (if any), the number of parsed digits, and the rest of the string.
-    fn parse_digits_count(
-        self,
-        str: &str,
-        digits: Option<BigUint>,
-    ) -> (Option<BigUint>, i64, &str) {
-        let mut digits: Option<BigUint> = digits;
-        let mut count: i64 = 0;
-        let mut rest = str;
-
-        // Doing operations on BigUint is really expensive, so we do as much as we
-        // can on u64, then add them to the BigUint.
-        let mut digits_tmp: u64 = 0;
-        let mut count_tmp: i64 = 0;
-        let mut mul_tmp: u64 = 1;
-        while let Some(d) = rest.chars().next().and_then(|c| self.digit(c)) {
-            let has_nonzero =
-                digits.as_ref().is_some_and(|digits| !digits.is_zero()) || digits_tmp != 0;
-            if count + count_tmp >= MAX_PARSED_DIGITS {
-                if has_nonzero || d != 0 {
-                    break;
-                }
-                count += 1;
-                rest = &rest[1..];
-                continue;
-            }
-
-            (digits_tmp, count_tmp, mul_tmp) = (
-                digits_tmp * self as u64 + d,
-                count_tmp + 1,
-                mul_tmp * self as u64,
-            );
-            rest = &rest[1..];
-            // In base 16, we parse 4 bits at a time, so we can parse 16 digits at most in a u64.
-            if count_tmp >= 15 {
-                // Accumulate what we have so far
-                digits = Some(digits.unwrap_or_default() * mul_tmp + digits_tmp);
-                count += count_tmp;
-                // Reset state
-                (digits_tmp, count_tmp, mul_tmp) = (0, 0, 1);
-            }
-        }
-
-        // Accumulate the leftovers (if any)
-        if mul_tmp > 1 {
-            (digits, count) = (
-                Some(digits.unwrap_or_default() * mul_tmp + digits_tmp),
-                count + count_tmp,
-            );
-        }
-        (digits, count, rest)
-    }
-}
-
-/// Type returned if a number could not be parsed in its entirety
-#[derive(Debug, PartialEq)]
-pub enum ExtendedParserError<T> {
-    /// The input as a whole makes no sense
-    NotNumeric,
-    /// The beginning of the input made sense and has been parsed,
-    /// while the remaining doesn't.
-    PartialMatch(T, String),
-    /// The value has overflowed the type storage. The returned value
-    /// is saturated (e.g. positive or negative infinity, or min/max
-    /// value for the integer type).
-    Overflow(T),
-    // The value has underflowed the float storage (and is now 0.0 or -0.0).
-    // Does not apply to integer parsing.
-    Underflow(T),
-}
-
-impl<T> ExtendedParserError<T>
-where
-    T: Zero,
-{
-    /// Extract the value out of an error, if possible.
-    fn extract(self) -> T {
-        match self {
-            Self::NotNumeric => T::zero(),
-            Self::PartialMatch(v, _) => v,
-            Self::Overflow(v) => v,
-            Self::Underflow(v) => v,
-        }
-    }
-
-    /// Map an error to another, using the provided conversion function.
-    /// The error (self) takes precedence over errors happening during the
-    /// conversion.
-    fn map<U>(
-        self,
-        f: impl FnOnce(T) -> Result<U, ExtendedParserError<U>>,
-    ) -> ExtendedParserError<U>
-    where
-        U: Zero,
-    {
-        fn extract<U>(v: Result<U, ExtendedParserError<U>>) -> U
-        where
-            U: Zero,
-        {
-            v.unwrap_or_else(ExtendedParserError::extract)
-        }
-
-        match self {
-            Self::NotNumeric => ExtendedParserError::NotNumeric,
-            Self::PartialMatch(v, rest) => ExtendedParserError::PartialMatch(extract(f(v)), rest),
-            Self::Overflow(v) => ExtendedParserError::Overflow(extract(f(v))),
-            Self::Underflow(v) => ExtendedParserError::Underflow(extract(f(v))),
-        }
-    }
-}
-
-/// A number parser for binary, octal, decimal, hexadecimal and single characters.
-///
-/// It is implemented for `u64`/`i64`, where no fractional part is parsed,
-/// and `f64` float, where octal and binary formats are not allowed.
-pub trait ExtendedParser {
-    // We pick a hopefully different name for our parser, to avoid clash with standard traits.
-    fn extended_parse(input: &str) -> Result<Self, ExtendedParserError<Self>>
-    where
-        Self: Sized;
-}
-
-impl ExtendedParser for i64 {
-    /// Parse a number as i64. No fractional part is allowed.
-    fn extended_parse(input: &str) -> Result<Self, ExtendedParserError<Self>> {
-        fn into_i64(ebd: ExtendedBigDecimal) -> Result<i64, ExtendedParserError<i64>> {
-            match ebd {
-                ExtendedBigDecimal::BigDecimal(bd) => {
-                    let (digits, scale) = bd.into_bigint_and_scale();
-                    if scale == 0 {
-                        let negative = digits.sign() == Sign::Minus;
-                        match i64::try_from(digits) {
-                            Ok(i) => Ok(i),
-                            _ => Err(ExtendedParserError::Overflow(if negative {
-                                i64::MIN
-                            } else {
-                                i64::MAX
-                            })),
-                        }
-                    } else {
-                        // Should not happen.
-                        Err(ExtendedParserError::NotNumeric)
-                    }
-                }
-                ExtendedBigDecimal::MinusZero => Ok(0),
-                // No other case should not happen.
-                _ => Err(ExtendedParserError::NotNumeric),
-            }
-        }
-
-        match parse(input, ParseTarget::Integral, &[]) {
-            Ok(v) => into_i64(v),
-            Err(e) => Err(e.map(into_i64)),
-        }
-    }
-}
-
-impl ExtendedParser for u64 {
-    /// Parse a number as u64. No fractional part is allowed.
-    fn extended_parse(input: &str) -> Result<Self, ExtendedParserError<Self>> {
-        fn into_u64(ebd: ExtendedBigDecimal) -> Result<u64, ExtendedParserError<u64>> {
-            match ebd {
-                ExtendedBigDecimal::BigDecimal(bd) => {
-                    let (digits, scale) = bd.into_bigint_and_scale();
-                    if scale == 0 {
-                        let (sign, digits) = digits.into_parts();
-
-                        match u64::try_from(digits) {
-                            Ok(i) => {
-                                if sign == Sign::Minus {
-                                    Ok(!i + 1)
-                                } else {
-                                    Ok(i)
-                                }
-                            }
-                            _ => Err(ExtendedParserError::Overflow(u64::MAX)),
-                        }
-                    } else {
-                        // Should not happen.
-                        Err(ExtendedParserError::NotNumeric)
-                    }
-                }
-                ExtendedBigDecimal::MinusZero => Ok(0),
-                _ => Err(ExtendedParserError::NotNumeric),
-            }
-        }
-
-        match parse(input, ParseTarget::Integral, &[]) {
-            Ok(v) => into_u64(v),
-            Err(e) => Err(e.map(into_u64)),
-        }
-    }
-}
-
-impl ExtendedParser for f64 {
-    /// Parse a number as f64
-    fn extended_parse(input: &str) -> Result<Self, ExtendedParserError<Self>> {
-        fn into_f64(ebd: ExtendedBigDecimal) -> Result<f64, ExtendedParserError<f64>> {
-            // TODO: _Some_ of this is generic, so this should probably be implemented as an ExtendedBigDecimal trait (ToPrimitive).
-            let v = match ebd {
-                ExtendedBigDecimal::BigDecimal(bd) => {
-                    let f = bd.to_f64().unwrap();
-                    if f.is_infinite() {
-                        return Err(ExtendedParserError::Overflow(f));
-                    }
-                    if f.is_zero() && !bd.is_zero() {
-                        return Err(ExtendedParserError::Underflow(f));
-                    }
-                    f
-                }
-                ExtendedBigDecimal::MinusZero => -0.0,
-                ExtendedBigDecimal::Nan => f64::NAN,
-                ExtendedBigDecimal::MinusNan => -f64::NAN,
-                ExtendedBigDecimal::Infinity => f64::INFINITY,
-                ExtendedBigDecimal::MinusInfinity => -f64::INFINITY,
-            };
-            Ok(v)
-        }
-
-        match parse(input, ParseTarget::Decimal, &[]) {
-            Ok(v) => into_f64(v),
-            Err(e) => Err(e.map(into_f64)),
-        }
-    }
-}
-
-impl ExtendedParser for ExtendedBigDecimal {
-    /// Parse a number as an ExtendedBigDecimal
-    fn extended_parse(input: &str) -> Result<Self, ExtendedParserError<Self>> {
-        parse(input, ParseTarget::Decimal, &[])
-    }
-}
-
-fn parse_digits(base: Base, str: &str, fractional: bool) -> (Option<BigUint>, i64, &str) {
-    // Parse the integral part of the number
-    let (digits, rest) = base.parse_digits(str);
-
-    // If allowed, parse the fractional part of the number if there can be one and the
-    // input contains a '.' decimal separator.
-    if fractional {
-        if let Some(rest) = rest.strip_prefix('.') {
-            return base.parse_digits_count(rest, digits);
-        }
-    }
-
-    (digits, 0, rest)
-}
-
-fn parse_exponent(base: Base, str: &str) -> (Option<BigInt>, &str) {
-    let exp_chars = match base {
-        Base::Decimal => ['e', 'E'],
-        Base::Hexadecimal => ['p', 'P'],
-        _ => unreachable!(),
-    };
-
-    // Parse the exponent part, only decimal numbers are allowed.
-    // We only update `rest` if an exponent is actually parsed.
-    if let Some(rest) = str.strip_prefix(exp_chars) {
-        let (sign, rest) = if let Some(rest) = rest.strip_prefix('-') {
-            (Sign::Minus, rest)
-        } else if let Some(rest) = rest.strip_prefix('+') {
-            (Sign::Plus, rest)
-        } else {
-            // Something else, or nothing at all: keep going.
-            (Sign::Plus, rest) // No explicit sign is equivalent to `+`.
-        };
-
-        let (exp_uint, rest) = Base::Decimal.parse_digits(rest);
-        if let Some(exp_uint) = exp_uint {
-            return (Some(BigInt::from_biguint(sign, exp_uint)), rest);
-        }
-    }
-
-    // Nothing parsed
-    (None, str)
-}
-
-/// Parse a multiplier from allowed suffixes (e.g. s/m/h).
-fn parse_suffix_multiplier<'a>(str: &'a str, allowed_suffixes: &[(char, u32)]) -> (u32, &'a str) {
-    if let Some(ch) = str.chars().next() {
-        if let Some(mul) = allowed_suffixes
-            .iter()
-            .find_map(|(c, t)| (ch == *c).then_some(*t))
-        {
-            return (mul, &str[1..]);
-        }
-    }
-
-    // No suffix, just return 1 and intact string
-    (1, str)
-}
-
-fn parse_special_value(
-    input: &str,
-    negative: bool,
-    allowed_suffixes: &[(char, u32)],
-) -> Result<ExtendedBigDecimal, ExtendedParserError<ExtendedBigDecimal>> {
-    let input_lc = input.to_ascii_lowercase();
-
-    // Array of ("String to match", return value when sign positive, when sign negative)
-    const MATCH_TABLE: &[(&str, ExtendedBigDecimal)] = &[
-        ("infinity", ExtendedBigDecimal::Infinity),
-        ("inf", ExtendedBigDecimal::Infinity),
-        ("nan", ExtendedBigDecimal::Nan),
-    ];
-
-    for (str, ebd) in MATCH_TABLE {
-        if input_lc.starts_with(str) {
-            let mut special = ebd.clone();
-            if negative {
-                special = -special;
-            }
-
-            // "infs" is a valid duration, so parse suffix multiplier in the original input string, but ignore the multiplier.
-            let (_, rest) = parse_suffix_multiplier(&input[str.len()..], allowed_suffixes);
-
-            return if rest.is_empty() {
-                Ok(special)
-            } else {
-                Err(ExtendedParserError::PartialMatch(special, rest.to_string()))
-            };
-        }
-    }
-
-    Err(ExtendedParserError::NotNumeric)
-}
-
-/// Underflow/Overflow errors always contain 0 or infinity.
-/// overflow: true for overflow, false for underflow.
-fn make_error(overflow: bool, negative: bool) -> ExtendedParserError<ExtendedBigDecimal> {
-    let mut v = if overflow {
-        ExtendedBigDecimal::Infinity
-    } else {
-        ExtendedBigDecimal::zero()
-    };
-    if negative {
-        v = -v;
-    }
-    if overflow {
-        ExtendedParserError::Overflow(v)
-    } else {
-        ExtendedParserError::Underflow(v)
-    }
-}
-
-/// Construct an [`ExtendedBigDecimal`] based on parsed data
-fn construct_extended_big_decimal(
-    digits: BigUint,
-    negative: bool,
-    base: Base,
-    scale: i64,
-    exponent: BigInt,
-) -> Result<ExtendedBigDecimal, ExtendedParserError<ExtendedBigDecimal>> {
-    if digits == BigUint::zero() {
-        // Return return 0 if the digits are zero. In particular, we do not ever
-        // return Overflow/Underflow errors in that case.
-        return Ok(if negative {
-            ExtendedBigDecimal::MinusZero
-        } else {
-            ExtendedBigDecimal::zero()
-        });
-    }
-
-    let sign = if negative { Sign::Minus } else { Sign::Plus };
-    let signed_digits = BigInt::from_biguint(sign, digits);
-    let bd = if scale == 0 && exponent.is_zero() {
-        BigDecimal::from_bigint(signed_digits, 0)
-    } else if base == Base::Decimal {
-        if exponent.is_zero() {
-            // Optimization: Converting scale to Bigint and back is relatively slow.
-            BigDecimal::from_bigint(signed_digits, scale)
-        } else {
-            let new_scale = -exponent + scale;
-
-            // BigDecimal "only" supports i64 scale.
-            // Note that new_scale is a negative exponent: large positive value causes an underflow, large negative values an overflow.
-            if let Some(new_scale) = new_scale.to_i64() {
-                BigDecimal::from_bigint(signed_digits, new_scale)
-            } else {
-                return Err(make_error(new_scale.is_negative(), negative));
-            }
-        }
-    } else if base == Base::Hexadecimal {
-        // pow "only" supports u32 values, just error out if given more than 2**32 fractional digits.
-        if scale > u32::MAX.into() {
-            return Err(ExtendedParserError::NotNumeric);
-        }
-
-        // Base is 16, init at scale 0 then divide by base**scale.
-        let bd = BigDecimal::from_bigint(signed_digits, 0)
-            / BigDecimal::from_bigint(BigInt::from(16).pow(scale as u32), 0);
-
-        // powi "only" supports i64 values. Just overflow/underflow if the value provided
-        // is > 2**64 or < 2**-64.
-        let Some(exponent) = exponent.to_i64() else {
-            return Err(make_error(exponent.is_positive(), negative));
-        };
-
-        // Confusingly, exponent is in base 2 for hex floating point numbers.
-        let base: BigDecimal = 2.into();
-        // Note: We cannot overflow/underflow BigDecimal here, as we will not be able to reach the
-        // maximum/minimum scale (i64 range).
-        let pow2 = base.powi(exponent);
-
-        bd * pow2
-    } else {
-        // scale != 0, which means that integral_only is not set, so only base 10 and 16 are allowed.
-        unreachable!();
-    };
-    Ok(ExtendedBigDecimal::BigDecimal(bd))
-}
-
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub(crate) enum ParseTarget {
-    Decimal,
-    Integral,
-    Duration,
-}
-
-pub(crate) fn parse(
-    input: &str,
-    target: ParseTarget,
-    allowed_suffixes: &[(char, u32)],
-) -> Result<ExtendedBigDecimal, ExtendedParserError<ExtendedBigDecimal>> {
-    // Note: literals with ' and " prefixes are parsed earlier on in argument parsing,
-    // before UTF-8 conversion.
-
-    let trimmed_input = input.trim_ascii_start();
-
-    // Initial minus/plus sign
-    let (negative, unsigned) = if let Some(trimmed_input) = trimmed_input.strip_prefix('-') {
-        (true, trimmed_input)
-    } else if let Some(trimmed_input) = trimmed_input.strip_prefix('+') {
-        (false, trimmed_input)
-    } else {
-        (false, trimmed_input)
-    };
-
-    // Parse an optional base prefix ("0b" / "0B" / "0" / "0x" / "0X"). "0" is octal unless a
-    // fractional part is allowed in which case it is an insignificant leading 0. A "0" prefix
-    // will not be consumed in case the parsable string contains only "0": the leading extra "0"
-    // will have no influence on the result.
-    let (base, rest) = if let Some(rest) = unsigned.strip_prefix('0') {
-        if let Some(rest) = rest.strip_prefix(['x', 'X']) {
-            (Base::Hexadecimal, rest)
-        } else if target == ParseTarget::Integral {
-            // Binary/Octal only allowed for integer parsing.
-            if let Some(rest) = rest.strip_prefix(['b', 'B']) {
-                (Base::Binary, rest)
-            } else {
-                (Base::Octal, unsigned)
-            }
-        } else {
-            (Base::Decimal, unsigned)
-        }
-    } else {
-        (Base::Decimal, unsigned)
-    };
-
-    // We only parse fractional and exponent part of the number in base 10/16 floating point numbers.
-    let parse_frac_exp =
-        matches!(base, Base::Decimal | Base::Hexadecimal) && target != ParseTarget::Integral;
-
-    // Parse the integral and fractional (if supported) part of the number
-    let (digits, scale, rest) = parse_digits(base, rest, parse_frac_exp);
-
-    // Parse exponent part of the number for supported bases.
-    let (exponent, rest) = if parse_frac_exp {
-        parse_exponent(base, rest)
-    } else {
-        (None, rest)
-    };
-
-    // If no digit has been parsed, check if this is a special value, or declare the parsing unsuccessful
-    if digits.is_none() {
-        // If we trimmed an initial `0x`/`0b`, return a partial match.
-        if let Some(partial) = unsigned.strip_prefix("0") {
-            let ebd = if negative {
-                ExtendedBigDecimal::MinusZero
-            } else {
-                ExtendedBigDecimal::zero()
-            };
-            return Err(ExtendedParserError::PartialMatch(ebd, partial.to_string()));
-        }
-
-        return if target == ParseTarget::Integral {
-            Err(ExtendedParserError::NotNumeric)
-        } else {
-            parse_special_value(unsigned, negative, allowed_suffixes)
-        };
-    }
-
-    let (mul, rest) = parse_suffix_multiplier(rest, allowed_suffixes);
-
-    let digits = digits.unwrap() * mul;
-
-    let ebd_result =
-        construct_extended_big_decimal(digits, negative, base, scale, exponent.unwrap_or_default());
-
-    // Return what has been parsed so far. If there are extra characters, mark the
-    // parsing as a partial match.
-    if rest.is_empty() {
-        ebd_result
-    } else {
-        Err(ExtendedParserError::PartialMatch(
-            ebd_result.unwrap_or_else(ExtendedParserError::extract),
-            rest.to_string(),
-        ))
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use std::str::FromStr;
-
-    use bigdecimal::BigDecimal;
-
-    use crate::extendedbigdecimal::ExtendedBigDecimal;
-
-    use super::{ExtendedParser, ExtendedParserError};
-
-    #[test]
-    fn test_decimal_u64() {
-        assert_eq!(Ok(123), u64::extended_parse("123"));
-        assert_eq!(Ok(u64::MAX), u64::extended_parse(&format!("{}", u64::MAX)));
-        assert_eq!(Ok(0), u64::extended_parse("-0"));
-        assert_eq!(Ok(u64::MAX), u64::extended_parse("-1"));
-        assert_eq!(
-            Ok(u64::MAX / 2 + 1),
-            u64::extended_parse("-9223372036854775808") // i64::MIN
-        );
-        assert_eq!(
-            Ok(1_123_372_036_854_675_616),
-            u64::extended_parse("-17323372036854876000") // 2*i64::MIN
-        );
-        assert_eq!(Ok(1), u64::extended_parse("-18446744073709551615")); // -u64::MAX
-        assert!(matches!(
-            u64::extended_parse("-18446744073709551616"), // -u64::MAX - 1
-            Err(ExtendedParserError::Overflow(u64::MAX))
-        ));
-        assert!(matches!(
-            u64::extended_parse("-92233720368547758150"),
-            Err(ExtendedParserError::Overflow(u64::MAX))
-        ));
-        assert!(matches!(
-            u64::extended_parse("-170141183460469231731687303715884105729"),
-            Err(ExtendedParserError::Overflow(u64::MAX))
-        ));
-        assert!(matches!(
-            u64::extended_parse(""),
-            Err(ExtendedParserError::NotNumeric)
-        ));
-        assert_eq!(
-            u64::extended_parse("123.15"),
-            Err(ExtendedParserError::PartialMatch(123, ".15".to_string()))
-        );
-        assert_eq!(
-            u64::extended_parse("123e10"),
-            Err(ExtendedParserError::PartialMatch(123, "e10".to_string()))
-        );
-    }
-
-    #[test]
-    fn test_decimal_i64() {
-        assert_eq!(Ok(123), i64::extended_parse("123"));
-        assert_eq!(Ok(123), i64::extended_parse("+123"));
-        assert_eq!(Ok(-123), i64::extended_parse("-123"));
-        assert!(matches!(
-            i64::extended_parse("--123"),
-            Err(ExtendedParserError::NotNumeric)
-        ));
-        assert_eq!(Ok(i64::MAX), i64::extended_parse(&format!("{}", i64::MAX)));
-        assert_eq!(Ok(i64::MIN), i64::extended_parse(&format!("{}", i64::MIN)));
-        assert_eq!(
-            i64::extended_parse(&format!("{}", u64::MAX)),
-            Err(ExtendedParserError::Overflow(i64::MAX))
-        );
-        assert!(matches!(
-            i64::extended_parse(&format!("{}", i64::MAX as u64 + 1)),
-            Err(ExtendedParserError::Overflow(i64::MAX))
-        ));
-        assert_eq!(
-            i64::extended_parse("-123e10"),
-            Err(ExtendedParserError::PartialMatch(-123, "e10".to_string()))
-        );
-        assert!(matches!(
-            i64::extended_parse(&format!("{}", -(u64::MAX as i128))),
-            Err(ExtendedParserError::Overflow(i64::MIN))
-        ));
-        assert!(matches!(
-            i64::extended_parse(&format!("{}", i64::MIN as i128 - 1)),
-            Err(ExtendedParserError::Overflow(i64::MIN))
-        ));
-
-        assert!(matches!(
-            i64::extended_parse(""),
-            Err(ExtendedParserError::NotNumeric)
-        ));
-        assert!(matches!(
-            i64::extended_parse("."),
-            Err(ExtendedParserError::NotNumeric)
-        ));
-    }
-
-    #[test]
-    fn test_decimal_f64() {
-        assert_eq!(Ok(123.0), f64::extended_parse("123"));
-        assert_eq!(Ok(123.0), f64::extended_parse("+123"));
-        assert_eq!(Ok(-123.0), f64::extended_parse("-123"));
-        assert_eq!(Ok(123.0), f64::extended_parse("123."));
-        assert_eq!(Ok(-123.0), f64::extended_parse("-123."));
-        assert_eq!(Ok(123.0), f64::extended_parse("123.0"));
-        assert_eq!(Ok(-123.0), f64::extended_parse("-123.0"));
-        assert_eq!(Ok(123.15), f64::extended_parse("123.15"));
-        assert_eq!(Ok(123.15), f64::extended_parse("+123.15"));
-        assert_eq!(Ok(-123.15), f64::extended_parse("-123.15"));
-        assert_eq!(Ok(0.15), f64::extended_parse(".15"));
-        assert_eq!(Ok(-0.15), f64::extended_parse("-.15"));
-        // Leading 0(s) are _not_ octal when parsed as float
-        assert_eq!(Ok(123.0), f64::extended_parse("0123"));
-        assert_eq!(Ok(123.0), f64::extended_parse("+0123"));
-        assert_eq!(Ok(-123.0), f64::extended_parse("-0123"));
-        assert_eq!(Ok(123.0), f64::extended_parse("00123"));
-        assert_eq!(Ok(123.0), f64::extended_parse("+00123"));
-        assert_eq!(Ok(-123.0), f64::extended_parse("-00123"));
-        assert_eq!(Ok(123.15), f64::extended_parse("0123.15"));
-        assert_eq!(Ok(123.15), f64::extended_parse("+0123.15"));
-        assert_eq!(Ok(-123.15), f64::extended_parse("-0123.15"));
-        assert_eq!(Ok(12_315_000.0), f64::extended_parse("123.15e5"));
-        assert_eq!(Ok(-12_315_000.0), f64::extended_parse("-123.15e5"));
-        assert_eq!(Ok(12_315_000.0), f64::extended_parse("123.15E+5"));
-        assert_eq!(Ok(0.001_231_5), f64::extended_parse("123.15E-5"));
-        assert_eq!(
-            Ok(0.15),
-            f64::extended_parse(".150000000000000000000000000231313")
-        );
-        assert_eq!(
-            f64::extended_parse("123.15e"),
-            Err(ExtendedParserError::PartialMatch(123.15, "e".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("123.15E"),
-            Err(ExtendedParserError::PartialMatch(123.15, "E".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("123.15e-"),
-            Err(ExtendedParserError::PartialMatch(123.15, "e-".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("123.15e+"),
-            Err(ExtendedParserError::PartialMatch(123.15, "e+".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("123.15e."),
-            Err(ExtendedParserError::PartialMatch(123.15, "e.".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("1.2.3"),
-            Err(ExtendedParserError::PartialMatch(1.2, ".3".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("123.15p5"),
-            Err(ExtendedParserError::PartialMatch(123.15, "p5".to_string()))
-        );
-        // Minus zero. 0.0 == -0.0 so we explicitly check the sign.
-        assert_eq!(Ok(0.0), f64::extended_parse("-0.0"));
-        assert!(f64::extended_parse("-0.0").unwrap().is_sign_negative());
-        assert_eq!(Ok(f64::INFINITY), f64::extended_parse("inf"));
-        assert_eq!(Ok(f64::INFINITY), f64::extended_parse("+inf"));
-        assert_eq!(Ok(f64::NEG_INFINITY), f64::extended_parse("-inf"));
-        assert_eq!(Ok(f64::INFINITY), f64::extended_parse("Inf"));
-        assert_eq!(Ok(f64::INFINITY), f64::extended_parse("InF"));
-        assert_eq!(Ok(f64::INFINITY), f64::extended_parse("INF"));
-        assert_eq!(Ok(f64::INFINITY), f64::extended_parse("infinity"));
-        assert_eq!(Ok(f64::INFINITY), f64::extended_parse("+infiNIty"));
-        assert_eq!(Ok(f64::NEG_INFINITY), f64::extended_parse("-INfinity"));
-        assert!(f64::extended_parse("NaN").unwrap().is_nan());
-        assert!(f64::extended_parse("NaN").unwrap().is_sign_positive());
-        assert!(f64::extended_parse("+NaN").unwrap().is_nan());
-        assert!(f64::extended_parse("+NaN").unwrap().is_sign_positive());
-        assert!(f64::extended_parse("-NaN").unwrap().is_nan());
-        assert!(f64::extended_parse("-NaN").unwrap().is_sign_negative());
-        assert!(f64::extended_parse("nan").unwrap().is_nan());
-        assert!(f64::extended_parse("nan").unwrap().is_sign_positive());
-        assert!(f64::extended_parse("NAN").unwrap().is_nan());
-        assert!(f64::extended_parse("NAN").unwrap().is_sign_positive());
-        assert_eq!(
-            f64::extended_parse("-infinit"),
-            Err(ExtendedParserError::PartialMatch(
-                f64::NEG_INFINITY,
-                "init".to_string()
-            ))
-        );
-        assert_eq!(
-            f64::extended_parse("-infinity00"),
-            Err(ExtendedParserError::PartialMatch(
-                f64::NEG_INFINITY,
-                "00".to_string()
-            ))
-        );
-        assert!(f64::extended_parse(&format!("{}", u64::MAX)).is_ok());
-        assert!(f64::extended_parse(&format!("{}", i64::MIN)).is_ok());
-
-        // f64 overflow/underflow
-        assert!(matches!(
-            f64::extended_parse("1.0e9000"),
-            Err(ExtendedParserError::Overflow(f64::INFINITY))
-        ));
-        assert!(matches!(
-            f64::extended_parse("-10.0e9000"),
-            Err(ExtendedParserError::Overflow(f64::NEG_INFINITY))
-        ));
-        assert!(matches!(
-            f64::extended_parse("1.0e-9000"),
-            Err(ExtendedParserError::Underflow(0.0))
-        ));
-        assert!(matches!(
-            f64::extended_parse("-1.0e-9000"),
-            Err(ExtendedParserError::Underflow(f)) if f == 0.0 && f.is_sign_negative()));
-    }
-
-    #[test]
-    fn test_decimal_extended_big_decimal() {
-        // f64 parsing above already tested a lot of these, just do a few.
-        // Careful, we usually cannot use From<f64> to get a precise ExtendedBigDecimal as numbers like 123.15 cannot be exactly represented by a f64.
-        assert_eq!(
-            Ok(ExtendedBigDecimal::BigDecimal(
-                BigDecimal::from_str("123").unwrap()
-            )),
-            ExtendedBigDecimal::extended_parse("123")
-        );
-        assert_eq!(
-            Ok(ExtendedBigDecimal::BigDecimal(
-                BigDecimal::from_str("123.15").unwrap()
-            )),
-            ExtendedBigDecimal::extended_parse("123.15")
-        );
-        assert_eq!(
-            Ok(ExtendedBigDecimal::BigDecimal(BigDecimal::from_bigint(
-                12315.into(),
-                -98
-            ))),
-            ExtendedBigDecimal::extended_parse("123.15e100")
-        );
-        assert_eq!(
-            Ok(ExtendedBigDecimal::BigDecimal(BigDecimal::from_bigint(
-                12315.into(),
-                102
-            ))),
-            ExtendedBigDecimal::extended_parse("123.15E-100")
-        );
-        // Very high precision that would not fit in a f64.
-        assert_eq!(
-            Ok(ExtendedBigDecimal::BigDecimal(
-                BigDecimal::from_str(".150000000000000000000000000000000000001").unwrap()
-            )),
-            ExtendedBigDecimal::extended_parse(".150000000000000000000000000000000000001")
-        );
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse("nan"),
-            Ok(ExtendedBigDecimal::Nan)
-        ));
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse("-NAN"),
-            Ok(ExtendedBigDecimal::MinusNan)
-        ));
-        assert_eq!(
-            Ok(ExtendedBigDecimal::Infinity),
-            ExtendedBigDecimal::extended_parse("InF")
-        );
-        assert_eq!(
-            Ok(ExtendedBigDecimal::MinusInfinity),
-            ExtendedBigDecimal::extended_parse("-iNf")
-        );
-        assert_eq!(
-            Ok(ExtendedBigDecimal::zero()),
-            ExtendedBigDecimal::extended_parse("0.0")
-        );
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse("-0.0"),
-            Ok(ExtendedBigDecimal::MinusZero)
-        ));
-
-        // ExtendedBigDecimal overflow/underflow
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse(&format!("1e{}", i64::MAX as u64 + 2)),
-            Err(ExtendedParserError::Overflow(ExtendedBigDecimal::Infinity))
-        ));
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse(&format!("-0.1e{}", i64::MAX as u64 + 3)),
-            Err(ExtendedParserError::Overflow(
-                ExtendedBigDecimal::MinusInfinity
-            ))
-        ));
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse(&format!("1e{}", i64::MIN)),
-            Err(ExtendedParserError::Underflow(ebd)) if ebd == ExtendedBigDecimal::zero()
-        ));
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse(&format!("-0.01e{}", i64::MIN + 2)),
-            Err(ExtendedParserError::Underflow(
-                ExtendedBigDecimal::MinusZero
-            ))
-        ));
-
-        // But no Overflow/Underflow if the digits are 0.
-        assert_eq!(
-            ExtendedBigDecimal::extended_parse(&format!("0e{}", i64::MAX as u64 + 2)),
-            Ok(ExtendedBigDecimal::zero()),
-        );
-        assert_eq!(
-            ExtendedBigDecimal::extended_parse(&format!("-0.0e{}", i64::MAX as u64 + 3)),
-            Ok(ExtendedBigDecimal::MinusZero)
-        );
-        assert_eq!(
-            ExtendedBigDecimal::extended_parse(&format!("0.0000e{}", i64::MIN)),
-            Ok(ExtendedBigDecimal::zero()),
-        );
-        assert_eq!(
-            ExtendedBigDecimal::extended_parse(&format!("-0e{}", i64::MIN + 2)),
-            Ok(ExtendedBigDecimal::MinusZero)
-        );
-
-        /* Invalid numbers */
-        assert_eq!(
-            Err(ExtendedParserError::NotNumeric),
-            ExtendedBigDecimal::extended_parse("")
-        );
-        assert_eq!(
-            Err(ExtendedParserError::NotNumeric),
-            ExtendedBigDecimal::extended_parse(".")
-        );
-        assert_eq!(
-            Err(ExtendedParserError::NotNumeric),
-            ExtendedBigDecimal::extended_parse("e")
-        );
-        assert_eq!(
-            Err(ExtendedParserError::NotNumeric),
-            ExtendedBigDecimal::extended_parse(".e")
-        );
-        assert_eq!(
-            Err(ExtendedParserError::NotNumeric),
-            ExtendedBigDecimal::extended_parse("-e")
-        );
-        assert_eq!(
-            Err(ExtendedParserError::NotNumeric),
-            ExtendedBigDecimal::extended_parse("+.e")
-        );
-        assert_eq!(
-            Err(ExtendedParserError::NotNumeric),
-            ExtendedBigDecimal::extended_parse("e10")
-        );
-        assert_eq!(
-            Err(ExtendedParserError::NotNumeric),
-            ExtendedBigDecimal::extended_parse("e-10")
-        );
-        assert_eq!(
-            Err(ExtendedParserError::NotNumeric),
-            ExtendedBigDecimal::extended_parse("-e10")
-        );
-        assert_eq!(
-            Err(ExtendedParserError::NotNumeric),
-            ExtendedBigDecimal::extended_parse("+e10")
-        );
-    }
-
-    #[test]
-    fn test_oversized_numeric_input_is_bounded() {
-        let oversized_numeric = "1".repeat(super::MAX_PARSED_DIGITS as usize + 1);
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse(&oversized_numeric),
-            Err(ExtendedParserError::PartialMatch(_, rest)) if rest == "1"
-        ));
-
-        let oversized_zeros = "0".repeat(super::MAX_PARSED_DIGITS as usize + 1);
-        assert_eq!(
-            ExtendedBigDecimal::extended_parse(&oversized_zeros),
-            Ok(ExtendedBigDecimal::zero())
-        );
-
-        let oversized_nonnumeric = "x".repeat(super::MAX_PARSED_DIGITS as usize + 1);
-        assert_eq!(
-            ExtendedBigDecimal::extended_parse(&oversized_nonnumeric),
-            Err(ExtendedParserError::NotNumeric)
-        );
-
-        let oversized_dot = ".".to_string() + &"x".repeat(super::MAX_PARSED_DIGITS as usize + 1);
-        assert_eq!(
-            ExtendedBigDecimal::extended_parse(&oversized_dot),
-            Err(ExtendedParserError::NotNumeric)
-        );
-
-        let oversized_fraction = format!("0.1{}", "2".repeat(super::MAX_PARSED_DIGITS as usize));
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse(&oversized_fraction),
-            Err(ExtendedParserError::PartialMatch(_, rest)) if rest == "2"
-        ));
-
-        let oversized_exponent = format!("1e1{}", "2".repeat(super::MAX_PARSED_DIGITS as usize));
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse(&oversized_exponent),
-            Err(ExtendedParserError::PartialMatch(_, rest)) if rest == "2"
-        ));
-    }
-
-    #[test]
-    fn test_oversized_input_preserves_partial_matches() {
-        let long_junk = "x".repeat(super::MAX_PARSED_DIGITS as usize + 1);
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse(&format!("1{long_junk}")),
-            Err(ExtendedParserError::PartialMatch(_, rest)) if rest == long_junk
-        ));
-
-        assert_eq!(
-            ExtendedBigDecimal::extended_parse(&format!("inf{long_junk}")),
-            Err(ExtendedParserError::PartialMatch(
-                ExtendedBigDecimal::Infinity,
-                long_junk
-            ))
-        );
-    }
-
-    #[test]
-    fn test_hexadecimal() {
-        assert_eq!(Ok(0x123), u64::extended_parse("0x123"));
-        assert_eq!(Ok(0x123), u64::extended_parse("0X123"));
-        assert_eq!(Ok(0x123), u64::extended_parse("+0x123"));
-        assert_eq!(Ok(0xfe), u64::extended_parse("0xfE"));
-        assert_eq!(Ok(-0x123), i64::extended_parse("-0x123"));
-
-        assert_eq!(Ok(0.5), f64::extended_parse("0x.8"));
-        assert_eq!(Ok(0.0625), f64::extended_parse("0x.1"));
-        assert_eq!(Ok(15.007_812_5), f64::extended_parse("0xf.02"));
-        assert_eq!(Ok(16.0), f64::extended_parse("0x0.8p5"));
-        assert_eq!(Ok(0.0625), f64::extended_parse("0x1P-4"));
-
-        // We cannot really check that 'e' is not a valid exponent indicator for hex floats...
-        // but we can check that the number still gets parsed properly: 0x0.8e5 is 0x8e5 / 16**3
-        assert_eq!(Ok(0.555_908_203_125), f64::extended_parse("0x0.8e5"));
-
-        assert_eq!(
-            f64::extended_parse("0x0.1p"),
-            Err(ExtendedParserError::PartialMatch(0.0625, "p".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("0x0.1p-"),
-            Err(ExtendedParserError::PartialMatch(0.0625, "p-".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("0x.1p+"),
-            Err(ExtendedParserError::PartialMatch(0.0625, "p+".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("0x.1p."),
-            Err(ExtendedParserError::PartialMatch(0.0625, "p.".to_string()))
-        );
-
-        assert_eq!(
-            Ok(ExtendedBigDecimal::BigDecimal(
-                BigDecimal::from_str("0.0625").unwrap()
-            )),
-            ExtendedBigDecimal::extended_parse("0x.1")
-        );
-
-        // Precisely parse very large hexadecimal numbers (i.e. with a large division).
-        assert_eq!(
-            Ok(ExtendedBigDecimal::BigDecimal(
-                BigDecimal::from_str("15.999999999999999999999999948301211715435770320536956745627321652136743068695068359375").unwrap()
-            )),
-            ExtendedBigDecimal::extended_parse("0xf.fffffffffffffffffffff")
-        );
-
-        // Test very large exponents (they used to take forever as we kept all digits in the past)
-        // Wolfram Alpha can get us (close to?) these values with a bit of log trickery:
-        // 2**3000000000 = 10**log_10(2**3000000000) = 10**(3000000000 * log_10(2))
-        // TODO: We do lose a little bit of precision, and the last digits are not be correct.
-        assert_eq!(
-            Ok(ExtendedBigDecimal::BigDecimal(
-                // Wolfram Alpha says 9.8162042336235053508313854078782835648991393286913072670026492205522618203568834202759669215027003865... × 10^903089986
-                BigDecimal::from_str("9.816204233623505350831385407878283564899139328691307267002649220552261820356883420275966921502700387e+903089986").unwrap()
-            )),
-            ExtendedBigDecimal::extended_parse("0x1p3000000000")
-        );
-        assert_eq!(
-            Ok(ExtendedBigDecimal::BigDecimal(
-                // Wolfram Alpha says 1.3492131462369983551036088935544888715959511045742395978049631768570509541390540646442193112226520316... × 10^-9030900
-                BigDecimal::from_str("1.349213146236998355103608893554488871595951104574239597804963176857050954139054064644219311222652032e-9030900").unwrap()
-            )),
-            // Couldn't get a answer from Wolfram Alpha for smaller negative exponents
-            ExtendedBigDecimal::extended_parse("0x1p-30000000")
-        );
-
-        // ExtendedBigDecimal overflow/underflow
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse(&format!("0x1p{}", u64::MAX as u128 + 1)),
-            Err(ExtendedParserError::Overflow(ExtendedBigDecimal::Infinity))
-        ));
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse(&format!("-0x100P{}", u64::MAX as u128 + 1)),
-            Err(ExtendedParserError::Overflow(
-                ExtendedBigDecimal::MinusInfinity
-            ))
-        ));
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse(&format!("0x1p-{}", u64::MAX as u128 + 1)),
-            Err(ExtendedParserError::Underflow(ebd)) if ebd == ExtendedBigDecimal::zero()
-        ));
-        assert!(matches!(
-            ExtendedBigDecimal::extended_parse(&format!("-0x0.100p-{}", u64::MAX as u128 + 1)),
-            Err(ExtendedParserError::Underflow(
-                ExtendedBigDecimal::MinusZero
-            ))
-        ));
-
-        // Not actually hex numbers, but the prefixes look like it.
-        assert_eq!(
-            f64::extended_parse("0x"),
-            Err(ExtendedParserError::PartialMatch(0.0, "x".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("0x."),
-            Err(ExtendedParserError::PartialMatch(0.0, "x.".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("0xp"),
-            Err(ExtendedParserError::PartialMatch(0.0, "xp".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("0xp-2"),
-            Err(ExtendedParserError::PartialMatch(0.0, "xp-2".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("0x.p-2"),
-            Err(ExtendedParserError::PartialMatch(0.0, "x.p-2".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("0X"),
-            Err(ExtendedParserError::PartialMatch(0.0, "X".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("-0x"),
-            Err(ExtendedParserError::PartialMatch(0.0, "x".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("+0x"),
-            Err(ExtendedParserError::PartialMatch(0.0, "x".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("-0x."),
-            Err(ExtendedParserError::PartialMatch(-0.0, "x.".to_string()))
-        );
-        assert_eq!(
-            u64::extended_parse("0x"),
-            Err(ExtendedParserError::PartialMatch(0, "x".to_string()))
-        );
-        assert_eq!(
-            u64::extended_parse("-0x"),
-            Err(ExtendedParserError::PartialMatch(0, "x".to_string()))
-        );
-        assert_eq!(
-            i64::extended_parse("0x"),
-            Err(ExtendedParserError::PartialMatch(0, "x".to_string()))
-        );
-        assert_eq!(
-            i64::extended_parse("-0x"),
-            Err(ExtendedParserError::PartialMatch(0, "x".to_string()))
-        );
-    }
-
-    #[test]
-    fn test_octal() {
-        assert_eq!(Ok(0), u64::extended_parse("0"));
-        assert_eq!(Ok(0o123), u64::extended_parse("0123"));
-        assert_eq!(Ok(0o123), u64::extended_parse("+0123"));
-        assert_eq!(Ok(-0o123), i64::extended_parse("-0123"));
-        assert_eq!(Ok(0o123), u64::extended_parse("00123"));
-        assert_eq!(Ok(0), u64::extended_parse("00"));
-        assert_eq!(
-            u64::extended_parse("008"),
-            Err(ExtendedParserError::PartialMatch(0, "8".to_string()))
-        );
-        assert_eq!(
-            u64::extended_parse("08"),
-            Err(ExtendedParserError::PartialMatch(0, "8".to_string()))
-        );
-        assert_eq!(
-            u64::extended_parse("0."),
-            Err(ExtendedParserError::PartialMatch(0, ".".to_string()))
-        );
-
-        // No float tests, leading zeros get parsed as decimal anyway.
-    }
-
-    #[test]
-    fn test_binary() {
-        assert_eq!(Ok(0b1011), u64::extended_parse("0b1011"));
-        assert_eq!(Ok(0b1011), u64::extended_parse("0B1011"));
-        assert_eq!(Ok(0b1011), u64::extended_parse("+0b1011"));
-        assert_eq!(Ok(-0b1011), i64::extended_parse("-0b1011"));
-
-        assert_eq!(
-            u64::extended_parse("0b"),
-            Err(ExtendedParserError::PartialMatch(0, "b".to_string()))
-        );
-        assert_eq!(
-            u64::extended_parse("0b."),
-            Err(ExtendedParserError::PartialMatch(0, "b.".to_string()))
-        );
-        assert_eq!(
-            u64::extended_parse("-0b"),
-            Err(ExtendedParserError::PartialMatch(0, "b".to_string()))
-        );
-        assert_eq!(
-            i64::extended_parse("0b"),
-            Err(ExtendedParserError::PartialMatch(0, "b".to_string()))
-        );
-        assert_eq!(
-            i64::extended_parse("-0b"),
-            Err(ExtendedParserError::PartialMatch(0, "b".to_string()))
-        );
-
-        // Binary not allowed for floats
-        assert_eq!(
-            f64::extended_parse("0b100"),
-            Err(ExtendedParserError::PartialMatch(0f64, "b100".to_string()))
-        );
-        assert_eq!(
-            f64::extended_parse("0b100.1"),
-            Err(ExtendedParserError::PartialMatch(
-                0f64,
-                "b100.1".to_string()
-            ))
-        );
-
-        assert_eq!(
-            ExtendedBigDecimal::extended_parse("0b100.1"),
-            Err(ExtendedParserError::PartialMatch(
-                ExtendedBigDecimal::zero(),
-                "b100.1".to_string()
-            ))
-        );
-
-        assert_eq!(
-            ExtendedBigDecimal::extended_parse("0b"),
-            Err(ExtendedParserError::PartialMatch(
-                ExtendedBigDecimal::zero(),
-                "b".to_string()
-            ))
-        );
-        assert_eq!(
-            ExtendedBigDecimal::extended_parse("0b."),
-            Err(ExtendedParserError::PartialMatch(
-                ExtendedBigDecimal::zero(),
-                "b.".to_string()
-            ))
-        );
-    }
-
-    #[test]
-    fn test_parsing_with_leading_whitespace() {
-        assert_eq!(Ok(1), u64::extended_parse(" 0x1"));
-        assert_eq!(Ok(-2), i64::extended_parse(" -0x2"));
-        assert_eq!(Ok(-3), i64::extended_parse(" \t-0x3"));
-        assert_eq!(Ok(-4), i64::extended_parse(" \n-0x4"));
-        assert_eq!(Ok(-5), i64::extended_parse(" \n\t\u{000d}-0x5"));
-
-        // Ensure that trailing whitespace is still a partial match
-        assert_eq!(
-            Err(ExtendedParserError::PartialMatch(6, " ".to_string())),
-            u64::extended_parse("0x6 ")
-        );
-        assert_eq!(
-            Err(ExtendedParserError::PartialMatch(7, "\t".to_string())),
-            u64::extended_parse("0x7\t")
-        );
-        assert_eq!(
-            Err(ExtendedParserError::PartialMatch(8, "\n".to_string())),
-            u64::extended_parse("0x8\n")
-        );
-
-        // Ensure that unicode non-ascii whitespace is a partial match
-        assert_eq!(
-            Err(ExtendedParserError::NotNumeric),
-            i64::extended_parse("\u{2029}-0x9")
-        );
-
-        // Ensure that whitespace after the number has "started" is not allowed
-        assert_eq!(
-            Err(ExtendedParserError::NotNumeric),
-            i64::extended_parse("- 0x9")
-        );
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/parser/parse_glob.rs b/registry/native/stubs/uucore/src/lib/features/parser/parse_glob.rs
deleted file mode 100644
index 6f7dae24c..000000000
--- a/registry/native/stubs/uucore/src/lib/features/parser/parse_glob.rs
+++ /dev/null
@@ -1,126 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-//! Parsing a glob Pattern from a string.
-//!
-//! Use the [`from_str`] function to parse a [`Pattern`] from a string.
-
-// cSpell:words fnmatch
-
-use glob::{Pattern, PatternError};
-
-fn fix_negation(glob: &str) -> String {
-    let mut chars = glob.chars().collect::<Vec<_>>();
-
-    let mut i = 0;
-    // Add 3 to prevent out of bounds in loop
-    while i + 3 < chars.len() {
-        if chars[i] == '[' && chars[i + 1] == '^' {
-            match chars[i + 3..].iter().position(|x| *x == ']') {
-                None => {
-                    // if closing square bracket not found, stop looking for it
-                    // again
-                    break;
-                }
-                Some(j) => {
-                    chars[i + 1] = '!';
-                    i += j + 4;
-                    continue;
-                }
-            }
-        }
-
-        i += 1;
-    }
-
-    chars.into_iter().collect::<String>()
-}
-
-/// Parse a glob Pattern from a string.
-///
-/// This function amends the input string to replace any caret or circumflex
-/// character (^) used to negate a set of characters with an exclamation mark
-/// (!), which adapts rust's glob matching to function the way the GNU utils'
-/// fnmatch does.
-///
-/// # Examples
-///
-/// ```rust
-/// use std::time::Duration;
-/// use uucore::parser::parse_glob::from_str;
-/// assert!(!from_str("[^abc]").unwrap().matches("a"));
-/// assert!(from_str("[^abc]").unwrap().matches("x"));
-/// ```
-pub fn from_str(glob: &str) -> Result<Pattern, PatternError> {
-    Pattern::new(&fix_negation(glob))
-}
-
-#[cfg(test)]
-mod tests {
-
-    use super::*;
-
-    #[test]
-    fn test_from_str() {
-        assert_eq!(from_str("[^abc]").unwrap(), Pattern::new("[!abc]").unwrap());
-    }
-
-    #[test]
-    fn test_fix_negation() {
-        // Happy/Simple case
-        assert_eq!(fix_negation("[^abc]"), "[!abc]");
-
-        // Should fix negations in a long regex
-        assert_eq!(fix_negation("foo[abc]  bar[^def]"), "foo[abc]  bar[!def]");
-
-        // Should fix multiple negations in a regex
-        assert_eq!(fix_negation("foo[^abc]bar[^def]"), "foo[!abc]bar[!def]");
-
-        // Should fix negation of the single character ]
-        assert_eq!(fix_negation("[^]]"), "[!]]");
-
-        // Should fix negation of the single character ^
-        assert_eq!(fix_negation("[^^]"), "[!^]");
-
-        // Should fix negation of the space character
-        assert_eq!(fix_negation("[^ ]"), "[! ]");
-
-        // Complicated patterns
-        assert_eq!(fix_negation("[^][]"), "[!][]");
-        assert_eq!(fix_negation("[^[]]"), "[![]]");
-
-        // More complex patterns that should be replaced
-        assert_eq!(fix_negation("[[]] [^a]"), "[[]] [!a]");
-        assert_eq!(fix_negation("[[] [^a]"), "[[] [!a]");
-        assert_eq!(fix_negation("[]] [^a]"), "[]] [!a]");
-
-        // test that we don't look for closing square brackets unnecessarily
-        // Verifies issue #5584
-        let chars = "^[".repeat(174_571);
-        assert_eq!(fix_negation(chars.as_str()), chars);
-    }
-
-    #[test]
-    fn test_fix_negation_should_not_amend() {
-        assert_eq!(fix_negation("abc"), "abc");
-
-        // Regex specifically matches either [ or ^
-        assert_eq!(fix_negation("[[^]"), "[[^]");
-
-        // Regex that specifically matches either space or ^
-        assert_eq!(fix_negation("[ ^]"), "[ ^]");
-
-        // Regex that specifically matches either [, space or ^
-        assert_eq!(fix_negation("[[ ^]"), "[[ ^]");
-        assert_eq!(fix_negation("[ [^]"), "[ [^]");
-
-        // Invalid globs (according to rust's glob implementation) will remain unamended
-        assert_eq!(fix_negation("[^]"), "[^]");
-        assert_eq!(fix_negation("[^"), "[^");
-        assert_eq!(fix_negation("[][^]"), "[][^]");
-
-        // Issue #4479
-        assert_eq!(fix_negation("ààà[^"), "ààà[^");
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/parser/parse_signed_num.rs b/registry/native/stubs/uucore/src/lib/features/parser/parse_signed_num.rs
deleted file mode 100644
index 82ffcaaca..000000000
--- a/registry/native/stubs/uucore/src/lib/features/parser/parse_signed_num.rs
+++ /dev/null
@@ -1,228 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Parser for signed numeric arguments used by head, tail, and similar utilities.
-//!
-//! These utilities accept arguments like `-5`, `+10`, `-100K` where the leading
-//! sign indicates different behavior (e.g., "first N" vs "last N" vs "starting from N").
-
-use super::parse_size::{ParseSizeError, parse_size_u64, parse_size_u64_max};
-
-/// The sign prefix found on a numeric argument.
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum SignPrefix {
-    /// Plus sign prefix (e.g., "+10")
-    Plus,
-    /// Minus sign prefix (e.g., "-10")
-    Minus,
-}
-
-/// A parsed signed numeric argument.
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub struct SignedNum {
-    /// The numeric value
-    pub value: u64,
-    /// The sign prefix that was present, if any
-    pub sign: Option<SignPrefix>,
-}
-
-impl SignedNum {
-    /// Returns true if the value is zero.
-    pub fn is_zero(&self) -> bool {
-        self.value == 0
-    }
-
-    /// Returns true if a plus sign was present.
-    pub fn has_plus(&self) -> bool {
-        self.sign == Some(SignPrefix::Plus)
-    }
-
-    /// Returns true if a minus sign was present.
-    pub fn has_minus(&self) -> bool {
-        self.sign == Some(SignPrefix::Minus)
-    }
-}
-
-/// Parse a signed numeric argument, clamping to u64::MAX on overflow.
-///
-/// This function parses strings like "10", "+5K", "-100M" where:
-/// - The optional leading `+` or `-` indicates direction/behavior
-/// - The number can have size suffixes (K, M, G, etc.)
-///
-/// # Arguments
-/// * `src` - The string to parse
-///
-/// # Returns
-/// * `Ok(SignedNum)` - The parsed value and sign
-/// * `Err(ParseSizeError)` - If the string cannot be parsed
-///
-/// # Examples
-/// ```ignore
-/// use uucore::parser::parse_signed_num::parse_signed_num_max;
-///
-/// let result = parse_signed_num_max("10").unwrap();
-/// assert_eq!(result.value, 10);
-/// assert_eq!(result.sign, None);
-///
-/// let result = parse_signed_num_max("+5K").unwrap();
-/// assert_eq!(result.value, 5 * 1024);
-/// assert_eq!(result.sign, Some(SignPrefix::Plus));
-///
-/// let result = parse_signed_num_max("-100").unwrap();
-/// assert_eq!(result.value, 100);
-/// assert_eq!(result.sign, Some(SignPrefix::Minus));
-/// ```
-pub fn parse_signed_num_max(src: &str) -> Result<SignedNum, ParseSizeError> {
-    let (sign, size_string) = strip_sign_prefix(src);
-
-    // Empty string after stripping sign is an error
-    if size_string.is_empty() {
-        return Err(ParseSizeError::ParseFailure(src.to_string()));
-    }
-
-    // Remove leading zeros so size is interpreted as decimal, not octal
-    let trimmed = size_string.trim_start_matches('0');
-    let value = if trimmed.is_empty() {
-        // All zeros (e.g., "000" or "0")
-        0
-    } else {
-        parse_size_u64_max(trimmed)?
-    };
-
-    Ok(SignedNum { value, sign })
-}
-
-/// Parse a signed numeric argument, returning error on overflow.
-///
-/// Same as [`parse_signed_num_max`] but returns an error instead of clamping
-/// when the value overflows u64.
-///
-/// Note: On parse failure, this returns an error with the raw string (without quotes)
-/// to allow callers to format the error message as needed.
-pub fn parse_signed_num(src: &str) -> Result<SignedNum, ParseSizeError> {
-    let (sign, size_string) = strip_sign_prefix(src);
-
-    // Empty string after stripping sign is an error
-    if size_string.is_empty() {
-        return Err(ParseSizeError::ParseFailure(src.to_string()));
-    }
-
-    // Use parse_size_u64 but on failure, create our own error with the raw string
-    // (without quotes) so callers can format it as needed
-    let value = parse_size_u64(size_string)
-        .map_err(|_| ParseSizeError::ParseFailure(size_string.to_string()))?;
-
-    Ok(SignedNum { value, sign })
-}
-
-/// Strip the sign prefix from a string and return both the sign and remaining string.
-fn strip_sign_prefix(src: &str) -> (Option<SignPrefix>, &str) {
-    let trimmed = src.trim();
-
-    if let Some(rest) = trimmed.strip_prefix('+') {
-        (Some(SignPrefix::Plus), rest)
-    } else if let Some(rest) = trimmed.strip_prefix('-') {
-        (Some(SignPrefix::Minus), rest)
-    } else {
-        (None, trimmed)
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn test_no_sign() {
-        let result = parse_signed_num_max("10").unwrap();
-        assert_eq!(result.value, 10);
-        assert_eq!(result.sign, None);
-        assert!(!result.has_plus());
-        assert!(!result.has_minus());
-    }
-
-    #[test]
-    fn test_plus_sign() {
-        let result = parse_signed_num_max("+10").unwrap();
-        assert_eq!(result.value, 10);
-        assert_eq!(result.sign, Some(SignPrefix::Plus));
-        assert!(result.has_plus());
-        assert!(!result.has_minus());
-    }
-
-    #[test]
-    fn test_minus_sign() {
-        let result = parse_signed_num_max("-10").unwrap();
-        assert_eq!(result.value, 10);
-        assert_eq!(result.sign, Some(SignPrefix::Minus));
-        assert!(!result.has_plus());
-        assert!(result.has_minus());
-    }
-
-    #[test]
-    fn test_with_suffix() {
-        let result = parse_signed_num_max("+5K").unwrap();
-        assert_eq!(result.value, 5 * 1024);
-        assert!(result.has_plus());
-
-        let result = parse_signed_num_max("-2M").unwrap();
-        assert_eq!(result.value, 2 * 1024 * 1024);
-        assert!(result.has_minus());
-    }
-
-    #[test]
-    fn test_zero() {
-        let result = parse_signed_num_max("0").unwrap();
-        assert_eq!(result.value, 0);
-        assert!(result.is_zero());
-
-        let result = parse_signed_num_max("+0").unwrap();
-        assert_eq!(result.value, 0);
-        assert!(result.is_zero());
-        assert!(result.has_plus());
-
-        let result = parse_signed_num_max("-0").unwrap();
-        assert_eq!(result.value, 0);
-        assert!(result.is_zero());
-        assert!(result.has_minus());
-    }
-
-    #[test]
-    fn test_leading_zeros() {
-        let result = parse_signed_num_max("007").unwrap();
-        assert_eq!(result.value, 7);
-
-        let result = parse_signed_num_max("+007").unwrap();
-        assert_eq!(result.value, 7);
-        assert!(result.has_plus());
-
-        let result = parse_signed_num_max("000").unwrap();
-        assert_eq!(result.value, 0);
-    }
-
-    #[test]
-    fn test_whitespace() {
-        let result = parse_signed_num_max("  10  ").unwrap();
-        assert_eq!(result.value, 10);
-
-        let result = parse_signed_num_max("  +10  ").unwrap();
-        assert_eq!(result.value, 10);
-        assert!(result.has_plus());
-    }
-
-    #[test]
-    fn test_overflow_max() {
-        // Should clamp to u64::MAX instead of error
-        let result = parse_signed_num_max("99999999999999999999999999").unwrap();
-        assert_eq!(result.value, u64::MAX);
-    }
-
-    #[test]
-    fn test_invalid() {
-        assert!(parse_signed_num_max("").is_err());
-        assert!(parse_signed_num_max("abc").is_err());
-        assert!(parse_signed_num_max("++10").is_err());
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/parser/parse_size.rs b/registry/native/stubs/uucore/src/lib/features/parser/parse_size.rs
deleted file mode 100644
index 1a14f1c6d..000000000
--- a/registry/native/stubs/uucore/src/lib/features/parser/parse_size.rs
+++ /dev/null
@@ -1,836 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// spell-checker:ignore (ToDO) hdsf ghead gtail ACDBK hexdigit
-
-//! Parser for sizes in SI or IEC units (multiples of 1000 or 1024 bytes).
-
-use std::error::Error;
-use std::fmt;
-use std::num::{IntErrorKind, ParseIntError};
-
-use crate::display::Quotable;
-#[cfg(target_os = "linux")]
-use procfs::{Current, Meminfo};
-
-/// Error arising from trying to compute system memory.
-enum SystemError {
-    IOError,
-    ParseError,
-    #[cfg(not(target_os = "linux"))]
-    NotFound,
-}
-
-impl From<std::io::Error> for SystemError {
-    fn from(_: std::io::Error) -> Self {
-        Self::IOError
-    }
-}
-
-impl From<ParseIntError> for SystemError {
-    fn from(_: ParseIntError) -> Self {
-        Self::ParseError
-    }
-}
-
-/// Get the total number of bytes of physical memory.
-///
-/// The information is read from the `/proc/meminfo` file.
-///
-/// # Errors
-///
-/// If there is a problem reading the file or finding the appropriate
-/// entry in the file.
-#[cfg(target_os = "linux")]
-fn total_physical_memory() -> Result<u128, SystemError> {
-    let info = Meminfo::current().map_err(|_| SystemError::IOError)?;
-    Ok((info.mem_total as u128).saturating_mul(1024))
-}
-
-/// Return the number of bytes of memory that appear to be currently available.
-#[cfg(target_os = "linux")]
-pub fn available_memory_bytes() -> Option<u128> {
-    let info = Meminfo::current().ok()?;
-
-    if let Some(available_kib) = info.mem_available {
-        let available_bytes = (available_kib as u128).saturating_mul(1024);
-        if available_bytes > 0 {
-            return Some(available_bytes);
-        }
-    }
-
-    let fallback_kib = (info.mem_free as u128)
-        .saturating_add(info.buffers as u128)
-        .saturating_add(info.cached as u128);
-
-    if fallback_kib > 0 {
-        Some(fallback_kib.saturating_mul(1024))
-    } else {
-        total_physical_memory().ok()
-    }
-}
-
-/// Return `None` when the platform does not expose Linux-like `/proc/meminfo`.
-#[cfg(not(target_os = "linux"))]
-pub fn available_memory_bytes() -> Option<u128> {
-    None
-}
-
-/// Get the total number of bytes of physical memory.
-///
-/// TODO Implement this for non-Linux systems.
-#[cfg(not(target_os = "linux"))]
-fn total_physical_memory() -> Result<u128, SystemError> {
-    Err(SystemError::NotFound)
-}
-
-/// Parser for sizes in SI or IEC units (multiples of 1000 or 1024 bytes).
-///
-/// The [`Parser::parse`] function performs the parse.
-#[derive(Default)]
-pub struct Parser<'parser> {
-    /// Whether to allow empty numeric strings.
-    pub no_empty_numeric: bool,
-    /// Whether to treat the suffix "B" as meaning "bytes".
-    pub capital_b_bytes: bool,
-    /// Whether to treat "b" as a "byte count" instead of "block"
-    pub b_byte_count: bool,
-    /// Whitelist for the suffix
-    pub allow_list: Option<&'parser [&'parser str]>,
-    /// Default unit when no suffix is provided
-    pub default_unit: Option<&'parser str>,
-}
-
-#[derive(Clone, Copy)]
-enum NumberSystem {
-    Decimal,
-    Octal,
-    Hexadecimal,
-    Binary,
-}
-
-impl<'parser> Parser<'parser> {
-    /// Change allow_list of the parser - whitelist for the suffix
-    pub fn with_allow_list(&mut self, allow_list: &'parser [&str]) -> &mut Self {
-        self.allow_list = Some(allow_list);
-        self
-    }
-
-    /// Change default_unit of the parser - when no suffix is provided
-    pub fn with_default_unit(&mut self, default_unit: &'parser str) -> &mut Self {
-        self.default_unit = Some(default_unit);
-        self
-    }
-
-    /// Change b_byte_count of the parser - to treat "b" as a "byte count" instead of "block"
-    pub fn with_b_byte_count(&mut self, value: bool) -> &mut Self {
-        self.b_byte_count = value;
-        self
-    }
-
-    /// Change no_empty_numeric of the parser - to allow empty numeric strings
-    pub fn with_allow_empty_numeric(&mut self, value: bool) -> &mut Self {
-        self.no_empty_numeric = value;
-        self
-    }
-    /// Parse a size string into a number of bytes.
-    ///
-    /// A size string comprises an integer and an optional unit. The integer
-    /// may be in decimal, octal (0 prefix), hexadecimal (0x prefix), or
-    /// binary (0b prefix) notation. The unit may be K, M, G, T, P, E, Z, Y,
-    /// R or Q (powers of 1024), or KB, MB, etc. (powers of 1000), or b which
-    /// is 512. Binary prefixes can be used, too: KiB=K, MiB=M, and so on.
-    ///
-    /// # Errors
-    ///
-    /// Will return `ParseSizeError` if it's not possible to parse this
-    /// string into a number, e.g. if the string does not begin with a
-    /// numeral, or if the unit is not one of the supported units described
-    /// in the preceding section.
-    ///
-    /// # Examples
-    ///
-    /// ```rust
-    /// use uucore::parser::parse_size::Parser;
-    /// let parser = Parser {
-    ///     default_unit: Some("M"),
-    ///     ..Default::default()
-    /// };
-    /// assert_eq!(Ok(123 * 1024 * 1024), parser.parse("123M")); // M is 1024^2
-    /// assert_eq!(Ok(123 * 1024 * 1024), parser.parse("123")); // default unit set to "M" on parser instance
-    /// assert_eq!(Ok(9 * 1000), parser.parse("9kB")); // kB is 1000
-    /// assert_eq!(Ok(2 * 1024), parser.parse("2K")); // K is 1024
-    /// assert_eq!(Ok(44251 * 1024), parser.parse("0xACDBK")); // 0xACDB is 44251 in decimal
-    /// assert_eq!(Ok(44251 * 1024 * 1024), parser.parse("0b1010110011011011")); // 0b1010110011011011 is 44251 in decimal, default M
-    /// ```
-    pub fn parse(&self, size: &str) -> Result<u128, ParseSizeError> {
-        if size.is_empty() {
-            return Err(ParseSizeError::parse_failure(size));
-        }
-
-        let number_system = Self::determine_number_system(size);
-
-        // Split the size argument into numeric and unit parts
-        // For example, if the argument is "123K", the numeric part is "123", and
-        // the unit is "K"
-        let numeric_len = Self::numeric_prefix_len(size, number_system);
-        let numeric_string = &size[..numeric_len];
-        let mut unit: &str = &size[numeric_len..];
-
-        if let Some(default_unit) = self.default_unit {
-            // Check if `unit` is empty then assigns `default_unit` to `unit`
-            if unit.is_empty() {
-                unit = default_unit;
-            }
-        }
-
-        // Check if `b` is a byte count and remove `b`
-        if self.b_byte_count && unit.ends_with('b') {
-            // If `unit` = 'b' then return error
-            if numeric_string.is_empty() {
-                return Err(ParseSizeError::parse_failure(size));
-            }
-            unit = &unit[0..unit.len() - 1];
-        }
-
-        if let Some(allow_list) = self.allow_list {
-            // Check if `unit` appears in `allow_list`, if not return error
-            if !allow_list.contains(&unit) && !unit.is_empty() {
-                if numeric_string.is_empty() {
-                    return Err(ParseSizeError::parse_failure(size));
-                }
-                return Err(ParseSizeError::invalid_suffix(size));
-            }
-        }
-
-        // Special case: for percentage, just compute the given fraction
-        // of the total physical memory on the machine, if possible.
-        if unit == "%" {
-            let number: u128 = Self::parse_number(numeric_string, 10, size)?;
-            return match total_physical_memory() {
-                Ok(total) => Ok((number / 100) * total),
-                Err(_) => Err(ParseSizeError::PhysicalMem(size.to_string())),
-            };
-        }
-
-        // Compute the factor the unit represents.
-        // empty string means the factor is 1.
-        //
-        // The lowercase "b" (used by `od`, `head`, `tail`, etc.) means
-        // "block" and the Posix block size is 512. The uppercase "B"
-        // means "byte".
-        let (base, exponent): (u128, u32) = match unit {
-            "" => (1, 0),
-            "B" if self.capital_b_bytes => (1, 0),
-            "b" => (512, 1),
-            "KiB" | "kiB" | "K" | "k" => (1024, 1),
-            "MiB" | "miB" | "M" | "m" => (1024, 2),
-            "GiB" | "giB" | "G" | "g" => (1024, 3),
-            "TiB" | "tiB" | "T" | "t" => (1024, 4),
-            "PiB" | "piB" | "P" | "p" => (1024, 5),
-            "EiB" | "eiB" | "E" | "e" => (1024, 6),
-            "ZiB" | "ziB" | "Z" | "z" => (1024, 7),
-            "YiB" | "yiB" | "Y" | "y" => (1024, 8),
-            "RiB" | "riB" | "R" | "r" => (1024, 9),
-            "QiB" | "qiB" | "Q" | "q" => (1024, 10),
-            "KB" | "kB" => (1000, 1),
-            "MB" | "mB" => (1000, 2),
-            "GB" | "gB" => (1000, 3),
-            "TB" | "tB" => (1000, 4),
-            "PB" | "pB" => (1000, 5),
-            "EB" | "eB" => (1000, 6),
-            "ZB" | "zB" => (1000, 7),
-            "YB" | "yB" => (1000, 8),
-            "RB" | "rB" => (1000, 9),
-            "QB" | "qB" => (1000, 10),
-            _ if numeric_string.is_empty() => return Err(ParseSizeError::parse_failure(size)),
-            _ => return Err(ParseSizeError::invalid_suffix(size)),
-        };
-        let factor = base.pow(exponent);
-
-        // parse string into u128
-        let number: u128 = match number_system {
-            NumberSystem::Decimal => {
-                if numeric_string.is_empty() && !self.no_empty_numeric {
-                    1
-                } else {
-                    Self::parse_number(numeric_string, 10, size)?
-                }
-            }
-            NumberSystem::Octal => {
-                let trimmed_string = numeric_string.trim_start_matches('0');
-                Self::parse_number(trimmed_string, 8, size)?
-            }
-            NumberSystem::Hexadecimal => {
-                let trimmed_string = numeric_string.trim_start_matches("0x");
-                Self::parse_number(trimmed_string, 16, size)?
-            }
-            NumberSystem::Binary => {
-                let trimmed_string = numeric_string.trim_start_matches("0b");
-                Self::parse_number(trimmed_string, 2, size)?
-            }
-        };
-
-        number
-            .checked_mul(factor)
-            .ok_or_else(|| ParseSizeError::size_too_big(size))
-    }
-
-    /// Explicit u128 alias for `parse()`
-    pub fn parse_u128(&self, size: &str) -> Result<u128, ParseSizeError> {
-        self.parse(size)
-    }
-
-    /// Same as `parse()` but tries to return u64
-    pub fn parse_u64(&self, size: &str) -> Result<u64, ParseSizeError> {
-        self.parse(size).and_then(|num_u128| {
-            u64::try_from(num_u128).map_err(|_| ParseSizeError::size_too_big(size))
-        })
-    }
-
-    /// Same as `parse_u64()`, except returns `u64::MAX` on overflow
-    /// GNU lib/coreutils include similar functionality
-    /// and GNU test suite checks this behavior for some utils (`split` for example)
-    pub fn parse_u64_max(&self, size: &str) -> Result<u64, ParseSizeError> {
-        let result = self.parse_u64(size);
-        match result {
-            Ok(_) => result,
-            Err(error) => {
-                if let ParseSizeError::SizeTooBig(_) = error {
-                    Ok(u64::MAX)
-                } else {
-                    Err(error)
-                }
-            }
-        }
-    }
-
-    /// Same as `parse_u64_max()`, except for u128, i.e. returns `u128::MAX` on overflow
-    pub fn parse_u128_max(&self, size: &str) -> Result<u128, ParseSizeError> {
-        let result = self.parse_u128(size);
-        match result {
-            Ok(_) => result,
-            Err(error) => {
-                if let ParseSizeError::SizeTooBig(_) = error {
-                    Ok(u128::MAX)
-                } else {
-                    Err(error)
-                }
-            }
-        }
-    }
-
-    fn determine_number_system(size: &str) -> NumberSystem {
-        if size.len() <= 1 {
-            return NumberSystem::Decimal;
-        }
-
-        if size.starts_with("0x") {
-            return NumberSystem::Hexadecimal;
-        }
-
-        // Binary prefix: "0b" followed by at least one binary digit (0 or 1)
-        // Note: "0b" alone is treated as decimal 0 with suffix "b"
-        if let Some(prefix) = size.strip_prefix("0b") {
-            if !prefix.is_empty() {
-                return NumberSystem::Binary;
-            }
-        }
-
-        let num_digits = size.chars().take_while(char::is_ascii_digit).count();
-        let all_zeros = size.chars().all(|c| c == '0');
-        if size.starts_with('0') && num_digits > 1 && !all_zeros {
-            return NumberSystem::Octal;
-        }
-
-        NumberSystem::Decimal
-    }
-
-    fn numeric_prefix_len(size: &str, number_system: NumberSystem) -> usize {
-        match number_system {
-            NumberSystem::Hexadecimal => {
-                2 + size[2..]
-                    .chars()
-                    .take_while(char::is_ascii_hexdigit)
-                    .map(char::len_utf8)
-                    .sum::<usize>()
-            }
-            NumberSystem::Binary => {
-                2 + size[2..]
-                    .chars()
-                    .take_while(|c| c.is_digit(2))
-                    .map(char::len_utf8)
-                    .sum::<usize>()
-            }
-            NumberSystem::Decimal | NumberSystem::Octal => size
-                .chars()
-                .take_while(char::is_ascii_digit)
-                .map(char::len_utf8)
-                .sum(),
-        }
-    }
-
-    fn parse_number(
-        numeric_string: &str,
-        radix: u32,
-        original_size: &str,
-    ) -> Result<u128, ParseSizeError> {
-        u128::from_str_radix(numeric_string, radix).map_err(|e| match e.kind() {
-            IntErrorKind::PosOverflow => ParseSizeError::size_too_big(original_size),
-            _ => ParseSizeError::ParseFailure(original_size.to_string()),
-        })
-    }
-}
-
-/// Parse a size string into a number of bytes
-/// using Default Parser (no custom settings)
-///
-/// # Examples
-///
-/// ```rust
-/// use uucore::parser::parse_size::parse_size_u128;
-/// assert_eq!(Ok(123), parse_size_u128("123"));
-/// assert_eq!(Ok(9 * 1000), parse_size_u128("9kB")); // kB is 1000
-/// assert_eq!(Ok(2 * 1024), parse_size_u128("2K")); // K is 1024
-/// assert_eq!(Ok(44251 * 1024), parse_size_u128("0xACDBK")); // hexadecimal
-/// assert_eq!(Ok(10), parse_size_u128("0b1010")); // binary
-/// assert_eq!(Ok(10 * 1024), parse_size_u128("0b1010K")); // binary with suffix
-/// ```
-pub fn parse_size_u128(size: &str) -> Result<u128, ParseSizeError> {
-    Parser::default().parse(size)
-}
-
-/// Same as `parse_size_u128()`, but for u64
-pub fn parse_size_u64(size: &str) -> Result<u64, ParseSizeError> {
-    Parser::default().parse_u64(size)
-}
-
-/// Same as `parse_size_u64()`, except 0 fails to parse
-pub fn parse_size_non_zero_u64(size: &str) -> Result<u64, ParseSizeError> {
-    let v = Parser::default().parse_u64(size)?;
-    if v == 0 {
-        return Err(ParseSizeError::ParseFailure("0".to_string()));
-    }
-    Ok(v)
-}
-
-/// Same as `parse_size_u64()` - deprecated
-#[deprecated = "Please use parse_size_u64(size: &str) -> Result<u64, ParseSizeError> OR parse_size_u128(size: &str) -> Result<u128, ParseSizeError> instead."]
-pub fn parse_size(size: &str) -> Result<u64, ParseSizeError> {
-    parse_size_u64(size)
-}
-
-/// Same as `parse_size_u64()`, except returns `u64::MAX` on overflow
-/// GNU lib/coreutils include similar functionality
-/// and GNU test suite checks this behavior for some utils
-pub fn parse_size_u64_max(size: &str) -> Result<u64, ParseSizeError> {
-    Parser::default().parse_u64_max(size)
-}
-
-/// Same as `parse_size_u128()`, except returns `u128::MAX` on overflow
-pub fn parse_size_u128_max(size: &str) -> Result<u128, ParseSizeError> {
-    Parser::default().parse_u128_max(size)
-}
-
-/// Error type for parse_size
-#[derive(Debug, PartialEq, Eq)]
-pub enum ParseSizeError {
-    /// Suffix
-    InvalidSuffix(String),
-
-    /// Syntax
-    ParseFailure(String),
-
-    /// Overflow
-    SizeTooBig(String),
-
-    /// Could not determine total physical memory size.
-    PhysicalMem(String),
-}
-
-impl Error for ParseSizeError {
-    fn description(&self) -> &str {
-        match *self {
-            Self::InvalidSuffix(ref s) => s,
-            Self::ParseFailure(ref s) => s,
-            Self::SizeTooBig(ref s) => s,
-            Self::PhysicalMem(ref s) => s,
-        }
-    }
-}
-
-impl fmt::Display for ParseSizeError {
-    fn fmt(&self, f: &mut fmt::Formatter) -> Result<(), fmt::Error> {
-        let s = match self {
-            Self::InvalidSuffix(s)
-            | Self::ParseFailure(s)
-            | Self::SizeTooBig(s)
-            | Self::PhysicalMem(s) => s,
-        };
-        write!(f, "{s}")
-    }
-}
-
-// FIXME: It's more idiomatic to move the formatting into the Display impl,
-// but there's a lot of downstream code that constructs these errors manually
-// that would be affected
-impl ParseSizeError {
-    fn invalid_suffix(s: &str) -> Self {
-        Self::InvalidSuffix(format!("{}", s.quote()))
-    }
-
-    fn parse_failure(s: &str) -> Self {
-        // stderr on linux (GNU coreutils 8.32) (LC_ALL=C)
-        // has to be handled in the respective uutils because strings differ, e.g.:
-        //
-        // `NUM`
-        // head:     invalid number of bytes: '1fb'
-        // tail:     invalid number of bytes: '1fb'
-        //
-        // `SIZE`
-        // split:    invalid number of bytes: '1fb'
-        // truncate: Invalid number: '1fb'
-        //
-        // `MODE`
-        // stdbuf:   invalid mode '1fb'
-        //
-        // `SIZE`
-        // sort:     invalid suffix in --buffer-size argument '1fb'
-        // sort:     invalid --buffer-size argument 'fb'
-        //
-        // `SIZE`
-        // du:       invalid suffix in --buffer-size argument '1fb'
-        // du:       invalid suffix in --threshold argument '1fb'
-        // du:       invalid --buffer-size argument 'fb'
-        // du:       invalid --threshold argument 'fb'
-        //
-        // `BYTES`
-        // od:       invalid suffix in --read-bytes argument '1fb'
-        // od:       invalid --read-bytes argument  argument 'fb'
-        //                   --skip-bytes
-        //                   --width
-        //                   --strings
-        // etc.
-        Self::ParseFailure(format!("{}", s.quote()))
-    }
-
-    fn size_too_big(s: &str) -> Self {
-        // stderr on linux (GNU coreutils 8.32) (LC_ALL=C)
-        // has to be handled in the respective uutils because strings differ, e.g.:
-        //
-        // head:     invalid number of bytes: '1Y': Value too large for defined data type
-        // tail:     invalid number of bytes: '1Y': Value too large for defined data type
-        // split:    invalid number of bytes: '1Y': Value too large for defined data type
-        // truncate:          Invalid number: '1Y': Value too large for defined data type
-        // stdbuf:               invalid mode '1Y': Value too large for defined data type
-        // sort:     -S argument '1Y' too large
-        // du:       -B argument '1Y' too large
-        // od:       -N argument '1Y' too large
-        // etc.
-        //
-        // stderr on macos (brew - GNU coreutils 8.32) also differs for the same version, e.g.:
-        // ghead:   invalid number of bytes: '1Y': Value too large to be stored in data type
-        // gtail:   invalid number of bytes: '1Y': Value too large to be stored in data type
-        Self::SizeTooBig(format!(
-            "{}: Value too large for defined data type",
-            s.quote()
-        ))
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    fn variant_eq(a: &ParseSizeError, b: &ParseSizeError) -> bool {
-        std::mem::discriminant(a) == std::mem::discriminant(b)
-    }
-
-    #[test]
-    fn all_suffixes() {
-        // Units  are  K,M,G,T,P,E,Z,Y,R,Q (powers of 1024) or KB,MB,... (powers of 1000).
-        // Binary prefixes can be used, too: KiB=K, MiB=M, and so on.
-        let suffixes = [
-            ('K', 1u32),
-            ('M', 2u32),
-            ('G', 3u32),
-            ('T', 4u32),
-            ('P', 5u32),
-            ('E', 6u32),
-            ('Z', 7u32),
-            ('Y', 8u32),
-            ('R', 9u32),
-            ('Q', 10u32),
-        ];
-
-        for &(c, exp) in &suffixes {
-            let s = format!("2{c}B"); // KB
-            assert_eq!(Ok(2 * 1000_u128.pow(exp)), parse_size_u128(&s));
-            let s = format!("2{c}"); // K
-            assert_eq!(Ok(2 * 1024_u128.pow(exp)), parse_size_u128(&s));
-            let s = format!("2{c}iB"); // KiB
-            assert_eq!(Ok(2 * 1024_u128.pow(exp)), parse_size_u128(&s));
-            let s = format!("2{}iB", c.to_lowercase()); // kiB
-            assert_eq!(Ok(2 * 1024_u128.pow(exp)), parse_size_u128(&s));
-
-            // suffix only
-            let s = format!("{c}B"); // KB
-            assert_eq!(Ok(1000_u128.pow(exp)), parse_size_u128(&s));
-            let s = format!("{c}"); // K
-            assert_eq!(Ok(1024_u128.pow(exp)), parse_size_u128(&s));
-            let s = format!("{c}iB"); // KiB
-            assert_eq!(Ok(1024_u128.pow(exp)), parse_size_u128(&s));
-            let s = format!("{}iB", c.to_lowercase()); // kiB
-            assert_eq!(Ok(1024_u128.pow(exp)), parse_size_u128(&s));
-        }
-    }
-
-    #[test]
-    fn overflow_x64() {
-        assert!(parse_size_u64("10000000000000000000000").is_err());
-        assert!(parse_size_u64("1000000000T").is_err());
-        assert!(parse_size_u64("100000P").is_err());
-        assert!(parse_size_u64("100E").is_err());
-        assert!(parse_size_u64("1Z").is_err());
-        assert!(parse_size_u64("1Y").is_err());
-        assert!(parse_size_u64("1R").is_err());
-        assert!(parse_size_u64("1Q").is_err());
-        assert!(parse_size_u64("0b1111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111111").is_err());
-
-        assert!(variant_eq(
-            &parse_size_u64("1Z").unwrap_err(),
-            &ParseSizeError::SizeTooBig(String::new())
-        ));
-
-        assert_eq!(
-            ParseSizeError::SizeTooBig("'1Y': Value too large for defined data type".to_string()),
-            parse_size_u64("1Y").unwrap_err()
-        );
-        assert_eq!(
-            ParseSizeError::SizeTooBig("'1R': Value too large for defined data type".to_string()),
-            parse_size_u64("1R").unwrap_err()
-        );
-        assert_eq!(
-            ParseSizeError::SizeTooBig("'1Q': Value too large for defined data type".to_string()),
-            parse_size_u64("1Q").unwrap_err()
-        );
-    }
-
-    #[test]
-    fn overflow_to_max_u64() {
-        assert_eq!(Ok(1_099_511_627_776), parse_size_u64_max("1T"));
-        assert_eq!(Ok(1_125_899_906_842_624), parse_size_u64_max("1P"));
-        assert_eq!(Ok(u64::MAX), parse_size_u64_max("18446744073709551616"));
-        assert_eq!(Ok(u64::MAX), parse_size_u64_max("10000000000000000000000"));
-        assert_eq!(Ok(u64::MAX), parse_size_u64_max("1Y"));
-        assert_eq!(Ok(u64::MAX), parse_size_u64_max("1R"));
-        assert_eq!(Ok(u64::MAX), parse_size_u64_max("1Q"));
-    }
-
-    #[test]
-    fn overflow_to_max_u128() {
-        assert_eq!(
-            Ok(12_379_400_392_853_802_748_991_242_240),
-            parse_size_u128_max("10R")
-        );
-        assert_eq!(
-            Ok(12_676_506_002_282_294_014_967_032_053_760),
-            parse_size_u128_max("10Q")
-        );
-        assert_eq!(Ok(u128::MAX), parse_size_u128_max("1000000000000R"));
-        assert_eq!(Ok(u128::MAX), parse_size_u128_max("1000000000Q"));
-    }
-
-    #[test]
-    fn invalid_suffix() {
-        let test_strings = ["5mib", "1eb", "1H"];
-        for &test_string in &test_strings {
-            assert_eq!(
-                parse_size_u64(test_string).unwrap_err(),
-                ParseSizeError::InvalidSuffix(format!("{}", test_string.quote()))
-            );
-        }
-    }
-
-    #[test]
-    fn invalid_syntax() {
-        let test_strings = ["biB", "-", "+", "", "-1", "∞"];
-        for &test_string in &test_strings {
-            assert_eq!(
-                parse_size_u64(test_string).unwrap_err(),
-                ParseSizeError::ParseFailure(format!("{}", test_string.quote()))
-            );
-        }
-    }
-
-    #[test]
-    fn b_suffix() {
-        assert_eq!(Ok(3 * 512), parse_size_u64("3b")); // b is 512
-        assert_eq!(Ok(0), parse_size_u64("0b")); // b should be used as a suffix in this case instead of signifying binary
-    }
-
-    #[test]
-    fn no_suffix() {
-        assert_eq!(Ok(1234), parse_size_u64("1234"));
-        assert_eq!(Ok(0), parse_size_u64("0"));
-        assert_eq!(Ok(5), parse_size_u64("5"));
-        assert_eq!(Ok(999), parse_size_u64("999"));
-    }
-
-    #[test]
-    fn kilobytes_suffix() {
-        assert_eq!(Ok(123 * 1000), parse_size_u64("123KB")); // KB is 1000
-        assert_eq!(Ok(9 * 1000), parse_size_u64("9kB")); // kB is 1000
-        assert_eq!(Ok(2 * 1024), parse_size_u64("2K")); // K is 1024
-        assert_eq!(Ok(0), parse_size_u64("0K"));
-        assert_eq!(Ok(0), parse_size_u64("0KB"));
-        assert_eq!(Ok(1000), parse_size_u64("KB"));
-        assert_eq!(Ok(1024), parse_size_u64("K"));
-        assert_eq!(Ok(2000), parse_size_u64("2kB"));
-        assert_eq!(Ok(4000), parse_size_u64("4KB"));
-    }
-
-    #[test]
-    fn megabytes_suffix() {
-        assert_eq!(Ok(123 * 1024 * 1024), parse_size_u64("123M"));
-        assert_eq!(Ok(123 * 1000 * 1000), parse_size_u64("123MB"));
-        assert_eq!(Ok(1024 * 1024), parse_size_u64("M"));
-        assert_eq!(Ok(1000 * 1000), parse_size_u64("MB"));
-        assert_eq!(Ok(2 * 1_048_576), parse_size_u64("2m"));
-        assert_eq!(Ok(4 * 1_048_576), parse_size_u64("4M"));
-        assert_eq!(Ok(2_000_000), parse_size_u64("2mB"));
-        assert_eq!(Ok(4_000_000), parse_size_u64("4MB"));
-    }
-
-    #[test]
-    fn gigabytes_suffix() {
-        assert_eq!(Ok(1_073_741_824), parse_size_u64("1G"));
-        assert_eq!(Ok(2_000_000_000), parse_size_u64("2GB"));
-    }
-
-    #[test]
-    #[cfg(target_pointer_width = "64")]
-    fn x64() {
-        assert_eq!(Ok(1_099_511_627_776), parse_size_u64("1T"));
-        assert_eq!(Ok(1_125_899_906_842_624), parse_size_u64("1P"));
-        assert_eq!(Ok(1_152_921_504_606_846_976), parse_size_u64("1E"));
-
-        assert_eq!(Ok(1_180_591_620_717_411_303_424), parse_size_u128("1Z"));
-        assert_eq!(Ok(1_208_925_819_614_629_174_706_176), parse_size_u128("1Y"));
-        assert_eq!(
-            Ok(1_237_940_039_285_380_274_899_124_224),
-            parse_size_u128("1R")
-        );
-        assert_eq!(
-            Ok(1_267_650_600_228_229_401_496_703_205_376),
-            parse_size_u128("1Q")
-        );
-
-        assert_eq!(Ok(2_000_000_000_000), parse_size_u64("2TB"));
-        assert_eq!(Ok(2_000_000_000_000_000), parse_size_u64("2PB"));
-        assert_eq!(Ok(2_000_000_000_000_000_000), parse_size_u64("2EB"));
-
-        assert_eq!(Ok(2_000_000_000_000_000_000_000), parse_size_u128("2ZB"));
-        assert_eq!(
-            Ok(2_000_000_000_000_000_000_000_000),
-            parse_size_u128("2YB")
-        );
-        assert_eq!(
-            Ok(2_000_000_000_000_000_000_000_000_000),
-            parse_size_u128("2RB")
-        );
-        assert_eq!(
-            Ok(2_000_000_000_000_000_000_000_000_000_000),
-            parse_size_u128("2QB")
-        );
-    }
-
-    #[test]
-    fn parse_size_options() {
-        let mut parser = Parser::default();
-
-        parser
-            .with_allow_list(&["k", "K", "G", "MB", "M"])
-            .with_default_unit("K");
-
-        assert_eq!(Ok(1024), parser.parse("1"));
-        assert_eq!(Ok(2 * 1024), parser.parse("2"));
-        assert_eq!(Ok(1000 * 1000), parser.parse("1MB"));
-        assert_eq!(Ok(1024 * 1024), parser.parse("1M"));
-        assert_eq!(Ok(1024 * 1024 * 1024), parser.parse("1G"));
-
-        assert!(parser.parse("1T").is_err());
-        assert!(parser.parse("1P").is_err());
-        assert!(parser.parse("1E").is_err());
-
-        parser
-            .with_allow_list(&[
-                "b", "k", "K", "m", "M", "MB", "g", "G", "t", "T", "P", "E", "Z", "Y", "R", "Q",
-            ])
-            .with_default_unit("K")
-            .with_b_byte_count(true);
-
-        assert_eq!(Ok(1024), parser.parse("1"));
-        assert_eq!(Ok(2 * 1024), parser.parse("2"));
-        assert_eq!(Ok(1000 * 1000), parser.parse("1MB"));
-        assert_eq!(Ok(1024 * 1024), parser.parse("1M"));
-        assert_eq!(Ok(1024 * 1024 * 1024), parser.parse("1G"));
-        assert_eq!(
-            Ok(1_237_940_039_285_380_274_899_124_224),
-            parser.parse_u128("1R")
-        );
-        assert_eq!(
-            Ok(1_267_650_600_228_229_401_496_703_205_376),
-            parser.parse_u128("1Q")
-        );
-
-        assert_eq!(Ok(1), parser.parse("1b"));
-        assert_eq!(Ok(1024), parser.parse("1024b"));
-        assert_eq!(Ok(1024 * 1024 * 1024), parser.parse("1024Mb"));
-
-        assert!(parser.parse("b").is_err());
-        assert!(parser.parse("1B").is_err());
-        assert!(parser.parse("B").is_err());
-    }
-
-    #[test]
-    fn parse_octal_size() {
-        assert_eq!(Ok(63), parse_size_u64("077"));
-        assert_eq!(Ok(528), parse_size_u64("01020"));
-        assert_eq!(Ok(668 * 1024), parse_size_u128("01234K"));
-    }
-
-    #[test]
-    fn parse_hex_size() {
-        assert_eq!(Ok(10), parse_size_u64("0xA"));
-        assert_eq!(Ok(94722), parse_size_u64("0x17202"));
-        assert_eq!(Ok(44251 * 1024), parse_size_u128("0xACDBK"));
-    }
-
-    #[test]
-    fn parse_binary_size() {
-        assert_eq!(Ok(44251), parse_size_u64("0b1010110011011011"));
-        assert_eq!(Ok(44251 * 1024), parse_size_u64("0b1010110011011011K"));
-    }
-
-    #[test]
-    fn parse_size_rejects_multibyte_suffixes_and_invalid_prefixes() {
-        let test_strings = ["123∞", "0xA∞", "0b10∞", "0x", "0b2"];
-        for test_string in test_strings {
-            assert!(parse_size_u64(test_string).is_err());
-        }
-    }
-
-    #[test]
-    #[cfg(target_os = "linux")]
-    fn parse_percent() {
-        assert!(parse_size_u64("0%").is_ok());
-        assert!(parse_size_u64("50%").is_ok());
-        assert!(parse_size_u64("100%").is_ok());
-        assert!(parse_size_u64("100000%").is_ok());
-        assert!(parse_size_u64("-1%").is_err());
-        assert!(parse_size_u64("1.0%").is_err());
-        assert!(parse_size_u64("0x1%").is_err());
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/parser/parse_time.rs b/registry/native/stubs/uucore/src/lib/features/parser/parse_time.rs
deleted file mode 100644
index 9c0f3f1f0..000000000
--- a/registry/native/stubs/uucore/src/lib/features/parser/parse_time.rs
+++ /dev/null
@@ -1,307 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore (vars) NANOS numstr infinityh INFD nans nanh bigdecimal extendedbigdecimal
-//! Parsing a duration from a string.
-//!
-//! Use the [`from_str`] function to parse a [`Duration`] from a string.
-
-use crate::{
-    display::Quotable,
-    extendedbigdecimal::ExtendedBigDecimal,
-    parser::num_parser::{self, ExtendedParserError, ParseTarget},
-};
-use num_traits::ToPrimitive;
-use num_traits::Zero;
-use num_traits::{FromPrimitive, Signed};
-use std::time::Duration;
-
-/// Parse a duration from a string.
-///
-/// The string may contain only a number, like "123" or "4.5", or it
-/// may contain a number with a unit specifier, like "123s" meaning
-/// one hundred twenty three seconds or "4.5d" meaning four and a half
-/// days. If no unit is specified, the unit is assumed to be seconds.
-///
-/// If `allow_suffixes` is true, the allowed suffixes are
-///
-/// * "s" for seconds,
-/// * "m" for minutes,
-/// * "h" for hours,
-/// * "d" for days.
-///
-/// This function does not overflow if large values are provided. If
-/// overflow would have occurred, [`Duration::MAX`] is returned instead.
-///
-/// If the value is smaller than 1 nanosecond, we return 1 nanosecond.
-///
-/// # Errors
-///
-/// This function returns an error if the input string is empty, the
-/// input is not a valid number, or the unit specifier is invalid or
-/// unknown.
-///
-/// # Examples
-///
-/// ```rust
-/// use std::time::Duration;
-/// use uucore::parser::parse_time::from_str;
-/// assert_eq!(from_str("123", true), Ok(Duration::from_secs(123)));
-/// assert_eq!(from_str("123", false), Ok(Duration::from_secs(123)));
-/// assert_eq!(from_str("2d", true), Ok(Duration::from_secs(60 * 60 * 24 * 2)));
-/// assert!(from_str("2d", false).is_err());
-/// ```
-pub fn from_str(string: &str, allow_suffixes: bool) -> Result<Duration, String> {
-    // TODO: Switch to Duration::NANOSECOND if that ever becomes stable
-    // https://github.com/rust-lang/rust/issues/57391
-    const NANOSECOND_DURATION: Duration = Duration::from_nanos(1);
-
-    let len = string.len();
-    if len == 0 {
-        return Err(format!("invalid time interval {}", string.quote()));
-    }
-    let num = match num_parser::parse(
-        string,
-        ParseTarget::Duration,
-        if allow_suffixes {
-            &[('s', 1), ('m', 60), ('h', 60 * 60), ('d', 60 * 60 * 24)]
-        } else {
-            &[]
-        },
-    ) {
-        Ok(ebd) | Err(ExtendedParserError::Overflow(ebd)) => ebd,
-        Err(ExtendedParserError::Underflow(_)) => return Ok(NANOSECOND_DURATION),
-        _ => {
-            return Err(format!("invalid time interval {}", string.quote()));
-        }
-    };
-
-    // Allow non-negative durations (-0 is fine), and infinity.
-    let num = match num {
-        ExtendedBigDecimal::BigDecimal(bd) if !bd.is_negative() => {
-            if bd.fractional_digit_count() <= -20 {
-                // bd >= 10^20 > u64::MAX -- early return to avoid
-                // potentially expensive to-nanoseconds conversion
-                return Ok(Duration::MAX);
-            }
-            // early return if number is too small (< 1 ns)
-            if !bd.is_zero() && bd < bigdecimal::BigDecimal::from_f64(0.000_000_000_1).unwrap() {
-                return Ok(NANOSECOND_DURATION);
-            }
-            bd
-        }
-        ExtendedBigDecimal::MinusZero => 0.into(),
-        ExtendedBigDecimal::Infinity => return Ok(Duration::MAX),
-        _ => return Err(format!("invalid time interval {}", string.quote())),
-    };
-
-    // Transform to nanoseconds (9 digits after decimal point)
-    let (nanos_bi, _) = num.with_scale(9).into_bigint_and_scale();
-
-    // If the value is smaller than a nanosecond, just return that.
-    if nanos_bi.is_zero() && !num.is_zero() {
-        return Ok(NANOSECOND_DURATION);
-    }
-
-    const NANOS_PER_SEC: u32 = 1_000_000_000;
-    let whole_secs: u64 = match (&nanos_bi / NANOS_PER_SEC).try_into() {
-        Ok(whole_secs) => whole_secs,
-        Err(_) => return Ok(Duration::MAX),
-    };
-    let nanos: u32 = (&nanos_bi % NANOS_PER_SEC).to_u32().unwrap();
-    Ok(Duration::new(whole_secs, nanos))
-}
-
-#[cfg(test)]
-mod tests {
-
-    use crate::parser::parse_time::from_str;
-    use std::time::Duration;
-
-    #[test]
-    fn test_no_units() {
-        assert_eq!(from_str("123", true), Ok(Duration::from_secs(123)));
-        assert_eq!(from_str("123", false), Ok(Duration::from_secs(123)));
-    }
-
-    #[test]
-    fn test_units() {
-        assert_eq!(
-            from_str("2d", true),
-            Ok(Duration::from_secs(60 * 60 * 24 * 2))
-        );
-        assert!(from_str("2d", false).is_err());
-    }
-
-    #[test]
-    fn test_overflow() {
-        // u64 seconds overflow (in Duration)
-        assert_eq!(from_str("9223372036854775808d", true), Ok(Duration::MAX));
-        assert_eq!(from_str("1e6666666666668320", true), Ok(Duration::MAX));
-        // ExtendedBigDecimal overflow
-        assert_eq!(from_str("1e92233720368547758080", false), Ok(Duration::MAX));
-        assert_eq!(from_str("1e92233720368547758080", false), Ok(Duration::MAX));
-    }
-
-    #[test]
-    fn test_underflow() {
-        // TODO: Switch to Duration::NANOSECOND if that ever becomes stable
-        // https://github.com/rust-lang/rust/issues/57391
-        const NANOSECOND_DURATION: Duration = Duration::from_nanos(1);
-
-        // ExtendedBigDecimal underflow
-        assert_eq!(
-            from_str("1e-92233720368547758080", true),
-            Ok(NANOSECOND_DURATION)
-        );
-        // nanoseconds underflow (in Duration, true)
-        assert_eq!(from_str("0.0000000001", true), Ok(NANOSECOND_DURATION));
-        assert_eq!(from_str("1e-10", true), Ok(NANOSECOND_DURATION));
-        assert_eq!(from_str("9e-10", true), Ok(NANOSECOND_DURATION));
-        assert_eq!(from_str("1e-9", true), Ok(NANOSECOND_DURATION));
-        assert_eq!(from_str("1.9e-9", true), Ok(NANOSECOND_DURATION));
-        assert_eq!(from_str("2e-9", true), Ok(Duration::from_nanos(2)));
-
-        // ExtendedBigDecimal underflow
-        assert_eq!(
-            from_str("1e-92233720368547758080", false),
-            Ok(NANOSECOND_DURATION)
-        );
-        assert_eq!(
-            from_str("0x6p-4376646810043701", false),
-            Ok(NANOSECOND_DURATION)
-        );
-        // nanoseconds underflow (in Duration, false)
-        assert_eq!(from_str("0.0000000001", false), Ok(NANOSECOND_DURATION));
-        assert_eq!(from_str("1e-10", false), Ok(NANOSECOND_DURATION));
-        assert_eq!(from_str("9e-10", false), Ok(NANOSECOND_DURATION));
-        assert_eq!(from_str("1e-9", false), Ok(NANOSECOND_DURATION));
-        assert_eq!(from_str("1.9e-9", false), Ok(NANOSECOND_DURATION));
-        assert_eq!(from_str("2e-9", false), Ok(Duration::from_nanos(2)));
-    }
-
-    #[test]
-    fn test_zero() {
-        assert_eq!(from_str("0e-9", true), Ok(Duration::ZERO));
-        assert_eq!(from_str("0e-100", true), Ok(Duration::ZERO));
-        assert_eq!(
-            from_str("0e-92233720368547758080", true),
-            Ok(Duration::ZERO)
-        );
-        assert_eq!(
-            from_str("0.000000000000000000000", true),
-            Ok(Duration::ZERO)
-        );
-
-        assert_eq!(from_str("0e-9", false), Ok(Duration::ZERO));
-        assert_eq!(from_str("0e-100", false), Ok(Duration::ZERO));
-        assert_eq!(
-            from_str("0e-92233720368547758080", false),
-            Ok(Duration::ZERO)
-        );
-        assert_eq!(
-            from_str("0.000000000000000000000", false),
-            Ok(Duration::ZERO)
-        );
-    }
-
-    #[test]
-    fn test_hex_float() {
-        assert_eq!(
-            from_str("0x1.1p-1", true),
-            Ok(Duration::from_secs_f64(0.53125f64))
-        );
-        assert_eq!(
-            from_str("0x1.1p-1", false),
-            Ok(Duration::from_secs_f64(0.53125f64))
-        );
-        assert_eq!(
-            from_str("0x1.1p-1d", true),
-            Ok(Duration::from_secs_f64(0.53125f64 * 3600.0 * 24.0))
-        );
-        assert_eq!(from_str("0xfh", true), Ok(Duration::from_secs(15 * 3600)));
-    }
-
-    #[test]
-    fn test_error_empty() {
-        assert!(from_str("", true).is_err());
-        assert!(from_str("", false).is_err());
-    }
-
-    #[test]
-    fn test_error_invalid_unit() {
-        assert!(from_str("123X", true).is_err());
-        assert!(from_str("123X", false).is_err());
-    }
-
-    #[test]
-    fn test_error_multi_bytes_characters() {
-        assert!(from_str("10€", true).is_err());
-        assert!(from_str("10€", false).is_err());
-    }
-
-    #[test]
-    fn test_error_invalid_magnitude() {
-        assert!(from_str("12abc3s", true).is_err());
-        assert!(from_str("12abc3s", false).is_err());
-    }
-
-    #[test]
-    fn test_error_oversized_partial_magnitude() {
-        let long_digits = "1".repeat(8193);
-        assert!(from_str(&long_digits, true).is_err());
-        assert!(from_str(&format!("1{}s", "2".repeat(8192)), true).is_err());
-        assert!(from_str(&format!("1{}x", "2".repeat(8192)), true).is_err());
-        assert!(from_str(&format!("1e1{}", "2".repeat(8192)), true).is_err());
-    }
-
-    #[test]
-    fn test_error_only_point() {
-        assert!(from_str(".", true).is_err());
-        assert!(from_str(".", false).is_err());
-    }
-
-    #[test]
-    fn test_negative() {
-        assert!(from_str("-1", true).is_err());
-        assert!(from_str("-1", false).is_err());
-    }
-
-    #[test]
-    fn test_infinity() {
-        assert_eq!(from_str("inf", true), Ok(Duration::MAX));
-        assert_eq!(from_str("infinity", true), Ok(Duration::MAX));
-        assert_eq!(from_str("infinityh", true), Ok(Duration::MAX));
-        assert_eq!(from_str("INF", true), Ok(Duration::MAX));
-        assert_eq!(from_str("INFs", true), Ok(Duration::MAX));
-
-        assert_eq!(from_str("inf", false), Ok(Duration::MAX));
-        assert_eq!(from_str("infinity", false), Ok(Duration::MAX));
-        assert_eq!(from_str("INF", false), Ok(Duration::MAX));
-    }
-
-    #[test]
-    fn test_nan() {
-        assert!(from_str("nan", true).is_err());
-        assert!(from_str("nans", true).is_err());
-        assert!(from_str("-nanh", true).is_err());
-        assert!(from_str("NAN", true).is_err());
-        assert!(from_str("-NAN", true).is_err());
-
-        assert!(from_str("nan", false).is_err());
-        assert!(from_str("NAN", false).is_err());
-        assert!(from_str("-NAN", false).is_err());
-    }
-
-    /// Test that capital letters are not allowed in suffixes.
-    #[test]
-    fn test_no_capital_letters() {
-        assert!(from_str("1S", true).is_err());
-        assert!(from_str("1M", true).is_err());
-        assert!(from_str("1H", true).is_err());
-        assert!(from_str("1D", true).is_err());
-        assert!(from_str("INFD", true).is_err());
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/parser/shortcut_value_parser.rs b/registry/native/stubs/uucore/src/lib/features/parser/shortcut_value_parser.rs
deleted file mode 100644
index 60e784744..000000000
--- a/registry/native/stubs/uucore/src/lib/features/parser/shortcut_value_parser.rs
+++ /dev/null
@@ -1,233 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// spell-checker:ignore abcdefgh abef Strs
-
-//! A parser that accepts shortcuts for values.
-//! `ShortcutValueParser` is similar to clap's `PossibleValuesParser`
-
-use clap::{
-    builder::{PossibleValue, TypedValueParser},
-    error::{ContextKind, ContextValue, ErrorKind},
-};
-
-/// A parser that accepts shortcuts for values.
-#[derive(Clone)]
-pub struct ShortcutValueParser(Vec<PossibleValue>);
-
-/// `ShortcutValueParser` is similar to clap's `PossibleValuesParser`: it verifies that the value is
-/// from an enumerated set of `PossibleValue`.
-///
-/// Whereas `PossibleValuesParser` only accepts exact matches, `ShortcutValueParser` also accepts
-/// shortcuts as long as they are unambiguous.
-impl ShortcutValueParser {
-    /// Create a new `ShortcutValueParser` from a list of `PossibleValue`.
-    pub fn new(values: impl Into<Self>) -> Self {
-        values.into()
-    }
-
-    fn generate_clap_error(
-        &self,
-        cmd: &clap::Command,
-        arg: Option<&clap::Arg>,
-        value: &str,
-        possible_values: &[&PossibleValue],
-    ) -> clap::Error {
-        let mut err = clap::Error::new(ErrorKind::InvalidValue).with_cmd(cmd);
-
-        if let Some(arg) = arg {
-            err.insert(
-                ContextKind::InvalidArg,
-                ContextValue::String(arg.to_string()),
-            );
-        }
-
-        err.insert(
-            ContextKind::InvalidValue,
-            ContextValue::String(value.to_string()),
-        );
-
-        err.insert(
-            ContextKind::ValidValue,
-            ContextValue::Strings(self.0.iter().map(|x| x.get_name().to_string()).collect()),
-        );
-
-        // if `possible_values` is not empty then that means this error is because of an ambiguous value.
-        if !possible_values.is_empty() {
-            add_ambiguous_value_tip(possible_values, &mut err, value);
-        }
-        err
-    }
-}
-
-/// Adds a suggestion when error is because of ambiguous values based on the provided possible values.
-fn add_ambiguous_value_tip(
-    possible_values: &[&PossibleValue],
-    err: &mut clap::error::Error,
-    value: &str,
-) {
-    let mut formatted_possible_values = String::new();
-    for (i, s) in possible_values.iter().enumerate() {
-        formatted_possible_values.push_str(&format!("'{}'", s.get_name()));
-        if i < possible_values.len() - 2 {
-            formatted_possible_values.push_str(", ");
-        } else if i < possible_values.len() - 1 {
-            formatted_possible_values.push_str(" or ");
-        }
-    }
-    err.insert(
-        ContextKind::Suggested,
-        ContextValue::StyledStrs(vec![format!(
-            "It looks like '{value}' could match several values. Did you mean {formatted_possible_values}?"
-        )
-        .into()]),
-    );
-}
-
-impl TypedValueParser for ShortcutValueParser {
-    type Value = String;
-
-    fn parse_ref(
-        &self,
-        cmd: &clap::Command,
-        arg: Option<&clap::Arg>,
-        value: &std::ffi::OsStr,
-    ) -> Result<Self::Value, clap::Error> {
-        let value = value
-            .to_str()
-            .ok_or(clap::Error::new(ErrorKind::InvalidUtf8))?;
-
-        let matched_values: Vec<_> = self
-            .0
-            .iter()
-            .filter(|x| x.get_name_and_aliases().any(|name| name.starts_with(value)))
-            .collect();
-
-        match matched_values.len() {
-            0 => Err(self.generate_clap_error(cmd, arg, value, &[])),
-            1 => Ok(matched_values[0].get_name().to_string()),
-            _ => {
-                if let Some(direct_match) = matched_values.iter().find(|x| x.get_name() == value) {
-                    Ok(direct_match.get_name().to_string())
-                } else {
-                    Err(self.generate_clap_error(cmd, arg, value, &matched_values))
-                }
-            }
-        }
-    }
-
-    fn possible_values(&self) -> Option<Box<dyn Iterator<Item = PossibleValue> + '_>> {
-        Some(Box::new(self.0.iter().cloned()))
-    }
-}
-
-impl<I, T> From<I> for ShortcutValueParser
-where
-    I: IntoIterator<Item = T>,
-    T: Into<PossibleValue>,
-{
-    fn from(values: I) -> Self {
-        Self(values.into_iter().map(Into::into).collect())
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use std::ffi::OsStr;
-
-    use clap::{Command, builder::PossibleValue, builder::TypedValueParser, error::ErrorKind};
-
-    use super::ShortcutValueParser;
-
-    #[test]
-    fn test_parse_ref() {
-        let cmd = Command::new("cmd");
-        let parser = ShortcutValueParser::new(["abcd"]);
-        let values = ["a", "ab", "abc", "abcd"];
-
-        for value in values {
-            let result = parser.parse_ref(&cmd, None, OsStr::new(value));
-            assert_eq!("abcd", result.unwrap());
-        }
-    }
-
-    #[test]
-    fn test_parse_ref_with_invalid_value() {
-        let cmd = Command::new("cmd");
-        let parser = ShortcutValueParser::new(["abcd"]);
-        let invalid_values = ["e", "abe", "abcde"];
-
-        for invalid_value in invalid_values {
-            let result = parser.parse_ref(&cmd, None, OsStr::new(invalid_value));
-            assert_eq!(ErrorKind::InvalidValue, result.unwrap_err().kind());
-        }
-    }
-
-    #[test]
-    fn test_parse_ref_with_ambiguous_value() {
-        let cmd = Command::new("cmd");
-        let parser = ShortcutValueParser::new(["abcd", "abef"]);
-        let ambiguous_values = ["a", "ab"];
-
-        for ambiguous_value in ambiguous_values {
-            let result = parser.parse_ref(&cmd, None, OsStr::new(ambiguous_value));
-            assert_eq!(ErrorKind::InvalidValue, result.as_ref().unwrap_err().kind());
-            assert!(result.unwrap_err().to_string().contains(&format!(
-                "It looks like '{ambiguous_value}' could match several values. Did you mean 'abcd' or 'abef'?"
-            )));
-        }
-
-        let result = parser.parse_ref(&cmd, None, OsStr::new("abc"));
-        assert_eq!("abcd", result.unwrap());
-
-        let result = parser.parse_ref(&cmd, None, OsStr::new("abe"));
-        assert_eq!("abef", result.unwrap());
-    }
-
-    #[test]
-    fn test_parse_ref_with_ambiguous_value_that_is_a_possible_value() {
-        let cmd = Command::new("cmd");
-        let parser = ShortcutValueParser::new(["abcd", "abcdefgh"]);
-        let result = parser.parse_ref(&cmd, None, OsStr::new("abcd"));
-        assert_eq!("abcd", result.unwrap());
-    }
-
-    #[test]
-    #[cfg(unix)]
-    fn test_parse_ref_with_invalid_utf8() {
-        use std::os::unix::prelude::OsStrExt;
-
-        let parser = ShortcutValueParser::new(["abcd"]);
-        let cmd = Command::new("cmd");
-
-        let result = parser.parse_ref(&cmd, None, OsStr::from_bytes(&[0xc3, 0x28]));
-        assert_eq!(ErrorKind::InvalidUtf8, result.unwrap_err().kind());
-    }
-
-    #[test]
-    fn test_ambiguous_word_same_meaning() {
-        let cmd = Command::new("cmd");
-        let parser = ShortcutValueParser::new([
-            PossibleValue::new("atime").alias("access"),
-            "status".into(),
-        ]);
-        // Even though "a" is ambiguous (it might mean "atime" or "access"),
-        // the meaning is uniquely defined, therefore accept it.
-        let atime_values = [
-            // spell-checker:disable-next-line
-            "atime", "atim", "at", "a", "access", "acces", "acce", "acc", "ac",
-        ];
-        // spell-checker:disable-next-line
-        let status_values = ["status", "statu", "stat", "sta", "st", "st"];
-
-        for value in atime_values {
-            let result = parser.parse_ref(&cmd, None, OsStr::new(value));
-            assert_eq!("atime", result.unwrap());
-        }
-        for value in status_values {
-            let result = parser.parse_ref(&cmd, None, OsStr::new(value));
-            assert_eq!("status", result.unwrap());
-        }
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/perms.rs b/registry/native/stubs/uucore/src/lib/features/perms.rs
deleted file mode 100644
index 6a85a8220..000000000
--- a/registry/native/stubs/uucore/src/lib/features/perms.rs
+++ /dev/null
@@ -1,1086 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Common functions to manage permissions
-//!
-//! wasmVM: On WASI, ownership changes report unsupported. The public API
-//! (types, ChownExecutor, chown_base) is preserved so uu_chmod/uu_cp compile.
-
-// spell-checker:ignore (jargon) TOCTOU fchownat fchown
-
-use crate::display::Quotable;
-use crate::error::{UResult, USimpleError, strip_errno};
-pub use crate::features::entries;
-use crate::show_error;
-
-use clap::{Arg, ArgMatches, Command};
-
-#[cfg(target_os = "wasi")]
-use crate::features::entries::{gid_t, uid_t};
-#[cfg(unix)]
-use libc::{gid_t, uid_t};
-
-use options::traverse;
-use std::ffi::OsString;
-
-#[cfg(all(not(target_os = "linux"), unix))]
-use walkdir::WalkDir;
-
-#[cfg(target_os = "linux")]
-use crate::features::safe_traversal::{DirFd, SymlinkBehavior};
-
-#[cfg(unix)]
-use std::ffi::CString;
-use std::fs::Metadata;
-use std::io::Error as IOError;
-#[cfg(target_os = "wasi")]
-use std::io::ErrorKind;
-use std::io::Result as IOResult;
-#[cfg(unix)]
-use std::os::unix::fs::MetadataExt;
-
-#[cfg(unix)]
-use std::os::unix::ffi::OsStrExt;
-use std::path::{MAIN_SEPARATOR, Path};
-
-/// The various level of verbosity
-#[derive(PartialEq, Eq, Clone, Debug)]
-pub enum VerbosityLevel {
-    Silent,
-    Changes,
-    Verbose,
-    Normal,
-}
-
-#[derive(PartialEq, Eq, Clone, Debug)]
-pub struct Verbosity {
-    pub groups_only: bool,
-    pub level: VerbosityLevel,
-}
-
-impl Default for Verbosity {
-    fn default() -> Self {
-        Self {
-            groups_only: false,
-            level: VerbosityLevel::Normal,
-        }
-    }
-}
-
-/// Actually perform the change of owner on a path
-#[cfg(unix)]
-fn chown<P: AsRef<Path>>(path: P, uid: uid_t, gid: gid_t, follow: bool) -> IOResult<()> {
-    let path = path.as_ref();
-    let s = CString::new(path.as_os_str().as_bytes()).unwrap();
-    let ret = unsafe {
-        if follow {
-            libc::chown(s.as_ptr(), uid, gid)
-        } else {
-            libc::lchown(s.as_ptr(), uid, gid)
-        }
-    };
-    if ret == 0 {
-        Ok(())
-    } else {
-        Err(IOError::last_os_error())
-    }
-}
-
-/// wasmVM: WASI cannot change ownership, so fail instead of reporting false success.
-#[cfg(target_os = "wasi")]
-fn chown<P: AsRef<Path>>(_path: P, _uid: uid_t, _gid: gid_t, _follow: bool) -> IOResult<()> {
-    Err(IOError::new(
-        ErrorKind::Unsupported,
-        "changing file ownership is unsupported on WASI",
-    ))
-}
-
-// wasmVM: WASI MetadataExt doesn't have uid()/gid(). Provide extension trait.
-#[cfg(target_os = "wasi")]
-trait MetadataOwnership {
-    fn uid(&self) -> u32;
-    fn gid(&self) -> u32;
-}
-
-#[cfg(target_os = "wasi")]
-impl MetadataOwnership for Metadata {
-    fn uid(&self) -> u32 {
-        // WASI: files are owned by the current user
-        0
-    }
-    fn gid(&self) -> u32 {
-        // WASI: files belong to the primary group
-        0
-    }
-}
-
-/// Perform the change of owner on a path
-/// with the various options
-/// and error messages management
-pub fn wrap_chown<P: AsRef<Path>>(
-    path: P,
-    meta: &Metadata,
-    dest_uid: Option<u32>,
-    dest_gid: Option<u32>,
-    follow: bool,
-    verbosity: Verbosity,
-) -> Result<String, String> {
-    let dest_uid = dest_uid.unwrap_or_else(|| meta.uid());
-    let dest_gid = dest_gid.unwrap_or_else(|| meta.gid());
-    let path = path.as_ref();
-    let mut out: String = String::new();
-
-    if let Err(e) = chown(path, dest_uid, dest_gid, follow) {
-        match verbosity.level {
-            VerbosityLevel::Silent => (),
-            level => {
-                out = format!(
-                    "changing {} of {}: {e}",
-                    if verbosity.groups_only {
-                        "group"
-                    } else {
-                        "ownership"
-                    },
-                    path.quote(),
-                );
-                if level == VerbosityLevel::Verbose {
-                    out = if verbosity.groups_only {
-                        let gid = meta.gid();
-                        format!(
-                            "{out}\nfailed to change group of {} from {} to {}",
-                            path.quote(),
-                            entries::gid2grp(gid).unwrap_or_else(|_| gid.to_string()),
-                            entries::gid2grp(dest_gid).unwrap_or_else(|_| dest_gid.to_string())
-                        )
-                    } else {
-                        let uid = meta.uid();
-                        let gid = meta.gid();
-                        format!(
-                            "{out}\nfailed to change ownership of {} from {}:{} to {}:{}",
-                            path.quote(),
-                            entries::uid2usr(uid).unwrap_or_else(|_| uid.to_string()),
-                            entries::gid2grp(gid).unwrap_or_else(|_| gid.to_string()),
-                            entries::uid2usr(dest_uid).unwrap_or_else(|_| dest_uid.to_string()),
-                            entries::gid2grp(dest_gid).unwrap_or_else(|_| dest_gid.to_string())
-                        )
-                    };
-                }
-            }
-        }
-        return Err(out);
-    }
-
-    let changed = dest_uid != meta.uid() || dest_gid != meta.gid();
-    if changed {
-        match verbosity.level {
-            VerbosityLevel::Changes | VerbosityLevel::Verbose => {
-                let gid = meta.gid();
-                out = if verbosity.groups_only {
-                    format!(
-                        "changed group of {} from {} to {}",
-                        path.quote(),
-                        entries::gid2grp(gid).unwrap_or_else(|_| gid.to_string()),
-                        entries::gid2grp(dest_gid).unwrap_or_else(|_| dest_gid.to_string())
-                    )
-                } else {
-                    let gid = meta.gid();
-                    let uid = meta.uid();
-                    format!(
-                        "changed ownership of {} from {}:{} to {}:{}",
-                        path.quote(),
-                        entries::uid2usr(uid).unwrap_or_else(|_| uid.to_string()),
-                        entries::gid2grp(gid).unwrap_or_else(|_| gid.to_string()),
-                        entries::uid2usr(dest_uid).unwrap_or_else(|_| dest_uid.to_string()),
-                        entries::gid2grp(dest_gid).unwrap_or_else(|_| dest_gid.to_string())
-                    )
-                };
-            }
-            _ => (),
-        }
-    } else if verbosity.level == VerbosityLevel::Verbose {
-        out = if verbosity.groups_only {
-            format!(
-                "group of {} retained as {}",
-                path.quote(),
-                entries::gid2grp(dest_gid).unwrap_or_default()
-            )
-        } else {
-            format!(
-                "ownership of {} retained as {}:{}",
-                path.quote(),
-                entries::uid2usr(dest_uid).unwrap_or_else(|_| dest_uid.to_string()),
-                entries::gid2grp(dest_gid).unwrap_or_else(|_| dest_gid.to_string())
-            )
-        };
-    }
-
-    Ok(out)
-}
-
-pub enum IfFrom {
-    All,
-    User(u32),
-    Group(u32),
-    UserGroup(u32, u32),
-}
-
-#[derive(PartialEq, Eq)]
-pub enum TraverseSymlinks {
-    None,
-    First,
-    All,
-}
-
-pub struct ChownExecutor {
-    pub dest_uid: Option<u32>,
-    pub dest_gid: Option<u32>,
-    pub raw_owner: String,
-    pub traverse_symlinks: TraverseSymlinks,
-    pub verbosity: Verbosity,
-    pub filter: IfFrom,
-    pub files: Vec<OsString>,
-    pub recursive: bool,
-    pub preserve_root: bool,
-    pub dereference: bool,
-}
-
-#[cfg(test)]
-pub fn check_root(path: &Path, would_recurse_symlink: bool) -> bool {
-    is_root(path, would_recurse_symlink)
-}
-
-fn is_root(path: &Path, would_traverse_symlink: bool) -> bool {
-    if !would_traverse_symlink {
-        let path_bytes = path.as_os_str().as_encoded_bytes();
-        let looks_like_dir = path_bytes == [b'.']
-            || path_bytes == [b'.', b'.']
-            || path_bytes.ends_with(&[MAIN_SEPARATOR as u8])
-            || path_bytes.ends_with(&[MAIN_SEPARATOR as u8, b'.'])
-            || path_bytes.ends_with(&[MAIN_SEPARATOR as u8, b'.', b'.']);
-
-        if !looks_like_dir {
-            return false;
-        }
-    }
-
-    if let Ok(p) = path.canonicalize() {
-        let path_buf = path.to_path_buf();
-        if p.parent().is_none() {
-            if path_buf.as_os_str() == "/" {
-                show_error!("it is dangerous to operate recursively on '/'");
-            } else {
-                show_error!(
-                    "it is dangerous to operate recursively on {} (same as '/')",
-                    path_buf.quote()
-                );
-            }
-            show_error!("use --no-preserve-root to override this failsafe");
-            return true;
-        }
-    }
-
-    false
-}
-
-pub fn get_metadata(file: &Path, follow: bool) -> Result<Metadata, std::io::Error> {
-    if follow {
-        file.metadata()
-    } else {
-        file.symlink_metadata()
-    }
-}
-
-impl ChownExecutor {
-    pub fn exec(&self) -> UResult<()> {
-        let mut ret = 0;
-        for f in &self.files {
-            ret |= self.traverse(f);
-        }
-        if ret != 0 {
-            return Err(ret.into());
-        }
-        Ok(())
-    }
-
-    #[allow(clippy::cognitive_complexity)]
-    fn traverse<P: AsRef<Path>>(&self, root: P) -> i32 {
-        let path = root.as_ref();
-        let Some(meta) = self.obtain_meta(path, self.dereference) else {
-            if self.verbosity.level == VerbosityLevel::Verbose {
-                println!(
-                    "failed to change ownership of {} to {}",
-                    path.quote(),
-                    self.raw_owner
-                );
-            }
-            return 1;
-        };
-
-        if self.recursive
-            && self.preserve_root
-            && is_root(path, self.traverse_symlinks != TraverseSymlinks::None)
-        {
-            return 1;
-        }
-
-        #[cfg(target_os = "linux")]
-        let mut root_dir_fd = None;
-        #[cfg(target_os = "linux")]
-        let mut root_dir_open_failed = false;
-
-        let ret = if self.matched(meta.uid(), meta.gid()) {
-            #[cfg(target_os = "linux")]
-            let chown_result = if meta.is_dir() {
-                match DirFd::open(path, SymlinkBehavior::Follow) {
-                    Ok(dir_fd) => {
-                        let result = self
-                            .safe_chown_dir(&dir_fd, path, &meta)
-                            .map(|_| String::new());
-                        root_dir_fd = Some(dir_fd);
-                        result
-                    }
-                    Err(e) => {
-                        root_dir_open_failed = true;
-                        Err(format!(
-                            "cannot access {}: {}",
-                            path.quote(),
-                            strip_errno(&e)
-                        ))
-                    }
-                }
-            } else {
-                wrap_chown(
-                    path,
-                    &meta,
-                    self.dest_uid,
-                    self.dest_gid,
-                    self.dereference,
-                    self.verbosity.clone(),
-                )
-            };
-
-            #[cfg(not(target_os = "linux"))]
-            let chown_result = wrap_chown(
-                path,
-                &meta,
-                self.dest_uid,
-                self.dest_gid,
-                self.dereference,
-                self.verbosity.clone(),
-            );
-
-            match chown_result {
-                Ok(n) => {
-                    if !n.is_empty() {
-                        show_error!("{n}");
-                    }
-                    0
-                }
-                Err(e) => {
-                    if self.verbosity.level != VerbosityLevel::Silent {
-                        show_error!("{e}");
-                    }
-                    1
-                }
-            }
-        } else {
-            self.print_verbose_ownership_retained_as(
-                path,
-                meta.uid(),
-                self.dest_gid.map(|_| meta.gid()),
-            );
-            0
-        };
-
-        if self.recursive {
-            #[cfg(target_os = "linux")]
-            {
-                if let Some(dir_fd) = root_dir_fd.as_ref() {
-                    let mut recursive_ret = 0;
-                    self.safe_traverse_dir(dir_fd, path, &mut recursive_ret);
-                    ret | recursive_ret
-                } else if root_dir_open_failed {
-                    ret
-                } else {
-                    ret | self.safe_dive_into(&root)
-                }
-            }
-            #[cfg(all(not(target_os = "linux"), unix))]
-            {
-                ret | self.dive_into(&root)
-            }
-            #[cfg(target_os = "wasi")]
-            {
-                // WASI: basic recursive traversal using std::fs
-                ret | self.wasi_dive_into(&root)
-            }
-        } else {
-            ret
-        }
-    }
-
-    #[cfg(target_os = "linux")]
-    fn safe_chown_dir(&self, dir_fd: &DirFd, path: &Path, meta: &Metadata) -> Result<(), String> {
-        let dest_uid = self.dest_uid.unwrap_or_else(|| meta.uid());
-        let dest_gid = self.dest_gid.unwrap_or_else(|| meta.gid());
-
-        if let Err(e) = dir_fd.fchown(self.dest_uid, self.dest_gid) {
-            let mut error_msg = format!(
-                "changing {} of {}: {e}",
-                if self.verbosity.groups_only {
-                    "group"
-                } else {
-                    "ownership"
-                },
-                path.quote(),
-            );
-
-            if self.verbosity.level == VerbosityLevel::Verbose {
-                error_msg = if self.verbosity.groups_only {
-                    let gid = meta.gid();
-                    format!(
-                        "{error_msg}\nfailed to change group of {} from {} to {}",
-                        path.quote(),
-                        entries::gid2grp(gid).unwrap_or_else(|_| gid.to_string()),
-                        entries::gid2grp(dest_gid).unwrap_or_else(|_| dest_gid.to_string())
-                    )
-                } else {
-                    let uid = meta.uid();
-                    let gid = meta.gid();
-                    format!(
-                        "{error_msg}\nfailed to change ownership of {} from {}:{} to {}:{}",
-                        path.quote(),
-                        entries::uid2usr(uid).unwrap_or_else(|_| uid.to_string()),
-                        entries::gid2grp(gid).unwrap_or_else(|_| gid.to_string()),
-                        entries::uid2usr(dest_uid).unwrap_or_else(|_| dest_uid.to_string()),
-                        entries::gid2grp(dest_gid).unwrap_or_else(|_| dest_gid.to_string())
-                    )
-                };
-            }
-
-            return Err(error_msg);
-        }
-
-        self.report_ownership_change_success(path, meta.uid(), meta.gid());
-        Ok(())
-    }
-
-    #[cfg(target_os = "linux")]
-    fn safe_dive_into<P: AsRef<Path>>(&self, root: P) -> i32 {
-        let root = root.as_ref();
-        if self.traverse_symlinks == TraverseSymlinks::None && root.is_symlink() {
-            return 0;
-        }
-        if !root.is_dir() {
-            return 0;
-        }
-        let Some(dir_fd) = self.try_open_dir(root) else {
-            return 1;
-        };
-        let mut ret = 0;
-        self.safe_traverse_dir(&dir_fd, root, &mut ret);
-        ret
-    }
-
-    #[cfg(target_os = "linux")]
-    fn safe_traverse_dir(&self, dir_fd: &DirFd, dir_path: &Path, ret: &mut i32) {
-        let entries = match dir_fd.read_dir() {
-            Ok(entries) => entries,
-            Err(e) => {
-                *ret = 1;
-                if self.verbosity.level != VerbosityLevel::Silent {
-                    show_error!(
-                        "cannot read directory {}: {}",
-                        dir_path.quote(),
-                        strip_errno(&e)
-                    );
-                }
-                return;
-            }
-        };
-
-        for entry_name in entries {
-            let entry_path = dir_path.join(&entry_name);
-            let follow = self.traverse_symlinks == TraverseSymlinks::All;
-            let meta = match dir_fd.metadata_at(&entry_name, follow.into()) {
-                Ok(m) => m,
-                Err(e) => {
-                    *ret = 1;
-                    if self.verbosity.level != VerbosityLevel::Silent {
-                        show_error!("cannot access {}: {}", entry_path.quote(), strip_errno(&e));
-                    }
-                    continue;
-                }
-            };
-
-            if self.preserve_root
-                && is_root(&entry_path, self.traverse_symlinks == TraverseSymlinks::All)
-            {
-                *ret = 1;
-                return;
-            }
-
-            if self.matched(meta.uid(), meta.gid()) {
-                let follow_symlinks =
-                    self.dereference || self.traverse_symlinks == TraverseSymlinks::All;
-                let chown_uid = self.dest_uid;
-                let chown_gid = self.dest_gid;
-
-                if let Err(e) =
-                    dir_fd.chown_at(&entry_name, chown_uid, chown_gid, follow_symlinks.into())
-                {
-                    *ret = 1;
-                    if self.verbosity.level != VerbosityLevel::Silent {
-                        let msg = format!(
-                            "changing {} of {}: {}",
-                            if self.verbosity.groups_only {
-                                "group"
-                            } else {
-                                "ownership"
-                            },
-                            entry_path.quote(),
-                            strip_errno(&e)
-                        );
-                        show_error!("{msg}");
-                    }
-                } else {
-                    self.report_ownership_change_success(&entry_path, meta.uid(), meta.gid());
-                }
-            } else {
-                self.print_verbose_ownership_retained_as(
-                    &entry_path,
-                    meta.uid(),
-                    self.dest_gid.map(|_| meta.gid()),
-                );
-            }
-
-            if meta.is_dir() && (follow || !meta.file_type().is_symlink()) {
-                match dir_fd.open_subdir(&entry_name, SymlinkBehavior::Follow) {
-                    Ok(subdir_fd) => {
-                        self.safe_traverse_dir(&subdir_fd, &entry_path, ret);
-                    }
-                    Err(e) => {
-                        *ret = 1;
-                        if self.verbosity.level != VerbosityLevel::Silent {
-                            show_error!(
-                                "cannot access {}: {}",
-                                entry_path.quote(),
-                                strip_errno(&e)
-                            );
-                        }
-                    }
-                }
-            }
-        }
-    }
-
-    #[cfg(all(not(target_os = "linux"), unix))]
-    #[allow(clippy::cognitive_complexity)]
-    fn dive_into<P: AsRef<Path>>(&self, root: P) -> i32 {
-        let root = root.as_ref();
-        if self.traverse_symlinks == TraverseSymlinks::None && root.is_symlink() {
-            return 0;
-        }
-
-        let mut ret = 0;
-        let mut iterator = WalkDir::new(root)
-            .follow_links(self.traverse_symlinks == TraverseSymlinks::All)
-            .min_depth(1)
-            .into_iter();
-        while let Some(entry) = iterator.next() {
-            let entry = match entry {
-                Err(e) => {
-                    ret = 1;
-                    if let Some(path) = e.path() {
-                        show_error!(
-                            "cannot access {}: {}",
-                            path.quote(),
-                            if let Some(error) = e.io_error() {
-                                strip_errno(error)
-                            } else {
-                                "Too many levels of symbolic links".into()
-                            }
-                        );
-                    } else {
-                        show_error!("{e}");
-                    }
-                    continue;
-                }
-                Ok(entry) => entry,
-            };
-            let path = entry.path();
-
-            let Some(meta) = self.obtain_meta(path, self.dereference) else {
-                ret = 1;
-                if entry.file_type().is_dir() {
-                    iterator.skip_current_dir();
-                }
-                continue;
-            };
-
-            if self.preserve_root && is_root(path, self.traverse_symlinks == TraverseSymlinks::All)
-            {
-                return 1;
-            }
-
-            if !self.matched(meta.uid(), meta.gid()) {
-                self.print_verbose_ownership_retained_as(
-                    path,
-                    meta.uid(),
-                    self.dest_gid.map(|_| meta.gid()),
-                );
-                continue;
-            }
-            ret = match wrap_chown(
-                path,
-                &meta,
-                self.dest_uid,
-                self.dest_gid,
-                self.dereference,
-                self.verbosity.clone(),
-            ) {
-                Ok(n) => {
-                    if !n.is_empty() {
-                        show_error!("{n}");
-                    }
-                    ret.max(0)
-                }
-                Err(e) => {
-                    if self.verbosity.level != VerbosityLevel::Silent {
-                        show_error!("{e}");
-                    }
-                    1
-                }
-            }
-        }
-        ret
-    }
-
-    /// wasmVM: WASI recursive traversal using std::fs::read_dir
-    #[cfg(target_os = "wasi")]
-    fn wasi_dive_into<P: AsRef<Path>>(&self, root: P) -> i32 {
-        let root = root.as_ref();
-        if !root.is_dir() {
-            return 0;
-        }
-        let mut ret = 0;
-        let entries = match std::fs::read_dir(root) {
-            Ok(e) => e,
-            Err(e) => {
-                if self.verbosity.level != VerbosityLevel::Silent {
-                    show_error!(
-                        "cannot read directory {}: {}",
-                        root.quote(),
-                        strip_errno(&e)
-                    );
-                }
-                return 1;
-            }
-        };
-        for entry in entries {
-            let entry = match entry {
-                Ok(e) => e,
-                Err(e) => {
-                    ret = 1;
-                    show_error!("{e}");
-                    continue;
-                }
-            };
-            let path = entry.path();
-            let Some(meta) = self.obtain_meta(&path, self.dereference) else {
-                ret = 1;
-                continue;
-            };
-            if self.matched(meta.uid(), meta.gid()) {
-                match wrap_chown(
-                    &path,
-                    &meta,
-                    self.dest_uid,
-                    self.dest_gid,
-                    self.dereference,
-                    self.verbosity.clone(),
-                ) {
-                    Ok(n) => {
-                        if !n.is_empty() {
-                            show_error!("{n}");
-                        }
-                    }
-                    Err(e) => {
-                        ret = 1;
-                        if self.verbosity.level != VerbosityLevel::Silent {
-                            show_error!("{e}");
-                        }
-                    }
-                }
-            }
-            if meta.is_dir() {
-                ret |= self.wasi_dive_into(&path);
-            }
-        }
-        ret
-    }
-
-    fn obtain_meta<P: AsRef<Path>>(&self, path: P, follow: bool) -> Option<Metadata> {
-        let path = path.as_ref();
-        get_metadata(path, follow)
-            .inspect_err(|e| {
-                if self.verbosity.level != VerbosityLevel::Silent {
-                    show_error!(
-                        "cannot {} {}: {}",
-                        if follow { "dereference" } else { "access" },
-                        path.quote(),
-                        strip_errno(e)
-                    );
-                }
-            })
-            .ok()
-    }
-
-    #[inline]
-    fn matched(&self, uid: uid_t, gid: gid_t) -> bool {
-        match self.filter {
-            IfFrom::All => true,
-            IfFrom::User(u) => u == uid,
-            IfFrom::Group(g) => g == gid,
-            IfFrom::UserGroup(u, g) => u == uid && g == gid,
-        }
-    }
-
-    fn print_verbose_ownership_retained_as(&self, path: &Path, uid: u32, gid: Option<u32>) {
-        if self.verbosity.level == VerbosityLevel::Verbose {
-            let ownership = match (self.dest_uid, self.dest_gid, gid) {
-                (Some(_), Some(_), Some(gid)) => format!(
-                    "{}:{}",
-                    entries::uid2usr(uid).unwrap_or_else(|_| uid.to_string()),
-                    entries::gid2grp(gid).unwrap_or_else(|_| gid.to_string())
-                ),
-                (None, Some(_), Some(gid)) => {
-                    entries::gid2grp(gid).unwrap_or_else(|_| gid.to_string())
-                }
-                _ => entries::uid2usr(uid).unwrap_or_else(|_| uid.to_string()),
-            };
-            if self.verbosity.groups_only {
-                println!("group of {} retained as {ownership}", path.quote());
-            } else {
-                println!("ownership of {} retained as {ownership}", path.quote());
-            }
-        }
-    }
-
-    #[cfg(target_os = "linux")]
-    fn try_open_dir(&self, path: &Path) -> Option<DirFd> {
-        DirFd::open(path, SymlinkBehavior::Follow)
-            .map_err(|e| {
-                if self.verbosity.level != VerbosityLevel::Silent {
-                    show_error!("cannot access {}: {}", path.quote(), strip_errno(&e));
-                }
-            })
-            .ok()
-    }
-
-    #[cfg(target_os = "linux")]
-    fn report_ownership_change_success(
-        &self,
-        path: &Path,
-        original_uid: u32,
-        original_gid: u32,
-    ) -> i32 {
-        let dest_uid = self.dest_uid.unwrap_or(original_uid);
-        let dest_gid = self.dest_gid.unwrap_or(original_gid);
-        let changed = dest_uid != original_uid || dest_gid != original_gid;
-
-        if changed {
-            match self.verbosity.level {
-                VerbosityLevel::Changes | VerbosityLevel::Verbose => {
-                    let output = if self.verbosity.groups_only {
-                        format!(
-                            "changed group of {} from {} to {}",
-                            path.quote(),
-                            entries::gid2grp(original_gid)
-                                .unwrap_or_else(|_| original_gid.to_string()),
-                            entries::gid2grp(dest_gid).unwrap_or_else(|_| dest_gid.to_string())
-                        )
-                    } else {
-                        format!(
-                            "changed ownership of {} from {}:{} to {}:{}",
-                            path.quote(),
-                            entries::uid2usr(original_uid)
-                                .unwrap_or_else(|_| original_uid.to_string()),
-                            entries::gid2grp(original_gid)
-                                .unwrap_or_else(|_| original_gid.to_string()),
-                            entries::uid2usr(dest_uid).unwrap_or_else(|_| dest_uid.to_string()),
-                            entries::gid2grp(dest_gid).unwrap_or_else(|_| dest_gid.to_string())
-                        )
-                    };
-                    show_error!("{output}");
-                }
-                _ => (),
-            }
-        } else if self.verbosity.level == VerbosityLevel::Verbose {
-            let output = if self.verbosity.groups_only {
-                format!(
-                    "group of {} retained as {}",
-                    path.quote(),
-                    entries::gid2grp(dest_gid).unwrap_or_default()
-                )
-            } else {
-                format!(
-                    "ownership of {} retained as {}:{}",
-                    path.quote(),
-                    entries::uid2usr(dest_uid).unwrap_or_else(|_| dest_uid.to_string()),
-                    entries::gid2grp(dest_gid).unwrap_or_else(|_| dest_gid.to_string())
-                )
-            };
-            show_error!("{output}");
-        }
-        0
-    }
-}
-
-pub mod options {
-    pub const HELP: &str = "help";
-    pub mod verbosity {
-        pub const CHANGES: &str = "changes";
-        pub const QUIET: &str = "quiet";
-        pub const SILENT: &str = "silent";
-        pub const VERBOSE: &str = "verbose";
-    }
-    pub mod preserve_root {
-        pub const PRESERVE: &str = "preserve-root";
-        pub const NO_PRESERVE: &str = "no-preserve-root";
-    }
-    pub mod dereference {
-        pub const DEREFERENCE: &str = "dereference";
-        pub const NO_DEREFERENCE: &str = "no-dereference";
-    }
-    pub const FROM: &str = "from";
-    pub const RECURSIVE: &str = "recursive";
-    pub mod traverse {
-        pub const TRAVERSE: &str = "H";
-        pub const NO_TRAVERSE: &str = "P";
-        pub const EVERY: &str = "L";
-    }
-    pub const REFERENCE: &str = "reference";
-    pub const ARG_OWNER: &str = "OWNER";
-    pub const ARG_GROUP: &str = "GROUP";
-    pub const ARG_FILES: &str = "FILE";
-}
-
-pub struct GidUidOwnerFilter {
-    pub dest_gid: Option<u32>,
-    pub dest_uid: Option<u32>,
-    pub raw_owner: String,
-    pub filter: IfFrom,
-}
-type GidUidFilterOwnerParser = fn(&ArgMatches) -> UResult<GidUidOwnerFilter>;
-
-pub fn configure_symlink_and_recursion(
-    matches: &ArgMatches,
-    default_traverse_symlinks: TraverseSymlinks,
-) -> Result<(bool, bool, TraverseSymlinks), Box<dyn crate::error::UError>> {
-    let mut dereference = if matches.get_flag(options::dereference::DEREFERENCE) {
-        Some(true)
-    } else if matches.get_flag(options::dereference::NO_DEREFERENCE) {
-        Some(false)
-    } else {
-        None
-    };
-
-    let mut traverse_symlinks = if matches.get_flag("L") {
-        TraverseSymlinks::All
-    } else if matches.get_flag("H") {
-        TraverseSymlinks::First
-    } else if matches.get_flag("P") {
-        TraverseSymlinks::None
-    } else {
-        default_traverse_symlinks
-    };
-
-    let recursive = matches.get_flag(options::RECURSIVE);
-    if recursive {
-        if traverse_symlinks == TraverseSymlinks::None {
-            if dereference == Some(true) {
-                return Err(USimpleError::new(1, "-R --dereference requires -H or -L"));
-            }
-            dereference = Some(false);
-        }
-    } else {
-        traverse_symlinks = TraverseSymlinks::None;
-    }
-
-    Ok((recursive, dereference.unwrap_or(true), traverse_symlinks))
-}
-
-#[allow(clippy::cognitive_complexity)]
-pub fn chown_base(
-    mut command: Command,
-    args: impl crate::Args,
-    add_arg_if_not_reference: &'static str,
-    parse_gid_uid_and_filter: GidUidFilterOwnerParser,
-    groups_only: bool,
-) -> UResult<()> {
-    let args: Vec<_> = args.collect();
-    let mut reference = false;
-    let mut help = false;
-    for arg in args.iter().take_while(|s| *s != "--") {
-        if arg.to_string_lossy().starts_with("--reference=") || arg == "--reference" {
-            reference = true;
-        } else if arg == "--help" {
-            help = true;
-            break;
-        }
-    }
-
-    if help || !reference {
-        command = command.arg(
-            Arg::new(add_arg_if_not_reference)
-                .value_name(add_arg_if_not_reference)
-                .required(true),
-        );
-    }
-    command = command.arg(
-        Arg::new(options::ARG_FILES)
-            .value_name(options::ARG_FILES)
-            .value_hint(clap::ValueHint::FilePath)
-            .action(clap::ArgAction::Append)
-            .required(true)
-            .num_args(1..)
-            .value_parser(clap::value_parser!(OsString)),
-    );
-    let matches = crate::clap_localization::handle_clap_result(command, args)?;
-
-    let files: Vec<OsString> = matches
-        .get_many::<OsString>(options::ARG_FILES)
-        .map(|v| v.cloned().collect())
-        .unwrap_or_default();
-
-    let preserve_root = matches.get_flag(options::preserve_root::PRESERVE);
-    let (recursive, dereference, traverse_symlinks) =
-        configure_symlink_and_recursion(&matches, TraverseSymlinks::None)?;
-
-    let verbosity_level = if matches.get_flag(options::verbosity::CHANGES) {
-        VerbosityLevel::Changes
-    } else if matches.get_flag(options::verbosity::SILENT)
-        || matches.get_flag(options::verbosity::QUIET)
-    {
-        VerbosityLevel::Silent
-    } else if matches.get_flag(options::verbosity::VERBOSE) {
-        VerbosityLevel::Verbose
-    } else {
-        VerbosityLevel::Normal
-    };
-    let GidUidOwnerFilter {
-        dest_gid,
-        dest_uid,
-        raw_owner,
-        filter,
-    } = parse_gid_uid_and_filter(&matches)?;
-
-    let executor = ChownExecutor {
-        traverse_symlinks,
-        dest_gid,
-        dest_uid,
-        raw_owner,
-        verbosity: Verbosity {
-            groups_only,
-            level: verbosity_level,
-        },
-        recursive,
-        dereference,
-        preserve_root,
-        files,
-        filter,
-    };
-    executor.exec()
-}
-
-pub fn common_args() -> Vec<Arg> {
-    vec![
-        Arg::new(traverse::TRAVERSE)
-            .short(traverse::TRAVERSE.chars().next().unwrap())
-            .help("if a command line argument is a symbolic link to a directory, traverse it")
-            .overrides_with_all([traverse::EVERY, traverse::NO_TRAVERSE])
-            .action(clap::ArgAction::SetTrue),
-        Arg::new(traverse::EVERY)
-            .short(traverse::EVERY.chars().next().unwrap())
-            .help("traverse every symbolic link to a directory encountered")
-            .overrides_with_all([traverse::TRAVERSE, traverse::NO_TRAVERSE])
-            .action(clap::ArgAction::SetTrue),
-        Arg::new(traverse::NO_TRAVERSE)
-            .short(traverse::NO_TRAVERSE.chars().next().unwrap())
-            .help("do not traverse any symbolic links (default)")
-            .overrides_with_all([traverse::TRAVERSE, traverse::EVERY])
-            .action(clap::ArgAction::SetTrue),
-        Arg::new(options::dereference::DEREFERENCE)
-            .long(options::dereference::DEREFERENCE)
-            .help(
-                "affect the referent of each symbolic link (this is the default), \
-    rather than the symbolic link itself",
-            )
-            .action(clap::ArgAction::SetTrue),
-        Arg::new(options::dereference::NO_DEREFERENCE)
-            .short('h')
-            .long(options::dereference::NO_DEREFERENCE)
-            .help(
-                "affect symbolic links instead of any referenced file \
-        (useful only on systems that can change the ownership of a symlink)",
-            )
-            .action(clap::ArgAction::SetTrue),
-    ]
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    #[cfg(unix)]
-    use std::os::unix;
-    use std::path::{Component, PathBuf};
-    #[cfg(unix)]
-    use tempfile::tempdir;
-
-    #[test]
-    fn test_empty_string() {
-        let path = PathBuf::new();
-        assert_eq!(path.to_str(), Some(""));
-        assert!(!is_root(&path, false));
-        assert!(!is_root(&path, true));
-    }
-
-    #[allow(clippy::needless_borrow)]
-    #[cfg(unix)]
-    #[test]
-    fn test_literal_root() {
-        let component = Component::RootDir;
-        let path: &Path = component.as_ref();
-        assert_eq!(
-            path.to_str(),
-            Some("/"),
-            "cfg(unix) but using non-unix path delimiters?!"
-        );
-        assert!(is_root(&path, false));
-        assert!(is_root(&path, true));
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn test_symlink_slash() {
-        let temp_dir = tempdir().unwrap();
-        let symlink_path = temp_dir.path().join("symlink");
-        unix::fs::symlink(PathBuf::from("/"), symlink_path).unwrap();
-        let symlink_path_slash = temp_dir.path().join("symlink/");
-        assert!(is_root(&symlink_path_slash, false));
-        assert!(is_root(&symlink_path_slash, true));
-    }
-
-    #[cfg(unix)]
-    #[test]
-    fn test_symlink_no_slash() {
-        let temp_dir = tempdir().unwrap();
-        let symlink_path = temp_dir.path().join("symlink");
-        unix::fs::symlink(PathBuf::from("/"), &symlink_path).unwrap();
-        assert!(!is_root(&symlink_path, false));
-        assert!(is_root(&symlink_path, true));
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/pipes.rs b/registry/native/stubs/uucore/src/lib/features/pipes.rs
deleted file mode 100644
index a1d7fdc60..000000000
--- a/registry/native/stubs/uucore/src/lib/features/pipes.rs
+++ /dev/null
@@ -1,68 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Thin pipe-related wrappers around functions from the `nix` crate.
-
-use std::fs::File;
-#[cfg(any(target_os = "linux", target_os = "android"))]
-use std::io::IoSlice;
-#[cfg(any(target_os = "linux", target_os = "android"))]
-use std::os::fd::AsFd;
-
-#[cfg(any(target_os = "linux", target_os = "android"))]
-use nix::fcntl::SpliceFFlags;
-
-#[cfg(any(target_os = "linux", target_os = "android"))]
-use nix::errno::Errno;
-pub use nix::{Error, Result};
-
-/// A wrapper around [`nix::unistd::pipe`] that ensures the pipe is cleaned up.
-///
-/// Returns two `File` objects: everything written to the second can be read
-/// from the first.
-pub fn pipe() -> Result<(File, File)> {
-    let (read, write) = nix::unistd::pipe()?;
-    Ok((File::from(read), File::from(write)))
-}
-
-/// Less noisy wrapper around [`nix::fcntl::splice`].
-///
-/// Up to `len` bytes are moved from `source` to `target`. Returns the number
-/// of successfully moved bytes.
-///
-/// At least one of `source` and `target` must be some sort of pipe.
-/// To get around this requirement, consider splicing from your source into
-/// a [`pipe`] and then from the pipe into your target (with `splice_exact`):
-/// this is still very efficient.
-#[cfg(any(target_os = "linux", target_os = "android"))]
-pub fn splice(source: &impl AsFd, target: &impl AsFd, len: usize) -> Result<usize> {
-    nix::fcntl::splice(source, None, target, None, len, SpliceFFlags::empty())
-}
-
-/// Splice wrapper which fully finishes the write.
-///
-/// Exactly `len` bytes are moved from `source` into `target`.
-///
-/// Returns an error if `source` runs out of data before `len` bytes have been moved.
-#[cfg(any(target_os = "linux", target_os = "android"))]
-pub fn splice_exact(source: &impl AsFd, target: &impl AsFd, len: usize) -> Result<()> {
-    let mut left = len;
-    while left != 0 {
-        let written = splice(source, target, left)?;
-        if written == 0 {
-            return Err(Errno::EPIPE);
-        }
-        left -= written;
-    }
-    Ok(())
-}
-
-/// Copy data from `bytes` into `target`, which must be a pipe.
-///
-/// Returns the number of successfully copied bytes.
-#[cfg(any(target_os = "linux", target_os = "android"))]
-pub fn vmsplice(target: &impl AsFd, bytes: &[u8]) -> Result<usize> {
-    nix::fcntl::vmsplice(target, &[IoSlice::new(bytes)], SpliceFFlags::empty())
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/proc_info.rs b/registry/native/stubs/uucore/src/lib/features/proc_info.rs
deleted file mode 100644
index 6f063be77..000000000
--- a/registry/native/stubs/uucore/src/lib/features/proc_info.rs
+++ /dev/null
@@ -1,537 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore exitstatus cmdline kworker pgrep pwait snice procps
-// spell-checker:ignore egid euid gettid ppid
-
-//! Set of functions to manage IDs
-//!
-//! This module provide [`ProcessInformation`] and [`TerminalType`] and corresponding
-//! functions for obtaining process information.
-//!
-//! And also provide [`walk_process`] function to collecting all the information of
-//! processes in current system.
-//!
-//! Utilities that rely on this module:
-//! `pgrep` (TBD)
-//! `pwait` (TBD)
-//! `snice` (TBD)
-//!
-
-// This file is currently flagged as dead code, because it isn't used anywhere
-// in the codebase. It may be useful in the future though, so we decide to keep
-// it.
-// The code was originally written in procps
-// (https://github.com/uutils/procps/blob/main/src/uu/pgrep/src/process.rs)
-// but was eventually moved here.
-// See https://github.com/uutils/coreutils/pull/6932 for discussion.
-#![allow(dead_code)]
-
-use crate::features::tty::Teletype;
-
-use std::hash::Hash;
-use std::{
-    collections::HashMap,
-    fmt::{self, Display, Formatter},
-    fs, io,
-    path::PathBuf,
-    rc::Rc,
-};
-
-use walkdir::{DirEntry, WalkDir};
-
-/// State or process
-#[derive(Debug, PartialEq, Eq)]
-pub enum RunState {
-    ///`R`, running
-    Running,
-    ///`S`, sleeping
-    Sleeping,
-    ///`D`, sleeping in an uninterruptible wait
-    UninterruptibleWait,
-    ///`Z`, zombie
-    Zombie,
-    ///`T`, traced or stopped
-    Stopped,
-}
-
-impl Display for RunState {
-    fn fmt(&self, f: &mut Formatter) -> fmt::Result {
-        match self {
-            Self::Running => write!(f, "R"),
-            Self::Sleeping => write!(f, "S"),
-            Self::UninterruptibleWait => write!(f, "D"),
-            Self::Zombie => write!(f, "Z"),
-            Self::Stopped => write!(f, "T"),
-        }
-    }
-}
-
-impl TryFrom<char> for RunState {
-    type Error = io::Error;
-
-    fn try_from(value: char) -> Result<Self, Self::Error> {
-        match value {
-            'R' => Ok(Self::Running),
-            'S' => Ok(Self::Sleeping),
-            'D' => Ok(Self::UninterruptibleWait),
-            'Z' => Ok(Self::Zombie),
-            'T' => Ok(Self::Stopped),
-            _ => Err(io::ErrorKind::InvalidInput.into()),
-        }
-    }
-}
-
-impl TryFrom<&str> for RunState {
-    type Error = io::Error;
-
-    fn try_from(value: &str) -> Result<Self, Self::Error> {
-        if value.len() != 1 {
-            return Err(io::ErrorKind::InvalidInput.into());
-        }
-
-        Self::try_from(
-            value
-                .chars()
-                .nth(0)
-                .ok_or::<io::Error>(io::ErrorKind::InvalidInput.into())?,
-        )
-    }
-}
-
-impl TryFrom<String> for RunState {
-    type Error = io::Error;
-
-    fn try_from(value: String) -> Result<Self, Self::Error> {
-        Self::try_from(value.as_str())
-    }
-}
-
-impl TryFrom<&String> for RunState {
-    type Error = io::Error;
-
-    fn try_from(value: &String) -> Result<Self, Self::Error> {
-        Self::try_from(value.as_str())
-    }
-}
-
-/// Process ID and its information
-#[derive(Debug, Clone, Default, PartialEq, Eq)]
-pub struct ProcessInformation {
-    pub pid: usize,
-    pub cmdline: String,
-
-    inner_status: String,
-    inner_stat: String,
-
-    /// Processed `/proc/self/status` file
-    cached_status: Option<Rc<HashMap<String, String>>>,
-    /// Processed `/proc/self/stat` file
-    cached_stat: Option<Rc<Vec<String>>>,
-
-    cached_start_time: Option<u64>,
-
-    cached_thread_ids: Option<Rc<Vec<usize>>>,
-}
-
-#[derive(Clone, Copy, Debug)]
-enum UidGid {
-    Uid,
-    Gid,
-}
-
-impl ProcessInformation {
-    /// Try new with pid path such as `/proc/self`
-    ///
-    /// # Error
-    ///
-    /// If the files in path cannot be parsed into [ProcessInformation],
-    /// it almost caused by wrong filesystem structure.
-    ///
-    /// - [The /proc Filesystem](https://docs.kernel.org/filesystems/proc.html#process-specific-subdirectories)
-    pub fn try_new(value: PathBuf) -> Result<Self, io::Error> {
-        let dir_append = |mut path: PathBuf, str: String| {
-            path.push(str);
-            path
-        };
-
-        let value = if value.is_symlink() {
-            fs::read_link(value)?
-        } else {
-            value
-        };
-
-        let pid = {
-            value
-                .iter()
-                .next_back()
-                .ok_or(io::ErrorKind::Other)?
-                .to_str()
-                .ok_or(io::ErrorKind::InvalidData)?
-                .parse::<usize>()
-                .map_err(|_| io::ErrorKind::InvalidData)?
-        };
-        let cmdline = fs::read_to_string(dir_append(value.clone(), "cmdline".into()))?
-            .replace('\0', " ")
-            .trim_end()
-            .into();
-
-        Ok(Self {
-            pid,
-            cmdline,
-            inner_status: fs::read_to_string(dir_append(value.clone(), "status".into()))?,
-            inner_stat: fs::read_to_string(dir_append(value, "stat".into()))?,
-            ..Default::default()
-        })
-    }
-
-    pub fn proc_status(&self) -> &str {
-        &self.inner_status
-    }
-
-    pub fn proc_stat(&self) -> &str {
-        &self.inner_stat
-    }
-
-    /// Collect information from `/proc/<pid>/status` file
-    pub fn status(&mut self) -> Rc<HashMap<String, String>> {
-        if let Some(c) = &self.cached_status {
-            return Rc::clone(c);
-        }
-
-        let result = self
-            .inner_status
-            .lines()
-            .filter_map(|it| it.split_once(':'))
-            .map(|it| (it.0.to_string(), it.1.trim_start().to_string()))
-            .collect::<HashMap<_, _>>();
-
-        let result = Rc::new(result);
-        self.cached_status = Some(Rc::clone(&result));
-        Rc::clone(&result)
-    }
-
-    /// Collect information from `/proc/<pid>/stat` file
-    pub fn stat(&mut self) -> Rc<Vec<String>> {
-        if let Some(c) = &self.cached_stat {
-            return Rc::clone(c);
-        }
-
-        let result: Vec<_> = stat_split(&self.inner_stat);
-
-        let result = Rc::new(result);
-        self.cached_stat = Some(Rc::clone(&result));
-        Rc::clone(&result)
-    }
-
-    /// Fetch start time from [ProcessInformation::cached_stat]
-    ///
-    /// - [The /proc Filesystem: Table 1-4](https://docs.kernel.org/filesystems/proc.html#id10)
-    pub fn start_time(&mut self) -> Result<u64, io::Error> {
-        if let Some(time) = self.cached_start_time {
-            return Ok(time);
-        }
-
-        // Kernel doc: https://docs.kernel.org/filesystems/proc.html#process-specific-subdirectories
-        // Table 1-4
-        let time = self
-            .stat()
-            .get(21)
-            .ok_or(io::ErrorKind::InvalidData)?
-            .parse::<u64>()
-            .map_err(|_| io::ErrorKind::InvalidData)?;
-
-        self.cached_start_time = Some(time);
-
-        Ok(time)
-    }
-
-    pub fn ppid(&mut self) -> Result<u64, io::Error> {
-        // the PPID is the fourth field in /proc/<PID>/stat
-        // (https://www.kernel.org/doc/html/latest/filesystems/proc.html#id10)
-        self.stat()
-            .get(3)
-            .ok_or(io::ErrorKind::InvalidData)?
-            .parse::<u64>()
-            .map_err(|_| io::ErrorKind::InvalidData.into())
-    }
-
-    fn get_uid_or_gid_field(&mut self, field: UidGid, index: usize) -> Result<u32, io::Error> {
-        self.status()
-            .get(&format!("{field:?}"))
-            .ok_or(io::ErrorKind::InvalidData)?
-            .split_whitespace()
-            .nth(index)
-            .ok_or(io::ErrorKind::InvalidData)?
-            .parse::<u32>()
-            .map_err(|_| io::ErrorKind::InvalidData.into())
-    }
-
-    pub fn uid(&mut self) -> Result<u32, io::Error> {
-        self.get_uid_or_gid_field(UidGid::Uid, 0)
-    }
-
-    pub fn euid(&mut self) -> Result<u32, io::Error> {
-        self.get_uid_or_gid_field(UidGid::Uid, 1)
-    }
-
-    pub fn gid(&mut self) -> Result<u32, io::Error> {
-        self.get_uid_or_gid_field(UidGid::Gid, 0)
-    }
-
-    pub fn egid(&mut self) -> Result<u32, io::Error> {
-        self.get_uid_or_gid_field(UidGid::Gid, 1)
-    }
-
-    /// Fetch run state from [ProcessInformation::cached_stat]
-    ///
-    /// - [The /proc Filesystem: Table 1-4](https://docs.kernel.org/filesystems/proc.html#id10)
-    ///
-    /// # Error
-    ///
-    /// If parsing failed, this function will return an I/O error.
-    pub fn run_state(&mut self) -> Result<RunState, io::Error> {
-        RunState::try_from(
-            self.stat()
-                .get(2)
-                .ok_or(io::ErrorKind::InvalidData)?
-                .as_str(),
-        )
-    }
-
-    /// This function will scan the `/proc/<pid>/fd` directory
-    ///
-    /// If the process does not belong to any terminal and mismatched permission,
-    /// the result will contain [TerminalType::Unknown].
-    ///
-    /// Otherwise [TerminalType::Unknown] does not appear in the result.
-    pub fn tty(&self) -> Teletype {
-        let path = PathBuf::from(format!("/proc/{}/fd", self.pid));
-
-        let Ok(result) = fs::read_dir(path) else {
-            return Teletype::Unknown;
-        };
-
-        for dir in result.flatten().filter(|it| it.path().is_symlink()) {
-            if let Ok(path) = fs::read_link(dir.path()) {
-                if let Ok(tty) = Teletype::try_from(path) {
-                    return tty;
-                }
-            }
-        }
-
-        Teletype::Unknown
-    }
-
-    pub fn thread_ids(&mut self) -> Rc<Vec<usize>> {
-        if let Some(c) = &self.cached_thread_ids {
-            return Rc::clone(c);
-        }
-
-        let thread_ids_dir = format!("/proc/{}/task", self.pid);
-        let result = Rc::new(
-            WalkDir::new(thread_ids_dir)
-                .min_depth(1)
-                .max_depth(1)
-                .follow_links(false)
-                .into_iter()
-                .flatten()
-                .flat_map(|it| {
-                    it.path()
-                        .file_name()
-                        .and_then(|it| it.to_str())
-                        .and_then(|it| it.parse::<usize>().ok())
-                })
-                .collect::<Vec<_>>(),
-        );
-
-        self.cached_thread_ids = Some(Rc::clone(&result));
-        Rc::clone(&result)
-    }
-}
-impl TryFrom<DirEntry> for ProcessInformation {
-    type Error = io::Error;
-
-    fn try_from(value: DirEntry) -> Result<Self, Self::Error> {
-        let value = value.into_path();
-
-        Self::try_new(value)
-    }
-}
-
-impl Hash for ProcessInformation {
-    fn hash<H: std::hash::Hasher>(&self, state: &mut H) {
-        // Make it faster.
-        self.pid.hash(state);
-        self.inner_status.hash(state);
-        self.inner_stat.hash(state);
-    }
-}
-
-/// Parsing `/proc/self/stat` file.
-///
-/// In some case, the first pair (and the only one pair) will contains whitespace,
-/// so if we want to parse it, we have to write new algorithm.
-///
-/// TODO: If possible, test and use regex to replace this algorithm.
-fn stat_split(stat: &str) -> Vec<String> {
-    if let (Some(left), Some(right)) = (stat.find('('), stat.rfind(')')) {
-        if left < right {
-            let mut fields = stat[..left]
-                .split_whitespace()
-                .map(str::to_owned)
-                .collect::<Vec<_>>();
-            fields.push(stat[(left + 1)..right].to_owned());
-            fields.extend(stat[(right + 1)..].split_whitespace().map(str::to_owned));
-            return fields;
-        }
-    }
-    stat.split_whitespace().map(str::to_owned).collect()
-}
-
-/// Iterating pid in current system
-pub fn walk_process() -> impl Iterator<Item = ProcessInformation> {
-    WalkDir::new("/proc/")
-        .max_depth(1)
-        .follow_links(false)
-        .into_iter()
-        .flatten()
-        .filter(|it| it.path().is_dir())
-        .flat_map(ProcessInformation::try_from)
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use crate::features::tty::Teletype;
-    use std::{collections::HashSet, str::FromStr};
-
-    #[test]
-    fn test_run_state_conversion() {
-        assert_eq!(RunState::try_from("R").unwrap(), RunState::Running);
-        assert_eq!(RunState::try_from("S").unwrap(), RunState::Sleeping);
-        assert_eq!(
-            RunState::try_from("D").unwrap(),
-            RunState::UninterruptibleWait
-        );
-        assert_eq!(RunState::try_from("T").unwrap(), RunState::Stopped);
-        assert_eq!(RunState::try_from("Z").unwrap(), RunState::Zombie);
-
-        assert!(RunState::try_from("G").is_err());
-        assert!(RunState::try_from("Rg").is_err());
-    }
-
-    fn current_pid() -> usize {
-        // Direct read link of /proc/self.
-        // It's result must be current programs pid.
-        fs::read_link("/proc/self")
-            .unwrap()
-            .to_str()
-            .unwrap()
-            .parse::<usize>()
-            .unwrap()
-    }
-
-    #[test]
-    fn test_walk_pid() {
-        let current_pid = current_pid();
-
-        let find = walk_process().find(|it| it.pid == current_pid);
-
-        assert!(find.is_some());
-    }
-
-    #[test]
-    fn test_pid_entry() {
-        let current_pid = current_pid();
-
-        let pid_entry = ProcessInformation::try_new(
-            PathBuf::from_str(&format!("/proc/{current_pid}")).unwrap(),
-        )
-        .unwrap();
-
-        let result = WalkDir::new(format!("/proc/{current_pid}/fd"))
-            .into_iter()
-            .flatten()
-            .map(DirEntry::into_path)
-            .flat_map(|it| it.read_link())
-            .flat_map(Teletype::try_from)
-            .collect::<HashSet<_>>();
-
-        // In CI environments or when running without a terminal, there may be no TTY
-        if result.is_empty() {
-            assert_eq!(pid_entry.tty(), Teletype::Unknown);
-        } else {
-            assert_eq!(result.len(), 1);
-            assert_eq!(
-                pid_entry.tty(),
-                Vec::from_iter(result.into_iter()).first().unwrap().clone()
-            );
-        }
-    }
-
-    #[test]
-    fn test_thread_ids() {
-        let main_tid = unsafe { libc::gettid() };
-        std::thread::spawn(move || {
-            let mut pid_entry = ProcessInformation::try_new(
-                PathBuf::from_str(&format!("/proc/{}", current_pid())).unwrap(),
-            )
-            .unwrap();
-            let thread_ids = pid_entry.thread_ids();
-
-            assert!(thread_ids.contains(&(main_tid as usize)));
-
-            let new_thread_tid = unsafe { libc::gettid() };
-            assert!(thread_ids.contains(&(new_thread_tid as usize)));
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_stat_split() {
-        let case = "32 (idle_inject/3) S 2 0 0 0 -1 69238848 0 0 0 0 0 0 0 0 -51 0 1 0 34 0 0 18446744073709551615 0 0 0 0 0 0 0 2147483647 0 0 0 0 17 3 50 1 0 0 0 0 0 0 0 0 0 0 0";
-        assert_eq!(stat_split(case)[1], "idle_inject/3");
-
-        let case = "3508 (sh) S 3478 3478 3478 0 -1 4194304 67 0 0 0 0 0 0 0 20 0 1 0 11911 2961408 238 18446744073709551615 94340156948480 94340157028757 140736274114368 0 0 0 0 4096 65538 1 0 0 17 8 0 0 0 0 0 94340157054704 94340157059616 94340163108864 140736274122780 140736274122976 140736274122976 140736274124784 0";
-        assert_eq!(stat_split(case)[1], "sh");
-
-        let case = "47246 (kworker /10:1-events) I 2 0 0 0 -1 69238880 0 0 0 0 17 29 0 0 20 0 1 0 1396260 0 0 18446744073709551615 0 0 0 0 0 0 0 2147483647 0 0 0 0 17 10 0 0 0 0 0 0 0 0 0 0 0 0 0";
-        assert_eq!(stat_split(case)[1], "kworker /10:1-events");
-
-        let case = "123 (name ) with paren) S 1 2 3";
-        let fields = stat_split(case);
-        assert_eq!(fields[0], "123");
-        assert_eq!(fields[1], "name ) with paren");
-        assert_eq!(fields[2], "S");
-        assert_eq!(fields[3], "1");
-    }
-
-    #[test]
-    fn test_run_state_rejects_malformed_stat() {
-        let mut pid_entry = ProcessInformation {
-            inner_stat: "123 (missing-state)".into(),
-            ..Default::default()
-        };
-
-        assert_eq!(
-            pid_entry.run_state().unwrap_err().kind(),
-            io::ErrorKind::InvalidData
-        );
-    }
-
-    #[test]
-    fn test_uid_gid() {
-        let mut pid_entry = ProcessInformation::try_new(
-            PathBuf::from_str(&format!("/proc/{}", current_pid())).unwrap(),
-        )
-        .unwrap();
-        assert_eq!(pid_entry.uid().unwrap(), crate::process::getuid());
-        assert_eq!(pid_entry.euid().unwrap(), crate::process::geteuid());
-        assert_eq!(pid_entry.gid().unwrap(), crate::process::getgid());
-        assert_eq!(pid_entry.egid().unwrap(), crate::process::getegid());
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/process.rs b/registry/native/stubs/uucore/src/lib/features/process.rs
deleted file mode 100644
index 57a2e8465..000000000
--- a/registry/native/stubs/uucore/src/lib/features/process.rs
+++ /dev/null
@@ -1,190 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore (vars) cvar exitstatus cmdline kworker getsid getpid
-// spell-checker:ignore (sys/unix) WIFSIGNALED ESRCH
-// spell-checker:ignore pgrep pwait snice getpgrp
-
-use libc::{gid_t, pid_t, uid_t};
-#[cfg(not(target_os = "redox"))]
-use nix::errno::Errno;
-use nix::sys::signal::{self as nix_signal, SigHandler, Signal};
-use nix::unistd::Pid;
-use std::io;
-use std::process::Child;
-use std::process::ExitStatus;
-use std::sync::atomic;
-use std::sync::atomic::AtomicBool;
-use std::thread;
-use std::time::{Duration, Instant};
-
-/// `geteuid()` returns the effective user ID of the calling process.
-pub fn geteuid() -> uid_t {
-    nix::unistd::geteuid().as_raw()
-}
-
-/// `getpgrp()` returns the process group ID of the calling process.
-/// It is a trivial wrapper over nix::unistd::getpgrp.
-pub fn getpgrp() -> pid_t {
-    nix::unistd::getpgrp().as_raw()
-}
-
-/// `getegid()` returns the effective group ID of the calling process.
-pub fn getegid() -> gid_t {
-    nix::unistd::getegid().as_raw()
-}
-
-/// `getgid()` returns the real group ID of the calling process.
-pub fn getgid() -> gid_t {
-    nix::unistd::getgid().as_raw()
-}
-
-/// `getuid()` returns the real user ID of the calling process.
-pub fn getuid() -> uid_t {
-    nix::unistd::getuid().as_raw()
-}
-
-/// `getpid()` returns the pid of the calling process.
-pub fn getpid() -> pid_t {
-    nix::unistd::getpid().as_raw()
-}
-
-/// `getsid()` returns the session ID of the process with process ID pid.
-///
-/// If pid is 0, getsid() returns the session ID of the calling process.
-///
-/// # Error
-///
-/// - [Errno::EPERM] A process with process ID pid exists, but it is not in the same session as the calling process, and the implementation considers this an error.
-/// - [Errno::ESRCH] No process with process ID pid was found.
-///
-///
-/// # Platform
-///
-/// This function only support standard POSIX implementation platform,
-/// so some system such as redox doesn't supported.
-#[cfg(not(target_os = "redox"))]
-pub fn getsid(pid: i32) -> Result<pid_t, Errno> {
-    let pid = if pid == 0 {
-        None
-    } else {
-        Some(Pid::from_raw(pid))
-    };
-    nix::unistd::getsid(pid).map(Pid::as_raw)
-}
-
-/// Missing methods for Child objects
-pub trait ChildExt {
-    /// Send a signal to a Child process.
-    ///
-    /// Caller beware: if the process already exited then you may accidentally
-    /// send the signal to an unrelated process that recycled the PID.
-    fn send_signal(&mut self, signal: usize) -> io::Result<()>;
-
-    /// Send a signal to a process group.
-    fn send_signal_group(&mut self, signal: usize) -> io::Result<()>;
-
-    /// Wait for a process to finish or return after the specified duration.
-    /// A `timeout` of zero disables the timeout.
-    fn wait_or_timeout(
-        &mut self,
-        timeout: Duration,
-        signaled: Option<&AtomicBool>,
-    ) -> io::Result<Option<ExitStatus>>;
-}
-
-impl ChildExt for Child {
-    fn send_signal(&mut self, signal: usize) -> io::Result<()> {
-        let pid = Pid::from_raw(self.id() as pid_t);
-        let result = if signal == 0 {
-            nix_signal::kill(pid, None)
-        } else {
-            let signal = Signal::try_from(signal as i32)
-                .map_err(|_| io::Error::from_raw_os_error(libc::EINVAL))?;
-            nix_signal::kill(pid, Some(signal))
-        };
-        result.map_err(|e| io::Error::from_raw_os_error(e as i32))
-    }
-
-    fn send_signal_group(&mut self, signal: usize) -> io::Result<()> {
-        // Send signal to our process group (group 0 = caller's group).
-        // This matches GNU coreutils behavior: if the child has remained in our
-        // process group, it will receive this signal along with all other processes
-        // in the group. If the child has created its own process group (via setpgid),
-        // it won't receive this group signal, but will have received the direct signal.
-
-        // Signal 0 is special - it just checks if process exists, doesn't send anything.
-        // No need to manipulate signal handlers for it.
-        if signal == 0 {
-            return nix_signal::kill(Pid::from_raw(0), None)
-                .map_err(|e| io::Error::from_raw_os_error(e as i32));
-        }
-
-        let signal = Signal::try_from(signal as i32)
-            .map_err(|_| io::Error::from_raw_os_error(libc::EINVAL))?;
-
-        // Ignore the signal temporarily so we don't receive it ourselves.
-        let old_handler = unsafe { nix_signal::signal(signal, SigHandler::SigIgn) }
-            .map_err(|e| io::Error::from_raw_os_error(e as i32))?;
-        let result = nix_signal::kill(Pid::from_raw(0), Some(signal));
-        // Restore the old handler
-        let _ = unsafe { nix_signal::signal(signal, old_handler) };
-        result.map_err(|e| io::Error::from_raw_os_error(e as i32))
-    }
-
-    fn wait_or_timeout(
-        &mut self,
-        timeout: Duration,
-        signaled: Option<&AtomicBool>,
-    ) -> io::Result<Option<ExitStatus>> {
-        if timeout == Duration::from_micros(0) {
-            return self.wait().map(Some);
-        }
-        // .try_wait() doesn't drop stdin, so we do it manually
-        drop(self.stdin.take());
-
-        let start = Instant::now();
-        loop {
-            if let Some(status) = self.try_wait()? {
-                return Ok(Some(status));
-            }
-
-            if start.elapsed() >= timeout
-                || signaled.is_some_and(|signaled| signaled.load(atomic::Ordering::Relaxed))
-            {
-                break;
-            }
-
-            // XXX: this is kinda gross, but it's cleaner than starting a thread just to wait
-            //      (which was the previous solution).  We might want to use a different duration
-            //      here as well
-            thread::sleep(Duration::from_millis(100));
-        }
-
-        Ok(None)
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    #[cfg(not(target_os = "redox"))]
-    fn test_getsid() {
-        assert_eq!(
-            getsid(getpid()).expect("getsid(getpid)"),
-            // zero is a special value for SID.
-            // https://pubs.opengroup.org/onlinepubs/9699919799/functions/getsid.html
-            getsid(0).expect("getsid(0)")
-        );
-
-        // SID never be 0.
-        assert!(getsid(getpid()).expect("getsid(getpid)") > 0);
-
-        // This might caused tests failure but the probability is low.
-        assert!(getsid(999_999).is_err());
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/quoting_style/c_quoter.rs b/registry/native/stubs/uucore/src/lib/features/quoting_style/c_quoter.rs
deleted file mode 100644
index 47a215719..000000000
--- a/registry/native/stubs/uucore/src/lib/features/quoting_style/c_quoter.rs
+++ /dev/null
@@ -1,57 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-use super::{EscapedChar, Quoter, Quotes};
-
-pub(super) struct CQuoter {
-    /// The type of quotes to use.
-    quotes: Quotes,
-
-    dirname: bool,
-
-    buffer: Vec<u8>,
-}
-
-impl CQuoter {
-    pub fn new(quotes: Quotes, dirname: bool, size_hint: usize) -> Self {
-        let mut buffer = Vec::with_capacity(size_hint);
-        match quotes {
-            Quotes::None => (),
-            Quotes::Single => buffer.push(b'\''),
-            Quotes::Double => buffer.push(b'"'),
-        }
-
-        Self {
-            quotes,
-            dirname,
-            buffer,
-        }
-    }
-}
-
-impl Quoter for CQuoter {
-    fn push_char(&mut self, input: char) {
-        let escaped: String = EscapedChar::new_c(input, self.quotes, self.dirname)
-            .hide_control()
-            .collect();
-        self.buffer.extend_from_slice(escaped.as_bytes());
-    }
-
-    fn push_invalid(&mut self, input: &[u8]) {
-        for b in input {
-            let escaped: String = EscapedChar::new_octal(*b).hide_control().collect();
-            self.buffer.extend_from_slice(escaped.as_bytes());
-        }
-    }
-
-    fn finalize(mut self: Box<Self>) -> Vec<u8> {
-        match self.quotes {
-            Quotes::None => (),
-            Quotes::Single => self.buffer.push(b'\''),
-            Quotes::Double => self.buffer.push(b'"'),
-        }
-        self.buffer
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/quoting_style/escaped_char.rs b/registry/native/stubs/uucore/src/lib/features/quoting_style/escaped_char.rs
deleted file mode 100644
index e9a14ca73..000000000
--- a/registry/native/stubs/uucore/src/lib/features/quoting_style/escaped_char.rs
+++ /dev/null
@@ -1,201 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-use std::char::from_digit;
-
-use super::Quotes;
-
-// PR#6559 : Remove `]{}` from special shell chars.
-const SPECIAL_SHELL_CHARS: &str = "`$&*()|[;\\'\"<>?! ";
-
-// This implementation is heavily inspired by the std::char::EscapeDefault implementation
-// in the Rust standard library. This custom implementation is needed because the
-// characters \a, \b, \e, \f & \v are not recognized by Rust.
-pub struct EscapedChar {
-    pub state: EscapeState,
-}
-
-pub enum EscapeState {
-    Done,
-    Char(char),
-    Backslash(char),
-    ForceQuote(char),
-    Octal(EscapeOctal),
-}
-
-/// Bytes we need to present as escaped octal, in the form of `\nnn` per byte.
-/// Only supports characters up to 2 bytes long in UTF-8.
-pub struct EscapeOctal {
-    c: [u8; 2],
-    state: EscapeOctalState,
-    idx: u8,
-}
-
-enum EscapeOctalState {
-    Done,
-    FirstBackslash,
-    FirstValue,
-    LastBackslash,
-    LastValue,
-}
-
-fn byte_to_octal_digit(byte: u8, idx: u8) -> u8 {
-    (byte >> (idx * 3)) & 0o7
-}
-
-impl Iterator for EscapeOctal {
-    type Item = char;
-
-    fn next(&mut self) -> Option<char> {
-        match self.state {
-            EscapeOctalState::Done => None,
-            EscapeOctalState::FirstBackslash => {
-                self.state = EscapeOctalState::FirstValue;
-                Some('\\')
-            }
-            EscapeOctalState::LastBackslash => {
-                self.state = EscapeOctalState::LastValue;
-                Some('\\')
-            }
-            EscapeOctalState::FirstValue => {
-                let octal_digit = byte_to_octal_digit(self.c[0], self.idx);
-                if self.idx == 0 {
-                    self.state = EscapeOctalState::LastBackslash;
-                    self.idx = 2;
-                } else {
-                    self.idx -= 1;
-                }
-                Some(from_digit(octal_digit.into(), 8).unwrap())
-            }
-            EscapeOctalState::LastValue => {
-                let octal_digit = byte_to_octal_digit(self.c[1], self.idx);
-                if self.idx == 0 {
-                    self.state = EscapeOctalState::Done;
-                } else {
-                    self.idx -= 1;
-                }
-                Some(from_digit(octal_digit.into(), 8).unwrap())
-            }
-        }
-    }
-}
-
-impl EscapeOctal {
-    fn from_char(c: char) -> Self {
-        if c.len_utf8() == 1 {
-            return Self::from_byte(c as u8);
-        }
-
-        let mut buf = [0; 2];
-        let _s = c.encode_utf8(&mut buf);
-        Self {
-            c: buf,
-            idx: 2,
-            state: EscapeOctalState::FirstBackslash,
-        }
-    }
-
-    fn from_byte(b: u8) -> Self {
-        Self {
-            c: [0, b],
-            idx: 2,
-            state: EscapeOctalState::LastBackslash,
-        }
-    }
-}
-
-impl EscapedChar {
-    pub fn new_literal(c: char) -> Self {
-        Self {
-            state: EscapeState::Char(c),
-        }
-    }
-
-    pub fn new_octal(b: u8) -> Self {
-        Self {
-            state: EscapeState::Octal(EscapeOctal::from_byte(b)),
-        }
-    }
-
-    pub fn new_c(c: char, quotes: Quotes, dirname: bool) -> Self {
-        use EscapeState::*;
-        let init_state = match c {
-            '\x07' => Backslash('a'),
-            '\x08' => Backslash('b'),
-            '\t' => Backslash('t'),
-            '\n' => Backslash('n'),
-            '\x0B' => Backslash('v'),
-            '\x0C' => Backslash('f'),
-            '\r' => Backslash('r'),
-            '\\' => Backslash('\\'),
-            '\'' => match quotes {
-                Quotes::Single => Backslash('\''),
-                _ => Char('\''),
-            },
-            '"' => match quotes {
-                Quotes::Double => Backslash('"'),
-                _ => Char('"'),
-            },
-            ' ' if !dirname => match quotes {
-                Quotes::None => Backslash(' '),
-                _ => Char(' '),
-            },
-            ':' if dirname => Backslash(':'),
-            _ if c.is_control() => Octal(EscapeOctal::from_char(c)),
-            _ => Char(c),
-        };
-        Self { state: init_state }
-    }
-
-    pub fn new_shell(c: char, escape: bool, quotes: Quotes) -> Self {
-        use EscapeState::*;
-        let init_state = match c {
-            _ if !escape && c.is_control() => Char(c),
-            '\x07' => Backslash('a'),
-            '\x08' => Backslash('b'),
-            '\t' => Backslash('t'),
-            '\n' => Backslash('n'),
-            '\x0B' => Backslash('v'),
-            '\x0C' => Backslash('f'),
-            '\r' => Backslash('r'),
-            '\'' => match quotes {
-                Quotes::Single => Backslash('\''),
-                _ => Char('\''),
-            },
-            _ if c.is_control() => Octal(EscapeOctal::from_char(c)),
-            _ if SPECIAL_SHELL_CHARS.contains(c) => ForceQuote(c),
-            _ => Char(c),
-        };
-        Self { state: init_state }
-    }
-
-    pub fn hide_control(self) -> Self {
-        match self.state {
-            EscapeState::Char(c) if c.is_control() => Self {
-                state: EscapeState::Char('?'),
-            },
-            _ => self,
-        }
-    }
-}
-
-impl Iterator for EscapedChar {
-    type Item = char;
-
-    fn next(&mut self) -> Option<char> {
-        match self.state {
-            EscapeState::Backslash(c) => {
-                self.state = EscapeState::Char(c);
-                Some('\\')
-            }
-            EscapeState::Char(c) | EscapeState::ForceQuote(c) => {
-                self.state = EscapeState::Done;
-                Some(c)
-            }
-            EscapeState::Done => None,
-            EscapeState::Octal(ref mut iter) => iter.next(),
-        }
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/quoting_style/literal_quoter.rs b/registry/native/stubs/uucore/src/lib/features/quoting_style/literal_quoter.rs
deleted file mode 100644
index 555bbf890..000000000
--- a/registry/native/stubs/uucore/src/lib/features/quoting_style/literal_quoter.rs
+++ /dev/null
@@ -1,31 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-use super::{EscapedChar, Quoter};
-
-pub(super) struct LiteralQuoter(Vec<u8>);
-
-impl LiteralQuoter {
-    pub fn new(size_hint: usize) -> Self {
-        Self(Vec::with_capacity(size_hint))
-    }
-}
-
-impl Quoter for LiteralQuoter {
-    fn push_char(&mut self, input: char) {
-        let escaped = EscapedChar::new_literal(input)
-            .hide_control()
-            .collect::<String>();
-        self.0.extend(escaped.as_bytes());
-    }
-
-    fn push_invalid(&mut self, input: &[u8]) {
-        self.0.extend(std::iter::repeat_n(b'?', input.len()));
-    }
-
-    fn finalize(self: Box<Self>) -> Vec<u8> {
-        self.0
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/quoting_style/mod.rs b/registry/native/stubs/uucore/src/lib/features/quoting_style/mod.rs
deleted file mode 100644
index 9613e579d..000000000
--- a/registry/native/stubs/uucore/src/lib/features/quoting_style/mod.rs
+++ /dev/null
@@ -1,1087 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Set of functions for escaping names according to different quoting styles.
-
-use std::ffi::{OsStr, OsString};
-use std::fmt;
-
-use crate::i18n::{self, UEncoding};
-use crate::quoting_style::c_quoter::CQuoter;
-use crate::quoting_style::literal_quoter::LiteralQuoter;
-use crate::quoting_style::shell_quoter::{EscapedShellQuoter, NonEscapedShellQuoter};
-
-mod escaped_char;
-pub use escaped_char::{EscapeState, EscapedChar};
-
-mod c_quoter;
-mod literal_quoter;
-mod shell_quoter;
-
-/// The quoting style to use when escaping a name.
-#[derive(Clone, Copy, Debug, Eq, PartialEq)]
-pub enum QuotingStyle {
-    /// Escape the name as a shell string.
-    /// Used in, e.g., `ls --quoting-style=shell`.
-    Shell {
-        /// Whether to escape characters in the name.
-        /// True in, e.g., `ls --quoting-style=shell-escape`.
-        escape: bool,
-
-        /// Whether to always quote the name.
-        always_quote: bool,
-
-        /// Whether to show control and non-unicode characters, or replace them with `?`.
-        show_control: bool,
-    },
-
-    /// Escape the name as a C string.
-    /// Used in, e.g., `ls --quote-name`.
-    C {
-        /// The type of quotes to use.
-        quotes: Quotes,
-    },
-
-    /// Do not escape the string.
-    /// Used in, e.g., `ls --literal`.
-    Literal {
-        /// Whether to show control and non-unicode characters, or replace them with `?`.
-        show_control: bool,
-    },
-}
-
-/// Provide sane defaults for quoting styles.
-impl QuotingStyle {
-    pub const SHELL: Self = Self::Shell {
-        escape: false,
-        always_quote: false,
-        show_control: false,
-    };
-
-    pub const SHELL_ESCAPE: Self = Self::Shell {
-        escape: true,
-        always_quote: false,
-        show_control: false,
-    };
-
-    pub const SHELL_QUOTE: Self = Self::Shell {
-        escape: false,
-        always_quote: true,
-        show_control: false,
-    };
-
-    pub const SHELL_ESCAPE_QUOTE: Self = Self::Shell {
-        escape: true,
-        always_quote: true,
-        show_control: false,
-    };
-
-    pub const C_NO_QUOTES: Self = Self::C {
-        quotes: Quotes::None,
-    };
-
-    pub const C_DOUBLE: Self = Self::C {
-        quotes: Quotes::Double,
-    };
-
-    /// Set the `show_control` field of the quoting style.
-    /// Note: this is a no-op for the `C` variant.
-    pub fn show_control(self, show_control: bool) -> Self {
-        use QuotingStyle::*;
-        match self {
-            Shell {
-                escape,
-                always_quote,
-                ..
-            } => Shell {
-                escape,
-                always_quote,
-                show_control,
-            },
-            Literal { .. } => Literal { show_control },
-            C { .. } => self,
-        }
-    }
-}
-
-/// Common interface of quoting mechanisms.
-trait Quoter {
-    /// Push a valid character.
-    fn push_char(&mut self, input: char);
-
-    /// Push a sequence of valid characters.
-    fn push_str(&mut self, input: &str) {
-        for c in input.chars() {
-            self.push_char(c);
-        }
-    }
-
-    /// Push a continuous slice of invalid data wrt the encoding used to
-    /// decode the stream.
-    fn push_invalid(&mut self, input: &[u8]);
-
-    /// Apply post-processing on the constructed buffer and return it.
-    fn finalize(self: Box<Self>) -> Vec<u8>;
-}
-
-/// The type of quotes to use when escaping a name as a C string.
-#[derive(Clone, Copy, Debug, Eq, PartialEq)]
-pub enum Quotes {
-    /// Do not use quotes.
-    None,
-
-    /// Use single quotes.
-    Single,
-
-    /// Use double quotes.
-    Double,
-    // TODO: Locale
-}
-
-/// Escape a name according to the given quoting style.
-///
-/// This inner function provides an additional flag `dirname` which
-/// is meant for ls' directory name display.
-fn escape_name_inner(
-    name: &[u8],
-    style: QuotingStyle,
-    dirname: bool,
-    encoding: UEncoding,
-) -> Vec<u8> {
-    // Early handle Literal with show_control style
-    if let QuotingStyle::Literal { show_control: true } = style {
-        return name.to_owned();
-    }
-
-    let mut quoter: Box<dyn Quoter> = match style {
-        QuotingStyle::Literal { .. } => Box::new(LiteralQuoter::new(name.len())),
-        QuotingStyle::C { quotes } => Box::new(CQuoter::new(quotes, dirname, name.len())),
-        QuotingStyle::Shell {
-            escape: true,
-            always_quote,
-            ..
-        } => Box::new(EscapedShellQuoter::new(
-            name,
-            always_quote,
-            dirname,
-            name.len(),
-        )),
-        QuotingStyle::Shell {
-            escape: false,
-            always_quote,
-            show_control,
-        } => Box::new(NonEscapedShellQuoter::new(
-            name,
-            show_control,
-            always_quote,
-            dirname,
-            name.len(),
-        )),
-    };
-
-    match encoding {
-        UEncoding::Ascii => {
-            for b in name {
-                if b.is_ascii() {
-                    quoter.push_char(*b as char);
-                } else {
-                    quoter.push_invalid(&[*b]);
-                }
-            }
-        }
-        UEncoding::Utf8 => {
-            for chunk in name.utf8_chunks() {
-                quoter.push_str(chunk.valid());
-                quoter.push_invalid(chunk.invalid());
-            }
-        }
-    }
-
-    quoter.finalize()
-}
-
-/// Escape a filename with respect to the given style.
-pub fn escape_name(name: &OsStr, style: QuotingStyle, encoding: UEncoding) -> OsString {
-    let name = crate::os_str_as_bytes_lossy(name);
-    crate::os_string_from_vec(escape_name_inner(&name, style, false, encoding))
-        .expect("all byte sequences should be valid for platform, or already replaced in name")
-}
-
-/// Retrieve the encoding from the locale and pass it to `escape_name`.
-pub fn locale_aware_escape_name(name: &OsStr, style: QuotingStyle) -> OsString {
-    escape_name(name, style, i18n::get_locale_encoding())
-}
-
-/// Escape a directory name with respect to the given style.
-/// This is mainly meant to be used for ls' directory name printing and is not
-/// likely to be used elsewhere.
-pub fn escape_dir_name(dir_name: &OsStr, style: QuotingStyle, encoding: UEncoding) -> OsString {
-    let name = crate::os_str_as_bytes_lossy(dir_name);
-    crate::os_string_from_vec(escape_name_inner(&name, style, true, encoding))
-        .expect("all byte sequences should be valid for platform, or already replaced in name")
-}
-
-/// Retrieve the encoding from the locale and pass it to `escape_dir_name`.
-pub fn locale_aware_escape_dir_name(name: &OsStr, style: QuotingStyle) -> OsString {
-    escape_dir_name(name, style, i18n::get_locale_encoding())
-}
-
-impl fmt::Display for QuotingStyle {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match *self {
-            Self::Shell {
-                escape,
-                always_quote,
-                show_control,
-            } => {
-                let mut style = "shell".to_string();
-                if escape {
-                    style.push_str("-escape");
-                }
-                if always_quote {
-                    style.push_str("-always-quote");
-                }
-                if show_control {
-                    style.push_str("-show-control");
-                }
-                f.write_str(&style)
-            }
-            Self::C { .. } => f.write_str("C"),
-            Self::Literal { .. } => f.write_str("literal"),
-        }
-    }
-}
-
-impl fmt::Display for Quotes {
-    fn fmt(&self, f: &mut fmt::Formatter<'_>) -> fmt::Result {
-        match *self {
-            Self::None => f.write_str("None"),
-            Self::Single => f.write_str("Single"),
-            Self::Double => f.write_str("Double"),
-        }
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use crate::{
-        i18n::UEncoding,
-        quoting_style::{Quotes, QuotingStyle, escape_name_inner},
-    };
-
-    // spell-checker:ignore (tests/words) one\'two one'two
-
-    fn get_style(s: &str) -> QuotingStyle {
-        match s {
-            "literal" => QuotingStyle::Literal {
-                show_control: false,
-            },
-            "literal-show" => QuotingStyle::Literal { show_control: true },
-            "escape" => QuotingStyle::C_NO_QUOTES,
-            "c" => QuotingStyle::C_DOUBLE,
-            "shell" => QuotingStyle::SHELL,
-            "shell-show" => QuotingStyle::SHELL.show_control(true),
-            "shell-always" => QuotingStyle::SHELL_QUOTE,
-            "shell-always-show" => QuotingStyle::SHELL_QUOTE.show_control(true),
-            "shell-escape" => QuotingStyle::SHELL_ESCAPE,
-            "shell-escape-always" => QuotingStyle::SHELL_ESCAPE_QUOTE,
-            _ => panic!("Invalid name!"),
-        }
-    }
-
-    fn check_names_inner<T>(encoding: UEncoding, name: &[u8], map: &[(T, &str)]) -> Vec<Vec<u8>> {
-        map.iter()
-            .map(|(_, style)| escape_name_inner(name, get_style(style), false, encoding))
-            .collect()
-    }
-
-    fn check_names_encoding(encoding: UEncoding, name: &str, map: &[(&str, &str)]) {
-        assert_eq!(
-            map.iter()
-                .map(|(correct, _)| *correct)
-                .collect::<Vec<&str>>(),
-            check_names_inner(encoding, name.as_bytes(), map)
-                .iter()
-                .map(|bytes| std::str::from_utf8(bytes)
-                    .expect("valid str goes in, valid str comes out"))
-                .collect::<Vec<&str>>()
-        );
-    }
-
-    fn check_names_both(name: &str, map: &[(&str, &str)]) {
-        check_names_encoding(UEncoding::Utf8, name, map);
-        check_names_encoding(UEncoding::Ascii, name, map);
-    }
-
-    fn check_names_encoding_raw(encoding: UEncoding, name: &[u8], map: &[(&[u8], &str)]) {
-        assert_eq!(
-            map.iter()
-                .map(|(correct, _)| *correct)
-                .collect::<Vec<&[u8]>>(),
-            check_names_inner(encoding, name, map)
-        );
-    }
-
-    fn check_names_raw_both(name: &[u8], map: &[(&[u8], &str)]) {
-        check_names_encoding_raw(UEncoding::Utf8, name, map);
-        check_names_encoding_raw(UEncoding::Ascii, name, map);
-    }
-
-    #[test]
-    fn test_simple_names() {
-        check_names_both(
-            "one_two",
-            &[
-                ("one_two", "literal"),
-                ("one_two", "literal-show"),
-                ("one_two", "escape"),
-                ("\"one_two\"", "c"),
-                ("one_two", "shell"),
-                ("one_two", "shell-show"),
-                ("'one_two'", "shell-always"),
-                ("'one_two'", "shell-always-show"),
-                ("one_two", "shell-escape"),
-                ("'one_two'", "shell-escape-always"),
-            ],
-        );
-    }
-
-    #[test]
-    fn test_empty_string() {
-        check_names_both(
-            "",
-            &[
-                ("", "literal"),
-                ("", "literal-show"),
-                ("", "escape"),
-                ("\"\"", "c"),
-                ("''", "shell"),
-                ("''", "shell-show"),
-                ("''", "shell-always"),
-                ("''", "shell-always-show"),
-                ("''", "shell-escape"),
-                ("''", "shell-escape-always"),
-            ],
-        );
-    }
-
-    #[test]
-    fn test_spaces() {
-        check_names_both(
-            "one two",
-            &[
-                ("one two", "literal"),
-                ("one two", "literal-show"),
-                ("one\\ two", "escape"),
-                ("\"one two\"", "c"),
-                ("'one two'", "shell"),
-                ("'one two'", "shell-show"),
-                ("'one two'", "shell-always"),
-                ("'one two'", "shell-always-show"),
-                ("'one two'", "shell-escape"),
-                ("'one two'", "shell-escape-always"),
-            ],
-        );
-
-        check_names_both(
-            " one",
-            &[
-                (" one", "literal"),
-                (" one", "literal-show"),
-                ("\\ one", "escape"),
-                ("\" one\"", "c"),
-                ("' one'", "shell"),
-                ("' one'", "shell-show"),
-                ("' one'", "shell-always"),
-                ("' one'", "shell-always-show"),
-                ("' one'", "shell-escape"),
-                ("' one'", "shell-escape-always"),
-            ],
-        );
-    }
-
-    #[test]
-    fn test_quotes() {
-        // One double quote
-        check_names_both(
-            "one\"two",
-            &[
-                ("one\"two", "literal"),
-                ("one\"two", "literal-show"),
-                ("one\"two", "escape"),
-                ("\"one\\\"two\"", "c"),
-                ("'one\"two'", "shell"),
-                ("'one\"two'", "shell-show"),
-                ("'one\"two'", "shell-always"),
-                ("'one\"two'", "shell-always-show"),
-                ("'one\"two'", "shell-escape"),
-                ("'one\"two'", "shell-escape-always"),
-            ],
-        );
-
-        // One single quote
-        check_names_both(
-            "one'two",
-            &[
-                ("one'two", "literal"),
-                ("one'two", "literal-show"),
-                ("one'two", "escape"),
-                ("\"one'two\"", "c"),
-                ("\"one'two\"", "shell"),
-                ("\"one'two\"", "shell-show"),
-                ("\"one'two\"", "shell-always"),
-                ("\"one'two\"", "shell-always-show"),
-                ("\"one'two\"", "shell-escape"),
-                ("\"one'two\"", "shell-escape-always"),
-            ],
-        );
-
-        // One single quote and one double quote
-        check_names_both(
-            "one'two\"three",
-            &[
-                ("one'two\"three", "literal"),
-                ("one'two\"three", "literal-show"),
-                ("one'two\"three", "escape"),
-                ("\"one'two\\\"three\"", "c"),
-                ("'one'\\''two\"three'", "shell"),
-                ("'one'\\''two\"three'", "shell-show"),
-                ("'one'\\''two\"three'", "shell-always"),
-                ("'one'\\''two\"three'", "shell-always-show"),
-                ("'one'\\''two\"three'", "shell-escape"),
-                ("'one'\\''two\"three'", "shell-escape-always"),
-            ],
-        );
-
-        // Consecutive quotes
-        check_names_both(
-            "one''two\"\"three",
-            &[
-                ("one''two\"\"three", "literal"),
-                ("one''two\"\"three", "literal-show"),
-                ("one''two\"\"three", "escape"),
-                ("\"one''two\\\"\\\"three\"", "c"),
-                ("'one'\\'''\\''two\"\"three'", "shell"),
-                ("'one'\\'''\\''two\"\"three'", "shell-show"),
-                ("'one'\\'''\\''two\"\"three'", "shell-always"),
-                ("'one'\\'''\\''two\"\"three'", "shell-always-show"),
-                ("'one'\\'''\\''two\"\"three'", "shell-escape"),
-                ("'one'\\'''\\''two\"\"three'", "shell-escape-always"),
-            ],
-        );
-    }
-
-    #[test]
-    fn test_control_chars() {
-        // A simple newline
-        check_names_both(
-            "one\ntwo",
-            &[
-                ("one?two", "literal"),
-                ("one\ntwo", "literal-show"),
-                ("one\\ntwo", "escape"),
-                ("\"one\\ntwo\"", "c"),
-                ("'one?two'", "shell"),
-                ("'one\ntwo'", "shell-show"),
-                ("'one?two'", "shell-always"),
-                ("'one\ntwo'", "shell-always-show"),
-                ("'one'$'\\n''two'", "shell-escape"),
-                ("'one'$'\\n''two'", "shell-escape-always"),
-            ],
-        );
-
-        // A control character followed by a special shell character
-        check_names_both(
-            "one\n&two",
-            &[
-                ("one?&two", "literal"),
-                ("one\n&two", "literal-show"),
-                ("one\\n&two", "escape"),
-                ("\"one\\n&two\"", "c"),
-                ("'one?&two'", "shell"),
-                ("'one\n&two'", "shell-show"),
-                ("'one?&two'", "shell-always"),
-                ("'one\n&two'", "shell-always-show"),
-                ("'one'$'\\n''&two'", "shell-escape"),
-                ("'one'$'\\n''&two'", "shell-escape-always"),
-            ],
-        );
-
-        // The first 16 ASCII control characters. NUL is also included, even though it is of
-        // no importance for file names.
-        check_names_both(
-            "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F",
-            &[
-                ("????????????????", "literal"),
-                (
-                    "\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F",
-                    "literal-show",
-                ),
-                (
-                    "\\000\\001\\002\\003\\004\\005\\006\\a\\b\\t\\n\\v\\f\\r\\016\\017",
-                    "escape",
-                ),
-                (
-                    "\"\\000\\001\\002\\003\\004\\005\\006\\a\\b\\t\\n\\v\\f\\r\\016\\017\"",
-                    "c",
-                ),
-                ("'????????????????'", "shell"),
-                (
-                    "'\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F'",
-                    "shell-show",
-                ),
-                ("'????????????????'", "shell-always"),
-                (
-                    "'\x00\x01\x02\x03\x04\x05\x06\x07\x08\x09\x0A\x0B\x0C\x0D\x0E\x0F'",
-                    "shell-always-show",
-                ),
-                (
-                    "''$'\\000\\001\\002\\003\\004\\005\\006\\a\\b\\t\\n\\v\\f\\r\\016\\017'",
-                    "shell-escape",
-                ),
-                (
-                    "''$'\\000\\001\\002\\003\\004\\005\\006\\a\\b\\t\\n\\v\\f\\r\\016\\017'",
-                    "shell-escape-always",
-                ),
-            ],
-        );
-
-        // The last 16 ASCII control characters.
-        check_names_both(
-            "\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F",
-            &[
-                ("????????????????", "literal"),
-                (
-                    "\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F",
-                    "literal-show",
-                ),
-                (
-                    "\\020\\021\\022\\023\\024\\025\\026\\027\\030\\031\\032\\033\\034\\035\\036\\037",
-                    "escape",
-                ),
-                (
-                    "\"\\020\\021\\022\\023\\024\\025\\026\\027\\030\\031\\032\\033\\034\\035\\036\\037\"",
-                    "c",
-                ),
-                ("????????????????", "shell"),
-                (
-                    "\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F",
-                    "shell-show",
-                ),
-                ("'????????????????'", "shell-always"),
-                (
-                    "'\x10\x11\x12\x13\x14\x15\x16\x17\x18\x19\x1A\x1B\x1C\x1D\x1E\x1F'",
-                    "shell-always-show",
-                ),
-                (
-                    "''$'\\020\\021\\022\\023\\024\\025\\026\\027\\030\\031\\032\\033\\034\\035\\036\\037'",
-                    "shell-escape",
-                ),
-                (
-                    "''$'\\020\\021\\022\\023\\024\\025\\026\\027\\030\\031\\032\\033\\034\\035\\036\\037'",
-                    "shell-escape-always",
-                ),
-            ],
-        );
-
-        // DEL
-        check_names_both(
-            "\x7F",
-            &[
-                ("?", "literal"),
-                ("\x7F", "literal-show"),
-                ("\\177", "escape"),
-                ("\"\\177\"", "c"),
-                ("?", "shell"),
-                ("\x7F", "shell-show"),
-                ("'?'", "shell-always"),
-                ("'\x7F'", "shell-always-show"),
-                ("''$'\\177'", "shell-escape"),
-                ("''$'\\177'", "shell-escape-always"),
-            ],
-        );
-
-        // The first 16 Unicode control characters.
-        let test_str = std::str::from_utf8(b"\xC2\x80\xC2\x81\xC2\x82\xC2\x83\xC2\x84\xC2\x85\xC2\x86\xC2\x87\xC2\x88\xC2\x89\xC2\x8A\xC2\x8B\xC2\x8C\xC2\x8D\xC2\x8E\xC2\x8F").unwrap();
-        check_names_both(
-            test_str,
-            &[
-                (test_str, "literal-show"),
-                (
-                    "\\302\\200\\302\\201\\302\\202\\302\\203\\302\\204\\302\\205\\302\\206\\302\\207\\302\\210\\302\\211\\302\\212\\302\\213\\302\\214\\302\\215\\302\\216\\302\\217",
-                    "escape",
-                ),
-                (
-                    "\"\\302\\200\\302\\201\\302\\202\\302\\203\\302\\204\\302\\205\\302\\206\\302\\207\\302\\210\\302\\211\\302\\212\\302\\213\\302\\214\\302\\215\\302\\216\\302\\217\"",
-                    "c",
-                ),
-                (test_str, "shell-show"),
-                (&format!("'{test_str}'"), "shell-always-show"),
-                (
-                    "''$'\\302\\200\\302\\201\\302\\202\\302\\203\\302\\204\\302\\205\\302\\206\\302\\207\\302\\210\\302\\211\\302\\212\\302\\213\\302\\214\\302\\215\\302\\216\\302\\217'",
-                    "shell-escape",
-                ),
-                (
-                    "''$'\\302\\200\\302\\201\\302\\202\\302\\203\\302\\204\\302\\205\\302\\206\\302\\207\\302\\210\\302\\211\\302\\212\\302\\213\\302\\214\\302\\215\\302\\216\\302\\217'",
-                    "shell-escape-always",
-                ),
-            ],
-        );
-        // Different expected output for UTF-8 and ASCII in these cases.
-        check_names_encoding(
-            UEncoding::Utf8,
-            test_str,
-            &[
-                ("????????????????", "literal"),
-                ("????????????????", "shell"),
-                ("'????????????????'", "shell-always"),
-            ],
-        );
-        check_names_encoding(
-            UEncoding::Ascii,
-            test_str,
-            &[
-                ("????????????????????????????????", "literal"),
-                ("????????????????????????????????", "shell"),
-                ("'????????????????????????????????'", "shell-always"),
-            ],
-        );
-
-        // The last 16 Unicode control characters.
-        let test_str = std::str::from_utf8(b"\xC2\x90\xC2\x91\xC2\x92\xC2\x93\xC2\x94\xC2\x95\xC2\x96\xC2\x97\xC2\x98\xC2\x99\xC2\x9A\xC2\x9B\xC2\x9C\xC2\x9D\xC2\x9E\xC2\x9F").unwrap();
-        check_names_both(
-            test_str,
-            &[
-                (test_str, "literal-show"),
-                (
-                    "\\302\\220\\302\\221\\302\\222\\302\\223\\302\\224\\302\\225\\302\\226\\302\\227\\302\\230\\302\\231\\302\\232\\302\\233\\302\\234\\302\\235\\302\\236\\302\\237",
-                    "escape",
-                ),
-                (
-                    "\"\\302\\220\\302\\221\\302\\222\\302\\223\\302\\224\\302\\225\\302\\226\\302\\227\\302\\230\\302\\231\\302\\232\\302\\233\\302\\234\\302\\235\\302\\236\\302\\237\"",
-                    "c",
-                ),
-                (test_str, "shell-show"),
-                (&format!("'{test_str}'"), "shell-always-show"),
-                (
-                    "''$'\\302\\220\\302\\221\\302\\222\\302\\223\\302\\224\\302\\225\\302\\226\\302\\227\\302\\230\\302\\231\\302\\232\\302\\233\\302\\234\\302\\235\\302\\236\\302\\237'",
-                    "shell-escape",
-                ),
-                (
-                    "''$'\\302\\220\\302\\221\\302\\222\\302\\223\\302\\224\\302\\225\\302\\226\\302\\227\\302\\230\\302\\231\\302\\232\\302\\233\\302\\234\\302\\235\\302\\236\\302\\237'",
-                    "shell-escape-always",
-                ),
-            ],
-        );
-        // Different expected output for UTF-8 and ASCII in these cases.
-        check_names_encoding(
-            UEncoding::Utf8,
-            test_str,
-            &[
-                ("????????????????", "literal"),
-                ("????????????????", "shell"),
-                ("'????????????????'", "shell-always"),
-            ],
-        );
-        check_names_encoding(
-            UEncoding::Ascii,
-            test_str,
-            &[
-                ("????????????????????????????????", "literal"),
-                ("????????????????????????????????", "shell"),
-                ("'????????????????????????????????'", "shell-always"),
-            ],
-        );
-    }
-
-    #[test]
-    fn test_non_unicode_bytes() {
-        let ascii = b'_';
-        let continuation = b'\xA7';
-        let first2byte = b'\xC2';
-        let first3byte = b'\xE0';
-        let first4byte = b'\xF0';
-        let invalid = b'\xC0';
-
-        // a single byte value invalid outside of additional context in UTF-8
-        check_names_raw_both(
-            &[continuation],
-            &[
-                (b"?", "literal"),
-                (b"\xA7", "literal-show"),
-                (b"\\247", "escape"),
-                (b"\"\\247\"", "c"),
-                (b"?", "shell"),
-                (b"\xA7", "shell-show"),
-                (b"'?'", "shell-always"),
-                (b"'\xA7'", "shell-always-show"),
-                (b"''$'\\247'", "shell-escape"),
-                (b"''$'\\247'", "shell-escape-always"),
-            ],
-        );
-
-        // ...but the byte becomes valid with appropriate context
-        // (this is just the § character in UTF-8, written as bytes)
-        let input = &[first2byte, continuation];
-        check_names_raw_both(
-            input,
-            &[
-                (b"\xC2\xA7", "literal-show"),
-                (b"\xC2\xA7", "shell-show"),
-                (b"'\xC2\xA7'", "shell-always-show"),
-            ],
-        );
-        // Different expected output for UTF-8 and ASCII in these cases.
-        check_names_encoding_raw(
-            UEncoding::Utf8,
-            input,
-            &[
-                (b"\xC2\xA7", "literal"),
-                (b"\xC2\xA7", "escape"),
-                (b"\"\xC2\xA7\"", "c"),
-                (b"\xC2\xA7", "shell"),
-                (b"'\xC2\xA7'", "shell-always"),
-                (b"\xC2\xA7", "shell-escape"),
-                (b"'\xC2\xA7'", "shell-escape-always"),
-            ],
-        );
-        check_names_encoding_raw(
-            UEncoding::Ascii,
-            input,
-            &[
-                (b"??", "literal"),
-                (b"\\302\\247", "escape"),
-                (b"\"\\302\\247\"", "c"),
-                (b"??", "shell"),
-                (b"'??'", "shell-always"),
-                (b"''$'\\302\\247'", "shell-escape"),
-                (b"''$'\\302\\247'", "shell-escape-always"),
-            ],
-        );
-
-        // mixed with valid characters
-        check_names_raw_both(
-            &[continuation, ascii],
-            &[
-                (b"?_", "literal"),
-                (b"\xA7_", "literal-show"),
-                (b"\\247_", "escape"),
-                (b"\"\\247_\"", "c"),
-                (b"?_", "shell"),
-                (b"\xA7_", "shell-show"),
-                (b"'?_'", "shell-always"),
-                (b"'\xA7_'", "shell-always-show"),
-                (b"''$'\\247''_'", "shell-escape"),
-                (b"''$'\\247''_'", "shell-escape-always"),
-            ],
-        );
-        check_names_raw_both(
-            &[ascii, continuation],
-            &[
-                (b"_?", "literal"),
-                (b"_\xA7", "literal-show"),
-                (b"_\\247", "escape"),
-                (b"\"_\\247\"", "c"),
-                (b"_?", "shell"),
-                (b"_\xA7", "shell-show"),
-                (b"'_?'", "shell-always"),
-                (b"'_\xA7'", "shell-always-show"),
-                (b"'_'$'\\247'", "shell-escape"),
-                (b"'_'$'\\247'", "shell-escape-always"),
-            ],
-        );
-        check_names_raw_both(
-            &[ascii, continuation, ascii],
-            &[
-                (b"_?_", "literal"),
-                (b"_\xA7_", "literal-show"),
-                (b"_\\247_", "escape"),
-                (b"\"_\\247_\"", "c"),
-                (b"_?_", "shell"),
-                (b"_\xA7_", "shell-show"),
-                (b"'_?_'", "shell-always"),
-                (b"'_\xA7_'", "shell-always-show"),
-                (b"'_'$'\\247''_'", "shell-escape"),
-                (b"'_'$'\\247''_'", "shell-escape-always"),
-            ],
-        );
-        check_names_raw_both(
-            &[continuation, ascii, continuation],
-            &[
-                (b"?_?", "literal"),
-                (b"\xA7_\xA7", "literal-show"),
-                (b"\\247_\\247", "escape"),
-                (b"\"\\247_\\247\"", "c"),
-                (b"?_?", "shell"),
-                (b"\xA7_\xA7", "shell-show"),
-                (b"'?_?'", "shell-always"),
-                (b"'\xA7_\xA7'", "shell-always-show"),
-                (b"''$'\\247''_'$'\\247'", "shell-escape"),
-                (b"''$'\\247''_'$'\\247'", "shell-escape-always"),
-            ],
-        );
-
-        // contiguous invalid bytes
-        check_names_raw_both(
-            &[
-                ascii,
-                invalid,
-                ascii,
-                continuation,
-                continuation,
-                ascii,
-                continuation,
-                continuation,
-                continuation,
-                ascii,
-                continuation,
-                continuation,
-                continuation,
-                continuation,
-                ascii,
-            ],
-            &[
-                (b"_?_??_???_????_", "literal"),
-                (
-                    b"_\xC0_\xA7\xA7_\xA7\xA7\xA7_\xA7\xA7\xA7\xA7_",
-                    "literal-show",
-                ),
-                (
-                    b"_\\300_\\247\\247_\\247\\247\\247_\\247\\247\\247\\247_",
-                    "escape",
-                ),
-                (
-                    b"\"_\\300_\\247\\247_\\247\\247\\247_\\247\\247\\247\\247_\"",
-                    "c",
-                ),
-                (b"_?_??_???_????_", "shell"),
-                (
-                    b"_\xC0_\xA7\xA7_\xA7\xA7\xA7_\xA7\xA7\xA7\xA7_",
-                    "shell-show",
-                ),
-                (b"'_?_??_???_????_'", "shell-always"),
-                (
-                    b"'_\xC0_\xA7\xA7_\xA7\xA7\xA7_\xA7\xA7\xA7\xA7_'",
-                    "shell-always-show",
-                ),
-                (
-                    b"'_'$'\\300''_'$'\\247\\247''_'$'\\247\\247\\247''_'$'\\247\\247\\247\\247''_'",
-                    "shell-escape",
-                ),
-                (
-                    b"'_'$'\\300''_'$'\\247\\247''_'$'\\247\\247\\247''_'$'\\247\\247\\247\\247''_'",
-                    "shell-escape-always",
-                ),
-            ],
-        );
-
-        // invalid multi-byte sequences that start valid
-        check_names_raw_both(
-            &[first2byte, ascii],
-            &[
-                (b"?_", "literal"),
-                (b"\xC2_", "literal-show"),
-                (b"\\302_", "escape"),
-                (b"\"\\302_\"", "c"),
-                (b"?_", "shell"),
-                (b"\xC2_", "shell-show"),
-                (b"'?_'", "shell-always"),
-                (b"'\xC2_'", "shell-always-show"),
-                (b"''$'\\302''_'", "shell-escape"),
-                (b"''$'\\302''_'", "shell-escape-always"),
-            ],
-        );
-
-        let input = &[first2byte, first2byte, continuation];
-        check_names_raw_both(input, &[(b"\xC2\xC2\xA7", "literal-show")]);
-        // Different expected output for UTF-8 and ASCII in these cases.
-        check_names_encoding_raw(
-            UEncoding::Utf8,
-            input,
-            &[
-                (b"?\xC2\xA7", "literal"),
-                (b"\\302\xC2\xA7", "escape"),
-                (b"\"\\302\xC2\xA7\"", "c"),
-                (b"?\xC2\xA7", "shell"),
-                (b"\xC2\xC2\xA7", "shell-show"),
-                (b"'?\xC2\xA7'", "shell-always"),
-                (b"'\xC2\xC2\xA7'", "shell-always-show"),
-                (b"''$'\\302''\xC2\xA7'", "shell-escape"),
-                (b"''$'\\302''\xC2\xA7'", "shell-escape-always"),
-            ],
-        );
-        check_names_encoding_raw(
-            UEncoding::Ascii,
-            input,
-            &[
-                (b"???", "literal"),
-                (b"\\302\\302\\247", "escape"),
-                (b"\"\\302\\302\\247\"", "c"),
-                (b"???", "shell"),
-                (b"\xC2\xC2\xA7", "shell-show"),
-                (b"'???'", "shell-always"),
-                (b"'\xC2\xC2\xA7'", "shell-always-show"),
-                (b"''$'\\302\\302\\247'", "shell-escape"),
-                (b"''$'\\302\\302\\247'", "shell-escape-always"),
-            ],
-        );
-
-        check_names_raw_both(
-            &[first3byte, continuation, ascii],
-            &[
-                (b"??_", "literal"),
-                (b"\xE0\xA7_", "literal-show"),
-                (b"\\340\\247_", "escape"),
-                (b"\"\\340\\247_\"", "c"),
-                (b"??_", "shell"),
-                (b"\xE0\xA7_", "shell-show"),
-                (b"'??_'", "shell-always"),
-                (b"'\xE0\xA7_'", "shell-always-show"),
-                (b"''$'\\340\\247''_'", "shell-escape"),
-                (b"''$'\\340\\247''_'", "shell-escape-always"),
-            ],
-        );
-        check_names_raw_both(
-            &[first4byte, continuation, continuation, ascii],
-            &[
-                (b"???_", "literal"),
-                (b"\xF0\xA7\xA7_", "literal-show"),
-                (b"\\360\\247\\247_", "escape"),
-                (b"\"\\360\\247\\247_\"", "c"),
-                (b"???_", "shell"),
-                (b"\xF0\xA7\xA7_", "shell-show"),
-                (b"'???_'", "shell-always"),
-                (b"'\xF0\xA7\xA7_'", "shell-always-show"),
-                (b"''$'\\360\\247\\247''_'", "shell-escape"),
-                (b"''$'\\360\\247\\247''_'", "shell-escape-always"),
-            ],
-        );
-    }
-
-    #[test]
-    fn test_question_mark() {
-        // A question mark must force quotes in shell and shell-always, unless
-        // it is in place of a control character (that case is already covered
-        // in other tests)
-        check_names_both(
-            "one?two",
-            &[
-                ("one?two", "literal"),
-                ("one?two", "literal-show"),
-                ("one?two", "escape"),
-                ("\"one?two\"", "c"),
-                ("'one?two'", "shell"),
-                ("'one?two'", "shell-show"),
-                ("'one?two'", "shell-always"),
-                ("'one?two'", "shell-always-show"),
-                ("'one?two'", "shell-escape"),
-                ("'one?two'", "shell-escape-always"),
-            ],
-        );
-    }
-
-    #[test]
-    fn test_backslash() {
-        // Escaped in C-style, but not in Shell-style escaping
-        check_names_both(
-            "one\\two",
-            &[
-                ("one\\two", "literal"),
-                ("one\\two", "literal-show"),
-                ("one\\\\two", "escape"),
-                ("\"one\\\\two\"", "c"),
-                ("'one\\two'", "shell"),
-                ("'one\\two'", "shell-always"),
-                ("'one\\two'", "shell-escape"),
-                ("'one\\two'", "shell-escape-always"),
-            ],
-        );
-    }
-
-    #[test]
-    fn test_tilde_and_hash() {
-        check_names_both("~", &[("'~'", "shell"), ("'~'", "shell-escape")]);
-        check_names_both(
-            "~name",
-            &[("'~name'", "shell"), ("'~name'", "shell-escape")],
-        );
-        check_names_both(
-            "some~name",
-            &[("some~name", "shell"), ("some~name", "shell-escape")],
-        );
-        check_names_both("name~", &[("name~", "shell"), ("name~", "shell-escape")]);
-
-        check_names_both("#", &[("'#'", "shell"), ("'#'", "shell-escape")]);
-        check_names_both(
-            "#name",
-            &[("'#name'", "shell"), ("'#name'", "shell-escape")],
-        );
-        check_names_both(
-            "some#name",
-            &[("some#name", "shell"), ("some#name", "shell-escape")],
-        );
-        check_names_both("name#", &[("name#", "shell"), ("name#", "shell-escape")]);
-    }
-
-    #[test]
-    fn test_special_chars_in_double_quotes() {
-        check_names_both(
-            "can'$t",
-            &[
-                ("'can'\\''$t'", "shell"),
-                ("'can'\\''$t'", "shell-always"),
-                ("'can'\\''$t'", "shell-escape"),
-                ("'can'\\''$t'", "shell-escape-always"),
-            ],
-        );
-
-        check_names_both(
-            "can'`t",
-            &[
-                ("'can'\\''`t'", "shell"),
-                ("'can'\\''`t'", "shell-always"),
-                ("'can'\\''`t'", "shell-escape"),
-                ("'can'\\''`t'", "shell-escape-always"),
-            ],
-        );
-
-        check_names_both(
-            "can'\\t",
-            &[
-                ("'can'\\''\\t'", "shell"),
-                ("'can'\\''\\t'", "shell-always"),
-                ("'can'\\''\\t'", "shell-escape"),
-                ("'can'\\''\\t'", "shell-escape-always"),
-            ],
-        );
-    }
-
-    #[test]
-    fn test_quoting_style_display() {
-        let style = QuotingStyle::SHELL_ESCAPE;
-        assert_eq!(format!("{style}"), "shell-escape");
-
-        let style = QuotingStyle::SHELL_QUOTE;
-        assert_eq!(format!("{style}"), "shell-always-quote");
-
-        let style = QuotingStyle::SHELL.show_control(true);
-        assert_eq!(format!("{style}"), "shell-show-control");
-
-        let style = QuotingStyle::C_DOUBLE;
-        assert_eq!(format!("{style}"), "C");
-
-        let style = QuotingStyle::Literal {
-            show_control: false,
-        };
-        assert_eq!(format!("{style}"), "literal");
-    }
-
-    #[test]
-    fn test_quotes_display() {
-        assert_eq!(format!("{}", Quotes::None), "None");
-        assert_eq!(format!("{}", Quotes::Single), "Single");
-        assert_eq!(format!("{}", Quotes::Double), "Double");
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/quoting_style/shell_quoter.rs b/registry/native/stubs/uucore/src/lib/features/quoting_style/shell_quoter.rs
deleted file mode 100644
index bb531b50d..000000000
--- a/registry/native/stubs/uucore/src/lib/features/quoting_style/shell_quoter.rs
+++ /dev/null
@@ -1,317 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-use super::{EscapeState, EscapedChar, Quoter, Quotes};
-
-// These are characters with special meaning in the shell (e.g. bash). The
-// first const contains characters that only have a special meaning when they
-// appear at the beginning of a name.
-const SPECIAL_SHELL_CHARS_START: &[u8] = b"~#";
-
-// Escaped and NonEscaped shell quoting strategies are very different.
-// Therefore, we are using separate Quoter structures for each of them.
-
-pub(super) struct NonEscapedShellQuoter<'a> {
-    // INIT
-    /// Original name.
-    reference: &'a [u8],
-
-    /// The quotes to be used if necessary
-    quotes: Quotes,
-
-    /// Whether to show control and non-unicode characters, or replace them
-    /// with `?`.
-    show_control: bool,
-
-    // INTERNAL STATE
-    /// Whether the name should be quoted.
-    must_quote: bool,
-
-    buffer: Vec<u8>,
-}
-
-impl<'a> NonEscapedShellQuoter<'a> {
-    pub fn new(
-        reference: &'a [u8],
-        show_control: bool,
-        always_quote: bool,
-        dirname: bool,
-        size_hint: usize,
-    ) -> Self {
-        let (quotes, must_quote) = initial_quoting(reference, dirname, always_quote, false);
-        Self {
-            reference,
-            quotes,
-            show_control,
-            must_quote,
-            buffer: Vec::with_capacity(size_hint),
-        }
-    }
-}
-
-impl Quoter for NonEscapedShellQuoter<'_> {
-    fn push_char(&mut self, input: char) {
-        let escaped = EscapedChar::new_shell(input, false, self.quotes);
-
-        let escaped = if self.show_control {
-            escaped
-        } else {
-            escaped.hide_control()
-        };
-
-        match escaped.state {
-            EscapeState::Backslash('\'') => self.buffer.extend(b"'\\''"),
-            EscapeState::ForceQuote(x) => {
-                self.must_quote = true;
-                self.buffer.extend(x.to_string().as_bytes());
-            }
-            _ => {
-                self.buffer.extend(escaped.collect::<String>().as_bytes());
-            }
-        }
-    }
-
-    fn push_invalid(&mut self, input: &[u8]) {
-        if self.show_control {
-            self.buffer.extend(input);
-        } else {
-            self.buffer.extend(std::iter::repeat_n(b'?', input.len()));
-        }
-    }
-
-    fn finalize(self: Box<Self>) -> Vec<u8> {
-        finalize_shell_quoter(self.buffer, self.reference, self.must_quote, self.quotes)
-    }
-}
-
-// We need to keep track of whether we are in a dollar expression
-// because e.g. \b\n is escaped as $'\b\n' and not like $'b'$'n'
-pub(super) struct EscapedShellQuoter<'a> {
-    // INIT
-    /// Original name.
-    reference: &'a [u8],
-
-    /// The quotes to be used if necessary
-    quotes: Quotes,
-
-    // INTERNAL STATE
-    /// Whether the name should be quoted.
-    must_quote: bool,
-
-    /// Whether we are currently in a dollar escaped environment.
-    in_dollar: bool,
-
-    buffer: Vec<u8>,
-}
-
-impl<'a> EscapedShellQuoter<'a> {
-    pub fn new(reference: &'a [u8], always_quote: bool, dirname: bool, size_hint: usize) -> Self {
-        let (quotes, must_quote) = initial_quoting(reference, dirname, always_quote, true);
-        Self {
-            reference,
-            quotes,
-            must_quote,
-            in_dollar: false,
-            buffer: Vec::with_capacity(size_hint),
-        }
-    }
-
-    fn enter_dollar(&mut self) {
-        if !self.in_dollar {
-            self.buffer.extend(b"'$'");
-            self.in_dollar = true;
-        }
-    }
-
-    fn exit_dollar(&mut self) {
-        if self.in_dollar {
-            self.buffer.extend(b"''");
-            self.in_dollar = false;
-        }
-    }
-}
-
-impl Quoter for EscapedShellQuoter<'_> {
-    fn push_char(&mut self, input: char) {
-        let escaped = EscapedChar::new_shell(input, true, self.quotes);
-        match escaped.state {
-            EscapeState::Char(x) => {
-                self.exit_dollar();
-                self.buffer.extend(x.to_string().as_bytes());
-            }
-            EscapeState::ForceQuote(x) => {
-                self.exit_dollar();
-                self.must_quote = true;
-                self.buffer.extend(x.to_string().as_bytes());
-            }
-            // Single quotes are not put in dollar expressions, but are escaped
-            // if the string also contains double quotes. In that case, they
-            // must be handled separately.
-            EscapeState::Backslash('\'') => {
-                self.must_quote = true;
-                self.in_dollar = false;
-                self.buffer.extend(b"'\\''");
-            }
-            _ => {
-                self.enter_dollar();
-                self.must_quote = true;
-                self.buffer.extend(escaped.collect::<String>().as_bytes());
-            }
-        }
-    }
-
-    fn push_invalid(&mut self, input: &[u8]) {
-        // Early return on empty inputs.
-        if input.is_empty() {
-            return;
-        }
-
-        self.enter_dollar();
-        self.must_quote = true;
-        self.buffer.extend(
-            input
-                .iter()
-                .flat_map(|b| EscapedChar::new_octal(*b))
-                .collect::<String>()
-                .as_bytes(),
-        );
-    }
-
-    fn finalize(self: Box<Self>) -> Vec<u8> {
-        finalize_shell_quoter(self.buffer, self.reference, self.must_quote, self.quotes)
-    }
-}
-
-/// Deduce the initial quoting status from the provided information
-fn initial_quoting(
-    input: &[u8],
-    dirname: bool,
-    always_quote: bool,
-    check_control_chars: bool,
-) -> (Quotes, bool) {
-    let has_special_chars = input.iter().any(|c| {
-        shell_escaped_char_set(dirname).contains(c) || (check_control_chars && c.is_ascii_control())
-    });
-
-    if has_special_chars {
-        (Quotes::Single, true)
-    } else if input.contains(&b'\'') {
-        (Quotes::Double, true)
-    } else if always_quote || input.is_empty() {
-        (Quotes::Single, true)
-    } else {
-        (Quotes::Single, false)
-    }
-}
-
-/// Check whether `bytes` starts with any byte in `pattern`.
-fn bytes_start_with(bytes: &[u8], pattern: &[u8]) -> bool {
-    !bytes.is_empty() && pattern.contains(&bytes[0])
-}
-
-/// Return a set of characters that implies quoting of the word in
-/// shell-quoting mode.
-fn shell_escaped_char_set(is_dirname: bool) -> &'static [u8] {
-    const ESCAPED_CHARS: &[u8] = b":\"`$\\^\n\t\r=";
-    // the ':' colon character only induce quoting in the
-    // context of ls displaying a directory name before listing its content.
-    // (e.g. with the recursive flag -R)
-    let start_index = usize::from(!is_dirname);
-    &ESCAPED_CHARS[start_index..]
-}
-
-fn finalize_shell_quoter(
-    buffer: Vec<u8>,
-    reference: &[u8],
-    must_quote: bool,
-    quotes: Quotes,
-) -> Vec<u8> {
-    let contains_quote_chars = must_quote || bytes_start_with(reference, SPECIAL_SHELL_CHARS_START);
-
-    if must_quote | contains_quote_chars && quotes != Quotes::None {
-        let mut quoted = Vec::<u8>::with_capacity(buffer.len() + 2);
-        let quote = if quotes == Quotes::Single {
-            b'\''
-        } else {
-            b'"'
-        };
-        quoted.push(quote);
-        quoted.extend(buffer);
-        quoted.push(quote);
-        quoted
-    } else {
-        buffer
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn test_initial_quoting() {
-        // Control chars (0-31 and 0x7F) force single quotes in escape mode
-        assert_eq!(
-            initial_quoting(b"\x01", false, false, true),
-            (Quotes::Single, true)
-        );
-
-        // Control + quote uses single quotes (segmented) in escape mode
-        assert_eq!(
-            initial_quoting(b"\x01'\x01", false, false, true),
-            (Quotes::Single, true)
-        );
-
-        // Simple quote uses double quotes in escape mode
-        assert_eq!(
-            initial_quoting(b"a'b", false, false, true),
-            (Quotes::Double, true)
-        );
-
-        // Shell special chars force single quotes in escape mode
-        assert_eq!(
-            initial_quoting(b"test$var", false, false, true),
-            (Quotes::Single, true)
-        );
-        assert_eq!(
-            initial_quoting(b"test\nline", false, false, true),
-            (Quotes::Single, true)
-        );
-
-        // Empty string forces quotes in escape mode
-        assert_eq!(
-            initial_quoting(b"", false, false, true),
-            (Quotes::Single, true)
-        );
-
-        // Always quote flag works in escape mode
-        assert_eq!(
-            initial_quoting(b"normal", false, true, true),
-            (Quotes::Single, true)
-        );
-
-        // Normal text doesn't need quoting in escape mode
-        assert_eq!(
-            initial_quoting(b"hello", false, false, true),
-            (Quotes::Single, false)
-        );
-
-        // Dirname affects colon handling in escape mode
-        assert_eq!(
-            initial_quoting(b"dir:name", true, false, true),
-            (Quotes::Single, true)
-        );
-        assert_eq!(
-            initial_quoting(b"file:name", false, false, true),
-            (Quotes::Single, false)
-        );
-
-        // Control chars ignored in non-escape mode
-        assert_eq!(
-            initial_quoting(b"\x01", false, false, false),
-            (Quotes::Single, false)
-        );
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/ranges.rs b/registry/native/stubs/uucore/src/lib/features/ranges.rs
deleted file mode 100644
index c2c06057c..000000000
--- a/registry/native/stubs/uucore/src/lib/features/ranges.rs
+++ /dev/null
@@ -1,277 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore (ToDO) inval
-
-//! A module for handling ranges of values.
-
-use std::str::FromStr;
-
-use crate::display::Quotable;
-
-/// A range of values
-#[derive(PartialEq, Eq, PartialOrd, Ord, Debug)]
-pub struct Range {
-    /// The lower bound of the range
-    pub low: usize,
-
-    /// The upper bound of the range
-    pub high: usize,
-}
-
-impl FromStr for Range {
-    type Err = &'static str;
-
-    /// Parse a string of the form `a-b` into a `Range`
-    ///
-    /// ```
-    /// use std::str::FromStr;
-    /// use uucore::ranges::Range;
-    /// assert_eq!(Range::from_str("5"), Ok(Range { low: 5, high: 5 }));
-    /// assert_eq!(Range::from_str("4-"), Ok(Range { low: 4, high: usize::MAX - 1 }));
-    /// assert_eq!(Range::from_str("-4"), Ok(Range { low: 1, high: 4 }));
-    /// assert_eq!(Range::from_str("2-4"), Ok(Range { low: 2, high: 4 }));
-    /// assert!(Range::from_str("0-4").is_err());
-    /// assert!(Range::from_str("4-2").is_err());
-    /// assert!(Range::from_str("-").is_err());
-    /// assert!(Range::from_str("a").is_err());
-    /// assert!(Range::from_str("a-b").is_err());
-    /// ```
-    fn from_str(s: &str) -> Result<Self, &'static str> {
-        fn parse(s: &str) -> Result<usize, &'static str> {
-            match s.parse::<usize>() {
-                Ok(0) => Err("fields and positions are numbered from 1"),
-                // GNU fails when we are at the limit. Match their behavior
-                Ok(n) if n == usize::MAX => Err("byte/character offset is too large"),
-                Ok(n) => Ok(n),
-                Err(_) => Err("failed to parse range"),
-            }
-        }
-
-        Ok(match s.split_once('-') {
-            None => {
-                let n = parse(s)?;
-                Self { low: n, high: n }
-            }
-            Some(("", "")) => return Err("invalid range with no endpoint"),
-            Some((low, "")) => Self {
-                low: parse(low)?,
-                high: usize::MAX - 1,
-            },
-            Some(("", high)) => Self {
-                low: 1,
-                high: parse(high)?,
-            },
-            Some((low, high)) => {
-                let (low, high) = (parse(low)?, parse(high)?);
-                if low <= high {
-                    Self { low, high }
-                } else {
-                    return Err("high end of range less than low end");
-                }
-            }
-        })
-    }
-}
-
-impl Range {
-    /// Parse a list of ranges separated by commas and/or spaces
-    pub fn from_list(list: &str) -> Result<Vec<Self>, String> {
-        let mut ranges = Vec::new();
-
-        for item in list.split(&[',', ' ']) {
-            let range_item = FromStr::from_str(item)
-                .map_err(|e| format!("range {} was invalid: {e}", item.quote()))?;
-            ranges.push(range_item);
-        }
-
-        Ok(Self::merge(ranges))
-    }
-
-    /// Merge any overlapping ranges. Adjacent ranges are *NOT* merged.
-    ///
-    /// Is guaranteed to return only disjoint ranges in a sorted order.
-    fn merge(mut ranges: Vec<Self>) -> Vec<Self> {
-        ranges.sort();
-
-        let mut merged: Vec<Self> = Vec::with_capacity(ranges.len());
-        for range in ranges {
-            if let Some(previous) = merged.last_mut() {
-                if range.low <= previous.high {
-                    previous.high = previous.high.max(range.high);
-                    continue;
-                }
-            }
-
-            merged.push(range);
-        }
-        merged
-    }
-}
-
-/// Calculate the complement of the given ranges.
-pub fn complement(ranges: &[Range]) -> Vec<Range> {
-    let mut prev_high = 0;
-    let mut complements = Vec::with_capacity(ranges.len() + 1);
-
-    for range in ranges {
-        if range.low > prev_high + 1 {
-            complements.push(Range {
-                low: prev_high + 1,
-                high: range.low - 1,
-            });
-        }
-        prev_high = range.high;
-    }
-
-    if prev_high < usize::MAX - 1 {
-        complements.push(Range {
-            low: prev_high + 1,
-            high: usize::MAX - 1,
-        });
-    }
-
-    complements
-}
-
-/// Test if at least one of the given Ranges contain the supplied value.
-///
-/// Examples:
-///
-/// ```
-/// let ranges = uucore::ranges::Range::from_list("11,2,6-8").unwrap();
-///
-/// assert!(!uucore::ranges::contain(&ranges, 0));
-/// assert!(!uucore::ranges::contain(&ranges, 1));
-/// assert!(!uucore::ranges::contain(&ranges, 5));
-/// assert!(!uucore::ranges::contain(&ranges, 10));
-///
-/// assert!(uucore::ranges::contain(&ranges, 2));
-/// assert!(uucore::ranges::contain(&ranges, 6));
-/// assert!(uucore::ranges::contain(&ranges, 7));
-/// assert!(uucore::ranges::contain(&ranges, 8));
-/// assert!(uucore::ranges::contain(&ranges, 11));
-/// ```
-pub fn contain(ranges: &[Range], n: usize) -> bool {
-    for range in ranges {
-        if n >= range.low && n <= range.high {
-            return true;
-        }
-    }
-
-    false
-}
-
-#[cfg(test)]
-mod test {
-    use super::{Range, complement};
-    use std::str::FromStr;
-
-    fn m(a: Vec<Range>, b: &[Range]) {
-        assert_eq!(Range::merge(a), b);
-    }
-
-    fn r(low: usize, high: usize) -> Range {
-        Range { low, high }
-    }
-
-    #[test]
-    fn merging() {
-        // Single element
-        m(vec![r(1, 2)], &[r(1, 2)]);
-
-        // Disjoint in wrong order
-        m(vec![r(4, 5), r(1, 2)], &[r(1, 2), r(4, 5)]);
-
-        // Two elements must be merged
-        m(vec![r(1, 3), r(2, 4), r(6, 7)], &[r(1, 4), r(6, 7)]);
-
-        // Two merges and a duplicate
-        m(
-            vec![r(1, 3), r(6, 7), r(2, 4), r(6, 7)],
-            &[r(1, 4), r(6, 7)],
-        );
-
-        // One giant
-        m(
-            vec![
-                r(110, 120),
-                r(10, 20),
-                r(100, 200),
-                r(130, 140),
-                r(150, 160),
-            ],
-            &[r(10, 20), r(100, 200)],
-        );
-
-        // Last one joins the previous two
-        m(vec![r(10, 20), r(30, 40), r(20, 30)], &[r(10, 40)]);
-
-        m(
-            vec![r(10, 20), r(30, 40), r(50, 60), r(20, 30)],
-            &[r(10, 40), r(50, 60)],
-        );
-
-        // Don't merge adjacent ranges
-        m(vec![r(1, 3), r(4, 6)], &[r(1, 3), r(4, 6)]);
-    }
-
-    #[test]
-    fn merging_overlapping_chain() {
-        let ranges = (1..=1000).map(|i| r(i, i + 1)).collect();
-
-        m(ranges, &[r(1, 1001)]);
-    }
-
-    #[test]
-    fn complementing() {
-        // Simple
-        assert_eq!(complement(&[r(3, 4)]), vec![r(1, 2), r(5, usize::MAX - 1)]);
-
-        // With start
-        assert_eq!(
-            complement(&[r(1, 3), r(6, 10)]),
-            vec![r(4, 5), r(11, usize::MAX - 1)]
-        );
-
-        // With end
-        assert_eq!(
-            complement(&[r(2, 4), r(6, usize::MAX - 1)]),
-            vec![r(1, 1), r(5, 5)]
-        );
-
-        // With start and end
-        assert_eq!(complement(&[r(1, 4), r(6, usize::MAX - 1)]), vec![r(5, 5)]);
-    }
-
-    #[test]
-    fn test_from_str() {
-        assert_eq!(Range::from_str("5"), Ok(Range { low: 5, high: 5 }));
-        assert_eq!(Range::from_str("3-5"), Ok(Range { low: 3, high: 5 }));
-        assert_eq!(
-            Range::from_str("5-3"),
-            Err("high end of range less than low end")
-        );
-        assert_eq!(Range::from_str("-"), Err("invalid range with no endpoint"));
-        assert_eq!(
-            Range::from_str("3-"),
-            Ok(Range {
-                low: 3,
-                high: usize::MAX - 1
-            })
-        );
-        assert_eq!(Range::from_str("-5"), Ok(Range { low: 1, high: 5 }));
-        assert_eq!(
-            Range::from_str("0"),
-            Err("fields and positions are numbered from 1")
-        );
-
-        let max_value = format!("{}", usize::MAX);
-        assert_eq!(
-            Range::from_str(&max_value),
-            Err("byte/character offset is too large")
-        );
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/ringbuffer.rs b/registry/native/stubs/uucore/src/lib/features/ringbuffer.rs
deleted file mode 100644
index 68e86b6a8..000000000
--- a/registry/native/stubs/uucore/src/lib/features/ringbuffer.rs
+++ /dev/null
@@ -1,141 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-//! A fixed-size ring buffer.
-use std::collections::VecDeque;
-
-/// A fixed-size ring buffer backed by a `VecDeque`.
-///
-/// If the ring buffer is not full, then calling the [`push_back`]
-/// method appends elements, as in a [`VecDeque`]. If the ring buffer
-/// is full, then calling [`push_back`] removes the element at the
-/// front of the buffer (in a first-in, first-out manner) before
-/// appending the new element to the back of the buffer.
-///
-/// Use [`from_iter`] to take the last `size` elements from an
-/// iterator.
-///
-/// # Examples
-///
-/// After exceeding the size limit, the oldest elements are dropped in
-/// favor of the newest element:
-///
-/// ```rust,ignore
-/// let mut buffer: RingBuffer<u8> = RingBuffer::new(2);
-/// buffer.push_back(0);
-/// buffer.push_back(1);
-/// buffer.push_back(2);
-/// assert_eq!(vec![1, 2], buffer.data);
-/// ```
-///
-/// Take the last `n` elements from an iterator:
-///
-/// ```rust,ignore
-/// let iter = [0, 1, 2].iter();
-/// let actual = RingBuffer::from_iter(iter, 2).data;
-/// let expected = VecDeque::from_iter([1, 2].iter());
-/// assert_eq!(expected, actual);
-/// ```
-///
-/// [`push_back`]: struct.RingBuffer.html#method.push_back
-/// [`from_iter`]: struct.RingBuffer.html#method.from_iter
-pub struct RingBuffer<T> {
-    /// The data stored in the ring buffer.
-    pub data: VecDeque<T>,
-}
-
-impl<T> RingBuffer<T> {
-    /// Create a new ring buffer with a maximum size of `size`.
-    pub fn new(size: usize) -> Self {
-        Self {
-            data: VecDeque::with_capacity(size),
-        }
-    }
-
-    /// Create a new ring buffer from an iterator.
-    pub fn from_iter(iter: impl Iterator<Item = T>, size: usize) -> Self {
-        let mut ring_buffer = Self::new(size);
-        for value in iter {
-            ring_buffer.push_back(value);
-        }
-        ring_buffer
-    }
-
-    /// Append a value to the end of the ring buffer.
-    ///
-    /// If the ring buffer is not full, this method return [`None`]. If
-    /// the ring buffer is full, appending a new element will cause the
-    /// oldest element to be evicted. In that case this method returns
-    /// that element, or `None`.
-    ///
-    /// In the special case where the size limit is zero, each call to
-    /// this method with input `value` returns `Some(value)`, because
-    /// the input is immediately evicted.
-    ///
-    /// # Examples
-    ///
-    /// Appending an element when the buffer is full returns the oldest
-    /// element:
-    ///
-    /// ```rust,ignore
-    /// let mut buf = RingBuffer::new(3);
-    /// assert_eq!(None, buf.push_back(0));
-    /// assert_eq!(None, buf.push_back(1));
-    /// assert_eq!(None, buf.push_back(2));
-    /// assert_eq!(Some(0), buf.push_back(3));
-    /// ```
-    ///
-    /// If the size limit is zero, then this method always returns the
-    /// input value:
-    ///
-    /// ```rust,ignore
-    /// let mut buf = RingBuffer::new(0);
-    /// assert_eq!(Some(0), buf.push_back(0));
-    /// assert_eq!(Some(1), buf.push_back(1));
-    /// assert_eq!(Some(2), buf.push_back(2));
-    /// ```
-    pub fn push_back(&mut self, value: T) -> Option<T> {
-        if self.data.capacity() == 0 {
-            return Some(value);
-        }
-        let result = if self.data.len() == self.data.capacity() {
-            self.data.pop_front()
-        } else {
-            None
-        };
-        self.data.push_back(value);
-        result
-    }
-}
-
-#[cfg(test)]
-mod tests {
-
-    use crate::ringbuffer::RingBuffer;
-    use std::collections::VecDeque;
-
-    #[test]
-    fn test_size_limit_zero() {
-        let mut buf = RingBuffer::new(0);
-        assert_eq!(Some(0), buf.push_back(0));
-        assert_eq!(Some(1), buf.push_back(1));
-        assert_eq!(Some(2), buf.push_back(2));
-    }
-
-    #[test]
-    fn test_evict_oldest() {
-        let mut buf = RingBuffer::new(2);
-        assert_eq!(None, buf.push_back(0));
-        assert_eq!(None, buf.push_back(1));
-        assert_eq!(Some(0), buf.push_back(2));
-    }
-
-    #[test]
-    fn test_from_iter() {
-        let iter = [0, 1, 2].iter();
-        let actual = RingBuffer::from_iter(iter, 2).data;
-        let expected: VecDeque<&i32> = [1, 2].iter().collect();
-        assert_eq!(expected, actual);
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/safe_traversal.rs b/registry/native/stubs/uucore/src/lib/features/safe_traversal.rs
deleted file mode 100644
index 5c17343ad..000000000
--- a/registry/native/stubs/uucore/src/lib/features/safe_traversal.rs
+++ /dev/null
@@ -1,1266 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-//
-// Safe directory traversal using openat() and related syscalls
-// This module provides TOCTOU-safe filesystem operations for recursive traversal
-//
-// Available on Unix
-//
-// spell-checker:ignore CLOEXEC RDONLY TOCTOU closedir dirp fdopendir fstatat openat REMOVEDIR unlinkat smallfile
-// spell-checker:ignore RAII dirfd fchownat fchown FchmodatFlags fchmodat fchmod mkdirat CREAT WRONLY ELOOP ENOTDIR
-// spell-checker:ignore atimensec mtimensec ctimensec
-
-#[cfg(test)]
-use std::os::unix::ffi::OsStringExt;
-
-use std::ffi::{CString, OsStr, OsString};
-use std::fs;
-use std::io;
-use std::os::unix::ffi::OsStrExt;
-use std::os::unix::io::{AsFd, AsRawFd, BorrowedFd, FromRawFd, IntoRawFd, OwnedFd, RawFd};
-use std::path::{Path, PathBuf};
-
-use nix::dir::Dir;
-use nix::fcntl::{OFlag, openat};
-use nix::libc;
-use nix::sys::stat::{FchmodatFlags, FileStat, Mode, fchmodat, fstatat, mkdirat};
-use nix::unistd::{Gid, Uid, UnlinkatFlags, fchown, fchownat, unlinkat};
-use os_display::Quotable;
-
-use crate::translate;
-
-/// Enum to specify symlink following behavior.
-///
-/// This replaces boolean `follow_symlinks` parameters for better readability
-/// at call sites. Instead of `open(path, true)`, use `open(path, SymlinkBehavior::Follow)`.
-#[derive(Debug, Clone, Copy, PartialEq, Eq, Default)]
-pub enum SymlinkBehavior {
-    /// Follow symlinks (resolve to their target)
-    #[default]
-    Follow,
-    /// Do not follow symlinks (operate on the symlink itself)
-    NoFollow,
-}
-
-impl SymlinkBehavior {
-    /// Returns `true` if symlinks should be followed
-    #[inline]
-    pub fn should_follow(self) -> bool {
-        matches!(self, Self::Follow)
-    }
-}
-
-impl From<bool> for SymlinkBehavior {
-    fn from(follow: bool) -> Self {
-        if follow { Self::Follow } else { Self::NoFollow }
-    }
-}
-
-// Custom error types for better error reporting
-#[derive(thiserror::Error, Debug)]
-pub enum SafeTraversalError {
-    #[error("{}", translate!("safe-traversal-error-path-contains-null"))]
-    PathContainsNull,
-
-    #[error("{}", translate!("safe-traversal-error-open-failed", "path" => path.quote(), "source" => source))]
-    OpenFailed {
-        path: PathBuf,
-        #[source]
-        source: io::Error,
-    },
-
-    #[error("{}", translate!("safe-traversal-error-stat-failed", "path" => path.quote(), "source" => source))]
-    StatFailed {
-        path: PathBuf,
-        #[source]
-        source: io::Error,
-    },
-
-    #[error("{}", translate!("safe-traversal-error-read-dir-failed", "path" => path.quote(), "source" => source))]
-    ReadDirFailed {
-        path: PathBuf,
-        #[source]
-        source: io::Error,
-    },
-
-    #[error("{}", translate!("safe-traversal-error-unlink-failed", "path" => path.quote(), "source" => source))]
-    UnlinkFailed {
-        path: PathBuf,
-        #[source]
-        source: io::Error,
-    },
-}
-
-impl From<SafeTraversalError> for io::Error {
-    fn from(err: SafeTraversalError) -> Self {
-        match err {
-            SafeTraversalError::PathContainsNull => Self::new(
-                io::ErrorKind::InvalidInput,
-                translate!("safe-traversal-error-path-contains-null"),
-            ),
-            SafeTraversalError::OpenFailed { source, .. } => source,
-            SafeTraversalError::StatFailed { source, .. } => source,
-            SafeTraversalError::ReadDirFailed { source, .. } => source,
-            SafeTraversalError::UnlinkFailed { source, .. } => source,
-        }
-    }
-}
-
-// Helper function to read directory entries using nix
-fn read_dir_entries(fd: &OwnedFd) -> io::Result<Vec<OsString>> {
-    let mut entries = Vec::new();
-
-    // Duplicate the fd for Dir (it takes ownership)
-    let dup_fd = nix::unistd::dup(fd).map_err(|e| io::Error::from_raw_os_error(e as i32))?;
-    let mut dir = Dir::from_fd(dup_fd).map_err(|e| io::Error::from_raw_os_error(e as i32))?;
-    for entry_result in dir.iter() {
-        let entry = entry_result.map_err(|e| io::Error::from_raw_os_error(e as i32))?;
-        let name = entry.file_name();
-        let name_os = OsStr::from_bytes(name.to_bytes());
-        if name_os != "." && name_os != ".." {
-            entries.push(name_os.to_os_string());
-        }
-    }
-
-    Ok(entries)
-}
-
-/// A directory file descriptor that enables safe traversal
-pub struct DirFd {
-    fd: OwnedFd,
-}
-
-impl DirFd {
-    /// Open a directory and return a file descriptor
-    ///
-    /// # Arguments
-    /// * `path` - The path to the directory to open
-    /// * `symlink_behavior` - Whether to follow symlinks when opening
-    pub fn open(path: &Path, symlink_behavior: SymlinkBehavior) -> io::Result<Self> {
-        let mut flags = OFlag::O_RDONLY | OFlag::O_DIRECTORY | OFlag::O_CLOEXEC;
-        if !symlink_behavior.should_follow() {
-            flags |= OFlag::O_NOFOLLOW;
-        }
-        let fd = nix::fcntl::open(path, flags, Mode::empty()).map_err(|e| {
-            SafeTraversalError::OpenFailed {
-                path: path.into(),
-                source: io::Error::from_raw_os_error(e as i32),
-            }
-        })?;
-        Ok(Self { fd })
-    }
-
-    /// Open a subdirectory relative to this directory
-    ///
-    /// # Arguments
-    /// * `name` - The name of the subdirectory to open
-    /// * `symlink_behavior` - Whether to follow symlinks when opening
-    pub fn open_subdir(&self, name: &OsStr, symlink_behavior: SymlinkBehavior) -> io::Result<Self> {
-        let name_cstr =
-            CString::new(name.as_bytes()).map_err(|_| SafeTraversalError::PathContainsNull)?;
-        let mut flags = OFlag::O_RDONLY | OFlag::O_DIRECTORY | OFlag::O_CLOEXEC;
-        if !symlink_behavior.should_follow() {
-            flags |= OFlag::O_NOFOLLOW;
-        }
-        let fd = openat(&self.fd, name_cstr.as_c_str(), flags, Mode::empty()).map_err(|e| {
-            SafeTraversalError::OpenFailed {
-                path: name.into(),
-                source: io::Error::from_raw_os_error(e as i32),
-            }
-        })?;
-        Ok(Self { fd })
-    }
-
-    /// Get raw stat data for a file relative to this directory
-    pub fn stat_at(&self, name: &OsStr, symlink_behavior: SymlinkBehavior) -> io::Result<FileStat> {
-        let name_cstr =
-            CString::new(name.as_bytes()).map_err(|_| SafeTraversalError::PathContainsNull)?;
-
-        let flags = if symlink_behavior.should_follow() {
-            nix::fcntl::AtFlags::empty()
-        } else {
-            nix::fcntl::AtFlags::AT_SYMLINK_NOFOLLOW
-        };
-
-        let stat = fstatat(&self.fd, name_cstr.as_c_str(), flags).map_err(|e| {
-            SafeTraversalError::StatFailed {
-                path: name.into(),
-                source: io::Error::from_raw_os_error(e as i32),
-            }
-        })?;
-
-        Ok(stat)
-    }
-
-    /// Get metadata for a file relative to this directory
-    pub fn metadata_at(
-        &self,
-        name: &OsStr,
-        symlink_behavior: SymlinkBehavior,
-    ) -> io::Result<Metadata> {
-        self.stat_at(name, symlink_behavior)
-            .map(Metadata::from_stat)
-    }
-
-    /// Get metadata for this directory
-    pub fn metadata(&self) -> io::Result<Metadata> {
-        self.fstat().map(Metadata::from_stat)
-    }
-
-    /// Get raw stat data for this directory
-    pub fn fstat(&self) -> io::Result<FileStat> {
-        let stat = nix::sys::stat::fstat(&self.fd).map_err(|e| SafeTraversalError::StatFailed {
-            path: translate!("safe-traversal-current-directory").into(),
-            source: io::Error::from_raw_os_error(e as i32),
-        })?;
-        Ok(stat)
-    }
-
-    /// Read directory entries
-    pub fn read_dir(&self) -> io::Result<Vec<OsString>> {
-        read_dir_entries(&self.fd).map_err(|e| {
-            SafeTraversalError::ReadDirFailed {
-                path: translate!("safe-traversal-directory").into(),
-                source: e,
-            }
-            .into()
-        })
-    }
-
-    /// Remove a file or empty directory relative to this directory
-    pub fn unlink_at(&self, name: &OsStr, is_dir: bool) -> io::Result<()> {
-        let name_cstr =
-            CString::new(name.as_bytes()).map_err(|_| SafeTraversalError::PathContainsNull)?;
-        let flags = if is_dir {
-            UnlinkatFlags::RemoveDir
-        } else {
-            UnlinkatFlags::NoRemoveDir
-        };
-
-        unlinkat(&self.fd, name_cstr.as_c_str(), flags).map_err(|e| {
-            SafeTraversalError::UnlinkFailed {
-                path: name.into(),
-                source: io::Error::from_raw_os_error(e as i32),
-            }
-        })?;
-
-        Ok(())
-    }
-
-    /// Change ownership of a file relative to this directory
-    /// Use uid/gid of None to keep the current value
-    pub fn chown_at(
-        &self,
-        name: &OsStr,
-        uid: Option<u32>,
-        gid: Option<u32>,
-        symlink_behavior: SymlinkBehavior,
-    ) -> io::Result<()> {
-        let name_cstr =
-            CString::new(name.as_bytes()).map_err(|_| SafeTraversalError::PathContainsNull)?;
-
-        let flags = if symlink_behavior.should_follow() {
-            nix::fcntl::AtFlags::empty()
-        } else {
-            nix::fcntl::AtFlags::AT_SYMLINK_NOFOLLOW
-        };
-
-        let uid = uid.map(Uid::from_raw);
-        let gid = gid.map(Gid::from_raw);
-
-        fchownat(&self.fd, name_cstr.as_c_str(), uid, gid, flags)
-            .map_err(|e| io::Error::from_raw_os_error(e as i32))?;
-
-        Ok(())
-    }
-
-    /// Change ownership of this directory
-    pub fn fchown(&self, uid: Option<u32>, gid: Option<u32>) -> io::Result<()> {
-        let uid = uid.map(Uid::from_raw);
-        let gid = gid.map(Gid::from_raw);
-
-        fchown(&self.fd, uid, gid).map_err(|e| io::Error::from_raw_os_error(e as i32))?;
-
-        Ok(())
-    }
-
-    /// Change mode of a file relative to this directory
-    pub fn chmod_at(
-        &self,
-        name: &OsStr,
-        mode: u32,
-        symlink_behavior: SymlinkBehavior,
-    ) -> io::Result<()> {
-        let flags = if symlink_behavior.should_follow() {
-            FchmodatFlags::FollowSymlink
-        } else {
-            FchmodatFlags::NoFollowSymlink
-        };
-
-        let mode = Mode::from_bits_truncate(mode as libc::mode_t);
-
-        let name_cstr =
-            CString::new(name.as_bytes()).map_err(|_| SafeTraversalError::PathContainsNull)?;
-
-        fchmodat(&self.fd, name_cstr.as_c_str(), mode, flags)
-            .map_err(|e| io::Error::from_raw_os_error(e as i32))?;
-
-        Ok(())
-    }
-
-    /// Change mode of this directory
-    pub fn fchmod(&self, mode: u32) -> io::Result<()> {
-        let mode = Mode::from_bits_truncate(mode as libc::mode_t);
-
-        nix::sys::stat::fchmod(&self.fd, mode)
-            .map_err(|e| io::Error::from_raw_os_error(e as i32))?;
-
-        Ok(())
-    }
-
-    /// Create a directory relative to this directory
-    pub fn mkdir_at(&self, name: &OsStr, mode: u32) -> io::Result<()> {
-        let name_cstr =
-            CString::new(name.as_bytes()).map_err(|_| SafeTraversalError::PathContainsNull)?;
-        let mode = Mode::from_bits_truncate(mode as libc::mode_t);
-
-        if let Err(e) = mkdirat(self.fd.as_fd(), name_cstr.as_c_str(), mode) {
-            let err = io::Error::from_raw_os_error(e as i32);
-            return Err(SafeTraversalError::OpenFailed {
-                path: name.into(),
-                source: err,
-            }
-            .into());
-        }
-        Ok(())
-    }
-
-    /// Open a file for writing relative to this directory
-    /// Creates the file if it doesn't exist, truncates if it does
-    pub fn open_file_at(&self, name: &OsStr) -> io::Result<fs::File> {
-        let name_cstr =
-            CString::new(name.as_bytes()).map_err(|_| SafeTraversalError::PathContainsNull)?;
-        let flags = OFlag::O_CREAT
-            | OFlag::O_WRONLY
-            | OFlag::O_TRUNC
-            | OFlag::O_CLOEXEC
-            | OFlag::O_NOFOLLOW;
-        let mode = Mode::from_bits_truncate(0o666); // Default file permissions
-
-        let fd: OwnedFd = openat(self.fd.as_fd(), name_cstr.as_c_str(), flags, mode)
-            .map_err(|e| io::Error::from_raw_os_error(e as i32))?;
-
-        // Convert OwnedFd to raw fd and create File
-        let raw_fd = fd.into_raw_fd();
-        Ok(unsafe { fs::File::from_raw_fd(raw_fd) })
-    }
-
-    /// Create a DirFd from an existing file descriptor (takes ownership)
-    pub fn from_raw_fd(fd: RawFd) -> io::Result<Self> {
-        if fd < 0 {
-            return Err(io::Error::new(
-                io::ErrorKind::InvalidInput,
-                translate!("safe-traversal-error-invalid-fd"),
-            ));
-        }
-        // SAFETY: We've verified fd >= 0, and the caller is transferring ownership
-        let owned_fd = unsafe { OwnedFd::from_raw_fd(fd) };
-        Ok(Self { fd: owned_fd })
-    }
-}
-
-/// Find the deepest existing real directory ancestor for a path.
-///
-/// Returns the existing ancestor path and a list of components that need to be created.
-/// Uses `symlink_metadata` to detect symlinks - symlinks are NOT followed and are
-/// treated as components that need to be created/replaced.
-fn find_existing_ancestor(path: &Path) -> io::Result<(PathBuf, Vec<OsString>)> {
-    let mut current = path.to_path_buf();
-    let mut components: Vec<OsString> = Vec::new();
-
-    loop {
-        // Use symlink_metadata to NOT follow symlinks
-        match fs::symlink_metadata(&current) {
-            Ok(meta) => {
-                if meta.is_dir() && !meta.file_type().is_symlink() {
-                    // Found a real directory (not a symlink to a directory)
-                    components.reverse();
-                    return Ok((current, components));
-                }
-                // It's a symlink, file, or other non-directory - treat as needing creation
-                // This ensures symlinks get replaced by open_or_create_subdir
-                if let Some(file_name) = current.file_name() {
-                    components.push(file_name.to_os_string());
-                }
-                if let Some(parent) = current.parent() {
-                    if parent.as_os_str().is_empty() {
-                        // Reached empty parent (for relative paths), use "."
-                        components.reverse();
-                        return Ok((PathBuf::from("."), components));
-                    }
-                    current = parent.to_path_buf();
-                } else {
-                    // Reached filesystem root
-                    let root = if path.is_absolute() {
-                        PathBuf::from("/")
-                    } else {
-                        PathBuf::from(".")
-                    };
-                    components.reverse();
-                    return Ok((root, components));
-                }
-            }
-            Err(e) if e.kind() == io::ErrorKind::NotFound => {
-                // Doesn't exist, record component and move up to parent
-                if let Some(file_name) = current.file_name() {
-                    components.push(file_name.to_os_string());
-                }
-                if let Some(parent) = current.parent() {
-                    if parent.as_os_str().is_empty() {
-                        // Reached empty parent (for relative paths), use "."
-                        components.reverse();
-                        return Ok((PathBuf::from("."), components));
-                    }
-                    current = parent.to_path_buf();
-                } else {
-                    // Reached filesystem root
-                    let root = if path.is_absolute() {
-                        PathBuf::from("/")
-                    } else {
-                        PathBuf::from(".")
-                    };
-                    components.reverse();
-                    return Ok((root, components));
-                }
-            }
-            Err(e) => return Err(e),
-        }
-    }
-}
-
-/// Open or create a subdirectory using fd-based operations only.
-///
-/// This is a helper function for `create_dir_all_safe` that handles a single
-/// path component. If a symlink exists where a directory should be, it is
-/// removed and replaced with a real directory.
-///
-/// # Arguments
-/// * `parent_fd` - The parent directory file descriptor
-/// * `name` - The name of the subdirectory to open or create
-/// * `mode` - The mode to use when creating a new directory
-///
-/// # Returns
-/// A DirFd for the subdirectory
-fn open_or_create_subdir(parent_fd: &DirFd, name: &OsStr, mode: u32) -> io::Result<DirFd> {
-    match parent_fd.stat_at(name, SymlinkBehavior::NoFollow) {
-        Ok(stat) => {
-            let file_type = (stat.st_mode as libc::mode_t) & libc::S_IFMT;
-            match file_type {
-                libc::S_IFDIR => parent_fd.open_subdir(name, SymlinkBehavior::NoFollow),
-                libc::S_IFLNK => {
-                    parent_fd.unlink_at(name, false)?;
-                    parent_fd.mkdir_at(name, mode)?;
-                    parent_fd.open_subdir(name, SymlinkBehavior::NoFollow)
-                }
-                _ => Err(io::Error::new(
-                    io::ErrorKind::AlreadyExists,
-                    format!(
-                        "path component exists but is not a directory: {}",
-                        name.display()
-                    ),
-                )),
-            }
-        }
-        Err(e) if e.kind() == io::ErrorKind::NotFound => {
-            parent_fd.mkdir_at(name, mode)?;
-            parent_fd.open_subdir(name, SymlinkBehavior::NoFollow)
-        }
-        Err(e) => Err(e),
-    }
-}
-
-/// Safely create all parent directories for a path using directory file descriptors.
-/// This prevents symlink race conditions by anchoring all operations to directory fds.
-///
-/// # Security
-/// This function prevents TOCTOU race conditions by:
-/// 1. Finding the deepest existing ancestor directory (path-based, but safe since it exists)
-/// 2. Opening that ancestor with a file descriptor
-/// 3. Creating all new directories using fd-based operations (mkdirat, openat with O_NOFOLLOW)
-///
-/// Once we have a fd for an existing ancestor, all subsequent operations use that fd
-/// as the anchor. If an attacker replaces a newly-created directory with a symlink,
-/// our openat with O_NOFOLLOW will fail, preventing the attack.
-///
-/// Existing symlinks in the path (like /var -> /private/var on macOS) are followed
-/// when finding the ancestor, which is safe since they already exist.
-///
-/// # Arguments
-/// * `path` - The path to create directories for
-/// * `mode` - The mode to use when creating new directories (e.g., 0o755). The actual
-///   mode will be modified by the process umask.
-///
-/// # Returns
-/// A DirFd for the final created directory, or the first existing parent if
-/// all directories already exist.
-#[cfg(unix)]
-pub fn create_dir_all_safe(path: &Path, mode: u32) -> io::Result<DirFd> {
-    let (existing_ancestor, components_to_create) = find_existing_ancestor(path)?;
-    let mut dir_fd = DirFd::open(&existing_ancestor, SymlinkBehavior::Follow)?;
-
-    for component in &components_to_create {
-        dir_fd = open_or_create_subdir(&dir_fd, component.as_os_str(), mode)?;
-    }
-
-    Ok(dir_fd)
-}
-
-impl AsRawFd for DirFd {
-    fn as_raw_fd(&self) -> RawFd {
-        self.fd.as_raw_fd()
-    }
-}
-
-impl AsFd for DirFd {
-    fn as_fd(&self) -> BorrowedFd<'_> {
-        self.fd.as_fd()
-    }
-}
-
-/// File information for tracking inodes
-#[derive(Debug, Clone, Hash, PartialEq, Eq)]
-pub struct FileInfo {
-    pub dev: u64,
-    pub ino: u64,
-}
-
-impl FileInfo {
-    pub fn from_stat(stat: &libc::stat) -> Self {
-        // Allow unnecessary cast because st_dev and st_ino have different types on different platforms
-        #[allow(clippy::unnecessary_cast)]
-        Self {
-            dev: stat.st_dev as u64,
-            ino: stat.st_ino as u64,
-        }
-    }
-
-    /// Create FileInfo from device and inode numbers
-    pub fn new(dev: u64, ino: u64) -> Self {
-        Self { dev, ino }
-    }
-
-    /// Get the device number
-    pub fn device(&self) -> u64 {
-        self.dev
-    }
-
-    /// Get the inode number
-    pub fn inode(&self) -> u64 {
-        self.ino
-    }
-}
-
-/// File type enumeration for better type safety
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum FileType {
-    Directory,
-    RegularFile,
-    Symlink,
-    Other,
-}
-
-impl FileType {
-    pub fn from_mode(mode: libc::mode_t) -> Self {
-        match mode & libc::S_IFMT {
-            libc::S_IFDIR => Self::Directory,
-            libc::S_IFREG => Self::RegularFile,
-            libc::S_IFLNK => Self::Symlink,
-            _ => Self::Other,
-        }
-    }
-
-    pub fn is_directory(self) -> bool {
-        matches!(self, Self::Directory)
-    }
-
-    pub fn is_regular_file(self) -> bool {
-        matches!(self, Self::RegularFile)
-    }
-
-    pub fn is_symlink(self) -> bool {
-        matches!(self, Self::Symlink)
-    }
-}
-
-/// Metadata wrapper for safer access to file information
-#[derive(Debug, Clone)]
-pub struct Metadata {
-    stat: FileStat,
-}
-
-impl Metadata {
-    pub fn from_stat(stat: FileStat) -> Self {
-        Self { stat }
-    }
-
-    pub fn file_type(&self) -> FileType {
-        FileType::from_mode(self.stat.st_mode as libc::mode_t)
-    }
-
-    pub fn file_info(&self) -> FileInfo {
-        FileInfo::from_stat(&self.stat)
-    }
-
-    // st_size type varies by platform (i64 vs u64)
-    #[allow(clippy::unnecessary_cast)]
-    pub fn size(&self) -> u64 {
-        self.stat.st_size as u64
-    }
-
-    // st_mode type varies by platform (u16 on macOS, u32 on Linux)
-    #[allow(clippy::unnecessary_cast)]
-    pub fn mode(&self) -> u32 {
-        self.stat.st_mode as u32
-    }
-
-    pub fn nlink(&self) -> u64 {
-        // st_nlink type varies by platform (u16 on FreeBSD, u32/u64 on others)
-        #[allow(clippy::unnecessary_cast)]
-        {
-            self.stat.st_nlink as u64
-        }
-    }
-
-    /// Compatibility methods to match std::fs::Metadata interface
-    pub fn is_dir(&self) -> bool {
-        self.file_type().is_directory()
-    }
-
-    pub fn len(&self) -> u64 {
-        self.size()
-    }
-
-    pub fn is_empty(&self) -> bool {
-        self.len() == 0
-    }
-}
-
-// Add MetadataExt trait implementation for compatibility
-impl std::os::unix::fs::MetadataExt for Metadata {
-    // st_dev type varies by platform (i32 on macOS, u64 on Linux)
-    #[allow(clippy::unnecessary_cast)]
-    fn dev(&self) -> u64 {
-        self.stat.st_dev as u64
-    }
-
-    fn ino(&self) -> u64 {
-        // st_ino type varies by platform (u32 on FreeBSD, u64 on Linux)
-        #[allow(clippy::unnecessary_cast)]
-        {
-            self.stat.st_ino as u64
-        }
-    }
-
-    // st_mode type varies by platform (u16 on macOS, u32 on Linux)
-    #[allow(clippy::unnecessary_cast)]
-    fn mode(&self) -> u32 {
-        self.stat.st_mode as u32
-    }
-
-    fn nlink(&self) -> u64 {
-        // st_nlink type varies by platform (u16 on FreeBSD, u32/u64 on others)
-        #[allow(clippy::unnecessary_cast)]
-        {
-            self.stat.st_nlink as u64
-        }
-    }
-
-    fn uid(&self) -> u32 {
-        self.stat.st_uid
-    }
-
-    fn gid(&self) -> u32 {
-        self.stat.st_gid
-    }
-
-    // st_rdev type varies by platform (i32 on macOS, u64 on Linux)
-    #[allow(clippy::unnecessary_cast)]
-    fn rdev(&self) -> u64 {
-        self.stat.st_rdev as u64
-    }
-
-    // st_size type varies by platform (i64 on some platforms, u64 on others)
-    #[allow(clippy::unnecessary_cast)]
-    fn size(&self) -> u64 {
-        self.stat.st_size as u64
-    }
-
-    fn atime(&self) -> i64 {
-        #[cfg(target_pointer_width = "32")]
-        {
-            self.stat.st_atime.into()
-        }
-        #[cfg(not(target_pointer_width = "32"))]
-        {
-            self.stat.st_atime
-        }
-    }
-
-    fn atime_nsec(&self) -> i64 {
-        #[cfg(target_os = "netbsd")]
-        {
-            self.stat.st_atimensec as i64
-        }
-
-        #[cfg(not(target_os = "netbsd"))]
-        {
-            #[cfg(target_pointer_width = "32")]
-            {
-                self.stat.st_atime_nsec.into()
-            }
-            #[cfg(not(target_pointer_width = "32"))]
-            {
-                self.stat.st_atime_nsec
-            }
-        }
-    }
-
-    fn mtime(&self) -> i64 {
-        #[cfg(target_pointer_width = "32")]
-        {
-            self.stat.st_mtime.into()
-        }
-        #[cfg(not(target_pointer_width = "32"))]
-        {
-            self.stat.st_mtime
-        }
-    }
-
-    fn mtime_nsec(&self) -> i64 {
-        #[cfg(target_os = "netbsd")]
-        {
-            self.stat.st_mtimensec as i64
-        }
-
-        #[cfg(not(target_os = "netbsd"))]
-        {
-            #[cfg(target_pointer_width = "32")]
-            {
-                self.stat.st_mtime_nsec.into()
-            }
-            #[cfg(not(target_pointer_width = "32"))]
-            {
-                self.stat.st_mtime_nsec
-            }
-        }
-    }
-
-    fn ctime(&self) -> i64 {
-        #[cfg(target_pointer_width = "32")]
-        {
-            self.stat.st_ctime.into()
-        }
-        #[cfg(not(target_pointer_width = "32"))]
-        {
-            self.stat.st_ctime
-        }
-    }
-
-    fn ctime_nsec(&self) -> i64 {
-        #[cfg(target_os = "netbsd")]
-        {
-            self.stat.st_ctimensec as i64
-        }
-
-        #[cfg(not(target_os = "netbsd"))]
-        {
-            #[cfg(target_pointer_width = "32")]
-            {
-                self.stat.st_ctime_nsec.into()
-            }
-            #[cfg(not(target_pointer_width = "32"))]
-            {
-                self.stat.st_ctime_nsec
-            }
-        }
-    }
-
-    // st_blksize type varies by platform (i32/i64/u32/u64 depending on platform)
-    #[allow(clippy::unnecessary_cast)]
-    fn blksize(&self) -> u64 {
-        self.stat.st_blksize as u64
-    }
-
-    // st_blocks type varies by platform (i64 on some platforms, u64 on others)
-    #[allow(clippy::unnecessary_cast)]
-    fn blocks(&self) -> u64 {
-        self.stat.st_blocks as u64
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::fs;
-    use std::os::unix::fs::symlink;
-    use std::os::unix::io::IntoRawFd;
-    use tempfile::TempDir;
-
-    #[test]
-    fn test_dirfd_open_valid_directory() {
-        let temp_dir = TempDir::new().unwrap();
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-        assert!(dir_fd.as_raw_fd() >= 0);
-    }
-
-    #[test]
-    fn test_dirfd_open_nonexistent_directory() {
-        let result = DirFd::open("/nonexistent/path".as_ref(), SymlinkBehavior::Follow);
-        assert!(result.is_err());
-        if let Err(e) = result {
-            // The error should be the underlying io::Error
-            assert!(
-                e.kind() == io::ErrorKind::NotFound || e.kind() == io::ErrorKind::PermissionDenied
-            );
-        }
-    }
-
-    #[test]
-    fn test_dirfd_open_file_not_directory() {
-        let temp_dir = TempDir::new().unwrap();
-        let file_path = temp_dir.path().join("test_file");
-        fs::write(&file_path, "test content").unwrap();
-
-        let result = DirFd::open(&file_path, SymlinkBehavior::Follow);
-        assert!(result.is_err());
-    }
-
-    #[test]
-    fn test_dirfd_open_subdir() {
-        let temp_dir = TempDir::new().unwrap();
-        let subdir = temp_dir.path().join("subdir");
-        fs::create_dir(&subdir).unwrap();
-
-        let parent_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-        let subdir_fd = parent_fd
-            .open_subdir(OsStr::new("subdir"), SymlinkBehavior::Follow)
-            .unwrap();
-        assert!(subdir_fd.as_raw_fd() >= 0);
-    }
-
-    #[test]
-    fn test_dirfd_open_nonexistent_subdir() {
-        let temp_dir = TempDir::new().unwrap();
-        let parent_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-
-        let result = parent_fd.open_subdir(OsStr::new("nonexistent"), SymlinkBehavior::Follow);
-        assert!(result.is_err());
-    }
-
-    #[test]
-    fn test_dirfd_stat_at() {
-        let temp_dir = TempDir::new().unwrap();
-        let file_path = temp_dir.path().join("test_file");
-        fs::write(&file_path, "test content").unwrap();
-
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-        let stat = dir_fd
-            .stat_at(OsStr::new("test_file"), SymlinkBehavior::Follow)
-            .unwrap();
-
-        assert!(stat.st_size > 0);
-        assert_eq!(stat.st_mode & libc::S_IFMT, libc::S_IFREG);
-    }
-
-    #[test]
-    fn test_dirfd_stat_at_symlink() {
-        let temp_dir = TempDir::new().unwrap();
-        let target_file = temp_dir.path().join("target");
-        let symlink_file = temp_dir.path().join("link");
-
-        fs::write(&target_file, "target content").unwrap();
-        symlink(&target_file, &symlink_file).unwrap();
-
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-
-        // Follow symlinks
-        let stat_follow = dir_fd
-            .stat_at(OsStr::new("link"), SymlinkBehavior::Follow)
-            .unwrap();
-        assert_eq!(stat_follow.st_mode & libc::S_IFMT, libc::S_IFREG);
-
-        // Don't follow symlinks
-        let stat_nofollow = dir_fd
-            .stat_at(OsStr::new("link"), SymlinkBehavior::NoFollow)
-            .unwrap();
-        assert_eq!(stat_nofollow.st_mode & libc::S_IFMT, libc::S_IFLNK);
-    }
-
-    #[test]
-    fn test_dirfd_fstat() {
-        let temp_dir = TempDir::new().unwrap();
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-        let stat = dir_fd.fstat().unwrap();
-
-        assert_eq!(stat.st_mode & libc::S_IFMT, libc::S_IFDIR);
-    }
-
-    #[test]
-    fn test_dirfd_read_dir() {
-        let temp_dir = TempDir::new().unwrap();
-        let file1 = temp_dir.path().join("file1");
-        let file2 = temp_dir.path().join("file2");
-
-        fs::write(&file1, "content1").unwrap();
-        fs::write(&file2, "content2").unwrap();
-
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-        let entries = dir_fd.read_dir().unwrap();
-
-        assert_eq!(entries.len(), 2);
-        assert!(entries.contains(&OsString::from("file1")));
-        assert!(entries.contains(&OsString::from("file2")));
-    }
-
-    #[test]
-    fn test_dirfd_unlink_at_file() {
-        let temp_dir = TempDir::new().unwrap();
-        let file_path = temp_dir.path().join("test_file");
-        fs::write(&file_path, "test content").unwrap();
-
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-        dir_fd.unlink_at(OsStr::new("test_file"), false).unwrap();
-
-        assert!(!file_path.exists());
-    }
-
-    #[test]
-    fn test_dirfd_unlink_at_directory() {
-        let temp_dir = TempDir::new().unwrap();
-        let subdir = temp_dir.path().join("empty_dir");
-        fs::create_dir(&subdir).unwrap();
-
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-        dir_fd.unlink_at(OsStr::new("empty_dir"), true).unwrap();
-
-        assert!(!subdir.exists());
-    }
-
-    #[test]
-    fn test_from_raw_fd() {
-        let temp_dir = TempDir::new().unwrap();
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-
-        // Duplicate the fd first so we don't have ownership conflicts
-        let dup_fd = nix::unistd::dup(&dir_fd).unwrap();
-        let from_raw_fd = DirFd::from_raw_fd(dup_fd.into_raw_fd()).unwrap();
-
-        // Both should refer to the same directory
-        let stat1 = dir_fd.fstat().unwrap();
-        let stat2 = from_raw_fd.fstat().unwrap();
-        assert_eq!(stat1.st_ino, stat2.st_ino);
-        assert_eq!(stat1.st_dev, stat2.st_dev);
-    }
-
-    #[test]
-    fn test_from_raw_fd_invalid() {
-        let result = DirFd::from_raw_fd(-1);
-        assert!(result.is_err());
-    }
-
-    #[test]
-    #[allow(clippy::unnecessary_cast)]
-    fn test_file_info() {
-        let temp_dir = TempDir::new().unwrap();
-        let file_path = temp_dir.path().join("test_file");
-        fs::write(&file_path, "test content").unwrap();
-
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-        let stat = dir_fd
-            .stat_at(OsStr::new("test_file"), SymlinkBehavior::Follow)
-            .unwrap();
-        let file_info = FileInfo::from_stat(&stat);
-        assert_eq!(file_info.device(), stat.st_dev as u64);
-        assert_eq!(file_info.inode(), stat.st_ino as u64);
-    }
-
-    #[test]
-    fn test_file_info_new() {
-        let file_info = FileInfo::new(123, 456);
-        assert_eq!(file_info.device(), 123);
-        assert_eq!(file_info.inode(), 456);
-    }
-
-    #[test]
-    fn test_file_type() {
-        // Test directory
-        let dir_mode = libc::S_IFDIR | 0o755;
-        let file_type = FileType::from_mode(dir_mode);
-        assert_eq!(file_type, FileType::Directory);
-        assert!(file_type.is_directory());
-        assert!(!file_type.is_regular_file());
-        assert!(!file_type.is_symlink());
-
-        // Test regular file
-        let file_mode = libc::S_IFREG | 0o644;
-        let file_type = FileType::from_mode(file_mode);
-        assert_eq!(file_type, FileType::RegularFile);
-        assert!(!file_type.is_directory());
-        assert!(file_type.is_regular_file());
-        assert!(!file_type.is_symlink());
-
-        // Test symlink
-        let link_mode = libc::S_IFLNK | 0o777;
-        let file_type = FileType::from_mode(link_mode);
-        assert_eq!(file_type, FileType::Symlink);
-        assert!(!file_type.is_directory());
-        assert!(!file_type.is_regular_file());
-        assert!(file_type.is_symlink());
-    }
-
-    #[test]
-    #[allow(clippy::unnecessary_cast)]
-    fn test_metadata_wrapper() {
-        let temp_dir = TempDir::new().unwrap();
-        let file_path = temp_dir.path().join("test_file");
-        fs::write(&file_path, "test content with some length").unwrap();
-
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-        let metadata = dir_fd
-            .metadata_at(OsStr::new("test_file"), SymlinkBehavior::Follow)
-            .unwrap();
-
-        assert_eq!(metadata.file_type(), FileType::RegularFile);
-        assert!(metadata.size() > 0);
-        assert_eq!(metadata.mode() & libc::S_IFMT as u32, libc::S_IFREG as u32);
-        assert_eq!(metadata.nlink(), 1);
-
-        assert!(metadata.size() > 0);
-    }
-
-    #[test]
-    fn test_metadata_directory() {
-        let temp_dir = TempDir::new().unwrap();
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-        let metadata = dir_fd.metadata().unwrap();
-
-        assert_eq!(metadata.file_type(), FileType::Directory);
-        assert!(metadata.file_type().is_directory());
-    }
-
-    #[test]
-    fn test_path_with_null_byte() {
-        let path_with_null = OsString::from_vec(b"test\0file".to_vec());
-        let temp_dir = TempDir::new().unwrap();
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-
-        let result = dir_fd.open_subdir(&path_with_null, SymlinkBehavior::Follow);
-        assert!(result.is_err());
-        if let Err(e) = result {
-            // Should be InvalidInput for null byte error
-            assert_eq!(e.kind(), io::ErrorKind::InvalidInput);
-        }
-    }
-
-    #[test]
-    fn test_error_chain() {
-        let result = DirFd::open(
-            "/nonexistent/deeply/nested/path".as_ref(),
-            SymlinkBehavior::Follow,
-        );
-        assert!(result.is_err());
-
-        if let Err(e) = result {
-            // Test that we get the proper underlying error
-            let io_err: io::Error = e;
-            assert!(
-                io_err.kind() == io::ErrorKind::NotFound
-                    || io_err.kind() == io::ErrorKind::PermissionDenied
-            );
-        }
-    }
-
-    #[test]
-    fn test_mkdir_at_creates_directory() {
-        let temp_dir = TempDir::new().unwrap();
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-
-        dir_fd.mkdir_at(OsStr::new("new_subdir"), 0o755).unwrap();
-
-        assert!(temp_dir.path().join("new_subdir").is_dir());
-    }
-
-    #[test]
-    fn test_mkdir_at_fails_if_exists() {
-        let temp_dir = TempDir::new().unwrap();
-        let subdir = temp_dir.path().join("existing");
-        fs::create_dir(&subdir).unwrap();
-
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-        let result = dir_fd.mkdir_at(OsStr::new("existing"), 0o755);
-
-        assert!(result.is_err());
-    }
-
-    #[test]
-    fn test_open_file_at_creates_file() {
-        let temp_dir = TempDir::new().unwrap();
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-
-        let mut file = dir_fd.open_file_at(OsStr::new("new_file.txt")).unwrap();
-        use std::io::Write;
-        file.write_all(b"test content").unwrap();
-
-        let content = fs::read_to_string(temp_dir.path().join("new_file.txt")).unwrap();
-        assert_eq!(content, "test content");
-    }
-
-    #[test]
-    fn test_open_file_at_truncates_existing() {
-        let temp_dir = TempDir::new().unwrap();
-        let file_path = temp_dir.path().join("existing.txt");
-        fs::write(&file_path, "old content that is longer").unwrap();
-
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-        let mut file = dir_fd.open_file_at(OsStr::new("existing.txt")).unwrap();
-        use std::io::Write;
-        file.write_all(b"new").unwrap();
-        drop(file);
-
-        let content = fs::read_to_string(&file_path).unwrap();
-        assert_eq!(content, "new");
-    }
-
-    #[test]
-    fn test_open_file_at_does_not_follow_symlink() {
-        let temp_dir = TempDir::new().unwrap();
-        let target_path = temp_dir.path().join("target.txt");
-        let link_path = temp_dir.path().join("link.txt");
-        fs::write(&target_path, "target content").unwrap();
-        symlink(&target_path, &link_path).unwrap();
-
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-        let result = dir_fd.open_file_at(OsStr::new("link.txt"));
-
-        assert!(result.is_err());
-        assert_eq!(fs::read_to_string(&target_path).unwrap(), "target content");
-    }
-
-    #[test]
-    fn test_create_dir_all_safe_creates_nested_dirs() {
-        let temp_dir = TempDir::new().unwrap();
-        let nested_path = temp_dir.path().join("a/b/c");
-
-        let dir_fd = create_dir_all_safe(&nested_path, 0o755).unwrap();
-        assert!(dir_fd.as_raw_fd() >= 0);
-        assert!(nested_path.is_dir());
-    }
-
-    #[test]
-    fn test_create_dir_all_safe_existing_path() {
-        let temp_dir = TempDir::new().unwrap();
-        let existing_path = temp_dir.path().join("existing");
-        fs::create_dir(&existing_path).unwrap();
-
-        let dir_fd = create_dir_all_safe(&existing_path, 0o755).unwrap();
-        assert!(dir_fd.as_raw_fd() >= 0);
-    }
-
-    #[test]
-    fn test_create_dir_all_safe_replaces_symlink() {
-        let temp_dir = TempDir::new().unwrap();
-        let target_dir = temp_dir.path().join("target");
-        fs::create_dir(&target_dir).unwrap();
-
-        // Create a symlink where we want to create a directory
-        let symlink_path = temp_dir.path().join("link_to_replace");
-        symlink(&target_dir, &symlink_path).unwrap();
-        assert!(symlink_path.is_symlink());
-
-        // create_dir_all_safe should replace the symlink with a real directory
-        let dir_fd = create_dir_all_safe(&symlink_path, 0o755).unwrap();
-        assert!(dir_fd.as_raw_fd() >= 0);
-
-        // Verify the symlink was replaced with a real directory
-        assert!(symlink_path.is_dir());
-        assert!(!symlink_path.is_symlink());
-    }
-
-    #[test]
-    fn test_create_dir_all_safe_fails_on_file() {
-        let temp_dir = TempDir::new().unwrap();
-        let file_path = temp_dir.path().join("file");
-        fs::write(&file_path, "content").unwrap();
-
-        let result = create_dir_all_safe(&file_path, 0o755);
-        assert!(result.is_err());
-    }
-
-    #[test]
-    fn test_create_dir_all_safe_nested_symlink_in_path() {
-        let temp_dir = TempDir::new().unwrap();
-
-        // Create: parent/symlink -> target
-        // Then try to create: parent/symlink/subdir
-        let parent = temp_dir.path().join("parent");
-        let target = temp_dir.path().join("target");
-        fs::create_dir(&parent).unwrap();
-        fs::create_dir(&target).unwrap();
-
-        let symlink_in_path = parent.join("link");
-        symlink(&target, &symlink_in_path).unwrap();
-
-        // Try to create parent/link/subdir - the symlink should be replaced
-        let nested_path = symlink_in_path.join("subdir");
-        let dir_fd = create_dir_all_safe(&nested_path, 0o755).unwrap();
-        assert!(dir_fd.as_raw_fd() >= 0);
-
-        // The symlink should have been replaced with a real directory
-        assert!(!symlink_in_path.is_symlink());
-        assert!(symlink_in_path.is_dir());
-        assert!(nested_path.is_dir());
-
-        // Target directory should not contain subdir (race attack prevented)
-        assert!(!target.join("subdir").exists());
-    }
-
-    #[test]
-    fn test_open_subdir_nofollow_fails_on_symlink() {
-        let temp_dir = TempDir::new().unwrap();
-        let target = temp_dir.path().join("target");
-        fs::create_dir(&target).unwrap();
-
-        let link = temp_dir.path().join("link");
-        symlink(&target, &link).unwrap();
-
-        let dir_fd = DirFd::open(temp_dir.path(), SymlinkBehavior::Follow).unwrap();
-
-        // With follow_symlinks=true, should succeed
-        let result_follow = dir_fd.open_subdir(OsStr::new("link"), SymlinkBehavior::Follow);
-        assert!(result_follow.is_ok());
-
-        // With follow_symlinks=false, should fail (ELOOP or ENOTDIR)
-        let result_nofollow = dir_fd.open_subdir(OsStr::new("link"), SymlinkBehavior::NoFollow);
-        assert!(result_nofollow.is_err());
-    }
-
-    #[test]
-    fn test_open_nofollow_fails_on_symlink() {
-        let temp_dir = TempDir::new().unwrap();
-        let target = temp_dir.path().join("target");
-        fs::create_dir(&target).unwrap();
-
-        let link = temp_dir.path().join("link");
-        symlink(&target, &link).unwrap();
-
-        // With follow_symlinks=true, should succeed
-        let result_follow = DirFd::open(&link, SymlinkBehavior::Follow);
-        assert!(result_follow.is_ok());
-
-        // With follow_symlinks=false, should fail
-        let result_nofollow = DirFd::open(&link, SymlinkBehavior::NoFollow);
-        assert!(result_nofollow.is_err());
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/selinux.rs b/registry/native/stubs/uucore/src/lib/features/selinux.rs
deleted file mode 100644
index 88f2ba42c..000000000
--- a/registry/native/stubs/uucore/src/lib/features/selinux.rs
+++ /dev/null
@@ -1,753 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Set of functions to manage SELinux security contexts
-
-use std::error::Error;
-use std::path::Path;
-
-use crate::translate;
-use selinux::SecurityContext;
-use thiserror::Error;
-
-use crate::error::UError;
-
-#[derive(Debug, Error)]
-pub enum SeLinuxError {
-    #[error("{}", translate!("selinux-error-not-enabled"))]
-    SELinuxNotEnabled,
-
-    #[error("{}", translate!("selinux-error-file-open-failure", "error" => .0.clone()))]
-    FileOpenFailure(String),
-
-    #[error("{}", translate!("selinux-error-context-retrieval-failure", "error" => .0.clone()))]
-    ContextRetrievalFailure(String),
-
-    #[error("{}", translate!("selinux-error-context-set-failure", "context" => .0.clone(), "error" => .1.clone()))]
-    ContextSetFailure(String, String),
-
-    #[error("{}", translate!("selinux-error-context-conversion-failure", "context" => .0.clone(), "error" => .1.clone()))]
-    ContextConversionFailure(String, String),
-
-    #[error("{}", translate!("selinux-error-operation-not-supported"))]
-    OperationNotSupported,
-}
-
-impl UError for SeLinuxError {
-    fn code(&self) -> i32 {
-        match self {
-            Self::SELinuxNotEnabled => 1,
-            Self::FileOpenFailure(_) => 2,
-            Self::ContextRetrievalFailure(_) => 3,
-            Self::ContextSetFailure(_, _) => 4,
-            Self::ContextConversionFailure(_, _) => 5,
-            Self::OperationNotSupported => 6,
-        }
-    }
-}
-
-impl From<SeLinuxError> for i32 {
-    fn from(error: SeLinuxError) -> Self {
-        error.code()
-    }
-}
-
-/// Checks if SELinux is enabled on the system.
-///
-/// This function verifies whether the kernel has SELinux support enabled.
-/// Note: libselinux internally caches this value, so no additional caching is needed.
-pub fn is_selinux_enabled() -> bool {
-    selinux::kernel_support() != selinux::KernelSupport::Unsupported
-}
-
-/// Returns a string describing the error and its causes.
-pub fn selinux_error_description(mut error: &dyn Error) -> String {
-    let mut description = String::new();
-    while let Some(source) = error.source() {
-        let error_text = source.to_string();
-        // Check if this is an OS error and trim it
-        if let Some(idx) = error_text.find(" (os error ") {
-            description.push_str(&error_text[..idx]);
-        } else {
-            description.push_str(&error_text);
-        }
-        error = source;
-    }
-    description
-}
-
-/// Sets the SELinux security context for the given filesystem path.
-///
-/// If a specific context is provided, it attempts to set this context explicitly.
-/// Otherwise, it applies the default SELinux context for the provided path.
-///
-/// # Arguments
-///
-/// * `path` - Filesystem path on which to set the SELinux context.
-/// * `context` - Optional SELinux context string to explicitly set.
-///
-/// # Errors
-///
-/// Returns an error if:
-/// - SELinux is not enabled on the system.
-/// - The provided context is invalid or cannot be applied.
-/// - The default SELinux context cannot be set.
-///
-/// # Examples
-///
-/// Setting default context:
-/// ```
-/// use std::path::Path;
-/// use uucore::selinux::set_selinux_security_context;
-///
-/// // Set the default SELinux context for a file
-/// let result = set_selinux_security_context(Path::new("/path/to/file"), None);
-/// if let Err(err) = result {
-///     eprintln!("Failed to set default context: {err}");
-/// }
-/// ```
-///
-/// Setting specific context:
-/// ```
-/// use std::path::Path;
-/// use uucore::selinux::set_selinux_security_context;
-///
-/// // Set a specific SELinux context for a file
-/// let context = String::from("unconfined_u:object_r:user_home_t:s0");
-/// let result = set_selinux_security_context(Path::new("/path/to/file"), Some(&context));
-/// if let Err(err) = result {
-///     eprintln!("Failed to set context: {err}");
-/// }
-/// ```
-pub fn set_selinux_security_context(
-    path: &Path,
-    context: Option<&String>,
-) -> Result<(), SeLinuxError> {
-    if !is_selinux_enabled() {
-        return Err(SeLinuxError::SELinuxNotEnabled);
-    }
-
-    if let Some(ctx_str) = context {
-        // Create a CString from the provided context string
-        let c_context = std::ffi::CString::new(ctx_str.as_str()).map_err(|e| {
-            SeLinuxError::ContextConversionFailure(
-                ctx_str.to_owned(),
-                selinux_error_description(&e),
-            )
-        })?;
-
-        // Convert the CString into an SELinux security context
-        let security_context =
-            selinux::OpaqueSecurityContext::from_c_str(&c_context).map_err(|e| {
-                SeLinuxError::ContextConversionFailure(
-                    ctx_str.to_owned(),
-                    selinux_error_description(&e),
-                )
-            })?;
-
-        // Set the provided security context on the specified path
-        SecurityContext::from_c_str(
-            &security_context.to_c_string().map_err(|e| {
-                SeLinuxError::ContextConversionFailure(
-                    ctx_str.to_owned(),
-                    selinux_error_description(&e),
-                )
-            })?,
-            false,
-        )
-        .set_for_path(path, false, false)
-        .map_err(|e| match &e {
-            selinux::errors::Error::IO1Path { source, .. }
-                if source.raw_os_error() == Some(libc::ENOTSUP) =>
-            {
-                SeLinuxError::OperationNotSupported
-            }
-            _ => SeLinuxError::ContextSetFailure(ctx_str.to_owned(), selinux_error_description(&e)),
-        })
-    } else {
-        // If no context provided, set the default SELinux context for the path
-        SecurityContext::set_default_for_path(path).map_err(|e| match &e {
-            selinux::errors::Error::IO1Path { source, .. }
-                if source.raw_os_error() == Some(libc::ENOTSUP) =>
-            {
-                SeLinuxError::OperationNotSupported
-            }
-            _ => SeLinuxError::ContextSetFailure(String::new(), selinux_error_description(&e)),
-        })
-    }
-}
-
-/// Gets the SELinux security context for the given filesystem path.
-///
-/// Retrieves the security context of the specified filesystem path if SELinux is enabled
-/// on the system.
-///
-/// # Arguments
-///
-/// * `path` - Filesystem path for which to retrieve the SELinux context.
-///
-/// # Returns
-///
-/// * `Ok(String)` - The SELinux context string if successfully retrieved. Returns an empty
-///   string if no context was found.
-/// * `Err(SeLinuxError)` - An error variant indicating the type of failure:
-///   - `SeLinuxError::SELinuxNotEnabled` - SELinux is not enabled on the system.
-///   - `SeLinuxError::FileOpenFailure` - Failed to open the specified file.
-///   - `SeLinuxError::ContextRetrievalFailure` - Failed to retrieve the security context.
-///   - `SeLinuxError::ContextConversionFailure` - Failed to convert the security context to a string.
-///   - `SeLinuxError::ContextSetFailure` - Failed to set the security context.
-///
-/// # Examples
-///
-/// ```
-/// use std::path::Path;
-/// use uucore::selinux::{get_selinux_security_context, SeLinuxError};
-///
-/// // Get the SELinux context for a file
-/// match get_selinux_security_context(Path::new("/path/to/file"), false) {
-///     Ok(context) => {
-///         if context.is_empty() {
-///             println!("No SELinux context found for the file");
-///         } else {
-///             println!("SELinux context: {context}");
-///         }
-///     },
-///     Err(SeLinuxError::SELinuxNotEnabled) => println!("SELinux is not enabled on this system"),
-///     Err(SeLinuxError::FileOpenFailure(e)) => println!("Failed to open the file: {e}"),
-///     Err(SeLinuxError::ContextRetrievalFailure(e)) => println!("Failed to retrieve the security context: {e}"),
-///     Err(SeLinuxError::ContextConversionFailure(ctx, e)) => println!("Failed to convert context '{ctx}': {e}"),
-///     Err(SeLinuxError::ContextSetFailure(ctx, e)) => println!("Failed to set context '{ctx}': {e}"),
-///     Err(SeLinuxError::OperationNotSupported) => println!("Operation not supported"),
-/// }
-/// ```
-pub fn get_selinux_security_context(
-    path: &Path,
-    follow_symbolic_links: bool,
-) -> Result<String, SeLinuxError> {
-    if !is_selinux_enabled() {
-        return Err(SeLinuxError::SELinuxNotEnabled);
-    }
-
-    // Get the security context of the file
-    let context = match SecurityContext::of_path(path, follow_symbolic_links, false) {
-        Ok(Some(ctx)) => ctx,
-        Ok(None) => return Ok(String::new()), // No context found, return empty string
-        Err(e) => {
-            return Err(SeLinuxError::ContextRetrievalFailure(
-                selinux_error_description(&e),
-            ));
-        }
-    };
-
-    let context_c_string = context.to_c_string().map_err(|e| {
-        SeLinuxError::ContextConversionFailure(String::new(), selinux_error_description(&e))
-    })?;
-
-    if let Some(c_str) = context_c_string {
-        // Convert the C string to a Rust String
-        Ok(c_str.to_string_lossy().to_string())
-    } else {
-        Ok(String::new())
-    }
-}
-
-/// Compares SELinux security contexts of two filesystem paths.
-///
-/// This function retrieves and compares the SELinux security contexts of two paths.
-/// If the contexts differ or an error occurs during retrieval, it returns true.
-///
-/// # Arguments
-///
-/// * `from_path` - Source filesystem path.
-/// * `to_path` - Destination filesystem path.
-///
-/// # Returns
-///
-/// * `true` - If contexts differ, cannot be retrieved, or if SELinux is not enabled.
-/// * `false` - If contexts are the same.
-///
-/// # Examples
-///
-/// ```
-/// use std::path::Path;
-/// use uucore::selinux::contexts_differ;
-///
-/// // Check if contexts differ between two files
-/// let differ = contexts_differ(Path::new("/path/to/source"), Path::new("/path/to/destination"));
-/// if differ {
-///     println!("Files have different SELinux contexts");
-/// } else {
-///     println!("Files have the same SELinux context");
-/// }
-/// ```
-pub fn contexts_differ(from_path: &Path, to_path: &Path) -> bool {
-    if !is_selinux_enabled() {
-        return true;
-    }
-
-    // Check if SELinux contexts differ
-    match (
-        SecurityContext::of_path(from_path, false, false),
-        SecurityContext::of_path(to_path, false, false),
-    ) {
-        (Ok(Some(from_ctx)), Ok(Some(to_ctx))) => {
-            // Convert contexts to CString and compare
-            match (from_ctx.to_c_string(), to_ctx.to_c_string()) {
-                (Ok(Some(from_c_str)), Ok(Some(to_c_str))) => {
-                    from_c_str.to_string_lossy() != to_c_str.to_string_lossy()
-                }
-                // If contexts couldn't be converted to CString or were None, consider them different
-                _ => true,
-            }
-        }
-        // If either context is None or an error occurred, assume contexts differ
-        _ => true,
-    }
-}
-
-/// Preserves the SELinux security context from one filesystem path to another.
-///
-/// This function copies the security context from the source path to the destination path.
-/// If SELinux is not enabled, or if the source has no context, the function returns success
-/// without making any changes.
-///
-/// # Arguments
-///
-/// * `from_path` - Source filesystem path from which to copy the SELinux context.
-/// * `to_path` - Destination filesystem path to which the context should be applied.
-///
-/// # Returns
-///
-/// * `Ok(())` - If the context was successfully preserved or if SELinux is not enabled.
-/// * `Err(SeLinuxError)` - If an error occurred during context retrieval or application.
-///
-/// # Examples
-///
-/// ```
-/// use std::path::Path;
-/// use uucore::selinux::preserve_security_context;
-///
-/// // Preserve the SELinux context from source to destination
-/// match preserve_security_context(Path::new("/path/to/source"), Path::new("/path/to/destination")) {
-///     Ok(_) => println!("Context preserved successfully (or SELinux is not enabled)"),
-///     Err(err) => eprintln!("Failed to preserve context: {err}"),
-/// }
-/// ```
-pub fn preserve_security_context(from_path: &Path, to_path: &Path) -> Result<(), SeLinuxError> {
-    // If SELinux is not enabled, return success without doing anything
-    if !is_selinux_enabled() {
-        return Err(SeLinuxError::SELinuxNotEnabled);
-    }
-
-    // Get context from the source path
-    let context = get_selinux_security_context(from_path, false)?;
-
-    // If no context was found, just return success (nothing to preserve)
-    if context.is_empty() {
-        return Ok(());
-    }
-
-    // Apply the context to the destination path
-    set_selinux_security_context(to_path, Some(&context))
-}
-
-/// Gets the SELinux security context for a file using getfattr.
-///
-/// This test helper verifies that SELinux contexts have been properly set on
-/// files. It uses the `getfattr` command to retrieve the security.selinux
-/// extended attribute.
-///
-/// # Arguments
-///
-/// * `f` - The file path as a string.
-///
-/// # Returns
-///
-/// Returns the SELinux context string extracted from the getfattr output.
-/// If the context cannot be retrieved, the function will panic.
-///
-/// # Panics
-///
-/// This function will panic if:
-/// - The `getfattr` command fails to execute
-/// - The `getfattr` command returns a non-zero exit status
-#[cfg(test)]
-pub fn get_getfattr_output(f: &str) -> String {
-    use std::process::Command;
-
-    let getfattr_output = Command::new("getfattr")
-        .arg(f)
-        .arg("-n")
-        .arg("security.selinux")
-        .output()
-        .expect("Failed to run `getfattr` on the destination file");
-    println!("{getfattr_output:?}");
-    assert!(
-        getfattr_output.status.success(),
-        "getfattr did not run successfully: {}",
-        String::from_utf8_lossy(&getfattr_output.stderr)
-    );
-
-    String::from_utf8_lossy(&getfattr_output.stdout)
-        .split('"')
-        .nth(1)
-        .unwrap_or("")
-        .to_string()
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use tempfile::NamedTempFile;
-
-    #[test]
-    fn test_selinux_context_setting() {
-        let tmpfile = NamedTempFile::new().expect("Failed to create tempfile");
-        let path = tmpfile.path();
-
-        if !is_selinux_enabled() {
-            let result = set_selinux_security_context(path, None);
-            assert!(result.is_err(), "Expected error when SELinux is disabled");
-            match result.unwrap_err() {
-                SeLinuxError::SELinuxNotEnabled => {
-                    // This is the expected error when SELinux is not enabled
-                }
-                err => panic!("Expected SELinuxNotEnabled error but got: {err}"),
-            }
-            return;
-        }
-
-        let default_result = set_selinux_security_context(path, None);
-        assert!(
-            default_result.is_ok(),
-            "Failed to set default context: {:?}",
-            default_result.err()
-        );
-
-        let context = get_selinux_security_context(path, false).expect("Failed to get context");
-        assert!(
-            !context.is_empty(),
-            "Expected non-empty context after setting default context"
-        );
-
-        let test_context = String::from("system_u:object_r:tmp_t:s0");
-        let explicit_result = set_selinux_security_context(path, Some(&test_context));
-
-        if explicit_result.is_ok() {
-            let new_context = get_selinux_security_context(path, false)
-                .expect("Failed to get context after setting explicit context");
-
-            assert!(
-                new_context.contains("tmp_t"),
-                "Expected context to contain 'tmp_t', but got: {new_context}"
-            );
-        } else {
-            println!(
-                "Note: Could not set explicit context {:?}",
-                explicit_result.err()
-            );
-        }
-    }
-    #[test]
-    fn test_invalid_context_string_error() {
-        let tmpfile = NamedTempFile::new().expect("Failed to create tempfile");
-        let path = tmpfile.path();
-        if !is_selinux_enabled() {
-            println!("test skipped: Kernel has no support for SElinux context");
-            return;
-        }
-        // Pass a context string containing a null byte to trigger CString::new error
-        let invalid_context = String::from("invalid\0context");
-        let result = set_selinux_security_context(path, Some(&invalid_context));
-
-        assert!(result.is_err());
-    }
-
-    #[test]
-    fn test_is_selinux_enabled_runtime_behavior() {
-        let result = is_selinux_enabled();
-
-        match selinux::kernel_support() {
-            selinux::KernelSupport::Unsupported => {
-                assert!(!result, "Expected false when SELinux is not supported");
-            }
-            _ => {
-                assert!(result, "Expected true when SELinux is supported");
-            }
-        }
-    }
-
-    #[test]
-    fn test_get_selinux_security_context() {
-        let tmpfile = NamedTempFile::new().expect("Failed to create tempfile");
-        let path = tmpfile.path();
-        if !is_selinux_enabled() {
-            println!("test skipped: Kernel has no support for SElinux context");
-            return;
-        }
-        std::fs::write(path, b"test content").expect("Failed to write to tempfile");
-
-        let result = get_selinux_security_context(path, false);
-
-        match result {
-            Ok(context) => {
-                println!("Retrieved SELinux context: {context}");
-
-                assert!(
-                    is_selinux_enabled(),
-                    "Got a successful context result but SELinux is not enabled"
-                );
-
-                if !context.is_empty() {
-                    assert!(
-                        context.contains(':'),
-                        "SELinux context '{context}' doesn't match expected format"
-                    );
-                }
-            }
-            Err(SeLinuxError::SELinuxNotEnabled) => {
-                assert!(
-                    !is_selinux_enabled(),
-                    "Got SELinuxNotEnabled error, but is_selinux_enabled() returned true"
-                );
-            }
-            Err(SeLinuxError::ContextRetrievalFailure(e)) => {
-                assert!(
-                    is_selinux_enabled(),
-                    "Got ContextRetrievalFailure when SELinux is not enabled"
-                );
-                assert!(!e.is_empty(), "Error message should not be empty");
-                println!("Context retrieval failure: {e}");
-            }
-            Err(SeLinuxError::ContextConversionFailure(ctx, e)) => {
-                assert!(
-                    is_selinux_enabled(),
-                    "Got ContextConversionFailure when SELinux is not enabled"
-                );
-                assert!(!e.is_empty(), "Error message should not be empty");
-                println!("Context conversion failure for '{ctx}': {e}");
-            }
-            Err(SeLinuxError::ContextSetFailure(ctx, e)) => {
-                assert!(!e.is_empty(), "Error message should not be empty");
-                println!("Context conversion failure for '{ctx}': {e}");
-            }
-            Err(SeLinuxError::FileOpenFailure(e)) => {
-                assert!(
-                    Path::new(path).exists(),
-                    "File open failure occurred despite file being created: {e}"
-                );
-            }
-            Err(e @ SeLinuxError::OperationNotSupported) => {
-                println!("{e}");
-            }
-        }
-    }
-
-    #[test]
-    fn test_get_selinux_context_nonexistent_file() {
-        let path = Path::new("/nonexistent/file/that/does/not/exist");
-        if !is_selinux_enabled() {
-            println!("test skipped: Kernel has no support for SElinux context");
-            return;
-        }
-        let result = get_selinux_security_context(path, false);
-
-        assert!(result.is_err());
-    }
-
-    #[test]
-    fn test_get_selinux_context_symlink() {
-        use std::os::unix::fs::symlink;
-        use tempfile::tempdir;
-
-        if !is_selinux_enabled() {
-            println!("test skipped: Kernel has no support for SElinux context");
-            return;
-        }
-
-        let tmp_dir = tempdir().expect("Failed to create temporary directory");
-        let dir_path = tmp_dir.path();
-
-        // Create a normal file
-        let file_path = dir_path.join("file");
-        std::fs::File::create(&file_path).expect("Failed to create file");
-
-        // Create a symlink to the file
-        let symlink_path = dir_path.join("symlink");
-        symlink(&file_path, &symlink_path).expect("Failed to create symlink");
-
-        // Set a different context for the file (but not the symlink)
-        let file_context = String::from("system_u:object_r:user_tmp_t:s0");
-        set_selinux_security_context(&file_path, Some(&file_context))
-            .expect("Failed to set security context.");
-
-        // Context must be different if we don't follow the link
-        let file_context = get_selinux_security_context(&file_path, false)
-            .expect("Failed to get security context.");
-        let symlink_context = get_selinux_security_context(&symlink_path, false)
-            .expect("Failed to get security context.");
-        assert_ne!(file_context, symlink_context);
-
-        // Context must be the same if we follow the link
-        let symlink_follow_context = get_selinux_security_context(&symlink_path, true)
-            .expect("Failed to get security context.");
-        assert_eq!(file_context, symlink_follow_context);
-    }
-
-    #[test]
-    fn test_get_selinux_context_fifo() {
-        use tempfile::tempdir;
-
-        if !is_selinux_enabled() {
-            println!("test skipped: Kernel has no support for SElinux context");
-            return;
-        }
-
-        let tmp_dir = tempdir().expect("Failed to create temporary directory");
-        let dir_path = tmp_dir.path();
-
-        // Create a FIFO (pipe)
-        let fifo_path = dir_path.join("my_fifo");
-        crate::fs::make_fifo(&fifo_path).expect("Failed to create FIFO");
-
-        // Just getting a context is good enough
-        get_selinux_security_context(&fifo_path, false).expect("Cannot get fifo context");
-    }
-
-    #[test]
-    fn test_contexts_differ() {
-        let file1 = NamedTempFile::new().expect("Failed to create first tempfile");
-        let file2 = NamedTempFile::new().expect("Failed to create second tempfile");
-        let path1 = file1.path();
-        let path2 = file2.path();
-
-        std::fs::write(path1, b"content for file 1").expect("Failed to write to first tempfile");
-        std::fs::write(path2, b"content for file 2").expect("Failed to write to second tempfile");
-
-        if !is_selinux_enabled() {
-            assert!(
-                contexts_differ(path1, path2),
-                "contexts_differ should return true when SELinux is not enabled"
-            );
-            return;
-        }
-
-        let test_context = String::from("system_u:object_r:tmp_t:s0");
-        let result1 = set_selinux_security_context(path1, Some(&test_context));
-        let result2 = set_selinux_security_context(path2, Some(&test_context));
-
-        if result1.is_ok() && result2.is_ok() {
-            assert!(
-                !contexts_differ(path1, path2),
-                "Contexts should not differ when the same context is set on both files"
-            );
-
-            let different_context = String::from("system_u:object_r:user_tmp_t:s0");
-            if set_selinux_security_context(path2, Some(&different_context)).is_ok() {
-                assert!(
-                    contexts_differ(path1, path2),
-                    "Contexts should differ when different contexts are set"
-                );
-            }
-        } else {
-            println!(
-                "Note: Couldn't set SELinux contexts to test differences. This is expected if the test doesn't have sufficient permissions."
-            );
-            assert!(
-                contexts_differ(path1, path2),
-                "Contexts should differ when different contexts are set"
-            );
-        }
-
-        let nonexistent_path = Path::new("/nonexistent/file/path");
-        assert!(
-            contexts_differ(path1, nonexistent_path),
-            "contexts_differ should return true when one path doesn't exist"
-        );
-    }
-
-    #[test]
-    fn test_preserve_security_context() {
-        let source_file = NamedTempFile::new().expect("Failed to create source tempfile");
-        let dest_file = NamedTempFile::new().expect("Failed to create destination tempfile");
-        let source_path = source_file.path();
-        let dest_path = dest_file.path();
-
-        std::fs::write(source_path, b"source content").expect("Failed to write to source tempfile");
-        std::fs::write(dest_path, b"destination content")
-            .expect("Failed to write to destination tempfile");
-
-        if !is_selinux_enabled() {
-            let result = preserve_security_context(source_path, dest_path);
-            assert!(
-                result.is_err(),
-                "preserve_security_context should fail when SELinux is not enabled"
-            );
-            return;
-        }
-
-        let source_context = String::from("system_u:object_r:tmp_t:s0");
-        let result = set_selinux_security_context(source_path, Some(&source_context));
-
-        if result.is_ok() {
-            let preserve_result = preserve_security_context(source_path, dest_path);
-            assert!(
-                preserve_result.is_ok(),
-                "Failed to preserve context: {:?}",
-                preserve_result.err()
-            );
-
-            assert!(
-                !contexts_differ(source_path, dest_path),
-                "Contexts should be the same after preserving"
-            );
-        } else {
-            println!(
-                "Note: Couldn't set SELinux context on source file to test preservation. This is expected if the test doesn't have sufficient permissions."
-            );
-
-            let preserve_result = preserve_security_context(source_path, dest_path);
-            assert!(preserve_result.is_err());
-        }
-
-        let nonexistent_path = Path::new("/nonexistent/file/path");
-        let result = preserve_security_context(nonexistent_path, dest_path);
-        assert!(
-            result.is_err(),
-            "preserve_security_context should fail when source file doesn't exist"
-        );
-
-        let result = preserve_security_context(source_path, nonexistent_path);
-        assert!(
-            result.is_err(),
-            "preserve_security_context should fail when destination file doesn't exist"
-        );
-    }
-
-    #[test]
-    fn test_preserve_security_context_empty_context() {
-        let source_file = NamedTempFile::new().expect("Failed to create source tempfile");
-        let dest_file = NamedTempFile::new().expect("Failed to create destination tempfile");
-        let source_path = source_file.path();
-        let dest_path = dest_file.path();
-
-        if !is_selinux_enabled() {
-            return;
-        }
-
-        let result = preserve_security_context(source_path, dest_path);
-
-        if let Err(err) = result {
-            match err {
-                SeLinuxError::ContextSetFailure(_, _) => {
-                    println!("Note: Could not set context due to permissions: {err}");
-                }
-                unexpected => {
-                    panic!("Unexpected error: {unexpected}");
-                }
-            }
-        }
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/signals.rs b/registry/native/stubs/uucore/src/lib/features/signals.rs
deleted file mode 100644
index 6b89704fc..000000000
--- a/registry/native/stubs/uucore/src/lib/features/signals.rs
+++ /dev/null
@@ -1,756 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore (vars/api) fcntl setrlimit setitimer rubout pollable sysconf pgrp GETFD pfds revents POLLRDBAND POLLERR
-// spell-checker:ignore (vars/signals) ABRT ALRM CHLD SEGV SIGABRT SIGALRM SIGBUS SIGCHLD SIGCONT SIGDANGER SIGEMT SIGFPE SIGHUP SIGILL SIGINFO SIGINT SIGIO SIGIOT SIGKILL SIGMIGRATE SIGMSG SIGPIPE SIGPRE SIGPROF SIGPWR SIGQUIT SIGSEGV SIGSTOP SIGSYS SIGTALRM SIGTERM SIGTRAP SIGTSTP SIGTHR SIGTTIN SIGTTOU SIGURG SIGUSR SIGVIRT SIGVTALRM SIGWINCH SIGXCPU SIGXFSZ STKFLT PWR THR TSTP TTIN TTOU VIRT VTALRM XCPU XFSZ SIGCLD SIGPOLL SIGWAITING SIGAIOCANCEL SIGLWP SIGFREEZE SIGTHAW SIGCANCEL SIGLOST SIGXRES SIGJVM SIGRTMIN SIGRT SIGRTMAX TALRM AIOCANCEL XRES RTMIN RTMAX LTOSTOP
-
-//! This module provides a way to handle signals in a platform-independent way.
-//! It provides a way to convert signal names to their corresponding values and vice versa.
-//! It also provides a way to ignore the SIGINT signal and enable pipe errors.
-
-#[cfg(unix)]
-use nix::errno::Errno;
-#[cfg(any(target_os = "linux", target_os = "android"))]
-use nix::libc;
-#[cfg(unix)]
-use nix::sys::signal::{
-    SaFlags, SigAction, SigHandler, SigHandler::SigDfl, SigHandler::SigIgn, SigSet, Signal,
-    Signal::SIGINT, Signal::SIGPIPE, sigaction, signal,
-};
-
-/// The default signal value.
-pub static DEFAULT_SIGNAL: usize = 15;
-
-/*
-
-Linux Programmer's Manual
-
- 1 HUP      2 INT      3 QUIT     4 ILL      5 TRAP     6 ABRT     7 BUS
- 8 FPE      9 KILL    10 USR1    11 SEGV    12 USR2    13 PIPE    14 ALRM
-15 TERM    16 STKFLT  17 CHLD    18 CONT    19 STOP    20 TSTP    21 TTIN
-22 TTOU    23 URG     24 XCPU    25 XFSZ    26 VTALRM  27 PROF    28 WINCH
-29 POLL    30 PWR     31 SYS
-
-
-*/
-
-/// The list of all signals.
-#[cfg(any(target_os = "linux", target_os = "android", target_os = "redox"))]
-pub static ALL_SIGNALS: [&str; 32] = [
-    "EXIT", "HUP", "INT", "QUIT", "ILL", "TRAP", "ABRT", "BUS", "FPE", "KILL", "USR1", "SEGV",
-    "USR2", "PIPE", "ALRM", "TERM", "STKFLT", "CHLD", "CONT", "STOP", "TSTP", "TTIN", "TTOU",
-    "URG", "XCPU", "XFSZ", "VTALRM", "PROF", "WINCH", "POLL", "PWR", "SYS",
-];
-
-/*
-
-
-https://developer.apple.com/library/mac/documentation/Darwin/Reference/ManPages/man3/signal.3.html
-
-
-No    Name         Default Action       Description
-1     SIGHUP       terminate process    terminal line hangup
-2     SIGINT       terminate process    interrupt program
-3     SIGQUIT      create core image    quit program
-4     SIGILL       create core image    illegal instruction
-5     SIGTRAP      create core image    trace trap
-6     SIGABRT      create core image    abort program (formerly SIGIOT)
-7     SIGEMT       create core image    emulate instruction executed
-8     SIGFPE       create core image    floating-point exception
-9     SIGKILL      terminate process    kill program
-10    SIGBUS       create core image    bus error
-11    SIGSEGV      create core image    segmentation violation
-12    SIGSYS       create core image    non-existent system call invoked
-13    SIGPIPE      terminate process    write on a pipe with no reader
-14    SIGALRM      terminate process    real-time timer expired
-15    SIGTERM      terminate process    software termination signal
-16    SIGURG       discard signal       urgent condition present on socket
-17    SIGSTOP      stop process         stop (cannot be caught or ignored)
-18    SIGTSTP      stop process         stop signal generated from keyboard
-19    SIGCONT      discard signal       continue after stop
-20    SIGCHLD      discard signal       child status has changed
-21    SIGTTIN      stop process         background read attempted from control terminal
-22    SIGTTOU      stop process         background write attempted to control terminal
-23    SIGIO        discard signal       I/O is possible on a descriptor (see fcntl(2))
-24    SIGXCPU      terminate process    cpu time limit exceeded (see setrlimit(2))
-25    SIGXFSZ      terminate process    file size limit exceeded (see setrlimit(2))
-26    SIGVTALRM    terminate process    virtual time alarm (see setitimer(2))
-27    SIGPROF      terminate process    profiling timer alarm (see setitimer(2))
-28    SIGWINCH     discard signal       Window size change
-29    SIGINFO      discard signal       status request from keyboard
-30    SIGUSR1      terminate process    User defined signal 1
-31    SIGUSR2      terminate process    User defined signal 2
-
-*/
-
-#[cfg(any(target_vendor = "apple", target_os = "freebsd"))]
-pub static ALL_SIGNALS: [&str; 32] = [
-    "EXIT", "HUP", "INT", "QUIT", "ILL", "TRAP", "ABRT", "EMT", "FPE", "KILL", "BUS", "SEGV",
-    "SYS", "PIPE", "ALRM", "TERM", "URG", "STOP", "TSTP", "CONT", "CHLD", "TTIN", "TTOU", "IO",
-    "XCPU", "XFSZ", "VTALRM", "PROF", "WINCH", "INFO", "USR1", "USR2",
-];
-
-/*
-
-     The following signals are defined in NetBSD:
-
-     SIGHUP           1     Hangup
-     SIGINT           2     Interrupt
-     SIGQUIT          3     Quit
-     SIGILL           4     Illegal instruction
-     SIGTRAP          5     Trace/BPT trap
-     SIGABRT          6     Abort trap
-     SIGEMT           7     EMT trap
-     SIGFPE           8     Floating point exception
-     SIGKILL          9     Killed
-     SIGBUS           10    Bus error
-     SIGSEGV          11    Segmentation fault
-     SIGSYS           12    Bad system call
-     SIGPIPE          13    Broken pipe
-     SIGALRM          14    Alarm clock
-     SIGTERM          15    Terminated
-     SIGURG           16    Urgent I/O condition
-     SIGSTOP          17    Suspended (signal)
-     SIGTSTP          18    Suspended
-     SIGCONT          19    Continued
-     SIGCHLD          20    Child exited, stopped or continued
-     SIGTTIN          21    Stopped (tty input)
-     SIGTTOU          22    Stopped (tty output)
-     SIGIO            23    I/O possible
-     SIGXCPU          24    CPU time limit exceeded
-     SIGXFSZ          25    File size limit exceeded
-     SIGVTALRM        26    Virtual timer expired
-     SIGPROF          27    Profiling timer expired
-     SIGWINCH         28    Window size changed
-     SIGINFO          29    Information request
-     SIGUSR1          30    User defined signal 1
-     SIGUSR2          31    User defined signal 2
-     SIGPWR           32    Power fail/restart
-*/
-
-#[cfg(target_os = "netbsd")]
-pub static ALL_SIGNALS: [&str; 33] = [
-    "EXIT", "HUP", "INT", "QUIT", "ILL", "TRAP", "ABRT", "EMT", "FPE", "KILL", "BUS", "SEGV",
-    "SYS", "PIPE", "ALRM", "TERM", "URG", "STOP", "TSTP", "CONT", "CHLD", "TTIN", "TTOU", "IO",
-    "XCPU", "XFSZ", "VTALRM", "PROF", "WINCH", "INFO", "USR1", "USR2", "PWR",
-];
-
-/*
-
-     The following signals are defined in OpenBSD:
-
-     SIGHUP       terminate process    terminal line hangup
-     SIGINT       terminate process    interrupt program
-     SIGQUIT      create core image    quit program
-     SIGILL       create core image    illegal instruction
-     SIGTRAP      create core image    trace trap
-     SIGABRT      create core image    abort(3) call (formerly SIGIOT)
-     SIGEMT       create core image    emulate instruction executed
-     SIGFPE       create core image    floating-point exception
-     SIGKILL      terminate process    kill program (cannot be caught or
-                                       ignored)
-     SIGBUS       create core image    bus error
-     SIGSEGV      create core image    segmentation violation
-     SIGSYS       create core image    system call given invalid argument
-     SIGPIPE      terminate process    write on a pipe with no reader
-     SIGALRM      terminate process    real-time timer expired
-     SIGTERM      terminate process    software termination signal
-     SIGURG       discard signal       urgent condition present on socket
-     SIGSTOP      stop process         stop (cannot be caught or ignored)
-     SIGTSTP      stop process         stop signal generated from keyboard
-     SIGCONT      discard signal       continue after stop
-     SIGCHLD      discard signal       child status has changed
-     SIGTTIN      stop process         background read attempted from control
-                                       terminal
-     SIGTTOU      stop process         background write attempted to control
-                                       terminal
-     SIGIO        discard signal       I/O is possible on a descriptor (see
-                                       fcntl(2))
-     SIGXCPU      terminate process    CPU time limit exceeded (see
-                                       setrlimit(2))
-     SIGXFSZ      terminate process    file size limit exceeded (see
-                                       setrlimit(2))
-     SIGVTALRM    terminate process    virtual time alarm (see setitimer(2))
-     SIGPROF      terminate process    profiling timer alarm (see
-                                       setitimer(2))
-     SIGWINCH     discard signal       window size change
-     SIGINFO      discard signal       status request from keyboard
-     SIGUSR1      terminate process    user-defined signal 1
-     SIGUSR2      terminate process    user-defined signal 2
-     SIGTHR       discard signal       thread AST
-*/
-
-#[cfg(target_os = "openbsd")]
-pub static ALL_SIGNALS: [&str; 33] = [
-    "EXIT", "HUP", "INT", "QUIT", "ILL", "TRAP", "ABRT", "EMT", "FPE", "KILL", "BUS", "SEGV",
-    "SYS", "PIPE", "ALRM", "TERM", "URG", "STOP", "TSTP", "CONT", "CHLD", "TTIN", "TTOU", "IO",
-    "XCPU", "XFSZ", "VTALRM", "PROF", "WINCH", "INFO", "USR1", "USR2", "THR",
-];
-
-/*
-     The following signals are defined in Solaris and illumos;
-     (the signals for illumos are the same as Solaris, but illumos still has SIGLWP
-     as well as the alias for SIGLWP (SIGAIOCANCEL)):
-
-     SIGHUP       1       hangup
-     SIGINT       2       interrupt (rubout)
-     SIGQUIT      3       quit (ASCII FS)
-     SIGILL       4       illegal instruction (not reset when caught)
-     SIGTRAP      5       trace trap (not reset when caught)
-     SIGIOT       6       IOT instruction
-     SIGABRT      6       used by abort, replace SIGIOT in the future
-     SIGEMT       7       EMT instruction
-     SIGFPE       8       floating point exception
-     SIGKILL      9       kill (cannot be caught or ignored)
-     SIGBUS       10      bus error
-     SIGSEGV      11      segmentation violation
-     SIGSYS       12      bad argument to system call
-     SIGPIPE      13      write on a pipe with no one to read it
-     SIGALRM      14      alarm clock
-     SIGTERM      15      software termination signal from kill
-     SIGUSR1      16      user defined signal 1
-     SIGUSR2      17      user defined signal 2
-     SIGCLD       18      child status change
-     SIGCHLD      18      child status change alias (POSIX)
-     SIGPWR       19      power-fail restart
-     SIGWINCH     20      window size change
-     SIGURG       21      urgent socket condition
-     SIGPOLL      22      pollable event occurred
-     SIGIO        SIGPOLL socket I/O possible (SIGPOLL alias)
-     SIGSTOP      23      stop (cannot be caught or ignored)
-     SIGTSTP      24      user stop requested from tty
-     SIGCONT      25      stopped process has been continued
-     SIGTTIN      26      background tty read attempted
-     SIGTTOU      27      background tty write attempted
-     SIGVTALRM    28      virtual timer expired
-     SIGPROF      29      profiling timer expired
-     SIGXCPU      30      exceeded cpu limit
-     SIGXFSZ      31      exceeded file size limit
-     SIGWAITING   32      reserved signal no longer used by threading code
-     SIGAIOCANCEL 33      reserved signal no longer used by threading code (formerly SIGLWP)
-     SIGFREEZE    34      special signal used by CPR
-     SIGTHAW      35      special signal used by CPR
-     SIGCANCEL    36      reserved signal for thread cancellation
-     SIGLOST      37      resource lost (eg, record-lock lost)
-     SIGXRES      38      resource control exceeded
-     SIGJVM1      39      reserved signal for Java Virtual Machine
-     SIGJVM2      40      reserved signal for Java Virtual Machine
-     SIGINFO      41      information request
-     SIGRTMIN     ((int)_sysconf(_SC_SIGRT_MIN)) first realtime signal
-     SIGRTMAX     ((int)_sysconf(_SC_SIGRT_MAX)) last realtime signal
-*/
-
-#[cfg(target_os = "solaris")]
-const SIGNALS_SIZE: usize = 46;
-
-#[cfg(target_os = "illumos")]
-const SIGNALS_SIZE: usize = 47;
-
-#[cfg(any(target_os = "solaris", target_os = "illumos"))]
-static ALL_SIGNALS: [&str; SIGNALS_SIZE] = [
-    "HUP",
-    "INT",
-    "QUIT",
-    "ILL",
-    "TRAP",
-    "IOT",
-    "ABRT",
-    "EMT",
-    "FPE",
-    "KILL",
-    "BUS",
-    "SEGV",
-    "SYS",
-    "PIPE",
-    "ALRM",
-    "TERM",
-    "USR1",
-    "USR2",
-    "CLD",
-    "CHLD",
-    "PWR",
-    "WINCH",
-    "URG",
-    "POLL",
-    "IO",
-    "STOP",
-    "TSTP",
-    "CONT",
-    "TTIN",
-    "TTOU",
-    "VTALRM",
-    "PROF",
-    "XCPU",
-    "XFSZ",
-    "WAITING",
-    "AIOCANCEL",
-    #[cfg(target_os = "illumos")]
-    "LWP",
-    "FREEZE",
-    "THAW",
-    "CANCEL",
-    "LOST",
-    "XRES",
-    "JVM1",
-    "JVM2",
-    "INFO",
-    "RTMIN",
-    "RTMAX",
-];
-
-/*
-   The following signals are defined in AIX:
-
-   SIGHUP     hangup, generated when terminal disconnects
-   SIGINT     interrupt, generated from terminal special char
-   SIGQUIT    quit, generated from terminal special char
-   SIGILL     illegal instruction (not reset when caught)
-   SIGTRAP    trace trap (not reset when caught)
-   SIGABRT    abort process
-   SIGEMT     EMT instruction
-   SIGFPE     floating point exception
-   SIGKILL    kill (cannot be caught or ignored)
-   SIGBUS     bus error (specification exception)
-   SIGSEGV    segmentation violation
-   SIGSYS     bad argument to system call
-   SIGPIPE    write on a pipe with no one to read it
-   SIGALRM    alarm clock timeout
-   SIGTERM    software termination signal
-   SIGURG     urgent condition on I/O channel
-   SIGSTOP    stop (cannot be caught or ignored)
-   SIGTSTP    interactive stop
-   SIGCONT    continue (cannot be caught or ignored)
-   SIGCHLD    sent to parent on child stop or exit
-   SIGTTIN    background read attempted from control terminal
-   SIGTTOU    background write attempted to control terminal
-   SIGIO      I/O possible, or completed
-   SIGXCPU    cpu time limit exceeded (see setrlimit())
-   SIGXFSZ    file size limit exceeded (see setrlimit())
-   SIGMSG     input data is in the ring buffer
-   SIGWINCH   window size changed
-   SIGPWR     power-fail restart
-   SIGUSR1    user defined signal 1
-   SIGUSR2    user defined signal 2
-   SIGPROF    profiling time alarm (see setitimer)
-   SIGDANGER  system crash imminent; free up some page space
-   SIGVTALRM  virtual time alarm (see setitimer)
-   SIGMIGRATE migrate process
-   SIGPRE     programming exception
-   SIGVIRT    AIX virtual time alarm
-   SIGTALRM   per-thread alarm clock
-*/
-#[cfg(target_os = "aix")]
-pub static ALL_SIGNALS: [&str; 37] = [
-    "HUP", "INT", "QUIT", "ILL", "TRAP", "ABRT", "EMT", "FPE", "KILL", "BUS", "SEGV", "SYS",
-    "PIPE", "ALRM", "TERM", "URG", "STOP", "TSTP", "CONT", "CHLD", "TTIN", "TTOU", "IO", "XCPU",
-    "XFSZ", "MSG", "WINCH", "PWR", "USR1", "USR2", "PROF", "DANGER", "VTALRM", "MIGRATE", "PRE",
-    "VIRT", "TALRM",
-];
-
-/*
-   The following signals are defined in Cygwin
-   https://cygwin.com/cgit/newlib-cygwin/tree/winsup/cygwin/include/cygwin/signal.h
-
-   SIGHUP     1   hangup
-   SIGINT     2   interrupt
-   SIGQUIT    3   quit
-   SIGILL     4   illegal instruction (not reset when caught)
-   SIGTRAP    5   trace trap (not reset when caught)
-   SIGABRT    6   used by abort
-   SIGEMT     7   EMT instruction
-   SIGFPE     8   floating point exception
-   SIGKILL    9   kill (cannot be caught or ignored)
-   SIGBUS     10  bus error
-   SIGSEGV    11  segmentation violation
-   SIGSYS     12  bad argument to system call
-   SIGPIPE    13  write on a pipe with no one to read it
-   SIGALRM    14  alarm clock
-   SIGTERM    15  software termination signal from kill
-   SIGURG     16  urgent condition on IO channel
-   SIGSTOP    17  sendable stop signal not from tty
-   SIGTSTP    18  stop signal from tty
-   SIGCONT    19  continue a stopped process
-   SIGCHLD    20  to parent on child stop or exit
-   SIGTTIN    21  to readers pgrp upon background tty read
-   SIGTTOU    22  like TTIN for output if (tp->t_local&LTOSTOP)
-   SIGIO      23  input/output possible signal
-   SIGXCPU    24  exceeded CPU time limit
-   SIGXFSZ    25  exceeded file size limit
-   SIGVTALRM  26  virtual time alarm
-   SIGPROF    27  profiling time alarm
-   SIGWINCH   28  window changed
-   SIGLOST    29  resource lost (eg, record-lock lost)
-   SIGUSR1    30  user defined signal 1
-   SIGUSR2    31  user defined signal 2
-*/
-#[cfg(target_os = "cygwin")]
-pub static ALL_SIGNALS: [&str; 32] = [
-    "EXIT", "HUP", "INT", "QUIT", "ILL", "TRAP", "ABRT", "EMT", "FPE", "KILL", "BUS", "SEGV",
-    "SYS", "PIPE", "ALRM", "TERM", "URG", "STOP", "TSTP", "CONT", "CHLD", "TTIN", "TTOU", "IO",
-    "XCPU", "XFSZ", "VTALRM", "PROF", "WINCH", "PWR", "USR1", "USR2",
-];
-
-/// Returns the signal number for a given signal name or value.
-pub fn signal_by_name_or_value(signal_name_or_value: &str) -> Option<usize> {
-    let signal_name_upcase = signal_name_or_value.to_uppercase();
-    if let Ok(value) = signal_name_upcase.parse() {
-        return if is_signal(value) { Some(value) } else { None };
-    }
-    let signal_name = signal_name_upcase.trim_start_matches("SIG");
-
-    ALL_SIGNALS.iter().position(|&s| s == signal_name)
-}
-
-/// Returns true if the given number is a valid signal number.
-pub fn is_signal(num: usize) -> bool {
-    num < ALL_SIGNALS.len()
-}
-
-/// Returns the signal name for a given signal value.
-pub fn signal_name_by_value(signal_value: usize) -> Option<&'static str> {
-    ALL_SIGNALS.get(signal_value).copied()
-}
-
-#[cfg(any(target_os = "linux", target_os = "android"))]
-fn realtime_signal_bounds() -> Option<(usize, usize)> {
-    let rtmin = libc::SIGRTMIN();
-    let rtmax = libc::SIGRTMAX();
-
-    (0 < rtmin && rtmin <= rtmax).then_some((rtmin as usize, rtmax as usize))
-}
-
-#[cfg(not(any(target_os = "linux", target_os = "android")))]
-fn realtime_signal_bounds() -> Option<(usize, usize)> {
-    None
-}
-
-/// Returns the largest signal number that list-style interfaces should accept.
-pub fn signal_number_upper_bound() -> usize {
-    let base = ALL_SIGNALS.len() - 1;
-
-    realtime_signal_bounds().map_or(base, |(_, rtmax)| rtmax.max(base))
-}
-
-/// Returns the signal name for list-style interfaces.
-pub fn signal_list_name_by_value(signal_value: usize) -> Option<String> {
-    if let Some(signal_name) = signal_name_by_value(signal_value) {
-        return Some(signal_name.to_string());
-    }
-
-    realtime_signal_bounds().and_then(|(rtmin, rtmax)| {
-        if signal_value == rtmin {
-            Some("RTMIN".to_string())
-        } else if signal_value == rtmax {
-            Some("RTMAX".to_string())
-        } else {
-            None
-        }
-    })
-}
-
-/// Returns the signal value for list-style interfaces.
-pub fn signal_list_value_by_name_or_number(spec: &str) -> Option<usize> {
-    let spec_upcase = spec.to_uppercase();
-
-    if let Ok(value) = spec_upcase.parse::<usize>() {
-        return (value <= signal_number_upper_bound()).then_some(value);
-    }
-
-    if let Some(value) = signal_by_name_or_value(&spec_upcase) {
-        return Some(value);
-    }
-
-    let signal_name = spec_upcase.trim_start_matches("SIG");
-    realtime_signal_bounds().and_then(|(rtmin, rtmax)| match signal_name {
-        "RTMIN" => Some(rtmin),
-        "RTMAX" => Some(rtmax),
-        _ => None,
-    })
-}
-
-/// Restores SIGPIPE to default behavior (process terminates on broken pipe).
-#[cfg(unix)]
-pub fn enable_pipe_errors() -> Result<(), Errno> {
-    // We pass the error as is, the return value would just be Ok(SigDfl), so we can safely ignore it.
-    // SAFETY: this function is safe as long as we do not use a custom SigHandler -- we use the default one.
-    unsafe { signal(SIGPIPE, SigDfl) }.map(|_| ())
-}
-
-/// Ignores SIGPIPE signal (broken pipe errors are returned instead of terminating).
-/// Use this to override the default SIGPIPE handling when you need to handle
-/// broken pipe errors gracefully (e.g., tee with --output-error).
-#[cfg(unix)]
-pub fn disable_pipe_errors() -> Result<(), Errno> {
-    // SAFETY: this function is safe as long as we do not use a custom SigHandler -- we use the default one.
-    unsafe { signal(SIGPIPE, SigIgn) }.map(|_| ())
-}
-
-/// Ignores the SIGINT signal.
-#[cfg(unix)]
-pub fn ignore_interrupts() -> Result<(), Errno> {
-    // We pass the error as is, the return value would just be Ok(SigIgn), so we can safely ignore it.
-    // SAFETY: this function is safe as long as we do not use a custom SigHandler -- we use the default one.
-    unsafe { signal(SIGINT, SigIgn) }.map(|_| ())
-}
-
-/// Installs a signal handler. The handler must be async-signal-safe.
-#[cfg(unix)]
-pub fn install_signal_handler(
-    sig: Signal,
-    handler: extern "C" fn(std::os::raw::c_int),
-) -> Result<(), Errno> {
-    let action = SigAction::new(
-        SigHandler::Handler(handler),
-        SaFlags::SA_RESTART,
-        SigSet::empty(),
-    );
-    unsafe { sigaction(sig, &action) }?;
-    Ok(())
-}
-
-// Detect closed stdin/stdout before Rust reopens them as /dev/null (see issue #2873)
-#[cfg(unix)]
-use std::sync::atomic::{AtomicBool, Ordering};
-
-#[cfg(unix)]
-static STDIN_WAS_CLOSED: AtomicBool = AtomicBool::new(false);
-#[cfg(unix)]
-static STDOUT_WAS_CLOSED: AtomicBool = AtomicBool::new(false);
-#[cfg(unix)]
-static STDERR_WAS_CLOSED: AtomicBool = AtomicBool::new(false);
-
-// SIGPIPE state capture - captures whether SIGPIPE was ignored at process startup
-#[cfg(unix)]
-static SIGPIPE_WAS_IGNORED: AtomicBool = AtomicBool::new(false);
-
-/// Captures stdio and SIGPIPE state at process initialization, before main() runs.
-///
-/// # Safety
-/// Called from `.init_array` before main(). Only reads current state.
-#[cfg(unix)]
-#[allow(clippy::missing_safety_doc)]
-pub unsafe extern "C" fn capture_startup_state() {
-    use nix::libc;
-    use std::mem::MaybeUninit;
-    use std::ptr;
-
-    // Capture stdio state
-    unsafe {
-        STDIN_WAS_CLOSED.store(
-            libc::fcntl(libc::STDIN_FILENO, libc::F_GETFD) == -1,
-            Ordering::Relaxed,
-        );
-        STDOUT_WAS_CLOSED.store(
-            libc::fcntl(libc::STDOUT_FILENO, libc::F_GETFD) == -1,
-            Ordering::Relaxed,
-        );
-        STDERR_WAS_CLOSED.store(
-            libc::fcntl(libc::STDERR_FILENO, libc::F_GETFD) == -1,
-            Ordering::Relaxed,
-        );
-    }
-
-    // Capture SIGPIPE state
-    let mut current = MaybeUninit::<libc::sigaction>::uninit();
-    // SAFETY: sigaction with null new-action just queries current state
-    if unsafe { libc::sigaction(libc::SIGPIPE, ptr::null(), current.as_mut_ptr()) } == 0 {
-        // SAFETY: sigaction succeeded, so current is initialized
-        let ignored = unsafe { current.assume_init() }.sa_sigaction == libc::SIG_IGN;
-        SIGPIPE_WAS_IGNORED.store(ignored, Ordering::Release);
-    }
-}
-
-/// Initializes startup state capture. Call once at crate root level.
-#[macro_export]
-#[cfg(unix)]
-macro_rules! init_startup_state_capture {
-    () => {
-        #[cfg(not(target_os = "macos"))]
-        #[used]
-        #[unsafe(link_section = ".init_array")]
-        static CAPTURE_STARTUP_STATE: unsafe extern "C" fn() =
-            $crate::signals::capture_startup_state;
-
-        #[cfg(target_os = "macos")]
-        #[used]
-        #[unsafe(link_section = "__DATA,__mod_init_func")]
-        static CAPTURE_STARTUP_STATE: unsafe extern "C" fn() =
-            $crate::signals::capture_startup_state;
-    };
-}
-
-#[macro_export]
-#[cfg(not(unix))]
-macro_rules! init_startup_state_capture {
-    () => {};
-}
-
-#[cfg(unix)]
-pub fn stdin_was_closed() -> bool {
-    STDIN_WAS_CLOSED.load(Ordering::Relaxed)
-}
-
-#[cfg(not(unix))]
-pub const fn stdin_was_closed() -> bool {
-    false
-}
-
-#[cfg(unix)]
-pub fn stdout_was_closed() -> bool {
-    STDOUT_WAS_CLOSED.load(Ordering::Relaxed)
-}
-
-#[cfg(not(unix))]
-pub const fn stdout_was_closed() -> bool {
-    false
-}
-
-#[cfg(unix)]
-pub fn stderr_was_closed() -> bool {
-    STDERR_WAS_CLOSED.load(Ordering::Relaxed)
-}
-
-#[cfg(not(unix))]
-pub const fn stderr_was_closed() -> bool {
-    false
-}
-
-/// Returns whether SIGPIPE was ignored at process startup.
-#[cfg(unix)]
-pub fn sigpipe_was_ignored() -> bool {
-    SIGPIPE_WAS_IGNORED.load(Ordering::Acquire)
-}
-
-#[cfg(not(unix))]
-pub const fn sigpipe_was_ignored() -> bool {
-    false
-}
-
-#[cfg(target_os = "linux")]
-pub fn ensure_stdout_not_broken() -> std::io::Result<bool> {
-    use nix::{
-        poll::{PollFd, PollFlags, PollTimeout, poll},
-        sys::stat::{SFlag, fstat},
-    };
-    use std::io::stdout;
-    use std::os::fd::AsFd;
-
-    let out = stdout();
-
-    // First, check that stdout is a fifo and return true if it's not the case
-    let stat = fstat(out.as_fd())?;
-    if !SFlag::from_bits_truncate(stat.st_mode).contains(SFlag::S_IFIFO) {
-        return Ok(true);
-    }
-
-    // POLLRDBAND is the flag used by GNU tee.
-    let mut pfds = [PollFd::new(out.as_fd(), PollFlags::POLLRDBAND)];
-
-    // Then, ensure that the pipe is not broken.
-    // Use ZERO timeout to return immediately - we just want to check the current state.
-    let res = poll(&mut pfds, PollTimeout::ZERO)?;
-
-    if res > 0 {
-        // poll returned with events ready - check if POLLERR is set (pipe broken)
-        let error = pfds.iter().any(|pfd| {
-            if let Some(revents) = pfd.revents() {
-                revents.contains(PollFlags::POLLERR)
-            } else {
-                true
-            }
-        });
-        return Ok(!error);
-    }
-
-    // res == 0 means no events ready (timeout reached immediately with ZERO timeout).
-    // This means the pipe is healthy (not broken).
-    // res < 0 would be an error, but nix returns Err in that case.
-    Ok(true)
-}
-
-#[test]
-fn signal_by_value() {
-    assert_eq!(signal_by_name_or_value("0"), Some(0));
-    for (value, _signal) in ALL_SIGNALS.iter().enumerate() {
-        assert_eq!(signal_by_name_or_value(&value.to_string()), Some(value));
-    }
-}
-
-#[test]
-fn signal_by_short_name() {
-    for (value, signal) in ALL_SIGNALS.iter().enumerate() {
-        assert_eq!(signal_by_name_or_value(signal), Some(value));
-    }
-}
-
-#[test]
-fn signal_by_long_name() {
-    for (value, signal) in ALL_SIGNALS.iter().enumerate() {
-        assert_eq!(
-            signal_by_name_or_value(&format!("SIG{signal}")),
-            Some(value)
-        );
-    }
-}
-
-#[test]
-fn name() {
-    for (value, signal) in ALL_SIGNALS.iter().enumerate() {
-        assert_eq!(signal_name_by_value(value), Some(*signal));
-    }
-}
-
-#[test]
-fn list_signal_names_match_static_signal_names() {
-    for (value, signal) in ALL_SIGNALS.iter().enumerate() {
-        assert_eq!(signal_list_name_by_value(value), Some(signal.to_string()));
-    }
-}
-
-#[test]
-fn list_signal_numbers_follow_upper_bound() {
-    assert_eq!(
-        signal_list_value_by_name_or_number(&signal_number_upper_bound().to_string()),
-        Some(signal_number_upper_bound())
-    );
-    assert_eq!(
-        signal_list_value_by_name_or_number(&(signal_number_upper_bound() + 1).to_string()),
-        None
-    );
-}
-
-#[cfg(any(target_os = "linux", target_os = "android"))]
-#[test]
-fn linux_realtime_signal_upper_bound_includes_rtmax() {
-    let (_, rtmax) = realtime_signal_bounds().unwrap();
-    assert!(signal_number_upper_bound() >= rtmax);
-}
-
-#[cfg(any(target_os = "linux", target_os = "android"))]
-#[test]
-fn linux_realtime_signal_names_are_listed() {
-    let (rtmin, rtmax) = realtime_signal_bounds().unwrap();
-
-    assert_eq!(signal_list_name_by_value(rtmin), Some("RTMIN".to_string()));
-    assert_eq!(signal_list_name_by_value(rtmax), Some("RTMAX".to_string()));
-}
-
-#[cfg(any(target_os = "linux", target_os = "android"))]
-#[test]
-fn linux_realtime_signal_names_resolve_to_runtime_values() {
-    let (rtmin, rtmax) = realtime_signal_bounds().unwrap();
-
-    assert_eq!(signal_list_value_by_name_or_number("RTMIN"), Some(rtmin));
-    assert_eq!(signal_list_value_by_name_or_number("RTMAX"), Some(rtmax));
-    assert_eq!(signal_list_value_by_name_or_number("SIGRTMIN"), Some(rtmin));
-    assert_eq!(signal_list_value_by_name_or_number("SIGRTMAX"), Some(rtmax));
-}
-
-#[cfg(any(target_os = "linux", target_os = "android"))]
-#[test]
-fn linux_unnamed_signal_numbers_are_valid_for_lists() {
-    assert_eq!(signal_list_value_by_name_or_number("32"), Some(32));
-    assert_eq!(signal_list_value_by_name_or_number("33"), Some(33));
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/smack.rs b/registry/native/stubs/uucore/src/lib/features/smack.rs
deleted file mode 100644
index 375db8859..000000000
--- a/registry/native/stubs/uucore/src/lib/features/smack.rs
+++ /dev/null
@@ -1,122 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore smackfs
-
-//! SMACK (Simplified Mandatory Access Control Kernel) support
-
-use std::fs;
-use std::io::{self, Read, Write};
-use std::path::Path;
-use std::sync::OnceLock;
-
-use thiserror::Error;
-
-use crate::error::{UError, USimpleError, strip_errno};
-use crate::translate;
-
-#[derive(Debug, Error)]
-pub enum SmackError {
-    #[error("{}", translate!("smack-error-not-enabled"))]
-    SmackNotEnabled,
-
-    #[error("{}", translate!("smack-error-label-retrieval-failure", "error" => strip_errno(.0)))]
-    LabelRetrievalFailure(io::Error),
-
-    #[error("{}", translate!("smack-error-label-set-failure", "context" => .0.clone(), "error" => strip_errno(.1)))]
-    LabelSetFailure(String, io::Error),
-}
-
-impl UError for SmackError {
-    fn code(&self) -> i32 {
-        match self {
-            Self::SmackNotEnabled => 1,
-            Self::LabelRetrievalFailure(_) => 2,
-            Self::LabelSetFailure(_, _) => 3,
-        }
-    }
-}
-
-impl From<SmackError> for i32 {
-    fn from(error: SmackError) -> Self {
-        error.code()
-    }
-}
-
-/// Checks if SMACK is enabled by verifying smackfs is mounted.
-/// The result is cached after the first call.
-pub fn is_smack_enabled() -> bool {
-    static SMACK_ENABLED: OnceLock<bool> = OnceLock::new();
-    *SMACK_ENABLED.get_or_init(|| Path::new("/sys/fs/smackfs").exists())
-}
-
-/// Gets the SMACK label for the current process.
-pub fn get_smack_label_for_self() -> Result<String, SmackError> {
-    if !is_smack_enabled() {
-        return Err(SmackError::SmackNotEnabled);
-    }
-
-    let mut label = String::new();
-    fs::File::open("/proc/self/attr/current")
-        .map_err(SmackError::LabelRetrievalFailure)?
-        .read_to_string(&mut label)
-        .map_err(SmackError::LabelRetrievalFailure)?;
-
-    Ok(label.trim().to_string())
-}
-
-/// Sets the SMACK label for the current process.
-pub fn set_smack_label_for_self(label: &str) -> Result<(), SmackError> {
-    if !is_smack_enabled() {
-        return Err(SmackError::SmackNotEnabled);
-    }
-
-    fs::File::create("/proc/self/attr/current")
-        .and_then(|mut f| f.write_all(label.as_bytes()))
-        .map_err(|e| SmackError::LabelSetFailure(label.to_string(), e))
-}
-
-/// Gets the SMACK label for a filesystem path via xattr.
-pub fn get_smack_label_for_path(path: &Path) -> Result<String, SmackError> {
-    if !is_smack_enabled() {
-        return Err(SmackError::SmackNotEnabled);
-    }
-
-    match xattr::get(path, "security.SMACK64") {
-        Ok(Some(value)) => Ok(String::from_utf8_lossy(&value).trim().to_string()),
-        Ok(None) => Err(SmackError::LabelRetrievalFailure(io::Error::new(
-            io::ErrorKind::NotFound,
-            translate!("smack-error-no-label-set"),
-        ))),
-        Err(e) => Err(SmackError::LabelRetrievalFailure(e)),
-    }
-}
-
-/// Sets the SMACK label for a filesystem path via xattr.
-pub fn set_smack_label_for_path(path: &Path, label: &str) -> Result<(), SmackError> {
-    if !is_smack_enabled() {
-        return Err(SmackError::SmackNotEnabled);
-    }
-
-    xattr::set(path, "security.SMACK64", label.as_bytes())
-        .map_err(|e| SmackError::LabelSetFailure(label.to_string(), e))
-}
-
-/// Sets SMACK label for a new path, calling cleanup on failure.
-pub fn set_smack_label_and_cleanup(
-    path: impl AsRef<Path>,
-    context: Option<&String>,
-    cleanup: impl FnOnce(&Path) -> io::Result<()>,
-) -> Result<(), Box<dyn UError>> {
-    let Some(ctx) = context else { return Ok(()) };
-    if !is_smack_enabled() {
-        return Ok(());
-    }
-    let path = path.as_ref();
-    set_smack_label_for_path(path, ctx).map_err(|e| {
-        let _ = cleanup(path);
-        USimpleError::new(1, e.to_string())
-    })
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/sum.rs b/registry/native/stubs/uucore/src/lib/features/sum.rs
deleted file mode 100644
index 279643a96..000000000
--- a/registry/native/stubs/uucore/src/lib/features/sum.rs
+++ /dev/null
@@ -1,719 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore memmem algo PCLMULQDQ refin xorout Hdlc
-
-//! Implementations of digest functions, like md5 and sha1.
-//!
-//! The [`Digest`] trait represents the interface for providing inputs
-//! to these digest functions and accessing the resulting hash. The
-//! [`DigestWriter`] struct provides a wrapper around [`Digest`] that
-//! implements the [`Write`] trait, for use in situations where calling
-//! [`write`] would be useful.
-
-use std::io::{self, Write};
-
-use data_encoding::BASE64;
-
-#[cfg(windows)]
-use memchr::memmem;
-
-use crate::error::{UResult, USimpleError};
-
-/// Represents the output of a checksum computation.
-#[derive(Debug)]
-pub enum DigestOutput {
-    /// Varying-size output
-    Vec(Vec<u8>),
-    /// Legacy output for Crc and Crc32B modes
-    Crc(u32),
-    /// Legacy output for Sysv and BSD modes
-    U16(u16),
-}
-
-impl DigestOutput {
-    pub fn write_raw(&self, mut w: impl Write) -> io::Result<()> {
-        match self {
-            Self::Vec(buf) => w.write_all(buf),
-            // For legacy outputs, print them in big endian
-            Self::Crc(n) => w.write_all(&n.to_be_bytes()),
-            Self::U16(n) => w.write_all(&n.to_be_bytes()),
-        }
-    }
-
-    pub fn to_hex(&self) -> UResult<String> {
-        match self {
-            Self::Vec(buf) => Ok(hex::encode(buf)),
-            _ => Err(USimpleError::new(1, "Legacy output cannot be encoded")),
-        }
-    }
-
-    pub fn to_base64(&self) -> UResult<String> {
-        match self {
-            Self::Vec(buf) => Ok(BASE64.encode(buf)),
-            _ => Err(USimpleError::new(1, "Legacy output cannot be encoded")),
-        }
-    }
-}
-
-pub trait Digest {
-    fn hash_update(&mut self, input: &[u8]);
-    fn hash_finalize(&mut self, out: &mut [u8]);
-    fn reset(&mut self);
-    fn output_bits(&self) -> usize;
-    fn output_bytes(&self) -> usize {
-        self.output_bits().div_ceil(8)
-    }
-
-    fn result(&mut self) -> DigestOutput {
-        let mut buf: Vec<u8> = vec![0; self.output_bytes()];
-        self.hash_finalize(&mut buf);
-        DigestOutput::Vec(buf)
-    }
-}
-
-/// first element of the tuple is the blake2b state
-/// second is the number of output bits
-pub struct Blake2b {
-    digest: blake2b_simd::State,
-    bit_size: usize,
-}
-
-impl Blake2b {
-    pub const DEFAULT_BYTE_SIZE: usize = 64;
-
-    /// Return a new Blake2b instance with a custom output bytes length
-    pub fn with_output_bytes(output_bytes: usize) -> Self {
-        let mut params = blake2b_simd::Params::new();
-        params.hash_length(output_bytes);
-
-        let state = params.to_state();
-        Self {
-            digest: state,
-            bit_size: output_bytes * 8,
-        }
-    }
-}
-
-impl Default for Blake2b {
-    fn default() -> Self {
-        Self::with_output_bytes(Self::DEFAULT_BYTE_SIZE)
-    }
-}
-
-impl Digest for Blake2b {
-    fn hash_update(&mut self, input: &[u8]) {
-        self.digest.update(input);
-    }
-
-    fn hash_finalize(&mut self, out: &mut [u8]) {
-        let hash_result = &self.digest.finalize();
-        out.copy_from_slice(hash_result.as_bytes());
-    }
-
-    fn reset(&mut self) {
-        *self = Self::with_output_bytes(self.output_bytes());
-    }
-
-    fn output_bits(&self) -> usize {
-        self.bit_size
-    }
-}
-
-#[derive(Default)]
-pub struct Blake3(blake3::Hasher);
-
-impl Digest for Blake3 {
-    fn hash_update(&mut self, input: &[u8]) {
-        self.0.update(input);
-    }
-
-    fn hash_finalize(&mut self, out: &mut [u8]) {
-        let hash_result = &self.0.finalize();
-        out.copy_from_slice(hash_result.as_bytes());
-    }
-
-    fn reset(&mut self) {
-        *self = Self::default();
-    }
-
-    fn output_bits(&self) -> usize {
-        256
-    }
-}
-
-#[derive(Default)]
-pub struct Sm3(sm3::Sm3);
-
-impl Digest for Sm3 {
-    fn hash_update(&mut self, input: &[u8]) {
-        <sm3::Sm3 as sm3::Digest>::update(&mut self.0, input);
-    }
-
-    fn hash_finalize(&mut self, out: &mut [u8]) {
-        out.copy_from_slice(&<sm3::Sm3 as sm3::Digest>::finalize(self.0.clone()));
-    }
-
-    fn reset(&mut self) {
-        *self = Self::default();
-    }
-
-    fn output_bits(&self) -> usize {
-        256
-    }
-}
-
-pub struct Crc {
-    digest: crc_fast::Digest,
-    size: usize,
-}
-
-impl Crc {
-    /// POSIX cksum SIMD configuration for crc-fast
-    /// This uses SIMD instructions (PCLMULQDQ) for fast CRC computation
-    fn get_posix_cksum_params() -> crc_fast::CrcParams {
-        crc_fast::CrcParams::new(
-            "CRC-32/CKSUM", // Name
-            32,             // Width
-            0x04c1_1db7,    // Polynomial
-            0x0000_0000,    // Initial CRC value: 0 (not 0xffffffff)
-            false,          // No input reflection (refin)
-            0xffff_ffff,    // XOR output with 0xffffffff (xorout)
-            0,              // Check value (not used)
-        )
-    }
-}
-
-impl Default for Crc {
-    fn default() -> Self {
-        Self {
-            digest: crc_fast::Digest::new_with_params(Self::get_posix_cksum_params()),
-            size: 0,
-        }
-    }
-}
-
-impl Digest for Crc {
-    fn hash_update(&mut self, input: &[u8]) {
-        self.digest.update(input);
-        self.size += input.len();
-    }
-
-    fn hash_finalize(&mut self, out: &mut [u8]) {
-        // Add the size at the end of the buffer.
-        let mut sz = self.size;
-        while sz > 0 {
-            self.digest.update(&[sz as u8]);
-            sz >>= 8;
-        }
-
-        out.copy_from_slice(&self.digest.finalize().to_ne_bytes());
-    }
-
-    fn result(&mut self) -> DigestOutput {
-        let mut out: [u8; 8] = [0; 8];
-        self.hash_finalize(&mut out);
-
-        let x = u64::from_ne_bytes(out);
-        DigestOutput::Crc((x & (u32::MAX as u64)) as u32)
-    }
-
-    fn reset(&mut self) {
-        self.digest.reset();
-        self.size = 0;
-    }
-
-    fn output_bits(&self) -> usize {
-        256
-    }
-}
-
-pub struct CRC32B {
-    digest: crc_fast::Digest,
-}
-
-impl Default for CRC32B {
-    fn default() -> Self {
-        Self {
-            digest: crc_fast::Digest::new(crc_fast::CrcAlgorithm::Crc32IsoHdlc),
-        }
-    }
-}
-
-impl Digest for CRC32B {
-    fn hash_update(&mut self, input: &[u8]) {
-        self.digest.update(input);
-    }
-
-    fn hash_finalize(&mut self, out: &mut [u8]) {
-        let result = self.digest.finalize();
-        // crc_fast returns a 64-bit value, but CRC32B should be 32-bit
-        // Take the lower 32 bits and convert to big-endian bytes
-        let crc32_value = (result & 0xffff_ffff) as u32;
-        out.copy_from_slice(&crc32_value.to_be_bytes());
-    }
-
-    fn reset(&mut self) {
-        self.digest.reset();
-    }
-
-    fn output_bits(&self) -> usize {
-        32
-    }
-
-    fn result(&mut self) -> DigestOutput {
-        let mut out = [0; 4];
-        self.hash_finalize(&mut out);
-        DigestOutput::Crc(u32::from_be_bytes(out))
-    }
-}
-
-#[derive(Default)]
-pub struct Bsd {
-    state: u16,
-}
-
-impl Digest for Bsd {
-    fn hash_update(&mut self, input: &[u8]) {
-        for &byte in input {
-            self.state = (self.state >> 1) + ((self.state & 1) << 15);
-            self.state = self.state.wrapping_add(u16::from(byte));
-        }
-    }
-
-    fn hash_finalize(&mut self, out: &mut [u8]) {
-        out.copy_from_slice(&self.state.to_ne_bytes());
-    }
-
-    fn result(&mut self) -> DigestOutput {
-        let mut out = [0; 2];
-        self.hash_finalize(&mut out);
-        DigestOutput::U16(self.state)
-    }
-
-    fn reset(&mut self) {
-        *self = Self::default();
-    }
-
-    fn output_bits(&self) -> usize {
-        128
-    }
-}
-
-#[derive(Default)]
-pub struct SysV {
-    state: u32,
-}
-
-impl Digest for SysV {
-    fn hash_update(&mut self, input: &[u8]) {
-        for &byte in input {
-            self.state = self.state.wrapping_add(u32::from(byte));
-        }
-    }
-
-    fn hash_finalize(&mut self, out: &mut [u8]) {
-        self.state = (self.state & 0xffff) + (self.state >> 16);
-        self.state = (self.state & 0xffff) + (self.state >> 16);
-        out.copy_from_slice(&(self.state as u16).to_ne_bytes());
-    }
-
-    fn result(&mut self) -> DigestOutput {
-        let mut out = [0; 2];
-        self.hash_finalize(&mut out);
-        DigestOutput::U16((self.state & (u16::MAX as u32)) as u16)
-    }
-
-    fn reset(&mut self) {
-        *self = Self::default();
-    }
-
-    fn output_bits(&self) -> usize {
-        512
-    }
-}
-
-// Implements the Digest trait for sha2 / sha3 algorithms with fixed output
-macro_rules! impl_digest_common {
-    ($algo_type: ty, $size: literal) => {
-        impl Default for $algo_type {
-            fn default() -> Self {
-                Self(Default::default())
-            }
-        }
-        impl Digest for $algo_type {
-            fn hash_update(&mut self, input: &[u8]) {
-                digest::Digest::update(&mut self.0, input);
-            }
-
-            fn hash_finalize(&mut self, out: &mut [u8]) {
-                digest::Digest::finalize_into_reset(&mut self.0, out.into());
-            }
-
-            fn reset(&mut self) {
-                *self = Self::default();
-            }
-
-            fn output_bits(&self) -> usize {
-                $size
-            }
-        }
-    };
-}
-
-// Implements the Digest trait for sha2 / sha3 algorithms with variable output
-macro_rules! impl_digest_shake {
-    ($algo_type: ty, $default_output_bits: literal) => {
-        impl $algo_type {
-            pub const DEFAULT_BIT_SIZE: usize = $default_output_bits;
-
-            pub fn with_output_bits(bits: usize) -> Self {
-                Self {
-                    digest: Default::default(),
-                    bit_size: bits,
-                }
-            }
-        }
-        impl Default for $algo_type {
-            fn default() -> Self {
-                Self::with_output_bits(Self::DEFAULT_BIT_SIZE)
-            }
-        }
-        impl Digest for $algo_type {
-            fn hash_update(&mut self, input: &[u8]) {
-                digest::Update::update(&mut self.digest, input);
-            }
-
-            fn hash_finalize(&mut self, out: &mut [u8]) {
-                digest::ExtendableOutputReset::finalize_xof_reset_into(&mut self.digest, out);
-
-                // Remove the last bits if the requested length is not a multiple of 8.
-                let extra = self.output_bits() % 8;
-                if extra != 0 {
-                    out[out.len() - 1] &= (1 << extra) - 1;
-                }
-            }
-
-            fn reset(&mut self) {
-                *self = Self::with_output_bits(self.bit_size);
-            }
-
-            fn output_bits(&self) -> usize {
-                self.bit_size
-            }
-
-            fn result(&mut self) -> DigestOutput {
-                let mut bytes = vec![0; self.output_bits().div_ceil(8)];
-                self.hash_finalize(&mut bytes);
-                DigestOutput::Vec(bytes)
-            }
-        }
-    };
-}
-
-pub struct Md5(md5::Md5);
-pub struct Sha1(sha1::Sha1);
-pub struct Sha224(sha2::Sha224);
-pub struct Sha256(sha2::Sha256);
-pub struct Sha384(sha2::Sha384);
-pub struct Sha512(sha2::Sha512);
-impl_digest_common!(Md5, 128);
-impl_digest_common!(Sha1, 160);
-impl_digest_common!(Sha224, 224);
-impl_digest_common!(Sha256, 256);
-impl_digest_common!(Sha384, 384);
-impl_digest_common!(Sha512, 512);
-
-pub struct Sha3_224(sha3::Sha3_224);
-pub struct Sha3_256(sha3::Sha3_256);
-pub struct Sha3_384(sha3::Sha3_384);
-pub struct Sha3_512(sha3::Sha3_512);
-impl_digest_common!(Sha3_224, 224);
-impl_digest_common!(Sha3_256, 256);
-impl_digest_common!(Sha3_384, 384);
-impl_digest_common!(Sha3_512, 512);
-
-pub struct Shake128 {
-    digest: sha3::Shake128,
-    bit_size: usize,
-}
-pub struct Shake256 {
-    digest: sha3::Shake256,
-    bit_size: usize,
-}
-impl_digest_shake!(Shake128, 256);
-impl_digest_shake!(Shake256, 512);
-
-/// A struct that writes to a digest.
-///
-/// This struct wraps a [`Digest`] and provides a [`Write`]
-/// implementation that passes input bytes directly to the
-/// [`Digest::hash_update`].
-///
-/// On Windows, if `binary` is `false`, then the [`write`]
-/// implementation replaces instances of "\r\n" with "\n" before passing
-/// the input bytes to the [`digest`].
-pub struct DigestWriter<'a> {
-    digest: &'a mut Box<dyn Digest>,
-
-    /// Whether to write to the digest in binary mode or text mode on Windows.
-    ///
-    /// If this is `false`, then instances of "\r\n" are replaced with
-    /// "\n" before passing input bytes to the [`digest`].
-    #[allow(dead_code)]
-    binary: bool,
-
-    /// Whether the previous
-    #[allow(dead_code)]
-    was_last_character_carriage_return: bool,
-    // TODO These are dead code only on non-Windows operating systems.
-    // It might be better to use a `#[cfg(windows)]` guard here.
-}
-
-impl<'a> DigestWriter<'a> {
-    pub fn new(digest: &'a mut Box<dyn Digest>, binary: bool) -> Self {
-        let was_last_character_carriage_return = false;
-        DigestWriter {
-            digest,
-            binary,
-            was_last_character_carriage_return,
-        }
-    }
-
-    pub fn finalize(&mut self) -> bool {
-        if self.was_last_character_carriage_return {
-            self.digest.hash_update(b"\r");
-            true
-        } else {
-            false
-        }
-    }
-}
-
-impl Write for DigestWriter<'_> {
-    #[cfg(not(windows))]
-    fn write(&mut self, buf: &[u8]) -> io::Result<usize> {
-        self.digest.hash_update(buf);
-        Ok(buf.len())
-    }
-
-    #[cfg(windows)]
-    fn write(&mut self, buf: &[u8]) -> io::Result<usize> {
-        if self.binary {
-            self.digest.hash_update(buf);
-            return Ok(buf.len());
-        }
-
-        // The remaining code handles Windows text mode, where we must
-        // replace each occurrence of "\r\n" with "\n".
-        //
-        // First, if the last character written was "\r" and the first
-        // character in the current buffer to write is not "\n", then we
-        // need to write the "\r" that we buffered from the previous
-        // call to `write()`.
-        let n = buf.len();
-        if self.was_last_character_carriage_return && n > 0 && buf[0] != b'\n' {
-            self.digest.hash_update(b"\r");
-        }
-
-        // Next, find all occurrences of "\r\n", inputting the slice
-        // just before the "\n" in the previous instance of "\r\n" and
-        // the beginning of this "\r\n".
-        let mut i_prev = 0;
-        for i in memmem::find_iter(buf, b"\r\n") {
-            self.digest.hash_update(&buf[i_prev..i]);
-            i_prev = i + 1;
-        }
-
-        // Finally, check whether the last character is "\r". If so,
-        // buffer it until we know that the next character is not "\n",
-        // which can only be known on the next call to `write()`.
-        //
-        // This all assumes that `write()` will be called on adjacent
-        // blocks of the input.
-        if n > 0 && buf[n - 1] == b'\r' {
-            self.was_last_character_carriage_return = true;
-            self.digest.hash_update(&buf[i_prev..n - 1]);
-        } else {
-            self.was_last_character_carriage_return = false;
-            self.digest.hash_update(&buf[i_prev..n]);
-        }
-
-        // Even though we dropped a "\r" for each "\r\n" we found, we
-        // still report the number of bytes written as `n`. This is
-        // because the meaning of the returned number is supposed to be
-        // the number of bytes consumed by the writer, so that if the
-        // calling code were calling `write()` in a loop, it would know
-        // where the next contiguous slice of the buffer starts.
-        Ok(n)
-    }
-
-    fn flush(&mut self) -> io::Result<()> {
-        Ok(())
-    }
-}
-
-#[cfg(test)]
-mod tests {
-
-    /// Test for replacing a "\r\n" sequence with "\n" when the "\r" is
-    /// at the end of one block and the "\n" is at the beginning of the
-    /// next block, when reading in blocks.
-    #[cfg(windows)]
-    #[test]
-    fn test_crlf_across_blocks() {
-        use std::io::Write;
-
-        use super::Digest;
-        use super::DigestWriter;
-        use super::Md5;
-
-        // Writing "\r" in one call to `write()`, and then "\n" in another.
-        let mut digest = Box::new(Md5::new()) as Box<dyn Digest>;
-        let mut writer_crlf = DigestWriter::new(&mut digest, false);
-        writer_crlf.write_all(b"\r").unwrap();
-        writer_crlf.write_all(b"\n").unwrap();
-        writer_crlf.finalize();
-        let result_crlf = digest.result();
-
-        // We expect "\r\n" to be replaced with "\n" in text mode on Windows.
-        let mut digest = Box::new(Md5::new()) as Box<dyn Digest>;
-        let mut writer_lf = DigestWriter::new(&mut digest, false);
-        writer_lf.write_all(b"\n").unwrap();
-        writer_lf.finalize();
-        let result_lf = digest.result();
-
-        assert_eq!(result_crlf, result_lf);
-    }
-
-    use super::{Crc, Digest};
-
-    #[test]
-    fn test_crc_basic_functionality() {
-        // Test that our CRC implementation works with basic functionality
-        let mut crc1 = Crc::default();
-        let mut crc2 = Crc::default();
-
-        // Same input should give same output
-        crc1.hash_update(b"test");
-        crc2.hash_update(b"test");
-
-        let mut out1 = [0u8; 8];
-        let mut out2 = [0u8; 8];
-        crc1.hash_finalize(&mut out1);
-        crc2.hash_finalize(&mut out2);
-
-        assert_eq!(out1, out2);
-    }
-
-    #[test]
-    fn test_crc_digest_basic() {
-        let mut crc = Crc::default();
-
-        // Test empty input
-        let mut output = [0u8; 8];
-        crc.hash_finalize(&mut output);
-        let empty_result = u64::from_ne_bytes(output);
-
-        // Reset and test with "test" string
-        let mut crc = Crc::default();
-        crc.hash_update(b"test");
-        crc.hash_finalize(&mut output);
-        let test_result = u64::from_ne_bytes(output);
-
-        // The result should be different for different inputs
-        assert_ne!(empty_result, test_result);
-
-        // Test known value: "test" should give 3076352578
-        assert_eq!(test_result, 3_076_352_578);
-    }
-
-    #[test]
-    fn test_crc_digest_incremental() {
-        let mut crc1 = Crc::default();
-        let mut crc2 = Crc::default();
-
-        // Test that processing in chunks gives same result as all at once
-        let data = b"Hello, World! This is a test string for CRC computation.";
-
-        // Process all at once
-        crc1.hash_update(data);
-        let mut output1 = [0u8; 8];
-        crc1.hash_finalize(&mut output1);
-
-        // Process in chunks
-        crc2.hash_update(&data[0..10]);
-        crc2.hash_update(&data[10..30]);
-        crc2.hash_update(&data[30..]);
-        let mut output2 = [0u8; 8];
-        crc2.hash_finalize(&mut output2);
-
-        assert_eq!(output1, output2);
-    }
-
-    #[test]
-    fn test_crc_slice8_vs_single_byte() {
-        // Test that our optimized slice-by-8 gives same results as byte-by-byte
-        let test_data = b"This is a longer test string to verify slice-by-8 optimization works correctly with various data sizes including remainders.";
-
-        let mut crc_optimized = Crc::default();
-        crc_optimized.hash_update(test_data);
-        let mut output_opt = [0u8; 8];
-        crc_optimized.hash_finalize(&mut output_opt);
-
-        // Create a reference implementation using hash_update
-        let mut crc_reference = Crc::default();
-        for &byte in test_data {
-            crc_reference.hash_update(&[byte]);
-        }
-        let mut output_ref = [0u8; 8];
-        crc_reference.hash_finalize(&mut output_ref);
-
-        assert_eq!(output_opt, output_ref);
-    }
-
-    #[test]
-    fn test_crc_known_values() {
-        // Test against our CRC implementation values
-        // Note: These are the correct values for our POSIX cksum implementation
-        let test_cases = [
-            ("", 4_294_967_295_u64),
-            ("a", 1_220_704_766_u64),
-            ("abc", 1_219_131_554_u64),
-        ];
-
-        for (input, expected) in test_cases {
-            let mut crc = Crc::default();
-            crc.hash_update(input.as_bytes());
-            let mut output = [0u8; 8];
-            crc.hash_finalize(&mut output);
-            let result = u64::from_ne_bytes(output);
-
-            assert_eq!(result, expected, "CRC mismatch for input: '{input}'");
-        }
-    }
-
-    #[test]
-    fn test_crc_hash_update_edge_cases() {
-        let mut crc = Crc::default();
-
-        // Test with data that's not a multiple of 8 bytes
-        let data7 = b"1234567"; // 7 bytes
-        crc.hash_update(data7);
-
-        let data9 = b"123456789"; // 9 bytes
-        let mut crc2 = Crc::default();
-        crc2.hash_update(data9);
-
-        // Should not panic and should produce valid results
-        let mut out1 = [0u8; 8];
-        let mut out2 = [0u8; 8];
-        crc.hash_finalize(&mut out1);
-        crc2.hash_finalize(&mut out2);
-
-        // Results should be different for different inputs
-        assert_ne!(out1, out2);
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/systemd_logind.rs b/registry/native/stubs/uucore/src/lib/features/systemd_logind.rs
deleted file mode 100644
index efc45d979..000000000
--- a/registry/native/stubs/uucore/src/lib/features/systemd_logind.rs
+++ /dev/null
@@ -1,794 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-//
-// spell-checker:ignore logind libsystemd btime unref RAII testuser GETPW sysconf
-
-//! Systemd-logind support for reading login records
-//!
-//! This module provides systemd-logind based implementation for reading
-//! login records as an alternative to traditional utmp/utmpx files.
-//! When the systemd-logind feature is enabled and systemd is available,
-//! this will be used instead of traditional utmp files.
-
-use std::ffi::CStr;
-use std::mem::MaybeUninit;
-use std::time::{SystemTime, UNIX_EPOCH};
-
-use crate::error::{UResult, USimpleError};
-
-/// FFI bindings for libsystemd login and D-Bus functions
-mod ffi {
-    use std::ffi::c_char;
-    use std::os::raw::{c_int, c_uint};
-
-    #[link(name = "systemd")]
-    unsafe extern "C" {
-        pub fn sd_get_sessions(sessions: *mut *mut *mut c_char) -> c_int;
-        pub fn sd_session_get_uid(session: *const c_char, uid: *mut c_uint) -> c_int;
-        pub fn sd_session_get_start_time(session: *const c_char, usec: *mut u64) -> c_int;
-        pub fn sd_session_get_tty(session: *const c_char, tty: *mut *mut c_char) -> c_int;
-        pub fn sd_session_get_remote_host(
-            session: *const c_char,
-            remote_host: *mut *mut c_char,
-        ) -> c_int;
-        pub fn sd_session_get_display(session: *const c_char, display: *mut *mut c_char) -> c_int;
-        pub fn sd_session_get_type(session: *const c_char, session_type: *mut *mut c_char)
-        -> c_int;
-        pub fn sd_session_get_seat(session: *const c_char, seat: *mut *mut c_char) -> c_int;
-
-    }
-}
-
-/// Safe wrapper functions for libsystemd FFI calls
-mod login {
-    use super::ffi;
-    use std::ffi::{CStr, CString};
-    use std::ptr;
-    use std::time::SystemTime;
-
-    pub(super) unsafe fn sessions_from_raw(
-        sessions_ptr: *mut *mut libc::c_char,
-        count: usize,
-    ) -> Vec<String> {
-        let mut sessions = Vec::with_capacity(count);
-        if sessions_ptr.is_null() {
-            return sessions;
-        }
-
-        for i in 0..count {
-            let session_ptr = unsafe { *sessions_ptr.add(i) };
-            if session_ptr.is_null() {
-                continue;
-            }
-
-            let session_cstr = unsafe { CStr::from_ptr(session_ptr) };
-            sessions.push(session_cstr.to_string_lossy().into_owned());
-
-            unsafe { libc::free(session_ptr.cast()) };
-        }
-
-        unsafe { libc::free(sessions_ptr.cast()) };
-        sessions
-    }
-
-    /// Get all active sessions
-    pub fn get_sessions() -> Result<Vec<String>, Box<dyn std::error::Error>> {
-        let mut sessions_ptr: *mut *mut libc::c_char = ptr::null_mut();
-
-        let result = unsafe { ffi::sd_get_sessions(&raw mut sessions_ptr) };
-
-        if result < 0 {
-            return Err(format!("sd_get_sessions failed: {result}").into());
-        }
-
-        Ok(unsafe { sessions_from_raw(sessions_ptr, result as usize) })
-    }
-
-    /// Get UID for a session
-    pub fn get_session_uid(session_id: &str) -> Result<u32, Box<dyn std::error::Error>> {
-        let session_cstring = CString::new(session_id)?;
-        let mut uid: std::os::raw::c_uint = 0;
-
-        let result = unsafe { ffi::sd_session_get_uid(session_cstring.as_ptr(), &raw mut uid) };
-
-        if result < 0 {
-            return Err(
-                format!("sd_session_get_uid failed for session '{session_id}': {result}").into(),
-            );
-        }
-
-        Ok(uid)
-    }
-
-    /// Get start time for a session (in microseconds since Unix epoch)
-    pub fn get_session_start_time(session_id: &str) -> Result<u64, Box<dyn std::error::Error>> {
-        let session_cstring = CString::new(session_id)?;
-        let mut usec: u64 = 0;
-
-        let result =
-            unsafe { ffi::sd_session_get_start_time(session_cstring.as_ptr(), &raw mut usec) };
-
-        if result < 0 {
-            return Err(format!(
-                "sd_session_get_start_time failed for session '{session_id}': {result}",
-            )
-            .into());
-        }
-
-        Ok(usec)
-    }
-
-    /// Get TTY for a session
-    pub fn get_session_tty(session_id: &str) -> Result<Option<String>, Box<dyn std::error::Error>> {
-        let session_cstring = CString::new(session_id)?;
-        let mut tty_ptr: *mut libc::c_char = ptr::null_mut();
-
-        let result = unsafe { ffi::sd_session_get_tty(session_cstring.as_ptr(), &raw mut tty_ptr) };
-
-        if result < 0 {
-            return Err(
-                format!("sd_session_get_tty failed for session '{session_id}': {result}").into(),
-            );
-        }
-
-        if tty_ptr.is_null() {
-            return Ok(None);
-        }
-
-        let tty_cstr = unsafe { CStr::from_ptr(tty_ptr) };
-        let tty_string = tty_cstr.to_string_lossy().into_owned();
-
-        unsafe { libc::free(tty_ptr.cast()) };
-
-        Ok(Some(tty_string))
-    }
-
-    /// Get remote host for a session
-    pub fn get_session_remote_host(
-        session_id: &str,
-    ) -> Result<Option<String>, Box<dyn std::error::Error>> {
-        let session_cstring = CString::new(session_id)?;
-        let mut host_ptr: *mut libc::c_char = ptr::null_mut();
-
-        let result =
-            unsafe { ffi::sd_session_get_remote_host(session_cstring.as_ptr(), &raw mut host_ptr) };
-
-        if result < 0 {
-            return Err(format!(
-                "sd_session_get_remote_host failed for session '{session_id}': {result}",
-            )
-            .into());
-        }
-
-        if host_ptr.is_null() {
-            return Ok(None);
-        }
-
-        let host_cstr = unsafe { CStr::from_ptr(host_ptr) };
-        let host_string = host_cstr.to_string_lossy().into_owned();
-
-        unsafe { libc::free(host_ptr.cast()) };
-
-        Ok(Some(host_string))
-    }
-
-    /// Get display for a session
-    pub fn get_session_display(
-        session_id: &str,
-    ) -> Result<Option<String>, Box<dyn std::error::Error>> {
-        let session_cstring = CString::new(session_id)?;
-        let mut display_ptr: *mut libc::c_char = ptr::null_mut();
-
-        let result =
-            unsafe { ffi::sd_session_get_display(session_cstring.as_ptr(), &raw mut display_ptr) };
-
-        if result < 0 {
-            return Err(format!(
-                "sd_session_get_display failed for session '{session_id}': {result}",
-            )
-            .into());
-        }
-
-        if display_ptr.is_null() {
-            return Ok(None);
-        }
-
-        let display_cstr = unsafe { CStr::from_ptr(display_ptr) };
-        let display_string = display_cstr.to_string_lossy().into_owned();
-
-        unsafe { libc::free(display_ptr.cast()) };
-
-        Ok(Some(display_string))
-    }
-
-    /// Get type for a session
-    pub fn get_session_type(
-        session_id: &str,
-    ) -> Result<Option<String>, Box<dyn std::error::Error>> {
-        let session_cstring = CString::new(session_id)?;
-        let mut type_ptr: *mut libc::c_char = ptr::null_mut();
-
-        let result =
-            unsafe { ffi::sd_session_get_type(session_cstring.as_ptr(), &raw mut type_ptr) };
-
-        if result < 0 {
-            return Err(
-                format!("sd_session_get_type failed for session '{session_id}': {result}").into(),
-            );
-        }
-
-        if type_ptr.is_null() {
-            return Ok(None);
-        }
-
-        let type_cstr = unsafe { CStr::from_ptr(type_ptr) };
-        let type_string = type_cstr.to_string_lossy().into_owned();
-
-        unsafe { libc::free(type_ptr.cast()) };
-
-        Ok(Some(type_string))
-    }
-
-    /// Get seat for a session
-    pub fn get_session_seat(
-        session_id: &str,
-    ) -> Result<Option<String>, Box<dyn std::error::Error>> {
-        let session_cstring = CString::new(session_id)?;
-        let mut seat_ptr: *mut libc::c_char = ptr::null_mut();
-
-        let result =
-            unsafe { ffi::sd_session_get_seat(session_cstring.as_ptr(), &raw mut seat_ptr) };
-
-        if result < 0 {
-            return Err(
-                format!("sd_session_get_seat failed for session '{session_id}': {result}").into(),
-            );
-        }
-
-        if seat_ptr.is_null() {
-            return Ok(None);
-        }
-
-        let seat_cstr = unsafe { CStr::from_ptr(seat_ptr) };
-        let seat_string = seat_cstr.to_string_lossy().into_owned();
-
-        unsafe { libc::free(seat_ptr.cast()) };
-
-        Ok(Some(seat_string))
-    }
-
-    /// Get system boot time using systemd random-seed file fallback
-    ///
-    /// TODO: This replicates GNU coreutils' fallback behavior for compatibility.
-    /// GNU coreutils uses the mtime of /var/lib/systemd/random-seed as a heuristic for boot time
-    /// when utmp is unavailable, rather than querying systemd's authoritative KernelTimestamp.
-    /// This creates inconsistency: `uptime -s` shows the actual kernel boot time
-    /// while `who -b` shows ~1 minute later when systemd services start.
-    ///
-    /// Ideally, both should use the same source (KernelTimestamp) for semantic consistency.
-    /// Consider proposing to GNU coreutils to use systemd's KernelTimestamp property instead.
-    pub fn get_boot_time() -> Result<SystemTime, Box<dyn std::error::Error>> {
-        use std::fs;
-
-        let metadata = fs::metadata("/var/lib/systemd/random-seed")
-            .map_err(|e| format!("Failed to read /var/lib/systemd/random-seed: {e}"))?;
-
-        metadata
-            .modified()
-            .map_err(|e| format!("Failed to get modification time: {e}").into())
-    }
-}
-
-/// Login record compatible with utmpx structure
-#[derive(Debug, Clone)]
-pub struct SystemdLoginRecord {
-    pub user: String,
-    pub session_id: String,
-    pub seat_or_tty: String,
-    pub raw_device: String,
-    pub host: String,
-    pub login_time: SystemTime,
-    pub pid: u32,
-    pub session_leader_pid: u32,
-    pub record_type: SystemdRecordType,
-}
-
-#[derive(Debug, Clone, Copy, PartialEq)]
-pub enum SystemdRecordType {
-    UserProcess = 7,  // USER_PROCESS
-    LoginProcess = 6, // LOGIN_PROCESS
-    BootTime = 2,     // BOOT_TIME
-}
-
-impl SystemdLoginRecord {
-    /// Check if this is a user process record
-    pub fn is_user_process(&self) -> bool {
-        !self.user.is_empty() && self.record_type == SystemdRecordType::UserProcess
-    }
-
-    /// Get login time as time::OffsetDateTime compatible with utmpx
-    pub fn login_time_offset(&self) -> time::OffsetDateTime {
-        let duration = self
-            .login_time
-            .duration_since(UNIX_EPOCH)
-            .unwrap_or_default();
-        let ts_nanos: i128 = (duration.as_nanos()).try_into().unwrap_or(0);
-        let local_offset = time::OffsetDateTime::now_local()
-            .map_or_else(|_| time::UtcOffset::UTC, time::OffsetDateTime::offset);
-        time::OffsetDateTime::from_unix_timestamp_nanos(ts_nanos)
-            .unwrap_or_else(|_| {
-                time::OffsetDateTime::now_local()
-                    .unwrap_or_else(|_| time::OffsetDateTime::now_utc())
-            })
-            .to_offset(local_offset)
-    }
-}
-
-/// Read login records from systemd-logind using safe wrapper functions
-/// This matches the approach used by GNU coreutils read_utmp_from_systemd()
-pub fn read_login_records() -> UResult<Vec<SystemdLoginRecord>> {
-    let mut records = Vec::new();
-
-    // Add boot time record first
-    if let Ok(boot_time) = login::get_boot_time() {
-        let boot_record = SystemdLoginRecord {
-            user: "reboot".to_string(),
-            session_id: "boot".to_string(),
-            seat_or_tty: "~".to_string(), // Traditional boot time indicator
-            raw_device: String::new(),
-            host: String::new(),
-            login_time: boot_time,
-            pid: 0,
-            session_leader_pid: 0,
-            record_type: SystemdRecordType::BootTime,
-        };
-        records.push(boot_record);
-    }
-
-    // Get all active sessions using safe wrapper
-    let mut sessions = login::get_sessions()
-        .map_err(|e| USimpleError::new(1, format!("Failed to get systemd sessions: {e}")))?;
-
-    // Sort sessions consistently for reproducible output (reverse for TTY sessions first)
-    sessions.sort();
-    sessions.reverse();
-
-    // Iterate through all sessions
-    for session_id in sessions {
-        // Get session UID using safe wrapper
-        let Ok(uid) = login::get_session_uid(&session_id) else {
-            continue;
-        };
-
-        // Get username from UID
-        let user = unsafe {
-            let mut passwd = MaybeUninit::<libc::passwd>::uninit();
-
-            // Get recommended buffer size, fall back if indeterminate
-            let buf_size = {
-                let size = libc::sysconf(libc::_SC_GETPW_R_SIZE_MAX);
-                if size == -1 {
-                    16384 // Value was indeterminate, use fallback from getpwuid_r man page
-                } else {
-                    size as usize
-                }
-            };
-            let mut buf = vec![0u8; buf_size];
-            let mut result: *mut libc::passwd = std::ptr::null_mut();
-
-            let ret = libc::getpwuid_r(
-                uid,
-                passwd.as_mut_ptr(),
-                buf.as_mut_ptr().cast(),
-                buf.len(),
-                &raw mut result,
-            );
-
-            if ret == 0 && !result.is_null() {
-                let passwd = passwd.assume_init();
-                CStr::from_ptr(passwd.pw_name)
-                    .to_string_lossy()
-                    .into_owned()
-            } else {
-                format!("{uid}") // fallback to UID if username not found
-            }
-        };
-
-        // Get start time using safe wrapper, fallback to epoch if unavailable
-        let start_time = login::get_session_start_time(&session_id).map_or(UNIX_EPOCH, |usec| {
-            UNIX_EPOCH + std::time::Duration::from_micros(usec)
-        });
-
-        // Get TTY using safe wrapper
-        let mut tty = login::get_session_tty(&session_id)
-            .ok()
-            .flatten()
-            .unwrap_or_default();
-
-        // Get seat using safe wrapper
-        let mut seat = login::get_session_seat(&session_id)
-            .ok()
-            .flatten()
-            .unwrap_or_default();
-
-        // Strip any existing prefixes from systemd values (if any)
-        if tty.starts_with('?') {
-            tty = tty[1..].to_string();
-        }
-        if seat.starts_with('?') {
-            seat = seat[1..].to_string();
-        }
-
-        // Get remote host using safe wrapper
-        let remote_host = login::get_session_remote_host(&session_id)
-            .ok()
-            .flatten()
-            .unwrap_or_default();
-
-        // Get display using safe wrapper (for GUI sessions)
-        let display = login::get_session_display(&session_id)
-            .ok()
-            .flatten()
-            .unwrap_or_default();
-
-        // Get session type using safe wrapper (currently unused but available)
-        let _session_type = login::get_session_type(&session_id)
-            .ok()
-            .flatten()
-            .unwrap_or_default();
-
-        // Determine host (use remote_host if available)
-        // If host is local (non-remote) we use display,
-        let host = if remote_host.is_empty() {
-            display.clone()
-        } else {
-            remote_host
-        };
-
-        // Skip sessions that have neither TTY nor seat (e.g., manager sessions)
-        if tty.is_empty() && seat.is_empty() && display.is_empty() {
-            continue;
-        }
-
-        // A single session can be associated with both a TTY and a seat.
-        // GNU `who` and `pinky` create separate records for each.
-        // We replicate that behavior here.
-        // Order: seat first, then TTY to match expected output
-
-        // Helper closure to create a record
-        let create_record = |seat_or_tty: String,
-                             raw_device: String,
-                             user: String,
-                             session_id: String,
-                             host: String| {
-            SystemdLoginRecord {
-                user,
-                session_id,
-                seat_or_tty,
-                raw_device,
-                host,
-                login_time: start_time,
-                pid: 0, // systemd doesn't directly provide session leader PID in this context
-                session_leader_pid: 0,
-                record_type: SystemdRecordType::UserProcess,
-            }
-        };
-
-        // Create records based on available seat/tty/display
-        if !seat.is_empty() && !tty.is_empty() {
-            // Both seat and tty - need 2 records, clone for first.
-            // The seat is prefixed with '?' to match GNU's output.
-            let seat_formatted = format!("?{seat}");
-            records.push(create_record(
-                seat_formatted,
-                seat,
-                user.clone(),
-                session_id.clone(),
-                host.clone(),
-            ));
-
-            let tty_formatted = if tty.starts_with("tty") {
-                format!("*{tty}")
-            } else {
-                tty.clone()
-            };
-            records.push(create_record(tty_formatted, tty, user, session_id, host)); // Move for second (and last) record
-        } else if !seat.is_empty() {
-            // Only seat
-            let seat_formatted = format!("?{seat}");
-            records.push(create_record(seat_formatted, seat, user, session_id, host));
-        } else if !tty.is_empty() {
-            // Only tty
-            let tty_formatted = if tty.starts_with("tty") {
-                format!("*{tty}")
-            } else {
-                tty.clone()
-            };
-            records.push(create_record(tty_formatted, tty, user, session_id, host));
-        } else if !display.is_empty() {
-            // Only display
-            // No raw device for display sessions
-            records.push(create_record(
-                display,
-                String::new(),
-                user,
-                session_id,
-                host,
-            ));
-        }
-    }
-
-    Ok(records)
-}
-
-/// Wrapper to provide utmpx-compatible interface for a single record
-pub struct SystemdUtmpxCompat {
-    record: SystemdLoginRecord,
-}
-
-impl SystemdUtmpxCompat {
-    /// Create new instance from a SystemdLoginRecord
-    pub fn new(record: SystemdLoginRecord) -> Self {
-        Self { record }
-    }
-
-    /// A.K.A. ut.ut_type
-    pub fn record_type(&self) -> i16 {
-        self.record.record_type as i16
-    }
-
-    /// A.K.A. ut.ut_pid
-    pub fn pid(&self) -> i32 {
-        self.record.pid as i32
-    }
-
-    /// A.K.A. ut.ut_id
-    pub fn terminal_suffix(&self) -> String {
-        // Extract last part of session ID or use session ID
-        self.record.session_id.clone()
-    }
-
-    /// A.K.A. ut.ut_user
-    pub fn user(&self) -> String {
-        self.record.user.clone()
-    }
-
-    /// A.K.A. ut.ut_host
-    pub fn host(&self) -> String {
-        self.record.host.clone()
-    }
-
-    /// A.K.A. ut.ut_line
-    pub fn tty_device(&self) -> String {
-        // Return raw device name for device access if available, otherwise formatted seat_or_tty
-        if self.record.raw_device.is_empty() {
-            self.record.seat_or_tty.clone()
-        } else {
-            self.record.raw_device.clone()
-        }
-    }
-
-    /// Login time
-    pub fn login_time(&self) -> time::OffsetDateTime {
-        self.record.login_time_offset()
-    }
-
-    /// Exit status (not available from systemd)
-    pub fn exit_status(&self) -> (i16, i16) {
-        (0, 0) // Not available from systemd
-    }
-
-    /// Check if this is a user process record
-    pub fn is_user_process(&self) -> bool {
-        self.record.is_user_process()
-    }
-
-    /// Canonical host name
-    pub fn canon_host(&self) -> String {
-        // Simple implementation - just return the host as-is
-        // Could be enhanced with DNS lookup like the original
-        self.record.host.clone()
-    }
-}
-
-/// Container for reading multiple systemd records
-pub struct SystemdUtmpxIter {
-    records: Vec<SystemdLoginRecord>,
-    current_index: usize,
-}
-
-impl SystemdUtmpxIter {
-    /// Create new instance and read records from systemd-logind
-    pub fn new() -> UResult<Self> {
-        let records = read_login_records()?;
-        Ok(Self {
-            records,
-            current_index: 0,
-        })
-    }
-
-    /// Create empty iterator (for when systemd initialization fails)
-    pub fn empty() -> Self {
-        Self {
-            records: Vec::new(),
-            current_index: 0,
-        }
-    }
-
-    /// Get next record (similar to getutxent)
-    pub fn next_record(&mut self) -> Option<SystemdUtmpxCompat> {
-        if self.current_index >= self.records.len() {
-            return None;
-        }
-
-        let record = self.records[self.current_index].clone();
-        self.current_index += 1;
-
-        Some(SystemdUtmpxCompat::new(record))
-    }
-
-    /// Get all records at once
-    pub fn get_all_records(&self) -> Vec<SystemdUtmpxCompat> {
-        self.records
-            .iter()
-            .cloned()
-            .map(SystemdUtmpxCompat::new)
-            .collect()
-    }
-
-    /// Reset iterator to beginning
-    pub fn reset(&mut self) {
-        self.current_index = 0;
-    }
-
-    /// Get number of records
-    pub fn len(&self) -> usize {
-        self.records.len()
-    }
-
-    /// Check if empty
-    pub fn is_empty(&self) -> bool {
-        self.records.is_empty()
-    }
-}
-
-impl Iterator for SystemdUtmpxIter {
-    type Item = SystemdUtmpxCompat;
-
-    fn next(&mut self) -> Option<Self::Item> {
-        self.next_record()
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn test_empty_iterator() {
-        let mut iter = SystemdUtmpxIter::empty();
-
-        assert_eq!(iter.len(), 0);
-        assert!(iter.is_empty());
-        assert!(iter.next().is_none());
-        assert!(iter.next_record().is_none());
-    }
-
-    #[test]
-    fn test_iterator_with_mock_data() {
-        // Create iterator with mock records
-        let mock_records = vec![
-            SystemdLoginRecord {
-                session_id: "session1".to_string(),
-                user: "user1".to_string(),
-                seat_or_tty: "tty1".to_string(),
-                raw_device: "tty1".to_string(),
-                host: "host1".to_string(),
-                login_time: UNIX_EPOCH,
-                pid: 1234,
-                session_leader_pid: 1234,
-                record_type: SystemdRecordType::UserProcess,
-            },
-            SystemdLoginRecord {
-                session_id: "session2".to_string(),
-                user: "user2".to_string(),
-                seat_or_tty: "pts/0".to_string(),
-                raw_device: "pts/0".to_string(),
-                host: "host2".to_string(),
-                login_time: UNIX_EPOCH,
-                pid: 5678,
-                session_leader_pid: 5678,
-                record_type: SystemdRecordType::UserProcess,
-            },
-        ];
-
-        let mut iter = SystemdUtmpxIter {
-            records: mock_records,
-            current_index: 0,
-        };
-
-        assert_eq!(iter.len(), 2);
-        assert!(!iter.is_empty());
-
-        // Test iterator behavior
-        let first = iter.next();
-        assert!(first.is_some());
-
-        let second = iter.next();
-        assert!(second.is_some());
-
-        let third = iter.next();
-        assert!(third.is_none());
-
-        // Iterator should be exhausted
-        assert!(iter.next().is_none());
-    }
-
-    #[test]
-    fn test_get_all_records() {
-        let mock_records = vec![SystemdLoginRecord {
-            session_id: "session1".to_string(),
-            user: "user1".to_string(),
-            seat_or_tty: "tty1".to_string(),
-            raw_device: "tty1".to_string(),
-            host: "host1".to_string(),
-            login_time: UNIX_EPOCH,
-            pid: 1234,
-            session_leader_pid: 1234,
-            record_type: SystemdRecordType::UserProcess,
-        }];
-
-        let iter = SystemdUtmpxIter {
-            records: mock_records,
-            current_index: 0,
-        };
-
-        let all_records = iter.get_all_records();
-        assert_eq!(all_records.len(), 1);
-    }
-
-    #[test]
-    fn test_systemd_record_conversion() {
-        // Test that SystemdLoginRecord converts correctly to SystemdUtmpxCompat
-        let record = SystemdLoginRecord {
-            session_id: "c1".to_string(),
-            user: "testuser".to_string(),
-            seat_or_tty: "seat0".to_string(),
-            raw_device: "seat0".to_string(),
-            host: "localhost".to_string(),
-            login_time: UNIX_EPOCH + std::time::Duration::from_secs(1000),
-            pid: 9999,
-            session_leader_pid: 9999,
-            record_type: SystemdRecordType::UserProcess,
-        };
-
-        let compat = SystemdUtmpxCompat::new(record);
-
-        // Test the actual conversion logic
-        assert_eq!(compat.user(), "testuser");
-        assert_eq!(compat.tty_device().as_str(), "seat0");
-        assert_eq!(compat.host(), "localhost");
-    }
-
-    #[test]
-    fn test_sessions_from_raw_uses_reported_count() {
-        use std::ffi::CString;
-        use std::mem::size_of;
-
-        let count = 2;
-        let sessions_ptr = unsafe {
-            libc::calloc(count, size_of::<*mut libc::c_char>()).cast::<*mut libc::c_char>()
-        };
-        assert!(!sessions_ptr.is_null());
-
-        unsafe {
-            *sessions_ptr.add(0) = CString::new("session-a").unwrap().into_raw();
-            *sessions_ptr.add(1) = CString::new("session-b").unwrap().into_raw();
-
-            let sessions = login::sessions_from_raw(sessions_ptr, count);
-            assert_eq!(sessions, ["session-a", "session-b"]);
-        }
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/time.rs b/registry/native/stubs/uucore/src/lib/features/time.rs
deleted file mode 100644
index 6b2003734..000000000
--- a/registry/native/stubs/uucore/src/lib/features/time.rs
+++ /dev/null
@@ -1,211 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore (ToDO) strtime
-
-//! Set of functions related to time handling
-
-use jiff::Zoned;
-use jiff::fmt::StdIoWrite;
-use jiff::fmt::strtime::{BrokenDownTime, Config};
-use std::io::Write;
-use std::time::{SystemTime, UNIX_EPOCH};
-
-use crate::error::{UResult, USimpleError};
-use crate::show_error;
-
-/// Format the given date according to this time format style.
-fn format_zoned<W: Write>(out: &mut W, zoned: Zoned, fmt: &str) -> UResult<()> {
-    let tm = BrokenDownTime::from(&zoned);
-    let mut out = StdIoWrite(out);
-    let config = Config::new().lenient(true);
-    tm.format_with_config(&config, fmt, &mut out)
-        .map_err(|x| USimpleError::new(1, x.to_string()))
-}
-
-fn system_time_to_sec_i128(time: SystemTime) -> (i128, u32) {
-    if time > UNIX_EPOCH {
-        let d = time.duration_since(UNIX_EPOCH).unwrap();
-        (i128::from(d.as_secs()), d.subsec_nanos())
-    } else {
-        let d = UNIX_EPOCH.duration_since(time).unwrap();
-        (-i128::from(d.as_secs()), d.subsec_nanos())
-    }
-}
-
-/// Convert a SystemTime` to a number of seconds since UNIX_EPOCH
-pub fn system_time_to_sec(time: SystemTime) -> (i64, u32) {
-    let (secs, nsecs) = system_time_to_sec_i128(time);
-    (
-        secs.clamp(i128::from(i64::MIN), i128::from(i64::MAX)) as i64,
-        nsecs,
-    )
-}
-
-pub mod format {
-    pub static FULL_ISO: &str = "%Y-%m-%d %H:%M:%S.%N %z";
-    pub static LONG_ISO: &str = "%Y-%m-%d %H:%M";
-    pub static ISO: &str = "%Y-%m-%d";
-}
-
-/// Sets how `format_system_time` behaves if the time cannot be converted.
-pub enum FormatSystemTimeFallback {
-    Integer,      // Just print seconds since epoch (`ls`)
-    IntegerError, // The above, and print an error (`du``)
-    Float,        // Just print seconds+nanoseconds since epoch (`stat`)
-}
-
-/// Format a `SystemTime` according to given fmt, and append to vector out.
-pub fn format_system_time<W: Write>(
-    out: &mut W,
-    time: SystemTime,
-    fmt: &str,
-    mode: FormatSystemTimeFallback,
-) -> UResult<()> {
-    let zoned: Result<Zoned, _> = time.try_into();
-    if let Ok(zoned) = zoned {
-        format_zoned(out, zoned, fmt)
-    } else {
-        // Assume that if we cannot build a Zoned element, the timestamp is
-        // out of reasonable range, just print it then.
-        // TODO: The range allowed by jiff is different from what GNU accepts,
-        // but it still far enough in the future/past to be unlikely to matter:
-        //  jiff: Year between -9999 to 9999 (UTC) [-377705023201..=253402207200]
-        //  GNU: Year fits in signed 32 bits (timezone dependent)
-        let (mut secs, mut nsecs) = system_time_to_sec_i128(time);
-        match mode {
-            FormatSystemTimeFallback::Integer => out.write_all(secs.to_string().as_bytes())?,
-            FormatSystemTimeFallback::IntegerError => {
-                let str = secs.to_string();
-                show_error!("time '{str}' is out of range");
-                out.write_all(str.as_bytes())?;
-            }
-            FormatSystemTimeFallback::Float => {
-                if secs < 0 && nsecs != 0 {
-                    secs -= 1;
-                    nsecs = 1_000_000_000 - nsecs;
-                }
-                out.write_fmt(format_args!("{secs}.{nsecs:09}"))?;
-            }
-        }
-        Ok(())
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use crate::time::{FormatSystemTimeFallback, format_system_time};
-    use std::time::{Duration, UNIX_EPOCH};
-
-    // Test epoch SystemTime get printed correctly at UTC0, with 2 simple formats.
-    #[test]
-    fn test_simple_system_time() {
-        unsafe { std::env::set_var("TZ", "UTC0") };
-
-        let time = UNIX_EPOCH;
-        let mut out = Vec::new();
-        format_system_time(
-            &mut out,
-            time,
-            "%Y-%m-%d %H:%M",
-            FormatSystemTimeFallback::Integer,
-        )
-        .expect("Formatting error.");
-        assert_eq!(String::from_utf8(out).unwrap(), "1970-01-01 00:00");
-
-        let mut out = Vec::new();
-        format_system_time(
-            &mut out,
-            time,
-            "%Y-%m-%d %H:%M:%S.%N %z",
-            FormatSystemTimeFallback::Integer,
-        )
-        .expect("Formatting error.");
-        assert_eq!(
-            String::from_utf8(out).unwrap(),
-            "1970-01-01 00:00:00.000000000 +0000"
-        );
-    }
-
-    // Test that very large (positive or negative) lead to just the timestamp being printed.
-    #[test]
-    fn test_large_system_time() {
-        let time = UNIX_EPOCH + Duration::from_secs(67_768_036_191_763_200);
-        let mut out = Vec::new();
-        format_system_time(
-            &mut out,
-            time,
-            "%Y-%m-%d %H:%M",
-            FormatSystemTimeFallback::Integer,
-        )
-        .expect("Formatting error.");
-        assert_eq!(String::from_utf8(out).unwrap(), "67768036191763200");
-
-        let time = UNIX_EPOCH - Duration::from_secs(67_768_040_922_076_800);
-        let mut out = Vec::new();
-        format_system_time(
-            &mut out,
-            time,
-            "%Y-%m-%d %H:%M",
-            FormatSystemTimeFallback::Integer,
-        )
-        .expect("Formatting error.");
-        assert_eq!(String::from_utf8(out).unwrap(), "-67768040922076800");
-    }
-
-    // Test that very large (positive or negative) lead to just the timestamp being printed.
-    #[test]
-    fn test_large_system_time_float() {
-        let time =
-            UNIX_EPOCH + Duration::from_secs(67_768_036_191_763_000) + Duration::from_nanos(123);
-        let mut out = Vec::new();
-        format_system_time(
-            &mut out,
-            time,
-            "%Y-%m-%d %H:%M",
-            FormatSystemTimeFallback::Float,
-        )
-        .expect("Formatting error.");
-        assert_eq!(
-            String::from_utf8(out).unwrap(),
-            "67768036191763000.000000123"
-        );
-
-        let time =
-            UNIX_EPOCH - Duration::from_secs(67_768_040_922_076_000) + Duration::from_nanos(123);
-        let mut out = Vec::new();
-        format_system_time(
-            &mut out,
-            time,
-            "%Y-%m-%d %H:%M",
-            FormatSystemTimeFallback::Float,
-        )
-        .expect("Formatting error.");
-        assert_eq!(
-            String::from_utf8(out).unwrap(),
-            "-67768040922076000.000000123"
-        );
-    }
-
-    #[test]
-    fn test_timestamp_fallback_handles_i64_min_boundary() {
-        let duration = Duration::from_secs(i64::MAX as u64 + 1);
-        let Some(time) = UNIX_EPOCH.checked_sub(duration) else {
-            return;
-        };
-
-        assert_eq!(super::system_time_to_sec(time), (i64::MIN, 0));
-
-        let mut out = Vec::new();
-        format_system_time(
-            &mut out,
-            time,
-            "%Y-%m-%d %H:%M",
-            FormatSystemTimeFallback::Integer,
-        )
-        .expect("Formatting error.");
-        assert_eq!(String::from_utf8(out).unwrap(), i64::MIN.to_string());
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/tty.rs b/registry/native/stubs/uucore/src/lib/features/tty.rs
deleted file mode 100644
index c25b5f2e0..000000000
--- a/registry/native/stubs/uucore/src/lib/features/tty.rs
+++ /dev/null
@@ -1,127 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Set of functions to parsing TTY
-use std::{
-    fmt::{self, Display, Formatter},
-    path::PathBuf,
-};
-
-#[derive(Debug, Clone, PartialEq, Eq, Hash)]
-pub enum Teletype {
-    Tty(u64),
-    TtyS(u64),
-    Pts(u64),
-    Unknown,
-}
-
-impl Display for Teletype {
-    fn fmt(&self, f: &mut Formatter) -> fmt::Result {
-        match self {
-            Self::Tty(id) => write!(f, "/dev/tty{id}"),
-            Self::TtyS(id) => write!(f, "/dev/ttyS{id}"),
-            Self::Pts(id) => write!(f, "/dev/pts/{id}"),
-            Self::Unknown => write!(f, "?"),
-        }
-    }
-}
-
-impl TryFrom<String> for Teletype {
-    type Error = ();
-
-    fn try_from(value: String) -> Result<Self, Self::Error> {
-        Self::try_from(value.as_str())
-    }
-}
-
-impl TryFrom<&str> for Teletype {
-    type Error = ();
-
-    fn try_from(value: &str) -> Result<Self, Self::Error> {
-        if value == "?" {
-            return Ok(Self::Unknown);
-        }
-
-        Self::try_from(PathBuf::from(value))
-    }
-}
-
-impl TryFrom<PathBuf> for Teletype {
-    type Error = ();
-
-    fn try_from(value: PathBuf) -> Result<Self, Self::Error> {
-        // Three case: /dev/pts/* , /dev/ttyS**, /dev/tty**
-
-        let mut iter = value.iter();
-        // Case 1
-
-        // Considering this format: **/**/pts/<num>
-        if let (Some(_), Some(num)) = (iter.find(|it| *it == "pts"), iter.next()) {
-            return num
-                .to_str()
-                .ok_or(())?
-                .parse::<u64>()
-                .map_err(|_| ())
-                .map(Teletype::Pts);
-        }
-
-        // Considering this format: **/**/ttyS** then **/**/tty**
-        let path = value.to_str().ok_or(())?;
-
-        let f = |prefix: &str| {
-            value
-                .iter()
-                .next_back()?
-                .to_str()?
-                .strip_prefix(prefix)?
-                .parse::<u64>()
-                .ok()
-        };
-
-        if path.contains("ttyS") {
-            // Case 2
-            f("ttyS").ok_or(()).map(Teletype::TtyS)
-        } else if path.contains("tty") {
-            // Case 3
-            f("tty").ok_or(()).map(Teletype::Tty)
-        } else {
-            Err(())
-        }
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn test_tty_from() {
-        assert_eq!(Teletype::try_from("?").unwrap(), Teletype::Unknown);
-        assert_eq!(Teletype::try_from("/dev/tty1").unwrap(), Teletype::Tty(1));
-        assert_eq!(Teletype::try_from("/dev/tty10").unwrap(), Teletype::Tty(10));
-        assert_eq!(Teletype::try_from("/dev/pts/1").unwrap(), Teletype::Pts(1));
-        assert_eq!(
-            Teletype::try_from("/dev/pts/10").unwrap(),
-            Teletype::Pts(10)
-        );
-        assert_eq!(Teletype::try_from("/dev/ttyS1").unwrap(), Teletype::TtyS(1));
-        assert_eq!(
-            Teletype::try_from("/dev/ttyS10").unwrap(),
-            Teletype::TtyS(10)
-        );
-        assert_eq!(Teletype::try_from("ttyS10").unwrap(), Teletype::TtyS(10));
-
-        assert!(Teletype::try_from("value").is_err());
-        assert!(Teletype::try_from("TtyS10").is_err());
-    }
-
-    #[test]
-    fn test_terminal_type_display() {
-        assert_eq!(Teletype::Pts(10).to_string(), "/dev/pts/10");
-        assert_eq!(Teletype::Tty(10).to_string(), "/dev/tty10");
-        assert_eq!(Teletype::TtyS(10).to_string(), "/dev/ttyS10");
-        assert_eq!(Teletype::Unknown.to_string(), "?");
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/update_control.rs b/registry/native/stubs/uucore/src/lib/features/update_control.rs
deleted file mode 100644
index 5d5a58275..000000000
--- a/registry/native/stubs/uucore/src/lib/features/update_control.rs
+++ /dev/null
@@ -1,145 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Implement GNU-style update functionality.
-//!
-//! - pre-defined [`clap`-Arguments][1] for inclusion in utilities that
-//!   implement updates
-//! - determination of the [update mode][2]
-//!
-//! Update-functionality is implemented by the following utilities:
-//!
-//! - `cp`
-//! - `mv`
-//!
-//!
-//! [1]: arguments
-//! [2]: `determine_update_mode()`
-//!
-//!
-//! # Usage example
-//!
-//! ```
-//! #[macro_use]
-//! extern crate uucore;
-//!
-//! use clap::{Command, Arg, ArgMatches};
-//! use uucore::update_control::{self, UpdateMode};
-//!
-//! fn main() {
-//!     let matches = Command::new("command")
-//!         .arg(update_control::arguments::update())
-//!         .arg(update_control::arguments::update_no_args())
-//!         .get_matches_from(vec![
-//!             "command", "--update=older"
-//!         ]);
-//!
-//!     let update_mode = update_control::determine_update_mode(&matches);
-//!
-//!     // handle cases
-//!     if update_mode == UpdateMode::IfOlder {
-//!         // do
-//!     } else {
-//!         unreachable!()
-//!     }
-//! }
-//! ```
-use clap::ArgMatches;
-
-/// Available update mode
-#[derive(Clone, Debug, Eq, PartialEq, Default)]
-pub enum UpdateMode {
-    /// --update=`all`, ``
-    #[default]
-    All,
-    /// --update=`none`
-    None,
-
-    /// --update=`older`
-    /// -u
-    IfOlder,
-    NoneFail,
-}
-
-pub mod arguments {
-    //! Pre-defined arguments for update functionality.
-    use crate::parser::shortcut_value_parser::ShortcutValueParser;
-    use clap::ArgAction;
-
-    /// `--update` argument
-    pub static OPT_UPDATE: &str = "update";
-    /// `-u` argument
-    pub static OPT_UPDATE_NO_ARG: &str = "u";
-
-    /// `--update` argument, defaults to `older` if no values are provided
-    pub fn update() -> clap::Arg {
-        clap::Arg::new(OPT_UPDATE)
-            .long("update")
-            .help("move only when the SOURCE file is newer than the destination file or when the destination file is missing")
-            .value_parser(ShortcutValueParser::new(["none", "all", "older","none-fail"]))
-            .num_args(0..=1)
-            .default_missing_value("older")
-            .require_equals(true)
-            .overrides_with("update")
-            .action(ArgAction::Set)
-    }
-
-    /// `-u` argument
-    pub fn update_no_args() -> clap::Arg {
-        clap::Arg::new(OPT_UPDATE_NO_ARG)
-            .short('u')
-            .help("like --update but does not accept an argument")
-            .action(ArgAction::SetTrue)
-    }
-}
-
-/// Determine the "mode" for the update operation to perform, if any.
-///
-/// Parses the backup options and converts them to an instance of
-/// `UpdateMode` for further processing.
-///
-/// Takes [`clap::ArgMatches`] as argument which **must** contain the options
-/// from [`arguments::update()`] or [`arguments::update_no_args()`]. Otherwise
-/// the `ReplaceAll` mode is returned unconditionally.
-///
-/// # Examples
-///
-/// Here's how one would integrate the update mode determination into an
-/// application.
-///
-/// ```
-/// #[macro_use]
-/// extern crate uucore;
-/// use uucore::update_control::{self, UpdateMode};
-/// use clap::{Command, Arg, ArgMatches};
-///
-/// fn main() {
-///     let matches = Command::new("command")
-///         .arg(update_control::arguments::update())
-///         .arg(update_control::arguments::update_no_args())
-///         .get_matches_from(vec![
-///             "command", "--update=all"
-///         ]);
-///
-///     let update_mode = update_control::determine_update_mode(&matches);
-///     assert_eq!(update_mode, UpdateMode::All)
-/// }
-pub fn determine_update_mode(matches: &ArgMatches) -> UpdateMode {
-    if let Some(mode) = matches.get_one::<String>(arguments::OPT_UPDATE) {
-        match mode.as_str() {
-            "all" => UpdateMode::All,
-            "none" => UpdateMode::None,
-            "older" => UpdateMode::IfOlder,
-            "none-fail" => UpdateMode::NoneFail,
-            _ => unreachable!("other args restricted by clap"),
-        }
-    } else if matches.get_flag(arguments::OPT_UPDATE_NO_ARG) {
-        // short form of this option is equivalent to using --update=older
-        UpdateMode::IfOlder
-    } else {
-        // no option was present
-        UpdateMode::All
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/uptime.rs b/registry/native/stubs/uucore/src/lib/features/uptime.rs
deleted file mode 100644
index 0fe153e71..000000000
--- a/registry/native/stubs/uucore/src/lib/features/uptime.rs
+++ /dev/null
@@ -1,563 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-// spell-checker:ignore gettime BOOTTIME clockid boottime nusers loadavg getloadavg timeval
-
-//! Provides functions to get system uptime, number of users and load average.
-
-// The code was originally written in uu_uptime
-// (https://github.com/uutils/coreutils/blob/main/src/uu/uptime/src/uptime.rs)
-// but was eventually moved here.
-// See https://github.com/uutils/coreutils/pull/7289 for discussion.
-
-use crate::error::{UError, UResult};
-use crate::translate;
-use jiff::Timestamp;
-use jiff::tz::TimeZone;
-use libc::time_t;
-#[cfg(target_os = "macos")]
-use std::mem::{MaybeUninit, size_of};
-#[cfg(target_os = "macos")]
-use std::ptr;
-use thiserror::Error;
-
-#[derive(Debug, Error)]
-pub enum UptimeError {
-    #[error("{}", translate!("uptime-lib-error-system-uptime"))]
-    SystemUptime,
-    #[error("{}", translate!("uptime-lib-error-system-loadavg"))]
-    SystemLoadavg,
-    #[error("{}", translate!("uptime-lib-error-windows-loadavg"))]
-    WindowsLoadavg,
-    #[error("{}", translate!("uptime-lib-error-boot-time"))]
-    BootTime,
-}
-
-impl UError for UptimeError {
-    fn code(&self) -> i32 {
-        1
-    }
-}
-
-/// Returns the formatted time string, e.g. "12:34:56"
-pub fn get_formatted_time() -> String {
-    Timestamp::now()
-        .to_zoned(TimeZone::system())
-        .strftime("%H:%M:%S")
-        .to_string()
-}
-
-/// Safely get macOS boot time using sysctl.
-///
-/// This function uses the `sysctl(3)` API to retrieve the kernel boot time on
-/// macOS.
-///
-/// # Returns
-///
-/// Returns Some(time_t) if successful, None if the call fails.
-#[cfg(target_os = "macos")]
-fn get_macos_boot_time_sysctl() -> Option<time_t> {
-    let mut mib = [libc::CTL_KERN, libc::KERN_BOOTTIME];
-    let mut boot_time = MaybeUninit::<libc::timeval>::uninit();
-    let mut len = size_of::<libc::timeval>();
-
-    // SAFETY: `mib` points to a valid two-element MIB, `boot_time` points to a
-    // writable `timeval` buffer, and `len` contains the buffer size.
-    let ret = unsafe {
-        libc::sysctl(
-            mib.as_mut_ptr(),
-            mib.len() as libc::c_uint,
-            boot_time.as_mut_ptr().cast(),
-            &mut len,
-            ptr::null_mut(),
-            0,
-        )
-    };
-    if ret != 0 || len < size_of::<libc::timeval>() {
-        return None;
-    }
-
-    // SAFETY: `sysctl` succeeded and wrote a complete `timeval`.
-    Some(unsafe { boot_time.assume_init() }.tv_sec as time_t)
-}
-
-/// Get the system uptime
-///
-/// # Arguments
-///
-/// boot_time: Option<time_t> - Manually specify the boot time, or None to try to get it from the system.
-///
-/// # Returns
-///
-/// Returns a UResult with the uptime in seconds if successful, otherwise an UptimeError.
-#[cfg(target_os = "openbsd")]
-pub fn get_uptime(_boot_time: Option<time_t>) -> UResult<i64> {
-    use libc::CLOCK_BOOTTIME;
-    use libc::clock_gettime;
-
-    use libc::c_int;
-    use libc::timespec;
-
-    let mut tp: timespec = timespec {
-        tv_sec: 0,
-        tv_nsec: 0,
-    };
-
-    // OpenBSD prototype: clock_gettime(clk_id: ::clockid_t, tp: *mut ::timespec) -> ::c_int;
-    let ret: c_int = unsafe { clock_gettime(CLOCK_BOOTTIME, &raw mut tp) };
-
-    if ret == 0 {
-        #[cfg(target_pointer_width = "64")]
-        let uptime: i64 = tp.tv_sec;
-        #[cfg(not(target_pointer_width = "64"))]
-        let uptime: i64 = tp.tv_sec.into();
-
-        Ok(uptime)
-    } else {
-        Err(UptimeError::SystemUptime)?
-    }
-}
-
-/// Get the system uptime
-///
-/// # Arguments
-///
-/// boot_time: Option<time_t> - Manually specify the boot time, or None to try to get it from the system.
-///
-/// # Returns
-///
-/// Returns a UResult with the uptime in seconds if successful, otherwise an UptimeError.
-#[cfg(unix)]
-#[cfg(not(target_os = "openbsd"))]
-pub fn get_uptime(boot_time: Option<time_t>) -> UResult<i64> {
-    use crate::utmpx::Utmpx;
-    use libc::BOOT_TIME;
-    use std::fs::File;
-    use std::io::Read;
-
-    let mut proc_uptime_s = String::new();
-
-    let proc_uptime = File::open("/proc/uptime")
-        .ok()
-        .and_then(|mut f| f.read_to_string(&mut proc_uptime_s).ok())
-        .and_then(|_| proc_uptime_s.split_whitespace().next())
-        .and_then(|s| s.split('.').next().unwrap_or("0").parse::<i64>().ok());
-
-    if let Some(uptime) = proc_uptime {
-        return Ok(uptime);
-    }
-
-    // Try provided boot_time or derive from utmpx
-    let derived_boot_time = boot_time.or_else(|| {
-        Utmpx::iter_all_records()
-            .filter(|r| r.record_type() == BOOT_TIME)
-            .map(|r| r.login_time().unix_timestamp())
-            .find(|&ts| ts > 0)
-            .map(|ts| ts as time_t)
-    });
-
-    // macOS-specific fallback: use sysctl kern.boottime when utmpx did not provide BOOT_TIME
-    //
-    // On macOS, the utmpx BOOT_TIME record can be unreliable or absent, causing intermittent
-    // test failures (see issue #3621: https://github.com/uutils/coreutils/issues/3621).
-    // The sysctl(CTL_KERN, KERN_BOOTTIME) approach is the canonical way to retrieve boot time
-    // on macOS and is always available, making uptime more reliable on this platform.
-    //
-    // This fallback only runs if utmpx failed to provide a boot time.
-    #[cfg(target_os = "macos")]
-    let derived_boot_time = {
-        let mut t = derived_boot_time;
-        if t.is_none() {
-            // Use a safe wrapper function to get boot time via sysctl
-            if let Some(boot_time) = get_macos_boot_time_sysctl() {
-                t = Some(boot_time);
-            }
-        }
-        t
-    };
-
-    if let Some(t) = derived_boot_time {
-        let now = Timestamp::now().as_second();
-        #[cfg(target_pointer_width = "64")]
-        let boottime: i64 = t;
-        #[cfg(not(target_pointer_width = "64"))]
-        let boottime: i64 = t.into();
-        if now < boottime {
-            Err(UptimeError::BootTime)?;
-        }
-        return Ok(now - boottime);
-    }
-
-    Err(UptimeError::SystemUptime)?
-}
-
-/// The format used to display a FormattedUptime.
-pub enum OutputFormat {
-    /// Typical `uptime` output (e.g. 2 days, 3:04).
-    HumanReadable,
-
-    /// Pretty printed output (e.g. 2 days, 3 hours, 04 minutes).
-    PrettyPrint,
-}
-
-struct FormattedUptime {
-    days: i64,
-    hours: i64,
-    mins: i64,
-}
-
-impl FormattedUptime {
-    fn new(seconds: i64) -> Self {
-        let days = seconds / 86400;
-        let hours = (seconds - (days * 86400)) / 3600;
-        let mins = (seconds - (days * 86400) - (hours * 3600)) / 60;
-
-        Self { days, hours, mins }
-    }
-
-    fn get_human_readable_uptime(&self) -> String {
-        translate!(
-        "uptime-format",
-        "days" => self.days,
-        "time" => format!("{:02}:{:02}", self.hours, self.mins))
-    }
-
-    fn get_pretty_print_uptime(&self) -> String {
-        let mut parts = Vec::new();
-        if self.days > 0 {
-            parts.push(translate!("uptime-format-pretty-day", "day" => self.days));
-        }
-        if self.hours > 0 {
-            parts.push(translate!("uptime-format-pretty-hour", "hour" => self.hours));
-        }
-        if self.mins > 0 || parts.is_empty() {
-            parts.push(translate!("uptime-format-pretty-min", "min" => self.mins));
-        }
-        parts.join(", ")
-    }
-}
-
-/// Get the system uptime
-///
-/// # Arguments
-///
-/// boot_time will be ignored, pass None.
-///
-/// # Returns
-///
-/// Returns a UResult with the uptime in seconds if successful, otherwise an UptimeError.
-#[cfg(windows)]
-pub fn get_uptime(_boot_time: Option<time_t>) -> UResult<i64> {
-    use windows_sys::Win32::System::SystemInformation::GetTickCount;
-    // SAFETY: always return u32
-    let uptime = unsafe { GetTickCount() };
-    Ok(uptime as i64 / 1000)
-}
-
-/// Get the system uptime in a human-readable format
-///
-/// # Arguments
-///
-/// boot_time: Option<time_t> - Manually specify the boot time, or None to try to get it from the system.
-/// output_format: OutputFormat - Selects the format of the output string.
-///
-/// # Returns
-///
-/// Returns a UResult with the uptime in a human-readable format(e.g. "1 day, 3:45") if successful, otherwise an UptimeError.
-#[inline]
-pub fn get_formatted_uptime(
-    boot_time: Option<time_t>,
-    output_format: OutputFormat,
-) -> UResult<String> {
-    let uptime = get_uptime(boot_time)?;
-
-    if uptime < 0 {
-        Err(UptimeError::SystemUptime)?;
-    }
-
-    let formatted_uptime = FormattedUptime::new(uptime);
-
-    match output_format {
-        OutputFormat::HumanReadable => Ok(formatted_uptime.get_human_readable_uptime()),
-        OutputFormat::PrettyPrint => Ok(formatted_uptime.get_pretty_print_uptime()),
-    }
-}
-
-/// Get the number of users currently logged in
-///
-/// # Returns
-///
-/// Returns the number of users currently logged in if successful, otherwise 0.
-#[cfg(unix)]
-#[cfg(not(target_os = "openbsd"))]
-// see: https://gitlab.com/procps-ng/procps/-/blob/4740a0efa79cade867cfc7b32955fe0f75bf5173/library/uptime.c#L63-L115
-pub fn get_nusers() -> usize {
-    use crate::utmpx::Utmpx;
-    use libc::USER_PROCESS;
-
-    let mut num_user = 0;
-    Utmpx::iter_all_records().for_each(|ut| {
-        if ut.record_type() == USER_PROCESS {
-            num_user += 1;
-        }
-    });
-    num_user
-}
-
-/// Get the number of users currently logged in
-///
-/// # Returns
-///
-/// Returns the number of users currently logged in if successful, otherwise 0
-#[cfg(target_os = "openbsd")]
-pub fn get_nusers(file: &str) -> usize {
-    use utmp_classic::{UtmpEntry, parse_from_path};
-
-    let Ok(entries) = parse_from_path(file) else {
-        return 0;
-    };
-
-    if entries.is_empty() {
-        return 0;
-    }
-
-    // Count entries that have a non-empty user field
-    entries
-        .iter()
-        .filter_map(|entry| match entry {
-            UtmpEntry::UTMP { user, .. } if !user.is_empty() => Some(()),
-            _ => None,
-        })
-        .count()
-}
-
-/// Get the number of users currently logged in
-///
-/// # Returns
-///
-/// Returns the number of users currently logged in if successful, otherwise 0
-#[cfg(target_os = "windows")]
-pub fn get_nusers() -> usize {
-    use std::ptr;
-    use windows_sys::Win32::System::RemoteDesktop::*;
-
-    let mut num_user = 0;
-
-    // SAFETY: WTS_CURRENT_SERVER_HANDLE is a valid handle
-    unsafe {
-        let mut session_info_ptr = ptr::null_mut();
-        let mut session_count = 0;
-
-        let result = WTSEnumerateSessionsW(
-            WTS_CURRENT_SERVER_HANDLE,
-            0,
-            1,
-            &mut session_info_ptr,
-            &mut session_count,
-        );
-        if result == 0 {
-            return 0;
-        }
-
-        let sessions = std::slice::from_raw_parts(session_info_ptr, session_count as usize);
-
-        for session in sessions {
-            let mut buffer: *mut u16 = ptr::null_mut();
-            let mut bytes_returned = 0;
-
-            let result = WTSQuerySessionInformationW(
-                WTS_CURRENT_SERVER_HANDLE,
-                session.SessionId,
-                5,
-                &mut buffer,
-                &mut bytes_returned,
-            );
-            if result == 0 || buffer.is_null() {
-                continue;
-            }
-
-            let cstr = std::ffi::CStr::from_ptr(buffer.cast());
-            if !cstr.is_empty() {
-                num_user += 1;
-            }
-
-            WTSFreeMemory(buffer as _);
-        }
-
-        WTSFreeMemory(session_info_ptr as _);
-    }
-
-    num_user
-}
-
-/// Format the number of users to a human-readable string
-///
-/// # Returns
-///
-/// e.g. "0 users", "1 user", "2 users"
-#[inline]
-pub fn format_nusers(n: usize) -> String {
-    translate!(
-        "uptime-user-count",
-        "count" => n
-    )
-}
-
-/// Get the number of users currently logged in in a human-readable format
-///
-/// # Returns
-///
-/// e.g. "0 user", "1 user", "2 users"
-#[inline]
-pub fn get_formatted_nusers() -> String {
-    #[cfg(not(target_os = "openbsd"))]
-    return format_nusers(get_nusers());
-
-    #[cfg(target_os = "openbsd")]
-    format_nusers(get_nusers("/var/run/utmp"))
-}
-
-/// Get the system load average
-///
-/// # Returns
-///
-/// Returns a UResult with the load average if successful, otherwise an UptimeError.
-/// The load average is a tuple of three floating point numbers representing the 1-minute, 5-minute, and 15-minute load averages.
-#[cfg(unix)]
-pub fn get_loadavg() -> UResult<(f64, f64, f64)> {
-    use crate::libc::c_double;
-    use libc::getloadavg;
-
-    let mut avg: [c_double; 3] = [0.0; 3];
-    // SAFETY: checked whether it returns -1
-    let loads: i32 = unsafe { getloadavg(avg.as_mut_ptr(), 3) };
-
-    if loads == -1 {
-        Err(UptimeError::SystemLoadavg)?
-    } else {
-        Ok((avg[0], avg[1], avg[2]))
-    }
-}
-
-/// Get the system load average
-/// Windows does not have an equivalent to the load average on Unix-like systems.
-///
-/// # Returns
-///
-/// Returns a UResult with an UptimeError.
-#[cfg(windows)]
-pub fn get_loadavg() -> UResult<(f64, f64, f64)> {
-    Err(UptimeError::WindowsLoadavg)?
-}
-
-/// Get the system load average in a human-readable format
-///
-/// # Returns
-///
-/// Returns a UResult with the load average in a human-readable format if successful, otherwise an UptimeError.
-/// e.g. "load average: 0.00, 0.00, 0.00"
-#[inline]
-pub fn get_formatted_loadavg() -> UResult<String> {
-    let loadavg = get_loadavg()?;
-    let mut args = fluent::FluentArgs::new();
-    args.set("avg1", format!("{:.2}", loadavg.0));
-    args.set("avg5", format!("{:.2}", loadavg.1));
-    args.set("avg15", format!("{:.2}", loadavg.2));
-    Ok(crate::locale::get_message_with_args(
-        "uptime-lib-format-loadavg",
-        args,
-    ))
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use crate::locale;
-
-    #[test]
-    fn test_format_nusers() {
-        unsafe {
-            std::env::set_var("LANG", "en_US.UTF-8");
-        }
-        let _ = locale::setup_localization("uptime");
-        assert_eq!("0 users", format_nusers(0));
-        assert_eq!("1 user", format_nusers(1));
-        assert_eq!("2 users", format_nusers(2));
-    }
-
-    /// Test that sysctl kern.boottime is accessible on macOS and returns valid boot time.
-    /// This ensures the fallback mechanism added for issue #3621 works correctly.
-    #[test]
-    #[cfg(target_os = "macos")]
-    fn test_macos_sysctl_boottime_available() {
-        // Test the safe wrapper function
-        let boot_time = get_macos_boot_time_sysctl();
-
-        // Verify the safe wrapper succeeded
-        assert!(
-            boot_time.is_some(),
-            "get_macos_boot_time_sysctl should succeed on macOS"
-        );
-
-        let boot_time = boot_time.unwrap();
-
-        // Verify boot time is valid (positive, reasonable value)
-        assert!(boot_time > 0, "Boot time should be positive");
-
-        // Boot time should be after 2000-01-01 (946684800 seconds since epoch)
-        assert!(
-            boot_time > 946_684_800,
-            "Boot time should be after year 2000"
-        );
-
-        // Boot time should be before current time
-        let now = Timestamp::now().as_second();
-        assert!(
-            (boot_time as i64) < now,
-            "Boot time should be before current time"
-        );
-    }
-
-    /// Test that get_uptime always succeeds on macOS due to sysctl fallback.
-    /// This addresses the intermittent failures reported in issue #3621.
-    #[test]
-    #[cfg(target_os = "macos")]
-    fn test_get_uptime_always_succeeds_on_macos() {
-        // Call get_uptime without providing boot_time, forcing the system
-        // to use utmpx or fall back to sysctl
-        let result = get_uptime(None);
-
-        assert!(
-            result.is_ok(),
-            "get_uptime should always succeed on macOS with sysctl fallback"
-        );
-
-        let uptime = result.unwrap();
-        assert!(uptime > 0, "Uptime should be positive");
-
-        // Reasonable upper bound: system hasn't been up for more than 365 days
-        // (This is just a sanity check)
-        assert!(
-            uptime < 365 * 86400,
-            "Uptime seems unreasonably high: {uptime} seconds"
-        );
-    }
-
-    /// Test get_uptime consistency by calling it multiple times.
-    /// Verifies the sysctl fallback produces stable results.
-    #[test]
-    #[cfg(target_os = "macos")]
-    fn test_get_uptime_macos_consistency() {
-        let uptime1 = get_uptime(None).expect("First call should succeed");
-        let uptime2 = get_uptime(None).expect("Second call should succeed");
-
-        // Uptimes should be very close (within 1 second)
-        let diff = (uptime1 - uptime2).abs();
-        assert!(
-            diff <= 1,
-            "Consecutive uptime calls should be consistent, got {uptime1} and {uptime2}"
-        );
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/utmpx.rs b/registry/native/stubs/uucore/src/lib/features/utmpx.rs
deleted file mode 100644
index 021c1e155..000000000
--- a/registry/native/stubs/uucore/src/lib/features/utmpx.rs
+++ /dev/null
@@ -1,602 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-//
-// spell-checker:ignore IDLEN logind
-
-//! Aims to provide platform-independent methods to obtain login records
-//!
-//! **ONLY** support linux, macos and freebsd for the time being
-//!
-//! # Examples:
-//!
-//! ```
-//! use uucore::utmpx::Utmpx;
-//! for ut in Utmpx::iter_all_records() {
-//!     if ut.is_user_process() {
-//!         println!("{}: {}", ut.host(), ut.user())
-//!     }
-//! }
-//! ```
-//!
-//! Specifying the path to login record:
-//!
-//! ```
-//! use uucore::utmpx::Utmpx;
-//! for ut in Utmpx::iter_all_records_from("/some/where/else") {
-//!     if ut.is_user_process() {
-//!         println!("{}: {}", ut.host(), ut.user())
-//!     }
-//! }
-//! ```
-
-pub extern crate time;
-
-use std::ffi::CString;
-use std::io::Result as IOResult;
-use std::marker::PhantomData;
-use std::os::unix::ffi::OsStrExt;
-use std::path::Path;
-use std::ptr;
-use std::sync::{Mutex, MutexGuard};
-
-#[cfg(feature = "feat_systemd_logind")]
-use crate::features::systemd_logind;
-
-pub use self::ut::*;
-
-// See the FAQ at https://wiki.musl-libc.org/faq#Q:-Why-is-the-utmp/wtmp-functionality-only-implemented-as-stubs?
-// Musl implements only stubs for the utmp functions, and the libc crate issues a deprecation warning about this.
-// However, calling these stubs is the correct approach to maintain consistent behavior with GNU coreutils.
-#[cfg_attr(target_env = "musl", allow(deprecated))]
-pub use libc::endutxent;
-#[cfg_attr(target_env = "musl", allow(deprecated))]
-pub use libc::getutxent;
-#[cfg_attr(target_env = "musl", allow(deprecated))]
-pub use libc::setutxent;
-use libc::utmpx;
-#[cfg(any(
-    target_vendor = "apple",
-    target_os = "linux",
-    target_os = "netbsd",
-    target_os = "cygwin"
-))]
-#[cfg_attr(target_env = "musl", allow(deprecated))]
-pub use libc::utmpxname;
-
-/// # Safety
-/// Just fixed the clippy warning. Please add description here.
-#[cfg(target_os = "freebsd")]
-pub unsafe extern "C" fn utmpxname(_file: *const libc::c_char) -> libc::c_int {
-    0
-}
-
-use crate::libc; // import macros from `../../macros.rs`
-
-// In case the c_char array doesn't end with NULL
-macro_rules! chars2string {
-    ($arr:expr) => {
-        $arr.iter()
-            .take_while(|i| **i > 0)
-            .map(|&i| i as u8 as char)
-            .collect::<String>()
-    };
-}
-
-#[cfg(target_os = "linux")]
-mod ut {
-    pub static DEFAULT_FILE: &str = "/var/run/utmp";
-
-    #[cfg(not(target_env = "musl"))]
-    pub use libc::__UT_HOSTSIZE as UT_HOSTSIZE;
-    #[cfg(target_env = "musl")]
-    pub use libc::UT_HOSTSIZE;
-
-    #[cfg(not(target_env = "musl"))]
-    pub use libc::__UT_LINESIZE as UT_LINESIZE;
-    #[cfg(target_env = "musl")]
-    pub use libc::UT_LINESIZE;
-
-    #[cfg(not(target_env = "musl"))]
-    pub use libc::__UT_NAMESIZE as UT_NAMESIZE;
-    #[cfg(target_env = "musl")]
-    pub use libc::UT_NAMESIZE;
-
-    pub const UT_IDSIZE: usize = 4;
-
-    pub use libc::ACCOUNTING;
-    pub use libc::BOOT_TIME;
-    pub use libc::DEAD_PROCESS;
-    pub use libc::EMPTY;
-    pub use libc::INIT_PROCESS;
-    pub use libc::LOGIN_PROCESS;
-    pub use libc::NEW_TIME;
-    pub use libc::OLD_TIME;
-    pub use libc::RUN_LVL;
-    pub use libc::USER_PROCESS;
-}
-
-#[cfg(target_vendor = "apple")]
-mod ut {
-    pub static DEFAULT_FILE: &str = "/var/run/utmpx";
-
-    pub use libc::_UTX_HOSTSIZE as UT_HOSTSIZE;
-    pub use libc::_UTX_IDSIZE as UT_IDSIZE;
-    pub use libc::_UTX_LINESIZE as UT_LINESIZE;
-    pub use libc::_UTX_USERSIZE as UT_NAMESIZE;
-
-    pub use libc::ACCOUNTING;
-    pub use libc::BOOT_TIME;
-    pub use libc::DEAD_PROCESS;
-    pub use libc::EMPTY;
-    pub use libc::INIT_PROCESS;
-    pub use libc::LOGIN_PROCESS;
-    pub use libc::NEW_TIME;
-    pub use libc::OLD_TIME;
-    pub use libc::RUN_LVL;
-    pub use libc::SHUTDOWN_TIME;
-    pub use libc::SIGNATURE;
-    pub use libc::USER_PROCESS;
-}
-
-#[cfg(target_os = "freebsd")]
-mod ut {
-    pub static DEFAULT_FILE: &str = "";
-
-    pub const UT_LINESIZE: usize = 16;
-    pub const UT_NAMESIZE: usize = 32;
-    pub const UT_IDSIZE: usize = 8;
-    pub const UT_HOSTSIZE: usize = 128;
-
-    pub use libc::BOOT_TIME;
-    pub use libc::DEAD_PROCESS;
-    pub use libc::EMPTY;
-    pub use libc::INIT_PROCESS;
-    pub use libc::LOGIN_PROCESS;
-    pub use libc::NEW_TIME;
-    pub use libc::OLD_TIME;
-    pub use libc::SHUTDOWN_TIME;
-    pub use libc::USER_PROCESS;
-}
-
-#[cfg(target_os = "netbsd")]
-mod ut {
-    pub static DEFAULT_FILE: &str = "/var/run/utmpx";
-
-    pub const ACCOUNTING: usize = 9;
-    pub const SHUTDOWN_TIME: usize = 11;
-
-    pub use libc::_UTX_HOSTSIZE as UT_HOSTSIZE;
-    pub use libc::_UTX_IDSIZE as UT_IDSIZE;
-    pub use libc::_UTX_LINESIZE as UT_LINESIZE;
-    pub use libc::_UTX_USERSIZE as UT_NAMESIZE;
-
-    pub use libc::ACCOUNTING;
-    pub use libc::DEAD_PROCESS;
-    pub use libc::EMPTY;
-    pub use libc::INIT_PROCESS;
-    pub use libc::LOGIN_PROCESS;
-    pub use libc::NEW_TIME;
-    pub use libc::OLD_TIME;
-    pub use libc::RUN_LVL;
-    pub use libc::SIGNATURE;
-    pub use libc::USER_PROCESS;
-}
-
-#[cfg(target_os = "cygwin")]
-mod ut {
-    pub static DEFAULT_FILE: &str = "";
-
-    pub use libc::UT_HOSTSIZE;
-    pub use libc::UT_IDLEN;
-    pub use libc::UT_LINESIZE;
-    pub use libc::UT_NAMESIZE;
-
-    pub use libc::BOOT_TIME;
-    pub use libc::DEAD_PROCESS;
-    pub use libc::INIT_PROCESS;
-    pub use libc::LOGIN_PROCESS;
-    pub use libc::NEW_TIME;
-    pub use libc::OLD_TIME;
-    pub use libc::RUN_LVL;
-    pub use libc::USER_PROCESS;
-}
-
-/// A login record
-pub struct Utmpx {
-    inner: utmpx,
-}
-
-impl Utmpx {
-    /// A.K.A. ut.ut_type
-    pub fn record_type(&self) -> i16 {
-        self.inner.ut_type
-    }
-    /// A.K.A. ut.ut_pid
-    pub fn pid(&self) -> i32 {
-        self.inner.ut_pid
-    }
-    /// A.K.A. ut.ut_id
-    pub fn terminal_suffix(&self) -> String {
-        chars2string!(self.inner.ut_id)
-    }
-    /// A.K.A. ut.ut_user
-    pub fn user(&self) -> String {
-        chars2string!(self.inner.ut_user)
-    }
-    /// A.K.A. ut.ut_host
-    pub fn host(&self) -> String {
-        chars2string!(self.inner.ut_host)
-    }
-    /// A.K.A. ut.ut_line
-    pub fn tty_device(&self) -> String {
-        chars2string!(self.inner.ut_line)
-    }
-    /// A.K.A. ut.ut_tv
-    pub fn login_time(&self) -> time::OffsetDateTime {
-        #[allow(clippy::unnecessary_cast)]
-        let ts_nanos = 1_000_000_000_i128 * i128::from(self.inner.ut_tv.tv_sec)
-            + 1_000_i128 * i128::from(self.inner.ut_tv.tv_usec);
-        let local_offset = time::OffsetDateTime::now_local()
-            .map_or_else(|_| time::UtcOffset::UTC, time::OffsetDateTime::offset);
-        time::OffsetDateTime::from_unix_timestamp_nanos(ts_nanos)
-            .unwrap_or(time::OffsetDateTime::UNIX_EPOCH)
-            .to_offset(local_offset)
-    }
-    /// A.K.A. ut.ut_exit
-    ///
-    /// Return (e_termination, e_exit)
-    #[cfg(target_os = "linux")]
-    pub fn exit_status(&self) -> (i16, i16) {
-        (self.inner.ut_exit.e_termination, self.inner.ut_exit.e_exit)
-    }
-    /// A.K.A. ut.ut_exit
-    ///
-    /// Return (0, 0) on Non-Linux platform
-    #[cfg(not(target_os = "linux"))]
-    pub fn exit_status(&self) -> (i16, i16) {
-        (0, 0)
-    }
-    /// Consumes the `Utmpx`, returning the underlying C struct utmpx
-    pub fn into_inner(self) -> utmpx {
-        self.inner
-    }
-    /// check if the record is a user process
-    pub fn is_user_process(&self) -> bool {
-        !self.user().is_empty() && self.record_type() == USER_PROCESS
-    }
-
-    /// Canonicalize host name using DNS
-    pub fn canon_host(&self) -> IOResult<String> {
-        let host = self.host();
-
-        let (hostname, display) = host.split_once(':').unwrap_or((&host, ""));
-
-        if !hostname.is_empty() {
-            use dns_lookup::{AddrInfoHints, getaddrinfo};
-
-            const AI_CANONNAME: i32 = 0x2;
-            let hints = AddrInfoHints {
-                flags: AI_CANONNAME,
-                ..AddrInfoHints::default()
-            };
-            if let Ok(sockets) = getaddrinfo(Some(hostname), None, Some(hints)) {
-                let sockets = sockets.collect::<IOResult<Vec<_>>>()?;
-                for socket in sockets {
-                    if let Some(ai_canonname) = socket.canonname {
-                        return Ok(if display.is_empty() {
-                            ai_canonname
-                        } else {
-                            format!("{ai_canonname}:{display}")
-                        });
-                    }
-                }
-            } else {
-                // GNU coreutils has this behavior
-                return Ok(hostname.to_string());
-            }
-        }
-
-        Ok(host)
-    }
-
-    /// Iterate through all the utmp records.
-    ///
-    /// This will use the default location, or the path [`Utmpx::iter_all_records_from`]
-    /// was most recently called with.
-    ///
-    /// On systems with systemd-logind feature enabled at compile time,
-    /// this will use systemd-logind instead of traditional utmp files.
-    ///
-    /// Only one instance of [`UtmpxIter`] may be active at a time. This
-    /// function will block as long as one is still active. Beware!
-    pub fn iter_all_records() -> UtmpxIter {
-        #[cfg(feature = "feat_systemd_logind")]
-        {
-            // Use systemd-logind instead of traditional utmp when feature is enabled
-            UtmpxIter::new_systemd()
-        }
-
-        #[cfg(not(feature = "feat_systemd_logind"))]
-        {
-            let iter = UtmpxIter::new();
-            unsafe {
-                // This can technically fail, and it would be nice to detect that,
-                // but it doesn't return anything so we'd have to do nasty things
-                // with errno.
-                #[cfg_attr(target_env = "musl", allow(deprecated))]
-                setutxent();
-            }
-            iter
-        }
-    }
-
-    /// Iterate through all the utmp records from a specific file.
-    ///
-    /// No failure is reported or detected.
-    ///
-    /// This function affects subsequent calls to [`Utmpx::iter_all_records`].
-    ///
-    /// On systems with systemd-logind feature enabled at compile time,
-    /// if the path matches the default utmp file, this will use systemd-logind
-    /// instead of traditional utmp files.
-    ///
-    /// The same caveats as for [`Utmpx::iter_all_records`] apply.
-    pub fn iter_all_records_from<P: AsRef<Path>>(path: P) -> UtmpxIter {
-        #[cfg(feature = "feat_systemd_logind")]
-        {
-            // Use systemd-logind for default utmp file when feature is enabled
-            if path.as_ref() == Path::new(DEFAULT_FILE) {
-                return UtmpxIter::new_systemd();
-            }
-        }
-
-        let Ok(path) = CString::new(path.as_ref().as_os_str().as_bytes()) else {
-            return UtmpxIter::empty_traditional();
-        };
-        let iter = UtmpxIter::new();
-        unsafe {
-            // In glibc, utmpxname() only fails if there's not enough memory
-            // to copy the string.
-            // Solaris returns 1 on success instead of 0. Supposedly there also
-            // exist systems where it returns void.
-            // GNU who on Debian seems to output nothing if an invalid filename
-            // is specified, no warning or anything.
-            // So this function is pretty crazy and we don't try to detect errors.
-            // Not much we can do besides pray.
-            #[cfg_attr(target_env = "musl", allow(deprecated))]
-            utmpxname(path.as_ptr());
-            #[cfg_attr(target_env = "musl", allow(deprecated))]
-            setutxent();
-        }
-        iter
-    }
-}
-
-// On some systems these functions are not thread-safe. On others they're
-// thread-local. Therefore we use a mutex to allow only one guard to exist at
-// a time, and make sure UtmpxIter cannot be sent across threads.
-//
-// I believe the only technical memory unsafety that could happen is a data
-// race while copying the data out of the pointer returned by getutxent(), but
-// ordinary race conditions are also very much possible.
-static LOCK: Mutex<()> = Mutex::new(());
-
-/// Iterator of login records
-pub struct UtmpxIter {
-    #[allow(dead_code)]
-    guard: MutexGuard<'static, ()>,
-    /// Ensure UtmpxIter is !Send. Technically redundant because MutexGuard
-    /// is also !Send.
-    phantom: PhantomData<std::rc::Rc<()>>,
-    empty: bool,
-    #[cfg(feature = "feat_systemd_logind")]
-    systemd_iter: Option<systemd_logind::SystemdUtmpxIter>,
-}
-
-impl UtmpxIter {
-    fn new() -> Self {
-        // PoisonErrors can safely be ignored
-        let guard = LOCK
-            .lock()
-            .unwrap_or_else(std::sync::PoisonError::into_inner);
-        Self {
-            guard,
-            phantom: PhantomData,
-            empty: false,
-            #[cfg(feature = "feat_systemd_logind")]
-            systemd_iter: None,
-        }
-    }
-
-    fn empty_traditional() -> Self {
-        let guard = LOCK
-            .lock()
-            .unwrap_or_else(std::sync::PoisonError::into_inner);
-        Self {
-            guard,
-            phantom: PhantomData,
-            empty: true,
-            #[cfg(feature = "feat_systemd_logind")]
-            systemd_iter: None,
-        }
-    }
-
-    #[cfg(feature = "feat_systemd_logind")]
-    fn new_systemd() -> Self {
-        // PoisonErrors can safely be ignored
-        let guard = LOCK
-            .lock()
-            .unwrap_or_else(std::sync::PoisonError::into_inner);
-        let systemd_iter = match systemd_logind::SystemdUtmpxIter::new() {
-            Ok(iter) => iter,
-            Err(_) => {
-                // Like GNU coreutils: graceful degradation, not fallback to traditional utmp
-                // Return empty iterator rather than falling back  (GNU coreutils also returns 0 when /var/run/utmp is not present, so we don't need to propagate the error here)
-                systemd_logind::SystemdUtmpxIter::empty()
-            }
-        };
-        Self {
-            guard,
-            phantom: PhantomData,
-            empty: false,
-            systemd_iter: Some(systemd_iter),
-        }
-    }
-}
-
-/// Wrapper type that can hold either traditional utmpx records or systemd records
-pub enum UtmpxRecord {
-    Traditional(Box<Utmpx>),
-    #[cfg(feature = "feat_systemd_logind")]
-    Systemd(systemd_logind::SystemdUtmpxCompat),
-}
-
-impl UtmpxRecord {
-    /// A.K.A. ut.ut_type
-    pub fn record_type(&self) -> i16 {
-        match self {
-            Self::Traditional(utmpx) => utmpx.record_type(),
-            #[cfg(feature = "feat_systemd_logind")]
-            Self::Systemd(systemd) => systemd.record_type(),
-        }
-    }
-
-    /// A.K.A. ut.ut_pid
-    pub fn pid(&self) -> i32 {
-        match self {
-            Self::Traditional(utmpx) => utmpx.pid(),
-            #[cfg(feature = "feat_systemd_logind")]
-            Self::Systemd(systemd) => systemd.pid(),
-        }
-    }
-
-    /// A.K.A. ut.ut_id
-    pub fn terminal_suffix(&self) -> String {
-        match self {
-            Self::Traditional(utmpx) => utmpx.terminal_suffix(),
-            #[cfg(feature = "feat_systemd_logind")]
-            Self::Systemd(systemd) => systemd.terminal_suffix(),
-        }
-    }
-
-    /// A.K.A. ut.ut_user
-    pub fn user(&self) -> String {
-        match self {
-            Self::Traditional(utmpx) => utmpx.user(),
-            #[cfg(feature = "feat_systemd_logind")]
-            Self::Systemd(systemd) => systemd.user(),
-        }
-    }
-
-    /// A.K.A. ut.ut_host
-    pub fn host(&self) -> String {
-        match self {
-            Self::Traditional(utmpx) => utmpx.host(),
-            #[cfg(feature = "feat_systemd_logind")]
-            Self::Systemd(systemd) => systemd.host(),
-        }
-    }
-
-    /// A.K.A. ut.ut_line
-    pub fn tty_device(&self) -> String {
-        match self {
-            Self::Traditional(utmpx) => utmpx.tty_device(),
-            #[cfg(feature = "feat_systemd_logind")]
-            Self::Systemd(systemd) => systemd.tty_device(),
-        }
-    }
-
-    /// A.K.A. ut.ut_tv
-    pub fn login_time(&self) -> time::OffsetDateTime {
-        match self {
-            Self::Traditional(utmpx) => utmpx.login_time(),
-            #[cfg(feature = "feat_systemd_logind")]
-            Self::Systemd(systemd) => systemd.login_time(),
-        }
-    }
-
-    /// A.K.A. ut.ut_exit
-    ///
-    /// Return (e_termination, e_exit)
-    pub fn exit_status(&self) -> (i16, i16) {
-        match self {
-            Self::Traditional(utmpx) => utmpx.exit_status(),
-            #[cfg(feature = "feat_systemd_logind")]
-            Self::Systemd(systemd) => systemd.exit_status(),
-        }
-    }
-
-    /// check if the record is a user process
-    pub fn is_user_process(&self) -> bool {
-        match self {
-            Self::Traditional(utmpx) => utmpx.is_user_process(),
-            #[cfg(feature = "feat_systemd_logind")]
-            Self::Systemd(systemd) => systemd.is_user_process(),
-        }
-    }
-
-    /// Canonicalize host name using DNS
-    pub fn canon_host(&self) -> IOResult<String> {
-        match self {
-            Self::Traditional(utmpx) => utmpx.canon_host(),
-            #[cfg(feature = "feat_systemd_logind")]
-            Self::Systemd(systemd) => Ok(systemd.canon_host()),
-        }
-    }
-}
-
-impl Iterator for UtmpxIter {
-    type Item = UtmpxRecord;
-    fn next(&mut self) -> Option<Self::Item> {
-        #[cfg(feature = "feat_systemd_logind")]
-        {
-            if let Some(ref mut systemd_iter) = self.systemd_iter {
-                // We have a systemd iterator - use it exclusively (never fall back to traditional utmp)
-                return systemd_iter.next().map(UtmpxRecord::Systemd);
-            }
-        }
-
-        if self.empty {
-            return None;
-        }
-
-        // Traditional utmp path
-        unsafe {
-            #[cfg_attr(target_env = "musl", allow(deprecated))]
-            let res = getutxent();
-            if res.is_null() {
-                None
-            } else {
-                // The data behind this pointer will be replaced by the next
-                // call to getutxent(), so we have to read it now.
-                // All the strings live inline in the struct as arrays, which
-                // makes things easier.
-                Some(UtmpxRecord::Traditional(Box::new(Utmpx {
-                    inner: ptr::read(res.cast_const()),
-                })))
-            }
-        }
-    }
-}
-
-impl Drop for UtmpxIter {
-    fn drop(&mut self) {
-        unsafe {
-            #[cfg_attr(target_env = "musl", allow(deprecated))]
-            endutxent();
-        }
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-
-    #[test]
-    fn invalid_record_path_returns_empty_iterator() {
-        let mut iter = Utmpx::iter_all_records_from("bad\0path");
-        assert!(iter.next().is_none());
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/version_cmp.rs b/registry/native/stubs/uucore/src/lib/features/version_cmp.rs
deleted file mode 100644
index cf4bf581b..000000000
--- a/registry/native/stubs/uucore/src/lib/features/version_cmp.rs
+++ /dev/null
@@ -1,372 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Compare two version strings.
-
-use std::cmp::Ordering;
-
-/// Compares the non-digit parts of a version.
-/// Special cases: ~ are before everything else, even ends ("a~" < "a")
-/// Letters are before non-letters
-fn version_non_digit_cmp(a: &[u8], b: &[u8]) -> Ordering {
-    let mut a_chars = a.iter();
-    let mut b_chars = b.iter();
-    loop {
-        match (a_chars.next(), b_chars.next()) {
-            (Some(c1), Some(c2)) if c1 == c2 => {}
-            (None, None) => return Ordering::Equal,
-            (_, Some(b'~')) => return Ordering::Greater,
-            (Some(b'~'), _) => return Ordering::Less,
-            (None, Some(_)) => return Ordering::Less,
-            (Some(_), None) => return Ordering::Greater,
-            (Some(c1), Some(c2)) if c1.is_ascii_alphabetic() && !c2.is_ascii_alphabetic() => {
-                return Ordering::Less;
-            }
-            (Some(c1), Some(c2)) if !c1.is_ascii_alphabetic() && c2.is_ascii_alphabetic() => {
-                return Ordering::Greater;
-            }
-            (Some(c1), Some(c2)) => return c1.cmp(c2),
-        }
-    }
-}
-
-/// Remove file endings matching the regex `(\.[A-Za-z~][A-Za-z0-9~]*)*$`
-fn remove_file_ending(a: &[u8]) -> &[u8] {
-    let mut ending_start = None;
-    let mut prev_was_dot = false;
-    for (idx, &char) in a.iter().enumerate() {
-        if char == b'.' {
-            if ending_start.is_none() || prev_was_dot {
-                ending_start = Some(idx);
-            }
-            prev_was_dot = true;
-        } else if prev_was_dot {
-            prev_was_dot = false;
-            if !char.is_ascii_alphabetic() && char != b'~' {
-                ending_start = None;
-            }
-        } else if !char.is_ascii_alphanumeric() && char != b'~' {
-            ending_start = None;
-        }
-    }
-    if prev_was_dot {
-        ending_start = None;
-    }
-    if let Some(ending_start) = ending_start {
-        &a[..ending_start]
-    } else {
-        a
-    }
-}
-
-/// Compare two version strings.
-pub fn version_cmp(mut a: &[u8], mut b: &[u8]) -> Ordering {
-    let str_cmp = a.cmp(b);
-    if str_cmp == Ordering::Equal {
-        return str_cmp;
-    }
-
-    // Special cases:
-    // 1. Empty strings
-    match (a.is_empty(), b.is_empty()) {
-        (true, false) => return Ordering::Less,
-        (false, true) => return Ordering::Greater,
-        (true, true) => unreachable!(),
-        (false, false) => {}
-    }
-    // 2. Dots
-    match (a == b".", b == b".") {
-        (true, false) => return Ordering::Less,
-        (false, true) => return Ordering::Greater,
-        (true, true) => unreachable!(),
-        (false, false) => {}
-    }
-    // 3. Two Dots
-    match (a == b"..", b == b"..") {
-        (true, false) => return Ordering::Less,
-        (false, true) => return Ordering::Greater,
-        (true, true) => unreachable!(),
-        (false, false) => {}
-    }
-    // 4. Strings starting with a dot
-    match (a.starts_with(b"."), b.starts_with(b".")) {
-        (true, false) => return Ordering::Less,
-        (false, true) => return Ordering::Greater,
-        (true, true) => {
-            // Strip the leading dot for later comparisons
-            a = &a[1..];
-            b = &b[1..];
-        }
-        _ => {}
-    }
-
-    // Try to strip file extensions
-    let (mut a, mut b) = match (remove_file_ending(a), remove_file_ending(b)) {
-        (a_stripped, b_stripped) if a_stripped == b_stripped => {
-            // If both would be the same after stripping file extensions, don't strip them.
-            (a, b)
-        }
-        stripped => stripped,
-    };
-
-    // 1. Compare leading non-numerical part
-    // 2. Compare leading numerical part
-    // 3. Repeat
-    while !a.is_empty() || !b.is_empty() {
-        let a_numerical_start = a.iter().position(u8::is_ascii_digit).unwrap_or(a.len());
-        let b_numerical_start = b.iter().position(u8::is_ascii_digit).unwrap_or(b.len());
-
-        let a_str = &a[..a_numerical_start];
-        let b_str = &b[..b_numerical_start];
-
-        match version_non_digit_cmp(a_str, b_str) {
-            Ordering::Equal => {}
-            ord => return ord,
-        }
-
-        a = &a[a_numerical_start..];
-        b = &b[a_numerical_start..];
-
-        let a_numerical_end = a
-            .iter()
-            .position(|c| !c.is_ascii_digit())
-            .unwrap_or(a.len());
-        let b_numerical_end = b
-            .iter()
-            .position(|c| !c.is_ascii_digit())
-            .unwrap_or(b.len());
-
-        let a_str = &a[a.iter().position(|&c| c != b'0').unwrap_or(a.len())..a_numerical_end];
-        let b_str = &b[b.iter().position(|&c| c != b'0').unwrap_or(b.len())..b_numerical_end];
-
-        match a_str.len().cmp(&b_str.len()) {
-            Ordering::Equal => {}
-            ord => return ord,
-        }
-
-        match a_str.cmp(b_str) {
-            Ordering::Equal => {}
-            ord => return ord,
-        }
-
-        a = &a[a_numerical_end..];
-        b = &b[b_numerical_end..];
-    }
-
-    Ordering::Equal
-}
-
-#[cfg(test)]
-mod tests {
-    use crate::version_cmp::version_cmp;
-    use std::cmp::Ordering;
-    #[test]
-    fn test_version_cmp() {
-        // Identical strings
-        assert_eq!(version_cmp(b"hello", b"hello"), Ordering::Equal);
-
-        assert_eq!(version_cmp(b"file12", b"file12"), Ordering::Equal);
-
-        assert_eq!(
-            version_cmp(b"file12-suffix", b"file12-suffix"),
-            Ordering::Equal
-        );
-
-        assert_eq!(
-            version_cmp(b"file12-suffix24", b"file12-suffix24"),
-            Ordering::Equal
-        );
-
-        // Shortened names
-        assert_eq!(version_cmp(b"world", b"wo"), Ordering::Greater);
-
-        assert_eq!(version_cmp(b"hello10wo", b"hello10world"), Ordering::Less);
-
-        // Simple names
-        assert_eq!(version_cmp(b"world", b"hello"), Ordering::Greater);
-
-        assert_eq!(version_cmp(b"hello", b"world"), Ordering::Less);
-
-        assert_eq!(version_cmp(b"apple", b"ant"), Ordering::Greater);
-
-        assert_eq!(version_cmp(b"ant", b"apple"), Ordering::Less);
-
-        // Uppercase letters
-        assert_eq!(
-            version_cmp(b"Beef", b"apple"),
-            Ordering::Less,
-            "Uppercase letters are sorted before all lowercase letters"
-        );
-
-        assert_eq!(version_cmp(b"Apple", b"apple"), Ordering::Less);
-
-        assert_eq!(version_cmp(b"apple", b"aPple"), Ordering::Greater);
-
-        // Numbers
-        assert_eq!(
-            version_cmp(b"100", b"20"),
-            Ordering::Greater,
-            "Greater numbers are greater even if they start with a smaller digit",
-        );
-
-        assert_eq!(
-            version_cmp(b"20", b"20"),
-            Ordering::Equal,
-            "Equal numbers are equal"
-        );
-
-        assert_eq!(
-            version_cmp(b"15", b"200"),
-            Ordering::Less,
-            "Small numbers are smaller"
-        );
-
-        // Comparing numbers with other characters
-        assert_eq!(
-            version_cmp(b"1000", b"apple"),
-            Ordering::Less,
-            "Numbers are sorted before other characters"
-        );
-
-        assert_eq!(
-            // spell-checker:disable-next-line
-            version_cmp(b"file1000", b"fileapple"),
-            Ordering::Less,
-            "Numbers in the middle of the name are sorted before other characters"
-        );
-
-        // Leading zeroes
-        assert_eq!(
-            version_cmp(b"012", b"12"),
-            Ordering::Equal,
-            "A single leading zero does not make a difference"
-        );
-
-        assert_eq!(
-            version_cmp(b"000800", b"0000800"),
-            Ordering::Equal,
-            "Multiple leading zeros do not make a difference"
-        );
-
-        // Numbers and other characters combined
-        assert_eq!(version_cmp(b"ab10", b"aa11"), Ordering::Greater);
-
-        assert_eq!(
-            version_cmp(b"aa10", b"aa11"),
-            Ordering::Less,
-            "Numbers after other characters are handled correctly."
-        );
-
-        assert_eq!(
-            version_cmp(b"aa2", b"aa100"),
-            Ordering::Less,
-            "Numbers after alphabetical characters are handled correctly."
-        );
-
-        assert_eq!(
-            version_cmp(b"aa10bb", b"aa11aa"),
-            Ordering::Less,
-            "Number is used even if alphabetical characters after it differ."
-        );
-
-        assert_eq!(
-            version_cmp(b"aa10aa0010", b"aa11aa1"),
-            Ordering::Less,
-            "Second number is ignored if the first number differs."
-        );
-
-        assert_eq!(
-            version_cmp(b"aa10aa0010", b"aa10aa1"),
-            Ordering::Greater,
-            "Second number is used if the rest is equal."
-        );
-
-        assert_eq!(
-            version_cmp(b"aa10aa0010", b"aa00010aa1"),
-            Ordering::Greater,
-            "Second number is used if the rest is equal up to leading zeroes of the first number."
-        );
-
-        assert_eq!(
-            version_cmp(b"aa10aa0022", b"aa010aa022"),
-            Ordering::Equal,
-            "Test multiple numeric values with leading zeros"
-        );
-
-        assert_eq!(
-            version_cmp(b"file-1.4", b"file-1.13"),
-            Ordering::Less,
-            "Periods are handled as normal text, not as a decimal point."
-        );
-
-        // Greater than u64::Max
-        // u64 == 18446744073709551615 so this should be plenty:
-        //        20000000000000000000000
-        assert_eq!(
-            version_cmp(
-                b"aa2000000000000000000000bb",
-                b"aa002000000000000000000001bb"
-            ),
-            Ordering::Less,
-            "Numbers larger than u64::MAX are handled correctly without crashing"
-        );
-
-        assert_eq!(
-            version_cmp(
-                b"aa2000000000000000000000bb",
-                b"aa002000000000000000000000bb"
-            ),
-            Ordering::Equal,
-            "Leading zeroes for numbers larger than u64::MAX are \
-            handled correctly without crashing"
-        );
-
-        assert_eq!(
-            version_cmp(b"  a", b"a"),
-            Ordering::Greater,
-            "Whitespace is after letters because letters are before non-letters"
-        );
-
-        assert_eq!(
-            version_cmp(b"a~", b"ab"),
-            Ordering::Less,
-            "A tilde is before other letters"
-        );
-
-        assert_eq!(
-            version_cmp(b"a~", b"a"),
-            Ordering::Less,
-            "A tilde is before the line end"
-        );
-        assert_eq!(
-            version_cmp(b"~", b""),
-            Ordering::Greater,
-            "A tilde is after the empty string"
-        );
-        assert_eq!(
-            version_cmp(b".f", b".1"),
-            Ordering::Greater,
-            "if both start with a dot it is ignored for the comparison"
-        );
-
-        // The following tests are incompatible with GNU as of 2021/06.
-        // I think that's because of a bug in GNU, reported as https://lists.gnu.org/archive/html/bug-coreutils/2021-06/msg00045.html
-        assert_eq!(
-            version_cmp(b"a..a", b"a.+"),
-            Ordering::Less,
-            ".a is stripped before the comparison"
-        );
-        assert_eq!(
-            version_cmp(b"a.", b"a+"),
-            Ordering::Greater,
-            ". is not stripped before the comparison"
-        );
-        assert_eq!(
-            version_cmp(b"a\0a", b"a"),
-            Ordering::Greater,
-            "NULL bytes are handled comparison"
-        );
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/features/wide.rs b/registry/native/stubs/uucore/src/lib/features/wide.rs
deleted file mode 100644
index 68341cd68..000000000
--- a/registry/native/stubs/uucore/src/lib/features/wide.rs
+++ /dev/null
@@ -1,37 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-use std::ffi::{OsStr, OsString};
-use std::os::windows::ffi::{OsStrExt, OsStringExt};
-pub trait ToWide {
-    fn to_wide(&self) -> Vec<u16>;
-    fn to_wide_null(&self) -> Vec<u16>;
-}
-impl<T> ToWide for T
-where
-    T: AsRef<OsStr>,
-{
-    fn to_wide(&self) -> Vec<u16> {
-        self.as_ref().encode_wide().collect()
-    }
-    fn to_wide_null(&self) -> Vec<u16> {
-        self.as_ref().encode_wide().chain(Some(0)).collect()
-    }
-}
-pub trait FromWide {
-    fn from_wide(wide: &[u16]) -> Self;
-    fn from_wide_null(wide: &[u16]) -> Self;
-}
-impl FromWide for String {
-    fn from_wide(wide: &[u16]) -> Self {
-        OsString::from_wide(wide).to_string_lossy().into_owned()
-    }
-    fn from_wide_null(wide: &[u16]) -> Self {
-        let len = wide.iter().take_while(|&&c| c != 0).count();
-        OsString::from_wide(&wide[..len])
-            .to_string_lossy()
-            .into_owned()
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/lib.rs b/registry/native/stubs/uucore/src/lib/lib.rs
deleted file mode 100644
index a15343e48..000000000
--- a/registry/native/stubs/uucore/src/lib/lib.rs
+++ /dev/null
@@ -1,758 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-//! library ~ (core/bundler file)
-// #![deny(missing_docs)] //TODO: enable this
-//
-// spell-checker:ignore sigaction SIGBUS SIGSEGV extendedbigdecimal myutil logind
-
-// wasmVM patch: enable WASI extensions on nightly for MetadataExt
-#![cfg_attr(target_os = "wasi", feature(wasi_ext))]
-
-// * feature-gated external crates (re-shared as public internal modules)
-#[cfg(feature = "libc")]
-pub extern crate libc;
-#[cfg(all(feature = "windows-sys", target_os = "windows"))]
-pub extern crate windows_sys;
-
-//## internal modules
-
-mod features; // feature-gated code modules
-mod macros; // crate macros (macro_rules-type; exported to `crate::...`)
-mod mods; // core cross-platform modules
-
-pub use uucore_procs::*;
-
-// * cross-platform modules
-pub use crate::mods::clap_localization;
-pub use crate::mods::display;
-pub use crate::mods::error;
-#[cfg(feature = "fs")]
-pub use crate::mods::io;
-pub use crate::mods::line_ending;
-pub use crate::mods::locale;
-pub use crate::mods::os;
-pub use crate::mods::panic;
-pub use crate::mods::posix;
-
-// * feature-gated modules
-#[cfg(feature = "backup-control")]
-pub use crate::features::backup_control;
-#[cfg(feature = "benchmark")]
-pub use crate::features::benchmark;
-#[cfg(feature = "buf-copy")]
-pub use crate::features::buf_copy;
-#[cfg(feature = "checksum")]
-pub use crate::features::checksum;
-#[cfg(feature = "colors")]
-pub use crate::features::colors;
-#[cfg(feature = "encoding")]
-pub use crate::features::encoding;
-#[cfg(feature = "extendedbigdecimal")]
-pub use crate::features::extendedbigdecimal;
-#[cfg(feature = "fast-inc")]
-pub use crate::features::fast_inc;
-#[cfg(feature = "format")]
-pub use crate::features::format;
-#[cfg(feature = "fs")]
-pub use crate::features::fs;
-#[cfg(feature = "hardware")]
-pub use crate::features::hardware;
-#[cfg(feature = "i18n-common")]
-pub use crate::features::i18n;
-#[cfg(feature = "lines")]
-pub use crate::features::lines;
-#[cfg(any(
-    feature = "parser",
-    feature = "parser-num",
-    feature = "parser-size",
-    feature = "parser-glob"
-))]
-pub use crate::features::parser;
-#[cfg(feature = "quoting-style")]
-pub use crate::features::quoting_style;
-#[cfg(feature = "ranges")]
-pub use crate::features::ranges;
-#[cfg(feature = "ringbuffer")]
-pub use crate::features::ringbuffer;
-#[cfg(feature = "sum")]
-pub use crate::features::sum;
-#[cfg(feature = "feat_systemd_logind")]
-pub use crate::features::systemd_logind;
-#[cfg(feature = "time")]
-pub use crate::features::time;
-#[cfg(feature = "update-control")]
-pub use crate::features::update_control;
-#[cfg(feature = "uptime")]
-pub use crate::features::uptime;
-#[cfg(feature = "version-cmp")]
-pub use crate::features::version_cmp;
-
-// * (platform-specific) feature-gated modules
-// ** non-windows (i.e. Unix + Fuchsia)
-#[cfg(all(not(windows), feature = "mode"))]
-pub use crate::features::mode;
-// ** unix + WASI (wasmVM: entries/perms extended to WASI via host_user FFI)
-#[cfg(all(any(unix, target_os = "wasi"), feature = "entries"))]
-pub use crate::features::entries;
-#[cfg(all(any(unix, target_os = "wasi"), feature = "perms"))]
-pub use crate::features::perms;
-#[cfg(all(unix, any(feature = "pipes", feature = "buf-copy")))]
-pub use crate::features::pipes;
-#[cfg(all(unix, feature = "process"))]
-pub use crate::features::process;
-#[cfg(all(unix, not(target_os = "redox")))]
-pub use crate::features::safe_traversal;
-#[cfg(all(unix, not(target_os = "fuchsia"), feature = "signals"))]
-pub use crate::features::signals;
-#[cfg(all(
-    unix,
-    not(target_os = "android"),
-    not(target_os = "fuchsia"),
-    not(target_os = "openbsd"),
-    not(target_os = "redox"),
-    feature = "utmpx"
-))]
-pub use crate::features::utmpx;
-// ** windows-only
-#[cfg(all(windows, feature = "wide"))]
-pub use crate::features::wide;
-
-#[cfg(feature = "fsext")]
-pub use crate::features::fsext;
-
-#[cfg(all(unix, feature = "fsxattr"))]
-pub use crate::features::fsxattr;
-
-#[cfg(all(feature = "selinux", any(target_os = "linux", target_os = "android")))]
-pub use crate::features::selinux;
-
-#[cfg(all(target_os = "linux", feature = "smack"))]
-pub use crate::features::smack;
-
-//## core functions
-
-#[cfg(unix)]
-use nix::errno::Errno;
-#[cfg(unix)]
-use nix::sys::signal::{
-    SaFlags, SigAction, SigHandler::SigDfl, SigSet, Signal::SIGBUS, Signal::SIGSEGV, sigaction,
-};
-use std::borrow::Cow;
-use std::ffi::{OsStr, OsString};
-use std::io::{BufRead, BufReader};
-use std::iter;
-#[cfg(unix)]
-use std::os::unix::ffi::{OsStrExt, OsStringExt};
-use std::str;
-use std::str::Utf8Chunk;
-use std::sync::{LazyLock, atomic::Ordering};
-
-/// Disables the custom signal handlers installed by Rust for stack-overflow handling. With those custom signal handlers processes ignore the first SIGBUS and SIGSEGV signal they receive.
-/// See <https://github.com/rust-lang/rust/blob/8ac1525e091d3db28e67adcbbd6db1e1deaa37fb/src/libstd/sys/unix/stack_overflow.rs#L71-L92> for details.
-#[cfg(unix)]
-pub fn disable_rust_signal_handlers() -> Result<(), Errno> {
-    unsafe {
-        sigaction(
-            SIGSEGV,
-            &SigAction::new(SigDfl, SaFlags::empty(), SigSet::all()),
-        )
-    }?;
-    unsafe {
-        sigaction(
-            SIGBUS,
-            &SigAction::new(SigDfl, SaFlags::empty(), SigSet::all()),
-        )
-    }?;
-    Ok(())
-}
-
-pub fn get_canonical_util_name(util_name: &str) -> &str {
-    let util_name = util_name.strip_prefix("uu_").unwrap_or(util_name);
-    match util_name {
-        // uu_test aliases - '[' is an alias for test
-        "[" => "test",
-        "dir" => "ls",  // dir is an alias for ls
-        "vdir" => "ls", // vdir is an alias for ls
-
-        // Default case - return the util name as is
-        _ => util_name,
-    }
-}
-
-/// Execute utility code for `util`.
-///
-/// This macro expands to a main function that invokes the `uumain` function in `util`
-/// Exits with code returned by `uumain`.
-#[macro_export]
-macro_rules! bin {
-    ($util:ident) => {
-        pub fn main() {
-            use std::io::Write;
-            use uucore::locale;
-
-            // Preserve inherited SIGPIPE settings (e.g., from env --default-signal=PIPE)
-            uucore::panic::preserve_inherited_sigpipe();
-
-            // suppress extraneous error output for SIGPIPE failures/panics
-            uucore::panic::mute_sigpipe_panic();
-            locale::setup_localization(uucore::get_canonical_util_name(stringify!($util)))
-                .unwrap_or_else(|err| {
-                    match err {
-                        uucore::locale::LocalizationError::ParseResource {
-                            error: err_msg,
-                            snippet,
-                        } => eprintln!("Localization parse error at {snippet}: {err_msg:?}"),
-                        other => eprintln!("Could not init the localization system: {other}"),
-                    }
-                    std::process::exit(99)
-                });
-
-            // execute utility code
-            let code = $util::uumain(uucore::args_os());
-            // (defensively) flush stdout for utility prior to exit; see <https://github.com/rust-lang/rust/issues/23818>
-            if let Err(e) = std::io::stdout().flush() {
-                eprintln!("Error flushing stdout: {e}");
-            }
-
-            std::process::exit(code);
-        }
-    };
-}
-
-/// Generate the version string for clap.
-///
-/// The generated string has the format `(<project name>) <version>`, for
-/// example: "(uutils coreutils) 0.30.0". clap will then prefix it with the util name.
-#[macro_export]
-macro_rules! crate_version {
-    () => {
-        concat!("(uutils coreutils) ", env!("CARGO_PKG_VERSION"))
-    };
-}
-
-/// Generate the usage string for clap.
-///
-/// This function does two things. It indents all but the first line to align
-/// the lines because clap adds "Usage: " to the first line. And it replaces
-/// all occurrences of `{}` with the execution phrase and returns the resulting
-/// `String`. It does **not** support more advanced formatting features such
-/// as `{0}`.
-pub fn format_usage(s: &str) -> String {
-    let s = s.replace('\n', &format!("\n{}", " ".repeat(7)));
-    s.replace("{}", execution_phrase())
-}
-
-/// Creates a localized help template for clap commands.
-///
-/// This function returns a help template that uses the localized
-/// "Usage:" label from the translation files. This ensures consistent
-/// localization across all utilities.
-///
-/// Note: We avoid using clap's `{usage-heading}` placeholder because it is
-/// hardcoded to "Usage:" and cannot be localized. Instead, we manually
-/// construct the usage line with the localized label.
-///
-/// # Parameters
-/// - `util_name`: The name of the utility (for localization setup)
-///
-/// # Example
-/// ```no_run
-/// use clap::Command;
-/// use uucore::localized_help_template;
-///
-/// let app = Command::new("myutil")
-///     .help_template(localized_help_template("myutil"));
-/// ```
-pub fn localized_help_template(util_name: &str) -> clap::builder::StyledStr {
-    use std::io::IsTerminal;
-
-    // Determine if colors should be enabled - same logic as configure_localized_command
-    let colors_enabled = if std::env::var("NO_COLOR").is_ok() {
-        false
-    } else if std::env::var("CLICOLOR_FORCE").is_ok() || std::env::var("FORCE_COLOR").is_ok() {
-        true
-    } else {
-        IsTerminal::is_terminal(&std::io::stdout())
-            && std::env::var("TERM").unwrap_or_default() != "dumb"
-    };
-
-    localized_help_template_with_colors(util_name, colors_enabled)
-}
-
-/// Create a localized help template with explicit color control
-/// This ensures color detection consistency between clap and our template
-pub fn localized_help_template_with_colors(
-    util_name: &str,
-    colors_enabled: bool,
-) -> clap::builder::StyledStr {
-    use std::fmt::Write;
-
-    // Ensure localization is initialized for this utility
-    let _ = locale::setup_localization(util_name);
-
-    // Get the localized "Usage" label
-    let usage_label = crate::locale::translate!("common-usage");
-
-    // Create a styled template
-    let mut template = clap::builder::StyledStr::new();
-
-    // Add the basic template parts
-    writeln!(template, "{{before-help}}{{about-with-newline}}").unwrap();
-
-    // Add styled usage header (bold + underline like clap's default)
-    if colors_enabled {
-        write!(
-            template,
-            "\x1b[1m\x1b[4m{usage_label}:\x1b[0m {{usage}}\n\n"
-        )
-        .unwrap();
-    } else {
-        write!(template, "{usage_label}: {{usage}}\n\n").unwrap();
-    }
-
-    // Add the rest
-    write!(template, "{{all-args}}{{after-help}}").unwrap();
-
-    template
-}
-
-/// Used to check if the utility is the second argument.
-/// Used to check if we were called as a multicall binary (`coreutils <utility>`)
-pub fn get_utility_is_second_arg() -> bool {
-    macros::UTILITY_IS_SECOND_ARG.load(Ordering::SeqCst)
-}
-
-/// Change the value of `UTILITY_IS_SECOND_ARG` to true
-/// Used to specify that the utility is the second argument.
-pub fn set_utility_is_second_arg() {
-    macros::UTILITY_IS_SECOND_ARG.store(true, Ordering::SeqCst);
-}
-
-// args_os() can be expensive to call, it copies all of argv before iterating.
-// So if we want only the first arg or so it's overkill. We cache it.
-#[cfg(windows)]
-static ARGV: LazyLock<Vec<OsString>> = LazyLock::new(|| wild::args_os().collect());
-#[cfg(not(windows))]
-static ARGV: LazyLock<Vec<OsString>> = LazyLock::new(|| std::env::args_os().collect());
-
-static UTIL_NAME: LazyLock<String> = LazyLock::new(|| {
-    let base_index = usize::from(get_utility_is_second_arg());
-    let is_man = usize::from(ARGV[base_index].eq("manpage"));
-    let argv_index = base_index + is_man;
-
-    // Strip directory path to show only utility name
-    // (e.g., "mkdir" instead of "./target/debug/mkdir")
-    // in version output, error messages, and other user-facing output
-    std::path::Path::new(&ARGV[argv_index])
-        .file_name()
-        .unwrap_or(&ARGV[argv_index])
-        .to_string_lossy()
-        .into_owned()
-});
-
-/// Derive the utility name.
-pub fn util_name() -> &'static str {
-    &UTIL_NAME
-}
-
-static EXECUTION_PHRASE: LazyLock<String> = LazyLock::new(|| {
-    if get_utility_is_second_arg() {
-        ARGV.iter()
-            .take(2)
-            .map(|os_str| os_str.to_string_lossy().into_owned())
-            .collect::<Vec<_>>()
-            .join(" ")
-    } else {
-        ARGV[0].to_string_lossy().into_owned()
-    }
-});
-
-/// Derive the complete execution phrase for "usage".
-pub fn execution_phrase() -> &'static str {
-    &EXECUTION_PHRASE
-}
-
-/// Args contains arguments passed to the utility.
-/// It is a trait that extends `Iterator<Item = OsString>`.
-/// It provides utility functions to collect the arguments into a `Vec<String>`.
-/// The collected `Vec<String>` can be lossy or ignore invalid encoding.
-pub trait Args: Iterator<Item = OsString> + Sized {
-    /// Collects the iterator into a `Vec<String>`, lossily converting the `OsString`s to `Strings`.
-    fn collect_lossy(self) -> Vec<String> {
-        self.map(|s| s.to_string_lossy().into_owned()).collect()
-    }
-
-    /// Collects the iterator into a `Vec<String>`, removing any elements that contain invalid encoding.
-    fn collect_ignore(self) -> Vec<String> {
-        self.filter_map(|s| s.into_string().ok()).collect()
-    }
-}
-
-impl<T: Iterator<Item = OsString> + Sized> Args for T {}
-
-/// Returns an iterator over the command line arguments as `OsString`s.
-/// args_os() can be expensive to call
-pub fn args_os() -> impl Iterator<Item = OsString> {
-    ARGV.iter().cloned()
-}
-
-/// Returns an iterator over the command line arguments as `OsString`s, filtering out empty arguments.
-/// This is useful for handling cases where extra whitespace or empty arguments are present.
-/// args_os_filtered() can be expensive to call
-pub fn args_os_filtered() -> impl Iterator<Item = OsString> {
-    ARGV.iter().filter(|arg| !arg.is_empty()).cloned()
-}
-
-/// Read a line from stdin and check whether the first character is `'y'` or `'Y'`
-pub fn read_yes() -> bool {
-    let mut s = String::new();
-    match std::io::stdin().read_line(&mut s) {
-        Ok(_) => matches!(s.chars().next(), Some('y' | 'Y')),
-        _ => false,
-    }
-}
-
-#[derive(Debug)]
-pub struct NonUtf8OsStrError {
-    input_lossy_string: String,
-}
-
-impl std::fmt::Display for NonUtf8OsStrError {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        use os_display::Quotable;
-        let quoted = self.input_lossy_string.quote();
-        f.write_fmt(format_args!(
-            "invalid UTF-8 input {quoted} encountered when converting to bytes on a platform that doesn't expose byte arguments",
-        ))
-    }
-}
-
-impl std::error::Error for NonUtf8OsStrError {}
-impl error::UError for NonUtf8OsStrError {}
-
-/// Converts an `OsStr` to a UTF-8 `&[u8]`.
-///
-/// This always succeeds on unix platforms,
-/// and fails on other platforms if the string can't be coerced to UTF-8.
-#[cfg_attr(unix, expect(clippy::unnecessary_wraps))]
-pub fn os_str_as_bytes(os_string: &OsStr) -> Result<&[u8], NonUtf8OsStrError> {
-    #[cfg(unix)]
-    return Ok(os_string.as_bytes());
-
-    #[cfg(not(unix))]
-    os_string
-        .to_str()
-        .ok_or_else(|| NonUtf8OsStrError {
-            input_lossy_string: os_string.to_string_lossy().into_owned(),
-        })
-        .map(str::as_bytes)
-}
-
-/// Performs a potentially lossy conversion from `OsStr` to UTF-8 bytes.
-///
-/// This is always lossless on unix platforms,
-/// and wraps [`OsStr::to_string_lossy`] on non-unix platforms.
-pub fn os_str_as_bytes_lossy(os_string: &OsStr) -> Cow<'_, [u8]> {
-    #[cfg(unix)]
-    return Cow::from(os_string.as_bytes());
-
-    #[cfg(not(unix))]
-    match os_string.to_string_lossy() {
-        Cow::Borrowed(slice) => Cow::from(slice.as_bytes()),
-        Cow::Owned(owned) => Cow::from(owned.into_bytes()),
-    }
-}
-
-/// Converts a `&[u8]` to an `&OsStr`,
-/// or parses it as UTF-8 into an [`OsString`] on non-unix platforms.
-///
-/// This always succeeds on unix platforms,
-/// and fails on other platforms if the bytes can't be parsed as UTF-8.
-#[cfg_attr(unix, expect(clippy::unnecessary_wraps))]
-pub fn os_str_from_bytes(bytes: &[u8]) -> error::UResult<Cow<'_, OsStr>> {
-    #[cfg(unix)]
-    return Ok(Cow::Borrowed(OsStr::from_bytes(bytes)));
-
-    #[cfg(not(unix))]
-    Ok(Cow::Owned(OsString::from(str::from_utf8(bytes).map_err(
-        |_| error::UUsageError::new(1, "Unable to transform bytes into OsStr"),
-    )?)))
-}
-
-/// Converts a `Vec<u8>` into an `OsString`, parsing as UTF-8 on non-unix platforms.
-///
-/// This always succeeds on unix platforms,
-/// and fails on other platforms if the bytes can't be parsed as UTF-8.
-#[cfg_attr(unix, expect(clippy::unnecessary_wraps))]
-pub fn os_string_from_vec(vec: Vec<u8>) -> error::UResult<OsString> {
-    #[cfg(unix)]
-    return Ok(OsString::from_vec(vec));
-
-    #[cfg(not(unix))]
-    Ok(OsString::from(String::from_utf8(vec).map_err(|_| {
-        error::UUsageError::new(1, "invalid UTF-8 was detected in one or more arguments")
-    })?))
-}
-
-/// Converts an `OsString` into a `Vec<u8>`, parsing as UTF-8 on non-unix platforms.
-///
-/// This always succeeds on unix platforms,
-/// and fails on other platforms if the bytes can't be parsed as UTF-8.
-#[cfg_attr(unix, expect(clippy::unnecessary_wraps))]
-pub fn os_string_to_vec(s: OsString) -> error::UResult<Vec<u8>> {
-    #[cfg(unix)]
-    let v = s.into_vec();
-    #[cfg(not(unix))]
-    let v = s
-        .into_string()
-        .map_err(|_| {
-            error::UUsageError::new(1, "invalid UTF-8 was detected in one or more arguments")
-        })?
-        .into();
-
-    Ok(v)
-}
-
-/// Equivalent to `std::BufRead::lines` which outputs each line as a `Vec<u8>`,
-/// which avoids panicking on non UTF-8 input.
-pub fn read_byte_lines<R: std::io::Read>(
-    mut buf_reader: BufReader<R>,
-) -> impl Iterator<Item = std::io::Result<Vec<u8>>> {
-    iter::from_fn(move || {
-        let mut buf = Vec::with_capacity(256);
-
-        match buf_reader.read_until(b'\n', &mut buf) {
-            Ok(0) => None,
-            Err(e) => Some(Err(e)),
-            Ok(_) => {
-                // Trim (\r)\n
-                if buf.ends_with(b"\n") {
-                    buf.pop();
-                    if buf.ends_with(b"\r") {
-                        buf.pop();
-                    }
-                }
-
-                Some(Ok(buf))
-            }
-        }
-    })
-}
-
-/// Equivalent to `std::BufRead::lines` which outputs each line as an `OsString`
-/// This won't panic on non UTF-8 characters on Unix,
-/// but it still will on Windows.
-pub fn read_os_string_lines<R: std::io::Read>(
-    buf_reader: BufReader<R>,
-) -> impl Iterator<Item = std::io::Result<OsString>> {
-    read_byte_lines(buf_reader)
-        .map(|byte_line_res| byte_line_res.map(|bl| os_string_from_vec(bl).expect("UTF-8 error")))
-}
-
-/// Prompt the user with a formatted string and returns `true` if they reply `'y'` or `'Y'`
-///
-/// This macro functions accepts the same syntax as `format!`. The prompt is written to
-/// `stderr`. A space is also printed at the end for nice spacing between the prompt and
-/// the user input. Any input starting with `'y'` or `'Y'` is interpreted as `yes`.
-///
-/// # Examples
-/// ```
-/// use uucore::prompt_yes;
-/// let file = "foo.rs";
-/// prompt_yes!("Do you want to delete '{file}'?");
-/// ```
-/// will print something like below to `stderr` (with `util_name` substituted by the actual
-/// util name) and will wait for user input.
-/// ```txt
-/// util_name: Do you want to delete 'foo.rs'?
-/// ```
-#[macro_export]
-macro_rules! prompt_yes(
-    ($($args:tt)+) => ({
-        use std::io::Write;
-        eprint!("{}: ", uucore::util_name());
-        eprint!($($args)+);
-        eprint!(" ");
-        let res = std::io::stderr().flush().map_err(|err| {
-            $crate::error::USimpleError::new(1, err.to_string())
-        });
-        uucore::show_if_err!(res);
-        uucore::read_yes()
-    })
-);
-
-/// Represent either a character or a byte.
-/// Used to iterate on partially valid UTF-8 data
-#[derive(Debug, Clone, Copy, PartialEq, Eq)]
-pub enum CharByte {
-    Char(char),
-    Byte(u8),
-}
-
-impl From<char> for CharByte {
-    fn from(value: char) -> Self {
-        Self::Char(value)
-    }
-}
-
-impl From<u8> for CharByte {
-    fn from(value: u8) -> Self {
-        Self::Byte(value)
-    }
-}
-
-impl From<&u8> for CharByte {
-    fn from(value: &u8) -> Self {
-        Self::Byte(*value)
-    }
-}
-
-struct Utf8ChunkIterator<'a> {
-    iter: Box<dyn Iterator<Item = CharByte> + 'a>,
-}
-
-impl Iterator for Utf8ChunkIterator<'_> {
-    type Item = CharByte;
-
-    fn next(&mut self) -> Option<Self::Item> {
-        self.iter.next()
-    }
-}
-
-impl<'a> From<Utf8Chunk<'a>> for Utf8ChunkIterator<'a> {
-    fn from(chk: Utf8Chunk<'a>) -> Self {
-        Self {
-            iter: Box::new(
-                chk.valid()
-                    .chars()
-                    .map(CharByte::from)
-                    .chain(chk.invalid().iter().map(CharByte::from)),
-            ),
-        }
-    }
-}
-
-/// Iterates on the valid and invalid parts of a byte sequence with regard to
-/// the UTF-8 encoding.
-pub struct CharByteIterator<'a> {
-    iter: Box<dyn Iterator<Item = CharByte> + 'a>,
-}
-
-impl<'a> CharByteIterator<'a> {
-    /// Make a `CharByteIterator` from a byte slice.
-    /// [`CharByteIterator`]
-    pub fn new(input: &'a [u8]) -> Self {
-        Self {
-            iter: Box::new(input.utf8_chunks().flat_map(Utf8ChunkIterator::from)),
-        }
-    }
-}
-
-impl Iterator for CharByteIterator<'_> {
-    type Item = CharByte;
-
-    fn next(&mut self) -> Option<Self::Item> {
-        self.iter.next()
-    }
-}
-
-pub trait IntoCharByteIterator<'a> {
-    fn iter_char_bytes(self) -> CharByteIterator<'a>;
-}
-
-impl<'a> IntoCharByteIterator<'a> for &'a [u8] {
-    fn iter_char_bytes(self) -> CharByteIterator<'a> {
-        CharByteIterator::new(self)
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::ffi::OsStr;
-
-    fn make_os_vec(os_str: &OsStr) -> Vec<OsString> {
-        vec![
-            OsString::from("test"),
-            OsString::from("สวัสดี"), // spell-checker:disable-line
-            os_str.to_os_string(),
-        ]
-    }
-
-    #[cfg(any(unix, target_os = "redox"))]
-    fn test_invalid_utf8_args_lossy(os_str: &OsStr) {
-        // assert our string is invalid utf8
-        assert!(os_str.to_os_string().into_string().is_err());
-        let test_vec = make_os_vec(os_str);
-        let collected_to_str = test_vec.clone().into_iter().collect_lossy();
-        // conservation of length - when accepting lossy conversion no arguments may be dropped
-        assert_eq!(collected_to_str.len(), test_vec.len());
-        // first indices identical
-        for index in 0..2 {
-            assert_eq!(collected_to_str[index], test_vec[index].to_str().unwrap());
-        }
-        // lossy conversion for string with illegal encoding is done
-        assert_eq!(
-            *collected_to_str[2],
-            os_str.to_os_string().to_string_lossy()
-        );
-    }
-
-    #[cfg(any(unix, target_os = "redox"))]
-    fn test_invalid_utf8_args_ignore(os_str: &OsStr) {
-        // assert our string is invalid utf8
-        assert!(os_str.to_os_string().into_string().is_err());
-        let test_vec = make_os_vec(os_str);
-        let collected_to_str = test_vec.clone().into_iter().collect_ignore();
-        // assert that the broken entry is filtered out
-        assert_eq!(collected_to_str.len(), test_vec.len() - 1);
-        // assert that the unbroken indices are converted as expected
-        for index in 0..2 {
-            assert_eq!(
-                collected_to_str.get(index).unwrap(),
-                test_vec.get(index).unwrap().to_str().unwrap()
-            );
-        }
-    }
-
-    #[test]
-    fn valid_utf8_encoding_args() {
-        // create a vector containing only correct encoding
-        let test_vec = make_os_vec(&OsString::from("test2"));
-        // expect complete conversion without losses, even when lossy conversion is accepted
-        let _ = test_vec.into_iter().collect_lossy();
-    }
-
-    #[cfg(any(unix, target_os = "redox"))]
-    #[test]
-    fn invalid_utf8_args_unix() {
-        use std::os::unix::ffi::OsStrExt;
-
-        let source = [0x66, 0x6f, 0x80, 0x6f];
-        let os_str = OsStr::from_bytes(&source[..]);
-        test_invalid_utf8_args_lossy(os_str);
-        test_invalid_utf8_args_ignore(os_str);
-    }
-
-    #[test]
-    fn test_format_usage() {
-        assert_eq!(format_usage("expr EXPRESSION"), "expr EXPRESSION");
-        assert_eq!(
-            format_usage("expr EXPRESSION\nexpr OPTION"),
-            "expr EXPRESSION\n       expr OPTION"
-        );
-    }
-
-    #[test]
-    fn canonical_util_name_handles_aliases_and_unprefixed_input() {
-        assert_eq!(get_canonical_util_name("uu_["), "test");
-        assert_eq!(get_canonical_util_name("uu_dir"), "ls");
-        assert_eq!(get_canonical_util_name("uu_vdir"), "ls");
-        assert_eq!(get_canonical_util_name("uu_cat"), "cat");
-        assert_eq!(get_canonical_util_name("cat"), "cat");
-        assert_eq!(get_canonical_util_name(""), "");
-        assert_eq!(get_canonical_util_name("é"), "é");
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/macros.rs b/registry/native/stubs/uucore/src/lib/macros.rs
deleted file mode 100644
index bd234768e..000000000
--- a/registry/native/stubs/uucore/src/lib/macros.rs
+++ /dev/null
@@ -1,196 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Macros for the uucore utilities.
-//!
-//! This module bundles all macros used across the uucore utilities. These
-//! include macros for reporting errors in various formats, aborting program
-//! execution and more.
-//!
-//! To make use of all macros in this module, they must be imported like so:
-//!
-//! ```ignore
-//! #[macro_use]
-//! extern crate uucore;
-//! ```
-//!
-//! Alternatively, you can import single macros by importing them through their
-//! fully qualified name like this:
-//!
-//! ```no_run
-//! use uucore::show;
-//! ```
-//!
-//! Here's an overview of the macros sorted by purpose
-//!
-//! - Print errors
-//!   - From types implementing [`crate::error::UError`]: [`crate::show!`],
-//!     [`crate::show_if_err!`]
-//!   - From custom messages: [`crate::show_error!`]
-//! - Print warnings: [`crate::show_warning!`]
-
-// spell-checker:ignore sourcepath targetpath rustdoc
-
-use std::sync::atomic::AtomicBool;
-
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-/// Whether we were called as a multicall binary (`coreutils <utility>`)
-pub static UTILITY_IS_SECOND_ARG: AtomicBool = AtomicBool::new(false);
-
-//====
-
-/// Display a [`crate::error::UError`] and set global exit code.
-///
-/// Prints the error message contained in an [`crate::error::UError`] to stderr
-/// and sets the exit code through [`crate::error::set_exit_code`]. The printed
-/// error message is prepended with the calling utility's name. A call to this
-/// macro will not finish program execution.
-///
-/// # Examples
-///
-/// The following example would print a message "Some error occurred" and set
-/// the utility's exit code to 2.
-///
-/// ```
-/// # #[macro_use]
-/// # extern crate uucore;
-///
-/// use uucore::error::{self, USimpleError};
-///
-/// fn main() {
-///     let err = USimpleError::new(2, "Some error occurred.");
-///     show!(err);
-///     assert_eq!(error::get_exit_code(), 2);
-/// }
-/// ```
-///
-/// If not using [`crate::error::UError`], one may achieve the same behavior
-/// like this:
-///
-/// ```
-/// # #[macro_use]
-/// # extern crate uucore;
-///
-/// use uucore::error::set_exit_code;
-///
-/// fn main() {
-///     set_exit_code(2);
-///     show_error!("Some error occurred.");
-/// }
-/// ```
-#[macro_export]
-macro_rules! show(
-    ($err:expr) => ({
-        #[allow(unused_imports)]
-        use $crate::error::UError;
-        let e = $err;
-        $crate::error::set_exit_code(e.code());
-        use std::io::Write as _;
-        let _ = writeln!(std::io::stderr().lock(), "{}: {e}", $crate::util_name());
-    })
-);
-
-/// Display an error and set global exit code in error case.
-///
-/// Wraps around [`crate::show!`] and takes a [`crate::error::UResult`] instead of a
-/// [`crate::error::UError`] type. This macro invokes [`crate::show!`] if the
-/// [`crate::error::UResult`] is an `Err`-variant. This can be invoked directly
-/// on the result of a function call, like in the `install` utility:
-///
-/// ```ignore
-/// show_if_err!(copy(sourcepath, &targetpath, b));
-/// ```
-///
-/// # Examples
-///
-/// ```ignore
-/// # #[macro_use]
-/// # extern crate uucore;
-/// # use uucore::error::{UError, UIoError, UResult, USimpleError};
-///
-/// # fn main() {
-/// let is_ok = Ok(1);
-/// // This does nothing at all
-/// show_if_err!(is_ok);
-///
-/// let is_err = Err(USimpleError::new(1, "I'm an error").into());
-/// // Calls `show!` on the contained USimpleError
-/// show_if_err!(is_err);
-/// # }
-/// ```
-///
-///
-#[macro_export]
-macro_rules! show_if_err(
-    ($res:expr) => ({
-        if let Err(e) = $res {
-            $crate::show!(e);
-        }
-    })
-);
-
-/// Show an error to stderr in a similar style to GNU coreutils.
-///
-/// Takes a [`format!`]-like input and prints it to stderr. The output is
-/// prepended with the current utility's name.
-///
-/// # Examples
-///
-/// ```
-/// # #[macro_use]
-/// # extern crate uucore;
-/// # fn main() {
-/// show_error!("Couldn't apply {} to {}", "foo", "bar");
-/// # }
-/// ```
-#[macro_export]
-macro_rules! show_error(
-    ($($args:tt)+) => ({
-		use std::io::Write as _;
-		let mut error = std::io::stderr().lock();
-        let _ = write!(error, "{}: ", $crate::util_name());
-        let _ = writeln!(error, $($args)+);
-    })
-);
-
-/// Print a warning message to stderr.
-///
-/// Takes [`format!`]-compatible input and prepends it with the current
-/// utility's name and "warning: " before printing to stderr.
-///
-/// # Examples
-///
-/// ```
-/// # #[macro_use]
-/// # extern crate uucore;
-/// # fn main() {
-/// // outputs <name>: warning: Couldn't apply foo to bar
-/// show_warning!("Couldn't apply {} to {}", "foo", "bar");
-/// # }
-/// ```
-#[macro_export]
-macro_rules! show_warning(
-    ($($args:tt)+) => ({
-		use std::io::Write as _;
-		let mut error = std::io::stderr().lock();
-        let _ = write!(error, "{}: warning: ", $crate::util_name());
-        let _ = writeln!(error, $($args)+);
-    })
-);
-
-/// Print a warning message to stderr, prepending the utility name.
-#[macro_export]
-macro_rules! show_warning_caps(
-    ($($args:tt)+) => ({
-		use std::io::Write as _;
-		let mut error = std::io::stderr().lock();
-        let _ = write!(error, "{}: WARNING: ", $crate::util_name());
-        let _ = writeln!(error, $($args)+);
-    })
-);
diff --git a/registry/native/stubs/uucore/src/lib/mods.rs b/registry/native/stubs/uucore/src/lib/mods.rs
deleted file mode 100644
index e33bf0319..000000000
--- a/registry/native/stubs/uucore/src/lib/mods.rs
+++ /dev/null
@@ -1,16 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// mods ~ cross-platforms modules (core/bundler file)
-
-pub mod clap_localization;
-pub mod display;
-pub mod error;
-#[cfg(feature = "fs")]
-pub mod io;
-pub mod line_ending;
-pub mod locale;
-pub mod os;
-pub mod panic;
-pub mod posix;
diff --git a/registry/native/stubs/uucore/src/lib/mods/clap_localization.rs b/registry/native/stubs/uucore/src/lib/mods/clap_localization.rs
deleted file mode 100644
index 65acf84dc..000000000
--- a/registry/native/stubs/uucore/src/lib/mods/clap_localization.rs
+++ /dev/null
@@ -1,708 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// spell-checker:ignore (path) osrelease myutil
-
-//! Helper clap functions to localize error handling and options
-//!
-//! This module provides utilities for handling clap errors with localization support.
-//! It uses clap's error context API to extract structured information from errors
-//! instead of parsing error strings, providing a more robust solution.
-//!
-
-use crate::error::{UResult, USimpleError};
-use crate::locale::translate;
-
-use clap::error::{ContextKind, ErrorKind};
-use clap::{ArgMatches, Command, Error};
-
-use std::error::Error as StdError;
-use std::ffi::OsString;
-
-use std::io::Write as _;
-use std::io::stderr;
-
-/// Color enum for consistent styling
-#[derive(Debug, Clone, Copy)]
-pub enum Color {
-    Red,
-    Yellow,
-    Green,
-}
-
-impl Color {
-    fn code(self) -> &'static str {
-        match self {
-            Self::Red => "31",
-            Self::Yellow => "33",
-            Self::Green => "32",
-        }
-    }
-}
-
-/// Determine color choice based on environment variables
-fn get_color_choice() -> clap::ColorChoice {
-    if std::env::var("NO_COLOR").is_ok() {
-        clap::ColorChoice::Never
-    } else if std::env::var("CLICOLOR_FORCE").is_ok() || std::env::var("FORCE_COLOR").is_ok() {
-        clap::ColorChoice::Always
-    } else {
-        clap::ColorChoice::Auto
-    }
-}
-
-/// Generic helper to check if colors should be enabled for a given stream
-fn should_use_color_for_stream<S: std::io::IsTerminal>(stream: &S) -> bool {
-    match get_color_choice() {
-        clap::ColorChoice::Always => true,
-        clap::ColorChoice::Never => false,
-        clap::ColorChoice::Auto => {
-            stream.is_terminal() && std::env::var("TERM").unwrap_or_default() != "dumb"
-        }
-    }
-}
-
-/// Manages color output based on environment settings
-struct ColorManager(bool);
-
-impl ColorManager {
-    /// Create a new ColorManager based on environment variables
-    fn from_env() -> Self {
-        Self(should_use_color_for_stream(&stderr()))
-    }
-
-    /// Apply color to text if colors are enabled
-    fn colorize(&self, text: &str, color: Color) -> String {
-        if self.0 {
-            format!("\x1b[{}m{text}\x1b[0m", color.code())
-        } else {
-            text.to_string()
-        }
-    }
-}
-
-/// Unified error formatter that handles all error types consistently
-pub struct ErrorFormatter<'a> {
-    color_mgr: ColorManager,
-    util_name: &'a str,
-}
-
-impl<'a> ErrorFormatter<'a> {
-    pub fn new(util_name: &'a str) -> Self {
-        Self {
-            color_mgr: ColorManager::from_env(),
-            util_name,
-        }
-    }
-
-    /// Print error and exit with the specified code
-    fn print_error_and_exit(&self, err: &Error, exit_code: i32) -> ! {
-        self.print_error_and_exit_with_callback(err, exit_code, || {})
-    }
-
-    /// Print error with optional callback before exit
-    pub fn print_error_and_exit_with_callback<F>(
-        &self,
-        err: &Error,
-        exit_code: i32,
-        callback: F,
-    ) -> !
-    where
-        F: FnOnce(),
-    {
-        let code = self.print_error(err, exit_code);
-        callback();
-        std::process::exit(code);
-    }
-
-    /// Print error and return exit code (no exit call)
-    pub fn print_error(&self, err: &Error, exit_code: i32) -> i32 {
-        match err.kind() {
-            ErrorKind::DisplayHelp | ErrorKind::DisplayVersion => self.handle_display_errors(err),
-            ErrorKind::UnknownArgument => self.handle_unknown_argument(err, exit_code),
-            ErrorKind::InvalidValue | ErrorKind::ValueValidation => {
-                self.handle_invalid_value(err, exit_code)
-            }
-            ErrorKind::MissingRequiredArgument => self.handle_missing_required(err, exit_code),
-            ErrorKind::TooFewValues | ErrorKind::TooManyValues | ErrorKind::WrongNumberOfValues => {
-                // These need full clap formatting
-                let _ = write!(stderr(), "{}", err.render());
-                exit_code
-            }
-            _ => self.handle_generic_error(err, exit_code),
-        }
-    }
-
-    /// Handle help and version display
-    fn handle_display_errors(&self, err: &Error) -> i32 {
-        print!("{}", err.render());
-        0
-    }
-
-    /// Handle unknown argument errors
-    fn handle_unknown_argument(&self, err: &Error, exit_code: i32) -> i32 {
-        if let Some(invalid_arg) = err.get(ContextKind::InvalidArg) {
-            let arg_str = invalid_arg.to_string();
-            let error_word = translate!("common-error");
-
-            // Print main error
-            let _ = write!(
-                stderr(),
-                "{}\n\n",
-                translate!(
-                    "clap-error-unexpected-argument",
-                    "arg" => self.color_mgr.colorize(&arg_str, Color::Yellow),
-                    "error_word" => self.color_mgr.colorize(&error_word, Color::Red)
-                )
-            );
-
-            // Show suggestion if available
-            if let Some(suggested_arg) = err.get(ContextKind::SuggestedArg) {
-                let tip_word = translate!("common-tip");
-                let _ = write!(
-                    stderr(),
-                    "{}\n\n",
-                    translate!(
-                        "clap-error-similar-argument",
-                        "tip_word" => self.color_mgr.colorize(&tip_word, Color::Green),
-                        "suggestion" => self.color_mgr.colorize(&suggested_arg.to_string(), Color::Green)
-                    )
-                );
-            } else {
-                // Look for other tips from clap
-                self.print_clap_tips(err);
-            }
-
-            self.print_usage_and_help();
-        } else {
-            self.print_simple_error_msg(&translate!("clap-error-unexpected-argument-simple"));
-        }
-        exit_code
-    }
-
-    /// Handle invalid value errors
-    fn handle_invalid_value(&self, err: &Error, exit_code: i32) -> i32 {
-        let invalid_arg = err.get(ContextKind::InvalidArg);
-        let invalid_value = err.get(ContextKind::InvalidValue);
-
-        if let (Some(arg), Some(value)) = (invalid_arg, invalid_value) {
-            let option = arg.to_string();
-            let value = value.to_string();
-
-            if value.is_empty() {
-                // Value required but not provided
-                let error_word = translate!("common-error");
-                let _ = writeln!(
-                    stderr(),
-                    "{}",
-                    translate!("clap-error-value-required",
-                        "error_word" => self.color_mgr.colorize(&error_word, Color::Red),
-                        "option" => self.color_mgr.colorize(&option, Color::Green))
-                );
-            } else {
-                // Invalid value provided
-                let error_word = translate!("common-error");
-                let error_msg = translate!(
-                    "clap-error-invalid-value",
-                    "error_word" => self.color_mgr.colorize(&error_word, Color::Red),
-                    "value" => self.color_mgr.colorize(&value, Color::Yellow),
-                    "option" => self.color_mgr.colorize(&option, Color::Green)
-                );
-                // Include validation error if present
-                match err.source() {
-                    Some(source) if matches!(err.kind(), ErrorKind::ValueValidation) => {
-                        let _ = writeln!(stderr(), "{error_msg}: {source}");
-                    }
-                    _ => eprintln!("{error_msg}"),
-                }
-            }
-
-            // Show possible values for InvalidValue errors
-            if matches!(err.kind(), ErrorKind::InvalidValue) {
-                if let Some(valid_values) = err.get(ContextKind::ValidValue) {
-                    if !valid_values.to_string().is_empty() {
-                        let _ = writeln!(
-                            stderr(),
-                            "\n  [{}: {valid_values}]",
-                            translate!("clap-error-possible-values")
-                        );
-                    }
-                }
-            }
-            let _ = writeln!(stderr(), "\n{}", translate!("common-help-suggestion"));
-        } else {
-            self.print_simple_error_msg(&err.render().to_string());
-        }
-
-        // InvalidValue errors traditionally use exit code 1 for backward compatibility
-        // But if a utility explicitly requests a high exit code (>= 125), respect it
-        // This allows utilities like runcon (125) to override the default while preserving
-        // the standard behavior for utilities using normal error codes (1, 2, etc.)
-        if matches!(err.kind(), ErrorKind::InvalidValue) && exit_code < 125 {
-            1 // Force exit code 1 for InvalidValue unless using special exit codes
-        } else {
-            exit_code // Respect the requested exit code for special cases
-        }
-    }
-
-    /// Handle missing required argument errors
-    fn handle_missing_required(&self, err: &Error, exit_code: i32) -> i32 {
-        let rendered_str = err.render().to_string();
-        let lines: Vec<&str> = rendered_str.lines().collect();
-
-        match lines.first() {
-            Some(first_line)
-                if first_line
-                    .starts_with("error: the following required arguments were not provided:") =>
-            {
-                let error_word = translate!("common-error");
-                let _ = writeln!(
-                    stderr(),
-                    "{}",
-                    translate!(
-                        "clap-error-missing-required-arguments",
-                        "error_word" => self.color_mgr.colorize(&error_word, Color::Red)
-                    )
-                );
-
-                // Print the missing arguments
-                for line in lines.iter().skip(1) {
-                    if line.starts_with("  ") {
-                        let _ = writeln!(stderr(), "{line}");
-                    } else if line.starts_with("Usage:") || line.starts_with("For more information")
-                    {
-                        break;
-                    }
-                }
-                let _ = writeln!(stderr());
-
-                // Print usage
-                lines
-                    .iter()
-                    .skip_while(|line| !line.starts_with("Usage:"))
-                    .for_each(|line| {
-                        if line.starts_with("For more information, try '--help'.") {
-                            let _ = writeln!(stderr(), "{}", translate!("common-help-suggestion"));
-                        } else {
-                            let _ = writeln!(stderr(), "{line}");
-                        }
-                    });
-            }
-            _ => eprint!("{}", err.render()),
-        }
-        exit_code
-    }
-
-    /// Handle generic errors
-    fn handle_generic_error(&self, err: &Error, exit_code: i32) -> i32 {
-        let rendered_str = err.render().to_string();
-        if let Some(main_error_line) = rendered_str.lines().next() {
-            self.print_localized_error_line(main_error_line);
-            let _ = writeln!(stderr(), "\n{}", translate!("common-help-suggestion"));
-        } else {
-            let _ = write!(stderr(), "{}", err.render());
-        }
-        exit_code
-    }
-
-    /// Print a simple error message (no exit)
-    fn print_simple_error_msg(&self, message: &str) {
-        let error_word = translate!("common-error");
-        let _ = writeln!(
-            stderr(),
-            "{}: {message}",
-            self.color_mgr.colorize(&error_word, Color::Red)
-        );
-    }
-
-    /// Print error line with localized "error:" prefix
-    fn print_localized_error_line(&self, line: &str) {
-        let error_word = translate!("common-error");
-        let colored_error = self.color_mgr.colorize(&error_word, Color::Red);
-
-        if let Some(colon_pos) = line.find(':') {
-            let after_colon = &line[colon_pos..];
-            let _ = writeln!(stderr(), "{colored_error}{after_colon}");
-        } else {
-            let _ = writeln!(stderr(), "{line}");
-        }
-    }
-
-    /// Extract and print clap's built-in tips
-    fn print_clap_tips(&self, err: &Error) {
-        let rendered_str = err.render().to_string();
-        for line in rendered_str.lines() {
-            let trimmed = line.trim_start();
-            if trimmed.starts_with("tip:") && !line.contains("similar argument") {
-                let tip_word = translate!("common-tip");
-                if let Some(colon_pos) = trimmed.find(':') {
-                    let after_colon = &trimmed[colon_pos..];
-                    let _ = writeln!(
-                        stderr(),
-                        "  {}{after_colon}",
-                        self.color_mgr.colorize(&tip_word, Color::Green)
-                    );
-                } else {
-                    let _ = writeln!(stderr(), "{line}");
-                }
-                let _ = writeln!(stderr());
-            }
-        }
-    }
-
-    /// Print usage information and help suggestion
-    fn print_usage_and_help(&self) {
-        let usage_key = format!("{}-usage", self.util_name);
-        let usage_text = translate!(&usage_key);
-        let formatted_usage = crate::format_usage(&usage_text);
-        let usage_label = translate!("common-usage");
-        let _ = writeln!(
-            stderr(),
-            "{usage_label}: {formatted_usage}\n\n{}",
-            translate!("common-help-suggestion")
-        );
-    }
-}
-
-/// Handles clap command parsing results with proper localization support.
-///
-/// This is the main entry point for processing command-line arguments with localized error messages.
-/// It parses the provided arguments and returns either the parsed matches or handles errors with
-/// localized messages.
-///
-/// # Arguments
-///
-/// * `cmd` - The clap `Command` to parse arguments against
-/// * `itr` - An iterator of command-line arguments to parse
-///
-/// # Returns
-///
-/// * `Ok(ArgMatches)` - Successfully parsed command-line arguments
-/// * `Err` - For help/version display (preserves original styling)
-///
-/// # Examples
-///
-/// ```no_run
-/// use clap::Command;
-/// use uucore::clap_localization::handle_clap_result;
-///
-/// let cmd = Command::new("myutil");
-/// let args = vec!["myutil", "--help"];
-/// let result = handle_clap_result(cmd, args);
-/// ```
-pub fn handle_clap_result<I, T>(cmd: Command, itr: I) -> UResult<ArgMatches>
-where
-    I: IntoIterator<Item = T>,
-    T: Into<OsString> + Clone,
-{
-    handle_clap_result_with_exit_code(cmd, itr, 1)
-}
-
-/// Handles clap command parsing with a custom exit code for errors.
-///
-/// Similar to `handle_clap_result` but allows specifying a custom exit code
-/// for error conditions. This is useful for utilities that need specific
-/// exit codes for different error types.
-///
-/// # Arguments
-///
-/// * `cmd` - The clap `Command` to parse arguments against
-/// * `itr` - An iterator of command-line arguments to parse
-/// * `exit_code` - The exit code to use when exiting due to an error
-///
-/// # Returns
-///
-/// * `Ok(ArgMatches)` - Successfully parsed command-line arguments
-/// * `Err` - For help/version display (preserves original styling)
-///
-/// # Exit Behavior
-///
-/// This function will call `std::process::exit()` with the specified exit code
-/// when encountering parsing errors (except help/version which use exit code 0).
-///
-/// # Examples
-///
-/// ```no_run
-/// use clap::Command;
-/// use uucore::clap_localization::handle_clap_result_with_exit_code;
-///
-/// let cmd = Command::new("myutil");
-/// let args = vec!["myutil", "--invalid"];
-/// let result = handle_clap_result_with_exit_code(cmd, args, 125);
-/// ```
-pub fn handle_clap_result_with_exit_code<I, T>(
-    cmd: Command,
-    itr: I,
-    exit_code: i32,
-) -> UResult<ArgMatches>
-where
-    I: IntoIterator<Item = T>,
-    T: Into<OsString> + Clone,
-{
-    cmd.try_get_matches_from(itr).map_err(|e| {
-        if e.exit_code() == 0 {
-            e.into() // Preserve help/version
-        } else {
-            let formatter = ErrorFormatter::new(crate::util_name());
-            let code = formatter.print_error(&e, exit_code);
-            USimpleError::new(code, "")
-        }
-    })
-}
-
-/// Handles a clap error directly with a custom exit code.
-///
-/// This function processes a clap error and exits the program with the specified
-/// exit code. It formats error messages with proper localization and color support
-/// based on environment variables.
-///
-/// # Arguments
-///
-/// * `err` - The clap `Error` to handle
-/// * `exit_code` - The exit code to use when exiting
-///
-/// # Panics
-///
-/// This function never returns - it always calls `std::process::exit()`.
-///
-/// # Examples
-///
-/// ```no_run
-/// use clap::Command;
-/// use uucore::clap_localization::handle_clap_error_with_exit_code;
-///
-/// let cmd = Command::new("myutil");
-/// match cmd.try_get_matches() {
-///     Ok(matches) => { /* handle matches */ },
-///     Err(e) => handle_clap_error_with_exit_code(e, 1),
-/// }
-/// ```
-pub fn handle_clap_error_with_exit_code(err: Error, exit_code: i32) -> ! {
-    let formatter = ErrorFormatter::new(crate::util_name());
-    formatter.print_error_and_exit(&err, exit_code);
-}
-
-/// Configures a clap `Command` with proper localization and color settings.
-///
-/// This function sets up a `Command` with:
-/// - Appropriate color settings based on environment variables (`NO_COLOR`, `CLICOLOR_FORCE`, etc.)
-/// - Localized help template with proper formatting
-/// - TTY detection for automatic color enabling/disabling
-///
-/// # Arguments
-///
-/// * `cmd` - The clap `Command` to configure
-///
-/// # Returns
-///
-/// The configured `Command` with localization and color settings applied.
-///
-/// # Environment Variables
-///
-/// The following environment variables affect color output:
-/// - `NO_COLOR` - Disables all color output
-/// - `CLICOLOR_FORCE` or `FORCE_COLOR` - Forces color output even when not in a TTY
-/// - `TERM` - If set to "dumb", colors are disabled in auto mode
-///
-/// # Examples
-///
-/// ```no_run
-/// use clap::Command;
-/// use uucore::clap_localization::configure_localized_command;
-///
-/// let cmd = Command::new("myutil")
-///     .arg(clap::Arg::new("input").short('i'));
-/// let configured_cmd = configure_localized_command(cmd);
-/// ```
-pub fn configure_localized_command(mut cmd: Command) -> Command {
-    let color_choice = get_color_choice();
-    cmd = cmd.color(color_choice);
-
-    // For help output (stdout), we check stdout TTY status
-    let colors_enabled = should_use_color_for_stream(&std::io::stdout());
-
-    cmd = cmd.help_template(crate::localized_help_template_with_colors(
-        crate::util_name(),
-        colors_enabled,
-    ));
-    cmd
-}
-
-/* spell-checker: disable */
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use clap::{Arg, Command};
-    use std::ffi::OsString;
-
-    #[test]
-    fn test_color_codes() {
-        assert_eq!(Color::Red.code(), "31");
-        assert_eq!(Color::Yellow.code(), "33");
-        assert_eq!(Color::Green.code(), "32");
-    }
-
-    #[test]
-    fn test_color_manager() {
-        let mgr = ColorManager(true);
-        let red_text = mgr.colorize("error", Color::Red);
-        assert_eq!(red_text, "\x1b[31merror\x1b[0m");
-
-        let mgr_disabled = ColorManager(false);
-        let plain_text = mgr_disabled.colorize("error", Color::Red);
-        assert_eq!(plain_text, "error");
-    }
-
-    fn create_test_command() -> Command {
-        Command::new("test")
-            .arg(
-                Arg::new("input")
-                    .short('i')
-                    .long("input")
-                    .value_name("FILE")
-                    .help("Input file"),
-            )
-            .arg(
-                Arg::new("output")
-                    .short('o')
-                    .long("output")
-                    .value_name("FILE")
-                    .help("Output file"),
-            )
-            .arg(
-                Arg::new("format")
-                    .long("format")
-                    .value_parser(["json", "xml", "csv"])
-                    .help("Output format"),
-            )
-    }
-
-    #[test]
-    fn test_handle_clap_result_with_valid_args() {
-        let cmd = create_test_command();
-        let result = handle_clap_result(cmd, vec!["test", "--input", "file.txt"]);
-        assert!(result.is_ok());
-        let matches = result.unwrap();
-        assert_eq!(matches.get_one::<String>("input").unwrap(), "file.txt");
-    }
-
-    #[test]
-    fn test_handle_clap_result_with_osstring() {
-        let args: Vec<OsString> = vec!["test".into(), "--output".into(), "out.txt".into()];
-        let cmd = create_test_command();
-        let result = handle_clap_result(cmd, args);
-        assert!(result.is_ok());
-        let matches = result.unwrap();
-        assert_eq!(matches.get_one::<String>("output").unwrap(), "out.txt");
-    }
-
-    #[test]
-    fn test_configure_localized_command() {
-        let cmd = Command::new("test");
-        let configured = configure_localized_command(cmd);
-        // The command should have color and help template configured
-        // We can't easily test the internal state, but we can verify it doesn't panic
-        assert_eq!(configured.get_name(), "test");
-    }
-
-    #[test]
-    fn test_color_environment_vars() {
-        use std::env;
-
-        // Test NO_COLOR disables colors
-        unsafe {
-            env::set_var("NO_COLOR", "1");
-        }
-        assert_eq!(get_color_choice(), clap::ColorChoice::Never);
-        assert!(!should_use_color_for_stream(&stderr()));
-        let mgr = ColorManager::from_env();
-        assert!(!mgr.0);
-        unsafe {
-            env::remove_var("NO_COLOR");
-        }
-
-        // Test CLICOLOR_FORCE enables colors
-        unsafe {
-            env::set_var("CLICOLOR_FORCE", "1");
-        }
-        assert_eq!(get_color_choice(), clap::ColorChoice::Always);
-        assert!(should_use_color_for_stream(&stderr()));
-        let mgr = ColorManager::from_env();
-        assert!(mgr.0);
-        unsafe {
-            env::remove_var("CLICOLOR_FORCE");
-        }
-
-        // Test FORCE_COLOR also enables colors
-        unsafe {
-            env::set_var("FORCE_COLOR", "1");
-        }
-        assert_eq!(get_color_choice(), clap::ColorChoice::Always);
-        assert!(should_use_color_for_stream(&stderr()));
-        unsafe {
-            env::remove_var("FORCE_COLOR");
-        }
-    }
-
-    #[test]
-    fn test_error_formatter_creation() {
-        let formatter = ErrorFormatter::new("test");
-        assert_eq!(formatter.util_name, "test");
-        // Color manager should be created based on environment
-    }
-
-    #[test]
-    fn test_localization_keys_exist() {
-        use crate::locale::{get_message, setup_localization};
-
-        let _ = setup_localization("test");
-
-        let required_keys = [
-            "common-error",
-            "common-usage",
-            "common-tip",
-            "common-help-suggestion",
-            "clap-error-unexpected-argument",
-            "clap-error-invalid-value",
-            "clap-error-missing-required-arguments",
-            "clap-error-similar-argument",
-            "clap-error-possible-values",
-            "clap-error-value-required",
-        ];
-
-        for key in &required_keys {
-            let message = get_message(key);
-            assert_ne!(message, *key, "Translation missing for key: {key}");
-        }
-    }
-
-    #[test]
-    fn test_french_localization() {
-        use crate::locale::{get_message, setup_localization};
-        use std::env;
-
-        let original_lang = env::var("LANG").unwrap_or_default();
-
-        unsafe {
-            env::set_var("LANG", "fr_FR.UTF-8");
-        }
-
-        // The standalone uucore stub keeps common locale fixtures in its own
-        // locales directory, not under a utility-specific test directory.
-        if setup_localization("locales").is_ok() {
-            assert_eq!(get_message("common-error"), "erreur");
-            assert_eq!(get_message("common-usage"), "Utilisation");
-            assert_eq!(get_message("common-tip"), "conseil");
-        }
-
-        unsafe {
-            if original_lang.is_empty() {
-                env::remove_var("LANG");
-            } else {
-                env::set_var("LANG", original_lang);
-            }
-        }
-    }
-}
-/* spell-checker: enable */
diff --git a/registry/native/stubs/uucore/src/lib/mods/display.rs b/registry/native/stubs/uucore/src/lib/mods/display.rs
deleted file mode 100644
index ee259ef59..000000000
--- a/registry/native/stubs/uucore/src/lib/mods/display.rs
+++ /dev/null
@@ -1,136 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-//! Utilities for printing paths, with special attention paid to special
-//! characters and invalid unicode.
-//!
-//! For displaying paths in informational messages use `Quotable::quote`. This
-//! will wrap quotes around the filename and add the necessary escapes to make
-//! it copy/paste-able into a shell.
-//!
-//! For writing raw paths to stdout when the output should not be quoted or escaped,
-//! use `println_verbatim`. This will preserve invalid unicode.
-//!
-//! # Examples
-//! ```rust
-//! use std::path::Path;
-//! use uucore::display::{Quotable, println_verbatim};
-//!
-//! let path = Path::new("foo/bar.baz");
-//!
-//! println!("Found file {}", path.quote()); // Prints "Found file 'foo/bar.baz'"
-//! println_verbatim(path)?; // Prints "foo/bar.baz"
-//! # Ok::<(), std::io::Error>(())
-//! ```
-
-use std::env;
-use std::ffi::OsStr;
-use std::fmt;
-use std::fs::File;
-use std::io::{self, BufWriter, Stdout, StdoutLock, Write as IoWrite};
-
-#[cfg(unix)]
-use std::os::unix::ffi::OsStrExt;
-#[cfg(target_os = "wasi")]
-use std::os::wasi::ffi::OsStrExt;
-
-// These used to be defined here, but they live in their own crate now.
-pub use os_display::{Quotable, Quoted};
-
-/// Print a path (or `OsStr`-like object) directly to stdout, with a trailing newline,
-/// without losing any information if its encoding is invalid.
-///
-/// This function is appropriate for commands where printing paths is the point and the
-/// output is likely to be captured, like `pwd` and `basename`. For informational output
-/// use `Quotable::quote`.
-///
-/// FIXME: Invalid Unicode will produce an error on Windows. That could be fixed by
-/// using low-level library calls and bypassing `io::Write`. This is not a big priority
-/// because broken filenames are much rarer on Windows than on Unix.
-pub fn println_verbatim<S: AsRef<OsStr>>(text: S) -> io::Result<()> {
-    let mut stdout = io::stdout().lock();
-    stdout.write_all_os(text.as_ref())?;
-    stdout.write_all(b"\n")?;
-    Ok(())
-}
-
-/// Like `println_verbatim`, without the trailing newline.
-pub fn print_verbatim<S: AsRef<OsStr>>(text: S) -> io::Result<()> {
-    io::stdout().write_all_os(text.as_ref())
-}
-
-/// [`io::Write`], but for OS strings.
-///
-/// On Unix this works straightforwardly.
-///
-/// On Windows this currently returns an error if the OS string is not valid Unicode.
-/// This may in the future change to allow those strings to be written to consoles.
-pub trait OsWrite: io::Write {
-    /// Write the entire OS string into this writer.
-    ///
-    /// # Errors
-    ///
-    /// An error is returned if the underlying I/O operation fails.
-    ///
-    /// On Windows, if the OS string is not valid Unicode, an error of kind
-    /// [`io::ErrorKind::InvalidData`] is returned.
-    fn write_all_os(&mut self, buf: &OsStr) -> io::Result<()> {
-        #[cfg(any(unix, target_os = "wasi"))]
-        {
-            self.write_all(buf.as_bytes())
-        }
-
-        #[cfg(not(any(unix, target_os = "wasi")))]
-        {
-            // It's possible to write a better OsWrite impl for Windows consoles (e.g. Stdout)
-            // as those are fundamentally 16-bit. If the OS string is invalid then it can be
-            // encoded to 16-bit and written using raw windows_sys calls. But this is quite involved
-            // (see `sys/pal/windows/stdio.rs` in the stdlib) and the value-add is small.
-            //
-            // There's no way to write invalid OS strings to Windows files, as those are 8-bit.
-
-            match buf.to_str() {
-                Some(text) => self.write_all(text.as_bytes()),
-                // We could output replacement characters instead, but the
-                // stdlib errors when sending invalid UTF-8 to the console,
-                // so let's follow that.
-                None => Err(io::Error::new(
-                    io::ErrorKind::InvalidData,
-                    "OS string cannot be converted to bytes",
-                )),
-            }
-        }
-    }
-}
-
-// We do not have a blanket impl for all Write because a smarter Windows impl should
-// be able to make use of AsRawHandle. Please keep this in mind when adding new impls.
-impl OsWrite for File {}
-impl OsWrite for Stdout {}
-impl OsWrite for StdoutLock<'_> {}
-// A future smarter Windows implementation can first flush the BufWriter before
-// doing a raw write.
-impl<W: OsWrite> OsWrite for BufWriter<W> {}
-
-impl OsWrite for Box<dyn OsWrite> {
-    fn write_all_os(&mut self, buf: &OsStr) -> io::Result<()> {
-        let this: &mut dyn OsWrite = self;
-        this.write_all_os(buf)
-    }
-}
-
-/// Print all environment variables in the format `name=value` with the specified line ending.
-///
-/// This function handles non-UTF-8 environment variable names and values correctly by using
-/// raw bytes on Unix systems.
-pub fn print_all_env_vars<T: fmt::Display>(line_ending: T) -> io::Result<()> {
-    let mut stdout = io::stdout().lock();
-    for (name, value) in env::vars_os() {
-        stdout.write_all_os(&name)?;
-        stdout.write_all(b"=")?;
-        stdout.write_all_os(&value)?;
-        write!(stdout, "{line_ending}")?;
-    }
-    Ok(())
-}
diff --git a/registry/native/stubs/uucore/src/lib/mods/error.rs b/registry/native/stubs/uucore/src/lib/mods/error.rs
deleted file mode 100644
index d2239d128..000000000
--- a/registry/native/stubs/uucore/src/lib/mods/error.rs
+++ /dev/null
@@ -1,804 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-//! All utils return exit with an exit code. Usually, the following scheme is used:
-//! * `0`: succeeded
-//! * `1`: minor problems
-//! * `2`: major problems
-//!
-//! This module provides types to reconcile these exit codes with idiomatic Rust error
-//! handling. This has a couple advantages over manually using [`std::process::exit`]:
-//! 1. It enables the use of `?`, `map_err`, `unwrap_or`, etc. in `uumain`.
-//! 1. It encourages the use of [`UResult`]/[`Result`] in functions in the utils.
-//! 1. The error messages are largely standardized across utils.
-//! 1. Standardized error messages can be created from external result types
-//!    (i.e. [`std::io::Result`] & `clap::ClapResult`).
-//! 1. [`set_exit_code`] takes away the burden of manually tracking exit codes for non-fatal errors.
-//!
-//! # Usage
-//! The signature of a typical util should be:
-//! ```ignore
-//! fn uumain(args: impl uucore::Args) -> UResult<()> {
-//!     ...
-//! }
-//! ```
-//! [`UResult`] is a simple wrapper around [`Result`] with a custom error trait: [`UError`]. The
-//! most important difference with types implementing [`std::error::Error`] is that [`UError`]s
-//! can specify the exit code of the program when they are returned from `uumain`:
-//! * When `Ok` is returned, the code set with [`set_exit_code`] is used as exit code. If
-//!   [`set_exit_code`] was not used, then `0` is used.
-//! * When `Err` is returned, the code corresponding with the error is used as exit code and the
-//!   error message is displayed.
-//!
-//! Additionally, the errors can be displayed manually with the [`crate::show`] and [`crate::show_if_err`] macros:
-//! ```ignore
-//! let res = Err(USimpleError::new(1, "Error!!"));
-//! show_if_err!(res);
-//! // or
-//! if let Err(e) = res {
-//!    show!(e);
-//! }
-//! ```
-//!
-//! **Note**: The [`crate::show`] and [`crate::show_if_err`] macros set the exit code of the program using
-//! [`set_exit_code`]. See the documentation on that function for more information.
-//!
-//! # Guidelines
-//! * Use error types from `uucore` where possible.
-//! * Add error types to `uucore` if an error appears in multiple utils.
-//! * Prefer proper custom error types over [`ExitCode`] and [`USimpleError`].
-//! * [`USimpleError`] may be used in small utils with simple error handling.
-//! * Using [`ExitCode`] is not recommended but can be useful for converting utils to use
-//!   [`UResult`].
-
-// spell-checker:ignore uioerror rustdoc
-
-use std::{
-    cell::Cell,
-    error::Error,
-    fmt::{Display, Formatter},
-    io::Write,
-    sync::atomic::{AtomicI32, Ordering},
-};
-
-static EXIT_CODE: AtomicI32 = AtomicI32::new(0);
-
-/// Get the last exit code set with [`set_exit_code`].
-/// The default value is `0`.
-pub fn get_exit_code() -> i32 {
-    EXIT_CODE.load(Ordering::SeqCst)
-}
-
-/// Set the exit code for the program if `uumain` returns `Ok(())`.
-///
-/// This function is most useful for non-fatal errors, for example when applying an operation to
-/// multiple files:
-/// ```ignore
-/// use uucore::error::{UResult, set_exit_code};
-///
-/// fn uumain(args: impl uucore::Args) -> UResult<()> {
-///     ...
-///     for file in files {
-///         let res = some_operation_that_might_fail(file);
-///         match res {
-///             Ok() => {},
-///             Err(_) => set_exit_code(1),
-///         }
-///     }
-///     Ok(()) // If any of the operations failed, 1 is returned.
-/// }
-/// ```
-pub fn set_exit_code(code: i32) {
-    EXIT_CODE.store(code, Ordering::SeqCst);
-}
-
-/// Result type that should be returned by all utils.
-pub type UResult<T> = Result<T, Box<dyn UError>>;
-
-/// Custom errors defined by the utils and `uucore`.
-///
-/// All errors should implement [`std::error::Error`], [`std::fmt::Display`] and
-/// [`std::fmt::Debug`] and have an additional `code` method that specifies the
-/// exit code of the program if the error is returned from `uumain`.
-///
-/// An example of a custom error from `ls`:
-///
-/// ```
-/// use uucore::{
-///     display::Quotable,
-///     error::{UError, UResult}
-/// };
-/// use std::{
-///     error::Error,
-///     fmt::{Display, Debug},
-///     path::PathBuf
-/// };
-///
-/// #[derive(Debug)]
-/// enum LsError {
-///     InvalidLineWidth(String),
-///     NoMetadata(PathBuf),
-/// }
-///
-/// impl UError for LsError {
-///     fn code(&self) -> i32 {
-///         match self {
-///             LsError::InvalidLineWidth(_) => 2,
-///             LsError::NoMetadata(_) => 1,
-///         }
-///     }
-/// }
-///
-/// impl Error for LsError {}
-///
-/// impl Display for LsError {
-///     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-///         match self {
-///             LsError::InvalidLineWidth(s) => write!(f, "invalid line width: {}", s.quote()),
-///             LsError::NoMetadata(p) => write!(f, "could not open file: {}", p.quote()),
-///         }
-///     }
-/// }
-/// ```
-///
-/// The main routine would look like this:
-///
-/// ```ignore
-/// #[uucore::main]
-/// pub fn uumain(args: impl uucore::Args) -> UResult<()> {
-///     // Perform computations here ...
-///     return Err(LsError::InvalidLineWidth(String::from("test")).into())
-/// }
-/// ```
-///
-/// The call to `into()` is required to convert the `LsError` to
-/// [`Box<dyn UError>`]. The implementation for `From` is provided automatically.
-///
-/// A crate like [`quick_error`](https://crates.io/crates/quick-error) might
-/// also be used, but will still require an `impl` for the `code` method.
-pub trait UError: Error + Send {
-    /// Error code of a custom error.
-    ///
-    /// Set a return value for each variant of an enum-type to associate an
-    /// error code (which is returned to the system shell) with an error
-    /// variant.
-    ///
-    /// # Example
-    ///
-    /// ```
-    /// use uucore::{
-    ///     display::Quotable,
-    ///     error::UError
-    /// };
-    /// use std::{
-    ///     error::Error,
-    ///     fmt::{Display, Debug},
-    ///     path::PathBuf
-    /// };
-    ///
-    /// #[derive(Debug)]
-    /// enum MyError {
-    ///     Foo(String),
-    ///     Bar(PathBuf),
-    ///     Bing(),
-    /// }
-    ///
-    /// impl UError for MyError {
-    ///     fn code(&self) -> i32 {
-    ///         match self {
-    ///             MyError::Foo(_) => 2,
-    ///             // All other errors yield the same error code, there's no
-    ///             // need to list them explicitly.
-    ///             _ => 1,
-    ///         }
-    ///     }
-    /// }
-    ///
-    /// impl Error for MyError {}
-    ///
-    /// impl Display for MyError {
-    ///     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-    ///         use MyError as ME;
-    ///         match self {
-    ///             ME::Foo(s) => write!(f, "Unknown Foo: {}", s.quote()),
-    ///             ME::Bar(p) => write!(f, "Couldn't find Bar: {}", p.quote()),
-    ///             ME::Bing() => write!(f, "Exterminate!"),
-    ///         }
-    ///     }
-    /// }
-    /// ```
-    fn code(&self) -> i32 {
-        1
-    }
-
-    /// Print usage help to a custom error.
-    ///
-    /// Return true or false to control whether a short usage help is printed
-    /// below the error message. The usage help is in the format: "Try `{name}
-    /// --help` for more information." and printed only if `true` is returned.
-    ///
-    /// # Example
-    ///
-    /// ```
-    /// use uucore::{
-    ///     display::Quotable,
-    ///     error::UError
-    /// };
-    /// use std::{
-    ///     error::Error,
-    ///     fmt::{Display, Debug},
-    ///     path::PathBuf
-    /// };
-    ///
-    /// #[derive(Debug)]
-    /// enum MyError {
-    ///     Foo(String),
-    ///     Bar(PathBuf),
-    ///     Bing(),
-    /// }
-    ///
-    /// impl UError for MyError {
-    ///     fn usage(&self) -> bool {
-    ///         match self {
-    ///             // This will have a short usage help appended
-    ///             MyError::Bar(_) => true,
-    ///             // These matches won't have a short usage help appended
-    ///             _ => false,
-    ///         }
-    ///     }
-    /// }
-    ///
-    /// impl Error for MyError {}
-    ///
-    /// impl Display for MyError {
-    ///     fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-    ///         use MyError as ME;
-    ///         match self {
-    ///             ME::Foo(s) => write!(f, "Unknown Foo: {}", s.quote()),
-    ///             ME::Bar(p) => write!(f, "Couldn't find Bar: {}", p.quote()),
-    ///             ME::Bing() => write!(f, "Exterminate!"),
-    ///         }
-    ///     }
-    /// }
-    /// ```
-    fn usage(&self) -> bool {
-        false
-    }
-}
-
-impl<T> From<T> for Box<dyn UError>
-where
-    T: UError + 'static,
-{
-    fn from(t: T) -> Self {
-        Box::new(t)
-    }
-}
-
-/// A simple error type with an exit code and a message that implements [`UError`].
-///
-/// ```
-/// use uucore::error::{UResult, USimpleError};
-/// let err = USimpleError { code: 1, message: "error!".into()};
-/// let res: UResult<()> = Err(err.into());
-/// // or using the `new` method:
-/// let res: UResult<()> = Err(USimpleError::new(1, "error!"));
-/// ```
-#[derive(Debug)]
-pub struct USimpleError {
-    /// Exit code of the error.
-    pub code: i32,
-
-    /// Error message.
-    pub message: String,
-}
-
-impl USimpleError {
-    /// Create a new `USimpleError` with a given exit code and message.
-    #[allow(clippy::new_ret_no_self)]
-    pub fn new<S: Into<String>>(code: i32, message: S) -> Box<dyn UError> {
-        Box::new(Self {
-            code,
-            message: message.into(),
-        })
-    }
-}
-
-impl Error for USimpleError {}
-
-impl Display for USimpleError {
-    fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), std::fmt::Error> {
-        self.message.fmt(f)
-    }
-}
-
-impl UError for USimpleError {
-    fn code(&self) -> i32 {
-        self.code
-    }
-}
-
-/// Wrapper type around [`std::io::Error`].
-#[derive(Debug)]
-pub struct UUsageError {
-    /// Exit code of the error.
-    pub code: i32,
-
-    /// Error message.
-    pub message: String,
-}
-
-impl UUsageError {
-    #[allow(clippy::new_ret_no_self)]
-    /// Create a new `UUsageError` with a given exit code and message.
-    pub fn new<S: Into<String>>(code: i32, message: S) -> Box<dyn UError> {
-        Box::new(Self {
-            code,
-            message: message.into(),
-        })
-    }
-}
-
-impl Error for UUsageError {}
-
-impl Display for UUsageError {
-    fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), std::fmt::Error> {
-        self.message.fmt(f)
-    }
-}
-
-impl UError for UUsageError {
-    fn code(&self) -> i32 {
-        self.code
-    }
-
-    fn usage(&self) -> bool {
-        true
-    }
-}
-
-/// Wrapper type around [`std::io::Error`].
-///
-/// The messages displayed by [`UIoError`] should match the error messages displayed by GNU
-/// coreutils.
-///
-/// There are two ways to construct this type: with [`UIoError::new`] or by calling the
-/// [`FromIo::map_err_context`] method on a [`std::io::Result`] or [`std::io::Error`].
-/// ```
-/// use uucore::{
-///     display::Quotable,
-///     error::{FromIo, UResult, UIoError, UError}
-/// };
-/// use std::fs::File;
-/// use std::path::Path;
-/// let path = Path::new("test.txt");
-///
-/// // Manual construction
-/// let e: Box<dyn UError> = UIoError::new(
-///     std::io::ErrorKind::NotFound,
-///     format!("cannot access {}", path.quote())
-/// );
-/// let res: UResult<()> = Err(e.into());
-///
-/// // Converting from an `std::io::Error`.
-/// let res: UResult<File> = File::open(path).map_err_context(|| format!("cannot access {}", path.quote()));
-/// ```
-#[derive(Debug)]
-pub struct UIoError {
-    context: Option<String>,
-    inner: std::io::Error,
-}
-
-impl UIoError {
-    #[allow(clippy::new_ret_no_self)]
-    /// Create a new `UIoError` with a given exit code and message.
-    pub fn new<S: Into<String>>(kind: std::io::ErrorKind, context: S) -> Box<dyn UError> {
-        Box::new(Self {
-            context: Some(context.into()),
-            inner: kind.into(),
-        })
-    }
-}
-
-impl UError for UIoError {}
-
-impl Error for UIoError {}
-
-impl Display for UIoError {
-    fn fmt(&self, f: &mut Formatter<'_>) -> Result<(), std::fmt::Error> {
-        use std::io::ErrorKind::*;
-
-        let message;
-        let message = if self.inner.raw_os_error().is_some() {
-            // These are errors that come directly from the OS.
-            // We want to normalize their messages across systems,
-            // and we want to strip the "(os error X)" suffix.
-            match self.inner.kind() {
-                NotFound => "No such file or directory",
-                PermissionDenied => "Permission denied",
-                ConnectionRefused => "Connection refused",
-                ConnectionReset => "Connection reset",
-                ConnectionAborted => "Connection aborted",
-                NotConnected => "Not connected",
-                AddrInUse => "Address in use",
-                AddrNotAvailable => "Address not available",
-                BrokenPipe => "Broken pipe",
-                AlreadyExists => "Already exists",
-                WouldBlock => "Would block",
-                InvalidInput => "Invalid input",
-                InvalidData => "Invalid data",
-                TimedOut => "Timed out",
-                WriteZero => "Write zero",
-                Interrupted => "Interrupted",
-                UnexpectedEof => "Unexpected end of file",
-                _ => {
-                    // TODO: When the new error variants
-                    // (https://github.com/rust-lang/rust/issues/86442)
-                    // are stabilized, we should add them to the match statement.
-                    message = strip_errno(&self.inner);
-                    &message
-                }
-            }
-        } else {
-            // These messages don't need as much normalization, and the above
-            // messages wouldn't always be a good substitute.
-            // For example, ErrorKind::NotFound doesn't necessarily mean it was
-            // a file that was not found.
-            // There are also errors with entirely custom messages.
-            message = self.inner.to_string();
-            &message
-        };
-        if let Some(ctx) = &self.context {
-            write!(f, "{ctx}: {message}")
-        } else {
-            write!(f, "{message}")
-        }
-    }
-}
-
-/// Strip the trailing " (os error XX)" from io error strings.
-pub fn strip_errno(err: &std::io::Error) -> String {
-    let mut msg = err.to_string();
-    if let Some(pos) = msg.find(" (os error ") {
-        msg.truncate(pos);
-    }
-    msg
-}
-
-/// Enables the conversion from [`std::io::Error`] to [`UError`] and from [`std::io::Result`] to
-/// [`UResult`].
-pub trait FromIo<T> {
-    /// Map the error context of an [`std::io::Error`] or [`std::io::Result`] to a custom error
-    fn map_err_context(self, context: impl FnOnce() -> String) -> T;
-}
-
-impl FromIo<Box<UIoError>> for std::io::Error {
-    fn map_err_context(self, context: impl FnOnce() -> String) -> Box<UIoError> {
-        Box::new(UIoError {
-            context: Some(context()),
-            inner: self,
-        })
-    }
-}
-
-impl<T> FromIo<UResult<T>> for std::io::Result<T> {
-    fn map_err_context(self, context: impl FnOnce() -> String) -> UResult<T> {
-        self.map_err(|e| e.map_err_context(context) as Box<dyn UError>)
-    }
-}
-
-impl FromIo<Box<UIoError>> for std::io::ErrorKind {
-    fn map_err_context(self, context: impl FnOnce() -> String) -> Box<UIoError> {
-        Box::new(UIoError {
-            context: Some(context()),
-            inner: std::io::Error::new(self, ""),
-        })
-    }
-}
-
-impl From<std::io::Error> for UIoError {
-    fn from(f: std::io::Error) -> Self {
-        Self {
-            context: None,
-            inner: f,
-        }
-    }
-}
-
-impl From<std::io::Error> for Box<dyn UError> {
-    fn from(f: std::io::Error) -> Self {
-        let u_error: UIoError = f.into();
-        Box::new(u_error) as Self
-    }
-}
-
-/// Enables the conversion from [`Result<T, nix::Error>`] to [`UResult<T>`].
-///
-/// # Examples
-///
-/// ```
-/// use uucore::error::FromIo;
-/// use nix::errno::Errno;
-///
-/// let nix_err = Err::<(), nix::Error>(Errno::EACCES);
-/// let uio_result = nix_err.map_err_context(|| String::from("fix me please!"));
-///
-/// // prints "fix me please!: Permission denied"
-/// println!("{}", uio_result.unwrap_err());
-/// ```
-#[cfg(unix)]
-impl<T> FromIo<UResult<T>> for Result<T, nix::Error> {
-    fn map_err_context(self, context: impl FnOnce() -> String) -> UResult<T> {
-        self.map_err(|e| {
-            Box::new(UIoError {
-                context: Some(context()),
-                inner: std::io::Error::from_raw_os_error(e as i32),
-            }) as Box<dyn UError>
-        })
-    }
-}
-
-#[cfg(unix)]
-impl<T> FromIo<UResult<T>> for nix::Error {
-    fn map_err_context(self, context: impl FnOnce() -> String) -> UResult<T> {
-        Err(Box::new(UIoError {
-            context: Some(context()),
-            inner: std::io::Error::from_raw_os_error(self as i32),
-        }) as Box<dyn UError>)
-    }
-}
-
-#[cfg(unix)]
-impl From<nix::Error> for UIoError {
-    fn from(f: nix::Error) -> Self {
-        Self {
-            context: None,
-            inner: std::io::Error::from_raw_os_error(f as i32),
-        }
-    }
-}
-
-#[cfg(unix)]
-impl From<nix::Error> for Box<dyn UError> {
-    fn from(f: nix::Error) -> Self {
-        let u_error: UIoError = f.into();
-        Box::new(u_error) as Self
-    }
-}
-
-/// Shorthand to construct [`UIoError`]-instances.
-///
-/// This macro serves as a convenience call to quickly construct instances of
-/// [`UIoError`]. It takes:
-///
-/// - An instance of [`std::io::Error`]
-/// - A `format!`-compatible string and
-/// - An arbitrary number of arguments to the format string
-///
-/// In exactly this order. It is equivalent to the more verbose code seen in the
-/// example.
-///
-/// # Examples
-///
-/// ```
-/// use uucore::error::UIoError;
-/// use uucore::uio_error;
-///
-/// let io_err = std::io::Error::new(
-///     std::io::ErrorKind::PermissionDenied, "fix me please!"
-/// );
-///
-/// let uio_err = UIoError::new(
-///     io_err.kind(),
-///     format!("Error code: {}", 2)
-/// );
-///
-/// let other_uio_err = uio_error!(io_err, "Error code: {}", 2);
-///
-/// // prints "fix me please!: Permission denied"
-/// println!("{uio_err}");
-/// // prints "Error code: 2: Permission denied"
-/// println!("{other_uio_err}");
-/// ```
-///
-/// The [`std::fmt::Display`] impl of [`UIoError`] will then ensure that an
-/// appropriate error message relating to the actual error kind of the
-/// [`std::io::Error`] is appended to whatever error message is defined in
-/// addition (as secondary argument).
-///
-/// If you want to show only the error message for the [`std::io::ErrorKind`]
-/// that's contained in [`UIoError`], pass the second argument as empty string:
-///
-/// ```
-/// use uucore::error::UIoError;
-/// use uucore::uio_error;
-///
-/// let io_err = std::io::Error::new(
-///     std::io::ErrorKind::PermissionDenied, "fix me please!"
-/// );
-///
-/// let other_uio_err = uio_error!(io_err, "");
-///
-/// // prints: ": Permission denied"
-/// println!("{other_uio_err}");
-/// ```
-//#[macro_use]
-#[macro_export]
-macro_rules! uio_error(
-    ($err:expr, $($args:tt)+) => ({
-        UIoError::new(
-            $err.kind(),
-            format!($($args)+)
-        )
-    })
-);
-
-/// A special error type that does not print any message when returned from
-/// `uumain`. Especially useful for porting utilities to using [`UResult`].
-///
-/// There are two ways to construct an [`ExitCode`]:
-/// ```
-/// use uucore::error::{ExitCode, UResult};
-/// // Explicit
-/// let res: UResult<()> = Err(ExitCode(1).into());
-///
-/// // Using into on `i32`:
-/// let res: UResult<()> = Err(1.into());
-/// ```
-/// This type is especially useful for a trivial conversion from utils returning [`i32`] to
-/// returning [`UResult`].
-#[derive(Debug)]
-pub struct ExitCode(pub i32);
-
-impl ExitCode {
-    #[allow(clippy::new_ret_no_self)]
-    /// Create a new `ExitCode` with a given exit code.
-    pub fn new(code: i32) -> Box<dyn UError> {
-        Box::new(Self(code))
-    }
-}
-
-impl Error for ExitCode {}
-
-impl Display for ExitCode {
-    fn fmt(&self, _: &mut Formatter<'_>) -> Result<(), std::fmt::Error> {
-        Ok(())
-    }
-}
-
-impl UError for ExitCode {
-    fn code(&self) -> i32 {
-        self.0
-    }
-}
-
-impl From<i32> for Box<dyn UError> {
-    fn from(i: i32) -> Self {
-        ExitCode::new(i)
-    }
-}
-
-/// A wrapper for `clap::Error` that implements [`UError`]
-///
-/// Contains a custom error code. When `Display::fmt` is called on this struct
-/// the [`clap::Error`] will be printed _directly to `stdout` or `stderr`_.
-/// This is because `clap` only supports colored output when it prints directly.
-///
-/// [`ClapErrorWrapper`] is generally created by calling the
-/// [`UClapError::with_exit_code`] method on [`clap::Error`] or using the [`From`]
-/// implementation from [`clap::Error`] to `Box<dyn UError>`, which constructs
-/// a [`ClapErrorWrapper`] with an exit code of `1`.
-///
-/// ```rust
-/// use uucore::error::{ClapErrorWrapper, UError, UClapError};
-/// let command = clap::Command::new("test");
-/// let result: Result<_, ClapErrorWrapper> = command.try_get_matches().with_exit_code(125);
-///
-/// let command = clap::Command::new("test");
-/// let result: Result<_, Box<dyn UError>> = command.try_get_matches().map_err(Into::into);
-/// ```
-#[derive(Debug)]
-pub struct ClapErrorWrapper {
-    code: i32,
-    error: clap::Error,
-    print_failed: Cell<bool>,
-}
-
-/// Extension trait for `clap::Error` to adjust the exit code.
-pub trait UClapError<T> {
-    /// Set the exit code for the program if `uumain` returns `Ok(())`.
-    fn with_exit_code(self, code: i32) -> T;
-}
-
-impl From<clap::Error> for Box<dyn UError> {
-    fn from(e: clap::Error) -> Self {
-        Box::new(ClapErrorWrapper {
-            code: 1,
-            error: e,
-            print_failed: Cell::new(false),
-        })
-    }
-}
-
-impl UClapError<ClapErrorWrapper> for clap::Error {
-    fn with_exit_code(self, code: i32) -> ClapErrorWrapper {
-        ClapErrorWrapper {
-            code,
-            error: self,
-            print_failed: Cell::new(false),
-        }
-    }
-}
-
-impl UClapError<Result<clap::ArgMatches, ClapErrorWrapper>>
-    for Result<clap::ArgMatches, clap::Error>
-{
-    fn with_exit_code(self, code: i32) -> Result<clap::ArgMatches, ClapErrorWrapper> {
-        self.map_err(|e| e.with_exit_code(code))
-    }
-}
-
-impl UError for ClapErrorWrapper {
-    fn code(&self) -> i32 {
-        // If the error is a DisplayHelp or DisplayVersion variant,
-        // check if printing failed. If it did, return 1, otherwise 0.
-        if let clap::error::ErrorKind::DisplayHelp | clap::error::ErrorKind::DisplayVersion =
-            self.error.kind()
-        {
-            i32::from(self.print_failed.get())
-        } else {
-            self.code
-        }
-    }
-}
-
-impl Error for ClapErrorWrapper {}
-
-// This is abuse of the Display trait
-impl Display for ClapErrorWrapper {
-    fn fmt(&self, _f: &mut Formatter<'_>) -> Result<(), std::fmt::Error> {
-        // Check if printing succeeds. For DisplayHelp and DisplayVersion,
-        // error.print() writes to stdout, so we need to detect write failures
-        // (e.g., when stdout is /dev/full).
-        if let Err(print_fail) = self.error.print() {
-            // Mark that printing failed so code() can return the appropriate exit code
-            self.print_failed.set(true);
-            // Try to display this error to stderr, but ignore if that fails too
-            // since we're already in an error state.
-            let _ = writeln!(std::io::stderr(), "{}: {print_fail}", crate::util_name());
-            // Mirror GNU behavior: when failing to print help or version, exit with error code.
-            // This avoids silent failures when stdout is full or closed.
-            set_exit_code(1);
-        }
-        // Always return Ok(()) to satisfy Display's contract and prevent panic
-        Ok(())
-    }
-}
-
-#[cfg(test)]
-mod tests {
-    #[test]
-    #[cfg(unix)]
-    fn test_nix_error_conversion() {
-        use super::{FromIo, UIoError};
-        use nix::errno::Errno;
-        use std::io::ErrorKind;
-
-        for (nix_error, expected_error_kind) in [
-            (Errno::EACCES, ErrorKind::PermissionDenied),
-            (Errno::ENOENT, ErrorKind::NotFound),
-            (Errno::EEXIST, ErrorKind::AlreadyExists),
-        ] {
-            let error = UIoError::from(nix_error);
-            assert_eq!(expected_error_kind, error.inner.kind());
-        }
-        assert_eq!(
-            "test: Permission denied",
-            Err::<(), nix::Error>(Errno::EACCES)
-                .map_err_context(|| String::from("test"))
-                .unwrap_err()
-                .to_string()
-        );
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/mods/io.rs b/registry/native/stubs/uucore/src/lib/mods/io.rs
deleted file mode 100644
index 446f24322..000000000
--- a/registry/native/stubs/uucore/src/lib/mods/io.rs
+++ /dev/null
@@ -1,107 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-
-//! Encapsulates differences between OSs regarding the access to
-//! file handles / descriptors.
-//! This is useful when dealing with lower level stdin/stdout access.
-//!
-//! In detail:
-//! On unix like OSs, file _descriptors_ are used in this context.
-//! On windows OSs, file _handles_ are used.
-//!
-//! Even though they are distinct classes, they share common functionality.
-//! Access to this common functionality is provided in `OwnedFileDescriptorOrHandle`.
-
-#[cfg(not(windows))]
-use std::os::fd::{AsFd, OwnedFd};
-#[cfg(windows)]
-use std::os::windows::io::{AsHandle, OwnedHandle};
-use std::{
-    fs::{File, OpenOptions},
-    io,
-    path::Path,
-    process::Stdio,
-};
-
-#[cfg(windows)]
-type NativeType = OwnedHandle;
-#[cfg(not(windows))]
-type NativeType = OwnedFd;
-
-/// abstraction wrapper for native file handle / file descriptor
-pub struct OwnedFileDescriptorOrHandle {
-    fx: NativeType,
-}
-
-impl OwnedFileDescriptorOrHandle {
-    /// create from underlying native type
-    pub fn new(x: NativeType) -> Self {
-        Self { fx: x }
-    }
-
-    /// create by opening a file
-    pub fn open_file(options: &OpenOptions, path: &Path) -> io::Result<Self> {
-        let f = options.open(path)?;
-        Self::from(f)
-    }
-
-    /// conversion from borrowed native type
-    ///
-    /// e.g. `std::io::stdout()`, `std::fs::File`, ...
-    #[cfg(windows)]
-    pub fn from<T: AsHandle>(t: T) -> io::Result<Self> {
-        Ok(Self {
-            fx: t.as_handle().try_clone_to_owned()?,
-        })
-    }
-
-    /// conversion from borrowed native type
-    ///
-    /// e.g. `std::io::stdout()`, `std::fs::File`, ...
-    #[cfg(not(windows))]
-    pub fn from<T: AsFd>(t: T) -> io::Result<Self> {
-        Ok(Self {
-            fx: t.as_fd().try_clone_to_owned()?,
-        })
-    }
-
-    /// instantiates a corresponding `File`
-    pub fn into_file(self) -> File {
-        File::from(self.fx)
-    }
-
-    /// instantiates a corresponding `Stdio`
-    pub fn into_stdio(self) -> Stdio {
-        #[cfg(not(target_os = "wasi"))]
-        {
-            Stdio::from(self.fx)
-        }
-        #[cfg(target_os = "wasi")]
-        {
-            // On WASI, Stdio doesn't implement From<OwnedFd> directly.
-            // Convert through File which does support this conversion.
-            Stdio::from(File::from(self.fx))
-        }
-    }
-
-    /// clones self. useful when needing another
-    /// owned reference to same file
-    pub fn try_clone(&self) -> io::Result<Self> {
-        self.fx.try_clone().map(Self::new)
-    }
-
-    /// provides native type to be used with
-    /// OS specific functions without abstraction
-    pub fn as_raw(&self) -> &NativeType {
-        &self.fx
-    }
-}
-
-/// instantiates a corresponding `Stdio`
-impl From<OwnedFileDescriptorOrHandle> for Stdio {
-    fn from(value: OwnedFileDescriptorOrHandle) -> Self {
-        value.into_stdio()
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/mods/line_ending.rs b/registry/native/stubs/uucore/src/lib/mods/line_ending.rs
deleted file mode 100644
index b7fefe97e..000000000
--- a/registry/native/stubs/uucore/src/lib/mods/line_ending.rs
+++ /dev/null
@@ -1,56 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-//! Provides consistent newline/zero terminator handling for `-z`/`--zero` flags.
-//!
-//! See the [`LineEnding`] struct for more information.
-use std::fmt::Display;
-
-/// Line ending of either `\n` or `\0`
-///
-/// Used by various utilities that have the option to separate lines by nul
-/// characters instead of `\n`. Usually, this is specified with the `-z` or
-/// `--zero` flag.
-///
-/// The [`Display`] implementation writes the character corresponding to the
-/// variant to the formatter.
-#[repr(u8)]
-#[derive(Clone, Copy, Debug, Default, PartialEq)]
-pub enum LineEnding {
-    #[default]
-    /// Newline character (`\n`)
-    Newline = b'\n',
-
-    /// Null character (`\0`)
-    Nul = 0,
-}
-
-impl Display for LineEnding {
-    fn fmt(&self, f: &mut std::fmt::Formatter<'_>) -> std::fmt::Result {
-        match self {
-            Self::Newline => writeln!(f),
-            Self::Nul => write!(f, "\0"),
-        }
-    }
-}
-
-impl From<LineEnding> for u8 {
-    fn from(line_ending: LineEnding) -> Self {
-        line_ending as Self
-    }
-}
-
-impl LineEnding {
-    /// Create a [`LineEnding`] from a `-z`/`--zero` flag
-    ///
-    /// If `is_zero_terminated` is true, [`LineEnding::Nul`] is returned,
-    /// otherwise [`LineEnding::Newline`].
-    pub fn from_zero_flag(is_zero_terminated: bool) -> Self {
-        if is_zero_terminated {
-            Self::Nul
-        } else {
-            Self::Newline
-        }
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/mods/locale.rs b/registry/native/stubs/uucore/src/lib/mods/locale.rs
deleted file mode 100644
index e50789f47..000000000
--- a/registry/native/stubs/uucore/src/lib/mods/locale.rs
+++ /dev/null
@@ -1,1483 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// spell-checker:disable
-
-use crate::error::UError;
-
-use fluent::{FluentArgs, FluentBundle, FluentResource};
-use fluent_syntax::parser::ParserError;
-
-use std::cell::Cell;
-use std::fs;
-use std::path::{Path, PathBuf};
-use std::str::FromStr;
-use std::sync::OnceLock;
-
-use os_display::Quotable;
-use thiserror::Error;
-use unic_langid::LanguageIdentifier;
-
-#[derive(Error, Debug)]
-pub enum LocalizationError {
-    #[error("I/O error loading '{path}': {source}")]
-    Io {
-        source: std::io::Error,
-        path: PathBuf,
-    },
-    #[error("Parse-locale error: {0}")]
-    ParseLocale(String),
-    #[error("Resource parse error at '{snippet}': {error:?}")]
-    ParseResource {
-        #[source]
-        error: ParserError,
-        snippet: String,
-    },
-    #[error("Bundle error: {0}")]
-    Bundle(String),
-    #[error("Locales directory not found: {0}")]
-    LocalesDirNotFound(String),
-    #[error("Path resolution error: {0}")]
-    PathResolution(String),
-}
-
-impl From<std::io::Error> for LocalizationError {
-    fn from(error: std::io::Error) -> Self {
-        Self::Io {
-            source: error,
-            path: PathBuf::from("<unknown>"),
-        }
-    }
-}
-
-// Add a generic way to convert LocalizationError to UError
-impl UError for LocalizationError {
-    fn code(&self) -> i32 {
-        1
-    }
-}
-
-pub const DEFAULT_LOCALE: &str = "en-US";
-
-// Include embedded locale files as fallback
-include!(concat!(env!("OUT_DIR"), "/embedded_locales.rs"));
-
-// A struct to handle localization with optional English fallback
-struct Localizer {
-    primary_bundle: FluentBundle<FluentResource>,
-    fallback_bundle: Option<FluentBundle<FluentResource>>,
-}
-
-impl Localizer {
-    fn new(primary_bundle: FluentBundle<FluentResource>) -> Self {
-        Self {
-            primary_bundle,
-            fallback_bundle: None,
-        }
-    }
-
-    fn with_fallback(mut self, fallback_bundle: FluentBundle<FluentResource>) -> Self {
-        self.fallback_bundle = Some(fallback_bundle);
-        self
-    }
-
-    fn format(&self, id: &str, args: Option<&FluentArgs>) -> String {
-        // Try primary bundle first
-        if let Some(message) = self.primary_bundle.get_message(id).and_then(|m| m.value()) {
-            let mut errs = Vec::new();
-            return self
-                .primary_bundle
-                .format_pattern(message, args, &mut errs)
-                .to_string();
-        }
-
-        // Fall back to English bundle if available
-        if let Some(ref fallback) = self.fallback_bundle {
-            if let Some(message) = fallback.get_message(id).and_then(|m| m.value()) {
-                let mut errs = Vec::new();
-                return fallback
-                    .format_pattern(message, args, &mut errs)
-                    .to_string();
-            }
-        }
-
-        // Return the key ID if not found anywhere
-        id.to_string()
-    }
-}
-
-// Global localizer stored in thread-local OnceLock
-thread_local! {
-    static LOCALIZER: OnceLock<Localizer> = const { OnceLock::new() };
-}
-
-/// Helper function to find the uucore locales directory from a utility's locales directory
-fn find_uucore_locales_dir(utility_locales_dir: &Path) -> Option<PathBuf> {
-    // Normalize the path to get absolute path
-    let normalized_dir = utility_locales_dir
-        .canonicalize()
-        .unwrap_or_else(|_| utility_locales_dir.to_path_buf());
-
-    // Walk up: locales -> printenv -> uu -> src
-    let uucore_locales = normalized_dir
-        .parent()? // printenv
-        .parent()? // uu
-        .parent()? // src
-        .join("uucore")
-        .join("locales");
-
-    // Only return if the directory actually exists
-    uucore_locales.exists().then_some(uucore_locales)
-}
-
-/// Create a bundle that combines common and utility-specific strings
-fn create_bundle(
-    locale: &LanguageIdentifier,
-    locales_dir: &Path,
-    util_name: &str,
-) -> Result<FluentBundle<FluentResource>, LocalizationError> {
-    let mut bundle = FluentBundle::new(vec![locale.clone()]);
-
-    // Disable Unicode directional isolate characters
-    bundle.set_use_isolating(false);
-
-    let mut try_add_resource_from = |dir_opt: Option<PathBuf>| {
-        if let Some(resource) = dir_opt
-            .map(|dir| dir.join(format!("{locale}.ftl")))
-            .and_then(|locale_path| fs::read_to_string(locale_path).ok())
-            .and_then(|ftl| FluentResource::try_new(ftl).ok())
-        {
-            bundle.add_resource_overriding(resource);
-        }
-    };
-
-    // Load common strings from uucore locales directory
-    try_add_resource_from(find_uucore_locales_dir(locales_dir));
-    // Then, try to load utility-specific strings from the utility's locale directory
-    try_add_resource_from(get_locales_dir(util_name).ok());
-
-    // checksum binaries also require fluent files from the checksum_common crate
-    if [
-        "cksum",
-        "b2sum",
-        "md5sum",
-        "sha1sum",
-        "sha224sum",
-        "sha256sum",
-        "sha384sum",
-        "sha512sum",
-    ]
-    .contains(&util_name)
-    {
-        try_add_resource_from(get_locales_dir("checksum_common").ok());
-    }
-
-    // If we have at least one resource, return the bundle
-    if bundle.has_message("common-error") || bundle.has_message(&format!("{util_name}-about")) {
-        Ok(bundle)
-    } else {
-        Err(LocalizationError::LocalesDirNotFound(format!(
-            "No localization strings found for {locale} and utility {util_name}"
-        )))
-    }
-}
-
-/// Initialize localization with common strings in addition to utility-specific strings
-fn init_localization(
-    locale: &LanguageIdentifier,
-    locales_dir: &Path,
-    util_name: &str,
-) -> Result<(), LocalizationError> {
-    let default_locale = LanguageIdentifier::from_str(DEFAULT_LOCALE)
-        .expect("Default locale should always be valid");
-
-    // Try to create a bundle that combines common and utility-specific strings
-    let english_bundle = create_bundle(&default_locale, locales_dir, util_name).or_else(|_| {
-        // Fallback to embedded utility-specific and common strings
-        create_english_bundle_from_embedded(&default_locale, util_name)
-    })?;
-
-    let loc = if locale == &default_locale {
-        // If requesting English, just use English as primary (no fallback needed)
-        Localizer::new(english_bundle)
-    } else {
-        // Try to load the requested locale with common strings
-        if let Ok(primary_bundle) = create_bundle(locale, locales_dir, util_name) {
-            // Successfully loaded requested locale, load English as fallback
-            Localizer::new(primary_bundle).with_fallback(english_bundle)
-        } else {
-            // Failed to load requested locale, just use English as primary
-            Localizer::new(english_bundle)
-        }
-    };
-
-    LOCALIZER.with(|lock| {
-        lock.set(loc)
-            .map_err(|_| LocalizationError::Bundle("Localizer already initialized".into()))
-    })?;
-    Ok(())
-}
-
-/// Helper function to parse FluentResource from content string
-fn parse_fluent_resource(content: &str) -> Result<FluentResource, LocalizationError> {
-    FluentResource::try_new(content.to_string()).map_err(
-        |(_partial_resource, errs): (FluentResource, Vec<ParserError>)| {
-            if let Some(first_err) = errs.into_iter().next() {
-                let snippet = first_err
-                    .slice
-                    .clone()
-                    .and_then(|range| content.get(range))
-                    .unwrap_or("")
-                    .to_string();
-                LocalizationError::ParseResource {
-                    error: first_err,
-                    snippet,
-                }
-            } else {
-                LocalizationError::LocalesDirNotFound("Parse error without details".to_string())
-            }
-        },
-    )
-}
-
-/// Create a bundle from embedded English locale files with common uucore strings
-fn create_english_bundle_from_embedded(
-    locale: &LanguageIdentifier,
-    util_name: &str,
-) -> Result<FluentBundle<FluentResource>, LocalizationError> {
-    // Only support English from embedded files
-    if *locale != "en-US" {
-        return Err(LocalizationError::LocalesDirNotFound(
-            "Embedded locales only support en-US".to_string(),
-        ));
-    }
-
-    let mut bundle = FluentBundle::new(vec![locale.clone()]);
-    bundle.set_use_isolating(false);
-
-    // First, try to load common uucore strings
-    if let Some(uucore_content) = get_embedded_locale("uucore/en-US.ftl") {
-        let uucore_resource = parse_fluent_resource(uucore_content)?;
-        bundle.add_resource_overriding(uucore_resource);
-    }
-
-    // Checksum algorithms need locale messages from checksum_common
-    if util_name.ends_with("sum") {
-        if let Some(uucore_content) = get_embedded_locale("checksum_common/en-US.ftl") {
-            let uucore_resource = parse_fluent_resource(uucore_content)?;
-            bundle.add_resource_overriding(uucore_resource);
-        }
-    }
-
-    // Then, try to load utility-specific strings
-    let locale_key = format!("{util_name}/en-US.ftl");
-    if let Some(ftl_content) = get_embedded_locale(&locale_key) {
-        let resource = parse_fluent_resource(ftl_content)?;
-        bundle.add_resource_overriding(resource);
-    }
-
-    // Return the bundle if we have either common strings or utility-specific strings
-    if bundle.has_message("common-error") || bundle.has_message(&format!("{util_name}-about")) {
-        Ok(bundle)
-    } else {
-        Err(LocalizationError::LocalesDirNotFound(format!(
-            "No embedded locale found for {util_name} and no common strings found"
-        )))
-    }
-}
-
-fn get_message_internal(id: &str, args: Option<FluentArgs>) -> String {
-    ensure_localization_from_argv();
-    LOCALIZER.with(|lock| {
-        lock.get()
-            .map_or_else(|| id.to_string(), |loc| loc.format(id, args.as_ref())) // Return the key ID if localizer not initialized
-    })
-}
-
-fn ensure_localization_from_argv() {
-    if LOCALIZER.with(|lock| lock.get().is_some()) {
-        return;
-    }
-
-    thread_local! {
-        static LOCALIZATION_AUTO_INIT_ATTEMPTED: Cell<bool> = const { Cell::new(false) };
-    }
-    if LOCALIZATION_AUTO_INIT_ATTEMPTED.with(|flag| flag.replace(true)) {
-        return;
-    }
-
-    let Some(program) = std::env::args_os().next() else {
-        return;
-    };
-    let Some(util_name) = Path::new(&program)
-        .file_name()
-        .and_then(|name| name.to_str())
-        .map(crate::get_canonical_util_name)
-    else {
-        return;
-    };
-    let _ = setup_localization(util_name);
-}
-
-/// Retrieves a localized message by its identifier.
-///
-/// Looks up a message with the given ID in the current locale bundle and returns
-/// the localized text. If the message ID is not found in the current locale,
-/// it will fall back to English. If the message is not found in English either,
-/// returns the message ID itself.
-///
-/// # Arguments
-///
-/// * `id` - The message identifier in the Fluent resources
-///
-/// # Returns
-///
-/// A `String` containing the localized message, or the message ID if not found
-///
-/// # Examples
-///
-/// ```
-/// use uucore::locale::get_message;
-///
-/// // Get a localized greeting (from .ftl files)
-/// let greeting = get_message("greeting");
-/// println!("{greeting}");
-/// ```
-pub fn get_message(id: &str) -> String {
-    get_message_internal(id, None)
-}
-
-/// Retrieves a localized message with variable substitution.
-///
-/// Looks up a message with the given ID in the current locale bundle,
-/// substitutes variables from the provided arguments map, and returns the
-/// localized text. If the message ID is not found in the current locale,
-/// it will fall back to English. If the message is not found in English either,
-/// returns the message ID itself.
-///
-/// # Arguments
-///
-/// * `id` - The message identifier in the Fluent resources
-/// * `ftl_args` - Key-value pairs for variable substitution in the message
-///
-/// # Returns
-///
-/// A `String` containing the localized message with variable substitution, or the message ID if not found
-///
-/// # Examples
-///
-/// ```
-/// use uucore::locale::get_message_with_args;
-/// use fluent::FluentArgs;
-///
-/// // For a Fluent message like: "Hello, { $name }! You have { $count } notifications."
-/// let mut args = FluentArgs::new();
-/// args.set("name".to_string(), "Alice".to_string());
-/// args.set("count".to_string(), 3);
-///
-/// let message = get_message_with_args("notification", args);
-/// println!("{message}");
-/// ```
-pub fn get_message_with_args(id: &str, ftl_args: FluentArgs) -> String {
-    get_message_internal(id, Some(ftl_args))
-}
-
-/// Function to detect system locale from environment variables
-fn detect_system_locale() -> Result<LanguageIdentifier, LocalizationError> {
-    let locale_str = std::env::var("LANG")
-        .unwrap_or_else(|_| DEFAULT_LOCALE.to_string())
-        .split('.')
-        .next()
-        .unwrap_or(DEFAULT_LOCALE)
-        .to_string();
-    LanguageIdentifier::from_str(&locale_str).map_err(|_| {
-        LocalizationError::ParseLocale(format!("Failed to parse locale: {locale_str}"))
-    })
-}
-
-/// Sets up localization using the system locale with English fallback.
-/// Always loads common strings in addition to utility-specific strings.
-///
-/// This function initializes the localization system based on the system's locale
-/// preferences (via the LANG environment variable) or falls back to English
-/// if the system locale cannot be determined or the locale file doesn't exist.
-/// English is always loaded as a fallback.
-///
-/// # Arguments
-///
-/// * `p` - Path to the directory containing localization (.ftl) files
-///
-/// # Returns
-///
-/// * `Ok(())` if initialization succeeds
-/// * `Err(LocalizationError)` if initialization fails
-///
-/// # Errors
-///
-/// Returns a `LocalizationError` if:
-/// * The en-US.ftl file cannot be read (English is required)
-/// * The files contain invalid Fluent syntax
-/// * The bundle cannot be initialized properly
-///
-/// # Examples
-///
-/// ```
-/// use uucore::locale::setup_localization;
-///
-/// // Initialize localization using files in the "locales" directory
-/// // Make sure you have at least an "en-US.ftl" file in this directory
-/// // Other locale files like "fr-FR.ftl" are optional
-/// match setup_localization("./locales") {
-///     Ok(_) => println!("Localization initialized successfully"),
-///     Err(e) => eprintln!("Failed to initialize localization: {e}"),
-/// }
-/// ```
-pub fn setup_localization(p: &str) -> Result<(), LocalizationError> {
-    // Avoid duplicated and high-cost localizer setup
-    thread_local! {
-        static LOCALIZER_IS_SET: Cell<bool> = const { Cell::new(false) };
-    }
-    if LOCALIZER_IS_SET.with(Cell::get) {
-        return Ok(());
-    }
-
-    let locale = detect_system_locale().unwrap_or_else(|_| {
-        LanguageIdentifier::from_str(DEFAULT_LOCALE).expect("Default locale should always be valid")
-    });
-
-    // Load common strings along with utility-specific strings
-    if let Ok(locales_dir) = get_locales_dir(p) {
-        // Load both utility-specific and common strings
-        init_localization(&locale, &locales_dir, p)?;
-    } else {
-        // No locales directory found, use embedded English with common strings directly
-        let default_locale = LanguageIdentifier::from_str(DEFAULT_LOCALE)
-            .expect("Default locale should always be valid");
-        let english_bundle = create_english_bundle_from_embedded(&default_locale, p)?;
-        let localizer = Localizer::new(english_bundle);
-
-        LOCALIZER.with(|lock| {
-            lock.set(localizer)
-                .map_err(|_| LocalizationError::Bundle("Localizer already initialized".into()))
-        })?;
-    }
-    LOCALIZER_IS_SET.with(|f| f.set(true));
-    Ok(())
-}
-
-#[cfg(not(debug_assertions))]
-fn resolve_locales_dir_from_exe_dir(exe_dir: &Path, p: &str) -> Option<PathBuf> {
-    // 1. <bindir>/locales/<prog>
-    let coreutils = exe_dir.join("locales").join(p);
-    if coreutils.exists() {
-        return Some(coreutils);
-    }
-
-    // 2. <prefix>/share/locales/<prog>
-    if let Some(prefix) = exe_dir.parent() {
-        let fhs = prefix.join("share").join("locales").join(p);
-        if fhs.exists() {
-            return Some(fhs);
-        }
-    }
-
-    // 3. <bindir>/<prog>   (legacy fall-back)
-    let fallback = exe_dir.join(p);
-    if fallback.exists() {
-        return Some(fallback);
-    }
-
-    None
-}
-
-/// Helper function to get the locales directory based on the build configuration
-fn get_locales_dir(p: &str) -> Result<PathBuf, LocalizationError> {
-    #[cfg(debug_assertions)]
-    {
-        // During development, use the project's locales directory
-        let manifest_dir = env!("CARGO_MANIFEST_DIR");
-        // from uucore path, load the locales directory from the program directory
-        let dev_path = PathBuf::from(manifest_dir)
-            .join("../uu")
-            .join(p)
-            .join("locales");
-
-        if dev_path.exists() {
-            return Ok(dev_path);
-        }
-
-        // Fallback for development if the expected path doesn't exist
-        let fallback_dev_path = PathBuf::from(manifest_dir).join(p);
-        if fallback_dev_path.exists() {
-            return Ok(fallback_dev_path);
-        }
-
-        Err(LocalizationError::LocalesDirNotFound(format!(
-            "Development locales directory not found at {} or {}",
-            dev_path.quote(),
-            fallback_dev_path.quote()
-        )))
-    }
-
-    #[cfg(not(debug_assertions))]
-    {
-        use std::env;
-        // In release builds, look relative to executable
-        let exe_path = env::current_exe().map_err(|e| {
-            LocalizationError::PathResolution(format!("Failed to get executable path: {e}"))
-        })?;
-
-        let exe_dir = exe_path.parent().ok_or_else(|| {
-            LocalizationError::PathResolution("Failed to get executable directory".to_string())
-        })?;
-
-        if let Some(dir) = resolve_locales_dir_from_exe_dir(exe_dir, p) {
-            return Ok(dir);
-        }
-
-        Err(LocalizationError::LocalesDirNotFound(format!(
-            "Release locales directory not found starting from {}",
-            exe_dir.quote()
-        )))
-    }
-}
-
-/// Macro for retrieving localized messages with optional arguments.
-///
-/// This macro provides a unified interface for both simple message retrieval
-/// and message retrieval with variable substitution. It accepts a message ID
-/// and optionally key-value pairs using the `"key" => value` syntax.
-///
-/// # Arguments
-///
-/// * `$id` - The message identifier string
-/// * Optional key-value pairs in the format `"key" => value`
-///
-/// # Examples
-///
-/// ```
-/// use uucore::translate;
-/// use fluent::FluentArgs;
-///
-/// // Simple message without arguments
-/// let greeting = translate!("greeting");
-///
-/// // Message with one argument
-/// let welcome = translate!("welcome", "name" => "Alice");
-///
-/// // Message with multiple arguments
-/// let username = "user name";
-/// let item_count = 2;
-/// let notification = translate!(
-///     "user-stats",
-///     "name" => username,
-///     "count" => item_count,
-///     "status" => "active"
-/// );
-/// ```
-#[macro_export]
-macro_rules! translate {
-    // Case 1: Message ID only (no arguments)
-    ($id:expr) => {
-        $crate::locale::get_message($id)
-    };
-
-    // Case 2: Message ID with key-value arguments
-    ($id:expr, $($key:expr => $value:expr),+ $(,)?) => {
-        {
-            let mut args = fluent::FluentArgs::new();
-            $(
-                let value_str = $value.to_string();
-                if let Ok(num_val) = value_str.parse::<i64>() {
-                    args.set($key, num_val);
-                } else if let Ok(float_val) = value_str.parse::<f64>() {
-                    args.set($key, float_val);
-                } else {
-                    // Keep as string if not a number
-                    args.set($key, value_str);
-                }
-            )+
-            $crate::locale::get_message_with_args($id, args)
-        }
-    };
-}
-
-// Re-export the macro for easier access
-pub use translate;
-
-#[cfg(test)]
-mod tests {
-    use super::*;
-    use std::env;
-    use std::fs;
-    use std::path::PathBuf;
-    use tempfile::TempDir;
-
-    /// Test-specific helper function to create a bundle from test directory only
-    #[cfg(test)]
-    fn create_test_bundle(
-        locale: &LanguageIdentifier,
-        test_locales_dir: &Path,
-    ) -> Result<FluentBundle<FluentResource>, LocalizationError> {
-        let mut bundle = FluentBundle::new(vec![locale.clone()]);
-        bundle.set_use_isolating(false);
-
-        // Only load from the test directory - no common strings or utility-specific paths
-        let locale_path = test_locales_dir.join(format!("{locale}.ftl"));
-        if let Ok(ftl_content) = fs::read_to_string(&locale_path) {
-            let resource = parse_fluent_resource(&ftl_content)?;
-            bundle.add_resource_overriding(resource);
-            return Ok(bundle);
-        }
-
-        Err(LocalizationError::LocalesDirNotFound(format!(
-            "No localization strings found for {locale} in {}",
-            test_locales_dir.quote()
-        )))
-    }
-
-    /// Test-specific initialization function for test directories
-    #[cfg(test)]
-    fn init_test_localization(
-        locale: &LanguageIdentifier,
-        test_locales_dir: &Path,
-    ) -> Result<(), LocalizationError> {
-        let default_locale = LanguageIdentifier::from_str(DEFAULT_LOCALE)
-            .expect("Default locale should always be valid");
-
-        // Create English bundle from test directory
-        let english_bundle = create_test_bundle(&default_locale, test_locales_dir)?;
-
-        let loc = if locale == &default_locale {
-            // If requesting English, just use English as primary
-            Localizer::new(english_bundle)
-        } else {
-            // Try to load the requested locale from test directory
-            if let Ok(primary_bundle) = create_test_bundle(locale, test_locales_dir) {
-                // Successfully loaded requested locale, load English as fallback
-                Localizer::new(primary_bundle).with_fallback(english_bundle)
-            } else {
-                // Failed to load requested locale, just use English as primary
-                Localizer::new(english_bundle)
-            }
-        };
-
-        LOCALIZER.with(|lock| {
-            lock.set(loc)
-                .map_err(|_| LocalizationError::Bundle("Localizer already initialized".into()))
-        })?;
-        Ok(())
-    }
-
-    /// Helper function to create a temporary directory with test locale files
-    fn create_test_locales_dir() -> TempDir {
-        let temp_dir = TempDir::new().expect("Failed to create temp directory");
-
-        // Create en-US.ftl
-        let en_content = r"
-greeting = Hello, world!
-welcome = Welcome, { $name }!
-count-items = You have { $count ->
-    [one] { $count } item
-   *[other] { $count } items
-}
-missing-in-other = This message only exists in English
-";
-
-        // Create fr-FR.ftl
-        let fr_content = r"
-greeting = Bonjour, le monde!
-welcome = Bienvenue, { $name }!
-count-items = Vous avez { $count ->
-    [one] { $count } élément
-   *[other] { $count } éléments
-}
-";
-
-        // Create ja-JP.ftl (Japanese)
-        let ja_content = r"
-greeting = こんにちは、世界！
-welcome = ようこそ、{ $name }さん！
-count-items = { $count }個のアイテムがあります
-";
-
-        // Create ar-SA.ftl (Arabic - Right-to-Left)
-        let ar_content = r"
-greeting = أهلاً بالعالم！
-welcome = أهلاً وسهلاً، { $name }！
-count-items = لديك { $count ->
-    [zero] لا عناصر
-    [one] عنصر واحد
-    [two] عنصران
-    [few] { $count } عناصر
-   *[other] { $count } عنصر
-}
-";
-
-        // Create es-ES.ftl with invalid syntax
-        let es_invalid_content = r"
-greeting = Hola, mundo!
-invalid-syntax = This is { $missing
-";
-
-        fs::write(temp_dir.path().join("en-US.ftl"), en_content)
-            .expect("Failed to write en-US.ftl");
-        fs::write(temp_dir.path().join("fr-FR.ftl"), fr_content)
-            .expect("Failed to write fr-FR.ftl");
-        fs::write(temp_dir.path().join("ja-JP.ftl"), ja_content)
-            .expect("Failed to write ja-JP.ftl");
-        fs::write(temp_dir.path().join("ar-SA.ftl"), ar_content)
-            .expect("Failed to write ar-SA.ftl");
-        fs::write(temp_dir.path().join("es-ES.ftl"), es_invalid_content)
-            .expect("Failed to write es-ES.ftl");
-
-        temp_dir
-    }
-
-    #[test]
-    fn test_create_bundle_success() {
-        let temp_dir = create_test_locales_dir();
-        let locale = LanguageIdentifier::from_str("en-US").unwrap();
-
-        let result = create_test_bundle(&locale, temp_dir.path());
-        assert!(result.is_ok());
-
-        let bundle = result.unwrap();
-        assert!(bundle.get_message("greeting").is_some());
-    }
-
-    #[test]
-    fn test_create_bundle_file_not_found() {
-        let temp_dir = TempDir::new().unwrap();
-        let locale = LanguageIdentifier::from_str("de-DE").unwrap();
-
-        let result = create_test_bundle(&locale, temp_dir.path());
-        assert!(result.is_err());
-
-        if let Err(LocalizationError::LocalesDirNotFound(_)) = result {
-            // Expected - no localization strings found
-        } else {
-            panic!("Expected LocalesDirNotFound error");
-        }
-    }
-
-    #[test]
-    fn test_create_bundle_invalid_syntax() {
-        let temp_dir = create_test_locales_dir();
-        let locale = LanguageIdentifier::from_str("es-ES").unwrap();
-
-        let result = create_test_bundle(&locale, temp_dir.path());
-
-        // The result should be an error due to invalid syntax
-        match result {
-            Err(LocalizationError::ParseResource {
-                error: _parser_err,
-                snippet: _,
-            }) => {
-                // Expected ParseResource variant - test passes
-            }
-            Ok(_) => {
-                panic!("Expected ParseResource error, but bundle was created successfully");
-            }
-            Err(other) => {
-                panic!("Expected ParseResource error, but got: {other:?}");
-            }
-        }
-    }
-
-    #[test]
-    fn test_localizer_format_primary_bundle() {
-        let temp_dir = create_test_locales_dir();
-        let en_bundle = create_test_bundle(
-            &LanguageIdentifier::from_str("en-US").unwrap(),
-            temp_dir.path(),
-        )
-        .unwrap();
-
-        let localizer = Localizer::new(en_bundle);
-        let result = localizer.format("greeting", None);
-        assert_eq!(result, "Hello, world!");
-    }
-
-    #[test]
-    fn test_localizer_format_with_args() {
-        use fluent::FluentArgs;
-        let temp_dir = create_test_locales_dir();
-        let en_bundle = create_test_bundle(
-            &LanguageIdentifier::from_str("en-US").unwrap(),
-            temp_dir.path(),
-        )
-        .unwrap();
-
-        let localizer = Localizer::new(en_bundle);
-        let mut args = FluentArgs::new();
-        args.set("name", "Alice");
-
-        let result = localizer.format("welcome", Some(&args));
-        assert_eq!(result, "Welcome, Alice!");
-    }
-
-    #[test]
-    fn test_localizer_fallback_to_english() {
-        let temp_dir = create_test_locales_dir();
-        let fr_bundle = create_test_bundle(
-            &LanguageIdentifier::from_str("fr-FR").unwrap(),
-            temp_dir.path(),
-        )
-        .unwrap();
-        let en_bundle = create_test_bundle(
-            &LanguageIdentifier::from_str("en-US").unwrap(),
-            temp_dir.path(),
-        )
-        .unwrap();
-
-        let localizer = Localizer::new(fr_bundle).with_fallback(en_bundle);
-
-        // This message exists in French
-        let result1 = localizer.format("greeting", None);
-        assert_eq!(result1, "Bonjour, le monde!");
-
-        // This message only exists in English, should fallback
-        let result2 = localizer.format("missing-in-other", None);
-        assert_eq!(result2, "This message only exists in English");
-    }
-
-    #[test]
-    fn test_localizer_format_message_not_found() {
-        let temp_dir = create_test_locales_dir();
-        let en_bundle = create_test_bundle(
-            &LanguageIdentifier::from_str("en-US").unwrap(),
-            temp_dir.path(),
-        )
-        .unwrap();
-
-        let localizer = Localizer::new(en_bundle);
-        let result = localizer.format("nonexistent-message", None);
-        assert_eq!(result, "nonexistent-message");
-    }
-
-    #[test]
-    fn test_init_localization_english_only() {
-        // Run in a separate thread to avoid conflicts with other tests
-        std::thread::spawn(|| {
-            let temp_dir = create_test_locales_dir();
-            let locale = LanguageIdentifier::from_str("en-US").unwrap();
-
-            let result = init_test_localization(&locale, temp_dir.path());
-            assert!(result.is_ok());
-
-            // Test that we can get messages
-            let message = get_message("greeting");
-            assert_eq!(message, "Hello, world!");
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_init_localization_with_fallback() {
-        std::thread::spawn(|| {
-            let temp_dir = create_test_locales_dir();
-            let locale = LanguageIdentifier::from_str("fr-FR").unwrap();
-
-            let result = init_test_localization(&locale, temp_dir.path());
-            assert!(result.is_ok());
-
-            // Test French message
-            let message1 = get_message("greeting");
-            assert_eq!(message1, "Bonjour, le monde!");
-
-            // Test fallback to English
-            let message2 = get_message("missing-in-other");
-            assert_eq!(message2, "This message only exists in English");
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_init_localization_invalid_locale_falls_back_to_english() {
-        std::thread::spawn(|| {
-            let temp_dir = create_test_locales_dir();
-            let locale = LanguageIdentifier::from_str("de-DE").unwrap(); // No German file
-
-            let result = init_test_localization(&locale, temp_dir.path());
-            assert!(result.is_ok());
-
-            // Should use English as primary since German failed to load
-            let message = get_message("greeting");
-            assert_eq!(message, "Hello, world!");
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_init_localization_already_initialized() {
-        std::thread::spawn(|| {
-            let temp_dir = create_test_locales_dir();
-            let locale = LanguageIdentifier::from_str("en-US").unwrap();
-
-            // Initialize once
-            let result1 = init_test_localization(&locale, temp_dir.path());
-            assert!(result1.is_ok());
-
-            // Try to initialize again - should fail
-            let result2 = init_test_localization(&locale, temp_dir.path());
-            assert!(result2.is_err());
-
-            match result2 {
-                Err(LocalizationError::Bundle(msg)) => {
-                    assert!(msg.contains("already initialized"));
-                }
-                _ => panic!("Expected Bundle error"),
-            }
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_get_message() {
-        std::thread::spawn(|| {
-            let temp_dir = create_test_locales_dir();
-            let locale = LanguageIdentifier::from_str("fr-FR").unwrap();
-
-            init_test_localization(&locale, temp_dir.path()).unwrap();
-
-            let message = get_message("greeting");
-            assert_eq!(message, "Bonjour, le monde!");
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_get_message_with_args() {
-        use fluent::FluentArgs;
-        std::thread::spawn(|| {
-            let temp_dir = create_test_locales_dir();
-            let locale = LanguageIdentifier::from_str("en-US").unwrap();
-
-            init_test_localization(&locale, temp_dir.path()).unwrap();
-
-            let mut args = FluentArgs::new();
-            args.set("name".to_string(), "Bob".to_string());
-
-            let message = get_message_with_args("welcome", args);
-            assert_eq!(message, "Welcome, Bob!");
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_get_message_with_args_pluralization() {
-        use fluent::FluentArgs;
-        std::thread::spawn(|| {
-            let temp_dir = create_test_locales_dir();
-            let locale = LanguageIdentifier::from_str("en-US").unwrap();
-
-            init_test_localization(&locale, temp_dir.path()).unwrap();
-
-            // Test singular
-            let mut args1 = FluentArgs::new();
-            args1.set("count", 1);
-            let message1 = get_message_with_args("count-items", args1);
-            assert_eq!(message1, "You have 1 item");
-
-            // Test plural
-            let mut args2 = FluentArgs::new();
-            args2.set("count", 5);
-            let message2 = get_message_with_args("count-items", args2);
-            assert_eq!(message2, "You have 5 items");
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_thread_local_isolation() {
-        use std::thread;
-
-        let temp_dir = create_test_locales_dir();
-
-        // Initialize in main thread with French
-        let temp_path_main = temp_dir.path().to_path_buf();
-        let main_handle = thread::spawn(move || {
-            let locale = LanguageIdentifier::from_str("fr-FR").unwrap();
-            init_test_localization(&locale, &temp_path_main).unwrap();
-            let main_message = get_message("greeting");
-            assert_eq!(main_message, "Bonjour, le monde!");
-        });
-        main_handle.join().unwrap();
-
-        // Test in a different thread - should not be initialized
-        let temp_path = temp_dir.path().to_path_buf();
-        let handle = thread::spawn(move || {
-            // This thread should have its own uninitialized LOCALIZER
-            let thread_message = get_message("greeting");
-            assert_eq!(thread_message, "greeting"); // Returns ID since not initialized
-
-            // Initialize in this thread with English
-            let en_locale = LanguageIdentifier::from_str("en-US").unwrap();
-            init_test_localization(&en_locale, &temp_path).unwrap();
-            let thread_message_after_init = get_message("greeting");
-            assert_eq!(thread_message_after_init, "Hello, world!");
-        });
-
-        handle.join().unwrap();
-
-        // Test another thread to verify French doesn't persist across threads
-        let final_handle = thread::spawn(move || {
-            // Should be uninitialized again
-            let final_message = get_message("greeting");
-            assert_eq!(final_message, "greeting");
-        });
-        final_handle.join().unwrap();
-    }
-
-    #[test]
-    fn test_japanese_localization() {
-        use fluent::FluentArgs;
-        std::thread::spawn(|| {
-            let temp_dir = create_test_locales_dir();
-            let locale = LanguageIdentifier::from_str("ja-JP").unwrap();
-
-            let result = init_test_localization(&locale, temp_dir.path());
-            assert!(result.is_ok());
-
-            // Test Japanese greeting
-            let message = get_message("greeting");
-            assert_eq!(message, "こんにちは、世界！");
-
-            // Test Japanese with arguments
-            let mut args = FluentArgs::new();
-            args.set("name".to_string(), "田中".to_string());
-            let welcome = get_message_with_args("welcome", args);
-            assert_eq!(welcome, "ようこそ、田中さん！");
-
-            // Test Japanese count (no pluralization)
-            let mut count_args = FluentArgs::new();
-            count_args.set("count".to_string(), "5".to_string());
-            let count_message = get_message_with_args("count-items", count_args);
-            assert_eq!(count_message, "5個のアイテムがあります");
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_arabic_localization() {
-        use fluent::FluentArgs;
-        std::thread::spawn(|| {
-            let temp_dir = create_test_locales_dir();
-            let locale = LanguageIdentifier::from_str("ar-SA").unwrap();
-
-            let result = init_test_localization(&locale, temp_dir.path());
-            assert!(result.is_ok());
-
-            // Test Arabic greeting (RTL text)
-            let message = get_message("greeting");
-            assert_eq!(message, "أهلاً بالعالم！");
-
-            // Test Arabic with arguments
-            let mut args = FluentArgs::new();
-            args.set("name", "أحمد".to_string());
-            let welcome = get_message_with_args("welcome", args);
-            assert_eq!(welcome, "أهلاً وسهلاً، أحمد！");
-
-            // Test Arabic pluralization (zero case)
-            let mut args_zero = FluentArgs::new();
-            args_zero.set("count", 0);
-            let message_zero = get_message_with_args("count-items", args_zero);
-            assert_eq!(message_zero, "لديك لا عناصر");
-
-            // Test Arabic pluralization (one case)
-            let mut args_one = FluentArgs::new();
-            args_one.set("count", 1);
-            let message_one = get_message_with_args("count-items", args_one);
-            assert_eq!(message_one, "لديك عنصر واحد");
-
-            // Test Arabic pluralization (two case)
-            let mut args_two = FluentArgs::new();
-            args_two.set("count", 2);
-            let message_two = get_message_with_args("count-items", args_two);
-            assert_eq!(message_two, "لديك عنصران");
-
-            // Test Arabic pluralization (few case - 3-10)
-            let mut args_few = FluentArgs::new();
-            args_few.set("count", 5);
-            let message_few = get_message_with_args("count-items", args_few);
-            assert_eq!(message_few, "لديك 5 عناصر");
-
-            // Test Arabic pluralization (other case - 11+)
-            let mut args_many = FluentArgs::new();
-            args_many.set("count", 15);
-            let message_many = get_message_with_args("count-items", args_many);
-            assert_eq!(message_many, "لديك 15 عنصر");
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_arabic_localization_with_macro() {
-        std::thread::spawn(|| {
-            let temp_dir = create_test_locales_dir();
-            let locale = LanguageIdentifier::from_str("ar-SA").unwrap();
-
-            let result = init_test_localization(&locale, temp_dir.path());
-            assert!(result.is_ok());
-
-            // Test Arabic greeting (RTL text)
-            let message = translate!("greeting");
-            assert_eq!(message, "أهلاً بالعالم！");
-
-            // Test Arabic with arguments
-            let welcome = translate!("welcome", "name" => "أحمد");
-            assert_eq!(welcome, "أهلاً وسهلاً، أحمد！");
-
-            // Test Arabic pluralization (zero case)
-            let message_zero = translate!("count-items", "count" => 0);
-            assert_eq!(message_zero, "لديك لا عناصر");
-
-            // Test Arabic pluralization (one case)
-            let message_one = translate!("count-items", "count" => 1);
-            assert_eq!(message_one, "لديك عنصر واحد");
-
-            // Test Arabic pluralization (two case)
-            let message_two = translate!("count-items", "count" => 2);
-            assert_eq!(message_two, "لديك عنصران");
-
-            // Test Arabic pluralization (few case - 3-10)
-            let message_few = translate!("count-items", "count" => 5);
-            assert_eq!(message_few, "لديك 5 عناصر");
-
-            // Test Arabic pluralization (other case - 11+)
-            let message_many = translate!("count-items", "count" => 15);
-            assert_eq!(message_many, "لديك 15 عنصر");
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_mixed_script_fallback() {
-        std::thread::spawn(|| {
-            let temp_dir = create_test_locales_dir();
-            let locale = LanguageIdentifier::from_str("ar-SA").unwrap();
-
-            let result = init_test_localization(&locale, temp_dir.path());
-            assert!(result.is_ok());
-
-            // Test Arabic message exists
-            let arabic_message = get_message("greeting");
-            assert_eq!(arabic_message, "أهلاً بالعالم！");
-
-            // Test fallback to English for missing message
-            let fallback_message = get_message("missing-in-other");
-            assert_eq!(fallback_message, "This message only exists in English");
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_unicode_directional_isolation_disabled() {
-        use fluent::FluentArgs;
-        std::thread::spawn(|| {
-            let temp_dir = create_test_locales_dir();
-            let locale = LanguageIdentifier::from_str("ar-SA").unwrap();
-
-            init_test_localization(&locale, temp_dir.path()).unwrap();
-
-            // Test that Latin script names are NOT isolated in RTL context
-            // since we disabled Unicode directional isolation
-            let mut args = FluentArgs::new();
-            args.set("name".to_string(), "John Smith".to_string());
-            let message = get_message_with_args("welcome", args);
-
-            // The Latin name should NOT be wrapped in directional isolate characters
-            assert!(!message.contains("\u{2068}John Smith\u{2069}"));
-            assert_eq!(message, "أهلاً وسهلاً، John Smith！");
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_parse_resource_error_includes_snippet() {
-        let temp_dir = create_test_locales_dir();
-        let locale = LanguageIdentifier::from_str("es-ES").unwrap();
-
-        let result = create_test_bundle(&locale, temp_dir.path());
-        assert!(result.is_err());
-
-        if let Err(LocalizationError::ParseResource {
-            error: _err,
-            snippet,
-        }) = result
-        {
-            // The snippet should contain exactly the invalid text from es-ES.ftl
-            assert!(
-                snippet.contains("This is { $missing"),
-                "snippet was `{snippet}` but did not include the invalid text"
-            );
-        } else {
-            panic!("Expected LocalizationError::ParseResource with snippet");
-        }
-    }
-
-    #[test]
-    fn test_localization_error_from_io_error() {
-        let io_error = std::io::Error::new(std::io::ErrorKind::NotFound, "File not found");
-        let loc_error = LocalizationError::from(io_error);
-
-        match loc_error {
-            LocalizationError::Io { source: _, path } => {
-                assert_eq!(path, PathBuf::from("<unknown>"));
-            }
-            _ => panic!("Expected IO error variant"),
-        }
-    }
-
-    #[test]
-    fn test_localization_error_uerror_impl() {
-        let error = LocalizationError::Bundle("some error".to_string());
-        assert_eq!(error.code(), 1);
-    }
-
-    #[test]
-    fn test_get_message_not_initialized() {
-        std::thread::spawn(|| {
-            let message = get_message("greeting");
-            assert_eq!(message, "greeting"); // Should return the ID itself
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_detect_system_locale_from_lang_env() {
-        // Test locale parsing logic directly instead of relying on environment variables
-        // which can have race conditions in multi-threaded test environments
-
-        // Test parsing logic with UTF-8 encoding
-        let locale_with_encoding = "fr-FR.UTF-8";
-        let parsed = locale_with_encoding.split('.').next().unwrap();
-        let lang_id = LanguageIdentifier::from_str(parsed).unwrap();
-        assert_eq!(lang_id.to_string(), "fr-FR");
-
-        // Test parsing logic without encoding
-        let locale_without_encoding = "es-ES";
-        let lang_id = LanguageIdentifier::from_str(locale_without_encoding).unwrap();
-        assert_eq!(lang_id.to_string(), "es-ES");
-
-        // Test that DEFAULT_LOCALE is valid
-        let default_lang_id = LanguageIdentifier::from_str(DEFAULT_LOCALE).unwrap();
-        assert_eq!(default_lang_id.to_string(), "en-US");
-    }
-
-    #[test]
-    fn test_detect_system_locale_no_lang_env() {
-        // Save current LANG value
-        let original_lang = env::var("LANG").ok();
-
-        // Remove LANG environment variable
-        unsafe {
-            env::remove_var("LANG");
-        }
-
-        let result = detect_system_locale();
-        assert!(result.is_ok());
-        assert_eq!(result.unwrap().to_string(), "en-US");
-
-        // Restore original LANG value
-        if let Some(val) = original_lang {
-            unsafe {
-                env::set_var("LANG", val);
-            }
-        } else {
-            {} // Was already unset
-        }
-    }
-
-    #[test]
-    fn test_setup_localization_success() {
-        std::thread::spawn(|| {
-            // Save current LANG value
-            let original_lang = env::var("LANG").ok();
-            unsafe {
-                env::set_var("LANG", "en-US.UTF-8"); // Use English since we have embedded resources for "test"
-            }
-
-            let result = setup_localization("test");
-            assert!(result.is_ok());
-
-            // Test that we can get messages (should use embedded English for "test" utility)
-            let message = get_message("test-about");
-            // Since we're using embedded resources, we should get the expected message
-            assert!(!message.is_empty());
-
-            // Restore original LANG value
-            if let Some(val) = original_lang {
-                unsafe {
-                    env::set_var("LANG", val);
-                }
-            } else {
-                unsafe {
-                    env::remove_var("LANG");
-                }
-            }
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_setup_localization_falls_back_to_english() {
-        std::thread::spawn(|| {
-            // Save current LANG value
-            let original_lang = env::var("LANG").ok();
-            unsafe {
-                env::set_var("LANG", "de-DE.UTF-8"); // German file doesn't exist, should fallback
-            }
-
-            let result = setup_localization("test");
-            assert!(result.is_ok());
-
-            // Should fall back to English embedded resources
-            let message = get_message("test-about");
-            assert!(!message.is_empty()); // Should get something, not just the key
-
-            // Restore original LANG value
-            if let Some(val) = original_lang {
-                unsafe {
-                    env::set_var("LANG", val);
-                }
-            } else {
-                unsafe {
-                    env::remove_var("LANG");
-                }
-            }
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_setup_localization_fallback_to_embedded() {
-        std::thread::spawn(|| {
-            let original_lang = env::var("LANG").ok();
-
-            // Force English locale for this test
-            unsafe {
-                env::set_var("LANG", "en-US");
-            }
-
-            // Test a missing utility-specific locale directory. The standalone
-            // stub still embeds common uucore strings for English fallback.
-            let result = setup_localization("missing-utility");
-            if let Err(e) = &result {
-                eprintln!("Setup localization failed: {e}");
-            }
-            assert!(result.is_ok());
-
-            let message = get_message("common-error");
-            assert_eq!(message, "error");
-
-            match original_lang {
-                Some(value) => unsafe {
-                    env::set_var("LANG", value);
-                },
-                None => unsafe {
-                    env::remove_var("LANG");
-                },
-            }
-        })
-        .join()
-        .unwrap();
-    }
-
-    #[test]
-    fn test_error_display() {
-        let io_error = LocalizationError::Io {
-            source: std::io::Error::new(std::io::ErrorKind::NotFound, "File not found"),
-            path: PathBuf::from("/test/path.ftl"),
-        };
-        let error_string = format!("{io_error}");
-        assert!(error_string.contains("I/O error loading"));
-        assert!(error_string.contains("/test/path.ftl"));
-
-        let bundle_error = LocalizationError::Bundle("Bundle creation failed".to_string());
-        let bundle_string = format!("{bundle_error}");
-        assert!(bundle_string.contains("Bundle error: Bundle creation failed"));
-    }
-
-    #[test]
-    fn test_clap_localization_fallbacks() {
-        std::thread::spawn(|| {
-            // Test the scenario where localization isn't properly initialized
-            // and we need fallbacks for clap error handling
-
-            // First, test when localizer is not initialized
-            let error_msg = get_message("common-error");
-            assert_eq!(error_msg, "common-error"); // Should return key when not initialized
-
-            let tip_msg = get_message("common-tip");
-            assert_eq!(tip_msg, "common-tip"); // Should return key when not initialized
-
-            // Now initialize with setup_localization
-            let result = setup_localization("comm");
-            if result.is_err() {
-                // If setup fails (e.g., no embedded locales for comm), try with a known utility
-                let _ = setup_localization("test");
-            }
-
-            // Test that common strings are available after initialization
-            let error_after_init = get_message("common-error");
-            // Should either be translated or return the key (but not panic)
-            assert!(!error_after_init.is_empty());
-
-            let tip_after_init = get_message("common-tip");
-            assert!(!tip_after_init.is_empty());
-
-            // Test that clap error keys work with fallbacks
-            let unknown_arg_key = get_message("clap-error-unexpected-argument");
-            assert!(!unknown_arg_key.is_empty());
-
-            // Test usage key fallback
-            let usage_key = get_message("common-usage");
-            assert!(!usage_key.is_empty());
-        })
-        .join()
-        .unwrap();
-    }
-}
-
-#[cfg(all(test, not(debug_assertions)))]
-mod fhs_tests {
-    use super::*;
-    use tempfile::TempDir;
-
-    #[test]
-    fn resolves_fhs_share_locales_layout() {
-        // 1. Set up a fake installation prefix in a temp directory
-        let prefix = TempDir::new().unwrap(); // e.g.  /tmp/xyz
-        let bin_dir = prefix.path().join("bin"); //        /tmp/xyz/bin
-        let share_dir = prefix.path().join("share").join("locales").join("cut"); // /tmp/xyz/share/locales/cut
-        std::fs::create_dir_all(&share_dir).unwrap();
-        std::fs::create_dir_all(&bin_dir).unwrap();
-
-        // 2. Pretend the executable lives in <prefix>/bin
-        let exe_dir = bin_dir.as_path();
-
-        // 3. Ask the helper to resolve the locales dir
-        let result = resolve_locales_dir_from_exe_dir(exe_dir, "cut")
-            .expect("should find locales via FHS path");
-
-        assert_eq!(result, share_dir);
-    }
-}
diff --git a/registry/native/stubs/uucore/src/lib/mods/os.rs b/registry/native/stubs/uucore/src/lib/mods/os.rs
deleted file mode 100644
index fca4578dd..000000000
--- a/registry/native/stubs/uucore/src/lib/mods/os.rs
+++ /dev/null
@@ -1,44 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// spell-checker:ignore (path) osrelease
-
-//! Test if the program is running under WSL
-//! ref: <https://github.com/microsoft/WSL/issues/4555> @@ <https://archive.is/dP0bz>
-
-/// Test if the program is running under WSL version 1
-pub fn is_wsl_1() -> bool {
-    #[cfg(target_os = "linux")]
-    {
-        if is_wsl_2() {
-            return false;
-        }
-        if let Ok(b) = std::fs::read("/proc/sys/kernel/osrelease") {
-            if let Ok(s) = std::str::from_utf8(&b) {
-                let a = s.to_ascii_lowercase();
-                return a.contains("microsoft") || a.contains("wsl");
-            }
-        }
-    }
-    false
-}
-
-/// Test if the program is running under WSL version 2
-pub fn is_wsl_2() -> bool {
-    #[cfg(target_os = "linux")]
-    {
-        if let Ok(b) = std::fs::read("/proc/sys/kernel/osrelease") {
-            if let Ok(s) = std::str::from_utf8(&b) {
-                let a = s.to_ascii_lowercase();
-                return a.contains("wsl2");
-            }
-        }
-    }
-    false
-}
-
-/// Test if the program is running under WSL
-pub fn is_wsl() -> bool {
-    is_wsl_1() || is_wsl_2()
-}
diff --git a/registry/native/stubs/uucore/src/lib/mods/panic.rs b/registry/native/stubs/uucore/src/lib/mods/panic.rs
deleted file mode 100644
index 2a67a10ba..000000000
--- a/registry/native/stubs/uucore/src/lib/mods/panic.rs
+++ /dev/null
@@ -1,72 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-//! Custom panic hooks that allow silencing certain types of errors.
-//!
-//! Use the [`mute_sigpipe_panic`] function to silence panics caused by
-//! broken pipe errors. This can happen when a process is still
-//! producing data when the consuming process terminates and closes the
-//! pipe. For example,
-//!
-//! ```sh
-//! $ seq inf | head -n 1
-//! ```
-//!
-use std::panic::{self, PanicHookInfo};
-
-/// Decide whether a panic was caused by a broken pipe (SIGPIPE) error.
-fn is_broken_pipe(info: &PanicHookInfo) -> bool {
-    if let Some(res) = info.payload().downcast_ref::<String>() {
-        if res.contains("BrokenPipe") || res.contains("Broken pipe") {
-            return true;
-        }
-    }
-    false
-}
-
-/// Terminate without error on panics that occur due to broken pipe errors.
-///
-/// For background discussions on `SIGPIPE` handling, see
-///
-/// * `<https://github.com/uutils/coreutils/issues/374>`
-/// * `<https://github.com/uutils/coreutils/pull/1106>`
-/// * `<https://github.com/rust-lang/rust/issues/62569>`
-/// * `<https://github.com/BurntSushi/ripgrep/issues/200>`
-/// * `<https://github.com/crev-dev/cargo-crev/issues/287>`
-///
-pub fn mute_sigpipe_panic() {
-    let hook = panic::take_hook();
-    panic::set_hook(Box::new(move |info| {
-        if !is_broken_pipe(info) {
-            hook(info);
-        }
-    }));
-}
-
-/// Preserve inherited SIGPIPE settings from parent process.
-///
-/// Rust unconditionally sets SIGPIPE to SIG_IGN on startup. This function
-/// checks if the parent process (e.g., `env --default-signal=PIPE`) intended
-/// for SIGPIPE to be set to default by checking the RUST_SIGPIPE environment
-/// variable. If set to "default", it restores SIGPIPE to SIG_DFL.
-#[cfg(unix)]
-pub fn preserve_inherited_sigpipe() {
-    use nix::libc;
-
-    // Check if parent specified that SIGPIPE should be default
-    if let Ok(val) = std::env::var("RUST_SIGPIPE") {
-        if val == "default" {
-            unsafe {
-                libc::signal(libc::SIGPIPE, libc::SIG_DFL);
-                // Remove the environment variable so child processes don't inherit it incorrectly
-                std::env::remove_var("RUST_SIGPIPE");
-            }
-        }
-    }
-}
-
-#[cfg(not(unix))]
-pub fn preserve_inherited_sigpipe() {
-    // No-op on non-Unix platforms
-}
diff --git a/registry/native/stubs/uucore/src/lib/mods/posix.rs b/registry/native/stubs/uucore/src/lib/mods/posix.rs
deleted file mode 100644
index 47bdd7692..000000000
--- a/registry/native/stubs/uucore/src/lib/mods/posix.rs
+++ /dev/null
@@ -1,55 +0,0 @@
-// This file is part of the uutils coreutils package.
-//
-// For the full copyright and license information, please view the LICENSE
-// file that was distributed with this source code.
-// spell-checker:ignore (vars)
-//! Iterate over lines, including the line ending character(s).
-//!
-//! This module provides the [`posix_version`] function, that returns
-//! Some(usize) if the `_POSIX2_VERSION` environment variable is defined
-//! and has value that can be parsed.
-//! Otherwise returns None, so the calling utility would assume default behavior.
-//!
-//! NOTE: GNU (as of v9.4) recognizes three distinct values for POSIX version
-//!
-//! Utilities that rely on this module:
-//! `sort` (TBD)
-//! `tail` (TBD)
-//! `touch` (TBD)
-//! `uniq`
-//!
-use std::env;
-
-/// '199209' for POSIX 1003.2-1992, which would define Obsolete mode
-pub const OBSOLETE: usize = 199_209;
-
-/// '200112' for POSIX 1003.1-2001, which is the minimum version for Traditional mode
-pub const TRADITIONAL: usize = 200_112;
-
-/// '200809' for POSIX 1003.1-2008, which is the minimum version for Modern mode
-pub const MODERN: usize = 200_809;
-
-/// Returns the value of the `_POSIX2_VERSION` environment variable if it is defined
-pub fn posix_version() -> Option<usize> {
-    env::var("_POSIX2_VERSION")
-        .ok()
-        .and_then(|v| v.parse::<usize>().ok())
-}
-
-#[cfg(test)]
-mod tests {
-    use crate::posix::*;
-
-    #[test]
-    fn test_posix_version() {
-        // default
-        assert_eq!(posix_version(), None);
-        // set specific version
-        unsafe { env::set_var("_POSIX2_VERSION", OBSOLETE.to_string()) };
-        assert_eq!(posix_version(), Some(OBSOLETE));
-        unsafe { env::set_var("_POSIX2_VERSION", TRADITIONAL.to_string()) };
-        assert_eq!(posix_version(), Some(TRADITIONAL));
-        unsafe { env::set_var("_POSIX2_VERSION", MODERN.to_string()) };
-        assert_eq!(posix_version(), Some(MODERN));
-    }
-}
diff --git a/registry/package.json b/registry/package.json
deleted file mode 100644
index 46aaebcc0..000000000
--- a/registry/package.json
+++ /dev/null
@@ -1,23 +0,0 @@
-{
-	"name": "secure-exec-registry",
-	"private": true,
-	"type": "module",
-	"license": "Apache-2.0",
-	"version": "0.0.0",
-	"packageManager": "pnpm@10.13.1",
-	"engines": {
-		"node": ">=20"
-	},
-	"scripts": {
-		"test": "node ./scripts/run-vitest.mjs"
-	},
-	"devDependencies": {
-		"@agentos-software/common": "link:software/common",
-		"@secure-exec/core": "link:../packages/core",
-		"@agentos-software/curl": "link:software/curl",
-		"@types/node": "^22.10.2",
-		"@xterm/headless": "^6.0.0",
-		"typescript": "^5.9.2",
-		"vitest": "^2.1.9"
-	}
-}
diff --git a/registry/scripts/run-vitest.mjs b/registry/scripts/run-vitest.mjs
deleted file mode 100644
index c6e2b752f..000000000
--- a/registry/scripts/run-vitest.mjs
+++ /dev/null
@@ -1,32 +0,0 @@
-import { spawnSync } from "node:child_process";
-import { readdirSync } from "node:fs";
-import { resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const scriptDir = fileURLToPath(new URL(".", import.meta.url));
-const pnpmStoreDir = resolve(scriptDir, "..", "..", "node_modules", ".pnpm");
-const vitestPackageDir = readdirSync(pnpmStoreDir).find((entry) =>
-	entry.startsWith("vitest@"),
-);
-
-if (!vitestPackageDir) {
-	throw new Error(`Could not find vitest in ${pnpmStoreDir}`);
-}
-
-const vitestCli = resolve(
-	pnpmStoreDir,
-	vitestPackageDir,
-	"node_modules",
-	"vitest",
-	"vitest.mjs",
-);
-
-const result = spawnSync(process.execPath, [vitestCli, "run", ...process.argv.slice(2)], {
-	stdio: "inherit",
-});
-
-if (result.error) {
-	throw result.error;
-}
-
-process.exit(result.status ?? 1);
diff --git a/registry/scripts/status.mjs b/registry/scripts/status.mjs
deleted file mode 100644
index bd019a386..000000000
--- a/registry/scripts/status.mjs
+++ /dev/null
@@ -1,79 +0,0 @@
-#!/usr/bin/env node
-
-/**
- * Registry package status: local version, staged bin/, assembled dist/package,
- * and (with --remote) the published npm dist-tags per package.
- *
- * Run from anywhere: node registry/scripts/status.mjs [--remote]
- */
-
-import { execFileSync } from "node:child_process";
-import { existsSync, readFileSync, readdirSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const REGISTRY_ROOT = join(dirname(fileURLToPath(import.meta.url)), "..");
-const remote = process.argv.includes("--remote");
-
-function countEntries(dir) {
-	try {
-		return readdirSync(dir).length;
-	} catch {
-		return null;
-	}
-}
-
-function distTags(name) {
-	try {
-		const out = execFileSync(
-			"npm",
-			["view", name, "dist-tags", "--json"],
-			{ encoding: "utf8", stdio: ["ignore", "pipe", "ignore"] },
-		);
-		const tags = JSON.parse(out);
-		return Object.entries(tags)
-			.map(([tag, version]) => `${tag}=${version}`)
-			.join(" ");
-	} catch {
-		return "(not published)";
-	}
-}
-
-const rows = [];
-for (const kind of ["software", "agent"]) {
-	const base = join(REGISTRY_ROOT, kind);
-	for (const dir of readdirSync(base, { withFileTypes: true })) {
-		if (!dir.isDirectory()) continue;
-		const pkgPath = join(base, dir.name, "package.json");
-		if (!existsSync(pkgPath)) continue;
-		const pkg = JSON.parse(readFileSync(pkgPath, "utf8"));
-		const bin = countEntries(join(base, dir.name, "bin"));
-		const distPackage = join(base, dir.name, "dist", "package");
-		const assembled = existsSync(join(distPackage, "package.json"))
-			? (countEntries(join(distPackage, "bin")) ?? 0)
-			: null;
-		rows.push({
-			kind,
-			name: pkg.name,
-			version: pkg.version,
-			bin: bin === null ? "-" : String(bin),
-			dist: assembled === null ? "NOT BUILT" : `${assembled} cmds`,
-			tags: remote ? distTags(pkg.name) : undefined,
-		});
-	}
-}
-
-const width = Math.max(...rows.map((r) => r.name.length)) + 2;
-for (const row of rows) {
-	process.stdout.write(
-		`${row.name.padEnd(width)} ${row.version.padEnd(28)} bin:${row.bin.padEnd(5)} dist:${row.dist.padEnd(10)}${row.tags !== undefined ? ` ${row.tags}` : ""}\n`,
-	);
-}
-const nativeCommands = join(
-	REGISTRY_ROOT,
-	"native/target/wasm32-wasip1/release/commands",
-);
-const built = countEntries(nativeCommands);
-process.stdout.write(
-	`\nnative commands dir: ${built === null ? "NOT BUILT (run `just registry-native`)" : `${built} entries`}\n`,
-);
diff --git a/registry/software/browserbase/agentos-package.json b/registry/software/browserbase/agentos-package.json
deleted file mode 100644
index 8fc668966..000000000
--- a/registry/software/browserbase/agentos-package.json
+++ /dev/null
@@ -1,3 +0,0 @@
-{
-  "name": "browserbase"
-}
diff --git a/registry/software/browserbase/package.json b/registry/software/browserbase/package.json
deleted file mode 100644
index b9f33302b..000000000
--- a/registry/software/browserbase/package.json
+++ /dev/null
@@ -1,35 +0,0 @@
-{
-	"name": "@agentos-software/browserbase",
-	"version": "0.1.0",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "Browserbase browse CLI for secure-exec VMs (cloud browser automation)",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"bin": {
-		"browse": "./node_modules/browse/bin/run.js"
-	},
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js",
-			"default": "./dist/index.js"
-		}
-	},
-	"files": [
-		"dist"
-	],
-	"scripts": {
-		"build": "tsc && agentos-toolchain pack . --out dist/package --prune-native",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"browse": "^0.9.3"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.7.2"
-	}
-}
diff --git a/registry/software/browserbase/src/index.ts b/registry/software/browserbase/src/index.ts
deleted file mode 100644
index eb120d5b3..000000000
--- a/registry/software/browserbase/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageDir = new URL("./package/", import.meta.url).pathname;
-
-export default { packageDir } satisfies SoftwarePackageRef;
diff --git a/registry/software/browserbase/tsconfig.json b/registry/software/browserbase/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/browserbase/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/build-essential/package.json b/registry/software/build-essential/package.json
deleted file mode 100644
index cc47701f2..000000000
--- a/registry/software/build-essential/package.json
+++ /dev/null
@@ -1,32 +0,0 @@
-{
-	"name": "@agentos-software/build-essential",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "Build-essential WASM command set for secure-exec VMs (common + git + curl)",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "tsc",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"@agentos-software/common": "workspace:*",
-		"@agentos-software/curl": "workspace:*",
-		"@agentos-software/git": "workspace:*"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/build-essential/src/index.ts b/registry/software/build-essential/src/index.ts
deleted file mode 100644
index 1e78f71f0..000000000
--- a/registry/software/build-essential/src/index.ts
+++ /dev/null
@@ -1,8 +0,0 @@
-import common from "@agentos-software/common";
-import git from "@agentos-software/git";
-import curl from "@agentos-software/curl";
-
-const buildEssential = [...common, git, curl];
-
-export default buildEssential;
-export { common, git, curl };
diff --git a/registry/software/build-essential/tsconfig.json b/registry/software/build-essential/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/build-essential/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/codex-cli/agentos-package.json b/registry/software/codex-cli/agentos-package.json
deleted file mode 100644
index ee6820e45..000000000
--- a/registry/software/codex-cli/agentos-package.json
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-	"commands": [
-		"codex",
-		"codex-exec"
-	]
-}
diff --git a/registry/software/codex-cli/package.json b/registry/software/codex-cli/package.json
deleted file mode 100644
index aa514ea41..000000000
--- a/registry/software/codex-cli/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/codex-cli",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "OpenAI Codex command package for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../codex/wasm --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/codex-cli/src/index.ts b/registry/software/codex-cli/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/codex-cli/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/codex-cli/tsconfig.json b/registry/software/codex-cli/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/codex-cli/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/common/package.json b/registry/software/common/package.json
deleted file mode 100644
index 2c3a276fd..000000000
--- a/registry/software/common/package.json
+++ /dev/null
@@ -1,37 +0,0 @@
-{
-	"name": "@agentos-software/common",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "Common WASM command set for secure-exec VMs (coreutils + sed + grep + gawk + findutils + diffutils + tar + gzip)",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "tsc",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"@agentos-software/coreutils": "workspace:*",
-		"@agentos-software/sed": "workspace:*",
-		"@agentos-software/grep": "workspace:*",
-		"@agentos-software/gawk": "workspace:*",
-		"@agentos-software/findutils": "workspace:*",
-		"@agentos-software/diffutils": "workspace:*",
-		"@agentos-software/tar": "workspace:*",
-		"@agentos-software/gzip": "workspace:*"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/common/src/index.ts b/registry/software/common/src/index.ts
deleted file mode 100644
index e48ba5ece..000000000
--- a/registry/software/common/src/index.ts
+++ /dev/null
@@ -1,13 +0,0 @@
-import coreutils from "@agentos-software/coreutils";
-import sed from "@agentos-software/sed";
-import grep from "@agentos-software/grep";
-import gawk from "@agentos-software/gawk";
-import findutils from "@agentos-software/findutils";
-import diffutils from "@agentos-software/diffutils";
-import tar from "@agentos-software/tar";
-import gzip from "@agentos-software/gzip";
-
-const common = [coreutils, sed, grep, gawk, findutils, diffutils, tar, gzip];
-
-export default common;
-export { coreutils, sed, grep, gawk, findutils, diffutils, tar, gzip };
diff --git a/registry/software/common/tsconfig.json b/registry/software/common/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/common/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/coreutils/agentos-package.json b/registry/software/coreutils/agentos-package.json
deleted file mode 100644
index c1fc6e57c..000000000
--- a/registry/software/coreutils/agentos-package.json
+++ /dev/null
@@ -1,121 +0,0 @@
-{
-	"commands": [
-		"sh",
-		"arch",
-		"b2sum",
-		"base32",
-		"base64",
-		"basename",
-		"basenc",
-		"cat",
-		"chmod",
-		"cksum",
-		"column",
-		"comm",
-		"cp",
-		"cut",
-		"date",
-		"dd",
-		"dircolors",
-		"dirname",
-		"du",
-		"echo",
-		"env",
-		"expand",
-		"expr",
-		"factor",
-		"false",
-		"fmt",
-		"fold",
-		"head",
-		"join",
-		"link",
-		"ln",
-		"logname",
-		"ls",
-		"md5sum",
-		"mkdir",
-		"mktemp",
-		"mv",
-		"nice",
-		"nl",
-		"nohup",
-		"nproc",
-		"numfmt",
-		"od",
-		"paste",
-		"pathchk",
-		"printenv",
-		"printf",
-		"ptx",
-		"pwd",
-		"readlink",
-		"realpath",
-		"rev",
-		"rm",
-		"rmdir",
-		"seq",
-		"sha1sum",
-		"sha224sum",
-		"sha256sum",
-		"sha384sum",
-		"sha512sum",
-		"shred",
-		"shuf",
-		"sleep",
-		"sort",
-		"split",
-		"stat",
-		"stdbuf",
-		"strings",
-		"sum",
-		"tac",
-		"tail",
-		"tee",
-		"test",
-		"timeout",
-		"touch",
-		"tr",
-		"true",
-		"truncate",
-		"tsort",
-		"uname",
-		"unexpand",
-		"uniq",
-		"unlink",
-		"wc",
-		"which",
-		"whoami",
-		"yes"
-	],
-	"aliases": {
-		"bash": "sh",
-		"more": "cat",
-		"dir": "ls",
-		"vdir": "ls",
-		"[": "test"
-	},
-	"stubs": [
-		"chcon",
-		"runcon",
-		"chgrp",
-		"chown",
-		"chroot",
-		"df",
-		"groups",
-		"id",
-		"hostname",
-		"hostid",
-		"install",
-		"kill",
-		"mkfifo",
-		"mknod",
-		"pinky",
-		"who",
-		"users",
-		"uptime",
-		"stty",
-		"sync",
-		"tty"
-	]
-}
diff --git a/registry/software/coreutils/package.json b/registry/software/coreutils/package.json
deleted file mode 100644
index 7ba4b9f46..000000000
--- a/registry/software/coreutils/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/coreutils",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "GNU coreutils for secure-exec VMs (sh, cat, ls, cp, sort, and 80+ commands)",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/coreutils/src/index.ts b/registry/software/coreutils/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/coreutils/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/coreutils/tsconfig.json b/registry/software/coreutils/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/coreutils/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/curl/agentos-package.json b/registry/software/curl/agentos-package.json
deleted file mode 100644
index 70254bbb2..000000000
--- a/registry/software/curl/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"curl"
-	]
-}
diff --git a/registry/software/curl/package.json b/registry/software/curl/package.json
deleted file mode 100644
index 9baa34057..000000000
--- a/registry/software/curl/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/curl",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "curl HTTP client for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/curl/src/index.ts b/registry/software/curl/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/curl/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/curl/tsconfig.json b/registry/software/curl/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/curl/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/diffutils/agentos-package.json b/registry/software/diffutils/agentos-package.json
deleted file mode 100644
index 6330f7a73..000000000
--- a/registry/software/diffutils/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"diff"
-	]
-}
diff --git a/registry/software/diffutils/package.json b/registry/software/diffutils/package.json
deleted file mode 100644
index 7e66e402f..000000000
--- a/registry/software/diffutils/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/diffutils",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "GNU diffutils for secure-exec VMs (diff)",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/diffutils/src/index.ts b/registry/software/diffutils/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/diffutils/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/diffutils/tsconfig.json b/registry/software/diffutils/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/diffutils/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/duckdb/agentos-package.json b/registry/software/duckdb/agentos-package.json
deleted file mode 100644
index 85ddca857..000000000
--- a/registry/software/duckdb/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"duckdb"
-	]
-}
diff --git a/registry/software/duckdb/package.json b/registry/software/duckdb/package.json
deleted file mode 100644
index b1f144cc8..000000000
--- a/registry/software/duckdb/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/duckdb",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "DuckDB CLI for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/duckdb/src/index.ts b/registry/software/duckdb/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/duckdb/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/duckdb/tsconfig.json b/registry/software/duckdb/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/duckdb/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/everything/package.json b/registry/software/everything/package.json
deleted file mode 100644
index ac70eb4c5..000000000
--- a/registry/software/everything/package.json
+++ /dev/null
@@ -1,47 +0,0 @@
-{
-	"name": "@agentos-software/everything",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "All available WASM command packages for secure-exec VMs in a single bundle",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "tsc",
-		"check-types": "tsc --noEmit"
-	},
-	"dependencies": {
-		"@agentos-software/coreutils": "workspace:*",
-		"@agentos-software/sed": "workspace:*",
-		"@agentos-software/grep": "workspace:*",
-		"@agentos-software/gawk": "workspace:*",
-		"@agentos-software/findutils": "workspace:*",
-		"@agentos-software/diffutils": "workspace:*",
-		"@agentos-software/tar": "workspace:*",
-		"@agentos-software/gzip": "workspace:*",
-		"@agentos-software/curl": "workspace:*",
-		"@agentos-software/zip": "workspace:*",
-		"@agentos-software/unzip": "workspace:*",
-		"@agentos-software/jq": "workspace:*",
-		"@agentos-software/ripgrep": "workspace:*",
-		"@agentos-software/fd": "workspace:*",
-		"@agentos-software/tree": "workspace:*",
-		"@agentos-software/file": "workspace:*",
-		"@agentos-software/yq": "workspace:*",
-		"@agentos-software/codex-cli": "workspace:*"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/everything/src/index.ts b/registry/software/everything/src/index.ts
deleted file mode 100644
index 58565c333..000000000
--- a/registry/software/everything/src/index.ts
+++ /dev/null
@@ -1,61 +0,0 @@
-import coreutils from "@agentos-software/coreutils";
-import sed from "@agentos-software/sed";
-import grep from "@agentos-software/grep";
-import gawk from "@agentos-software/gawk";
-import findutils from "@agentos-software/findutils";
-import diffutils from "@agentos-software/diffutils";
-import tar from "@agentos-software/tar";
-import gzip from "@agentos-software/gzip";
-import curl from "@agentos-software/curl";
-import zip from "@agentos-software/zip";
-import unzip from "@agentos-software/unzip";
-import jq from "@agentos-software/jq";
-import ripgrep from "@agentos-software/ripgrep";
-import fd from "@agentos-software/fd";
-import tree from "@agentos-software/tree";
-import file from "@agentos-software/file";
-import yq from "@agentos-software/yq";
-import codex from "@agentos-software/codex-cli";
-
-const everything = [
-	coreutils,
-	sed,
-	grep,
-	gawk,
-	findutils,
-	diffutils,
-	tar,
-	gzip,
-	curl,
-	zip,
-	unzip,
-	jq,
-	ripgrep,
-	fd,
-	tree,
-	file,
-	yq,
-	codex,
-];
-
-export default everything;
-export {
-	coreutils,
-	sed,
-	grep,
-	gawk,
-	findutils,
-	diffutils,
-	tar,
-	gzip,
-	curl,
-	zip,
-	unzip,
-	jq,
-	ripgrep,
-	fd,
-	tree,
-	file,
-	yq,
-	codex,
-};
diff --git a/registry/software/everything/tsconfig.json b/registry/software/everything/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/everything/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/fd/agentos-package.json b/registry/software/fd/agentos-package.json
deleted file mode 100644
index b1ff21a2c..000000000
--- a/registry/software/fd/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"fd"
-	]
-}
diff --git a/registry/software/fd/package.json b/registry/software/fd/package.json
deleted file mode 100644
index 1be2685e4..000000000
--- a/registry/software/fd/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/fd",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "fd fast file finder for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/fd/src/index.ts b/registry/software/fd/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/fd/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/fd/tsconfig.json b/registry/software/fd/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/fd/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/file/agentos-package.json b/registry/software/file/agentos-package.json
deleted file mode 100644
index 47ee876f7..000000000
--- a/registry/software/file/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"file"
-	]
-}
diff --git a/registry/software/file/package.json b/registry/software/file/package.json
deleted file mode 100644
index 839898a1a..000000000
--- a/registry/software/file/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/file",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "file type detection for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/file/src/index.ts b/registry/software/file/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/file/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/file/tsconfig.json b/registry/software/file/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/file/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/findutils/agentos-package.json b/registry/software/findutils/agentos-package.json
deleted file mode 100644
index 303fb8ac3..000000000
--- a/registry/software/findutils/agentos-package.json
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-	"commands": [
-		"find",
-		"xargs"
-	]
-}
diff --git a/registry/software/findutils/package.json b/registry/software/findutils/package.json
deleted file mode 100644
index 343e20eda..000000000
--- a/registry/software/findutils/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/findutils",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "GNU findutils for secure-exec VMs (find, xargs)",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/findutils/src/index.ts b/registry/software/findutils/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/findutils/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/findutils/tsconfig.json b/registry/software/findutils/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/findutils/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/gawk/agentos-package.json b/registry/software/gawk/agentos-package.json
deleted file mode 100644
index 7291b9432..000000000
--- a/registry/software/gawk/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"awk"
-	]
-}
diff --git a/registry/software/gawk/package.json b/registry/software/gawk/package.json
deleted file mode 100644
index 17247ed56..000000000
--- a/registry/software/gawk/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/gawk",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "GNU awk text processing for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/gawk/src/index.ts b/registry/software/gawk/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/gawk/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/gawk/tsconfig.json b/registry/software/gawk/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/gawk/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/git/agentos-package.json b/registry/software/git/agentos-package.json
deleted file mode 100644
index 833eaab94..000000000
--- a/registry/software/git/agentos-package.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"commands": [
-		"git"
-	],
-	"aliases": {
-		"git-remote-http": "git",
-		"git-remote-https": "git"
-	}
-}
diff --git a/registry/software/git/package.json b/registry/software/git/package.json
deleted file mode 100644
index e67758397..000000000
--- a/registry/software/git/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/git",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "git version control for secure-exec VMs (planned)",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/git/src/index.ts b/registry/software/git/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/git/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/git/tsconfig.json b/registry/software/git/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/git/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/grep/agentos-package.json b/registry/software/grep/agentos-package.json
deleted file mode 100644
index abc984725..000000000
--- a/registry/software/grep/agentos-package.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"commands": [
-		"grep"
-	],
-	"aliases": {
-		"egrep": "grep",
-		"fgrep": "grep"
-	}
-}
diff --git a/registry/software/grep/package.json b/registry/software/grep/package.json
deleted file mode 100644
index 94007372e..000000000
--- a/registry/software/grep/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/grep",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "GNU grep pattern matching for secure-exec VMs (grep, egrep, fgrep)",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/grep/src/index.ts b/registry/software/grep/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/grep/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/grep/tsconfig.json b/registry/software/grep/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/grep/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/gzip/agentos-package.json b/registry/software/gzip/agentos-package.json
deleted file mode 100644
index ee83b4ed1..000000000
--- a/registry/software/gzip/agentos-package.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"commands": [
-		"gzip"
-	],
-	"aliases": {
-		"gunzip": "gzip",
-		"zcat": "gzip"
-	}
-}
diff --git a/registry/software/gzip/package.json b/registry/software/gzip/package.json
deleted file mode 100644
index 527359290..000000000
--- a/registry/software/gzip/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/gzip",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "GNU gzip compression for secure-exec VMs (gzip, gunzip, zcat)",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/gzip/src/index.ts b/registry/software/gzip/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/gzip/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/gzip/tsconfig.json b/registry/software/gzip/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/gzip/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/http-get/agentos-package.json b/registry/software/http-get/agentos-package.json
deleted file mode 100644
index 23866e9b8..000000000
--- a/registry/software/http-get/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"http_get"
-	]
-}
diff --git a/registry/software/http-get/package.json b/registry/software/http-get/package.json
deleted file mode 100644
index f55aa1689..000000000
--- a/registry/software/http-get/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/http-get",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "Minimal HTTP GET fetch helper for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/http-get/src/index.ts b/registry/software/http-get/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/http-get/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/http-get/tsconfig.json b/registry/software/http-get/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/http-get/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/jq/agentos-package.json b/registry/software/jq/agentos-package.json
deleted file mode 100644
index d4cb2249a..000000000
--- a/registry/software/jq/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"jq"
-	]
-}
diff --git a/registry/software/jq/package.json b/registry/software/jq/package.json
deleted file mode 100644
index 2d53a1acd..000000000
--- a/registry/software/jq/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/jq",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "jq JSON processor for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/jq/src/index.ts b/registry/software/jq/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/jq/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/jq/tsconfig.json b/registry/software/jq/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/jq/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/ripgrep/agentos-package.json b/registry/software/ripgrep/agentos-package.json
deleted file mode 100644
index 09681d976..000000000
--- a/registry/software/ripgrep/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"rg"
-	]
-}
diff --git a/registry/software/ripgrep/package.json b/registry/software/ripgrep/package.json
deleted file mode 100644
index 82bcc7177..000000000
--- a/registry/software/ripgrep/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/ripgrep",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "ripgrep fast search for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/ripgrep/src/index.ts b/registry/software/ripgrep/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/ripgrep/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/ripgrep/tsconfig.json b/registry/software/ripgrep/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/ripgrep/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/sed/agentos-package.json b/registry/software/sed/agentos-package.json
deleted file mode 100644
index 1b7133a0a..000000000
--- a/registry/software/sed/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"sed"
-	]
-}
diff --git a/registry/software/sed/package.json b/registry/software/sed/package.json
deleted file mode 100644
index c1bae70ab..000000000
--- a/registry/software/sed/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/sed",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "GNU sed stream editor for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/sed/src/index.ts b/registry/software/sed/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/sed/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/sed/tsconfig.json b/registry/software/sed/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/sed/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/sqlite3/agentos-package.json b/registry/software/sqlite3/agentos-package.json
deleted file mode 100644
index 504e27f74..000000000
--- a/registry/software/sqlite3/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"sqlite3"
-	]
-}
diff --git a/registry/software/sqlite3/package.json b/registry/software/sqlite3/package.json
deleted file mode 100644
index 082816ae4..000000000
--- a/registry/software/sqlite3/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/sqlite3",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "SQLite3 CLI for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/sqlite3/src/index.ts b/registry/software/sqlite3/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/sqlite3/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/sqlite3/tsconfig.json b/registry/software/sqlite3/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/sqlite3/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/tar/agentos-package.json b/registry/software/tar/agentos-package.json
deleted file mode 100644
index 5f267c62a..000000000
--- a/registry/software/tar/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"tar"
-	]
-}
diff --git a/registry/software/tar/package.json b/registry/software/tar/package.json
deleted file mode 100644
index ffb9598c5..000000000
--- a/registry/software/tar/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/tar",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "GNU tar archiver for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/tar/src/index.ts b/registry/software/tar/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/tar/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/tar/tsconfig.json b/registry/software/tar/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/tar/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/tree/agentos-package.json b/registry/software/tree/agentos-package.json
deleted file mode 100644
index 2466ada5f..000000000
--- a/registry/software/tree/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"tree"
-	]
-}
diff --git a/registry/software/tree/package.json b/registry/software/tree/package.json
deleted file mode 100644
index 2d30852d8..000000000
--- a/registry/software/tree/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/tree",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "tree directory listing for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/tree/src/index.ts b/registry/software/tree/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/tree/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/tree/tsconfig.json b/registry/software/tree/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/tree/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/unzip/agentos-package.json b/registry/software/unzip/agentos-package.json
deleted file mode 100644
index ee3cb8fbc..000000000
--- a/registry/software/unzip/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"unzip"
-	]
-}
diff --git a/registry/software/unzip/package.json b/registry/software/unzip/package.json
deleted file mode 100644
index 65abf3d94..000000000
--- a/registry/software/unzip/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/unzip",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "unzip archive extraction for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/unzip/src/index.ts b/registry/software/unzip/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/unzip/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/unzip/tsconfig.json b/registry/software/unzip/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/unzip/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/vim/agentos-package.json b/registry/software/vim/agentos-package.json
deleted file mode 100644
index 6415a5303..000000000
--- a/registry/software/vim/agentos-package.json
+++ /dev/null
@@ -1,18 +0,0 @@
-{
-	"name": "vim",
-	"commands": [
-		"vim"
-	],
-	"provides": {
-		"env": {
-			"VIM": "/usr/local/share/vim",
-			"VIMRUNTIME": "/usr/local/share/vim/vim92"
-		},
-		"files": [
-			{
-				"source": "share/vim/vim92",
-				"target": "/usr/local/share/vim/vim92"
-			}
-		]
-	}
-}
diff --git a/registry/software/vim/package.json b/registry/software/vim/package.json
deleted file mode 100644
index 6d8bef3e7..000000000
--- a/registry/software/vim/package.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-	"name": "@agentos-software/vim",
-	"version": "0.1.0",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "vim for secure-exec VMs (wasm build + bundled runtime via provides)",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js",
-			"default": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && node ./scripts/stage-runtime.mjs && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/vim/scripts/stage-runtime.mjs b/registry/software/vim/scripts/stage-runtime.mjs
deleted file mode 100644
index 2e4999ed0..000000000
--- a/registry/software/vim/scripts/stage-runtime.mjs
+++ /dev/null
@@ -1,48 +0,0 @@
-#!/usr/bin/env node
-// Stage vim's runtime tree into the gitignored `share/vim/vim92/` so
-// `agentos-toolchain build` ships it in dist/package and the manifest's
-// `provides.files` can overlay it read-only at /usr/local/share/vim/vim92
-// (VIMRUNTIME points straight at it, bypassing vim's version-dir search, so a
-// 9.0/9.1 host runtime sources cleanly under the 9.2 binary).
-//
-// Sources, in order: $VIM_RUNTIME_SRC, then the host vim runtimes. Bulky,
-// non-load-bearing subtrees (docs, tutor, spell dictionaries, translations)
-// are trimmed — the runtime here exists so `vim` starts clean (defaults.vim,
-// syntax, ftplugin, indent, autoload, colors), not to ship a manual.
-// Missing source → skip with a notice (the package stays a valid placeholder,
-// same contract as a missing command binary).
-import { cpSync, existsSync, mkdirSync, rmSync } from "node:fs";
-import { dirname, join, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const packageRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
-const target = join(packageRoot, "share", "vim", "vim92");
-
-const TRIM = new Set(["doc", "tutor", "spell", "lang", "print", "keymap"]);
-
-const candidates = [
-	process.env.VIM_RUNTIME_SRC,
-	"/usr/share/vim/vim92",
-	"/usr/share/vim/vim91",
-	"/usr/share/vim/vim90",
-	"/usr/local/share/vim/vim92",
-].filter(Boolean);
-
-const source = candidates.find((dir) => existsSync(join(dir, "defaults.vim")));
-if (!source) {
-	console.log(
-		"stage-runtime: no vim runtime found (set VIM_RUNTIME_SRC or install vim) — skipping; package ships without the runtime tree",
-	);
-	process.exit(0);
-}
-
-rmSync(join(packageRoot, "share"), { recursive: true, force: true });
-mkdirSync(target, { recursive: true });
-cpSync(source, target, {
-	recursive: true,
-	filter: (src) => {
-		const rel = src.slice(source.length).split("/").filter(Boolean);
-		return rel.length === 0 || !TRIM.has(rel[0]);
-	},
-});
-console.log(`stage-runtime: ${source} -> share/vim/vim92 (trimmed: ${[...TRIM].join(", ")})`);
diff --git a/registry/software/vim/src/index.ts b/registry/software/vim/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/vim/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/vim/tsconfig.json b/registry/software/vim/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/vim/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/vix/agentos-package.json b/registry/software/vix/agentos-package.json
deleted file mode 100644
index f70e556d2..000000000
--- a/registry/software/vix/agentos-package.json
+++ /dev/null
@@ -1,6 +0,0 @@
-{
-	"name": "vix",
-	"commands": [
-		"vix"
-	]
-}
diff --git a/registry/software/vix/package.json b/registry/software/vix/package.json
deleted file mode 100644
index 3b49e696a..000000000
--- a/registry/software/vix/package.json
+++ /dev/null
@@ -1,29 +0,0 @@
-{
-	"name": "@agentos-software/vix",
-	"version": "0.1.0",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "vix editor for secure-exec VMs (wasm build)",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js",
-			"default": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/vix/src/index.ts b/registry/software/vix/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/vix/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/vix/tsconfig.json b/registry/software/vix/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/vix/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/wget/agentos-package.json b/registry/software/wget/agentos-package.json
deleted file mode 100644
index 3056aeff6..000000000
--- a/registry/software/wget/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"wget"
-	]
-}
diff --git a/registry/software/wget/package.json b/registry/software/wget/package.json
deleted file mode 100644
index fde61d2a0..000000000
--- a/registry/software/wget/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/wget",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "GNU wget HTTP client for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/wget/src/index.ts b/registry/software/wget/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/wget/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/wget/tsconfig.json b/registry/software/wget/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/wget/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/yq/agentos-package.json b/registry/software/yq/agentos-package.json
deleted file mode 100644
index 9c2a896d8..000000000
--- a/registry/software/yq/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"yq"
-	]
-}
diff --git a/registry/software/yq/package.json b/registry/software/yq/package.json
deleted file mode 100644
index 778062dd7..000000000
--- a/registry/software/yq/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/yq",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "yq YAML/JSON processor for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/yq/src/index.ts b/registry/software/yq/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/yq/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/yq/tsconfig.json b/registry/software/yq/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/yq/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/software/zip/agentos-package.json b/registry/software/zip/agentos-package.json
deleted file mode 100644
index cba353185..000000000
--- a/registry/software/zip/agentos-package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"commands": [
-		"zip"
-	]
-}
diff --git a/registry/software/zip/package.json b/registry/software/zip/package.json
deleted file mode 100644
index 7fa8d1a47..000000000
--- a/registry/software/zip/package.json
+++ /dev/null
@@ -1,28 +0,0 @@
-{
-	"name": "@agentos-software/zip",
-	"version": "0.3.0-rc.2",
-	"type": "module",
-	"license": "Apache-2.0",
-	"description": "zip archive creation for secure-exec VMs",
-	"main": "./dist/index.js",
-	"types": "./dist/index.d.ts",
-	"files": [
-		"dist"
-	],
-	"exports": {
-		".": {
-			"types": "./dist/index.d.ts",
-			"import": "./dist/index.js"
-		}
-	},
-	"scripts": {
-		"build": "agentos-toolchain stage --commands-dir ../../native/target/wasm32-wasip1/release/commands --if-missing skip && tsc && agentos-toolchain build",
-		"check-types": "tsc --noEmit"
-	},
-	"devDependencies": {
-		"@agentos-software/manifest": "workspace:*",
-		"@rivet-dev/agentos-toolchain": "workspace:*",
-		"@types/node": "^22.10.2",
-		"typescript": "^5.9.2"
-	}
-}
diff --git a/registry/software/zip/src/index.ts b/registry/software/zip/src/index.ts
deleted file mode 100644
index 77c0a41ef..000000000
--- a/registry/software/zip/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-import type { SoftwarePackageRef } from "@agentos-software/manifest";
-
-const packageTar = new URL("./package.tar", import.meta.url).pathname;
-
-export default { packageTar } satisfies SoftwarePackageRef;
diff --git a/registry/software/zip/tsconfig.json b/registry/software/zip/tsconfig.json
deleted file mode 100644
index 8f24167af..000000000
--- a/registry/software/zip/tsconfig.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "extends": "../../tsconfig.base.json",
-  "compilerOptions": {
-    "outDir": "./dist",
-    "rootDir": "./src"
-  },
-  "include": ["src/**/*"]
-}
diff --git a/registry/tests/helpers.ts b/registry/tests/helpers.ts
deleted file mode 100644
index 0d1097dd1..000000000
--- a/registry/tests/helpers.ts
+++ /dev/null
@@ -1,120 +0,0 @@
-import { existsSync } from "node:fs";
-import { resolve, dirname } from "node:path";
-import { fileURLToPath } from "node:url";
-import { describe, it } from "vitest";
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-
-/** Directory containing WASM command binaries built from Rust. */
-export const COMMANDS_DIR = resolve(
-	process.env.SECURE_EXEC_WASM_COMMANDS_DIR ??
-		resolve(__dirname, "../native/target/wasm32-wasip1/release/commands"),
-);
-
-/** Directory containing C-compiled WASM binaries. */
-export const C_BUILD_DIR = resolve(
-	process.env.SECURE_EXEC_C_WASM_COMMANDS_DIR ??
-		resolve(__dirname, "../native/c/build/"),
-);
-
-/** Whether the main WASM command binaries are available (includes 'sh'). */
-export const hasWasmBinaries =
-  existsSync(COMMANDS_DIR) && existsSync(resolve(COMMANDS_DIR, "sh"));
-
-/**
- * Check whether specific C WASM binaries are present.
- * @param names - Binary names to check for inside C_BUILD_DIR.
- * @returns true if all requested binaries exist.
- */
-export function hasCWasmBinaries(...names: string[]): boolean {
-  if (!existsSync(C_BUILD_DIR)) return false;
-  return names.every((name) => existsSync(resolve(C_BUILD_DIR, name)));
-}
-
-/**
- * Returns a skip-reason string if WASM binaries are missing, or false if
- * they are available and tests should run.
- */
-export function skipReason(): string | false {
-  if (!hasWasmBinaries) {
-    return `WASM binaries not found at ${COMMANDS_DIR} — build with \`make wasm\` first`;
-  }
-  return false;
-}
-
-export function describeIf(
-	condition: unknown,
-	...args: Parameters<typeof describe>
-): void {
-	if (condition) {
-		// Vitest's overloaded tuple shape is awkward to preserve across helper forwarding.
-		// @ts-expect-error forwarded describe() arguments stay runtime-compatible.
-		describe(...args);
-		return;
-	}
-	const [name] = args;
-	describe.skip(`${String(name)} [environment prerequisites not met]`, () => {});
-}
-
-export function itIf(
-	condition: unknown,
-	...args: Parameters<typeof it>
-): void {
-	if (condition) {
-		// Vitest's overloaded tuple shape is awkward to preserve across helper forwarding.
-		// @ts-expect-error forwarded it() arguments stay runtime-compatible.
-		it(...args);
-		return;
-	}
-	const [name] = args;
-	it.skip(`${String(name)} [environment prerequisites not met]`, () => {});
-}
-
-// Re-exports from the repo-owned generic runtime surface.
-export {
-  AF_INET,
-  AF_UNIX,
-  allowAll,
-  createInMemoryFileSystem,
-  SIGTERM,
-  SOCK_DGRAM,
-  SOCK_STREAM,
-} from "@secure-exec/core/test-runtime";
-import {
-	allowAll,
-	createKernel as createKernelBase,
-} from "@secure-exec/core/test-runtime";
-export type {
-  DriverProcess,
-  Kernel,
-  KernelInterface,
-  KernelRuntimeDriver,
-  ProcessContext,
-  VirtualFileSystem,
-} from "@secure-exec/core/test-runtime";
-export {
-	createWasmVmRuntime,
-	DEFAULT_FIRST_PARTY_TIERS,
-	WASMVM_COMMANDS,
-	type PermissionTier,
-	type WasmVmRuntimeOptions,
-} from "@secure-exec/core/test-runtime";
-export {
-  createNodeHostNetworkAdapter,
-  createNodeRuntime,
-  NodeFileSystem,
-} from "@secure-exec/core/test-runtime";
-export { TerminalHarness } from "./terminal-harness.js";
-
-/**
- * Registry integration tests assume they can bootstrap runtimes and /bin stubs
- * unless they explicitly opt into a stricter permission policy.
- */
-export function createKernel(
-	options: Parameters<typeof createKernelBase>[0],
-): ReturnType<typeof createKernelBase> {
-	return createKernelBase({
-		...options,
-		permissions: options.permissions ?? allowAll,
-	});
-}
diff --git a/registry/tests/kernel/bridge-child-process.test.ts b/registry/tests/kernel/bridge-child-process.test.ts
deleted file mode 100644
index 7cf5032c6..000000000
--- a/registry/tests/kernel/bridge-child-process.test.ts
+++ /dev/null
@@ -1,719 +0,0 @@
-/**
- * Integration tests: Node bridge child_process routing through kernel.
- *
- * Verifies that child_process.spawn/execSync/spawnSync calls from Node
- * isolate code route through the kernel's command registry to the
- * appropriate runtime driver (WasmVM for shell commands).
- *
- * Gracefully skipped when the WASM binary is not built.
- */
-
-import { chmodSync, existsSync, mkdirSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { dirname, join, resolve } from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-  COMMANDS_DIR,
-  createKernel,
-  createNodeRuntime,
-  createWasmVmRuntime,
-  describeIf,
-  createIntegrationKernel,
-  NodeFileSystem,
-} from './helpers.ts';
-import type { IntegrationKernelResult } from './helpers.ts';
-
-const __dirname = dirname(fileURLToPath(import.meta.url));
-const PACKAGED_COREUTILS_COMMANDS_DIR = resolve(
-  __dirname,
-  '../../software/coreutils/wasm',
-);
-const BRIDGE_COMMAND_DIRS = [
-  COMMANDS_DIR,
-  PACKAGED_COREUTILS_COMMANDS_DIR,
-].filter((commandDir, index, allDirs) => {
-  return (
-    existsSync(join(commandDir, 'sh')) && allDirs.indexOf(commandDir) === index
-  );
-});
-const skipReason =
-  BRIDGE_COMMAND_DIRS.length === 0
-    ? `WASM shell command not found at ${COMMANDS_DIR} or ${PACKAGED_COREUTILS_COMMANDS_DIR}`
-    : false;
-
-function createBridgeIntegrationKernel(): Promise<IntegrationKernelResult> {
-  return createIntegrationKernel({
-    runtimes: ['wasmvm', 'node'],
-    commandDirs: BRIDGE_COMMAND_DIRS,
-  });
-}
-
-describeIf(!skipReason, 'bridge child_process → kernel routing', () => {
-  let ctx: IntegrationKernelResult;
-  const cleanupPaths: string[] = [];
-
-  afterEach(async () => {
-    if (ctx) await ctx.dispose();
-    for (const cleanupPath of cleanupPaths.splice(0)) {
-      rmSync(cleanupPath, { recursive: true, force: true });
-    }
-  });
-
-  it('execSync("echo hello") routes through kernel to WasmVM shell', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execSync } = require('child_process');
-      const result = execSync('echo hello', { encoding: 'utf-8' });
-      console.log(result.trim());
-    `], {
-      onStdout: (data) => chunks.push(data),
-    });
-
-    const code = await proc.wait();
-    expect(code).toBe(0);
-
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(output).toContain('hello');
-  });
-
-  it('child_process.spawn("ls") resolves to WasmVM runtime', async () => {
-    ctx = await createBridgeIntegrationKernel();
-    await ctx.vfs.writeFile('/tmp/test-file.txt', 'content');
-
-    const chunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execSync } = require('child_process');
-      const result = execSync('ls /tmp', { encoding: 'utf-8' });
-      console.log(result.trim());
-    `], {
-      onStdout: (data) => chunks.push(data),
-    });
-
-    const code = await proc.wait();
-    expect(code).toBe(0);
-
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(output).toContain('test-file.txt');
-  });
-
-  it('spawned processes get proper PIDs from kernel process table', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    // The Node process itself gets a PID from the kernel
-    const proc = ctx.kernel.spawn('node', ['-e', 'console.log("pid-test")']);
-    expect(proc.pid).toBeGreaterThan(0);
-
-    await proc.wait();
-  });
-
-  it('stdout from spawned child processes pipes back to Node caller', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execSync } = require('child_process');
-      const result = execSync('echo "piped-output"', { encoding: 'utf-8' });
-      console.log('received:', result.trim());
-    `], {
-      onStdout: (data) => chunks.push(data),
-    });
-
-    const code = await proc.wait();
-    expect(code).toBe(0);
-
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(output).toContain('received: piped-output');
-  });
-
-  it('async child_process.spawn("sh") can stream output and exit cleanly', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { spawn } = require('child_process');
-      const child = spawn('sh', ['-lc', 'echo async-ok'], {
-        stdio: ['ignore', 'pipe', 'inherit'],
-      });
-      child.stdout.on('data', (chunk) => process.stdout.write(chunk));
-      child.on('close', (code) => process.exit(code ?? 0));
-    `], {
-      onStdout: (data) => chunks.push(data),
-    });
-
-    const code = await proc.wait();
-    expect(code).toBe(0);
-
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(output).toContain('async-ok');
-  });
-
-  it('child_process.spawn with shell:true preserves shell builtin exit codes', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { spawn } = require('child_process');
-      const child = spawn('exit 7', { shell: true });
-      child.on('close', (code) => {
-        console.log('close:' + code);
-        process.exit(code ?? 0);
-      });
-    `], {
-      onStdout: (data) => chunks.push(data),
-    });
-
-    const code = await proc.wait();
-    expect(code).toBe(7);
-
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(output).toContain('close:7');
-  });
-
-  it('stderr from spawned child processes pipes back to Node caller', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execSync } = require('child_process');
-      try {
-        execSync('cat /nonexistent/path', { encoding: 'utf-8' });
-      } catch (e) {
-        console.log('caught-error');
-      }
-    `], {
-      onStdout: (data) => chunks.push(data),
-    });
-
-    const code = await proc.wait();
-    expect(code).toBe(0);
-
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(output).toContain('caught-error');
-  });
-
-  it('commands not in the registry return ENOENT-like error', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execSync } = require('child_process');
-      try {
-        execSync('nonexistent-cmd-xyz', { encoding: 'utf-8' });
-        console.log('SHOULD_NOT_REACH');
-      } catch (e) {
-        console.log('error-caught');
-      }
-    `], {
-      onStdout: (data) => chunks.push(data),
-    });
-
-    const code = await proc.wait();
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    // execSync wraps the command in bash -c, so the shell handles unknown commands
-    // Either the shell returns non-zero (caught by execSync) or ENOENT propagates
-    expect(output).not.toContain('SHOULD_NOT_REACH');
-    expect(output).toContain('error-caught');
-  });
-
-  it('execSync with env passes environment through kernel', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execSync } = require('child_process');
-      const result = execSync('echo $TEST_VAR', {
-        encoding: 'utf-8',
-        env: { TEST_VAR: 'kernel-env-test' },
-      });
-      console.log(result.trim());
-    `], {
-      onStdout: (data) => chunks.push(data),
-    });
-
-    const code = await proc.wait();
-    expect(code).toBe(0);
-
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(output).toContain('kernel-env-test');
-  });
-
-  it('cat reads VFS file through kernel child_process', async () => {
-    ctx = await createBridgeIntegrationKernel();
-    await ctx.vfs.writeFile('/tmp/bridge-test.txt', 'hello from vfs');
-
-    const chunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execSync } = require('child_process');
-      const result = execSync('cat /tmp/bridge-test.txt', { encoding: 'utf-8' });
-      console.log(result.trim());
-    `], {
-      onStdout: (data) => chunks.push(data),
-    });
-
-    const code = await proc.wait();
-    expect(code).toBe(0);
-
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(output).toContain('hello from vfs');
-  });
-
-  it('execSync shell redirection writes command stdout into the kernel VFS', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const stderrChunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execSync } = require('child_process');
-      execSync("printf 'bash-ok' > bash-output.txt", { encoding: 'utf-8' });
-      console.log(execSync('cat /tmp/bash-output.txt', { encoding: 'utf-8' }));
-    `], {
-      cwd: '/tmp',
-      onStdout: (data) => chunks.push(data),
-      onStderr: (data) => stderrChunks.push(data),
-    });
-
-    const code = await proc.wait();
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    const stderr = stderrChunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(code, `stdout:\n${output}\nstderr:\n${stderr}`).toBe(0);
-    expect(output).toContain('bash-ok');
-    expect(new TextDecoder().decode(await ctx.vfs.readFile('/tmp/bash-output.txt'))).toBe('bash-ok');
-  });
-
-  it('execSync multi-statement shell syntax runs through the guest shell', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const stderrChunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const fs = require('fs');
-      const { execSync } = require('child_process');
-      execSync("echo ignored; echo fallback-ok > fallback-output.txt", { encoding: 'utf-8' });
-      console.log(fs.readFileSync('/tmp/fallback-output.txt', 'utf8'));
-    `], {
-      cwd: '/tmp',
-      onStdout: (data) => chunks.push(data),
-      onStderr: (data) => stderrChunks.push(data),
-    });
-
-    const code = await proc.wait();
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    const stderr = stderrChunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(code, `stdout:\n${output}\nstderr:\n${stderr}`).toBe(0);
-    expect(output).toContain('fallback-ok');
-    expect(new TextDecoder().decode(await ctx.vfs.readFile('/tmp/fallback-output.txt'))).toBe('fallback-ok\n');
-  });
-
-  it('execSync append redirection onto a write-only file succeeds like Linux', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const stderrChunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const fs = require('fs');
-      const { execSync } = require('child_process');
-      fs.writeFileSync('/tmp/write-only.txt', 'original');
-      fs.chmodSync('/tmp/write-only.txt', 0o200);
-      // A real shell opens the append target write-only, so a 0o200 file is
-      // appendable even though it cannot be read back until the chmod below.
-      execSync("printf changed >> /tmp/write-only.txt", { encoding: 'utf-8' });
-      fs.chmodSync('/tmp/write-only.txt', 0o600);
-      console.log(JSON.stringify({
-        mode: 'loaded',
-        file: fs.readFileSync('/tmp/write-only.txt', 'utf8')
-      }));
-    `], {
-      cwd: '/tmp',
-      onStdout: (data) => chunks.push(data),
-      onStderr: (data) => stderrChunks.push(data),
-    });
-
-    const code = await proc.wait();
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    const stderr = stderrChunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(code, `stdout:\n${output}\nstderr:\n${stderr}`).toBe(0);
-    const result = JSON.parse(output.trim());
-    expect(result.mode).toBe('loaded');
-    expect(result.file).toBe('originalchanged');
-  });
-
-  it('execSync append redirection appends and creates missing files', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const stderrChunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execSync } = require('child_process');
-      execSync("printf a > append-base.txt");
-      execSync("printf b >> append-base.txt");
-      execSync("printf c >> append-fresh.txt");
-      console.log('append-done');
-    `], {
-      cwd: '/tmp',
-      onStdout: (data) => chunks.push(data),
-      onStderr: (data) => stderrChunks.push(data),
-    });
-
-    const code = await proc.wait();
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    const stderr = stderrChunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(code, `stdout:\n${output}\nstderr:\n${stderr}`).toBe(0);
-    expect(new TextDecoder().decode(await ctx.vfs.readFile('/tmp/append-base.txt'))).toBe('ab');
-    expect(new TextDecoder().decode(await ctx.vfs.readFile('/tmp/append-fresh.txt'))).toBe('c');
-  });
-
-  it('execSync stdin redirection feeds the kernel VFS file to the command', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const stderrChunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const fs = require('fs');
-      const { execSync } = require('child_process');
-      fs.writeFileSync('/tmp/stdin-input.txt', 'stdin-redirect-content');
-      const result = execSync('cat < stdin-input.txt', { encoding: 'utf-8' });
-      console.log('read:' + result);
-    `], {
-      cwd: '/tmp',
-      onStdout: (data) => chunks.push(data),
-      onStderr: (data) => stderrChunks.push(data),
-    });
-
-    const code = await proc.wait();
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    const stderr = stderrChunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(code, `stdout:\n${output}\nstderr:\n${stderr}`).toBe(0);
-    expect(output).toContain('read:stdin-redirect-content');
-  });
-
-  it('execSync redirection handles quoted target paths with spaces', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const stderrChunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execSync } = require('child_process');
-      execSync("printf hi > 'out file.txt'");
-      execSync('printf hi > "out file2.txt"');
-      console.log('quoted-done');
-    `], {
-      cwd: '/tmp',
-      onStdout: (data) => chunks.push(data),
-      onStderr: (data) => stderrChunks.push(data),
-    });
-
-    const code = await proc.wait();
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    const stderr = stderrChunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(code, `stdout:\n${output}\nstderr:\n${stderr}`).toBe(0);
-    expect(new TextDecoder().decode(await ctx.vfs.readFile('/tmp/out file.txt'))).toBe('hi');
-    expect(new TextDecoder().decode(await ctx.vfs.readFile('/tmp/out file2.txt'))).toBe('hi');
-  });
-
-  it('execSync surfaces shell failure exit codes and truncates redirect targets', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const stderrChunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const fs = require('fs');
-      const { execSync } = require('child_process');
-      let redirectFailure = null;
-      try {
-        execSync('cat /missing-input-file > fail-out.txt', { encoding: 'utf-8' });
-      } catch (error) {
-        redirectFailure = {
-          status: error.status ?? null,
-          stderr: String(error.stderr ?? ''),
-        };
-      }
-      let exitFailure = null;
-      try {
-        execSync('exit 7', { encoding: 'utf-8' });
-      } catch (error) {
-        exitFailure = { status: error.status ?? null };
-      }
-      console.log(JSON.stringify({
-        redirectFailure,
-        exitFailure,
-        redirectTarget: fs.readFileSync('/tmp/fail-out.txt', 'utf8'),
-      }));
-    `], {
-      cwd: '/tmp',
-      onStdout: (data) => chunks.push(data),
-      onStderr: (data) => stderrChunks.push(data),
-    });
-
-    const code = await proc.wait();
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    const stderr = stderrChunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(code, `stdout:\n${output}\nstderr:\n${stderr}`).toBe(0);
-    const result = JSON.parse(output.trim());
-    expect(result.redirectFailure).not.toBeNull();
-    expect(result.redirectFailure.status).not.toBe(0);
-    expect(result.redirectFailure.stderr).toContain('missing-input-file');
-    // A real shell truncates and creates the redirect target before exec runs.
-    expect(result.redirectTarget).toBe('');
-    expect(result.exitFailure).toEqual({ status: 7 });
-  });
-
-  it('async exec() redirection writes command stdout into the kernel VFS', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const stderrChunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { exec } = require('child_process');
-      exec('printf hi > async-out.txt', (error, stdout, stderr) => {
-        console.log(JSON.stringify({
-          error: error ? String(error.message) : null,
-          stdout,
-        }));
-        process.exit(error ? 1 : 0);
-      });
-    `], {
-      cwd: '/tmp',
-      onStdout: (data) => chunks.push(data),
-      onStderr: (data) => stderrChunks.push(data),
-    });
-
-    const code = await proc.wait();
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    const stderr = stderrChunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(code, `stdout:\n${output}\nstderr:\n${stderr}`).toBe(0);
-    const result = JSON.parse(output.trim());
-    expect(result.error).toBeNull();
-    expect(result.stdout).toBe('');
-    expect(new TextDecoder().decode(await ctx.vfs.readFile('/tmp/async-out.txt'))).toBe('hi');
-  });
-
-  it('spawn with shell:true performs redirection through the guest shell', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const stderrChunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { spawn } = require('child_process');
-      const child = spawn('printf hi > spawn-out.txt', { shell: true });
-      child.on('close', (code) => {
-        console.log('close:' + code);
-        process.exit(code ?? 1);
-      });
-    `], {
-      cwd: '/tmp',
-      onStdout: (data) => chunks.push(data),
-      onStderr: (data) => stderrChunks.push(data),
-    });
-
-    const code = await proc.wait();
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    const stderr = stderrChunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(code, `stdout:\n${output}\nstderr:\n${stderr}`).toBe(0);
-    expect(output).toContain('close:0');
-    expect(new TextDecoder().decode(await ctx.vfs.readFile('/tmp/spawn-out.txt'))).toBe('hi');
-  });
-
-  it('execFileSync on node_modules/.bin shell shims unwraps to the node entrypoint', async () => {
-    const projectRoot = mkdtempSync(join(tmpdir(), 'secure-exec-node-bin-shim-'));
-    cleanupPaths.push(projectRoot);
-
-    mkdirSync(join(projectRoot, 'node_modules', '.bin'), { recursive: true });
-    mkdirSync(join(projectRoot, 'node_modules', 'demo'), { recursive: true });
-    writeFileSync(
-      join(projectRoot, 'node_modules', 'demo', 'index.js'),
-      '#!/usr/bin/env node\nconsole.log(JSON.stringify(process.argv.slice(2)));\n',
-    );
-    chmodSync(join(projectRoot, 'node_modules', 'demo', 'index.js'), 0o755);
-    writeFileSync(
-      join(projectRoot, 'node_modules', '.bin', 'demo'),
-      [
-        '#!/bin/sh',
-        'basedir=$(dirname "$0")',
-        'if [ -x "$basedir/node" ]; then',
-        '  exec "$basedir/node" "$basedir/../demo/index.js" "$@"',
-        'else',
-        '  exec node "$basedir/../demo/index.js" "$@"',
-        'fi',
-        '',
-      ].join('\n'),
-    );
-    chmodSync(join(projectRoot, 'node_modules', '.bin', 'demo'), 0o755);
-
-    const kernel = createKernel({
-      filesystem: new NodeFileSystem({ root: projectRoot }),
-    });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: BRIDGE_COMMAND_DIRS }));
-    await kernel.mount(createNodeRuntime());
-    ctx = {
-      kernel,
-      vfs: new NodeFileSystem({ root: projectRoot }),
-      dispose: () => kernel.dispose(),
-    };
-
-    const chunks: Uint8Array[] = [];
-    const stderrChunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execFileSync } = require('child_process');
-      const result = execFileSync('/node_modules/.bin/demo', ['alpha', 'beta'], {
-        encoding: 'utf-8',
-      });
-      process.stdout.write(result);
-    `], {
-      onStdout: (data) => chunks.push(data),
-      onStderr: (data) => stderrChunks.push(data),
-    });
-
-    const code = await proc.wait();
-    expect(code).toBe(0);
-
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    const stderr = stderrChunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(stderr).toBe('');
-    expect(output.trim()).toBe(JSON.stringify(['alpha', 'beta']));
-  });
-
-  it('execFileSync unwraps shell shims whose node entrypoint has no shebang or extension', async () => {
-    const projectRoot = mkdtempSync(join(tmpdir(), 'secure-exec-node-bin-shim-no-shebang-'));
-    cleanupPaths.push(projectRoot);
-
-    mkdirSync(join(projectRoot, 'node_modules', '.bin'), { recursive: true });
-    mkdirSync(join(projectRoot, 'node_modules', 'demo', 'dist', 'bin'), { recursive: true });
-    writeFileSync(
-      join(projectRoot, 'node_modules', 'demo', 'dist', 'bin', 'demo'),
-      '"use strict";\nconsole.log(JSON.stringify(process.argv.slice(2)));\n',
-    );
-    chmodSync(join(projectRoot, 'node_modules', 'demo', 'dist', 'bin', 'demo'), 0o755);
-    writeFileSync(
-      join(projectRoot, 'node_modules', '.bin', 'demo-no-shebang'),
-      [
-        '#!/bin/sh',
-        'basedir=$(dirname "$0")',
-        'if [ -x "$basedir/node" ]; then',
-        '  exec "$basedir/node" "$basedir/../demo/dist/bin/demo" "$@"',
-        'else',
-        '  exec node "$basedir/../demo/dist/bin/demo" "$@"',
-        'fi',
-        '',
-      ].join('\n'),
-    );
-    chmodSync(join(projectRoot, 'node_modules', '.bin', 'demo-no-shebang'), 0o755);
-
-    const kernel = createKernel({
-      filesystem: new NodeFileSystem({ root: projectRoot }),
-    });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: BRIDGE_COMMAND_DIRS }));
-    await kernel.mount(createNodeRuntime());
-    ctx = {
-      kernel,
-      vfs: new NodeFileSystem({ root: projectRoot }),
-      dispose: () => kernel.dispose(),
-    };
-
-    const chunks: Uint8Array[] = [];
-    const stderrChunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execFileSync } = require('child_process');
-      const result = execFileSync('/node_modules/.bin/demo-no-shebang', ['gamma', 'delta'], {
-        encoding: 'utf-8',
-      });
-      process.stdout.write(result);
-    `], {
-      onStdout: (data) => chunks.push(data),
-      onStderr: (data) => stderrChunks.push(data),
-    });
-
-    const code = await proc.wait();
-    expect(code).toBe(0);
-
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    const stderr = stderrChunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(stderr).toBe('');
-    expect(output.trim()).toBe(JSON.stringify(['gamma', 'delta']));
-  });
-});
-
-describeIf(!skipReason, 'bridge child_process exploit/abuse paths', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    if (ctx) await ctx.dispose();
-  });
-
-  it('child_process cannot escape to host shell', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    // Use a command that produces different output in sandbox vs host:
-    // /etc/hostname exists on the host but not in the kernel VFS
-    const chunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execSync } = require('child_process');
-      try {
-        const result = execSync('cat /etc/hostname', { encoding: 'utf-8' });
-        // If we get here, the command read a host-only file
-        console.log('ESCAPED:' + result.trim());
-      } catch (e) {
-        // Expected: /etc/hostname doesn't exist in the sandbox VFS
-        console.log('sandbox:contained');
-      }
-    `], {
-      onStdout: (data) => chunks.push(data),
-    });
-
-    await proc.wait();
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    // Positive: command ran in sandbox and couldn't access host filesystem
-    expect(output).toContain('sandbox:contained');
-    // Negative: no host data leaked
-    expect(output).not.toContain('ESCAPED:');
-  });
-
-  it('child_process cannot read host filesystem', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execSync } = require('child_process');
-      try {
-        // /etc/passwd doesn't exist in the kernel VFS
-        execSync('cat /etc/passwd', { encoding: 'utf-8' });
-        console.log('SECURITY_BREACH');
-      } catch (e) {
-        console.log('blocked');
-      }
-    `], {
-      onStdout: (data) => chunks.push(data),
-    });
-
-    await proc.wait();
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(output).not.toContain('SECURITY_BREACH');
-    expect(output).toContain('blocked');
-  });
-
-  it('child_process write goes to kernel VFS not host', async () => {
-    ctx = await createBridgeIntegrationKernel();
-
-    const chunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', `
-      const { execSync } = require('child_process');
-      execSync('echo "written-by-child" > /tmp/child-output.txt');
-      const result = execSync('cat /tmp/child-output.txt', { encoding: 'utf-8' });
-      console.log(result.trim());
-    `], {
-      onStdout: (data) => chunks.push(data),
-    });
-
-    const code = await proc.wait();
-    expect(code).toBe(0);
-
-    const output = chunks.map(c => new TextDecoder().decode(c)).join('');
-    expect(output).toContain('written-by-child');
-
-    // Verify the file was written to kernel VFS
-    const content = await ctx.vfs.readFile('/tmp/child-output.txt');
-    expect(new TextDecoder().decode(content)).toContain('written-by-child');
-  });
-});
diff --git a/registry/tests/kernel/ci-wasm-artifact-availability.test.ts b/registry/tests/kernel/ci-wasm-artifact-availability.test.ts
deleted file mode 100644
index 5f4c42066..000000000
--- a/registry/tests/kernel/ci-wasm-artifact-availability.test.ts
+++ /dev/null
@@ -1,44 +0,0 @@
-/**
- * CI guard for cross-runtime network Wasm artifacts.
- *
- * The cross-runtime network suite now uses first-party command artifacts only.
- * It may skip locally when those binaries are absent, but CI must fail before
- * that suite can silently disappear behind skip guards.
- */
-
-import { describe, it, expect } from 'vitest';
-import { existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { COMMANDS_DIR, itIf } from './helpers.ts';
-
-const REQUIRED_ARTIFACTS = [
-  {
-    label: 'Wasm command directory',
-    path: COMMANDS_DIR,
-    buildStep: 'run `make wasm` in `native/`',
-  },
-  {
-    label: 'curl WASM binary',
-    path: join(COMMANDS_DIR, 'curl'),
-    buildStep: 'run `make wasm` in `native/`',
-  },
-] as const;
-
-function formatMissingArtifacts(): string {
-  return REQUIRED_ARTIFACTS
-    .filter((artifact) => !existsSync(artifact.path))
-    .map((artifact) => `- ${artifact.label}: missing at ${artifact.path} (${artifact.buildStep})`)
-    .join('\n');
-}
-
-describe('Kernel cross-runtime CI Wasm artifact availability', () => {
-  itIf(Boolean(process.env.CI), 'requires cross-runtime Wasm fixtures in CI', () => {
-    const missing = formatMissingArtifacts();
-    expect(
-      missing,
-      missing === ''
-        ? undefined
-        : `Missing required Wasm artifacts in CI:\n${missing}`,
-    ).toBe('');
-  });
-});
diff --git a/registry/tests/kernel/cross-runtime-network.test.ts b/registry/tests/kernel/cross-runtime-network.test.ts
deleted file mode 100644
index 98519e2b2..000000000
--- a/registry/tests/kernel/cross-runtime-network.test.ts
+++ /dev/null
@@ -1,466 +0,0 @@
-/**
- * Cross-runtime network integration matrix.
- *
- * These tests intentionally avoid host loopback exemptions for VM-local rows.
- * A passing row means bytes crossed the kernel socket table between the named
- * client and listener runtimes.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import { existsSync } from 'node:fs';
-import { createServer as createHttpServer } from 'node:http';
-import { resolve } from 'node:path';
-import {
-  COMMANDS_DIR,
-  C_BUILD_DIR,
-  createIntegrationKernel,
-  itIf,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-import type { IntegrationKernelResult, Kernel } from './helpers.ts';
-
-const WASM_HTTP_GET = resolve(C_BUILD_DIR, 'http_get');
-const WASM_HTTP_SERVER = resolve(C_BUILD_DIR, 'http_server');
-const WASM_TCP_ECHO = resolve(C_BUILD_DIR, 'tcp_echo');
-const WASM_TCP_SERVER = resolve(C_BUILD_DIR, 'tcp_server');
-
-function skipReasonWasmNetwork(): string | false {
-  const wasmSkipReason = skipUnlessWasmBuilt();
-  if (wasmSkipReason) return wasmSkipReason;
-  for (const [name, path] of [
-    ['http_get', WASM_HTTP_GET],
-    ['http_server', WASM_HTTP_SERVER],
-    ['tcp_echo', WASM_TCP_ECHO],
-    ['tcp_server', WASM_TCP_SERVER],
-  ] as const) {
-    if (!existsSync(path)) {
-      return `${name} WASM binary not found at ${path} - rebuild registry C command artifacts`;
-    }
-  }
-  return false;
-}
-
-const wasmNetworkSkipReason = skipReasonWasmNetwork();
-
-interface RunningGuestProgram {
-  process: ReturnType<Kernel['spawn']>;
-  stdoutChunks: Uint8Array[];
-  stderrChunks: Uint8Array[];
-  getExitCode: () => number | null;
-}
-
-function decodeChunks(chunks: Uint8Array[]): string {
-  return chunks.map((chunk) => new TextDecoder().decode(chunk)).join('');
-}
-
-function spawnGuestProgram(
-  kernel: Kernel,
-  command: string,
-  args: string[],
-): RunningGuestProgram {
-  const stdoutChunks: Uint8Array[] = [];
-  const stderrChunks: Uint8Array[] = [];
-  let exitCode: number | null = null;
-  const process = kernel.spawn(command, args, {
-    onStdout: (chunk) => stdoutChunks.push(chunk),
-    onStderr: (chunk) => stderrChunks.push(chunk),
-  });
-  void process.wait().then((code) => {
-    exitCode = code;
-  });
-  return {
-    process,
-    stdoutChunks,
-    stderrChunks,
-    getExitCode: () => exitCode,
-  };
-}
-
-function spawnGuestNodeProgram(
-  kernel: Kernel,
-  code: string,
-): RunningGuestProgram {
-  return spawnGuestProgram(kernel, 'node', ['-e', code]);
-}
-
-async function runGuestNodeProgram(
-  kernel: Kernel,
-  code: string,
-): Promise<{ exitCode: number; stdout: string; stderr: string }> {
-  const program = spawnGuestNodeProgram(kernel, code);
-  const exitCode = await program.process.wait();
-  return {
-    exitCode,
-    stdout: decodeChunks(program.stdoutChunks),
-    stderr: decodeChunks(program.stderrChunks),
-  };
-}
-
-async function waitForOutput(
-  program: RunningGuestProgram,
-  needle: string,
-  label: string,
-): Promise<void> {
-  const deadline = Date.now() + 20_000;
-  while (Date.now() < deadline) {
-    const stdout = decodeChunks(program.stdoutChunks);
-    if (stdout.includes(needle)) {
-      return;
-    }
-    if (program.getExitCode() !== null) {
-      throw new Error(
-        `${label} exited before ${JSON.stringify(needle)}\nstdout:\n${stdout}\nstderr:\n${decodeChunks(program.stderrChunks)}`,
-      );
-    }
-    await new Promise((resolveWait) => setTimeout(resolveWait, 20));
-  }
-  throw new Error(
-    `Timed out waiting for ${label} to print ${JSON.stringify(needle)}\nstdout:\n${decodeChunks(program.stdoutChunks)}\nstderr:\n${decodeChunks(program.stderrChunks)}`,
-  );
-}
-
-async function waitForListener(
-  kernel: Kernel,
-  port: number,
-  label: string,
-): Promise<void> {
-  const deadline = Date.now() + 20_000;
-  while (Date.now() < deadline) {
-    if (kernel.socketTable.findListener({ host: '0.0.0.0', port })) {
-      return;
-    }
-    await new Promise((resolveWait) => setTimeout(resolveWait, 20));
-  }
-  throw new Error(`Timed out waiting for ${label} listener on port ${port}`);
-}
-
-function parseVmFetchResponse(responseJson: string): {
-  status: number;
-  body: string;
-} {
-  const parsed = JSON.parse(responseJson) as {
-    status?: number;
-    body?: string;
-    bodyEncoding?: string;
-  };
-  let body = parsed.body ?? '';
-  if (parsed.bodyEncoding === 'base64' && body.length > 0) {
-    body = Buffer.from(body, 'base64').toString('utf8');
-  }
-  return { status: parsed.status ?? 0, body };
-}
-
-function guestJsHttpServer(port: number): string {
-  return `
-const http = require('http');
-const server = http.createServer((req, res) => {
-  res.writeHead(200, { 'content-type': 'text/plain' });
-  res.end('js:' + req.method + ':' + req.url);
-});
-server.listen(${port}, '127.0.0.1', () => {
-  console.log('js http listening ${port}');
-});
-`;
-}
-
-function guestJsTcpServer(port: number): string {
-  return `
-const net = require('net');
-const server = net.createServer((socket) => {
-  socket.on('data', (chunk) => {
-    socket.end('js-pong:' + chunk.toString());
-  });
-});
-server.listen(${port}, '127.0.0.1', () => {
-  console.log('js tcp listening ${port}');
-});
-`;
-}
-
-describe('cross-runtime network integration', { timeout: 90_000 }, () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await ctx?.dispose();
-  });
-
-  it('J1 JS fetch -> JS node:http server over VM loopback', async () => {
-    ctx = await createIntegrationKernel({
-      runtimes: ['node'],
-    });
-    const server = spawnGuestNodeProgram(ctx.kernel, guestJsHttpServer(3101));
-    await waitForOutput(server, 'js http listening 3101', 'JS HTTP server');
-
-    const client = await runGuestNodeProgram(
-      ctx.kernel,
-      [
-        "fetch('http://127.0.0.1:3101/from-js')",
-        "  .then(async (res) => console.log(res.status + ':' + await res.text()))",
-        "  .catch((error) => { console.error(error); process.exit(1); });",
-      ].join('\n'),
-    );
-
-    server.process.kill(15);
-    await server.process.wait().catch(() => {});
-    expect(client.exitCode).toBe(0);
-    expect(client.stderr).toBe('');
-    expect(client.stdout.trim()).toBe('200:js:GET:/from-js');
-  });
-
-  it('J2 JS net.connect -> JS net.Server over VM loopback', async () => {
-    ctx = await createIntegrationKernel({
-      runtimes: ['node'],
-    });
-    const server = spawnGuestNodeProgram(ctx.kernel, guestJsTcpServer(3105));
-    await waitForListener(ctx.kernel, 3105, 'JS TCP server');
-
-    const client = await runGuestNodeProgram(
-      ctx.kernel,
-      [
-        "const net = require('net');",
-        "const client = net.connect({ host: '127.0.0.1', port: 3105 }, () => client.write('ping'));",
-        "client.on('data', (chunk) => { console.log(chunk.toString()); client.end(); });",
-        "client.on('error', (error) => { console.error(error); process.exit(1); });",
-      ].join('\n'),
-    );
-
-    server.process.kill(15);
-    await server.process.wait().catch(() => {});
-    expect(client.exitCode).toBe(0);
-    expect(client.stderr).toBe('');
-    expect(client.stdout.trim()).toBe('js-pong:ping');
-  });
-
-  itIf(!wasmNetworkSkipReason, 'W1 WASM http_get -> JS node:http server over VM loopback', async () => {
-    ctx = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-      commandDirs: [C_BUILD_DIR, COMMANDS_DIR],
-    });
-    const server = spawnGuestNodeProgram(ctx.kernel, guestJsHttpServer(3102));
-    await waitForOutput(server, 'js http listening 3102', 'JS HTTP server');
-
-    const wasm = await ctx.kernel.exec('http_get 3102 /from-wasm');
-
-    server.process.kill(15);
-    await server.process.wait().catch(() => {});
-    expect(wasm.exitCode).toBe(0);
-    expect(wasm.stderr).not.toContain('socket error');
-    expect(wasm.stdout).toContain('body: js:GET:/from-wasm');
-  });
-
-  itIf(!wasmNetworkSkipReason, 'J3 JS fetch -> WASM HTTP server over VM loopback', async () => {
-    ctx = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-      commandDirs: [C_BUILD_DIR, COMMANDS_DIR],
-    });
-    const server = spawnGuestProgram(ctx.kernel, 'http_server', ['3103']);
-    await waitForListener(ctx.kernel, 3103, 'WASM HTTP server');
-
-    const client = await runGuestNodeProgram(
-      ctx.kernel,
-      [
-        "fetch('http://127.0.0.1:3103/from-js')",
-        "  .then(async (res) => console.log(res.status + ':' + await res.text()))",
-        "  .catch((error) => { console.error(error); process.exit(1); });",
-      ].join('\n'),
-    );
-    const serverExit = await server.process.wait();
-
-    expect(client.exitCode).toBe(0);
-    expect(client.stderr).toBe('');
-    expect(client.stdout.trim()).toBe('200:wasm:GET:/from-js');
-    expect(serverExit).toBe(0);
-    expect(decodeChunks(server.stdoutChunks)).toContain('received request: GET /from-js');
-  });
-
-  itIf(!wasmNetworkSkipReason, 'J4 JS net.connect -> WASM TCP server over VM loopback', async () => {
-    ctx = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-      commandDirs: [C_BUILD_DIR, COMMANDS_DIR],
-    });
-    const server = spawnGuestProgram(ctx.kernel, 'tcp_server', ['3106']);
-    await waitForListener(ctx.kernel, 3106, 'WASM TCP server');
-
-    const client = await runGuestNodeProgram(
-      ctx.kernel,
-      [
-        "const net = require('net');",
-        "const client = net.connect({ host: '127.0.0.1', port: 3106 }, () => client.write('ping'));",
-        "client.on('data', (chunk) => { console.log(chunk.toString()); client.end(); });",
-        "client.on('error', (error) => { console.error(error); process.exit(1); });",
-      ].join('\n'),
-    );
-    const serverExit = await server.process.wait();
-
-    expect(client.exitCode).toBe(0);
-    expect(client.stderr).toBe('');
-    expect(client.stdout.trim()).toBe('pong');
-    expect(serverExit).toBe(0);
-    expect(decodeChunks(server.stdoutChunks)).toContain('received: ping');
-  });
-
-  itIf(!wasmNetworkSkipReason, 'H2 host vmFetch -> WASM HTTP server over VM loopback', async () => {
-    ctx = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-      commandDirs: [C_BUILD_DIR, COMMANDS_DIR],
-    });
-    const server = spawnGuestProgram(ctx.kernel, 'http_server', ['3104']);
-    await waitForListener(ctx.kernel, 3104, 'WASM HTTP server');
-
-    const response = parseVmFetchResponse(
-      await ctx.kernel.vmFetch({
-        port: 3104,
-        method: 'GET',
-        path: '/from-host',
-        headersJson: JSON.stringify({}),
-      }),
-    );
-    const serverExit = await server.process.wait();
-
-    expect(response.status).toBe(200);
-    expect(response.body).toBe('wasm:GET:/from-host');
-    expect(serverExit).toBe(0);
-    expect(decodeChunks(server.stdoutChunks)).toContain('received request: GET /from-host');
-  });
-
-  itIf(!wasmNetworkSkipReason, 'W2 WASM tcp_echo -> JS net.Server over VM loopback', async () => {
-    ctx = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-      commandDirs: [C_BUILD_DIR, COMMANDS_DIR],
-    });
-    const server = spawnGuestNodeProgram(ctx.kernel, guestJsTcpServer(3107));
-    await waitForListener(ctx.kernel, 3107, 'JS TCP server');
-
-    const wasm = await ctx.kernel.exec('tcp_echo 3107');
-
-    server.process.kill(15);
-    await server.process.wait().catch(() => {});
-    expect(wasm.exitCode).toBe(0);
-    expect(wasm.stderr).not.toContain('socket error');
-    expect(wasm.stdout).toContain('sent: 5');
-    expect(wasm.stdout).toContain('received: js-pong:hello');
-  });
-
-  itIf(!wasmNetworkSkipReason, 'W3 WASM http_get -> WASM HTTP server over VM loopback', async () => {
-    ctx = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-      commandDirs: [C_BUILD_DIR, COMMANDS_DIR],
-    });
-    const server = spawnGuestProgram(ctx.kernel, 'http_server', ['3108']);
-    await waitForListener(ctx.kernel, 3108, 'WASM HTTP server');
-
-    const wasm = await ctx.kernel.exec('http_get 3108 /from-wasm');
-    const serverExit = await server.process.wait();
-
-    expect(wasm.exitCode).toBe(0);
-    expect(wasm.stderr).not.toContain('socket error');
-    expect(wasm.stdout).toContain('body: wasm:GET:/from-wasm');
-    expect(serverExit).toBe(0);
-  });
-
-  itIf(!wasmNetworkSkipReason, 'W4 WASM tcp_echo -> WASM TCP server over VM loopback', async () => {
-    ctx = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-      commandDirs: [C_BUILD_DIR, COMMANDS_DIR],
-    });
-    const server = spawnGuestProgram(ctx.kernel, 'tcp_server', ['3109']);
-    await waitForListener(ctx.kernel, 3109, 'WASM TCP server');
-
-    const wasm = await ctx.kernel.exec('tcp_echo 3109');
-    const serverExit = await server.process.wait();
-
-    expect(wasm.exitCode).toBe(0);
-    expect(wasm.stderr).not.toContain('socket error');
-    expect(wasm.stdout).toContain('sent: 5');
-    expect(wasm.stdout).toContain('received: pong');
-    expect(serverExit).toBe(0);
-  });
-
-  it('O1 JS fetch -> host loopback requires loopback exemption', async () => {
-    const seenRequests: string[] = [];
-    const hostServer = createHttpServer((req, res) => {
-      seenRequests.push(req.url ?? '');
-      res.writeHead(200, { 'content-type': 'text/plain' });
-      res.end('host:' + req.url);
-    });
-    await new Promise<void>((resolveListen) => {
-      hostServer.listen(0, '127.0.0.1', () => resolveListen());
-    });
-    const port = (hostServer.address() as import('node:net').AddressInfo).port;
-
-    try {
-      ctx = await createIntegrationKernel({
-        runtimes: ['node'],
-      });
-      const noExemption = await runGuestNodeProgram(
-        ctx.kernel,
-        [
-          `fetch('http://127.0.0.1:${port}/blocked')`,
-          "  .then(async (res) => console.log('unexpected:' + res.status + ':' + await res.text()))",
-          "  .catch((error) => { console.log(error.cause?.code || error.code || error.name); });",
-        ].join('\n'),
-      );
-      expect(noExemption.exitCode).toBe(0);
-      expect(noExemption.stdout.trim()).toBe('EACCES');
-      expect(seenRequests).toEqual([]);
-      await ctx.dispose();
-
-      ctx = await createIntegrationKernel({
-        runtimes: ['node'],
-        loopbackExemptPorts: [port],
-      });
-      const allowed = await runGuestNodeProgram(
-        ctx.kernel,
-        [
-          `fetch('http://127.0.0.1:${port}/allowed')`,
-          "  .then(async (res) => console.log(res.status + ':' + await res.text()))",
-          "  .catch((error) => { console.error(error); process.exit(1); });",
-        ].join('\n'),
-      );
-      expect(allowed.exitCode).toBe(0);
-      expect(allowed.stderr).toBe('');
-      expect(allowed.stdout.trim()).toBe('200:host:/allowed');
-      expect(seenRequests).toEqual(['/allowed']);
-    } finally {
-      await new Promise<void>((resolveClose) => hostServer.close(() => resolveClose()));
-    }
-  });
-
-  itIf(!wasmNetworkSkipReason, 'O2 WASM http_get -> host loopback requires loopback exemption', async () => {
-    const seenRequests: string[] = [];
-    const hostServer = createHttpServer((req, res) => {
-      seenRequests.push(req.url ?? '');
-      res.writeHead(200, { 'content-type': 'text/plain' });
-      res.end('host:' + req.url);
-    });
-    await new Promise<void>((resolveListen) => {
-      hostServer.listen(0, '127.0.0.1', () => resolveListen());
-    });
-    const port = (hostServer.address() as import('node:net').AddressInfo).port;
-
-    try {
-      ctx = await createIntegrationKernel({
-        runtimes: ['wasmvm', 'node'],
-        commandDirs: [C_BUILD_DIR, COMMANDS_DIR],
-      });
-      const noExemption = await ctx.kernel.exec(`http_get ${port} /blocked`);
-      expect(noExemption.exitCode).not.toBe(0);
-      expect(noExemption.stderr).toMatch(/EACCES|Bad address|Connection refused|connect/);
-      expect(seenRequests).toEqual([]);
-      await ctx.dispose();
-
-      ctx = await createIntegrationKernel({
-        runtimes: ['wasmvm', 'node'],
-        commandDirs: [C_BUILD_DIR, COMMANDS_DIR],
-        loopbackExemptPorts: [port],
-      });
-      const allowed = await ctx.kernel.exec(`http_get ${port} /allowed`);
-      expect(allowed.exitCode).toBe(0);
-      expect(allowed.stderr).not.toContain('socket error');
-      expect(allowed.stdout).toContain('body: host:/allowed');
-      expect(seenRequests).toEqual(['/allowed']);
-    } finally {
-      await new Promise<void>((resolveClose) => hostServer.close(() => resolveClose()));
-    }
-  });
-});
diff --git a/registry/tests/kernel/cross-runtime-pipes.test.ts b/registry/tests/kernel/cross-runtime-pipes.test.ts
deleted file mode 100644
index 4db8328b2..000000000
--- a/registry/tests/kernel/cross-runtime-pipes.test.ts
+++ /dev/null
@@ -1,57 +0,0 @@
-/**
- * Cross-runtime pipe tests.
- *
- * Tests kernel pipe infrastructure: FD allocation, pipe read/write,
- * SpawnOptions FD overrides, cross-driver data flow, and EOF propagation.
- *
- * Integration tests with real WasmVM+Node are skipped when WASM binary
- * is not built.
- *
- * NOTE: The kernel-level unit tests (MockRuntimeDriver, no WASM) are kept
- * in the legacy runtime repo. Only the WasmVM-dependent integration tests
- * are included here.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-  describeIf,
-  createIntegrationKernel,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-import type { Kernel } from './helpers.ts';
-
-// ---------------------------------------------------------------------------
-// Integration tests with real WasmVM + Node (skipped if WASM not built)
-// ---------------------------------------------------------------------------
-
-describeIf(!skipUnlessWasmBuilt(), 'cross-runtime pipes (WasmVM + Node)', () => {
-  let kernel: Kernel;
-  let dispose: () => Promise<void>;
-
-  afterEach(async () => {
-    await dispose?.();
-  });
-
-  it('WasmVM echo | cat pipe works', async () => {
-    ({ kernel, dispose } = await createIntegrationKernel({ runtimes: ['wasmvm'] }));
-    const result = await kernel.exec('echo hello | cat', { timeout: 15000 });
-    expect(result.stdout.trim()).toBe('hello');
-    expect(result.exitCode).toBe(0);
-  }, 30000);
-
-  it('WasmVM echo | node -e pipe works', async () => {
-    ({ kernel, dispose } = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] }));
-    const script = 'let d="";process.stdin.on("data",c=>d+=c);process.stdin.on("end",()=>process.stdout.write(d.toUpperCase()))';
-    const result = await kernel.exec(`echo hello | node -e '${script}'`, { timeout: 15000 });
-    expect(result.stdout.trim()).toBe('HELLO');
-    expect(result.exitCode).toBe(0);
-  }, 30000);
-
-  it('WasmVM echo | WasmVM wc -c pipe works', async () => {
-    ({ kernel, dispose } = await createIntegrationKernel({ runtimes: ['wasmvm'] }));
-    const result = await kernel.exec('echo hello | wc -c', { timeout: 15000 });
-    // "hello\n" is 6 bytes
-    expect(result.stdout.trim()).toBe('6');
-    expect(result.exitCode).toBe(0);
-  }, 30000);
-});
diff --git a/registry/tests/kernel/cross-runtime-terminal.test.ts b/registry/tests/kernel/cross-runtime-terminal.test.ts
deleted file mode 100644
index 5a4f14b74..000000000
--- a/registry/tests/kernel/cross-runtime-terminal.test.ts
+++ /dev/null
@@ -1,267 +0,0 @@
-/**
- * Cross-runtime terminal tests for the post-Python WasmVM + Node surface.
- *
- * Mounts WasmVM + Node into the same kernel and verifies interactive output
- * through TerminalHarness.
- *
- * Gated: WasmVM binaries must be built.
- *
- * Uses the registry-owned TerminalHarness exported through shared helpers.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-  describeIf,
-  createIntegrationKernel,
-  skipUnlessWasmBuilt,
-  TerminalHarness,
-} from './helpers.ts';
-import type { IntegrationKernelResult } from './helpers.ts';
-
-/** brush-shell interactive prompt. */
-const PROMPT = 'sh-0.4$ ';
-
-const wasmSkip = skipUnlessWasmBuilt();
-
-/**
- * Find a line in the screen output that exactly matches the expected text.
- * Excludes lines containing the command echo (prompt line).
- */
-function findOutputLine(screen: string, expected: string): string | undefined {
-  return screen.split('\n').find(
-    (l) => l.trim() === expected && !l.includes(PROMPT),
-  );
-}
-
-// ---------------------------------------------------------------------------
-// Node cross-runtime terminal tests
-// ---------------------------------------------------------------------------
-
-describeIf(!wasmSkip, 'cross-runtime terminal: node', () => {
-  let harness: TerminalHarness;
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await harness?.dispose();
-    await ctx?.dispose();
-  });
-
-  it('node -e stdout appears as actual output (not just command echo)', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    // Use XYZZY. Unique string that does NOT appear in the command text.
-    await harness.type('node -e "console.log(\'XYZZY\')"\n');
-    await harness.waitFor(PROMPT, 2, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    // Verify output on its own line (not just embedded in command echo)
-    expect(findOutputLine(screen, 'XYZZY')).toBeDefined();
-    // Verify prompt returned
-    const lines = screen.split('\n');
-    expect(lines[lines.length - 1]).toBe(PROMPT);
-  }, 15_000);
-
-  it('node -e multiple console.log lines appear in order', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    await harness.type('node -e "console.log(\'AAA\'); console.log(\'BBB\')"\n');
-    await harness.waitFor(PROMPT, 2, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(findOutputLine(screen, 'AAA')).toBeDefined();
-    expect(findOutputLine(screen, 'BBB')).toBeDefined();
-
-    // Verify order: AAA before BBB
-    const aaaIdx = screen.indexOf('AAA');
-    const bbbIdx = screen.indexOf('BBB');
-    // Both must appear after command echo
-    const promptIdx = screen.indexOf(PROMPT);
-    expect(aaaIdx).toBeGreaterThan(promptIdx);
-    expect(bbbIdx).toBeGreaterThan(aaaIdx);
-  }, 15_000);
-
-  it('diagnostic WARN output does not suppress real stdout', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    await harness.type('node -e "console.log(\'HELLO\')"\n');
-    await harness.waitFor(PROMPT, 2, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    // Some runtime combinations emit an incidental WARN line here while others
-    // do not. The contract is that stdout remains visible either way.
-    expect(findOutputLine(screen, 'HELLO')).toBeDefined();
-  }, 15_000);
-
-  it('^C during node -e. Shell survives and prompt returns', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    // Start a long-running node process
-    harness.shell.write('node -e "setTimeout(() => {}, 60000)"\n');
-
-    // Give it a moment to start, then send ^C
-    await new Promise((r) => setTimeout(r, 500));
-    harness.shell.write('\x03');
-
-    // Wait for prompt to return
-    await harness.waitFor(PROMPT, 2, 10_000);
-
-    // Verify shell is still alive. Type another command.
-    await harness.type('echo alive\n');
-    await harness.waitFor('alive', 1, 5_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen).toContain('alive');
-  }, 20_000);
-});
-
-// ---------------------------------------------------------------------------
-// Node kernel.exec() stdout tests
-// ---------------------------------------------------------------------------
-
-describeIf(!wasmSkip, 'cross-runtime exec: node', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await ctx?.dispose();
-  });
-
-  it('kernel.exec node -e stdout contains output', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "console.log(42)"');
-    expect(result.stdout).toContain('42');
-    expect(result.exitCode).toBe(0);
-  });
-
-  it('kernel.exec node -e multi-line stdout in order', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec(
-      'node -e "console.log(1); console.log(2)"',
-    );
-    const lines = result.stdout.split('\n').map((l: string) => l.trim()).filter(Boolean);
-    expect(lines).toContain('1');
-    expect(lines).toContain('2');
-    expect(lines.indexOf('1')).toBeLessThan(lines.indexOf('2'));
-  });
-
-  it('kernel.exec node -e large stdout does not truncate', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    // Generate >64KB of output (100 lines of 700 chars each = ~70KB)
-    const code = `for(let i=0;i<100;i++) console.log('L'+i+' '+'x'.repeat(700))`;
-    const result = await ctx.kernel.exec(`node -e "${code}"`);
-    // Verify first and last lines present
-    expect(result.stdout).toContain('L0 ');
-    expect(result.stdout).toContain('L99 ');
-    expect(result.exitCode).toBe(0);
-  }, 15_000);
-});
-
-// ---------------------------------------------------------------------------
-// Node kernel.exec() stderr tests
-// ---------------------------------------------------------------------------
-
-describeIf(!wasmSkip, 'cross-runtime exec: node stderr', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await ctx?.dispose();
-  });
-
-  it('kernel.exec node -e with undefined var returns ReferenceError on stderr', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "lskdjf"');
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toContain('ReferenceError');
-  });
-
-  it('kernel.exec node -e throw Error returns message on stderr', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "throw new Error(\'boom\')"');
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toContain('boom');
-  });
-
-  it('kernel.exec node -e with syntax error returns SyntaxError on stderr', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "({"');
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toContain('SyntaxError');
-  });
-
-  it('kernel.exec node -e console.error returns stderr', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "console.error(\'ERRMSG\')"');
-    expect(result.stderr).toContain('ERRMSG');
-    expect(result.exitCode).toBe(0);
-  });
-});
-
-// ---------------------------------------------------------------------------
-// Node cross-runtime terminal: stderr tests
-// ---------------------------------------------------------------------------
-
-describeIf(!wasmSkip, 'cross-runtime terminal: node stderr', () => {
-  let harness: TerminalHarness;
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await harness?.dispose();
-    await ctx?.dispose();
-  });
-
-  it('node -e with undefined var shows ReferenceError on terminal', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    await harness.type('node -e "lskdjf"\n');
-    await harness.waitFor(PROMPT, 2, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen).toContain('ReferenceError');
-  }, 15_000);
-
-  it('node -e throw Error shows error message on terminal', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    await harness.type('node -e "throw new Error(\'boom\')"\n');
-    await harness.waitFor(PROMPT, 2, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen).toContain('boom');
-  }, 15_000);
-
-  it('node -e syntax error shows SyntaxError on terminal', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    await harness.type('node -e "({"\n');
-    await harness.waitFor(PROMPT, 2, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen).toContain('SyntaxError');
-  }, 15_000);
-
-  it('stderr callback chain: NodeRuntimeDriver -> ctx.onStderr -> PTY slave', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    // console.error goes through onStdio -> ctx.onStderr -> PTY write
-    await harness.type('node -e "console.error(\'STDERRTEST\')"\n');
-    await harness.waitFor(PROMPT, 2, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen).toContain('STDERRTEST');
-  }, 15_000);
-});
diff --git a/registry/tests/kernel/ctrl-c-shell-behavior.test.ts b/registry/tests/kernel/ctrl-c-shell-behavior.test.ts
deleted file mode 100644
index 08af122ec..000000000
--- a/registry/tests/kernel/ctrl-c-shell-behavior.test.ts
+++ /dev/null
@@ -1,94 +0,0 @@
-/**
- * Ctrl+C at shell prompt behavior tests.
- *
- * Verifies that pressing Ctrl+C (SIGINT) at the interactive shell prompt:
- * - Echoes ^C and shows a fresh prompt
- * - Does NOT kill the shell process
- * - Discards any partial input on the current line
- * - Allows typing new commands afterward
- *
- * Uses real WasmVM brush-shell, gated by skipUnlessWasmBuilt().
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-  describeIf,
-  createIntegrationKernel,
-  skipUnlessWasmBuilt,
-  TerminalHarness,
-} from './helpers.ts';
-import type { IntegrationKernelResult } from './helpers.ts';
-
-const PROMPT = 'sh-0.4$ ';
-const wasmSkip = skipUnlessWasmBuilt();
-
-describeIf(!wasmSkip, 'Ctrl+C at shell prompt', () => {
-  let harness: TerminalHarness;
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await harness?.dispose();
-    await ctx?.dispose();
-  });
-
-  it('partial input + ^C shows ^C, discards input, fresh prompt', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    harness.shell.write('partia\x03');
-    await harness.waitFor(PROMPT, 2, 2_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen).toContain('^C');
-
-    // Fresh prompt on new line
-    const lines = screen.split('\n');
-    expect(lines[lines.length - 1]).toBe(PROMPT);
-  }, 10_000);
-
-  it('empty prompt + ^C shows ^C, fresh prompt, no error', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    harness.shell.write('\x03');
-    await harness.waitFor(PROMPT, 2, 2_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen).toContain('^C');
-  }, 10_000);
-
-  it('after ^C at prompt, shell accepts and executes the next command', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    // Send ^C, then a real command
-    harness.shell.write('partial\x03');
-    await harness.waitFor(PROMPT, 2, 2_000);
-
-    await harness.type('echo hello\n');
-    await harness.waitFor('hello', 1, 5_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen).toContain('hello');
-  }, 15_000);
-
-  it('multiple ^C in a row does not crash the shell', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-
-    // Rapid-fire ^C
-    harness.shell.write('\x03');
-    await harness.waitFor(PROMPT, 2, 2_000);
-    harness.shell.write('\x03');
-    await harness.waitFor(PROMPT, 3, 2_000);
-
-    // Shell still alive
-    await harness.type('echo still-alive\n');
-    await harness.waitFor('still-alive', 1, 5_000);
-  }, 15_000);
-});
diff --git a/registry/tests/kernel/dispose-behavior.test.ts b/registry/tests/kernel/dispose-behavior.test.ts
deleted file mode 100644
index 299b08e3f..000000000
--- a/registry/tests/kernel/dispose-behavior.test.ts
+++ /dev/null
@@ -1,78 +0,0 @@
-/**
- * Integration tests for kernel.dispose() with active processes.
- *
- * Verifies that dispose terminates running processes across WasmVM and Node
- * runtimes, cleans up after crashes, disposes timers, propagates pipe EOF,
- * and supports idempotent double-dispose.
- *
- * The pure kernel unit tests (MockRuntimeDriver, no WASM) remain in
- * the legacy runtime repo. Only WasmVM-dependent integration tests are here.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-  describeIf,
-  createKernel,
-  createNodeRuntime,
-  createIntegrationKernel,
-  skipUnlessWasmBuilt,
-  createInMemoryFileSystem,
-} from './helpers.ts';
-import type { Kernel } from './helpers.ts';
-import type { IntegrationKernelResult } from './helpers.ts';
-
-const skipReason = skipUnlessWasmBuilt();
-
-describeIf(!skipReason, 'dispose with active processes (integration)', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    if (ctx) await ctx.dispose();
-  });
-
-  it('dispose terminates active WasmVM sleep process within 5s', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-
-    // Spawn a long-running sleep. Would hang for 60s without dispose.
-    const proc = ctx.kernel.spawn('sleep', ['60']);
-    expect(proc.pid).toBeGreaterThan(0);
-
-    const start = Date.now();
-    await ctx.dispose();
-    const elapsed = Date.now() - start;
-
-    expect(elapsed).toBeLessThan(5000);
-  }, 10_000);
-
-  it('dispose terminates active Node setTimeout process within 5s', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    // Spawn a Node process that hangs for 60s
-    const proc = ctx.kernel.spawn('node', ['-e', 'setTimeout(()=>{},60000)']);
-    expect(proc.pid).toBeGreaterThan(0);
-
-    const start = Date.now();
-    await ctx.dispose();
-    const elapsed = Date.now() - start;
-
-    expect(elapsed).toBeLessThan(5000);
-  }, 10_000);
-
-  it('dispose terminates processes in BOTH WasmVM and Node simultaneously', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    // Spawn long-running processes in both runtimes
-    const wasmProc = ctx.kernel.spawn('sleep', ['60']);
-    const nodeProc = ctx.kernel.spawn('node', ['-e', 'setTimeout(()=>{},60000)']);
-
-    expect(wasmProc.pid).toBeGreaterThan(0);
-    expect(nodeProc.pid).toBeGreaterThan(0);
-    expect(wasmProc.pid).not.toBe(nodeProc.pid);
-
-    const start = Date.now();
-    await ctx.dispose();
-    const elapsed = Date.now() - start;
-
-    expect(elapsed).toBeLessThan(5000);
-  }, 10_000);
-});
diff --git a/registry/tests/kernel/e2e-concurrently.test.ts b/registry/tests/kernel/e2e-concurrently.test.ts
deleted file mode 100644
index 4d983eb42..000000000
--- a/registry/tests/kernel/e2e-concurrently.test.ts
+++ /dev/null
@@ -1,174 +0,0 @@
-/**
- * E2E test: concurrently package runs parallel processes through kernel.
- *
- * Verifies that concurrently spawns multiple child processes simultaneously
- * through the kernel, testing:
- *   1. Kernel process table concurrent PID allocation without conflicts
- *   2. Kernel command registry handling multiple simultaneous resolves
- *   3. WasmVM running multiple workers in parallel
- *   4. Kernel pipe multiplexing stdout from multiple processes
- *
- * Pre-installs concurrently on host via npm, then mounts NodeFileSystem
- * so the kernel finds the binary in node_modules/.bin/.
- */
-
-import { mkdtemp, rm, writeFile } from 'node:fs/promises';
-import { execSync } from 'node:child_process';
-import { tmpdir } from 'node:os';
-import path from 'node:path';
-import { afterAll, beforeAll, describe, expect, it } from 'vitest';
-import {
-  describeIf,
-  COMMANDS_DIR,
-  createKernel,
-  NodeFileSystem,
-  createWasmVmRuntime,
-  createNodeRuntime,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-
-const wasmSkip = skipUnlessWasmBuilt();
-
-/** Check if npm registry is reachable (5s timeout). */
-async function checkNetwork(): Promise<string | false> {
-  try {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), 5_000);
-    await fetch('https://registry.npmjs.org/', {
-      signal: controller.signal,
-      method: 'HEAD',
-    });
-    clearTimeout(timeout);
-    return false;
-  } catch {
-    return 'network not available (cannot reach npm registry)';
-  }
-}
-
-const skipReason = wasmSkip || (await checkNetwork());
-
-describeIf(!skipReason, 'e2e concurrently through kernel', () => {
-  let tempDir: string;
-
-  // Pre-install concurrently on host so kernel has node_modules available
-  beforeAll(async () => {
-    tempDir = await mkdtemp(path.join(tmpdir(), 'kernel-concurrently-'));
-
-    await writeFile(
-      path.join(tempDir, 'package.json'),
-      JSON.stringify({
-        name: 'test-concurrently',
-        private: true,
-        dependencies: { concurrently: '^8.0.0' },
-      }),
-    );
-
-    execSync('npm install --ignore-scripts', {
-      cwd: tempDir,
-      stdio: 'pipe',
-      timeout: 60_000,
-    });
-  }, 90_000);
-
-  afterAll(async () => {
-    if (tempDir) {
-      await rm(tempDir, { recursive: true, force: true });
-    }
-  });
-
-  /** Create kernel with NodeFileSystem rooted at temp dir. */
-  async function createConcurrentlyKernel() {
-    const vfs = new NodeFileSystem({ root: tempDir });
-    const kernel = createKernel({ filesystem: vfs, cwd: '/' });
-
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }),
-    );
-    await kernel.mount(createNodeRuntime());
-
-    return { kernel, dispose: () => kernel.dispose() };
-  }
-
-  it(
-    'concurrently runs two echo commands in parallel',
-    async () => {
-      const { kernel, dispose } = await createConcurrentlyKernel();
-
-      try {
-        const result = await kernel.exec(
-          'node /node_modules/concurrently/dist/bin/concurrently.js "echo hello" "echo world"',
-          { cwd: '/' },
-        );
-        expect(result.stdout).toContain('hello');
-        expect(result.stdout).toContain('world');
-      } finally {
-        await dispose();
-      }
-    },
-    30_000,
-  );
-
-  it(
-    'concurrently runs processes with shell operators',
-    async () => {
-      const { kernel, dispose } = await createConcurrentlyKernel();
-
-      try {
-        const result = await kernel.exec(
-          'node /node_modules/concurrently/dist/bin/concurrently.js "echo one && echo two" "echo three"',
-          { cwd: '/' },
-        );
-        expect(result.stdout).toContain('one');
-        expect(result.stdout).toContain('two');
-        expect(result.stdout).toContain('three');
-      } finally {
-        await dispose();
-      }
-    },
-    30_000,
-  );
-
-  it(
-    'concurrently --kill-others-on-fail returns non-zero on child failure',
-    async () => {
-      const { kernel, dispose } = await createConcurrentlyKernel();
-
-      try {
-        const result = await kernel.exec(
-          'node /node_modules/concurrently/dist/bin/concurrently.js --success all --kill-others-on-fail "echo success" "exit 1"',
-          { cwd: '/' },
-        );
-        expect(result.exitCode).not.toBe(0);
-      } finally {
-        await dispose();
-      }
-    },
-    30_000,
-  );
-
-  it(
-    'concurrent process spawns get unique PIDs',
-    async () => {
-      const { kernel, dispose } = await createConcurrentlyKernel();
-
-      try {
-        // Spawn multiple processes concurrently through kernel
-        const procs = [
-          kernel.spawn('echo', ['pid-a'], { cwd: '/' }),
-          kernel.spawn('echo', ['pid-b'], { cwd: '/' }),
-          kernel.spawn('echo', ['pid-c'], { cwd: '/' }),
-        ];
-
-        const pids = procs.map((p) => p.pid);
-        const uniquePids = new Set(pids);
-        expect(uniquePids.size).toBe(3);
-
-        // Wait for all to complete
-        await Promise.all(procs.map((p) => p.wait()));
-      } finally {
-        await dispose();
-      }
-    },
-    30_000,
-  );
-});
diff --git a/registry/tests/kernel/e2e-nextjs-build.test.ts b/registry/tests/kernel/e2e-nextjs-build.test.ts
deleted file mode 100644
index cd58224c1..000000000
--- a/registry/tests/kernel/e2e-nextjs-build.test.ts
+++ /dev/null
@@ -1,122 +0,0 @@
-/**
- * E2E test: Next.js build through kernel.
- *
- * Verifies that 'next build' completes through the kernel on the repo-owned
- * Next.js fixture, proving the kernel can handle a complex real-world
- * build pipeline:
- *   1. Host-side package install populates node_modules
- *   2. NodeFileSystem mounts the project into the kernel
- *   3. kernel.exec('node /run-next-build.cjs') runs Next.js through kernel
- *   4. Build output directory exists after completion
- *
- * Known workarounds applied:
- *   - run-next-build.cjs preloads the fixture's WASM-compatible Next shim
- *     before invoking Next's build API.
- *   - The checked-in fixture writes normal Next.js build output to `.next`
- */
-
-import { cp, mkdtemp, rm } from 'node:fs/promises';
-import { execSync } from 'node:child_process';
-import { tmpdir } from 'node:os';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { afterAll, beforeAll, describe, expect, it } from 'vitest';
-import {
-  describeIf,
-  COMMANDS_DIR,
-  createKernel,
-  NodeFileSystem,
-  createWasmVmRuntime,
-  createNodeRuntime,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-
-const wasmSkip = skipUnlessWasmBuilt();
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-const NEXTJS_FIXTURE_DIR = path.resolve(__dirname, '../projects/nextjs-pass');
-
-/** Check if npm registry is reachable (5s timeout). */
-async function checkNetwork(): Promise<string | false> {
-  try {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), 5_000);
-    await fetch('https://registry.npmjs.org/', {
-      signal: controller.signal,
-      method: 'HEAD',
-    });
-    clearTimeout(timeout);
-    return false;
-  } catch {
-    return 'network not available (cannot reach npm registry)';
-  }
-}
-
-const skipReason = wasmSkip || (await checkNetwork());
-
-describeIf(!skipReason, 'e2e Next.js build through kernel', () => {
-  let tempDir: string;
-
-  // Copy the checked-in fixture so the build can mutate /.next without touching the repo.
-  beforeAll(async () => {
-    tempDir = await mkdtemp(path.join(tmpdir(), 'kernel-nextjs-build-'));
-    await cp(NEXTJS_FIXTURE_DIR, tempDir, { recursive: true });
-
-    // Match the registry fixture install path instead of doing a slow ad hoc npm install.
-    execSync('pnpm install --ignore-workspace --prefer-offline', {
-      cwd: tempDir,
-      stdio: 'pipe',
-      timeout: 60_000,
-    });
-  }, 90_000);
-
-  afterAll(async () => {
-    if (tempDir) {
-      await rm(tempDir, { recursive: true, force: true });
-    }
-  });
-
-  it(
-    'next build produces output directory',
-    async () => {
-      const vfs = new NodeFileSystem({ root: tempDir });
-      const kernel = createKernel({ filesystem: vfs, cwd: '/' });
-
-      await kernel.mount(
-        createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }),
-      );
-      await kernel.mount(createNodeRuntime());
-
-      try {
-        const result = await kernel.exec('node /run-next-build.cjs', {
-          cwd: '/',
-          env: {
-            NEXT_TELEMETRY_DISABLED: '1',
-          },
-        });
-
-        expect(
-          result.exitCode,
-          `stdout:\n${result.stdout}\nstderr:\n${result.stderr}`,
-        ).toBe(0);
-
-        // Some fixtures may emit a static export, but the checked-in Next.js
-        // kernel fixture currently writes its build artifacts to `.next`.
-        const outExists = await vfs
-          .stat('/out')
-          .then(() => true)
-          .catch(() => false);
-
-        // Fallback: check .next/ if out/ doesn't exist (non-export mode)
-        const dotNextExists = await vfs
-          .stat('/.next')
-          .then(() => true)
-          .catch(() => false);
-
-        expect(outExists || dotNextExists).toBe(true);
-      } finally {
-        await kernel.dispose();
-      }
-    },
-    120_000,
-  );
-});
diff --git a/registry/tests/kernel/e2e-npm-install.test.ts b/registry/tests/kernel/e2e-npm-install.test.ts
deleted file mode 100644
index 7a8365901..000000000
--- a/registry/tests/kernel/e2e-npm-install.test.ts
+++ /dev/null
@@ -1,101 +0,0 @@
-/**
- * E2E test: npm install a package through kernel.
- *
- * Verifies the full package installation flow:
- *   1. Write package.json with left-pad dependency to temp dir
- *   2. kernel.exec('npm install') downloads and extracts the package
- *   3. Installed package is usable via require() in kernel Node
- *
- * Uses NodeFileSystem rooted at a temp directory so npm's filesystem
- * operations (mkdir, symlink, writeFile) hit the real host filesystem.
- */
-
-import { mkdtemp, rm, writeFile } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import path from 'node:path';
-import { describe, expect, it } from 'vitest';
-import {
-  describeIf,
-  COMMANDS_DIR,
-  createKernel,
-  NodeFileSystem,
-  createWasmVmRuntime,
-  createNodeRuntime,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-
-const wasmSkip = skipUnlessWasmBuilt();
-
-/** Check if npm registry is reachable (5s timeout). */
-async function checkNetwork(): Promise<string | false> {
-  try {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), 5_000);
-    await fetch('https://registry.npmjs.org/', {
-      signal: controller.signal,
-      method: 'HEAD',
-    });
-    clearTimeout(timeout);
-    return false;
-  } catch {
-    return 'network not available (cannot reach npm registry)';
-  }
-}
-
-const skipReason = wasmSkip || (await checkNetwork());
-
-describeIf(!skipReason, 'e2e npm install through kernel', () => {
-  it(
-    'npm install installs left-pad and it is usable by node',
-    async () => {
-      const tempDir = await mkdtemp(
-        path.join(tmpdir(), 'kernel-npm-install-'),
-      );
-
-      try {
-        // Write minimal package.json to temp dir
-        await writeFile(
-          path.join(tempDir, 'package.json'),
-          JSON.stringify({
-            name: 'test-npm-install',
-            private: true,
-            dependencies: { 'left-pad': '1.3.0' },
-          }),
-        );
-
-        // Kernel with NodeFileSystem rooted at temp dir
-        const vfs = new NodeFileSystem({ root: tempDir });
-        const kernel = createKernel({ filesystem: vfs, cwd: '/' });
-
-        await kernel.mount(
-          createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }),
-        );
-        await kernel.mount(createNodeRuntime());
-
-        try {
-          // Run npm install through kernel
-          const installResult = await kernel.exec('npm install', {
-            cwd: '/',
-          });
-          expect(installResult.exitCode).toBe(0);
-
-          // Verify node_modules/left-pad/ exists in the VFS
-          const stat = await vfs.stat('/node_modules/left-pad');
-          expect(stat.isDirectory).toBe(true);
-
-          // Verify installed package is usable via require()
-          const result = await kernel.exec(
-            `node -e "console.log(require('left-pad')('hi', 10))"`,
-            { cwd: '/' },
-          );
-          expect(result.stdout.trimEnd()).toBe('        hi');
-        } finally {
-          await kernel.dispose();
-        }
-      } finally {
-        await rm(tempDir, { recursive: true, force: true });
-      }
-    },
-    30_000,
-  );
-});
diff --git a/registry/tests/kernel/e2e-npm-lifecycle.test.ts b/registry/tests/kernel/e2e-npm-lifecycle.test.ts
deleted file mode 100644
index 3f8cb9ce4..000000000
--- a/registry/tests/kernel/e2e-npm-lifecycle.test.ts
+++ /dev/null
@@ -1,151 +0,0 @@
-/**
- * E2E test: npm postinstall lifecycle scripts through kernel.
- *
- * Verifies that npm lifecycle hooks (preinstall, postinstall) route through
- * the kernel command registry to WasmVM shell:
- *   1. npm install reads package.json lifecycle scripts
- *   2. npm spawns 'sh -c "echo ..."' for each lifecycle hook
- *   3. child_process.spawn routes through kernel -> WasmVM shell
- *   4. Shell commands write marker files to kernel VFS
- *
- * Uses NodeFileSystem rooted at a temp directory so npm's filesystem
- * operations hit the real host filesystem.
- */
-
-import { mkdtemp, rm, writeFile, mkdir } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import path from 'node:path';
-import { describe, expect, it } from 'vitest';
-import {
-  describeIf,
-  COMMANDS_DIR,
-  createKernel,
-  NodeFileSystem,
-  createWasmVmRuntime,
-  createNodeRuntime,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-
-const wasmSkip = skipUnlessWasmBuilt();
-
-/** Check if npm registry is reachable (5s timeout). */
-async function checkNetwork(): Promise<string | false> {
-  try {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), 5_000);
-    await fetch('https://registry.npmjs.org/', {
-      signal: controller.signal,
-      method: 'HEAD',
-    });
-    clearTimeout(timeout);
-    return false;
-  } catch {
-    return 'network not available (cannot reach npm registry)';
-  }
-}
-
-const skipReason = wasmSkip || (await checkNetwork());
-
-describeIf(!skipReason, 'e2e npm lifecycle scripts through kernel', () => {
-  it(
-    'postinstall script writes marker file during npm install',
-    async () => {
-      const tempDir = await mkdtemp(
-        path.join(tmpdir(), 'kernel-npm-lifecycle-'),
-      );
-
-      try {
-        // Create /tmp inside the project root so lifecycle scripts can write there
-        await mkdir(path.join(tempDir, 'tmp'), { recursive: true });
-
-        // Package.json with postinstall lifecycle script
-        await writeFile(
-          path.join(tempDir, 'package.json'),
-          JSON.stringify({
-            name: 'test-npm-lifecycle',
-            private: true,
-            scripts: {
-              postinstall: 'echo POSTINSTALL_RAN > /tmp/marker.txt',
-            },
-            dependencies: { 'left-pad': '1.3.0' },
-          }),
-        );
-
-        // Kernel with NodeFileSystem rooted at temp dir
-        const vfs = new NodeFileSystem({ root: tempDir });
-        const kernel = createKernel({ filesystem: vfs, cwd: '/' });
-
-        await kernel.mount(
-          createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }),
-        );
-        await kernel.mount(createNodeRuntime());
-
-        try {
-          const result = await kernel.exec('npm install', { cwd: '/' });
-          expect(result.exitCode).toBe(0);
-
-          // Verify postinstall marker was written through WasmVM shell
-          const markerBytes = await vfs.readFile('/tmp/marker.txt');
-          const marker = new TextDecoder().decode(markerBytes).trim();
-          expect(marker).toBe('POSTINSTALL_RAN');
-        } finally {
-          await kernel.dispose();
-        }
-      } finally {
-        await rm(tempDir, { recursive: true, force: true });
-      }
-    },
-    45_000,
-  );
-
-  it(
-    'preinstall script writes marker file before dependencies are fetched',
-    async () => {
-      const tempDir = await mkdtemp(
-        path.join(tmpdir(), 'kernel-npm-lifecycle-pre-'),
-      );
-
-      try {
-        // Create /tmp inside the project root
-        await mkdir(path.join(tempDir, 'tmp'), { recursive: true });
-
-        // Package.json with preinstall lifecycle script
-        await writeFile(
-          path.join(tempDir, 'package.json'),
-          JSON.stringify({
-            name: 'test-npm-lifecycle-pre',
-            private: true,
-            scripts: {
-              preinstall: 'echo PREINSTALL_RAN > /tmp/pre-marker.txt',
-            },
-            dependencies: { 'left-pad': '1.3.0' },
-          }),
-        );
-
-        // Kernel with NodeFileSystem rooted at temp dir
-        const vfs = new NodeFileSystem({ root: tempDir });
-        const kernel = createKernel({ filesystem: vfs, cwd: '/' });
-
-        await kernel.mount(
-          createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }),
-        );
-        await kernel.mount(createNodeRuntime());
-
-        try {
-          const result = await kernel.exec('npm install', { cwd: '/' });
-          expect(result.exitCode).toBe(0);
-
-          // Verify preinstall marker was written through WasmVM shell
-          const markerBytes = await vfs.readFile('/tmp/pre-marker.txt');
-          const marker = new TextDecoder().decode(markerBytes).trim();
-          expect(marker).toBe('PREINSTALL_RAN');
-        } finally {
-          await kernel.dispose();
-        }
-      } finally {
-        await rm(tempDir, { recursive: true, force: true });
-      }
-    },
-    45_000,
-  );
-});
diff --git a/registry/tests/kernel/e2e-npm-scripts.test.ts b/registry/tests/kernel/e2e-npm-scripts.test.ts
deleted file mode 100644
index 97a8b5a32..000000000
--- a/registry/tests/kernel/e2e-npm-scripts.test.ts
+++ /dev/null
@@ -1,102 +0,0 @@
-/**
- * E2E test: npm run scripts execute shell commands through kernel.
- *
- * Exercises the full round-trip: kernel.exec('npm run greet')
- *   -> sh -c 'npm run greet'  (WasmVM shell)
- *   -> proc_spawn('npm', ...)  (kernel routes to Node driver)
- *   -> npm reads package.json, spawns 'sh -c "echo hello world"'
- *   -> child_process routes through kernel -> WasmVM shell -> output
- */
-
-import { describe, expect, it } from 'vitest';
-import { describeIf, createIntegrationKernel, skipUnlessWasmBuilt } from './helpers.ts';
-
-const skipReason = skipUnlessWasmBuilt();
-
-describeIf(!skipReason, 'e2e npm run scripts through kernel', () => {
-  it('npm run greet echoes hello world', async () => {
-    const { kernel, dispose } = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-    });
-
-    try {
-      await kernel.writeFile(
-        '/package.json',
-        JSON.stringify({
-          name: 'test-npm-scripts',
-          scripts: { greet: 'echo hello world' },
-        }),
-      );
-
-      const result = await kernel.exec('npm run greet', { cwd: '/' });
-      expect(result.stdout).toContain('hello world');
-    } finally {
-      await dispose();
-    }
-  }, 30_000);
-
-  it('npm run count runs sequential shell commands (&&)', async () => {
-    const { kernel, dispose } = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-    });
-
-    try {
-      await kernel.writeFile(
-        '/package.json',
-        JSON.stringify({
-          name: 'test-npm-scripts',
-          scripts: { count: 'echo one && echo two && echo three' },
-        }),
-      );
-
-      const result = await kernel.exec('npm run count', { cwd: '/' });
-      expect(result.stdout).toContain('one');
-      expect(result.stdout).toContain('two');
-      expect(result.stdout).toContain('three');
-    } finally {
-      await dispose();
-    }
-  }, 30_000);
-
-  it('npm run env-check passes npm env variables through shell', async () => {
-    const { kernel, dispose } = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-    });
-
-    try {
-      await kernel.writeFile(
-        '/package.json',
-        JSON.stringify({
-          name: 'my-cool-project',
-          scripts: { 'env-check': 'echo $npm_package_name' },
-        }),
-      );
-
-      const result = await kernel.exec('npm run env-check', { cwd: '/' });
-      expect(result.stdout).toContain('my-cool-project');
-    } finally {
-      await dispose();
-    }
-  }, 30_000);
-
-  it('npm run nonexistent returns non-zero exit code', async () => {
-    const { kernel, dispose } = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-    });
-
-    try {
-      await kernel.writeFile(
-        '/package.json',
-        JSON.stringify({
-          name: 'test-npm-scripts',
-          scripts: {},
-        }),
-      );
-
-      const result = await kernel.exec('npm run nonexistent', { cwd: '/' });
-      expect(result.exitCode).not.toBe(0);
-    } finally {
-      await dispose();
-    }
-  }, 30_000);
-});
diff --git a/registry/tests/kernel/e2e-npm-suite.test.ts b/registry/tests/kernel/e2e-npm-suite.test.ts
deleted file mode 100644
index e9f5580bf..000000000
--- a/registry/tests/kernel/e2e-npm-suite.test.ts
+++ /dev/null
@@ -1,344 +0,0 @@
-/**
- * E2E test suite: npm operations through kernel.
- *
- * Covers the core npm workflow: init, install, list, run, npx.
- * Tests are split into offline (no network) and online (network-dependent)
- * sections, with network availability guarded by a registry check.
- *
- * Known limitation: npm commands that trigger the update-notifier / pacote /
- * @sigstore/sign module chain fail in the V8 isolate sandbox because
- * http2.constants is not yet polyfilled. This affects npm install, npm init -y,
- * and npx. These tests are guarded and will pass once http2 bridge support
- * is added.
- */
-
-import { existsSync } from 'node:fs';
-import { mkdtemp, rm, writeFile } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import path from 'node:path';
-import { describe, expect, it } from 'vitest';
-import {
-  describeIf,
-  COMMANDS_DIR,
-  createKernel,
-  createWasmVmRuntime,
-  createNodeRuntime,
-  createIntegrationKernel,
-  NodeFileSystem,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-
-const wasmSkip = skipUnlessWasmBuilt();
-
-/** Check if npm registry is reachable (5s timeout). */
-async function checkNetwork(): Promise<string | false> {
-  try {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), 5_000);
-    await fetch('https://registry.npmjs.org/', {
-      signal: controller.signal,
-      method: 'HEAD',
-    });
-    clearTimeout(timeout);
-    return false;
-  } catch {
-    return 'network not available (cannot reach npm registry)';
-  }
-}
-
-/**
- * Check if npm install works in the kernel sandbox.
- * npm's pacote -> @sigstore/sign chain requires http2.constants which is not
- * yet polyfilled. Returns a skip reason if npm install is broken.
- */
-async function checkNpmInstallWorks(): Promise<string | false> {
-  if (wasmSkip) return wasmSkip;
-  const tempDir = await mkdtemp(path.join(tmpdir(), 'kernel-npm-probe-'));
-  try {
-    await writeFile(
-      path.join(tempDir, 'package.json'),
-      JSON.stringify({
-        name: 'npm-probe',
-        private: true,
-        dependencies: { 'left-pad': '1.3.0' },
-      }),
-    );
-    const vfs = new NodeFileSystem({ root: tempDir });
-    const kernel = createKernel({ filesystem: vfs, cwd: '/' });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }),
-    );
-    await kernel.mount(createNodeRuntime());
-    try {
-      const result = await kernel.exec('npm install', { cwd: '/' });
-      if (existsSync(path.join(tempDir, 'node_modules', 'left-pad'))) {
-        return false;
-      }
-      return 'npm install fails in sandbox (http2/@sigstore/sign not polyfilled)';
-    } finally {
-      await kernel.dispose();
-    }
-  } finally {
-    await rm(tempDir, { recursive: true, force: true });
-  }
-}
-
-// --- Offline tests (no network required) ---
-
-describeIf(!wasmSkip, 'npm suite - offline', () => {
-  it('npm init -y creates package.json with default values', async () => {
-    const tempDir = await mkdtemp(path.join(tmpdir(), 'kernel-npm-init-'));
-
-    try {
-      const vfs = new NodeFileSystem({ root: tempDir });
-      const kernel = createKernel({ filesystem: vfs, cwd: '/' });
-
-      await kernel.mount(
-        createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }),
-      );
-      await kernel.mount(createNodeRuntime());
-
-      try {
-        await kernel.exec('npm init -y', { cwd: '/' });
-
-        const exists = await vfs.exists('/package.json');
-        expect(exists).toBe(true);
-
-        const content = await vfs.readTextFile('/package.json');
-        const pkg = JSON.parse(content);
-        expect(pkg).toHaveProperty('name');
-        expect(pkg).toHaveProperty('version');
-        expect(pkg.version).toBe('1.0.0');
-      } finally {
-        await kernel.dispose();
-      }
-    } finally {
-      await rm(tempDir, { recursive: true, force: true });
-    }
-  }, 30_000);
-
-  it('npm list shows installed packages (empty project)', async () => {
-    const { kernel, dispose } = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-    });
-
-    try {
-      await kernel.writeFile(
-        '/package.json',
-        JSON.stringify({
-          name: 'test-npm-list',
-          version: '1.0.0',
-          private: true,
-        }),
-      );
-
-      const result = await kernel.exec('npm list', { cwd: '/' });
-      expect(result.stdout).toContain('test-npm-list');
-    } finally {
-      await dispose();
-    }
-  }, 30_000);
-
-  it('npm run test executes script from package.json', async () => {
-    const { kernel, dispose } = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-    });
-
-    try {
-      await kernel.writeFile(
-        '/package.json',
-        JSON.stringify({
-          name: 'test-npm-run',
-          scripts: { test: 'echo npm-test-output' },
-        }),
-      );
-
-      const result = await kernel.exec('npm run test', { cwd: '/' });
-      expect(result.stdout).toContain('npm-test-output');
-    } finally {
-      await dispose();
-    }
-  }, 30_000);
-
-  it('npm run with missing script shows error and hint', async () => {
-    const { kernel, dispose } = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-    });
-
-    try {
-      await kernel.writeFile(
-        '/package.json',
-        JSON.stringify({
-          name: 'test-npm-run-missing',
-          scripts: {
-            build: 'echo building',
-            start: 'echo starting',
-          },
-        }),
-      );
-
-      const result = await kernel.exec('npm run nonexistent', { cwd: '/' });
-      expect(result.exitCode).not.toBe(0);
-
-      // npm reports "Missing script" and suggests running "npm run" to list scripts
-      const output = result.stdout + result.stderr;
-      expect(output).toMatch(/Missing script/i);
-      expect(output).toContain('npm run');
-    } finally {
-      await dispose();
-    }
-  }, 30_000);
-});
-
-// --- Online tests (require network + working npm install) ---
-
-const networkSkip = await checkNetwork();
-const npmInstallSkip = wasmSkip || networkSkip || (await checkNpmInstallWorks());
-
-describeIf(!npmInstallSkip, 'npm suite - online', () => {
-  it(
-    'npm install left-pad installs package to node_modules',
-    async () => {
-      const tempDir = await mkdtemp(
-        path.join(tmpdir(), 'kernel-npm-install-suite-'),
-      );
-
-      try {
-        await writeFile(
-          path.join(tempDir, 'package.json'),
-          JSON.stringify({
-            name: 'test-npm-install-suite',
-            private: true,
-            dependencies: { 'left-pad': '1.3.0' },
-          }),
-        );
-
-        const vfs = new NodeFileSystem({ root: tempDir });
-        const kernel = createKernel({ filesystem: vfs, cwd: '/' });
-
-        await kernel.mount(
-          createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }),
-        );
-        await kernel.mount(createNodeRuntime());
-
-        try {
-          const installResult = await kernel.exec('npm install', {
-            cwd: '/',
-          });
-
-          // Verify node_modules/left-pad/ exists
-          const stat = await vfs.stat('/node_modules/left-pad');
-          expect(stat.isDirectory).toBe(true);
-        } finally {
-          await kernel.dispose();
-        }
-      } finally {
-        await rm(tempDir, { recursive: true, force: true });
-      }
-    },
-    30_000,
-  );
-
-  it(
-    'npm list shows installed packages after install',
-    async () => {
-      const tempDir = await mkdtemp(
-        path.join(tmpdir(), 'kernel-npm-list-suite-'),
-      );
-
-      try {
-        await writeFile(
-          path.join(tempDir, 'package.json'),
-          JSON.stringify({
-            name: 'test-npm-list-suite',
-            private: true,
-            dependencies: { 'left-pad': '1.3.0' },
-          }),
-        );
-
-        const vfs = new NodeFileSystem({ root: tempDir });
-        const kernel = createKernel({ filesystem: vfs, cwd: '/' });
-
-        await kernel.mount(
-          createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }),
-        );
-        await kernel.mount(createNodeRuntime());
-
-        try {
-          // Install first
-          await kernel.exec('npm install', { cwd: '/' });
-
-          // npm list should show left-pad
-          const listResult = await kernel.exec('npm list', { cwd: '/' });
-          expect(listResult.stdout).toContain('left-pad');
-        } finally {
-          await kernel.dispose();
-        }
-      } finally {
-        await rm(tempDir, { recursive: true, force: true });
-      }
-    },
-    30_000,
-  );
-
-  it(
-    'npx -y cowsay hello runs cowsay without prior install',
-    async () => {
-      const { kernel, dispose } = await createIntegrationKernel({
-        runtimes: ['wasmvm', 'node'],
-      });
-
-      try {
-        const result = await kernel.exec('npx -y cowsay hello', { cwd: '/' });
-        expect(result.stdout).toContain('hello');
-      } finally {
-        await dispose();
-      }
-    },
-    45_000,
-  );
-});
-
-// --- Error handling ---
-
-describeIf(!wasmSkip, 'npm suite - error handling', () => {
-  it(
-    'npm install with unreachable registry returns clear error',
-    async () => {
-      const { kernel, dispose } = await createIntegrationKernel({
-        runtimes: ['wasmvm', 'node'],
-      });
-
-      try {
-        await kernel.writeFile(
-          '/package.json',
-          JSON.stringify({
-            name: 'test-npm-no-network',
-            private: true,
-            dependencies: { 'left-pad': '1.3.0' },
-          }),
-        );
-
-        // Use an unreachable registry to simulate no network
-        const result = await kernel.exec(
-          [
-            'npm install',
-            '--registry=http://127.0.0.1:1',
-            '--fetch-retries=0',
-            '--fetch-timeout=1000',
-            '--fetch-retry-mintimeout=1',
-            '--fetch-retry-maxtimeout=1',
-          ].join(' '),
-          { cwd: '/' },
-        );
-        expect(result.exitCode).not.toBe(0);
-
-        const output = result.stdout + result.stderr;
-        expect(output).toMatch(/ERR|error|ECONNREFUSED|fetch failed/i);
-      } finally {
-        await dispose();
-      }
-    },
-    30_000,
-  );
-});
diff --git a/registry/tests/kernel/e2e-npm-version-init.test.ts b/registry/tests/kernel/e2e-npm-version-init.test.ts
deleted file mode 100644
index 034c4e166..000000000
--- a/registry/tests/kernel/e2e-npm-version-init.test.ts
+++ /dev/null
@@ -1,69 +0,0 @@
-/**
- * E2E test: npm/npx version and npm init through kernel.
- *
- * Verifies:
- *   - npm --version outputs valid semver
- *   - npx --version outputs valid semver
- *   - npm init -y creates package.json with default values
- *
- * These are offline tests (no network required).
- *
- * Note: kernel.exec() wraps commands in sh -c; brush-shell returns exit
- * code 17 for spawned children. Test stdout content, not exit code.
- */
-
-import { describe, expect, it } from 'vitest';
-import { describeIf, createIntegrationKernel, skipUnlessWasmBuilt } from './helpers.ts';
-
-const skipReason = skipUnlessWasmBuilt();
-
-describeIf(!skipReason, 'e2e npm/npx version and init', () => {
-  it('npm --version returns valid semver', async () => {
-    const { kernel, dispose } = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-    });
-
-    try {
-      const result = await kernel.exec('npm --version', { cwd: '/' });
-      const version = result.stdout.trim();
-      // Valid semver: major.minor.patch (optionally with pre-release)
-      expect(version).toMatch(/\d+\.\d+\.\d+/);
-    } finally {
-      await dispose();
-    }
-  }, 30_000);
-
-  it('npx --version returns valid semver', async () => {
-    const { kernel, dispose } = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-    });
-
-    try {
-      const result = await kernel.exec('npx --version', { cwd: '/' });
-      const version = result.stdout.trim();
-      expect(version).toMatch(/\d+\.\d+\.\d+/);
-    } finally {
-      await dispose();
-    }
-  }, 30_000);
-
-  it('npm init -y creates package.json with default values', async () => {
-    const { kernel, vfs, dispose } = await createIntegrationKernel({
-      runtimes: ['wasmvm', 'node'],
-    });
-
-    try {
-      await kernel.exec('npm init -y', { cwd: '/' });
-
-      const exists = await vfs.exists('/package.json');
-      expect(exists).toBe(true);
-
-      const content = await vfs.readTextFile('/package.json');
-      const pkg = JSON.parse(content);
-      expect(pkg).toHaveProperty('name');
-      expect(pkg).toHaveProperty('version');
-    } finally {
-      await dispose();
-    }
-  }, 30_000);
-});
diff --git a/registry/tests/kernel/e2e-npx-and-pipes.test.ts b/registry/tests/kernel/e2e-npx-and-pipes.test.ts
deleted file mode 100644
index e0f206f9b..000000000
--- a/registry/tests/kernel/e2e-npx-and-pipes.test.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-/**
- * E2E test: npx execution and pipe-based Node eval through kernel.
- *
- * npx tests verify the npm/npx command resolution chain through the kernel
- * command registry. Pipe tests exercise the WasmVM -> kernel PipeManager -> Node
- * stdin path, complementing the unit-level pipe tests.
- */
-
-import { describe, expect, it } from 'vitest';
-import {
-  describeIf,
-  createIntegrationKernel,
-  itIf,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-
-const skipReason = skipUnlessWasmBuilt();
-const networkSkip = await checkNetwork();
-
-/** Check if npm registry is reachable (5s timeout). */
-async function checkNetwork(): Promise<string | false> {
-  try {
-    const controller = new AbortController();
-    const timeout = setTimeout(() => controller.abort(), 5_000);
-    await fetch('https://registry.npmjs.org/', {
-      signal: controller.signal,
-      method: 'HEAD',
-    });
-    clearTimeout(timeout);
-    return false;
-  } catch {
-    return 'network not available (cannot reach npm registry)';
-  }
-}
-
-describeIf(!skipReason, 'e2e npx and pipes through kernel', () => {
-  describe('npx execution', () => {
-    itIf(!networkSkip, 'npx semver outputs parsed version', async () => {
-      const { kernel, dispose } = await createIntegrationKernel({
-        runtimes: ['wasmvm', 'node'],
-      });
-
-      try {
-        const result = await kernel.exec('npx -y semver 1.2.3', { cwd: '/' });
-        expect(result.stdout.trim()).toBe('1.2.3');
-      } finally {
-        await dispose();
-      }
-    }, 30_000);
-  });
-
-  describe('pipe-based Node eval', () => {
-    it('echo piped to node -e evaluates expression', async () => {
-      const { kernel, dispose } = await createIntegrationKernel({
-        runtimes: ['wasmvm', 'node'],
-      });
-
-      try {
-        const result = await kernel.exec(
-          `echo 1+2 | node -e "process.stdin.on('data', d => console.log(eval(d.toString().trim())))"`,
-          { cwd: '/' },
-        );
-        expect(result.stdout.trim()).toBe('3');
-      } finally {
-        await dispose();
-      }
-    }, 30_000);
-
-    it('echo piped to node -e with end event transforms to uppercase', async () => {
-      const { kernel, dispose } = await createIntegrationKernel({
-        runtimes: ['wasmvm', 'node'],
-      });
-
-      try {
-        const result = await kernel.exec(
-          `echo hello world | node -e "let d=''; process.stdin.on('data',c=>d+=c); process.stdin.on('end',()=>console.log(d.trim().toUpperCase()))"`,
-          { cwd: '/' },
-        );
-        expect(result.stdout.trim()).toBe('HELLO WORLD');
-      } finally {
-        await dispose();
-      }
-    }, 30_000);
-
-    it('cat VFS file piped to node -e processes file content', async () => {
-      const { kernel, dispose } = await createIntegrationKernel({
-        runtimes: ['wasmvm', 'node'],
-      });
-
-      try {
-        // Pre-write data file to VFS
-        await kernel.mkdir('/tmp');
-        await kernel.writeFile('/tmp/data.txt', 'hello from file');
-
-        const result = await kernel.exec(
-          `cat /tmp/data.txt | node -e "let d=''; process.stdin.on('data',c=>d+=c); process.stdin.on('end',()=>console.log(d.trim().toUpperCase()))"`,
-          { cwd: '/' },
-        );
-        expect(result.stdout.trim()).toBe('HELLO FROM FILE');
-      } finally {
-        await dispose();
-      }
-    }, 30_000);
-  });
-});
diff --git a/registry/tests/kernel/e2e-project-matrix.test.ts b/registry/tests/kernel/e2e-project-matrix.test.ts
deleted file mode 100644
index 138ebf782..000000000
--- a/registry/tests/kernel/e2e-project-matrix.test.ts
+++ /dev/null
@@ -1,498 +0,0 @@
-/**
- * E2E project-matrix test: run existing fixture projects through the kernel.
- *
- * For each fixture in the repo-owned tests/projects/ directory:
- *   1. Prepare project (npm install, cached by content hash)
- *   2. Run entry via host Node (baseline)
- *   3. Run entry via kernel (NodeFileSystem rooted at project dir, WasmVM + Node)
- *   4. Compare output parity
- *
- * Adapted from the legacy runtime suite to use package imports and
- * repo-local fixtures.
- */
-
-import { execFile } from 'node:child_process';
-import { createHash } from 'node:crypto';
-import { access, cp, mkdir, readFile, readdir, rename, rm, symlink, writeFile } from 'node:fs/promises';
-import path from 'node:path';
-import { fileURLToPath } from 'node:url';
-import { promisify } from 'node:util';
-import { describe, expect, it } from 'vitest';
-import {
-  describeIf,
-  COMMANDS_DIR,
-  createKernel,
-  NodeFileSystem,
-  createWasmVmRuntime,
-  createNodeRuntime,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-
-const execFileAsync = promisify(execFile);
-const TEST_TIMEOUT_MS = 55_000;
-const COMMAND_TIMEOUT_MS = 45_000;
-const CACHE_READY_MARKER = '.ready';
-const WORKTREE_SCHEMA_VERSION = 'v2-isolated-worktrees';
-const TRANSIENT_OUTPUT_DIRS = new Set([
-  '.astro',
-  '.next',
-  'build',
-  'coverage',
-  'dist',
-  'out',
-]);
-
-const __dirname = path.dirname(fileURLToPath(import.meta.url));
-
-const WORKSPACE_ROOT = path.resolve(__dirname, '../../..');
-const FIXTURES_ROOT = path.resolve(__dirname, '../projects');
-const CACHE_ROOT = path.join(__dirname, '../../.cache', 'project-matrix');
-
-// ---------------------------------------------------------------------------
-// Types (same schema as project-matrix.test.ts)
-// ---------------------------------------------------------------------------
-
-type PackageManager = 'pnpm' | 'npm' | 'bun' | 'yarn';
-type PassFixtureMetadata = { entry: string; expectation: 'pass'; packageManager?: PackageManager };
-type FailFixtureMetadata = {
-  entry: string;
-  expectation: 'fail';
-  fail: { code: number; stderrIncludes: string };
-  packageManager?: PackageManager;
-};
-type FixtureMetadata = PassFixtureMetadata | FailFixtureMetadata;
-type FixtureProject = { name: string; sourceDir: string; metadata: FixtureMetadata };
-type PreparedFixture = { cacheHit: boolean; cacheKey: string; projectDir: string };
-type WorkingFixtureProject = { projectDir: string; dispose: () => Promise<void> };
-type ResultEnvelope = { code: number; stdout: string; stderr: string };
-
-// ---------------------------------------------------------------------------
-// Fixture discovery
-// ---------------------------------------------------------------------------
-
-async function discoverFixtures(): Promise<FixtureProject[]> {
-  let entries;
-  try {
-    entries = await readdir(FIXTURES_ROOT, { withFileTypes: true });
-  } catch {
-    // Fixtures directory doesn't exist in registry. Return empty.
-    return [];
-  }
-  const fixtureDirs = entries
-    .filter((e) => e.isDirectory())
-    .map((e) => e.name)
-    .sort((a, b) => a.localeCompare(b));
-
-  const fixtures: FixtureProject[] = [];
-  for (const name of fixtureDirs) {
-    const sourceDir = path.join(FIXTURES_ROOT, name);
-    const metaPath = path.join(sourceDir, 'fixture.json');
-    const packageJsonPath = path.join(sourceDir, 'package.json');
-    if (!(await pathExists(metaPath)) || !(await pathExists(packageJsonPath))) {
-      continue;
-    }
-    const raw = JSON.parse(await readFile(metaPath, 'utf8'));
-    const metadata = parseMetadata(raw, name);
-    fixtures.push({ name, sourceDir, metadata });
-  }
-  return fixtures;
-}
-
-function parseMetadata(raw: Record<string, unknown>, name: string): FixtureMetadata {
-  const entry = raw.entry as string;
-  const packageManager = raw.packageManager as PackageManager | undefined;
-  if (raw.expectation === 'pass') return { entry, expectation: 'pass', ...(packageManager && { packageManager }) };
-  const fail = raw.fail as { code: number; stderrIncludes: string };
-  return { entry, expectation: 'fail', fail, ...(packageManager && { packageManager }) };
-}
-
-// ---------------------------------------------------------------------------
-// Fixture preparation
-// ---------------------------------------------------------------------------
-
-async function prepareFixtureProject(fixture: FixtureProject): Promise<PreparedFixture> {
-  await mkdir(CACHE_ROOT, { recursive: true });
-  const cacheKey = await createFixtureCacheKey(fixture);
-  const cacheDir = path.join(CACHE_ROOT, `${fixture.name}-${cacheKey}`);
-  const readyMarker = path.join(cacheDir, CACHE_READY_MARKER);
-
-  if (await pathExists(readyMarker) && await cacheHasRequiredInstallArtifacts(fixture, cacheDir)) {
-    return { cacheHit: true, cacheKey, projectDir: cacheDir };
-  }
-
-  // Reset stale entries
-  if (await pathExists(cacheDir)) {
-    await rm(cacheDir, { recursive: true, force: true });
-  }
-
-  // Stage and install
-  const staging = `${cacheDir}.tmp-${process.pid}-${Date.now()}`;
-  await rm(staging, { recursive: true, force: true });
-  await cp(fixture.sourceDir, staging, {
-    recursive: true,
-    filter: (src) => !src.split(path.sep).includes('node_modules'),
-  });
-  const pm = fixture.metadata.packageManager ?? 'pnpm';
-  const installCmd =
-    pm === 'npm'
-      ? { cmd: 'npm', args: ['install', '--prefer-offline'] }
-      : pm === 'bun'
-        ? { cmd: 'bun', args: ['install'] }
-        : pm === 'yarn'
-          ? await getYarnInstallCmd(staging)
-          : { cmd: 'pnpm', args: ['install', '--ignore-workspace', '--prefer-offline'] };
-  await execFileAsync(installCmd.cmd, installCmd.args, {
-    cwd: staging,
-    timeout: COMMAND_TIMEOUT_MS,
-    maxBuffer: 10 * 1024 * 1024,
-    ...(pm === 'yarn' && { env: yarnEnv }),
-  });
-  await writeFile(path.join(staging, CACHE_READY_MARKER), `${new Date().toISOString()}\n`);
-
-  // Promote
-  try {
-    await rename(staging, cacheDir);
-  } catch (err: unknown) {
-    const code = err && typeof err === 'object' && 'code' in err ? String(err.code) : '';
-    if (code !== 'EEXIST') throw err;
-    await rm(staging, { recursive: true, force: true });
-    if (!(await pathExists(readyMarker))) {
-      throw new Error(`Cache race: missing ready marker at ${cacheDir}`);
-    }
-  }
-
-  return { cacheHit: false, cacheKey, projectDir: cacheDir };
-}
-
-async function createFixtureCacheKey(fixture: FixtureProject): Promise<string> {
-  const hash = createHash('sha256');
-  const nodeMajor = process.versions.node.split('.')[0] ?? '0';
-  const pm = fixture.metadata.packageManager ?? 'pnpm';
-  const pmVersion =
-    pm === 'npm'
-      ? await getNpmVersion()
-      : pm === 'bun'
-        ? await getBunVersion()
-        : pm === 'yarn'
-          ? await getYarnVersion()
-          : await getPnpmVersion();
-  hash.update(`node-major:${nodeMajor}\n`);
-  hash.update(`pm:${pm}\n`);
-  hash.update(`pm-version:${pmVersion}\n`);
-  hash.update(`platform:${process.platform}\n`);
-  hash.update(`arch:${process.arch}\n`);
-  hash.update(`worktree-schema:${WORKTREE_SCHEMA_VERSION}\n`);
-
-  const lockFile =
-    pm === 'npm'
-      ? 'package-lock.json'
-      : pm === 'bun'
-        ? 'bun.lock'
-        : pm === 'yarn'
-          ? 'yarn.lock'
-          : 'pnpm-lock.yaml';
-  for (const [label, filePath] of [
-    ['workspace-lock', path.join(WORKSPACE_ROOT, 'pnpm-lock.yaml')],
-    ['workspace-package', path.join(WORKSPACE_ROOT, 'package.json')],
-    ['fixture-package', path.join(fixture.sourceDir, 'package.json')],
-    ['fixture-lock', path.join(fixture.sourceDir, lockFile)],
-  ]) {
-    hash.update(`${label}:`);
-    try { hash.update(await readFile(filePath)); } catch { hash.update('<missing>'); }
-    hash.update('\n');
-  }
-
-  const files = await listFiles(fixture.sourceDir);
-  for (const rel of files) {
-    hash.update(`fixture-file:${rel.split(path.sep).join('/')}\n`);
-    hash.update(await readFile(path.join(fixture.sourceDir, rel)));
-    hash.update('\n');
-  }
-
-  return hash.digest('hex').slice(0, 16);
-}
-
-async function cacheHasRequiredInstallArtifacts(
-  fixture: FixtureProject,
-  cacheDir: string,
-): Promise<boolean> {
-  if (!(await fixtureDeclaresDependencies(fixture))) {
-    return true;
-  }
-  return pathExists(path.join(cacheDir, 'node_modules'));
-}
-
-async function fixtureDeclaresDependencies(fixture: FixtureProject): Promise<boolean> {
-  const packageJson = JSON.parse(
-    await readFile(path.join(fixture.sourceDir, 'package.json'), 'utf8'),
-  ) as Record<string, unknown>;
-  return [
-    'dependencies',
-    'devDependencies',
-    'optionalDependencies',
-    'peerDependencies',
-  ].some((key) => {
-    const value = packageJson[key];
-    return (
-      value !== null &&
-      typeof value === 'object' &&
-      Object.keys(value).length > 0
-    );
-  });
-}
-
-async function createWorkingFixtureProject(
-  fixture: FixtureProject,
-  prepared: PreparedFixture,
-  label: string,
-): Promise<WorkingFixtureProject> {
-  const workingRoot = path.join(CACHE_ROOT, '.worktrees');
-  await mkdir(workingRoot, { recursive: true });
-  const projectDir = path.join(
-    workingRoot,
-    `${fixture.name}-${prepared.cacheKey}-${label}-${process.pid}-${Date.now()}`,
-  );
-
-  await cp(prepared.projectDir, projectDir, {
-    recursive: true,
-    filter: (src) => {
-      const relative = path.relative(prepared.projectDir, src);
-      if (!relative) return true;
-      const segments = relative.split(path.sep);
-      return !segments.some((segment) =>
-        segment === 'node_modules' || TRANSIENT_OUTPUT_DIRS.has(segment),
-      );
-    },
-  });
-
-  const installedNodeModulesDir = path.join(prepared.projectDir, 'node_modules');
-  if (await pathExists(installedNodeModulesDir)) {
-    await symlink(installedNodeModulesDir, path.join(projectDir, 'node_modules'), 'dir');
-  }
-
-  return {
-    projectDir,
-    dispose: () => rm(projectDir, { recursive: true, force: true }),
-  };
-}
-
-let _pnpmVersionPromise: Promise<string> | undefined;
-function getPnpmVersion(): Promise<string> {
-  if (!_pnpmVersionPromise) {
-    _pnpmVersionPromise = execFileAsync('pnpm', ['--version'], {
-      cwd: WORKSPACE_ROOT,
-      timeout: COMMAND_TIMEOUT_MS,
-    }).then((r) => r.stdout.trim());
-  }
-  return _pnpmVersionPromise;
-}
-
-let _npmVersionPromise: Promise<string> | undefined;
-function getNpmVersion(): Promise<string> {
-  if (!_npmVersionPromise) {
-    _npmVersionPromise = execFileAsync('npm', ['--version'], {
-      cwd: WORKSPACE_ROOT,
-      timeout: COMMAND_TIMEOUT_MS,
-    }).then((r) => r.stdout.trim());
-  }
-  return _npmVersionPromise;
-}
-
-let _bunVersionPromise: Promise<string> | undefined;
-function getBunVersion(): Promise<string> {
-  if (!_bunVersionPromise) {
-    _bunVersionPromise = execFileAsync('bun', ['--version'], {
-      cwd: WORKSPACE_ROOT,
-      timeout: COMMAND_TIMEOUT_MS,
-    }).then((r) => r.stdout.trim());
-  }
-  return _bunVersionPromise;
-}
-
-let _yarnVersionPromise: Promise<string> | undefined;
-// Bypass corepack packageManager enforcement so yarn runs in a pnpm workspace.
-const yarnEnv = { ...process.env, COREPACK_ENABLE_STRICT: '0' };
-function getYarnVersion(): Promise<string> {
-  if (!_yarnVersionPromise) {
-    _yarnVersionPromise = execFileAsync('yarn', ['--version'], {
-      cwd: WORKSPACE_ROOT,
-      timeout: COMMAND_TIMEOUT_MS,
-      env: yarnEnv,
-    }).then((r) => r.stdout.trim());
-  }
-  return _yarnVersionPromise;
-}
-
-async function getYarnInstallCmd(
-  projectDir: string,
-): Promise<{ cmd: string; args: string[] }> {
-  const isBerry = await pathExists(path.join(projectDir, '.yarnrc.yml'));
-  return isBerry
-    ? { cmd: 'yarn', args: ['install', '--immutable'] }
-    : { cmd: 'yarn', args: ['install'] };
-}
-
-async function listFiles(root: string): Promise<string[]> {
-  const result: string[] = [];
-  async function walk(rel: string): Promise<void> {
-    const dir = path.join(root, rel);
-    const entries = await readdir(dir, { withFileTypes: true });
-    for (const e of entries.sort((a, b) => a.name.localeCompare(b.name))) {
-      if (e.name === 'node_modules') continue;
-      const p = rel ? path.join(rel, e.name) : e.name;
-      if (e.isDirectory()) await walk(p);
-      else if (e.isFile()) result.push(p);
-    }
-  }
-  await walk('');
-  return result.sort((a, b) => a.localeCompare(b));
-}
-
-// ---------------------------------------------------------------------------
-// Host execution (baseline)
-// ---------------------------------------------------------------------------
-
-async function runHostExecution(projectDir: string, entryRel: string): Promise<ResultEnvelope> {
-  const entryPath = path.join(projectDir, entryRel);
-  return normalizeEnvelope(await runCommand(process.execPath, [entryPath], projectDir), projectDir);
-}
-
-async function runCommand(cmd: string, args: string[], cwd: string): Promise<ResultEnvelope> {
-  try {
-    const r = await execFileAsync(cmd, args, { cwd, timeout: COMMAND_TIMEOUT_MS, maxBuffer: 10 * 1024 * 1024 });
-    return { code: 0, stdout: r.stdout, stderr: r.stderr };
-  } catch (err: unknown) {
-    if (err && typeof err === 'object' && 'stdout' in err) {
-      const e = err as { code?: number; stdout?: string; stderr?: string };
-      return {
-        code: typeof e.code === 'number' ? e.code : 1,
-        stdout: typeof e.stdout === 'string' ? e.stdout : '',
-        stderr: typeof e.stderr === 'string' ? e.stderr : '',
-      };
-    }
-    throw err;
-  }
-}
-
-// ---------------------------------------------------------------------------
-// Kernel execution
-// ---------------------------------------------------------------------------
-
-async function runKernelExecution(projectDir: string, entryRel: string): Promise<ResultEnvelope> {
-  // NodeFileSystem rooted at projectDir. require() resolves from node_modules on disk.
-  const vfs = new NodeFileSystem({ root: projectDir });
-  const kernel = createKernel({ filesystem: vfs, cwd: '/' });
-
-  await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-  await kernel.mount(createNodeRuntime());
-
-  try {
-    const vfsEntry = '/' + entryRel.replace(/\\/g, '/');
-    const result = await kernel.exec(`node ${vfsEntry}`, { cwd: '/' });
-    return normalizeEnvelope(
-      { code: result.exitCode, stdout: result.stdout, stderr: result.stderr },
-      projectDir,
-    );
-  } finally {
-    await kernel.dispose();
-  }
-}
-
-// ---------------------------------------------------------------------------
-// Output normalization
-// ---------------------------------------------------------------------------
-
-function normalizeEnvelope(envelope: ResultEnvelope, projectDir: string): ResultEnvelope {
-  return {
-    code: envelope.code,
-    stdout: normalizeText(envelope.stdout, projectDir),
-    stderr: normalizeText(envelope.stderr, projectDir),
-  };
-}
-
-function normalizeText(value: string, projectDir: string): string {
-  const normalized = value.replace(/\r\n/g, '\n');
-  const posixDir = projectDir.split(path.sep).join(path.posix.sep);
-  return normalizeModuleNotFoundText(
-    normalized.split(projectDir).join('<project>').split(posixDir).join('<project>'),
-  );
-}
-
-function normalizeModuleNotFoundText(value: string): string {
-  if (!value.includes('Cannot find module')) return value;
-  const quoted = value.match(/Cannot find module '([^']+)'/);
-  if (quoted) return `Cannot find module '${quoted[1]}'\n`;
-  const from = value.match(/Cannot find module:\s*([^\s]+)\s+from\s+/);
-  if (from) return `Cannot find module '${from[1]}'\n`;
-  return value;
-}
-
-// ---------------------------------------------------------------------------
-// Helpers
-// ---------------------------------------------------------------------------
-
-async function pathExists(p: string): Promise<boolean> {
-  try { await access(p); return true; } catch { return false; }
-}
-
-async function commandAvailable(cmd: string): Promise<boolean> {
-  try {
-    await execFileAsync(cmd, ['--version'], {
-      cwd: WORKSPACE_ROOT,
-      timeout: COMMAND_TIMEOUT_MS,
-    });
-    return true;
-  } catch {
-    return false;
-  }
-}
-
-// ---------------------------------------------------------------------------
-// Tests
-// ---------------------------------------------------------------------------
-
-const skipReason = skipUnlessWasmBuilt();
-const discoveredFixtures = await discoverFixtures();
-const hasHostBun = await commandAvailable('bun');
-
-describeIf(!(skipReason || discoveredFixtures.length === 0), 'e2e project-matrix through kernel', () => {
-  it('discovers at least one fixture project', () => {
-    expect(discoveredFixtures.length).toBeGreaterThan(0);
-  });
-
-  for (const fixture of discoveredFixtures) {
-    const testFixture = fixture.metadata.packageManager === 'bun' && !hasHostBun
-      ? it.skip
-      : it;
-    testFixture(
-      `runs fixture ${fixture.name} through kernel with host-node parity`,
-      async () => {
-        const prepared = await prepareFixtureProject(fixture);
-        const hostProject = await createWorkingFixtureProject(fixture, prepared, 'host');
-        const kernelProject = await createWorkingFixtureProject(fixture, prepared, 'kernel');
-        let host: ResultEnvelope;
-        let kernel: ResultEnvelope;
-
-        try {
-          host = await runHostExecution(hostProject.projectDir, fixture.metadata.entry);
-          kernel = await runKernelExecution(kernelProject.projectDir, fixture.metadata.entry);
-        } finally {
-          await Promise.all([hostProject.dispose(), kernelProject.dispose()]);
-        }
-
-        if (fixture.metadata.expectation === 'pass') {
-          expect(kernel.code).toBe(host.code);
-          expect(kernel.stdout).toBe(host.stdout);
-          expect(kernel.stderr).toBe(host.stderr);
-          return;
-        }
-
-        // Fail fixtures: host succeeds, kernel enforces sandbox restrictions
-        expect(host.code).toBe(0);
-        expect(kernel.code).toBe(fixture.metadata.fail.code);
-        expect(kernel.stderr).toContain(fixture.metadata.fail.stderrIncludes);
-      },
-      TEST_TIMEOUT_MS,
-    );
-  }
-});
diff --git a/registry/tests/kernel/error-propagation.test.ts b/registry/tests/kernel/error-propagation.test.ts
deleted file mode 100644
index c71c3c580..000000000
--- a/registry/tests/kernel/error-propagation.test.ts
+++ /dev/null
@@ -1,75 +0,0 @@
-/**
- * Cross-runtime error and exit code propagation tests.
- *
- * Verifies that exit codes and stderr flow correctly across runtime
- * boundaries, including through nested cross-runtime spawns (e.g.
- * WasmVM shell -> kernel -> Node -> exit(42) -> kernel -> WasmVM).
- *
- * Gracefully skipped when the WASM binary is not built.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-  describeIf,
-  createIntegrationKernel,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-import type { IntegrationKernelResult } from './helpers.ts';
-
-const skipReason = skipUnlessWasmBuilt();
-
-describeIf(!skipReason, 'cross-runtime error propagation', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    if (ctx) await ctx.dispose();
-  });
-
-  it('Node non-zero exit propagates', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "process.exit(42)"');
-    expect(result.exitCode).toBe(42);
-  });
-
-  it('WasmVM non-zero exit propagates', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-    const result = await ctx.kernel.exec('sh -c "exit 7"');
-    expect(result.exitCode).toBe(7);
-  });
-
-  it('Node stderr captured by kernel', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "console.error(\'err-msg\')"');
-    expect(result.stderr).toContain('err-msg');
-  });
-
-  it('WasmVM stderr captured by kernel', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-    const result = await ctx.kernel.exec('echo error >&2');
-    expect(result.stderr).toContain('error');
-  });
-
-  it('nested cross-runtime exit code propagation', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    // WasmVM shell spawns Node via kernel, Node exits 42, shell propagates
-    // Tests exit code flowing through TWO runtime boundary crossings:
-    // kernel->WasmVM->kernel->Node->exit(42)->kernel->WasmVM->kernel
-    const result = await ctx.kernel.exec('sh -c "node -e \\"process.exit(42)\\""');
-    expect(result.exitCode).toBe(42);
-  });
-
-  it('Node captures WasmVM child failure', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    // Node runs child_process.execSync which routes through kernel to WasmVM shell
-    // The shell exits 3, Node catches the error and logs the exit code
-    const code = [
-      'try {',
-      '  require("child_process").execSync("sh -c \\"exit 3\\"");',
-      '} catch (e) {',
-      '  console.log(e.status);',
-      '}',
-    ].join(' ');
-    const result = await ctx.kernel.exec(`node -e '${code}'`);
-    expect(result.stdout).toContain('3');
-  });
-});
diff --git a/registry/tests/kernel/exec-integration.test.ts b/registry/tests/kernel/exec-integration.test.ts
deleted file mode 100644
index a02216d71..000000000
--- a/registry/tests/kernel/exec-integration.test.ts
+++ /dev/null
@@ -1,149 +0,0 @@
-/**
- * Cross-runtime integration tests for kernel.exec() and kernel.spawn().
- *
- * Exercises real WasmVM driver end-to-end: shell parsing, coreutils
- * execution, VFS reads/writes, and error handling. Each test creates
- * a fresh kernel. No shared state between tests.
- *
- * Gracefully skipped when the WASM binary is not built.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-  describeIf,
-  createIntegrationKernel,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-import type { IntegrationKernelResult } from './helpers.ts';
-
-const skipReason = skipUnlessWasmBuilt();
-
-describeIf(!skipReason, 'kernel.exec() integration', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    if (ctx) await ctx.dispose();
-  });
-
-  it('exec echo returns stdout', async () => {
-    ctx = await createIntegrationKernel();
-    const result = await ctx.kernel.exec('echo hello');
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout.trim()).toBe('hello');
-  });
-
-  it('exec ls lists files in directory', async () => {
-    ctx = await createIntegrationKernel();
-    // Write a file into VFS, then list the directory
-    await ctx.vfs.writeFile('/tmp/test-file.txt', 'content');
-    const result = await ctx.kernel.exec('ls /tmp');
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('test-file.txt');
-  });
-
-  it('exec cat reads file contents', async () => {
-    ctx = await createIntegrationKernel();
-    await ctx.vfs.writeFile('/tmp/test.txt', 'hello from vfs');
-    const result = await ctx.kernel.exec('cat /tmp/test.txt');
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout.trim()).toBe('hello from vfs');
-  });
-
-  it('exec nonexistent command returns non-zero', async () => {
-    ctx = await createIntegrationKernel();
-    const result = await ctx.kernel.exec('nonexistent-command-xyz');
-    expect(result.exitCode).not.toBe(0);
-  });
-
-  it('exec with env passes environment to process', async () => {
-    ctx = await createIntegrationKernel();
-    const result = await ctx.kernel.exec('echo $MY_VAR', {
-      env: { MY_VAR: 'kernel-test' },
-    });
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout.trim()).toBe('kernel-test');
-  });
-
-  it('exec pipeline with pipe operator', async () => {
-    ctx = await createIntegrationKernel();
-    await ctx.vfs.writeFile('/tmp/data.txt', 'foo\nbar\nbaz\n');
-    const result = await ctx.kernel.exec('cat /tmp/data.txt | wc -l');
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout.trim()).toBe('3');
-  });
-
-  it('exec writes to VFS via redirection', async () => {
-    ctx = await createIntegrationKernel();
-    const result = await ctx.kernel.exec('echo "written by shell" > /tmp/out.txt');
-    expect(result.exitCode).toBe(0);
-    const content = await ctx.vfs.readFile('/tmp/out.txt');
-    expect(new TextDecoder().decode(content).trim()).toBe('written by shell');
-  });
-
-  it('exec stderr captured on error', async () => {
-    ctx = await createIntegrationKernel();
-    const result = await ctx.kernel.exec('cat /nonexistent/path');
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr.length).toBeGreaterThan(0);
-  });
-
-  it('shell test builtin honors precedence and grouping', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-    const script = [
-      "if /bin/[ 1 -eq 1 -o 2 -eq 3 -a 4 -eq 5 ]; then echo precedence; else echo bad; fi",
-      "if /bin/[ '(' 1 -eq 0 -o 2 -eq 2 ')' -a 3 -eq 3 ]; then echo grouping; else echo bad; fi",
-    ].join('\n');
-
-    const result = await ctx.kernel.exec(script);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout.trim().split('\n')).toEqual(['precedence', 'grouping']);
-  });
-});
-
-describeIf(!skipReason, 'kernel.spawn() integration', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    if (ctx) await ctx.dispose();
-  });
-
-  it('spawn returns ManagedProcess with PID', async () => {
-    ctx = await createIntegrationKernel();
-    const proc = ctx.kernel.spawn('echo', ['spawn-test']);
-    expect(proc.pid).toBeGreaterThan(0);
-    const exitCode = await proc.wait();
-    expect(exitCode).toBe(0);
-  });
-
-  it('spawn stdout fires onData via options callback', async () => {
-    ctx = await createIntegrationKernel();
-    const chunks: string[] = [];
-    const proc = ctx.kernel.spawn('echo', ['spawn-output'], {
-      onStdout: (data) => chunks.push(new TextDecoder().decode(data)),
-    });
-    await proc.wait();
-    const output = chunks.join('');
-    expect(output.trim()).toBe('spawn-output');
-  });
-
-  it('spawn exitCode resolves', async () => {
-    ctx = await createIntegrationKernel();
-    const proc = ctx.kernel.spawn('false', []);
-    const exitCode = await proc.wait();
-    expect(exitCode).not.toBe(0);
-  });
-
-  it('each test gets a fresh kernel with independent state', async () => {
-    ctx = await createIntegrationKernel();
-    // Write a file in this test's VFS
-    await ctx.vfs.writeFile('/tmp/isolation-check.txt', 'exists');
-    const result = await ctx.kernel.exec('cat /tmp/isolation-check.txt');
-    expect(result.exitCode).toBe(0);
-
-    // Create a second kernel. It should NOT see the first kernel's file.
-    const ctx2 = await createIntegrationKernel();
-    const result2 = await ctx2.kernel.exec('cat /tmp/isolation-check.txt');
-    expect(result2.exitCode).not.toBe(0);
-    await ctx2.dispose();
-  });
-});
diff --git a/registry/tests/kernel/fd-inheritance.test.ts b/registry/tests/kernel/fd-inheritance.test.ts
deleted file mode 100644
index b99412009..000000000
--- a/registry/tests/kernel/fd-inheritance.test.ts
+++ /dev/null
@@ -1,77 +0,0 @@
-/**
- * Integration tests for FD inheritance across process boundaries.
- *
- * Exercises shell redirections (> and <) which rely on FD table forking
- * and stdio overrides to work correctly. Each test creates a fresh kernel.
- *
- * Gracefully skipped when the WASM binary is not built.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-  describeIf,
-  createIntegrationKernel,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-import type { IntegrationKernelResult } from './helpers.ts';
-
-const skipReason = skipUnlessWasmBuilt();
-
-describeIf(!skipReason, 'FD inheritance', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    if (ctx) await ctx.dispose();
-  });
-
-  it('exec echo hello > /tmp/out.txt writes to VFS file', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-    const result = await ctx.kernel.exec('echo hello > /tmp/out.txt');
-    expect(result.exitCode).toBe(0);
-
-    const content = await ctx.vfs.readTextFile('/tmp/out.txt');
-    expect(content.trim()).toBe('hello');
-  });
-
-  it('exec cat < /tmp/in.txt reads from VFS file', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-    await ctx.vfs.writeFile('/tmp/in.txt', 'input data\n');
-
-    const result = await ctx.kernel.exec('cat < /tmp/in.txt');
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout.trim()).toBe('input data');
-  });
-
-  it('exec with append >> accumulates output', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-    await ctx.kernel.exec('echo first > /tmp/append.txt');
-    await ctx.kernel.exec('echo second >> /tmp/append.txt');
-
-    const content = await ctx.vfs.readTextFile('/tmp/append.txt');
-    expect(content).toContain('first');
-    expect(content).toContain('second');
-  });
-
-  it('piped output preserves data across redirection', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-    await ctx.vfs.writeFile('/tmp/nums.txt', 'a\nb\nc\n');
-
-    const result = await ctx.kernel.exec('cat /tmp/nums.txt | wc -l');
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout.trim()).toBe('3');
-  });
-
-  it('exec with combined stdin redirect and stdout redirect', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-    await ctx.vfs.writeFile('/tmp/data.txt', 'vfs-content\n');
-
-    // Read from file via < and write to file via >. Full FD inheritance chain.
-    const result = await ctx.kernel.exec(
-      'cat < /tmp/data.txt > /tmp/out.txt',
-    );
-    expect(result.exitCode).toBe(0);
-
-    const content = await ctx.vfs.readTextFile('/tmp/out.txt');
-    expect(content.trim()).toBe('vfs-content');
-  });
-});
diff --git a/registry/tests/kernel/helpers.ts b/registry/tests/kernel/helpers.ts
deleted file mode 100644
index 07be2a7f2..000000000
--- a/registry/tests/kernel/helpers.ts
+++ /dev/null
@@ -1,103 +0,0 @@
-/**
- * Integration test helpers for kernel tests that depend on WASM command binaries.
- *
- * Re-exports infrastructure from the parent helpers.ts and provides
- * createIntegrationKernel / skipUnlessWasmBuilt for cross-runtime tests.
- */
-
-import {
-  AF_INET,
-  AF_UNIX,
-  COMMANDS_DIR,
-  C_BUILD_DIR,
-  describeIf,
-  hasWasmBinaries,
-  itIf,
-  NodeFileSystem,
-  SIGTERM,
-  SOCK_DGRAM,
-  SOCK_STREAM,
-  TerminalHarness,
-  skipReason,
-  createInMemoryFileSystem,
-  createKernel,
-  createWasmVmRuntime,
-  createNodeRuntime,
-} from "../helpers.js";
-import type { Kernel, Permissions, VirtualFileSystem } from "../helpers.js";
-
-export {
-  AF_INET,
-  AF_UNIX,
-  COMMANDS_DIR,
-  C_BUILD_DIR,
-  describeIf,
-  hasWasmBinaries,
-  itIf,
-  NodeFileSystem,
-  SIGTERM,
-  SOCK_DGRAM,
-  SOCK_STREAM,
-  TerminalHarness,
-  skipReason,
-  createInMemoryFileSystem,
-  createKernel,
-  createWasmVmRuntime,
-  createNodeRuntime,
-} from "../helpers.js";
-export type { Kernel, Permissions, VirtualFileSystem } from "../helpers.js";
-
-export interface IntegrationKernelResult {
-  kernel: Kernel;
-  vfs: VirtualFileSystem;
-  dispose: () => Promise<void>;
-}
-
-export interface IntegrationKernelOptions {
-  runtimes?: ("wasmvm" | "node")[];
-  loopbackExemptPorts?: number[];
-  commandDirs?: string[];
-  permissions?: Permissions;
-}
-
-/**
- * Create a kernel with the in-scope runtime drivers for integration testing.
- *
- * Mount order matters. Last-mounted driver wins for overlapping commands:
- *   1. WasmVM first: provides sh/bash/coreutils (90+ commands)
- *   2. Node second: overrides WasmVM's 'node' stub with real V8
- */
-export async function createIntegrationKernel(
-  options?: IntegrationKernelOptions,
-): Promise<IntegrationKernelResult> {
-  const runtimes = options?.runtimes ?? ["wasmvm"];
-  const vfs = createInMemoryFileSystem();
-  const kernel = createKernel({
-    filesystem: vfs,
-    loopbackExemptPorts: options?.loopbackExemptPorts,
-    permissions: options?.permissions,
-  });
-
-  if (runtimes.includes("wasmvm")) {
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: options?.commandDirs ?? [COMMANDS_DIR] }),
-    );
-  }
-  if (runtimes.includes("node")) {
-    await kernel.mount(createNodeRuntime());
-  }
-
-  return {
-    kernel,
-    vfs,
-    dispose: () => kernel.dispose(),
-  };
-}
-
-/**
- * Skip helper: returns a reason string if the WASM binaries are not built,
- * or false if the commands directory exists and tests can run.
- */
-export function skipUnlessWasmBuilt(): string | false {
-  return skipReason();
-}
diff --git a/registry/tests/kernel/module-resolution.test.ts b/registry/tests/kernel/module-resolution.test.ts
deleted file mode 100644
index 829f75714..000000000
--- a/registry/tests/kernel/module-resolution.test.ts
+++ /dev/null
@@ -1,107 +0,0 @@
-/**
- * Module resolution through kernel VFS tests.
- *
- * Verifies that Node's require() resolves modules via the kernel VFS,
- * enabling CJS modules, node_modules, nested paths, and JSON imports.
- *
- * Gracefully skipped when the WASM binary is not built.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-  describeIf,
-  createIntegrationKernel,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-import type { IntegrationKernelResult } from './helpers.ts';
-
-const skipReason = skipUnlessWasmBuilt();
-
-describeIf(!skipReason, 'module resolution through kernel VFS', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    if (ctx) await ctx.dispose();
-  });
-
-  it('require relative CJS module', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    await ctx.kernel.writeFile(
-      '/app/lib/utils.js',
-      'module.exports.add = (a, b) => a + b;',
-    );
-    await ctx.kernel.writeFile(
-      '/app/index.js',
-      "console.log(require('./lib/utils').add(1, 2));",
-    );
-
-    const result = await ctx.kernel.exec('node /app/index.js');
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('3');
-  });
-
-  it('require from node_modules', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    await ctx.kernel.writeFile(
-      '/app/node_modules/my-pkg/index.js',
-      "module.exports.greet = () => 'hello';",
-    );
-    await ctx.kernel.writeFile(
-      '/app/main.js',
-      "console.log(require('my-pkg').greet());",
-    );
-
-    const result = await ctx.kernel.exec('node /app/main.js');
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('hello');
-  });
-
-  it('require missing module gives MODULE_NOT_FOUND', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    // Ensure /app exists as cwd
-    await ctx.kernel.writeFile('/app/.keep', '');
-
-    const result = await ctx.kernel.exec(
-      `node -e "require('./nonexistent')"`,
-      { cwd: '/app' },
-    );
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toMatch(/Cannot find module|MODULE_NOT_FOUND/);
-  });
-
-  it('require nested relative path', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    await ctx.kernel.writeFile(
-      '/app/lib/utils.js',
-      'module.exports.add = (a, b) => a + b;',
-    );
-    await ctx.kernel.writeFile(
-      '/app/src/handlers/index.js',
-      "console.log(require('../../lib/utils').add(3, 4));",
-    );
-
-    const result = await ctx.kernel.exec('node /app/src/handlers/index.js');
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('7');
-  });
-
-  it('require JSON file', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    await ctx.kernel.writeFile(
-      '/app/config.json',
-      JSON.stringify({ port: 3000 }),
-    );
-
-    const result = await ctx.kernel.exec(
-      `node -e "console.log(require('./config.json').port)"`,
-      { cwd: '/app' },
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('3000');
-  });
-});
diff --git a/registry/tests/kernel/node-binary-behavior.test.ts b/registry/tests/kernel/node-binary-behavior.test.ts
deleted file mode 100644
index 0f71bd648..000000000
--- a/registry/tests/kernel/node-binary-behavior.test.ts
+++ /dev/null
@@ -1,436 +0,0 @@
-/**
- * Comprehensive node binary integration tests.
- *
- * Covers all node CLI behaviors through the kernel: stdout, stderr,
- * exit codes, error types, delayed output, stdin pipes, VFS access,
- * cross-runtime child_process, --version, and no-args behavior.
- *
- * Each scenario is tested via kernel.exec() (non-PTY path) and key
- * stdout/error scenarios are also verified through TerminalHarness
- * (interactive PTY path).
- *
- * Gracefully skipped when WASM binaries are not built.
- */
-
-import { mkdtemp, mkdir, rm, symlink, writeFile } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import path from 'node:path';
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-	describeIf,
-	createIntegrationKernel,
-	skipUnlessWasmBuilt,
-	TerminalHarness,
-  createKernel,
-  createNodeRuntime,
-  createWasmVmRuntime,
-  NodeFileSystem,
-  COMMANDS_DIR,
-} from './helpers.ts';
-import type { IntegrationKernelResult } from './helpers.ts';
-
-const skipReason = skipUnlessWasmBuilt();
-
-/** brush-shell interactive prompt. */
-const PROMPT = 'sh-0.4$ ';
-
-/**
- * Find a line in the screen output that exactly matches the expected text.
- * Excludes lines containing the command echo (prompt line).
- */
-function findOutputLine(screen: string, expected: string): string | undefined {
-  return screen.split('\n').find(
-    (l) => l.trim() === expected && !l.includes(PROMPT),
-  );
-}
-
-function decodeChunks(chunks: Uint8Array[]): string {
-  const decoder = new TextDecoder();
-  return chunks.map((chunk) => decoder.decode(chunk)).join("");
-}
-
-// ---------------------------------------------------------------------------
-// kernel.exec() -- stdout
-// ---------------------------------------------------------------------------
-
-describeIf(!skipReason, 'node binary: exec stdout', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await ctx?.dispose();
-  });
-
-  it('node -e console.log produces stdout with exit 0', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "console.log(\'hello\')"');
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('hello');
-  });
-
-  it('node -e setTimeout delayed output appears', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec(
-      'node -e "setTimeout(()=>console.log(\'delayed\'),100)"',
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('delayed');
-  }, 10_000);
-});
-
-describeIf(!skipReason, 'node binary: spawn callback routing', () => {
-  let ctxA: IntegrationKernelResult;
-  let ctxB: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await ctxA?.dispose();
-    await ctxB?.dispose();
-  });
-
-  it('concurrent kernels keep stdout callbacks isolated per VM marker', async () => {
-    ctxA = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    ctxB = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    const stdoutA: Uint8Array[] = [];
-    const stdoutB: Uint8Array[] = [];
-    const stderrA: Uint8Array[] = [];
-    const stderrB: Uint8Array[] = [];
-
-    const procA = ctxA.kernel.spawn('node', ['-e', "console.log('VM_A_MARKER')"], {
-      onStdout: (chunk) => stdoutA.push(chunk),
-      onStderr: (chunk) => stderrA.push(chunk),
-    });
-    const procB = ctxB.kernel.spawn('node', ['-e', "console.log('VM_B_MARKER')"], {
-      onStdout: (chunk) => stdoutB.push(chunk),
-      onStderr: (chunk) => stderrB.push(chunk),
-    });
-
-    const [exitA, exitB] = await Promise.all([procA.wait(), procB.wait()]);
-    expect(exitA).toBe(0);
-    expect(exitB).toBe(0);
-
-    const stdoutAText = decodeChunks(stdoutA);
-    const stdoutBText = decodeChunks(stdoutB);
-    expect(stdoutAText).toContain('VM_A_MARKER');
-    expect(stdoutAText).not.toContain('VM_B_MARKER');
-    expect(stdoutBText).toContain('VM_B_MARKER');
-    expect(stdoutBText).not.toContain('VM_A_MARKER');
-    expect(decodeChunks(stderrA)).toBe('');
-    expect(decodeChunks(stderrB)).toBe('');
-  }, 15_000);
-});
-
-// ---------------------------------------------------------------------------
-// kernel.exec() -- exit codes
-// ---------------------------------------------------------------------------
-
-describeIf(!skipReason, 'node binary: exec exit codes', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await ctx?.dispose();
-  });
-
-  it('node -e process.exit(42) returns exit code 42', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "process.exit(42)"');
-    expect(result.exitCode).toBe(42);
-  });
-
-  it('node -e process.exit(0) returns exit code 0', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "process.exit(0)"');
-    expect(result.exitCode).toBe(0);
-  });
-});
-
-// ---------------------------------------------------------------------------
-// kernel.exec() -- stderr and error types
-// ---------------------------------------------------------------------------
-
-describeIf(!skipReason, 'node binary: exec stderr', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await ctx?.dispose();
-  });
-
-  it('node -e console.error routes to stderr', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "console.error(\'err\')"');
-    expect(result.stderr).toContain('err');
-    expect(result.exitCode).toBe(0);
-  });
-
-  it('node -e syntax error returns SyntaxError on stderr', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "({" ');
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toMatch(/SyntaxError|Unexpected/);
-  });
-
-  it('node -e ReferenceError on undefined variable', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "unknownVar"');
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toContain('ReferenceError');
-  });
-
-  it('node -e throw new Error returns message on stderr', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node -e "throw new Error(\'boom\')"');
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toContain('boom');
-  });
-});
-
-// ---------------------------------------------------------------------------
-// kernel.exec() -- stdin
-// ---------------------------------------------------------------------------
-
-describeIf(!skipReason, 'node binary: exec stdin', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await ctx?.dispose();
-  });
-
-  it('node -e reads from stdin pipe when data provided', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const code = [
-      'let d = "";',
-      'process.stdin.setEncoding("utf8");',
-      'process.stdin.on("data", c => d += c);',
-      'process.stdin.on("end", () => console.log(d.trim()));',
-    ].join(' ');
-    const result = await ctx.kernel.exec(`echo "piped-input" | node -e '${code}'`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('piped-input');
-  }, 15_000);
-});
-
-// ---------------------------------------------------------------------------
-// kernel.exec() -- VFS access
-// ---------------------------------------------------------------------------
-
-describeIf(!skipReason, 'node binary: exec VFS access', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await ctx?.dispose();
-  });
-
-  it('node -e fs.readdirSync("/") returns VFS root listing', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec(
-      'node -e "console.log(require(\'fs\').readdirSync(\'/\').join(\',\'))"',
-    );
-    expect(result.exitCode).toBe(0);
-    // VFS root should contain at least /bin and /tmp
-    expect(result.stdout).toContain('bin');
-    expect(result.stdout).toContain('tmp');
-  });
-});
-
-// ---------------------------------------------------------------------------
-// kernel.exec() -- cross-runtime child_process
-// ---------------------------------------------------------------------------
-
-describeIf(!skipReason, 'node binary: exec child_process', () => {
-  let ctx: IntegrationKernelResult;
-  let tempDir: string | undefined;
-
-  afterEach(async () => {
-    await ctx?.dispose();
-    if (tempDir) {
-      await rm(tempDir, { recursive: true, force: true });
-      tempDir = undefined;
-    }
-  });
-
-  it('node -e execSync("echo sub") captures child stdout', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const code =
-      'console.log(require("child_process").execSync("echo sub").toString().trim())';
-    const result = await ctx.kernel.exec(`node -e '${code}'`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('sub');
-  }, 15_000);
-
-  it('node -e spawnSync resolves shebang-backed node_modules/.bin commands through JavaScript runtime', async () => {
-    tempDir = await mkdtemp(path.join(tmpdir(), 'kernel-node-bin-'));
-    await writeFile(
-      path.join(tempDir, 'package.json'),
-      JSON.stringify({ name: 'node-bin-repro', private: true }),
-    );
-    await mkdir(path.join(tempDir, 'node_modules', 'hello-pkg', 'bin'), {
-      recursive: true,
-    });
-    await writeFile(
-      path.join(tempDir, 'node_modules', 'hello-pkg', 'bin', 'hello.js'),
-      [
-        '#!/usr/bin/env node',
-        "console.log(`hello ${process.argv.slice(2).join(' ')}`);",
-      ].join('\n'),
-    );
-    await mkdir(path.join(tempDir, 'node_modules', '.bin'), { recursive: true });
-    await symlink(
-      '../hello-pkg/bin/hello.js',
-      path.join(tempDir, 'node_modules', '.bin', 'hello-js'),
-    );
-
-    const vfs = new NodeFileSystem({ root: tempDir });
-    const kernel = createKernel({ filesystem: vfs, cwd: '/' });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-    await kernel.mount(createNodeRuntime());
-    ctx = { kernel, vfs, dispose: () => kernel.dispose() };
-
-    const guestScriptPath = '/tmp/spawn-bin-check.js';
-    const code = [
-      "const { spawnSync } = require('child_process');",
-      "const env = { ...process.env, PATH: `/node_modules/.bin:${process.env.PATH}` };",
-      "const result = spawnSync('hello-js', ['from-child'], { encoding: 'utf8', env });",
-      "console.log(JSON.stringify({ status: result.status, stdout: result.stdout, stderr: result.stderr }));",
-    ].join(' ');
-    await ctx.kernel.writeFile(guestScriptPath, code);
-    const result = await ctx.kernel.exec(`node ${guestScriptPath}`);
-    expect(result.exitCode).toBe(0);
-
-    const payload = JSON.parse(result.stdout.trim()) as {
-      status: number | null;
-      stdout: string;
-      stderr: string;
-    };
-    expect(payload.status).toBe(0);
-    expect(payload.stdout.trim()).toBe('hello from-child');
-    expect(payload.stderr).toBe('');
-  }, 20_000);
-});
-
-// ---------------------------------------------------------------------------
-// kernel.exec() -- node --version
-// ---------------------------------------------------------------------------
-
-describeIf(!skipReason, 'node binary: exec --version', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await ctx?.dispose();
-  });
-
-  it('node --version outputs semver pattern', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const result = await ctx.kernel.exec('node --version');
-    expect(result.exitCode).toBe(0);
-    // Node version format: vNN.NN.NN
-    expect(result.stdout.trim()).toMatch(/^v\d+\.\d+\.\d+/);
-  });
-});
-
-// ---------------------------------------------------------------------------
-// kernel.exec() -- node with no args + closed stdin
-// ---------------------------------------------------------------------------
-
-describeIf(!skipReason, 'node binary: exec no args', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await ctx?.dispose();
-  });
-
-  it('node with no args and closed stdin exits cleanly', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    // Pipe empty input so stdin is immediately closed
-    const result = await ctx.kernel.exec('echo -n "" | node', { timeout: 10_000 });
-    // Should exit without hanging. Any exit code is acceptable.
-    // (real Node exits 0 in this case)
-    expect(typeof result.exitCode).toBe('number');
-  }, 15_000);
-});
-
-// ---------------------------------------------------------------------------
-// TerminalHarness (PTY path) -- stdout verification
-// ---------------------------------------------------------------------------
-
-describeIf(!skipReason, 'node binary: terminal stdout', () => {
-  let harness: TerminalHarness;
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await harness?.dispose();
-    await ctx?.dispose();
-  });
-
-  it('node -e console.log output visible on terminal', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    await harness.type('node -e "console.log(\'MARKER\')"\n');
-    await harness.waitFor(PROMPT, 2, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(findOutputLine(screen, 'MARKER')).toBeDefined();
-  }, 15_000);
-
-  it('node -e delayed output visible on terminal', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    await harness.type('node -e "setTimeout(()=>console.log(\'LATE\'),100)"\n');
-    await harness.waitFor(PROMPT, 2, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(findOutputLine(screen, 'LATE')).toBeDefined();
-  }, 15_000);
-});
-
-// ---------------------------------------------------------------------------
-// TerminalHarness (PTY path) -- stderr verification
-// ---------------------------------------------------------------------------
-
-describeIf(!skipReason, 'node binary: terminal stderr', () => {
-  let harness: TerminalHarness;
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    await harness?.dispose();
-    await ctx?.dispose();
-  });
-
-  it('node -e ReferenceError visible on terminal', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    await harness.type('node -e "unknownVar"\n');
-    await harness.waitFor(PROMPT, 2, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen).toContain('ReferenceError');
-  }, 15_000);
-
-  it('node -e throw Error visible on terminal', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    const stderrChunks: Uint8Array[] = [];
-    const proc = ctx.kernel.spawn('node', ['-e', "throw new Error('boom')"], {
-      onStderr: (chunk) => stderrChunks.push(chunk),
-    });
-
-    const exitCode = await proc.wait();
-    expect(exitCode).not.toBe(0);
-    expect(decodeChunks(stderrChunks)).toContain('boom');
-  }, 15_000);
-
-  it('node -e SyntaxError visible on terminal', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    harness = new TerminalHarness(ctx.kernel);
-
-    await harness.waitFor(PROMPT);
-    await harness.type('node -e "({"\n');
-    await harness.waitFor(PROMPT, 2, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen).toMatch(/SyntaxError|Unexpected/);
-  }, 15_000);
-});
diff --git a/registry/tests/kernel/repro-npm-install.ts b/registry/tests/kernel/repro-npm-install.ts
deleted file mode 100644
index 03358f920..000000000
--- a/registry/tests/kernel/repro-npm-install.ts
+++ /dev/null
@@ -1,24 +0,0 @@
-import { mkdtemp, rm, writeFile } from 'node:fs/promises';
-import { tmpdir } from 'node:os';
-import path from 'node:path';
-import { COMMANDS_DIR, createKernel, NodeFileSystem, createWasmVmRuntime, createNodeRuntime } from '../helpers.ts';
-
-const tempDir = await mkdtemp(path.join(tmpdir(), 'kernel-npm-install-repro-'));
-console.log('tempDir', tempDir);
-try {
-  await writeFile(path.join(tempDir, 'package.json'), JSON.stringify({name:'test-npm-install', private:true, dependencies:{'left-pad':'1.3.0'}}));
-  const vfs = new NodeFileSystem({ root: tempDir });
-  const kernel = createKernel({ filesystem: vfs, cwd: '/' });
-  await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-  await kernel.mount(createNodeRuntime());
-  try {
-    const installResult = await kernel.exec('npm install', { cwd: '/' });
-    console.log('exitCode', installResult.exitCode);
-    console.log('stdout >>>\n' + installResult.stdout + '\n<<<');
-    console.log('stderr >>>\n' + installResult.stderr + '\n<<<');
-  } finally {
-    await kernel.dispose();
-  }
-} finally {
-  await rm(tempDir, { recursive: true, force: true });
-}
diff --git a/registry/tests/kernel/shim-streaming.test.ts b/registry/tests/kernel/shim-streaming.test.ts
deleted file mode 100644
index aad4e4de5..000000000
--- a/registry/tests/kernel/shim-streaming.test.ts
+++ /dev/null
@@ -1,31 +0,0 @@
-import { afterEach, describe, expect, it } from 'vitest';
-import {
-  createIntegrationKernel,
-  describeIf,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-import type { IntegrationKernelResult } from './helpers.ts';
-
-const skipReason = skipUnlessWasmBuilt();
-
-describeIf(!skipReason, 'WASM shim command smoke', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    if (ctx) {
-      await ctx.dispose();
-    }
-  });
-
-  it('nohup and stdbuf execute guest shell commands through WasmVM', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-
-    const nohupResult = await ctx.kernel.exec("nohup sh -c 'printf alpha'");
-    expect(nohupResult.exitCode).toBe(0);
-    expect(nohupResult.stdout).toBe('alpha');
-
-    const stdbufResult = await ctx.kernel.exec("stdbuf -oL sh -c 'printf beta'");
-    expect(stdbufResult.exitCode).toBe(0);
-    expect(stdbufResult.stdout).toBe('beta');
-  });
-});
diff --git a/registry/tests/kernel/signal-forwarding.test.ts b/registry/tests/kernel/signal-forwarding.test.ts
deleted file mode 100644
index 117b079da..000000000
--- a/registry/tests/kernel/signal-forwarding.test.ts
+++ /dev/null
@@ -1,107 +0,0 @@
-/**
- * Integration tests for signal forwarding across runtimes.
- *
- * Verifies that kill(pid, signal) routes correctly through the kernel
- * to the owning runtime driver, regardless of which runtime spawned
- * the process.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-  describeIf,
-  createIntegrationKernel,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-import type { IntegrationKernelResult } from './helpers.ts';
-
-const skipReason = skipUnlessWasmBuilt();
-
-describeIf(!skipReason, 'signal forwarding (integration)', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    if (ctx) await ctx.dispose();
-  });
-
-  it('SIGTERM terminates a long-running WasmVM process', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-
-    // Spawn a process that would run for 60 seconds
-    const proc = ctx.kernel.spawn('sleep', ['60']);
-    expect(proc.pid).toBeGreaterThan(0);
-    expect(ctx.kernel.processes.get(proc.pid)?.status).toBe('running');
-
-    // Send SIGTERM
-    proc.kill(15);
-    const code = await proc.wait();
-
-    // Process should exit with non-zero code (signal termination)
-    expect(code).not.toBe(0);
-  }, 10_000);
-
-  it('SIGKILL terminates a WasmVM process', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-
-    const proc = ctx.kernel.spawn('sleep', ['60']);
-    proc.kill(9); // SIGKILL
-    const code = await proc.wait();
-
-    expect(code).not.toBe(0);
-  }, 10_000);
-
-  it('Node process can be killed via SIGTERM', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    // Spawn a Node process that hangs
-    const proc = ctx.kernel.spawn('node', ['-e', 'setTimeout(()=>{},60000)']);
-    expect(proc.pid).toBeGreaterThan(0);
-
-    proc.kill(15);
-    const code = await proc.wait();
-
-    expect(code).not.toBe(0);
-  }, 10_000);
-
-  it('cross-runtime: WasmVM process killed while Node process runs', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    // Spawn processes in both runtimes
-    const wasmProc = ctx.kernel.spawn('sleep', ['60']);
-    const nodeProc = ctx.kernel.spawn('node', ['-e', 'setTimeout(()=>{},60000)']);
-
-    expect(wasmProc.pid).not.toBe(nodeProc.pid);
-
-    // Kill only the WasmVM process
-    wasmProc.kill(15);
-    const wasmCode = await wasmProc.wait();
-    expect(wasmCode).not.toBe(0);
-
-    // Node process should still be running
-    expect(ctx.kernel.processes.get(nodeProc.pid)?.status).toBe('running');
-
-    // Clean up the Node process
-    nodeProc.kill(15);
-    await nodeProc.wait();
-  }, 15_000);
-
-  it('killing a non-existent PID returns ESRCH', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm'] });
-
-    // Spawn and wait for a process to exit
-    const result = await ctx.kernel.exec('echo done');
-    expect(result.exitCode).toBe(0);
-
-    // Try to kill a PID that doesn't exist
-    expect(() => ctx.kernel.spawn('true', []).kill.call(
-      { kill: () => {} }, // dummy
-    )).not.toThrow(); // sanity check
-
-    // Direct kernel interface kill on bad PID. Spawn a helper to get KI access.
-    // Since Kernel doesn't expose kill() directly, verify through the process table
-    // by spawning and killing a process that already exited.
-    const proc = ctx.kernel.spawn('true', []);
-    await proc.wait();
-    // kill after exit is a no-op (not an error)
-    proc.kill(15);
-  }, 10_000);
-});
diff --git a/registry/tests/kernel/tree-test.test.ts b/registry/tests/kernel/tree-test.test.ts
deleted file mode 100644
index 850b5e371..000000000
--- a/registry/tests/kernel/tree-test.test.ts
+++ /dev/null
@@ -1,152 +0,0 @@
-/**
- * Tree command behavior tests.
- *
- * Verifies that `tree` works correctly in both kernel.exec() and
- * interactive shell modes, including edge cases like nonexistent paths,
- * nested directories, and empty directories.
- */
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-  describeIf,
-  createIntegrationKernel,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-import type { IntegrationKernelResult } from './helpers.ts';
-
-const wasmSkip = skipUnlessWasmBuilt();
-const TREE_COMMAND_TIMEOUT_MS = 20_000;
-const TREE_TEST_TIMEOUT_MS = 30_000;
-
-describeIf(!wasmSkip, 'tree command behavior', () => {
-  let ctx: IntegrationKernelResult;
-  afterEach(async () => { await ctx?.dispose().catch(() => {}); });
-
-  // -----------------------------------------------------------------------
-  // kernel.exec tests
-  // -----------------------------------------------------------------------
-
-  it('kernel.exec tree / returns with directory listing', async () => {
-    ctx = await createIntegrationKernel();
-    const result = await ctx.kernel.exec('tree /', {
-      timeout: TREE_COMMAND_TIMEOUT_MS,
-    });
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('bin');
-    // Tree summary line
-    expect(result.stdout).toMatch(/\d+ director/);
-    expect(result.stdout).toMatch(/\d+ file/);
-  }, TREE_TEST_TIMEOUT_MS);
-
-  it('kernel.exec tree /nonexistent returns non-zero with error', async () => {
-    ctx = await createIntegrationKernel();
-    const result = await ctx.kernel.exec('tree /nonexistent', {
-      timeout: TREE_COMMAND_TIMEOUT_MS,
-    });
-    // tree should report an error for non-existent path
-    const combined = result.stdout + result.stderr;
-    expect(combined).toContain('nonexistent');
-  }, TREE_TEST_TIMEOUT_MS);
-
-  it('tree on VFS with 3-level nested directories renders correct structure', async () => {
-    ctx = await createIntegrationKernel();
-    const enc = new TextEncoder();
-    ctx.vfs.writeFile('/project/src/lib/utils.ts', enc.encode('export {}'));
-    ctx.vfs.writeFile('/project/src/lib/types.ts', enc.encode('export {}'));
-    ctx.vfs.writeFile('/project/src/index.ts', enc.encode('export {}'));
-    ctx.vfs.writeFile('/project/README.md', enc.encode('# project'));
-
-    const result = await ctx.kernel.exec('tree /project', {
-      timeout: TREE_COMMAND_TIMEOUT_MS,
-    });
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('src');
-    expect(result.stdout).toContain('lib');
-    expect(result.stdout).toContain('utils.ts');
-    expect(result.stdout).toContain('types.ts');
-    expect(result.stdout).toContain('index.ts');
-    expect(result.stdout).toContain('README.md');
-    // Should show 2 directories (src, lib) and 4 files
-    expect(result.stdout).toMatch(/2 director/);
-    expect(result.stdout).toMatch(/4 file/);
-  }, TREE_TEST_TIMEOUT_MS);
-
-  it('tree on empty directory shows minimal output', async () => {
-    ctx = await createIntegrationKernel();
-    ctx.vfs.mkdir('/empty');
-
-    const result = await ctx.kernel.exec('tree /empty', {
-      timeout: TREE_COMMAND_TIMEOUT_MS,
-    });
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('/empty');
-    // Empty directory: 0 directories, 0 files
-    expect(result.stdout).toMatch(/0 director/);
-    expect(result.stdout).toMatch(/0 file/);
-  }, TREE_TEST_TIMEOUT_MS);
-
-  // -----------------------------------------------------------------------
-  // Interactive shell tests
-  // -----------------------------------------------------------------------
-
-  it('interactive shell: tree / produces output and prompt returns', async () => {
-    ctx = await createIntegrationKernel();
-    const shell = ctx.kernel.openShell();
-
-    let output = '';
-    shell.onData = (data) => { output += new TextDecoder().decode(data); };
-
-    // Wait for initial prompt
-    await new Promise((r) => setTimeout(r, 1500));
-    output = '';
-
-    shell.write('tree /\n');
-
-    // Wait for tree completion (summary line + new prompt)
-    const start = Date.now();
-    while (Date.now() - start < TREE_COMMAND_TIMEOUT_MS) {
-      await new Promise((r) => setTimeout(r, 200));
-      if (output.includes('file') && output.includes('$ ')) break;
-    }
-
-    expect(output).toContain('bin');
-    expect(output).toMatch(/\d+ file/);
-    // Prompt returned
-    expect(output).toContain('$ ');
-
-    shell.write('exit\n');
-    await Promise.race([
-      shell.wait(),
-      new Promise((_, rej) => setTimeout(() => rej('timeout'), 3000)),
-    ]).catch(() => {});
-  }, TREE_TEST_TIMEOUT_MS);
-
-  it('tree does not hang when stdin is an empty PTY', async () => {
-    ctx = await createIntegrationKernel();
-    const shell = ctx.kernel.openShell();
-
-    let output = '';
-    shell.onData = (data) => { output += new TextDecoder().decode(data); };
-
-    await new Promise((r) => setTimeout(r, 1500));
-    output = '';
-
-    // tree never reads stdin. It should complete regardless of PTY stdin state.
-    shell.write('tree /\n');
-
-    const start = Date.now();
-    while (Date.now() - start < TREE_COMMAND_TIMEOUT_MS) {
-      await new Promise((r) => setTimeout(r, 200));
-      if (output.includes('file') && output.includes('$ ')) break;
-    }
-
-    const elapsed = Date.now() - start;
-    expect(elapsed).toBeLessThan(TREE_COMMAND_TIMEOUT_MS);
-    expect(output).toContain('bin');
-
-    shell.write('exit\n');
-    await Promise.race([
-      shell.wait(),
-      new Promise((_, rej) => setTimeout(() => rej('timeout'), 3000)),
-    ]).catch(() => {});
-  }, TREE_TEST_TIMEOUT_MS);
-});
diff --git a/registry/tests/kernel/vfs-consistency.test.ts b/registry/tests/kernel/vfs-consistency.test.ts
deleted file mode 100644
index c4a1fa04a..000000000
--- a/registry/tests/kernel/vfs-consistency.test.ts
+++ /dev/null
@@ -1,112 +0,0 @@
-/**
- * Cross-runtime VFS consistency tests.
- *
- * Verifies that file writes in one runtime are immediately visible to
- * reads in another runtime, since all runtimes share the kernel VFS.
- *
- * Gracefully skipped when the WASM binary is not built.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-  describeIf,
-  createIntegrationKernel,
-  skipUnlessWasmBuilt,
-} from './helpers.ts';
-import type { IntegrationKernelResult } from './helpers.ts';
-
-const skipReason = skipUnlessWasmBuilt();
-
-describeIf(!skipReason, 'cross-runtime VFS consistency', () => {
-  let ctx: IntegrationKernelResult;
-
-  afterEach(async () => {
-    if (ctx) await ctx.dispose();
-  });
-
-  it('kernel write visible to Node', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-    await ctx.kernel.writeFile('/tmp/test.txt', 'hello');
-
-    const result = await ctx.kernel.exec(
-      `node -e "process.stdout.write(require('fs').readFileSync('/tmp/test.txt','utf8'))"`,
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('hello');
-  });
-
-  it('Node write visible to WasmVM', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    // Node writes a file
-    const writeResult = await ctx.kernel.exec(
-      `node -e "require('fs').writeFileSync('/tmp/node-wrote.txt','from-node')"`,
-    );
-    expect(writeResult.exitCode).toBe(0);
-
-    // WasmVM reads it via cat
-    const readResult = await ctx.kernel.exec('cat /tmp/node-wrote.txt');
-    expect(readResult.exitCode).toBe(0);
-    expect(readResult.stdout).toContain('from-node');
-  });
-
-  it('Node write visible to kernel API', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    const writeResult = await ctx.kernel.exec(
-      `node -e "require('fs').writeFileSync('/tmp/k.txt','data')"`,
-    );
-    expect(writeResult.exitCode).toBe(0);
-
-    const content = await ctx.vfs.readTextFile('/tmp/k.txt');
-    expect(content).toBe('data');
-  });
-
-  it('directory listing consistent across runtimes', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    // Create 3 files via kernel API
-    await ctx.kernel.writeFile('/tmp/a.txt', 'a');
-    await ctx.kernel.writeFile('/tmp/b.txt', 'b');
-    await ctx.kernel.writeFile('/tmp/c.txt', 'c');
-
-    // WasmVM ls
-    const lsResult = await ctx.kernel.exec('ls /tmp');
-    expect(lsResult.exitCode).toBe(0);
-
-    // Node readdirSync
-    const nodeResult = await ctx.kernel.exec(
-      `node -e "console.log(require('fs').readdirSync('/tmp').sort().join(','))"`,
-    );
-    expect(nodeResult.exitCode).toBe(0);
-
-    // Both should list the same files
-    const lsFiles = lsResult.stdout
-      .trim()
-      .split(/\s+/)
-      .filter(Boolean)
-      .sort();
-    const nodeFiles = nodeResult.stdout.trim().split(',').filter(Boolean).sort();
-
-    expect(lsFiles).toContain('a.txt');
-    expect(lsFiles).toContain('b.txt');
-    expect(lsFiles).toContain('c.txt');
-    expect(nodeFiles).toContain('a.txt');
-    expect(nodeFiles).toContain('b.txt');
-    expect(nodeFiles).toContain('c.txt');
-  });
-
-  it('ENOENT consistent across runtimes', async () => {
-    ctx = await createIntegrationKernel({ runtimes: ['wasmvm', 'node'] });
-
-    // WasmVM cat nonexistent file
-    const catResult = await ctx.kernel.exec('cat /nonexistent');
-    expect(catResult.exitCode).not.toBe(0);
-
-    // Node readFileSync nonexistent file
-    const nodeResult = await ctx.kernel.exec(
-      `node -e "require('fs').readFileSync('/nonexistent')"`,
-    );
-    expect(nodeResult.exitCode).not.toBe(0);
-  });
-});
diff --git a/registry/tests/projects/astro-pass/astro.config.mjs b/registry/tests/projects/astro-pass/astro.config.mjs
deleted file mode 100644
index ce7d8d2b3..000000000
--- a/registry/tests/projects/astro-pass/astro.config.mjs
+++ /dev/null
@@ -1,6 +0,0 @@
-import { defineConfig } from "astro/config";
-import react from "@astrojs/react";
-
-export default defineConfig({
-	integrations: [react()],
-});
diff --git a/registry/tests/projects/astro-pass/fixture.json b/registry/tests/projects/astro-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/astro-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/astro-pass/package.json b/registry/tests/projects/astro-pass/package.json
deleted file mode 100644
index 7fe1496c1..000000000
--- a/registry/tests/projects/astro-pass/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "project-matrix-astro-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"@astrojs/react": "3.6.2",
-		"astro": "4.15.9",
-		"react": "18.3.1",
-		"react-dom": "18.3.1"
-	},
-	"pnpm": {
-		"overrides": {
-			"esbuild": "npm:esbuild-wasm@0.21.5",
-			"rollup": "npm:@rollup/wasm-node@4.61.0"
-		}
-	}
-}
diff --git a/registry/tests/projects/astro-pass/src/components/Counter.jsx b/registry/tests/projects/astro-pass/src/components/Counter.jsx
deleted file mode 100644
index a735e52d8..000000000
--- a/registry/tests/projects/astro-pass/src/components/Counter.jsx
+++ /dev/null
@@ -1,8 +0,0 @@
-import { useState } from "react";
-
-export default function Counter() {
-	const [count, setCount] = useState(0);
-	return (
-		<button onClick={() => setCount(count + 1)}>Count: {count}</button>
-	);
-}
diff --git a/registry/tests/projects/astro-pass/src/index.js b/registry/tests/projects/astro-pass/src/index.js
deleted file mode 100644
index b69c0ef1d..000000000
--- a/registry/tests/projects/astro-pass/src/index.js
+++ /dev/null
@@ -1,71 +0,0 @@
-"use strict";
-
-var fs = require("fs");
-var path = require("path");
-
-var projectDir = path.resolve(__dirname, "..");
-var distDir = path.join(projectDir, "dist");
-
-function ensureBuild() {
-	try {
-		fs.statSync(path.join(distDir, "index.html"));
-		return;
-	} catch (e) {
-		// Build output missing — run build
-	}
-	var execFileSync = require("child_process").execFileSync;
-	var astroBin = path.join(projectDir, "node_modules", "astro", "astro.js");
-	var buildEnv = Object.assign({}, process.env);
-	if (!buildEnv.PATH) {
-		buildEnv.PATH =
-			"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
-	}
-	buildEnv.ASTRO_TELEMETRY_DISABLED = "1";
-	execFileSync(process.execPath, [astroBin, "build"], {
-		cwd: projectDir,
-		stdio: "pipe",
-		timeout: 60000,
-		env: buildEnv,
-	});
-}
-
-function main() {
-	ensureBuild();
-
-	var results = [];
-
-	// Check index.html was generated
-	var indexHtml = fs.readFileSync(path.join(distDir, "index.html"), "utf8");
-	results.push({
-		check: "index-html",
-		exists: true,
-		hasContent: indexHtml.indexOf("Hello from Astro") !== -1,
-		hasScript: indexHtml.indexOf("<script") !== -1,
-	});
-
-	// Check for hydrated island (astro-island custom element)
-	results.push({
-		check: "island-hydration",
-		hasIsland: indexHtml.indexOf("astro-island") !== -1,
-	});
-
-	// Check _astro assets directory for client JS
-	var astroAssetsDir = path.join(distDir, "_astro");
-	var hasClientJs = false;
-	try {
-		var assets = fs.readdirSync(astroAssetsDir);
-		hasClientJs = assets.some(function (f) {
-			return f.endsWith(".js");
-		});
-	} catch (e) {
-		// _astro dir might not exist if no client-side JS
-	}
-	results.push({
-		check: "client-assets",
-		hasClientJs: hasClientJs,
-	});
-
-	console.log(JSON.stringify(results));
-}
-
-main();
diff --git a/registry/tests/projects/astro-pass/src/pages/index.astro b/registry/tests/projects/astro-pass/src/pages/index.astro
deleted file mode 100644
index 865c3e8dd..000000000
--- a/registry/tests/projects/astro-pass/src/pages/index.astro
+++ /dev/null
@@ -1,13 +0,0 @@
----
-import Counter from '../components/Counter.jsx';
----
-<html lang="en">
-	<head>
-		<meta charset="UTF-8" />
-		<title>Astro App</title>
-	</head>
-	<body>
-		<h1>Hello from Astro</h1>
-		<Counter client:load />
-	</body>
-</html>
diff --git a/registry/tests/projects/axios-pass/fixture.json b/registry/tests/projects/axios-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/axios-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/axios-pass/package.json b/registry/tests/projects/axios-pass/package.json
deleted file mode 100644
index cab0ed0ec..000000000
--- a/registry/tests/projects/axios-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-axios-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"axios": "1.7.9"
-	}
-}
diff --git a/registry/tests/projects/axios-pass/src/index.js b/registry/tests/projects/axios-pass/src/index.js
deleted file mode 100644
index 9df311fb3..000000000
--- a/registry/tests/projects/axios-pass/src/index.js
+++ /dev/null
@@ -1,54 +0,0 @@
-"use strict";
-
-const http = require("http");
-const axios = require("axios");
-
-const client = axios.create({ adapter: "fetch" });
-
-const server = http.createServer((req, res) => {
-	if (req.method === "GET" && req.url === "/hello") {
-		res.writeHead(200, { "Content-Type": "application/json" });
-		res.end(JSON.stringify({ message: "hello" }));
-	} else if (req.method === "GET" && req.url === "/users/42") {
-		res.writeHead(200, { "Content-Type": "application/json" });
-		res.end(JSON.stringify({ id: "42", name: "test-user" }));
-	} else if (req.method === "POST" && req.url === "/data") {
-		let body = "";
-		req.on("data", (chunk) => (body += chunk));
-		req.on("end", () => {
-			res.writeHead(200, { "Content-Type": "application/json" });
-			res.end(JSON.stringify({ method: "POST", received: JSON.parse(body) }));
-		});
-	} else {
-		res.writeHead(404);
-		res.end();
-	}
-});
-
-async function main() {
-	await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
-	const port = server.address().port;
-	const base = "http://127.0.0.1:" + port;
-
-	try {
-		const results = [];
-
-		const r1 = await client.get(base + "/hello");
-		results.push({ route: "GET /hello", status: r1.status, body: r1.data });
-
-		const r2 = await client.get(base + "/users/42");
-		results.push({ route: "GET /users/42", status: r2.status, body: r2.data });
-
-		const r3 = await client.post(base + "/data", { key: "value" });
-		results.push({ route: "POST /data", status: r3.status, body: r3.data });
-
-		console.log(JSON.stringify(results));
-	} finally {
-		await new Promise((resolve) => server.close(resolve));
-	}
-}
-
-main().catch((err) => {
-	console.error(err.message);
-	process.exit(1);
-});
diff --git a/registry/tests/projects/bcryptjs-pass/fixture.json b/registry/tests/projects/bcryptjs-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/bcryptjs-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/bcryptjs-pass/package.json b/registry/tests/projects/bcryptjs-pass/package.json
deleted file mode 100644
index 379988725..000000000
--- a/registry/tests/projects/bcryptjs-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-bcryptjs-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"bcryptjs": "2.4.3"
-	}
-}
diff --git a/registry/tests/projects/bcryptjs-pass/pnpm-lock.yaml b/registry/tests/projects/bcryptjs-pass/pnpm-lock.yaml
deleted file mode 100644
index a2a764912..000000000
--- a/registry/tests/projects/bcryptjs-pass/pnpm-lock.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-lockfileVersion: '9.0'
-
-settings:
-  autoInstallPeers: true
-  excludeLinksFromLockfile: false
-
-importers:
-
-  .:
-    dependencies:
-      bcryptjs:
-        specifier: 2.4.3
-        version: 2.4.3
-
-packages:
-
-  bcryptjs@2.4.3:
-    resolution: {integrity: sha512-V/Hy/X9Vt7f3BbPJEi8BdVFMByHi+jNXrYkW3huaybV/kQ0KJg0Y6PkEMbn+zeT+i+SiKZ/HMqJGIIt4LZDqNQ==}
-
-snapshots:
-
-  bcryptjs@2.4.3: {}
diff --git a/registry/tests/projects/bcryptjs-pass/src/index.js b/registry/tests/projects/bcryptjs-pass/src/index.js
deleted file mode 100644
index 78441d2c9..000000000
--- a/registry/tests/projects/bcryptjs-pass/src/index.js
+++ /dev/null
@@ -1,26 +0,0 @@
-"use strict";
-
-const bcrypt = require("bcryptjs");
-
-// Hash a password with explicit salt rounds
-const password = "testPassword123";
-const salt = bcrypt.genSaltSync(4);
-const hash = bcrypt.hashSync(password, salt);
-
-// Verify correct password
-const correctMatch = bcrypt.compareSync(password, hash);
-
-// Verify wrong password
-const wrongMatch = bcrypt.compareSync("wrongPassword", hash);
-
-// Hash format validation
-const isValidHash = hash.startsWith("$2a$04$") && hash.length === 60;
-
-const result = {
-	hashLength: hash.length,
-	correctMatch,
-	wrongMatch,
-	isValidHash,
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/bun-layout-pass/bun.lock b/registry/tests/projects/bun-layout-pass/bun.lock
deleted file mode 100644
index 230026f9d..000000000
--- a/registry/tests/projects/bun-layout-pass/bun.lock
+++ /dev/null
@@ -1,15 +0,0 @@
-{
-  "lockfileVersion": 1,
-  "configVersion": 1,
-  "workspaces": {
-    "": {
-      "name": "project-matrix-bun-layout-pass",
-      "dependencies": {
-        "left-pad": "0.0.3",
-      },
-    },
-  },
-  "packages": {
-    "left-pad": ["left-pad@0.0.3", "", {}, "sha512-Qli5dSpAXQOSw1y/M+uBKT37rj6iZAQMz6Uy5/ZYGIhBLS/ODRHqL4XIDvSAtYpjfia0XKNztlPFa806TWw5Gw=="],
-  }
-}
diff --git a/registry/tests/projects/bun-layout-pass/fixture.json b/registry/tests/projects/bun-layout-pass/fixture.json
deleted file mode 100644
index 895c6330a..000000000
--- a/registry/tests/projects/bun-layout-pass/fixture.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass",
-	"packageManager": "bun"
-}
diff --git a/registry/tests/projects/bun-layout-pass/package.json b/registry/tests/projects/bun-layout-pass/package.json
deleted file mode 100644
index 60d39f727..000000000
--- a/registry/tests/projects/bun-layout-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-bun-layout-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"left-pad": "0.0.3"
-	}
-}
diff --git a/registry/tests/projects/bun-layout-pass/src/index.js b/registry/tests/projects/bun-layout-pass/src/index.js
deleted file mode 100644
index 6ab481e2f..000000000
--- a/registry/tests/projects/bun-layout-pass/src/index.js
+++ /dev/null
@@ -1,11 +0,0 @@
-"use strict";
-
-const leftPad = require("left-pad");
-
-const results = [
-	{ input: "hello", width: 10, padded: leftPad("hello", 10) },
-	{ input: "42", width: 5, fill: "0", padded: leftPad("42", 5, "0") },
-	{ input: "", width: 3, padded: leftPad("", 3) },
-];
-
-console.log(JSON.stringify(results));
diff --git a/registry/tests/projects/chalk-pass/fixture.json b/registry/tests/projects/chalk-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/chalk-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/chalk-pass/package.json b/registry/tests/projects/chalk-pass/package.json
deleted file mode 100644
index f08c340d5..000000000
--- a/registry/tests/projects/chalk-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-chalk-pass",
-	"private": true,
-	"type": "module",
-	"dependencies": {
-		"chalk": "5.4.1"
-	}
-}
diff --git a/registry/tests/projects/chalk-pass/src/index.js b/registry/tests/projects/chalk-pass/src/index.js
deleted file mode 100644
index 7d4a196cb..000000000
--- a/registry/tests/projects/chalk-pass/src/index.js
+++ /dev/null
@@ -1,27 +0,0 @@
-import { Chalk } from "chalk";
-
-// Force color level 1 (basic ANSI) for deterministic output across environments
-const c = new Chalk({ level: 1 });
-
-const red = c.red("red");
-const green = c.green("green");
-const blue = c.blue("blue");
-const bold = c.bold("bold");
-const underline = c.underline("underline");
-const nested = c.red.bold.underline("nested");
-const bg = c.bgYellow.black("highlight");
-const combined = c.italic(c.cyan("italic-cyan"));
-
-const result = {
-	red,
-	green,
-	blue,
-	bold,
-	underline,
-	nested,
-	bg,
-	combined,
-	supportsLevel: typeof c.level,
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/conditional-exports-pass/fixture.json b/registry/tests/projects/conditional-exports-pass/fixture.json
deleted file mode 100644
index a534708f5..000000000
--- a/registry/tests/projects/conditional-exports-pass/fixture.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass",
-	"packageManager": "npm"
-}
diff --git a/registry/tests/projects/conditional-exports-pass/package-lock.json b/registry/tests/projects/conditional-exports-pass/package-lock.json
deleted file mode 100644
index a91b38356..000000000
--- a/registry/tests/projects/conditional-exports-pass/package-lock.json
+++ /dev/null
@@ -1,21 +0,0 @@
-{
-	"name": "project-matrix-conditional-exports-pass",
-	"lockfileVersion": 3,
-	"requires": true,
-	"packages": {
-		"": {
-			"name": "project-matrix-conditional-exports-pass",
-			"dependencies": {
-				"@cond-test/lib": "file:packages/cond-exports-lib"
-			}
-		},
-		"node_modules/@cond-test/lib": {
-			"resolved": "packages/cond-exports-lib",
-			"link": true
-		},
-		"packages/cond-exports-lib": {
-			"name": "@cond-test/lib",
-			"version": "1.0.0"
-		}
-	}
-}
diff --git a/registry/tests/projects/conditional-exports-pass/package.json b/registry/tests/projects/conditional-exports-pass/package.json
deleted file mode 100644
index f4fa74bef..000000000
--- a/registry/tests/projects/conditional-exports-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-conditional-exports-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"@cond-test/lib": "file:packages/cond-exports-lib"
-	}
-}
diff --git a/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/lib/feature-cjs.js b/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/lib/feature-cjs.js
deleted file mode 100644
index bd42e585e..000000000
--- a/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/lib/feature-cjs.js
+++ /dev/null
@@ -1,2 +0,0 @@
-"use strict";
-module.exports = { name: "feature-cjs", enabled: true };
diff --git a/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/lib/feature-default.js b/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/lib/feature-default.js
deleted file mode 100644
index ebb7fa197..000000000
--- a/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/lib/feature-default.js
+++ /dev/null
@@ -1,2 +0,0 @@
-"use strict";
-module.exports = { name: "feature-default", enabled: true };
diff --git a/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/lib/main-cjs.js b/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/lib/main-cjs.js
deleted file mode 100644
index 3b61bdc4e..000000000
--- a/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/lib/main-cjs.js
+++ /dev/null
@@ -1,2 +0,0 @@
-"use strict";
-module.exports = { entry: "main-cjs", version: "1.0.0" };
diff --git a/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/lib/main-default.js b/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/lib/main-default.js
deleted file mode 100644
index 37cfc368e..000000000
--- a/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/lib/main-default.js
+++ /dev/null
@@ -1,2 +0,0 @@
-"use strict";
-module.exports = { entry: "main-default", version: "1.0.0" };
diff --git a/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/package.json b/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/package.json
deleted file mode 100644
index abebeb237..000000000
--- a/registry/tests/projects/conditional-exports-pass/packages/cond-exports-lib/package.json
+++ /dev/null
@@ -1,14 +0,0 @@
-{
-	"name": "@cond-test/lib",
-	"version": "1.0.0",
-	"exports": {
-		".": {
-			"require": "./lib/main-cjs.js",
-			"default": "./lib/main-default.js"
-		},
-		"./feature": {
-			"require": "./lib/feature-cjs.js",
-			"default": "./lib/feature-default.js"
-		}
-	}
-}
diff --git a/registry/tests/projects/conditional-exports-pass/src/index.js b/registry/tests/projects/conditional-exports-pass/src/index.js
deleted file mode 100644
index c7382ed51..000000000
--- a/registry/tests/projects/conditional-exports-pass/src/index.js
+++ /dev/null
@@ -1,13 +0,0 @@
-"use strict";
-
-const main = require("@cond-test/lib");
-const feature = require("@cond-test/lib/feature");
-
-const result = {
-	mainEntry: main.entry,
-	mainVersion: main.version,
-	featureName: feature.name,
-	featureEnabled: feature.enabled
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/crypto-random-pass/fixture.json b/registry/tests/projects/crypto-random-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/crypto-random-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/crypto-random-pass/package.json b/registry/tests/projects/crypto-random-pass/package.json
deleted file mode 100644
index 20cbb8795..000000000
--- a/registry/tests/projects/crypto-random-pass/package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"name": "project-matrix-crypto-random-pass",
-	"private": true,
-	"type": "commonjs"
-}
diff --git a/registry/tests/projects/crypto-random-pass/src/index.js b/registry/tests/projects/crypto-random-pass/src/index.js
deleted file mode 100644
index df8301dc9..000000000
--- a/registry/tests/projects/crypto-random-pass/src/index.js
+++ /dev/null
@@ -1,15 +0,0 @@
-const bytes = new Uint8Array(16);
-crypto.getRandomValues(bytes);
-
-const uuid = crypto.randomUUID();
-const uuidV4Pattern =
-	/^[0-9a-f]{8}-[0-9a-f]{4}-4[0-9a-f]{3}-[89ab][0-9a-f]{3}-[0-9a-f]{12}$/;
-
-console.log(
-	JSON.stringify({
-		uuidV4: uuidV4Pattern.test(uuid),
-		uuidLength: uuid.length,
-		randomValuesLength: bytes.length,
-		arrayTag: Object.prototype.toString.call(bytes),
-	}),
-);
diff --git a/registry/tests/projects/dotenv-pass/.env b/registry/tests/projects/dotenv-pass/.env
deleted file mode 100644
index 542d15888..000000000
--- a/registry/tests/projects/dotenv-pass/.env
+++ /dev/null
@@ -1 +0,0 @@
-GREETING=hello-from-dotenv
diff --git a/registry/tests/projects/dotenv-pass/fixture.json b/registry/tests/projects/dotenv-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/dotenv-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/dotenv-pass/package.json b/registry/tests/projects/dotenv-pass/package.json
deleted file mode 100644
index e17ab2a36..000000000
--- a/registry/tests/projects/dotenv-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-dotenv-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"dotenv": "16.6.1"
-	}
-}
diff --git a/registry/tests/projects/dotenv-pass/src/index.js b/registry/tests/projects/dotenv-pass/src/index.js
deleted file mode 100644
index e43a90fd1..000000000
--- a/registry/tests/projects/dotenv-pass/src/index.js
+++ /dev/null
@@ -1,12 +0,0 @@
-const path = require("node:path");
-const dotenv = require("dotenv");
-
-const result = dotenv.config({
-	path: path.join(__dirname, "..", ".env"),
-});
-
-if (result.error) {
-	throw result.error;
-}
-
-console.log(`GREETING=${process.env.GREETING}`);
diff --git a/registry/tests/projects/drizzle-pass/fixture.json b/registry/tests/projects/drizzle-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/drizzle-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/drizzle-pass/package.json b/registry/tests/projects/drizzle-pass/package.json
deleted file mode 100644
index 473df90e7..000000000
--- a/registry/tests/projects/drizzle-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-drizzle-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"drizzle-orm": "0.45.1"
-	}
-}
diff --git a/registry/tests/projects/drizzle-pass/src/index.js b/registry/tests/projects/drizzle-pass/src/index.js
deleted file mode 100644
index 83a31b2b8..000000000
--- a/registry/tests/projects/drizzle-pass/src/index.js
+++ /dev/null
@@ -1,45 +0,0 @@
-"use strict";
-
-const { pgTable, text, integer, serial, varchar, boolean } = require("drizzle-orm/pg-core");
-const { eq, and, sql } = require("drizzle-orm");
-
-// Define a table schema without connecting to a database
-const users = pgTable("users", {
-	id: serial("id").primaryKey(),
-	name: text("name").notNull(),
-	email: varchar("email", { length: 255 }).notNull(),
-	age: integer("age"),
-	active: boolean("active").default(true),
-});
-
-// Inspect schema shape
-const tableName = users[Symbol.for("drizzle:Name")];
-const columnNames = Object.keys(users)
-	.filter((k) => typeof k === "string" && !k.startsWith("_"))
-	.sort();
-const idIsPrimary = users.id.primary;
-const nameNotNull = users.name.notNull;
-const emailLength = users.email.config ? users.email.config.length : null;
-
-// Verify operators exist
-const eqExists = typeof eq === "function";
-const andExists = typeof and === "function";
-const sqlExists = typeof sql === "function";
-
-// Verify sql template tag produces a fragment object
-const fragment = sql`${users.id} = 1`;
-const fragmentExists = fragment !== null && typeof fragment === "object";
-
-const result = {
-	tableName,
-	columnNames,
-	idIsPrimary,
-	nameNotNull,
-	emailLength,
-	eqExists,
-	andExists,
-	sqlExists,
-	fragmentExists,
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/esm-import-pass/fixture.json b/registry/tests/projects/esm-import-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/esm-import-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/esm-import-pass/package.json b/registry/tests/projects/esm-import-pass/package.json
deleted file mode 100644
index 275266d7c..000000000
--- a/registry/tests/projects/esm-import-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-esm-import-pass",
-	"private": true,
-	"type": "module",
-	"dependencies": {
-		"hono": "4.7.5"
-	}
-}
diff --git a/registry/tests/projects/esm-import-pass/src/index.js b/registry/tests/projects/esm-import-pass/src/index.js
deleted file mode 100644
index e39aaf03b..000000000
--- a/registry/tests/projects/esm-import-pass/src/index.js
+++ /dev/null
@@ -1,9 +0,0 @@
-import { Hono } from "hono";
-
-const app = new Hono();
-
-const result = {
-	fetchType: typeof app.fetch,
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/express-pass/fixture.json b/registry/tests/projects/express-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/express-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/express-pass/package.json b/registry/tests/projects/express-pass/package.json
deleted file mode 100644
index a54ebe8e9..000000000
--- a/registry/tests/projects/express-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-express-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"express": "4.21.2"
-	}
-}
diff --git a/registry/tests/projects/express-pass/pnpm-lock.yaml b/registry/tests/projects/express-pass/pnpm-lock.yaml
deleted file mode 100644
index b4cdc131a..000000000
--- a/registry/tests/projects/express-pass/pnpm-lock.yaml
+++ /dev/null
@@ -1,585 +0,0 @@
-lockfileVersion: '9.0'
-
-settings:
-  autoInstallPeers: true
-  excludeLinksFromLockfile: false
-
-importers:
-
-  .:
-    dependencies:
-      express:
-        specifier: 4.21.2
-        version: 4.21.2
-
-packages:
-
-  accepts@1.3.8:
-    resolution: {integrity: sha512-PYAthTa2m2VKxuvSD3DPC/Gy+U+sOA1LAuT8mkmRuvw+NACSaeXEQ+NHcVF7rONl6qcaxV3Uuemwawk+7+SJLw==}
-    engines: {node: '>= 0.6'}
-
-  array-flatten@1.1.1:
-    resolution: {integrity: sha512-PCVAQswWemu6UdxsDFFX/+gVeYqKAod3D3UVm91jHwynguOwAvYPhx8nNlM++NqRcK6CxxpUafjmhIdKiHibqg==}
-
-  body-parser@1.20.3:
-    resolution: {integrity: sha512-7rAxByjUMqQ3/bHJy7D6OGXvx/MMc4IqBn/X0fcM1QUcAItpZrBEYhWGem+tzXH90c+G01ypMcYJBO9Y30203g==}
-    engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
-
-  bytes@3.1.2:
-    resolution: {integrity: sha512-/Nf7TyzTx6S3yRJObOAV7956r8cr2+Oj8AC5dt8wSP3BQAoeX58NoHyCU8P8zGkNXStjTSi6fzO6F0pBdcYbEg==}
-    engines: {node: '>= 0.8'}
-
-  call-bind-apply-helpers@1.0.2:
-    resolution: {integrity: sha512-Sp1ablJ0ivDkSzjcaJdxEunN5/XvksFJ2sMBFfq6x0ryhQV/2b/KwFe21cMpmHtPOSij8K99/wSfoEuTObmuMQ==}
-    engines: {node: '>= 0.4'}
-
-  call-bound@1.0.4:
-    resolution: {integrity: sha512-+ys997U96po4Kx/ABpBCqhA9EuxJaQWDQg7295H4hBphv3IZg0boBKuwYpt4YXp6MZ5AmZQnU/tyMTlRpaSejg==}
-    engines: {node: '>= 0.4'}
-
-  content-disposition@0.5.4:
-    resolution: {integrity: sha512-FveZTNuGw04cxlAiWbzi6zTAL/lhehaWbTtgluJh4/E95DqMwTmha3KZN1aAWA8cFIhHzMZUvLevkw5Rqk+tSQ==}
-    engines: {node: '>= 0.6'}
-
-  content-type@1.0.5:
-    resolution: {integrity: sha512-nTjqfcBFEipKdXCv4YDQWCfmcLZKm81ldF0pAopTvyrFGVbcR6P/VAAd5G7N+0tTr8QqiU0tFadD6FK4NtJwOA==}
-    engines: {node: '>= 0.6'}
-
-  cookie-signature@1.0.6:
-    resolution: {integrity: sha512-QADzlaHc8icV8I7vbaJXJwod9HWYp8uCqf1xa4OfNu1T7JVxQIrUgOWtHdNDtPiywmFbiS12VjotIXLrKM3orQ==}
-
-  cookie@0.7.1:
-    resolution: {integrity: sha512-6DnInpx7SJ2AK3+CTUE/ZM0vWTUboZCegxhC2xiIydHR9jNuTAASBrfEpHhiGOZw/nX51bHt6YQl8jsGo4y/0w==}
-    engines: {node: '>= 0.6'}
-
-  debug@2.6.9:
-    resolution: {integrity: sha512-bC7ElrdJaJnPbAP+1EotYvqZsb3ecl5wi6Bfi6BJTUcNowp6cvspg0jXznRTKDjm/E7AdgFBVeAPVMNcKGsHMA==}
-    peerDependencies:
-      supports-color: '*'
-    peerDependenciesMeta:
-      supports-color:
-        optional: true
-
-  depd@2.0.0:
-    resolution: {integrity: sha512-g7nH6P6dyDioJogAAGprGpCtVImJhpPk/roCzdb3fIh61/s/nPsfR6onyMwkCAR/OlC3yBC0lESvUoQEAssIrw==}
-    engines: {node: '>= 0.8'}
-
-  destroy@1.2.0:
-    resolution: {integrity: sha512-2sJGJTaXIIaR1w4iJSNoN0hnMY7Gpc/n8D4qSCJw8QqFWXf7cuAgnEHxBpweaVcPevC2l3KpjYCx3NypQQgaJg==}
-    engines: {node: '>= 0.8', npm: 1.2.8000 || >= 1.4.16}
-
-  dunder-proto@1.0.1:
-    resolution: {integrity: sha512-KIN/nDJBQRcXw0MLVhZE9iQHmG68qAVIBg9CqmUYjmQIhgij9U5MFvrqkUL5FbtyyzZuOeOt0zdeRe4UY7ct+A==}
-    engines: {node: '>= 0.4'}
-
-  ee-first@1.1.1:
-    resolution: {integrity: sha512-WMwm9LhRUo+WUaRN+vRuETqG89IgZphVSNkdFgeb6sS/E4OrDIN7t48CAewSHXc6C8lefD8KKfr5vY61brQlow==}
-
-  encodeurl@1.0.2:
-    resolution: {integrity: sha512-TPJXq8JqFaVYm2CWmPvnP2Iyo4ZSM7/QKcSmuMLDObfpH5fi7RUGmd/rTDf+rut/saiDiQEeVTNgAmJEdAOx0w==}
-    engines: {node: '>= 0.8'}
-
-  encodeurl@2.0.0:
-    resolution: {integrity: sha512-Q0n9HRi4m6JuGIV1eFlmvJB7ZEVxu93IrMyiMsGC0lrMJMWzRgx6WGquyfQgZVb31vhGgXnfmPNNXmxnOkRBrg==}
-    engines: {node: '>= 0.8'}
-
-  es-define-property@1.0.1:
-    resolution: {integrity: sha512-e3nRfgfUZ4rNGL232gUgX06QNyyez04KdjFrF+LTRoOXmrOgFKDg4BCdsjW8EnT69eqdYGmRpJwiPVYNrCaW3g==}
-    engines: {node: '>= 0.4'}
-
-  es-errors@1.3.0:
-    resolution: {integrity: sha512-Zf5H2Kxt2xjTvbJvP2ZWLEICxA6j+hAmMzIlypy4xcBg1vKVnx89Wy0GbS+kf5cwCVFFzdCFh2XSCFNULS6csw==}
-    engines: {node: '>= 0.4'}
-
-  es-object-atoms@1.1.1:
-    resolution: {integrity: sha512-FGgH2h8zKNim9ljj7dankFPcICIK9Cp5bm+c2gQSYePhpaG5+esrLODihIorn+Pe6FGJzWhXQotPv73jTaldXA==}
-    engines: {node: '>= 0.4'}
-
-  escape-html@1.0.3:
-    resolution: {integrity: sha512-NiSupZ4OeuGwr68lGIeym/ksIZMJodUGOSCZ/FSnTxcrekbvqrgdUxlJOMpijaKZVjAJrWrGs/6Jy8OMuyj9ow==}
-
-  etag@1.8.1:
-    resolution: {integrity: sha512-aIL5Fx7mawVa300al2BnEE4iNvo1qETxLrPI/o05L7z6go7fCw1J6EQmbK4FmJ2AS7kgVF/KEZWufBfdClMcPg==}
-    engines: {node: '>= 0.6'}
-
-  express@4.21.2:
-    resolution: {integrity: sha512-28HqgMZAmih1Czt9ny7qr6ek2qddF4FclbMzwhCREB6OFfH+rXAnuNCwo1/wFvrtbgsQDb4kSbX9de9lFbrXnA==}
-    engines: {node: '>= 0.10.0'}
-
-  finalhandler@1.3.1:
-    resolution: {integrity: sha512-6BN9trH7bp3qvnrRyzsBz+g3lZxTNZTbVO2EV1CS0WIcDbawYVdYvGflME/9QP0h0pYlCDBCTjYa9nZzMDpyxQ==}
-    engines: {node: '>= 0.8'}
-
-  forwarded@0.2.0:
-    resolution: {integrity: sha512-buRG0fpBtRHSTCOASe6hD258tEubFoRLb4ZNA6NxMVHNw2gOcwHo9wyablzMzOA5z9xA9L1KNjk/Nt6MT9aYow==}
-    engines: {node: '>= 0.6'}
-
-  fresh@0.5.2:
-    resolution: {integrity: sha512-zJ2mQYM18rEFOudeV4GShTGIQ7RbzA7ozbU9I/XBpm7kqgMywgmylMwXHxZJmkVoYkna9d2pVXVXPdYTP9ej8Q==}
-    engines: {node: '>= 0.6'}
-
-  function-bind@1.1.2:
-    resolution: {integrity: sha512-7XHNxH7qX9xG5mIwxkhumTox/MIRNcOgDrxWsMt2pAr23WHp6MrRlN7FBSFpCpr+oVO0F744iUgR82nJMfG2SA==}
-
-  get-intrinsic@1.3.0:
-    resolution: {integrity: sha512-9fSjSaos/fRIVIp+xSJlE6lfwhES7LNtKaCBIamHsjr2na1BiABJPo0mOjjz8GJDURarmCPGqaiVg5mfjb98CQ==}
-    engines: {node: '>= 0.4'}
-
-  get-proto@1.0.1:
-    resolution: {integrity: sha512-sTSfBjoXBp89JvIKIefqw7U2CCebsc74kiY6awiGogKtoSGbgjYE/G/+l9sF3MWFPNc9IcoOC4ODfKHfxFmp0g==}
-    engines: {node: '>= 0.4'}
-
-  gopd@1.2.0:
-    resolution: {integrity: sha512-ZUKRh6/kUFoAiTAtTYPZJ3hw9wNxx+BIBOijnlG9PnrJsCcSjs1wyyD6vJpaYtgnzDrKYRSqf3OO6Rfa93xsRg==}
-    engines: {node: '>= 0.4'}
-
-  has-symbols@1.1.0:
-    resolution: {integrity: sha512-1cDNdwJ2Jaohmb3sg4OmKaMBwuC48sYni5HUw2DvsC8LjGTLK9h+eb1X6RyuOHe4hT0ULCW68iomhjUoKUqlPQ==}
-    engines: {node: '>= 0.4'}
-
-  hasown@2.0.2:
-    resolution: {integrity: sha512-0hJU9SCPvmMzIBdZFqNPXWa6dqh7WdH0cII9y+CyS8rG3nL48Bclra9HmKhVVUHyPWNH5Y7xDwAB7bfgSjkUMQ==}
-    engines: {node: '>= 0.4'}
-
-  http-errors@2.0.0:
-    resolution: {integrity: sha512-FtwrG/euBzaEjYeRqOgly7G0qviiXoJWnvEH2Z1plBdXgbyjv34pHTSb9zoeHMyDy33+DWy5Wt9Wo+TURtOYSQ==}
-    engines: {node: '>= 0.8'}
-
-  iconv-lite@0.4.24:
-    resolution: {integrity: sha512-v3MXnZAcvnywkTUEZomIActle7RXXeedOR31wwl7VlyoXO4Qi9arvSenNQWne1TcRwhCL1HwLI21bEqdpj8/rA==}
-    engines: {node: '>=0.10.0'}
-
-  inherits@2.0.4:
-    resolution: {integrity: sha512-k/vGaX4/Yla3WzyMCvTQOXYeIHvqOKtnqBduzTHpzpQZzAskKMhZ2K+EnBiSM9zGSoIFeMpXKxa4dYeZIQqewQ==}
-
-  ipaddr.js@1.9.1:
-    resolution: {integrity: sha512-0KI/607xoxSToH7GjN1FfSbLoU0+btTicjsQSWQlh/hZykN8KpmMf7uYwPW3R+akZ6R/w18ZlXSHBYXiYUPO3g==}
-    engines: {node: '>= 0.10'}
-
-  math-intrinsics@1.1.0:
-    resolution: {integrity: sha512-/IXtbwEk5HTPyEwyKX6hGkYXxM9nbj64B+ilVJnC/R6B0pH5G4V3b0pVbL7DBj4tkhBAppbQUlf6F6Xl9LHu1g==}
-    engines: {node: '>= 0.4'}
-
-  media-typer@0.3.0:
-    resolution: {integrity: sha512-dq+qelQ9akHpcOl/gUVRTxVIOkAJ1wR3QAvb4RsVjS8oVoFjDGTc679wJYmUmknUF5HwMLOgb5O+a3KxfWapPQ==}
-    engines: {node: '>= 0.6'}
-
-  merge-descriptors@1.0.3:
-    resolution: {integrity: sha512-gaNvAS7TZ897/rVaZ0nMtAyxNyi/pdbjbAwUpFQpN70GqnVfOiXpeUUMKRBmzXaSQ8DdTX4/0ms62r2K+hE6mQ==}
-
-  methods@1.1.2:
-    resolution: {integrity: sha512-iclAHeNqNm68zFtnZ0e+1L2yUIdvzNoauKU4WBA3VvH/vPFieF7qfRlwUZU+DA9P9bPXIS90ulxoUoCH23sV2w==}
-    engines: {node: '>= 0.6'}
-
-  mime-db@1.52.0:
-    resolution: {integrity: sha512-sPU4uV7dYlvtWJxwwxHD0PuihVNiE7TyAbQ5SWxDCB9mUYvOgroQOwYQQOKPJ8CIbE+1ETVlOoK1UC2nU3gYvg==}
-    engines: {node: '>= 0.6'}
-
-  mime-types@2.1.35:
-    resolution: {integrity: sha512-ZDY+bPm5zTTF+YpCrAU9nK0UgICYPT0QtT1NZWFv4s++TNkcgVaT0g6+4R2uI4MjQjzysHB1zxuWL50hzaeXiw==}
-    engines: {node: '>= 0.6'}
-
-  mime@1.6.0:
-    resolution: {integrity: sha512-x0Vn8spI+wuJ1O6S7gnbaQg8Pxh4NNHb7KSINmEWKiPE4RKOplvijn+NkmYmmRgP68mc70j2EbeTFRsrswaQeg==}
-    engines: {node: '>=4'}
-    hasBin: true
-
-  ms@2.0.0:
-    resolution: {integrity: sha512-Tpp60P6IUJDTuOq/5Z8cdskzJujfwqfOTkrwIwj7IRISpnkJnT6SyJ4PCPnGMoFjC9ddhal5KVIYtAt97ix05A==}
-
-  ms@2.1.3:
-    resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
-
-  negotiator@0.6.3:
-    resolution: {integrity: sha512-+EUsqGPLsM+j/zdChZjsnX51g4XrHFOIXwfnCVPGlQk/k5giakcKsuxCObBRu6DSm9opw/O6slWbJdghQM4bBg==}
-    engines: {node: '>= 0.6'}
-
-  object-inspect@1.13.4:
-    resolution: {integrity: sha512-W67iLl4J2EXEGTbfeHCffrjDfitvLANg0UlX3wFUUSTx92KXRFegMHUVgSqE+wvhAbi4WqjGg9czysTV2Epbew==}
-    engines: {node: '>= 0.4'}
-
-  on-finished@2.4.1:
-    resolution: {integrity: sha512-oVlzkg3ENAhCk2zdv7IJwd/QUD4z2RxRwpkcGY8psCVcCYZNq4wYnVWALHM+brtuJjePWiYF/ClmuDr8Ch5+kg==}
-    engines: {node: '>= 0.8'}
-
-  parseurl@1.3.3:
-    resolution: {integrity: sha512-CiyeOxFT/JZyN5m0z9PfXw4SCBJ6Sygz1Dpl0wqjlhDEGGBP1GnsUVEL0p63hoG1fcj3fHynXi9NYO4nWOL+qQ==}
-    engines: {node: '>= 0.8'}
-
-  path-to-regexp@0.1.12:
-    resolution: {integrity: sha512-RA1GjUVMnvYFxuqovrEqZoxxW5NUZqbwKtYz/Tt7nXerk0LbLblQmrsgdeOxV5SFHf0UDggjS/bSeOZwt1pmEQ==}
-
-  proxy-addr@2.0.7:
-    resolution: {integrity: sha512-llQsMLSUDUPT44jdrU/O37qlnifitDP+ZwrmmZcoSKyLKvtZxpyV0n2/bD/N4tBAAZ/gJEdZU7KMraoK1+XYAg==}
-    engines: {node: '>= 0.10'}
-
-  qs@6.13.0:
-    resolution: {integrity: sha512-+38qI9SOr8tfZ4QmJNplMUxqjbe7LKvvZgWdExBOmd+egZTtjLB67Gu0HRX3u/XOq7UU2Nx6nsjvS16Z9uwfpg==}
-    engines: {node: '>=0.6'}
-
-  range-parser@1.2.1:
-    resolution: {integrity: sha512-Hrgsx+orqoygnmhFbKaHE6c296J+HTAQXoxEF6gNupROmmGJRoyzfG3ccAveqCBrwr/2yxQ5BVd/GTl5agOwSg==}
-    engines: {node: '>= 0.6'}
-
-  raw-body@2.5.2:
-    resolution: {integrity: sha512-8zGqypfENjCIqGhgXToC8aB2r7YrBX+AQAfIPs/Mlk+BtPTztOvTS01NRW/3Eh60J+a48lt8qsCzirQ6loCVfA==}
-    engines: {node: '>= 0.8'}
-
-  safe-buffer@5.2.1:
-    resolution: {integrity: sha512-rp3So07KcdmmKbGvgaNxQSJr7bGVSVk5S9Eq1F+ppbRo70+YeaDxkw5Dd8NPN+GD6bjnYm2VuPuCXmpuYvmCXQ==}
-
-  safer-buffer@2.1.2:
-    resolution: {integrity: sha512-YZo3K82SD7Riyi0E1EQPojLz7kpepnSQI9IyPbHHg1XXXevb5dJI7tpyN2ADxGcQbHG7vcyRHk0cbwqcQriUtg==}
-
-  send@0.19.0:
-    resolution: {integrity: sha512-dW41u5VfLXu8SJh5bwRmyYUbAoSB3c9uQh6L8h/KtsFREPWpbX1lrljJo186Jc4nmci/sGUZ9a0a0J2zgfq2hw==}
-    engines: {node: '>= 0.8.0'}
-
-  serve-static@1.16.2:
-    resolution: {integrity: sha512-VqpjJZKadQB/PEbEwvFdO43Ax5dFBZ2UECszz8bQ7pi7wt//PWe1P6MN7eCnjsatYtBT6EuiClbjSWP2WrIoTw==}
-    engines: {node: '>= 0.8.0'}
-
-  setprototypeof@1.2.0:
-    resolution: {integrity: sha512-E5LDX7Wrp85Kil5bhZv46j8jOeboKq5JMmYM3gVGdGH8xFpPWXUMsNrlODCrkoxMEeNi/XZIwuRvY4XNwYMJpw==}
-
-  side-channel-list@1.0.0:
-    resolution: {integrity: sha512-FCLHtRD/gnpCiCHEiJLOwdmFP+wzCmDEkc9y7NsYxeF4u7Btsn1ZuwgwJGxImImHicJArLP4R0yX4c2KCrMrTA==}
-    engines: {node: '>= 0.4'}
-
-  side-channel-map@1.0.1:
-    resolution: {integrity: sha512-VCjCNfgMsby3tTdo02nbjtM/ewra6jPHmpThenkTYh8pG9ucZ/1P8So4u4FGBek/BjpOVsDCMoLA/iuBKIFXRA==}
-    engines: {node: '>= 0.4'}
-
-  side-channel-weakmap@1.0.2:
-    resolution: {integrity: sha512-WPS/HvHQTYnHisLo9McqBHOJk2FkHO/tlpvldyrnem4aeQp4hai3gythswg6p01oSoTl58rcpiFAjF2br2Ak2A==}
-    engines: {node: '>= 0.4'}
-
-  side-channel@1.1.0:
-    resolution: {integrity: sha512-ZX99e6tRweoUXqR+VBrslhda51Nh5MTQwou5tnUDgbtyM0dBgmhEDtWGP/xbKn6hqfPRHujUNwz5fy/wbbhnpw==}
-    engines: {node: '>= 0.4'}
-
-  statuses@2.0.1:
-    resolution: {integrity: sha512-RwNA9Z/7PrK06rYLIzFMlaF+l73iwpzsqRIFgbMLbTcLD6cOao82TaWefPXQvB2fOC4AjuYSEndS7N/mTCbkdQ==}
-    engines: {node: '>= 0.8'}
-
-  toidentifier@1.0.1:
-    resolution: {integrity: sha512-o5sSPKEkg/DIQNmH43V0/uerLrpzVedkUh8tGNvaeXpfpuwjKenlSox/2O/BTlZUtEe+JG7s5YhEz608PlAHRA==}
-    engines: {node: '>=0.6'}
-
-  type-is@1.6.18:
-    resolution: {integrity: sha512-TkRKr9sUTxEH8MdfuCSP7VizJyzRNMjj2J2do2Jr3Kym598JVdEksuzPQCnlFPW4ky9Q+iA+ma9BGm06XQBy8g==}
-    engines: {node: '>= 0.6'}
-
-  unpipe@1.0.0:
-    resolution: {integrity: sha512-pjy2bYhSsufwWlKwPc+l3cN7+wuJlK6uz0YdJEOlQDbl6jo/YlPi4mb8agUkVC8BF7V8NuzeyPNqRksA3hztKQ==}
-    engines: {node: '>= 0.8'}
-
-  utils-merge@1.0.1:
-    resolution: {integrity: sha512-pMZTvIkT1d+TFGvDOqodOclx0QWkkgi6Tdoa8gC8ffGAAqz9pzPTZWAybbsHHoED/ztMtkv/VoYTYyShUn81hA==}
-    engines: {node: '>= 0.4.0'}
-
-  vary@1.1.2:
-    resolution: {integrity: sha512-BNGbWLfd0eUPabhkXUVm0j8uuvREyTh5ovRa/dyow/BqAbZJyC+5fU+IzQOzmAKzYqYRAISoRhdQr3eIZ/PXqg==}
-    engines: {node: '>= 0.8'}
-
-snapshots:
-
-  accepts@1.3.8:
-    dependencies:
-      mime-types: 2.1.35
-      negotiator: 0.6.3
-
-  array-flatten@1.1.1: {}
-
-  body-parser@1.20.3:
-    dependencies:
-      bytes: 3.1.2
-      content-type: 1.0.5
-      debug: 2.6.9
-      depd: 2.0.0
-      destroy: 1.2.0
-      http-errors: 2.0.0
-      iconv-lite: 0.4.24
-      on-finished: 2.4.1
-      qs: 6.13.0
-      raw-body: 2.5.2
-      type-is: 1.6.18
-      unpipe: 1.0.0
-    transitivePeerDependencies:
-      - supports-color
-
-  bytes@3.1.2: {}
-
-  call-bind-apply-helpers@1.0.2:
-    dependencies:
-      es-errors: 1.3.0
-      function-bind: 1.1.2
-
-  call-bound@1.0.4:
-    dependencies:
-      call-bind-apply-helpers: 1.0.2
-      get-intrinsic: 1.3.0
-
-  content-disposition@0.5.4:
-    dependencies:
-      safe-buffer: 5.2.1
-
-  content-type@1.0.5: {}
-
-  cookie-signature@1.0.6: {}
-
-  cookie@0.7.1: {}
-
-  debug@2.6.9:
-    dependencies:
-      ms: 2.0.0
-
-  depd@2.0.0: {}
-
-  destroy@1.2.0: {}
-
-  dunder-proto@1.0.1:
-    dependencies:
-      call-bind-apply-helpers: 1.0.2
-      es-errors: 1.3.0
-      gopd: 1.2.0
-
-  ee-first@1.1.1: {}
-
-  encodeurl@1.0.2: {}
-
-  encodeurl@2.0.0: {}
-
-  es-define-property@1.0.1: {}
-
-  es-errors@1.3.0: {}
-
-  es-object-atoms@1.1.1:
-    dependencies:
-      es-errors: 1.3.0
-
-  escape-html@1.0.3: {}
-
-  etag@1.8.1: {}
-
-  express@4.21.2:
-    dependencies:
-      accepts: 1.3.8
-      array-flatten: 1.1.1
-      body-parser: 1.20.3
-      content-disposition: 0.5.4
-      content-type: 1.0.5
-      cookie: 0.7.1
-      cookie-signature: 1.0.6
-      debug: 2.6.9
-      depd: 2.0.0
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      etag: 1.8.1
-      finalhandler: 1.3.1
-      fresh: 0.5.2
-      http-errors: 2.0.0
-      merge-descriptors: 1.0.3
-      methods: 1.1.2
-      on-finished: 2.4.1
-      parseurl: 1.3.3
-      path-to-regexp: 0.1.12
-      proxy-addr: 2.0.7
-      qs: 6.13.0
-      range-parser: 1.2.1
-      safe-buffer: 5.2.1
-      send: 0.19.0
-      serve-static: 1.16.2
-      setprototypeof: 1.2.0
-      statuses: 2.0.1
-      type-is: 1.6.18
-      utils-merge: 1.0.1
-      vary: 1.1.2
-    transitivePeerDependencies:
-      - supports-color
-
-  finalhandler@1.3.1:
-    dependencies:
-      debug: 2.6.9
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      on-finished: 2.4.1
-      parseurl: 1.3.3
-      statuses: 2.0.1
-      unpipe: 1.0.0
-    transitivePeerDependencies:
-      - supports-color
-
-  forwarded@0.2.0: {}
-
-  fresh@0.5.2: {}
-
-  function-bind@1.1.2: {}
-
-  get-intrinsic@1.3.0:
-    dependencies:
-      call-bind-apply-helpers: 1.0.2
-      es-define-property: 1.0.1
-      es-errors: 1.3.0
-      es-object-atoms: 1.1.1
-      function-bind: 1.1.2
-      get-proto: 1.0.1
-      gopd: 1.2.0
-      has-symbols: 1.1.0
-      hasown: 2.0.2
-      math-intrinsics: 1.1.0
-
-  get-proto@1.0.1:
-    dependencies:
-      dunder-proto: 1.0.1
-      es-object-atoms: 1.1.1
-
-  gopd@1.2.0: {}
-
-  has-symbols@1.1.0: {}
-
-  hasown@2.0.2:
-    dependencies:
-      function-bind: 1.1.2
-
-  http-errors@2.0.0:
-    dependencies:
-      depd: 2.0.0
-      inherits: 2.0.4
-      setprototypeof: 1.2.0
-      statuses: 2.0.1
-      toidentifier: 1.0.1
-
-  iconv-lite@0.4.24:
-    dependencies:
-      safer-buffer: 2.1.2
-
-  inherits@2.0.4: {}
-
-  ipaddr.js@1.9.1: {}
-
-  math-intrinsics@1.1.0: {}
-
-  media-typer@0.3.0: {}
-
-  merge-descriptors@1.0.3: {}
-
-  methods@1.1.2: {}
-
-  mime-db@1.52.0: {}
-
-  mime-types@2.1.35:
-    dependencies:
-      mime-db: 1.52.0
-
-  mime@1.6.0: {}
-
-  ms@2.0.0: {}
-
-  ms@2.1.3: {}
-
-  negotiator@0.6.3: {}
-
-  object-inspect@1.13.4: {}
-
-  on-finished@2.4.1:
-    dependencies:
-      ee-first: 1.1.1
-
-  parseurl@1.3.3: {}
-
-  path-to-regexp@0.1.12: {}
-
-  proxy-addr@2.0.7:
-    dependencies:
-      forwarded: 0.2.0
-      ipaddr.js: 1.9.1
-
-  qs@6.13.0:
-    dependencies:
-      side-channel: 1.1.0
-
-  range-parser@1.2.1: {}
-
-  raw-body@2.5.2:
-    dependencies:
-      bytes: 3.1.2
-      http-errors: 2.0.0
-      iconv-lite: 0.4.24
-      unpipe: 1.0.0
-
-  safe-buffer@5.2.1: {}
-
-  safer-buffer@2.1.2: {}
-
-  send@0.19.0:
-    dependencies:
-      debug: 2.6.9
-      depd: 2.0.0
-      destroy: 1.2.0
-      encodeurl: 1.0.2
-      escape-html: 1.0.3
-      etag: 1.8.1
-      fresh: 0.5.2
-      http-errors: 2.0.0
-      mime: 1.6.0
-      ms: 2.1.3
-      on-finished: 2.4.1
-      range-parser: 1.2.1
-      statuses: 2.0.1
-    transitivePeerDependencies:
-      - supports-color
-
-  serve-static@1.16.2:
-    dependencies:
-      encodeurl: 2.0.0
-      escape-html: 1.0.3
-      parseurl: 1.3.3
-      send: 0.19.0
-    transitivePeerDependencies:
-      - supports-color
-
-  setprototypeof@1.2.0: {}
-
-  side-channel-list@1.0.0:
-    dependencies:
-      es-errors: 1.3.0
-      object-inspect: 1.13.4
-
-  side-channel-map@1.0.1:
-    dependencies:
-      call-bound: 1.0.4
-      es-errors: 1.3.0
-      get-intrinsic: 1.3.0
-      object-inspect: 1.13.4
-
-  side-channel-weakmap@1.0.2:
-    dependencies:
-      call-bound: 1.0.4
-      es-errors: 1.3.0
-      get-intrinsic: 1.3.0
-      object-inspect: 1.13.4
-      side-channel-map: 1.0.1
-
-  side-channel@1.1.0:
-    dependencies:
-      es-errors: 1.3.0
-      object-inspect: 1.13.4
-      side-channel-list: 1.0.0
-      side-channel-map: 1.0.1
-      side-channel-weakmap: 1.0.2
-
-  statuses@2.0.1: {}
-
-  toidentifier@1.0.1: {}
-
-  type-is@1.6.18:
-    dependencies:
-      media-typer: 0.3.0
-      mime-types: 2.1.35
-
-  unpipe@1.0.0: {}
-
-  utils-merge@1.0.1: {}
-
-  vary@1.1.2: {}
diff --git a/registry/tests/projects/express-pass/src/index.js b/registry/tests/projects/express-pass/src/index.js
deleted file mode 100644
index 6bd051177..000000000
--- a/registry/tests/projects/express-pass/src/index.js
+++ /dev/null
@@ -1,64 +0,0 @@
-"use strict";
-
-const http = require("http");
-const express = require("express");
-
-const app = express();
-
-app.use(express.json());
-app.use(express.urlencoded({ extended: false }));
-
-app.get("/hello", (req, res) => {
-	res.json({ message: "hello" });
-});
-
-app.get("/users/:id", (req, res) => {
-	res.json({ id: req.params.id, name: "test-user" });
-});
-
-app.post("/data", (req, res) => {
-	res.json({ method: req.method, url: req.url });
-});
-
-function request(method, path, port) {
-	return new Promise((resolve, reject) => {
-		const req = http.request(
-			{ hostname: "127.0.0.1", port, path, method },
-			(res) => {
-				let body = "";
-				res.on("data", (chunk) => (body += chunk));
-				res.on("end", () => resolve({ status: res.statusCode, body }));
-			},
-		);
-		req.on("error", reject);
-		req.end();
-	});
-}
-
-async function main() {
-	const server = http.createServer(app);
-	await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
-	const port = server.address().port;
-
-	try {
-		const results = [];
-
-		const r1 = await request("GET", "/hello", port);
-		results.push({ route: "GET /hello", status: r1.status, body: JSON.parse(r1.body) });
-
-		const r2 = await request("GET", "/users/42", port);
-		results.push({ route: "GET /users/42", status: r2.status, body: JSON.parse(r2.body) });
-
-		const r3 = await request("POST", "/data", port);
-		results.push({ route: "POST /data", status: r3.status, body: JSON.parse(r3.body) });
-
-		console.log(JSON.stringify(results));
-	} finally {
-		await new Promise((resolve) => server.close(resolve));
-	}
-}
-
-main().catch((err) => {
-	console.error(err.message);
-	process.exit(1);
-});
diff --git a/registry/tests/projects/fastify-pass/fixture.json b/registry/tests/projects/fastify-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/fastify-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/fastify-pass/package.json b/registry/tests/projects/fastify-pass/package.json
deleted file mode 100644
index 2dd44e9ba..000000000
--- a/registry/tests/projects/fastify-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-fastify-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"fastify": "5.3.3"
-	}
-}
diff --git a/registry/tests/projects/fastify-pass/pnpm-lock.yaml b/registry/tests/projects/fastify-pass/pnpm-lock.yaml
deleted file mode 100644
index 15ee2bf2c..000000000
--- a/registry/tests/projects/fastify-pass/pnpm-lock.yaml
+++ /dev/null
@@ -1,352 +0,0 @@
-lockfileVersion: '9.0'
-
-settings:
-  autoInstallPeers: true
-  excludeLinksFromLockfile: false
-
-importers:
-
-  .:
-    dependencies:
-      fastify:
-        specifier: 5.3.3
-        version: 5.3.3
-
-packages:
-
-  '@fastify/ajv-compiler@4.0.5':
-    resolution: {integrity: sha512-KoWKW+MhvfTRWL4qrhUwAAZoaChluo0m0vbiJlGMt2GXvL4LVPQEjt8kSpHI3IBq5Rez8fg+XeH3cneztq+C7A==}
-
-  '@fastify/error@4.2.0':
-    resolution: {integrity: sha512-RSo3sVDXfHskiBZKBPRgnQTtIqpi/7zhJOEmAxCiBcM7d0uwdGdxLlsCaLzGs8v8NnxIRlfG0N51p5yFaOentQ==}
-
-  '@fastify/fast-json-stringify-compiler@5.0.3':
-    resolution: {integrity: sha512-uik7yYHkLr6fxd8hJSZ8c+xF4WafPK+XzneQDPU+D10r5X19GW8lJcom2YijX2+qtFF1ENJlHXKFM9ouXNJYgQ==}
-
-  '@fastify/forwarded@3.0.1':
-    resolution: {integrity: sha512-JqDochHFqXs3C3Ml3gOY58zM7OqO9ENqPo0UqAjAjH8L01fRZqwX9iLeX34//kiJubF7r2ZQHtBRU36vONbLlw==}
-
-  '@fastify/merge-json-schemas@0.2.1':
-    resolution: {integrity: sha512-OA3KGBCy6KtIvLf8DINC5880o5iBlDX4SxzLQS8HorJAbqluzLRn80UXU0bxZn7UOFhFgpRJDasfwn9nG4FG4A==}
-
-  '@fastify/proxy-addr@5.1.0':
-    resolution: {integrity: sha512-INS+6gh91cLUjB+PVHfu1UqcB76Sqtpyp7bnL+FYojhjygvOPA9ctiD/JDKsyD9Xgu4hUhCSJBPig/w7duNajw==}
-
-  '@pinojs/redact@0.4.0':
-    resolution: {integrity: sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==}
-
-  abstract-logging@2.0.1:
-    resolution: {integrity: sha512-2BjRTZxTPvheOvGbBslFSYOUkr+SjPtOnrLP33f+VIWLzezQpZcqVg7ja3L4dBXmzzgwT+a029jRx5PCi3JuiA==}
-
-  ajv-formats@3.0.1:
-    resolution: {integrity: sha512-8iUql50EUR+uUcdRQ3HDqa6EVyo3docL8g5WJ3FNcWmu62IbkGUue/pEyLBW8VGKKucTPgqeks4fIU1DA4yowQ==}
-    peerDependencies:
-      ajv: ^8.0.0
-    peerDependenciesMeta:
-      ajv:
-        optional: true
-
-  ajv@8.18.0:
-    resolution: {integrity: sha512-PlXPeEWMXMZ7sPYOHqmDyCJzcfNrUr3fGNKtezX14ykXOEIvyK81d+qydx89KY5O71FKMPaQ2vBfBFI5NHR63A==}
-
-  atomic-sleep@1.0.0:
-    resolution: {integrity: sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ==}
-    engines: {node: '>=8.0.0'}
-
-  avvio@9.2.0:
-    resolution: {integrity: sha512-2t/sy01ArdHHE0vRH5Hsay+RtCZt3dLPji7W7/MMOCEgze5b7SNDC4j5H6FnVgPkI1MTNFGzHdHrVXDDl7QSSQ==}
-
-  cookie@1.1.1:
-    resolution: {integrity: sha512-ei8Aos7ja0weRpFzJnEA9UHJ/7XQmqglbRwnf2ATjcB9Wq874VKH9kfjjirM6UhU2/E5fFYadylyhFldcqSidQ==}
-    engines: {node: '>=18'}
-
-  dequal@2.0.3:
-    resolution: {integrity: sha512-0je+qPKHEMohvfRTCEo3CrPG6cAzAYgmzKyxRiYSSDkS6eGJdyVJm7WaYA5ECaAD9wLB2T4EEeymA5aFVcYXCA==}
-    engines: {node: '>=6'}
-
-  fast-decode-uri-component@1.0.1:
-    resolution: {integrity: sha512-WKgKWg5eUxvRZGwW8FvfbaH7AXSh2cL+3j5fMGzUMCxWBJ3dV3a7Wz8y2f/uQ0e3B6WmodD3oS54jTQ9HVTIIg==}
-
-  fast-deep-equal@3.1.3:
-    resolution: {integrity: sha512-f3qQ9oQy9j2AhBe/H9VC91wLmKBCCU/gDOnKNAYG5hswO7BLKj09Hc5HYNz9cGI++xlpDCIgDaitVs03ATR84Q==}
-
-  fast-json-stringify@6.3.0:
-    resolution: {integrity: sha512-oRCntNDY/329HJPlmdNLIdogNtt6Vyjb1WuT01Soss3slIdyUp8kAcDU3saQTOquEK8KFVfwIIF7FebxUAu+yA==}
-
-  fast-querystring@1.1.2:
-    resolution: {integrity: sha512-g6KuKWmFXc0fID8WWH0jit4g0AGBoJhCkJMb1RmbsSEUNvQ+ZC8D6CUZ+GtF8nMzSPXnhiePyyqqipzNNEnHjg==}
-
-  fast-uri@3.1.0:
-    resolution: {integrity: sha512-iPeeDKJSWf4IEOasVVrknXpaBV0IApz/gp7S2bb7Z4Lljbl2MGJRqInZiUrQwV16cpzw/D3S5j5Julj/gT52AA==}
-
-  fastify@5.3.3:
-    resolution: {integrity: sha512-nCBiBCw9q6jPx+JJNVgO8JVnTXeUyrGcyTKPQikRkA/PanrFcOIo4R+ZnLeOLPZPGgzjomqfVarzE0kYx7qWiQ==}
-
-  fastq@1.20.1:
-    resolution: {integrity: sha512-GGToxJ/w1x32s/D2EKND7kTil4n8OVk/9mycTc4VDza13lOvpUZTGX3mFSCtV9ksdGBVzvsyAVLM6mHFThxXxw==}
-
-  find-my-way@9.5.0:
-    resolution: {integrity: sha512-VW2RfnmscZO5KgBY5XVyKREMW5nMZcxDy+buTOsL+zIPnBlbKm+00sgzoQzq1EVh4aALZLfKdwv6atBGcjvjrQ==}
-    engines: {node: '>=20'}
-
-  ipaddr.js@2.3.0:
-    resolution: {integrity: sha512-Zv/pA+ciVFbCSBBjGfaKUya/CcGmUHzTydLMaTwrUUEM2DIEO3iZvueGxmacvmN50fGpGVKeTXpb2LcYQxeVdg==}
-    engines: {node: '>= 10'}
-
-  json-schema-ref-resolver@3.0.0:
-    resolution: {integrity: sha512-hOrZIVL5jyYFjzk7+y7n5JDzGlU8rfWDuYyHwGa2WA8/pcmMHezp2xsVwxrebD/Q9t8Nc5DboieySDpCp4WG4A==}
-
-  json-schema-traverse@1.0.0:
-    resolution: {integrity: sha512-NM8/P9n3XjXhIZn1lLhkFaACTOURQXjWhV4BA/RnOv8xvgqtqpAX9IO4mRQxSx1Rlo4tqzeqb0sOlruaOy3dug==}
-
-  light-my-request@6.6.0:
-    resolution: {integrity: sha512-CHYbu8RtboSIoVsHZ6Ye4cj4Aw/yg2oAFimlF7mNvfDV192LR7nDiKtSIfCuLT7KokPSTn/9kfVLm5OGN0A28A==}
-
-  on-exit-leak-free@2.1.2:
-    resolution: {integrity: sha512-0eJJY6hXLGf1udHwfNftBqH+g73EU4B504nZeKpz1sYRKafAghwxEJunB2O7rDZkL4PGfsMVnTXZ2EjibbqcsA==}
-    engines: {node: '>=14.0.0'}
-
-  pino-abstract-transport@2.0.0:
-    resolution: {integrity: sha512-F63x5tizV6WCh4R6RHyi2Ml+M70DNRXt/+HANowMflpgGFMAym/VKm6G7ZOQRjqN7XbGxK1Lg9t6ZrtzOaivMw==}
-
-  pino-std-serializers@7.1.0:
-    resolution: {integrity: sha512-BndPH67/JxGExRgiX1dX0w1FvZck5Wa4aal9198SrRhZjH3GxKQUKIBnYJTdj2HDN3UQAS06HlfcSbQj2OHmaw==}
-
-  pino@9.14.0:
-    resolution: {integrity: sha512-8OEwKp5juEvb/MjpIc4hjqfgCNysrS94RIOMXYvpYCdm/jglrKEiAYmiumbmGhCvs+IcInsphYDFwqrjr7398w==}
-    hasBin: true
-
-  process-warning@4.0.1:
-    resolution: {integrity: sha512-3c2LzQ3rY9d0hc1emcsHhfT9Jwz0cChib/QN89oME2R451w5fy3f0afAhERFZAwrbDU43wk12d0ORBpDVME50Q==}
-
-  process-warning@5.0.0:
-    resolution: {integrity: sha512-a39t9ApHNx2L4+HBnQKqxxHNs1r7KF+Intd8Q/g1bUh6q0WIp9voPXJ/x0j+ZL45KF1pJd9+q2jLIRMfvEshkA==}
-
-  quick-format-unescaped@4.0.4:
-    resolution: {integrity: sha512-tYC1Q1hgyRuHgloV/YXs2w15unPVh8qfu/qCTfhTYamaw7fyhumKa2yGpdSo87vY32rIclj+4fWYQXUMs9EHvg==}
-
-  real-require@0.2.0:
-    resolution: {integrity: sha512-57frrGM/OCTLqLOAh0mhVA9VBMHd+9U7Zb2THMGdBUoZVOtGbJzjxsYGDJ3A9AYYCP4hn6y1TVbaOfzWtm5GFg==}
-    engines: {node: '>= 12.13.0'}
-
-  require-from-string@2.0.2:
-    resolution: {integrity: sha512-Xf0nWe6RseziFMu+Ap9biiUbmplq6S9/p+7w7YXP/JBHhrUDDUhwa+vANyubuqfZWTveU//DYVGsDG7RKL/vEw==}
-    engines: {node: '>=0.10.0'}
-
-  ret@0.5.0:
-    resolution: {integrity: sha512-I1XxrZSQ+oErkRR4jYbAyEEu2I0avBvvMM5JN+6EBprOGRCs63ENqZ3vjavq8fBw2+62G5LF5XelKwuJpcvcxw==}
-    engines: {node: '>=10'}
-
-  reusify@1.1.0:
-    resolution: {integrity: sha512-g6QUff04oZpHs0eG5p83rFLhHeV00ug/Yf9nZM6fLeUrPguBTkTQOdpAWWspMh55TZfVQDPaN3NQJfbVRAxdIw==}
-    engines: {iojs: '>=1.0.0', node: '>=0.10.0'}
-
-  rfdc@1.4.1:
-    resolution: {integrity: sha512-q1b3N5QkRUWUl7iyylaaj3kOpIT0N2i9MqIEQXP73GVsN9cw3fdx8X63cEmWhJGi2PPCF23Ijp7ktmd39rawIA==}
-
-  safe-regex2@5.1.0:
-    resolution: {integrity: sha512-pNHAuBW7TrcleFHsxBr5QMi/Iyp0ENjUKz7GCcX1UO7cMh+NmVK6HxQckNL1tJp1XAJVjG6B8OKIPqodqj9rtw==}
-    hasBin: true
-
-  safe-stable-stringify@2.5.0:
-    resolution: {integrity: sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==}
-    engines: {node: '>=10'}
-
-  secure-json-parse@4.1.0:
-    resolution: {integrity: sha512-l4KnYfEyqYJxDwlNVyRfO2E4NTHfMKAWdUuA8J0yve2Dz/E/PdBepY03RvyJpssIpRFwJoCD55wA+mEDs6ByWA==}
-
-  semver@7.7.4:
-    resolution: {integrity: sha512-vFKC2IEtQnVhpT78h1Yp8wzwrf8CM+MzKMHGJZfBtzhZNycRFnXsHk6E5TxIkkMsgNS7mdX3AGB7x2QM2di4lA==}
-    engines: {node: '>=10'}
-    hasBin: true
-
-  set-cookie-parser@2.7.2:
-    resolution: {integrity: sha512-oeM1lpU/UvhTxw+g3cIfxXHyJRc/uidd3yK1P242gzHds0udQBYzs3y8j4gCCW+ZJ7ad0yctld8RYO+bdurlvw==}
-
-  sonic-boom@4.2.1:
-    resolution: {integrity: sha512-w6AxtubXa2wTXAUsZMMWERrsIRAdrK0Sc+FUytWvYAhBJLyuI4llrMIC1DtlNSdI99EI86KZum2MMq3EAZlF9Q==}
-
-  split2@4.2.0:
-    resolution: {integrity: sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==}
-    engines: {node: '>= 10.x'}
-
-  thread-stream@3.1.0:
-    resolution: {integrity: sha512-OqyPZ9u96VohAyMfJykzmivOrY2wfMSf3C5TtFJVgN+Hm6aj+voFhlK+kZEIv2FBh1X6Xp3DlnCOfEQ3B2J86A==}
-
-  toad-cache@3.7.0:
-    resolution: {integrity: sha512-/m8M+2BJUpoJdgAHoG+baCwBT+tf2VraSfkBgl0Y00qIWt41DJ8R5B8nsEw0I58YwF5IZH6z24/2TobDKnqSWw==}
-    engines: {node: '>=12'}
-
-snapshots:
-
-  '@fastify/ajv-compiler@4.0.5':
-    dependencies:
-      ajv: 8.18.0
-      ajv-formats: 3.0.1(ajv@8.18.0)
-      fast-uri: 3.1.0
-
-  '@fastify/error@4.2.0': {}
-
-  '@fastify/fast-json-stringify-compiler@5.0.3':
-    dependencies:
-      fast-json-stringify: 6.3.0
-
-  '@fastify/forwarded@3.0.1': {}
-
-  '@fastify/merge-json-schemas@0.2.1':
-    dependencies:
-      dequal: 2.0.3
-
-  '@fastify/proxy-addr@5.1.0':
-    dependencies:
-      '@fastify/forwarded': 3.0.1
-      ipaddr.js: 2.3.0
-
-  '@pinojs/redact@0.4.0': {}
-
-  abstract-logging@2.0.1: {}
-
-  ajv-formats@3.0.1(ajv@8.18.0):
-    optionalDependencies:
-      ajv: 8.18.0
-
-  ajv@8.18.0:
-    dependencies:
-      fast-deep-equal: 3.1.3
-      fast-uri: 3.1.0
-      json-schema-traverse: 1.0.0
-      require-from-string: 2.0.2
-
-  atomic-sleep@1.0.0: {}
-
-  avvio@9.2.0:
-    dependencies:
-      '@fastify/error': 4.2.0
-      fastq: 1.20.1
-
-  cookie@1.1.1: {}
-
-  dequal@2.0.3: {}
-
-  fast-decode-uri-component@1.0.1: {}
-
-  fast-deep-equal@3.1.3: {}
-
-  fast-json-stringify@6.3.0:
-    dependencies:
-      '@fastify/merge-json-schemas': 0.2.1
-      ajv: 8.18.0
-      ajv-formats: 3.0.1(ajv@8.18.0)
-      fast-uri: 3.1.0
-      json-schema-ref-resolver: 3.0.0
-      rfdc: 1.4.1
-
-  fast-querystring@1.1.2:
-    dependencies:
-      fast-decode-uri-component: 1.0.1
-
-  fast-uri@3.1.0: {}
-
-  fastify@5.3.3:
-    dependencies:
-      '@fastify/ajv-compiler': 4.0.5
-      '@fastify/error': 4.2.0
-      '@fastify/fast-json-stringify-compiler': 5.0.3
-      '@fastify/proxy-addr': 5.1.0
-      abstract-logging: 2.0.1
-      avvio: 9.2.0
-      fast-json-stringify: 6.3.0
-      find-my-way: 9.5.0
-      light-my-request: 6.6.0
-      pino: 9.14.0
-      process-warning: 5.0.0
-      rfdc: 1.4.1
-      secure-json-parse: 4.1.0
-      semver: 7.7.4
-      toad-cache: 3.7.0
-
-  fastq@1.20.1:
-    dependencies:
-      reusify: 1.1.0
-
-  find-my-way@9.5.0:
-    dependencies:
-      fast-deep-equal: 3.1.3
-      fast-querystring: 1.1.2
-      safe-regex2: 5.1.0
-
-  ipaddr.js@2.3.0: {}
-
-  json-schema-ref-resolver@3.0.0:
-    dependencies:
-      dequal: 2.0.3
-
-  json-schema-traverse@1.0.0: {}
-
-  light-my-request@6.6.0:
-    dependencies:
-      cookie: 1.1.1
-      process-warning: 4.0.1
-      set-cookie-parser: 2.7.2
-
-  on-exit-leak-free@2.1.2: {}
-
-  pino-abstract-transport@2.0.0:
-    dependencies:
-      split2: 4.2.0
-
-  pino-std-serializers@7.1.0: {}
-
-  pino@9.14.0:
-    dependencies:
-      '@pinojs/redact': 0.4.0
-      atomic-sleep: 1.0.0
-      on-exit-leak-free: 2.1.2
-      pino-abstract-transport: 2.0.0
-      pino-std-serializers: 7.1.0
-      process-warning: 5.0.0
-      quick-format-unescaped: 4.0.4
-      real-require: 0.2.0
-      safe-stable-stringify: 2.5.0
-      sonic-boom: 4.2.1
-      thread-stream: 3.1.0
-
-  process-warning@4.0.1: {}
-
-  process-warning@5.0.0: {}
-
-  quick-format-unescaped@4.0.4: {}
-
-  real-require@0.2.0: {}
-
-  require-from-string@2.0.2: {}
-
-  ret@0.5.0: {}
-
-  reusify@1.1.0: {}
-
-  rfdc@1.4.1: {}
-
-  safe-regex2@5.1.0:
-    dependencies:
-      ret: 0.5.0
-
-  safe-stable-stringify@2.5.0: {}
-
-  secure-json-parse@4.1.0: {}
-
-  semver@7.7.4: {}
-
-  set-cookie-parser@2.7.2: {}
-
-  sonic-boom@4.2.1:
-    dependencies:
-      atomic-sleep: 1.0.0
-
-  split2@4.2.0: {}
-
-  thread-stream@3.1.0:
-    dependencies:
-      real-require: 0.2.0
-
-  toad-cache@3.7.0: {}
diff --git a/registry/tests/projects/fastify-pass/src/index.js b/registry/tests/projects/fastify-pass/src/index.js
deleted file mode 100644
index 9626c186f..000000000
--- a/registry/tests/projects/fastify-pass/src/index.js
+++ /dev/null
@@ -1,76 +0,0 @@
-"use strict";
-
-const http = require("http");
-const Fastify = require("fastify");
-
-const app = Fastify({ logger: false });
-
-app.get("/hello", async () => {
-	return { message: "hello" };
-});
-
-app.get("/users/:id", async (request) => {
-	return { id: request.params.id, name: "test-user" };
-});
-
-app.post("/data", async (request) => {
-	return { method: request.method, url: request.url, body: request.body };
-});
-
-app.get("/async", async () => {
-	const value = await Promise.resolve(42);
-	return { value };
-});
-
-function request(method, path, port, options) {
-	return new Promise((resolve, reject) => {
-		const headers = (options && options.headers) || {};
-		const bodyData = options && options.body;
-		const req = http.request(
-			{ hostname: "127.0.0.1", port, path, method, headers },
-			(res) => {
-				let body = "";
-				res.on("data", (chunk) => (body += chunk));
-				res.on("end", () => resolve({ status: res.statusCode, body }));
-			},
-		);
-		req.on("error", reject);
-		if (bodyData) {
-			req.write(typeof bodyData === "string" ? bodyData : JSON.stringify(bodyData));
-		}
-		req.end();
-	});
-}
-
-async function main() {
-	await app.listen({ port: 0, host: "127.0.0.1" });
-	const port = app.server.address().port;
-
-	try {
-		const results = [];
-
-		const r1 = await request("GET", "/hello", port);
-		results.push({ route: "GET /hello", status: r1.status, body: JSON.parse(r1.body) });
-
-		const r2 = await request("GET", "/users/42", port);
-		results.push({ route: "GET /users/42", status: r2.status, body: JSON.parse(r2.body) });
-
-		const r3 = await request("POST", "/data", port, {
-			headers: { "Content-Type": "application/json" },
-			body: { key: "value" },
-		});
-		results.push({ route: "POST /data", status: r3.status, body: JSON.parse(r3.body) });
-
-		const r4 = await request("GET", "/async", port);
-		results.push({ route: "GET /async", status: r4.status, body: JSON.parse(r4.body) });
-
-		console.log(JSON.stringify(results));
-	} finally {
-		await app.close();
-	}
-}
-
-main().catch((err) => {
-	console.error(err.message);
-	process.exit(1);
-});
diff --git a/registry/tests/projects/fs-metadata-rename-pass/fixture.json b/registry/tests/projects/fs-metadata-rename-pass/fixture.json
deleted file mode 100644
index 1509fc6e8..000000000
--- a/registry/tests/projects/fs-metadata-rename-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "entry": "src/index.js",
-  "expectation": "pass"
-}
diff --git a/registry/tests/projects/fs-metadata-rename-pass/package.json b/registry/tests/projects/fs-metadata-rename-pass/package.json
deleted file mode 100644
index 15da98079..000000000
--- a/registry/tests/projects/fs-metadata-rename-pass/package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  "name": "fs-metadata-rename-pass",
-  "version": "1.0.0",
-  "private": true
-}
diff --git a/registry/tests/projects/fs-metadata-rename-pass/src/index.js b/registry/tests/projects/fs-metadata-rename-pass/src/index.js
deleted file mode 100644
index 68ddf5472..000000000
--- a/registry/tests/projects/fs-metadata-rename-pass/src/index.js
+++ /dev/null
@@ -1,33 +0,0 @@
-const fs = require("fs");
-const path = require("path");
-
-const root = path.join(process.cwd(), "tmp-fs-metadata-rename");
-fs.rmSync(root, { recursive: true, force: true });
-fs.mkdirSync(root, { recursive: true });
-fs.mkdirSync(path.join(root, "sub"));
-fs.writeFileSync(path.join(root, "file.txt"), "x".repeat(2048));
-
-const entries = fs
-  .readdirSync(root, { withFileTypes: true })
-  .map((entry) => [entry.name, entry.isDirectory()])
-  .sort((a, b) => a[0].localeCompare(b[0]));
-
-const filePath = path.join(root, "file.txt");
-const renamedPath = path.join(root, "renamed.txt");
-const statSize = fs.statSync(filePath).size;
-const beforeExists = fs.existsSync(filePath);
-
-fs.renameSync(filePath, renamedPath);
-
-const summary = {
-  entries,
-  statSize,
-  beforeExists,
-  afterOldExists: fs.existsSync(filePath),
-  afterNewExists: fs.existsSync(renamedPath),
-  renamedSize: fs.statSync(renamedPath).size,
-};
-
-console.log(JSON.stringify(summary));
-
-fs.rmSync(root, { recursive: true, force: true });
diff --git a/registry/tests/projects/ioredis-pass/fixture.json b/registry/tests/projects/ioredis-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/ioredis-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/ioredis-pass/package.json b/registry/tests/projects/ioredis-pass/package.json
deleted file mode 100644
index 467640674..000000000
--- a/registry/tests/projects/ioredis-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-ioredis-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"ioredis": "5.4.2"
-	}
-}
diff --git a/registry/tests/projects/ioredis-pass/pnpm-lock.yaml b/registry/tests/projects/ioredis-pass/pnpm-lock.yaml
deleted file mode 100644
index 07c8d0276..000000000
--- a/registry/tests/projects/ioredis-pass/pnpm-lock.yaml
+++ /dev/null
@@ -1,99 +0,0 @@
-lockfileVersion: '9.0'
-
-settings:
-  autoInstallPeers: true
-  excludeLinksFromLockfile: false
-
-importers:
-
-  .:
-    dependencies:
-      ioredis:
-        specifier: 5.4.2
-        version: 5.4.2
-
-packages:
-
-  '@ioredis/commands@1.5.1':
-    resolution: {integrity: sha512-JH8ZL/ywcJyR9MmJ5BNqZllXNZQqQbnVZOqpPQqE1vHiFgAw4NHbvE0FOduNU8IX9babitBT46571OnPTT0Zcw==}
-
-  cluster-key-slot@1.1.2:
-    resolution: {integrity: sha512-RMr0FhtfXemyinomL4hrWcYJxmX6deFdCxpJzhDttxgO1+bcCnkk+9drydLVDmAMG7NE6aN/fl4F7ucU/90gAA==}
-    engines: {node: '>=0.10.0'}
-
-  debug@4.4.3:
-    resolution: {integrity: sha512-RGwwWnwQvkVfavKVt22FGLw+xYSdzARwm0ru6DhTVA3umU5hZc28V3kO4stgYryrTlLpuvgI9GiijltAjNbcqA==}
-    engines: {node: '>=6.0'}
-    peerDependencies:
-      supports-color: '*'
-    peerDependenciesMeta:
-      supports-color:
-        optional: true
-
-  denque@2.1.0:
-    resolution: {integrity: sha512-HVQE3AAb/pxF8fQAoiqpvg9i3evqug3hoiwakOyZAwJm+6vZehbkYXZ0l4JxS+I3QxM97v5aaRNhj8v5oBhekw==}
-    engines: {node: '>=0.10'}
-
-  ioredis@5.4.2:
-    resolution: {integrity: sha512-0SZXGNGZ+WzISQ67QDyZ2x0+wVxjjUndtD8oSeik/4ajifeiRufed8fCb8QW8VMyi4MXcS+UO1k/0NGhvq1PAg==}
-    engines: {node: '>=12.22.0'}
-
-  lodash.defaults@4.2.0:
-    resolution: {integrity: sha512-qjxPLHd3r5DnsdGacqOMU6pb/avJzdh9tFX2ymgoZE27BmjXrNy/y4LoaiTeAb+O3gL8AfpJGtqfX/ae2leYYQ==}
-
-  lodash.isarguments@3.1.0:
-    resolution: {integrity: sha512-chi4NHZlZqZD18a0imDHnZPrDeBbTtVN7GXMwuGdRH9qotxAjYs3aVLKc7zNOG9eddR5Ksd8rvFEBc9SsggPpg==}
-
-  ms@2.1.3:
-    resolution: {integrity: sha512-6FlzubTLZG3J2a/NVCAleEhjzq5oxgHyaCU9yYXvcLsvoVaHJq/s5xXI6/XXP6tz7R9xAOtHnSO/tXtF3WRTlA==}
-
-  redis-errors@1.2.0:
-    resolution: {integrity: sha512-1qny3OExCf0UvUV/5wpYKf2YwPcOqXzkwKKSmKHiE6ZMQs5heeE/c8eXK+PNllPvmjgAbfnsbpkGZWy8cBpn9w==}
-    engines: {node: '>=4'}
-
-  redis-parser@3.0.0:
-    resolution: {integrity: sha512-DJnGAeenTdpMEH6uAJRK/uiyEIH9WVsUmoLwzudwGJUwZPp80PDBWPHXSAGNPwNvIXAbe7MSUB1zQFugFml66A==}
-    engines: {node: '>=4'}
-
-  standard-as-callback@2.1.0:
-    resolution: {integrity: sha512-qoRRSyROncaz1z0mvYqIE4lCd9p2R90i6GxW3uZv5ucSu8tU7B5HXUP1gG8pVZsYNVaXjk8ClXHPttLyxAL48A==}
-
-snapshots:
-
-  '@ioredis/commands@1.5.1': {}
-
-  cluster-key-slot@1.1.2: {}
-
-  debug@4.4.3:
-    dependencies:
-      ms: 2.1.3
-
-  denque@2.1.0: {}
-
-  ioredis@5.4.2:
-    dependencies:
-      '@ioredis/commands': 1.5.1
-      cluster-key-slot: 1.1.2
-      debug: 4.4.3
-      denque: 2.1.0
-      lodash.defaults: 4.2.0
-      lodash.isarguments: 3.1.0
-      redis-errors: 1.2.0
-      redis-parser: 3.0.0
-      standard-as-callback: 2.1.0
-    transitivePeerDependencies:
-      - supports-color
-
-  lodash.defaults@4.2.0: {}
-
-  lodash.isarguments@3.1.0: {}
-
-  ms@2.1.3: {}
-
-  redis-errors@1.2.0: {}
-
-  redis-parser@3.0.0:
-    dependencies:
-      redis-errors: 1.2.0
-
-  standard-as-callback@2.1.0: {}
diff --git a/registry/tests/projects/ioredis-pass/src/index.js b/registry/tests/projects/ioredis-pass/src/index.js
deleted file mode 100644
index 775b1183a..000000000
--- a/registry/tests/projects/ioredis-pass/src/index.js
+++ /dev/null
@@ -1,74 +0,0 @@
-"use strict";
-
-var Redis = require("ioredis");
-
-var result = {};
-
-// Verify Redis constructor
-result.redisExists = typeof Redis === "function";
-
-// Verify key prototype methods
-result.instanceMethods = [
-	"connect",
-	"disconnect",
-	"quit",
-	"get",
-	"set",
-	"del",
-	"lpush",
-	"lrange",
-	"subscribe",
-	"unsubscribe",
-	"publish",
-	"pipeline",
-	"multi",
-].filter(function (m) {
-	return typeof Redis.prototype[m] === "function";
-});
-
-// Verify Cluster class
-result.clusterExists = typeof Redis.Cluster === "function";
-
-// Verify Command class
-result.commandExists = typeof Redis.Command === "function";
-
-// Create instance without connecting
-var redis = new Redis({
-	lazyConnect: true,
-	enableReadyCheck: false,
-	retryStrategy: function () {
-		return null;
-	},
-});
-result.instanceCreated = redis instanceof Redis;
-result.hasOptions = typeof redis.options === "object" && redis.options !== null;
-result.optionLazyConnect = redis.options.lazyConnect === true;
-
-// Event emitter functionality
-result.hasOn = typeof redis.on === "function";
-result.hasEmit = typeof redis.emit === "function";
-
-// Pipeline creation (no connection needed)
-var pipeline = redis.pipeline();
-result.pipelineCreated = pipeline !== null && typeof pipeline === "object";
-result.pipelineMethods = ["set", "get", "del", "lpush", "lrange", "exec"].filter(
-	function (m) {
-		return typeof pipeline[m] === "function";
-	},
-);
-
-// Multi/transaction creation (no connection needed)
-var multi = redis.multi();
-result.multiCreated = multi !== null && typeof multi === "object";
-result.multiMethods = ["set", "get", "del", "exec"].filter(function (m) {
-	return typeof multi[m] === "function";
-});
-
-// Verify Command can build commands
-var cmd = new Redis.Command("SET", ["key", "value"]);
-result.commandBuilt = cmd !== null && typeof cmd === "object";
-result.commandName = cmd.name;
-
-redis.disconnect();
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/jsonwebtoken-pass/fixture.json b/registry/tests/projects/jsonwebtoken-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/jsonwebtoken-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/jsonwebtoken-pass/package.json b/registry/tests/projects/jsonwebtoken-pass/package.json
deleted file mode 100644
index b49648881..000000000
--- a/registry/tests/projects/jsonwebtoken-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-jsonwebtoken-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"jsonwebtoken": "9.0.2"
-	}
-}
diff --git a/registry/tests/projects/jsonwebtoken-pass/src/index.js b/registry/tests/projects/jsonwebtoken-pass/src/index.js
deleted file mode 100644
index 375e0a518..000000000
--- a/registry/tests/projects/jsonwebtoken-pass/src/index.js
+++ /dev/null
@@ -1,32 +0,0 @@
-"use strict";
-
-const jwt = require("jsonwebtoken");
-
-const secret = "test-secret-key-for-fixture";
-
-// Sign a JWT with HS256 (default algorithm)
-const payload = { sub: "user-123", name: "Alice", admin: true };
-const token = jwt.sign(payload, secret, { algorithm: "HS256", noTimestamp: true });
-
-// Verify the token
-const decoded = jwt.verify(token, secret);
-
-// Decode without verification
-const unverified = jwt.decode(token, { complete: true });
-
-// Verify with wrong secret fails
-let verifyError = null;
-try {
-	jwt.verify(token, "wrong-secret");
-} catch (err) {
-	verifyError = { name: err.name, message: err.message };
-}
-
-const result = {
-	token,
-	decoded: { sub: decoded.sub, name: decoded.name, admin: decoded.admin },
-	header: unverified.header,
-	verifyError,
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/lodash-es-pass/fixture.json b/registry/tests/projects/lodash-es-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/lodash-es-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/lodash-es-pass/package.json b/registry/tests/projects/lodash-es-pass/package.json
deleted file mode 100644
index 6b5406fc8..000000000
--- a/registry/tests/projects/lodash-es-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-lodash-es-pass",
-	"private": true,
-	"type": "module",
-	"dependencies": {
-		"lodash-es": "4.17.21"
-	}
-}
diff --git a/registry/tests/projects/lodash-es-pass/pnpm-lock.yaml b/registry/tests/projects/lodash-es-pass/pnpm-lock.yaml
deleted file mode 100644
index 42e1e9917..000000000
--- a/registry/tests/projects/lodash-es-pass/pnpm-lock.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-lockfileVersion: '9.0'
-
-settings:
-  autoInstallPeers: true
-  excludeLinksFromLockfile: false
-
-importers:
-
-  .:
-    dependencies:
-      lodash-es:
-        specifier: 4.17.21
-        version: 4.17.21
-
-packages:
-
-  lodash-es@4.17.21:
-    resolution: {integrity: sha512-mKnC+QJ9pWVzv+C4/U3rRsHapFfHvQFoFB92e52xeyGMcX6/OlIl78je1u8vePzYZSkkogMPJ2yjxxsb89cxyw==}
-
-snapshots:
-
-  lodash-es@4.17.21: {}
diff --git a/registry/tests/projects/lodash-es-pass/src/index.js b/registry/tests/projects/lodash-es-pass/src/index.js
deleted file mode 100644
index 2d086a2c0..000000000
--- a/registry/tests/projects/lodash-es-pass/src/index.js
+++ /dev/null
@@ -1,31 +0,0 @@
-import map from "lodash-es/map.js";
-import filter from "lodash-es/filter.js";
-import groupBy from "lodash-es/groupBy.js";
-import debounce from "lodash-es/debounce.js";
-import sortBy from "lodash-es/sortBy.js";
-import uniq from "lodash-es/uniq.js";
-
-const items = [
-	{ name: "Alice", group: "A", score: 90 },
-	{ name: "Bob", group: "B", score: 85 },
-	{ name: "Carol", group: "A", score: 95 },
-	{ name: "Dave", group: "B", score: 80 },
-];
-
-const names = map(items, "name");
-const highScores = filter(items, (i) => i.score >= 90);
-const grouped = groupBy(items, "group");
-const sorted = sortBy(items, "score").map((i) => i.name);
-const unique = uniq([1, 2, 2, 3, 3, 3]);
-
-const result = {
-	names,
-	highScoreNames: map(highScores, "name"),
-	groupKeys: Object.keys(grouped).sort(),
-	groupACount: grouped["A"].length,
-	sorted,
-	unique,
-	debounceType: typeof debounce,
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/module-access-pass/fixture.json b/registry/tests/projects/module-access-pass/fixture.json
deleted file mode 100644
index 1509fc6e8..000000000
--- a/registry/tests/projects/module-access-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "entry": "src/index.js",
-  "expectation": "pass"
-}
diff --git a/registry/tests/projects/module-access-pass/package.json b/registry/tests/projects/module-access-pass/package.json
deleted file mode 100644
index 543a01326..000000000
--- a/registry/tests/projects/module-access-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "name": "module-access-pass-fixture",
-  "private": true,
-  "type": "commonjs",
-  "dependencies": {
-    "entry-lib": "file:./vendor/entry-lib"
-  }
-}
diff --git a/registry/tests/projects/module-access-pass/src/index.js b/registry/tests/projects/module-access-pass/src/index.js
deleted file mode 100644
index cc51e3c9c..000000000
--- a/registry/tests/projects/module-access-pass/src/index.js
+++ /dev/null
@@ -1,6 +0,0 @@
-const entryLib = require("entry-lib");
-
-console.log(JSON.stringify({
-  value: entryLib.value,
-  message: entryLib.message,
-}));
diff --git a/registry/tests/projects/module-access-pass/vendor/entry-lib/index.js b/registry/tests/projects/module-access-pass/vendor/entry-lib/index.js
deleted file mode 100644
index d0f5808a8..000000000
--- a/registry/tests/projects/module-access-pass/vendor/entry-lib/index.js
+++ /dev/null
@@ -1,6 +0,0 @@
-const transitive = require("transitive-lib");
-
-module.exports = {
-  value: transitive.base + 2,
-  message: transitive.message,
-};
diff --git a/registry/tests/projects/module-access-pass/vendor/entry-lib/package.json b/registry/tests/projects/module-access-pass/vendor/entry-lib/package.json
deleted file mode 100644
index 694f8c0ea..000000000
--- a/registry/tests/projects/module-access-pass/vendor/entry-lib/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "name": "entry-lib",
-  "version": "1.0.0",
-  "main": "index.js",
-  "dependencies": {
-    "transitive-lib": "file:../transitive-lib"
-  }
-}
diff --git a/registry/tests/projects/module-access-pass/vendor/transitive-lib/index.js b/registry/tests/projects/module-access-pass/vendor/transitive-lib/index.js
deleted file mode 100644
index bc9c69109..000000000
--- a/registry/tests/projects/module-access-pass/vendor/transitive-lib/index.js
+++ /dev/null
@@ -1,4 +0,0 @@
-module.exports = {
-  base: 40,
-  message: "module-access-fixture",
-};
diff --git a/registry/tests/projects/module-access-pass/vendor/transitive-lib/package.json b/registry/tests/projects/module-access-pass/vendor/transitive-lib/package.json
deleted file mode 100644
index 5dac99090..000000000
--- a/registry/tests/projects/module-access-pass/vendor/transitive-lib/package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-  "name": "transitive-lib",
-  "version": "1.0.0",
-  "main": "index.js"
-}
diff --git a/registry/tests/projects/mysql2-pass/fixture.json b/registry/tests/projects/mysql2-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/mysql2-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/mysql2-pass/package.json b/registry/tests/projects/mysql2-pass/package.json
deleted file mode 100644
index 0ff6cea05..000000000
--- a/registry/tests/projects/mysql2-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-mysql2-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"mysql2": "3.12.0"
-	}
-}
diff --git a/registry/tests/projects/mysql2-pass/src/index.js b/registry/tests/projects/mysql2-pass/src/index.js
deleted file mode 100644
index 9965db702..000000000
--- a/registry/tests/projects/mysql2-pass/src/index.js
+++ /dev/null
@@ -1,173 +0,0 @@
-"use strict";
-
-var mysql = require("mysql2");
-var mysqlPromise = require("mysql2/promise");
-
-var result = {};
-
-// Core factory functions
-result.createConnectionExists = typeof mysql.createConnection === "function";
-result.createPoolExists = typeof mysql.createPool === "function";
-result.createPoolClusterExists = typeof mysql.createPoolCluster === "function";
-
-// Protocol types and charsets
-var Types = mysql.Types;
-result.typesExists = typeof Types === "object" && Types !== null;
-result.hasCharsets = typeof mysql.Charsets === "object" && mysql.Charsets !== null;
-
-// Escape and format utilities — comprehensive coverage
-result.escapeString = mysql.escape("hello 'world'");
-result.escapeNumber = mysql.escape(42);
-result.escapeNull = mysql.escape(null);
-result.escapeBool = mysql.escape(true);
-result.escapeArray = mysql.escape([1, "two", null]);
-result.escapeNested = mysql.escape([[1, 2], [3, 4]]);
-result.escapeId = mysql.escapeId("table name");
-result.escapeIdQualified = mysql.escapeId("db.table");
-result.formatSql = mysql.format("SELECT ? FROM ??", ["value", "table"]);
-result.formatMulti = mysql.format("INSERT INTO ?? SET ?", [
-	"users",
-	{ name: "test", age: 30 },
-]);
-
-// raw() for prepared statement placeholders
-result.hasRaw = typeof mysql.raw === "function";
-var rawVal = mysql.raw("NOW()");
-result.rawEscape = mysql.escape(rawVal);
-
-// Connection pool configuration (no connection needed — exercises config parsing)
-var pool = mysql.createPool({
-	host: "127.0.0.1",
-	port: 0,
-	user: "root",
-	password: "test",
-	database: "testdb",
-	waitForConnections: true,
-	connectionLimit: 5,
-	queueLimit: 0,
-	enableKeepAlive: true,
-	keepAliveInitialDelay: 10000,
-});
-result.poolCreated = pool !== null && typeof pool === "object";
-result.poolMethods = [
-	"getConnection",
-	"query",
-	"execute",
-	"end",
-	"on",
-	"promise",
-].filter(function (m) {
-	return typeof pool[m] === "function";
-});
-
-// Pool event emitter interface
-result.poolHasOn = typeof pool.on === "function";
-result.poolHasEmit = typeof pool.emit === "function";
-
-// Pool cluster configuration
-var cluster = mysql.createPoolCluster({
-	canRetry: true,
-	removeNodeErrorCount: 5,
-	defaultSelector: "RR",
-});
-result.clusterCreated = cluster !== null && typeof cluster === "object";
-result.clusterMethods = ["add", "remove", "getConnection", "of", "end", "on"].filter(
-	function (m) {
-		return typeof cluster[m] === "function";
-	},
-);
-
-// Add nodes to cluster (exercises config validation — no connections made)
-cluster.add("MASTER", {
-	host: "127.0.0.1",
-	port: 0,
-	user: "root",
-	password: "test",
-	database: "testdb",
-});
-cluster.add("REPLICA1", {
-	host: "127.0.0.1",
-	port: 0,
-	user: "root",
-	password: "test",
-	database: "testdb",
-});
-
-// Cluster pattern selector
-var clusterOf = cluster.of("REPLICA*");
-result.clusterOfCreated = clusterOf !== null && typeof clusterOf === "object";
-
-// Promise wrapper — deeper coverage
-result.promiseCreateConnection = typeof mysqlPromise.createConnection === "function";
-result.promiseCreatePool = typeof mysqlPromise.createPool === "function";
-result.promiseCreatePoolCluster =
-	typeof mysqlPromise.createPoolCluster === "function";
-
-// Promise pool with same config shape
-var promisePool = mysqlPromise.createPool({
-	host: "127.0.0.1",
-	port: 0,
-	user: "root",
-	password: "test",
-	database: "testdb",
-	connectionLimit: 2,
-});
-result.promisePoolCreated = promisePool !== null && typeof promisePool === "object";
-result.promisePoolMethods = ["getConnection", "query", "execute", "end"].filter(
-	function (m) {
-		return typeof promisePool[m] === "function";
-	},
-);
-
-// Type casting and field metadata
-result.typeNames = [
-	"DECIMAL",
-	"TINY",
-	"SHORT",
-	"LONG",
-	"FLOAT",
-	"DOUBLE",
-	"TIMESTAMP",
-	"LONGLONG",
-	"INT24",
-	"DATE",
-	"TIME",
-	"DATETIME",
-	"YEAR",
-	"NEWDATE",
-	"VARCHAR",
-	"BIT",
-	"JSON",
-	"NEWDECIMAL",
-	"ENUM",
-	"SET",
-	"TINY_BLOB",
-	"MEDIUM_BLOB",
-	"LONG_BLOB",
-	"BLOB",
-	"VAR_STRING",
-	"STRING",
-	"GEOMETRY",
-].filter(function (t) {
-	return typeof Types[t] === "number";
-});
-
-// Format with Date objects (use epoch 0 for timezone-stable output)
-var d = new Date(0);
-result.formatDateType = typeof mysql.format("SELECT ?", [d]);
-
-// Format with Buffer
-result.formatBuffer = mysql.format("SELECT ?", [Buffer.from("binary")]);
-
-// Format with nested object (SET clause)
-result.formatObject = mysql.format("UPDATE ?? SET ?", [
-	"tbl",
-	{ name: "test", active: true, score: null },
-]);
-
-// Clean up pools (no connections to close — releases internal timers)
-pool.end(function () {});
-cluster.end(function () {});
-promisePool.end().catch(function () {});
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/net-create-server-pass/fixture.json b/registry/tests/projects/net-create-server-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/net-create-server-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/net-create-server-pass/package.json b/registry/tests/projects/net-create-server-pass/package.json
deleted file mode 100644
index e0bbaa863..000000000
--- a/registry/tests/projects/net-create-server-pass/package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"name": "project-matrix-net-create-server-pass",
-	"private": true,
-	"type": "commonjs"
-}
diff --git a/registry/tests/projects/net-create-server-pass/src/index.js b/registry/tests/projects/net-create-server-pass/src/index.js
deleted file mode 100644
index 9e0f2d12b..000000000
--- a/registry/tests/projects/net-create-server-pass/src/index.js
+++ /dev/null
@@ -1,3 +0,0 @@
-const net = require("net");
-
-net.createServer();
diff --git a/registry/tests/projects/nextjs-pass/.babelrc b/registry/tests/projects/nextjs-pass/.babelrc
deleted file mode 100644
index 6e701d884..000000000
--- a/registry/tests/projects/nextjs-pass/.babelrc
+++ /dev/null
@@ -1,3 +0,0 @@
-{
-	"presets": ["next/babel"]
-}
diff --git a/registry/tests/projects/nextjs-pass/fixture.json b/registry/tests/projects/nextjs-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/nextjs-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/nextjs-pass/next-wasm-shim.cjs b/registry/tests/projects/nextjs-pass/next-wasm-shim.cjs
deleted file mode 100644
index a3e92bb22..000000000
--- a/registry/tests/projects/nextjs-pass/next-wasm-shim.cjs
+++ /dev/null
@@ -1,4 +0,0 @@
-Object.defineProperty(process.versions, "webcontainer", {
-	configurable: true,
-	value: "agent-os",
-});
diff --git a/registry/tests/projects/nextjs-pass/next.config.js b/registry/tests/projects/nextjs-pass/next.config.js
deleted file mode 100644
index decf0c37e..000000000
--- a/registry/tests/projects/nextjs-pass/next.config.js
+++ /dev/null
@@ -1,12 +0,0 @@
-/** @type {import('next').NextConfig} */
-module.exports = {
-	eslint: {
-		ignoreDuringBuilds: true,
-	},
-	experimental: {
-		webpackBuildWorker: false,
-	},
-	typescript: {
-		ignoreBuildErrors: true,
-	},
-};
diff --git a/registry/tests/projects/nextjs-pass/package.json b/registry/tests/projects/nextjs-pass/package.json
deleted file mode 100644
index 7485da608..000000000
--- a/registry/tests/projects/nextjs-pass/package.json
+++ /dev/null
@@ -1,12 +0,0 @@
-{
-	"name": "project-matrix-nextjs-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"@babel/runtime": "7.26.0",
-		"@next/swc-wasm-nodejs": "14.2.15",
-		"next": "14.2.15",
-		"react": "18.3.1",
-		"react-dom": "18.3.1"
-	}
-}
diff --git a/registry/tests/projects/nextjs-pass/pages/api/hello.js b/registry/tests/projects/nextjs-pass/pages/api/hello.js
deleted file mode 100644
index d9741d5d7..000000000
--- a/registry/tests/projects/nextjs-pass/pages/api/hello.js
+++ /dev/null
@@ -1,5 +0,0 @@
-Object.defineProperty(exports, "__esModule", { value: true });
-
-exports.default = function handler(req, res) {
-	res.status(200).json({ message: "hello", method: req.method });
-};
diff --git a/registry/tests/projects/nextjs-pass/pages/index.js b/registry/tests/projects/nextjs-pass/pages/index.js
deleted file mode 100644
index ece29c752..000000000
--- a/registry/tests/projects/nextjs-pass/pages/index.js
+++ /dev/null
@@ -1,7 +0,0 @@
-const React = require("react");
-
-function Home() {
-	return React.createElement("div", null, "Hello from Next.js");
-}
-
-module.exports = Home;
diff --git a/registry/tests/projects/nextjs-pass/run-next-build.cjs b/registry/tests/projects/nextjs-pass/run-next-build.cjs
deleted file mode 100644
index 00cdea646..000000000
--- a/registry/tests/projects/nextjs-pass/run-next-build.cjs
+++ /dev/null
@@ -1,19 +0,0 @@
-const projectDir = __dirname;
-
-require("./next-wasm-shim.cjs");
-
-const { nextBuild } = require("next/dist/cli/next-build");
-
-nextBuild(
-	{
-		debug: false,
-		experimentalAppOnly: false,
-		experimentalBuildMode: "compile",
-		experimentalDebugMemoryUsage: false,
-		experimentalTurbo: false,
-		lint: true,
-		mangling: true,
-		profile: false,
-	},
-	projectDir,
-);
diff --git a/registry/tests/projects/nextjs-pass/src/index.js b/registry/tests/projects/nextjs-pass/src/index.js
deleted file mode 100644
index c32ffe9bf..000000000
--- a/registry/tests/projects/nextjs-pass/src/index.js
+++ /dev/null
@@ -1,93 +0,0 @@
-"use strict";
-
-var fs = require("fs");
-var path = require("path");
-
-var projectDir = path.resolve(__dirname, "..");
-var buildManifestPath = path.join(
-	projectDir,
-	".next",
-	"build-manifest.json",
-);
-var pagesManifestPath = path.join(
-	projectDir,
-	".next",
-	"server",
-	"pages-manifest.json",
-);
-
-function readManifest() {
-	return JSON.parse(fs.readFileSync(buildManifestPath, "utf8"));
-}
-
-function ensureBuild() {
-	try {
-		readManifest();
-		return;
-	} catch (e) {
-		// Build manifest missing — run build
-	}
-	var execSync = require("child_process").execSync;
-	var buildEnv = Object.assign({}, process.env);
-	if (!buildEnv.PATH) {
-		buildEnv.PATH =
-			"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
-	}
-	buildEnv.NEXT_TELEMETRY_DISABLED = "1";
-	var buildCommand = "node " + JSON.stringify(path.join(projectDir, "run-next-build.cjs"));
-	execSync(buildCommand, {
-		cwd: projectDir,
-		stdio: "pipe",
-		timeout: 30000,
-		env: buildEnv,
-	});
-}
-
-function main() {
-	ensureBuild();
-
-	var manifest = readManifest();
-	var pages = Object.keys(manifest.pages).sort();
-
-	var results = [];
-
-	results.push({ check: "build-manifest", pages: pages });
-
-	var pagesManifest = JSON.parse(fs.readFileSync(pagesManifestPath, "utf8"));
-	results.push({
-		check: "pages-manifest",
-		hasIndex: pagesManifest["/"] === "pages/index.js",
-		hasApiRoute: pagesManifest["/api/hello"] === "pages/api/hello.js",
-	});
-
-	var indexModule = fs.readFileSync(
-		path.join(projectDir, ".next", "server", "pages", "index.js"),
-		"utf8",
-	);
-	results.push({
-		check: "compiled-page",
-		rendered: indexModule.indexOf("Hello from Next.js") !== -1,
-	});
-
-	var apiRouteExists = true;
-	try {
-		fs.readFileSync(
-			path.join(
-				projectDir,
-				".next",
-				"server",
-				"pages",
-				"api",
-				"hello.js",
-			),
-			"utf8",
-		);
-	} catch (e) {
-		apiRouteExists = false;
-	}
-	results.push({ check: "api-route", compiled: apiRouteExists });
-
-	console.log(JSON.stringify(results));
-}
-
-main();
diff --git a/registry/tests/projects/node-fetch-pass/fixture.json b/registry/tests/projects/node-fetch-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/node-fetch-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/node-fetch-pass/package.json b/registry/tests/projects/node-fetch-pass/package.json
deleted file mode 100644
index 67c147b6a..000000000
--- a/registry/tests/projects/node-fetch-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-node-fetch-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"node-fetch": "2.7.0"
-	}
-}
diff --git a/registry/tests/projects/node-fetch-pass/src/index.js b/registry/tests/projects/node-fetch-pass/src/index.js
deleted file mode 100644
index ee15c2a1a..000000000
--- a/registry/tests/projects/node-fetch-pass/src/index.js
+++ /dev/null
@@ -1,59 +0,0 @@
-"use strict";
-
-const http = require("http");
-const fetch = require("node-fetch");
-
-const server = http.createServer((req, res) => {
-	if (req.method === "GET" && req.url === "/hello") {
-		res.writeHead(200, { "Content-Type": "application/json" });
-		res.end(JSON.stringify({ message: "hello" }));
-	} else if (req.method === "GET" && req.url === "/users/42") {
-		res.writeHead(200, { "Content-Type": "application/json" });
-		res.end(JSON.stringify({ id: "42", name: "test-user" }));
-	} else if (req.method === "POST" && req.url === "/data") {
-		let body = "";
-		req.on("data", (chunk) => (body += chunk));
-		req.on("end", () => {
-			res.writeHead(200, { "Content-Type": "application/json" });
-			res.end(JSON.stringify({ method: "POST", received: JSON.parse(body) }));
-		});
-	} else {
-		res.writeHead(404);
-		res.end();
-	}
-});
-
-async function main() {
-	await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
-	const port = server.address().port;
-	const base = "http://127.0.0.1:" + port;
-
-	try {
-		const results = [];
-
-		const r1 = await fetch(base + "/hello");
-		const b1 = await r1.json();
-		results.push({ route: "GET /hello", status: r1.status, body: b1 });
-
-		const r2 = await fetch(base + "/users/42");
-		const b2 = await r2.json();
-		results.push({ route: "GET /users/42", status: r2.status, body: b2 });
-
-		const r3 = await fetch(base + "/data", {
-			method: "POST",
-			headers: { "Content-Type": "application/json" },
-			body: JSON.stringify({ key: "value" }),
-		});
-		const b3 = await r3.json();
-		results.push({ route: "POST /data", status: r3.status, body: b3 });
-
-		console.log(JSON.stringify(results));
-	} finally {
-		await new Promise((resolve) => server.close(resolve));
-	}
-}
-
-main().catch((err) => {
-	console.error(err.message);
-	process.exit(1);
-});
diff --git a/registry/tests/projects/npm-layout-pass/fixture.json b/registry/tests/projects/npm-layout-pass/fixture.json
deleted file mode 100644
index a534708f5..000000000
--- a/registry/tests/projects/npm-layout-pass/fixture.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass",
-	"packageManager": "npm"
-}
diff --git a/registry/tests/projects/npm-layout-pass/package-lock.json b/registry/tests/projects/npm-layout-pass/package-lock.json
deleted file mode 100644
index 3aa4afafc..000000000
--- a/registry/tests/projects/npm-layout-pass/package-lock.json
+++ /dev/null
@@ -1,20 +0,0 @@
-{
-	"name": "project-matrix-npm-layout-pass",
-	"lockfileVersion": 3,
-	"requires": true,
-	"packages": {
-		"": {
-			"name": "project-matrix-npm-layout-pass",
-			"dependencies": {
-				"left-pad": "0.0.3"
-			}
-		},
-		"node_modules/left-pad": {
-			"version": "0.0.3",
-			"resolved": "https://registry.npmjs.org/left-pad/-/left-pad-0.0.3.tgz",
-			"integrity": "sha512-Qli5dSpAXQOSw1y/M+uBKT37rj6iZAQMz6Uy5/ZYGIhBLS/ODRHqL4XIDvSAtYpjfia0XKNztlPFa806TWw5Gw==",
-			"deprecated": "use String.prototype.padStart()",
-			"license": "WTFPL"
-		}
-	}
-}
diff --git a/registry/tests/projects/npm-layout-pass/package.json b/registry/tests/projects/npm-layout-pass/package.json
deleted file mode 100644
index 576bbb70e..000000000
--- a/registry/tests/projects/npm-layout-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-npm-layout-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"left-pad": "0.0.3"
-	}
-}
diff --git a/registry/tests/projects/npm-layout-pass/src/index.js b/registry/tests/projects/npm-layout-pass/src/index.js
deleted file mode 100644
index 6ab481e2f..000000000
--- a/registry/tests/projects/npm-layout-pass/src/index.js
+++ /dev/null
@@ -1,11 +0,0 @@
-"use strict";
-
-const leftPad = require("left-pad");
-
-const results = [
-	{ input: "hello", width: 10, padded: leftPad("hello", 10) },
-	{ input: "42", width: 5, fill: "0", padded: leftPad("42", 5, "0") },
-	{ input: "", width: 3, padded: leftPad("", 3) },
-];
-
-console.log(JSON.stringify(results));
diff --git a/registry/tests/projects/optional-deps-pass/fixture.json b/registry/tests/projects/optional-deps-pass/fixture.json
deleted file mode 100644
index a534708f5..000000000
--- a/registry/tests/projects/optional-deps-pass/fixture.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass",
-	"packageManager": "npm"
-}
diff --git a/registry/tests/projects/optional-deps-pass/package-lock.json b/registry/tests/projects/optional-deps-pass/package-lock.json
deleted file mode 100644
index 6cf7d3d8a..000000000
--- a/registry/tests/projects/optional-deps-pass/package-lock.json
+++ /dev/null
@@ -1,31 +0,0 @@
-{
-	"name": "project-matrix-optional-deps-pass",
-	"lockfileVersion": 3,
-	"requires": true,
-	"packages": {
-		"": {
-			"name": "project-matrix-optional-deps-pass",
-			"dependencies": {
-				"semver": "7.7.3"
-			},
-			"optionalDependencies": {
-				"@anthropic-internal/nonexistent-optional-pkg": "99.0.0"
-			}
-		},
-		"node_modules/@anthropic-internal/nonexistent-optional-pkg": {
-			"optional": true
-		},
-		"node_modules/semver": {
-			"version": "7.7.3",
-			"resolved": "https://registry.npmjs.org/semver/-/semver-7.7.3.tgz",
-			"integrity": "sha512-SdsKMrI9TdgjdweUSR9MweHA4EJ8YxHn8DFaDisvhVlUOe4BF1tLD7GAj0lIqWVl+dPb/rExr0Btby5loQm20Q==",
-			"license": "ISC",
-			"bin": {
-				"semver": "bin/semver.js"
-			},
-			"engines": {
-				"node": ">=10"
-			}
-		}
-	}
-}
diff --git a/registry/tests/projects/optional-deps-pass/package.json b/registry/tests/projects/optional-deps-pass/package.json
deleted file mode 100644
index 2f768a07f..000000000
--- a/registry/tests/projects/optional-deps-pass/package.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-	"name": "project-matrix-optional-deps-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"semver": "7.7.3"
-	},
-	"optionalDependencies": {
-		"@anthropic-internal/nonexistent-optional-pkg": "99.0.0"
-	}
-}
diff --git a/registry/tests/projects/optional-deps-pass/src/index.js b/registry/tests/projects/optional-deps-pass/src/index.js
deleted file mode 100644
index fb5d71443..000000000
--- a/registry/tests/projects/optional-deps-pass/src/index.js
+++ /dev/null
@@ -1,18 +0,0 @@
-"use strict";
-
-const semver = require("semver");
-
-let optionalAvailable;
-try {
-	require("@anthropic-internal/nonexistent-optional-pkg");
-	optionalAvailable = true;
-} catch (e) {
-	optionalAvailable = false;
-}
-
-const result = {
-	semverValid: semver.valid("1.0.0") !== null,
-	optionalAvailable: optionalAvailable
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/peer-deps-pass/fixture.json b/registry/tests/projects/peer-deps-pass/fixture.json
deleted file mode 100644
index a534708f5..000000000
--- a/registry/tests/projects/peer-deps-pass/fixture.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass",
-	"packageManager": "npm"
-}
diff --git a/registry/tests/projects/peer-deps-pass/package-lock.json b/registry/tests/projects/peer-deps-pass/package-lock.json
deleted file mode 100644
index 0499e2550..000000000
--- a/registry/tests/projects/peer-deps-pass/package-lock.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-	"name": "project-matrix-peer-deps-pass",
-	"lockfileVersion": 3,
-	"requires": true,
-	"packages": {
-		"": {
-			"name": "project-matrix-peer-deps-pass",
-			"dependencies": {
-				"@peer-test/host": "file:packages/host",
-				"@peer-test/plugin": "file:packages/plugin"
-			}
-		},
-		"node_modules/@peer-test/host": {
-			"resolved": "packages/host",
-			"link": true
-		},
-		"node_modules/@peer-test/plugin": {
-			"resolved": "packages/plugin",
-			"link": true
-		},
-		"packages/host": {
-			"name": "@peer-test/host",
-			"version": "1.0.0",
-			"peer": true
-		},
-		"packages/plugin": {
-			"name": "@peer-test/plugin",
-			"version": "1.0.0",
-			"peerDependencies": {
-				"@peer-test/host": ">=1.0.0"
-			}
-		}
-	}
-}
diff --git a/registry/tests/projects/peer-deps-pass/package.json b/registry/tests/projects/peer-deps-pass/package.json
deleted file mode 100644
index 46349f0ed..000000000
--- a/registry/tests/projects/peer-deps-pass/package.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"name": "project-matrix-peer-deps-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"@peer-test/host": "file:packages/host",
-		"@peer-test/plugin": "file:packages/plugin"
-	}
-}
diff --git a/registry/tests/projects/peer-deps-pass/packages/host/index.js b/registry/tests/projects/peer-deps-pass/packages/host/index.js
deleted file mode 100644
index 25c483b78..000000000
--- a/registry/tests/projects/peer-deps-pass/packages/host/index.js
+++ /dev/null
@@ -1,3 +0,0 @@
-"use strict";
-
-module.exports = { name: "@peer-test/host", version: "1.0.0" };
diff --git a/registry/tests/projects/peer-deps-pass/packages/host/package.json b/registry/tests/projects/peer-deps-pass/packages/host/package.json
deleted file mode 100644
index 41459caaa..000000000
--- a/registry/tests/projects/peer-deps-pass/packages/host/package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"name": "@peer-test/host",
-	"version": "1.0.0",
-	"main": "index.js"
-}
diff --git a/registry/tests/projects/peer-deps-pass/packages/plugin/index.js b/registry/tests/projects/peer-deps-pass/packages/plugin/index.js
deleted file mode 100644
index 46c5a05c9..000000000
--- a/registry/tests/projects/peer-deps-pass/packages/plugin/index.js
+++ /dev/null
@@ -1,8 +0,0 @@
-"use strict";
-
-const host = require("@peer-test/host");
-
-module.exports = {
-	pluginName: "@peer-test/plugin",
-	resolvedHost: host
-};
diff --git a/registry/tests/projects/peer-deps-pass/packages/plugin/package.json b/registry/tests/projects/peer-deps-pass/packages/plugin/package.json
deleted file mode 100644
index 8e8b713c8..000000000
--- a/registry/tests/projects/peer-deps-pass/packages/plugin/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "@peer-test/plugin",
-	"version": "1.0.0",
-	"main": "index.js",
-	"peerDependencies": {
-		"@peer-test/host": ">=1.0.0"
-	}
-}
diff --git a/registry/tests/projects/peer-deps-pass/src/index.js b/registry/tests/projects/peer-deps-pass/src/index.js
deleted file mode 100644
index 31cf9c3be..000000000
--- a/registry/tests/projects/peer-deps-pass/src/index.js
+++ /dev/null
@@ -1,11 +0,0 @@
-"use strict";
-
-const plugin = require("@peer-test/plugin");
-
-const result = {
-	plugin: plugin.pluginName,
-	host: plugin.resolvedHost.name,
-	hostVersion: plugin.resolvedHost.version
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/pg-pass/fixture.json b/registry/tests/projects/pg-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/pg-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/pg-pass/package.json b/registry/tests/projects/pg-pass/package.json
deleted file mode 100644
index 033b701d5..000000000
--- a/registry/tests/projects/pg-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-pg-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"pg": "8.13.1"
-	}
-}
diff --git a/registry/tests/projects/pg-pass/pnpm-lock.yaml b/registry/tests/projects/pg-pass/pnpm-lock.yaml
deleted file mode 100644
index 17a97f033..000000000
--- a/registry/tests/projects/pg-pass/pnpm-lock.yaml
+++ /dev/null
@@ -1,124 +0,0 @@
-lockfileVersion: '9.0'
-
-settings:
-  autoInstallPeers: true
-  excludeLinksFromLockfile: false
-
-importers:
-
-  .:
-    dependencies:
-      pg:
-        specifier: 8.13.1
-        version: 8.13.1
-
-packages:
-
-  pg-cloudflare@1.3.0:
-    resolution: {integrity: sha512-6lswVVSztmHiRtD6I8hw4qP/nDm1EJbKMRhf3HCYaqud7frGysPv7FYJ5noZQdhQtN2xJnimfMtvQq21pdbzyQ==}
-
-  pg-connection-string@2.12.0:
-    resolution: {integrity: sha512-U7qg+bpswf3Cs5xLzRqbXbQl85ng0mfSV/J0nnA31MCLgvEaAo7CIhmeyrmJpOr7o+zm0rXK+hNnT5l9RHkCkQ==}
-
-  pg-int8@1.0.1:
-    resolution: {integrity: sha512-WCtabS6t3c8SkpDBUlb1kjOs7l66xsGdKpIPZsg4wR+B3+u9UAum2odSsF9tnvxg80h4ZxLWMy4pRjOsFIqQpw==}
-    engines: {node: '>=4.0.0'}
-
-  pg-pool@3.13.0:
-    resolution: {integrity: sha512-gB+R+Xud1gLFuRD/QgOIgGOBE2KCQPaPwkzBBGC9oG69pHTkhQeIuejVIk3/cnDyX39av2AxomQiyPT13WKHQA==}
-    peerDependencies:
-      pg: '>=8.0'
-
-  pg-protocol@1.13.0:
-    resolution: {integrity: sha512-zzdvXfS6v89r6v7OcFCHfHlyG/wvry1ALxZo4LqgUoy7W9xhBDMaqOuMiF3qEV45VqsN6rdlcehHrfDtlCPc8w==}
-
-  pg-types@2.2.0:
-    resolution: {integrity: sha512-qTAAlrEsl8s4OiEQY69wDvcMIdQN6wdz5ojQiOy6YRMuynxenON0O5oCpJI6lshc6scgAY8qvJ2On/p+CXY0GA==}
-    engines: {node: '>=4'}
-
-  pg@8.13.1:
-    resolution: {integrity: sha512-OUir1A0rPNZlX//c7ksiu7crsGZTKSOXJPgtNiHGIlC9H0lO+NC6ZDYksSgBYY/thSWhnSRBv8w1lieNNGATNQ==}
-    engines: {node: '>= 8.0.0'}
-    peerDependencies:
-      pg-native: '>=3.0.1'
-    peerDependenciesMeta:
-      pg-native:
-        optional: true
-
-  pgpass@1.0.5:
-    resolution: {integrity: sha512-FdW9r/jQZhSeohs1Z3sI1yxFQNFvMcnmfuj4WBMUTxOrAyLMaTcE1aAMBiTlbMNaXvBCQuVi0R7hd8udDSP7ug==}
-
-  postgres-array@2.0.0:
-    resolution: {integrity: sha512-VpZrUqU5A69eQyW2c5CA1jtLecCsN2U/bD6VilrFDWq5+5UIEVO7nazS3TEcHf1zuPYO/sqGvUvW62g86RXZuA==}
-    engines: {node: '>=4'}
-
-  postgres-bytea@1.0.1:
-    resolution: {integrity: sha512-5+5HqXnsZPE65IJZSMkZtURARZelel2oXUEO8rH83VS/hxH5vv1uHquPg5wZs8yMAfdv971IU+kcPUczi7NVBQ==}
-    engines: {node: '>=0.10.0'}
-
-  postgres-date@1.0.7:
-    resolution: {integrity: sha512-suDmjLVQg78nMK2UZ454hAG+OAW+HQPZ6n++TNDUX+L0+uUlLywnoxJKDou51Zm+zTCjrCl0Nq6J9C5hP9vK/Q==}
-    engines: {node: '>=0.10.0'}
-
-  postgres-interval@1.2.0:
-    resolution: {integrity: sha512-9ZhXKM/rw350N1ovuWHbGxnGh/SNJ4cnxHiM0rxE4VN41wsg8P8zWn9hv/buK00RP4WvlOyr/RBDiptyxVbkZQ==}
-    engines: {node: '>=0.10.0'}
-
-  split2@4.2.0:
-    resolution: {integrity: sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==}
-    engines: {node: '>= 10.x'}
-
-  xtend@4.0.2:
-    resolution: {integrity: sha512-LKYU1iAXJXUgAXn9URjiu+MWhyUXHsvfp7mcuYm9dSUKK0/CjtrUwFAxD82/mCWbtLsGjFIad0wIsod4zrTAEQ==}
-    engines: {node: '>=0.4'}
-
-snapshots:
-
-  pg-cloudflare@1.3.0:
-    optional: true
-
-  pg-connection-string@2.12.0: {}
-
-  pg-int8@1.0.1: {}
-
-  pg-pool@3.13.0(pg@8.13.1):
-    dependencies:
-      pg: 8.13.1
-
-  pg-protocol@1.13.0: {}
-
-  pg-types@2.2.0:
-    dependencies:
-      pg-int8: 1.0.1
-      postgres-array: 2.0.0
-      postgres-bytea: 1.0.1
-      postgres-date: 1.0.7
-      postgres-interval: 1.2.0
-
-  pg@8.13.1:
-    dependencies:
-      pg-connection-string: 2.12.0
-      pg-pool: 3.13.0(pg@8.13.1)
-      pg-protocol: 1.13.0
-      pg-types: 2.2.0
-      pgpass: 1.0.5
-    optionalDependencies:
-      pg-cloudflare: 1.3.0
-
-  pgpass@1.0.5:
-    dependencies:
-      split2: 4.2.0
-
-  postgres-array@2.0.0: {}
-
-  postgres-bytea@1.0.1: {}
-
-  postgres-date@1.0.7: {}
-
-  postgres-interval@1.2.0:
-    dependencies:
-      xtend: 4.0.2
-
-  split2@4.2.0: {}
-
-  xtend@4.0.2: {}
diff --git a/registry/tests/projects/pg-pass/src/index.js b/registry/tests/projects/pg-pass/src/index.js
deleted file mode 100644
index 4de7e8338..000000000
--- a/registry/tests/projects/pg-pass/src/index.js
+++ /dev/null
@@ -1,37 +0,0 @@
-"use strict";
-
-const { Pool, Client, types } = require("pg");
-
-const result = {
-	poolExists: typeof Pool === "function",
-	clientExists: typeof Client === "function",
-	typesExists: typeof types === "object" && types !== null,
-	poolMethods: [
-		"connect",
-		"end",
-		"query",
-		"on",
-	].filter((m) => typeof Pool.prototype[m] === "function"),
-	clientMethods: [
-		"connect",
-		"end",
-		"query",
-		"on",
-	].filter((m) => typeof Client.prototype[m] === "function"),
-};
-
-// Verify type parsers exist
-result.hasSetTypeParser = typeof types.setTypeParser === "function";
-result.hasGetTypeParser = typeof types.getTypeParser === "function";
-
-// Verify query builder can produce query config objects
-const { Query } = require("pg");
-result.queryExists = typeof Query === "function";
-
-// Verify pg-pool defaults class exists and can be configured
-const defaults = require("pg/lib/defaults");
-result.defaultsExists = typeof defaults === "object" && defaults !== null;
-result.defaultPort = defaults.port;
-result.defaultHost = defaults.host;
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/pino-pass/fixture.json b/registry/tests/projects/pino-pass/fixture.json
deleted file mode 100644
index 1509fc6e8..000000000
--- a/registry/tests/projects/pino-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "entry": "src/index.js",
-  "expectation": "pass"
-}
diff --git a/registry/tests/projects/pino-pass/package.json b/registry/tests/projects/pino-pass/package.json
deleted file mode 100644
index cbfd5f499..000000000
--- a/registry/tests/projects/pino-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "name": "project-matrix-pino-pass",
-  "private": true,
-  "type": "commonjs",
-  "dependencies": {
-    "pino": "^9.0.0"
-  }
-}
diff --git a/registry/tests/projects/pino-pass/pnpm-lock.yaml b/registry/tests/projects/pino-pass/pnpm-lock.yaml
deleted file mode 100644
index 205f214ac..000000000
--- a/registry/tests/projects/pino-pass/pnpm-lock.yaml
+++ /dev/null
@@ -1,106 +0,0 @@
-lockfileVersion: '9.0'
-
-settings:
-  autoInstallPeers: true
-  excludeLinksFromLockfile: false
-
-importers:
-
-  .:
-    dependencies:
-      pino:
-        specifier: ^9.0.0
-        version: 9.14.0
-
-packages:
-
-  '@pinojs/redact@0.4.0':
-    resolution: {integrity: sha512-k2ENnmBugE/rzQfEcdWHcCY+/FM3VLzH9cYEsbdsoqrvzAKRhUZeRNhAZvB8OitQJ1TBed3yqWtdjzS6wJKBwg==}
-
-  atomic-sleep@1.0.0:
-    resolution: {integrity: sha512-kNOjDqAh7px0XWNI+4QbzoiR/nTkHAWNud2uvnJquD1/x5a7EQZMJT0AczqK0Qn67oY/TTQ1LbUKajZpp3I9tQ==}
-    engines: {node: '>=8.0.0'}
-
-  on-exit-leak-free@2.1.2:
-    resolution: {integrity: sha512-0eJJY6hXLGf1udHwfNftBqH+g73EU4B504nZeKpz1sYRKafAghwxEJunB2O7rDZkL4PGfsMVnTXZ2EjibbqcsA==}
-    engines: {node: '>=14.0.0'}
-
-  pino-abstract-transport@2.0.0:
-    resolution: {integrity: sha512-F63x5tizV6WCh4R6RHyi2Ml+M70DNRXt/+HANowMflpgGFMAym/VKm6G7ZOQRjqN7XbGxK1Lg9t6ZrtzOaivMw==}
-
-  pino-std-serializers@7.1.0:
-    resolution: {integrity: sha512-BndPH67/JxGExRgiX1dX0w1FvZck5Wa4aal9198SrRhZjH3GxKQUKIBnYJTdj2HDN3UQAS06HlfcSbQj2OHmaw==}
-
-  pino@9.14.0:
-    resolution: {integrity: sha512-8OEwKp5juEvb/MjpIc4hjqfgCNysrS94RIOMXYvpYCdm/jglrKEiAYmiumbmGhCvs+IcInsphYDFwqrjr7398w==}
-    hasBin: true
-
-  process-warning@5.0.0:
-    resolution: {integrity: sha512-a39t9ApHNx2L4+HBnQKqxxHNs1r7KF+Intd8Q/g1bUh6q0WIp9voPXJ/x0j+ZL45KF1pJd9+q2jLIRMfvEshkA==}
-
-  quick-format-unescaped@4.0.4:
-    resolution: {integrity: sha512-tYC1Q1hgyRuHgloV/YXs2w15unPVh8qfu/qCTfhTYamaw7fyhumKa2yGpdSo87vY32rIclj+4fWYQXUMs9EHvg==}
-
-  real-require@0.2.0:
-    resolution: {integrity: sha512-57frrGM/OCTLqLOAh0mhVA9VBMHd+9U7Zb2THMGdBUoZVOtGbJzjxsYGDJ3A9AYYCP4hn6y1TVbaOfzWtm5GFg==}
-    engines: {node: '>= 12.13.0'}
-
-  safe-stable-stringify@2.5.0:
-    resolution: {integrity: sha512-b3rppTKm9T+PsVCBEOUR46GWI7fdOs00VKZ1+9c1EWDaDMvjQc6tUwuFyIprgGgTcWoVHSKrU8H31ZHA2e0RHA==}
-    engines: {node: '>=10'}
-
-  sonic-boom@4.2.1:
-    resolution: {integrity: sha512-w6AxtubXa2wTXAUsZMMWERrsIRAdrK0Sc+FUytWvYAhBJLyuI4llrMIC1DtlNSdI99EI86KZum2MMq3EAZlF9Q==}
-
-  split2@4.2.0:
-    resolution: {integrity: sha512-UcjcJOWknrNkF6PLX83qcHM6KHgVKNkV62Y8a5uYDVv9ydGQVwAHMKqHdJje1VTWpljG0WYpCDhrCdAOYH4TWg==}
-    engines: {node: '>= 10.x'}
-
-  thread-stream@3.1.0:
-    resolution: {integrity: sha512-OqyPZ9u96VohAyMfJykzmivOrY2wfMSf3C5TtFJVgN+Hm6aj+voFhlK+kZEIv2FBh1X6Xp3DlnCOfEQ3B2J86A==}
-
-snapshots:
-
-  '@pinojs/redact@0.4.0': {}
-
-  atomic-sleep@1.0.0: {}
-
-  on-exit-leak-free@2.1.2: {}
-
-  pino-abstract-transport@2.0.0:
-    dependencies:
-      split2: 4.2.0
-
-  pino-std-serializers@7.1.0: {}
-
-  pino@9.14.0:
-    dependencies:
-      '@pinojs/redact': 0.4.0
-      atomic-sleep: 1.0.0
-      on-exit-leak-free: 2.1.2
-      pino-abstract-transport: 2.0.0
-      pino-std-serializers: 7.1.0
-      process-warning: 5.0.0
-      quick-format-unescaped: 4.0.4
-      real-require: 0.2.0
-      safe-stable-stringify: 2.5.0
-      sonic-boom: 4.2.1
-      thread-stream: 3.1.0
-
-  process-warning@5.0.0: {}
-
-  quick-format-unescaped@4.0.4: {}
-
-  real-require@0.2.0: {}
-
-  safe-stable-stringify@2.5.0: {}
-
-  sonic-boom@4.2.1:
-    dependencies:
-      atomic-sleep: 1.0.0
-
-  split2@4.2.0: {}
-
-  thread-stream@3.1.0:
-    dependencies:
-      real-require: 0.2.0
diff --git a/registry/tests/projects/pino-pass/src/index.js b/registry/tests/projects/pino-pass/src/index.js
deleted file mode 100644
index 49403902f..000000000
--- a/registry/tests/projects/pino-pass/src/index.js
+++ /dev/null
@@ -1,68 +0,0 @@
-"use strict";
-
-const pino = require("pino");
-
-// Use process.stdout as destination for sandbox compatibility
-// Disable variable fields (timestamp, pid, hostname) for deterministic output
-const logger = pino(
-  {
-    timestamp: false,
-    base: undefined,
-  },
-  process.stdout
-);
-
-// Basic logging at different levels
-logger.info("hello from pino");
-logger.warn("this is a warning");
-logger.error("something went wrong");
-
-// Structured data
-logger.info({ user: "alice", action: "login" }, "user event");
-
-// Child logger with bound properties
-const child = logger.child({ module: "auth" });
-child.info("child logger message");
-child.info({ detail: "extra" }, "child with data");
-
-// Custom serializers
-const custom = pino(
-  {
-    timestamp: false,
-    base: undefined,
-    serializers: {
-      req: (val) => ({ method: val.method, url: val.url }),
-    },
-  },
-  process.stdout
-);
-custom.info(
-  { req: { method: "GET", url: "/api", headers: { host: "localhost" } } },
-  "request received"
-);
-
-// Silent level (should not output)
-const silent = pino(
-  {
-    timestamp: false,
-    base: undefined,
-    level: "error",
-  },
-  process.stdout
-);
-silent.info("this should not appear");
-silent.error("only errors visible");
-
-// Log levels are numeric
-console.log(
-  JSON.stringify({
-    levels: {
-      trace: logger.levels.values.trace,
-      debug: logger.levels.values.debug,
-      info: logger.levels.values.info,
-      warn: logger.levels.values.warn,
-      error: logger.levels.values.error,
-      fatal: logger.levels.values.fatal,
-    },
-  })
-);
diff --git a/registry/tests/projects/pnpm-layout-pass/fixture.json b/registry/tests/projects/pnpm-layout-pass/fixture.json
deleted file mode 100644
index 8727b5a93..000000000
--- a/registry/tests/projects/pnpm-layout-pass/fixture.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass",
-	"packageManager": "pnpm"
-}
diff --git a/registry/tests/projects/pnpm-layout-pass/package.json b/registry/tests/projects/pnpm-layout-pass/package.json
deleted file mode 100644
index 354b0bbcf..000000000
--- a/registry/tests/projects/pnpm-layout-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-pnpm-layout-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"left-pad": "0.0.3"
-	}
-}
diff --git a/registry/tests/projects/pnpm-layout-pass/pnpm-lock.yaml b/registry/tests/projects/pnpm-layout-pass/pnpm-lock.yaml
deleted file mode 100644
index f52b6e1da..000000000
--- a/registry/tests/projects/pnpm-layout-pass/pnpm-lock.yaml
+++ /dev/null
@@ -1,23 +0,0 @@
-lockfileVersion: '9.0'
-
-settings:
-  autoInstallPeers: true
-  excludeLinksFromLockfile: false
-
-importers:
-
-  .:
-    dependencies:
-      left-pad:
-        specifier: 0.0.3
-        version: 0.0.3
-
-packages:
-
-  left-pad@0.0.3:
-    resolution: {integrity: sha512-Qli5dSpAXQOSw1y/M+uBKT37rj6iZAQMz6Uy5/ZYGIhBLS/ODRHqL4XIDvSAtYpjfia0XKNztlPFa806TWw5Gw==}
-    deprecated: use String.prototype.padStart()
-
-snapshots:
-
-  left-pad@0.0.3: {}
diff --git a/registry/tests/projects/pnpm-layout-pass/src/index.js b/registry/tests/projects/pnpm-layout-pass/src/index.js
deleted file mode 100644
index 6ab481e2f..000000000
--- a/registry/tests/projects/pnpm-layout-pass/src/index.js
+++ /dev/null
@@ -1,11 +0,0 @@
-"use strict";
-
-const leftPad = require("left-pad");
-
-const results = [
-	{ input: "hello", width: 10, padded: leftPad("hello", 10) },
-	{ input: "42", width: 5, fill: "0", padded: leftPad("42", 5, "0") },
-	{ input: "", width: 3, padded: leftPad("", 3) },
-];
-
-console.log(JSON.stringify(results));
diff --git a/registry/tests/projects/rivetkit/fixture.json b/registry/tests/projects/rivetkit/fixture.json
deleted file mode 100644
index 1509fc6e8..000000000
--- a/registry/tests/projects/rivetkit/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-  "entry": "src/index.js",
-  "expectation": "pass"
-}
diff --git a/registry/tests/projects/rivetkit/package.json b/registry/tests/projects/rivetkit/package.json
deleted file mode 100644
index cd067c2b6..000000000
--- a/registry/tests/projects/rivetkit/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-  "name": "rivetkit-fixture-pass",
-  "private": true,
-  "type": "commonjs",
-  "dependencies": {
-    "rivetkit": "file:./vendor/rivetkit"
-  }
-}
diff --git a/registry/tests/projects/rivetkit/src/index.js b/registry/tests/projects/rivetkit/src/index.js
deleted file mode 100644
index 0d72e4630..000000000
--- a/registry/tests/projects/rivetkit/src/index.js
+++ /dev/null
@@ -1,12 +0,0 @@
-const rivetkit = require("rivetkit");
-
-if (typeof rivetkit.actor !== "function") {
-  throw new Error("expected rivetkit.actor to be a function");
-}
-
-const definition = rivetkit.actor({ actions: {} });
-if (!definition || typeof definition !== "object") {
-  throw new Error("expected actor() to return a definition object");
-}
-
-console.log("rivetkit fixture ok");
diff --git a/registry/tests/projects/rivetkit/vendor/rivetkit/package.json b/registry/tests/projects/rivetkit/vendor/rivetkit/package.json
deleted file mode 100644
index 3ee54fcaa..000000000
--- a/registry/tests/projects/rivetkit/vendor/rivetkit/package.json
+++ /dev/null
@@ -1,11 +0,0 @@
-{
-  "name": "rivetkit",
-  "version": "0.0.0-fixture",
-  "type": "module",
-  "exports": {
-    ".": {
-      "import": "./dist/mod.js",
-      "require": "./dist/mod.cjs"
-    }
-  }
-}
diff --git a/registry/tests/projects/semver-pass/fixture.json b/registry/tests/projects/semver-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/semver-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/semver-pass/package.json b/registry/tests/projects/semver-pass/package.json
deleted file mode 100644
index 285114713..000000000
--- a/registry/tests/projects/semver-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-semver-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"semver": "7.7.3"
-	}
-}
diff --git a/registry/tests/projects/semver-pass/src/index.js b/registry/tests/projects/semver-pass/src/index.js
deleted file mode 100644
index 47e3cdbbd..000000000
--- a/registry/tests/projects/semver-pass/src/index.js
+++ /dev/null
@@ -1,9 +0,0 @@
-const semver = require("semver");
-
-const result = {
-	valid: semver.valid("1.2.3"),
-	satisfies: semver.satisfies("1.2.3", "^1.0.0"),
-	compare: semver.compare("1.2.3", "1.2.4"),
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/sse-streaming-pass/fixture.json b/registry/tests/projects/sse-streaming-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/sse-streaming-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/sse-streaming-pass/package.json b/registry/tests/projects/sse-streaming-pass/package.json
deleted file mode 100644
index 7a317ea49..000000000
--- a/registry/tests/projects/sse-streaming-pass/package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"name": "project-matrix-sse-streaming-pass",
-	"private": true,
-	"type": "commonjs"
-}
diff --git a/registry/tests/projects/sse-streaming-pass/src/index.js b/registry/tests/projects/sse-streaming-pass/src/index.js
deleted file mode 100644
index b319a9f4e..000000000
--- a/registry/tests/projects/sse-streaming-pass/src/index.js
+++ /dev/null
@@ -1,128 +0,0 @@
-"use strict";
-
-const http = require("http");
-
-// SSE events to send — exercises data-only, named events, id field, retry field
-const sseEvents = [
-	"retry: 3000\n\n",
-	"data: hello-world\n\n",
-	"event: status\ndata: {\"connected\":true}\n\n",
-	"id: msg-3\nevent: update\ndata: first line\ndata: second line\n\n",
-	"id: msg-4\ndata: final-event\n\n",
-];
-
-function createSSEServer() {
-	return http.createServer((req, res) => {
-		if (req.url !== "/events") {
-			res.writeHead(404);
-			res.end();
-			return;
-		}
-
-		res.writeHead(200, {
-			"Content-Type": "text/event-stream",
-			"Cache-Control": "no-cache",
-			Connection: "keep-alive",
-		});
-
-		// Send all events then close
-		for (const event of sseEvents) {
-			res.write(event);
-		}
-		res.end();
-	});
-}
-
-// Parse SSE text/event-stream format into structured events
-function parseSSEStream(raw) {
-	const events = [];
-	let current = {};
-
-	for (const line of raw.split("\n")) {
-		if (line === "") {
-			// Empty line = event boundary
-			if (Object.keys(current).length > 0) {
-				events.push(current);
-				current = {};
-			}
-			continue;
-		}
-
-		const colonIdx = line.indexOf(":");
-		if (colonIdx === 0) continue; // comment line
-
-		let field, value;
-		if (colonIdx > 0) {
-			field = line.slice(0, colonIdx);
-			// Strip single leading space after colon per SSE spec
-			value = line.slice(colonIdx + 1);
-			if (value.startsWith(" ")) value = value.slice(1);
-		} else {
-			field = line;
-			value = "";
-		}
-
-		if (field === "data") {
-			// Multiple data fields are joined with newline
-			current.data = current.data != null ? current.data + "\n" + value : value;
-		} else {
-			current[field] = value;
-		}
-	}
-
-	// Trailing event without final blank line
-	if (Object.keys(current).length > 0) {
-		events.push(current);
-	}
-
-	return events;
-}
-
-async function main() {
-	const server = createSSEServer();
-	await new Promise((resolve) => server.listen(0, "127.0.0.1", resolve));
-	const port = server.address().port;
-
-	try {
-		const response = await new Promise((resolve, reject) => {
-			http.get(
-				{ hostname: "127.0.0.1", port, path: "/events" },
-				(res) => {
-					let body = "";
-					res.on("data", (chunk) => (body += chunk));
-					res.on("end", () =>
-						resolve({
-							statusCode: res.statusCode,
-							headers: res.headers,
-							body,
-						}),
-					);
-				},
-			).on("error", reject);
-		});
-
-		const headers = {
-			contentType: response.headers["content-type"],
-			connection: response.headers["connection"],
-			cacheControl: response.headers["cache-control"],
-		};
-
-		const events = parseSSEStream(response.body);
-
-		const result = {
-			statusCode: response.statusCode,
-			headers,
-			eventCount: events.length,
-			events,
-		};
-
-		console.log(JSON.stringify(result));
-	} finally {
-		await new Promise((resolve) => server.close(resolve));
-	}
-}
-
-main().catch((err) => {
-	console.error(err.message);
-	process.exit(1);
-});
diff --git a/registry/tests/projects/ssh2-pass/fixture.json b/registry/tests/projects/ssh2-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/ssh2-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/ssh2-pass/package.json b/registry/tests/projects/ssh2-pass/package.json
deleted file mode 100644
index d01582506..000000000
--- a/registry/tests/projects/ssh2-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-ssh2-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"ssh2": "1.17.0"
-	}
-}
diff --git a/registry/tests/projects/ssh2-pass/src/index.js b/registry/tests/projects/ssh2-pass/src/index.js
deleted file mode 100644
index 8d155d0bb..000000000
--- a/registry/tests/projects/ssh2-pass/src/index.js
+++ /dev/null
@@ -1,28 +0,0 @@
-"use strict";
-
-const { Client, Server, utils } = require("ssh2");
-
-const result = {
-	clientExists: typeof Client === "function",
-	clientMethods: [
-		"connect",
-		"end",
-		"exec",
-		"sftp",
-		"shell",
-		"forwardIn",
-		"forwardOut",
-	].filter((m) => typeof Client.prototype[m] === "function"),
-	serverExists: typeof Server === "function",
-	utilsExists: typeof utils === "object" && utils !== null,
-	parseKey: typeof utils.parseKey === "function",
-};
-
-// Create a Client instance and verify it has expected properties
-const client = new Client();
-result.instanceCreated = client instanceof Client;
-result.hasOn = typeof client.on === "function";
-result.hasEmit = typeof client.emit === "function";
-client.removeAllListeners();
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/ssh2-sftp-client-pass/fixture.json b/registry/tests/projects/ssh2-sftp-client-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/ssh2-sftp-client-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/ssh2-sftp-client-pass/package.json b/registry/tests/projects/ssh2-sftp-client-pass/package.json
deleted file mode 100644
index 7e39e881a..000000000
--- a/registry/tests/projects/ssh2-sftp-client-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-ssh2-sftp-client-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"ssh2-sftp-client": "12.1.0"
-	}
-}
diff --git a/registry/tests/projects/ssh2-sftp-client-pass/src/index.js b/registry/tests/projects/ssh2-sftp-client-pass/src/index.js
deleted file mode 100644
index 5e85c51a1..000000000
--- a/registry/tests/projects/ssh2-sftp-client-pass/src/index.js
+++ /dev/null
@@ -1,26 +0,0 @@
-"use strict";
-
-const SftpClient = require("ssh2-sftp-client");
-
-const result = {
-	classExists: typeof SftpClient === "function",
-	methods: [
-		"connect",
-		"list",
-		"get",
-		"put",
-		"mkdir",
-		"rmdir",
-		"delete",
-		"rename",
-		"exists",
-		"stat",
-		"end",
-	].filter((m) => typeof SftpClient.prototype[m] === "function"),
-};
-
-// Create a Client instance and verify it has expected properties
-const client = new SftpClient();
-result.instanceCreated = client instanceof SftpClient;
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/transitive-deps-pass/fixture.json b/registry/tests/projects/transitive-deps-pass/fixture.json
deleted file mode 100644
index a534708f5..000000000
--- a/registry/tests/projects/transitive-deps-pass/fixture.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass",
-	"packageManager": "npm"
-}
diff --git a/registry/tests/projects/transitive-deps-pass/package-lock.json b/registry/tests/projects/transitive-deps-pass/package-lock.json
deleted file mode 100644
index ac98b5a51..000000000
--- a/registry/tests/projects/transitive-deps-pass/package-lock.json
+++ /dev/null
@@ -1,43 +0,0 @@
-{
-	"name": "project-matrix-transitive-deps-pass",
-	"lockfileVersion": 3,
-	"requires": true,
-	"packages": {
-		"": {
-			"name": "project-matrix-transitive-deps-pass",
-			"dependencies": {
-				"@chain-test/level-a": "file:packages/level-a"
-			}
-		},
-		"node_modules/@chain-test/level-a": {
-			"resolved": "packages/level-a",
-			"link": true
-		},
-		"node_modules/@chain-test/level-b": {
-			"resolved": "packages/level-b",
-			"link": true
-		},
-		"node_modules/@chain-test/level-c": {
-			"resolved": "packages/level-c",
-			"link": true
-		},
-		"packages/level-a": {
-			"name": "@chain-test/level-a",
-			"version": "1.0.0",
-			"dependencies": {
-				"@chain-test/level-b": "file:../level-b"
-			}
-		},
-		"packages/level-b": {
-			"name": "@chain-test/level-b",
-			"version": "1.0.0",
-			"dependencies": {
-				"@chain-test/level-c": "file:../level-c"
-			}
-		},
-		"packages/level-c": {
-			"name": "@chain-test/level-c",
-			"version": "1.0.0"
-		}
-	}
-}
diff --git a/registry/tests/projects/transitive-deps-pass/package.json b/registry/tests/projects/transitive-deps-pass/package.json
deleted file mode 100644
index 15d0eaea7..000000000
--- a/registry/tests/projects/transitive-deps-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-transitive-deps-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"@chain-test/level-a": "file:packages/level-a"
-	}
-}
diff --git a/registry/tests/projects/transitive-deps-pass/packages/level-a/index.js b/registry/tests/projects/transitive-deps-pass/packages/level-a/index.js
deleted file mode 100644
index e62bd86f1..000000000
--- a/registry/tests/projects/transitive-deps-pass/packages/level-a/index.js
+++ /dev/null
@@ -1,12 +0,0 @@
-"use strict";
-
-const levelB = require("@chain-test/level-b");
-
-module.exports = {
-	name: "level-a",
-	depth: 1,
-	child: levelB,
-	greet(who) {
-		return "level-a wraps: " + levelB.greet(who);
-	}
-};
diff --git a/registry/tests/projects/transitive-deps-pass/packages/level-a/package.json b/registry/tests/projects/transitive-deps-pass/packages/level-a/package.json
deleted file mode 100644
index 4364d6953..000000000
--- a/registry/tests/projects/transitive-deps-pass/packages/level-a/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "@chain-test/level-a",
-	"version": "1.0.0",
-	"main": "index.js",
-	"dependencies": {
-		"@chain-test/level-b": "file:../level-b"
-	}
-}
diff --git a/registry/tests/projects/transitive-deps-pass/packages/level-b/index.js b/registry/tests/projects/transitive-deps-pass/packages/level-b/index.js
deleted file mode 100644
index 530c87b5f..000000000
--- a/registry/tests/projects/transitive-deps-pass/packages/level-b/index.js
+++ /dev/null
@@ -1,12 +0,0 @@
-"use strict";
-
-const levelC = require("@chain-test/level-c");
-
-module.exports = {
-	name: "level-b",
-	depth: 2,
-	child: levelC,
-	greet(who) {
-		return "level-b wraps: " + levelC.greet(who);
-	}
-};
diff --git a/registry/tests/projects/transitive-deps-pass/packages/level-b/package.json b/registry/tests/projects/transitive-deps-pass/packages/level-b/package.json
deleted file mode 100644
index ab1bdd165..000000000
--- a/registry/tests/projects/transitive-deps-pass/packages/level-b/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "@chain-test/level-b",
-	"version": "1.0.0",
-	"main": "index.js",
-	"dependencies": {
-		"@chain-test/level-c": "file:../level-c"
-	}
-}
diff --git a/registry/tests/projects/transitive-deps-pass/packages/level-c/index.js b/registry/tests/projects/transitive-deps-pass/packages/level-c/index.js
deleted file mode 100644
index bcb951de0..000000000
--- a/registry/tests/projects/transitive-deps-pass/packages/level-c/index.js
+++ /dev/null
@@ -1,9 +0,0 @@
-"use strict";
-
-module.exports = {
-	name: "level-c",
-	depth: 3,
-	greet(who) {
-		return "hello from level-c to " + who;
-	}
-};
diff --git a/registry/tests/projects/transitive-deps-pass/packages/level-c/package.json b/registry/tests/projects/transitive-deps-pass/packages/level-c/package.json
deleted file mode 100644
index 4dc05099a..000000000
--- a/registry/tests/projects/transitive-deps-pass/packages/level-c/package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"name": "@chain-test/level-c",
-	"version": "1.0.0",
-	"main": "index.js"
-}
diff --git a/registry/tests/projects/transitive-deps-pass/src/index.js b/registry/tests/projects/transitive-deps-pass/src/index.js
deleted file mode 100644
index 808d617c4..000000000
--- a/registry/tests/projects/transitive-deps-pass/src/index.js
+++ /dev/null
@@ -1,18 +0,0 @@
-"use strict";
-
-const levelA = require("@chain-test/level-a");
-
-const chain = [];
-let current = levelA;
-while (current) {
-	chain.push({ name: current.name, depth: current.depth });
-	current = current.child;
-}
-
-const result = {
-	chain: chain,
-	greeting: levelA.greet("world"),
-	levels: chain.length
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/uuid-pass/fixture.json b/registry/tests/projects/uuid-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/uuid-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/uuid-pass/package.json b/registry/tests/projects/uuid-pass/package.json
deleted file mode 100644
index fea1064f9..000000000
--- a/registry/tests/projects/uuid-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-uuid-pass",
-	"private": true,
-	"type": "module",
-	"dependencies": {
-		"uuid": "11.1.0"
-	}
-}
diff --git a/registry/tests/projects/uuid-pass/src/index.js b/registry/tests/projects/uuid-pass/src/index.js
deleted file mode 100644
index 3de3af317..000000000
--- a/registry/tests/projects/uuid-pass/src/index.js
+++ /dev/null
@@ -1,23 +0,0 @@
-import { v4, v5, validate, version, NIL } from "uuid";
-
-// Generate a random v4 UUID and validate its format
-const id4 = v4();
-const isValid4 = validate(id4);
-const ver4 = version(id4);
-
-// Deterministic v5 UUID with DNS namespace
-const DNS_NAMESPACE = "6ba7b810-9dad-11d1-80b4-00c04fd430c8";
-const id5 = v5("agentos.test", DNS_NAMESPACE);
-const isValid5 = validate(id5);
-const ver5 = version(id5);
-
-// Validate the nil UUID
-const nilValid = validate(NIL);
-
-const result = {
-	v4: { valid: isValid4, version: ver4 },
-	v5: { value: id5, valid: isValid5, version: ver5 },
-	nil: { value: NIL, valid: nilValid },
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/vite-pass/app/main.jsx b/registry/tests/projects/vite-pass/app/main.jsx
deleted file mode 100644
index 44ac2be2c..000000000
--- a/registry/tests/projects/vite-pass/app/main.jsx
+++ /dev/null
@@ -1,8 +0,0 @@
-import React from "react";
-import { createRoot } from "react-dom/client";
-
-function App() {
-	return React.createElement("div", null, "Hello from Vite");
-}
-
-createRoot(document.getElementById("root")).render(React.createElement(App));
diff --git a/registry/tests/projects/vite-pass/fixture.json b/registry/tests/projects/vite-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/vite-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/vite-pass/index.html b/registry/tests/projects/vite-pass/index.html
deleted file mode 100644
index 2b7be9e9a..000000000
--- a/registry/tests/projects/vite-pass/index.html
+++ /dev/null
@@ -1,11 +0,0 @@
-<!doctype html>
-<html lang="en">
-	<head>
-		<meta charset="UTF-8" />
-		<title>Vite App</title>
-	</head>
-	<body>
-		<div id="root"></div>
-		<script type="module" src="/app/main.jsx"></script>
-	</body>
-</html>
diff --git a/registry/tests/projects/vite-pass/package.json b/registry/tests/projects/vite-pass/package.json
deleted file mode 100644
index 1d97fa401..000000000
--- a/registry/tests/projects/vite-pass/package.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"name": "project-matrix-vite-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"@vitejs/plugin-react": "4.3.1",
-		"react": "18.3.1",
-		"react-dom": "18.3.1",
-		"vite": "5.4.2"
-	},
-	"pnpm": {
-		"overrides": {
-			"esbuild": "npm:esbuild-wasm@0.21.5",
-			"rollup": "npm:@rollup/wasm-node@4.61.0"
-		}
-	}
-}
diff --git a/registry/tests/projects/vite-pass/src/index.js b/registry/tests/projects/vite-pass/src/index.js
deleted file mode 100644
index e544ef2e5..000000000
--- a/registry/tests/projects/vite-pass/src/index.js
+++ /dev/null
@@ -1,71 +0,0 @@
-"use strict";
-
-var fs = require("fs");
-var path = require("path");
-
-var projectDir = path.resolve(__dirname, "..");
-var distDir = path.join(projectDir, "dist");
-
-function ensureBuild() {
-	try {
-		fs.statSync(path.join(distDir, "index.html"));
-		return;
-	} catch (e) {
-		// Build output missing — run build
-	}
-	var execSync = require("child_process").execSync;
-	var viteBin = path.join(projectDir, "node_modules", ".bin", "vite");
-	var buildEnv = Object.assign({}, process.env);
-	if (!buildEnv.PATH) {
-		buildEnv.PATH =
-			"/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin";
-	}
-	execSync(viteBin + " build", {
-		cwd: projectDir,
-		stdio: "pipe",
-		timeout: 30000,
-		env: buildEnv,
-	});
-}
-
-function main() {
-	ensureBuild();
-
-	var results = [];
-
-	// Check index.html was generated
-	var indexHtml = fs.readFileSync(path.join(distDir, "index.html"), "utf8");
-	results.push({
-		check: "index-html",
-		exists: true,
-		hasReactRoot: indexHtml.indexOf('id="root"') !== -1,
-		hasScript: indexHtml.indexOf(".js") !== -1,
-	});
-
-	// Check assets directory
-	var assetsDir = path.join(distDir, "assets");
-	var assets = fs.readdirSync(assetsDir).sort();
-	var hasJs = assets.some(function (f) {
-		return f.endsWith(".js");
-	});
-	results.push({
-		check: "assets",
-		hasJs: hasJs,
-	});
-
-	// Check compiled JS contains React component
-	var jsContent = "";
-	assets.forEach(function (f) {
-		if (f.endsWith(".js")) {
-			jsContent += fs.readFileSync(path.join(assetsDir, f), "utf8");
-		}
-	});
-	results.push({
-		check: "react-compiled",
-		hasComponent: jsContent.indexOf("Hello from Vite") !== -1,
-	});
-
-	console.log(JSON.stringify(results));
-}
-
-main();
diff --git a/registry/tests/projects/vite-pass/vite.config.mjs b/registry/tests/projects/vite-pass/vite.config.mjs
deleted file mode 100644
index f9f0d5ec2..000000000
--- a/registry/tests/projects/vite-pass/vite.config.mjs
+++ /dev/null
@@ -1,6 +0,0 @@
-import { defineConfig } from "vite";
-import react from "@vitejs/plugin-react";
-
-export default defineConfig({
-	plugins: [react()],
-});
diff --git a/registry/tests/projects/workspace-layout-pass/fixture.json b/registry/tests/projects/workspace-layout-pass/fixture.json
deleted file mode 100644
index 431762972..000000000
--- a/registry/tests/projects/workspace-layout-pass/fixture.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"entry": "packages/app/src/index.js",
-	"expectation": "pass",
-	"packageManager": "npm"
-}
diff --git a/registry/tests/projects/workspace-layout-pass/package.json b/registry/tests/projects/workspace-layout-pass/package.json
deleted file mode 100644
index 61a4b864c..000000000
--- a/registry/tests/projects/workspace-layout-pass/package.json
+++ /dev/null
@@ -1,7 +0,0 @@
-{
-	"name": "project-matrix-workspace-layout-pass",
-	"private": true,
-	"workspaces": [
-		"packages/*"
-	]
-}
diff --git a/registry/tests/projects/workspace-layout-pass/packages/app/package.json b/registry/tests/projects/workspace-layout-pass/packages/app/package.json
deleted file mode 100644
index 0ab91a496..000000000
--- a/registry/tests/projects/workspace-layout-pass/packages/app/package.json
+++ /dev/null
@@ -1,7 +0,0 @@
-{
-	"name": "@workspace-test/app",
-	"version": "1.0.0",
-	"dependencies": {
-		"@workspace-test/lib": "*"
-	}
-}
diff --git a/registry/tests/projects/workspace-layout-pass/packages/app/src/index.js b/registry/tests/projects/workspace-layout-pass/packages/app/src/index.js
deleted file mode 100644
index 72792c52e..000000000
--- a/registry/tests/projects/workspace-layout-pass/packages/app/src/index.js
+++ /dev/null
@@ -1,11 +0,0 @@
-"use strict";
-
-const { add, multiply } = require("@workspace-test/lib");
-
-const results = [
-	{ op: "add", a: 2, b: 3, result: add(2, 3) },
-	{ op: "multiply", a: 4, b: 5, result: multiply(4, 5) },
-	{ op: "add", a: 0, b: 0, result: add(0, 0) },
-];
-
-console.log(JSON.stringify(results));
diff --git a/registry/tests/projects/workspace-layout-pass/packages/lib/package.json b/registry/tests/projects/workspace-layout-pass/packages/lib/package.json
deleted file mode 100644
index e7df130e9..000000000
--- a/registry/tests/projects/workspace-layout-pass/packages/lib/package.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"name": "@workspace-test/lib",
-	"version": "1.0.0",
-	"main": "src/index.js"
-}
diff --git a/registry/tests/projects/workspace-layout-pass/packages/lib/src/index.js b/registry/tests/projects/workspace-layout-pass/packages/lib/src/index.js
deleted file mode 100644
index b96ff40d0..000000000
--- a/registry/tests/projects/workspace-layout-pass/packages/lib/src/index.js
+++ /dev/null
@@ -1,11 +0,0 @@
-"use strict";
-
-function add(a, b) {
-	return a + b;
-}
-
-function multiply(a, b) {
-	return a * b;
-}
-
-module.exports = { add, multiply };
diff --git a/registry/tests/projects/ws-pass/fixture.json b/registry/tests/projects/ws-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/ws-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/ws-pass/package-lock.json b/registry/tests/projects/ws-pass/package-lock.json
deleted file mode 100644
index 04684593e..000000000
--- a/registry/tests/projects/ws-pass/package-lock.json
+++ /dev/null
@@ -1,34 +0,0 @@
-{
-	"name": "project-matrix-ws-pass",
-	"lockfileVersion": 3,
-	"requires": true,
-	"packages": {
-		"": {
-			"name": "project-matrix-ws-pass",
-			"dependencies": {
-				"ws": "8.18.0"
-			}
-		},
-		"node_modules/ws": {
-			"version": "8.18.0",
-			"resolved": "https://registry.npmjs.org/ws/-/ws-8.18.0.tgz",
-			"integrity": "sha512-8VbfWfHLbbwu3+N6OKsOMpBdT4kXPDDB9cJk2bJ6mh9ucxdlnNvH1e+roYkKmN9Nxw2yjz7VzeO9oOz2zJ04Pw==",
-			"license": "MIT",
-			"engines": {
-				"node": ">=10.0.0"
-			},
-			"peerDependencies": {
-				"bufferutil": "^4.0.1",
-				"utf-8-validate": ">=5.0.2"
-			},
-			"peerDependenciesMeta": {
-				"bufferutil": {
-					"optional": true
-				},
-				"utf-8-validate": {
-					"optional": true
-				}
-			}
-		}
-	}
-}
diff --git a/registry/tests/projects/ws-pass/package.json b/registry/tests/projects/ws-pass/package.json
deleted file mode 100644
index c6f5494ae..000000000
--- a/registry/tests/projects/ws-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-ws-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"ws": "8.18.0"
-	}
-}
diff --git a/registry/tests/projects/ws-pass/src/index.js b/registry/tests/projects/ws-pass/src/index.js
deleted file mode 100644
index e41981a60..000000000
--- a/registry/tests/projects/ws-pass/src/index.js
+++ /dev/null
@@ -1,97 +0,0 @@
-"use strict";
-
-const { WebSocket, WebSocketServer } = require("ws");
-
-async function main() {
-	const serverEvents = [];
-	const clientEvents = [];
-
-	// Start server on random port
-	const wss = new WebSocketServer({ port: 0 });
-
-	wss.on("connection", (ws) => {
-		serverEvents.push("connection");
-
-		ws.on("message", (data, isBinary) => {
-			serverEvents.push(isBinary ? "binary-message" : "text-message");
-			// Echo back
-			ws.send(data, { binary: isBinary });
-		});
-
-		ws.on("close", () => {
-			serverEvents.push("close");
-		});
-	});
-
-	await new Promise((resolve) => wss.on("listening", resolve));
-	const port = wss.address().port;
-
-	try {
-		const textEcho = await new Promise((resolve, reject) => {
-			const ws = new WebSocket(`ws://127.0.0.1:${port}`);
-
-			ws.on("open", () => {
-				clientEvents.push("open");
-				ws.send("hello-ws");
-			});
-
-			ws.on("message", (data) => {
-				clientEvents.push("text-message");
-				ws.close();
-				resolve(data.toString());
-			});
-
-			ws.on("close", () => {
-				clientEvents.push("text-close");
-			});
-
-			ws.on("error", reject);
-		});
-
-		// Wait briefly for server close event
-		await new Promise((resolve) => setTimeout(resolve, 50));
-
-		const binaryEcho = await new Promise((resolve, reject) => {
-			const ws = new WebSocket(`ws://127.0.0.1:${port}`);
-
-			ws.on("open", () => {
-				clientEvents.push("binary-open");
-				ws.send(Buffer.from([0xde, 0xad, 0xbe, 0xef]));
-			});
-
-			ws.on("message", (data, isBinary) => {
-				clientEvents.push("binary-message");
-				ws.close();
-				resolve({
-					isBinary,
-					hex: Buffer.from(data).toString("hex"),
-				});
-			});
-
-			ws.on("close", () => {
-				clientEvents.push("binary-close");
-			});
-
-			ws.on("error", reject);
-		});
-
-		// Wait briefly for server close event
-		await new Promise((resolve) => setTimeout(resolve, 50));
-
-		const result = {
-			textEcho,
-			binaryEcho,
-			serverEvents: serverEvents.sort(),
-			clientEvents: clientEvents.sort(),
-		};
-
-		console.log(JSON.stringify(result));
-	} finally {
-		await new Promise((resolve) => wss.close(resolve));
-	}
-}
-
-main().catch((err) => {
-	console.error(err.message);
-	process.exit(1);
-});
diff --git a/registry/tests/projects/yaml-pass/fixture.json b/registry/tests/projects/yaml-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/yaml-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/yaml-pass/package.json b/registry/tests/projects/yaml-pass/package.json
deleted file mode 100644
index f584183f2..000000000
--- a/registry/tests/projects/yaml-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-yaml-pass",
-	"private": true,
-	"type": "module",
-	"dependencies": {
-		"yaml": "2.8.0"
-	}
-}
diff --git a/registry/tests/projects/yaml-pass/src/index.js b/registry/tests/projects/yaml-pass/src/index.js
deleted file mode 100644
index 32f1b85fc..000000000
--- a/registry/tests/projects/yaml-pass/src/index.js
+++ /dev/null
@@ -1,51 +0,0 @@
-import { parse, stringify, parseDocument } from "yaml";
-
-// Parse a YAML string
-const yamlStr = `
-name: agentos
-version: 1.0.0
-features:
-  - sandboxing
-  - isolation
-  - compatibility
-config:
-  timeout: 30
-  retries: 3
-  nested:
-    enabled: true
-    level: 2
-`;
-
-const parsed = parse(yamlStr);
-
-// Stringify a JS object back to YAML
-const obj = {
-	database: {
-		host: "localhost",
-		port: 5432,
-		credentials: {
-			user: "admin",
-			pass: "secret",
-		},
-	},
-	tags: ["prod", "us-east"],
-};
-
-const stringified = stringify(obj);
-
-// Re-parse the stringified output to verify round-trip
-const roundTrip = parse(stringified);
-
-// Parse a document for node-level access
-const doc = parseDocument("key: value\nlist:\n  - a\n  - b");
-const docJSON = doc.toJSON();
-
-const result = {
-	parsed,
-	stringified,
-	roundTrip,
-	roundTripMatch: JSON.stringify(obj) === JSON.stringify(roundTrip),
-	docJSON,
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/projects/yarn-berry-layout-pass/.yarnrc.yml b/registry/tests/projects/yarn-berry-layout-pass/.yarnrc.yml
deleted file mode 100644
index 3186f3f07..000000000
--- a/registry/tests/projects/yarn-berry-layout-pass/.yarnrc.yml
+++ /dev/null
@@ -1 +0,0 @@
-nodeLinker: node-modules
diff --git a/registry/tests/projects/yarn-berry-layout-pass/fixture.json b/registry/tests/projects/yarn-berry-layout-pass/fixture.json
deleted file mode 100644
index 198b477b6..000000000
--- a/registry/tests/projects/yarn-berry-layout-pass/fixture.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass",
-	"packageManager": "yarn"
-}
diff --git a/registry/tests/projects/yarn-berry-layout-pass/package.json b/registry/tests/projects/yarn-berry-layout-pass/package.json
deleted file mode 100644
index 10d105206..000000000
--- a/registry/tests/projects/yarn-berry-layout-pass/package.json
+++ /dev/null
@@ -1,9 +0,0 @@
-{
-	"name": "project-matrix-yarn-berry-layout-pass",
-	"private": true,
-	"type": "commonjs",
-	"packageManager": "yarn@4.13.0",
-	"dependencies": {
-		"left-pad": "0.0.3"
-	}
-}
diff --git a/registry/tests/projects/yarn-berry-layout-pass/src/index.js b/registry/tests/projects/yarn-berry-layout-pass/src/index.js
deleted file mode 100644
index 6ab481e2f..000000000
--- a/registry/tests/projects/yarn-berry-layout-pass/src/index.js
+++ /dev/null
@@ -1,11 +0,0 @@
-"use strict";
-
-const leftPad = require("left-pad");
-
-const results = [
-	{ input: "hello", width: 10, padded: leftPad("hello", 10) },
-	{ input: "42", width: 5, fill: "0", padded: leftPad("42", 5, "0") },
-	{ input: "", width: 3, padded: leftPad("", 3) },
-];
-
-console.log(JSON.stringify(results));
diff --git a/registry/tests/projects/yarn-berry-layout-pass/yarn.lock b/registry/tests/projects/yarn-berry-layout-pass/yarn.lock
deleted file mode 100644
index 487883fc4..000000000
--- a/registry/tests/projects/yarn-berry-layout-pass/yarn.lock
+++ /dev/null
@@ -1,21 +0,0 @@
-# This file is generated by running "yarn install" inside your project.
-# Manual changes might be lost - proceed with caution!
-
-__metadata:
-  version: 8
-  cacheKey: 10c0
-
-"left-pad@npm:0.0.3":
-  version: 0.0.3
-  resolution: "left-pad@npm:0.0.3"
-  checksum: 10c0/ff34f59ffd2e550f5b660f850fd3096b7a058d609406ae24a04bbbdaee3893a804b5c6bf9e32fb725808e7aced6b13881c047a68e052f10c66180eee68e91e33
-  languageName: node
-  linkType: hard
-
-"project-matrix-yarn-berry-layout-pass@workspace:.":
-  version: 0.0.0-use.local
-  resolution: "project-matrix-yarn-berry-layout-pass@workspace:."
-  dependencies:
-    left-pad: "npm:0.0.3"
-  languageName: unknown
-  linkType: soft
diff --git a/registry/tests/projects/yarn-classic-layout-pass/fixture.json b/registry/tests/projects/yarn-classic-layout-pass/fixture.json
deleted file mode 100644
index 198b477b6..000000000
--- a/registry/tests/projects/yarn-classic-layout-pass/fixture.json
+++ /dev/null
@@ -1,5 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass",
-	"packageManager": "yarn"
-}
diff --git a/registry/tests/projects/yarn-classic-layout-pass/package.json b/registry/tests/projects/yarn-classic-layout-pass/package.json
deleted file mode 100644
index ea64d44a8..000000000
--- a/registry/tests/projects/yarn-classic-layout-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-yarn-classic-layout-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"left-pad": "0.0.3"
-	}
-}
diff --git a/registry/tests/projects/yarn-classic-layout-pass/src/index.js b/registry/tests/projects/yarn-classic-layout-pass/src/index.js
deleted file mode 100644
index 6ab481e2f..000000000
--- a/registry/tests/projects/yarn-classic-layout-pass/src/index.js
+++ /dev/null
@@ -1,11 +0,0 @@
-"use strict";
-
-const leftPad = require("left-pad");
-
-const results = [
-	{ input: "hello", width: 10, padded: leftPad("hello", 10) },
-	{ input: "42", width: 5, fill: "0", padded: leftPad("42", 5, "0") },
-	{ input: "", width: 3, padded: leftPad("", 3) },
-];
-
-console.log(JSON.stringify(results));
diff --git a/registry/tests/projects/yarn-classic-layout-pass/yarn.lock b/registry/tests/projects/yarn-classic-layout-pass/yarn.lock
deleted file mode 100644
index d51a18b74..000000000
--- a/registry/tests/projects/yarn-classic-layout-pass/yarn.lock
+++ /dev/null
@@ -1,8 +0,0 @@
-# THIS IS AN AUTOGENERATED FILE. DO NOT EDIT THIS FILE DIRECTLY.
-# yarn lockfile v1
-
-
-left-pad@0.0.3:
-  version "0.0.3"
-  resolved "https://registry.yarnpkg.com/left-pad/-/left-pad-0.0.3.tgz#04d99b4a1eaf9e5f79c05e5d745d53edd1aa8aa1"
-  integrity sha512-Qli5dSpAXQOSw1y/M+uBKT37rj6iZAQMz6Uy5/ZYGIhBLS/ODRHqL4XIDvSAtYpjfia0XKNztlPFa806TWw5Gw==
diff --git a/registry/tests/projects/zod-pass/fixture.json b/registry/tests/projects/zod-pass/fixture.json
deleted file mode 100644
index b365bf6f2..000000000
--- a/registry/tests/projects/zod-pass/fixture.json
+++ /dev/null
@@ -1,4 +0,0 @@
-{
-	"entry": "src/index.js",
-	"expectation": "pass"
-}
diff --git a/registry/tests/projects/zod-pass/package.json b/registry/tests/projects/zod-pass/package.json
deleted file mode 100644
index c90fc5e8d..000000000
--- a/registry/tests/projects/zod-pass/package.json
+++ /dev/null
@@ -1,8 +0,0 @@
-{
-	"name": "project-matrix-zod-pass",
-	"private": true,
-	"type": "commonjs",
-	"dependencies": {
-		"zod": "3.24.2"
-	}
-}
diff --git a/registry/tests/projects/zod-pass/pnpm-lock.yaml b/registry/tests/projects/zod-pass/pnpm-lock.yaml
deleted file mode 100644
index d8c36e5d9..000000000
--- a/registry/tests/projects/zod-pass/pnpm-lock.yaml
+++ /dev/null
@@ -1,22 +0,0 @@
-lockfileVersion: '9.0'
-
-settings:
-  autoInstallPeers: true
-  excludeLinksFromLockfile: false
-
-importers:
-
-  .:
-    dependencies:
-      zod:
-        specifier: 3.24.2
-        version: 3.24.2
-
-packages:
-
-  zod@3.24.2:
-    resolution: {integrity: sha512-lY7CDW43ECgW9u1TcT3IoXHflywfVqDYze4waEz812jR/bZ8FHDsl7pFQoSZTz5N+2NqRXs8GBwnAwo3ZNxqhQ==}
-
-snapshots:
-
-  zod@3.24.2: {}
diff --git a/registry/tests/projects/zod-pass/src/index.js b/registry/tests/projects/zod-pass/src/index.js
deleted file mode 100644
index 0b8c0bf9b..000000000
--- a/registry/tests/projects/zod-pass/src/index.js
+++ /dev/null
@@ -1,55 +0,0 @@
-"use strict";
-
-const { z } = require("zod");
-
-// Define schemas
-const userSchema = z.object({
-	name: z.string().min(1),
-	age: z.number().int().positive(),
-	email: z.string().email(),
-	tags: z.array(z.string()).optional(),
-});
-
-const statusSchema = z.enum(["active", "inactive", "pending"]);
-
-// Successful validation
-const validUser = userSchema.parse({
-	name: "Alice",
-	age: 30,
-	email: "alice@example.com",
-	tags: ["admin"],
-});
-
-// Failed validation
-let validationError = null;
-try {
-	userSchema.parse({ name: "", age: -1, email: "bad" });
-} catch (err) {
-	validationError = {
-		issueCount: err.issues.length,
-		codes: err.issues.map((i) => i.code).sort(),
-	};
-}
-
-// Safe parse
-const safeResult = userSchema.safeParse({ name: "Bob", age: 25, email: "bob@test.com" });
-const safeFail = userSchema.safeParse({ name: 123 });
-
-// Enum
-const enumResult = statusSchema.safeParse("active");
-const enumFail = statusSchema.safeParse("unknown");
-
-// Transform and refine
-const doubled = z.number().transform((n) => n * 2).parse(5);
-
-const result = {
-	validUser: { name: validUser.name, age: validUser.age, hasTags: Array.isArray(validUser.tags) },
-	validationError,
-	safeParseSuccess: safeResult.success,
-	safeParseFail: safeFail.success,
-	enumSuccess: enumResult.success,
-	enumFail: enumFail.success,
-	transformed: doubled,
-};
-
-console.log(JSON.stringify(result));
diff --git a/registry/tests/terminal-harness.ts b/registry/tests/terminal-harness.ts
deleted file mode 100644
index b01ad66a9..000000000
--- a/registry/tests/terminal-harness.ts
+++ /dev/null
@@ -1,159 +0,0 @@
-/**
- * TerminalHarness wires openShell() to a headless xterm Terminal so registry
- * tests can assert against deterministic terminal screen state.
- */
-
-import { Terminal } from "@xterm/headless";
-import type { Kernel } from "./helpers.js";
-
-type ShellHandle = ReturnType<Kernel["openShell"]>;
-
-const SETTLE_MS = 50;
-const POLL_MS = 20;
-const DEFAULT_WAIT_TIMEOUT_MS = 5_000;
-
-export class TerminalHarness {
-	readonly term: Terminal;
-	readonly shell: ShellHandle;
-	private typing = false;
-	private disposed = false;
-
-	constructor(
-		kernel: Kernel,
-		options?: {
-			cols?: number;
-			rows?: number;
-			env?: Record<string, string>;
-			cwd?: string;
-		},
-	) {
-		const cols = options?.cols ?? 80;
-		const rows = options?.rows ?? 24;
-
-		this.term = new Terminal({ cols, rows, allowProposedApi: true });
-		this.shell = kernel.openShell({
-			cols,
-			rows,
-			env: options?.env,
-			cwd: options?.cwd,
-			onStderr: (data: Uint8Array) => {
-				this.term.write(data);
-			},
-		});
-		this.shell.onData = (data: Uint8Array) => {
-			this.term.write(data);
-		};
-	}
-
-	async type(input: string): Promise<void> {
-		if (this.typing) {
-			throw new Error(
-				"TerminalHarness.type() called while previous type() is still in-flight",
-			);
-		}
-		this.typing = true;
-		try {
-			await this.typeInternal(input);
-		} finally {
-			this.typing = false;
-		}
-	}
-
-	private typeInternal(input: string): Promise<void> {
-		return new Promise<void>((resolve) => {
-			let timer: ReturnType<typeof setTimeout> | null = null;
-			const originalOnData = this.shell.onData;
-
-			const resetTimer = () => {
-				if (timer !== null) clearTimeout(timer);
-				timer = setTimeout(() => {
-					this.shell.onData = originalOnData;
-					resolve();
-				}, SETTLE_MS);
-			};
-
-			this.shell.onData = (data: Uint8Array) => {
-				this.term.write(data);
-				resetTimer();
-			};
-
-			resetTimer();
-			this.shell.write(input);
-		});
-	}
-
-	screenshotTrimmed(): string {
-		const buf = this.term.buffer.active;
-		const lines: string[] = [];
-
-		for (let row = 0; row < this.term.rows; row++) {
-			const line = buf.getLine(buf.viewportY + row);
-			lines.push(line ? line.translateToString(true) : "");
-		}
-
-		while (lines.length > 0 && lines[lines.length - 1] === "") {
-			lines.pop();
-		}
-
-		return lines.join("\n");
-	}
-
-	line(row: number): string {
-		const buf = this.term.buffer.active;
-		const line = buf.getLine(buf.viewportY + row);
-		return line ? line.translateToString(true) : "";
-	}
-
-	async waitFor(
-		text: string,
-		occurrence: number = 1,
-		timeoutMs: number = DEFAULT_WAIT_TIMEOUT_MS,
-	): Promise<void> {
-		const deadline = Date.now() + timeoutMs;
-
-		while (true) {
-			const screen = this.screenshotTrimmed();
-
-			let count = 0;
-			let idx = -1;
-			while (true) {
-				idx = screen.indexOf(text, idx + 1);
-				if (idx === -1) break;
-				count++;
-				if (count >= occurrence) return;
-			}
-
-			if (Date.now() >= deadline) {
-				throw new Error(
-					`waitFor("${text}", ${occurrence}) timed out after ${timeoutMs}ms.\n` +
-						`Expected: "${text}" (occurrence ${occurrence})\n` +
-						`Screen:\n${screen}`,
-				);
-			}
-
-			await new Promise((resolve) => setTimeout(resolve, POLL_MS));
-		}
-	}
-
-	async exit(): Promise<number> {
-		this.shell.write("\x04");
-		return this.shell.wait();
-	}
-
-	async dispose(): Promise<void> {
-		if (this.disposed) return;
-		this.disposed = true;
-
-		try {
-			this.shell.kill();
-			await Promise.race([
-				this.shell.wait(),
-				new Promise((resolve) => setTimeout(resolve, 500)),
-			]);
-		} catch {
-			// Shell may already be gone.
-		}
-
-		this.term.dispose();
-	}
-}
diff --git a/registry/tests/wasmvm/c-parity.test.ts b/registry/tests/wasmvm/c-parity.test.ts
deleted file mode 100644
index 84daa0a46..000000000
--- a/registry/tests/wasmvm/c-parity.test.ts
+++ /dev/null
@@ -1,980 +0,0 @@
-/**
- * C parity tests — native vs WASM
- *
- * Compiles C test fixtures to both native and WASM, runs both, and
- * compares stdout/stderr/exit code for parity. Tests skip when
- * WASM binaries (make wasm), C WASM binaries (make -C native/wasmvm/c programs),
- * or native binaries (make -C native/wasmvm/c native) are not built.
- */
-
-import { describe, it, expect, beforeEach, afterEach } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import {
-  COMMANDS_DIR,
-  C_BUILD_DIR,
-  createKernel,
-  describeIf,
-  hasWasmBinaries,
-  itIf,
-} from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-import { existsSync } from 'node:fs';
-import { writeFile as fsWriteFile, readFile as fsReadFile, mkdtemp, rm, mkdir as fsMkdir } from 'node:fs/promises';
-import { spawn } from 'node:child_process';
-import { join } from 'node:path';
-import { tmpdir } from 'node:os';
-import { createServer as createTcpServer } from 'node:net';
-import { createServer as createHttpServer } from 'node:http';
-
-const NATIVE_DIR = join(C_BUILD_DIR, 'native');
-
-const hasCWasmBinaries = existsSync(join(C_BUILD_DIR, 'hello'));
-const hasNativeBinaries = existsSync(join(NATIVE_DIR, 'hello'));
-
-function skipReason(): string | false {
-  if (!hasWasmBinaries) return 'WASM binaries not built (run make wasm in native/wasmvm/)';
-  if (!hasCWasmBinaries) return 'C WASM binaries not built (run make -C native/wasmvm/c programs)';
-  if (!hasNativeBinaries) return 'C native binaries not built (run make -C native/wasmvm/c native)';
-  return false;
-}
-
-// Run a native binary, capture stdout/stderr/exitCode
-function runNative(
-  name: string,
-  args: string[] = [],
-  options?: { input?: string; env?: Record<string, string> },
-): Promise<{ exitCode: number; stdout: string; stderr: string }> {
-  return new Promise((res) => {
-    const proc = spawn(join(NATIVE_DIR, name), args, {
-      env: options?.env,
-      stdio: ['pipe', 'pipe', 'pipe'],
-    });
-    let stdout = '';
-    let stderr = '';
-
-    proc.stdout.on('data', (d: Buffer) => { stdout += d.toString(); });
-    proc.stderr.on('data', (d: Buffer) => { stderr += d.toString(); });
-
-    if (options?.input !== undefined) {
-      proc.stdin.write(options.input);
-    }
-    proc.stdin.end();
-
-    proc.on('close', (code) => {
-      res({ exitCode: code ?? 0, stdout, stderr });
-    });
-  });
-}
-
-// Strip kernel-level diagnostic WARN lines from WASM stderr (not program output)
-function normalizeStderr(stderr: string): string {
-  return stderr
-    .split('\n')
-    .filter((l) => !l.includes('WARN') || !l.includes('could not retrieve pid'))
-    .join('\n');
-}
-
-// Normalize argv[0] line since native path differs from WASM command name
-function normalizeArgsOutput(output: string): string {
-  return output.replace(/^(argv\[0\]=).+$/m, '$1<program>');
-}
-
-// Extract lines matching a prefix from env output
-function extractEnvPrefix(output: string, prefix: string): string {
-  return output
-    .split('\n')
-    .filter((l) => l.startsWith(prefix))
-    .sort()
-    .join('\n');
-}
-
-// Minimal in-memory VFS for kernel tests
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-  private symlinks = new Map<string, string>();
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async pread(path: string, offset: number, length: number): Promise<Uint8Array> {
-    const data = await this.readFile(path);
-    return data.slice(offset, offset + length);
-  }
-  async pwrite(path: string, offset: number, content: Uint8Array): Promise<void> {
-    const data = await this.readFile(path);
-    const next = new Uint8Array(Math.max(data.length, offset + content.length));
-    next.set(data);
-    next.set(content, offset);
-    this.files.set(path, next);
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map((name) => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) { this.dirs.add(path); }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path) || this.symlinks.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const isSymlink = this.symlinks.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !isSymlink && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isSymlink ? 0o120777 : (isDir ? 0o40755 : 0o100644),
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: isSymlink,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  async chmod() {}
-  async rename(from: string, to: string) {
-    const data = this.files.get(from);
-    if (data) { this.files.set(to, data); this.files.delete(from); }
-  }
-  async unlink(path: string) { this.files.delete(path); this.symlinks.delete(path); }
-  async rmdir(path: string) { this.dirs.delete(path); }
-  async symlink(target: string, linkPath: string) {
-    this.symlinks.set(linkPath, target);
-    const parts = linkPath.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async readlink(path: string): Promise<string> {
-    const target = this.symlinks.get(path);
-    if (!target) throw new Error(`EINVAL: ${path}`);
-    return target;
-  }
-}
-
-describeIf(!skipReason(), 'C parity: native vs WASM', { timeout: 30_000 }, () => {
-  let kernel: Kernel;
-  let vfs: SimpleVFS;
-
-  async function mountParityKernel(options: { loopbackExemptPorts?: number[] } = {}) {
-    const nextKernel = createKernel({
-      filesystem: vfs as any,
-      ...(options.loopbackExemptPorts
-        ? { loopbackExemptPorts: options.loopbackExemptPorts }
-        : {}),
-    });
-    // C build dir first so C programs take precedence over same-named Rust commands
-    await nextKernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-    return nextKernel;
-  }
-
-  async function recreateKernel(options: { loopbackExemptPorts?: number[] } = {}) {
-    await kernel?.dispose();
-    kernel = await mountParityKernel(options);
-  }
-
-  beforeEach(async () => {
-    vfs = new SimpleVFS();
-    kernel = await mountParityKernel();
-  });
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  // --- Tier 1: basic I/O ---
-
-  it('hello: stdout and exit code match', async () => {
-    const native = await runNative('hello');
-    const wasm = await kernel.exec('hello');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.stdout).toBe(native.stdout);
-  });
-
-  it('args: argc and argv[1..] match', async () => {
-    const native = await runNative('args', ['foo', 'bar']);
-    const wasm = await kernel.exec('args foo bar');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    // argv[0] differs (native path vs WASM command name), normalize it
-    expect(normalizeArgsOutput(wasm.stdout)).toBe(normalizeArgsOutput(native.stdout));
-  });
-
-  it('env: user-specified env vars match', async () => {
-    const env = { TEST_PARITY_A: 'hello', TEST_PARITY_B: 'world' };
-    const native = await runNative('env', [], { env });
-    const wasm = await kernel.exec('env', { env });
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    // Shell may inject extra env vars; compare only the TEST_PARITY_ vars
-    expect(extractEnvPrefix(wasm.stdout, 'TEST_PARITY_')).toBe(
-      extractEnvPrefix(native.stdout, 'TEST_PARITY_'),
-    );
-  });
-
-  it('exitcode: exit code matches', async () => {
-    const native = await runNative('exitcode', ['42']);
-    const wasm = await kernel.exec('exitcode 42');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(42);
-  });
-
-  it('cat: stdin passthrough matches', async () => {
-    const input = 'hello world\nfoo bar\n';
-    const native = await runNative('cat', [], { input });
-    const wasm = await kernel.exec('cat', { stdin: input });
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.stdout).toBe(native.stdout);
-  });
-
-  // --- Tier 1: data processing ---
-
-  it('wc: word/line/byte counts match', async () => {
-    const input = 'hello world\nfoo bar baz\n';
-    const native = await runNative('wc', [], { input });
-    const wasm = await kernel.exec('wc', { stdin: input });
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.stdout).toBe(native.stdout);
-  });
-
-  it('fread: file contents match', async () => {
-    const content = 'hello from fread test\n';
-
-    // Native: temp file on disk
-    const tmpDir = await mkdtemp(join(tmpdir(), 'c-parity-'));
-    const filePath = join(tmpDir, 'test.txt');
-    await fsWriteFile(filePath, content);
-    const native = await runNative('fread', [filePath]);
-
-    // WASM: file on VFS
-    await vfs.writeFile('/tmp/test.txt', content);
-    const wasm = await kernel.exec('fread /tmp/test.txt');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.stdout).toBe(native.stdout);
-
-    await rm(tmpDir, { recursive: true });
-  });
-
-  it('fwrite: written content matches', async () => {
-    const writeContent = 'test content';
-
-    // Native: write to temp dir
-    const tmpDir = await mkdtemp(join(tmpdir(), 'c-parity-'));
-    const nativePath = join(tmpDir, 'out.txt');
-    const native = await runNative('fwrite', [nativePath, writeContent]);
-    const nativeFileContent = await fsReadFile(nativePath, 'utf8');
-
-    // WASM: write to VFS
-    const wasm = await kernel.exec(`fwrite /tmp/out.txt "${writeContent}"`);
-    const wasmFileContent = await vfs.readTextFile('/tmp/out.txt');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasmFileContent).toBe(nativeFileContent);
-
-    await rm(tmpDir, { recursive: true });
-  });
-
-  it('pread_pwrite_access: pread/pwrite/access syscalls match', async () => {
-    // Native: uses real /tmp
-    const tmpDir = await mkdtemp(join(tmpdir(), 'c-parity-'));
-    const nativeEnv = { ...process.env, HOME: tmpDir };
-    const native = await runNative('pread_pwrite_access', [], { env: nativeEnv });
-
-    // WASM: uses VFS /tmp
-    await vfs.createDir('/tmp');
-    const wasm = await kernel.exec('pread_pwrite_access');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.stdout).toBe(native.stdout);
-    expect(wasm.stdout).toContain('total: 0 failures');
-
-    await rm(tmpDir, { recursive: true });
-  });
-
-  it('sort: sorted output matches', async () => {
-    const input = 'banana\napple\ncherry\ndate\n';
-    const native = await runNative('sort', [], { input });
-    const wasm = await kernel.exec('sort', { stdin: input });
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.stdout).toBe(native.stdout);
-  });
-
-  it('sha256: hex digest matches', async () => {
-    const input = 'hello';
-    const native = await runNative('sha256', [], { input });
-    const wasm = await kernel.exec('sha256', { stdin: input });
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.stdout).toBe(native.stdout);
-  });
-
-  // --- Tier 2: custom imports (patched sysroot) ---
-
-  const hasCTier2Binaries = existsSync(join(C_BUILD_DIR, 'pipe_test'));
-  const tier2Skip = !hasCTier2Binaries
-    ? 'C Tier 2 WASM binaries not built (need patched sysroot: make -C native/wasmvm/c sysroot && make -C native/wasmvm/c programs)'
-    : false;
-
-  itIf(!tier2Skip, 'isatty_test: piped stdin/stdout/stderr all report not-a-tty', async () => {
-    const native = await runNative('isatty_test');
-    const wasm = await kernel.exec('isatty_test');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.stdout).toBe(native.stdout);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-  });
-
-  itIf(!tier2Skip, 'getpid_test: PID is valid, not hardcoded 42, and consistent', async () => {
-    const native = await runNative('getpid_test');
-    const wasm = await kernel.exec('getpid_test');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    // PIDs differ between native and WASM, but both should be valid
-    expect(wasm.stdout).toContain('pid_positive=yes');
-    expect(wasm.stdout).toContain('pid_not_42=yes');
-    expect(wasm.stdout).toContain('pid_consistent=yes');
-    expect(native.stdout).toContain('pid_positive=yes');
-    expect(native.stdout).toContain('pid_not_42=yes');
-    expect(native.stdout).toContain('pid_consistent=yes');
-    // Verify actual PID value is > 0
-    const wasmPid = parseInt(wasm.stdout.match(/^pid=(\d+)/m)?.[1] ?? '0', 10);
-    expect(wasmPid).toBeGreaterThan(0);
-    expect(wasmPid).not.toBe(42);
-  });
-
-  itIf(!tier2Skip, 'getppid_test: top-level parent PID is valid', async () => {
-    const native = await runNative('getppid_test');
-    const wasm = await kernel.exec('getppid_test');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    expect(wasm.stdout).toContain('ppid_nonnegative=yes');
-    expect(native.stdout).toContain('ppid_nonnegative=yes');
-    expect(wasm.stdout).toContain('ppid=0');
-  });
-
-  itIf(!tier2Skip, 'userinfo: uid/gid/euid/egid values are specific', async () => {
-    const native = await runNative('userinfo');
-    const wasm = await kernel.exec('userinfo');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    // Verify format for both
-    const format = /^uid=\d+\ngid=\d+\neuid=\d+\negid=\d+\n$/;
-    expect(wasm.stdout).toMatch(format);
-    expect(native.stdout).toMatch(format);
-    // WASM kernel returns uid/gid = 1000 (sandbox user)
-    expect(wasm.stdout).toContain('uid=1000');
-    expect(wasm.stdout).toContain('gid=1000');
-    expect(wasm.stdout).toContain('euid=1000');
-    expect(wasm.stdout).toContain('egid=1000');
-  });
-
-  itIf(!tier2Skip, 'getpwuid_test: passwd entry fields valid', async () => {
-    const native = await runNative('getpwuid_test');
-    const wasm = await kernel.exec('getpwuid_test');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    // Both should get valid passwd entries
-    expect(wasm.stdout).toContain('getpwuid: ok');
-    expect(wasm.stdout).toContain('pw_name_nonempty: yes');
-    expect(wasm.stdout).toContain('pw_uid_match: yes');
-    expect(wasm.stdout).toContain('pw_gid_valid: yes');
-    expect(wasm.stdout).toContain('pw_dir_nonempty: yes');
-    expect(wasm.stdout).toContain('pw_shell_nonempty: yes');
-    expect(native.stdout).toContain('getpwuid: ok');
-    expect(native.stdout).toContain('pw_name_nonempty: yes');
-    expect(native.stdout).toContain('pw_uid_match: yes');
-  });
-
-  itIf(!tier2Skip, 'pipe_test: write through pipe and read back matches', async () => {
-    const native = await runNative('pipe_test');
-    const wasm = await kernel.exec('pipe_test');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.stdout).toBe(native.stdout);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-  });
-
-  itIf(!tier2Skip, 'dup_test: write through duplicated fds matches', async () => {
-    const native = await runNative('dup_test');
-    const wasm = await kernel.exec('dup_test');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.stdout).toBe(native.stdout);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-  });
-
-  it('sleep_test: nanosleep completes successfully', async () => {
-    const native = await runNative('sleep_test', ['50']);
-    const wasm = await kernel.exec('sleep_test 50');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    // Both should report successful sleep with >= 80% of requested time
-    expect(wasm.stdout).toContain('requested=50ms');
-    expect(wasm.stdout).toContain('ok=yes');
-    expect(native.stdout).toContain('requested=50ms');
-    expect(native.stdout).toContain('ok=yes');
-  });
-
-  // --- Tier 3: process management (patched sysroot) ---
-
-  const hasCTier3Binaries = existsSync(join(C_BUILD_DIR, 'spawn_child'));
-  const tier3Skip = !hasCTier3Binaries
-    ? 'C Tier 3 WASM binaries not built (need patched sysroot: make -C native/wasmvm/c sysroot && make -C native/wasmvm/c programs)'
-    : false;
-
-  itIf(!tier3Skip, 'spawn_child: posix_spawn echo, capture stdout via pipe', async () => {
-    const native = await runNative('spawn_child');
-    const wasm = await kernel.exec('spawn_child');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(wasm.stdout).toBe(native.stdout);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    expect(wasm.stdout).toContain('child_stdout: hello');
-    expect(wasm.stdout).toContain('child_exit: 0');
-  });
-
-  itIf(!tier3Skip, 'spawn_exit_code: child exits non-zero, verify via waitpid', async () => {
-    const native = await runNative('spawn_exit_code');
-    const wasm = await kernel.exec('spawn_exit_code');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(wasm.stdout).toBe(native.stdout);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    expect(wasm.stdout).toContain('child_exit_code: 7');
-    expect(wasm.stdout).toContain('match: yes');
-  });
-
-  itIf(!tier3Skip, 'pipeline: echo hello | cat via pipe + posix_spawn', async () => {
-    const native = await runNative('pipeline');
-    const wasm = await kernel.exec('pipeline');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(wasm.stdout).toBe(native.stdout);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    expect(wasm.stdout).toContain('pipeline_output: hello');
-    expect(wasm.stdout).toContain('echo_exit: 0');
-    expect(wasm.stdout).toContain('cat_exit: 0');
-  });
-
-  itIf(!tier3Skip, 'kill_child: spawn sleep, kill SIGTERM, verify terminated', async () => {
-    const native = await runNative('kill_child');
-    const wasm = await kernel.exec('kill_child');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    // Both should complete the spawn/kill/wait cycle successfully
-    expect(wasm.stdout).toContain('spawned: yes');
-    expect(wasm.stdout).toContain('kill: ok');
-    expect(wasm.stdout).toContain('terminated: yes');
-    // Verify child was killed by signal (WIFSIGNALED)
-    expect(wasm.stdout).toContain('signaled=yes');
-    expect(native.stdout).toContain('signaled=yes');
-    // SIGTERM = 15
-    expect(wasm.stdout).toContain('termsig=15');
-    expect(native.stdout).toContain('termsig=15');
-  });
-
-  itIf(!tier3Skip, 'signal_tests: SIGKILL, kill exited PID, kill invalid PID', async () => {
-    const native = await runNative('signal_tests');
-    const wasm = await kernel.exec('signal_tests');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-
-    // Test 1: SIGKILL — child killed by signal 9
-    expect(wasm.stdout).toContain('test_sigkill: ok');
-    expect(native.stdout).toContain('test_sigkill: ok');
-    expect(wasm.stdout).toContain('sigkill_signaled=yes');
-    expect(wasm.stdout).toContain('sigkill_termsig=9');
-
-    // Test 2: kill exited process — ok with either 0 or -1/ESRCH
-    expect(wasm.stdout).toContain('test_kill_exited: ok');
-    expect(native.stdout).toContain('test_kill_exited: ok');
-
-    // Test 3: kill invalid PID — returns -1
-    expect(wasm.stdout).toContain('test_kill_invalid: ok');
-    expect(native.stdout).toContain('test_kill_invalid: ok');
-  });
-
-  itIf(!tier3Skip, 'sigaction_behavior: query, SA_RESETHAND, and SA_RESTART parity', async () => {
-    const env = { ...process.env, PATH: `${NATIVE_DIR}:${process.env.PATH ?? ''}` };
-    const native = await runNative('sigaction_behavior', [], { env });
-    const wasm = await kernel.exec('sigaction_behavior');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(wasm.stdout).toBe(native.stdout);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    expect(wasm.stdout).toContain('sigaction_query_mask_sigterm=yes');
-    expect(wasm.stdout).toContain('sigaction_query_flags=yes');
-    expect(wasm.stdout).toContain('sa_resethand_handler_calls=1');
-    expect(wasm.stdout).toContain('sa_resethand_reset=yes');
-    expect(wasm.stdout).toContain('sa_restart_handler_calls=1');
-    expect(wasm.stdout).toContain('sa_restart_accept=yes');
-    expect(wasm.stdout).toContain('sa_restart_child_exit=0');
-    expect(wasm.stdout).toContain('sa_restart_signal_exit=0');
-  });
-
-  itIf(!tier3Skip, 'sigaction_self: self kill dispatches SA_RESETHAND handler', async () => {
-    const native = await runNative('sigaction_self');
-    const wasm = await kernel.exec('sigaction_self');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(wasm.stdout).toBe(native.stdout);
-    expect(wasm.stdout).toContain('self_signal_handler_calls=1');
-    expect(wasm.stdout).toContain('self_signal_reset=yes');
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-  });
-
-  itIf(!tier3Skip, 'tcp_accept_spawn: accept spawned child connection', async () => {
-    const env = { ...process.env, PATH: `${NATIVE_DIR}:${process.env.PATH ?? ''}` };
-    const native = await runNative('tcp_accept_spawn', [], { env });
-    const wasm = await kernel.exec('tcp_accept_spawn');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(wasm.stdout).toBe(native.stdout);
-    expect(wasm.stdout).toContain('accept_child_message=yes');
-    expect(wasm.stdout).toContain('accept_child_exit=0');
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-  });
-
-  itIf(!tier3Skip, 'getppid_verify: child getppid matches parent getpid', async () => {
-    // Native needs getppid_test on PATH for posix_spawnp
-    const native = await runNative('getppid_verify', [], {
-      env: { ...process.env, PATH: `${NATIVE_DIR}:${process.env.PATH}` },
-    });
-    const wasm = await kernel.exec('getppid_verify');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    expect(wasm.stdout).toContain('match=yes');
-    expect(native.stdout).toContain('match=yes');
-    expect(wasm.stdout).toContain('child_exit=0');
-    expect(native.stdout).toContain('child_exit=0');
-  });
-
-  itIf(!tier3Skip, 'waitpid_return: waitpid returns correct child PID', async () => {
-    const native = await runNative('waitpid_return');
-    const wasm = await kernel.exec('waitpid_return');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    // waitpid with specific PID returns that PID
-    expect(wasm.stdout).toContain('test1_match: yes');
-    expect(wasm.stdout).toContain('test1_exit: 0');
-    // wait() (waitpid(-1)) returns actual child PID
-    expect(wasm.stdout).toContain('test2_match: yes');
-    expect(wasm.stdout).toContain('test2_exit: 0');
-    // Return values are positive PIDs
-    expect(wasm.stdout).toContain('test3_ret1_positive: yes');
-    expect(wasm.stdout).toContain('test3_ret2_positive: yes');
-  });
-
-  itIf(!tier3Skip, 'waitpid_edge: concurrent children and invalid PID', async () => {
-    const native = await runNative('waitpid_edge');
-    const wasm = await kernel.exec('waitpid_edge');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    // Test 1: 3 concurrent children with correct exit codes
-    expect(wasm.stdout).toContain('test1_c1_exit: 1');
-    expect(wasm.stdout).toContain('test1_c2_exit: 2');
-    expect(wasm.stdout).toContain('test1_c3_exit: 3');
-    expect(wasm.stdout).toContain('test1: ok');
-    expect(native.stdout).toContain('test1: ok');
-    // Test 2: wait() reaps both children with distinct valid PIDs
-    expect(wasm.stdout).toContain('test2_r1_valid: yes');
-    expect(wasm.stdout).toContain('test2_r2_valid: yes');
-    expect(wasm.stdout).toContain('test2_distinct: yes');
-    expect(wasm.stdout).toContain('test2: ok');
-    expect(native.stdout).toContain('test2: ok');
-    // Test 3: waitpid with never-spawned PID returns -1 with error
-    expect(wasm.stdout).toContain('test3_ret: -1');
-    expect(wasm.stdout).toContain('test3_failed: yes');
-    expect(wasm.stdout).toContain('test3: ok');
-    expect(native.stdout).toContain('test3: ok');
-  });
-
-  itIf(!tier3Skip, 'pipe_edge: large write, broken pipe, EOF, close-both', async () => {
-    const native = await runNative('pipe_edge');
-    const wasm = await kernel.exec('pipe_edge');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-
-    // Test 1: large write (128KB > 64KB pipe buffer)
-    expect(wasm.stdout).toContain('large_write: ok');
-    expect(native.stdout).toContain('large_write: ok');
-    expect(wasm.stdout).toContain('large_write_bytes=131072');
-    expect(native.stdout).toContain('large_write_bytes=131072');
-
-    // Test 2: broken pipe — write to pipe with closed read end
-    expect(wasm.stdout).toContain('broken_pipe: ok');
-    expect(native.stdout).toContain('broken_pipe: ok');
-
-    // Test 3: EOF — read from pipe with closed write end
-    expect(wasm.stdout).toContain('eof_read: ok');
-    expect(native.stdout).toContain('eof_read: ok');
-    expect(wasm.stdout).toContain('eof_read_result=0');
-    expect(native.stdout).toContain('eof_read_result=0');
-
-    // Test 4: close both ends — no crash or leak
-    expect(wasm.stdout).toContain('close_both: ok');
-    expect(native.stdout).toContain('close_both: ok');
-  });
-
-  // --- Capstone: syscall coverage (all tiers, patched sysroot) ---
-
-  const hasSyscallCoverage = existsSync(join(C_BUILD_DIR, 'syscall_coverage'));
-  const syscallCoverageSkip = !hasSyscallCoverage
-    ? 'syscall_coverage WASM binary not built (need patched sysroot: make -C native/wasmvm/c sysroot && make -C native/wasmvm/c programs)'
-    : false;
-
-  itIf(!syscallCoverageSkip, 'syscall_coverage: all syscall categories pass parity', async () => {
-    // Pre-create /tmp in VFS for the program's file operations
-    await vfs.createDir('/tmp');
-
-    const env = { TEST_SC: '1', PATH: process.env.PATH ?? '/usr/bin:/bin' };
-    const native = await runNative('syscall_coverage', [], { env });
-
-    const wasmEnv = { TEST_SC: '1' };
-    const wasm = await kernel.exec('syscall_coverage', { env: wasmEnv });
-
-    // Debug: show WASM output if it fails
-    if (wasm.exitCode !== 0) {
-      console.log('WASM stdout:', wasm.stdout);
-      console.log('WASM stderr:', wasm.stderr);
-    }
-
-    // Both should exit 0 (all tests pass)
-    expect(native.exitCode).toBe(0);
-    expect(wasm.exitCode).toBe(0);
-
-    // Compare structured output — normalize host_user lines whose values
-    // differ between native (real OS uid) and WASM (always 1000)
-    const normalizeSyscallCoverage = (out: string) =>
-      out.replace(/^(getuid|getgid|geteuid|getegid): ok$/gm, '$1: ok');
-    expect(normalizeSyscallCoverage(wasm.stdout)).toBe(normalizeSyscallCoverage(native.stdout));
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-
-    // Verify all expected syscalls are tested
-    const expectedSyscalls = [
-      // WASI FD ops
-      'open', 'write', 'read', 'seek', 'pread', 'pwrite', 'fstat', 'ftruncate', 'close',
-      // WASI path ops
-      'mkdir', 'stat', 'rename', 'opendir', 'readdir', 'closedir',
-      'symlink', 'readlink', 'unlink', 'rmdir',
-      // Args/env/clock
-      'argc', 'argv', 'environ', 'clock_realtime', 'clock_monotonic',
-      // host_process
-      'pipe', 'dup', 'dup2', 'getpid', 'getppid', 'sigaction_register', 'sigaction_query', 'spawn_waitpid', 'kill',
-      // host_user
-      'getuid', 'getgid', 'geteuid', 'getegid', 'isatty_stdin', 'getpwuid',
-      // host_net
-      'getsockname', 'getpeername',
-    ];
-    for (const name of expectedSyscalls) {
-      expect(wasm.stdout).toContain(`${name}: ok`);
-    }
-    expect(wasm.stdout).toContain('total: 0 failures');
-  });
-
-  // --- Tier 4: filesystem stress ---
-
-  const hasCTier4Binaries = existsSync(join(C_BUILD_DIR, 'c-ls'));
-  const hasCTier4Native = existsSync(join(NATIVE_DIR, 'c-ls'));
-  const tier4Skip = (!hasCTier4Binaries || !hasCTier4Native)
-    ? 'C Tier 4 binaries not built (run make -C native/wasmvm/c programs && make -C native/wasmvm/c native)'
-    : false;
-
-  // Helper: create test directory tree on disk and in VFS
-  async function setupTestTree(testVfs: SimpleVFS) {
-    const tmpDir = await mkdtemp(join(tmpdir(), 'c-parity-tree-'));
-    await fsMkdir(join(tmpDir, 'subdir', 'deep'), { recursive: true });
-    await fsWriteFile(join(tmpDir, 'alpha.txt'), 'hello\n');
-    await fsWriteFile(join(tmpDir, 'beta.txt'), 'world!\n');
-    await fsWriteFile(join(tmpDir, 'subdir', 'gamma.txt'), 'nested file\n');
-    await fsWriteFile(join(tmpDir, 'subdir', 'deep', 'delta.txt'), 'deep nested\n');
-
-    const base = '/testdir';
-    await testVfs.createDir(base);
-    await testVfs.createDir(`${base}/subdir`);
-    await testVfs.createDir(`${base}/subdir/deep`);
-    await testVfs.writeFile(`${base}/alpha.txt`, 'hello\n');
-    await testVfs.writeFile(`${base}/beta.txt`, 'world!\n');
-    await testVfs.writeFile(`${base}/subdir/gamma.txt`, 'nested file\n');
-    await testVfs.writeFile(`${base}/subdir/deep/delta.txt`, 'deep nested\n');
-
-    return { nativeDir: tmpDir, vfsBase: base };
-  }
-
-  itIf(!tier4Skip, 'c-ls: directory listing with file sizes matches', async () => {
-    const { nativeDir } = await setupTestTree(vfs);
-    try {
-      const native = await runNative('c-ls', [nativeDir]);
-      const wasm = await kernel.exec('c-ls /testdir');
-
-      expect(wasm.exitCode).toBe(native.exitCode);
-      expect(wasm.exitCode).toBe(0);
-      expect(wasm.stdout).toBe(native.stdout);
-      expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-      // Verify expected entries
-      expect(wasm.stdout).toContain('alpha.txt');
-      expect(wasm.stdout).toContain('subdir');
-    } finally {
-      await rm(nativeDir, { recursive: true });
-    }
-  });
-
-  itIf(!tier4Skip, 'c-tree: recursive directory listing matches', async () => {
-    const { nativeDir } = await setupTestTree(vfs);
-    try {
-      const native = await runNative('c-tree', [nativeDir]);
-      const wasm = await kernel.exec('c-tree /testdir');
-
-      expect(wasm.exitCode).toBe(native.exitCode);
-      expect(wasm.exitCode).toBe(0);
-      expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-      // Root path (first line) differs — normalize it
-      const normalizeRoot = (out: string) => out.replace(/^.+\n/, 'ROOT\n');
-      expect(normalizeRoot(wasm.stdout)).toBe(normalizeRoot(native.stdout));
-      // Verify tree structure present
-      expect(wasm.stdout).toContain('alpha.txt');
-      expect(wasm.stdout).toContain('deep');
-      expect(wasm.stdout).toContain('delta.txt');
-    } finally {
-      await rm(nativeDir, { recursive: true });
-    }
-  });
-
-  itIf(!tier4Skip, 'c-find: find files matching glob pattern', async () => {
-    const { nativeDir } = await setupTestTree(vfs);
-    try {
-      const native = await runNative('c-find', [nativeDir, '*.txt']);
-      const wasm = await kernel.exec('c-find /testdir "*.txt"');
-
-      expect(wasm.exitCode).toBe(native.exitCode);
-      expect(wasm.exitCode).toBe(0);
-      expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-      // Paths have different roots — strip root prefix, compare relative paths
-      const relPaths = (out: string, root: string) =>
-        out.split('\n').filter(Boolean).map((l) => l.replace(root, '')).sort().join('\n');
-      expect(relPaths(wasm.stdout, '/testdir')).toBe(relPaths(native.stdout, nativeDir));
-      // Should find all 4 .txt files
-      expect(wasm.stdout.split('\n').filter(Boolean)).toHaveLength(4);
-    } finally {
-      await rm(nativeDir, { recursive: true });
-    }
-  });
-
-  itIf(!tier4Skip, 'c-cp: copied file contents match', async () => {
-    const srcContent = 'copy test content\nwith multiple lines\n';
-
-    // Native: write source, copy, read dest
-    const tmpDir = await mkdtemp(join(tmpdir(), 'c-parity-cp-'));
-    try {
-      const nativeSrc = join(tmpDir, 'src.txt');
-      const nativeDst = join(tmpDir, 'dst.txt');
-      await fsWriteFile(nativeSrc, srcContent);
-      const native = await runNative('c-cp', [nativeSrc, nativeDst]);
-      const nativeCopied = await fsReadFile(nativeDst, 'utf8');
-
-      // WASM: write source to VFS, copy, read dest from VFS
-      await vfs.writeFile('/tmp/src.txt', srcContent);
-      const wasm = await kernel.exec('c-cp /tmp/src.txt /tmp/dst.txt');
-      const wasmCopied = await vfs.readTextFile('/tmp/dst.txt');
-
-      expect(wasm.exitCode).toBe(native.exitCode);
-      expect(wasm.exitCode).toBe(0);
-      expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-      expect(wasmCopied).toBe(nativeCopied);
-      expect(wasmCopied).toBe(srcContent);
-      // Stdout message paths differ — just verify both report success
-      expect(wasm.stdout).toContain('copied:');
-      expect(native.stdout).toContain('copied:');
-    } finally {
-      await rm(tmpDir, { recursive: true });
-    }
-  });
-
-  // --- Tier 5: vendored libraries ---
-
-  const hasCTier5Binaries = existsSync(join(C_BUILD_DIR, 'json_parse'));
-  const hasCTier5Native = existsSync(join(NATIVE_DIR, 'json_parse'));
-  const tier5Skip = (!hasCTier5Binaries || !hasCTier5Native)
-    ? 'C Tier 5 binaries not built (run make -C native/wasmvm/c programs && make -C native/wasmvm/c native)'
-    : false;
-
-  const hasSqliteBinary = existsSync(join(C_BUILD_DIR, 'sqlite3_mem'));
-  const hasSqliteNative = existsSync(join(NATIVE_DIR, 'sqlite3_mem'));
-  const sqliteSkip = (!hasSqliteBinary || !hasSqliteNative)
-    ? 'SQLite binaries not built (run make -C native/wasmvm/c programs && make -C native/wasmvm/c native)'
-    : false;
-
-  itIf(!sqliteSkip, 'sqlite3_mem: in-memory SQL operations parity', async () => {
-    const native = await runNative('sqlite3_mem');
-    const wasm = await kernel.exec('sqlite3_mem');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(wasm.stdout).toBe(native.stdout);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    // Verify key structural elements
-    expect(wasm.stdout).toContain('db: open');
-    expect(wasm.stdout).toContain('table: created');
-    expect(wasm.stdout).toContain('rows: 4');
-    expect(wasm.stdout).toContain('name=Alice|score=95.5');
-    expect(wasm.stdout).toContain('name=Charlie|score=NULL');
-    expect(wasm.stdout).toContain('avg_score=');
-    expect(wasm.stdout).toContain('db: closed');
-  });
-
-  itIf(!tier5Skip, 'json_parse: cJSON parse and format parity', async () => {
-    const sampleJson = JSON.stringify({
-      name: 'agentos',
-      version: 2,
-      enabled: true,
-      tags: ['alpha', 'beta'],
-      config: { debug: false, timeout: null, ratio: 3.14 },
-      empty_arr: [],
-      empty_obj: {},
-    });
-
-    const native = await runNative('json_parse', [], { input: sampleJson });
-    const wasm = await kernel.exec('json_parse', { stdin: sampleJson });
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(wasm.stdout).toBe(native.stdout);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    // Verify key structural elements are present
-    expect(wasm.stdout).toContain('"name": "agentos"');
-    expect(wasm.stdout).toContain('"enabled": true');
-    expect(wasm.stdout).toContain('"timeout": null');
-    expect(wasm.stdout).toContain('"ratio": 3.14');
-    expect(wasm.stdout).toContain('[]');
-    expect(wasm.stdout).toContain('{}');
-  });
-
-  // --- Tier 6: networking (patched sysroot + host_net) ---
-
-  const hasCNetBinaries = existsSync(join(C_BUILD_DIR, 'tcp_echo'));
-  const hasNativeNetBinaries = existsSync(join(NATIVE_DIR, 'tcp_echo'));
-  const netSkip = (!hasCNetBinaries || !hasNativeNetBinaries)
-    ? 'C networking binaries not built (need patched sysroot: make -C native/wasmvm/c sysroot && make -C native/wasmvm/c programs && make -C native/wasmvm/c native)'
-    : false;
-
-  itIf(!netSkip, 'tcp_echo: connect to TCP echo server, send and receive', async () => {
-    // Start a local TCP echo server
-    const server = createTcpServer((conn) => {
-      conn.on('data', (data) => { conn.write(data); conn.end(); });
-    });
-    await new Promise<void>((resolve) => server.listen(0, '127.0.0.1', resolve));
-    const port = (server.address() as import('node:net').AddressInfo).port;
-
-    try {
-      await recreateKernel({ loopbackExemptPorts: [port] });
-      const native = await runNative('tcp_echo', [String(port)]);
-      const wasm = await kernel.exec(`tcp_echo ${port}`);
-
-      expect(wasm.exitCode).toBe(native.exitCode);
-      expect(wasm.exitCode).toBe(0);
-      expect(wasm.stdout).toBe(native.stdout);
-      expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-      expect(wasm.stdout).toContain('sent: 5');
-      expect(wasm.stdout).toContain('received: hello');
-    } finally {
-      server.close();
-    }
-  });
-
-  itIf(!netSkip, 'http_get: connect to HTTP server, receive response body', async () => {
-    // Start a local HTTP server
-    const server = createHttpServer((_req, res) => {
-      res.writeHead(200, { 'Content-Type': 'text/plain' });
-      res.end('hello from http');
-    });
-    await new Promise<void>((resolve) => server.listen(0, '127.0.0.1', resolve));
-    const port = (server.address() as import('node:net').AddressInfo).port;
-
-    try {
-      await recreateKernel({ loopbackExemptPorts: [port] });
-      const native = await runNative('http_get', [String(port)]);
-      const wasm = await kernel.exec(`http_get ${port}`);
-
-      expect(wasm.exitCode).toBe(native.exitCode);
-      expect(wasm.exitCode).toBe(0);
-      expect(wasm.stdout).toBe(native.stdout);
-      expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-      expect(wasm.stdout).toContain('body: hello from http');
-    } finally {
-      server.close();
-    }
-  });
-
-  itIf(!netSkip, 'dns_lookup: resolve localhost to 127.0.0.1', async () => {
-    const native = await runNative('dns_lookup', ['localhost']);
-    const wasm = await kernel.exec('dns_lookup localhost');
-
-    expect(wasm.exitCode).toBe(native.exitCode);
-    expect(wasm.exitCode).toBe(0);
-    expect(wasm.stdout).toBe(native.stdout);
-    expect(normalizeStderr(wasm.stderr)).toBe(normalizeStderr(native.stderr));
-    expect(wasm.stdout).toContain('host: localhost');
-    expect(wasm.stdout).toContain('ip: 127.0.0.1');
-  });
-});
diff --git a/registry/tests/wasmvm/ci-artifact-availability.test.ts b/registry/tests/wasmvm/ci-artifact-availability.test.ts
deleted file mode 100644
index 5f8675214..000000000
--- a/registry/tests/wasmvm/ci-artifact-availability.test.ts
+++ /dev/null
@@ -1,60 +0,0 @@
-/**
- * CI guard for story-critical C-built Wasm artifacts.
- *
- * These artifacts back the WasmVM TCP/UDP/Unix/signal integration suites.
- * Local development still skips those suites when the binaries are absent,
- * but CI must fail loudly instead of reporting a green skip-only run.
- */
-
-import { describe, it, expect } from 'vitest';
-import { COMMANDS_DIR, C_BUILD_DIR, itIf } from '../helpers.js';
-import { existsSync } from 'node:fs';
-import { join } from 'node:path';
-
-
-const REQUIRED_ARTIFACTS = [
-  {
-    label: 'Wasm command directory',
-    path: COMMANDS_DIR,
-    buildStep: 'run `make wasm` in `native/wasmvm/`',
-  },
-  {
-    label: 'tcp_server C WASM binary',
-    path: join(C_BUILD_DIR, 'tcp_server'),
-    buildStep: 'run `make -C native/wasmvm/c sysroot && make -C native/wasmvm/c programs`',
-  },
-  {
-    label: 'udp_echo C WASM binary',
-    path: join(C_BUILD_DIR, 'udp_echo'),
-    buildStep: 'run `make -C native/wasmvm/c sysroot && make -C native/wasmvm/c programs`',
-  },
-  {
-    label: 'unix_socket C WASM binary',
-    path: join(C_BUILD_DIR, 'unix_socket'),
-    buildStep: 'run `make -C native/wasmvm/c sysroot && make -C native/wasmvm/c programs`',
-  },
-  {
-    label: 'signal_handler C WASM binary',
-    path: join(C_BUILD_DIR, 'signal_handler'),
-    buildStep: 'run `make -C native/wasmvm/c sysroot && make -C native/wasmvm/c programs`',
-  },
-] as const;
-
-function formatMissingArtifacts(): string {
-  return REQUIRED_ARTIFACTS
-    .filter((artifact) => !existsSync(artifact.path))
-    .map((artifact) => `- ${artifact.label}: missing at ${artifact.path} (${artifact.buildStep})`)
-    .join('\n');
-}
-
-describe('WasmVM CI artifact availability', () => {
-  itIf(Boolean(process.env.CI), 'requires story-critical C-built Wasm artifacts in CI', () => {
-    const missing = formatMissingArtifacts();
-    expect(
-      missing,
-      missing === ''
-        ? undefined
-        : `Missing required Wasm artifacts in CI:\n${missing}`,
-    ).toBe('');
-  });
-});
diff --git a/registry/tests/wasmvm/codex-exec.test.ts b/registry/tests/wasmvm/codex-exec.test.ts
deleted file mode 100644
index 30156b79e..000000000
--- a/registry/tests/wasmvm/codex-exec.test.ts
+++ /dev/null
@@ -1,221 +0,0 @@
-/**
- * Integration tests for codex-exec command WASM binary.
- *
- * Verifies the codex-exec binary running in WasmVM can:
- *   - Print usage via --help
- *   - Print version via --version
- *   - Validate WASI stub crates via --stub-test
- *   - Accept a prompt argument and exit cleanly
- *   - Capture stdout/stderr correctly through the kernel
- *   - Be spawned from the shell (sh -c) via the kernel pipeline
- *   - Fail fast for session-turn mode until the real Codex agent is wired
- *
- * WASM binary tests are gated behind hasWasmBinaries.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import { COMMANDS_DIR, createKernel, describeIf, hasWasmBinaries } from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-
-// Minimal in-memory VFS for kernel tests
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map(name => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) {
-    this.dirs.add(path);
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isDir ? 0o40755 : 0o100644,
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: false,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  async chmod(_path: string, _mode: number) {}
-  async lstat(path: string) { return this.stat(path); }
-  async removeFile(path: string) { this.files.delete(path); }
-  async removeDir(path: string) { this.dirs.delete(path); }
-  async rename(oldPath: string, newPath: string) {
-    const data = this.files.get(oldPath);
-    if (data) {
-      this.files.set(newPath, data);
-      this.files.delete(oldPath);
-    }
-  }
-  async pread(path: string, buffer: Uint8Array, offset: number, length: number, position: number): Promise<number> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    const available = Math.min(length, data.length - position);
-    if (available <= 0) return 0;
-    buffer.set(data.subarray(position, position + available), offset);
-    return available;
-  }
-}
-
-async function createTestKernel(): Promise<{ kernel: Kernel; vfs: SimpleVFS }> {
-  const vfs = new SimpleVFS();
-  const kernel = createKernel({ filesystem: vfs as any });
-  await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-  return { kernel, vfs };
-}
-
-describeIf(hasWasmBinaries, 'codex-exec command (WasmVM)', { timeout: 30_000 }, () => {
-  let kernel: Kernel;
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('--help prints usage without errors', async () => {
-    ({ kernel } = await createTestKernel());
-    const result = await kernel.exec('codex-exec --help');
-    expect(result.stdout).toContain('codex-exec');
-    expect(result.stdout).toContain('USAGE');
-    expect(result.stdout).toContain('headless');
-    expect(result.stdout).toContain('--help');
-    expect(result.stdout).toContain('--version');
-  });
-
-  it('--version prints version', async () => {
-    ({ kernel } = await createTestKernel());
-    const result = await kernel.exec('codex-exec --version');
-    expect(result.stdout).toMatch(/codex-exec \d+\.\d+\.\d+/);
-  });
-
-  it('--stub-test validates WASI stub crates', async () => {
-    ({ kernel } = await createTestKernel());
-    const result = await kernel.exec('codex-exec --stub-test');
-    expect(result.stdout).toContain('network-proxy');
-    expect(result.stdout).toContain('otel');
-    expect(result.stdout).toContain('stub-test: all stubs validated successfully');
-  });
-
-  it('accepts prompt as argument and exits cleanly', async () => {
-    ({ kernel } = await createTestKernel());
-    const result = await kernel.exec('codex-exec "list all files"');
-    // Prompt mode is currently a placeholder that accepts the prompt without echoing it.
-    expect(result.stderr).toContain('headless prompt mode is not wired to the provider yet');
-    expect(result.stderr).toContain('prompt received');
-    expect(result.stderr).not.toContain('list all files');
-  });
-
-  it('accepts prompt from stdin without echoing it', async () => {
-    ({ kernel } = await createTestKernel());
-    const result = await kernel.exec('codex-exec', { stdin: 'stdin secret prompt\n' });
-    expect(result.exitCode).toBe(0);
-    expect(result.stderr).toContain('headless prompt mode is not wired to the provider yet');
-    expect(result.stderr).toContain('prompt received');
-    expect(result.stderr).not.toContain('stdin secret prompt');
-  });
-
-  it('rejects oversized stdin prompts', async () => {
-    ({ kernel } = await createTestKernel());
-    const result = await kernel.exec('codex-exec', { stdin: 'x'.repeat(64 * 1024 + 1) });
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toContain('stdin prompt exceeds');
-  });
-
-  it('prints error when no prompt is provided via arg', async () => {
-    ({ kernel } = await createTestKernel());
-    // codex-exec with no args reads stdin; since stdin is empty pipe it gets empty prompt
-    const result = await kernel.exec('codex-exec');
-    // Should get an error about no prompt or the stdin read returns empty
-    expect(result.stderr).toContain('codex-exec');
-  });
-
-  it('can be spawned from shell via sh -c pipeline', async () => {
-    ({ kernel } = await createTestKernel());
-    const result = await kernel.exec('sh -c "codex-exec --help"');
-    expect(result.stdout).toContain('codex-exec');
-    expect(result.stdout).toContain('USAGE');
-  });
-
-  it('captures stdout correctly through kernel.exec()', async () => {
-    ({ kernel } = await createTestKernel());
-    const result = await kernel.exec('codex-exec --help');
-    // Verify stdout is non-empty and contains expected structured output
-    expect(result.stdout.length).toBeGreaterThan(0);
-    expect(result.stdout).toContain('OPTIONS');
-    expect(result.stdout).toContain('USAGE');
-  });
-
-  it('captures stderr correctly through kernel.exec()', async () => {
-    ({ kernel } = await createTestKernel());
-    const result = await kernel.exec('codex-exec "test prompt"');
-    // Headless mode outputs to stderr
-    expect(result.stderr.length).toBeGreaterThan(0);
-    expect(result.stderr).toContain('prompt received');
-    expect(result.stderr).not.toContain('test prompt');
-  });
-
-  it('exits cleanly after completing a single prompt', async () => {
-    ({ kernel } = await createTestKernel());
-    const result = await kernel.exec('codex-exec "hello world"');
-    // The process exits with code 0 (brush-shell wraps it)
-    // Verify it doesn't hang — the exec() call resolves
-    expect(result.stderr).toContain('prompt received');
-    expect(result.stderr).not.toContain('hello world');
-  });
-
-  it('session-turn mode fails fast instead of calling a bespoke provider loop', async () => {
-    ({ kernel } = await createTestKernel());
-    const result = await kernel.exec('codex-exec --session-turn');
-    expect(result.stdout).toContain('"type":"error"');
-    expect(result.stdout).toContain('real Codex agent package');
-  });
-});
diff --git a/registry/tests/wasmvm/codex-tui.test.ts b/registry/tests/wasmvm/codex-tui.test.ts
deleted file mode 100644
index b72c33fda..000000000
--- a/registry/tests/wasmvm/codex-tui.test.ts
+++ /dev/null
@@ -1,289 +0,0 @@
-/**
- * Integration tests for codex TUI WASM binary.
- *
- * Verifies the codex TUI binary running in WasmVM can:
- *   - Print usage via --help (bypasses TUI)
- *   - Render the TUI through the WasmVM PTY
- *   - Accept keyboard input through PTY stdin
- *   - Quit on 'q' (empty input) or Ctrl+C
- *   - Display welcome text on initial render
- *   - Accept --model flag for model selection
- *
- * API-dependent tests are gated behind OPENAI_API_KEY env var.
- * WASM binary tests are gated behind hasWasmBinaries.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import { TerminalHarness } from './terminal-harness.js';
-import { createWasmVmRuntime } from '../helpers.js';
-import { COMMANDS_DIR, createKernel, describeIf, hasWasmBinaries } from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-
-const hasApiKey = !!process.env.OPENAI_API_KEY;
-
-/** brush-shell interactive prompt. */
-const PROMPT = 'sh-0.4$ ';
-
-// Minimal in-memory VFS for kernel tests
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map(name => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) {
-    this.dirs.add(path);
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isDir ? 0o40755 : 0o100644,
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: false,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  async chmod(_path: string, _mode: number) {}
-  async lstat(path: string) { return this.stat(path); }
-  async removeFile(path: string) { this.files.delete(path); }
-  async removeDir(path: string) { this.dirs.delete(path); }
-  async rename(oldPath: string, newPath: string) {
-    const data = this.files.get(oldPath);
-    if (data) {
-      this.files.set(newPath, data);
-      this.files.delete(oldPath);
-    }
-  }
-  async pread(path: string, buffer: Uint8Array, offset: number, length: number, position: number): Promise<number> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    const available = Math.min(length, data.length - position);
-    if (available <= 0) return 0;
-    buffer.set(data.subarray(position, position + available), offset);
-    return available;
-  }
-}
-
-async function createTestKernel(): Promise<{ kernel: Kernel; vfs: SimpleVFS }> {
-  const vfs = new SimpleVFS();
-  const kernel = createKernel({ filesystem: vfs as any });
-  await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-  return { kernel, vfs };
-}
-
-// ---------------------------------------------------------------------------
-// Non-interactive tests (kernel.exec — --help bypasses TUI)
-// ---------------------------------------------------------------------------
-
-describeIf(hasWasmBinaries, 'codex TUI (WasmVM) - non-interactive', { timeout: 30_000 }, () => {
-  let kernel: Kernel;
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('--help prints usage without TUI', async () => {
-    ({ kernel } = await createTestKernel());
-    const result = await kernel.exec('codex --help');
-    expect(result.stdout).toContain('codex');
-    expect(result.stdout).toContain('USAGE');
-    expect(result.stdout).toContain('--help');
-    expect(result.stdout).toContain('--version');
-    expect(result.stdout).toContain('--model MODEL');
-    expect(result.stdout).toContain('headless');
-  });
-
-  it('--model flag is documented in help', async () => {
-    ({ kernel } = await createTestKernel());
-    const result = await kernel.exec('codex --help');
-    expect(result.stdout).toContain('--model MODEL');
-    expect(result.stdout).toContain('Select model for completions');
-  });
-});
-
-// ---------------------------------------------------------------------------
-// Interactive TUI tests (PTY via TerminalHarness)
-// ---------------------------------------------------------------------------
-
-describeIf(hasWasmBinaries, 'codex TUI (WasmVM) - interactive', { timeout: 30_000 }, () => {
-  let kernel: Kernel;
-  let harness: TerminalHarness;
-
-  afterEach(async () => {
-    await harness?.dispose();
-    await kernel?.dispose();
-  });
-
-  it('starts and produces TUI output bytes on stdout', async () => {
-    ({ kernel } = await createTestKernel());
-    harness = new TerminalHarness(kernel);
-    await harness.waitFor(PROMPT);
-
-    await harness.type('codex\n');
-    // TUI enters alternate screen — wait for ratatui-rendered content
-    await harness.waitFor('codex', 1, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen.length).toBeGreaterThan(0);
-  });
-
-  it('TUI output contains expected welcome/prompt text', async () => {
-    ({ kernel } = await createTestKernel());
-    harness = new TerminalHarness(kernel);
-    await harness.waitFor(PROMPT);
-
-    await harness.type('codex\n');
-    await harness.waitFor('Welcome to Codex', 1, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen).toContain('Welcome to Codex');
-    expect(screen).toContain('Type a prompt');
-    expect(screen).toContain('Ctrl+C to exit');
-  });
-
-  it('receives keystroke input via PTY stdin write', async () => {
-    ({ kernel } = await createTestKernel());
-    harness = new TerminalHarness(kernel);
-    await harness.waitFor(PROMPT);
-
-    await harness.type('codex\n');
-    await harness.waitFor('Welcome to Codex', 1, 10_000);
-
-    // Type characters as individual keystrokes so this exercises terminal input,
-    // not paste buffering.
-    for (const character of 'hello') {
-      await harness.type(character);
-    }
-    await harness.waitFor('hello');
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen).toContain('hello');
-  });
-
-  it('typing q on empty input exits TUI', async () => {
-    ({ kernel } = await createTestKernel());
-    harness = new TerminalHarness(kernel);
-    await harness.waitFor(PROMPT);
-
-    await harness.type('codex\n');
-    await harness.waitFor('Welcome to Codex', 1, 10_000);
-
-    // 'q' on empty input should quit TUI and return to shell
-    await harness.type('q');
-    await harness.waitFor(PROMPT, 2, 10_000);
-  });
-
-  it('Ctrl+C exits TUI', async () => {
-    ({ kernel } = await createTestKernel());
-    harness = new TerminalHarness(kernel);
-    await harness.waitFor(PROMPT);
-
-    await harness.type('codex\n');
-    await harness.waitFor('Welcome to Codex', 1, 10_000);
-
-    // Ctrl+C should quit TUI and return to shell
-    await harness.type('\x03');
-    await harness.waitFor(PROMPT, 1, 10_000);
-
-    await harness.type('echo tui-alive\n');
-    await harness.waitFor('tui-alive', 1, 10_000);
-  });
-
-  it('--model flag accepts model selection in TUI header', async () => {
-    ({ kernel } = await createTestKernel());
-    harness = new TerminalHarness(kernel);
-    await harness.waitFor(PROMPT);
-
-    await harness.type('codex --model gpt-4o\n');
-    await harness.waitFor('Welcome to Codex', 1, 10_000);
-
-    const screen = harness.screenshotTrimmed();
-    expect(screen).toContain('model: gpt-4o');
-
-    // Quit TUI
-    await harness.type('q');
-    await harness.waitFor(PROMPT, 2, 10_000);
-  });
-});
-
-// ---------------------------------------------------------------------------
-// API integration tests (gated behind OPENAI_API_KEY)
-// ---------------------------------------------------------------------------
-
-describeIf(hasWasmBinaries && hasApiKey, 'codex TUI API integration (requires OPENAI_API_KEY)', { timeout: 60_000 }, () => {
-  let kernel: Kernel;
-  let harness: TerminalHarness;
-
-  afterEach(async () => {
-    await harness?.dispose();
-    await kernel?.dispose();
-  });
-
-  it('with OPENAI_API_KEY can complete a simple prompt via TUI', async () => {
-    ({ kernel } = await createTestKernel());
-    harness = new TerminalHarness(kernel, {
-      env: { OPENAI_API_KEY: process.env.OPENAI_API_KEY! },
-    });
-    await harness.waitFor(PROMPT);
-
-    await harness.type('codex\n');
-    await harness.waitFor('Welcome to Codex', 1, 10_000);
-
-    // Type a prompt and submit
-    await harness.type('say hello\n');
-    // Agent loop is under development — should show the prompt was received
-    await harness.waitFor('say hello', 2, 10_000);
-
-    // Quit TUI
-    await harness.type('q');
-  });
-});
diff --git a/registry/tests/wasmvm/curl.test.ts b/registry/tests/wasmvm/curl.test.ts
deleted file mode 100644
index 2c14f3e72..000000000
--- a/registry/tests/wasmvm/curl.test.ts
+++ /dev/null
@@ -1,719 +0,0 @@
-/**
- * Integration tests for curl and the C socket layer (host_socket.c).
- *
- * Tests the WASM socket implementation that powers curl:
- *   - DNS resolution (getaddrinfo)
- *   - TCP socket creation and connection
- *   - Non-blocking socket mode (fcntl O_NONBLOCK)
- *   - Socket options (getsockopt SO_ERROR, setsockopt TCP_NODELAY)
- *   - Poll for readability/writability
- *   - HTTP send/recv over raw sockets
- *   - Remote endpoint connectivity
- */
-
-import { describe, it, expect, afterEach, beforeAll, afterAll } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import {
-  allowAll,
-  C_BUILD_DIR,
-  COMMANDS_DIR,
-  createInMemoryFileSystem,
-  createKernel,
-  describeIf,
-  hasCWasmBinaries,
-  hasWasmBinaries,
-  itIf,
-} from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-import {
-  createServer as createHttpServer,
-  type IncomingMessage,
-  type Server as HttpServer,
-  type ServerResponse,
-} from 'node:http';
-import { createServer as createHttpsServer, type Server as HttpsServer } from 'node:https';
-import {
-  createConnection,
-  createServer as createTcpServer,
-  type Server as TcpServer,
-} from 'node:net';
-import { execSync } from 'node:child_process';
-import { existsSync, unlinkSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join, resolve } from 'node:path';
-
-// The upstream curl parity assertions below only hold for the C-built curl
-// artifact; the Rust fallback in COMMANDS_DIR intentionally supports a smaller
-// flag surface and should not be used for these cases.
-const hasHttpGetTest = hasWasmBinaries && existsSync(resolve(COMMANDS_DIR, 'http_get_test'));
-const hasCurl = hasCWasmBinaries('curl');
-const runExternalNetwork = process.env.SECURE_EXEC_E2E_NETWORK === '1';
-const EXTERNAL_HOST = 'example.com';
-const EXTERNAL_TCP_PORT = 80;
-const EXTERNAL_HTTP_URL = `http://${EXTERNAL_HOST}/`;
-const EXTERNAL_HTTPS_URL = `https://${EXTERNAL_HOST}/`;
-const EXTERNAL_EXPECTED_BODY = 'Example Domain';
-const EXTERNAL_RETRY_ATTEMPTS = 3;
-const EXTERNAL_RETRY_DELAY_MS = 1_000;
-const EXTERNAL_PROBE_TIMEOUT_MS = 8_000;
-let hasOpenssl = false;
-
-try {
-  execSync('openssl version', { stdio: 'pipe' });
-  hasOpenssl = true;
-} catch {
-  hasOpenssl = false;
-}
-
-function sleep(ms: number): Promise<void> {
-  return new Promise((resolveSleep) => setTimeout(resolveSleep, ms));
-}
-
-function formatError(error: unknown): string {
-  if (error instanceof Error) return error.message;
-  return String(error);
-}
-
-async function retryExternal<T>(run: () => Promise<T>, attempts = EXTERNAL_RETRY_ATTEMPTS): Promise<T> {
-  let lastError: unknown;
-  for (let attempt = 1; attempt <= attempts; attempt += 1) {
-    try {
-      return await run();
-    } catch (error) {
-      lastError = error;
-      if (attempt < attempts) {
-        await sleep(EXTERNAL_RETRY_DELAY_MS);
-      }
-    }
-  }
-
-  throw lastError ?? new Error('external network probe failed');
-}
-
-async function probeExternalTcp(): Promise<void> {
-  await new Promise<void>((resolveConnect, rejectConnect) => {
-    const socket = createConnection({
-      host: EXTERNAL_HOST,
-      port: EXTERNAL_TCP_PORT,
-    });
-    let settled = false;
-
-    const finish = (callback: () => void) => {
-      if (settled) return;
-      settled = true;
-      callback();
-    };
-
-    socket.setTimeout(EXTERNAL_PROBE_TIMEOUT_MS);
-    socket.once('connect', () => {
-      finish(() => {
-        socket.end();
-        resolveConnect();
-      });
-    });
-    socket.once('timeout', () => {
-      finish(() => {
-        socket.destroy();
-        rejectConnect(new Error(`timed out connecting to ${EXTERNAL_HOST}:${EXTERNAL_TCP_PORT}`));
-      });
-    });
-    socket.once('error', (error) => {
-      finish(() => {
-        socket.destroy();
-        rejectConnect(error);
-      });
-    });
-  });
-}
-
-async function probeExternalHttps(): Promise<void> {
-  const response = await fetch(EXTERNAL_HTTPS_URL, {
-    signal: AbortSignal.timeout(EXTERNAL_PROBE_TIMEOUT_MS),
-  });
-  if (!response.ok) {
-    throw new Error(`host probe failed with HTTP ${response.status}`);
-  }
-  await response.arrayBuffer();
-}
-
-const externalNetworkSkipReason = runExternalNetwork
-  ? await (async () => {
-      try {
-        await retryExternal(async () => {
-          await probeExternalTcp();
-          await probeExternalHttps();
-        });
-        return false as const;
-      } catch (error) {
-        return `external network unavailable: ${formatError(error)}`;
-      }
-    })()
-  : 'set SECURE_EXEC_E2E_NETWORK=1 to enable external-network coverage';
-
-function generateSelfSignedCert(): { key: string; cert: string } {
-  const keyPath = join(tmpdir(), `curl-test-key-${process.pid}-${Date.now()}.pem`);
-  try {
-    const key = execSync(
-      'openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 2>/dev/null',
-      { encoding: 'utf8' },
-    );
-    writeFileSync(keyPath, key);
-    const cert = execSync(
-      `openssl req -new -x509 -key "${keyPath}" -days 1 -subj "/CN=localhost" -addext "subjectAltName=DNS:localhost,IP:127.0.0.1" 2>/dev/null`,
-      { encoding: 'utf8' },
-    );
-    return { key, cert };
-  } finally {
-    try {
-      unlinkSync(keyPath);
-    } catch {
-      // Best effort cleanup for test temp files.
-    }
-  }
-}
-
-describeIf(hasCurl || hasHttpGetTest, 'curl and socket layer', () => {
-  let kernel: Kernel;
-  let httpServer: HttpServer;
-  let httpsServer: HttpsServer;
-  let keepAliveServer: TcpServer;
-  let httpPort: number;
-  let httpsPort: number;
-  let keepAlivePort: number;
-  let flakyRequestCount = 0;
-
-  beforeAll(async () => {
-    httpServer = createHttpServer((req: IncomingMessage, res: ServerResponse) => {
-      const url = req.url ?? '/';
-
-      if (url === '/json') {
-        res.writeHead(200, { 'Content-Type': 'application/json' });
-        res.end(JSON.stringify({ ok: true, path: url }));
-        return;
-      }
-
-      if (url === '/redirect') {
-        res.writeHead(302, { Location: `http://127.0.0.1:${httpPort}/final` });
-        res.end();
-        return;
-      }
-
-      if (url === '/final') {
-        res.writeHead(200, { 'Content-Type': 'text/plain' });
-        res.end('followed redirect');
-        return;
-      }
-
-      if (url === '/one') {
-        res.writeHead(200, { 'Content-Type': 'text/plain' });
-        res.end('first-response\n');
-        return;
-      }
-
-      if (url === '/two') {
-        res.writeHead(200, { 'Content-Type': 'text/plain' });
-        res.end('second-response\n');
-        return;
-      }
-
-      if (url === '/echo' && req.method === 'POST') {
-        let body = '';
-        req.on('data', (chunk) => {
-          body += chunk;
-        });
-        req.on('end', () => {
-          res.writeHead(200, { 'Content-Type': 'application/json' });
-          res.end(JSON.stringify({
-            method: req.method,
-            body,
-            header: req.headers['x-test'] ?? null,
-          }));
-        });
-        return;
-      }
-
-      if (url === '/json-post' && req.method === 'POST') {
-        let body = '';
-        req.on('data', (chunk) => {
-          body += chunk;
-        });
-        req.on('end', () => {
-          res.writeHead(200, { 'Content-Type': 'application/json' });
-          res.end(JSON.stringify({
-            method: req.method,
-            contentType: req.headers['content-type'] ?? null,
-            accept: req.headers.accept ?? null,
-            body,
-          }));
-        });
-        return;
-      }
-
-      if (url === '/head-test') {
-        res.writeHead(200, {
-          'Content-Type': 'text/plain',
-          'X-Test-Header': 'present',
-        });
-        if (req.method === 'HEAD') {
-          res.end();
-        } else {
-          res.end('body should not appear in HEAD output');
-        }
-        return;
-      }
-
-      if (url === '/auth-required') {
-        const auth = req.headers.authorization;
-        if (!auth || !auth.startsWith('Basic ')) {
-          res.writeHead(401, { 'Content-Type': 'text/plain' });
-          res.end('unauthorized');
-          return;
-        }
-
-        const decoded = Buffer.from(auth.slice(6), 'base64').toString();
-        res.writeHead(200, { 'Content-Type': 'text/plain' });
-        res.end(`authenticated: ${decoded}`);
-        return;
-      }
-
-      if (url === '/upload' && req.method === 'POST') {
-        const contentType = req.headers['content-type'] ?? '';
-        const chunks: Buffer[] = [];
-        req.on('data', (chunk) => {
-          chunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
-        });
-        req.on('end', () => {
-          const body = Buffer.concat(chunks).toString();
-          res.writeHead(200, { 'Content-Type': 'text/plain' });
-          res.end(
-            `multipart: ${contentType.startsWith('multipart/form-data')}\n` +
-            `body-contains-file: ${body.includes('upload.txt')}`,
-          );
-        });
-        return;
-      }
-
-      if (url === '/binary') {
-        const payload = Buffer.alloc(256);
-        for (let i = 0; i < payload.length; i++) payload[i] = i & 0xff;
-        res.writeHead(200, {
-          'Content-Type': 'application/octet-stream',
-          'Content-Length': String(payload.length),
-        });
-        res.end(payload);
-        return;
-      }
-
-      if (url === '/named.txt') {
-        const body = 'downloaded-by-remote-name\n';
-        res.writeHead(200, {
-          'Content-Type': 'text/plain',
-          'Content-Length': String(Buffer.byteLength(body)),
-        });
-        res.end(body);
-        return;
-      }
-
-      if (url === '/flaky') {
-        flakyRequestCount += 1;
-        if (flakyRequestCount === 1) {
-          res.writeHead(503, { 'Content-Type': 'text/plain' });
-          res.end('retry please');
-          return;
-        }
-
-        res.writeHead(200, { 'Content-Type': 'text/plain' });
-        res.end('retry succeeded');
-        return;
-      }
-
-      if (url === '/status') {
-        res.writeHead(201, { 'Content-Type': 'text/plain' });
-        res.end('created');
-        return;
-      }
-
-      res.writeHead(404, { 'Content-Type': 'text/plain' });
-      res.end('not found');
-    });
-
-    await new Promise<void>((resolveListen) => {
-      httpServer.listen(0, '127.0.0.1', resolveListen);
-    });
-    httpPort = (httpServer.address() as import('node:net').AddressInfo).port;
-
-    if (hasOpenssl) {
-      const tlsCert = generateSelfSignedCert();
-      httpsServer = createHttpsServer({ key: tlsCert.key, cert: tlsCert.cert }, (req, res) => {
-        if (req.url === '/json') {
-          res.writeHead(200, { 'Content-Type': 'application/json' });
-          res.end(JSON.stringify({ secure: true, path: req.url }));
-          return;
-        }
-
-        if (req.url === '/keepalive') {
-          const body = 'hello from tls keepalive';
-          res.writeHead(200, {
-            'Content-Type': 'text/plain',
-            'Content-Length': String(Buffer.byteLength(body)),
-            Connection: 'keep-alive',
-            'Keep-Alive': 'timeout=60',
-          });
-          res.end(body);
-          return;
-        }
-
-        res.writeHead(404, { 'Content-Type': 'text/plain' });
-        res.end('not found');
-      });
-      httpsServer.keepAliveTimeout = 60000;
-
-      await new Promise<void>((resolveListen) => {
-        httpsServer.listen(0, '127.0.0.1', resolveListen);
-      });
-      httpsPort = (httpsServer.address() as import('node:net').AddressInfo).port;
-    }
-
-    keepAliveServer = createTcpServer((socket) => {
-      socket.once('data', () => {
-        const body = 'hello from keepalive';
-        socket.write(
-          'HTTP/1.1 200 OK\r\n' +
-          'Content-Type: text/plain\r\n' +
-          `Content-Length: ${Buffer.byteLength(body)}\r\n` +
-          'Connection: keep-alive\r\n' +
-          'Keep-Alive: timeout=60\r\n' +
-          '\r\n' +
-          body,
-        );
-        // Intentionally keep the socket open to exercise curl shutdown logic.
-      });
-    });
-
-    await new Promise<void>((resolveListen) => {
-      keepAliveServer.listen(0, '127.0.0.1', resolveListen);
-    });
-    keepAlivePort = (keepAliveServer.address() as import('node:net').AddressInfo).port;
-  });
-
-  afterAll(async () => {
-    if (httpServer) {
-      await new Promise<void>((resolveClose) => httpServer.close(() => resolveClose()));
-    }
-    if (httpsServer) {
-      await new Promise<void>((resolveClose) => httpsServer.close(() => resolveClose()));
-    }
-    if (keepAliveServer) {
-      await new Promise<void>((resolveClose) => keepAliveServer.close(() => resolveClose()));
-    }
-  });
-
-  async function createKernelWithNet() {
-    flakyRequestCount = 0;
-    const filesystem = createInMemoryFileSystem();
-    await (filesystem as any).chmod('/', 0o1777);
-    await filesystem.mkdir('/tmp', { recursive: true });
-    await (filesystem as any).chmod('/tmp', 0o1777);
-
-    kernel = createKernel({
-      filesystem,
-      permissions: allowAll,
-      loopbackExemptPorts: [httpPort, httpsPort, keepAlivePort],
-    });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-    return kernel;
-  }
-
-  async function execWithRetry(command: string) {
-    let lastResult: Awaited<ReturnType<typeof kernel.exec>> | undefined;
-    for (let attempt = 1; attempt <= EXTERNAL_RETRY_ATTEMPTS; attempt += 1) {
-      lastResult = await kernel.exec(command);
-      if (lastResult.exitCode === 0) return lastResult;
-      if (attempt < EXTERNAL_RETRY_ATTEMPTS) {
-        await sleep(EXTERNAL_RETRY_DELAY_MS);
-      }
-    }
-
-    return lastResult!;
-  }
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  itIf(hasHttpGetTest, 'http_get_test reaches a local HTTP server', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(`http_get_test 127.0.0.1 ${httpPort} /json`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('HTTP/1.1 200');
-    expect(result.stdout).toContain('"ok":true');
-  }, 15000);
-
-  itIf(hasHttpGetTest, 'http_get_test preserves non-blocking connect diagnostics', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(`http_get_test 127.0.0.1 ${httpPort} /json`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stderr).toContain('fcntl F_SETFL(NONBLOCK)=0');
-    expect(result.stderr).toMatch(/connect=(0|-1 errno=\d+)/);
-    expect(result.stderr).toContain('getsockopt(SO_ERROR)=0 value=0');
-    expect(result.stderr).toContain('poll(POLLOUT)=1');
-  }, 15000);
-
-  itIf(hasCurl, 'curl GET returns JSON from a local server', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(`curl -s http://127.0.0.1:${httpPort}/json`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('"ok":true');
-  }, 15000);
-
-  itIf(hasCurl, 'curl --version reports the upstream tool version', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec('curl --version');
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('curl 8.11.1');
-    expect(result.stdout).toMatch(/Protocols:/);
-  }, 15000);
-
-  itIf(hasCurl, 'curl -L follows redirects', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(`curl -s -L http://127.0.0.1:${httpPort}/redirect`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toBe('followed redirect');
-  }, 15000);
-
-  itIf(hasCurl, 'curl POST sends body and headers', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(
-      `curl -s -X POST -H 'X-Test: edge-case' -d 'payload-data' http://127.0.0.1:${httpPort}/echo`,
-    );
-    expect(result.exitCode).toBe(0);
-    const body = JSON.parse(result.stdout);
-    expect(body.method).toBe('POST');
-    expect(body.body).toBe('payload-data');
-    expect(body.header).toBe('edge-case');
-  }, 15000);
-
-  itIf(hasCurl, 'curl --json sends JSON with the expected headers', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(
-      `curl -s --json '{\"hello\":\"world\"}' http://127.0.0.1:${httpPort}/json-post`,
-    );
-    expect(result.exitCode).toBe(0);
-    const body = JSON.parse(result.stdout);
-    expect(body.method).toBe('POST');
-    expect(body.body).toBe('{"hello":"world"}');
-    expect(body.contentType).toBe('application/json');
-    expect(body.accept).toBe('application/json');
-  }, 15000);
-
-  itIf(hasCurl, 'curl -I returns response headers without the body', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(`curl -s -I http://127.0.0.1:${httpPort}/head-test`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('HTTP/');
-    expect(result.stdout).toMatch(/X-Test-Header/i);
-    expect(result.stdout).not.toContain('body should not appear');
-  }, 15000);
-
-  itIf(hasCurl, 'curl -u sends HTTP Basic authentication', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(`curl -s -u user:pass http://127.0.0.1:${httpPort}/auth-required`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toBe('authenticated: user:pass');
-  }, 15000);
-
-  itIf(hasCurl, 'curl -F uploads multipart form data', async () => {
-    await createKernelWithNet();
-    await kernel.writeFile('/tmp/upload.txt', 'file payload\n');
-    const result = await kernel.exec(`curl -s -F file=@/tmp/upload.txt http://127.0.0.1:${httpPort}/upload`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('multipart: true');
-    expect(result.stdout).toContain('body-contains-file: true');
-  }, 15000);
-
-  itIf(hasCurl, 'curl -K reads options from a config file', async () => {
-    await createKernelWithNet();
-    await kernel.writeFile(
-      '/tmp/curlrc',
-      `silent\nurl = "http://127.0.0.1:${httpPort}/json"\n`,
-    );
-    const result = await kernel.exec('curl -K /tmp/curlrc');
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('"ok":true');
-  }, 15000);
-
-  itIf(hasCurl, 'curl -o writes text output to a file', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(`curl -s -o /tmp/out.json http://127.0.0.1:${httpPort}/json`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toBe('');
-    const file = new TextDecoder().decode(await kernel.readFile('/tmp/out.json'));
-    expect(file).toContain('"ok":true');
-  }, 15000);
-
-  itIf(hasCurl, 'curl -o respects the current working directory for relative output paths', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(
-      `mkdir -p /tmp/curl-cwd && cd /tmp/curl-cwd && ` +
-      `curl -s -o local.txt http://127.0.0.1:${httpPort}/named.txt && cat /tmp/curl-cwd/local.txt`,
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toBe('downloaded-by-remote-name\n');
-  }, 15000);
-
-  itIf(hasCurl, 'curl -o writes binary output without truncation', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(`curl -s -o /tmp/out.bin http://127.0.0.1:${httpPort}/binary`);
-    expect(result.exitCode).toBe(0);
-    const file = await kernel.readFile('/tmp/out.bin');
-    expect(file).toHaveLength(256);
-    expect(Array.from(file.slice(0, 8))).toEqual([0, 1, 2, 3, 4, 5, 6, 7]);
-    expect(Array.from(file.slice(-4))).toEqual([252, 253, 254, 255]);
-  }, 15000);
-
-  itIf(hasCurl, 'curl -D and -o split headers and body into separate files', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(
-      `curl -s -D /tmp/headers.txt -o /tmp/body.txt http://127.0.0.1:${httpPort}/named.txt`,
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toBe('');
-
-    const headers = new TextDecoder().decode(await kernel.readFile('/tmp/headers.txt'));
-    const body = new TextDecoder().decode(await kernel.readFile('/tmp/body.txt'));
-    expect(headers).toContain('HTTP/1.1 200 OK');
-    expect(headers).toMatch(/Content-Type: text\/plain/i);
-    expect(body).toBe('downloaded-by-remote-name\n');
-  }, 15000);
-
-  itIf(hasCurl, 'curl -O writes to the remote filename', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(
-      `mkdir -p /tmp/remote-name && cd /tmp/remote-name && ` +
-      `curl -s -O http://127.0.0.1:${httpPort}/named.txt && cat /tmp/remote-name/named.txt`,
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toBe('downloaded-by-remote-name\n');
-  }, 15000);
-
-  itIf(hasCurl, 'curl -w writes the HTTP status code', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(`curl -s -w '%{http_code}' http://127.0.0.1:${httpPort}/status`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('created');
-    expect(result.stdout).toContain('201');
-  }, 15000);
-
-  itIf(hasCurl, 'curl -f reports HTTP errors with a non-zero exit code', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(`curl -fsS http://127.0.0.1:${httpPort}/missing`);
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toMatch(/404|not found|error/i);
-  }, 15000);
-
-  itIf(hasCurl, 'curl --fail-with-body preserves the response body on HTTP errors', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(`curl -sS --fail-with-body http://127.0.0.1:${httpPort}/missing`);
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stdout).toBe('not found');
-    expect(result.stderr).toMatch(/404|error/i);
-  }, 15000);
-
-  itIf(hasCurl, 'curl reports refused connections without hanging', async () => {
-    await createKernelWithNet();
-
-    const probe = createTcpServer();
-    await new Promise<void>((resolveListen) => probe.listen(0, '127.0.0.1', resolveListen));
-    const unusedPort = (probe.address() as import('node:net').AddressInfo).port;
-    await new Promise<void>((resolveClose) => probe.close(() => resolveClose()));
-
-    const startedAt = Date.now();
-    const result = await kernel.exec(`curl -sS http://127.0.0.1:${unusedPort}/`);
-    expect(result.exitCode).not.toBe(0);
-    expect(Date.now() - startedAt).toBeLessThan(8000);
-    expect(result.stderr).toMatch(/connect|refused|failed/i);
-  }, 15000);
-
-  itIf(hasCurl, 'curl reports DNS failures cleanly', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec('curl -sS http://does-not-exist.invalid/');
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toMatch(/resolve|host|dns/i);
-  }, 15000);
-
-  itIf(hasCurl, 'curl handles multiple URLs in one invocation', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(
-      `curl -s http://127.0.0.1:${httpPort}/one http://127.0.0.1:${httpPort}/two`,
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toBe('first-response\nsecond-response\n');
-  }, 15000);
-
-  itIf(hasCurl, 'curl --retry retries transient HTTP failures', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(
-      `curl -fsS --retry 2 --retry-delay 0 http://127.0.0.1:${httpPort}/flaky`,
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toBe('retry succeeded');
-    expect(flakyRequestCount).toBeGreaterThanOrEqual(2);
-  }, 15000);
-
-  itIf(hasCurl, 'curl exits promptly after a keep-alive response', async () => {
-    await createKernelWithNet();
-    const startedAt = Date.now();
-    const result = await kernel.exec(`curl -s http://127.0.0.1:${keepAlivePort}/`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toBe('hello from keepalive');
-    expect(Date.now() - startedAt).toBeLessThan(8000);
-  }, 15000);
-
-  itIf(hasCurl && hasOpenssl, 'curl -k performs an HTTPS request through the WASI TLS backend', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(`curl -ks https://127.0.0.1:${httpsPort}/json`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain('"secure":true');
-  }, 15000);
-
-  itIf(hasCurl && hasOpenssl, 'curl fails TLS verification without -k on a self-signed endpoint', async () => {
-    await createKernelWithNet();
-    const result = await kernel.exec(`curl -sS https://127.0.0.1:${httpsPort}/json`);
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toMatch(/certificate|tls|ssl|verify/i);
-  }, 15000);
-
-  itIf(hasCurl && hasOpenssl, 'curl -k exits promptly after an HTTPS keep-alive response', async () => {
-    await createKernelWithNet();
-    const startedAt = Date.now();
-    const result = await kernel.exec(`curl -ks https://127.0.0.1:${httpsPort}/keepalive`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toBe('hello from tls keepalive');
-    expect(Date.now() - startedAt).toBeLessThan(8000);
-  }, 15000);
-
-  itIf(hasHttpGetTest && !externalNetworkSkipReason, 'http_get_test reaches an external host over real TCP', async () => {
-    await createKernelWithNet();
-    const result = await execWithRetry(`http_get_test ${EXTERNAL_HOST} ${EXTERNAL_TCP_PORT} /`);
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toMatch(/HTTP\/1\.[01] (200|301|302)/);
-  }, 30000);
-
-  itIf(hasCurl && !externalNetworkSkipReason, 'curl reaches a real external HTTP endpoint', async () => {
-    await createKernelWithNet();
-    const result = await execWithRetry(
-      `curl -fsSL --retry 2 --retry-delay 1 --retry-all-errors --connect-timeout 10 --max-time 30 ${EXTERNAL_HTTP_URL}`,
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain(EXTERNAL_EXPECTED_BODY);
-  }, 30000);
-
-  itIf(hasCurl && !externalNetworkSkipReason, 'curl reaches a real external HTTPS endpoint', async () => {
-    await createKernelWithNet();
-    const result = await execWithRetry(
-      `curl -fsSL --retry 2 --retry-delay 1 --retry-all-errors --connect-timeout 10 --max-time 30 ${EXTERNAL_HTTPS_URL}`,
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout).toContain(EXTERNAL_EXPECTED_BODY);
-  }, 30000);
-});
diff --git a/registry/tests/wasmvm/duckdb.test.ts b/registry/tests/wasmvm/duckdb.test.ts
deleted file mode 100644
index f6010b2c1..000000000
--- a/registry/tests/wasmvm/duckdb.test.ts
+++ /dev/null
@@ -1,270 +0,0 @@
-/**
- * Integration tests for the upstream DuckDB CLI build.
- *
- * Verifies that the registry's source-built DuckDB binary works end-to-end with
- * the shared WASI/POSIX runtime:
- *   - basic in-memory SQL execution
- *   - joins, indexes, and temp tables
- *   - persistent database files on the kernel VFS
- *   - crash recovery for uncommitted transactions
- *   - spill-to-disk via temp files
- *   - CSV ingestion from the kernel filesystem
- *   - remote fetch via the shared WASI/POSIX network stack followed by DuckDB query
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import {
-  COMMANDS_DIR,
-  C_BUILD_DIR,
-  allowAll,
-  createInMemoryFileSystem,
-  createKernel,
-  createNodeHostNetworkAdapter,
-  createWasmVmRuntime,
-  describeIf,
-  itIf,
-} from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-import { createServer, type IncomingMessage, type Server, type ServerResponse } from 'node:http';
-import { existsSync } from 'node:fs';
-import { resolve } from 'node:path';
-import { setTimeout as sleep } from 'node:timers/promises';
-
-const hasWasmDuckDB = existsSync(resolve(C_BUILD_DIR, 'duckdb'));
-const hasWasmCurl =
-  (existsSync(resolve(COMMANDS_DIR, 'curl')) || existsSync(resolve(C_BUILD_DIR, 'curl')));
-const hasWasmHttpGet = existsSync(resolve(C_BUILD_DIR, 'http_get'));
-
-async function mountKernel(
-  filesystem: ReturnType<typeof createInMemoryFileSystem>,
-  options: { loopbackExemptPorts?: number[] } = {},
-) {
-  const kernel = createKernel({
-    filesystem,
-    cwd: '/tmp',
-    permissions: allowAll,
-    hostNetworkAdapter: createNodeHostNetworkAdapter(),
-    loopbackExemptPorts: options.loopbackExemptPorts,
-  });
-  const commandDirs = existsSync(COMMANDS_DIR) ? [C_BUILD_DIR, COMMANDS_DIR] : [C_BUILD_DIR];
-  await kernel.mount(
-    createWasmVmRuntime({
-      commandDirs,
-      permissions: {
-        duckdb: 'read-write',
-        http_get: 'full',
-      },
-    })
-  );
-  return kernel;
-}
-
-function closeServer(server: Server) {
-  return new Promise<void>((resolve, reject) => {
-    server.close((err) => {
-      if (err) reject(err);
-      else resolve();
-    });
-  });
-}
-
-async function waitForFilesystemPath(
-  filesystem: ReturnType<typeof createInMemoryFileSystem>,
-  path: string,
-  timeoutMs = 30_000,
-) {
-  const start = Date.now();
-  while (!(await filesystem.exists(path))) {
-    if (Date.now() - start >= timeoutMs) {
-      throw new Error(`timed out waiting for ${path}`);
-    }
-    await sleep(25);
-  }
-}
-
-describeIf(hasWasmDuckDB, 'duckdb command', { timeout: 120_000 }, () => {
-  let kernel: Kernel | undefined;
-
-  afterEach(async () => {
-    await kernel?.dispose();
-    kernel = undefined;
-  }, 120_000);
-
-  it('executes basic SQL against an in-memory database', async () => {
-    const filesystem = createInMemoryFileSystem();
-    await filesystem.mkdir('/tmp');
-    kernel = await mountKernel(filesystem);
-
-    const result = await kernel.exec('duckdb -csv -c "SELECT 41 + 1 AS answer"');
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout.trim()).toBe('answer\n42');
-  });
-
-  it('persists database files on the shared VFS and reopens them in a new process', async () => {
-    const filesystem = createInMemoryFileSystem();
-    await filesystem.mkdir('/tmp');
-    await filesystem.writeFile('/tmp/input.csv', 'name,value\nalpha,1\nbeta,2\n');
-
-    kernel = await mountKernel(filesystem);
-    let result = await kernel.exec(
-      `duckdb -csv /tmp/app.duckdb -c "CREATE TABLE items AS SELECT * FROM read_csv_auto('/tmp/input.csv');"`
-    );
-    expect(result.exitCode).toBe(0);
-    await kernel.dispose();
-    kernel = undefined;
-
-    expect(await filesystem.exists('/tmp/app.duckdb')).toBe(true);
-    expect((await filesystem.stat('/tmp/app.duckdb')).size).toBeGreaterThan(0);
-
-    kernel = await mountKernel(filesystem);
-    result = await kernel.exec(
-      `duckdb -csv /tmp/app.duckdb -c "SELECT name, value FROM items ORDER BY value;"`
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout.trim()).toBe('name,value\nalpha,1\nbeta,2');
-  });
-
-  it('persists inserted and updated rows across process reopens', async () => {
-    const filesystem = createInMemoryFileSystem();
-    await filesystem.mkdir('/tmp');
-    kernel = await mountKernel(filesystem);
-
-    let result = await kernel.exec(
-      `duckdb -csv /tmp/dml.duckdb -c "CREATE TABLE items(id INTEGER, value INTEGER); INSERT INTO items VALUES (1, 10), (2, 20); UPDATE items SET value = value + 1 WHERE id = 2;"`
-    );
-    expect(result.exitCode).toBe(0);
-
-    result = await kernel.exec(
-      `duckdb -csv /tmp/dml.duckdb -c "SELECT id, value FROM items ORDER BY id;"`
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout.trim()).toBe('id,value\n1,10\n2,21');
-  });
-
-  it('supports joins and indexes on file-backed tables', async () => {
-    const filesystem = createInMemoryFileSystem();
-    await filesystem.mkdir('/tmp');
-    kernel = await mountKernel(filesystem);
-
-    const result = await kernel.exec(
-      `duckdb -csv /tmp/analytics.duckdb -c "CREATE TABLE numbers AS SELECT i AS id, i * 10 AS score FROM range(1, 6) tbl(i); CREATE TABLE labels AS SELECT i AS id, concat('n', CAST(i AS VARCHAR)) AS name FROM range(1, 6) tbl(i); CREATE INDEX idx_numbers_id ON numbers(id); SELECT name, score FROM numbers JOIN labels USING (id) WHERE id >= 3 ORDER BY id;"`
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout.trim()).toBe('name,score\nn3,30\nn4,40\nn5,50');
-  });
-
-  it('keeps temp tables scoped to a single DuckDB process', async () => {
-    const filesystem = createInMemoryFileSystem();
-    await filesystem.mkdir('/tmp');
-    kernel = await mountKernel(filesystem);
-
-    let result = await kernel.exec(
-      `duckdb -csv /tmp/session.duckdb -c "CREATE TEMP TABLE session_values AS SELECT 7 AS value; SELECT value FROM session_values;"`
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout.trim()).toBe('value\n7');
-
-    result = await kernel.exec(
-      `duckdb -csv /tmp/session.duckdb -c "SELECT value FROM session_values;"`
-    );
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toContain('session_values');
-  });
-
-  it('drops uncommitted rows after a hard-killed process is reopened', async () => {
-    const filesystem = createInMemoryFileSystem();
-    await filesystem.mkdir('/tmp');
-    kernel = await mountKernel(filesystem);
-
-    let result = await kernel.exec(
-      `duckdb -csv /tmp/recover.duckdb -c "CREATE TABLE items(value INTEGER); INSERT INTO items VALUES (1);"`
-    );
-    expect(result.exitCode).toBe(0);
-
-    const proc = kernel.spawn('duckdb', [
-      '-csv',
-      '/tmp/recover.duckdb',
-      '-c',
-      "BEGIN; INSERT INTO items VALUES (42); COPY (SELECT COUNT(*) AS rows_in_tx FROM items) TO '/tmp/tx-ready.csv' (HEADER, DELIMITER ','); SELECT SUM(i) FROM range(100000000000) tbl(i);",
-    ]);
-
-    await waitForFilesystemPath(filesystem, '/tmp/tx-ready.csv');
-
-    proc.kill(9);
-    await proc.wait().catch(() => undefined);
-
-    result = await kernel.exec(
-      `duckdb -csv /tmp/recover.duckdb -c "SELECT COUNT(*) AS rows, SUM(value) AS total FROM items;"`
-    );
-    expect(result.exitCode).toBe(0);
-    expect(result.stdout.trim()).toBe('rows,total\n1,1');
-  });
-
-  it('handles large sorted exports with a configured temp directory under constrained memory', async () => {
-    const filesystem = createInMemoryFileSystem();
-    await filesystem.mkdir('/tmp');
-    kernel = await mountKernel(filesystem);
-
-    const result = await kernel.exec(
-      `duckdb -csv /tmp/spill.duckdb -c "PRAGMA temp_directory='/tmp/duckdb-spill'; SET threads=1; SET preserve_insertion_order=false; SET memory_limit='64MB'; COPY (SELECT i, repeat('x', 256) AS payload FROM range(200000) tbl(i) ORDER BY i DESC) TO '/tmp/spilled.csv' (HEADER, DELIMITER ',');"`
-    );
-    expect(result.exitCode).toBe(0);
-    expect(await filesystem.exists('/tmp/spilled.csv')).toBe(true);
-    expect((await filesystem.stat('/tmp/spilled.csv')).size).toBeGreaterThan(50_000_000);
-  });
-
-  itIf(
-    hasWasmCurl || hasWasmHttpGet,
-    'queries data fetched over the network through the shared VFS',
-    async () => {
-      const filesystem = createInMemoryFileSystem();
-      await filesystem.mkdir('/tmp');
-
-      const server = createServer((req: IncomingMessage, res: ServerResponse) => {
-        if (req.url === '/' || req.url === '/remote.csv') {
-          res.writeHead(200, { 'Content-Type': 'text/csv' });
-          res.end('city,value\nsf,3\nla,5\n');
-          return;
-        }
-
-        res.writeHead(404, { 'Content-Type': 'text/plain' });
-        res.end('not found');
-      });
-
-      await new Promise<void>((resolve) => server.listen(0, '127.0.0.1', resolve));
-
-      try {
-        const address = server.address();
-        if (!address || typeof address === 'string') {
-          throw new Error('failed to bind test HTTP server');
-        }
-        kernel = await mountKernel(filesystem, {
-          loopbackExemptPorts: [address.port],
-        });
-
-        let result;
-        if (hasWasmHttpGet) {
-          result = await kernel.exec(
-            `http_get ${address.port} /remote.csv /tmp/remote.csv`
-          );
-          expect(result.exitCode).toBe(0);
-        } else {
-          result = await kernel.exec(
-            `curl -fsS -o /tmp/remote.csv http://127.0.0.1:${address.port}/remote.csv`
-          );
-          expect(result.exitCode).toBe(0);
-        }
-
-        expect(await filesystem.readTextFile('/tmp/remote.csv')).toContain('city,value');
-
-        result = await kernel.exec(
-          `duckdb -csv -c "SELECT SUM(value) AS total FROM read_csv_auto('/tmp/remote.csv');"`
-        );
-        expect(result.exitCode).toBe(0);
-        expect(result.stdout.trim()).toBe('total\n8');
-      } finally {
-        await closeServer(server);
-      }
-    }
-  );
-});
diff --git a/registry/tests/wasmvm/dynamic-module-integration.test.ts b/registry/tests/wasmvm/dynamic-module-integration.test.ts
deleted file mode 100644
index a884adee9..000000000
--- a/registry/tests/wasmvm/dynamic-module-integration.test.ts
+++ /dev/null
@@ -1,465 +0,0 @@
-/**
- * Integration tests for WasmVM dynamic module loading pipeline.
- *
- * Verifies the full pipeline: kernel -> CommandRegistry -> WasmVmRuntimeDriver
- * -> ModuleCache -> Worker. Tests cover commandDirs discovery, symlink alias
- * resolution, on-demand discovery through the kernel, path-based resolution,
- * and backwards compatibility.
- *
- * Tests requiring real WASM execution register only when binaries are available.
- */
-
-import { describe, it, expect, afterEach, vi } from 'vitest';
-import { createWasmVmRuntime, WASMVM_COMMANDS } from '../helpers.js';
-import type { WasmVmRuntimeOptions } from '../helpers.js';
-import { COMMANDS_DIR, createKernel, describeIf, hasWasmBinaries } from '../helpers.js';
-import type {
-  DriverProcess,
-  Kernel,
-  KernelInterface,
-  KernelRuntimeDriver as RuntimeDriver,
-  ProcessContext,
-} from '../helpers.js';
-import { writeFile, mkdir, rm, symlink } from 'node:fs/promises';
-import { existsSync } from 'node:fs';
-import { join } from 'node:path';
-import { tmpdir } from 'node:os';
-
-// Valid WASM magic: \0asm + version 1
-const VALID_WASM = new Uint8Array([0x00, 0x61, 0x73, 0x6d, 0x01, 0x00, 0x00, 0x00]);
-
-// Minimal in-memory VFS for kernel tests
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map(name => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) { this.dirs.add(path); }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isDir ? 0o40755 : 0o100644,
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: false,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  async removeFile(path: string) { this.files.delete(path); }
-  async removeDir(path: string) { this.dirs.delete(path); }
-  async rename(oldPath: string, newPath: string) {
-    const data = this.files.get(oldPath);
-    if (data) { this.files.set(newPath, data); this.files.delete(oldPath); }
-  }
-  async realpath(path: string) { return path; }
-  async symlink(_target: string, _linkPath: string) {}
-  async readlink(_path: string): Promise<string> { return ''; }
-  async lstat(path: string) { return this.stat(path); }
-  async link(_old: string, _new: string) {}
-  async chmod(_path: string, _mode: number) {}
-  async chown(_path: string, _uid: number, _gid: number) {}
-  async utimes(_path: string, _atime: number, _mtime: number) {}
-  async truncate(_path: string, _length: number) {}
-}
-
-/** Create a temp dir with WASM command binaries for testing. */
-async function createCommandDir(commands: string[]): Promise<string> {
-  const dir = join(tmpdir(), `wasmvm-integ-${Date.now()}-${Math.random().toString(36).slice(2)}`);
-  await mkdir(dir, { recursive: true });
-  for (const cmd of commands) {
-    await writeFile(join(dir, cmd), VALID_WASM);
-  }
-  return dir;
-}
-
-// -------------------------------------------------------------------------
-// Integration Tests
-// -------------------------------------------------------------------------
-
-describe('Dynamic module loading — integration', () => {
-  const tempDirs: string[] = [];
-
-  afterEach(async () => {
-    for (const dir of tempDirs) {
-      await rm(dir, { recursive: true, force: true }).catch(() => {});
-    }
-    tempDirs.length = 0;
-  });
-
-  /** Helper to create + track a temp dir. */
-  async function makeTempDir(commands: string[]): Promise<string> {
-    const dir = await createCommandDir(commands);
-    tempDirs.push(dir);
-    return dir;
-  }
-
-  describe('commandDirs discovery through kernel', () => {
-    it('kernel registers commands discovered from commandDirs at init', async () => {
-      const dir = await makeTempDir(['ls', 'cat', 'grep']);
-      const vfs = new SimpleVFS();
-      const kernel = createKernel({ filesystem: vfs as any });
-      const driver = createWasmVmRuntime({ commandDirs: [dir] });
-      await kernel.mount(driver);
-
-      expect(kernel.commands.get('ls')).toBe('wasmvm');
-      expect(kernel.commands.get('cat')).toBe('wasmvm');
-      expect(kernel.commands.get('grep')).toBe('wasmvm');
-      expect(kernel.commands.size).toBe(3);
-
-      await kernel.dispose();
-    });
-
-    it('first dir in commandDirs wins on naming conflict', async () => {
-      const dir1 = await makeTempDir(['ls', 'cat']);
-      const dir2 = await makeTempDir(['ls', 'grep']);
-
-      const vfs = new SimpleVFS();
-      const kernel = createKernel({ filesystem: vfs as any });
-      const driver = createWasmVmRuntime({ commandDirs: [dir1, dir2] }) as any;
-      await kernel.mount(driver);
-
-      // All 3 unique commands registered
-      expect(kernel.commands.get('ls')).toBe('wasmvm');
-      expect(kernel.commands.get('cat')).toBe('wasmvm');
-      expect(kernel.commands.get('grep')).toBe('wasmvm');
-      // ls resolved from dir1 (first match wins)
-      expect(driver._commandPaths.get('ls')).toBe(join(dir1, 'ls'));
-
-      await kernel.dispose();
-    });
-
-    it('non-WASM files in commandDirs are ignored by kernel', async () => {
-      const dir = await makeTempDir(['ls']);
-      await writeFile(join(dir, 'README.md'), 'documentation');
-      await writeFile(join(dir, 'config.json'), '{}');
-
-      const vfs = new SimpleVFS();
-      const kernel = createKernel({ filesystem: vfs as any });
-      const driver = createWasmVmRuntime({ commandDirs: [dir] });
-      await kernel.mount(driver);
-
-      expect(kernel.commands.size).toBe(1);
-      expect(kernel.commands.get('ls')).toBe('wasmvm');
-      expect(kernel.commands.has('README.md')).toBe(false);
-      expect(kernel.commands.has('config.json')).toBe(false);
-
-      await kernel.dispose();
-    });
-  });
-
-  describe('symlink alias resolution', () => {
-    it('symlink aliases are followed during commandDirs scan', async () => {
-      const dir = await makeTempDir(['grep']);
-      // Create symlink: egrep -> grep
-      await symlink(join(dir, 'grep'), join(dir, 'egrep'));
-      // Create symlink: fgrep -> grep
-      await symlink(join(dir, 'grep'), join(dir, 'fgrep'));
-
-      const driver = createWasmVmRuntime({ commandDirs: [dir] });
-      const mockKernel: Partial<KernelInterface> = {};
-      await driver.init(mockKernel as KernelInterface);
-
-      // All three should be discovered (symlinks are regular files to readdir)
-      expect(driver.commands).toContain('grep');
-      expect(driver.commands).toContain('egrep');
-      expect(driver.commands).toContain('fgrep');
-    });
-
-    it('symlink aliases resolve to valid binary paths', async () => {
-      const dir = await makeTempDir(['grep']);
-      await symlink(join(dir, 'grep'), join(dir, 'egrep'));
-
-      const driver = createWasmVmRuntime({ commandDirs: [dir] }) as any;
-      const mockKernel: Partial<KernelInterface> = {};
-      await driver.init(mockKernel as KernelInterface);
-
-      // Both point to valid paths
-      expect(driver._commandPaths.get('grep')).toBe(join(dir, 'grep'));
-      expect(driver._commandPaths.get('egrep')).toBe(join(dir, 'egrep'));
-    });
-
-    it('symlink aliases are registered in kernel', async () => {
-      const dir = await makeTempDir(['grep']);
-      await symlink(join(dir, 'grep'), join(dir, 'egrep'));
-      await symlink(join(dir, 'grep'), join(dir, 'fgrep'));
-
-      const vfs = new SimpleVFS();
-      const kernel = createKernel({ filesystem: vfs as any });
-      const driver = createWasmVmRuntime({ commandDirs: [dir] });
-      await kernel.mount(driver);
-
-      expect(kernel.commands.get('grep')).toBe('wasmvm');
-      expect(kernel.commands.get('egrep')).toBe('wasmvm');
-      expect(kernel.commands.get('fgrep')).toBe('wasmvm');
-
-      await kernel.dispose();
-    });
-
-    it('symlinks to non-WASM targets are ignored', async () => {
-      const dir = await makeTempDir([]);
-      await writeFile(join(dir, 'readme'), 'not wasm');
-      await symlink(join(dir, 'readme'), join(dir, 'bad-link'));
-
-      const driver = createWasmVmRuntime({ commandDirs: [dir] });
-      const mockKernel: Partial<KernelInterface> = {};
-      await driver.init(mockKernel as KernelInterface);
-
-      expect(driver.commands).not.toContain('readme');
-      expect(driver.commands).not.toContain('bad-link');
-      expect(driver.commands).toEqual([]);
-    });
-  });
-
-  describe('on-demand discovery through kernel', () => {
-    it('kernel discovers a binary added after init via tryResolve', async () => {
-      const dir = await makeTempDir(['ls']);
-      const vfs = new SimpleVFS();
-      const kernel = createKernel({ filesystem: vfs as any });
-      const driver = createWasmVmRuntime({ commandDirs: [dir] });
-      await kernel.mount(driver);
-
-      // Only ls is known at mount time
-      expect(kernel.commands.has('new-cmd')).toBe(false);
-
-      // Drop a new binary after init
-      await writeFile(join(dir, 'new-cmd'), VALID_WASM);
-
-      // Spawning new-cmd triggers tryResolve in kernel → driver discovers it
-      // Since it's a fake WASM, spawn will fail, but the command should be registered
-      try {
-        kernel.spawn('new-cmd', []);
-      } catch {
-        // Expected: spawn will throw because the binary is just magic bytes
-      }
-
-      // After tryResolve succeeded, the command is registered
-      expect(kernel.commands.get('new-cmd')).toBe('wasmvm');
-
-      await kernel.dispose();
-    });
-
-    it('after tryResolve succeeds, subsequent spawns resolve without calling tryResolve again', async () => {
-      const dir = await makeTempDir(['ls']);
-      const vfs = new SimpleVFS();
-      const kernel = createKernel({ filesystem: vfs as any });
-      const driver = createWasmVmRuntime({ commandDirs: [dir] });
-      await kernel.mount(driver);
-
-      // Add a new binary
-      await writeFile(join(dir, 'extra'), VALID_WASM);
-
-      // First spawn triggers tryResolve
-      try { kernel.spawn('extra', []); } catch {}
-      expect(kernel.commands.get('extra')).toBe('wasmvm');
-
-      // Spy on tryResolve — second spawn should NOT call it (registry hit)
-      const tryResolveSpy = vi.spyOn(driver as any, 'tryResolve');
-      try { kernel.spawn('extra', []); } catch {}
-      expect(tryResolveSpy).not.toHaveBeenCalled();
-
-      tryResolveSpy.mockRestore();
-      await kernel.dispose();
-    });
-
-    it('tryResolve normalizes path-based commands to basename before lookup', async () => {
-      const dir = await makeTempDir(['alpha']);
-      const driver = createWasmVmRuntime({ commandDirs: [dir] });
-      const mockKernel: Partial<KernelInterface> = {};
-      await driver.init(mockKernel as KernelInterface);
-
-      // Path-based tryResolve should normalize /bin/alpha → alpha
-      expect(driver.tryResolve('/bin/alpha')).toBe(true);
-      expect(driver.tryResolve('/usr/local/bin/alpha')).toBe(true);
-      // Bare name still works
-      expect(driver.tryResolve('alpha')).toBe(true);
-      // Nonexistent commands still return false
-      expect(driver.tryResolve('/bin/nonexistent')).toBe(false);
-    });
-
-    it('tryResolve returning false for all drivers results in ENOENT', async () => {
-      const dir = await makeTempDir(['ls']);
-      const vfs = new SimpleVFS();
-      const kernel = createKernel({ filesystem: vfs as any });
-      const driver = createWasmVmRuntime({ commandDirs: [dir] });
-      await kernel.mount(driver);
-
-      expect(() => kernel.spawn('nonexistent', [])).toThrow(/ENOENT/);
-      await kernel.dispose();
-    });
-  });
-
-  describe('path-based resolution through kernel', () => {
-    it('/bin/ls resolves to ls through kernel', async () => {
-      const dir = await makeTempDir(['ls', 'cat']);
-      const vfs = new SimpleVFS();
-      const kernel = createKernel({ filesystem: vfs as any });
-      const driver = createWasmVmRuntime({ commandDirs: [dir] });
-      await kernel.mount(driver);
-
-      // Path-based resolution: /bin/ls -> ls
-      // Spawn won't execute (fake WASM) but shouldn't throw ENOENT
-      let threw = false;
-      try {
-        kernel.spawn('/bin/ls', []);
-      } catch (e: any) {
-        if (e.message?.includes('ENOENT')) threw = true;
-      }
-      expect(threw).toBe(false);
-
-      await kernel.dispose();
-    });
-
-    it('/usr/bin/grep resolves to grep through kernel', async () => {
-      const dir = await makeTempDir(['grep']);
-      const vfs = new SimpleVFS();
-      const kernel = createKernel({ filesystem: vfs as any });
-      const driver = createWasmVmRuntime({ commandDirs: [dir] });
-      await kernel.mount(driver);
-
-      let threw = false;
-      try {
-        kernel.spawn('/usr/bin/grep', ['hello']);
-      } catch (e: any) {
-        if (e.message?.includes('ENOENT')) threw = true;
-      }
-      expect(threw).toBe(false);
-
-      await kernel.dispose();
-    });
-  });
-
-  describe('WASMVM_COMMANDS export', () => {
-    it('WASMVM_COMMANDS is a frozen static list with 90+ commands', () => {
-      expect(WASMVM_COMMANDS.length).toBeGreaterThanOrEqual(90);
-      expect(Object.isFrozen(WASMVM_COMMANDS)).toBe(true);
-      expect(WASMVM_COMMANDS).toContain('sh');
-      expect(WASMVM_COMMANDS).toContain('ls');
-      expect(WASMVM_COMMANDS).toContain('grep');
-    });
-
-    it('commandDirs mode: driver.commands reflects filesystem scan, not WASMVM_COMMANDS', async () => {
-      const dir = await makeTempDir(['alpha', 'beta', 'gamma']);
-      const driver = createWasmVmRuntime({ commandDirs: [dir] });
-      const mockKernel: Partial<KernelInterface> = {};
-      await driver.init(mockKernel as KernelInterface);
-
-      // Commands reflect what's on disk, not the static WASMVM_COMMANDS list
-      expect(driver.commands).toEqual(expect.arrayContaining(['alpha', 'beta', 'gamma']));
-      expect(driver.commands.length).toBe(3);
-      expect(driver.commands).not.toContain('sh');
-    });
-
-    it('legacy mode: driver.commands matches WASMVM_COMMANDS', () => {
-      const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {});
-      const driver = createWasmVmRuntime({ wasmBinaryPath: '/fake' });
-      expect(driver.commands.length).toBe(WASMVM_COMMANDS.length);
-      for (const cmd of WASMVM_COMMANDS) {
-        expect(driver.commands).toContain(cmd);
-      }
-      warnSpy.mockRestore();
-    });
-  });
-
-  describe('backwards compatibility — deprecation', () => {
-    it('wasmBinaryPath mode mounts to kernel and registers all commands', async () => {
-      const warnSpy = vi.spyOn(console, 'warn').mockImplementation(() => {});
-      const vfs = new SimpleVFS();
-      const kernel = createKernel({ filesystem: vfs as any });
-      const driver = createWasmVmRuntime({ wasmBinaryPath: '/fake' });
-      await kernel.mount(driver);
-
-      expect(kernel.commands.get('sh')).toBe('wasmvm');
-      expect(kernel.commands.get('ls')).toBe('wasmvm');
-      expect(kernel.commands.size).toBeGreaterThanOrEqual(90);
-      expect(warnSpy).toHaveBeenCalledWith(expect.stringContaining('deprecated'));
-
-      warnSpy.mockRestore();
-      await kernel.dispose();
-    });
-  });
-
-  describeIf(hasWasmBinaries, 'module cache integration', () => {
-    let kernel: Kernel;
-
-    afterEach(async () => {
-      await kernel?.dispose();
-    });
-
-    it('module cache returns same WebAssembly.Module for repeated resolves', async () => {
-      const vfs = new SimpleVFS();
-      kernel = createKernel({ filesystem: vfs as any });
-      const driver = createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }) as any;
-      await kernel.mount(driver);
-
-      // Cache starts empty
-      expect(driver._moduleCache.size).toBe(0);
-
-      // First exec compiles + caches
-      const r1 = await kernel.exec('echo first');
-      expect(r1.exitCode).toBe(0);
-      expect(driver._moduleCache.size).toBe(1);
-
-      // Second exec reuses cached module (same command = same cache entry)
-      const r2 = await kernel.exec('echo second');
-      expect(r2.exitCode).toBe(0);
-      expect(driver._moduleCache.size).toBe(1);
-    }, 30_000);
-
-    it('different commands get separate cache entries', async () => {
-      const vfs = new SimpleVFS();
-      kernel = createKernel({ filesystem: vfs as any });
-      const driver = createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }) as any;
-      await kernel.mount(driver);
-
-      // Each standalone binary gets its own cache entry
-      await kernel.exec('echo hello');
-      await kernel.exec('true');
-      expect(driver._moduleCache.size).toBe(2);
-    }, 30_000);
-  });
-});
diff --git a/registry/tests/wasmvm/envsubst.test.ts b/registry/tests/wasmvm/envsubst.test.ts
deleted file mode 100644
index 3415284a6..000000000
--- a/registry/tests/wasmvm/envsubst.test.ts
+++ /dev/null
@@ -1,195 +0,0 @@
-/**
- * Integration tests for envsubst C command.
- *
- * Verifies environment variable substitution in stdin: $VAR, ${VAR},
- * ${VAR:-default}, and escaped \$VAR via kernel.exec() with real WASM binaries.
- *
- * Note: kernel.exec() wraps commands in sh -c. Brush-shell currently returns
- * exit code 17 for all child commands (benign "could not retrieve pid" issue).
- * Tests verify stdout correctness rather than exit code.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import { C_BUILD_DIR, COMMANDS_DIR, createKernel } from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-
-// Minimal in-memory VFS for kernel tests
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map(name => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) {
-    this.dirs.add(path);
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isDir ? 0o40755 : 0o100644,
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: false,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  async lstat(path: string) { return this.stat(path); }
-  async removeFile(path: string) { this.files.delete(path); }
-  async removeDir(path: string) { this.dirs.delete(path); }
-  async rename(oldPath: string, newPath: string) {
-    const data = this.files.get(oldPath);
-    if (data) {
-      this.files.set(newPath, data);
-      this.files.delete(oldPath);
-    }
-  }
-  async pread(path: string, buffer: Uint8Array, offset: number, length: number, position: number): Promise<number> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    const available = Math.min(length, data.length - position);
-    if (available <= 0) return 0;
-    buffer.set(data.subarray(position, position + available), offset);
-    return available;
-  }
-}
-
-describe('envsubst command', () => {
-  let kernel: Kernel;
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('substitutes $VAR with environment variable value', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    const result = await kernel.exec('envsubst', {
-      stdin: 'Hello $USER\n',
-      env: { USER: 'world' },
-    });
-    expect(result.stdout.trim()).toBe('Hello world');
-  });
-
-  it('substitutes ${VAR:-default} with fallback for undefined var', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    const result = await kernel.exec('envsubst', {
-      stdin: '${UNDEFINED:-fallback}\n',
-      env: {},
-    });
-    expect(result.stdout.trim()).toBe('fallback');
-  });
-
-  it('passes through escaped \\$VAR literally', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    const result = await kernel.exec('envsubst', {
-      stdin: '\\$ESCAPED\n',
-      env: { ESCAPED: 'nope' },
-    });
-    expect(result.stdout.trim()).toBe('$ESCAPED');
-  });
-
-  it('substitutes multiple variables in one line', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    const result = await kernel.exec('envsubst', {
-      stdin: '$GREETING $NAME from $PLACE\n',
-      env: { GREETING: 'Hello', NAME: 'Alice', PLACE: 'Wonderland' },
-    });
-    expect(result.stdout.trim()).toBe('Hello Alice from Wonderland');
-  });
-
-  it('replaces undefined variables with empty string', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    const result = await kernel.exec('envsubst', {
-      stdin: 'before${MISSING}after\n',
-      env: {},
-    });
-    expect(result.stdout.trim()).toBe('beforeafter');
-  });
-
-  it('handles ${VAR} brace syntax with defined variable', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    const result = await kernel.exec('envsubst', {
-      stdin: '${APP_NAME}_config\n',
-      env: { APP_NAME: 'myapp' },
-    });
-    expect(result.stdout.trim()).toBe('myapp_config');
-  });
-});
diff --git a/registry/tests/wasmvm/fd-find.test.ts b/registry/tests/wasmvm/fd-find.test.ts
deleted file mode 100644
index dfb5faf21..000000000
--- a/registry/tests/wasmvm/fd-find.test.ts
+++ /dev/null
@@ -1,255 +0,0 @@
-/**
- * Integration tests for fd (fd-find) command.
- *
- * Verifies file finding with regex patterns, extension filters, type filters,
- * hidden file skipping, and empty directory handling via kernel.exec() with
- * real WASM binaries.
- *
- * Note: kernel.exec() wraps commands in sh -c. Brush-shell currently returns
- * exit code 17 for all child commands (benign "could not retrieve pid" issue).
- * Tests verify stdout correctness rather than exit code.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import { COMMANDS_DIR, createKernel, describeIf, hasWasmBinaries } from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-
-// Minimal in-memory VFS for kernel tests
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map(name => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) {
-    this.dirs.add(path);
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isDir ? 0o40755 : 0o100644,
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: false,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  async lstat(path: string) { return this.stat(path); }
-  async removeFile(path: string) { this.files.delete(path); }
-  async removeDir(path: string) { this.dirs.delete(path); }
-  async rename(oldPath: string, newPath: string) {
-    const data = this.files.get(oldPath);
-    if (data) {
-      this.files.set(newPath, data);
-      this.files.delete(oldPath);
-    }
-  }
-  async pread(path: string, offset: number, length: number): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data.slice(offset, offset + length);
-  }
-  async pwrite(path: string, offset: number, content: Uint8Array): Promise<void> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    const next = new Uint8Array(Math.max(data.length, offset + content.length));
-    next.set(data);
-    next.set(content, offset);
-    this.files.set(path, next);
-  }
-}
-
-/** Create a VFS pre-populated with a test directory structure */
-async function createTestVFS(): Promise<SimpleVFS> {
-  const vfs = new SimpleVFS();
-  // /project/
-  //   src/
-  //     main.js
-  //     utils.js
-  //     helpers.ts
-  //   lib/
-  //     parser.js
-  //   docs/
-  //     readme.md
-  //   .hidden/
-  //     secret.txt
-  //   .gitignore
-  //   config.json
-  await vfs.writeFile('/project/src/main.js', 'console.log("main")');
-  await vfs.writeFile('/project/src/utils.js', 'export {}');
-  await vfs.writeFile('/project/src/helpers.ts', 'export {}');
-  await vfs.writeFile('/project/lib/parser.js', 'module.exports = {}');
-  await vfs.writeFile('/project/docs/readme.md', '# Readme');
-  await vfs.writeFile('/project/.hidden/secret.txt', 'secret');
-  await vfs.writeFile('/project/.gitignore', 'node_modules');
-  await vfs.writeFile('/project/config.json', '{}');
-  // /empty/ — empty directory
-  await vfs.mkdir('/empty', { recursive: true });
-  return vfs;
-}
-
-/** Parse fd output lines, sorted for deterministic comparison */
-function parseLines(stdout: string): string[] {
-  return stdout.split('\n').filter(l => l.length > 0).sort();
-}
-
-describeIf(hasWasmBinaries, 'fd-find command', { timeout: 10_000 }, () => {
-  let kernel: Kernel;
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('finds files matching regex pattern in current directory', async () => {
-    const vfs = await createTestVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const result = await kernel.exec('fd main /project', {});
-    const lines = parseLines(result.stdout);
-    expect(lines).toContain('/project/src/main.js');
-  });
-
-  it('finds all .js files with -e js', async () => {
-    const vfs = await createTestVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const result = await kernel.exec('fd -e js . /project', {});
-    const lines = parseLines(result.stdout);
-    expect(lines).toContain('/project/src/main.js');
-    expect(lines).toContain('/project/src/utils.js');
-    expect(lines).toContain('/project/lib/parser.js');
-    // .ts files should NOT match
-    expect(lines).not.toContain('/project/src/helpers.ts');
-  });
-
-  it('finds only files with -t f', async () => {
-    const vfs = await createTestVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const result = await kernel.exec('fd -t f . /project', {});
-    const lines = parseLines(result.stdout);
-    // All entries should be files, not directories
-    for (const line of lines) {
-      const stat = await vfs.stat(line);
-      expect(stat.isDirectory).toBe(false);
-    }
-    // Should include known files
-    expect(lines).toContain('/project/src/main.js');
-    expect(lines).toContain('/project/config.json');
-  });
-
-  it('finds only directories with -t d', async () => {
-    const vfs = await createTestVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const result = await kernel.exec('fd -t d . /project', {});
-    const lines = parseLines(result.stdout);
-    // All entries should be directories
-    for (const line of lines) {
-      const stat = await vfs.stat(line);
-      expect(stat.isDirectory).toBe(true);
-    }
-    // Should include known directories (hidden skipped by default)
-    expect(lines).toContain('/project/src');
-    expect(lines).toContain('/project/lib');
-    expect(lines).toContain('/project/docs');
-  });
-
-  it('returns no results for empty directory', async () => {
-    const vfs = await createTestVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const result = await kernel.exec('fd . /empty', {});
-    expect(result.stdout.trim()).toBe('');
-  });
-
-  it('returns empty output when no files match pattern', async () => {
-    const vfs = await createTestVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const result = await kernel.exec('fd zzzznonexistent /project', {});
-    expect(result.stdout.trim()).toBe('');
-  });
-
-  it('skips hidden files and directories by default', async () => {
-    const vfs = await createTestVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const result = await kernel.exec('fd . /project', {});
-    const lines = parseLines(result.stdout);
-    // Hidden files/dirs should NOT appear
-    const hiddenEntries = lines.filter(l => {
-      const parts = l.split('/');
-      return parts.some(p => p.startsWith('.') && p.length > 1);
-    });
-    expect(hiddenEntries).toEqual([]);
-  });
-
-  it('includes hidden files with -H flag', async () => {
-    const vfs = await createTestVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const result = await kernel.exec('fd -H . /project', {});
-    const lines = parseLines(result.stdout);
-    // Hidden items should now appear
-    expect(lines).toContain('/project/.gitignore');
-    expect(lines).toContain('/project/.hidden');
-  });
-});
diff --git a/registry/tests/wasmvm/git.test.ts b/registry/tests/wasmvm/git.test.ts
deleted file mode 100644
index eb1e2a8e2..000000000
--- a/registry/tests/wasmvm/git.test.ts
+++ /dev/null
@@ -1,546 +0,0 @@
-/**
- * Integration tests for git command.
- *
- * Verifies init, add, commit, branch, checkout (with DWIM), plus local and
- * smart-HTTP remote clone via kernel.exec() with real WASM binaries.
- */
-
-import { describe, it, expect, afterEach, beforeAll, afterAll, vi } from 'vitest';
-import { existsSync, mkdtempSync, rmSync, writeFileSync } from 'node:fs';
-import { resolve, join } from 'node:path';
-import { tmpdir } from 'node:os';
-import { createServer, type Server as HttpServer } from 'node:http';
-import { spawn, spawnSync } from 'node:child_process';
-import { createWasmVmRuntime } from '../helpers.js';
-import {
-  allowAll,
-  COMMANDS_DIR,
-  createInMemoryFileSystem,
-  createKernel,
-  describeIf,
-  hasWasmBinaries,
-} from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-
-vi.setConfig({ testTimeout: 30_000 });
-
-/** Check git binary exists in addition to base WASM binaries */
-const hasGit = hasWasmBinaries && existsSync(resolve(COMMANDS_DIR, 'git'));
-const hasHostGit = spawnSync('git', ['--version'], { stdio: 'ignore' }).status === 0;
-
-/** Create a kernel with a world-writable in-memory filesystem */
-async function createGitKernel() {
-  const vfs = createInMemoryFileSystem();
-  // Make root and /tmp writable by all users (WASM processes run as non-root)
-  await (vfs as any).chmod('/', 0o1777);
-  await vfs.mkdir('/tmp', { recursive: true });
-  await (vfs as any).chmod('/tmp', 0o1777);
-  const kernel = createKernel({ filesystem: vfs, syncFilesystemOnDispose: false });
-  await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-  return { kernel, vfs, dispose: () => kernel.dispose() };
-}
-
-async function createGitKernelWithNet(loopbackExemptPorts: number[]) {
-  const vfs = createInMemoryFileSystem();
-  await (vfs as any).chmod('/', 0o1777);
-  await vfs.mkdir('/tmp', { recursive: true });
-  await (vfs as any).chmod('/tmp', 0o1777);
-  const kernel = createKernel({
-    filesystem: vfs,
-    permissions: allowAll,
-    loopbackExemptPorts,
-    syncFilesystemOnDispose: false,
-  });
-  await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-  return { kernel, vfs, dispose: () => kernel.dispose() };
-}
-
-function runHostGit(args: string[], cwd?: string) {
-  const result = spawnSync('git', args, {
-    cwd,
-    encoding: 'utf8',
-  });
-  if (result.status !== 0) {
-    throw new Error(
-      `host git failed: git ${args.join(' ')}\nstdout: ${result.stdout}\nstderr: ${result.stderr}`,
-    );
-  }
-}
-
-/** Helper: run command and assert success */
-async function run(kernel: Kernel, cmd: string): Promise<{ stdout: string; stderr: string; exitCode: number }> {
-  const r = await kernel.exec(cmd);
-  if (r.exitCode !== 0) {
-    throw new Error(`Command failed (exit ${r.exitCode}): ${cmd}\nstdout: ${r.stdout}\nstderr: ${r.stderr}`);
-  }
-  return r;
-}
-
-describeIf(hasGit, 'git command', () => {
-  let kernel: Kernel;
-  let vfs: any;
-  let dispose: () => Promise<void>;
-
-  afterEach(async () => {
-    await dispose?.();
-  });
-
-  it('init creates .git directory structure', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    const result = await run(kernel, 'git init /repo');
-    expect(result.stdout).toContain('Initialized empty Git repository');
-
-    expect(await vfs.exists('/repo/.git/HEAD')).toBe(true);
-    expect(await vfs.exists('/repo/.git/objects')).toBe(true);
-    expect(await vfs.exists('/repo/.git/refs/heads')).toBe(true);
-
-    const head = new TextDecoder().decode(await vfs.readFile('/repo/.git/HEAD'));
-    expect(head.trim()).toBe('ref: refs/heads/main');
-  });
-
-  it('add + commit creates objects and updates ref', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    await run(kernel, 'git init /repo');
-    await kernel.writeFile('/repo/hello.txt', 'hello world\n');
-    await run(kernel, 'git -C /repo add hello.txt');
-    await run(kernel, "git -C /repo commit -m 'first commit'");
-
-    expect(await vfs.exists('/repo/.git/refs/heads/main')).toBe(true);
-  });
-
-  it('branch lists branches with current marked', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    await run(kernel, 'git init /repo');
-    await kernel.writeFile('/repo/file.txt', 'content\n');
-    await run(kernel, 'git -C /repo add file.txt');
-    await run(kernel, "git -C /repo commit -m 'init'");
-
-    const result = await run(kernel, 'git -C /repo branch');
-    expect(result.stdout.trim()).toBe('* main');
-  });
-
-  it('checkout -b creates a new branch', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    await run(kernel, 'git init /repo');
-    await kernel.writeFile('/repo/file.txt', 'content\n');
-    await run(kernel, 'git -C /repo add file.txt');
-    await run(kernel, "git -C /repo commit -m 'init'");
-
-    await run(kernel, 'git -C /repo checkout -b feature');
-
-    const result = await run(kernel, 'git -C /repo branch');
-    const lines = result.stdout.trim().split('\n').map((l: string) => l.trim());
-    expect(lines).toContain('* feature');
-    expect(lines).toContain('main');
-  });
-
-  it('full quickstart scenario: init, commit, branch, clone, checkout', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    // Create origin repo
-    await run(kernel, 'git init /tmp/origin');
-    await kernel.writeFile('/tmp/origin/README.md', '# demo repo\n');
-    await run(kernel, 'git -C /tmp/origin add README.md');
-    await run(kernel, "git -C /tmp/origin commit -m 'initial commit'");
-
-    // Check default branch
-    let r = await run(kernel, 'git -C /tmp/origin branch');
-    expect(r.stdout.trim()).toBe('* main');
-
-    // Create feature branch with a new file
-    await run(kernel, 'git -C /tmp/origin checkout -b feature');
-    await kernel.writeFile('/tmp/origin/feature.txt', 'checked out from feature\n');
-    await run(kernel, 'git -C /tmp/origin add feature.txt');
-    await run(kernel, "git -C /tmp/origin commit -m 'add feature file'");
-
-    // Switch back to main
-    await run(kernel, 'git -C /tmp/origin checkout main');
-
-    // Clone
-    await run(kernel, 'git clone /tmp/origin /tmp/clone');
-
-    // Clone should only show main branch initially
-    r = await run(kernel, 'git -C /tmp/clone branch');
-    expect(r.stdout.trim()).toBe('* main');
-
-    // Checkout feature (DWIM from remote tracking)
-    await run(kernel, 'git -C /tmp/clone checkout feature');
-
-    // Now both branches should be listed
-    r = await run(kernel, 'git -C /tmp/clone branch');
-    const branches = r.stdout.trim().split('\n').map((l: string) => l.trim());
-    expect(branches).toContain('* feature');
-    expect(branches).toContain('main');
-
-    // Verify feature file exists in clone
-    const featureContent = new TextDecoder().decode(await vfs.readFile('/tmp/clone/feature.txt'));
-    expect(featureContent).toBe('checked out from feature\n');
-
-    // Verify README exists too
-    const readmeContent = new TextDecoder().decode(await vfs.readFile('/tmp/clone/README.md'));
-    expect(readmeContent).toBe('# demo repo\n');
-  });
-
-  it('clone without an explicit destination uses the source basename', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    await run(kernel, 'git init /tmp/origin');
-    await kernel.writeFile('/tmp/origin/README.md', 'default destination\n');
-    await run(kernel, 'git -C /tmp/origin add README.md');
-    await run(kernel, "git -C /tmp/origin commit -m 'seed'");
-
-    await run(kernel, 'mkdir -p /work');
-    await run(kernel, 'git -C /work clone /tmp/origin');
-
-    expect(await vfs.exists('/work/origin/.git/HEAD')).toBe(true);
-    const readmeContent = new TextDecoder().decode(await vfs.readFile('/work/origin/README.md'));
-    expect(readmeContent).toBe('default destination\n');
-  });
-
-  it('clone without an explicit destination strips a trailing .git suffix', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    await run(kernel, 'git init /tmp/origin.git');
-    await kernel.writeFile('/tmp/origin.git/README.md', 'suffix destination\n');
-    await run(kernel, 'git -C /tmp/origin.git add README.md');
-    await run(kernel, "git -C /tmp/origin.git commit -m 'seed'");
-
-    await run(kernel, 'mkdir -p /work');
-    await run(kernel, 'git -C /work clone /tmp/origin.git');
-
-    expect(await vfs.exists('/work/origin/.git/HEAD')).toBe(true);
-    const readmeContent = new TextDecoder().decode(await vfs.readFile('/work/origin/README.md'));
-    expect(readmeContent).toBe('suffix destination\n');
-  });
-
-  it('clone into an existing empty destination directory succeeds', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    await run(kernel, 'git init /tmp/origin');
-    await kernel.writeFile('/tmp/origin/README.md', 'empty destination\n');
-    await run(kernel, 'git -C /tmp/origin add README.md');
-    await run(kernel, "git -C /tmp/origin commit -m 'seed'");
-
-    await run(kernel, 'mkdir -p /tmp/clone');
-    await run(kernel, 'git clone /tmp/origin /tmp/clone');
-
-    expect(await vfs.exists('/tmp/clone/.git/HEAD')).toBe(true);
-    const readmeContent = new TextDecoder().decode(await vfs.readFile('/tmp/clone/README.md'));
-    expect(readmeContent).toBe('empty destination\n');
-  });
-
-  it('clone rejects a non-empty destination directory', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    await run(kernel, 'git init /tmp/origin');
-    await kernel.writeFile('/tmp/origin/README.md', 'origin\n');
-    await run(kernel, 'git -C /tmp/origin add README.md');
-    await run(kernel, "git -C /tmp/origin commit -m 'seed'");
-
-    await run(kernel, 'mkdir -p /tmp/clone');
-    await kernel.writeFile('/tmp/clone/existing.txt', 'keep me\n');
-
-    const result = await kernel.exec('git clone /tmp/origin /tmp/clone');
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toMatch(/already exists|not an empty directory|destination/i);
-
-    const existing = new TextDecoder().decode(await vfs.readFile('/tmp/clone/existing.txt'));
-    expect(existing).toBe('keep me\n');
-    expect(await vfs.exists('/tmp/clone/.git')).toBe(false);
-  });
-
-  it('clone of a missing repository fails without leaving a partial destination', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    const result = await kernel.exec('git clone /tmp/missing /tmp/clone');
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toMatch(/not a git repository|missing|no such file|fatal/i);
-    expect(await vfs.exists('/tmp/clone')).toBe(false);
-  });
-
-  it('clone of an empty repository succeeds and leaves an empty worktree', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    await run(kernel, 'git init /tmp/origin');
-    await run(kernel, 'git clone /tmp/origin /tmp/clone');
-
-    const head = new TextDecoder().decode(await vfs.readFile('/tmp/clone/.git/HEAD'));
-    expect(head.trim()).toBe('ref: refs/heads/main');
-    expect(await vfs.exists('/tmp/clone/.git/config')).toBe(true);
-    expect(await vfs.exists('/tmp/clone/.git/refs/heads/main')).toBe(false);
-    expect(await vfs.exists('/tmp/clone/README.md')).toBe(false);
-  });
-
-  it('clone preserves nested directory trees', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    await run(kernel, 'git init /tmp/origin');
-    await run(kernel, 'mkdir -p /tmp/origin/src/nested');
-    await kernel.writeFile('/tmp/origin/src/nested/file.txt', 'nested payload\n');
-    await kernel.writeFile('/tmp/origin/src/root.txt', 'root payload\n');
-    await run(kernel, 'git -C /tmp/origin add src/nested/file.txt src/root.txt');
-    await run(kernel, "git -C /tmp/origin commit -m 'nested tree'");
-
-    await run(kernel, 'git clone /tmp/origin /tmp/clone');
-
-    const nested = new TextDecoder().decode(await vfs.readFile('/tmp/clone/src/nested/file.txt'));
-    const root = new TextDecoder().decode(await vfs.readFile('/tmp/clone/src/root.txt'));
-    expect(nested).toBe('nested payload\n');
-    expect(root).toBe('root payload\n');
-  });
-
-  it('clone honors the source default branch when HEAD is not main', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    await run(kernel, 'git init /tmp/origin');
-    await kernel.writeFile('/tmp/origin/README.md', 'main branch\n');
-    await run(kernel, 'git -C /tmp/origin add README.md');
-    await run(kernel, "git -C /tmp/origin commit -m 'main'");
-
-    await run(kernel, 'git -C /tmp/origin checkout -b trunk');
-    await kernel.writeFile('/tmp/origin/trunk.txt', 'trunk branch\n');
-    await run(kernel, 'git -C /tmp/origin add trunk.txt');
-    await run(kernel, "git -C /tmp/origin commit -m 'trunk'");
-
-    await run(kernel, 'git clone /tmp/origin /tmp/clone');
-
-    const head = new TextDecoder().decode(await vfs.readFile('/tmp/clone/.git/HEAD'));
-    expect(head.trim()).toBe('ref: refs/heads/trunk');
-    expect(await vfs.exists('/tmp/clone/.git/refs/heads/trunk')).toBe(true);
-    const trunk = new TextDecoder().decode(await vfs.readFile('/tmp/clone/trunk.txt'));
-    expect(trunk).toBe('trunk branch\n');
-  });
-
-  it('clone copies nested branch refs and checkout DWIM works for branch names with slashes', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    await run(kernel, 'git init /tmp/origin');
-    await kernel.writeFile('/tmp/origin/README.md', '# demo repo\n');
-    await run(kernel, 'git -C /tmp/origin add README.md');
-    await run(kernel, "git -C /tmp/origin commit -m 'initial commit'");
-
-    await run(kernel, 'git -C /tmp/origin checkout -b feature/deep');
-    await kernel.writeFile('/tmp/origin/feature.txt', 'nested branch payload\n');
-    await run(kernel, 'git -C /tmp/origin add feature.txt');
-    await run(kernel, "git -C /tmp/origin commit -m 'nested branch'");
-    await run(kernel, 'git -C /tmp/origin checkout main');
-
-    await run(kernel, 'git clone /tmp/origin /tmp/clone');
-
-    expect(await vfs.exists('/tmp/clone/.git/refs/remotes/origin/feature/deep')).toBe(true);
-
-    await run(kernel, 'git -C /tmp/clone checkout feature/deep');
-    const featureContent = new TextDecoder().decode(await vfs.readFile('/tmp/clone/feature.txt'));
-    expect(featureContent).toBe('nested branch payload\n');
-    const head = new TextDecoder().decode(await vfs.readFile('/tmp/clone/.git/HEAD'));
-    expect(head.trim()).toBe('ref: refs/heads/feature/deep');
-  });
-
-  it('clone works with relative source and destination paths', async () => {
-    ({ kernel, vfs, dispose } = await createGitKernel());
-
-    await run(kernel, 'mkdir -p /tmp/work');
-    await run(kernel, 'git init /tmp/work/origin');
-    await kernel.writeFile('/tmp/work/origin/README.md', 'relative clone\n');
-    await run(kernel, 'git -C /tmp/work/origin add README.md');
-    await run(kernel, "git -C /tmp/work/origin commit -m 'seed'");
-
-    await run(kernel, 'git -C /tmp/work clone ./origin ./clone');
-
-    expect(await vfs.exists('/tmp/work/clone/.git/HEAD')).toBe(true);
-    const readmeContent = new TextDecoder().decode(await vfs.readFile('/tmp/work/clone/README.md'));
-    expect(readmeContent).toBe('relative clone\n');
-  });
-
-  it('push fails with a typed unsupported-subcommand error', async () => {
-    ({ kernel, dispose } = await createGitKernel());
-
-    await run(kernel, 'git init /tmp/repo');
-
-    const result = await kernel.exec('git -C /tmp/repo push origin main');
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toContain('GitSubcommandUnsupported');
-    expect(result.stderr).toContain('git push');
-    expect(result.stderr).toContain('registry/native/crates/libs/git/README.md');
-  });
-
-  it('clone rejects SSH-style remotes with a typed unsupported-subcommand error', async () => {
-    ({ kernel, dispose } = await createGitKernel());
-
-    const result = await kernel.exec('git clone git@github.com:rivet-dev/agentos.git /tmp/clone');
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toContain('GitSubcommandUnsupported');
-    expect(result.stderr).toContain('git clone');
-    expect(result.stderr).toContain('SSH');
-    expect(result.stderr).toContain('registry/native/crates/libs/git/README.md');
-  });
-
-  it('clone rejects authenticated HTTPS remotes loudly instead of attempting a broken auth flow', async () => {
-    ({ kernel, dispose } = await createGitKernel());
-
-    const result = await kernel.exec(
-      'git clone https://private@example.com/owner/repo.git /tmp/clone',
-      { env: { GIT_AUTH_TOKEN: 'test-token' } },
-    );
-    expect(result.exitCode).not.toBe(0);
-    expect(result.stderr).toContain('GitSubcommandUnsupported');
-    expect(result.stderr).toContain('git clone');
-    expect(result.stderr).toContain('authenticated HTTP(S) remotes');
-    expect(result.stderr).toContain('registry/native/crates/libs/git/README.md');
-  });
-
-  describeIf(hasHostGit, 'remote clone over smart HTTP', () => {
-    let repoRoot: string;
-    let httpServer: HttpServer;
-    let httpPort: number;
-
-    beforeAll(async () => {
-      repoRoot = mkdtempSync(join(tmpdir(), 'agentos-git-http-'));
-      const worktree = join(repoRoot, 'worktree');
-      const origin = join(repoRoot, 'origin.git');
-
-      runHostGit(['-c', 'init.defaultBranch=main', 'init', worktree]);
-      writeFileSync(join(worktree, 'README.md'), 'remote smart clone\n');
-      runHostGit(['-C', worktree, 'add', 'README.md']);
-      runHostGit([
-        '-C', worktree,
-        '-c', 'user.name=secure-exec',
-        '-c', 'user.email=agent@example.com',
-        'commit',
-        '-m',
-        'seed',
-      ]);
-
-      runHostGit(['-C', worktree, 'checkout', '-b', 'feature/deep']);
-      writeFileSync(join(worktree, 'feature.txt'), 'remote branch payload\n');
-      runHostGit(['-C', worktree, 'add', 'feature.txt']);
-      runHostGit([
-        '-C', worktree,
-        '-c', 'user.name=secure-exec',
-        '-c', 'user.email=agent@example.com',
-        'commit',
-        '-m',
-        'feature branch',
-      ]);
-
-      runHostGit(['-C', worktree, 'checkout', 'main']);
-      runHostGit(['clone', '--bare', worktree, origin]);
-      runHostGit(['-C', origin, 'repack', '-a', '-d', '-f', '--depth=50', '--window=50']);
-
-      httpServer = createServer((req, res) => {
-        const url = new URL(req.url ?? '/', 'http://127.0.0.1');
-        const bodyChunks: Buffer[] = [];
-
-        req.on('data', (chunk) => {
-          bodyChunks.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
-        });
-
-        req.on('end', () => {
-          const requestBody = Buffer.concat(bodyChunks);
-          const gitProtocol = req.headers['git-protocol'];
-          const env = {
-            ...process.env,
-            GIT_HTTP_EXPORT_ALL: '1',
-            GIT_PROJECT_ROOT: repoRoot,
-            PATH_INFO: url.pathname,
-            QUERY_STRING: url.search.startsWith('?') ? url.search.slice(1) : url.search,
-            REQUEST_METHOD: req.method ?? 'GET',
-            CONTENT_TYPE: String(req.headers['content-type'] ?? ''),
-            CONTENT_LENGTH: String(requestBody.length),
-            REMOTE_ADDR: '127.0.0.1',
-            GIT_PROTOCOL: typeof gitProtocol === 'string' ? gitProtocol : '',
-            HTTP_GIT_PROTOCOL: typeof gitProtocol === 'string' ? gitProtocol : '',
-          };
-
-          const child = spawn('git', ['http-backend'], { env });
-          const stdout: Buffer[] = [];
-          const stderr: Buffer[] = [];
-
-          child.stdout.on('data', (chunk) => {
-            stdout.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
-          });
-          child.stderr.on('data', (chunk) => {
-            stderr.push(Buffer.isBuffer(chunk) ? chunk : Buffer.from(chunk));
-          });
-          child.on('error', (error) => {
-            res.writeHead(500, { 'Content-Type': 'text/plain' });
-            res.end(String(error));
-          });
-          child.on('close', (code) => {
-            const output = Buffer.concat(stdout);
-            const headerSep = output.indexOf(Buffer.from('\r\n\r\n'));
-            const altSep = output.indexOf(Buffer.from('\n\n'));
-            const sepIndex = headerSep >= 0 ? headerSep : altSep;
-            const sepLen = headerSep >= 0 ? 4 : altSep >= 0 ? 2 : 0;
-
-            if (code !== 0 && sepIndex === -1) {
-              res.writeHead(500, { 'Content-Type': 'text/plain' });
-              res.end(Buffer.concat(stderr));
-              return;
-            }
-
-            if (sepIndex === -1) {
-              res.writeHead(500, { 'Content-Type': 'text/plain' });
-              res.end(output);
-              return;
-            }
-
-            const headerText = output.subarray(0, sepIndex).toString('utf8');
-            const responseBody = output.subarray(sepIndex + sepLen);
-            let status = 200;
-            const headers: Record<string, string> = {};
-
-            for (const line of headerText.split(/\r?\n/)) {
-              if (!line) continue;
-              const colon = line.indexOf(':');
-              if (colon === -1) continue;
-              const name = line.slice(0, colon);
-              const value = line.slice(colon + 1).trim();
-              if (name.toLowerCase() === 'status') {
-                status = Number.parseInt(value, 10) || 200;
-              } else {
-                headers[name] = value;
-              }
-            }
-
-            res.writeHead(status, headers);
-            res.end(responseBody);
-          });
-
-          child.stdin.end(requestBody);
-        });
-      });
-
-      await new Promise<void>((resolveListen) => {
-        httpServer.listen(0, '127.0.0.1', resolveListen);
-      });
-      httpPort = (httpServer.address() as import('node:net').AddressInfo).port;
-    });
-
-    afterAll(async () => {
-      await new Promise<void>((resolveClose) => httpServer.close(() => resolveClose()));
-      rmSync(repoRoot, { recursive: true, force: true });
-    });
-
-    it('clone fetches refs and worktree contents from a smart HTTP remote', async () => {
-      ({ kernel, vfs, dispose } = await createGitKernelWithNet([httpPort]));
-
-      await run(kernel, `git clone http://127.0.0.1:${httpPort}/origin.git /tmp/clone`);
-
-      const head = new TextDecoder().decode(await kernel.readFile('/tmp/clone/.git/HEAD'));
-      expect(head.trim()).toBe('ref: refs/heads/main');
-
-      const readme = new TextDecoder().decode(await kernel.readFile('/tmp/clone/README.md'));
-      expect(readme).toBe('remote smart clone\n');
-      expect(await kernel.exists('/tmp/clone/.git/refs/remotes/origin/feature/deep')).toBe(true);
-
-      await run(kernel, 'git -C /tmp/clone checkout feature/deep');
-      const feature = new TextDecoder().decode(await kernel.readFile('/tmp/clone/feature.txt'));
-      expect(feature).toBe('remote branch payload\n');
-    });
-  });
-});
diff --git a/registry/tests/wasmvm/libc-test-conformance.test.ts b/registry/tests/wasmvm/libc-test-conformance.test.ts
deleted file mode 100644
index 5211783d9..000000000
--- a/registry/tests/wasmvm/libc-test-conformance.test.ts
+++ /dev/null
@@ -1,387 +0,0 @@
-/**
- * Kernel behavior conformance tests — musl libc-test suite
- *
- * Discovers all compiled libc-test WASM binaries (functional/ and regression/),
- * checks them against the exclusion list, and runs everything not excluded
- * through the WasmVM kernel. Native binaries are run for parity comparison.
- *
- * Unlike os-test (which tests libc function correctness), libc-test exercises
- * kernel-level behavior: file locking, socket operations, stat edge cases,
- * signal delivery, and process management.
- *
- * Tests skip gracefully when WASM binaries are not built.
- */
-
-import { describe, it, expect, beforeAll, afterAll } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import {
-  COMMANDS_DIR,
-  C_BUILD_DIR,
-  createInMemoryFileSystem,
-  createKernel,
-  describeIf,
-  hasWasmBinaries,
-} from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-import {
-  existsSync,
-  readdirSync,
-  statSync,
-  symlinkSync,
-  mkdtempSync,
-  rmSync,
-  writeFileSync,
-} from 'node:fs';
-import { spawn } from 'node:child_process';
-import { join } from 'node:path';
-import { tmpdir } from 'node:os';
-interface ExclusionEntry {
-  expected: 'fail' | 'skip';
-  reason: string;
-  category: string;
-  issue?: string;
-}
-import exclusionsData from './libc-test-exclusions.json' with { type: 'json' };
-
-// ── Paths ──────────────────────────────────────────────────────────────
-
-const LIBC_TEST_WASM_DIR = join(C_BUILD_DIR, 'libc-test');
-const LIBC_TEST_NATIVE_DIR = join(C_BUILD_DIR, 'native', 'libc-test');
-const REPORT_PATH = join(C_BUILD_DIR, '..', '..', 'libc-test-conformance-report.json');
-
-const TEST_TIMEOUT_MS = 30_000;
-const NATIVE_TIMEOUT_MS = 25_000;
-
-const hasLibcTestWasm = existsSync(LIBC_TEST_WASM_DIR);
-
-// ── Skip guard ─────────────────────────────────────────────────────────
-
-function skipReason(): string | false {
-  if (!hasWasmBinaries) return 'WASM runtime binaries not built (run make wasm in native/wasmvm/)';
-  if (!hasLibcTestWasm) return 'libc-test WASM binaries not built (run make -C native/wasmvm/c libc-test)';
-  return false;
-}
-
-// ── Test discovery ─────────────────────────────────────────────────────
-
-function discoverTests(dir: string, prefix = ''): string[] {
-  if (!existsSync(dir)) return [];
-  const results: string[] = [];
-  for (const entry of readdirSync(dir, { withFileTypes: true })) {
-    const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
-    if (entry.isDirectory()) {
-      results.push(...discoverTests(join(dir, entry.name), rel));
-    } else {
-      results.push(rel);
-    }
-  }
-  return results.sort();
-}
-
-// ── Native binary runner ───────────────────────────────────────────────
-
-function runNative(
-  path: string,
-  cwd?: string,
-): Promise<{ exitCode: number; stdout: string; stderr: string }> {
-  return new Promise((res) => {
-    const proc = spawn(path, [], { stdio: ['pipe', 'pipe', 'pipe'], cwd });
-    let stdout = '';
-    let stderr = '';
-    const timer = setTimeout(() => {
-      proc.kill('SIGKILL');
-    }, NATIVE_TIMEOUT_MS);
-
-    proc.stdout.on('data', (d: Buffer) => { stdout += d.toString(); });
-    proc.stderr.on('data', (d: Buffer) => { stderr += d.toString(); });
-    proc.stdin.end();
-    proc.on('close', (code) => {
-      clearTimeout(timer);
-      res({ exitCode: code ?? 1, stdout, stderr });
-    });
-  });
-}
-
-// ── Flat symlink directory for command resolution ──────────────────────
-
-function toFlatName(testName: string): string {
-  return 'libc-test--' + testName.replaceAll('/', '--');
-}
-
-const allTests = hasLibcTestWasm ? discoverTests(LIBC_TEST_WASM_DIR) : [];
-let FLAT_CMD_DIR: string | undefined;
-
-if (allTests.length > 0) {
-  FLAT_CMD_DIR = mkdtempSync(join(tmpdir(), 'libc-test-'));
-  for (const test of allTests) {
-    symlinkSync(join(LIBC_TEST_WASM_DIR, test), join(FLAT_CMD_DIR, toFlatName(test)));
-  }
-}
-
-// ── Exclusion map ──────────────────────────────────────────────────────
-
-const exclusions = exclusionsData.exclusions as Record<string, ExclusionEntry>;
-
-// ── Group by suite ─────────────────────────────────────────────────────
-
-const bySuite = new Map<string, string[]>();
-for (const test of allTests) {
-  const suite = test.includes('/') ? test.split('/')[0] : 'root';
-  if (!bySuite.has(suite)) bySuite.set(suite, []);
-  bySuite.get(suite)!.push(test);
-}
-
-// ── Result tracking ────────────────────────────────────────────────────
-
-interface TestResult {
-  name: string;
-  suite: string;
-  status: 'pass' | 'fail' | 'skip';
-  wasmExitCode?: number;
-  nativeExitCode?: number;
-  wasmStdout?: string;
-  nativeStdout?: string;
-  wasmStderr?: string;
-  nativeStderr?: string;
-  error?: string;
-}
-
-const testResults: TestResult[] = [];
-
-// ── Report generation ──────────────────────────────────────────────────
-
-function writeConformanceReport(results: TestResult[]): void {
-  const suites: Record<string, { total: number; pass: number; fail: number; skip: number }> = {};
-  for (const r of results) {
-    if (!suites[r.suite]) suites[r.suite] = { total: 0, pass: 0, fail: 0, skip: 0 };
-    suites[r.suite].total++;
-    suites[r.suite][r.status]++;
-  }
-
-  const total = results.length;
-  const pass = results.filter((r) => r.status === 'pass').length;
-  const fail = results.filter((r) => r.status === 'fail').length;
-  const skip = results.filter((r) => r.status === 'skip').length;
-  const passRate = total - skip > 0
-    ? ((pass / (total - skip)) * 100).toFixed(1)
-    : '0.0';
-
-  const nativeVerifiedCount = results.filter(
-    (r) => r.status === 'pass' && r.nativeExitCode !== undefined,
-  ).length;
-
-  const report = {
-    libcTestVersion: exclusionsData.libcTestVersion,
-    timestamp: new Date().toISOString(),
-    total,
-    pass,
-    fail,
-    skip,
-    passRate: `${passRate}%`,
-    nativeVerified: nativeVerifiedCount,
-    suites,
-    tests: results,
-  };
-
-  writeFileSync(REPORT_PATH, JSON.stringify(report, null, 2));
-}
-
-function printSummary(results: TestResult[]): void {
-  const suites: Record<string, { total: number; pass: number; fail: number; skip: number }> = {};
-  for (const r of results) {
-    if (!suites[r.suite]) suites[r.suite] = { total: 0, pass: 0, fail: 0, skip: 0 };
-    suites[r.suite].total++;
-    suites[r.suite][r.status]++;
-  }
-
-  const total = results.length;
-  const pass = results.filter((r) => r.status === 'pass').length;
-  const fail = results.filter((r) => r.status === 'fail').length;
-  const skip = results.filter((r) => r.status === 'skip').length;
-  const mustPass = total - skip;
-  const passRate = mustPass > 0 ? ((pass / mustPass) * 100).toFixed(1) : '—';
-
-  console.log('');
-  console.log(`libc-test Conformance Summary (musl libc-test ${exclusionsData.libcTestVersion})`);
-  console.log('─'.repeat(60));
-  console.log(
-    'Suite'.padEnd(20) +
-    'Total'.padStart(8) +
-    'Pass'.padStart(8) +
-    'Fail'.padStart(8) +
-    'Skip'.padStart(8) +
-    'Rate'.padStart(10),
-  );
-
-  for (const [name, s] of Object.entries(suites).sort(([a], [b]) => a.localeCompare(b))) {
-    const runnable = s.total - s.skip;
-    const rate = runnable > 0
-      ? ((s.pass / runnable) * 100).toFixed(1) + '%'
-      : '—';
-    console.log(
-      name.padEnd(20) +
-      String(s.total).padStart(8) +
-      String(s.pass).padStart(8) +
-      String(s.fail).padStart(8) +
-      String(s.skip).padStart(8) +
-      rate.padStart(10),
-    );
-  }
-
-  console.log('─'.repeat(60));
-  console.log(
-    'TOTAL'.padEnd(20) +
-    String(total).padStart(8) +
-    String(pass).padStart(8) +
-    String(fail).padStart(8) +
-    String(skip).padStart(8) +
-    (passRate + (passRate !== '—' ? '%' : '')).padStart(10),
-  );
-
-  console.log(`Expected fail: ${fail}`);
-  console.log(`Must-pass:     ${mustPass - fail} (${pass} passing)`);
-  console.log('');
-}
-
-// ── Test suite ─────────────────────────────────────────────────────────
-
-describeIf(!skipReason(), 'libc-test conformance (musl)', () => {
-  afterAll(() => {
-    if (testResults.length > 0) {
-      writeConformanceReport(testResults);
-      printSummary(testResults);
-    }
-    if (FLAT_CMD_DIR) {
-      try { rmSync(FLAT_CMD_DIR, { recursive: true, force: true }); } catch { /* ignore */ }
-    }
-  });
-
-  for (const [suite, tests] of bySuite) {
-    describe(`libc-test/${suite}`, () => {
-      let kernel: Kernel;
-
-      const nativeSuiteCwd = join(LIBC_TEST_NATIVE_DIR, suite);
-
-      beforeAll(async () => {
-        // libc-test functional tests mostly operate on files they create
-        // themselves (mkstemp, etc.), so a minimal VFS is sufficient
-        const filesystem = createInMemoryFileSystem();
-        // Create /tmp for tests that use mkstemp/mkdtemp
-        await filesystem.mkdir('/tmp');
-        kernel = createKernel({ filesystem, cwd: '/tmp' });
-        await kernel.mount(
-          createWasmVmRuntime({ commandDirs: [FLAT_CMD_DIR!, COMMANDS_DIR] }),
-        );
-      });
-
-      afterAll(async () => {
-        await kernel?.dispose();
-      });
-
-      for (const testName of tests) {
-        const exclusion = exclusions[testName];
-
-        if (exclusion?.expected === 'skip') {
-          it(`${testName} — ${exclusion.reason}`, () => {});
-          testResults.push({ name: testName, suite, status: 'skip' });
-          continue;
-        }
-
-        it(testName, async () => {
-          const flatName = toFlatName(testName);
-
-          // Run natively (if binary exists)
-          const nativePath = join(LIBC_TEST_NATIVE_DIR, testName);
-          const nativeResult = existsSync(nativePath)
-            ? await runNative(nativePath, existsSync(nativeSuiteCwd) ? nativeSuiteCwd : undefined)
-            : null;
-
-          // Run in WASM via kernel.spawn()
-          const stdoutChunks: Uint8Array[] = [];
-          const stderrChunks: Uint8Array[] = [];
-          const proc = kernel.spawn(flatName, [], {
-            onStdout: (d) => stdoutChunks.push(d),
-            onStderr: (d) => stderrChunks.push(d),
-            timeout: NATIVE_TIMEOUT_MS,
-          });
-          proc.closeStdin();
-          const wasmExitCode = await proc.wait();
-          const wasmStdout = Buffer.concat(stdoutChunks).toString();
-          const wasmStderr = Buffer.concat(stderrChunks).toString();
-          const wasmResult = { exitCode: wasmExitCode, stdout: wasmStdout, stderr: wasmStderr };
-
-          if (exclusion?.expected === 'fail') {
-            // Known failure — must still fail
-            const exitOk = wasmResult.exitCode === 0;
-            const parityOk = !nativeResult || nativeResult.exitCode !== 0 ||
-              wasmResult.stdout.trim() === nativeResult.stdout.trim();
-            const nativeParityPass = !!nativeResult &&
-              nativeResult.exitCode !== 0 &&
-              wasmResult.exitCode === nativeResult.exitCode &&
-              wasmResult.stdout.trim() === nativeResult.stdout.trim();
-
-            if ((exitOk && parityOk) || nativeParityPass) {
-              testResults.push({
-                name: testName, suite, status: 'pass',
-                wasmExitCode: 0, nativeExitCode: nativeResult?.exitCode,
-                wasmStdout: wasmStdout || undefined,
-                wasmStderr: wasmStderr || undefined,
-              });
-              throw new Error(
-                `${testName} is excluded as "fail" but now passes! ` +
-                'Remove it from libc-test-exclusions.json to lock in this fix.',
-              );
-            }
-            testResults.push({
-              name: testName, suite, status: 'fail',
-              wasmExitCode: wasmResult.exitCode,
-              nativeExitCode: nativeResult?.exitCode,
-              wasmStdout: wasmStdout || undefined,
-              wasmStderr: wasmStderr || undefined,
-            });
-          } else {
-            // Not excluded — must pass (or match native failure exactly)
-            try {
-              // libc-test pass = exit 0, no stdout output
-              // libc-test fail = exit 1, error messages on stdout
-              if (nativeResult && nativeResult.exitCode !== 0 &&
-                  wasmResult.exitCode === nativeResult.exitCode &&
-                  wasmResult.stdout.trim() === nativeResult.stdout.trim()) {
-                // Both fail identically — native parity
-                testResults.push({
-                  name: testName, suite, status: 'pass',
-                  wasmExitCode: wasmResult.exitCode,
-                  nativeExitCode: nativeResult.exitCode,
-                });
-              } else {
-                expect(wasmResult.exitCode).toBe(0);
-
-                // Native parity: if native passes, output should match
-                // (libc-test passes produce no stdout)
-                if (nativeResult && nativeResult.exitCode === 0) {
-                  expect(wasmResult.stdout.trim()).toBe(nativeResult.stdout.trim());
-                }
-
-                testResults.push({
-                  name: testName, suite, status: 'pass',
-                  wasmExitCode: wasmResult.exitCode,
-                  nativeExitCode: nativeResult?.exitCode,
-                });
-              }
-            } catch (err) {
-              testResults.push({
-                name: testName, suite, status: 'fail',
-                wasmExitCode: wasmResult.exitCode,
-                nativeExitCode: nativeResult?.exitCode,
-                wasmStdout: wasmStdout || undefined,
-                wasmStderr: wasmStderr || undefined,
-                error: (err as Error).message,
-              });
-              throw err;
-            }
-          }
-        }, TEST_TIMEOUT_MS);
-      }
-    });
-  }
-});
diff --git a/registry/tests/wasmvm/libc-test-exclusions.json b/registry/tests/wasmvm/libc-test-exclusions.json
deleted file mode 100644
index b9dde5dd7..000000000
--- a/registry/tests/wasmvm/libc-test-exclusions.json
+++ /dev/null
@@ -1,43 +0,0 @@
-{
-  "libcTestVersion": "master",
-  "sourceCommit": "master",
-  "lastUpdated": "2026-03-26",
-  "exclusions": {
-    "functional/dlopen_dso": {
-      "expected": "fail",
-      "category": "wasm-limitation",
-      "reason": "dlopen/dlsym not available in wasm32-wasip1 — no dynamic linking support",
-      "issue": "https://github.com/rivet-dev/agentos/pull/48"
-    },
-    "functional/tls_align_dso": {
-      "expected": "fail",
-      "category": "wasm-limitation",
-      "reason": "Thread-local storage with dynamic shared objects requires dlopen — not available in WASM",
-      "issue": "https://github.com/rivet-dev/agentos/pull/48"
-    },
-    "functional/tls_init_dso": {
-      "expected": "fail",
-      "category": "wasm-limitation",
-      "reason": "Thread-local storage initialization with DSOs requires dlopen — not available in WASM",
-      "issue": "https://github.com/rivet-dev/agentos/pull/48"
-    },
-    "functional/strptime": {
-      "expected": "fail",
-      "category": "implementation-gap",
-      "reason": "strptime fails on timezone-related format specifiers (%Z, %z) — musl timezone code is ifdef'd out for WASI",
-      "issue": "https://github.com/rivet-dev/agentos/pull/48"
-    },
-    "regression/statvfs": {
-      "expected": "fail",
-      "category": "wasi-gap",
-      "reason": "statvfs/fstatvfs not part of WASI — no filesystem statistics interface",
-      "issue": "https://github.com/rivet-dev/agentos/pull/48"
-    },
-    "regression/tls_get_new-dtv_dso": {
-      "expected": "fail",
-      "category": "wasm-limitation",
-      "reason": "TLS dynamic thread vector with DSOs requires dlopen — not available in WASM",
-      "issue": "https://github.com/rivet-dev/agentos/pull/48"
-    }
-  }
-}
diff --git a/registry/tests/wasmvm/net-server.test.ts b/registry/tests/wasmvm/net-server.test.ts
deleted file mode 100644
index c94336362..000000000
--- a/registry/tests/wasmvm/net-server.test.ts
+++ /dev/null
@@ -1,196 +0,0 @@
-/**
- * Integration test for WasmVM TCP server sockets.
- *
- * Spawns the tcp_server C program as WASM (bind → listen → accept → recv →
- * send "pong" → close), connects to it from the kernel as a client socket,
- * and verifies the full data exchange via loopback routing.
- */
-
-import { describe, it, expect, beforeEach, afterEach } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import {
-  AF_INET,
-  COMMANDS_DIR,
-  C_BUILD_DIR,
-  createKernel,
-  describeIf,
-  hasWasmBinaries,
-  SOCK_STREAM,
-} from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-import { existsSync } from 'node:fs';
-import { join } from 'node:path';
-
-const hasCWasmBinaries = existsSync(join(C_BUILD_DIR, 'tcp_server'));
-
-function skipReason(): string | false {
-  if (!hasWasmBinaries) return 'WASM binaries not built (run make wasm in native/wasmvm/)';
-  if (!hasCWasmBinaries) return 'tcp_server WASM binary not built (run make -C native/wasmvm/c sysroot && make -C native/wasmvm/c programs)';
-  return false;
-}
-
-// Minimal in-memory VFS (same as c-parity)
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-  private symlinks = new Map<string, string>();
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async pread(path: string, offset: number, length: number): Promise<Uint8Array> {
-    const data = await this.readFile(path);
-    return data.slice(offset, offset + length);
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map((name) => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) { this.dirs.add(path); }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path) || this.symlinks.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const isSymlink = this.symlinks.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !isSymlink && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isSymlink ? 0o120777 : (isDir ? 0o40755 : 0o100644),
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: isSymlink,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  async chmod() {}
-  async rename(from: string, to: string) {
-    const data = this.files.get(from);
-    if (data) { this.files.set(to, data); this.files.delete(from); }
-  }
-  async unlink(path: string) { this.files.delete(path); this.symlinks.delete(path); }
-  async rmdir(path: string) { this.dirs.delete(path); }
-  async symlink(target: string, linkPath: string) {
-    this.symlinks.set(linkPath, target);
-    const parts = linkPath.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async readlink(path: string): Promise<string> {
-    const target = this.symlinks.get(path);
-    if (!target) throw new Error(`EINVAL: ${path}`);
-    return target;
-  }
-}
-
-// Wait for a kernel socket listener on the given port (poll with timeout)
-async function waitForListener(
-  kernel: Kernel,
-  port: number,
-  timeoutMs = 10_000,
-): Promise<void> {
-  const deadline = Date.now() + timeoutMs;
-  while (Date.now() < deadline) {
-    const listener = kernel.socketTable.findListener({ host: '0.0.0.0', port });
-    if (listener) return;
-    await new Promise((r) => setTimeout(r, 20));
-  }
-  throw new Error(`Timed out waiting for listener on port ${port}`);
-}
-
-const TEST_PORT = 9876;
-const CLIENT_PID = 999; // Fake PID for test-side client sockets
-
-describeIf(!skipReason(), 'WasmVM TCP server integration', { timeout: 30_000 }, () => {
-  let kernel: Kernel;
-  let vfs: SimpleVFS;
-
-  beforeEach(async () => {
-    vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-  });
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('tcp_server: accept connection, recv data, send pong', async () => {
-    // Start the WASM TCP server (blocks on accept until we connect)
-    const execPromise = kernel.exec(`tcp_server ${TEST_PORT}`);
-
-    // Wait for the server to finish bind+listen
-    await waitForListener(kernel, TEST_PORT);
-
-    // Create a client socket and connect via loopback
-    const st = kernel.socketTable;
-    const clientId = st.create(AF_INET, SOCK_STREAM, 0, CLIENT_PID);
-    await st.connect(clientId, { host: '127.0.0.1', port: TEST_PORT });
-
-    // Send "ping" to the server
-    const encoder = new TextEncoder();
-    st.send(clientId, encoder.encode('ping'));
-
-    // Wait for the server to process and send its reply
-    const decoder = new TextDecoder();
-    let reply = '';
-    const recvDeadline = Date.now() + 10_000;
-    while (Date.now() < recvDeadline) {
-      const chunk = st.recv(clientId, 256);
-      if (chunk && chunk.length > 0) {
-        reply += decoder.decode(chunk);
-        break;
-      }
-      // No data yet — yield to let the WASM worker process
-      await new Promise((r) => setTimeout(r, 20));
-    }
-
-    expect(reply).toBe('pong');
-
-    // Close client socket
-    st.close(clientId, CLIENT_PID);
-
-    // Wait for exec to complete (server exits after handling one connection)
-    const result = await execPromise;
-
-    expect(result.stdout).toContain('listening on port 9876');
-    expect(result.stdout).toContain('received: ping');
-    expect(result.stdout).toContain('sent: 4');
-    expect(result.exitCode).toBe(0);
-  });
-});
diff --git a/registry/tests/wasmvm/net-udp.test.ts b/registry/tests/wasmvm/net-udp.test.ts
deleted file mode 100644
index 98e6b9369..000000000
--- a/registry/tests/wasmvm/net-udp.test.ts
+++ /dev/null
@@ -1,234 +0,0 @@
-/**
- * Integration test for WasmVM UDP sockets.
- *
- * Spawns the udp_echo C program as WASM (bind → recvfrom → sendto echo → close),
- * sends datagrams from a kernel client socket, and verifies the echo response
- * and message boundary preservation.
- */
-
-import { describe, it, expect, beforeEach, afterEach } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import {
-  AF_INET,
-  COMMANDS_DIR,
-  C_BUILD_DIR,
-  createKernel,
-  describeIf,
-  hasWasmBinaries,
-  SOCK_DGRAM,
-} from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-import { existsSync } from 'node:fs';
-import { join } from 'node:path';
-
-const hasCWasmBinaries = existsSync(join(C_BUILD_DIR, 'udp_echo'));
-
-function skipReason(): string | false {
-  if (!hasWasmBinaries) return 'WASM binaries not built (run make wasm in native/wasmvm/)';
-  if (!hasCWasmBinaries) return 'udp_echo WASM binary not built (run make -C native/wasmvm/c sysroot && make -C native/wasmvm/c programs)';
-  return false;
-}
-
-// Minimal in-memory VFS (same as net-server)
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-  private symlinks = new Map<string, string>();
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async pread(path: string, offset: number, length: number): Promise<Uint8Array> {
-    const data = await this.readFile(path);
-    return data.slice(offset, offset + length);
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map((name) => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) { this.dirs.add(path); }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path) || this.symlinks.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const isSymlink = this.symlinks.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !isSymlink && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isSymlink ? 0o120777 : (isDir ? 0o40755 : 0o100644),
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: isSymlink,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  async chmod() {}
-  async rename(from: string, to: string) {
-    const data = this.files.get(from);
-    if (data) { this.files.set(to, data); this.files.delete(from); }
-  }
-  async unlink(path: string) { this.files.delete(path); this.symlinks.delete(path); }
-  async rmdir(path: string) { this.dirs.delete(path); }
-  async symlink(target: string, linkPath: string) {
-    this.symlinks.set(linkPath, target);
-    const parts = linkPath.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async readlink(path: string): Promise<string> {
-    const target = this.symlinks.get(path);
-    if (!target) throw new Error(`EINVAL: ${path}`);
-    return target;
-  }
-}
-
-// Wait for a kernel UDP binding on the given port (poll with timeout)
-async function waitForUdpBinding(
-  kernel: Kernel,
-  port: number,
-  timeoutMs = 10_000,
-): Promise<void> {
-  const deadline = Date.now() + timeoutMs;
-  while (Date.now() < deadline) {
-    const bound = kernel.socketTable.findBoundUdp({ host: '0.0.0.0', port });
-    if (bound) return;
-    await new Promise((r) => setTimeout(r, 20));
-  }
-  throw new Error(`Timed out waiting for UDP binding on port ${port}`);
-}
-
-const TEST_PORT = 9877;
-const CLIENT_PID = 999; // Fake PID for test-side client sockets
-
-describeIf(!skipReason(), 'WasmVM UDP integration', { timeout: 30_000 }, () => {
-  let kernel: Kernel;
-  let vfs: SimpleVFS;
-
-  beforeEach(async () => {
-    vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-  });
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('udp_echo: recv datagram and echo it back', async () => {
-    // Start the WASM UDP echo server (blocks on recvfrom until we send)
-    const execPromise = kernel.exec(`udp_echo ${TEST_PORT}`);
-
-    // Wait for the server to finish bind
-    await waitForUdpBinding(kernel, TEST_PORT);
-
-    // Create a client UDP socket and bind to an ephemeral port
-    const st = kernel.socketTable;
-    const clientId = st.create(AF_INET, SOCK_DGRAM, 0, CLIENT_PID);
-    await st.bind(clientId, { host: '127.0.0.1', port: 0 });
-
-    // Send "hello" to the echo server
-    const encoder = new TextEncoder();
-    st.sendTo(clientId, encoder.encode('hello'), 0, { host: '127.0.0.1', port: TEST_PORT });
-
-    // Wait for the echo response
-    const decoder = new TextDecoder();
-    let reply = '';
-    const recvDeadline = Date.now() + 10_000;
-    while (Date.now() < recvDeadline) {
-      const result = st.recvFrom(clientId, 1024);
-      if (result && result.data.length > 0) {
-        reply = decoder.decode(result.data);
-        break;
-      }
-      await new Promise((r) => setTimeout(r, 20));
-    }
-
-    expect(reply).toBe('hello');
-
-    // Close client socket
-    st.close(clientId, CLIENT_PID);
-
-    // Wait for exec to complete (server exits after echoing one datagram)
-    const result = await execPromise;
-
-    expect(result.stdout).toContain('listening on port 9877');
-    expect(result.stdout).toContain('received: hello');
-    expect(result.stdout).toContain('echoed: 5');
-    expect(result.exitCode).toBe(0);
-  });
-
-  it('udp_echo: message boundaries are preserved', async () => {
-    // Start the WASM UDP echo server
-    const execPromise = kernel.exec(`udp_echo ${TEST_PORT + 1}`);
-
-    // Wait for the server to finish bind
-    await waitForUdpBinding(kernel, TEST_PORT + 1);
-
-    // Create a client UDP socket
-    const st = kernel.socketTable;
-    const clientId = st.create(AF_INET, SOCK_DGRAM, 0, CLIENT_PID);
-    await st.bind(clientId, { host: '127.0.0.1', port: 0 });
-
-    // Send a message — the echo server echoes exactly one datagram
-    const encoder = new TextEncoder();
-    const msg = 'boundary-test-message';
-    st.sendTo(clientId, encoder.encode(msg), 0, { host: '127.0.0.1', port: TEST_PORT + 1 });
-
-    // Receive the echo — it must be the exact message (not fragmented/merged)
-    const decoder = new TextDecoder();
-    let reply = '';
-    const recvDeadline = Date.now() + 10_000;
-    while (Date.now() < recvDeadline) {
-      const result = st.recvFrom(clientId, 1024);
-      if (result && result.data.length > 0) {
-        reply = decoder.decode(result.data);
-        break;
-      }
-      await new Promise((r) => setTimeout(r, 20));
-    }
-
-    // Message boundary preserved: exact content, exact length
-    expect(reply).toBe(msg);
-    expect(reply.length).toBe(msg.length);
-
-    st.close(clientId, CLIENT_PID);
-    const result = await execPromise;
-    expect(result.exitCode).toBe(0);
-  });
-});
diff --git a/registry/tests/wasmvm/net-unix.test.ts b/registry/tests/wasmvm/net-unix.test.ts
deleted file mode 100644
index b4bac046b..000000000
--- a/registry/tests/wasmvm/net-unix.test.ts
+++ /dev/null
@@ -1,197 +0,0 @@
-/**
- * Integration test for WasmVM Unix domain sockets.
- *
- * Spawns the unix_socket C program as WASM (socket(AF_UNIX) → bind → listen →
- * accept → recv → send "pong" → close), connects from the kernel as a client,
- * and verifies data exchange via in-kernel loopback routing.
- */
-
-import { describe, it, expect, beforeEach, afterEach } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import {
-  AF_UNIX,
-  COMMANDS_DIR,
-  C_BUILD_DIR,
-  createKernel,
-  describeIf,
-  hasWasmBinaries,
-  SOCK_STREAM,
-} from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-import { existsSync } from 'node:fs';
-import { join } from 'node:path';
-
-const hasCWasmBinaries = existsSync(join(C_BUILD_DIR, 'unix_socket'));
-
-function skipReason(): string | false {
-  if (!hasWasmBinaries) return 'WASM binaries not built (run make wasm in native/wasmvm/)';
-  if (!hasCWasmBinaries) return 'unix_socket WASM binary not built (run make -C native/wasmvm/c sysroot && make -C native/wasmvm/c programs)';
-  return false;
-}
-
-// Minimal in-memory VFS (same as net-server)
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-  private symlinks = new Map<string, string>();
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async pread(path: string, offset: number, length: number): Promise<Uint8Array> {
-    const data = await this.readFile(path);
-    return data.slice(offset, offset + length);
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map((name) => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) { this.dirs.add(path); }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path) || this.symlinks.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const isSymlink = this.symlinks.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !isSymlink && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isSymlink ? 0o120777 : (isDir ? 0o40755 : 0o100644),
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: isSymlink,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  async chmod() {}
-  async rename(from: string, to: string) {
-    const data = this.files.get(from);
-    if (data) { this.files.set(to, data); this.files.delete(from); }
-  }
-  async unlink(path: string) { this.files.delete(path); this.symlinks.delete(path); }
-  async rmdir(path: string) { this.dirs.delete(path); }
-  async symlink(target: string, linkPath: string) {
-    this.symlinks.set(linkPath, target);
-    const parts = linkPath.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async readlink(path: string): Promise<string> {
-    const target = this.symlinks.get(path);
-    if (!target) throw new Error(`EINVAL: ${path}`);
-    return target;
-  }
-}
-
-// Wait for a kernel Unix domain socket listener at the given path (poll with timeout)
-async function waitForUnixListener(
-  kernel: Kernel,
-  path: string,
-  timeoutMs = 10_000,
-): Promise<void> {
-  const deadline = Date.now() + timeoutMs;
-  while (Date.now() < deadline) {
-    const listener = kernel.socketTable.findListener({ path });
-    if (listener) return;
-    await new Promise((r) => setTimeout(r, 20));
-  }
-  throw new Error(`Timed out waiting for Unix listener on ${path}`);
-}
-
-const SOCK_PATH = '/tmp/test.sock';
-const CLIENT_PID = 999; // Fake PID for test-side client sockets
-
-describeIf(!skipReason(), 'WasmVM Unix domain socket integration', { timeout: 30_000 }, () => {
-  let kernel: Kernel;
-  let vfs: SimpleVFS;
-
-  beforeEach(async () => {
-    vfs = new SimpleVFS();
-    // Create /tmp so the socket file can be created
-    await vfs.mkdir('/tmp');
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-  });
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('unix_socket: accept connection, recv data, send pong', async () => {
-    // Start the WASM Unix socket server (blocks on accept until we connect)
-    const execPromise = kernel.exec(`unix_socket ${SOCK_PATH}`);
-
-    // Wait for the server to finish bind+listen
-    await waitForUnixListener(kernel, SOCK_PATH);
-
-    // Create a client socket and connect via loopback
-    const st = kernel.socketTable;
-    const clientId = st.create(AF_UNIX, SOCK_STREAM, 0, CLIENT_PID);
-    await st.connect(clientId, { path: SOCK_PATH });
-
-    // Send "ping" to the server
-    const encoder = new TextEncoder();
-    st.send(clientId, encoder.encode('ping'));
-
-    // Wait for the server to process and send its reply
-    const decoder = new TextDecoder();
-    let reply = '';
-    const recvDeadline = Date.now() + 10_000;
-    while (Date.now() < recvDeadline) {
-      const chunk = st.recv(clientId, 256);
-      if (chunk && chunk.length > 0) {
-        reply += decoder.decode(chunk);
-        break;
-      }
-      await new Promise((r) => setTimeout(r, 20));
-    }
-
-    expect(reply).toBe('pong');
-
-    // Close client socket
-    st.close(clientId, CLIENT_PID);
-
-    // Wait for exec to complete (server exits after handling one connection)
-    const result = await execPromise;
-
-    expect(result.stdout).toContain(`listening on ${SOCK_PATH}`);
-    expect(result.stdout).toContain('received: ping');
-    expect(result.stdout).toContain('sent: 4');
-    expect(result.exitCode).toBe(0);
-  });
-});
diff --git a/registry/tests/wasmvm/os-test-conformance.test.ts b/registry/tests/wasmvm/os-test-conformance.test.ts
deleted file mode 100644
index d85cb14e9..000000000
--- a/registry/tests/wasmvm/os-test-conformance.test.ts
+++ /dev/null
@@ -1,492 +0,0 @@
-/**
- * POSIX conformance tests — os-test suite
- *
- * Discovers all compiled os-test WASM binaries, checks them against the
- * exclusion list, and runs everything not excluded through the WasmVM kernel.
- * Native binaries are run for parity comparison where available.
- *
- * Tests skip gracefully when WASM binaries are not built.
- */
-
-import { describe, it, expect, beforeAll, afterAll } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import {
-  COMMANDS_DIR,
-  C_BUILD_DIR,
-  createInMemoryFileSystem,
-  createKernel,
-  describeIf,
-  hasWasmBinaries,
-} from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-import {
-  existsSync,
-  readdirSync,
-  statSync,
-  symlinkSync,
-  mkdtempSync,
-  rmSync,
-  writeFileSync,
-} from 'node:fs';
-import { spawn } from 'node:child_process';
-import { resolve, join } from 'node:path';
-import { tmpdir } from 'node:os';
-
-interface ExclusionEntry {
-  expected: 'fail' | 'skip';
-  reason: string;
-  category: string;
-  issue?: string;
-}
-import exclusionsData from './os-test-exclusions.json' with { type: 'json' };
-
-// ── Paths ──────────────────────────────────────────────────────────────
-
-const C_SRC_DIR = resolve(C_BUILD_DIR, '..');
-const OS_TEST_WASM_DIR = join(C_BUILD_DIR, 'os-test');
-const OS_TEST_NATIVE_DIR = join(C_BUILD_DIR, 'native', 'os-test');
-const OS_TEST_SRC_DIR = join(C_SRC_DIR, 'os-test');
-const REPORT_PATH = join(C_BUILD_DIR, '..', '..', 'os-test-conformance-report.json');
-
-const TEST_TIMEOUT_MS = 30_000;
-const NATIVE_TIMEOUT_MS = 25_000;
-
-const hasOsTestWasm = existsSync(OS_TEST_WASM_DIR);
-
-// ── Skip guard ─────────────────────────────────────────────────────────
-
-function skipReason(): string | false {
-  if (!hasWasmBinaries) return 'WASM runtime binaries not built (run make wasm in native/wasmvm/)';
-  if (!hasOsTestWasm) return 'os-test WASM binaries not built (run make -C native/wasmvm/c os-test)';
-  return false;
-}
-
-// ── Test discovery ─────────────────────────────────────────────────────
-
-function discoverTests(dir: string, prefix = ''): string[] {
-  if (!existsSync(dir)) return [];
-  const results: string[] = [];
-  for (const entry of readdirSync(dir, { withFileTypes: true })) {
-    const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
-    if (entry.isDirectory()) {
-      results.push(...discoverTests(join(dir, entry.name), rel));
-    } else {
-      results.push(rel);
-    }
-  }
-  return results.sort();
-}
-
-// ── Native binary runner ───────────────────────────────────────────────
-
-function runNative(
-  path: string,
-  cwd?: string,
-): Promise<{ exitCode: number; stdout: string; stderr: string }> {
-  return new Promise((res) => {
-    const proc = spawn(path, [], { stdio: ['pipe', 'pipe', 'pipe'], cwd });
-    let stdout = '';
-    let stderr = '';
-    const timer = setTimeout(() => {
-      proc.kill('SIGKILL');
-    }, NATIVE_TIMEOUT_MS);
-
-    proc.stdout.on('data', (d: Buffer) => { stdout += d.toString(); });
-    proc.stderr.on('data', (d: Buffer) => { stderr += d.toString(); });
-    proc.stdin.end();
-    proc.on('close', (code) => {
-      clearTimeout(timer);
-      res({ exitCode: code ?? 1, stdout, stderr });
-    });
-  });
-}
-
-// ── VFS population from native build ──────────────────────────────────
-// Mirror the native build directory structure into the in-memory VFS
-// so that os-test binaries that use opendir/readdir/scandir/nftw see the
-// expected directory layout at the VFS root.
-//
-// Entries are created at TWO levels:
-//   1. Root level (/<subdir>/<test>) — tests using relative paths from cwd /
-//   2. Suite level (/<suite>/<subdir>/<test>) — tests that navigate via ".."
-//      and reference entries by suite-qualified path (e.g., fstatat opens
-//      ".." then stats "basic/sys_stat/fstatat")
-
-async function populateVfsForSuite(
-  fs: ReturnType<typeof createInMemoryFileSystem>,
-  suite: string,
-): Promise<void> {
-  const suiteNativeDir = join(OS_TEST_NATIVE_DIR, suite);
-  if (!existsSync(suiteNativeDir)) return;
-
-  function collect(dir: string, prefix: string): { dirs: string[]; files: { vfsPath: string; hostPath: string }[] } {
-    const result: { dirs: string[]; files: { vfsPath: string; hostPath: string }[] } = { dirs: [], files: [] };
-    for (const entry of readdirSync(dir, { withFileTypes: true })) {
-      const rel = prefix ? `${prefix}/${entry.name}` : entry.name;
-      if (entry.isDirectory()) {
-        result.dirs.push(`/${rel}`);
-        const sub = collect(join(dir, entry.name), rel);
-        result.dirs.push(...sub.dirs);
-        result.files.push(...sub.files);
-      } else {
-        result.files.push({ vfsPath: `/${rel}`, hostPath: join(dir, entry.name) });
-      }
-    }
-    return result;
-  }
-
-  /** Write a VFS file with non-zero content matching the host file size.
-   *  Tests like lseek(SEEK_END) and read() need non-zero file sizes. */
-  async function writeVfsFile(vfsPath: string, hostPath: string): Promise<void> {
-    const size = Math.max(statSync(hostPath).size, 1);
-    await fs.writeFile(vfsPath, new Uint8Array(size));
-  }
-
-  // Root level — keeps relative-path tests working (e.g., stat("sys_stat/stat"))
-  const rootEntries = collect(suiteNativeDir, '');
-  for (const d of rootEntries.dirs) {
-    await fs.mkdir(d);
-  }
-  for (const f of rootEntries.files) {
-    await writeVfsFile(f.vfsPath, f.hostPath);
-  }
-
-  // Suite level — enables parent-relative lookups (e.g., fstatat via "..")
-  await fs.mkdir(`/${suite}`);
-  const suiteEntries = collect(suiteNativeDir, suite);
-  for (const d of suiteEntries.dirs) {
-    await fs.mkdir(d);
-  }
-  for (const f of suiteEntries.files) {
-    await writeVfsFile(f.vfsPath, f.hostPath);
-  }
-
-  // Source tree — provides .c files for faccessat-style tests that check
-  // source file existence (e.g., faccessat(dir, "basic/unistd/faccessat.c"))
-  const suiteSrcDir = join(OS_TEST_SRC_DIR, suite);
-  if (existsSync(suiteSrcDir)) {
-    const srcEntries = collect(suiteSrcDir, suite);
-    for (const d of srcEntries.dirs) {
-      try { await fs.mkdir(d); } catch { /* already exists from native entries */ }
-    }
-    for (const f of srcEntries.files) {
-      try { await writeVfsFile(f.vfsPath, f.hostPath); } catch { /* already exists */ }
-    }
-  }
-}
-
-// ── Flat symlink directory for command resolution ──────────────────────
-// The kernel resolves commands by basename — nested paths like
-// "basic/arpa_inet/htonl" lose their directory context. We create a flat
-// temp directory with uniquely-named symlinks so every os-test binary
-// is addressable as a single command name (e.g., "basic--arpa_inet--htonl").
-
-function toFlatName(testName: string): string {
-  return testName.replaceAll('/', '--');
-}
-
-const allTests = hasOsTestWasm ? discoverTests(OS_TEST_WASM_DIR) : [];
-let FLAT_CMD_DIR: string | undefined;
-
-if (allTests.length > 0) {
-  FLAT_CMD_DIR = mkdtempSync(join(tmpdir(), 'os-test-'));
-  for (const test of allTests) {
-    symlinkSync(join(OS_TEST_WASM_DIR, test), join(FLAT_CMD_DIR, toFlatName(test)));
-  }
-}
-
-// ── Exclusion map ──────────────────────────────────────────────────────
-
-const exclusions = exclusionsData.exclusions as Record<string, ExclusionEntry>;
-
-// ── Group by suite ─────────────────────────────────────────────────────
-
-const bySuite = new Map<string, string[]>();
-for (const test of allTests) {
-  const suite = test.includes('/') ? test.split('/')[0] : 'root';
-  if (!bySuite.has(suite)) bySuite.set(suite, []);
-  bySuite.get(suite)!.push(test);
-}
-
-// ── Result tracking ────────────────────────────────────────────────────
-
-interface TestResult {
-  name: string;
-  suite: string;
-  status: 'pass' | 'fail' | 'skip';
-  wasmExitCode?: number;
-  nativeExitCode?: number;
-  wasmStderr?: string;
-  nativeStderr?: string;
-  error?: string;
-}
-
-const testResults: TestResult[] = [];
-
-// ── Report generation ──────────────────────────────────────────────────
-
-function writeConformanceReport(results: TestResult[]): void {
-  // Per-suite breakdown
-  const suites: Record<string, { total: number; pass: number; fail: number; skip: number }> = {};
-  for (const r of results) {
-    if (!suites[r.suite]) suites[r.suite] = { total: 0, pass: 0, fail: 0, skip: 0 };
-    suites[r.suite].total++;
-    suites[r.suite][r.status]++;
-  }
-
-  const total = results.length;
-  const pass = results.filter((r) => r.status === 'pass').length;
-  const fail = results.filter((r) => r.status === 'fail').length;
-  const skip = results.filter((r) => r.status === 'skip').length;
-  const passRate = total - skip > 0
-    ? ((pass / (total - skip)) * 100).toFixed(1)
-    : '0.0';
-
-  // Count passing tests that had a native binary available for output comparison.
-  // These tests were verified to produce the same stdout as the native binary.
-  const nativeVerifiedCount = results.filter(
-    (r) => r.status === 'pass' && r.nativeExitCode !== undefined,
-  ).length;
-
-  const report = {
-    osTestVersion: exclusionsData.osTestVersion,
-    timestamp: new Date().toISOString(),
-    total,
-    pass,
-    fail,
-    skip,
-    passRate: `${passRate}%`,
-    nativeVerified: nativeVerifiedCount,
-    suites,
-    tests: results,
-  };
-
-  writeFileSync(REPORT_PATH, JSON.stringify(report, null, 2));
-}
-
-function printSummary(results: TestResult[]): void {
-  const suites: Record<string, { total: number; pass: number; fail: number; skip: number }> = {};
-  for (const r of results) {
-    if (!suites[r.suite]) suites[r.suite] = { total: 0, pass: 0, fail: 0, skip: 0 };
-    suites[r.suite].total++;
-    suites[r.suite][r.status]++;
-  }
-
-  const total = results.length;
-  const pass = results.filter((r) => r.status === 'pass').length;
-  const fail = results.filter((r) => r.status === 'fail').length;
-  const skip = results.filter((r) => r.status === 'skip').length;
-  const mustPass = total - skip;
-  const passRate = mustPass > 0 ? ((pass / mustPass) * 100).toFixed(1) : '—';
-
-  console.log('');
-  console.log(`POSIX Conformance Summary (os-test v${exclusionsData.osTestVersion})`);
-  console.log('─'.repeat(60));
-  console.log(
-    'Suite'.padEnd(20) +
-    'Total'.padStart(8) +
-    'Pass'.padStart(8) +
-    'Fail'.padStart(8) +
-    'Skip'.padStart(8) +
-    'Rate'.padStart(10),
-  );
-
-  for (const [name, s] of Object.entries(suites).sort(([a], [b]) => a.localeCompare(b))) {
-    const runnable = s.total - s.skip;
-    const rate = runnable > 0
-      ? ((s.pass / runnable) * 100).toFixed(1) + '%'
-      : '—';
-    console.log(
-      name.padEnd(20) +
-      String(s.total).padStart(8) +
-      String(s.pass).padStart(8) +
-      String(s.fail).padStart(8) +
-      String(s.skip).padStart(8) +
-      rate.padStart(10),
-    );
-  }
-
-  console.log('─'.repeat(60));
-  console.log(
-    'TOTAL'.padEnd(20) +
-    String(total).padStart(8) +
-    String(pass).padStart(8) +
-    String(fail).padStart(8) +
-    String(skip).padStart(8) +
-    (passRate + (passRate !== '—' ? '%' : '')).padStart(10),
-  );
-  const stderrWarnings = results.filter(
-    (r) => r.status === 'pass' && r.wasmStderr,
-  ).length;
-
-  console.log(`Expected fail: ${fail}`);
-  console.log(`Must-pass:     ${mustPass - fail} (${pass} passing)`);
-  if (stderrWarnings > 0) {
-    console.log(`Stderr warns:  ${stderrWarnings} passing tests have unexpected stderr`);
-  }
-  console.log('');
-}
-
-// ── Test suite ─────────────────────────────────────────────────────────
-
-describeIf(!skipReason(), 'POSIX conformance (os-test)', () => {
-  afterAll(() => {
-    if (testResults.length > 0) {
-      writeConformanceReport(testResults);
-      printSummary(testResults);
-    }
-    // Clean up temp symlink directory
-    if (FLAT_CMD_DIR) {
-      try { rmSync(FLAT_CMD_DIR, { recursive: true, force: true }); } catch { /* ignore */ }
-    }
-  });
-
-  for (const [suite, tests] of bySuite) {
-    describe(`posix/${suite}`, () => {
-      let kernel: Kernel;
-
-      // Native cwd: run from the suite's native build directory so tests
-      // that use opendir/readdir/nftw find sibling directories (e.g.,
-      // basic/dirent/readdir expects to find "dirent" in cwd when run
-      // from basic/).
-      const nativeSuiteCwd = join(OS_TEST_NATIVE_DIR, suite);
-
-      beforeAll(async () => {
-        // Populate the VFS with directory structure mirroring the native
-        // build so WASM binaries see the same entries via opendir/readdir.
-        const filesystem = createInMemoryFileSystem();
-        if (existsSync(nativeSuiteCwd)) {
-          await populateVfsForSuite(filesystem, suite);
-        }
-        kernel = createKernel({ filesystem, cwd: '/' });
-        await kernel.mount(
-          createWasmVmRuntime({ commandDirs: [FLAT_CMD_DIR!, COMMANDS_DIR] }),
-        );
-      });
-
-      afterAll(async () => {
-        await kernel?.dispose();
-      });
-
-      for (const testName of tests) {
-        const exclusion = exclusions[testName];
-
-        if (exclusion?.expected === 'skip') {
-          it(`${testName} — ${exclusion.reason}`, () => {});
-          testResults.push({ name: testName, suite, status: 'skip' });
-          continue;
-        }
-
-        it(testName, async () => {
-          const flatName = toFlatName(testName);
-
-          // Run natively (if binary exists) from suite build directory
-          const nativePath = join(OS_TEST_NATIVE_DIR, testName);
-          const nativeResult = existsSync(nativePath)
-            ? await runNative(nativePath, existsSync(nativeSuiteCwd) ? nativeSuiteCwd : undefined)
-            : null;
-
-          // Run in WASM via kernel.spawn() (bypasses sh -c wrapper to get real exit code)
-          const stdoutChunks: Uint8Array[] = [];
-          const stderrChunks: Uint8Array[] = [];
-          const proc = kernel.spawn(flatName, [], {
-            onStdout: (d) => stdoutChunks.push(d),
-            onStderr: (d) => stderrChunks.push(d),
-            timeout: NATIVE_TIMEOUT_MS,
-          });
-          proc.closeStdin();
-          const wasmExitCode = await proc.wait();
-          const wasmStdout = Buffer.concat(stdoutChunks).toString();
-          const wasmStderr = Buffer.concat(stderrChunks).toString();
-          const wasmResult = { exitCode: wasmExitCode, stdout: wasmStdout, stderr: wasmStderr };
-
-          // Warn on unexpected stderr for passing WASM tests
-          const hasUnexpectedStderr = wasmResult.exitCode === 0
-            && wasmStderr.trim().length > 0
-            && nativeResult && nativeResult.stderr.trim().length === 0;
-
-          if (exclusion?.expected === 'fail') {
-            // Known failure — must still fail (exit non-0 OR parity mismatch)
-            const exitOk = wasmResult.exitCode === 0;
-            const parityOk = !nativeResult || nativeResult.exitCode !== 0 ||
-              wasmResult.stdout.trim() === nativeResult.stdout.trim();
-            // Native parity: both fail identically (same exit code + stdout)
-            const nativeParityPass = !!nativeResult &&
-              nativeResult.exitCode !== 0 &&
-              wasmResult.exitCode === nativeResult.exitCode &&
-              wasmResult.stdout.trim() === nativeResult.stdout.trim();
-
-            if ((exitOk && parityOk) || nativeParityPass) {
-              testResults.push({
-                name: testName, suite, status: 'pass',
-                wasmExitCode: 0, nativeExitCode: nativeResult?.exitCode,
-                wasmStderr: wasmStderr || undefined,
-                nativeStderr: nativeResult?.stderr || undefined,
-              });
-              throw new Error(
-                `${testName} is excluded as "fail" but now passes! ` +
-                'Remove it from os-test-exclusions.json to lock in this fix.',
-              );
-            }
-            testResults.push({
-              name: testName, suite, status: 'fail',
-              wasmExitCode: wasmResult.exitCode,
-              nativeExitCode: nativeResult?.exitCode,
-              wasmStderr: wasmStderr || undefined,
-              nativeStderr: nativeResult?.stderr || undefined,
-            });
-          } else {
-            // Not excluded — must pass (or match native failure exactly)
-            try {
-              // Native parity: if native also fails with the same exit code
-              // and output, WASM matching that failure IS correct behavior
-              // (e.g., Sortix-specific paths like /dev/ptc that don't exist
-              // on real Linux either).
-              if (nativeResult && nativeResult.exitCode !== 0 &&
-                  wasmResult.exitCode === nativeResult.exitCode &&
-                  wasmResult.stdout.trim() === nativeResult.stdout.trim()) {
-                // Both fail identically — native parity
-                testResults.push({
-                  name: testName, suite, status: 'pass',
-                  wasmExitCode: wasmResult.exitCode,
-                  nativeExitCode: nativeResult.exitCode,
-                });
-              } else {
-                expect(wasmResult.exitCode).toBe(0);
-
-                // Native parity check: if native passes, compare output
-                if (nativeResult && nativeResult.exitCode === 0) {
-                  expect(wasmResult.stdout.trim()).toBe(nativeResult.stdout.trim());
-                }
-
-                testResults.push({
-                  name: testName, suite, status: 'pass',
-                  wasmExitCode: wasmResult.exitCode,
-                  nativeExitCode: nativeResult?.exitCode,
-                  wasmStderr: hasUnexpectedStderr ? wasmStderr : undefined,
-                  nativeStderr: hasUnexpectedStderr ? nativeResult?.stderr : undefined,
-                });
-
-                if (hasUnexpectedStderr) {
-                  console.warn(
-                    `⚠ ${testName}: passes but has unexpected stderr in WASM:\n  ${wasmStderr.trim().split('\n').join('\n  ')}`,
-                  );
-                }
-              }
-            } catch (err) {
-              testResults.push({
-                name: testName, suite, status: 'fail',
-                wasmExitCode: wasmResult.exitCode,
-                nativeExitCode: nativeResult?.exitCode,
-                wasmStderr: wasmStderr || undefined,
-                nativeStderr: nativeResult?.stderr || undefined,
-                error: (err as Error).message,
-              });
-              throw err;
-            }
-          }
-        }, TEST_TIMEOUT_MS);
-      }
-    });
-  }
-});
diff --git a/registry/tests/wasmvm/os-test-exclusions.json b/registry/tests/wasmvm/os-test-exclusions.json
deleted file mode 100644
index 770fa9a9a..000000000
--- a/registry/tests/wasmvm/os-test-exclusions.json
+++ /dev/null
@@ -1,25 +0,0 @@
-{
-  "osTestVersion": "0.1.0",
-  "sourceCommit": "main",
-  "lastUpdated": "2026-03-22",
-  "exclusions": {
-    "basic/strings/ffsll": {
-      "expected": "fail",
-      "category": "wasm-limitation",
-      "reason": "os-test uses long (32-bit on WASM32) to hold a 64-bit value — ffsll itself works but the test constant truncates to 0",
-      "issue": "https://github.com/rivet-dev/agentos/pull/40"
-    },
-    "basic/sys_statvfs/fstatvfs": {
-      "expected": "fail",
-      "category": "wasi-gap",
-      "reason": "fstatvfs() not part of WASI — no filesystem statistics interface",
-      "issue": "https://github.com/rivet-dev/agentos/pull/48"
-    },
-    "basic/sys_statvfs/statvfs": {
-      "expected": "fail",
-      "category": "wasi-gap",
-      "reason": "statvfs() not part of WASI — no filesystem statistics interface",
-      "issue": "https://github.com/rivet-dev/agentos/pull/48"
-    }
-  }
-}
diff --git a/registry/tests/wasmvm/shell-redirect.test.ts b/registry/tests/wasmvm/shell-redirect.test.ts
deleted file mode 100644
index ccee94a39..000000000
--- a/registry/tests/wasmvm/shell-redirect.test.ts
+++ /dev/null
@@ -1,36 +0,0 @@
-import { describe, it, expect, afterEach } from "vitest";
-import {
-	createInMemoryFileSystem,
-	createKernel,
-	createWasmVmRuntime,
-	COMMANDS_DIR,
-	describeIf,
-	hasWasmBinaries,
-	type Kernel,
-} from "../helpers.js";
-
-describeIf(hasWasmBinaries, "wasmvm shell redirects", () => {
-	let kernel: Kernel | undefined;
-
-	afterEach(async () => {
-		await kernel?.dispose();
-		kernel = undefined;
-	});
-
-	it("creates a redirected file relative to the changed cwd", async () => {
-		const vfs = createInMemoryFileSystem();
-		await (vfs as any).chmod("/", 0o1777);
-		await vfs.mkdir("/tmp", { recursive: true });
-		await (vfs as any).chmod("/tmp", 0o1777);
-		kernel = createKernel({ filesystem: vfs, syncFilesystemOnDispose: false });
-		await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-		const result = await kernel.exec(
-			'sh -c "mkdir -p /tmp/r && cd /tmp/r && echo hi > a.txt && cat a.txt"',
-		);
-
-		expect(result.exitCode).toBe(0);
-		expect(result.stdout).toBe("hi\n");
-		expect(await vfs.exists("/tmp/r/a.txt")).toBe(true);
-	}, 15_000);
-});
diff --git a/registry/tests/wasmvm/shell-terminal.test.ts b/registry/tests/wasmvm/shell-terminal.test.ts
deleted file mode 100644
index 7efaffbb6..000000000
--- a/registry/tests/wasmvm/shell-terminal.test.ts
+++ /dev/null
@@ -1,473 +0,0 @@
-/**
- * WasmVM shell terminal tests — real brush-shell commands verified through
- * headless xterm screen state.
- *
- * All output assertions use exact-match on screenshotTrimmed().
- * Registers only when the WASM shell binary is available.
- */
-
-import { describe, it, expect, afterEach } from "vitest";
-import { TerminalHarness } from './terminal-harness.js';
-import { createWasmVmRuntime } from '../helpers.js';
-import { COMMANDS_DIR, createKernel, describeIf, hasWasmBinaries } from '../helpers.js';
-import type { Kernel } from "../helpers.js";
-
-/** brush-shell interactive prompt (captured empirically). */
-const PROMPT = "sh-0.4$ ";
-
-// ---------------------------------------------------------------------------
-// Simple in-memory VFS for kernel tests
-// ---------------------------------------------------------------------------
-
-class SimpleVFS {
-	private files = new Map<string, Uint8Array>();
-	private dirs = new Set<string>(["/"]);
-
-	async readFile(path: string): Promise<Uint8Array> {
-		const d = this.files.get(path);
-		if (!d) throw new Error(`ENOENT: ${path}`);
-		return d;
-	}
-	async readTextFile(path: string): Promise<string> {
-		return new TextDecoder().decode(await this.readFile(path));
-	}
-	async readDir(path: string): Promise<string[]> {
-		const prefix = path === "/" ? "/" : path + "/";
-		const entries: string[] = [];
-		for (const p of [...this.files.keys(), ...this.dirs]) {
-			if (p !== path && p.startsWith(prefix)) {
-				const rest = p.slice(prefix.length);
-				if (!rest.includes("/")) entries.push(rest);
-			}
-		}
-		return entries;
-	}
-	async readDirWithTypes(path: string) {
-		return (await this.readDir(path)).map((name) => ({
-			name,
-			isDirectory: this.dirs.has(
-				path === "/" ? `/${name}` : `${path}/${name}`,
-			),
-		}));
-	}
-	async writeFile(
-		path: string,
-		content: string | Uint8Array,
-	): Promise<void> {
-		const d =
-			typeof content === "string"
-				? new TextEncoder().encode(content)
-				: content;
-		this.files.set(path, new Uint8Array(d));
-		const parts = path.split("/").filter(Boolean);
-		for (let i = 1; i < parts.length; i++) {
-			this.dirs.add("/" + parts.slice(0, i).join("/"));
-		}
-	}
-	async createDir(path: string) {
-		this.dirs.add(path);
-	}
-	async mkdir(path: string, _o?: { recursive?: boolean }) {
-		this.dirs.add(path);
-	}
-	async exists(path: string): Promise<boolean> {
-		return this.files.has(path) || this.dirs.has(path);
-	}
-	async stat(path: string) {
-		const isDir = this.dirs.has(path);
-		const d = this.files.get(path);
-		if (!isDir && !d) throw new Error(`ENOENT: ${path}`);
-		return {
-			mode: isDir ? 0o40755 : 0o100644,
-			size: d?.length ?? 0,
-			isDirectory: isDir,
-			isSymbolicLink: false,
-			atimeMs: Date.now(),
-			mtimeMs: Date.now(),
-			ctimeMs: Date.now(),
-			birthtimeMs: Date.now(),
-			ino: 0,
-			nlink: 1,
-			uid: 1000,
-			gid: 1000,
-		};
-	}
-	async removeFile(path: string) {
-		this.files.delete(path);
-	}
-	async removeDir(path: string) {
-		this.dirs.delete(path);
-	}
-	async rename(o: string, n: string) {
-		const d = this.files.get(o);
-		if (d) {
-			this.files.set(n, d);
-			this.files.delete(o);
-		}
-	}
-	async realpath(path: string) {
-		return path;
-	}
-	async symlink(_t: string, _l: string) {}
-	async readlink(_path: string): Promise<string> {
-		throw new Error("EINVAL: not a symlink");
-	}
-	async lstat(path: string) {
-		return this.stat(path);
-	}
-	async link(_oldPath: string, _newPath: string) {}
-	async chmod(_path: string, _mode: number) {}
-	async chown(_path: string, _uid: number, _gid: number) {}
-	async utimes(_path: string, _atime: number, _mtime: number) {}
-	async truncate(path: string, length: number) {
-		const d = this.files.get(path);
-		if (!d) throw new Error(`ENOENT: ${path}`);
-		this.files.set(path, d.slice(0, length));
-	}
-	async pread(path: string, offset: number, length: number): Promise<Uint8Array> {
-		const d = this.files.get(path);
-		if (!d) throw new Error(`ENOENT: ${path}`);
-		return d.slice(offset, offset + length);
-	}
-}
-
-// ---------------------------------------------------------------------------
-// Helper — create kernel + mount WasmVM
-// ---------------------------------------------------------------------------
-
-async function createShellKernel(): Promise<{
-	kernel: Kernel;
-	vfs: SimpleVFS;
-}> {
-	const vfs = new SimpleVFS();
-	const kernel = createKernel({ filesystem: vfs as any });
-	await kernel.mount(
-		createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }),
-	);
-	return { kernel, vfs };
-}
-
-// ---------------------------------------------------------------------------
-// Tests
-// ---------------------------------------------------------------------------
-
-describeIf(hasWasmBinaries, "wasmvm-shell-terminal", () => {
-	let harness: TerminalHarness;
-
-	afterEach(async () => {
-		await harness?.dispose();
-	});
-
-	it("echo prints output — 'echo hello' → 'hello' on next line, prompt returns", async () => {
-		const { kernel } = await createShellKernel();
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("echo hello\n");
-		await harness.waitFor(PROMPT, 2);
-
-		expect(harness.screenshotTrimmed()).toBe(
-			[`${PROMPT}echo hello`, "hello", PROMPT].join("\n"),
-		);
-	});
-
-	it("ls / shows listing — directory entries include /bin from command registration", async () => {
-		const { kernel } = await createShellKernel();
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("ls /\n");
-		await harness.waitFor(PROMPT, 2);
-
-		const screen = harness.screenshotTrimmed();
-		// Kernel bootstraps standard POSIX directories (/tmp, /etc, /usr, …)
-		// and WasmVM mounts commands into /bin — verify key entries exist.
-		expect(screen).toContain("bin");
-		expect(screen).toContain("tmp");
-	});
-
-	it("/bin/printf resolves through shell PATH — path-based command dispatch works from interactive shell", async () => {
-		const { kernel } = await createShellKernel();
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("/bin/printf 'path-dispatch-ok\\n'\n");
-		await harness.waitFor(PROMPT, 2);
-
-		const screen = harness.screenshotTrimmed();
-		expect(screen).toContain("path-dispatch-ok");
-	});
-
-	it("ls directory with known contents — mkdir + touch then ls shows expected entries", async () => {
-		const { kernel, vfs } = await createShellKernel();
-		await vfs.createDir("/data");
-		await vfs.writeFile("/data/alpha.txt", "a");
-		await vfs.writeFile("/data/beta.txt", "b");
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("ls /data\n");
-		await harness.waitFor(PROMPT, 2);
-
-		const screen = harness.screenshotTrimmed();
-		expect(screen).toContain("alpha.txt");
-		expect(screen).toContain("beta.txt");
-	});
-
-	it("output preserved across commands — 'echo AAA' then 'echo BBB' — both visible", async () => {
-		const { kernel } = await createShellKernel();
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("echo AAA\n");
-		await harness.waitFor(PROMPT, 2);
-		await harness.type("echo BBB\n");
-		await harness.waitFor(PROMPT, 3);
-
-		expect(harness.screenshotTrimmed()).toBe(
-			[
-				`${PROMPT}echo AAA`,
-				"AAA",
-				`${PROMPT}echo BBB`,
-				"BBB",
-				PROMPT,
-			].join("\n"),
-		);
-	});
-
-	it("cd changes directory — 'cd /tmp' then 'pwd' → '/tmp' on screen", async () => {
-		const { kernel, vfs } = await createShellKernel();
-		await vfs.createDir("/tmp");
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("cd /tmp\n");
-		await harness.waitFor(PROMPT, 2);
-		await harness.type("pwd\n");
-		await harness.waitFor(PROMPT, 3);
-
-		expect(harness.screenshotTrimmed()).toBe(
-			[
-				`${PROMPT}cd /tmp`,
-				`${PROMPT}pwd`,
-				"/tmp",
-				PROMPT,
-			].join("\n"),
-		);
-	});
-
-	it("export sets env var — 'export FOO=bar' then 'echo $FOO' → 'bar' on screen", async () => {
-		const { kernel } = await createShellKernel();
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("export FOO=bar\n");
-		await harness.waitFor(PROMPT, 2);
-		await harness.type("echo $FOO\n");
-		await harness.waitFor(PROMPT, 3);
-
-		expect(harness.screenshotTrimmed()).toBe(
-			[
-				`${PROMPT}export FOO=bar`,
-				`${PROMPT}echo $FOO`,
-				"bar",
-				PROMPT,
-			].join("\n"),
-		);
-	});
-
-	it("cat reads VFS file — write file, cat it, content appears on screen", async () => {
-		const { kernel, vfs } = await createShellKernel();
-		await vfs.writeFile("/tmp/hello.txt", "hello world\n");
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("cat /tmp/hello.txt\n");
-		await harness.waitFor(PROMPT, 2);
-
-		expect(harness.screenshotTrimmed()).toBe(
-			[
-				`${PROMPT}cat /tmp/hello.txt`,
-				"hello world",
-				PROMPT,
-			].join("\n"),
-		);
-	});
-
-	it("pipe data via redirect — 'echo foo > file' then 'cat file' → 'foo' on screen", async () => {
-		const { kernel, vfs } = await createShellKernel();
-		await vfs.createDir("/tmp");
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("echo foo > /tmp/pipe.out\n");
-		await harness.waitFor(PROMPT, 2);
-		await harness.type("cat /tmp/pipe.out\n");
-		await harness.waitFor(PROMPT, 3);
-
-		expect(harness.screenshotTrimmed()).toBe(
-			[
-				`${PROMPT}echo foo > /tmp/pipe.out`,
-				`${PROMPT}cat /tmp/pipe.out`,
-				"foo",
-				PROMPT,
-			].join("\n"),
-		);
-	});
-
-	it("bad command — 'nonexistent_cmd' → error message on screen", async () => {
-		const { kernel } = await createShellKernel();
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("nonexistent_cmd\n");
-		await harness.waitFor(PROMPT, 2);
-
-		expect(harness.screenshotTrimmed()).toBe(
-			[
-				`${PROMPT}nonexistent_cmd`,
-				"error: command not found: nonexistent_cmd",
-				PROMPT,
-			].join("\n"),
-		);
-	});
-
-	it("stderr output appears on screen — 'echo error >&2' shows error text", async () => {
-		const { kernel } = await createShellKernel();
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("echo error >&2\n");
-		await harness.waitFor(PROMPT, 2);
-
-		expect(harness.screenshotTrimmed()).toBe(
-			[
-				`${PROMPT}echo error >&2`,
-				"error",
-				PROMPT,
-			].join("\n"),
-		);
-	});
-
-	it("redirection — 'echo hello > /tmp/out' then 'cat /tmp/out' → 'hello' on screen", async () => {
-		const { kernel, vfs } = await createShellKernel();
-		await vfs.createDir("/tmp");
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("echo hello > /tmp/out\n");
-		await harness.waitFor(PROMPT, 2);
-		await harness.type("cat /tmp/out\n");
-		await harness.waitFor(PROMPT, 3);
-
-		expect(harness.screenshotTrimmed()).toBe(
-			[
-				`${PROMPT}echo hello > /tmp/out`,
-				`${PROMPT}cat /tmp/out`,
-				"hello",
-				PROMPT,
-			].join("\n"),
-		);
-	});
-
-	it("multi-line input — quoted string continuation across lines", async () => {
-		const { kernel } = await createShellKernel();
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type('echo "hello\n');
-		// brush-shell buffers until closing quote — no continuation prompt
-		await harness.type('world"\n');
-		await harness.waitFor(PROMPT, 2);
-
-		expect(harness.screenshotTrimmed()).toBe(
-			[
-				`${PROMPT}echo "hello`,
-				'world"',
-				"hello",
-				"world",
-				PROMPT,
-			].join("\n"),
-		);
-	});
-
-	it("exit command terminates shell — 'exit' causes wait() to resolve with code 0", async () => {
-		const { kernel } = await createShellKernel();
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		harness.shell.write("exit\n");
-
-		const exitCode = await Promise.race([
-			harness.shell.wait(),
-			new Promise<number>((_, rej) =>
-				setTimeout(() => rej(new Error("wait() hung after 'exit'")), 10_000),
-			),
-		]);
-		expect(exitCode).toBe(0);
-	});
-
-	it("Ctrl+D on empty line exits — ^D causes wait() to resolve with code 0", async () => {
-		const { kernel } = await createShellKernel();
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-
-		const exitCode = await Promise.race([
-			harness.exit(),
-			new Promise<number>((_, rej) =>
-				setTimeout(() => rej(new Error("wait() hung after ^D")), 10_000),
-			),
-		]);
-		expect(exitCode).toBe(0);
-	});
-
-	// -----------------------------------------------------------------------
-	// CWD propagation regressions (US-076)
-	// -----------------------------------------------------------------------
-
-	it("shell started with non-root cwd — 'pwd' builtin reports that cwd", async () => {
-		const { kernel, vfs } = await createShellKernel();
-		await vfs.createDir("/workspace");
-		harness = new TerminalHarness(kernel, { cwd: "/workspace" });
-
-		await harness.waitFor(PROMPT);
-		await harness.type("pwd\n");
-		await harness.waitFor(PROMPT, 2);
-
-		const screen = harness.screenshotTrimmed();
-		expect(screen).toContain("/workspace");
-	});
-
-	it("cd then external /bin/pwd — spawned command inherits shell cwd via PWD env", async () => {
-		const { kernel, vfs } = await createShellKernel();
-		await vfs.createDir("/tmp");
-		await vfs.createDir("/tmp/work");
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("cd /tmp/work\n");
-		await harness.waitFor(PROMPT, 2);
-		await harness.type("/bin/pwd\n");
-		await harness.waitFor(PROMPT, 3);
-
-		const screen = harness.screenshotTrimmed();
-		expect(screen).toContain("/tmp/work");
-	});
-
-	it("cd then ls — spawned ls lists cwd contents, not root", async () => {
-		const { kernel, vfs } = await createShellKernel();
-		await vfs.createDir("/data");
-		await vfs.writeFile("/data/marker.txt", "x");
-		harness = new TerminalHarness(kernel);
-
-		await harness.waitFor(PROMPT);
-		await harness.type("cd /data\n");
-		await harness.waitFor(PROMPT, 2);
-		await harness.type("ls\n");
-		await harness.waitFor(PROMPT, 3);
-
-		const screen = harness.screenshotTrimmed();
-		expect(screen).toContain("marker.txt");
-	});
-});
diff --git a/registry/tests/wasmvm/signal-handler.test.ts b/registry/tests/wasmvm/signal-handler.test.ts
deleted file mode 100644
index 9feeed21c..000000000
--- a/registry/tests/wasmvm/signal-handler.test.ts
+++ /dev/null
@@ -1,164 +0,0 @@
-/**
- * Integration test for WasmVM cooperative signal handling.
- *
- * Spawns the signal_handler C program as WASM (sigaction(SIGINT, ...) →
- * busy-loop with sleep → verify handler called), delivers SIGINT via
- * kernel.kill(), and verifies the handler fires at a syscall boundary.
- */
-
-import { describe, it, expect, beforeEach, afterEach } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import {
-  COMMANDS_DIR,
-  C_BUILD_DIR,
-  createKernel,
-  describeIf,
-  hasWasmBinaries,
-  SIGTERM,
-} from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-import { existsSync } from 'node:fs';
-import { join } from 'node:path';
-
-const hasCWasmBinaries = existsSync(join(C_BUILD_DIR, 'signal_handler'));
-const EXPECTED_SIGACTION_FLAGS = (0x10000000 | 0x80000000) >>> 0;
-
-function skipReason(): string | false {
-  if (!hasWasmBinaries) return 'WASM binaries not built (run make wasm in native/wasmvm/)';
-  if (!hasCWasmBinaries) return 'signal_handler WASM binary not built (run make -C native/wasmvm/c sysroot && make -C native/wasmvm/c programs)';
-  return false;
-}
-
-// Minimal in-memory VFS
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-  private symlinks = new Map<string, string>();
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async pread(path: string, offset: number, length: number): Promise<Uint8Array> {
-    const data = await this.readFile(path);
-    return data.slice(offset, offset + length);
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map((name) => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) { this.dirs.add(path); }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path) || this.symlinks.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const isSymlink = this.symlinks.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !isSymlink && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isSymlink ? 0o120777 : (isDir ? 0o40755 : 0o100644),
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: isSymlink,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  lstat(path: string) { return this.stat(path); }
-  async chmod() {}
-  async rename(from: string, to: string) {
-    const data = this.files.get(from);
-    if (data) { this.files.set(to, data); this.files.delete(from); }
-  }
-  async unlink(path: string) { this.files.delete(path); this.symlinks.delete(path); }
-  async rmdir(path: string) { this.dirs.delete(path); }
-  async symlink(target: string, linkPath: string) {
-    this.symlinks.set(linkPath, target);
-    const parts = linkPath.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async readlink(path: string): Promise<string> {
-    const target = this.symlinks.get(path);
-    if (!target) throw new Error(`EINVAL: ${path}`);
-    return target;
-  }
-}
-
-describeIf(!skipReason(), 'WasmVM signal handler integration', { timeout: 30_000 }, () => {
-  let kernel: Kernel;
-  let vfs: SimpleVFS;
-
-  beforeEach(async () => {
-    vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-  });
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('signal_handler: sigaction registration preserves mask/flags and fires at syscall boundary', async () => {
-    // Spawn the WASM signal_handler program (registers SIGINT handler, then loops)
-    let stdout = '';
-    const proc = kernel.spawn('signal_handler', [], {
-      onStdout: (data) => { stdout += new TextDecoder().decode(data); },
-    });
-
-    // Wait for the program to register its handler and start waiting
-    const deadline = Date.now() + 10_000;
-    while (Date.now() < deadline && !stdout.includes('waiting')) {
-      await new Promise((r) => setTimeout(r, 20));
-    }
-    expect(stdout).toContain('handler_registered');
-    expect(stdout).toContain('waiting');
-
-    const registration = kernel.processTable.getSignalState(proc.pid).handlers.get(2);
-    expect(registration?.mask).toEqual(new Set([SIGTERM]));
-    expect(registration?.flags).toBe(EXPECTED_SIGACTION_FLAGS);
-
-    // Deliver SIGINT via ManagedProcess.kill() — routes through kernel process table
-    proc.kill(2 /* SIGINT */);
-
-    // Wait for the program to handle the signal and exit
-    const exitCode = await proc.wait();
-
-    expect(stdout).toContain('caught_signal=2');
-    expect(exitCode).toBe(0);
-  });
-});
diff --git a/registry/tests/wasmvm/sqlite3.test.ts b/registry/tests/wasmvm/sqlite3.test.ts
deleted file mode 100644
index 2457ce3e1..000000000
--- a/registry/tests/wasmvm/sqlite3.test.ts
+++ /dev/null
@@ -1,332 +0,0 @@
-/**
- * Integration tests for sqlite3 C command.
- *
- * Verifies SQLite CLI operations via kernel.exec() with real WASM binaries:
- *   - In-memory databases (:memory:)
- *   - Stdin pipe mode for simple queries
- *   - SQL from command line arguments for multi-statement operations
- *   - Meta-commands (.dump, .schema, .tables)
- *
- * Note: kernel.exec() wraps commands in sh -c. Brush-shell currently returns
- * exit code 17 for all child commands. Tests verify stdout correctness.
- *
- * Multi-statement SQL via stdin is not yet reliable in WASM (fgetc buffering
- * issues with the WASI polyfill). Tests use SQL-as-argument for complex cases.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import {
-  C_BUILD_DIR,
-  COMMANDS_DIR,
-  createKernel,
-  describeIf,
-  hasCWasmBinaries,
-} from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-
-// Minimal in-memory VFS for kernel tests
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map(name => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) {
-    this.dirs.add(path);
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isDir ? 0o40755 : 0o100644,
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: false,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  async chmod(_path: string, _mode: number) {}
-  async lstat(path: string) { return this.stat(path); }
-  async removeFile(path: string) { this.files.delete(path); }
-  async removeDir(path: string) { this.dirs.delete(path); }
-  async rename(oldPath: string, newPath: string) {
-    const data = this.files.get(oldPath);
-    if (data) {
-      this.files.set(newPath, data);
-      this.files.delete(oldPath);
-    }
-  }
-  async pread(path: string, buffer: Uint8Array, offset: number, length: number, position: number): Promise<number> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    const available = Math.min(length, data.length - position);
-    if (available <= 0) return 0;
-    buffer.set(data.subarray(position, position + available), offset);
-    return available;
-  }
-}
-
-describeIf(hasCWasmBinaries('sqlite3'), 'sqlite3 command', () => {
-  let kernel: Kernel;
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('executes SQL from stdin pipe on in-memory database', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    const result = await kernel.exec('sqlite3 :memory:', {
-      stdin: 'SELECT 1+1 AS result;\n',
-    });
-    expect(result.stdout.trim()).toBe('2');
-  });
-
-  it('executes multi-statement SQL as command argument', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    // Multi-statement SQL passed as command argument (more reliable than stdin in WASM)
-    const sql = 'CREATE TABLE t(x INTEGER); INSERT INTO t VALUES(10); INSERT INTO t VALUES(20); INSERT INTO t VALUES(30); SELECT * FROM t ORDER BY x;';
-    const result = await kernel.exec(`sqlite3 :memory: "${sql}"`);
-    expect(result.stdout.trim()).toBe('10\n20\n30');
-  });
-
-  it('supports .tables meta-command via SQL setup', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    // Create tables via SQL argument, then query sqlite_master
-    const sql = "CREATE TABLE alpha(x); CREATE TABLE beta(y); SELECT name FROM sqlite_master WHERE type='table' ORDER BY 1;";
-    const result = await kernel.exec(`sqlite3 :memory: "${sql}"`);
-    const tables = result.stdout.trim().split('\n').sort();
-    expect(tables).toEqual(['alpha', 'beta']);
-  });
-
-  it('supports .schema via sqlite_master query', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    const sql = "CREATE TABLE users(id INTEGER PRIMARY KEY, name TEXT NOT NULL); SELECT sql FROM sqlite_master WHERE name='users';";
-    const result = await kernel.exec(`sqlite3 :memory: "${sql}"`);
-    expect(result.stdout.trim()).toContain('CREATE TABLE users');
-  });
-
-  it('supports .dump style output via SQL', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    const sql = "CREATE TABLE t(x INTEGER, y TEXT); INSERT INTO t VALUES(1,'hello'); SELECT sql FROM sqlite_master; SELECT * FROM t;";
-    const result = await kernel.exec(`sqlite3 :memory: "${sql}"`);
-    const output = result.stdout.trim();
-    expect(output).toContain('CREATE TABLE t');
-    expect(output).toContain("1|hello");
-  });
-
-  it('handles SELECT with multiple columns', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    const result = await kernel.exec('sqlite3 :memory:', {
-      stdin: "SELECT 'hello' AS greeting, 42 AS number, 3.14 AS pi;\n",
-    });
-    expect(result.stdout.trim()).toBe('hello|42|3.14');
-  });
-
-  it('handles NULL values in output', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    const result = await kernel.exec('sqlite3 :memory:', {
-      stdin: 'SELECT NULL;\n',
-    });
-    // SQLite CLI outputs empty string for NULL
-    expect(result.stdout.trim()).toBe('');
-  });
-
-  it('reports SQL errors on stderr', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    const result = await kernel.exec(`sqlite3 :memory: "SELECT * FROM nonexistent_table;"`);
-    expect(result.stderr).toContain('no such table');
-  });
-
-  it('defaults to :memory: when no database specified', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    const result = await kernel.exec('sqlite3', {
-      stdin: 'SELECT 99;\n',
-    });
-    expect(result.stdout.trim()).toBe('99');
-  });
-
-  it('CREATE TABLE, INSERT, SELECT roundtrip via piped SQL', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    // Multi-statement SQL via command arg (stdin multi-statement has fgetc buffering issues in WASM)
-    const sql = "CREATE TABLE items(id INTEGER PRIMARY KEY, name TEXT); INSERT INTO items VALUES(1,'apple'); INSERT INTO items VALUES(2,'banana'); SELECT id, name FROM items ORDER BY id;";
-    const result = await kernel.exec(`sqlite3 :memory: "${sql}"`);
-    expect(result.stdout.trim()).toBe('1|apple\n2|banana');
-  });
-
-  it('.tables meta-command lists created tables', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    // Multi-statement stdin has fgetc buffering limitations in WASM,
-    // use SQL command arg to verify table listing behavior
-    const sql = "CREATE TABLE alpha(x); CREATE TABLE beta(y); SELECT name FROM sqlite_master WHERE type='table' ORDER BY 1;";
-    const result = await kernel.exec(`sqlite3 :memory: "${sql}"`);
-    const tables = result.stdout.trim().split('\n').sort();
-    expect(tables).toEqual(['alpha', 'beta']);
-  });
-
-  it('.schema meta-command shows CREATE TABLE statements', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    // Query schema via sqlite_master (equivalent to .schema output)
-    const sql = "CREATE TABLE users(id INTEGER PRIMARY KEY, name TEXT NOT NULL); SELECT sql FROM sqlite_master WHERE name='users';";
-    const result = await kernel.exec(`sqlite3 :memory: "${sql}"`);
-    expect(result.stdout).toContain('CREATE TABLE users');
-    expect(result.stdout).toContain('id INTEGER PRIMARY KEY');
-  });
-
-  it('.dump meta-command outputs INSERT statements for data', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    // Verify dump-equivalent output: schema + data via SQL queries
-    const sql = "CREATE TABLE t(x INTEGER, y TEXT); INSERT INTO t VALUES(1,'hello'); INSERT INTO t VALUES(2,'world'); SELECT sql FROM sqlite_master WHERE name='t'; SELECT '---'; SELECT x||','||y FROM t ORDER BY x;";
-    const result = await kernel.exec(`sqlite3 :memory: "${sql}"`);
-    const output = result.stdout;
-    // Schema is preserved
-    expect(output).toContain('CREATE TABLE t');
-    // Data is preserved and retrievable
-    expect(output).toContain("1,hello");
-    expect(output).toContain("2,world");
-  });
-
-  it('file-based DB persists data across separate exec calls', async () => {
-    const vfs = new SimpleVFS();
-    await vfs.mkdir('/tmp', { recursive: true });
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    // Use shell pipe to create table and insert data, then query back
-    // Note: file-based DB uses WASI VFS (open/write/fstat/ftruncate) which
-    // requires full POSIX file I/O support through the kernel
-    const createSql = "CREATE TABLE t(x INTEGER); INSERT INTO t VALUES(42); INSERT INTO t VALUES(99);";
-    const createResult = await kernel.exec(`sqlite3 /tmp/test.db "${createSql}"`);
-
-    // Check if file-based DB is supported (fstat/ftruncate may not be available)
-    const hasError = createResult.stderr.includes('disk I/O error') ||
-                     createResult.stderr.includes('unable to open database');
-    if (hasError) {
-      // Fall back: verify file-based behavior via VFS write/read simulation
-      // Write a pre-populated DB, then verify sqlite3 can read from VFS-provided data
-      // For now, verify in-memory DB persistence within single exec
-      const result = await kernel.exec(
-        'sqlite3 :memory: "CREATE TABLE t(x INTEGER); INSERT INTO t VALUES(42); INSERT INTO t VALUES(99); SELECT * FROM t ORDER BY x;"'
-      );
-      expect(result.stdout.trim()).toBe('42\n99');
-      return;
-    }
-
-    // Verify file was created in VFS
-    const dbData = await vfs.readFile('/tmp/test.db');
-    expect(dbData.length).toBeGreaterThan(0);
-
-    // Second exec: reopen and query persisted data via stdin
-    const result = await kernel.exec('sqlite3 /tmp/test.db', {
-      stdin: 'SELECT * FROM t ORDER BY x;\n',
-    });
-    expect(result.stdout.trim()).toBe('42\n99');
-  });
-
-  it('multi-statement input separated by semicolons', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    // Multi-statement SQL via command arg (semicolons separate statements)
-    const sql = "CREATE TABLE nums(v); INSERT INTO nums VALUES(10); INSERT INTO nums VALUES(20); SELECT v FROM nums ORDER BY v;";
-    const result = await kernel.exec(`sqlite3 :memory: "${sql}"`);
-    expect(result.stdout.trim()).toBe('10\n20');
-  });
-
-  it('SQL syntax error produces error on stderr with non-zero exit', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    // Syntax error via command arg (reliable error output)
-    const result = await kernel.exec('sqlite3 :memory: "SELEC INVALID SYNTAX;"');
-    expect(result.stderr).toContain('Error');
-  });
-});
diff --git a/registry/tests/wasmvm/terminal-harness.ts b/registry/tests/wasmvm/terminal-harness.ts
deleted file mode 100644
index d5d80772f..000000000
--- a/registry/tests/wasmvm/terminal-harness.ts
+++ /dev/null
@@ -1,172 +0,0 @@
-/**
- * TerminalHarness — wires openShell() to a headless xterm Terminal for
- * deterministic screen-state assertions in tests.
- *
- * Duplicated from packages/kernel/test/terminal-harness.ts because cross-package
- * test imports aren't supported.
- */
-
-import { Terminal } from "@xterm/headless";
-import type { Kernel } from "../helpers.js";
-
-type ShellHandle = ReturnType<Kernel["openShell"]>;
-
-/** Settlement window: resolve type() after this many ms of no new output. */
-const SETTLE_MS = 50;
-/** Poll interval for waitFor(). */
-const POLL_MS = 20;
-/** Default waitFor() timeout. */
-const DEFAULT_WAIT_TIMEOUT_MS = 10_000;
-
-export class TerminalHarness {
-	readonly term: Terminal;
-	readonly shell: ShellHandle;
-	private typing = false;
-	private disposed = false;
-
-	constructor(kernel: Kernel, options?: { cols?: number; rows?: number; env?: Record<string, string>; cwd?: string }) {
-		const cols = options?.cols ?? 80;
-		const rows = options?.rows ?? 24;
-
-		this.term = new Terminal({ cols, rows, allowProposedApi: true });
-
-		this.shell = kernel.openShell({ cols, rows, env: options?.env, cwd: options?.cwd });
-
-		// Wire shell output → xterm
-		this.shell.onData = (data: Uint8Array) => {
-			this.term.write(data);
-		};
-	}
-
-	/**
-	 * Send input through the PTY. Resolves after output settles (no new bytes
-	 * received for SETTLE_MS).
-	 */
-	async type(input: string): Promise<void> {
-		if (this.typing) {
-			throw new Error("TerminalHarness.type() called while previous type() is still in-flight");
-		}
-		this.typing = true;
-		try {
-			await this.typeInternal(input);
-		} finally {
-			this.typing = false;
-		}
-	}
-
-	private typeInternal(input: string): Promise<void> {
-		return new Promise<void>((resolve) => {
-			let timer: ReturnType<typeof setTimeout> | null = null;
-
-			const resetTimer = () => {
-				if (timer !== null) clearTimeout(timer);
-				timer = setTimeout(() => {
-					this.shell.onData = originalOnData;
-					resolve();
-				}, SETTLE_MS);
-			};
-
-			const originalOnData = this.shell.onData;
-			this.shell.onData = (data: Uint8Array) => {
-				this.term.write(data);
-				resetTimer();
-			};
-
-			resetTimer();
-			this.shell.write(input);
-		});
-	}
-
-	/**
-	 * Full screen as a string: viewport rows only (not scrollback), trailing
-	 * whitespace trimmed per line, trailing empty lines dropped, joined with '\n'.
-	 */
-	screenshotTrimmed(): string {
-		const buf = this.term.buffer.active;
-		const rows = this.term.rows;
-		const lines: string[] = [];
-
-		for (let y = 0; y < rows; y++) {
-			const line = buf.getLine(buf.viewportY + y);
-			lines.push(line ? line.translateToString(true) : "");
-		}
-
-		while (lines.length > 0 && lines[lines.length - 1] === "") {
-			lines.pop();
-		}
-
-		return lines.join("\n");
-	}
-
-	/**
-	 * Single trimmed row from the screen buffer (0-indexed from viewport top).
-	 */
-	line(row: number): string {
-		const buf = this.term.buffer.active;
-		const line = buf.getLine(buf.viewportY + row);
-		return line ? line.translateToString(true) : "";
-	}
-
-	/**
-	 * Poll screen buffer every POLL_MS until `text` is found. Throws a
-	 * descriptive error on timeout.
-	 */
-	async waitFor(
-		text: string,
-		occurrence: number = 1,
-		timeoutMs: number = DEFAULT_WAIT_TIMEOUT_MS,
-	): Promise<void> {
-		const deadline = Date.now() + timeoutMs;
-
-		while (true) {
-			const screen = this.screenshotTrimmed();
-
-			let count = 0;
-			let idx = -1;
-			while (true) {
-				idx = screen.indexOf(text, idx + 1);
-				if (idx === -1) break;
-				count++;
-				if (count >= occurrence) return;
-			}
-
-			if (Date.now() >= deadline) {
-				throw new Error(
-					`waitFor("${text}", ${occurrence}) timed out after ${timeoutMs}ms.\n` +
-					`Expected: "${text}" (occurrence ${occurrence})\n` +
-					`Screen:\n${screen}`,
-				);
-			}
-
-			await new Promise((r) => setTimeout(r, POLL_MS));
-		}
-	}
-
-	/**
-	 * Send ^D on empty line and await shell exit. Returns exit code.
-	 */
-	async exit(): Promise<number> {
-		this.shell.write("\x04");
-		return this.shell.wait();
-	}
-
-	/**
-	 * Kill shell and dispose terminal. Safe to call multiple times.
-	 */
-	async dispose(): Promise<void> {
-		if (this.disposed) return;
-		this.disposed = true;
-
-		try {
-			this.shell.kill();
-			await Promise.race([
-				this.shell.wait(),
-				new Promise((r) => setTimeout(r, 500)),
-			]);
-		} catch {
-			// Shell may already be dead
-		}
-
-		this.term.dispose();
-	}
-}
diff --git a/registry/tests/wasmvm/wasi-http.test.ts b/registry/tests/wasmvm/wasi-http.test.ts
deleted file mode 100644
index 06f6cec3c..000000000
--- a/registry/tests/wasmvm/wasi-http.test.ts
+++ /dev/null
@@ -1,356 +0,0 @@
-/**
- * Integration tests for wasi-http Rust library (HTTP/1.1 client via host_net).
- *
- * Verifies HTTP client functionality through the http-test WASM binary:
- *   - GET request with response body
- *   - POST request with JSON body
- *   - Custom headers
- *   - HTTPS via TLS upgrade
- *   - SSE (Server-Sent Events) streaming
- *
- * Tests start local HTTP/HTTPS servers and run http-test via kernel.exec().
- */
-
-import { describe, it, expect, afterEach, beforeAll, afterAll } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import { COMMANDS_DIR, createKernel, describeIf, hasWasmBinaries } from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-import { createServer as createHttpServer, type Server, type IncomingMessage, type ServerResponse } from 'node:http';
-import { createServer as createHttpsServer, type Server as HttpsServer } from 'node:https';
-import { execSync } from 'node:child_process';
-import { unlinkSync, writeFileSync } from 'node:fs';
-import { tmpdir } from 'node:os';
-import { join } from 'node:path';
-
-// Check if openssl CLI is available for generating test certs
-let hasOpenssl = false;
-try {
-  execSync('openssl version', { stdio: 'pipe' });
-  hasOpenssl = true;
-} catch { /* openssl not available */ }
-
-function generateSelfSignedCert(): { key: string; cert: string } {
-  const keyPath = join(tmpdir(), `wasi-http-test-key-${process.pid}-${Date.now()}.pem`);
-  try {
-    const key = execSync(
-      'openssl genpkey -algorithm RSA -pkeyopt rsa_keygen_bits:2048 2>/dev/null',
-      { encoding: 'utf8' },
-    );
-    writeFileSync(keyPath, key);
-    const cert = execSync(
-      `openssl req -new -x509 -key "${keyPath}" -days 1 -subj "/CN=localhost" -addext "subjectAltName=DNS:localhost,IP:127.0.0.1" 2>/dev/null`,
-      { encoding: 'utf8' },
-    );
-    return { key, cert };
-  } finally {
-    try {
-      unlinkSync(keyPath);
-    } catch {
-      // Best effort cleanup for test temp files.
-    }
-  }
-}
-
-// Minimal in-memory VFS for kernel tests
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map(name => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) {
-    this.dirs.add(path);
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isDir ? 0o40755 : 0o100644,
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: false,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  async chmod(_path: string, _mode: number) {}
-  async lstat(path: string) { return this.stat(path); }
-  async removeFile(path: string) { this.files.delete(path); }
-  async removeDir(path: string) { this.dirs.delete(path); }
-  async rename(oldPath: string, newPath: string) {
-    const data = this.files.get(oldPath);
-    if (data) {
-      this.files.set(newPath, data);
-      this.files.delete(oldPath);
-    }
-  }
-  async pread(path: string, buffer: Uint8Array, offset: number, length: number, position: number): Promise<number> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    const available = Math.min(length, data.length - position);
-    if (available <= 0) return 0;
-    buffer.set(data.subarray(position, position + available), offset);
-    return available;
-  }
-}
-
-// HTTP request handler
-function requestHandler(port: number) {
-  return (req: IncomingMessage, res: ServerResponse) => {
-    const url = req.url ?? '/';
-
-    // GET / — basic response
-    if (url === '/' && req.method === 'GET') {
-      res.writeHead(200, { 'Content-Type': 'text/plain' });
-      res.end('hello from wasi-http test');
-      return;
-    }
-
-    // GET /json — JSON response
-    if (url === '/json' && req.method === 'GET') {
-      res.writeHead(200, { 'Content-Type': 'application/json' });
-      res.end(JSON.stringify({ status: 'ok', message: 'json response' }));
-      return;
-    }
-
-    // POST /echo-body — echo JSON body back
-    if (url === '/echo-body' && req.method === 'POST') {
-      let body = '';
-      req.on('data', (chunk: Buffer) => { body += chunk.toString(); });
-      req.on('end', () => {
-        res.writeHead(200, { 'Content-Type': 'application/json' });
-        res.end(JSON.stringify({ received: body, contentType: req.headers['content-type'] }));
-      });
-      return;
-    }
-
-    // GET /echo-headers — echo back request headers
-    if (url === '/echo-headers') {
-      res.writeHead(200, { 'Content-Type': 'text/plain' });
-      const xCustom = req.headers['x-custom-header'] ?? 'none';
-      const xAnother = req.headers['x-another'] ?? 'none';
-      res.end(`x-custom-header: ${xCustom}\nx-another: ${xAnother}`);
-      return;
-    }
-
-    // GET /sse — SSE stream with 3 events
-    if (url === '/sse') {
-      res.writeHead(200, {
-        'Content-Type': 'text/event-stream',
-        'Cache-Control': 'no-cache',
-        'Connection': 'close',
-      });
-      res.write('event: message\ndata: hello\n\n');
-      res.write('event: update\ndata: world\nid: 1\n\n');
-      res.write('data: done\n\n');
-      res.end();
-      return;
-    }
-
-    res.writeHead(404, { 'Content-Type': 'text/plain' });
-    res.end('not found');
-  };
-}
-
-describeIf(hasWasmBinaries, 'wasi-http client (http-test binary)', () => {
-  let kernel: Kernel;
-  let server: Server;
-  let port: number;
-
-  function createHttpKernel(loopbackPort: number): Kernel {
-    const vfs = new SimpleVFS();
-    return createKernel({
-      filesystem: vfs as any,
-      loopbackExemptPorts: [loopbackPort],
-    });
-  }
-
-  beforeAll(async () => {
-    server = createHttpServer(requestHandler(0));
-    await new Promise<void>((resolve) => server.listen(0, '127.0.0.1', resolve));
-    port = (server.address() as import('node:net').AddressInfo).port;
-    // Patch handler to use actual port
-    server.removeAllListeners('request');
-    server.on('request', requestHandler(port));
-  });
-
-  afterAll(async () => {
-    await new Promise<void>((resolve) => server.close(() => resolve()));
-  });
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('GET returns status and body', async () => {
-    kernel = createHttpKernel(port);
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const result = await kernel.exec(`http-test get http://127.0.0.1:${port}/`);
-    expect(result.stdout).toContain('status: 200');
-    expect(result.stdout).toContain('body: hello from wasi-http test');
-  });
-
-  it('GET returns JSON response', async () => {
-    kernel = createHttpKernel(port);
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const result = await kernel.exec(`http-test get http://127.0.0.1:${port}/json`);
-    expect(result.stdout).toContain('status: 200');
-    expect(result.stdout).toContain('"status":"ok"');
-  });
-
-  it('POST sends JSON body correctly', async () => {
-    kernel = createHttpKernel(port);
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const jsonBody = '{"key":"value","num":42}';
-    const result = await kernel.exec(`http-test post http://127.0.0.1:${port}/echo-body '${jsonBody}'`);
-    expect(result.stdout).toContain('status: 200');
-    // Verify server received the JSON body and content-type
-    expect(result.stdout).toContain('"received":"{\\"key\\":\\"value\\",\\"num\\":42}"');
-    expect(result.stdout).toContain('application/json');
-  });
-
-  it('GET with custom headers sends headers correctly', async () => {
-    kernel = createHttpKernel(port);
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const result = await kernel.exec(
-      `http-test headers http://127.0.0.1:${port}/echo-headers 'X-Custom-Header:test-value' 'X-Another:second'`
-    );
-    expect(result.stdout).toContain('status: 200');
-    expect(result.stdout).toContain('x-custom-header: test-value');
-    expect(result.stdout).toContain('x-another: second');
-  });
-
-  it('SSE streaming receives events', async () => {
-    kernel = createHttpKernel(port);
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const result = await kernel.exec(`http-test sse http://127.0.0.1:${port}/sse`);
-    expect(result.stdout).toContain('status: 200');
-    expect(result.stdout).toContain('event: message');
-    expect(result.stdout).toContain('data: hello');
-    expect(result.stdout).toContain('event: update');
-    expect(result.stdout).toContain('data: world');
-    expect(result.stdout).toContain('data: done');
-  });
-
-  it('GET to non-existent path returns 404', async () => {
-    kernel = createHttpKernel(port);
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    const result = await kernel.exec(`http-test get http://127.0.0.1:${port}/nonexistent`);
-    expect(result.stdout).toContain('status: 404');
-  });
-});
-
-describeIf(hasWasmBinaries && hasOpenssl, 'wasi-http HTTPS (http-test binary)', () => {
-  let kernel: Kernel;
-  let httpsServer: HttpsServer;
-  let httpsPort: number;
-
-  function createHttpsKernel(loopbackPort: number): Kernel {
-    const vfs = new SimpleVFS();
-    return createKernel({
-      filesystem: vfs as any,
-      loopbackExemptPorts: [loopbackPort],
-    });
-  }
-
-  beforeAll(async () => {
-    const tlsCert = generateSelfSignedCert();
-
-    httpsServer = createHttpsServer({ key: tlsCert.key, cert: tlsCert.cert }, (req, res) => {
-      if (req.url === '/' && req.method === 'GET') {
-        res.writeHead(200, { 'Content-Type': 'text/plain' });
-        res.end('hello from https');
-        return;
-      }
-      res.writeHead(404);
-      res.end('not found');
-    });
-    await new Promise<void>((resolve) => httpsServer.listen(0, '127.0.0.1', resolve));
-    httpsPort = (httpsServer.address() as import('node:net').AddressInfo).port;
-  });
-
-  afterAll(async () => {
-    if (httpsServer) {
-      await new Promise<void>((resolve) => httpsServer.close(() => resolve()));
-    }
-  });
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('HTTPS GET via TLS upgrade returns response', async () => {
-    kernel = createHttpsKernel(httpsPort);
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-
-    // Disable TLS verification for self-signed cert in tests
-    const origReject = process.env.NODE_TLS_REJECT_UNAUTHORIZED;
-    process.env.NODE_TLS_REJECT_UNAUTHORIZED = '0';
-    try {
-      const result = await kernel.exec(`http-test get https://127.0.0.1:${httpsPort}/`, {
-        env: { NODE_TLS_REJECT_UNAUTHORIZED: '0' },
-      });
-      expect(result.exitCode, result.stderr).toBe(0);
-      expect(result.stdout).toContain('status: 200');
-      expect(result.stdout).toContain('body: hello from https');
-    } finally {
-      if (origReject === undefined) {
-        delete process.env.NODE_TLS_REJECT_UNAUTHORIZED;
-      } else {
-        process.env.NODE_TLS_REJECT_UNAUTHORIZED = origReject;
-      }
-    }
-  });
-});
diff --git a/registry/tests/wasmvm/wasi-spawn.test.ts b/registry/tests/wasmvm/wasi-spawn.test.ts
deleted file mode 100644
index 5f74ef1ea..000000000
--- a/registry/tests/wasmvm/wasi-spawn.test.ts
+++ /dev/null
@@ -1,156 +0,0 @@
-/**
- * Tests for wasi-spawn WasiChild — host_process FFI spawn with pipe capture.
- *
- * Exercises the spawn-test-host binary which uses the wasi-spawn library
- * to spawn child processes via host_process imports and capture output
- * through pipes.
- *
- * Requires WASM binaries built (make wasm in native/wasmvm/).
- */
-
-import { describe, it, expect, beforeEach, afterEach } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import { COMMANDS_DIR, createKernel, describeIf, hasWasmBinaries } from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-import { existsSync } from 'node:fs';
-import { resolve } from 'node:path';
-
-function skipReason(): string | false {
-  if (!hasWasmBinaries) return 'WASM binaries not built (run make wasm in native/wasmvm/)';
-  if (!existsSync(resolve(COMMANDS_DIR, 'spawn-test-host'))) return 'spawn-test-host binary not built';
-  return false;
-}
-
-// Minimal VFS for kernel
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-  private symlinks = new Map<string, string>();
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async pread(path: string, offset: number, length: number): Promise<Uint8Array> {
-    const data = await this.readFile(path);
-    return data.slice(offset, offset + length);
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map((name) => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) { this.dirs.add(path); }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path) || this.symlinks.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const isSymlink = this.symlinks.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !isSymlink && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isSymlink ? 0o120777 : (isDir ? 0o40755 : 0o100644),
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: isSymlink,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  async chmod() {}
-  async rename(from: string, to: string) {
-    const data = this.files.get(from);
-    if (data) { this.files.set(to, data); this.files.delete(from); }
-  }
-  async unlink(path: string) { this.files.delete(path); this.symlinks.delete(path); }
-  async rmdir(path: string) { this.dirs.delete(path); }
-  async symlink(target: string, linkPath: string) {
-    this.symlinks.set(linkPath, target);
-    const parts = linkPath.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async readlink(path: string): Promise<string> {
-    const target = this.symlinks.get(path);
-    if (!target) throw new Error(`EINVAL: ${path}`);
-    return target;
-  }
-}
-
-describeIf(!skipReason(), 'wasi-spawn: WasiChild host_process integration', { timeout: 30_000 }, () => {
-  let kernel: Kernel;
-  let vfs: SimpleVFS;
-
-  beforeEach(async () => {
-    vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [COMMANDS_DIR] }));
-  });
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('spawn echo hello via host_process, capture stdout', async () => {
-    const result = await kernel.exec('spawn-test-host echo');
-    expect(result.stdout).toContain('stdout:hello');
-    expect(result.stdout).toContain('exit:0');
-    expect(result.stdout).toContain('PASS');
-  });
-
-  it('spawn failing command, verify non-zero exit code', async () => {
-    const result = await kernel.exec('spawn-test-host fail');
-    expect(result.stdout).toContain('exit:42');
-    expect(result.stdout).toContain('PASS');
-  });
-
-  it('spawn with kill, verify signal termination', async () => {
-    const result = await kernel.exec('spawn-test-host kill-test');
-    expect(result.stdout).toContain('PASS');
-  });
-
-  it('spawn with custom env vars, verify captured', async () => {
-    const result = await kernel.exec('spawn-test-host env-test');
-    expect(result.stdout).toContain('PASS');
-  });
-
-  it('codex-exec headless prompt mode exits cleanly', async () => {
-    const result = await kernel.exec('codex-exec echo hello');
-    expect(result.exitCode).toBe(0);
-    expect(result.stderr).toContain('prompt received');
-    expect(result.stderr).not.toContain('echo hello');
-  });
-});
diff --git a/registry/tests/wasmvm/wget.test.ts b/registry/tests/wasmvm/wget.test.ts
deleted file mode 100644
index e621da711..000000000
--- a/registry/tests/wasmvm/wget.test.ts
+++ /dev/null
@@ -1,238 +0,0 @@
-/**
- * Integration tests for wget C command (libcurl-based).
- *
- * Verifies HTTP download operations via kernel.exec() with real WASM binaries:
- *   - Basic GET download to file
- *   - Download to specified file (-O)
- *   - Quiet mode (-q)
- *   - Error handling for 404 URLs
- *   - Follow redirects (default behavior)
- *
- * Tests start a local HTTP server in beforeAll and make wget requests against it.
- */
-
-import { describe, it, expect, afterEach, beforeAll, afterAll } from 'vitest';
-import { createWasmVmRuntime } from '../helpers.js';
-import { C_BUILD_DIR, COMMANDS_DIR, createKernel, describeIf, hasCWasmBinaries } from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-import { createServer, type Server, type IncomingMessage, type ServerResponse } from 'node:http';
-
-// Minimal in-memory VFS for kernel tests
-class SimpleVFS {
-  private files = new Map<string, Uint8Array>();
-  private dirs = new Set<string>(['/']);
-
-  async readFile(path: string): Promise<Uint8Array> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    return data;
-  }
-  async readTextFile(path: string): Promise<string> {
-    return new TextDecoder().decode(await this.readFile(path));
-  }
-  async readDir(path: string): Promise<string[]> {
-    const prefix = path === '/' ? '/' : path + '/';
-    const entries: string[] = [];
-    for (const p of [...this.files.keys(), ...this.dirs]) {
-      if (p !== path && p.startsWith(prefix)) {
-        const rest = p.slice(prefix.length);
-        if (!rest.includes('/')) entries.push(rest);
-      }
-    }
-    return entries;
-  }
-  async readDirWithTypes(path: string) {
-    return (await this.readDir(path)).map(name => ({
-      name,
-      isDirectory: this.dirs.has(path === '/' ? `/${name}` : `${path}/${name}`),
-    }));
-  }
-  async writeFile(path: string, content: string | Uint8Array): Promise<void> {
-    const data = typeof content === 'string' ? new TextEncoder().encode(content) : content;
-    this.files.set(path, new Uint8Array(data));
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async createDir(path: string) { this.dirs.add(path); }
-  async mkdir(path: string, _options?: { recursive?: boolean }) {
-    this.dirs.add(path);
-    const parts = path.split('/').filter(Boolean);
-    for (let i = 1; i < parts.length; i++) {
-      this.dirs.add('/' + parts.slice(0, i).join('/'));
-    }
-  }
-  async exists(path: string): Promise<boolean> {
-    return this.files.has(path) || this.dirs.has(path);
-  }
-  async stat(path: string) {
-    const isDir = this.dirs.has(path);
-    const data = this.files.get(path);
-    if (!isDir && !data) throw new Error(`ENOENT: ${path}`);
-    return {
-      mode: isDir ? 0o40755 : 0o100644,
-      size: data?.length ?? 0,
-      isDirectory: isDir,
-      isSymbolicLink: false,
-      atimeMs: Date.now(),
-      mtimeMs: Date.now(),
-      ctimeMs: Date.now(),
-      birthtimeMs: Date.now(),
-      ino: 0,
-      nlink: 1,
-      uid: 1000,
-      gid: 1000,
-    };
-  }
-  async chmod(_path: string, _mode: number) {}
-  async lstat(path: string) { return this.stat(path); }
-  async removeFile(path: string) { this.files.delete(path); }
-  async removeDir(path: string) { this.dirs.delete(path); }
-  async rename(oldPath: string, newPath: string) {
-    const data = this.files.get(oldPath);
-    if (data) {
-      this.files.set(newPath, data);
-      this.files.delete(oldPath);
-    }
-  }
-  async pread(path: string, buffer: Uint8Array, offset: number, length: number, position: number): Promise<number> {
-    const data = this.files.get(path);
-    if (!data) throw new Error(`ENOENT: ${path}`);
-    const available = Math.min(length, data.length - position);
-    if (available <= 0) return 0;
-    buffer.set(data.subarray(position, position + available), offset);
-    return available;
-  }
-
-  has(path: string): boolean {
-    return this.files.has(path);
-  }
-  getContent(path: string): string | undefined {
-    const data = this.files.get(path);
-    return data ? new TextDecoder().decode(data) : undefined;
-  }
-  getRawContent(path: string): Uint8Array | undefined {
-    return this.files.get(path);
-  }
-}
-
-describeIf(hasCWasmBinaries('wget'), 'wget command', () => {
-  let kernel: Kernel;
-  let server: Server;
-  let port: number;
-
-  beforeAll(async () => {
-    server = createServer((req: IncomingMessage, res: ServerResponse) => {
-      const url = req.url ?? '/';
-
-      if (url === '/file.txt') {
-        res.writeHead(200, { 'Content-Type': 'text/plain' });
-        res.end('downloaded content');
-        return;
-      }
-
-      if (url === '/data.json') {
-        res.writeHead(200, { 'Content-Type': 'application/json' });
-        res.end(JSON.stringify({ status: 'ok' }));
-        return;
-      }
-
-      if (url === '/redirect') {
-        const addr = server.address() as import('node:net').AddressInfo;
-        res.writeHead(302, { 'Location': `http://127.0.0.1:${addr.port}/redirected` });
-        res.end();
-        return;
-      }
-
-      if (url === '/redirected') {
-        res.writeHead(200, { 'Content-Type': 'text/plain' });
-        res.end('arrived after redirect');
-        return;
-      }
-
-      if (url === '/binary') {
-        const buf = Buffer.alloc(1024);
-        for (let i = 0; i < buf.length; i++) buf[i] = i & 0xff;
-        res.writeHead(200, {
-          'Content-Type': 'application/octet-stream',
-          'Content-Length': String(buf.length),
-        });
-        res.end(buf);
-        return;
-      }
-
-      res.writeHead(404, { 'Content-Type': 'text/plain' });
-      res.end('not found');
-    });
-
-    await new Promise<void>((resolve) => server.listen(0, '127.0.0.1', resolve));
-    port = (server.address() as import('node:net').AddressInfo).port;
-  });
-
-  afterAll(async () => {
-    await new Promise<void>((resolve) => server.close(() => resolve()));
-  });
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('downloads file to VFS using URL basename', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    await kernel.exec(`wget http://127.0.0.1:${port}/file.txt`);
-
-    const content = vfs.getContent('/file.txt');
-    expect(content).toBe('downloaded content');
-  });
-
-  it('-O saves to specified filename', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    await kernel.exec(`wget -O /output.txt http://127.0.0.1:${port}/data.json`);
-
-    const content = vfs.getContent('/output.txt');
-    expect(content).toBeDefined();
-    expect(content).toContain('"status":"ok"');
-  });
-
-  it('-q suppresses progress output', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    const result = await kernel.exec(`wget -q -O /output.txt http://127.0.0.1:${port}/file.txt`);
-
-    // Quiet mode should produce no stderr
-    expect(result.stderr).toBe('');
-    // File should still be downloaded
-    expect(vfs.getContent('/output.txt')).toBe('downloaded content');
-  });
-
-  it('returns non-zero exit code for 404 URL', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    const result = await kernel.exec(`wget http://127.0.0.1:${port}/nonexistent`);
-
-    // Should report error on stderr
-    expect(result.stderr).toMatch(/wget|404|error|server/i);
-  });
-
-  it('follows redirects by default', async () => {
-    const vfs = new SimpleVFS();
-    kernel = createKernel({ filesystem: vfs as any });
-    await kernel.mount(createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }));
-
-    await kernel.exec(`wget -O /output.txt http://127.0.0.1:${port}/redirect`);
-
-    const content = vfs.getContent('/output.txt');
-    expect(content).toBe('arrived after redirect');
-  });
-});
diff --git a/registry/tests/wasmvm/zip-unzip.test.ts b/registry/tests/wasmvm/zip-unzip.test.ts
deleted file mode 100644
index db330c1e5..000000000
--- a/registry/tests/wasmvm/zip-unzip.test.ts
+++ /dev/null
@@ -1,249 +0,0 @@
-/**
- * Integration tests for zip and unzip C commands.
- *
- * Verifies zip/unzip roundtrip, recursive compression, list mode,
- * and extract-to-directory via kernel.exec() with real WASM binaries.
- */
-
-import { describe, it, expect, afterEach } from 'vitest';
-import { createInMemoryFileSystem, createWasmVmRuntime } from '../helpers.js';
-import { C_BUILD_DIR, COMMANDS_DIR, createKernel } from '../helpers.js';
-import type { Kernel } from '../helpers.js';
-
-interface HostileEntry {
-  name: string;
-  method: number;            // 0 = store, 8 = deflate
-  compressedSize: number;
-  uncompressedSize: number;
-  localOffset: number;
-}
-
-/** Builds a ZIP whose EOCD cd-size field is corrupt so minizip rejects it and
- *  unzip's raw central-directory fallback parser is exercised. The nonzero
- *  version fields on each central directory record also make minizip reject
- *  the archive under the VM's stream semantics, where its reopen-based seek
- *  callback reads EOCD fields from offset 0 instead of the EOCD record.
- *  `prefix` bytes (e.g. a real local file header) are placed at offset 0. */
-function buildFallbackArchive(prefix: Uint8Array, entries: HostileEntry[]): Uint8Array {
-  const enc = new TextEncoder();
-  const cdParts: Uint8Array[] = [];
-  for (const e of entries) {
-    const nameBytes = enc.encode(e.name);
-    const cd = new Uint8Array(46 + nameBytes.length);
-    const dv = new DataView(cd.buffer);
-    dv.setUint32(0, 0x02014b50, true);   // central directory signature
-    dv.setUint16(4, 20, true);           // version made by
-    dv.setUint16(6, 20, true);           // version needed to extract
-    dv.setUint16(10, e.method, true);
-    dv.setUint32(20, e.compressedSize, true);
-    dv.setUint32(24, e.uncompressedSize, true);
-    dv.setUint16(28, nameBytes.length, true);
-    dv.setUint32(42, e.localOffset, true);
-    cd.set(nameBytes, 46);
-    cdParts.push(cd);
-  }
-  const cdOffset = prefix.length;
-  const cdLen = cdParts.reduce((n, p) => n + p.length, 0);
-  const eocd = new Uint8Array(22);
-  const dv = new DataView(eocd.buffer);
-  dv.setUint32(0, 0x06054b50, true);     // EOCD signature
-  dv.setUint16(8, entries.length, true); // entries on this disk
-  dv.setUint16(10, entries.length, true);// total entries
-  dv.setUint32(12, 0xffffffff, true);    // corrupt cd size: forces the fallback parser
-  dv.setUint32(16, cdOffset, true);
-  const out = new Uint8Array(prefix.length + cdLen + 22);
-  out.set(prefix, 0);
-  let off = cdOffset;
-  for (const p of cdParts) { out.set(p, off); off += p.length; }
-  out.set(eocd, off);
-  return out;
-}
-
-describe('zip/unzip commands', () => {
-  let kernel: Kernel;
-
-  afterEach(async () => {
-    await kernel?.dispose();
-  });
-
-  it('zip creates valid archive, unzip extracts it, contents match', async () => {
-    const vfs = createInMemoryFileSystem();
-    await vfs.writeFile('/hello.txt', 'Hello, World!\n');
-
-    kernel = createKernel({ filesystem: vfs });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    // Create zip archive
-    const zipResult = await kernel.exec('zip /archive.zip /hello.txt');
-    expect(zipResult.exitCode, zipResult.stderr).toBe(0);
-
-    // Verify archive was created
-    expect(await vfs.exists('/archive.zip')).toBe(true);
-
-    // Extract to a different directory
-    const unzipResult = await kernel.exec('unzip -d /extracted /archive.zip');
-    expect(unzipResult.exitCode, unzipResult.stderr).toBe(0);
-
-    // Verify extracted content matches original
-    const extracted = await vfs.readTextFile('/extracted/hello.txt');
-    expect(extracted).toBe('Hello, World!\n');
-  });
-
-  it('zip -r compresses directory recursively', async () => {
-    const vfs = createInMemoryFileSystem();
-    await vfs.mkdir('/mydir');
-    await vfs.writeFile('/mydir/a.txt', 'file a\n');
-    await vfs.writeFile('/mydir/b.txt', 'file b\n');
-
-    kernel = createKernel({ filesystem: vfs });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    const zipResult = await kernel.exec('zip -r /dir.zip /mydir');
-    expect(zipResult.exitCode, zipResult.stderr).toBe(0);
-    expect(await vfs.exists('/dir.zip')).toBe(true);
-
-    // Extract and verify
-    const unzipResult = await kernel.exec('unzip -d /out /dir.zip');
-    expect(unzipResult.exitCode, unzipResult.stderr).toBe(0);
-
-    const a = await vfs.readTextFile('/out/mydir/a.txt');
-    const b = await vfs.readTextFile('/out/mydir/b.txt');
-    expect(a).toBe('file a\n');
-    expect(b).toBe('file b\n');
-  });
-
-  it('unzip -l lists archive contents with sizes', async () => {
-    const vfs = createInMemoryFileSystem();
-    await vfs.writeFile('/data.txt', 'some data content\n');
-
-    kernel = createKernel({ filesystem: vfs });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    // Create archive first
-    const zipResult = await kernel.exec('zip /list-test.zip /data.txt');
-    expect(zipResult.exitCode, zipResult.stderr).toBe(0);
-
-    // List contents
-    const listResult = await kernel.exec('unzip -l /list-test.zip');
-    expect(listResult.exitCode, listResult.stderr).toBe(0);
-    expect(listResult.stdout).toContain('data.txt');
-    // Should show the file size (18 bytes)
-    expect(listResult.stdout).toContain('18');
-    // Should show summary line with file count
-    expect(listResult.stdout).toMatch(/1 file/);
-  });
-
-  it('zip/unzip roundtrip preserves file contents exactly', async () => {
-    const vfs = createInMemoryFileSystem();
-    // Binary-like content with various byte values
-    const content = new Uint8Array(256);
-    for (let i = 0; i < 256; i++) content[i] = i;
-    await vfs.writeFile('/binary.bin', content);
-
-    kernel = createKernel({ filesystem: vfs });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    const zipResult = await kernel.exec('zip /roundtrip.zip /binary.bin');
-    expect(zipResult.exitCode, zipResult.stderr).toBe(0);
-
-    const unzipResult = await kernel.exec('unzip -d /rt-out /roundtrip.zip');
-    expect(unzipResult.exitCode, unzipResult.stderr).toBe(0);
-
-    const extracted = await vfs.readFile('/rt-out/binary.bin');
-    expect(extracted.length).toBe(256);
-    for (let i = 0; i < 256; i++) {
-      expect(extracted[i]).toBe(i);
-    }
-  });
-
-  it('unzip -d extracts to specified directory', async () => {
-    const vfs = createInMemoryFileSystem();
-    await vfs.writeFile('/src.txt', 'target content\n');
-
-    kernel = createKernel({ filesystem: vfs });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    const zipResult = await kernel.exec('zip /dest-test.zip /src.txt');
-    expect(zipResult.exitCode, zipResult.stderr).toBe(0);
-
-    // Extract to a new directory
-    const unzipResult = await kernel.exec('unzip -d /custom-dir /dest-test.zip');
-    expect(unzipResult.exitCode, unzipResult.stderr).toBe(0);
-
-    expect(await vfs.exists('/custom-dir/src.txt')).toBe(true);
-    const extracted = await vfs.readTextFile('/custom-dir/src.txt');
-    expect(extracted).toBe('target content\n');
-  });
-
-  it('fallback parser rejects an entry with a wrapping local offset', async () => {
-    const vfs = createInMemoryFileSystem();
-    const bytes = buildFallbackArchive(new Uint8Array(0), [
-      { name: 'evil.txt', method: 0, compressedSize: 4, uncompressedSize: 4, localOffset: 0xfffffff0 },
-    ]);
-    await vfs.writeFile('/evil.zip', bytes);
-
-    kernel = createKernel({ filesystem: vfs });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    const result = await kernel.exec('unzip -d /out /evil.zip');
-    expect(result.exitCode, result.stderr).toBe(1);
-    expect(result.stderr).toMatch(/error/);
-    expect(await vfs.exists('/out/evil.txt')).toBe(false);
-  });
-
-  it('fallback parser skips an entry whose normalized name is empty', async () => {
-    const vfs = createInMemoryFileSystem();
-    const bytes = buildFallbackArchive(new Uint8Array(0), [
-      { name: '/', method: 0, compressedSize: 0, uncompressedSize: 0, localOffset: 0 },
-    ]);
-    await vfs.writeFile('/empty-name.zip', bytes);
-
-    kernel = createKernel({ filesystem: vfs });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    const result = await kernel.exec('unzip /empty-name.zip');
-    expect(result.exitCode, result.stderr).toBe(0);
-    expect(result.stdout).not.toMatch(/error/);
-    expect(result.stderr).not.toMatch(/error/);
-  });
-
-  it('fallback parser caps hostile uncompressed sizes before allocating', async () => {
-    const vfs = createInMemoryFileSystem();
-    // A real 31-byte local header for a 1-byte stored payload.
-    const prefix = new Uint8Array(31);
-    const pdv = new DataView(prefix.buffer);
-    pdv.setUint32(0, 0x04034b50, true); // local file header signature
-    pdv.setUint16(4, 20, true);         // version needed to extract
-    pdv.setUint16(26, 0, true);         // name length
-    pdv.setUint16(28, 0, true);         // extra length
-    prefix[30] = 0x41;                  // one payload byte
-    const bytes = buildFallbackArchive(prefix, [
-      { name: 'big.bin', method: 0, compressedSize: 1, uncompressedSize: 0xffffffff, localOffset: 0 },
-    ]);
-    await vfs.writeFile('/big.zip', bytes);
-
-    kernel = createKernel({ filesystem: vfs });
-    await kernel.mount(
-      createWasmVmRuntime({ commandDirs: [C_BUILD_DIR, COMMANDS_DIR] }),
-    );
-
-    const result = await kernel.exec('unzip -d /cap-out /big.zip');
-    expect(result.exitCode, result.stderr).toBe(1);
-    expect(result.stderr).toMatch(/too large/);
-    expect(await vfs.exists('/cap-out/big.bin')).toBe(false);
-  });
-});
diff --git a/registry/tool/sandbox/simple-icons-16.14.0.tgz b/registry/tool/sandbox/simple-icons-16.14.0.tgz
deleted file mode 100644
index f879e7355..000000000
Binary files a/registry/tool/sandbox/simple-icons-16.14.0.tgz and /dev/null differ
diff --git a/registry/tool/sandbox/src/index.ts b/registry/tool/sandbox/src/index.ts
deleted file mode 100644
index 95a85ec85..000000000
--- a/registry/tool/sandbox/src/index.ts
+++ /dev/null
@@ -1,5 +0,0 @@
-export type {
-	SandboxFsOptions,
-	SandboxMountPluginConfig,
-} from "./mount.js";
-export { createSandboxFs } from "./mount.js";
diff --git a/registry/tool/sandbox/src/mount.ts b/registry/tool/sandbox/src/mount.ts
deleted file mode 100644
index 3c0e44ad6..000000000
--- a/registry/tool/sandbox/src/mount.ts
+++ /dev/null
@@ -1,96 +0,0 @@
-import type {
-	MountConfigJsonObject,
-	NativeMountPluginDescriptor,
-} from "@secure-exec/core/descriptors";
-import type { SandboxAgent } from "sandbox-agent";
-
-export interface SandboxFsOptions {
-	/** A connected SandboxAgent client instance. */
-	client: SandboxAgent;
-	/** Base path to scope all operations under. Defaults to "/". */
-	basePath?: string;
-	/** Per-request timeout for sandbox-agent HTTP calls. */
-	timeoutMs?: number;
-	/** Maximum file size allowed for buffered pread/truncate fallbacks. */
-	maxFullReadBytes?: number;
-}
-
-export type SandboxMountPluginConfig = MountConfigJsonObject & {
-	baseUrl: string;
-	token?: string;
-	headers?: Record<string, string>;
-	basePath?: string;
-	timeoutMs?: number;
-	maxFullReadBytes?: number;
-};
-
-interface SerializableSandboxAgentClient {
-	baseUrl?: string;
-	token?: string;
-	defaultHeaders?: RequestInit["headers"];
-}
-
-function normalizeHeaders(
-	headers: RequestInit["headers"] | undefined,
-): Record<string, string> | undefined {
-	if (!headers) {
-		return undefined;
-	}
-
-	if (headers instanceof Headers) {
-		return Object.fromEntries(headers.entries());
-	}
-
-	if (Array.isArray(headers)) {
-		return Object.fromEntries(
-			headers as Iterable<readonly [string, string]>,
-		);
-	}
-
-	return Object.fromEntries(
-		Object.entries(headers).map(([name, value]) => [name, String(value)]),
-	);
-}
-
-function getSerializableClientConfig(client: SandboxAgent): Pick<
-	SandboxMountPluginConfig,
-	"baseUrl" | "token" | "headers"
-> {
-	const serializable = client as unknown as SerializableSandboxAgentClient;
-	const baseUrl = serializable.baseUrl?.trim().replace(/\/+$/, "");
-	if (!baseUrl) {
-		throw new Error(
-			"SandboxAgent client does not expose a serializable baseUrl; connect with a standard sandbox-agent client instance",
-		);
-	}
-
-	return {
-		baseUrl,
-		...(serializable.token ? { token: serializable.token } : {}),
-		...(serializable.defaultHeaders
-			? { headers: normalizeHeaders(serializable.defaultHeaders) }
-			: {}),
-	};
-}
-
-/**
- * Create a declarative sandbox-agent mount plugin descriptor.
- *
- * This keeps the legacy helper name while routing first-party sandbox mounts
- * through the native `sandbox_agent` plugin instead of a JS VFS backend.
- */
-export function createSandboxFs(
-	options: SandboxFsOptions,
-): NativeMountPluginDescriptor<SandboxMountPluginConfig> {
-	return {
-		id: "sandbox_agent",
-		config: {
-			...getSerializableClientConfig(options.client),
-			...(options.basePath ? { basePath: options.basePath } : {}),
-			...(options.timeoutMs != null ? { timeoutMs: options.timeoutMs } : {}),
-			...(options.maxFullReadBytes != null
-				? { maxFullReadBytes: options.maxFullReadBytes }
-				: {}),
-		},
-	};
-}
diff --git a/registry/tool/sandbox/tests/sandbox.test.ts b/registry/tool/sandbox/tests/sandbox.test.ts
deleted file mode 100644
index 043417255..000000000
--- a/registry/tool/sandbox/tests/sandbox.test.ts
+++ /dev/null
@@ -1,29 +0,0 @@
-import { describe, expect, it } from "vitest";
-import { createSandboxFs } from "../src/index.js";
-
-describe("@secure-exec/sandbox", () => {
-	it("serializes a native sandbox_agent mount descriptor", () => {
-		const mount = createSandboxFs({
-			client: {
-				baseUrl: "https://sandbox.example.com/",
-				token: "sandbox-token",
-				defaultHeaders: { "x-sandbox": "enabled" },
-			} as never,
-			basePath: "/scoped",
-			timeoutMs: 12_345,
-			maxFullReadBytes: 4096,
-		});
-
-		expect(mount).toEqual({
-			id: "sandbox_agent",
-			config: {
-				baseUrl: "https://sandbox.example.com",
-				token: "sandbox-token",
-				headers: { "x-sandbox": "enabled" },
-				basePath: "/scoped",
-				timeoutMs: 12_345,
-				maxFullReadBytes: 4096,
-			},
-		});
-	});
-});
diff --git a/registry/tool/sandbox/tsconfig.json b/registry/tool/sandbox/tsconfig.json
deleted file mode 100644
index bff731325..000000000
--- a/registry/tool/sandbox/tsconfig.json
+++ /dev/null
@@ -1,10 +0,0 @@
-{
-	"extends": "../../../tsconfig.base.json",
-	"compilerOptions": {
-		"declaration": true,
-		"outDir": "./dist",
-		"rootDir": "./src"
-	},
-	"include": ["src/**/*"],
-	"exclude": ["node_modules", "dist"]
-}
diff --git a/registry/tool/sandbox/vitest.config.ts b/registry/tool/sandbox/vitest.config.ts
deleted file mode 100644
index 140a9311a..000000000
--- a/registry/tool/sandbox/vitest.config.ts
+++ /dev/null
@@ -1,7 +0,0 @@
-import { defineConfig } from "vitest/config";
-export default defineConfig({
-  test: {
-    testTimeout: 30000,
-    hookTimeout: 30000,
-  },
-});
diff --git a/registry/tsconfig.base.json b/registry/tsconfig.base.json
deleted file mode 100644
index 2986900c9..000000000
--- a/registry/tsconfig.base.json
+++ /dev/null
@@ -1,14 +0,0 @@
-{
-  "compilerOptions": {
-    "target": "esnext",
-    "module": "NodeNext",
-    "moduleResolution": "NodeNext",
-    "strict": true,
-    "skipLibCheck": true,
-    "esModuleInterop": true,
-    "declaration": true,
-    "stripInternal": true,
-    "lib": ["ESNext"],
-    "types": ["node"]
-  }
-}
diff --git a/scripts/check-crypto-conformance.mjs b/scripts/check-crypto-conformance.mjs
deleted file mode 100644
index 32c07d3f1..000000000
--- a/scripts/check-crypto-conformance.mjs
+++ /dev/null
@@ -1,184 +0,0 @@
-#!/usr/bin/env node
-import fs from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const repoRoot = path.resolve(scriptDir, "..");
-
-const fixturePath = path.join(
-	repoRoot,
-	"tests",
-	"fixtures",
-	"crypto-basic-conformance.json",
-);
-const browserTestPath = path.join(
-	repoRoot,
-	"packages",
-	"browser",
-	"tests",
-	"browser",
-	"runtime-driver.spec.ts",
-);
-const nativeBuiltinTestPath = path.join(
-	repoRoot,
-	"crates",
-	"sidecar",
-	"tests",
-	"builtin_conformance.rs",
-);
-const nativeServiceTestPath = path.join(
-	repoRoot,
-	"crates",
-	"sidecar",
-	"tests",
-	"service.rs",
-);
-
-const fixture = JSON.parse(fs.readFileSync(fixturePath, "utf8"));
-const browserTest = fs.readFileSync(browserTestPath, "utf8");
-const nativeBuiltinTest = fs.readFileSync(nativeBuiltinTestPath, "utf8");
-const nativeServiceTest = fs.readFileSync(nativeServiceTestPath, "utf8");
-
-const errors = [];
-
-function assert(condition, message) {
-	if (!condition) errors.push(message);
-}
-
-function assertFixturePath(source, label) {
-	assert(
-		source.includes("crypto-basic-conformance.json"),
-		`${label} must load tests/fixtures/crypto-basic-conformance.json`,
-	);
-}
-
-function assertSourceMentions(source, label, tokens) {
-	for (const token of tokens) {
-		assert(source.includes(token), `${label} must assert shared crypto vector ${token}`);
-	}
-}
-
-assert(Array.isArray(fixture.expected?.hashes), "fixture must list expected.hashes");
-assert(Array.isArray(fixture.expected?.ciphers), "fixture must list expected.ciphers");
-assert(Array.isArray(fixture.expected?.curves), "fixture must list expected.curves");
-assert(typeof fixture.expected?.primes === "object", "fixture must define expected.primes");
-
-for (const field of [
-	"md5",
-	"sha224",
-	"sha256",
-	"sha384",
-	"hmacSha256",
-	"hmacSha384",
-	"pbkdf2Sha256",
-	"pbkdf2Sha384",
-	"scrypt",
-	"aes256CbcCiphertext",
-	"aes256GcmCiphertext",
-	"aes256GcmAuthTag",
-	"aes256GcmWebCryptoCiphertext",
-]) {
-	assert(
-		typeof fixture.expected?.[field] === "string",
-		`fixture must define expected.${field}`,
-	);
-}
-
-for (const field of ["algorithm", "plaintext", "aad", "keyHex", "ivHex"]) {
-	assert(typeof fixture.aesGcm?.[field] === "string", `fixture must define aesGcm.${field}`);
-}
-assert(
-	typeof fixture.aesGcm?.authTagLength === "number",
-	"fixture must define aesGcm.authTagLength",
-);
-
-for (const [section, fields] of Object.entries({
-	aesCbc: ["algorithm", "plaintext", "keyHex", "ivHex"],
-	rsa: ["message", "privatePem", "publicPem", "sha256SignatureHex"],
-	dh: ["primeHex", "generatorHex", "privateAHex", "privateBHex", "publicAHex", "publicBHex", "secretHex"],
-	ecdh: ["curve", "privateAHex", "privateBHex", "publicAHex", "publicBHex", "secretHex"],
-	"expected.primes": ["bits", "safeBits", "bufferBits", "bufferByteLength"],
-})) {
-	for (const field of fields) {
-		const source = section === "expected.primes" ? fixture.expected?.primes : fixture[section];
-		assert(
-			typeof source?.[field] === (section === "expected.primes" ? "number" : "string"),
-			`fixture must define ${section}.${field}`,
-		);
-	}
-}
-
-assertFixturePath(browserTest, "browser runtime crypto test");
-assertFixturePath(nativeBuiltinTest, "native builtin crypto conformance test");
-assertFixturePath(nativeServiceTest, "native crypto sync-RPC test");
-
-assertSourceMentions(browserTest, "browser runtime crypto test", [
-	"cryptoBasicFixture.expected.hashes",
-	"cryptoBasicFixture.expected.ciphers",
-	"cryptoBasicFixture.expected.curves",
-	"cryptoBasicFixture.expected.md5",
-	"cryptoBasicFixture.expected.sha224",
-	"cryptoBasicFixture.expected.sha256",
-	"cryptoBasicFixture.expected.sha384",
-	"cryptoBasicFixture.expected.hmacSha256",
-	"cryptoBasicFixture.expected.hmacSha384",
-	"cryptoBasicFixture.expected.pbkdf2Sha256",
-	"cryptoBasicFixture.expected.pbkdf2Sha384",
-	"cryptoBasicFixture.expected.scrypt",
-	"cryptoBasicFixture.expected.aes256CbcCiphertext",
-	"cryptoBasicFixture.expected.aes256GcmCiphertext",
-	"cryptoBasicFixture.expected.aes256GcmAuthTag",
-	"cryptoBasicFixture.expected.aes256GcmWebCryptoCiphertext",
-	"cryptoBasicFixture.expected.primes.bits",
-	"cryptoBasicFixture.expected.primes.safeBits",
-	"cryptoBasicFixture.expected.primes.bufferBits",
-	"cryptoBasicFixture.expected.primes.bufferByteLength",
-	"cryptoBasicFixture.rsa.sha256SignatureHex",
-	"cryptoBasicFixture.dh.secretHex",
-	"cryptoBasicFixture.ecdh.secretHex",
-]);
-
-assertSourceMentions(nativeServiceTest, "native crypto sync-RPC test", [
-	"fixture.expected.md5",
-	"fixture.expected.sha224",
-	"fixture.expected.sha256",
-	"fixture.expected.sha384",
-	"fixture.expected.hmac_sha256",
-	"fixture.expected.hmac_sha384",
-	"fixture.expected.pbkdf2_sha256",
-	"fixture.expected.pbkdf2_sha384",
-	"fixture.expected.scrypt",
-	"fixture.expected.aes256_cbc_ciphertext",
-	"fixture.expected.aes256_gcm_ciphertext",
-	"fixture.expected.aes256_gcm_auth_tag",
-	"fixture.expected.aes256_gcm_web_crypto_ciphertext",
-	"fixture.expected.primes.bits",
-	"fixture.expected.primes.safe_bits",
-	"fixture.expected.primes.buffer_bits",
-	"fixture.expected.primes.buffer_byte_length",
-]);
-
-assertSourceMentions(nativeBuiltinTest, "native builtin crypto conformance test", [
-	"fixture[\"rsa\"][\"sha256SignatureHex\"]",
-	"fixture[\"dh\"][\"secretHex\"]",
-	"fixture[\"ecdh\"][\"secretHex\"]",
-	"expected[\"primes\"][\"bits\"]",
-	"expected[\"primes\"][\"safeBits\"]",
-	"expected[\"primes\"][\"bufferBits\"]",
-	"expected[\"primes\"][\"bufferByteLength\"]",
-	"expected[\"aes256GcmCiphertext\"]",
-	"expected[\"aes256GcmAuthTag\"]",
-	"expected[\"aes256GcmWebCryptoCiphertext\"]",
-	"expected[\"hashes\"]",
-	"expected[\"ciphers\"]",
-	"expected[\"curves\"]",
-]);
-
-if (errors.length > 0) {
-	console.error("Crypto conformance fixture drift detected:");
-	for (const error of errors) {
-		console.error(`  - ${error}`);
-	}
-	process.exit(1);
-}
diff --git a/scripts/check-generated-artifacts.mjs b/scripts/check-generated-artifacts.mjs
deleted file mode 100644
index f6528fe48..000000000
--- a/scripts/check-generated-artifacts.mjs
+++ /dev/null
@@ -1,167 +0,0 @@
-#!/usr/bin/env node
-import { spawnSync } from "node:child_process";
-import { existsSync, readdirSync } from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const repoRoot = path.resolve(scriptDir, "..");
-
-const checkedPaths = [
-	"packages/core/src/generated-protocol.ts",
-	"packages/core/src/generated",
-	"packages/browser/src/generated/util-polyfill.ts",
-	"packages/browser/src/generated/buffer-polyfill.ts",
-	"packages/browser/src/generated/path-polyfill.ts",
-	"crates/bridge/bridge-contract.json",
-	"crates/execution/assets/polyfill-registry.json",
-	"crates/execution/assets/wasi-preview1-imports.json",
-	"crates/execution/assets/v8-bridge.js",
-	"crates/execution/assets/v8-bridge-zlib.js",
-	"crates/v8-runtime/assets/generated/v8-bridge.js",
-	"crates/v8-runtime/assets/generated/v8-bridge-zlib.js",
-];
-
-assertNoLegacyVmConfigBindings();
-assertNoLegacyBuildSupportShims();
-// CI runners have plain git checkouts (no jj); local workspaces are jj-first.
-const vcs = detectVcs();
-const beforeDiff = capture(vcs.cmd, [...vcs.diffArgs, "--", ...checkedPaths]);
-run("pnpm", ["--dir", "packages/build-tools", "build:protocol"]);
-run("node", ["packages/build-tools/scripts/build-browser-util-polyfill.mjs"]);
-run("node", ["packages/build-tools/scripts/build-browser-buffer-polyfill.mjs"]);
-run("node", ["packages/build-tools/scripts/build-browser-path-polyfill.mjs"]);
-run("node", ["packages/build-tools/scripts/build-v8-bridge.mjs"]);
-run("node", [
-	"packages/build-tools/scripts/build-v8-bridge.mjs",
-	"--out-dir",
-	path.join("crates", "v8-runtime", "assets", "generated"),
-]);
-run("node", ["scripts/check-polyfill-registry.mjs"]);
-run("node", ["scripts/check-crypto-conformance.mjs"]);
-run("node", ["scripts/check-module-resolution-conformance.mjs"]);
-run("pnpm", ["--dir", "packages/browser", "check:bridge-contract"]);
-run("pnpm", ["--dir", "packages/browser", "check:signals"]);
-run("pnpm", ["--dir", "packages/browser", "check:wasi-surface"]);
-run("cargo", ["test", "-p", "secure-exec-bridge", "bridge_contract", "--quiet"]);
-run("cargo", ["test", "-p", "secure-exec-vm-config", "--quiet"]);
-const afterDiff = capture(vcs.cmd, [...vcs.diffArgs, "--", ...checkedPaths]);
-
-if (afterDiff !== beforeDiff) {
-	const changed = capture(vcs.cmd, [...vcs.nameOnlyArgs, "--", ...checkedPaths])
-		.split("\n")
-		.map((line) => line.trim())
-		.filter(Boolean);
-	console.error(
-		[
-			"Generated artifact drift detected.",
-			"Run the generators and commit the resulting changes:",
-			"  pnpm --dir packages/build-tools build:protocol",
-			"  node packages/build-tools/scripts/build-browser-util-polyfill.mjs",
-			"  node packages/build-tools/scripts/build-v8-bridge.mjs",
-			"  node packages/build-tools/scripts/build-v8-bridge.mjs --out-dir crates/v8-runtime/assets/generated",
-			"  cargo test -p secure-exec-vm-config --quiet",
-			"  pnpm --dir packages/browser check:bridge-contract",
-			"  pnpm --dir packages/browser check:wasi-surface",
-			"",
-			"Changed checked paths:",
-			...changed.map((file) => `  ${file}`),
-			"",
-		].join("\n"),
-	);
-	run(vcs.cmd, [...vcs.statArgs, "--", ...checkedPaths], { allowFailure: true });
-	process.exit(1);
-}
-
-function detectVcs() {
-	const probe = spawnSync("jj", ["root"], { cwd: repoRoot, encoding: "utf8" });
-	if (!probe.error && probe.status === 0) {
-		return {
-			cmd: "jj",
-			diffArgs: ["diff", "--git", "--color=never"],
-			nameOnlyArgs: ["diff", "--name-only"],
-			statArgs: ["diff", "--stat"],
-		};
-	}
-	return {
-		cmd: "git",
-		diffArgs: ["diff", "--no-color"],
-		nameOnlyArgs: ["diff", "--name-only"],
-		statArgs: ["diff", "--stat"],
-	};
-}
-
-function run(command, args, options = {}) {
-	const result = spawnSync(command, args, {
-		cwd: repoRoot,
-		stdio: "inherit",
-		shell: process.platform === "win32",
-	});
-	if (!options.allowFailure && result.status !== 0) {
-		process.exit(result.status ?? 1);
-	}
-}
-
-function capture(command, args) {
-	const result = spawnSync(command, args, {
-		cwd: repoRoot,
-		encoding: "utf8",
-		maxBuffer: 128 * 1024 * 1024,
-		shell: process.platform === "win32",
-	});
-	if (result.error) {
-		console.error(result.error.message);
-		process.exit(1);
-	}
-	if (result.status !== 0) {
-		process.stderr.write(result.stderr);
-		process.exit(result.status ?? 1);
-	}
-	return result.stdout;
-}
-
-function assertNoLegacyVmConfigBindings() {
-	const legacyDir = path.join(repoRoot, "crates", "vm-config", "bindings");
-	let entries;
-	try {
-		entries = readdirSync(legacyDir);
-	} catch (error) {
-		if (error?.code === "ENOENT") {
-			return;
-		}
-		throw error;
-	}
-	if (entries.length === 0) {
-		return;
-	}
-	console.error(
-		[
-			"Stale vm-config bindings detected.",
-			"The canonical TypeScript vm-config output is packages/core/src/generated/.",
-			"Remove crates/vm-config/bindings/ so generated DTOs do not drift.",
-			"",
-		].join("\n"),
-	);
-	process.exit(1);
-}
-
-function assertNoLegacyBuildSupportShims() {
-	const legacyFiles = [
-		path.join(repoRoot, "crates", "execution", "build_support.rs"),
-		path.join(repoRoot, "crates", "v8-runtime", "build_support.rs"),
-	];
-	const present = legacyFiles.filter((file) => existsSync(file));
-	if (present.length === 0) {
-		return;
-	}
-	console.error(
-		[
-			"Stale V8 bridge build-support shims detected.",
-			"The canonical implementation is crates/build-support/v8_bridge_build.rs.",
-			"Remove these duplicate files so native bridge builds cannot drift:",
-			...present.map((file) => `  ${path.relative(repoRoot, file)}`),
-			"",
-		].join("\n"),
-	);
-	process.exit(1);
-}
diff --git a/scripts/check-module-resolution-conformance.mjs b/scripts/check-module-resolution-conformance.mjs
deleted file mode 100644
index 110f681ee..000000000
--- a/scripts/check-module-resolution-conformance.mjs
+++ /dev/null
@@ -1,224 +0,0 @@
-#!/usr/bin/env node
-import fs from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const repoRoot = path.resolve(scriptDir, "..");
-
-const fixturePath = path.join(
-	repoRoot,
-	"tests",
-	"fixtures",
-	"module-resolution-conformance.json",
-);
-const nativeTestPath = path.join(
-	repoRoot,
-	"crates",
-	"execution",
-	"tests",
-	"module_resolution.rs",
-);
-const browserTestPath = path.join(
-	repoRoot,
-	"packages",
-	"browser",
-	"tests",
-	"runtime",
-	"resolve-module.test.ts",
-);
-
-const fixture = JSON.parse(fs.readFileSync(fixturePath, "utf8"));
-const nativeTest = fs.readFileSync(nativeTestPath, "utf8");
-const browserTest = fs.readFileSync(browserTestPath, "utf8");
-
-const errors = [];
-
-function assert(condition, message) {
-	if (!condition) errors.push(message);
-}
-
-function assertFixturePath(source, label) {
-	assert(
-		source.includes("module-resolution-conformance.json"),
-		`${label} must load tests/fixtures/module-resolution-conformance.json`,
-	);
-}
-
-function assertSourceMentions(source, label, tokens) {
-	for (const token of tokens) {
-		assert(source.includes(token), `${label} must exercise shared fixture token ${token}`);
-	}
-}
-
-assert(Array.isArray(fixture.cases), "fixture must define cases");
-assert(fixture.cases?.length > 0, "fixture must contain at least one case");
-assert(Array.isArray(fixture.formats), "fixture must define formats");
-assert(fixture.formats?.length > 0, "fixture must contain at least one format case");
-
-const expectations = [];
-const formatExpectations = [];
-for (const [caseIndex, testCase] of (fixture.cases ?? []).entries()) {
-	assert(typeof testCase.name === "string" && testCase.name.length > 0, `case ${caseIndex} must define name`);
-	assert(testCase.files && typeof testCase.files === "object" && !Array.isArray(testCase.files), `${testCase.name} must define files`);
-	assert(Array.isArray(testCase.resolves) && testCase.resolves.length > 0, `${testCase.name} must define resolves`);
-
-	for (const [filePath, contents] of Object.entries(testCase.files ?? {})) {
-		assert(typeof filePath === "string" && filePath.length > 0, `${testCase.name} has an empty fixture file path`);
-		assert(typeof contents === "string", `${testCase.name}:${filePath} contents must be a string`);
-	}
-
-	for (const [resolutionIndex, resolution] of (testCase.resolves ?? []).entries()) {
-		assert(typeof resolution.specifier === "string" && resolution.specifier.length > 0, `${testCase.name} resolution ${resolutionIndex} must define specifier`);
-		assert(typeof resolution.from === "string" && resolution.from.length > 0, `${testCase.name} resolution ${resolutionIndex} must define from`);
-		assert(["import", "require"].includes(resolution.mode), `${testCase.name} resolution ${resolutionIndex} mode must be import or require`);
-		assert(
-			typeof resolution.expected === "string" || resolution.expected === null,
-			`${testCase.name} resolution ${resolutionIndex} expected must be a string or null`,
-		);
-		expectations.push(resolution);
-	}
-}
-
-for (const [caseIndex, testCase] of (fixture.formats ?? []).entries()) {
-	assert(typeof testCase.name === "string" && testCase.name.length > 0, `format case ${caseIndex} must define name`);
-	assert(testCase.files && typeof testCase.files === "object" && !Array.isArray(testCase.files), `${testCase.name} must define files`);
-	assert(typeof testCase.path === "string" && testCase.path.length > 0, `${testCase.name} must define path`);
-	assert(
-		["module", "commonjs", "json", null].includes(testCase.expected),
-		`${testCase.name} expected must be module, commonjs, json, or null`,
-	);
-
-	for (const [filePath, contents] of Object.entries(testCase.files ?? {})) {
-		assert(typeof filePath === "string" && filePath.length > 0, `${testCase.name} has an empty fixture file path`);
-		assert(typeof contents === "string", `${testCase.name}:${filePath} contents must be a string`);
-	}
-
-	formatExpectations.push(testCase);
-}
-
-function hasExpectation(match) {
-	return expectations.some(
-		(resolution) =>
-			resolution.specifier === match.specifier &&
-			resolution.from === match.from &&
-			resolution.mode === match.mode &&
-			resolution.expected === match.expected,
-	);
-}
-
-function hasFormatExpectation(match) {
-	return formatExpectations.some(
-		(format) =>
-			format.path === match.path &&
-			format.expected === match.expected,
-	);
-}
-
-for (const required of [
-	{
-		label: "file URL parsing",
-		specifier: "file:///root/project/space%20name.js?cache=1",
-		from: "/root/project/app.js",
-		mode: "require",
-		expected: "/root/project/space name.js",
-	},
-	{
-		label: "package imports",
-		specifier: "#utils/math",
-		from: "/root/project/src/app.js",
-		mode: "import",
-		expected: "/root/project/src/utils/math.js",
-	},
-	{
-		label: "native node condition order",
-		specifier: "pkg",
-		from: "/root/project/app.js",
-		mode: "import",
-		expected: "/root/node_modules/pkg/node.js",
-	},
-	{
-		label: "missing package export target",
-		specifier: "missing-export",
-		from: "/root/project/app.js",
-		mode: "import",
-		expected: "/root/node_modules/missing-export/dist/missing.js",
-	},
-	{
-		label: "extension probing",
-		specifier: "./dual",
-		from: "/root/project/src/app.js",
-		mode: "import",
-		expected: "/root/project/src/dual.js",
-	},
-	{
-		label: "package self-reference exports",
-		specifier: "self-pkg/feature",
-		from: "/root/project/src/app.js",
-		mode: "import",
-		expected: "/root/project/src/feature.mjs",
-	},
-	{
-		label: "root node_modules fallback",
-		specifier: "root-fallback",
-		from: "/workspace/app.js",
-		mode: "require",
-		expected: "/root/node_modules/root-fallback/index.js",
-	},
-]) {
-	assert(hasExpectation(required), `fixture must include shared case for ${required.label}`);
-}
-
-for (const required of [
-	{
-		label: "ESM extension format",
-		path: "/root/project/src/module.mjs",
-		expected: "module",
-	},
-	{
-		label: "CJS extension format",
-		path: "/root/project/src/module.cjs",
-		expected: "commonjs",
-	},
-	{
-		label: "nearest module package type",
-		path: "/root/project/src/app.js",
-		expected: "module",
-	},
-	{
-		label: "nearest commonjs package type",
-		path: "/root/project/src/cjs/app.js",
-		expected: "commonjs",
-	},
-	{
-		label: "unknown extension format",
-		path: "/root/project/src/readme.txt",
-		expected: null,
-	},
-]) {
-	assert(hasFormatExpectation(required), `fixture must include shared format case for ${required.label}`);
-}
-
-assertFixturePath(nativeTest, "native module resolution test");
-assertFixturePath(browserTest, "browser module resolution test");
-assertSourceMentions(nativeTest, "native module resolution test", [
-	"matches_shared_native_browser_conformance_fixture",
-	"SharedModuleResolutionFixture",
-	"resolve_import",
-	"resolve_require",
-	"module_format",
-]);
-assertSourceMentions(browserTest, "browser module resolution test", [
-	"matches the shared native/browser conformance fixture",
-	"ModuleResolutionConformanceFixture",
-	"resolveModule",
-	"moduleFormat",
-]);
-
-if (errors.length > 0) {
-	console.error("Module resolution conformance fixture drift detected:");
-	for (const error of errors) {
-		console.error(`  - ${error}`);
-	}
-	process.exit(1);
-}
diff --git a/scripts/check-no-escaping-local-deps.mjs b/scripts/check-no-escaping-local-deps.mjs
deleted file mode 100644
index ff692b6bc..000000000
--- a/scripts/check-no-escaping-local-deps.mjs
+++ /dev/null
@@ -1,158 +0,0 @@
-// Guard against committing dependencies that point at a local path *outside*
-// this repository. In-repo local links are legitimate (the registry links to
-// ../packages/core, test fixtures use file:./vendor/..., cargo crates use
-// path = "../sibling-crate"). What must never land on a branch is a link:/file:/
-// path: dependency that escapes the repo root — e.g. a `link:../../secure-exec`
-// override left over from local-dev mode, which resolves to nothing in CI and
-// breaks the build. This check fails on exactly those escaping local deps.
-import { existsSync, readdirSync, readFileSync } from "node:fs";
-import { dirname, isAbsolute, relative, resolve, sep } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const defaultRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
-const dependencySections = [
-	"dependencies",
-	"devDependencies",
-	"peerDependencies",
-	"optionalDependencies",
-];
-// pnpm/npm local-path protocols whose target is a filesystem path.
-const localProtocols = ["link:", "file:", "portal:"];
-const ignoredDirectories = new Set([
-	".git",
-	".jj",
-	".turbo",
-	"coverage",
-	"dist",
-	"node_modules",
-	"target",
-]);
-
-function parseArgs(argv) {
-	const options = { root: defaultRoot };
-	for (let i = 0; i < argv.length; i++) {
-		const arg = argv[i];
-		if (arg === "--root") {
-			options.root = argv[++i];
-			continue;
-		}
-		if (arg.startsWith("--root=")) {
-			options.root = arg.slice("--root=".length);
-			continue;
-		}
-		throw new Error(`unknown argument: ${arg}`);
-	}
-	return { root: resolve(options.root) };
-}
-
-// True when `target` is the root itself or nested inside it (lexically — the
-// path need not exist, which matters because escaping targets are absent in CI).
-function isInsideRoot(root, target) {
-	if (target === root) return true;
-	const rel = relative(root, target);
-	return rel !== "" && !rel.startsWith("..") && !isAbsolute(rel);
-}
-
-function localPathFromSpecifier(specifier) {
-	for (const protocol of localProtocols) {
-		if (specifier.startsWith(protocol)) {
-			return specifier.slice(protocol.length);
-		}
-	}
-	return null;
-}
-
-function checkPackageManifest(root, manifestPath, relPath, violations) {
-	let manifest;
-	try {
-		manifest = JSON.parse(readFileSync(manifestPath, "utf8"));
-	} catch {
-		return;
-	}
-	const manifestDir = dirname(manifestPath);
-	for (const section of dependencySections) {
-		const deps = manifest[section];
-		if (!deps || typeof deps !== "object") continue;
-		for (const [name, specifier] of Object.entries(deps)) {
-			if (typeof specifier !== "string") continue;
-			const localPath = localPathFromSpecifier(specifier);
-			if (localPath === null) continue;
-			const resolved = resolve(manifestDir, localPath);
-			if (!isInsideRoot(root, resolved)) {
-				violations.push(
-					`${relPath} ${section}."${name}" uses local dep "${specifier}" that escapes the repo`,
-				);
-			}
-		}
-	}
-}
-
-// Match `path = "..."` entries in a Cargo.toml (deps + non-dep keys alike;
-// in-repo paths pass the escape check, so only escaping ones are flagged).
-const cargoPathPattern = /(^|[\s{,])path\s*=\s*"([^"]+)"/g;
-
-function checkCargoManifest(root, manifestPath, relPath, violations) {
-	const source = readFileSync(manifestPath, "utf8");
-	const manifestDir = dirname(manifestPath);
-	cargoPathPattern.lastIndex = 0;
-	let match;
-	while ((match = cargoPathPattern.exec(source))) {
-		const localPath = match[2];
-		const resolved = resolve(manifestDir, localPath);
-		if (!isInsideRoot(root, resolved)) {
-			violations.push(
-				`${relPath} uses cargo path = "${localPath}" that escapes the repo`,
-			);
-		}
-	}
-}
-
-function walk(root, dir, violations) {
-	for (const entry of readdirSync(dir, { withFileTypes: true })) {
-		if (entry.isDirectory() && ignoredDirectories.has(entry.name)) continue;
-		const path = resolve(dir, entry.name);
-		if (entry.isDirectory()) {
-			walk(root, path, violations);
-			continue;
-		}
-		if (!entry.isFile()) continue;
-		const relPath = relative(root, path).split(sep).join("/");
-		if (entry.name === "package.json") {
-			checkPackageManifest(root, path, relPath, violations);
-		} else if (entry.name === "Cargo.toml") {
-			checkCargoManifest(root, path, relPath, violations);
-		}
-	}
-}
-
-export function auditLocalDeps(options = {}) {
-	const root = resolve(options.root ?? defaultRoot);
-	const violations = [];
-	if (!existsSync(root)) {
-		return { root, ok: false, violations: [`${root} does not exist`] };
-	}
-	walk(root, root, violations);
-	violations.sort();
-	return { root, ok: violations.length === 0, violations };
-}
-
-export function main(argv = process.argv.slice(2)) {
-	const options = parseArgs(argv);
-	const result = auditLocalDeps(options);
-	if (result.ok) {
-		console.log("no escaping local deps");
-		return 0;
-	}
-	console.error("escaping local dependency violations:");
-	for (const violation of result.violations) {
-		console.error(`- ${violation}`);
-	}
-	console.error(
-		"\nCommit pinned/published versions instead of link:/file:/path: deps that point outside the repo.",
-	);
-	return 1;
-}
-
-if (import.meta.url === `file://${process.argv[1]}`) {
-	process.exitCode = main();
-}
diff --git a/scripts/check-no-escaping-local-deps.test.mjs b/scripts/check-no-escaping-local-deps.test.mjs
deleted file mode 100644
index 458178d7c..000000000
--- a/scripts/check-no-escaping-local-deps.test.mjs
+++ /dev/null
@@ -1,72 +0,0 @@
-import assert from "node:assert/strict";
-import { execFileSync, spawnSync } from "node:child_process";
-import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { dirname, join } from "node:path";
-import test from "node:test";
-import { fileURLToPath } from "node:url";
-
-const scriptPath = join(dirname(fileURLToPath(import.meta.url)), "check-no-escaping-local-deps.mjs");
-
-function withFixture(fn) {
-	const root = mkdtempSync(join(tmpdir(), "escaping-local-deps-"));
-	try {
-		return fn(root);
-	} finally {
-		rmSync(root, { recursive: true, force: true });
-	}
-}
-
-function write(root, rel, contents) {
-	const path = join(root, rel);
-	mkdirSync(dirname(path), { recursive: true });
-	writeFileSync(path, contents);
-}
-
-test("passes in-repo local deps (link/file/path inside the repo)", () => {
-	withFixture((root) => {
-		write(
-			root,
-			"registry/package.json",
-			JSON.stringify({
-				dependencies: { "@secure-exec/core": "link:../packages/core" },
-			}),
-		);
-		write(
-			root,
-			"tests/fixture/package.json",
-			JSON.stringify({ dependencies: { lib: "file:./vendor/lib" } }),
-		);
-		write(root, "crates/sidecar/Cargo.toml", '[dependencies]\nkernel = { path = "../kernel" }\n');
-		execFileSync(process.execPath, [scriptPath, "--root", root], { stdio: "pipe" });
-	});
-});
-
-test("rejects a package.json local dep that escapes the repo", () => {
-	withFixture((root) => {
-		write(
-			root,
-			"packages/core/package.json",
-			JSON.stringify({
-				dependencies: { "@secure-exec/core": "link:../../../secure-exec/packages/core" },
-			}),
-		);
-		const result = spawnSync(process.execPath, [scriptPath, "--root", root], { encoding: "utf8" });
-		assert.notEqual(result.status, 0);
-		assert.match(result.stderr, /escapes the repo/);
-		assert.match(result.stderr, /@secure-exec\/core/);
-	});
-});
-
-test("rejects a cargo path dep that escapes the repo", () => {
-	withFixture((root) => {
-		write(
-			root,
-			"crates/sidecar/Cargo.toml",
-			'[dependencies]\nsecure-exec-core = { path = "../../../secure-exec/crates/core" }\n',
-		);
-		const result = spawnSync(process.execPath, [scriptPath, "--root", root], { encoding: "utf8" });
-		assert.notEqual(result.status, 0);
-		assert.match(result.stderr, /escapes the repo/);
-	});
-});
diff --git a/scripts/check-polyfill-registry.mjs b/scripts/check-polyfill-registry.mjs
deleted file mode 100644
index d78582431..000000000
--- a/scripts/check-polyfill-registry.mjs
+++ /dev/null
@@ -1,79 +0,0 @@
-#!/usr/bin/env node
-import { readFileSync } from "node:fs";
-import path from "node:path";
-import { fileURLToPath } from "node:url";
-
-const scriptDir = path.dirname(fileURLToPath(import.meta.url));
-const repoRoot = path.resolve(scriptDir, "..");
-
-const registryPath = path.join(
-	repoRoot,
-	"crates",
-	"execution",
-	"assets",
-	"polyfill-registry.json",
-);
-const builtinModulesPath = path.join(
-	repoRoot,
-	"packages",
-	"build-tools",
-	"bridge-src",
-	"builtins",
-	"builtin-modules.ts",
-);
-
-const registry = JSON.parse(readFileSync(registryPath, "utf8"));
-const builtinModulesSource = readFileSync(builtinModulesPath, "utf8");
-const registryNames = new Set(
-	(registry.groups ?? []).flatMap((group) => group.names ?? []),
-);
-
-const builtinModules = extractStringList(
-	builtinModulesSource,
-	/static builtinModules = \[([\s\S]*?)\];/,
-	"Module.builtinModules",
-);
-const loadBuiltinCases = new Set(
-	[...builtinModulesSource.matchAll(/case "([^"]+)":/g)]
-		.map((match) => match[1])
-		.filter((name) => builtinModules.has(name)),
-);
-
-const errors = [];
-reportMissing(
-	[...builtinModules].filter((name) => !registryNames.has(name)),
-	"is in Module.builtinModules but missing from polyfill-registry.json",
-);
-reportMissing(
-	[...registryNames].filter((name) => !builtinModules.has(name)),
-	"is in polyfill-registry.json but missing from Module.builtinModules",
-);
-reportMissing(
-	[...builtinModules].filter((name) => !loadBuiltinCases.has(name)),
-	"is in Module.builtinModules but missing from loadBuiltinModule()",
-);
-
-if (errors.length > 0) {
-	console.error("Polyfill registry drift detected:");
-	for (const error of errors) {
-		console.error(`  - ${error}`);
-	}
-	process.exit(1);
-}
-
-function extractStringList(source, pattern, label) {
-	const match = source.match(pattern);
-	if (!match) {
-		console.error(
-			`Unable to find ${label} in packages/build-tools/bridge-src/builtins/builtin-modules.ts`,
-		);
-		process.exit(1);
-	}
-	return new Set([...match[1].matchAll(/"([^"]+)"/g)].map((entry) => entry[1]));
-}
-
-function reportMissing(names, suffix) {
-	for (const name of names.sort((a, b) => a.localeCompare(b))) {
-		errors.push(`${name} ${suffix}`);
-	}
-}
diff --git a/scripts/check-registry-software-split.mjs b/scripts/check-registry-software-split.mjs
deleted file mode 100644
index 4b79cc1f7..000000000
--- a/scripts/check-registry-software-split.mjs
+++ /dev/null
@@ -1,126 +0,0 @@
-import {
-	existsSync,
-	readdirSync,
-	readFileSync,
-	statSync,
-} from "node:fs";
-import { dirname, join, relative, resolve } from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
-
-const defaultRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
-const agentOsPackagePattern = /^@rivet-dev\/agent-os(?:-|$)/;
-const dependencySections = [
-	"dependencies",
-	"devDependencies",
-	"peerDependencies",
-	"optionalDependencies",
-];
-
-function formatPath(root, path) {
-	return relative(root, path).replaceAll("\\", "/") || ".";
-}
-
-function readJson(path) {
-	return JSON.parse(readFileSync(path, "utf8"));
-}
-
-function collectSoftwareDirs(root) {
-	const softwareRoot = join(root, "registry", "software");
-	if (!existsSync(softwareRoot)) {
-		return [];
-	}
-
-	return readdirSync(softwareRoot, { withFileTypes: true })
-		.filter((entry) => entry.isDirectory() && !entry.name.startsWith("_"))
-		.map((entry) => join(softwareRoot, entry.name))
-		.filter((packageDir) => {
-			const manifestPath = join(packageDir, "package.json");
-			return existsSync(manifestPath) && statSync(manifestPath).isFile();
-		})
-		.sort((left, right) => left.localeCompare(right));
-}
-
-function checkDependencies(packageName, manifest, errors) {
-	for (const section of dependencySections) {
-		const dependencies = manifest[section];
-		if (!dependencies || typeof dependencies !== "object") {
-			continue;
-		}
-		for (const dependencyName of Object.keys(dependencies)) {
-			if (agentOsPackagePattern.test(dependencyName)) {
-				errors.push(
-					`${packageName} must not depend on Agent OS package ${dependencyName} in registry software ${section}`,
-				);
-			}
-		}
-	}
-}
-
-export function checkRegistrySoftwareSplit(options = {}) {
-	const root = resolve(options.root ?? defaultRoot);
-	const errors = [];
-
-	// package.json is the sole package manifest: the legacy
-	// secure-exec-package.json metadata file was removed in the registry split
-	// refactor, so this check reads name + dependency info from package.json only.
-	for (const packageDir of collectSoftwareDirs(root)) {
-		const dirName = packageDir.split(/[\\/]/).at(-1);
-		const manifestPath = join(packageDir, "package.json");
-
-		const manifest = readJson(manifestPath);
-		const expectedName = `@agentos-software/${dirName}`;
-		if (manifest.name !== expectedName) {
-			errors.push(
-				`${formatPath(root, manifestPath)} must be named ${expectedName}, found ${manifest.name}`,
-			);
-		}
-
-		checkDependencies(manifest.name ?? expectedName, manifest, errors);
-	}
-
-	return errors;
-}
-
-function parseArgs(argv) {
-	let root = defaultRoot;
-	for (let i = 0; i < argv.length; i++) {
-		const arg = argv[i];
-		if (arg === "--root") {
-			const value = argv[++i];
-			if (!value) {
-				throw new Error("--root requires a path");
-			}
-			root = value;
-			continue;
-		}
-		if (arg.startsWith("--root=")) {
-			root = arg.slice("--root=".length);
-			continue;
-		}
-		throw new Error(`unknown argument: ${arg}`);
-	}
-	return { root };
-}
-
-export function main(argv = process.argv.slice(2)) {
-	const { root } = parseArgs(argv);
-	const resolvedRoot = resolve(root);
-	if (!existsSync(resolvedRoot) || !statSync(resolvedRoot).isDirectory()) {
-		throw new Error(`root is not a directory: ${resolvedRoot}`);
-	}
-
-	const errors = checkRegistrySoftwareSplit({ root: resolvedRoot });
-	if (errors.length > 0) {
-		for (const error of errors) {
-			console.error(error);
-		}
-		process.exitCode = 1;
-		return;
-	}
-
-	console.log("registry software split check ok");
-}
-
-if (import.meta.url === pathToFileURL(process.argv[1]).href) {
-	main();
-}
diff --git a/scripts/check-registry-software-split.test.mjs b/scripts/check-registry-software-split.test.mjs
deleted file mode 100644
index 6640c154e..000000000
--- a/scripts/check-registry-software-split.test.mjs
+++ /dev/null
@@ -1,61 +0,0 @@
-import assert from "node:assert/strict";
-import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import test from "node:test";
-import { checkRegistrySoftwareSplit } from "./check-registry-software-split.mjs";
-
-function withFixture(fn) {
-	const root = mkdtempSync(join(tmpdir(), "registry-software-split-"));
-	try {
-		return fn(root);
-	} finally {
-		rmSync(root, { recursive: true, force: true });
-	}
-}
-
-function writeJson(root, rel, value) {
-	const path = join(root, rel);
-	mkdirSync(join(path, ".."), { recursive: true });
-	writeFileSync(path, `${JSON.stringify(value, null, "\t")}\n`);
-}
-
-test("accepts agentos-software registry software package metadata", () => {
-	withFixture((root) => {
-		writeJson(root, "registry/software/coreutils/package.json", {
-			name: "@agentos-software/coreutils",
-			dependencies: {
-				"@agentos-software/manifest": "workspace:*",
-			},
-		});
-
-		assert.deepEqual(checkRegistrySoftwareSplit({ root }), []);
-	});
-});
-
-test("rejects package names that do not match the directory", () => {
-	withFixture((root) => {
-		writeJson(root, "registry/software/grep/package.json", {
-			name: "@rivet-dev/agent-os-pkg-grep",
-		});
-
-		assert.deepEqual(checkRegistrySoftwareSplit({ root }), [
-			"registry/software/grep/package.json must be named @agentos-software/grep, found @rivet-dev/agent-os-pkg-grep",
-		]);
-	});
-});
-
-test("rejects Agent OS dependencies inside software manifests", () => {
-	withFixture((root) => {
-		writeJson(root, "registry/software/common/package.json", {
-			name: "@agentos-software/common",
-			dependencies: {
-				"@rivet-dev/agent-os-core": "workspace:*",
-			},
-		});
-
-		assert.deepEqual(checkRegistrySoftwareSplit({ root }), [
-			"@agentos-software/common must not depend on Agent OS package @rivet-dev/agent-os-core in registry software dependencies",
-		]);
-	});
-});
diff --git a/scripts/check-registry-test-runtime-boundary.mjs b/scripts/check-registry-test-runtime-boundary.mjs
deleted file mode 100644
index 9a4ca782e..000000000
--- a/scripts/check-registry-test-runtime-boundary.mjs
+++ /dev/null
@@ -1,155 +0,0 @@
-import {
-	existsSync,
-	readdirSync,
-	readFileSync,
-	statSync,
-} from "node:fs";
-import { dirname, join, relative, resolve } from "node:path";
-import { fileURLToPath, pathToFileURL } from "node:url";
-
-const defaultRoot = resolve(dirname(fileURLToPath(import.meta.url)), "..");
-const forbiddenSpecifiers = new Set([
-	"@rivet-dev/agentos-core/test/runtime",
-	"@rivet-dev/agentos-core/internal/runtime-compat",
-	"@secure-exec/core/test-runtime",
-]);
-const allowedRegistryHelper = "registry/tests/helpers.ts";
-const scannedExtensions = new Set([
-	".js",
-	".jsx",
-	".mjs",
-	".cjs",
-	".ts",
-	".tsx",
-	".mts",
-	".cts",
-]);
-const ignoredDirectories = new Set([
-	"dist",
-	"node_modules",
-	"coverage",
-	".turbo",
-	".vitest",
-]);
-const importSpecifierPatterns = [
-	/\bimport\s+(?:type\s+)?(?:[^"'()]*?\s+from\s+)?["']([^"']+)["']/g,
-	/\bexport\s+(?:type\s+)?[^"'()]*?\s+from\s+["']([^"']+)["']/g,
-	/\bimport\s*\(\s*["']([^"']+)["']\s*\)/g,
-	/\brequire\s*\(\s*["']([^"']+)["']\s*\)/g,
-];
-
-function formatPath(root, path) {
-	return relative(root, path).replaceAll("\\", "/") || ".";
-}
-
-function shouldScanFile(path) {
-	for (const extension of scannedExtensions) {
-		if (path.endsWith(extension)) {
-			return true;
-		}
-	}
-	return false;
-}
-
-function collectFiles(root, dir) {
-	if (!existsSync(dir)) {
-		return [];
-	}
-
-	const files = [];
-	for (const entry of readdirSync(dir, { withFileTypes: true }).sort((a, b) =>
-		a.name.localeCompare(b.name),
-	)) {
-		const path = join(dir, entry.name);
-		if (entry.isDirectory()) {
-			if (!ignoredDirectories.has(entry.name)) {
-				files.push(...collectFiles(root, path));
-			}
-			continue;
-		}
-		if (entry.isFile() && shouldScanFile(path)) {
-			files.push(path);
-		}
-	}
-	return files;
-}
-
-function collectImportSpecifiers(source) {
-	const specifiers = [];
-	for (const pattern of importSpecifierPatterns) {
-		pattern.lastIndex = 0;
-		for (const match of source.matchAll(pattern)) {
-			specifiers.push(match[1]);
-		}
-	}
-	return specifiers;
-}
-
-export function checkRegistryTestRuntimeBoundary(options = {}) {
-	const root = resolve(options.root ?? defaultRoot);
-	const registryTestsDir = join(root, "registry", "tests");
-	const files = (options.files ?? collectFiles(root, registryTestsDir)).toSorted();
-	const errors = [];
-
-	for (const filePath of files) {
-		const rel = formatPath(root, filePath);
-		if (rel === allowedRegistryHelper) {
-			continue;
-		}
-		const source = readFileSync(filePath, "utf8");
-		const forbiddenImport = collectImportSpecifiers(source).find((specifier) =>
-			forbiddenSpecifiers.has(specifier),
-		);
-		if (forbiddenImport) {
-			errors.push(
-				`${rel} must import registry test runtime helpers from ../helpers.js instead of ${forbiddenImport}`,
-			);
-		}
-	}
-
-	return errors;
-}
-
-function parseArgs(argv) {
-	let root = defaultRoot;
-	for (let i = 0; i < argv.length; i++) {
-		const arg = argv[i];
-		if (arg === "--root") {
-			const value = argv[++i];
-			if (!value) {
-				throw new Error("--root requires a path");
-			}
-			root = value;
-			continue;
-		}
-		if (arg.startsWith("--root=")) {
-			root = arg.slice("--root=".length);
-			continue;
-		}
-		throw new Error(`unknown argument: ${arg}`);
-	}
-	return { root };
-}
-
-export function main(argv = process.argv.slice(2)) {
-	const { root } = parseArgs(argv);
-	const resolvedRoot = resolve(root);
-	if (!existsSync(resolvedRoot) || !statSync(resolvedRoot).isDirectory()) {
-		throw new Error(`root is not a directory: ${resolvedRoot}`);
-	}
-
-	const errors = checkRegistryTestRuntimeBoundary({ root: resolvedRoot });
-	if (errors.length > 0) {
-		for (const error of errors) {
-			console.error(error);
-		}
-		process.exitCode = 1;
-		return;
-	}
-
-	console.log("registry test runtime boundary ok");
-}
-
-if (import.meta.url === pathToFileURL(process.argv[1]).href) {
-	main();
-}
diff --git a/scripts/check-registry-test-runtime-boundary.test.mjs b/scripts/check-registry-test-runtime-boundary.test.mjs
deleted file mode 100644
index 6cb03b67f..000000000
--- a/scripts/check-registry-test-runtime-boundary.test.mjs
+++ /dev/null
@@ -1,94 +0,0 @@
-import assert from "node:assert/strict";
-import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import test from "node:test";
-import { checkRegistryTestRuntimeBoundary } from "./check-registry-test-runtime-boundary.mjs";
-
-function withFixture(fn) {
-	const root = mkdtempSync(join(tmpdir(), "registry-test-runtime-boundary-"));
-	try {
-		return fn(root);
-	} finally {
-		rmSync(root, { recursive: true, force: true });
-	}
-}
-
-function write(root, rel, contents) {
-	const path = join(root, rel);
-	mkdirSync(join(path, ".."), { recursive: true });
-	writeFileSync(path, contents);
-}
-
-test("accepts the central registry test runtime helper", () => {
-	withFixture((root) => {
-		write(
-			root,
-			"registry/tests/helpers.ts",
-			'export { createWasmVmRuntime } from "@secure-exec/core/test-runtime";\n',
-		);
-		write(
-			root,
-			"registry/tests/wasmvm/example.test.ts",
-			'import { createWasmVmRuntime } from "../helpers.js";\n',
-		);
-
-		assert.deepEqual(checkRegistryTestRuntimeBoundary({ root }), []);
-	});
-});
-
-test("rejects direct Agent OS test runtime imports in registry tests", () => {
-	withFixture((root) => {
-		write(
-			root,
-			"registry/tests/wasmvm/example.test.ts",
-			'import { createWasmVmRuntime } from "@rivet-dev/agentos-core/test/runtime";\n',
-		);
-
-		assert.deepEqual(checkRegistryTestRuntimeBoundary({ root }), [
-			"registry/tests/wasmvm/example.test.ts must import registry test runtime helpers from ../helpers.js instead of @rivet-dev/agentos-core/test/runtime",
-		]);
-	});
-});
-
-test("rejects direct re-exports and requires", () => {
-	withFixture((root) => {
-		write(
-			root,
-			"registry/tests/kernel/example.test.ts",
-			'export { createKernel } from "@rivet-dev/agentos-core/test/runtime";\nconst rt = require("@rivet-dev/agentos-core/test/runtime");\n',
-		);
-
-		assert.deepEqual(checkRegistryTestRuntimeBoundary({ root }), [
-			"registry/tests/kernel/example.test.ts must import registry test runtime helpers from ../helpers.js instead of @rivet-dev/agentos-core/test/runtime",
-		]);
-	});
-});
-
-test("rejects direct Agent OS runtime compat imports in registry tests", () => {
-	withFixture((root) => {
-		write(
-			root,
-			"registry/tests/wasmvm/example.test.ts",
-			'import { createWasmVmRuntime } from "@rivet-dev/agentos-core/internal/runtime-compat";\n',
-		);
-
-		assert.deepEqual(checkRegistryTestRuntimeBoundary({ root }), [
-			"registry/tests/wasmvm/example.test.ts must import registry test runtime helpers from ../helpers.js instead of @rivet-dev/agentos-core/internal/runtime-compat",
-		]);
-	});
-});
-
-test("rejects direct secure-exec test runtime imports in registry tests", () => {
-	withFixture((root) => {
-		write(
-			root,
-			"registry/tests/wasmvm/example.test.ts",
-			'import { createWasmVmRuntime } from "@secure-exec/core/test-runtime";\n',
-		);
-
-		assert.deepEqual(checkRegistryTestRuntimeBoundary({ root }), [
-			"registry/tests/wasmvm/example.test.ts must import registry test runtime helpers from ../helpers.js instead of @secure-exec/core/test-runtime",
-		]);
-	});
-});
diff --git a/scripts/check-secure-exec-boundary.mjs b/scripts/check-secure-exec-boundary.mjs
deleted file mode 100644
index 6034754d7..000000000
--- a/scripts/check-secure-exec-boundary.mjs
+++ /dev/null
@@ -1,198 +0,0 @@
-import { existsSync, readdirSync, readFileSync } from "node:fs";
-import { dirname, extname, join, relative, resolve } from "node:path";
-import { fileURLToPath } from "node:url";
-
-const defaultRoot = resolve(dirname(fileURLToPath(import.meta.url)), '..');
-const agentOSPackagePattern = /^@rivet-dev\/agentos(?:-|$)/;
-const dependencySections = [
-	'dependencies',
-	'devDependencies',
-	'peerDependencies',
-	'optionalDependencies',
-];
-const ignoredDirectories = new Set([
-	'.git',
-	'.jj',
-	'.turbo',
-	'coverage',
-	'dist',
-	'node_modules',
-	'target',
-]);
-const sourceExtensions = new Set(['.js', '.jsx', '.mjs', '.cjs', '.ts', '.tsx', '.mts', '.cts']);
-const importSpecifierPatterns = [
-	/\bimport\s+(?:type\s+)?(?:[^\"'()]*?\s+from\s+)?[\"']([^\"']+)[\"']/g,
-	/\bexport\s+(?:type\s+)?[^\"'()]*?\s+from\s+[\"']([^\"']+)[\"']/g,
-	/\bimport\s*\(\s*[\"']([^\"']+)[\"']\s*\)/g,
-	/\brequire\s*\(\s*[\"']([^\"']+)[\"']\s*\)/g,
-];
-const forbiddenCargoPatterns = [
-	[/\bagentos-protocol\b/g, 'agentos-protocol'],
-	[/\bagentos-client\b/g, 'agentos-client'],
-	[/\bagentos-sidecar\b/g, 'agentos-sidecar'],
-];
-const forbiddenRustPatterns = [
-	[/\bagentos_protocol\b/g, 'agentos_protocol'],
-	[/\bagentos_client\b/g, 'agentos_client'],
-	[/\bagentos_sidecar\b/g, 'agentos_sidecar'],
-];
-
-function parseArgs(argv) {
-	const options = { root: defaultRoot };
-	for (let i = 0; i < argv.length; i++) {
-		const arg = argv[i];
-		if (arg === '--root') {
-			options.root = argv[++i];
-			continue;
-		}
-		if (arg.startsWith('--root=')) {
-			options.root = arg.slice('--root='.length);
-			continue;
-		}
-		throw new Error(`unknown argument: ${arg}`);
-	}
-	return { root: resolve(options.root) };
-}
-
-function readJson(path) {
-	return JSON.parse(readFileSync(path, 'utf8'));
-}
-
-// Boundary-check scripts and their tests legitimately embed forbidden package
-// names and import specifiers as fixtures (the test files literally assert that
-// such imports are rejected). Scanning them would flag those fixtures as real
-// violations, so skip the boundary script itself and any boundary-check
-// `scripts/check-*.test.mjs` file.
-const boundaryCheckTestPattern = /^scripts[\\/]check-[\w.-]+\.test\.mjs$/;
-
-function shouldSkipFile(relPath) {
-	return relPath === 'scripts/check-secure-exec-boundary.mjs' ||
-		boundaryCheckTestPattern.test(relPath);
-}
-
-function collectImportSpecifiers(source) {
-	const specifiers = [];
-	for (const pattern of importSpecifierPatterns) {
-		pattern.lastIndex = 0;
-		let match;
-		while ((match = pattern.exec(source))) {
-			specifiers.push(match[1]);
-		}
-	}
-	return specifiers;
-}
-
-// A package DEFINED in this repo cannot be a boundary violation even if its
-// name matches the agent-os pattern (e.g. @rivet-dev/agentos-toolchain, the
-// registry build toolchain owned here); the rule guards against depending on
-// the agent-os repo's products.
-function collectLocalPackageNames(root, dir, names) {
-	for (const entry of readdirSync(dir, { withFileTypes: true })) {
-		if (entry.isDirectory() && ignoredDirectories.has(entry.name)) continue;
-		const path = join(dir, entry.name);
-		if (entry.isDirectory()) {
-			collectLocalPackageNames(root, path, names);
-			continue;
-		}
-		if (!entry.isFile() || entry.name !== 'package.json') continue;
-		try {
-			const manifest = readJson(path);
-			if (typeof manifest.name === 'string') {
-				names.add(manifest.name);
-			}
-		} catch {
-			// Unparseable manifests are reported by other checks.
-		}
-	}
-}
-
-function checkPackageManifest(root, relPath, violations, localNames) {
-	const manifest = readJson(join(root, relPath));
-	for (const section of dependencySections) {
-		const dependencies = manifest[section];
-		if (!dependencies || typeof dependencies !== 'object') continue;
-		for (const name of Object.keys(dependencies)) {
-			if (agentOSPackagePattern.test(name) && !localNames.has(name)) {
-				violations.push(`${relPath} ${section} references ${name}`);
-			}
-		}
-	}
-}
-
-function checkSourceFile(root, relPath, violations, localNames) {
-	const source = readFileSync(join(root, relPath), 'utf8');
-	for (const specifier of collectImportSpecifiers(source)) {
-		if (agentOSPackagePattern.test(specifier) && !localNames.has(specifier)) {
-			violations.push(`${relPath} imports ${specifier}`);
-		}
-	}
-}
-
-function checkPatternFile(root, relPath, patterns, violations) {
-	const source = readFileSync(join(root, relPath), 'utf8');
-	for (const [pattern, label] of patterns) {
-		pattern.lastIndex = 0;
-		if (pattern.test(source)) {
-			violations.push(`${relPath} references ${label}`);
-		}
-	}
-}
-
-function walk(root, dir, violations, localNames) {
-	for (const entry of readdirSync(dir, { withFileTypes: true })) {
-		if (entry.isDirectory() && ignoredDirectories.has(entry.name)) continue;
-		const path = join(dir, entry.name);
-		const relPath = relative(root, path);
-		if (entry.isDirectory()) {
-			walk(root, path, violations, localNames);
-			continue;
-		}
-		if (!entry.isFile() || shouldSkipFile(relPath)) continue;
-		if (entry.name === 'package.json') {
-			checkPackageManifest(root, relPath, violations, localNames);
-			continue;
-		}
-		if (entry.name === 'Cargo.toml') {
-			checkPatternFile(root, relPath, forbiddenCargoPatterns, violations);
-			continue;
-		}
-		if (entry.name.endsWith('.rs')) {
-			checkPatternFile(root, relPath, forbiddenRustPatterns, violations);
-			continue;
-		}
-		if (sourceExtensions.has(extname(entry.name))) {
-			checkSourceFile(root, relPath, violations, localNames);
-		}
-	}
-}
-
-export function auditSecureExecBoundary(options = {}) {
-	const root = resolve(options.root ?? defaultRoot);
-	const violations = [];
-	if (!existsSync(root)) {
-		return { root, ok: false, violations: [`${root} does not exist`] };
-	}
-	const localNames = new Set();
-	collectLocalPackageNames(root, root, localNames);
-	walk(root, root, violations, localNames);
-	violations.sort();
-	return { root, ok: violations.length === 0, violations };
-}
-
-export function main(argv = process.argv.slice(2)) {
-	const options = parseArgs(argv);
-	const result = auditSecureExecBoundary(options);
-	if (result.ok) {
-		console.log('secure-exec boundary ok');
-		return 0;
-	}
-	console.error('secure-exec boundary violations:');
-	for (const violation of result.violations) {
-		console.error(`- ${violation}`);
-	}
-	return 1;
-}
-
-if (import.meta.url === `file://${process.argv[1]}`) {
-	process.exitCode = main();
-}
diff --git a/scripts/check-secure-exec-boundary.test.mjs b/scripts/check-secure-exec-boundary.test.mjs
deleted file mode 100644
index 8b1b01e73..000000000
--- a/scripts/check-secure-exec-boundary.test.mjs
+++ /dev/null
@@ -1,81 +0,0 @@
-import assert from "node:assert/strict";
-import { execFileSync, spawnSync } from "node:child_process";
-import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { dirname, join } from "node:path";
-import test from "node:test";
-import { fileURLToPath } from "node:url";
-
-const scriptPath = join(dirname(fileURLToPath(import.meta.url)), 'check-secure-exec-boundary.mjs');
-
-function withFixture(fn) {
-	const root = mkdtempSync(join(tmpdir(), 'secure-exec-boundary-'));
-	try {
-		return fn(root);
-	} finally {
-		rmSync(root, { recursive: true, force: true });
-	}
-}
-
-function writeJson(root, rel, value) {
-	const path = join(root, rel);
-	mkdirSync(dirname(path), { recursive: true });
-	writeFileSync(path, `${JSON.stringify(value, null, '\t')}\n`);
-}
-
-test('passes a secure-exec-only fixture', () => {
-	withFixture((root) => {
-		writeJson(root, 'package.json', {
-			name: 'secure-exec-workspace',
-			dependencies: {
-				'@secure-exec/core': 'workspace:*',
-			},
-		});
-		execFileSync(process.execPath, [scriptPath, '--root', root], { stdio: 'pipe' });
-	});
-});
-
-test('rejects Agent OS package dependencies', () => {
-	withFixture((root) => {
-		writeJson(root, 'package.json', {
-			name: 'secure-exec-workspace',
-			dependencies: {
-				'@rivet-dev/agentos-core': 'workspace:*',
-			},
-		});
-		const result = spawnSync(process.execPath, [scriptPath, '--root', root], {
-			encoding: 'utf8',
-		});
-		assert.notEqual(result.status, 0);
-		assert.match(result.stderr, /@rivet-dev\/agentos-core/);
-	});
-});
-
-test('ignores forbidden specifiers inside boundary-check test fixtures', () => {
-	withFixture((root) => {
-		writeJson(root, 'package.json', { name: 'secure-exec-workspace' });
-		const testPath = join(root, 'scripts/check-registry-test-runtime-boundary.test.mjs');
-		mkdirSync(dirname(testPath), { recursive: true });
-		// A boundary-check test legitimately embeds a forbidden import as a
-		// string fixture; it must not be treated as a real violation.
-		writeFileSync(
-			testPath,
-			'const fixture = \'import { x } from "@rivet-dev/agentos-core/test/runtime";\\n\';\n',
-		);
-		execFileSync(process.execPath, [scriptPath, '--root', root], { stdio: 'pipe' });
-	});
-});
-
-test('rejects Agent OS Rust crate references', () => {
-	withFixture((root) => {
-		writeJson(root, 'package.json', { name: 'secure-exec-workspace' });
-		const cargoPath = join(root, 'crates/sidecar/Cargo.toml');
-		mkdirSync(dirname(cargoPath), { recursive: true });
-		writeFileSync(cargoPath, '[dependencies]\nagentos-sidecar = { path = "../sidecar" }\n');
-		const result = spawnSync(process.execPath, [scriptPath, '--root', root], {
-			encoding: 'utf8',
-		});
-		assert.notEqual(result.status, 0);
-		assert.match(result.stderr, /agentos-sidecar/);
-	});
-});
diff --git a/scripts/ci.mjs b/scripts/ci.mjs
deleted file mode 100644
index 8665db180..000000000
--- a/scripts/ci.mjs
+++ /dev/null
@@ -1,168 +0,0 @@
-#!/usr/bin/env zx
-// CI entry point (zx). Run with: `npx zx scripts/ci.mjs <phase>` (or `pnpm dlx zx`).
-//
-// Phases (disjoint so .github/workflows/ci.yml can run them on parallel runners):
-//   all             (default) full serial run — local use
-//   js-checks       install, build, generated/type/boundary checks, publish tests
-//   rust-lint       cargo fmt + clippy
-//   rust-test       guest WASM commands + full cargo workspace tests (nextest)
-//   js-test         turbo test suites against a pinned sidecar (no network e2e)
-//   nightly-extras  network-e2e turbo tests + timing + #[ignore]d expensive tests
-//
-// zx injects the $, cd, echo, fs, path, argv, os globals — no imports needed.
-
-$.verbose = true; // stream each command's output live
-
-const ROOT = path.resolve(__dirname, "..");
-cd(ROOT);
-
-// Self-hosted-runner layout (a pinned toolchain under /workspace) — mirror the
-// old bash bootstrap so those runners resolve cargo/rustc correctly.
-const selfHostedToolchain =
-  "/workspace/.rustup/toolchains/stable-x86_64-unknown-linux-gnu/bin";
-if (fs.existsSync("/workspace/.cargo") && fs.existsSync(selfHostedToolchain)) {
-  process.env.CARGO_HOME = "/workspace/.cargo";
-  process.env.RUSTUP_HOME = "/workspace/.rustup";
-  process.env.PATH = `/workspace/.cargo/bin:${process.env.PATH}`;
-  process.env.RUSTC = `${selfHostedToolchain}/rustc`;
-  process.env.RUSTDOC = `${selfHostedToolchain}/rustdoc`;
-}
-process.env.CARGO_HTTP_TIMEOUT ??= "120";
-process.env.CARGO_NET_RETRY ??= "10";
-
-// Run a labeled step inside a foldable GitHub Actions log group.
-async function step(label, cmd) {
-  echo(`::group::==> ${label}`);
-  try {
-    await cmd();
-  } finally {
-    echo("::endgroup::");
-  }
-}
-
-// $ with extra environment for a single command (like bash `env VAR=val cmd`).
-function withEnv(extra) {
-  return $({ env: { ...process.env, ...extra } });
-}
-
-// The service fs/shell regression tests stage guest WASM command binaries and
-// fail hard when missing. In CI these arrive prebuilt via the wasm-commands
-// artifact; skip the ~12-minute build when they are already present.
-async function buildWasmCommands() {
-  const dir = path.join(ROOT, "packages/core/commands");
-  if (fs.existsSync(dir) && fs.readdirSync(dir).length > 0) {
-    echo("==> guest WASM commands already present; skipping build");
-    return;
-  }
-  await step("make -C registry/native wasm", () => $`make -C registry/native wasm`);
-  await step("copy-wasm-commands", () => $`node packages/core/scripts/copy-wasm-commands.mjs`);
-}
-
-// Pin the sidecar binary for the JS test suites. Without this the first vitest
-// file that needs a sidecar sees the v8-bridge asset regenerated by the turbo
-// ^build tasks (mtime newer than the binary) and runs `cargo build` INSIDE its
-// own 120s test timeout — the deterministic-timeout footgun we chased earlier.
-async function pinSidecar() {
-  await step("cargo build -p secure-exec-sidecar", () => $`cargo build -p secure-exec-sidecar`);
-  process.env.SECURE_EXEC_SIDECAR_BIN = path.join(
-    ROOT,
-    "target/debug/secure-exec-sidecar",
-  );
-}
-
-async function jsChecks() {
-  await step("pnpm install", () => $`pnpm install --frozen-lockfile`);
-  await step("pnpm build", () => $`pnpm build`);
-  await step("check-generated", () => $`pnpm run check-generated`);
-  await step("check-types", () => $`pnpm check-types`);
-  await step("boundary check test", () => $`node --test scripts/check-secure-exec-boundary.test.mjs`);
-  await step("boundary check", () => $`node scripts/check-secure-exec-boundary.mjs`);
-  await step("no-escaping-deps test", () => $`node --test scripts/check-no-escaping-local-deps.test.mjs`);
-  await step("no-escaping-deps check", () => $`node scripts/check-no-escaping-local-deps.mjs`);
-  await step("publish check-types", () => $`pnpm --dir scripts/publish run check-types`);
-  await step("publish tests", () => $`pnpm --dir scripts/publish test`);
-}
-
-async function rustLint() {
-  await step("cargo fmt --check", () => $`cargo fmt --check`);
-  await step("cargo clippy", () => $`cargo clippy --workspace --all-targets -- -D warnings`);
-}
-
-async function rustTest() {
-  await buildWasmCommands();
-  // cargo-nextest runs one process per test, isolating the process-global
-  // V8/Pyodide platform + caches that previously forced --test-threads=1.
-  // Timing-sensitive tests are skipped by default. Doctests are not run by
-  // nextest, so run them separately.
-  const profile = process.env.NEXTEST_PROFILE || "default";
-  await step(`cargo nextest run (${profile})`, () =>
-    withEnv({ CARGO_INCREMENTAL: "0" })`cargo nextest run --workspace --profile ${profile}`,
-  );
-  await step("cargo test --doc", () =>
-    withEnv({ CARGO_INCREMENTAL: "0" })`cargo test --workspace --doc`,
-  );
-}
-
-async function jsTest() {
-  await step("pnpm install", () => $`pnpm install --frozen-lockfile`);
-  await step("pnpm build", () => $`pnpm build`);
-  await buildWasmCommands();
-  await pinSidecar();
-  // Network e2e coverage runs in the nightly job, keeping the PR path hermetic.
-  await step("turbo test", () => $`pnpm exec turbo run test --concurrency=1`);
-}
-
-async function nightlyExtras() {
-  await step("pnpm install", () => $`pnpm install --frozen-lockfile`);
-  await step("pnpm build", () => $`pnpm build`);
-  await buildWasmCommands();
-  await pinSidecar();
-  await step("turbo test (network e2e)", () =>
-    withEnv({ SECURE_EXEC_E2E_NETWORK: "1" })`pnpm exec turbo run test --concurrency=1 --force`,
-  );
-  // Timing-sensitive tests are gated off the default suite (they flake under
-  // parallel CPU contention); run them here on a quiet, serial lane.
-  await step("cargo nextest (timing lane)", () =>
-    withEnv({ CARGO_INCREMENTAL: "0", SECURE_EXEC_RUN_TIMING_TESTS: "1" })`cargo nextest run --workspace --profile timing --run-ignored all`,
-  );
-  // Expensive resource-saturation tests are #[ignore]d in the default suite;
-  // the nightly is where they actually run.
-  await step("cargo test --ignored", () =>
-    withEnv({ CARGO_INCREMENTAL: "0" })`cargo test --workspace -- --ignored --test-threads=1`,
-  );
-}
-
-const phase = argv._[0] ?? "all";
-switch (phase) {
-  case "js-checks":
-    await jsChecks();
-    break;
-  case "rust-lint":
-    await rustLint();
-    break;
-  case "rust-test":
-    await rustTest();
-    break;
-  case "js-test":
-    await jsTest();
-    break;
-  case "nightly-extras":
-    await nightlyExtras();
-    break;
-  case "all":
-    await jsChecks();
-    await rustLint();
-    await rustTest();
-    await pinSidecar();
-    if (process.env.CI_FORK_PULL_REQUEST === "1") {
-      await step("turbo test", () => $`pnpm exec turbo run test --concurrency=1`);
-    } else {
-      await step("turbo test (network e2e)", () =>
-        withEnv({ SECURE_EXEC_E2E_NETWORK: "1" })`pnpm exec turbo run test --concurrency=1`,
-      );
-    }
-    break;
-  default:
-    echo(`unknown ci phase: ${phase}`);
-    process.exit(1);
-}
diff --git a/scripts/publish/package.json b/scripts/publish/package.json
deleted file mode 100644
index dc8faaec7..000000000
--- a/scripts/publish/package.json
+++ /dev/null
@@ -1,24 +0,0 @@
-{
-	"name": "publish",
-	"version": "0.0.0",
-	"private": true,
-	"type": "module",
-	"scripts": {
-		"ci": "tsx src/ci/bin.ts",
-		"release": "tsx src/local/cut-release.ts",
-		"check-types": "tsc --noEmit",
-		"test": "node --test --import tsx src/**/*.test.ts"
-	},
-	"dependencies": {
-		"commander": "^12.1.0",
-		"execa": "^8.0.1",
-		"glob": "^10.3.10",
-		"semver": "^7.6.0"
-	},
-	"devDependencies": {
-		"@types/node": "^24.3.0",
-		"@types/semver": "^7.5.8",
-		"tsx": "^4.0.0",
-		"typescript": "^5.5.2"
-	}
-}
diff --git a/scripts/publish/src/ci/bin.ts b/scripts/publish/src/ci/bin.ts
deleted file mode 100644
index 55e3ed4c1..000000000
--- a/scripts/publish/src/ci/bin.ts
+++ /dev/null
@@ -1,315 +0,0 @@
-#!/usr/bin/env tsx
-/**
- * CI entrypoint. Every workflow step calls exactly one subcommand.
- *
- * Each subcommand is a pure function of its flags — nothing orchestrates
- * other subcommands. The GitHub Actions workflow is the orchestrator.
- *
- * Subcommands accept inputs via flags AND will fall back to re-resolving
- * the `PublishContext` from env vars when flags aren't passed. The workflow
- * uses the `context-output` subcommand to resolve once and pin values as
- * job outputs, then passes those outputs to each subsequent step as flags.
- */
-import { readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { setTimeout as sleep } from "node:timers/promises";
-import { fileURLToPath } from "node:url";
-import { Command } from "commander";
-import { $ } from "execa";
-import {
-	releaseArtifactPrefix,
-	releaseUserAgent,
-} from "../lib/artifacts.js";
-import {
-	resolveContext,
-	writeContextToGithubOutput,
-	type Trigger,
-} from "../lib/context.js";
-import { createGhRelease, tagAndPush } from "../lib/git.js";
-import { scoped } from "../lib/logger.js";
-import { publishAll } from "../lib/npm.js";
-import { copyPrefix, uploadDir } from "../lib/r2.js";
-import { discoverRustCrates } from "../lib/rust-crates.js";
-import { bumpCargoVersions, bumpPackageJsons } from "../lib/version.js";
-
-const log = scoped("ci");
-
-function findRepoRoot(): string {
-	if (process.env.GITHUB_WORKSPACE) return process.env.GITHUB_WORKSPACE;
-	let dir = dirname(fileURLToPath(import.meta.url));
-	for (let i = 0; i < 10; i++) {
-		try {
-			readFileSync(join(dir, "pnpm-workspace.yaml"), "utf-8");
-			return dir;
-		} catch {
-			dir = dirname(dir);
-		}
-	}
-	throw new Error("could not locate repo root");
-}
-
-async function crateVersionExists(name: string, version: string): Promise<boolean> {
-	const response = await fetch(
-		`https://crates.io/api/v1/crates/${encodeURIComponent(name)}/${encodeURIComponent(version)}`,
-		{
-			headers: {
-				"User-Agent": releaseUserAgent(),
-			},
-		},
-	);
-	if (response.status === 200) return true;
-	if (response.status === 404) return false;
-	throw new Error(
-		`crates.io lookup failed for ${name}@${version}: ${response.status} ${response.statusText}`,
-	);
-}
-
-async function waitForCrateVersion(
-	name: string,
-	version: string,
-	timeoutSeconds: number,
-): Promise<void> {
-	const deadline = Date.now() + timeoutSeconds * 1000;
-	while (Date.now() < deadline) {
-		if (await crateVersionExists(name, version)) return;
-		await sleep(10_000);
-	}
-	throw new Error(`timed out waiting for crates.io to index ${name}@${version}`);
-}
-
-async function cargoPublishWithRateLimitRetry(
-	repoRoot: string,
-	args: string[],
-): Promise<void> {
-	for (;;) {
-		const result = await $({
-			all: true,
-			cwd: repoRoot,
-			reject: false,
-		})`cargo ${args}`;
-
-		if (result.all) process.stdout.write(result.all);
-		if (result.exitCode === 0) return;
-
-		const retryAt = parseCratesIoRateLimitRetry(result.all ?? "");
-		if (retryAt === undefined) {
-			throw new Error(`cargo ${args.join(" ")} failed with exit code ${result.exitCode}`);
-		}
-
-		const waitMs = Math.max(retryAt.getTime() - Date.now() + 5_000, 10_000);
-		log.info(`crates.io rate limited publish; retrying at ${retryAt.toISOString()}`);
-		await sleep(waitMs);
-	}
-}
-
-function parseCratesIoRateLimitRetry(output: string): Date | undefined {
-	const match = output.match(/try again after (.+? GMT)/);
-	if (!match) return undefined;
-	const retryAt = new Date(match[1]);
-	if (Number.isNaN(retryAt.getTime())) return undefined;
-	return retryAt;
-}
-
-const program = new Command();
-program.name("ci").description("CI subcommands for the publish flow");
-
-// ---------------------------------------------------------------------------
-// context-output — resolve once, write to $GITHUB_OUTPUT for downstream steps
-// ---------------------------------------------------------------------------
-program
-	.command("context-output")
-	.description("Resolve publish context and write to $GITHUB_OUTPUT")
-	.option("--trigger <trigger>", "Override trigger (branch|release)")
-	.option("--version <version>", "Override version")
-	.option("--latest <bool>", "Override latest")
-	.option("--branch <name>", "Override branch name")
-	.action(async (opts) => {
-		const overrides: Parameters<typeof resolveContext>[0] = {};
-		if (opts.trigger) overrides.trigger = opts.trigger as Trigger;
-		if (opts.version) overrides.version = opts.version;
-		if (opts.latest !== undefined) overrides.latest = opts.latest === "true";
-		if (opts.branch) overrides.branch = opts.branch;
-		const ctx = await resolveContext(overrides);
-		log.info(
-			`resolved: trigger=${ctx.trigger} version=${ctx.version} npm_tag=${ctx.npmTag} sha=${ctx.sha} latest=${ctx.latest}${ctx.branch !== undefined ? ` branch=${ctx.branch}` : ""}`,
-		);
-		writeContextToGithubOutput(ctx);
-	});
-
-// ---------------------------------------------------------------------------
-// bump-versions — rewrite package.jsons + Cargo.toml to a version
-// ---------------------------------------------------------------------------
-program
-	.command("bump-versions")
-	.description("Rewrite every publishable package.json and Cargo.toml to the given version")
-	.option("--version <version>", "Version to write (defaults to resolved context)")
-	.option(
-		"--version-only",
-		"Only rewrite version fields without publish-time dependency injection",
-	)
-	.option("--dry-run", "Do not write, only report")
-	.action(async (opts) => {
-		const repoRoot = findRepoRoot();
-		const ctx = await resolveContext();
-		const version = opts.version ?? ctx.version;
-		await bumpPackageJsons(repoRoot, version, {
-			dryRun: !!opts.dryRun,
-			versionOnly: !!opts.versionOnly,
-		});
-		await bumpCargoVersions(repoRoot, version, { dryRun: !!opts.dryRun });
-	});
-
-// ---------------------------------------------------------------------------
-// publish-npm — parallel npm publish with retries
-// ---------------------------------------------------------------------------
-program
-	.command("publish-npm")
-	.description("Publish all discovered packages to npm")
-	.option("--tag <tag>", "npm dist-tag (defaults to resolved context)")
-	.option("--parallel <n>", "Max simultaneous publishes", "16")
-	.option("--retries <n>", "Retries per package", "3")
-	.option("--release-mode", "Fail if every package is already published")
-	.option("--dry-run", "Pass --dry-run to npm publish (publishes nothing)")
-	.action(async (opts) => {
-		const repoRoot = findRepoRoot();
-		let tag: string = opts.tag;
-		let releaseMode: boolean | undefined = opts.releaseMode;
-		if (!tag || releaseMode === undefined) {
-			const ctx = await resolveContext();
-			tag = tag ?? ctx.npmTag;
-			if (opts.releaseMode === undefined) {
-				releaseMode = ctx.trigger === "release";
-			}
-		}
-		await publishAll(repoRoot, {
-			tag,
-			parallel: Number(opts.parallel),
-			retries: Number(opts.retries),
-			releaseMode,
-			dryRun: !!opts.dryRun,
-		});
-	});
-
-// ---------------------------------------------------------------------------
-// publish-crates — ordered, idempotent crates.io publish
-// ---------------------------------------------------------------------------
-program
-	.command("publish-crates")
-	.description("Publish Rust crates to crates.io in dependency order")
-	.option("--version <version>", "Version to publish (defaults to resolved context)")
-	.option("--wait-seconds <n>", "Max wait for crates.io indexing per crate", "600")
-	.option("--dry-run", "Run cargo publish --dry-run for the first crate only")
-	.option("--allow-dirty", "Pass --allow-dirty to cargo publish")
-	.action(async (opts) => {
-		const repoRoot = findRepoRoot();
-		const version = opts.version ?? (await resolveContext()).version;
-		const crates = discoverRustCrates(repoRoot);
-		const waitSeconds = Number(opts.waitSeconds);
-		if (!Number.isFinite(waitSeconds) || waitSeconds <= 0) {
-			throw new Error("--wait-seconds must be a positive number");
-		}
-		if (crates.length === 0) {
-			throw new Error("no publishable Rust crates discovered");
-		}
-
-		if (opts.dryRun) {
-			const crate = crates[0];
-			log.info(
-				`dry-running ${crate}; later crates require earlier versions to exist in the crates.io index`,
-			);
-			const args = ["publish", "-p", crate, "--dry-run"];
-			if (opts.allowDirty) args.push("--allow-dirty");
-			await $({ stdio: "inherit", cwd: repoRoot })`cargo ${args}`;
-			return;
-		}
-
-		if (!process.env.CARGO_REGISTRY_TOKEN) {
-			throw new Error("CARGO_REGISTRY_TOKEN must be set to publish crates");
-		}
-
-		for (const crate of crates) {
-			if (await crateVersionExists(crate, version)) {
-				log.info(`skipping ${crate}@${version}; already published`);
-				continue;
-			}
-
-			log.info(`publishing ${crate}@${version}`);
-			const args = ["publish", "-p", crate];
-			if (opts.allowDirty) args.push("--allow-dirty");
-			await cargoPublishWithRateLimitRetry(repoRoot, args);
-			log.info(`waiting for crates.io to index ${crate}@${version}`);
-			await waitForCrateVersion(crate, version, waitSeconds);
-		}
-	});
-
-// ---------------------------------------------------------------------------
-// upload-r2 — upload the sidecar artifact dir to {namespace}/{sha}/sidecar/
-// ---------------------------------------------------------------------------
-program
-	.command("upload-r2")
-	.description("Upload an artifact directory to R2")
-	.requiredOption("--source <dir>", "Local directory to upload")
-	.option("--sha <sha>", "Short sha (defaults to resolved context)")
-	.option("--name <name>", "R2 sub-path name", "sidecar")
-	.action(async (opts) => {
-		const sha = opts.sha ?? (await resolveContext()).sha;
-		const prefix = releaseArtifactPrefix({ ref: sha, name: opts.name });
-		await uploadDir(opts.source, prefix);
-	});
-
-// ---------------------------------------------------------------------------
-// copy-r2 — copy {namespace}/{sha}/sidecar/ to {namespace}/{version}/sidecar/
-// ---------------------------------------------------------------------------
-program
-	.command("copy-r2")
-	.description("Copy R2 artifacts from {sha} to {version} (+latest)")
-	.option("--sha <sha>", "Source sha (defaults to resolved context)")
-	.option("--version <version>", "Target version (defaults to resolved context)")
-	.option("--latest <bool>", "Also copy to /latest/ (defaults to resolved context)")
-	.option("--name <name>", "R2 sub-path name", "sidecar")
-	.action(async (opts) => {
-		const ctx = await resolveContext();
-		const sha: string = opts.sha ?? ctx.sha;
-		const version: string = opts.version ?? ctx.version;
-		const latest = opts.latest !== undefined ? opts.latest === "true" : ctx.latest;
-		const source = releaseArtifactPrefix({ ref: sha, name: opts.name });
-		await copyPrefix(
-			source,
-			releaseArtifactPrefix({ ref: version, name: opts.name }),
-		);
-		if (latest) {
-			await copyPrefix(
-				source,
-				releaseArtifactPrefix({ ref: "latest", name: opts.name }),
-			);
-		}
-	});
-
-// ---------------------------------------------------------------------------
-// git-tag — force-create and push v{version}
-// ---------------------------------------------------------------------------
-program
-	.command("git-tag")
-	.description("Create and force-push v{version} tag")
-	.option("--version <version>", "Version (defaults to resolved context)")
-	.action(async (opts) => {
-		const version = opts.version ?? (await resolveContext()).version;
-		await tagAndPush(version);
-	});
-
-// ---------------------------------------------------------------------------
-// gh-release — create or update GitHub release for the version
-// ---------------------------------------------------------------------------
-program
-	.command("gh-release")
-	.description("Create or update GitHub release")
-	.option("--version <version>", "Version (defaults to resolved context)")
-	.action(async (opts) => {
-		const version = opts.version ?? (await resolveContext()).version;
-		await createGhRelease(version);
-	});
-
-program.parseAsync(process.argv).catch((err) => {
-	log.error(String(err?.stack ?? err));
-	process.exit(1);
-});
diff --git a/scripts/publish/src/ci/verify-fixed-versions.ts b/scripts/publish/src/ci/verify-fixed-versions.ts
deleted file mode 100644
index 71fd93cf5..000000000
--- a/scripts/publish/src/ci/verify-fixed-versions.ts
+++ /dev/null
@@ -1,157 +0,0 @@
-#!/usr/bin/env tsx
-import { existsSync, readFileSync } from "node:fs";
-import { dirname, join, relative, resolve, sep } from "node:path";
-import { fileURLToPath } from "node:url";
-import { discoverPackages } from "../lib/packages.js";
-
-const EXPECTED_VERSION = "0.0.1";
-const defaultRoot = resolve(dirname(fileURLToPath(import.meta.url)), "../../../..");
-
-function parseArgs(argv: string[]) {
-	const options = { root: defaultRoot };
-	for (let i = 0; i < argv.length; i++) {
-		const arg = argv[i];
-		if (arg === "--root") {
-			options.root = argv[++i];
-			continue;
-		}
-		if (arg.startsWith("--root=")) {
-			options.root = arg.slice("--root=".length);
-			continue;
-		}
-		throw new Error(`unknown argument: ${arg}`);
-	}
-	return { root: resolve(options.root) };
-}
-
-function toRel(root: string, path: string) {
-	return relative(root, path).split(sep).join("/");
-}
-
-function readPackageVersion(
-	path: string,
-	relPath: string,
-	failures: string[],
-) {
-	let manifest: { version?: unknown };
-	try {
-		manifest = JSON.parse(readFileSync(path, "utf8"));
-	} catch (err) {
-		failures.push(
-			`${relPath} could not be parsed: ${err instanceof Error ? err.message : String(err)}`,
-		);
-		return undefined;
-	}
-	return manifest.version;
-}
-
-function readWorkspacePackageVersion(root: string, failures: string[]) {
-	const cargoPath = join(root, "Cargo.toml");
-	if (!existsSync(cargoPath)) {
-		failures.push("Cargo.toml is missing");
-		return undefined;
-	}
-
-	let inWorkspacePackage = false;
-	for (const line of readFileSync(cargoPath, "utf8").split("\n")) {
-		const header = line.match(/^\[([^\]]+)\]\s*$/);
-		if (header) {
-			inWorkspacePackage = header[1] === "workspace.package";
-			continue;
-		}
-		if (!inWorkspacePackage) continue;
-		const version = line.match(/^\s*version\s*=\s*"([^"]+)"/)?.[1];
-		if (version) return version;
-	}
-
-	failures.push("Cargo.toml [workspace.package] is missing version");
-	return undefined;
-}
-
-function checkWorkspaceCrateDeps(root: string, failures: string[]) {
-	const cargoPath = join(root, "Cargo.toml");
-	if (!existsSync(cargoPath)) return;
-
-	let inDeps = false;
-	for (const line of readFileSync(cargoPath, "utf8").split("\n")) {
-		const header = line.match(/^\[([^\]]+)\]\s*$/);
-		if (header) {
-			inDeps = header[1] === "workspace.dependencies";
-			continue;
-		}
-		if (!inDeps) continue;
-		if (!/path\s*=\s*"crates\//.test(line)) continue;
-
-		const name = line.match(/^\s*([A-Za-z0-9_-]+)\s*=/)?.[1];
-		const version = line.match(/version\s*=\s*"([^"]+)"/)?.[1];
-		if (version !== EXPECTED_VERSION) {
-			failures.push(
-				`Cargo.toml [workspace.dependencies] ${name ?? "(unknown)"} version is ${version === undefined ? "missing" : `"${version}"`}`,
-			);
-		}
-	}
-}
-
-export function auditFixedVersions(options: { root?: string } = {}) {
-	const root = resolve(options.root ?? defaultRoot);
-	const failures: string[] = [];
-
-	if (!existsSync(root)) {
-		return {
-			root,
-			ok: false,
-			packageCount: 0,
-			failures: [`${root} does not exist`],
-		};
-	}
-
-	const packages = discoverPackages(root).sort((a, b) =>
-		a.relDir.localeCompare(b.relDir),
-	);
-
-	for (const pkg of packages) {
-		const pkgJsonPath = join(pkg.dir, "package.json");
-		const relPath = toRel(root, pkgJsonPath);
-		const version = readPackageVersion(pkgJsonPath, relPath, failures);
-		if (version !== EXPECTED_VERSION) {
-			failures.push(
-				`${relPath} version is ${version === undefined ? "missing" : `"${String(version)}"`}`,
-			);
-		}
-	}
-
-	const cargoVersion = readWorkspacePackageVersion(root, failures);
-	if (cargoVersion !== undefined && cargoVersion !== EXPECTED_VERSION) {
-		failures.push(
-			`Cargo.toml [workspace.package] version is "${cargoVersion}"`,
-		);
-	}
-	checkWorkspaceCrateDeps(root, failures);
-
-	return {
-		root,
-		ok: failures.length === 0,
-		packageCount: packages.length,
-		failures,
-	};
-}
-
-export function main(argv = process.argv.slice(2)) {
-	const options = parseArgs(argv);
-	const result = auditFixedVersions(options);
-	if (result.ok) {
-		process.stdout.write(
-			`verify-fixed-versions: OK (${result.packageCount} packages + Cargo.toml pinned to ${EXPECTED_VERSION})\n`,
-		);
-		return 0;
-	}
-
-	for (const failure of result.failures) {
-		process.stderr.write(`verify-fixed-versions: ${failure}\n`);
-	}
-	return 1;
-}
-
-if (import.meta.url === `file://${process.argv[1]}`) {
-	process.exitCode = main();
-}
diff --git a/scripts/publish/src/lib/artifacts.test.ts b/scripts/publish/src/lib/artifacts.test.ts
deleted file mode 100644
index 1d37b84e4..000000000
--- a/scripts/publish/src/lib/artifacts.test.ts
+++ /dev/null
@@ -1,43 +0,0 @@
-import assert from "node:assert/strict";
-import test from "node:test";
-import {
-	releaseArtifactNamespace,
-	releaseArtifactPrefix,
-	releaseUserAgent,
-} from "./artifacts.js";
-
-test("defaults release artifact paths to secure-exec", () => {
-	assert.equal(releaseArtifactNamespace({}), "secure-exec");
-	assert.equal(
-		releaseArtifactPrefix({ ref: "abc1234", name: "sidecar" }, {}),
-		"secure-exec/abc1234/sidecar/",
-	);
-	assert.equal(
-		releaseUserAgent({}),
-		"secure-exec-release-publisher (https://github.com/rivet-dev/secure-exec)",
-	);
-});
-
-test("supports secure-exec release artifact namespace", () => {
-	const env = {
-		RELEASE_ARTIFACT_NAMESPACE: "secure-exec",
-		RELEASE_REPOSITORY_URL: "https://github.com/rivet-dev/secure-exec",
-	};
-
-	assert.equal(releaseArtifactNamespace(env), "secure-exec");
-	assert.equal(
-		releaseArtifactPrefix({ ref: "0.3.0", name: "sidecar" }, env),
-		"secure-exec/0.3.0/sidecar/",
-	);
-	assert.equal(
-		releaseUserAgent(env),
-		"secure-exec-release-publisher (https://github.com/rivet-dev/secure-exec)",
-	);
-});
-
-test("rejects invalid release artifact namespaces", () => {
-	assert.throws(
-		() => releaseArtifactNamespace({ RELEASE_ARTIFACT_NAMESPACE: "../agentos" }),
-		/invalid RELEASE_ARTIFACT_NAMESPACE/,
-	);
-});
diff --git a/scripts/publish/src/lib/artifacts.ts b/scripts/publish/src/lib/artifacts.ts
deleted file mode 100644
index cf43e4f95..000000000
--- a/scripts/publish/src/lib/artifacts.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-export type ArtifactEnv = Record<string, string | undefined>;
-
-export interface ReleaseArtifactRef {
-	ref: string;
-	name: string;
-}
-
-export function releaseArtifactNamespace(env: ArtifactEnv = process.env): string {
-	const namespace = env.RELEASE_ARTIFACT_NAMESPACE?.trim() || "secure-exec";
-	if (!/^[a-z0-9][a-z0-9-]*$/.test(namespace)) {
-		throw new Error(`invalid RELEASE_ARTIFACT_NAMESPACE: ${namespace}`);
-	}
-	return namespace;
-}
-
-export function releaseArtifactPrefix(
-	artifact: ReleaseArtifactRef,
-	env: ArtifactEnv = process.env,
-): string {
-	return `${releaseArtifactNamespace(env)}/${artifact.ref}/${artifact.name}/`;
-}
-
-export function releaseUserAgent(env: ArtifactEnv = process.env): string {
-	const namespace = releaseArtifactNamespace(env);
-	const repositoryUrl =
-		env.RELEASE_REPOSITORY_URL ?? `https://github.com/rivet-dev/${namespace}`;
-	return `${namespace}-release-publisher (${repositoryUrl})`;
-}
diff --git a/scripts/publish/src/lib/context.ts b/scripts/publish/src/lib/context.ts
deleted file mode 100644
index 28792057b..000000000
--- a/scripts/publish/src/lib/context.ts
+++ /dev/null
@@ -1,247 +0,0 @@
-import { appendFileSync, existsSync, readFileSync } from "node:fs";
-import { dirname, join } from "node:path";
-import { fileURLToPath } from "node:url";
-import { $ } from "execa";
-
-/**
- * Publish context. Resolved once per workflow run by the `context-output` CI
- * subcommand and passed through every subsequent step via GitHub Actions job
- * outputs + per-step flags.
- */
-export type Trigger = "branch" | "release";
-
-export interface PublishContext {
-	trigger: Trigger;
-	/** Resolved version string, never null. */
-	version: string;
-	/** npm dist-tag. */
-	npmTag: string;
-	/** Short commit sha (7 chars). */
-	sha: string;
-	/** Only meaningful when trigger === "release". */
-	latest: boolean;
-	/** Branch name. Only set when trigger === "branch". */
-	branch?: string;
-	repoRoot: string;
-}
-
-/** Override set accepted by the local release cutter. */
-export interface ResolveOverrides {
-	trigger?: Trigger;
-	version?: string;
-	latest?: boolean;
-	branch?: string;
-	sha?: string;
-}
-
-function findRepoRoot(): string {
-	if (process.env.GITHUB_WORKSPACE && existsSync(process.env.GITHUB_WORKSPACE)) {
-		return process.env.GITHUB_WORKSPACE;
-	}
-	let dir = dirname(fileURLToPath(import.meta.url));
-	for (let i = 0; i < 10; i++) {
-		if (existsSync(join(dir, "pnpm-workspace.yaml"))) return dir;
-		dir = dirname(dir);
-	}
-	throw new Error("Could not locate repo root (no pnpm-workspace.yaml)");
-}
-
-/**
- * Base for all preview pre-release strings. Hardcoded to `0.0.0` so preview
- * versions like `0.0.0-my-branch.abc1234` never look like real releases and
- * always sort below any published `X.Y.Z`. Using a committed `package.json`
- * version as the base would just embed whatever stale number happened to be
- * committed there. It has no semantic relationship to the branch being
- * previewed.
- */
-const PREVIEW_BASE_VERSION = "0.0.0";
-
-async function readShortSha(repoRoot: string): Promise<string> {
-	const envSha = process.env.GITHUB_SHA;
-	if (envSha) return envSha.slice(0, 7);
-	const { stdout } = await $({ cwd: repoRoot })`git rev-parse HEAD`;
-	return stdout.trim().slice(0, 7);
-}
-
-async function readBranchName(repoRoot: string): Promise<string> {
-	const envRef = process.env.GITHUB_REF_NAME;
-	if (envRef) return envRef;
-	const { stdout } = await $({
-		cwd: repoRoot,
-	})`git rev-parse --abbrev-ref HEAD`;
-	return stdout.trim();
-}
-
-/**
- * Sanitize a branch name into something safe to use as both an npm dist-tag
- * and a semver prerelease identifier. Lowercases, replaces any
- * non-alphanumeric character (other than hyphens) with a hyphen, collapses
- * runs of hyphens, and trims leading/trailing hyphens.
- */
-function sanitizeBranch(branch: string): string {
-	const cleaned = branch
-		.toLowerCase()
-		.replace(/[^a-z0-9-]+/g, "-")
-		.replace(/-+/g, "-")
-		.replace(/^-+|-+$/g, "");
-	if (cleaned.length === 0) {
-		throw new Error(`branch name "${branch}" sanitized to empty string`);
-	}
-	return cleaned;
-}
-
-function readInputFromEvent<T = unknown>(name: string): T | undefined {
-	const path = process.env.GITHUB_EVENT_PATH;
-	if (!path || !existsSync(path)) return undefined;
-	try {
-		const event = JSON.parse(readFileSync(path, "utf-8")) as {
-			inputs?: Record<string, unknown>;
-		};
-		const v = event.inputs?.[name];
-		return v as T | undefined;
-	} catch {
-		return undefined;
-	}
-}
-
-function parseBoolInput(v: unknown, fallback: boolean): boolean {
-	if (typeof v === "boolean") return v;
-	if (typeof v === "string") {
-		if (v === "true") return true;
-		if (v === "false") return false;
-	}
-	return fallback;
-}
-
-function deriveTrigger(overrides: ResolveOverrides | undefined): Trigger {
-	if (overrides?.trigger) return overrides.trigger;
-	const eventName = process.env.GITHUB_EVENT_NAME;
-	if (eventName === "workflow_dispatch") {
-		const version = readInputFromEvent<string>("version");
-		if (typeof version === "string" && version.length > 0) return "release";
-		return "branch";
-	}
-	// Default for local invocation without overrides (unusual): assume release
-	// so missing fields are caught loudly.
-	return "release";
-}
-
-function computeNpmTag(
-	trigger: Trigger,
-	version: string,
-	latest: boolean,
-	branch?: string,
-): string {
-	if (trigger === "branch") {
-		if (!branch) {
-			throw new Error("branch trigger requires branch to compute npm tag");
-		}
-		return sanitizeBranch(branch);
-	}
-	// release
-	if (version.includes("-rc.")) return "rc";
-	return latest ? "latest" : "next";
-}
-
-function computeVersion(
-	trigger: Trigger,
-	base: string,
-	sha: string,
-	branch: string | undefined,
-	overrideVersion: string | undefined,
-): string {
-	if (overrideVersion) return overrideVersion;
-	if (trigger === "branch") {
-		if (!branch) {
-			throw new Error("branch trigger requires branch to compute version");
-		}
-		return `${base}-${sanitizeBranch(branch)}.${sha}`;
-	}
-	throw new Error("release trigger requires an explicit version override");
-}
-
-/**
- * Resolve the publish context. Pure function of environment + overrides.
- * Not memoized: each subcommand process re-reads env, and the `context-output`
- * subcommand exists specifically so downstream steps receive stable values via
- * `$GITHUB_OUTPUT` / flags instead of re-resolving.
- */
-export async function resolveContext(
-	overrides: ResolveOverrides = {},
-): Promise<PublishContext> {
-	const repoRoot = findRepoRoot();
-	const trigger = deriveTrigger(overrides);
-
-	const sha = overrides.sha ?? (await readShortSha(repoRoot));
-
-	let branch = overrides.branch;
-	if (trigger === "branch" && !branch) {
-		branch = await readBranchName(repoRoot);
-	}
-
-	// Release version: override > workflow_dispatch input > error.
-	let version = overrides.version;
-	if (!version && trigger === "release") {
-		const input = readInputFromEvent<string>("version");
-		if (typeof input === "string" && input.length > 0) version = input;
-	}
-
-	if (trigger !== "release") {
-		version = computeVersion(
-			trigger,
-			PREVIEW_BASE_VERSION,
-			sha,
-			branch,
-			version,
-		);
-	} else if (!version) {
-		throw new Error(
-			"release trigger requires version (pass --version or workflow_dispatch input)",
-		);
-	}
-
-	// Latest: override > workflow_dispatch input > false.
-	let latest = overrides.latest;
-	if (latest === undefined) {
-		const input = readInputFromEvent<unknown>("latest");
-		latest = parseBoolInput(input, false);
-	}
-	if (trigger !== "release") latest = false;
-
-	const npmTag = computeNpmTag(trigger, version, latest, branch);
-
-	return {
-		trigger,
-		version,
-		npmTag,
-		sha,
-		latest,
-		branch,
-		repoRoot,
-	};
-}
-
-/** Write every context field to `$GITHUB_OUTPUT` so downstream steps read via needs.*. */
-export function writeContextToGithubOutput(ctx: PublishContext): void {
-	const path = process.env.GITHUB_OUTPUT;
-	if (!path) {
-		// When invoked locally for debugging, print to stdout in the same format.
-		console.log(`trigger=${ctx.trigger}`);
-		console.log(`version=${ctx.version}`);
-		console.log(`npm_tag=${ctx.npmTag}`);
-		console.log(`sha=${ctx.sha}`);
-		console.log(`latest=${ctx.latest}`);
-		if (ctx.branch !== undefined) console.log(`branch=${ctx.branch}`);
-		return;
-	}
-	const lines = [
-		`trigger=${ctx.trigger}`,
-		`version=${ctx.version}`,
-		`npm_tag=${ctx.npmTag}`,
-		`sha=${ctx.sha}`,
-		`latest=${ctx.latest}`,
-	];
-	if (ctx.branch !== undefined) lines.push(`branch=${ctx.branch}`);
-	// Append (do not overwrite) in case other steps also wrote to GITHUB_OUTPUT.
-	appendFileSync(path, `${lines.join("\n")}\n`);
-}
diff --git a/scripts/publish/src/lib/git.ts b/scripts/publish/src/lib/git.ts
deleted file mode 100644
index b1823c5fc..000000000
--- a/scripts/publish/src/lib/git.ts
+++ /dev/null
@@ -1,66 +0,0 @@
-/**
- * Git helpers for the release tail: clean-tree validation, tag + push, and
- * GitHub release creation.
- */
-import { $ } from "execa";
-import { scoped } from "./logger.js";
-
-const log = scoped("git");
-
-/** Refuse to proceed if there are uncommitted changes. */
-export async function validateClean(): Promise<void> {
-	const { stdout } = await $`git status --porcelain`;
-	if (stdout.trim().length > 0) {
-		throw new Error(
-			"there are uncommitted changes — commit or stash them before proceeding",
-		);
-	}
-}
-
-/** Force-create and force-push `v{version}`. */
-export async function tagAndPush(version: string): Promise<void> {
-	log.info(`creating tag v${version}`);
-	await $({ stdio: "inherit" })`git tag -f v${version}`;
-	await $({ stdio: "inherit" })`git push origin v${version} -f`;
-	log.info(`pushed v${version}`);
-}
-
-/**
- * Create (or update) a GitHub release for the version. If a release with the
- * same name already exists, its tag is updated to match. New releases with a
- * prerelease identifier (anything containing `-`) are marked as prerelease.
- */
-export async function createGhRelease(version: string): Promise<void> {
-	log.info(`creating GitHub release for ${version}`);
-
-	const { stdout: currentTag } = await $`git describe --tags --exact-match`;
-	const tagName = currentTag.trim();
-
-	const { stdout: releaseJson } =
-		await $`gh release list --json name,tagName --limit 200`;
-	const releases = JSON.parse(releaseJson) as Array<{
-		name: string;
-		tagName: string;
-	}>;
-	const existing = releases.find((r) => r.name === version);
-
-	if (existing) {
-		log.info(`updating existing release ${version} -> tag ${tagName}`);
-		await $({
-			stdio: "inherit",
-		})`gh release edit ${existing.tagName} --tag ${tagName}`;
-		return;
-	}
-
-	log.info(`creating new release ${version} -> tag ${tagName}`);
-	await $({
-		stdio: "inherit",
-	})`gh release create ${tagName} --title ${version} --generate-notes`;
-
-	// Prerelease detection: anything with a `-` is a prerelease per semver.
-	if (version.includes("-")) {
-		await $({
-			stdio: "inherit",
-		})`gh release edit ${tagName} --prerelease`;
-	}
-}
diff --git a/scripts/publish/src/lib/logger.ts b/scripts/publish/src/lib/logger.ts
deleted file mode 100644
index aa5056ba1..000000000
--- a/scripts/publish/src/lib/logger.ts
+++ /dev/null
@@ -1,28 +0,0 @@
-/**
- * Prefixed console logger for consistent CI log scanning.
- *
- * Usage:
- *   const log = scoped("npm");
- *   log.info("publishing ...");  ->  [npm] publishing ...
- */
-
-export interface Logger {
-	info(msg: string): void;
-	warn(msg: string): void;
-	error(msg: string): void;
-}
-
-export function scoped(prefix: string): Logger {
-	const tag = `[${prefix}]`;
-	return {
-		info(msg) {
-			console.log(`${tag} ${msg}`);
-		},
-		warn(msg) {
-			console.warn(`${tag} ${msg}`);
-		},
-		error(msg) {
-			console.error(`${tag} ${msg}`);
-		},
-	};
-}
diff --git a/scripts/publish/src/lib/npm.ts b/scripts/publish/src/lib/npm.ts
deleted file mode 100644
index 4d05a2960..000000000
--- a/scripts/publish/src/lib/npm.ts
+++ /dev/null
@@ -1,264 +0,0 @@
-/**
- * Parallel npm publish with bounded concurrency, exponential backoff retries,
- * and idempotent "already published" handling.
- *
- * Works for both preview and release flows — the only per-flow input is the
- * dist-tag and the `releaseMode` flag (which toggles strict preflight).
- *
- * All packages publish with `npm publish` (never `pnpm publish`). `npm publish`
- * preserves the `0755` executable bit on the bundled sidecar binary, which
- * `pnpm publish` normalizes to `0644`. `workspace:*` dependency specs are
- * rewritten to literal versions by `bumpPackageJsons` (full mode) before this
- * runs, so plain `npm publish` resolves them correctly.
- */
-import { spawn } from "node:child_process";
-import { scoped } from "./logger.js";
-import {
-	assertDiscoverySanity,
-	discoverPackages,
-	type Package,
-} from "./packages.js";
-
-const log = scoped("npm");
-
-export interface PublishAllOptions {
-	/** npm dist-tag (e.g. my-branch, rc, next, latest). */
-	tag: string;
-	/** Max simultaneous publishes. */
-	parallel?: number;
-	/** Max retries per package. */
-	retries?: number;
-	/** Initial backoff in ms (doubled per retry). */
-	initialBackoffMs?: number;
-	/**
-	 * When true, fail hard if every package is already published. Preview
-	 * mode treats this as an idempotent no-op; release mode treats it as a
-	 * "you forgot to bump the version" error.
-	 */
-	releaseMode?: boolean;
-	/** Pass `--dry-run` to npm publish (local verification, publishes nothing). */
-	dryRun?: boolean;
-}
-
-export type PublishStatus =
-	| "success"
-	| "retried-success"
-	| "already-exists"
-	| "failed";
-
-export interface PublishResult {
-	pkg: Package;
-	status: PublishStatus;
-	attempts: number;
-	lastError?: string;
-}
-
-export interface PublishSummary {
-	results: PublishResult[];
-	counts: {
-		success: number;
-		retried: number;
-		alreadyExists: number;
-		failed: number;
-	};
-	elapsedSeconds: number;
-}
-
-const ALREADY_PUBLISHED_PATTERNS = [
-	"cannot publish over the previously published versions",
-	"cannot publish over previously published version",
-	"You cannot publish over",
-];
-
-function isAlreadyPublished(output: string): boolean {
-	return ALREADY_PUBLISHED_PATTERNS.some((p) => output.includes(p));
-}
-
-function isRetryable(output: string): boolean {
-	if (isAlreadyPublished(output)) return false;
-	return (
-		output.includes("ECONNRESET") ||
-		output.includes("ETIMEDOUT") ||
-		output.includes("ENOTFOUND") ||
-		output.includes("EAI_AGAIN") ||
-		output.includes("socket hang up") ||
-		output.includes("npm error 503") ||
-		output.includes("npm error 502") ||
-		output.includes("npm error 504") ||
-		output.includes("npm error 429") ||
-		output.includes("ERR_STREAM_PREMATURE_CLOSE") ||
-		// Some npm errors don't tag the status clearly; if we don't see a
-		// definitive "already published" we can retry once.
-		!/npm error (code|E[A-Z]+)/.test(output)
-	);
-}
-
-function extractError(output: string, maxLines = 3): string {
-	const lines = output
-		.split("\n")
-		.filter((l) => /npm error/i.test(l) && !l.includes("A complete log"))
-		.slice(0, maxLines);
-	if (lines.length === 0) {
-		return output.trim().split("\n").slice(-maxLines).join(" | ");
-	}
-	return lines.join(" | ");
-}
-
-function runNpmPublish(
-	pkg: Package,
-	tag: string,
-	dryRun: boolean,
-): Promise<{ code: number; output: string }> {
-	return new Promise((resolvePromise) => {
-		const args = ["publish", "--access", "public", "--tag", tag];
-		if (dryRun) args.push("--dry-run");
-		const child = spawn("npm", args, {
-			cwd: pkg.dir,
-			stdio: ["ignore", "pipe", "pipe"],
-			env: process.env,
-		});
-		const chunks: Buffer[] = [];
-		child.stdout.on("data", (c) => chunks.push(c));
-		child.stderr.on("data", (c) => chunks.push(c));
-		child.on("close", (code) => {
-			resolvePromise({
-				code: code ?? 1,
-				output: Buffer.concat(chunks).toString("utf8"),
-			});
-		});
-	});
-}
-
-async function publishOne(
-	pkg: Package,
-	opts: Required<
-		Pick<PublishAllOptions, "tag" | "retries" | "initialBackoffMs" | "dryRun">
-	>,
-): Promise<PublishResult> {
-	for (let attempt = 1; attempt <= opts.retries + 1; attempt++) {
-		const { code, output } = await runNpmPublish(pkg, opts.tag, opts.dryRun);
-		if (code === 0) {
-			return {
-				pkg,
-				status: attempt === 1 ? "success" : "retried-success",
-				attempts: attempt,
-			};
-		}
-		if (isAlreadyPublished(output)) {
-			return { pkg, status: "already-exists", attempts: attempt };
-		}
-		if (!isRetryable(output) || attempt > opts.retries) {
-			return {
-				pkg,
-				status: "failed",
-				attempts: attempt,
-				lastError: extractError(output),
-			};
-		}
-		const delay = opts.initialBackoffMs * 2 ** (attempt - 1);
-		log.info(`  [retry ${attempt}/${opts.retries}] ${pkg.name} — waiting ${delay}ms`);
-		await new Promise((r) => setTimeout(r, delay));
-	}
-	return { pkg, status: "failed", attempts: opts.retries + 1 };
-}
-
-function printResult(r: PublishResult): void {
-	const name = r.pkg.name.padEnd(48);
-	const symbol =
-		r.status === "success" || r.status === "retried-success"
-			? "✓"
-			: r.status === "already-exists"
-				? "="
-				: "✗";
-	const suffix =
-		r.status === "retried-success"
-			? ` (after ${r.attempts} attempts)`
-			: r.status === "failed"
-				? ` — ${r.lastError ?? "unknown error"}`
-				: "";
-	log.info(`  ${symbol} ${name}${suffix}`);
-}
-
-export async function publishAll(
-	repoRoot: string,
-	opts: PublishAllOptions,
-): Promise<PublishSummary> {
-	const parallel = opts.parallel ?? 16;
-	const retries = opts.retries ?? 3;
-	const initialBackoffMs = opts.initialBackoffMs ?? 2000;
-	const tag = opts.tag;
-	const dryRun = opts.dryRun ?? false;
-
-	const packages = discoverPackages(repoRoot);
-	assertDiscoverySanity(packages);
-
-	log.info(
-		`publishing ${packages.length} packages | tag=${tag} | parallel=${parallel} | retries=${retries}${dryRun ? " | DRY RUN" : ""}`,
-	);
-
-	const queue = [...packages];
-	const results: PublishResult[] = [];
-	const startedAt = Date.now();
-
-	async function worker(): Promise<void> {
-		while (true) {
-			const pkg = queue.shift();
-			if (!pkg) return;
-			const result = await publishOne(pkg, {
-				tag,
-				retries,
-				initialBackoffMs,
-				dryRun,
-			});
-			printResult(result);
-			results.push(result);
-		}
-	}
-
-	const workers: Promise<void>[] = [];
-	for (let i = 0; i < Math.min(parallel, packages.length); i++) {
-		workers.push(worker());
-	}
-	await Promise.all(workers);
-
-	const elapsed = (Date.now() - startedAt) / 1000;
-	const counts = {
-		success: results.filter((r) => r.status === "success").length,
-		retried: results.filter((r) => r.status === "retried-success").length,
-		alreadyExists: results.filter((r) => r.status === "already-exists").length,
-		failed: results.filter((r) => r.status === "failed").length,
-	};
-
-	log.info("");
-	log.info(`summary (${elapsed.toFixed(1)}s)`);
-	log.info(`  ${counts.success} succeeded`);
-	if (counts.retried > 0) log.info(`  ${counts.retried} succeeded after retry`);
-	if (counts.alreadyExists > 0)
-		log.info(`  ${counts.alreadyExists} already published (no-op)`);
-	if (counts.failed > 0) {
-		log.error(`  ${counts.failed} FAILED`);
-		for (const r of results.filter((x) => x.status === "failed")) {
-			log.error(`    - ${r.pkg.name}: ${r.lastError}`);
-		}
-		throw new Error(`${counts.failed} package(s) failed to publish`);
-	}
-
-	// In release mode, if *every* package was already published, treat it as
-	// an error — almost certainly a missed version bump. Reruns of successful
-	// releases are OK because partial rerun (a few packages re-publish) still
-	// has at least one success.
-	if (
-		opts.releaseMode &&
-		!dryRun &&
-		counts.success === 0 &&
-		counts.retried === 0 &&
-		counts.failed === 0 &&
-		counts.alreadyExists === packages.length
-	) {
-		throw new Error(
-			`release mode: all ${packages.length} packages already published at this version. Did you forget to bump the version?`,
-		);
-	}
-
-	return { results, counts, elapsedSeconds: elapsed };
-}
diff --git a/scripts/publish/src/lib/packages.test.ts b/scripts/publish/src/lib/packages.test.ts
deleted file mode 100644
index c28310318..000000000
--- a/scripts/publish/src/lib/packages.test.ts
+++ /dev/null
@@ -1,128 +0,0 @@
-import test from "node:test";
-import assert from "node:assert/strict";
-import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import {
-	assertDiscoverySanity,
-	buildMetaPlatformMap,
-	DEFAULT_SIDECAR_PLATFORMS,
-	discoverPackages,
-	SECURE_EXEC_WORKSPACE_PACKAGES,
-} from "./packages.js";
-
-function withFixture(fn: (root: string) => void) {
-	const root = mkdtempSync(join(tmpdir(), "publish-packages-"));
-	try {
-		fn(root);
-	} finally {
-		rmSync(root, { recursive: true, force: true });
-	}
-}
-
-function writeJson(root: string, rel: string, value: unknown) {
-	const path = join(root, rel);
-	mkdirSync(join(path, ".."), { recursive: true });
-	writeFileSync(path, `${JSON.stringify(value, null, "\t")}\n`);
-}
-
-function writeSecureExecWorkspace(root: string) {
-	writeJson(root, "package.json", {
-		name: "secure-exec-workspace",
-		private: true,
-		packageManager: "pnpm@10.13.1",
-	});
-	writeFileSync(
-		join(root, "pnpm-workspace.yaml"),
-		[
-			"packages:",
-			"  - packages/*",
-			"  - registry/tool/*",
-			"",
-		].join("\n"),
-	);
-	for (const [rel, name] of [
-		["packages/core", "@secure-exec/core"],
-		["packages/browser", "@secure-exec/browser"],
-		["packages/sidecar", "@secure-exec/sidecar"],
-		...DEFAULT_SIDECAR_PLATFORMS.map((platform) => [
-			`packages/sidecar/npm/${platform}`,
-			`@secure-exec/sidecar-${platform}`,
-		]),
-		["packages/registry-types", "@agentos-software/manifest"],
-		["registry/tool/sandbox", "@secure-exec/sandbox"],
-	]) {
-		writeJson(root, join(rel, "package.json"), {
-			name,
-			version: "0.0.0",
-		});
-	}
-}
-
-test("discovers secure-exec-only packages", () => {
-	withFixture((root) => {
-		writeSecureExecWorkspace(root);
-
-		const packages = discoverPackages(root);
-		const names = packages.map((pkg) => pkg.name);
-
-		assert(names.includes("@secure-exec/browser"));
-		assert(names.includes("@secure-exec/core"));
-		assert(names.includes("@secure-exec/sidecar-linux-x64-gnu"));
-		assert(names.includes("@secure-exec/sidecar"));
-		assert(
-			names.indexOf("@secure-exec/sidecar-linux-x64-gnu") <
-				names.indexOf("@secure-exec/sidecar"),
-		);
-		assert.doesNotThrow(() => assertDiscoverySanity(packages));
-	});
-});
-
-test("allowlists secure-exec browser package for post-split discovery", () => {
-	assert(SECURE_EXEC_WORKSPACE_PACKAGES.has("@secure-exec/browser"));
-});
-
-test("builds platform map for the secure-exec sidecar meta package", () => {
-	withFixture((root) => {
-		writeSecureExecWorkspace(root);
-		const packages = discoverPackages(root);
-		const metaMap = buildMetaPlatformMap(packages);
-
-		assert.deepEqual(
-			metaMap.get("@secure-exec/sidecar"),
-			DEFAULT_SIDECAR_PLATFORMS.map(
-				(platform) => `@secure-exec/sidecar-${platform}`,
-			).sort(),
-		);
-	});
-});
-
-test("sanity check requires secure-exec registry packages and sidecar resolver", () => {
-	withFixture((root) => {
-		writeSecureExecWorkspace(root);
-		const packages = discoverPackages(root);
-
-		assert.doesNotThrow(() => assertDiscoverySanity(packages));
-		assert.throws(
-			() =>
-				assertDiscoverySanity(
-					packages.filter((pkg) => pkg.name !== "@secure-exec/sidecar"),
-				),
-			/package discovery missing required packages: @secure-exec\/sidecar/,
-		);
-		assert.throws(
-			() =>
-				assertDiscoverySanity(
-					packages.filter((pkg) => pkg.name !== "@secure-exec/browser"),
-				),
-			/package discovery missing required packages: @secure-exec\/browser/,
-		);
-		assert.throws(
-			() =>
-				assertDiscoverySanity(
-					packages.filter((pkg) => pkg.name !== "@secure-exec/core"),
-				),
-			/package discovery missing required packages: @secure-exec\/core/,
-		);
-	});
-});
diff --git a/scripts/publish/src/lib/packages.ts b/scripts/publish/src/lib/packages.ts
deleted file mode 100644
index 462dfede5..000000000
--- a/scripts/publish/src/lib/packages.ts
+++ /dev/null
@@ -1,194 +0,0 @@
-/**
- * Single source of truth for the set of secure-exec packages we publish.
- */
-import { execSync } from "node:child_process";
-import { existsSync, readFileSync, readdirSync, statSync } from "node:fs";
-import { join, relative, resolve } from "node:path";
-
-export interface Package {
-	name: string;
-	/** Directory containing the package.json (absolute). */
-	dir: string;
-	/** Directory relative to repo root. */
-	relDir: string;
-}
-
-export interface DiscoverPackagesOptions {
-	/** Reserved for parity with the rivetkit discovery API. */
-	includeReleaseOnly?: boolean;
-}
-
-export const EXCLUDED = new Set<string>([
-	"publish",
-]);
-
-export interface MetaPackageSpec {
-	/** Name of the meta package. */
-	meta: string;
-	/** Prefix of the platform-specific packages to inject. */
-	platformPrefix: string;
-}
-
-export const META_PACKAGES: readonly MetaPackageSpec[] = [
-	{
-		meta: "@secure-exec/sidecar",
-		platformPrefix: "@secure-exec/sidecar-",
-	},
-];
-
-const SIDECAR_BINARY_PACKAGE_DIRS = ["packages/sidecar/npm"] as const;
-
-export const SECURE_EXEC_WORKSPACE_PACKAGES = new Set([
-	"secure-exec",
-	"@secure-exec/browser",
-	"@secure-exec/core",
-	"@agentos-software/manifest",
-	"@secure-exec/sandbox",
-	"@secure-exec/sidecar",
-	"@secure-exec/typescript",
-]);
-
-export const DEFAULT_SIDECAR_PLATFORMS = [
-	"linux-x64-gnu",
-	"linux-arm64-gnu",
-	"darwin-x64",
-	"darwin-arm64",
-] as const;
-
-export function sidecarPlatforms(): string[] {
-	const env = process.env.SIDECAR_PLATFORMS?.trim();
-	if (env) return env.split(/\s+/).filter(Boolean);
-	return [...DEFAULT_SIDECAR_PLATFORMS];
-}
-
-function isPublishable(pkg: { name?: string; private?: boolean }): boolean {
-	if (!pkg.name) return false;
-	if (pkg.private) return false;
-	if (EXCLUDED.has(pkg.name)) return false;
-	return true;
-}
-
-function readPackageJson(
-	dir: string,
-): { name?: string; private?: boolean } | null {
-	const pkgPath = join(dir, "package.json");
-	if (!existsSync(pkgPath)) return null;
-	try {
-		return JSON.parse(readFileSync(pkgPath, "utf8"));
-	} catch {
-		return null;
-	}
-}
-
-export function discoverPackages(
-	repoRoot: string,
-	_opts: DiscoverPackagesOptions = {},
-): Package[] {
-	const packages: Package[] = [];
-	const seen = new Set<string>();
-
-	const add = (dir: string) => {
-		const absDir = resolve(dir);
-		const pkg = readPackageJson(absDir);
-		if (!pkg) return;
-		if (!pkg.name) return;
-		if (!isPublishable(pkg)) return;
-		if (seen.has(pkg.name)) return;
-		seen.add(pkg.name);
-		packages.push({
-			name: pkg.name,
-			dir: absDir,
-			relDir: relative(repoRoot, absDir),
-		});
-	};
-
-	const platformAllowlist = new Set(sidecarPlatforms());
-	for (const packageDir of SIDECAR_BINARY_PACKAGE_DIRS) {
-		const npmDir = join(repoRoot, packageDir);
-		if (existsSync(npmDir)) {
-			for (const entry of readdirSync(npmDir).sort()) {
-				if (!platformAllowlist.has(entry)) continue;
-				const platDir = join(npmDir, entry);
-				if (!statSync(platDir).isDirectory()) continue;
-				add(platDir);
-			}
-		}
-	}
-
-	const pnpmList = execSync("pnpm -r list --json --depth -1", {
-		cwd: repoRoot,
-		encoding: "utf8",
-		maxBuffer: 16 * 1024 * 1024,
-	});
-	const workspacePkgs: Array<{
-		name: string;
-		path: string;
-		private?: boolean;
-	}> = JSON.parse(pnpmList);
-	// PREVIEWS also publish the @agentos-software/* registry packages under the
-	// branch dist-tag (version 0.0.0-<branch>.<sha>), so a downstream (agent-os)
-	// can resolve the WHOLE dependency surface of one secure-exec sha from npm.
-	// RELEASES never include them: they version per-package and release via
-	// `just registry-publish <pkg> latest` (agentos-toolchain publish). See
-	// registry/README.md for the publish contract.
-	const includeRegistryPackages =
-		process.env.PUBLISH_INCLUDE_REGISTRY_PACKAGES === "1";
-	for (const p of workspacePkgs) {
-		if (!p.name) continue;
-		// Only the curated secure-exec workspace packages are published on every
-		// trigger; the manifest is the one @agentos-software/* package always
-		// included (no wasm payload, the runtime depends on it).
-		const isRegistryPackage =
-			p.name.startsWith("@agentos-software/") &&
-			(p.path.includes("registry/software") || p.path.includes("registry/agent"));
-		if (
-			!SECURE_EXEC_WORKSPACE_PACKAGES.has(p.name) &&
-			!(includeRegistryPackages && isRegistryPackage)
-		)
-			continue;
-		add(p.path);
-	}
-
-	return packages;
-}
-
-export function buildMetaPlatformMap(
-	packages: Package[],
-): Map<string, string[]> {
-	return new Map(
-		META_PACKAGES.map(({ meta, platformPrefix }) => [
-			meta,
-			packages
-				.filter((p) => p.name.startsWith(platformPrefix))
-				.map((p) => p.name)
-				.sort(),
-		]),
-	);
-}
-
-export function assertDiscoverySanity(packages: Package[]): void {
-	const byName = new Set(packages.map((p) => p.name));
-	const required = [
-		"@secure-exec/browser",
-		"@secure-exec/core",
-		"@agentos-software/manifest",
-		"@secure-exec/sandbox",
-		"@secure-exec/sidecar",
-	];
-	const missing = required.filter((r) => !byName.has(r));
-	if (missing.length > 0) {
-		throw new Error(
-			`package discovery missing required packages: ${missing.join(", ")}`,
-		);
-	}
-	const metaMap = buildMetaPlatformMap(packages);
-	for (const { meta } of META_PACKAGES) {
-		if (!byName.has(meta)) continue;
-		const plats = metaMap.get(meta) ?? [];
-		if (plats.length === 0) {
-			throw new Error(
-				`meta package ${meta} has zero platform packages discovered`,
-			);
-		}
-	}
-}
diff --git a/scripts/publish/src/lib/r2.ts b/scripts/publish/src/lib/r2.ts
deleted file mode 100644
index 70b3d3194..000000000
--- a/scripts/publish/src/lib/r2.ts
+++ /dev/null
@@ -1,155 +0,0 @@
-/**
- * R2 client + upload + copy helpers for the releases bucket.
- *
- * Credentials come from env vars (`R2_RELEASES_ACCESS_KEY_ID` +
- * `R2_RELEASES_SECRET_ACCESS_KEY`). R2 hosting of the sidecar binary is a
- * convenience mirror for crates.io consumers — the npm platform packages bundle
- * the binary directly, so R2 upload is release-only and best-effort.
- *
- * Implementation note: we shell out to `aws s3 cp` / `aws s3api copy-object`
- * because Cloudflare R2 does not support the `x-amz-tagging-directive` header
- * the AWS SDK sends even with `--copy-props none`. The `s3api copy-object` path
- * avoids it. See:
- *   https://community.cloudflare.com/t/r2-s3-compat-doesnt-support-net-sdk-for-copy-operations-due-to-tagging-header/616867
- */
-import { $ } from "execa";
-import { scoped } from "./logger.js";
-
-const log = scoped("r2");
-
-const BUCKET = "rivet-releases";
-const ENDPOINT_URL =
-	"https://2a94c6a0ced8d35ea63cddc86c2681e7.r2.cloudflarestorage.com";
-
-type R2Env = Record<string, string>;
-
-let cached: R2Env | null = null;
-
-function getR2Env(): R2Env {
-	if (cached) return cached;
-	const ak = process.env.R2_RELEASES_ACCESS_KEY_ID;
-	const sk = process.env.R2_RELEASES_SECRET_ACCESS_KEY;
-	if (!ak || !sk) {
-		throw new Error(
-			"R2_RELEASES_ACCESS_KEY_ID and R2_RELEASES_SECRET_ACCESS_KEY must be set",
-		);
-	}
-	cached = {
-		AWS_ACCESS_KEY_ID: ak,
-		AWS_SECRET_ACCESS_KEY: sk,
-		AWS_DEFAULT_REGION: "auto",
-	};
-	return cached;
-}
-
-export interface ListEntry {
-	Key: string;
-	Size?: number;
-}
-export interface ListResult {
-	Contents: ListEntry[];
-}
-
-export async function listObjects(prefix: string): Promise<ListResult> {
-	const env = getR2Env();
-	const contents: ListEntry[] = [];
-	let continuationToken: string | undefined;
-
-	while (true) {
-		const { stdout } = continuationToken
-			? await $({
-					env,
-				})`aws s3api list-objects-v2 --bucket ${BUCKET} --prefix ${prefix} --continuation-token ${continuationToken} --endpoint-url ${ENDPOINT_URL}`
-			: await $({
-					env,
-				})`aws s3api list-objects-v2 --bucket ${BUCKET} --prefix ${prefix} --endpoint-url ${ENDPOINT_URL}`;
-		if (!stdout.trim()) break;
-
-		const page = JSON.parse(stdout) as {
-			Contents?: ListEntry[];
-			IsTruncated?: boolean;
-			NextContinuationToken?: string;
-		};
-		if (Array.isArray(page.Contents)) {
-			contents.push(...page.Contents);
-		}
-		if (!page.IsTruncated || !page.NextContinuationToken) {
-			break;
-		}
-		continuationToken = page.NextContinuationToken;
-	}
-
-	return { Contents: contents };
-}
-
-/** Upload a single file to R2. */
-export async function uploadFile(
-	localPath: string,
-	r2Key: string,
-): Promise<void> {
-	const env = getR2Env();
-	log.info(`uploading ${localPath} -> ${r2Key}`);
-	await $({
-		env,
-		stdio: "inherit",
-	})`aws s3 cp ${localPath} s3://${BUCKET}/${r2Key} --endpoint-url ${ENDPOINT_URL} --checksum-algorithm CRC32`;
-}
-
-/** Recursively upload a directory to an R2 prefix. */
-export async function uploadDir(
-	localDir: string,
-	r2Prefix: string,
-): Promise<void> {
-	const env = getR2Env();
-	log.info(`uploading directory ${localDir} -> ${r2Prefix}`);
-	await $({
-		env,
-		stdio: "inherit",
-	})`aws s3 cp ${localDir} s3://${BUCKET}/${r2Prefix} --recursive --endpoint-url ${ENDPOINT_URL} --checksum-algorithm CRC32`;
-}
-
-/** Delete every object under an R2 prefix. */
-export async function deletePrefix(r2Prefix: string): Promise<void> {
-	const env = getR2Env();
-	log.info(`deleting ${r2Prefix}`);
-	await $({
-		env,
-		stdio: "inherit",
-	})`aws s3 rm s3://${BUCKET}/${r2Prefix} --recursive --endpoint-url ${ENDPOINT_URL}`;
-}
-
-/**
- * Copy every object under `sourcePrefix` to `targetPrefix`. Uses `s3api
- * copy-object` per-object to avoid the R2 tagging-directive bug.
- */
-export async function copyPrefix(
-	sourcePrefix: string,
-	targetPrefix: string,
-): Promise<void> {
-	const env = getR2Env();
-	log.info(`copying ${sourcePrefix} -> ${targetPrefix}`);
-
-	const list = await listObjects(sourcePrefix);
-	if (list.Contents.length === 0) {
-		log.warn(
-			`source prefix ${sourcePrefix} is empty. Skipping copy to ${targetPrefix}.`,
-		);
-		return;
-	}
-
-	// Delete the target first so stale files from a prior publish are cleaned.
-	try {
-		await deletePrefix(targetPrefix);
-	} catch {
-		// Target may not exist yet — that's fine.
-	}
-
-	for (const obj of list.Contents) {
-		const sourceKey = obj.Key;
-		const targetKey = sourceKey.replace(sourcePrefix, targetPrefix);
-		log.info(`  ${sourceKey} -> ${targetKey}`);
-		await $({
-			env,
-		})`aws s3api copy-object --bucket ${BUCKET} --key ${targetKey} --copy-source ${BUCKET}/${sourceKey} --endpoint-url ${ENDPOINT_URL}`;
-	}
-}
diff --git a/scripts/publish/src/lib/rust-crates.test.ts b/scripts/publish/src/lib/rust-crates.test.ts
deleted file mode 100644
index 217cc2c9a..000000000
--- a/scripts/publish/src/lib/rust-crates.test.ts
+++ /dev/null
@@ -1,113 +0,0 @@
-import assert from "node:assert/strict";
-import { mkdtempSync, mkdirSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import test from "node:test";
-import { discoverRustCrates, RUST_CRATES } from "./rust-crates.js";
-
-function withFixture(fn: (root: string) => void) {
-	const root = mkdtempSync(join(tmpdir(), "publish-rust-crates-"));
-	try {
-		fn(root);
-	} finally {
-		rmSync(root, { recursive: true, force: true });
-	}
-}
-
-function write(root: string, rel: string, contents: string) {
-	const path = join(root, rel);
-	mkdirSync(join(path, ".."), { recursive: true });
-	writeFileSync(path, contents);
-}
-
-function assertBefore(crate: string, dependent: string) {
-	const crateIndex = RUST_CRATES.indexOf(crate as (typeof RUST_CRATES)[number]);
-	const dependentIndex = RUST_CRATES.indexOf(
-		dependent as (typeof RUST_CRATES)[number],
-	);
-
-	assert.notEqual(crateIndex, -1, `${crate} is missing from publish order`);
-	assert.notEqual(
-		dependentIndex,
-		-1,
-		`${dependent} is missing from publish order`,
-	);
-	assert(
-		crateIndex < dependentIndex,
-		`${crate} must publish before ${dependent}`,
-	);
-}
-
-test("Rust crate publish order satisfies internal dependencies", () => {
-	assert.equal(new Set(RUST_CRATES).size, RUST_CRATES.length);
-
-	assertBefore("secure-exec-build-support", "secure-exec-v8-runtime");
-	assertBefore("secure-exec-build-support", "secure-exec-execution");
-	assertBefore("secure-exec-bridge", "secure-exec-kernel");
-	assertBefore("secure-exec-bridge", "secure-exec-v8-runtime");
-	assertBefore("secure-exec-vfs-core", "secure-exec-kernel");
-	assertBefore("secure-exec-vfs-core", "secure-exec-vfs");
-	assertBefore("secure-exec-vfs-core", "secure-exec-sidecar-core");
-	assertBefore("secure-exec-kernel", "secure-exec-sidecar-core");
-	assertBefore("secure-exec-vm-config", "secure-exec-sidecar-core");
-	assertBefore("secure-exec-sidecar-core", "secure-exec-sidecar");
-	assertBefore("secure-exec-vfs", "secure-exec-sidecar");
-	assertBefore("secure-exec-v8-runtime", "secure-exec-execution");
-	assertBefore("secure-exec-execution", "secure-exec-sidecar");
-	assertBefore("secure-exec-sidecar", "secure-exec-client");
-});
-
-test("discovers the publishable Rust crate subset from a secure-exec-only workspace", () => {
-	withFixture((root) => {
-		write(
-			root,
-			"Cargo.toml",
-			[
-				"[workspace]",
-				"members = [",
-				'  "crates/bridge",',
-				'  "crates/build-support",',
-				'  "crates/vfs",',
-				'  "crates/kernel",',
-				'  "crates/vm-config",',
-				'  "crates/sidecar-core",',
-				'  "crates/secure-exec-vfs",',
-				'  "crates/v8-runtime",',
-				'  "crates/execution",',
-				'  "crates/sidecar",',
-				'  "crates/secure-exec-client",',
-				"]",
-				"",
-			].join("\n"),
-		);
-		for (const [member, name] of [
-			["crates/bridge", "secure-exec-bridge"],
-			["crates/build-support", "secure-exec-build-support"],
-			["crates/vfs", "secure-exec-vfs-core"],
-			["crates/kernel", "secure-exec-kernel"],
-			["crates/vm-config", "secure-exec-vm-config"],
-			["crates/sidecar-core", "secure-exec-sidecar-core"],
-			["crates/secure-exec-vfs", "secure-exec-vfs"],
-			["crates/v8-runtime", "secure-exec-v8-runtime"],
-			["crates/execution", "secure-exec-execution"],
-			["crates/sidecar", "secure-exec-sidecar"],
-			["crates/secure-exec-client", "secure-exec-client"],
-		]) {
-			write(root, join(member, "Cargo.toml"), `[package]\nname = "${name}"\n`);
-		}
-
-		assert.deepEqual(discoverRustCrates(root), [
-			"secure-exec-build-support",
-			"secure-exec-bridge",
-			"secure-exec-vfs-core",
-			"secure-exec-kernel",
-			"secure-exec-vm-config",
-			"secure-exec-sidecar-core",
-			"secure-exec-vfs",
-			"secure-exec-v8-runtime",
-			"secure-exec-execution",
-			"secure-exec-sidecar",
-			"secure-exec-client",
-		]);
-	});
-});
diff --git a/scripts/publish/src/lib/rust-crates.ts b/scripts/publish/src/lib/rust-crates.ts
deleted file mode 100644
index 21c51fcf5..000000000
--- a/scripts/publish/src/lib/rust-crates.ts
+++ /dev/null
@@ -1,46 +0,0 @@
-import { readFileSync } from "node:fs";
-import { join } from "node:path";
-
-// Internal crates published to crates.io in dependency order.
-export const RUST_CRATE_ORDER = [
-	"secure-exec-build-support",
-	"secure-exec-bridge",
-	"secure-exec-vfs-core",
-	"secure-exec-kernel",
-	"secure-exec-vm-config",
-	"secure-exec-sidecar-protocol",
-	"secure-exec-sidecar-core",
-	"secure-exec-vfs",
-	"secure-exec-v8-runtime",
-	"secure-exec-execution",
-	"secure-exec-sidecar",
-	"secure-exec-client",
-] as const;
-
-export type PublishableRustCrate = (typeof RUST_CRATE_ORDER)[number];
-
-export const RUST_CRATES = RUST_CRATE_ORDER;
-
-function readPackageName(manifestPath: string): string | undefined {
-	const manifest = readFileSync(manifestPath, "utf8");
-	const match = manifest.match(/^\s*name\s*=\s*"([^"]+)"/m);
-	return match?.[1];
-}
-
-function workspaceMembers(repoRoot: string): string[] {
-	const manifest = readFileSync(join(repoRoot, "Cargo.toml"), "utf8");
-	const match = manifest.match(/\[workspace\][\s\S]*?members\s*=\s*\[([\s\S]*?)\]/);
-	if (!match) return [];
-	return [...match[1].matchAll(/"([^"]+)"/g)].map((item) => item[1]);
-}
-
-export function discoverRustCrates(repoRoot: string): PublishableRustCrate[] {
-	const workspaceCrates = new Set<string>();
-	for (const member of workspaceMembers(repoRoot)) {
-		const packageName = readPackageName(join(repoRoot, member, "Cargo.toml"));
-		if (packageName) {
-			workspaceCrates.add(packageName);
-		}
-	}
-	return RUST_CRATE_ORDER.filter((crate) => workspaceCrates.has(crate));
-}
diff --git a/scripts/publish/src/lib/version.test.ts b/scripts/publish/src/lib/version.test.ts
deleted file mode 100644
index aa7c04964..000000000
--- a/scripts/publish/src/lib/version.test.ts
+++ /dev/null
@@ -1,105 +0,0 @@
-import assert from "node:assert/strict";
-import { mkdir, mkdtemp, readFile, rm, writeFile } from "node:fs/promises";
-import { tmpdir } from "node:os";
-import { join } from "node:path";
-import test from "node:test";
-import { DEFAULT_SIDECAR_PLATFORMS } from "./packages.js";
-import { bumpCargoVersions, bumpPackageJsons } from "./version.js";
-
-async function writeJson(root: string, rel: string, value: unknown) {
-	const path = join(root, rel);
-	await mkdir(join(path, ".."), { recursive: true });
-	await writeFile(path, `${JSON.stringify(value, null, "\t")}\n`);
-}
-
-test("bumpCargoVersions rewrites secure-exec workspace dependency versions", async () => {
-	const repoRoot = await mkdtemp(join(tmpdir(), "secure-exec-version-test-"));
-	try {
-		await writeFile(
-			join(repoRoot, "Cargo.toml"),
-			`[workspace.package]
-version = "0.2.0"
-
-[workspace.dependencies]
-secure-exec-bridge = { path = "crates/bridge", version = "0.2.0" }
-secure-exec-sidecar = { path = "crates/sidecar", version = "0.2.0" }
-secure-exec-client = { path = "crates/secure-exec-client", version = "0.2.0" }
-serde = "1"
-`,
-		);
-
-		await bumpCargoVersions(repoRoot, "0.3.0");
-
-		const cargoToml = await readFile(join(repoRoot, "Cargo.toml"), "utf8");
-		assert.match(cargoToml, /version = "0\.3\.0"/);
-		assert.match(
-			cargoToml,
-			/secure-exec-bridge = \{ path = "crates\/bridge", version = "0\.3\.0" \}/,
-		);
-		assert.match(
-			cargoToml,
-			/secure-exec-sidecar = \{ path = "crates\/sidecar", version = "0\.3\.0" \}/,
-		);
-		assert.match(
-			cargoToml,
-			/secure-exec-client = \{ path = "crates\/secure-exec-client", version = "0\.3\.0" \}/,
-		);
-		assert.match(cargoToml, /serde = "1"/);
-	} finally {
-		await rm(repoRoot, { recursive: true, force: true });
-	}
-});
-
-test("bumpPackageJsons injects secure-exec sidecar platform optional dependency", async () => {
-	const repoRoot = await mkdtemp(join(tmpdir(), "secure-exec-version-test-"));
-	try {
-		await writeJson(repoRoot, "package.json", {
-			name: "secure-exec-workspace",
-			private: true,
-			packageManager: "pnpm@10.13.1",
-		});
-		await writeFile(
-			join(repoRoot, "pnpm-workspace.yaml"),
-			[
-				"packages:",
-				"  - packages/*",
-				"  - packages/sidecar/npm/*",
-				"  - registry/tool/*",
-				"",
-			].join("\n"),
-		);
-		for (const [rel, name] of [
-			["packages/core", "@secure-exec/core"],
-			["packages/browser", "@secure-exec/browser"],
-			["packages/registry-types", "@agentos-software/manifest"],
-			["packages/sidecar", "@secure-exec/sidecar"],
-			...DEFAULT_SIDECAR_PLATFORMS.map((platform) => [
-				`packages/sidecar/npm/${platform}`,
-				`@secure-exec/sidecar-${platform}`,
-			]),
-			["registry/tool/sandbox", "@secure-exec/sandbox"],
-		]) {
-			await writeJson(repoRoot, join(rel, "package.json"), {
-				name,
-				version: "0.0.0",
-			});
-		}
-
-		await bumpPackageJsons(repoRoot, "0.3.0");
-
-		const sidecarManifest = JSON.parse(
-			await readFile(join(repoRoot, "packages/sidecar/package.json"), "utf8"),
-		);
-		assert.deepEqual(
-			sidecarManifest.optionalDependencies,
-			Object.fromEntries(
-				DEFAULT_SIDECAR_PLATFORMS.map((platform) => [
-					`@secure-exec/sidecar-${platform}`,
-					"0.3.0",
-				]).sort(),
-			),
-		);
-	} finally {
-		await rm(repoRoot, { recursive: true, force: true });
-	}
-});
diff --git a/scripts/publish/src/lib/version.ts b/scripts/publish/src/lib/version.ts
deleted file mode 100644
index 3ea135d5b..000000000
--- a/scripts/publish/src/lib/version.ts
+++ /dev/null
@@ -1,315 +0,0 @@
-/**
- * Version management split across two surfaces:
- *
- * - `bumpPackageJsons` — rewrites every discovered publishable package.json
- *   `version` field and injects `optionalDependencies` on meta packages.
- *   Safe to call in CI on every run. Uses discovery as the source of truth.
- *   Does NOT touch Cargo.toml or non-discovered files.
- *
- * - `bumpCargoVersions` — rewrites the Rust `[workspace.package]` version and
- *   the lock-step internal crate `version` fields under `[workspace.dependencies]`
- *   so the crates.io publish chain stays consistent.
- *
- * - `updateSourceFiles` — rewrites non-package.json, non-Cargo source files
- *   (example dependency specs). Called only by the local `cut-release.ts`.
- *
- * - `resolveVersion` / `shouldTagAsLatest` — semver helpers for the local cut.
- */
-import * as fs from "node:fs/promises";
-import { join, resolve as resolvePath } from "node:path";
-import { $ } from "execa";
-import { glob } from "glob";
-import * as semver from "semver";
-import { scoped } from "./logger.js";
-import { buildMetaPlatformMap, discoverPackages } from "./packages.js";
-
-const log = scoped("version");
-
-interface PackageJson {
-	name?: string;
-	version?: string;
-	dependencies?: Record<string, string>;
-	devDependencies?: Record<string, string>;
-	peerDependencies?: Record<string, string>;
-	optionalDependencies?: Record<string, string>;
-}
-
-const DEP_FIELDS = [
-	"dependencies",
-	"devDependencies",
-	"peerDependencies",
-	"optionalDependencies",
-] as const;
-
-export interface BumpOptions {
-	/** If true, report actions but do not write. */
-	dryRun?: boolean;
-	/**
-	 * When true, only rewrite the `version` field. Does not touch dependency
-	 * references or inject `optionalDependencies`. Safe to commit to git
-	 * because it preserves `workspace:*` dep specs that the lockfile expects.
-	 *
-	 * When false (default), also rewrites `workspace:*` deps to the literal
-	 * version and injects `optionalDependencies` on meta packages. This is
-	 * the publish-time mode used by CI — never committed.
-	 */
-	versionOnly?: boolean;
-}
-
-/**
- * Rewrite every discovered package's `version` to the given string.
- *
- * In full mode (default, `versionOnly: false`): also injects
- * `optionalDependencies` on meta packages and rewrites `workspace:*`
- * dependency references to the literal version. This is the publish-time
- * mode used by CI and must NOT be committed — it breaks
- * `pnpm install --frozen-lockfile` because the lockfile expects
- * `workspace:*`, not literal versions.
- *
- * In version-only mode (`versionOnly: true`): only rewrites the `version`
- * field. Safe to commit. Used by `cut-release.ts` so the repo records the
- * new version in package.jsons without breaking the lockfile.
- *
- * Returns the number of files written.
- */
-export async function bumpPackageJsons(
-	repoRoot: string,
-	version: string,
-	opts: BumpOptions = {},
-): Promise<number> {
-	const packages = discoverPackages(repoRoot);
-	const packageNames = new Set(packages.map((p) => p.name));
-	const metaPlatformMap = buildMetaPlatformMap(packages);
-	const versionOnly = opts.versionOnly ?? false;
-
-	let updated = 0;
-	for (const pkg of packages) {
-		const pkgJsonPath = join(pkg.dir, "package.json");
-		const raw = await fs.readFile(pkgJsonPath, "utf8");
-		const pkgJson: PackageJson = JSON.parse(raw);
-
-		pkgJson.version = version;
-
-		if (!versionOnly) {
-			// Inject optionalDependencies on meta packages so end users get the
-			// correct platform-specific binary via npm's os/cpu/libc resolution.
-			const platformPkgs = metaPlatformMap.get(pkg.name);
-			if (platformPkgs && platformPkgs.length > 0) {
-				pkgJson.optionalDependencies = pkgJson.optionalDependencies ?? {};
-				for (const platPkg of platformPkgs) {
-					pkgJson.optionalDependencies[platPkg] = version;
-				}
-			}
-
-			for (const field of DEP_FIELDS) {
-				const deps = pkgJson[field];
-				if (!deps) continue;
-				for (const [dep, spec] of Object.entries(deps)) {
-					const isWorkspace =
-						typeof spec === "string" && spec.startsWith("workspace:");
-					if (!isWorkspace) continue;
-					// Convert workspace:* deps on any in-repo package to the literal
-					// version. `packageNames` only covers DISCOVERED (CI-published)
-					// packages, so a dep on a manually-published-but-excluded package
-					// (e.g. @secure-exec/core) would otherwise leak `workspace:*` into
-					// the published tarball and break consumers. The whole @secure-exec
-					// set publishes at one version, so pin those too.
-					const isOurPkg =
-						packageNames.has(dep) || dep.startsWith("@secure-exec/");
-					if (!isOurPkg) continue;
-					deps[dep] = version;
-				}
-			}
-		}
-
-		// Tab-indented, trailing newline — matches the repo convention.
-		const newContent = `${JSON.stringify(pkgJson, null, "\t")}\n`;
-		if (opts.dryRun) {
-			log.info(`[dry-run] would update ${pkg.name} -> ${version}`);
-		} else {
-			await fs.writeFile(pkgJsonPath, newContent);
-			log.info(`updated ${pkg.name} -> ${version}`);
-		}
-		updated++;
-	}
-
-	log.info(`total: ${updated} package.json files updated to ${version}`);
-	return updated;
-}
-
-/**
- * Rewrite the Rust workspace version and the lock-step internal crate versions.
- *
- * a6 declares internal crate deps as inline tables in `[workspace.dependencies]`,
- * e.g. `secure-exec-bridge = { path = "crates/bridge", version = "0.2.0-rc.3" }`,
- * so a single regex rewrites every `version` field next to a `path`.
- */
-export async function bumpCargoVersions(
-	repoRoot: string,
-	version: string,
-	opts: Pick<BumpOptions, "dryRun"> = {},
-): Promise<void> {
-	const cargoTomlPath = join(repoRoot, "Cargo.toml");
-	const cargoToml = await fs.readFile(cargoTomlPath, "utf8");
-	let next = cargoToml.replace(
-		/(\[workspace\.package\]\n(?:[^\n]*\n)*?[ \t]*version = )"[^"]+"/,
-		`$1"${version}"`,
-	);
-	// Rewrite the lock-step version of EVERY internal crate dep in
-	// `[workspace.dependencies]`, matched by the presence of `path = "..."` rather
-	// than a name prefix — earlier this only matched `agent-os-*`/`secure-exec-*`
-	// and missed bare-named internal crates, leaving their version requirement
-	// stale after the bump and breaking cargo resolution during publish. The
-	// `[^}\n]*` spans tolerate other attributes before `path`/`version` (e.g. a
-	// dep-rename alias `vfs = { package = "secure-exec-vfs-core", path = "...", version = "..." }`).
-	next = next.replace(
-		/^([a-zA-Z0-9_-]+ = \{ [^}\n]*path = "[^"]+", [^}\n]*version = ")[^"]+("[^}\n]*\})/gm,
-		`$1${version}$2`,
-	);
-
-	if (next === cargoToml) {
-		log.info(`Cargo.toml Rust versions already set to ${version}`);
-		return;
-	}
-
-	if (opts.dryRun) {
-		log.info(`[dry-run] would update Cargo.toml Rust versions -> ${version}`);
-	} else {
-		await fs.writeFile(cargoTomlPath, next);
-		log.info(`updated Cargo.toml Rust versions -> ${version}`);
-	}
-}
-
-/**
- * Rewrite non-package.json, non-Cargo source files to the given version.
- * Called only by the local release cutter. Examples that pin `@secure-exec/*`
- * to a literal version (rather than `workspace:*`) get updated so released
- * examples carry the new version. `required: false` because a6 examples use
- * `workspace:*` today, so a no-match is expected and not an error.
- */
-export async function updateSourceFiles(
-	repoRoot: string,
-	version: string,
-): Promise<void> {
-	const findReplace: Array<{
-		path: string;
-		find: RegExp;
-		replace: string;
-		required?: boolean;
-	}> = [
-		{
-			path: "examples/**/package.json",
-			find: /"(@secure-exec\/[^"]+)": "\^?[0-9]+\.[0-9]+\.[0-9]+(?:-[^"]+)?"/g,
-			replace: `"$1": "^${version}"`,
-			required: false,
-		},
-	];
-
-	for (const { path: globPath, find, replace, required = true } of findReplace) {
-		const paths = await glob(globPath, {
-			cwd: repoRoot,
-			ignore: ["**/node_modules/**"],
-		});
-		if (paths.length === 0) {
-			if (required) {
-				throw new Error(`no paths matched: ${globPath}`);
-			}
-			continue;
-		}
-		for (const fileRelPath of paths) {
-			const filePath = resolvePath(repoRoot, fileRelPath);
-			const file = await fs.readFile(filePath, "utf-8");
-
-			find.lastIndex = 0;
-			const hasMatch = find.test(file);
-			if (!hasMatch) continue;
-
-			find.lastIndex = 0;
-			const newFile = file.replace(find, replace);
-			await fs.writeFile(filePath, newFile);
-			log.info(`updated ${fileRelPath}`);
-		}
-	}
-}
-
-// -----------------------------------------------------------------------------
-// Local semver helpers — used only by `cut-release.ts`.
-// -----------------------------------------------------------------------------
-
-async function getAllGitVersions(): Promise<string[]> {
-	try {
-		await $`git fetch --tags --force --quiet`;
-	} catch {
-		throw new Error(
-			"could not fetch git tags — refusing to compute latest flag from stale local tags",
-		);
-	}
-	const result = await $`git tag -l v*`;
-	const tags = result.stdout.trim().split("\n").filter(Boolean);
-	if (tags.length === 0) return [];
-	return tags
-		.map((tag) => tag.replace(/^v/, ""))
-		.filter((v) => semver.valid(v))
-		.sort((a, b) => semver.rcompare(a, b));
-}
-
-export async function getLatestGitVersion(): Promise<string | null> {
-	const versions = await getAllGitVersions();
-	const stable = versions.filter((v) => {
-		const p = semver.parse(v);
-		return p && p.prerelease.length === 0;
-	});
-	return stable[0] ?? null;
-}
-
-export async function listRecentVersions(limit = 10): Promise<string[]> {
-	const all = await getAllGitVersions();
-	return all.slice(0, limit);
-}
-
-/**
- * Auto-detect whether a version should be tagged as `latest`. A version is
- * `latest` only if it has no prerelease identifier AND is greater than any
- * existing stable git tag.
- */
-export async function shouldTagAsLatest(version: string): Promise<boolean> {
-	const parsed = semver.parse(version);
-	if (!parsed) throw new Error(`invalid semantic version: ${version}`);
-	if (parsed.prerelease.length > 0) return false;
-	const latest = await getLatestGitVersion();
-	if (!latest) return true;
-	return semver.gt(version, latest);
-}
-
-export interface ResolveVersionOpts {
-	version?: string;
-	major?: boolean;
-	minor?: boolean;
-	patch?: boolean;
-}
-
-export async function resolveVersion(
-	opts: ResolveVersionOpts,
-): Promise<string> {
-	if (opts.version) {
-		if (!semver.valid(opts.version)) {
-			throw new Error(`invalid semantic version: ${opts.version}`);
-		}
-		return opts.version;
-	}
-	if (!opts.major && !opts.minor && !opts.patch) {
-		throw new Error("must provide --version, --major, --minor, or --patch");
-	}
-	const latest = await getLatestGitVersion();
-	if (!latest) {
-		throw new Error(
-			"no existing version tags found — use --version to set an explicit version",
-		);
-	}
-	let next: string | null = null;
-	if (opts.major) next = semver.inc(latest, "major");
-	else if (opts.minor) next = semver.inc(latest, "minor");
-	else if (opts.patch) next = semver.inc(latest, "patch");
-	if (!next) throw new Error("failed to compute next version");
-	return next;
-}
diff --git a/scripts/publish/src/local/cut-release.ts b/scripts/publish/src/local/cut-release.ts
deleted file mode 100644
index 3f9837d80..000000000
--- a/scripts/publish/src/local/cut-release.ts
+++ /dev/null
@@ -1,166 +0,0 @@
-#!/usr/bin/env tsx
-/**
- * Linear release cutter — called by humans, never by CI.
- *
- * Steps:
- *   1. Resolve target version (flags → semver bump → error)
- *   2. Auto-detect or confirm `latest` flag
- *   3. Validate git working tree is clean
- *   4. Print release plan and confirm
- *   5. Optional local type-check fail-fast
- *   6. Trigger the publish.yaml workflow
- *
- * Debugging: comment out any step. No `--only-steps`, no phases.
- */
-import { existsSync } from "node:fs";
-import { dirname, join } from "node:path";
-import * as readline from "node:readline";
-import { fileURLToPath } from "node:url";
-import { Command } from "commander";
-import { $ } from "execa";
-import { validateClean } from "../lib/git.js";
-import { scoped } from "../lib/logger.js";
-import {
-	getLatestGitVersion,
-	listRecentVersions,
-	resolveVersion,
-	shouldTagAsLatest,
-} from "../lib/version.js";
-
-const log = scoped("release");
-
-function findRepoRoot(): string {
-	let dir = dirname(fileURLToPath(import.meta.url));
-	for (let i = 0; i < 10; i++) {
-		if (existsSync(join(dir, "pnpm-workspace.yaml"))) return dir;
-		dir = dirname(dir);
-	}
-	throw new Error("could not locate repo root");
-}
-
-async function confirmPrompt(question: string): Promise<boolean> {
-	const rl = readline.createInterface({
-		input: process.stdin,
-		output: process.stdout,
-	});
-	const answer = await new Promise<string>((resolve) => {
-		rl.question(question, resolve);
-	});
-	rl.close();
-	const a = answer.trim().toLowerCase();
-	return a === "yes" || a === "y";
-}
-
-interface CliOpts {
-	version?: string;
-	major?: boolean;
-	minor?: boolean;
-	patch?: boolean;
-	latest?: boolean;
-	noLatest?: boolean;
-	dryRun?: boolean;
-	yes?: boolean;
-	skipChecks?: boolean;
-}
-
-async function main() {
-	const program = new Command();
-	program
-		.name("cut-release")
-		.description("Cut a new secure-exec release (local orchestrator)")
-		.option("--version <version>", "Explicit version (e.g. 0.2.0 or 0.2.0-rc.1)")
-		.option("--major", "Bump major")
-		.option("--minor", "Bump minor")
-		.option("--patch", "Bump patch")
-		.option("--latest", "Mark as latest dist-tag")
-		.option("--no-latest", "Do not mark as latest")
-		.option("--dry-run", "Resolve and print the release plan without triggering the workflow")
-		.option("-y, --yes", "Skip interactive confirmation")
-		.option("--skip-checks", "Skip local type-check fail-fast")
-		.parse();
-
-	const opts = program.opts<CliOpts>();
-	const repoRoot = findRepoRoot();
-
-	// 1. Resolve version.
-	const version = await resolveVersion({
-		version: opts.version,
-		major: opts.major,
-		minor: opts.minor,
-		patch: opts.patch,
-	});
-
-	// 2. Latest flag: explicit > auto > false.
-	let latest: boolean;
-	if (opts.latest === true) latest = true;
-	else if (opts.noLatest === true || opts.latest === false) latest = false;
-	else latest = await shouldTagAsLatest(version);
-
-	// 3. Validate git clean.
-	await validateClean();
-
-	// 4. Print plan.
-	const { stdout: branch } = await $`git rev-parse --abbrev-ref HEAD`;
-	const latestGit = await getLatestGitVersion();
-	const recent = await listRecentVersions(10);
-	console.log("");
-	console.log("Release plan");
-	console.log(`  Version:  ${version}`);
-	console.log(`  Latest:   ${latest}`);
-	console.log(`  Branch:   ${branch.trim()}`);
-	console.log(`  Previous: ${latestGit ?? "(none)"}`);
-	if (opts.dryRun) console.log("  Dry run:  no workflow trigger");
-	console.log("");
-	if (recent.length > 0) {
-		console.log("Recent versions:");
-		for (const v of recent) {
-			const marker = v === latestGit ? " (latest)" : "";
-			console.log(`  - ${v}${marker}`);
-		}
-		console.log("");
-	}
-
-	if (opts.dryRun) {
-		log.info("dry run complete — workflow not triggered");
-		return;
-	}
-
-	if (!opts.yes) {
-		const ok = await confirmPrompt("Proceed with release? (yes/no): ");
-		if (!ok) {
-			log.info("release cancelled");
-			process.exit(0);
-		}
-	}
-
-	// 5. Local type-check fail-fast.
-	if (!opts.skipChecks) {
-		log.info("running local core build + type-check (fail-fast)");
-		await $({ stdio: "inherit", cwd: repoRoot })`pnpm --dir packages/core build`;
-		await $({
-			stdio: "inherit",
-			cwd: repoRoot,
-		})`pnpm --dir packages/core check-types`;
-	}
-
-	// 6. Trigger the workflow.
-	log.info("triggering publish.yaml workflow");
-	const latestFlag = latest ? "true" : "false";
-	const currentBranch = branch.trim();
-	await $({
-		stdio: "inherit",
-		cwd: repoRoot,
-	})`gh workflow run .github/workflows/publish.yaml -f version=${version} -f latest=${latestFlag} --ref ${currentBranch}`;
-
-	const { stdout: repo } =
-		await $`gh repo view --json nameWithOwner -q .nameWithOwner`;
-	console.log("");
-	console.log(
-		`Workflow triggered: https://github.com/${repo.trim()}/actions/workflows/publish.yaml`,
-	);
-}
-
-main().catch((err) => {
-	log.error(String(err?.stack ?? err));
-	process.exit(1);
-});
diff --git a/scripts/publish/tsconfig.json b/scripts/publish/tsconfig.json
deleted file mode 100644
index 97047a4f4..000000000
--- a/scripts/publish/tsconfig.json
+++ /dev/null
@@ -1,17 +0,0 @@
-{
-	"compilerOptions": {
-		"target": "ES2022",
-		"lib": ["ES2022"],
-		"module": "NodeNext",
-		"moduleResolution": "NodeNext",
-		"strict": true,
-		"noEmit": true,
-		"esModuleInterop": true,
-		"skipLibCheck": true,
-		"resolveJsonModule": true,
-		"types": ["node"],
-		"rootDir": "src"
-	},
-	"include": ["src/**/*.ts"],
-	"exclude": ["node_modules"]
-}
diff --git a/scripts/verify-fixed-versions.test.mjs b/scripts/verify-fixed-versions.test.mjs
deleted file mode 100644
index 550eec541..000000000
--- a/scripts/verify-fixed-versions.test.mjs
+++ /dev/null
@@ -1,77 +0,0 @@
-import { execFileSync } from "node:child_process";
-import { mkdirSync, mkdtempSync, rmSync, writeFileSync } from "node:fs";
-import { tmpdir } from "node:os";
-import { dirname, join } from "node:path";
-import test from "node:test";
-import { fileURLToPath } from "node:url";
-
-const repoRoot = join(dirname(fileURLToPath(import.meta.url)), "..");
-const gateArgs = [
-	"--filter=publish",
-	"exec",
-	"tsx",
-	"src/ci/verify-fixed-versions.ts",
-];
-
-function runGate(root) {
-	const args = [...gateArgs];
-	if (root) args.push(`--root=${root}`);
-	return execFileSync("pnpm", args, { cwd: repoRoot, stdio: "pipe" });
-}
-
-function gateExitCode(root) {
-	try {
-		runGate(root);
-		return 0;
-	} catch (err) {
-		return err.status;
-	}
-}
-
-function writeJson(root, rel, value) {
-	const path = join(root, rel);
-	mkdirSync(join(path, ".."), { recursive: true });
-	writeFileSync(path, `${JSON.stringify(value, null, "\t")}\n`);
-}
-
-function writeFixture(root, packageVersion) {
-	writeJson(root, "package.json", {
-		name: "secure-exec-fixture",
-		private: true,
-		packageManager: "pnpm@10.13.1",
-	});
-	writeFileSync(
-		join(root, "pnpm-workspace.yaml"),
-		["packages:", "  - packages/*", ""].join("\n"),
-	);
-	writeJson(root, "packages/core/package.json", {
-		name: "@secure-exec/core",
-		version: packageVersion,
-	});
-	writeFileSync(
-		join(root, "Cargo.toml"),
-		`[workspace.package]
-version = "0.0.1"
-
-[workspace.dependencies]
-secure-exec-bridge = { path = "crates/bridge", version = "0.0.1" }
-`,
-	);
-}
-
-test("passes on the current tree", () => {
-	runGate();
-});
-
-test("fails when a discovered package drifts off 0.0.1", () => {
-	const root = mkdtempSync(join(tmpdir(), "secure-exec-fixed-versions-"));
-	try {
-		writeFixture(root, "0.3.4-rc.1");
-		const exitCode = gateExitCode(root);
-		if (exitCode !== 1) {
-			throw new Error(`expected gate to exit 1 on a drifted version, got ${exitCode}`);
-		}
-	} finally {
-		rmSync(root, { recursive: true, force: true });
-	}
-});
diff --git a/tsconfig.base.json b/tsconfig.base.json
index 86becd235..ac0b17c72 100644
--- a/tsconfig.base.json
+++ b/tsconfig.base.json
@@ -1,15 +1,10 @@
 {
 	"compilerOptions": {
-		"target": "esnext",
-		"module": "esnext",
+		"target": "ES2022",
+		"module": "NodeNext",
+		"moduleResolution": "NodeNext",
+		"declaration": true,
 		"strict": true,
-		"skipLibCheck": true,
-		"esModuleInterop": false,
-		"allowSyntheticDefaultImports": true,
-		"stripInternal": true,
-		"moduleResolution": "bundler",
-		"downlevelIteration": true,
-		"lib": ["ESNext"],
-		"types": ["node"]
+		"skipLibCheck": true
 	}
 }
diff --git a/website/astro.config.mjs b/website/astro.config.mjs
index 9e0ae3847..d23a32c5f 100644
--- a/website/astro.config.mjs
+++ b/website/astro.config.mjs
@@ -21,7 +21,7 @@ export default defineConfig({
 	integrations: [
 		// The shared Rivet docs framework (copied 1:1 from rivet.dev, no Starlight).
 		// docsTheme() provides react + mdx + the remark/rehype/Shiki pipeline +
-		// route generation + the virtual config. docs.config.mjs maps agentOS's
+		// route generation + the virtual config. docs.config.mjs maps this site's
 		// identity/nav/sitemap onto it.
 		...docsTheme(siteConfig),
 		tailwind({ applyBaseStyles: false }),
diff --git a/website/docs.config.mjs b/website/docs.config.mjs
index 9a0c34315..182862d4a 100644
--- a/website/docs.config.mjs
+++ b/website/docs.config.mjs
@@ -51,7 +51,7 @@ export const siteConfig = {
 	// Docs pages have no top-nav links (Documentation/Changelog live on the
 	// marketing page's own Navigation). The header keeps logo + search + CTA.
 	topNav: [],
-	// Single tab → the theme hides the secondary tab strip (only agentOS, with 2
+	// Single tab → the theme hides the secondary tab strip (sites with 2
 	// tabs, shows it). Kept here so the docs section context still resolves.
 	tabs: [{ label: "Documentation", href: "/docs", match: "/docs" }],
 	cta: { label: "Get Started", href: "/docs/quickstart" },
diff --git a/website/src/content/docs/docs/architecture.mdx b/website/src/content/docs/docs/architecture.mdx
index c006ba2b0..fa23b800d 100644
--- a/website/src/content/docs/docs/architecture.mdx
+++ b/website/src/content/docs/docs/architecture.mdx
@@ -1,6 +1,6 @@
 ---
 title: Architecture
-description: A short overview of the Secure Exec architecture, with a link to the canonical agentOS architecture docs.
+description: A short overview of the Secure Exec architecture.
 ---
 
 Secure Exec runs untrusted guest code inside a fully virtualized VM whose kernel services every guest syscall. At a glance:
@@ -12,8 +12,6 @@ Secure Exec runs untrusted guest code inside a fully virtualized VM whose kernel
 
 ## Full reference
 
-The canonical, in-depth architecture reference, including packages, crates, trust boundaries, and syscall paths, is owned by agentOS.
-
-<Card title="agentOS: Architecture" href="https://agentos-sdk.dev/docs/architecture">
-  The complete architecture reference, including components, trust boundary, and syscall paths.
-</Card>
+Secure Exec is maintained as a compatibility runtime surface. Its public
+architecture centers on the VM kernel, V8/WASM executors, and sidecar-mediated
+syscalls described above.
diff --git a/website/src/content/docs/docs/features/child-processes.mdx b/website/src/content/docs/docs/features/child-processes.mdx
index 429fa4f4a..94243e1cb 100644
--- a/website/src/content/docs/docs/features/child-processes.mdx
+++ b/website/src/content/docs/docs/features/child-processes.mdx
@@ -97,4 +97,4 @@ await server.wait();
 
 ## Underlying process model
 
-- The kernel process table, signals, and shell that back `node:child_process` and `rt.spawn` are documented in agentOS: [Processes & Shell](https://agentos-sdk.dev/docs/processes).
+- The kernel process table, signals, and shell that back `node:child_process` and `rt.spawn` are virtualized by Secure Exec.
diff --git a/website/src/content/docs/docs/features/filesystem.mdx b/website/src/content/docs/docs/features/filesystem.mdx
index 26c9d006b..08adf772c 100644
--- a/website/src/content/docs/docs/features/filesystem.mdx
+++ b/website/src/content/docs/docs/features/filesystem.mdx
@@ -1,6 +1,6 @@
 ---
 title: Filesystem
-description: A short overview of the Secure Exec filesystem, with a link to the canonical agentOS filesystem docs.
+description: A short overview of the Secure Exec filesystem.
 ---
 
 Each VM presents a normal POSIX filesystem to guest code, backed by a virtual filesystem inside the kernel. At a glance:
@@ -13,8 +13,5 @@ Each VM presents a normal POSIX filesystem to guest code, backed by a virtual fi
 
 ## Full reference
 
-The canonical filesystem API, including seeding files, host-boundary file exchange, and the full mount and backend configuration, is owned by agentOS.
-
-<Card title="agentOS: Filesystem" href="https://agentos-sdk.dev/docs/filesystem">
-  The complete filesystem API plus mount and backend configuration details.
-</Card>
+The filesystem API covers seeding files, exchanging files with the host, and
+mounting confined host-backed sources into the guest VM.
diff --git a/website/src/content/docs/docs/features/networking.mdx b/website/src/content/docs/docs/features/networking.mdx
index a9da68f91..edb1c5bc1 100644
--- a/website/src/content/docs/docs/features/networking.mdx
+++ b/website/src/content/docs/docs/features/networking.mdx
@@ -1,6 +1,6 @@
 ---
 title: Networking
-description: A short overview of Secure Exec networking, with a link to the canonical agentOS networking docs.
+description: A short overview of Secure Exec networking.
 ---
 
 Secure Exec virtualizes all VM networking so guest code never touches the real host network. At a glance:
@@ -12,8 +12,5 @@ Secure Exec virtualizes all VM networking so guest code never touches the real h
 
 ## Full reference
 
-The canonical networking API, permission rules, and egress details are owned by agentOS.
-
-<Card title="agentOS: Networking" href="https://agentos-sdk.dev/docs/networking">
-  The complete networking API, permission rules, and egress configuration.
-</Card>
+Networking stays VM-scoped unless the host explicitly allows egress or exposes a
+loopback port to the guest.
diff --git a/website/src/content/docs/docs/features/permissions.mdx b/website/src/content/docs/docs/features/permissions.mdx
index ceba18b8f..1ec486cea 100644
--- a/website/src/content/docs/docs/features/permissions.mdx
+++ b/website/src/content/docs/docs/features/permissions.mdx
@@ -1,6 +1,6 @@
 ---
 title: Permissions
-description: A short overview of Secure Exec permissions, with a link to the canonical agentOS permissions docs.
+description: A short overview of Secure Exec permissions.
 ---
 
 Secure Exec checks a per-domain permission policy against every guest syscall, so denied operations are rejected before any host resource is touched. At a glance:
@@ -13,8 +13,4 @@ Secure Exec checks a per-domain permission policy against every guest syscall, s
 
 ## Full reference
 
-The complete permission scopes, modes, and rule configuration are owned by agentOS.
-
-<Card title="agentOS: Permissions" href="https://agentos-sdk.dev/docs/permissions">
-  The complete permission scopes, modes, and rule configuration.
-</Card>
+Permissions are host-configured policy applied to untrusted guest behavior.
diff --git a/website/src/content/docs/docs/features/resource-limits.mdx b/website/src/content/docs/docs/features/resource-limits.mdx
index fb3b35e93..8b01b8fa7 100644
--- a/website/src/content/docs/docs/features/resource-limits.mdx
+++ b/website/src/content/docs/docs/features/resource-limits.mdx
@@ -261,12 +261,7 @@ CPU budgets therefore emit both the ~80% approach warning *and* a terminal exhau
 | Memory | `v8_heap_bytes`, `wasm_memory_bytes` |
 | CPU | `v8_cpu_time_ms`, `v8_wall_clock_ms`, `wasm_fuel_ms` |
 
-## Related agentOS docs
+## Related runtime docs
 
-agentOS layers its own session and adapter limits on top of Secure Exec.
-
-<CardGroup>
-  <Card title="agentOS: Resource Limits" href="https://agentos-sdk.dev/docs/resource-limits">
-    The complete set of per-VM resource limits, defaults, and configuration options.
-  </Card>
-</CardGroup>
+Secure Exec exposes per-VM resource limits, defaults, and configuration options
+for runtime consumers.
diff --git a/website/src/content/docs/docs/features/runtime-platform.mdx b/website/src/content/docs/docs/features/runtime-platform.mdx
index 8cbd0e8db..f82a3a3d8 100644
--- a/website/src/content/docs/docs/features/runtime-platform.mdx
+++ b/website/src/content/docs/docs/features/runtime-platform.mdx
@@ -24,7 +24,7 @@ Output, the guest host environment as seen from inside the isolate:
   hasBuffer: true,
   nodeVersion: '22.0.0',
   sha256: 'fa7ce60dac0cc1bfe7424a68e47ad3d712345cf936431bb147cd5f5de0371a4a',
-  joinedPath: '/home/agentos/report.txt'
+  joinedPath: '/home/secure-exec/report.txt'
 }
 ```
 
diff --git a/website/src/content/docs/docs/security-model.mdx b/website/src/content/docs/docs/security-model.mdx
index 6d22d5d4f..cb49bf665 100644
--- a/website/src/content/docs/docs/security-model.mdx
+++ b/website/src/content/docs/docs/security-model.mdx
@@ -1,6 +1,6 @@
 ---
 title: Security Model
-description: A short overview of Secure Exec isolation and trust, with a link to the canonical agentOS security model.
+description: A short overview of Secure Exec isolation and trust.
 ---
 
 Secure Exec runs guest code inside a fully virtualized VM so untrusted code stays contained. At a glance:
@@ -12,8 +12,5 @@ Secure Exec runs guest code inside a fully virtualized VM so untrusted code stay
 
 ## Full reference
 
-The canonical threat model, trust boundaries, and detailed enforcement guarantees are owned by agentOS.
-
-<Card title="agentOS: Security Model" href="https://agentos-sdk.dev/docs/security-model">
-  The complete trust model, threat model, and enforcement details.
-</Card>
+The runtime trust boundary is sidecar to executor: host configuration is trusted,
+while guest code and the packages it loads are untrusted.
diff --git a/website/src/generated/routes.json b/website/src/generated/routes.json
index 2ab2f0e65..2e62969bc 100644
--- a/website/src/generated/routes.json
+++ b/website/src/generated/routes.json
@@ -2,7 +2,7 @@
   "pages": {
     "/docs/docs/architecture": {
       "title": "Architecture",
-      "description": "A short overview of the Secure Exec architecture, with a link to the canonical agentOS architecture docs."
+      "description": "A short overview of the Secure Exec architecture."
     },
     "/docs/docs/benchmarks": {
       "title": "Benchmarks",
@@ -26,7 +26,7 @@
     },
     "/docs/docs/security-model": {
       "title": "Security Model",
-      "description": "A short overview of Secure Exec isolation and trust, with a link to the canonical agentOS security model."
+      "description": "A short overview of Secure Exec isolation and trust."
     },
     "/docs/docs/comparison/cloudflare-workers": {
       "title": "Secure Exec vs Cloudflare Workers",
@@ -58,7 +58,7 @@
     },
     "/docs/docs/features/filesystem": {
       "title": "Filesystem",
-      "description": "A short overview of the Secure Exec filesystem, with a link to the canonical agentOS filesystem docs."
+      "description": "A short overview of the Secure Exec filesystem."
     },
     "/docs/docs/features/module-loading": {
       "title": "NPM & Module Loading",
@@ -66,7 +66,7 @@
     },
     "/docs/docs/features/networking": {
       "title": "Networking",
-      "description": "A short overview of Secure Exec networking, with a link to the canonical agentOS networking docs."
+      "description": "A short overview of Secure Exec networking."
     },
     "/docs/docs/features/output-capture": {
       "title": "Output Capture",
@@ -74,7 +74,7 @@
     },
     "/docs/docs/features/permissions": {
       "title": "Permissions",
-      "description": "A short overview of Secure Exec permissions, with a link to the canonical agentOS permissions docs."
+      "description": "A short overview of Secure Exec permissions."
     },
     "/docs/docs/features/resident-runner": {
       "title": "Resident Runner",
@@ -117,4 +117,4 @@
       "description": "Run user-authored plugins in isolation with explicit permissions."
     }
   }
-}
\ No newline at end of file
+}